From 402779e8f9fa2b682a1b72f858df96a3ca1c094a Mon Sep 17 00:00:00 2001
From: lateautumn233 <lateautumn233@foxmail.com>
Date: Sat, 30 May 2026 16:43:13 +0800
Subject: [PATCH 001/182] feat(vm): add iptables-based port forwarding support

- Add applyForward/removeForward abstract methods to FirewallHelper
- Implement DNAT and forward rules in IptablesBackend with proper
  wildcard host IP handling
- Add insert() method to ChainInfo for ordered rule insertion
- Integrate VMPortForwarder lifecycle into VMInstance start/stop
- Add PortForwardListHandler for IPC port forward queries
- Add VMPortForwarder to manage configured port forwards
---
 .../daemon/ipc/vm/PortForwardListHandler.java |  37 +++
 .../network/backend/FirewallHelper.java       |  11 +
 .../network/backend/iptables/ChainInfo.java   |  12 +
 .../backend/iptables/IptablesBackend.java     |  72 +++++
 .../droidvm/daemon/vm/VMInstance.java         |  40 +++
 .../droidvm/daemon/vm/VMPortForwarder.java    | 301 ++++++++++++++++++
 6 files changed, 473 insertions(+)
 create mode 100644 app/src/main/java/cn/classfun/droidvm/daemon/ipc/vm/PortForwardListHandler.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/daemon/vm/VMPortForwarder.java

diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/ipc/vm/PortForwardListHandler.java b/app/src/main/java/cn/classfun/droidvm/daemon/ipc/vm/PortForwardListHandler.java
new file mode 100644
index 000000000..f07796df8
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/ipc/vm/PortForwardListHandler.java
@@ -0,0 +1,37 @@
+package cn.classfun.droidvm.daemon.ipc.vm;
+
+import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
+
+import androidx.annotation.NonNull;
+
+import com.google.auto.service.AutoService;
+
+import org.json.JSONObject;
+
+import cn.classfun.droidvm.daemon.server.ClientRequest;
+import cn.classfun.droidvm.daemon.server.RequestException;
+import cn.classfun.droidvm.daemon.server.RequestHandler;
+
+@AutoService(RequestHandler.class)
+public final class PortForwardListHandler extends RequestHandler {
+    @NonNull
+    @Override
+    public String getName() {
+        return "vm_port_forward_list";
+    }
+
+    @Override
+    public void handle(@NonNull ClientRequest request) throws Exception {
+        var params = request.getParams();
+        var id = params.optString("vm_id", "");
+        if (id.isEmpty())
+            throw new RequestException("missing vm_id");
+        var vm = request.getContext().getVMs().findById(id);
+        if (vm == null)
+            throw new RequestException(fmt("VM %s not found", id));
+        var data = new JSONObject();
+        data.put("configured", vm.getConfiguredPortForwards());
+        data.put("active", vm.getActivePortForwards());
+        request.res().put("data", data);
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/FirewallHelper.java b/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/FirewallHelper.java
index 81433bd7e..dd2cbad82 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/FirewallHelper.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/FirewallHelper.java
@@ -1,5 +1,8 @@
 package cn.classfun.droidvm.daemon.network.backend;
 
+import androidx.annotation.NonNull;
+import androidx.annotation.Nullable;
+
 import cn.classfun.droidvm.daemon.network.NetworkInstance;
 
 @SuppressWarnings({"BooleanMethodIsAlwaysInverted", "unused", "UnusedReturnValue"})
@@ -12,4 +15,12 @@ public abstract class FirewallHelper {
     public abstract void initNetwork(NetworkInstance inst);
 
     public abstract void deinitNetwork(NetworkInstance inst);
+
+    public abstract boolean applyForward(
+        @NonNull String bridge, @NonNull String guestIp, @NonNull String protocol,
+        @Nullable String hostIp, int hostPort, int guestPort);
+
+    public abstract boolean removeForward(
+        @NonNull String bridge, @NonNull String guestIp, @NonNull String protocol,
+        @Nullable String hostIp, int hostPort, int guestPort);
 }
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/iptables/ChainInfo.java b/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/iptables/ChainInfo.java
index 9e1d3c9ce..239eaa33a 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/iptables/ChainInfo.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/iptables/ChainInfo.java
@@ -57,6 +57,18 @@ public boolean append(@NonNull String... args) {
         return backend.iptables(cmd.toArray(new String[0]));
     }
 
+    public boolean insert(@NonNull String... args) {
+        var cmd = new ArrayList<String>();
+        cmd.add("iptables");
+        cmd.add("-t");
+        cmd.add(table);
+        cmd.add("-I");
+        cmd.add(chain);
+        cmd.add("1");
+        cmd.addAll(Arrays.asList(args));
+        return backend.iptables(cmd.toArray(new String[0]));
+    }
+
     @SuppressWarnings("unused")
     public boolean delete(@NonNull String... args) {
         var cmd = new ArrayList<String>();
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/iptables/IptablesBackend.java b/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/iptables/IptablesBackend.java
index c526aa7df..447c5f66f 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/iptables/IptablesBackend.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/iptables/IptablesBackend.java
@@ -1,8 +1,11 @@
 package cn.classfun.droidvm.daemon.network.backend.iptables;
 
+import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
+
 import android.util.Log;
 
 import androidx.annotation.NonNull;
+import androidx.annotation.Nullable;
 
 import java.util.ArrayList;
 import java.util.Arrays;
@@ -108,6 +111,75 @@ public void deinitNetwork(NetworkInstance inst) {
         net.deinit();
     }
 
+    @Override
+    public boolean applyForward(
+        @NonNull String bridge, @NonNull String guestIp, @NonNull String protocol,
+        @Nullable String hostIp, int hostPort, int guestPort
+    ) {
+        var pre = new ChainInfo(this, "nat", null, fmt("droidvm_pre_%s", bridge));
+        var fwd = new ChainInfo(this, "filter", null, fmt("droidvm_fwd_%s", bridge));
+        boolean ok = pre.append(dnatSpec(protocol, hostIp, hostPort, guestIp, guestPort));
+        ok &= fwd.insert(fwdSpec(bridge, guestIp, protocol, guestPort));
+        Log.i(TAG, fmt("Apply forward %s %s:%d -> %s:%d on %s (ok=%b)",
+            protocol, isSpecificHost(hostIp) ? hostIp : "*",
+            hostPort, guestIp, guestPort, bridge, ok));
+        return ok;
+    }
+
+    @Override
+    public boolean removeForward(
+        @NonNull String bridge, @NonNull String guestIp, @NonNull String protocol,
+        @Nullable String hostIp, int hostPort, int guestPort
+    ) {
+        var pre = new ChainInfo(this, "nat", null, fmt("droidvm_pre_%s", bridge));
+        var fwd = new ChainInfo(this, "filter", null, fmt("droidvm_fwd_%s", bridge));
+        boolean ok = pre.delete(dnatSpec(protocol, hostIp, hostPort, guestIp, guestPort));
+        ok &= fwd.delete(fwdSpec(bridge, guestIp, protocol, guestPort));
+        Log.i(TAG, fmt("Remove forward %s %s:%d -> %s:%d on %s (ok=%b)",
+            protocol, isSpecificHost(hostIp) ? hostIp : "*",
+            hostPort, guestIp, guestPort, bridge, ok));
+        return ok;
+    }
+
+    @NonNull
+    private static String[] dnatSpec(
+        @NonNull String protocol, @Nullable String hostIp, int hostPort,
+        @NonNull String guestIp, int guestPort
+    ) {
+        var spec = new ArrayList<String>();
+        spec.add("-p");
+        spec.add(protocol);
+        if (isSpecificHost(hostIp)) {
+            spec.add("-d");
+            spec.add(hostIp);
+        }
+        spec.add("--dport");
+        spec.add(String.valueOf(hostPort));
+        spec.add("-j");
+        spec.add("DNAT");
+        spec.add("--to-destination");
+        spec.add(fmt("%s:%d", guestIp, guestPort));
+        return spec.toArray(new String[0]);
+    }
+
+    @NonNull
+    private static String[] fwdSpec(
+        @NonNull String bridge, @NonNull String guestIp,
+        @NonNull String protocol, int guestPort
+    ) {
+        return new String[]{
+            "-o", bridge, "-d", guestIp, "-p", protocol,
+            "--dport", String.valueOf(guestPort), "-j", "ACCEPT"
+        };
+    }
+
+    /** A wildcard host_ip (empty / 0.0.0.0[/0] / ::[/0]) must omit -d, or the DNAT never matches. */
+    private static boolean isSpecificHost(@Nullable String hostIp) {
+        return hostIp != null && !hostIp.isEmpty()
+            && !hostIp.equals("0.0.0.0") && !hostIp.equals("0.0.0.0/0")
+            && !hostIp.equals("::") && !hostIp.equals("::/0");
+    }
+
     private boolean enableIpForward() {
         Log.i(TAG, "Enabling IPv4 forwarding");
         var result = RunUtils.run("echo 1 > /proc/sys/net/ipv4/ip_forward");
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/vm/VMInstance.java b/app/src/main/java/cn/classfun/droidvm/daemon/vm/VMInstance.java
index e73033e61..c5e62e0b5 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/vm/VMInstance.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/vm/VMInstance.java
@@ -42,6 +42,7 @@ public final class VMInstance extends VMConfig {
     private BackendBase backend;
     private VMBackendInstance backendInstance;
     private Thread workerThread;
+    private VMPortForwarder portForwarder;
     private final VMInstanceStore store;
 
     public interface VMEventCallback {
@@ -321,6 +322,7 @@ private void runVM() {
                 startReaderThread(vmId, stream);
         }
         setState(VMState.RUNNING);
+        startPortForwarding();
         int code = process.waitFor();
         for (var stream : inst.streams.values()) {
             var reader = stream.getReaderThread();
@@ -345,6 +347,7 @@ private void runVM() {
         } else {
             Log.i(TAG, fmt("VM %s exited with code %d", getName(), code));
         }
+        stopPortForwarding();
         cleanupTap();
         inst.cleanup();
         setState(VMState.STOPPED);
@@ -364,6 +367,43 @@ private void cleanupTap() {
         }
     }
 
+    private void startPortForwarding() {
+        try {
+            portForwarder = new VMPortForwarder(this, store.networkStore);
+            portForwarder.start();
+        } catch (Exception e) {
+            Log.w(TAG, fmt("Failed to start port forwarding for VM %s", getName()), e);
+        }
+    }
+
+    private void stopPortForwarding() {
+        if (portForwarder == null) return;
+        try {
+            portForwarder.stop();
+        } catch (Exception e) {
+            Log.w(TAG, fmt("Failed to stop port forwarding for VM %s", getName()), e);
+        }
+        portForwarder = null;
+    }
+
+    @NonNull
+    public JSONArray getConfiguredPortForwards() throws JSONException {
+        var arr = new JSONArray();
+        var pf = item.opt("port_forwards", null);
+        if (pf != null && pf.is(DataItem.Type.ARRAY))
+            for (var iter : pf) {
+                var r = iter.getValue();
+                if (r.is(DataItem.Type.OBJECT)) arr.put(r.toJson());
+            }
+        return arr;
+    }
+
+    @NonNull
+    public JSONArray getActivePortForwards() {
+        var pf = portForwarder;
+        return pf != null ? pf.snapshotApplied() : new JSONArray();
+    }
+
     private void startReaderThread(@NonNull String vmId, @NonNull ConsoleStream stream) {
         var streamName = stream.getName();
         if (!stream.isReadable()) return;
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/vm/VMPortForwarder.java b/app/src/main/java/cn/classfun/droidvm/daemon/vm/VMPortForwarder.java
new file mode 100644
index 000000000..0504523ff
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/vm/VMPortForwarder.java
@@ -0,0 +1,301 @@
+package cn.classfun.droidvm.daemon.vm;
+
+import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
+import static cn.classfun.droidvm.lib.utils.ThreadUtils.threadSleep;
+
+import android.util.Log;
+
+import androidx.annotation.NonNull;
+import androidx.annotation.Nullable;
+
+import org.json.JSONArray;
+import org.json.JSONException;
+import org.json.JSONObject;
+
+import java.util.ArrayList;
+import java.util.HashSet;
+import java.util.List;
+import java.util.Locale;
+
+import cn.classfun.droidvm.daemon.network.NetworkInstance;
+import cn.classfun.droidvm.daemon.network.NetworkInstanceStore;
+import cn.classfun.droidvm.lib.store.base.DataItem;
+import cn.classfun.droidvm.lib.store.vm.VMState;
+
+/**
+ * 管理单个 VM 的端口转发（host -> guest）iptables DNAT 规则。
+ * VM 进入 RUNNING 后启动：轮询 DHCP 租约/邻居表，按网卡 MAC 解析 guest IP，
+ * 然后下发规则；VM 退出时撤销全部已下发的规则。
+ *
+ * <p>规则来源于 VM 配置的 {@code port_forwards} 数组，每项字段：
+ * <ul>
+ *   <li>{@code protocol}: tcp | udp（默认 tcp）</li>
+ *   <li>{@code host_port}: 宿主机监听端口（必填）</li>
+ *   <li>{@code guest_port}: guest 目标端口（默认与 host_port 相同）</li>
+ *   <li>{@code host_ip}: 可选，仅转发发往该宿主地址的流量；留空=全部</li>
+ *   <li>{@code network_id}: 可选，多网卡时指定走哪个网卡；留空=首个网卡</li>
+ *   <li>{@code guest_ip}: 可选，手动指定 guest IP，跳过自动发现</li>
+ *   <li>{@code enabled}: 可选，默认 true</li>
+ * </ul>
+ */
+final class VMPortForwarder {
+    private static final String TAG = "VMPortForwarder";
+    private static final int RESOLVE_MAX_ATTEMPTS = 30;
+    private static final long RESOLVE_INTERVAL_MS = 1000L;
+
+    private final VMInstance vm;
+    private final NetworkInstanceStore networkStore;
+    private final List<Applied> applied = new ArrayList<>();
+    private volatile boolean running = false;
+    private Thread thread;
+
+    VMPortForwarder(@NonNull VMInstance vm, @Nullable NetworkInstanceStore networkStore) {
+        this.vm = vm;
+        this.networkStore = networkStore;
+    }
+
+    boolean hasRules() {
+        var pf = vm.item.opt("port_forwards", null);
+        return pf != null && !pf.isEmpty();
+    }
+
+    synchronized void start() {
+        if (running) return;
+        if (!hasRules()) return;
+        if (networkStore == null) {
+            Log.w(TAG, fmt("VM %s has port forwards but no network store", vm.getName()));
+            return;
+        }
+        running = true;
+        thread = new Thread(this::loop, fmt("PF-%s", vm.getId()));
+        thread.setDaemon(true);
+        thread.start();
+    }
+
+    synchronized void stop() {
+        running = false;
+        var t = thread;
+        if (t != null) {
+            t.interrupt();
+            thread = null;
+        }
+        removeAll();
+    }
+
+    @NonNull
+    JSONArray snapshotApplied() {
+        var arr = new JSONArray();
+        synchronized (applied) {
+            for (var a : applied) {
+                try {
+                    var o = new JSONObject();
+                    o.put("protocol", a.protocol);
+                    o.put("host_ip", a.hostIp == null ? "" : a.hostIp);
+                    o.put("host_port", a.hostPort);
+                    o.put("guest_ip", a.guestIp);
+                    o.put("guest_port", a.guestPort);
+                    arr.put(o);
+                } catch (JSONException ignored) {
+                }
+            }
+        }
+        return arr;
+    }
+
+    private void loop() {
+        var rules = parseRules();
+        if (rules.isEmpty()) return;
+        int attempts = 0;
+        while (running && vm.getState() == VMState.RUNNING) {
+            boolean allDone = true;
+            for (var rule : rules) {
+                if (rule.done) continue;
+                if (!running) return;
+                var target = resolveTarget(rule);
+                if (target == null) {
+                    allDone = false;
+                    continue;
+                }
+                boolean ok = networkStore.firewall.applyForward(
+                    target.bridge, target.ip, rule.protocol,
+                    rule.hostIp, rule.hostPort, rule.guestPort);
+                rule.done = true;
+                if (!ok) {
+                    Log.w(TAG, fmt("VM %s: failed to apply forward %s :%d -> %s:%d",
+                        vm.getName(), rule.protocol, rule.hostPort, target.ip, rule.guestPort));
+                    continue;
+                }
+                // 与 stop()/removeAll() 通过 applied 锁互斥，避免 stop 后仍残留规则
+                synchronized (applied) {
+                    if (!running) {
+                        networkStore.firewall.removeForward(
+                            target.bridge, target.ip, rule.protocol,
+                            rule.hostIp, rule.hostPort, rule.guestPort);
+                    } else {
+                        applied.add(new Applied(target.bridge, target.ip, rule.protocol,
+                            rule.hostIp, rule.hostPort, rule.guestPort));
+                        Log.i(TAG, fmt("VM %s: forward %s :%d -> %s:%d",
+                            vm.getName(), rule.protocol, rule.hostPort, target.ip, rule.guestPort));
+                    }
+                }
+            }
+            if (allDone) break;
+            if (++attempts >= RESOLVE_MAX_ATTEMPTS) {
+                Log.w(TAG, fmt("VM %s: gave up resolving guest IP for some port forwards after %d attempts",
+                    vm.getName(), attempts));
+                break;
+            }
+            threadSleep(RESOLVE_INTERVAL_MS);
+        }
+    }
+
+    private void removeAll() {
+        synchronized (applied) {
+            if (networkStore != null)
+                for (var a : applied)
+                    networkStore.firewall.removeForward(
+                        a.bridge, a.guestIp, a.protocol, a.hostIp, a.hostPort, a.guestPort);
+            applied.clear();
+        }
+    }
+
+    @NonNull
+    private List<Rule> parseRules() {
+        var list = new ArrayList<Rule>();
+        var pf = vm.item.opt("port_forwards", null);
+        if (pf == null || !pf.is(DataItem.Type.ARRAY)) return list;
+        var seen = new HashSet<String>();
+        for (var iter : pf) {
+            var r = iter.getValue();
+            if (!r.is(DataItem.Type.OBJECT)) continue;
+            if (!r.optBoolean("enabled", true)) continue;
+            var protocol = r.optString("protocol", "tcp");
+            if (protocol == null || protocol.isEmpty()) protocol = "tcp";
+            protocol = protocol.toLowerCase(Locale.ROOT);
+            if (!protocol.equals("tcp") && !protocol.equals("udp")) continue;
+            long hostPort = r.optLong("host_port", 0);
+            if (hostPort <= 0 || hostPort > 65535) continue;
+            long guestPort = r.optLong("guest_port", 0);
+            if (guestPort <= 0 || guestPort > 65535) guestPort = hostPort;
+            var hostIp = r.optString("host_ip", "");
+            if (hostIp == null) hostIp = "";
+            // 同一 VM 内按 (protocol, host_ip, host_port) 去重，避免重复 DNAT
+            var key = fmt("%s|%s|%d", protocol, hostIp, hostPort);
+            if (!seen.add(key)) {
+                Log.w(TAG, fmt("VM %s: duplicate port forward %s, skipping", vm.getName(), key));
+                continue;
+            }
+            var rule = new Rule();
+            rule.protocol = protocol;
+            rule.hostIp = hostIp;
+            rule.hostPort = (int) hostPort;
+            rule.guestPort = (int) guestPort;
+            rule.networkId = r.optString("network_id", "");
+            rule.fixedGuestIp = r.optString("guest_ip", "");
+            list.add(rule);
+        }
+        return list;
+    }
+
+    @Nullable
+    private Target resolveTarget(@NonNull Rule rule) {
+        var net = findNetwork(rule.networkId);
+        if (net == null) return null;
+        var netId = net.optString("network_id", "");
+        if (netId == null || netId.isEmpty()) return null;
+        var netInst = networkStore.findById(netId);
+        if (netInst == null) return null;
+        var bridge = netInst.item.optString("bridge_name", "");
+        if (bridge == null || bridge.isEmpty()) return null;
+        if (rule.fixedGuestIp != null && !rule.fixedGuestIp.isEmpty())
+            return new Target(bridge, rule.fixedGuestIp);
+        var mac = net.optString("mac_address", "");
+        if (mac == null || mac.isEmpty()) return null;
+        var ip = resolveGuestIpByMac(netInst, bridge, mac);
+        if (ip == null) return null;
+        return new Target(bridge, ip);
+    }
+
+    @Nullable
+    private String resolveGuestIpByMac(
+        @NonNull NetworkInstance netInst, @NonNull String bridge, @NonNull String mac) {
+        var macLower = mac.toLowerCase(Locale.ROOT);
+        // 1. 优先用 dnsmasq DHCP 租约
+        var ip = matchMac(networkStore.backend.listDhcpLeases(bridge), macLower, "ip", "mac");
+        if (ip != null) return ip;
+        // 2. 回退到 ARP 邻居表（适用于静态 IP 且已通信过的 guest）
+        return matchMac(netInst.listNeighbors(), macLower, "dst", "lladdr");
+    }
+
+    @Nullable
+    private static String matchMac(
+        @Nullable JSONArray arr, @NonNull String macLower,
+        @NonNull String ipKey, @NonNull String macKey) {
+        if (arr == null) return null;
+        for (int i = 0; i < arr.length(); i++) {
+            var o = arr.optJSONObject(i);
+            if (o == null) continue;
+            var m = o.optString(macKey, "");
+            if (!m.isEmpty() && m.toLowerCase(Locale.ROOT).equals(macLower)) {
+                var ip = o.optString(ipKey, "");
+                if (!ip.isEmpty()) return ip;
+            }
+        }
+        return null;
+    }
+
+    @Nullable
+    private DataItem findNetwork(@Nullable String networkId) {
+        var nets = vm.item.opt("networks", null);
+        if (nets == null || !nets.is(DataItem.Type.ARRAY)) return null;
+        DataItem first = null;
+        for (var iter : nets) {
+            var net = iter.getValue();
+            var nid = net.optString("network_id", "");
+            if (nid == null || nid.isEmpty()) continue;
+            if (first == null) first = net;
+            if (networkId == null || networkId.isEmpty()) return net;
+            if (networkId.equals(nid)) return net;
+        }
+        return first;
+    }
+
+    private static final class Applied {
+        final String bridge;
+        final String guestIp;
+        final String protocol;
+        final String hostIp;
+        final int hostPort;
+        final int guestPort;
+
+        Applied(String bridge, String guestIp, String protocol,
+                String hostIp, int hostPort, int guestPort) {
+            this.bridge = bridge;
+            this.guestIp = guestIp;
+            this.protocol = protocol;
+            this.hostIp = hostIp;
+            this.hostPort = hostPort;
+            this.guestPort = guestPort;
+        }
+    }
+
+    private static final class Rule {
+        String protocol;
+        String hostIp;
+        int hostPort;
+        int guestPort;
+        String networkId;
+        String fixedGuestIp;
+        boolean done = false;
+    }
+
+    private static final class Target {
+        final String bridge;
+        final String ip;
+
+        Target(String bridge, String ip) {
+            this.bridge = bridge;
+            this.ip = ip;
+        }
+    }
+}

From dd94627058d0b4896265e23f350100361ffa65ee Mon Sep 17 00:00:00 2001
From: lateautumn233 <lateautumn233@foxmail.com>
Date: Sun, 31 May 2026 03:47:20 +0800
Subject: [PATCH 002/182] feat(vm): add comprehensive port forwarding UI and
 management

- Add PortForwardSetHandler for IPC communication
- Implement VMEditPortForwardTab for editing port forwards
- Add PortForwardEditAdapter and ViewHolder for RecyclerView
- Enhance VMInfoActivity to display active port forwards
- Create PortProtocol enum for TCP/UDP support
- Add UI layouts for port forward editing and display
- Add localized strings for port forwarding features

This commit introduces a complete port forwarding management
system with both edit-time configuration and runtime display.
---
 .../daemon/ipc/vm/PortForwardSetHandler.java  |  41 ++++
 .../droidvm/daemon/vm/VMInstance.java         |  11 +
 .../droidvm/daemon/vm/VMPortForwarder.java    |  84 +++++++
 .../droidvm/lib/store/vm/PortProtocol.java    |  16 ++
 .../droidvm/ui/vm/edit/base/VMEditTab.java    |   6 +
 .../portforward/PortForwardEditAdapter.java   | 174 +++++++++++++++
 .../PortForwardEditViewHolder.java            |  66 ++++++
 .../portforward/VMEditPortForwardTab.java     |  66 ++++++
 .../droidvm/ui/vm/info/VMInfoActivity.java    | 134 +++++++++++
 app/src/main/res/layout/activity_vm_edit.xml  |   7 +
 app/src/main/res/layout/activity_vm_info.xml  |  39 ++++
 .../res/layout/dialog_port_forward_edit.xml   |  16 ++
 .../res/layout/item_port_forward_active.xml   |  29 +++
 .../res/layout/item_port_forward_edit.xml     | 210 ++++++++++++++++++
 .../layout/partial_vm_edit_port_forward.xml   |  22 ++
 app/src/main/res/values-zh-rCN/strings.xml    |  20 ++
 app/src/main/res/values/strings.xml           |  20 ++
 17 files changed, 961 insertions(+)
 create mode 100644 app/src/main/java/cn/classfun/droidvm/daemon/ipc/vm/PortForwardSetHandler.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/lib/store/vm/PortProtocol.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/ui/vm/edit/portforward/PortForwardEditAdapter.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/ui/vm/edit/portforward/PortForwardEditViewHolder.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/ui/vm/edit/portforward/VMEditPortForwardTab.java
 create mode 100644 app/src/main/res/layout/dialog_port_forward_edit.xml
 create mode 100644 app/src/main/res/layout/item_port_forward_active.xml
 create mode 100644 app/src/main/res/layout/item_port_forward_edit.xml
 create mode 100644 app/src/main/res/layout/partial_vm_edit_port_forward.xml

diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/ipc/vm/PortForwardSetHandler.java b/app/src/main/java/cn/classfun/droidvm/daemon/ipc/vm/PortForwardSetHandler.java
new file mode 100644
index 000000000..1a57f2119
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/ipc/vm/PortForwardSetHandler.java
@@ -0,0 +1,41 @@
+package cn.classfun.droidvm.daemon.ipc.vm;
+
+import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
+
+import androidx.annotation.NonNull;
+
+import com.google.auto.service.AutoService;
+
+import org.json.JSONArray;
+import org.json.JSONObject;
+
+import cn.classfun.droidvm.daemon.server.ClientRequest;
+import cn.classfun.droidvm.daemon.server.RequestException;
+import cn.classfun.droidvm.daemon.server.RequestHandler;
+
+/** IPC: hot-applies {@code rules} to a running VM ({@code vm_id}); the frontend owns persistence. */
+@AutoService(RequestHandler.class)
+public final class PortForwardSetHandler extends RequestHandler {
+    @NonNull
+    @Override
+    public String getName() {
+        return "vm_port_forward_set";
+    }
+
+    @Override
+    public void handle(@NonNull ClientRequest request) throws Exception {
+        var params = request.getParams();
+        var id = params.optString("vm_id", "");
+        if (id.isEmpty())
+            throw new RequestException("missing vm_id");
+        var vm = request.getContext().getVMs().findById(id);
+        if (vm == null)
+            throw new RequestException(fmt("VM %s not found", id));
+        var rules = params.optJSONArray("rules");
+        if (rules == null) rules = new JSONArray();
+        vm.applyPortForwards(rules);
+        var data = new JSONObject();
+        data.put("active", vm.getActivePortForwards());
+        request.res().put("data", data);
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/vm/VMInstance.java b/app/src/main/java/cn/classfun/droidvm/daemon/vm/VMInstance.java
index c5e62e0b5..374a86cab 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/vm/VMInstance.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/vm/VMInstance.java
@@ -404,6 +404,17 @@ public JSONArray getActivePortForwards() {
         return pf != null ? pf.snapshotApplied() : new JSONArray();
     }
 
+    /**
+     * 运行时热更新端口转发规则：更新内存配置后即时同步到 iptables（增删 DNAT 规则）。
+     * 仅作用于 daemon 运行态；配置的持久化由前端负责（写入共享的 vms.json），
+     * 下次启动时前端会通过 vm_modify 重新下发完整配置。
+     */
+    public void applyPortForwards(@NonNull JSONArray rules) {
+        item.set("port_forwards", rules);
+        var pf = portForwarder;
+        if (pf != null) pf.sync();
+    }
+
     private void startReaderThread(@NonNull String vmId, @NonNull ConsoleStream stream) {
         var streamName = stream.getName();
         if (!stream.isReadable()) return;
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/vm/VMPortForwarder.java b/app/src/main/java/cn/classfun/droidvm/daemon/vm/VMPortForwarder.java
index 0504523ff..8fcace647 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/vm/VMPortForwarder.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/vm/VMPortForwarder.java
@@ -102,6 +102,90 @@ JSONArray snapshotApplied() {
         return arr;
     }
 
+    /**
+     * 运行时热同步当前配置：
+     * <ul>
+     *   <li>已在转发（VM 启动时已有规则）→ {@link #reapply()} 做增量 diff；</li>
+     *   <li>此前因无规则未启动 → {@link #start()} 按新配置启动轮询应用。</li>
+     * </ul>
+     * 供 {@link VMInstance#applyPortForwards} 在运行时改规则后调用。
+     */
+    synchronized void sync() {
+        if (running) reapply();
+        else start();
+    }
+
+    /**
+     * 运行时热更新：基于 VM 当前 {@code port_forwards} 配置对已应用规则做增量 diff——
+     * 移除不再需要的、应用新增的。仅在 VM 运行（已 {@link #start()}）时有效。
+     * 新增规则要求 guest IP 当前可解析（运行中 VM 一般已联网，故可解析）。
+     */
+    private synchronized void reapply() {
+        if (!running || networkStore == null) return;
+        var rules = parseRules();
+        // 锁外解析目标，避免持 applied 锁期间做 DHCP/邻居表查询
+        var desired = new ArrayList<Applied>();
+        for (var rule : rules) {
+            var target = resolveTarget(rule);
+            if (target == null) {
+                Log.w(TAG, fmt("VM %s: reapply skipped unresolved %s :%d (guest IP not ready)",
+                    vm.getName(), rule.protocol, rule.hostPort));
+                continue;
+            }
+            desired.add(new Applied(target.bridge, target.ip, rule.protocol,
+                rule.hostIp, rule.hostPort, rule.guestPort));
+        }
+        synchronized (applied) {
+            applied.removeIf(a -> {
+                boolean keep = false;
+                for (var d : desired)
+                    if (sameForward(a, d)) {
+                        keep = true;
+                        break;
+                    }
+                if (!keep) {
+                    networkStore.firewall.removeForward(
+                        a.bridge, a.guestIp, a.protocol, a.hostIp, a.hostPort, a.guestPort);
+                    Log.i(TAG, fmt("VM %s: reapply removed %s :%d -> %s:%d",
+                        vm.getName(), a.protocol, a.hostPort, a.guestIp, a.guestPort));
+                }
+                return !keep;
+            });
+            for (var d : desired) {
+                boolean exists = false;
+                for (var a : applied)
+                    if (sameForward(a, d)) {
+                        exists = true;
+                        break;
+                    }
+                if (exists) continue;
+                boolean ok = networkStore.firewall.applyForward(
+                    d.bridge, d.guestIp, d.protocol, d.hostIp, d.hostPort, d.guestPort);
+                if (ok) {
+                    applied.add(d);
+                    Log.i(TAG, fmt("VM %s: reapply added %s :%d -> %s:%d",
+                        vm.getName(), d.protocol, d.hostPort, d.guestIp, d.guestPort));
+                } else {
+                    Log.w(TAG, fmt("VM %s: reapply failed to apply %s :%d",
+                        vm.getName(), d.protocol, d.hostPort));
+                }
+            }
+        }
+    }
+
+    private static boolean sameForward(@NonNull Applied a, @NonNull Applied b) {
+        return a.protocol.equals(b.protocol)
+            && a.hostPort == b.hostPort
+            && a.guestPort == b.guestPort
+            && eq(a.hostIp, b.hostIp)
+            && eq(a.guestIp, b.guestIp)
+            && eq(a.bridge, b.bridge);
+    }
+
+    private static boolean eq(@Nullable String a, @Nullable String b) {
+        return a == null ? b == null : a.equals(b);
+    }
+
     private void loop() {
         var rules = parseRules();
         if (rules.isEmpty()) return;
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/store/vm/PortProtocol.java b/app/src/main/java/cn/classfun/droidvm/lib/store/vm/PortProtocol.java
new file mode 100644
index 000000000..edca416f7
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/lib/store/vm/PortProtocol.java
@@ -0,0 +1,16 @@
+package cn.classfun.droidvm.lib.store.vm;
+
+import androidx.annotation.NonNull;
+
+import cn.classfun.droidvm.lib.store.enums.StringEnum;
+
+public enum PortProtocol implements StringEnum {
+    TCP,
+    UDP;
+
+    @NonNull
+    @Override
+    public String getString() {
+        return name();
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/base/VMEditTab.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/base/VMEditTab.java
index 93a936821..ffe193a83 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/base/VMEditTab.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/base/VMEditTab.java
@@ -17,6 +17,7 @@
 import cn.classfun.droidvm.ui.vm.edit.boot.VMEditBootTab;
 import cn.classfun.droidvm.ui.vm.edit.graphics.VMEditGraphicsTab;
 import cn.classfun.droidvm.ui.vm.edit.network.VMEditNetworkTab;
+import cn.classfun.droidvm.ui.vm.edit.portforward.VMEditPortForwardTab;
 import cn.classfun.droidvm.ui.vm.edit.storage.VMEditStorageTab;
 
 public enum VMEditTab implements StringEnum {
@@ -40,6 +41,11 @@ public enum VMEditTab implements StringEnum {
         R.id.tab_content_network,
         VMEditNetworkTab.class
     ),
+    TAB_PORT_FORWARD(
+        R.string.create_vm_tab_port_forward,
+        R.id.tab_content_port_forward,
+        VMEditPortForwardTab.class
+    ),
     TAB_GRAPHICS(
         R.string.create_vm_tab_graphics,
         R.id.tab_content_graphics,
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/portforward/PortForwardEditAdapter.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/portforward/PortForwardEditAdapter.java
new file mode 100644
index 000000000..beae8a645
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/portforward/PortForwardEditAdapter.java
@@ -0,0 +1,174 @@
+package cn.classfun.droidvm.ui.vm.edit.portforward;
+
+import android.content.Context;
+import android.content.DialogInterface;
+import android.view.View;
+
+import androidx.annotation.NonNull;
+import androidx.recyclerview.widget.RecyclerView;
+
+import com.google.android.material.button.MaterialButton;
+import com.google.android.material.dialog.MaterialAlertDialogBuilder;
+
+import java.util.ArrayList;
+
+import cn.classfun.droidvm.R;
+import cn.classfun.droidvm.lib.store.base.DataItem;
+import cn.classfun.droidvm.lib.store.enums.Enums;
+import cn.classfun.droidvm.lib.store.network.NetworkStore;
+import cn.classfun.droidvm.lib.store.vm.PortProtocol;
+import cn.classfun.droidvm.lib.ui.SimpleTextWatcher;
+import cn.classfun.droidvm.ui.widgets.container.CardItemAdapter;
+
+public final class PortForwardEditAdapter extends CardItemAdapter<PortForwardEditViewHolder> {
+    public PortForwardEditAdapter(@NonNull Context context) {
+        super(context);
+    }
+
+    @NonNull
+    @Override
+    protected PortForwardEditViewHolder createViewHolderInstance(@NonNull View view) {
+        return new PortForwardEditViewHolder(view);
+    }
+
+    @Override
+    protected int getLayoutRes() {
+        return R.layout.item_port_forward_edit;
+    }
+
+    @Override
+    public void onBindViewHolder(@NonNull PortForwardEditViewHolder holder, int position) {
+        var item = items.get(position);
+        holder.unbindWatchers();
+
+        holder.btnProtocol.configure(
+            PortProtocol.class, Enums.optEnum(item, "protocol", PortProtocol.TCP));
+        holder.btnProtocol.setOnValueChangedListener((oldVal, newVal) -> {
+            int pos = holder.getBindingAdapterPosition();
+            if (pos != RecyclerView.NO_POSITION)
+                items.get(pos).set("protocol", newVal);
+        });
+
+        long hostPort = item.optLong("host_port", 0);
+        holder.etHostPort.setText(hostPort > 0 ? String.valueOf(hostPort) : "");
+        holder.hostPortWatcher = SimpleTextWatcher.simpleAfterTextWatcher(s -> {
+            int pos = holder.getBindingAdapterPosition();
+            if (pos != RecyclerView.NO_POSITION)
+                setPort(items.get(pos), "host_port", s.toString());
+        });
+        holder.etHostPort.addTextChangedListener(holder.hostPortWatcher);
+
+        // Guest port (empty = same as host port, backend falls back)
+        long guestPort = item.optLong("guest_port", 0);
+        holder.etGuestPort.setText(guestPort > 0 ? String.valueOf(guestPort) : "");
+        holder.guestPortWatcher = SimpleTextWatcher.simpleAfterTextWatcher(s -> {
+            int pos = holder.getBindingAdapterPosition();
+            if (pos != RecyclerView.NO_POSITION)
+                setPort(items.get(pos), "guest_port", s.toString());
+        });
+        holder.etGuestPort.addTextChangedListener(holder.guestPortWatcher);
+
+        holder.switchEnabled.setOnCheckedChangeListener(null);
+        holder.switchEnabled.setChecked(item.optBoolean("enabled", true));
+        holder.switchEnabled.setOnCheckedChangeListener((btn, checked) -> {
+            int pos = holder.getBindingAdapterPosition();
+            if (pos != RecyclerView.NO_POSITION)
+                items.get(pos).set("enabled", checked);
+        });
+
+        holder.etHostIp.setText(item.optString("host_ip", ""));
+        holder.hostIpWatcher = SimpleTextWatcher.simpleAfterTextWatcher(s -> {
+            int pos = holder.getBindingAdapterPosition();
+            if (pos != RecyclerView.NO_POSITION)
+                items.get(pos).set("host_ip", s.toString().trim());
+        });
+        holder.etHostIp.addTextChangedListener(holder.hostIpWatcher);
+
+        holder.etGuestIp.setText(item.optString("guest_ip", ""));
+        holder.guestIpWatcher = SimpleTextWatcher.simpleAfterTextWatcher(s -> {
+            int pos = holder.getBindingAdapterPosition();
+            if (pos != RecyclerView.NO_POSITION)
+                items.get(pos).set("guest_ip", s.toString().trim());
+        });
+        holder.etGuestIp.addTextChangedListener(holder.guestIpWatcher);
+
+        updateNetworkButton(holder.btnNetwork, item.optString("network_id", ""));
+        holder.btnNetwork.setOnClickListener(v -> {
+            int pos = holder.getBindingAdapterPosition();
+            if (pos != RecyclerView.NO_POSITION)
+                showNetworkPicker(pos, holder.btnNetwork);
+        });
+
+        // Advanced section expand state: expanded by default when advanced values exist (data-driven, safe to reuse)
+        boolean hasAdvanced = !item.optString("host_ip", "").isEmpty()
+            || !item.optString("guest_ip", "").isEmpty()
+            || !item.optString("network_id", "").isEmpty();
+        applyAdvancedState(holder, hasAdvanced);
+        holder.btnAdvanced.setOnClickListener(v -> {
+            boolean show = holder.layoutAdvanced.getVisibility() != View.VISIBLE;
+            applyAdvancedState(holder, show);
+        });
+
+        holder.btnDelete.setOnClickListener(v -> {
+            int pos = holder.getBindingAdapterPosition();
+            if (pos != RecyclerView.NO_POSITION)
+                removeItem(pos);
+        });
+    }
+
+    private void applyAdvancedState(@NonNull PortForwardEditViewHolder holder, boolean expanded) {
+        holder.layoutAdvanced.setVisibility(expanded ? View.VISIBLE : View.GONE);
+        holder.btnAdvanced.setIconResource(
+            expanded ? R.drawable.ic_expand_less : R.drawable.ic_expand_more);
+    }
+
+    /** Writes the port as an integer; empty/invalid becomes 0 (backend: host_port=0 is skipped, guest_port=0 falls back to host_port). */
+    private void setPort(@NonNull DataItem item, @NonNull String key, @NonNull String text) {
+        text = text.trim();
+        if (text.isEmpty()) {
+            item.set(key, 0L);
+            return;
+        }
+        try {
+            item.set(key, (long) Integer.parseInt(text));
+        } catch (NumberFormatException e) {
+            item.set(key, 0L);
+        }
+    }
+
+    private void showNetworkPicker(int position, @NonNull MaterialButton btn) {
+        var netStore = new NetworkStore();
+        netStore.load(context);
+        var ids = new ArrayList<String>();
+        var names = new ArrayList<String>();
+        ids.add("");
+        names.add(context.getString(R.string.create_vm_network_none));
+        netStore.forEach((id, config) -> {
+            ids.add(id.toString());
+            names.add(config.getName());
+        });
+        var currentId = items.get(position).optString("network_id", "");
+        int checked = Math.max(0, ids.indexOf(currentId));
+        DialogInterface.OnClickListener onclick = (dialog, which) -> {
+            items.get(position).set("network_id", ids.get(which));
+            updateNetworkButton(btn, ids.get(which));
+            dialog.dismiss();
+        };
+        new MaterialAlertDialogBuilder(context)
+            .setTitle(R.string.edit_vm_pf_network)
+            .setSingleChoiceItems(names.toArray(new String[0]), checked, onclick)
+            .show();
+    }
+
+    private void updateNetworkButton(@NonNull MaterialButton btn, String networkId) {
+        if (networkId == null || networkId.isEmpty()) {
+            btn.setText(R.string.create_vm_network_none);
+            return;
+        }
+        var netStore = new NetworkStore();
+        netStore.load(context);
+        var net = netStore.findById(networkId);
+        btn.setText(net != null ? net.getName() :
+            context.getString(R.string.create_vm_network_none));
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/portforward/PortForwardEditViewHolder.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/portforward/PortForwardEditViewHolder.java
new file mode 100644
index 000000000..31e37abab
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/portforward/PortForwardEditViewHolder.java
@@ -0,0 +1,66 @@
+package cn.classfun.droidvm.ui.vm.edit.portforward;
+
+import android.text.TextWatcher;
+import android.view.View;
+import android.widget.ImageButton;
+import android.widget.LinearLayout;
+
+import androidx.annotation.NonNull;
+import androidx.recyclerview.widget.RecyclerView;
+
+import com.google.android.material.button.MaterialButton;
+import com.google.android.material.materialswitch.MaterialSwitch;
+import com.google.android.material.textfield.TextInputEditText;
+
+import cn.classfun.droidvm.R;
+import cn.classfun.droidvm.ui.widgets.tools.PickerButtonWidget;
+
+public final class PortForwardEditViewHolder extends RecyclerView.ViewHolder {
+    final TextInputEditText etHostPort;
+    final TextInputEditText etGuestPort;
+    final TextInputEditText etHostIp;
+    final TextInputEditText etGuestIp;
+    final PickerButtonWidget btnProtocol;
+    final MaterialSwitch switchEnabled;
+    final MaterialButton btnAdvanced;
+    final MaterialButton btnNetwork;
+    final ImageButton btnDelete;
+    final LinearLayout layoutAdvanced;
+    TextWatcher hostPortWatcher;
+    TextWatcher guestPortWatcher;
+    TextWatcher hostIpWatcher;
+    TextWatcher guestIpWatcher;
+
+    PortForwardEditViewHolder(@NonNull View itemView) {
+        super(itemView);
+        etHostPort = itemView.findViewById(R.id.et_pf_host_port);
+        etGuestPort = itemView.findViewById(R.id.et_pf_guest_port);
+        etHostIp = itemView.findViewById(R.id.et_pf_host_ip);
+        etGuestIp = itemView.findViewById(R.id.et_pf_guest_ip);
+        btnProtocol = itemView.findViewById(R.id.btn_pf_protocol);
+        switchEnabled = itemView.findViewById(R.id.switch_pf_enabled);
+        btnAdvanced = itemView.findViewById(R.id.btn_pf_advanced);
+        btnNetwork = itemView.findViewById(R.id.btn_pf_network);
+        btnDelete = itemView.findViewById(R.id.btn_pf_delete);
+        layoutAdvanced = itemView.findViewById(R.id.layout_pf_advanced);
+    }
+
+    void unbindWatchers() {
+        if (hostPortWatcher != null) {
+            etHostPort.removeTextChangedListener(hostPortWatcher);
+            hostPortWatcher = null;
+        }
+        if (guestPortWatcher != null) {
+            etGuestPort.removeTextChangedListener(guestPortWatcher);
+            guestPortWatcher = null;
+        }
+        if (hostIpWatcher != null) {
+            etHostIp.removeTextChangedListener(hostIpWatcher);
+            hostIpWatcher = null;
+        }
+        if (guestIpWatcher != null) {
+            etGuestIp.removeTextChangedListener(guestIpWatcher);
+            guestIpWatcher = null;
+        }
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/portforward/VMEditPortForwardTab.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/portforward/VMEditPortForwardTab.java
new file mode 100644
index 000000000..d0256a9fb
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/portforward/VMEditPortForwardTab.java
@@ -0,0 +1,66 @@
+package cn.classfun.droidvm.ui.vm.edit.portforward;
+
+import static java.util.Objects.requireNonNull;
+
+import android.view.View;
+import android.widget.Toast;
+
+import androidx.annotation.NonNull;
+
+import cn.classfun.droidvm.R;
+import cn.classfun.droidvm.lib.store.base.DataItem;
+import cn.classfun.droidvm.lib.store.vm.VMConfig;
+import cn.classfun.droidvm.lib.store.vm.VMStore;
+import cn.classfun.droidvm.ui.vm.edit.VMEditActivity;
+import cn.classfun.droidvm.ui.vm.edit.base.VMEditBaseTab;
+import cn.classfun.droidvm.ui.widgets.container.CardItemListView;
+
+public final class VMEditPortForwardTab extends VMEditBaseTab {
+    private CardItemListView listPf;
+
+    public VMEditPortForwardTab(VMEditActivity parent, View view) {
+        super(parent, view);
+    }
+
+    @Override
+    public void initView() {
+        listPf = view.findViewById(R.id.list_port_forwards);
+    }
+
+    @Override
+    public void initValue() {
+        listPf.setAdapter(PortForwardEditAdapter.class);
+    }
+
+    @Override
+    public void loadConfig(@NonNull VMConfig config) {
+        listPf.setItems(config.item.opt("port_forwards", DataItem.newArray()));
+    }
+
+    @Override
+    public boolean validateInput(@NonNull VMStore store) {
+        if (!rulesValid(requireNonNull(listPf.getItems()))) {
+            Toast.makeText(parent, R.string.edit_vm_pf_invalid_port, Toast.LENGTH_SHORT).show();
+            return false;
+        }
+        return true;
+    }
+
+    /** Mirrors the backend VMPortForwarder.parseRules checks (enabled rules only). */
+    public static boolean rulesValid(@NonNull DataItem rules) {
+        for (var iter : rules) {
+            var r = iter.getValue();
+            if (!r.optBoolean("enabled", true)) continue;
+            long hostPort = r.optLong("host_port", 0);
+            if (hostPort <= 0 || hostPort > 65535) return false;
+            long guestPort = r.optLong("guest_port", 0);
+            if (guestPort > 65535) return false; // 0 is valid: backend falls back to host_port
+        }
+        return true;
+    }
+
+    @Override
+    public void saveConfig(@NonNull VMConfig config) {
+        config.item.set("port_forwards", listPf.getItems());
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/info/VMInfoActivity.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/info/VMInfoActivity.java
index bbfbf2be9..57619d103 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/info/VMInfoActivity.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/info/VMInfoActivity.java
@@ -15,10 +15,14 @@
 import android.os.Handler;
 import android.os.Looper;
 import android.util.Log;
+import android.view.LayoutInflater;
+import android.view.View;
+import android.widget.LinearLayout;
 import android.widget.TextView;
 import android.widget.Toast;
 
 import androidx.annotation.Nullable;
+import androidx.appcompat.app.AlertDialog;
 import androidx.appcompat.app.AppCompatActivity;
 
 import com.google.android.material.appbar.CollapsingToolbarLayout;
@@ -26,6 +30,8 @@
 import com.google.android.material.button.MaterialButton;
 import com.google.android.material.dialog.MaterialAlertDialogBuilder;
 
+import org.json.JSONArray;
+import org.json.JSONException;
 import org.json.JSONObject;
 
 import java.text.DateFormat;
@@ -46,6 +52,10 @@
 import cn.classfun.droidvm.lib.ui.UIContext;
 import cn.classfun.droidvm.ui.vm.VMActions;
 import cn.classfun.droidvm.ui.vm.edit.VMEditActivity;
+import cn.classfun.droidvm.ui.vm.edit.portforward.PortForwardEditAdapter;
+import cn.classfun.droidvm.ui.vm.edit.portforward.VMEditPortForwardTab;
+import cn.classfun.droidvm.ui.widgets.container.CardItemListView;
+import cn.classfun.droidvm.ui.widgets.container.CollapsibleContainer;
 import cn.classfun.droidvm.ui.widgets.row.TextRowWidget;
 
 public final class VMInfoActivity extends AppCompatActivity implements ForegroundCallback {
@@ -74,6 +84,10 @@ public final class VMInfoActivity extends AppCompatActivity implements Foregroun
     private TextRowWidget rowDisks;
     private TextRowWidget rowOptions;
     private TextRowWidget rowCreated;
+    private CollapsibleContainer ccPortForwards;
+    private LinearLayout containerPortForwards;
+    private TextView tvPfEmpty;
+    private MaterialButton btnPfEdit;
     public VMState currentState = VMState.STOPPED;
     public UUID vmId;
     public VMConfig config;
@@ -101,6 +115,10 @@ protected void onCreate(@Nullable Bundle savedInstanceState) {
         rowDisks = findViewById(R.id.row_disks);
         rowOptions = findViewById(R.id.row_options);
         rowCreated = findViewById(R.id.row_created);
+        ccPortForwards = findViewById(R.id.cc_port_forwards);
+        containerPortForwards = findViewById(R.id.container_port_forwards);
+        tvPfEmpty = findViewById(R.id.tv_pf_empty);
+        btnPfEdit = findViewById(R.id.btn_pf_edit);
         toolbar = findViewById(R.id.toolbar);
         initialize();
     }
@@ -125,6 +143,7 @@ private void initialize() {
             sendControlCommand("powerbtn", vmId, mainHandler, ui));
         btnSleepBtn.setOnClickListener(v ->
             sendControlCommand("sleepbtn", vmId, mainHandler, ui));
+        btnPfEdit.setOnClickListener(v -> showPortForwardEditor());
     }
 
     @Override
@@ -293,6 +312,121 @@ private void updateStateUI() {
         } else {
             tvStateDetail.setText("");
         }
+        refreshPortForwards();
+        if (isRunning)
+            mainHandler.postDelayed(this::refreshPortForwards, 2000);
+    }
+
+    private void refreshPortForwards() {
+        if (currentState != VMState.RUNNING) {
+            ccPortForwards.setVisibility(View.GONE);
+            return;
+        }
+        DaemonConnection.OnResponse res = resp -> {
+            var data = resp.optJSONObject("data");
+            var active = data != null ? data.optJSONArray("active") : null;
+            mainHandler.post(() -> renderPortForwards(active));
+        };
+        DaemonConnection.getInstance().buildRequest("vm_port_forward_list")
+            .put("vm_id", vmId.toString())
+            .onResponse(res)
+            .onUnsuccessful(r -> {
+            })
+            .onError(e -> Log.w(TAG, "Failed to query port forwards", e))
+            .invoke();
+    }
+
+    private void renderPortForwards(@Nullable JSONArray active) {
+        if (isFinishing()) return;
+        if (currentState != VMState.RUNNING) {
+            ccPortForwards.setVisibility(View.GONE);
+            return;
+        }
+        ccPortForwards.setVisibility(View.VISIBLE);
+        containerPortForwards.removeAllViews();
+        int count = active != null ? active.length() : 0;
+        if (count == 0) {
+            tvPfEmpty.setVisibility(View.VISIBLE);
+            return;
+        }
+        tvPfEmpty.setVisibility(View.GONE);
+        var inflater = LayoutInflater.from(this);
+        for (int i = 0; i < count; i++) {
+            var o = active.optJSONObject(i);
+            if (o == null) continue;
+            var protocol = o.optString("protocol", "tcp");
+            var proto = "udp".equals(protocol) ? "UDP" : "TCP";
+            var hostIp = o.optString("host_ip", "");
+            var hostPort = o.optInt("host_port", 0);
+            var guestIp = o.optString("guest_ip", "");
+            var guestPort = o.optInt("guest_port", 0);
+            var hostDisplay = (hostIp.isEmpty() ? "*" : hostIp) + ":" + hostPort;
+            var line = proto + "  " + hostDisplay + " -> " + guestIp + ":" + guestPort;
+            var row = inflater.inflate(
+                R.layout.item_port_forward_active, containerPortForwards, false);
+            ((TextView) row.findViewById(R.id.tv_pf_line)).setText(line);
+            containerPortForwards.addView(row);
+        }
+    }
+
+    private void showPortForwardEditor() {
+        if (config == null) return;
+        var view = LayoutInflater.from(this).inflate(R.layout.dialog_port_forward_edit, null);
+        CardItemListView list = view.findViewById(R.id.list_port_forwards);
+        list.setAdapter(PortForwardEditAdapter.class);
+        list.setItems(copyArray(config.item.opt("port_forwards", DataItem.newArray())));
+        var dialog = new MaterialAlertDialogBuilder(this)
+            .setTitle(R.string.vm_info_port_forwards)
+            .setView(view)
+            .setPositiveButton(R.string.edit_vm_pf_apply, null)
+            .setNegativeButton(android.R.string.cancel, null)
+            .create();
+        // Override the button so failed validation keeps the dialog open.
+        dialog.setOnShowListener(d -> dialog.getButton(AlertDialog.BUTTON_POSITIVE)
+            .setOnClickListener(v -> {
+                if (applyPortForwardEdits(list)) dialog.dismiss();
+            }));
+        dialog.show();
+    }
+
+    private boolean applyPortForwardEdits(CardItemListView list) {
+        var items = list.getItems();
+        if (items == null) items = DataItem.newArray();
+        if (!VMEditPortForwardTab.rulesValid(items)) {
+            Toast.makeText(this, R.string.edit_vm_pf_invalid_port, Toast.LENGTH_SHORT).show();
+            return false;
+        }
+        config.item.set("port_forwards", items);
+        runOnPool(() -> store.save(this));
+        JSONArray rules;
+        try {
+            rules = items.toJsonArray();
+        } catch (JSONException e) {
+            rules = new JSONArray();
+        }
+        DaemonConnection.getInstance().buildRequest("vm_port_forward_set")
+            .put("vm_id", vmId.toString())
+            .put("rules", rules)
+            .onResponse(r -> {
+                // Apply may take effect sync (reconcile) or async (loop start); refresh now and after a delay.
+                mainHandler.post(this::refreshPortForwards);
+                mainHandler.postDelayed(this::refreshPortForwards, 1500);
+            })
+            .onUnsuccessful(r -> {
+            })
+            .onError(e -> Log.w(TAG, "Failed to set port forwards", e))
+            .invoke();
+        return true;
+    }
+
+    /** Deep copy so a cancelled dialog doesn't mutate config. */
+    private static DataItem copyArray(DataItem src) {
+        if (!src.is(DataItem.Type.ARRAY)) return DataItem.newArray();
+        try {
+            return DataItem.fromJson(src.toJsonArray());
+        } catch (JSONException e) {
+            return DataItem.newArray();
+        }
     }
 
     private void onStartStopClicked() {
diff --git a/app/src/main/res/layout/activity_vm_edit.xml b/app/src/main/res/layout/activity_vm_edit.xml
index b51364da8..0f503cf47 100644
--- a/app/src/main/res/layout/activity_vm_edit.xml
+++ b/app/src/main/res/layout/activity_vm_edit.xml
@@ -81,6 +81,13 @@
                 android:layout_height="wrap_content"
                 android:visibility="gone" />
 
+            <include
+                android:id="@+id/tab_content_port_forward"
+                layout="@layout/partial_vm_edit_port_forward"
+                android:layout_width="match_parent"
+                android:layout_height="wrap_content"
+                android:visibility="gone" />
+
             <include
                 android:id="@+id/tab_content_graphics"
                 layout="@layout/partial_vm_edit_graphics"
diff --git a/app/src/main/res/layout/activity_vm_info.xml b/app/src/main/res/layout/activity_vm_info.xml
index 02b6a6198..1acf393f1 100644
--- a/app/src/main/res/layout/activity_vm_info.xml
+++ b/app/src/main/res/layout/activity_vm_info.xml
@@ -286,6 +286,45 @@
 
             </cn.classfun.droidvm.ui.widgets.container.CollapsibleContainer>
 
+            <cn.classfun.droidvm.ui.widgets.container.CollapsibleContainer
+                android:id="@+id/cc_port_forwards"
+                android:layout_width="match_parent"
+                android:layout_height="wrap_content"
+                android:title="@string/vm_info_port_forwards"
+                android:visibility="gone">
+
+                <LinearLayout
+                    android:id="@+id/container_port_forwards"
+                    android:layout_width="match_parent"
+                    android:layout_height="wrap_content"
+                    android:orientation="vertical"
+                    android:paddingBottom="8dp" />
+
+                <TextView
+                    android:id="@+id/tv_pf_empty"
+                    android:layout_width="match_parent"
+                    android:layout_height="wrap_content"
+                    android:paddingStart="16dp"
+                    android:paddingEnd="16dp"
+                    android:paddingTop="4dp"
+                    android:paddingBottom="12dp"
+                    android:text="@string/vm_info_pf_none"
+                    android:textColor="?attr/colorOnSurfaceVariant"
+                    android:textSize="14sp" />
+
+                <com.google.android.material.button.MaterialButton
+                    android:id="@+id/btn_pf_edit"
+                    style="@style/Widget.Material3.Button.TonalButton"
+                    android:layout_width="wrap_content"
+                    android:layout_height="wrap_content"
+                    android:layout_marginStart="16dp"
+                    android:layout_marginEnd="16dp"
+                    android:layout_marginBottom="8dp"
+                    android:text="@string/vm_info_pf_edit"
+                    app:icon="@drawable/ic_edit" />
+
+            </cn.classfun.droidvm.ui.widgets.container.CollapsibleContainer>
+
             <Space
                 android:layout_width="match_parent"
                 android:layout_height="128dp" />
diff --git a/app/src/main/res/layout/dialog_port_forward_edit.xml b/app/src/main/res/layout/dialog_port_forward_edit.xml
new file mode 100644
index 000000000..cdaa096d6
--- /dev/null
+++ b/app/src/main/res/layout/dialog_port_forward_edit.xml
@@ -0,0 +1,16 @@
+<?xml version="1.0" encoding="utf-8"?>
+<ScrollView xmlns:android="http://schemas.android.com/apk/res/android"
+    android:layout_width="match_parent"
+    android:layout_height="wrap_content"
+    android:paddingTop="8dp"
+    android:paddingBottom="8dp">
+
+    <cn.classfun.droidvm.ui.widgets.container.CardItemListView
+        android:id="@+id/list_port_forwards"
+        android:layout_width="match_parent"
+        android:layout_height="wrap_content"
+        android:hint="@string/edit_vm_pf_empty"
+        android:icon="@drawable/ic_add"
+        android:text="@string/edit_vm_pf_add" />
+
+</ScrollView>
diff --git a/app/src/main/res/layout/item_port_forward_active.xml b/app/src/main/res/layout/item_port_forward_active.xml
new file mode 100644
index 000000000..28dac99ad
--- /dev/null
+++ b/app/src/main/res/layout/item_port_forward_active.xml
@@ -0,0 +1,29 @@
+<?xml version="1.0" encoding="utf-8"?>
+<LinearLayout xmlns:android="http://schemas.android.com/apk/res/android"
+    xmlns:app="http://schemas.android.com/apk/res-auto"
+    android:layout_width="match_parent"
+    android:layout_height="wrap_content"
+    android:gravity="center_vertical"
+    android:orientation="horizontal"
+    android:paddingStart="16dp"
+    android:paddingEnd="16dp"
+    android:paddingTop="6dp"
+    android:paddingBottom="6dp">
+
+    <ImageView
+        android:layout_width="20dp"
+        android:layout_height="20dp"
+        android:contentDescription="@string/vm_info_port_forwards"
+        android:src="@drawable/ic_arrow_forward"
+        app:tint="?attr/colorOnSurfaceVariant" />
+
+    <TextView
+        android:id="@+id/tv_pf_line"
+        android:layout_width="match_parent"
+        android:layout_height="wrap_content"
+        android:layout_marginStart="16dp"
+        android:fontFamily="monospace"
+        android:textColor="?attr/colorOnSurface"
+        android:textSize="14sp" />
+
+</LinearLayout>
diff --git a/app/src/main/res/layout/item_port_forward_edit.xml b/app/src/main/res/layout/item_port_forward_edit.xml
new file mode 100644
index 000000000..f5badd167
--- /dev/null
+++ b/app/src/main/res/layout/item_port_forward_edit.xml
@@ -0,0 +1,210 @@
+<?xml version="1.0" encoding="utf-8"?>
+<com.google.android.material.card.MaterialCardView xmlns:android="http://schemas.android.com/apk/res/android"
+    xmlns:app="http://schemas.android.com/apk/res-auto"
+    xmlns:tools="http://schemas.android.com/tools"
+    android:layout_width="match_parent"
+    android:layout_height="wrap_content"
+    android:layout_marginStart="16dp"
+    android:layout_marginEnd="16dp"
+    android:layout_marginBottom="8dp"
+    app:cardCornerRadius="12dp"
+    app:cardElevation="0dp"
+    app:strokeColor="?attr/colorOutlineVariant"
+    app:strokeWidth="1dp">
+
+    <LinearLayout
+        android:layout_width="match_parent"
+        android:layout_height="wrap_content"
+        android:orientation="vertical"
+        android:padding="12dp">
+
+        <!-- 第 1 行：主机端口 → Guest 端口 + 删除 -->
+        <LinearLayout
+            android:layout_width="match_parent"
+            android:layout_height="wrap_content"
+            android:gravity="center_vertical"
+            android:orientation="horizontal">
+
+            <ImageView
+                android:layout_width="24dp"
+                android:layout_height="24dp"
+                android:contentDescription="@string/create_vm_category_port_forward"
+                android:src="@drawable/ic_arrow_forward"
+                app:tint="?attr/colorOnSurfaceVariant" />
+
+            <com.google.android.material.textfield.TextInputLayout
+                android:id="@+id/til_pf_host_port"
+                style="@style/Widget.Material3.TextInputLayout.OutlinedBox.Dense"
+                android:layout_width="0dp"
+                android:layout_height="wrap_content"
+                android:layout_marginStart="12dp"
+                android:layout_weight="1"
+                android:hint="@string/edit_vm_pf_host_port">
+
+                <com.google.android.material.textfield.TextInputEditText
+                    android:id="@+id/et_pf_host_port"
+                    android:layout_width="match_parent"
+                    android:layout_height="wrap_content"
+                    android:inputType="number"
+                    android:maxLength="5"
+                    android:maxLines="1"
+                    android:textSize="14sp"
+                    tools:ignore="TextContrastCheck,VisualLintTextFieldSize" />
+
+            </com.google.android.material.textfield.TextInputLayout>
+
+            <TextView
+                android:layout_width="wrap_content"
+                android:layout_height="wrap_content"
+                android:layout_marginStart="8dp"
+                android:layout_marginEnd="8dp"
+                android:text="@string/edit_vm_pf_arrow"
+                android:textColor="?attr/colorOnSurfaceVariant"
+                android:textSize="16sp" />
+
+            <com.google.android.material.textfield.TextInputLayout
+                android:id="@+id/til_pf_guest_port"
+                style="@style/Widget.Material3.TextInputLayout.OutlinedBox.Dense"
+                android:layout_width="0dp"
+                android:layout_height="wrap_content"
+                android:layout_weight="1"
+                android:hint="@string/edit_vm_pf_guest_port">
+
+                <com.google.android.material.textfield.TextInputEditText
+                    android:id="@+id/et_pf_guest_port"
+                    android:layout_width="match_parent"
+                    android:layout_height="wrap_content"
+                    android:inputType="number"
+                    android:maxLength="5"
+                    android:maxLines="1"
+                    android:textSize="14sp"
+                    tools:ignore="TextContrastCheck,VisualLintTextFieldSize" />
+
+            </com.google.android.material.textfield.TextInputLayout>
+
+            <ImageButton
+                android:id="@+id/btn_pf_delete"
+                android:layout_width="36dp"
+                android:layout_height="36dp"
+                android:layout_marginStart="4dp"
+                android:background="?attr/selectableItemBackgroundBorderless"
+                android:contentDescription="@string/edit_vm_pf_delete"
+                android:src="@drawable/ic_delete"
+                app:tint="?attr/colorError"
+                tools:ignore="TouchTargetSizeCheck" />
+
+        </LinearLayout>
+
+        <!-- 第 2 行：协议 + 高级 + 启用开关 -->
+        <LinearLayout
+            android:layout_width="match_parent"
+            android:layout_height="wrap_content"
+            android:layout_marginTop="8dp"
+            android:gravity="center_vertical"
+            android:orientation="horizontal">
+
+            <cn.classfun.droidvm.ui.widgets.tools.PickerButtonWidget
+                android:id="@+id/btn_pf_protocol"
+                android:layout_width="wrap_content"
+                android:layout_height="48dp"
+                android:title="@string/edit_vm_pf_protocol"
+                app:pb_mode="dialog" />
+
+            <Space
+                android:layout_width="0dp"
+                android:layout_height="wrap_content"
+                android:layout_weight="1" />
+
+            <com.google.android.material.button.MaterialButton
+                android:id="@+id/btn_pf_advanced"
+                style="@style/Widget.Material3.Button.TextButton.Icon"
+                android:layout_width="wrap_content"
+                android:layout_height="wrap_content"
+                android:minWidth="0dp"
+                android:text="@string/edit_vm_pf_advanced"
+                android:textSize="12sp"
+                app:icon="@drawable/ic_expand_more"
+                app:iconSize="18dp"
+                tools:ignore="TouchTargetSizeCheck" />
+
+            <TextView
+                android:layout_width="wrap_content"
+                android:layout_height="wrap_content"
+                android:layout_marginStart="8dp"
+                android:labelFor="@id/switch_pf_enabled"
+                android:text="@string/edit_vm_pf_enabled"
+                android:textSize="14sp" />
+
+            <com.google.android.material.materialswitch.MaterialSwitch
+                android:id="@+id/switch_pf_enabled"
+                android:layout_width="wrap_content"
+                android:layout_height="wrap_content"
+                android:layout_marginStart="8dp" />
+
+        </LinearLayout>
+
+        <!-- 第 3 段：高级选项（默认折叠） -->
+        <LinearLayout
+            android:id="@+id/layout_pf_advanced"
+            android:layout_width="match_parent"
+            android:layout_height="wrap_content"
+            android:layout_marginTop="4dp"
+            android:orientation="vertical"
+            android:visibility="gone">
+
+            <com.google.android.material.textfield.TextInputLayout
+                android:id="@+id/til_pf_host_ip"
+                style="@style/Widget.Material3.TextInputLayout.OutlinedBox.Dense"
+                android:layout_width="match_parent"
+                android:layout_height="wrap_content"
+                android:layout_marginTop="4dp"
+                android:hint="@string/edit_vm_pf_host_ip">
+
+                <com.google.android.material.textfield.TextInputEditText
+                    android:id="@+id/et_pf_host_ip"
+                    android:layout_width="match_parent"
+                    android:layout_height="wrap_content"
+                    android:inputType="textNoSuggestions"
+                    android:maxLines="1"
+                    android:textSize="14sp"
+                    tools:ignore="TextContrastCheck,VisualLintTextFieldSize" />
+
+            </com.google.android.material.textfield.TextInputLayout>
+
+            <com.google.android.material.button.MaterialButton
+                android:id="@+id/btn_pf_network"
+                style="@style/Widget.Material3.Button.TonalButton"
+                android:layout_width="match_parent"
+                android:layout_height="wrap_content"
+                android:layout_marginTop="8dp"
+                android:gravity="start|center_vertical"
+                android:text="@string/create_vm_network_none"
+                android:textSize="12sp"
+                app:icon="@drawable/ic_ethernet"
+                app:iconSize="18dp"
+                tools:ignore="VisualLintButtonSize" />
+
+            <com.google.android.material.textfield.TextInputLayout
+                android:id="@+id/til_pf_guest_ip"
+                style="@style/Widget.Material3.TextInputLayout.OutlinedBox.Dense"
+                android:layout_width="match_parent"
+                android:layout_height="wrap_content"
+                android:layout_marginTop="8dp"
+                android:hint="@string/edit_vm_pf_guest_ip">
+
+                <com.google.android.material.textfield.TextInputEditText
+                    android:id="@+id/et_pf_guest_ip"
+                    android:layout_width="match_parent"
+                    android:layout_height="wrap_content"
+                    android:inputType="textNoSuggestions"
+                    android:maxLines="1"
+                    android:textSize="14sp"
+                    tools:ignore="TextContrastCheck,VisualLintTextFieldSize" />
+
+            </com.google.android.material.textfield.TextInputLayout>
+
+        </LinearLayout>
+
+    </LinearLayout>
+
+</com.google.android.material.card.MaterialCardView>
diff --git a/app/src/main/res/layout/partial_vm_edit_port_forward.xml b/app/src/main/res/layout/partial_vm_edit_port_forward.xml
new file mode 100644
index 000000000..dd5f659db
--- /dev/null
+++ b/app/src/main/res/layout/partial_vm_edit_port_forward.xml
@@ -0,0 +1,22 @@
+<?xml version="1.0" encoding="utf-8"?>
+<LinearLayout xmlns:android="http://schemas.android.com/apk/res/android"
+    android:layout_width="match_parent"
+    android:layout_height="wrap_content"
+    android:orientation="vertical">
+
+    <cn.classfun.droidvm.ui.widgets.container.CollapsibleContainer
+        android:layout_width="match_parent"
+        android:layout_height="wrap_content"
+        android:title="@string/create_vm_category_port_forward">
+
+        <cn.classfun.droidvm.ui.widgets.container.CardItemListView
+            android:id="@+id/list_port_forwards"
+            android:layout_width="match_parent"
+            android:layout_height="wrap_content"
+            android:hint="@string/edit_vm_pf_empty"
+            android:icon="@drawable/ic_add"
+            android:text="@string/edit_vm_pf_add" />
+
+    </cn.classfun.droidvm.ui.widgets.container.CollapsibleContainer>
+
+</LinearLayout>
diff --git a/app/src/main/res/values-zh-rCN/strings.xml b/app/src/main/res/values-zh-rCN/strings.xml
index 68047ef64..c44049740 100644
--- a/app/src/main/res/values-zh-rCN/strings.xml
+++ b/app/src/main/res/values-zh-rCN/strings.xml
@@ -224,6 +224,26 @@
     <string name="edit_vm_net_delete">移除网络</string>
     <string name="edit_vm_net_mac_hint">MAC 地址（可选）</string>
     <string name="edit_vm_net_mac_random">随机</string>
+    <!-- 端口转发 -->
+    <string name="create_vm_tab_port_forward">端口</string>
+    <string name="create_vm_category_port_forward">端口转发</string>
+    <string name="edit_vm_pf_add">添加规则</string>
+    <string name="edit_vm_pf_empty">暂无端口转发规则。</string>
+    <string name="edit_vm_pf_delete">删除规则</string>
+    <string name="edit_vm_pf_protocol">协议</string>
+    <string name="edit_vm_pf_host_port">主机端口</string>
+    <string name="edit_vm_pf_guest_port">Guest 端口</string>
+    <string name="edit_vm_pf_arrow">→</string>
+    <string name="edit_vm_pf_enabled">启用</string>
+    <string name="edit_vm_pf_advanced">高级</string>
+    <string name="edit_vm_pf_host_ip">主机 IP（可选）</string>
+    <string name="edit_vm_pf_guest_ip">Guest IP（留空自动发现）</string>
+    <string name="edit_vm_pf_network">网卡</string>
+    <string name="edit_vm_pf_invalid_port">主机端口须为 1-65535</string>
+    <string name="vm_info_port_forwards">端口转发</string>
+    <string name="vm_info_pf_none">暂无生效转发</string>
+    <string name="vm_info_pf_edit">编辑转发</string>
+    <string name="edit_vm_pf_apply">应用</string>
     <string name="edit_vm_disk_path_hint">路径</string>
     <string name="edit_vm_disk_readonly">只读</string>
     <string name="edit_vm_disk_bus">总线</string>
diff --git a/app/src/main/res/values/strings.xml b/app/src/main/res/values/strings.xml
index 7f83b1c36..36cb6cdfc 100644
--- a/app/src/main/res/values/strings.xml
+++ b/app/src/main/res/values/strings.xml
@@ -226,6 +226,26 @@
     <string name="edit_vm_net_delete">Remove network</string>
     <string name="edit_vm_net_mac_hint">MAC address (optional)</string>
     <string name="edit_vm_net_mac_random">Random</string>
+    <!-- Port forwarding -->
+    <string name="create_vm_tab_port_forward">Ports</string>
+    <string name="create_vm_category_port_forward">Port Forwarding</string>
+    <string name="edit_vm_pf_add">Add Rule</string>
+    <string name="edit_vm_pf_empty">No port forwarding rules.</string>
+    <string name="edit_vm_pf_delete">Remove rule</string>
+    <string name="edit_vm_pf_protocol">Protocol</string>
+    <string name="edit_vm_pf_host_port">Host Port</string>
+    <string name="edit_vm_pf_guest_port">Guest Port</string>
+    <string name="edit_vm_pf_arrow">→</string>
+    <string name="edit_vm_pf_enabled">Enabled</string>
+    <string name="edit_vm_pf_advanced">Advanced</string>
+    <string name="edit_vm_pf_host_ip">Host IP (optional)</string>
+    <string name="edit_vm_pf_guest_ip">Guest IP (auto if empty)</string>
+    <string name="edit_vm_pf_network">Network</string>
+    <string name="edit_vm_pf_invalid_port">Host port must be 1-65535</string>
+    <string name="vm_info_port_forwards">Port Forwarding</string>
+    <string name="vm_info_pf_none">No active forwards</string>
+    <string name="vm_info_pf_edit">Edit Forwards</string>
+    <string name="edit_vm_pf_apply">Apply</string>
     <string name="edit_vm_disk_path_hint">Path</string>
     <string name="edit_vm_disk_readonly">Read-only</string>
     <string name="edit_vm_disk_bus">Bus</string>

From bea0c6f4790844d030eb0c0d411ac3e51d477119 Mon Sep 17 00:00:00 2001
From: lateautumn233 <lateautumn233@foxmail.com>
Date: Mon, 1 Jun 2026 01:40:46 +0800
Subject: [PATCH 003/182] fix(vm): refactor port forwarder for event-driven
 config sync

- Add volatile modifier to ensure thread visibility
- Replace polling-based loop with wait/notify event model
- Refactor reconcile logic with atomic rule switching and better error handling
- Improve handling of unresolved guest IPs across retry attempts
---
 .../droidvm/daemon/vm/VMInstance.java         |   8 +-
 .../droidvm/daemon/vm/VMPortForwarder.java    | 152 ++++++++----------
 2 files changed, 65 insertions(+), 95 deletions(-)

diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/vm/VMInstance.java b/app/src/main/java/cn/classfun/droidvm/daemon/vm/VMInstance.java
index 374a86cab..114250ea3 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/vm/VMInstance.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/vm/VMInstance.java
@@ -42,7 +42,7 @@ public final class VMInstance extends VMConfig {
     private BackendBase backend;
     private VMBackendInstance backendInstance;
     private Thread workerThread;
-    private VMPortForwarder portForwarder;
+    private volatile VMPortForwarder portForwarder;
     private final VMInstanceStore store;
 
     public interface VMEventCallback {
@@ -404,11 +404,7 @@ public JSONArray getActivePortForwards() {
         return pf != null ? pf.snapshotApplied() : new JSONArray();
     }
 
-    /**
-     * 运行时热更新端口转发规则：更新内存配置后即时同步到 iptables（增删 DNAT 规则）。
-     * 仅作用于 daemon 运行态；配置的持久化由前端负责（写入共享的 vms.json），
-     * 下次启动时前端会通过 vm_modify 重新下发完整配置。
-     */
+    /** Runtime-only hot-update of DNAT rules; the frontend owns persistence (re-pushed via vm_modify on next start). */
     public void applyPortForwards(@NonNull JSONArray rules) {
         item.set("port_forwards", rules);
         var pf = portForwarder;
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/vm/VMPortForwarder.java b/app/src/main/java/cn/classfun/droidvm/daemon/vm/VMPortForwarder.java
index 8fcace647..1f675ec4f 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/vm/VMPortForwarder.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/vm/VMPortForwarder.java
@@ -1,7 +1,6 @@
 package cn.classfun.droidvm.daemon.vm;
 
 import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
-import static cn.classfun.droidvm.lib.utils.ThreadUtils.threadSleep;
 
 import android.util.Log;
 
@@ -23,20 +22,8 @@
 import cn.classfun.droidvm.lib.store.vm.VMState;
 
 /**
- * 管理单个 VM 的端口转发（host -> guest）iptables DNAT 规则。
- * VM 进入 RUNNING 后启动：轮询 DHCP 租约/邻居表，按网卡 MAC 解析 guest IP，
- * 然后下发规则；VM 退出时撤销全部已下发的规则。
- *
- * <p>规则来源于 VM 配置的 {@code port_forwards} 数组，每项字段：
- * <ul>
- *   <li>{@code protocol}: tcp | udp（默认 tcp）</li>
- *   <li>{@code host_port}: 宿主机监听端口（必填）</li>
- *   <li>{@code guest_port}: guest 目标端口（默认与 host_port 相同）</li>
- *   <li>{@code host_ip}: 可选，仅转发发往该宿主地址的流量；留空=全部</li>
- *   <li>{@code network_id}: 可选，多网卡时指定走哪个网卡；留空=首个网卡</li>
- *   <li>{@code guest_ip}: 可选，手动指定 guest IP，跳过自动发现</li>
- *   <li>{@code enabled}: 可选，默认 true</li>
- * </ul>
+ * Installs host -> guest iptables DNAT rules for one VM's {@code port_forwards}, resolving the
+ * guest IP from DHCP leases / the neighbor table while the VM is RUNNING.
  */
 final class VMPortForwarder {
     private static final String TAG = "VMPortForwarder";
@@ -74,6 +61,7 @@ synchronized void start() {
 
     synchronized void stop() {
         running = false;
+        notifyAll();
         var t = thread;
         if (t != null) {
             t.interrupt();
@@ -102,34 +90,30 @@ JSONArray snapshotApplied() {
         return arr;
     }
 
-    /**
-     * 运行时热同步当前配置：
-     * <ul>
-     *   <li>已在转发（VM 启动时已有规则）→ {@link #reapply()} 做增量 diff；</li>
-     *   <li>此前因无规则未启动 → {@link #start()} 按新配置启动轮询应用。</li>
-     * </ul>
-     * 供 {@link VMInstance#applyPortForwards} 在运行时改规则后调用。
-     */
+    /** Wakes the poll thread (or starts it) so reconcile always runs on that single thread. */
     synchronized void sync() {
-        if (running) reapply();
+        if (running) notifyAll();
         else start();
     }
 
     /**
-     * 运行时热更新：基于 VM 当前 {@code port_forwards} 配置对已应用规则做增量 diff——
-     * 移除不再需要的、应用新增的。仅在 VM 运行（已 {@link #start()}）时有效。
-     * 新增规则要求 guest IP 当前可解析（运行中 VM 一般已联网，故可解析）。
+     * Incrementally reconciles installed rules to the current config. Poll-thread only and the
+     * sole writer of {@link #applied} (besides {@link #stop()}). A still-configured binding whose
+     * guest IP is momentarily unresolvable keeps its old entry and is switched atomically once
+     * resolvable, so hot-editing guest_ip/NIC never drops a working forward.
+     *
+     * @return whether any rule is still configured-but-unresolvable (keep polling).
      */
-    private synchronized void reapply() {
-        if (!running || networkStore == null) return;
+    private boolean reconcile() {
+        if (!running || networkStore == null) return false;
         var rules = parseRules();
-        // 锁外解析目标，避免持 applied 锁期间做 DHCP/邻居表查询
+        // Resolve outside the applied lock; DHCP / neighbor lookups are slow.
         var desired = new ArrayList<Applied>();
+        boolean hasUnresolved = false;
         for (var rule : rules) {
             var target = resolveTarget(rule);
             if (target == null) {
-                Log.w(TAG, fmt("VM %s: reapply skipped unresolved %s :%d (guest IP not ready)",
-                    vm.getName(), rule.protocol, rule.hostPort));
+                hasUnresolved = true;
                 continue;
             }
             desired.add(new Applied(target.bridge, target.ip, rule.protocol,
@@ -137,19 +121,14 @@ private synchronized void reapply() {
         }
         synchronized (applied) {
             applied.removeIf(a -> {
-                boolean keep = false;
                 for (var d : desired)
-                    if (sameForward(a, d)) {
-                        keep = true;
-                        break;
-                    }
-                if (!keep) {
-                    networkStore.firewall.removeForward(
-                        a.bridge, a.guestIp, a.protocol, a.hostIp, a.hostPort, a.guestPort);
-                    Log.i(TAG, fmt("VM %s: reapply removed %s :%d -> %s:%d",
-                        vm.getName(), a.protocol, a.hostPort, a.guestIp, a.guestPort));
-                }
-                return !keep;
+                    if (sameForward(a, d)) return false;
+                if (hostBindingConfigured(a, rules)) return false;
+                networkStore.firewall.removeForward(
+                    a.bridge, a.guestIp, a.protocol, a.hostIp, a.hostPort, a.guestPort);
+                Log.i(TAG, fmt("VM %s: removed forward %s :%d -> %s:%d",
+                    vm.getName(), a.protocol, a.hostPort, a.guestIp, a.guestPort));
+                return true;
             });
             for (var d : desired) {
                 boolean exists = false;
@@ -159,18 +138,27 @@ private synchronized void reapply() {
                         break;
                     }
                 if (exists) continue;
+                applied.removeIf(a -> {
+                    if (!sameHostBinding(a, d)) return false;
+                    networkStore.firewall.removeForward(
+                        a.bridge, a.guestIp, a.protocol, a.hostIp, a.hostPort, a.guestPort);
+                    Log.i(TAG, fmt("VM %s: switched forward %s :%d off %s:%d",
+                        vm.getName(), a.protocol, a.hostPort, a.guestIp, a.guestPort));
+                    return true;
+                });
                 boolean ok = networkStore.firewall.applyForward(
                     d.bridge, d.guestIp, d.protocol, d.hostIp, d.hostPort, d.guestPort);
                 if (ok) {
                     applied.add(d);
-                    Log.i(TAG, fmt("VM %s: reapply added %s :%d -> %s:%d",
+                    Log.i(TAG, fmt("VM %s: forward %s :%d -> %s:%d",
                         vm.getName(), d.protocol, d.hostPort, d.guestIp, d.guestPort));
                 } else {
-                    Log.w(TAG, fmt("VM %s: reapply failed to apply %s :%d",
+                    Log.w(TAG, fmt("VM %s: failed to apply forward %s :%d",
                         vm.getName(), d.protocol, d.hostPort));
                 }
             }
         }
+        return hasUnresolved;
     }
 
     private static boolean sameForward(@NonNull Applied a, @NonNull Applied b) {
@@ -182,54 +170,44 @@ && eq(a.guestIp, b.guestIp)
             && eq(a.bridge, b.bridge);
     }
 
+    private static boolean sameHostBinding(@NonNull Applied a, @NonNull Applied b) {
+        return a.protocol.equals(b.protocol) && a.hostPort == b.hostPort && eq(a.hostIp, b.hostIp);
+    }
+
+    private static boolean hostBindingConfigured(@NonNull Applied a, @NonNull List<Rule> rules) {
+        for (var r : rules)
+            if (a.protocol.equals(r.protocol) && a.hostPort == r.hostPort && eq(a.hostIp, r.hostIp))
+                return true;
+        return false;
+    }
+
     private static boolean eq(@Nullable String a, @Nullable String b) {
         return a == null ? b == null : a.equals(b);
     }
 
+    /** Reconcile/wait loop; stays alive the whole RUNNING period so late rule changes are still reconciled. */
     private void loop() {
-        var rules = parseRules();
-        if (rules.isEmpty()) return;
-        int attempts = 0;
-        while (running && vm.getState() == VMState.RUNNING) {
-            boolean allDone = true;
-            for (var rule : rules) {
-                if (rule.done) continue;
-                if (!running) return;
-                var target = resolveTarget(rule);
-                if (target == null) {
-                    allDone = false;
-                    continue;
-                }
-                boolean ok = networkStore.firewall.applyForward(
-                    target.bridge, target.ip, rule.protocol,
-                    rule.hostIp, rule.hostPort, rule.guestPort);
-                rule.done = true;
-                if (!ok) {
-                    Log.w(TAG, fmt("VM %s: failed to apply forward %s :%d -> %s:%d",
-                        vm.getName(), rule.protocol, rule.hostPort, target.ip, rule.guestPort));
-                    continue;
-                }
-                // 与 stop()/removeAll() 通过 applied 锁互斥，避免 stop 后仍残留规则
-                synchronized (applied) {
-                    if (!running) {
-                        networkStore.firewall.removeForward(
-                            target.bridge, target.ip, rule.protocol,
-                            rule.hostIp, rule.hostPort, rule.guestPort);
+        try {
+            int attempts = 0;
+            synchronized (this) {
+                while (running && vm.getState() == VMState.RUNNING) {
+                    boolean hasUnresolved = reconcile();
+                    if (!running) break;
+                    if (hasUnresolved && attempts < RESOLVE_MAX_ATTEMPTS) {
+                        attempts++;
+                        wait(RESOLVE_INTERVAL_MS);
                     } else {
-                        applied.add(new Applied(target.bridge, target.ip, rule.protocol,
-                            rule.hostIp, rule.hostPort, rule.guestPort));
-                        Log.i(TAG, fmt("VM %s: forward %s :%d -> %s:%d",
-                            vm.getName(), rule.protocol, rule.hostPort, target.ip, rule.guestPort));
+                        if (hasUnresolved)
+                            Log.w(TAG, fmt("VM %s: gave up auto-resolving guest IP for some port"
+                                    + " forwards after %d attempts; will retry on next config change",
+                                vm.getName(), attempts));
+                        attempts = 0;
+                        wait();
                     }
                 }
             }
-            if (allDone) break;
-            if (++attempts >= RESOLVE_MAX_ATTEMPTS) {
-                Log.w(TAG, fmt("VM %s: gave up resolving guest IP for some port forwards after %d attempts",
-                    vm.getName(), attempts));
-                break;
-            }
-            threadSleep(RESOLVE_INTERVAL_MS);
+        } catch (InterruptedException ignored) {
+            Thread.currentThread().interrupt();
         }
     }
 
@@ -263,7 +241,6 @@ private List<Rule> parseRules() {
             if (guestPort <= 0 || guestPort > 65535) guestPort = hostPort;
             var hostIp = r.optString("host_ip", "");
             if (hostIp == null) hostIp = "";
-            // 同一 VM 内按 (protocol, host_ip, host_port) 去重，避免重复 DNAT
             var key = fmt("%s|%s|%d", protocol, hostIp, hostPort);
             if (!seen.add(key)) {
                 Log.w(TAG, fmt("VM %s: duplicate port forward %s, skipping", vm.getName(), key));
@@ -304,10 +281,8 @@ private Target resolveTarget(@NonNull Rule rule) {
     private String resolveGuestIpByMac(
         @NonNull NetworkInstance netInst, @NonNull String bridge, @NonNull String mac) {
         var macLower = mac.toLowerCase(Locale.ROOT);
-        // 1. 优先用 dnsmasq DHCP 租约
         var ip = matchMac(networkStore.backend.listDhcpLeases(bridge), macLower, "ip", "mac");
         if (ip != null) return ip;
-        // 2. 回退到 ARP 邻居表（适用于静态 IP 且已通信过的 guest）
         return matchMac(netInst.listNeighbors(), macLower, "dst", "lladdr");
     }
 
@@ -370,7 +345,6 @@ private static final class Rule {
         int guestPort;
         String networkId;
         String fixedGuestIp;
-        boolean done = false;
     }
 
     private static final class Target {

From 344e46956a0852f156a65745858ff355da8ab55c Mon Sep 17 00:00:00 2001
From: lateautumn233 <lateautumn233@foxmail.com>
Date: Wed, 20 May 2026 18:41:50 +0800
Subject: [PATCH 004/182] feat(daemon): create run directory with proper
 ownership on daemon start

---
 .../java/cn/classfun/droidvm/lib/daemon/DaemonHelper.java  | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)

diff --git a/app/src/main/java/cn/classfun/droidvm/lib/daemon/DaemonHelper.java b/app/src/main/java/cn/classfun/droidvm/lib/daemon/DaemonHelper.java
index 34476a84e..735492673 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/daemon/DaemonHelper.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/daemon/DaemonHelper.java
@@ -19,6 +19,7 @@
 
 import android.os.Handler;
 import android.os.Looper;
+import android.os.Process;
 import android.util.Log;
 import android.widget.Toast;
 
@@ -100,7 +101,11 @@ public static String readToken() {
     public boolean startDaemon() {
         var zipPath = getDaemonZipPath();
         Log.i(TAG, fmt("Starting daemon via app_process64 with %s", zipPath));
-        run("mkdir -p %s", pathJoin(DATA_DIR, "run"));
+        var runDir = pathJoin(DATA_DIR, "run");
+        var uid = Process.myUid();
+        run("mkdir -p %s", runDir);
+        // Best-effort ownership fix; chown may be denied on some contexts (e.g. Android).
+        run("chown %d:%d %s || true", uid, uid, runDir);
         var cmd = fmt(
             "env CLASSPATH=%s %s %s / %s",
             escapedString(zipPath),

From 7643cb527bb1cb716a26d1a805f3e2981d1527e1 Mon Sep 17 00:00:00 2001
From: lateautumn233 <lateautumn233@foxmail.com>
Date: Wed, 10 Jun 2026 19:44:18 +0800
Subject: [PATCH 005/182] feat(agent): disable mthp lending for agent vm

- Set prepare_lend_mthp to false in default AgentVM config
---
 app/src/main/java/cn/classfun/droidvm/ui/agent/base/AgentVM.java | 1 +
 1 file changed, 1 insertion(+)

diff --git a/app/src/main/java/cn/classfun/droidvm/ui/agent/base/AgentVM.java b/app/src/main/java/cn/classfun/droidvm/ui/agent/base/AgentVM.java
index 883c9d09b..94862a03f 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/agent/base/AgentVM.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/agent/base/AgentVM.java
@@ -107,6 +107,7 @@ public VMConfig buildVM() {
         vm.item.set("temporary", true);
         vm.item.set("cpu_count", 1);
         vm.item.set("memory_mb", 384);
+        vm.item.set("prepare_lend_mthp", false);
         vm.item.set("use_uefi", false);
         vm.item.set("kernel", PATH_BUILTIN_KERNEL);
         vm.item.set("initrd", PATH_BUILTIN_INITRD);

From c28c9b073716ddb54917dbca770bc8db28af84eb Mon Sep 17 00:00:00 2001
From: lateautumn233 <lateautumn233@foxmail.com>
Date: Thu, 21 May 2026 03:00:09 +0800
Subject: [PATCH 006/182] feat(settings): add option to clear logs before
 starting VM

---
 .../droidvm/daemon/console/ConsoleStream.java   | 17 +++++++++--------
 .../droidvm/daemon/ipc/vm/StartHandler.java     |  4 ++++
 .../classfun/droidvm/daemon/vm/VMInstance.java  |  5 +++++
 .../ui/main/settings/MainSettingsFragment.java  |  9 +++++++++
 .../cn/classfun/droidvm/ui/vm/VMActions.java    |  2 ++
 .../main/res/layout/fragment_main_settings.xml  |  8 ++++++++
 app/src/main/res/values-zh-rCN/strings.xml      |  2 ++
 app/src/main/res/values/strings.xml             |  2 ++
 8 files changed, 41 insertions(+), 8 deletions(-)

diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/console/ConsoleStream.java b/app/src/main/java/cn/classfun/droidvm/daemon/console/ConsoleStream.java
index f4c7dcfef..023fbe257 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/console/ConsoleStream.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/console/ConsoleStream.java
@@ -109,22 +109,23 @@ public void appendBuffer(@NonNull byte[] data, int off, int len) {
 
     public void clear() {
         buffer.clear();
+        disableSave = false;
         if (logWriter != null) {
             try {
                 logWriter.close();
             } catch (Exception e) {
                 Log.w(TAG, "Failed to close console log output stream", e);
             }
-            try {
-                var path = getPersistentPath();
-                var file = new File(path);
-                if (file.exists() && !file.delete())
-                    Log.w(TAG, fmt("Failed to delete console log file %s", path));
-            } catch (Exception e) {
-                Log.w(TAG, "Failed to delete console log file", e);
-            }
             logWriter = null;
         }
+        try {
+            var path = getPersistentPath();
+            var file = new File(path);
+            if (file.exists() && !file.delete())
+                Log.w(TAG, fmt("Failed to delete console log file %s", path));
+        } catch (Exception e) {
+            Log.w(TAG, "Failed to delete console log file", e);
+        }
     }
 
     @NonNull
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/ipc/vm/StartHandler.java b/app/src/main/java/cn/classfun/droidvm/daemon/ipc/vm/StartHandler.java
index 06c126125..97fad35a3 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/ipc/vm/StartHandler.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/ipc/vm/StartHandler.java
@@ -9,6 +9,7 @@
 import cn.classfun.droidvm.daemon.server.ClientRequest;
 import cn.classfun.droidvm.daemon.server.RequestException;
 import cn.classfun.droidvm.daemon.server.RequestHandler;
+import cn.classfun.droidvm.lib.store.vm.VMState;
 
 @AutoService(RequestHandler.class)
 public final class StartHandler extends RequestHandler {
@@ -28,6 +29,9 @@ public void handle(@NonNull ClientRequest request) throws Exception {
         var inst = vms.findById(vmId);
         if (inst == null)
             throw new RequestException(fmt("VM not found: %s", vmId));
+        if (params.optBoolean("clear_logs_before_start", false) &&
+            inst.getState() == VMState.STOPPED)
+            inst.clearLogs();
         if (!inst.start())
             throw new RequestException("failed to start VM");
     }
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/vm/VMInstance.java b/app/src/main/java/cn/classfun/droidvm/daemon/vm/VMInstance.java
index 114250ea3..d8750b0fd 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/vm/VMInstance.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/vm/VMInstance.java
@@ -305,6 +305,11 @@ public void joinThreads(long timeoutMs) {
         }
     }
 
+    public void clearLogs() {
+        for (var stream : getStreams())
+            stream.clear();
+    }
+
     private void runVM() {
         var inst = getBackendInstance();
         var vmId = getId().toString();
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/main/settings/MainSettingsFragment.java b/app/src/main/java/cn/classfun/droidvm/ui/main/settings/MainSettingsFragment.java
index d2cefe9ad..9f5cb65b6 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/main/settings/MainSettingsFragment.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/main/settings/MainSettingsFragment.java
@@ -45,6 +45,7 @@ public final class MainSettingsFragment extends MainBaseFragment {
     private static final long DAEMON_REFRESH_INTERVAL_MS = 1000L;
     private static final String PREFS_NAME = "droidvm_prefs";
     public static final String KEY_VM_AUTO_CONSOLE = "vm_auto_console";
+    public static final String KEY_VM_CLEAR_LOGS_BEFORE_START = "vm_clear_logs_before_start";
     public static final String KEY_AUTO_CHECK_UPDATE = "auto_check_update";
     private final Handler mainHandler = new Handler(Looper.getMainLooper());
     private final Runnable daemonStatusRefreshRunnable = this::periodRefreshDaemonStatus;
@@ -57,6 +58,7 @@ public final class MainSettingsFragment extends MainBaseFragment {
     private TextRowWidget itemDaemonStop;
     private TextRowWidget itemDaemonRestart;
     private SwitchRowWidget itemVMAutoConsole;
+    private SwitchRowWidget itemVMClearLogsBeforeStart;
     private TextRowWidget itemLicense;
     private SwitchRowWidget itemAutoCheckUpdate;
     private TextRowWidget itemCheckUpdate;
@@ -104,6 +106,7 @@ public void onViewCreated(@NonNull View view, @Nullable Bundle savedInstanceStat
         itemDaemonStop = view.findViewById(R.id.item_daemon_stop);
         itemDaemonRestart = view.findViewById(R.id.item_daemon_restart);
         itemVMAutoConsole = view.findViewById(R.id.item_vm_auto_console);
+        itemVMClearLogsBeforeStart = view.findViewById(R.id.item_vm_clear_logs_before_start);
         itemLicense = view.findViewById(R.id.item_license);
         itemAutoCheckUpdate = view.findViewById(R.id.item_auto_check_update);
         itemCheckUpdate = view.findViewById(R.id.item_check_update);
@@ -123,6 +126,7 @@ private void initSettings() {
         bindOnClick(itemDaemonStop, daemon::asyncStopDaemon);
         bindOnClick(itemDaemonRestart, daemon::asyncRestartDaemon);
         bindOnChecked(itemVMAutoConsole, KEY_VM_AUTO_CONSOLE, false);
+        bindOnChecked(itemVMClearLogsBeforeStart, KEY_VM_CLEAR_LOGS_BEFORE_START, false);
         bindOnChecked(itemAutoCheckUpdate, KEY_AUTO_CHECK_UPDATE, true);
         bindOnClick(itemCheckUpdate, this::checkUpdate);
         bindOnClick(itemPrivacy, this::showPrivacyPolicy);
@@ -159,6 +163,11 @@ public static boolean isAutoConsoleEnabled(@NonNull Context context) {
         return prefs.getBoolean(KEY_VM_AUTO_CONSOLE, false);
     }
 
+    public static boolean isClearLogsBeforeStartEnabled(@NonNull Context context) {
+        var prefs = context.getSharedPreferences(PREFS_NAME, Context.MODE_PRIVATE);
+        return prefs.getBoolean(KEY_VM_CLEAR_LOGS_BEFORE_START, false);
+    }
+
     public static boolean isAutoCheckUpdateEnabled(@NonNull Context context) {
         var prefs = context.getSharedPreferences(PREFS_NAME, Context.MODE_PRIVATE);
         return prefs.getBoolean(KEY_AUTO_CHECK_UPDATE, true);
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/VMActions.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/VMActions.java
index 1259a87fa..006db820d 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/VMActions.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/VMActions.java
@@ -2,6 +2,7 @@
 
 import static android.widget.Toast.LENGTH_LONG;
 import static cn.classfun.droidvm.ui.main.settings.MainSettingsFragment.isAutoConsoleEnabled;
+import static cn.classfun.droidvm.ui.main.settings.MainSettingsFragment.isClearLogsBeforeStartEnabled;
 
 import android.os.Handler;
 import android.util.Log;
@@ -44,6 +45,7 @@ public static void createAndStart(
         DaemonConnection.OnResponse onCreateModify = resp -> conn
             .buildRequest("vm_start")
             .copy(resp, "vm_id")
+            .put("clear_logs_before_start", isClearLogsBeforeStartEnabled(ui.getContext()))
             .onResponse(onStart)
             .onUnsuccessful(f)
             .onError(err)
diff --git a/app/src/main/res/layout/fragment_main_settings.xml b/app/src/main/res/layout/fragment_main_settings.xml
index fc86e16c8..94c6effc8 100644
--- a/app/src/main/res/layout/fragment_main_settings.xml
+++ b/app/src/main/res/layout/fragment_main_settings.xml
@@ -55,6 +55,14 @@
                     android:subtitle="@string/settings_vm_auto_console_summary"
                     android:text="@string/settings_vm_auto_console_title" />
 
+                <cn.classfun.droidvm.ui.widgets.row.SwitchRowWidget
+                    android:id="@+id/item_vm_clear_logs_before_start"
+                    android:layout_width="match_parent"
+                    android:layout_height="wrap_content"
+                    android:icon="@drawable/ic_logs"
+                    android:subtitle="@string/settings_vm_clear_logs_before_start_summary"
+                    android:text="@string/settings_vm_clear_logs_before_start_title" />
+
             </cn.classfun.droidvm.ui.widgets.container.CollapsibleContainer>
 
             <cn.classfun.droidvm.ui.widgets.container.CollapsibleContainer
diff --git a/app/src/main/res/values-zh-rCN/strings.xml b/app/src/main/res/values-zh-rCN/strings.xml
index 7c7031ba4..3dd9bcac3 100644
--- a/app/src/main/res/values-zh-rCN/strings.xml
+++ b/app/src/main/res/values-zh-rCN/strings.xml
@@ -293,6 +293,8 @@
     <string name="settings_category_vm">虚拟机</string>
     <string name="settings_vm_auto_console_title">启动时打开控制台</string>
     <string name="settings_vm_auto_console_summary">启动虚拟机时自动打开控制台</string>
+    <string name="settings_vm_clear_logs_before_start_title">启动前清理日志</string>
+    <string name="settings_vm_clear_logs_before_start_summary">启动虚拟机前清理该虚拟机的所有控制台日志</string>
     <string name="settings_category_about">关于</string>
     <string name="settings_feedback_title">问题反馈</string>
     <string name="settings_feedback_summary">在 GitHub 上报告问题</string>
diff --git a/app/src/main/res/values/strings.xml b/app/src/main/res/values/strings.xml
index 1d0e83c89..a8ef6579b 100644
--- a/app/src/main/res/values/strings.xml
+++ b/app/src/main/res/values/strings.xml
@@ -295,6 +295,8 @@
     <string name="settings_category_vm">Virtual Machine</string>
     <string name="settings_vm_auto_console_title">Open console on start</string>
     <string name="settings_vm_auto_console_summary">Automatically open the console when a VM is started</string>
+    <string name="settings_vm_clear_logs_before_start_title">Clear logs before start</string>
+    <string name="settings_vm_clear_logs_before_start_summary">Clear all console logs for the VM before it starts</string>
     <string name="settings_category_about">About</string>
     <string name="settings_feedback_title">Feedback</string>
     <string name="settings_feedback_summary">Report issues on GitHub</string>

From b55f59f46ef6b0538908c526c623c4bdf1470ede Mon Sep 17 00:00:00 2001
From: lateautumn233 <lateautumn233@foxmail.com>
Date: Thu, 11 Jun 2026 22:54:41 +0800
Subject: [PATCH 007/182] chore(ci): skip re-compression when uploading
 artifacts

- bump actions/upload-artifact to v7
- set archive: false to avoid re-zipping already-compressed apk
---
 .github/workflows/build.yml | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 48f253d69..24ba99086 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -76,13 +76,15 @@ jobs:
           echo "name=${ver}" >> "$GITHUB_OUTPUT"
 
       - name: Upload debug APK
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
         with:
           name: DroidVM-${{ steps.version.outputs.name }}-debug
           path: app/build/outputs/apk/debug/*.apk
+          archive: false
 
       - name: Upload release APK
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
         with:
           name: DroidVM-${{ steps.version.outputs.name }}-release
           path: app/build/outputs/apk/release/*.apk
+          archive: false

From 67aeb0fee28eea02c8c1d794799f6b232900bf02 Mon Sep 17 00:00:00 2001
From: lateautumn233 <lateautumn233@foxmail.com>
Date: Fri, 12 Jun 2026 02:41:36 +0800
Subject: [PATCH 008/182] feat(logs): add share functionality

- Added ShareUtils for exporting logs to system share sheet via FileProvider
- Integrated share option in Logs and VM Console menus
- Configured FileProvider with cache directory for safe file sharing
- Added bilingual string resources for share actions
- Refactored VMConsoleActivity to extract console text fetching logic
---
 app/src/main/AndroidManifest.xml              | 10 ++
 .../droidvm/lib/utils/ShareUtils.java         | 93 +++++++++++++++++++
 .../droidvm/ui/logs/LogsActivity.java         | 32 ++++++-
 .../ui/vm/console/VMConsoleActivity.java      | 58 +++++++++---
 app/src/main/res/drawable/ic_share.xml        |  9 ++
 app/src/main/res/menu/menu_logs.xml           |  6 ++
 app/src/main/res/menu/menu_vm_console.xml     |  5 +
 app/src/main/res/values-zh-rCN/strings.xml    |  3 +
 app/src/main/res/values/strings.xml           |  3 +
 app/src/main/res/xml/file_paths.xml           |  7 ++
 10 files changed, 209 insertions(+), 17 deletions(-)
 create mode 100644 app/src/main/java/cn/classfun/droidvm/lib/utils/ShareUtils.java
 create mode 100644 app/src/main/res/drawable/ic_share.xml
 create mode 100644 app/src/main/res/xml/file_paths.xml

diff --git a/app/src/main/AndroidManifest.xml b/app/src/main/AndroidManifest.xml
index b1a30d734..dcdd950ce 100644
--- a/app/src/main/AndroidManifest.xml
+++ b/app/src/main/AndroidManifest.xml
@@ -166,5 +166,15 @@
             android:theme="@style/Theme.DroidVM.NoActionBar"
             android:windowSoftInputMode="adjustResize" />
 
+        <provider
+            android:name="androidx.core.content.FileProvider"
+            android:authorities="${applicationId}.fileprovider"
+            android:exported="false"
+            android:grantUriPermissions="true">
+            <meta-data
+                android:name="android.support.FILE_PROVIDER_PATHS"
+                android:resource="@xml/file_paths" />
+        </provider>
+
     </application>
 </manifest>
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/utils/ShareUtils.java b/app/src/main/java/cn/classfun/droidvm/lib/utils/ShareUtils.java
new file mode 100644
index 000000000..66d28397b
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/lib/utils/ShareUtils.java
@@ -0,0 +1,93 @@
+package cn.classfun.droidvm.lib.utils;
+
+import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
+import static cn.classfun.droidvm.lib.utils.ThreadUtils.runOnPool;
+
+import android.content.Context;
+import android.content.Intent;
+import android.net.Uri;
+import android.os.Handler;
+import android.os.Looper;
+import android.util.Log;
+
+import androidx.core.content.FileProvider;
+
+import java.io.File;
+import java.io.FileOutputStream;
+import java.nio.charset.StandardCharsets;
+
+/** Helpers for exporting in-app text to the system share sheet (ACTION_SEND). */
+public final class ShareUtils {
+    private static final String TAG = "ShareUtils";
+    private static final String SHARE_DIR = "shared_logs";
+    private static final Handler MAIN = new Handler(Looper.getMainLooper());
+
+    private ShareUtils() {
+    }
+
+    /**
+     * Write {@code content} to a temp file under the cache dir and launch the system
+     * share sheet with it as a {@code text/plain} attachment. File write runs off the
+     * main thread; the chooser is launched back on the main thread. {@code onError} is
+     * invoked on the main thread with a message when sharing fails.
+     */
+    public static void shareTextAsFile(
+        Context context,
+        String filename,
+        String content,
+        String chooserTitle,
+        OnError onError
+    ) {
+        var appContext = context.getApplicationContext();
+        runOnPool(() -> {
+            try {
+                var dir = new File(appContext.getCacheDir(), SHARE_DIR);
+                if (!dir.exists() && !dir.mkdirs())
+                    throw new Exception("Failed to create share dir");
+                pruneOldFiles(dir);
+                var file = new File(dir, filename);
+                try (var os = new FileOutputStream(file)) {
+                    os.write(content.getBytes(StandardCharsets.UTF_8));
+                    os.flush();
+                }
+                var authority = fmt("%s.fileprovider", appContext.getPackageName());
+                var uri = FileProvider.getUriForFile(appContext, authority, file);
+                MAIN.post(() -> launchChooser(context, uri, chooserTitle, onError));
+            } catch (Exception e) {
+                Log.e(TAG, "Failed to prepare shared file", e);
+                MAIN.post(() -> {
+                    if (onError != null) onError.onError(e.getMessage());
+                });
+            }
+        });
+    }
+
+    private static void launchChooser(Context context, Uri uri, String title, OnError onError) {
+        try {
+            var send = new Intent(Intent.ACTION_SEND)
+                .setType("text/plain")
+                .putExtra(Intent.EXTRA_STREAM, uri)
+                .addFlags(Intent.FLAG_GRANT_READ_URI_PERMISSION);
+            var chooser = Intent.createChooser(send, title);
+            chooser.addFlags(Intent.FLAG_GRANT_READ_URI_PERMISSION);
+            context.startActivity(chooser);
+        } catch (Exception e) {
+            Log.e(TAG, "Failed to launch share chooser", e);
+            if (onError != null) onError.onError(e.getMessage());
+        }
+    }
+
+    /** Drop previously exported files so the cache dir does not grow unbounded. */
+    private static void pruneOldFiles(File dir) {
+        var files = dir.listFiles();
+        if (files == null) return;
+        for (var f : files) {
+            //noinspection ResultOfMethodCallIgnored
+            f.delete();
+        }
+    }
+
+    public interface OnError {
+        void onError(String message);
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/logs/LogsActivity.java b/app/src/main/java/cn/classfun/droidvm/ui/logs/LogsActivity.java
index eeff23798..206cd9b76 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/logs/LogsActivity.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/logs/LogsActivity.java
@@ -32,6 +32,7 @@
 
 import cn.classfun.droidvm.R;
 import cn.classfun.droidvm.lib.daemon.DaemonHelper;
+import cn.classfun.droidvm.lib.utils.ShareUtils;
 
 public final class LogsActivity extends AppCompatActivity {
     private static final int MAX_LOG_LINES = 10000;
@@ -88,6 +89,10 @@ private boolean onMenuItemClick(@NonNull MenuItem item) {
             saveLogs();
             return true;
         }
+        if (id == R.id.menu_share) {
+            shareLogs();
+            return true;
+        }
         if (id == R.id.menu_scroll_bottom) {
             scrollToBottom();
             return true;
@@ -99,10 +104,31 @@ private boolean onMenuItemClick(@NonNull MenuItem item) {
         return false;
     }
 
-    private void saveLogs() {
+    private String logFilename() {
         var sdf = new SimpleDateFormat("yyyyMMdd_HHmmss", Locale.getDefault());
-        var filename = fmt("droidvm_logs_%s.txt", sdf.format(new Date()));
-        saveLauncher.launch(filename);
+        return fmt("droidvm_logs_%s.txt", sdf.format(new Date()));
+    }
+
+    private void saveLogs() {
+        saveLauncher.launch(logFilename());
+    }
+
+    private void shareLogs() {
+        var sb = new StringBuilder();
+        for (var line : adapter.getLines()) {
+            sb.append(line).append('\n');
+        }
+        ShareUtils.shareTextAsFile(
+            this,
+            logFilename(),
+            sb.toString(),
+            getString(R.string.logs_share_title),
+            msg -> Toast.makeText(
+                this,
+                fmt(getString(R.string.logs_share_failed), msg),
+                Toast.LENGTH_LONG
+            ).show()
+        );
     }
 
     private void onSaveResult(Uri uri) {
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/console/VMConsoleActivity.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/console/VMConsoleActivity.java
index 3234178b8..c27fb9e52 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/console/VMConsoleActivity.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/console/VMConsoleActivity.java
@@ -50,6 +50,7 @@
 import cn.classfun.droidvm.lib.daemon.DaemonConnection;
 import cn.classfun.droidvm.lib.ui.termux.SimpleTerminalSessionClient;
 import cn.classfun.droidvm.lib.ui.termux.SimpleTerminalViewClient;
+import cn.classfun.droidvm.lib.utils.ShareUtils;
 
 public final class VMConsoleActivity extends AppCompatActivity {
     private static final String TAG = "VMConsoleActivity";
@@ -172,6 +173,9 @@ private boolean onMenuItemClicked(@NonNull MenuItem item) {
         if (id == R.id.action_save_log) {
             saveLogToFile();
             return true;
+        } else if (id == R.id.action_share_log) {
+            shareLog();
+            return true;
         } else if (id == R.id.action_clear_log) {
             clearLog();
             return true;
@@ -258,27 +262,18 @@ private void saveLogToFile() {
         ));
     }
 
-    private void onSaveLogResult(@Nullable Uri uri) {
-        if (uri == null) return;
-        Consumer<Integer> showToast = resId -> runOnUiThread(() ->
-            Toast.makeText(this, resId, LENGTH_SHORT).show());
+    /** Fetch the full console history via IPC; {@code onText} receives the decoded text. */
+    private void fetchConsoleText(Consumer<String> onText) {
         DaemonConnection.OnError err = e -> {
             Log.w(TAG, fmt("Failed to fetch log for %s stream %s", vmName, streamName), e);
-            showToast.accept(R.string.vm_info_logs_no_logs);
+            runOnUiThread(() ->
+                Toast.makeText(this, R.string.vm_info_logs_no_logs, LENGTH_SHORT).show());
         };
         DaemonConnection.OnUnsuccessful failed = resp ->
             err.onError(new Exception(resp.optString("message", "Unknown error")));
         DaemonConnection.OnResponse success = resp -> {
             var data = resp.optString(streamName, "");
-            var text = URLDecoder.decode(data, StandardCharsets.UTF_8);
-            try (var os = requireNonNull(getContentResolver().openOutputStream(uri))) {
-                os.write(text.getBytes(StandardCharsets.UTF_8));
-                os.flush();
-                showToast.accept(R.string.logs_save_success);
-            } catch (Exception e) {
-                Log.e(TAG, "Failed to save log file", e);
-                showToast.accept(R.string.vm_info_logs_save_failed);
-            }
+            onText.accept(URLDecoder.decode(data, StandardCharsets.UTF_8));
         };
         runOnPool(() -> DaemonConnection.getInstance().buildRequest("vm_console_history")
             .put("vm_id", vmId)
@@ -289,6 +284,41 @@ private void onSaveLogResult(@Nullable Uri uri) {
             .invoke());
     }
 
+    private void onSaveLogResult(@Nullable Uri uri) {
+        if (uri == null) return;
+        Consumer<Integer> showToast = resId -> runOnUiThread(() ->
+            Toast.makeText(this, resId, LENGTH_SHORT).show());
+        fetchConsoleText(text -> {
+            try (var os = requireNonNull(getContentResolver().openOutputStream(uri))) {
+                os.write(text.getBytes(StandardCharsets.UTF_8));
+                os.flush();
+                showToast.accept(R.string.logs_save_success);
+            } catch (Exception e) {
+                Log.e(TAG, "Failed to save log file", e);
+                showToast.accept(R.string.vm_info_logs_save_failed);
+            }
+        });
+    }
+
+    private void shareLog() {
+        var sdf = new SimpleDateFormat("yyyyMMdd_HHmmss", Locale.getDefault());
+        var filename = fmt(
+            "droidvm_console_%s_%s_%s.txt",
+            vmName, streamName, sdf.format(new Date())
+        );
+        fetchConsoleText(text -> ShareUtils.shareTextAsFile(
+            this,
+            filename,
+            text,
+            getString(R.string.logs_share_title),
+            msg -> runOnUiThread(() -> Toast.makeText(
+                this,
+                fmt(getString(R.string.logs_share_failed), msg),
+                Toast.LENGTH_LONG
+            ).show())
+        ));
+    }
+
     private void clearLog() {
         runOnPool(() -> DaemonConnection.getInstance().buildRequest("vm_console_clear")
             .put("vm_id", vmId)
diff --git a/app/src/main/res/drawable/ic_share.xml b/app/src/main/res/drawable/ic_share.xml
new file mode 100644
index 000000000..c423dd951
--- /dev/null
+++ b/app/src/main/res/drawable/ic_share.xml
@@ -0,0 +1,9 @@
+<vector xmlns:android="http://schemas.android.com/apk/res/android"
+    android:width="24dp"
+    android:height="24dp"
+    android:viewportWidth="24"
+    android:viewportHeight="24">
+    <path
+        android:fillColor="?attr/colorOnSurface"
+        android:pathData="M18,16.08C17.24,16.08 16.56,16.38 16.04,16.85L8.91,12.7C8.96,12.47 9,12.24 9,12C9,11.76 8.96,11.53 8.91,11.3L15.96,7.19C16.5,7.69 17.21,8 18,8A3,3 0 0,0 21,5A3,3 0 0,0 18,2A3,3 0 0,0 15,5C15,5.24 15.04,5.47 15.09,5.7L8.04,9.81C7.5,9.31 6.79,9 6,9A3,3 0 0,0 3,12A3,3 0 0,0 6,15C6.79,15 7.5,14.69 8.04,14.19L15.16,18.34C15.11,18.55 15.08,18.77 15.08,19C15.08,20.61 16.39,21.91 18,21.91C19.61,21.91 20.92,20.61 20.92,19A2.92,2.92 0 0,0 18,16.08Z" />
+</vector>
diff --git a/app/src/main/res/menu/menu_logs.xml b/app/src/main/res/menu/menu_logs.xml
index d15b80881..e8630f50c 100644
--- a/app/src/main/res/menu/menu_logs.xml
+++ b/app/src/main/res/menu/menu_logs.xml
@@ -8,6 +8,12 @@
         android:title="@string/logs_save"
         app:showAsAction="ifRoom" />
 
+    <item
+        android:id="@+id/menu_share"
+        android:icon="@drawable/ic_share"
+        android:title="@string/logs_share"
+        app:showAsAction="ifRoom" />
+
     <item
         android:id="@+id/menu_scroll_bottom"
         android:icon="@drawable/ic_expand_more"
diff --git a/app/src/main/res/menu/menu_vm_console.xml b/app/src/main/res/menu/menu_vm_console.xml
index db317c9f0..ef64a89d2 100644
--- a/app/src/main/res/menu/menu_vm_console.xml
+++ b/app/src/main/res/menu/menu_vm_console.xml
@@ -6,6 +6,11 @@
         android:icon="@drawable/ic_floppy"
         android:title="@string/logs_save" />
 
+    <item
+        android:id="@+id/action_share_log"
+        android:icon="@drawable/ic_share"
+        android:title="@string/logs_share" />
+
     <item
         android:id="@+id/action_clear_log"
         android:icon="@drawable/ic_delete"
diff --git a/app/src/main/res/values-zh-rCN/strings.xml b/app/src/main/res/values-zh-rCN/strings.xml
index 3dd9bcac3..1ba620f12 100644
--- a/app/src/main/res/values-zh-rCN/strings.xml
+++ b/app/src/main/res/values-zh-rCN/strings.xml
@@ -737,6 +737,9 @@
     <string name="logs_save">保存</string>
     <string name="logs_save_success">日志保存成功</string>
     <string name="logs_save_failed">保存日志失败：%1$s</string>
+    <string name="logs_share">分享</string>
+    <string name="logs_share_title">分享日志</string>
+    <string name="logs_share_failed">分享日志失败：%1$s</string>
 
     <string name="privacy_step_title">隐私政策</string>
     <string name="privacy_step_desc">继续之前请阅读并同意隐私政策</string>
diff --git a/app/src/main/res/values/strings.xml b/app/src/main/res/values/strings.xml
index a8ef6579b..67e7b2cd5 100644
--- a/app/src/main/res/values/strings.xml
+++ b/app/src/main/res/values/strings.xml
@@ -776,6 +776,9 @@
     <string name="logs_save">Save</string>
     <string name="logs_save_success">Logs saved successfully</string>
     <string name="logs_save_failed">Failed to save logs: %1$s</string>
+    <string name="logs_share">Share</string>
+    <string name="logs_share_title">Share logs</string>
+    <string name="logs_share_failed">Failed to share logs: %1$s</string>
 
     <string name="privacy_step_title">Privacy Policy</string>
     <string name="privacy_step_desc">Please read and agree to the privacy policy before continuing</string>
diff --git a/app/src/main/res/xml/file_paths.xml b/app/src/main/res/xml/file_paths.xml
new file mode 100644
index 000000000..fa1e5caaa
--- /dev/null
+++ b/app/src/main/res/xml/file_paths.xml
@@ -0,0 +1,7 @@
+<?xml version="1.0" encoding="utf-8"?>
+<paths>
+    <!-- Temp files exported for sharing via FileProvider -->
+    <cache-path
+        name="shared_logs"
+        path="shared_logs/" />
+</paths>

From 033ea83104b23605e33d808dd160d36e12b148a1 Mon Sep 17 00:00:00 2001
From: HuJK <gh@hujk.org>
Date: Sun, 14 Jun 2026 16:31:00 +0800
Subject: [PATCH 009/182] rework(network): introduce bridge backends and VLAN
 networking

Rework VM networking around typed network and NIC config, Linux/gVisor bridge backends, VLAN-aware L2/L3 behavior, bridgedhcp PD/DHCP service integration, pbridge/gvswitch tooling, and per-NIC static leases/port forwards.

Add the netbox helper and focused network/store tests, and move the old VM-level port-forward editor into NIC/network configuration.

Co-authored-by: KusakabeShi <github@kskb.eu.org>
Co-authored-by: Claude Fable 5 <noreply@anthropic.com>
---
 app/src/main/AndroidManifest.xml              |   7 +
 .../daemon/ipc/network/InfoHandler.java       |   7 +-
 .../ipc/network/ListUplinksHandler.java       |  24 +
 .../daemon/ipc/network/PdReleaseHandler.java  |  36 +
 .../daemon/ipc/network/PdRenewHandler.java    |  36 +
 .../daemon/ipc/network/StopHandler.java       |   3 +
 .../daemon/ipc/network/ToolLogHandler.java    |  41 +
 .../daemon/ipc/vm/PortForwardListHandler.java |  37 -
 .../daemon/ipc/vm/PortForwardSetHandler.java  |  41 -
 .../daemon/network/NetworkInstance.java       | 255 +++--
 .../daemon/network/NetworkInstanceStore.java  |  28 +-
 .../daemon/network/backend/BackendBase.java   |   2 -
 .../daemon/network/backend/BridgeBackend.java | 147 +++
 .../daemon/network/backend/BridgeDhcp.java    | 490 +++++++++
 .../network/backend/DefaultRouterWatcher.java | 270 ++++-
 .../daemon/network/backend/Dnsmasq.java       | 217 ----
 .../network/backend/FirewallHelper.java       |  38 +-
 .../network/backend/LinuxBridgeBackend.java   | 751 ++++++++++++++
 .../daemon/network/backend/LinuxNetwork.java  | 415 ++++----
 .../network/backend/ManagedProcess.java       | 196 ++++
 .../daemon/network/backend/Netbox.java        | 279 +++++
 .../daemon/network/backend/Pbridge.java       |  94 ++
 .../network/backend/UplinkResolver.java       | 251 +++++
 .../backend/gvisor/GvisorBridgeBackend.java   | 518 ++++++++++
 .../backend/gvisor/GvswitchClient.java        | 213 ++++
 .../backend/gvisor/GvswitchConfigBuilder.java | 123 +++
 .../network/backend/iptables/ChainInfo.java   |  56 +-
 .../backend/iptables/IptablesBackend.java     | 157 ++-
 .../iptables/IptablesNetworkInstance.java     | 129 ++-
 .../daemon/network/backend/pd/Duid.java       |  50 +
 .../droidvm/daemon/server/ServerContext.java  |   3 +
 .../droidvm/daemon/vm/VMInstance.java         | 120 +--
 .../droidvm/daemon/vm/VMPortForwarder.java    | 359 -------
 .../cn/classfun/droidvm/lib/Constants.java    |   7 +
 .../droidvm/lib/network/IPv4Network.java      |  13 +
 .../droidvm/lib/network/IPv6Network.java      |  18 +
 .../droidvm/lib/store/network/BridgeType.java |  27 +
 .../droidvm/lib/store/network/Ipv6Source.java |  27 +
 .../lib/store/network/NetworkConfig.java      | 125 +++
 .../store/network/NetworkConfigValidator.java | 181 ++++
 .../lib/store/network/NetworkStore.java       |  22 +
 .../droidvm/lib/store/network/UplinkMode.java |  28 +
 .../droidvm/lib/store/network/VlanConfig.java | 235 +++++
 .../droidvm/lib/store/vm/VMConfig.java        |  11 +
 .../droidvm/lib/store/vm/VMNicConfig.java     | 322 ++++++
 .../classfun/droidvm/lib/utils/NetUtils.java  |   4 +
 .../ui/main/network/NetworkAdapter.java       |  24 +-
 .../ui/network/edit/NetworkEditActivity.java  | 957 +++++++++---------
 .../ui/network/edit/VlanCardBinder.java       | 237 +++++
 .../ui/network/info/NetworkInfoActivity.java  | 325 +++++-
 .../network/info/NetworkToolLogActivity.java  |  94 ++
 .../droidvm/ui/vm/edit/VMEditActivity.java    |   5 +
 .../droidvm/ui/vm/edit/base/VMEditTab.java    |   6 -
 .../ui/vm/edit/network/VMNetEditAdapter.java  | 353 ++++++-
 .../vm/edit/network/VMNetEditViewHolder.java  |  45 +
 .../portforward/PortForwardEditAdapter.java   | 174 ----
 .../PortForwardEditViewHolder.java            |  66 --
 .../portforward/VMEditPortForwardTab.java     |  66 --
 .../droidvm/ui/vm/info/VMInfoActivity.java    | 144 +--
 .../ui/widgets/row/SwitchRowWidget.java       |  13 +
 .../main/res/layout/activity_network_edit.xml | 189 ++--
 .../res/layout/activity_network_tool_log.xml  |  40 +
 app/src/main/res/layout/activity_vm_edit.xml  |   7 -
 app/src/main/res/layout/activity_vm_info.xml  |  11 -
 .../res/layout/dialog_port_forward_edit.xml   |  16 -
 app/src/main/res/layout/item_network_pd.xml   |  71 ++
 app/src/main/res/layout/item_network_vlan.xml | 367 +++++++
 .../res/layout/item_port_forward_edit.xml     | 210 ----
 app/src/main/res/layout/item_vm_net_edit.xml  | 220 ++++
 .../layout/partial_vm_edit_port_forward.xml   |  22 -
 app/src/main/res/values-zh-rCN/strings.xml    |  99 +-
 app/src/main/res/values/strings.xml           |  99 +-
 app/src/main/rust/netbox/.gitignore           |   2 +
 app/src/main/rust/netbox/Cargo.lock           | 574 +++++++++++
 app/src/main/rust/netbox/Cargo.toml           |  27 +
 app/src/main/rust/netbox/build.sh             |  40 +
 app/src/main/rust/netbox/src/main.rs          | 263 +++++
 app/src/main/rust/netbox/src/nl.rs            | 762 ++++++++++++++
 app/src/main/rust/netbox/src/tap.rs           |  48 +
 .../lib/network/IPNetworkOffsetTest.java      |  67 ++
 .../network/NetworkConfigValidatorTest.java   | 162 +++
 .../lib/store/network/VlanConfigPdTest.java   |  57 ++
 .../droidvm/lib/store/vm/PortForwardTest.java |  82 ++
 83 files changed, 9838 insertions(+), 2519 deletions(-)
 create mode 100644 app/src/main/java/cn/classfun/droidvm/daemon/ipc/network/ListUplinksHandler.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/daemon/ipc/network/PdReleaseHandler.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/daemon/ipc/network/PdRenewHandler.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/daemon/ipc/network/ToolLogHandler.java
 delete mode 100644 app/src/main/java/cn/classfun/droidvm/daemon/ipc/vm/PortForwardListHandler.java
 delete mode 100644 app/src/main/java/cn/classfun/droidvm/daemon/ipc/vm/PortForwardSetHandler.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/daemon/network/backend/BridgeBackend.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/daemon/network/backend/BridgeDhcp.java
 delete mode 100644 app/src/main/java/cn/classfun/droidvm/daemon/network/backend/Dnsmasq.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/daemon/network/backend/LinuxBridgeBackend.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/daemon/network/backend/ManagedProcess.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/daemon/network/backend/Netbox.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/daemon/network/backend/Pbridge.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/daemon/network/backend/UplinkResolver.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/daemon/network/backend/gvisor/GvisorBridgeBackend.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/daemon/network/backend/gvisor/GvswitchClient.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/daemon/network/backend/gvisor/GvswitchConfigBuilder.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/daemon/network/backend/pd/Duid.java
 delete mode 100644 app/src/main/java/cn/classfun/droidvm/daemon/vm/VMPortForwarder.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/lib/store/network/BridgeType.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/lib/store/network/Ipv6Source.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/lib/store/network/NetworkConfigValidator.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/lib/store/network/UplinkMode.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/lib/store/network/VlanConfig.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/lib/store/vm/VMNicConfig.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/ui/network/edit/VlanCardBinder.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/ui/network/info/NetworkToolLogActivity.java
 delete mode 100644 app/src/main/java/cn/classfun/droidvm/ui/vm/edit/portforward/PortForwardEditAdapter.java
 delete mode 100644 app/src/main/java/cn/classfun/droidvm/ui/vm/edit/portforward/PortForwardEditViewHolder.java
 delete mode 100644 app/src/main/java/cn/classfun/droidvm/ui/vm/edit/portforward/VMEditPortForwardTab.java
 create mode 100644 app/src/main/res/layout/activity_network_tool_log.xml
 delete mode 100644 app/src/main/res/layout/dialog_port_forward_edit.xml
 create mode 100644 app/src/main/res/layout/item_network_pd.xml
 create mode 100644 app/src/main/res/layout/item_network_vlan.xml
 delete mode 100644 app/src/main/res/layout/item_port_forward_edit.xml
 delete mode 100644 app/src/main/res/layout/partial_vm_edit_port_forward.xml
 create mode 100644 app/src/main/rust/netbox/.gitignore
 create mode 100644 app/src/main/rust/netbox/Cargo.lock
 create mode 100644 app/src/main/rust/netbox/Cargo.toml
 create mode 100755 app/src/main/rust/netbox/build.sh
 create mode 100644 app/src/main/rust/netbox/src/main.rs
 create mode 100644 app/src/main/rust/netbox/src/nl.rs
 create mode 100644 app/src/main/rust/netbox/src/tap.rs
 create mode 100644 app/src/test/java/cn/classfun/droidvm/lib/network/IPNetworkOffsetTest.java
 create mode 100644 app/src/test/java/cn/classfun/droidvm/lib/store/network/NetworkConfigValidatorTest.java
 create mode 100644 app/src/test/java/cn/classfun/droidvm/lib/store/network/VlanConfigPdTest.java
 create mode 100644 app/src/test/java/cn/classfun/droidvm/lib/store/vm/PortForwardTest.java

diff --git a/app/src/main/AndroidManifest.xml b/app/src/main/AndroidManifest.xml
index dcdd950ce..ffe9d0410 100644
--- a/app/src/main/AndroidManifest.xml
+++ b/app/src/main/AndroidManifest.xml
@@ -152,6 +152,13 @@
             android:theme="@style/Theme.DroidVM.NoActionBar"
             android:windowSoftInputMode="adjustResize" />
 
+        <activity
+            android:name=".ui.network.info.NetworkToolLogActivity"
+            android:configChanges="orientation|screenSize|keyboardHidden|screenLayout|smallestScreenSize"
+            android:exported="false"
+            android:theme="@style/Theme.DroidVM.NoActionBar"
+            android:windowSoftInputMode="adjustResize" />
+
         <activity
             android:name=".ui.logs.LogsActivity"
             android:configChanges="orientation|screenSize|keyboardHidden|screenLayout|smallestScreenSize"
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/ipc/network/InfoHandler.java b/app/src/main/java/cn/classfun/droidvm/daemon/ipc/network/InfoHandler.java
index d2f278fa0..33e194943 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/ipc/network/InfoHandler.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/ipc/network/InfoHandler.java
@@ -32,12 +32,15 @@ public void handle(@NonNull ClientRequest request) throws Exception {
         var res = request.res();
         var data = inst.toInfoJson();
         data.put("state", inst.getState().name());
+        data.put("tools", inst.listTools());
         if (inst.getState() == NetworkState.RUNNING) {
             data.put("live_addresses", inst.listAddresses());
+            var entries = inst.listAddressEntries();
+            if (entries != null) data.put("address_entries", entries);
+            data.put("pd", inst.listPdStatus());
             data.put("live_interfaces", inst.listInterfaces());
             data.put("neighbors", inst.listNeighbors());
-            if (inst.item.optBoolean("dhcp_enabled", false))
-                data.put("dhcp_leases", inst.listDhcpLeases());
+            data.put("dhcp_leases", inst.listDhcpLeases());
         }
         res.put("data", data);
     }
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/ipc/network/ListUplinksHandler.java b/app/src/main/java/cn/classfun/droidvm/daemon/ipc/network/ListUplinksHandler.java
new file mode 100644
index 000000000..98c286258
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/ipc/network/ListUplinksHandler.java
@@ -0,0 +1,24 @@
+package cn.classfun.droidvm.daemon.ipc.network;
+
+import androidx.annotation.NonNull;
+
+import com.google.auto.service.AutoService;
+
+import cn.classfun.droidvm.daemon.network.backend.UplinkResolver;
+import cn.classfun.droidvm.daemon.server.ClientRequest;
+import cn.classfun.droidvm.daemon.server.RequestHandler;
+
+@AutoService(RequestHandler.class)
+public final class ListUplinksHandler extends RequestHandler {
+    @NonNull
+    @Override
+    public String getName() {
+        return "network_list_uplinks";
+    }
+
+    @Override
+    public void handle(@NonNull ClientRequest request) throws Exception {
+        var res = request.res();
+        res.put("data", UplinkResolver.listUplinksJson());
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/ipc/network/PdReleaseHandler.java b/app/src/main/java/cn/classfun/droidvm/daemon/ipc/network/PdReleaseHandler.java
new file mode 100644
index 000000000..93bc9245d
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/ipc/network/PdReleaseHandler.java
@@ -0,0 +1,36 @@
+package cn.classfun.droidvm.daemon.ipc.network;
+
+import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
+
+import androidx.annotation.NonNull;
+
+import com.google.auto.service.AutoService;
+
+import cn.classfun.droidvm.daemon.server.ClientRequest;
+import cn.classfun.droidvm.daemon.server.RequestException;
+import cn.classfun.droidvm.daemon.server.RequestHandler;
+
+@AutoService(RequestHandler.class)
+public final class PdReleaseHandler extends RequestHandler {
+    @NonNull
+    @Override
+    public String getName() {
+        return "network_pd_release";
+    }
+
+    @Override
+    public void handle(@NonNull ClientRequest request) throws Exception {
+        var params = request.getParams();
+        var id = params.optString("network_id", "");
+        if (id.isEmpty())
+            throw new RequestException("missing network_id");
+        var vlanId = params.optInt("vlan_id", -1);
+        if (vlanId < 0)
+            throw new RequestException("missing vlan_id");
+        var inst = request.getContext().getNetworks().findById(id);
+        if (inst == null)
+            throw new RequestException(fmt("network %s not found", id));
+        if (!inst.releasePd(vlanId))
+            throw new RequestException("failed to release PD delegation");
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/ipc/network/PdRenewHandler.java b/app/src/main/java/cn/classfun/droidvm/daemon/ipc/network/PdRenewHandler.java
new file mode 100644
index 000000000..1a253a94a
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/ipc/network/PdRenewHandler.java
@@ -0,0 +1,36 @@
+package cn.classfun.droidvm.daemon.ipc.network;
+
+import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
+
+import androidx.annotation.NonNull;
+
+import com.google.auto.service.AutoService;
+
+import cn.classfun.droidvm.daemon.server.ClientRequest;
+import cn.classfun.droidvm.daemon.server.RequestException;
+import cn.classfun.droidvm.daemon.server.RequestHandler;
+
+@AutoService(RequestHandler.class)
+public final class PdRenewHandler extends RequestHandler {
+    @NonNull
+    @Override
+    public String getName() {
+        return "network_pd_renew";
+    }
+
+    @Override
+    public void handle(@NonNull ClientRequest request) throws Exception {
+        var params = request.getParams();
+        var id = params.optString("network_id", "");
+        if (id.isEmpty())
+            throw new RequestException("missing network_id");
+        var vlanId = params.optInt("vlan_id", -1);
+        if (vlanId < 0)
+            throw new RequestException("missing vlan_id");
+        var inst = request.getContext().getNetworks().findById(id);
+        if (inst == null)
+            throw new RequestException(fmt("network %s not found", id));
+        if (!inst.renewPd(vlanId))
+            throw new RequestException("failed to renew PD delegation");
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/ipc/network/StopHandler.java b/app/src/main/java/cn/classfun/droidvm/daemon/ipc/network/StopHandler.java
index bdda0d79c..fe81b8008 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/ipc/network/StopHandler.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/ipc/network/StopHandler.java
@@ -26,6 +26,9 @@ public void handle(@NonNull ClientRequest request) throws Exception {
         var inst = request.getContext().getNetworks().findById(id);
         if (inst == null)
             throw new RequestException(fmt("network %s not found", id));
+        var vm = inst.findRunningVMUsing();
+        if (vm != null)
+            throw new RequestException(fmt("network is in use by running VM %s", vm));
         if (!inst.stop())
             throw new RequestException("failed to stop network");
     }
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/ipc/network/ToolLogHandler.java b/app/src/main/java/cn/classfun/droidvm/daemon/ipc/network/ToolLogHandler.java
new file mode 100644
index 000000000..bbd4399e7
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/ipc/network/ToolLogHandler.java
@@ -0,0 +1,41 @@
+package cn.classfun.droidvm.daemon.ipc.network;
+
+import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
+
+import androidx.annotation.NonNull;
+
+import com.google.auto.service.AutoService;
+
+import org.json.JSONArray;
+
+import cn.classfun.droidvm.daemon.server.ClientRequest;
+import cn.classfun.droidvm.daemon.server.RequestException;
+import cn.classfun.droidvm.daemon.server.RequestHandler;
+
+/** Returns the captured stdout/stderr of one of a network's helper tools. */
+@AutoService(RequestHandler.class)
+public final class ToolLogHandler extends RequestHandler {
+    @NonNull
+    @Override
+    public String getName() {
+        return "network_tool_log";
+    }
+
+    @Override
+    public void handle(@NonNull ClientRequest request) throws Exception {
+        var params = request.getParams();
+        var id = params.optString("network_id", "");
+        if (id.isEmpty())
+            throw new RequestException("missing network_id");
+        var tool = params.optString("tool", "");
+        if (tool.isEmpty())
+            throw new RequestException("missing tool");
+        var inst = request.getContext().getNetworks().findById(id);
+        if (inst == null)
+            throw new RequestException(fmt("network %s not found", id));
+        var lines = inst.toolLog(tool);
+        if (lines == null)
+            throw new RequestException(fmt("tool %s not available", tool));
+        request.res().put("lines", new JSONArray(lines));
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/ipc/vm/PortForwardListHandler.java b/app/src/main/java/cn/classfun/droidvm/daemon/ipc/vm/PortForwardListHandler.java
deleted file mode 100644
index f07796df8..000000000
--- a/app/src/main/java/cn/classfun/droidvm/daemon/ipc/vm/PortForwardListHandler.java
+++ /dev/null
@@ -1,37 +0,0 @@
-package cn.classfun.droidvm.daemon.ipc.vm;
-
-import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
-
-import androidx.annotation.NonNull;
-
-import com.google.auto.service.AutoService;
-
-import org.json.JSONObject;
-
-import cn.classfun.droidvm.daemon.server.ClientRequest;
-import cn.classfun.droidvm.daemon.server.RequestException;
-import cn.classfun.droidvm.daemon.server.RequestHandler;
-
-@AutoService(RequestHandler.class)
-public final class PortForwardListHandler extends RequestHandler {
-    @NonNull
-    @Override
-    public String getName() {
-        return "vm_port_forward_list";
-    }
-
-    @Override
-    public void handle(@NonNull ClientRequest request) throws Exception {
-        var params = request.getParams();
-        var id = params.optString("vm_id", "");
-        if (id.isEmpty())
-            throw new RequestException("missing vm_id");
-        var vm = request.getContext().getVMs().findById(id);
-        if (vm == null)
-            throw new RequestException(fmt("VM %s not found", id));
-        var data = new JSONObject();
-        data.put("configured", vm.getConfiguredPortForwards());
-        data.put("active", vm.getActivePortForwards());
-        request.res().put("data", data);
-    }
-}
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/ipc/vm/PortForwardSetHandler.java b/app/src/main/java/cn/classfun/droidvm/daemon/ipc/vm/PortForwardSetHandler.java
deleted file mode 100644
index 1a57f2119..000000000
--- a/app/src/main/java/cn/classfun/droidvm/daemon/ipc/vm/PortForwardSetHandler.java
+++ /dev/null
@@ -1,41 +0,0 @@
-package cn.classfun.droidvm.daemon.ipc.vm;
-
-import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
-
-import androidx.annotation.NonNull;
-
-import com.google.auto.service.AutoService;
-
-import org.json.JSONArray;
-import org.json.JSONObject;
-
-import cn.classfun.droidvm.daemon.server.ClientRequest;
-import cn.classfun.droidvm.daemon.server.RequestException;
-import cn.classfun.droidvm.daemon.server.RequestHandler;
-
-/** IPC: hot-applies {@code rules} to a running VM ({@code vm_id}); the frontend owns persistence. */
-@AutoService(RequestHandler.class)
-public final class PortForwardSetHandler extends RequestHandler {
-    @NonNull
-    @Override
-    public String getName() {
-        return "vm_port_forward_set";
-    }
-
-    @Override
-    public void handle(@NonNull ClientRequest request) throws Exception {
-        var params = request.getParams();
-        var id = params.optString("vm_id", "");
-        if (id.isEmpty())
-            throw new RequestException("missing vm_id");
-        var vm = request.getContext().getVMs().findById(id);
-        if (vm == null)
-            throw new RequestException(fmt("VM %s not found", id));
-        var rules = params.optJSONArray("rules");
-        if (rules == null) rules = new JSONArray();
-        vm.applyPortForwards(rules);
-        var data = new JSONObject();
-        data.put("active", vm.getActivePortForwards());
-        request.res().put("data", data);
-    }
-}
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/network/NetworkInstance.java b/app/src/main/java/cn/classfun/droidvm/daemon/network/NetworkInstance.java
index dd0548069..9c1834ab0 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/network/NetworkInstance.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/network/NetworkInstance.java
@@ -5,25 +5,32 @@
 import android.util.Log;
 
 import androidx.annotation.NonNull;
+import androidx.annotation.Nullable;
 
 import org.json.JSONArray;
 import org.json.JSONException;
 import org.json.JSONObject;
 
-import cn.classfun.droidvm.daemon.network.backend.Dnsmasq;
+import java.util.Map;
+
+import cn.classfun.droidvm.daemon.network.backend.BridgeBackend;
+import cn.classfun.droidvm.daemon.network.backend.LinuxBridgeBackend;
+import cn.classfun.droidvm.daemon.network.backend.gvisor.GvisorBridgeBackend;
 import cn.classfun.droidvm.lib.network.IPNetwork;
-import cn.classfun.droidvm.lib.network.IPv4Network;
 import cn.classfun.droidvm.lib.network.IPv6Network;
 import cn.classfun.droidvm.lib.store.base.DataItem;
+import cn.classfun.droidvm.lib.store.network.BridgeType;
 import cn.classfun.droidvm.lib.store.network.NetworkConfig;
 import cn.classfun.droidvm.lib.store.network.NetworkState;
+import cn.classfun.droidvm.lib.store.vm.VMNicConfig;
+import cn.classfun.droidvm.lib.store.vm.VMState;
 
 @SuppressWarnings({"unused", "BooleanMethodIsAlwaysInverted"})
 public final class NetworkInstance extends NetworkConfig {
     private static final String TAG = "NetworkInstance";
     private NetworkState state = NetworkState.STOPPED;
     private final NetworkInstanceStore store;
-    private Dnsmasq dnsmasq = null;
+    private BridgeBackend backend = null;
 
     public NetworkInstance(
         @NonNull NetworkInstanceStore store
@@ -42,6 +49,11 @@ public NetworkInstance(
             state = NetworkState.valueOf(obj.getString("state"));
     }
 
+    @NonNull
+    public NetworkInstanceStore getStore() {
+        return store;
+    }
+
     @NonNull
     public NetworkState getState() {
         return state;
@@ -51,14 +63,16 @@ public void setState(@NonNull NetworkState state) {
         this.state = state;
     }
 
-    public boolean isDnsmasqRunning() {
-        if (dnsmasq == null) return false;
-        return dnsmasq.isDnsmasqRunning();
+    @NonNull
+    private BridgeBackend createBackend() {
+        if (getBridgeType() == BridgeType.GVISOR)
+            return new GvisorBridgeBackend(this);
+        return new LinuxBridgeBackend(this);
     }
 
-    public int getDnsmasqExitCode() {
-        if (dnsmasq == null) return -1;
-        return dnsmasq.getDnsmasqExitCode();
+    @Nullable
+    public BridgeBackend getBackend() {
+        return backend;
     }
 
     public boolean start() {
@@ -66,104 +80,169 @@ public boolean start() {
             Log.w(TAG, fmt("Network %s not stopped, cannot start", getName()));
             return false;
         }
-        var br = item.optString("bridge_name", "");
         try {
             state = NetworkState.STARTING;
-            if (store.backend.isInterfaceExists(br)) {
-                Log.w(TAG, fmt("Interface %s already exists, deleting", br));
-                store.backend.deleteBridge(br);
-            }
-            if (!store.backend.createBridge(br))
-                throw new RuntimeException(fmt("Failed to create bridge %s", br));
-            if (!store.backend.isInterfaceExists(br))
-                throw new RuntimeException(fmt("Interface %s is not a bridge", br));
-            var mac = item.optString("mac_address", "");
-            if (!mac.isEmpty() && !store.backend.setMacAddress(br, mac))
-                Log.w(TAG, fmt("Failed to set MAC %s on %s", mac, br));
-            store.backend.setStp(br, item.optBoolean("stp", false));
-            item.get("ipv4_addresses").forEachArray(a -> {
-                try {
-                    var addr = IPv4Network.parse(a.asString());
-                    if (!store.backend.addAddress(br, addr))
-                        Log.w(TAG, fmt("Failed to add IPv4 %s to %s", addr, br));
-                } catch (Exception ignored) {
-                }
-            });
-            item.get("ipv6_addresses").forEachArray(a -> {
-                try {
-                    var addr = IPv6Network.parse(a.asString());
-                    if (!store.backend.addAddress(br, addr))
-                        Log.w(TAG, fmt("Failed to add IPv6 %s to %s", addr, br));
-                } catch (Exception ignored) {
-                }
-            });
-            if (!store.backend.setLinkState(br, true))
-                throw new RuntimeException(fmt("Failed to bring up bridge %s", br));
-            store.firewall.initNetwork(this);
-            store.backend.populateRuleRoute(this);
-            store.context.getRouterWatcher().setForNewNetwork(this);
-            var dhcpEnabled = item.optBoolean("dhcp_enabled", false);
-            var dhcpStart = item.optString("dhcp_range_start", "");
-            var dhcpEnd = item.optString("dhcp_range_end", "");
-            if (dhcpEnabled && !dhcpStart.isEmpty() && !dhcpEnd.isEmpty()) {
-                if (dnsmasq == null) dnsmasq = new Dnsmasq(this);
-                dnsmasq.startDnsmasq();
-            }
+            backend = createBackend();
+            backend.start();
             state = NetworkState.RUNNING;
-            Log.i(TAG, fmt("Network %s started on bridge %s", getName(), br));
+            Log.i(TAG, fmt(
+                "Network %s started on bridge %s", getName(), getBridgeName()
+            ));
             return true;
         } catch (Exception e) {
             Log.e(TAG, fmt("Failed to start network %s", getName()), e);
+            if (backend != null) {
+                try {
+                    backend.stop();
+                } catch (Exception cleanup) {
+                    Log.w(TAG, "Cleanup after failed start failed", cleanup);
+                }
+                backend = null;
+            }
             state = NetworkState.STOPPED;
-            store.backend.deleteBridge(br);
             return false;
         }
     }
 
     public boolean stop() {
+        return stop(false);
+    }
+
+    public boolean stop(boolean force) {
         if (state != NetworkState.RUNNING) {
             Log.w(TAG, fmt("Network %s not running, cannot stop", getName()));
             return false;
         }
+        if (!force) {
+            var vm = findRunningVMUsing();
+            if (vm != null) {
+                Log.w(TAG, fmt(
+                    "Network %s is in use by running VM %s, cannot stop",
+                    getName(), vm
+                ));
+                return false;
+            }
+        }
         state = NetworkState.STOPPING;
-        var br = item.optString("bridge_name", "");
-        if (dnsmasq != null)
-            dnsmasq.stopDnsmasq();
-        store.firewall.deinitNetwork(this);
-        store.backend.setLinkState(br, false);
-        if (!store.backend.deleteBridge(br))
-            Log.w(TAG, fmt("Failed to delete bridge %s", br));
+        if (backend != null) {
+            backend.stop();
+            backend = null;
+        }
         state = NetworkState.STOPPED;
         Log.i(TAG, fmt("Network %s stopped", getName()));
         return true;
     }
 
-    public boolean addAddress(@NonNull IPNetwork<?, ?, ?> cidr) {
-        if (!store.backend.addAddress(item.optString("bridge_name", ""), cidr)) return false;
-        var key = (cidr instanceof IPv6Network) ? "ipv6_addresses" : "ipv4_addresses";
-        var arr = item.get(key);
-        if (arr.is(DataItem.Type.NULL)) {
-            arr = DataItem.newArray();
-            item.set(key, arr);
+    /** Name of a non-stopped VM with a NIC on this network, or null. */
+    @Nullable
+    public String findRunningVMUsing() {
+        var vms = store.context.getVMs();
+        if (vms == null) return null;
+        var netId = getId().toString();
+        var found = new String[1];
+        vms.forEach((vmId, vm) -> {
+            if (found[0] != null) return;
+            if (vm.getState() == VMState.STOPPED) return;
+            vm.forEachNic(nic -> {
+                if (netId.equals(nic.getNetworkId()))
+                    found[0] = vm.getName();
+            });
+        });
+        return found[0];
+    }
+
+    public void attachNic(@NonNull VMNicConfig nic, @NonNull String tapName) throws Exception {
+        if (state != NetworkState.RUNNING || backend == null)
+            throw new IllegalStateException(fmt("Network %s is not running", getName()));
+        // The NIC may carry L3-only options (DHCP static lease / port forwards)
+        // kept in its saved config for when it moves back to an L3 network.
+        // Strip the ones this network can't honour into a throwaway copy so the
+        // VM still boots; the stored config is untouched, and genuine
+        // misconfigurations still fail validation below.
+        var dropped = new java.util.ArrayList<String>();
+        var effective = nic.sanitizedFor(this, dropped);
+        if (!dropped.isEmpty())
+            Log.i(TAG, fmt("NIC %s on network %s: ignoring unsupported options: %s",
+                tapName, getName(), String.join(", ", dropped)));
+        effective.validate(this);
+        backend.attachNic(effective, tapName);
+    }
+
+    public void detachNic(@NonNull VMNicConfig nic, @NonNull String tapName) {
+        if (backend == null) return;
+        try {
+            backend.detachNic(nic, tapName);
+        } catch (Exception e) {
+            Log.w(TAG, fmt("Failed to detach NIC %s", tapName), e);
         }
-        arr.append(DataItem.newString(cidr.toString()));
-        return true;
+    }
+
+    @NonNull
+    public Map<Integer, IPv6Network> getLiveV6Networks() {
+        return backend != null ? backend.getLiveV6Networks() : Map.of();
+    }
+
+    /** Runtime-only address tools used by the info screen (Linux only). */
+    public boolean addAddress(@NonNull IPNetwork<?, ?, ?> cidr) {
+        if (getBridgeType() != BridgeType.LINUX || state != NetworkState.RUNNING)
+            return false;
+        return store.backend.addAddress(item.optString("bridge_name", ""), cidr);
     }
 
     public boolean removeAddress(@NonNull IPNetwork<?, ?, ?> cidr) {
+        if (getBridgeType() != BridgeType.LINUX || state != NetworkState.RUNNING)
+            return false;
         return store.backend.removeAddress(item.optString("bridge_name", ""), cidr);
     }
 
     public boolean addInterface(@NonNull String ifname) {
+        if (getBridgeType() != BridgeType.LINUX || state != NetworkState.RUNNING)
+            return false;
         return store.backend.addInterface(item.optString("bridge_name", ""), ifname);
     }
 
     public boolean removeInterface(@NonNull String ifname) {
+        if (getBridgeType() != BridgeType.LINUX) return false;
         return store.backend.removeInterface(ifname);
     }
 
     public JSONArray listAddresses() {
-        return store.backend.listAddresses(item.optString("bridge_name", ""));
+        if (backend == null) return new JSONArray();
+        return backend.listAddresses();
+    }
+
+    /** Three-dimension address rows (VLAN/bound/source), or null if unsupported. */
+    @Nullable
+    public JSONArray listAddressEntries() {
+        return backend == null ? null : backend.listAddressEntries();
+    }
+
+    /** Per-VLAN DHCPv6-PD client state. */
+    public JSONArray listPdStatus() {
+        if (backend == null) return new JSONArray();
+        return backend.listPdStatus();
+    }
+
+    /** Forces a PD renew on one VLAN's client. */
+    public boolean renewPd(int vlanId) {
+        return backend != null && backend.renewPd(vlanId);
+    }
+
+    /** Releases and re-solicits one VLAN's PD delegation. */
+    public boolean releasePd(int vlanId) {
+        return backend != null && backend.releasePd(vlanId);
+    }
+
+    /** Helper tools this network runs, as [{key, running}]. */
+    public JSONArray listTools() {
+        if (backend == null) return new JSONArray();
+        return backend.listTools();
+    }
+
+    /** Captured stdout/stderr of a named tool, or null when unknown. */
+    @Nullable
+    public java.util.List<String> toolLog(@NonNull String key) {
+        return backend == null ? null : backend.toolLog(key);
     }
 
     public JSONArray listBridges() {
@@ -179,24 +258,50 @@ public JSONArray listAvailableInterfaces() {
     }
 
     public JSONArray listInterfaces() {
-        var vms = store.context.getVMs();
-        return store.backend.listInterfaces(vms, item.optString("bridge_name", ""));
+        if (backend == null) return new JSONArray();
+        return backend.listInterfaces(store.context.getVMs());
     }
 
     public JSONArray listNeighbors() {
-        return store.backend.listNeighbors(item.optString("bridge_name", ""));
+        if (backend == null) return new JSONArray();
+        return backend.listNeighbors();
     }
 
     public JSONArray listDhcpLeases() {
-        return store.backend.listDhcpLeases(item.optString("bridge_name", ""));
+        if (backend == null) return new JSONArray();
+        return backend.listDhcpLeases();
+    }
+
+    /**
+     * Devices the host routes for this network: the main bridge for the
+     * untagged VLAN-0 domain plus the per-VLAN bridges of the tagged
+     * VLANs (L3 mode only).
+     */
+    @NonNull
+    public java.util.List<String> getL3Devices() {
+        var out = new java.util.ArrayList<String>();
+        var br = getBridgeName();
+        if (br == null) return out;
+        switch (getUplinkMode()) {
+            case L3:
+                for (var vlan : getVlans()) {
+                    var dev = cn.classfun.droidvm.daemon.network.backend.LinuxNetwork
+                        .vlanDevice(br, vlan.getVlanId());
+                    if (!out.contains(dev)) out.add(dev);
+                }
+                break;
+            default:
+                break;
+        }
+        return out;
     }
 
     @NonNull
     public JSONObject toInfoJson() throws JSONException {
         var obj = item.toJson();
         obj.put("state", state.name().toLowerCase());
-        obj.put("dnsmasq_running", isDnsmasqRunning());
-        obj.put("dnsmasq_exit_code", getDnsmasqExitCode());
+        if (backend != null) backend.appendInfo(obj);
         return obj;
     }
+
 }
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/network/NetworkInstanceStore.java b/app/src/main/java/cn/classfun/droidvm/daemon/network/NetworkInstanceStore.java
index a3f31396e..1479bc7e6 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/network/NetworkInstanceStore.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/network/NetworkInstanceStore.java
@@ -22,13 +22,15 @@
 import cn.classfun.droidvm.daemon.network.backend.LinuxNetwork;
 import cn.classfun.droidvm.daemon.server.ServerContext;
 import cn.classfun.droidvm.lib.store.network.NetworkConfig;
+import cn.classfun.droidvm.lib.store.network.NetworkConfigValidator;
 import cn.classfun.droidvm.lib.store.base.DataStore;
+import cn.classfun.droidvm.lib.utils.JsonUtils;
 
 @SuppressWarnings("BooleanMethodIsAlwaysInverted")
 public final class NetworkInstanceStore extends DataStore<NetworkInstance> {
     private static final String TAG = "NetworkInstanceStore";
     public final FirewallHelper firewall = new IptablesBackend();
-    public final BackendBase backend = new LinuxNetwork();
+    public final LinuxNetwork backend = new LinuxNetwork();
     public final ServerContext context;
 
     public NetworkInstanceStore(@NonNull ServerContext context) {
@@ -37,6 +39,26 @@ public NetworkInstanceStore(@NonNull ServerContext context) {
         Log.i(TAG, "Network instance store initialized");
     }
 
+    @Override
+    protected boolean load(@NonNull DataStore<NetworkInstance> store, @NonNull JSONObject obj) {
+        try {
+            store.clear();
+            JsonUtils.forEachArray(obj, getTypeName(), (JSONObject entry) -> {
+                if (!NetworkConfig.isSupportedSchema(entry)) {
+                    Log.w(TAG, "Skipping network config with unsupported schema: "
+                        + entry.optString("name"));
+                    return;
+                }
+                store.addObject(entry);
+            });
+            return true;
+        } catch (Exception e) {
+            Log.e(TAG, "Failed to load network configs", e);
+            store.clear();
+            return false;
+        }
+    }
+
     @Nullable
     public String createNetwork(@NonNull NetworkConfig config) {
         var netId = config.getId();
@@ -49,6 +71,7 @@ public String createNetwork(@NonNull NetworkConfig config) {
             Log.w(TAG, fmt("Network %s already exists", netIdStr));
             return null;
         }
+        NetworkConfigValidator.validate(config);
         var inst = getNetworkInstance(config, netIdStr);
         add(inst);
         Log.i(TAG, fmt("Created network: %s [%s] bridge=%s",
@@ -73,6 +96,7 @@ public String modifyNetwork(@NonNull NetworkConfig config) {
             Log.w(TAG, fmt("Network %s is not stopped, cannot modify", netIdStr));
             return null;
         }
+        NetworkConfigValidator.validate(config);
         removeById(netId);
         var inst = getNetworkInstance(config, netIdStr);
         add(inst);
@@ -129,7 +153,7 @@ public void stopAll() {
                 toStop.add(inst);
         });
         for (var inst : toStop)
-            inst.stop();
+            inst.stop(true);
         clear();
     }
 
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/BackendBase.java b/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/BackendBase.java
index 9d3fd00b2..1786d6c42 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/BackendBase.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/BackendBase.java
@@ -46,7 +46,5 @@ public abstract class BackendBase {
 
     public abstract JSONArray listNeighbors(String bridge);
 
-    public abstract JSONArray listDhcpLeases(String bridge);
-
     public abstract void populateRuleRoute(@NonNull NetworkInstance inst);
 }
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/BridgeBackend.java b/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/BridgeBackend.java
new file mode 100644
index 000000000..e203b54d8
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/BridgeBackend.java
@@ -0,0 +1,147 @@
+package cn.classfun.droidvm.daemon.network.backend;
+
+import androidx.annotation.NonNull;
+import androidx.annotation.Nullable;
+
+import org.json.JSONArray;
+import org.json.JSONException;
+import org.json.JSONObject;
+
+import java.util.List;
+import java.util.Map;
+
+import cn.classfun.droidvm.daemon.network.NetworkInstance;
+import cn.classfun.droidvm.daemon.vm.VMInstanceStore;
+import cn.classfun.droidvm.lib.network.IPv6Network;
+import cn.classfun.droidvm.lib.store.vm.VMNicConfig;
+
+/**
+ * Per-network runtime backing one bridge type: owns the data path (Linux
+ * bridge or gvswitch), per-VLAN L3 services, NIC attach/detach including
+ * static leases and port forwards, plus the live queries the info UI uses.
+ */
+public abstract class BridgeBackend {
+    protected final NetworkInstance inst;
+
+    protected BridgeBackend(@NonNull NetworkInstance inst) {
+        this.inst = inst;
+    }
+
+    /** Brings the whole network up; throws with a user-readable reason. */
+    public abstract void start() throws Exception;
+
+    /** Tears everything down; must be safe to call after a failed start. */
+    public abstract void stop();
+
+    /**
+     * Creates the tap device for one VM NIC and applies the per-port
+     * settings (VLAN, isolation, MAC security), static DHCP leases and
+     * port forwards.
+     */
+    public abstract void attachNic(@NonNull VMNicConfig nic, @NonNull String tapName)
+        throws Exception;
+
+    public abstract void detachNic(@NonNull VMNicConfig nic, @NonNull String tapName);
+
+    public abstract JSONArray listAddresses();
+
+    public abstract JSONArray listInterfaces(VMInstanceStore vms);
+
+    public abstract JSONArray listNeighbors();
+
+    public abstract JSONArray listDhcpLeases();
+
+    /**
+     * Address rows for network_info, one per address with three dimensions:
+     * {@code {addr, family, vlan, bound, source}} where {@code source} is
+     * {@code "configured"} (VMM-managed) or {@code "auto"} (link-local, RA,
+     * DHCP-PD, ...). Returns {@code null} when the backend does not support
+     * the richer model, in which case the UI falls back to its config + live
+     * rendering. Default: unsupported.
+     */
+    @Nullable
+    public JSONArray listAddressEntries() {
+        return null;
+    }
+
+    /** Per-VLAN DHCPv6-PD client state for network_info; empty when none. */
+    @NonNull
+    public JSONArray listPdStatus() {
+        return new JSONArray();
+    }
+
+    /** Builds one {@code {addr,family,vlan,bound,source}} row for {@link #listAddressEntries()}. */
+    @NonNull
+    protected static JSONObject addressEntry(
+        @NonNull String cidr, int vlan, boolean bound, @NonNull String source
+    ) {
+        var o = new JSONObject();
+        try {
+            o.put("addr", cidr);
+            o.put("family", cidr.contains(":") ? 6 : 4);
+            o.put("vlan", vlan);
+            o.put("bound", bound);
+            o.put("source", source);
+        } catch (JSONException ignored) {
+        }
+        return o;
+    }
+
+    /** Forces a PD renew on one VLAN's client; false when unsupported. */
+    public boolean renewPd(int vlanId) {
+        return false;
+    }
+
+    /** Releases and re-solicits one VLAN's PD delegation; false when unsupported. */
+    public boolean releasePd(int vlanId) {
+        return false;
+    }
+
+    /**
+     * Helper tools this network runs (gvswitch / pbridge / bridgedhcp), as
+     * {@code [{key, running}]}, so the info UI can list them and open each
+     * one's captured log. Default: none.
+     */
+    @NonNull
+    public JSONArray listTools() {
+        return new JSONArray();
+    }
+
+    /** Captured stdout/stderr lines of a named tool, or null if unknown. */
+    @Nullable
+    public List<String> toolLog(@NonNull String key) {
+        return null;
+    }
+
+    /** Builds one {@code {key, running}} tool descriptor for {@link #listTools()}. */
+    @NonNull
+    protected static JSONObject toolEntry(@NonNull String key, boolean running) {
+        var o = new JSONObject();
+        try {
+            o.put("key", key);
+            o.put("running", running);
+        } catch (JSONException ignored) {
+        }
+        return o;
+    }
+
+    /** Backend health/status fields for network_info. */
+    public abstract void appendInfo(@NonNull JSONObject obj) throws JSONException;
+
+    /** Live per-VLAN IPv6 networks (DHCP-PD delegations); gateway-addressed. */
+    @NonNull
+    public Map<Integer, IPv6Network> getLiveV6Networks() {
+        return Map.of();
+    }
+
+    /** Emits per-tap port-forward install failures into network_info. */
+    protected static void appendForwardFailures(
+        @NonNull JSONObject obj, @NonNull Map<String, List<String>> failures
+    ) throws JSONException {
+        if (failures.isEmpty()) return;
+        var ff = new JSONObject();
+        for (var e : failures.entrySet())
+            ff.put(e.getKey(), new JSONArray(e.getValue()));
+        obj.put("forward_failures", ff);
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/BridgeDhcp.java b/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/BridgeDhcp.java
new file mode 100644
index 000000000..44d455611
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/BridgeDhcp.java
@@ -0,0 +1,490 @@
+package cn.classfun.droidvm.daemon.network.backend;
+
+import static cn.classfun.droidvm.lib.Constants.DATA_DIR;
+import static cn.classfun.droidvm.lib.utils.AssetUtils.getAssetBinaryPath;
+import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
+import static cn.classfun.droidvm.lib.utils.StringUtils.pathJoin;
+
+import android.util.Log;
+
+import androidx.annotation.NonNull;
+import androidx.annotation.Nullable;
+
+import org.json.JSONArray;
+import org.json.JSONObject;
+
+import java.io.File;
+import java.io.FileWriter;
+import java.security.SecureRandom;
+import java.time.OffsetDateTime;
+import java.util.ArrayList;
+import java.util.List;
+import java.util.Map;
+import java.util.zip.CRC32;
+
+import cn.classfun.droidvm.daemon.network.NetworkInstance;
+import cn.classfun.droidvm.daemon.network.backend.gvisor.GvswitchClient;
+import cn.classfun.droidvm.daemon.network.backend.pd.Duid;
+import cn.classfun.droidvm.lib.network.IPv6Network;
+import cn.classfun.droidvm.lib.store.network.Ipv6Source;
+import cn.classfun.droidvm.lib.store.network.VlanConfig;
+import cn.classfun.droidvm.lib.utils.NetUtils;
+
+/**
+ * DHCPv4/DHCPv6/RA (and DHCPv6-PD) service for one Linux-bridge network,
+ * backed by the bridgedhcp helper: one process per network serving every
+ * per-VLAN bridge. Pools and static leases are offset-based, so a PD
+ * renumbering needs no config rewrite; static leases are pushed through
+ * the unix-socket API instead of dnsmasq's hostsfile/SIGHUP dance, and PD
+ * prefix changes flow back as JSON event lines on the child's stdout.
+ */
+public final class BridgeDhcp {
+    private static final String TAG = "BridgeDhcp";
+    private static final String[] DEFAULT_DNS4 = {"8.8.8.8", "1.1.1.1"};
+    private static final String[] DEFAULT_DNS6 = {"2001:4860:4860::8888"};
+    private static final SecureRandom random = new SecureRandom();
+
+    /** PD delegation events; address is null when the prefix was lost. */
+    public interface PdListener {
+        void onPdAddressChanged(int vlanId, @Nullable IPv6Network address);
+    }
+
+    private final NetworkInstance inst;
+    private final String br;
+    private final ManagedProcess process;
+    private final PdListener pdListener;
+    private final String apiKey;
+    private GvswitchClient client = null;
+
+    public BridgeDhcp(@NonNull NetworkInstance inst, @Nullable PdListener pdListener) {
+        this.inst = inst;
+        this.br = inst.item.optString("bridge_name", "");
+        this.pdListener = pdListener;
+        this.process = new ManagedProcess("bridgedhcp", br);
+        var key = new byte[24];
+        random.nextBytes(key);
+        var sb = new StringBuilder();
+        for (var b : key) sb.append(fmt("%02x", b));
+        this.apiKey = sb.toString();
+    }
+
+    /** True when any VLAN needs DHCPv4, DHCPv6, RA or a PD client. */
+    public static boolean isNeeded(@NonNull List<VlanConfig> vlans) {
+        for (var vlan : vlans) {
+            if (vlan.isDhcp4Enabled() || vlan.isDhcp6Enabled() || vlan.isSlaacEnabled())
+                return true;
+            if (vlan.getIpv6Source() == Ipv6Source.DHCP_PD && vlan.getPdUplink() != null)
+                return true;
+        }
+        return false;
+    }
+
+    public boolean start() {
+        try {
+            writeKeyFile();
+            writeConf();
+        } catch (Exception e) {
+            Log.e(TAG, fmt("Failed to write bridgedhcp config for %s", br), e);
+            return false;
+        }
+        client = new GvswitchClient(getSocketFile(br), apiKey);
+        process.setLineListener(this::onEventLine);
+        var args = new ArrayList<String>();
+        args.add(getAssetBinaryPath("bridgedhcp"));
+        args.add("--config");
+        args.add(getConfFile(br));
+        return process.start(args);
+    }
+
+    public void stop() {
+        process.stop();
+        client = null;
+    }
+
+    /**
+     * Rewrites the config (re-resolving PD uplinks) and restarts the helper.
+     * Used when a PD uplink that was unavailable at start later appears, so
+     * the now-resolvable interface gets a PD client. Persisted leases and PD
+     * delegations survive via the state file.
+     */
+    public boolean restart() {
+        stop();
+        return start();
+    }
+
+    public boolean isRunning() {
+        return process.isRunning();
+    }
+
+    public int getExitCode() {
+        return process.getExitCode();
+    }
+
+    @NonNull
+    public List<String> getLog() {
+        return process.getLog();
+    }
+
+    /** Child stdout: single-line JSON events (logs go to stderr). */
+    private void onEventLine(@NonNull String line) {
+        if (!line.startsWith("{")) return;
+        try {
+            var ev = new JSONObject(line);
+            var type = ev.optString("event", "");
+            if (!type.equals("pd_prefix") && !type.equals("pd_lost")) return;
+            if (pdListener == null) return;
+            int vlanId = Integer.parseInt(ev.optString("tag", "-1"));
+            if (vlanId < 0) return;
+            IPv6Network address = null;
+            if (type.equals("pd_prefix"))
+                address = IPv6Network.parse(ev.getString("address"));
+            pdListener.onPdAddressChanged(vlanId, address);
+        } catch (Exception e) {
+            Log.w(TAG, fmt("Bad bridgedhcp event: %s", line), e);
+        }
+    }
+
+    /** Pushes the current static lease set (both families) for every VLAN. */
+    public void reloadStaticLeases() {
+        var c = client;
+        if (c == null) return;
+        for (var vlan : inst.getVlans()) {
+            var dev = LinuxNetwork.vlanDevice(br, vlan.getVlanId());
+            try {
+                var statics = buildStatics(vlan);
+                c.put(fmt("/v1/ifaces/%s/statics/4", dev),
+                    new JSONObject().put("statics", statics[0]));
+                c.put(fmt("/v1/ifaces/%s/statics/6", dev),
+                    new JSONObject().put("statics", statics[1]));
+            } catch (Exception e) {
+                Log.w(TAG, fmt("Failed to push static leases for %s", dev), e);
+            }
+        }
+    }
+
+    /** Active leases of every VLAN in the legacy dnsmasq-derived shape. */
+    @NonNull
+    public JSONArray getLeases() {
+        var out = new JSONArray();
+        var c = client;
+        if (c == null) return out;
+        for (var vlan : inst.getVlans()) {
+            var dev = LinuxNetwork.vlanDevice(br, vlan.getVlanId());
+            for (var family : new int[]{4, 6}) {
+                try {
+                    var resp = c.get(fmt("/v1/ifaces/%s/leases/%d", dev, family));
+                    if (!resp.isSuccess()) continue;
+                    var leases = resp.json().optJSONArray("leases");
+                    if (leases == null) continue;
+                    for (int i = 0; i < leases.length(); i++) {
+                        var l = leases.optJSONObject(i);
+                        if (l == null) continue;
+                        var obj = new JSONObject();
+                        obj.put("expires", parseExpiry(l.optString("expiry", "")));
+                        obj.put("mac", l.optString("mac", ""));
+                        obj.put("ip", l.optString("ip", ""));
+                        obj.put("hostname", l.optString("hostname", ""));
+                        out.put(obj);
+                    }
+                } catch (Exception e) {
+                    Log.w(TAG, fmt("Failed to list leases for %s/%d", dev, family), e);
+                }
+            }
+        }
+        return out;
+    }
+
+    private static long parseExpiry(@NonNull String rfc3339) {
+        try {
+            return OffsetDateTime.parse(rfc3339).toEpochSecond();
+        } catch (Exception e) {
+            return 0;
+        }
+    }
+
+    /** Full status document of the helper (for network info). */
+    @Nullable
+    public JSONObject getStatus() {
+        var c = client;
+        if (c == null) return null;
+        try {
+            var resp = c.get("/v1/status");
+            if (resp.isSuccess()) return resp.json();
+        } catch (Exception e) {
+            Log.w(TAG, "Failed to query bridgedhcp status", e);
+        }
+        return null;
+    }
+
+    /**
+     * Per-VLAN DHCPv6-PD client state: {@code [{vlan, state, prefix}]} for
+     * every served interface that runs a PD client (empty prefix while still
+     * searching). Derived from the helper's {@code /v1/status} document.
+     */
+    @NonNull
+    public JSONArray getPdStatus() {
+        var out = new JSONArray();
+        var status = getStatus();
+        if (status == null) return out;
+        var ifaces = status.optJSONArray("ifaces");
+        if (ifaces == null) return out;
+        for (int i = 0; i < ifaces.length(); i++) {
+            var iface = ifaces.optJSONObject(i);
+            if (iface == null) continue;
+            var state = iface.optString("pd_state", "");
+            if (state.isEmpty()) continue; // no PD client on this interface
+            try {
+                out.put(new JSONObject()
+                    .put("vlan", Integer.parseInt(iface.optString("tag", "-1")))
+                    .put("state", state)
+                    // the raw delegation P/L (context) ...
+                    .put("prefix", iface.optString("pd_prefix", ""))
+                    // ... and the composed host address P::1/L actually bound
+                    // on the bridge — what the UI shows and what the address
+                    // union deduplicates against.
+                    .put("address", iface.optString("pd_address", "")));
+            } catch (Exception e) {
+                Log.w(TAG, "Bad PD status entry", e);
+            }
+        }
+        return out;
+    }
+
+    /** Forces a PD renew (RENEW/REBIND, same prefix) on one VLAN's client. */
+    public boolean renewPd(int vlanId) {
+        return pdAction(vlanId, "renew");
+    }
+
+    /** Releases and re-solicits the PD delegation on one VLAN's client. */
+    public boolean releasePd(int vlanId) {
+        return pdAction(vlanId, "release");
+    }
+
+    private boolean pdAction(int vlanId, @NonNull String action) {
+        var c = client;
+        if (c == null) return false;
+        var dev = LinuxNetwork.vlanDevice(br, vlanId);
+        try {
+            return c.post(fmt("/v1/ifaces/%s/pd/%s", dev, action), null).isSuccess();
+        } catch (Exception e) {
+            Log.w(TAG, fmt("PD %s failed for %s", action, dev), e);
+            return false;
+        }
+    }
+
+    private void writeKeyFile() throws Exception {
+        var file = new File(getKeyFile(br));
+        var parent = file.getParentFile();
+        if (parent != null && !parent.exists() && !parent.mkdirs())
+            throw new RuntimeException(fmt("Failed to create directory %s", parent));
+        try (var writer = new FileWriter(file)) {
+            writer.write(apiKey);
+        }
+        if (!file.setReadable(false, false) || !file.setReadable(true, true))
+            Log.w(TAG, "Failed to restrict key file permissions");
+    }
+
+    private void writeConf() throws Exception {
+        var cfg = new JSONObject();
+        cfg.put("api_socket", getSocketFile(br));
+        cfg.put("api_key_file", getKeyFile(br));
+        cfg.put("state_file", getStateFile(br));
+        var ifaces = new JSONArray();
+        for (var vlan : inst.getVlans())
+            ifaces.put(buildIface(vlan));
+        cfg.put("interfaces", ifaces);
+        var file = new File(getConfFile(br));
+        try (var writer = new FileWriter(file)) {
+            writer.write(cfg.toString(2));
+        }
+    }
+
+    @NonNull
+    private JSONObject buildIface(@NonNull VlanConfig vlan) throws Exception {
+        var obj = new JSONObject();
+        obj.put("name", LinuxNetwork.vlanDevice(br, vlan.getVlanId()));
+        obj.put("tag", String.valueOf(vlan.getVlanId()));
+        // Served prefixes are authoritative config — bridgedhcp no longer
+        // derives the pools/SLAAC prefix from the bridge's live addresses.
+        // v6 is sent only for a static source; DHCP-PD drives it dynamically.
+        var cidr4 = vlan.getIpv4Cidr();
+        if (cidr4 != null) obj.put("prefix4", cidr4);
+        if (vlan.getIpv6Source() == Ipv6Source.STATIC) {
+            var cidr6 = vlan.getIpv6Cidr();
+            if (cidr6 != null) obj.put("prefix6", cidr6);
+        }
+        if (vlan.isDhcp4Enabled()) {
+            var dns = new JSONArray();
+            for (var s : vlan.getDnsServers())
+                if (!s.contains(":")) dns.put(s);
+            if (dns.length() == 0)
+                for (var s : DEFAULT_DNS4) dns.put(s);
+            obj.put("dhcp4", new JSONObject()
+                .put("pool_offset_start", vlan.getDhcp4OffsetStart())
+                .put("pool_offset_end", vlan.getDhcp4OffsetEnd())
+                .put("lease_time", "12h")
+                .put("dns", dns));
+        }
+        if (vlan.isDhcp6Enabled()) {
+            var dns = new JSONArray();
+            for (var s : vlan.getDnsServers())
+                if (s.contains(":")) dns.put(s);
+            if (dns.length() == 0)
+                for (var s : DEFAULT_DNS6) dns.put(s);
+            obj.put("dhcp6", new JSONObject()
+                .put("pool_offset_start", vlan.getDhcp6OffsetStart())
+                .put("pool_offset_end", vlan.getDhcp6OffsetEnd())
+                .put("lease_time", "12h")
+                .put("dns", dns));
+        }
+        if (vlan.isSlaacEnabled()) obj.put("slaac", true);
+        if (vlan.getIpv6Source() == Ipv6Source.DHCP_PD && vlan.getPdUplink() != null) {
+            var uplink = UplinkResolver.resolve(vlan.getPdUplink());
+            if (uplink == null) {
+                Log.w(TAG, fmt(
+                    "PD uplink \"%s\" not found, skipping PD for vlan %d",
+                    vlan.getPdUplink(), vlan.getVlanId()
+                ));
+            } else {
+                var crc = new CRC32();
+                crc.update(inst.getId().toString().getBytes());
+                crc.update(vlan.getVlanId());
+                // CRC32 is an unsigned 32-bit value; write it as-is. Casting
+                // to int makes it negative when bit 31 is set, and bridgedhcp
+                // parses "iaid" into a Go uint32, which rejects a negative
+                // number — the whole helper then fails to start.
+                // No prefix_len: bridgedhcp binds the host at the delegation's
+                // own length L (suffix ::1), and gates SLAAC/DHCPv6 on L.
+                obj.put("pd", new JSONObject()
+                    .put("uplink", uplink)
+                    .put("duid", Duid.format(resolvePdDuid(vlan)))
+                    .put("iaid", crc.getValue())
+                    .put("suffix", "::1")
+                    .put("route_table", resolvePdRouteTable(vlan)));
+            }
+        }
+        var statics = buildStatics(vlan);
+        if (statics[0].length() > 0) obj.put("statics4", statics[0]);
+        if (statics[1].length() > 0) obj.put("statics6", statics[1]);
+        return obj;
+    }
+
+    /**
+     * Builds the [v4, v6] static binding arrays of one VLAN from the VM NIC
+     * configs (mac -> offset, matching the NIC's DHCP lease settings).
+     */
+    @NonNull
+    private JSONArray[] buildStatics(@NonNull VlanConfig vlan) throws Exception {
+        var v4 = new JSONArray();
+        var v6 = new JSONArray();
+        var netId = inst.getId().toString();
+        var vms = inst.getStore().context.getVMs();
+        if (vms == null) return new JSONArray[]{v4, v6};
+        vms.forEach((vmId, vm) -> {
+            final int[] idx = {0};
+            var failed = new Exception[1];
+            vm.forEachNic(nic -> {
+                int nicIdx = idx[0]++;
+                try {
+                    if (!netId.equals(nic.getNetworkId())) return;
+                    var mac = nic.getMacAddress();
+                    if (mac == null) return;
+                    var nicVlan = nic.resolveDhcpVlan(inst);
+                    if (nicVlan == null || nicVlan.getVlanId() != vlan.getVlanId()) return;
+                    var id = fmt("%s-%d", vmId, nicIdx);
+                    if (nic.isDhcp4LeaseEnabled() && vlan.isDhcp4Enabled()) {
+                        v4.put(new JSONObject()
+                            .put("id", id)
+                            .put("mac", mac)
+                            .put("offset", nic.getDhcp4Offset()));
+                    }
+                    if (nic.isDhcp6LeaseEnabled() && vlan.isDhcp6Enabled()) {
+                        v6.put(new JSONObject()
+                            .put("id", id)
+                            .put("mac", mac)
+                            .put("offset", nic.getDhcp6Offset()));
+                    }
+                } catch (Exception e) {
+                    failed[0] = e;
+                }
+            });
+            if (failed[0] != null)
+                Log.w(TAG, fmt("Bad static lease config for VM %s", vmId), failed[0]);
+        });
+        return new JSONArray[]{v4, v6};
+    }
+
+    /** First id of the range handed out to bridgedhcp PD route tables. */
+    private static final long PD_ROUTE_TABLE_BASE = 9991;
+    /** Serializes allocations across concurrently starting networks. */
+    private static final Object routeTableLock = new Object();
+
+    /**
+     * The PD routing table of one VLAN: the persisted allocation when
+     * present, else the lowest id from PD_ROUTE_TABLE_BASE upward that no
+     * VLAN of any network (running or stopped) holds, persisted
+     * immediately. Stability matters: the id is bridgedhcp's crash-cleanup
+     * key — a bridge that comes back under a different id would leave the
+     * previous run's rules behind, and reusing a *live* network's id would
+     * wipe its rules at startup.
+     */
+    private long resolvePdRouteTable(@NonNull VlanConfig vlan) {
+        synchronized (routeTableLock) {
+            var existing = vlan.getPdRouteTable();
+            if (existing != 0) return existing;
+            var used = new java.util.HashSet<Long>();
+            inst.getStore().forEach((id, other) -> {
+                for (var v : other.getVlans())
+                    used.add(v.getPdRouteTable());
+            });
+            var table = PD_ROUTE_TABLE_BASE;
+            while (used.contains(table)) table++;
+            vlan.setPdRouteTable(table);
+            Log.i(TAG, fmt("Allocated PD route table %d for %s vlan %d",
+                table, br, vlan.getVlanId()));
+            return table;
+        }
+    }
+
+    /**
+     * The PD DUID: the configured one, else a generated DUID-LL persisted
+     * back into the VLAN config so the delegation survives restarts.
+     */
+    @NonNull
+    private byte[] resolvePdDuid(@NonNull VlanConfig vlan) {
+        var configured = vlan.getPdDuid();
+        if (configured != null && !configured.isEmpty()) {
+            try {
+                return Duid.parse(configured);
+            } catch (Exception e) {
+                Log.w(TAG, fmt("Invalid DUID \"%s\", generating one", configured), e);
+            }
+        }
+        var mac = inst.getBridgeMacAddress();
+        if (mac == null) mac = inst.item.optString("generated_mac", "");
+        if (mac == null || mac.isEmpty()) mac = NetUtils.generateRandomMac();
+        var duid = Duid.fromLinkLayer(mac);
+        vlan.setPdDuid(Duid.format(duid));
+        return duid;
+    }
+
+    @NonNull
+    public static String getConfFile(@NonNull String br) {
+        return pathJoin(DATA_DIR, "run", fmt("bridgedhcp-%s.json", br));
+    }
+
+    @NonNull
+    public static String getKeyFile(@NonNull String br) {
+        return pathJoin(DATA_DIR, "run", fmt("bridgedhcp-%s.key", br));
+    }
+
+    @NonNull
+    public static String getSocketFile(@NonNull String br) {
+        return pathJoin(DATA_DIR, "run", fmt("bridgedhcp-%s.sock", br));
+    }
+
+    @NonNull
+    public static String getStateFile(@NonNull String br) {
+        return pathJoin(DATA_DIR, "run", fmt("bridgedhcp-%s.state.json", br));
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/DefaultRouterWatcher.java b/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/DefaultRouterWatcher.java
index c84cf33c8..4c01ec4bc 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/DefaultRouterWatcher.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/DefaultRouterWatcher.java
@@ -1,7 +1,5 @@
 package cn.classfun.droidvm.daemon.network.backend;
 
-import static cn.classfun.droidvm.lib.utils.RunUtils.run;
-import static cn.classfun.droidvm.lib.utils.RunUtils.runListQuiet;
 import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
 
 import android.util.Log;
@@ -10,100 +8,286 @@
 import androidx.annotation.Nullable;
 
 import java.util.ArrayList;
+import java.util.LinkedHashSet;
 import java.util.List;
+import java.util.Set;
 import java.util.concurrent.Executors;
 import java.util.concurrent.ScheduledExecutorService;
 import java.util.concurrent.TimeUnit;
 
 import cn.classfun.droidvm.daemon.network.NetworkInstance;
 import cn.classfun.droidvm.daemon.server.ServerContext;
+import cn.classfun.droidvm.lib.Constants;
 
 public final class DefaultRouterWatcher {
     private static final String TAG = "DefaultRouterWatcher";
     private static final long POLL_INTERVAL_SEC = 5;
+    /**
+     * Interface-name prefixes whose IPv4 addresses count as the phone's own
+     * reachable IPs for port-forward DNAT scoping: Wi-Fi, cellular, VPN,
+     * ethernet, and hotspot/USB/BT tethering. Passed to netbox, which also
+     * drops bridge devices and pbridge-offload addresses. Cellular names other
+     * than rmnet_data (ccmni, pdp_ip…) are intentionally not matched — same
+     * assumption the iptables EXT_IFACES list already makes.
+     */
+    private static final List<String> HOST_IFACE_PREFIXES = List.of(
+        "wlan", "rmnet_data", "tun", "eth",
+        "ap", "swlan", "softap", "rndis", "usb", "bt-pan"
+    );
     private final ServerContext context;
-    private final List<String> rules = new ArrayList<>();
-    private ScheduledExecutorService scheduler;
-    private String lastDefault = null;
+    private final List<Runnable> listeners = new java.util.concurrent.CopyOnWriteArrayList<>();
+    private final List<Runnable> hostIpListeners = new java.util.concurrent.CopyOnWriteArrayList<>();
+    private volatile ScheduledExecutorService scheduler;
+    private String lastDefault4 = null;
+    private String lastDefault6 = null;
+    /** Phone's own IPv4 addresses; the netbox host-ips policy decides the set. */
+    private volatile Set<String> hostIpv4 = Set.of();
+    /** netbox monitor-addr: pushes host-IP changes the instant they happen. */
+    private ManagedProcess hostIpMonitor = null;
+    /** Gates monitor (re)spawn so a post-stop tick can't resurrect it. */
+    private volatile boolean monitorEnabled = false;
 
     public DefaultRouterWatcher(@NonNull ServerContext context) {
         this.context = context;
     }
 
+    /**
+     * The routing table of the current default network, per family: Android
+     * keeps the default route out of main and selects it with the netd rule
+     * "from all fwmark 0x0/0xffff iif lo lookup {table}".
+     */
     @Nullable
-    private String getCurrentDefault() {
-        var result = runListQuiet("ip", "rule", "show");
-        if (!result.isSuccess()) {
-            result.printLog("ip-rule");
-            throw new RuntimeException("Failed to list IP rules");
-        }
-        var data = result.getOutString();
-        for (var line : data.split("\n")) {
-            if (!line.contains("fwmark 0x0/0xffff")) continue;
-            var idx = line.indexOf(" lookup ");
-            if (idx < 0) continue;
-            return line.substring(idx + (" lookup ".length())).trim();
+    private String currentDefaultTable(boolean ipv6) {
+        // netd selects the default network with "from all fwmark 0x0/0xffff
+        // iif lo lookup {table}" (mark 0, mask 0xffff). The kernel omits
+        // FRA_FWMARK when the mark is 0, so match on the 0xffff mask alone.
+        var rows = Netbox.ruleList(ipv6);
+        for (int i = 0; i < rows.length(); i++) {
+            var r = rows.optJSONObject(i);
+            if (r == null) continue;
+            if (r.optInt("fwmark", 0) != 0) continue;
+            if (r.optInt("fwmask", 0) != 0xffff) continue;
+            return String.valueOf(r.optInt("table", 0));
         }
         return null;
     }
 
-    private void clearRule() {
-        for (var rule : rules)
-            run(fmt("ip rule del %s", rule));
-        rules.clear();
+    private void ruleDel(boolean ipv6, @NonNull String dev, @NonNull String table) {
+        Netbox.ruleDel(dev, table, ipv6);
     }
 
-    private void addRule(@NonNull String table, @NonNull String br) {
-        var rule = fmt("from all iif %s lookup %s", br, table);
-        run(fmt("ip rule add %s", rule));
-        rules.add(rule);
+    private void ruleAdd(boolean ipv6, @NonNull String dev, @NonNull String table) {
+        Netbox.ruleAdd(dev, table, ipv6);
     }
 
-    private void setDefaultRouterForNetworks(@NonNull String net) {
-        context.getNetworks().forEach((uuid, inst) ->
-            addRule(net, inst.item.optString("bridge_name", "")));
+    /**
+     * Reconciles one family's "iif {bridge} lookup {default-table}" rules
+     * (the egress half of guest routing: forwarded packets carry no fwmark
+     * and Android's netd rules end in "from all unreachable", so each
+     * bridge needs an explicit rule into the default network's table).
+     * Declarative per tick: deletes stale rules — wrong table, duplicates
+     * (added twice across restarts) and [detached] leftovers from a
+     * recreated bridge — and adds what is missing. Stale-rule deletion by
+     * spec may remove either twin first; the next tick converges.
+     */
+    private void reconcileRules(boolean ipv6, @Nullable String table) {
+        var desired = new LinkedHashSet<String>();
+        var bridges = new ArrayList<String>();
+        context.getNetworks().forEach((uuid, inst) -> {
+            var br = inst.getBridgeName();
+            if (br != null && !br.isEmpty()) bridges.add(br);
+            if (table != null) desired.addAll(inst.getL3Devices());
+        });
+
+        var satisfied = new LinkedHashSet<String>();
+        var rows = Netbox.ruleList(ipv6);
+        for (int i = 0; i < rows.length(); i++) {
+            var r = rows.optJSONObject(i);
+            if (r == null) continue;
+            var dev = r.optString("iif", "");
+            // only our "iif <bridge> lookup <table>" rules: skip rules with no
+            // iif, and netd's marked rules (any fwmark/mask present)
+            if (dev.isEmpty()) continue;
+            if (!r.isNull("fwmark") || !r.isNull("fwmask")) continue;
+            boolean ours = false;
+            for (var br : bridges)
+                if (dev.startsWith(br)) { ours = true; break; }
+            if (!ours) continue;
+            var tbl = String.valueOf(r.optInt("table", 0));
+            boolean stale = r.optBoolean("detached", false)
+                || table == null || !tbl.equals(table)
+                || !desired.contains(dev) || satisfied.contains(dev);
+            if (stale) {
+                Log.i(TAG, fmt("Removing stale rule: iif %s lookup %s (v%d)",
+                    dev, tbl, ipv6 ? 6 : 4));
+                ruleDel(ipv6, dev, tbl);
+            } else {
+                satisfied.add(dev);
+            }
+        }
+        for (var dev : desired) {
+            if (satisfied.contains(dev)) continue;
+            Log.i(TAG, fmt("Adding rule: iif %s lookup %s (v%d)",
+                dev, table, ipv6 ? 6 : 4));
+            ruleAdd(ipv6, dev, table);
+        }
     }
 
     private synchronized void runOnce() {
+        ensureHostIpMonitor();
+        updateHostIps();
+        updateDefaultRouter();
+    }
+
+    private void updateDefaultRouter() {
         try {
-            var newDefault = getCurrentDefault();
-            if (newDefault == null) return;
-            if (lastDefault == null) {
-                Log.i(TAG, fmt("Found default router changed %s", newDefault));
-            } else {
-                if (newDefault.equals(lastDefault)) return;
-                Log.i(TAG, fmt("Default router changed from %s to %s", lastDefault, newDefault));
-            }
-            clearRule();
-            setDefaultRouterForNetworks(newDefault);
-            lastDefault = newDefault;
+            var new4 = currentDefaultTable(false);
+            var new6 = currentDefaultTable(true);
+            reconcileRules(false, new4);
+            reconcileRules(true, new6);
+            boolean changed = !java.util.Objects.equals(new4, lastDefault4)
+                || !java.util.Objects.equals(new6, lastDefault6);
+            if (changed)
+                Log.i(TAG, fmt("Default network now v4=%s v6=%s", new4, new6));
+            lastDefault4 = new4;
+            lastDefault6 = new6;
+            // notify only on appearance/change, not on loss: a reconnect to
+            // the same network re-triggers because the loss nulled the state
+            if (changed && (new4 != null || new6 != null))
+                notifyChange();
         } catch (Exception e) {
             Log.w(TAG, "Failed to update default router", e);
             stop();
         }
     }
 
+    private void notifyChange() {
+        for (var listener : listeners) {
+            try {
+                listener.run();
+            } catch (Exception e) {
+                Log.w(TAG, "Default-network listener failed", e);
+            }
+        }
+    }
+
+    /**
+     * Backstop poll of the phone's own IPv4 addresses for port-forward DNAT
+     * scoping. The {@code netbox monitor-addr} stream is the primary, instant
+     * source ({@link #onMonitorSet}); this tick covers a missed event or a dead
+     * monitor. On a transient query failure the previous set is kept (returning
+     * empty would flap every forward), so this never throws out of the tick.
+     */
+    private void updateHostIps() {
+        try {
+            applyHostIps(Netbox.hostIpv4(HOST_IFACE_PREFIXES, Constants.PBRIDGE_OFFLOAD_MAGIC));
+        } catch (Exception e) {
+            Log.w(TAG, "Failed to poll host IPv4 addresses", e);
+        }
+    }
+
+    /** Diffs the fresh set against the cache and fires listeners if it moved. */
+    private void applyHostIps(@NonNull Set<String> fresh) {
+        if (fresh.equals(hostIpv4)) return;
+        Log.i(TAG, fmt("Host IPv4 set changed %s -> %s", hostIpv4, fresh));
+        hostIpv4 = Set.copyOf(fresh);
+        for (var listener : hostIpListeners) {
+            try {
+                listener.run();
+            } catch (Exception e) {
+                Log.w(TAG, "Host-IP listener failed", e);
+            }
+        }
+    }
+
+    /**
+     * Receives a new host-IP set from the netbox monitor (on its process
+     * thread). Hops onto the scheduler so all host-IP state mutates on one
+     * thread, shared with the backstop tick; dropped if we're stopping.
+     */
+    private void onMonitorSet(@NonNull Set<String> fresh) {
+        var s = scheduler;
+        if (s == null) return;
+        try {
+            s.execute(() -> applyHostIps(fresh));
+        } catch (java.util.concurrent.RejectedExecutionException ignored) {
+            // scheduler shutting down; the next start() reseeds
+        }
+    }
+
+    /** Starts the monitor, or restarts it if it died (called each tick). */
+    private void ensureHostIpMonitor() {
+        if (!monitorEnabled) return;
+        if (hostIpMonitor != null && hostIpMonitor.isRunning()) return;
+        if (hostIpMonitor != null)
+            Log.w(TAG, "host-IP monitor exited; restarting");
+        hostIpMonitor = Netbox.startHostIpMonitor(
+            HOST_IFACE_PREFIXES, Constants.PBRIDGE_OFFLOAD_MAGIC, this::onMonitorSet);
+    }
+
+    /** Current snapshot of the phone's own IPv4 addresses (immutable). */
+    @NonNull
+    public Set<String> getHostIpv4Addresses() {
+        return hostIpv4;
+    }
+
+    /** Notified (on the watcher thread) when the host IPv4 set changes. */
+    public void addHostIpListener(@NonNull Runnable listener) {
+        hostIpListeners.add(listener);
+    }
+
+    public void removeHostIpListener(@NonNull Runnable listener) {
+        hostIpListeners.remove(listener);
+    }
+
+    /** Notified (on the watcher thread) when the default network changes. */
+    public void addListener(@NonNull Runnable listener) {
+        listeners.add(listener);
+    }
+
+    public void removeListener(@NonNull Runnable listener) {
+        listeners.remove(listener);
+    }
+
+    /** Installs the new network's rules immediately (the tick would lag 5s). */
     public synchronized void setForNewNetwork(@NonNull NetworkInstance inst) {
-        if (lastDefault == null) return;
-        addRule(lastDefault, inst.item.optString("bridge_name", ""));
+        try {
+            reconcileRules(false, currentDefaultTable(false));
+            reconcileRules(true, currentDefaultTable(true));
+        } catch (Exception e) {
+            Log.w(TAG, "Failed to install rules for new network", e);
+        }
     }
 
     public void start() {
+        monitorEnabled = true;
         scheduler = Executors.newSingleThreadScheduledExecutor(r -> {
             var t = new Thread(r, TAG);
             t.setDaemon(true);
             return t;
         });
+        // the first tick (delay 0) spawns the monitor via ensureHostIpMonitor
         scheduler.scheduleWithFixedDelay(
             this::runOnce, 0, POLL_INTERVAL_SEC, TimeUnit.SECONDS
         );
     }
 
-    public void stop() {
+    public synchronized void stop() {
+        monitorEnabled = false;
+        if (hostIpMonitor != null) {
+            hostIpMonitor.stop();
+            hostIpMonitor = null;
+        }
         if (scheduler != null) {
             scheduler.shutdownNow();
             scheduler = null;
         }
-        clearRule();
+        // sweep every rule of ours, both families
+        try {
+            reconcileRules(false, null);
+            reconcileRules(true, null);
+        } catch (Exception e) {
+            Log.w(TAG, "Failed to sweep rules on stop", e);
+        }
     }
 }
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/Dnsmasq.java b/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/Dnsmasq.java
deleted file mode 100644
index 0c41b7127..000000000
--- a/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/Dnsmasq.java
+++ /dev/null
@@ -1,217 +0,0 @@
-package cn.classfun.droidvm.daemon.network.backend;
-
-import static cn.classfun.droidvm.lib.Constants.DATA_DIR;
-import static cn.classfun.droidvm.lib.utils.AssetUtils.getPrebuiltBinaryPath;
-import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
-import static cn.classfun.droidvm.lib.utils.StringUtils.pathJoin;
-
-import android.util.Log;
-
-import androidx.annotation.NonNull;
-import androidx.annotation.Nullable;
-
-import java.io.BufferedReader;
-import java.io.File;
-import java.io.InputStreamReader;
-import java.io.InterruptedIOException;
-import java.util.ArrayList;
-import java.util.concurrent.TimeUnit;
-
-import cn.classfun.droidvm.daemon.network.NetworkInstance;
-import cn.classfun.droidvm.lib.network.IPv4Address;
-import cn.classfun.droidvm.lib.network.IPv4Network;
-import cn.classfun.droidvm.lib.store.network.NetworkState;
-import cn.classfun.droidvm.lib.utils.ProcessUtils;
-
-public final class Dnsmasq {
-    private static final String TAG = "Dnsmasq";
-    private final NetworkInstance inst;
-    private Process dnsmasqProcess = null;
-    private Thread dnsmasqMonitor = null;
-    private volatile boolean dnsmasqRunning = false;
-    private int dnsmasqExitCode = -1;
-
-    public Dnsmasq(NetworkInstance inst) {
-        this.inst = inst;
-    }
-
-    @NonNull
-    private static String resolveDnsmasqBinary() {
-        var prebuilt = getPrebuiltBinaryPath("dnsmasq");
-        var file = new File(prebuilt);
-        if (file.isFile() && file.canExecute())
-            return prebuilt;
-        return "dnsmasq";
-    }
-
-    private void startDnsmasqProcess(
-    ) {
-        var bridge = inst.item.optString("bridge_name", "");
-        var rangeStart = inst.item.optString("dhcp_range_start", "");
-        var rangeEnd = inst.item.optString("dhcp_range_end", "");
-        var router = findRouterAddress(rangeStart);
-        var dnsmasq = resolveDnsmasqBinary();
-        Log.i(TAG, fmt("Starting dnsmasq on %s (%s - %s) using %s",
-            bridge, rangeStart, rangeEnd, dnsmasq));
-        var pidFile = getDnsmasqPidFile();
-        var leaseFile = getDnsmasqLeaseFile();
-        try {
-            var args = new ArrayList<String>();
-            args.add(dnsmasq);
-            args.add(fmt("--interface=%s", bridge));
-            args.add("--bind-interfaces");
-            args.add(fmt("--dhcp-range=%s,%s,12h", rangeStart, rangeEnd));
-            if (router != null)
-                args.add(fmt("--dhcp-option=option:router,%s", router));
-            var dnsServers = new ArrayList<String>();
-            for (var iter : inst.item.get("dns_servers")) {
-                var s = iter.getValue().asString();
-                if (s != null && !s.isEmpty()) dnsServers.add(s);
-            }
-            if (!dnsServers.isEmpty())
-                args.add(fmt("--dhcp-option=option:dns-server,%s", String.join(",", dnsServers)));
-            args.add("--port=0");
-            args.add("--no-resolv");
-            args.add("--no-daemon");
-            args.add("--keep-in-foreground");
-            args.add(fmt("--pid-file=%s", pidFile));
-            args.add(fmt("--dhcp-leasefile=%s", leaseFile));
-            args.add("--log-queries");
-            args.add("--log-dhcp");
-            var pb = new ProcessBuilder(args);
-            pb.redirectErrorStream(true);
-            dnsmasqExitCode = 0;
-            dnsmasqProcess = pb.start();
-            Log.i(TAG, fmt("dnsmasq started on %s", bridge));
-        } catch (Exception e) {
-            Log.e(TAG, fmt("Failed to start dnsmasq on %s", bridge), e);
-        }
-    }
-
-    @Nullable
-    private String findRouterAddress(@NonNull String rangeStart) {
-        IPv4Address dhcpStart = null;
-        try {
-            if (!rangeStart.isEmpty()) dhcpStart = IPv4Address.parse(rangeStart);
-        } catch (Exception ignored) {
-        }
-
-        IPv4Network fallback = null;
-        for (var iter : inst.item.get("ipv4_addresses")) {
-            try {
-                var cidr = IPv4Network.parse(iter.getValue().asString());
-                if (fallback == null) fallback = cidr;
-                if (dhcpStart != null && cidr.contains(dhcpStart))
-                    return cidr.address().toString();
-            } catch (Exception ignored) {
-            }
-        }
-        return fallback != null ? fallback.address().toString() : null;
-    }
-
-    private void stopDnsmasqProcess(@Nullable Process process) {
-        var bridge = inst.item.optString("bridge_name", "");
-        Log.i(TAG, fmt("Stopping dnsmasq on %s", bridge));
-        if (process != null) {
-            process.destroy();
-            try {
-                process.waitFor(3, TimeUnit.SECONDS);
-            } catch (InterruptedException ignored) {
-                Thread.currentThread().interrupt();
-            }
-            process.destroyForcibly();
-            try {
-                process.waitFor();
-            } catch (InterruptedException ignored) {
-                Thread.currentThread().interrupt();
-            }
-        }
-        var pidFile = getDnsmasqPidFile();
-        if (new File(pidFile).exists())
-            ProcessUtils.shellKillProcessFile(pidFile);
-    }
-
-    public void startDnsmasq() {
-        stopDnsmasq();
-        var br = inst.item.optString("bridge_name", "");
-        startDnsmasqProcess();
-        if (dnsmasqProcess == null) {
-            Log.e(TAG, fmt("dnsmasq failed to start on %s", br));
-            dnsmasqRunning = false;
-            return;
-        }
-        dnsmasqRunning = true;
-        Log.i(TAG, fmt("dnsmasq running on %s", br));
-        dnsmasqMonitor = new Thread(this::dnsmasqMonitorThread, fmt("dnsmasq-mon-%s", br));
-        dnsmasqMonitor.setDaemon(true);
-        dnsmasqMonitor.start();
-    }
-
-    private void dnsmasqMonitorThread() {
-        var br = inst.item.optString("bridge_name", "");
-        try {
-            try (var reader = new BufferedReader(
-                new InputStreamReader(dnsmasqProcess.getInputStream()))) {
-                String line;
-                while ((line = reader.readLine()) != null)
-                    Log.d(fmt("dnsmasq-%s", br), line);
-            }
-            int code = dnsmasqProcess.waitFor();
-            dnsmasqExitCode = code;
-            dnsmasqRunning = false;
-            if (inst.getState() == NetworkState.RUNNING) {
-                Log.w(TAG, fmt("dnsmasq on %s exited unexpectedly (code %d)", br, code));
-            } else {
-                Log.i(TAG, fmt("dnsmasq on %s exited (code %d)", br, code));
-            }
-        } catch (InterruptedException | InterruptedIOException e) {
-            Thread.currentThread().interrupt();
-            Log.d(TAG, fmt("dnsmasq monitor on %s interrupted", br));
-        } catch (Exception e) {
-            Log.e(TAG, fmt("dnsmasq monitor on %s failed", br), e);
-        } finally {
-            dnsmasqRunning = false;
-        }
-    }
-
-    public void stopDnsmasq() {
-        if (!dnsmasqRunning) return;
-        if (dnsmasqMonitor != null) {
-            dnsmasqMonitor.interrupt();
-            dnsmasqMonitor = null;
-        }
-        if (dnsmasqProcess != null || inst.item.optBoolean("dhcp_enabled", false)) {
-            stopDnsmasqProcess(dnsmasqProcess);
-            dnsmasqProcess = null;
-        }
-        dnsmasqRunning = false;
-    }
-
-    @NonNull
-    public String getDnsmasqLeaseFile() {
-        return getDnsmasqLeaseFile(inst.item.optString("bridge_name", ""));
-    }
-
-    @NonNull
-    public String getDnsmasqPidFile() {
-        return getDnsmasqPidFile(inst.item.optString("bridge_name", ""));
-    }
-
-    @NonNull
-    public static String getDnsmasqLeaseFile(@NonNull String br) {
-        return pathJoin(DATA_DIR, "run", fmt("dnsmasq-%s.leases", br));
-    }
-
-    @NonNull
-    public static String getDnsmasqPidFile(@NonNull String br) {
-        return pathJoin(DATA_DIR, "run", fmt("dnsmasq-%s.pid", br));
-    }
-
-    public int getDnsmasqExitCode() {
-        return dnsmasqExitCode;
-    }
-
-    public boolean isDnsmasqRunning() {
-        return dnsmasqRunning;
-    }
-}
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/FirewallHelper.java b/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/FirewallHelper.java
index dd2cbad82..b46e54182 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/FirewallHelper.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/FirewallHelper.java
@@ -4,6 +4,7 @@
 import androidx.annotation.Nullable;
 
 import cn.classfun.droidvm.daemon.network.NetworkInstance;
+import cn.classfun.droidvm.lib.network.IPv6Network;
 
 @SuppressWarnings({"BooleanMethodIsAlwaysInverted", "unused", "UnusedReturnValue"})
 public abstract class FirewallHelper {
@@ -16,11 +17,40 @@ public abstract class FirewallHelper {
 
     public abstract void deinitNetwork(NetworkInstance inst);
 
-    public abstract boolean applyForward(
+    /** Allow traffic for a delegated prefix acquired while the network runs. */
+    public abstract void addLiveV6Subnet(
+        @NonNull NetworkInstance inst, @NonNull String dev, @NonNull IPv6Network net);
+
+    public abstract void removeLiveV6Subnet(
+        @NonNull NetworkInstance inst, @NonNull String dev, @NonNull IPv6Network net);
+
+    /**
+     * Installs the host-IP-independent half of a port forward: the FORWARD
+     * ACCEPT for the guest target and, when hairpinSubnet is set, the
+     * NAT-loopback MASQUERADE so a guest in that subnet reaching this forward
+     * via the host has its source masqueraded (reply returns via the gateway).
+     * The actual DNAT is installed per host IP via {@link #applyDnat}.
+     */
+    public abstract boolean applyForwardBase(
         @NonNull String bridge, @NonNull String guestIp, @NonNull String protocol,
-        @Nullable String hostIp, int hostPort, int guestPort);
+        int guestStart, int guestEnd, @Nullable String hairpinSubnet);
 
-    public abstract boolean removeForward(
+    public abstract boolean removeForwardBase(
         @NonNull String bridge, @NonNull String guestIp, @NonNull String protocol,
-        @Nullable String hostIp, int hostPort, int guestPort);
+        int guestStart, int guestEnd, @Nullable String hairpinSubnet);
+
+    /**
+     * Installs one DNAT rule scoped to a specific host IP ({@code -d hostIp}),
+     * so only traffic actually destined to the phone is redirected — transit
+     * traffic (other networks, tethered clients) is left alone. Called once
+     * per current host IP; rules are added/removed incrementally as the host
+     * IP set changes.
+     */
+    public abstract boolean applyDnat(
+        @NonNull String bridge, @NonNull String guestIp, @NonNull String protocol,
+        @NonNull String hostIp, int hostStart, int hostEnd, int guestStart, int guestEnd);
+
+    public abstract boolean removeDnat(
+        @NonNull String bridge, @NonNull String guestIp, @NonNull String protocol,
+        @NonNull String hostIp, int hostStart, int hostEnd, int guestStart, int guestEnd);
 }
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/LinuxBridgeBackend.java b/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/LinuxBridgeBackend.java
new file mode 100644
index 000000000..8a38f787e
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/LinuxBridgeBackend.java
@@ -0,0 +1,751 @@
+package cn.classfun.droidvm.daemon.network.backend;
+
+import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
+
+import android.util.Log;
+
+import androidx.annotation.NonNull;
+import androidx.annotation.Nullable;
+
+import org.json.JSONArray;
+import org.json.JSONException;
+import org.json.JSONObject;
+
+import java.util.Map;
+import java.util.concurrent.ConcurrentHashMap;
+
+import cn.classfun.droidvm.daemon.network.NetworkInstance;
+import cn.classfun.droidvm.daemon.vm.VMInstanceStore;
+import cn.classfun.droidvm.lib.Constants;
+import cn.classfun.droidvm.lib.network.IPNetwork;
+import cn.classfun.droidvm.lib.network.IPv4Network;
+import cn.classfun.droidvm.lib.network.IPv6Network;
+import cn.classfun.droidvm.lib.store.network.Ipv6Source;
+import cn.classfun.droidvm.lib.store.network.UplinkMode;
+import cn.classfun.droidvm.lib.store.network.VlanConfig;
+import cn.classfun.droidvm.lib.store.vm.VMNicConfig;
+import cn.classfun.droidvm.lib.utils.NetUtils;
+
+/**
+ * Linux-bridge data path: kernel bridge (+ VLAN filtering and per-VLAN
+ * 802.1q subinterfaces for L3 mode), bridgedhcp for DHCP/RA/DHCPv6-PD,
+ * iptables for SNAT and port forwards, pbridge for Wi-Fi L2 uplinks.
+ */
+public final class LinuxBridgeBackend extends BridgeBackend {
+    private static final String TAG = "LinuxBridgeBackend";
+    private final LinuxNetwork net;
+    private final FirewallHelper firewall;
+    private final String br;
+    private BridgeDhcp dhcp = null;
+    private Pbridge pbridge = null;
+    private String resolvedUplink = null;
+    private boolean uplinkEnslaved = false;
+    /** vlanId -> gateway-addressed /64 from a live PD delegation. */
+    private final Map<Integer, IPv6Network> liveV6 = new ConcurrentHashMap<>();
+    private final Map<String, Boolean> macSecurityActive = new ConcurrentHashMap<>();
+    /** tapName -> forwards this NIC actually installed (for exact teardown). */
+    private final Map<String, java.util.List<InstalledForward>> installedForwards = new ConcurrentHashMap<>();
+    /** tapName -> human-readable forward install failures. */
+    private final Map<String, java.util.List<String>> forwardFailures = new ConcurrentHashMap<>();
+    /** vids whose per-VLAN bridge + trunk leg exist (configured or on-demand). */
+    private final java.util.Set<Integer> createdVlanBridges = ConcurrentHashMap.newKeySet();
+    /** DHCP-PD vlanId -> uplink device written into the running bridgedhcp
+     *  config ("" when it was unresolved). Lets us reload when it appears. */
+    private final Map<Integer, String> pdConfiguredUplink = new ConcurrentHashMap<>();
+    /** Host IPv4 set the installed DNAT rules currently reflect; kept in sync. */
+    private final java.util.Set<String> appliedHostIps = new java.util.LinkedHashSet<>();
+    /** Re-scopes DNAT rules when the phone's host IPv4 set changes. */
+    private Runnable hostIpListener = null;
+
+    /** Records one installed forward so detach removes exactly what was added. */
+    private static final class InstalledForward {
+        final String guestIp, proto, hairpin;
+        final int hs, he, gs, ge;
+        InstalledForward(String guestIp, String proto, int hs, int he, int gs, int ge, String hairpin) {
+            this.guestIp = guestIp; this.proto = proto; this.hairpin = hairpin;
+            this.hs = hs; this.he = he; this.gs = gs; this.ge = ge;
+        }
+    }
+
+    public LinuxBridgeBackend(@NonNull NetworkInstance inst) {
+        super(inst);
+        this.net = inst.getStore().backend;
+        this.firewall = inst.getStore().firewall;
+        this.br = inst.item.optString("bridge_name", "");
+    }
+
+    @Override
+    public void start() throws Exception {
+        if (net.isInterfaceExists(br)) {
+            Log.w(TAG, fmt("Interface %s already exists, deleting", br));
+            net.deleteBridge(br);
+        }
+        if (!net.createBridge(br))
+            throw new RuntimeException(fmt("Failed to create bridge %s", br));
+        var mac = resolveBridgeMac();
+        if (mac != null && !net.setMacAddress(br, mac))
+            Log.w(TAG, fmt("Failed to set MAC %s on %s", mac, br));
+        net.setStp(br, inst.isStp());
+        switch (inst.getUplinkMode()) {
+            case L2:
+                startL2();
+                break;
+            case L3:
+                startL3();
+                break;
+        }
+        if (!net.setLinkState(br, true))
+            throw new RuntimeException(fmt("Failed to bring up bridge %s", br));
+        if (inst.getUplinkMode() == UplinkMode.L3)
+            startL3Services();
+    }
+
+    /**
+     * The bridge needs a stable MAC: the configured one for L3/none, an
+     * auto-generated persisted one otherwise. Without it the bridge MAC
+     * would follow whichever port is enslaved.
+     */
+    @Nullable
+    private String resolveBridgeMac() {
+        var mac = inst.getBridgeMacAddress();
+        if (mac != null) return mac;
+        var generated = inst.item.optString("generated_mac", "");
+        if (generated == null || generated.isEmpty()) {
+            generated = NetUtils.generateRandomMac();
+            inst.item.set("generated_mac", generated);
+        }
+        return generated;
+    }
+
+    private void startL2() throws Exception {
+        var configured = inst.getL2Uplink();
+        if (configured == null)
+            throw new RuntimeException("L2 network has no uplink configured");
+        var uplink = UplinkResolver.resolve(configured);
+        if (uplink == null)
+            throw new RuntimeException(fmt("Uplink \"%s\" not found", configured));
+        resolvedUplink = uplink;
+        // honour the configured toggle, but force pseudo-bridging when the
+        // resolved device can't be enslaved (Wi-Fi STA / non-ethernet)
+        boolean pseudo = inst.isL2PseudoBridge()
+            || UplinkResolver.assumeDontBridge(uplink);
+        if (pseudo) {
+            pbridge = new Pbridge(uplink, br);
+            if (!pbridge.start())
+                throw new RuntimeException(fmt(
+                    "Failed to start pseudo-bridge on %s", uplink));
+        } else {
+            uplinkEnslaved = net.addInterface(br, uplink);
+            if (!uplinkEnslaved) throw new RuntimeException(fmt(
+                "Uplink %s cannot be bridged (IFF_DONT_BRIDGE?); enable pseudo-bridge",
+                uplink
+            ));
+        }
+    }
+
+    private void startL3() {
+        // Stock GKI has no bridge VLAN filtering: each tagged VLAN gets its
+        // own bridge ({br}v{hex}) plus an 802.1q trunk leg ({br}.{hex}) on
+        // the main bridge. Access ports attach to the per-VLAN bridge,
+        // trunk ports to the main bridge; L3 lives on the per-VLAN bridge.
+        // VLAN 0 is the untagged domain: its L3 lives directly on the main
+        // bridge (no per-VLAN bridge, no VID-0 leg — that would only catch
+        // priority-tagged frames, not untagged traffic).
+        //
+        // These bridges and legs face the VMs, so harden them as a router's
+        // LAN side: disable IPv6 RA acceptance so a VM's RAs can't
+        // autoconfigure an address or default route on the host (the kernel
+        // default accept_ra=1 would otherwise allow it).
+        net.disableAcceptRa(br); // main bridge (VLAN 0 / trunk backbone)
+        for (var vlan : inst.getVlans()) {
+            int vid = vlan.getVlanId();
+            var dev = LinuxNetwork.vlanDevice(br, vid);
+            if (vid != 0) {
+                if (!net.createVlanBridge(br, vid))
+                    Log.w(TAG, fmt("Failed to create per-VLAN bridge for vid %d", vid));
+                createdVlanBridges.add(vid);
+                net.disableAcceptRa(LinuxNetwork.vlanTrunkLeg(br, vid)); // vlan if
+                net.disableAcceptRa(dev);                                // per-VLAN bridge
+            }
+            var net4 = vlan.getIpv4Network();
+            if (net4 != null && !net.addAddress(dev, net4))
+                Log.w(TAG, fmt("Failed to add IPv4 %s to %s", net4, dev));
+            for (var cidr : vlan.getIpv4Secondary())
+                addAddressSafe(dev, cidr, false);
+            var net6 = vlan.getIpv6Network();
+            if (net6 != null && !net.addAddress(dev, net6))
+                Log.w(TAG, fmt("Failed to add IPv6 %s to %s", net6, dev));
+            for (var cidr : vlan.getIpv6Secondary())
+                addAddressSafe(dev, cidr, true);
+        }
+    }
+
+    private void addAddressSafe(@NonNull String dev, @NonNull String cidr, boolean v6) {
+        try {
+            if (v6) net.addAddress(dev, IPv6Network.parse(cidr));
+            else net.addAddress(dev, IPv4Network.parse(cidr));
+        } catch (Exception e) {
+            Log.w(TAG, fmt("Skipping invalid CIDR %s on %s", cidr, dev), e);
+        }
+    }
+
+    private void startL3Services() {
+        firewall.initNetwork(inst);
+        net.populateRuleRoute(inst);
+        var watcher = inst.getStore().context.getRouterWatcher();
+        if (watcher != null) {
+            watcher.setForNewNetwork(inst);
+            // seed the host-IP set DNAT rules are scoped to, then track changes
+            synchronized (this) {
+                appliedHostIps.clear();
+                appliedHostIps.addAll(watcher.getHostIpv4Addresses());
+            }
+            hostIpListener = this::onHostIpsChanged;
+            watcher.addHostIpListener(hostIpListener);
+        }
+        if (BridgeDhcp.isNeeded(inst.getVlans())) {
+            dhcp = new BridgeDhcp(inst, this::onPdAddressChanged);
+            if (!dhcp.start())
+                Log.e(TAG, fmt("Failed to start bridgedhcp for %s", br));
+            snapshotPdUplinks();
+        }
+    }
+
+    /** Records the uplink each DHCP-PD VLAN resolved to in the running config. */
+    private synchronized void snapshotPdUplinks() {
+        pdConfiguredUplink.clear();
+        for (var vlan : inst.getVlans()) {
+            if (vlan.getIpv6Source() != Ipv6Source.DHCP_PD) continue;
+            var id = vlan.getPdUplink();
+            if (id == null) continue;
+            var dev = UplinkResolver.resolve(id);
+            pdConfiguredUplink.put(vlan.getVlanId(), dev == null ? "" : dev);
+        }
+    }
+
+    /**
+     * Reloads bridgedhcp when a DHCP-PD VLAN's uplink now resolves to a
+     * different device than the running config has — most importantly when it
+     * was unresolved at start (so PD was skipped) and the interface (e.g.
+     * Wi-Fi) has since come up. A still-unresolved uplink is left alone: a
+     * running PD client already retries on its own. Invoked on host-network
+     * changes, so the freshly-connected uplink gets a PD client.
+     */
+    private synchronized void reconcilePdUplinks() {
+        if (dhcp == null) return;
+        boolean changed = false;
+        for (var vlan : inst.getVlans()) {
+            if (vlan.getIpv6Source() != Ipv6Source.DHCP_PD) continue;
+            var id = vlan.getPdUplink();
+            if (id == null) continue;
+            var dev = UplinkResolver.resolve(id);
+            if (dev == null) continue; // still down: bridgedhcp retries itself
+            if (!dev.equals(pdConfiguredUplink.get(vlan.getVlanId()))) {
+                changed = true;
+                break;
+            }
+        }
+        if (!changed) return;
+        Log.i(TAG, fmt("PD uplink now available for %s; reloading bridgedhcp", br));
+        dhcp.restart();
+        snapshotPdUplinks();
+    }
+
+    /**
+     * PD event from bridgedhcp: the helper already plumbed the address on
+     * the per-VLAN bridge (and DHCPv6/RA follow it automatically); what is
+     * left is the host side — firewall accept rules for the delegated
+     * subnet and the policy-routing entries for return traffic.
+     */
+    private synchronized void onPdAddressChanged(int vlanId, @Nullable IPv6Network address) {
+        var dev = LinuxNetwork.vlanDevice(br, vlanId);
+        var old = liveV6.remove(vlanId);
+        if (old != null)
+            firewall.removeLiveV6Subnet(inst, dev, old);
+        if (address != null) {
+            liveV6.put(vlanId, address);
+            firewall.addLiveV6Subnet(inst, dev, address);
+            net.populateRouteForNetwork(dev, address);
+        }
+    }
+
+    @Override
+    public void stop() {
+        if (hostIpListener != null) {
+            var watcher = inst.getStore().context.getRouterWatcher();
+            if (watcher != null)
+                watcher.removeHostIpListener(hostIpListener);
+            hostIpListener = null;
+        }
+        synchronized (this) {
+            appliedHostIps.clear();
+        }
+        liveV6.clear();
+        if (dhcp != null) {
+            dhcp.stop();
+            dhcp = null;
+        }
+        if (pbridge != null) {
+            pbridge.stop();
+            pbridge = null;
+        }
+        if (uplinkEnslaved && resolvedUplink != null) {
+            net.removeInterface(resolvedUplink);
+            uplinkEnslaved = false;
+        }
+        if (inst.getUplinkMode() == UplinkMode.L3) {
+            firewall.deinitNetwork(inst);
+            for (var vid : createdVlanBridges)
+                net.deleteVlanBridge(br, vid);
+            createdVlanBridges.clear();
+        }
+        net.setLinkState(br, false);
+        if (net.isInterfaceExists(br) && !net.deleteBridge(br))
+            Log.w(TAG, fmt("Failed to delete bridge %s", br));
+        macSecurityActive.clear();
+        installedForwards.clear();
+        forwardFailures.clear();
+    }
+
+    @Override
+    public void attachNic(@NonNull VMNicConfig nic, @NonNull String tapName) throws Exception {
+        if (net.isInterfaceExists(tapName)) net.deleteTap(tapName);
+        if (!net.createTap(tapName))
+            throw new RuntimeException(fmt("Failed to create TAP %s", tapName));
+        try {
+            // an access port may reference a VLAN the network didn't configure;
+            // create its per-VLAN bridge on demand so the VM can still boot
+            if (inst.getUplinkMode() == UplinkMode.L3 && nic.getVlanId() != null)
+                ensureVlanBridge(nic.getVlanId());
+            var target = resolveAttachBridge(nic);
+            if (!net.addInterface(target, tapName))
+                throw new RuntimeException(fmt(
+                    "Failed to add TAP %s to bridge %s", tapName, target));
+            // The guest MAC is passed to the hypervisor only. Setting it on
+            // the host-side tap would duplicate the guest's MAC on the host
+            // and break L2 forwarding.
+            if (nic.isIsolated() && !net.setPortIsolated(tapName, true))
+                Log.w(TAG, fmt("Failed to isolate port %s", tapName));
+            applyMacSecurity(nic, tapName);
+            if (!net.setLinkState(tapName, true))
+                Log.w(TAG, fmt("Failed to bring up TAP %s", tapName));
+            if (inst.getUplinkMode() == UplinkMode.L3) {
+                if (dhcp != null) dhcp.reloadStaticLeases();
+                installNicForwards(nic, tapName);
+            }
+        } catch (Exception e) {
+            net.deleteTap(tapName);
+            throw e;
+        }
+    }
+
+    private void applyMacSecurity(@NonNull VMNicConfig nic, @NonNull String tapName) {
+        if (!nic.isMacSecurity()) return;
+        var mac = nic.getMacAddress();
+        if (mac == null) {
+            Log.w(TAG, fmt("MAC security on %s skipped: no MAC configured", tapName));
+            macSecurityActive.put(tapName, false);
+            return;
+        }
+        // "locked" bridge ports need kernel >= 5.16; degrade with a warning
+        if (net.setPortLocked(tapName, true) && net.fdbAddStatic(mac, tapName)) {
+            macSecurityActive.put(tapName, true);
+        } else {
+            Log.w(TAG, fmt(
+                "MAC security unavailable for %s (kernel without locked bridge ports?)",
+                tapName
+            ));
+            net.setPortLocked(tapName, false);
+            macSecurityActive.put(tapName, false);
+        }
+    }
+
+    /**
+     * Ensures the per-VLAN bridge + trunk leg for an access port's VLAN exist,
+     * creating them on demand for a VLAN the network config didn't declare
+     * (an L2-only segment, no gateway/DHCP). Recorded so stop() removes it.
+     * No-op for the trunk marker (4095) and for 0: a VID-0 leg must never
+     * be created (it would catch only priority-tagged frames).
+     */
+    private synchronized void ensureVlanBridge(int vid) {
+        if (vid == 0 || vid == 4095) return;
+        var perBr = LinuxNetwork.perVlanBridge(br, vid);
+        if (net.isInterfaceExists(perBr)) {
+            createdVlanBridges.add(vid);
+            return;
+        }
+        if (!net.createVlanBridge(br, vid))
+            Log.w(TAG, fmt("Failed to create on-demand per-VLAN bridge for vid %d", vid));
+        createdVlanBridges.add(vid);
+    }
+
+    /**
+     * The bridge a NIC's tap attaches to: a trunk port (no VLAN id / the
+     * 4095 marker) or any non-L3 network joins the main bridge; a tagged
+     * access port joins its VLAN's per-VLAN bridge. VLAN 0 (untagged-only)
+     * ports don't exist on a Linux bridge — validation rejects them, since
+     * without VLAN filtering they could only behave as trunks.
+     */
+    @NonNull
+    private String resolveAttachBridge(@NonNull VMNicConfig nic) {
+        if (inst.getUplinkMode() != UplinkMode.L3) return br;
+        var vlanId = nic.getVlanId();
+        if (vlanId == null || vlanId == 4095) return br;
+        return LinuxNetwork.perVlanBridge(br, vlanId);
+    }
+
+    private synchronized void installNicForwards(@NonNull VMNicConfig nic, @NonNull String tapName) {
+        var vlan = nic.resolveDhcpVlan(inst);
+        if (vlan == null) return;
+        if (!nic.isDhcp4LeaseEnabled() || !vlan.isDhcp4Enabled() || !vlan.isIpv4Snat())
+            return;
+        var net4 = vlan.getIpv4Network();
+        if (net4 == null) return;
+        String guestIp;
+        try {
+            guestIp = net4.addressAtOffset(nic.getDhcp4Offset()).toString();
+        } catch (Exception e) {
+            Log.w(TAG, "Invalid DHCPv4 lease offset, skipping forwards", e);
+            return;
+        }
+        // NAT-loopback: a guest in this subnet reaching the forward gets
+        // masqueraded so the target's reply returns via the gateway
+        var hairpinSubnet = net4.toNetworkString();
+        var installed = new java.util.ArrayList<InstalledForward>();
+        var failures = new java.util.ArrayList<String>();
+        for (var fwd : nic.getDhcp4Forwards()) {
+            try {
+                fwd.validate();
+                // "any" installs one rule per concrete protocol (tcp+udp)
+                for (var proto : fwd.protocols()) {
+                    // host-IP-independent half (FORWARD ACCEPT + hairpin) once...
+                    boolean ok = firewall.applyForwardBase(
+                        br, guestIp, proto, fwd.guestStart(), fwd.guestEnd(), hairpinSubnet);
+                    // ...then a DNAT per current host IP (scoped with -d)
+                    for (var hostIp : appliedHostIps)
+                        firewall.applyDnat(br, guestIp, proto, hostIp,
+                            fwd.hostStart(), fwd.hostEnd(), fwd.guestStart(), fwd.guestEnd());
+                    if (ok) installed.add(new InstalledForward(guestIp, proto,
+                        fwd.hostStart(), fwd.hostEnd(), fwd.guestStart(), fwd.guestEnd(),
+                        hairpinSubnet));
+                    else failures.add(fmt("%s %s:%s", proto, fwd.host, fwd.guest));
+                }
+            } catch (Exception e) {
+                failures.add(fmt("%s:%s (%s)", fwd.host, fwd.guest, e.getMessage()));
+            }
+        }
+        if (!installed.isEmpty()) installedForwards.put(tapName, installed);
+        if (!failures.isEmpty()) {
+            forwardFailures.put(tapName, failures);
+            Log.w(TAG, fmt("Forward install failures on %s: %s", tapName, failures));
+        }
+    }
+
+    /** Removes exactly the forwards this tap installed (DNAT per host IP, then base). */
+    private synchronized void removeNicForwards(@NonNull String tapName) {
+        forwardFailures.remove(tapName);
+        var installed = installedForwards.remove(tapName);
+        if (installed == null) return;
+        for (var f : installed) {
+            for (var hostIp : appliedHostIps)
+                firewall.removeDnat(br, f.guestIp, f.proto, hostIp,
+                    f.hs, f.he, f.gs, f.ge);
+            firewall.removeForwardBase(br, f.guestIp, f.proto, f.gs, f.ge, f.hairpin);
+        }
+    }
+
+    /**
+     * Re-scopes DNAT rules when the phone's host IPv4 set changes: adds rules
+     * for newly-seen addresses, removes them for vanished ones, leaving the
+     * FORWARD/hairpin rules (host-IP-independent) untouched.
+     */
+    private synchronized void onHostIpsChanged() {
+        // a host-network change (e.g. Wi-Fi connecting) is also the cue to
+        // pick up a PD uplink that was unavailable when the network started
+        reconcilePdUplinks();
+        var watcher = inst.getStore().context.getRouterWatcher();
+        if (watcher == null) return;
+        var target = watcher.getHostIpv4Addresses();
+        var added = new java.util.ArrayList<String>();
+        var removed = new java.util.ArrayList<String>();
+        for (var ip : target)
+            if (!appliedHostIps.contains(ip)) added.add(ip);
+        for (var ip : appliedHostIps)
+            if (!target.contains(ip)) removed.add(ip);
+        if (added.isEmpty() && removed.isEmpty()) return;
+        for (var entry : installedForwards.values())
+            for (var f : entry) {
+                for (var ip : added)
+                    firewall.applyDnat(br, f.guestIp, f.proto, ip,
+                        f.hs, f.he, f.gs, f.ge);
+                for (var ip : removed)
+                    firewall.removeDnat(br, f.guestIp, f.proto, ip,
+                        f.hs, f.he, f.gs, f.ge);
+            }
+        appliedHostIps.clear();
+        appliedHostIps.addAll(target);
+    }
+
+    @Override
+    public void detachNic(@NonNull VMNicConfig nic, @NonNull String tapName) {
+        if (inst.getUplinkMode() == UplinkMode.L3)
+            removeNicForwards(tapName);
+        net.removeInterface(tapName);
+        net.deleteTap(tapName);
+        macSecurityActive.remove(tapName);
+        if (dhcp != null) dhcp.reloadStaticLeases();
+    }
+
+    @Override
+    public JSONArray listAddresses() {
+        var arr = net.listAddresses(br);
+        for (var vlan : inst.getVlans()) {
+            if (vlan.getVlanId() == 0) continue; // untagged = the main bridge
+            var sub = net.listAddresses(
+                LinuxNetwork.perVlanBridge(br, vlan.getVlanId()));
+            for (int i = 0; i < sub.length(); i++)
+                arr.put(sub.opt(i));
+        }
+        return arr;
+    }
+
+    /**
+     * One row per address with three dimensions — VLAN, bound/unbound,
+     * configured/auto — over the union, in every mode, of every address the
+     * network carries: the live addresses on each bridge device (the main
+     * bridge = VLAN 0, every per-VLAN bridge = its VID) and every configured
+     * CIDR. A configured address that is also live appears once (configured +
+     * bound); a configured one not yet on a device is configured + unbound; a
+     * live one with no config is auto (link-local, RA, the L2 uplink mirror
+     * pbridge parks on the main bridge, ...). The main bridge is always
+     * scanned — including L2/none mode, where it is the only device and carries
+     * that mirror; per-VLAN bridges include on-demand ones, not just configured.
+     */
+    @NonNull
+    @Override
+    public JSONArray listAddressEntries() {
+        var out = new JSONArray();
+        // VID -> configured (VMM-managed) CIDRs; VLAN 0 included if declared,
+        // empty in L2/none mode (getVlans() is L3-only).
+        var configured = new java.util.LinkedHashMap<Integer, java.util.List<String>>();
+        for (var vlan : inst.getVlans())
+            configured.put(vlan.getVlanId(), configuredCidrs(vlan));
+        // Every VID whose L3 device may carry addresses, in a stable order:
+        // VLAN 0 (the main bridge, always — the L2 mirror lands here), the
+        // configured VLANs in config order, then any on-demand per-VLAN bridge.
+        var vids = new java.util.LinkedHashSet<Integer>();
+        vids.add(0);
+        vids.addAll(configured.keySet());
+        vids.addAll(createdVlanBridges);
+        for (var vid : vids) {
+            var dev = LinuxNetwork.vlanDevice(br, vid);
+            // canonical key -> raw "ip/plen" of every live address on the device
+            var live = new java.util.LinkedHashMap<String, String>();
+            var liveArr = net.listAddresses(dev);
+            for (int i = 0; i < liveArr.length(); i++) {
+                var raw = liveArr.optString(i, "");
+                if (!raw.isEmpty()) live.put(canonAddr(raw), raw);
+            }
+            for (var cidr : configured.getOrDefault(vid, java.util.List.of())) {
+                boolean bound = live.remove(canonAddr(cidr)) != null;
+                out.put(addressEntry(cidr, vid, bound, "configured"));
+            }
+            // The DHCP-PD host address is owned by the dedicated PD entry (it
+            // carries the release/renew actions and the Searching state), so
+            // drop it from the live set instead of re-listing it as "auto".
+            var pdAddr = liveV6.get(vid);
+            if (pdAddr != null) live.remove(canonAddr(pdAddr.toString()));
+            for (var raw : live.values())
+                out.put(addressEntry(raw, vid, true, "auto"));
+        }
+        // L2 pseudo-bridge: pbridge parks each learned guest address on the
+        // uplink tagged with the offload magic (so the Wi-Fi firmware answers
+        // ARP/NS for them). Those tagged addresses are exactly the pseudo-
+        // bridged guests' IPs — surface them under their own source; the metric
+        // filter drops the host's own (untagged) uplink addresses.
+        if (pbridge != null && resolvedUplink != null) {
+            var guests = net.listAddresses(resolvedUplink, Constants.PBRIDGE_OFFLOAD_MAGIC);
+            for (int i = 0; i < guests.length(); i++) {
+                var raw = guests.optString(i, "");
+                if (!raw.isEmpty())
+                    out.put(addressEntry(raw, 0, true, "pbridge_guest"));
+            }
+        }
+        return out;
+    }
+
+    /** Configured (VMM-managed) CIDRs of one VLAN: primary + secondary v4/v6. */
+    @NonNull
+    private static java.util.List<String> configuredCidrs(@NonNull VlanConfig vlan) {
+        var list = new java.util.ArrayList<String>();
+        var v4 = vlan.getIpv4Cidr();
+        if (v4 != null) list.add(v4);
+        list.addAll(vlan.getIpv4Secondary());
+        if (vlan.getIpv6Source() == Ipv6Source.STATIC) {
+            var v6 = vlan.getIpv6Cidr();
+            if (v6 != null) list.add(v6);
+        }
+        list.addAll(vlan.getIpv6Secondary());
+        return list;
+    }
+
+    /** Canonical "address/prefix" key so config and live forms compare equal. */
+    @NonNull
+    private static String canonAddr(@NonNull String cidr) {
+        try {
+            var n = IPNetwork.parse(cidr);
+            return fmt("%s/%d", n.address().toString(), n.prefix());
+        } catch (Exception e) {
+            return cidr;
+        }
+    }
+
+    @NonNull
+    @Override
+    public JSONArray listPdStatus() {
+        // bridgedhcp's runtime PD state, keyed by VLAN id
+        var runtime = new java.util.HashMap<Integer, JSONObject>();
+        if (dhcp != null) {
+            var rt = dhcp.getPdStatus();
+            for (int i = 0; i < rt.length(); i++) {
+                var o = rt.optJSONObject(i);
+                if (o != null) runtime.put(o.optInt("vlan", -1), o);
+            }
+        }
+        // One row per VLAN configured for DHCP-PD, so the UI always reflects
+        // the intent: when bridgedhcp has no client for it (the PD uplink was
+        // unresolved at start), synthesize a "no_uplink" row rather than
+        // hiding the VLAN entirely.
+        var out = new JSONArray();
+        for (var vlan : inst.getVlans()) {
+            if (vlan.getIpv6Source() != Ipv6Source.DHCP_PD) continue;
+            int vid = vlan.getVlanId();
+            var rt = runtime.get(vid);
+            if (rt != null) {
+                out.put(rt);
+                continue;
+            }
+            // No runtime client: tell apart a genuinely unresolved uplink from
+            // a helper that just isn't serving this VLAN yet (starting/down).
+            var id = vlan.getPdUplink();
+            var resolvable = id != null && UplinkResolver.resolve(id) != null;
+            out.put(pdEntry(vid, resolvable ? "searching" : "no_uplink", ""));
+        }
+        return out;
+    }
+
+    @NonNull
+    private static JSONObject pdEntry(int vlan, @NonNull String state, @NonNull String prefix) {
+        var o = new JSONObject();
+        try {
+            o.put("vlan", vlan);
+            o.put("state", state);
+            o.put("prefix", prefix);
+        } catch (JSONException ignored) {
+        }
+        return o;
+    }
+
+    @Override
+    public boolean renewPd(int vlanId) {
+        return dhcp != null && dhcp.renewPd(vlanId);
+    }
+
+    @Override
+    public boolean releasePd(int vlanId) {
+        return dhcp != null && dhcp.releasePd(vlanId);
+    }
+
+    @NonNull
+    @Override
+    public JSONArray listTools() {
+        var out = new JSONArray();
+        if (pbridge != null) out.put(toolEntry("pbridge", pbridge.isRunning()));
+        if (dhcp != null) out.put(toolEntry("bridgedhcp", dhcp.isRunning()));
+        return out;
+    }
+
+    @Nullable
+    @Override
+    public java.util.List<String> toolLog(@NonNull String key) {
+        if ("pbridge".equals(key) && pbridge != null) return pbridge.getLog();
+        if ("bridgedhcp".equals(key) && dhcp != null) return dhcp.getLog();
+        return null;
+    }
+
+    @Override
+    public JSONArray listInterfaces(VMInstanceStore vms) {
+        return net.listInterfaces(vms, br);
+    }
+
+    @Override
+    public JSONArray listNeighbors() {
+        var arr = net.listNeighbors(br);
+        for (var vlan : inst.getVlans()) {
+            if (vlan.getVlanId() == 0) continue; // untagged = the main bridge
+            var sub = net.listNeighbors(
+                LinuxNetwork.perVlanBridge(br, vlan.getVlanId()));
+            for (int i = 0; i < sub.length(); i++)
+                arr.put(sub.opt(i));
+        }
+        return arr;
+    }
+
+    @Override
+    public JSONArray listDhcpLeases() {
+        if (dhcp == null) return new JSONArray();
+        return dhcp.getLeases();
+    }
+
+    @Override
+    public void appendInfo(@NonNull JSONObject obj) throws JSONException {
+        if (dhcp != null) {
+            var status = dhcp.getStatus();
+            if (status != null) {
+                var pdStatus = extractPdStatus(status);
+                if (pdStatus.length() > 0) obj.put("pd_status", pdStatus);
+            }
+        }
+        if (resolvedUplink != null) obj.put("resolved_uplink", resolvedUplink);
+        if (!macSecurityActive.isEmpty()) {
+            var sec = new JSONObject();
+            for (var entry : macSecurityActive.entrySet())
+                sec.put(entry.getKey(), entry.getValue());
+            obj.put("mac_security_active", sec);
+        }
+        appendForwardFailures(obj, forwardFailures);
+    }
+
+    /**
+     * Converts bridgedhcp's status document into the legacy pd_status
+     * array shape ({vlan_id, state, prefix}).
+     */
+    @NonNull
+    private static JSONArray extractPdStatus(@NonNull JSONObject status) {
+        var out = new JSONArray();
+        var ifaces = status.optJSONArray("ifaces");
+        if (ifaces == null) return out;
+        for (int i = 0; i < ifaces.length(); i++) {
+            var iface = ifaces.optJSONObject(i);
+            if (iface == null) continue;
+            var state = iface.optString("pd_state", "");
+            if (state.isEmpty()) continue;
+            try {
+                var entry = new JSONObject();
+                entry.put("vlan_id", Integer.parseInt(iface.optString("tag", "-1")));
+                entry.put("state", state);
+                var prefix = iface.optString("pd_prefix", "");
+                if (!prefix.isEmpty()) entry.put("prefix", prefix);
+                out.put(entry);
+            } catch (Exception ignored) {
+            }
+        }
+        return out;
+    }
+
+    @NonNull
+    @Override
+    public Map<Integer, IPv6Network> getLiveV6Networks() {
+        return Map.copyOf(liveV6);
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/LinuxNetwork.java b/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/LinuxNetwork.java
index 1ef9c6bc8..2cf5d1449 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/LinuxNetwork.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/LinuxNetwork.java
@@ -1,13 +1,12 @@
 package cn.classfun.droidvm.daemon.network.backend;
 
-import static cn.classfun.droidvm.lib.utils.FileUtils.readFile;
-import static cn.classfun.droidvm.lib.utils.RunUtils.runList;
-import static cn.classfun.droidvm.lib.utils.RunUtils.runListQuiet;
+import static cn.classfun.droidvm.lib.utils.RunUtils.run;
 import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
 
 import android.util.Log;
 
 import androidx.annotation.NonNull;
+import androidx.annotation.Nullable;
 
 import org.json.JSONArray;
 import org.json.JSONException;
@@ -15,14 +14,20 @@
 
 import java.io.File;
 import java.util.LinkedHashSet;
-import java.util.List;
 import java.util.Set;
 
 import cn.classfun.droidvm.daemon.network.NetworkInstance;
 import cn.classfun.droidvm.daemon.vm.VMInstanceStore;
 import cn.classfun.droidvm.lib.network.IPNetwork;
 import cn.classfun.droidvm.lib.network.IPv4Network;
+import cn.classfun.droidvm.lib.network.IPv6Network;
 
+/**
+ * Linux data-path operations. Every netlink op goes through {@link Netbox}
+ * (our bundled static rtnetlink CLI) instead of the system {@code ip}/{@code
+ * bridge}, so behaviour is identical across OEMs. The only direct shell-outs
+ * left are procfs writes (sysctl) and a sysfs existence check.
+ */
 @SuppressWarnings({"BooleanMethodIsAlwaysInverted", "unused", "UnusedReturnValue"})
 public final class LinuxNetwork extends BackendBase {
     private static final String TAG = "BridgeManager";
@@ -30,80 +35,158 @@ public final class LinuxNetwork extends BackendBase {
     @Override
     public boolean createBridge(@NonNull String name) {
         Log.i(TAG, fmt("Creating bridge: %s", name));
-        var result = runList("ip", "link", "add", name, "type", "bridge");
-        result.printLog(TAG);
-        return result.isSuccess();
+        return Netbox.linkAddBridge(name);
+    }
+
+    /**
+     * Disables IPv6 RA acceptance on a host L3 device. The main bridge,
+     * per-VLAN bridges and trunk legs are router LAN-side interfaces facing
+     * the VMs; with the kernel default ({@code accept_ra=1}) a VM emitting
+     * RAs could make the host autoconfigure an address or default route.
+     * Best effort (the node is absent when IPv6 is disabled on the device).
+     */
+    public void disableAcceptRa(@NonNull String dev) {
+        run("echo 0 > /proc/sys/net/ipv6/conf/%s/accept_ra", dev);
     }
 
     @Override
     public boolean deleteBridge(@NonNull String name) {
         Log.i(TAG, fmt("Deleting bridge: %s", name));
-        var result = runList("ip", "link", "delete", name, "type", "bridge");
-        result.printLog(TAG);
-        return result.isSuccess();
+        return Netbox.linkDel(name);
+    }
+
+    /** base64url alphabet (A-Z a-z 0-9 - _); all legal in interface names. */
+    private static final char[] B64URL =
+        "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_".toCharArray();
+
+    /**
+     * Encodes a VLAN id as a fixed 2-char base64url code (the 12-bit VLAN
+     * space packs into two 6-bit digits), keeping {@code {br}.{code}} /
+     * {@code {br}v{code}} well within IFNAMSIZ (a 10-char bridge name + 3 = 13).
+     */
+    @NonNull
+    public static String vlanCode(int vid) {
+        int v = vid & 0xFFF;
+        return new String(new char[]{B64URL[(v >> 6) & 0x3F], B64URL[v & 0x3F]});
+    }
+
+    /**
+     * Per-VLAN Linux bridge that carries a tagged VLAN's L3 (gateway
+     * address, DHCP, SNAT). Stock Android GKI has no bridge VLAN filtering,
+     * so each tagged VLAN gets its own bridge instead of per-port VIDs on
+     * one bridge. Never used for VLAN 0: see {@link #vlanDevice}.
+     */
+    @NonNull
+    public static String perVlanBridge(@NonNull String bridge, int vid) {
+        return fmt("%sv%s", bridge, vlanCode(vid));
+    }
+
+    /**
+     * The device carrying a VLAN's L3. VLAN 0 is the untagged domain: its
+     * traffic lives on the main bridge itself (the IP stack has no trunk
+     * semantics — untagged frames are simply what the bridge device sees),
+     * so no per-VLAN bridge and no 802.1q leg exist for it. An 802.1q
+     * subinterface with VID 0 would receive only priority-tagged frames,
+     * never the untagged traffic it is meant to serve.
+     */
+    @NonNull
+    public static String vlanDevice(@NonNull String bridge, int vid) {
+        return vid == 0 ? bridge : perVlanBridge(bridge, vid);
+    }
+
+    /**
+     * 802.1q trunk leg: a subinterface on the main bridge (the tagged trunk
+     * backbone) enslaved into the per-VLAN bridge, so trunk ports on the main
+     * bridge exchange this VLAN's frames with the per-VLAN bridge's access
+     * ports while staying isolated from other VLANs.
+     */
+    @NonNull
+    public static String vlanTrunkLeg(@NonNull String bridge, int vid) {
+        return fmt("%s.%s", bridge, vlanCode(vid));
+    }
+
+    /**
+     * Brings up the per-VLAN bridge and its trunk leg: creates {br}v{hex},
+     * the {br}.{hex} 802.1q subinterface on the main bridge, enslaves the leg
+     * into the per-VLAN bridge and brings both up.
+     */
+    public boolean createVlanBridge(@NonNull String mainBr, int vid) {
+        var perBr = perVlanBridge(mainBr, vid);
+        var leg = vlanTrunkLeg(mainBr, vid);
+        Log.i(TAG, fmt("Creating per-VLAN bridge %s + trunk leg %s (vid %d)",
+            perBr, leg, vid));
+        boolean ok = createBridge(perBr);
+        ok &= Netbox.linkAddVlan(mainBr, leg, vid);
+        ok &= addInterface(perBr, leg);
+        ok &= setLinkState(leg, true);
+        ok &= setLinkState(perBr, true);
+        return ok;
+    }
+
+    /** Tears down the trunk leg and per-VLAN bridge created by createVlanBridge. */
+    public void deleteVlanBridge(@NonNull String mainBr, int vid) {
+        var perBr = perVlanBridge(mainBr, vid);
+        var leg = vlanTrunkLeg(mainBr, vid);
+        if (isInterfaceExists(leg)) Netbox.linkDel(leg);
+        if (isInterfaceExists(perBr)) deleteBridge(perBr);
+    }
+
+    public boolean setPortIsolated(@NonNull String dev, boolean isolated) {
+        return Netbox.linkSetIsolated(dev, isolated);
+    }
+
+    /**
+     * Locks a bridge port so only static fdb entries may send (MAC
+     * security). Requires kernel >= 5.16; callers degrade gracefully.
+     */
+    public boolean setPortLocked(@NonNull String dev, boolean locked) {
+        return Netbox.linkSetLocked(dev, locked);
+    }
+
+    public boolean fdbAddStatic(@NonNull String mac, @NonNull String dev) {
+        return Netbox.fdbAdd(mac, dev);
     }
 
     @Override
     public boolean createTap(@NonNull String name) {
         Log.i(TAG, fmt("Creating TAP: %s", name));
-        var result = runList(
-            "ip", "tuntap", "add", "dev", name, "mode", "tap", "vnet_hdr"
-        );
-        result.printLog(TAG);
-        return result.isSuccess();
+        return Netbox.linkAddTap(name);
     }
 
     @Override
     public boolean deleteTap(@NonNull String name) {
         Log.i(TAG, fmt("Deleting TAP: %s", name));
-        var result = runList("ip", "link", "delete", name);
-        result.printLog(TAG);
-        return result.isSuccess();
+        return Netbox.linkDel(name);
     }
 
     @Override
     public boolean setLinkState(@NonNull String name, boolean up) {
-        var state = up ? "up" : "down";
-        Log.i(TAG, fmt("Setting %s %s", name, state));
-        var result = runList("ip", "link", "set", name, state);
-        result.printLog(TAG);
-        return result.isSuccess();
+        Log.i(TAG, fmt("Setting %s %s", name, up ? "up" : "down"));
+        return Netbox.linkSetState(name, up);
     }
 
     @Override
     public boolean addInterface(@NonNull String bridge, @NonNull String iface) {
         Log.i(TAG, fmt("Adding %s to bridge %s", iface, bridge));
-        var result = runList("ip", "link", "set", iface, "master", bridge);
-        result.printLog(TAG);
-        return result.isSuccess();
+        return Netbox.linkSetMaster(iface, bridge);
     }
 
     @Override
     public boolean removeInterface(@NonNull String iface) {
         Log.i(TAG, fmt("Removing %s from bridge", iface));
-        var result = runList("ip", "link", "set", iface, "nomaster");
-        result.printLog(TAG);
-        return result.isSuccess();
+        return Netbox.linkSetNomaster(iface);
     }
 
     @Override
     public boolean setMacAddress(@NonNull String dev, @NonNull String mac) {
         Log.i(TAG, fmt("Setting MAC %s on %s", mac, dev));
-        var result = runList("ip", "link", "set", "dev", dev, "address", mac);
-        result.printLog(TAG);
-        return result.isSuccess();
+        return Netbox.linkSetMac(dev, mac);
     }
 
     @Override
     public boolean setStp(@NonNull String bridge, boolean enabled) {
-        var val = enabled ? "1" : "0";
-        Log.i(TAG, fmt("Setting STP %s on %s", val, bridge));
-        var result = runList(
-            "ip", "link", "set", "dev", bridge,
-            "type", "bridge", "stp_state", val
-        );
-        result.printLog(TAG);
-        return result.isSuccess();
+        Log.i(TAG, fmt("Setting STP %s on %s", enabled ? "1" : "0", bridge));
+        return Netbox.linkSetStp(bridge, enabled);
     }
 
     @Override
@@ -114,65 +197,59 @@ public boolean isInterfaceExists(@NonNull String name) {
     @Override
     public boolean addAddress(@NonNull String dev, @NonNull IPNetwork<?, ?, ?> cidr) {
         Log.i(TAG, fmt("Adding address %s to %s", cidr, dev));
-        var result = runList("ip", "addr", "add", cidr.toString(), "dev", dev);
-        result.printLog(TAG);
-        return result.isSuccess();
+        return Netbox.addrAdd(dev, cidr.toString());
     }
 
     @Override
     public boolean removeAddress(@NonNull String dev, @NonNull IPNetwork<?, ?, ?> cidr) {
         Log.i(TAG, fmt("Removing address %s from %s", cidr, dev));
-        var result = runList("ip", "addr", "del", cidr.toString(), "dev", dev);
-        result.printLog(TAG);
-        return result.isSuccess();
+        return Netbox.addrDel(dev, cidr.toString());
     }
 
     @NonNull
     @Override
     public JSONArray listAddresses(@NonNull String dev) {
-        var addr = new JSONArray();
-        var result = runListQuiet("ip", "-j", "addr", "show", "dev", dev);
-        if (!result.isSuccess()) return addr;
-        try {
-            var arr = new JSONArray(result.getOutString());
-            for (int i = 0; i < arr.length(); i++) {
-                var link = arr.getJSONObject(i);
-                var addrInfo = link.optJSONArray("addr_info");
-                if (addrInfo == null) continue;
-                for (int j = 0; j < addrInfo.length(); j++) {
-                    var ai = addrInfo.getJSONObject(j);
-                    var local = ai.optString("local", "");
-                    var prefixLen = ai.optInt("prefixlen", 0);
-                    if (!local.isEmpty())
-                        addr.put(fmt("%s/%d", local, prefixLen));
-                }
-            }
-        } catch (JSONException e) {
-            Log.e(TAG, fmt("Failed to parse addresses of %s", dev), e);
+        return listAddresses(dev, null);
+    }
+
+    /**
+     * Live addresses on {@code dev} as {@code "ip/plen"} strings; when
+     * {@code metric} is non-null, only addresses tagged with that
+     * IFA_RT_PRIORITY (pbridge's offload-proxy magic) are returned.
+     */
+    @NonNull
+    public JSONArray listAddresses(@NonNull String dev, @Nullable Long metric) {
+        var out = new JSONArray();
+        var rows = Netbox.addrList(dev, metric);
+        for (int i = 0; i < rows.length(); i++) {
+            var r = rows.optJSONObject(i);
+            if (r == null) continue;
+            var local = r.optString("local", "");
+            if (!local.isEmpty())
+                out.put(fmt("%s/%d", local, r.optInt("prefixlen", 0)));
         }
-        return addr;
+        return out;
     }
 
     @NonNull
     @Override
     public JSONArray listBridges() {
-        var result = runListQuiet("ip", "-j", "link", "show", "type", "bridge");
         var bridges = new JSONArray();
-        if (!result.isSuccess()) return bridges;
-        try {
-            var arr = new JSONArray(result.getOutString());
-            for (int i = 0; i < arr.length(); i++) {
-                var link = arr.getJSONObject(i);
+        var rows = Netbox.linkList(null, true);
+        for (int i = 0; i < rows.length(); i++) {
+            var r = rows.optJSONObject(i);
+            if (r == null) continue;
+            var name = r.optString("ifname", "");
+            try {
                 var br = new JSONObject();
-                var name = link.optString("ifname", "");
                 br.put("name", name);
-                br.put("state", link.optString("operstate", "UNKNOWN").toUpperCase());
-                br.put("mtu", link.optInt("mtu", 1500));
+                br.put("state", r.optString("operstate", "UNKNOWN").toUpperCase());
+                br.put("mtu", r.optInt("mtu", 1500));
                 br.put("interfaces", listBridgeInterfaces(name));
                 bridges.put(br);
+            } catch (JSONException e) {
+                Log.e(TAG, fmt("Failed to build bridge entry for %s", name), e);
             }
-        } catch (JSONException e) {
-            Log.e(TAG, "Failed to parse bridge list", e);
         }
         return bridges;
     }
@@ -181,16 +258,10 @@ public JSONArray listBridges() {
     @Override
     public JSONArray listBridgeInterfaces(@NonNull String bridge) {
         var members = new JSONArray();
-        var result = runListQuiet("ip", "-j", "link", "show", "master", bridge);
-        if (!result.isSuccess()) return members;
-        try {
-            var arr = new JSONArray(result.getOutString());
-            for (int i = 0; i < arr.length(); i++) {
-                var link = arr.getJSONObject(i);
-                members.put(link.optString("ifname", ""));
-            }
-        } catch (JSONException e) {
-            Log.e(TAG, fmt("Failed to parse interfaces of %s", bridge), e);
+        var rows = Netbox.linkList(bridge, false);
+        for (int i = 0; i < rows.length(); i++) {
+            var r = rows.optJSONObject(i);
+            if (r != null) members.put(r.optString("ifname", ""));
         }
         return members;
     }
@@ -199,25 +270,22 @@ public JSONArray listBridgeInterfaces(@NonNull String bridge) {
     @Override
     public JSONArray listAvailableInterfaces() {
         var iface = new JSONArray();
-        var result = runListQuiet("ip", "-j", "link", "show");
-        if (!result.isSuccess()) return iface;
-        try {
-            var arr = new JSONArray(result.getOutString());
-            for (int i = 0; i < arr.length(); i++) {
-                var link = arr.getJSONObject(i);
-                var name = link.optString("ifname", "");
-                if (name.equals("lo")) continue;
-                var info = link.optJSONObject("linkinfo");
-                if (info != null && info.optString("info_kind", "").equals("bridge"))
-                    continue;
+        var rows = Netbox.linkList(null, false);
+        for (int i = 0; i < rows.length(); i++) {
+            var r = rows.optJSONObject(i);
+            if (r == null) continue;
+            var name = r.optString("ifname", "");
+            if (name.equals("lo")) continue;
+            if (r.optString("kind", "").equals("bridge")) continue;
+            try {
                 var obj = new JSONObject();
                 obj.put("name", name);
-                obj.put("state", link.optString("operstate", "UNKNOWN").toUpperCase());
-                obj.put("master", link.optString("master", ""));
+                obj.put("state", r.optString("operstate", "UNKNOWN").toUpperCase());
+                obj.put("master", r.optString("master", ""));
                 iface.put(obj);
+            } catch (JSONException e) {
+                Log.e(TAG, "Failed to build interface entry", e);
             }
-        } catch (JSONException e) {
-            Log.e(TAG, "Failed to parse interface list", e);
         }
         return iface;
     }
@@ -226,32 +294,25 @@ public JSONArray listAvailableInterfaces() {
     @Override
     public JSONArray listInterfaces(VMInstanceStore vms, String bridge) {
         var iFaces = new JSONArray();
-        try {
-            var result = runListQuiet("ip", "-j", "link", "show", "master", bridge);
-            if (!result.isSuccess()) {
-                Log.w(TAG, fmt("Failed to list neighbors for bridge %s", bridge));
-                result.printLog("ip-neigh");
-                return iFaces;
-            }
-            var data = result.getOutString();
-            if (data.isEmpty()) return iFaces;
-            var arr = new JSONArray(data);
-            for (int i = 0; i < arr.length(); i++) {
-                var link = arr.getJSONObject(i);
+        var rows = Netbox.linkList(bridge, false);
+        for (int i = 0; i < rows.length(); i++) {
+            var r = rows.optJSONObject(i);
+            if (r == null) continue;
+            var ifname = r.optString("ifname", "");
+            try {
                 var obj = new JSONObject();
-                var ifname = link.optString("ifname", "");
                 obj.put("name", ifname);
-                obj.put("address", link.optString("address", ""));
-                obj.put("state", link.optString("operstate", "UNKNOWN"));
+                obj.put("address", r.optString("address", ""));
+                obj.put("state", r.optString("operstate", "UNKNOWN"));
                 var vmInfo = vms.findVMByTap(ifname);
                 if (vmInfo != null) {
                     obj.put("vm_id", vmInfo.optString("vm_id", ""));
                     obj.put("vm_name", vmInfo.optString("vm_name", ""));
                 }
                 iFaces.put(obj);
+            } catch (Exception e) {
+                Log.w(TAG, fmt("Error building interface entry for %s", ifname), e);
             }
-        } catch (Exception e) {
-            Log.w(TAG, fmt("Error while list interfaces for bridge %s", bridge), e);
         }
         return iFaces;
     }
@@ -259,95 +320,53 @@ public JSONArray listInterfaces(VMInstanceStore vms, String bridge) {
     @NonNull
     @Override
     public JSONArray listNeighbors(String bridge) {
-        var neighbors = new JSONArray();
-        try {
-            var result = runListQuiet("ip", "neigh", "show", "dev", bridge);
-            if (!result.isSuccess()) {
-                Log.w(TAG, fmt("Failed to list neighbors for bridge %s", bridge));
-                result.printLog("ip-neigh");
-                return neighbors;
-            }
-            var data = result.getOutString().trim();
-            if (data.isEmpty()) return neighbors;
-            for (var line : data.split("\n")) {
-                var parts = line.trim().split("\\s+");
-                if (parts.length < 1) continue;
-                var obj = new JSONObject();
-                obj.put("dst", parts[0]);
-                for (int i = 1; i < parts.length - 1; i++) {
-                    if (parts[i].equals("lladdr"))
-                        obj.put("lladdr", parts[++i]);
-                    else if (parts[i].equals("dev"))
-                        obj.put("dev", parts[++i]);
-                }
-                obj.put("state", List.of(parts[parts.length - 1]));
-                neighbors.put(obj);
-            }
-        } catch (Exception e) {
-            Log.w(TAG, fmt("Error while list neighbors for bridge %s", bridge), e);
-        }
-        return neighbors;
-    }
-
-    @NonNull
-    @Override
-    public JSONArray listDhcpLeases(String bridge) {
-        var leases = new JSONArray();
-        var leaseFile = new File(Dnsmasq.getDnsmasqLeaseFile(bridge));
-        if (!leaseFile.exists()) {
-            Log.w(TAG, fmt("DHCP lease file not found for bridge %s: %s", bridge, leaseFile));
-            return leases;
-        }
-        try {
-            var leaseResult = readFile(leaseFile);
-            for (var line : leaseResult.split("\n")) {
-                if (line.trim().isEmpty()) continue;
-                var parts = line.trim().split("\\s+");
-                if (parts.length >= 4) {
-                    var lease = new JSONObject();
-                    lease.put("expires", parts[0]);
-                    lease.put("mac", parts[1]);
-                    lease.put("ip", parts[2]);
-                    lease.put("hostname", parts.length >= 5 ? parts[3] : "");
-                    leases.put(lease);
-                }
-            }
-        } catch (Exception e) {
-            Log.w(TAG, fmt("Error while read DHCP leases %s", leaseFile), e);
-        }
-        return leases;
+        // netbox's neigh-list already emits {dst,lladdr,dev,state[]}.
+        return Netbox.neighList(bridge);
     }
 
+    /** Routing-table ids consulted by any "lookup" policy rule, for {@link #populateRouteForNetwork}. */
     @NonNull
-    private Set<String> listRouteTables() {
+    public Set<String> listRouteTables(boolean ipv6) {
         var set = new LinkedHashSet<String>();
-        var result = runListQuiet("ip", "rule", "show");
-        if (!result.isSuccess()) {
-            Log.w(TAG, "Failed to list IP rules");
-            result.printLog("ip-rule");
-            return set;
-        }
-        var data = result.getOutString();
-        for (var line : data.split("\n")) {
-            var idx = line.indexOf(" lookup ");
-            if (idx < 0) continue;
-            set.add(line.substring(idx + (" lookup ".length())).trim());
+        var rows = Netbox.ruleList(ipv6);
+        for (int i = 0; i < rows.length(); i++) {
+            var r = rows.optJSONObject(i);
+            if (r == null || !r.optBoolean("lookup", false)) continue;
+            set.add(String.valueOf(r.optInt("table", 0)));
         }
         return set;
     }
 
+    /** Adds one subnet to every policy routing table so host replies route back. */
+    public void populateRouteForNetwork(@NonNull String dev, @NonNull IPNetwork<?, ?, ?> net) {
+        boolean ipv6 = net instanceof IPv6Network;
+        var spec = net.toNetworkString();
+        for (var table : listRouteTables(ipv6))
+            Netbox.routeAdd(dev, spec, table, ipv6);
+    }
+
     @Override
     public void populateRuleRoute(@NonNull NetworkInstance inst) {
-        var br = inst.item.optString("bridge_name", "");
-        var list = listRouteTables();
-        inst.item.get("ipv4_addresses").forEachArray(a -> {
-            try {
-                var addr = IPv4Network.parse(a.asString());
-                var net = addr.network();
-                for (var table : list)
-                    runList("ip", "route", "add", net.toString(), "dev", br, "table", table);
-            } catch (Exception ignored) {
+        var br = inst.getBridgeName();
+        if (br == null) return;
+        for (var vlan : inst.getVlans()) {
+            var dev = vlanDevice(br, vlan.getVlanId());
+            var net4 = vlan.getIpv4Network();
+            if (net4 != null) populateRouteForNetwork(dev, net4);
+            for (var cidr : vlan.getIpv4Secondary()) {
+                try {
+                    populateRouteForNetwork(dev, IPv4Network.parse(cidr));
+                } catch (Exception ignored) {
+                }
             }
-        });
+            var net6 = vlan.getIpv6Network();
+            if (net6 != null) populateRouteForNetwork(dev, net6);
+            for (var cidr : vlan.getIpv6Secondary()) {
+                try {
+                    populateRouteForNetwork(dev, IPv6Network.parse(cidr));
+                } catch (Exception ignored) {
+                }
+            }
+        }
     }
 }
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/ManagedProcess.java b/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/ManagedProcess.java
new file mode 100644
index 000000000..c756d4e2e
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/ManagedProcess.java
@@ -0,0 +1,196 @@
+package cn.classfun.droidvm.daemon.network.backend;
+
+import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
+
+import android.util.Log;
+
+import androidx.annotation.NonNull;
+import androidx.annotation.Nullable;
+
+import java.io.BufferedReader;
+import java.io.InputStreamReader;
+import java.io.InterruptedIOException;
+import java.util.ArrayDeque;
+import java.util.ArrayList;
+import java.util.List;
+import java.util.concurrent.TimeUnit;
+
+import cn.classfun.droidvm.lib.utils.ProcessUtils;
+
+/**
+ * Supervises one external helper daemon (dnsmasq, gvswitch, pbridge):
+ * spawns it in the foreground, pumps its output to the log, tracks
+ * liveness/exit code and stops it with SIGTERM then SIGKILL.
+ */
+public class ManagedProcess {
+    public interface LineListener {
+        void onLine(@NonNull String line);
+    }
+
+    private final String tag;
+    private final String logTag;
+    private Process process = null;
+    private Thread monitor = null;
+    private volatile boolean running = false;
+    private volatile int exitCode = -1;
+    private Runnable onUnexpectedExit = null;
+    private volatile LineListener lineListener = null;
+    /** Recent merged stdout+stderr lines, surfaced to the network info UI. */
+    private static final int LOG_CAP = 1000;
+    private final ArrayDeque<String> logBuffer = new ArrayDeque<>();
+
+    public ManagedProcess(@NonNull String name, @NonNull String instance) {
+        this.tag = fmt("%s-%s", name, instance);
+        this.logTag = tag.length() > 23 ? tag.substring(0, 23) : tag;
+    }
+
+    /** Called from the monitor thread when the process dies without stop(). */
+    public void setOnUnexpectedExit(@Nullable Runnable callback) {
+        onUnexpectedExit = callback;
+    }
+
+    /**
+     * Receives every output line from the monitor thread (in addition to
+     * logging) — used for child event streams (e.g. bridgedhcp JSON lines).
+     */
+    public void setLineListener(@Nullable LineListener listener) {
+        lineListener = listener;
+    }
+
+    public synchronized boolean start(@NonNull List<String> args) {
+        stop();
+        Log.i(logTag, fmt("Starting: %s", String.join(" ", args)));
+        appendLog(fmt("=== starting: %s ===", String.join(" ", args)));
+        try {
+            var pb = new ProcessBuilder(args);
+            pb.redirectErrorStream(true);
+            exitCode = -1;
+            process = pb.start();
+        } catch (Exception e) {
+            Log.e(logTag, "Failed to start process", e);
+            process = null;
+            running = false;
+            return false;
+        }
+        running = true;
+        monitor = new Thread(this::monitorThread, fmt("mon-%s", tag));
+        monitor.setDaemon(true);
+        monitor.start();
+        return true;
+    }
+
+    private void monitorThread() {
+        var proc = process;
+        if (proc == null) return;
+        try {
+            try (var reader = new BufferedReader(
+                new InputStreamReader(proc.getInputStream()))) {
+                String line;
+                while ((line = reader.readLine()) != null) {
+                    Log.d(logTag, line);
+                    appendLog(line);
+                    var listener = lineListener;
+                    if (listener != null) {
+                        try {
+                            listener.onLine(line);
+                        } catch (Exception e) {
+                            Log.w(logTag, "Line listener failed", e);
+                        }
+                    }
+                }
+            }
+            int code = proc.waitFor();
+            exitCode = code;
+            boolean unexpected = running;
+            running = false;
+            appendLog(fmt("=== process exited (code %d) ===", code));
+            if (unexpected) {
+                Log.w(logTag, fmt("Process exited unexpectedly (code %d)", code));
+                var cb = onUnexpectedExit;
+                if (cb != null) cb.run();
+            } else {
+                Log.i(logTag, fmt("Process exited (code %d)", code));
+            }
+        } catch (InterruptedException | InterruptedIOException e) {
+            Thread.currentThread().interrupt();
+            Log.d(logTag, "Process monitor interrupted");
+        } catch (Exception e) {
+            Log.e(logTag, "Process monitor failed", e);
+        } finally {
+            running = false;
+        }
+    }
+
+    public synchronized void stop() {
+        running = false;
+        if (monitor != null) {
+            monitor.interrupt();
+            monitor = null;
+        }
+        var proc = process;
+        process = null;
+        if (proc == null) return;
+        Log.i(logTag, "Stopping process");
+        proc.destroy();
+        try {
+            proc.waitFor(3, TimeUnit.SECONDS);
+        } catch (InterruptedException ignored) {
+            Thread.currentThread().interrupt();
+        }
+        proc.destroyForcibly();
+        try {
+            proc.waitFor();
+        } catch (InterruptedException ignored) {
+            Thread.currentThread().interrupt();
+        }
+    }
+
+    /** Sends a signal (e.g. SIGHUP for config reload) to the running process. */
+    public synchronized boolean signal(int signal) {
+        var proc = process;
+        if (proc == null || !proc.isAlive()) return false;
+        int pid = pidOf(proc);
+        if (pid <= 0) return false;
+        return ProcessUtils.shellKillProcess(pid, signal);
+    }
+
+    /** java.lang.Process.pid() is not in the Android compile SDK; reflect. */
+    private static int pidOf(@NonNull Process proc) {
+        try {
+            var method = Process.class.getMethod("pid");
+            return (int) (long) (Long) method.invoke(proc);
+        } catch (Exception ignored) {
+        }
+        try {
+            var field = proc.getClass().getDeclaredField("pid");
+            field.setAccessible(true);
+            return field.getInt(proc);
+        } catch (Exception e) {
+            Log.w("ManagedProcess", "Failed to determine process pid", e);
+            return -1;
+        }
+    }
+
+    private void appendLog(@NonNull String line) {
+        synchronized (logBuffer) {
+            while (logBuffer.size() >= LOG_CAP) logBuffer.removeFirst();
+            logBuffer.addLast(line);
+        }
+    }
+
+    /** Snapshot of the last {@value #LOG_CAP} captured output lines. */
+    @NonNull
+    public List<String> getLog() {
+        synchronized (logBuffer) {
+            return new ArrayList<>(logBuffer);
+        }
+    }
+
+    public boolean isRunning() {
+        return running && process != null && process.isAlive();
+    }
+
+    public int getExitCode() {
+        return exitCode;
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/Netbox.java b/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/Netbox.java
new file mode 100644
index 000000000..7f68754c3
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/Netbox.java
@@ -0,0 +1,279 @@
+package cn.classfun.droidvm.daemon.network.backend;
+
+import static cn.classfun.droidvm.lib.utils.AssetUtils.getAssetBinaryPath;
+import static cn.classfun.droidvm.lib.utils.RunUtils.runListQuiet;
+import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
+
+import android.util.Log;
+
+import androidx.annotation.NonNull;
+import androidx.annotation.Nullable;
+
+import org.json.JSONArray;
+import org.json.JSONObject;
+
+import java.util.ArrayList;
+import java.util.LinkedHashSet;
+import java.util.List;
+import java.util.Set;
+import java.util.function.Consumer;
+
+/**
+ * The single entry point for every netlink operation the daemon performs.
+ *
+ * <p>The daemon used to shell out to the system {@code ip}/{@code bridge}
+ * (iproute2), which vary per OEM — some are too old to even emit
+ * {@code IFA_RT_PRIORITY} in {@code -j} JSON, the field pbridge tags its
+ * offload-proxy addresses with. {@code netbox} is our bundled, static Rust tool
+ * that does the same operations straight over rtnetlink with a fixed JSON
+ * schema, so behaviour is identical on every device. All argv building, binary
+ * resolution and JSON parsing live here; callers use the typed methods only.
+ *
+ * <p>Mutations return {@code true} on success (the tool's exit code); queries
+ * return the tool's parsed JSON ({@link JSONArray}, empty on any failure).
+ */
+final class Netbox {
+    private static final String TAG = "Netbox";
+
+    private Netbox() {
+    }
+
+    // ---------------------------------------------------------- link mutations
+
+    static boolean linkAddBridge(@NonNull String name) {
+        return run("link-add-bridge", name);
+    }
+
+    static boolean linkAddVlan(@NonNull String parent, @NonNull String name, int vid) {
+        return run("link-add-vlan", "--link", parent, "--name", name, "--id", String.valueOf(vid));
+    }
+
+    static boolean linkAddTap(@NonNull String name) {
+        return run("link-add-tap", name);
+    }
+
+    static boolean linkDel(@NonNull String name) {
+        return run("link-del", name);
+    }
+
+    static boolean linkSetState(@NonNull String name, boolean up) {
+        return run("link-set-state", name, up ? "up" : "down");
+    }
+
+    static boolean linkSetMaster(@NonNull String iface, @NonNull String master) {
+        return run("link-set-master", iface, master);
+    }
+
+    static boolean linkSetNomaster(@NonNull String iface) {
+        return run("link-set-nomaster", iface);
+    }
+
+    static boolean linkSetMac(@NonNull String dev, @NonNull String mac) {
+        return run("link-set-mac", dev, mac);
+    }
+
+    static boolean linkSetStp(@NonNull String bridge, boolean on) {
+        return run("link-set-stp", bridge, on ? "on" : "off");
+    }
+
+    static boolean linkSetIsolated(@NonNull String dev, boolean on) {
+        return run("link-set-isolated", dev, on ? "on" : "off");
+    }
+
+    static boolean linkSetLocked(@NonNull String dev, boolean on) {
+        return run("link-set-locked", dev, on ? "on" : "off");
+    }
+
+    // ---------------------------------------------------------- addr mutations
+
+    static boolean addrAdd(@NonNull String dev, @NonNull String cidr) {
+        return run("addr-add", dev, cidr);
+    }
+
+    static boolean addrDel(@NonNull String dev, @NonNull String cidr) {
+        return run("addr-del", dev, cidr);
+    }
+
+    // ------------------------------------------------------- route/rule/fdb
+
+    static boolean routeAdd(@NonNull String dev, @NonNull String dst, @NonNull String table, boolean v6) {
+        return run(v6Args("route-add", v6, "--dev", dev, "--dst", dst, "--table", table));
+    }
+
+    static boolean ruleAdd(@NonNull String iif, @NonNull String table, boolean v6) {
+        return run(v6Args("rule-add", v6, "--iif", iif, "--table", table));
+    }
+
+    static boolean ruleDel(@NonNull String iif, @NonNull String table, boolean v6) {
+        return run(v6Args("rule-del", v6, "--iif", iif, "--table", table));
+    }
+
+    static boolean fdbAdd(@NonNull String mac, @NonNull String dev) {
+        return run("fdb-add", mac, dev);
+    }
+
+    // ---------------------------------------------------------------- queries
+
+    /** Addresses as {@code [{ifname,family,local,prefixlen,scope,metric,noprefixroute}]}. */
+    @NonNull
+    static JSONArray addrList(@Nullable String dev, @Nullable Long metric) {
+        var args = new ArrayList<String>();
+        args.add("addr-list");
+        if (dev != null) {
+            args.add("--dev");
+            args.add(dev);
+        }
+        if (metric != null) {
+            args.add("--metric");
+            args.add(String.valueOf(metric));
+        }
+        return query(args);
+    }
+
+    /** Links as {@code [{ifname,address,operstate,master,mtu,kind}]}. */
+    @NonNull
+    static JSONArray linkList(@Nullable String master, boolean bridgeOnly) {
+        var args = new ArrayList<String>();
+        args.add("link-list");
+        if (master != null) {
+            args.add("--master");
+            args.add(master);
+        }
+        if (bridgeOnly) args.add("--type-bridge");
+        return query(args);
+    }
+
+    /** Neighbours of one device as {@code [{dst,lladdr,dev,state[]}]}. */
+    @NonNull
+    static JSONArray neighList(@NonNull String dev) {
+        return query(List.of("neigh-list", dev));
+    }
+
+    /** Policy rules as {@code [{priority,iif,table,fwmark,fwmask,detached}]}. */
+    @NonNull
+    static JSONArray ruleList(boolean v6) {
+        return query(v6 ? List.of("rule-list", "--v6") : List.of("rule-list"));
+    }
+
+    // -------------------------------------------------------------- host IPs
+
+    /**
+     * The phone's own reachable IPv4 addresses (one-shot). netbox applies the
+     * whole policy itself: only addresses on interfaces whose name starts with
+     * one of {@code prefixes} (the Wi-Fi/cellular/VPN/ethernet/tethering
+     * allowlist), with bridge devices and {@code excludeMetric}-tagged
+     * (pbridge offload) addresses dropped. Empty on any failure.
+     */
+    @NonNull
+    static Set<String> hostIpv4(@NonNull List<String> prefixes, @Nullable Long excludeMetric) {
+        var cmd = new ArrayList<String>();
+        cmd.add(getAssetBinaryPath("netbox"));
+        cmd.addAll(hostIpArgs("host-ips", prefixes, excludeMetric));
+        var result = runListQuiet(cmd);
+        if (!result.isSuccess()) {
+            Log.w(TAG, fmt("netbox host-ips failed (exit %d): %s",
+                result.getCode(), result.getErrString()));
+            return Set.of();
+        }
+        return parseHostIps(result.getOutString());
+    }
+
+    /**
+     * Streams host-IPv4 changes: starts {@code netbox monitor-addr} and calls
+     * {@code onChange} with the new set on every change (the same policy as
+     * {@link #hostIpv4}). netbox emits only on an actual change, so the
+     * callback fires only when the set really moved. Returns the supervised
+     * process; the caller owns its lifecycle (and should {@code stop()} it).
+     */
+    @NonNull
+    static ManagedProcess startHostIpMonitor(
+        @NonNull List<String> prefixes, @Nullable Long excludeMetric,
+        @NonNull Consumer<Set<String>> onChange
+    ) {
+        var cmd = new ArrayList<String>();
+        cmd.add(getAssetBinaryPath("netbox"));
+        cmd.addAll(hostIpArgs("monitor-addr", prefixes, excludeMetric));
+        var proc = new ManagedProcess("netbox", "hostip-mon");
+        proc.setLineListener(line -> {
+            var trimmed = line.trim();
+            // skip any non-JSON diagnostics merged from stderr
+            if (trimmed.isEmpty() || trimmed.charAt(0) != '{') return;
+            onChange.accept(parseHostIps(trimmed));
+        });
+        proc.start(cmd);
+        return proc;
+    }
+
+    @NonNull
+    private static List<String> hostIpArgs(
+        @NonNull String sub, @NonNull List<String> prefixes, @Nullable Long excludeMetric
+    ) {
+        var args = new ArrayList<String>();
+        args.add(sub);
+        for (var p : prefixes) {
+            args.add("--iface");
+            args.add(p);
+        }
+        if (excludeMetric != null) {
+            args.add("--exclude-metric");
+            args.add(String.valueOf(excludeMetric));
+        }
+        return args;
+    }
+
+    /** Parse one {@code {"v4":[...]}} line into a set; empty on any failure. */
+    @NonNull
+    private static Set<String> parseHostIps(@NonNull String json) {
+        var out = new LinkedHashSet<String>();
+        try {
+            var arr = new JSONObject(json).optJSONArray("v4");
+            if (arr != null)
+                for (int i = 0; i < arr.length(); i++) out.add(arr.getString(i));
+        } catch (Exception e) {
+            Log.w(TAG, fmt("Failed to parse netbox host-ips output: %s", json), e);
+        }
+        return out;
+    }
+
+    // ----------------------------------------------------------------- plumbing
+
+    @NonNull
+    private static String[] v6Args(@NonNull String sub, boolean v6, @NonNull String... rest) {
+        var args = new ArrayList<String>();
+        args.add(sub);
+        java.util.Collections.addAll(args, rest);
+        if (v6) args.add("--v6");
+        return args.toArray(new String[0]);
+    }
+
+    private static boolean run(@NonNull String... args) {
+        var cmd = new ArrayList<String>(args.length + 1);
+        cmd.add(getAssetBinaryPath("netbox"));
+        java.util.Collections.addAll(cmd, args);
+        var result = runListQuiet(cmd);
+        if (!result.isSuccess()) {
+            Log.w(TAG, fmt("netbox %s failed (exit %d): %s",
+                args[0], result.getCode(), result.getErrString()));
+        }
+        return result.isSuccess();
+    }
+
+    @NonNull
+    private static JSONArray query(@NonNull List<String> args) {
+        var cmd = new ArrayList<String>(args.size() + 1);
+        cmd.add(getAssetBinaryPath("netbox"));
+        cmd.addAll(args);
+        var result = runListQuiet(cmd);
+        if (!result.isSuccess()) {
+            Log.w(TAG, fmt("netbox %s failed (exit %d): %s",
+                args.get(0), result.getCode(), result.getErrString()));
+            return new JSONArray();
+        }
+        try {
+            return new JSONArray(result.getOutString());
+        } catch (Exception e) {
+            Log.e(TAG, fmt("Failed to parse netbox %s output", args.get(0)), e);
+            return new JSONArray();
+        }
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/Pbridge.java b/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/Pbridge.java
new file mode 100644
index 000000000..bd64792fd
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/Pbridge.java
@@ -0,0 +1,94 @@
+package cn.classfun.droidvm.daemon.network.backend;
+
+import static cn.classfun.droidvm.lib.utils.AssetUtils.getAssetBinaryPath;
+import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
+
+import android.util.Log;
+
+import androidx.annotation.NonNull;
+
+import java.util.List;
+
+/**
+ * pseudo-bridge-rs daemon for L2 networks whose uplink cannot be enslaved
+ * into a Linux bridge (Wi-Fi STA / IFF_DONT_BRIDGE): performs MAC-NAT in
+ * kernel via eBPF and bridges through a veth pair it manages itself.
+ */
+public final class Pbridge {
+    private static final String TAG = "Pbridge";
+    private static final int MAX_RESTARTS = 3;
+    private final ManagedProcess process;
+    private final String uplink;
+    private final String bridge;
+    private int restarts = 0;
+    private volatile boolean active = false;
+
+    public Pbridge(@NonNull String uplink, @NonNull String bridge) {
+        this.uplink = uplink;
+        this.bridge = bridge;
+        this.process = new ManagedProcess("pbridge", bridge);
+        this.process.setOnUnexpectedExit(this::onUnexpectedExit);
+    }
+
+    @NonNull
+    private List<String> buildArgs() {
+        return List.of(
+            getAssetBinaryPath("pbridge"),
+            "-i", uplink,
+            "-e", "ebpf",
+            "-m", "fwd-with-offload",
+            "-b", bridge,
+            "--offload-workaround", "v4,v6",
+            // pin the proxy-address tag so host-IP discovery can exclude them
+            "--offload-workaround-magic",
+            String.valueOf(cn.classfun.droidvm.lib.Constants.PBRIDGE_OFFLOAD_MAGIC),
+            "--arp-keepalive", "10",
+            "--loglevel", "info"
+        );
+    }
+
+    public boolean start() {
+        active = true;
+        restarts = 0;
+        return process.start(buildArgs());
+    }
+
+    public void stop() {
+        active = false;
+        process.stop();
+    }
+
+    private void onUnexpectedExit() {
+        if (!active) return;
+        if (restarts >= MAX_RESTARTS) {
+            Log.e(TAG, fmt(
+                "pbridge for %s died %d times, giving up", bridge, restarts
+            ));
+            return;
+        }
+        restarts++;
+        Log.w(TAG, fmt(
+            "Restarting pbridge for %s (attempt %d/%d)", bridge, restarts, MAX_RESTARTS
+        ));
+        try {
+            Thread.sleep(1000L * restarts);
+        } catch (InterruptedException e) {
+            Thread.currentThread().interrupt();
+            return;
+        }
+        if (active) process.start(buildArgs());
+    }
+
+    public boolean isRunning() {
+        return process.isRunning();
+    }
+
+    public int getExitCode() {
+        return process.getExitCode();
+    }
+
+    @NonNull
+    public java.util.List<String> getLog() {
+        return process.getLog();
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/UplinkResolver.java b/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/UplinkResolver.java
new file mode 100644
index 000000000..3557d9909
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/UplinkResolver.java
@@ -0,0 +1,251 @@
+package cn.classfun.droidvm.daemon.network.backend;
+
+import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
+
+import android.util.Log;
+
+import androidx.annotation.NonNull;
+import androidx.annotation.Nullable;
+
+import org.json.JSONArray;
+import org.json.JSONObject;
+
+import java.io.File;
+import java.nio.file.Files;
+import java.util.ArrayList;
+import java.util.List;
+
+/**
+ * Enumerates host L2 uplink candidates and resolves the logical
+ * "WiFi"/"Ethernet"/"Tethering" identifiers to a concrete interface at
+ * network start: device names drift across reboots (wlan0 ⇄ wlan1), so the
+ * identifier is stored and re-resolved live; a literal interface name is
+ * pinned and used as-is.
+ */
+public final class UplinkResolver {
+    private static final String TAG = "UplinkResolver";
+    public static final String ID_WIFI = "WiFi";
+    public static final String ID_ETHERNET = "Ethernet";
+    public static final String ID_TETHERING = "Tethering";
+
+    /** ARPHRD_ETHER: only L2 ethernet-type devices can join a Linux bridge. */
+    private static final int ARPHRD_ETHER = 1;
+    /**
+     * Android hotspot / USB-tether interface name prefixes. Deliberately NOT
+     * rmnet: cellular rawip is an L3 device and cannot be bridged.
+     */
+    private static final String[] TETHER_PREFIXES =
+        {"ap", "swlan", "softap", "rndis", "usb", "bt-pan"};
+
+    public static final class Iface {
+        public final String name;
+        public final boolean wireless, up, ether, physical, leaf, virtual;
+
+        Iface(@NonNull String name, boolean wireless, boolean up, boolean ether,
+              boolean physical, boolean leaf, boolean virtual) {
+            this.name = name;
+            this.wireless = wireless;
+            this.up = up;
+            this.ether = ether;
+            this.physical = physical;
+            this.leaf = leaf;
+            this.virtual = virtual;
+        }
+
+        /**
+         * A real, non-stacked L2 interface (excludes dummy/ifb/veth/vlan/
+         * tunnels): ethernet-type, a leaf netdev (iflink == ifindex), not a
+         * virtual DEVTYPE, and either up or backed by hardware. A USB-tether
+         * (rndis) or modem-ethernet has no backing device, so being up admits
+         * it; a real but unplugged NIC stays via its backing device.
+         */
+        boolean realL2() {
+            return ether && leaf && !virtual && (up || physical);
+        }
+    }
+
+    private UplinkResolver() {
+    }
+
+    /** All non-loopback, non-bridge, non-tun interfaces with their properties. */
+    @NonNull
+    private static List<Iface> scan() {
+        var out = new ArrayList<Iface>();
+        var entries = new File("/sys/class/net").listFiles();
+        if (entries == null) return out;
+        for (var entry : entries) {
+            var name = entry.getName();
+            if (name.equals("lo")) continue;
+            if (new File(entry, "bridge").exists()) continue;    // a bridge
+            if (new File(entry, "tun_flags").exists()) continue; // tun/tap
+            boolean wireless = new File(entry, "phy80211").exists()
+                || new File(entry, "wireless").exists();
+            boolean physical = new File(entry, "device").exists();
+            boolean ether = readInt(new File(entry, "type")) == ARPHRD_ETHER;
+            // leaf = not stacked on another netdev (drops veth/vlan/rmnet_data@…)
+            boolean leaf = readInt(new File(entry, "ifindex"))
+                == readInt(new File(entry, "iflink"));
+            out.add(new Iface(name, wireless, isUp(entry), ether,
+                physical, leaf, isVirtualDevtype(entry)));
+        }
+        return out;
+    }
+
+    private static boolean isUp(@NonNull File entry) {
+        try {
+            var s = Files.readAllLines(new File(entry, "operstate").toPath());
+            return !s.isEmpty() && s.get(0).trim().equals("up");
+        } catch (Exception e) {
+            return false;
+        }
+    }
+
+    private static int readInt(@NonNull File f) {
+        try {
+            var s = Files.readAllLines(f.toPath());
+            if (s.isEmpty()) return -1;
+            return Integer.parseInt(s.get(0).trim());
+        } catch (Exception e) {
+            return -1;
+        }
+    }
+
+    /** DEVTYPEs that are virtual L2 constructs, never a real uplink. */
+    private static final java.util.Set<String> VIRTUAL_DEVTYPES =
+        java.util.Set.of("vlan", "vxlan", "gretap", "erspan");
+
+    private static boolean isVirtualDevtype(@NonNull File entry) {
+        try {
+            for (var line : Files.readAllLines(new File(entry, "uevent").toPath()))
+                if (line.startsWith("DEVTYPE="))
+                    return VIRTUAL_DEVTYPES.contains(line.substring(8).trim());
+        } catch (Exception ignored) {
+        }
+        return false;
+    }
+
+    /**
+     * Concrete physical L2 devices for the picker: ethernet-type, state UP and
+     * backed by real hardware (excludes br/veth/tap/vlan/vxlan/gretap, which
+     * have no backing device or are filtered above).
+     */
+    @NonNull
+    private static List<Iface> concreteDevices() {
+        var out = new ArrayList<Iface>();
+        for (var i : scan())
+            if (i.realL2() && i.up) out.add(i);
+        return out;
+    }
+
+    @Nullable
+    private static String resolveWifi() {
+        String fallback = null;
+        for (var i : scan()) {
+            if (!i.wireless || !i.leaf || i.virtual) continue;
+            if (isTetherName(i.name)) continue;   // an AP/tether iface, not STA
+            if (i.up) return i.name;
+            if (fallback == null) fallback = i.name;
+        }
+        return fallback;
+    }
+
+    @Nullable
+    private static String resolveEthernet() {
+        String fallback = null;
+        for (var i : scan()) {
+            if (!i.realL2() || i.wireless || isTetherName(i.name)) continue;
+            if (i.up) return i.name;
+            if (fallback == null) fallback = i.name;
+        }
+        return fallback;
+    }
+
+    @Nullable
+    private static String resolveTethering() {
+        String fallback = null;
+        for (var i : scan()) {
+            if (!isTetherName(i.name)) continue;
+            if (i.up) return i.name;
+            if (fallback == null) fallback = i.name;
+        }
+        return fallback;
+    }
+
+    private static boolean isTetherName(@NonNull String name) {
+        for (var p : TETHER_PREFIXES)
+            if (name.startsWith(p)) return true;
+        return false;
+    }
+
+    /**
+     * Resolves a configured uplink (a logical identifier or a literal
+     * interface name) to a concrete interface, or null when nothing matches.
+     */
+    @Nullable
+    public static String resolve(@NonNull String configured) {
+        if (configured.equalsIgnoreCase(ID_WIFI)) return resolveWifi();
+        if (configured.equalsIgnoreCase(ID_ETHERNET)) return resolveEthernet();
+        if (configured.equalsIgnoreCase(ID_TETHERING)) return resolveTethering();
+        if (new File(fmt("/sys/class/net/%s/uevent", configured)).exists())
+            return configured;
+        Log.w(TAG, fmt("Uplink interface not found: %s", configured));
+        return null;
+    }
+
+    /** Whether a logical identifier's uplink can be bridged (Wi-Fi STA can't). */
+    public static boolean identifierBridgeable(@NonNull String id) {
+        return !id.equalsIgnoreCase(ID_WIFI);
+    }
+
+    /**
+     * Whether the interface is assumed to carry IFF_DONT_BRIDGE (not exposed
+     * via sysfs): a Wi-Fi STA or any non-ethernet-type device cannot be
+     * enslaved into a Linux bridge, so pseudo-bridging is mandatory.
+     */
+    public static boolean assumeDontBridge(@NonNull String iface) {
+        var entry = new File("/sys/class/net", iface);
+        boolean wireless = new File(entry, "phy80211").exists()
+            || new File(entry, "wireless").exists();
+        boolean ether = readInt(new File(entry, "type")) == ARPHRD_ETHER;
+        return wireless || !ether;
+    }
+
+    /**
+     * Picker payload: the three logical identifiers with their live-resolved
+     * name (empty when none present) and whether they can be bridged, plus the
+     * concrete physical L2 devices with their per-device bridgeability.
+     */
+    @NonNull
+    public static JSONObject listUplinksJson() {
+        var root = new JSONObject();
+        try {
+            var ids = new JSONArray();
+            ids.put(identifierJson(ID_WIFI, resolveWifi(), false));
+            ids.put(identifierJson(ID_ETHERNET, resolveEthernet(), true));
+            ids.put(identifierJson(ID_TETHERING, resolveTethering(), true));
+            root.put("identifiers", ids);
+            var devices = new JSONArray();
+            for (var i : concreteDevices()) {
+                var obj = new JSONObject();
+                obj.put("name", i.name);
+                obj.put("bridgeable", !i.wireless);
+                devices.put(obj);
+            }
+            root.put("devices", devices);
+        } catch (Exception e) {
+            Log.w(TAG, "Failed to build uplink list", e);
+        }
+        return root;
+    }
+
+    @NonNull
+    private static JSONObject identifierJson(
+        @NonNull String id, @Nullable String name, boolean bridgeable
+    ) throws org.json.JSONException {
+        var obj = new JSONObject();
+        obj.put("id", id);
+        obj.put("name", name == null ? "" : name);
+        obj.put("bridgeable", bridgeable);
+        return obj;
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/gvisor/GvisorBridgeBackend.java b/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/gvisor/GvisorBridgeBackend.java
new file mode 100644
index 000000000..87072d579
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/gvisor/GvisorBridgeBackend.java
@@ -0,0 +1,518 @@
+package cn.classfun.droidvm.daemon.network.backend.gvisor;
+
+import static cn.classfun.droidvm.lib.Constants.DATA_DIR;
+import static cn.classfun.droidvm.lib.utils.AssetUtils.getAssetBinaryPath;
+import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
+import static cn.classfun.droidvm.lib.utils.StringUtils.pathJoin;
+
+import android.util.Log;
+
+import androidx.annotation.NonNull;
+import androidx.annotation.Nullable;
+
+import org.json.JSONArray;
+import org.json.JSONException;
+import org.json.JSONObject;
+
+import java.io.File;
+import java.io.FileWriter;
+import java.math.BigInteger;
+import java.security.SecureRandom;
+import java.util.ArrayList;
+import java.util.HashSet;
+import java.util.List;
+import java.util.Map;
+import java.util.concurrent.ConcurrentHashMap;
+
+import cn.classfun.droidvm.daemon.network.NetworkInstance;
+import cn.classfun.droidvm.daemon.network.backend.BridgeBackend;
+import cn.classfun.droidvm.daemon.network.backend.ManagedProcess;
+import cn.classfun.droidvm.daemon.vm.VMInstanceStore;
+import cn.classfun.droidvm.lib.store.network.UplinkMode;
+import cn.classfun.droidvm.lib.store.network.VlanConfig;
+import cn.classfun.droidvm.lib.store.vm.VMNicConfig;
+
+/**
+ * gVisor vswitch data path: one gvswitch process per network listening on
+ * a private unix socket. VM NICs are tap devices that gvswitch takes over
+ * via AF_XDP; per-VLAN gateways inside gvswitch provide DHCP, SLAAC, SNAT
+ * (including IPv6) and port forwards.
+ */
+public final class GvisorBridgeBackend extends BridgeBackend {
+    private static final String TAG = "GvisorBridgeBackend";
+    /** gvswitch forwards take single ports; ranges are expanded with this cap. */
+    private static final int MAX_FORWARD_EXPANSION = 128;
+    private static final SecureRandom random = new SecureRandom();
+    private final ManagedProcess process;
+    private final String id8;
+    private String token = null;
+    private GvswitchClient client = null;
+    /** tapName -> NIC config of currently attached ports. */
+    private final Map<String, VMNicConfig> attached = new ConcurrentHashMap<>();
+    /** tapName -> installed gvswitch forward refs ("vlan/id"). */
+    private final Map<String, List<String>> installedForwards = new ConcurrentHashMap<>();
+    /** tapName -> human-readable forward install failures (e.g. port in use). */
+    private final Map<String, List<String>> forwardFailures = new ConcurrentHashMap<>();
+
+    public GvisorBridgeBackend(@NonNull NetworkInstance inst) {
+        super(inst);
+        this.id8 = inst.getId().toString().substring(0, 8);
+        this.process = new ManagedProcess("gvswitch", id8);
+    }
+
+    @NonNull
+    private String socketPath() {
+        return pathJoin(DATA_DIR, "run", fmt("gvswitch-%s.sock", id8));
+    }
+
+    @NonNull
+    private String configPath() {
+        return pathJoin(DATA_DIR, "run", fmt("gvswitch-%s.json", id8));
+    }
+
+    @Override
+    public void start() throws Exception {
+        var bytes = new byte[16];
+        random.nextBytes(bytes);
+        var sb = new StringBuilder();
+        for (var b : bytes) sb.append(fmt("%02x", b));
+        token = sb.toString();
+        var config = GvswitchConfigBuilder.build(inst);
+        var configFile = new File(configPath());
+        var parent = configFile.getParentFile();
+        if (parent != null && !parent.exists() && !parent.mkdirs())
+            throw new RuntimeException(fmt("Failed to create %s", parent));
+        try (var writer = new FileWriter(configFile)) {
+            writer.write(config.toString(2));
+        }
+        var sock = new File(socketPath());
+        if (sock.exists() && !sock.delete())
+            Log.w(TAG, fmt("Failed to remove stale socket %s", sock));
+        var args = new ArrayList<String>();
+        args.add(getAssetBinaryPath("gvswitch"));
+        args.add("-listen");
+        args.add(socketPath());
+        args.add("-auth-token");
+        args.add(token);
+        args.add("-config");
+        args.add(configPath());
+        if (inst.isStp()) args.add("-stp");
+        if (!process.start(args))
+            throw new RuntimeException("Failed to start gvswitch");
+        client = new GvswitchClient(socketPath(), token);
+        waitReady();
+    }
+
+    private void waitReady() throws Exception {
+        var deadline = System.currentTimeMillis() + 5000;
+        Exception last = null;
+        while (System.currentTimeMillis() < deadline) {
+            if (!process.isRunning())
+                throw new RuntimeException(fmt(
+                    "gvswitch exited during startup (code %d)", process.getExitCode()));
+            try {
+                var response = client.get("/api/v1/ports");
+                if (response.isSuccess()) return;
+                last = new RuntimeException(fmt(
+                    "gvswitch API returned %d: %s", response.code, response.body));
+            } catch (Exception e) {
+                last = e;
+            }
+            Thread.sleep(200);
+        }
+        throw new RuntimeException("gvswitch API did not become ready", last);
+    }
+
+    @Override
+    public void stop() {
+        attached.clear();
+        installedForwards.clear();
+        forwardFailures.clear();
+        process.stop();
+        var sock = new File(socketPath());
+        if (sock.exists() && !sock.delete())
+            Log.w(TAG, fmt("Failed to remove socket %s", sock));
+        client = null;
+    }
+
+    @Override
+    public void attachNic(@NonNull VMNicConfig nic, @NonNull String tapName) throws Exception {
+        if (client == null) throw new IllegalStateException("gvswitch not running");
+        var net = inst.getStore().backend;
+        if (net.isInterfaceExists(tapName)) net.deleteTap(tapName);
+        if (!net.createTap(tapName))
+            throw new RuntimeException(fmt("Failed to create TAP %s", tapName));
+        try {
+            if (!net.setLinkState(tapName, true))
+                throw new RuntimeException(fmt("Failed to bring up TAP %s", tapName));
+            var port = new JSONObject();
+            port.put("identifier", tapName);
+            var vlanId = nic.getVlanId();
+            port.put("vlan", vlanId == null ? 4095 : vlanId);
+            if (nic.isIsolated()) port.put("isolated", true);
+            var mac = nic.getMacAddress();
+            if (nic.isMacSecurity() && mac != null)
+                port.put("port_security", mac);
+            port.put("mode", "client");
+            port.put("transport", "af_xdp");
+            port.put("interface", tapName);
+            port.put("bpdu_guard", true);
+            var response = client.post("/api/v1/ports", port);
+            if (!response.isSuccess())
+                throw new RuntimeException(fmt(
+                    "gvswitch port create failed (%d): %s", response.code, response.body));
+            attached.put(tapName, nic);
+            applyStaticLeases(nic, tapName);
+            installNicForwards(nic, tapName);
+        } catch (Exception e) {
+            attached.remove(tapName);
+            try {
+                client.delete(fmt("/api/v1/ports/%s", tapName));
+            } catch (Exception ignored) {
+            }
+            net.deleteTap(tapName);
+            throw e;
+        }
+    }
+
+    private void applyStaticLeases(@NonNull VMNicConfig nic, @NonNull String tapName)
+        throws Exception {
+        var vlan = nic.resolveDhcpVlan(inst);
+        if (vlan == null) return;
+        var mac = nic.getMacAddress();
+        if (nic.isDhcp4LeaseEnabled() && vlan.isDhcp4Enabled() && mac != null) {
+            var net4 = vlan.getIpv4Network();
+            if (net4 != null) {
+                var binding = new JSONObject();
+                binding.put("id", tapName);
+                binding.put("mac", mac);
+                binding.put("ip",
+                    net4.addressAtOffset(nic.getDhcp4Offset()).toString());
+                check(client.put(fmt(
+                    "/api/v1/gateways/%d/dhcp4/static/%s", vlan.getVlanId(), tapName
+                ), binding), "dhcp4 static lease");
+            }
+        }
+        if (nic.isDhcp6LeaseEnabled() && vlan.isDhcp6Enabled()) {
+            var net6 = vlan.getIpv6Network();
+            if (net6 != null) {
+                var binding = new JSONObject();
+                binding.put("id", tapName);
+                // guest DUIDs are unknown; bind by port (and MAC when present)
+                binding.put("port_identifier", tapName);
+                if (mac != null) binding.put("mac", mac);
+                binding.put("ip", net6.addressAtOffset(
+                    BigInteger.valueOf(nic.getDhcp6Offset())).toString());
+                check(client.put(fmt(
+                    "/api/v1/gateways/%d/dhcp6/static/%s", vlan.getVlanId(), tapName
+                ), binding), "dhcp6 static lease");
+            }
+        }
+    }
+
+    private void removeStaticLeases(@NonNull VMNicConfig nic, @NonNull String tapName) {
+        var vlan = nic.resolveDhcpVlan(inst);
+        if (vlan == null || client == null) return;
+        try {
+            client.delete(fmt(
+                "/api/v1/gateways/%d/dhcp4/static/%s", vlan.getVlanId(), tapName));
+            client.delete(fmt(
+                "/api/v1/gateways/%d/dhcp6/static/%s", vlan.getVlanId(), tapName));
+        } catch (Exception e) {
+            Log.w(TAG, fmt("Failed to remove static leases for %s", tapName), e);
+        }
+    }
+
+    /**
+     * Installs this NIC's port forwards one at a time so a single bind
+     * failure (host port already in use — gvswitch local forwards listen
+     * on the host) only drops that one rule. Successfully installed refs
+     * are recorded per tap so detach removes exactly what this NIC added;
+     * failures are surfaced via network_info.
+     */
+    private void installNicForwards(@NonNull VMNicConfig nic, @NonNull String tapName) {
+        var ids = new ArrayList<String>();
+        var failures = new ArrayList<String>();
+        var vlan = nic.resolveDhcpVlan(inst);
+        if (vlan != null) {
+            if (nic.isDhcp4LeaseEnabled() && vlan.isDhcp4Enabled() && vlan.isIpv4Snat()) {
+                var net4 = vlan.getIpv4Network();
+                if (net4 != null) {
+                    var guestIp = guestIpAtOffset(net4, nic.getDhcp4Offset());
+                    if (guestIp != null)
+                        for (var fwd : nic.getDhcp4Forwards())
+                            postForward(vlan.getVlanId(), fwd, guestIp, false, ids, failures);
+                }
+            }
+            if (nic.isDhcp6LeaseEnabled() && vlan.isDhcp6Enabled() && vlan.isIpv6Snat()) {
+                var net6 = vlan.getIpv6Network();
+                if (net6 != null) {
+                    var guestIp = guestIpAtOffset(net6, nic.getDhcp6Offset());
+                    if (guestIp != null)
+                        for (var fwd : nic.getDhcp6Forwards())
+                            postForward(vlan.getVlanId(), fwd, guestIp, true, ids, failures);
+                }
+            }
+        }
+        if (!ids.isEmpty()) installedForwards.put(tapName, ids);
+        if (!failures.isEmpty()) {
+            forwardFailures.put(tapName, failures);
+            Log.w(TAG, fmt("Forward install failures on %s: %s", tapName, failures));
+        }
+    }
+
+    @Nullable
+    private static String guestIpAtOffset(
+        @NonNull cn.classfun.droidvm.lib.network.IPv4Network net, long offset
+    ) {
+        try {
+            return net.addressAtOffset(offset).toString();
+        } catch (Exception e) {
+            return null;
+        }
+    }
+
+    @Nullable
+    private static String guestIpAtOffset(
+        @NonNull cn.classfun.droidvm.lib.network.IPv6Network net, long offset
+    ) {
+        try {
+            return net.addressAtOffset(BigInteger.valueOf(offset)).toString();
+        } catch (Exception e) {
+            return null;
+        }
+    }
+
+    /**
+     * POSTs each concrete (proto, port) of one forward; gvswitch takes
+     * single ports, so ranges are expanded (capped). Each accepted rule's
+     * "vlan/id" ref is recorded; rejections (e.g. bind in use) are noted.
+     */
+    private void postForward(
+        int vlanId, @NonNull VMNicConfig.PortForward fwd, @NonNull String guestIp,
+        boolean v6, @NonNull List<String> ids, @NonNull List<String> failures
+    ) {
+        try {
+            fwd.validate();
+        } catch (Exception e) {
+            failures.add(fmt("%s %s:%s (%s)", fwd.proto, fwd.host, fwd.guest, e.getMessage()));
+            return;
+        }
+        int count = fwd.hostEnd() - fwd.hostStart() + 1;
+        if (count > MAX_FORWARD_EXPANSION) {
+            Log.w(TAG, fmt(
+                "Forward range %s exceeds %d ports on a gVisor bridge, truncating",
+                fwd.host, MAX_FORWARD_EXPANSION));
+            count = MAX_FORWARD_EXPANSION;
+        }
+        var bindHost = v6 ? "[::]" : "0.0.0.0";
+        var guestHost = v6 ? fmt("[%s]", guestIp) : guestIp;
+        for (var proto : fwd.protocols()) {
+            for (int i = 0; i < count; i++) {
+                int hostPort = fwd.hostStart() + i;
+                var bind = fmt("%s:%d", bindHost, hostPort);
+                try {
+                    var rule = new JSONObject();
+                    rule.put("type", "local");
+                    rule.put("network", proto);
+                    rule.put("bind", bind);
+                    rule.put("host", fmt("%s:%d", guestHost, fwd.guestStart() + i));
+                    var resp = client.post(
+                        fmt("/api/v1/gateways/%d/forwards", vlanId), rule);
+                    if (resp.isSuccess()) {
+                        var id = resp.json().optString("id", "");
+                        if (!id.isEmpty()) ids.add(vlanId + "/" + id);
+                    } else {
+                        failures.add(fmt("%s %s (%s)", proto, bind, briefBody(resp.body)));
+                    }
+                } catch (Exception e) {
+                    failures.add(fmt("%s %s (%s)", proto, bind, e.getMessage()));
+                }
+            }
+        }
+    }
+
+    /** Removes exactly the forwards this tap installed. */
+    private void removeNicForwards(@NonNull String tapName) {
+        forwardFailures.remove(tapName);
+        var ids = installedForwards.remove(tapName);
+        if (ids == null || client == null) return;
+        for (var ref : ids) {
+            int slash = ref.indexOf('/');
+            if (slash < 0) continue;
+            try {
+                client.delete(fmt("/api/v1/gateways/%s/forwards/%s",
+                    ref.substring(0, slash), ref.substring(slash + 1)));
+            } catch (Exception e) {
+                Log.w(TAG, fmt("Failed to delete forward %s", ref), e);
+            }
+        }
+    }
+
+    @NonNull
+    private static String briefBody(@NonNull String body) {
+        var b = body.trim();
+        return b.length() > 80 ? b.substring(0, 80) : b;
+    }
+
+    private static void check(@NonNull GvswitchClient.Response response, @NonNull String what) {
+        if (!response.isSuccess()) throw new RuntimeException(fmt(
+            "gvswitch %s failed (%d): %s", what, response.code, response.body));
+    }
+
+    @Override
+    public void detachNic(@NonNull VMNicConfig nic, @NonNull String tapName) {
+        attached.remove(tapName);
+        if (client != null) {
+            try {
+                client.delete(fmt("/api/v1/ports/%s", tapName));
+            } catch (Exception e) {
+                Log.w(TAG, fmt("Failed to delete gvswitch port %s", tapName), e);
+            }
+            removeStaticLeases(nic, tapName);
+            removeNicForwards(tapName);
+        }
+        inst.getStore().backend.deleteTap(tapName);
+    }
+
+    @Override
+    public JSONArray listAddresses() {
+        // gateway addresses live inside gvswitch, not on host interfaces
+        var arr = new JSONArray();
+        if (inst.getUplinkMode() != UplinkMode.L3) return arr;
+        for (var vlan : inst.getVlans()) {
+            var net4 = vlan.getIpv4Network();
+            if (net4 != null) arr.put(net4.toString());
+            var net6 = vlan.getIpv6Network();
+            if (net6 != null) arr.put(net6.toString());
+        }
+        return arr;
+    }
+
+    /**
+     * Same three-dimension shape as the Linux bridge for a consistent UI: the
+     * gvswitch gateway addresses are the VMM's configured L3 endpoints, so
+     * every row is configured and (while running) bound.
+     */
+    @NonNull
+    @Override
+    public JSONArray listAddressEntries() {
+        var out = new JSONArray();
+        if (inst.getUplinkMode() != UplinkMode.L3) return out;
+        for (var vlan : inst.getVlans()) {
+            int vid = vlan.getVlanId();
+            var net4 = vlan.getIpv4Network();
+            if (net4 != null) out.put(addressEntry(net4.toString(), vid, true, "configured"));
+            var net6 = vlan.getIpv6Network();
+            if (net6 != null) out.put(addressEntry(net6.toString(), vid, true, "configured"));
+        }
+        return out;
+    }
+
+    @Override
+    public JSONArray listInterfaces(VMInstanceStore vms) {
+        var arr = new JSONArray();
+        if (client == null) return arr;
+        try {
+            var response = client.get("/api/v1/ports");
+            if (!response.isSuccess()) return arr;
+            var ports = response.jsonArray();
+            for (int i = 0; i < ports.length(); i++) {
+                var port = ports.getJSONObject(i);
+                var obj = new JSONObject();
+                var name = port.optString("identifier", "");
+                obj.put("name", name);
+                obj.put("state", port.optBoolean("online", false) ? "UP" : "DOWN");
+                obj.put("vlan", port.opt("vlan"));
+                if (vms != null) {
+                    var vmInfo = vms.findVMByTap(name);
+                    if (vmInfo != null) {
+                        obj.put("vm_id", vmInfo.optString("vm_id", ""));
+                        obj.put("vm_name", vmInfo.optString("vm_name", ""));
+                    }
+                }
+                arr.put(obj);
+            }
+        } catch (Exception e) {
+            Log.w(TAG, "Failed to list gvswitch ports", e);
+        }
+        return arr;
+    }
+
+    @Override
+    public JSONArray listNeighbors() {
+        var arr = new JSONArray();
+        if (client == null) return arr;
+        try {
+            var response = client.get("/api/v1/fdb");
+            if (!response.isSuccess()) return arr;
+            var entries = response.jsonArray();
+            for (int i = 0; i < entries.length(); i++) {
+                var entry = entries.getJSONObject(i);
+                var obj = new JSONObject();
+                obj.put("lladdr", entry.optString("mac", ""));
+                obj.put("dev", entry.optString("port", ""));
+                obj.put("dst", "");
+                obj.put("state", List.of(
+                    entry.optBoolean("static", false) ? "STATIC" : "LEARNED"));
+                arr.put(obj);
+            }
+        } catch (Exception e) {
+            Log.w(TAG, "Failed to list gvswitch fdb", e);
+        }
+        return arr;
+    }
+
+    @Override
+    public JSONArray listDhcpLeases() {
+        var arr = new JSONArray();
+        if (client == null) return arr;
+        for (var vlan : inst.getVlans()) {
+            collectLeases(arr, vlan, "dhcp4");
+            collectLeases(arr, vlan, "dhcp6");
+        }
+        return arr;
+    }
+
+    private void collectLeases(@NonNull JSONArray out, @NonNull VlanConfig vlan, @NonNull String family) {
+        try {
+            var response = client.get(fmt(
+                "/api/v1/gateways/%d/%s/leases", vlan.getVlanId(), family));
+            if (!response.isSuccess()) return;
+            var leases = response.jsonArray();
+            for (int i = 0; i < leases.length(); i++) {
+                var lease = leases.getJSONObject(i);
+                var obj = new JSONObject();
+                obj.put("ip", lease.optString("ip", ""));
+                obj.put("mac", lease.optString("mac", ""));
+                obj.put("hostname", lease.optString("port_identifier", ""));
+                obj.put("expires", lease.optString("expires_at", ""));
+                obj.put("vlan", vlan.getVlanId());
+                out.put(obj);
+            }
+        } catch (Exception e) {
+            Log.d(TAG, fmt("No %s leases for VLAN %d", family, vlan.getVlanId()));
+        }
+    }
+
+    @Override
+    public void appendInfo(@NonNull JSONObject obj) throws JSONException {
+        obj.put("gvswitch_exit_code", process.getExitCode());
+        obj.put("gvswitch_socket", socketPath());
+        appendForwardFailures(obj, forwardFailures);
+    }
+
+    @NonNull
+    @Override
+    public JSONArray listTools() {
+        var out = new JSONArray();
+        out.put(toolEntry("gvswitch", process.isRunning()));
+        return out;
+    }
+
+    @Nullable
+    @Override
+    public java.util.List<String> toolLog(@NonNull String key) {
+        return "gvswitch".equals(key) ? process.getLog() : null;
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/gvisor/GvswitchClient.java b/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/gvisor/GvswitchClient.java
new file mode 100644
index 000000000..2606b0d4c
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/gvisor/GvswitchClient.java
@@ -0,0 +1,213 @@
+package cn.classfun.droidvm.daemon.network.backend.gvisor;
+
+import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
+
+import android.net.LocalSocket;
+import android.net.LocalSocketAddress;
+
+import androidx.annotation.NonNull;
+import androidx.annotation.Nullable;
+
+import org.json.JSONArray;
+import org.json.JSONObject;
+
+import java.io.ByteArrayOutputStream;
+import java.io.IOException;
+import java.io.InputStream;
+import java.nio.charset.StandardCharsets;
+
+/**
+ * Minimal HTTP/1.1 client for the gvswitch REST API over its unix control
+ * socket. One request per connection (Connection: close); responses are
+ * small JSON documents framed by Content-Length.
+ */
+public final class GvswitchClient {
+    private final String socketPath;
+    private final String token;
+
+    public GvswitchClient(@NonNull String socketPath, @NonNull String token) {
+        this.socketPath = socketPath;
+        this.token = token;
+    }
+
+    public static final class Response {
+        public final int code;
+        public final String body;
+
+        Response(int code, @NonNull String body) {
+            this.code = code;
+            this.body = body;
+        }
+
+        public boolean isSuccess() {
+            return code >= 200 && code < 300;
+        }
+
+        @NonNull
+        public JSONObject json() throws Exception {
+            return new JSONObject(body);
+        }
+
+        @NonNull
+        public JSONArray jsonArray() throws Exception {
+            return new JSONArray(body);
+        }
+    }
+
+    @NonNull
+    public Response get(@NonNull String path) throws IOException {
+        return request("GET", path, null);
+    }
+
+    @NonNull
+    public Response post(@NonNull String path, @Nullable Object body) throws IOException {
+        return request("POST", path, body);
+    }
+
+    @NonNull
+    public Response put(@NonNull String path, @Nullable Object body) throws IOException {
+        return request("PUT", path, body);
+    }
+
+    @NonNull
+    public Response delete(@NonNull String path) throws IOException {
+        return request("DELETE", path, null);
+    }
+
+    @NonNull
+    public Response request(
+        @NonNull String method, @NonNull String path, @Nullable Object body
+    ) throws IOException {
+        var payload = body == null
+            ? new byte[0]
+            : body.toString().getBytes(StandardCharsets.UTF_8);
+        try (var socket = new LocalSocket()) {
+            socket.connect(new LocalSocketAddress(
+                socketPath, LocalSocketAddress.Namespace.FILESYSTEM));
+            socket.setSoTimeout(10_000);
+            var sb = new StringBuilder();
+            sb.append(fmt("%s %s HTTP/1.1\r\n", method, path));
+            sb.append("Host: gvswitch\r\n");
+            sb.append(fmt("Authorization: Bearer %s\r\n", token));
+            sb.append("Connection: close\r\n");
+            if (payload.length > 0)
+                sb.append("Content-Type: application/json\r\n");
+            sb.append(fmt("Content-Length: %d\r\n", payload.length));
+            sb.append("\r\n");
+            var out = socket.getOutputStream();
+            out.write(sb.toString().getBytes(StandardCharsets.UTF_8));
+            if (payload.length > 0) out.write(payload);
+            out.flush();
+            return readResponse(socket.getInputStream());
+        }
+    }
+
+    @NonNull
+    private static Response readResponse(@NonNull InputStream in) throws IOException {
+        var head = readHead(in);
+        var lines = head.split("\r\n");
+        if (lines.length == 0)
+            throw new IOException("Empty HTTP response");
+        var status = lines[0].split(" ", 3);
+        if (status.length < 2)
+            throw new IOException(fmt("Bad HTTP status line: %s", lines[0]));
+        int code;
+        try {
+            code = Integer.parseInt(status[1]);
+        } catch (NumberFormatException e) {
+            throw new IOException(fmt("Bad HTTP status code: %s", lines[0]));
+        }
+        int contentLength = -1;
+        boolean chunked = false;
+        for (int i = 1; i < lines.length; i++) {
+            var idx = lines[i].indexOf(':');
+            if (idx < 0) continue;
+            var name = lines[i].substring(0, idx).trim().toLowerCase();
+            var value = lines[i].substring(idx + 1).trim();
+            if (name.equals("content-length")) {
+                try {
+                    contentLength = Integer.parseInt(value);
+                } catch (NumberFormatException ignored) {
+                }
+            } else if (name.equals("transfer-encoding")
+                && value.toLowerCase().contains("chunked")) {
+                chunked = true;
+            }
+        }
+        byte[] body;
+        if (chunked) body = readChunked(in);
+        else if (contentLength >= 0) body = readN(in, contentLength);
+        else body = readAll(in);
+        return new Response(code, new String(body, StandardCharsets.UTF_8));
+    }
+
+    @NonNull
+    private static String readHead(@NonNull InputStream in) throws IOException {
+        var buf = new ByteArrayOutputStream();
+        int state = 0; // counts \r\n\r\n progress
+        int c;
+        while ((c = in.read()) >= 0) {
+            buf.write(c);
+            if (c == '\r' && (state == 0 || state == 2)) state++;
+            else if (c == '\n' && (state == 1 || state == 3)) state++;
+            else state = 0;
+            if (state == 4) break;
+        }
+        var head = buf.toString(StandardCharsets.UTF_8);
+        return head.endsWith("\r\n\r\n")
+            ? head.substring(0, head.length() - 4) : head;
+    }
+
+    @NonNull
+    private static byte[] readN(@NonNull InputStream in, int n) throws IOException {
+        var buf = new byte[n];
+        int off = 0;
+        while (off < n) {
+            int read = in.read(buf, off, n - off);
+            if (read < 0) break;
+            off += read;
+        }
+        return buf;
+    }
+
+    @NonNull
+    private static byte[] readAll(@NonNull InputStream in) throws IOException {
+        var buf = new ByteArrayOutputStream();
+        var chunk = new byte[4096];
+        int read;
+        while ((read = in.read(chunk)) >= 0)
+            buf.write(chunk, 0, read);
+        return buf.toByteArray();
+    }
+
+    @NonNull
+    private static byte[] readChunked(@NonNull InputStream in) throws IOException {
+        var out = new ByteArrayOutputStream();
+        while (true) {
+            var line = readLine(in);
+            int size;
+            try {
+                var semi = line.indexOf(';');
+                size = Integer.parseInt(
+                    (semi >= 0 ? line.substring(0, semi) : line).trim(), 16);
+            } catch (NumberFormatException e) {
+                throw new IOException(fmt("Bad chunk size: %s", line));
+            }
+            if (size == 0) break;
+            out.write(readN(in, size));
+            readLine(in); // trailing CRLF
+        }
+        return out.toByteArray();
+    }
+
+    @NonNull
+    private static String readLine(@NonNull InputStream in) throws IOException {
+        var buf = new StringBuilder();
+        int c;
+        while ((c = in.read()) >= 0) {
+            if (c == '\n') break;
+            if (c != '\r') buf.append((char) c);
+        }
+        return buf.toString();
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/gvisor/GvswitchConfigBuilder.java b/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/gvisor/GvswitchConfigBuilder.java
new file mode 100644
index 000000000..8fc753eaf
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/gvisor/GvswitchConfigBuilder.java
@@ -0,0 +1,123 @@
+package cn.classfun.droidvm.daemon.network.backend.gvisor;
+
+import androidx.annotation.NonNull;
+import androidx.annotation.Nullable;
+
+import org.json.JSONArray;
+import org.json.JSONException;
+import org.json.JSONObject;
+
+import java.math.BigInteger;
+import java.util.List;
+
+import cn.classfun.droidvm.lib.store.network.NetworkConfig;
+import cn.classfun.droidvm.lib.store.network.UplinkMode;
+import cn.classfun.droidvm.lib.store.network.VlanConfig;
+
+/**
+ * Generates the gvswitch startup config (gateways only; VM ports, static
+ * leases and forwards are managed over the REST API as VMs attach).
+ */
+final class GvswitchConfigBuilder {
+    private GvswitchConfigBuilder() {
+    }
+
+    @NonNull
+    static JSONObject build(@NonNull NetworkConfig config) throws JSONException {
+        var root = new JSONObject();
+        if (config.getUplinkMode() != UplinkMode.L3) return root;
+        var gateways = new JSONArray();
+        var bridgeMac = config.getBridgeMacAddress();
+        for (var vlan : config.getVlans()) {
+            var gw = buildGateway(vlan, vlan.isUntagged() ? bridgeMac : null);
+            if (gw != null) gateways.put(gw);
+        }
+        if (gateways.length() > 0) root.put("gateways", gateways);
+        return root;
+    }
+
+    @Nullable
+    private static JSONObject buildGateway(
+        @NonNull VlanConfig vlan, @Nullable String mac
+    ) throws JSONException {
+        var net4 = vlan.getIpv4Network();
+        var net6 = vlan.getIpv6Network();
+        if (net4 == null && net6 == null) return null;
+        var gw = new JSONObject();
+        gw.put("vlan", vlan.getVlanId());
+        if (mac != null) gw.put("mac", mac);
+        // gvswitch has a single internet-routing switch for both families;
+        // per-family SNAT toggles are expressed via deny ranges
+        boolean snat4 = net4 != null && vlan.isIpv4Snat();
+        boolean snat6 = net6 != null && vlan.isIpv6Snat();
+        gw.put("enable_internet_routing", snat4 || snat6);
+        var deny = new JSONArray();
+        if (!snat4 && snat6) deny.put("0.0.0.0/0");
+        if (!snat6 && snat4 && net6 != null) deny.put("::/0");
+        if (deny.length() > 0) gw.put("deny", deny);
+        // No explicit DNS: gvswitch advertises the gateway IP via DHCP and
+        // the dns_proxy answers it through the Android system resolver
+        // (dnsproxyd/resnsend), so guest lookups behave like the host's
+        if (vlan.getDnsServers().isEmpty()) gw.put("dns_proxy", true);
+        if (net4 != null) {
+            var v4 = new JSONObject();
+            v4.put("address", net4.address().toString());
+            v4.put("prefix_len", net4.prefix());
+            gw.put("ipv4", v4);
+            if (vlan.isDhcp4Enabled()) {
+                var dhcp = new JSONObject();
+                dhcp.put("enabled", true);
+                dhcp.put("pool_start",
+                    net4.addressAtOffset(vlan.getDhcp4OffsetStart()).toString());
+                dhcp.put("pool_end",
+                    net4.addressAtOffset(vlan.getDhcp4OffsetEnd()).toString());
+                var dns = dnsOf(vlan.getDnsServers(), false);
+                if (dns.length() > 0) dhcp.put("dns", dns);
+                gw.put("dhcp4", dhcp);
+            }
+        }
+        if (net6 != null) {
+            var v6 = new JSONObject();
+            v6.put("address", net6.address().toString());
+            v6.put("prefix_len", net6.prefix());
+            gw.put("ipv6", v6);
+            if (vlan.isDhcp6Enabled()) {
+                var dhcp = new JSONObject();
+                dhcp.put("enabled", true);
+                dhcp.put("pool_start", net6.addressAtOffset(
+                    BigInteger.valueOf(vlan.getDhcp6OffsetStart())).toString());
+                dhcp.put("pool_end", net6.addressAtOffset(
+                    BigInteger.valueOf(vlan.getDhcp6OffsetEnd())).toString());
+                var dns = dnsOf(vlan.getDnsServers(), true);
+                if (dns.length() > 0) dhcp.put("dns", dns);
+                gw.put("dhcp6", dhcp);
+            }
+            if (vlan.isSlaacEnabled()) {
+                var slaac = new JSONObject();
+                slaac.put("enabled", true);
+                slaac.put("managed", vlan.isDhcp6Enabled());
+                slaac.put("other", vlan.isDhcp6Enabled());
+                var prefix = new JSONObject();
+                prefix.put("prefix", net6.toNetworkString());
+                prefix.put("on_link", true);
+                prefix.put("autonomous", true);
+                var prefixes = new JSONArray();
+                prefixes.put(prefix);
+                slaac.put("prefixes", prefixes);
+                gw.put("slaac", slaac);
+            }
+        }
+        return gw;
+    }
+
+    @NonNull
+    private static JSONArray dnsOf(@NonNull List<String> servers, boolean v6) {
+        // empty list = omitted = gvswitch advertises the gateway IP, which
+        // the backend serves by forwarding gateway:53 to the Android
+        // system's DNS (see GvisorBridgeBackend.dnsForwardRules)
+        var arr = new JSONArray();
+        for (var s : servers)
+            if (s.contains(":") == v6) arr.put(s);
+        return arr;
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/iptables/ChainInfo.java b/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/iptables/ChainInfo.java
index 239eaa33a..053e81876 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/iptables/ChainInfo.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/iptables/ChainInfo.java
@@ -8,12 +8,18 @@
 
 final class ChainInfo {
     final IptablesBackend backend;
+    final boolean ipv6;
     final String table;
     final String parent;
     final String chain;
 
     ChainInfo(IptablesBackend backend, String table, String parent, String chain) {
+        this(backend, false, table, parent, chain);
+    }
+
+    ChainInfo(IptablesBackend backend, boolean ipv6, String table, String parent, String chain) {
         this.backend = backend;
+        this.ipv6 = ipv6;
         this.table = table;
         this.parent = parent;
         this.chain = chain;
@@ -21,64 +27,60 @@ final class ChainInfo {
 
     ChainInfo(IptablesBackend backend, @NonNull ChainInfo parent, String chain) {
         this.backend = backend;
+        this.ipv6 = parent.ipv6;
         this.table = parent.table;
         this.parent = parent.chain;
         this.chain = chain;
     }
 
+    @NonNull
+    String binary() {
+        return ipv6 ? "ip6tables" : "iptables";
+    }
+
     public void init(boolean insert) {
-        backend.iptablesCmd(table, "-N", chain);
-        backend.iptablesCmd(table, "-F", chain);
+        backend.iptablesCmd(binary(), table, "-N", chain);
+        backend.iptablesCmd(binary(), table, "-F", chain);
         if (parent != null && chain != null) {
             if (insert)
-                backend.iptablesCmd(table, "-I", parent, "1", "-j", chain);
+                backend.iptablesCmd(binary(), table, "-I", parent, "1", "-j", chain);
             else
-                backend.iptablesCmd(table, "-A", parent, "-j", chain);
+                backend.iptablesCmd(binary(), table, "-A", parent, "-j", chain);
         }
     }
 
     public void deinit() {
         if (table != null && parent != null && chain != null)
-            backend.iptablesCmd(table, "-D", parent, "-j", chain);
+            backend.iptablesCmd(binary(), table, "-D", parent, "-j", chain);
         if (table != null && chain != null) {
-            backend.iptablesCmd(table, "-F", chain);
-            backend.iptablesCmd(table, "-X", chain);
+            backend.iptablesCmd(binary(), table, "-F", chain);
+            backend.iptablesCmd(binary(), table, "-X", chain);
         }
     }
 
-    public boolean append(@NonNull String... args) {
+    private boolean rule(@NonNull String op, @Nullable String pos, @NonNull String... args) {
         var cmd = new ArrayList<String>();
-        cmd.add("iptables");
+        cmd.add(binary());
         cmd.add("-t");
         cmd.add(table);
-        cmd.add("-A");
+        cmd.add(op);
         cmd.add(chain);
+        if (pos != null) cmd.add(pos);
         cmd.addAll(Arrays.asList(args));
         return backend.iptables(cmd.toArray(new String[0]));
     }
 
+    public boolean append(@NonNull String... args) {
+        return rule("-A", null, args);
+    }
+
     public boolean insert(@NonNull String... args) {
-        var cmd = new ArrayList<String>();
-        cmd.add("iptables");
-        cmd.add("-t");
-        cmd.add(table);
-        cmd.add("-I");
-        cmd.add(chain);
-        cmd.add("1");
-        cmd.addAll(Arrays.asList(args));
-        return backend.iptables(cmd.toArray(new String[0]));
+        return rule("-I", "1", args);
     }
 
     @SuppressWarnings("unused")
     public boolean delete(@NonNull String... args) {
-        var cmd = new ArrayList<String>();
-        cmd.add("iptables");
-        cmd.add("-t");
-        cmd.add(table);
-        cmd.add("-D");
-        cmd.add(chain);
-        cmd.addAll(Arrays.asList(args));
-        return backend.iptables(cmd.toArray(new String[0]));
+        return rule("-D", null, args);
     }
 
     @SuppressWarnings("UnusedReturnValue")
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/iptables/IptablesBackend.java b/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/iptables/IptablesBackend.java
index 447c5f66f..ce4062773 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/iptables/IptablesBackend.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/iptables/IptablesBackend.java
@@ -12,6 +12,7 @@
 
 import cn.classfun.droidvm.daemon.network.NetworkInstance;
 import cn.classfun.droidvm.daemon.network.backend.FirewallHelper;
+import cn.classfun.droidvm.lib.network.IPv6Network;
 import cn.classfun.droidvm.lib.utils.RunUtils;
 
 @SuppressWarnings("UnusedReturnValue")
@@ -32,6 +33,11 @@ public final class IptablesBackend extends FirewallHelper {
     final ChainInfo NAT_PRE = new ChainInfo(this, "nat", "PREROUTING", "droidvm_pre");
     final ChainInfo RAW_OUT = new ChainInfo(this, "raw", "OUTPUT", "droidvm_out");
     final ChainInfo RAW_PRE = new ChainInfo(this, "raw", "PREROUTING", "droidvm_pre");
+    final ChainInfo FIL6_NET_EXTNET_IN = new ChainInfo(this, true, "filter", null, "droidvm_ext_in");
+    final ChainInfo FIL6_NET_EXTNET_OUT = new ChainInfo(this, true, "filter", null, "droidvm_ext_out");
+    final ChainInfo FIL6_IN = new ChainInfo(this, true, "filter", "INPUT", "droidvm_in");
+    final ChainInfo FIL6_OUT = new ChainInfo(this, true, "filter", "OUTPUT", "droidvm_out");
+    final ChainInfo FIL6_FWD = new ChainInfo(this, true, "filter", "FORWARD", "droidvm_fwd");
     final ChainInfo[] DEFS = new ChainInfo[]{
         FIL_NET_EXTNET_IN,
         FIL_NET_EXTNET_OUT,
@@ -48,7 +54,13 @@ public final class IptablesBackend extends FirewallHelper {
         NAT_PRE,
         RAW_OUT,
         RAW_PRE,
+        FIL6_NET_EXTNET_IN,
+        FIL6_NET_EXTNET_OUT,
+        FIL6_IN,
+        FIL6_OUT,
+        FIL6_FWD,
     };
+    private static final String[] EXT_IFACES = {"wlan+", "eth+", "rmnet_data+"};
 
     synchronized boolean iptables(@NonNull String... args) {
         int retry = 0;
@@ -63,9 +75,9 @@ synchronized boolean iptables(@NonNull String... args) {
         }
     }
 
-    boolean iptablesCmd(@NonNull String table, @NonNull String... args) {
+    boolean iptablesCmd(@NonNull String binary, @NonNull String table, @NonNull String... args) {
         var cmd = new ArrayList<String>();
-        cmd.add("iptables");
+        cmd.add(binary);
         cmd.add("-t");
         cmd.add(table);
         cmd.addAll(Arrays.asList(args));
@@ -75,29 +87,30 @@ boolean iptablesCmd(@NonNull String table, @NonNull String... args) {
     @Override
     public boolean initialize() {
         Log.i(TAG, "Initializing iptables firewall chains");
-        boolean ok = true;
         for (var def : DEFS)
             def.init(true);
         FIL_FWD.append("-m", "state", "--state", "RELATED,ESTABLISHED", "-j", "ACCEPT");
-        FIL_NET_EXTNET_OUT.append("-o", "wlan+", "-j", "ACCEPT");
-        FIL_NET_EXTNET_OUT.append("-o", "eth+", "-j", "ACCEPT");
-        FIL_NET_EXTNET_OUT.append("-o", "rmnet_data+", "-j", "ACCEPT");
+        FIL6_FWD.append("-m", "state", "--state", "RELATED,ESTABLISHED", "-j", "ACCEPT");
+        for (var iface : EXT_IFACES) {
+            FIL_NET_EXTNET_OUT.append("-o", iface, "-j", "ACCEPT");
+            FIL_NET_EXTNET_IN.append("-i", iface, "-j", "ACCEPT");
+            FIL6_NET_EXTNET_OUT.append("-o", iface, "-j", "ACCEPT");
+            FIL6_NET_EXTNET_IN.append("-i", iface, "-j", "ACCEPT");
+        }
         FIL_NET_EXTNET_OUT.append("-j", "DROP");
-        FIL_NET_EXTNET_IN.append("-i", "wlan+", "-j", "ACCEPT");
-        FIL_NET_EXTNET_IN.append("-i", "eth+", "-j", "ACCEPT");
-        FIL_NET_EXTNET_IN.append("-i", "rmnet_data+", "-j", "ACCEPT");
         FIL_NET_EXTNET_IN.append("-j", "DROP");
+        FIL6_NET_EXTNET_OUT.append("-j", "DROP");
+        FIL6_NET_EXTNET_IN.append("-j", "DROP");
         enableIpForward();
-        return ok;
+        return true;
     }
 
     @Override
     public boolean shutdown() {
         Log.i(TAG, "Shutting down iptables firewall chains");
-        boolean ok = true;
         for (var def : DEFS)
             def.deinit();
-        return ok;
+        return true;
     }
 
     public void initNetwork(NetworkInstance inst) {
@@ -112,39 +125,109 @@ public void deinitNetwork(NetworkInstance inst) {
     }
 
     @Override
-    public boolean applyForward(
+    public void addLiveV6Subnet(
+        @NonNull NetworkInstance inst, @NonNull String dev, @NonNull IPv6Network net
+    ) {
+        new IptablesNetworkInstance(this, inst).addLiveV6Subnet(dev, net);
+    }
+
+    @Override
+    public void removeLiveV6Subnet(
+        @NonNull NetworkInstance inst, @NonNull String dev, @NonNull IPv6Network net
+    ) {
+        new IptablesNetworkInstance(this, inst).removeLiveV6Subnet(dev, net);
+    }
+
+    @Override
+    public boolean applyForwardBase(
         @NonNull String bridge, @NonNull String guestIp, @NonNull String protocol,
-        @Nullable String hostIp, int hostPort, int guestPort
+        int guestStart, int guestEnd, @Nullable String hairpinSubnet
     ) {
-        var pre = new ChainInfo(this, "nat", null, fmt("droidvm_pre_%s", bridge));
         var fwd = new ChainInfo(this, "filter", null, fmt("droidvm_fwd_%s", bridge));
-        boolean ok = pre.append(dnatSpec(protocol, hostIp, hostPort, guestIp, guestPort));
-        ok &= fwd.insert(fwdSpec(bridge, guestIp, protocol, guestPort));
-        Log.i(TAG, fmt("Apply forward %s %s:%d -> %s:%d on %s (ok=%b)",
-            protocol, isSpecificHost(hostIp) ? hostIp : "*",
-            hostPort, guestIp, guestPort, bridge, ok));
+        boolean ok = fwd.insert(fwdSpec(bridge, guestIp, protocol, guestStart, guestEnd));
+        if (hairpinSubnet != null) {
+            var pst = new ChainInfo(this, "nat", null, fmt("droidvm_pst_%s", bridge));
+            ok &= pst.append(hairpinSpec(
+                protocol, hairpinSubnet, guestIp, guestStart, guestEnd));
+        }
+        Log.i(TAG, fmt("Apply forward base %s -> %s:%s on %s (ok=%b)",
+            protocol, guestIp, portRange(guestStart, guestEnd, ':'), bridge, ok));
         return ok;
     }
 
     @Override
-    public boolean removeForward(
+    public boolean removeForwardBase(
         @NonNull String bridge, @NonNull String guestIp, @NonNull String protocol,
-        @Nullable String hostIp, int hostPort, int guestPort
+        int guestStart, int guestEnd, @Nullable String hairpinSubnet
     ) {
-        var pre = new ChainInfo(this, "nat", null, fmt("droidvm_pre_%s", bridge));
         var fwd = new ChainInfo(this, "filter", null, fmt("droidvm_fwd_%s", bridge));
-        boolean ok = pre.delete(dnatSpec(protocol, hostIp, hostPort, guestIp, guestPort));
-        ok &= fwd.delete(fwdSpec(bridge, guestIp, protocol, guestPort));
-        Log.i(TAG, fmt("Remove forward %s %s:%d -> %s:%d on %s (ok=%b)",
-            protocol, isSpecificHost(hostIp) ? hostIp : "*",
-            hostPort, guestIp, guestPort, bridge, ok));
+        boolean ok = fwd.delete(fwdSpec(bridge, guestIp, protocol, guestStart, guestEnd));
+        if (hairpinSubnet != null) {
+            var pst = new ChainInfo(this, "nat", null, fmt("droidvm_pst_%s", bridge));
+            ok &= pst.delete(hairpinSpec(
+                protocol, hairpinSubnet, guestIp, guestStart, guestEnd));
+        }
+        Log.i(TAG, fmt("Remove forward base %s -> %s:%s on %s (ok=%b)",
+            protocol, guestIp, portRange(guestStart, guestEnd, ':'), bridge, ok));
+        return ok;
+    }
+
+    @Override
+    public boolean applyDnat(
+        @NonNull String bridge, @NonNull String guestIp, @NonNull String protocol,
+        @NonNull String hostIp, int hostStart, int hostEnd, int guestStart, int guestEnd
+    ) {
+        var pre = new ChainInfo(this, "nat", null, fmt("droidvm_pre_%s", bridge));
+        boolean ok = pre.append(
+            dnatSpec(protocol, hostIp, hostStart, hostEnd, guestIp, guestStart, guestEnd));
+        Log.i(TAG, fmt("Apply DNAT %s %s:%s -> %s:%s on %s (ok=%b)",
+            protocol, hostIp, portRange(hostStart, hostEnd, ':'),
+            guestIp, portRange(guestStart, guestEnd, ':'), bridge, ok));
+        return ok;
+    }
+
+    @Override
+    public boolean removeDnat(
+        @NonNull String bridge, @NonNull String guestIp, @NonNull String protocol,
+        @NonNull String hostIp, int hostStart, int hostEnd, int guestStart, int guestEnd
+    ) {
+        var pre = new ChainInfo(this, "nat", null, fmt("droidvm_pre_%s", bridge));
+        boolean ok = pre.delete(
+            dnatSpec(protocol, hostIp, hostStart, hostEnd, guestIp, guestStart, guestEnd));
+        Log.i(TAG, fmt("Remove DNAT %s %s:%s -> %s:%s on %s (ok=%b)",
+            protocol, hostIp, portRange(hostStart, hostEnd, ':'),
+            guestIp, portRange(guestStart, guestEnd, ':'), bridge, ok));
         return ok;
     }
 
+    /**
+     * NAT loopback: a guest in hairpinSubnet hitting the forward's guest
+     * target gets its source masqueraded to the gateway, so the target's
+     * reply routes back through the gateway instead of straight over L2
+     * (where the originator would see an unexpected source).
+     */
+    @NonNull
+    private static String[] hairpinSpec(
+        @NonNull String protocol, @NonNull String hairpinSubnet,
+        @NonNull String guestIp, int guestStart, int guestEnd
+    ) {
+        return new String[]{
+            "-s", hairpinSubnet, "-d", guestIp, "-p", protocol,
+            "--dport", portRange(guestStart, guestEnd, ':'), "-j", "MASQUERADE"
+        };
+    }
+
+    @NonNull
+    private static String portRange(int start, int end, char sep) {
+        return start == end
+            ? String.valueOf(start)
+            : fmt("%d%c%d", start, sep, end);
+    }
+
     @NonNull
     private static String[] dnatSpec(
-        @NonNull String protocol, @Nullable String hostIp, int hostPort,
-        @NonNull String guestIp, int guestPort
+        @NonNull String protocol, @Nullable String hostIp, int hostStart, int hostEnd,
+        @NonNull String guestIp, int guestStart, int guestEnd
     ) {
         var spec = new ArrayList<String>();
         spec.add("-p");
@@ -154,22 +237,23 @@ private static String[] dnatSpec(
             spec.add(hostIp);
         }
         spec.add("--dport");
-        spec.add(String.valueOf(hostPort));
+        spec.add(portRange(hostStart, hostEnd, ':'));
         spec.add("-j");
         spec.add("DNAT");
         spec.add("--to-destination");
-        spec.add(fmt("%s:%d", guestIp, guestPort));
+        // iptables DNAT port ranges use a dash: ip:8000-9000
+        spec.add(fmt("%s:%s", guestIp, portRange(guestStart, guestEnd, '-')));
         return spec.toArray(new String[0]);
     }
 
     @NonNull
     private static String[] fwdSpec(
         @NonNull String bridge, @NonNull String guestIp,
-        @NonNull String protocol, int guestPort
+        @NonNull String protocol, int guestStart, int guestEnd
     ) {
         return new String[]{
-            "-o", bridge, "-d", guestIp, "-p", protocol,
-            "--dport", String.valueOf(guestPort), "-j", "ACCEPT"
+            "-o", fmt("%s+", bridge), "-d", guestIp, "-p", protocol,
+            "--dport", portRange(guestStart, guestEnd, ':'), "-j", "ACCEPT"
         };
     }
 
@@ -181,8 +265,9 @@ private static boolean isSpecificHost(@Nullable String hostIp) {
     }
 
     private boolean enableIpForward() {
-        Log.i(TAG, "Enabling IPv4 forwarding");
+        Log.i(TAG, "Enabling IP forwarding");
         var result = RunUtils.run("echo 1 > /proc/sys/net/ipv4/ip_forward");
+        RunUtils.run("echo 1 > /proc/sys/net/ipv6/conf/all/forwarding");
         return result.isSuccess();
     }
 }
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/iptables/IptablesNetworkInstance.java b/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/iptables/IptablesNetworkInstance.java
index 8c95dbb54..a8224c476 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/iptables/IptablesNetworkInstance.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/iptables/IptablesNetworkInstance.java
@@ -5,9 +5,16 @@
 import androidx.annotation.NonNull;
 
 import cn.classfun.droidvm.daemon.network.NetworkInstance;
+import cn.classfun.droidvm.daemon.network.backend.LinuxNetwork;
 import cn.classfun.droidvm.lib.network.IPv4Network;
-import cn.classfun.droidvm.lib.store.base.DataItem;
+import cn.classfun.droidvm.lib.network.IPv6Network;
+import cn.classfun.droidvm.lib.store.network.VlanConfig;
 
+/**
+ * Per-network iptables/ip6tables chains for an L3-routed Linux bridge:
+ * per-VLAN subnet accept rules, MASQUERADE for SNAT-enabled VLANs and the
+ * per-bridge chains that hold DNAT port forwards.
+ */
 final class IptablesNetworkInstance {
     final IptablesBackend backend;
     final NetworkInstance inst;
@@ -24,6 +31,9 @@ final class IptablesNetworkInstance {
     final ChainInfo magPst;
     final ChainInfo rawOut;
     final ChainInfo rawPre;
+    final ChainInfo filIn6;
+    final ChainInfo filOut6;
+    final ChainInfo filFwd6;
 
     IptablesNetworkInstance(IptablesBackend backend, @NonNull NetworkInstance inst) {
         this.backend = backend;
@@ -41,6 +51,9 @@ final class IptablesNetworkInstance {
         magPst = new ChainInfo(backend, backend.MAG_PST, fmt("droidvm_pst_%s", br));
         rawOut = new ChainInfo(backend, backend.RAW_OUT, fmt("droidvm_out_%s", br));
         rawPre = new ChainInfo(backend, backend.RAW_PRE, fmt("droidvm_pre_%s", br));
+        filIn6 = new ChainInfo(backend, backend.FIL6_IN, fmt("droidvm_in_%s", br));
+        filOut6 = new ChainInfo(backend, backend.FIL6_OUT, fmt("droidvm_out_%s", br));
+        filFwd6 = new ChainInfo(backend, backend.FIL6_FWD, fmt("droidvm_fwd_%s", br));
     }
 
     void init() {
@@ -56,6 +69,9 @@ void init() {
         magPst.init(false);
         rawOut.init(false);
         rawPre.init(false);
+        filIn6.init(false);
+        filOut6.init(false);
+        filFwd6.init(false);
     }
 
     void deinit() {
@@ -71,30 +87,107 @@ void deinit() {
         magPst.deinit();
         rawOut.deinit();
         rawPre.deinit();
+        filIn6.deinit();
+        filOut6.deinit();
+        filFwd6.deinit();
+    }
+
+    @NonNull
+    private String deviceOf(@NonNull VlanConfig vlan) {
+        return LinuxNetwork.vlanDevice(br, vlan.getVlanId());
     }
 
     void initBasic() {
-        boolean canIn = inst.item.optBoolean("nat", false) || inst.item.optBoolean("access", false);
-        boolean canOut = inst.item.optBoolean("access", false);
         var extnetIn = backend.FIL_NET_EXTNET_IN.chain;
         var extnetOut = backend.FIL_NET_EXTNET_OUT.chain;
+        var extnetIn6 = backend.FIL6_NET_EXTNET_IN.chain;
+        var extnetOut6 = backend.FIL6_NET_EXTNET_OUT.chain;
         var input = backend.FIL_NET_INPUT.chain;
-        filFwd.addChain(br, br, null, null, "ACCEPT", null);
-        filOut.addChain(null, br, null, null, "ACCEPT", null);
-        for (var iter : inst.item.opt("ipv4_addresses", DataItem.newArray())) {
-            IPv4Network addr = IPv4Network.parse(iter.getValue().asString());
-            String router = new IPv4Network(addr.address(), 32).toString();
-            String network = addr.network().toString();
-            filIn.addChain(br, null, network, router, input, null);
-            filFwd.addChain(br, null, network, null, canIn ? extnetOut : "DROP", null);
-            filFwd.addChain(null, br, null, network, canOut ? extnetIn : "DROP", null);
-            if (inst.item.optBoolean("nat", false)) {
-                natPst.addChain(br, null, network, null, "MASQUERADE", null);
-                natPst.addChain(null, br, null, network, "MASQUERADE", null);
+        // bridged + inter-VLAN routed traffic within this network
+        var wildcard = fmt("%s+", br);
+        filFwd.addChain(wildcard, wildcard, null, null, "ACCEPT", null);
+        filFwd6.addChain(wildcard, wildcard, null, null, "ACCEPT", null);
+        filOut.addChain(null, wildcard, null, null, "ACCEPT", null);
+        filOut6.addChain(null, wildcard, null, null, "ACCEPT", null);
+        for (var vlan : inst.getVlans()) {
+            var dev = deviceOf(vlan);
+            boolean snat4 = vlan.isIpv4Snat();
+            var net4 = vlan.getIpv4Network();
+            if (net4 != null)
+                addV4Subnet(dev, net4, snat4, input, extnetIn, extnetOut);
+            for (var cidr : vlan.getIpv4Secondary()) {
+                try {
+                    addV4Subnet(dev, IPv4Network.parse(cidr),
+                        snat4, input, extnetIn, extnetOut);
+                } catch (Exception ignored) {
+                }
+            }
+            var net6 = vlan.getIpv6Network();
+            if (net6 != null) addV6Subnet(dev, net6, extnetIn6, extnetOut6);
+            for (var cidr : vlan.getIpv6Secondary()) {
+                try {
+                    addV6Subnet(dev, IPv6Network.parse(cidr), extnetIn6, extnetOut6);
+                } catch (Exception ignored) {
+                }
             }
         }
-        magPre.addChain(br, null, null, null, "ACCEPT", null);
-        filFwd.addChain(br, null, null, null, "DROP", null);
-        filFwd.addChain(null, br, null, null, "DROP", null);
+        magPre.addChain(wildcard, null, null, null, "ACCEPT", null);
+        filFwd.addChain(wildcard, null, null, null, "DROP", null);
+        filFwd.addChain(null, wildcard, null, null, "DROP", null);
+        filFwd6.addChain(wildcard, null, null, null, "DROP", null);
+        filFwd6.addChain(null, wildcard, null, null, "DROP", null);
+    }
+
+    private void addV4Subnet(
+        @NonNull String dev, @NonNull IPv4Network addr, boolean snat,
+        String input, String extnetIn, String extnetOut
+    ) {
+        var router = new IPv4Network(addr.address(), 32).toString();
+        var network = addr.toNetworkString();
+        filIn.addChain(dev, null, network, router, input, null);
+        filFwd.addChain(dev, null, network, null, extnetOut, null);
+        filFwd.addChain(null, dev, null, network, extnetIn, null);
+        if (snat) {
+            // SNAT guest -> external only. POSTROUTING has no input
+            // interface (`-i` is invalid there), so match on the source
+            // subnet leaving via a non-bridge interface; `! -o {br}+`
+            // excludes inter-VLAN traffic, which keeps its real source.
+            natPst.append("-s", network, "!", "-o", fmt("%s+", br), "-j", "MASQUERADE");
+        }
+    }
+
+    private void addV6Subnet(
+        @NonNull String dev, @NonNull IPv6Network addr,
+        String extnetIn6, String extnetOut6
+    ) {
+        var network = addr.toNetworkString();
+        var router = fmt("%s/128", addr.address());
+        filIn6.addChain(dev, null, network, router, "ACCEPT", null);
+        filFwd6.addChain(dev, null, network, null, extnetOut6, null);
+        filFwd6.addChain(null, dev, null, network, extnetIn6, null);
+    }
+
+    /**
+     * Adds rules for a delegated prefix acquired after network start;
+     * inserted at the top so they precede the trailing DROP rules.
+     */
+    void addLiveV6Subnet(@NonNull String dev, @NonNull IPv6Network addr) {
+        var network = addr.toNetworkString();
+        var router = fmt("%s/128", addr.address());
+        filIn6.insert("-i", dev, "-s", network, "-d", router, "-j", "ACCEPT");
+        filFwd6.insert("-i", dev, "-s", network,
+            "-j", backend.FIL6_NET_EXTNET_OUT.chain);
+        filFwd6.insert("-o", dev, "-d", network,
+            "-j", backend.FIL6_NET_EXTNET_IN.chain);
+    }
+
+    void removeLiveV6Subnet(@NonNull String dev, @NonNull IPv6Network addr) {
+        var network = addr.toNetworkString();
+        var router = fmt("%s/128", addr.address());
+        filIn6.delete("-i", dev, "-s", network, "-d", router, "-j", "ACCEPT");
+        filFwd6.delete("-i", dev, "-s", network,
+            "-j", backend.FIL6_NET_EXTNET_OUT.chain);
+        filFwd6.delete("-o", dev, "-d", network,
+            "-j", backend.FIL6_NET_EXTNET_IN.chain);
     }
 }
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/pd/Duid.java b/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/pd/Duid.java
new file mode 100644
index 000000000..844e0ba29
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/pd/Duid.java
@@ -0,0 +1,50 @@
+package cn.classfun.droidvm.daemon.network.backend.pd;
+
+import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
+
+import androidx.annotation.NonNull;
+import androidx.annotation.Nullable;
+
+/**
+ * DHCPv6 DUID helpers. The default is DUID-LL (type 3, hw type 1)
+ * derived from a MAC address; user-supplied DUIDs are colon-hex strings.
+ */
+public final class Duid {
+    private Duid() {
+    }
+
+    @NonNull
+    public static byte[] fromLinkLayer(@NonNull String mac) {
+        var parts = mac.split(":");
+        if (parts.length != 6)
+            throw new IllegalArgumentException(fmt("Invalid MAC for DUID-LL: %s", mac));
+        var out = new byte[4 + 6];
+        out[0] = 0x00;
+        out[1] = 0x03; // DUID-LL
+        out[2] = 0x00;
+        out[3] = 0x01; // hw type: ethernet
+        for (int i = 0; i < 6; i++)
+            out[4 + i] = (byte) Integer.parseInt(parts[i], 16);
+        return out;
+    }
+
+    @NonNull
+    public static byte[] parse(@NonNull String hex) {
+        var parts = hex.split(":");
+        var out = new byte[parts.length];
+        for (int i = 0; i < parts.length; i++)
+            out[i] = (byte) Integer.parseInt(parts[i], 16);
+        return out;
+    }
+
+    @NonNull
+    public static String format(@Nullable byte[] duid) {
+        if (duid == null) return "";
+        var sb = new StringBuilder();
+        for (var b : duid) {
+            if (sb.length() > 0) sb.append(':');
+            sb.append(fmt("%02x", b));
+        }
+        return sb.toString();
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/server/ServerContext.java b/app/src/main/java/cn/classfun/droidvm/daemon/server/ServerContext.java
index 585309f3b..928ab3a9d 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/server/ServerContext.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/server/ServerContext.java
@@ -28,7 +28,10 @@ public ServerContext() {
         networks.load(new File(filesDir, networks.getFileName()));
         Log.i(TAG, fmt("config files loaded: %d VMs, %d networks", vms.size(), networks.size()));
         vms.setNetworkStore(networks);
+        // strays survive a daemon crash (children are orphaned, not killed)
         run("pkill dnsmasq");
+        run("pkill gvswitch");
+        run("pkill pbridge");
         try {
             networks.firewall.initialize();
         } catch (Exception e) {
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/vm/VMInstance.java b/app/src/main/java/cn/classfun/droidvm/daemon/vm/VMInstance.java
index d8750b0fd..8bb270bec 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/vm/VMInstance.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/vm/VMInstance.java
@@ -22,7 +22,6 @@
 import java.util.UUID;
 
 import cn.classfun.droidvm.daemon.console.ConsoleStream;
-import cn.classfun.droidvm.daemon.network.backend.LinuxNetwork;
 import cn.classfun.droidvm.daemon.vm.backend.BackendBase;
 import cn.classfun.droidvm.lib.natives.NativeProcess;
 import cn.classfun.droidvm.lib.natives.UnixHelper;
@@ -30,6 +29,7 @@
 import cn.classfun.droidvm.lib.store.network.NetworkState;
 import cn.classfun.droidvm.lib.store.vm.VMBackend;
 import cn.classfun.droidvm.lib.store.vm.VMConfig;
+import cn.classfun.droidvm.lib.store.vm.VMNicConfig;
 import cn.classfun.droidvm.lib.store.vm.VMState;
 import cn.classfun.droidvm.lib.utils.JsonUtils;
 
@@ -42,7 +42,6 @@ public final class VMInstance extends VMConfig {
     private BackendBase backend;
     private VMBackendInstance backendInstance;
     private Thread workerThread;
-    private volatile VMPortForwarder portForwarder;
     private final VMInstanceStore store;
 
     public interface VMEventCallback {
@@ -145,12 +144,12 @@ public boolean start() {
         return true;
     }
 
-    private void setupTap(int index, List<String> createdTaps, @NonNull DataItem netCfg, String vmId) {
-        var netId = netCfg.optString("network_id", "");
-        if (netId == null || netId.isEmpty()) return;
+    private void setupTap(int index, List<DataItem> createdNics, @NonNull DataItem netCfg, String vmId) throws Exception {
+        var nic = new VMNicConfig(netCfg);
+        var netId = nic.getNetworkId();
+        if (netId == null) return;
         var netInst = store.networkStore.findById(UUID.fromString(netId));
         if (netInst == null) throw new RuntimeException(fmt("Network %s not found", netId));
-        var br = netInst.item.optString("bridge_name", "");
         var netState = netInst.getState();
         if (netState != NetworkState.RUNNING) {
             Log.i(TAG, fmt("Network %s is %s, attempting to start it", netId, netState));
@@ -161,24 +160,16 @@ private void setupTap(int index, List<String> createdTaps, @NonNull DataItem net
                 throw new RuntimeException(fmt("Network %s still not running after start (state=%s)", netId, netState));
             Log.i(TAG, fmt("Network %s started successfully", netId));
         }
-        var tapName = requireNonNull(netCfg.optString("tap_name", ""));
-        if (tapName.isEmpty()) {
+        var tapName = nic.getTapName();
+        if (tapName == null) {
             tapName = fmt("vm%s-%d", vmId.substring(0, 8), index);
-            netCfg.set("tap_name", tapName);
+            nic.setTapName(tapName);
         }
-        var bridge = store.networkStore.backend;
-        if (bridge.isInterfaceExists(tapName)) bridge.deleteTap(tapName);
-        if (!bridge.createTap(tapName))
-            throw new RuntimeException(fmt("Failed to create TAP %s", tapName));
-        createdTaps.add(tapName);
-        if (!netInst.addInterface(tapName))
-            throw new RuntimeException(fmt("Failed to add TAP %s to bridge %s", tapName, br));
-        var tapMac = requireNonNull(netCfg.optString("mac_address", ""));
-        if (!tapMac.isEmpty() && !bridge.setMacAddress(tapName, tapMac))
-            Log.w(TAG, fmt("Failed to set MAC %s on TAP %s", tapMac, tapName));
-        if (!bridge.setLinkState(tapName, true))
-            Log.w(TAG, fmt("Failed to bring up TAP %s", tapName));
-        Log.i(TAG, fmt("TAP %s attached to bridge %s for VM %s", tapName, br, vmId));
+        netInst.attachNic(nic, tapName);
+        createdNics.add(netCfg);
+        Log.i(TAG, fmt(
+            "NIC %s attached to network %s for VM %s", tapName, netInst.getName(), vmId
+        ));
     }
 
     private boolean setupTaps() {
@@ -189,25 +180,38 @@ private boolean setupTaps() {
             return false;
         }
         var vmId = getId().toString();
-        var createdTaps = new ArrayList<String>();
+        var createdNics = new ArrayList<DataItem>();
         try {
             var arr = nets.asArray();
             for (int i = 0; i < arr.size(); i++) {
-                setupTap(i, createdTaps, arr.get(i), vmId);
+                setupTap(i, createdNics, arr.get(i), vmId);
             }
         } catch (Exception e) {
             Log.e(TAG, fmt("Error setting up TAP for VM %s: %s", vmId, e.getMessage()), e);
-            cleanupCreatedTaps(createdTaps);
+            cleanupCreatedNics(createdNics);
             return false;
         }
         return true;
     }
 
-    private void cleanupCreatedTaps(@NonNull List<String> taps) {
-        var net = store.networkStore.backend;
-        for (var tap : taps) {
-            net.removeInterface(tap);
-            net.deleteTap(tap);
+    private void cleanupCreatedNics(@NonNull List<DataItem> nics) {
+        for (var netCfg : nics)
+            detachNic(new VMNicConfig(netCfg));
+    }
+
+    private void detachNic(@NonNull VMNicConfig nic) {
+        var tapName = nic.getTapName();
+        if (tapName == null) return;
+        var netId = nic.getNetworkId();
+        var netInst = netId != null
+            ? store.networkStore.findById(UUID.fromString(netId)) : null;
+        if (netInst != null) {
+            netInst.detachNic(nic, tapName);
+        } else {
+            // network gone; remove the tap directly
+            var net = store.networkStore.backend;
+            net.removeInterface(tapName);
+            net.deleteTap(tapName);
         }
     }
 
@@ -327,7 +331,6 @@ private void runVM() {
                 startReaderThread(vmId, stream);
         }
         setState(VMState.RUNNING);
-        startPortForwarding();
         int code = process.waitFor();
         for (var stream : inst.streams.values()) {
             var reader = stream.getReaderThread();
@@ -352,7 +355,6 @@ private void runVM() {
         } else {
             Log.i(TAG, fmt("VM %s exited with code %d", getName(), code));
         }
-        stopPortForwarding();
         cleanupTap();
         inst.cleanup();
         setState(VMState.STOPPED);
@@ -362,58 +364,12 @@ private void runVM() {
     private void cleanupTap() {
         var nets = requireNonNull(item.opt("networks", DataItem.newArray()));
         if (nets.isEmpty()) return;
-        var bridge = new LinuxNetwork();
         for (var iter : nets) {
-            var tapVal = iter.getValue().optString("tap_name", "");
-            if (tapVal == null || tapVal.isEmpty()) continue;
-            Log.i(TAG, fmt("Cleaning up TAP %s for VM %s", tapVal, getName()));
-            bridge.removeInterface(tapVal);
-            bridge.deleteTap(tapVal);
-        }
-    }
-
-    private void startPortForwarding() {
-        try {
-            portForwarder = new VMPortForwarder(this, store.networkStore);
-            portForwarder.start();
-        } catch (Exception e) {
-            Log.w(TAG, fmt("Failed to start port forwarding for VM %s", getName()), e);
-        }
-    }
-
-    private void stopPortForwarding() {
-        if (portForwarder == null) return;
-        try {
-            portForwarder.stop();
-        } catch (Exception e) {
-            Log.w(TAG, fmt("Failed to stop port forwarding for VM %s", getName()), e);
+            var nic = new VMNicConfig(iter.getValue());
+            if (nic.getTapName() == null) continue;
+            Log.i(TAG, fmt("Cleaning up TAP %s for VM %s", nic.getTapName(), getName()));
+            detachNic(nic);
         }
-        portForwarder = null;
-    }
-
-    @NonNull
-    public JSONArray getConfiguredPortForwards() throws JSONException {
-        var arr = new JSONArray();
-        var pf = item.opt("port_forwards", null);
-        if (pf != null && pf.is(DataItem.Type.ARRAY))
-            for (var iter : pf) {
-                var r = iter.getValue();
-                if (r.is(DataItem.Type.OBJECT)) arr.put(r.toJson());
-            }
-        return arr;
-    }
-
-    @NonNull
-    public JSONArray getActivePortForwards() {
-        var pf = portForwarder;
-        return pf != null ? pf.snapshotApplied() : new JSONArray();
-    }
-
-    /** Runtime-only hot-update of DNAT rules; the frontend owns persistence (re-pushed via vm_modify on next start). */
-    public void applyPortForwards(@NonNull JSONArray rules) {
-        item.set("port_forwards", rules);
-        var pf = portForwarder;
-        if (pf != null) pf.sync();
     }
 
     private void startReaderThread(@NonNull String vmId, @NonNull ConsoleStream stream) {
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/vm/VMPortForwarder.java b/app/src/main/java/cn/classfun/droidvm/daemon/vm/VMPortForwarder.java
deleted file mode 100644
index 1f675ec4f..000000000
--- a/app/src/main/java/cn/classfun/droidvm/daemon/vm/VMPortForwarder.java
+++ /dev/null
@@ -1,359 +0,0 @@
-package cn.classfun.droidvm.daemon.vm;
-
-import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
-
-import android.util.Log;
-
-import androidx.annotation.NonNull;
-import androidx.annotation.Nullable;
-
-import org.json.JSONArray;
-import org.json.JSONException;
-import org.json.JSONObject;
-
-import java.util.ArrayList;
-import java.util.HashSet;
-import java.util.List;
-import java.util.Locale;
-
-import cn.classfun.droidvm.daemon.network.NetworkInstance;
-import cn.classfun.droidvm.daemon.network.NetworkInstanceStore;
-import cn.classfun.droidvm.lib.store.base.DataItem;
-import cn.classfun.droidvm.lib.store.vm.VMState;
-
-/**
- * Installs host -> guest iptables DNAT rules for one VM's {@code port_forwards}, resolving the
- * guest IP from DHCP leases / the neighbor table while the VM is RUNNING.
- */
-final class VMPortForwarder {
-    private static final String TAG = "VMPortForwarder";
-    private static final int RESOLVE_MAX_ATTEMPTS = 30;
-    private static final long RESOLVE_INTERVAL_MS = 1000L;
-
-    private final VMInstance vm;
-    private final NetworkInstanceStore networkStore;
-    private final List<Applied> applied = new ArrayList<>();
-    private volatile boolean running = false;
-    private Thread thread;
-
-    VMPortForwarder(@NonNull VMInstance vm, @Nullable NetworkInstanceStore networkStore) {
-        this.vm = vm;
-        this.networkStore = networkStore;
-    }
-
-    boolean hasRules() {
-        var pf = vm.item.opt("port_forwards", null);
-        return pf != null && !pf.isEmpty();
-    }
-
-    synchronized void start() {
-        if (running) return;
-        if (!hasRules()) return;
-        if (networkStore == null) {
-            Log.w(TAG, fmt("VM %s has port forwards but no network store", vm.getName()));
-            return;
-        }
-        running = true;
-        thread = new Thread(this::loop, fmt("PF-%s", vm.getId()));
-        thread.setDaemon(true);
-        thread.start();
-    }
-
-    synchronized void stop() {
-        running = false;
-        notifyAll();
-        var t = thread;
-        if (t != null) {
-            t.interrupt();
-            thread = null;
-        }
-        removeAll();
-    }
-
-    @NonNull
-    JSONArray snapshotApplied() {
-        var arr = new JSONArray();
-        synchronized (applied) {
-            for (var a : applied) {
-                try {
-                    var o = new JSONObject();
-                    o.put("protocol", a.protocol);
-                    o.put("host_ip", a.hostIp == null ? "" : a.hostIp);
-                    o.put("host_port", a.hostPort);
-                    o.put("guest_ip", a.guestIp);
-                    o.put("guest_port", a.guestPort);
-                    arr.put(o);
-                } catch (JSONException ignored) {
-                }
-            }
-        }
-        return arr;
-    }
-
-    /** Wakes the poll thread (or starts it) so reconcile always runs on that single thread. */
-    synchronized void sync() {
-        if (running) notifyAll();
-        else start();
-    }
-
-    /**
-     * Incrementally reconciles installed rules to the current config. Poll-thread only and the
-     * sole writer of {@link #applied} (besides {@link #stop()}). A still-configured binding whose
-     * guest IP is momentarily unresolvable keeps its old entry and is switched atomically once
-     * resolvable, so hot-editing guest_ip/NIC never drops a working forward.
-     *
-     * @return whether any rule is still configured-but-unresolvable (keep polling).
-     */
-    private boolean reconcile() {
-        if (!running || networkStore == null) return false;
-        var rules = parseRules();
-        // Resolve outside the applied lock; DHCP / neighbor lookups are slow.
-        var desired = new ArrayList<Applied>();
-        boolean hasUnresolved = false;
-        for (var rule : rules) {
-            var target = resolveTarget(rule);
-            if (target == null) {
-                hasUnresolved = true;
-                continue;
-            }
-            desired.add(new Applied(target.bridge, target.ip, rule.protocol,
-                rule.hostIp, rule.hostPort, rule.guestPort));
-        }
-        synchronized (applied) {
-            applied.removeIf(a -> {
-                for (var d : desired)
-                    if (sameForward(a, d)) return false;
-                if (hostBindingConfigured(a, rules)) return false;
-                networkStore.firewall.removeForward(
-                    a.bridge, a.guestIp, a.protocol, a.hostIp, a.hostPort, a.guestPort);
-                Log.i(TAG, fmt("VM %s: removed forward %s :%d -> %s:%d",
-                    vm.getName(), a.protocol, a.hostPort, a.guestIp, a.guestPort));
-                return true;
-            });
-            for (var d : desired) {
-                boolean exists = false;
-                for (var a : applied)
-                    if (sameForward(a, d)) {
-                        exists = true;
-                        break;
-                    }
-                if (exists) continue;
-                applied.removeIf(a -> {
-                    if (!sameHostBinding(a, d)) return false;
-                    networkStore.firewall.removeForward(
-                        a.bridge, a.guestIp, a.protocol, a.hostIp, a.hostPort, a.guestPort);
-                    Log.i(TAG, fmt("VM %s: switched forward %s :%d off %s:%d",
-                        vm.getName(), a.protocol, a.hostPort, a.guestIp, a.guestPort));
-                    return true;
-                });
-                boolean ok = networkStore.firewall.applyForward(
-                    d.bridge, d.guestIp, d.protocol, d.hostIp, d.hostPort, d.guestPort);
-                if (ok) {
-                    applied.add(d);
-                    Log.i(TAG, fmt("VM %s: forward %s :%d -> %s:%d",
-                        vm.getName(), d.protocol, d.hostPort, d.guestIp, d.guestPort));
-                } else {
-                    Log.w(TAG, fmt("VM %s: failed to apply forward %s :%d",
-                        vm.getName(), d.protocol, d.hostPort));
-                }
-            }
-        }
-        return hasUnresolved;
-    }
-
-    private static boolean sameForward(@NonNull Applied a, @NonNull Applied b) {
-        return a.protocol.equals(b.protocol)
-            && a.hostPort == b.hostPort
-            && a.guestPort == b.guestPort
-            && eq(a.hostIp, b.hostIp)
-            && eq(a.guestIp, b.guestIp)
-            && eq(a.bridge, b.bridge);
-    }
-
-    private static boolean sameHostBinding(@NonNull Applied a, @NonNull Applied b) {
-        return a.protocol.equals(b.protocol) && a.hostPort == b.hostPort && eq(a.hostIp, b.hostIp);
-    }
-
-    private static boolean hostBindingConfigured(@NonNull Applied a, @NonNull List<Rule> rules) {
-        for (var r : rules)
-            if (a.protocol.equals(r.protocol) && a.hostPort == r.hostPort && eq(a.hostIp, r.hostIp))
-                return true;
-        return false;
-    }
-
-    private static boolean eq(@Nullable String a, @Nullable String b) {
-        return a == null ? b == null : a.equals(b);
-    }
-
-    /** Reconcile/wait loop; stays alive the whole RUNNING period so late rule changes are still reconciled. */
-    private void loop() {
-        try {
-            int attempts = 0;
-            synchronized (this) {
-                while (running && vm.getState() == VMState.RUNNING) {
-                    boolean hasUnresolved = reconcile();
-                    if (!running) break;
-                    if (hasUnresolved && attempts < RESOLVE_MAX_ATTEMPTS) {
-                        attempts++;
-                        wait(RESOLVE_INTERVAL_MS);
-                    } else {
-                        if (hasUnresolved)
-                            Log.w(TAG, fmt("VM %s: gave up auto-resolving guest IP for some port"
-                                    + " forwards after %d attempts; will retry on next config change",
-                                vm.getName(), attempts));
-                        attempts = 0;
-                        wait();
-                    }
-                }
-            }
-        } catch (InterruptedException ignored) {
-            Thread.currentThread().interrupt();
-        }
-    }
-
-    private void removeAll() {
-        synchronized (applied) {
-            if (networkStore != null)
-                for (var a : applied)
-                    networkStore.firewall.removeForward(
-                        a.bridge, a.guestIp, a.protocol, a.hostIp, a.hostPort, a.guestPort);
-            applied.clear();
-        }
-    }
-
-    @NonNull
-    private List<Rule> parseRules() {
-        var list = new ArrayList<Rule>();
-        var pf = vm.item.opt("port_forwards", null);
-        if (pf == null || !pf.is(DataItem.Type.ARRAY)) return list;
-        var seen = new HashSet<String>();
-        for (var iter : pf) {
-            var r = iter.getValue();
-            if (!r.is(DataItem.Type.OBJECT)) continue;
-            if (!r.optBoolean("enabled", true)) continue;
-            var protocol = r.optString("protocol", "tcp");
-            if (protocol == null || protocol.isEmpty()) protocol = "tcp";
-            protocol = protocol.toLowerCase(Locale.ROOT);
-            if (!protocol.equals("tcp") && !protocol.equals("udp")) continue;
-            long hostPort = r.optLong("host_port", 0);
-            if (hostPort <= 0 || hostPort > 65535) continue;
-            long guestPort = r.optLong("guest_port", 0);
-            if (guestPort <= 0 || guestPort > 65535) guestPort = hostPort;
-            var hostIp = r.optString("host_ip", "");
-            if (hostIp == null) hostIp = "";
-            var key = fmt("%s|%s|%d", protocol, hostIp, hostPort);
-            if (!seen.add(key)) {
-                Log.w(TAG, fmt("VM %s: duplicate port forward %s, skipping", vm.getName(), key));
-                continue;
-            }
-            var rule = new Rule();
-            rule.protocol = protocol;
-            rule.hostIp = hostIp;
-            rule.hostPort = (int) hostPort;
-            rule.guestPort = (int) guestPort;
-            rule.networkId = r.optString("network_id", "");
-            rule.fixedGuestIp = r.optString("guest_ip", "");
-            list.add(rule);
-        }
-        return list;
-    }
-
-    @Nullable
-    private Target resolveTarget(@NonNull Rule rule) {
-        var net = findNetwork(rule.networkId);
-        if (net == null) return null;
-        var netId = net.optString("network_id", "");
-        if (netId == null || netId.isEmpty()) return null;
-        var netInst = networkStore.findById(netId);
-        if (netInst == null) return null;
-        var bridge = netInst.item.optString("bridge_name", "");
-        if (bridge == null || bridge.isEmpty()) return null;
-        if (rule.fixedGuestIp != null && !rule.fixedGuestIp.isEmpty())
-            return new Target(bridge, rule.fixedGuestIp);
-        var mac = net.optString("mac_address", "");
-        if (mac == null || mac.isEmpty()) return null;
-        var ip = resolveGuestIpByMac(netInst, bridge, mac);
-        if (ip == null) return null;
-        return new Target(bridge, ip);
-    }
-
-    @Nullable
-    private String resolveGuestIpByMac(
-        @NonNull NetworkInstance netInst, @NonNull String bridge, @NonNull String mac) {
-        var macLower = mac.toLowerCase(Locale.ROOT);
-        var ip = matchMac(networkStore.backend.listDhcpLeases(bridge), macLower, "ip", "mac");
-        if (ip != null) return ip;
-        return matchMac(netInst.listNeighbors(), macLower, "dst", "lladdr");
-    }
-
-    @Nullable
-    private static String matchMac(
-        @Nullable JSONArray arr, @NonNull String macLower,
-        @NonNull String ipKey, @NonNull String macKey) {
-        if (arr == null) return null;
-        for (int i = 0; i < arr.length(); i++) {
-            var o = arr.optJSONObject(i);
-            if (o == null) continue;
-            var m = o.optString(macKey, "");
-            if (!m.isEmpty() && m.toLowerCase(Locale.ROOT).equals(macLower)) {
-                var ip = o.optString(ipKey, "");
-                if (!ip.isEmpty()) return ip;
-            }
-        }
-        return null;
-    }
-
-    @Nullable
-    private DataItem findNetwork(@Nullable String networkId) {
-        var nets = vm.item.opt("networks", null);
-        if (nets == null || !nets.is(DataItem.Type.ARRAY)) return null;
-        DataItem first = null;
-        for (var iter : nets) {
-            var net = iter.getValue();
-            var nid = net.optString("network_id", "");
-            if (nid == null || nid.isEmpty()) continue;
-            if (first == null) first = net;
-            if (networkId == null || networkId.isEmpty()) return net;
-            if (networkId.equals(nid)) return net;
-        }
-        return first;
-    }
-
-    private static final class Applied {
-        final String bridge;
-        final String guestIp;
-        final String protocol;
-        final String hostIp;
-        final int hostPort;
-        final int guestPort;
-
-        Applied(String bridge, String guestIp, String protocol,
-                String hostIp, int hostPort, int guestPort) {
-            this.bridge = bridge;
-            this.guestIp = guestIp;
-            this.protocol = protocol;
-            this.hostIp = hostIp;
-            this.hostPort = hostPort;
-            this.guestPort = guestPort;
-        }
-    }
-
-    private static final class Rule {
-        String protocol;
-        String hostIp;
-        int hostPort;
-        int guestPort;
-        String networkId;
-        String fixedGuestIp;
-    }
-
-    private static final class Target {
-        final String bridge;
-        final String ip;
-
-        Target(String bridge, String ip) {
-            this.bridge = bridge;
-            this.ip = ip;
-        }
-    }
-}
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/Constants.java b/app/src/main/java/cn/classfun/droidvm/lib/Constants.java
index 0df2d8ed4..4670a715e 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/Constants.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/Constants.java
@@ -23,6 +23,13 @@ public final class Constants {
     public static final String[] BINARIES_PREBUILT = {"7za"};
     public static final String[] BINARIES_BUILT = {"droidvm", "daemon"};
     public static final String[] LIBRARIES_BUILT = {"libsimpledump.so", "libunixhelper.so"};
+    /**
+     * IFA_RT_PRIORITY magic that pbridge tags its ND/ARP-offload proxy
+     * addresses with (its --offload-workaround-magic). Host-IP discovery
+     * excludes addresses carrying this metric: they are guest addresses
+     * pbridge parks on the uplink, not the phone's own addresses.
+     */
+    public static final long PBRIDGE_OFFLOAD_MAGIC = 4243672773L;
 
     private Constants() {
     }
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/network/IPv4Network.java b/app/src/main/java/cn/classfun/droidvm/lib/network/IPv4Network.java
index 4bd7ef0ee..e293d2663 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/network/IPv4Network.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/network/IPv4Network.java
@@ -95,6 +95,19 @@ public boolean overlaps(@NonNull IPv4Network other) {
         return thisNet <= otherBcast && otherNet <= thisBcast;
     }
 
+    /**
+     * Address at network base + offset. Offset must address a usable host
+     * within this prefix (not the network or broadcast address).
+     */
+    @NonNull
+    public IPv4Address addressAtOffset(long offset) {
+        long total = totalAddresses();
+        if (offset <= 0 || offset >= total - 1) throw new IllegalArgumentException(fmt(
+            "Offset %d out of range for /%d network (1..%d)", offset, prefix, total - 2
+        ));
+        return networkAddress().add(offset);
+    }
+
     @Nullable
     public IPv4Address dhcpPoolStart() {
         if (prefix >= 31) return null;
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/network/IPv6Network.java b/app/src/main/java/cn/classfun/droidvm/lib/network/IPv6Network.java
index 488041fe9..34b0918f7 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/network/IPv6Network.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/network/IPv6Network.java
@@ -81,6 +81,24 @@ public IPv6Address lastAddress() {
         return new IPv6Address(networkAddress().value().or(hostMask));
     }
 
+    /**
+     * Address at network base + offset. Offset must address a host within
+     * this prefix (not the anycast/base address).
+     */
+    @NonNull
+    public IPv6Address addressAtOffset(@NonNull BigInteger offset) {
+        if (offset.signum() <= 0 || offset.compareTo(totalAddresses()) >= 0)
+            throw new IllegalArgumentException(fmt(
+                "Offset %s out of range for /%d network", offset, prefix
+            ));
+        return new IPv6Address(networkAddress().value().add(offset));
+    }
+
+    @NonNull
+    public IPv6Address addressAtOffset(long offset) {
+        return addressAtOffset(BigInteger.valueOf(offset));
+    }
+
     @Override
     public boolean contains(@NonNull IPv6Address ip) {
         var v = ip.value();
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/store/network/BridgeType.java b/app/src/main/java/cn/classfun/droidvm/lib/store/network/BridgeType.java
new file mode 100644
index 000000000..bd8f10da2
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/lib/store/network/BridgeType.java
@@ -0,0 +1,27 @@
+package cn.classfun.droidvm.lib.store.network;
+
+import androidx.annotation.NonNull;
+import androidx.annotation.Nullable;
+
+public enum BridgeType {
+    LINUX("linux"),
+    GVISOR("gvisor");
+
+    private final String key;
+
+    BridgeType(@NonNull String key) {
+        this.key = key;
+    }
+
+    @NonNull
+    public String key() {
+        return key;
+    }
+
+    @NonNull
+    public static BridgeType fromKey(@Nullable String key) {
+        for (var v : values())
+            if (v.key.equals(key)) return v;
+        return LINUX;
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/store/network/Ipv6Source.java b/app/src/main/java/cn/classfun/droidvm/lib/store/network/Ipv6Source.java
new file mode 100644
index 000000000..e27728bb2
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/lib/store/network/Ipv6Source.java
@@ -0,0 +1,27 @@
+package cn.classfun.droidvm.lib.store.network;
+
+import androidx.annotation.NonNull;
+import androidx.annotation.Nullable;
+
+public enum Ipv6Source {
+    STATIC("static"),
+    DHCP_PD("dhcp_pd");
+
+    private final String key;
+
+    Ipv6Source(@NonNull String key) {
+        this.key = key;
+    }
+
+    @NonNull
+    public String key() {
+        return key;
+    }
+
+    @NonNull
+    public static Ipv6Source fromKey(@Nullable String key) {
+        for (var v : values())
+            if (v.key.equals(key)) return v;
+        return STATIC;
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/store/network/NetworkConfig.java b/app/src/main/java/cn/classfun/droidvm/lib/store/network/NetworkConfig.java
index d7b4bc94b..c83b98e66 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/store/network/NetworkConfig.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/store/network/NetworkConfig.java
@@ -1,20 +1,145 @@
 package cn.classfun.droidvm.lib.store.network;
 
 import androidx.annotation.NonNull;
+import androidx.annotation.Nullable;
 
 import org.json.JSONException;
 import org.json.JSONObject;
 
+import java.util.ArrayList;
+import java.util.List;
 import java.util.UUID;
 
 import cn.classfun.droidvm.lib.store.base.DataConfig;
+import cn.classfun.droidvm.lib.store.base.DataItem;
 
 public class NetworkConfig extends DataConfig {
+    public static final int SCHEMA_VERSION = 2;
+
     public NetworkConfig() {
         setId(UUID.randomUUID());
+        item.set("schema", (long) SCHEMA_VERSION);
     }
 
     public NetworkConfig(@NonNull JSONObject obj) throws JSONException {
         item.set(obj);
+        if (!isSupportedSchema(obj)) throw new JSONException(
+            "Unsupported network config schema (expected " + SCHEMA_VERSION + ")"
+        );
+    }
+
+    public static boolean isSupportedSchema(@NonNull JSONObject obj) {
+        return obj.optInt("schema", 0) == SCHEMA_VERSION;
+    }
+
+    @Nullable
+    public String getBridgeName() {
+        return item.optString("bridge_name", null);
+    }
+
+    public void setBridgeName(@NonNull String name) {
+        item.set("bridge_name", name);
+    }
+
+    @NonNull
+    public BridgeType getBridgeType() {
+        return BridgeType.fromKey(item.optString("bridge_type", null));
+    }
+
+    public void setBridgeType(@NonNull BridgeType type) {
+        item.set("bridge_type", type.key());
+    }
+
+    @NonNull
+    public UplinkMode getUplinkMode() {
+        return UplinkMode.fromKey(item.optString("uplink_mode", null));
+    }
+
+    public void setUplinkMode(@NonNull UplinkMode mode) {
+        item.set("uplink_mode", mode.key());
+    }
+
+    public boolean isStp() {
+        return item.optBoolean("stp", false);
+    }
+
+    public boolean isAutoUp() {
+        return item.optBoolean("auto_up", false);
+    }
+
+    @NonNull
+    private DataItem section(@NonNull String key) {
+        var s = item.opt(key, null);
+        if (s == null || !s.is(DataItem.Type.OBJECT)) {
+            // set() stores a copy; re-read so callers mutate the stored item
+            item.set(key, DataItem.newObject());
+            s = item.get(key);
+        }
+        return s;
+    }
+
+    @NonNull
+    public DataItem l2() {
+        return section("l2");
+    }
+
+    @NonNull
+    public DataItem l3() {
+        return section("l3");
+    }
+
+    /**
+     * L2 mode: configured uplink — a literal interface name or a
+     * "WiFi"/"Ethernet"/"Tethering" logical identifier resolved at start.
+     */
+    @Nullable
+    public String getL2Uplink() {
+        return l2().optString("uplink", null);
+    }
+
+    /** L2 mode: whether to pseudo-bridge (force-on for non-bridgeable uplinks). */
+    public boolean isL2PseudoBridge() {
+        return l2().optBoolean("pseudo_bridge", true);
+    }
+
+    /** MAC of the bridge itself for the current uplink mode, if configured. */
+    @Nullable
+    public String getBridgeMacAddress() {
+        switch (getUplinkMode()) {
+            case L3:
+                return emptyToNull(l3().optString("mac_address", null));
+            default:
+                return null;
+        }
+    }
+
+    @NonNull
+    public List<VlanConfig> getVlans() {
+        var out = new ArrayList<VlanConfig>();
+        if (getUplinkMode() != UplinkMode.L3) return out;
+        var arr = l3().opt("vlans", null);
+        if (arr == null || !arr.is(DataItem.Type.ARRAY)) return out;
+        for (var e : arr.asArray())
+            if (e.is(DataItem.Type.OBJECT)) out.add(new VlanConfig(e));
+        return out;
+    }
+
+    @Nullable
+    public VlanConfig findVlan(int vlanId) {
+        for (var vlan : getVlans())
+            if (vlan.getVlanId() == vlanId) return vlan;
+        return null;
+    }
+
+    /** True if any VLAN id other than the untagged (0) domain is configured. */
+    public boolean hasTaggedVlans() {
+        for (var vlan : getVlans())
+            if (!vlan.isUntagged()) return true;
+        return false;
+    }
+
+    @Nullable
+    private static String emptyToNull(@Nullable String s) {
+        return s == null || s.isEmpty() ? null : s;
     }
 }
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/store/network/NetworkConfigValidator.java b/app/src/main/java/cn/classfun/droidvm/lib/store/network/NetworkConfigValidator.java
new file mode 100644
index 000000000..73e978dda
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/lib/store/network/NetworkConfigValidator.java
@@ -0,0 +1,181 @@
+package cn.classfun.droidvm.lib.store.network;
+
+import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
+
+import androidx.annotation.NonNull;
+import androidx.annotation.Nullable;
+
+import java.math.BigInteger;
+import java.util.HashSet;
+
+import cn.classfun.droidvm.lib.network.IPv4Network;
+import cn.classfun.droidvm.lib.network.IPv6Network;
+import cn.classfun.droidvm.lib.utils.NetUtils;
+
+/**
+ * Validates a schema-v2 network config. Shared by the edit UI and the
+ * daemon's create/modify handlers. Throws {@link IllegalArgumentException}
+ * with a human-readable message on the first violation found.
+ */
+public final class NetworkConfigValidator {
+    private NetworkConfigValidator() {
+    }
+
+    public static void validate(@NonNull NetworkConfig config) {
+        var name = config.getName();
+        if (name == null || name.trim().isEmpty())
+            throw new IllegalArgumentException("Network name must not be empty");
+        var bridgeName = config.getBridgeName();
+        if (bridgeName == null || !bridgeName.matches("[a-zA-Z][a-zA-Z0-9_-]*"))
+            throw new IllegalArgumentException(fmt("Invalid bridge name: %s", bridgeName));
+        if (bridgeName.length() > 15)
+            throw new IllegalArgumentException("Bridge name longer than 15 characters");
+
+        var type = config.getBridgeType();
+        var mode = config.getUplinkMode();
+        switch (mode) {
+            case L2:
+                validateL2(config, type);
+                break;
+            case L3:
+                validateL3(config, type);
+                break;
+        }
+    }
+
+    private static void validateL2(@NonNull NetworkConfig config, @NonNull BridgeType type) {
+        if (type != BridgeType.LINUX)
+            throw new IllegalArgumentException("L2 bridging requires a Linux bridge");
+        var uplink = config.getL2Uplink();
+        if (uplink == null || uplink.trim().isEmpty())
+            throw new IllegalArgumentException("L2 bridging requires an uplink interface");
+        // pseudo_bridge is a boolean toggle; nothing further to validate
+    }
+
+    private static void validateL3(@NonNull NetworkConfig config, @NonNull BridgeType type) {
+        validateMac(config.getBridgeMacAddress());
+        // zero VLANs is valid: a VM-internal network the host doesn't join
+        var vlans = config.getVlans();
+        var seen = new HashSet<Integer>();
+        for (var vlan : vlans) {
+            int id = vlan.getVlanId();
+            if (id < 0 || id > 4094)
+                throw new IllegalArgumentException(fmt("Invalid VLAN id: %d", id));
+            if (!seen.add(id))
+                throw new IllegalArgumentException(fmt("Duplicate VLAN id: %d", id));
+            validateVlan(vlan, type);
+        }
+    }
+
+    private static void validateVlan(@NonNull VlanConfig vlan, @NonNull BridgeType type) {
+        var label = vlan.isUntagged() ? "untagged" : String.valueOf(vlan.getVlanId());
+
+        var cidr4 = vlan.getIpv4Cidr();
+        IPv4Network net4 = null;
+        if (cidr4 != null) {
+            try {
+                net4 = IPv4Network.parse(cidr4);
+            } catch (Exception e) {
+                throw new IllegalArgumentException(fmt(
+                    "VLAN %s: invalid IPv4 CIDR: %s", label, cidr4
+                ));
+            }
+            if (net4.prefix() > 30) throw new IllegalArgumentException(fmt(
+                "VLAN %s: IPv4 prefix /%d too small for a gateway network",
+                label, net4.prefix()
+            ));
+            if (net4.address().equals(net4.networkAddress())
+                || net4.address().equals(net4.broadcastAddress()))
+                throw new IllegalArgumentException(fmt(
+                    "VLAN %s: IPv4 gateway address must be a host address, not %s",
+                    label, net4.address()
+                ));
+        }
+        if (vlan.isDhcp4Enabled()) {
+            if (net4 == null) throw new IllegalArgumentException(fmt(
+                "VLAN %s: DHCPv4 requires a primary IPv4 network", label
+            ));
+            validateOffsets(label, "DHCPv4",
+                vlan.getDhcp4OffsetStart(), vlan.getDhcp4OffsetEnd(),
+                BigInteger.valueOf(net4.totalAddresses() - 1));
+        }
+
+        var source = vlan.getIpv6Source();
+        if (source == Ipv6Source.DHCP_PD) {
+            if (type != BridgeType.LINUX) throw new IllegalArgumentException(fmt(
+                "VLAN %s: DHCP-PD is only available on Linux bridges", label
+            ));
+            var uplink = vlan.getPdUplink();
+            if (uplink == null || uplink.trim().isEmpty())
+                throw new IllegalArgumentException(fmt(
+                    "VLAN %s: DHCP-PD requires an uplink interface", label
+                ));
+            var duid = vlan.getPdDuid();
+            if (duid != null && !duid.isEmpty() && !duid.matches("([0-9a-fA-F]{2}:)*[0-9a-fA-F]{2}"))
+                throw new IllegalArgumentException(fmt("VLAN %s: invalid DUID", label));
+        } else {
+            var cidr6 = vlan.getIpv6Cidr();
+            if (cidr6 != null) {
+                IPv6Network net6;
+                try {
+                    net6 = IPv6Network.parse(cidr6);
+                } catch (Exception e) {
+                    throw new IllegalArgumentException(fmt(
+                        "VLAN %s: invalid IPv6 CIDR: %s", label, cidr6
+                    ));
+                }
+                if (net6.prefix() > 126) throw new IllegalArgumentException(fmt(
+                    "VLAN %s: IPv6 prefix /%d too small", label, net6.prefix()
+                ));
+                if (vlan.isSlaacEnabled() && net6.prefix() != 64)
+                    throw new IllegalArgumentException(fmt(
+                        "VLAN %s: SLAAC requires a /64 network", label
+                    ));
+            }
+        }
+        // ipv6.snat may be stored true on a Linux bridge: it has no effect
+        // there (the Android kernel has no IPv6 NAT) but is kept so the
+        // setting survives a round-trip through the Linux bridge type
+        if (vlan.isDhcp6Enabled()) {
+            if (!vlan.hasIpv6()) throw new IllegalArgumentException(fmt(
+                "VLAN %s: DHCPv6 requires a primary IPv6 network", label
+            ));
+            validateOffsets(label, "DHCPv6",
+                vlan.getDhcp6OffsetStart(), vlan.getDhcp6OffsetEnd(), null);
+        }
+
+        if (type == BridgeType.GVISOR
+            && (!vlan.getIpv4Secondary().isEmpty() || !vlan.getIpv6Secondary().isEmpty()))
+            throw new IllegalArgumentException(fmt(
+                "VLAN %s: secondary networks are not supported on gVisor bridges", label
+            ));
+        for (var cidr : vlan.getIpv4Secondary())
+            if (!IPv4Network.isValid(cidr)) throw new IllegalArgumentException(fmt(
+                "VLAN %s: invalid secondary IPv4 CIDR: %s", label, cidr
+            ));
+        for (var cidr : vlan.getIpv6Secondary())
+            if (!IPv6Network.isValid(cidr)) throw new IllegalArgumentException(fmt(
+                "VLAN %s: invalid secondary IPv6 CIDR: %s", label, cidr
+            ));
+    }
+
+    private static void validateOffsets(
+        @NonNull String label, @NonNull String what,
+        long start, long end, @Nullable BigInteger maxExclusive
+    ) {
+        if (start <= 0 || end < start) throw new IllegalArgumentException(fmt(
+            "VLAN %s: invalid %s pool offsets %d-%d", label, what, start, end
+        ));
+        if (maxExclusive != null
+            && BigInteger.valueOf(end).compareTo(maxExclusive) >= 0)
+            throw new IllegalArgumentException(fmt(
+                "VLAN %s: %s pool offset %d exceeds the network size", label, what, end
+            ));
+    }
+
+    private static void validateMac(@Nullable String mac) {
+        if (mac == null) return;
+        if (!NetUtils.isValidMac(mac))
+            throw new IllegalArgumentException(fmt("Invalid MAC address: %s", mac));
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/store/network/NetworkStore.java b/app/src/main/java/cn/classfun/droidvm/lib/store/network/NetworkStore.java
index af4eae2fa..0439cf1a7 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/store/network/NetworkStore.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/store/network/NetworkStore.java
@@ -1,6 +1,7 @@
 package cn.classfun.droidvm.lib.store.network;
 
 import android.content.Context;
+import android.util.Log;
 
 import androidx.annotation.NonNull;
 
@@ -10,6 +11,7 @@
 import java.io.File;
 
 import cn.classfun.droidvm.lib.store.base.DataStore;
+import cn.classfun.droidvm.lib.utils.JsonUtils;
 
 public final class NetworkStore extends DataStore<NetworkConfig> {
     public NetworkStore() {
@@ -31,6 +33,26 @@ public NetworkStore(@NonNull Context context) {
         super(context);
     }
 
+    @Override
+    protected boolean load(@NonNull DataStore<NetworkConfig> store, @NonNull JSONObject obj) {
+        try {
+            store.clear();
+            JsonUtils.forEachArray(obj, getTypeName(), (JSONObject entry) -> {
+                if (!NetworkConfig.isSupportedSchema(entry)) {
+                    Log.w(TAG, "Skipping network config with unsupported schema: "
+                        + entry.optString("name"));
+                    return;
+                }
+                store.addObject(entry);
+            });
+            return true;
+        } catch (Exception e) {
+            Log.e(TAG, "Failed to load network configs", e);
+            store.clear();
+            return false;
+        }
+    }
+
     @NonNull
     @Override
     protected NetworkConfig create() {
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/store/network/UplinkMode.java b/app/src/main/java/cn/classfun/droidvm/lib/store/network/UplinkMode.java
new file mode 100644
index 000000000..b5a6d0136
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/lib/store/network/UplinkMode.java
@@ -0,0 +1,28 @@
+package cn.classfun.droidvm.lib.store.network;
+
+import androidx.annotation.NonNull;
+import androidx.annotation.Nullable;
+
+public enum UplinkMode {
+    L2("l2"),
+    L3("l3");
+
+    private final String key;
+
+    UplinkMode(@NonNull String key) {
+        this.key = key;
+    }
+
+    @NonNull
+    public String key() {
+        return key;
+    }
+
+    @NonNull
+    public static UplinkMode fromKey(@Nullable String key) {
+        for (var v : values())
+            if (v.key.equals(key)) return v;
+        // legacy/unknown keys (incl. the dropped "none" mode) read as host L3
+        return L3;
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/store/network/VlanConfig.java b/app/src/main/java/cn/classfun/droidvm/lib/store/network/VlanConfig.java
new file mode 100644
index 000000000..9f70591f5
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/lib/store/network/VlanConfig.java
@@ -0,0 +1,235 @@
+package cn.classfun.droidvm.lib.store.network;
+
+import androidx.annotation.NonNull;
+import androidx.annotation.Nullable;
+
+import java.util.ArrayList;
+import java.util.List;
+
+import cn.classfun.droidvm.lib.network.IPv4Network;
+import cn.classfun.droidvm.lib.network.IPv6Network;
+import cn.classfun.droidvm.lib.store.base.DataItem;
+
+/**
+ * Wrapper over one entry of an L3 network's "vlans" array.
+ * VLAN id 0 means the untagged domain.
+ */
+public final class VlanConfig {
+    public final DataItem item;
+
+    public VlanConfig(@NonNull DataItem item) {
+        this.item = item;
+    }
+
+    @NonNull
+    public static VlanConfig createDefault(int vlanId) {
+        var item = DataItem.newObject();
+        item.set("vlan_id", (long) vlanId);
+        var ipv4 = DataItem.newObject();
+        var dhcp4 = DataItem.newObject();
+        dhcp4.set("enabled", true);
+        dhcp4.set("offset_start", 128L);
+        dhcp4.set("offset_end", 192L);
+        ipv4.set("cidr", (String) null);
+        ipv4.set("snat", true);
+        ipv4.set("dhcp", dhcp4);
+        item.set("ipv4", ipv4);
+        var ipv6 = DataItem.newObject();
+        var dhcp6 = DataItem.newObject();
+        dhcp6.set("enabled", true);
+        dhcp6.set("offset_start", 128L);
+        dhcp6.set("offset_end", 192L);
+        var slaac = DataItem.newObject();
+        slaac.set("enabled", true);
+        ipv6.set("source", Ipv6Source.STATIC.key());
+        ipv6.set("cidr", (String) null);
+        ipv6.set("snat", false);
+        ipv6.set("dhcp", dhcp6);
+        ipv6.set("slaac", slaac);
+        item.set("ipv6", ipv6);
+        item.set("dns_servers", DataItem.newArray());
+        item.set("ipv4_secondary", DataItem.newArray());
+        item.set("ipv6_secondary", DataItem.newArray());
+        return new VlanConfig(item);
+    }
+
+    public int getVlanId() {
+        return (int) item.optLong("vlan_id", 0);
+    }
+
+    public boolean isUntagged() {
+        return getVlanId() == 0;
+    }
+
+    @NonNull
+    private DataItem section(@NonNull String key) {
+        var s = item.opt(key, null);
+        if (s == null || !s.is(DataItem.Type.OBJECT)) {
+            // set() stores a copy; re-read so callers mutate the stored item
+            item.set(key, DataItem.newObject());
+            s = item.get(key);
+        }
+        return s;
+    }
+
+    @NonNull
+    public DataItem ipv4() {
+        return section("ipv4");
+    }
+
+    @NonNull
+    public DataItem ipv6() {
+        return section("ipv6");
+    }
+
+    @Nullable
+    public String getIpv4Cidr() {
+        var cidr = ipv4().optString("cidr", null);
+        return cidr == null || cidr.isEmpty() ? null : cidr;
+    }
+
+    @Nullable
+    public IPv4Network getIpv4Network() {
+        var cidr = getIpv4Cidr();
+        if (cidr == null) return null;
+        try {
+            return IPv4Network.parse(cidr);
+        } catch (Exception e) {
+            return null;
+        }
+    }
+
+    public boolean isIpv4Snat() {
+        return ipv4().optBoolean("snat", false);
+    }
+
+    public boolean isDhcp4Enabled() {
+        return getIpv4Cidr() != null
+            && ipv4().opt("dhcp", DataItem.newObject()).optBoolean("enabled", false);
+    }
+
+    public long getDhcp4OffsetStart() {
+        return ipv4().opt("dhcp", DataItem.newObject()).optLong("offset_start", 128);
+    }
+
+    public long getDhcp4OffsetEnd() {
+        return ipv4().opt("dhcp", DataItem.newObject()).optLong("offset_end", 192);
+    }
+
+    @NonNull
+    public Ipv6Source getIpv6Source() {
+        return Ipv6Source.fromKey(ipv6().optString("source", Ipv6Source.STATIC.key()));
+    }
+
+    @Nullable
+    public String getIpv6Cidr() {
+        var cidr = ipv6().optString("cidr", null);
+        return cidr == null || cidr.isEmpty() ? null : cidr;
+    }
+
+    @Nullable
+    public IPv6Network getIpv6Network() {
+        if (getIpv6Source() != Ipv6Source.STATIC) return null;
+        var cidr = getIpv6Cidr();
+        if (cidr == null) return null;
+        try {
+            return IPv6Network.parse(cidr);
+        } catch (Exception e) {
+            return null;
+        }
+    }
+
+    public boolean hasIpv6() {
+        return getIpv6Source() == Ipv6Source.DHCP_PD || getIpv6Cidr() != null;
+    }
+
+    @Nullable
+    public String getPdUplink() {
+        return ipv6().opt("pd", DataItem.newObject()).optString("uplink", null);
+    }
+
+    @Nullable
+    public String getPdDuid() {
+        return ipv6().opt("pd", DataItem.newObject()).optString("duid", null);
+    }
+
+    public void setPdDuid(@NonNull String duid) {
+        pdSection().set("duid", duid);
+    }
+
+    /**
+     * Persisted routing-table id for bridgedhcp's routed-PD mode; 0 = not
+     * yet allocated. The id is bridgedhcp's crash-cleanup key, so once
+     * allocated it must stay stable for this VLAN across restarts.
+     */
+    public long getPdRouteTable() {
+        return ipv6().opt("pd", DataItem.newObject()).optLong("route_table", 0);
+    }
+
+    public void setPdRouteTable(long table) {
+        pdSection().set("route_table", table);
+    }
+
+    /** The live (mutable) "pd" object of the ipv6 section, created on demand. */
+    @NonNull
+    private DataItem pdSection() {
+        var ipv6 = ipv6();
+        var pd = ipv6.opt("pd", null);
+        if (pd == null || !pd.is(DataItem.Type.OBJECT)) {
+            // set() stores a copy; re-read so callers mutate the stored item
+            ipv6.set("pd", DataItem.newObject());
+            pd = ipv6.get("pd");
+        }
+        return pd;
+    }
+
+    public boolean isIpv6Snat() {
+        return ipv6().optBoolean("snat", false);
+    }
+
+    public boolean isDhcp6Enabled() {
+        return hasIpv6()
+            && ipv6().opt("dhcp", DataItem.newObject()).optBoolean("enabled", false);
+    }
+
+    public long getDhcp6OffsetStart() {
+        return ipv6().opt("dhcp", DataItem.newObject()).optLong("offset_start", 128);
+    }
+
+    public long getDhcp6OffsetEnd() {
+        return ipv6().opt("dhcp", DataItem.newObject()).optLong("offset_end", 192);
+    }
+
+    public boolean isSlaacEnabled() {
+        return hasIpv6()
+            && ipv6().opt("slaac", DataItem.newObject()).optBoolean("enabled", false);
+    }
+
+    @NonNull
+    public List<String> getDnsServers() {
+        return stringList("dns_servers");
+    }
+
+    @NonNull
+    public List<String> getIpv4Secondary() {
+        return stringList("ipv4_secondary");
+    }
+
+    @NonNull
+    public List<String> getIpv6Secondary() {
+        return stringList("ipv6_secondary");
+    }
+
+    @NonNull
+    private List<String> stringList(@NonNull String key) {
+        var out = new ArrayList<String>();
+        var arr = item.opt(key, null);
+        if (arr == null || !arr.is(DataItem.Type.ARRAY)) return out;
+        for (var e : arr.asArray()) {
+            if (!e.is(DataItem.Type.STRING)) continue;
+            var s = e.asString();
+            if (s != null && !s.isEmpty()) out.add(s);
+        }
+        return out;
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/store/vm/VMConfig.java b/app/src/main/java/cn/classfun/droidvm/lib/store/vm/VMConfig.java
index a84d3be55..103d52e4d 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/store/vm/VMConfig.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/store/vm/VMConfig.java
@@ -8,8 +8,10 @@
 import org.json.JSONObject;
 
 import java.util.UUID;
+import java.util.function.Consumer;
 
 import cn.classfun.droidvm.lib.store.base.DataConfig;
+import cn.classfun.droidvm.lib.store.base.DataItem;
 
 public class VMConfig extends DataConfig {
     public VMConfig() {
@@ -23,4 +25,13 @@ public VMConfig(@NonNull JSONObject obj) throws JSONException {
             item.remove("kernel");
         }
     }
+
+    /** Iterates this VM's NIC entries (the "networks" array). */
+    public final void forEachNic(@NonNull Consumer<VMNicConfig> consumer) {
+        var nets = item.opt("networks", null);
+        if (nets == null || !nets.is(DataItem.Type.ARRAY)) return;
+        for (var entry : nets.asArray())
+            if (entry.is(DataItem.Type.OBJECT))
+                consumer.accept(new VMNicConfig(entry));
+    }
 }
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/store/vm/VMNicConfig.java b/app/src/main/java/cn/classfun/droidvm/lib/store/vm/VMNicConfig.java
new file mode 100644
index 000000000..1b3592c05
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/lib/store/vm/VMNicConfig.java
@@ -0,0 +1,322 @@
+package cn.classfun.droidvm.lib.store.vm;
+
+import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
+
+import androidx.annotation.NonNull;
+import androidx.annotation.Nullable;
+
+import org.json.JSONException;
+
+import java.util.ArrayList;
+import java.util.List;
+
+import cn.classfun.droidvm.lib.store.base.DataItem;
+import cn.classfun.droidvm.lib.store.network.BridgeType;
+import cn.classfun.droidvm.lib.store.network.NetworkConfig;
+import cn.classfun.droidvm.lib.store.network.UplinkMode;
+import cn.classfun.droidvm.lib.store.network.VlanConfig;
+import cn.classfun.droidvm.lib.utils.NetUtils;
+
+/**
+ * Wrapper over one entry of a VM config's "networks" array (one NIC).
+ */
+public final class VMNicConfig {
+    public final DataItem item;
+
+    public VMNicConfig(@NonNull DataItem item) {
+        this.item = item;
+    }
+
+    @Nullable
+    public String getNetworkId() {
+        var id = item.optString("network_id", null);
+        return id == null || id.isEmpty() ? null : id;
+    }
+
+    @Nullable
+    public String getTapName() {
+        var tap = item.optString("tap_name", null);
+        return tap == null || tap.isEmpty() ? null : tap;
+    }
+
+    public void setTapName(@NonNull String tapName) {
+        item.set("tap_name", tapName);
+    }
+
+    @Nullable
+    public String getMacAddress() {
+        var mac = item.optString("mac_address", null);
+        return mac == null || mac.isEmpty() ? null : mac;
+    }
+
+    public boolean isMacSecurity() {
+        return item.optBoolean("mac_security", false);
+    }
+
+    public boolean isIsolated() {
+        return item.optBoolean("isolated", false);
+    }
+
+    /** Access VLAN id; null means trunk (all VLANs). */
+    @Nullable
+    public Integer getVlanId() {
+        var v = item.opt("vlan_id", null);
+        if (v == null || !v.is(DataItem.Type.INTEGER)) return null;
+        return (int) v.asInteger();
+    }
+
+    @NonNull
+    private DataItem lease(@NonNull String key) {
+        var s = item.opt(key, null);
+        if (s == null || !s.is(DataItem.Type.OBJECT)) {
+            // set() stores a copy; re-read so callers mutate the stored item
+            item.set(key, DataItem.newObject());
+            s = item.get(key);
+        }
+        return s;
+    }
+
+    public boolean isDhcp4LeaseEnabled() {
+        return lease("dhcp4_lease").optBoolean("enabled", false);
+    }
+
+    public long getDhcp4Offset() {
+        return lease("dhcp4_lease").optLong("offset", 64);
+    }
+
+    public boolean isDhcp6LeaseEnabled() {
+        return lease("dhcp6_lease").optBoolean("enabled", false);
+    }
+
+    public long getDhcp6Offset() {
+        return lease("dhcp6_lease").optLong("offset", 64);
+    }
+
+    @NonNull
+    public List<PortForward> getDhcp4Forwards() {
+        return forwards("dhcp4_lease");
+    }
+
+    @NonNull
+    public List<PortForward> getDhcp6Forwards() {
+        return forwards("dhcp6_lease");
+    }
+
+    @NonNull
+    private List<PortForward> forwards(@NonNull String key) {
+        var out = new ArrayList<PortForward>();
+        var arr = lease(key).opt("forwards", null);
+        if (arr == null || !arr.is(DataItem.Type.ARRAY)) return out;
+        for (var e : arr.asArray()) {
+            if (!e.is(DataItem.Type.OBJECT)) continue;
+            out.add(new PortForward(
+                e.optString("proto", "tcp"),
+                e.optString("host", ""),
+                e.optString("guest", "")
+            ));
+        }
+        return out;
+    }
+
+    /**
+     * The VLAN of this NIC the DHCP services apply to: the pinned access
+     * VLAN, or the untagged domain (VLAN 0) when trunked — either the
+     * implicit trunk (no vlan_id) or the explicit 4095 trunk marker.
+     */
+    @Nullable
+    public VlanConfig resolveDhcpVlan(@NonNull NetworkConfig network) {
+        if (network.getUplinkMode() != UplinkMode.L3) return null;
+        var vlanId = getVlanId();
+        if (vlanId == null || vlanId == 4095) vlanId = 0;
+        return network.findVlan(vlanId);
+    }
+
+    /**
+     * Validates this NIC against its network config. Throws
+     * {@link IllegalArgumentException} on the first violation.
+     */
+    public void validate(@NonNull NetworkConfig network) {
+        var mac = getMacAddress();
+        if (mac != null && !NetUtils.isValidMac(mac))
+            throw new IllegalArgumentException(fmt("Invalid NIC MAC address: %s", mac));
+        if (isMacSecurity() && mac == null)
+            throw new IllegalArgumentException("MAC security requires a configured MAC address");
+        var vlanId = getVlanId();
+        if (vlanId != null) {
+            // Port semantics: 0 = untagged-only, 4095 = trunk marker
+            // (equivalent to no vlan_id), 1..4094 = tagged access.
+            if (vlanId < 0 || vlanId > 4095)
+                throw new IllegalArgumentException(fmt("Invalid NIC VLAN id: %d", vlanId));
+            // An untagged-only port needs per-port VLAN filtering, which a
+            // Linux bridge on stock GKI cannot do — attaching to the main
+            // bridge would actually be a trunk (flooded tagged frames
+            // included). Refuse instead of silently degrading; gvisor's
+            // switchcore can enforce untagged-only, so 0 stays valid there.
+            if (vlanId == 0 && network.getBridgeType() == BridgeType.LINUX)
+                throw new IllegalArgumentException(
+                    "Untagged-only (VLAN 0) ports are not supported on a Linux "
+                        + "bridge; use trunk or a tagged VLAN");
+            // An access VLAN not present in the network config is allowed: it
+            // is created on demand as an L2-only segment when the NIC attaches.
+        }
+        var vlan = resolveDhcpVlan(network);
+        if (isDhcp4LeaseEnabled()) {
+            if (vlan == null || !vlan.isDhcp4Enabled())
+                throw new IllegalArgumentException(
+                    "DHCPv4 static lease requires an L3 network with DHCPv4 enabled"
+                );
+            if (mac == null)
+                throw new IllegalArgumentException("DHCPv4 static lease requires a MAC address");
+            var net4 = vlan.getIpv4Network();
+            if (net4 != null) net4.addressAtOffset(getDhcp4Offset());
+            for (var fwd : getDhcp4Forwards()) {
+                fwd.validate();
+                if (!vlan.isIpv4Snat()) throw new IllegalArgumentException(
+                    "IPv4 port forwards require IPv4 SNAT on the network"
+                );
+            }
+        }
+        if (isDhcp6LeaseEnabled()) {
+            if (vlan == null || !vlan.isDhcp6Enabled())
+                throw new IllegalArgumentException(
+                    "DHCPv6 static lease requires an L3 network with DHCPv6 enabled"
+                );
+            var net6 = vlan.getIpv6Network();
+            if (net6 != null) net6.addressAtOffset(getDhcp6Offset());
+            for (var fwd : getDhcp6Forwards()) {
+                fwd.validate();
+                // snat may be stored true on a Linux bridge but only takes
+                // effect on gVisor, so require the bridge type as well
+                if (!vlan.isIpv6Snat()
+                    || network.getBridgeType() != BridgeType.GVISOR)
+                    throw new IllegalArgumentException(
+                        "IPv6 port forwards require IPv6 SNAT on a gVisor network"
+                    );
+            }
+        }
+    }
+
+    /**
+     * An in-memory copy of this NIC with every option the target network can't
+     * honour stripped out; the saved config is left untouched. A NIC keeps its
+     * L3-only settings (DHCP static lease, port forwards) in the stored config
+     * so they survive being moved back to an L3 network — the GUI just hides
+     * them elsewhere. On an L2 / non-DHCP network those settings are inert, so
+     * for this run we drop them rather than refuse to start. Genuine
+     * misconfigurations are left in place for {@link #validate} to reject.
+     *
+     * @param dropped collects a human-readable note for each option removed
+     */
+    @NonNull
+    public VMNicConfig sanitizedFor(@NonNull NetworkConfig network, @NonNull List<String> dropped) {
+        DataItem copy;
+        try {
+            copy = DataItem.from(item.toJson()); // deep, independent copy
+        } catch (JSONException e) {
+            throw new IllegalStateException("NIC config is not serializable", e);
+        }
+        var sane = new VMNicConfig(copy);
+        var vlan = sane.resolveDhcpVlan(network);
+        // A DHCP static lease (and any forwards riding on it) only means
+        // something on an L3 network that actually serves that DHCP family.
+        if (sane.isDhcp4LeaseEnabled() && (vlan == null || !vlan.isDhcp4Enabled())) {
+            copy.remove("dhcp4_lease");
+            dropped.add("DHCPv4 static lease");
+        } else if (sane.isDhcp4LeaseEnabled() && !sane.getDhcp4Forwards().isEmpty()
+            && !vlan.isIpv4Snat()) {
+            dropForwards(copy, "dhcp4_lease");
+            dropped.add("IPv4 port forwards (network has no IPv4 SNAT)");
+        }
+        if (sane.isDhcp6LeaseEnabled() && (vlan == null || !vlan.isDhcp6Enabled())) {
+            copy.remove("dhcp6_lease");
+            dropped.add("DHCPv6 static lease");
+        } else if (sane.isDhcp6LeaseEnabled() && !sane.getDhcp6Forwards().isEmpty()
+            && (!vlan.isIpv6Snat() || network.getBridgeType() != BridgeType.GVISOR)) {
+            dropForwards(copy, "dhcp6_lease");
+            dropped.add("IPv6 port forwards (require a gVisor network)");
+        }
+        return sane;
+    }
+
+    /** Drops the forwards array from a lease object, keeping the lease itself. */
+    private static void dropForwards(@NonNull DataItem nic, @NonNull String leaseKey) {
+        var lease = nic.opt(leaseKey, null);
+        if (lease != null && lease.is(DataItem.Type.OBJECT)) lease.remove("forwards");
+    }
+
+    /** One "proto host:guest" port forward entry; ports may be N or N-M ranges. */
+    public static final class PortForward {
+        public final String proto;
+        public final String host;
+        public final String guest;
+
+        public PortForward(@NonNull String proto, @NonNull String host, @NonNull String guest) {
+            this.proto = proto;
+            this.host = host;
+            this.guest = guest;
+        }
+
+        public int hostStart() {
+            return rangeStart(host);
+        }
+
+        public int hostEnd() {
+            return rangeEnd(host);
+        }
+
+        public int guestStart() {
+            return rangeStart(guest);
+        }
+
+        public int guestEnd() {
+            return rangeEnd(guest);
+        }
+
+        /** Concrete protocols this entry installs: "any" expands to tcp+udp. */
+        @NonNull
+        public List<String> protocols() {
+            if (proto.equals("any")) return List.of("tcp", "udp");
+            return List.of(proto);
+        }
+
+        public void validate() {
+            if (!proto.equals("tcp") && !proto.equals("udp") && !proto.equals("any"))
+                throw new IllegalArgumentException(fmt("Invalid forward protocol: %s", proto));
+            int hs = parsePort(host, true), he = parsePort(host, false);
+            int gs = parsePort(guest, true), ge = parsePort(guest, false);
+            if (he < hs || ge < gs)
+                throw new IllegalArgumentException(fmt(
+                    "Invalid port range in forward %s -> %s", host, guest
+                ));
+            if (he - hs != ge - gs)
+                throw new IllegalArgumentException(fmt(
+                    "Forward port ranges differ in size: %s -> %s", host, guest
+                ));
+        }
+
+        private static int rangeStart(@NonNull String spec) {
+            return parsePort(spec, true);
+        }
+
+        private static int rangeEnd(@NonNull String spec) {
+            return parsePort(spec, false);
+        }
+
+        private static int parsePort(@NonNull String spec, boolean start) {
+            var s = spec.trim();
+            int dash = s.indexOf('-');
+            String part;
+            if (dash < 0) part = s;
+            else part = start ? s.substring(0, dash) : s.substring(dash + 1);
+            int port;
+            try {
+                port = Integer.parseInt(part.trim());
+            } catch (NumberFormatException e) {
+                throw new IllegalArgumentException(fmt("Invalid port: %s", spec));
+            }
+            if (port < 1 || port > 65535)
+                throw new IllegalArgumentException(fmt("Port out of range: %s", spec));
+            return port;
+        }
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/utils/NetUtils.java b/app/src/main/java/cn/classfun/droidvm/lib/utils/NetUtils.java
index f1d2e7d19..8db1971dd 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/utils/NetUtils.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/utils/NetUtils.java
@@ -228,6 +228,10 @@ public static String generateRandomMac() {
         );
     }
 
+    public static boolean isValidMac(@Nullable String mac) {
+        return mac != null && mac.matches("([0-9A-Fa-f]{2}:){5}[0-9A-Fa-f]{2}");
+    }
+
     @NonNull
     public static String stripScopeId(@NonNull String addr) {
         int i = addr.indexOf('%');
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/main/network/NetworkAdapter.java b/app/src/main/java/cn/classfun/droidvm/ui/main/network/NetworkAdapter.java
index 88630c656..c039e8fed 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/main/network/NetworkAdapter.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/main/network/NetworkAdapter.java
@@ -25,13 +25,25 @@ public int getIconResId() {
     public void onBindViewHolder(@NonNull BaseViewHolder holder, int position) {
         var ctx = holder.itemView.getContext();
         var config = items.get(position);
-        var addrCount = config.item.get("ipv4_addresses").size()
-            + config.item.get("ipv6_addresses").size();
+        String typeLabel = ctx.getString(
+            config.getBridgeType() == cn.classfun.droidvm.lib.store.network.BridgeType.GVISOR
+                ? R.string.network_edit_bridge_type_gvisor
+                : R.string.network_edit_bridge_type_linux);
+        String modeLabel;
+        switch (config.getUplinkMode()) {
+            case L2:
+                modeLabel = ctx.getString(R.string.network_edit_uplink_l2);
+                break;
+            case L3:
+                modeLabel = ctx.getString(R.string.network_edit_uplink_l3);
+                break;
+            default:
+                modeLabel = ctx.getString(R.string.network_edit_uplink_none);
+                break;
+        }
         holder.itemInfo.setVisibility(VISIBLE);
-        holder.itemInfo.setText(ctx.getResources().getQuantityString(
-            R.plurals.network_item_info, addrCount,
-            config.item.optString("bridge_name", ""), addrCount
-        ));
+        holder.itemInfo.setText(ctx.getString(
+            R.string.network_item_subtitle, typeLabel, modeLabel));
         super.onBindViewHolder(holder, position);
     }
 }
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/network/edit/NetworkEditActivity.java b/app/src/main/java/cn/classfun/droidvm/ui/network/edit/NetworkEditActivity.java
index 42745bb5c..2607bbaf8 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/network/edit/NetworkEditActivity.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/network/edit/NetworkEditActivity.java
@@ -4,15 +4,13 @@
 import static android.view.View.VISIBLE;
 import static android.widget.Toast.LENGTH_LONG;
 import static android.widget.Toast.LENGTH_SHORT;
-import static java.util.Objects.requireNonNull;
 import static cn.classfun.droidvm.lib.utils.NetUtils.generateRandomMac;
 import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
 
 import android.os.Bundle;
-import android.text.Editable;
-import android.view.Gravity;
-import android.view.ViewGroup;
-import android.widget.ImageButton;
+import android.os.Handler;
+import android.os.Looper;
+import android.view.LayoutInflater;
 import android.widget.LinearLayout;
 import android.widget.TextView;
 import android.widget.Toast;
@@ -22,81 +20,89 @@
 import androidx.appcompat.app.AppCompatActivity;
 
 import com.google.android.material.appbar.CollapsingToolbarLayout;
+import com.google.android.material.button.MaterialButton;
 import com.google.android.material.floatingactionbutton.FloatingActionButton;
 
 import java.util.ArrayList;
 import java.util.List;
-import java.util.Locale;
 import java.util.Random;
 import java.util.UUID;
 
 import cn.classfun.droidvm.R;
+import cn.classfun.droidvm.lib.daemon.DaemonConnection;
 import cn.classfun.droidvm.lib.network.IPv4Address;
 import cn.classfun.droidvm.lib.network.IPv4Network;
 import cn.classfun.droidvm.lib.network.IPv6Network;
 import cn.classfun.droidvm.lib.store.base.DataItem;
+import cn.classfun.droidvm.daemon.network.backend.UplinkResolver;
+import cn.classfun.droidvm.lib.store.network.BridgeType;
+import cn.classfun.droidvm.lib.store.network.Ipv6Source;
 import cn.classfun.droidvm.lib.store.network.NetworkConfig;
+import cn.classfun.droidvm.lib.store.network.NetworkConfigValidator;
 import cn.classfun.droidvm.lib.store.network.NetworkStore;
+import cn.classfun.droidvm.lib.store.network.UplinkMode;
+import cn.classfun.droidvm.lib.store.network.VlanConfig;
 import cn.classfun.droidvm.lib.ui.BackAskHelper;
-import cn.classfun.droidvm.lib.ui.SimpleTextWatcher;
+import cn.classfun.droidvm.lib.ui.IconItemAdapter;
+import cn.classfun.droidvm.ui.widgets.row.DropdownRowWidget;
 import cn.classfun.droidvm.ui.widgets.row.SwitchRowWidget;
 import cn.classfun.droidvm.ui.widgets.row.TextInputRowWidget;
 
 public final class NetworkEditActivity extends AppCompatActivity {
     public static final String EXTRA_NETWORK_ID = "network_id";
-    private final List<IPv4Network> ipv4Addresses = new ArrayList<>();
-    private final List<IPv6Network> ipv6Addresses = new ArrayList<>();
-    private final List<IPv4Address> dnsServers = new ArrayList<>();
+    private final Handler mainHandler = new Handler(Looper.getMainLooper());
+    private final Random random = new Random();
+    private final List<VlanConfig> vlans = new ArrayList<>();
+    private final List<VlanCardBinder> binders = new ArrayList<>();
+    // parallel uplink picker entries: display label, stored value (logical id
+    // or literal name) and whether that uplink can be enslaved into a bridge
+    private final List<String> uplinkLabels = new ArrayList<>();
+    private final List<String> uplinkValues = new ArrayList<>();
+    private final List<Boolean> uplinkBridgeable = new ArrayList<>();
+    private String selectedUplink = UplinkResolver.ID_WIFI;
     private boolean editMode = false;
     private UUID editNetworkId = null;
+    private String existingBridgeName = null;
     private CollapsingToolbarLayout collapsingToolbar;
-    private TextInputRowWidget inputName, inputBridgeName, inputMac;
-    private SwitchRowWidget swAutoUp, swStp, swNat, swDhcp;
-    private TextInputRowWidget inputIPv4, inputIPv6, inputDns;
-    private LinearLayout layoutIPv4, layoutIPv6, layoutDns, groupDhcp;
-    private TextView tvIPv4Empty, tvIPv6Empty, tvDnsEmpty;
-    private TextInputRowWidget inputDhcpStart, inputDhcpEnd;
+    private TextView tvRunningBanner;
+    private TextInputRowWidget inputName;
+    private SwitchRowWidget swAutoUp, swStp;
+    private DropdownRowWidget ddBridgeType, ddUplinkMode;
+    private DropdownRowWidget ddL2Uplink;
+    private SwitchRowWidget swPseudoBridge;
+    private TextView tvPseudoHint;
+    private LinearLayout groupL2, groupL3;
+    private TextInputRowWidget inputMac;
+    private LinearLayout containerVlans;
+    private TextView tvVlanEmpty;
+    private MaterialButton btnAddVlan;
     private FloatingActionButton fab;
     private NetworkStore store;
-    @SuppressWarnings("unused")
-    private boolean macManuallyEdited = false;
-    @SuppressWarnings("unused")
-    private boolean bridgeManuallyEdited = false;
-    @SuppressWarnings("unused")
-    private boolean ipv4ManuallyEdited = false;
-    @SuppressWarnings("unused")
-    private boolean dhcpStartManuallyEdited = false;
-    @SuppressWarnings("unused")
-    private boolean dhcpEndManuallyEdited = false;
-    @SuppressWarnings("unused")
-    private boolean programmaticChange = false;
-
-    private final Random random = new Random();
+    private String[] bridgeTypeLabels;
+    private String[] uplinkModeLabels;
+    private BridgeType bridgeType = BridgeType.LINUX;
+    private UplinkMode uplinkMode = UplinkMode.L3;
 
     @Override
     protected void onCreate(Bundle savedInstanceState) {
         super.onCreate(savedInstanceState);
         setContentView(R.layout.activity_network_edit);
         collapsingToolbar = findViewById(R.id.collapsing_toolbar);
+        tvRunningBanner = findViewById(R.id.tv_running_banner);
         inputName = findViewById(R.id.input_name);
-        inputBridgeName = findViewById(R.id.input_bridge_name);
-        inputMac = findViewById(R.id.input_mac);
         swAutoUp = findViewById(R.id.sw_auto_up);
         swStp = findViewById(R.id.sw_stp);
-        swNat = findViewById(R.id.sw_nat);
-        swDhcp = findViewById(R.id.sw_dhcp);
-        inputIPv4 = findViewById(R.id.input_ipv4);
-        inputIPv6 = findViewById(R.id.input_ipv6);
-        inputDns = findViewById(R.id.input_dns);
-        layoutIPv4 = findViewById(R.id.layout_ipv4);
-        layoutIPv6 = findViewById(R.id.layout_ipv6);
-        layoutDns = findViewById(R.id.layout_dns);
-        tvIPv4Empty = findViewById(R.id.tv_ipv4_empty);
-        tvIPv6Empty = findViewById(R.id.tv_ipv6_empty);
-        tvDnsEmpty = findViewById(R.id.tv_dns_empty);
-        groupDhcp = findViewById(R.id.group_dhcp);
-        inputDhcpStart = findViewById(R.id.input_dhcp_start);
-        inputDhcpEnd = findViewById(R.id.input_dhcp_end);
+        ddBridgeType = findViewById(R.id.dd_bridge_type);
+        ddUplinkMode = findViewById(R.id.dd_uplink_mode);
+        groupL2 = findViewById(R.id.group_l2);
+        ddL2Uplink = findViewById(R.id.dd_l2_uplink);
+        swPseudoBridge = findViewById(R.id.sw_pseudo_bridge);
+        tvPseudoHint = findViewById(R.id.tv_pseudo_hint);
+        groupL3 = findViewById(R.id.group_l3);
+        inputMac = findViewById(R.id.input_mac);
+        containerVlans = findViewById(R.id.container_vlans);
+        tvVlanEmpty = findViewById(R.id.tv_vlan_empty);
+        btnAddVlan = findViewById(R.id.btn_add_vlan);
         fab = findViewById(R.id.fab_save);
         initialize();
     }
@@ -105,160 +111,303 @@ private void initialize() {
         new BackAskHelper(this);
         store = new NetworkStore();
         store.load(this);
-        inputIPv4.setEndIconOnClickListener(v -> onAddIPv4());
-        inputIPv6.setEndIconOnClickListener(v -> onAddIPv6());
-        inputDns.setEndIconOnClickListener(v -> onAddDns());
-        inputIPv4.addTextChangedListener(new SimpleTextWatcher() {
-            @Override
-            public void onTextChanged(CharSequence s, int start, int before, int count) {
-                inputIPv4.setError(null);
-            }
+        bridgeTypeLabels = new String[]{
+            getString(R.string.network_edit_bridge_type_linux),
+            getString(R.string.network_edit_bridge_type_gvisor),
+        };
+        uplinkModeLabels = new String[]{
+            getString(R.string.network_edit_uplink_l2),
+            getString(R.string.network_edit_uplink_l3),
+        };
+        ddBridgeType.setAdapter(IconItemAdapter.create(
+            this, bridgeTypeLabels, R.drawable.ic_switch));
+        ddBridgeType.setOnItemClickListener((p, v, pos, id) -> {
+            bridgeType = pos == 1 ? BridgeType.GVISOR : BridgeType.LINUX;
+            onBridgeTypeChanged();
         });
-        inputIPv6.addTextChangedListener(new SimpleTextWatcher() {
-            @Override
-            public void onTextChanged(CharSequence s, int start, int before, int count) {
-                inputIPv6.setError(null);
-            }
-        });
-        inputDns.addTextChangedListener(new SimpleTextWatcher() {
-            @Override
-            public void onTextChanged(CharSequence s, int start, int before, int count) {
-                inputDns.setError(null);
-            }
-        });
-        swDhcp.setOnCheckedChangeListener((btn, checked) ->
-            groupDhcp.setVisibility(checked ? VISIBLE : GONE));
+        ddL2Uplink.setOnItemClickListener((p, v, pos, id) -> onUplinkSelected(pos));
+        btnAddVlan.setOnClickListener(v -> onAddVlan());
+        inputMac.setEndIconOnClickListener(v -> inputMac.setText(generateRandomMac()));
         fab.setOnClickListener(v -> onSaveClicked());
-        installManualEditWatchers();
+        updateUplinkModeDropdown();
+        loadUplinks();
         var intent = getIntent();
         if (intent != null && intent.hasExtra(EXTRA_NETWORK_ID)) {
             editMode = true;
             editNetworkId = UUID.fromString(intent.getStringExtra(EXTRA_NETWORK_ID));
             collapsingToolbar.setTitle(getString(R.string.network_edit_title));
             loadExistingConfig();
+            checkRunningState();
         } else {
             collapsingToolbar.setTitle(getString(R.string.network_create_title));
             generateDefaults();
         }
-        buildAddressList(layoutIPv4, tvIPv4Empty, ipv4Addresses, this::updateDhcpFromIPv4);
-        buildAddressList(layoutIPv6, tvIPv6Empty, ipv6Addresses, null);
-        buildAddressList(layoutDns, tvDnsEmpty, dnsServers, null);
+        ddBridgeType.setText(
+            bridgeType == BridgeType.GVISOR ? bridgeTypeLabels[1] : bridgeTypeLabels[0]);
+        applyUplinkMode();
+        rebuildVlanCards();
     }
 
-    private void installManualEditWatchers() {
-        inputMac.addTextChangedListener(new ManualEditWatcher() {
-            @Override
-            protected void onManualEdit() {
-                macManuallyEdited = true;
-                propagateMacToBridge();
-            }
-        });
-        inputBridgeName.addTextChangedListener(new ManualEditWatcher() {
-            @Override
-            protected void onManualEdit() {
-                bridgeManuallyEdited = true;
-            }
-        });
-        inputDhcpStart.addTextChangedListener(new ManualEditWatcher() {
-            @Override
-            protected void onManualEdit() {
-                dhcpStartManuallyEdited = true;
-            }
-        });
-        inputDhcpEnd.addTextChangedListener(new ManualEditWatcher() {
-            @Override
-            protected void onManualEdit() {
-                dhcpEndManuallyEdited = true;
-            }
+    private void updateUplinkModeDropdown() {
+        // L2 bridging is Linux-only; "none" is just L3 with zero VLANs
+        var labels = bridgeType == BridgeType.GVISOR
+            ? new String[]{uplinkModeLabels[1]}
+            : uplinkModeLabels;
+        ddUplinkMode.setAdapter(IconItemAdapter.create(
+            this, labels, R.drawable.ic_web_plus));
+        ddUplinkMode.setOnItemClickListener((p, v, pos, id) -> {
+            uplinkMode = labels[pos].equals(uplinkModeLabels[0])
+                ? UplinkMode.L2 : UplinkMode.L3;
+            applyUplinkMode();
         });
+        ddUplinkMode.setText(labelOfMode(uplinkMode));
     }
 
-    private abstract class ManualEditWatcher extends SimpleTextWatcher {
-        @Override
-        public void afterTextChanged(Editable s) {
-            if (!programmaticChange) onManualEdit();
-        }
-
-        protected abstract void onManualEdit();
+    @NonNull
+    private String labelOfMode(@NonNull UplinkMode mode) {
+        return mode == UplinkMode.L2 ? uplinkModeLabels[0] : uplinkModeLabels[1];
     }
 
-    private void generateDefaults() {
-        var mac = generateRandomMac();
-        setTextProgrammatic(inputMac, mac);
-        setTextProgrammatic(inputBridgeName, bridgeNameFromMac(mac));
-        var ipv4Cidr = generateRandomIPv4();
-        ipv4Addresses.add(ipv4Cidr);
-        addDefaultDnsServers();
-        swDhcp.setChecked(true);
-        updateDhcpFromIPv4();
+    private void onBridgeTypeChanged() {
+        if (bridgeType == BridgeType.GVISOR && uplinkMode == UplinkMode.L2)
+            uplinkMode = UplinkMode.L3;
+        updateUplinkModeDropdown();
+        applyUplinkMode();
+        for (var binder : binders)
+            binder.applyBridgeType(bridgeType);
     }
 
-    private void addDefaultDnsServers() {
-        var a = IPv4Address.parse("8.8.8.8");
-        var b = IPv4Address.parse("1.1.1.1");
-        if (a != null) dnsServers.add(a);
-        if (b != null) dnsServers.add(b);
+    private void applyUplinkMode() {
+        groupL2.setVisibility(uplinkMode == UplinkMode.L2 ? VISIBLE : GONE);
+        groupL3.setVisibility(uplinkMode == UplinkMode.L3 ? VISIBLE : GONE);
+        updatePseudoHint();
     }
 
-    @NonNull
-    private String bridgeNameFromMac(@NonNull String mac) {
-        return fmt("br%s", mac.replace(":", "").toLowerCase());
+    private void loadUplinks() {
+        rebuildUplinks(null);
+        DaemonConnection.getInstance().buildRequest("network_list_uplinks")
+            .onResponse(resp -> {
+                var data = resp.optJSONObject("data");
+                mainHandler.post(() -> {
+                    rebuildUplinks(data);
+                    for (var binder : binders)
+                        binder.applyBridgeType(bridgeType);
+                });
+            })
+            .onUnsuccessful(r -> {
+            })
+            .onError(e -> {
+            })
+            .invoke();
     }
 
-    @NonNull
-    private IPv4Network generateRandomIPv4() {
-        var existing = new ArrayList<IPv4Network>();
-        store.forEach((id, cfg) -> {
-            if (id.equals(editNetworkId)) return;
-            cfg.item.get("ipv4_addresses").forEachArray(a -> {
-                try {
-                    existing.add(IPv4Network.parse(a.asString()));
-                } catch (Exception ignored) {
+    /**
+     * Rebuilds the picker entries: the three logical identifiers (always shown,
+     * with their live-resolved name or "unavailable") followed by the concrete
+     * physical L2 devices. The current selection is preserved.
+     */
+    private void rebuildUplinks(@Nullable org.json.JSONObject data) {
+        uplinkLabels.clear();
+        uplinkValues.clear();
+        uplinkBridgeable.clear();
+        addIdentifier(UplinkResolver.ID_WIFI,
+            getString(R.string.network_edit_uplink_wifi), false, data);
+        addIdentifier(UplinkResolver.ID_ETHERNET,
+            getString(R.string.network_edit_uplink_ethernet), true, data);
+        addIdentifier(UplinkResolver.ID_TETHERING,
+            getString(R.string.network_edit_uplink_tethering), true, data);
+        if (data != null) {
+            var devices = data.optJSONArray("devices");
+            if (devices != null)
+                for (int i = 0; i < devices.length(); i++) {
+                    var obj = devices.optJSONObject(i);
+                    if (obj == null) continue;
+                    var name = obj.optString("name", "");
+                    if (name.isEmpty() || uplinkValues.contains(name)) continue;
+                    uplinkLabels.add(name);
+                    uplinkValues.add(name);
+                    uplinkBridgeable.add(obj.optBoolean("bridgeable", true));
                 }
-            });
-        });
-        for (int attempt = 0; attempt < 200; attempt++) {
-            int b = 180 + random.nextInt(10);  // 180-189
-            int c = random.nextInt(256);       // 0-255
-            var addr = new IPv4Address(10, b, c, 1);
-            var candidate = new IPv4Network(addr, 24);
-            boolean conflicts = false;
-            for (var ex : existing) {
-                if (candidate.overlaps(ex)) {
-                    conflicts = true;
-                    break;
+        }
+        // keep a saved literal device that isn't currently present selectable
+        if (selectedUplink != null && !selectedUplink.isEmpty()
+            && !uplinkValues.contains(selectedUplink)) {
+            uplinkLabels.add(getString(R.string.network_edit_uplink_identifier,
+                selectedUplink, getString(R.string.network_edit_uplink_unavailable)));
+            uplinkValues.add(selectedUplink);
+            uplinkBridgeable.add(true);
+        }
+        updateUplinkDropdown();
+    }
+
+    private void addIdentifier(
+        @NonNull String id, @NonNull String display, boolean bridgeable,
+        @Nullable org.json.JSONObject data
+    ) {
+        String resolved = "";
+        boolean br = bridgeable;
+        if (data != null) {
+            var ids = data.optJSONArray("identifiers");
+            if (ids != null)
+                for (int i = 0; i < ids.length(); i++) {
+                    var obj = ids.optJSONObject(i);
+                    if (obj != null && id.equals(obj.optString("id"))) {
+                        resolved = obj.optString("name", "");
+                        br = obj.optBoolean("bridgeable", bridgeable);
+                        break;
+                    }
                 }
-            }
-            if (!conflicts) return candidate;
         }
-        return new IPv4Network(new IPv4Address(10, 180, 0, 1), 24);
+        var shown = resolved.isEmpty()
+            ? getString(R.string.network_edit_uplink_unavailable) : resolved;
+        uplinkLabels.add(getString(R.string.network_edit_uplink_identifier, display, shown));
+        uplinkValues.add(id);
+        uplinkBridgeable.add(br);
+    }
+
+    private void updateUplinkDropdown() {
+        ddL2Uplink.setAdapter(IconItemAdapter.create(
+            this, uplinkLabels.toArray(new String[0]), R.drawable.ic_ethernet));
+        if (uplinkLabels.isEmpty()) return;
+        int idx = uplinkValues.indexOf(selectedUplink);
+        if (idx < 0) idx = 0;
+        selectedUplink = uplinkValues.get(idx);
+        ddL2Uplink.setText(uplinkLabels.get(idx));
+        applyPseudoLock(uplinkBridgeable.get(idx));
+    }
+
+    private void onUplinkSelected(int pos) {
+        if (pos < 0 || pos >= uplinkValues.size()) return;
+        selectedUplink = uplinkValues.get(pos);
+        boolean bridgeable = uplinkBridgeable.get(pos);
+        // re-evaluate the toggle once on selection: bridgeable defaults on
+        if (bridgeable) swPseudoBridge.setChecked(true);
+        applyPseudoLock(bridgeable);
+    }
+
+    /**
+     * Sets the pseudo-bridge toggle's locked state for an uplink: a
+     * non-bridgeable uplink (Wi-Fi STA / non-ethernet) forces it on and locks
+     * it; a bridgeable one leaves it user-controllable.
+     */
+    private void applyPseudoLock(boolean bridgeable) {
+        if (!bridgeable) swPseudoBridge.setChecked(true);
+        swPseudoBridge.setSwitchEnabled(bridgeable);
+        updatePseudoHint();
     }
 
-    private void updateDhcpFromIPv4() {
-        if (ipv4Addresses.isEmpty()) return;
-        var cidr = ipv4Addresses.get(0);
-        if (cidr == null) return;
-        if (!dhcpStartManuallyEdited) {
-            var start = cidr.dhcpPoolStart();
-            if (start != null) setTextProgrammatic(inputDhcpStart, start.toString());
+    private void updatePseudoHint() {
+        if (uplinkMode != UplinkMode.L2) return;
+        int idx = uplinkValues.indexOf(selectedUplink);
+        boolean bridgeable = idx >= 0 && idx < uplinkBridgeable.size()
+            ? uplinkBridgeable.get(idx) : true;
+        tvPseudoHint.setText(getString(bridgeable
+            ? R.string.network_edit_pseudo_hint_wired
+            : R.string.network_edit_pseudo_hint_wifi));
+    }
+
+    private void generateDefaults() {
+        bridgeType = BridgeType.LINUX;
+        uplinkMode = UplinkMode.L3;
+        ddUplinkMode.setText(labelOfMode(uplinkMode));
+        inputMac.setText(generateRandomMac());
+        vlans.add(newVlan(0));
+    }
+
+    /** A new VLAN entry with paired random networks (empty when exhausted). */
+    @NonNull
+    private VlanConfig newVlan(int vlanId) {
+        var vlan = VlanConfig.createDefault(vlanId);
+        var pair = generatePairedCidrs();
+        if (pair != null) {
+            vlan.ipv4().set("cidr", pair[0]);
+            vlan.ipv6().set("cidr", pair[1]);
         }
-        if (!dhcpEndManuallyEdited) {
-            var end = cidr.dhcpPoolEnd();
-            if (end != null) setTextProgrammatic(inputDhcpEnd, end.toString());
+        var ipv6 = vlan.ipv6();
+        if (bridgeType == BridgeType.GVISOR) {
+            // gVisor has IPv6 SNAT, so the ULA prefix is routable: default on
+            ipv6.set("snat", true);
+        } else {
+            // a Linux bridge has no IPv6 NAT and Android rarely holds a
+            // routed prefix, so serving the ULA via DHCPv6/SLAAC hands VMs
+            // addresses with no connectivity: default to a static ULA CIDR
+            // with serving off, and pre-fill the Wi-Fi PD uplink for when the
+            // user switches the source to DHCP-PD
+            ipv6.set("snat", false);
+            ipv6.set("source", Ipv6Source.STATIC.key());
+            var pd = DataItem.newObject();
+            pd.set("uplink", UplinkResolver.ID_WIFI);
+            ipv6.set("pd", pd);
+            ipv6.get("dhcp").set("enabled", false);
+            ipv6.get("slaac").set("enabled", false);
         }
+        return vlan;
     }
 
-    private void propagateMacToBridge() {
-        if (bridgeManuallyEdited) return;
-        var mac = inputMac.getText().trim();
-        if (mac.matches("([0-9A-Fa-f]{2}:){5}[0-9A-Fa-f]{2}"))
-            setTextProgrammatic(inputBridgeName, bridgeNameFromMac(mac));
+    /**
+     * Picks N in 50-250 so that 192.168.N.1/24 and fd00:N::1/64 are both
+     * free of overlaps with every other network and this network's other
+     * VLANs. Returns null when no N fits.
+     */
+    @Nullable
+    private String[] generatePairedCidrs() {
+        var used4 = new ArrayList<IPv4Network>();
+        var used6 = new ArrayList<IPv6Network>();
+        collectUsedNetworks(used4, used6);
+        for (int attempt = 0; attempt < 400; attempt++) {
+            int n = 50 + random.nextInt(201); // 50-250
+            IPv4Network cand4;
+            IPv6Network cand6;
+            try {
+                cand4 = IPv4Network.parse(fmt("192.168.%d.1/24", n));
+                cand6 = IPv6Network.parse(fmt("fd00:%d::1/64", n));
+            } catch (Exception e) {
+                continue;
+            }
+            boolean conflicts = false;
+            for (var ex : used4)
+                if (cand4.overlaps(ex)) {
+                    conflicts = true;
+                    break;
+                }
+            if (!conflicts) for (var ex : used6)
+                if (cand6.overlaps(ex)) {
+                    conflicts = true;
+                    break;
+                }
+            if (!conflicts) return new String[]{cand4.toString(), cand6.toString()};
+        }
+        return null;
     }
 
-    private void setTextProgrammatic(@NonNull TextInputRowWidget w, @NonNull String text) {
-        programmaticChange = true;
-        w.setText(text);
-        programmaticChange = false;
+    /** Subnets in use by other networks and by this network's VLAN cards. */
+    private void collectUsedNetworks(
+        @NonNull List<IPv4Network> out4, @NonNull List<IPv6Network> out6
+    ) {
+        storeAllBinders();
+        var sources = new ArrayList<VlanConfig>(vlans);
+        store.forEach((id, cfg) -> {
+            if (id.equals(editNetworkId)) return;
+            sources.addAll(cfg.getVlans());
+        });
+        for (var vlan : sources) {
+            var net4 = vlan.getIpv4Network();
+            if (net4 != null) out4.add(net4);
+            for (var cidr : vlan.getIpv4Secondary()) {
+                try {
+                    out4.add(IPv4Network.parse(cidr));
+                } catch (Exception ignored) {
+                }
+            }
+            var net6 = vlan.getIpv6Network();
+            if (net6 != null) out6.add(net6);
+            for (var cidr : vlan.getIpv6Secondary()) {
+                try {
+                    out6.add(IPv6Network.parse(cidr));
+                } catch (Exception ignored) {
+                }
+            }
+        }
     }
 
     private void loadExistingConfig() {
@@ -268,247 +417,135 @@ private void loadExistingConfig() {
             finish();
             return;
         }
-        programmaticChange = true;
         inputName.setText(config.getName());
-        inputBridgeName.setText(config.item.optString("bridge_name", ""));
-        inputMac.setText(config.item.optString("mac_address", ""));
-        programmaticChange = false;
-        swAutoUp.setChecked(config.item.optBoolean("auto_up", false));
-        swStp.setChecked(config.item.optBoolean("stp", false));
-        swNat.setChecked(config.item.optBoolean("nat", false));
-        swDhcp.setChecked(config.item.optBoolean("dhcp_enabled", false));
-        programmaticChange = true;
-        var start = config.item.optString("dhcp_range_start", "");
-        var end = config.item.optString("dhcp_range_end", "");
-        inputDhcpStart.setText(start);
-        inputDhcpEnd.setText(end);
-        programmaticChange = false;
-        ipv4Addresses.clear();
-        parseIPv4Addresses(config, ipv4Addresses);
-        ipv6Addresses.clear();
-        parseIPv6Addresses(config, ipv6Addresses);
-        dnsServers.clear();
-        parseDnsServers(config, dnsServers);
-        if (dnsServers.isEmpty()) addDefaultDnsServers();
-        macManuallyEdited = true;
-        bridgeManuallyEdited = true;
-        ipv4ManuallyEdited = true;
-        dhcpStartManuallyEdited = true;
-        dhcpEndManuallyEdited = true;
+        swAutoUp.setChecked(config.isAutoUp());
+        swStp.setChecked(config.isStp());
+        bridgeType = config.getBridgeType();
+        uplinkMode = config.getUplinkMode();
+        existingBridgeName = config.getBridgeName();
+        ddUplinkMode.setText(labelOfMode(uplinkMode));
+        var l2Uplink = config.getL2Uplink();
+        if (l2Uplink != null && !l2Uplink.isEmpty()) selectedUplink = l2Uplink;
+        swPseudoBridge.setChecked(config.isL2PseudoBridge());
+        rebuildUplinks(null);   // reflect the loaded selection; refreshed by IPC
+        var l3Mac = config.l3().optString("mac_address", "");
+        inputMac.setText(l3Mac == null || l3Mac.isEmpty() ? generateRandomMac() : l3Mac);
+        vlans.clear();
+        for (var vlan : config.getVlans()) {
+            // deep copy so cancel doesn't mutate the store
+            var copy = DataItem.newObject();
+            copy.puts(vlan.item);
+            vlans.add(new VlanConfig(copy));
+        }
     }
 
-    private void onAddIPv4() {
-        var addr = inputIPv4.getText().trim();
-        if (addr.isEmpty()) return;
-        if (!IPv4Network.isValid(addr)) {
-            inputIPv4.setError(getString(R.string.network_edit_error_address_invalid));
-            return;
-        }
-        IPv4Network ip;
-        try {
-            ip = IPv4Network.parse(addr);
-        } catch (Exception ignored) {
-            inputIPv4.setError(getString(R.string.network_edit_error_address_invalid));
-            return;
-        }
-        inputIPv4.setError(null);
-        ipv4Addresses.add(ip);
-        ipv4ManuallyEdited = true;
-        inputIPv4.setText("");
-        buildAddressList(layoutIPv4, tvIPv4Empty, ipv4Addresses, this::updateDhcpFromIPv4);
-        updateDhcpFromIPv4();
+    /** Editing a RUNNING network is not allowed; show a banner and block save. */
+    private void checkRunningState() {
+        DaemonConnection.getInstance().buildRequest("network_status")
+            .put("network_id", editNetworkId.toString())
+            .onResponse(resp -> {
+                var state = resp.optString("state", "");
+                if (state.equalsIgnoreCase("running")
+                    || state.equalsIgnoreCase("starting")) {
+                    mainHandler.post(() -> {
+                        tvRunningBanner.setVisibility(VISIBLE);
+                        fab.setEnabled(false);
+                    });
+                }
+            })
+            .onUnsuccessful(r -> {
+            })
+            .onError(e -> {
+            })
+            .invoke();
     }
 
-    private void onAddIPv6() {
-        var addr = inputIPv6.getText().trim();
-        if (addr.isEmpty()) return;
-        if (!IPv6Network.isValid(addr)) {
-            inputIPv6.setError(getString(R.string.network_edit_error_address_invalid));
-            return;
-        }
-        IPv6Network ip;
-        try {
-            ip = IPv6Network.parse(addr);
-        } catch (Exception ignored) {
-            inputIPv6.setError(getString(R.string.network_edit_error_address_invalid));
-            return;
-        }
-        inputIPv6.setError(null);
-        ipv6Addresses.add(ip);
-        inputIPv6.setText("");
-        buildAddressList(layoutIPv6, tvIPv6Empty, ipv6Addresses, null);
+    private void onAddVlan() {
+        storeAllBinders();
+        // smallest free id in 0, 10, 20, ...
+        var used = new java.util.HashSet<Integer>();
+        for (var vlan : vlans) used.add(vlan.getVlanId());
+        int id = 0;
+        while (used.contains(id) && id < 4090) id += 10;
+        vlans.add(newVlan(id));
+        rebuildVlanCards();
     }
 
-    private void onAddDns() {
-        var addr = inputDns.getText().trim();
-        if (addr.isEmpty()) return;
-        if (!IPv4Address.isValid(addr)) {
-            inputDns.setError(getString(R.string.network_edit_error_dns_invalid));
-            return;
-        }
-        var ip = IPv4Address.parse(addr);
-        if (ip == null) {
-            inputDns.setError(getString(R.string.network_edit_error_dns_invalid));
-            return;
-        }
-        for (var existing : dnsServers) {
-            if (existing.value() == ip.value()) {
-                inputDns.setText("");
-                return;
-            }
+    private void rebuildVlanCards() {
+        storeAllBinders();
+        containerVlans.removeAllViews();
+        binders.clear();
+        tvVlanEmpty.setVisibility(vlans.isEmpty() ? VISIBLE : GONE);
+        var inflater = LayoutInflater.from(this);
+        for (int i = 0; i < vlans.size(); i++) {
+            final int idx = i;
+            var view = inflater.inflate(R.layout.item_network_vlan, containerVlans, false);
+            var binder = new VlanCardBinder(view, uplinkValues);
+            binder.bind(vlans.get(i), bridgeType);
+            binder.delete.setOnClickListener(v -> {
+                vlans.remove(idx);
+                rebuildVlanCards();
+            });
+            binders.add(binder);
+            containerVlans.addView(view);
         }
-        inputDns.setError(null);
-        dnsServers.add(ip);
-        inputDns.setText("");
-        buildAddressList(layoutDns, tvDnsEmpty, dnsServers, null);
     }
 
-    private void buildAddressList(
-        @NonNull LinearLayout container,
-        @NonNull TextView emptyView,
-        @NonNull List<?> list,
-        @Nullable Runnable onRemoved
-    ) {
-        container.removeAllViews();
-        if (list.isEmpty()) {
-            emptyView.setVisibility(VISIBLE);
-        } else {
-            emptyView.setVisibility(GONE);
-            for (int i = 0; i < list.size(); i++) {
-                final int idx = i;
-                var row = new LinearLayout(this);
-                row.setOrientation(LinearLayout.HORIZONTAL);
-                row.setGravity(Gravity.CENTER_VERTICAL);
-                int pad = (int) (4 * getResources().getDisplayMetrics().density);
-                row.setPadding(0, pad, 0, pad);
-                var tv = new TextView(this);
-                tv.setText(list.get(i).toString());
-                tv.setTextSize(15);
-                var lp = new LinearLayout.LayoutParams(0, ViewGroup.LayoutParams.WRAP_CONTENT, 1f);
-                tv.setLayoutParams(lp);
-                row.addView(tv);
-                var btn = new ImageButton(this);
-                btn.setImageResource(R.drawable.ic_delete);
-                btn.setBackground(null);
-                btn.setContentDescription(getString(R.string.network_edit_remove_address));
-                btn.setOnClickListener(v -> {
-                    list.remove(idx);
-                    buildAddressList(container, emptyView, list, onRemoved);
-                    if (onRemoved != null) onRemoved.run();
-                });
-                row.addView(btn);
-                container.addView(row);
-            }
-        }
+    private void storeAllBinders() {
+        for (int i = 0; i < binders.size() && i < vlans.size(); i++)
+            binders.get(i).store(vlans.get(i));
     }
 
     private void onSaveClicked() {
-        inputName.setError(null);
-        inputBridgeName.setError(null);
-        inputMac.setError(null);
-        inputIPv4.setError(null);
-        inputIPv6.setError(null);
-        inputDns.setError(null);
-        inputDhcpStart.setError(null);
-        inputDhcpEnd.setError(null);
-        if (!inputIPv4.getText().trim().isEmpty()) {
-            inputIPv4.setError(getString(R.string.network_edit_error_ipv4_not_added));
-            return;
-        }
-        if (!inputIPv6.getText().trim().isEmpty()) {
-            inputIPv6.setError(getString(R.string.network_edit_error_ipv6_not_added));
-            return;
-        }
-        if (!inputDns.getText().trim().isEmpty()) {
-            inputDns.setError(getString(R.string.network_edit_error_dns_not_added));
-            return;
-        }
-        if (dnsServers.isEmpty()) {
-            inputDns.setError(getString(R.string.network_edit_error_dns_empty));
-            return;
-        }
+        storeAllBinders();
         var name = inputName.getText().trim();
-        var bridgeName = inputBridgeName.getText().trim();
-        var mac = inputMac.getText().trim();
         if (name.isEmpty()) {
             inputName.setError(getString(R.string.network_edit_error_name_empty));
             return;
         }
-        if (bridgeName.isEmpty()) {
-            inputBridgeName.setError(getString(R.string.network_edit_error_bridge_empty));
-            return;
-        }
-        if (!bridgeName.matches("[a-zA-Z][a-zA-Z0-9_-]*")) {
-            inputBridgeName.setError(getString(R.string.network_edit_error_bridge_invalid));
-            return;
-        }
-        if (!mac.isEmpty() && !mac.matches("([0-9A-Fa-f]{2}:){5}[0-9A-Fa-f]{2}")) {
-            inputMac.setError(getString(R.string.network_edit_error_mac_invalid));
-            return;
-        }
+        inputName.setError(null);
         if (!store.isNameUnique(name, editNetworkId)) {
             inputName.setError(getString(R.string.network_edit_error_name_duplicate));
             return;
         }
-        if (!isBridgeUnique(bridgeName)) {
-            inputBridgeName.setError(getString(R.string.network_edit_error_bridge_duplicate));
-            return;
-        }
-        if (!mac.isEmpty() && !isMacUnique(mac)) {
-            inputMac.setError(getString(R.string.network_edit_error_mac_duplicate));
-            return;
-        }
-        var ipv4Conflict = checkIPv4Overlap();
-        if (ipv4Conflict != null) {
-            Toast.makeText(this, ipv4Conflict, LENGTH_LONG).show();
-            return;
-        }
-        var ipv6Conflict = checkIPv6Overlap();
-        if (ipv6Conflict != null) {
-            Toast.makeText(this, ipv6Conflict, LENGTH_LONG).show();
-            return;
-        }
-        if (swDhcp.isChecked()) {
-            var dhcpStart = inputDhcpStart.getText().trim();
-            var dhcpEnd = inputDhcpEnd.getText().trim();
-            if (!dhcpStart.isEmpty() && !IPv4Address.isValid(dhcpStart)) {
-                inputDhcpStart.setError(getString(R.string.network_edit_error_dhcp_start_invalid));
-                return;
-            }
-            if (!dhcpEnd.isEmpty() && !IPv4Address.isValid(dhcpEnd)) {
-                inputDhcpEnd.setError(getString(R.string.network_edit_error_dhcp_end_invalid));
-                return;
-            }
-            if (!dhcpStart.isEmpty() && !dhcpEnd.isEmpty()) {
-                long start = requireNonNull(IPv4Address.parse(dhcpStart)).value();
-                long end = requireNonNull(IPv4Address.parse(dhcpEnd)).value();
-                if (start >= end) {
-                    inputDhcpStart.setError(getString(R.string.network_edit_error_dhcp_invalid));
-                    return;
-                }
-            }
-        }
         var config = new NetworkConfig();
         if (editMode && editNetworkId != null)
             config.setId(editNetworkId);
         config.setName(name);
-        config.item.set("bridge_name", bridgeName);
-        config.item.set("mac_address", mac);
+        config.setBridgeName(existingBridgeName != null
+            ? existingBridgeName
+            : fmt("br%s", config.getId().toString().substring(0, 8).replace("-", "")));
         config.item.set("auto_up", swAutoUp.isChecked());
         config.item.set("stp", swStp.isChecked());
-        config.item.set("nat", swNat.isChecked());
-        config.item.set("dhcp_enabled", swDhcp.isChecked());
-        setIPv4Addresses(config, ipv4Addresses);
-        setIPv6Addresses(config, ipv6Addresses);
-        setDnsServers(config, dnsServers);
-        config.item.set("dhcp_range_start", inputDhcpStart.getText().trim());
-        config.item.set("dhcp_range_end", inputDhcpEnd.getText().trim());
+        config.setBridgeType(bridgeType);
+        config.setUplinkMode(uplinkMode);
+        if (uplinkMode == UplinkMode.L2) {
+            config.l2().set("uplink", selectedUplink);
+            config.l2().set("pseudo_bridge", swPseudoBridge.isChecked());
+        } else {
+            config.l3().set("mac_address", inputMac.getText().trim());
+            var arr = DataItem.newArray();
+            for (var vlan : vlans) arr.append(vlan.item);
+            config.l3().set("vlans", arr);
+        }
+        try {
+            NetworkConfigValidator.validate(config);
+        } catch (IllegalArgumentException e) {
+            Toast.makeText(this, e.getMessage(), LENGTH_LONG).show();
+            return;
+        }
+        var overlap = checkOverlaps(config);
+        if (overlap != null) {
+            Toast.makeText(this, overlap, LENGTH_LONG).show();
+            return;
+        }
         if (editMode) {
             store.update(config);
         } else {
             store.add(config);
         }
         store.save(this);
+        syncToDaemon(config);
         Toast.makeText(this,
             editMode ? getString(R.string.network_edit_saved, name) :
                 getString(R.string.network_create_success, name),
@@ -516,118 +553,86 @@ private void onSaveClicked() {
         finish();
     }
 
-    private boolean isBridgeUnique(@NonNull String bridge) {
-        final boolean[] unique = {true};
-        store.forEach((id, cfg) -> {
-            if (id.equals(editNetworkId)) return;
-            if (bridge.equals(cfg.item.optString("bridge_name", ""))) unique[0] = false;
-        });
-        return unique[0];
-    }
-
-    private boolean isMacUnique(@NonNull String mac) {
-        final boolean[] unique = {true};
-        var macLower = mac.toLowerCase(Locale.ROOT);
-        store.forEach((id, cfg) -> {
-            if (id.equals(editNetworkId)) return;
-            if (macLower.equals(cfg.item.optString("mac_address", "").toLowerCase(Locale.ROOT)))
-                unique[0] = false;
-        });
-        return unique[0];
-    }
-
-    @Nullable
-    private String checkIPv4Overlap() {
-        for (var myCidr : ipv4Addresses) {
-            var result = new String[1];
-            store.forEach((id, cfg) -> {
-                if (result[0] != null) return;
-                if (id.equals(editNetworkId)) return;
-                var others = new ArrayList<IPv4Network>();
-                parseIPv4Addresses(cfg, others);
-                for (var other : others) {
-                    if (!myCidr.overlaps(other)) continue;
-                    result[0] = getString(
-                        R.string.network_edit_error_ipv4_overlap,
-                        myCidr.toString(), cfg.getName(), other
-                    );
-                    return;
-                }
-            });
-            if (result[0] != null) return result[0];
-        }
-        return null;
+    /** Push the modified config to the daemon if it already knows the network. */
+    private void syncToDaemon(@NonNull NetworkConfig config) {
+        var conn = DaemonConnection.getInstance();
+        conn.buildRequest("network_exists")
+            .put("network_id", config.getId())
+            .onResponse(resp -> {
+                if (!resp.optBoolean("exists", false)) return;
+                conn.buildRequest("network_modify")
+                    .put("config", config)
+                    .onUnsuccessful(r -> {
+                    })
+                    .onError(e -> {
+                    })
+                    .invoke();
+            })
+            .onUnsuccessful(r -> {
+            })
+            .onError(e -> {
+            })
+            .invoke();
     }
 
     @Nullable
-    private String checkIPv6Overlap() {
-        for (var myCidr : ipv6Addresses) {
-            var result = new String[1];
-            store.forEach((id, cfg) -> {
-                if (result[0] != null) return;
-                if (id.equals(editNetworkId)) return;
-                var others = new ArrayList<IPv6Network>();
-                parseIPv6Addresses(cfg, others);
-                for (var other : others) {
-                    if (!myCidr.overlaps(other)) continue;
-                    result[0] = getString(
-                        R.string.network_edit_error_ipv6_overlap,
-                        myCidr.toString(), cfg.getName(), other
-                    );
-                    return;
+    private String checkOverlaps(@NonNull NetworkConfig config) {
+        var myV4 = new ArrayList<IPv4Network>();
+        var myV6 = new ArrayList<IPv6Network>();
+        for (var vlan : config.getVlans()) {
+            var net4 = vlan.getIpv4Network();
+            if (net4 != null) myV4.add(net4);
+            for (var cidr : vlan.getIpv4Secondary()) {
+                try {
+                    myV4.add(IPv4Network.parse(cidr));
+                } catch (Exception ignored) {
                 }
-            });
-            if (result[0] != null) return result[0];
-        }
-        return null;
-    }
-
-    private static void parseIPv4Addresses(@NonNull NetworkConfig cfg, @NonNull List<IPv4Network> out) {
-        cfg.item.get("ipv4_addresses").forEachArray(a -> {
-            try {
-                out.add(IPv4Network.parse(a.asString()));
-            } catch (Exception ignored) {
             }
-        });
-    }
-
-    private static void parseIPv6Addresses(@NonNull NetworkConfig cfg, @NonNull List<IPv6Network> out) {
-        cfg.item.get("ipv6_addresses").forEachArray(a -> {
-            try {
-                out.add(IPv6Network.parse(a.asString()));
-            } catch (Exception ignored) {
+            var net6 = vlan.getIpv6Network();
+            if (net6 != null) myV6.add(net6);
+            for (var cidr : vlan.getIpv6Secondary()) {
+                try {
+                    myV6.add(IPv6Network.parse(cidr));
+                } catch (Exception ignored) {
+                }
             }
-        });
-    }
-
-    private static void parseDnsServers(@NonNull NetworkConfig cfg, @NonNull List<IPv4Address> out) {
-        cfg.item.get("dns_servers").forEachArray(a -> {
-            try {
-                var ip = IPv4Address.parse(a.asString());
-                if (ip != null) out.add(ip);
-            } catch (Exception ignored) {
+        }
+        // overlaps within this network
+        for (int i = 0; i < myV4.size(); i++)
+            for (int j = i + 1; j < myV4.size(); j++)
+                if (myV4.get(i).overlaps(myV4.get(j)))
+                    return getString(R.string.network_edit_error_self_overlap,
+                        myV4.get(i).toString(), myV4.get(j).toString());
+        for (int i = 0; i < myV6.size(); i++)
+            for (int j = i + 1; j < myV6.size(); j++)
+                if (myV6.get(i).overlaps(myV6.get(j)))
+                    return getString(R.string.network_edit_error_self_overlap,
+                        myV6.get(i).toString(), myV6.get(j).toString());
+        // overlaps against other networks
+        var result = new String[1];
+        store.forEach((id, other) -> {
+            if (result[0] != null || id.equals(editNetworkId)) return;
+            for (var vlan : other.getVlans()) {
+                var otherNet = vlan.getIpv4Network();
+                if (otherNet != null) {
+                    for (var mine : myV4) {
+                        if (!mine.overlaps(otherNet)) continue;
+                        result[0] = getString(R.string.network_edit_error_ipv4_overlap,
+                            mine.toString(), other.getName(), otherNet);
+                        return;
+                    }
+                }
+                var otherNet6 = vlan.getIpv6Network();
+                if (otherNet6 != null) {
+                    for (var mine : myV6) {
+                        if (!mine.overlaps(otherNet6)) continue;
+                        result[0] = getString(R.string.network_edit_error_ipv6_overlap,
+                            mine.toString(), other.getName(), otherNet6);
+                        return;
+                    }
+                }
             }
         });
-    }
-
-    private static void setIPv4Addresses(@NonNull NetworkConfig cfg, @NonNull List<IPv4Network> addresses) {
-        var arr = DataItem.newArray();
-        for (var addr : addresses)
-            arr.append(DataItem.newString(addr.toString()));
-        cfg.item.set("ipv4_addresses", arr);
-    }
-
-    private static void setIPv6Addresses(@NonNull NetworkConfig cfg, @NonNull List<IPv6Network> addresses) {
-        var arr = DataItem.newArray();
-        for (var addr : addresses)
-            arr.append(DataItem.newString(addr.toString()));
-        cfg.item.set("ipv6_addresses", arr);
-    }
-
-    private static void setDnsServers(@NonNull NetworkConfig cfg, @NonNull List<IPv4Address> dns) {
-        var arr = DataItem.newArray();
-        for (var ip : dns)
-            arr.append(DataItem.newString(ip.toString()));
-        cfg.item.set("dns_servers", arr);
+        return result[0];
     }
 }
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/network/edit/VlanCardBinder.java b/app/src/main/java/cn/classfun/droidvm/ui/network/edit/VlanCardBinder.java
new file mode 100644
index 000000000..f134f8048
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/ui/network/edit/VlanCardBinder.java
@@ -0,0 +1,237 @@
+package cn.classfun.droidvm.ui.network.edit;
+
+import static android.view.View.GONE;
+import static android.view.View.VISIBLE;
+import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
+
+import android.view.View;
+import android.widget.ArrayAdapter;
+import android.widget.AutoCompleteTextView;
+import android.widget.ImageButton;
+import android.widget.TextView;
+
+import androidx.annotation.NonNull;
+
+import com.google.android.material.materialswitch.MaterialSwitch;
+import com.google.android.material.textfield.TextInputEditText;
+
+import java.util.ArrayList;
+import java.util.List;
+
+import cn.classfun.droidvm.R;
+import cn.classfun.droidvm.daemon.network.backend.UplinkResolver;
+import cn.classfun.droidvm.lib.store.base.DataItem;
+import cn.classfun.droidvm.lib.store.network.BridgeType;
+import cn.classfun.droidvm.lib.store.network.Ipv6Source;
+import cn.classfun.droidvm.lib.store.network.VlanConfig;
+
+/**
+ * Binds one VLAN card view to a VlanConfig: populates the inputs from
+ * the config and reads them back into it on save.
+ */
+final class VlanCardBinder {
+    final View view;
+    private final TextView title;
+    private final TextInputEditText vlanId;
+    final ImageButton delete;
+    private final TextInputEditText v4Cidr;
+    private final MaterialSwitch v4Snat;
+    private final MaterialSwitch v4Dhcp;
+    private final View groupV4Dhcp;
+    private final TextInputEditText v4OffsetStart;
+    private final TextInputEditText v4OffsetEnd;
+    private final AutoCompleteTextView v6Source;
+    private final View tilV6Cidr;
+    private final TextInputEditText v6Cidr;
+    private final View groupV6Pd;
+    private final AutoCompleteTextView pdUplink;
+    private final TextInputEditText pdDuid;
+    private final MaterialSwitch v6Snat;
+    private final MaterialSwitch v6Dhcp;
+    private final View groupV6Dhcp;
+    private final TextInputEditText v6OffsetStart;
+    private final TextInputEditText v6OffsetEnd;
+    private final MaterialSwitch v6Slaac;
+    private final View tilV4Secondary;
+    private final TextInputEditText v4Secondary;
+    private final View tilV6Secondary;
+    private final TextInputEditText v6Secondary;
+    private final TextInputEditText dns;
+    private final String[] sourceLabels;
+
+    VlanCardBinder(@NonNull View view, @NonNull List<String> uplinkNames) {
+        this.view = view;
+        title = view.findViewById(R.id.tv_vlan_title);
+        vlanId = view.findViewById(R.id.et_vlan_id);
+        delete = view.findViewById(R.id.btn_vlan_delete);
+        v4Cidr = view.findViewById(R.id.et_v4_cidr);
+        v4Snat = view.findViewById(R.id.sw_v4_snat);
+        v4Dhcp = view.findViewById(R.id.sw_v4_dhcp);
+        groupV4Dhcp = view.findViewById(R.id.group_v4_dhcp);
+        v4OffsetStart = view.findViewById(R.id.et_v4_offset_start);
+        v4OffsetEnd = view.findViewById(R.id.et_v4_offset_end);
+        v6Source = view.findViewById(R.id.dd_v6_source);
+        tilV6Cidr = view.findViewById(R.id.til_v6_cidr);
+        v6Cidr = view.findViewById(R.id.et_v6_cidr);
+        groupV6Pd = view.findViewById(R.id.group_v6_pd);
+        pdUplink = view.findViewById(R.id.dd_pd_uplink);
+        pdDuid = view.findViewById(R.id.et_pd_duid);
+        v6Snat = view.findViewById(R.id.sw_v6_snat);
+        v6Dhcp = view.findViewById(R.id.sw_v6_dhcp);
+        groupV6Dhcp = view.findViewById(R.id.group_v6_dhcp);
+        v6OffsetStart = view.findViewById(R.id.et_v6_offset_start);
+        v6OffsetEnd = view.findViewById(R.id.et_v6_offset_end);
+        v6Slaac = view.findViewById(R.id.sw_v6_slaac);
+        tilV4Secondary = view.findViewById(R.id.til_v4_secondary);
+        v4Secondary = view.findViewById(R.id.et_v4_secondary);
+        tilV6Secondary = view.findViewById(R.id.til_v6_secondary);
+        v6Secondary = view.findViewById(R.id.et_v6_secondary);
+        dns = view.findViewById(R.id.et_dns);
+        var ctx = view.getContext();
+        sourceLabels = new String[]{
+            ctx.getString(R.string.network_edit_vlan_v6_static),
+            ctx.getString(R.string.network_edit_vlan_v6_pd),
+        };
+        v6Source.setAdapter(new ArrayAdapter<>(
+            ctx, android.R.layout.simple_list_item_1, sourceLabels));
+        v6Source.setOnItemClickListener((p, v, pos, id) -> updateV6SourceViews());
+        pdUplink.setAdapter(new ArrayAdapter<>(
+            ctx, android.R.layout.simple_list_item_1, uplinkNames));
+        v4Dhcp.setOnCheckedChangeListener((b, checked) ->
+            groupV4Dhcp.setVisibility(checked ? VISIBLE : GONE));
+        v6Dhcp.setOnCheckedChangeListener((b, checked) ->
+            groupV6Dhcp.setVisibility(checked ? VISIBLE : GONE));
+    }
+
+    void bind(@NonNull VlanConfig vlan, @NonNull BridgeType type) {
+        var ctx = view.getContext();
+        int id = vlan.getVlanId();
+        title.setText(id == 0
+            ? ctx.getString(R.string.network_edit_vlan_untagged)
+            : ctx.getString(R.string.network_edit_vlan_title));
+        vlanId.setText(String.valueOf(id));
+        var net4 = vlan.getIpv4Cidr();
+        v4Cidr.setText(net4 != null ? net4 : "");
+        v4Snat.setChecked(vlan.isIpv4Snat());
+        v4Dhcp.setChecked(
+            vlan.ipv4().opt("dhcp", DataItem.newObject()).optBoolean("enabled", false));
+        groupV4Dhcp.setVisibility(v4Dhcp.isChecked() ? VISIBLE : GONE);
+        v4OffsetStart.setText(String.valueOf(vlan.getDhcp4OffsetStart()));
+        v4OffsetEnd.setText(String.valueOf(vlan.getDhcp4OffsetEnd()));
+        var source = vlan.getIpv6Source();
+        v6Source.setText(
+            source == Ipv6Source.DHCP_PD ? sourceLabels[1] : sourceLabels[0], false);
+        var cidr6 = vlan.getIpv6Cidr();
+        v6Cidr.setText(cidr6 != null ? cidr6 : "");
+        var uplink = vlan.getPdUplink();
+        pdUplink.setText(uplink == null || uplink.isEmpty()
+            ? UplinkResolver.ID_WIFI : uplink, false);
+        var duid = vlan.getPdDuid();
+        pdDuid.setText(duid != null ? duid : "");
+        v6Snat.setChecked(vlan.isIpv6Snat());
+        v6Dhcp.setChecked(
+            vlan.ipv6().opt("dhcp", DataItem.newObject()).optBoolean("enabled", false));
+        groupV6Dhcp.setVisibility(v6Dhcp.isChecked() ? VISIBLE : GONE);
+        v6OffsetStart.setText(String.valueOf(vlan.getDhcp6OffsetStart()));
+        v6OffsetEnd.setText(String.valueOf(vlan.getDhcp6OffsetEnd()));
+        v6Slaac.setChecked(
+            vlan.ipv6().opt("slaac", DataItem.newObject()).optBoolean("enabled", false));
+        v4Secondary.setText(String.join(", ", vlan.getIpv4Secondary()));
+        v6Secondary.setText(String.join(", ", vlan.getIpv6Secondary()));
+        dns.setText(String.join(", ", vlan.getDnsServers()));
+        applyBridgeType(type);
+        updateV6SourceViews();
+    }
+
+    /** gVisor: no DHCP-PD, no secondary networks, IPv6 SNAT allowed. */
+    void applyBridgeType(@NonNull BridgeType type) {
+        boolean gvisor = type == BridgeType.GVISOR;
+        // a Linux bridge can't do IPv6 SNAT, but keep the stored value and
+        // only gray the switch out, so flipping to Linux and back to gVisor
+        // doesn't silently lose an enabled SNAT
+        v6Snat.setEnabled(gvisor);
+        tilV4Secondary.setVisibility(gvisor ? GONE : VISIBLE);
+        tilV6Secondary.setVisibility(gvisor ? GONE : VISIBLE);
+        if (gvisor && isPdSelected()) v6Source.setText(sourceLabels[0], false);
+        var ctx = view.getContext();
+        var labels = gvisor
+            ? new String[]{sourceLabels[0]}
+            : sourceLabels;
+        v6Source.setAdapter(new ArrayAdapter<>(
+            ctx, android.R.layout.simple_list_item_1, labels));
+        updateV6SourceViews();
+    }
+
+    private boolean isPdSelected() {
+        return v6Source.getText().toString().equals(sourceLabels[1]);
+    }
+
+    private void updateV6SourceViews() {
+        boolean pd = isPdSelected();
+        tilV6Cidr.setVisibility(pd ? GONE : VISIBLE);
+        groupV6Pd.setVisibility(pd ? VISIBLE : GONE);
+    }
+
+    /** Reads the views back into the VlanConfig item. */
+    void store(@NonNull VlanConfig vlan) {
+        vlan.item.set("vlan_id", parseLong(textOf(vlanId), 0));
+        var ipv4 = vlan.ipv4();
+        ipv4.set("cidr", textOf(v4Cidr));
+        ipv4.set("snat", v4Snat.isChecked());
+        var dhcp4 = DataItem.newObject();
+        dhcp4.set("enabled", v4Dhcp.isChecked());
+        dhcp4.set("offset_start", parseLong(textOf(v4OffsetStart), 128));
+        dhcp4.set("offset_end", parseLong(textOf(v4OffsetEnd), 192));
+        ipv4.set("dhcp", dhcp4);
+        var ipv6 = vlan.ipv6();
+        ipv6.set("source",
+            (isPdSelected() ? Ipv6Source.DHCP_PD : Ipv6Source.STATIC).key());
+        ipv6.set("cidr", textOf(v6Cidr));
+        var pd = DataItem.newObject();
+        pd.set("uplink", pdUplink.getText().toString().trim());
+        pd.set("duid", textOf(pdDuid));
+        ipv6.set("pd", pd);
+        ipv6.set("snat", v6Snat.isChecked());
+        var dhcp6 = DataItem.newObject();
+        dhcp6.set("enabled", v6Dhcp.isChecked());
+        dhcp6.set("offset_start", parseLong(textOf(v6OffsetStart), 128));
+        dhcp6.set("offset_end", parseLong(textOf(v6OffsetEnd), 192));
+        ipv6.set("dhcp", dhcp6);
+        var slaac = DataItem.newObject();
+        slaac.set("enabled", v6Slaac.isChecked());
+        ipv6.set("slaac", slaac);
+        vlan.item.set("ipv4_secondary", splitList(textOf(v4Secondary)));
+        vlan.item.set("ipv6_secondary", splitList(textOf(v6Secondary)));
+        vlan.item.set("dns_servers", splitList(textOf(dns)));
+    }
+
+    @NonNull
+    private static String textOf(@NonNull TextInputEditText et) {
+        var text = et.getText();
+        return text == null ? "" : text.toString().trim();
+    }
+
+    private static long parseLong(@NonNull String s, long def) {
+        try {
+            return Long.parseLong(s);
+        } catch (NumberFormatException e) {
+            return def;
+        }
+    }
+
+    @NonNull
+    private static DataItem splitList(@NonNull String text) {
+        var arr = DataItem.newArray();
+        for (var part : text.split("[,\\s]+")) {
+            var trimmed = part.trim();
+            if (!trimmed.isEmpty()) arr.append(new DataItem(trimmed));
+        }
+        return arr;
+    }
+
+    @SuppressWarnings("unused")
+    @NonNull
+    static String describe(int vlanId) {
+        return vlanId == 0 ? "untagged" : fmt("VLAN %d", vlanId);
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/network/info/NetworkInfoActivity.java b/app/src/main/java/cn/classfun/droidvm/ui/network/info/NetworkInfoActivity.java
index eabba7d74..77ef9616f 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/network/info/NetworkInfoActivity.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/network/info/NetworkInfoActivity.java
@@ -38,6 +38,7 @@
 import com.google.android.material.tabs.TabLayout;
 
 import org.json.JSONArray;
+import org.json.JSONObject;
 
 import java.text.DateFormat;
 import java.text.SimpleDateFormat;
@@ -49,10 +50,12 @@
 
 import cn.classfun.droidvm.R;
 import cn.classfun.droidvm.lib.daemon.DaemonConnection;
-import cn.classfun.droidvm.lib.network.IPv4Address;
+import cn.classfun.droidvm.lib.store.network.BridgeType;
+import cn.classfun.droidvm.lib.store.network.Ipv6Source;
 import cn.classfun.droidvm.lib.store.network.NetworkConfig;
 import cn.classfun.droidvm.lib.store.network.NetworkState;
 import cn.classfun.droidvm.lib.store.network.NetworkStore;
+import cn.classfun.droidvm.lib.store.network.UplinkMode;
 import cn.classfun.droidvm.lib.ui.SwipeableTabActivity;
 import cn.classfun.droidvm.lib.ui.UIContext;
 import cn.classfun.droidvm.ui.network.NetworkActions;
@@ -81,9 +84,15 @@ public final class NetworkInfoActivity extends SwipeableTabActivity {
     private MaterialButton btnStartStop, btnEdit, btnDelete;
     private MaterialToolbar toolbar;
     private JSONArray liveAddresses = new JSONArray();
+    private JSONArray addressEntries = new JSONArray();
+    private boolean hasAddressEntries = false;
+    private JSONArray pdStatus = new JSONArray();
     private JSONArray liveInterfaces = new JSONArray();
     private JSONArray neighbors = new JSONArray();
     private JSONArray dhcpLeases = new JSONArray();
+    private JSONObject infoData = new JSONObject();
+    /** Signature of the last data rendered into the tabs; skips no-op rebuilds. */
+    private String lastRenderedSig = null;
 
     @Override
     protected void onCreate(@Nullable Bundle savedInstanceState) {
@@ -170,7 +179,7 @@ private void populateInfo() {
     }
 
     private void setupTabs() {
-        hasDhcp = config.item.optBoolean("dhcp_enabled", false);
+        hasDhcp = hasAnyDhcp();
         int count = hasDhcp ? 5 : 4;
         tabContainer.removeAllViews();
         tabLayout.clearOnTabSelectedListeners();
@@ -218,7 +227,7 @@ private List<String> getTabTitles() {
         titles.add(getString(R.string.network_info_tab_basic));
         titles.add(getString(R.string.network_info_tab_addresses));
         titles.add(getString(R.string.network_info_tab_ports));
-        if (config != null && config.item.optBoolean("dhcp_enabled", false))
+        if (hasAnyDhcp())
             titles.add(getString(R.string.network_info_tab_dhcp));
         titles.add(getString(R.string.network_info_tab_neighbors));
         return titles;
@@ -260,9 +269,15 @@ private void syncState() {
             mainHandler.post(() -> {
                 if (isFinishing()) return;
                 if (data != null) {
+                    infoData = data;
                     currentState = optEnum(data, "state", NetworkState.STOPPED);
                     liveAddresses = data.optJSONArray("live_addresses");
                     if (liveAddresses == null) liveAddresses = new JSONArray();
+                    addressEntries = data.optJSONArray("address_entries");
+                    hasAddressEntries = addressEntries != null;
+                    if (addressEntries == null) addressEntries = new JSONArray();
+                    pdStatus = data.optJSONArray("pd");
+                    if (pdStatus == null) pdStatus = new JSONArray();
                     liveInterfaces = data.optJSONArray("live_interfaces");
                     if (liveInterfaces == null) liveInterfaces = new JSONArray();
                     neighbors = data.optJSONArray("neighbors");
@@ -271,7 +286,15 @@ private void syncState() {
                     if (dhcpLeases == null) dhcpLeases = new JSONArray();
                 }
                 updateStateUI();
-                refreshTabContents();
+                // Only rebuild the tab views when the data actually changed;
+                // re-inflating every 3s poll made the contents visibly flicker.
+                if (data != null) {
+                    var sig = data.toString();
+                    if (!sig.equals(lastRenderedSig)) {
+                        lastRenderedSig = sig;
+                        refreshTabContents();
+                    }
+                }
             });
         };
         DaemonConnection.getInstance()
@@ -402,6 +425,52 @@ private String strStatus(boolean stat) {
             getString(R.string.network_info_disabled);
     }
 
+    /** A clickable helper-tool row (pbridge/gvswitch/bridgedhcp) opening its log. */
+    private void addToolRow(@NonNull LinearLayout container, @NonNull String key, boolean running) {
+        int iconRes;
+        String label;
+        switch (key) {
+            case "pbridge":
+                iconRes = R.drawable.ic_connection;
+                label = getString(R.string.network_info_pbridge);
+                break;
+            case "gvswitch":
+                iconRes = R.drawable.ic_switch;
+                label = getString(R.string.network_info_gvswitch);
+                break;
+            case "bridgedhcp":
+                iconRes = R.drawable.ic_router;
+                label = getString(R.string.network_info_bridgedhcp);
+                break;
+            default:
+                iconRes = R.drawable.ic_router;
+                label = key;
+                break;
+        }
+        var view = LayoutInflater.from(this)
+            .inflate(R.layout.item_network_entry, container, false);
+        ((ImageView) view.findViewById(R.id.iv_icon)).setImageResource(iconRes);
+        ((TextView) view.findViewById(R.id.tv_line1)).setText(label);
+        var line2 = (TextView) view.findViewById(R.id.tv_line2);
+        line2.setText(fmt("%s · %s",
+            getString(running ? R.string.network_info_tool_running
+                              : R.string.network_info_tool_stopped),
+            getString(R.string.network_info_tool_view_log)));
+        line2.setVisibility(VISIBLE);
+        var ta = getTheme().obtainStyledAttributes(
+            new int[]{android.R.attr.selectableItemBackground});
+        view.setBackgroundResource(ta.getResourceId(0, 0));
+        ta.recycle();
+        view.setOnClickListener(v -> {
+            var intent = new Intent(this, NetworkToolLogActivity.class);
+            intent.putExtra("network_id", networkId.toString());
+            intent.putExtra("tool", key);
+            intent.putExtra("title", label);
+            startActivity(intent);
+        });
+        container.addView(view);
+    }
+
     private void bindBasic(@NonNull LinearLayout container) {
         if (config == null) return;
         var header = LayoutInflater.from(this)
@@ -418,63 +487,155 @@ private void bindBasic(@NonNull LinearLayout container) {
         updateStateUI();
         addInfoRow(container, R.drawable.ic_switch, getString(R.string.network_info_bridge),
             config.item.optString("bridge_name", ""));
-        var mac = config.item.optString("mac_address", "");
+        addInfoRow(container, R.drawable.ic_switch,
+            getString(R.string.network_edit_bridge_type),
+            getString(config.getBridgeType() == BridgeType.GVISOR
+                ? R.string.network_edit_bridge_type_gvisor
+                : R.string.network_edit_bridge_type_linux));
+        String modeLabel;
+        switch (config.getUplinkMode()) {
+            case L2:
+                modeLabel = getString(R.string.network_edit_uplink_l2);
+                break;
+            case L3:
+                modeLabel = getString(R.string.network_edit_uplink_l3);
+                break;
+            default:
+                modeLabel = getString(R.string.network_edit_uplink_none);
+                break;
+        }
+        addInfoRow(container, R.drawable.ic_web_plus,
+            getString(R.string.network_edit_uplink_mode), modeLabel);
+        var mac = config.getBridgeMacAddress();
         addInfoRow(container, R.drawable.ic_ethernet,
             getString(R.string.network_info_mac),
-            mac.isEmpty() ? "-" : mac);
+            mac == null ? "-" : mac);
         addInfoRow(container, R.drawable.ic_refresh_auto,
             getString(R.string.network_info_auto_up),
             strStatus(config.item.optBoolean("auto_up", false)));
         addInfoRow(container, R.drawable.ic_file_tree,
             getString(R.string.network_info_stp),
             strStatus(config.item.optBoolean("stp", false)));
-        addInfoRow(container, R.drawable.ic_web_plus,
-            getString(R.string.network_info_nat),
-            strStatus(config.item.optBoolean("nat", false)));
-        addInfoRow(container, R.drawable.ic_router,
-            getString(R.string.network_info_dhcp),
-            strStatus(config.item.optBoolean("dhcp_enabled", false)));
-        if (config.item.optBoolean("dhcp_enabled", false)) try {
-            var startStr = config.item.optString("dhcp_range_start", "");
-            var endStr = config.item.optString("dhcp_range_end", "");
-            if (!startStr.isEmpty() && !endStr.isEmpty()) {
-                var start = requireNonNull(IPv4Address.parse(startStr));
-                var end = requireNonNull(IPv4Address.parse(endStr));
-                long count = end.value() - start.value() + 1;
-                if (count < 0) count = 0;
-                var range = getResources().getQuantityString(
-                    R.plurals.network_info_dhcp_pool, (int) count,
-                    start.toString(), end.toString(), count
-                );
+        if (config.getUplinkMode() == UplinkMode.L2) {
+            var uplink = config.getL2Uplink();
+            var resolved = infoData.optString("resolved_uplink", "");
+            addInfoRow(container, R.drawable.ic_ethernet,
+                getString(R.string.network_edit_l2_uplink),
+                resolved.isEmpty() ? (uplink == null ? "-" : uplink)
+                    : fmt("%s (%s)", uplink, resolved));
+        }
+        for (var vlan : config.getVlans()) {
+            var summary = new StringBuilder();
+            var net4 = vlan.getIpv4Cidr();
+            if (net4 != null) {
+                summary.append(net4);
+                if (vlan.isIpv4Snat()) summary.append(" SNAT");
+                if (vlan.isDhcp4Enabled()) summary.append(fmt(
+                    " DHCP %d-%d",
+                    vlan.getDhcp4OffsetStart(), vlan.getDhcp4OffsetEnd()));
+            }
+            if (vlan.getIpv6Source() == Ipv6Source.DHCP_PD) {
+                if (summary.length() > 0) summary.append("\n");
+                summary.append("IPv6: DHCP-PD via ").append(vlan.getPdUplink());
+            } else if (vlan.getIpv6Cidr() != null) {
+                if (summary.length() > 0) summary.append("\n");
+                summary.append(vlan.getIpv6Cidr());
+                // IPv6 SNAT only takes effect on gVisor bridges
+                if (vlan.isIpv6Snat() && config.getBridgeType() == BridgeType.GVISOR)
+                    summary.append(" SNAT");
+                if (vlan.isSlaacEnabled()) summary.append(" SLAAC");
+            }
+            addInfoRow(container, R.drawable.ic_ip_network,
+                vlan.isUntagged()
+                    ? getString(R.string.network_edit_vlan_untagged)
+                    : fmt("VLAN %d", vlan.getVlanId()),
+                summary.length() == 0 ? "-" : summary.toString());
+        }
+        var tools = infoData.optJSONArray("tools");
+        if (tools != null)
+            for (int i = 0; i < tools.length(); i++) {
+                var t = tools.optJSONObject(i);
+                if (t != null)
+                    addToolRow(container, t.optString("key", ""),
+                        t.optBoolean("running", false));
+            }
+        var pdStatus = infoData.optJSONArray("pd_status");
+        if (pdStatus != null) {
+            for (int i = 0; i < pdStatus.length(); i++) {
+                var pd = pdStatus.optJSONObject(i);
+                if (pd == null) continue;
+                var address = pd.optString("address", "");
                 addInfoRow(container, R.drawable.ic_ip_network,
-                    getString(R.string.network_info_dhcp_range), range);
+                    fmt("DHCP-PD (%s)", pd.optString("uplink", "")),
+                    address.isEmpty()
+                        ? pd.optString("state", "-")
+                        : fmt("%s (%s)", address, pd.optString("state", "")));
             }
-        } catch (Exception ignored) {
         }
         var df = DateFormat.getDateTimeInstance(DateFormat.MEDIUM, DateFormat.SHORT);
         addInfoRow(container, R.drawable.ic_clock, getString(R.string.network_info_created),
             df.format(new Date(config.item.optLong("created_at", 0))));
     }
 
+    private boolean hasAnyDhcp() {
+        if (config == null) return false;
+        for (var vlan : config.getVlans())
+            if (vlan.isDhcp4Enabled() || vlan.isDhcp6Enabled()) return true;
+        return false;
+    }
+
     private void bindAddresses(@NonNull LinearLayout container) {
+        boolean hasAny;
+        if (hasAddressEntries) {
+            // Linux bridge: one deduped row per address with VLAN/bound/source chips.
+            hasAny = addressEntries.length() > 0;
+            for (int i = 0; i < addressEntries.length(); i++) {
+                var e = addressEntries.optJSONObject(i);
+                if (e != null) addAddressEntry(container, e);
+            }
+        } else {
+            // other backends: legacy config + live rendering.
+            hasAny = bindLegacyAddresses(container);
+        }
+        for (int i = 0; i < pdStatus.length(); i++) {
+            var pd = pdStatus.optJSONObject(i);
+            if (pd == null) continue;
+            addPdEntry(container, pd);
+            hasAny = true;
+        }
+        if (!hasAny) addEmptyView(container, R.string.network_info_no_addresses);
+    }
+
+    private boolean bindLegacyAddresses(@NonNull LinearLayout container) {
         boolean hasAny = false;
         if (config != null) {
-            config.item.get("ipv4_addresses").forEachArray(a -> {
-                try {
-                    addEntry(container, R.drawable.ic_ip_network,
-                        a.asString(), "IPv4 (configured)");
-                } catch (Exception ignored) {
+            for (var vlan : config.getVlans()) {
+                var label = vlan.isUntagged()
+                    ? getString(R.string.network_edit_vlan_untagged)
+                    : fmt("VLAN %d", vlan.getVlanId());
+                var net4 = vlan.getIpv4Cidr();
+                if (net4 != null) {
+                    addEntry(container, R.drawable.ic_ip_network, net4,
+                        fmt("IPv4 (%s)", label));
+                    hasAny = true;
                 }
-            });
-            config.item.get("ipv6_addresses").forEachArray(a -> {
-                try {
-                    addEntry(container, R.drawable.ic_ip_network,
-                        a.asString(), "IPv6 (configured)");
-                } catch (Exception ignored) {
+                for (var cidr : vlan.getIpv4Secondary()) {
+                    addEntry(container, R.drawable.ic_ip_network, cidr,
+                        fmt("IPv4 secondary (%s)", label));
+                    hasAny = true;
                 }
-            });
-            hasAny = !config.item.get("ipv4_addresses").isEmpty() ||
-                !config.item.get("ipv6_addresses").isEmpty();
+                var net6 = vlan.getIpv6Cidr();
+                if (net6 != null && vlan.getIpv6Source() == Ipv6Source.STATIC) {
+                    addEntry(container, R.drawable.ic_ip_network, net6,
+                        fmt("IPv6 (%s)", label));
+                    hasAny = true;
+                }
+                for (var cidr : vlan.getIpv6Secondary()) {
+                    addEntry(container, R.drawable.ic_ip_network, cidr,
+                        fmt("IPv6 secondary (%s)", label));
+                    hasAny = true;
+                }
+            }
         }
         for (int i = 0; i < liveAddresses.length(); i++) {
             var addr = liveAddresses.optString(i, "");
@@ -483,12 +644,92 @@ private void bindAddresses(@NonNull LinearLayout container) {
                 addr.contains(":") ? "IPv6 (live)" : "IPv4 (live)");
             hasAny = true;
         }
-        if (!hasAny) addEmptyView(container, R.string.network_info_no_addresses);
+        return hasAny;
+    }
+
+    private void addAddressEntry(@NonNull LinearLayout container, @NonNull JSONObject e) {
+        var vlanLabel = vlanLabel(e.optInt("vlan", 0));
+        var bound = getString(e.optBoolean("bound", false)
+            ? R.string.network_info_addr_bound
+            : R.string.network_info_addr_unbound);
+        int sourceRes;
+        switch (e.optString("source", "")) {
+            case "configured": sourceRes = R.string.network_info_addr_source_config; break;
+            case "pbridge_guest": sourceRes = R.string.network_info_addr_source_pbridge; break;
+            default: sourceRes = R.string.network_info_addr_source_auto; break;
+        }
+        var source = getString(sourceRes);
+        addEntry(container, R.drawable.ic_ip_network, e.optString("addr", ""),
+            fmt("(%s, %s, %s)", vlanLabel, bound, source));
+    }
+
+    private void addPdEntry(@NonNull LinearLayout container, @NonNull JSONObject pd) {
+        var view = LayoutInflater.from(this)
+            .inflate(R.layout.item_network_pd, container, false);
+        var vlan = pd.optInt("vlan", 0);
+        var state = pd.optString("state", "");
+        // The composed host address P::1/L actually bound on the bridge (empty
+        // while searching) — so this row matches the live nic address and the
+        // "bound" chip reflects the real binding, not the raw delegation.
+        var address = pd.optString("address", "");
+        var noUplink = "no_uplink".equals(state);
+        var bound = !address.isEmpty();
+        // CIDR area: the bound host address, or the status while there is none
+        String line1;
+        if (bound) line1 = address;
+        else if (noUplink) line1 = getString(R.string.network_info_pd_no_uplink);
+        else line1 = getString(R.string.network_info_pd_searching);
+        ((TextView) view.findViewById(R.id.tv_line1)).setText(line1);
+        // three elements, matching the address rows: (VLAN, bound/unbound, DHCP-PD)
+        ((TextView) view.findViewById(R.id.tv_line2)).setText(fmt("(%s, %s, %s)",
+            vlanLabel(vlan),
+            getString(bound ? R.string.network_info_addr_bound
+                            : R.string.network_info_addr_unbound),
+            getString(R.string.network_info_pd_label)));
+        // no PD client exists without an uplink, so release/renew would no-op
+        MaterialButton release = view.findViewById(R.id.btn_release);
+        MaterialButton renew = view.findViewById(R.id.btn_renew);
+        release.setEnabled(!noUplink);
+        renew.setEnabled(!noUplink);
+        release.setOnClickListener(v -> sendPdAction("network_pd_release", vlan));
+        renew.setOnClickListener(v -> sendPdAction("network_pd_renew", vlan));
+        container.addView(view);
+    }
+
+    private void sendPdAction(@NonNull String command, int vlan) {
+        DaemonConnection.getInstance().buildRequest(command)
+            .put("network_id", networkId.toString())
+            .put("vlan_id", vlan)
+            .onResponse(resp -> mainHandler.post(this::syncState))
+            .onUnsuccessful(resp -> showError(resp.optString("message", "PD action failed")))
+            .onError(e -> showError("PD action failed"))
+            .invoke();
+    }
+
+    @NonNull
+    private String vlanLabel(int vlan) {
+        return vlan == 0
+            ? getString(R.string.network_edit_vlan_untagged)
+            : fmt("VLAN %d", vlan);
     }
 
     private void bindPorts(@NonNull LinearLayout container) {
+        // surface port-forward install failures (e.g. host port already in use)
+        var failures = infoData.optJSONObject("forward_failures");
+        if (failures != null) {
+            var names = failures.keys();
+            while (names.hasNext()) {
+                var tap = names.next();
+                var arr = failures.optJSONArray(tap);
+                if (arr == null) continue;
+                for (int i = 0; i < arr.length(); i++)
+                    addEntry(container, R.drawable.ic_close,
+                        getString(R.string.network_info_forward_failed, arr.optString(i, "")),
+                        tap);
+            }
+        }
         if (liveInterfaces.length() == 0) {
-            addEmptyView(container, R.string.network_info_no_ports);
+            if (failures == null) addEmptyView(container, R.string.network_info_no_ports);
             return;
         }
         for (int i = 0; i < liveInterfaces.length(); i++) {
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/network/info/NetworkToolLogActivity.java b/app/src/main/java/cn/classfun/droidvm/ui/network/info/NetworkToolLogActivity.java
new file mode 100644
index 000000000..2659a6a23
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/ui/network/info/NetworkToolLogActivity.java
@@ -0,0 +1,94 @@
+package cn.classfun.droidvm.ui.network.info;
+
+import android.os.Bundle;
+import android.os.Handler;
+import android.os.Looper;
+import android.view.View;
+import android.widget.TextView;
+
+import androidx.annotation.Nullable;
+import androidx.appcompat.app.AppCompatActivity;
+import androidx.core.widget.NestedScrollView;
+
+import com.google.android.material.appbar.MaterialToolbar;
+
+import cn.classfun.droidvm.R;
+import cn.classfun.droidvm.lib.daemon.DaemonConnection;
+
+/**
+ * Read-only viewer for a network helper tool's captured stdout/stderr
+ * (pbridge / gvswitch / bridgedhcp). Polls the daemon while resumed and
+ * keeps the view pinned to the bottom unless the user scrolled up.
+ */
+public final class NetworkToolLogActivity extends AppCompatActivity {
+    private final Handler handler = new Handler(Looper.getMainLooper());
+    private boolean resumed = false;
+    private String networkId, tool;
+    private TextView tvLog;
+    private NestedScrollView scroll;
+    private final Runnable poll = () -> {
+        fetch();
+        schedule();
+    };
+
+    @Override
+    protected void onCreate(@Nullable Bundle savedInstanceState) {
+        super.onCreate(savedInstanceState);
+        setContentView(R.layout.activity_network_tool_log);
+        networkId = getIntent().getStringExtra("network_id");
+        tool = getIntent().getStringExtra("tool");
+        if (networkId == null || tool == null) {
+            finish();
+            return;
+        }
+        var title = getIntent().getStringExtra("title");
+        MaterialToolbar toolbar = findViewById(R.id.toolbar);
+        toolbar.setTitle(title != null ? title : tool);
+        toolbar.setNavigationOnClickListener(v -> finish());
+        tvLog = findViewById(R.id.tv_log);
+        scroll = findViewById(R.id.scroll);
+    }
+
+    @Override
+    protected void onResume() {
+        super.onResume();
+        resumed = true;
+        fetch();
+        schedule();
+    }
+
+    @Override
+    protected void onPause() {
+        super.onPause();
+        resumed = false;
+        handler.removeCallbacks(poll);
+    }
+
+    private void schedule() {
+        if (resumed) handler.postDelayed(poll, 2000);
+    }
+
+    private void fetch() {
+        DaemonConnection.getInstance().buildRequest("network_tool_log")
+            .put("network_id", networkId)
+            .put("tool", tool)
+            .onResponse(resp -> {
+                var lines = resp.optJSONArray("lines");
+                var sb = new StringBuilder();
+                if (lines != null)
+                    for (int i = 0; i < lines.length(); i++)
+                        sb.append(lines.optString(i, "")).append('\n');
+                var text = sb.length() == 0
+                    ? getString(R.string.network_info_tool_log_empty) : sb.toString();
+                handler.post(() -> {
+                    if (isFinishing()) return;
+                    boolean atBottom = !scroll.canScrollVertically(1);
+                    tvLog.setText(text);
+                    if (atBottom) scroll.post(() -> scroll.fullScroll(View.FOCUS_DOWN));
+                });
+            })
+            .onUnsuccessful(r -> {})
+            .onError(e -> {})
+            .invoke();
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/VMEditActivity.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/VMEditActivity.java
index 647e17a80..1f31a22ec 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/VMEditActivity.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/VMEditActivity.java
@@ -161,6 +161,11 @@ public List<VMEditBaseTab> createTabInstances() {
     }
 
     private void doSave() {
+        // Commit any field still being edited: NIC MAC/offset/forward inputs
+        // write back to the model on focus loss, so flush the focused view
+        // before reading the tabs' config.
+        var focused = getCurrentFocus();
+        if (focused != null) focused.clearFocus();
         var store = new VMStore();
         store.load(this);
         boolean valid = true;
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/base/VMEditTab.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/base/VMEditTab.java
index ffe193a83..93a936821 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/base/VMEditTab.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/base/VMEditTab.java
@@ -17,7 +17,6 @@
 import cn.classfun.droidvm.ui.vm.edit.boot.VMEditBootTab;
 import cn.classfun.droidvm.ui.vm.edit.graphics.VMEditGraphicsTab;
 import cn.classfun.droidvm.ui.vm.edit.network.VMEditNetworkTab;
-import cn.classfun.droidvm.ui.vm.edit.portforward.VMEditPortForwardTab;
 import cn.classfun.droidvm.ui.vm.edit.storage.VMEditStorageTab;
 
 public enum VMEditTab implements StringEnum {
@@ -41,11 +40,6 @@ public enum VMEditTab implements StringEnum {
         R.id.tab_content_network,
         VMEditNetworkTab.class
     ),
-    TAB_PORT_FORWARD(
-        R.string.create_vm_tab_port_forward,
-        R.id.tab_content_port_forward,
-        VMEditPortForwardTab.class
-    ),
     TAB_GRAPHICS(
         R.string.create_vm_tab_graphics,
         R.id.tab_content_graphics,
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/network/VMNetEditAdapter.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/network/VMNetEditAdapter.java
index 214ca2aa0..7d41a0a0c 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/network/VMNetEditAdapter.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/network/VMNetEditAdapter.java
@@ -1,5 +1,7 @@
 package cn.classfun.droidvm.ui.vm.edit.network;
 
+import static android.view.View.GONE;
+import static android.view.View.VISIBLE;
 import static cn.classfun.droidvm.lib.utils.NetUtils.generateRandomMac;
 import static cn.classfun.droidvm.lib.utils.StringUtils.getEditText;
 
@@ -8,6 +10,7 @@
 import android.view.View;
 
 import androidx.annotation.NonNull;
+import androidx.annotation.Nullable;
 import androidx.recyclerview.widget.RecyclerView;
 
 import com.google.android.material.button.MaterialButton;
@@ -16,14 +19,31 @@
 import java.util.ArrayList;
 
 import cn.classfun.droidvm.R;
+import cn.classfun.droidvm.lib.store.base.DataItem;
+import cn.classfun.droidvm.lib.store.network.NetworkConfig;
 import cn.classfun.droidvm.lib.store.network.NetworkStore;
+import cn.classfun.droidvm.lib.store.network.UplinkMode;
+import cn.classfun.droidvm.lib.store.network.VlanConfig;
+import cn.classfun.droidvm.lib.store.vm.VMNicConfig;
+import cn.classfun.droidvm.lib.store.vm.VMStore;
 import cn.classfun.droidvm.ui.widgets.container.CardItemAdapter;
 
 public final class VMNetEditAdapter extends CardItemAdapter<VMNetEditViewHolder> {
+    private NetworkStore networkStore;
+
     public VMNetEditAdapter(@NonNull Context context) {
         super(context);
     }
 
+    @NonNull
+    private NetworkStore networks() {
+        if (networkStore == null) {
+            networkStore = new NetworkStore();
+            networkStore.load(context);
+        }
+        return networkStore;
+    }
+
     @NonNull
     @Override
     protected VMNetEditViewHolder createViewHolderInstance(@NonNull View view) {
@@ -38,11 +58,12 @@ protected int getLayoutRes() {
     @Override
     public void onBindViewHolder(@NonNull VMNetEditViewHolder holder, int position) {
         var net = items.get(position);
-        updateSelectButton(holder.btnSelect, net.optString("network_id", ""));
+        var nic = new VMNicConfig(net);
+        updateSelectButton(holder.btnSelect, nic.getNetworkId());
         holder.btnSelect.setOnClickListener(v -> {
             int pos = holder.getBindingAdapterPosition();
             if (pos == RecyclerView.NO_POSITION) return;
-            showNetworkPicker(pos, holder.btnSelect);
+            showNetworkPicker(pos, holder);
         });
         holder.btnDelete.setOnClickListener(v -> {
             int pos = holder.getBindingAdapterPosition();
@@ -69,10 +90,325 @@ public void onBindViewHolder(@NonNull VMNetEditViewHolder holder, int position)
             holder.etMac.setText(randomMac);
             items.get(pos).set("mac_address", randomMac);
         });
+        bindSwitch(holder, holder.swMacSecurity, "mac_security",
+            nic.isMacSecurity());
+        bindSwitch(holder, holder.swIsolated, "isolated", nic.isIsolated());
+        bindVlan(holder, nic);
+        bindLeases(holder, nic);
+    }
+
+    private void bindSwitch(
+        @NonNull VMNetEditViewHolder holder,
+        @NonNull com.google.android.material.materialswitch.MaterialSwitch sw,
+        @NonNull String key, boolean value
+    ) {
+        sw.setOnCheckedChangeListener(null);
+        sw.setChecked(value);
+        sw.setOnCheckedChangeListener((b, checked) -> {
+            int pos = holder.getBindingAdapterPosition();
+            if (pos != RecyclerView.NO_POSITION)
+                items.get(pos).set(key, checked);
+        });
+    }
+
+    private void bindVlan(@NonNull VMNetEditViewHolder holder, @NonNull VMNicConfig nic) {
+        var vlanId = nic.getVlanId();
+        boolean linux = isLinuxBridge(nic);
+        holder.swVlan.setOnCheckedChangeListener(null);
+        holder.swVlan.setChecked(vlanId != null);
+        applyVlanFieldState(holder, vlanId);
+        validateVlanField(holder, linux, vlanId == null ? -1 : vlanId);
+        holder.swVlan.setOnCheckedChangeListener((b, checked) -> {
+            int pos = holder.getBindingAdapterPosition();
+            if (pos == RecyclerView.NO_POSITION) return;
+            if (checked) {
+                long id = parseLong(getEditText(holder.etVlan), 0);
+                if (linux) {
+                    // a Linux bridge has no untagged-only ports: the 4095
+                    // trunk marker or a leftover 0 become a tagged default
+                    if (id == 4095 || id == 0) id = defaultTaggedVlan(nic);
+                } else if (id == 4095) {
+                    id = 0;  // gvisor: leaving trunk starts at untagged
+                }
+                items.get(pos).set("vlan_id", id);
+                applyVlanFieldState(holder, (int) id);
+                validateVlanField(holder, linux, id);
+            } else {
+                items.get(pos).remove("vlan_id");
+                applyVlanFieldState(holder, null);
+                holder.tilVlan.setError(null);
+            }
+            bindLeases(holder, new VMNicConfig(items.get(pos)));
+        });
+        holder.etVlan.setOnFocusChangeListener((v, hasFocus) -> {
+            if (hasFocus) return;
+            int pos = holder.getBindingAdapterPosition();
+            if (pos == RecyclerView.NO_POSITION) return;
+            if (holder.swVlan.isChecked()) {
+                long id = parseLong(getEditText(holder.etVlan), 0);
+                if (id == 4095) {
+                    // typing the trunk marker means trunk: same as toggling
+                    // off (the listener clears vlan_id and locks the field)
+                    holder.swVlan.setChecked(false);
+                    return;
+                }
+                items.get(pos).set("vlan_id", id);
+                validateVlanField(holder, linux, id);
+            }
+            bindLeases(holder, new VMNicConfig(items.get(pos)));
+        });
+    }
+
+    private boolean isLinuxBridge(@NonNull VMNicConfig nic) {
+        var netId = nic.getNetworkId();
+        var network = netId != null ? networks().findById(netId) : null;
+        return network != null && network.getBridgeType()
+            == cn.classfun.droidvm.lib.store.network.BridgeType.LINUX;
+    }
+
+    /** First tagged VLAN configured on the NIC's network, or 1. */
+    private int defaultTaggedVlan(@NonNull VMNicConfig nic) {
+        var netId = nic.getNetworkId();
+        var network = netId != null ? networks().findById(netId) : null;
+        if (network != null)
+            for (var vlan : network.getVlans()) {
+                int v = vlan.getVlanId();
+                if (v >= 1 && v <= 4094) return v;
+            }
+        return 1;
+    }
+
+    private void validateVlanField(
+        @NonNull VMNetEditViewHolder holder, boolean linux, long id
+    ) {
+        String error = null;
+        if (linux && id == 0)
+            error = context.getString(R.string.edit_vm_net_vlan_no_untagged);
+        else if (id > 4094)
+            error = context.getString(R.string.edit_vm_net_vlan_invalid);
+        holder.tilVlan.setError(error);
+    }
+
+    /** Toggle off = trunk: the ID field locks to the 4095 trunk marker. */
+    private static void applyVlanFieldState(
+        @NonNull VMNetEditViewHolder holder, @Nullable Integer vlanId
+    ) {
+        if (vlanId == null) {
+            holder.etVlan.setText("4095");
+            holder.etVlan.setEnabled(false);
+            holder.tilVlan.setEnabled(false);
+        } else {
+            holder.etVlan.setEnabled(true);
+            holder.tilVlan.setEnabled(true);
+            holder.etVlan.setText(String.valueOf(vlanId));
+        }
+    }
+
+    /**
+     * DHCP lease sections are visible for every L3 network; the toggle is
+     * locked until the effective VLAN actually serves that DHCP family.
+     */
+    private void bindLeases(@NonNull VMNetEditViewHolder holder, @NonNull VMNicConfig nic) {
+        var netId = nic.getNetworkId();
+        var network = netId != null ? networks().findById(netId) : null;
+        boolean l3 = network != null && network.getUplinkMode() == UplinkMode.L3;
+        holder.groupDhcp4.setVisibility(l3 ? VISIBLE : GONE);
+        holder.groupDhcp6.setVisibility(l3 ? VISIBLE : GONE);
+        if (!l3) return;
+        var vlan = nic.resolveDhcpVlan(network);
+        bindLease(holder, nic, vlan, network, false);
+        bindLease(holder, nic, vlan, network, true);
+    }
+
+    private void bindLease(
+        @NonNull VMNetEditViewHolder holder, @NonNull VMNicConfig nic,
+        @Nullable VlanConfig vlan, @NonNull NetworkConfig network, boolean v6
+    ) {
+        var sw = v6 ? holder.swDhcp6 : holder.swDhcp4;
+        var detail = v6 ? holder.groupDhcp6Detail : holder.groupDhcp4Detail;
+        var hint = v6 ? holder.tvDhcp6Hint : holder.tvDhcp4Hint;
+        var offset = v6 ? holder.etDhcp6Offset : holder.etDhcp4Offset;
+        var offsetTil = v6 ? holder.tilDhcp6Offset : holder.tilDhcp4Offset;
+        var fwdTil = v6 ? holder.tilFwd6 : holder.tilFwd4;
+        var fwd = v6 ? holder.etFwd6 : holder.etFwd4;
+        var leaseKey = v6 ? "dhcp6_lease" : "dhcp4_lease";
+        boolean dhcpServed = vlan != null
+            && (v6 ? vlan.isDhcp6Enabled() : vlan.isDhcp4Enabled());
+        boolean enabled = dhcpServed
+            && (v6 ? nic.isDhcp6LeaseEnabled() : nic.isDhcp4LeaseEnabled());
+        sw.setOnCheckedChangeListener(null);
+        sw.setChecked(enabled);
+        sw.setEnabled(dhcpServed);
+        detail.setVisibility(enabled ? VISIBLE : GONE);
+        offset.setEnabled(enabled);
+        offsetTil.setEnabled(enabled);
+        if (dhcpServed) {
+            hint.setVisibility(GONE);
+        } else {
+            // tell the user which network/VLAN needs DHCP enabled first
+            int effectiveVlan = nic.getVlanId() != null ? nic.getVlanId() : 0;
+            var msg = context.getString(
+                R.string.edit_vm_net_dhcp_need_enable,
+                v6 ? "6" : "4", network.getName(), effectiveVlan);
+            if (nic.getVlanId() == null)
+                msg += context.getString(R.string.edit_vm_net_dhcp_trunk_note);
+            hint.setText(msg);
+            hint.setVisibility(VISIBLE);
+        }
+        long currentOffset = v6 ? nic.getDhcp6Offset() : nic.getDhcp4Offset();
+        offset.setText(String.valueOf(currentOffset));
+        fwd.setText(formatForwards(
+            v6 ? nic.getDhcp6Forwards() : nic.getDhcp4Forwards()));
+        // IPv6 forwards need IPv6 SNAT, which the Linux bridge can't do
+        // (Android kernel has no IPv6 NAT) — hide them there entirely
+        boolean fwdSupported = !v6
+            || network.getBridgeType() == cn.classfun.droidvm.lib.store.network.BridgeType.GVISOR;
+        fwdTil.setVisibility(fwdSupported ? VISIBLE : GONE);
+        boolean snat = fwdSupported && vlan != null
+            && (v6 ? vlan.isIpv6Snat() : vlan.isIpv4Snat());
+        fwdTil.setEnabled(snat);
+        fwd.setEnabled(snat);
+        fwdTil.setHelperText(snat ? context.getString(R.string.edit_vm_net_forwards_hint)
+            : context.getString(R.string.edit_vm_net_forwards_need_snat));
+        var vlanFinal = vlan;
+        sw.setOnCheckedChangeListener((b, checked) -> {
+            int pos = holder.getBindingAdapterPosition();
+            if (pos == RecyclerView.NO_POSITION) return;
+            detail.setVisibility(checked ? VISIBLE : GONE);
+            offset.setEnabled(checked);
+            offsetTil.setEnabled(checked);
+            var lease = leaseItem(items.get(pos), leaseKey);
+            lease.set("enabled", checked);
+            if (checked && lease.optLong("offset", 0) <= 0 && vlanFinal != null) {
+                long free = nextFreeOffset(network, vlanFinal, pos, v6);
+                lease.set("offset", free);
+                offset.setText(String.valueOf(free));
+            }
+        });
+        offset.setOnFocusChangeListener((v, hasFocus) -> {
+            if (hasFocus) return;
+            int pos = holder.getBindingAdapterPosition();
+            if (pos == RecyclerView.NO_POSITION) return;
+            leaseItem(items.get(pos), leaseKey)
+                .set("offset", parseLong(getEditText(offset), 64));
+        });
+        fwd.setOnFocusChangeListener((v, hasFocus) -> {
+            if (hasFocus) return;
+            int pos = holder.getBindingAdapterPosition();
+            if (pos == RecyclerView.NO_POSITION) return;
+            leaseItem(items.get(pos), leaseKey)
+                .set("forwards", parseForwards(getEditText(fwd)));
+        });
+        // normalize: a lease can't stay enabled once its DHCP is gone
+        var lease = leaseItem(nic.item, leaseKey);
+        if (!dhcpServed && lease.optBoolean("enabled", false))
+            lease.set("enabled", false);
+        if (enabled && lease.optLong("offset", 0) <= 0)
+            lease.set("offset", 64L);
+    }
+
+    @NonNull
+    private static DataItem leaseItem(@NonNull DataItem nic, @NonNull String key) {
+        var lease = nic.opt(key, null);
+        if (lease == null || !lease.is(DataItem.Type.OBJECT)) {
+            nic.set(key, DataItem.newObject());
+            lease = nic.get(key);
+        }
+        return lease;
+    }
+
+    /**
+     * The smallest offset >= 64 not used by any other NIC (this VM's other
+     * NICs or any saved VM) on the same network/VLAN.
+     */
+    private long nextFreeOffset(
+        @NonNull NetworkConfig network, @NonNull VlanConfig vlan, int selfPos, boolean v6
+    ) {
+        var used = new ArrayList<Long>();
+        var netId = network.getId().toString();
+        int vlanId = vlan.getVlanId();
+        for (int i = 0; i < items.size(); i++) {
+            if (i == selfPos) continue;
+            collectOffset(used, new VMNicConfig(items.get(i)), netId, vlanId, network, v6);
+        }
+        var vmStore = new VMStore();
+        vmStore.load(context);
+        vmStore.forEach((id, vm) -> vm.forEachNic(nic ->
+            collectOffset(used, nic, netId, vlanId, network, v6)));
+        long candidate = 64;
+        while (used.contains(candidate)) candidate++;
+        return candidate;
     }
 
-    private void showNetworkPicker(int position, MaterialButton btn) {
-        var netStore = new NetworkStore();
+    private static void collectOffset(
+        @NonNull ArrayList<Long> used, @NonNull VMNicConfig nic,
+        @NonNull String netId, int vlanId, @NonNull NetworkConfig network, boolean v6
+    ) {
+        if (!netId.equals(nic.getNetworkId())) return;
+        var nicVlan = nic.resolveDhcpVlan(network);
+        if (nicVlan == null || nicVlan.getVlanId() != vlanId) return;
+        if (v6) {
+            if (nic.isDhcp6LeaseEnabled()) used.add(nic.getDhcp6Offset());
+        } else {
+            if (nic.isDhcp4LeaseEnabled()) used.add(nic.getDhcp4Offset());
+        }
+    }
+
+    /** "tcp 80:80" lines <-> forwards array of {proto, host, guest}. */
+    @NonNull
+    static String formatForwards(@NonNull java.util.List<VMNicConfig.PortForward> forwards) {
+        var sb = new StringBuilder();
+        for (var fwd : forwards) {
+            if (sb.length() > 0) sb.append('\n');
+            if (!fwd.proto.equals("any"))
+                sb.append(fwd.proto).append(' ');
+            sb.append(fwd.host).append(':').append(fwd.guest);
+        }
+        return sb.toString();
+    }
+
+    @NonNull
+    static DataItem parseForwards(@NonNull String text) {
+        var arr = DataItem.newArray();
+        for (var line : text.split("\n")) {
+            var trimmed = line.trim();
+            if (trimmed.isEmpty()) continue;
+            // accept "proto host:guest" or just "host:guest" (proto = any = tcp+udp)
+            String proto = "any";
+            String spec = trimmed;
+            var parts = trimmed.split("\\s+", 2);
+            if (parts.length == 2) {
+                var first = parts[0].toLowerCase();
+                if (first.equals("tcp") || first.equals("udp")) {
+                    proto = first;
+                    spec = parts[1].trim();
+                }
+            }
+            var ports = spec.split(":", 2);
+            if (ports.length != 2) continue;
+            var host = ports[0].trim();
+            var guest = ports[1].trim();
+            if (host.isEmpty() || guest.isEmpty()) continue;
+            var entry = DataItem.newObject();
+            entry.set("proto", proto);
+            entry.set("host", host);
+            entry.set("guest", guest);
+            arr.append(entry);
+        }
+        return arr;
+    }
+
+    private static long parseLong(@Nullable String s, long def) {
+        if (s == null) return def;
+        try {
+            return Long.parseLong(s.trim());
+        } catch (NumberFormatException e) {
+            return def;
+        }
+    }
+
+    private void showNetworkPicker(int position, @NonNull VMNetEditViewHolder holder) {
+        var netStore = networks();
         netStore.load(context);
         var ids = new ArrayList<String>();
         var names = new ArrayList<String>();
@@ -86,7 +422,8 @@ private void showNetworkPicker(int position, MaterialButton btn) {
         int checked = Math.max(0, ids.indexOf(currentId));
         DialogInterface.OnClickListener onclick = (dialog, which) -> {
             items.get(position).set("network_id", ids.get(which));
-            updateSelectButton(btn, ids.get(which));
+            updateSelectButton(holder.btnSelect, ids.get(which));
+            bindLeases(holder, new VMNicConfig(items.get(position)));
             dialog.dismiss();
         };
         new MaterialAlertDialogBuilder(context)
@@ -95,14 +432,12 @@ private void showNetworkPicker(int position, MaterialButton btn) {
             .show();
     }
 
-    private void updateSelectButton(MaterialButton btn, String networkId) {
+    private void updateSelectButton(MaterialButton btn, @Nullable String networkId) {
         if (networkId == null || networkId.isEmpty()) {
             btn.setText(R.string.create_vm_network_none);
             return;
         }
-        var netStore = new NetworkStore();
-        netStore.load(context);
-        var net = netStore.findById(networkId);
+        var net = networks().findById(networkId);
         btn.setText(net != null ? net.getName() :
             context.getString(R.string.create_vm_network_none));
     }
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/network/VMNetEditViewHolder.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/network/VMNetEditViewHolder.java
index 9c477d989..6d2520b03 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/network/VMNetEditViewHolder.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/network/VMNetEditViewHolder.java
@@ -2,12 +2,15 @@
 
 import android.view.View;
 import android.widget.ImageButton;
+import android.widget.LinearLayout;
 
 import androidx.annotation.NonNull;
 import androidx.recyclerview.widget.RecyclerView;
 
 import com.google.android.material.button.MaterialButton;
+import com.google.android.material.materialswitch.MaterialSwitch;
 import com.google.android.material.textfield.TextInputEditText;
+import com.google.android.material.textfield.TextInputLayout;
 
 import cn.classfun.droidvm.R;
 
@@ -16,6 +19,27 @@ public final class VMNetEditViewHolder extends RecyclerView.ViewHolder {
     final ImageButton btnDelete;
     final TextInputEditText etMac;
     final ImageButton btnMacRandom;
+    final MaterialSwitch swMacSecurity;
+    final MaterialSwitch swIsolated;
+    final MaterialSwitch swVlan;
+    final TextInputLayout tilVlan;
+    final TextInputEditText etVlan;
+    final LinearLayout groupDhcp4;
+    final MaterialSwitch swDhcp4;
+    final View groupDhcp4Detail;
+    final android.widget.TextView tvDhcp4Hint;
+    final TextInputEditText etDhcp4Offset;
+    final TextInputLayout tilDhcp4Offset;
+    final TextInputLayout tilFwd4;
+    final TextInputEditText etFwd4;
+    final LinearLayout groupDhcp6;
+    final MaterialSwitch swDhcp6;
+    final View groupDhcp6Detail;
+    final android.widget.TextView tvDhcp6Hint;
+    final TextInputEditText etDhcp6Offset;
+    final TextInputLayout tilDhcp6Offset;
+    final TextInputLayout tilFwd6;
+    final TextInputEditText etFwd6;
 
     VMNetEditViewHolder(@NonNull View itemView) {
         super(itemView);
@@ -23,5 +47,26 @@ public final class VMNetEditViewHolder extends RecyclerView.ViewHolder {
         btnDelete = itemView.findViewById(R.id.btn_net_delete);
         etMac = itemView.findViewById(R.id.et_net_mac);
         btnMacRandom = itemView.findViewById(R.id.btn_net_mac_random);
+        swMacSecurity = itemView.findViewById(R.id.sw_nic_mac_security);
+        swIsolated = itemView.findViewById(R.id.sw_nic_isolated);
+        swVlan = itemView.findViewById(R.id.sw_nic_vlan);
+        tilVlan = itemView.findViewById(R.id.til_nic_vlan);
+        etVlan = itemView.findViewById(R.id.et_nic_vlan);
+        groupDhcp4 = itemView.findViewById(R.id.group_nic_dhcp4);
+        swDhcp4 = itemView.findViewById(R.id.sw_nic_dhcp4);
+        groupDhcp4Detail = itemView.findViewById(R.id.group_nic_dhcp4_detail);
+        tvDhcp4Hint = itemView.findViewById(R.id.tv_nic_dhcp4_hint);
+        etDhcp4Offset = itemView.findViewById(R.id.et_nic_dhcp4_offset);
+        tilDhcp4Offset = itemView.findViewById(R.id.til_nic_dhcp4_offset);
+        tilFwd4 = itemView.findViewById(R.id.til_nic_fwd4);
+        etFwd4 = itemView.findViewById(R.id.et_nic_fwd4);
+        groupDhcp6 = itemView.findViewById(R.id.group_nic_dhcp6);
+        swDhcp6 = itemView.findViewById(R.id.sw_nic_dhcp6);
+        groupDhcp6Detail = itemView.findViewById(R.id.group_nic_dhcp6_detail);
+        tvDhcp6Hint = itemView.findViewById(R.id.tv_nic_dhcp6_hint);
+        etDhcp6Offset = itemView.findViewById(R.id.et_nic_dhcp6_offset);
+        tilDhcp6Offset = itemView.findViewById(R.id.til_nic_dhcp6_offset);
+        tilFwd6 = itemView.findViewById(R.id.til_nic_fwd6);
+        etFwd6 = itemView.findViewById(R.id.et_nic_fwd6);
     }
 }
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/portforward/PortForwardEditAdapter.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/portforward/PortForwardEditAdapter.java
deleted file mode 100644
index beae8a645..000000000
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/portforward/PortForwardEditAdapter.java
+++ /dev/null
@@ -1,174 +0,0 @@
-package cn.classfun.droidvm.ui.vm.edit.portforward;
-
-import android.content.Context;
-import android.content.DialogInterface;
-import android.view.View;
-
-import androidx.annotation.NonNull;
-import androidx.recyclerview.widget.RecyclerView;
-
-import com.google.android.material.button.MaterialButton;
-import com.google.android.material.dialog.MaterialAlertDialogBuilder;
-
-import java.util.ArrayList;
-
-import cn.classfun.droidvm.R;
-import cn.classfun.droidvm.lib.store.base.DataItem;
-import cn.classfun.droidvm.lib.store.enums.Enums;
-import cn.classfun.droidvm.lib.store.network.NetworkStore;
-import cn.classfun.droidvm.lib.store.vm.PortProtocol;
-import cn.classfun.droidvm.lib.ui.SimpleTextWatcher;
-import cn.classfun.droidvm.ui.widgets.container.CardItemAdapter;
-
-public final class PortForwardEditAdapter extends CardItemAdapter<PortForwardEditViewHolder> {
-    public PortForwardEditAdapter(@NonNull Context context) {
-        super(context);
-    }
-
-    @NonNull
-    @Override
-    protected PortForwardEditViewHolder createViewHolderInstance(@NonNull View view) {
-        return new PortForwardEditViewHolder(view);
-    }
-
-    @Override
-    protected int getLayoutRes() {
-        return R.layout.item_port_forward_edit;
-    }
-
-    @Override
-    public void onBindViewHolder(@NonNull PortForwardEditViewHolder holder, int position) {
-        var item = items.get(position);
-        holder.unbindWatchers();
-
-        holder.btnProtocol.configure(
-            PortProtocol.class, Enums.optEnum(item, "protocol", PortProtocol.TCP));
-        holder.btnProtocol.setOnValueChangedListener((oldVal, newVal) -> {
-            int pos = holder.getBindingAdapterPosition();
-            if (pos != RecyclerView.NO_POSITION)
-                items.get(pos).set("protocol", newVal);
-        });
-
-        long hostPort = item.optLong("host_port", 0);
-        holder.etHostPort.setText(hostPort > 0 ? String.valueOf(hostPort) : "");
-        holder.hostPortWatcher = SimpleTextWatcher.simpleAfterTextWatcher(s -> {
-            int pos = holder.getBindingAdapterPosition();
-            if (pos != RecyclerView.NO_POSITION)
-                setPort(items.get(pos), "host_port", s.toString());
-        });
-        holder.etHostPort.addTextChangedListener(holder.hostPortWatcher);
-
-        // Guest port (empty = same as host port, backend falls back)
-        long guestPort = item.optLong("guest_port", 0);
-        holder.etGuestPort.setText(guestPort > 0 ? String.valueOf(guestPort) : "");
-        holder.guestPortWatcher = SimpleTextWatcher.simpleAfterTextWatcher(s -> {
-            int pos = holder.getBindingAdapterPosition();
-            if (pos != RecyclerView.NO_POSITION)
-                setPort(items.get(pos), "guest_port", s.toString());
-        });
-        holder.etGuestPort.addTextChangedListener(holder.guestPortWatcher);
-
-        holder.switchEnabled.setOnCheckedChangeListener(null);
-        holder.switchEnabled.setChecked(item.optBoolean("enabled", true));
-        holder.switchEnabled.setOnCheckedChangeListener((btn, checked) -> {
-            int pos = holder.getBindingAdapterPosition();
-            if (pos != RecyclerView.NO_POSITION)
-                items.get(pos).set("enabled", checked);
-        });
-
-        holder.etHostIp.setText(item.optString("host_ip", ""));
-        holder.hostIpWatcher = SimpleTextWatcher.simpleAfterTextWatcher(s -> {
-            int pos = holder.getBindingAdapterPosition();
-            if (pos != RecyclerView.NO_POSITION)
-                items.get(pos).set("host_ip", s.toString().trim());
-        });
-        holder.etHostIp.addTextChangedListener(holder.hostIpWatcher);
-
-        holder.etGuestIp.setText(item.optString("guest_ip", ""));
-        holder.guestIpWatcher = SimpleTextWatcher.simpleAfterTextWatcher(s -> {
-            int pos = holder.getBindingAdapterPosition();
-            if (pos != RecyclerView.NO_POSITION)
-                items.get(pos).set("guest_ip", s.toString().trim());
-        });
-        holder.etGuestIp.addTextChangedListener(holder.guestIpWatcher);
-
-        updateNetworkButton(holder.btnNetwork, item.optString("network_id", ""));
-        holder.btnNetwork.setOnClickListener(v -> {
-            int pos = holder.getBindingAdapterPosition();
-            if (pos != RecyclerView.NO_POSITION)
-                showNetworkPicker(pos, holder.btnNetwork);
-        });
-
-        // Advanced section expand state: expanded by default when advanced values exist (data-driven, safe to reuse)
-        boolean hasAdvanced = !item.optString("host_ip", "").isEmpty()
-            || !item.optString("guest_ip", "").isEmpty()
-            || !item.optString("network_id", "").isEmpty();
-        applyAdvancedState(holder, hasAdvanced);
-        holder.btnAdvanced.setOnClickListener(v -> {
-            boolean show = holder.layoutAdvanced.getVisibility() != View.VISIBLE;
-            applyAdvancedState(holder, show);
-        });
-
-        holder.btnDelete.setOnClickListener(v -> {
-            int pos = holder.getBindingAdapterPosition();
-            if (pos != RecyclerView.NO_POSITION)
-                removeItem(pos);
-        });
-    }
-
-    private void applyAdvancedState(@NonNull PortForwardEditViewHolder holder, boolean expanded) {
-        holder.layoutAdvanced.setVisibility(expanded ? View.VISIBLE : View.GONE);
-        holder.btnAdvanced.setIconResource(
-            expanded ? R.drawable.ic_expand_less : R.drawable.ic_expand_more);
-    }
-
-    /** Writes the port as an integer; empty/invalid becomes 0 (backend: host_port=0 is skipped, guest_port=0 falls back to host_port). */
-    private void setPort(@NonNull DataItem item, @NonNull String key, @NonNull String text) {
-        text = text.trim();
-        if (text.isEmpty()) {
-            item.set(key, 0L);
-            return;
-        }
-        try {
-            item.set(key, (long) Integer.parseInt(text));
-        } catch (NumberFormatException e) {
-            item.set(key, 0L);
-        }
-    }
-
-    private void showNetworkPicker(int position, @NonNull MaterialButton btn) {
-        var netStore = new NetworkStore();
-        netStore.load(context);
-        var ids = new ArrayList<String>();
-        var names = new ArrayList<String>();
-        ids.add("");
-        names.add(context.getString(R.string.create_vm_network_none));
-        netStore.forEach((id, config) -> {
-            ids.add(id.toString());
-            names.add(config.getName());
-        });
-        var currentId = items.get(position).optString("network_id", "");
-        int checked = Math.max(0, ids.indexOf(currentId));
-        DialogInterface.OnClickListener onclick = (dialog, which) -> {
-            items.get(position).set("network_id", ids.get(which));
-            updateNetworkButton(btn, ids.get(which));
-            dialog.dismiss();
-        };
-        new MaterialAlertDialogBuilder(context)
-            .setTitle(R.string.edit_vm_pf_network)
-            .setSingleChoiceItems(names.toArray(new String[0]), checked, onclick)
-            .show();
-    }
-
-    private void updateNetworkButton(@NonNull MaterialButton btn, String networkId) {
-        if (networkId == null || networkId.isEmpty()) {
-            btn.setText(R.string.create_vm_network_none);
-            return;
-        }
-        var netStore = new NetworkStore();
-        netStore.load(context);
-        var net = netStore.findById(networkId);
-        btn.setText(net != null ? net.getName() :
-            context.getString(R.string.create_vm_network_none));
-    }
-}
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/portforward/PortForwardEditViewHolder.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/portforward/PortForwardEditViewHolder.java
deleted file mode 100644
index 31e37abab..000000000
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/portforward/PortForwardEditViewHolder.java
+++ /dev/null
@@ -1,66 +0,0 @@
-package cn.classfun.droidvm.ui.vm.edit.portforward;
-
-import android.text.TextWatcher;
-import android.view.View;
-import android.widget.ImageButton;
-import android.widget.LinearLayout;
-
-import androidx.annotation.NonNull;
-import androidx.recyclerview.widget.RecyclerView;
-
-import com.google.android.material.button.MaterialButton;
-import com.google.android.material.materialswitch.MaterialSwitch;
-import com.google.android.material.textfield.TextInputEditText;
-
-import cn.classfun.droidvm.R;
-import cn.classfun.droidvm.ui.widgets.tools.PickerButtonWidget;
-
-public final class PortForwardEditViewHolder extends RecyclerView.ViewHolder {
-    final TextInputEditText etHostPort;
-    final TextInputEditText etGuestPort;
-    final TextInputEditText etHostIp;
-    final TextInputEditText etGuestIp;
-    final PickerButtonWidget btnProtocol;
-    final MaterialSwitch switchEnabled;
-    final MaterialButton btnAdvanced;
-    final MaterialButton btnNetwork;
-    final ImageButton btnDelete;
-    final LinearLayout layoutAdvanced;
-    TextWatcher hostPortWatcher;
-    TextWatcher guestPortWatcher;
-    TextWatcher hostIpWatcher;
-    TextWatcher guestIpWatcher;
-
-    PortForwardEditViewHolder(@NonNull View itemView) {
-        super(itemView);
-        etHostPort = itemView.findViewById(R.id.et_pf_host_port);
-        etGuestPort = itemView.findViewById(R.id.et_pf_guest_port);
-        etHostIp = itemView.findViewById(R.id.et_pf_host_ip);
-        etGuestIp = itemView.findViewById(R.id.et_pf_guest_ip);
-        btnProtocol = itemView.findViewById(R.id.btn_pf_protocol);
-        switchEnabled = itemView.findViewById(R.id.switch_pf_enabled);
-        btnAdvanced = itemView.findViewById(R.id.btn_pf_advanced);
-        btnNetwork = itemView.findViewById(R.id.btn_pf_network);
-        btnDelete = itemView.findViewById(R.id.btn_pf_delete);
-        layoutAdvanced = itemView.findViewById(R.id.layout_pf_advanced);
-    }
-
-    void unbindWatchers() {
-        if (hostPortWatcher != null) {
-            etHostPort.removeTextChangedListener(hostPortWatcher);
-            hostPortWatcher = null;
-        }
-        if (guestPortWatcher != null) {
-            etGuestPort.removeTextChangedListener(guestPortWatcher);
-            guestPortWatcher = null;
-        }
-        if (hostIpWatcher != null) {
-            etHostIp.removeTextChangedListener(hostIpWatcher);
-            hostIpWatcher = null;
-        }
-        if (guestIpWatcher != null) {
-            etGuestIp.removeTextChangedListener(guestIpWatcher);
-            guestIpWatcher = null;
-        }
-    }
-}
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/portforward/VMEditPortForwardTab.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/portforward/VMEditPortForwardTab.java
deleted file mode 100644
index d0256a9fb..000000000
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/portforward/VMEditPortForwardTab.java
+++ /dev/null
@@ -1,66 +0,0 @@
-package cn.classfun.droidvm.ui.vm.edit.portforward;
-
-import static java.util.Objects.requireNonNull;
-
-import android.view.View;
-import android.widget.Toast;
-
-import androidx.annotation.NonNull;
-
-import cn.classfun.droidvm.R;
-import cn.classfun.droidvm.lib.store.base.DataItem;
-import cn.classfun.droidvm.lib.store.vm.VMConfig;
-import cn.classfun.droidvm.lib.store.vm.VMStore;
-import cn.classfun.droidvm.ui.vm.edit.VMEditActivity;
-import cn.classfun.droidvm.ui.vm.edit.base.VMEditBaseTab;
-import cn.classfun.droidvm.ui.widgets.container.CardItemListView;
-
-public final class VMEditPortForwardTab extends VMEditBaseTab {
-    private CardItemListView listPf;
-
-    public VMEditPortForwardTab(VMEditActivity parent, View view) {
-        super(parent, view);
-    }
-
-    @Override
-    public void initView() {
-        listPf = view.findViewById(R.id.list_port_forwards);
-    }
-
-    @Override
-    public void initValue() {
-        listPf.setAdapter(PortForwardEditAdapter.class);
-    }
-
-    @Override
-    public void loadConfig(@NonNull VMConfig config) {
-        listPf.setItems(config.item.opt("port_forwards", DataItem.newArray()));
-    }
-
-    @Override
-    public boolean validateInput(@NonNull VMStore store) {
-        if (!rulesValid(requireNonNull(listPf.getItems()))) {
-            Toast.makeText(parent, R.string.edit_vm_pf_invalid_port, Toast.LENGTH_SHORT).show();
-            return false;
-        }
-        return true;
-    }
-
-    /** Mirrors the backend VMPortForwarder.parseRules checks (enabled rules only). */
-    public static boolean rulesValid(@NonNull DataItem rules) {
-        for (var iter : rules) {
-            var r = iter.getValue();
-            if (!r.optBoolean("enabled", true)) continue;
-            long hostPort = r.optLong("host_port", 0);
-            if (hostPort <= 0 || hostPort > 65535) return false;
-            long guestPort = r.optLong("guest_port", 0);
-            if (guestPort > 65535) return false; // 0 is valid: backend falls back to host_port
-        }
-        return true;
-    }
-
-    @Override
-    public void saveConfig(@NonNull VMConfig config) {
-        config.item.set("port_forwards", listPf.getItems());
-    }
-}
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/info/VMInfoActivity.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/info/VMInfoActivity.java
index 57619d103..d3af1bd62 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/info/VMInfoActivity.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/info/VMInfoActivity.java
@@ -50,11 +50,9 @@
 import cn.classfun.droidvm.lib.store.vm.VMState;
 import cn.classfun.droidvm.lib.store.vm.VMStore;
 import cn.classfun.droidvm.lib.ui.UIContext;
+import cn.classfun.droidvm.lib.store.network.NetworkStore;
 import cn.classfun.droidvm.ui.vm.VMActions;
 import cn.classfun.droidvm.ui.vm.edit.VMEditActivity;
-import cn.classfun.droidvm.ui.vm.edit.portforward.PortForwardEditAdapter;
-import cn.classfun.droidvm.ui.vm.edit.portforward.VMEditPortForwardTab;
-import cn.classfun.droidvm.ui.widgets.container.CardItemListView;
 import cn.classfun.droidvm.ui.widgets.container.CollapsibleContainer;
 import cn.classfun.droidvm.ui.widgets.row.TextRowWidget;
 
@@ -87,7 +85,6 @@ public final class VMInfoActivity extends AppCompatActivity implements Foregroun
     private CollapsibleContainer ccPortForwards;
     private LinearLayout containerPortForwards;
     private TextView tvPfEmpty;
-    private MaterialButton btnPfEdit;
     public VMState currentState = VMState.STOPPED;
     public UUID vmId;
     public VMConfig config;
@@ -118,7 +115,6 @@ protected void onCreate(@Nullable Bundle savedInstanceState) {
         ccPortForwards = findViewById(R.id.cc_port_forwards);
         containerPortForwards = findViewById(R.id.container_port_forwards);
         tvPfEmpty = findViewById(R.id.tv_pf_empty);
-        btnPfEdit = findViewById(R.id.btn_pf_edit);
         toolbar = findViewById(R.id.toolbar);
         initialize();
     }
@@ -143,7 +139,6 @@ private void initialize() {
             sendControlCommand("powerbtn", vmId, mainHandler, ui));
         btnSleepBtn.setOnClickListener(v ->
             sendControlCommand("sleepbtn", vmId, mainHandler, ui));
-        btnPfEdit.setOnClickListener(v -> showPortForwardEditor());
     }
 
     @Override
@@ -317,51 +312,60 @@ private void updateStateUI() {
             mainHandler.postDelayed(this::refreshPortForwards, 2000);
     }
 
+    /** Renders the per-NIC port forwards configured in the VM's NIC settings. */
     private void refreshPortForwards() {
-        if (currentState != VMState.RUNNING) {
+        if (config == null) {
             ccPortForwards.setVisibility(View.GONE);
             return;
         }
-        DaemonConnection.OnResponse res = resp -> {
-            var data = resp.optJSONObject("data");
-            var active = data != null ? data.optJSONArray("active") : null;
-            mainHandler.post(() -> renderPortForwards(active));
-        };
-        DaemonConnection.getInstance().buildRequest("vm_port_forward_list")
-            .put("vm_id", vmId.toString())
-            .onResponse(res)
-            .onUnsuccessful(r -> {
-            })
-            .onError(e -> Log.w(TAG, "Failed to query port forwards", e))
-            .invoke();
-    }
-
-    private void renderPortForwards(@Nullable JSONArray active) {
-        if (isFinishing()) return;
-        if (currentState != VMState.RUNNING) {
+        var lines = new java.util.ArrayList<String>();
+        var networks = new NetworkStore();
+        networks.load(this);
+        config.forEachNic(nic -> {
+            var netId = nic.getNetworkId();
+            var network = netId != null ? networks.findById(netId) : null;
+            var vlan = network != null ? nic.resolveDhcpVlan(network) : null;
+            if (vlan == null) return;
+            if (nic.isDhcp4LeaseEnabled() && vlan.isDhcp4Enabled()) {
+                var net4 = vlan.getIpv4Network();
+                for (var fwd : nic.getDhcp4Forwards()) {
+                    String guest;
+                    try {
+                        guest = net4 != null
+                            ? net4.addressAtOffset(nic.getDhcp4Offset()).toString()
+                            : "?";
+                    } catch (Exception e) {
+                        guest = "?";
+                    }
+                    lines.add(fwd.proto.toUpperCase() + "  *:" + fwd.host
+                        + " -> " + guest + ":" + fwd.guest);
+                }
+            }
+            if (nic.isDhcp6LeaseEnabled() && vlan.isDhcp6Enabled()) {
+                var net6 = vlan.getIpv6Network();
+                for (var fwd : nic.getDhcp6Forwards()) {
+                    String guest;
+                    try {
+                        guest = net6 != null
+                            ? net6.addressAtOffset(nic.getDhcp6Offset()).toString()
+                            : "?";
+                    } catch (Exception e) {
+                        guest = "?";
+                    }
+                    lines.add(fwd.proto.toUpperCase() + "  *:" + fwd.host
+                        + " -> [" + guest + "]:" + fwd.guest);
+                }
+            }
+        });
+        if (lines.isEmpty()) {
             ccPortForwards.setVisibility(View.GONE);
             return;
         }
         ccPortForwards.setVisibility(View.VISIBLE);
         containerPortForwards.removeAllViews();
-        int count = active != null ? active.length() : 0;
-        if (count == 0) {
-            tvPfEmpty.setVisibility(View.VISIBLE);
-            return;
-        }
         tvPfEmpty.setVisibility(View.GONE);
         var inflater = LayoutInflater.from(this);
-        for (int i = 0; i < count; i++) {
-            var o = active.optJSONObject(i);
-            if (o == null) continue;
-            var protocol = o.optString("protocol", "tcp");
-            var proto = "udp".equals(protocol) ? "UDP" : "TCP";
-            var hostIp = o.optString("host_ip", "");
-            var hostPort = o.optInt("host_port", 0);
-            var guestIp = o.optString("guest_ip", "");
-            var guestPort = o.optInt("guest_port", 0);
-            var hostDisplay = (hostIp.isEmpty() ? "*" : hostIp) + ":" + hostPort;
-            var line = proto + "  " + hostDisplay + " -> " + guestIp + ":" + guestPort;
+        for (var line : lines) {
             var row = inflater.inflate(
                 R.layout.item_port_forward_active, containerPortForwards, false);
             ((TextView) row.findViewById(R.id.tv_pf_line)).setText(line);
@@ -369,66 +373,6 @@ private void renderPortForwards(@Nullable JSONArray active) {
         }
     }
 
-    private void showPortForwardEditor() {
-        if (config == null) return;
-        var view = LayoutInflater.from(this).inflate(R.layout.dialog_port_forward_edit, null);
-        CardItemListView list = view.findViewById(R.id.list_port_forwards);
-        list.setAdapter(PortForwardEditAdapter.class);
-        list.setItems(copyArray(config.item.opt("port_forwards", DataItem.newArray())));
-        var dialog = new MaterialAlertDialogBuilder(this)
-            .setTitle(R.string.vm_info_port_forwards)
-            .setView(view)
-            .setPositiveButton(R.string.edit_vm_pf_apply, null)
-            .setNegativeButton(android.R.string.cancel, null)
-            .create();
-        // Override the button so failed validation keeps the dialog open.
-        dialog.setOnShowListener(d -> dialog.getButton(AlertDialog.BUTTON_POSITIVE)
-            .setOnClickListener(v -> {
-                if (applyPortForwardEdits(list)) dialog.dismiss();
-            }));
-        dialog.show();
-    }
-
-    private boolean applyPortForwardEdits(CardItemListView list) {
-        var items = list.getItems();
-        if (items == null) items = DataItem.newArray();
-        if (!VMEditPortForwardTab.rulesValid(items)) {
-            Toast.makeText(this, R.string.edit_vm_pf_invalid_port, Toast.LENGTH_SHORT).show();
-            return false;
-        }
-        config.item.set("port_forwards", items);
-        runOnPool(() -> store.save(this));
-        JSONArray rules;
-        try {
-            rules = items.toJsonArray();
-        } catch (JSONException e) {
-            rules = new JSONArray();
-        }
-        DaemonConnection.getInstance().buildRequest("vm_port_forward_set")
-            .put("vm_id", vmId.toString())
-            .put("rules", rules)
-            .onResponse(r -> {
-                // Apply may take effect sync (reconcile) or async (loop start); refresh now and after a delay.
-                mainHandler.post(this::refreshPortForwards);
-                mainHandler.postDelayed(this::refreshPortForwards, 1500);
-            })
-            .onUnsuccessful(r -> {
-            })
-            .onError(e -> Log.w(TAG, "Failed to set port forwards", e))
-            .invoke();
-        return true;
-    }
-
-    /** Deep copy so a cancelled dialog doesn't mutate config. */
-    private static DataItem copyArray(DataItem src) {
-        if (!src.is(DataItem.Type.ARRAY)) return DataItem.newArray();
-        try {
-            return DataItem.fromJson(src.toJsonArray());
-        } catch (JSONException e) {
-            return DataItem.newArray();
-        }
-    }
-
     private void onStartStopClicked() {
         var isActive = currentState == VMState.RUNNING
             || currentState == VMState.SUSPENDED;
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/widgets/row/SwitchRowWidget.java b/app/src/main/java/cn/classfun/droidvm/ui/widgets/row/SwitchRowWidget.java
index 265ff7fd4..5b4146671 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/widgets/row/SwitchRowWidget.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/widgets/row/SwitchRowWidget.java
@@ -1,5 +1,6 @@
 package cn.classfun.droidvm.ui.widgets.row;
 
+import android.annotation.SuppressLint;
 import android.content.Context;
 import android.util.AttributeSet;
 import android.view.LayoutInflater;
@@ -85,6 +86,18 @@ public boolean isChecked() {
         return switchView.isChecked();
     }
 
+    /**
+     * Locks interaction without greying the switch: it keeps its normal
+     * on/off colour (so a forced-on state reads as on, not disabled) but
+     * can't be tapped or dragged. Pass true to restore normal interaction.
+     */
+    @SuppressLint("ClickableViewAccessibility")
+    public void setSwitchEnabled(boolean enabled) {
+        switchView.setOnTouchListener(enabled ? null : (v, e) -> true);
+        setOnClickListener(enabled ? v -> switchView.toggle() : null);
+        setClickable(enabled);
+    }
+
     public void setChecked(boolean checked) {
         switchView.setChecked(checked);
     }
diff --git a/app/src/main/res/layout/activity_network_edit.xml b/app/src/main/res/layout/activity_network_edit.xml
index eb2ca8e77..999210597 100644
--- a/app/src/main/res/layout/activity_network_edit.xml
+++ b/app/src/main/res/layout/activity_network_edit.xml
@@ -42,6 +42,16 @@
             android:layout_height="wrap_content"
             android:orientation="vertical">
 
+            <TextView
+                android:id="@+id/tv_running_banner"
+                android:layout_width="match_parent"
+                android:layout_height="wrap_content"
+                android:background="?attr/colorErrorContainer"
+                android:padding="16dp"
+                android:text="@string/network_edit_running_banner"
+                android:textColor="?attr/colorOnErrorContainer"
+                android:visibility="gone" />
+
             <cn.classfun.droidvm.ui.widgets.container.CollapsibleContainer
                 android:layout_width="match_parent"
                 android:layout_height="wrap_content"
@@ -56,22 +66,6 @@
                     android:icon="@drawable/ic_edit"
                     android:inputType="text" />
 
-                <cn.classfun.droidvm.ui.widgets.row.TextInputRowWidget
-                    android:id="@+id/input_bridge_name"
-                    android:layout_width="match_parent"
-                    android:layout_height="wrap_content"
-                    android:hint="@string/network_edit_bridge_hint"
-                    android:icon="@drawable/ic_nav_network"
-                    android:inputType="textNoSuggestions" />
-
-                <cn.classfun.droidvm.ui.widgets.row.TextInputRowWidget
-                    android:id="@+id/input_mac"
-                    android:layout_width="match_parent"
-                    android:layout_height="wrap_content"
-                    android:hint="@string/network_edit_mac_hint"
-                    android:icon="@drawable/ic_memory"
-                    android:inputType="textNoSuggestions" />
-
                 <cn.classfun.droidvm.ui.widgets.row.SwitchRowWidget
                     android:id="@+id/sw_auto_up"
                     android:layout_width="match_parent"
@@ -87,158 +81,102 @@
                     android:icon="@drawable/ic_source_branch"
                     android:text="@string/network_edit_stp" />
 
-                <cn.classfun.droidvm.ui.widgets.row.SwitchRowWidget
-                    android:id="@+id/sw_nat"
-                    android:layout_width="match_parent"
-                    android:layout_height="wrap_content"
-                    android:icon="@drawable/ic_web_plus"
-                    android:text="@string/network_edit_nat" />
-
-            </cn.classfun.droidvm.ui.widgets.container.CollapsibleContainer>
-
-            <cn.classfun.droidvm.ui.widgets.container.CollapsibleContainer
-                android:layout_width="match_parent"
-                android:layout_height="wrap_content"
-                android:title="@string/network_edit_category_ipv4"
-                app:cc_collapsible="false">
-
-                <cn.classfun.droidvm.ui.widgets.row.TextInputRowWidget
-                    android:id="@+id/input_ipv4"
+                <cn.classfun.droidvm.ui.widgets.row.DropdownRowWidget
+                    android:id="@+id/dd_bridge_type"
                     android:layout_width="match_parent"
                     android:layout_height="wrap_content"
-                    android:hint="@string/network_edit_ipv4_hint"
-                    android:icon="@drawable/ic_ip_network"
-                    android:inputType="textNoSuggestions"
-                    app:ti_endIcon="@android:drawable/ic_input_add"
-                    app:ti_endIconMode="custom" />
+                    android:hint="@string/network_edit_bridge_type"
+                    android:icon="@drawable/ic_switch" />
 
-                <LinearLayout
-                    android:id="@+id/layout_ipv4"
+                <cn.classfun.droidvm.ui.widgets.row.DropdownRowWidget
+                    android:id="@+id/dd_uplink_mode"
                     android:layout_width="match_parent"
                     android:layout_height="wrap_content"
-                    android:orientation="vertical"
-                    android:paddingStart="72dp"
-                    android:paddingEnd="16dp" />
-
-                <TextView
-                    android:id="@+id/tv_ipv4_empty"
-                    android:layout_width="match_parent"
-                    android:layout_height="wrap_content"
-                    android:alpha="0.6"
-                    android:paddingStart="72dp"
-                    android:paddingEnd="16dp"
-                    android:text="@string/network_edit_no_addresses"
-                    android:textSize="14sp" />
+                    android:hint="@string/network_edit_uplink_mode"
+                    android:icon="@drawable/ic_web_plus" />
 
             </cn.classfun.droidvm.ui.widgets.container.CollapsibleContainer>
 
             <cn.classfun.droidvm.ui.widgets.container.CollapsibleContainer
+                android:id="@+id/group_l2"
                 android:layout_width="match_parent"
                 android:layout_height="wrap_content"
-                android:title="@string/network_edit_category_ipv6"
+                android:title="@string/network_edit_category_l2"
+                android:visibility="gone"
                 app:cc_collapsible="false">
 
-                <cn.classfun.droidvm.ui.widgets.row.TextInputRowWidget
-                    android:id="@+id/input_ipv6"
+                <cn.classfun.droidvm.ui.widgets.row.DropdownRowWidget
+                    android:id="@+id/dd_l2_uplink"
                     android:layout_width="match_parent"
                     android:layout_height="wrap_content"
-                    android:hint="@string/network_edit_ipv6_hint"
-                    android:icon="@drawable/ic_ip_network"
-                    android:inputType="textNoSuggestions"
-                    app:ti_endIcon="@android:drawable/ic_input_add"
-                    app:ti_endIconMode="custom" />
+                    android:hint="@string/network_edit_l2_uplink"
+                    android:icon="@drawable/ic_ethernet" />
 
-                <LinearLayout
-                    android:id="@+id/layout_ipv6"
+                <cn.classfun.droidvm.ui.widgets.row.SwitchRowWidget
+                    android:id="@+id/sw_pseudo_bridge"
                     android:layout_width="match_parent"
                     android:layout_height="wrap_content"
-                    android:orientation="vertical"
-                    android:paddingStart="72dp"
-                    android:paddingEnd="16dp" />
+                    android:text="@string/network_edit_pseudo_bridge"
+                    android:icon="@drawable/ic_connection" />
 
                 <TextView
-                    android:id="@+id/tv_ipv6_empty"
+                    android:id="@+id/tv_pseudo_hint"
                     android:layout_width="match_parent"
                     android:layout_height="wrap_content"
-                    android:alpha="0.6"
                     android:paddingStart="72dp"
                     android:paddingEnd="16dp"
-                    android:text="@string/network_edit_no_addresses"
-                    android:textSize="14sp" />
+                    android:paddingBottom="8dp"
+                    android:textColor="?attr/colorOnSurfaceVariant"
+                    android:textSize="13sp" />
 
             </cn.classfun.droidvm.ui.widgets.container.CollapsibleContainer>
 
             <cn.classfun.droidvm.ui.widgets.container.CollapsibleContainer
+                android:id="@+id/group_l3"
                 android:layout_width="match_parent"
                 android:layout_height="wrap_content"
-                android:title="@string/network_edit_category_dns"
+                android:title="@string/network_edit_category_l3"
+                android:visibility="gone"
                 app:cc_collapsible="false">
 
                 <cn.classfun.droidvm.ui.widgets.row.TextInputRowWidget
-                    android:id="@+id/input_dns"
+                    android:id="@+id/input_mac"
                     android:layout_width="match_parent"
                     android:layout_height="wrap_content"
-                    android:hint="@string/network_edit_dns_hint"
-                    android:icon="@drawable/ic_dns"
+                    android:hint="@string/network_edit_mac_hint"
+                    android:icon="@drawable/ic_ethernet"
                     android:inputType="textNoSuggestions"
-                    app:ti_endIcon="@android:drawable/ic_input_add"
+                    app:ti_endIcon="@drawable/ic_refresh"
                     app:ti_endIconMode="custom" />
 
                 <LinearLayout
-                    android:id="@+id/layout_dns"
+                    android:id="@+id/container_vlans"
                     android:layout_width="match_parent"
                     android:layout_height="wrap_content"
-                    android:orientation="vertical"
-                    android:paddingStart="72dp"
-                    android:paddingEnd="16dp" />
+                    android:orientation="vertical" />
 
                 <TextView
-                    android:id="@+id/tv_dns_empty"
+                    android:id="@+id/tv_vlan_empty"
                     android:layout_width="match_parent"
                     android:layout_height="wrap_content"
-                    android:alpha="0.6"
-                    android:paddingStart="72dp"
+                    android:paddingStart="16dp"
                     android:paddingEnd="16dp"
-                    android:text="@string/network_edit_no_addresses"
-                    android:textSize="14sp" />
-
-            </cn.classfun.droidvm.ui.widgets.container.CollapsibleContainer>
-
-            <cn.classfun.droidvm.ui.widgets.container.CollapsibleContainer
-                android:layout_width="match_parent"
-                android:layout_height="wrap_content"
-                android:title="@string/network_edit_category_dhcp"
-                app:cc_collapsible="false">
-
-                <cn.classfun.droidvm.ui.widgets.row.SwitchRowWidget
-                    android:id="@+id/sw_dhcp"
-                    android:layout_width="match_parent"
-                    android:layout_height="wrap_content"
-                    android:icon="@drawable/ic_router"
-                    android:text="@string/network_edit_dhcp_enabled" />
-
-                <LinearLayout
-                    android:id="@+id/group_dhcp"
-                    android:layout_width="match_parent"
-                    android:layout_height="wrap_content"
-                    android:orientation="vertical"
-                    android:visibility="gone">
-
-                    <cn.classfun.droidvm.ui.widgets.row.TextInputRowWidget
-                        android:id="@+id/input_dhcp_start"
-                        android:layout_width="match_parent"
-                        android:layout_height="wrap_content"
-                        android:hint="@string/network_edit_dhcp_start_hint"
-                        android:inputType="textNoSuggestions" />
-
-                    <cn.classfun.droidvm.ui.widgets.row.TextInputRowWidget
-                        android:id="@+id/input_dhcp_end"
-                        android:layout_width="match_parent"
-                        android:layout_height="wrap_content"
-                        android:hint="@string/network_edit_dhcp_end_hint"
-                        android:inputType="textNoSuggestions" />
-
-                </LinearLayout>
+                    android:paddingBottom="8dp"
+                    android:text="@string/network_edit_vlan_empty_hint"
+                    android:textColor="?attr/colorOnSurfaceVariant"
+                    android:textSize="13sp"
+                    android:visibility="gone" />
+
+                <com.google.android.material.button.MaterialButton
+                    android:id="@+id/btn_add_vlan"
+                    style="@style/Widget.Material3.Button.TonalButton"
+                    android:layout_width="wrap_content"
+                    android:layout_height="wrap_content"
+                    android:layout_marginStart="16dp"
+                    android:layout_marginEnd="16dp"
+                    android:layout_marginBottom="8dp"
+                    android:text="@string/network_edit_add_vlan"
+                    app:icon="@drawable/ic_add" />
 
             </cn.classfun.droidvm.ui.widgets.container.CollapsibleContainer>
 
@@ -256,10 +194,7 @@
         android:layout_height="wrap_content"
         android:layout_gravity="bottom|end"
         android:layout_margin="16dp"
-        android:layout_marginBottom="32dp"
-        android:contentDescription="@string/network_edit_btn_save"
-        android:src="@drawable/ic_check"
-        app:fabSize="normal"
-        tools:ignore="ClassNameCheck" />
+        android:contentDescription="@string/network_edit_save"
+        android:src="@drawable/ic_check" />
 
 </androidx.coordinatorlayout.widget.CoordinatorLayout>
diff --git a/app/src/main/res/layout/activity_network_tool_log.xml b/app/src/main/res/layout/activity_network_tool_log.xml
new file mode 100644
index 000000000..cb4b6637e
--- /dev/null
+++ b/app/src/main/res/layout/activity_network_tool_log.xml
@@ -0,0 +1,40 @@
+<?xml version="1.0" encoding="utf-8"?>
+<LinearLayout xmlns:android="http://schemas.android.com/apk/res/android"
+    xmlns:app="http://schemas.android.com/apk/res-auto"
+    android:layout_width="match_parent"
+    android:layout_height="match_parent"
+    android:background="?attr/colorSurface"
+    android:orientation="vertical">
+
+    <com.google.android.material.appbar.AppBarLayout
+        android:layout_width="match_parent"
+        android:layout_height="wrap_content">
+
+        <com.google.android.material.appbar.MaterialToolbar
+            android:id="@+id/toolbar"
+            android:layout_width="match_parent"
+            android:layout_height="?attr/actionBarSize"
+            app:navigationIcon="?attr/homeAsUpIndicator" />
+
+    </com.google.android.material.appbar.AppBarLayout>
+
+    <androidx.core.widget.NestedScrollView
+        android:id="@+id/scroll"
+        android:layout_width="match_parent"
+        android:layout_height="0dp"
+        android:layout_weight="1"
+        android:fillViewport="true">
+
+        <TextView
+            android:id="@+id/tv_log"
+            android:layout_width="match_parent"
+            android:layout_height="wrap_content"
+            android:fontFamily="monospace"
+            android:padding="12dp"
+            android:textColor="?attr/colorOnSurface"
+            android:textIsSelectable="true"
+            android:textSize="12sp" />
+
+    </androidx.core.widget.NestedScrollView>
+
+</LinearLayout>
diff --git a/app/src/main/res/layout/activity_vm_edit.xml b/app/src/main/res/layout/activity_vm_edit.xml
index 0f503cf47..b51364da8 100644
--- a/app/src/main/res/layout/activity_vm_edit.xml
+++ b/app/src/main/res/layout/activity_vm_edit.xml
@@ -81,13 +81,6 @@
                 android:layout_height="wrap_content"
                 android:visibility="gone" />
 
-            <include
-                android:id="@+id/tab_content_port_forward"
-                layout="@layout/partial_vm_edit_port_forward"
-                android:layout_width="match_parent"
-                android:layout_height="wrap_content"
-                android:visibility="gone" />
-
             <include
                 android:id="@+id/tab_content_graphics"
                 layout="@layout/partial_vm_edit_graphics"
diff --git a/app/src/main/res/layout/activity_vm_info.xml b/app/src/main/res/layout/activity_vm_info.xml
index 1acf393f1..4c64d37f8 100644
--- a/app/src/main/res/layout/activity_vm_info.xml
+++ b/app/src/main/res/layout/activity_vm_info.xml
@@ -312,17 +312,6 @@
                     android:textColor="?attr/colorOnSurfaceVariant"
                     android:textSize="14sp" />
 
-                <com.google.android.material.button.MaterialButton
-                    android:id="@+id/btn_pf_edit"
-                    style="@style/Widget.Material3.Button.TonalButton"
-                    android:layout_width="wrap_content"
-                    android:layout_height="wrap_content"
-                    android:layout_marginStart="16dp"
-                    android:layout_marginEnd="16dp"
-                    android:layout_marginBottom="8dp"
-                    android:text="@string/vm_info_pf_edit"
-                    app:icon="@drawable/ic_edit" />
-
             </cn.classfun.droidvm.ui.widgets.container.CollapsibleContainer>
 
             <Space
diff --git a/app/src/main/res/layout/dialog_port_forward_edit.xml b/app/src/main/res/layout/dialog_port_forward_edit.xml
deleted file mode 100644
index cdaa096d6..000000000
--- a/app/src/main/res/layout/dialog_port_forward_edit.xml
+++ /dev/null
@@ -1,16 +0,0 @@
-<?xml version="1.0" encoding="utf-8"?>
-<ScrollView xmlns:android="http://schemas.android.com/apk/res/android"
-    android:layout_width="match_parent"
-    android:layout_height="wrap_content"
-    android:paddingTop="8dp"
-    android:paddingBottom="8dp">
-
-    <cn.classfun.droidvm.ui.widgets.container.CardItemListView
-        android:id="@+id/list_port_forwards"
-        android:layout_width="match_parent"
-        android:layout_height="wrap_content"
-        android:hint="@string/edit_vm_pf_empty"
-        android:icon="@drawable/ic_add"
-        android:text="@string/edit_vm_pf_add" />
-
-</ScrollView>
diff --git a/app/src/main/res/layout/item_network_pd.xml b/app/src/main/res/layout/item_network_pd.xml
new file mode 100644
index 000000000..e917f43ef
--- /dev/null
+++ b/app/src/main/res/layout/item_network_pd.xml
@@ -0,0 +1,71 @@
+<?xml version="1.0" encoding="utf-8"?>
+<LinearLayout xmlns:android="http://schemas.android.com/apk/res/android"
+    xmlns:app="http://schemas.android.com/apk/res-auto"
+    android:layout_width="match_parent"
+    android:layout_height="wrap_content"
+    android:gravity="center_vertical"
+    android:minHeight="56dp"
+    android:orientation="horizontal"
+    android:paddingStart="16dp"
+    android:paddingTop="8dp"
+    android:paddingEnd="8dp"
+    android:paddingBottom="8dp">
+
+    <ImageView
+        android:id="@+id/iv_icon"
+        android:layout_width="24dp"
+        android:layout_height="24dp"
+        android:contentDescription="@null"
+        android:src="@drawable/ic_ip_network"
+        app:tint="?attr/colorOnSurfaceVariant" />
+
+    <LinearLayout
+        android:layout_width="0dp"
+        android:layout_height="wrap_content"
+        android:layout_marginStart="16dp"
+        android:layout_weight="1"
+        android:orientation="vertical">
+
+        <TextView
+            android:id="@+id/tv_line1"
+            android:layout_width="wrap_content"
+            android:layout_height="wrap_content"
+            android:textSize="15sp" />
+
+        <TextView
+            android:id="@+id/tv_line2"
+            android:layout_width="wrap_content"
+            android:layout_height="wrap_content"
+            android:layout_marginTop="2dp"
+            android:textColor="?attr/colorOnSurfaceVariant"
+            android:textSize="13sp" />
+
+    </LinearLayout>
+
+    <com.google.android.material.button.MaterialButton
+        android:id="@+id/btn_release"
+        style="@style/Widget.Material3.Button.TextButton"
+        android:layout_width="wrap_content"
+        android:layout_height="wrap_content"
+        android:insetTop="0dp"
+        android:insetBottom="0dp"
+        android:minWidth="0dp"
+        android:paddingStart="10dp"
+        android:paddingEnd="10dp"
+        android:text="@string/network_info_pd_release"
+        android:textSize="12sp" />
+
+    <com.google.android.material.button.MaterialButton
+        android:id="@+id/btn_renew"
+        style="@style/Widget.Material3.Button.TonalButton"
+        android:layout_width="wrap_content"
+        android:layout_height="wrap_content"
+        android:insetTop="0dp"
+        android:insetBottom="0dp"
+        android:minWidth="0dp"
+        android:paddingStart="12dp"
+        android:paddingEnd="12dp"
+        android:text="@string/network_info_pd_renew"
+        android:textSize="12sp" />
+
+</LinearLayout>
diff --git a/app/src/main/res/layout/item_network_vlan.xml b/app/src/main/res/layout/item_network_vlan.xml
new file mode 100644
index 000000000..2888f98c8
--- /dev/null
+++ b/app/src/main/res/layout/item_network_vlan.xml
@@ -0,0 +1,367 @@
+<?xml version="1.0" encoding="utf-8"?>
+<com.google.android.material.card.MaterialCardView xmlns:android="http://schemas.android.com/apk/res/android"
+    xmlns:app="http://schemas.android.com/apk/res-auto"
+    xmlns:tools="http://schemas.android.com/tools"
+    android:layout_width="match_parent"
+    android:layout_height="wrap_content"
+    android:layout_marginStart="16dp"
+    android:layout_marginEnd="16dp"
+    android:layout_marginBottom="8dp"
+    app:cardCornerRadius="12dp"
+    app:cardElevation="0dp"
+    app:strokeColor="?attr/colorOutlineVariant"
+    app:strokeWidth="1dp">
+
+    <LinearLayout
+        android:layout_width="match_parent"
+        android:layout_height="wrap_content"
+        android:orientation="vertical"
+        android:padding="12dp">
+
+        <LinearLayout
+            android:layout_width="match_parent"
+            android:layout_height="wrap_content"
+            android:gravity="center_vertical"
+            android:orientation="horizontal">
+
+            <TextView
+                android:id="@+id/tv_vlan_title"
+                android:layout_width="0dp"
+                android:layout_height="wrap_content"
+                android:layout_weight="1"
+                android:text="@string/network_edit_vlan_untagged"
+                android:textAppearance="?attr/textAppearanceTitleMedium" />
+
+            <com.google.android.material.textfield.TextInputLayout
+                android:id="@+id/til_vlan_id"
+                style="@style/Widget.Material3.TextInputLayout.OutlinedBox.Dense"
+                android:layout_width="110dp"
+                android:layout_height="wrap_content"
+                android:hint="@string/network_edit_vlan_id">
+
+                <com.google.android.material.textfield.TextInputEditText
+                    android:id="@+id/et_vlan_id"
+                    android:layout_width="match_parent"
+                    android:layout_height="wrap_content"
+                    android:inputType="number"
+                    android:textSize="13sp"
+                    tools:ignore="VisualLintTextFieldSize" />
+
+            </com.google.android.material.textfield.TextInputLayout>
+
+            <ImageButton
+                android:id="@+id/btn_vlan_delete"
+                android:layout_width="36dp"
+                android:layout_height="36dp"
+                android:layout_marginStart="4dp"
+                android:background="?attr/selectableItemBackgroundBorderless"
+                android:contentDescription="@string/network_edit_remove_vlan"
+                android:src="@drawable/ic_delete"
+                app:tint="?attr/colorError"
+                tools:ignore="TouchTargetSizeCheck" />
+
+        </LinearLayout>
+
+        <TextView
+            android:layout_width="match_parent"
+            android:layout_height="wrap_content"
+            android:layout_marginTop="8dp"
+            android:text="@string/network_edit_vlan_ipv4"
+            android:textAppearance="?attr/textAppearanceLabelLarge"
+            android:textColor="?attr/colorPrimary" />
+
+        <com.google.android.material.textfield.TextInputLayout
+            android:id="@+id/til_v4_cidr"
+            style="@style/Widget.Material3.TextInputLayout.OutlinedBox.Dense"
+            android:layout_width="match_parent"
+            android:layout_height="wrap_content"
+            android:layout_marginTop="6dp"
+            android:hint="@string/network_edit_vlan_v4_cidr">
+
+            <com.google.android.material.textfield.TextInputEditText
+                android:id="@+id/et_v4_cidr"
+                android:layout_width="match_parent"
+                android:layout_height="wrap_content"
+                android:inputType="textNoSuggestions"
+                android:textSize="13sp"
+                tools:ignore="VisualLintTextFieldSize" />
+
+        </com.google.android.material.textfield.TextInputLayout>
+
+        <com.google.android.material.materialswitch.MaterialSwitch
+            android:id="@+id/sw_v4_snat"
+            android:layout_width="match_parent"
+            android:layout_height="wrap_content"
+            android:text="@string/network_edit_vlan_v4_snat"
+            android:textSize="14sp" />
+
+        <com.google.android.material.materialswitch.MaterialSwitch
+            android:id="@+id/sw_v4_dhcp"
+            android:layout_width="match_parent"
+            android:layout_height="wrap_content"
+            android:text="@string/network_edit_vlan_v4_dhcp"
+            android:textSize="14sp" />
+
+        <LinearLayout
+            android:id="@+id/group_v4_dhcp"
+            android:layout_width="match_parent"
+            android:layout_height="wrap_content"
+            android:orientation="horizontal"
+            android:visibility="gone">
+
+            <com.google.android.material.textfield.TextInputLayout
+                style="@style/Widget.Material3.TextInputLayout.OutlinedBox.Dense"
+                android:layout_width="0dp"
+                android:layout_height="wrap_content"
+                android:layout_marginEnd="4dp"
+                android:layout_weight="1"
+                android:hint="@string/network_edit_vlan_offset_start">
+
+                <com.google.android.material.textfield.TextInputEditText
+                    android:id="@+id/et_v4_offset_start"
+                    android:layout_width="match_parent"
+                    android:layout_height="wrap_content"
+                    android:inputType="number"
+                    android:textSize="13sp"
+                    tools:ignore="VisualLintTextFieldSize" />
+
+            </com.google.android.material.textfield.TextInputLayout>
+
+            <com.google.android.material.textfield.TextInputLayout
+                style="@style/Widget.Material3.TextInputLayout.OutlinedBox.Dense"
+                android:layout_width="0dp"
+                android:layout_height="wrap_content"
+                android:layout_marginStart="4dp"
+                android:layout_weight="1"
+                android:hint="@string/network_edit_vlan_offset_end">
+
+                <com.google.android.material.textfield.TextInputEditText
+                    android:id="@+id/et_v4_offset_end"
+                    android:layout_width="match_parent"
+                    android:layout_height="wrap_content"
+                    android:inputType="number"
+                    android:textSize="13sp"
+                    tools:ignore="VisualLintTextFieldSize" />
+
+            </com.google.android.material.textfield.TextInputLayout>
+
+        </LinearLayout>
+
+        <TextView
+            android:layout_width="match_parent"
+            android:layout_height="wrap_content"
+            android:layout_marginTop="10dp"
+            android:text="@string/network_edit_vlan_ipv6"
+            android:textAppearance="?attr/textAppearanceLabelLarge"
+            android:textColor="?attr/colorPrimary" />
+
+        <com.google.android.material.textfield.TextInputLayout
+            android:id="@+id/til_v6_source"
+            style="@style/Widget.Material3.TextInputLayout.OutlinedBox.Dense.ExposedDropdownMenu"
+            android:layout_width="match_parent"
+            android:layout_height="wrap_content"
+            android:layout_marginTop="6dp"
+            android:hint="@string/network_edit_vlan_v6_source">
+
+            <AutoCompleteTextView
+                android:id="@+id/dd_v6_source"
+                android:layout_width="match_parent"
+                android:layout_height="wrap_content"
+                android:inputType="none"
+                android:textSize="13sp"
+                tools:ignore="LabelFor,VisualLintTextFieldSize" />
+
+        </com.google.android.material.textfield.TextInputLayout>
+
+        <com.google.android.material.textfield.TextInputLayout
+            android:id="@+id/til_v6_cidr"
+            style="@style/Widget.Material3.TextInputLayout.OutlinedBox.Dense"
+            android:layout_width="match_parent"
+            android:layout_height="wrap_content"
+            android:layout_marginTop="6dp"
+            android:hint="@string/network_edit_vlan_v6_cidr">
+
+            <com.google.android.material.textfield.TextInputEditText
+                android:id="@+id/et_v6_cidr"
+                android:layout_width="match_parent"
+                android:layout_height="wrap_content"
+                android:inputType="textNoSuggestions"
+                android:textSize="13sp"
+                tools:ignore="VisualLintTextFieldSize" />
+
+        </com.google.android.material.textfield.TextInputLayout>
+
+        <LinearLayout
+            android:id="@+id/group_v6_pd"
+            android:layout_width="match_parent"
+            android:layout_height="wrap_content"
+            android:orientation="vertical"
+            android:visibility="gone">
+
+            <com.google.android.material.textfield.TextInputLayout
+                android:id="@+id/til_pd_uplink"
+                style="@style/Widget.Material3.TextInputLayout.OutlinedBox.Dense.ExposedDropdownMenu"
+                android:layout_width="match_parent"
+                android:layout_height="wrap_content"
+                android:layout_marginTop="6dp"
+                android:hint="@string/network_edit_vlan_pd_uplink">
+
+                <AutoCompleteTextView
+                    android:id="@+id/dd_pd_uplink"
+                    android:layout_width="match_parent"
+                    android:layout_height="wrap_content"
+                    android:textSize="13sp"
+                    tools:ignore="LabelFor,VisualLintTextFieldSize" />
+
+            </com.google.android.material.textfield.TextInputLayout>
+
+            <com.google.android.material.textfield.TextInputLayout
+                style="@style/Widget.Material3.TextInputLayout.OutlinedBox.Dense"
+                android:layout_width="match_parent"
+                android:layout_height="wrap_content"
+                android:layout_marginTop="6dp"
+                android:hint="@string/network_edit_vlan_pd_duid">
+
+                <com.google.android.material.textfield.TextInputEditText
+                    android:id="@+id/et_pd_duid"
+                    android:layout_width="match_parent"
+                    android:layout_height="wrap_content"
+                    android:inputType="textNoSuggestions"
+                    android:textSize="13sp"
+                    tools:ignore="VisualLintTextFieldSize" />
+
+            </com.google.android.material.textfield.TextInputLayout>
+
+        </LinearLayout>
+
+        <com.google.android.material.materialswitch.MaterialSwitch
+            android:id="@+id/sw_v6_snat"
+            android:layout_width="match_parent"
+            android:layout_height="wrap_content"
+            android:text="@string/network_edit_vlan_v6_snat"
+            android:textSize="14sp" />
+
+        <com.google.android.material.materialswitch.MaterialSwitch
+            android:id="@+id/sw_v6_dhcp"
+            android:layout_width="match_parent"
+            android:layout_height="wrap_content"
+            android:text="@string/network_edit_vlan_v6_dhcp"
+            android:textSize="14sp" />
+
+        <LinearLayout
+            android:id="@+id/group_v6_dhcp"
+            android:layout_width="match_parent"
+            android:layout_height="wrap_content"
+            android:orientation="horizontal"
+            android:visibility="gone">
+
+            <com.google.android.material.textfield.TextInputLayout
+                style="@style/Widget.Material3.TextInputLayout.OutlinedBox.Dense"
+                android:layout_width="0dp"
+                android:layout_height="wrap_content"
+                android:layout_marginEnd="4dp"
+                android:layout_weight="1"
+                android:hint="@string/network_edit_vlan_offset_start">
+
+                <com.google.android.material.textfield.TextInputEditText
+                    android:id="@+id/et_v6_offset_start"
+                    android:layout_width="match_parent"
+                    android:layout_height="wrap_content"
+                    android:inputType="number"
+                    android:textSize="13sp"
+                    tools:ignore="VisualLintTextFieldSize" />
+
+            </com.google.android.material.textfield.TextInputLayout>
+
+            <com.google.android.material.textfield.TextInputLayout
+                style="@style/Widget.Material3.TextInputLayout.OutlinedBox.Dense"
+                android:layout_width="0dp"
+                android:layout_height="wrap_content"
+                android:layout_marginStart="4dp"
+                android:layout_weight="1"
+                android:hint="@string/network_edit_vlan_offset_end">
+
+                <com.google.android.material.textfield.TextInputEditText
+                    android:id="@+id/et_v6_offset_end"
+                    android:layout_width="match_parent"
+                    android:layout_height="wrap_content"
+                    android:inputType="number"
+                    android:textSize="13sp"
+                    tools:ignore="VisualLintTextFieldSize" />
+
+            </com.google.android.material.textfield.TextInputLayout>
+
+        </LinearLayout>
+
+        <com.google.android.material.materialswitch.MaterialSwitch
+            android:id="@+id/sw_v6_slaac"
+            android:layout_width="match_parent"
+            android:layout_height="wrap_content"
+            android:text="@string/network_edit_vlan_slaac"
+            android:textSize="14sp" />
+
+        <TextView
+            android:layout_width="match_parent"
+            android:layout_height="wrap_content"
+            android:layout_marginTop="10dp"
+            android:text="@string/network_edit_vlan_advanced"
+            android:textAppearance="?attr/textAppearanceLabelLarge"
+            android:textColor="?attr/colorPrimary" />
+
+        <com.google.android.material.textfield.TextInputLayout
+            android:id="@+id/til_v4_secondary"
+            style="@style/Widget.Material3.TextInputLayout.OutlinedBox.Dense"
+            android:layout_width="match_parent"
+            android:layout_height="wrap_content"
+            android:layout_marginTop="6dp"
+            android:hint="@string/network_edit_vlan_v4_secondary">
+
+            <com.google.android.material.textfield.TextInputEditText
+                android:id="@+id/et_v4_secondary"
+                android:layout_width="match_parent"
+                android:layout_height="wrap_content"
+                android:inputType="textNoSuggestions"
+                android:textSize="13sp"
+                tools:ignore="VisualLintTextFieldSize" />
+
+        </com.google.android.material.textfield.TextInputLayout>
+
+        <com.google.android.material.textfield.TextInputLayout
+            android:id="@+id/til_v6_secondary"
+            style="@style/Widget.Material3.TextInputLayout.OutlinedBox.Dense"
+            android:layout_width="match_parent"
+            android:layout_height="wrap_content"
+            android:layout_marginTop="6dp"
+            android:hint="@string/network_edit_vlan_v6_secondary">
+
+            <com.google.android.material.textfield.TextInputEditText
+                android:id="@+id/et_v6_secondary"
+                android:layout_width="match_parent"
+                android:layout_height="wrap_content"
+                android:inputType="textNoSuggestions"
+                android:textSize="13sp"
+                tools:ignore="VisualLintTextFieldSize" />
+
+        </com.google.android.material.textfield.TextInputLayout>
+
+        <com.google.android.material.textfield.TextInputLayout
+            android:id="@+id/til_dns"
+            style="@style/Widget.Material3.TextInputLayout.OutlinedBox.Dense"
+            android:layout_width="match_parent"
+            android:layout_height="wrap_content"
+            android:layout_marginTop="6dp"
+            android:hint="@string/network_edit_vlan_dns">
+
+            <com.google.android.material.textfield.TextInputEditText
+                android:id="@+id/et_dns"
+                android:layout_width="match_parent"
+                android:layout_height="wrap_content"
+                android:inputType="textNoSuggestions"
+                android:textSize="13sp"
+                tools:ignore="VisualLintTextFieldSize" />
+
+        </com.google.android.material.textfield.TextInputLayout>
+
+    </LinearLayout>
+
+</com.google.android.material.card.MaterialCardView>
diff --git a/app/src/main/res/layout/item_port_forward_edit.xml b/app/src/main/res/layout/item_port_forward_edit.xml
deleted file mode 100644
index f5badd167..000000000
--- a/app/src/main/res/layout/item_port_forward_edit.xml
+++ /dev/null
@@ -1,210 +0,0 @@
-<?xml version="1.0" encoding="utf-8"?>
-<com.google.android.material.card.MaterialCardView xmlns:android="http://schemas.android.com/apk/res/android"
-    xmlns:app="http://schemas.android.com/apk/res-auto"
-    xmlns:tools="http://schemas.android.com/tools"
-    android:layout_width="match_parent"
-    android:layout_height="wrap_content"
-    android:layout_marginStart="16dp"
-    android:layout_marginEnd="16dp"
-    android:layout_marginBottom="8dp"
-    app:cardCornerRadius="12dp"
-    app:cardElevation="0dp"
-    app:strokeColor="?attr/colorOutlineVariant"
-    app:strokeWidth="1dp">
-
-    <LinearLayout
-        android:layout_width="match_parent"
-        android:layout_height="wrap_content"
-        android:orientation="vertical"
-        android:padding="12dp">
-
-        <!-- 第 1 行：主机端口 → Guest 端口 + 删除 -->
-        <LinearLayout
-            android:layout_width="match_parent"
-            android:layout_height="wrap_content"
-            android:gravity="center_vertical"
-            android:orientation="horizontal">
-
-            <ImageView
-                android:layout_width="24dp"
-                android:layout_height="24dp"
-                android:contentDescription="@string/create_vm_category_port_forward"
-                android:src="@drawable/ic_arrow_forward"
-                app:tint="?attr/colorOnSurfaceVariant" />
-
-            <com.google.android.material.textfield.TextInputLayout
-                android:id="@+id/til_pf_host_port"
-                style="@style/Widget.Material3.TextInputLayout.OutlinedBox.Dense"
-                android:layout_width="0dp"
-                android:layout_height="wrap_content"
-                android:layout_marginStart="12dp"
-                android:layout_weight="1"
-                android:hint="@string/edit_vm_pf_host_port">
-
-                <com.google.android.material.textfield.TextInputEditText
-                    android:id="@+id/et_pf_host_port"
-                    android:layout_width="match_parent"
-                    android:layout_height="wrap_content"
-                    android:inputType="number"
-                    android:maxLength="5"
-                    android:maxLines="1"
-                    android:textSize="14sp"
-                    tools:ignore="TextContrastCheck,VisualLintTextFieldSize" />
-
-            </com.google.android.material.textfield.TextInputLayout>
-
-            <TextView
-                android:layout_width="wrap_content"
-                android:layout_height="wrap_content"
-                android:layout_marginStart="8dp"
-                android:layout_marginEnd="8dp"
-                android:text="@string/edit_vm_pf_arrow"
-                android:textColor="?attr/colorOnSurfaceVariant"
-                android:textSize="16sp" />
-
-            <com.google.android.material.textfield.TextInputLayout
-                android:id="@+id/til_pf_guest_port"
-                style="@style/Widget.Material3.TextInputLayout.OutlinedBox.Dense"
-                android:layout_width="0dp"
-                android:layout_height="wrap_content"
-                android:layout_weight="1"
-                android:hint="@string/edit_vm_pf_guest_port">
-
-                <com.google.android.material.textfield.TextInputEditText
-                    android:id="@+id/et_pf_guest_port"
-                    android:layout_width="match_parent"
-                    android:layout_height="wrap_content"
-                    android:inputType="number"
-                    android:maxLength="5"
-                    android:maxLines="1"
-                    android:textSize="14sp"
-                    tools:ignore="TextContrastCheck,VisualLintTextFieldSize" />
-
-            </com.google.android.material.textfield.TextInputLayout>
-
-            <ImageButton
-                android:id="@+id/btn_pf_delete"
-                android:layout_width="36dp"
-                android:layout_height="36dp"
-                android:layout_marginStart="4dp"
-                android:background="?attr/selectableItemBackgroundBorderless"
-                android:contentDescription="@string/edit_vm_pf_delete"
-                android:src="@drawable/ic_delete"
-                app:tint="?attr/colorError"
-                tools:ignore="TouchTargetSizeCheck" />
-
-        </LinearLayout>
-
-        <!-- 第 2 行：协议 + 高级 + 启用开关 -->
-        <LinearLayout
-            android:layout_width="match_parent"
-            android:layout_height="wrap_content"
-            android:layout_marginTop="8dp"
-            android:gravity="center_vertical"
-            android:orientation="horizontal">
-
-            <cn.classfun.droidvm.ui.widgets.tools.PickerButtonWidget
-                android:id="@+id/btn_pf_protocol"
-                android:layout_width="wrap_content"
-                android:layout_height="48dp"
-                android:title="@string/edit_vm_pf_protocol"
-                app:pb_mode="dialog" />
-
-            <Space
-                android:layout_width="0dp"
-                android:layout_height="wrap_content"
-                android:layout_weight="1" />
-
-            <com.google.android.material.button.MaterialButton
-                android:id="@+id/btn_pf_advanced"
-                style="@style/Widget.Material3.Button.TextButton.Icon"
-                android:layout_width="wrap_content"
-                android:layout_height="wrap_content"
-                android:minWidth="0dp"
-                android:text="@string/edit_vm_pf_advanced"
-                android:textSize="12sp"
-                app:icon="@drawable/ic_expand_more"
-                app:iconSize="18dp"
-                tools:ignore="TouchTargetSizeCheck" />
-
-            <TextView
-                android:layout_width="wrap_content"
-                android:layout_height="wrap_content"
-                android:layout_marginStart="8dp"
-                android:labelFor="@id/switch_pf_enabled"
-                android:text="@string/edit_vm_pf_enabled"
-                android:textSize="14sp" />
-
-            <com.google.android.material.materialswitch.MaterialSwitch
-                android:id="@+id/switch_pf_enabled"
-                android:layout_width="wrap_content"
-                android:layout_height="wrap_content"
-                android:layout_marginStart="8dp" />
-
-        </LinearLayout>
-
-        <!-- 第 3 段：高级选项（默认折叠） -->
-        <LinearLayout
-            android:id="@+id/layout_pf_advanced"
-            android:layout_width="match_parent"
-            android:layout_height="wrap_content"
-            android:layout_marginTop="4dp"
-            android:orientation="vertical"
-            android:visibility="gone">
-
-            <com.google.android.material.textfield.TextInputLayout
-                android:id="@+id/til_pf_host_ip"
-                style="@style/Widget.Material3.TextInputLayout.OutlinedBox.Dense"
-                android:layout_width="match_parent"
-                android:layout_height="wrap_content"
-                android:layout_marginTop="4dp"
-                android:hint="@string/edit_vm_pf_host_ip">
-
-                <com.google.android.material.textfield.TextInputEditText
-                    android:id="@+id/et_pf_host_ip"
-                    android:layout_width="match_parent"
-                    android:layout_height="wrap_content"
-                    android:inputType="textNoSuggestions"
-                    android:maxLines="1"
-                    android:textSize="14sp"
-                    tools:ignore="TextContrastCheck,VisualLintTextFieldSize" />
-
-            </com.google.android.material.textfield.TextInputLayout>
-
-            <com.google.android.material.button.MaterialButton
-                android:id="@+id/btn_pf_network"
-                style="@style/Widget.Material3.Button.TonalButton"
-                android:layout_width="match_parent"
-                android:layout_height="wrap_content"
-                android:layout_marginTop="8dp"
-                android:gravity="start|center_vertical"
-                android:text="@string/create_vm_network_none"
-                android:textSize="12sp"
-                app:icon="@drawable/ic_ethernet"
-                app:iconSize="18dp"
-                tools:ignore="VisualLintButtonSize" />
-
-            <com.google.android.material.textfield.TextInputLayout
-                android:id="@+id/til_pf_guest_ip"
-                style="@style/Widget.Material3.TextInputLayout.OutlinedBox.Dense"
-                android:layout_width="match_parent"
-                android:layout_height="wrap_content"
-                android:layout_marginTop="8dp"
-                android:hint="@string/edit_vm_pf_guest_ip">
-
-                <com.google.android.material.textfield.TextInputEditText
-                    android:id="@+id/et_pf_guest_ip"
-                    android:layout_width="match_parent"
-                    android:layout_height="wrap_content"
-                    android:inputType="textNoSuggestions"
-                    android:maxLines="1"
-                    android:textSize="14sp"
-                    tools:ignore="TextContrastCheck,VisualLintTextFieldSize" />
-
-            </com.google.android.material.textfield.TextInputLayout>
-
-        </LinearLayout>
-
-    </LinearLayout>
-
-</com.google.android.material.card.MaterialCardView>
diff --git a/app/src/main/res/layout/item_vm_net_edit.xml b/app/src/main/res/layout/item_vm_net_edit.xml
index a0b8c4bae..9113af33c 100644
--- a/app/src/main/res/layout/item_vm_net_edit.xml
+++ b/app/src/main/res/layout/item_vm_net_edit.xml
@@ -93,6 +93,226 @@
 
         </LinearLayout>
 
+        <com.google.android.material.materialswitch.MaterialSwitch
+            android:id="@+id/sw_nic_mac_security"
+            android:layout_width="match_parent"
+            android:layout_height="wrap_content"
+            android:text="@string/edit_vm_net_mac_security"
+            android:textSize="14sp" />
+
+        <com.google.android.material.materialswitch.MaterialSwitch
+            android:id="@+id/sw_nic_isolated"
+            android:layout_width="match_parent"
+            android:layout_height="wrap_content"
+            android:text="@string/edit_vm_net_isolated"
+            android:textSize="14sp" />
+
+        <LinearLayout
+            android:layout_width="match_parent"
+            android:layout_height="wrap_content"
+            android:gravity="center_vertical"
+            android:orientation="horizontal">
+
+            <TextView
+                android:layout_width="0dp"
+                android:layout_height="wrap_content"
+                android:layout_weight="1"
+                android:text="@string/edit_vm_net_vlan"
+                android:textSize="14sp" />
+
+            <com.google.android.material.textfield.TextInputLayout
+                android:id="@+id/til_nic_vlan"
+                style="@style/Widget.Material3.TextInputLayout.OutlinedBox.Dense"
+                android:layout_width="110dp"
+                android:layout_height="wrap_content"
+                android:hint="@string/edit_vm_net_vlan_id">
+
+                <com.google.android.material.textfield.TextInputEditText
+                    android:id="@+id/et_nic_vlan"
+                    android:layout_width="match_parent"
+                    android:layout_height="wrap_content"
+                    android:inputType="number"
+                    android:textSize="12sp"
+                    tools:ignore="VisualLintTextFieldSize" />
+
+            </com.google.android.material.textfield.TextInputLayout>
+
+            <com.google.android.material.materialswitch.MaterialSwitch
+                android:id="@+id/sw_nic_vlan"
+                android:layout_width="wrap_content"
+                android:layout_height="wrap_content"
+                android:layout_marginStart="8dp" />
+
+        </LinearLayout>
+
+        <LinearLayout
+            android:id="@+id/group_nic_dhcp4"
+            android:layout_width="match_parent"
+            android:layout_height="wrap_content"
+            android:orientation="vertical"
+            android:visibility="gone">
+
+            <LinearLayout
+                android:layout_width="match_parent"
+                android:layout_height="wrap_content"
+                android:gravity="center_vertical"
+                android:orientation="horizontal">
+
+                <TextView
+                    android:layout_width="0dp"
+                    android:layout_height="wrap_content"
+                    android:layout_weight="1"
+                    android:text="@string/edit_vm_net_dhcp4_lease"
+                    android:textSize="14sp" />
+
+                <com.google.android.material.textfield.TextInputLayout
+                    android:id="@+id/til_nic_dhcp4_offset"
+                    style="@style/Widget.Material3.TextInputLayout.OutlinedBox.Dense"
+                    android:layout_width="110dp"
+                    android:layout_height="wrap_content"
+                    android:hint="@string/edit_vm_net_lease_offset">
+
+                    <com.google.android.material.textfield.TextInputEditText
+                        android:id="@+id/et_nic_dhcp4_offset"
+                        android:layout_width="match_parent"
+                        android:layout_height="wrap_content"
+                        android:inputType="number"
+                        android:textSize="12sp"
+                        tools:ignore="VisualLintTextFieldSize" />
+
+                </com.google.android.material.textfield.TextInputLayout>
+
+                <com.google.android.material.materialswitch.MaterialSwitch
+                    android:id="@+id/sw_nic_dhcp4"
+                    android:layout_width="wrap_content"
+                    android:layout_height="wrap_content"
+                    android:layout_marginStart="8dp" />
+
+            </LinearLayout>
+
+            <TextView
+                android:id="@+id/tv_nic_dhcp4_hint"
+                android:layout_width="match_parent"
+                android:layout_height="wrap_content"
+                android:textColor="?attr/colorOnSurfaceVariant"
+                android:textSize="12sp"
+                android:visibility="gone" />
+
+            <LinearLayout
+                android:id="@+id/group_nic_dhcp4_detail"
+                android:layout_width="match_parent"
+                android:layout_height="wrap_content"
+                android:orientation="vertical"
+                android:visibility="gone">
+
+                <com.google.android.material.textfield.TextInputLayout
+                    android:id="@+id/til_nic_fwd4"
+                    style="@style/Widget.Material3.TextInputLayout.OutlinedBox.Dense"
+                    android:layout_width="match_parent"
+                    android:layout_height="wrap_content"
+                    android:layout_marginTop="4dp"
+                    android:hint="@string/edit_vm_net_forwards">
+
+                    <com.google.android.material.textfield.TextInputEditText
+                        android:id="@+id/et_nic_fwd4"
+                        android:layout_width="match_parent"
+                        android:layout_height="wrap_content"
+                        android:gravity="top"
+                        android:inputType="textMultiLine|textNoSuggestions"
+                        android:minLines="1"
+                        android:textSize="12sp"
+                        tools:ignore="VisualLintTextFieldSize" />
+
+                </com.google.android.material.textfield.TextInputLayout>
+
+            </LinearLayout>
+
+        </LinearLayout>
+
+        <LinearLayout
+            android:id="@+id/group_nic_dhcp6"
+            android:layout_width="match_parent"
+            android:layout_height="wrap_content"
+            android:orientation="vertical"
+            android:visibility="gone">
+
+            <LinearLayout
+                android:layout_width="match_parent"
+                android:layout_height="wrap_content"
+                android:gravity="center_vertical"
+                android:orientation="horizontal">
+
+                <TextView
+                    android:layout_width="0dp"
+                    android:layout_height="wrap_content"
+                    android:layout_weight="1"
+                    android:text="@string/edit_vm_net_dhcp6_lease"
+                    android:textSize="14sp" />
+
+                <com.google.android.material.textfield.TextInputLayout
+                    android:id="@+id/til_nic_dhcp6_offset"
+                    style="@style/Widget.Material3.TextInputLayout.OutlinedBox.Dense"
+                    android:layout_width="110dp"
+                    android:layout_height="wrap_content"
+                    android:hint="@string/edit_vm_net_lease_offset">
+
+                    <com.google.android.material.textfield.TextInputEditText
+                        android:id="@+id/et_nic_dhcp6_offset"
+                        android:layout_width="match_parent"
+                        android:layout_height="wrap_content"
+                        android:inputType="number"
+                        android:textSize="12sp"
+                        tools:ignore="VisualLintTextFieldSize" />
+
+                </com.google.android.material.textfield.TextInputLayout>
+
+                <com.google.android.material.materialswitch.MaterialSwitch
+                    android:id="@+id/sw_nic_dhcp6"
+                    android:layout_width="wrap_content"
+                    android:layout_height="wrap_content"
+                    android:layout_marginStart="8dp" />
+
+            </LinearLayout>
+
+            <TextView
+                android:id="@+id/tv_nic_dhcp6_hint"
+                android:layout_width="match_parent"
+                android:layout_height="wrap_content"
+                android:textColor="?attr/colorOnSurfaceVariant"
+                android:textSize="12sp"
+                android:visibility="gone" />
+
+            <LinearLayout
+                android:id="@+id/group_nic_dhcp6_detail"
+                android:layout_width="match_parent"
+                android:layout_height="wrap_content"
+                android:orientation="vertical"
+                android:visibility="gone">
+
+                <com.google.android.material.textfield.TextInputLayout
+                    android:id="@+id/til_nic_fwd6"
+                    style="@style/Widget.Material3.TextInputLayout.OutlinedBox.Dense"
+                    android:layout_width="match_parent"
+                    android:layout_height="wrap_content"
+                    android:layout_marginTop="4dp"
+                    android:hint="@string/edit_vm_net_forwards">
+
+                    <com.google.android.material.textfield.TextInputEditText
+                        android:id="@+id/et_nic_fwd6"
+                        android:layout_width="match_parent"
+                        android:layout_height="wrap_content"
+                        android:gravity="top"
+                        android:inputType="textMultiLine|textNoSuggestions"
+                        android:minLines="1"
+                        android:textSize="12sp"
+                        tools:ignore="VisualLintTextFieldSize" />
+
+                </com.google.android.material.textfield.TextInputLayout>
+
+            </LinearLayout>
+
+        </LinearLayout>
+
     </LinearLayout>
 
 </com.google.android.material.card.MaterialCardView>
diff --git a/app/src/main/res/layout/partial_vm_edit_port_forward.xml b/app/src/main/res/layout/partial_vm_edit_port_forward.xml
deleted file mode 100644
index dd5f659db..000000000
--- a/app/src/main/res/layout/partial_vm_edit_port_forward.xml
+++ /dev/null
@@ -1,22 +0,0 @@
-<?xml version="1.0" encoding="utf-8"?>
-<LinearLayout xmlns:android="http://schemas.android.com/apk/res/android"
-    android:layout_width="match_parent"
-    android:layout_height="wrap_content"
-    android:orientation="vertical">
-
-    <cn.classfun.droidvm.ui.widgets.container.CollapsibleContainer
-        android:layout_width="match_parent"
-        android:layout_height="wrap_content"
-        android:title="@string/create_vm_category_port_forward">
-
-        <cn.classfun.droidvm.ui.widgets.container.CardItemListView
-            android:id="@+id/list_port_forwards"
-            android:layout_width="match_parent"
-            android:layout_height="wrap_content"
-            android:hint="@string/edit_vm_pf_empty"
-            android:icon="@drawable/ic_add"
-            android:text="@string/edit_vm_pf_add" />
-
-    </cn.classfun.droidvm.ui.widgets.container.CollapsibleContainer>
-
-</LinearLayout>
diff --git a/app/src/main/res/values-zh-rCN/strings.xml b/app/src/main/res/values-zh-rCN/strings.xml
index 1ba620f12..87df285b1 100644
--- a/app/src/main/res/values-zh-rCN/strings.xml
+++ b/app/src/main/res/values-zh-rCN/strings.xml
@@ -224,26 +224,22 @@
     <string name="edit_vm_net_delete">移除网络</string>
     <string name="edit_vm_net_mac_hint">MAC 地址（可选）</string>
     <string name="edit_vm_net_mac_random">随机</string>
-    <!-- 端口转发 -->
-    <string name="create_vm_tab_port_forward">端口</string>
-    <string name="create_vm_category_port_forward">端口转发</string>
-    <string name="edit_vm_pf_add">添加规则</string>
-    <string name="edit_vm_pf_empty">暂无端口转发规则。</string>
-    <string name="edit_vm_pf_delete">删除规则</string>
-    <string name="edit_vm_pf_protocol">协议</string>
-    <string name="edit_vm_pf_host_port">主机端口</string>
-    <string name="edit_vm_pf_guest_port">Guest 端口</string>
-    <string name="edit_vm_pf_arrow">→</string>
-    <string name="edit_vm_pf_enabled">启用</string>
-    <string name="edit_vm_pf_advanced">高级</string>
-    <string name="edit_vm_pf_host_ip">主机 IP（可选）</string>
-    <string name="edit_vm_pf_guest_ip">Guest IP（留空自动发现）</string>
-    <string name="edit_vm_pf_network">网卡</string>
-    <string name="edit_vm_pf_invalid_port">主机端口须为 1-65535</string>
+    <string name="edit_vm_net_mac_security">源 MAC 過濾</string>
+    <string name="edit_vm_net_isolated">端口隔离</string>
+    <string name="edit_vm_net_vlan">VLAN ID</string>
+    <string name="edit_vm_net_vlan_id">VLAN</string>
+    <string name="edit_vm_net_vlan_no_untagged">Linux 网桥不支持仅未标记(0)端口,请使用标记 VLAN 或 trunk</string>
+    <string name="edit_vm_net_vlan_invalid">VLAN 须为 0–4094,4095 表示 trunk</string>
+    <string name="edit_vm_net_dhcp4_lease">DHCPv4 静态分配</string>
+    <string name="edit_vm_net_dhcp6_lease">DHCPv6 静态分配</string>
+    <string name="edit_vm_net_lease_offset">地址偏移</string>
+    <string name="edit_vm_net_forwards">端口转发（例如 tcp 80:80）</string>
+    <string name="edit_vm_net_forwards_hint">每行一条：[协议] 主机:客户机（不填协议 = tcp+udp），范围如 8000-9000:8000-9000</string>
+    <string name="edit_vm_net_forwards_need_snat">端口转发只在 SNAT 启用时生效</string>
+    <string name="edit_vm_net_dhcp_need_enable">请先启用网络「%2$s」VLAN %3$d 的 DHCPv%1$s</string>
+    <string name="edit_vm_net_dhcp_trunk_note">（VLAN 4095 匹配网络的 VLAN 0）</string>
     <string name="vm_info_port_forwards">端口转发</string>
     <string name="vm_info_pf_none">暂无生效转发</string>
-    <string name="vm_info_pf_edit">编辑转发</string>
-    <string name="edit_vm_pf_apply">应用</string>
     <string name="edit_vm_disk_path_hint">路径</string>
     <string name="edit_vm_disk_readonly">只读</string>
     <string name="edit_vm_disk_bus">总线</string>
@@ -570,7 +566,6 @@
     <string name="download_file_icon_desc">文件图标</string>
     <string name="download_exit_title">正在下载</string>
     <string name="download_exit_message">下载仍在进行中。现在离开将取消下载并删除已下载的部分文件。确定要退出吗？</string>
-
     <string name="vm_state_suspended">已挂起</string>
     <string name="vm_info_state_suspended">虚拟机已挂起</string>
 
@@ -655,6 +650,61 @@
     <string name="network_edit_error_dns_not_added">DNS 服务器输入框不为空，请先添加或清空</string>
     <string name="network_edit_error_dns_invalid">无效的 DNS 服务器地址</string>
     <string name="network_edit_error_dns_empty">至少需要一个 DNS 服务器</string>
+    <string name="network_edit_save">保存网络</string>
+    <string name="network_edit_running_banner">网络正在运行，请先停止后再编辑。</string>
+    <string name="network_edit_bridge_type">网桥类型</string>
+    <string name="network_edit_bridge_type_linux">Linux 网桥</string>
+    <string name="network_edit_bridge_type_gvisor">gVisor 网桥</string>
+    <string name="network_edit_uplink_mode">外网连接</string>
+    <string name="network_edit_uplink_l2">二层桥接</string>
+    <string name="network_edit_uplink_l3">三层路由</string>
+    <string name="network_edit_uplink_none">无（虚拟机内网）</string>
+    <string name="network_edit_category_l2">二层桥接</string>
+    <string name="network_edit_category_l3">三层路由</string>
+    <string name="network_edit_l2_uplink">上游接口</string>
+    <string name="network_edit_pseudo_bridge">伪桥接</string>
+    <string name="network_edit_uplink_wifi">Wi-Fi</string>
+    <string name="network_edit_uplink_ethernet">以太网</string>
+    <string name="network_edit_uplink_tethering">网络共享</string>
+    <string name="network_edit_uplink_unavailable">不可用</string>
+    <string name="network_edit_uplink_identifier">%1$s (%2$s)</string>
+    <string name="network_edit_pseudo_hint_wifi">Wi-Fi 上游无法直接桥接，必须使用伪桥接。</string>
+    <string name="network_edit_pseudo_hint_wired">此上游可直接桥接，伪桥接为可选项。</string>
+    <string name="network_edit_vlan_empty_hint">纯虚拟机内部网络，宿主机不参与。若要参与请添加 VLAN。</string>
+    <string name="network_edit_add_vlan">添加 VLAN</string>
+    <string name="network_edit_remove_vlan">移除 VLAN</string>
+    <string name="network_edit_vlan_untagged">Untagged</string>
+    <string name="network_edit_vlan_title">VLAN</string>
+    <string name="network_edit_vlan_id">VLAN ID</string>
+    <string name="network_edit_vlan_ipv4">主 IPv4 网络</string>
+    <string name="network_edit_vlan_ipv6">主 IPv6 网络</string>
+    <string name="network_edit_vlan_advanced">高级</string>
+    <string name="network_edit_vlan_v4_cidr">IPv4 CIDR（例如 10.181.7.1/24）</string>
+    <string name="network_edit_vlan_v4_snat">IPv4 SNAT</string>
+    <string name="network_edit_vlan_v4_dhcp">DHCPv4</string>
+    <string name="network_edit_vlan_offset_start">地址池偏移起始</string>
+    <string name="network_edit_vlan_offset_end">地址池偏移结束</string>
+    <string name="network_edit_vlan_v6_source">IPv6 来源</string>
+    <string name="network_edit_vlan_v6_static">静态 CIDR</string>
+    <string name="network_edit_vlan_v6_pd">DHCP-PD</string>
+    <string name="network_edit_vlan_v6_cidr">IPv6 CIDR（例如 fd00:7::1/64）</string>
+    <string name="network_edit_vlan_pd_uplink">PD 上游接口</string>
+    <string name="network_edit_vlan_pd_duid">DUID（留空自动生成）</string>
+    <string name="network_edit_vlan_v6_snat">IPv6 SNAT（仅 gVisor 网桥）</string>
+    <string name="network_edit_vlan_v6_dhcp">DHCPv6</string>
+    <string name="network_edit_vlan_slaac">SLAAC（::/64）</string>
+    <string name="network_edit_vlan_v4_secondary">次要 IPv4 网络（逗号分隔）</string>
+    <string name="network_edit_vlan_v6_secondary">次要 IPv6 网络（逗号分隔）</string>
+    <string name="network_edit_vlan_dns">DNS 服务器（留空 = 跟随系统 DNS）</string>
+    <string name="network_edit_error_self_overlap">子网 %1$s 与 %2$s 重叠</string>
+    <string name="network_item_subtitle">%1$s · %2$s</string>
+    <string name="network_info_pbridge">伪桥接（pbridge）</string>
+    <string name="network_info_bridgedhcp">bridgedhcp</string>
+    <string name="network_info_gvswitch">gvswitch</string>
+    <string name="network_info_tool_running">运行中</string>
+    <string name="network_info_tool_stopped">已停止</string>
+    <string name="network_info_tool_view_log">点按查看日志</string>
+    <string name="network_info_tool_log_empty">无日志输出</string>
 
     <string name="network_info_start">启动</string>
     <string name="network_info_stop">停止</string>
@@ -679,7 +729,18 @@
     <string name="network_info_enabled">已启用</string>
     <string name="network_info_disabled">已禁用</string>
     <string name="network_info_no_addresses">无地址</string>
+    <string name="network_info_addr_bound">已绑定</string>
+    <string name="network_info_addr_unbound">未绑定</string>
+    <string name="network_info_addr_source_config">配置</string>
+    <string name="network_info_addr_source_auto">自动</string>
+    <string name="network_info_addr_source_pbridge">伪桥接VM</string>
+    <string name="network_info_pd_label">DHCP-PD</string>
+    <string name="network_info_pd_searching">搜索中…</string>
+    <string name="network_info_pd_no_uplink">上游接口不可用</string>
+    <string name="network_info_pd_release">释放</string>
+    <string name="network_info_pd_renew">更新</string>
     <string name="network_info_no_ports">无已连接端口</string>
+    <string name="network_info_forward_failed">端口转发失败：%1$s</string>
     <string name="network_info_no_leases">无 DHCP 租约</string>
     <string name="network_info_no_neighbors">无邻居</string>
     <string name="network_info_dhcp_expires">到期: %1$s</string>
diff --git a/app/src/main/res/values/strings.xml b/app/src/main/res/values/strings.xml
index 67e7b2cd5..d973861c7 100644
--- a/app/src/main/res/values/strings.xml
+++ b/app/src/main/res/values/strings.xml
@@ -226,26 +226,22 @@
     <string name="edit_vm_net_delete">Remove network</string>
     <string name="edit_vm_net_mac_hint">MAC address (optional)</string>
     <string name="edit_vm_net_mac_random">Random</string>
-    <!-- Port forwarding -->
-    <string name="create_vm_tab_port_forward">Ports</string>
-    <string name="create_vm_category_port_forward">Port Forwarding</string>
-    <string name="edit_vm_pf_add">Add Rule</string>
-    <string name="edit_vm_pf_empty">No port forwarding rules.</string>
-    <string name="edit_vm_pf_delete">Remove rule</string>
-    <string name="edit_vm_pf_protocol">Protocol</string>
-    <string name="edit_vm_pf_host_port">Host Port</string>
-    <string name="edit_vm_pf_guest_port">Guest Port</string>
-    <string name="edit_vm_pf_arrow">→</string>
-    <string name="edit_vm_pf_enabled">Enabled</string>
-    <string name="edit_vm_pf_advanced">Advanced</string>
-    <string name="edit_vm_pf_host_ip">Host IP (optional)</string>
-    <string name="edit_vm_pf_guest_ip">Guest IP (auto if empty)</string>
-    <string name="edit_vm_pf_network">Network</string>
-    <string name="edit_vm_pf_invalid_port">Host port must be 1-65535</string>
+    <string name="edit_vm_net_mac_security">MAC filtering</string>
+    <string name="edit_vm_net_isolated">Isolated</string>
+    <string name="edit_vm_net_vlan">VLAN ID</string>
+    <string name="edit_vm_net_vlan_id">VLAN</string>
+    <string name="edit_vm_net_vlan_no_untagged">Untagged-only (0) ports are not supported on a Linux bridge; use a tagged VLAN or trunk</string>
+    <string name="edit_vm_net_vlan_invalid">VLAN must be 0–4094, or 4095 for trunk</string>
+    <string name="edit_vm_net_dhcp4_lease">DHCPv4 static lease</string>
+    <string name="edit_vm_net_dhcp6_lease">DHCPv6 static lease</string>
+    <string name="edit_vm_net_lease_offset">Address offset</string>
+    <string name="edit_vm_net_forwards">Port forwards (e.g. tcp 80:80)</string>
+    <string name="edit_vm_net_forwards_hint">One per line: [proto] host:guest (no proto = tcp+udp), ranges like 8000-9000:8000-9000</string>
+    <string name="edit_vm_net_forwards_need_snat">Port forwards only take effect with SNAT enabled</string>
+    <string name="edit_vm_net_dhcp_need_enable">Enable DHCPv%1$s on network \"%2$s\" VLAN %3$d first</string>
+    <string name="edit_vm_net_dhcp_trunk_note">" (VLAN 4095 maps to the network\'s VLAN 0)"</string>
     <string name="vm_info_port_forwards">Port Forwarding</string>
     <string name="vm_info_pf_none">No active forwards</string>
-    <string name="vm_info_pf_edit">Edit Forwards</string>
-    <string name="edit_vm_pf_apply">Apply</string>
     <string name="edit_vm_disk_path_hint">Path</string>
     <string name="edit_vm_disk_readonly">Read-only</string>
     <string name="edit_vm_disk_bus">Bus</string>
@@ -607,7 +603,6 @@
     <string name="download_file_icon_desc">File icon</string>
     <string name="download_exit_title">Download in progress</string>
     <string name="download_exit_message">A download is still in progress. Leaving now will cancel it and delete the partial file. Are you sure?</string>
-
     <string name="vm_state_suspended">Suspended</string>
     <string name="vm_info_state_suspended">VM is suspended</string>
 
@@ -693,6 +688,61 @@
     <string name="network_edit_error_dns_not_added">DNS server input is not empty, please add it first or clear the field</string>
     <string name="network_edit_error_dns_invalid">Invalid DNS server address</string>
     <string name="network_edit_error_dns_empty">At least one DNS server is required</string>
+    <string name="network_edit_save">Save network</string>
+    <string name="network_edit_running_banner">This network is running. Stop it before editing.</string>
+    <string name="network_edit_bridge_type">Bridge type</string>
+    <string name="network_edit_bridge_type_linux">Linux bridge</string>
+    <string name="network_edit_bridge_type_gvisor">gVisor bridge</string>
+    <string name="network_edit_uplink_mode">External connectivity</string>
+    <string name="network_edit_uplink_l2">L2 bridging</string>
+    <string name="network_edit_uplink_l3">L3 routing</string>
+    <string name="network_edit_uplink_none">None (VM-internal)</string>
+    <string name="network_edit_category_l2">L2 Bridging</string>
+    <string name="network_edit_category_l3">L3 Routing</string>
+    <string name="network_edit_l2_uplink">Upstream interface</string>
+    <string name="network_edit_pseudo_bridge">Pseudo-bridge</string>
+    <string name="network_edit_uplink_wifi">Wi-Fi</string>
+    <string name="network_edit_uplink_ethernet">Ethernet</string>
+    <string name="network_edit_uplink_tethering">Tethering</string>
+    <string name="network_edit_uplink_unavailable">unavailable</string>
+    <string name="network_edit_uplink_identifier">%1$s (%2$s)</string>
+    <string name="network_edit_pseudo_hint_wifi">Wi-Fi uplinks cannot be bridged directly; the pseudo-bridge is required.</string>
+    <string name="network_edit_pseudo_hint_wired">This uplink can be bridged directly; the pseudo-bridge is optional.</string>
+    <string name="network_edit_vlan_empty_hint">VM-internal network: the host does not participate. Add a VLAN for the host to join.</string>
+    <string name="network_edit_add_vlan">Add VLAN</string>
+    <string name="network_edit_remove_vlan">Remove VLAN</string>
+    <string name="network_edit_vlan_untagged">Untagged</string>
+    <string name="network_edit_vlan_title">VLAN</string>
+    <string name="network_edit_vlan_id">VLAN ID</string>
+    <string name="network_edit_vlan_ipv4">Primary IPv4 Network</string>
+    <string name="network_edit_vlan_ipv6">Primary IPv6 Network</string>
+    <string name="network_edit_vlan_advanced">Advanced</string>
+    <string name="network_edit_vlan_v4_cidr">IPv4 CIDR (e.g. 10.181.7.1/24)</string>
+    <string name="network_edit_vlan_v4_snat">IPv4 SNAT</string>
+    <string name="network_edit_vlan_v4_dhcp">DHCPv4</string>
+    <string name="network_edit_vlan_offset_start">Pool offset start</string>
+    <string name="network_edit_vlan_offset_end">Pool offset end</string>
+    <string name="network_edit_vlan_v6_source">IPv6 source</string>
+    <string name="network_edit_vlan_v6_static">Static CIDR</string>
+    <string name="network_edit_vlan_v6_pd">DHCP-PD</string>
+    <string name="network_edit_vlan_v6_cidr">IPv6 CIDR (e.g. fd00:7::1/64)</string>
+    <string name="network_edit_vlan_pd_uplink">PD upstream interface</string>
+    <string name="network_edit_vlan_pd_duid">DUID (auto-generated when empty)</string>
+    <string name="network_edit_vlan_v6_snat">IPv6 SNAT (gVisor bridge only)</string>
+    <string name="network_edit_vlan_v6_dhcp">DHCPv6</string>
+    <string name="network_edit_vlan_slaac">SLAAC (::/64)</string>
+    <string name="network_edit_vlan_v4_secondary">Secondary IPv4 networks (comma separated)</string>
+    <string name="network_edit_vlan_v6_secondary">Secondary IPv6 networks (comma separated)</string>
+    <string name="network_edit_vlan_dns">DNS servers (empty = follow system DNS)</string>
+    <string name="network_edit_error_self_overlap">Subnets %1$s and %2$s overlap</string>
+    <string name="network_item_subtitle">%1$s · %2$s</string>
+    <string name="network_info_pbridge">Pseudo-bridge (pbridge)</string>
+    <string name="network_info_bridgedhcp">bridgedhcp</string>
+    <string name="network_info_gvswitch">gvswitch</string>
+    <string name="network_info_tool_running">Running</string>
+    <string name="network_info_tool_stopped">Stopped</string>
+    <string name="network_info_tool_view_log">Tap to view log</string>
+    <string name="network_info_tool_log_empty">No log output</string>
 
     <string name="network_info_start">Start</string>
     <string name="network_info_stop">Stop</string>
@@ -718,7 +768,18 @@
     <string name="network_info_enabled">Enabled</string>
     <string name="network_info_disabled">Disabled</string>
     <string name="network_info_no_addresses">No addresses</string>
+    <string name="network_info_addr_bound">Bound</string>
+    <string name="network_info_addr_unbound">Unbound</string>
+    <string name="network_info_addr_source_config">Config</string>
+    <string name="network_info_addr_source_auto">Auto</string>
+    <string name="network_info_addr_source_pbridge">Pseudo-bridge VM</string>
+    <string name="network_info_pd_label">DHCP-PD</string>
+    <string name="network_info_pd_searching">Searching…</string>
+    <string name="network_info_pd_no_uplink">Uplink unavailable</string>
+    <string name="network_info_pd_release">Release</string>
+    <string name="network_info_pd_renew">Renew</string>
     <string name="network_info_no_ports">No ports connected</string>
+    <string name="network_info_forward_failed">Port forward failed: %1$s</string>
     <string name="network_info_no_leases">No DHCP leases</string>
     <string name="network_info_no_neighbors">No neighbors</string>
     <string name="network_info_dhcp_expires">Expires: %1$s</string>
diff --git a/app/src/main/rust/netbox/.gitignore b/app/src/main/rust/netbox/.gitignore
new file mode 100644
index 000000000..4f96631da
--- /dev/null
+++ b/app/src/main/rust/netbox/.gitignore
@@ -0,0 +1,2 @@
+/target
+/dist
diff --git a/app/src/main/rust/netbox/Cargo.lock b/app/src/main/rust/netbox/Cargo.lock
new file mode 100644
index 000000000..64a5bf628
--- /dev/null
+++ b/app/src/main/rust/netbox/Cargo.lock
@@ -0,0 +1,574 @@
+# This file is automatically @generated by Cargo.
+# It is not intended for manual editing.
+version = 4
+
+[[package]]
+name = "anstream"
+version = "1.0.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "824a212faf96e9acacdbd09febd34438f8f711fb84e09a8916013cd7815ca28d"
+dependencies = [
+ "anstyle",
+ "anstyle-parse",
+ "anstyle-query",
+ "anstyle-wincon",
+ "colorchoice",
+ "is_terminal_polyfill",
+ "utf8parse",
+]
+
+[[package]]
+name = "anstyle"
+version = "1.0.14"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "940b3a0ca603d1eade50a4846a2afffd5ef57a9feac2c0e2ec2e14f9ead76000"
+
+[[package]]
+name = "anstyle-parse"
+version = "1.0.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "52ce7f38b242319f7cabaa6813055467063ecdc9d355bbb4ce0c68908cd8130e"
+dependencies = [
+ "utf8parse",
+]
+
+[[package]]
+name = "anstyle-query"
+version = "1.1.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "40c48f72fd53cd289104fc64099abca73db4166ad86ea0b4341abe65af83dadc"
+dependencies = [
+ "windows-sys",
+]
+
+[[package]]
+name = "anstyle-wincon"
+version = "3.0.11"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "291e6a250ff86cd4a820112fb8898808a366d8f9f58ce16d1f538353ad55747d"
+dependencies = [
+ "anstyle",
+ "once_cell_polyfill",
+ "windows-sys",
+]
+
+[[package]]
+name = "anyhow"
+version = "1.0.102"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7f202df86484c868dbad7eaa557ef785d5c66295e41b460ef922eca0723b842c"
+
+[[package]]
+name = "bitflags"
+version = "2.13.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b4388bee8683e3d04af747c73422af53102d2bd24d9eadb6cbc100baef4b43f8"
+
+[[package]]
+name = "bytes"
+version = "1.11.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1e748733b7cbc798e1434b6ac524f0c1ff2ab456fe201501e6497c8417a4fc33"
+
+[[package]]
+name = "cfg-if"
+version = "1.0.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9330f8b2ff13f34540b44e946ef35111825727b38d33286ef986142615121801"
+
+[[package]]
+name = "cfg_aliases"
+version = "0.2.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "613afe47fcd5fac7ccf1db93babcb082c5994d996f20b8b159f2ad1658eb5724"
+
+[[package]]
+name = "clap"
+version = "4.6.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1ddb117e43bbf7dacf0a4190fef4d345b9bad68dfc649cb349e7d17d28428e51"
+dependencies = [
+ "clap_builder",
+ "clap_derive",
+]
+
+[[package]]
+name = "clap_builder"
+version = "4.6.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "714a53001bf66416adb0e2ef5ac857140e7dc3a0c48fb28b2f10762fc4b5069f"
+dependencies = [
+ "anstream",
+ "anstyle",
+ "clap_lex",
+ "strsim",
+]
+
+[[package]]
+name = "clap_derive"
+version = "4.6.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f2ce8604710f6733aa641a2b3731eaa1e8b3d9973d5e3565da11800813f997a9"
+dependencies = [
+ "heck",
+ "proc-macro2",
+ "quote",
+ "syn",
+]
+
+[[package]]
+name = "clap_lex"
+version = "1.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c8d4a3bb8b1e0c1050499d1815f5ab16d04f0959b233085fb31653fbfc9d98f9"
+
+[[package]]
+name = "colorchoice"
+version = "1.0.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1d07550c9036bf2ae0c684c4297d503f838287c83c53686d05370d0e139ae570"
+
+[[package]]
+name = "futures"
+version = "0.3.32"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8b147ee9d1f6d097cef9ce628cd2ee62288d963e16fb287bd9286455b241382d"
+dependencies = [
+ "futures-channel",
+ "futures-core",
+ "futures-executor",
+ "futures-io",
+ "futures-sink",
+ "futures-task",
+ "futures-util",
+]
+
+[[package]]
+name = "futures-channel"
+version = "0.3.32"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "07bbe89c50d7a535e539b8c17bc0b49bdb77747034daa8087407d655f3f7cc1d"
+dependencies = [
+ "futures-core",
+ "futures-sink",
+]
+
+[[package]]
+name = "futures-core"
+version = "0.3.32"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7e3450815272ef58cec6d564423f6e755e25379b217b0bc688e295ba24df6b1d"
+
+[[package]]
+name = "futures-executor"
+version = "0.3.32"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "baf29c38818342a3b26b5b923639e7b1f4a61fc5e76102d4b1981c6dc7a7579d"
+dependencies = [
+ "futures-core",
+ "futures-task",
+ "futures-util",
+]
+
+[[package]]
+name = "futures-io"
+version = "0.3.32"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "cecba35d7ad927e23624b22ad55235f2239cfa44fd10428eecbeba6d6a717718"
+
+[[package]]
+name = "futures-macro"
+version = "0.3.32"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e835b70203e41293343137df5c0664546da5745f82ec9b84d40be8336958447b"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn",
+]
+
+[[package]]
+name = "futures-sink"
+version = "0.3.32"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c39754e157331b013978ec91992bde1ac089843443c49cbc7f46150b0fad0893"
+
+[[package]]
+name = "futures-task"
+version = "0.3.32"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "037711b3d59c33004d3856fbdc83b99d4ff37a24768fa1be9ce3538a1cde4393"
+
+[[package]]
+name = "futures-util"
+version = "0.3.32"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "389ca41296e6190b48053de0321d02a77f32f8a5d2461dd38762c0593805c6d6"
+dependencies = [
+ "futures-channel",
+ "futures-core",
+ "futures-io",
+ "futures-macro",
+ "futures-sink",
+ "futures-task",
+ "memchr",
+ "pin-project-lite",
+ "slab",
+]
+
+[[package]]
+name = "heck"
+version = "0.5.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2304e00983f87ffb38b55b444b5e3b60a884b5d30c0fca7d82fe33449bbe55ea"
+
+[[package]]
+name = "is_terminal_polyfill"
+version = "1.70.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a6cb138bb79a146c1bd460005623e142ef0181e3d0219cb493e02f7d08a35695"
+
+[[package]]
+name = "itoa"
+version = "1.0.18"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8f42a60cbdf9a97f5d2305f08a87dc4e09308d1276d28c869c684d7777685682"
+
+[[package]]
+name = "libc"
+version = "0.2.186"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "68ab91017fe16c622486840e4c83c9a37afeff978bd239b5293d61ece587de66"
+
+[[package]]
+name = "log"
+version = "0.4.32"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "953f07c43838f8e6f9758cab68bf5bed85465e7587ebe0b823f1bcd81978ad3a"
+
+[[package]]
+name = "memchr"
+version = "2.8.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "88904434abc2901f197fe8cc55f0445e7ded921dba5911dad2e2b39b48e663c4"
+
+[[package]]
+name = "mio"
+version = "1.2.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "02bd0af71c67b473010cbbc60715ee815645a4dc942899111f494b4b737d6fda"
+dependencies = [
+ "libc",
+ "wasi",
+ "windows-sys",
+]
+
+[[package]]
+name = "netbox"
+version = "0.1.0"
+dependencies = [
+ "anyhow",
+ "clap",
+ "futures",
+ "libc",
+ "netlink-packet-route",
+ "netlink-sys",
+ "rtnetlink",
+ "serde",
+ "serde_json",
+ "tokio",
+]
+
+[[package]]
+name = "netlink-packet-core"
+version = "0.8.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3463cbb78394cb0141e2c926b93fc2197e473394b761986eca3b9da2c63ae0f4"
+dependencies = [
+ "paste",
+]
+
+[[package]]
+name = "netlink-packet-route"
+version = "0.30.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "be8919612f6028ab4eacbbfe1234a9a43e3722c6e0915e7ff519066991905092"
+dependencies = [
+ "bitflags",
+ "libc",
+ "log",
+ "netlink-packet-core",
+]
+
+[[package]]
+name = "netlink-proto"
+version = "0.12.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b65d130ee111430e47eed7896ea43ca693c387f097dd97376bffafbf25812128"
+dependencies = [
+ "bytes",
+ "futures",
+ "log",
+ "netlink-packet-core",
+ "netlink-sys",
+ "thiserror 2.0.18",
+]
+
+[[package]]
+name = "netlink-sys"
+version = "0.8.8"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "cd6c30ed10fa69cc491d491b85cc971f6bdeb8e7367b7cde2ee6cc878d583fae"
+dependencies = [
+ "bytes",
+ "futures-util",
+ "libc",
+ "log",
+ "tokio",
+]
+
+[[package]]
+name = "nix"
+version = "0.30.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "74523f3a35e05aba87a1d978330aef40f67b0304ac79c1c00b294c9830543db6"
+dependencies = [
+ "bitflags",
+ "cfg-if",
+ "cfg_aliases",
+ "libc",
+]
+
+[[package]]
+name = "once_cell_polyfill"
+version = "1.70.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "384b8ab6d37215f3c5301a95a4accb5d64aa607f1fcb26a11b5303878451b4fe"
+
+[[package]]
+name = "paste"
+version = "1.0.15"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "57c0d7b74b563b49d38dae00a0c37d4d6de9b432382b2892f0574ddcae73fd0a"
+
+[[package]]
+name = "pin-project-lite"
+version = "0.2.17"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a89322df9ebe1c1578d689c92318e070967d1042b512afbe49518723f4e6d5cd"
+
+[[package]]
+name = "proc-macro2"
+version = "1.0.106"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8fd00f0bb2e90d81d1044c2b32617f68fcb9fa3bb7640c23e9c748e53fb30934"
+dependencies = [
+ "unicode-ident",
+]
+
+[[package]]
+name = "quote"
+version = "1.0.45"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "41f2619966050689382d2b44f664f4bc593e129785a36d6ee376ddf37259b924"
+dependencies = [
+ "proc-macro2",
+]
+
+[[package]]
+name = "rtnetlink"
+version = "0.21.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "dc19f84f710fa2f337617f9bc0400260a94224bde7bae28fd8879f3771ca5784"
+dependencies = [
+ "futures-channel",
+ "futures-util",
+ "log",
+ "netlink-packet-core",
+ "netlink-packet-route",
+ "netlink-proto",
+ "netlink-sys",
+ "nix",
+ "thiserror 1.0.69",
+ "tokio",
+]
+
+[[package]]
+name = "serde"
+version = "1.0.228"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9a8e94ea7f378bd32cbbd37198a4a91436180c5bb472411e48b5ec2e2124ae9e"
+dependencies = [
+ "serde_core",
+ "serde_derive",
+]
+
+[[package]]
+name = "serde_core"
+version = "1.0.228"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "41d385c7d4ca58e59fc732af25c3983b67ac852c1a25000afe1175de458b67ad"
+dependencies = [
+ "serde_derive",
+]
+
+[[package]]
+name = "serde_derive"
+version = "1.0.228"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d540f220d3187173da220f885ab66608367b6574e925011a9353e4badda91d79"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn",
+]
+
+[[package]]
+name = "serde_json"
+version = "1.0.150"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e8014e44b4736ed0538adeecded0fce2a272f22dc9578a7eb6b2d9993c74cfb9"
+dependencies = [
+ "itoa",
+ "memchr",
+ "serde",
+ "serde_core",
+ "zmij",
+]
+
+[[package]]
+name = "slab"
+version = "0.4.12"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0c790de23124f9ab44544d7ac05d60440adc586479ce501c1d6d7da3cd8c9cf5"
+
+[[package]]
+name = "socket2"
+version = "0.6.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "52d1cfed4120b4d927bf7c0f86d2087a4a7d6027c906d9f9d525a80573b9be51"
+dependencies = [
+ "libc",
+ "windows-sys",
+]
+
+[[package]]
+name = "strsim"
+version = "0.11.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7da8b5736845d9f2fcb837ea5d9e2628564b3b043a70948a3f0b778838c5fb4f"
+
+[[package]]
+name = "syn"
+version = "2.0.117"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e665b8803e7b1d2a727f4023456bbbbe74da67099c585258af0ad9c5013b9b99"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "unicode-ident",
+]
+
+[[package]]
+name = "thiserror"
+version = "1.0.69"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b6aaf5339b578ea85b50e080feb250a3e8ae8cfcdff9a461c9ec2904bc923f52"
+dependencies = [
+ "thiserror-impl 1.0.69",
+]
+
+[[package]]
+name = "thiserror"
+version = "2.0.18"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "4288b5bcbc7920c07a1149a35cf9590a2aa808e0bc1eafaade0b80947865fbc4"
+dependencies = [
+ "thiserror-impl 2.0.18",
+]
+
+[[package]]
+name = "thiserror-impl"
+version = "1.0.69"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "4fee6c4efc90059e10f81e6d42c60a18f76588c3d74cb83a0b242a2b6c7504c1"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn",
+]
+
+[[package]]
+name = "thiserror-impl"
+version = "2.0.18"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ebc4ee7f67670e9b64d05fa4253e753e016c6c95ff35b89b7941d6b856dec1d5"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn",
+]
+
+[[package]]
+name = "tokio"
+version = "1.52.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8fc7f01b389ac15039e4dc9531aa973a135d7a4135281b12d7c1bc79fd57fffe"
+dependencies = [
+ "libc",
+ "mio",
+ "pin-project-lite",
+ "socket2",
+ "tokio-macros",
+ "windows-sys",
+]
+
+[[package]]
+name = "tokio-macros"
+version = "2.7.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "385a6cb71ab9ab790c5fe8d67f1645e6c450a7ce006a33de03daa956cf70a496"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn",
+]
+
+[[package]]
+name = "unicode-ident"
+version = "1.0.24"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e6e4313cd5fcd3dad5cafa179702e2b244f760991f45397d14d4ebf38247da75"
+
+[[package]]
+name = "utf8parse"
+version = "0.2.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "06abde3611657adf66d383f00b093d7faecc7fa57071cce2578660c9f1010821"
+
+[[package]]
+name = "wasi"
+version = "0.11.1+wasi-snapshot-preview1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ccf3ec651a847eb01de73ccad15eb7d99f80485de043efb2f370cd654f4ea44b"
+
+[[package]]
+name = "windows-link"
+version = "0.2.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f0805222e57f7521d6a62e36fa9163bc891acd422f971defe97d64e70d0a4fe5"
+
+[[package]]
+name = "windows-sys"
+version = "0.61.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ae137229bcbd6cdf0f7b80a31df61766145077ddf49416a728b02cb3921ff3fc"
+dependencies = [
+ "windows-link",
+]
+
+[[package]]
+name = "zmij"
+version = "1.0.21"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b8848ee67ecc8aedbaf3e4122217aff892639231befc6a1b58d29fff4c2cabaa"
diff --git a/app/src/main/rust/netbox/Cargo.toml b/app/src/main/rust/netbox/Cargo.toml
new file mode 100644
index 000000000..e166ce64b
--- /dev/null
+++ b/app/src/main/rust/netbox/Cargo.toml
@@ -0,0 +1,27 @@
+[package]
+name = "netbox"
+version = "0.1.0"
+edition = "2021"
+rust-version = "1.91"
+description = "netbox: a minimal netlink CLI toolbox for DroidVM — replaces the iproute2/bridge subset the daemon shells out to, so the APK doesn't depend on each OEM's system ip/bridge (versions vary; some don't even emit IFA_RT_PRIORITY in -j JSON)"
+
+[[bin]]
+name = "netbox"
+path = "src/main.rs"
+
+[dependencies]
+clap = { version = "4", features = ["derive"] }
+libc = "0.2"
+anyhow = "1"
+serde = { version = "1", features = ["derive"] }
+serde_json = "1"
+tokio = { version = "1", features = ["rt", "macros", "time"] }
+futures = "0.3"
+rtnetlink = "0.21"
+netlink-packet-route = "0.30"
+netlink-sys = "0.8"
+
+[profile.release]
+opt-level = 2
+lto = "thin"
+strip = true
diff --git a/app/src/main/rust/netbox/build.sh b/app/src/main/rust/netbox/build.sh
new file mode 100755
index 000000000..3b3dc9690
--- /dev/null
+++ b/app/src/main/rust/netbox/build.sh
@@ -0,0 +1,40 @@
+#!/usr/bin/env bash
+# Build netbox, the daemon's netlink CLI toolbox.
+#
+#   ./build.sh            # both targets (default)
+#   ./build.sh x64        # x86_64-unknown-linux-musl  -> dist/netbox-linux-x64
+#   ./build.sh arm64      # aarch64-unknown-linux-musl -> dist/netbox-android-arm64
+#   ./build.sh host       # quick host debug build (./target/debug/netbox)
+#
+# Both release targets are fully static (musl), so they run under any libc —
+# glibc, musl, or Android bionic. The aarch64 target links with the bundled
+# rust-lld, so no external cross toolchain is needed.
+set -euo pipefail
+cd "$(dirname "$0")"
+
+X64=x86_64-unknown-linux-musl
+ARM=aarch64-unknown-linux-musl
+
+need() { command -v "$1" >/dev/null 2>&1 || { echo "missing: $1" >&2; exit 1; }; }
+need cargo
+add_target() { command -v rustup >/dev/null 2>&1 && rustup target add "$1" >/dev/null 2>&1 || true; }
+
+build_x64() {
+    add_target "$X64"
+    cargo build --release --target "$X64"
+    install -Dm755 "target/$X64/release/netbox" dist/netbox-linux-x64
+}
+
+build_arm() {
+    add_target "$ARM"
+    RUSTFLAGS="-C linker=rust-lld" cargo build --release --target "$ARM"
+    install -Dm755 "target/$ARM/release/netbox" dist/netbox-android-arm64
+}
+
+case "${1:-all}" in
+    x64)            build_x64 ;;
+    arm64|aarch64)  build_arm ;;
+    host)           cargo build ;;
+    all)            build_x64; build_arm ;;
+    *) echo "usage: $0 [x64|arm64|host|all]" >&2; exit 1 ;;
+esac
diff --git a/app/src/main/rust/netbox/src/main.rs b/app/src/main/rust/netbox/src/main.rs
new file mode 100644
index 000000000..60f704023
--- /dev/null
+++ b/app/src/main/rust/netbox/src/main.rs
@@ -0,0 +1,263 @@
+//! netbox — minimal netlink CLI for the DroidVM daemon.
+//!
+//! The daemon used to shell out to the system `ip`/`bridge` (iproute2). Those
+//! vary per OEM and some are too old to emit `IFA_RT_PRIORITY` in `-j` JSON —
+//! exactly the field pbridge tags its offload-proxy addresses with. netbox does
+//! the same operations straight over rtnetlink, with our own JSON schema, so
+//! behaviour is identical on every device. Most invocations do one op and
+//! exit (mutations report via exit code, queries print JSON to stdout); the
+//! lone exception is `monitor-addr`, which streams a JSON line per change
+//! until killed.
+
+use anyhow::Result;
+use clap::{Parser, Subcommand};
+use std::net::IpAddr;
+
+mod nl;
+mod tap;
+
+#[derive(Parser)]
+#[command(name = "netbox", version, about, disable_help_subcommand = true)]
+struct Cli {
+    #[command(subcommand)]
+    cmd: Cmd,
+}
+
+#[derive(Subcommand)]
+enum Cmd {
+    /// Create a bridge device.
+    LinkAddBridge { name: String },
+    /// Create an 802.1q VLAN subinterface on a parent device.
+    LinkAddVlan {
+        #[arg(long)]
+        link: String,
+        #[arg(long)]
+        name: String,
+        #[arg(long)]
+        id: u16,
+    },
+    /// Create a persistent TAP (mode tap, vnet_hdr).
+    LinkAddTap { name: String },
+    /// Delete a link by name (idempotent).
+    LinkDel { name: String },
+    /// Bring a link up or down.
+    LinkSetState {
+        name: String,
+        #[arg(value_parser = ["up", "down"])]
+        state: String,
+    },
+    /// Enslave a link into a bridge.
+    LinkSetMaster { iface: String, master: String },
+    /// Detach a link from its bridge.
+    LinkSetNomaster { iface: String },
+    /// Set a link's MAC address.
+    LinkSetMac { dev: String, mac: String },
+    /// Toggle STP on a bridge.
+    LinkSetStp {
+        bridge: String,
+        #[arg(value_parser = on_off)]
+        on: bool,
+    },
+    /// Toggle bridge-port isolation.
+    LinkSetIsolated {
+        dev: String,
+        #[arg(value_parser = on_off)]
+        on: bool,
+    },
+    /// Toggle bridge-port MAC locking.
+    LinkSetLocked {
+        dev: String,
+        #[arg(value_parser = on_off)]
+        on: bool,
+    },
+    /// Add an address to a device (CIDR).
+    AddrAdd { dev: String, cidr: String },
+    /// Remove an address from a device (CIDR; idempotent).
+    AddrDel { dev: String, cidr: String },
+    /// List addresses as JSON; optional device and IFA_RT_PRIORITY filters.
+    AddrList {
+        #[arg(long)]
+        dev: Option<String>,
+        #[arg(long)]
+        metric: Option<u32>,
+    },
+    /// Add an onlink subnet route in a table.
+    RouteAdd {
+        #[arg(long)]
+        dev: String,
+        #[arg(long)]
+        dst: String,
+        #[arg(long)]
+        table: u32,
+        #[arg(long = "v6")]
+        v6: bool,
+    },
+    /// Add `from all iif <iif> lookup <table>` (idempotent).
+    RuleAdd {
+        #[arg(long)]
+        iif: String,
+        #[arg(long)]
+        table: u32,
+        #[arg(long = "v6")]
+        v6: bool,
+    },
+    /// Remove `from all iif <iif> lookup <table>` (idempotent).
+    RuleDel {
+        #[arg(long)]
+        iif: String,
+        #[arg(long)]
+        table: u32,
+        #[arg(long = "v6")]
+        v6: bool,
+    },
+    /// Add a static fdb entry on a bridge master.
+    FdbAdd { mac: String, dev: String },
+    /// List links as JSON; optional master / bridge-only filters.
+    LinkList {
+        #[arg(long)]
+        master: Option<String>,
+        #[arg(long = "type-bridge")]
+        type_bridge: bool,
+    },
+    /// List a device's neighbours as JSON.
+    NeighList { dev: String },
+    /// List policy routing rules as JSON.
+    RuleList {
+        #[arg(long = "v6")]
+        v6: bool,
+    },
+    /// Print the phone's own reachable IPv4 addresses once as `{"v4":[...]}`.
+    HostIps {
+        /// Interface-name prefix to include (repeatable): wlan, rmnet_data, …
+        #[arg(long)]
+        iface: Vec<String>,
+        /// Drop addresses tagged with this IFA_RT_PRIORITY (pbridge offload).
+        #[arg(long)]
+        exclude_metric: Option<u32>,
+    },
+    /// Stream `{"v4":[...]}` whenever the reachable IPv4 set changes. Subscribes
+    /// to RTNLGRP_IPV4_IFADDR and re-emits only on an actual change; runs until
+    /// killed.
+    MonitorAddr {
+        #[arg(long)]
+        iface: Vec<String>,
+        #[arg(long)]
+        exclude_metric: Option<u32>,
+    },
+}
+
+fn on_off(s: &str) -> Result<bool, String> {
+    match s {
+        "on" => Ok(true),
+        "off" => Ok(false),
+        _ => Err(format!("expected on|off, got {s:?}")),
+    }
+}
+
+/// Split "addr/plen" into its address and prefix length.
+fn parse_cidr(cidr: &str) -> Result<(IpAddr, u8)> {
+    let (a, p) = cidr
+        .split_once('/')
+        .ok_or_else(|| anyhow::anyhow!("not a CIDR: {cidr}"))?;
+    Ok((a.parse()?, p.parse()?))
+}
+
+fn main() {
+    std::process::exit(match run() {
+        Ok(()) => 0,
+        Err(e) => {
+            eprintln!("netbox: {e:#}");
+            1
+        }
+    });
+}
+
+fn run() -> Result<()> {
+    let cli = Cli::parse();
+    // tuntap is a plain ioctl — no netlink runtime needed.
+    if let Cmd::LinkAddTap { name } = &cli.cmd {
+        return tap::add_tap(name);
+    }
+    let rt = tokio::runtime::Builder::new_current_thread()
+        .enable_all()
+        .build()?;
+    rt.block_on(async {
+        match cli.cmd {
+            // long-running: its own connection joins a multicast group
+            Cmd::MonitorAddr {
+                iface,
+                exclude_metric,
+            } => nl::monitor_host_ipv4(&iface, exclude_metric, print_host_ips).await,
+            // everything else is one op against a fresh connection, then exit
+            cmd => {
+                let net = nl::Net::connect()?;
+                run_oneshot(&net, cmd).await
+            }
+        }
+    })
+}
+
+async fn run_oneshot(net: &nl::Net, cmd: Cmd) -> Result<()> {
+    match cmd {
+        Cmd::LinkAddBridge { name } => net.link_add_bridge(&name).await,
+        Cmd::LinkAddVlan { link, name, id } => net.link_add_vlan(&link, &name, id).await,
+        Cmd::LinkAddTap { .. } => unreachable!("handled before runtime"),
+        Cmd::LinkDel { name } => net.link_del(&name).await,
+        Cmd::LinkSetState { name, state } => net.link_set_state(&name, state == "up").await,
+        Cmd::LinkSetMaster { iface, master } => net.link_set_master(&iface, Some(&master)).await,
+        Cmd::LinkSetNomaster { iface } => net.link_set_master(&iface, None).await,
+        Cmd::LinkSetMac { dev, mac } => net.link_set_mac(&dev, &mac).await,
+        Cmd::LinkSetStp { bridge, on } => net.link_set_stp(&bridge, on).await,
+        Cmd::LinkSetIsolated { dev, on } => net.link_set_isolated(&dev, on).await,
+        Cmd::LinkSetLocked { dev, on } => net.link_set_locked(&dev, on).await,
+        Cmd::AddrAdd { dev, cidr } => {
+            let (ip, plen) = parse_cidr(&cidr)?;
+            net.addr_add(&dev, ip, plen).await
+        }
+        Cmd::AddrDel { dev, cidr } => {
+            let (ip, plen) = parse_cidr(&cidr)?;
+            net.addr_del(&dev, ip, plen).await
+        }
+        Cmd::AddrList { dev, metric } => print_json(&net.addr_list(dev.as_deref(), metric).await?),
+        Cmd::RouteAdd {
+            dev,
+            dst,
+            table,
+            v6: _,
+        } => {
+            let (ip, plen) = parse_cidr(&dst)?;
+            net.route_add(&dev, ip, plen, table).await
+        }
+        Cmd::RuleAdd { iif, table, v6 } => net.rule_add(v6, &iif, table).await,
+        Cmd::RuleDel { iif, table, v6 } => net.rule_del(v6, &iif, table).await,
+        Cmd::FdbAdd { mac, dev } => net.fdb_add(&mac, &dev).await,
+        Cmd::LinkList {
+            master,
+            type_bridge,
+        } => print_json(&net.link_list(master.as_deref(), type_bridge).await?),
+        Cmd::NeighList { dev } => print_json(&net.neigh_list(&dev).await?),
+        Cmd::RuleList { v6 } => print_json(&net.rule_list(v6).await?),
+        Cmd::HostIps {
+            iface,
+            exclude_metric,
+        } => print_host_ips(&net.host_ipv4(&iface, exclude_metric).await?),
+        Cmd::MonitorAddr { .. } => unreachable!("handled in run()"),
+    }
+}
+
+fn print_json<T: serde::Serialize>(rows: &T) -> Result<()> {
+    println!("{}", serde_json::to_string(rows)?);
+    Ok(())
+}
+
+/// One JSON line `{"v4":[...]}` flushed immediately — the daemon reads these
+/// from the monitor's stdout, so the flush is what makes a change visible
+/// without waiting on stdio block-buffering.
+fn print_host_ips(v4: &[String]) -> Result<()> {
+    use std::io::Write;
+    let line = serde_json::to_string(&serde_json::json!({ "v4": v4 }))?;
+    let mut out = std::io::stdout().lock();
+    writeln!(out, "{line}")?;
+    out.flush()?;
+    Ok(())
+}
diff --git a/app/src/main/rust/netbox/src/nl.rs b/app/src/main/rust/netbox/src/nl.rs
new file mode 100644
index 000000000..5fabf20b7
--- /dev/null
+++ b/app/src/main/rust/netbox/src/nl.rs
@@ -0,0 +1,762 @@
+//! rtnetlink helpers. Idioms (connection, link/addr parsing, rt_priority,
+//! route/rule) are lifted from pbridge's netlink.rs so behaviour matches the
+//! proven daemon. Mutations return `Result<()>` (exit code); queries return
+//! serializable rows that `main` prints as JSON.
+
+use anyhow::{bail, Context, Result};
+use futures::stream::TryStreamExt;
+use netlink_packet_route::address::{AddressAttribute, AddressScope};
+use netlink_packet_route::link::{
+    BridgeStpState, InfoBridge, InfoBridgePort, InfoData, InfoKind, InfoPortData, InfoPortKind,
+    InfoVlan, LinkAttribute, LinkInfo, LinkMessage, State,
+};
+use netlink_packet_route::neighbour::{
+    NeighbourAddress, NeighbourAttribute, NeighbourFlags, NeighbourState,
+};
+use netlink_packet_route::route::{RouteProtocol, RouteScope};
+use netlink_packet_route::rule::{RuleAction, RuleAttribute, RuleFlags};
+use netlink_packet_route::AddressFamily;
+use rtnetlink::{Handle, LinkBridge, LinkUnspec, RouteMessageBuilder};
+use serde::Serialize;
+use std::collections::HashMap;
+use std::net::{IpAddr, Ipv4Addr, Ipv6Addr};
+
+pub struct Net {
+    handle: Handle,
+}
+
+/// The only rtnetlink multicast group we ever join: RTM_NEWADDR/RTM_DELADDR
+/// for IPv4. The host-IP set is *defined* as v4 addresses, so only address
+/// events can change it; staying off the link/route/neigh/v6-addr groups
+/// (all noisy and irrelevant) keeps daemon wakeups — and power — to a minimum.
+const RTNLGRP_IPV4_IFADDR: u32 = 5;
+
+// ----------------------------------------------------------------- query rows
+
+/// `metric` is IFA_RT_PRIORITY — the field the system `ip -j` may not emit but
+/// pbridge tags its proxy addresses with; netlink always carries it.
+#[derive(Serialize)]
+pub struct AddrRow {
+    pub ifname: String,
+    pub family: u8,
+    pub local: String,
+    pub prefixlen: u8,
+    pub scope: String,
+    pub metric: u32,
+    pub noprefixroute: bool,
+}
+
+#[derive(Serialize)]
+pub struct LinkRow {
+    pub ifname: String,
+    pub address: String,
+    pub operstate: String,
+    pub master: String,
+    pub mtu: u32,
+    pub kind: String,
+}
+
+#[derive(Serialize)]
+pub struct NeighRow {
+    pub dst: String,
+    pub lladdr: String,
+    pub dev: String,
+    pub state: Vec<String>,
+}
+
+#[derive(Serialize)]
+pub struct RuleRow {
+    pub priority: u32,
+    pub iif: Option<String>,
+    pub table: u32,
+    pub fwmark: Option<u32>,
+    pub fwmask: Option<u32>,
+    pub detached: bool,
+    /// action is "lookup <table>" (vs blackhole/unreachable/...); only these
+    /// carry a meaningful routing table.
+    pub lookup: bool,
+}
+
+// ------------------------------------------------------------------- helpers
+
+fn mac_to_string(b: &[u8]) -> String {
+    b.iter()
+        .map(|x| format!("{x:02x}"))
+        .collect::<Vec<_>>()
+        .join(":")
+}
+
+fn parse_mac(s: &str) -> Result<Vec<u8>> {
+    let bytes: Result<Vec<u8>> = s
+        .split(':')
+        .map(|p| u8::from_str_radix(p, 16).with_context(|| format!("bad MAC: {s}")))
+        .collect();
+    let v = bytes?;
+    if v.len() != 6 {
+        bail!("MAC must be 6 octets: {s}");
+    }
+    Ok(v)
+}
+
+fn oper_to_string(s: &State) -> String {
+    match s {
+        State::Up => "UP",
+        State::Down => "DOWN",
+        State::LowerLayerDown => "LOWERLAYERDOWN",
+        State::Testing => "TESTING",
+        State::Dormant => "DORMANT",
+        State::NotPresent => "NOTPRESENT",
+        _ => "UNKNOWN",
+    }
+    .to_string()
+}
+
+fn neigh_states(s: &NeighbourState) -> Vec<String> {
+    let name = match s {
+        NeighbourState::Incomplete => "INCOMPLETE",
+        NeighbourState::Reachable => "REACHABLE",
+        NeighbourState::Stale => "STALE",
+        NeighbourState::Delay => "DELAY",
+        NeighbourState::Probe => "PROBE",
+        NeighbourState::Failed => "FAILED",
+        NeighbourState::Noarp => "NOARP",
+        NeighbourState::Permanent => "PERMANENT",
+        _ => "NONE",
+    };
+    vec![name.to_string()]
+}
+
+impl Net {
+    pub fn connect() -> Result<Net> {
+        let (conn, handle, _m) = rtnetlink::new_connection().context("netlink connect")?;
+        tokio::spawn(conn);
+        Ok(Net { handle })
+    }
+
+    async fn index_of(&self, name: &str) -> Result<u32> {
+        let mut s = self
+            .handle
+            .link()
+            .get()
+            .match_name(name.to_string())
+            .execute();
+        match s.try_next().await {
+            Ok(Some(m)) => Ok(m.header.index),
+            Ok(None) => bail!("device not found: {name}"),
+            Err(e) => Err(e).with_context(|| format!("get_link {name}")),
+        }
+    }
+
+    /// index -> ifname for every link (addresses/neighbours carry only ifindex).
+    async fn link_names(&self) -> Result<HashMap<u32, String>> {
+        let mut map = HashMap::new();
+        let mut s = self.handle.link().get().execute();
+        while let Some(m) = s.try_next().await.context("link dump")? {
+            map.insert(m.header.index, link_name(&m));
+        }
+        Ok(map)
+    }
+
+    // ---------------------------------------------------------- link mutations
+
+    pub async fn link_add_bridge(&self, name: &str) -> Result<()> {
+        self.handle
+            .link()
+            .add(LinkBridge::new(name).build())
+            .execute()
+            .await
+            .context("link_add_bridge")
+    }
+
+    /// `ip link add link <parent> name <name> type vlan id <vid>`.
+    pub async fn link_add_vlan(&self, parent: &str, name: &str, vid: u16) -> Result<()> {
+        let pidx = self.index_of(parent).await?;
+        let mut msg = LinkMessage::default();
+        msg.attributes.push(LinkAttribute::IfName(name.to_string()));
+        msg.attributes.push(LinkAttribute::Link(pidx));
+        msg.attributes.push(LinkAttribute::LinkInfo(vec![
+            LinkInfo::Kind(InfoKind::Vlan),
+            LinkInfo::Data(InfoData::Vlan(vec![InfoVlan::Id(vid)])),
+        ]));
+        self.handle
+            .link()
+            .add(msg)
+            .execute()
+            .await
+            .context("link_add_vlan")
+    }
+
+    pub async fn link_del(&self, name: &str) -> Result<()> {
+        let idx = match self.index_of(name).await {
+            Ok(i) => i,
+            // already gone: idempotent
+            Err(_) => return Ok(()),
+        };
+        self.handle
+            .link()
+            .del(idx)
+            .execute()
+            .await
+            .context("link_del")
+    }
+
+    pub async fn link_set_state(&self, name: &str, up: bool) -> Result<()> {
+        let idx = self.index_of(name).await?;
+        let b = LinkUnspec::new_with_index(idx);
+        let msg = if up { b.up().build() } else { b.down().build() };
+        self.handle
+            .link()
+            .set(msg)
+            .execute()
+            .await
+            .context("link_set_state")
+    }
+
+    pub async fn link_set_master(&self, iface: &str, master: Option<&str>) -> Result<()> {
+        let idx = self.index_of(iface).await?;
+        let midx = match master {
+            Some(m) => self.index_of(m).await?,
+            None => 0, // nomaster
+        };
+        let msg = LinkUnspec::new_with_index(idx).controller(midx).build();
+        self.handle
+            .link()
+            .set(msg)
+            .execute()
+            .await
+            .context("link_set_master")
+    }
+
+    pub async fn link_set_mac(&self, dev: &str, mac: &str) -> Result<()> {
+        let idx = self.index_of(dev).await?;
+        let msg = LinkUnspec::new_with_index(idx)
+            .address(parse_mac(mac)?)
+            .build();
+        self.handle
+            .link()
+            .set(msg)
+            .execute()
+            .await
+            .context("link_set_mac")
+    }
+
+    pub async fn link_set_stp(&self, bridge: &str, on: bool) -> Result<()> {
+        let idx = self.index_of(bridge).await?;
+        let mut msg = LinkMessage::default();
+        msg.header.index = idx;
+        let stp = if on {
+            BridgeStpState::KernelStp
+        } else {
+            BridgeStpState::Disabled
+        };
+        msg.attributes.push(LinkAttribute::LinkInfo(vec![
+            LinkInfo::Kind(InfoKind::Bridge),
+            LinkInfo::Data(InfoData::Bridge(vec![InfoBridge::StpState(stp)])),
+        ]));
+        self.handle
+            .link()
+            .set(msg)
+            .execute()
+            .await
+            .context("link_set_stp")
+    }
+
+    async fn set_port_flag(&self, dev: &str, port: InfoBridgePort) -> Result<()> {
+        let idx = self.index_of(dev).await?;
+        let mut msg = LinkMessage::default();
+        msg.header.index = idx;
+        msg.attributes.push(LinkAttribute::LinkInfo(vec![
+            LinkInfo::PortKind(InfoPortKind::Bridge),
+            LinkInfo::PortData(InfoPortData::BridgePort(vec![port])),
+        ]));
+        self.handle
+            .link()
+            .set(msg)
+            .execute()
+            .await
+            .context("set_port_flag")
+    }
+
+    pub async fn link_set_isolated(&self, dev: &str, on: bool) -> Result<()> {
+        self.set_port_flag(dev, InfoBridgePort::Isolated(on)).await
+    }
+
+    pub async fn link_set_locked(&self, dev: &str, on: bool) -> Result<()> {
+        self.set_port_flag(dev, InfoBridgePort::Locked(on)).await
+    }
+
+    // ---------------------------------------------------------- addr mutations
+
+    pub async fn addr_add(&self, dev: &str, ip: IpAddr, plen: u8) -> Result<()> {
+        let idx = self.index_of(dev).await?;
+        let mut req = self.handle.address().add(idx, ip, plen);
+        // match `ip addr add`: a real IPv4 subnet broadcast (else directed
+        // broadcast is lost); IPv6 has no broadcast.
+        if let IpAddr::V4(v4) = ip {
+            if plen < 31 {
+                let host = u32::MAX >> plen;
+                let brd = Ipv4Addr::from(u32::from(v4) | host);
+                req.message_mut()
+                    .attributes
+                    .push(AddressAttribute::Broadcast(brd));
+            }
+        }
+        req.execute().await.context("addr_add")
+    }
+
+    pub async fn addr_del(&self, dev: &str, ip: IpAddr, plen: u8) -> Result<()> {
+        let idx = self.index_of(dev).await?;
+        let msg = self
+            .handle
+            .address()
+            .add(idx, ip, plen)
+            .message_mut()
+            .clone();
+        match self.handle.address().del(msg).execute().await {
+            Ok(()) => Ok(()),
+            Err(rtnetlink::Error::NetlinkError(e))
+                if e.raw_code() == -libc::EADDRNOTAVAIL || e.raw_code() == -libc::ENOENT =>
+            {
+                Ok(())
+            }
+            Err(e) => Err(e).context("addr_del"),
+        }
+    }
+
+    // --------------------------------------------------------- route mutations
+
+    /// `ip [-6] route add <dst>/<plen> dev <dev> table <table>` (onlink subnet).
+    pub async fn route_add(&self, dev: &str, dst: IpAddr, plen: u8, table: u32) -> Result<()> {
+        let oif = self.index_of(dev).await?;
+        let msg = match dst {
+            IpAddr::V4(d) => RouteMessageBuilder::<Ipv4Addr>::new()
+                .destination_prefix(d, plen)
+                .output_interface(oif)
+                .table_id(table)
+                .scope(RouteScope::Link)
+                .protocol(RouteProtocol::Boot)
+                .build(),
+            IpAddr::V6(d) => RouteMessageBuilder::<Ipv6Addr>::new()
+                .destination_prefix(d, plen)
+                .output_interface(oif)
+                .table_id(table)
+                .scope(RouteScope::Link)
+                .protocol(RouteProtocol::Boot)
+                .build(),
+        };
+        match self.handle.route().add(msg).execute().await {
+            Ok(()) => Ok(()),
+            Err(rtnetlink::Error::NetlinkError(e)) if e.raw_code() == -libc::EEXIST => Ok(()),
+            Err(e) => Err(e).context("route_add"),
+        }
+    }
+
+    // ---------------------------------------------------------- rule mutations
+
+    /// `ip [-4|-6] rule add from all iif <iif> lookup <table>` (idempotent).
+    /// `.v4()`/`.v6()` yield distinct typed builders, so the family branch
+    /// can't be factored out (it returns different types) — inline like pbridge.
+    pub async fn rule_add(&self, v6: bool, iif: &str, table: u32) -> Result<()> {
+        let req = self
+            .handle
+            .rule()
+            .add()
+            .input_interface(iif.to_string())
+            .table_id(table)
+            .action(RuleAction::ToTable);
+        let res = if v6 {
+            req.v6().execute().await
+        } else {
+            req.v4().execute().await
+        };
+        match res {
+            Ok(()) => Ok(()),
+            Err(rtnetlink::Error::NetlinkError(e)) if e.raw_code() == -libc::EEXIST => Ok(()),
+            Err(e) => Err(e).context("rule_add"),
+        }
+    }
+
+    /// `ip [-4|-6] rule del from all iif <iif> lookup <table>` (idempotent).
+    pub async fn rule_del(&self, v6: bool, iif: &str, table: u32) -> Result<()> {
+        let base = self
+            .handle
+            .rule()
+            .add()
+            .input_interface(iif.to_string())
+            .table_id(table)
+            .action(RuleAction::ToTable);
+        let msg = if v6 {
+            base.v6().message_mut().clone()
+        } else {
+            base.v4().message_mut().clone()
+        };
+        match self.handle.rule().del(msg).execute().await {
+            Ok(()) => Ok(()),
+            Err(rtnetlink::Error::NetlinkError(e))
+                if e.raw_code() == -libc::ENOENT || e.raw_code() == -libc::ESRCH =>
+            {
+                Ok(())
+            }
+            Err(e) => Err(e).context("rule_del"),
+        }
+    }
+
+    // ------------------------------------------------------------ fdb mutation
+
+    /// `bridge fdb add <mac> dev <dev> master static`: a permanent forwarding
+    /// entry managed by the bridge master (used for MAC security on locked
+    /// ports). Idempotent.
+    pub async fn fdb_add(&self, mac: &str, dev: &str) -> Result<()> {
+        let idx = self.index_of(dev).await?;
+        // add_bridge presets family=AF_BRIDGE; "master static" = NTF_MASTER
+        // (Controller) + NUD_NOARP.
+        let res = self
+            .handle
+            .neighbours()
+            .add_bridge(idx, &parse_mac(mac)?)
+            .state(NeighbourState::Noarp)
+            .flags(NeighbourFlags::Controller)
+            .execute()
+            .await;
+        match res {
+            Ok(()) => Ok(()),
+            Err(rtnetlink::Error::NetlinkError(e)) if e.raw_code() == -libc::EEXIST => Ok(()),
+            Err(e) => Err(e).context("fdb_add"),
+        }
+    }
+
+    // -------------------------------------------------------------- queries
+
+    pub async fn addr_list(&self, dev: Option<&str>, metric: Option<u32>) -> Result<Vec<AddrRow>> {
+        let names = self.link_names().await?;
+        let mut req = self.handle.address().get();
+        if let Some(d) = dev {
+            req = req.set_link_index_filter(self.index_of(d).await?);
+        }
+        let mut s = req.execute();
+        let mut out = Vec::new();
+        while let Some(m) = s.try_next().await.context("addr dump")? {
+            let family = match m.header.family {
+                AddressFamily::Inet => 4u8,
+                AddressFamily::Inet6 => 6u8,
+                _ => continue,
+            };
+            let scope = match m.header.scope {
+                AddressScope::Universe => "global",
+                AddressScope::Link => "link",
+                AddressScope::Host => "host",
+                _ => "other",
+            }
+            .to_string();
+            let mut local: Option<IpAddr> = None;
+            let mut rt = 0u32;
+            let mut npr = false;
+            for a in &m.attributes {
+                match a {
+                    AddressAttribute::Local(x) => local = Some(*x),
+                    AddressAttribute::Address(x) => {
+                        if local.is_none() {
+                            local = Some(*x);
+                        }
+                    }
+                    AddressAttribute::RoutePriority(p) => rt = *p,
+                    AddressAttribute::Flags(f) => {
+                        use netlink_packet_route::address::AddressFlags;
+                        npr = f.contains(AddressFlags::Noprefixroute);
+                    }
+                    _ => {}
+                }
+            }
+            if let Some(want) = metric {
+                if rt != want {
+                    continue;
+                }
+            }
+            let local = match local {
+                Some(x) => x,
+                None => continue,
+            };
+            out.push(AddrRow {
+                ifname: names.get(&m.header.index).cloned().unwrap_or_default(),
+                family,
+                local: local.to_string(),
+                prefixlen: m.header.prefix_len,
+                scope,
+                metric: rt,
+                noprefixroute: npr,
+            });
+        }
+        Ok(out)
+    }
+
+    /// The phone's own reachable IPv4 addresses, sorted and de-duplicated:
+    /// scope-global v4 on interfaces whose name starts with one of `prefixes`
+    /// (the daemon's Wi-Fi/cellular/VPN/ethernet/tethering allowlist), with
+    /// bridge devices and `exclude_metric`-tagged addresses (pbridge offload)
+    /// dropped. This is the single definition of the host-IP set, shared by
+    /// the one-shot `host-ips` and the streaming `monitor-addr`.
+    pub async fn host_ipv4(
+        &self,
+        prefixes: &[String],
+        exclude_metric: Option<u32>,
+    ) -> Result<Vec<String>> {
+        // one link dump → ifindex's name and whether it's a bridge
+        let mut names: HashMap<u32, String> = HashMap::new();
+        let mut is_bridge: HashMap<u32, bool> = HashMap::new();
+        let mut ls = self.handle.link().get().execute();
+        while let Some(m) = ls.try_next().await.context("link dump")? {
+            let mut bridge = false;
+            for a in &m.attributes {
+                if let LinkAttribute::LinkInfo(infos) = a {
+                    for li in infos {
+                        if let LinkInfo::Kind(InfoKind::Bridge) = li {
+                            bridge = true;
+                        }
+                    }
+                }
+            }
+            names.insert(m.header.index, link_name(&m));
+            is_bridge.insert(m.header.index, bridge);
+        }
+        let mut out = std::collections::BTreeSet::new();
+        let mut s = self.handle.address().get().execute();
+        while let Some(m) = s.try_next().await.context("addr dump")? {
+            if !matches!(m.header.family, AddressFamily::Inet) {
+                continue;
+            }
+            // global scope only: link-local (169.254) / host (127) aren't
+            // addresses a forward could land on
+            if !matches!(m.header.scope, AddressScope::Universe) {
+                continue;
+            }
+            let idx = m.header.index;
+            if *is_bridge.get(&idx).unwrap_or(&false) {
+                continue;
+            }
+            let ifname = names.get(&idx).cloned().unwrap_or_default();
+            if !prefixes.iter().any(|p| ifname.starts_with(p.as_str())) {
+                continue;
+            }
+            let mut local: Option<IpAddr> = None;
+            let mut rt = 0u32;
+            for a in &m.attributes {
+                match a {
+                    AddressAttribute::Local(x) => local = Some(*x),
+                    AddressAttribute::Address(x) => {
+                        if local.is_none() {
+                            local = Some(*x);
+                        }
+                    }
+                    AddressAttribute::RoutePriority(p) => rt = *p,
+                    _ => {}
+                }
+            }
+            if let Some(want) = exclude_metric {
+                if rt == want {
+                    continue;
+                }
+            }
+            if let Some(IpAddr::V4(v4)) = local {
+                out.insert(v4.to_string());
+            }
+        }
+        Ok(out.into_iter().collect())
+    }
+
+    /// `ip -j link show [master <br>] [type bridge]`.
+    pub async fn link_list(&self, master: Option<&str>, bridge_only: bool) -> Result<Vec<LinkRow>> {
+        let names = self.link_names().await?;
+        let want_master = match master {
+            Some(m) => Some(self.index_of(m).await?),
+            None => None,
+        };
+        let mut s = self.handle.link().get().execute();
+        let mut out = Vec::new();
+        while let Some(m) = s.try_next().await.context("link dump")? {
+            let mut address = String::new();
+            let mut operstate = "UNKNOWN".to_string();
+            let mut master_idx: Option<u32> = None;
+            let mut mtu = 0u32;
+            let mut kind = String::new();
+            for a in &m.attributes {
+                match a {
+                    LinkAttribute::Address(b) => address = mac_to_string(b),
+                    LinkAttribute::OperState(s) => operstate = oper_to_string(s),
+                    LinkAttribute::Controller(i) => master_idx = Some(*i),
+                    LinkAttribute::Mtu(v) => mtu = *v,
+                    LinkAttribute::LinkInfo(infos) => {
+                        for li in infos {
+                            if let LinkInfo::Kind(k) = li {
+                                kind = format!("{k:?}").to_lowercase();
+                            }
+                        }
+                    }
+                    _ => {}
+                }
+            }
+            if let Some(wm) = want_master {
+                if master_idx != Some(wm) {
+                    continue;
+                }
+            }
+            if bridge_only && kind != "bridge" {
+                continue;
+            }
+            out.push(LinkRow {
+                ifname: link_name(&m),
+                address,
+                operstate,
+                master: master_idx
+                    .and_then(|i| names.get(&i).cloned())
+                    .unwrap_or_default(),
+                mtu,
+                kind,
+            });
+        }
+        Ok(out)
+    }
+
+    /// `ip neigh show dev <dev>` (both families).
+    pub async fn neigh_list(&self, dev: &str) -> Result<Vec<NeighRow>> {
+        let idx = self.index_of(dev).await?;
+        let mut out = Vec::new();
+        for v6 in [false, true] {
+            let mut s = self
+                .handle
+                .neighbours()
+                .get()
+                .set_family(if v6 {
+                    rtnetlink::IpVersion::V6
+                } else {
+                    rtnetlink::IpVersion::V4
+                })
+                .execute();
+            while let Some(m) = s.try_next().await.context("neigh dump")? {
+                if m.header.ifindex != idx {
+                    continue;
+                }
+                let mut dst = String::new();
+                let mut lladdr = String::new();
+                for a in &m.attributes {
+                    match a {
+                        NeighbourAttribute::Destination(NeighbourAddress::Inet(d)) => {
+                            dst = d.to_string()
+                        }
+                        NeighbourAttribute::Destination(NeighbourAddress::Inet6(d)) => {
+                            dst = d.to_string()
+                        }
+                        NeighbourAttribute::LinkLayerAddress(b) => lladdr = mac_to_string(b),
+                        _ => {}
+                    }
+                }
+                if dst.is_empty() {
+                    continue;
+                }
+                out.push(NeighRow {
+                    dst,
+                    lladdr,
+                    dev: dev.to_string(),
+                    state: neigh_states(&m.header.state),
+                });
+            }
+        }
+        Ok(out)
+    }
+
+    /// `ip [-6] rule show`.
+    pub async fn rule_list(&self, v6: bool) -> Result<Vec<RuleRow>> {
+        let mut s = self
+            .handle
+            .rule()
+            .get(if v6 {
+                rtnetlink::IpVersion::V6
+            } else {
+                rtnetlink::IpVersion::V4
+            })
+            .execute();
+        let mut out = Vec::new();
+        while let Some(m) = s.try_next().await.context("rule dump")? {
+            let mut priority = 0u32;
+            let mut iif = None;
+            let mut table = m.header.table as u32;
+            let mut fwmark = None;
+            let mut fwmask = None;
+            for a in &m.attributes {
+                match a {
+                    RuleAttribute::Priority(p) => priority = *p,
+                    RuleAttribute::Iifname(n) => iif = Some(n.clone()),
+                    RuleAttribute::Table(t) => table = *t,
+                    RuleAttribute::FwMark(v) => fwmark = Some(*v),
+                    RuleAttribute::FwMask(v) => fwmask = Some(*v),
+                    _ => {}
+                }
+            }
+            // iproute2 prints [detached] when the iif/oif device is gone.
+            let detached = m
+                .header
+                .flags
+                .intersects(RuleFlags::IifDetached | RuleFlags::OifDetached);
+            out.push(RuleRow {
+                priority,
+                iif,
+                table,
+                fwmark,
+                fwmask,
+                detached,
+                lookup: m.header.action == RuleAction::ToTable,
+            });
+        }
+        Ok(out)
+    }
+}
+
+/// Streams the host-IPv4 set: emits the initial set, then re-evaluates and
+/// re-emits only when it actually changes, driven by RTNLGRP_IPV4_IFADDR
+/// notifications. `emit` is called with each new set (e.g. printing a JSON
+/// line); the connection's own diff means the caller is woken only on real
+/// changes. Runs until the netlink connection closes.
+pub async fn monitor_host_ipv4(
+    prefixes: &[String],
+    exclude_metric: Option<u32>,
+    mut emit: impl FnMut(&[String]) -> Result<()>,
+) -> Result<()> {
+    use futures::StreamExt;
+    use netlink_sys::AsyncSocket;
+
+    let (mut conn, handle, mut messages) =
+        rtnetlink::new_connection().context("netlink connect")?;
+    conn.socket_mut()
+        .socket_mut()
+        .add_membership(RTNLGRP_IPV4_IFADDR)
+        .context("join RTNLGRP_IPV4_IFADDR")?;
+    tokio::spawn(conn);
+    let net = Net { handle };
+
+    let mut last = net.host_ipv4(prefixes, exclude_metric).await?;
+    emit(&last)?;
+    // every message arrives on RTNLGRP_IPV4_IFADDR, so any of them is a v4
+    // address add/del — no need to inspect it, just re-evaluate the set.
+    while messages.next().await.is_some() {
+        // coalesce a burst (a DHCP renew is a del+add, etc.) into one recompute
+        let _ = tokio::time::timeout(std::time::Duration::from_millis(200), async {
+            while messages.next().await.is_some() {}
+        })
+        .await;
+        let cur = net.host_ipv4(prefixes, exclude_metric).await?;
+        if cur != last {
+            emit(&cur)?;
+            last = cur;
+        }
+    }
+    Ok(())
+}
+
+fn link_name(m: &LinkMessage) -> String {
+    m.attributes
+        .iter()
+        .find_map(|a| match a {
+            LinkAttribute::IfName(n) => Some(n.clone()),
+            _ => None,
+        })
+        .unwrap_or_default()
+}
diff --git a/app/src/main/rust/netbox/src/tap.rs b/app/src/main/rust/netbox/src/tap.rs
new file mode 100644
index 000000000..c820677ff
--- /dev/null
+++ b/app/src/main/rust/netbox/src/tap.rs
@@ -0,0 +1,48 @@
+//! TAP creation. `ip tuntap add` is not a netlink op — it is a TUNSETIFF ioctl
+//! on /dev/net/tun — so it lives apart from the rtnetlink helpers.
+
+use anyhow::{bail, Context, Result};
+use std::ffi::CString;
+use std::os::fd::AsRawFd;
+
+const IFNAMSIZ: usize = 16;
+// <linux/if_tun.h> — _IOW('T', 202/203, int). The ioctl request arg is
+// c_ulong on glibc but c_int on musl/bionic, so cast with `as _` at the call.
+const TUNSETIFF: u32 = 0x4004_54ca;
+const TUNSETPERSIST: u32 = 0x4004_54cb;
+const IFF_TAP: libc::c_short = 0x0002;
+const IFF_NO_PI: libc::c_short = 0x1000;
+const IFF_VNET_HDR: libc::c_short = 0x4000;
+
+#[repr(C)]
+struct Ifreq {
+    name: [libc::c_char; IFNAMSIZ],
+    flags: libc::c_short,
+    _pad: [u8; 22],
+}
+
+/// `ip tuntap add dev <name> mode tap vnet_hdr`: a persistent TAP with the
+/// virtio net header, exactly what the daemon's VM taps require.
+pub fn add_tap(name: &str) -> Result<()> {
+    if name.len() >= IFNAMSIZ {
+        bail!("tap name too long: {name}");
+    }
+    let f = std::fs::OpenOptions::new()
+        .read(true)
+        .write(true)
+        .open("/dev/net/tun")
+        .context("open /dev/net/tun")?;
+    let fd = f.as_raw_fd();
+    let mut ifr: Ifreq = unsafe { std::mem::zeroed() };
+    for (i, b) in CString::new(name)?.as_bytes().iter().enumerate() {
+        ifr.name[i] = *b as libc::c_char;
+    }
+    ifr.flags = IFF_TAP | IFF_NO_PI | IFF_VNET_HDR;
+    if unsafe { libc::ioctl(fd, TUNSETIFF as _, &mut ifr as *mut Ifreq) } < 0 {
+        return Err(std::io::Error::last_os_error()).context("TUNSETIFF");
+    }
+    if unsafe { libc::ioctl(fd, TUNSETPERSIST as _, 1 as libc::c_int) } < 0 {
+        return Err(std::io::Error::last_os_error()).context("TUNSETPERSIST");
+    }
+    Ok(())
+}
diff --git a/app/src/test/java/cn/classfun/droidvm/lib/network/IPNetworkOffsetTest.java b/app/src/test/java/cn/classfun/droidvm/lib/network/IPNetworkOffsetTest.java
new file mode 100644
index 000000000..8d6ca22cd
--- /dev/null
+++ b/app/src/test/java/cn/classfun/droidvm/lib/network/IPNetworkOffsetTest.java
@@ -0,0 +1,67 @@
+package cn.classfun.droidvm.lib.network;
+
+import static org.junit.Assert.assertEquals;
+import static org.junit.Assert.assertThrows;
+
+import org.junit.Test;
+
+import java.math.BigInteger;
+
+public class IPNetworkOffsetTest {
+    @Test
+    public void v4OffsetFromBase() {
+        var net = IPv4Network.parse("10.181.7.1/24");
+        assertEquals("10.181.7.64", net.addressAtOffset(64).toString());
+        assertEquals("10.181.7.254", net.addressAtOffset(254).toString());
+    }
+
+    @Test
+    public void v4OffsetUsesNetworkBaseNotGateway() {
+        var net = IPv4Network.parse("10.0.0.5/24");
+        assertEquals("10.0.0.64", net.addressAtOffset(64).toString());
+    }
+
+    @Test
+    public void v4OffsetRejectsOutOfRange() {
+        var net = IPv4Network.parse("10.0.0.1/24");
+        assertThrows(IllegalArgumentException.class, () -> net.addressAtOffset(0));
+        assertThrows(IllegalArgumentException.class, () -> net.addressAtOffset(255));
+        assertThrows(IllegalArgumentException.class, () -> net.addressAtOffset(-1));
+    }
+
+    @Test
+    public void v4OffsetSmallPrefix() {
+        var net = IPv4Network.parse("192.168.1.1/30");
+        assertEquals("192.168.1.2", net.addressAtOffset(2).toString());
+        assertThrows(IllegalArgumentException.class, () -> net.addressAtOffset(3));
+    }
+
+    @Test
+    public void v6OffsetFromBase() {
+        var net = IPv6Network.parse("fd00:7::1/64");
+        assertEquals("fd00:7:0:0:0:0:0:40", net.addressAtOffset(64).toString());
+        assertEquals(
+            "fd00:7:0:0:0:0:0:80",
+            net.addressAtOffset(BigInteger.valueOf(128)).toString()
+        );
+    }
+
+    @Test
+    public void v6OffsetRejectsOutOfRange() {
+        var net = IPv6Network.parse("fd00:7::1/64");
+        assertThrows(IllegalArgumentException.class, () -> net.addressAtOffset(0));
+        assertThrows(
+            IllegalArgumentException.class,
+            () -> net.addressAtOffset(BigInteger.ONE.shiftLeft(64))
+        );
+    }
+
+    @Test
+    public void v6OffsetLargeValue() {
+        var net = IPv6Network.parse("fd00::/64");
+        assertEquals(
+            "fd00:0:0:0:ffff:ffff:ffff:fffe",
+            net.addressAtOffset(BigInteger.ONE.shiftLeft(64).subtract(BigInteger.TWO)).toString()
+        );
+    }
+}
diff --git a/app/src/test/java/cn/classfun/droidvm/lib/store/network/NetworkConfigValidatorTest.java b/app/src/test/java/cn/classfun/droidvm/lib/store/network/NetworkConfigValidatorTest.java
new file mode 100644
index 000000000..45a791bc0
--- /dev/null
+++ b/app/src/test/java/cn/classfun/droidvm/lib/store/network/NetworkConfigValidatorTest.java
@@ -0,0 +1,162 @@
+package cn.classfun.droidvm.lib.store.network;
+
+import static org.junit.Assert.assertThrows;
+
+import androidx.annotation.NonNull;
+
+import org.junit.Test;
+
+import cn.classfun.droidvm.lib.store.base.DataItem;
+
+public class NetworkConfigValidatorTest {
+    @NonNull
+    private static NetworkConfig l3Config(@NonNull BridgeType type) {
+        var config = new NetworkConfig();
+        config.setName("test");
+        config.setBridgeName("brtest");
+        config.setBridgeType(type);
+        config.setUplinkMode(UplinkMode.L3);
+        config.l3().set("mac_address", "02:11:22:33:44:55");
+        var vlans = DataItem.newArray();
+        var vlan = VlanConfig.createDefault(0);
+        vlan.ipv4().set("cidr", "10.181.7.1/24");
+        vlans.append(vlan.item);
+        config.l3().set("vlans", vlans);
+        return config;
+    }
+
+    @Test
+    public void validL3LinuxPasses() {
+        NetworkConfigValidator.validate(l3Config(BridgeType.LINUX));
+    }
+
+    @Test
+    public void l3WithZeroVlansPasses() {
+        // VM-internal network: host doesn't participate (replaces "none")
+        var config = l3Config(BridgeType.LINUX);
+        config.l3().set("vlans", DataItem.newArray());
+        NetworkConfigValidator.validate(config);
+    }
+
+    @Test
+    public void emptyNameRejected() {
+        var config = l3Config(BridgeType.LINUX);
+        config.setName("  ");
+        assertThrows(IllegalArgumentException.class,
+            () -> NetworkConfigValidator.validate(config));
+    }
+
+    @Test
+    public void badBridgeNameRejected() {
+        var config = l3Config(BridgeType.LINUX);
+        config.setBridgeName("0bad name");
+        assertThrows(IllegalArgumentException.class,
+            () -> NetworkConfigValidator.validate(config));
+    }
+
+    @Test
+    public void gatewayAtNetworkAddressRejected() {
+        var config = l3Config(BridgeType.LINUX);
+        config.getVlans().get(0).ipv4().set("cidr", "10.181.7.0/24");
+        assertThrows(IllegalArgumentException.class,
+            () -> NetworkConfigValidator.validate(config));
+    }
+
+    @Test
+    public void duplicateVlanIdRejected() {
+        var config = l3Config(BridgeType.LINUX);
+        var another = VlanConfig.createDefault(0);
+        another.ipv4().set("cidr", "10.181.8.1/24");
+        config.l3().get("vlans").append(another.item);
+        assertThrows(IllegalArgumentException.class,
+            () -> NetworkConfigValidator.validate(config));
+    }
+
+    @Test
+    public void dhcpOffsetsBeyondNetworkRejected() {
+        var config = l3Config(BridgeType.LINUX);
+        var dhcp = config.getVlans().get(0).ipv4().get("dhcp");
+        dhcp.set("offset_end", 300L);
+        assertThrows(IllegalArgumentException.class,
+            () -> NetworkConfigValidator.validate(config));
+    }
+
+    @Test
+    public void ipv6SnatOnLinuxIgnored() {
+        var config = l3Config(BridgeType.LINUX);
+        var vlan = config.getVlans().get(0);
+        vlan.ipv6().set("cidr", "fd00:7::1/64");
+        vlan.ipv6().set("snat", true);
+        NetworkConfigValidator.validate(config);
+    }
+
+    @Test
+    public void ipv6SnatOnGvisorPasses() {
+        var config = l3Config(BridgeType.GVISOR);
+        var vlan = config.getVlans().get(0);
+        vlan.ipv6().set("cidr", "fd00:7::1/64");
+        vlan.ipv6().set("snat", true);
+        NetworkConfigValidator.validate(config);
+    }
+
+    @Test
+    public void pdOnGvisorRejected() {
+        var config = l3Config(BridgeType.GVISOR);
+        var vlan = config.getVlans().get(0);
+        vlan.ipv6().set("source", "dhcp_pd");
+        var pd = DataItem.newObject();
+        pd.set("uplink", "WiFi");
+        vlan.ipv6().set("pd", pd);
+        assertThrows(IllegalArgumentException.class,
+            () -> NetworkConfigValidator.validate(config));
+    }
+
+    @Test
+    public void pdOnLinuxPasses() {
+        var config = l3Config(BridgeType.LINUX);
+        var vlan = config.getVlans().get(0);
+        vlan.ipv6().set("source", "dhcp_pd");
+        var pd = DataItem.newObject();
+        pd.set("uplink", "WiFi");
+        vlan.ipv6().set("pd", pd);
+        NetworkConfigValidator.validate(config);
+    }
+
+    @Test
+    public void secondaryOnGvisorRejected() {
+        var config = l3Config(BridgeType.GVISOR);
+        var sec = DataItem.newArray();
+        sec.append(new DataItem("192.168.50.1/24"));
+        config.getVlans().get(0).item.set("ipv4_secondary", sec);
+        assertThrows(IllegalArgumentException.class,
+            () -> NetworkConfigValidator.validate(config));
+    }
+
+    @Test
+    public void l2OnGvisorRejected() {
+        var config = l3Config(BridgeType.GVISOR);
+        config.setUplinkMode(UplinkMode.L2);
+        config.l2().set("uplink", "WiFi");
+        assertThrows(IllegalArgumentException.class,
+            () -> NetworkConfigValidator.validate(config));
+    }
+
+    @Test
+    public void l2OnLinuxPasses() {
+        var config = l3Config(BridgeType.LINUX);
+        config.setUplinkMode(UplinkMode.L2);
+        config.l2().set("uplink", "WiFi");
+        config.l2().set("pseudo_bridge", "auto");
+        NetworkConfigValidator.validate(config);
+    }
+
+    @Test
+    public void slaacRequiresSlash64() {
+        var config = l3Config(BridgeType.LINUX);
+        var vlan = config.getVlans().get(0);
+        vlan.ipv6().set("cidr", "fd00:7::1/80");
+        vlan.ipv6().get("slaac").set("enabled", true);
+        assertThrows(IllegalArgumentException.class,
+            () -> NetworkConfigValidator.validate(config));
+    }
+}
diff --git a/app/src/test/java/cn/classfun/droidvm/lib/store/network/VlanConfigPdTest.java b/app/src/test/java/cn/classfun/droidvm/lib/store/network/VlanConfigPdTest.java
new file mode 100644
index 000000000..073acfcce
--- /dev/null
+++ b/app/src/test/java/cn/classfun/droidvm/lib/store/network/VlanConfigPdTest.java
@@ -0,0 +1,57 @@
+package cn.classfun.droidvm.lib.store.network;
+
+import static org.junit.Assert.assertEquals;
+
+import androidx.annotation.NonNull;
+
+import org.junit.Test;
+
+import cn.classfun.droidvm.lib.store.base.DataItem;
+
+/**
+ * PD route-table persistence on the VLAN config: the id is bridgedhcp's
+ * crash-cleanup key, so a value written through one wrapper must be seen
+ * by every later read of the same stored item — that is what makes the
+ * allocation stable across network restarts.
+ */
+public class VlanConfigPdTest {
+    @NonNull
+    private static NetworkConfig configWithVlan() {
+        var config = new NetworkConfig();
+        config.setName("test");
+        config.setBridgeName("brtest");
+        config.setBridgeType(BridgeType.LINUX);
+        config.setUplinkMode(UplinkMode.L3);
+        var vlans = DataItem.newArray();
+        var vlan = VlanConfig.createDefault(0);
+        vlan.ipv4().set("cidr", "10.181.7.1/24");
+        vlans.append(vlan.item);
+        config.l3().set("vlans", vlans);
+        return config;
+    }
+
+    @Test
+    public void routeTableDefaultsToUnallocated() {
+        var config = configWithVlan();
+        assertEquals(0, config.getVlans().get(0).getPdRouteTable());
+    }
+
+    @Test
+    public void routeTablePersistsAcrossWrappers() {
+        var config = configWithVlan();
+        config.getVlans().get(0).setPdRouteTable(9991);
+        // a fresh wrapper over the same stored item must see the value
+        assertEquals(9991, config.getVlans().get(0).getPdRouteTable());
+    }
+
+    @Test
+    public void routeTableCoexistsWithDuid() {
+        var config = configWithVlan();
+        var vlan = config.getVlans().get(0);
+        vlan.setPdDuid("00:03:00:01:aa:bb:cc:dd:ee:ff");
+        vlan.setPdRouteTable(9992);
+        var reread = config.getVlans().get(0);
+        assertEquals("00:03:00:01:aa:bb:cc:dd:ee:ff", reread.getPdDuid());
+        assertEquals(9992, reread.getPdRouteTable());
+    }
+}
diff --git a/app/src/test/java/cn/classfun/droidvm/lib/store/vm/PortForwardTest.java b/app/src/test/java/cn/classfun/droidvm/lib/store/vm/PortForwardTest.java
new file mode 100644
index 000000000..7f1f0f1d7
--- /dev/null
+++ b/app/src/test/java/cn/classfun/droidvm/lib/store/vm/PortForwardTest.java
@@ -0,0 +1,82 @@
+package cn.classfun.droidvm.lib.store.vm;
+
+import static org.junit.Assert.assertEquals;
+import static org.junit.Assert.assertThrows;
+
+import org.junit.Test;
+
+import cn.classfun.droidvm.lib.store.vm.VMNicConfig.PortForward;
+
+public class PortForwardTest {
+    @Test
+    public void singlePort() {
+        var fwd = new PortForward("tcp", "80", "80");
+        fwd.validate();
+        assertEquals(80, fwd.hostStart());
+        assertEquals(80, fwd.hostEnd());
+    }
+
+    @Test
+    public void portRange() {
+        var fwd = new PortForward("tcp", "8000-9000", "8000-9000");
+        fwd.validate();
+        assertEquals(8000, fwd.hostStart());
+        assertEquals(9000, fwd.hostEnd());
+        assertEquals(8000, fwd.guestStart());
+        assertEquals(9000, fwd.guestEnd());
+    }
+
+    @Test
+    public void translatedRange() {
+        var fwd = new PortForward("udp", "10000-10010", "20000-20010");
+        fwd.validate();
+    }
+
+    @Test
+    public void mismatchedRangeSizesRejected() {
+        var fwd = new PortForward("tcp", "8000-9000", "8000-8500");
+        assertThrows(IllegalArgumentException.class, fwd::validate);
+    }
+
+    @Test
+    public void reversedRangeRejected() {
+        var fwd = new PortForward("tcp", "9000-8000", "9000-8000");
+        assertThrows(IllegalArgumentException.class, fwd::validate);
+    }
+
+    @Test
+    public void anyExpandsToTcpAndUdp() {
+        var fwd = new PortForward("any", "8080", "80");
+        fwd.validate();
+        assertEquals(java.util.List.of("tcp", "udp"), fwd.protocols());
+    }
+
+    @Test
+    public void concreteProtoIsSingleton() {
+        assertEquals(java.util.List.of("udp"), new PortForward("udp", "53", "53").protocols());
+    }
+
+    @Test
+    public void badProtocolRejected() {
+        var fwd = new PortForward("icmp", "80", "80");
+        assertThrows(IllegalArgumentException.class, fwd::validate);
+    }
+
+    @Test
+    public void portZeroRejected() {
+        var fwd = new PortForward("tcp", "0", "0");
+        assertThrows(IllegalArgumentException.class, fwd::validate);
+    }
+
+    @Test
+    public void portTooLargeRejected() {
+        var fwd = new PortForward("tcp", "65536", "65536");
+        assertThrows(IllegalArgumentException.class, fwd::validate);
+    }
+
+    @Test
+    public void garbageRejected() {
+        var fwd = new PortForward("tcp", "80:80", "80");
+        assertThrows(IllegalArgumentException.class, fwd::validate);
+    }
+}

From 4a53b87a80870a9e653bae6386167defa24c1b7b Mon Sep 17 00:00:00 2001
From: HuJK <gh@hujk.org>
Date: Sun, 14 Jun 2026 16:35:09 +0800
Subject: [PATCH 010/182] feat(boot): analyze disk images for direct kernel
 boot

Add lbx-backed boot-entry scanning, BootConfig/BootPlan resolution, a VM boot menu, direct Linux boot UI, and protected-VM DMA warnings for kernels that lack CONFIG_DMA_RESTRICTED_POOL.

Expose kernel analysis from URL and LXC image import flows without coupling it to the background download service.

Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
Co-authored-by: Claude Fable 5 <noreply@anthropic.com>
---
 .../daemon/ipc/vm/BootScanHandler.java        |  34 ++
 .../droidvm/daemon/ipc/vm/StartHandler.java   |   3 +
 .../classfun/droidvm/daemon/vm/BootPlan.java  | 491 +++++++++++++++++
 .../droidvm/daemon/vm/VMInstance.java         |  35 ++
 .../vm/backend/CrosvmBackendInstance.java     |  21 +-
 .../vm/backend/QemuBackendInstance.java       |  28 +-
 .../droidvm/lib/store/vm/BootConfig.java      | 276 ++++++++++
 .../droidvm/lib/store/vm/VMConfig.java        |  29 +
 .../droidvm/ui/agent/base/AgentVM.java        |  11 +-
 .../ui/disk/download/ImportURLActivity.java   |   6 +
 .../ui/disk/lxc/ImportLxcImagesActivity.java  |   9 +
 .../cn/classfun/droidvm/ui/vm/VMActions.java  |  85 +++
 .../droidvm/ui/vm/boot/BootEntries.java       | 301 ++++++++++
 .../droidvm/ui/vm/boot/BootMenuDialog.java    | 369 +++++++++++++
 .../droidvm/ui/vm/edit/VMEditActivity.java    |   8 +
 .../ui/vm/edit/base/VMEditBaseTab.java        |   4 +
 .../ui/vm/edit/basic/VMEditBasicTab.java      |  11 +
 .../ui/vm/edit/boot/VMEditBootTab.java        | 514 ++++++++++++++++--
 .../ui/vm/edit/storage/VMEditStorageTab.java  |   6 +
 .../droidvm/ui/vm/info/VMInfoActivity.java    |  19 +-
 .../widgets/tools/KernelAnalysisWidget.java   | 192 +++++++
 .../res/layout/activity_import_lxc_images.xml |   9 +
 .../main/res/layout/activity_import_url.xml   |   8 +
 app/src/main/res/layout/dialog_boot_menu.xml  |  46 ++
 .../main/res/layout/partial_vm_edit_boot.xml  | 304 +++++++++--
 .../main/res/layout/view_kernel_analysis.xml  | 149 +++++
 .../main/res/menu/menu_vm_firmware_browse.xml |  14 +
 app/src/main/res/values-night/colors.xml      |   2 +
 app/src/main/res/values-zh-rCN/strings.xml    |  49 ++
 app/src/main/res/values/colors.xml            |   2 +
 app/src/main/res/values/strings.xml           |  49 ++
 31 files changed, 2984 insertions(+), 100 deletions(-)
 create mode 100644 app/src/main/java/cn/classfun/droidvm/daemon/ipc/vm/BootScanHandler.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/daemon/vm/BootPlan.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/lib/store/vm/BootConfig.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/ui/vm/boot/BootEntries.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/ui/vm/boot/BootMenuDialog.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/ui/widgets/tools/KernelAnalysisWidget.java
 create mode 100644 app/src/main/res/layout/dialog_boot_menu.xml
 create mode 100644 app/src/main/res/layout/view_kernel_analysis.xml
 create mode 100644 app/src/main/res/menu/menu_vm_firmware_browse.xml

diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/ipc/vm/BootScanHandler.java b/app/src/main/java/cn/classfun/droidvm/daemon/ipc/vm/BootScanHandler.java
new file mode 100644
index 000000000..1d09eb7dd
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/ipc/vm/BootScanHandler.java
@@ -0,0 +1,34 @@
+package cn.classfun.droidvm.daemon.ipc.vm;
+
+import androidx.annotation.NonNull;
+
+import com.google.auto.service.AutoService;
+
+import cn.classfun.droidvm.daemon.server.ClientRequest;
+import cn.classfun.droidvm.daemon.server.RequestException;
+import cn.classfun.droidvm.daemon.server.RequestHandler;
+import cn.classfun.droidvm.daemon.vm.BootPlan;
+
+/**
+ * Scans a guest disk image for boot entries (lbx) on behalf of the UI:
+ * the edit tab's detection card and the boot menu both need entry lists,
+ * and disk images are typically only readable by the daemon.
+ */
+@AutoService(RequestHandler.class)
+public final class BootScanHandler extends RequestHandler {
+    @NonNull
+    @Override
+    public String getName() {
+        return "vm_bootscan";
+    }
+
+    @Override
+    public void handle(@NonNull ClientRequest request) throws Exception {
+        var params = request.getParams();
+        var image = params.optString("image", "");
+        if (image.isEmpty())
+            throw new RequestException("missing image");
+        var entries = BootPlan.scanEntries(image);
+        request.res().put("entries", entries);
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/ipc/vm/StartHandler.java b/app/src/main/java/cn/classfun/droidvm/daemon/ipc/vm/StartHandler.java
index 97fad35a3..99922c352 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/ipc/vm/StartHandler.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/ipc/vm/StartHandler.java
@@ -32,6 +32,9 @@ public void handle(@NonNull ClientRequest request) throws Exception {
         if (params.optBoolean("clear_logs_before_start", false) &&
             inst.getState() == VMState.STOPPED)
             inst.clearLogs();
+        // one-shot boot menu selection; empty = follow the stored config
+        var bootEntry = params.optString("boot_entry", "");
+        inst.setBootEntryOverride(bootEntry.isEmpty() ? null : bootEntry);
         if (!inst.start())
             throw new RequestException("failed to start VM");
     }
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/vm/BootPlan.java b/app/src/main/java/cn/classfun/droidvm/daemon/vm/BootPlan.java
new file mode 100644
index 000000000..ffb3fa4f6
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/vm/BootPlan.java
@@ -0,0 +1,491 @@
+package cn.classfun.droidvm.daemon.vm;
+
+import static cn.classfun.droidvm.lib.Constants.DATA_DIR;
+import static cn.classfun.droidvm.lib.Constants.PATH_BUILTIN_INITRD;
+import static cn.classfun.droidvm.lib.Constants.PATH_BUILTIN_KERNEL;
+import static cn.classfun.droidvm.lib.Constants.PATH_EDK2_FIRMWARE;
+import static cn.classfun.droidvm.lib.utils.AssetUtils.getAssetBinaryPath;
+import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
+import static cn.classfun.droidvm.lib.utils.StringUtils.pathJoin;
+
+import android.util.Log;
+
+import androidx.annotation.NonNull;
+import androidx.annotation.Nullable;
+
+import org.json.JSONArray;
+import org.json.JSONObject;
+
+import java.io.File;
+import java.io.FileOutputStream;
+import java.io.IOException;
+import java.nio.charset.StandardCharsets;
+import java.nio.file.Files;
+
+import cn.classfun.droidvm.lib.natives.NativeProcess;
+import cn.classfun.droidvm.lib.store.base.DataItem;
+import cn.classfun.droidvm.lib.store.vm.BootConfig;
+import cn.classfun.droidvm.lib.store.vm.VMConfig;
+
+/**
+ * A VM's boot configuration resolved into concrete backend inputs:
+ * either "run the UEFI firmware" or "direct-boot this kernel/initrd/
+ * cmdline". For {@code linux+image} this is where lbx runs against the
+ * guest disk: scan entries, match the pinned entry (id, then title,
+ * then bootloader default), then extract kernel/initrd into a per-VM
+ * cache. The cache is validated by URI + file size (inode metadata, no
+ * reads) and then a content MD5 of each source file, so an in-place
+ * kernel rebuild that kept the same path and size is still caught. The
+ * MD5 reads the source kernel/initrd out of the image, so a cache hit is
+ * no longer read-free — but it only happens once the metadata check has
+ * matched, and a hit still writes nothing.
+ *
+ * <p>A distro {@code vmlinuz} is often a compressed kernel a direct-boot
+ * VMM can't load as-is (arm64 gzip {@code Image.gz}, or EFI zboot).
+ * {@code lbx entries} reports this per entry as {@code kernel_compression}
+ * (null = already a raw {@code Image}/x86 bzImage); when set we extract and
+ * MD5 the <em>decompressed</em> kernel ({@code lbx cp/md5 --decompress}) so
+ * the cached file boots directly. lbx stays faithful by default — the flag
+ * is only passed for a kernel lbx flagged as compressed, never the initrd.
+ */
+public final class BootPlan {
+    private static final String TAG = "BootPlan";
+    private static final String CACHE_ROOT = pathJoin(DATA_DIR, "cache", "boot");
+    private static final long LBX_TIMEOUT_MS = 30_000;
+
+    public final boolean uefi;
+    /** Custom UEFI firmware path; empty = builtin (QEMU honors, crosvm ignores). */
+    @NonNull
+    public final String firmware;
+    @NonNull
+    public final String kernel;
+    @NonNull
+    public final String initrd;
+    @NonNull
+    public final String cmdline;
+    /** Image mode: title of the entry actually booted (for events/logs). */
+    @Nullable
+    public final String entryTitle;
+    /** Image mode: a pinned/override entry was not found, default used. */
+    public final boolean entryFallback;
+
+    private BootPlan(
+        boolean uefi, @NonNull String firmware, @NonNull String kernel,
+        @NonNull String initrd, @NonNull String cmdline,
+        @Nullable String entryTitle, boolean entryFallback
+    ) {
+        this.uefi = uefi;
+        this.firmware = firmware;
+        this.kernel = kernel;
+        this.initrd = initrd;
+        this.cmdline = cmdline;
+        this.entryTitle = entryTitle;
+        this.entryFallback = entryFallback;
+    }
+
+    /**
+     * The plan prepared by {@link VMInstance} before backend start; falls
+     * back to resolving in place (UEFI/manual never block, and image mode
+     * resolution throws on scan failure).
+     */
+    @NonNull
+    public static BootPlan of(@NonNull VMConfig config) {
+        if (config instanceof VMInstance) {
+            var plan = ((VMInstance) config).getBootPlan();
+            if (plan != null) return plan;
+        }
+        try {
+            return resolve(config, null);
+        } catch (IOException e) {
+            throw new RuntimeException(e.getMessage(), e);
+        }
+    }
+
+    @NonNull
+    public static BootPlan resolve(
+        @NonNull VMConfig config,
+        @Nullable String entryOverrideId
+    ) throws IOException {
+        var boot = BootConfig.of(config);
+        // one-shot "boot this disk with DroidVM's built-in kernel": a manual
+        // direct-boot of the bundled kernel/initrd, with root= carried over
+        // from the image's entry so the same rootfs comes up (see resolveBuiltin)
+        if (BootConfig.BUILTIN_ENTRY_KEY.equals(entryOverrideId))
+            return resolveBuiltin(config, boot);
+        if (boot.getProtocol() == BootConfig.Protocol.UEFI)
+            return new BootPlan(true, boot.getUefiFirmware(), "", "", "", null, false);
+        if (boot.getLinuxSource() == BootConfig.LinuxSource.MANUAL) {
+            var kernel = boot.getKernel();
+            // pre-boot{} configs stored the EDK2 path as the kernel
+            if (kernel.equals(PATH_EDK2_FIRMWARE))
+                return new BootPlan(true, "", "", "", "", null, false);
+            return new BootPlan(
+                false, "", kernel, boot.getInitrd(), boot.getCmdline(), null, false
+            );
+        }
+        return resolveImage(config, boot, entryOverrideId);
+    }
+
+    /**
+     * "Boot this disk with DroidVM's built-in kernel": a direct boot of the
+     * bundled {@code vmlinuz}/{@code initramfs} rather than the guest's own
+     * kernel. The cmdline is the image cmdline override if set, else the
+     * resolved entry's effective (vdafix-adjusted) cmdline so the right
+     * {@code root=} comes up, falling back to {@link BootConfig#DEFAULT_MANUAL_CMDLINE}
+     * when the image can't be scanned. Persisting this choice instead
+     * rewrites the config to a plain manual source (see {@code VMActions}).
+     */
+    @NonNull
+    private static BootPlan resolveBuiltin(
+        @NonNull VMConfig config, @NonNull BootConfig boot) {
+        return new BootPlan(
+            false, "", PATH_BUILTIN_KERNEL, PATH_BUILTIN_INITRD,
+            builtinCmdline(config, boot), "DroidVM built-in kernel", false
+        );
+    }
+
+    @NonNull
+    private static String builtinCmdline(
+        @NonNull VMConfig config, @NonNull BootConfig boot) {
+        var override = boot.getImageCmdline();
+        if (!override.isEmpty()) return override;
+        try {
+            var entries = scanEntries(findImagePath(config, boot.getImageDisk()));
+            if (entries.length() > 0) {
+                var pinned = boot.getImageEntry();
+                var entry = pinned != null
+                    ? matchEntry(entries, pinned.id, pinned.title) : null;
+                if (entry == null) entry = defaultEntry(entries);
+                if (entry != null) {
+                    var fixed = boot.isVdafix() ? optStr(entry, "cmdline_fixed") : "";
+                    var cmdline = !fixed.isEmpty() ? fixed : optStr(entry, "cmdline");
+                    if (!cmdline.isEmpty()) return cmdline;
+                }
+            }
+        } catch (IOException e) {
+            Log.w(TAG, fmt(
+                "builtin-kernel cmdline scan failed, using default: %s", e.getMessage()));
+        }
+        return BootConfig.DEFAULT_MANUAL_CMDLINE;
+    }
+
+    // --- linux+image ---
+
+    @NonNull
+    private static BootPlan resolveImage(
+        @NonNull VMConfig config,
+        @NonNull BootConfig boot,
+        @Nullable String entryOverrideId
+    ) throws IOException {
+        var image = findImagePath(config, boot.getImageDisk());
+        var entries = scanEntries(image);
+        if (entries.length() == 0)
+            throw new IOException(fmt("no boot entries found in %s", image));
+
+        var pinned = boot.getImageEntry();
+        JSONObject entry = null;
+        var fallback = false;
+        if (entryOverrideId != null)
+            entry = matchEntry(entries, entryOverrideId, entryOverrideId);
+        else if (pinned != null)
+            entry = matchEntry(entries, pinned.id, pinned.title);
+        if (entry == null) {
+            fallback = entryOverrideId != null || pinned != null;
+            entry = defaultEntry(entries);
+        }
+        if (fallback)
+            Log.w(TAG, fmt(
+                "VM %s: pinned boot entry not found in %s, using bootloader default",
+                config.getName(), image
+            ));
+
+        var kernelUri = optStr(entry, "kernel");
+        if (kernelUri.isEmpty())
+            throw new IOException("selected boot entry has no kernel");
+        var cacheDir = new File(pathJoin(CACHE_ROOT, config.getId().toString()));
+        extractCached(image, entry, cacheDir);
+
+        var cmdline = boot.getImageCmdline();
+        if (cmdline.isEmpty()) {
+            var fixed = boot.isVdafix() ? optStr(entry, "cmdline_fixed") : "";
+            cmdline = !fixed.isEmpty() ? fixed : optStr(entry, "cmdline");
+        }
+        var initrd = new File(cacheDir, "initrd");
+        var title = optStr(entry, "title");
+        return new BootPlan(
+            false, "",
+            new File(cacheDir, "kernel").getAbsolutePath(),
+            initrd.exists() ? initrd.getAbsolutePath() : "",
+            cmdline,
+            title.isEmpty() ? null : title,
+            fallback
+        );
+    }
+
+    @NonNull
+    private static String findImagePath(@NonNull VMConfig config, int diskIndex) throws IOException {
+        var disks = config.item.opt("disks", null);
+        if (disks != null && disks.is(DataItem.Type.ARRAY)) {
+            var arr = disks.asArray();
+            // configured index first, then any disk with a path
+            if (diskIndex >= 0 && diskIndex < arr.size()) {
+                var path = arr.get(diskIndex).optString("path", "");
+                if (!path.isEmpty()) return path;
+            }
+            for (var disk : arr) {
+                var path = disk.optString("path", "");
+                if (!path.isEmpty()) return path;
+            }
+        }
+        throw new IOException("boot from disk image: VM has no disk with a path");
+    }
+
+    /** All entries of the image, as reported by {@code lbx entries --json}. */
+    @NonNull
+    public static JSONArray scanEntries(@NonNull String image) throws IOException {
+        var out = runLbx("entries", image, "--json");
+        try {
+            return new JSONArray(out);
+        } catch (Exception e) {
+            throw new IOException(fmt("bad lbx output for %s: %s", image, e.getMessage()));
+        }
+    }
+
+    @Nullable
+    private static JSONObject matchEntry(
+        @NonNull JSONArray entries,
+        @Nullable String id,
+        @Nullable String title
+    ) {
+        for (int i = 0; i < entries.length(); i++) {
+            var e = entries.optJSONObject(i);
+            if (e == null) continue;
+            if (id != null && !id.isEmpty() && id.equals(optStr(e, "id")))
+                return e;
+        }
+        for (int i = 0; i < entries.length(); i++) {
+            var e = entries.optJSONObject(i);
+            if (e == null) continue;
+            if (title != null && !title.isEmpty() && title.equals(optStr(e, "title")))
+                return e;
+        }
+        return null;
+    }
+
+    /**
+     * Null-safe string read: org.json's optString turns a JSON null into
+     * the literal string "null" instead of the fallback.
+     */
+    @NonNull
+    private static String optStr(@NonNull JSONObject o, @NonNull String key) {
+        return o.isNull(key) ? "" : o.optString(key, "");
+    }
+
+    @NonNull
+    private static JSONObject defaultEntry(@NonNull JSONArray entries) {
+        for (int i = 0; i < entries.length(); i++) {
+            var e = entries.optJSONObject(i);
+            if (e != null && e.optBoolean("default", false)) return e;
+        }
+        return entries.optJSONObject(0);
+    }
+
+    /**
+     * Ensures {@code cacheDir} holds this entry's kernel and (concatenated)
+     * initrd, re-extracting unless {@link #cacheUpToDate} confirms the
+     * cache still matches the guest (URI+size, then a content MD5).
+     */
+    private static void extractCached(
+        @NonNull String image,
+        @NonNull JSONObject entry,
+        @NonNull File cacheDir
+    ) throws IOException {
+        var manifest = new File(cacheDir, "manifest.json");
+        var kernelFile = new File(cacheDir, "kernel");
+        if (manifest.exists() && kernelFile.exists()
+            && entry.optLong("kernel_size", -1) > 0
+            && cacheUpToDate(image, entry, manifest)) {
+            Log.i(TAG, fmt("boot cache hit: %s", cacheDir));
+            return;
+        }
+
+        Log.i(TAG, fmt("extracting boot files from %s to %s", image, cacheDir));
+        if (!cacheDir.isDirectory() && !cacheDir.mkdirs())
+            throw new IOException(fmt("cannot create %s", cacheDir));
+        deleteQuiet(manifest); // invalidate while files are in flux
+        var kernelDest = new File(cacheDir, "kernel").getAbsolutePath();
+        if (kernelCompressed(entry))
+            runLbx("cp", image, optStr(entry, "kernel"), kernelDest, "--decompress");
+        else
+            runLbx("cp", image, optStr(entry, "kernel"), kernelDest);
+        var initrds = entry.optJSONArray("initrd");
+        var initrdFile = new File(cacheDir, "initrd");
+        deleteQuiet(initrdFile);
+        if (initrds != null && initrds.length() > 0) {
+            // microcode early-cpio + initramfs: concatenate in order
+            try (var out = new FileOutputStream(initrdFile)) {
+                for (int i = 0; i < initrds.length(); i++) {
+                    var part = new File(cacheDir, fmt("initrd.%d", i));
+                    runLbx("cp", image, initrds.optString(i, ""), part.getAbsolutePath());
+                    Files.copy(part.toPath(), out);
+                    deleteQuiet(part);
+                }
+            }
+        }
+        Files.write(
+            manifest.toPath(),
+            buildManifest(image, entry).toString().getBytes(StandardCharsets.UTF_8));
+    }
+
+    /**
+     * Whether the cache described by {@code manifest} still reflects the
+     * guest. Cheap identity first — image, URIs and sizes, all from inode
+     * metadata with no data reads — then a content MD5 of each source file
+     * via {@code lbx md5}. The MD5 is what catches an in-place kernel
+     * rebuild that kept the same path and byte size; it reads the source
+     * kernel/initrd out of the image, so it only runs once the metadata
+     * check has already matched (i.e. on an otherwise-unchanged guest).
+     */
+    private static boolean cacheUpToDate(
+        @NonNull String image,
+        @NonNull JSONObject entry,
+        @NonNull File manifestFile
+    ) {
+        JSONObject old;
+        try {
+            old = new JSONObject(new String(
+                Files.readAllBytes(manifestFile.toPath()), StandardCharsets.UTF_8));
+        } catch (Exception e) {
+            return false;
+        }
+        if (!image.equals(old.optString("image", null))) return false;
+        var kernelUri = optStr(entry, "kernel");
+        if (!kernelUri.equals(old.optString("kernel", null))) return false;
+        if (entry.optLong("kernel_size", -1) != old.optLong("kernel_size", Long.MIN_VALUE))
+            return false;
+        if (!sameArray(entry.optJSONArray("initrd"), old.optJSONArray("initrd")))
+            return false;
+        if (!sameArray(entry.optJSONArray("initrd_size"), old.optJSONArray("initrd_size")))
+            return false;
+        try {
+            if (!lbxMd5(image, kernelUri, kernelCompressed(entry))
+                    .equals(old.optString("kernel_md5", "")))
+                return false;
+            var initrds = entry.optJSONArray("initrd");
+            var oldMd5 = old.optJSONArray("initrd_md5");
+            int n = initrds == null ? 0 : initrds.length();
+            if (oldMd5 == null || oldMd5.length() != n) return false;
+            for (int i = 0; i < n; i++)
+                if (!lbxMd5(image, initrds.optString(i, "")).equals(oldMd5.optString(i, "")))
+                    return false;
+        } catch (IOException e) {
+            // lbx md5 unavailable or failed: don't trust the cache
+            Log.w(TAG, fmt("cache md5 check failed, re-extracting: %s", e.getMessage()));
+            return false;
+        }
+        return true;
+    }
+
+    /** Metadata key plus a content MD5 of each source file. */
+    @NonNull
+    private static JSONObject buildManifest(
+        @NonNull String image, @NonNull JSONObject entry) throws IOException {
+        var key = new JSONObject();
+        try {
+            var kernelUri = optStr(entry, "kernel");
+            key.put("image", image);
+            key.put("kernel", kernelUri);
+            key.put("kernel_size", entry.optLong("kernel_size", -1));
+            key.put("kernel_md5", lbxMd5(image, kernelUri, kernelCompressed(entry)));
+            var initrds = entry.optJSONArray("initrd");
+            key.put("initrd", initrds);
+            key.put("initrd_size", entry.optJSONArray("initrd_size"));
+            var md5s = new JSONArray();
+            if (initrds != null)
+                for (int i = 0; i < initrds.length(); i++)
+                    md5s.put(lbxMd5(image, initrds.optString(i, "")));
+            key.put("initrd_md5", md5s);
+        } catch (Exception e) {
+            throw new IOException(e.getMessage());
+        }
+        return key;
+    }
+
+    /**
+     * Whether this entry's kernel is a compressed {@code vmlinuz} (gzip
+     * {@code Image.gz} or EFI zboot) that a direct-kernel-boot VMM can't
+     * load as-is, per lbx's {@code kernel_compression} field (empty/null
+     * when the kernel is already a raw {@code Image} or x86 bzImage). When
+     * set, the kernel is extracted and MD5'd in its decompressed form.
+     */
+    private static boolean kernelCompressed(@NonNull JSONObject entry) {
+        return !optStr(entry, "kernel_compression").isEmpty();
+    }
+
+    /** The hex digest from {@code lbx md5 <image> <uri>} ("<hex>  <name>"). */
+    @NonNull
+    private static String lbxMd5(@NonNull String image, @NonNull String uri)
+        throws IOException {
+        return lbxMd5(image, uri, false);
+    }
+
+    /**
+     * As {@link #lbxMd5(String, String)}, but with {@code decompress} the
+     * digest is of the kernel as {@code cp --decompress} would write it, so
+     * it matches the extracted cache file rather than the raw stored bytes.
+     */
+    @NonNull
+    private static String lbxMd5(@NonNull String image, @NonNull String uri, boolean decompress)
+        throws IOException {
+        if (uri.isEmpty()) return "";
+        var out = (decompress
+            ? runLbx("md5", image, uri, "--decompress")
+            : runLbx("md5", image, uri)).trim();
+        int sp = out.indexOf(' ');
+        return sp > 0 ? out.substring(0, sp) : out;
+    }
+
+    private static boolean sameArray(
+        @Nullable JSONArray a, @Nullable JSONArray b) {
+        return String.valueOf(a).equals(String.valueOf(b));
+    }
+
+    private static void deleteQuiet(@NonNull File f) {
+        if (f.exists() && !f.delete())
+            Log.w(TAG, fmt("failed to delete %s", f));
+    }
+
+    /** Runs lbx, returning stdout; non-zero exit becomes an IOException. */
+    @NonNull
+    private static String runLbx(@NonNull String... args) throws IOException {
+        var argv = new String[args.length + 1];
+        argv[0] = getAssetBinaryPath("lbx");
+        System.arraycopy(args, 0, argv, 1, args.length);
+        var process = new NativeProcess.Builder(argv).start();
+        try {
+            var stdout = new String(
+                process.getInputStream().readAllBytes(), StandardCharsets.UTF_8);
+            var stderr = new String(
+                process.getErrorStream().readAllBytes(), StandardCharsets.UTF_8);
+            int code;
+            try {
+                if (!process.waitFor(LBX_TIMEOUT_MS, java.util.concurrent.TimeUnit.MILLISECONDS)) {
+                    process.destroy();
+                    throw new IOException(fmt("lbx timed out: %s", String.join(" ", argv)));
+                }
+                code = process.exitValue();
+            } catch (InterruptedException e) {
+                Thread.currentThread().interrupt();
+                throw new IOException("interrupted while running lbx");
+            }
+            if (code != 0)
+                throw new IOException(fmt(
+                    "lbx failed (%d): %s", code, stderr.trim().isEmpty()
+                        ? String.join(" ", argv) : stderr.trim()
+                ));
+            return stdout;
+        } finally {
+            process.close();
+        }
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/vm/VMInstance.java b/app/src/main/java/cn/classfun/droidvm/daemon/vm/VMInstance.java
index 8bb270bec..8ba497b73 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/vm/VMInstance.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/vm/VMInstance.java
@@ -43,6 +43,8 @@ public final class VMInstance extends VMConfig {
     private VMBackendInstance backendInstance;
     private Thread workerThread;
     private final VMInstanceStore store;
+    private BootPlan bootPlan;
+    private String bootEntryOverride;
 
     public interface VMEventCallback {
         @SuppressWarnings("unused")
@@ -121,6 +123,21 @@ public boolean runControlCommand(@NonNull String command) {
         return getBackendInstance().runControlCommand(command) == 0;
     }
 
+    /** Boot plan prepared for the current start; null when not started. */
+    @Nullable
+    public BootPlan getBootPlan() {
+        return bootPlan;
+    }
+
+    /**
+     * One-shot boot entry selection (id or title) from the GUI boot menu;
+     * applies to the next {@link #start()} only and does not touch the
+     * pinned entry in the config.
+     */
+    public void setBootEntryOverride(@Nullable String entryId) {
+        bootEntryOverride = entryId;
+    }
+
     @SuppressWarnings("BooleanMethodIsAlwaysInverted")
     public boolean start() {
         if (state != VMState.STOPPED) {
@@ -317,6 +334,24 @@ public void clearLogs() {
     private void runVM() {
         var inst = getBackendInstance();
         var vmId = getId().toString();
+        try {
+            // image-source boot runs lbx here (scan + cached extract), so
+            // backends only ever see resolved kernel/initrd/cmdline paths
+            bootPlan = BootPlan.resolve(this, bootEntryOverride);
+        } catch (Exception e) {
+            Log.e(TAG, fmt("VM %s: boot resolution failed", getName()), e);
+            var sio = getStream("stdio");
+            if (sio != null)
+                sio.appendBuffer(fmt("boot resolution failed: %s\n", e.getMessage()));
+            exitCode = -1;
+            setState(VMState.STOPPED);
+            fireEvent("exited", null);
+            return;
+        } finally {
+            bootEntryOverride = null;
+        }
+        if (bootPlan.entryFallback)
+            fireEvent("boot_entry_fallback", null);
         var result = inst.start();
         if (!result.isSuccess()) {
             exitCode = -1;
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/CrosvmBackendInstance.java b/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/CrosvmBackendInstance.java
index 83f695194..10f13cac1 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/CrosvmBackendInstance.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/CrosvmBackendInstance.java
@@ -28,6 +28,7 @@
 import cn.classfun.droidvm.daemon.console.FDPipeConsoleStream;
 import cn.classfun.droidvm.daemon.console.InputConsoleStream;
 import cn.classfun.droidvm.daemon.console.SimpleConsoleStream;
+import cn.classfun.droidvm.daemon.vm.BootPlan;
 import cn.classfun.droidvm.daemon.vm.SerialPipe;
 import cn.classfun.droidvm.daemon.vm.VMBackendInstance;
 import cn.classfun.droidvm.daemon.vm.VMStartResult;
@@ -150,15 +151,14 @@ private List<String> buildCommand() {
             args.add("--hugepages");
         if (item.optBoolean("prepare_lend_mthp", true))
             args.add("--prepare-lend-mthp");
-        var initrd = item.optString("initrd", "");
-        if (!initrd.isEmpty()) {
+        var boot = BootPlan.of(config);
+        if (!boot.initrd.isEmpty()) {
             args.add("--initrd");
-            args.add(initrd);
+            args.add(boot.initrd);
         }
-        var cmdline = item.optString("cmdline", "");
-        if (!cmdline.isEmpty()) {
+        if (!boot.cmdline.isEmpty()) {
             args.add("--params");
-            args.add(cmdline);
+            args.add(boot.cmdline);
         }
         if (controlSocketPath != null) {
             args.add("--socket");
@@ -170,12 +170,11 @@ private List<String> buildCommand() {
         buildGpuCommand(args);
         buildVncCommand(args);
         buildSerialCommand(args);
-        if (item.optBoolean("use_uefi", true)) {
+        if (boot.uefi) {
+            // crosvm has no custom-firmware support; always builtin EDK2
             args.add(PATH_EDK2_FIRMWARE);
-        } else {
-            var kernel = item.optString("kernel", "");
-            if (!kernel.isEmpty())
-                args.add(kernel);
+        } else if (!boot.kernel.isEmpty()) {
+            args.add(boot.kernel);
         }
         return args;
     }
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/QemuBackendInstance.java b/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/QemuBackendInstance.java
index d4619efed..109d372f2 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/QemuBackendInstance.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/QemuBackendInstance.java
@@ -3,7 +3,6 @@
 import static android.net.LocalSocketAddress.Namespace.FILESYSTEM;
 import static java.nio.charset.StandardCharsets.UTF_8;
 import static cn.classfun.droidvm.lib.Constants.DATA_DIR;
-import static cn.classfun.droidvm.lib.Constants.PATH_EDK2_FIRMWARE;
 import static cn.classfun.droidvm.lib.Constants.PATH_EDK2_QEMU_FIRMWARE;
 import static cn.classfun.droidvm.lib.store.enums.Enums.optEnum;
 import static cn.classfun.droidvm.lib.utils.AssetUtils.getPrebuiltBinaryPath;
@@ -30,6 +29,7 @@
 import cn.classfun.droidvm.daemon.console.InputConsoleStream;
 import cn.classfun.droidvm.daemon.console.LocalSocketConsoleStream;
 import cn.classfun.droidvm.daemon.console.SimpleConsoleStream;
+import cn.classfun.droidvm.daemon.vm.BootPlan;
 import cn.classfun.droidvm.daemon.vm.VMBackendInstance;
 import cn.classfun.droidvm.daemon.vm.VMStartResult;
 import cn.classfun.droidvm.lib.natives.NativeProcess;
@@ -158,30 +158,22 @@ private List<String> buildCommand() {
                 args.add("arm-confidential-guest,id=prot0,swiotlb-size=64M");
                 break;
         }
-        if (item.optBoolean("use_uefi", true)) {
+        var boot = BootPlan.of(config);
+        if (boot.uefi) {
             args.add("-bios");
-            args.add(PATH_EDK2_QEMU_FIRMWARE);
-        } else {
-            var bios = item.optString("bios", "");
-            if (!bios.isEmpty()) {
-                args.add("-bios");
-                args.add(bios);
-            }
+            args.add(boot.firmware.isEmpty() ? PATH_EDK2_QEMU_FIRMWARE : boot.firmware);
         }
-        var kernel = item.optString("kernel", "");
-        if (!kernel.isEmpty() && !kernel.equals(PATH_EDK2_FIRMWARE)) {
+        if (!boot.kernel.isEmpty()) {
             args.add("-kernel");
-            args.add(kernel);
+            args.add(boot.kernel);
         }
-        var initrd = item.optString("initrd", "");
-        if (!initrd.isEmpty()) {
+        if (!boot.initrd.isEmpty()) {
             args.add("-initrd");
-            args.add(initrd);
+            args.add(boot.initrd);
         }
-        var cmdline = item.optString("cmdline", "");
-        if (!cmdline.isEmpty()) {
+        if (!boot.cmdline.isEmpty()) {
             args.add("-append");
-            args.add(cmdline);
+            args.add(boot.cmdline);
         }
         if (item.optBoolean("hugepages", true))
             args.add("-mem-prealloc");
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/store/vm/BootConfig.java b/app/src/main/java/cn/classfun/droidvm/lib/store/vm/BootConfig.java
new file mode 100644
index 000000000..4d86dab70
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/lib/store/vm/BootConfig.java
@@ -0,0 +1,276 @@
+package cn.classfun.droidvm.lib.store.vm;
+
+import androidx.annotation.NonNull;
+import androidx.annotation.Nullable;
+
+import androidx.annotation.StringRes;
+
+import cn.classfun.droidvm.R;
+import cn.classfun.droidvm.lib.store.base.DataItem;
+import cn.classfun.droidvm.lib.store.enums.Enums;
+import cn.classfun.droidvm.lib.store.enums.StringEnum;
+
+/**
+ * Wrapper over a VM config's "boot" object — the single source of truth
+ * for how the guest is brought up:
+ *
+ * <pre>
+ * boot: {
+ *   protocol: "uefi" | "linux",
+ *   uefi:  { firmware },                       // empty = builtin EDK2
+ *   linux: {
+ *     source: "manual" | "image",
+ *     kernel, initrd, cmdline,                 // manual-source fields
+ *     image: {
+ *       disk,                                  // index into "disks"
+ *       entry: { id, title, version } | null,  // null = bootloader default
+ *       cmdline,                               // override, empty = from image
+ *       vdafix,                                // default true
+ *       wait                                   // boot menu seconds, 0 = off
+ *     }
+ *   }
+ * }
+ * </pre>
+ *
+ * Both branches are kept in the store at once; {@code protocol} (and
+ * {@code source} below it) only select which one takes effect, so toggling
+ * in the UI never loses the other branch's values. Legacy flat keys
+ * ({@code use_uefi}/{@code kernel}/{@code initrd}/{@code cmdline}/
+ * {@code bios}) are folded into this object once, on config load — see
+ * {@link VMConfig#migrateBoot}.
+ */
+public final class BootConfig {
+    public enum Protocol implements StringEnum {
+        UEFI(R.string.edit_vm_boot_protocol_uefi),
+        LINUX(R.string.edit_vm_boot_protocol_linux);
+
+        private final @StringRes int stringId;
+
+        Protocol(@StringRes int stringId) {
+            this.stringId = stringId;
+        }
+
+        @Override
+        @StringRes
+        public int getStringId() {
+            return stringId;
+        }
+    }
+
+    public enum LinuxSource implements StringEnum {
+        IMAGE(R.string.edit_vm_kernel_source_image),
+        MANUAL(R.string.edit_vm_kernel_source_manual);
+
+        private final @StringRes int stringId;
+
+        LinuxSource(@StringRes int stringId) {
+            this.stringId = stringId;
+        }
+
+        @Override
+        @StringRes
+        public int getStringId() {
+            return stringId;
+        }
+    }
+
+    public static final long DEFAULT_BOOT_WAIT = 1;
+
+    /** Manual-source cmdline seed: first virtio disk, second partition. */
+    public static final String DEFAULT_MANUAL_CMDLINE = "root=/dev/vda2";
+
+    /**
+     * Reserved {@code vm_start} boot_entry / boot-menu selection key for
+     * "boot this disk with DroidVM's built-in kernel" — not a disk image
+     * entry, so it is matched as a sentinel (see {@code BootPlan.resolve})
+     * and can never collide with an lbx entry id (which never start '@').
+     */
+    public static final String BUILTIN_ENTRY_KEY = "@droidvm:builtin-kernel";
+
+    public final DataItem item;
+
+    private BootConfig(@NonNull DataItem item) {
+        this.item = item;
+    }
+
+    /** The "boot" object of {@code config}, created empty when missing. */
+    @NonNull
+    public static BootConfig of(@NonNull VMConfig config) {
+        return new BootConfig(child(config.item, "boot"));
+    }
+
+    /** Child object at {@code key}, created (and stored) when missing. */
+    @NonNull
+    private static DataItem child(@NonNull DataItem parent, @NonNull String key) {
+        var c = parent.opt(key, null);
+        if (c == null || !c.is(DataItem.Type.OBJECT)) {
+            // set() stores a copy; re-read so callers mutate the stored item
+            parent.set(key, DataItem.newObject());
+            c = parent.get(key);
+        }
+        return c;
+    }
+
+    @NonNull
+    public Protocol getProtocol() {
+        return Enums.optEnum(item, "protocol", Protocol.UEFI);
+    }
+
+    public void setProtocol(@NonNull Protocol protocol) {
+        item.set("protocol", protocol);
+    }
+
+    // --- uefi branch ---
+
+    @NonNull
+    private DataItem uefi() {
+        return child(item, "uefi");
+    }
+
+    /** Custom firmware path; empty = builtin EDK2 (QEMU backend only). */
+    @NonNull
+    public String getUefiFirmware() {
+        return uefi().optString("firmware", "");
+    }
+
+    public void setUefiFirmware(@NonNull String firmware) {
+        uefi().set("firmware", firmware);
+    }
+
+    // --- linux branch ---
+
+    @NonNull
+    private DataItem linux() {
+        return child(item, "linux");
+    }
+
+    @NonNull
+    public LinuxSource getLinuxSource() {
+        return Enums.optEnum(linux(), "source", LinuxSource.MANUAL);
+    }
+
+    public void setLinuxSource(@NonNull LinuxSource source) {
+        linux().set("source", source);
+    }
+
+    @NonNull
+    public String getKernel() {
+        return linux().optString("kernel", "");
+    }
+
+    public void setKernel(@NonNull String kernel) {
+        linux().set("kernel", kernel);
+    }
+
+    @NonNull
+    public String getInitrd() {
+        return linux().optString("initrd", "");
+    }
+
+    public void setInitrd(@NonNull String initrd) {
+        linux().set("initrd", initrd);
+    }
+
+    /** Manual-source cmdline (image mode uses {@link #getImageCmdline}). */
+    @NonNull
+    public String getCmdline() {
+        return linux().optString("cmdline", "");
+    }
+
+    public void setCmdline(@NonNull String cmdline) {
+        linux().set("cmdline", cmdline);
+    }
+
+    // --- linux.image branch ---
+
+    @NonNull
+    private DataItem image() {
+        return child(linux(), "image");
+    }
+
+    /** Index into the VM's "disks" array of the image to scan. */
+    public int getImageDisk() {
+        return (int) image().optLong("disk", 0);
+    }
+
+    public void setImageDisk(int disk) {
+        image().set("disk", (long) disk);
+    }
+
+    /** Pinned boot entry; null = follow the bootloader default. */
+    @Nullable
+    public ImageEntry getImageEntry() {
+        var e = image().opt("entry", null);
+        if (e == null || !e.is(DataItem.Type.OBJECT)) return null;
+        return new ImageEntry(
+            e.optString("id", null),
+            e.optString("title", null),
+            e.optString("version", null)
+        );
+    }
+
+    public void setImageEntry(@Nullable ImageEntry entry) {
+        if (entry == null) {
+            image().remove("entry");
+            return;
+        }
+        var e = DataItem.newObject();
+        e.set("id", entry.id);
+        e.set("title", entry.title);
+        e.set("version", entry.version);
+        image().set("entry", e);
+    }
+
+    /** Image mode cmdline override; empty = use the image's cmdline. */
+    @NonNull
+    public String getImageCmdline() {
+        return image().optString("cmdline", "");
+    }
+
+    public void setImageCmdline(@NonNull String cmdline) {
+        image().set("cmdline", cmdline);
+    }
+
+    /** Rewrite root=/resume= device names to PARTUUID= (lbx vdafix). */
+    public boolean isVdafix() {
+        return image().optBoolean("vdafix", true);
+    }
+
+    public void setVdafix(boolean vdafix) {
+        image().set("vdafix", vdafix);
+    }
+
+    /** Boot menu countdown in seconds on manual GUI start; 0 = no menu. */
+    public long getBootWait() {
+        return image().optLong("wait", DEFAULT_BOOT_WAIT);
+    }
+
+    public void setBootWait(long seconds) {
+        image().set("wait", Math.max(seconds, 0));
+    }
+
+    /**
+     * Identity of a pinned boot entry, matched against a fresh scan in
+     * order: exact id, exact title, then bootloader default ({@code lbx}
+     * ids embed the kernel version for BLS/extlinux, so updates in the
+     * guest are expected to miss here and fall back).
+     */
+    public static final class ImageEntry {
+        @Nullable
+        public final String id;
+        @Nullable
+        public final String title;
+        @Nullable
+        public final String version;
+
+        public ImageEntry(
+            @Nullable String id,
+            @Nullable String title,
+            @Nullable String version
+        ) {
+            this.id = id;
+            this.title = title;
+            this.version = version;
+        }
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/store/vm/VMConfig.java b/app/src/main/java/cn/classfun/droidvm/lib/store/vm/VMConfig.java
index 103d52e4d..4aa00cde5 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/store/vm/VMConfig.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/store/vm/VMConfig.java
@@ -24,6 +24,35 @@ public VMConfig(@NonNull JSONObject obj) throws JSONException {
             item.set("use_uefi", true);
             item.remove("kernel");
         }
+        migrateBoot();
+    }
+
+    /**
+     * Folds the legacy flat boot keys (use_uefi/kernel/initrd/cmdline/bios)
+     * into the "boot" object on load. The legacy keys are left in place so
+     * the config file still boots under an older daemon/APK; everything in
+     * this codebase reads only the "boot" object from here on.
+     */
+    private void migrateBoot() {
+        if (item.opt("boot", null) != null) return;
+        var legacy = item.opt("use_uefi", null) != null
+            || !item.optString("kernel", "").isEmpty()
+            || !item.optString("initrd", "").isEmpty()
+            || !item.optString("cmdline", "").isEmpty()
+            || !item.optString("bios", "").isEmpty();
+        if (!legacy) return;
+        var boot = BootConfig.of(this);
+        var uefi = item.optBoolean("use_uefi", true);
+        // legacy QEMU oddity: use_uefi=false + "bios" + no kernel meant
+        // "boot a custom firmware" — that is UEFI protocol in the new model
+        if (!uefi && item.optString("kernel", "").isEmpty()
+            && !item.optString("bios", "").isEmpty())
+            uefi = true;
+        boot.setProtocol(uefi ? BootConfig.Protocol.UEFI : BootConfig.Protocol.LINUX);
+        boot.setUefiFirmware(item.optString("bios", ""));
+        boot.setKernel(item.optString("kernel", ""));
+        boot.setInitrd(item.optString("initrd", ""));
+        boot.setCmdline(item.optString("cmdline", ""));
     }
 
     /** Iterates this VM's NIC entries (the "networks" array). */
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/agent/base/AgentVM.java b/app/src/main/java/cn/classfun/droidvm/ui/agent/base/AgentVM.java
index 94862a03f..42d5d28de 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/agent/base/AgentVM.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/agent/base/AgentVM.java
@@ -28,6 +28,7 @@
 import cn.classfun.droidvm.lib.store.disk.DiskBus;
 import cn.classfun.droidvm.lib.store.disk.DiskConfig;
 import cn.classfun.droidvm.lib.store.disk.DiskStore;
+import cn.classfun.droidvm.lib.store.vm.BootConfig;
 import cn.classfun.droidvm.lib.store.vm.SharedDirType;
 import cn.classfun.droidvm.lib.store.vm.VMConfig;
 import cn.classfun.droidvm.lib.utils.FileUtils;
@@ -108,10 +109,12 @@ public VMConfig buildVM() {
         vm.item.set("cpu_count", 1);
         vm.item.set("memory_mb", 384);
         vm.item.set("prepare_lend_mthp", false);
-        vm.item.set("use_uefi", false);
-        vm.item.set("kernel", PATH_BUILTIN_KERNEL);
-        vm.item.set("initrd", PATH_BUILTIN_INITRD);
-        vm.item.set("cmdline", "rd.systemd.unit=host-agent.target");
+        var boot = BootConfig.of(vm);
+        boot.setProtocol(BootConfig.Protocol.LINUX);
+        boot.setLinuxSource(BootConfig.LinuxSource.MANUAL);
+        boot.setKernel(PATH_BUILTIN_KERNEL);
+        boot.setInitrd(PATH_BUILTIN_INITRD);
+        boot.setCmdline("rd.systemd.unit=host-agent.target");
         var diskItems = DataItem.newArray();
         for (var disk : disks) {
             var item = DataItem.newObject();
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/disk/download/ImportURLActivity.java b/app/src/main/java/cn/classfun/droidvm/ui/disk/download/ImportURLActivity.java
index 8b4037c49..f313b1dca 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/disk/download/ImportURLActivity.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/disk/download/ImportURLActivity.java
@@ -49,6 +49,7 @@
 import cn.classfun.droidvm.ui.disk.create.DiskFormat;
 import cn.classfun.droidvm.ui.widgets.tools.DownloadWidget;
 import cn.classfun.droidvm.ui.widgets.tools.DownloadWidget.OnDownloadListener;
+import cn.classfun.droidvm.ui.widgets.tools.KernelAnalysisWidget;
 import cn.classfun.droidvm.ui.widgets.row.TextInputRowWidget;
 
 public final class ImportURLActivity extends AppCompatActivity implements OnDownloadListener {
@@ -61,6 +62,7 @@ public final class ImportURLActivity extends AppCompatActivity implements OnDown
     private MaterialCardView cardInfo;
     private TextView tvInfoSize, tvInfoType;
     private DownloadWidget downloadWidget;
+    private KernelAnalysisWidget kernelAnalysis;
     private NestedScrollView scrollView;
     private ExtendedFloatingActionButton fabImport;
     private CollapsingToolbarLayout collapsingToolbar;
@@ -88,6 +90,7 @@ protected void onCreate(@Nullable Bundle savedInstanceState) {
         tvInfoSize = findViewById(R.id.tv_info_size);
         tvInfoType = findViewById(R.id.tv_info_type);
         downloadWidget = findViewById(R.id.download_widget);
+        kernelAnalysis = findViewById(R.id.kernel_analysis);
         scrollView = findViewById(R.id.scroll_view);
         fabImport = findViewById(R.id.fab_import);
         initialize();
@@ -111,6 +114,8 @@ public void handleOnBackPressed() {
         inputUrl.addTextChangedListener(new SimpleTextWatcher() {
             @Override
             public void onTextChanged(CharSequence s, int st, int b, int c) {
+                // The URL changed, so any loaded info / kernel analysis is stale.
+                kernelAnalysis.reset();
                 if (infoLoaded) {
                     infoLoaded = false;
                     cardInfo.setVisibility(GONE);
@@ -118,6 +123,7 @@ public void onTextChanged(CharSequence s, int st, int b, int c) {
                 }
             }
         });
+        kernelAnalysis.setUrlProvider(() -> inputUrl.getText());
         btnLoad.setOnClickListener(v -> doLoad());
         fabImport.setOnClickListener(v -> doImport());
         setStatusIdle();
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/disk/lxc/ImportLxcImagesActivity.java b/app/src/main/java/cn/classfun/droidvm/ui/disk/lxc/ImportLxcImagesActivity.java
index 33e6f2481..b6cec1d6c 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/disk/lxc/ImportLxcImagesActivity.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/disk/lxc/ImportLxcImagesActivity.java
@@ -62,6 +62,7 @@
 import cn.classfun.droidvm.ui.widgets.row.TextInputRowWidget;
 import cn.classfun.droidvm.ui.widgets.tools.DownloadWidget;
 import cn.classfun.droidvm.ui.widgets.tools.DownloadWidget.OnDownloadListener;
+import cn.classfun.droidvm.ui.widgets.tools.KernelAnalysisWidget;
 
 public final class ImportLxcImagesActivity extends AppCompatActivity implements OnDownloadListener {
     private static final String TAG = "ImportLxcImages";
@@ -87,6 +88,7 @@ public final class ImportLxcImagesActivity extends AppCompatActivity implements
     private TextView tvInfoSize, tvInfoPath;
     private ExtendedFloatingActionButton fabImport;
     private DownloadWidget downloadWidget;
+    private KernelAnalysisWidget kernelAnalysis;
     private NestedScrollView scrollView;
     private CollapsingToolbarLayout collapsingToolbar;
     private MaterialToolbar toolbar;
@@ -128,6 +130,9 @@ protected void onCreate(@Nullable Bundle savedInstanceState) {
         tvInfoPath = findViewById(R.id.tv_info_path);
         fabImport = findViewById(R.id.fab_import);
         downloadWidget = findViewById(R.id.download_widget);
+        kernelAnalysis = findViewById(R.id.kernel_analysis);
+        kernelAnalysis.setUrlProvider(() -> selectedImage == null
+            ? null : pathJoin(getDownloadBaseUrl(), selectedImage.getDownloadPath()));
         scrollView = findViewById(R.id.scroll_view);
         initialize();
     }
@@ -469,6 +474,9 @@ private void showOutput(@NonNull LxcImage img) {
         var downloadUrl = pathJoin(getDownloadBaseUrl(), img.getDownloadPath());
         tvInfoPath.setText(getString(R.string.lxc_info_path, downloadUrl));
         cardInfo.setVisibility(VISIBLE);
+        // A new image is selected: offer a fresh kernel analysis for it.
+        kernelAnalysis.setVisibility(VISIBLE);
+        kernelAnalysis.reset();
     }
 
     private void hideOutput() {
@@ -623,6 +631,7 @@ private void setOutputEnabled(boolean enabled) {
             tvInfoSize.setText("");
             tvInfoPath.setText("");
             cardInfo.setVisibility(GONE);
+            kernelAnalysis.setVisibility(GONE);
             selectedImage = null;
         }
     }
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/VMActions.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/VMActions.java
index 006db820d..7c7d5d0b0 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/VMActions.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/VMActions.java
@@ -1,9 +1,12 @@
 package cn.classfun.droidvm.ui.vm;
 
 import static android.widget.Toast.LENGTH_LONG;
+import static cn.classfun.droidvm.lib.Constants.PATH_BUILTIN_INITRD;
+import static cn.classfun.droidvm.lib.Constants.PATH_BUILTIN_KERNEL;
 import static cn.classfun.droidvm.ui.main.settings.MainSettingsFragment.isAutoConsoleEnabled;
 import static cn.classfun.droidvm.ui.main.settings.MainSettingsFragment.isClearLogsBeforeStartEnabled;
 
+import android.content.Context;
 import android.os.Handler;
 import android.util.Log;
 import android.widget.Toast;
@@ -16,8 +19,11 @@
 
 import cn.classfun.droidvm.R;
 import cn.classfun.droidvm.lib.daemon.DaemonConnection;
+import cn.classfun.droidvm.lib.store.vm.BootConfig;
 import cn.classfun.droidvm.lib.store.vm.VMConfig;
+import cn.classfun.droidvm.lib.store.vm.VMStore;
 import cn.classfun.droidvm.lib.ui.UIContext;
+import cn.classfun.droidvm.ui.vm.boot.BootMenuDialog;
 
 public final class VMActions {
     private static final String TAG = "VMActions";
@@ -30,6 +36,84 @@ public static void createAndStart(
         @NonNull Handler mainHandler,
         @NonNull UIContext ui,
         @NonNull AtomicBoolean wantOpenConsole
+    ) {
+        // manual GUI start of an image-booting VM goes through the
+        // GRUB-style entry menu first (auto-start in the daemon does not)
+        if (BootMenuDialog.wanted(config) && ui.isAlive()) {
+            BootMenuDialog.show(
+                ui.getContext(), config,
+                (bootEntry, remember, selected, builtinCmdline) -> {
+                    var startEntry = remember
+                        ? rememberChoice(ui.getContext(), config, bootEntry,
+                            selected, builtinCmdline)
+                        : bootEntry;
+                    doCreateAndStart(config, mainHandler, ui, wantOpenConsole, startEntry);
+                },
+                () -> { /* cancelled: do not start */ }
+            );
+            return;
+        }
+        doCreateAndStart(config, mainHandler, ui, wantOpenConsole, null);
+    }
+
+    /**
+     * Persists a "remember this choice" boot-menu selection to the on-disk
+     * VM store — the source of truth the list reloads on resume, which is
+     * why a one-shot start that only mutated the in-memory config never
+     * stuck. The same change is mirrored onto {@code config} so the daemon
+     * gets it via vm_modify. The built-in kernel is baked into a plain
+     * manual source (so it persists without a one-shot override and the
+     * menu stops appearing for that VM); image entries are pinned, with a
+     * null selection clearing the pin to follow the bootloader default.
+     *
+     * @return the boot_entry to start with (null once the built-in choice
+     *         has been baked into the config; the original key otherwise)
+     */
+    @Nullable
+    private static String rememberChoice(
+        @NonNull Context context,
+        @NonNull VMConfig config,
+        @Nullable String bootEntry,
+        @Nullable BootConfig.ImageEntry selected,
+        @Nullable String builtinCmdline
+    ) {
+        boolean builtin = BootConfig.BUILTIN_ENTRY_KEY.equals(bootEntry);
+        applyChoice(BootConfig.of(config), builtin, selected, builtinCmdline);
+        var store = new VMStore();
+        if (store.load(context)) {
+            var stored = store.findById(config.getId());
+            if (stored != null) {
+                applyChoice(BootConfig.of(stored), builtin, selected, builtinCmdline);
+                store.save(context);
+            }
+        }
+        // built-in now boots as a plain manual config — no one-shot override
+        return builtin ? null : bootEntry;
+    }
+
+    private static void applyChoice(
+        @NonNull BootConfig boot,
+        boolean builtin,
+        @Nullable BootConfig.ImageEntry selected,
+        @Nullable String builtinCmdline
+    ) {
+        if (!builtin) {
+            boot.setImageEntry(selected);
+            return;
+        }
+        boot.setLinuxSource(BootConfig.LinuxSource.MANUAL);
+        boot.setKernel(PATH_BUILTIN_KERNEL);
+        boot.setInitrd(PATH_BUILTIN_INITRD);
+        boot.setCmdline(builtinCmdline != null && !builtinCmdline.isEmpty()
+            ? builtinCmdline : BootConfig.DEFAULT_MANUAL_CMDLINE);
+    }
+
+    private static void doCreateAndStart(
+        @NonNull VMConfig config,
+        @NonNull Handler mainHandler,
+        @NonNull UIContext ui,
+        @NonNull AtomicBoolean wantOpenConsole,
+        @Nullable String bootEntry
     ) {
         var conn = DaemonConnection.getInstance();
         var createReq = conn.buildRequest("vm_exists");
@@ -46,6 +130,7 @@ public static void createAndStart(
             .buildRequest("vm_start")
             .copy(resp, "vm_id")
             .put("clear_logs_before_start", isClearLogsBeforeStartEnabled(ui.getContext()))
+            .put("boot_entry", bootEntry == null ? "" : bootEntry)
             .onResponse(onStart)
             .onUnsuccessful(f)
             .onError(err)
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/boot/BootEntries.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/boot/BootEntries.java
new file mode 100644
index 000000000..85066a8d5
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/boot/BootEntries.java
@@ -0,0 +1,301 @@
+package cn.classfun.droidvm.ui.vm.boot;
+
+import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
+
+import android.content.Context;
+
+import androidx.annotation.NonNull;
+import androidx.annotation.Nullable;
+
+import org.json.JSONArray;
+import org.json.JSONObject;
+
+import java.io.BufferedReader;
+import java.io.ByteArrayOutputStream;
+import java.io.IOException;
+import java.io.InputStreamReader;
+import java.nio.charset.StandardCharsets;
+import java.util.ArrayList;
+import java.util.List;
+import java.util.concurrent.TimeUnit;
+
+import cn.classfun.droidvm.R;
+import cn.classfun.droidvm.lib.daemon.DaemonConnection;
+import cn.classfun.droidvm.lib.store.vm.BootConfig;
+
+/**
+ * UI-side view of an image's boot entries: scans via the daemon's
+ * {@code vm_bootscan} (disk images are usually only readable by the
+ * daemon process) and mirrors {@code BootPlan}'s pin-matching rules so
+ * the edit tab and the boot menu preview exactly what would boot.
+ */
+public final class BootEntries {
+    @NonNull
+    public final List<Entry> entries;
+
+    private BootEntries(@NonNull List<Entry> entries) {
+        this.entries = entries;
+    }
+
+    public interface OnScan {
+        /** Called on the daemon executor thread; post to main as needed. */
+        void onScan(@Nullable BootEntries result, @Nullable String error);
+    }
+
+    /** Live download progress from lbx's {@code progress:} lines. */
+    public interface OnProgress {
+        /** Chunks downloaded so far, and the file's total (-1 if unknown). */
+        void onProgress(int loaded, int total);
+    }
+
+    /** One entry of `lbx entries --json`. */
+    public static final class Entry {
+        @Nullable
+        public final String id;
+        @Nullable
+        public final String title;
+        @Nullable
+        public final String version;
+        public final boolean isDefault;
+        @NonNull
+        public final String source;
+        @NonNull
+        public final String kernel;
+        @NonNull
+        public final List<String> initrd;
+        @NonNull
+        public final String cmdline;
+        @NonNull
+        public final String cmdlineFixed;
+        /** CONFIG_DMA_RESTRICTED_POOL: TRUE / FALSE, or null when lbx
+         *  could not determine it (no config-* file in the image). */
+        @Nullable
+        public final Boolean dmaRestrictedPool;
+
+        Entry(@NonNull JSONObject o) {
+            id = emptyToNull(optStr(o, "id"));
+            title = emptyToNull(optStr(o, "title"));
+            version = emptyToNull(optStr(o, "version"));
+            isDefault = o.optBoolean("default", false);
+            source = optStr(o, "source");
+            kernel = optStr(o, "kernel");
+            cmdline = optStr(o, "cmdline");
+            cmdlineFixed = optStr(o, "cmdline_fixed");
+            dmaRestrictedPool = o.isNull("dma_restricted_pool")
+                ? null : o.optBoolean("dma_restricted_pool", false);
+            initrd = new ArrayList<>();
+            var arr = o.optJSONArray("initrd");
+            if (arr != null) for (int i = 0; i < arr.length(); i++) {
+                var s = arr.optString(i, "");
+                if (!s.isEmpty()) initrd.add(s);
+            }
+        }
+
+        @NonNull
+        public String label() {
+            if (title != null) return title;
+            if (version != null) return version;
+            if (id != null) return id;
+            return "(untitled)";
+        }
+
+        @NonNull
+        public String displayLabel(@NonNull Context ctx) {
+            return isDefault
+                ? ctx.getString(R.string.edit_vm_boot_entry_default_mark, label())
+                : label();
+        }
+
+        /** The selection key sent as the start request's boot_entry. */
+        @NonNull
+        public String selectionKey() {
+            return id != null ? id : label();
+        }
+
+        @NonNull
+        public BootConfig.ImageEntry toImageEntry() {
+            return new BootConfig.ImageEntry(id, title, version);
+        }
+
+        /** The cmdline that would boot, honoring the vdafix switch. */
+        @NonNull
+        public String effectiveCmdline(boolean vdafix) {
+            return vdafix && !cmdlineFixed.isEmpty() ? cmdlineFixed : cmdline;
+        }
+
+        /** vdafix did not (or could not) neutralize a device-name root=. */
+        public boolean hasRootDeviceWarning(boolean vdafix) {
+            var c = effectiveCmdline(vdafix);
+            return c.contains("root=/dev/sd") || c.contains("root=/dev/nvme")
+                || c.contains("root=/dev/hd");
+        }
+
+        /**
+         * Kernel is known to lack CONFIG_DMA_RESTRICTED_POOL, so its virtio
+         * DMA cannot reach the host-shared pool and the devices fail under a
+         * gunyah protected VM. Unknown (null) does not warn.
+         */
+        public boolean lacksRestrictedDmaPool() {
+            return Boolean.FALSE.equals(dmaRestrictedPool);
+        }
+    }
+
+    @Nullable
+    private static String emptyToNull(@NonNull String s) {
+        return s.isEmpty() ? null : s;
+    }
+
+    /**
+     * Null-safe string read: org.json's optString turns a JSON null into
+     * the literal string "null" instead of the fallback.
+     */
+    @NonNull
+    static String optStr(@NonNull JSONObject o, @NonNull String key) {
+        return o.isNull(key) ? "" : o.optString(key, "");
+    }
+
+    /** Asynchronous scan of {@code image} through the daemon. */
+    public static void scan(@NonNull String image, @NonNull OnScan callback) {
+        DaemonConnection.getInstance().buildRequest("vm_bootscan")
+            .put("image", image)
+            .onResponse(resp -> callback.onScan(
+                parse(resp.optJSONArray("entries")), null))
+            .onUnsuccessful(resp -> callback.onScan(
+                null, resp.optString("message", "scan failed")))
+            .onError(e -> callback.onScan(null, fmt("%s", e.getMessage())))
+            .invoke();
+    }
+
+    /** Hard cap in case lbx wedges; its own --timeout handles normal stalls. */
+    private static final long ANALYZE_HARD_TIMEOUT_MS = 5 * 60_000;
+
+    /**
+     * Analyze a remote (URL) image by running lbx directly from the UI — a URL
+     * fetch needs no root, and lbx ships as {@code liblbx.so} in the app's
+     * nativeLibraryDir, which the app may execute (unlike the daemon's
+     * data-dir copy). So we skip the daemon and stream lbx's
+     * {@code progress: <n>/<m>} lines for a live count instead of a spinner.
+     * Runs on a background thread; both callbacks fire there, so post to main.
+     * {@code timeoutSecs} becomes lbx's per-connection {@code --timeout}, so a
+     * stalled chunk download aborts on its own rather than hanging the UI.
+     */
+    public static void analyzeUrl(
+        @NonNull Context ctx, @NonNull String url, int timeoutSecs,
+        @NonNull OnProgress onProgress, @NonNull OnScan onScan
+    ) {
+        var lbx = ctx.getApplicationInfo().nativeLibraryDir + "/liblbx.so";
+        var thread = new Thread(
+            () -> runAnalyze(lbx, url, timeoutSecs, onProgress, onScan), "lbx-analyze");
+        thread.setDaemon(true);
+        thread.start();
+    }
+
+    private static void runAnalyze(
+        @NonNull String lbx, @NonNull String url, int timeoutSecs,
+        @NonNull OnProgress onProgress, @NonNull OnScan onScan
+    ) {
+        Process process = null;
+        try {
+            process = new ProcessBuilder(
+                lbx, "--timeout", String.valueOf(timeoutSecs), "entries", url, "--json"
+            ).start();
+            var proc = process;
+            // Drain stdout (the JSON) on its own thread so the pipe never
+            // blocks while we read stderr line by line.
+            var stdout = new ByteArrayOutputStream();
+            var stdoutThread = new Thread(() -> {
+                try {
+                    proc.getInputStream().transferTo(stdout);
+                } catch (IOException ignored) {
+                }
+            });
+            stdoutThread.start();
+            var errBuf = new StringBuilder();
+            try (var br = new BufferedReader(new InputStreamReader(
+                proc.getErrorStream(), StandardCharsets.UTF_8))) {
+                String line;
+                while ((line = br.readLine()) != null) {
+                    if (!reportProgress(line, onProgress))
+                        errBuf.append(line).append('\n');
+                }
+            }
+            stdoutThread.join();
+            if (!proc.waitFor(ANALYZE_HARD_TIMEOUT_MS, TimeUnit.MILLISECONDS)) {
+                proc.destroyForcibly();
+                onScan.onScan(null, "analysis timed out");
+                return;
+            }
+            int code = proc.exitValue();
+            if (code == 0) {
+                onScan.onScan(parse(new JSONArray(stdout.toString("UTF-8"))), null);
+            } else {
+                // Surface lbx's real stderr rather than a generic error.
+                var msg = errBuf.toString().trim();
+                onScan.onScan(null, msg.isEmpty() ? fmt("lbx exited with %d", code) : msg);
+            }
+        } catch (Exception e) {
+            onScan.onScan(null, e.getMessage() != null ? e.getMessage() : "analysis failed");
+        } finally {
+            if (process != null) process.destroy();
+        }
+    }
+
+    /** Parse a {@code progress: <n>/<m>} line, reporting it; false otherwise. */
+    private static boolean reportProgress(@NonNull String line, @NonNull OnProgress cb) {
+        var t = line.trim();
+        if (!t.startsWith("progress:")) return false;
+        var rest = t.substring("progress:".length()).trim();
+        int slash = rest.indexOf('/');
+        try {
+            int loaded = Integer.parseInt((slash < 0 ? rest : rest.substring(0, slash)).trim());
+            int total = slash < 0 ? -1 : Integer.parseInt(rest.substring(slash + 1).trim());
+            cb.onProgress(loaded, total);
+        } catch (NumberFormatException ignored) {
+            return false; // not actually a progress line
+        }
+        return true;
+    }
+
+    @NonNull
+    private static BootEntries parse(@Nullable JSONArray arr) {
+        var list = new ArrayList<Entry>();
+        if (arr != null) for (int i = 0; i < arr.length(); i++) {
+            var o = arr.optJSONObject(i);
+            if (o != null) list.add(new Entry(o));
+        }
+        return new BootEntries(list);
+    }
+
+    /**
+     * The entry a boot would use right now: pinned entry by exact id,
+     * then exact title, falling back to the bootloader default — the
+     * same cascade as the daemon's BootPlan.
+     */
+    @Nullable
+    public Entry resolve(@Nullable BootConfig.ImageEntry pinned) {
+        if (pinned != null) {
+            for (var e : entries)
+                if (pinned.id != null && pinned.id.equals(e.id)) return e;
+            for (var e : entries)
+                if (pinned.title != null && pinned.title.equals(e.title)) return e;
+        }
+        return defaultEntry();
+    }
+
+    /** True when {@code pinned} no longer matches any entry. */
+    public boolean isFallback(@Nullable BootConfig.ImageEntry pinned) {
+        if (pinned == null) return false;
+        for (var e : entries) {
+            if (pinned.id != null && pinned.id.equals(e.id)) return false;
+            if (pinned.title != null && pinned.title.equals(e.title)) return false;
+        }
+        return true;
+    }
+
+    @Nullable
+    public Entry defaultEntry() {
+        for (var e : entries)
+            if (e.isDefault) return e;
+        return entries.isEmpty() ? null : entries.get(0);
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/boot/BootMenuDialog.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/boot/BootMenuDialog.java
new file mode 100644
index 000000000..68bbf8940
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/boot/BootMenuDialog.java
@@ -0,0 +1,369 @@
+package cn.classfun.droidvm.ui.vm.boot;
+
+import static android.view.View.GONE;
+import static android.view.View.VISIBLE;
+import static cn.classfun.droidvm.lib.store.enums.Enums.optEnum;
+
+import android.content.Context;
+import android.os.Handler;
+import android.os.Looper;
+import android.text.Spannable;
+import android.text.SpannableStringBuilder;
+import android.text.style.ForegroundColorSpan;
+import android.view.LayoutInflater;
+import android.widget.CheckBox;
+import android.widget.RadioButton;
+import android.widget.RadioGroup;
+import android.widget.TextView;
+
+import androidx.annotation.NonNull;
+import androidx.annotation.Nullable;
+import androidx.appcompat.app.AlertDialog;
+
+import com.google.android.material.color.MaterialColors;
+import com.google.android.material.dialog.MaterialAlertDialogBuilder;
+
+import cn.classfun.droidvm.R;
+import cn.classfun.droidvm.lib.store.vm.BootConfig;
+import cn.classfun.droidvm.lib.store.vm.ProtectedVM;
+import cn.classfun.droidvm.lib.store.vm.VMConfig;
+
+/**
+ * GRUB-style boot entry menu shown on a manual GUI start of a VM that
+ * boots from a disk image: the resolved entry is preselected, a countdown
+ * runs on the Boot button (touching the list stops it, like pressing a
+ * key in GRUB), and the choice is one-shot unless "remember" is ticked.
+ */
+public final class BootMenuDialog {
+    /** RadioButton id of the fixed "DroidVM built-in kernel" entry, kept
+     *  well clear of the per-index ids ({@link #idFor}). */
+    private static final int BUILTIN_RADIO_ID = 1_000_000;
+
+    /** Extra grace on the auto-boot countdown when the entry it would boot
+     *  carries a warning, giving the user time to pick another. */
+    private static final int WARNED_COUNTDOWN_GRACE = 3;
+
+    public interface OnProceed {
+        /**
+         * @param bootEntry      one-shot entry selection key for vm_start
+         *                       (null = follow stored config;
+         *                       {@link BootConfig#BUILTIN_ENTRY_KEY} = built-in kernel)
+         * @param remember       whether to persist the selection (auto persists
+         *                       as "clear pin"; built-in switches to a manual config)
+         * @param selected       image entry to pin when remembering (null otherwise)
+         * @param builtinCmdline the cmdline the built-in kernel would use, for
+         *                       persisting; non-null only for the built-in entry
+         */
+        void proceed(@Nullable String bootEntry, boolean remember,
+                     @Nullable BootConfig.ImageEntry selected,
+                     @Nullable String builtinCmdline);
+    }
+
+    private BootMenuDialog() {
+    }
+
+    /** True when this VM's config wants the menu on manual start. */
+    public static boolean wanted(@NonNull VMConfig config) {
+        var boot = BootConfig.of(config);
+        return boot.getProtocol() == BootConfig.Protocol.LINUX
+            && boot.getLinuxSource() == BootConfig.LinuxSource.IMAGE
+            && boot.getBootWait() > 0;
+    }
+
+    public static void show(
+        @NonNull Context context,
+        @NonNull VMConfig config,
+        @NonNull OnProceed onProceed,
+        @NonNull Runnable onCancel
+    ) {
+        var boot = BootConfig.of(config);
+        var view = LayoutInflater.from(context)
+            .inflate(R.layout.dialog_boot_menu, null);
+        RadioGroup group = view.findViewById(R.id.rg_boot_entries);
+        TextView summary = view.findViewById(R.id.tv_boot_menu_summary);
+        TextView warn = view.findViewById(R.id.tv_boot_menu_warn);
+        CheckBox remember = view.findViewById(R.id.cb_boot_menu_remember);
+
+        var state = new Object() {
+            @Nullable
+            BootEntries entries;
+            long secondsLeft = Math.max(boot.getBootWait(), 1);
+            boolean countdownActive = false;
+            boolean done = false;
+        };
+        var handler = new Handler(Looper.getMainLooper());
+
+        var dialog = new MaterialAlertDialogBuilder(context)
+            .setTitle(context.getString(
+                R.string.edit_vm_boot_menu_title, config.getName()))
+            .setView(view)
+            .setPositiveButton(R.string.edit_vm_boot_menu_boot, null)
+            .setNegativeButton(android.R.string.cancel, null)
+            .setCancelable(false)
+            .create();
+
+        Runnable fire = () -> {
+            if (state.done) return;
+            state.done = true;
+            dialog.dismiss();
+            var entries = state.entries;
+            int checkedId = group.getCheckedRadioButtonId();
+            if (checkedId == BUILTIN_RADIO_ID) {
+                onProceed.proceed(BootConfig.BUILTIN_ENTRY_KEY, remember.isChecked(),
+                    null, builtinCmdline(boot, entries));
+                return;
+            }
+            // radio index 0 = auto; entry i sits at radio index i + 1
+            int index = checkedId - 1;
+            if (entries == null || index <= 0) {
+                onProceed.proceed(null, remember.isChecked(), null, null);
+                return;
+            }
+            var entry = entries.entries.get(index - 1);
+            onProceed.proceed(
+                entry.selectionKey(), remember.isChecked(), entry.toImageEntry(), null);
+        };
+
+        var tick = new Runnable() {
+            @Override
+            public void run() {
+                if (state.done || !state.countdownActive) return;
+                var btn = dialog.getButton(AlertDialog.BUTTON_POSITIVE);
+                if (state.secondsLeft <= 0) {
+                    fire.run();
+                    return;
+                }
+                btn.setText(context.getString(
+                    R.string.edit_vm_boot_menu_boot_in, state.secondsLeft));
+                state.secondsLeft--;
+                handler.postDelayed(this, 1000);
+            }
+        };
+
+        Runnable stopCountdown = () -> {
+            if (!state.countdownActive) return;
+            state.countdownActive = false;
+            dialog.getButton(AlertDialog.BUTTON_POSITIVE)
+                .setText(R.string.edit_vm_boot_menu_boot);
+        };
+
+        // fixed escape hatch pinned to the bottom of the list: boot the disk
+        // with DroidVM's built-in kernel (useful when the guest's own kernel
+        // won't direct-boot, or its bootloader can't be scanned)
+        Runnable addBuiltin = () -> addRadio(context, group, BUILTIN_RADIO_ID,
+            context.getString(R.string.edit_vm_boot_entry_builtin), null, stopCountdown);
+
+        dialog.setOnShowListener(d -> {
+            dialog.getButton(AlertDialog.BUTTON_POSITIVE)
+                .setOnClickListener(v -> fire.run());
+            dialog.getButton(AlertDialog.BUTTON_NEGATIVE)
+                .setOnClickListener(v -> {
+                    state.done = true;
+                    dialog.dismiss();
+                    onCancel.run();
+                });
+        });
+        dialog.show();
+
+        // auto option is always present; entries arrive after the scan, and
+        // the built-in entry is appended last so it stays at the bottom
+        addRadio(context, group, idFor(0),
+            context.getString(R.string.edit_vm_boot_entry_auto), null, stopCountdown);
+        group.check(idFor(0));
+        summary.setVisibility(VISIBLE);
+        summary.setText(R.string.edit_vm_boot_detect_scanning);
+
+        var image = firstImagePath(config, boot.getImageDisk());
+        if (image == null) {
+            summary.setText(R.string.edit_vm_boot_detect_no_disk);
+            addBuiltin.run();
+            return;
+        }
+        BootEntries.scan(image, (result, error) -> handler.post(() -> {
+            if (state.done) return;
+            if (result == null) {
+                summary.setText(context.getString(
+                    R.string.edit_vm_boot_detect_failed, error));
+                addBuiltin.run();
+                return;
+            }
+            state.entries = result;
+            var pinned = boot.getImageEntry();
+            var resolved = result.resolve(pinned);
+            boolean protectedVm = isProtectedVm(config);
+            for (int i = 0; i < result.entries.size(); i++) {
+                var entry = result.entries.get(i);
+                addRadio(context, group, idFor(i + 1), entry.displayLabel(context),
+                    entryWarning(context, protectedVm, entry), stopCountdown);
+            }
+            addBuiltin.run();
+            // the entry "Auto" would boot is whatever the stored config
+            // resolves to now; surface its warning on the Auto line too
+            var autoWarn = resolved != null
+                ? entryWarning(context, protectedVm, resolved) : null;
+            var autoRadio = (RadioButton) group.findViewById(idFor(0));
+            if (autoRadio != null)
+                autoRadio.setText(warnedLabel(autoRadio,
+                    context.getString(R.string.edit_vm_boot_entry_auto), autoWarn));
+            if (resolved != null && pinned != null && !result.isFallback(pinned))
+                group.check(idFor(result.entries.indexOf(resolved) + 1));
+            else
+                group.check(idFor(0));
+            if (result.isFallback(pinned)) {
+                warn.setVisibility(VISIBLE);
+                warn.setText(context.getString(
+                    R.string.edit_vm_boot_menu_fallback,
+                    pinned.title != null ? pinned.title : pinned.id));
+            }
+            updateSummary(context, summary, boot, result, group);
+            group.setOnCheckedChangeListener((g, id) ->
+                updateSummary(context, summary, boot, result, group));
+            // countdown only starts on a successful scan; a warned auto-boot
+            // target buys the user a few extra seconds to react
+            if (autoWarn != null) state.secondsLeft += WARNED_COUNTDOWN_GRACE;
+            state.countdownActive = true;
+            tick.run();
+        }));
+    }
+
+    private static void updateSummary(
+        @NonNull Context context,
+        @NonNull TextView summary,
+        @NonNull BootConfig boot,
+        @NonNull BootEntries entries,
+        @NonNull RadioGroup group
+    ) {
+        int checkedId = group.getCheckedRadioButtonId();
+        if (checkedId == BUILTIN_RADIO_ID) {
+            var line = context.getString(R.string.edit_vm_boot_entry_builtin);
+            var cmdline = builtinCmdline(boot, entries);
+            if (!cmdline.isEmpty()) line += "\n" + cmdline;
+            summary.setVisibility(VISIBLE);
+            summary.setText(line);
+            return;
+        }
+        int index = checkedId - 1;
+        var entry = index <= 0
+            ? entries.resolve(null)
+            : entries.entries.get(index - 1);
+        if (entry == null) {
+            summary.setVisibility(GONE);
+            return;
+        }
+        var line = entry.kernel + " · " + entry.source;
+        var cmdline = entry.effectiveCmdline(boot.isVdafix());
+        if (!cmdline.isEmpty()) line += "\n" + cmdline;
+        summary.setVisibility(VISIBLE);
+        summary.setText(line);
+    }
+
+    /**
+     * The cmdline the built-in kernel would boot with, mirroring
+     * {@code BootPlan.builtinCmdline}: the image cmdline override if set,
+     * else the resolved entry's effective (vdafix-adjusted) cmdline so the
+     * right {@code root=} comes up, else the manual default.
+     */
+    @NonNull
+    private static String builtinCmdline(
+        @NonNull BootConfig boot, @Nullable BootEntries entries) {
+        var override = boot.getImageCmdline();
+        if (!override.isEmpty()) return override;
+        if (entries != null) {
+            var entry = entries.resolve(boot.getImageEntry());
+            if (entry != null) {
+                var cmdline = entry.effectiveCmdline(boot.isVdafix());
+                if (!cmdline.isEmpty()) return cmdline;
+            }
+        }
+        return BootConfig.DEFAULT_MANUAL_CMDLINE;
+    }
+
+    private static int idFor(int index) {
+        // RadioButton ids must be positive; 0 is reserved/invalid
+        return index + 1;
+    }
+
+    private static void addRadio(
+        @NonNull Context context,
+        @NonNull RadioGroup group,
+        int id,
+        @NonNull String label,
+        @Nullable String warning,
+        @NonNull Runnable onTouched
+    ) {
+        var rb = new RadioButton(context);
+        rb.setId(id);
+        rb.setText(warnedLabel(rb, label, warning));
+        rb.setOnClickListener(v -> onTouched.run());
+        group.addView(rb);
+    }
+
+    /**
+     * The radio label, with {@code warning} appended as a red second line
+     * when present (the per-entry warning area). Plain {@code label}
+     * otherwise.
+     */
+    @NonNull
+    private static CharSequence warnedLabel(
+        @NonNull TextView colorSource,
+        @NonNull String label,
+        @Nullable String warning
+    ) {
+        if (warning == null || warning.isEmpty()) return label;
+        var sb = new SpannableStringBuilder(label).append('\n').append(warning);
+        int color = MaterialColors.getColor(
+            colorSource, androidx.appcompat.R.attr.colorError);
+        sb.setSpan(new ForegroundColorSpan(color),
+            label.length() + 1, sb.length(), Spannable.SPAN_EXCLUSIVE_EXCLUSIVE);
+        return sb;
+    }
+
+    /**
+     * Whether this VM boots as a gunyah protected VM (protected, or
+     * protected-without-firmware) — read from the stored config, where a
+     * guest kernel without CONFIG_DMA_RESTRICTED_POOL cannot drive virtio.
+     * Mirrors {@code VMEditBootTab.isProtectedVm}.
+     */
+    private static boolean isProtectedVm(@NonNull VMConfig config) {
+        var pvm = optEnum(config.item, "protected_vm",
+            ProtectedVM.PROTECTED_WITHOUT_FIRMWARE);
+        return pvm == ProtectedVM.PROTECTED_PROTECTED
+            || pvm == ProtectedVM.PROTECTED_WITHOUT_FIRMWARE;
+    }
+
+    /**
+     * Optional warning for a boot entry, or null when it has none. Today the
+     * only case is a kernel lbx flagged as lacking CONFIG_DMA_RESTRICTED_POOL
+     * on a protected VM (same condition as the edit tab's detection card),
+     * shown here as a terse one-liner since the menu is cramped — the edit
+     * tab keeps the full explanation.
+     */
+    @Nullable
+    private static String entryWarning(
+        @NonNull Context context,
+        boolean protectedVm,
+        @NonNull BootEntries.Entry entry
+    ) {
+        if (protectedVm && entry.lacksRestrictedDmaPool())
+            return context.getString(R.string.edit_vm_boot_entry_dma_warn);
+        return null;
+    }
+
+    @Nullable
+    private static String firstImagePath(@NonNull VMConfig config, int preferred) {
+        var disks = config.item.opt("disks", null);
+        if (disks == null
+            || !disks.is(cn.classfun.droidvm.lib.store.base.DataItem.Type.ARRAY))
+            return null;
+        var arr = disks.asArray();
+        if (preferred >= 0 && preferred < arr.size()) {
+            var p = arr.get(preferred).optString("path", "");
+            if (!p.isEmpty()) return p;
+        }
+        for (var d : arr) {
+            var p = d.optString("path", "");
+            if (!p.isEmpty()) return p;
+        }
+        return null;
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/VMEditActivity.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/VMEditActivity.java
index 1f31a22ec..835b5f21e 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/VMEditActivity.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/VMEditActivity.java
@@ -93,6 +93,13 @@ public void onTabSwitchedByDrag(int newIndex) {
         currentTab = VMEditTab.fromIndex(newIndex);
         tabLayout.selectTab(tabLayout.getTabAt(newIndex));
         scrollView.scrollTo(0, 0);
+        tabs.get(newIndex).onTabShown();
+    }
+
+    /** The live tab instance, e.g. to read another tab's unsaved state. */
+    @NonNull
+    public VMEditBaseTab getTab(@NonNull VMEditTab tab) {
+        return tabs.get(tab.ordinal());
     }
 
     private void setupTabs() {
@@ -108,6 +115,7 @@ public void onTabSelected(TabLayout.Tab tab) {
                 currentTab = VMEditTab.fromIndex(newPos);
                 swipeHelper.animateToTab(newPos, direction);
                 scrollView.scrollTo(0, 0);
+                tabs.get(newPos).onTabShown();
             }
 
             @Override
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/base/VMEditBaseTab.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/base/VMEditBaseTab.java
index 5c87760b1..ddc286eec 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/base/VMEditBaseTab.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/base/VMEditBaseTab.java
@@ -21,6 +21,10 @@ public VMEditBaseTab(VMEditActivity parent, View view) {
 
     public abstract void initValue();
 
+    /** Called when this tab becomes the visible one. */
+    public void onTabShown() {
+    }
+
     public abstract void loadConfig(@NonNull VMConfig config);
 
     public abstract boolean validateInput(@NonNull VMStore store);
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/basic/VMEditBasicTab.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/basic/VMEditBasicTab.java
index 78c4ff313..ab7ff0923 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/basic/VMEditBasicTab.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/basic/VMEditBasicTab.java
@@ -8,6 +8,7 @@
 import android.view.View;
 
 import androidx.annotation.NonNull;
+import androidx.annotation.Nullable;
 
 import cn.classfun.droidvm.R;
 import cn.classfun.droidvm.lib.store.vm.ProtectedVM;
@@ -158,4 +159,14 @@ public void saveConfig(@NonNull VMConfig config) {
         VMBackend backend = chooseBackend.getSelectedItem();
         item.set("backend", backend);
     }
+
+    /**
+     * The protection mode as currently selected (before save), so other
+     * tabs can warn about protected-VM constraints without re-reading the
+     * stored config.
+     */
+    @Nullable
+    public ProtectedVM getCurrentProtectedVm() {
+        return chooseProtectedVm.getSelectedItem();
+    }
 }
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/boot/VMEditBootTab.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/boot/VMEditBootTab.java
index ff082671c..75d6f7324 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/boot/VMEditBootTab.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/boot/VMEditBootTab.java
@@ -7,37 +7,91 @@
 import static cn.classfun.droidvm.lib.Constants.PATH_MICRODROID_INITRD;
 import static cn.classfun.droidvm.lib.Constants.PATH_MICRODROID_INITRD_DEBUG;
 import static cn.classfun.droidvm.lib.Constants.PATH_MICRODROID_KERNEL;
+import static cn.classfun.droidvm.lib.store.enums.Enums.optEnum;
+import static cn.classfun.droidvm.lib.store.vm.ProtectedVM.PROTECTED_WITHOUT_FIRMWARE;
 import static cn.classfun.droidvm.lib.utils.FileUtils.checkFilePath;
 import static cn.classfun.droidvm.lib.utils.FileUtils.shellAsyncCheckExists;
 import static cn.classfun.droidvm.lib.utils.StringUtils.resolveUriPath;
 
+import android.text.Spannable;
+import android.text.SpannableString;
+import android.text.style.ForegroundColorSpan;
 import android.view.MenuItem;
 import android.view.View;
+import android.widget.EditText;
+import android.widget.ImageButton;
 import android.widget.TextView;
 
 import androidx.annotation.NonNull;
+import androidx.annotation.Nullable;
 
+import com.google.android.material.color.MaterialColors;
 import com.google.android.material.dialog.MaterialAlertDialogBuilder;
+import com.google.android.material.materialswitch.MaterialSwitch;
+
+import java.util.ArrayList;
+import java.util.regex.Pattern;
 
 import cn.classfun.droidvm.R;
+import cn.classfun.droidvm.lib.store.base.DataItem;
+import cn.classfun.droidvm.lib.store.vm.BootConfig;
+import cn.classfun.droidvm.lib.store.vm.ProtectedVM;
 import cn.classfun.droidvm.lib.store.vm.VMConfig;
 import cn.classfun.droidvm.lib.store.vm.VMStore;
+import cn.classfun.droidvm.lib.ui.IconItemAdapter;
 import cn.classfun.droidvm.lib.ui.MenuDialogBuilder;
+import cn.classfun.droidvm.ui.vm.boot.BootEntries;
 import cn.classfun.droidvm.ui.vm.edit.VMEditActivity;
+import cn.classfun.droidvm.ui.vm.edit.basic.VMEditBasicTab;
 import cn.classfun.droidvm.ui.vm.edit.base.VMEditBaseTab;
+import cn.classfun.droidvm.ui.vm.edit.base.VMEditTab;
+import cn.classfun.droidvm.ui.vm.edit.storage.VMEditStorageTab;
 import cn.classfun.droidvm.ui.widgets.container.CollapsibleContainer;
+import cn.classfun.droidvm.ui.widgets.row.DropdownRowWidget;
 import cn.classfun.droidvm.ui.widgets.row.SwitchRowWidget;
 import cn.classfun.droidvm.ui.widgets.row.TextInputRowWidget;
 
 public final class VMEditBootTab extends VMEditBaseTab {
+    /** Captures a root=/resume= param: group 1 = key, group 2 = value. */
+    private static final Pattern ROOT_PARAM =
+        Pattern.compile("(?:^|\\s)(root|resume)=(\\S+)");
+
     private SwitchRowWidget swAutoUp;
-    private SwitchRowWidget swUefi;
-    private TextView tvUefiHint;
+    private DropdownRowWidget ddProtocol;
+    private CollapsibleContainer containerUefi;
+    private TextInputRowWidget inputUefiFirmware;
     private CollapsibleContainer containerKernel;
+    private DropdownRowWidget ddSource;
+    private View layoutImage;
+    private View layoutManual;
+    private DropdownRowWidget ddBootDisk;
+    private DropdownRowWidget ddBootEntry;
+    private ImageButton btnRescan;
+    private EditText etDetectKernel;
+    private EditText etDetectInitrd;
+    private EditText etDetectCmdline;
+    private EditText etDetectSource;
+    private TextView tvKernelDmaWarn;
+    private TextView tvDetectWarn;
+    private MaterialSwitch swVdafix;
+    private EditText etCmdlineOverride;
+    private TextInputRowWidget inputBootWait;
     private TextInputRowWidget inputKernel;
     private TextInputRowWidget inputInitrd;
     private TextInputRowWidget inputCmdline;
 
+    /** The config being edited; the source of the disks list for scans. */
+    private VMConfig config;
+    private BootConfig.Protocol protocol = BootConfig.Protocol.UEFI;
+    private BootConfig.LinuxSource source = BootConfig.LinuxSource.MANUAL;
+    private int bootDiskIndex = 0;
+    @Nullable
+    private BootConfig.ImageEntry pinnedEntry;
+    @Nullable
+    private BootEntries scanned;
+    @Nullable
+    private String lastScannedImage;
+
     public VMEditBootTab(VMEditActivity parent, View view) {
         super(parent, view);
     }
@@ -45,9 +99,25 @@ public VMEditBootTab(VMEditActivity parent, View view) {
     @Override
     public void initView() {
         swAutoUp = view.findViewById(R.id.sw_auto_up);
-        swUefi = view.findViewById(R.id.sw_uefi);
-        tvUefiHint = view.findViewById(R.id.tv_uefi_hint);
+        ddProtocol = view.findViewById(R.id.dd_boot_protocol);
+        containerUefi = view.findViewById(R.id.container_uefi);
+        inputUefiFirmware = view.findViewById(R.id.input_uefi_firmware);
         containerKernel = view.findViewById(R.id.container_kernel);
+        ddSource = view.findViewById(R.id.dd_kernel_source);
+        layoutImage = view.findViewById(R.id.layout_kernel_image);
+        layoutManual = view.findViewById(R.id.layout_kernel_manual);
+        ddBootDisk = view.findViewById(R.id.dd_boot_disk);
+        ddBootEntry = view.findViewById(R.id.dd_boot_entry);
+        btnRescan = view.findViewById(R.id.btn_boot_rescan);
+        etDetectKernel = view.findViewById(R.id.et_detect_kernel);
+        etDetectInitrd = view.findViewById(R.id.et_detect_initrd);
+        etDetectCmdline = view.findViewById(R.id.et_detect_cmdline);
+        etDetectSource = view.findViewById(R.id.et_detect_source);
+        tvKernelDmaWarn = view.findViewById(R.id.tv_boot_kernel_dma_warn);
+        tvDetectWarn = view.findViewById(R.id.tv_boot_detect_warn);
+        swVdafix = view.findViewById(R.id.sw_vdafix);
+        etCmdlineOverride = view.findViewById(R.id.et_cmdline_override);
+        inputBootWait = view.findViewById(R.id.input_boot_wait);
         inputKernel = view.findViewById(R.id.input_kernel);
         inputInitrd = view.findViewById(R.id.input_initrd);
         inputCmdline = view.findViewById(R.id.input_cmdline);
@@ -55,58 +125,434 @@ public void initView() {
 
     @Override
     public void initValue() {
+        ddProtocol.setAdapter(IconItemAdapter.create(parent, new String[]{
+            BootConfig.Protocol.UEFI.getDisplayString(parent),
+            BootConfig.Protocol.LINUX.getDisplayString(parent),
+        }, new int[]{R.drawable.ic_uefi_nocolor, R.drawable.ic_linux}));
+        ddProtocol.setOnItemClickListener((p, v, pos, id) -> {
+            protocol = pos == 0
+                ? BootConfig.Protocol.UEFI : BootConfig.Protocol.LINUX;
+            applyVisibility();
+        });
+        ddSource.setAdapter(IconItemAdapter.create(parent, new String[]{
+            BootConfig.LinuxSource.IMAGE.getDisplayString(parent),
+            BootConfig.LinuxSource.MANUAL.getDisplayString(parent),
+        }, R.drawable.ic_linux));
+        ddSource.setOnItemClickListener((p, v, pos, id) -> {
+            source = pos == 0
+                ? BootConfig.LinuxSource.IMAGE : BootConfig.LinuxSource.MANUAL;
+            applyVisibility();
+            if (isImageMode() && scanned == null) rescan();
+        });
+        inputUefiFirmware.setIconButtonOnClickListener(this::showFirmwareBrowseDialog);
         inputKernel.setIconButtonOnClickListener(this::showKernelBrowseDialog);
         inputInitrd.setIconButtonOnClickListener(this::showInitrdBrowseDialog);
-        swUefi.setOnCheckedChangeListener((btn, checked) -> setUefiMode(checked));
+        btnRescan.setOnClickListener(v -> rescan());
+        swVdafix.setOnCheckedChangeListener((btn, checked) -> updateDetectionCard());
+        // create mode never calls loadConfig, so seed the defaults here:
+        // UEFI protocol; manual source prefilled with the builtin kernel
+        ddProtocol.setText(protocol.getDisplayString(parent));
+        ddSource.setText(source.getDisplayString(parent));
+        inputKernel.setTextAndMoveCursor(PATH_BUILTIN_KERNEL);
+        inputInitrd.setTextAndMoveCursor(PATH_BUILTIN_INITRD);
+        inputCmdline.setTextAndMoveCursor(BootConfig.DEFAULT_MANUAL_CMDLINE);
+        inputBootWait.setTextAndMoveCursor(String.valueOf(BootConfig.DEFAULT_BOOT_WAIT));
+        applyVisibility();
+    }
+
+    @Override
+    public void onTabShown() {
+        if (!isImageMode()) return;
+        updateDiskDropdown();
+        var image = scanImagePath();
+        // disks added/changed in the storage tab since the last scan
+        if (image == null || !image.equals(lastScannedImage)) {
+            rescan();
+        } else if (scanned != null) {
+            // same image, but the protection mode may have changed in the
+            // basic tab — refresh the detection card so its warning tracks it
+            updateDetectionCard();
+        }
+    }
+
+    private boolean isImageMode() {
+        return protocol == BootConfig.Protocol.LINUX
+            && source == BootConfig.LinuxSource.IMAGE;
     }
 
-    private void setUefiMode(boolean enabled) {
-        containerKernel.setVisibility(enabled ? GONE : VISIBLE);
-        tvUefiHint.setVisibility(enabled ? VISIBLE : GONE);
+    private void applyVisibility() {
+        boolean uefi = protocol == BootConfig.Protocol.UEFI;
+        containerUefi.setVisibility(uefi ? VISIBLE : GONE);
+        containerKernel.setVisibility(uefi ? GONE : VISIBLE);
+        boolean image = source == BootConfig.LinuxSource.IMAGE;
+        layoutImage.setVisibility(image ? VISIBLE : GONE);
+        layoutManual.setVisibility(image ? GONE : VISIBLE);
     }
 
     @Override
     public void loadConfig(@NonNull VMConfig config) {
-        var item = config.item;
-        var useUefi = item.optBoolean("use_uefi", true);
-        var kernel = item.optString("kernel", "");
-        var initrd = item.optString("initrd", "");
-        var cmdline = item.optString("cmdline", "");
-        swUefi.setChecked(useUefi);
-        setUefiMode(useUefi);
-        inputKernel.setTextAndMoveCursor(kernel);
-        inputInitrd.setTextAndMoveCursor(initrd);
-        inputCmdline.setTextAndMoveCursor(cmdline);
-        swAutoUp.setChecked(item.optBoolean("auto_up", false));
+        this.config = config;
+        var boot = BootConfig.of(config);
+        protocol = boot.getProtocol();
+        source = boot.getLinuxSource();
+        ddProtocol.setText(protocol.getDisplayString(parent));
+        ddSource.setText(source.getDisplayString(parent));
+        inputUefiFirmware.setTextAndMoveCursor(boot.getUefiFirmware());
+        inputKernel.setTextAndMoveCursor(boot.getKernel());
+        inputInitrd.setTextAndMoveCursor(boot.getInitrd());
+        bootDiskIndex = boot.getImageDisk();
+        pinnedEntry = boot.getImageEntry();
+        swVdafix.setChecked(boot.isVdafix());
+        inputBootWait.setTextAndMoveCursor(String.valueOf(boot.getBootWait()));
+        inputCmdline.setTextAndMoveCursor(boot.getCmdline());
+        etCmdlineOverride.setText(boot.getImageCmdline());
+        swAutoUp.setChecked(config.item.optBoolean("auto_up", false));
+        updateDiskDropdown();
+        updateEntryDropdown();
+        applyVisibility();
+        if (isImageMode()) rescan();
     }
 
     @Override
     public boolean validateInput(@NonNull VMStore store) {
-        if (!swUefi.isChecked()) {
-            var kernel = inputKernel.getText();
-            var initrd = inputInitrd.getText();
-            inputKernel.setError(null);
-            inputInitrd.setError(null);
-            if (!checkFilePath(kernel, true)) {
-                inputKernel.setError(parent.getString(R.string.create_vm_error_path_invalid));
+        if (protocol == BootConfig.Protocol.UEFI) {
+            var firmware = inputUefiFirmware.getText();
+            inputUefiFirmware.setError(null);
+            if (!firmware.isEmpty() && !checkFilePath(firmware, true)) {
+                inputUefiFirmware.setError(parent.getString(R.string.create_vm_error_path_invalid));
                 return false;
             }
-            if (!initrd.isEmpty() && !checkFilePath(initrd, true)) {
-                inputInitrd.setError(parent.getString(R.string.create_vm_error_path_invalid));
+            return true;
+        }
+        if (source == BootConfig.LinuxSource.IMAGE) {
+            inputBootWait.setError(null);
+            if (scanImagePath() == null) {
+                showDetectError(parent.getString(R.string.edit_vm_boot_detect_no_disk));
                 return false;
             }
+            try {
+                var wait = inputBootWait.getText().trim();
+                if (!wait.isEmpty()) Long.parseLong(wait);
+            } catch (NumberFormatException e) {
+                inputBootWait.setError(parent.getString(R.string.edit_vm_boot_wait_invalid));
+                return false;
+            }
+            return true;
+        }
+        var kernel = inputKernel.getText();
+        var initrd = inputInitrd.getText();
+        inputKernel.setError(null);
+        inputInitrd.setError(null);
+        if (!checkFilePath(kernel, true)) {
+            inputKernel.setError(parent.getString(R.string.create_vm_error_path_invalid));
+            return false;
+        }
+        if (!initrd.isEmpty() && !checkFilePath(initrd, true)) {
+            inputInitrd.setError(parent.getString(R.string.create_vm_error_path_invalid));
+            return false;
         }
         return true;
     }
 
     @Override
     public void saveConfig(@NonNull VMConfig config) {
-        var item = config.item;
-        item.set("use_uefi", swUefi.isChecked());
-        item.set("kernel", inputKernel.getText());
-        item.set("initrd", inputInitrd.getText());
-        item.set("cmdline", inputCmdline.getText());
-        item.set("auto_up", swAutoUp.isChecked());
+        var boot = BootConfig.of(config);
+        boot.setProtocol(protocol);
+        boot.setUefiFirmware(inputUefiFirmware.getText());
+        boot.setLinuxSource(source);
+        boot.setKernel(inputKernel.getText());
+        boot.setInitrd(inputInitrd.getText());
+        // separate fields: switching source must not clobber the other's
+        boot.setCmdline(inputCmdline.getText());
+        boot.setImageCmdline(etCmdlineOverride.getText().toString());
+        boot.setImageDisk(bootDiskIndex);
+        boot.setImageEntry(pinnedEntry);
+        boot.setVdafix(swVdafix.isChecked());
+        var wait = inputBootWait.getText().trim();
+        try {
+            boot.setBootWait(wait.isEmpty()
+                ? BootConfig.DEFAULT_BOOT_WAIT : Long.parseLong(wait));
+        } catch (NumberFormatException ignored) {
+        }
+        config.item.set("auto_up", swAutoUp.isChecked());
+    }
+
+    // --- image source: disk/entry dropdowns + detection card ---
+
+    /**
+     * Disk paths as currently edited in the storage tab (a disk added
+     * there must be visible here before the config is saved), falling
+     * back to the loaded config.
+     */
+    @NonNull
+    private ArrayList<String> diskPaths() {
+        var out = new ArrayList<String>();
+        DataItem disks = null;
+        try {
+            var storage = (VMEditStorageTab) parent.getTab(VMEditTab.TAB_STORAGE);
+            disks = storage.getCurrentDisks();
+        } catch (Exception ignored) {
+        }
+        if (disks == null && config != null)
+            disks = config.item.opt("disks", null);
+        if (disks == null || !disks.is(DataItem.Type.ARRAY)) return out;
+        for (var disk : disks.asArray())
+            out.add(disk.optString("path", ""));
+        return out;
+    }
+
+    @Nullable
+    private String diskPath(int index) {
+        var paths = diskPaths();
+        if (index < 0 || index >= paths.size()) return null;
+        var p = paths.get(index);
+        return p.isEmpty() ? null : p;
+    }
+
+    @Nullable
+    private String firstDiskPath() {
+        var paths = diskPaths();
+        for (int i = 0; i < paths.size(); i++)
+            if (!paths.get(i).isEmpty()) return paths.get(i);
+        return null;
+    }
+
+    @Nullable
+    private String scanImagePath() {
+        var p = diskPath(bootDiskIndex);
+        return p != null ? p : firstDiskPath();
+    }
+
+    @NonNull
+    private static String basename(@NonNull String path) {
+        return path.substring(path.lastIndexOf('/') + 1);
+    }
+
+    private void updateDiskDropdown() {
+        var paths = diskPaths();
+        var labels = new ArrayList<String>();
+        var indexes = new ArrayList<Integer>();
+        for (int i = 0; i < paths.size(); i++) {
+            if (paths.get(i).isEmpty()) continue;
+            labels.add(basename(paths.get(i)));
+            indexes.add(i);
+        }
+        ddBootDisk.setAdapter(IconItemAdapter.create(
+            parent, labels, R.drawable.ic_nav_disk));
+        ddBootDisk.setOnItemClickListener((p, v, pos, id) -> {
+            bootDiskIndex = indexes.get(pos);
+            rescan();
+        });
+        var current = scanImagePath();
+        ddBootDisk.setText(current == null
+            ? parent.getString(R.string.edit_vm_boot_detect_no_disk)
+            : basename(current));
+    }
+
+    private void updateEntryDropdown() {
+        var labels = new ArrayList<String>();
+        labels.add(parent.getString(R.string.edit_vm_boot_entry_auto));
+        var entries = scanned;
+        if (entries != null)
+            for (var e : entries.entries)
+                labels.add(e.displayLabel(parent));
+        ddBootEntry.setAdapter(IconItemAdapter.create(
+            parent, labels, R.drawable.ic_linux));
+        ddBootEntry.setOnItemClickListener((p, v, pos, id) -> {
+            pinnedEntry = pos == 0 || entries == null
+                ? null : entries.entries.get(pos - 1).toImageEntry();
+            updateDetectionCard();
+        });
+        // the selected label: pinned entry when it still exists, else auto
+        var label = parent.getString(R.string.edit_vm_boot_entry_auto);
+        if (pinnedEntry != null) {
+            if (entries != null && !entries.isFallback(pinnedEntry)) {
+                var resolved = entries.resolve(pinnedEntry);
+                if (resolved != null) label = resolved.displayLabel(parent);
+            } else if (pinnedEntry.title != null) {
+                label = pinnedEntry.title;
+            } else if (pinnedEntry.id != null) {
+                label = pinnedEntry.id;
+            }
+        }
+        ddBootEntry.setText(label);
+    }
+
+    private void rescan() {
+        scanned = null;
+        var image = scanImagePath();
+        lastScannedImage = image;
+        updateDiskDropdown();
+        updateEntryDropdown();
+        if (image == null) {
+            showDetectError(parent.getString(R.string.edit_vm_boot_detect_no_disk));
+            return;
+        }
+        setDetectFields("", "", null, "");
+        etDetectKernel.setText(R.string.edit_vm_boot_detect_scanning);
+        tvKernelDmaWarn.setVisibility(GONE);
+        tvDetectWarn.setVisibility(GONE);
+        BootEntries.scan(image, (result, error) -> parent.runOnUiThread(() -> {
+            if (parent.isFinishing()) return;
+            scanned = result;
+            if (result == null) {
+                showDetectError(parent.getString(
+                    R.string.edit_vm_boot_detect_failed, error));
+            } else {
+                updateEntryDropdown();
+                updateDetectionCard();
+            }
+        }));
+    }
+
+    private void showDetectError(@NonNull String message) {
+        setDetectFields("", "", null, "");
+        tvKernelDmaWarn.setVisibility(GONE);
+        tvDetectWarn.setText(message);
+        tvDetectWarn.setVisibility(VISIBLE);
+    }
+
+    private void setDetectFields(
+        @NonNull String kernel,
+        @NonNull String initrd,
+        @Nullable CharSequence cmdline,
+        @NonNull String source
+    ) {
+        etDetectKernel.setText(kernel);
+        etDetectInitrd.setText(initrd);
+        etDetectCmdline.setText(cmdline);
+        etDetectSource.setText(source);
+    }
+
+    private void updateDetectionCard() {
+        var entries = scanned;
+        if (entries == null) return;
+        var entry = entries.resolve(pinnedEntry);
+        if (entry == null) {
+            showDetectError(parent.getString(
+                R.string.edit_vm_boot_detect_failed, "no entries"));
+            return;
+        }
+        setDetectFields(
+            entry.kernel,
+            String.join(", ", entry.initrd),
+            highlightRootParams(entry, swVdafix.isChecked()),
+            entry.source
+        );
+        // protected-VM DMA warning sits directly under the kernel field
+        if (isProtectedVm() && entry.lacksRestrictedDmaPool()) {
+            tvKernelDmaWarn.setText(R.string.edit_vm_boot_protected_dma_warn);
+            tvKernelDmaWarn.setVisibility(VISIBLE);
+        } else {
+            tvKernelDmaWarn.setVisibility(GONE);
+        }
+        if (entries.isFallback(pinnedEntry)) {
+            tvDetectWarn.setText(parent.getString(
+                R.string.edit_vm_boot_menu_fallback, pinnedLabel()));
+            tvDetectWarn.setVisibility(VISIBLE);
+        } else {
+            tvDetectWarn.setVisibility(GONE);
+        }
+    }
+
+    /**
+     * Whether the VM would boot as a gunyah protected VM (protected, or
+     * protected-without-firmware) — read live from the basic tab so a
+     * just-changed selection is reflected, then the stored config, then
+     * the backend default. In such a VM a guest kernel without
+     * CONFIG_DMA_RESTRICTED_POOL cannot drive virtio.
+     */
+    private boolean isProtectedVm() {
+        ProtectedVM pvm = null;
+        try {
+            var basic = (VMEditBasicTab) parent.getTab(VMEditTab.TAB_BASIC);
+            pvm = basic.getCurrentProtectedVm();
+        } catch (Exception ignored) {
+        }
+        if (pvm == null && config != null)
+            pvm = optEnum(config.item, "protected_vm", PROTECTED_WITHOUT_FIRMWARE);
+        if (pvm == null) pvm = PROTECTED_WITHOUT_FIRMWARE;
+        return pvm == ProtectedVM.PROTECTED_PROTECTED
+            || pvm == ProtectedVM.PROTECTED_WITHOUT_FIRMWARE;
+    }
+
+    /**
+     * Colors a root=/resume= value red to flag the vdafix rewrite. With vdafix
+     * off we show the raw cmdline and mark the /dev/sdX device that is about to
+     * be replaced (a PARTUUID root is fine and stays unmarked). With vdafix on
+     * we show the fixed cmdline and mark only the values the fix actually
+     * changed, so an already-PARTUUID root (and any unrelated param) is left
+     * uncolored.
+     */
+    @NonNull
+    private CharSequence highlightRootParams(@NonNull BootEntries.Entry entry, boolean vdafix) {
+        var shown = entry.effectiveCmdline(vdafix);
+        if (shown.isEmpty()) return shown;
+        var span = new SpannableString(shown);
+        var color = MaterialColors.getColor(
+            etDetectCmdline, androidx.appcompat.R.attr.colorError);
+        var m = ROOT_PARAM.matcher(shown);
+        while (m.find()) {
+            var key = m.group(1);
+            var value = m.group(2);
+            if (key == null || value == null) continue;
+            boolean mark;
+            if (!vdafix) {
+                // off: the device path that the fix would replace
+                mark = value.startsWith("/dev/");
+            } else {
+                // on: only what the fix changed for this key
+                var original = paramValue(entry.cmdline, key);
+                mark = original != null && !original.equals(value);
+            }
+            if (mark) span.setSpan(
+                new ForegroundColorSpan(color),
+                m.start(2), m.end(2),
+                Spannable.SPAN_EXCLUSIVE_EXCLUSIVE
+            );
+        }
+        return span;
+    }
+
+    /** The value of {@code key}=… in {@code cmdline}, or null if absent. */
+    @Nullable
+    private static String paramValue(@NonNull String cmdline, @NonNull String key) {
+        var m = ROOT_PARAM.matcher(cmdline);
+        while (m.find())
+            if (key.equals(m.group(1))) return m.group(2);
+        return null;
+    }
+
+    @NonNull
+    private String pinnedLabel() {
+        if (pinnedEntry == null) return "";
+        if (pinnedEntry.title != null) return pinnedEntry.title;
+        return pinnedEntry.id != null ? pinnedEntry.id : "";
+    }
+
+    // --- browse menus ---
+
+    private void showFirmwareBrowseDialog() {
+        MenuItem.OnMenuItemClickListener listener = item -> {
+            var id = item.getItemId();
+            if (id == R.id.menu_firmware_builtin) {
+                inputUefiFirmware.setText("");
+            } else if (id == R.id.menu_firmware_external) {
+                parent.currentPicker = uri -> {
+                    if (uri != null)
+                        inputUefiFirmware.setTextAndMoveCursor(resolveUriPath(parent, uri));
+                    parent.currentPicker = null;
+                };
+                parent.filePickerLauncher.launch(new String[]{"*/*"});
+            }
+            return true;
+        };
+        MenuDialogBuilder.showSimple(
+            parent,
+            R.string.edit_vm_uefi_firmware_browse_title,
+            R.menu.menu_vm_firmware_browse,
+            listener
+        );
     }
 
     private void showKernelBrowseDialog() {
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/storage/VMEditStorageTab.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/storage/VMEditStorageTab.java
index 5ad4c77b6..b6d2c6572 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/storage/VMEditStorageTab.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/storage/VMEditStorageTab.java
@@ -112,6 +112,12 @@ private void activityResult(@NonNull ActivityResult result) {
         pendingBrowsePosition = -1;
     }
 
+    /** Live disk entries as edited right now (not yet saved to config). */
+    @NonNull
+    public DataItem getCurrentDisks() {
+        return listDisks.getItems();
+    }
+
     @Override
     public void loadConfig(@NonNull VMConfig config) {
         listDisks.setItems(config.item.opt("disks", DataItem.newArray()));
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/info/VMInfoActivity.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/info/VMInfoActivity.java
index d3af1bd62..0bc38a88e 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/info/VMInfoActivity.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/info/VMInfoActivity.java
@@ -21,6 +21,7 @@
 import android.widget.TextView;
 import android.widget.Toast;
 
+import androidx.annotation.NonNull;
 import androidx.annotation.Nullable;
 import androidx.appcompat.app.AlertDialog;
 import androidx.appcompat.app.AppCompatActivity;
@@ -45,6 +46,7 @@
 import cn.classfun.droidvm.lib.daemon.DaemonConnection;
 import cn.classfun.droidvm.lib.daemon.ForegroundCallback;
 import cn.classfun.droidvm.lib.store.base.DataItem;
+import cn.classfun.droidvm.lib.store.vm.BootConfig;
 import cn.classfun.droidvm.lib.store.vm.ProtectedVM;
 import cn.classfun.droidvm.lib.store.vm.VMConfig;
 import cn.classfun.droidvm.lib.store.vm.VMState;
@@ -204,12 +206,27 @@ private void reloadConfig() {
         });
     }
 
+    @NonNull
+    private String bootSummary() {
+        var boot = BootConfig.of(config);
+        if (boot.getProtocol() == BootConfig.Protocol.UEFI)
+            return getString(R.string.edit_vm_boot_protocol_uefi);
+        if (boot.getLinuxSource() == BootConfig.LinuxSource.IMAGE) {
+            var pinned = boot.getImageEntry();
+            var label = getString(R.string.edit_vm_kernel_source_image);
+            if (pinned != null && pinned.title != null)
+                return label + " · " + pinned.title;
+            return label;
+        }
+        return basename(boot.getKernel());
+    }
+
     private void populateInfo() {
         var item = config.item;
         collapsingToolbar.setTitle(config.getName());
         rowCpu.setValue(getString(R.string.vm_info_cpu_value, item.optLong("cpu_count", 0)));
         rowMemory.setValue(getString(R.string.vm_info_memory_value, item.optLong("memory_mb", 0)));
-        rowKernel.setValue(basename(item.optString("kernel", "")));
+        rowKernel.setValue(bootSummary());
         var protectedVm = optEnum(item, "protected_vm", ProtectedVM.PROTECTED_WITHOUT_FIRMWARE);
         rowProtected.setValue(protectedVm.getDisplayString(this));
         var disks = item.opt("disks", DataItem.newArray());
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/widgets/tools/KernelAnalysisWidget.java b/app/src/main/java/cn/classfun/droidvm/ui/widgets/tools/KernelAnalysisWidget.java
new file mode 100644
index 000000000..93b261411
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/ui/widgets/tools/KernelAnalysisWidget.java
@@ -0,0 +1,192 @@
+package cn.classfun.droidvm.ui.widgets.tools;
+
+import static android.view.View.GONE;
+import static android.view.View.VISIBLE;
+
+import android.content.Context;
+import android.os.Handler;
+import android.os.Looper;
+import android.util.AttributeSet;
+import android.view.LayoutInflater;
+import android.view.View;
+import android.widget.FrameLayout;
+import android.widget.TextView;
+
+import androidx.annotation.NonNull;
+import androidx.annotation.Nullable;
+
+import com.google.android.material.button.MaterialButton;
+import com.google.android.material.color.MaterialColors;
+import com.google.android.material.progressindicator.CircularProgressIndicator;
+import com.google.android.material.textfield.TextInputEditText;
+
+import java.util.ArrayList;
+
+import cn.classfun.droidvm.R;
+import cn.classfun.droidvm.lib.ui.IconItemAdapter;
+import cn.classfun.droidvm.ui.vm.boot.BootEntries;
+import cn.classfun.droidvm.ui.widgets.row.DropdownRowWidget;
+
+/**
+ * A drop-in "kernel analysis" card for the import screens. The user picks an
+ * image (a URL); pressing Analyze runs a single cloud analysis
+ * ({@code lbx entries <url> --json}, via the daemon's {@code vm_bootscan})
+ * and the card shows, per boot entry, the kernel / initrd / cmdline and the
+ * protected-VM DMA warning — the same read-only view the VM edit screen
+ * gives a local disk image.
+ *
+ * <p>One analysis is one lbx call that returns every entry with every field,
+ * so there's nothing to cache. The host wires a {@link UrlProvider} (where to
+ * read the current URL) and calls {@link #reset()} whenever that URL changes.
+ */
+public final class KernelAnalysisWidget extends FrameLayout {
+
+    /** Supplies the http(s) URL to analyse, or {@code null} if none yet. */
+    public interface UrlProvider {
+        @Nullable
+        String getUrl();
+    }
+
+    /** lbx per-connection timeout: a stalled chunk download aborts this fast. */
+    private static final int CHUNK_TIMEOUT_SECS = 8;
+
+    private final Handler main = new Handler(Looper.getMainLooper());
+
+    private MaterialButton btnAnalyze;
+    private CircularProgressIndicator progress;
+    private TextView tvStatus;
+    private TextView tvDmaWarn;
+    private View groupResults;
+    private DropdownRowWidget ddEntry;
+    private TextInputEditText etKernel;
+    private TextInputEditText etInitrd;
+    private TextInputEditText etCmdline;
+
+    @Nullable
+    private UrlProvider urlProvider;
+    @Nullable
+    private BootEntries scanned;
+    private boolean scanning = false;
+
+    public KernelAnalysisWidget(@NonNull Context context) {
+        super(context);
+        init();
+    }
+
+    public KernelAnalysisWidget(@NonNull Context context, @Nullable AttributeSet attrs) {
+        super(context, attrs);
+        init();
+    }
+
+    private void init() {
+        LayoutInflater.from(getContext()).inflate(R.layout.view_kernel_analysis, this, true);
+        btnAnalyze = findViewById(R.id.btn_analyze);
+        progress = findViewById(R.id.progress_analysis);
+        tvStatus = findViewById(R.id.tv_analysis_status);
+        tvDmaWarn = findViewById(R.id.tv_analysis_dma_warn);
+        groupResults = findViewById(R.id.group_analysis_results);
+        ddEntry = findViewById(R.id.dd_analysis_entry);
+        etKernel = findViewById(R.id.et_analysis_kernel);
+        etInitrd = findViewById(R.id.et_analysis_initrd);
+        etCmdline = findViewById(R.id.et_analysis_cmdline);
+        btnAnalyze.setOnClickListener(v -> analyze());
+    }
+
+    public void setUrlProvider(@Nullable UrlProvider provider) {
+        this.urlProvider = provider;
+    }
+
+    /** Clear any shown result; call when the source URL/selection changes. */
+    public void reset() {
+        if (scanning) return;
+        scanned = null;
+        groupResults.setVisibility(GONE);
+        tvDmaWarn.setVisibility(GONE);
+        setStatus(getContext().getString(R.string.kernel_analysis_hint), false);
+    }
+
+    private void analyze() {
+        if (scanning) return;
+        var url = urlProvider != null ? urlProvider.getUrl() : null;
+        url = url != null ? url.trim() : "";
+        if (!url.startsWith("http://") && !url.startsWith("https://")) {
+            setStatus(getContext().getString(R.string.kernel_analysis_need_url), true);
+            return;
+        }
+        scanning = true;
+        progress.setVisibility(VISIBLE);
+        btnAnalyze.setEnabled(false);
+        groupResults.setVisibility(GONE);
+        tvDmaWarn.setVisibility(GONE);
+        setStatus(getContext().getString(R.string.edit_vm_boot_detect_scanning), false);
+        BootEntries.analyzeUrl(getContext(), url, CHUNK_TIMEOUT_SECS,
+            (loaded, total) -> main.post(() -> onProgress(loaded, total)),
+            (result, error) -> main.post(() -> onScan(result, error)));
+    }
+
+    private void onProgress(int loaded, int total) {
+        if (!scanning) return;
+        setStatus(total > 0
+            ? getContext().getString(R.string.kernel_analysis_progress, loaded, total)
+            : getContext().getString(R.string.kernel_analysis_progress_n, loaded), false);
+    }
+
+    private void onScan(@Nullable BootEntries result, @Nullable String error) {
+        scanning = false;
+        progress.setVisibility(GONE);
+        btnAnalyze.setEnabled(true);
+        if (result == null || result.entries.isEmpty()) {
+            scanned = null;
+            groupResults.setVisibility(GONE);
+            tvDmaWarn.setVisibility(GONE);
+            setStatus(getContext().getString(
+                R.string.edit_vm_boot_detect_failed,
+                error != null ? error : "no entries"), true);
+            return;
+        }
+        scanned = result;
+        var labels = new ArrayList<String>();
+        for (var e : result.entries) labels.add(e.displayLabel(getContext()));
+        ddEntry.setAdapter(IconItemAdapter.create(getContext(), labels, R.drawable.ic_linux));
+        ddEntry.setOnItemClickListener((p, v, pos, id) -> showEntry(pos));
+        int def = defaultIndex(result);
+        ddEntry.setText(labels.get(def));
+        groupResults.setVisibility(VISIBLE);
+        setStatus(getContext().getString(
+            R.string.kernel_analysis_found, result.entries.size()), false);
+        showEntry(def);
+    }
+
+    private static int defaultIndex(@NonNull BootEntries entries) {
+        for (int i = 0; i < entries.entries.size(); i++)
+            if (entries.entries.get(i).isDefault) return i;
+        return 0;
+    }
+
+    private void showEntry(int pos) {
+        if (scanned == null || pos < 0 || pos >= scanned.entries.size()) return;
+        var e = scanned.entries.get(pos);
+        etKernel.setText(e.kernel);
+        etInitrd.setText(String.join(", ", e.initrd));
+        // vdafix is applied on a real boot, so preview the bootable cmdline.
+        // No root= highlighting here: with no vdafix toggle to contrast
+        // against, the rewrite markup would have nothing to mean.
+        etCmdline.setText(e.effectiveCmdline(true));
+        // Imported images become protected VMs, so warn unconditionally when
+        // the kernel can't do restricted-pool DMA (same text as the editor).
+        if (e.lacksRestrictedDmaPool()) {
+            tvDmaWarn.setText(R.string.edit_vm_boot_protected_dma_warn);
+            tvDmaWarn.setVisibility(VISIBLE);
+        } else {
+            tvDmaWarn.setVisibility(GONE);
+        }
+    }
+
+    private void setStatus(@NonNull String message, boolean error) {
+        tvStatus.setText(message);
+        tvStatus.setTextColor(MaterialColors.getColor(this, error
+            ? androidx.appcompat.R.attr.colorError
+            : com.google.android.material.R.attr.colorOnSurfaceVariant));
+        tvStatus.setVisibility(VISIBLE);
+    }
+}
diff --git a/app/src/main/res/layout/activity_import_lxc_images.xml b/app/src/main/res/layout/activity_import_lxc_images.xml
index c839811b8..06f51f6ab 100644
--- a/app/src/main/res/layout/activity_import_lxc_images.xml
+++ b/app/src/main/res/layout/activity_import_lxc_images.xml
@@ -170,6 +170,15 @@
 
             </cn.classfun.droidvm.ui.widgets.container.CollapsibleContainer>
 
+            <cn.classfun.droidvm.ui.widgets.tools.KernelAnalysisWidget
+                android:id="@+id/kernel_analysis"
+                android:layout_width="match_parent"
+                android:layout_height="wrap_content"
+                android:layout_marginStart="16dp"
+                android:layout_marginTop="8dp"
+                android:layout_marginEnd="16dp"
+                android:visibility="gone" />
+
             <com.google.android.material.divider.MaterialDivider
                 android:id="@+id/divider_output"
                 android:layout_width="match_parent"
diff --git a/app/src/main/res/layout/activity_import_url.xml b/app/src/main/res/layout/activity_import_url.xml
index 7674a15c1..19d8dffc4 100644
--- a/app/src/main/res/layout/activity_import_url.xml
+++ b/app/src/main/res/layout/activity_import_url.xml
@@ -135,6 +135,14 @@
 
                 </com.google.android.material.card.MaterialCardView>
 
+                <cn.classfun.droidvm.ui.widgets.tools.KernelAnalysisWidget
+                    android:id="@+id/kernel_analysis"
+                    android:layout_width="match_parent"
+                    android:layout_height="wrap_content"
+                    android:layout_marginStart="16dp"
+                    android:layout_marginTop="8dp"
+                    android:layout_marginEnd="16dp" />
+
             </cn.classfun.droidvm.ui.widgets.container.CollapsibleContainer>
 
             <com.google.android.material.divider.MaterialDivider
diff --git a/app/src/main/res/layout/dialog_boot_menu.xml b/app/src/main/res/layout/dialog_boot_menu.xml
new file mode 100644
index 000000000..3b0151df4
--- /dev/null
+++ b/app/src/main/res/layout/dialog_boot_menu.xml
@@ -0,0 +1,46 @@
+<?xml version="1.0" encoding="utf-8"?>
+<LinearLayout xmlns:android="http://schemas.android.com/apk/res/android"
+    android:layout_width="match_parent"
+    android:layout_height="wrap_content"
+    android:orientation="vertical"
+    android:paddingStart="24dp"
+    android:paddingEnd="24dp"
+    android:paddingTop="8dp">
+
+    <ScrollView
+        android:layout_width="match_parent"
+        android:layout_height="0dp"
+        android:layout_weight="1">
+
+        <RadioGroup
+            android:id="@+id/rg_boot_entries"
+            android:layout_width="match_parent"
+            android:layout_height="wrap_content"
+            android:orientation="vertical" />
+    </ScrollView>
+
+    <TextView
+        android:id="@+id/tv_boot_menu_summary"
+        android:layout_width="match_parent"
+        android:layout_height="wrap_content"
+        android:paddingTop="8dp"
+        android:textColor="?attr/colorOnSurfaceVariant"
+        android:textSize="12sp"
+        android:visibility="gone" />
+
+    <TextView
+        android:id="@+id/tv_boot_menu_warn"
+        android:layout_width="match_parent"
+        android:layout_height="wrap_content"
+        android:paddingTop="4dp"
+        android:textColor="?attr/colorError"
+        android:textSize="12sp"
+        android:visibility="gone" />
+
+    <CheckBox
+        android:id="@+id/cb_boot_menu_remember"
+        android:layout_width="match_parent"
+        android:layout_height="wrap_content"
+        android:text="@string/edit_vm_boot_menu_remember" />
+
+</LinearLayout>
diff --git a/app/src/main/res/layout/partial_vm_edit_boot.xml b/app/src/main/res/layout/partial_vm_edit_boot.xml
index 079f3e028..cf6bad958 100644
--- a/app/src/main/res/layout/partial_vm_edit_boot.xml
+++ b/app/src/main/res/layout/partial_vm_edit_boot.xml
@@ -1,6 +1,7 @@
 <?xml version="1.0" encoding="utf-8"?>
 <LinearLayout xmlns:android="http://schemas.android.com/apk/res/android"
     xmlns:app="http://schemas.android.com/apk/res-auto"
+    xmlns:tools="http://schemas.android.com/tools"
     android:layout_width="match_parent"
     android:layout_height="wrap_content"
     android:orientation="vertical">
@@ -12,24 +13,41 @@
         android:icon="@drawable/ic_power"
         android:text="@string/network_edit_auto_up" />
 
-    <cn.classfun.droidvm.ui.widgets.row.SwitchRowWidget
-        android:id="@+id/sw_uefi"
+    <cn.classfun.droidvm.ui.widgets.row.DropdownRowWidget
+        android:id="@+id/dd_boot_protocol"
         android:layout_width="match_parent"
         android:layout_height="wrap_content"
-        android:checked="true"
-        android:icon="@drawable/ic_uefi_nocolor"
-        android:text="@string/edit_vm_boot_uefi" />
+        android:hint="@string/edit_vm_boot_protocol"
+        android:icon="@drawable/ic_uefi_nocolor" />
 
-    <TextView
-        android:id="@+id/tv_uefi_hint"
+    <cn.classfun.droidvm.ui.widgets.container.CollapsibleContainer
+        android:id="@+id/container_uefi"
         android:layout_width="match_parent"
         android:layout_height="wrap_content"
-        android:paddingStart="72dp"
-        android:paddingEnd="16dp"
-        android:paddingBottom="8dp"
-        android:text="@string/edit_vm_boot_uefi_hint"
-        android:textColor="?attr/colorOnSurfaceVariant"
-        android:textSize="13sp"/>
+        android:title="@string/edit_vm_boot_protocol_uefi">
+
+        <cn.classfun.droidvm.ui.widgets.row.TextInputRowWidget
+            android:id="@+id/input_uefi_firmware"
+            android:layout_width="match_parent"
+            android:layout_height="wrap_content"
+            android:hint="@string/edit_vm_uefi_firmware"
+            android:icon="@drawable/ic_uefi_nocolor"
+            android:inputType="text"
+            app:ti_iconButtonHint="@string/edit_vm_disk_browse"
+            app:ti_iconButtonIcon="@drawable/ic_open_in" />
+
+        <TextView
+            android:id="@+id/tv_uefi_hint"
+            android:layout_width="match_parent"
+            android:layout_height="wrap_content"
+            android:paddingStart="72dp"
+            android:paddingEnd="16dp"
+            android:paddingBottom="8dp"
+            android:text="@string/edit_vm_uefi_firmware_hint"
+            android:textColor="?attr/colorOnSurfaceVariant"
+            android:textSize="13sp" />
+
+    </cn.classfun.droidvm.ui.widgets.container.CollapsibleContainer>
 
     <cn.classfun.droidvm.ui.widgets.container.CollapsibleContainer
         android:id="@+id/container_kernel"
@@ -38,33 +56,255 @@
         android:title="@string/create_vm_category_kernel"
         android:visibility="gone">
 
-        <cn.classfun.droidvm.ui.widgets.row.TextInputRowWidget
-            android:id="@+id/input_kernel"
+        <cn.classfun.droidvm.ui.widgets.row.DropdownRowWidget
+            android:id="@+id/dd_kernel_source"
             android:layout_width="match_parent"
             android:layout_height="wrap_content"
-            android:hint="@string/create_vm_kernel_hint"
-            android:icon="@drawable/ic_linux"
-            android:inputType="text"
-            app:ti_iconButtonHint="@string/edit_vm_disk_browse"
-            app:ti_iconButtonIcon="@drawable/ic_open_in" />
+            android:hint="@string/edit_vm_kernel_source"
+            android:icon="@drawable/ic_linux" />
 
-        <cn.classfun.droidvm.ui.widgets.row.TextInputRowWidget
-            android:id="@+id/input_initrd"
+        <LinearLayout
+            android:id="@+id/layout_kernel_image"
             android:layout_width="match_parent"
             android:layout_height="wrap_content"
-            android:hint="@string/create_vm_initrd_hint"
-            android:icon="@drawable/ic_floppy"
-            android:inputType="text"
-            app:ti_iconButtonHint="@string/edit_vm_disk_browse"
-            app:ti_iconButtonIcon="@drawable/ic_open_in" />
+            android:orientation="vertical"
+            android:visibility="gone">
 
-        <cn.classfun.droidvm.ui.widgets.row.TextInputRowWidget
-            android:id="@+id/input_cmdline"
+            <cn.classfun.droidvm.ui.widgets.row.DropdownRowWidget
+                android:id="@+id/dd_boot_disk"
+                android:layout_width="match_parent"
+                android:layout_height="wrap_content"
+                android:hint="@string/edit_vm_boot_image_disk"
+                android:icon="@drawable/ic_nav_disk" />
+
+            <cn.classfun.droidvm.ui.widgets.row.DropdownRowWidget
+                android:id="@+id/dd_boot_entry"
+                android:layout_width="match_parent"
+                android:layout_height="wrap_content"
+                android:hint="@string/edit_vm_boot_entry"
+                android:icon="@drawable/ic_linux" />
+
+            <com.google.android.material.card.MaterialCardView
+                android:layout_width="match_parent"
+                android:layout_height="wrap_content"
+                android:layout_marginStart="16dp"
+                android:layout_marginEnd="16dp"
+                android:layout_marginTop="4dp"
+                android:layout_marginBottom="8dp"
+                app:cardCornerRadius="12dp"
+                app:cardElevation="0dp"
+                app:strokeColor="?attr/colorOutlineVariant"
+                app:strokeWidth="1dp">
+
+                <LinearLayout
+                    android:layout_width="match_parent"
+                    android:layout_height="wrap_content"
+                    android:orientation="vertical"
+                    android:padding="12dp">
+
+                    <LinearLayout
+                        android:layout_width="match_parent"
+                        android:layout_height="wrap_content"
+                        android:gravity="center_vertical"
+                        android:orientation="horizontal">
+
+                        <TextView
+                            android:layout_width="0dp"
+                            android:layout_height="wrap_content"
+                            android:layout_weight="1"
+                            android:text="@string/edit_vm_boot_detect_title"
+                            android:textColor="?attr/colorOnSurfaceVariant"
+                            android:textSize="13sp"
+                            android:textStyle="bold" />
+
+                        <ImageButton
+                            android:id="@+id/btn_boot_rescan"
+                            android:layout_width="36dp"
+                            android:layout_height="36dp"
+                            android:background="?attr/selectableItemBackgroundBorderless"
+                            android:contentDescription="@string/edit_vm_boot_rescan"
+                            android:src="@drawable/ic_refresh"
+                            app:tint="?attr/colorOnSurfaceVariant"
+                            tools:ignore="TouchTargetSizeCheck" />
+                    </LinearLayout>
+
+                    <com.google.android.material.textfield.TextInputLayout
+                        style="@style/Widget.Material3.TextInputLayout.OutlinedBox.Dense"
+                        android:layout_width="match_parent"
+                        android:layout_height="wrap_content"
+                        android:layout_marginTop="8dp"
+                        android:hint="@string/edit_vm_boot_detect_kernel">
+
+                        <com.google.android.material.textfield.TextInputEditText
+                            android:id="@+id/et_detect_kernel"
+                            android:layout_width="match_parent"
+                            android:layout_height="wrap_content"
+                            android:enabled="false"
+                            android:inputType="text"
+                            android:maxLines="1"
+                            android:textSize="14sp"
+                            tools:ignore="TextContrastCheck,VisualLintTextFieldSize" />
+                    </com.google.android.material.textfield.TextInputLayout>
+
+                    <TextView
+                        android:id="@+id/tv_boot_kernel_dma_warn"
+                        android:layout_width="match_parent"
+                        android:layout_height="wrap_content"
+                        android:paddingStart="4dp"
+                        android:paddingEnd="4dp"
+                        android:paddingTop="4dp"
+                        android:textColor="?attr/colorError"
+                        android:textSize="12sp"
+                        android:visibility="gone" />
+
+                    <com.google.android.material.textfield.TextInputLayout
+                        style="@style/Widget.Material3.TextInputLayout.OutlinedBox.Dense"
+                        android:layout_width="match_parent"
+                        android:layout_height="wrap_content"
+                        android:layout_marginTop="8dp"
+                        android:hint="@string/edit_vm_boot_detect_initrd">
+
+                        <com.google.android.material.textfield.TextInputEditText
+                            android:id="@+id/et_detect_initrd"
+                            android:layout_width="match_parent"
+                            android:layout_height="wrap_content"
+                            android:enabled="false"
+                            android:inputType="text"
+                            android:maxLines="1"
+                            android:textSize="14sp"
+                            tools:ignore="TextContrastCheck,VisualLintTextFieldSize" />
+                    </com.google.android.material.textfield.TextInputLayout>
+
+                    <com.google.android.material.textfield.TextInputLayout
+                        style="@style/Widget.Material3.TextInputLayout.OutlinedBox.Dense"
+                        android:layout_width="match_parent"
+                        android:layout_height="wrap_content"
+                        android:layout_marginTop="8dp"
+                        android:hint="@string/edit_vm_boot_detect_cmdline">
+
+                        <com.google.android.material.textfield.TextInputEditText
+                            android:id="@+id/et_detect_cmdline"
+                            android:layout_width="match_parent"
+                            android:layout_height="wrap_content"
+                            android:enabled="false"
+                            android:inputType="textMultiLine"
+                            android:textSize="14sp"
+                            tools:ignore="TextContrastCheck,VisualLintTextFieldSize" />
+                    </com.google.android.material.textfield.TextInputLayout>
+
+                    <LinearLayout
+                        android:layout_width="match_parent"
+                        android:layout_height="wrap_content"
+                        android:gravity="center_vertical"
+                        android:orientation="horizontal"
+                        android:paddingTop="4dp">
+
+                        <TextView
+                            android:layout_width="0dp"
+                            android:layout_height="wrap_content"
+                            android:layout_weight="1"
+                            android:text="@string/edit_vm_boot_vdafix"
+                            android:textSize="14sp" />
+
+                        <com.google.android.material.materialswitch.MaterialSwitch
+                            android:id="@+id/sw_vdafix"
+                            android:layout_width="wrap_content"
+                            android:layout_height="wrap_content"
+                            android:checked="true"
+                            tools:ignore="DuplicateSpeakableTextCheck" />
+                    </LinearLayout>
+
+                    <com.google.android.material.textfield.TextInputLayout
+                        style="@style/Widget.Material3.TextInputLayout.OutlinedBox.Dense"
+                        android:layout_width="match_parent"
+                        android:layout_height="wrap_content"
+                        android:layout_marginTop="4dp"
+                        android:hint="@string/edit_vm_boot_cmdline_override">
+
+                        <com.google.android.material.textfield.TextInputEditText
+                            android:id="@+id/et_cmdline_override"
+                            android:layout_width="match_parent"
+                            android:layout_height="wrap_content"
+                            android:inputType="text"
+                            android:textSize="14sp"
+                            tools:ignore="TextContrastCheck,VisualLintTextFieldSize" />
+                    </com.google.android.material.textfield.TextInputLayout>
+
+                    <com.google.android.material.textfield.TextInputLayout
+                        style="@style/Widget.Material3.TextInputLayout.OutlinedBox.Dense"
+                        android:layout_width="match_parent"
+                        android:layout_height="wrap_content"
+                        android:layout_marginTop="8dp"
+                        android:hint="@string/edit_vm_boot_detect_source">
+
+                        <com.google.android.material.textfield.TextInputEditText
+                            android:id="@+id/et_detect_source"
+                            android:layout_width="match_parent"
+                            android:layout_height="wrap_content"
+                            android:enabled="false"
+                            android:inputType="text"
+                            android:maxLines="1"
+                            android:textSize="14sp"
+                            tools:ignore="TextContrastCheck,VisualLintTextFieldSize" />
+                    </com.google.android.material.textfield.TextInputLayout>
+
+                    <TextView
+                        android:id="@+id/tv_boot_detect_warn"
+                        android:layout_width="match_parent"
+                        android:layout_height="wrap_content"
+                        android:paddingTop="6dp"
+                        android:textColor="?attr/colorError"
+                        android:textSize="12sp"
+                        android:visibility="gone" />
+
+                </LinearLayout>
+            </com.google.android.material.card.MaterialCardView>
+
+            <cn.classfun.droidvm.ui.widgets.row.TextInputRowWidget
+                android:id="@+id/input_boot_wait"
+                android:layout_width="match_parent"
+                android:layout_height="wrap_content"
+                android:hint="@string/edit_vm_boot_wait"
+                android:icon="@drawable/ic_clock"
+                android:inputType="number" />
+
+        </LinearLayout>
+
+        <LinearLayout
+            android:id="@+id/layout_kernel_manual"
             android:layout_width="match_parent"
             android:layout_height="wrap_content"
-            android:hint="@string/create_vm_cmdline_hint"
-            android:icon="@drawable/ic_edit"
-            android:inputType="text" />
+            android:orientation="vertical">
+
+            <cn.classfun.droidvm.ui.widgets.row.TextInputRowWidget
+                android:id="@+id/input_kernel"
+                android:layout_width="match_parent"
+                android:layout_height="wrap_content"
+                android:hint="@string/create_vm_kernel_hint"
+                android:icon="@drawable/ic_linux"
+                android:inputType="text"
+                app:ti_iconButtonHint="@string/edit_vm_disk_browse"
+                app:ti_iconButtonIcon="@drawable/ic_open_in" />
+
+            <cn.classfun.droidvm.ui.widgets.row.TextInputRowWidget
+                android:id="@+id/input_initrd"
+                android:layout_width="match_parent"
+                android:layout_height="wrap_content"
+                android:hint="@string/create_vm_initrd_hint"
+                android:icon="@drawable/ic_floppy"
+                android:inputType="text"
+                app:ti_iconButtonHint="@string/edit_vm_disk_browse"
+                app:ti_iconButtonIcon="@drawable/ic_open_in" />
+
+            <cn.classfun.droidvm.ui.widgets.row.TextInputRowWidget
+                android:id="@+id/input_cmdline"
+                android:layout_width="match_parent"
+                android:layout_height="wrap_content"
+                android:hint="@string/create_vm_cmdline_hint"
+                android:icon="@drawable/ic_edit"
+                android:inputType="text" />
+
+        </LinearLayout>
 
     </cn.classfun.droidvm.ui.widgets.container.CollapsibleContainer>
 
diff --git a/app/src/main/res/layout/view_kernel_analysis.xml b/app/src/main/res/layout/view_kernel_analysis.xml
new file mode 100644
index 000000000..f87f6c20b
--- /dev/null
+++ b/app/src/main/res/layout/view_kernel_analysis.xml
@@ -0,0 +1,149 @@
+<?xml version="1.0" encoding="utf-8"?>
+<!-- Reusable "kernel analysis" card: an Analyze button that runs one cloud
+     analysis (lbx entries <url>) and shows, per boot entry, the kernel /
+     initrd / cmdline plus the protected-VM DMA warning — mirroring the VM
+     edit screen's boot-detection card. Driven by KernelAnalysisWidget. -->
+<com.google.android.material.card.MaterialCardView xmlns:android="http://schemas.android.com/apk/res/android"
+    xmlns:app="http://schemas.android.com/apk/res-auto"
+    xmlns:tools="http://schemas.android.com/tools"
+    android:layout_width="match_parent"
+    android:layout_height="wrap_content"
+    app:cardCornerRadius="12dp"
+    app:cardElevation="0dp"
+    app:strokeColor="?attr/colorOutlineVariant"
+    app:strokeWidth="1dp">
+
+    <LinearLayout
+        android:layout_width="match_parent"
+        android:layout_height="wrap_content"
+        android:orientation="vertical"
+        android:padding="12dp">
+
+        <LinearLayout
+            android:layout_width="match_parent"
+            android:layout_height="wrap_content"
+            android:gravity="center_vertical"
+            android:orientation="horizontal">
+
+            <TextView
+                android:layout_width="0dp"
+                android:layout_height="wrap_content"
+                android:layout_weight="1"
+                android:text="@string/kernel_analysis_title"
+                android:textColor="@color/kernel_analysis_title"
+                android:textSize="16sp"
+                android:textStyle="bold" />
+
+            <com.google.android.material.progressindicator.CircularProgressIndicator
+                android:id="@+id/progress_analysis"
+                android:layout_width="20dp"
+                android:layout_height="20dp"
+                android:layout_marginEnd="8dp"
+                android:indeterminate="true"
+                android:visibility="gone"
+                app:indicatorSize="20dp"
+                app:trackThickness="2dp" />
+
+            <com.google.android.material.button.MaterialButton
+                android:id="@+id/btn_analyze"
+                style="@style/Widget.Material3.Button.TonalButton"
+                android:layout_width="wrap_content"
+                android:layout_height="wrap_content"
+                android:minHeight="0dp"
+                android:minWidth="0dp"
+                android:paddingTop="6dp"
+                android:paddingBottom="6dp"
+                android:text="@string/kernel_analysis_analyze"
+                app:icon="@drawable/ic_linux"
+                app:iconSize="18dp" />
+        </LinearLayout>
+
+        <TextView
+            android:id="@+id/tv_analysis_status"
+            android:layout_width="match_parent"
+            android:layout_height="wrap_content"
+            android:paddingTop="6dp"
+            android:text="@string/kernel_analysis_hint"
+            android:textColor="?attr/colorOnSurfaceVariant"
+            android:textSize="12sp" />
+
+        <LinearLayout
+            android:id="@+id/group_analysis_results"
+            android:layout_width="match_parent"
+            android:layout_height="wrap_content"
+            android:orientation="vertical"
+            android:visibility="gone">
+
+            <cn.classfun.droidvm.ui.widgets.row.DropdownRowWidget
+                android:id="@+id/dd_analysis_entry"
+                android:layout_width="match_parent"
+                android:layout_height="wrap_content"
+                android:hint="@string/edit_vm_boot_entry"
+                android:icon="@drawable/ic_linux" />
+
+            <com.google.android.material.textfield.TextInputLayout
+                style="@style/Widget.Material3.TextInputLayout.OutlinedBox.Dense"
+                android:layout_width="match_parent"
+                android:layout_height="wrap_content"
+                android:layout_marginTop="4dp"
+                android:hint="@string/edit_vm_boot_detect_kernel">
+
+                <com.google.android.material.textfield.TextInputEditText
+                    android:id="@+id/et_analysis_kernel"
+                    android:layout_width="match_parent"
+                    android:layout_height="wrap_content"
+                    android:enabled="false"
+                    android:inputType="text"
+                    android:maxLines="1"
+                    android:textSize="14sp"
+                    tools:ignore="TextContrastCheck,VisualLintTextFieldSize" />
+            </com.google.android.material.textfield.TextInputLayout>
+
+            <TextView
+                android:id="@+id/tv_analysis_dma_warn"
+                android:layout_width="match_parent"
+                android:layout_height="wrap_content"
+                android:paddingStart="4dp"
+                android:paddingEnd="4dp"
+                android:paddingTop="4dp"
+                android:textColor="?attr/colorError"
+                android:textSize="12sp"
+                android:visibility="gone" />
+
+            <com.google.android.material.textfield.TextInputLayout
+                style="@style/Widget.Material3.TextInputLayout.OutlinedBox.Dense"
+                android:layout_width="match_parent"
+                android:layout_height="wrap_content"
+                android:layout_marginTop="8dp"
+                android:hint="@string/edit_vm_boot_detect_initrd">
+
+                <com.google.android.material.textfield.TextInputEditText
+                    android:id="@+id/et_analysis_initrd"
+                    android:layout_width="match_parent"
+                    android:layout_height="wrap_content"
+                    android:enabled="false"
+                    android:inputType="text"
+                    android:maxLines="1"
+                    android:textSize="14sp"
+                    tools:ignore="TextContrastCheck,VisualLintTextFieldSize" />
+            </com.google.android.material.textfield.TextInputLayout>
+
+            <com.google.android.material.textfield.TextInputLayout
+                style="@style/Widget.Material3.TextInputLayout.OutlinedBox.Dense"
+                android:layout_width="match_parent"
+                android:layout_height="wrap_content"
+                android:layout_marginTop="8dp"
+                android:hint="@string/edit_vm_boot_detect_cmdline">
+
+                <com.google.android.material.textfield.TextInputEditText
+                    android:id="@+id/et_analysis_cmdline"
+                    android:layout_width="match_parent"
+                    android:layout_height="wrap_content"
+                    android:enabled="false"
+                    android:inputType="textMultiLine"
+                    android:textSize="14sp"
+                    tools:ignore="TextContrastCheck,VisualLintTextFieldSize" />
+            </com.google.android.material.textfield.TextInputLayout>
+        </LinearLayout>
+    </LinearLayout>
+</com.google.android.material.card.MaterialCardView>
diff --git a/app/src/main/res/menu/menu_vm_firmware_browse.xml b/app/src/main/res/menu/menu_vm_firmware_browse.xml
new file mode 100644
index 000000000..fc4e4f84b
--- /dev/null
+++ b/app/src/main/res/menu/menu_vm_firmware_browse.xml
@@ -0,0 +1,14 @@
+<?xml version="1.0" encoding="utf-8"?>
+<menu xmlns:android="http://schemas.android.com/apk/res/android">
+
+    <item
+        android:id="@+id/menu_firmware_builtin"
+        android:icon="@drawable/ic_uefi_nocolor"
+        android:title="@string/edit_vm_uefi_firmware_builtin" />
+
+    <item
+        android:id="@+id/menu_firmware_external"
+        android:icon="@drawable/ic_open_in"
+        android:title="@string/edit_vm_kernel_external" />
+
+</menu>
diff --git a/app/src/main/res/values-night/colors.xml b/app/src/main/res/values-night/colors.xml
index a9a07475c..d1dcb16cd 100644
--- a/app/src/main/res/values-night/colors.xml
+++ b/app/src/main/res/values-night/colors.xml
@@ -3,4 +3,6 @@
     <color name="daemon_card_background_running">#FF1A3825</color>
     <color name="daemon_card_background_checking">#FF382D1A</color>
     <color name="daemon_card_background_stopped">#FF3A1B1B</color>
+
+    <color name="kernel_analysis_title">#FF64B5F6</color>
 </resources>
diff --git a/app/src/main/res/values-zh-rCN/strings.xml b/app/src/main/res/values-zh-rCN/strings.xml
index 87df285b1..650cb176b 100644
--- a/app/src/main/res/values-zh-rCN/strings.xml
+++ b/app/src/main/res/values-zh-rCN/strings.xml
@@ -273,7 +273,56 @@
     <string name="edit_vm_kernel_external">选择外部文件</string>
     <string name="edit_vm_kernel_not_found">目标内核不存在: %1$s</string>
     <string name="edit_vm_boot_uefi">使用 UEFI 启动</string>
+    <string name="edit_vm_boot_protocol">引导方式</string>
+    <string name="edit_vm_boot_protocol_uefi">UEFI</string>
+    <string name="edit_vm_boot_protocol_linux">Linux 开机协议</string>
+    <string name="edit_vm_uefi_firmware">UEFI 固件(留空 = 内置 EDK2)</string>
+    <string name="edit_vm_uefi_firmware_builtin">内置 EDK2</string>
+    <string name="edit_vm_uefi_firmware_browse_title">选择 UEFI 固件</string>
+    <string name="edit_vm_uefi_firmware_hint">自定义固件仅对 QEMU 后端生效\ncrosvm 始终使用内置 EDK2\nUEFI 引导 Linux 适配中,尚不可用;如需引导 Linux,请选择 Linux 内核引导方式</string>
+    <string name="edit_vm_kernel_source">内核来源</string>
+    <string name="edit_vm_kernel_source_image">磁盘镜像</string>
+    <string name="edit_vm_kernel_source_manual">手动指定</string>
+    <string name="edit_vm_boot_image_disk">引导磁盘</string>
+    <string name="edit_vm_boot_image_disk_title">选择引导磁盘</string>
+    <string name="edit_vm_boot_entry">引导项</string>
+    <string name="edit_vm_boot_entry_auto">自动(跟随引导加载器)</string>
+    <string name="edit_vm_boot_entry_auto_hint">客户机更新内核后自动生效</string>
+    <string name="edit_vm_boot_entry_default_mark">%1$s(默认)</string>
+    <string name="edit_vm_boot_entry_builtin">DroidVM 内置 Linux 内核</string>
+    <string name="edit_vm_boot_entry_dma_warn">缺失 DMA_RESTRICTED_POOL</string>
+    <string name="edit_vm_boot_detect_title">检测到的引导文件</string>
+    <string name="edit_vm_boot_detect_entry">引导项</string>
+    <string name="edit_vm_boot_detect_kernel">内核</string>
+    <string name="edit_vm_boot_detect_initrd">initrd</string>
+    <string name="edit_vm_boot_detect_cmdline">内核命令行</string>
+    <string name="edit_vm_boot_detect_source">来源</string>
+    <string name="edit_vm_boot_detect_scanning">正在扫描…</string>
+    <string name="edit_vm_boot_detect_failed">扫描失败:%1$s</string>
+    <string name="edit_vm_boot_detect_no_disk">此虚拟机尚未配置磁盘镜像</string>
+    <string name="edit_vm_boot_detect_root_warn">root= 指向物理设备;请启用自动修正或覆盖 cmdline</string>
+    <string name="edit_vm_boot_rescan">重新扫描</string>
+    <string name="edit_vm_boot_vdafix">自动修正 root= 设备</string>
+    <string name="edit_vm_boot_vdafix_hint">将 root=/dev/sdX 重写为 PARTUUID 以适配 virtio</string>
+    <string name="edit_vm_boot_wait">开机菜单等待秒数</string>
+    <string name="edit_vm_boot_wait_hint">0 = 不显示菜单直接启动</string>
+    <string name="edit_vm_boot_wait_invalid">必须为秒数(数字)</string>
+    <string name="edit_vm_boot_cmdline_override">内核命令行覆盖(留空 = 使用镜像内的)</string>
+    <string name="edit_vm_boot_cmdline_override_hint">留空 = 使用镜像内的 cmdline</string>
+    <string name="edit_vm_boot_menu_title">选择引导项 — %1$s</string>
+    <string name="edit_vm_boot_menu_boot">启动</string>
+    <string name="edit_vm_boot_menu_boot_in">启动 (%1$d)</string>
+    <string name="edit_vm_boot_menu_remember">记住此选择</string>
+    <string name="edit_vm_boot_menu_fallback">未找到固定的引导项“%1$s”,已改用默认</string>
+    <string name="edit_vm_boot_protected_dma_warn">此内核未启用 CONFIG_DMA_RESTRICTED_POOL。\n在受保护 VM 下客户机无法与主机共享 DMA 内存,virtio 设备(磁盘/网络)将无法启动。\n请改用内置内核,或重新编译并启用该选项。</string>
     <string name="edit_vm_boot_uefi_hint">如果想要直接启动 Linux 内核则请禁用 UEFI</string>
+    <string name="kernel_analysis_title">内核分析</string>
+    <string name="kernel_analysis_analyze">分析</string>
+    <string name="kernel_analysis_hint">导入前通过网络分析镜像的内核/initrd</string>
+    <string name="kernel_analysis_need_url">请先输入有效的 http(s):// 镜像 URL</string>
+    <string name="kernel_analysis_found">找到 %1$d 个引导项</string>
+    <string name="kernel_analysis_progress">下载中：%1$d/%2$d 块</string>
+    <string name="kernel_analysis_progress_n">下载中：%1$d 块</string>
     <string name="edit_vm_initrd_browse_title">选择 initramfs</string>
     <string name="edit_vm_initrd_clear">清空</string>
     <string name="edit_vm_initrd_builtin">DroidVM 内置 Linux initrd</string>
diff --git a/app/src/main/res/values/colors.xml b/app/src/main/res/values/colors.xml
index a73a57d2d..0f5cfb0fc 100644
--- a/app/src/main/res/values/colors.xml
+++ b/app/src/main/res/values/colors.xml
@@ -20,4 +20,6 @@
     <color name="daemon_card_background_running">#FFDFFAE4</color>
     <color name="daemon_card_background_checking">#FFFFF9E0</color>
     <color name="daemon_card_background_stopped">#FFFADFE0</color>
+
+    <color name="kernel_analysis_title">#FF1976D2</color>
 </resources>
diff --git a/app/src/main/res/values/strings.xml b/app/src/main/res/values/strings.xml
index d973861c7..2faf73b8c 100644
--- a/app/src/main/res/values/strings.xml
+++ b/app/src/main/res/values/strings.xml
@@ -275,7 +275,56 @@
     <string name="edit_vm_kernel_external">Select an external file</string>
     <string name="edit_vm_kernel_not_found">Target kernel is not exists: %1$s</string>
     <string name="edit_vm_boot_uefi">Boot with UEFI</string>
+    <string name="edit_vm_boot_protocol">Boot protocol</string>
+    <string name="edit_vm_boot_protocol_uefi">UEFI</string>
+    <string name="edit_vm_boot_protocol_linux">Linux boot protocol</string>
+    <string name="edit_vm_uefi_firmware">UEFI firmware (empty = built-in EDK2)</string>
+    <string name="edit_vm_uefi_firmware_builtin">Built-in EDK2</string>
+    <string name="edit_vm_uefi_firmware_browse_title">Select UEFI firmware</string>
+    <string name="edit_vm_uefi_firmware_hint">Custom firmware only takes effect on the QEMU backend\ncrosvm always uses the built-in EDK2\nBooting Linux via UEFI is still being adapted and is not usable yet — to boot Linux, choose the Linux kernel boot protocol</string>
+    <string name="edit_vm_kernel_source">Kernel source</string>
+    <string name="edit_vm_kernel_source_image">Disk image</string>
+    <string name="edit_vm_kernel_source_manual">Manual</string>
+    <string name="edit_vm_boot_image_disk">Boot disk</string>
+    <string name="edit_vm_boot_image_disk_title">Select boot disk</string>
+    <string name="edit_vm_boot_entry">Boot entry</string>
+    <string name="edit_vm_boot_entry_auto">Auto (bootloader default)</string>
+    <string name="edit_vm_boot_entry_auto_hint">Follows guest kernel updates automatically</string>
+    <string name="edit_vm_boot_entry_default_mark">%1$s (default)</string>
+    <string name="edit_vm_boot_entry_builtin">DroidVM built-in Linux kernel</string>
+    <string name="edit_vm_boot_entry_dma_warn">Missing DMA_RESTRICTED_POOL</string>
+    <string name="edit_vm_boot_detect_title">Detected boot files</string>
+    <string name="edit_vm_boot_detect_entry">entry</string>
+    <string name="edit_vm_boot_detect_kernel">Kernel</string>
+    <string name="edit_vm_boot_detect_initrd">initrd</string>
+    <string name="edit_vm_boot_detect_cmdline">Kernel cmdline</string>
+    <string name="edit_vm_boot_detect_source">Source</string>
+    <string name="edit_vm_boot_detect_scanning">Scanning…</string>
+    <string name="edit_vm_boot_detect_failed">Scan failed: %1$s</string>
+    <string name="edit_vm_boot_detect_no_disk">No disk image configured for this VM</string>
+    <string name="edit_vm_boot_detect_root_warn">root= names a physical device; enable auto-fix or override the cmdline</string>
+    <string name="edit_vm_boot_rescan">Rescan</string>
+    <string name="edit_vm_boot_vdafix">Auto-fix root= device</string>
+    <string name="edit_vm_boot_vdafix_hint">Rewrites root=/dev/sdX to PARTUUID for virtio</string>
+    <string name="edit_vm_boot_wait">Boot menu countdown (seconds)</string>
+    <string name="edit_vm_boot_wait_hint">0 = boot immediately without menu</string>
+    <string name="edit_vm_boot_wait_invalid">Must be a number of seconds</string>
+    <string name="edit_vm_boot_cmdline_override">Kernel cmdline override (empty = from image)</string>
+    <string name="edit_vm_boot_cmdline_override_hint">Empty = use cmdline from the image</string>
+    <string name="edit_vm_boot_menu_title">Select boot entry — %1$s</string>
+    <string name="edit_vm_boot_menu_boot">Boot</string>
+    <string name="edit_vm_boot_menu_boot_in">Boot (%1$d)</string>
+    <string name="edit_vm_boot_menu_remember">Remember this choice</string>
+    <string name="edit_vm_boot_menu_fallback">Pinned entry "%1$s" not found; using default</string>
+    <string name="edit_vm_boot_protected_dma_warn">This kernel lacks CONFIG_DMA_RESTRICTED_POOL.\nUnder a protected VM the guest cannot share DMA memory with the host, so virtio devices (disk/network) will fail to start.\nUse the built-in kernel, or rebuild with CONFIG_DMA_RESTRICTED_POOL.</string>
     <string name="edit_vm_boot_uefi_hint">To boot a Linux kernel directly, please disable UEFI</string>
+    <string name="kernel_analysis_title">Kernel analysis</string>
+    <string name="kernel_analysis_analyze">Analyze</string>
+    <string name="kernel_analysis_hint">Analyze the image\'s kernel/initrd over the network before importing</string>
+    <string name="kernel_analysis_need_url">Enter a valid http(s):// image URL first</string>
+    <string name="kernel_analysis_found">%1$d boot entries found</string>
+    <string name="kernel_analysis_progress">Downloading: %1$d/%2$d chunks</string>
+    <string name="kernel_analysis_progress_n">Downloading: %1$d chunks</string>
     <string name="edit_vm_initrd_browse_title">Select initramfs</string>
     <string name="edit_vm_initrd_clear">Clear</string>
     <string name="edit_vm_initrd_builtin">DroidVM built-in Linux initrd</string>

From 87c46084153a191eea497dedb9a6bd37696df481 Mon Sep 17 00:00:00 2001
From: HuJK <gh@hujk.org>
Date: Sun, 14 Jun 2026 16:38:07 +0800
Subject: [PATCH 011/182] feat(download): keep disk imports running in
 background

Move disk image downloads out of the import activities into a foreground service backed by a self-written resumable downloader, with notification progress, retry/pause state, and one active import at a time.

Rewire URL, flat image, and LXC import screens to attach to the service state while keeping DownloadWidget display-only.

Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
---
 app/src/main/AndroidManifest.xml              |   7 +
 .../lib/download/DiskDownloadManager.java     | 467 ++++++++++++++++++
 .../lib/download/DiskDownloadService.java     | 326 ++++++++++++
 .../ui/disk/download/ImportURLActivity.java   | 213 ++++++--
 .../ui/disk/images/ImportImagesActivity.java  | 203 ++++++--
 .../ui/disk/lxc/ImportLxcImagesActivity.java  | 243 +++++++--
 .../ui/widgets/tools/DownloadWidget.java      | 226 +++------
 app/src/main/res/values-zh-rCN/strings.xml    |  19 +
 app/src/main/res/values/strings.xml           |  19 +
 9 files changed, 1409 insertions(+), 314 deletions(-)
 create mode 100644 app/src/main/java/cn/classfun/droidvm/lib/download/DiskDownloadManager.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/lib/download/DiskDownloadService.java

diff --git a/app/src/main/AndroidManifest.xml b/app/src/main/AndroidManifest.xml
index ffe9d0410..be017c56a 100644
--- a/app/src/main/AndroidManifest.xml
+++ b/app/src/main/AndroidManifest.xml
@@ -8,6 +8,8 @@
     <uses-permission android:name="android.permission.POST_NOTIFICATIONS" />
     <uses-permission android:name="android.permission.INTERNET" />
     <uses-permission android:name="android.permission.ACCESS_NETWORK_STATE" />
+    <uses-permission android:name="android.permission.FOREGROUND_SERVICE" />
+    <uses-permission android:name="android.permission.FOREGROUND_SERVICE_DATA_SYNC" />
 
     <application
         android:name=".DroidVMApp"
@@ -183,5 +185,10 @@
                 android:resource="@xml/file_paths" />
         </provider>
 
+        <service
+            android:name=".lib.download.DiskDownloadService"
+            android:exported="false"
+            android:foregroundServiceType="dataSync" />
+
     </application>
 </manifest>
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/download/DiskDownloadManager.java b/app/src/main/java/cn/classfun/droidvm/lib/download/DiskDownloadManager.java
new file mode 100644
index 000000000..1bc6dc6c7
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/lib/download/DiskDownloadManager.java
@@ -0,0 +1,467 @@
+package cn.classfun.droidvm.lib.download;
+
+import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
+
+import android.content.Context;
+import android.util.Log;
+
+import androidx.annotation.NonNull;
+import androidx.annotation.Nullable;
+
+import java.io.File;
+import java.io.FileInputStream;
+import java.io.FileOutputStream;
+import java.io.IOException;
+import java.io.InputStream;
+import java.io.OutputStream;
+import java.net.HttpURLConnection;
+import java.net.URL;
+import java.util.ArrayList;
+import java.util.UUID;
+import java.util.concurrent.ConcurrentHashMap;
+import java.util.concurrent.atomic.AtomicBoolean;
+import java.util.concurrent.atomic.AtomicLong;
+
+import cn.classfun.droidvm.R;
+import cn.classfun.droidvm.lib.store.disk.DiskConfig;
+import cn.classfun.droidvm.lib.store.disk.DiskStore;
+
+/**
+ * Self-written disk-image download engine. We stream the file ourselves with
+ * {@link HttpURLConnection} (following redirects, resuming via HTTP Range, and
+ * retrying on read timeouts / dropped connections) instead of the system
+ * DownloadManager, whose OEM variants either reject app-private destinations or
+ * time out aggressively without resuming on this CDN — while plain `curl` works.
+ *
+ * <p>Because the app holds MANAGE_EXTERNAL_STORAGE we write straight to the
+ * user's folder (a {@code .part} file, renamed on completion). State lives in an
+ * in-memory registry; {@link DiskDownloadService} runs {@link #runDownload} on a
+ * background thread and renders the notification, and activities poll
+ * {@link #query} for the on-screen widget.
+ */
+public final class DiskDownloadManager {
+    private static final String TAG = "DiskDownload";
+    private static final int MAX_RETRIES = 10;
+    private static final int CONNECT_TIMEOUT_MS = 30000;
+    private static final int READ_TIMEOUT_MS = 30000;
+    private static final int BUFFER = 65536;
+    /** Abort + retry if throughput drops below ~0.7 KB/s over this window — i.e.
+     * all but stopped (catches a mirror that holds the connection open but sends
+     * almost nothing); genuinely slow-but-moving connections are left alone. */
+    private static final long STALL_WINDOW_MS = 1500;
+    private static final long STALL_MIN_BYTES = 1024;
+
+    public static final int STATE_CONNECTING = 0;
+    public static final int STATE_RUNNING = 1;
+    public static final int STATE_PAUSED = 2; // between retries
+    public static final int STATE_SUCCESS = 3;
+    public static final int STATE_FAILED = 4;
+    public static final int STATE_CANCELLED = 5;
+
+    private static final AtomicLong NEXT_ID = new AtomicLong(1);
+    private static final ConcurrentHashMap<Long, Download> JOBS = new ConcurrentHashMap<>();
+
+    private DiskDownloadManager() {
+    }
+
+    /** Mutable per-download state. Fields are written by the download thread and
+     * read by the service / activity poll loops, hence volatile. */
+    private static final class Download {
+        final long id;
+        final String url;
+        final String userAgent;
+        final String folder;
+        final String name;
+        /** Activity that started this download, reopened when its notification is tapped. */
+        final String sourceActivity;
+        final AtomicBoolean cancelled = new AtomicBoolean(false);
+        volatile int state = STATE_CONNECTING;
+        volatile long downloaded = 0;
+        volatile long total = -1;
+        volatile String reason;
+        volatile UUID diskId;
+        /** The in-flight connection, disconnected on cancel to unblock read(). */
+        volatile HttpURLConnection activeConn;
+
+        Download(long id, String url, String userAgent, String folder, String name,
+                 String sourceActivity) {
+            this.id = id;
+            this.url = url;
+            this.userAgent = userAgent;
+            this.folder = folder;
+            this.name = name;
+            this.sourceActivity = sourceActivity;
+        }
+    }
+
+    /** A snapshot of a download's live state. */
+    public static final class Progress {
+        public final int state;
+        public final long downloaded;
+        public final long total;
+        public final String reason;
+
+        Progress(int state, long downloaded, long total, String reason) {
+            this.state = state;
+            this.downloaded = downloaded;
+            this.total = total;
+            this.reason = reason;
+        }
+    }
+
+    /** What an activity needs to finish a successful import. */
+    public static final class Result {
+        public final String folder;
+        public final String name;
+        public final UUID diskId;
+
+        Result(String folder, String name, UUID diskId) {
+            this.folder = folder;
+            this.name = name;
+            this.diskId = diskId;
+        }
+    }
+
+    /**
+     * Registers a download and returns its id. Drops any earlier job for the same
+     * destination and purges finished jobs. The caller then starts
+     * {@link DiskDownloadService} for this id, which runs the download.
+     */
+    public static long enqueue(
+        @NonNull Context context,
+        @NonNull String url,
+        @NonNull String userAgent,
+        @NonNull String folder,
+        @NonNull String name,
+        @NonNull Class<?> sourceActivity
+    ) {
+        purgeFinishedAndDuplicates(folder, name);
+        long id = NEXT_ID.getAndIncrement();
+        JOBS.put(id, new Download(id, url, userAgent, folder, name, sourceActivity.getName()));
+        Log.i(TAG, fmt("Queued download #%d -> %s/%s", id, folder, name));
+        return id;
+    }
+
+    /** Class name of the activity that started a download, or {@code null}. */
+    @Nullable
+    static String sourceActivity(long id) {
+        var d = JOBS.get(id);
+        return d != null ? d.sourceActivity : null;
+    }
+
+    /** True if any download is still in flight (only one is allowed at a time). */
+    public static boolean hasActiveDownload() {
+        for (var d : JOBS.values()) {
+            if (d.state != STATE_SUCCESS && d.state != STATE_FAILED
+                && d.state != STATE_CANCELLED)
+                return true;
+        }
+        return false;
+    }
+
+    /** Live state of a download, or {@code null} if unknown/removed. */
+    @Nullable
+    public static Progress query(long id) {
+        var d = JOBS.get(id);
+        if (d == null) return null;
+        return new Progress(d.state, d.downloaded, d.total, d.reason);
+    }
+
+    /** Requests cancellation; the download thread aborts and deletes its partial file. */
+    public static void cancel(long id) {
+        var d = JOBS.get(id);
+        if (d == null) return;
+        d.cancelled.set(true);
+        // Break any blocked read() so the cancel takes effect immediately.
+        var conn = d.activeConn;
+        if (conn != null) conn.disconnect();
+    }
+
+    /** Result of a finished download, or {@code null} if it isn't successfully done. */
+    @Nullable
+    public static Result getResult(long id) {
+        var d = JOBS.get(id);
+        if (d == null || d.state != STATE_SUCCESS) return null;
+        return new Result(d.folder, d.name, d.diskId);
+    }
+
+    /** Ids of all known (in-flight or just-finished) downloads. */
+    @NonNull
+    public static long[] activeIds() {
+        var ids = new ArrayList<>(JOBS.keySet());
+        long[] out = new long[ids.size()];
+        for (int i = 0; i < out.length; i++) out[i] = ids.get(i);
+        return out;
+    }
+
+    /** Filename of a download, or {@code null} if unknown. */
+    @Nullable
+    public static String downloadName(long id) {
+        var d = JOBS.get(id);
+        return d != null ? d.name : null;
+    }
+
+    /**
+     * Id of the in-flight download started by {@code sourceActivityClass}, or
+     * {@code -1}. Lets a re-created import screen re-attach to its running
+     * download and restore the progress UI.
+     */
+    public static long activeDownloadId(@NonNull String sourceActivityClass) {
+        for (var d : JOBS.values()) {
+            if (sourceActivityClass.equals(d.sourceActivity)
+                && d.state != STATE_SUCCESS && d.state != STATE_FAILED
+                && d.state != STATE_CANCELLED)
+                return d.id;
+        }
+        return -1;
+    }
+
+    static boolean isTerminal(long id) {
+        var d = JOBS.get(id);
+        return d == null || d.state == STATE_SUCCESS
+            || d.state == STATE_FAILED || d.state == STATE_CANCELLED;
+    }
+
+    /**
+     * Streams the download to completion: resolves redirects, then retries with
+     * HTTP Range resume on timeouts / dropped connections. On success the file is
+     * moved into place and registered as a disk. Runs on a background thread.
+     */
+    static void runDownload(@NonNull Context context, long id) {
+        var ctx = context.getApplicationContext();
+        var d = JOBS.get(id);
+        if (d == null) return;
+        var part = new File(d.folder, d.name + ".part");
+        var dest = new File(d.folder, d.name);
+        try {
+            var parent = dest.getParentFile();
+            if (parent != null && !parent.exists() && !parent.mkdirs())
+                throw new IOException(fmt("Cannot create folder: %s", parent.getAbsolutePath()));
+            // Start fresh — stale .part from a prior failed attempt may be corrupt.
+            if (part.exists() && !part.delete())
+                Log.w(TAG, fmt("Could not clear stale part file: %s", part.getAbsolutePath()));
+            String lastError = null;
+            for (int attempt = 0; attempt <= MAX_RETRIES; attempt++) {
+                if (d.cancelled.get()) {
+                    abort(d, part);
+                    return;
+                }
+                try {
+                    downloadOnce(d, part);
+                    finishSuccess(ctx, d, part, dest);
+                    return;
+                } catch (CancelledException e) {
+                    abort(d, part);
+                    return;
+                } catch (IOException e) {
+                    lastError = e.getMessage() != null ? e.getMessage() : "I/O error";
+                    Log.w(TAG, fmt("Download #%d attempt %d failed: %s", id, attempt + 1, lastError));
+                }
+                if (d.cancelled.get()) {
+                    abort(d, part);
+                    return;
+                }
+                if (attempt < MAX_RETRIES) {
+                    d.reason = ctx.getString(R.string.download_retrying, attempt + 1, MAX_RETRIES);
+                    d.state = STATE_PAUSED;
+                    sleep(Math.min(2000L * (attempt + 1), 10000L));
+                }
+            }
+            fail(d, part, lastError != null ? lastError : "Download failed");
+        } catch (Exception e) {
+            Log.e(TAG, fmt("Download #%d failed", id), e);
+            fail(d, part, e.getMessage() != null ? e.getMessage() : "Unknown error");
+        }
+    }
+
+    private static void downloadOnce(Download d, File part) throws IOException {
+        long existing = part.exists() ? part.length() : 0;
+        // Re-resolve the redirect each attempt so a flaky mirror can be swapped
+        // out (the server load-balances), like re-running `curl -L`.
+        var url = resolveFinalUrl(d.url, d.userAgent);
+        var conn = (HttpURLConnection) new URL(url).openConnection();
+        conn.setConnectTimeout(CONNECT_TIMEOUT_MS);
+        conn.setReadTimeout(READ_TIMEOUT_MS);
+        conn.setInstanceFollowRedirects(true);
+        conn.setRequestProperty("User-Agent", d.userAgent);
+        conn.setRequestProperty("Accept-Encoding", "identity");
+        if (existing > 0) conn.setRequestProperty("Range", "bytes=" + existing + "-");
+        d.activeConn = conn;
+        try {
+            int code = conn.getResponseCode();
+            boolean resumed = code == HttpURLConnection.HTTP_PARTIAL; // 206
+            if (code != HttpURLConnection.HTTP_OK && code != HttpURLConnection.HTTP_PARTIAL)
+                throw new IOException("HTTP " + code);
+            Log.i(TAG, fmt("Download #%d %s from %s (HTTP %d)",
+                d.id, existing > 0 ? "resuming@" + existing : "starting", conn.getURL(), code));
+            // Server ignored our Range and is sending the whole file again.
+            long start = resumed ? existing : 0;
+            d.total = resolveTotal(conn, resumed, start);
+            d.downloaded = start;
+            d.state = STATE_RUNNING;
+            try (InputStream in = conn.getInputStream();
+                 OutputStream out = new FileOutputStream(part, resumed)) {
+                long done = start;
+                long windowStart = System.currentTimeMillis();
+                long windowBytes = done;
+                var buf = new byte[BUFFER];
+                int n;
+                while ((n = in.read(buf)) != -1) {
+                    if (d.cancelled.get()) throw new CancelledException();
+                    out.write(buf, 0, n);
+                    done += n;
+                    d.downloaded = done;
+                    long now = System.currentTimeMillis();
+                    if (now - windowStart >= STALL_WINDOW_MS) {
+                        if (done - windowBytes < STALL_MIN_BYTES)
+                            throw new IOException("Throughput too low");
+                        windowStart = now;
+                        windowBytes = done;
+                    }
+                }
+                out.flush();
+                // EOF before the expected size means the connection dropped early.
+                if (d.total > 0 && done < d.total)
+                    throw new IOException(fmt("Incomplete: %d/%d bytes", done, d.total));
+            }
+        } finally {
+            d.activeConn = null;
+            conn.disconnect();
+        }
+    }
+
+    /**
+     * Total file size for the progress bar. On a 206 resume the body may be
+     * chunked (no Content-Length), so prefer the absolute total from the
+     * {@code Content-Range: bytes a-b/total} header; otherwise derive it from
+     * Content-Length. Returns -1 if genuinely unknown.
+     */
+    private static long resolveTotal(HttpURLConnection conn, boolean resumed, long start) {
+        if (resumed) {
+            var range = conn.getHeaderField("Content-Range"); // "bytes a-b/total"
+            if (range != null) {
+                int slash = range.lastIndexOf('/');
+                if (slash >= 0) {
+                    var total = range.substring(slash + 1).trim();
+                    if (!total.equals("*")) {
+                        try {
+                            return Long.parseLong(total);
+                        } catch (NumberFormatException ignored) {
+                        }
+                    }
+                }
+            }
+            long len = conn.getContentLengthLong();
+            return len >= 0 ? start + len : -1;
+        }
+        long len = conn.getContentLengthLong();
+        return len >= 0 ? len : -1;
+    }
+
+    private static void finishSuccess(Context ctx, Download d, File part, File dest)
+        throws IOException {
+        if (d.cancelled.get()) {
+            abort(d, part);
+            return;
+        }
+        if (dest.exists() && !dest.delete())
+            throw new IOException(fmt("Cannot overwrite: %s", dest.getAbsolutePath()));
+        if (!part.renameTo(dest)) {
+            copyFile(part, dest);
+            if (!part.delete()) Log.w(TAG, fmt("Failed to delete part: %s", part.getAbsolutePath()));
+        }
+        var config = registerDisk(ctx, d.name, d.folder);
+        d.diskId = config.getId();
+        d.reason = null;
+        d.state = STATE_SUCCESS;
+        Log.i(TAG, fmt("Download #%d complete -> %s", d.id, dest.getAbsolutePath()));
+    }
+
+    private static void abort(Download d, File part) {
+        if (part.exists() && !part.delete())
+            Log.w(TAG, fmt("Failed to delete part: %s", part.getAbsolutePath()));
+        d.state = STATE_CANCELLED;
+    }
+
+    private static void fail(Download d, File part, String reason) {
+        if (part.exists() && !part.delete())
+            Log.w(TAG, fmt("Failed to delete part: %s", part.getAbsolutePath()));
+        d.reason = reason;
+        d.state = STATE_FAILED;
+    }
+
+    /**
+     * Follows redirects (including cross-protocol http&harr;https) and returns the
+     * final URL. Returns the original URL if resolution fails.
+     */
+    @NonNull
+    static String resolveFinalUrl(@NonNull String url, @NonNull String userAgent) {
+        var current = url;
+        try {
+            for (int i = 0; i < 6; i++) {
+                var conn = (HttpURLConnection) new URL(current).openConnection();
+                conn.setInstanceFollowRedirects(false);
+                conn.setConnectTimeout(CONNECT_TIMEOUT_MS);
+                conn.setReadTimeout(CONNECT_TIMEOUT_MS);
+                conn.setRequestProperty("User-Agent", userAgent);
+                conn.setRequestProperty("Accept-Encoding", "identity");
+                int code = conn.getResponseCode();
+                String location = (code >= 300 && code < 400)
+                    ? conn.getHeaderField("Location") : null;
+                conn.disconnect();
+                if (location == null || location.isEmpty()) break;
+                current = new URL(new URL(current), location).toString();
+            }
+        } catch (Exception e) {
+            Log.w(TAG, fmt("Redirect resolution failed for %s; using it as-is", url), e);
+            return url;
+        }
+        if (!current.equals(url)) Log.i(TAG, fmt("Resolved %s -> %s", url, current));
+        return current;
+    }
+
+    private static DiskConfig registerDisk(Context ctx, String name, String folder) {
+        var store = new DiskStore();
+        store.load(ctx);
+        var config = new DiskConfig();
+        config.setName(name);
+        config.item.set("folder", folder);
+        store.add(config);
+        store.save(ctx);
+        return config;
+    }
+
+    private static void copyFile(File src, File dest) throws IOException {
+        try (InputStream in = new FileInputStream(src);
+             OutputStream out = new FileOutputStream(dest)) {
+            var buf = new byte[BUFFER];
+            int n;
+            while ((n = in.read(buf)) != -1) out.write(buf, 0, n);
+            out.flush();
+        }
+    }
+
+    /** Drops finished jobs and any earlier job aimed at the same destination. */
+    private static void purgeFinishedAndDuplicates(String folder, String name) {
+        for (var e : JOBS.entrySet()) {
+            var d = e.getValue();
+            boolean duplicate = d.folder.equals(folder) && d.name.equals(name);
+            boolean finished = d.state == STATE_SUCCESS
+                || d.state == STATE_FAILED || d.state == STATE_CANCELLED;
+            if (duplicate) d.cancelled.set(true);
+            if (duplicate || finished) JOBS.remove(e.getKey());
+        }
+    }
+
+    private static void sleep(long ms) {
+        try {
+            Thread.sleep(ms);
+        } catch (InterruptedException e) {
+            Thread.currentThread().interrupt();
+        }
+    }
+
+    /** Thrown to unwind the read loop on cancellation (not retried). */
+    private static final class CancelledException extends IOException {
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/download/DiskDownloadService.java b/app/src/main/java/cn/classfun/droidvm/lib/download/DiskDownloadService.java
new file mode 100644
index 000000000..90bedd573
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/lib/download/DiskDownloadService.java
@@ -0,0 +1,326 @@
+package cn.classfun.droidvm.lib.download;
+
+import static cn.classfun.droidvm.lib.size.SizeUtils.formatSize;
+import static cn.classfun.droidvm.lib.utils.StringUtils.formatDuration;
+
+import android.app.Notification;
+import android.app.NotificationChannel;
+import android.app.NotificationManager;
+import android.app.PendingIntent;
+import android.app.Service;
+import android.content.Context;
+import android.content.Intent;
+import android.content.pm.ServiceInfo;
+import android.os.Handler;
+import android.os.IBinder;
+import android.os.Looper;
+import android.util.Log;
+
+import androidx.annotation.NonNull;
+import androidx.annotation.Nullable;
+import androidx.core.app.NotificationCompat;
+
+import java.util.ArrayList;
+import java.util.HashSet;
+import java.util.LinkedHashSet;
+import java.util.Set;
+import java.util.concurrent.ExecutorService;
+import java.util.concurrent.Executors;
+
+import cn.classfun.droidvm.R;
+import cn.classfun.droidvm.lib.download.DiskDownloadManager.Progress;
+import cn.classfun.droidvm.ui.main.MainActivity;
+
+/**
+ * Foreground service that runs {@link DiskDownloadManager#runDownload} on a
+ * background thread and renders one notification per download covering every
+ * state — connecting, downloading (%/size/speed/ETA), retrying, failed, done —
+ * in the same notification (no separate completion/failure notification).
+ */
+public final class DiskDownloadService extends Service {
+    private static final String TAG = "DiskDownloadService";
+    private static final String ACTION_START = "cn.classfun.droidvm.download.START";
+    private static final String ACTION_CANCEL = "cn.classfun.droidvm.download.CANCEL";
+    private static final String EXTRA_ID = "download_id";
+    private static final String CHANNEL_ID = "disk_downloads_progress";
+    private static final int NOTIF_BASE = 0x44_44_00_00;
+    private static final long POLL_MS = 1000;
+    private static final long SPEED_WINDOW_MS = 800;
+
+    private final Handler handler = new Handler(Looper.getMainLooper());
+    private final ExecutorService executor = Executors.newCachedThreadPool();
+    /** Ids with a live (ongoing) notification. */
+    private final Set<Long> active = new LinkedHashSet<>();
+    /** Ids already handed to the executor, so a repeat START doesn't double-run. */
+    private final Set<Long> submitted = new HashSet<>();
+    private final java.util.Map<Long, Tracker> trackers = new java.util.HashMap<>();
+    private NotificationManager nm;
+    private long foregroundId = -1;
+    private boolean polling = false;
+
+    /** Per-download moving-average speed estimate. */
+    private static final class Tracker {
+        long lastTime = 0;
+        long lastBytes = 0;
+        long speed = 0;
+    }
+
+    public static void start(@NonNull Context ctx, long id) {
+        var i = new Intent(ctx, DiskDownloadService.class)
+            .setAction(ACTION_START)
+            .putExtra(EXTRA_ID, id);
+        ctx.startForegroundService(i);
+    }
+
+    @Override
+    public void onCreate() {
+        super.onCreate();
+        nm = getSystemService(NotificationManager.class);
+        ensureChannel();
+    }
+
+    @Override
+    public int onStartCommand(Intent intent, int flags, int startId) {
+        if (intent != null) {
+            long id = intent.getLongExtra(EXTRA_ID, -1);
+            var action = intent.getAction();
+            if (ACTION_CANCEL.equals(action) && id >= 0) {
+                DiskDownloadManager.cancel(id);
+            } else if (ACTION_START.equals(action) && id >= 0) {
+                active.add(id);
+                if (submitted.add(id)) {
+                    var appCtx = getApplicationContext();
+                    executor.submit(() -> DiskDownloadManager.runDownload(appCtx, id));
+                }
+            }
+        }
+        if (active.isEmpty()) {
+            stopForegroundAndSelf();
+            return START_NOT_STICKY;
+        }
+        promoteForeground();
+        startPolling();
+        return START_NOT_STICKY;
+    }
+
+    @Override
+    public void onTimeout(int startId, int fgsType) {
+        Log.w(TAG, "Foreground service timed out; stopping");
+        stopForegroundAndSelf();
+    }
+
+    @Nullable
+    @Override
+    public IBinder onBind(Intent intent) {
+        return null;
+    }
+
+    @Override
+    public void onDestroy() {
+        super.onDestroy();
+        handler.removeCallbacks(pollTask);
+        executor.shutdownNow();
+    }
+
+    private void startPolling() {
+        if (polling) return;
+        polling = true;
+        handler.post(pollTask);
+    }
+
+    private final Runnable pollTask = new Runnable() {
+        @Override
+        public void run() {
+            tick();
+            if (active.isEmpty()) {
+                polling = false;
+                stopForegroundAndSelf();
+            } else {
+                handler.postDelayed(this, POLL_MS);
+            }
+        }
+    };
+
+    private void tick() {
+        for (long id : new ArrayList<>(active)) {
+            var p = DiskDownloadManager.query(id);
+            if (p == null) {
+                active.remove(id);
+                if (nm != null) nm.cancel(notifId(id));
+                continue;
+            }
+            switch (p.state) {
+                case DiskDownloadManager.STATE_SUCCESS:
+                    if (nm != null) nm.notify(notifId(id), buildDone(id));
+                    active.remove(id);
+                    break;
+                case DiskDownloadManager.STATE_FAILED:
+                    if (nm != null) nm.notify(notifId(id), buildFailed(id, p));
+                    active.remove(id);
+                    break;
+                case DiskDownloadManager.STATE_CANCELLED:
+                    if (nm != null) nm.cancel(notifId(id));
+                    active.remove(id);
+                    break;
+                default:
+                    if (nm != null) nm.notify(notifId(id), buildOngoing(id, p));
+                    break;
+            }
+        }
+        if (!active.isEmpty() && !active.contains(foregroundId))
+            promoteForeground();
+    }
+
+    /** Anchors the foreground on a still-running download (its notification must
+     * be ongoing). Stops the service if nothing is running. */
+    private void promoteForeground() {
+        if (active.contains(foregroundId)) return;
+        for (long id : new ArrayList<>(active)) {
+            var p = DiskDownloadManager.query(id);
+            if (p == null) {
+                active.remove(id);
+                continue;
+            }
+            foregroundId = id;
+            startForeground(notifId(id), buildOngoing(id, p),
+                ServiceInfo.FOREGROUND_SERVICE_TYPE_DATA_SYNC);
+            return;
+        }
+        stopForegroundAndSelf();
+    }
+
+    private void stopForegroundAndSelf() {
+        handler.removeCallbacks(pollTask);
+        polling = false;
+        foregroundId = -1;
+        // DETACH so finished (success/failed) notifications stay in the shade.
+        stopForeground(STOP_FOREGROUND_DETACH);
+        stopSelf();
+    }
+
+    private Notification buildOngoing(long id, @NonNull Progress p) {
+        var b = baseBuilder(id)
+            .setOngoing(true)
+            .addAction(0, getString(R.string.notif_download_cancel), cancelIntent(this, id));
+        if (p.state == DiskDownloadManager.STATE_PAUSED) {
+            applyBar(b, p);
+            b.setContentText(p.reason != null ? p.reason : getString(R.string.download_paused));
+        } else if (p.state == DiskDownloadManager.STATE_RUNNING) {
+            applyBar(b, p);
+            b.setContentText(runningText(p, updateSpeed(id, p.downloaded)));
+        } else { // connecting / no size yet
+            b.setProgress(0, 0, true);
+            b.setContentText(getString(R.string.notif_download_connecting));
+        }
+        return b.build();
+    }
+
+    private Notification buildDone(long id) {
+        return baseBuilder(id)
+            .setContentText(getString(R.string.notif_download_complete_title))
+            .setAutoCancel(true)
+            .build();
+    }
+
+    private Notification buildFailed(long id, @NonNull Progress p) {
+        var reason = p.reason != null ? p.reason : "Unknown error";
+        return baseBuilder(id)
+            .setContentText(getString(R.string.download_failed, reason))
+            .setStyle(new NotificationCompat.BigTextStyle()
+                .bigText(getString(R.string.download_failed, reason)))
+            .setAutoCancel(true)
+            .build();
+    }
+
+    private NotificationCompat.Builder baseBuilder(long id) {
+        var name = DiskDownloadManager.downloadName(id);
+        return new NotificationCompat.Builder(this, CHANNEL_ID)
+            .setSmallIcon(R.drawable.ic_download)
+            .setContentTitle(name != null ? name : getString(R.string.app_name))
+            .setOnlyAlertOnce(true)
+            .setContentIntent(contentIntent(id));
+    }
+
+    private void applyBar(NotificationCompat.Builder b, Progress p) {
+        if (p.total > 0) {
+            b.setProgress(1000, (int) (p.downloaded * 1000 / p.total), false);
+            b.setSubText(getString(R.string.download_percent, p.downloaded * 100f / p.total));
+        } else {
+            b.setProgress(0, 0, true);
+        }
+    }
+
+    private String runningText(Progress p, long speed) {
+        var text = p.total > 0
+            ? getString(R.string.download_size_progress, formatSize(p.downloaded), formatSize(p.total))
+            : getString(R.string.download_size_unknown, formatSize(p.downloaded));
+        if (speed > 0) {
+            text += " · " + getString(R.string.download_speed, formatSize(speed));
+            if (p.total > 0)
+                text += " · " + getString(R.string.download_eta,
+                    formatDuration((p.total - p.downloaded) / speed));
+        }
+        return text;
+    }
+
+    private long updateSpeed(long id, long downloaded) {
+        var t = trackers.computeIfAbsent(id, k -> new Tracker());
+        long now = System.currentTimeMillis();
+        if (t.lastTime == 0) {
+            t.lastTime = now;
+            t.lastBytes = downloaded;
+            return t.speed;
+        }
+        long elapsed = now - t.lastTime;
+        if (elapsed >= SPEED_WINDOW_MS) {
+            t.speed = elapsed > 0 ? (downloaded - t.lastBytes) * 1000 / elapsed : 0;
+            t.lastTime = now;
+            t.lastBytes = downloaded;
+        }
+        return t.speed;
+    }
+
+    private PendingIntent contentIntent(long id) {
+        // Reopen the import screen that started this download (bring its existing
+        // instance to the front; create it if it's gone). Fall back to launching
+        // the app if we don't know the source.
+        var source = DiskDownloadManager.sourceActivity(id);
+        Intent intent;
+        if (source != null) {
+            intent = new Intent().setClassName(this, source)
+                .setFlags(Intent.FLAG_ACTIVITY_NEW_TASK
+                    | Intent.FLAG_ACTIVITY_CLEAR_TOP
+                    | Intent.FLAG_ACTIVITY_SINGLE_TOP);
+        } else {
+            intent = getPackageManager().getLaunchIntentForPackage(getPackageName());
+            if (intent == null) intent = new Intent(this, MainActivity.class);
+            intent.setFlags(Intent.FLAG_ACTIVITY_NEW_TASK);
+        }
+        return PendingIntent.getActivity(this, (int) id, intent,
+            PendingIntent.FLAG_UPDATE_CURRENT | PendingIntent.FLAG_IMMUTABLE);
+    }
+
+    private static PendingIntent cancelIntent(Context ctx, long id) {
+        var intent = new Intent(ctx, DiskDownloadService.class)
+            .setAction(ACTION_CANCEL)
+            .putExtra(EXTRA_ID, id);
+        return PendingIntent.getService(ctx, (int) id, intent,
+            PendingIntent.FLAG_UPDATE_CURRENT | PendingIntent.FLAG_IMMUTABLE);
+    }
+
+    private void ensureChannel() {
+        if (nm == null) return;
+        var ch = new NotificationChannel(
+            CHANNEL_ID,
+            getString(R.string.notif_channel_downloads_progress),
+            NotificationManager.IMPORTANCE_LOW
+        );
+        ch.setDescription(getString(R.string.notif_channel_downloads_progress_desc));
+        ch.setShowBadge(false);
+        nm.createNotificationChannel(ch);
+    }
+
+    private static int notifId(long id) {
+        return NOTIF_BASE + (int) (id & 0xFFFF);
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/disk/download/ImportURLActivity.java b/app/src/main/java/cn/classfun/droidvm/ui/disk/download/ImportURLActivity.java
index f313b1dca..b996c353d 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/disk/download/ImportURLActivity.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/disk/download/ImportURLActivity.java
@@ -5,6 +5,7 @@
 import static android.widget.Toast.LENGTH_SHORT;
 import static com.google.android.material.R.attr.colorOnSurfaceVariant;
 import static cn.classfun.droidvm.lib.utils.FileUtils.externalPath;
+import static cn.classfun.droidvm.lib.utils.NetUtils.USER_AGENT;
 import static cn.classfun.droidvm.lib.utils.NetUtils.extractFileName;
 import static cn.classfun.droidvm.lib.utils.StringUtils.pathJoin;
 import static cn.classfun.droidvm.lib.utils.StringUtils.resolveUriPath;
@@ -15,6 +16,8 @@
 import android.content.Intent;
 import android.net.Uri;
 import android.os.Bundle;
+import android.os.Handler;
+import android.os.Looper;
 import android.util.Log;
 import android.view.View;
 import android.widget.TextView;
@@ -23,6 +26,7 @@
 import androidx.activity.OnBackPressedCallback;
 import androidx.activity.result.ActivityResultLauncher;
 import androidx.activity.result.contract.ActivityResultContracts;
+import androidx.annotation.NonNull;
 import androidx.annotation.Nullable;
 import androidx.appcompat.app.AppCompatActivity;
 import androidx.core.widget.NestedScrollView;
@@ -31,7 +35,6 @@
 import com.google.android.material.appbar.MaterialToolbar;
 import com.google.android.material.button.MaterialButton;
 import com.google.android.material.card.MaterialCardView;
-import com.google.android.material.dialog.MaterialAlertDialogBuilder;
 import com.google.android.material.floatingactionbutton.ExtendedFloatingActionButton;
 import com.google.android.material.progressindicator.CircularProgressIndicator;
 
@@ -42,18 +45,18 @@
 import java.util.concurrent.Executors;
 
 import cn.classfun.droidvm.R;
+import cn.classfun.droidvm.lib.download.DiskDownloadManager;
+import cn.classfun.droidvm.lib.download.DiskDownloadService;
 import cn.classfun.droidvm.lib.ui.SimpleTextWatcher;
 import cn.classfun.droidvm.lib.utils.NetUtils.HttpException;
-import cn.classfun.droidvm.lib.store.disk.DiskConfig;
-import cn.classfun.droidvm.lib.store.disk.DiskStore;
 import cn.classfun.droidvm.ui.disk.create.DiskFormat;
 import cn.classfun.droidvm.ui.widgets.tools.DownloadWidget;
-import cn.classfun.droidvm.ui.widgets.tools.DownloadWidget.OnDownloadListener;
 import cn.classfun.droidvm.ui.widgets.tools.KernelAnalysisWidget;
 import cn.classfun.droidvm.ui.widgets.row.TextInputRowWidget;
 
-public final class ImportURLActivity extends AppCompatActivity implements OnDownloadListener {
+public final class ImportURLActivity extends AppCompatActivity {
     private static final String TAG = "ImportURL";
+    private static final long POLL_INTERVAL_MS = 500;
     private final ExecutorService executor = Executors.newSingleThreadExecutor();
     private TextInputRowWidget inputUrl, inputFilename, inputFolder;
     private TextView tvStatus;
@@ -72,6 +75,8 @@ public final class ImportURLActivity extends AppCompatActivity implements OnDown
     private boolean isDownloading = false;
     private String downloadName = null;
     private String downloadFolder = null;
+    private long currentDownloadId = -1;
+    private final Handler pollHandler = new Handler(Looper.getMainLooper());
     private ActivityResultLauncher<Uri> folderPickerLauncher;
 
     @Override
@@ -127,27 +132,78 @@ public void onTextChanged(CharSequence s, int st, int b, int c) {
         btnLoad.setOnClickListener(v -> doLoad());
         fabImport.setOnClickListener(v -> doImport());
         setStatusIdle();
+        // Restore the whole form if re-created mid-download; else just the progress bar.
+        if (!restoreSession()) reattachActiveDownload();
+    }
+
+    /** Snapshot of the form, kept across activity re-creation while a download runs. */
+    private static final class Session {
+        String url, filename, folder;
+        boolean infoLoaded;
+        String infoSize, infoType;
+    }
+
+    /** The in-progress import (only one download runs at a time), or {@code null}. */
+    private static Session session;
+
+    private void captureSession() {
+        var s = new Session();
+        s.url = inputUrl.getText();
+        s.filename = inputFilename.getText();
+        s.folder = inputFolder.getText();
+        s.infoLoaded = infoLoaded;
+        s.infoSize = tvInfoSize.getText().toString();
+        s.infoType = tvInfoType.getText().toString();
+        session = s;
+    }
+
+    private boolean restoreSession() {
+        var s = session;
+        if (s == null) return false;
+        inputUrl.setText(s.url);
+        inputFilename.setText(s.filename);
+        inputFolder.setText(s.folder);
+        if (s.infoLoaded) {
+            infoLoaded = true;
+            tvInfoSize.setText(s.infoSize);
+            tvInfoType.setText(s.infoType);
+            cardInfo.setVisibility(VISIBLE);
+        }
+        reattachActiveDownload();
+        return true;
+    }
+
+    /** Re-attaches just the progress bar to the running download (no form state). */
+    private void reattachActiveDownload() {
+        long id = DiskDownloadManager.activeDownloadId(getClass().getName());
+        if (id < 0) return;
+        currentDownloadId = id;
+        isDownloading = true;
+        setInputsEnabled(false);
+        fabImport.setVisibility(GONE);
+        downloadWidget.setVisibility(VISIBLE);
+        var name = DiskDownloadManager.downloadName(id);
+        downloadWidget.startExternal(name != null ? name : "", this::cancelDownload);
+        scrollView.post(() -> scrollView.fullScroll(View.FOCUS_DOWN));
+        pollHandler.post(pollRunnable);
     }
 
     @Override
     protected void onDestroy() {
         super.onDestroy();
-        if (downloadWidget != null)
-            downloadWidget.stopAndCleanup();
+        // Stop driving the widget; the download keeps running in the foreground
+        // service (notification shade) and registers the disk itself.
+        pollHandler.removeCallbacks(pollRunnable);
         executor.shutdownNow();
     }
 
     private void confirmExit() {
-        if (isDownloading && downloadWidget != null && downloadWidget.isRunning()) {
-            new MaterialAlertDialogBuilder(this)
-                .setTitle(R.string.download_exit_title)
-                .setMessage(R.string.download_exit_message)
-                .setNegativeButton(android.R.string.cancel, null)
-                .setPositiveButton(android.R.string.ok, (d, w) -> finish())
-                .show();
-        } else {
-            finish();
-        }
+        // Leave normally (so you can navigate to other screens while downloading).
+        // The download keeps running in the foreground service; the screen's state
+        // is preserved and restored when re-opened.
+        if (isDownloading && currentDownloadId >= 0)
+            Toast.makeText(this, R.string.download_background_toast, LENGTH_SHORT).show();
+        finish();
     }
 
     private void onFolderPickerResult(Uri uri) {
@@ -252,6 +308,10 @@ private void onHeadLoaded(long contentLength, String contentType, String fileNam
 
     private void doImport() {
         if (isDownloading) return;
+        if (DiskDownloadManager.hasActiveDownload()) {
+            Toast.makeText(this, R.string.download_one_at_a_time, LENGTH_SHORT).show();
+            return;
+        }
         var urlStr = inputUrl.getText();
         if (urlStr.isEmpty()) {
             inputUrl.setError(getString(R.string.import_url_error_url_empty));
@@ -285,59 +345,120 @@ private void doImport() {
         }
         downloadName = name;
         downloadFolder = folder;
-        startDownload(urlStr, destPath);
+        startDownload(urlStr);
     }
 
-    private void startDownload(String url, String destPath) {
+    private void startDownload(String url) {
         isDownloading = true;
+        captureSession();
         setInputsEnabled(false);
         fabImport.setVisibility(GONE);
         downloadWidget.setVisibility(VISIBLE);
         scrollView.post(() -> scrollView.fullScroll(View.FOCUS_DOWN));
-        downloadWidget.setOnDownloadListener(this);
-        downloadWidget.start(url, destPath);
+        downloadWidget.startExternal(downloadName, this::cancelDownload);
+        final var folder = downloadFolder;
+        final var name = downloadName;
+        // enqueue() resolves redirects (network I/O), so run it off the main thread.
+        runOnPool(() -> {
+            long id = DiskDownloadManager.enqueue(
+                this, url, USER_AGENT, folder, name, ImportURLActivity.class);
+            runOnUiThread(() -> onDownloadEnqueued(id));
+        });
     }
 
-    @Override
-    public void onFinished(DownloadWidget widget, File file) {
-        var config = new DiskConfig();
-        config.setName(downloadName);
-        config.item.set("folder", downloadFolder);
-        Runnable done = () -> {
-            var resultData = new Intent();
-            resultData.putExtra("result_disk_path", config.getFullPath());
-            setResult(RESULT_OK, resultData);
-            if (config.getFormat() == DiskFormat.QCOW2)
-                startOptimize(this, config.getId());
+    private void onDownloadEnqueued(long id) {
+        if (id < 0) {
+            if (isDownloading) onDownloadFailed(getString(R.string.download_error_start));
+            return;
+        }
+        if (!isDownloading) {
+            // Cancelled while still enqueueing.
+            DiskDownloadManager.cancel(id);
+            return;
+        }
+        currentDownloadId = id;
+        DiskDownloadService.start(this, id);
+        if (!isDestroyed()) pollHandler.post(pollRunnable);
+    }
+
+    /** Mirrors the download's live state into the on-screen widget. */
+    private final Runnable pollRunnable = new Runnable() {
+        @Override
+        public void run() {
+            if (currentDownloadId < 0) return;
+            var p = DiskDownloadManager.query(currentDownloadId);
+            if (p == null) {
+                cancelDownload(); // job gone (cancelled elsewhere)
+                return;
+            }
+            switch (p.state) {
+                case DiskDownloadManager.STATE_SUCCESS:
+                    onDownloadSucceeded();
+                    break;
+                case DiskDownloadManager.STATE_FAILED:
+                    onDownloadFailed(p.reason);
+                    break;
+                case DiskDownloadManager.STATE_CANCELLED:
+                    cancelDownload();
+                    break;
+                case DiskDownloadManager.STATE_PAUSED:
+                    downloadWidget.updateExternal(p.downloaded, p.total);
+                    downloadWidget.markExternalPaused(
+                        p.reason != null ? p.reason : getString(R.string.download_paused));
+                    pollHandler.postDelayed(this, POLL_INTERVAL_MS);
+                    break;
+                default: // CONNECTING, RUNNING
+                    downloadWidget.updateExternal(p.downloaded, p.total);
+                    pollHandler.postDelayed(this, POLL_INTERVAL_MS);
+                    break;
+            }
+        }
+    };
+
+    private void onDownloadSucceeded() {
+        long id = currentDownloadId;
+        currentDownloadId = -1;
+        pollHandler.removeCallbacks(pollRunnable);
+        downloadWidget.markExternalFinished();
+        var result = DiskDownloadManager.getResult(id);
+        if (result == null) {
             finish();
-        };
-        runOnPool(() -> {
-            var store = new DiskStore();
-            store.load(this);
-            store.add(config);
-            store.save(this);
-            runOnUiThread(done);
-        });
+            return;
+        }
         Toast.makeText(
             this,
-            getString(R.string.import_url_success, downloadName),
+            getString(R.string.import_url_success, result.name),
             LENGTH_SHORT
         ).show();
+        var resultData = new Intent();
+        resultData.putExtra("result_disk_path", pathJoin(result.folder, result.name));
+        setResult(RESULT_OK, resultData);
+        if (result.diskId != null && DiskFormat.fromFilename(result.name) == DiskFormat.QCOW2)
+            startOptimize(this, result.diskId);
+        finish();
     }
 
-    @Override
-    public void onFailed(DownloadWidget widget, String error) {
+    private void cancelDownload() {
+        long id = currentDownloadId;
+        currentDownloadId = -1;
+        pollHandler.removeCallbacks(pollRunnable);
+        if (id >= 0) DiskDownloadManager.cancel(id);
+        downloadWidget.markExternalCancelled();
         isDownloading = false;
         setInputsEnabled(true);
         fabImport.setVisibility(VISIBLE);
+        downloadWidget.setVisibility(GONE);
     }
 
-    @Override
-    public void onCancelled(DownloadWidget widget) {
+    private void onDownloadFailed(@Nullable String reason) {
+        long id = currentDownloadId;
+        currentDownloadId = -1;
+        pollHandler.removeCallbacks(pollRunnable);
+        if (id >= 0) DiskDownloadManager.cancel(id);
+        downloadWidget.markExternalFailed(reason);
         isDownloading = false;
         setInputsEnabled(true);
         fabImport.setVisibility(VISIBLE);
-        downloadWidget.setVisibility(GONE);
     }
 
     private void setInputsEnabled(boolean enabled) {
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/disk/images/ImportImagesActivity.java b/app/src/main/java/cn/classfun/droidvm/ui/disk/images/ImportImagesActivity.java
index cfd3bd018..c988ee9e8 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/disk/images/ImportImagesActivity.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/disk/images/ImportImagesActivity.java
@@ -14,6 +14,8 @@
 import android.content.Intent;
 import android.net.Uri;
 import android.os.Bundle;
+import android.os.Handler;
+import android.os.Looper;
 import android.view.View;
 import android.widget.TextView;
 import android.widget.Toast;
@@ -29,7 +31,6 @@
 import com.google.android.material.appbar.CollapsingToolbarLayout;
 import com.google.android.material.appbar.MaterialToolbar;
 import com.google.android.material.card.MaterialCardView;
-import com.google.android.material.dialog.MaterialAlertDialogBuilder;
 import com.google.android.material.floatingactionbutton.ExtendedFloatingActionButton;
 
 import java.io.File;
@@ -37,16 +38,16 @@
 
 import cn.classfun.droidvm.R;
 import cn.classfun.droidvm.lib.data.Repos;
-import cn.classfun.droidvm.lib.store.disk.DiskConfig;
-import cn.classfun.droidvm.lib.store.disk.DiskStore;
+import cn.classfun.droidvm.lib.download.DiskDownloadManager;
+import cn.classfun.droidvm.lib.download.DiskDownloadService;
 import cn.classfun.droidvm.lib.ui.IconItemAdapter;
 import cn.classfun.droidvm.ui.disk.create.DiskFormat;
 import cn.classfun.droidvm.ui.widgets.row.DropdownRowWidget;
 import cn.classfun.droidvm.ui.widgets.row.TextInputRowWidget;
 import cn.classfun.droidvm.ui.widgets.tools.DownloadWidget;
-import cn.classfun.droidvm.ui.widgets.tools.DownloadWidget.OnDownloadListener;
 
-public final class ImportImagesActivity extends AppCompatActivity implements OnDownloadListener {
+public final class ImportImagesActivity extends AppCompatActivity {
+    private static final long POLL_INTERVAL_MS = 500;
     private Repos repos;
     private CollapsingToolbarLayout collapsingToolbar;
     private MaterialToolbar toolbar;
@@ -68,6 +69,8 @@ public final class ImportImagesActivity extends AppCompatActivity implements OnD
     private boolean isDownloading = false;
     private String downloadName = null;
     private String downloadFolder = null;
+    private long currentDownloadId = -1;
+    private final Handler pollHandler = new Handler(Looper.getMainLooper());
     private FlatImage selectedImage;
     private ActivityResultLauncher<Uri> folderPickerLauncher;
 
@@ -111,13 +114,60 @@ public void handleOnBackPressed() {
         cardPlaceholder.setOnClickListener(v -> showImagePicker());
         cardSelected.setOnClickListener(v -> showImagePicker());
         hideSelection();
+        // Restore the whole form if re-created mid-download; else just the progress bar.
+        if (!restoreSession()) reattachActiveDownload();
+    }
+
+    /** Snapshot of the form, kept across activity re-creation while a download runs. */
+    private static final class Session {
+        FlatImage image;
+        String mirror, filename, folder;
+    }
+
+    /** The in-progress import (only one download runs at a time), or {@code null}. */
+    private static Session session;
+
+    private void captureSession() {
+        var s = new Session();
+        s.image = selectedImage;
+        s.mirror = dropdownMirror.getText();
+        s.filename = inputFilename.getText();
+        s.folder = inputFolder.getText();
+        session = s;
+    }
+
+    private boolean restoreSession() {
+        var s = session;
+        if (s == null || s.image == null) return false;
+        onImageSelected(s.image);
+        dropdownMirror.setText(s.mirror);
+        updateInfoCard();
+        inputFilename.setText(s.filename);
+        inputFolder.setText(s.folder);
+        reattachActiveDownload();
+        return true;
+    }
+
+    /** Re-attaches just the progress bar to the running download (no form state). */
+    private void reattachActiveDownload() {
+        long id = DiskDownloadManager.activeDownloadId(getClass().getName());
+        if (id < 0) return;
+        currentDownloadId = id;
+        isDownloading = true;
+        setInputsEnabled(false);
+        fabDownload.setVisibility(GONE);
+        downloadWidget.setVisibility(VISIBLE);
+        var name = DiskDownloadManager.downloadName(id);
+        downloadWidget.startExternal(name != null ? name : "", this::cancelDownload);
+        scrollView.post(() -> scrollView.fullScroll(View.FOCUS_DOWN));
+        pollHandler.post(pollRunnable);
     }
 
     @Override
     protected void onDestroy() {
         super.onDestroy();
-        if (downloadWidget != null)
-            downloadWidget.stopAndCleanup();
+        // The download keeps running in the foreground service; just stop polling.
+        pollHandler.removeCallbacks(pollRunnable);
     }
 
     private void onChooseFolder() {
@@ -131,16 +181,12 @@ private void onFolderPickerResult(Uri uri) {
     }
 
     private void confirmExit() {
-        if (isDownloading && downloadWidget != null && downloadWidget.isRunning()) {
-            new MaterialAlertDialogBuilder(this)
-                .setTitle(R.string.download_exit_title)
-                .setMessage(R.string.download_exit_message)
-                .setNegativeButton(android.R.string.cancel, null)
-                .setPositiveButton(android.R.string.ok, (d, w) -> finish())
-                .show();
-        } else {
-            finish();
-        }
+        // Leave normally (so you can navigate to other screens while downloading).
+        // The download keeps running in the foreground service; the screen's state
+        // is preserved and restored when re-opened.
+        if (isDownloading && currentDownloadId >= 0)
+            Toast.makeText(this, R.string.download_background_toast, LENGTH_SHORT).show();
+        finish();
     }
 
     private void showImagePicker() {
@@ -230,6 +276,10 @@ private String getSelectedMirrorKey() {
 
     private void doDownload() {
         if (isDownloading) return;
+        if (DiskDownloadManager.hasActiveDownload()) {
+            Toast.makeText(this, R.string.download_one_at_a_time, LENGTH_SHORT).show();
+            return;
+        }
         if (selectedImage == null) {
             Toast.makeText(this, R.string.images_error_no_image, LENGTH_SHORT).show();
             return;
@@ -254,55 +304,116 @@ private void doDownload() {
         downloadName = name;
         downloadFolder = folder;
         var url = resolveDownloadUrl();
-        startDownload(url, destPath);
+        startDownload(url);
     }
 
-    private void startDownload(String url, String destPath) {
+    private void startDownload(String url) {
         isDownloading = true;
+        captureSession();
         setInputsEnabled(false);
         fabDownload.setVisibility(GONE);
         downloadWidget.setVisibility(VISIBLE);
         scrollView.post(() -> scrollView.fullScroll(View.FOCUS_DOWN));
-        downloadWidget.setOnDownloadListener(this);
-        downloadWidget.setUserAgent(DL_USER_AGENT);
-        downloadWidget.start(url, destPath);
+        downloadWidget.startExternal(downloadName, this::cancelDownload);
+        final var folder = downloadFolder;
+        final var name = downloadName;
+        // enqueue() resolves redirects (network I/O), so run it off the main thread.
+        runOnPool(() -> {
+            long id = DiskDownloadManager.enqueue(
+                this, url, DL_USER_AGENT, folder, name, ImportImagesActivity.class);
+            runOnUiThread(() -> onDownloadEnqueued(id));
+        });
     }
 
-    @Override
-    public void onFinished(DownloadWidget widget, File file) {
-        var config = new DiskConfig();
-        config.setName(downloadName);
-        config.item.set("folder", downloadFolder);
-        Runnable done = () -> {
-            var resultData = new Intent();
-            resultData.putExtra("result_disk_path", config.getFullPath());
-            setResult(RESULT_OK, resultData);
-            if (config.getFormat() == DiskFormat.QCOW2)
-                startOptimize(this, config.getId());
+    private void onDownloadEnqueued(long id) {
+        if (id < 0) {
+            if (isDownloading) onDownloadFailed(getString(R.string.download_error_start));
+            return;
+        }
+        if (!isDownloading) {
+            // Cancelled while still enqueueing.
+            DiskDownloadManager.cancel(id);
+            return;
+        }
+        currentDownloadId = id;
+        DiskDownloadService.start(this, id);
+        if (!isDestroyed()) pollHandler.post(pollRunnable);
+    }
+
+    /** Mirrors the download's live state into the on-screen widget. */
+    private final Runnable pollRunnable = new Runnable() {
+        @Override
+        public void run() {
+            if (currentDownloadId < 0) return;
+            var p = DiskDownloadManager.query(currentDownloadId);
+            if (p == null) {
+                cancelDownload(); // job gone (cancelled elsewhere)
+                return;
+            }
+            switch (p.state) {
+                case DiskDownloadManager.STATE_SUCCESS:
+                    onDownloadSucceeded();
+                    break;
+                case DiskDownloadManager.STATE_FAILED:
+                    onDownloadFailed(p.reason);
+                    break;
+                case DiskDownloadManager.STATE_CANCELLED:
+                    cancelDownload();
+                    break;
+                case DiskDownloadManager.STATE_PAUSED:
+                    downloadWidget.updateExternal(p.downloaded, p.total);
+                    downloadWidget.markExternalPaused(
+                        p.reason != null ? p.reason : getString(R.string.download_paused));
+                    pollHandler.postDelayed(this, POLL_INTERVAL_MS);
+                    break;
+                default: // CONNECTING, RUNNING
+                    downloadWidget.updateExternal(p.downloaded, p.total);
+                    pollHandler.postDelayed(this, POLL_INTERVAL_MS);
+                    break;
+            }
+        }
+    };
+
+    private void onDownloadSucceeded() {
+        long id = currentDownloadId;
+        currentDownloadId = -1;
+        pollHandler.removeCallbacks(pollRunnable);
+        downloadWidget.markExternalFinished();
+        var result = DiskDownloadManager.getResult(id);
+        if (result == null) {
             finish();
-        };
-        runOnPool(() -> {
-            var store = new DiskStore();
-            store.load(this);
-            store.add(config);
-            store.save(this);
-            runOnUiThread(done);
-        });
+            return;
+        }
         Toast.makeText(this,
-            getString(R.string.images_success, downloadName),
+            getString(R.string.images_success, result.name),
             LENGTH_SHORT
         ).show();
+        var resultData = new Intent();
+        resultData.putExtra("result_disk_path", pathJoin(result.folder, result.name));
+        setResult(RESULT_OK, resultData);
+        if (result.diskId != null && DiskFormat.fromFilename(result.name) == DiskFormat.QCOW2)
+            startOptimize(this, result.diskId);
+        finish();
     }
 
-    @Override
-    public void onFailed(DownloadWidget widget, String error) {
+    private void cancelDownload() {
+        long id = currentDownloadId;
+        currentDownloadId = -1;
+        pollHandler.removeCallbacks(pollRunnable);
+        if (id >= 0) DiskDownloadManager.cancel(id);
+        downloadWidget.markExternalCancelled();
         isDownloading = false;
         setInputsEnabled(true);
         fabDownload.setVisibility(VISIBLE);
+        downloadWidget.setVisibility(GONE);
     }
 
-    @Override
-    public void onCancelled(DownloadWidget widget) {
+    private void onDownloadFailed(@Nullable String reason) {
+        long id = currentDownloadId;
+        currentDownloadId = -1;
+        pollHandler.removeCallbacks(pollRunnable);
+        if (id >= 0) DiskDownloadManager.cancel(id);
+        downloadWidget.markExternalFailed(reason);
         isDownloading = false;
         setInputsEnabled(true);
         fabDownload.setVisibility(VISIBLE);
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/disk/lxc/ImportLxcImagesActivity.java b/app/src/main/java/cn/classfun/droidvm/ui/disk/lxc/ImportLxcImagesActivity.java
index b6cec1d6c..5779c7a09 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/disk/lxc/ImportLxcImagesActivity.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/disk/lxc/ImportLxcImagesActivity.java
@@ -20,6 +20,8 @@
 import android.content.Intent;
 import android.net.Uri;
 import android.os.Bundle;
+import android.os.Handler;
+import android.os.Looper;
 import android.util.Log;
 import android.view.View;
 import android.widget.TextView;
@@ -37,7 +39,6 @@
 import com.google.android.material.appbar.MaterialToolbar;
 import com.google.android.material.button.MaterialButton;
 import com.google.android.material.card.MaterialCardView;
-import com.google.android.material.dialog.MaterialAlertDialogBuilder;
 import com.google.android.material.floatingactionbutton.ExtendedFloatingActionButton;
 import com.google.android.material.progressindicator.CircularProgressIndicator;
 
@@ -54,19 +55,19 @@
 import cn.classfun.droidvm.lib.api.ApiManager;
 import cn.classfun.droidvm.lib.api.Privacy;
 import cn.classfun.droidvm.lib.data.Repos;
-import cn.classfun.droidvm.lib.store.disk.DiskConfig;
-import cn.classfun.droidvm.lib.store.disk.DiskStore;
+import cn.classfun.droidvm.lib.download.DiskDownloadManager;
+import cn.classfun.droidvm.lib.download.DiskDownloadService;
 import cn.classfun.droidvm.lib.ui.IconItemAdapter;
 import cn.classfun.droidvm.ui.disk.create.DiskFormat;
 import cn.classfun.droidvm.ui.widgets.row.DropdownRowWidget;
 import cn.classfun.droidvm.ui.widgets.row.TextInputRowWidget;
 import cn.classfun.droidvm.ui.widgets.tools.DownloadWidget;
-import cn.classfun.droidvm.ui.widgets.tools.DownloadWidget.OnDownloadListener;
 import cn.classfun.droidvm.ui.widgets.tools.KernelAnalysisWidget;
 
-public final class ImportLxcImagesActivity extends AppCompatActivity implements OnDownloadListener {
+public final class ImportLxcImagesActivity extends AppCompatActivity {
     private static final String TAG = "ImportLxcImages";
     private static final String IMAGES_META_PATH = "/streams/v1/images.json";
+    private static final long POLL_INTERVAL_MS = 500;
     private final Map<String, String> displayVersionToRelease = new LinkedHashMap<>();
     private Repos.Repo lxcRepo;
     private String[] metaSourceKeys;
@@ -101,6 +102,8 @@ public final class ImportLxcImagesActivity extends AppCompatActivity implements
     private String downloadFolder = null;
     private ApiManager apiManager = null;
     private ActivityResultLauncher<Uri> folderPickerLauncher;
+    private long currentDownloadId = -1;
+    private final Handler pollHandler = new Handler(Looper.getMainLooper());
 
     @Override
     protected void onCreate(@Nullable Bundle savedInstanceState) {
@@ -155,6 +158,83 @@ public void handleOnBackPressed() {
         fabImport.setOnClickListener(v -> doImport());
         setMetaIdle();
         runOnPool(this::asyncLoad);
+        if (!restoreSession()) reattachActiveDownload();
+    }
+
+    /** Snapshot of the form, kept across activity re-creation while a download runs. */
+    private static final class Session {
+        String metaSource, customMetaUrl, dlSource, customDlUrl;
+        List<LxcImage> allImages;
+        String distro, version, variant, build;
+        String filename, folder;
+    }
+
+    /** The in-progress import (only one download runs at a time), or {@code null}. */
+    private static Session session;
+
+    private void captureSession() {
+        var s = new Session();
+        s.metaSource = dropdownMetaSource.getText();
+        s.customMetaUrl = inputCustomMetaUrl.getText();
+        s.dlSource = dropdownDlSource.getText();
+        s.customDlUrl = inputCustomDlUrl.getText();
+        s.allImages = new ArrayList<>(allImages);
+        s.distro = dropdownDistro.getText();
+        s.version = dropdownVersion.getText();
+        s.variant = dropdownVariant.getText();
+        s.build = dropdownBuild.getText();
+        s.filename = inputFilename.getText();
+        s.folder = inputFolder.getText();
+        session = s;
+    }
+
+    /**
+     * Rebuilds the form from the last saved session (replays the
+     * distro→version→variant→build cascade) and re-attaches the progress bar if a
+     * download is still running. The session is kept after the download ends too,
+     * so reopening restores the last selections (hit Load to refresh). Returns
+     * false if there's nothing to restore.
+     */
+    private boolean restoreSession() {
+        var s = session;
+        if (s == null) return false;
+        if (lxcRepo == null) return false; // sources unavailable; can't rebuild
+        dropdownMetaSource.setText(s.metaSource);
+        inputCustomMetaUrl.setText(s.customMetaUrl);
+        inputCustomMetaUrl.setVisibility(
+            getSelectedMetaSourceKey().equals("custom") ? VISIBLE : GONE);
+        dropdownDlSource.setText(s.dlSource);
+        inputCustomDlUrl.setText(s.customDlUrl);
+        inputCustomDlUrl.setVisibility(
+            getSelectedDlSourceKey().equals("custom") ? VISIBLE : GONE);
+        onImagesLoaded(s.allImages, s.allImages.size());
+        dropdownDistro.setText(s.distro);
+        onDistroSelected(s.distro);
+        dropdownVersion.setText(s.version);
+        onVersionSelected(s.version);
+        dropdownVariant.setText(s.variant);
+        onVariantSelected(s.variant);
+        dropdownBuild.setText(s.build);
+        onBuildSelected(s.build);
+        inputFilename.setText(s.filename);
+        inputFolder.setText(s.folder);
+        reattachActiveDownload();
+        return true;
+    }
+
+    /** Re-attaches just the progress bar to the running download (no form state). */
+    private void reattachActiveDownload() {
+        long id = DiskDownloadManager.activeDownloadId(getClass().getName());
+        if (id < 0) return;
+        currentDownloadId = id;
+        isDownloading = true;
+        setInputsEnabled(false);
+        fabImport.setVisibility(GONE);
+        downloadWidget.setVisibility(VISIBLE);
+        var name = DiskDownloadManager.downloadName(id);
+        downloadWidget.startExternal(name != null ? name : "", this::cancelDownload);
+        scrollView.post(() -> scrollView.fullScroll(View.FOCUS_DOWN));
+        pollHandler.post(pollRunnable);
     }
 
     private void asyncLoad() {
@@ -179,21 +259,18 @@ private void afterApiDone() {
     @Override
     protected void onDestroy() {
         super.onDestroy();
-        if (downloadWidget != null)
-            downloadWidget.stopAndCleanup();
+        // Stop driving the on-screen widget; the download keeps running in the
+        // foreground service (notification shade) and registers the disk itself.
+        pollHandler.removeCallbacks(pollRunnable);
     }
 
     private void confirmExit() {
-        if (isDownloading && downloadWidget != null && downloadWidget.isRunning()) {
-            new MaterialAlertDialogBuilder(this)
-                .setTitle(R.string.download_exit_title)
-                .setMessage(R.string.download_exit_message)
-                .setNegativeButton(android.R.string.cancel, null)
-                .setPositiveButton(android.R.string.ok, (d, w) -> finish())
-                .show();
-        } else {
-            finish();
-        }
+        // Leave normally (so you can navigate to other screens while downloading).
+        // The download keeps running in the foreground service; its state is
+        // restored when this screen is re-opened.
+        if (isDownloading && currentDownloadId >= 0)
+            Toast.makeText(this, R.string.download_background_toast, LENGTH_SHORT).show();
+        finish();
     }
 
     private void onFolderPickerResult(Uri uri) {
@@ -486,6 +563,10 @@ private void hideOutput() {
 
     private void doImport() {
         if (isDownloading) return;
+        if (DiskDownloadManager.hasActiveDownload()) {
+            Toast.makeText(this, R.string.download_one_at_a_time, LENGTH_SHORT).show();
+            return;
+        }
         if (selectedImage == null) {
             Toast.makeText(
                 this, R.string.lxc_error_no_image,
@@ -520,58 +601,118 @@ private void doImport() {
         }
         downloadName = name;
         downloadFolder = folder;
-        startDownload(downloadUrl, destPath);
+        startDownload(downloadUrl);
     }
 
-    private void startDownload(String url, String destPath) {
+    private void startDownload(String url) {
         isDownloading = true;
+        captureSession();
         setInputsEnabled(false);
         fabImport.setVisibility(GONE);
-        downloadWidget.setUserAgent(LXC_USER_AGENT);
         downloadWidget.setVisibility(VISIBLE);
         scrollView.post(() -> scrollView.fullScroll(View.FOCUS_DOWN));
-        downloadWidget.setOnDownloadListener(this);
-        downloadWidget.start(url, destPath);
+        downloadWidget.startExternal(downloadName, this::cancelDownload);
+        final var folder = downloadFolder;
+        final var name = downloadName;
+        // enqueue() resolves redirects (network I/O), so run it off the main thread.
+        runOnPool(() -> {
+            long id = DiskDownloadManager.enqueue(
+                this, url, LXC_USER_AGENT, folder, name, ImportLxcImagesActivity.class);
+            runOnUiThread(() -> onDownloadEnqueued(id));
+        });
     }
 
-    @Override
-    public void onFinished(DownloadWidget widget, File file) {
-        var config = new DiskConfig();
-        config.setName(downloadName);
-        config.item.set("folder", downloadFolder);
-        Runnable done = () -> {
-            var resultData = new Intent();
-            resultData.putExtra("result_disk_path", config.getFullPath());
-            setResult(RESULT_OK, resultData);
-            if (config.getFormat() == DiskFormat.QCOW2)
-                startOptimize(this, config.getId());
+    private void onDownloadEnqueued(long id) {
+        if (id < 0) {
+            if (isDownloading) onDownloadFailed(getString(R.string.download_error_start));
+            return;
+        }
+        if (!isDownloading) {
+            // Cancelled while still enqueueing.
+            DiskDownloadManager.cancel(id);
+            return;
+        }
+        currentDownloadId = id;
+        DiskDownloadService.start(this, id);
+        if (!isDestroyed()) pollHandler.post(pollRunnable);
+    }
+
+    /** Mirrors the download's live state into the on-screen widget. */
+    private final Runnable pollRunnable = new Runnable() {
+        @Override
+        public void run() {
+            if (currentDownloadId < 0) return;
+            var p = DiskDownloadManager.query(currentDownloadId);
+            if (p == null) {
+                cancelDownload(); // job gone (cancelled elsewhere)
+                return;
+            }
+            switch (p.state) {
+                case DiskDownloadManager.STATE_SUCCESS:
+                    onDownloadSucceeded();
+                    break;
+                case DiskDownloadManager.STATE_FAILED:
+                    onDownloadFailed(p.reason);
+                    break;
+                case DiskDownloadManager.STATE_CANCELLED:
+                    cancelDownload();
+                    break;
+                case DiskDownloadManager.STATE_PAUSED:
+                    downloadWidget.updateExternal(p.downloaded, p.total);
+                    downloadWidget.markExternalPaused(
+                        p.reason != null ? p.reason : getString(R.string.download_paused));
+                    pollHandler.postDelayed(this, POLL_INTERVAL_MS);
+                    break;
+                default: // CONNECTING, RUNNING
+                    downloadWidget.updateExternal(p.downloaded, p.total);
+                    pollHandler.postDelayed(this, POLL_INTERVAL_MS);
+                    break;
+            }
+        }
+    };
+
+    private void onDownloadSucceeded() {
+        long id = currentDownloadId;
+        currentDownloadId = -1;
+        pollHandler.removeCallbacks(pollRunnable);
+        downloadWidget.markExternalFinished();
+        var result = DiskDownloadManager.getResult(id);
+        if (result == null) {
             finish();
-        };
-        runOnPool(() -> {
-            var store = new DiskStore();
-            store.load(this);
-            store.add(config);
-            store.save(this);
-            runOnUiThread(done);
-        });
+            return;
+        }
         Toast.makeText(
             this,
-            getString(R.string.lxc_import_success, downloadName),
+            getString(R.string.lxc_import_success, result.name),
             LENGTH_SHORT
         ).show();
+        var resultData = new Intent();
+        resultData.putExtra("result_disk_path", pathJoin(result.folder, result.name));
+        setResult(RESULT_OK, resultData);
+        if (result.diskId != null && DiskFormat.fromFilename(result.name) == DiskFormat.QCOW2)
+            startOptimize(this, result.diskId);
+        finish();
     }
 
-    @Override
-    public void onFailed(DownloadWidget widget, String error) {
-        isDownloading = false;
-        setInputsEnabled(true);
-        progressMeta.setVisibility(GONE);
-        btnLoad.setEnabled(true);
-        fabImport.setVisibility(VISIBLE);
+    private void cancelDownload() {
+        long id = currentDownloadId;
+        currentDownloadId = -1;
+        pollHandler.removeCallbacks(pollRunnable);
+        if (id >= 0) DiskDownloadManager.cancel(id);
+        downloadWidget.markExternalCancelled();
+        resetAfterDownloadStop();
     }
 
-    @Override
-    public void onCancelled(DownloadWidget widget) {
+    private void onDownloadFailed(@Nullable String reason) {
+        long id = currentDownloadId;
+        currentDownloadId = -1;
+        pollHandler.removeCallbacks(pollRunnable);
+        if (id >= 0) DiskDownloadManager.cancel(id);
+        downloadWidget.markExternalFailed(reason);
+        resetAfterDownloadStop();
+    }
+
+    private void resetAfterDownloadStop() {
         isDownloading = false;
         setInputsEnabled(true);
         progressMeta.setVisibility(GONE);
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/widgets/tools/DownloadWidget.java b/app/src/main/java/cn/classfun/droidvm/ui/widgets/tools/DownloadWidget.java
index 9d9a6ec08..e17d7cec4 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/widgets/tools/DownloadWidget.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/widgets/tools/DownloadWidget.java
@@ -1,16 +1,10 @@
 package cn.classfun.droidvm.ui.widgets.tools;
 
-import static cn.classfun.droidvm.lib.utils.NetUtils.USER_AGENT;
-import static cn.classfun.droidvm.lib.utils.StringUtils.basename;
-import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
 import static cn.classfun.droidvm.lib.utils.StringUtils.formatDuration;
 import static cn.classfun.droidvm.lib.size.SizeUtils.formatSize;
 
 import android.content.Context;
-import android.os.Handler;
-import android.os.Looper;
 import android.util.AttributeSet;
-import android.util.Log;
 import android.view.LayoutInflater;
 import android.widget.FrameLayout;
 import android.widget.TextView;
@@ -22,34 +16,23 @@
 import com.google.android.material.dialog.MaterialAlertDialogBuilder;
 import com.google.android.material.progressindicator.LinearProgressIndicator;
 
-import java.io.Closeable;
-import java.io.File;
-import java.io.FileOutputStream;
-import java.io.InputStream;
-import java.net.HttpURLConnection;
-import java.net.URL;
-import java.util.concurrent.ExecutorService;
-import java.util.concurrent.Executors;
-import java.util.concurrent.atomic.AtomicBoolean;
-
 import cn.classfun.droidvm.R;
-import cn.classfun.droidvm.lib.utils.NetUtils.HttpException;
 
+/**
+ * A progress view for a download owned elsewhere (e.g. {@link android.app.DownloadManager}).
+ * It renders only — it never runs a download itself. Drive it from the main thread:
+ * call {@link #startExternal} once, then feed it {@link #updateExternal} and the
+ * {@code markExternal*} state transitions as the download progresses. The cancel
+ * button invokes the handler passed to {@link #startExternal}.
+ */
 public final class DownloadWidget extends FrameLayout {
-    private static final String TAG = "DownloadWidget";
     private static final int UI_UPDATE_INTERVAL_MS = 300;
     private final Context context;
     private TextView tvFilename, tvPercent, tvSpeed, tvSize, tvEta;
     private LinearProgressIndicator progressBar;
     private MaterialButton btnCancel;
-    private final Handler handler = new Handler(Looper.getMainLooper());
-    private final ExecutorService executor = Executors.newSingleThreadExecutor();
-    private final AtomicBoolean cancelled = new AtomicBoolean(false);
-    private String url;
-    private String destPath;
     private String fileName;
-    private String userAgent = USER_AGENT;
-    private volatile int state = STATE_IDLE;
+    private int state = STATE_IDLE;
     public static final int STATE_IDLE = 0;
     public static final int STATE_CONNECTING = 1;
     public static final int STATE_DOWNLOADING = 2;
@@ -61,25 +44,7 @@ public final class DownloadWidget extends FrameLayout {
     private long speedBytesPerSec = 0;
     private long lastUpdateTime = 0;
     private long lastUpdateBytes = 0;
-    private OnDownloadListener listener;
-
-    @SuppressWarnings({"EmptyMethod", "unused"})
-    public interface OnDownloadListener {
-        default void onStateChanged(DownloadWidget widget, int state) {
-        }
-
-        default void onProgress(DownloadWidget widget, long downloaded, long total) {
-        }
-
-        default void onFinished(DownloadWidget widget, File file) {
-        }
-
-        default void onFailed(DownloadWidget widget, String error) {
-        }
-
-        default void onCancelled(DownloadWidget widget) {
-        }
-    }
+    private Runnable cancelHandler;
 
     public DownloadWidget(@NonNull Context context) {
         super(context);
@@ -113,16 +78,13 @@ private void init() {
         setIdle();
     }
 
-    public void setOnDownloadListener(OnDownloadListener listener) {
-        this.listener = listener;
-    }
-
-    public void start(@NonNull String url, @NonNull String destPath) {
-        if (state == STATE_CONNECTING || state == STATE_DOWNLOADING) return;
-        this.url = url;
-        this.destPath = destPath;
-        this.fileName = basename(destPath);
-        this.cancelled.set(false);
+    /**
+     * Begins showing progress for a download owned elsewhere. The cancel button
+     * invokes {@code onCancel}.
+     */
+    public void startExternal(@NonNull String fileName, @NonNull Runnable onCancel) {
+        this.cancelHandler = onCancel;
+        this.fileName = fileName;
         this.downloadedBytes = 0;
         this.totalBytes = -1;
         this.speedBytesPerSec = 0;
@@ -130,29 +92,47 @@ public void start(@NonNull String url, @NonNull String destPath) {
         this.lastUpdateBytes = 0;
         tvFilename.setText(fileName);
         setState(STATE_CONNECTING);
-        executor.submit(this::doDownload);
     }
 
-    public void setUserAgent(String userAgent) {
-        this.userAgent = userAgent;
+    /** Feeds the latest byte counts from the external download into the UI. */
+    public void updateExternal(long downloaded, long total) {
+        if (state == STATE_FINISHED || state == STATE_FAILED || state == STATE_CANCELLED) return;
+        if (state != STATE_DOWNLOADING) setState(STATE_DOWNLOADING);
+        totalBytes = total;
+        long now = System.currentTimeMillis();
+        if (lastUpdateTime == 0) {
+            lastUpdateTime = now;
+            lastUpdateBytes = downloaded;
+        }
+        long elapsed = now - lastUpdateTime;
+        if (elapsed >= UI_UPDATE_INTERVAL_MS) {
+            long deltaBytes = downloaded - lastUpdateBytes;
+            speedBytesPerSec = elapsed > 0 ? (deltaBytes * 1000 / elapsed) : 0;
+            lastUpdateTime = now;
+            lastUpdateBytes = downloaded;
+        }
+        downloadedBytes = downloaded;
+        updateUI(downloaded, total, speedBytesPerSec);
+    }
+
+    /** Renders the download as paused, showing why (waiting for network, retrying, …). */
+    public void markExternalPaused(@NonNull String reasonText) {
+        if (state == STATE_FINISHED) return;
+        progressBar.setIndeterminate(false);
+        tvSpeed.setText("");
+        tvEta.setText(reasonText);
     }
 
-    public boolean isRunning() {
-        return state == STATE_CONNECTING || state == STATE_DOWNLOADING;
+    public void markExternalFinished() {
+        setState(STATE_FINISHED);
     }
 
-    public void stopAndCleanup() {
-        if (!isRunning()) return;
-        cancelled.set(true);
+    public void markExternalFailed(@Nullable String msg) {
+        setFailed(msg != null ? msg : "Unknown error");
     }
 
-    @Override
-    protected void onDetachedFromWindow() {
-        super.onDetachedFromWindow();
-        if (isRunning()) {
-            cancelled.set(true);
-        }
-        executor.shutdownNow();
+    public void markExternalCancelled() {
+        setState(STATE_CANCELLED);
     }
 
     private void showCancelConfirmation() {
@@ -162,99 +142,12 @@ private void showCancelConfirmation() {
             .setTitle(R.string.download_cancel_title)
             .setMessage(ctx.getString(R.string.download_cancel_message, fileName))
             .setNegativeButton(android.R.string.cancel, null)
-            .setPositiveButton(android.R.string.ok, (d, w) -> doCancel())
+            .setPositiveButton(android.R.string.ok, (d, w) -> {
+                if (cancelHandler != null) cancelHandler.run();
+            })
             .show();
     }
 
-    private void doCancel() {
-        cancelled.set(true);
-    }
-
-    private void doDownload() {
-        InputStream in = null;
-        FileOutputStream out = null;
-        HttpURLConnection conn = null;
-        var destFile = new File(destPath);
-        try {
-            var parent = destFile.getParentFile();
-            if (parent != null && !parent.exists() && !parent.mkdirs())
-                Log.w(TAG, fmt("Failed to create parent directories: %s", parent.getAbsolutePath()));
-            Log.i(TAG, fmt("Starting download: %s", url));
-            conn = (HttpURLConnection) new URL(url).openConnection();
-            conn.setConnectTimeout(30000);
-            conn.setReadTimeout(30000);
-            conn.setInstanceFollowRedirects(true);
-            conn.setRequestProperty("User-Agent", userAgent);
-            int code = conn.getResponseCode();
-            if (code < 200 || code >= 400)
-                throw new HttpException(code);
-            totalBytes = conn.getContentLengthLong();
-            handler.post(() -> setState(STATE_DOWNLOADING));
-            var contType = conn.getContentType();
-            if (contType != null && contType.contains("text/html"))
-                throw new RuntimeException("Download URL points to an HTML page, not a file");
-            in = conn.getInputStream();
-            out = new FileOutputStream(destFile);
-            var buffer = new byte[65536];
-            int bytesRead;
-            lastUpdateTime = System.currentTimeMillis();
-            lastUpdateBytes = 0;
-            while ((bytesRead = in.read(buffer)) != -1) {
-                if (cancelled.get()) {
-                    handler.post(() -> {
-                        setState(STATE_CANCELLED);
-                        if (listener != null) listener.onCancelled(this);
-                    });
-                    closeQuietly(out);
-                    out = null;
-                    if (destFile.exists() && !destFile.delete()) Log.w(TAG, fmt(
-                        "Failed to delete incomplete file: %s",
-                        destFile.getAbsolutePath()
-                    ));
-                    return;
-                }
-                out.write(buffer, 0, bytesRead);
-                downloadedBytes += bytesRead;
-                long now = System.currentTimeMillis();
-                if (now - lastUpdateTime >= UI_UPDATE_INTERVAL_MS) {
-                    long elapsed = now - lastUpdateTime;
-                    long deltaBytes = downloadedBytes - lastUpdateBytes;
-                    speedBytesPerSec = elapsed > 0 ? (deltaBytes * 1000 / elapsed) : 0;
-                    lastUpdateTime = now;
-                    lastUpdateBytes = downloadedBytes;
-                    final long dl = downloadedBytes;
-                    final long total = totalBytes;
-                    final long speed = speedBytesPerSec;
-                    handler.post(() -> updateUI(dl, total, speed));
-                }
-            }
-            out.flush();
-            closeQuietly(out);
-            out = null;
-            handler.post(() -> {
-                setState(STATE_FINISHED);
-                if (listener != null) listener.onFinished(this, destFile);
-            });
-        } catch (Exception e) {
-            Log.e(TAG, "Download failed", e);
-            String msg = e.getMessage();
-            closeQuietly(out);
-            out = null;
-            if (destFile.exists() && !destFile.delete()) Log.w(TAG, fmt(
-                "Failed to delete incomplete file: %s",
-                destFile.getAbsolutePath()
-            ));
-            handler.post(() -> {
-                setFailed(msg != null ? msg : "Unknown error");
-                if (listener != null) listener.onFailed(this, msg);
-            });
-        } finally {
-            closeQuietly(in);
-            closeQuietly(out);
-            if (conn != null) conn.disconnect();
-        }
-    }
-
     private void setIdle() {
         tvFilename.setText("");
         tvPercent.setText("");
@@ -307,7 +200,6 @@ private void setState(int newState) {
             case STATE_FAILED:
                 break;
         }
-        if (listener != null) listener.onStateChanged(this, newState);
     }
 
     private void setFailed(String msg) {
@@ -318,12 +210,14 @@ private void setFailed(String msg) {
         tvSize.setText("");
         tvEta.setText(getContext().getString(R.string.download_failed, msg));
         btnCancel.setVisibility(GONE);
-        if (listener != null) listener.onStateChanged(this, STATE_FAILED);
     }
 
     private void updateUI(long downloaded, long total, long speed) {
         var ctx = getContext();
         if (total > 0) {
+            // Material's setProgress() is ignored while indeterminate, so leave that
+            // mode explicitly (e.g. after a retry where the size was briefly unknown).
+            progressBar.setIndeterminate(false);
             int progress = (int) (downloaded * 1000 / total);
             progressBar.setProgress(progress);
             float percent = downloaded * 100f / total;
@@ -365,15 +259,5 @@ private void updateUI(long downloaded, long total, long speed) {
                 ctx.getString(R.string.download_eta_unknown)
             ));
         }
-        if (listener != null) listener.onProgress(this, downloaded, total);
-    }
-
-    private static void closeQuietly(Closeable c) {
-        if (c != null) {
-            try {
-                c.close();
-            } catch (Exception ignored) {
-            }
-        }
     }
 }
diff --git a/app/src/main/res/values-zh-rCN/strings.xml b/app/src/main/res/values-zh-rCN/strings.xml
index 650cb176b..9d0c8aaf9 100644
--- a/app/src/main/res/values-zh-rCN/strings.xml
+++ b/app/src/main/res/values-zh-rCN/strings.xml
@@ -615,6 +615,25 @@
     <string name="download_file_icon_desc">文件图标</string>
     <string name="download_exit_title">正在下载</string>
     <string name="download_exit_message">下载仍在进行中。现在离开将取消下载并删除已下载的部分文件。确定要退出吗？</string>
+    <string name="download_paused">已暂停…</string>
+    <string name="download_paused_network">已暂停，等待网络…</string>
+    <string name="download_paused_retry">连接中断，正在重试…</string>
+    <string name="download_paused_wifi">已暂停，等待 Wi-Fi…</string>
+    <string name="download_retrying">连接中断，重试中 (%1$d/%2$d)…</string>
+    <string name="download_one_at_a_time">已有下载正在进行，请等待完成。</string>
+    <string name="download_background_toast">下载将在后台继续，可在通知栏查看。</string>    <string name="download_error_start">无法开始下载，请确认系统下载管理器已启用。</string>
+
+    <string name="notif_channel_downloads">下载</string>
+    <string name="notif_channel_downloads_desc">磁盘镜像下载通知</string>
+    <string name="notif_download_complete_title">导入完成</string>
+    <string name="notif_download_complete_text">"%1$s"已添加到磁盘列表。</string>
+    <string name="notif_download_failed_title">下载失败</string>
+    <string name="notif_download_failed_text">无法下载"%1$s"。</string>
+    <string name="notif_channel_downloads_progress">下载中</string>
+    <string name="notif_channel_downloads_progress_desc">下载进行中的通知</string>
+    <string name="notif_download_connecting">连接中…</string>
+    <string name="notif_download_cancel">取消</string>
+
     <string name="vm_state_suspended">已挂起</string>
     <string name="vm_info_state_suspended">虚拟机已挂起</string>
 
diff --git a/app/src/main/res/values/strings.xml b/app/src/main/res/values/strings.xml
index 2faf73b8c..116ff15b8 100644
--- a/app/src/main/res/values/strings.xml
+++ b/app/src/main/res/values/strings.xml
@@ -652,6 +652,25 @@
     <string name="download_file_icon_desc">File icon</string>
     <string name="download_exit_title">Download in progress</string>
     <string name="download_exit_message">A download is still in progress. Leaving now will cancel it and delete the partial file. Are you sure?</string>
+    <string name="download_paused">Paused…</string>
+    <string name="download_paused_network">Paused, waiting for network…</string>
+    <string name="download_paused_retry">Connection interrupted, retrying…</string>
+    <string name="download_paused_wifi">Paused, waiting for Wi-Fi…</string>
+    <string name="download_retrying">Connection lost, retrying (%1$d/%2$d)…</string>
+    <string name="download_one_at_a_time">A download is already in progress. Please wait for it to finish.</string>
+    <string name="download_background_toast">Download continues in the background. Check the notification shade.</string>    <string name="download_error_start">Could not start the download. Make sure the system Download Manager is enabled.</string>
+
+    <string name="notif_channel_downloads">Downloads</string>
+    <string name="notif_channel_downloads_desc">Disk image download notifications</string>
+    <string name="notif_download_complete_title">Import complete</string>
+    <string name="notif_download_complete_text">\"%1$s\" was added to the disk list.</string>
+    <string name="notif_download_failed_title">Download failed</string>
+    <string name="notif_download_failed_text">Failed to download \"%1$s\".</string>
+    <string name="notif_channel_downloads_progress">Downloading</string>
+    <string name="notif_channel_downloads_progress_desc">Ongoing download progress</string>
+    <string name="notif_download_connecting">Connecting…</string>
+    <string name="notif_download_cancel">Cancel</string>
+
     <string name="vm_state_suspended">Suspended</string>
     <string name="vm_info_state_suspended">VM is suspended</string>
 

From 5c019ac7311c260e7ad482779f2e3a4404d10797 Mon Sep 17 00:00:00 2001
From: HuJK <gh@hujk.org>
Date: Sun, 14 Jun 2026 16:39:11 +0800
Subject: [PATCH 012/182] fix(ui): handle IME insets and LXC source loading

Apply IME inset padding globally while exempting console/display surfaces, preventing the soft keyboard from covering editor UI.

Make the LXC import screen usable immediately from bundled source metadata, then refresh mirrors in the background without clobbering an explicit user selection.

Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
---
 .../java/cn/classfun/droidvm/DroidVMApp.java  |   2 +
 .../droidvm/lib/ui/ImeInsetsApplier.java      |  81 +++++++++++
 .../droidvm/lib/ui/ImeInsetsExempt.java       |  11 ++
 .../ui/disk/lxc/ImportLxcImagesActivity.java  | 127 +++++++++++++++---
 .../ui/vm/console/VMConsoleActivity.java      |   3 +-
 .../vm/display/vnc/base/BaseVncActivity.java  |   3 +-
 app/src/main/res/values-zh-rCN/strings.xml    |   1 +
 app/src/main/res/values/strings.xml           |   1 +
 8 files changed, 210 insertions(+), 19 deletions(-)
 create mode 100644 app/src/main/java/cn/classfun/droidvm/lib/ui/ImeInsetsApplier.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/lib/ui/ImeInsetsExempt.java

diff --git a/app/src/main/java/cn/classfun/droidvm/DroidVMApp.java b/app/src/main/java/cn/classfun/droidvm/DroidVMApp.java
index 43fc13809..4d6a266eb 100644
--- a/app/src/main/java/cn/classfun/droidvm/DroidVMApp.java
+++ b/app/src/main/java/cn/classfun/droidvm/DroidVMApp.java
@@ -11,6 +11,7 @@
 import cn.classfun.droidvm.lib.store.disk.DiskStore;
 import cn.classfun.droidvm.lib.store.network.NetworkStore;
 import cn.classfun.droidvm.lib.store.vm.VMStore;
+import cn.classfun.droidvm.lib.ui.ImeInsetsApplier;
 import cn.classfun.droidvm.lib.utils.ThreadUtils;
 
 public final class DroidVMApp extends Application {
@@ -21,6 +22,7 @@ public final class DroidVMApp extends Application {
     public void onCreate() {
         super.onCreate();
         DynamicColors.applyToActivitiesIfAvailable(this);
+        registerActivityLifecycleCallbacks(new ImeInsetsApplier());
         vmEventHandler = new VMEventHandler(this);
         registerActivityLifecycleCallbacks(vmEventHandler);
         DaemonConnection.getInstance().addListener(vmEventHandler);
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/ui/ImeInsetsApplier.java b/app/src/main/java/cn/classfun/droidvm/lib/ui/ImeInsetsApplier.java
new file mode 100644
index 000000000..948b49525
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/lib/ui/ImeInsetsApplier.java
@@ -0,0 +1,81 @@
+package cn.classfun.droidvm.lib.ui;
+
+import android.app.Activity;
+import android.app.Application;
+import android.os.Bundle;
+import android.view.View;
+
+import androidx.annotation.NonNull;
+import androidx.annotation.Nullable;
+import androidx.core.graphics.Insets;
+import androidx.core.view.ViewCompat;
+import androidx.core.view.WindowInsetsCompat;
+
+/**
+ * Reinstates the legacy {@code adjustResize} behaviour under edge-to-edge.
+ *
+ * <p>From {@code targetSdk} 35 the app always draws edge-to-edge, and the
+ * framework no longer shrinks the window for the soft keyboard; instead it
+ * reports the keyboard height as an {@link WindowInsetsCompat.Type#ime() ime}
+ * inset that the app must consume. {@code android:fitsSystemWindows} only
+ * applies the system bar insets, so without this the keyboard covers whatever
+ * the user is typing into.
+ *
+ * <p>This applier pads the bottom of every activity's content view by the IME
+ * inset, lifting the content (and any scroll container within it) above the
+ * keyboard for every activity uniformly. Activities that handle the keyboard
+ * themselves opt out via {@link ImeInsetsExempt}.
+ */
+public final class ImeInsetsApplier implements Application.ActivityLifecycleCallbacks {
+
+    private static void apply(Activity activity) {
+        if (activity instanceof ImeInsetsExempt) return;
+        final View content = activity.findViewById(android.R.id.content);
+        if (content == null) return;
+        final int basePadding = content.getPaddingBottom();
+        ViewCompat.setOnApplyWindowInsetsListener(content, (v, insets) -> {
+            final Insets ime = insets.getInsets(WindowInsetsCompat.Type.ime());
+            v.setPadding(
+                v.getPaddingLeft(),
+                v.getPaddingTop(),
+                v.getPaddingRight(),
+                basePadding + ime.bottom
+            );
+            return insets;
+        });
+        ViewCompat.requestApplyInsets(content);
+    }
+
+    @Override
+    public void onActivityPostCreated(@NonNull Activity activity, @Nullable Bundle savedInstanceState) {
+        apply(activity);
+    }
+
+    @Override
+    public void onActivityCreated(@NonNull Activity activity, @Nullable Bundle savedInstanceState) {
+    }
+
+    @Override
+    public void onActivityStarted(@NonNull Activity activity) {
+    }
+
+    @Override
+    public void onActivityResumed(@NonNull Activity activity) {
+    }
+
+    @Override
+    public void onActivityPaused(@NonNull Activity activity) {
+    }
+
+    @Override
+    public void onActivityStopped(@NonNull Activity activity) {
+    }
+
+    @Override
+    public void onActivitySaveInstanceState(@NonNull Activity activity, @NonNull Bundle outState) {
+    }
+
+    @Override
+    public void onActivityDestroyed(@NonNull Activity activity) {
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/ui/ImeInsetsExempt.java b/app/src/main/java/cn/classfun/droidvm/lib/ui/ImeInsetsExempt.java
new file mode 100644
index 000000000..a78ec638e
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/lib/ui/ImeInsetsExempt.java
@@ -0,0 +1,11 @@
+package cn.classfun.droidvm.lib.ui;
+
+/**
+ * Marker for activities that manage the soft keyboard themselves (e.g. the
+ * terminal/serial console and VNC display, where the IME must overlay the
+ * full-screen surface rather than resize it).
+ *
+ * <p>{@link ImeInsetsApplier} skips any activity implementing this interface.
+ */
+public interface ImeInsetsExempt {
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/disk/lxc/ImportLxcImagesActivity.java b/app/src/main/java/cn/classfun/droidvm/ui/disk/lxc/ImportLxcImagesActivity.java
index 5779c7a09..9df72c2c7 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/disk/lxc/ImportLxcImagesActivity.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/disk/lxc/ImportLxcImagesActivity.java
@@ -98,6 +98,9 @@ public final class ImportLxcImagesActivity extends AppCompatActivity {
     private boolean isLoading = false;
     private boolean isDownloading = false;
     private boolean isClassFunApiAvailable = false;
+    /** True once the user explicitly picks a source, so a background refresh
+     * won't override their choice (but may still upgrade an untouched default). */
+    private boolean userTouchedSource = false;
     private String downloadName = null;
     private String downloadFolder = null;
     private ApiManager apiManager = null;
@@ -156,8 +159,12 @@ public void handleOnBackPressed() {
         inputFolder.setText(path);
         inputFolder.setIconButtonOnClickListener(() -> folderPickerLauncher.launch(null));
         fabImport.setOnClickListener(v -> doImport());
-        setMetaIdle();
-        runOnPool(this::asyncLoad);
+        // show the built-in source list immediately (screen usable at once),
+        // then refresh from the API in the background and swap it in when ready
+        loadBuiltinSources();
+        runOnPool(this::asyncRefreshSources);
+        // If this screen was re-created while its download is still running,
+        // restore the whole form; otherwise just re-attach the progress bar.
         if (!restoreSession()) reattachActiveDownload();
     }
 
@@ -237,23 +244,102 @@ private void reattachActiveDownload() {
         pollHandler.post(pollRunnable);
     }
 
-    private void asyncLoad() {
-        if (Privacy.isPrivacyAgreed(this)) {
-            apiManager = ApiManager.create(this);
-            isClassFunApiAvailable = apiManager.isServiceEnabled("lxc_images_metadata");
+    /**
+     * Populates the source dropdowns synchronously from the bundled repo list
+     * so the screen is usable immediately, before the API refresh returns.
+     */
+    private void loadBuiltinSources() {
+        var repos = Repos.loadYAML(this);
+        if (repos != null) lxcRepo = repos.getRepo().get("lxc-images");
+        if (lxcRepo == null) {
+            // bundled data missing/corrupt: fall back to a blocking load
+            setMetaSourcesLoading();
+            return;
         }
-        var repos = Repos.load(this);
-        if (repos == null)
-            throw new IllegalStateException("Repo data not found or failed to load");
-        lxcRepo = repos.getRepo().get("lxc-images");
-        if (lxcRepo == null)
-            throw new IllegalStateException("LXC repo info not found in the data");
-        runOnUiThread(this::afterApiDone);
-    }
-
-    private void afterApiDone() {
         setupSourceDropdown();
         setupImageDropdowns();
+        setMetaRefreshing();
+    }
+
+    /**
+     * Background refresh: fetches the freshest repo/mirror list (and ClassFun
+     * availability) from the API, then swaps it into the dropdowns without
+     * disturbing a user who has already moved on to loading images.
+     */
+    private void asyncRefreshSources() {
+        boolean classfun = false;
+        Repos.Repo freshRepo = null;
+        try {
+            if (Privacy.isPrivacyAgreed(this)) {
+                apiManager = ApiManager.create(this);
+                classfun = apiManager.isServiceEnabled("lxc_images_metadata");
+            }
+            var repos = Repos.load(this);
+            if (repos != null) freshRepo = repos.getRepo().get("lxc-images");
+        } catch (Exception e) {
+            Log.w(TAG, "Background source refresh failed; keeping built-in list", e);
+        }
+        final boolean classfunAvailable = classfun;
+        final Repos.Repo repo = freshRepo;
+        runOnUiThread(() -> applyRefreshedSources(repo, classfunAvailable));
+    }
+
+    private void applyRefreshedSources(@Nullable Repos.Repo freshRepo, boolean classfunAvailable) {
+        if (isFinishing()) return;
+        isClassFunApiAvailable = classfunAvailable;
+        if (freshRepo != null) {
+            // capture any explicit choice before the list swap
+            var metaSel = getSelectedMetaSourceKey();
+            var dlSel = getSelectedDlSourceKey();
+            lxcRepo = freshRepo;
+            setupSourceDropdown();
+            // keep an explicit pick; otherwise take the fresh default
+            // (which now prefers ClassFun when it just became available)
+            if (userTouchedSource) restoreSourceSelection(metaSel, dlSel);
+        } else if (lxcRepo == null) {
+            // both the bundled list and the refresh failed
+            setMetaError("source list unavailable");
+            btnLoad.setEnabled(false);
+            return;
+        }
+        // clear the "refreshing" spinner only if the user hasn't moved on
+        if (!isLoading && !isDownloading && allImages.isEmpty())
+            setMetaIdle();
+    }
+
+    /** Re-applies a previously selected source key after the list is rebuilt. */
+    private void restoreSourceSelection(@NonNull String metaKey, @NonNull String dlKey) {
+        int mi = findSourceIndex(metaSourceKeys, metaKey);
+        dropdownMetaSource.setText(metaSourceLabels[mi]);
+        inputCustomMetaUrl.setVisibility(
+            metaSourceKeys[mi].equals("custom") ? VISIBLE : GONE);
+        int di = findSourceIndex(dlSourceKeys, dlKey);
+        dropdownDlSource.setText(dlSourceLabels[di]);
+        inputCustomDlUrl.setVisibility(
+            dlSourceKeys[di].equals("custom") ? VISIBLE : GONE);
+    }
+
+    private void setMetaRefreshing() {
+        progressMeta.setVisibility(VISIBLE);
+        tvMetaStatus.setText(R.string.lxc_meta_refreshing);
+        tvMetaStatus.setTextColor(resolveThemeColor(colorOnSurfaceVariant));
+        btnLoad.setEnabled(true);
+        setImageSectionEnabled(false);
+        setOutputEnabled(false);
+    }
+
+    private void setMetaSourcesLoading() {
+        progressMeta.setVisibility(VISIBLE);
+        tvMetaStatus.setText(R.string.lxc_meta_loading);
+        tvMetaStatus.setTextColor(resolveThemeColor(colorOnSurfaceVariant));
+        btnLoad.setEnabled(false);
+        setImageSectionEnabled(false);
+        setOutputEnabled(false);
+    }
+
+    private boolean sourcesReady() {
+        return metaSourceKeys != null && metaSourceLabels != null
+            && dlSourceKeys != null && dlSourceLabels != null;
     }
 
     @Override
@@ -346,6 +432,7 @@ private void setupSourceDropdown() {
         dropdownMetaSource.setAdapter(aMeta);
         dropdownMetaSource.setText(metaSourceLabels[metaDefaultIndex]);
         dropdownMetaSource.setOnItemClickListener((p, v, pos, id) -> {
+            userTouchedSource = true;
             boolean isCustom = metaSourceKeys[pos].equals("custom");
             inputCustomMetaUrl.setVisibility(isCustom ? VISIBLE : GONE);
             setMetaIdle();
@@ -358,6 +445,7 @@ private void setupSourceDropdown() {
         dropdownDlSource.setAdapter(aDown);
         dropdownDlSource.setText(dlSourceLabels[downDefaultIndex]);
         dropdownDlSource.setOnItemClickListener((p, v, pos, id) -> {
+            userTouchedSource = true;
             boolean isCustom = dlSourceKeys[pos].equals("custom");
             inputCustomDlUrl.setVisibility(isCustom ? VISIBLE : GONE);
         });
@@ -373,6 +461,7 @@ private int findSourceIndex(@NonNull String[] keys, @NonNull String target) {
 
     @Nullable
     private String resolveSourceUrl(@NonNull String key) {
+        if (lxcRepo == null) return null;
         if (key.equals("official")) return lxcRepo.getUrl();
         if (key.equals("custom")) return null;
         var mirror = lxcRepo.getMirror(key);
@@ -410,7 +499,7 @@ private String getDownloadBaseUrl() {
     }
 
     private void loadImages() {
-        if (isLoading || isDownloading) return;
+        if (isLoading || isDownloading || !sourcesReady()) return;
         var baseUrl = getMetaBaseUrl();
         if (baseUrl.isEmpty()) {
             if (getSelectedMetaSourceKey().equals("custom"))
@@ -778,6 +867,8 @@ private void setOutputEnabled(boolean enabled) {
     }
 
     private String getSelectedMetaSourceKey() {
+        if (metaSourceLabels == null || metaSourceKeys == null)
+            return isClassFunApiAvailable ? "classfun" : "official";
         var label = dropdownMetaSource.getText();
         for (int i = 0; i < metaSourceLabels.length; i++)
             if (metaSourceLabels[i].equals(label))
@@ -786,6 +877,8 @@ private String getSelectedMetaSourceKey() {
     }
 
     private String getSelectedDlSourceKey() {
+        if (dlSourceLabels == null || dlSourceKeys == null)
+            return "official";
         var label = dropdownDlSource.getText();
         for (int i = 0; i < dlSourceLabels.length; i++)
             if (dlSourceLabels[i].equals(label))
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/console/VMConsoleActivity.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/console/VMConsoleActivity.java
index c27fb9e52..d5306c6e1 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/console/VMConsoleActivity.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/console/VMConsoleActivity.java
@@ -48,11 +48,12 @@
 
 import cn.classfun.droidvm.R;
 import cn.classfun.droidvm.lib.daemon.DaemonConnection;
+import cn.classfun.droidvm.lib.ui.ImeInsetsExempt;
 import cn.classfun.droidvm.lib.ui.termux.SimpleTerminalSessionClient;
 import cn.classfun.droidvm.lib.ui.termux.SimpleTerminalViewClient;
 import cn.classfun.droidvm.lib.utils.ShareUtils;
 
-public final class VMConsoleActivity extends AppCompatActivity {
+public final class VMConsoleActivity extends AppCompatActivity implements ImeInsetsExempt {
     private static final String TAG = "VMConsoleActivity";
     public static final String EXTRA_VM_ID = "vm_id";
     public static final String EXTRA_VM_NAME = "vm_name";
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/display/vnc/base/BaseVncActivity.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/vnc/base/BaseVncActivity.java
index 267845f08..9331f1d0a 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/display/vnc/base/BaseVncActivity.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/vnc/base/BaseVncActivity.java
@@ -47,10 +47,11 @@
 
 import cn.classfun.droidvm.R;
 import cn.classfun.droidvm.lib.daemon.DaemonConnection;
+import cn.classfun.droidvm.lib.ui.ImeInsetsExempt;
 import cn.classfun.droidvm.ui.vm.display.base.DisplayExtraKeysPanel;
 import cn.classfun.droidvm.ui.vm.display.vnc.input.VncExtraKeysPanel;
 
-public abstract class BaseVncActivity extends AppCompatActivity {
+public abstract class BaseVncActivity extends AppCompatActivity implements ImeInsetsExempt {
     protected final String TAG = getClass().getSimpleName();
     public static final String EXTRA_VM_NAME = "vm_name";
     public static final String EXTRA_VM_ID = "vm_id";
diff --git a/app/src/main/res/values-zh-rCN/strings.xml b/app/src/main/res/values-zh-rCN/strings.xml
index 9d0c8aaf9..febfca891 100644
--- a/app/src/main/res/values-zh-rCN/strings.xml
+++ b/app/src/main/res/values-zh-rCN/strings.xml
@@ -469,6 +469,7 @@
     <string name="lxc_custom_download_url_hint">下载镜像站基础 URL</string>
     <string name="lxc_meta_idle">请先加载元数据</string>
     <string name="lxc_meta_loading">加载中\u2026</string>
+    <string name="lxc_meta_refreshing">正在更新源列表\u2026</string>
     <plurals name="lxc_meta_count">
         <item quantity="other">元数据：%1$d 个镜像</item>
     </plurals>
diff --git a/app/src/main/res/values/strings.xml b/app/src/main/res/values/strings.xml
index 116ff15b8..5e8280518 100644
--- a/app/src/main/res/values/strings.xml
+++ b/app/src/main/res/values/strings.xml
@@ -505,6 +505,7 @@
     <string name="lxc_custom_download_url_hint">Download mirror base URL</string>
     <string name="lxc_meta_idle">Please load metadata first</string>
     <string name="lxc_meta_loading">Loading\u2026</string>
+    <string name="lxc_meta_refreshing">Updating source list\u2026</string>
     <plurals name="lxc_meta_count">
         <item quantity="one">Metadata: %1$d image</item>
         <item quantity="other">Metadata: %1$d images</item>

From 64f5cbe3664cab77b8f6858207ba914fdaa3d4ea Mon Sep 17 00:00:00 2001
From: HuJK <gh@hujk.org>
Date: Sun, 14 Jun 2026 16:40:03 +0800
Subject: [PATCH 013/182] chore(build): add third-party tool build pipeline

Add a one-shot build script for submodules, third-party networking/boot tools, and APK output, and ignore generated third-party checkouts and staged binaries.

Teach the app build and asset extraction path about the new gvswitch, pbridge, bridgedhcp, lbx, and netbox binaries, including lbx JNI packaging for UI-side execution.

Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
---
 .gitignore                                    |   9 +
 app/build.gradle.kts                          |  57 +++++-
 .../cn/classfun/droidvm/lib/Constants.java    |   1 +
 .../droidvm/lib/utils/AssetUtils.java         |   1 +
 build.sh                                      | 163 ++++++++++++++++++
 5 files changed, 230 insertions(+), 1 deletion(-)
 create mode 100755 build.sh

diff --git a/.gitignore b/.gitignore
index 93653b763..58b0eb928 100644
--- a/.gitignore
+++ b/.gitignore
@@ -9,3 +9,12 @@
 .externalNativeBuild
 .cxx
 local.properties
+
+# build.sh stages the compiled network/boot binaries next to the committed
+# 7za prebuilt; only 7za is tracked, the rest are build output.
+/app/src/thirdparty
+/app/src/main/assets/bin/*/bridgedhcp
+/app/src/main/assets/bin/*/gvswitch
+/app/src/main/assets/bin/*/lbx
+/app/src/main/assets/bin/*/netbox
+/app/src/main/assets/bin/*/pbridge
diff --git a/app/build.gradle.kts b/app/build.gradle.kts
index 27bfebacf..da565c190 100644
--- a/app/build.gradle.kts
+++ b/app/build.gradle.kts
@@ -16,10 +16,19 @@ fun runGit(vararg args: String): String {
     return output
 }
 
+// Tolerant variant: returns null instead of throwing, for git calls that may
+// legitimately fail (e.g. describe on a checkout with no tags).
+fun runGitOrNull(vararg args: String): String? =
+    runCatching { runGit(*args) }.getOrNull()
+
 val gitCommitCount = runGit("rev-list", "--count", "HEAD").toInt()
 val gitShortSha = runGit("rev-parse", "--short", "HEAD")
 
-val gitDescribe = runGit("describe", "--long", "--tags")
+// describe fails on a checkout without tags (shallow clone, or tags not fetched);
+// fall back to a 0.0.0 base so the build still works and the version is clearly
+// marked as tag-less.
+val gitDescribe = (runGitOrNull("describe", "--long", "--tags")
+    ?: "0.0.0-$gitCommitCount-g$gitShortSha")
     .removePrefix("v").removePrefix("V")
 val generatedVersionName: String = if (gitDescribe.matches(Regex(".*-0-g[0-9a-f]+$"))) {
     gitDescribe.replace(Regex("-0-g[0-9a-f]+$"), "")
@@ -86,6 +95,14 @@ android {
         aidl = true
         buildConfig = true
     }
+    packaging {
+        jniLibs {
+            // Extract native libs to a real on-disk dir so lbx (shipped as
+            // liblbx.so) is an executable file the app can run from its own
+            // nativeLibraryDir — no root, no daemon needed for a URL fetch.
+            useLegacyPackaging = true
+        }
+    }
 }
 
 abstract class CopyNativeBinAssetsTask : DefaultTask() {
@@ -122,9 +139,47 @@ abstract class CopyNativeBinAssetsTask : DefaultTask() {
     }
 }
 
+// Ship lbx as `liblbx.so` in jniLibs so the (non-root) UI process can exec it
+// from its nativeLibraryDir — the data-dir copy used by the daemon isn't
+// executable by the app's untrusted_app SELinux domain.
+abstract class CopyLbxJniLibsTask : DefaultTask() {
+    @get:InputDirectory
+    abstract val distDir: DirectoryProperty
+
+    @get:OutputDirectory
+    abstract val outputDir: DirectoryProperty
+
+    @TaskAction
+    fun copy() {
+        val outDir = outputDir.get().asFile
+        outDir.deleteRecursively()
+        val dist = distDir.get().asFile
+        if (!dist.exists()) return
+        dist.listFiles()?.filter { it.isDirectory }?.forEach { abiDir ->
+            val src = File(abiDir, "lbx")
+            if (src.isFile) {
+                val dest = File(outDir, "${abiDir.name}/liblbx.so")
+                dest.parentFile.mkdirs()
+                src.copyTo(dest, overwrite = true)
+            }
+        }
+    }
+}
+
 androidComponents {
     onVariants { variant ->
         val variantName = variant.name.replaceFirstChar { it.uppercase() }
+        val copyLbxJniTask = tasks.register<CopyLbxJniLibsTask>(
+            "copyLbxJniLibs${variantName}"
+        ) {
+            distDir.set(rootProject.layout.projectDirectory.dir("app/src/main/assets/bin"))
+            outputDir.set(
+                layout.buildDirectory.dir("generated/lbx_jnilibs/${variant.name}")
+            )
+        }
+        variant.sources.jniLibs?.addGeneratedSourceDirectory(
+            copyLbxJniTask, CopyLbxJniLibsTask::outputDir
+        )
         val copyNativeTask = tasks.register<CopyNativeBinAssetsTask>(
             "copyNativeBinAssets${variantName}"
         ) {
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/Constants.java b/app/src/main/java/cn/classfun/droidvm/lib/Constants.java
index 4670a715e..3e8d08d65 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/Constants.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/Constants.java
@@ -22,6 +22,7 @@ public final class Constants {
     public static final String GITHUB_ISSUE_URL = "https://github.com/Droid-VM/DroidVM/issues";
     public static final String[] BINARIES_PREBUILT = {"7za"};
     public static final String[] BINARIES_BUILT = {"droidvm", "daemon"};
+    public static final String[] BINARIES_THIRDPARTY = {"gvswitch", "pbridge", "bridgedhcp", "lbx", "netbox"};
     public static final String[] LIBRARIES_BUILT = {"libsimpledump.so", "libunixhelper.so"};
     /**
      * IFA_RT_PRIORITY magic that pbridge tags its ND/ARP-offload proxy
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/utils/AssetUtils.java b/app/src/main/java/cn/classfun/droidvm/lib/utils/AssetUtils.java
index b87b9da85..4a79b5738 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/utils/AssetUtils.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/utils/AssetUtils.java
@@ -197,6 +197,7 @@ public static void extractAsset(
     public static void extractBinaries(@NonNull Context context) {
         extractAsset(context, "bin", BINARIES_BUILT, false);
         extractAsset(context, "bin", BINARIES_PREBUILT, true);
+        extractAsset(context, "bin", BINARIES_THIRDPARTY, false);
     }
 
     public static void extractLibraries(@NonNull Context context) {
diff --git a/build.sh b/build.sh
new file mode 100755
index 000000000..8794ab536
--- /dev/null
+++ b/build.sh
@@ -0,0 +1,163 @@
+#!/usr/bin/env bash
+# One-shot build: submodules + third-party network daemons + APK.
+#
+#   ./build.sh             # debug APK (default)
+#   ./build.sh release     # release APK (needs signing config)
+#   SKIP_THIRDPARTY=1 ./build.sh   # reuse already-built binaries in app/src/main/assets/bin
+#
+# Third-party toolchains (Go for gvswitch/bridgedhcp, rustup+clang for
+# pbridge, rustup for lbx) are only required when rebuilding those daemons;
+# if a toolchain is missing but a previously built binary exists in
+# app/src/main/assets/bin, the build continues with a warning. Those binaries
+# are git-ignored (only the 7za prebuilt is committed); a clean checkout must
+# build them at least once.
+set -euo pipefail
+cd "$(dirname "$0")"
+
+VARIANT="${1:-debug}"
+case "$VARIANT" in
+    debug)   GRADLE_TASK=assembleDebug;   APK=app/build/outputs/apk/debug/app-debug.apk ;;
+    release) GRADLE_TASK=assembleRelease; APK=app/build/outputs/apk/release/app-release.apk ;;
+    *) echo "usage: $0 [debug|release]" >&2; exit 2 ;;
+esac
+
+log()  { printf '\033[1;34m==>\033[0m %s\n' "$*"; }
+warn() { printf '\033[1;33mWARN:\033[0m %s\n' "$*" >&2; }
+die()  { printf '\033[1;31mERROR:\033[0m %s\n' "$*" >&2; exit 1; }
+
+# ----------------------------------------------------- environment preflight
+# Required to build from a clean checkout:
+#   Android SDK  -> ANDROID_HOME / ANDROID_SDK_ROOT, or local.properties (sdk.dir=...)
+#   Go (golang)  -> gvswitch, bridgedhcp                https://go.dev/dl/
+#   Rust (cargo) -> pbridge, lbx, netbox  (+ clang for pbridge)   https://rustup.rs
+# Go/Rust/clang are only needed when (re)building those daemons; if a toolchain
+# is missing but a prebuilt binary already exists in app/src/main/assets/bin the
+# build continues with a warning. A missing Android SDK is always fatal.
+have() { command -v "$1" >/dev/null 2>&1; }
+if [ -f local.properties ]; then SDK_STATUS="local.properties"; else SDK_STATUS="${ANDROID_HOME:-${ANDROID_SDK_ROOT:-MISSING}}"; fi
+log "Environment preflight:"
+printf '    %-14s %s\n' "Android SDK"  "$SDK_STATUS"
+printf '    %-14s %s\n' "Go (golang)"  "$(have go    && go version | awk '{print $3}'     || echo 'MISSING -> https://go.dev/dl/')"
+printf '    %-14s %s\n' "Rust (cargo)" "$(have cargo && cargo --version | awk '{print $2}' || echo 'MISSING -> https://rustup.rs')"
+printf '    %-14s %s\n' "clang"        "$(have clang && echo present                       || echo 'MISSING -> needed for pbridge')"
+
+if [ ! -f local.properties ] && [ -z "${ANDROID_HOME:-}" ] && [ -z "${ANDROID_SDK_ROOT:-}" ]; then
+    die "Android SDK not configured: set ANDROID_HOME (or ANDROID_SDK_ROOT), or create local.properties (sdk.dir=...)"
+fi
+
+# ---------------------------------------------------------------- submodules
+log "Initializing git submodules"
+git submodule update --init --recursive
+
+# ----------------------------------------------------- third-party repos
+# These network daemons live in their own git repos (not submodules while
+# under active development). Clone them on first build if the dir is missing;
+# an existing checkout is left untouched so local work is never overwritten.
+clone_if_missing() {
+    local path="$1" url="$2"
+    [ -d "$path/.git" ] && return 0
+    if [ -e "$path" ]; then
+        warn "$path exists but is not a git checkout; leaving it untouched"
+        return 0
+    fi
+    log "Cloning $path"
+    git clone "$url" "$path"
+}
+
+clone_if_missing app/src/thirdparty/gvisor-vswitch       https://github.com/HuJK/gvisor-vswitch.git
+clone_if_missing app/src/thirdparty/pseudo-bridge-rs     https://github.com/KusakabeShi/pseudo-bridge-rs.git
+clone_if_missing app/src/thirdparty/bridgedhcp           https://github.com/HuJK/bridgedhcp.git
+clone_if_missing app/src/thirdparty/linux-boot-extractor https://github.com/HuJK/linux-boot-extractor.git
+
+# ------------------------------------------------------- third-party daemons
+mkdir -p app/src/main/assets/bin/arm64-v8a app/src/main/assets/bin/x86_64
+
+build_gvswitch() {
+    if ! command -v go >/dev/null 2>&1; then
+        if [ -x app/src/main/assets/bin/arm64-v8a/gvswitch ]; then
+            warn "Go not found; reusing the previously-built gvswitch binaries"
+            return 0
+        fi
+        die "Go is required to build gvswitch (https://go.dev/dl/)"
+    fi
+    log "Building gvswitch (android-arm64 + linux-amd64)"
+    make -C app/src/thirdparty/gvisor-vswitch build-android build-linux-amd64
+    install -m755 app/src/thirdparty/gvisor-vswitch/build/gvswitch-android-arm64 app/src/main/assets/bin/arm64-v8a/gvswitch
+    install -m755 app/src/thirdparty/gvisor-vswitch/build/gvswitch-linux-amd64   app/src/main/assets/bin/x86_64/gvswitch
+}
+
+build_pbridge() {
+    if ! command -v cargo >/dev/null 2>&1 || ! command -v clang >/dev/null 2>&1; then
+        if [ -x app/src/main/assets/bin/arm64-v8a/pbridge ]; then
+            warn "cargo/clang not found; reusing the previously-built pbridge binaries"
+            return 0
+        fi
+        die "rustup (cargo) and clang are required to build pbridge"
+    fi
+    log "Building pbridge (android-arm64 + linux-x64)"
+    (cd app/src/thirdparty/pseudo-bridge-rs && ./build.sh all)
+    install -m755 app/src/thirdparty/pseudo-bridge-rs/dist/pbridge-android-arm64 app/src/main/assets/bin/arm64-v8a/pbridge
+    install -m755 app/src/thirdparty/pseudo-bridge-rs/dist/pbridge-linux-x64     app/src/main/assets/bin/x86_64/pbridge
+}
+
+build_bridgedhcp() {
+    if ! command -v go >/dev/null 2>&1; then
+        if [ -x app/src/main/assets/bin/arm64-v8a/bridgedhcp ]; then
+            warn "Go not found; reusing the previously-built bridgedhcp binaries"
+            return 0
+        fi
+        die "Go is required to build bridgedhcp (https://go.dev/dl/)"
+    fi
+    log "Building bridgedhcp (android-arm64 + linux-amd64)"
+    (cd app/src/thirdparty/bridgedhcp && ./build.sh)
+    install -m755 app/src/thirdparty/bridgedhcp/build/bridgedhcp-android-arm64 app/src/main/assets/bin/arm64-v8a/bridgedhcp
+    install -m755 app/src/thirdparty/bridgedhcp/build/bridgedhcp-linux-amd64   app/src/main/assets/bin/x86_64/bridgedhcp
+}
+
+build_lbx() {
+    if ! command -v cargo >/dev/null 2>&1; then
+        if [ -x app/src/main/assets/bin/arm64-v8a/lbx ]; then
+            warn "cargo not found; reusing the previously-built lbx binaries"
+            return 0
+        fi
+        die "rustup (cargo) is required to build lbx"
+    fi
+    log "Building lbx (android-arm64 + linux-x64)"
+    (cd app/src/thirdparty/linux-boot-extractor && ./build.sh all)
+    install -m755 app/src/thirdparty/linux-boot-extractor/dist/lbx-android-arm64 app/src/main/assets/bin/arm64-v8a/lbx
+    install -m755 app/src/thirdparty/linux-boot-extractor/dist/lbx-linux-x64      app/src/main/assets/bin/x86_64/lbx
+}
+
+build_netbox() {
+    if ! command -v cargo >/dev/null 2>&1; then
+        if [ -x app/src/main/assets/bin/arm64-v8a/netbox ]; then
+            warn "cargo not found; reusing the previously-built netbox binaries"
+            return 0
+        fi
+        die "rustup (cargo) is required to build netbox"
+    fi
+    log "Building netbox (android-arm64 + linux-x64)"
+    (cd app/src/main/rust/netbox && ./build.sh all)
+    install -m755 app/src/main/rust/netbox/dist/netbox-android-arm64 app/src/main/assets/bin/arm64-v8a/netbox
+    install -m755 app/src/main/rust/netbox/dist/netbox-linux-x64     app/src/main/assets/bin/x86_64/netbox
+}
+
+if [ "${SKIP_THIRDPARTY:-0}" = "1" ]; then
+    log "Skipping third-party builds (SKIP_THIRDPARTY=1)"
+    for bin in gvswitch pbridge bridgedhcp lbx netbox; do
+        [ -x "app/src/main/assets/bin/arm64-v8a/$bin" ] || die "app/src/main/assets/bin is missing $bin (run without SKIP_THIRDPARTY once)"
+    done
+else
+    build_gvswitch
+    build_pbridge
+    build_bridgedhcp
+    build_lbx
+    build_netbox
+fi
+
+# --------------------------------------------------------------------- APK
+log "Building APK ($GRADLE_TASK)"
+./gradlew "$GRADLE_TASK"
+
+[ -f "$APK" ] || die "expected APK not found: $APK"
+log "Done: $APK ($(du -h "$APK" | cut -f1))"

From de4e44279be502f934fd81a54289355d20db086f Mon Sep 17 00:00:00 2001
From: HuJK <gh@hujk.org>
Date: Sun, 14 Jun 2026 19:05:03 +0800
Subject: [PATCH 014/182] feat(vm boot): preflight disk compression check

crosvm can't read zlib-compressed qcow2 (guest gets vda I/O errors and no partition table, so any root= hangs). Before starting a crosvm VM, detect compressed qcow2 disks via lbx (new daemon disk_compat handler + BootPlan.hasCompressedClusters) and prompt to convert (decompress in place via DiskOperationActivity, path-mode) then auto-start; no response in 5s = start anyway. URL analysis now uses lbx 'entries --quick' to skip unused per-entry reads. UI: kernel/initrd/cmdline detection fields are read-only but selectable with a copy button; tapping the detected cmdline seeds the (now multiline) override field at the same caret offset.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
---
 .../daemon/ipc/vm/DiskCompatHandler.java      |  42 +++++
 .../classfun/droidvm/daemon/vm/BootPlan.java  |  18 ++
 .../droidvm/lib/ui/CopyableField.java         |  78 ++++++++
 .../disk/operation/DiskOperationActivity.java |  81 +++++++--
 .../droidvm/ui/main/vm/MainVMFragment.java    |  19 +-
 .../cn/classfun/droidvm/ui/vm/VMActions.java  | 169 ++++++++++++++++++
 .../droidvm/ui/vm/boot/BootEntries.java       |   7 +-
 .../ui/vm/edit/boot/VMEditBootTab.java        |  33 ++++
 .../droidvm/ui/vm/info/VMInfoActivity.java    |  18 +-
 .../widgets/tools/KernelAnalysisWidget.java   |   7 +
 app/src/main/res/drawable/ic_content_copy.xml |  10 ++
 .../main/res/layout/partial_vm_edit_boot.xml  |   6 +-
 .../main/res/layout/view_kernel_analysis.xml  |   3 -
 app/src/main/res/values-zh-rCN/strings.xml    |  13 +-
 app/src/main/res/values/strings.xml           |   7 +
 15 files changed, 486 insertions(+), 25 deletions(-)
 create mode 100644 app/src/main/java/cn/classfun/droidvm/daemon/ipc/vm/DiskCompatHandler.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/lib/ui/CopyableField.java
 create mode 100644 app/src/main/res/drawable/ic_content_copy.xml

diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/ipc/vm/DiskCompatHandler.java b/app/src/main/java/cn/classfun/droidvm/daemon/ipc/vm/DiskCompatHandler.java
new file mode 100644
index 000000000..d6805942f
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/ipc/vm/DiskCompatHandler.java
@@ -0,0 +1,42 @@
+package cn.classfun.droidvm.daemon.ipc.vm;
+
+import androidx.annotation.NonNull;
+
+import com.google.auto.service.AutoService;
+
+import org.json.JSONArray;
+
+import cn.classfun.droidvm.daemon.server.ClientRequest;
+import cn.classfun.droidvm.daemon.server.RequestHandler;
+import cn.classfun.droidvm.daemon.vm.BootPlan;
+
+/**
+ * Reports which of the given disk images use qcow2 features the crosvm
+ * backend can't read (zlib-compressed clusters) for the UI's pre-start
+ * guard: such an image boots to a dead end (vda I/O errors, no partition
+ * table, root device never appears). lbx already runs in the daemon for
+ * boot scans, and disk images are usually only readable here, so the check
+ * lives daemon-side. This is never used on the URL-analysis path.
+ */
+@AutoService(RequestHandler.class)
+public final class DiskCompatHandler extends RequestHandler {
+    @NonNull
+    @Override
+    public String getName() {
+        return "disk_compat";
+    }
+
+    @Override
+    public void handle(@NonNull ClientRequest request) throws Exception {
+        var images = request.getParams().optJSONArray("images");
+        var compressed = new JSONArray();
+        if (images != null) {
+            for (int i = 0; i < images.length(); i++) {
+                var path = images.optString(i, "");
+                if (!path.isEmpty() && BootPlan.hasCompressedClusters(path))
+                    compressed.put(path);
+            }
+        }
+        request.res().put("compressed", compressed);
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/vm/BootPlan.java b/app/src/main/java/cn/classfun/droidvm/daemon/vm/BootPlan.java
index ffb3fa4f6..3b6c118ae 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/vm/BootPlan.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/vm/BootPlan.java
@@ -251,6 +251,24 @@ public static JSONArray scanEntries(@NonNull String image) throws IOException {
         }
     }
 
+    /**
+     * Whether {@code image} stores zlib-compressed qcow2 clusters, which the
+     * crosvm backend cannot read: the guest gets I/O errors and an
+     * unreadable partition table, so every {@code root=} form hangs waiting
+     * for a root device that never appears. Runs {@code lbx compat --json};
+     * any lbx failure returns {@code false} so a scan hiccup never blocks a
+     * start (a real boot would surface the problem anyway).
+     */
+    public static boolean hasCompressedClusters(@NonNull String image) {
+        try {
+            var out = runLbx("compat", image, "--json").trim();
+            return new JSONObject(out).optBoolean("compressed_clusters", false);
+        } catch (Exception e) {
+            Log.w(TAG, fmt("compat check failed for %s: %s", image, e.getMessage()));
+            return false;
+        }
+    }
+
     @Nullable
     private static JSONObject matchEntry(
         @NonNull JSONArray entries,
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/ui/CopyableField.java b/app/src/main/java/cn/classfun/droidvm/lib/ui/CopyableField.java
new file mode 100644
index 000000000..f05284041
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/lib/ui/CopyableField.java
@@ -0,0 +1,78 @@
+package cn.classfun.droidvm.lib.ui;
+
+import android.content.ClipData;
+import android.content.ClipboardManager;
+import android.content.Context;
+import android.view.View;
+import android.view.ViewParent;
+import android.widget.EditText;
+import android.widget.Toast;
+
+import androidx.annotation.NonNull;
+import androidx.annotation.Nullable;
+
+import com.google.android.material.textfield.TextInputLayout;
+
+import cn.classfun.droidvm.R;
+
+/**
+ * Helpers for the read-only boot-info fields (kernel / initrd / cmdline /
+ * source). They show values the user may want to copy but not type into, so
+ * each becomes selectable (long-press → Copy) and its enclosing
+ * {@link TextInputLayout} gets a copy end-icon.
+ */
+public final class CopyableField {
+    private CopyableField() {
+    }
+
+    /**
+     * Read-only but selectable (long-press Copy works), plus a copy end-icon.
+     * {@code setTextIsSelectable} alone does <em>not</em> stop an EditText from
+     * being typed into — only dropping the key listener does — so we do both
+     * and suppress the soft keyboard / caret.
+     */
+    public static void setupReadOnly(@NonNull EditText et, @NonNull CharSequence label) {
+        makeReadOnly(et);
+        addCopyIcon(et, label);
+    }
+
+    /** Make an EditText non-editable yet still selectable and copyable. */
+    public static void makeReadOnly(@NonNull EditText et) {
+        et.setKeyListener(null);           // no text input -> not editable
+        et.setTextIsSelectable(true);      // long-press select + Copy
+        et.setCursorVisible(false);
+        et.setShowSoftInputOnFocus(false); // tapping never raises the keyboard
+    }
+
+    /**
+     * Just the copy end-icon — for a field that must stay editable to capture
+     * input (e.g. one that redirects edits elsewhere) yet still offers copy.
+     */
+    public static void addCopyIcon(@NonNull EditText et, @NonNull CharSequence label) {
+        var til = enclosingLayout(et);
+        if (til == null) return;
+        til.setEndIconMode(TextInputLayout.END_ICON_CUSTOM);
+        til.setEndIconDrawable(R.drawable.ic_content_copy);
+        til.setEndIconContentDescription(et.getContext().getString(R.string.field_copy));
+        til.setEndIconOnClickListener(v -> {
+            var t = et.getText();
+            copy(et.getContext(), t == null ? "" : t.toString(), label);
+        });
+    }
+
+    /** Puts {@code text} on the clipboard and confirms with a short toast. */
+    public static void copy(
+        @NonNull Context ctx, @NonNull CharSequence text, @NonNull CharSequence label) {
+        var cm = ctx.getSystemService(ClipboardManager.class);
+        if (cm == null) return;
+        cm.setPrimaryClip(ClipData.newPlainText(label, text));
+        Toast.makeText(ctx, R.string.field_copied, Toast.LENGTH_SHORT).show();
+    }
+
+    @Nullable
+    private static TextInputLayout enclosingLayout(@NonNull View v) {
+        ViewParent p = v.getParent();
+        while (p != null && !(p instanceof TextInputLayout)) p = p.getParent();
+        return (TextInputLayout) p;
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/disk/operation/DiskOperationActivity.java b/app/src/main/java/cn/classfun/droidvm/ui/disk/operation/DiskOperationActivity.java
index 12f09fa9d..34f306370 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/disk/operation/DiskOperationActivity.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/disk/operation/DiskOperationActivity.java
@@ -46,6 +46,11 @@ public final class DiskOperationActivity extends AppCompatActivity {
     private static final String TAG = "DiskOperationActivity";
     public static final String EXTRA_DISK_ID = "disk_id";
     public static final String EXTRA_TASK_JSON = "task_json";
+    /** Path-mode (no registered DiskConfig): operate on this file directly. */
+    public static final String EXTRA_DISK_PATH = "disk_path";
+    public static final String EXTRA_DISK_NAME = "disk_name";
+    /** On success, {@code setResult(RESULT_OK)} and finish so a launcher can chain. */
+    public static final String EXTRA_AUTOFINISH = "autofinish";
     private final Handler mainHandler = new Handler(Looper.getMainLooper());
     private TerminalView terminalView;
     private ProgressBar progressSpinner;
@@ -56,6 +61,7 @@ public final class DiskOperationActivity extends AppCompatActivity {
     private MaterialToolbar toolbar;
     private TerminalSession session;
     private boolean finished = false;
+    private boolean autoFinish = false;
     private String outputPath = null;
     private String taskAction = null;
     private DiskStore diskStore = null;
@@ -91,6 +97,34 @@ public static Intent createIntent(
         return intent;
     }
 
+    /**
+     * Intent that optimizes (and thereby decompresses) the qcow2 at
+     * {@code path} in place and returns {@code RESULT_OK} on success — for
+     * launching via an {@code ActivityResultLauncher} so the caller can chain
+     * (e.g. start the VM once a crosvm-unreadable compressed image is fixed).
+     * Works without a registered {@link DiskConfig}, since a VM disk may point
+     * at an unregistered file.
+     */
+    @NonNull
+    public static Intent optimizeForResultIntent(
+        @NonNull Context context,
+        @NonNull String path,
+        @NonNull String name
+    ) {
+        var intent = new Intent(context, DiskOperationActivity.class);
+        try {
+            var obj = new JSONObject();
+            obj.put("action", "convert"); // no compress -> rewrites uncompressed
+            intent.putExtra(EXTRA_TASK_JSON, obj.toString());
+        } catch (Exception e) {
+            Log.e(TAG, "Failed to build optimize task", e);
+        }
+        intent.putExtra(EXTRA_DISK_PATH, path);
+        intent.putExtra(EXTRA_DISK_NAME, name);
+        intent.putExtra(EXTRA_AUTOFINISH, true);
+        return intent;
+    }
+
     public static void startOptimize(
         @NonNull Context context,
         @NonNull UUID diskId
@@ -150,22 +184,37 @@ public void handleOnBackPressed() {
         var intent = getIntent();
         var diskIdStr = intent.getStringExtra(EXTRA_DISK_ID);
         var taskJsonStr = intent.getStringExtra(EXTRA_TASK_JSON);
-        if (diskIdStr == null || taskJsonStr == null) {
-            Log.e(TAG, "Missing intent extras");
+        autoFinish = intent.getBooleanExtra(EXTRA_AUTOFINISH, false);
+        if (taskJsonStr == null) {
+            Log.e(TAG, "Missing task JSON");
             finish();
             return;
         }
-        var diskId = UUID.fromString(diskIdStr);
         diskStore = new DiskStore();
         diskStore.load(this);
-        diskConfig = diskStore.findById(diskId);
-        if (diskConfig == null) {
-            Log.e(TAG, fmt("Disk not found: %s", diskId));
-            finish();
-            return;
+        final String diskPath;
+        final String diskName;
+        if (diskIdStr != null) {
+            diskConfig = diskStore.findById(UUID.fromString(diskIdStr));
+            if (diskConfig == null) {
+                Log.e(TAG, fmt("Disk not found: %s", diskIdStr));
+                finish();
+                return;
+            }
+            diskPath = diskConfig.getFullPath();
+            diskName = diskConfig.getName();
+        } else {
+            // Path mode: operate on the file directly (no DiskStore entry).
+            diskPath = intent.getStringExtra(EXTRA_DISK_PATH);
+            if (diskPath == null) {
+                Log.e(TAG, "Missing disk id and path");
+                finish();
+                return;
+            }
+            var name = intent.getStringExtra(EXTRA_DISK_NAME);
+            diskName = name != null ? name : basename(diskPath);
         }
-        var diskPath = diskConfig.getFullPath();
-        tvFilename.setText(diskConfig.getName());
+        tvFilename.setText(diskName);
         tvStatus.setText(R.string.disk_operation_running);
         runOnPool(() -> {
             final String cmd;
@@ -204,7 +253,9 @@ private void onProcessFinished() {
         if (finished) return;
         finished = true;
         int exitCode = session == null ? -1 : session.getExitStatus();
-        if (exitCode == 0 && outputPath != null) {
+        // Path mode (no registered DiskConfig) is an in-place op, so there is
+        // nothing to persist — skip the store update.
+        if (exitCode == 0 && outputPath != null && diskConfig != null) {
             if (taskAction.equals("clone")) {
                 var cloned = new DiskConfig();
                 if (outputPath.contains("/")) {
@@ -225,6 +276,14 @@ private void onProcessFinished() {
             }
             diskStore.save(this);
         }
+        // Chained convert (e.g. pre-start decompress): hand control back to the
+        // launcher, which starts the VM. No success screen — the start is the
+        // feedback.
+        if (exitCode == 0 && autoFinish) {
+            setResult(RESULT_OK);
+            finish();
+            return;
+        }
         progressSpinner.setVisibility(GONE);
         ivStatus.setVisibility(VISIBLE);
         btnCancel.setVisibility(GONE);
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/main/vm/MainVMFragment.java b/app/src/main/java/cn/classfun/droidvm/ui/main/vm/MainVMFragment.java
index 68e5f92d3..8a6eed454 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/main/vm/MainVMFragment.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/main/vm/MainVMFragment.java
@@ -8,8 +8,11 @@
 import android.view.MenuItem;
 import android.view.View;
 
+import androidx.activity.result.ActivityResultLauncher;
+import androidx.activity.result.contract.ActivityResultContracts;
 import androidx.annotation.MenuRes;
 import androidx.annotation.NonNull;
+import androidx.annotation.Nullable;
 
 import com.google.android.material.dialog.MaterialAlertDialogBuilder;
 
@@ -34,6 +37,20 @@ public final class MainVMFragment
     extends MainStatefulFragment<VMConfig, VMStore, VMAdapter, VMState>
     implements ForegroundCallback {
     private final AtomicBoolean wantOpenConsole = new AtomicBoolean(false);
+    // Pre-start convert (decompress a crosvm-unreadable qcow2): run this once
+    // the convert Activity returns RESULT_OK.
+    @Nullable
+    private Runnable pendingAfterConvert;
+    private final ActivityResultLauncher<Intent> convertResultLauncher =
+        registerForActivityResult(new ActivityResultContracts.StartActivityForResult(), result -> {
+            var cb = pendingAfterConvert;
+            pendingAfterConvert = null;
+            if (result.getResultCode() == Activity.RESULT_OK && cb != null) cb.run();
+        });
+    private final VMActions.ConvertLauncher convertLauncher = (intent, onConverted) -> {
+        pendingAfterConvert = onConverted;
+        convertResultLauncher.launch(intent);
+    };
 
     public MainVMFragment() {
         super(VMAdapter.class);
@@ -128,7 +145,7 @@ public void onVMStateChanged(UUID vmId, VMState state) {
     @Override
     protected void onActionClicked(VMConfig config, VMState currentState) {
         if (currentState == VMState.STOPPED) {
-            VMActions.createAndStart(config, mainHandler, uiContext, wantOpenConsole);
+            VMActions.createAndStart(config, mainHandler, uiContext, wantOpenConsole, convertLauncher);
         } else if (currentState == VMState.RUNNING) {
             VMActions.sendCommand("vm_stop", config.getId(), mainHandler, uiContext);
         }
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/VMActions.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/VMActions.java
index 7c7d5d0b0..2132aa59d 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/VMActions.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/VMActions.java
@@ -3,26 +3,41 @@
 import static android.widget.Toast.LENGTH_LONG;
 import static cn.classfun.droidvm.lib.Constants.PATH_BUILTIN_INITRD;
 import static cn.classfun.droidvm.lib.Constants.PATH_BUILTIN_KERNEL;
+import static cn.classfun.droidvm.lib.store.enums.Enums.optEnum;
+import static cn.classfun.droidvm.lib.utils.StringUtils.basename;
 import static cn.classfun.droidvm.ui.main.settings.MainSettingsFragment.isAutoConsoleEnabled;
 import static cn.classfun.droidvm.ui.main.settings.MainSettingsFragment.isClearLogsBeforeStartEnabled;
 
 import android.content.Context;
+import android.content.Intent;
+import android.os.CountDownTimer;
 import android.os.Handler;
 import android.util.Log;
 import android.widget.Toast;
 
 import androidx.annotation.NonNull;
 import androidx.annotation.Nullable;
+import androidx.appcompat.app.AlertDialog;
 
+import com.google.android.material.dialog.MaterialAlertDialogBuilder;
+
+import org.json.JSONArray;
+
+import java.util.ArrayList;
+import java.util.List;
 import java.util.UUID;
 import java.util.concurrent.atomic.AtomicBoolean;
 
 import cn.classfun.droidvm.R;
 import cn.classfun.droidvm.lib.daemon.DaemonConnection;
+import cn.classfun.droidvm.lib.store.base.DataItem;
 import cn.classfun.droidvm.lib.store.vm.BootConfig;
+import cn.classfun.droidvm.lib.store.vm.VMBackend;
 import cn.classfun.droidvm.lib.store.vm.VMConfig;
 import cn.classfun.droidvm.lib.store.vm.VMStore;
 import cn.classfun.droidvm.lib.ui.UIContext;
+import cn.classfun.droidvm.ui.disk.create.DiskFormat;
+import cn.classfun.droidvm.ui.disk.operation.DiskOperationActivity;
 import cn.classfun.droidvm.ui.vm.boot.BootMenuDialog;
 
 public final class VMActions {
@@ -31,7 +46,31 @@ public final class VMActions {
     private VMActions() {
     }
 
+    /**
+     * Launches a {@link DiskOperationActivity} convert and runs
+     * {@code onConverted} when it returns {@code RESULT_OK}. The call site
+     * owns an {@code ActivityResultLauncher}; this lets the static start flow
+     * chain a pre-start disk convert without holding an Activity itself.
+     */
+    public interface ConvertLauncher {
+        void launch(@NonNull Intent intent, @NonNull Runnable onConverted);
+    }
+
     public static void createAndStart(
+        @NonNull VMConfig config,
+        @NonNull Handler mainHandler,
+        @NonNull UIContext ui,
+        @NonNull AtomicBoolean wantOpenConsole,
+        @Nullable ConvertLauncher convertLauncher
+    ) {
+        // crosvm can't read compressed qcow2 (the guest gets vda I/O errors
+        // and an unreadable partition table, so any root= hangs). Catch it
+        // before start and offer to convert; everything else starts normally.
+        guardCompressedDisks(config, mainHandler, ui, convertLauncher,
+            () -> startAfterGuard(config, mainHandler, ui, wantOpenConsole));
+    }
+
+    private static void startAfterGuard(
         @NonNull VMConfig config,
         @NonNull Handler mainHandler,
         @NonNull UIContext ui,
@@ -56,6 +95,136 @@ public static void createAndStart(
         doCreateAndStart(config, mainHandler, ui, wantOpenConsole, null);
     }
 
+    /**
+     * Pre-start check: for a crosvm VM with qcow2 disks, ask the daemon
+     * (lbx) which are zlib-compressed and therefore unreadable by crosvm. If
+     * any are, prompt to convert (decompress) them, then {@code proceed};
+     * otherwise {@code proceed} straight away. A check failure never blocks a
+     * start — a real boot would surface the problem. Callbacks arrive on the
+     * daemon thread, so UI work is posted to {@code mainHandler}.
+     */
+    private static void guardCompressedDisks(
+        @NonNull VMConfig config,
+        @NonNull Handler mainHandler,
+        @NonNull UIContext ui,
+        @Nullable ConvertLauncher convertLauncher,
+        @NonNull Runnable proceed
+    ) {
+        if (convertLauncher == null
+            || optEnum(config.item, "backend", VMBackend.DEFAULT) != VMBackend.CROSVM) {
+            proceed.run();
+            return;
+        }
+        var qcow2 = qcow2DiskPaths(config);
+        if (qcow2.isEmpty()) {
+            proceed.run();
+            return;
+        }
+        var images = new JSONArray();
+        for (var p : qcow2) images.put(p);
+        DaemonConnection.getInstance().buildRequest("disk_compat")
+            .put("images", images)
+            .onResponse(resp -> {
+                var compressed = resp.optJSONArray("compressed");
+                if (compressed == null || compressed.length() == 0)
+                    mainHandler.post(proceed);
+                else
+                    mainHandler.post(() ->
+                        promptConvert(config, ui, convertLauncher, compressed, proceed));
+            })
+            .onUnsuccessful(resp -> mainHandler.post(proceed))
+            .onError(e -> {
+                Log.w(TAG, "disk_compat check failed", e);
+                mainHandler.post(proceed);
+            })
+            .invoke();
+    }
+
+    private static void promptConvert(
+        @NonNull VMConfig config,
+        @NonNull UIContext ui,
+        @NonNull ConvertLauncher convertLauncher,
+        @NonNull JSONArray compressed,
+        @NonNull Runnable proceed
+    ) {
+        if (!ui.isAlive()) return;
+        var ctx = ui.getContext();
+        var files = new StringBuilder();
+        for (int i = 0; i < compressed.length(); i++) {
+            var p = compressed.optString(i, "");
+            if (!p.isEmpty()) files.append("\n• ").append(basename(p));
+        }
+        var dialog = new MaterialAlertDialogBuilder(ctx)
+            .setTitle(R.string.vm_compressed_disk_title)
+            .setMessage(ctx.getString(R.string.vm_compressed_disk_message, files.toString()))
+            .setPositiveButton(R.string.vm_compressed_disk_convert,
+                (d, w) -> convertNext(ctx, convertLauncher, compressed, 0, proceed))
+            .setNeutralButton(R.string.vm_compressed_disk_start_anyway, (d, w) -> proceed.run())
+            .setNegativeButton(android.R.string.cancel, null)
+            .create();
+        dialog.show();
+        // No response in 5s = "start anyway" (the chosen default), so an
+        // unattended start isn't blocked; the countdown shows on that button.
+        var startAnyway = dialog.getButton(AlertDialog.BUTTON_NEUTRAL);
+        if (startAnyway != null)
+            startAnyway.setText(ctx.getString(R.string.vm_compressed_disk_start_countdown, 5));
+        var timer = new CountDownTimer(5000, 1000) {
+            @Override
+            public void onTick(long ms) {
+                if (startAnyway != null)
+                    startAnyway.setText(ctx.getString(
+                        R.string.vm_compressed_disk_start_countdown,
+                        (int) Math.ceil(ms / 1000.0)));
+            }
+
+            @Override
+            public void onFinish() {
+                dialog.dismiss();
+                proceed.run();
+            }
+        };
+        // Any interaction (a button tap dismisses the dialog) stops the countdown.
+        dialog.setOnDismissListener(d -> timer.cancel());
+        timer.start();
+    }
+
+    /** Convert each compressed disk in turn, then {@code proceed} to start. */
+    private static void convertNext(
+        @NonNull Context ctx,
+        @NonNull ConvertLauncher convertLauncher,
+        @NonNull JSONArray compressed,
+        int i,
+        @NonNull Runnable proceed
+    ) {
+        if (i >= compressed.length()) {
+            proceed.run();
+            return;
+        }
+        var path = compressed.optString(i, "");
+        if (path.isEmpty()) {
+            convertNext(ctx, convertLauncher, compressed, i + 1, proceed);
+            return;
+        }
+        var intent = DiskOperationActivity.optimizeForResultIntent(ctx, path, basename(path));
+        convertLauncher.launch(intent,
+            () -> convertNext(ctx, convertLauncher, compressed, i + 1, proceed));
+    }
+
+    /** Absolute paths of the VM's qcow2 disks (the ones crosvm reads as blocks). */
+    @NonNull
+    private static List<String> qcow2DiskPaths(@NonNull VMConfig config) {
+        var out = new ArrayList<String>();
+        var disks = config.item.opt("disks", null);
+        if (disks != null && disks.is(DataItem.Type.ARRAY)) {
+            for (var disk : disks.asArray()) {
+                var path = disk.optString("path", "");
+                if (!path.isEmpty() && DiskFormat.fromFilename(path) == DiskFormat.QCOW2)
+                    out.add(path);
+            }
+        }
+        return out;
+    }
+
     /**
      * Persists a "remember this choice" boot-menu selection to the on-disk
      * VM store — the source of truth the list reloads on resume, which is
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/boot/BootEntries.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/boot/BootEntries.java
index 85066a8d5..bcd781cc4 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/boot/BootEntries.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/boot/BootEntries.java
@@ -196,8 +196,13 @@ private static void runAnalyze(
     ) {
         Process process = null;
         try {
+            // --quick: this URL preview only needs the entry list + cmdline +
+            // dma warning, so skip the per-entry kernel size/compression reads
+            // (extra range fetches a listing never uses). The local scan
+            // (vm_bootscan) stays on the full command for BootPlan.
             process = new ProcessBuilder(
-                lbx, "--timeout", String.valueOf(timeoutSecs), "entries", url, "--json"
+                lbx, "--timeout", String.valueOf(timeoutSecs),
+                "entries", url, "--json", "--quick"
             ).start();
             var proc = process;
             // Drain stdout (the JSON) on its own thread so the pipe never
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/boot/VMEditBootTab.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/boot/VMEditBootTab.java
index 75d6f7324..77dfded91 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/boot/VMEditBootTab.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/boot/VMEditBootTab.java
@@ -13,11 +13,13 @@
 import static cn.classfun.droidvm.lib.utils.FileUtils.shellAsyncCheckExists;
 import static cn.classfun.droidvm.lib.utils.StringUtils.resolveUriPath;
 
+import android.content.Context;
 import android.text.Spannable;
 import android.text.SpannableString;
 import android.text.style.ForegroundColorSpan;
 import android.view.MenuItem;
 import android.view.View;
+import android.view.inputmethod.InputMethodManager;
 import android.widget.EditText;
 import android.widget.ImageButton;
 import android.widget.TextView;
@@ -38,6 +40,7 @@
 import cn.classfun.droidvm.lib.store.vm.ProtectedVM;
 import cn.classfun.droidvm.lib.store.vm.VMConfig;
 import cn.classfun.droidvm.lib.store.vm.VMStore;
+import cn.classfun.droidvm.lib.ui.CopyableField;
 import cn.classfun.droidvm.lib.ui.IconItemAdapter;
 import cn.classfun.droidvm.lib.ui.MenuDialogBuilder;
 import cn.classfun.droidvm.ui.vm.boot.BootEntries;
@@ -121,6 +124,15 @@ public void initView() {
         inputKernel = view.findViewById(R.id.input_kernel);
         inputInitrd = view.findViewById(R.id.input_initrd);
         inputCmdline = view.findViewById(R.id.input_cmdline);
+        // Detection fields are read-only: selectable (long-press Copy) + a copy
+        // end-icon, never editable. Tapping the cmdline (intent to edit it)
+        // seeds the override field below and jumps the caret there.
+        CopyableField.setupReadOnly(etDetectKernel, parent.getString(R.string.edit_vm_boot_detect_kernel));
+        CopyableField.setupReadOnly(etDetectInitrd, parent.getString(R.string.edit_vm_boot_detect_initrd));
+        CopyableField.setupReadOnly(etDetectSource, parent.getString(R.string.edit_vm_boot_detect_source));
+        CopyableField.setupReadOnly(etDetectCmdline, parent.getString(R.string.edit_vm_boot_detect_cmdline));
+        etDetectCmdline.setOnClickListener(
+            v -> redirectCmdlineEditToOverride(etDetectCmdline.getSelectionStart()));
     }
 
     @Override
@@ -424,6 +436,27 @@ private void setDetectFields(
         etDetectSource.setText(source);
     }
 
+    /**
+     * The detected cmdline is read-only; tapping it (intent to edit) seeds the
+     * override field with the same text and moves the caret to the tapped
+     * offset, so customizing continues seamlessly in the editable override.
+     * Long-press still selects/copies (it doesn't fire the click).
+     */
+    private void redirectCmdlineEditToOverride(int caret) {
+        var t = etDetectCmdline.getText();
+        var detected = t == null ? "" : t.toString();
+        // Seed the override from the preview only when it has no edits yet, so
+        // re-tapping the preview never clobbers an existing customization.
+        var ov = etCmdlineOverride.getText();
+        if (ov == null || ov.length() == 0)
+            etCmdlineOverride.setText(detected);
+        etCmdlineOverride.requestFocus();
+        etCmdlineOverride.setSelection(Math.max(0, Math.min(caret, etCmdlineOverride.length())));
+        var imm = (InputMethodManager) parent.getSystemService(Context.INPUT_METHOD_SERVICE);
+        if (imm != null)
+            imm.showSoftInput(etCmdlineOverride, InputMethodManager.SHOW_IMPLICIT);
+    }
+
     private void updateDetectionCard() {
         var entries = scanned;
         if (entries == null) return;
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/info/VMInfoActivity.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/info/VMInfoActivity.java
index 0bc38a88e..bfa1be85a 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/info/VMInfoActivity.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/info/VMInfoActivity.java
@@ -21,6 +21,8 @@
 import android.widget.TextView;
 import android.widget.Toast;
 
+import androidx.activity.result.ActivityResultLauncher;
+import androidx.activity.result.contract.ActivityResultContracts;
 import androidx.annotation.NonNull;
 import androidx.annotation.Nullable;
 import androidx.appcompat.app.AlertDialog;
@@ -63,6 +65,20 @@ public final class VMInfoActivity extends AppCompatActivity implements Foregroun
     private final UIContext ui = UIContext.fromActivity(this);
     private final Handler mainHandler = new Handler(Looper.getMainLooper());
     private final AtomicBoolean wantOpenConsole = new AtomicBoolean(false);
+    // Pre-start convert (decompress a crosvm-unreadable qcow2): run this once
+    // the convert Activity returns RESULT_OK.
+    @Nullable
+    private Runnable pendingAfterConvert;
+    private final ActivityResultLauncher<Intent> convertResultLauncher =
+        registerForActivityResult(new ActivityResultContracts.StartActivityForResult(), result -> {
+            var cb = pendingAfterConvert;
+            pendingAfterConvert = null;
+            if (result.getResultCode() == RESULT_OK && cb != null) cb.run();
+        });
+    private final VMActions.ConvertLauncher convertLauncher = (intent, onConverted) -> {
+        pendingAfterConvert = onConverted;
+        convertResultLauncher.launch(intent);
+    };
     private final ConsoleButton toolConsole = new ConsoleButton(this);
     private VMState oldState = VMState.STOPPED;
     private CollapsingToolbarLayout collapsingToolbar;
@@ -410,7 +426,7 @@ private void onSuspendResumeClicked() {
 
     private void doStart() {
         if (config == null) return;
-        VMActions.createAndStart(config, mainHandler, ui, wantOpenConsole);
+        VMActions.createAndStart(config, mainHandler, ui, wantOpenConsole, convertLauncher);
     }
 
     private void doStop() {
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/widgets/tools/KernelAnalysisWidget.java b/app/src/main/java/cn/classfun/droidvm/ui/widgets/tools/KernelAnalysisWidget.java
index 93b261411..97c63249c 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/widgets/tools/KernelAnalysisWidget.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/widgets/tools/KernelAnalysisWidget.java
@@ -23,6 +23,7 @@
 import java.util.ArrayList;
 
 import cn.classfun.droidvm.R;
+import cn.classfun.droidvm.lib.ui.CopyableField;
 import cn.classfun.droidvm.lib.ui.IconItemAdapter;
 import cn.classfun.droidvm.ui.vm.boot.BootEntries;
 import cn.classfun.droidvm.ui.widgets.row.DropdownRowWidget;
@@ -89,6 +90,12 @@ private void init() {
         etKernel = findViewById(R.id.et_analysis_kernel);
         etInitrd = findViewById(R.id.et_analysis_initrd);
         etCmdline = findViewById(R.id.et_analysis_cmdline);
+        // Cloud-analysis fields are read-only: selectable (long-press Copy) with
+        // a copy end-icon, never editable.
+        var ctx = getContext();
+        CopyableField.setupReadOnly(etKernel, ctx.getString(R.string.edit_vm_boot_detect_kernel));
+        CopyableField.setupReadOnly(etInitrd, ctx.getString(R.string.edit_vm_boot_detect_initrd));
+        CopyableField.setupReadOnly(etCmdline, ctx.getString(R.string.edit_vm_boot_detect_cmdline));
         btnAnalyze.setOnClickListener(v -> analyze());
     }
 
diff --git a/app/src/main/res/drawable/ic_content_copy.xml b/app/src/main/res/drawable/ic_content_copy.xml
new file mode 100644
index 000000000..4227c21ec
--- /dev/null
+++ b/app/src/main/res/drawable/ic_content_copy.xml
@@ -0,0 +1,10 @@
+<vector xmlns:android="http://schemas.android.com/apk/res/android"
+    android:width="24dp"
+    android:height="24dp"
+    android:viewportWidth="24"
+    android:viewportHeight="24"
+    android:tint="?attr/colorControlNormal">
+    <path
+        android:fillColor="@android:color/white"
+        android:pathData="M16,1H4C2.9,1 2,1.9 2,3v14h2V3h12V1zM19,5H8C6.9,5 6,5.9 6,7v14c0,1.1 0.9,2 2,2h11c1.1,0 2,-0.9 2,-2V7C21,5.9 20.1,5 19,5zM19,21H8V7h11V21z" />
+</vector>
diff --git a/app/src/main/res/layout/partial_vm_edit_boot.xml b/app/src/main/res/layout/partial_vm_edit_boot.xml
index cf6bad958..47a7f6bef 100644
--- a/app/src/main/res/layout/partial_vm_edit_boot.xml
+++ b/app/src/main/res/layout/partial_vm_edit_boot.xml
@@ -139,7 +139,6 @@
                             android:id="@+id/et_detect_kernel"
                             android:layout_width="match_parent"
                             android:layout_height="wrap_content"
-                            android:enabled="false"
                             android:inputType="text"
                             android:maxLines="1"
                             android:textSize="14sp"
@@ -168,7 +167,6 @@
                             android:id="@+id/et_detect_initrd"
                             android:layout_width="match_parent"
                             android:layout_height="wrap_content"
-                            android:enabled="false"
                             android:inputType="text"
                             android:maxLines="1"
                             android:textSize="14sp"
@@ -186,7 +184,6 @@
                             android:id="@+id/et_detect_cmdline"
                             android:layout_width="match_parent"
                             android:layout_height="wrap_content"
-                            android:enabled="false"
                             android:inputType="textMultiLine"
                             android:textSize="14sp"
                             tools:ignore="TextContrastCheck,VisualLintTextFieldSize" />
@@ -225,7 +222,7 @@
                             android:id="@+id/et_cmdline_override"
                             android:layout_width="match_parent"
                             android:layout_height="wrap_content"
-                            android:inputType="text"
+                            android:inputType="textMultiLine"
                             android:textSize="14sp"
                             tools:ignore="TextContrastCheck,VisualLintTextFieldSize" />
                     </com.google.android.material.textfield.TextInputLayout>
@@ -241,7 +238,6 @@
                             android:id="@+id/et_detect_source"
                             android:layout_width="match_parent"
                             android:layout_height="wrap_content"
-                            android:enabled="false"
                             android:inputType="text"
                             android:maxLines="1"
                             android:textSize="14sp"
diff --git a/app/src/main/res/layout/view_kernel_analysis.xml b/app/src/main/res/layout/view_kernel_analysis.xml
index f87f6c20b..3977bbe1f 100644
--- a/app/src/main/res/layout/view_kernel_analysis.xml
+++ b/app/src/main/res/layout/view_kernel_analysis.xml
@@ -92,7 +92,6 @@
                     android:id="@+id/et_analysis_kernel"
                     android:layout_width="match_parent"
                     android:layout_height="wrap_content"
-                    android:enabled="false"
                     android:inputType="text"
                     android:maxLines="1"
                     android:textSize="14sp"
@@ -121,7 +120,6 @@
                     android:id="@+id/et_analysis_initrd"
                     android:layout_width="match_parent"
                     android:layout_height="wrap_content"
-                    android:enabled="false"
                     android:inputType="text"
                     android:maxLines="1"
                     android:textSize="14sp"
@@ -139,7 +137,6 @@
                     android:id="@+id/et_analysis_cmdline"
                     android:layout_width="match_parent"
                     android:layout_height="wrap_content"
-                    android:enabled="false"
                     android:inputType="textMultiLine"
                     android:textSize="14sp"
                     tools:ignore="TextContrastCheck,VisualLintTextFieldSize" />
diff --git a/app/src/main/res/values-zh-rCN/strings.xml b/app/src/main/res/values-zh-rCN/strings.xml
index febfca891..07d00a40f 100644
--- a/app/src/main/res/values-zh-rCN/strings.xml
+++ b/app/src/main/res/values-zh-rCN/strings.xml
@@ -224,7 +224,7 @@
     <string name="edit_vm_net_delete">移除网络</string>
     <string name="edit_vm_net_mac_hint">MAC 地址（可选）</string>
     <string name="edit_vm_net_mac_random">随机</string>
-    <string name="edit_vm_net_mac_security">源 MAC 過濾</string>
+    <string name="edit_vm_net_mac_security">源 MAC 过滤</string>
     <string name="edit_vm_net_isolated">端口隔离</string>
     <string name="edit_vm_net_vlan">VLAN ID</string>
     <string name="edit_vm_net_vlan_id">VLAN</string>
@@ -363,6 +363,13 @@
     <string name="license_detail_urls">链接</string>
 
     <string name="vm_daemon_error">与守护进程通信失败。</string>
+    <string name="vm_compressed_disk_title">压缩的磁盘镜像</string>
+    <string name="vm_compressed_disk_message">crosvm 无法读取压缩的 qcow2 镜像——启动时会出现磁盘 I/O 错误且找不到分区表。要先转换成非压缩再启动吗？\n%1$s</string>
+    <string name="vm_compressed_disk_convert">转换并启动</string>
+    <string name="vm_compressed_disk_start_anyway">仍要启动</string>
+    <string name="vm_compressed_disk_start_countdown">仍要启动 (%1$d)</string>
+    <string name="field_copy">复制</string>
+    <string name="field_copied">已复制到剪贴板</string>
 
     <string name="disk_icon_desc">磁盘图标</string>
     <string name="disk_meta">空间 %1$s \u00B7 实际 %2$s \u00B7 %3$s</string>
@@ -622,8 +629,8 @@
     <string name="download_paused_wifi">已暂停，等待 Wi-Fi…</string>
     <string name="download_retrying">连接中断，重试中 (%1$d/%2$d)…</string>
     <string name="download_one_at_a_time">已有下载正在进行，请等待完成。</string>
-    <string name="download_background_toast">下载将在后台继续，可在通知栏查看。</string>    <string name="download_error_start">无法开始下载，请确认系统下载管理器已启用。</string>
-
+    <string name="download_background_toast">下载将在后台继续，可在通知栏查看。</string>
+    <string name="download_error_start">无法开始下载，请确认系统下载管理器已启用。</string>
     <string name="notif_channel_downloads">下载</string>
     <string name="notif_channel_downloads_desc">磁盘镜像下载通知</string>
     <string name="notif_download_complete_title">导入完成</string>
diff --git a/app/src/main/res/values/strings.xml b/app/src/main/res/values/strings.xml
index 5e8280518..7fa44eef9 100644
--- a/app/src/main/res/values/strings.xml
+++ b/app/src/main/res/values/strings.xml
@@ -399,6 +399,13 @@
     <string name="key_f12" translatable="false">F12</string>
 
     <string name="vm_daemon_error">Failed to communicate with daemon.</string>
+    <string name="vm_compressed_disk_title">Compressed disk image</string>
+    <string name="vm_compressed_disk_message">crosvm can\'t read compressed qcow2 images — the VM would boot to disk I/O errors with no partition table. Convert it to uncompressed and start?\n%1$s</string>
+    <string name="vm_compressed_disk_convert">Convert &amp; start</string>
+    <string name="vm_compressed_disk_start_anyway">Start anyway</string>
+    <string name="vm_compressed_disk_start_countdown">Start anyway (%1$d)</string>
+    <string name="field_copy">Copy</string>
+    <string name="field_copied">Copied to clipboard</string>
 
     <string name="disk_icon_desc">Disk icon</string>
     <string name="disk_meta">%1$s space \u00B7 %2$s on disk \u00B7 %3$s</string>

From 102d74ee0a5ffbec5f1a3a2cffde1152ad994440 Mon Sep 17 00:00:00 2001
From: HuJK <gh@hujk.org>
Date: Mon, 15 Jun 2026 10:18:49 +0800
Subject: [PATCH 015/182] fix(source code)remove non-ascii code

---
 app/build.gradle.kts                          |  4 +--
 .../daemon/network/backend/BridgeDhcp.java    |  8 +++---
 .../network/backend/DefaultRouterWatcher.java |  6 ++---
 .../network/backend/FirewallHelper.java       |  2 +-
 .../network/backend/LinuxBridgeBackend.java   | 18 ++++++-------
 .../daemon/network/backend/LinuxNetwork.java  |  2 +-
 .../network/backend/ManagedProcess.java       |  2 +-
 .../daemon/network/backend/Netbox.java        |  2 +-
 .../network/backend/UplinkResolver.java       |  4 +--
 .../backend/gvisor/GvisorBridgeBackend.java   |  2 +-
 .../classfun/droidvm/daemon/vm/BootPlan.java  |  8 +++---
 .../lib/download/DiskDownloadManager.java     |  6 ++---
 .../lib/download/DiskDownloadService.java     |  6 ++---
 .../lib/store/network/NetworkConfig.java      |  2 +-
 .../droidvm/lib/store/vm/BootConfig.java      |  6 ++---
 .../droidvm/lib/store/vm/VMConfig.java        |  2 +-
 .../droidvm/lib/store/vm/VMNicConfig.java     |  6 ++---
 .../droidvm/lib/ui/CopyableField.java         |  6 ++---
 .../ui/disk/lxc/ImportLxcImagesActivity.java  |  2 +-
 .../disk/operation/DiskOperationActivity.java |  6 ++---
 .../ui/network/info/NetworkInfoActivity.java  |  4 +--
 .../cn/classfun/droidvm/ui/vm/VMActions.java  |  8 +++---
 .../droidvm/ui/vm/boot/BootEntries.java       |  4 +--
 .../droidvm/ui/vm/boot/BootMenuDialog.java    |  6 ++---
 .../ui/vm/edit/boot/VMEditBootTab.java        |  6 ++---
 .../ui/vm/edit/network/VMNetEditAdapter.java  |  2 +-
 .../droidvm/ui/vm/info/VMInfoActivity.java    |  2 +-
 .../ui/widgets/tools/DownloadWidget.java      |  4 +--
 .../widgets/tools/KernelAnalysisWidget.java   |  2 +-
 .../main/res/layout/view_kernel_analysis.xml  |  2 +-
 app/src/main/res/values/strings.xml           | 26 +++++++++----------
 app/src/main/rust/netbox/Cargo.toml           |  2 +-
 app/src/main/rust/netbox/build.sh             |  2 +-
 app/src/main/rust/netbox/src/main.rs          | 10 +++----
 app/src/main/rust/netbox/src/nl.rs            | 10 +++----
 app/src/main/rust/netbox/src/tap.rs           |  6 ++---
 .../lib/store/network/VlanConfigPdTest.java   |  2 +-
 37 files changed, 99 insertions(+), 99 deletions(-)

diff --git a/app/build.gradle.kts b/app/build.gradle.kts
index da565c190..2c6824937 100644
--- a/app/build.gradle.kts
+++ b/app/build.gradle.kts
@@ -99,7 +99,7 @@ android {
         jniLibs {
             // Extract native libs to a real on-disk dir so lbx (shipped as
             // liblbx.so) is an executable file the app can run from its own
-            // nativeLibraryDir — no root, no daemon needed for a URL fetch.
+            // nativeLibraryDir -- no root, no daemon needed for a URL fetch.
             useLegacyPackaging = true
         }
     }
@@ -140,7 +140,7 @@ abstract class CopyNativeBinAssetsTask : DefaultTask() {
 }
 
 // Ship lbx as `liblbx.so` in jniLibs so the (non-root) UI process can exec it
-// from its nativeLibraryDir — the data-dir copy used by the daemon isn't
+// from its nativeLibraryDir -- the data-dir copy used by the daemon isn't
 // executable by the app's untrusted_app SELinux domain.
 abstract class CopyLbxJniLibsTask : DefaultTask() {
     @get:InputDirectory
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/BridgeDhcp.java b/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/BridgeDhcp.java
index 44d455611..6aa66ecfe 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/BridgeDhcp.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/BridgeDhcp.java
@@ -240,7 +240,7 @@ public JSONArray getPdStatus() {
                     // the raw delegation P/L (context) ...
                     .put("prefix", iface.optString("pd_prefix", ""))
                     // ... and the composed host address P::1/L actually bound
-                    // on the bridge — what the UI shows and what the address
+                    // on the bridge -- what the UI shows and what the address
                     // union deduplicates against.
                     .put("address", iface.optString("pd_address", "")));
             } catch (Exception e) {
@@ -304,7 +304,7 @@ private JSONObject buildIface(@NonNull VlanConfig vlan) throws Exception {
         var obj = new JSONObject();
         obj.put("name", LinuxNetwork.vlanDevice(br, vlan.getVlanId()));
         obj.put("tag", String.valueOf(vlan.getVlanId()));
-        // Served prefixes are authoritative config — bridgedhcp no longer
+        // Served prefixes are authoritative config -- bridgedhcp no longer
         // derives the pools/SLAAC prefix from the bridge's live addresses.
         // v6 is sent only for a static source; DHCP-PD drives it dynamically.
         var cidr4 = vlan.getIpv4Cidr();
@@ -352,7 +352,7 @@ private JSONObject buildIface(@NonNull VlanConfig vlan) throws Exception {
                 // CRC32 is an unsigned 32-bit value; write it as-is. Casting
                 // to int makes it negative when bit 31 is set, and bridgedhcp
                 // parses "iaid" into a Go uint32, which rejects a negative
-                // number — the whole helper then fails to start.
+                // number -- the whole helper then fails to start.
                 // No prefix_len: bridgedhcp binds the host at the delegation's
                 // own length L (suffix ::1), and gates SLAAC/DHCPv6 on L.
                 obj.put("pd", new JSONObject()
@@ -424,7 +424,7 @@ private JSONArray[] buildStatics(@NonNull VlanConfig vlan) throws Exception {
      * present, else the lowest id from PD_ROUTE_TABLE_BASE upward that no
      * VLAN of any network (running or stopped) holds, persisted
      * immediately. Stability matters: the id is bridgedhcp's crash-cleanup
-     * key — a bridge that comes back under a different id would leave the
+     * key -- a bridge that comes back under a different id would leave the
      * previous run's rules behind, and reusing a *live* network's id would
      * wipe its rules at startup.
      */
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/DefaultRouterWatcher.java b/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/DefaultRouterWatcher.java
index 4c01ec4bc..955f1fb0f 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/DefaultRouterWatcher.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/DefaultRouterWatcher.java
@@ -27,7 +27,7 @@ public final class DefaultRouterWatcher {
      * reachable IPs for port-forward DNAT scoping: Wi-Fi, cellular, VPN,
      * ethernet, and hotspot/USB/BT tethering. Passed to netbox, which also
      * drops bridge devices and pbridge-offload addresses. Cellular names other
-     * than rmnet_data (ccmni, pdp_ip…) are intentionally not matched — same
+     * than rmnet_data (ccmni, pdp_ip...) are intentionally not matched -- same
      * assumption the iptables EXT_IFACES list already makes.
      */
     private static final List<String> HOST_IFACE_PREFIXES = List.of(
@@ -85,9 +85,9 @@ private void ruleAdd(boolean ipv6, @NonNull String dev, @NonNull String table) {
      * (the egress half of guest routing: forwarded packets carry no fwmark
      * and Android's netd rules end in "from all unreachable", so each
      * bridge needs an explicit rule into the default network's table).
-     * Declarative per tick: deletes stale rules — wrong table, duplicates
+     * Declarative per tick: deletes stale rules -- wrong table, duplicates
      * (added twice across restarts) and [detached] leftovers from a
-     * recreated bridge — and adds what is missing. Stale-rule deletion by
+     * recreated bridge -- and adds what is missing. Stale-rule deletion by
      * spec may remove either twin first; the next tick converges.
      */
     private void reconcileRules(boolean ipv6, @Nullable String table) {
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/FirewallHelper.java b/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/FirewallHelper.java
index b46e54182..8f0e5d280 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/FirewallHelper.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/FirewallHelper.java
@@ -41,7 +41,7 @@ public abstract boolean removeForwardBase(
 
     /**
      * Installs one DNAT rule scoped to a specific host IP ({@code -d hostIp}),
-     * so only traffic actually destined to the phone is redirected — transit
+     * so only traffic actually destined to the phone is redirected -- transit
      * traffic (other networks, tethered clients) is left alone. Called once
      * per current host IP; rules are added/removed incrementally as the host
      * IP set changes.
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/LinuxBridgeBackend.java b/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/LinuxBridgeBackend.java
index 8a38f787e..c9d08dcf2 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/LinuxBridgeBackend.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/LinuxBridgeBackend.java
@@ -149,7 +149,7 @@ private void startL3() {
         // the main bridge. Access ports attach to the per-VLAN bridge,
         // trunk ports to the main bridge; L3 lives on the per-VLAN bridge.
         // VLAN 0 is the untagged domain: its L3 lives directly on the main
-        // bridge (no per-VLAN bridge, no VID-0 leg — that would only catch
+        // bridge (no per-VLAN bridge, no VID-0 leg -- that would only catch
         // priority-tagged frames, not untagged traffic).
         //
         // These bridges and legs face the VMs, so harden them as a router's
@@ -225,7 +225,7 @@ private synchronized void snapshotPdUplinks() {
 
     /**
      * Reloads bridgedhcp when a DHCP-PD VLAN's uplink now resolves to a
-     * different device than the running config has — most importantly when it
+     * different device than the running config has -- most importantly when it
      * was unresolved at start (so PD was skipped) and the interface (e.g.
      * Wi-Fi) has since come up. A still-unresolved uplink is left alone: a
      * running PD client already retries on its own. Invoked on host-network
@@ -254,7 +254,7 @@ private synchronized void reconcilePdUplinks() {
     /**
      * PD event from bridgedhcp: the helper already plumbed the address on
      * the per-VLAN bridge (and DHCPv6/RA follow it automatically); what is
-     * left is the host side — firewall accept rules for the delegated
+     * left is the host side -- firewall accept rules for the delegated
      * subnet and the policy-routing entries for return traffic.
      */
     private synchronized void onPdAddressChanged(int vlanId, @Nullable IPv6Network address) {
@@ -383,7 +383,7 @@ private synchronized void ensureVlanBridge(int vid) {
      * The bridge a NIC's tap attaches to: a trunk port (no VLAN id / the
      * 4095 marker) or any non-L3 network joins the main bridge; a tagged
      * access port joins its VLAN's per-VLAN bridge. VLAN 0 (untagged-only)
-     * ports don't exist on a Linux bridge — validation rejects them, since
+     * ports don't exist on a Linux bridge -- validation rejects them, since
      * without VLAN filtering they could only behave as trunks.
      */
     @NonNull
@@ -510,15 +510,15 @@ public JSONArray listAddresses() {
     }
 
     /**
-     * One row per address with three dimensions — VLAN, bound/unbound,
-     * configured/auto — over the union, in every mode, of every address the
+     * One row per address with three dimensions -- VLAN, bound/unbound,
+     * configured/auto -- over the union, in every mode, of every address the
      * network carries: the live addresses on each bridge device (the main
      * bridge = VLAN 0, every per-VLAN bridge = its VID) and every configured
      * CIDR. A configured address that is also live appears once (configured +
      * bound); a configured one not yet on a device is configured + unbound; a
      * live one with no config is auto (link-local, RA, the L2 uplink mirror
      * pbridge parks on the main bridge, ...). The main bridge is always
-     * scanned — including L2/none mode, where it is the only device and carries
+     * scanned -- including L2/none mode, where it is the only device and carries
      * that mirror; per-VLAN bridges include on-demand ones, not just configured.
      */
     @NonNull
@@ -531,7 +531,7 @@ public JSONArray listAddressEntries() {
         for (var vlan : inst.getVlans())
             configured.put(vlan.getVlanId(), configuredCidrs(vlan));
         // Every VID whose L3 device may carry addresses, in a stable order:
-        // VLAN 0 (the main bridge, always — the L2 mirror lands here), the
+        // VLAN 0 (the main bridge, always -- the L2 mirror lands here), the
         // configured VLANs in config order, then any on-demand per-VLAN bridge.
         var vids = new java.util.LinkedHashSet<Integer>();
         vids.add(0);
@@ -561,7 +561,7 @@ public JSONArray listAddressEntries() {
         // L2 pseudo-bridge: pbridge parks each learned guest address on the
         // uplink tagged with the offload magic (so the Wi-Fi firmware answers
         // ARP/NS for them). Those tagged addresses are exactly the pseudo-
-        // bridged guests' IPs — surface them under their own source; the metric
+        // bridged guests' IPs -- surface them under their own source; the metric
         // filter drops the host's own (untagged) uplink addresses.
         if (pbridge != null && resolvedUplink != null) {
             var guests = net.listAddresses(resolvedUplink, Constants.PBRIDGE_OFFLOAD_MAGIC);
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/LinuxNetwork.java b/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/LinuxNetwork.java
index 2cf5d1449..0ae109da8 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/LinuxNetwork.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/LinuxNetwork.java
@@ -84,7 +84,7 @@ public static String perVlanBridge(@NonNull String bridge, int vid) {
     /**
      * The device carrying a VLAN's L3. VLAN 0 is the untagged domain: its
      * traffic lives on the main bridge itself (the IP stack has no trunk
-     * semantics — untagged frames are simply what the bridge device sees),
+     * semantics -- untagged frames are simply what the bridge device sees),
      * so no per-VLAN bridge and no 802.1q leg exist for it. An 802.1q
      * subinterface with VID 0 would receive only priority-tagged frames,
      * never the untagged traffic it is meant to serve.
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/ManagedProcess.java b/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/ManagedProcess.java
index c756d4e2e..9aae3542c 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/ManagedProcess.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/ManagedProcess.java
@@ -51,7 +51,7 @@ public void setOnUnexpectedExit(@Nullable Runnable callback) {
 
     /**
      * Receives every output line from the monitor thread (in addition to
-     * logging) — used for child event streams (e.g. bridgedhcp JSON lines).
+     * logging) -- used for child event streams (e.g. bridgedhcp JSON lines).
      */
     public void setLineListener(@Nullable LineListener listener) {
         lineListener = listener;
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/Netbox.java b/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/Netbox.java
index 7f68754c3..ba5bc25ac 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/Netbox.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/Netbox.java
@@ -22,7 +22,7 @@
  * The single entry point for every netlink operation the daemon performs.
  *
  * <p>The daemon used to shell out to the system {@code ip}/{@code bridge}
- * (iproute2), which vary per OEM — some are too old to even emit
+ * (iproute2), which vary per OEM -- some are too old to even emit
  * {@code IFA_RT_PRIORITY} in {@code -j} JSON, the field pbridge tags its
  * offload-proxy addresses with. {@code netbox} is our bundled, static Rust tool
  * that does the same operations straight over rtnetlink with a fixed JSON
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/UplinkResolver.java b/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/UplinkResolver.java
index 3557d9909..8a3db6c4b 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/UplinkResolver.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/UplinkResolver.java
@@ -18,7 +18,7 @@
 /**
  * Enumerates host L2 uplink candidates and resolves the logical
  * "WiFi"/"Ethernet"/"Tethering" identifiers to a concrete interface at
- * network start: device names drift across reboots (wlan0 ⇄ wlan1), so the
+ * network start: device names drift across reboots (wlan0 <-> wlan1), so the
  * identifier is stored and re-resolved live; a literal interface name is
  * pinned and used as-is.
  */
@@ -82,7 +82,7 @@ private static List<Iface> scan() {
                 || new File(entry, "wireless").exists();
             boolean physical = new File(entry, "device").exists();
             boolean ether = readInt(new File(entry, "type")) == ARPHRD_ETHER;
-            // leaf = not stacked on another netdev (drops veth/vlan/rmnet_data@…)
+            // leaf = not stacked on another netdev (drops veth/vlan/rmnet_data@...)
             boolean leaf = readInt(new File(entry, "ifindex"))
                 == readInt(new File(entry, "iflink"));
             out.add(new Iface(name, wireless, isUp(entry), ether,
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/gvisor/GvisorBridgeBackend.java b/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/gvisor/GvisorBridgeBackend.java
index 87072d579..b309830c9 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/gvisor/GvisorBridgeBackend.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/gvisor/GvisorBridgeBackend.java
@@ -225,7 +225,7 @@ private void removeStaticLeases(@NonNull VMNicConfig nic, @NonNull String tapNam
 
     /**
      * Installs this NIC's port forwards one at a time so a single bind
-     * failure (host port already in use — gvswitch local forwards listen
+     * failure (host port already in use -- gvswitch local forwards listen
      * on the host) only drops that one rule. Successfully installed refs
      * are recorded per tap so detach removes exactly what this NIC added;
      * failures are surfaced via network_info.
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/vm/BootPlan.java b/app/src/main/java/cn/classfun/droidvm/daemon/vm/BootPlan.java
index 3b6c118ae..ed161591e 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/vm/BootPlan.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/vm/BootPlan.java
@@ -37,7 +37,7 @@
  * reads) and then a content MD5 of each source file, so an in-place
  * kernel rebuild that kept the same path and size is still caught. The
  * MD5 reads the source kernel/initrd out of the image, so a cache hit is
- * no longer read-free — but it only happens once the metadata check has
+ * no longer read-free -- but it only happens once the metadata check has
  * matched, and a hit still writes nothing.
  *
  * <p>A distro {@code vmlinuz} is often a compressed kernel a direct-boot
@@ -45,7 +45,7 @@
  * {@code lbx entries} reports this per entry as {@code kernel_compression}
  * (null = already a raw {@code Image}/x86 bzImage); when set we extract and
  * MD5 the <em>decompressed</em> kernel ({@code lbx cp/md5 --decompress}) so
- * the cached file boots directly. lbx stays faithful by default — the flag
+ * the cached file boots directly. lbx stays faithful by default -- the flag
  * is only passed for a kernel lbx flagged as compressed, never the initrd.
  */
 public final class BootPlan {
@@ -357,8 +357,8 @@ && cacheUpToDate(image, entry, manifest)) {
 
     /**
      * Whether the cache described by {@code manifest} still reflects the
-     * guest. Cheap identity first — image, URIs and sizes, all from inode
-     * metadata with no data reads — then a content MD5 of each source file
+     * guest. Cheap identity first -- image, URIs and sizes, all from inode
+     * metadata with no data reads -- then a content MD5 of each source file
      * via {@code lbx md5}. The MD5 is what catches an in-place kernel
      * rebuild that kept the same path and byte size; it reads the source
      * kernel/initrd out of the image, so it only runs once the metadata
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/download/DiskDownloadManager.java b/app/src/main/java/cn/classfun/droidvm/lib/download/DiskDownloadManager.java
index 1bc6dc6c7..f5547a95d 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/download/DiskDownloadManager.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/download/DiskDownloadManager.java
@@ -31,7 +31,7 @@
  * {@link HttpURLConnection} (following redirects, resuming via HTTP Range, and
  * retrying on read timeouts / dropped connections) instead of the system
  * DownloadManager, whose OEM variants either reject app-private destinations or
- * time out aggressively without resuming on this CDN — while plain `curl` works.
+ * time out aggressively without resuming on this CDN -- while plain `curl` works.
  *
  * <p>Because the app holds MANAGE_EXTERNAL_STORAGE we write straight to the
  * user's folder (a {@code .part} file, renamed on completion). State lives in an
@@ -45,7 +45,7 @@ public final class DiskDownloadManager {
     private static final int CONNECT_TIMEOUT_MS = 30000;
     private static final int READ_TIMEOUT_MS = 30000;
     private static final int BUFFER = 65536;
-    /** Abort + retry if throughput drops below ~0.7 KB/s over this window — i.e.
+    /** Abort + retry if throughput drops below ~0.7 KB/s over this window -- i.e.
      * all but stopped (catches a mirror that holds the connection open but sends
      * almost nothing); genuinely slow-but-moving connections are left alone. */
     private static final long STALL_WINDOW_MS = 1500;
@@ -237,7 +237,7 @@ static void runDownload(@NonNull Context context, long id) {
             var parent = dest.getParentFile();
             if (parent != null && !parent.exists() && !parent.mkdirs())
                 throw new IOException(fmt("Cannot create folder: %s", parent.getAbsolutePath()));
-            // Start fresh — stale .part from a prior failed attempt may be corrupt.
+            // Start fresh -- stale .part from a prior failed attempt may be corrupt.
             if (part.exists() && !part.delete())
                 Log.w(TAG, fmt("Could not clear stale part file: %s", part.getAbsolutePath()));
             String lastError = null;
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/download/DiskDownloadService.java b/app/src/main/java/cn/classfun/droidvm/lib/download/DiskDownloadService.java
index 90bedd573..2d92d5947 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/download/DiskDownloadService.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/download/DiskDownloadService.java
@@ -34,7 +34,7 @@
 /**
  * Foreground service that runs {@link DiskDownloadManager#runDownload} on a
  * background thread and renders one notification per download covering every
- * state — connecting, downloading (%/size/speed/ETA), retrying, failed, done —
+ * state -- connecting, downloading (%/size/speed/ETA), retrying, failed, done --
  * in the same notification (no separate completion/failure notification).
  */
 public final class DiskDownloadService extends Service {
@@ -255,9 +255,9 @@ private String runningText(Progress p, long speed) {
             ? getString(R.string.download_size_progress, formatSize(p.downloaded), formatSize(p.total))
             : getString(R.string.download_size_unknown, formatSize(p.downloaded));
         if (speed > 0) {
-            text += " · " + getString(R.string.download_speed, formatSize(speed));
+            text += " | " + getString(R.string.download_speed, formatSize(speed));
             if (p.total > 0)
-                text += " · " + getString(R.string.download_eta,
+                text += " | " + getString(R.string.download_eta,
                     formatDuration((p.total - p.downloaded) / speed));
         }
         return text;
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/store/network/NetworkConfig.java b/app/src/main/java/cn/classfun/droidvm/lib/store/network/NetworkConfig.java
index c83b98e66..eb4eaa5c7 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/store/network/NetworkConfig.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/store/network/NetworkConfig.java
@@ -89,7 +89,7 @@ public DataItem l3() {
     }
 
     /**
-     * L2 mode: configured uplink — a literal interface name or a
+     * L2 mode: configured uplink -- a literal interface name or a
      * "WiFi"/"Ethernet"/"Tethering" logical identifier resolved at start.
      */
     @Nullable
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/store/vm/BootConfig.java b/app/src/main/java/cn/classfun/droidvm/lib/store/vm/BootConfig.java
index 4d86dab70..6867f0700 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/store/vm/BootConfig.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/store/vm/BootConfig.java
@@ -11,7 +11,7 @@
 import cn.classfun.droidvm.lib.store.enums.StringEnum;
 
 /**
- * Wrapper over a VM config's "boot" object — the single source of truth
+ * Wrapper over a VM config's "boot" object -- the single source of truth
  * for how the guest is brought up:
  *
  * <pre>
@@ -36,7 +36,7 @@
  * {@code source} below it) only select which one takes effect, so toggling
  * in the UI never loses the other branch's values. Legacy flat keys
  * ({@code use_uefi}/{@code kernel}/{@code initrd}/{@code cmdline}/
- * {@code bios}) are folded into this object once, on config load — see
+ * {@code bios}) are folded into this object once, on config load -- see
  * {@link VMConfig#migrateBoot}.
  */
 public final class BootConfig {
@@ -81,7 +81,7 @@ public int getStringId() {
 
     /**
      * Reserved {@code vm_start} boot_entry / boot-menu selection key for
-     * "boot this disk with DroidVM's built-in kernel" — not a disk image
+     * "boot this disk with DroidVM's built-in kernel" -- not a disk image
      * entry, so it is matched as a sentinel (see {@code BootPlan.resolve})
      * and can never collide with an lbx entry id (which never start '@').
      */
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/store/vm/VMConfig.java b/app/src/main/java/cn/classfun/droidvm/lib/store/vm/VMConfig.java
index 4aa00cde5..bb59ec128 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/store/vm/VMConfig.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/store/vm/VMConfig.java
@@ -44,7 +44,7 @@ private void migrateBoot() {
         var boot = BootConfig.of(this);
         var uefi = item.optBoolean("use_uefi", true);
         // legacy QEMU oddity: use_uefi=false + "bios" + no kernel meant
-        // "boot a custom firmware" — that is UEFI protocol in the new model
+        // "boot a custom firmware" -- that is UEFI protocol in the new model
         if (!uefi && item.optString("kernel", "").isEmpty()
             && !item.optString("bios", "").isEmpty())
             uefi = true;
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/store/vm/VMNicConfig.java b/app/src/main/java/cn/classfun/droidvm/lib/store/vm/VMNicConfig.java
index 1b3592c05..0988768ce 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/store/vm/VMNicConfig.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/store/vm/VMNicConfig.java
@@ -120,7 +120,7 @@ private List<PortForward> forwards(@NonNull String key) {
 
     /**
      * The VLAN of this NIC the DHCP services apply to: the pinned access
-     * VLAN, or the untagged domain (VLAN 0) when trunked — either the
+     * VLAN, or the untagged domain (VLAN 0) when trunked -- either the
      * implicit trunk (no vlan_id) or the explicit 4095 trunk marker.
      */
     @Nullable
@@ -148,7 +148,7 @@ public void validate(@NonNull NetworkConfig network) {
             if (vlanId < 0 || vlanId > 4095)
                 throw new IllegalArgumentException(fmt("Invalid NIC VLAN id: %d", vlanId));
             // An untagged-only port needs per-port VLAN filtering, which a
-            // Linux bridge on stock GKI cannot do — attaching to the main
+            // Linux bridge on stock GKI cannot do -- attaching to the main
             // bridge would actually be a trunk (flooded tagged frames
             // included). Refuse instead of silently degrading; gvisor's
             // switchcore can enforce untagged-only, so 0 stays valid there.
@@ -200,7 +200,7 @@ public void validate(@NonNull NetworkConfig network) {
      * An in-memory copy of this NIC with every option the target network can't
      * honour stripped out; the saved config is left untouched. A NIC keeps its
      * L3-only settings (DHCP static lease, port forwards) in the stored config
-     * so they survive being moved back to an L3 network — the GUI just hides
+     * so they survive being moved back to an L3 network -- the GUI just hides
      * them elsewhere. On an L2 / non-DHCP network those settings are inert, so
      * for this run we drop them rather than refuse to start. Genuine
      * misconfigurations are left in place for {@link #validate} to reject.
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/ui/CopyableField.java b/app/src/main/java/cn/classfun/droidvm/lib/ui/CopyableField.java
index f05284041..2c7dcb84d 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/ui/CopyableField.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/ui/CopyableField.java
@@ -18,7 +18,7 @@
 /**
  * Helpers for the read-only boot-info fields (kernel / initrd / cmdline /
  * source). They show values the user may want to copy but not type into, so
- * each becomes selectable (long-press → Copy) and its enclosing
+ * each becomes selectable (long-press -> Copy) and its enclosing
  * {@link TextInputLayout} gets a copy end-icon.
  */
 public final class CopyableField {
@@ -28,7 +28,7 @@ private CopyableField() {
     /**
      * Read-only but selectable (long-press Copy works), plus a copy end-icon.
      * {@code setTextIsSelectable} alone does <em>not</em> stop an EditText from
-     * being typed into — only dropping the key listener does — so we do both
+     * being typed into -- only dropping the key listener does -- so we do both
      * and suppress the soft keyboard / caret.
      */
     public static void setupReadOnly(@NonNull EditText et, @NonNull CharSequence label) {
@@ -45,7 +45,7 @@ public static void makeReadOnly(@NonNull EditText et) {
     }
 
     /**
-     * Just the copy end-icon — for a field that must stay editable to capture
+     * Just the copy end-icon -- for a field that must stay editable to capture
      * input (e.g. one that redirects edits elsewhere) yet still offers copy.
      */
     public static void addCopyIcon(@NonNull EditText et, @NonNull CharSequence label) {
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/disk/lxc/ImportLxcImagesActivity.java b/app/src/main/java/cn/classfun/droidvm/ui/disk/lxc/ImportLxcImagesActivity.java
index 9df72c2c7..8f87c23ef 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/disk/lxc/ImportLxcImagesActivity.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/disk/lxc/ImportLxcImagesActivity.java
@@ -197,7 +197,7 @@ private void captureSession() {
 
     /**
      * Rebuilds the form from the last saved session (replays the
-     * distro→version→variant→build cascade) and re-attaches the progress bar if a
+     * distro->version->variant->build cascade) and re-attaches the progress bar if a
      * download is still running. The session is kept after the download ends too,
      * so reopening restores the last selections (hit Load to refresh). Returns
      * false if there's nothing to restore.
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/disk/operation/DiskOperationActivity.java b/app/src/main/java/cn/classfun/droidvm/ui/disk/operation/DiskOperationActivity.java
index 34f306370..f641f5669 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/disk/operation/DiskOperationActivity.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/disk/operation/DiskOperationActivity.java
@@ -99,7 +99,7 @@ public static Intent createIntent(
 
     /**
      * Intent that optimizes (and thereby decompresses) the qcow2 at
-     * {@code path} in place and returns {@code RESULT_OK} on success — for
+     * {@code path} in place and returns {@code RESULT_OK} on success -- for
      * launching via an {@code ActivityResultLauncher} so the caller can chain
      * (e.g. start the VM once a crosvm-unreadable compressed image is fixed).
      * Works without a registered {@link DiskConfig}, since a VM disk may point
@@ -254,7 +254,7 @@ private void onProcessFinished() {
         finished = true;
         int exitCode = session == null ? -1 : session.getExitStatus();
         // Path mode (no registered DiskConfig) is an in-place op, so there is
-        // nothing to persist — skip the store update.
+        // nothing to persist -- skip the store update.
         if (exitCode == 0 && outputPath != null && diskConfig != null) {
             if (taskAction.equals("clone")) {
                 var cloned = new DiskConfig();
@@ -277,7 +277,7 @@ private void onProcessFinished() {
             diskStore.save(this);
         }
         // Chained convert (e.g. pre-start decompress): hand control back to the
-        // launcher, which starts the VM. No success screen — the start is the
+        // launcher, which starts the VM. No success screen -- the start is the
         // feedback.
         if (exitCode == 0 && autoFinish) {
             setResult(RESULT_OK);
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/network/info/NetworkInfoActivity.java b/app/src/main/java/cn/classfun/droidvm/ui/network/info/NetworkInfoActivity.java
index 77ef9616f..00931ab2e 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/network/info/NetworkInfoActivity.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/network/info/NetworkInfoActivity.java
@@ -452,7 +452,7 @@ private void addToolRow(@NonNull LinearLayout container, @NonNull String key, bo
         ((ImageView) view.findViewById(R.id.iv_icon)).setImageResource(iconRes);
         ((TextView) view.findViewById(R.id.tv_line1)).setText(label);
         var line2 = (TextView) view.findViewById(R.id.tv_line2);
-        line2.setText(fmt("%s · %s",
+        line2.setText(fmt("%s | %s",
             getString(running ? R.string.network_info_tool_running
                               : R.string.network_info_tool_stopped),
             getString(R.string.network_info_tool_view_log)));
@@ -669,7 +669,7 @@ private void addPdEntry(@NonNull LinearLayout container, @NonNull JSONObject pd)
         var vlan = pd.optInt("vlan", 0);
         var state = pd.optString("state", "");
         // The composed host address P::1/L actually bound on the bridge (empty
-        // while searching) — so this row matches the live nic address and the
+        // while searching) -- so this row matches the live nic address and the
         // "bound" chip reflects the real binding, not the raw delegation.
         var address = pd.optString("address", "");
         var noUplink = "no_uplink".equals(state);
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/VMActions.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/VMActions.java
index 2132aa59d..e7562f7ac 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/VMActions.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/VMActions.java
@@ -100,7 +100,7 @@ private static void startAfterGuard(
      * (lbx) which are zlib-compressed and therefore unreadable by crosvm. If
      * any are, prompt to convert (decompress) them, then {@code proceed};
      * otherwise {@code proceed} straight away. A check failure never blocks a
-     * start — a real boot would surface the problem. Callbacks arrive on the
+     * start -- a real boot would surface the problem. Callbacks arrive on the
      * daemon thread, so UI work is posted to {@code mainHandler}.
      */
     private static void guardCompressedDisks(
@@ -152,7 +152,7 @@ private static void promptConvert(
         var files = new StringBuilder();
         for (int i = 0; i < compressed.length(); i++) {
             var p = compressed.optString(i, "");
-            if (!p.isEmpty()) files.append("\n• ").append(basename(p));
+            if (!p.isEmpty()) files.append("\n- ").append(basename(p));
         }
         var dialog = new MaterialAlertDialogBuilder(ctx)
             .setTitle(R.string.vm_compressed_disk_title)
@@ -227,7 +227,7 @@ private static List<String> qcow2DiskPaths(@NonNull VMConfig config) {
 
     /**
      * Persists a "remember this choice" boot-menu selection to the on-disk
-     * VM store — the source of truth the list reloads on resume, which is
+     * VM store -- the source of truth the list reloads on resume, which is
      * why a one-shot start that only mutated the in-memory config never
      * stuck. The same change is mirrored onto {@code config} so the daemon
      * gets it via vm_modify. The built-in kernel is baked into a plain
@@ -256,7 +256,7 @@ private static String rememberChoice(
                 store.save(context);
             }
         }
-        // built-in now boots as a plain manual config — no one-shot override
+        // built-in now boots as a plain manual config -- no one-shot override
         return builtin ? null : bootEntry;
     }
 
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/boot/BootEntries.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/boot/BootEntries.java
index bcd781cc4..bfd43487f 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/boot/BootEntries.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/boot/BootEntries.java
@@ -170,7 +170,7 @@ public static void scan(@NonNull String image, @NonNull OnScan callback) {
     private static final long ANALYZE_HARD_TIMEOUT_MS = 5 * 60_000;
 
     /**
-     * Analyze a remote (URL) image by running lbx directly from the UI — a URL
+     * Analyze a remote (URL) image by running lbx directly from the UI -- a URL
      * fetch needs no root, and lbx ships as {@code liblbx.so} in the app's
      * nativeLibraryDir, which the app may execute (unlike the daemon's
      * data-dir copy). So we skip the daemon and stream lbx's
@@ -273,7 +273,7 @@ private static BootEntries parse(@Nullable JSONArray arr) {
 
     /**
      * The entry a boot would use right now: pinned entry by exact id,
-     * then exact title, falling back to the bootloader default — the
+     * then exact title, falling back to the bootloader default -- the
      * same cascade as the daemon's BootPlan.
      */
     @Nullable
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/boot/BootMenuDialog.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/boot/BootMenuDialog.java
index 68bbf8940..164697cc9 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/boot/BootMenuDialog.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/boot/BootMenuDialog.java
@@ -250,7 +250,7 @@ private static void updateSummary(
             summary.setVisibility(GONE);
             return;
         }
-        var line = entry.kernel + " · " + entry.source;
+        var line = entry.kernel + " | " + entry.source;
         var cmdline = entry.effectiveCmdline(boot.isVdafix());
         if (!cmdline.isEmpty()) line += "\n" + cmdline;
         summary.setVisibility(VISIBLE);
@@ -320,7 +320,7 @@ private static CharSequence warnedLabel(
 
     /**
      * Whether this VM boots as a gunyah protected VM (protected, or
-     * protected-without-firmware) — read from the stored config, where a
+     * protected-without-firmware) -- read from the stored config, where a
      * guest kernel without CONFIG_DMA_RESTRICTED_POOL cannot drive virtio.
      * Mirrors {@code VMEditBootTab.isProtectedVm}.
      */
@@ -335,7 +335,7 @@ private static boolean isProtectedVm(@NonNull VMConfig config) {
      * Optional warning for a boot entry, or null when it has none. Today the
      * only case is a kernel lbx flagged as lacking CONFIG_DMA_RESTRICTED_POOL
      * on a protected VM (same condition as the edit tab's detection card),
-     * shown here as a terse one-liner since the menu is cramped — the edit
+     * shown here as a terse one-liner since the menu is cramped -- the edit
      * tab keeps the full explanation.
      */
     @Nullable
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/boot/VMEditBootTab.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/boot/VMEditBootTab.java
index 77dfded91..e1939c240 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/boot/VMEditBootTab.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/boot/VMEditBootTab.java
@@ -182,7 +182,7 @@ public void onTabShown() {
             rescan();
         } else if (scanned != null) {
             // same image, but the protection mode may have changed in the
-            // basic tab — refresh the detection card so its warning tracks it
+            // basic tab -- refresh the detection card so its warning tracks it
             updateDetectionCard();
         }
     }
@@ -490,7 +490,7 @@ private void updateDetectionCard() {
 
     /**
      * Whether the VM would boot as a gunyah protected VM (protected, or
-     * protected-without-firmware) — read live from the basic tab so a
+     * protected-without-firmware) -- read live from the basic tab so a
      * just-changed selection is reflected, then the stored config, then
      * the backend default. In such a VM a guest kernel without
      * CONFIG_DMA_RESTRICTED_POOL cannot drive virtio.
@@ -547,7 +547,7 @@ private CharSequence highlightRootParams(@NonNull BootEntries.Entry entry, boole
         return span;
     }
 
-    /** The value of {@code key}=… in {@code cmdline}, or null if absent. */
+    /** The value of {@code key}=... in {@code cmdline}, or null if absent. */
     @Nullable
     private static String paramValue(@NonNull String cmdline, @NonNull String key) {
         var m = ROOT_PARAM.matcher(cmdline);
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/network/VMNetEditAdapter.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/network/VMNetEditAdapter.java
index 7d41a0a0c..231604c81 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/network/VMNetEditAdapter.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/network/VMNetEditAdapter.java
@@ -260,7 +260,7 @@ private void bindLease(
         fwd.setText(formatForwards(
             v6 ? nic.getDhcp6Forwards() : nic.getDhcp4Forwards()));
         // IPv6 forwards need IPv6 SNAT, which the Linux bridge can't do
-        // (Android kernel has no IPv6 NAT) — hide them there entirely
+        // (Android kernel has no IPv6 NAT) -- hide them there entirely
         boolean fwdSupported = !v6
             || network.getBridgeType() == cn.classfun.droidvm.lib.store.network.BridgeType.GVISOR;
         fwdTil.setVisibility(fwdSupported ? VISIBLE : GONE);
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/info/VMInfoActivity.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/info/VMInfoActivity.java
index bfa1be85a..c15a9a37a 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/info/VMInfoActivity.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/info/VMInfoActivity.java
@@ -231,7 +231,7 @@ private String bootSummary() {
             var pinned = boot.getImageEntry();
             var label = getString(R.string.edit_vm_kernel_source_image);
             if (pinned != null && pinned.title != null)
-                return label + " · " + pinned.title;
+                return label + " | " + pinned.title;
             return label;
         }
         return basename(boot.getKernel());
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/widgets/tools/DownloadWidget.java b/app/src/main/java/cn/classfun/droidvm/ui/widgets/tools/DownloadWidget.java
index e17d7cec4..f5e758d09 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/widgets/tools/DownloadWidget.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/widgets/tools/DownloadWidget.java
@@ -20,7 +20,7 @@
 
 /**
  * A progress view for a download owned elsewhere (e.g. {@link android.app.DownloadManager}).
- * It renders only — it never runs a download itself. Drive it from the main thread:
+ * It renders only -- it never runs a download itself. Drive it from the main thread:
  * call {@link #startExternal} once, then feed it {@link #updateExternal} and the
  * {@code markExternal*} state transitions as the download progresses. The cancel
  * button invokes the handler passed to {@link #startExternal}.
@@ -115,7 +115,7 @@ public void updateExternal(long downloaded, long total) {
         updateUI(downloaded, total, speedBytesPerSec);
     }
 
-    /** Renders the download as paused, showing why (waiting for network, retrying, …). */
+    /** Renders the download as paused, showing why (waiting for network, retrying, ...). */
     public void markExternalPaused(@NonNull String reasonText) {
         if (state == STATE_FINISHED) return;
         progressBar.setIndeterminate(false);
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/widgets/tools/KernelAnalysisWidget.java b/app/src/main/java/cn/classfun/droidvm/ui/widgets/tools/KernelAnalysisWidget.java
index 97c63249c..7bcffd49c 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/widgets/tools/KernelAnalysisWidget.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/widgets/tools/KernelAnalysisWidget.java
@@ -33,7 +33,7 @@
  * image (a URL); pressing Analyze runs a single cloud analysis
  * ({@code lbx entries <url> --json}, via the daemon's {@code vm_bootscan})
  * and the card shows, per boot entry, the kernel / initrd / cmdline and the
- * protected-VM DMA warning — the same read-only view the VM edit screen
+ * protected-VM DMA warning -- the same read-only view the VM edit screen
  * gives a local disk image.
  *
  * <p>One analysis is one lbx call that returns every entry with every field,
diff --git a/app/src/main/res/layout/view_kernel_analysis.xml b/app/src/main/res/layout/view_kernel_analysis.xml
index 3977bbe1f..470260497 100644
--- a/app/src/main/res/layout/view_kernel_analysis.xml
+++ b/app/src/main/res/layout/view_kernel_analysis.xml
@@ -1,7 +1,7 @@
 <?xml version="1.0" encoding="utf-8"?>
 <!-- Reusable "kernel analysis" card: an Analyze button that runs one cloud
      analysis (lbx entries <url>) and shows, per boot entry, the kernel /
-     initrd / cmdline plus the protected-VM DMA warning — mirroring the VM
+     initrd / cmdline plus the protected-VM DMA warning - mirroring the VM
      edit screen's boot-detection card. Driven by KernelAnalysisWidget. -->
 <com.google.android.material.card.MaterialCardView xmlns:android="http://schemas.android.com/apk/res/android"
     xmlns:app="http://schemas.android.com/apk/res-auto"
diff --git a/app/src/main/res/values/strings.xml b/app/src/main/res/values/strings.xml
index 7fa44eef9..06a6a9342 100644
--- a/app/src/main/res/values/strings.xml
+++ b/app/src/main/res/values/strings.xml
@@ -231,7 +231,7 @@
     <string name="edit_vm_net_vlan">VLAN ID</string>
     <string name="edit_vm_net_vlan_id">VLAN</string>
     <string name="edit_vm_net_vlan_no_untagged">Untagged-only (0) ports are not supported on a Linux bridge; use a tagged VLAN or trunk</string>
-    <string name="edit_vm_net_vlan_invalid">VLAN must be 0–4094, or 4095 for trunk</string>
+    <string name="edit_vm_net_vlan_invalid">VLAN must be 0-4094, or 4095 for trunk</string>
     <string name="edit_vm_net_dhcp4_lease">DHCPv4 static lease</string>
     <string name="edit_vm_net_dhcp6_lease">DHCPv6 static lease</string>
     <string name="edit_vm_net_lease_offset">Address offset</string>
@@ -281,7 +281,7 @@
     <string name="edit_vm_uefi_firmware">UEFI firmware (empty = built-in EDK2)</string>
     <string name="edit_vm_uefi_firmware_builtin">Built-in EDK2</string>
     <string name="edit_vm_uefi_firmware_browse_title">Select UEFI firmware</string>
-    <string name="edit_vm_uefi_firmware_hint">Custom firmware only takes effect on the QEMU backend\ncrosvm always uses the built-in EDK2\nBooting Linux via UEFI is still being adapted and is not usable yet — to boot Linux, choose the Linux kernel boot protocol</string>
+    <string name="edit_vm_uefi_firmware_hint">Custom firmware only takes effect on the QEMU backend\ncrosvm always uses the built-in EDK2\nBooting Linux via UEFI is still being adapted and is not usable yet -- to boot Linux, choose the Linux kernel boot protocol</string>
     <string name="edit_vm_kernel_source">Kernel source</string>
     <string name="edit_vm_kernel_source_image">Disk image</string>
     <string name="edit_vm_kernel_source_manual">Manual</string>
@@ -299,7 +299,7 @@
     <string name="edit_vm_boot_detect_initrd">initrd</string>
     <string name="edit_vm_boot_detect_cmdline">Kernel cmdline</string>
     <string name="edit_vm_boot_detect_source">Source</string>
-    <string name="edit_vm_boot_detect_scanning">Scanning…</string>
+    <string name="edit_vm_boot_detect_scanning">Scanning...</string>
     <string name="edit_vm_boot_detect_failed">Scan failed: %1$s</string>
     <string name="edit_vm_boot_detect_no_disk">No disk image configured for this VM</string>
     <string name="edit_vm_boot_detect_root_warn">root= names a physical device; enable auto-fix or override the cmdline</string>
@@ -311,7 +311,7 @@
     <string name="edit_vm_boot_wait_invalid">Must be a number of seconds</string>
     <string name="edit_vm_boot_cmdline_override">Kernel cmdline override (empty = from image)</string>
     <string name="edit_vm_boot_cmdline_override_hint">Empty = use cmdline from the image</string>
-    <string name="edit_vm_boot_menu_title">Select boot entry — %1$s</string>
+    <string name="edit_vm_boot_menu_title">Select boot entry -- %1$s</string>
     <string name="edit_vm_boot_menu_boot">Boot</string>
     <string name="edit_vm_boot_menu_boot_in">Boot (%1$d)</string>
     <string name="edit_vm_boot_menu_remember">Remember this choice</string>
@@ -400,7 +400,7 @@
 
     <string name="vm_daemon_error">Failed to communicate with daemon.</string>
     <string name="vm_compressed_disk_title">Compressed disk image</string>
-    <string name="vm_compressed_disk_message">crosvm can\'t read compressed qcow2 images — the VM would boot to disk I/O errors with no partition table. Convert it to uncompressed and start?\n%1$s</string>
+    <string name="vm_compressed_disk_message">crosvm can\'t read compressed qcow2 images -- the VM would boot to disk I/O errors with no partition table. Convert it to uncompressed and start?\n%1$s</string>
     <string name="vm_compressed_disk_convert">Convert &amp; start</string>
     <string name="vm_compressed_disk_start_anyway">Start anyway</string>
     <string name="vm_compressed_disk_start_countdown">Start anyway (%1$d)</string>
@@ -660,11 +660,11 @@
     <string name="download_file_icon_desc">File icon</string>
     <string name="download_exit_title">Download in progress</string>
     <string name="download_exit_message">A download is still in progress. Leaving now will cancel it and delete the partial file. Are you sure?</string>
-    <string name="download_paused">Paused…</string>
-    <string name="download_paused_network">Paused, waiting for network…</string>
-    <string name="download_paused_retry">Connection interrupted, retrying…</string>
-    <string name="download_paused_wifi">Paused, waiting for Wi-Fi…</string>
-    <string name="download_retrying">Connection lost, retrying (%1$d/%2$d)…</string>
+    <string name="download_paused">Paused...</string>
+    <string name="download_paused_network">Paused, waiting for network...</string>
+    <string name="download_paused_retry">Connection interrupted, retrying...</string>
+    <string name="download_paused_wifi">Paused, waiting for Wi-Fi...</string>
+    <string name="download_retrying">Connection lost, retrying (%1$d/%2$d)...</string>
     <string name="download_one_at_a_time">A download is already in progress. Please wait for it to finish.</string>
     <string name="download_background_toast">Download continues in the background. Check the notification shade.</string>    <string name="download_error_start">Could not start the download. Make sure the system Download Manager is enabled.</string>
 
@@ -676,7 +676,7 @@
     <string name="notif_download_failed_text">Failed to download \"%1$s\".</string>
     <string name="notif_channel_downloads_progress">Downloading</string>
     <string name="notif_channel_downloads_progress_desc">Ongoing download progress</string>
-    <string name="notif_download_connecting">Connecting…</string>
+    <string name="notif_download_connecting">Connecting...</string>
     <string name="notif_download_cancel">Cancel</string>
 
     <string name="vm_state_suspended">Suspended</string>
@@ -811,7 +811,7 @@
     <string name="network_edit_vlan_v6_secondary">Secondary IPv6 networks (comma separated)</string>
     <string name="network_edit_vlan_dns">DNS servers (empty = follow system DNS)</string>
     <string name="network_edit_error_self_overlap">Subnets %1$s and %2$s overlap</string>
-    <string name="network_item_subtitle">%1$s · %2$s</string>
+    <string name="network_item_subtitle">%1$s | %2$s</string>
     <string name="network_info_pbridge">Pseudo-bridge (pbridge)</string>
     <string name="network_info_bridgedhcp">bridgedhcp</string>
     <string name="network_info_gvswitch">gvswitch</string>
@@ -850,7 +850,7 @@
     <string name="network_info_addr_source_auto">Auto</string>
     <string name="network_info_addr_source_pbridge">Pseudo-bridge VM</string>
     <string name="network_info_pd_label">DHCP-PD</string>
-    <string name="network_info_pd_searching">Searching…</string>
+    <string name="network_info_pd_searching">Searching...</string>
     <string name="network_info_pd_no_uplink">Uplink unavailable</string>
     <string name="network_info_pd_release">Release</string>
     <string name="network_info_pd_renew">Renew</string>
diff --git a/app/src/main/rust/netbox/Cargo.toml b/app/src/main/rust/netbox/Cargo.toml
index e166ce64b..b744c6691 100644
--- a/app/src/main/rust/netbox/Cargo.toml
+++ b/app/src/main/rust/netbox/Cargo.toml
@@ -3,7 +3,7 @@ name = "netbox"
 version = "0.1.0"
 edition = "2021"
 rust-version = "1.91"
-description = "netbox: a minimal netlink CLI toolbox for DroidVM — replaces the iproute2/bridge subset the daemon shells out to, so the APK doesn't depend on each OEM's system ip/bridge (versions vary; some don't even emit IFA_RT_PRIORITY in -j JSON)"
+description = "netbox: a minimal netlink CLI toolbox for DroidVM -- replaces the iproute2/bridge subset the daemon shells out to, so the APK doesn't depend on each OEM's system ip/bridge (versions vary; some don't even emit IFA_RT_PRIORITY in -j JSON)"
 
 [[bin]]
 name = "netbox"
diff --git a/app/src/main/rust/netbox/build.sh b/app/src/main/rust/netbox/build.sh
index 3b3dc9690..267f015c9 100755
--- a/app/src/main/rust/netbox/build.sh
+++ b/app/src/main/rust/netbox/build.sh
@@ -6,7 +6,7 @@
 #   ./build.sh arm64      # aarch64-unknown-linux-musl -> dist/netbox-android-arm64
 #   ./build.sh host       # quick host debug build (./target/debug/netbox)
 #
-# Both release targets are fully static (musl), so they run under any libc —
+# Both release targets are fully static (musl), so they run under any libc --
 # glibc, musl, or Android bionic. The aarch64 target links with the bundled
 # rust-lld, so no external cross toolchain is needed.
 set -euo pipefail
diff --git a/app/src/main/rust/netbox/src/main.rs b/app/src/main/rust/netbox/src/main.rs
index 60f704023..7e7b818d9 100644
--- a/app/src/main/rust/netbox/src/main.rs
+++ b/app/src/main/rust/netbox/src/main.rs
@@ -1,7 +1,7 @@
-//! netbox — minimal netlink CLI for the DroidVM daemon.
+//! netbox -- minimal netlink CLI for the DroidVM daemon.
 //!
 //! The daemon used to shell out to the system `ip`/`bridge` (iproute2). Those
-//! vary per OEM and some are too old to emit `IFA_RT_PRIORITY` in `-j` JSON —
+//! vary per OEM and some are too old to emit `IFA_RT_PRIORITY` in `-j` JSON --
 //! exactly the field pbridge tags its offload-proxy addresses with. netbox does
 //! the same operations straight over rtnetlink, with our own JSON schema, so
 //! behaviour is identical on every device. Most invocations do one op and
@@ -128,7 +128,7 @@ enum Cmd {
     },
     /// Print the phone's own reachable IPv4 addresses once as `{"v4":[...]}`.
     HostIps {
-        /// Interface-name prefix to include (repeatable): wlan, rmnet_data, …
+        /// Interface-name prefix to include (repeatable): wlan, rmnet_data, ...
         #[arg(long)]
         iface: Vec<String>,
         /// Drop addresses tagged with this IFA_RT_PRIORITY (pbridge offload).
@@ -174,7 +174,7 @@ fn main() {
 
 fn run() -> Result<()> {
     let cli = Cli::parse();
-    // tuntap is a plain ioctl — no netlink runtime needed.
+    // tuntap is a plain ioctl -- no netlink runtime needed.
     if let Cmd::LinkAddTap { name } = &cli.cmd {
         return tap::add_tap(name);
     }
@@ -250,7 +250,7 @@ fn print_json<T: serde::Serialize>(rows: &T) -> Result<()> {
     Ok(())
 }
 
-/// One JSON line `{"v4":[...]}` flushed immediately — the daemon reads these
+/// One JSON line `{"v4":[...]}` flushed immediately -- the daemon reads these
 /// from the monitor's stdout, so the flush is what makes a change visible
 /// without waiting on stdio block-buffering.
 fn print_host_ips(v4: &[String]) -> Result<()> {
diff --git a/app/src/main/rust/netbox/src/nl.rs b/app/src/main/rust/netbox/src/nl.rs
index 5fabf20b7..6e2ecc8ce 100644
--- a/app/src/main/rust/netbox/src/nl.rs
+++ b/app/src/main/rust/netbox/src/nl.rs
@@ -28,12 +28,12 @@ pub struct Net {
 /// The only rtnetlink multicast group we ever join: RTM_NEWADDR/RTM_DELADDR
 /// for IPv4. The host-IP set is *defined* as v4 addresses, so only address
 /// events can change it; staying off the link/route/neigh/v6-addr groups
-/// (all noisy and irrelevant) keeps daemon wakeups — and power — to a minimum.
+/// (all noisy and irrelevant) keeps daemon wakeups -- and power -- to a minimum.
 const RTNLGRP_IPV4_IFADDR: u32 = 5;
 
 // ----------------------------------------------------------------- query rows
 
-/// `metric` is IFA_RT_PRIORITY — the field the system `ip -j` may not emit but
+/// `metric` is IFA_RT_PRIORITY -- the field the system `ip -j` may not emit but
 /// pbridge tags its proxy addresses with; netlink always carries it.
 #[derive(Serialize)]
 pub struct AddrRow {
@@ -355,7 +355,7 @@ impl Net {
 
     /// `ip [-4|-6] rule add from all iif <iif> lookup <table>` (idempotent).
     /// `.v4()`/`.v6()` yield distinct typed builders, so the family branch
-    /// can't be factored out (it returns different types) — inline like pbridge.
+    /// can't be factored out (it returns different types) -- inline like pbridge.
     pub async fn rule_add(&self, v6: bool, iif: &str, table: u32) -> Result<()> {
         let req = self
             .handle
@@ -500,7 +500,7 @@ impl Net {
         prefixes: &[String],
         exclude_metric: Option<u32>,
     ) -> Result<Vec<String>> {
-        // one link dump → ifindex's name and whether it's a bridge
+        // one link dump -> ifindex's name and whether it's a bridge
         let mut names: HashMap<u32, String> = HashMap::new();
         let mut is_bridge: HashMap<u32, bool> = HashMap::new();
         let mut ls = self.handle.link().get().execute();
@@ -735,7 +735,7 @@ pub async fn monitor_host_ipv4(
     let mut last = net.host_ipv4(prefixes, exclude_metric).await?;
     emit(&last)?;
     // every message arrives on RTNLGRP_IPV4_IFADDR, so any of them is a v4
-    // address add/del — no need to inspect it, just re-evaluate the set.
+    // address add/del -- no need to inspect it, just re-evaluate the set.
     while messages.next().await.is_some() {
         // coalesce a burst (a DHCP renew is a del+add, etc.) into one recompute
         let _ = tokio::time::timeout(std::time::Duration::from_millis(200), async {
diff --git a/app/src/main/rust/netbox/src/tap.rs b/app/src/main/rust/netbox/src/tap.rs
index c820677ff..5f0348642 100644
--- a/app/src/main/rust/netbox/src/tap.rs
+++ b/app/src/main/rust/netbox/src/tap.rs
@@ -1,12 +1,12 @@
-//! TAP creation. `ip tuntap add` is not a netlink op — it is a TUNSETIFF ioctl
-//! on /dev/net/tun — so it lives apart from the rtnetlink helpers.
+//! TAP creation. `ip tuntap add` is not a netlink op -- it is a TUNSETIFF ioctl
+//! on /dev/net/tun -- so it lives apart from the rtnetlink helpers.
 
 use anyhow::{bail, Context, Result};
 use std::ffi::CString;
 use std::os::fd::AsRawFd;
 
 const IFNAMSIZ: usize = 16;
-// <linux/if_tun.h> — _IOW('T', 202/203, int). The ioctl request arg is
+// <linux/if_tun.h> -- _IOW('T', 202/203, int). The ioctl request arg is
 // c_ulong on glibc but c_int on musl/bionic, so cast with `as _` at the call.
 const TUNSETIFF: u32 = 0x4004_54ca;
 const TUNSETPERSIST: u32 = 0x4004_54cb;
diff --git a/app/src/test/java/cn/classfun/droidvm/lib/store/network/VlanConfigPdTest.java b/app/src/test/java/cn/classfun/droidvm/lib/store/network/VlanConfigPdTest.java
index 073acfcce..85531e9a8 100644
--- a/app/src/test/java/cn/classfun/droidvm/lib/store/network/VlanConfigPdTest.java
+++ b/app/src/test/java/cn/classfun/droidvm/lib/store/network/VlanConfigPdTest.java
@@ -11,7 +11,7 @@
 /**
  * PD route-table persistence on the VLAN config: the id is bridgedhcp's
  * crash-cleanup key, so a value written through one wrapper must be seen
- * by every later read of the same stored item — that is what makes the
+ * by every later read of the same stored item -- that is what makes the
  * allocation stable across network restarts.
  */
 public class VlanConfigPdTest {

From e01b8f8ea873eaaa0130690db7887913c8905cfa Mon Sep 17 00:00:00 2001
From: HuJK <gh@hujk.org>
Date: Mon, 15 Jun 2026 14:00:01 +0800
Subject: [PATCH 016/182] fix(UI): fix clipboard, add font

Terminal copy/paste was a no-op: SimpleTerminalSessionClient's
onCopyTextToClipboard/onPasteTextFromClipboard were empty, so Termux's
selection 'Copy'/'Paste' never reached the system clipboard. Implement both
(reusing CopyableField for copy, emulator.paste() for paste) and pass an
owning Context to the client at all three terminal screens (VM console, disk
op, agent op).

Also default the terminals to Maple Mono NL NF via TerminalView.setTypeface,
with a Termux-compatible $HOME/.termux/font.ttf user override and a
system-monospace fallback (TerminalFonts). The ~2.3MB TTF is git-ignored and
fetched in build.sh (pinned v7.9, sha256-verified); only the OFL license is
committed.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
---
 .gitignore                                    |  4 +
 app/src/main/assets/fonts/LICENSE.txt         | 94 +++++++++++++++++++
 .../termux/SimpleTerminalSessionClient.java   | 30 ++++++
 .../droidvm/lib/ui/termux/TerminalFonts.java  | 65 +++++++++++++
 .../ui/agent/AgentOperationActivity.java      |  4 +-
 .../disk/operation/DiskOperationActivity.java |  4 +-
 .../ui/vm/console/VMConsoleActivity.java      | 33 ++++++-
 build.sh                                      | 35 +++++++
 8 files changed, 264 insertions(+), 5 deletions(-)
 create mode 100644 app/src/main/assets/fonts/LICENSE.txt
 create mode 100644 app/src/main/java/cn/classfun/droidvm/lib/ui/termux/TerminalFonts.java

diff --git a/.gitignore b/.gitignore
index 58b0eb928..722684c7e 100644
--- a/.gitignore
+++ b/.gitignore
@@ -18,3 +18,7 @@ local.properties
 /app/src/main/assets/bin/*/lbx
 /app/src/main/assets/bin/*/netbox
 /app/src/main/assets/bin/*/pbridge
+
+# Terminal font: build.sh fetches the ~2.3MB Maple Mono NL NF TTF on first
+# build; only the OFL license text under app/src/main/assets/fonts is committed.
+/app/src/main/assets/fonts/*.ttf
diff --git a/app/src/main/assets/fonts/LICENSE.txt b/app/src/main/assets/fonts/LICENSE.txt
new file mode 100644
index 000000000..3e68033cd
--- /dev/null
+++ b/app/src/main/assets/fonts/LICENSE.txt
@@ -0,0 +1,94 @@
+Copyright (c) 2022, subframe7536 (https://github.com/subframe7536),
+with Reserved Font Name Maple Mono.
+
+This Font Software is licensed under the SIL Open Font License, Version 1.1.
+This license is copied below, and is also available with a FAQ at:
+http://scripts.sil.org/OFL
+
+
+-----------------------------------------------------------
+SIL OPEN FONT LICENSE Version 1.1 - 26 February 2007
+-----------------------------------------------------------
+
+PREAMBLE
+The goals of the Open Font License (OFL) are to stimulate worldwide
+development of collaborative font projects, to support the font creation
+efforts of academic and linguistic communities, and to provide a free and
+open framework in which fonts may be shared and improved in partnership
+with others.
+
+The OFL allows the licensed fonts to be used, studied, modified and
+redistributed freely as long as they are not sold by themselves. The
+fonts, including any derivative works, can be bundled, embedded,
+redistributed and/or sold with any software provided that any reserved
+names are not used by derivative works. The fonts and derivatives,
+however, cannot be released under any other type of license. The
+requirement for fonts to remain under this license does not apply
+to any document created using the fonts or their derivatives.
+
+DEFINITIONS
+"Font Software" refers to the set of files released by the Copyright
+Holder(s) under this license and clearly marked as such. This may
+include source files, build scripts and documentation.
+
+"Reserved Font Name" refers to any names specified as such after the
+copyright statement(s).
+
+"Original Version" refers to the collection of Font Software components as
+distributed by the Copyright Holder(s).
+
+"Modified Version" refers to any derivative made by adding to, deleting,
+or substituting -- in part or in whole -- any of the components of the
+Original Version, by changing formats or by porting the Font Software to a
+new environment.
+
+"Author" refers to any designer, engineer, programmer, technical
+writer or other person who contributed to the Font Software.
+
+PERMISSION & CONDITIONS
+Permission is hereby granted, free of charge, to any person obtaining
+a copy of the Font Software, to use, study, copy, merge, embed, modify,
+redistribute, and sell modified and unmodified copies of the Font
+Software, subject to the following conditions:
+
+1) Neither the Font Software nor any of its individual components,
+in Original or Modified Versions, may be sold by itself.
+
+2) Original or Modified Versions of the Font Software may be bundled,
+redistributed and/or sold with any software, provided that each copy
+contains the above copyright notice and this license. These can be
+included either as stand-alone text files, human-readable headers or
+in the appropriate machine-readable metadata fields within text or
+binary files as long as those fields can be easily viewed by the user.
+
+3) No Modified Version of the Font Software may use the Reserved Font
+Name(s) unless explicit written permission is granted by the corresponding
+Copyright Holder. This restriction only applies to the primary font name as
+presented to the users.
+
+4) The name(s) of the Copyright Holder(s) or the Author(s) of the Font
+Software shall not be used to promote, endorse or advertise any
+Modified Version, except to acknowledge the contribution(s) of the
+Copyright Holder(s) and the Author(s) or with their explicit written
+permission.
+
+5) The Font Software, modified or unmodified, in part or in whole,
+must be distributed entirely under this license, and must not be
+distributed under any other license. The requirement for fonts to
+remain under this license does not apply to any document created
+using the Font Software.
+
+TERMINATION
+This license becomes null and void if any of the above conditions are
+not met.
+
+DISCLAIMER
+THE FONT SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
+EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO ANY WARRANTIES OF
+MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT
+OF COPYRIGHT, PATENT, TRADEMARK, OR OTHER RIGHT. IN NO EVENT SHALL THE
+COPYRIGHT HOLDER BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY,
+INCLUDING ANY GENERAL, SPECIAL, INDIRECT, INCIDENTAL, OR CONSEQUENTIAL
+DAMAGES, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING
+FROM, OUT OF THE USE OR INABILITY TO USE THE FONT SOFTWARE OR FROM
+OTHER DEALINGS IN THE FONT SOFTWARE.
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/ui/termux/SimpleTerminalSessionClient.java b/app/src/main/java/cn/classfun/droidvm/lib/ui/termux/SimpleTerminalSessionClient.java
index 1e150682b..07e471c3e 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/ui/termux/SimpleTerminalSessionClient.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/ui/termux/SimpleTerminalSessionClient.java
@@ -1,5 +1,7 @@
 package cn.classfun.droidvm.lib.ui.termux;
 
+import android.content.ClipboardManager;
+import android.content.Context;
 import android.util.Log;
 
 import androidx.annotation.NonNull;
@@ -8,7 +10,25 @@
 import com.termux.terminal.TerminalSession;
 import com.termux.terminal.TerminalSessionClient;
 
+import cn.classfun.droidvm.lib.ui.CopyableField;
+
 public abstract class SimpleTerminalSessionClient implements TerminalSessionClient {
+    /** Clipboard label for text copied out of a terminal. */
+    private static final String CLIP_LABEL = "Terminal";
+
+    /**
+     * Used to reach the system clipboard for copy/paste; never null. Stored as
+     * given (typically the owning Activity) and only touched at copy/paste time,
+     * so this is safe even when constructed as an Activity field initializer
+     * (before the base context is attached). The client lives no longer than its
+     * owner, so retaining an Activity reference here leaks nothing.
+     */
+    protected final Context context;
+
+    protected SimpleTerminalSessionClient(@NonNull Context context) {
+        this.context = context;
+    }
+
     @Override
     public void onTextChanged(@NonNull TerminalSession s) {
     }
@@ -23,10 +43,20 @@ public void onSessionFinished(@NonNull TerminalSession s) {
 
     @Override
     public void onCopyTextToClipboard(@NonNull TerminalSession s, String t) {
+        if (t == null || t.isEmpty()) return;
+        CopyableField.copy(context, t, CLIP_LABEL);
     }
 
     @Override
     public void onPasteTextFromClipboard(@NonNull TerminalSession s) {
+        var cm = context.getSystemService(ClipboardManager.class);
+        if (cm == null || !cm.hasPrimaryClip()) return;
+        var clip = cm.getPrimaryClip();
+        if (clip == null || clip.getItemCount() == 0) return;
+        var text = clip.getItemAt(0).coerceToText(context);
+        if (text == null || text.length() == 0) return;
+        var emulator = s.getEmulator();
+        if (emulator != null) emulator.paste(text.toString());
     }
 
     @Override
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/ui/termux/TerminalFonts.java b/app/src/main/java/cn/classfun/droidvm/lib/ui/termux/TerminalFonts.java
new file mode 100644
index 000000000..d52fe68c7
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/lib/ui/termux/TerminalFonts.java
@@ -0,0 +1,65 @@
+package cn.classfun.droidvm.lib.ui.termux;
+
+import android.content.Context;
+import android.graphics.Typeface;
+import android.util.Log;
+
+import androidx.annotation.NonNull;
+
+import com.termux.view.TerminalView;
+
+import java.io.File;
+
+/**
+ * Picks the typeface for the embedded terminals. Mirrors Termux's font logic:
+ * a user-supplied {@code $HOME/.termux/font.ttf} wins, otherwise the bundled
+ * Maple Mono NL NF is used, falling back to the system monospace if either fails
+ * to parse. The console shells run with {@code HOME=getFilesDir()}, so the
+ * user-override path matches Termux exactly.
+ */
+public final class TerminalFonts {
+    private static final String TAG = "TerminalFonts";
+
+    /** Bundled default: Maple Mono NL NF (NL = no ligatures); see app/src/main/assets/fonts. */
+    private static final String ASSET_FONT = "fonts/MapleMonoNL-NF-Regular.ttf";
+
+    /** Termux-compatible drop-in override, relative to the shell's HOME. */
+    private static final String USER_FONT = ".termux/font.ttf";
+
+    /** The bundled font is immutable, so parse it once and reuse. */
+    private static Typeface bundled;
+
+    private TerminalFonts() {
+    }
+
+    /** Loads {@link #load(Context)} and applies it to {@code tv}. */
+    public static void apply(@NonNull TerminalView tv) {
+        tv.setTypeface(load(tv.getContext()));
+    }
+
+    /**
+     * Resolves the terminal typeface. The user override is re-checked on every
+     * call (a cheap stat) so dropping in a {@code font.ttf} takes effect the
+     * next time a terminal is opened, without restarting the app.
+     */
+    @NonNull
+    public static Typeface load(@NonNull Context ctx) {
+        var userFont = new File(ctx.getFilesDir(), USER_FONT);
+        if (userFont.isFile()) {
+            try {
+                return Typeface.createFromFile(userFont);
+            } catch (Exception e) {
+                Log.w(TAG, "Ignoring unreadable user font " + userFont, e);
+            }
+        }
+        if (bundled == null) {
+            try {
+                bundled = Typeface.createFromAsset(ctx.getAssets(), ASSET_FONT);
+            } catch (Exception e) {
+                Log.w(TAG, "Failed to load bundled terminal font, using monospace", e);
+                bundled = Typeface.MONOSPACE;
+            }
+        }
+        return bundled;
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/agent/AgentOperationActivity.java b/app/src/main/java/cn/classfun/droidvm/ui/agent/AgentOperationActivity.java
index 3b38badac..83f4b35be 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/agent/AgentOperationActivity.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/agent/AgentOperationActivity.java
@@ -39,6 +39,7 @@
 import cn.classfun.droidvm.lib.daemon.ForegroundCallback;
 import cn.classfun.droidvm.lib.store.disk.DiskStore;
 import cn.classfun.droidvm.lib.ui.termux.SimpleTerminalSessionClient;
+import cn.classfun.droidvm.lib.ui.termux.TerminalFonts;
 import cn.classfun.droidvm.lib.ui.termux.SimpleTerminalViewClient;
 import cn.classfun.droidvm.ui.agent.base.AgentVM;
 import cn.classfun.droidvm.ui.agent.base.BaseAction;
@@ -61,7 +62,7 @@ public final class AgentOperationActivity extends AppCompatActivity
     private AgentVM agentVM = null;
     private BaseAction action = null;
 
-    private final SimpleTerminalSessionClient sessionClient = new SimpleTerminalSessionClient() {
+    private final SimpleTerminalSessionClient sessionClient = new SimpleTerminalSessionClient(this) {
         @Override
         public void onTextChanged(@NonNull TerminalSession s) {
             mainHandler.post(() -> {
@@ -148,6 +149,7 @@ private void initTerminal() {
         terminalSession = new TerminalSession(shell, cwd, args, env, null, sessionClient);
         float density = getResources().getDisplayMetrics().density;
         terminalView.setTextSize((int) (4 * density));
+        TerminalFonts.apply(terminalView);
         terminalView.attachSession(terminalSession);
     }
 
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/disk/operation/DiskOperationActivity.java b/app/src/main/java/cn/classfun/droidvm/ui/disk/operation/DiskOperationActivity.java
index f641f5669..12a3b1e54 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/disk/operation/DiskOperationActivity.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/disk/operation/DiskOperationActivity.java
@@ -40,6 +40,7 @@
 import cn.classfun.droidvm.lib.store.disk.DiskConfig;
 import cn.classfun.droidvm.lib.store.disk.DiskStore;
 import cn.classfun.droidvm.lib.ui.termux.SimpleTerminalSessionClient;
+import cn.classfun.droidvm.lib.ui.termux.TerminalFonts;
 import cn.classfun.droidvm.lib.ui.termux.SimpleTerminalViewClient;
 
 public final class DiskOperationActivity extends AppCompatActivity {
@@ -67,7 +68,7 @@ public final class DiskOperationActivity extends AppCompatActivity {
     private DiskStore diskStore = null;
     private DiskConfig diskConfig = null;
 
-    private final TerminalSessionClient sessionClient = new SimpleTerminalSessionClient() {
+    private final TerminalSessionClient sessionClient = new SimpleTerminalSessionClient(this) {
         @Override
         public void onTextChanged(@NonNull TerminalSession s) {
             mainHandler.post(() -> {
@@ -246,6 +247,7 @@ private void startTerminalSession(String cmd) {
         session = new TerminalSession(shell, cwd, args, env, null, sessionClient);
         float density = getResources().getDisplayMetrics().density;
         terminalView.setTextSize((int) (10 * density));
+        TerminalFonts.apply(terminalView);
         terminalView.attachSession(session);
     }
 
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/console/VMConsoleActivity.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/console/VMConsoleActivity.java
index d5306c6e1..ef0c73806 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/console/VMConsoleActivity.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/console/VMConsoleActivity.java
@@ -50,6 +50,7 @@
 import cn.classfun.droidvm.lib.daemon.DaemonConnection;
 import cn.classfun.droidvm.lib.ui.ImeInsetsExempt;
 import cn.classfun.droidvm.lib.ui.termux.SimpleTerminalSessionClient;
+import cn.classfun.droidvm.lib.ui.termux.TerminalFonts;
 import cn.classfun.droidvm.lib.ui.termux.SimpleTerminalViewClient;
 import cn.classfun.droidvm.lib.utils.ShareUtils;
 
@@ -60,6 +61,11 @@ public final class VMConsoleActivity extends AppCompatActivity implements ImeIns
     public static final String EXTRA_STREAM = "stream";
     public static final String EXTRA_LOGS = "logs";
     private static final String DEFAULT_STREAM = "uart";
+    private static final String PREFS_NAME = "droidvm_prefs";
+    private static final String KEY_FONT_SIZE = "console_font_size";
+    private static final float MIN_FONT_SIZE = 2;
+    private static final float MAX_FONT_SIZE = 48;
+    private static final float DEFAULT_FONT_SIZE = 5;
     private final Handler mainHandler = new Handler(Looper.getMainLooper());
     private ActivityResultLauncher<String> saveLogLauncher;
     private TerminalView terminalView;
@@ -70,7 +76,7 @@ public final class VMConsoleActivity extends AppCompatActivity implements ImeIns
     public String vmName;
     public String streamName;
 
-    private final TerminalSessionClient sessionClient = new SimpleTerminalSessionClient() {
+    private final TerminalSessionClient sessionClient = new SimpleTerminalSessionClient(this) {
         @Override
         public void onTextChanged(@NonNull TerminalSession s) {
             mainHandler.post(() -> {
@@ -80,12 +86,12 @@ public void onTextChanged(@NonNull TerminalSession s) {
         }
     };
 
-    private float currentFontSize = 5;
+    private float currentFontSize = DEFAULT_FONT_SIZE;
     private final TerminalViewClient viewClient = new SimpleTerminalViewClient() {
         @Override
         public float onScale(float scale) {
             var dampened = 1.0f + (scale - 1.0f) * 0.1f;
-            currentFontSize = Math.max(2, Math.min(48, currentFontSize * dampened));
+            currentFontSize = Math.max(MIN_FONT_SIZE, Math.min(MAX_FONT_SIZE, currentFontSize * dampened));
             if (terminalView != null) {
                 var density = getResources().getDisplayMetrics().density;
                 terminalView.setTextSize((int) (currentFontSize * density));
@@ -158,11 +164,13 @@ protected void onCreate(Bundle savedInstanceState) {
             "PATH=/system/bin",
             fmt("HOME=%s", cwd),
         };
+        currentFontSize = loadFontSize();
         var density = getResources().getDisplayMetrics().density;
         var session = new TerminalSession(shell, cwd, args, env, null, sessionClient);
         terminalSession = session;
         terminalView.attachSession(session);
         terminalView.setTextSize((int) (currentFontSize * density));
+        TerminalFonts.apply(terminalView);
         terminalView.setFocusable(true);
         terminalView.setFocusableInTouchMode(true);
         terminalView.requestFocus();
@@ -184,6 +192,25 @@ private boolean onMenuItemClicked(@NonNull MenuItem item) {
         return false;
     }
 
+    @Override
+    protected void onPause() {
+        super.onPause();
+        saveFontSize();
+    }
+
+    private float loadFontSize() {
+        var saved = getSharedPreferences(PREFS_NAME, MODE_PRIVATE)
+            .getFloat(KEY_FONT_SIZE, DEFAULT_FONT_SIZE);
+        return Math.max(MIN_FONT_SIZE, Math.min(MAX_FONT_SIZE, saved));
+    }
+
+    private void saveFontSize() {
+        getSharedPreferences(PREFS_NAME, MODE_PRIVATE)
+            .edit()
+            .putFloat(KEY_FONT_SIZE, currentFontSize)
+            .apply();
+    }
+
     @Override
     protected void onDestroy() {
         super.onDestroy();
diff --git a/build.sh b/build.sh
index 8794ab536..4fbd496ea 100755
--- a/build.sh
+++ b/build.sh
@@ -142,6 +142,39 @@ build_netbox() {
     install -m755 app/src/main/rust/netbox/dist/netbox-linux-x64     app/src/main/assets/bin/x86_64/netbox
 }
 
+# ------------------------------------------------------------- terminal font
+# Maple Mono NL NF (no-ligature Nerd Font) is the default terminal typeface,
+# applied at runtime via TerminalView.setTypeface (see TerminalFonts.java). The
+# ~2.3MB TTF is git-ignored and fetched here on first build; only the OFL
+# license text is committed. Users can still override it with
+# $HOME/.termux/font.ttf, and the app falls back to the system monospace when
+# the font is absent -- so a download failure is a warning, not fatal.
+FONT_VER="v7.9"
+FONT_DIR="app/src/main/assets/fonts"
+FONT_TTF="$FONT_DIR/MapleMonoNL-NF-Regular.ttf"
+FONT_SHA="aa3b096bc92df8503d77482b285a0567bafa6e83230d969700f455e610b1f655"
+FONT_URL="https://github.com/subframe7536/maple-font/releases/download/$FONT_VER/MapleMonoNL-NF.zip"
+
+font_ok() { [ -f "$FONT_TTF" ] && echo "$FONT_SHA  $FONT_TTF" | sha256sum -c - >/dev/null 2>&1; }
+
+fetch_font() {
+    if font_ok; then return 0; fi
+    if ! have curl || ! have unzip; then
+        warn "curl/unzip missing; cannot fetch terminal font (app uses system monospace)"
+        return 0
+    fi
+    log "Fetching terminal font Maple Mono NL NF ($FONT_VER)"
+    mkdir -p "$FONT_DIR"
+    local tmp; tmp="$(mktemp -d)"
+    if curl -fsSL --max-time 180 -o "$tmp/nf.zip" "$FONT_URL" \
+        && unzip -o -j "$tmp/nf.zip" '*NL-NF-Regular.ttf' -d "$FONT_DIR" >/dev/null; then
+        font_ok || warn "terminal font sha256 mismatch (upstream re-released?); keeping it anyway"
+    else
+        warn "failed to fetch terminal font (app uses system monospace)"
+    fi
+    rm -rf "$tmp"
+}
+
 if [ "${SKIP_THIRDPARTY:-0}" = "1" ]; then
     log "Skipping third-party builds (SKIP_THIRDPARTY=1)"
     for bin in gvswitch pbridge bridgedhcp lbx netbox; do
@@ -155,6 +188,8 @@ else
     build_netbox
 fi
 
+fetch_font
+
 # --------------------------------------------------------------------- APK
 log "Building APK ($GRADLE_TASK)"
 ./gradlew "$GRADLE_TASK"

From fee903d6d79798b4aeff95d6af3b6b1b4f725e79 Mon Sep 17 00:00:00 2001
From: HuJK <gh@hujk.org>
Date: Thu, 18 Jun 2026 23:41:08 +0800
Subject: [PATCH 017/182] feat(build): replace 7za with XZ for Java; source
 native prebuilts from DroidVM-Prebuilt-Root

- Drop bundled 7za; decompress the runtime payload in-process with
  org.tukaani:xz + a minimal USTAR reader (AssetUtils).
- Runtime prebuilt is prebuilt-<abi>.tar.xz; the third-party daemons + lbx ship
  inside it (DATA/bin/<name>), so the 7za/thirdparty asset extraction and the
  BINARIES_PREBUILT/THIRDPARTY constants are gone. Stale assets/bin daemons
  removed; *.7z and *-comptime.zip excluded from APK assets.
- lbx also ships in prebuilt-<abi>-comptime.zip, unpacked at Gradle build time
  into lib/<abi>/liblbx.so (UnpackComptimeJniLibsTask).
- Terminal font fetched by a Gradle task (FetchTerminalFontTask) so CI and local
  builds match; build.sh slimmed to preflight + submodules + gradle, with a
  native-dev toolchain check when DroidVM-Prebuilt-Root is present.
- regenPrebuilts runs auto-build.py when DroidVM-Prebuilt-Root is checked out.
- Drop x86_64 from abiFilters (no x86_64 VM runtime exists).
- Workflows: add update-latest-release.yml; add manual workflow_dispatch to
  build.yml and release.yml.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
---
 .github/workflows/build.yml                   |   1 +
 .github/workflows/dev-release.yml             |  93 +++
 .github/workflows/release.yml                 |   1 +
 .gitignore                                    |   9 +-
 app/build.gradle.kts                          | 176 +++-
 app/src/main/assets/bin/arm64-v8a/7za         | Bin 2439344 -> 0 bytes
 app/src/main/assets/bin/x86_64/7za            | Bin 2711048 -> 0 bytes
 app/src/main/assets/data/license.yaml         |   8 +-
 app/src/main/assets/prebuilts                 |   2 +-
 .../cn/classfun/droidvm/lib/Constants.java    |   5 +-
 .../droidvm/lib/utils/AssetUtils.java         | 165 +++-
 app/src/main/rust/netbox/.gitignore           |   2 -
 app/src/main/rust/netbox/Cargo.lock           | 574 -------------
 app/src/main/rust/netbox/Cargo.toml           |  27 -
 app/src/main/rust/netbox/build.sh             |  40 -
 app/src/main/rust/netbox/src/main.rs          | 263 ------
 app/src/main/rust/netbox/src/nl.rs            | 762 ------------------
 app/src/main/rust/netbox/src/tap.rs           |  48 --
 build.sh                                      | 210 ++---
 gradle/libs.versions.toml                     |   2 +
 20 files changed, 443 insertions(+), 1945 deletions(-)
 create mode 100644 .github/workflows/dev-release.yml
 delete mode 100644 app/src/main/assets/bin/arm64-v8a/7za
 delete mode 100644 app/src/main/assets/bin/x86_64/7za
 delete mode 100644 app/src/main/rust/netbox/.gitignore
 delete mode 100644 app/src/main/rust/netbox/Cargo.lock
 delete mode 100644 app/src/main/rust/netbox/Cargo.toml
 delete mode 100755 app/src/main/rust/netbox/build.sh
 delete mode 100644 app/src/main/rust/netbox/src/main.rs
 delete mode 100644 app/src/main/rust/netbox/src/nl.rs
 delete mode 100644 app/src/main/rust/netbox/src/tap.rs

diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 24ba99086..8cbc9c64b 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -5,6 +5,7 @@ on:
     branches: [ "**" ]
   pull_request:
     branches: [ "**" ]
+  workflow_dispatch:
 
 concurrency:
   group: build-${{ github.ref }}
diff --git a/.github/workflows/dev-release.yml b/.github/workflows/dev-release.yml
new file mode 100644
index 000000000..e0f5772a1
--- /dev/null
+++ b/.github/workflows/dev-release.yml
@@ -0,0 +1,93 @@
+name: Dev release
+
+# Every push to the default branch (re)publishes a rolling pre-release on a
+# dedicated `dev` tag. The tag is a moving label -- it is deleted and recreated
+# at the current commit each run, so it never pins a specific version. A GitHub
+# Release must be attached to a tag, hence the dummy `dev` tag.
+# (release.yml still cuts real, versioned releases on real tag pushes.)
+on:
+  push:
+    branches: [ master ]
+  workflow_dispatch:
+
+permissions:
+  contents: write
+
+concurrency:
+  group: dev-release
+  cancel-in-progress: true
+
+jobs:
+  dev-release:
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+        with:
+          submodules: recursive
+          fetch-depth: 0
+
+      - name: Set up JDK 21
+        uses: actions/setup-java@v4
+        with:
+          java-version: '21'
+          distribution: 'temurin'
+
+      - name: Setup Android SDK
+        uses: android-actions/setup-android@v3
+        with:
+          packages: build-tools;36.0.0
+
+      - name: Setup Gradle
+        uses: gradle/actions/setup-gradle@v4
+
+      - name: Grant execute permission for gradlew
+        run: chmod +x gradlew
+
+      - name: Build release APK
+        run: ./gradlew assembleRelease
+
+      - name: Sign release APK
+        if: ${{ env.HAS_SIGN_KEY == 'true' }}
+        env:
+          HAS_SIGN_KEY: ${{ secrets.APP_SIGN_KEY_JKS != '' }}
+          APP_SIGN_KEY_JKS: ${{ secrets.APP_SIGN_KEY_JKS }}
+          APP_SIGN_KEY_PASS: ${{ secrets.APP_SIGN_KEY_PASS }}
+        run: |
+          BUILD_TOOLS="${ANDROID_HOME}/build-tools/36.0.0"
+          echo "$APP_SIGN_KEY_JKS" | base64 -d > /tmp/keystore.jks
+          UNSIGNED=$(find app/build/outputs/apk/release -name '*.apk' | head -1)
+          ALIGNED="${UNSIGNED%.apk}-aligned.apk"
+          "${BUILD_TOOLS}/zipalign" -f -v 4 "$UNSIGNED" "$ALIGNED"
+          "${BUILD_TOOLS}/apksigner" sign \
+            --ks /tmp/keystore.jks \
+            --ks-pass "pass:${APP_SIGN_KEY_PASS}" \
+            --key-pass "pass:${APP_SIGN_KEY_PASS}" \
+            --out "$UNSIGNED" \
+            "$ALIGNED"
+          rm -f "$ALIGNED" /tmp/keystore.jks
+
+      - name: Stage APK
+        run: |
+          set -euo pipefail
+          mkdir -p release
+          cp app/build/outputs/apk/release/*.apk "release/DroidVM-dev.apk"
+
+      - name: Publish rolling dev pre-release
+        env:
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        run: |
+          set -euo pipefail
+          ver="$(git describe --tags --always 2>/dev/null || git rev-parse --short HEAD)"
+
+          # Drop the previous dev release + tag, then recreate at this commit so
+          # `dev` always points at latest master (a moving, version-less tag).
+          gh release delete dev --yes --cleanup-tag 2>/dev/null || true
+          git push origin :refs/tags/dev 2>/dev/null || true
+
+          gh release create dev "release/DroidVM-dev.apk" \
+            --prerelease \
+            --target "${GITHUB_SHA}" \
+            --title "DroidVM dev (${ver})" \
+            --notes "Rolling development build from ${GITHUB_SHA} (${ver}). Not a stable release."
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 78ca65c98..ed0159217 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -3,6 +3,7 @@ name: Release
 on:
   push:
     tags: [ "**" ]
+  workflow_dispatch:
 
 permissions:
   contents: write
diff --git a/.gitignore b/.gitignore
index 722684c7e..51138b689 100644
--- a/.gitignore
+++ b/.gitignore
@@ -3,6 +3,7 @@
 /local.properties
 /.idea
 /.vscode
+/DroidVM-Prebuilt-Root
 .DS_Store
 /build
 /captures
@@ -10,9 +11,13 @@
 .cxx
 local.properties
 
-# build.sh stages the compiled network/boot binaries next to the committed
-# 7za prebuilt; only 7za is tracked, the rest are build output.
+# Legacy native-util source locations -- the daemons + lbx are now built by the
+# DroidVM-Prebuilt-Root pipeline, not staged into the app tree.
 /app/src/thirdparty
+/app/src/main/rust
+
+# Stale daemon binaries from the old build.sh staging (now delivered via the
+# prebuilt tar.xz); ignore leftovers so they are never packaged or committed.
 /app/src/main/assets/bin/*/bridgedhcp
 /app/src/main/assets/bin/*/gvswitch
 /app/src/main/assets/bin/*/lbx
diff --git a/app/build.gradle.kts b/app/build.gradle.kts
index 2c6824937..d0cf93ad1 100644
--- a/app/build.gradle.kts
+++ b/app/build.gradle.kts
@@ -1,5 +1,8 @@
 @file:Suppress("UnstableApiUsage")
 
+import java.net.URI
+import java.security.MessageDigest
+
 plugins {
     alias(libs.plugins.android.application)
 }
@@ -26,8 +29,9 @@ val gitShortSha = runGit("rev-parse", "--short", "HEAD")
 
 // describe fails on a checkout without tags (shallow clone, or tags not fetched);
 // fall back to a 0.0.0 base so the build still works and the version is clearly
-// marked as tag-less.
-val gitDescribe = (runGitOrNull("describe", "--long", "--tags")
+// marked as tag-less. Exclude the rolling `dev` tag (dev-release.yml recreates it
+// at HEAD each push) so it never shadows real version tags in the version name.
+val gitDescribe = (runGitOrNull("describe", "--long", "--tags", "--exclude=dev")
     ?: "0.0.0-$gitCommitCount-g$gitShortSha")
     .removePrefix("v").removePrefix("V")
 val generatedVersionName: String = if (gitDescribe.matches(Regex(".*-0-g[0-9a-f]+$"))) {
@@ -60,7 +64,9 @@ android {
 
         testInstrumentationRunner = "androidx.test.runner.AndroidJUnitRunner"
         ndk {
-            abiFilters += listOf("arm64-v8a", "x86_64")
+            // arm64-v8a only: the VM runtime prebuilt (crosvm/qemu/kernel) ships
+            // for arm64 alone, so x86_64 could never boot a guest anyway.
+            abiFilters += listOf("arm64-v8a")
         }
         externalNativeBuild {
             cmake {
@@ -103,6 +109,14 @@ android {
             useLegacyPackaging = true
         }
     }
+    androidResources {
+        // prebuilt-<abi>-comptime.zip is a build-time input only: Gradle unpacks
+        // it into jniLibs (lib/<abi>/liblbx.so). Never ship it as an APK asset.
+        // Also exclude the legacy *.7z (replaced by *.tar.xz) so a stale archive
+        // lingering in the prebuilts submodule can't double the APK size. The
+        // runtime prebuilt-<abi>.tar.xz + .json stay packaged as assets.
+        ignoreAssetsPatterns += listOf("*-comptime.zip", "*.7z")
+    }
 }
 
 abstract class CopyNativeBinAssetsTask : DefaultTask() {
@@ -139,46 +153,163 @@ abstract class CopyNativeBinAssetsTask : DefaultTask() {
     }
 }
 
-// Ship lbx as `liblbx.so` in jniLibs so the (non-root) UI process can exec it
-// from its nativeLibraryDir -- the data-dir copy used by the daemon isn't
-// executable by the app's untrusted_app SELinux domain.
-abstract class CopyLbxJniLibsTask : DefaultTask() {
+// Unpack each prebuilt-<abi>-comptime.zip from the prebuilts submodule into
+// jniLibs/<abi>/. These are files that must be executable from the app's
+// nativeLibraryDir (currently liblbx.so) -- the data-dir copy extracted from the
+// runtime tar.xz isn't executable by the app's untrusted_app SELinux domain.
+// Build-time extraction (unlike a first-run extract) is fine because the package
+// installer, not the app, populates nativeLibraryDir.
+abstract class UnpackComptimeJniLibsTask : DefaultTask() {
+    @get:javax.inject.Inject
+    abstract val archives: org.gradle.api.file.ArchiveOperations
+
+    @get:javax.inject.Inject
+    abstract val fs: org.gradle.api.file.FileSystemOperations
+
     @get:InputDirectory
-    abstract val distDir: DirectoryProperty
+    abstract val prebuiltsDir: DirectoryProperty
 
     @get:OutputDirectory
     abstract val outputDir: DirectoryProperty
 
     @TaskAction
-    fun copy() {
+    fun unpack() {
         val outDir = outputDir.get().asFile
         outDir.deleteRecursively()
-        val dist = distDir.get().asFile
-        if (!dist.exists()) return
-        dist.listFiles()?.filter { it.isDirectory }?.forEach { abiDir ->
-            val src = File(abiDir, "lbx")
-            if (src.isFile) {
-                val dest = File(outDir, "${abiDir.name}/liblbx.so")
-                dest.parentFile.mkdirs()
-                src.copyTo(dest, overwrite = true)
+        val prebuilts = prebuiltsDir.get().asFile
+        val re = Regex("^prebuilt-(.+)-comptime\\.zip$")
+        val zips = prebuilts.listFiles { f -> f.isFile && re.matches(f.name) } ?: return
+        for (zip in zips) {
+            val abi = re.find(zip.name)!!.groupValues[1]
+            fs.copy {
+                from(archives.zipTree(zip))
+                into(File(outDir, abi))
+            }
+        }
+    }
+}
+
+// Native-dev hook: when DroidVM-Prebuilt-Root is checked out at the repo root
+// with a non-empty auto-build/ (someone is editing a native util locally),
+// regenerate the prebuilt-* artifacts into the prebuilts submodule before they
+// are packaged. Pure-Java devs don't have this dir, so the CI-published
+// submodule artifacts are used as-is (the task no-ops via onlyIf).
+abstract class RegenPrebuiltsTask : DefaultTask() {
+    @get:javax.inject.Inject
+    abstract val exec: org.gradle.process.ExecOperations
+
+    @get:org.gradle.api.tasks.Internal
+    abstract val prebuiltRoot: DirectoryProperty
+
+    @get:org.gradle.api.tasks.Internal
+    abstract val prebuiltsOut: DirectoryProperty
+
+    @TaskAction
+    fun regen() {
+        val root = prebuiltRoot.get().asFile
+        val out = prebuiltsOut.get().asFile
+        logger.lifecycle("DroidVM-Prebuilt-Root detected; regenerating prebuilts via auto-build.py")
+        exec.exec {
+            workingDir = root
+            commandLine("python3", "auto-build.py", "--out", out.absolutePath)
+        }
+    }
+}
+
+// Fetch the terminal font (Maple Mono NL NF) at build time so CI (./gradlew) and
+// local builds behave identically -- it used to live only in build.sh, which CI
+// never runs. Download is best-effort: a failure logs a warning and the app falls
+// back to the system monospace, so it never breaks the build.
+abstract class FetchTerminalFontTask : DefaultTask() {
+    @get:javax.inject.Inject
+    abstract val archives: org.gradle.api.file.ArchiveOperations
+
+    @get:org.gradle.api.tasks.Input
+    abstract val url: org.gradle.api.provider.Property<String>
+
+    @get:org.gradle.api.tasks.Input
+    abstract val sha256: org.gradle.api.provider.Property<String>
+
+    @get:OutputDirectory
+    abstract val outputDir: DirectoryProperty
+
+    @TaskAction
+    fun fetch() {
+        val ttf = File(outputDir.get().asFile, "fonts/MapleMonoNL-NF-Regular.ttf")
+        if (ttf.isFile && sha256Hex(ttf) == sha256.get()) return
+        ttf.parentFile.mkdirs()
+        val tmpZip = File(temporaryDir, "font.zip")
+        try {
+            URI(url.get()).toURL().openStream().use { input ->
+                tmpZip.outputStream().use { input.copyTo(it) }
             }
+        } catch (e: Exception) {
+            logger.warn("Could not download terminal font (${e.message}); app uses system monospace")
+            return
         }
+        val src = archives.zipTree(tmpZip).matching { include("**/*NL-NF-Regular.ttf") }
+            .files.firstOrNull()
+        if (src == null) {
+            logger.warn("Terminal font zip had no NL-NF-Regular.ttf; app uses system monospace")
+            return
+        }
+        src.copyTo(ttf, overwrite = true)
+        if (sha256Hex(ttf) != sha256.get())
+            logger.warn("Terminal font sha256 mismatch (upstream re-released?); keeping it anyway")
+    }
+
+    private fun sha256Hex(f: File): String {
+        val md = MessageDigest.getInstance("SHA-256")
+        f.inputStream().use { ins ->
+            val buf = ByteArray(8192)
+            var n = ins.read(buf)
+            while (n >= 0) { md.update(buf, 0, n); n = ins.read(buf) }
+        }
+        return md.digest().joinToString("") { "%02x".format(it.toInt() and 0xFF) }
+    }
+}
+
+val prebuiltRootDir = rootProject.layout.projectDirectory.dir("DroidVM-Prebuilt-Root")
+val prebuiltsSubmoduleDir = rootProject.layout.projectDirectory.dir("app/src/main/assets/prebuilts")
+val regenPrebuilts = tasks.register<RegenPrebuiltsTask>("regenPrebuilts") {
+    prebuiltRoot.set(prebuiltRootDir)
+    prebuiltsOut.set(prebuiltsSubmoduleDir)
+    // Only when a native dev has checked out DroidVM-Prebuilt-Root with source
+    // under auto-build/. Otherwise the published submodule artifacts are used.
+    onlyIf {
+        val autoBuild = prebuiltRootDir.dir("auto-build").asFile
+        prebuiltRootDir.file("auto-build.py").asFile.isFile &&
+            autoBuild.isDirectory &&
+            (autoBuild.listFiles()?.any { it.name != ".gitignore" } == true)
     }
 }
+// Run before anything reads the prebuilts dir (assets merge + jniLibs unpack).
+tasks.named("preBuild").configure { dependsOn(regenPrebuilts) }
 
 androidComponents {
     onVariants { variant ->
         val variantName = variant.name.replaceFirstChar { it.uppercase() }
-        val copyLbxJniTask = tasks.register<CopyLbxJniLibsTask>(
-            "copyLbxJniLibs${variantName}"
+        val unpackComptimeTask = tasks.register<UnpackComptimeJniLibsTask>(
+            "unpackComptimeJniLibs${variantName}"
         ) {
-            distDir.set(rootProject.layout.projectDirectory.dir("app/src/main/assets/bin"))
+            dependsOn(regenPrebuilts)
+            prebuiltsDir.set(prebuiltsSubmoduleDir)
             outputDir.set(
-                layout.buildDirectory.dir("generated/lbx_jnilibs/${variant.name}")
+                layout.buildDirectory.dir("generated/comptime_jnilibs/${variant.name}")
             )
         }
         variant.sources.jniLibs?.addGeneratedSourceDirectory(
-            copyLbxJniTask, CopyLbxJniLibsTask::outputDir
+            unpackComptimeTask, UnpackComptimeJniLibsTask::outputDir
+        )
+        val fetchFontTask = tasks.register<FetchTerminalFontTask>(
+            "fetchTerminalFont${variantName}"
+        ) {
+            url.set("https://github.com/subframe7536/maple-font/releases/download/v7.9/MapleMonoNL-NF.zip")
+            sha256.set("aa3b096bc92df8503d77482b285a0567bafa6e83230d969700f455e610b1f655")
+            outputDir.set(layout.buildDirectory.dir("generated/font_assets/${variant.name}"))
+        }
+        variant.sources.assets?.addGeneratedSourceDirectory(
+            fetchFontTask, FetchTerminalFontTask::outputDir
         )
         val copyNativeTask = tasks.register<CopyNativeBinAssetsTask>(
             "copyNativeBinAssets${variantName}"
@@ -213,6 +344,7 @@ dependencies {
     implementation(libs.material)
     implementation(libs.okhttp3)
     implementation(libs.snakeyaml)
+    implementation(libs.xz)
     implementation(libs.termux.emulator)
     implementation(libs.termux.view)
     testImplementation(libs.junit)
diff --git a/app/src/main/assets/bin/arm64-v8a/7za b/app/src/main/assets/bin/arm64-v8a/7za
deleted file mode 100644
index 109880c35402ef0a352be86cf3ac13baafe39040..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 2439344
zcmeFa4SZD9nfQP1otb2k36eJ@hQQ1u0g_0!Xh9PNb2AAqCN@HnwiexHlJF9UrbTQw
z2qlvcMH{=zAYEH*mjFf$N|(0KW_H^WK+%@1%S-ESclW0O#GtV)_)-}K^ZPz`=7s@+
zrMtiX|FggS{P=t>XYP4<&U2o(^PK0Ld(t}d_F1~7DeIrEexl5`X@;2<`CqB8d}e}G
zMH#A4#q<BwD&4H>7%q_?M)WO`2L2_-e78~+fo}dEM@ip_NO|9h1!g@fedaR}oQz7{
z%(vRvd6Va*D9SHshFNZ<x#pWvRw{MnpQQ5mqxks$r9rZJkE9;+O(`q2+QpMEzb}WU
zL7Du!KawbCG@W<i{sl6=EB%)otyo37PwX!<N|$IFC4-4$IxuWJvnxNRQofa3_QhMi
z{|j%=*M3#_gO6TWT>Q^dq>JJl+i%XT+}(4|rh<o))P{2__dK(kygpm)D^mXF{?n8Z
zI;yFu=T`o_=V+=r<!vkr3+#7YD*UcZZFAeTUXLn%#jk7R8R2s)_dauqddUyX4lCXL
ziu5aOW7{aF5$acJs$Vz4Cd_AiVS&-At8i<g3R!TZty#XH6u7&40xED=;7HxgX9HEx
zCUl&>8tk*eI%Q_vRkOl=$}Jl7DYa8*ppw-g6R!tKO}r%Uli;^ad$3Ai)=liXFSei9
zJ}!rwSA8;WmuvT@$8-@Lvy5<n@tN@Mo@vq$nugqVbv^ktX1=G?%)cB>m3E${+Gusq
z>z@&{Xv(-F{OK(-=__<a|HCLZG>ym@@)7nr4YLo6rb5^M8|z$-FMo=km&kYW2z*I2
z!Xk?nA52;N(o9npt-LFx+qsoLi|A9e*7N>dde8gl;UCe1S8kmhPD8i4(5q^6c6pqd
zmwxB+GaH76b_TLlF!++%&~HoMrr83A`}E>h{x~!=reAQXE&-0O=iJJD5#6=$ipe)|
zyHei&8TI_S+G(Ty9!>4=8WV!`$WpD+2AQ&Iv_d1~wX1nrp$d65HLY%n5k6(pwuxP_
z<j*j5J)+BkW1mxGGpZ-h=RIg6GMWus&8F6Qr;H7n@Z(iYnxPK)3ycuPb)LUKg#vME
zS|C;JPysC%(A{Uu-^vzjBhTAs3;G{YJ&|&IB+qb=r}g;1W`w)Y3F)W)0VAAa$F4c)
zOT`CU8Ou>y+O{_IkvZ;AR<nHrGhVtMyaV-@%1L1U2zld2*6DuWYVN>c;oq>`MFxaE
zLKiFFqzkmUQr*20`TEht@`cP{b4(go_P~@i?2E|SyMLyv{dd4Y<nlQ3De|OY(`D|d
z@2l;#=DvQLZJY1@)$2`r`DmFr@A#pEsZ-2_GUp8QB|7iK>bme{SXQI+shWH#|NRq3
z$QwUGUg`*W*d5`EY1_`v5m#i3VtF8Xq_Au6r>RTe1xDy2AasCsX@S}^?_-;GVN=r5
z(>f*Jt<nbj&<B6}m(DD2M+dP_UC2mSWCWRhKg|e7WOv^)+M~5+Ok4TKSz+(Vl}EfD
z6%_f7ts`{2lKJKmT4NIe|4G_hsV-e<y>l!7@dBIvL4&R53^W&e{sHv+0KE?9sBoCy
zMYYTuHY0pQztF~iE71rEeLsh8?!xw8bLUsj{4KQY!}h1XD7OC^)AsjAZNI_TJ+|Uk
zOg(i34om)9@W6vD3+F_5AoIcp4W-zZ7cQ6^Mk<fU^G`1rhs;ef26KKw20j?8!q#}Y
zz;*cuc0}+Jn_=RmNAP+dyoARej6ILnxs}gffYZfgf=}$6?uqdqEgxqO^b|kO+vN=U
zRq++om%3&fLz!(Zkt^(fU<A36Jeeab`xt8r&aJ$VZhwr@&C;D%y7fV~BNx*R9Td8W
z9t9}3ew#G3M`-xYf0BlmjPJjoH<!Q)j6f^q(7?s?yKjWN&ySFI!w7i=Bjja|ke7L7
zKH9~+`Y+3PRQLWrl<|Y6y!MYCSzc>~X>rhN%@OD6cs}nu9na^Tr{np&OX+wp+43o)
zYs84HxM)2ycLY4jN67PykazP4d6yYOAF^fX9&^iOa6500-=oe3@E2d(vdh@8gJP4f
z#<q!F7JK|HN5t-?VRs+H?)q<y=wSez{Mu3@<OiRxp|`JKo3Fj|YiGVg9Z&rEI{mh5
zhwZb-g6Oc>)<;|B`~OT^|247j@fXt~w&2&FZ0Cn*a(O#%#sdys91l?ak@dO%suB1R
zH$on^N_72lc5!H*h7YCnoGVqq_wTaxh+VuIU#uVctLMw`6ND%Bo^X?+=cDCuJx{2I
ztH!Dw_c2c%EIRHB3*4jeiZpQe40#z%%t6At8_U8UlFt9atnjayH+SplO?&OCrVo6k
z17CP}f0Yqlb%S2Cfq5r@Og}MSg*I$qd@^S$HSN2zRM7?*(_Va%=semFul=b;$birO
z_Vaa_d#e1ID&+TRW?d;W>(Y0h6$`<?G=O8pL72l+ehZ(>u@uh^oA^KLi{QVsEX>?+
za2IhF!FhvSP2GT8rQLadMD~v9!QY<MH~8mYN?(7}ZpPBwUwLW0I>xaF+*(t?+rk(8
zyJU>u?T_Le89TByJ#biP^B>^MynE0Ke-u98ab!FjJ~SwOQ0$PVtD18wOM2d|_Ob3P
zg@0x6ZzlYk)dRnSu{zlwZL6Yf1Ne<5?{k68eEmsqMzk?`k#U;%S+)+{f(KV%6E3n>
z=_A0pjND%t{LA_P2gQGm`T(Zg>4WG0hkbxyoxhA9b<jIP9Pa3mN6a``i5iZR9h7*S
zN#AHJPW(1&y&fxbvGJnVwT8qM-?Qo4j*d~`@BE$GaC8i73DyNCy3~fL$dmm32EUII
z%aGq&`0Zj%Eo&5i)Skrh*Zf^J3mEC!Jjjf-wir=9F2mC+;oqM-&Y0NE!B2|a2;Sd#
z!-oG(>?ZpYV>iP*lrdT{oya&Zl&u(_<=`t9$yOIMOuJ}p5x~wF=ty7GzYJVtvrXJ4
zN9LAO=)ch7VmXS{>x;`GIPUK8r>S+a&Q{OJdRpXW&ofW|SfyLCa*6-=U*Oj;tZ1C5
ze`x4&=|62}S-2WGYk&?u?A7bovW{=h414+Q8Ldt!l@kmgM|G6TxQ|ipd$JVz$eJZ>
zn-zCi1K!r}$oQgjrsxr4jK&cP0s@z|X_0ugsXu#C)jHE>^IvVPONR9?HfC$ewlOPg
z;!rj_>}5^D+Qx(tjo%*ho-8$E6K3704qpNzYi0z-!OOt7XSNArm}bN)mP4!M`oy64
zCSCB#gx?a0H@A*we;~%!`^3Iq_eJ{lmyL}7cW3@-{Lhp|U`)OY40Q!CPL@SroP^gS
z(XlWR<1y!-EcQX7F>nR%%<)Z~WyZnH@;=|C<tHQMu{87`XJ*?|GtK=Jkpn++rFCsQ
z+_v#2@3ej4H}80_`QRO5hn>XrPd{VEP3}H(Nq^4~_oMBQ&34H0jn1uf^_<(M2TdR7
z3lSfv4?m<jHEx4K=5Cqpz_r1b!ne}#3mt#sz^1BgB6pOp?;ow07Xwv)e~V*-q>e?7
z4T`no(H!bi$3|@LWHLIBf92sFdHc2cy64yZqXSiMJ?YqB(dXaME4Rn?n~|Oi?Y>6r
zM}@^U^%LiP&g<B4|5Zlleqz7kZ+OI~s+!t~pOc~`iSAv!4O{cLl(|)UQ{K=}jRBs!
zvRRj3r9wMDe(k0EuTl{mrLM$bjnBt#pzff|6<+E~9O=By?tA9%vmNQNcnW?(6H{NK
zc0w`M$~4CYLsz>V!!8mF-D%>D-t8jJ7u#N7FUKbkpXsqU6=q$q>*Cmzz!y96Gsf~Z
zwllVUtgM*&mYpB;AJc;WCgX0`g8xbi?W_Dgy(m`SEEuIH+YWou)Q;n){^1?FnjGBv
z&M)5)zBm}enoot_k#QZhIkxFqpvt3+$9#6Rj9tcWX!ep{wn3k^mI-IN?JBri*-!8J
zc&Mh|W+$HBdH6UucOa7@Tgsz?*;y*J{$K0Qlz2*hshzbE<FgM6eb3wN-4a7J_wOXn
zoC|(D%Zyc9xQ>(xu65BlA=_CRsy(Zgy@U?rc#?u;c9qgV-?>g($bV<{8LO{YIMUWj
zT}u|ToxV`*Dz!}XsFe0z!x_v8xO+X9X)o>Sqy3izW`&BgG_(Iwl^JZnM)>dap78>w
zBoG%GssEu;o%M^In3xv)pdnsjdIgq#zFY0+`L$D>djGDtp0CnJxRm%Fa{n%JwA?p4
zvUYJt^tQ`4A*cnI7a6bSRN=NCP6&2wvoq(wdt?jS@B<@J)qDV7q^uu)O1`X@%rYDM
zfvhk4Z5ai#cG@=}{{=^FW42lCj}jZS+JN5<Sz8@*V~60cPxfQr-BJAZaH%=x6`WgH
zhW|bjA7d8&`|KXZ8SJx}@wOe}C(8UHw#>_X>GkAcgUr3e9kM1k4&2!FfDvc<^gC44
zr#}YH#kuOV<WHv0Vvjl<U~I)%>a<EC%}}TNl1bCmX=J;mI9Z+UN+(THr~MhE*vYPO
zq)v6Z-)-)L?(kw?`|&9SCvy((DhR5NhaNY_S_8i1*FejEjI3QQ9YbK!Cyqh;a7gxB
zcX*?FrOd%Q#1HlZ*UYE?UGPx)-;6z|v#FgK?5*!RH}v>U-hIS5@iTT<e#RQ+025E6
z!1OhaHo*H<<1zcU)rL0lJ9uZ#-*MjWNZ+=2Cox{~knFIGMaHz2@mP83(Y$tRj4?Qg
zJ?sJxXtFcn<75YW!A<hS&;I=Zwc+Fl?T}})opJVjyKT`iA#36rnK%m02Kb1bn*pA$
z089F`a1&hrTzRbfeU#=gzWv3t9>(v3^Z2z#@l(WX1TPCm3%{$u@B2~wn7d>xYs!zs
zKZ{mf@12KvFE9m`&}%ES`rZib(&6`P>g}S=SDE*>QvYJUU(EBsYU8oBkE;!vse38U
zuip07kIwU4Xy}UKy)CAH5BY+#qW?YEg`>nr+)8WOgAJ7a(#cbOdBN%6_B-0O5kp}+
z_JTU^xus5i@H5nTojO7b8LRj&5qT*HPNpot`Gb==Dkx+8;tQ<NSij3W{UvC!TX5w)
z5b+gvSg}Tt)qjq`SMU*>O}OB74RB-S<nYH)*#VaN{gC)i!?5lFj*N9_47^yrnK1qN
zK@FIKzu+Q#yAk{zzlfIaf!9y0zM^_1H2yrWtvTl0${!E!cT}gTQ~vslAo0Q-8^+Hz
z<AoBVk(l8tI`+NE-ZP&%A6=)yCnv?-`_`x9?|u6w=e@r#PPn%aTU1BeE%+{d%<BPc
zw+S!%+Tit4MtVt^FDF<aWu%vswdV$Nq>S{EGGA_RBX&gc>-gOjr`A2jK8RwE`>&2&
zZT8*I+)zUM{%kE+EU8Zq&LD->2R&WBBE_D$r%NyDueSwnlJa(YaGIoB9Kp{>x;M_m
zyZ=~x@YC|HCj>twX?9}pI!S%5U_Pm_H8B{57lKO(zpb$w(8&w^HI+mkNx_e)lVMkP
zU?Wd;U!_j1QImpO)Yzb6UMgwy7y4iF7J^d{zvHy{EmB@KTJ2aBukHZnQ|IF2?@-LK
z(_UA1c=3b&ws7wZMLNcAzoQ#C;?MrD@z`{)B0k46^X81oFFlY^S+&hm`Gb}_E05fA
zXXTE<J1c*^^3KYeKR@M;l|0#>FTA6H=Py2=cgL4`3dV1#Y#P6{@><F?@_p_tl@0E#
zl`oI`hsr;U`^U=6hjvun^^|k;DC#DR-(0zgdXpadL1hPZz3$DG+sB0}XSt_02Pj|h
zbn@s&$3IzF^_26D*WFK6s;u3Wzs-7}x%HtRRX*@^@*N*#O>ds)o>BSmLpv)Ua4&8i
zpxs?hC67)XKe2f}`5$GqHrGCte8=_UZ*E@9``B^Qn~UgY`S?lAt?tI=vHUJ_|3l>v
zWh>oJRTjCwU%6p?aq~*|_R3op+`4@w<=^31>3*8B-PHMe(k{x1xBq)h-W|WKfd=j!
z<ZrIL<y2tCU0=xK{Rg~nsl4UAz>JTmv(o(|-nUlXa)x)ad?)WuR^D<pFk>uZT<H!~
ze(?)a?wJ1t>8A%cZ8L6(=7&xA+kn+JV<maZh33=`Q-8>;|15CZW;{XJhG^MuYXr`7
zz;B!Jk9}YL3#l)>ko1;Q?UL8Lk};e7BmK91U;T?$_kFebmiO9cyv7(mqWzG2XXRb)
zf2=G%+diWedGO)m$v95kl2Q5k%8bgPXFc@WK109x&dTHm?yUUyY3JxQ$VGL>7L&if
zhHo9n%YEagH?Qc}S~>Kz^Nv^HSIzk4&DHSeiH;{L2dFbd-s<rWG~Z0#WAN~izy3+(
zFaPEzm9yO|nwO8i5uQ$O{_WbIR}Mb<6BAagdu4Nx`^L%-JD#q*4Okzo-Cg+^>dYta
zZQ89QT{?b6^B2kUeDf!jB|O);A7~ahMGy8=Hu8RZ6vq4qw^gou@Y%}89(=CyhA0ea
zFZ~)(82RHo&E9DHQCTx8%g1?}=g@v7<Jt(Um)+jxa8_P()3`kPSl;~Dcn|o^K-Q5x
z_sxu9M&$%|PID3OkB*b~Y-m3N8Om<1BK<Tl=Tr9bxGBxc+_}wvAf4}?(!6~f^~hhx
zGmv#%^N@RTa}#nn8NP2ApWpndyP)}(pDVoM(Q(fruQMv2{aoH1uL5r+eZ|qHY1~fQ
z&8SQspWD1YE2mlNRnWGIcaim`aoZ~2qD}d@pPRo6fSok?*6sID=UMnK^$#GsP2-*h
z?`JDr$d9xsN6yN}?KayaO)lPk9WwYRc~a-u&q<vhne{8kPeLF533->YL9^`pW?7Sz
zp&M@lKhlr1>yGwA8G7<|v|WYS?+?tfPJV9?JkgtbqPnnQ{C2bKS!mIO-6)E-JHR-K
zkk=%1>7N*95%T<NaERbic*nKq!EeE1JaC$@OY>=0gl<dueCiIOcS-2nbKp21y$SIi
z!L{&?O!VYKXw-x)TS>e5*bONY{TifS(aR)sQgm!G@Q2(#tQ?E3NS#|4Lj_}a72RqY
zx1&<@P4eC7SrYnMi`~|KJygTq%#IJn%epWUOY}_0xJfB>O5@?&)F~Ah7xb=k1$|Sl
z3fh<-%9tlwn6th}dNc3sleMsq-z9lkxP;W>(ZVv9*yiXVWg8W|=j_nqlJ7MV&3RD~
z&+x2LJ$=m2>@fscGlXUC^{hz<R#R8zB`?3Nc}Z;@75wd0YTbOwK9|NGROwa0FYsF(
zzbg1SN!N@v+i~7u$18u$9z{-au&6XQ_^-6trOyav?8^<}haWDduJ{nyP4^e#Ul%A+
z;u`F&s7_zb-poF5*z`4ZT4OHzcj*tDSC&o)&SxDd?PU+Fkf%P{-YA_WagpG)wB4m&
z>(VV4<?8fN*6sJpyuLR%IGKI}^(nyuN%hoV9%%{lBs4nsJ?2-XJ{2s!y>Eu(=_)yR
z>-4=dH2kr%@b-ykyDC}hF8l7<pThH7D_6OvH`jsR(Au9>X4%`OyV;}JOkbto>SwL)
zmbE(P_=F!mBPqB595mL-4|b&n>sYhTywh{0SZT}D7|zByRZ54E7W9)}#+tgGy29I%
z{<L5RZGCD?keCH~4ID}bhQMx2RW)tE@OG)-1j>r(Ut$hQIb1VkZwgp4ZhWvEyL_ea
zbxiQ>j~MrsF~PSa^<@N4N_s3K_y#GyL{%4bKWg(72+m%QN-b%L<2)s2D%!6N{*F4&
zNqs%jY;XFc|5O^5@#?ITMb0$;grNSMo%LiORrds{vXj+{;yhL4Nm3!xPyKFLIG4J0
zeG`HUdhOv$%BRl?=TI&(nyv8R0<7_!oK0-c4E{=RjOs<dYsyV+=!17kyy*k6hB;V*
z?9%R_r^6BUGj4@n(-+gGFCkCb?C?&RXtmi<l5Dow;R!g*JsS_@DsXeqvmgp1FgE!2
z!0?S$>umT>MaYOBziB=)B6*MVZbwe;?CYB$ajegy`w~mC{Nvw@FRGN7(kpSrU*7e1
zy_G*6f1@cg^Vj~Q@<wE)m^e`#GNT0^Jlp_WJ254zt)#>sLY$)`zGSSgZ>jGkzEn<p
zDYQu`lh+a}3DBQ^Z(_)z4c{-^*vk7y*PTBrBxjhyO=UeNC(Xj|o{ir<2fzEad(W->
zrFjlK7a7`w{1~h$y@qC<5f#~P#@7!h^nBe|;$&*ukF0ki$9&(yJ2YG8<;gZ_HzVj(
zHwS$IXK)Sj^slTRh-DVs9<yeM9pBJCUE;OtB;ImvWn9m>HJqcbj_<+uKPa)6qo0n%
zfBeMRk)L(mduE2+*emxcjYsFP^|(F6X|EE#O)=vO5}T9wOF#Q(W`6&aV1KKv$0K>1
zRWS2B*9ZG2DPniTf2&m}$Dww<_vkkdzkiprXX<C4d*}Y7e}3o3N#CqOch>E?xip;q
z&nMpbqwD+kebA85^TF@FS;e;x>2m(DBtD`u(kC`_r(YRG?vrX+L;9MH{3Z^VKDY<|
z`Z*`zR@XEMul*Uu3bz{5q{;6>>hI8&Z9X?t6RuWa|8(Aa)iRHRSW~qT9)ND|-!+FA
z({02L+riZc$)1DTZY<Lewq^F;B74-xn<8$R+?J`WG9EK{ye-)6RqBbUr@nsV{%jQ{
z(7nr|^RZ7~7}qM{EbzINvxsLA$0A<dXEWni>%9LuJ1p@ES&RDF&*+0j?BR#gp}(w?
zkFhU#W~&OaKfkW%v032;e8n<sb2jl{#oF|Ery_Q2+x9wfblDeweYE5me8)gMyRp8|
z{T?`DA2W#MY$9eAI5SkE6O+gVhW_!;t`F$LU`=y$4RJ=LI$5Js5m#E*kQCXAIZo`l
z4tf_u@7xUIfuk#pAL^>)!#RHxS{h-Mrb3Scqm}XRAvMQOj7@kfd=z@idNx)bFaB-H
z+}n}84AC!%7YjX<XU-9^H4^jm_$L(!%`R>$@3HL-&Ycgpzxxa4+Z&TVsr?Sm>xQ{M
z@Abq7wY$-WF4kyMiM0?*zg)i-F15L~-;9Hv<9SXXqer3du^bhAgK;QyRvk<iKjN^R
zCoj*jVMloAacQ&u!^j$6;G1+iRc7vg3f$N}DLbfj5pN|`q{Y~!KH@6oxRXoakJ@RS
zS&zcHpgwlvK=#?zBPB^~o!+x0kL{s8wtSuM?%Cmbv#oBPcbB%YdjVqi{Q9CILsK`s
z#vXu)<4<Rr@r-`vZq=V1%+Gaf@E|kTjuH0;WGrU8{+VIm?37qHcpsGZ!Y8kXc>*{s
zIkK0t=b1yu&_N!HwpWtATir{HSVP`)?5~Y89>l^|I(qtx6=(VNZSNBA&Un70=c=Fj
zdeUod%fIIC^89#vplY1cC|a&(biQqK7o79_ugsUVjLx6g;w#1@@9{>UD$Z^c?N{Sn
zuMWk}8}RJUeAO23%H-VT*fJxOWf-ARcQS9J&(1$i`|T^-)nBwt4lcH36+De!FbTM?
zX&HkrrmWp~{8Vk><}q1`6K$h9cYD>ceb=a(-9>8Inif^_hOW|oNBag(mg~FmDrI(u
zdtQU*)y(T`slf&{KCwx&b^6lRRx~+moqHR-Ep-m;T9)&^HuyhqwNa?<&Zs`&aTLU_
za#iQjc3_n@wlTq2@sx^hQYyZpe@Y-T*VB=?c$BdsH@%}myMArv3!VovOX1l9hg#8~
z+?h)gh-q8~W`nZ1hT*PgXt@~fZ1Q5^E?AP&A~63Sya-SJZ=&DDycIbS-da4hWO(1z
zs<45*xFIchuzr=Qc}+_j%qHF2Sl2QV-v`(SQpl%TrH|dMRMVQ1Lp9w>RrK@BPWM&3
zh+OYA%0`syi`#CgS2dy|q7!=!`-<yq$%nRUV{iB;<hfoOSvM|*v4%aL*!~x5YDH6t
z3QoqKzET(soa4I$#-8|~=w}YNm^y{+Gws*^VclAD?xq|6X<VQx3;#&qTlA=xacElS
z|0Emnr)2UTl~nP~PvzbCG&J9IwOY0o`*xizF4#0K{(lr58vh5`-nVSFf|2Zm%we(i
z@=x&|9ZaqLo?2$BR5jPxoWb&Msd>yjH;DW%Nr}v9{Z7{XtF&t7<R*dLZLG~~C|i?R
z?oi7N_ICx3K78}b)nPBktkZ?fxLh4|RisXU^~B}s^s}cdefhB)m#fp~iqtXKN55R1
zF7~Jej)y(#%hd@aMCyp&f4Mq-=o0HcT&|wy6KG?60!{p%K#Ra9(4gxR#?IRBvg7Ih
zgs}=8Uibu`vf-Yr>dVQa_*1cRn8zHm0AFenbCArBlRRrP7hS7@zwkV=aT0UVVtgv?
z`i{%`KY5=uS}ul}i@#>Un~2;BObedCdNJT0ab6XD$@}IA@KR#nc}IY!+$|F|*MZB8
znKK0iu{bt*)I9McZP%~KwD1%hWxSJ^b6Ra<m#(!vk=csR>AOYFhg?(eN88l}?-O&p
zpE%m?kXrUD;wNkMK-KR&-^{GnuNv&SS=H34q``J?d*+K;#(|eLz4N;^-Sw!ZR}8S8
zZ^yqKQu?z4Dy7qTBeJS8I*;R*4=BC!m`y+MvO^uR{1IY5KM?+Jic`zFZb0^}c{iHw
zTasOPoVBpj>jG}<yTtOupAlb1ryucU_D;KUUuJJ;sOCz2cNwRQ%_qJ)<4R~+T)6dm
zHE;JkwQT#fYTmujCjYDBt8=w6sr3oYV7`{%@+o`gH`JJ_5;d}KW6D6(@3-Xi8=h}u
znts2Qn3(5zc-Y_1OMkdxj#4Y?wZu;G(FJz7W-l*kX}GL>2@ZKz0N;e&lG74_ZTo+)
zu?_!|X!1!ia<P1f>{)VW(SW%()6&-q)(@G{^#kdZt{<}hZm34|<uhj^aRST#mG!ac
z*mli*gRG^k{$h2`hR)e9nhRq6_!n7I$l81qwrVfWXVJ;)Y@S1VzjB4^6XvL4e7<5|
zv0vpKy3%p&3tze}`Xyt$06$>v?Yc5tbZp`<E?xE&$D=m+J^Zho7sI7|@4+jBOYHGH
z+=Bx5yuBCL-@6#LS!YZ^?7SfL9*gp?{6V$s&0k?h@!c9czsxL+w{<o+Rq!@^da>oi
zA6E<#<7`j~otK-l8YzpNvuxfq8$}Ld=PR*g<{ZtOCH`Lt@!)(d6I+;YpaCDTk~sRs
zbBDakd?9m3-^<Ju(ck`<--_Q0JhlSgd#l%X81{namt^<)lGP80ht@0srp#9&cLT&(
zqwRx3DrHb&|27-3CdzN8-lLi`<zgCLJa@|4GM;rGzVG#I#I|qG4pg!J<qV5TmpIf&
z^cg5N!o;=?Z2!7e{rjKlJ^ktN`DYCkdaouS|BrVk=KpSrE1x(!=Pl*?DEUrGzL%2k
zrsVsnm(0D3k?3OONlZ`9%yh7~A~8MWW7p@wCnwzyx}9!Ns=Og<^^rA=4ZVJkQQnV#
zT5LDo(HQ?E=JVRg>hzoVnZzVdot&Z$`G8}=mNX~B$WLJJW&-hj?-Yrt+RAN#HHV)E
zW{0wM?pu|?x*<8GVe;xDWsM7ZOX-LF@_p0i9BEJ)!Top7J+fb=2TNNTdS|sPGRwA_
zWll3s>e_%M^3?+@X@6VG60@Gotd}=jZ>w2vO0XN4-O3)6x-(lA_R_YzLB;Vn${my`
z;B>RMrj#c|O<8>;QpZtlH2Qn}&?CU(*0jNFbY8|SV=h+lgQBxSH;ZNhUuY&}CD3cc
z^S?IjkhwPk9NFU;Al`XyrHym>5`)&wyGi6bCyn^?!ho;Gt{j72>{N*&evdqD=8SnA
z_xyO3qw}aDjt?C33@v*Pv1e#CeDiZFOM8acAC_3LwA}*?*<ZU2pXPbmF63Jo*|!+r
z+l^yuRIv4|-cuJS?RjGjcbIUu!*R~>+i4R}#jhOSWc0l8SV_-<3>E%8ZTbZN==t1O
z{>#|jU`&oE?(FXl<6dW%m~!N<8tF^M<o5_p%EZY4C+YVM#xG-(zK?fm?2piYXGzZ+
zjIoS7!9m(uV=0S{#i9!_bN0^mnYtkLWbB_*SLkDn!8#YNLmS~AXPrCsblDdPR7pLn
z+ztK;T&0eUIP)oNp3>dJ<%&GBjBn$uGU-Fw&sn8c`&QYiMgM$BDn;kcta#aP;CqGv
zo3p@<U#at+(^%hYYc%bXxfj`nOzBr~?%J*nJtTXo*Q#Ytvd{O{<C`+$5}tZOYpFvI
z#+rNIaVpN-A6jCI*kx;c^)@vv8$HQE?%U_o7p|GpQ0PMsx?9}UrP#%6biqr!aJOoC
zr&~ReDRtWB)D?QOoYh`KFE|E%bxJF+u@8&AnCC?wwU$Y}vM2i*eB>PEu-w;btlKln
z9@vcSlRnn~D?8e+Z+h|t{aO8F`}G1%U@KceiPDB)*F%4SUl#*kXgO%p3*JWNgqA(*
zd$i6|*Y_j)O`laMTcM5YgLky4VCQYuF?Wm&E)GI-^fy2s8aRpm*D=0@a~2kQu@T+M
z87zU0Vgt~zatHKK&_l`>&G8p@tE8Yo*-UH`=L*U_Vjs#>?+|)*A#OkI`CSyRccb?*
z$@iLZNxuA<$ws~}t0cc08zlBDE~zwsfOM<F*Xtwi9_ZT4^Qc1w-?WX|mXw~<+0U5;
zIiHA*q<5&Klx}R>^6{&WT(2jkY{*-E<VoF`;%Hphdwl_RmiJd}_7uJG{@xS1qr8f;
zS0}B;2I}Q|b$f~(yIVy)U+(H7O<GdQeqbe&-;}@l$R9K(?dp4zC-R&30m@i=l-nDZ
z_e%S6>SzDTmtRg<eB)wlsWYX6e7$j5Z%X5Ry-v*@eP7+{oUr;xKD76#6vioa7WKw8
zHZjJua#!P*&9TNcex-N6a+S-tC+?~39UzTsTxzC^7>BK~kv5CyC$3y*^bkBNg=hQW
z6@3S<n^BVQgcmmEi;4M0zEgva;Cxex5wc;ArQI9wa6dHL4?GLj8^DmdrNC<d)_!26
zd_AK&E(%N9Jp>%7zh5PmZv%#mUB;aVer6spO!&YMe9ARvu$$jPGnsF`#_z<IrM=6M
zAAu`v%7vc5@_~=Q@qtsh<|^+bPk7M*OrgK<!Ue6QtjWYbvHTn0XqWkmI=|t075EO|
z|5D27qeJ8so^-3x<)i;{?vX9f+%Zn2wv#$%%sDcfI%U+YqU~JT7Hdg^n}0V{)5Uor
zIUAC|K3me9uNMAdTF(>uoUau+ka_!@1%;2!NUm=8>IF7zg?vN$q~BhEOcdDX+=uNL
zQ_eYukUnR1VFNnd!Q+^-yimU9Z1?EYSym|DJW3nKoJG{P7vx@TgygOkQ?BNGxiH%<
z?Y~keZ6j@(3avhJuN7NhFVE)8i$15ZupXGUIZF%GoW+I8Z!16_3bMzsx5pUeOpVy+
zZ1&}?c}8?E^8GO1l5t<dADLs@Ig?(e8~Gc2>}k@jPFJBeUoHBqmHXoqWhMFT?X~DX
zWr-?ujBmEu_D0M3j!eEA^V2q7zPSPx_cxpl=<Z&B9QW<`NcsLO&`!#?YJt7(-nO$t
zH9~{f?{5W9-+00EA9~DhL(pxpVG(>azISGCntfj{=a#K|Cgi;Mwd}cnwA{hHV@Bw&
z>WzH+SH@K<Y(+=1O6j+GwtaPeNq%lcZs()Ay)$sN>g-s$p!bpQ8Tqg4_VRCxGC~Qq
zgz~5L`0`)siTEiheE>P^KqiSTq~xRf1IS}CHs!nb8u{hu?*eQ^KC-wNxti}5A1<pr
z8QZa>QGBj=Y>Pc*F>-vp*ci$O@U5z_9ZMP?h}a_PEJnxkwXx;fk?*D0iF{4+?(5wS
z+&|Fo%hE5pfo)CsMoCG2q<nSnAL##O>NJfLxQXRU8}IGy20yVe@_uh)bMI2@2)dgh
zwq_yruUs2dE_xoRFZz>Qz6c#I*Bs>wu_a=2<@ZeVL2Q8Nsp$TrZR*e>baWy5_3)>B
zrfnAe|7KBXzO<)Kc^>w`$rzmA)Ceren}ePSOtDL11Dx1^AM(4grLkAwneD(|>O0Zp
z!Kj{#em9}tlGh0yW<79XY{4dA<O8>Zy6_|@_P(j5srTQ|Ux6$3{h#T>ga?iT{1!e9
z(7(WJf(D-jSD|+~eG8rMg?5rJZJJsZ_b$d~9*=EEpr2&wHkmwG+ADTqKwVY-eQ<gm
zy?fEb*Iq7u`IGeD&HGa7ETi4M(heA#G&Q&fJ90g`j!$sfgI!pTe*DFp=ECc5O|G7Z
z-d~@s3OwlelsOL+zKlKDkFMv>SyDJj^tfIX<YH&0=u+p)h53|s_~Q%KqFXO}CGXzC
zPhnrW>Quq6G<k0<-0zWeVc~>1O@&>4Rj?mB;K43De052_hc?{eTJT7U!MvJK&fa>t
zAN>r7ellMxm0a#ePXp*F@n+sfmHW}x0Q%ZxmdBO*(c8!CRsOf;Yx$dBKd-;mxv`Iy
z&*a>~e$&T{^&f{y<$e;Kb6cXzHq-XtE1P$dynmOSyBW2JkIxw(@$uU^BlR9OiL+$p
zI;w#&vtCSTz$UGcb3x#Yey50C5<4Vz=S{wS*sb@?;C$!lk8OQ3K6c;Q{PVcB>0bOS
ztFL36Ey9l){#Fm47{AQN8nF~RRL1vtk#&JtKgN&OGmH@H*24{+y&E~Vces^r?HWAo
z8+Cl$T4fu=R@eBP#`>A~#oesuidmmLY_2ta*7Lg9EWRBTJErh^kKxD1fy3*6qxJMD
zIY-HvFwT{{{x>B(a#kt;Oya8t@bx;6+iVB2Szq$|8`$(t{nXdjmjv8=!x{186*$HI
z7MfeWICn$tl>WT55ue-39do+rlSj_VNS?(bX(MYC59@!y(@$Tm_?5CBL>ypVd|-Rk
zOl7Nx3+zr!RNt>k=>JibOaFdVlKNqlGr)t*+``_J*XgV9E>Njng+JWq?sY>OKXj-o
zGkUXCysK8lHT^>TUX{r2gr%~6_9~aF*y*}Y{NX2ok=-~p)z?^3;7w-kUX@VY@s)9@
z%ykuIb7d|so7cWXFX)&vHnmM@%(q%WeYBsW%qP~EE;k<8)A=*U<GOe}vbS}m;}M$V
z%6M*1Pwj|~sXf={`cq?xT`yScBQLzMAz#8Dp(|?^8B2=8|FbIAdKHQAK<?3elXbD4
zWfW;1?#@B4YM-+$>qpL|>=&%f^(4wzmq@<EU$XmZdjm>y8BU`@-K|pb-wQm@RN6|L
zhpA)HRr0Lg*4pX+NBms>CH&5`t`}Vt`pGx1LMN|NVl}G50bScTD-|GSHyS#wfks|6
zu8MVBV)1|2mN}`r8+}*;{o2xvq6W(FErPPX%b`vybzXwTyIJq#K`;6K+oF^FmVRyh
zwJmMAMvFI3rRGeQb)4N*XD_M9si`>PoqP2S4Y#M?VC#3cXzXtYoQFRes*#w&Fn#}f
z;_tdr{C$R+XWE#zR}I^kGS>Txmpo<01EED>2j|<pN$%96xqC9bc6HxoXezSqjfop=
zVa>Zx53G0g{k$sSKX#{Pr)NKr_#eBg8kF9-FxlvBNaz019kngpz<5eIUHg;bQ+@pQ
zInhHES5VJA30qV`Vn=S`4PsZiRbry=ekWxuDL(R9_ZRp)dosnYfJ2JlQNsHARd^wG
z<-grHY81HJU4QO4Og-S6@FmP$*xEx2S^Jyk%8|V-QQHzf?t4{larUVK9f=?Jv-_N$
zuBwE--Ki3b;NITy;tcnFUFe4BL2<^I`?}bZFU}ZkrVi>c4>sjtb2p(o$JzInb`Qco
z<_A}?N@#k7ex&SS=(|uU)<2OsNhK-y2I7#1XTrxrQ>BiLnCtFjwd^V4+)sYH^Z`G*
zC~K!~*`Eauv2hbl)%GTV<0$&ZZ+7igqnZd7*1Vv`-|z<f^D>T^?9Xn--g*7zJXN6)
zrx5s$fTx4;#?jWnSjC=N;|kE1j7$0~W)6FVn5VRP6Z|8zaG10Zdn&l&n;ep7FMW1{
z@2|{Mua>#~0Kc0x<=W30rCVK9p*(>q#o0{i&y(26_T2rM+Z`%JQMUV9_k9laU}iVC
zc5zO~bBa3{fG_vbIYbYjnVhwk-_oDF|2^-P4^Rw$ZySNX?NR<Z8SgA;;$*xD&@FM8
zx6Vs=i)}P%AgONhR&R1fdAsid-X_4?#6OF-$AKxleL9A>IzF%u-quEWn+<Or;OL@n
zbQJ%=)$|BsJ8_=3u06wiO}K!sI^z_1)IX80j;5YV_^OY{*L~1f`1-P$M)>+q{O(iA
zH2`0kQ(P|idVB7RnZ&D77JFaJWbb4id;jH|;3>YhOIPigKKN=V$B2C03A|Xo?%>_x
ztHOV@bj6w<M4z=}{9^VPq|5_fWBohRZ*X$H0DUdyJAh;Hn=)C;SLpq_Q@wWlEvNWg
zJf4yQz7c9t50^e5I+Z<L-Qb2d-ZFKAhYxJ5ez_-t{g#Nn_782UvVL1Qy6LMw+86U*
zK|lSOeSz1-{pCQ*R{HFrKY_a`NiBnxH95qD>*#+I{Ws9RKhSo*{}KAMGj^N3G#}ku
zcFbn4aO8@evQ_w!H_ewZ**Nd)UDuw8-!Ac!idtoB%15V5sZ-2v@47W6d}5w1jkt*;
zJrX;q#g3Iy54o!-MJ7MFu3C12F&t;SpHwf_fAR(74s7NYr5$i5*(()(z3=SIBf>Lu
zAULDN*p7Y&UtPSr`DZ+@t|jG}(bD!@tx|)|nE6rQ9K+5?yjt2LD<L=Z^kY9Ch9BH>
zvdlo=O#Yz1eA`r{v_MsDhAJu{)?SiOcoTPnEHm{T9=4%l20o8FU|Z(lw+CBe@ml1f
zpFDRudy&|bV(K_aJue2U{8>-m=ULVDggRSy#FnI75-%2BZ2iu6s@8lbbYCv-wpCl7
zXgFJcq;!rdYH-?I?2A=MJxzIC#lU_B87MPUkx{0K`snu<I^Y4<eo`Yzc&iHh<a^;s
z3H&Na?kn<sG<1{H{THc&JV>1`s}Aw9l4Shf4{y3j?hq0fG8WCF6&TbJ7@{-YyECc-
zyh|D1i<x=-@qtt$op030?~}Gd6QwnYpXN<Yu9o~-$^}L*<+1#gyKqm!lebyZ3QykR
zTPG|2ZNQ(}Ea^i{H5`eZY8>l4rx7eQ?k+k$A(Ch7>o{!B;%=!oIu66XJ5>LQBkZ$v
zBDbBjfr+67bDb^rf9p7GQ})i<M<<4A?@nWH#?e{(-o%i5NzR!y?6H=<JuzgXP3?xX
zuzN|@^j3RdM(x~5A@!gU`V_dQ<(uD+OjR?Du>J$tAJPwS$L1jMxSC4v+K^y`6UJTD
z>1kUO+LWNe?p$Ofm$_g{py~teZuoS95xmZ`<q7Rz$Kh`|jIf;Jo$!~{;cJlPRGti;
z$MtItEYuwbp3<-Bl)W9k$y(Nxt!lPts%p358_Y4HGy2jx&Le6WYM#iU%-=(L{Gi-X
zvxj}few%BX>_g9zJDu7XA9a{>Yi7nNuC$VU9kr~E_oM2X&NlF@)w%D+9$2sP_HGoN
zWM48-O$i(}yy^+;MX)1de$n&e)im3+Jm0Pk>ysyiQtz(jn-uPC`gU5l7TqbKZ;5dz
z;NOg2urPu9I#d3w=%^llpds<hP1;!Q_xR?b5dLjJt8xrBtb1^yteqOxwQcl51LV4C
zKfEGV--!-LjNpLhn-fFczf21s1*TGMnKG8$A~zX)*Cl5*p|AD<-}=(;9~q0th8Niv
z`Ox6G2JU~$_`Kj>GDc0+!QCCj{S{sB)E-?F(t&*qWAKv(#;H&-cCjp@<N>j*%k|U)
zN0Gx;T^n4!zHMWbp4O?scdtq%WiOHb%6ZmbO-yE-)|ogivGa!SriG3CNul#`+vm*~
zf`(jVgO4wHeo^fz+p@B6mptHyZ!_N++GX*<2M*ic9h!Q0l-gy<xdLbOv(un#4s^8v
zX9~X;0Bc=FW|8JlyZjF?l5ZQQ2|j{{hjHb?pIBOp-C)m%vWX#~Z7%YUjhj{so#c*_
z3Dkc@kM9(EofsV2d2DFy;oV9fd<4J60}k&HpV`Yd#a;C6frio-@#{l^m$Z?7g?>JK
ztZe8hJlPfHRX;YgjQaL*_RclnD(4We3xf*Y?`LcSJbvc9z{3+m{o$dhfxx2BBec~S
ztKc*f+)5df*$+C%{@MYNot`&_YVNbET_xbRN7p)i^dbDv$LS_74Dj@TUr7`n!EYqq
zc<Aq5>95TQNzA_%8TcJ~Aa~&O)7}q_`Z$*;xCyNpcTn(B_$z*Jma*1RS7`D_?kX~Q
z08TeRW8HS1X5xnm9nWw_Rvf?Gx2J`PnN_)K(!!-iRuQ)QlrP}nyWh01`Fl!EP~VXj
zZbzo|uS^Q*d2LnMd|%;9Ua?;PDX>Rjhjylg`#4up51b@mYV>Q#xEGxe{q$2NW1mO4
z*qR$jv&mDW4Id6oTZ7#aown0f^qPIGP8;n+KSZ~UqY)juiTW~D3*HRgEgL?xPg&;^
z%saoB-&x;B;+Z<W*fHXkI(_?zw>>GbJs0*ddRDWZJNU$wZc=Knk-1TU+w;Wc{KVpp
zl`6jFWj}w6itOi)F?wEi8DZ+0wy@5_z6<T~M>?@-a<0L=8|+E;@{beC%%&~t-a+a6
zC^{{%OmH>NHb~5&A3Wq9BI23D_lAjoV8iE=c_=P<cK&U^cn$k>lJ-t;E9Oi`KE8sS
z;n>eSxWHpCu<@N4WvTIo5&9Kpc9Za<Y~FpD$5l>ZB4cji{PCI;n`@!6A1Yn3u%%(u
zsIi-X>Eld{!()WYwZz~|V!94uEODG6a3OC_?+cj&DlhQ`bjryX2RsKd_hUyLOBNQ!
zArtI>R&=u#>Q?ctZo9+PefM9nALHoU#Qy#>DXjItHJ)+AVK=&&|FP@X09CR3tZi8y
zevX{weTgx#&K%r=J@v?$6vks`JjNFnwk%>CvcIoZ#eu78I>s7QY>KqcXC0R(G6eiq
z${vowsUO8!nYpI~`uDTvZ}~ykcCkMdQvWsT57Uyq_X11$7FtT*Yrfukq))yR2&mxf
zB@LXVR`eg=)DDh@mT_nf{a(c*JQ{+A))?BOJQ;}c#KD=e;{s=u!=&{VIp<z>UFRs;
zCPBZ6q^>A^_M7x^fTN@0HI>wqZPLdz40{Xb;3q`s^CUPr?p)Ne7})!vPxq>L;5(x9
zaTG{<?o6tAZIoK(WPa+>k}4L`mr`*q=}&x3>07OPFjFnatY-f(MR>%yBC~(N<u&dl
zc!s;^T3N#lj}M$;ad<%~mxaSjWXi&0ugNDz!5@%o=2MgI7OhTV&xPNmq$10)JQBHc
z%rQbDYcDcK@52X<U$VGR<S5Pq&A{COp0ej;$-&7#41r_PFpl-~9V<rz(5Fv1Tra8k
z#3tyah--*U87urPd@p9o)f(DZvMF-<26FQzxbIi-;2uAs%w)4~6e}~Od_yTRvv`WJ
z!jhN0%&#JELl?=LZ!pqU<iwP9hoh4<;USy4XGOm$FCuT~CgX2p?6bke!JY%S9U{&)
zM)6zbtPsD&1`Nxa=R$dFXWnb_s^BPO?QPqr0+GFjKQXR)=Cs&xE%qBLWL(ym*x#x7
zB)ZhI=X62)b?4g$&>?9%Fy*04JKu{MTHYZU-(Q2@r@+h9PxdsABQtU~HVK}K&9`Le
zJrj3r-fPJ3ZT;*Su_k?Os#=x@osq@Vc;>@y&UbcuUc@G49x8{fBIhDECv0&ArX4~D
zM0W5`mw8?ts(Hia!XJ#0pD1r)?T{%q$jSlaM(oh>Sa~6gAZO8tM9qt%pH>w&EQ|V^
zLl@|aod0CbUiKj4>t2Q4n)uohMdwS<*R|j(aU<gY;yZ2A&<BM*mo=wfSJSNTrnz^(
zJY#ljbmWZLvC$<xwMq@*!_>&y%WrVcJ?GHsq`lJ3dC8xph)3)-eL=H~xk}0;U)EEy
z?<BFWGGwy!tpAAJ&fhR(j<b8Zh<}tla1t6z|8fRI<|XEdkR3en<y;S@t3qAQLLirR
z;MOYpV85&}nRoh`QyR|NQbcd%o$(*?aKDF#d=Kqyw9Td+F*Dk!!K2VY_ArhzFCHJO
zLUNbvQRds@W4SjswmtU>SmQx=1a45^%2<xuv>sw?j~|aO>EWC5Xng+s-@&L+88-~y
zSx#TFHp+l^9}urdW37i%6fWZLGTOj-lRl>DVaC$F+F89|wX6D}@w1O?c)(rlJJWh(
zD|hC;u(ZCV1N;8sD*M<5V^ZhVI2GOpUy<d+26b&>!z!8g92Lt`<Hl}HU*p=hG`nTF
z9$(R_XEfy@N6WvIQ7!ihc7d<-^$YgM!a3Z<tMm6Gqh~L~=aIi#WUhO`UHk)Ct2)pR
z@l^&S&H_(-$mhhY*^fP`^u+z_VRU#(Twd~!FPDAAf|d^U`#YwW9a+$_fHNa@SDEs1
zcEO&=xz8q<Pp!F9*1~effWSO|u0t>IK%33XX?E;E2j48QCSI10J<yfC!kb=F;fEf|
z$n9j$H@ulW60v>owCNZ40-Lc-Wzlw<ZbfIAOS`#eVnepXRNEMbR-xw3Ji=PTWwqTz
z+aA`54fm`((zaT!-l}Y!4+6sjee3CKk=<C)jc+gs`ggNt>`2$fPJnN$s}p_jLP7g_
zaADpv?RZ~$z~#3`@DkWdu&?Ydr3lQ2;!2L>L90GsFK%o!=dxc6!;Oo9n;!#L=7)re
zeu3MV*COK;xVNDzd+eG^;BL@~sURx>{-(vE#ya4}ja|Dsg0J8x_+^_o>xqJIM|%2L
z!FL08(!`hV4NSN?v_QY_kIIFdLlSwAdzm*NL&?a`#bq7nvXsC6Y5u+_XZVhejnBvL
ze_UvXK80WZG=CFy?CkvCpd**my+wsS;$FiG>T*Yk#5`l`o&fG~>Yk$Ri73qD)Z>2W
zF(MBl7ZS%CmJ82$xsd(6dd4F-w)@n)&DegCc^O+e?R`=FkAc6{&nwY>xcej|{ah?p
zOPH5gyIj)trPy|qiw@n!o`~F+A#$FGEImXl^MtFcVm~tRuw6^*Mu(jFoE_oJ&RT4D
z96nb!`Xm0weo{GeGXdR_^D>;JalOG_FX!c2UX(iWWEh7Rb7p0LI<s4H&2u#`@O#3F
z++Oz4f}1#_P<O$e`1!wwX`TI2w{zwz(X?+V{z~k+j;&PO<Km0_uJhd(tWU*urz!JZ
z+N0d1f-W7<&-xx~H)*REWb-#w>dUh`?=Lq(#>1ZtZ9<mXuxSf?*i_<9byu;TDYGx@
zSQp5AJtqQJ&Ok^%3VZ!}4rfk{shyj2ds7!N)?=K3u%qWQAN_3Tgl)n$J9bih?oCP?
z>_SF!SUY4lE-aLIu|eF^gU=t~YvfEs?BAV|^I{%sSl|^EBH|MY*wwTj$@^X{co#h5
zZ+|Y^3=Da{nfJhlMu<J0X@MV-atDUYcYzOS`>_#f`*>EUpR*@zQcgYggr-^YB)SqP
zF9~^uhNkxS;CFH_thB2GhKj=Q(r+7h#I~`{uyxD=-XepuEcSxO?lVHuus4h=QO(Wn
ztYcn4zr}|OK6op0THnkS-c`1-4e6y7%XO_{v*GP*yH%0zFl{0+yQX~NXYFx%=W^O|
zE+wd80}VwxXtjK`8tcUt!bcZ-55sNV<lEiARqCLedBlDP9a#?^e(XMUn{RH~ppOpz
zit|YJpLQG$%u=Cm%UL?z(fKdrcS5^qGCuILW2a;cGAHk1F8cr)@8T}{F7$Eh>eeIm
z;KY~AEk4#gD&1fVdWF}>Hpifva#~uEgE`C>!V_tKnsYrej|psnBk-h;&CG9~;~e)G
ze#=}+*)n)ivwXEy?KM7Q!fR#Dn-k^lYrqj00!!-dp$~O?$Kh`i_jw%L1%H7nIQqd+
z2S>T@!N>g$%XL-ZF+80C=&VO^d=puW9UpR2Bk;Lve~g7YYZVjsSiHpt5xQD`Gw|+c
z{hv@*<UsKIyJ+4IWAa2cI-|BlY|37xc8zD;;-mXGU#5(GnFe}SoNT;P$C$al{d5BF
zrOC#6-^rEh<s8w3WTQvj{=!Ce`|}$oB$xDfS%X^dwdj{dyBuN@5?8ijACi{Phcfo?
zeJpp^QOBCgj}r$uhL0n@v)H_SoaqwW8v4pZta<P$_dFv$r=*kK9U2q2&S#!8!dDn%
z9%kPdc_#i~eG4GxQzf=yo-+ZCkFpcd?;gbO^R4UHc#LyXUKQ6#U+Ws|k-s%@jI&cG
zup9oUPwMB}ge|Pm6+E@hM~Q!_-R|W~RmAsDb8Zi3-+6o3>oJ1fgNx0(eFT?d_=bLL
z(=q%){ENW=aw~Sg@&^~py*=Cy+)dDe^-hid_S?h9U7C!27@y;=k{&<xB<|y%n-rEh
zraydpQWU3%uWZp+XeV@QkK^zBvNz>ceKQuWT6x5-9G&CuFWH{jcw&0iJ-+Rk3re?V
z++DW)nwpv0H{9O3J=kY#7Z{VMKj5C!{9;93<v?Rz<<rr0Z8TjRO=m~bNzt^GeH%H`
z5+8jZD37#nB?jFEe_o8fKOIfiMpKcu#nIohqv<44H}~cib6;H>dm?TXm|@9@jBi4+
zZk}DT#%D`s?}EGPnI~&zzrE^6HuvN`rSwCuBTrwtyKjcP|K*dB^zLUO>0Qr7()l|g
z=@)lK(mQ)2=@)+5H$z9J``3P4`Tp8-mG7-RTlwzVk1F3;`(fqjwc*NBYtK{;t^J^K
zfO|D9+Dq!Q?|IIclUJ#r-RDSmEzPT}A>BY)O}d=4inNM!9_jU@b4im)XOjxeJ*3ip
z8mY9ON-FI?Ln`fWAeHvllS=z3q|$y8sk9f}+5_DdWEk5QI{Rj<xzpGlpiE$Xi&S84
z<*wE~e*ZY@#^&FUHe`941Ic|e*7I9nzcPMWa~FAsdEX!pd5@7w|7-44+k^a;zSogT
z->;K)G*Xt;H>2HNvR!4}(EMxij_@4fImq)6&-!(~?R={c+>({uygAF;{6p$JnU&it
z`1rD>HhZ%^(_A(F`sR+TDa{R86Pw%ZGr;}U?Hx(Q+h0R(>)#!!naCV|4E{cORy*YD
zU$K4@Hh}%-pwF{uV~OH>BJNoK9DLu69qPeu#qwup?faF&*Z1JtyF9`#i!T;^g?=TX
zk8_OeH=+*<prOA!LchO-Ua5@ZmGL(;%YBN{M<erx$Y(loD)YC%j(v~qU*y+D|C6FJ
z92eD5M|zwo!%LWNpP{@QIewEdI<Jm9AaZQM_`Ca!?Z=3Xe^-@26W{g^=<D07O1J+Q
z9Dn2fdF4*`&nh2t|FkkStE)1Y^<?E&vbI*nyL&5tGatS`kXQL@(ha0XNSBiyCaoep
zM0!2xLDFQ>7fA<N@+$v$7h~n!>VKwv=(%ZkMqo`P6<D7k6<9Zr3asl%1=bW&fi;O#
zVBJV6uy&COE;~u3{f|hc{SQf{{SQc`{SH!T|1_zz|1qhwx8z&D)-Yx11MWJ0m3xkV
z#`9esg=}^3H1O!W|AuzI<~hQ1nCB4BL7o?R_Rr6&`~X>h)jgH=pP~H?w2#Q&<1N#-
zH)Ks}{@zz+Z1*9Hf#h4auW=S{FV^gXdyzxpIYFO>of(!x=LK@O1wNLg#~m0#Mr8gJ
z8vX-(68?Pz--?l~525e;mFMYeK;N6eOY$<KsU?pOE<m5%6PmwBo9?Wl<_XB3z_#R1
z?4-z_H3#hBK0A>^nFDw5Jz?^{MgCSfbJ^ioduq**l4sV7{_SjmbGfpiHR@28e53e$
zS$HdHL+)(iHj%#@smt8Qw~hFDhl#HQWnS0#yG1e=y4f@8=T5-Qv@!o)q1wb=>V^9c
zZOj+)cLwRh+<!3p$t`2PD;^%3)>u+>l)oRZ%{4;Vtc7cdSIJ&OoA_RLv!~$UeD+)w
z()=Yw38ywyxxS(YCB8O_I8h?|4{y4Ee&1F2vYUvhon+pMo5C7U&JlRnqw{M;FA!VW
zO<bu@efEI_{>F(um9y0FTVn6BuC(8+LUGQx9@%q|n5UjAF(&(gS;}@`H}<G|-9sA}
zGUv)3?jGWsjwsyS*p>j}bAy}31FgmgagKCZ8#YILd#zC`(iW5ymGC#=bnuD;XV!nI
z67Q1pAg$nKs96u>Gv8_8C2N{3;H2B*dZZoi^JFaA0<Ea-<DqGr1t$H;{*8Cl*N@2A
zU%j#JOapj}Y;k98jqOp+#XI}vmvV+pZ}gt|K6MuXHyyt)TP3(^r>kWm!!kC5c>7+~
zPO>&^Kjkhg@pFFKA30yeX*14bN9y;0pM1N{IyJak*#`aGA6!qn0h@iBv^hph&1xrS
zuAR^_9$!l@G{Ps9^MI3kP@ILlLtCL^|NBEVUlyHHqYtp(cDjds3Vk~FcLr2SJY(!g
zpUGJU*&ovfkHOOgoZ;kLbI@VHyT07cT43an?|9e<O;TM|Ta?|EtCDZ<v1W!ZO>LYB
z8hC7NX7=4GC3h9ysv$?dj9Ew8o%+~ZU=ts3Jx{E}m)Ck^;gU!^ZFZcR8V`^7Hl?CF
zeP%@*a^d9Ong-5}4zTvjy<1C(pQ6GYz*)E?yQPD;eI4hdWn2&1zkVc-IDZ^+;-x>m
zap9T$@Z>e{_sG6OLf`y3CO;;e5t;rRJkgPrV+r)hc;#=pNDMXs9%=W$cV%;xKvVlY
z$WKHr4rx=_>*H_VXvA5Ifh%j3I@;>QF-87FF2rW+(;O8d(+#ZWBvyLdHhP=jTX;zy
z4zrKMi~49IP8!>X+#|bL#za3Fb-mbvFOVlZ7XAy5ABM-rZE><L56AL)E%o-$*3x5v
zkxhGnBl_&7+=LO87aOqf2M)-04ti8xa;YP_Y&UIyR^)tCg(Q!2hKGo$9};?ttXcXl
z{K%qQY@Yb_7k|IdFEJpcS2#Y{RMo-XW|>6{<-}{d@3Z^6?u%DF=G_cp-y`Sw<xHV{
zDc?=hWTR7il&u2)Bzpcop7U{i^Q~_h+Te#}2c-Qc^^Yvi8}1*Ne@6eV|4jcfURg`{
zmFg^GymICa+cT)3g^W|i;caP46WGO``1@qMa^6kOW_issv8>0Pl*f#>Bxby^W0kQD
z_eFcFFF$=*zK2EMk@{^@n)Dkzi~FbhCDyrK`jfwH^$2^G-VAlfI<u_vzC^97@+nnu
z;;KNE^I%)mpy#2~ZNv!P)Vl6_n^;u*j<zb~C!O)mBQCwPU-r<jb8dW8o!=VqXRpdK
z&yy7^$5Icp(TLr}=4sedX|oBME@7Ok8AEO7+&300=h8l4aOZ01S4nE#X0KMxUgXlv
z%p;ubPc51Ikc&03>zmid6_{g&zN74IdD3@jOq@<(`{Zu}FH%}+-Kz9zZ>~G_-mLW0
ziIZm))TyM@hRJh|Y@SfUw_RF63Gi48yQIy;!qKT-Bc-}w>MT=MZ3o?j8s8KA0$5)5
zkv@BGY2u<)W2<-HrZv4ue~c^iDe&6<mz;5*vL@}RadECV@L^A6jLJ|!`5Rvr4~6Hk
zw7-pU#?pQ-G--;`{tb)vQJTL64{)AM+FwZDxDn_Zx6~WuiO@GeWK+wyX@Xs!w;O&1
zVrc(N)PEN{C_E7Qmq2ST-xhs}u`Y~`wI{;E&}X4lxBuE|k;8803a=Vf@hR@M*#6n{
zR2hG_=5RR}zwFHlJ;fH<;C*-F*y`>iXj`V{$z1E5tWvj5FD;k}JlT6$2yZyEQ?T&P
zF`Va4iu|5?b#=q!B;K{uhFn)FdkgSRE6|u1<bGh;-`YMbBd(?BD%(aX_)E$}R@$xy
z-rSi5T6$ZadG8x%LWKt+``LD5yQigOyO+Pe<6E%1*~_DN<ZP&~gLfXqBWFaj?YB}F
z-<LV$LLH9mS6Ta1o>i?!G~$S|ALC)3**sqByz$ZM@YE-(nb(M+^RzqFRQc96jP3X2
zEe>UORfj)hud^$$#EflpC2C>M+{K|T;-a3(i$khqTq<W^mU*GS=ewNS;oh*L@K(-S
z)xz60ep~X@b+Zv3l75);WWQ{Tr|Ynszu%yz4Jzt&?R850@vz48{xr1#J)0(NUg6A|
z#BA8x8hmX1;~VAg^O@fR;&W~;mvb|!b8|U+jhtibLSAIAOJX^4$Gya1Bi|lJ_P!*~
zPua!!#>(;LIOP1Y$EM8lP*PVxr;F<f{E=W=d#lmEWxGw4nSZBqn*SQ^?I2Fx5XXZr
zlB*PckZq9jY@G3H+lY^Tu%V+YEPEK@hu0Aw+(TTgj{5bqt5sT4DY8>Hi?}lJDl0}M
zem=hXLGjg17%_f+HuSRmeDUw)tg!g|0^fb!&o|quEA#UYT6dmUGO9T%@;M8;>?QOy
z7n;g^Zu86ERpZPD_x^bJyMs1-V;jE9P4M|a{6h!+0={}m2fpSSkF7v|)Mdg5F!!{A
zm%+J3|5#Nc`@#<VqD{(S%5)uk5PwMcVa>_JB@1-c7-jg>n~=dqV%t8`hvr;lV|~<z
z)&~8+&Oz6?PvngFXkP3Hb6SdCqeA9<rSyt+;M$VQdRnp5(7t9D_}cMpy{nw;*TXCB
z!WO*i@ZoAb$UEx+@lR~{esQc};@4?GCv)%{tX&dVyR<52(=*UPd_X(nz~>n3x|TWO
z?u=^i4ay$3&_(FwgBCuag<tl+%Lt1^)-A+h4s264WF>L1W8F74cJOWB0%d32Vjt94
zPYG>~(#LvmT?33#aI3?2Z@}MgmG3F=@pG6rT3H`F!f#m%;p5`(gA4CA(|70Zgg_t3
zJAv$X^Ie1VuQN8G)f)O29}xe|<!~nEYj>*9ChQkJ$GlCPp;*HG`hC1lpr76JlaFm)
z$oa2w=FXXRRkRs=y1{2R_!#K8Rqst?W+CUz%K6S^rt`vjiZZKS4|DHAzSEPn!c5jP
zvG6?5z^eBP_F)^SBfRQkznAZviryl|EcIt{Z=!|69{x6^&@X_j=pG}?28<b-CRT93
z&UoefG8^NC_AXg#<cP0}oXA=u>A8yhde$2`=6b{CTJ!bDdgDZ6J!jz@V_P*_(>`$b
zvaWbkvsG{>y1DM~nr&VAUgYOQV|GgpYYPXuuQxWF>4qn)ZwC9JO$mM*-y3oVNzNIO
zOX*j5gdbB;uM*95RX*@bW~yHCkwx|d|Ao*$mo<XOQ-`@mu)Cz6TJnVk&y$L*>f&$1
zzfVW=g>Rl1eRA-db?z9>d+w5Yd^3<D?L_Z1WP6jQH90w(qao9Ldupy(0>{xUWa`ns
z1RrEN2^@4}8XYV0dbrO9nN9=dF<as`k-utwmuRXe7ri1baJma!D|5(ua<!}*`*=@c
zTu0dlk#iUI;B=U@EI}2?n5FEuyjyo%*w%?%Ra0e7OP{No_eF3%v?{HptS1$IT62%2
zt@_o22Jqd`b&W5lGd;=PbA-R=Vn+@HPKQcAAokg|j=urIHxeDIjP>&OJ|Cp6w9jr_
zP?(L5;WL{1BO10Rt;SA2DkR@A97R^84+Sq@(``+h-LKJ%oX+}dIFktPIdhwmJy$Oh
z`2UMBEcfLcNQ1s^-mN)C{=SUB6?g{ltbGlEw`cvD%vX4pbH2VoX%*5|U|DUgx);CO
z>}5UK=<$|wL&J2^gs;rAI_)hQ`5WsB153Sy$f^9zmnMmM2rS`)Nk7?tA_jVHWvJ&%
z?{R;HE#5re@ecPt<p672<Lcf~h7nxsd4A)N8a;R#A7WtL-)uzJw>{<5JGVPWb$X0~
z&RRWwa0xmZuM!RvYih86U0~xgEBw8E++)LjCEpC3&+j7NjV&#K7SJ$QtJ}<Va+RFh
zo|wd0yu^aqk4K+=1Y4l&`VC!;xAs=8PUH**-$>0(E$FkWP(;RGG|xIndk^+*$icV4
z_zE&tAK|-58Q%bR4js3pZcAh=17}N){GPi{v3=>>!53`B1}DJRgWNgeF{X4nqd2Ny
zU}FTws|NQ0w~_U0t>zruBKRiSI%R)U*0tCsGe3a-HZlKrjO#j+qA&t6Ftz~WKubZd
z^!XJf`?Ah$()S#E`C2`3u!OUzLU+OcVQiVuLFg`iK`cF<;moG2ftGT{=?_}`fz!6D
zw!I4<6}ln5G;}s;CFlQQ>3!YTS0CA?T%FHBccD$d`+R0s<8|<bxCHQy<D<L?pO(Xm
z0eE%N97FtId~of?r&lcQJ?VKqbFCK7T^qK7IV*B#7hh0|e<yyaKS@n(O;o43X^!(*
ziQJcvw(YI4de84h+j>rX+TL^QI?gfQr9xjTR~z0M>m$FE{4(-6XL1+!Q*gh>Ux3HU
z;PkRX&6`auNB(X`QttDad`Fp>0N=bkeJ%c83+JoBnON|lx!~&55(X7IId93AdlM!k
zalc4Pf&1L((=V~6%-6IVZd>x{-a%;lCNa?$G)LkKoXt3aFTdl96MBoq2avNqjQa%q
zJ84TQ_%yVt&_;JYNB^5NXVV^dB(ioIn$BT;vd@{=+2>5{#EGm~gl&Ij#l&8G9Mg8Z
zVN2O|92)f761Ke=uQNtl&+Da}QQ2hg`TcH3&pS7%FfozGk6l+P_h=NH*i_c@#_pLt
z{qepYpGxd}=O$=UYJ>*hZK<Ak;9Bak9xsUahY?xNcj)GroL^6@Ug9u9dGnkFjSdxh
z5&SkIGyYuBAHEGaJNh(E$FTnRS0z^OL4O36XRb1JNahSLXKww_uR$ZOOIv(`f@0d<
zCbABEFYSEjVBK8qYjCK1u`j+Ab-jCAyz-58uvn!Hnl=Tv^4*rex8!gP?>=O*UQ?lW
zO#GU94PX{4)im%pdq*oK^&VZjX(Oxj-qn;3t#KSWiCrQ7Y~C-zU4op`PG{}p;2Z>J
zSvE!N+rC7#vzt2I_OkF>_=&G0FFthZq)YxDk#k%BK6E}!?|JuG6@HiUw~+Y(x8g1o
z?%hlCnP=Dr+(zgvaDCGjUvSc8^b~8hK_B+UkL=4B14^0mLmc)qZb`&`68kspCuh4l
zkHX`VwghZ;!hx+x>ZWq)*RoHcpxYa^d}JWe+(WW8E-KXd8!XVZLdVz9->xm>4zS3(
zQbn7PoulXx_Z1!JIGfm6JVTwn7Z}IVZaa`uq7Jng>JV$tP9OVI=<DI)#{TK6c|Kly
zYxAv*UDFliZWY--8%i?X>4TS^->q8j9c8TVQ0jo}CmgkTw{@T^Tfnic(O>8TA7V%q
zZH*rJo3f`%WKMXNzc&=6`>{>N1$V8qp-bmh*04X|F!u-i=$^ZfI1YYc-KtgV``KS<
z2Ywd&E8pY!>DuYd-(|0498WEN+5aZ*-Q%Mw@5KM-oHMx&gxt6V%3Oj#LcN0~3g*lt
zKuD}|iP~y^%}l~2GJdrbw<Vxt65^$fZ5^@87OY7?#iZ-jTHR*4S`xr(y1O-W?e4bU
zW|E+Qv0AS%Tsq(P=gf>oYIpnE@9&@A>-Wcbotbl<^ISg9=l*=2&m;8<tzlo*$y}vm
zliY*o6nm=uWu4U)jPrES+mXjDz}m%k%!QSsME2&0yzQ*^m8s>4vJ#(Y!Y|{>2xyc=
zUabN~t4@GRH5%s(-b`K{>PxS_wCo2wle&&@x5hcUDkk`$zzMN^So14oEx}sn7F}{4
zW3vJ8G~#BKp(Ds%h9yn2%ih43D*CpRk^b$YPkXqeFEaO|#63Y5D>ErmtPH#Oo6wnG
zYXtVhwD;JEe*)%VThvkJ04A-}!G8Q&r^*Z+Q2M|jF2TPPj4HuDqbY%Z9ZIvxr)(ud
z`q$J*{~DA1D;Avunlu6)sh56mvFAYxxs`387+70&3H@>d<00ykatC-f0$k2+P52fP
zz5><rbMWED?*S+Dun*DQQurah2gy4o_I|u_;%gritMCctM{mN$m$fIM)qR?!i-`Se
zayHlq=PgIE@fq7H`Cnq68am0d5$I@iI?sMt-|JXpY*g&yRp=r94L&P}gMWjwx5Ch^
z_?D8asRJ?Ui&jGG#S_D)CYh1=B=-8wG|6vOWG}+!a!RGy(Jid}wmNMcrS4O9^o1p+
zRloMYJw@g`RVsELd07rOZt(Z6<@eeRuHMcYi+df09_WG|M=C2L!^<ksdG*=~XhisZ
zC$Vypf20pv_CU3IsNT*VN7kww?CUgXtHrA#ZxOTmc+C~$iJuIAnB4Q&CE&_7^`xvH
zv~1I!jMCpOa<!?tDf#e8yXQM*uZ!Pe3*jfvbAb14;E{nG%pjkCmXw2M)`KgZ=qmF5
z0PhuRKFg6=>xo-!;@i~s&hylzCiyRX@OmkG5PfJ!rHz?<TS-00!P2*&*T?wAPu-%6
zNIBW-V3k8=R8wyW^?N8UWi!ts){*ka+EVFjH9E{O^uxp8jC><>jU2J7*(%@3o?Y~D
z-s?T7@8w(hPGnSSTz$d%-j|%}wGm{qeAgFrAV)LCIvHCE_vIe7nay6x9YxpDfDiPP
z=V8oq%x#AimuG@%Ub}%f%S^R$?S?tMYrz}ZV?LeK2i`E3cM)T|6k6GL$F{>QYVue=
zGQXi_LFi59M|8Ol4f2Li|9PzcJqFEq7{8x*z`6XE^^*Q-SICE~mwx`b#wonXqQe&%
zmwfwT_1uv4J!^k{T?@z2cT!_;8fK)t0F6>t_Cn%_7jPC~g_>^BokpMfHu%fb3Szmy
z#RmGmXG=n^3Vt>)hB$jXMLs}#*8a7TeV)(o<}TK)pg}7>HWim9eymhnc*BjpUgGx!
z-&Zyy>lVECf%gJSA9%kX{W*wk>5JBH7M-@Q+8OHH;M)wJ%JTth{C^f6HEdYlJA(fX
zeqWjzA9J!&WK6@2{@y*n>`mr)7j~AJp;mTo@mVkv{n&vYh+N%0M9vpUe{^znN_@M(
zU!KeFHsImnqO7IgcW!X^_F=pDkdtE9?zyp{SA5^~;Oi**gTA@AcLe=G+wAWB0`JMy
zRr(_Ly}H<%i8j_TXKQDh53Zp-he{6|5ISa$?Lqcs5|?M?_p)SyZsQp_i22@vHS$4Z
zL!AACsde@bR-;oS^b>0?EI!A&yUe4n%`AsL7y7<Q{3-W_@0#Vr=SF<__=3_DVWC>B
zUr+co3mCI+4!%5mcjA}v(T?w%=qK#uh_Y7iB;TW-?_5gRebnL4$ET%Kt?x$D(w&;1
zHy?G0-`D3hV-2gYi<BOs4dlIwInTzQP0i0Ic*B~%^cQ_>O#17G&ScI1gVmqzJ8Zaw
z{xP4$v?a7do%Y5D+IHd3EJA-7kbX2=qGIf&de#X)^R=n+W9Pt2Y<TLo_8lbl2q;;5
zj64JWKE!#!9}$l{nOHyYF|2L@HsE4swjv(2;`N4G%?LWmGxALELF$p`K41wBER?bO
zbjBxbXDeVUe&>Ro7W&Zw{Jt;xGVuC{SZB_$wBCuWD>n4HcRyWg6kojf!2}-4naIZh
zd<Wq51DrGYpo<tMd_^Hmv2L$yp$4U5#A!U0`>HqAkc)4E+ytV}u|6GA$sEbzi`Al9
z_$p+9)DI5F9_F`$ct*z^HpEBpLDSUPj}lyEE+Q_OF_`#OOu0u@vy91XC!Ygn6V_L$
zW^Xhv?BEPq`TvDJ?)YLQhGh%q5-a?oTQe$dyRqYW&T_vpc}DSb*Ia4oTbgx7aY{#!
zm}+31=T`cB=@<J??1_2NN{27+C=yxzA$|V{`JI6u=41GMT-gFg*oUP*kX@qg2d}|P
z#yUSr`3mTmc;+pg_zYU{fs0H(Ks>(*4$Hk`ii))|Px4%zb-2;NnFGc65<dGwmd)O=
z3V+Rup7LWxLFrvyZ)}v<l5c-a=(eB~`>FJQzZ2j2CN#VsSuQjyv@Oqn!}B4f0)51!
zziFhG2Cq<&1A<G`A19`xniz#0`ot3A!}Ef7o8>!ZffsXtH+#y7R}M*^H(jN|o8GzO
z!B%iBc$GKiz=rWc4+rVL^n1jSh$EG;?6^vg`9DT(O!2<&!cIS^C&~!T26-Qxz<HJq
zd}sJV+KLimmAM>0R_T|Vi<B5!MrnvK#PPF6>1)d!YU3-s(^W8k7~gjsAJHrLQC#Fq
z0oH*zj8kAh?((`3#(Ov8^)lYp1D<k;VTs<;!RZxKR!e<B;8ejK`CO+=GtX-}Ljntd
zgTNyNi@p==7eCc<Sk_kN5m!|JuKyf5R;o9@o;K&9@0(R-9`sKxZ?B!)*7-807QEm!
z*c$=o`<zFRf*1Qd1Req#neP$yUkDuAm}41}1uLEh--$nS4|Ci`TP|SK;=||eJSh3X
zR=UU)W968+sIBM#?`6z;kQ;BZhbb}l8KsMXoA7Y;z}-cy$vRTsORk%r@C=?YcoX;N
z(Ee32mSb;WL*#O<ZhZeLm+Jh6p=7PvYe$9$mcvKkhjy=08#M9<T`k|yo?CSe3SJ3L
z$^Lt2yHw<l)VDM_AC1KD$Xo~x3jWC)HwoPN#z)z6=Vuqs4q&%Rj5PE2n)pStfU^O8
zKR+S!nsn}0ac}YUEtY5h`EuW4dG`E0@oV;+@g8nD)VFvhYl;8<%f$2F^IYN-PiGj{
z8jSfre$}^F*4;X=zZ&V!^Tf;kp19fg`sZ$q-}Bt99Tsme#-i9YL&Ve$&FHu$?zr-r
z`0mbY;`{dB`lhk&kvV^gKhw|sF|LYf=KCh_aia^#xV_F`5xUWPz^c}b|D=z4q>P6B
zu$LHheBKYbGbMkfKGw;+i5y`4>W{*68rLj|(Whrdrt00~0<myqWU80nW~4GREtE#w
zx`%cuXval6@ZwqzZHUh6q5hN)bU)`dbOPf&teKFzd%y+Fi667isDEARVZHUgtVhbp
zC4Cq{4&{MQBghKrM<PeuFRWM;OFqEkHF&-4%OZ#M+79rg6L{>AH9VgC;FZ$f1B}(L
zDof<IhrSViO`O>QVgQYvSN;G#!arHhS*Qig@-DgGjy#t;az|fb)s2i1y+9wRFlUe5
zOC7TJ|2p<%jN+e=dPe#Gd-fB^{|5SH`Our#=fv}<;ZE2xz^ow?`CLZ*xhmpEw#qoc
z?~p$!Z^6q%os8E%(~PWXXFm>m&^qAh-rUw*{%K~6m?5i-<T`Vpe~WGWB<pW0pu3-7
zlL%~b-5o_?{HWhi6GIMN3p8L`2pvoU_htWkCV0qLBY(iQ!=~BzF8ijtzGU_~b60H1
z0$w#rt9?S&KD0FA1kytr_&u-n-d#i5q(J_AcOL%sgv`*(;qMh)y}YR`KyKU)%^on}
z&vLKCPI2ifBK5vQz3<URE4i1Y?rPrcr`-zPr{v%GI>Z*hZ=2`Pm@Duq$al<X#EG5b
z<Qws&rq)3vZ!C10r!${2Kl~2siuINWo)YUhutrA;_?WL$TXMfG2{(aV0)C(FFD)oE
zBQ5M-kvKw;yJN^*$tSD#dAlbtuYJU@h#jz`$=7>zle71><&`B5Y59S-fXPF^{5s&D
zt!IZO>ytzK(aE!*!J8MGk@t=KQh~eV54em=^76|ZEMaV%ci6-F9k9|%moNuy`AfFA
znS*xLmLB06!S58uZ&gX|m_y1o&~Q=PuKik0U?t~@8##JtPx!k<_f|KQy~O3vG6I$^
z&%GE}KL*UC?mtjB`a@6JhK*MJ@=o%l*VF!f%J`<6kr#pAIt_n|*c8)wmgOn2erG9*
zzxd#VA~VI7Na$=YSbBoMdMfp{=*S%UEq#$ZW2ycyZ>-Dcff4Q}`1beM9rz|nNA6a=
z=wis9sXh1N^LmL()|}4$-UUub8&bauoM_RfSUDi>CFlD~ToS{P`d;Lc)bHM`N^TIm
zapL!2oPKPQF2;$?(Ie%f<T)Cit730M!^3k;&LjWxamjnu_^kIbUMuc5xtBMEJ1P8m
zpK%G@<$*sH*~EnwB=F}r?OE%((6<Ku`0($nVV#yW)R5XNYhS9y$9nAD*giq0s+nCb
zc7iQ?Nz*!f__<;BDAo$TRfBJyra4^BUgsAQe9eWNV@)jZ1h(>Z;FRc$7c!3*WSNnR
zrkk-baPly8bUQe?3EV8y3qy9@9&%^}f#dLlQt%R6q*QQn!Z@77c8QE(cd-^?;Y|}b
z*^pmt;p7VhAN-zcL`wrF)5fZl3K7#g&<0L+XcGe-aMA`&wuQe_v=2O3#}$V!b<&>P
z1@G=<9;9yab(P|?>dC~;mHJaS*+TmrlyNc^k&~<mS~%$hC!J{toCJOrZ;zty$=oF7
zFQ2?I37iytqyboygK0ouvj!hs2fRR`qY0e;5gbUTUBRmp@WqNG?*1eF<xHH?_1uT_
zjDX<o{v_^x%o>&8)<?WQ0PcP*9iKTm)IR*j<ZCZ`nL5w?K83qdzu<0#KH0+EedH})
z$0c!KsqcIFE%kf1s1j(R)O06t7kIo69<_qQt-wX}z+v{e{{q~7zgTRe7m#K7Jt8-K
z_%hd-7hCIR&~A80DQjP+jq$@H@n!4QzD`XU1C}3UO6xrQfu$BsAtzk;7&!kRCVIUa
zJi=FBdLHu-HS$X5f-lEwZQW~VSLWq-ZB@6-jm(qqiO-uK54x+YwY*P%^OF6Qxxx;F
z1{2Ti$>#|g%je7l?<c;I&!w*%e0q~VOJBBe^wj`;t%s&kG=@G@<0F<~nKPqC&L5HI
zZ!X$)_(dCgKARePg%0m)TGuPI7A;gYbIZ+0smiWp4J})-t}1jWGzgFBZRKp7R_L(x
zbLj9ma^?tlw+=Ytw-{L8l)!yFV))jxEjs<1|DV!nA29elIwd}#)NjE{9}w8A0cN7d
zDST#siB3hnol9paI`#7I{|!17yh~l@(yY*Fie{hvD{1y;Nt%5P9r0Y6CAP?-MU(NH
zQ&h<k=)N8N6}f=k7f{%qf<IZ7eVL7|CitZf_<>ag?>)$6_~}Z5bHg>9Az(wVu>Mnz
z{Ac|)ymlN<*#8MnXeiSxo}hig6FhB>-tqik82bJ1_<@fx{k8l+`{SqlU}6#$LhoCF
zkIc8^I1@Y&esnp{QanOWmi;^)A>WAKTGmEBBZu=jH}G@#L=!nG1%?gqgn3z+A#?+a
zR|wB=XR*Jc8GZ&&@N!}2)MQ>aW%XQmhZBCNPu6Q(@DSl2UX@|-iUc1)mcTE(@C)H3
zUU)_t{3IJbBEGVF;WNP|7uOsvcdv`_IRwuiXf1Le!-aRS2dZ=pHpbobZ4K9uvIRQP
zLmf%p@%_KZJGB2&#!DW;{~H-^D$SDddQ!%l|05ai`yb2r;9rpO!aD>eK44}8UNWab
zFP+fKr@X`W|7jWj!kItk7aqo(klm`p&)9`u%m#P;7QfH}L3pR&ObNVDU?lJnIv4l|
zzwo2e{FnTK`c3$N^&K=KvQxhE@twd`U@rLkwQ)3?diIrZG&?!j_s^qQAL}y0lZ1~6
zzY<;LFYzVfbqAzBAEA>-yV#Ba?Y$IV(*B~Jas}=GwS37%?vWI)IZ7;;@Mz&nYZ#C4
z7tzyFamG35_>!OP6=)N@i%Gtn4D^p6@coW?L8uLQZHK3HW~$KL%*h^nASr&*2tVn>
z4p`?*uQ^bt*EGUQUV)c9UdDP}n#n${^z36zjlEv@i13iNIP)k|Wm-H$c*&dak!Vvf
zR|%K9_s94M9BLAL<a_XuOpA}OURZh$eHr0=lW&WRz!r4kuN0i9#vZ+e`Rl}w@SZWL
z^heXo$W!#EXA$wVo9FjF&iY!0o?c5FS-{JDv-VedZ}lx@jT-rCHGOOyK81r9ZQqqn
zEYc{kIK*uZY-erTK@4Umb&Fm<jE<j@opPtGh^)syift}>Vkh=`XQs!pErF3`Tbkf(
z!oE6S*_48}0#CsY>F;*N(IT>rSOURa7j|7KYpD2k$pe$XABUP~>AD$|#pWuHE5nj&
z*i!>e)-E}-uXG4|NMSDt-1al4#4-=a8k5w4EfB7!jvziH)@{qH8CM1IMJ9SXzV(3)
zO%Le!An|Lg6x+o;vvuAf>X84^p9^MIl!$FPOuowBfJ4LNkWBcQG)p&^m|lDvE0-~z
zxlUCwk8ecgZ0C}`D(F?_=w{j<KmOF%yO0sq*v-V)`)NzYA@MW<BgtPOaURnCWuMc&
zl#?7lGWUC!lXTYPB<3Q8*Av0({dtL)<rH40gV*;VFTZD=ACmbH-0mU1Duv(oB=Ngu
zoXiv)uR&(6M`jAHdy$!f=f{#Vb04^#39i2)c%GD*1DsVQ_@1S*YVFEy;rmPAdLOvn
z*EEmI-TMy~uIGU3-v!sRk}@-^bUQdGI`?+2A(?Yxj2+5uosDomaCwUHzHj7Mxc-wQ
zu4inS-<!hGW#IfA@_G%aoPg|+6d!&H-`TPiGQjsBG?2079Gs`EAa-pE=l>c!4<egB
zi|6)I>0^*F2+j(O1<(E9c_4}B^Ceb*GJ?ZaIp!e9CFP>%gaQ|-L)KOQ9G@rsm-y_a
z9sE8Ce4f@i@1Lnd{tG^zKdqufe2jum#h-&um9&X(X=U+jRU&gB_`EKO&oU3f4`dz^
z_-u!sKRZUjXKRe$vy4%6I2nuJsf_1A{-^M{?bM&sQxF+4UVgv_E&5MS(!YfZ(C&Ep
z-w*wZKTz7)Lj5UP$bc3ekg?MCW871?A@>x0i0qTK<qy%Prok^7SxZ?fdra^NHe|!&
z(DS;Q*7WXan%%pmh<8PmCF`#;BY#KVMGpCj@Mq{r|5_3Lwe$oJ^kpY}8REO<e65X&
zyKf479slVuVjE@s^dNP}JMoE%JWcIIk#|?}PGa{yub;EW^;7ID@jc<6X5Cv0t)tJb
z&EkX7YW!EQ=Ht|B@I`ZWi|DqwVbNQ=puxwXy~mSdl5wWS)$l(Zm#o9EHY0ui&VMnk
zv`@yB$gO3qO9z943svX)<L6?2a*XSk3mK#AgIJRs<ND+n*(+A#hi1sXTJsp=lkvM5
zyESg)aJ$8u7&|@zubLc^vG+6fml*p?jQypi^Q<`?KYnQEubS7sbLW-yKZzlh@qcOD
z_+?EzF}I0aTk`%;EWT6XT2pcNe+dQ`{olX<{x0wkTp$K$wHtT{T#$MHBe?vIKL0iN
z{%3GuUG*69RmPq1-@s*C5-th){51DkA^0IQDsU1zb^*9z(GoE4hF9JK&G{bjcDvMs
z+6px}&;U&apkvnq-!D2JzV|FSzq*N2J%WGuW-TjppJuN;TJ0t_Pq#Nfvu)tlQq5++
z3mg-jM&w{awjOE{cmY2-ueJ@`+v_weJd=0wyg_t53&%3E8!a3wv~VmF97_ks(vfrN
z;Mg(N)H;awm6&FDW7wBN|Fnsr`!yC;;2pQXD;#P<pbs8)T`a!v^Kj;JVDmR8;|pWp
zjlh!pSSx?Zvwu4gUzo@x^;f`)xsV)-7QFWS_wX7W2d~WKpTbM#r@?|5`Ky7I;Kh3A
zP~alGXnl5u1s{Q%@TH@`Dn+AG<|z0m@EZYs>pz2&8A)1Az!9A<3CGzM95dLf(*hh_
ze+3-B53D{9j&Gcd?|c@RjfbNjI8IK&F(o5}?`prg&&oxpV-KYEA)2b<^*;7o%9?{t
zoTgVz4;v%xgYI^9@<2TPl$EdDrefA_^0mA9J&fGbNA4TcCAP(>h<`Cc1?=y!VpPs#
zcRQkbxuZ$@Bz8^uP(kb!`;@~KXXbUw+HR}J2-YD}GD7?!Y5Ci&{>hrwWK$1IT<A&q
zC2^!hD$UxP`cvp&2XRe>H&u80ylLT_wdx_cUm<sQUbu|AU-!nw$CI!o6Z79#`I%=2
zh&gDv(TMriC7yq?!3+y5+T{5<o?j+wriDGJXY#xMn_so!Q(7+L9QJF-_wdb`RvGyw
zRj%b4-~&FVzGdAi_G|-oqh2)Tf}g6x{zxZhjjIoTFsM!2Jy>9<P@%!vD&s=ect%yS
zj%Q2M*TT1(u$x=-LMv`n+rF$@-Z^fVV72F{Ku%MBn4J8=lf@QH?LQTNyOfnZ5E5IY
zU)esW3_Y}iwe(FJs$zdTUp-{(l4nN9M{Jbs^1JwLvwk}cyCVO7j(!n0^glblQ_km1
zoZXp53~w59MXp=c?_z;;&f!&7j+tg~?evu@cG|F&V&BI^Pm|aR^g{Nwp<fWk;i$H4
z%pzZ_V})(w%TCt8*Fj6h^d1oAne!@Lp~pJ4FlUB@?8pz%9bMRG{&h;$Ro`o8|J0*R
z#bu+wPv~|On2GLG0dMGLO)f?s8}@k0$tAYXdd68M{s))#HY`Psu#e7v6>Ipc#W#3O
zvGF#Jv~+OB%+J2zRNgK3;?tq8`Ti?dqoqCRpX^&z;D5{4_zzyEE<bYJBoC&}T28&`
z9BU-5$ws+`oa&N;)ZdtnPNMW$#vG`oe~n9JJs5uNWv%_Y#5KX!*VmYlIgBAwrH9r~
z|7^wCB3!H&7ozWmefYTIN*hzb_Fcl)S>G*NLQMCtk>2Cb(yjQ;byJ{2L$l(}zX5EY
z&L-Xs{jPJmT5uCrBe1=KejVgIji5d~G*YR;vX3ol#Q+ra#Ey~!bDCNpF#_LY&)d){
z^0cEH)EnenoaWs!%s$oIi-^tP8^Jr_-LL$SJg(@Hb(HToaM_sHh|vmsUW~y<yx9!;
zFXxy@Kcd8dIcfhP(FN#BG4Waz*Rlry-@DZ7UaekhBfctC_tWF*t}qJ6DzV##nQNCS
z3=PX%V;3ni(U#QPn#@o1XJ;c!RduJY6n^vRS+6G=m#|lRX*alS?MEm#3I_zIQ#k3z
ze<QKUZ6C!K*qA$6FTS7uGbX78CT(@H&Na&ama8Q;!6=m&stSXg*3--_`Mm#_J+ndl
z6SC(}-nX+Ki#`tey%&bwC4Qid`HQbq8{M5+`7mWG1pkB&=YHjsVt!@Mm^^!*cKfo;
zEwcX{UcGS39xc4ZnuDTG=AbDFC!rm$DzeUXsb8Vqb3foc^#uNLp^qx1fls!O(1_r(
z`Eh)q3*Pe(F{|a+J@ELc(*K5OtG9g2SZ;=2Nxwffib|zT!4<ReLguDOVo4$?oVf*@
z0bk_*f+OHfJMDL1TaA)Ce@IW@jR)V!xqUuD%<C2O`v@_mf<LLg&ps8uyuNSt*f9Ps
z@e5171jm_-jp9!ee7cAKMZk0gch_)yp)WZXihGb}{&ZxwZkGGt%MzER`S1lg4-gOJ
z$kT)D6|ZuI^x0}NupPrcQAb?<wJkS7<8AGWviRPlp0~LNxxd9-@bg}Btw({Oz(J|$
zA@DfX3=C;=@IT<&ts8u0o`BQZli?sPTjZOc?|Hwf3p}}zdgS{9+sp^8I?T(gI=-2#
z<8|`Hj<2JhzDXS(zIP_;Se~o{A5E>~2arCj;d|Mq68{qR3j1%RjoWypo0o(}crP(N
z@ZwMQ=YJj_AJ4<BvWKc--%=^Qo!p0UF5lMS+q2b1AHIbSaP%a6|6|T>65cO7*Wo0N
zkobZvvxwg?W{kbTyZw|qRAg@P^IYR>r$WPw0sD>LmUVYzoR8<&kKsaMkA<(e472>7
zk63%xBJ!<mTJ@HGcxQPAaj~>LjNX*uze2}Oa07Wu4rA8fff>BO%3*LWFX+c7`gyz{
z#RvT8vkgYkz=t~g0KO>t3TMXcYREUsk3bjhw6e<!bJR0(PLud?I*6^mnSKqQjz5Fl
z-Lsu`B`@hZFFYH$FpMk{e)%T&u2fOTho12!INyig3N{$(D<rSHt-6G<E$p|ke@>~|
z4qYdfM%DFK362%o*U+avlh_c(rGOi}DkR^+Yw_t827EbEuC++UzLz<dwxxeTVC%!a
z>>x&SIrRz6jzY&GUtRR&4dSDt$d63cw>9b&zE5tNkVd_J=B^>%Q$o1`iBrY~uWiWJ
zN;*G`FYJ{0$6j%=u18*z9{T<)wpb~6OI&Z&mR5L93w@FKD7SQsWX^7K@brCEMTXYk
zQ@z93cr&u1rIaxwpGO&=j3L$MZg`OJ;6~mz-U^L=lkdP8|A+CqHlE414Lt9ljLdl_
z-wG}$ehV)!lh01`yZ#P+V;1t`4SxHQ&p+a~`yKW^b5GHU;ILwjQn)4e_;%5MZ0sS_
z*dvi<#X6^G<&C+-Z<3?-qnpyvzcRWdekc~m>^=n@#Gs4Qo3gsme~3c|7l;Yg;2E;F
z@H+m>d_2q@xW%mcz?%+!N1-=~!+Zlg8RGo1$Mm#;XH`My(IWGd6Q5PNF)j44F>T<4
zJ|%R9IIZ9{mEF23u+D31Wu7GmN&)S3%woQoQ{qFQL3B*=rHsr)_hDbP=%`f>bQB3L
zoMQf?lA9YGI7uv$#5XH7E#$LkacYmykc;;30w>-8kN=UjMu;mBTsHYeDb6R8vc+b^
zcZxHvgy+CVB&J!$4Ij4l3wY2aq|Di^l7D3hI_pwkwhTF3-F<q~a`px$WN~UPQu7c$
z`04raqHCT&P72RSwIgTBi_c4VnZ%xd1WwC5o-#75*rrk7X#kJlQddaM&O4&3(020I
z>;=}v;KC61QAI2{xw6+*eYJcEao#)9p)bz1d*f2{N@(VTSp^~IS39lq?M^ap?2`yJ
zU$8#ne`Iy6eCrqTD>Br^Bk;L>z|yyBZe#?w`}eGl$-X)No&wJBf~LO4xpI#eFb~i?
z^j@!~jhW~O@@*HiAoA@m@vT<o{d4t~gNZZi(a|DOj~^H}?phsdpzRiTS1UN*Kp%yV
zY5aCEUJqs81m_=Oj33S_47DZSi!GXZFR`p?eeHvHskBfAXA2T*66)Zru=JV1RgZJt
zU<YTdb$qoT*1;Kr@eR(CLc_tg=R{hnW|m6~_4qjy-;kHwh92dzOAMO$#tMDtf$shy
z4Le2rArI+}JaG3J<+J!zAj&uzcxT0~LSH7h76pe}$<Hk|EHRMQGh+T?ir8O7Xc#|b
z?DhsrE?c>IQZc{62hPwZ7k#Mc#J2^k@jK?b$RQ|wbA3_r&NwcSzF}kZv~&Km*vLCL
zH`IpjSLgdyF7}-gV`uC6B{6rM#NQqv{<w|j(DW+LOm(R?GxO3e;%0Z)hy!K*Q|$+N
z-)GdnF3+SdsplykL$1xzD)bWDOwN!aKhh|9pk>cRDpz&FUe`)n$;s5uSnqmZbu36u
zrTyp$5{Kyn9!KCUX~1hVq<41$t0U0fXvo{$aX)kPKtZg^riT)H67UDpP8#2|Qpb_+
zCCU#o2SI!RN51FnZsi-HU1=l8x9r^x**Mp+VJ5yJXvF-o5p&9z>x`H-);?%5=RzyK
zZJoPijJn`_&{K|IJ0#~VG~g@nDHZBu4&=Ka=T3eW9*O-N_1JCf00htf$%1PNS5WfH
zJKBtmPp~#2{sGomdp?H#B}R2N`66AMH|poS(Ib^A(z>l{w~I4JFJ-RX6Eu4l=Z&^<
z-snTRUhB8sH5_(jYIgS6)e79<*QMA%r4qA@{$1*W_GSOPq1w>jdh<JM=Em*L?M3kA
zz`e*jbuw`dM>O90;P8)cdHTq;=F_eq{50M=*e-W;W*g&1Uf$Q0!(ImFsNEUdCAi(m
zSqcti8x!1q0sVB;o>d~g3eH7{$(+5Q!>e;tY`9qPeoBu#8?`Sl>Es#bBv|L&bTXc2
zbX6W?Og~Fk<&-b?19unasCH$ma)~9~o30{{=8H`7g0DJfjfy}1g(n2&g0J#Seh=^4
z@br-z%%?@hcF~{lev|#smDJ^>{O8q^!d<ybzA0H_Zinx;!}o>GQv2P4;2CQ`@JskF
zbqW1F0nh6jM}tCpLW8Z)T`~DzoaB6wT%LDRo;W}3BQBv$yDAs@+#_R{q{=&?%_9Y>
z{2R>OCwvo`>84HAeaCd#bOGz}d1;S0Wc;?$Q7*|PbM$j~RSNG?ep(gvmUqIh1$TWT
zdU?yO*iheupSO9+|3){$4fttfuh}o?2m7E(p`(TV>k~d5AGS@yjh2kJ_PF|(WAV+H
z%&q+P^WNfTHzxVn^~5WZms7s;@l3&QTMi(bS54U53Xf&JBkTo^wcJPh7if`|%QS1R
z8uC0j&k5gr9eq8;*kpcE@#xwFv&7GNrF%0H{*bq^%iK=#rc&0+zS8a3Nd~;Dox9}m
zsRvgNg7Z3Sk`3zQWet?mGqEowh@E-zGIT&Wm&tl3c%sAmbk=Cwcqjgrk>7CUb0N>B
znUMqX44qVG@0ym0P1e^|gdGqe|7fI(cN*VSpg)Q&tj*-PQ*xd0ocGpqWUGrkxtf!A
z^UR1Q`yVnZOX~SX`1pvtH`$Lp`#_O4k1`iYzOj>+r{d~mJV&5S8B-fR{Ceox290~!
zqgIc-I&v~zr!#h0AE#_Y<lr8J%J_b{@I6U=+C_={t6h}Q&>M&gUT8Br2L-1Dej@)W
zoND8Dz&%~<Sta#K`=hs+Pt(@ez2wA|_JzlI;VtrhAK$oFB<5oLJUqg4(SL-#Qu@x>
zt?Auow`+-f78fRU%3}PC<br?h7W2tpaAtrbH@JA_E$Ycxw`)&60W4ZXW<6Y6qC11D
zhS^)?P<kN!S8YXc;P=1as}Amez+P}@{D%j>#2HLaFwQ6DnXzvAuE<rxeE&q^GaTeg
zsl@j#Yo9k$?;h$OLNCXbD4qR^=jTqw-Nkp#to~iDJJjw9{M^bG+~w$-GiF%drI&V2
zvzMgCv(JYg?!wRNiv6sGoZX6lCaK>HPv|d_eh4mPPVOj5^=%ltr$X5_O8@3C9_eG2
zwRV@*<4yL>k*0nEP1Z>tpXA<!on@#!gHG1a9Lxv#0(MoXs`m`NbI|47zKgiGG39LC
zH4JYTJx~4pEf03iQ!!cp9isgg4|Nm?d?e2DiJ1z%nbtFxwz~N(uy~&5N8zz^zz@ME
zc%SwC0e%ad72juYwur=c9GmcBk-$9jg^r>}`43D!Ijb|pV^eEuqBqGtOW_yE^`jo~
zBMUDPUe(9`D2Gkm)(PJey(rpZKJEJxI!lgvYSxOr#VzT<#k{}JCw}E^Y2DlMgNs}8
z)!CL=T;B9Ejx{Q>mT}yEeWvw|j!)k2)x+{_1Ae(a_H_BSWpr1xYbWc0k@!!rcb{s!
zzbe);=!)pGTO~*1D)Ddo(6N2=tL6F$^i^a_L2^$<f<L9kCig4w!3d7S!=I9zg*#>c
zYZAw22KyEXKOX_lb;dO#*uQ8PT%Q#@u;>fHgNq!&LyH!H=MuB9nXz95zQ?z>FT#Je
zbC_`-A-@CgU$ywxeT(J)57_^96?<aSv9ErA&(CBZY~J(t^j_nbhdmGe4>_*5=8iOV
zZGEA-_IFb&Zi_E_?wWW-<W||=Hq7|_>~HHc=FIBiVsEcq;&P-8@Y32}q@!0F@FOoW
ztr3~#Wp82!v~~=CUTS=!;QDwO)sM|K9@kYGGWQ%@7{>#wed8(k2ri^x69q06@PI||
zfUC~o0rO_VM|n5*i};xrn31glp8|Ztz(#o0{qXtWsl?BtzX|W2!2i)1@C|<dJv2Xj
zc~yx`{bJRK<jbgZ+}hn|2M26{y@&9{KhR!OQDxh>=R*~7Bct$_6umXy;@g3@FNK$~
zA5Zqjbyedx2mi<5KT-H~=Py-cB7Soxedv6&sNCdUPkh#Q#8*LlRXs6mUxZ#;c((6X
zD)M-p7J2+?TV#J>>*BvZlpg6kk{*d7V><s`v96hkZ!Wm%i6aH&`-9(K^p{|r&<8%{
zEBk4;o|q!3M<HLtKX5J$3jO^7`g$8(QFMbJv0p`KG5=oi?aDfc-u>YDPw$rfQ>J47
z)g89g$hKALi`x#nxV}kTzUefZ|E9^`TgW@b`CXgHMfFp?z%KY7U2*|&hV1t-rj)*i
z&#R$T{PG2*3jHRa<%Qqo*}r($U!>(*`?5PV__xU(FnDSDBDFGDq*fi(CWL>Qhkuea
z+!w*WmswMIL(2@mct*>+nf8xX%?mYMGcVMwXW5Ui2U=o?QZ(oRXT5xbzqQsx4{&id
zS!WZu8;D7ezWV5EyHfUg_-7Y*96eIMnKg-(nJ)5a@LtL&&Li`0_V-FIX^p)v@(udG
zT}{N_b4J_f$F}TX9)sw9&(i<BdHLb{v((Bb^NPa?IO0HB`M1#j>*-aohZc73ewO{x
zss4!#D7jE%ZLN>>DnsRkTgWHtf&Zk|zEU=o#+gp(@ND)ng+=d4GcU0A8ybh&2In2B
zYR<sFWqY{|d)5{bej;ti_?L4gTQRvT1O_FX%O)^bli70E#d&NsHqMk{jE9=!oWrb|
zF2;G>?yZ&c4yEj)oOy`8Pp%Wge(=lw%`RX_PNy2#Biu-t{>}c)dx=NHcWa-`f2qp_
zyb|9T_9MjhNS%@wTJlhM@&A)c^gR!9ETzB5Sklk54`wi)6mAPH#w#;lo5Y%t#UnE`
zi$}f<ALu9N@^bL;9dP!1?v7(Bk_)eLHLcxDOjKU+xPFY%w_(~xXSQ$u%KTnKx7*oE
zYHuY^TZN`se9@IhPIOJHT>{M9=k*tPID^m)&bS13zy<v4m&`|R3}{()@wX3WX`!cF
z2a4Lx#21j`s`Nbikj-V&RDSW7*KU5(u+?VXsjZf?B=6#U=SG!YLp>V>Uecc$&9Dou
zJw|R~i8YjcceB#fr1&KBtoF;cLH+9OgT~>uLEEAB!L-%etvS!e&a^YXS<LMOl@@v#
z807rXjF1y9?_X#uCtEEzPt#s|msq<$;3Gm-S@U1a*?bo<mPXNqq0d>mxg*!B^1i`5
z{(ip7XHgFSfVtzT&0pW#PJf?n`o?DW9mZ-e{Nmzov>aZg&#JjfsRAk6NV#18uez%0
za3f_&)Ev&`_xqc_(fh~EU++apwqJBd+Ui{P(&ygVa`>sHuW!!PZ8cKn2=7<i-a>4X
zxx>r1Rl3cdcyH9~ZQ8h*`LW6gj7BIcaKblhFK+g4#{X(ZKMk+poxE=Zzm8aVsoNiI
zby#Jw!|i+e9laIAq508whrW<F|LMRN)Jol^O&W#=HGIh(aw+qyt9?(7xBVA6u6A`s
zWW66+>sMyv$aZo;vEQrGFK3ViSM{Syk#{@NkB#7g?)$L~$VC|G%Qc@@Hd_w4sB_FL
zb=H&HcjFJ+%`=+d(Cq#qFEH%_hkm!&|J=hFwwxc{^L);oR$IEoV*;8j%=rxA8hBWV
zriWX!31eNX0a?6Re2W>M&0*7u%zzf4`F_jJ9nZsM-QyFQN$M3Jur6)UOj57Vv>y=D
zAb!ry_fz^5d-0xeoXP4ooJH7oM$goD<2xmupwVl@B;Me`n-cK{4{%TET~YCaqIX4G
z5_*@|t?})_MWT1b=c*XFrq0G^sIv}qD$$AJ+qW;uLKd&}UJy3${~aNBz??$p6~2_Z
z#HY{(tS#M&bMu71IFP-sFlH&EgbvX`<k=I<lh9E=w9~J&+D2@mE@F0CoX(B?`2T#w
zI!FwI<Mx^2bGCGeKhwRF`iP~ov2L1L8yOGNRNv$tKWM{0KC%03r4fz=^6<M_wu)8v
z@C?!IvB!Yz@cM+UVh+hZW!6#S=w_@@n;B-e6J4=>NJTuqF(c+_>^r5E`ms~ZpPG>%
zJ{c+Ni7$=#<hxo=BuGA-VXhBW=io!m?UrwX3$=yjCUi|=t9+U2Srgy12Yp8BjuvYR
zhBxWVV^PoI(fH2Qo3LT+iL(*qoJ3R3RaEDkk2vm3#jJT+oz%B_6Me)VUdDV#y`F1D
zztjdi<Xr@R%1!K*GsE$nraXr)n%639NmZCS7t%bfB7Vl8m}~j%q8`t0@LMHy-_iA-
z)eXDO*N_2U!biRmTgYauRXda4O3c4moEP>`$35U+6g$+cB+sEvJUahP)~;m@^CUj^
z@v!j4)q;<1n$(^9@OKAIBR6z<Q+~JSU(w0HPcw(u4bFf}_-t%p_W#F*i5Kt~OG~he
z0%nz}b8<GF;G0SOigKFaDIac*6#j8@#B-^NT>noh@|E>wWcf03;2P7jr*k=1mxQhZ
z-ev~nk;^{=-Wu>eu}zyXl&&t05?A1@;Cx4Ys&&@y4d&&c8;EbwlJI98DbPJv)p?ec
zgydTnb&&I|)XABaCpgb?i2auH=Bc{MWF3lgCBK!d!<jte(yC)Ib!6zD)Zx4+@%?49
z)Ix*Y+>Ok?oTbA0s@-`};%v+~Z7;utF*Amb1W%G<(E6&IpQZmD#JoD!Ci;IupKSI2
zI&)#@I;;Pg&DI(1)N%ZO;kyL)ewLHbYk&Bz!C~|n)39?MVL@qIwp#gf!I^i#ao}d*
z&AY6z<I7Tgwy<Jvthr1@1gEAMg?5=MP^wmN%lSck;V`}_a}1sE40&7rA5|yyh@Sn2
zukm{v4Ge<^8v2c_)ko3oJM+~7Xg}h7YBsz>54f@WD~;-I@3pk6^a1Y;+;b(~)L^|4
z|8cy7yjuF$G5iJ62mibA1=1(;2DPBhSXM%;L;hDP!K01@9>{vcw{J-Fp<<bBqtMMl
z?1P0nzF)MuQVY*W(ohDuB&%zQ_a~=`flL-Xp@CTT1N6ZIO-WwFE_jlS-yUM}I>5uu
z6|8e0@32qa6FtG96$VNeyUa&P9rj8G{XqB8@1GdHerrRo<hg0WFEL5%we~MX95b&E
zwDI3X&Nt#dh;vY-Qsy}A$ak#mhV<Z<B9-7dx@N#f8$*B6HU{tWZt?iANn~s*85`q=
zPp$N_HX-u{?bu~r1nxD^!iUC;QjsUu{}Zt{(BeloUCUb6s&3&^l6%XuiS;|qj<nXx
zpnc(!sr54AU`kza+0%3le%vDBtXAO1{gf9h8NpWt-cr8yI{1zk+!ehoMK^-G$CoGI
ze?yXQrFhn;;Fj>MMq<8$w(wNuK={`Q_cZ$nUCZ|DHzOxlpAo)xB7Lg;a@*99;AUgB
zzpN5m6kpyv;-Mrrg7`l7N8>xc%=r4^`}4&X&LaLJHAWNOEaP-4_%r-mczBA3rTBXE
zPYJ%>$^F0Ml>!feqrgL8`IA4zr+zN&Cuvw{|M)ct+TWYxA5Pzr=5HZO;XfOLz(~Fq
zz9BrQ5#CV={W^UK9w6T@zZM#YcXaW+tbtVB1l~U&XYo=8`4oI#O4RW)U8|LP{4%%H
z;i=~wf_m`bfwX4x2EMt8->ZR#kzMi$Z&<48WPSv9qfySaWiC%JCXpo<16Sdt&vGuT
z@IK*t!Uu&1j^}?R|IWDsNggKOf5OL-{7-P9dl|URx=t2n`$~JldxQ`DCLg?IPlE6v
zi_aKYq1SWN$_RA$5bZBIgRIJ^DY>3L3!jP8PcP%oey)8GoX_*v?IpwceK(q8;uppL
z13rp;ok4E+;W>Rp_^cvMo3g9m&Z3SfYU2+c{6Ue>Te)4WEN^K(yuio~O;=i;0c}>q
zE3EZ7cT4(eIfr-l)Fp?@w>nn0Ep-D=GgcXB;9Oo~#@(U^nR6@{w_0?kWphqXHuJ&R
zE(T}z+Gh9*TkW2Jd-Epti?!%80`t&+<a}Mh*WV7scS>8YV3&$a|IlDu$dTi}j@SK`
zGlaK7({bp%x>nV_&N=Iu*j}&ej!PB+lR3a6jj_G%{;f5(52^1uBQqqvphX!oOZj#q
zdSKl_@1l^LcZ_0?kE~nWNS>Tl)>-y#kn@i-X3VBjF3uZk#aHJN9>U%R;$)L!$f$MO
z3uX*6hOQ08n^!9vV@L~RG6q?@{}KI{v839Q{z$*X&X%#rm~ID$JmA{(YT6|-AJd)I
z+zhxWcLqIEa`(@G<^}FU`pf`1%ImfQ>$UWG4RZU%S<4Q$JFmCD&N<BOYP$U(aP}FO
z)wDAXKFaQ7EJru2vCgx9**eeO$i_y=Ze$K#EG(Eo{9>&#=Y={M-)P}>`(gG8j&7LE
z8P8haUivBX(3~8H^hNq5{Wy-@EB&uZ(!kd#lcE8^|4H&3zFW`wpKp;`a2>M8k~zp8
zq37;J37$8!G$C^qAaj2G;6s+o5&ma~*9{YEaC}q`<A1`puJyb{u7@|dh}#?#Kh6a1
z=<czGE$o-U$G^wpPRb&?C5w!tENVd(1<_xIC?j#1kFn?HMXnCyk_(x!p!t?w53-Fo
zp}+y?@21Mj!V=ft{bN=4&R%&wIq<h`<l*{6-({S8JQoZU7zNp@Xk$%y)fQP3L3fU5
zPpdleA(fK9wzO_Oa=ForT)6uD(6t$pLhojo;o<%z&ENjdi_tmi%f5&mYxx--u!og%
znjQI_?S-e`u+`tIu+P2lb!gXa+El1wI(tRwkEiki^s0Q;#>n@KU4%VYx)s<TfmY38
zGhCT5F{B~mk6@QJ!hdX;<q@s0JkmN{t?HO{Nwa6b6?z*vw;sLhya#F{N9n`xG_}fg
zhq=Q=KdNc_36*Kbj}=g_AbWwcmRlYf-bc(Y-)U#cBE#q$IVZ~^T5x7e{7sprs{2vA
zH9w28;<u>4R~N)L=_Th&;H)E0$`Bh@=R=oE`JohTE#2zt^}*xC7gvGbNg?YMeUW!2
z?_R{8<%557tC2F}pUe8F4V=mO!p=dB^{R9&-9FoRba!+vXSQV8h;_*cc~sZ#lnoTb
zE<T?Nn})o>69aAN5Ki!+g1oZs*_z~fTG>ucR9BFkZS=Plyhx3upS7qq#zl-yVDA<1
zXJD1;%VX3h<xBnveBSXT)-3RkB3qCDJYn~x+Fye$&Dv9s@1`}q^8Q}naTNWhk>}+F
z(?gH*o%lk6@ap4?4d3?04Zy&eH$5bJj{4o#S%U)?9=N+mp%2xc)iyrS3%u@VKCC#G
zLHUX-m@y{%@~K%Nm&**#Kejp2qR|(|T2f+$Yw}c{^H^EL{l~IM>4#;JivN9av-D@!
zT64oU{tR<Q`x2A*u3;<nKwly^MX&opI({i=M`(o2+jaYH_Lm()2a~+jab*OYjOS(G
z>4KIj*hBoz#os0WYfkAGFS>u1V+k})?Bg8jl{$~po~-FtkXKpi&Vsi|-TSHgX5!3W
zpiX&T#eF~avefO+rUpuWhE8Wp4U}GdU(xAHb{E}zHa_)4QdX?^eSGJS`Jb{MpM)kv
z&lP=F>>XM26<zn`C!lv=-FJq#V9^h0-<P5CI*`4u{6oA>bU=CE%X`u1{*66Ea%a72
zr}>ge4(huG(`Vj2=%P#|wCFX`LM~??=el#wFlAGE{ViSWC14HJ#72<sH0+6XY&kFS
zys2*!-`PSd`7Ta-3EcpHfTbhiXY9*tw(JX2?287=z7Tyxbe)^&_jT~!BYY=1i0B@Z
zfPp+4;#orHRJEdS!dL8~Cs{fT`ptN~rYS-WFTRyJ;{Q9o^Ce&y1uv0z34IyeTxe1J
z?j~>)o(@k!hc5g?hfe9vfn;C)Ks~}ErCyN*yOPh3^4!aF>FeDxclg)t11ChrM3e92
zn?By9^rS@WhpjZFEA8Z+^!3-{>e|jTOCRG~sq3G4C%V)3XxEx!_=?Q20~=va2Ykq$
z_<i6ho=-~rj>f;Ys?Tk1dEya#;K--hA@7z>^kdHl5;suPGaY;~uVifmT0c&G=sDPL
zg#j1v@xU|P&g-`nzXP9OOk$^*dpU2K_-J5dwcB3m-O|4+A@jt>5*a5pm4R%l-mZlk
zbXlYS%eItiQ+1p2Wv@x5wZ8CrzRDB4?tnf!ThZg0msWH`%f^8}eBS&Rz#~N;Z-6V;
zLm$NHl!`ol;$XZ^d;&r*GIv4)Dc^v!bMkb2>S<#}?Z-Ll5)&Oy^s4EsHHrS1&`qWX
z`hd$ObSVF}zs(kXM4?}s=+~mxWkSO;H|v-i`Cjy*A$@v4_-qwE9?`*0ql3ldd-SaB
ztOIz_A=mP;=v<q!XUq`Y1KTNEndd=6My=E>y5uH3tyc8N)<d>t(NRQqIo^(*#5`xP
z)^NR%Vd;2l?3PZHFM8aWZTjki=ta`Td7rc~{j+UQx7CKFt0vm$M>k5fQPL{0&NJ+d
z^!;H&^haa$c?IZ?)PG>ZTF#ZyXWZRlpkry-HuPYp)qj<}DQD&k>35a%U+L(<>9s=F
z9>&nW;XHIN75H|Gs%y)bZq*$HF5YRJ{|DW@upx0?RXY8adN<{$8B#BNKf9eaRI*;B
z(yV$r3xoE)4erfSztr3G^r!l@!CZ(A$2m%tuJ#GdpF`i*2;GCP<9$ZLC&h2{4Zan*
zK51#&U`hwDWPDP-I}0Y_mzWfShio1%`&05g2R%{nFB(R!;`^KE+BsNfObkWQ8}W1f
zDi=SO(rw|(!N-#h75U?Qe7Bsha*}?hWUJhViGvb4y%4-UBf602bA}3x{Eez>&GwYY
z+U8_vF{*2l=YONGkmos^NHPUKAGXj*aKCb@3N_*@YdN|3c`4KPRaIx;$0J6#w4PY%
z%p%UaqD(tw9zL`A`L-!);SW{w^B=Iz{D`gj`O`CgnA1_|oV9DlBRN~I+;z?A`K;w9
zeZ*19{BVnL{`PFuyhGPZ#P{HZ4+vaE*A*R?+!8$|{pj&rIuLDCkss?SJ8DcXJ-)I$
z6eZTttC{7?GqOV8g;$iIOOi_?u)~eNpLN;}d`V7pOVN`Ibf`w)U%9ohcTh9z1~GCC
z`ITGb+@_S?@-LdQ50S&~W&BCO;rg;l^i<`Xj1FpKSMHbJ2a76``lnCy&l%{SUu3=c
zLVU#NoFns*J(Vi*yWb`9H;>GxAMlet^e~ON5?m9#qaR;o&<&ruMm1MFT6I=rANJ+h
zQGC8DD8DSj2pvUF9Yr6#mA)TDPi;iMO7*`|=gef<8jTZQuBO&HbR$r}Ia)Ga+YEEd
za49+g_#=B1mNMrqrD!`n(DdNlMGnf0qL-upZxG#5;I*a*zD~c|fTbtREUy<o)t6Nr
z{;WY+i;FTZt?$*B**PofN1A=WN4X00HPKUA`R(Hy`H!V6IUB;POTXubhjkd4fy`=r
zTSiu(4LFHxi<4v0yqP@{ZLBZoj*U@p@gs2fI%J-}NO2L5HdW!PoiKAJ>zxxqAM7>p
zOR3PGer!HJJRkjkn%NvbQFs1`TP<{<2b5R)%49A^!HbjZb=V+v&72zcOw~fgl=Xn0
zF7UGg92T5?85>vXN#U&vU!~w~c{O=S#?^D+czi*8pL$+&Szir!LVl*uOLq<0On1l&
zOvSf&AOBG=iJQz0{SZ7Cy|l`13(d+jpWngS(g%B0<jmH|=P#j8!{E-jZJ6|JHD{`d
zKl%=R?yN7+k6F;q!_duXXy)N7cVBY`npw#AM_5nvFei>I#sKWUWT-+XIwEm6fvgJg
zX{nw)=%6w5L?8EypzV6*CCXe}m8o8HPJq^dbyS~j9|9L&cL$52N&Dlind(`ggEV;7
zm(gva;9@in9b2V+E}xoaD0>wAPQ%_90q*Z{=Fc=W%`UV#OkC(2+GCd8kw$J}Q%$w+
z#m<ni8irxdW~`p$=;7em0mh-`VWS-{i+JBFi&TA77IFOU;%2cuut_buL!<vMs9d}7
ztNp4V@D^uHJ@&wkqTymWYfuGVD^t%@z8$aIv;6C2J}wz^{}^XiA?x-m_wmeUJ#+DF
z1e)$-{41D?O60>R^eXoec#D@f8!x=|je<!fvM0<7Uc6bHTXJ+6e5PqlnQh<p!G>JU
zQ@o&UP<+dkTN^fy<V^}4C?LLA*+SO(B{1~bb>6YY$^4Ud%)Up{Lc$}Ce2X^VYo=4#
z#Rg8<wqn;dFkf9<=tg#xu0jL9Wq%sHK>F)v9*M`#KC<(gk`)<RC^y>-A6>?}jb79I
zX7P#=FYBgW)=j<AHa_F+v?*&ujUeWc7T{jEq<Ll4r*`JWtl7$3U;LnyC&pvzM%H6#
zS6|kg3x1s|ljNPi-pl;Hha3@@m$5I97?053Y12Z2i&-dF^gWOD;jrXg6Mix)@b$8d
zH-Eis$jGzol{a){cjXe7rl!{p;S(YVX(ivRR6Of{d^>ccg<f~xRU|aTdP~GZyPfa>
zp?!%l(7~HZ?6(SK1P=TTJrca}V7t{~yOpEMP6uzQu;GS~pGSdrqc-i5boj|y*7_S+
zYkb2%UttaMG1jQHCgL4bT8;P`B!+-<sqHP$c^A0$5Z}9kf6iCxc)nd^3wYl_A4c%G
zwU_dn@5J_KzW|@<uj31jKvU=SS2wp)_hVe`!1^(+s;z5!muy{2%tf004eF443$|SM
zAZwn;g!Yt7=p|Nwev3@_E^SJTip-Zqmr36M@ka0Y;NRjKXcOI*_o6=tU7DQZ3~tqq
zSbhTiGkyYjpARqTyVKn9urbvx--++)b@#(X_>fjf8)CD6S)YbaAS<v3-w*ZY$=Ovk
zcW`z}U_-AwZ$x*+b`A&l{{l984BPlf2l=;%xA+HQbsksgweLb3XN-wG-=JRKc`p{F
z+tTgR1WzpceEui)c@1*csZF(8{DC=M&m70e*Ceu1=6F3e`Ud9tX6AW4^DF$p2cCaX
z{3`H1biq1_l{jupz%R`DS}wX3IFyZlz)7r*1D>C4WHZ(Wi(2pzWZ}b8cWgP_$T?vO
z{jkwFC9Hf?EZsn0=mYP_31<H-a1x#A{D~?rNFO;XfgDLYkf9R;<Y(o)D`Y-x!V3oO
zuDzwKjlJqZ-$P0dP`(a7abAUC3z#p%i@;CelL6`%7zun*FnNu3+*vAb4wuv=_1s;%
z&N{11>XP;EV@7dLTjlv7X<O*cuB*Z)88dtmdYfp`+cNxaOF3Un@&Su~pj*qTb&^L2
zpUujWEcIFx{)7Jbl&q7Ao<b~9SomBX{A`8e>XM`A6be4~2YsS_g!2dAlncIS=87E1
z`&15qGu4a(+4GuCe?>QH4fxA~0bf~LprPy-GDbOb(3^6zh0luKB>XSM+aCH)^dtD%
zEcoeB=wL{n80d$09D~OU!{=Uif2ZilJGUMd-N_5T6P^Jt4GW&R^2Ap#D^%IHwAtIY
zyxC*dEWRr|P+~`f4~m{7ywC*?vG_2!A~7VD@I=lUw8Km74Y^C28_gxnDc&i(TfVWr
zrM&eWJjaXQPxzmS{w-@%<9U!yTt|ur4S$P#BH*b99Gw7u)`F)&!5?Tz^2h1tgUirC
zO81q!?AyR^mDgD74Eb;J^*S^y(8RoX@hhAm*Ibh#2BAYmp2C)AjWe&fK;@Cw`?Z*n
z3!bYU@+6dw0_zFz2+?cgOodU}5Z(MOzS#?&jF*W{hpIcyx25p-5bw#EmIp5VW&hN*
z@w#oN626bFl<$M~SvM&4G5>$=|Csz4|HtRqM)Oa`r;2^BBWWL;*{hyEi+*$#J3M7q
zyv^@uv8?&3+9Q+~`&)d+Vt<R>UBolt?Mv`A3D0^1pKn8w$CJ0p;_(uPl;H8?6=iNE
zPEBInQapYO<GPzM4Y78bb+ff+d2lVhwUmF&b0>SspsgXL1*(~o3T(PI^juF?LO*ux
zi`N|jXZ^sk1HRA>U+56s5}222s?g219nkL0#iEz#J$sSu`0Go(+*^3AsFV6vj^VQ&
z0q@_?)9gZvmEc245Ah;{L{5rK6#e4}G(%3??CmSiKUvdj&$WeWuoWty4Hv%~uoqJJ
zyc}F^Kn_)Iy}4JOy@Gt@oU)MMxX_H~2|^!27gfN;i|yp;V_lH46604a<%kuK|6X(%
zc_zMa@$2AwuxKJBn?>Ky;M;ETtui+6BMG`FhG)-*9x9*(7xSb+7h^KF_&iGf<5Qo<
zhrm{z%^vsc_2e@L&#IEX5ly~D#*AP`oMc_-t42nNrk+^Uw{7d;iI%M}F~pg~8%1Bx
zG8J(*oaK#N^<Iu$jGYywob`^r3f-#TZERjZ{KsX)ft=6_YZZAJJj}@noijMF9mHl>
zK>r=ccPBE2*sqm^ycfGf#$=+Kh<ze;Ix^MSpK<n==&kZxo{3Ih$oEqyI}9(ljJx<;
zrHtV8&p0z}JdKF&z<X&T2El)V_!q_~W0m-Q@hAIQ;&tL1m$Of(Bku}uSbXbVF6dzJ
zV*U$#d!g+L;sm^F<8@)4U5%WpMdsY^ni95?cS&U5)mv}rC0CRE>hlJQLTPq*wH<jp
z<r9DT0>1O5_QRgDzOT`qQ^RK{?`Lza6)`yyi=(jHzj!(4z=3xo=sy<j2tI)~7TyW&
z2;PA&#HZRjpe@mxG}dDrtjCDYW8T7e-IT&+%hx8f?f?!Ze!SsN`44_PbcJNB!g9)d
zXpqyLw#EN4iSk3UJb}@#a+WY-5TBa(M!)m#@twc;n7nlKUF@S-!0YS$7JKM9@M_eU
z(Iar&125Hi_bM>dbmEdun-RtR+_n1y)FtyXgbn*`;>^uPbkp0=xt+G~2lPifhVF5a
zy+ujAxWVS_6}!3sKH(uZvDjaNpMJh~Q?8F(4KmIX@Hy{PWF<6~8l#M@0Xz^JvOmSI
z;amUWYX4+CVNxtU6<$*M7<j?i3sX-JlP%*Z6B)#vb*Mp+|B83g-X%Qu@N6yb<U7%s
zQ}ZdYX)>o0pO%`}p+9A8Y<lNUmOKzxNDM;@Fo+vz#L(riug4&_S6X)pXGSNHZ>3W9
z^5wF(nH)QfdF+3d{muE^F(ZTh<pu07PwSDmk>T4^44fM5V_(^+eel2)<aU~$h$pL1
z)I)q%-zv@zs#meQ*pJvnjwe^}qVVudD%S5d%U!i{Uizf&{!-%4vDI8o;yb6P=4sS9
zjNZX|O)QR08b6Gz`y%bNOz7U7#hE<3t1M$50(K;PaBR&y&(FQN9sgNjQ$IlmtYf~$
zybrYQk~;MEw3vHBb@%W=J?!}VqH?W?J*2kIRkszWhmggk!7R0~koNFL|7sJl;3wA0
zp86?0r-<qM@V4~s=mngaFbO}(<&2H>I0t^1GZ`Jb9-gYg<!ahMg)wt%Pln`JpV~9b
zoCqxRGweU(EO=$6g@^4bf_LPh4_05>J!~fyB}tp3w^{LfpX?j-6Yp_$tHj;NzVa2!
z(@J9SRxyvO$r+Po#o@7DHP(th0~s45cgk3h-%eoG2h5_3)q)qW(twrpL*OMaT3~Qa
zPZBm#$3qV$U?XsG(Ps^~h)wPQHifqvv0<Hf_9}h@JAu{gB&?zz%en2>cK<6l7zHK*
zw<+w~cN#MXq8SR@SHBWpXS9;INA^&krVrUG+6V2c+Xp9H-#+*^(AgHQXLV=ThhKir
zpb@@tZ*h3ySK0@2zS=(6`M!$yGM03kHr1_P6dc^P`{l)cVl`SiUS4dncJZ}?oXvZ%
zZ4rA*y8X2)W0|v6x4Bvidk)%8`iX6`p5Kss{!^Y;rt^G4;(258d4W#(44zL+JijgZ
z9Dl8+GK=RqR$i(}_qPv9AN&S3$)?P(<gLnmj%TJk%jH>)^=#|uR~A=pniAd;e`RqV
z>uGlyuhQqd&>b1CF4lwOp0dBXxHErNc-y2`7jJD+Pu}@;?a7wS`jcA=UR}Ip>Z^<I
zobl@7I~=brZYh3s@wT~A#-NOiGHFlVIiGhI^6paJT~67rr}I4HN$E>IYj9G(-^dSj
z=3ij-#W!F^^gf=UyL+8|yE?zgo=(cfe?%@1e9DLPnIV}Im-<3DS_)nlWOWZ`fG4Y2
z*9dT(R*^n@b5VFI`?Ma4zo9N{iD!@ptaDWq-sWq`20v%?_^)LjDfHU%Q|MB4uDXNR
zvX(2=*`klw<MShQ9sciDGi&?j5i`4*+%6JBYp4Z|nTa?Rp*x`$@r`xH;|m3sI_Iiq
z@Jq$y`KbaE+9OxP`ehtdt72QG;U_YncXB}WXXD=jSBcjRiI3a|kM&JO{^Q$r30^WD
zWI`!?cmQ1@>@ZF85>=jRoT=(2tKi^Ft`CkX@|G6%oOIxOht?;+>(>I85o2agDi>5I
z_2P3M^P>ko3*5FEMFII%Av2texuw$FxMc@^ICMV`>uyTT9B{yQ4i2$4L?1n@n|w$v
zBlyL8ZuS^Q@!cwTyb3HTQ^w5D!;{$OZ&T&;u{=iGPR8c~4o=z~Wek$T#f4mPnO716
zp$*74GS-L5#Ul07W$r4r`c(YckLb7bPxfzoNL@DQ=>zK6eXAMXYB<9`;9d@$r9or9
z4~Sb{3Y{G`!Y3WnV>7#h>1o~5jLD&^4)!l{L1z^Q4=hs9ZBSRCM|R!2xZ{y~7rQ5z
z-L8XGC-n)?CiL7|lNWPAdqG_fS??;BTJH?#y!CqCL4QHrNW43^%z76j_fu;F@1ViN
zH_MaH(?YGc=Ea2GT+pH5Y&!Jkg6@KPdPttjvkd6Z1>FVpjF8ZwJaa;Onb4iTU{+Y@
zp@_X`Guewa>kjXeyH0(3@$Nr;d-22ieT#pXe&6CpvhQ2mk#pbTqFX8{Q$?92PwvXU
zZ}ILa_bq<7h%&P%<EG4<`xei<eJSskJsH$9Ll2ko?gHLj!n@1vTP*EnL4W>&3+PK0
zahr+01Yb?k-?tL<7rZP%e}dnAlM?tX_#6elJJ~xq%sdKC%YWH#Zy-}!!E2f4=tQ+}
z;V<LQ3O%G~LFhvGx`ur5OH4QN<@gHqP>LqR4;MvV{`Ozu&qUXYtkT9bVuhlIP0kKd
z3(u7m<K@JB^oVEA@E!7QDZe#%`7peE7+yXMFCV@zA^S`%I5=Go4nhO(KL<Trwg_Ip
zGx)&!P8HnsVI{tDev3Tl<Nd=%aMw2K6Tb0ru6pP=zmGERHP8q6zfzkJT$MqNiDCE=
zI?{q++Rq@?0R3U3Ml6g=-BWbWiWP_3ZGAU#=6LC$e6`u-n|?{Zu87TLkI*G*GjW51
z@?EQZKgTTp5B{S^ln*bH+(oSSDAg>m#uphHhGrI!({Vd+#IFOr%Q?P<79U~#xJTq_
zKkE!KXVZ-7A?V%WOR0HNCx8+2AoG@*GpRc@ZweVHb0+-gEV`(a?fYZ=*?)U40o#9o
zNB#D<<Q+}EQ#=>GbSKZ{I~U)*EANu+<B$4m`ya$Dy!nW}Zxntf_5UIMtjyca)PLqt
z-m_PFs?3|qslxZa7vI^1tXI#8PCThw@JP3Pxg_mFcntX|EFZ}qz2z=)SQLw0c!t;v
z^xk>+!w%@|8Ng1jl6@ay=fcNa&O=4=UTkd9A^P2_{NNl_{vG<R$m{V&Qs;xeKc&$5
zqUe0GA4T*O1<v@;2c-|&C@=ldz$w9@4|wnMCUhecI`CaZyfXO-q^#&3-=KV|o*~*)
zrWu?4L40SQu3|o5b((f}OYVzt?FuYSU?O!iSnXZg?V-;<O#b!*^IiOoR(i-GNQ^q=
ziPa`INmchS<$Ta3dtJudz3iiJa$0%U=)ct;jrZb{iGug>O1+#tt?cs&4hk&`9b<#O
z*N1Of`Yv-Dr0l2q`XtNtl6+6cz`c}icy?<hxu10Qd}ehQus^E7ZH6V^kfn21By?`=
zx~pTuz|;KIdUA_Si22|r8Z_&AYF2odb!F|+y9U|&6q2|)4gcFnr50vSf8?lP>uGg&
z?H++X-(-)`kzy?@d0$-QK#h{?JB_~UT=5q2OL1Pr@LcGd`u*swvR8T(o8HaX8qvF@
zTo?BB*{#*&SNb%clJc0bW7rXrt4eafq*H!$hu+;Me2uxmZ^C<d=Iu6rHJ5T`M0}|x
zuzZty3O<VRz!W>>v$?Q7U<@f(Ngk|w8zg^g26<XE@-$(qV85gnY#;nsa<*Wrd>a`e
zdEzYi(I4h)&~cZ>84ctW27iMMrsXSmlKrh{Pw1fVRz-}wSr(3B2Y^ezQV(2i>9pUk
znGox^hHKS?*uQ0xi|+z6_IG+-EVz_CI_#gFHs2F!eJ3}z<5X^J=bv(8_oVYKJ1-X9
z&UxxNdE{Lo#yLMPRzWT%iM;`?)*kdxU@{)A9{Lgkr_Rk?1w1TUAb9=N<la<c9`upm
zI%N8YD-yhw`<vXapik_B4}P2*Q{-ZWenN+)sE6S1&$eE3HGFXTK)()82i8vdlO|=@
zPah=j=~3p*pzKlRNAd;8`>5cJg)dWk-e3>e5qKtRw$>imR`%;3wQ_S7_7F3*lUzkp
zh0cBejEHKLd}6Vm@l0cnzE19d9oQB-(HZ=d=>ivmUi1~4NnSbj?o)P?TjGMIS~+N6
z<vZs2&+-%Cf9*-}5EWDwJW{#d&0KghWAK1;LW3^e3mpap?}QI5!cO5?Di^R}7NbkJ
z$s4pEn&S)>r?<S4E8U5VQfak~Tzl9rY9KqRZ=bbV&P#JEJ=FM|m!&J#`zae&HY<Nr
zBl4`BD~;#-c;2ouYTvMB*d>Oun{Or0`Vy5Ey5}Mf`^VD<mQ|PZ-gS`{F*t*kb4~_i
zFQJcj&gyx+4Lt8N>R*p<SFbey1243f%5hW4xJH=|d`N?O8Fo~fS}+@)oc5H>I{Sk@
zg!i%+b1!*eILo87<L}f)KX@+tKO{E5Mc-VqpO!vpeD4xDT!!6v|B`OMBBv~T9lvbd
z2Gc!|eGz<B=D^wmX+k^bHlkNhk0)PfU(SKdW?x}q9&EtvK498jEoVdMrHvP9VH;=O
z6XT2TJG+OR6FVi}<tTY^4B9jvsOn}dZOlh|v%$4B$m;A&HIU`h!$z+juIV>koBh$Y
z!}Ew&xVvdXZ%0#U@8j_3G}@7z7qYKhd^K`^lzDu-x}kS}wR`iuHr0F&c}}dn7}yxB
zrLc!PYpjbk8F*jh06xPk>KH3f;rrmrqr|7DeEjEm+@XCovw07DP3N)~ut8Ii2I@GL
z!8skYeLv;xeZ=K^=7nCO+{=_(Mt+!kDPvT-LJiDe+XwLliu$wZlcG;P=2K*UT<IHc
zhG&l0^p$CcJdw&fGFI1cfjh)Pr}s2Y`_b+yl{K&ge-Z1p@NCI*XjuDUU*!K$rLR0X
zGrQJyNQ*3;{-fQxIX6@ZF51AkcILH1Wmsqa3NEt76RP3a2)|iBsa<mC-|yBrd*={1
zxQsrsw|qeI_*W%yQ2Kp<c3<TAI-X^cPhIHw*d0B)e?*M=<0><Bi1C8g_I*uFo8#zc
zZK`t1Jo4?PU?=x`DE}z%AL4pkWrX%Mt=|lcnx%X@{zLf&J+SToxgCG>IW&HD>(4D(
zlspIQ+YnxF;h*F{kUZV82mM8KF2TiN_Mi(c9x5^;hv6x|ahkoh3D~gMKca*Bv(3oA
zxv|G`+2>QtS+wAan=*0YpEdM6?aQ-Iwm~~m?j&uwCX!bcyn3w0zxk(LSID1DEU(0o
z(BFo1Gjfo%x-R(Fo(&DeCK!QE@X39PY5f*ilB(O}d8gMMvSq0SkJU76mV7Bfizn$r
zY`zvdb)gnJeW@0U)O@Q<;%lT0XEySHHag*vT^sym6>53_zE!7Dzx<Z^4fdl^rdj5f
zb?{n=9rRiIb6JBzW;A9RtW9fyQ#(6~Ze;D!OSvndtHMco2qU#nU8G*?D~0#dpH2GY
z0Ygn5xRU&|)3HOZz#f(S%u|1<O5E-BCo7%g-q)v%AwSsT!5O!F)8AIr?STGeZL|Lp
zkK{#K&<UKnYW%(ZmuQi<m`};^DYT5-<oA@GfBh4Ao{>E%9Er{MFn$l?_lRDRkbms2
z9xwm8m>bz&oyxZ$xyH|Keent5iGK-xu8-q&TXM|ugS1=3xNkJjYk|#;_Wq(9S%;H6
zIoSElpEnPZ_b4T6#@DZq9g-hT;@Lz#Oa$k0plc)3jQu#xjBH>&Uh-T>u54q>N8HvM
z=p4fzXivLrp24O}v-v3cL-(Wgy~m5wN;*}>z&n>4-Rg|z@VoOfOWvM~EV@J6txlQ`
zYS6!e@4=Tt>Fjr*u8^C%-$ou~VAS}sH}>XKty^T-n^QgAN74J=MmIYMEgvslQu5B_
zmEG^ouP*84JU#HB`6<n84o)WrN}Ac6MJ%lY+7li)A3ji%c3)9RT2?5EPojoA1vRW+
z-)zeYZD9Tla76f|jHO{F=Mzj*VgFP0WdTjE)fMq6*Z>Xxhq!l-kE%Kszt`S-l1wrL
za|KKynMr~$Q?0Frny8qa0Tm|_6|j2LlAQ#V5?c?VEeM*)MbVBuG8Jo&cuppOZId2a
zYoRAoFHAtKmD7u~wdb@wGD)~;ycSeOuzA1Fo|zD+_VoAH`^Wz5nZ4IumuEe<^*qmd
z7Ucq(?m7gW)G58K6WX{3x>!0*y>dHrP7HoO8!1+2P}dB;?dJIo%IWAk_wwAsf6nxa
zo@uFp8AS@d06tL%ISp!OQTMs<jn6X%=?8gk7hAwM&e|@ZxyX6Z(9oL!Z_if9!xwCP
zkp9unR}^&IJ2qCWK~HV?{T2S8h^E*xr!7JcUlC_aQbzW#vnFgq7hl{_?+I1FKRfE(
zp-S#T)5Oy+zBjuvv;}@xC3akJY1idT2e^j^>#IVW;f?$bZOKqkH)ooSFc#0}IG5Kf
zA2`T;B-k`i$=O6BG47n>LtA#f^v>*xkV&1f%g-739=LNQ_557R3W=T*XN+n3kUq9C
zFVfF;_L3l17C(RaZ3EKR5#YBeo3q0_Y9NxUYB%Sq)t$h?P2aI)hcxORr2f;WI}M*9
z?DlbEQvVAdk3A~wN}F40^KWz?h3>=kf9gJur*t36itfXDPxi*zx=*$;$cYgwn5mu6
zf3nbjBu8QY1RbbhzHi`-S@qF=WOO(6Y{Bm*I?=vZeRTgUP4+hB?~7^CD(X?_N32T<
zW}p{od{e((c|~8+C@VUXhq5}~Xp|TJAo`pG9fbTj{eJp-FISVwXmjId&vecR9fX#j
zr=I7@1>}U5rSCTh{V}&sI5I-wr;|02#K39D_Ce|%q%GRHdXP2*cUzg~o0;!!?)Nd@
zH#6V&G2b^c-|Z^Ho^Oplcc42AIV(cL^yz-hxx12fyTBViV`ko>71TS6`r*_06{-G<
zE;?dl*tvgL(?2S6m(DYRf1qE+C}qgC(*G7Q1HzZif&K~@i--P>fIEySzaBXP&wKQF
zctC+F*gZr%$sXEf9N|pxZS$OYz6`z-p3|)|8*Wy_yYl-9W#qqDwTrkPRZAW@+#H<0
zs`Li&Is1A3B6nTh@hx#L`J7dPol~=8`7PyeJ)x!*D9S17i$SZc#6`sL!K3Hq+*EXl
z>xB$en;wtIddW3+fU(FpDycJvag4%SoS(zb;~-X)G1aq{WiQU?E_jGu#a=w+YFkF0
zeTAGcxOA>v@Qfz-T#S8CR`%t0#o%=hAQQ<)m)Og<!DRV@7&=abd3agn?2dtd5#}NW
z{zaIJe&#~xFTz|%-D#QgS^97*^!QC;FAf6pH;IoTj^~xj>pvTEGq2@&=88V>>v_Iu
zt=h7&866|t=T7A35V&)2?Us#hXzw%NT{}D>f^4t&@+|`jnnvG_TJ&G|*g<sVI?Wh$
z@}2a3VqLr7S(_NYlXj$k0tctaeZE_k$GG9A^6lmD(-^R1&(sP>-eq@nWGnvXG^EFK
z4((2+-DQ+%0T*tg{jbvgtS`^3k-05L_Wv(DBBF9bc@cl@kDPg-xVJvKS5s|=$mMc1
z{F1y*=rsBL9(0x=uNEB|Ow!2Epcd^wM;6$2T++KS2)+2B6Ej6GLFmPVUV_kz3B5Fd
zJ45vMNtG8;y1$k)21ga~-9kSep&#1ybSUrZwDmUa#A!$7C{8=9C#JSACz2CyKkL5H
zN)>$zd*wm=@vlE*^u39{`Hj+yzMG+g(MsYqSOa2f@x6teMv?dP^@ry6$(+4WdP(2G
z^UUa**xZFT{@i)={GTI_ZsE*`3f3N5fx{qh+KHZIl23=dzXi|*D%BYU*j;^$wO0D;
z2G13F*w{0?2t2Ii|7vh+wL6<Tcp2$s?ZudSo$gS?bcZUy!wP6pfrD=Nfm_Sj?FI+k
z;G&Gt4IX|gHOA3W#zIcu1K4Hp13y|0uEVE%2k`9-Bg@|)Kd_8xwA75w;hPtMxngYJ
zWewNJ|ClYCGnunVzWp1uzVf`RHi6p+y5gJYX!|$T_w_@2U!yE-yA<nH?0+GFJNXY2
zawdSl0a`1Naiqr}Jgp*EdH>!RA~p@GQ44u4YYaDarS*K#>qWN|eZNSViDLR7`qj6=
ztFHj_@A<!A>sQzz{#L(2hqCpn%{jJy^;Q$GM8En6^{Vx@UiGMv)T<ty+jkJ1>h;Y5
z&QZw-z13t!)B4mm<ctT_7#--|m%~Q|_M%UHR^>Kq&G_cHKD8CzyEUaxeFdEOG=1t<
zr|45#Ptm7tgDyp%x;3RwwLz=@ulm$EDShfJ^r_E)gA?^B?8?=_Oz>Kp?CQ;EZ0N{T
ztCgC5ZZH#^$3~vkyVLyQR2@t9T$q|_2<ocV&zSw-s?@2l4@*8m(W4Z+Dye%E_LqWR
zS*$hIWs-Z;KQlDM{EN=xA@^Vx{b*sWgsgD23SGe~mGf66<y+WCOUy-Y;A=G=p*iRc
z-(>-79v}U!?O<)TCGfQY(TRw`9SD+}7<@12nygl{ZcEf7_alKX3|Kj=<5;8U;OQ_t
z$pfto!S6+Xm;$YN=)33+r;a%(hm(3gxj?W{p`#r)RtO&643479+WN-}%WkT<k9p!u
zJs0b^HaQDz=+U0XdXc3W)NMiMTbvm#wQND{7Kg*N7oEwm1Ut-zj>m#!67wWJAI_8}
zw%Ng%Ut6l4FL^>a8hXI7o0fT2br*G)%!6i<avvMfllkE)==#L7r0puLKbGBL;=8Kf
z3SSC8Ug~aqmg_aHF|M*ZF6Ld`R(lNx&rQqW^tW<P+rmz&$L0R&vs|xnjdA_GdSckl
z#YQJKInh^axsHvmeiCbPS8@##&#LcZEt?QK+`Ft7<lHD3U%GuGf{hM+K+Pg2By%OP
zz(L^N#6EZAH!&XSJz2jfbjtJ?s*p3~XA#SXj^M#2knuaQb;Ta5QyFh~_%_4cu}6N_
zBUk0TiVo_Lz1KaH%)bnQt4nDI{6XfYa(eN*3H!aqJ2!I=UglfikCgdP@Rx6^j%S@O
z-~A=^zsF(zr2`%(&)%|mTykzS#!<dj^$~BDD6h8nYOk<pKiwAVlPk42{_0@YMRmv3
z*1F>wm(FEyIk+;oGPl-U6r7X(M&?PS;3UtCVAIhwEKkkhdYE~r0N(a_i6(Ge&)SfD
z3PQ7zcgtj5xg%5T0!95TJeOyZN0nIB@jR+BN9nRsM#}e+b3FZQ$7JF;c`kKK%)u&k
zNWMh*K0Uu$8E|HPwX4)Bu|<#%6<iqnK73W?ntVCH=?)bQvQNc*YZCY6Te+YSeEh1v
zN9m);66OXU%`|e5E45wn<qIB3+&j9#Ho-wT&sf^B82?D2*2j8!y_}h1G3JrN`aY}M
z#1G>LkxO#7)vdr;%7d3u&qO#%yo<=FI$~*pv|B_!H0HCKv#7*}2d>!9i@|gJ<cVwG
zci1=9d*c2?A#GcoiX19+uQu!TeI4lLcjREZ#WvrZ!}$c*4=wCh;Py5HUL$>zxmk=J
zbw`eh+Vxb^=Tsf({M(W%J)MhE>ifXPxu<RWSu%fb(r%OPhxC6+&<IN|`}Y~A*k|M%
zHHp<q_H9AmFf!1uRLFW6c}G8+b8_+B(7zVpfhYPG<9sdaDSQsB&8;OSKC-E!o1wiO
zx{9vk+jO6$4XIo5yMrrs-tc6<lk0bxzewsEIUB`f%+|~3Z}wOwoXu#F2bFmje{I7R
zY6I|@ZG8*=K#p>Fa`pHavAI~AR9O7E(ykjg3O<5otW)qSs~_L)js;7E-=|?`f4l4w
zV1SPfcv~%+Jy*2nJ28%8yFP4wvsco#)cFp5#P7CV&Oq^~Sz)UJyEV9Q+kE<Wd~CMt
zMM%+tFV1hl-?3fBD}wXbo9sMHAFs(KmmPj~^w-0Sa){w`VdtFGS7T}9x6364Y;xa)
zjQt{Loi$ft_%fByY2z4vKD!R^BA$isg!)zv&r96NefzLK@%~DO#PzLLj4O_RY{;0`
zXTyV7fH<)>tUID6<M`;Ed3{Im>q+0_k~6pB_;e)B!E!Ob*i`KDtbr`>Kz_r=qC;Y1
z1y`ibAp1v$(5>C%W5j1Wdp7<2h?s^5zPbMdmOteztE0pU$Iru`)>&@*)dVk0gZVjw
zI>FsIbssrT<|*Zqr+s;Dw~sDp@_vlDvD;1Ilv%1~s|(SUFHFuykx?E#g8naY$x?T+
zY;pfa>XCkKEK{>jr=LXzKB{x^7xVj07rEfhQQIWG=XdasZsNf8v(>ik*m*g}VKl-X
z$V$o|!LLZ1I=OP?9HZ0in1Nw@bdR&|Bly>`>SN%FT2r4uPKDy<W7}J!*|8p_bsGC1
z=?iNPx4@inT$qAiQL6zgk}wp!mU3hGDAk$7Yk-UKsmPmOv){Lpa(s7srGxf4Lr>ZV
zJ`vy|@R4yU^ri^<mDD3+1=dl;p5Uh|`R*NmRE_$h9&EyO*uLDKLw3HSM}yFsl#6G%
zyyNX%$Qmm(H|!yqJ#?Y;k8;3XwdyuqKwG|v^RQi4zBubAxo@A$eBMBxM_iI~t-$0g
zz~i#NkY~ZmYD26nLRy|P3Ou5vMb4-;%}IO7`BMK`ALUH5HYK(iVxFX3X(txXtd%nM
zxR|r4;FtaGc31eu-Hr`I2N)mnS;jVa2)z^Bi*r_|l#hVp&Cr1-Mc?rN<I^+kclZ~Q
z<4Bby_mc0`1Dq*DOpE=^^Z2|kJH<Eq8IjwU<MR$cs}0cV6~t;TfKD69nP}Ml$b`%X
zV^{wvu%zG2YuQigqXL&6&Nuw<1_R$lsqYwTj1Qr;#|wicN10Q3m*DyHIrSHy&vKR?
zF$ly2w~G8=EV3Wmg4W`1_<>Vt+kE8E=`uGd_{9TX2#xsWMvb$K=m$P7;2!7PrqcMO
zwZzU=m#5&U=uaBo+`wmFg%J*JFuel9a+T5cWo!z``Ay*xFc+8#+>Z$Trg7}$%Y^^W
zw(;oYEPEgO#P5cfADO4aFFQ6!-7-%yN4<X<TP*P^g8xEy>Anc=yTP9^=*Q&!M7$kh
zZHM04<_;!t_fPq1_AzKjVvB@sBt}u%E{4YB+50!J&ID%HyiSZExTd&kBjCwFft}X2
z3D{}S{_y!G{&;;<!#*?yEsXJ<w4L~=7TwNW@IQ#&7q4*GI72K8^%wOE3<am%3cBYE
z+&>kn>cPw@#N}zB8;K#9QZ(P*->9a|C;vF#FlTk_<CnRrJ+Fs6D|N5#m3)+c8CxuC
z{PY}_erB%C<5a_iA$8W=sQQdSdr92a;NjxOHn?Uo7xj#_6`9OFtAxZ_NF2dF;sN(F
z-eK@4E_{Ig28k!LX^`h>8Z3tfKb8L87+YL6f&PLc6X=gR+<V5Vr_<-My!p`!;VClK
z^f<5N`NVnqBz|)YezQ;F!kE9~PyH=_ya@g%?`%9x;rb!yT5w(B>4nc8fo_D?+I$v#
z`Pcgv98Keq@M07Hx5Q@)PRUw9=3pyr9s?dPa96-ec&W%#6F6DqB@ms#<UAyi5rUVC
ze>1jS+L88zr=QveYusw7|NGRZ-Gcpvau*r+anPT7I74)ZcaJ~3;W5GUN9b#@$OPJa
zU+|mxmwvi`J4Qc?M<qwS^szey7kQtS85T4qyu+Q68)=!*FJ+mJqr{GVc*9)u*fO8_
z!dNwXRHh!Mog09c(9#m=Um-R_t9PR|(78uq1^e&^2yO_RgeC;{g+>Mc)j>Vl&Nm7e
zJjdPUrzx2m**iA7Ud}#E^V11(LH5Zc=|8FSZGfLvzcx1eVd{`R|083Pete1Yrkv|r
zH4i>Y992p;k^2}i5q{qNy_kq$Vj?OSi?QAj7Q4wjY~D8!6Y)ecCZfM76%(No{~&P@
zl7G#Q{1n@OPF#XcEChCOmxuKwcJJNd=W2mp+-iDuPr?>v_YK)F48NHe6VWjq6ESH#
zCc<!=iCf9@VsLJHH~yEU*c_H(d+4UUrPv*ku@RH{ALlG>@t?|C&`??Edff}9FXjKt
zxf%0SqMdbNJL|%B)`jh?3w2^Anv`SIq+d;}n_Lk`_;unL?nkEIqM;XKXS@a7SM2E%
z;Ww{-W~dXsF_ZV}(CPdxHTxD~7uW|$9u8yFgI%DGcavjwUb=#ZsPC;T?4nLp?V_%w
z^=F5^88N;1rK-y{;u%<5>lymh#s+*x&(udRBc369u|Ikcm`iMftiKNC{ct>g*(J)g
z`-*AG%bq#>Ak)GJj0|ENvh4i&-TZfI`qkJ(^POkpG|0ZsjAyjyy!;<-)EDbfo&0{{
z)5%aeehPo>4)$oWc92|OR~tOLg=Yr#ImrchVC|1K-m5Z058@Ne#D^p?JTGAb`aZn;
zkdftUrR-+<@C5zY#eBTLytINdyO<M+lbB1{t_c0)-Gjiln{x7g9_8jzW-B~jC*I={
z%02OBGTvhn^BiQ3P0E;j2R&VFQuYq!^?^KP<KlOL{SJHVnJ)HdM=xFbeY>CcExUPO
zuS0!a;qN>6m$BK8^UWvGfZ&U){WIoQhGbp4h4vk+#SHM+v0+}HjH}gQ;D>SSZUukw
zN7;LiyYPt_RmpXBdYvq5?z4oSGOzO6VOE8L;6#M}i$6sAFTRj;d7J)NzogeJvR1Kq
zrqC+%AnTXItS4ptBJ0=@)+(|d+MHu1R^byFnk4oHp&8LxSij_$(VteJ-?4uCt=}Em
zRG_w*lq*M04l=JF%DSC0)xdrDde2ccIa$ua9t$s=-ORfd?0^=2|3N!uf-|3-*WNX>
z4jln|oQVw<9`8%n8N`+&?TF1nBR{{yRZ1Jlb(Tu}F|ev;8uDxn_MTSSFxxX0t!Z~G
z5?lY8^OSAxUt^RNtbxxN<Pu*^yBpZ!c4TtVczi{~r);^hQlGMW8nG0Hn!?@yRVy(S
zrSzu+AHwPQ2IkuF6;nrp#PFr#D|#oyS44dHih)av{%XuguTP8i?o9evdUtBkgUp+S
z{@+YrcVb6~Ew^e!uL;5rOkzglx5SK?*dxnd(pJ1goDTDupN0wFu9p8+rdmBfU6OMi
zyV=6W?BB)xGDlBfw~ZuD#BRv^Cv{zP50L@P`N(A_>&Jum*-zDv$Ms@+J*yJmrHy9#
z9>cznoVOBtFTB*BjCU!q`>yCa<yPz9p~SjKj;T6_-nNS|`klI~i7_VdU(_;Z62ozN
z9ywmKG*>M#AM)&9c_wo#^p~ck^jwQv5g)`G$b9kn3N4LwWxkT;?L*iqHE?+7*UFAD
zYPnc#JG`j0@4k0A2d+yGzkfqn-?`^KwD7eHzO(Sd)-(DRUiE|9ms}COJ<&FuwLp1a
zy=HpjGg+@9&o0SlPkVN~cOUC?^1<{Ugy+3sWa9U9aK3ehcmMhD`IL;4GjT?V*FD7f
z2xk|YUUHEHx|PZ~>(-9Kt=X~b@x}6glIuUT0+-yM;B0w`$;vHOUVO2x7H2F#j9$*V
zTe}PK&j$9Z43}ROxIE4d{%5!*IfI2~7uS0)yS1~>do^dkb4k5Y&t}bV<vwz;_n_jO
z2kPMr@0=(2ww2#*=kxq8a7q3X_$zlUz&=`+-`QDs>#bdd_i7ogb<Xa>h*GXgD2pFC
zr`6e2xP{*{2Ac+CAGdaEuu$5`;9Ll)ml!54hpSG@8STZdIG_GjF;3#_auy-OkOhH*
zlzaEW2Cq|dxZb%e;9W{zj_$q6OMN+SJ-UFq5$I&xD|2GkpQfJ{a2OeUQ|Nj}a|E1P
zmObuw?tZB7An<a0<^IAC{?N!bS-?(rRoJj{<_Jt)(eeW(|A+M{jLUF+o<uEOz%WlQ
z4m`-WpT8$uSfLlVva;_lB>veo+-mFIuF)UhKcZ}&u7J@?eCx>hGVl=i<lVEr(5p=X
zR(V|6u5RG-0A=1}evge_;q_`p&hdj+dS_+7L|--6kX9P_l~xuIxcy4g0s^li=or7c
z`(FxwK_3pxRK)Lc=81B;E;UYPp7R6v;{(L{@!JuY1?(jE!Ha9}E1Y%5zb#y2<OXK_
zY3uDT@l2k}Ge2X`GV%gzj4b<IpPCvFTsX))EN|afSVdj)H79+I1^%d&fNRO`1ZILm
zUY<#vtvnYTJAo^Dz<c)tz$V+Z3>XTI{8HsIuH1l2aE`Vu;Bq$KwrRO+UUs?M&Yc3U
zfb;JAftR$|&E4htfhrE{*Kz`vfm>}_Mxc{&9+m6L03L$VZFh$X1$X?EeGvS;uP@8{
zK(EtV4~~TvsOWxUn(r9-4mda1_mNR1`^`9m<#eCG^{A2OdmlUGhsI>zapN@d+vfXv
zw4%{CJmo#|ki0{_rnkuva@ff9y-Pj^;Z+B)!Mx3!?RS0A``+AZy@#&7&ilb`@<cUV
z?>%zc4c<iSjo#yJU-J6&LhybXAyr0BfPNDT>_ZOc_*EXyvwdFXhr26q_csb3*!bwe
zT&*bZ<&huXemUpZ$n)3rGRm<y0`F%!W4^16d~n&w*>vl@h4Yvn@HJ;x={|w;I=<fu
z&fdcJGr@D2SAjEl;OgexQl3M<u3L>_dw!SlezS9sGe=`N+;h-}d|U7SW?_)BS7~_x
z%Pyab56<CwkpFGs<8!{?JBK;fD9`U4w^F_b?|zUundE9t;<(FWWHW~@mrI)xxSzV(
zz}sciCAj+zcr=eWJV%}8YIg4Qd8nhsxibeo?vpuuc}9`f!?(Zud@=XaT)$#2cmJD;
zz5~vG&v|d*A?8iykh8<dRh7xS6)`6=cV+fmiVa2f*&SeR4>RX`wbSf*JZj`Jui4DK
z3p~hSo+tT47VO7<cA(V}KC~HKdBhPO{lVP6O}DmtfA%@k`^r+&`-0i-Jus6PzXk2y
z)4pVSXJ6g!t@$U@`^HA2?^0tjG*$%NOyZsyIFq^TQ>O*~sFwtUCKjyiEEGEQ*?iVv
z(*osO-_@owH<_-R^=W*U<$6(-2L3~v6ewe^+8A$|_Jn4I_FhucZQ5&<J2Y`f&w~cD
zTu#3E%D<L+g(i-HvmMYLGSM|RTllmd2pZFwyKI-x68RKeU+yjQegs_J1kV$|Pv+|)
zCd$lC(p;~e$-FsT0s6<f(e(_x<Z(j_2n`Co$^3cHzaMXZyzmX?L+H*=xwUVRqk;O_
z3&7mu+4Jx&bR_V9kNJ9s`FfjqYKNx_O&wt#I3pVxEMwkseMg}wiLn^QUiikwxqY(t
z2%m#3Cy_0#;m?>+k()M;J;#g&G%YOrec$=SVkzYnc`3YVms9ipJdfOc$jgJsPvil4
zageX9-C0|`w-0-I?+dc`<_7F^H)5yz5_Y;J$mXU#Wc+XJnD$?vvVNn#=m6{wc+vL%
z*yXB3uPvpHGU_;kI+F5T^oKDc>lN`uNj{K|*GyqQeMXqR%la@`Kl0wzA%2w9A@mud
zLrm?nu;;&j!!+tUo%%}XQ)yqb)ASCP+A$tJi2-V<srL>)ZFt|p&)AaZ_YObo@Tw|w
zigP5FzV3T{u8I<u>a&0k=hpVi-fQ<{?ET6ejspkyDt0<-AHe4wcvoI({lR{Ja&9}(
zKNRigzI)ZAfOS?^;fn0RS!&uY_z#-xQn^nGd>)xfE;(1m&ZdDwD#tfN&j1f|bL3ez
zxE8NoS2%+h0_FU9;BA$Yqptfo{C+a?pW_qUS_W?yx#!d}a<cC;2aw^s&vspo4)ETL
zj#-<|y0_3j?FHxuJ!0t#fl2J~^HV;%TKJgL<psCr!}lN5a&mH2R*v_dV#wlLczKpj
zzIl^atO{Z$UN;=zTjr>T{MNSq#Q(pp40z81Hpk9yAa=;`z1?~Ryqmp3w=D4P<NFV;
zZ1j%M&%Z3X(t7|q&HHUvdC5Z%eP^zuUQ$KxQ$}RLN46Z$eBb4awV?$M6?*3VI<T(c
z@xp^;e-3zNT^Tqy=|*I*GiN3=s-1m*p=a7l{O3Hjr7s2U(WfJ;GhGLv<@>y*cL{pj
z;|98fUxg3w+^6N(?=OX~HY5KzgDU4ULetfqg{{!wi)y;B^}3zVH~gbvqfOV%XCwQj
z?GC(H_9xolKIw*l4?5Kv*VDJ(1UBlWF3+s10%!7#h75wg=DY~qO5U`!=x)-VnI#v)
zZ*yGBMV3HIORKvI1DeX|cJ2xUv@&1!b-Um>Ij(Q4s24rUbr1dWoc#dp{vy!NbI;OW
z1j@8B*9?C5U;fR)z!|>`3|+B~_J1A-<Sqa%mj$+J#V+Yrv*x4^*~mls#rbw?l*1=&
zuQ8-A8QiD)X26$%)yRHy#h0$QuTWk0e873hi{MVF%jvz8yXNWzS3Ka#MquRuSJoIt
z&P9xC@bZ5t^pyQ7@L;_PdnPpo{tCa-faTlpA<-GWqGi*Uj2vHPop-C|3VZ-B+{*i{
z^#5_@<NM%`F8GGN!`ja0zb+Oy4lg68pz9d?>_el#_ZRrvJFHv%)OQrVC%VL8<W2%U
zcLW~TgWTyLXY$ZxX7m7dMd6Rbr6&7NG~bKxC0+O$v>ivb5X0ruoXRWtgKWN5X-0*{
zMeYtiWO(&Sn)hw+b@<_VUY)*ek>}99(7c|fdxznP`{$Zb!TVu&!A<Dh`{4z8k>P!l
zGOt75VwZ~JZ^bV1p6vA-g+B!0ZNM=seBv1PwZn_9g{NHy5Beu~(Dm@38&2@WAN?&~
z{CLe5$wiT6`!`PT#i`VBG9OE>tCDdK!;{sv&E&qF#`$cgtJs{o{yR2D{;&CS^1e2n
zyx+YqHlAO$+BIv*?CZ>}()YUZXyf^->N(bqyx=+RufEFlA(zCVELyj{apAh3HvazH
zsY^aMclwfYqj1UZOJ^-P%=bNd!IFiXxBAnPSxf$KUh$G6JZra~J=gdLo;`Q&l<{&;
z-S@M`zw%7#NtfGm-_wm!m(*+5S5UCzFFZS`KA!Da_w>p2@$4zeom8Kc`^5U5Ik~<H
zsqdMS>*Lu|_dRoReNv8RC-skKf8p6l{j=+PcD%mr_dVPADpz_u(#H?^|Ju4|8|`ry
z6fb#SU{^3@$p_qb6ii+6A@{un)0a$J_n(t%*X?NZ93ERdEl)9*C*n{x<tsbRLgrQ0
z(03n7&T087bL-o6+E>=TnVR!=llQxhB=4(_Chx0`C+}ZZgEnq_&5^v{=}g}5n3TM)
z%uC*HFG}85OiSMXxh#3V#htw0Ts1gHaA!uIxiwzCqw&|}&ow^bbbqy*tJ0aorQUT<
zH2%xFEsd=_^K-@KYD?Z(q%FC3)~qE<xwNuK<4u;nWT<}flGCo5yu@0!xpAJAv1Bgq
zK3mq?xY=?ndAnXMIp-?1q<-C|#!Wnro$<rQPRm#luh*9R`f6>-54)p{Qs1d{1-l0t
zr46Y^>P*+u-2I=8QoqzA^{4A;?Ea};ztki3r~4G?-fq_~^+;dS^>lP^v+I|7r2ce0
zU+w;hUBA>L^{4AGyPvY_mwKfB*6!~$rt9kM{&Azf`@4-&SGt~m>3*_N>PUYt-@RRL
z01IQuF3OG6>x^GtG6u|ETlb^JUU25^y85q_uTopnaWyeRVr!o3<E)SI*l$Jr)_z0p
zmsl_Kmc`|q1w2SRiR57udvzD_tg^T005LqHF>(<SyF-lm?hfAJZ*g^COHJ4RI<`Z0
zJ6$btUib5RFrR%!=IP<e>#U>c`qFh-=yB<~BxZ|!D%;?-#K~&?9oXH1CiWio-faF2
zXOpn^Mq*|^sm-+g=HoR3<MB5VZzKDXkFCt;!*@%ZRdC@VY)bpTuA&>bW4BNAaG@th
z57rUGk*l`dfbO_vw?C0+bKoO(^#2q8YqQ8r#NM|L>DN*0bivKQ0>4g|i~JqvyXfYl
znlgw{ChsTu9{+cDq61p^kb2q`cC7pN1c6tjQoAL`iJWJPJP6&je#2wK#CvSeOLn^{
z8`JT*sge+}Jqf!WVjHBM7V;o;Jj~efl?H)V5SbED#9MtG8y<UPg0v~mq(9S)lF-CH
z1&N1iQiY@9!@Pd|!*+YpRuFl*QZE^m_JX3PrrM6vwuP+Pu9t*fVm@T=SE6lRpY%t*
z0cN8?@IvBu6!4T-qGKyBA(rPQTW6Ot>2IX0>@AXh_UP(8hts^v<o^)yE^fYc19zz-
z9s4=49;rj#N!y?FUi$NA`j?KEB>wBYditdkTj#+h+euuM*wlxaue)E9a>?IU?d8m8
z>XrXO2V;iz%Iij^?-J(u3GAsKuhCgY$eGUuw)Cw2?}8@>Sj%K$N6(;cd|246b=Dk?
z{>(D`zSQ3V?Dj7LPg!e`-?V>FX(84GeLa%XywdE`&R}nd&<e1XxQk}ut+3xF_w<85
z6|}*6YgDHV4`cXvjh`{kMc!++ygxwQ`>Fe%$g}@0V@}I|1un?=WeqfmoH2EBmO3(^
z{CHMhE;(EzuT%3CW}>|)I7jjcN#4B{l^bfF$KFgeIn+K+McZrC$30urmF<i1aXqP`
ze}!kaf9L)=?T_C-#}gzU4e_dqTt0PcU0bKe%hygnOWi&FMy?0d-Qu^Gy#w-n&VP09
zaZMsGi^`!5SIDjOSIQk77hwmt_xWo|4`VO3{Y+9`&e)Q($t>jzHLL7UntmsKbMuC4
zy}A|L6G3P86H7XbuidI<&w7wOCk{R2VDF@jW7yfH&a4}yzN}Ck?bZqIrJg$^UyO1j
z+c@Q&{%83{A8-HEZ#B+nX=Xkr_Agy`%dKWuac+=5QW=J3LXuapeHv>`ht9r=Wc$|h
z<fU;-E|nzCdE|^2_X{N+Z0i217x9zm4eeJD^X8c36?~i+^C<Cl+J6xTXvf#l7Vv7p
z*I)(AsDpl0Q>UUH_rB_=HT=1#B6myki`YduU)Fk?I?4GnGF2ryINR@K&UTY`8NgzM
zSdA9)4cx~$GV;zMN5gnLUL3y$=TnN0W)}Bh@NInT*vKz(fMe{*{8zbyYw7(1LKDJo
zg=X(^sM~~J9!3A|C3mjGIJSPkzKB_abL9V;Nsh*g&l;SQ$vW?~b<sw~kpJwupEZiS
zh?SE2{<7y9$LgN`>e%;oe09jU`QO2@Z4q*x4syv_q>45id<zVTm(ki{)8V`B!IE~R
z+qqz6-|3w@C5Dh##@E2{SJ_`Q1v<DLyeH3D`$xcLD!BAV<jZMl_MP`#>$U!>qF-x~
z{Ail1ncP9xI=1cn+KmbL$hMZ3@fosb89vFmEa>(Iv0~6(`u8B^<iDJ?yZ38l2`whE
z&%b|6%5}mUhAOd1@ZRG6P-XIac`nall$Z9vsrMYy%#UJuoF(&DGkWLCoaqM4G<Ren
zdE?q<aZW&ce@ShJ?#?eaw6<)wT0Di^V6T#cvlV<GexiDaee`#HL5tq(pPRUovo0cx
zzs_m2wQ?3xq_aL@qASiLrgy(FwST963Fn^|`9u!SQ<2;CSH>Py`1d;Oc*^2_k18Ra
zGC$l{r#4u`uZ%wro*uS{*P74s2z$MocV0?dRr$GoC3)b_4l|CndVa_83t9Bns$gBX
z-W$F%Q}s3TT-FlW{i;vOc+`bqjac1HJN=3J8%;Sw%RWz|4&4JDx44dcjUM1(mkmx0
z@2Ef)@?Gz9dcq$e$DGs=tf4*)y`ZrFS^Q;kKZpG}f`@6jk=(!hg3a%ne?=@3@0#Bo
zn{9pf`r2}0QYAj69XuBr?Yv7XXr|wqdU9bCxYcol{Gq^C{ESmLb1}}o`8z90;Kx(Z
zQKpbrL10+iFL3=aItsdz9n;-AHn!elP6>B%_eXNV#og*?Gcns8@?5!W7&Oy<J?9=b
zAGkCsV_rtg8Q(p*iJT`M_jzGIu$Hm?g1)73?eF28`6*)-ToYXMsK_4qJ~9RU0h&^#
z8IBaF#KqL_=G!51)y(4euw8yCKHA8h5!SZi_pra~Bz}fmK4PO)YF>DRb+C*(!ni&O
zr@jI_f^Ut@{v&nTV`M&K#J0&i$H?0#V^-{q8y|DT6ZYp7+hcx^Z#4MXWbSkCCx<X|
zEjZ>;737lOOiFcT*rPfh6I`(IAa-837yM|paUwIU<*CG)Q@;(CroJsd`P;}jfAj6F
zr+yoomi(6U!B1*8c=m~JpET@tzr?rWV+vjz_M6k~F<pDob0h4J<l4`#PCj36&wKEK
zFn$&LdBeo=Dxc^1_H&8B5?s`|pDHiJmo2=}dKEk;ws4!Kwrk9-&;|O%!aR8T5Vl9+
z9IA!Sn8Yp!ok;G>@p$Z<`F&QSndkx!fcb9gi!$F@sQGsLKmPk<&MuSqt9s&7-liYI
z6UcWI-7<&Vp4doEt+PDkU;TK^GvoSs+V74o^rXb;EA$PCqjQ6!&BW<TuA+3TKK=OA
zSbb|ktiD~>C&cQ1yykhE{wKbdn0;xB@z`<k=`v%xBtL6Dap4Yf8x^7VvvwHIgHeFZ
zr4XICxGw<@IJR<1(oelEX=9F8VB=v7c6r7WM|ZS;OPn~ipD(PNdo(^wnFd9CvJt+H
zdZ&%>?lY-!j(Le=#CpZAO#PSm@kPiD^u##uu=`64s+-twlleW&vm*^BVvL5EXPF;`
zjxS|`%(I*LA(I$3&dG}o8FTxjj#!bJZ9%`Z6OGlY*{#qt__1f-XNYwrcF2O}!5d;j
zOZ!KVUoVsAi+x2tMa*~n=c(_iRP|UPF`LvewuY-c-#gZx+gAvlUBE@Y<~?JyNrX#c
zY%HU1Y%G)fA<414Kdgt3Z<4%M#r?yT%AN-|@y;Fe`N$?CJd9mV6Wrw8VWX^{_{n~O
zH)}9>uEc;R$7nH!GR9#;Y=u%r$`<w?=KEl3+&waGd;i0Uw%8AvjPd@pirxtvw%5Xk
z+lbrbyN)7w_|LHyN?!_*t>BlyM&KdiBi7oci}*RB*FztM5e^`81U|&sMVp8tK2AL0
z@!cwl&QRUl<tJ85tr+H+m;EV2^tngZmj_vA4FgMg_df4Nh;<#tK1vRM_Rt#P{UPj`
zl}6aD)xDam8`$q=F70+y)cjl${%P8hd;Hh-`)cXC)Z6?cGg`#CJ0jy?3qChEBW+r3
zA_vLgLw}Vj^g-WTI{pm$EAfu>(fWZRSF?IA=rZq$(N~G_jsH<2HjkVwKT^@Vh)J{i
zQ;;klJV#ZF9I=oYg0EI<h8?p@opvr#``scfYE>rVzwLNM<|SPYnLw<%@*RfnSeGVo
zcI~Cfx@J@FoqomMkYt^1ANr28QITc0;hv?cC4M`X_;7M^`tIm7!o}=0kuriSD|O%q
z-V446E!>%t#))K%b+FxhxL)`WYrv6pC$Gr{n`BLPHEXhk(EcK9wu_<vYgqSUliihJ
zuhFEP_gSAuz-ybn$lo)xD7ns!Jca%VPRsN3nA7EgN5^KPxH0Y`-%j|bO-~bO>1>`o
z%vyG3*CcN{XY^qkSUhxP5-)psE-+<p)WYT)fK3}X`w;U9-Ne@rM>gTTb#3ZBcoBbt
zJtcwz#AFY-7W7>~8*%CcF4Y$Gr0cX6CBG57%$;4*f994pk}y3%OV&@4bR)Pkgnnx^
z+4}702sm>p-3fh(9E{uLgx6E&Pn5lP%AU{4<b1~7vEy8yOvkxeyTF@~<hwKstyEd-
z?XlS#hyfHBuApw{D>1}Aq`NjU#`5`n$Dz^sGPO<Cv+$z?F+qtj>^)_3)wbq3WE;<g
z$KWIFcOz%w*iw$ev!J1b;N3@u$(P=0gv-&<-#-S7q1E`GxQm_t%E|0;E9w^-Cx3!X
z+ZOXY(zV1Z@xASw|LZ0X=)SMBSH-EeoA?$YUr@6-|6sJE5}G0|S7MzdPoKad4nI9J
zM{T>)ATE!7Nnd7Pq_*8fUxZg4r%ikx{j%rnBjnNn#v=Z*P1wz3FU<9ZJ{lpH(NbvW
zquUhxq^N(0af$p7(y!s$*l)w$njm{-hG_dRb+*t}9b>~bk$6=v4jq8MdGa24YzP=M
zBU?PGIMj^1YEs3c7IW&MpUoRpRI#VQYE9w`eeqd5ivv%1#^@k=o(&)RmmZ_|MGr79
z9{_uV!PFtfGP06yXiwr)N3JA({(Ob~sqR($%?aca?}a}(LhuygmknPm1-o9!t@;VD
zYj1b<o%zAo_7cG>-ZwKg9oWj;o75}5T5C3WJ$biRfq&T6ScfKIO<!-UPrj4BO8e5^
zuM56XJ`JlhjDqAKw1AHSJ{Is{jcCKi#%W;D&i{`j_B{oYATfX=l_%t^$X1alGKYU5
zN2u_4#rT9aWey~tX(#)k1P>1607uF_a{+DAFTrE!+g0>UXtR_%{A>L<y%3{l4JYYE
zXfVwug-1^M!`R}<;7q#woeL>jk>tsC*%Xhp=`qb;e@_lJ+7P}f{MC+q2glSr=7)3k
zevD5`VDUaUGZ7xWj5!U5=lI^%3BYk%CxAYL4!_OwXHHYw1#W^zGKb*zLeU+B9>y+Y
z>}$A#1EOQt{bJ1VCgC6ObofsTaxq3s=|ui>IdmZ75j#m7o+Nt45#+jjBYa5Y<CYv`
z+j(m7NAM1b)ff3LG=Cf(0$;UlB_HwKzBcFyIucq<jO3vEmG+CCCN>N=IM!-7c3;oE
z9lKBK`ru=nITCsw-C|#x*qBR4_s=!LBGWzai39KwKQ_jF@R853cSQ673mH!?7GDq@
zNMyLeE+K8ow-MHbLbn~NXg4t+yWL9fw^)Y>F3Dar(b@I`t7dR$Km6TH>uBgW`&KUK
zI|6O}0T>H>ThP}h!qwK>QgBV{ZMLqKg2f}`OcfXk>;#5mp8!8=7P-?Hm+Wztu?U^X
z-pzPYZ?bhkX>($|?NTrFFMBtI{^x?b>3zZXr1}aCM(-jANORW$?=br>WWMyg`n$Sh
zUTNn7^bmBdwoQ^-sw%i}aeHLrBYsEtVenUQWTjDP#~RCgo6nBTHrwz1t?({oUJ%0m
z6Vk5I*yEfTPSb(K9uX-kI4ENlo+<yWr^jYr??zuHPj?)+h;Ai#5<~6?%+L*OnA&<U
zdhUG2R`{9Vp5lt&9>F2uMPjR#Zv@Ad@%sZCf6!M)0@#@|d>?_2QqPgY8R+NWD`WqH
zz=(0!umtw$Z={Trmv8O<f&b<yvUgWn_VS&Sk-F{taNvw((@j$Den?+5U?*)9ukGC!
z8O{s~92Uwtj%RLi^2yq;4%jR7DJ|AfV!@NkC1)Ns8tXO{{Wt1pXH6f$J|=R_&Hh2F
z4){U0l-bszJ9f9boP96og`8DDZV{CcO3$|joy0GMkHF(B`YAHk?NZwWW@8~06<T~B
zSg?2A<^$vS`Vh8ic#gCeL?@DZ;cf4UtdMrGeeRBf*Y@5c>WN_souX)8>Yt>xNxdJT
zYme70{DnFtNA?B06CNb(#~GW*VCH!bFx->oWg*JRe8@Z;g9c>|Wj=(5%ltgVcOt`O
zKacRdV%iiu7d_$tvP9~%b-i}IFPpk-_z^#2!;c(j;(L0QI;1c7h<s^&D7<hS2CjTB
zHm|9XiVS<s_Ft5ovmpByR!%Mi#|uNsWFG<fHf7Ef^kN}zKQCiK9}yS`oYOF1|5M_m
z`r)<2pikWdO+|*;`#LuEu4lbF+=8AVI3jxsifWT>#-Rm?i67@7%-Q&wZvyWY8VGWB
z%s$%cp}f%AL>d~pGW8vFB4zKS>?g@_nd2a~S<$O3WC(j`sOyyZ6ux$CzV{BsATS?F
z!8|>eW59kY?_{2e(Vx=uBXhF_+B0SUHt}al@RDbeXW}?>@!#}GzPaWd@>+wpGN<xh
z&J-U;PCoWW^y?Il2*#5<!sdSy##ToioxdBKEpkW3pXMED8FW7H#YZdq#e{aDx0CGc
z&BX3YP79@i-?GpR+Og@iv-hF>dh`x#$L*aR7q$OY+v>6O@Oi;0M=RET*6U~f>w;5{
zlK*(1PL&_6BM%gNm{y1nXE9^l@Y72Z?S9c4us<=kLD_@Oe$#i+A;q2}&&0>8^m6=W
z`YZ4Uv5VOI==Enid6)E^8M`|7IG%lEkHA~}Xy+*-R4wxG28S(MKWxol{gl~v0e+Wb
zE3^8rfvlf4;<xp*VeBPBXZT&$*Is*R0vZnA$nVG7u!9&Xfq!=Wn)Bx+uI2vW@_C6b
za)0%{%b-tHWExEaG1f3mM)`o8PZ5_r?C|gy_xi3SM+d<dv+GMo6@EL(e<J**scZVt
z>s$5kO7_Y(v1d?tiP^^53ES2+bEn(&h%JSBXJ6AL^`b}f-#-6>yOcGLqf3JiCiLy*
zSrd9%QyXU*gD-LxgmrzAKPTnPJbR8T_T;;1-+tD8S;C@y`EQqh`IPd^r`3{NKaQ8L
zNbZLf8R|~b`0Vst$R1S<oj08;*kkVrN%|DuzhNHh*Gqu^rL12s!^f!G>sL4D8Pu7Y
z_$ARH=h-sj)9UM;;G;aXzN`2?kNFUOEOiqj5EguyNK0Y^9KOYTD(ydFJ!kul#Ah_c
z37>KY7w**^D_;Fpuq23%IXL-?uJgg&a{P_6X#0Hf91S;_Ps#u9Bj?U1$KCL?$^S3q
ztHm8Y>|sh9h3_raeg^&g>=8Tn^&=B=Ur$F52M0`G-mc^O2mU+sLOb`hv>Ak!f+gIC
zjYQC29`3nVi}tX``Vl=NEOaMpu?H?x8)EE(`c4b>JpB6i^55jY*rJBGf)z&ij`Q)8
zVB_CJY-q<*lfrYL<KR=%!%bJj<~+{tzY_m5M%>ZGDZgX~K1+OL>w~&GY|F?8=OsF;
zf_v&dH#i6STUZ`@?4lqty5|D=^GA5j8+x?oZLYhtL=St;1*dyn)1$%3*s&^1yS;A@
z>(O$N-$gwo?%3JUy64Z1D)`F39nhZz-$R-2j6EvypWm|=F@GzE{fQv>X+bwJY&UkF
zflm@QE=io>QqS5n3mpp1VjuNMd7+aJ*>g%#j_QZeGoh97d?QI8%=5Ml_S^mp;5Eh0
zp&;!_-(u_yjiA#h+DrCf9{aea^m7J@-4A&ucD_g^v;i&dz<wijNSo<8NV>GR5FJJA
zJ^wAfAm|S}{Njf%u8*!{kLAPcmp@PLPt`}yJH}ZNynhhhcZB=-ob!A;_lfp&@n=d7
zWbGo+z122d%@;e~XbgJ#U8e*4QgGqm?Pj!&HGU;{8OynbxK7ouSyv6LnO)^P_XN92
z#E-O$_YZ?t=OJf^g-CSjO~k?!VwVC3^G@L6qOq~<+sUE2f%<oJk}rilbAvxLS+fKe
z(udiD`usk0vC%l|O5w>9bI`;JPSmsaVwDh`UuZ48zbfskRsWHU8}Yy+tbW<6u6)>9
zw`=Hu3Z2zdy&Em?LVpk&e3sf)j*pJ`gxv-{73Ji72E`q@C+(+g=JKu7v#*>zhga}D
zeQ92ACNiM0YT6kI>3tD!WhCV9yJJ0Z;^k)Il1X~#rYRYr$ammj<S4!a*tGL5azC<~
zIotqjR0=lxIm19`bwB486aga(m?(VT)(@4vhq^rFUuf>Utgq!#+dexAE-jXRN`Kwh
zb=vQ7+OZ_*KKJmvmwA=Gj`ITGrjS2^8!fcoqzuk8>v}B4|7KuiG2igheCD7n4!$YI
ztphW+Gh)N6xnD(}qO8DC==B)C(|wb>#A|fmhnpzVHTt2Mj<Do)DPL>!m6IpG{6F~3
zp5t<Na6C3szGobX3d-5C+^Mi@IKp+oJY;(QKwVI-X#-6`Vz<C+iE&XuBm6n`3g#i(
z>CYbF#d79_$ZmIP->4q#Ms_F9c@Ue=;YAsJ=UExyYIi1a@|k^KKu(j?+dk(Z(dI;M
zGp?1{eHXfApEPSY=3HcUd>8gA<hNb#Vq`b=iCWsIMYdmHvhJ4l#Gip)P{Z$OZSxZ6
zbN>)|VZRd}iP&Abt{rg0GcDsfTb{QY(`>mbv@WzQa@|VF`gU8^m)d+lc(S}(+jY&+
ziv*XtijP`di=nf!{>PEe3S3H`cW@&(w5H1u-VU9u<Pv&oH>Qkw(7g|12W!4Kc}Bvi
zxMBAb8?pGNPLi?gBR%!Jh(z0bWbEaAHvG|5#C{I!!!jo_4`TmuGbZ7ABFFEt^^0V#
zi6Pc0_Iq&NUWcAkPT-NWTPMq<)~UeF!e%rSs_(OmYmW-Ov>Q{8ws%b(*a{xneNXAL
zf&;okVp2|=?*Shj#|fEtIoCtRD0vhFcY>S?>fzpeCiq!BI0riUmbHZW$}ywuQ@~U3
zPOa}OY1ebTLObo}@(wvm+(lGquRVZ%`k4IA>1)R(Zu3(7z}gnhrvv_9L#N%wch$_@
z4jn#V^T?C=fQ)Ie@JPz<)r&_v!1GU=tFJ?=MbM{3okQ?cYr0Atxo6wPZ~Gl#k)bV<
z>01RhPWmVOuBC<kp=-6@liT+#)-{r6hjk9?-(nyAvDd%Fu}4boM8_uQR#f3b`!swQ
zEK1^oe0zA&CGcs^RBJ`wV*X=B)2r%y&hJav2c|+#|I7RYWgSO9R;JoUubgeu3G@@h
z4kxs?n)hP!5&9!e-o|_BXAr$Njc>oBuJ}E7|5lmjhc1A=u19zN`V_Hku;zvK;ybZ>
z3}@MGnc$V=!H_y_T1BQOph3Y)d;H|vT0{Ituq7kB#%?=FYj&ITPwI?gKNLHP^j+!`
z`+OR=rJQ+eZ1(TSb71LHLVZWa9+hVb+cCR__S_|P3g3WN*sz3ee2uYQNWa&>A6C;(
z8wTqxOWZ*pzD_%`PPN<R9MbkBDq4*0AJdb(Vy~X04U2xn@fRxYF+I61;M`H@2ED_6
zce?%VRq&`5J|Oh}Ay*STAof1_dpn^e)&NpINO^aPM)AQ$W1UjZ>9%bsNq@<F8$y$R
zTUPorbwb%B-P-kk1g*OKeK9>rt9$jSNB4G49rz{lXDzhX0JHC8?NE$vgbzL%L;lNn
z)AKC)heg@+{~P%IK6~=g{}-m-$-X_|Lz0KqhA})qa7l1TK~GX%>XI_}F>ReebaT<i
zr*amE4gZH^AC@M*T{{n-=tbDJIJW~{kdnP}Z~v@%?*Z&T?US{}L4S2<Ljkh#N%icJ
z<>%F`%p}LfWB3`M*`9ssN@WHY#=d2&j`^~}yFTj*zff^nxP?05F$>F;`Z(5@72X@j
znzNU(=-gY&*J@lkm%-)W%HYb}T3!>Jqui_+TC|U2-^y5R@_o$bBDc1>x}`|fkbmTA
z<n;=FQD;eq>L}TPO!uG{TK2i_Gs3Uxd11v_e6jm38jm%dsIT66kG_bx^@(1lVv>Wb
z(6{L>^II`+cY|K+5*$m9PxOR|I;8A>7rv^wlRBiT#&)KP+7xS(NWS`wQm5PaoVx>k
z75RYP(?Guqh$V|QU#z0UKe&WPP2#=99URzp2k%7p5*kRyY{-8#;lFJ!K-V}#+cK9+
zuX$wQylb}KUcNR5n7Oznapi86{^%YvQSKop>m2%4OKhsdJ1z*$sU&x*B5!tg4)ZaD
zUUd9sa{D?;yR~3}Wx9839T|Pv4E*$`t0;SHcGrCl9+|BY9qx|n9pn<x?#=KvbLNGX
zq52&6I{F;UQI$J#`%<%fpyIglYV@~)Ya;%j3(36Y>*Q)6??bpeR=%n{UcRahJB7?y
z26OfVd+f4S%nGx&H$0E;Gu8d$b#O*YSnN{6#P0U4YF%Y2{S}Y%`I14UHAp+;SYIXU
z#zE?8CC))7wzb`@-s=S?*|(VA<J4D3K2m)}URYz?OR2w$%T(Gc^1WgopGKb?@$wqu
z-SQf#tC_ky5&BGQo97}`P#4czA#zFduQ)NG>VJ%=@O=6H<2BLo_?Pthq7a?hA`dSy
z`YY~7r;H)5(6ggK{OUxDM%~j@_3u7Q8FFF-r>L6Pxn|;bpM~y-BY(h6o(||#;?*V2
z{SWvpeqVv^P+<;qaK^|n@DKmN>>+aW{!gRX=QfHPBIL9Hcl+uLY^TWIIBkngS7Vr~
z|IGb*&X9L!nXAiB6PY)yVc(;iXJROq^#2asT;0Q&)9~xXMH*7<;`-lq-lHv|zEI{f
z{#q6D*OsfywqEq1R@Q2aYjwx%XDljr6}7qD=3T?*_mq@pf&UwVCB*Q$M)2uL`}O4b
zIKcS2CO@;0Si5}BT2*SQ64w))WBJ|Xl{MtUcio|Lo&>R-Pm{Z&&XL(xfnNl=Zu7Ht
zlRVnQ3$`(*`OVc`B`uk1buT!y65Zq{dSR$tKYi5m(HO8w#<NST`HA(@&+T>TAm3KH
z@A>U6+PsOg99}2{{^TxJZpKCX2KiiK-=5d^1pZ{n>#__O$T<$X(1(D>Ha~pk7REdm
zyb}GIJTRe6{+S_i?~lh1U!qt)u$N*6G~nlc3HjJ(V28VeeC#t~a$bdD$5g+Vb7lxX
z+U^l#<sg0O4a^+)Ip<1PnJOyh_Soab)-ecv$h<-`R}Yq`sOP=0*)mp<=|h~Ayg}D?
z3$AqW%^-MD1x>r>TdTx=kFLJB%Yp9<xVy2@d6u=-)Dc4~&uO<`v(LWK+j_xoja(o%
zaqUR0WwYW<tDKRhfy_K}Afw2vbrQ>;MV@QPW6}Z*-<+ogZYol>b>u!d#5vs_Y&IJ6
z5p<ZV6~BWHwfb`UWK2@7tXs<#wNr1Lwe!e2na9kw1A-?!YnAg0y6-D#R*HSxn(G@f
zj&toiEVE-3$$8OaUcND}&(FL_|KWLyC9l*V^TIk}TT2dkOvn|Z(=UEYK9kkxeygE<
z)T!d#;EKJcx9$$L!pWL(1~@i^Jzx5}b9!>0pyckjhPJiSBz{)&5zsVsC-5|Br+$9&
z{G9_l6MaF0hW6c}qVMiw&&n;Fcb<CQx8FW1u`kY<iZU0(-0X&@5Bv=t^3H9}2zln;
zG|<ePFHe1c;NeN$;oDU7kJNkM;Vbyf-0^NAPD}d}>r0;hIi>#_(ze8Ws^SK0Ayb2s
z;5Ta-@Bb$A(gewgvmaZy%=5#%=WGgmbKn5HX$x~!$@6aJVhga7IjICTa=r|*v`t5r
zdBFt_In&R~Ggr?jGFQ)>X4cLkH~36oE@jW;yBWaSYpH=*oRgrjc5Q!GTk(D1ZBB#7
zp<kKENDujkB-XJ0EM$_>M!yU{G?nTT{z=Z~{wL|9*u_Pr$y)O$;}UzP)KO1g%}=T4
zfmA)|JxX$y`W~k~;cMwj;xL4E9n`gpac7*x{4@4;^4`d}56<i<$#P5Hsw`K=St`1V
zart@P$rzhb<58*c!0!^B_INm_*B*~<kH<Ye9<6`vDdTyb@rcjQO&wLK@qAJ}G9Ibt
z<nd_z%cw7TzI*}uSRB}B3h^)6>pFW+{7rgt-8%G8a!uC)u5D4~>YEoX@b<tHV(@Je
zQLT=^7oexmi_Vuy*5$lda`STZ0^ksbCb98|th{;<JV!T)b~}4F%DyfGJsdeb8Z04a
zD`%I055!5M>w_c2tS&yNG8**wj)Eh<$t-<wtx<aO!d&lO==A{){^J~YDE2UHMYYIN
z;;4&!p7b7>hfa>i>cC(B@tTG3?-S><N5JRrBg?=1Su<)l)GHC>XLE%a{T?~p&1Kdq
z3;E<IyR6o&X$9_OCb=Dyi*>84;cMe-9gEcG(Cx^7KQY%mcu3zJE;Y>v?OHo|5xh6#
zs9C(a*@s>hRQavwLLFuG4eaM?`#yURw3?#T?zK6Kq^%9Q(EyLVZI?0{hKM6o?kj6s
z8Sjy~_&KMG?UMLK^o8=Z7o&$IbHaB3qn^Ob8iA=3IJGNh+kAMLg)O4_t7a6uM9%`p
z(b-j*D!}Jpm($#u&sxrU^u}rQG1ptpclSeA^4&lBjo?KKvg8Ng0&*-ri@5}Ti7I5p
z3}i;T=4cxN=j5Hh){Pxikz=)`L`5ZjL+(M&soezLtm6!VgW$)RN)K@l`<AuT>;zYS
z3H}^(WQA_hRpP<G@*47R<V;>WsZ>qdv@y$>Wy?s$SIb<4jYv~XXP~7f`>Ljzu0U%I
zc?oi|<*X_0t&F`zRk%3E0UK-9XtS&*&<|PLEDkyyuFc?Yr*btQV_fZGr<>XHSi7dT
zp(8xjdgLDae6Lm?@IvNoW-Q3PRpdcxXacue{G1tB6@09|tf97Z4d*OQ(?V{}nWE33
zmgUx}Uht{DYOn<Py8?OC;3?`TX<6=G)jEBFcPIPW$s14-ckU`_T~6#I=e3BA&_o|z
z7hn0~lS^CIYNf5%M<N1ea4-g3HYv5bds@WK(HC24*7PiQ*Yv2&QIWf{FQHt^YI~i1
z5R%hpAGjoVWkE}u!7a%Hq@X9ktJbxdcHM&4O5n)34d~F|^%(^gID0D2^(ZweIOnFU
zv?)Ar9=}B|F@b+ipo+^aI>G3C%E|ijMf$ISo5BzF0<S~xe!(+jMM84USt;Bsau?Y+
zDP?WE1ouUr4`YX$pTbROk9B+!m(%6bWu+Xs<!qj?m_9vb@9kh63x7-D^(VF`{3TsS
zIlM*ua<h<e^36orIki10x0kwaYB`Pg{@_B{e^90Ld<QfwbE#~4RBa-!q%P_E{z}Cf
zEZP5Np+Ckf{L}*-HZ#Y<i}ths&rN*>XVb9Yacu*CdZ7^u8n?>S!exx{%b%6srb}@)
zlLZZmJy7(DW^{h=Y_t=)gQxTfPkfp_3ZHzN^Iqk@<Qk>^g6-TjHK}bWu`w?rdtZe2
z3caz9)|aL=5ASC%k45AS+XU^9U%Nr(XT!f6;AL*9@TYd>$eEf`f!Bel%C@@;ze&UF
z)Hyvc)$GegZoJGqNt;3=b?oJO30MhVR`3G(K7x)Ra$ay>)s!!afcI{jpD=D<q}anH
zWt!ndHv<>zT=HJ#t9%RixS?s*Uip+?{Yzx+j`zr^2V4Xe<Wh<D+wd@>D^u{1XYY-W
z(-R&kF)ryjlkueIEIpnyzQ{PzWB4`Sh(AMe5W`n~la2$hee&)|f#@IPFHIcARwnXQ
zc!$t}|G4$r=BMgK*DR9XmLGgj<hTHqCb-fv`Lezt&R=asMz!K=82RhicJvS*IJd{Y
zcG{wrr?gtTKbcv5hp_>t<-3%T`YJvi+ujWRNg0pC>7P<=%*bT#LQ?jB*jjAwU9kKA
zJo^fsCievULj-rz^1q#U(F)dpq9@26zC!Tf{Tqt#!v+^V0{=_2P3aT9kiPCR%-W;O
z&j@&)!Fq8Byx)P|5X9z_m1RaVSvR(*tWcHn#ggV_x73*6LlgVeg2cK$k<uBC(#{z8
z{{(tN25{1{z!AmyEu707C$7`D&8%rMjJA4kRp(uhwcrrvD!b7~I@ao?@e34mQP_5Q
z1#w`|=24qZOzmGpPTe(GD%_)&jt;Wc6aC=*8zffyi+yPr45LfP_|v}eL7!TD>}i4X
zLhQ5G;1ADC+GmO1INik@pN7nWjxS}thS4W1bcqZXIzvjIh%2qYOz9JG_^!yW$OL`D
z4-fXkgZ=Q}VR*2_*o#h4g+8HA%M1-?>Y+=~DPrgo-SF>Nnc2`}WVFT0(0k!M3VlM_
zO2FTR?+?TOMOKME5f?oIxCjiCSrrnv#IZ}BtXJqZkFRT(Q6n%HxMd@g;>_Vbcnz>v
zEisHTpBCrjwajl>C2OcbXiImR_E~@x$ohTAcZu1hFMKDqd&i1+v06NjJdm7cxB3!f
z;k?xOI{T2fob}Qs=kR!tw;qQhv=4bpzeDKN(WT3lt|I?m!w%(W+wW(cQ`Pa<7UXUB
z;-7Bp;5?o~_yP7UZ(fy=ZPwmf^#b-fwc>k4_m*@c^Y$(GtWxk#_G2$>1s`O+DY{Bk
z!%a2lCM&AQl|vpMmzAp)Bm2ntYSzk{Mqny-M+bHG2ybG1MlN|q!Aa3449;_$%f62n
zRF-Q#`imc3CJtWBDAG%p5kIwy_WWw|#xDHY&g{(_=Tfi8$$7}h%7)gO%g|G*8kVA;
zWaV6jo<h#BoNnsvQkCSEGh9u|Y3nJ&(8~yO=6AkO@*=og!9{+d&<Jza#N70;rXOZL
zN0=WE{B9T?I1K-50mib<Xo3G}@V`3N8l3YE|C`$1c5LiXKXW5Aaxb*<qEZclFM^Nc
z_z4N#3{n3e`l{#;HonmRiTXj@C;GvuxZ_CSPNl6I2oFe)Tl9mvhDt8<26%|*2ZCGk
z-(sx~Z<02oZ`(v}Gv;#MEqjx-Chy{@cjN<qbP4^|G;{T^%5({iVtXWSlCt@V2VH8I
zF^SGG#6=#rkkmWOSeDZNR^Z=a_oIq_RA7rU?0#HEogKhI`eWzPmv2%$;(p}BhscOS
z$oZMf=~pN_vA_3E=<j@48&BvjHoZq>jhu;IaH-HHyb>L%%?tnBM;jIJDmQh)&!Pv>
z?c&gziHuLs_Ce;*M8;!}sEtE+CNX*zGJXgdk6twTi}%QrfQ<hQ^&7yW75QiYhc4u!
zk*#W51>fDzmk6F-OP>X{wZrVM<hP$b3eL#0>n8O7a@G!l1A_mupK;<iB`?u}RM}yC
zk1{`pIKy}1crW3-y!$cVcGHH8QQD~Ex$q0&i*nxY#BXZk9naD-Q{;-s6Okhd`Ip}R
zXZseg)#6+D&9qZ|3;2h|eG3!)36YdPq5S)Q>reRils_Tzlw);dd3IQQ2AjT?8{Tqz
zez+IdO~;=Q`IqeQbKl6G^N;uvOe=Exj(+Xq$n{24=JdJSbLR;DEBHk{K84Cj<TrsY
ziT-b?U<v%t_9>Y7NR^sl`x8uu8n-b{^e22R<xhB3{0WhyKVc{SgowRvobosR1Zg*Y
z{Ug4GnCM;k#O0-Y3m*(5eGB4KXve1@dzRZPRN_OPTij#+s82!q;gJ3RJNjfFg^D=r
zbHYye7EbZe5W5h=zp&GdZjH@k@FHwsHA(-%-ao5E<plr2Uh=Gqe_`+O$y@gxKW%H;
z&#?D+-d6E73<fj$2CK+HIPHY5A?8f_8V0+Qeg^S53<C4#yB&S|(6RO&&)>RtmX^TZ
zu&UA>Tv!S3oalGZuuY*ueX6fPP43)tC|AAvGIGYLRfV&_gDS2JbhT`J4l#JEvKG{`
z1|{t#Idg!IoEeX8B!A*N3*N|?%_+Y`PQSLgb=)uE(UN|N^!$FBe?r!{tflkEmZ}x?
z#3<;~JNGQ3FN3kd@Gq3kd7w@o{aQ#L_l$5ikcr=;{C@l(F_jfkw@N>qZPJ%b*jw2{
z@QObI{^g<LoaE2YY=4I2>u{0>zE0CdwF$nA*sTuRmr({D$XQAsugSsAq+@4tp+DMo
zrY9x0<NG&EB6dn67kO^qci<JGa}nFiJ-Fv#awr5ZW}QO}aS+>dyFO(!j{b-bvfxbm
z-HHvpB@_8%7$NpM6gb*iYgpIRcARt$q3&zWRJLsQaOS6nGe4U-gAiUP=MQ3E<jz@y
z9r#LwznYvc(m_sdBDDrIhxpa}wb&pfMlONAv^z+C?;!cTq3`@4{&Dde6taI{FEN2i
z)<Zh|Nv&fn9UhMFR^fM$7%l^N>*x%!zD}^edg8bBz^)Tn-b9>wJvdUv_^ioxUG`bn
z7JW{amoh=xV*OJ)#QrQR6T2&Vp{#q<MXJEcRIAI$=kQJHtfWn8uf<XCl0N(?)vmN9
z{g%20@nZ#jW)wSV^}~8rxKqy-9rDT!UH07;_9xmV_sww(UUWJ+-k!d&tnt}3WsN_(
z@J8-8Hon&LY~#g`{;Y8||4Z)J`5$X|_H577jdOS=Im^b@J=fTzl#Lr>Pye{_Upw{i
zw{wbiKl+%CKUI50bcrGIbzl>y-FcT~pWof=&`ZbI8`caCx;fvW>kHUc@0-_WIVE0B
z-`)L<OR(WPcFTH+Il+E5w{3*{0FQw$Ci-}U7>AO%?vVVBp_4wAsS@OLzY=*7{tkLs
z^6V@*QzW?X7r<jjKqa33s@nSWS2Zr3%h>vKMQ~22e_o&DM>Wv_+cgz^032~^=qTj>
z?`4kM*=Dqk=N<6l?5cr{9?m=vJ$BRb<^ezWv1z$yAYDGfTpS|qXx%19_yOWwWIb~b
znsVmjSJboYy$}xSUP|m@{5$OHf*yyJ8NJuWJ4ZwOJ8C@lxbOg3=WT}HM3z|t=zR7b
z@106Td(dr7=2PB_?R8=qMcw#Y!taSJMkfl=57`%%XloRkK|kkzJQ@_5)0M<n*z`Gk
z<;m+H4?4`pYuJmjr~!F>1#6)N>}^e+rzAKd_#$|7G59iVnYs0U!I#&-m#E+cIPz@I
zfQ=i|met#5U;YozU*q{}JQqBA4tx=usWUilm~jZs2#yScBWd0zcfpsz6uz`LwQ+n2
zf-9UszuS+`P+O}nssw*Xnb{CTf5NV^+nueu+~~dS=wrLy0q@Vmf66+g=K_hBXzT-D
zL??Mt*71V(NnPYbt}xlBBmP*?OOC?F#FxrhMu}(OLtCK7@8M7FS(Eh7DtMW4vKGXz
zikC84XzNdE#Xj;|)mN#-;)^XghxjqRlQ?k=eL*KST%992z8d{9_VcNgX5w^gPMVs!
z8$Ri~MfTa?E0p)Ms6*<t`AsQnJ8UM3Ha;-2h?PBkR8hD1_JnUqo#O9{v)^(SYx9lp
z$O~A5uPG&7I$Nz+W1LZNy;0U6`B<(uoDIJhzCr%8T=0~(+GLF(zSE|(?-U->g8#Gv
zTa@sn!ztfs9QzKw-`d6SlA_7#eE4&;3;iXSS>$SlPtjN6vz=|M<w}mAUkIM!#|>Ao
z_T8Xw-{{7d>t9<|`np~e%E2zXZ+Uf%A3s|wyz~nmH2}}AZN(Sd3Quox<g`_iw@iG4
zF55S#w^<s#L3}Sw&YZS4=&#uJ#2;hM_(n+!y0-8P<iYAw``wHk;2?0#Dp%;BCvu62
zJ~lDmn8timBz>bbLHxcZcB{qs6U0Y$=-rf$jJ|b)N5$A>WPU2(L%sO#WbEWch*q=5
zcm(_LI&ftsF*_~bh`j5NGQ98PEH-&Rj9t5hTsuPFPXN;+#H9}}Z>ecg8Ey6O|4v}h
zBxgoICw_dTowRGO|M=a44rA9(Y*HP1ho3kz=yQeGP15+XmOgfV6&nimMW`eFTlntl
zypwse-1WZ|`I`f8QxWmm=d?8w*DUiIqKw3|Yv9Vk!d&km_6+SjF!t!d!Ug;W@3WIW
zRRi4pG`}i&(PS>8;!_oSZ>8;1HEf?Mdyk?Taa0;>J&)q71KJUvr1)0ld=;_R)!XNa
zPwRi9JlDIA_79zQnzxreyird6VES<Av@5-C_U?X#{<f*@_@7k&n|f}D^R@dghrfE@
zgWi;n{c?QlUVQAA<74;QK6aPwV`qE?L(9(|&|JPy&Rie<_NluoIM1asgZNs_U)!0D
zt_fZ|sOh^aV)fCpIG4rGd{)FXJ7yYrY@b!u0<PQvt~7xw`|)3kuUO_x_Av_1iF_7#
zrv0)Laqow+&j>uIhUdGNS*&3lZCHZIyGSe<b146NnYSP~QR%=B3C%tLua+}KX8jqw
z6kj@RQHSkUH^GlT$r=*gB7483T@UcR9oWgd37!M@-8SBmqwbUX6f>G$9kF?H@_WGp
z_OV8rse?VKQ7bXFO?X$9n%W?A@G9*UVF#7Abogkx{59$F4u#)&D!C7pPtHj1fKG$x
zX!5P#G7(e>!C?#BUq}3^)IFkSah}lBh8@&>Cc4}#k(mYNK-Uzr_I_PO@8f&PA5*39
zLlbLINvy%sz+3u#rr;9%vJPI^0semv`YVA?3hpb$BK;GeyukE_^33Mn@KE#t=~J9%
z={eiMx8IU7(0rC#=-7-(T@qXW|GSU;b4lH{m42hkjQhv~z-*$A{9bau{aqh<s-CV?
zJ!zYB+DHBc>PyS$|I<GX{sX7~cmKHE2Ypn=f*encMeCRSc@xL7kg@z-|9Gk%8H?0&
z@>sNfgZh&BeNOg|i;Y6;<#(c&C4Qn3tI?y;7wo-lmB>|l{qj(9{bEg7;N48F5)X2=
z8e2~tG&ys9uw($)MlSY}?>b{87Pb-{d(a?qYF>p}yc3+0v+P)RM_a8;8x7=dk8X?x
zXTa~LbB<Ao<d4+w1L(G|yqVbLUCPl=jE(7ov4<8mJ5*`w230Dt$_ksIH96OtM;${3
zKFAtX&`f*c<M=v$V(F_p?U$mSsqU$^FV6N$$@kcDtR=bL3gjks@Bn!o+Pvto<!VaX
z1JKJIwymsC_FvRuOSAn<U!pA!w(x3f;!ClE%l^Y<)LnVwf?AKrLC$}YXBF1vwawUt
zJlMtSm({x}fPtKeA@aErKe~q9yEW4YEsa~NJ6YR!ut|27`5VMu{1QIWmbiPhADedz
zGEvPdDEI(7W|oq*fVyoKzE1x?UtP;t?+p^?B7XH2Y~Z&{$@MOiaZT{2Gbc&kCboKk
z`Cj~+MdI54mWuN_$d4b8ILu#wCu5BNC3w#v^do1jDp>X@u)Jk?5|%RVgTU|>VCekP
zv_*E?6Y3OLN}U4BR`6&k_P%EHTCod=t-1vqyL`S?GZ%fMPGz@s(6+p@&==e(zxq;i
zSK=Sm+xcklSyV8m=^UZ(?!}3pBz+cXABXL`Nadm-PAe+kS0O{MRT-fmw(M@PX)n8}
zM%E6a@ICHfbgx7=w)y`;_YnNN6@UCU?nYC&annYJ(-9J1hO8&V7rzsoB?BAxF54HM
zk&|Kj;xop5@z^);#XFKV?(?ucBlAv!Rz;VFUZWOxS&x5Qbe4+s>q-t{+clt-TYz<w
zX0$n(`*v`@6Z<#k&Nak?Ii-i(Ii;LuS9%M+RE4ie;Or5*D!EV<{nre&dXRpr8+*sk
zw;Q_Itl7KVgWQ~I`_J!%PtU_%yA-?{rzP4H+WEicTYS1gJ2Kxk?VL2<S_+4fv{RR&
z9S{8xxiTBP1NS*k-B{5K{s~P8U3r-2W^BQ7Mp`R)0M5EZep}#(JDXewtVP8SBlt@^
zOUmzC?7LfJ5OgnmVG4NsA$a`%k@xQLQCH`_|N72ME)XsO0>OZ0CJDFLs;z*bg860w
zf@BvfP_ee%nGn!mx@}RbAl6Jm5bbzc2HbUT@H7EMowV-lK0?j(MgYZ1db$NpJ-fR-
zGD(1-@rpM_iSv7ZzLPIRw(Z`(^V{e5`n_JiKjt+v-^*IhdY)%J>siljNydDZ3|RXa
zGT;LL1^-qC+%#AQj2n;v`3~Q%8IS?HZn>juJ^M%bn#q~TKMMVpqbCX{I#;Cv8KpU@
z`B{v7n(8+b8jYtaV6t*VuPNB!-MM-*GV8PEXc#%8`KdL=Le`Flf6SxRWk(kV_z(->
z8SmKjbLn4vwb}9Yjx8<YzaJfLCf_yqwjaY*&|P59`Vd(v9v5HB|1G|DecwEnvm9PU
z9#y&WV5&cBf<K%!LGbq8ljHE4%O4i<z?H3co`+Y-gK_?G4u3fE;KqMn9$4^&>l-)7
zQ~22Njhm6i@r{em4Yq%D^R<3>#pImxjq91^$dkLE4SW($Fvj=5o%l&Mq6&0C?dK}c
z0Tb|4q2keyZ^GHUfp~#F)<69Zzmj_RBk(3YU3!zV)|JeKA30ZLz3Sin+x1cV)Rpk;
zEsXoapHLSESll)87;p?;BTJ|a)`M;ijB9rr;$PWccs6~%pp_WY?ZB<I#tsnc?5vAp
zoprH!Y3nwh)*0q_i^tdJr<T`xbl@=0H}Jgt!NDQ>3Toj!cP?vA1ctF5G8eQqs;&+7
zDyj@?qONI84BRt*39`)bzbj5kbI4f(x$mxtgV(}U18d=n$ZvOin!D%wjsusZ<Isdp
z`I#k)Km3VuyfUI|(d!e~`QGDvMC84bUv!K(R4?mgVkow(x=<PVZp31}3?Uns7fxJS
z7h~00DY@Wfy|llVUN37{FN<Ug#1B@)dZ{tA2#5HI2d|l|l{pLNjUN5sz?@vjzPW-m
zQ+}Ho)=I6Jw=nLT!PRHY#S}3=S})zXk>IQlW3m>yYh|@HwjTW(p33?Zj=KioSp0D_
z@GWF*RA0{ApufRw3CC(nIIf3}mTQf)&=m&O$W`#!)N4Xz7guPF%y#z0x);JWr!`XX
zW-e{cr%MfdB|5k<f})LRqJ2$0Yo6$(_q&lZvT?6uF4Sb$@oAP7vEauZ?-0kQd~D&$
zGVT-S<wJg8Um~ut7N7D;)<yQ?#6pjAe99TbyX+b8Df`$9YK@ie*GDYNu?c4San?WI
z_pBw^mKj|OA5CI^I4>`I!V3J#;(s%|)$uFekAGSAFRi&g*4!S}+Dz8mV+-Y1&K#QQ
z_?0t1<yXe$;;gxQm|vpVPUe_&oP|T4F9=K=I>EkYsG~D#F8n{A8+rBVxsj%uberY)
z7bT0>e>!rgM*C1?kmOJea>(|j<<J6R4*ndyy0|A=ebzk6|Cs$Tb6#VU9xVPB@BinH
zXPm=_E_~Dm{5NxbFS!PP4#r<lt79HI#>zoD#(xfcV+Zh^hA%LnTXZ8=rBgV%#eYDr
zu&G%Ljn3*7zu`;>WKZle<o-f%tGQ~UQ@b)_3Vb6uF%;gB-1y7#;#_Qi)^FK7cYo1D
zTX$5KrC7gH&iXypS--XRun&#<h&d@@KBX2;!bUZ;elGiiAbgALUn_VNS1A}4(!b=C
z`d8cf1dtKazF?yM?dRHWFhiX7e?PFcz4)ip!z&q^`e|k@RlAQNJA9n|x&j<FQ-57^
zv*5gSPwhLkDMp5!_%1hJUUp%fBO%+c*M}aS$J#=BHNoOYk+EhKCd}%o_^)bx)+kRF
zc{J$l@@e0}{h%>bcX_PnolVk-^V%d|lrP5Ii51CK@-}&zZ-4WM;Y_XopHSw=Y1EFu
zZbP0TYjKFRL-$%etYwo2eq(nEl@9zK%5SY7dS(Q_nTyWv(Zu6YN1_2ANnshex>r52
z*uJ~{w$K;x0S^t&8Ep4)^WpK6IW`y<{t)BoW;}wKGcBq@<P8b-50IZ4li(Mu@A286
z89eR63=R%I4{qIdRA0fRpX>h@Zsji&K11M>y-j32uzHC*s|9D(#@knn%~`mAmv}MZ
z|3}~uJj_@xx%0`@N78j*(|B4w&OWsrT}Sm0G&Xlkx1YFsa~N2+W5*tRFPHq%+)VTx
zPvOhW+(+T+)L9P4MtWmm_GMn~yY<MrMph!5#<gj@yU7hw|Dw$+jEnr5Xc)Y>eGYC{
zW9|72UP}8#y)lci2N=5_URq9`QRM(HvF0r0{Bwtw#sf#1mjY*b>AT=TG!Z}j$9QS1
z!%Mt#c+V|0XHq%-OV}fw3HUkJA#C1}T{uMCg2OAb_s-Gpi|oB~8t%59`b&J`!iF!;
z;S<eU@rYm(T%7ayZ}{X<hfmV*h);e84&8RdC;xxqk5r{~=p=K%Kx6sLv3+xnVLBgQ
zzI;cY9>~4#s%4Lbe7Y%g!51elm{eAKX8sZ4DMyjlwOi*I`*^;G7)8#(!;V~AX2!!;
zb;V^@^ZbbgC1pXLM=u%G#PggduKn|&ZgkKf&vn=N%bL(hb`S?*x^ki?b4={V*nLiN
zo{ZTLjPWcnhuC8_cw#QB=hr`IWbUc{0b@$XPijm9`w4gM>zh0v_7;0$2hUU-8J?Z#
zoS{A}duXI8*>FVnAHY|75*z+8&Qa;|4sAPXa{ADlme!%y%RZ1%H>JI?q<L$}>4qam
zjjwOoFtfA>89D|3Y&Nlj-n!-O<f2A`*g*9BN`F&9xs_30jJ`PppYDUB%%S=r=Fq|n
zaz2TpK>kc?FjoBzZ0?pZ@%hY=5<cv6`}WeWCp+CvC3Xp~PkCZi=~scJns+kRl(cu1
zY}`7<fhDVN6*_`ytuz9Ur>>?QJ9{Jm9C~)1zp<dfWYkvzhnM%z^WsN`nRl?sFU`&+
z2E$h|Eo;q9?RwV3{C^G@8m;i*<$NCiXBo8RT|2oQc;jB+^wPfI5e}XN&gl+*IIjTQ
z9L-JJQN81-(`Ld+;VNTIQM-dLd<QyPsR9_)h6|%`uo4(kz_=fs+>`Bz%%>m0C0Je9
zD)GxT1Cs@8LB9XMoE6^Hwng52fOcIRTWTMi6GKw}<QMMWDx8Z3UHH>>@ZQmEa>1z&
zDjX|U)}wJ{8z;U5IlnZkE^ro47SH*bZO-RIf8dP1a%hV`aI5p)n&NiyO1D~!Q96DR
zypRD*t?*=4U6Iqqlk}$?CBY}SQjE8W`yT9EtQ&EyS5K&a#;SUTqT}9EsikVmqOB76
z%12ub#^=0OJkV~GXT1Zzf52}KG|`?~eA3DP?bQ7fz5~#(e4=^hMf3#XQr=$4=NrSa
z7hTAwJk&8q*V=#6F-O-Q*_c{1_e|xH_=3I8|MIze=O`cZ=YN&{|10iGmjCQ4>Hi;R
znQNbYsbkI%hX*?5&{y=4jUO!f)y5AOr6%|nH8{1Ue0?Ek|Lcv(MSC`$=K7EE$$zvc
zRe0s1U-LV)t##2W{C<V+6lb>S?3Lr3y|STSXRqA!<0d|Zx%MdouOXL|BlJ$d*Kwo8
z89X8QRrj<%uUK*S=E^*KGjU9j>SK4G>cCc{`L1~R8GlSY?DbM_2V4}6H}AYkTPqkR
z`}MYxuau;7WI3l$Fc$)IAw1QnJ%9H1HZzy|{5-EZL;=qJDI&Ml4;%&<{J;P|IM0e7
z!~@mY_Nfl&3!iUhUFtM*0}=UbbWa~*6wku(;`wm=B^a2${~io#zXo4h5#y|8jz0i?
z@b|tw2U?517x7&U&2{Y;12h*+OU?w3R6p0@&^rFxG%viubq};Y1C4(^h{oVQ`YUMp
zifG7rjG}Q1I7oo+qZ>b7baX-sbe!$b)ukozoVz-p<Mu(c#4ZwtU)~9#KYHexcG1hF
zWl`O_&BeL)X32u`lj}|;n3JNV=8@?6`+rS6TuiN&ib46!Htk9Ov}vo_Sf8Rvxz9eO
zImw*b%zDyk78FH}570#PP&=RXzDqN$59<HKs{eZU_*ee^uwc0FqsLASnQF&Y{_5#d
zS^kRH<1hUF)TEjJeCq1!PoFw|;N4Rt!|YgdN#?fNshQiFo1fcK+q{3v1NUTXyM<55
zu!>lK`cTaix$i%Be<Szm_=u<6*ta25O)SfAIesaZpS{_{b=`wZBR4A}*N)x%(*7-(
z!|Y^7`++UJ#zgKv_S}}%GtY0q*AO`g%=ZH;wv@<|z_<YTp13D_o5ms7oB1uc1#@rn
z3tI$hFEBLo;hlpw|MqVW&%eI?RPUlcoVxi}Z=W&~b=`N+$9IT#_wzB$9nScO>)uw&
zCv42Y^mE>WUY@%;H?3!L=1*z0?|Y{@hz}NAf<f&IKEa}X1f$?lf0BhS8Y@RI3qJK9
zZnjUGfj-qAxpW83LmgYxkKgiD6;32>g1K_QZ>|fVXWH3jG&!G30)I6*LOrq7tKg+$
z^jkF7ZeKy4*bJ^Kp}%9aAH2u6t)%>ihmRe2<`nymgFV2w9@t7g`0c4jfh+jfzAcr&
z^4!7hQ<b^iZGP-1J5N7&SnWN3aK|aNcYNjlI;HlC(B(ILbj)ejpJ$hyh4p^`EB%PZ
zl3NM-sBNx17^a^9eYet27yaAx6QJL{^cA|tY?FL3ci0E9Lu@l)`=EHUmA*UZH$k6a
z`eOeQ*$H3EZz;JgJ~hmXLY;TRxC^He%Z1F5&wDTPA;g;AGtwkWe@g81NcI-2A+FzY
zAM--LL$-;|!luZxNj*EF&^$EoEOxGaj?B~i(E6qIrh&e~^wluX7wg612Kr;IBTfXn
ztk+*^v)%=`uKK<jhxppikKjFoz1Y3y%2eJ<7C}qiZSxb;WX>!&BK&O!e{V8g^-sQU
zn|~Pc-EZFc4RY^s?5^UU`=nda*WRh=^<8?tayP6g)D)$^n|QA0VJmiwI&mE)U8g-v
z+<?ZY^AmMOw4T42=MuV4{jHvdD|nvzIm1*d%Is>TKCKCli2~2tfv5AMkK_MMU(1WO
z`k1?%t)zP<d}%b`zkqA#v%s`3*Cd|<E_cru=9=(<jgS1<O!ng5Hk&?et}8a>(=phl
zZ45Eo)F)1kZKXD3E_-nHhpmjaQTtTIF7j>zcE{WIDJF2NQ)9A`>(F9Xm}flnqi3kA
zk$j&zwduX&eut)m>xF2)oUR#?-Ve(j@gcA|@n#7tdbv&9DEm~COCDS%IkLq0bW?|*
z5M8O2wO=u9+A}u3V#Pl8jwzkUx<aj?htc7l4(}i)l$yJz=_Ayz?g;pd%qspI=W}tM
z^19il%bPi0k+s1Po8cd6cHPNYV&V_-t*#sQCr|7V@~+13XJ5Jr`$CraLIB=N-0aja
zf!D@Re`sE87W#?y&fUalC|2aV^sShXFg4HBj@yRb_ai%8I0nOD(Am$B1E=;H>0h`K
z|7vfqxEjUV^sjrt!CiO+bBQxOuRopIwYA%F>h|coP5(XV@m0c0hVeBR(-%Ph4`8<q
z!r$dS^9AB>m)6|7?#Pe8)pq>a8bg3*9XtR-BWEHNZ6dZEpWV2jW_Kg_>k|I1u#@@J
zRr`^T+&L#6M*fH~rLEN8s=4vmZ5qGYD<Pi5<Hwc_KEu#ncxdI!5a@Q@Ebz!){0kMp
zfQ+~{JQ`d7KJV$jUG9mtTy5fGpj%5*^X!(U4SepK9j4x<=+XtP$yZB?4&tXhcVFJF
znoC^{9gsidc>IPoTR!nPI8$uo;Qjrla0i^$7}dN^^JXi08*}HSz@`hLCd<V3I_H~R
z5k-%Gi5TrD(U=3*IFF6G%E<U+VV+6eDY*bo+|RdoQ#@GB?>piBnedHjCDstTE8Tfq
zUuw5<$wgb$`OtR-G~UQ>$(FQy(K%JWj6L?1fU|de4F9!jr+aLeFOtV6{K0C@{xQ>=
zKDwUy#GHaZcA%%M|KxgNV3#@c-l4quahl(rw&Tba#}1`A_|drJab!!&C*zX4ax)^j
zr{{M0@*=y2<wb;#J4WP18fga~?K^?ImaW2dH}l32kG7uc>v=a!JJ{u%w!~lT^OveU
zb3x-`A7@TlL+(4QHe2s)-KKW64`V%#D277qhnRm&o(q!eGcQP{6u*1bB~Fd^njrBV
z(3@J3s}uPx1(Fwr*t)dLc+TPbb223TzxEPCSUR=Acvdp(eSY_^`}x^AL}@u<IdUYa
zao|(E96!XGJ1<&t`$hL2QH}ofZSn#8OS=}XX=mK^UC4IHqLcWmrdFC+Q!_8SA_!l8
zK-?$qZ}yW9e*eg_D?Yy1;8Wy3`9|3p_GbSWD>{~(pWWErrff0MF?rdMFG2r@JmJHl
zujL(Ag{`f$yo9w9{W-8{Ye52Bcz`=)7oMK{oeP(6raS)S@Zq7zlZ?8WvL3to^kd`g
z&CULOTRF$Qt%v7=6Y=Z#%4RaBqeqc{d*OS@h>tG@U!JtwI43U-ICvu}<T^jFr0Dwu
ze!E^`dSr+3(idY`T+W!D12528_LEVK^cnC!PoGv>G51Px%4V`xkM5-JLX%bh=s=&x
z!1o?<g-Wt3?(Sm${6}hf?d9X~PN)LDL)G-x1>J*;mA)2FqCeG)w;3z>qE*?9b8_9v
zvge#J?%ztj;;5HBKF+2sn~4o5T4=oW7HjZt=;tW?JVrm;Pp6iy^Jb7sG@+{SE7Zm3
ztYLhveLd`>KOhE@vkQ^IS#4dxD<iGc%*+a#=$+niIf_~D!av}z#1A#>qT6cNuYMSu
z8IfPMYn)xCoTa_*r)E%RuO8deQsGm0{V9DLXcqu~g^VZ2xTtts&_f)L>?!5YKhvR|
zsS++lyOnh-$^yjR?O<F%&Ua-`&_*13(lEZ`R@uyEhj!*H?G%UC!uWiQuL4^`@%yP=
z4Ib}Lj&Vlg_2gm%`P2^Jx|wGJTnA4%;=vlOhv`?f5#`^0)$7C7HZs;vjQhJwavfVV
zwyl?BhdVwYXWIK;9~Bb~KCB(h8mqa%nQzF7k8jVT?xMHtt)G~F$3AygIws6UE+ptD
z%y+dhN#IP@a3*^S9qS|J)TK|(?eALRiT<s}j&~tbI7_DVeegfmJFc^#06h>NSUB^W
zG35O}!COn4Si7Kor}n`2BRe|gncb`d$wKy2t#_KG7bEX|z?T63pJ!Y-Ca05i>z}$<
zch?`NNdDapD|({Zj!)p8xtv&Sufa~3-xj8xWq1cL@O#`9#IDmuHlJ1x{(>DtqE|te
zH@<Gi)xO$x+YMn8QvU%%?JLXb>tPLa`?-=n`oPf%Y7eTf{hUprJS6{B#I3U)UC;e-
zSJM6@^qub`6TQPr@84=C`<^i9#}nK7whW1N*Lq~rKD@EX6Fo*g(HrFN8_q;|_t9%q
zgSqq#uO07u!j3&<G54sGH|`1(x2`1j+%l_|OFmE&(mO^qb1LrM`&F|Po?Gm@99;x^
z&Gv<9oIK*qj%*(or^a6^9qo4&$r@y@WZcOqCN_o~@<#BNz+Z53iXAIQ#^;-dw}yF+
zbJ8N=-&x8P;dge#Z$WQ|PT7(02t&<GT^|#X>=Uj8SJP;dyuQxN*bd$GEHqke)sc%d
zj(s=#gm4iyjA7<B+CncU7nwSJmDK4o_mFEW+MTI665`BYJuBVqRocGoqtwGc^qBte
zYphfFf2d6wf0e$)J7M(uM*0z-)U1T3-W+s&fPc2HFiU4LhAqG({`(kzcQa>Gy-GdW
zhKo2e?uK+5;i2s1+4mK)Z{NF&wty9WSuA+X0K7H8TLHXVbe;1<1n=!d9R=$%?f9J@
zZ@qzck9}2o?#SqA<hr3=TA|n1hkxZI`B%noY2Nzs=H>#`=<P;d()dEGr;m8YM>M7|
z?R0odj^GVva+Zd7Tx2GAmoBqcHC32nU5|RAdav-ObNj`^E#T(Y>|gXgc%AO_wdrc~
z&M~Epz>(m2^`ZN%mr~pGzRGywugwe>Clinn4I`+9gl+jr;71o*9ipyA1Lv=WiOCX7
zg`cB#)>Z7`^3pZKx`q?0M_s~z?Ta=M!xUH$D#QL!-?ao>HdV&0MP`P@ni0l7(#SZF
zqfz0$G2bq;%*a`y#hr`+yL*1aIQj;^Q~88xD||U~wn%iePt{z<87m&+&`x!_Bs;81
zvsAQu8~>;9UU@P3Uhvn)wATQhLh!%v4?U`c|J(U?@!vq4&F!1hG|(In9n$z8a~A)`
zj5~|}JE`F+SVe<F^ylD${d`@CS*kH<41>pc{uplpX1xQC#^KTW<>bP+?|EGOFy<z3
zWX!d*^h{%sS*pE(+Pa?iHAanR3u}$w)wnb!jZNcm$2NFekB}3mak>0-C$twoX*`0t
zklK~3cn%&lKI+ZnTgVg5SIsHKh^yv+|8r)S&WZb&xhUD$i+=gW#hmjrf%CZLn|R+8
zll-VUGnV9B3+eykdFIt+*=K8L*lGh=XpJ$`{rvtAoU4xSyIPNPh>=0|kq7CV88n3Z
zTuUZu*_*NFe~&d|#!xdO!P!LU4c8sN7`p-QQ@5%!vBaQ{Qe%;QOz7Gfkq>y*x&e8#
z0-2-z4ScJ$)~5D&VD8w+nw)Ww#I+`AyyQGmYdd^z!;us7neX;==+1a@Dq{XICen*8
zoI@K#m?w2cRREkYZ{pn#+wl-*9aMuKTXh)uZe@=2ETJ|fFe<<75%M>oOGIa%xcd8@
zBgaLK-e{8hZldoe$SXnaG$3PD&wd)Rof@mra$;wnM1PT=`82qG7g>GH2b@2~@6+rZ
zlbl=e0q3y1N!;;!@O|wI72y18_B7tMSC=h_NzPxQSjtDKUjZGfIrHqsG2sHieiHuK
z!5*uXPo-&HEIh6pi9I>T6M0Pd%6)WOF?eEah_o{9dE_jkm!HLN0KFqIMY&jGOS`0d
zlh>fy+Qw_eg^Qn)_hZnRSo5U^JLf_PCrj~LyZ9)fPvNHpdNrbtC1~eE#XB2MBmqA)
zeVE!cjdykaPZ7ML_jma?>k~Y#Kz22)`R-}#Vv(jbGfuz3Gu_}pdx4;7Dd^@I>6<6v
zDHm75k??~)vsm~EfiK}Gz<=4NEc*Bocv8;R?|E0S>-S-POIHw|OIH}ICwx)Q1GmPc
zvAA^B7&I1*L%!W(v@iYSb!=CSp30ckB`@<?vMfQ)(t62C)`IYIt%skBN){|PW?^t5
zy7ijn?S8+#FuWX_3UXfablZrIIRy(k=G=|ld+UhsoJYxx(_D7t!y@3)vyJ;I<AqPN
z9?))reT&uv$rAhJ)Y5x^2VL)J>3ZFF$-Z>19?bU3%+j}hV)rM!6WM28ODw@x$cMZR
z+rnaO3roluI~Pl)`70SBn8V0%WYR3b7^ZG(BWp^{G&3X2-my7zq~p8Q98f%}7oRMA
zH_G6XUB95HEadoPEypL@h)*_vPqq=CtgYN0VmcZN9KDM@r#IHvG=kdYInh@?Og(G~
zZ`3Ys;au(jw&=!tE$N(3m*d0NcVRd>yBt5h*1W>-=GpM$X!Oc>?h~np9r*`doiU(4
zNVZDueFB|ac`Tf2-7)Cl;Uf0(;91YT&od41`U9+u?=qfOms!Neh~IMBPA)OA>ELBO
z@}w47vK?LI(b3*W2>EeS9ky{~u=dJYQw=p*wvp4@3XTe?{S(anyREI*I#mA^de!%!
zbDmsc$6j4l5o?4G6$kPI`ZmC^7dh4ku1~=4+LQNgv0`tGK@UO?wCSUFOGOO1mh9u%
zSJ4+wFh|~C{<r3n1I70b;gc;tn7_8MU}Q81e+xIa5AC?|_Iq=eY$-BpUwAyd-)%ft
z8ApEBZ>QD`wG&oP<y&}{4aLQIcrr0?;9GPM?j3whh7X{Pt_yE2ErdVO0v>%@`il5c
zcqdQK!D&YuIbD|{bJ$~P-YwR6sc)+H3^8@o|BdTRKD{5nZ`@eG-X57y_+YSKe4#a8
zZPvgasr3hE|M<0zIiD0>b?Yln{Q6e;e*7m>yZhI7&VJ<0jyb<9oPFyfPyF)MFxNx9
zDfGXzPB_!DlmALg+YadR2y<9EVQ8FLdJpUE7bO$K_wY=(6d49zh(Db%monx9m2v&1
z7H{9)W7x??kBsgc!0&C~bPMxR^RWT??(Jbuu^Adj2gYYqZrk+%t~LH>{#t)kWU+(y
z?$lD@PdE||u4nA%!kwDe<?M}+FUhh^&0Agl@oV%Ud2x()+OhrVy6__1Qn;xDFKSC;
zm5!O#<@F8h7fGIvkAyiVKsfk&a1dgwt&A00>Ed_AGr_E=qeHSb{UddE6tf=+68r2!
zqWIPw3285aov<2v>0aiCY<yZ5YWQt75%=7RzQ}L&kIip7a^SkAV0P4t%`m(#D_WHO
z=r-+*1K7~Zv7yVik9>-kuetEH3hCVJ)3N8K&o&BIpDxG0xE(u#^9=nM_T-NMD|Wv8
z+1NP_@U4BCcu8|eGJFr?3SR>4KCzfrL#S24{KiJq;nFp|Cm9{S#pC!a{MdTrvj_oq
zp~fP8i2368!2@?!#=|}{qlrG0Gq?U=g>!b0^zrN1r-a_nxxA+IG2l3Z{=b9oCiX4W
z=p_E^N@pLx2mH>a?`_<Z{QO_Qr+K6OcuO!nr=0)DxbRgL^C}y8_JAYX3d7%@tz16f
z*$h0%Kk?g7TcTI^UT^$9+I0Vmj!pb;L?&r(gUv0coOLJ!UR{}Iq=T}jlHMKqX=?g+
zdEQwo24Y#HXS27!hG1bsz*aV}j=Y9!>R*?^nekTiBr;JlsT*C;1HS#H<FLKgI&Bl%
zQZ<CJ4>8H=vFvj)vD=Qyj(9sZ90sq~jySO4u*ooy;m`3soO+YPOr(6(j@d>0u4KKp
z&G1Ndc7C$K_MNUYBO(nQ=5%%0CGo;=c((nWTjP_yIyX7*bNR`Vugy))y(~Xj{LQ(^
z%IWz@dtAC7wXJs5UM6u6tnqEtv-6YHZ+{_PeP(>J`WyUS!6*BIWYO~r;@zXn4B^iI
ze0E%Ly6^jW-}6_O#Jyk1PiBPjlfJtA<ly_C<9<`ct?}iY$7*TrpZ9KtZ&}ipi=EVD
zU`z1!Esw6>TEQN?0=$qr8}az^(TzNP9q^ld0kNt0_d>uS8@YX<`8Tjwb1#9G%aRq~
z)Cw(22EOV`T6KJX&6hM^S?0(l|2O&VuKDP1gV+23vaNsJJYvMtu}gyK8tfav416Eh
z7XzH{=282=P(lC28S`TP>#mWU8&wXR0e{n0`2$%K`-04k>HzEN_sDnR`Bv(L_$%yW
z@v6DV7H_Bc{u<3=a1!ADV4PYDE{P8wr*yocRlekN@HBk1S$MAmrtW|A#+EZbUc-Kp
z@y{C$S8uZW`<}64-96YWk02jTkMEbA`2@8U@V!O-C9T^;hm)+02K>$gr{&15*RZGb
zJyQ|uLbvNFwv#7WCmUy760d+q!*ec)Hw{_l*hWN`<>+-y8TrYkA^GCl8R7R=#}gUs
zONZN06RMciky&<yct!MiT<~Vw(J2+zt(~8H;aU&#IP0?e4j(XCksx!}(>^{a_$OPL
zk;0|$8*8Ti7yfd5@~_cXcF@kz)8;A9noHtE{PvvrLL40_-^-YWF<$jkT=M9)S~D!N
z>P%*=VGVYkdpKX_e)hYqeA@ZE#2oWokhH&Zi8C*%%>~Z9(43e<TjHzmThwrY4mGs*
zDLTMUqVpX*7fN0+bHlV7lA?FXG}Z@v-7V1hQT8YQWzr4F2Zz|vddu7C)ZOt8uL?3p
z?;G{awY5IZhZtlhacd-PR9~E_AUjDfb{+Lk&A5p0I~WGvgSW;#x%o-qv6(hAOn#D@
zauMIK{N&ZG6W0nalPgB8_1Krhrvm4vWt3H#+HW12dR-v$)*u-*H6uIHzb-TO8vCTF
z!}$%rdy!K;mts2;e{k(}Z$_ILyG;Jeq`6=jYXWvH`pU>ymdxRL!k~+z2kgY&NX|i@
zm$e}SK6wK_>6_Ry8?21JCivUEPd>uddMhK6Gd4eolOt((w!t!e`-ywgTwiEqbWR;L
zBqG=ZlVC9LmY+F~<t&-NZ)4`%s#-zQyDG374ER25`tb9fADO0kk>Fz?SGW(41Hbc4
z3?*~k$)UXT(>as@_Gta<uBOJxK)j;047;SS)H~#B$+sRgv26HE^EL4kUrckU2U*#R
z@4`R3bz66_<=85ZRa*G<vm=wi&uh%TH-6!Xy^3wOj&<*?NA1{anp^CtyRoCb@rz*0
zVs2UB&@i{uk7S+&Uc49NJ8-|MGo`@!c3^Kkoti;xd|wx5!n%8BeH;2ZYMJ=K^Jwlq
zliKegzB0WICF_S^gE+TF9UEz4$Mfa$%f#MIorT)$nB-s=>y+ffQD`ff)WvtvFf;w*
z+lS&O&MOTqnI0)>Sr89pnMi0P_~zq%Z*_b>@_o$d>yukJufA#M>6!0;J&S!nW?Rwz
zxk+!{GGsaOYrij9Fn(Dwr8YYkIPKmwW<unyto+DbBl9Cy@JZaVEa`t3KC9#$RqPzy
z_|UpWEK8QXPu@Det4%>)hv;32zZ74wfByofE>4Jc2E$~^ZY3uI+ZkgpKF&JapB*pz
zi5)M)PT_Ar$7ZkL&su=b-|ECB(0AjO@Yb2@Cr9)Bt<>`}c{g&+V8ggwIvn^=%(w8e
zg#4foXCV2nVD0wi_kCl_!|0o1uvbo`_7ipy_8Wou={;ItKDHz?v9FcAOAYY(nJfOE
zkeileMQTP8530}XTgeAT_hUSJbIkPjzdm0zXYi3PjLFXu^qjszzp)*i+oztlW_4Yd
zUbFC{bH0?$mRi96^cwg%eZG|1oZgZhS38Q$(0~1Yo!?&MagjGSTAmsiGsu@(WO8w@
zm8?Yum-ku82IR4RSBHN*y8(Gz9d4N|`CQF@#S@yJG_BuQTV8Ma{rj!8ML#sj@@2kw
zpffuzpY6Y)31jth4*B`lHCH|Gh}O^T)M)Xb59oIVzpc5q#?fn6hgtt6d!)Cy@GDml
z_@A!jT+E;;=nQ!Z5G&!uqQOV-%3AIV@8{#Y>%EkNZ{d0Shp8FDjefiBYRwA3w}C(U
z&|}Hr+vtsHUX#0=oE-MXCvQUsT5zkwLzDlQeHNa-<Gr3N)@0V+1kZ|JCat?B-ir@j
zYwyY=dxVFx<K6lAT-etIwm_3&=M2T^MbBsq6Cy>=_>y0u@4LMPkuNb{z61<9!#M#Q
z<IIFk{}F6$*pFOX_`UvUp*`$$f;Mf=`|z(Xju!lu{i<ReMws2@v^VovAAY$s&A$zd
znmdViQ#1DQ`>4mfBi)<%fKPOOYz;gr-dL&UfW4KooYiIqZGM3Kz^1q>@r;S$OFDdp
zb5;}R=qc=-Meu4bFdELNKh4<pdnQDL2jSp2_9%^CI83egVw)S^Ry2SM=^Day_od`9
zAp?uRNq}(+_sqW;#%ssdVOQ!PhqM|#=z=Hw4Ri6WnO)Qo!Y4M-@reo6Fmqe>&_ZC?
zj&C)<wHnSF^WV;Sd%)<w9NIt&#U8kGReEI6FXr+NK6KeqD~H6<+ag83@FjiO_D9;^
z1b{oRZixJ6hhG3MWk0zl{v~9^zZ|FSBXhOB>{5F{#x36KU_Rdf9&f-N;o^N1@7;ji
zq3l>{hQ|95KC&ZRW3Aq#*m%iH$ymetdgliE6dk-g1CMW#e?)%TF8C_|pQxV)xaabL
zV4npqT=@*+e3p4wIqbCBk=#%_@341qW0lfz5QZ8wR&3W|bhck_IQ-DQ3DIYeb?(}s
z?;1}!E=e{SH!i8+UK6{$sF>KLJSTQ(4|~OPF$U>4CAST?R)<>`+a!F^T_2ENd1Ja=
z#ZsJY7dvpxay!YHW=<^Br|vCBhr>qvZqB(H*y`i6#?wO_QR^$LPuO0au@PVK5a(8F
zY?7xg?0(je8qe3-8&!)9`TYanqIOohdq2S5S!YN-qxObse?GQt@Hhqc+vowx8ES1R
zj$T52@jb6($LarUe2Vlg_Z)1UeXZKy4!yB8>ilcvF;UOn*?)Ag)@iO7=#`ggb|o)2
zN%@$o(Yb1{DY2=|tCMYo^=dkE&WW4CA0W7T$z45GsTvM*WAaPX!oMM4md_M>u=Boh
zHfpd#6*EU0u(8jDx6OF_?nZpXD{n-mlv2Z+^Zm*Vwi@<3*pxOc4_eWhBIeUl@_>j@
z6OT6#Yc#;)GxQF+*)GASHvWaNCz)gDS?O98%!eZ0acfmnfb;%!=gyvX^)0<moWtUk
zH=4NSmpdn%v%$fG=7bw(n}IzA+eu9NqGAyRlWIx7jUFpnxV)F<k94eg2KwW1Z$_!~
z+QIiT>uT3bHQt;9#P!dwyQw|P%BtE({y;4@kOg&<+xM9C`AcrhqYJ~lf%bBEPBxSw
zb#-N>)FZihRo$8w*Q{#qHA5Em8t>3v+P$Xk=Jso>Ayp5onc7Y+S9BpcD~0IAHP~s+
zZ`Xx$2=$``Yt{gKlULQ2ov<@Y4}9aZ;Ut%&Pj(--J$H;Qys1k6p_JE?%z`ex@Lt0(
z-y&@N(UairWR@?fG4!GXyoSzxl8^iTE7bSvFT85eE6XNb+fPjSD~08Y?&Z6IJY&rd
z;UUwW6q#a76}scB<A!sw$a$_<ThrdNuC|?eUJJbw?KS#V&BRJ_Ep$%Bdg8(7k<W1y
zUaJ6ZcTRL?&2{DiG5UR)3ysKLV2`@va`{61Fqpon%3NoB8kal9bK~=z9iPT?ZVXvY
zJi2gxa)3ABhq5W~Lq=U~`-ycowLkBlw{RzLUtPDd{e;P^x^I9t=GRSvhF<5q(Q~i|
zKLhsMKMVV(;lIp*|25>d3;(BSlzDaxC&`0)9U8sLN8|Zl&?e!~sPx)jK_8QmrjzKE
zrqz(Xz2Nvb<II9qQ=yehU(qasb0|c!%-l5H)~`*E-K8D5<_rHE{Zi0R^&8LO;Ofu7
z!DW9I2mhz}bHe~_bFhtTKHbDT8lZ2P=sR!i%Ju^$W1;B%@6kH&zsaX(*Fe@<$^X2L
zV3M;dS?6=3g=a2{g@1r;k+VF*$l0(5f8VX_YmkLu*&WH-ZD}&ITJALQ^;#>@GvwC{
z!jq0pfZoeIar9mJ?y!q)3VV>z3r)N{Jh#7goJpc9CL2bZ{zlrZA>X%=*jH*lIClD)
zA6Uu8$;u!1#v3`qwq`Ql*g|VKJHF;i{N}u~nyb9=&{piM)aVTby-tj%8)NR$&mc$K
zIqLG3zUA-JGqNozuDgln?we>Q=fiiE)Ckz%$0wUdP4_i7w~NneOYS{#AGFv|SBz}1
z>U)^~#9WsK>`9%-j<O2gYv4NgIxFkY-`axUfY`U|b}~ncnoYZ4$-o}1T%rzdI+k7i
zXVRY!7?4THjpBX!4g*Im{j<McxSrY#S-{}+dl%NuzW2zJ$Zl*mQR<YmKaSjf9JmU}
zUlUwC)L7m?8@2Z2&W*?o<;sOw-{e<J!)<_ja_4&BZXAHyX03H_F_4$E-gqO=J8)-L
z%>&+*^e-4#ck2B-TgkX8*((Q$Lsq-WTYQc6QE{rZ+&jR#2aKsIX3SUfzGD3cw;$pe
zy=znNu$%W>di}qRhxLqKxYz(LG`92cARGu6J53r7H-m!>e1y~1zkr8E_6sf!G=9-N
zfGi91L651gVf<k}hI3wRa3tJ_A8NQSytvQl89nPf2d;>LcXT-6i@ok9@eX-V{h92I
z|N61H{l~Ct$fp0v#$S)vK+Z}KJ-~yWwjnzsl96qa7v-A%7L(DZaXxA?J7qtp<?Pd1
z^4n^8)}13QYnGoWUsH5O?>DgDB`$g?e!N5Qai@PkzY)CR<IkF3(tnj>A^5NjCNn3_
zopy{d_6ncCl~qEl^@8F^HZbjH&nW&#5i7h3KJ`+IUG|l|tj7%|v)=1RkDA_65MphW
zPnJ3*$;X*5t&9^Kk9ypXtsOX98E2Zu(z<>Y?_o2HFUZEWCH~t&>^F2wxb5J3?O|`%
z(rllprEh#;XSOp=wX62sHr+l3x81+)S;at(#E0UH5d&k}8^k|o{rhCfHTdIIH-P*H
zVviNKtlWo>u<<Ca{MbelCk7`u7QMO9^3;3r)xOJ|9m^OtQ;+$HcfNOI1>biL8%~^%
z$2nW=b?<2A5A}yEVt2g0wuZVXXQZ<|#Rorhw86TlZy&bG7HddfnC~WhIKk0o`a85+
zXcg2G>qs93f3}Yytd-aRlOM7ky|&Sg-(~XATl27$=HZX@;WHmo`uD{C_O8#2y<TpJ
zw={W^eB>2)OuU-8@G7x2MV^c*a%Wf1q>Z<sQ)qPX?gy}qoFGPHyOr5_)C}+QoAKCs
zGdrzt<JO~AZeK@q)7IJecxr}OkzsY;F3Vy*wpdy9t;CiVc|2A6E!bDq-P7JZ(ANXR
z4!M23Nk58vRbRj1xfNbtCw7B)ijQ#Cd?vVMg@dyR4*t%^*?P{BNPOK!hmlOq`Bd#w
z<ryfpzkl6}Pm0%(+tHhWV~>aV!?=D5yapNFVi`wnlzTJ!g3fp+w6&VN&Llk1!Q8gt
zdF+3*p8+m2+w|TOj8k#Y`VGH1ZCJ=qJ+qU3)Q9xga_`u_V&+5^{fPcQz2)0wKOcBc
z&#IlD@qec$uk(yItMv79?fo)Jd)HqbTS&j(x!6p*wV1qkX!R#>(#2=5<?9T9mm2U=
zZjJ8q19M}Bji1_6kG){2@Yd%Y;o$3L+E&cIK~4<LT^Wp*$AHNa9#{vYiyZZiaB|^=
zYqj$vZM;tGrrYLX{?{Pmj=@vZUyI~sm_u%#&B&Me$U9_Kp2j5pzWHw(r;2wJbG0G-
z!>zaMEo>)u+u{4G)~r0U(_=cHG`SICg8R#@VSP4Z*Z}|UVLV-|hyMV40s7lX&6lI(
z*mroVKAH-@3!j$)i)876;pXWB;SwjOO!`<gvSbo#=Zd<USQmWt;L16NxxpsC2)bCv
z6q{!P$R8^^E#JYBlaFO{=7KR#-{#6iwJ*6PS*Z7P-OqbA?}@K;U-vTbyQA~YG;^`l
zkjEl@K+iVkil#ni4|xn7s~X>S0(e+Q-m$6Wy`A6KlR4kq#Gk|VWch7kO)6qR>;Qh_
z*%k&)!REr#MSiV+0LG6Qf9t^S)BG+(H`2$2$qP*00hqw+F0CzUCy0LH+8C^|Pq**3
zcjo^ixP1ZIp7>9qt=bWP9I!bX`8@t`ai?#srQ(%V_-ycVHoWt{!yo@g#t{DW7-R!+
z$Kb->@t*|0bYby0ygdtkoLOY6-m1Bxe6E@0@}=9izFq#a$PwHt9|W?@%1zHR|G+#O
z%+v1kZd;%A|KG!5<9TyjFjp{l1cTaj<~lH_U(MUIywLG!JX(X=Nqh$Wjt%foGj(7m
z!$Zn1Im#N!I6p08kXZ@l(E0r0;^(u*<Kl2I&q+SG^mJsG-yD+OCi&$b7@I*J;j{X8
z#}*ji5x2e1;_v?(<2$67m_IkZvodo4M!#exFuF3+VjK=n4aih?4DNm1>tUbm!w*yW
zmEy=Ga%v}&54f>oVZ6k!zau7dF0~n2{)&8K)<Eoz@#lD+b!>H*akda^UBmZtW@^-j
zd<`<^70XtQ?M-X7_`v12`S^QTuip;j&L9^Ryq>oPJjV667;6d7G(Y{tsQg=rq2a{|
z)(KrVj72tgmww`3i`XTNL48<x>2aUC|7+G1PpR&owPEMk@mgYrLg=@|!NmvLq}};o
zct-6dh;8$u^SHPQYb*nOrLX<sY~I~q9oDsHsWw#CDD$>_)|JS^4CXUAzNJO158YWF
zC!Xl|6f<jO&Sh65i>XC8yzGjd#2Sp>WTNl$-tK+#h+($KtILSwg|RJHR-c|!c}0Z%
z$YPDrN9^fi#GESjls(9(uoHXgDb3_QbUw6wApUea@uvxoC#RcF{{HIrVlQVDc=JoO
z*VsrKH!ql6)=V4H;hSkgd-ej8nZsN@WcV&Lx$k`FDacvD{;!#M))jSuGOzz3{HEjC
z$C}RZ>#5=9CB~ZEvqCRt)!^evWu|L(P;;*ILt;R6ww$gtBHI(3nWg@_lsjB(X2Bz)
z|N4>C!}~qtDGBFQSG0dPntW$s#hqvHn}}X6F40^2<cl@AEd@PU!B5$!w-dtv{>cNY
zAl7$q9`W;zeu~X3dE(;q9*#JG(h|lm+yxl_a|?>gYMk+VO79~7OyjTRTeR87*i~O?
zA7ej$s(hyW2Q_wXw6`{ZUjpBvT@q1!CUnR{&9tW)O_LLs&I-~Va^R5KsNtCpJ-(cx
z`gB`G^?@?*ou7c#pH*MU^^ct8UFj+VzAE9PCY{3-sUa^Z&By6I-HIPo#5iBEvxPlr
zCHOu@`_1w{5i{iY6-)+oq|0B%=a|&IN_nkA%IiPh*P*?c0~`Ds1aHEf>*okDhlo#i
z@|0SU$%4i4#bZ<a4f_%=IAJfcD}>*nmE3>X`MWFSyYo>G3OMK=n^$Q!{td-<qD#J`
zxc5-0iHG*3pW}Xf$6Le=@JxvId+;SHCOyP>UAUS&_)^&G3O3j7yqA5u{1n*Q@TXUD
z4rn?qM6yyj7_tvgcOl*bUebO!d^AJTeFO~gC%`E9WdG_0HtH6{|M(enl5J4WoDlB3
ztlP-T<KRqj3khUpA$1$}A{%AzX+mzUzfAQOGTTm!v0@t@N<DmHjP?wfosHb1-<(EA
zM^4v&c#$!fJkF(~7HJ*7Yet!u0(L>P_=eDFw>`Hl!Rof990J9+XfNN$ekP1OK9+CA
zrasDf5BbWk&uIIs{!*15CkE2R>+A4q|GMnhROD8_*Q2vHlgHW9X7GPRVE@)PsOxot
z&vEuH%-_RP)+E-X$hB{T7ucH}`i(Jb{c9)bJeBAHoxK7tqEjzD&|i7v1@<xre2XGE
zymw%j@D@Hibxq%zLh}E<48C6T=9CgEySDUee(ZXg<WgjPe-C`cnWanFFRj-4T(5oo
z5Un#gecDfLpp75cBdT`#_iwGe$6WWP;l2@*h*erQ%r~OkvipnJ>vWY58}VN^?imrJ
zhE{mh@-=~bs8eR9T;yfGu3uHOrfF5pn(B$e7D*m7tqQF9q^k9j)UwM)zOwNbBU1B!
zJ>r#RQ%7>{(TLQ>UyUf=V9xBJR%JkYBxvL0AF!_+%!k57|GEV+aO>1jbDk?v>|ome
zA)FuQ-JQ%Y;aYfBjg1rF85w?fGV>joeCQ~1;|*e*rgATbnwj;(&FK2EW|YoBSFK8o
zz22BvJBMX<{==EdEgLdU|Lk+jzc;+$#orHf7A&-e<y4O9xG~$xjO?(yRlU$w`AC_o
zZe8;a)N<Kr7e$%^)apckJW%qxf<>06>VWYK{bwsPr`n9HFM=jJX!m)~>7RL4Eid~=
zy#rl?CI4K2emeT<@gpVx=jszTOj}b#4PJgvKd`igelx48p;rQVQ2jp?%cEFnPpM!L
z9D?=u$Ej!ilAq#l@X!MewLYHpIU>&o<1lm8O>1KGpSq!F&4H2^3$B4y^fx-SX4;x-
z$gxlzbN#M<iL+{;%}#jlDDzRYc%1$+K1n@$j5#7Wq*qn5Z_UOgvU4JPU+%+a?>tEC
zK@0F^!#~B~wia1Bb(o2*0L~tGvzgqSE^Jtr<6DMz7avN?hL_Hl;YYET*^K>h^rcsk
z6TQqyKQv`ux+}mK4YW=8(1WOD(}kW{2rT#rmZBStQvZI=qD0;!^QiX%eLK9>FLTY&
ztEH=SF_$HGmUC}Ca4sij9+~!%WSV4x-g9-YAZ@MyPFFY5x2x|oA)hB9S9fBwodoT6
z=62i|#NM>?8`RKX?8vxX^T5s3;Qhd5v}1gc`&oY{)vavbS#qFY=jY65*}9(R8TnwD
z@1tuq?@d<D;AdLU38gb;Em&EWVNZ&n>qN18wFT`deLL;otd)%8I5g83UAU{YE|5>=
z{vQngl$Wa4+{`(@lisdgGl}o1x%Qfq<l-GS89CRCH-{d_r+X54dz5)vL{4_8JteY`
zGlLIe^ZN<Ba`A%tvU+|`M#daq?3w(gmTlzA9o1!=RX$yH6%K%l?%Cfv@<Zg5aQ!-Y
z?}xxk*1Yc>Ilwo5#ZK8Rlkh{<=%&LLVXNug5Iph}Jid_6Q{Ob#O~Y0x`{rrnj%=IQ
zps?{~Me4b~NcXMboeTN?FD9$=Bk=JZesgX@XFcC-^!Fjp@3g;n<Yr<=rDuK&-9P9L
z9#LFo&gu)7G?=WuF!`-t2LH0DK4^`odT@vtz0k_7`h4Brv_JR-Gio9KMYDzcernQh
z3x3M8Pkr8u{#@O++8>;Bu;3v7ALRcfb+@$NVvVZO^Ln<Ed!_xATgbs1UC;gBajleR
z7EbzI!9xDefbIvmp9?NKtLn>iufDFVtkb@%?_F$#E09l}v^{FUx5|E7^{ujt>+0LT
zRX4Njr}h{6-edh(!Tc61qZj;5*?+J4n=--kH}Jui?JxGd?;YN@g89Q79z6<}cA8N+
z;;mf9HQE|o_28uE3&fYd1GXU7M_MD1Te&%(hcAP$<nOGJIpV|mNe2ovwx=fTE6^AO
zyT&f~PY^qD9Q$oIcCHls>1VASx!{(vH?hSXth%M_mbxp-rd3?pcbphu>6GHl!Fpxd
z#&^KcE#0}P=gO@M9G`wOISDpnJZ5~I4}9EkWIcPM0&w;iaC0Wa=xp#=Qn#YLx#Twm
z&CH|h1uM#)<Lv2U;0S+8Uo*04F3&FbOV5I@AkUT{x9}a{i^%G0Wu869d%yWh@6}B!
zJHUH8c~3E@nrp4*#*aG8*FVynJHR#RI65EJUE?$dQtO8v@*uyuueF>#OmVgy3(+ro
zr6g;}p<3*%MaZ>=GuG-=)LCD_c_qzf%yr1xzWoyvE9~p+t;~#GNS;InvZVHmb={<F
z!(Q!N?1JXGg<OQL(Gt#J4-7M-=OzlvD&8(ED>P}lZwh_Aq0FovQbbKY)-Gh^>I<Cn
z4YS(5#CK5Vq(~RfYbhuzj4!&9PX%?$uHd^X*WxVgy|X{L^1?-_br&xB)0N-k48(6P
z`o{cUF8b^Fzg{#u&wTqTJ|Euq%SG!r>+loqr?{_s)${i((!Fv%<GD9$<DNz3=qEa#
zYTd?X`QOev@kI@si+GH<{c7qLim!s-xo~ul`Yz%VjjsaOjxSiQF^=k5P*avcE$f|Y
z3P)T1y#)cjIqy3M`$tZL@zg(wj)NXQJ&Zi^kYB{QTcvi4e;@4Rs~W=ir&;Efz0|L(
zqunmne#5iSq^fIvW;6k=R3oIAyz10~sp<1Mpwo8jM#L^xm9vjOiGRX^mkhKl)czek
zs}MXMM}O(5wW9BS-AbOcr=lNcwWX$n=j=ISp4xL6@%sAQW1ecr4m;;6yD}PGXqJI~
z&Uu@}j))dJh#Rrqt}fHH<pbB2a}C|E?|#PEh>Ys-QpbaJ?DikbO&%-u5Z7XH9xi9e
z;#+Ix!@g{_jeflxeLKu&6?=5>kz-p{RggIReVn)2VNZ)pvphK`im5|3(i7{=_p)A+
zQ%Fo-h<)m@k-^ya>8p!9#ff5S2hwJ5eq~I3yh@y(`mvy=hjlf_G%X&AY=3pX`ERK$
zCY}W>idouMS6o&EKL*W^NTJ1?gT@JXmVNki@5FnLgeG+qY{&Op0&I`rd#<bqaJH{0
z#b*~OL^pVq_OVB=&Q`subbIYZ)N^s$+s^%Wzph#p;l-oqvl^Q0XI_gQi68o6#AJ8k
z_m23PJ3WQe#45JfUu3lT$Q9eiJI5!O*v-_yV9lK_UOB5{U0d-f9jk_Xa^^JpetPfG
zw{dPP#Q6yZI@#dzSYgF1@seS^Q_a<YG0yxAPYfQ>S>neh*s*%cbZS1QV~~iwr@vv~
zcOq~XA%_CUp$CYgT8`dbQ38K+ra}PyZOEJjM@sCuITma5V{2Bl&$Y~~5@_q;9eBri
z2fw4%uc+R&OUSd}UBkQC_JW)z*VMHyc&D(e!T44ukkJp!UU0-uTPu;9*3s0ieaNs9
za9fn!_#`%~zP<4DLtJBB7-e2b?UJ7e8ZXu!UNz)h9bLRGJ$(xLK<`9*)|Ahu^#OP|
z+6yiu2c;uvz3l}rLDp`q&D=jU27kcNhwNFoe`nA7s(pE9ELhq(wc@hAV;A9*8`cz&
zF3`)^q&M6?+AMz4n^B4%g1zI6Qmu6hN14Uc9$!4#kAKqtLcvw=pk&!Ne8j<$Bk0_j
z(Y(tlr;Q<}x@g$nI`xr*$PP!|l^o>0Cpy%*_dsMG?RI;om1=$5fviYB^AgXDh~`qC
zeF)E~rq0N@c5L|P$mvEdxgQVf`dt^9(Ua<ypYHZfb=ug8j=B6Idvo=L<~H(Gm)?Al
zx$S+{&xfpsw*J)f;MN%zn$c4(v^VehzFGYuygC+rC@VWFvirV@S-t*>cy`5%&as}c
zRl7@mzcqvQpYUWw-ly%|L)Fj9(>wjY-+Bf0z8XeMysg7|-xE>I(%qhlS;0rhc|7m^
z9ptB<|NieRPhSc8-gnJ7a<s<w=`6B(i(GbVT;vbX^JU%%&W3)k-?Mp-$J6J5-+n%V
z9CpUD!&A_ynhnCiztnxV?DQ=&%H&h4#>dzQ?-XIvIA98};}lRQnfkV#@SJMfyb}V}
zqrQ$g!LWJfK-fe-Y+{}Cw9J-mWbkv^1E0X|^}ZPw!A`Wg6}@fURSS-MiFx3$CUky{
zZ^gnd;Jia0In{ftoW32=$krC%yq{<9VoWKM-^YGrX}kZATX&qPII=F^ELN`bJie!W
zFLz0><d0i}W=uqUGK*^qxmIswMZ_<jRK<~C$@APF!u=6Z(ce@2uUmt(b6Pkl`2+Wc
zaxcw8-QcW+GreD=ze)HSf8-h0InQKpmiG8Q5ArT$#`Qe_etW4Q{gF4Xv)ANx-o=Nw
z<-_s1HDzBz7aULSxt<sPf{gpL85@}g4zu36XS2p4J~=J?<CE|8jPF#fCgK0tx;x93
zp$93Sv(P)vdA}F@2l0>Z<kNB$Iko6kEhEf3?ERKL0k65dtM8w&HtfXyalO_DzJF#{
zw_k4;w*QPXM6V}K<Y$~AdOh-XkI8a$HR?dLVK2)U&bNbeYH;-RK)+QE&WH4^8hOt5
zqxRjJW2&1a`Rdvn``4xQ!9DOpFZ{3*et<8qRkX}bAeZ*QH`OLQCk5Y#AJi{)_x$<H
zootIz)9{61T;n}iRlhHOVe9S@=Flm0<@S<)+4?$jZKwZ*t$E(Dvek1|NnYna@U41K
zzvP=S&uYn}HZ^+lv+_3&g*U+s^5&5Cck>6~h&^HS`j-mJmZ4Y8V;xHwPhTB0k`7r7
zPVQ&y;BJ=9_cG3Y5uA5Gn~#V^pO2jDH5mtYvZr~%d-_@O%5OuTSt>X;(ti!Vu|XV`
zj{h;wOTWGf_>Pk|`~mBz;MjT3xNY<D8lO~OlFMqphi5;F{^B$7kDmEgp6LY-@8N@2
ze~KsR=9*}rJ#zY9`ud-^E}Xr`Gk@Usr^b(Nay?^T#@Gde+dle3{xSHzoB1H#S1tI!
z0Pibi>8NDJ0Pnv@E%|PEpE!`tAhcM;Cxda9)~zi2e%+)p*-4HPr=Yf*;eE-gM*Q%S
zJ=LsJI53u$4!2K*6|Z3pb>5xEyAKS!TWzJ^ZG!KcnU?`R;(OVB#P>tUanhc361*OO
z$2Y+1&3sRS*EhiHli>9Y@cJZpeFMB+4vn|NbA=b0cdXa2qahdmfm(;PW^8AJ8PQk!
zYKmxa6Mf4X8wmj8ZqJBFy+wX9YbW;8r7MOpPl2@t9iDab@cz2xWj(8k%Cs)F(6+`I
zz+Ui{<%=9JzQ}0S|MCI37+?-G^J!ro80JAa^Pq)!Ao;0zARDV>D9<@E^sPo@s5MB2
zTH!h61JAa2ZvOF)t($+Wxk~->5l=B+H4n!UD>d5Bnb;GtrwlXw(w*FSI-d3$q0e@{
zyV>7q-hek}zB~Xurwz;(1Mjk49ttpDn!s%{^JD|_<N<i4(cu-JGf&(xKS>=K@IEWV
z_XErm?3Bd#Wt1L=&-H$QJkv&>^be22=jva$V_hxVP?yG?=ALl3m3vN~@a6{kdw~92
zyl!#Y^|q;&jN}h7;n-{~V!nOYmP{M_gQuGvTVfWq@bH_CMHgkCrdqJz;jqn|{jDh+
z{kSLlii7NfGKb|}(d`{tdeqpbg1(lmg}`t>V|Qh!AKalcrgJXImn#}%m)kp4cDec3
z*3-64aQ)5$&~TscqR|=XpE}!pF8j8kT)Vv){q6hIy+DV%Zm0iX0dwNIAbQFU<GDrh
zkV0Z{)#Z_|ZW?^kmb-AMU>U-_i?KJBuy$L<)42g2dy|-o&ohpOerq-RouzMll-i{j
z&~ICw>pl<78v4Df4Yg=CfWI97$ed6{4yLK0_^`73?kE4UFT>3Eax%61E#U=y>MhGe
zI<R4Wi|fKgm_1ei8*9QlvJG3BlbhCkCApSYpyw5PW3LqxTXr#f2z0}~i_xvFw7FNo
zy-M!c@lNW+s9mT254@Q0RidX;KcD?!a8r0IbXeRCZ?=hs)M|f~x`w6Lt)2r{nZw7=
z<P40cO}&Wk=MK#oOq;*w`M0pOtESJZk&IXfJ6GZn;5?O@e$;o-ZLO?L)g{EbJTUL>
zYdGtm>r(kuhH`en$Tri_beR2fG-0R#HO9nVqqfSM)MtJJe^4KF^-hxK`gwB5d&k(Z
zH>tz?27aNF<gdO)ZIwRq+&bP$&A6B|&R?Z}mpAl1{4LHCz?PpN$D<Y6BrY|{pK3m3
z*rx(-rk39Kz04)Dy>_uDO`r=i-qqBQSbE>sxkq$8fsWS2zVfNz=Ix!0CDERTu)*3H
zz?mKOvB%v3u6n6Y`vyLn*C()d8)K5MfqNI`C&|rCyq22rI_EgQfsg3E;lU%XL6cXh
zWu*2shTbgl;+3n1oOWTbk#T~*Tlr)sQ@eVg*9qi-aCRJ=ab8KO_PAcl8wucZPEmhO
zYu7^7=V|bj4WEfVPQGBVkA3A3;=l&@1>0-y6f5>-zDMy)$v*a*Z;-q8+LZ%5!`@Op
zrC#9ed^0uu__M*-tG^(|vUqN+75m<6)Il_6NT<#v(B7`FjN04q2>Z&U@GrjN9Q&AL
zhy`5}@YY~ji@wnM&~f&?_k$nN^f>$5AM$)Ra^h=zf4M8QD}rpR@3%(f_;b$95%%D<
z31k_(@_E`2zs=%#5B-Qv3Ht73E}VdWjz4R~M2oi=TOVUPS!|Nug@;0~q-OLoCnP(L
zKa0QV5i{#8a@$T8gKO}80-h3$`WUBT++5nL{T}?@2{RrZu%gY-f8W1D|EY{mbQir{
zT8kH)_My4?*VGJ`*DUz%EdBog55g-B55C1*8O(!!Cm70rAuIY=<^T-TlGL2(g9ouM
zCx_DSN&4)irld1R=(CmDD7(-b*grn)`T<<~y5~F8nI%WSbAvr=hsmAk`76g)*%{;<
zh8lD$*S4+iB5>@T>-bW!>yz^ZeSg*~JKVWg1LYwMjyEu$Bj<qp%G2~cz9;DDq9Kp$
z9NuWdCD>-j7tk3_HZ@8@<b>%r`;{4vY_FS_etw~z_h7?w{OnH$rsG54S^dA88Z8$<
zi#wV!qu&i;OG2M=+8`#mHPfbsfSK_DeZSmI9wzh3{pj5L5H)r>u(#+r*+rZ_Y1^;{
zv}P*aGp|j3B&g-BHpMrgnYw-fzT40C;k#`#{5(BIy)XOad%*C}Omc65SMA-|<cqpE
z2?N7gj~#EIZGV;-<=|(Z&%p&5!ZSMVv!?;ms6u1aKLAZa+|xVzY1hS52k?fPG8~*J
z4sdYY<#&lW%tMY;5?hEJGQI<wi(~U=O`|5|Ed2lE1LFU&%oXcT0EZc0U%Tn=3a~@W
zaP$-AhhgkrMqhIJO9aU=^u)qJVnLv{gCo`UBfrB8!ng7Vbtal{+{C>ma2y8LHvER}
zA9r!3I8L?E!8)h@Tki9ci!r`lwrs)C^Koi=<DJY=FX!D<JNQqpf5@|L>;oa*4d1sY
zruqkxLCQxA-!~%GQ*FnWFy>nLElj(}tg7${@B~iXafqg2`U?;6SD1PTv~?EWtI)k%
zINfKG1NabbvcZYq#C}Je1J#`~t99Qp|8$$bBU~UparazKJMeV)PT<*>=I2)(S`D5*
zp3?WAm+(7w5X~-UezZ1K&SIUMX$I;_8}rz0>brkkI(|enZG|Q-Up>QEx8IqbUmf_)
ze#RJ|-6uO7wfi;am?H_%1Dd7ZIX6d?$J`2xdQQ)rKR*)A{21rZtrgtfPMxjo@TTzD
z+T@)jT)fQK?qF}Q1^ny3;hsBhT$o*)IPbv|t?-L@!Ns}8qyO?_x@{;fL^(-j0kRDn
zap*ED8bY55m7ouJ6_5Mt*b3ydVkKk?J2uja{ZDF}n_;&eIX1E)_I#>^bMB=xnn<87
z)NU^bL_)-T**@0dY;#?x#1KoJQ9l(OuEsAr7xq2c@BYQeFP3BPzMt!^J+g+rYjUkv
z1$7IY`{YLHorV%(nR)g_^v>nES5NCfPY5%IL+Jm0<Vy`}rflQef6Q4NtP_IWZBsJp
ztbF!W#Hx+e7aows=Ij{vKDo!?onM`e^HQx1;MnBk0>e9RjWPX~l2bAq9&H$H_mgKp
z4P(_D_{S02A1wFa2O)pUV;Cd<4YsV%Q20gTCWc0Sg9_kR4)bI9lS4!8q-s38HOB5w
z^L09==lnc0!C~ls0{zxZw&O*Ncll%!SKsC6S=Xq2YM{+SA5*T@iX!m7W@S6|%@@{?
zi>6$y5^U17TzBCV?6Qm27CCkJ{w%zW=;eZU%>cX!;7!AtwjaCl|Fd9Lo{N6~X3;1F
z%pt)ndpI!H0&^xX`+(VjlXKKo0%J4zU0!sS_2hOn1H1COl-o6_uB3g^z&H%}MXo0Y
zkHZG<y3T$svU~vVA@HvKh3dC!99J`r<=|cW&%xucvK_pxhX2VI!v}^eheyxyzvWGz
zchX&GR9|aTaQ6J9%{=NZO!JwZPtTQKp5-6b2-QTqE{}G0F|SzvoORAUuf$#3ZN-EU
z?^6R@#?RbiTr)Z}Z#kO+eO<L2n7^9>39a|Y8RSdr_w8w2=)8vg7UQcIKAmS+ZzYfP
zoC~MME%*hmV33SUkNr8vm)V-h9O|Gi_2K9U<u5C?$fa$1{+t`v7{<l<6xWSmT+cY;
z8uO`fp$oTZOfJkC+fsPJB&?{7-!O~}0*}d-6XZ-HPaRkpOPFz;gMoEqD02Or{MsZv
zMen-LEC0wH<GJyD8Wwj9n*S~hrF*^2SaYwM@0=r=9^YTSZxM6Ly!$kNoQ=Kxb<E29
zkMW22%&^Z;TVZ(3LmTIK=Re+#gQu6SCYESV%nbA`ycC|uy0ik^JMm+!o@gN9rA8t9
z1fBaq%&o?bKdRqCK6iMl&*tEtjX%W4A$jBS<_u(n)7Qkx<n9mdJ>u#X;>jB3@}r*w
zk6??~)VyY%&XkrM85IT&&2z@L%X#-3(mTsvz7xK_gSx2Vz4SVpmUk}x_psLYD*l5t
z=7n5Cey5#$0XVZh$9JwtPVt8qzd)?n6xO{LI1@OF`JN)~E`d(*0=z>`5V&Qp&pPC#
z?$lgE&HK5;B4Nwwn3~p;_D?me3wxh@4xhEgk1jK#h5e)AV-?3I82r>)=mCy*nFDH%
za}}LuZ2D1~A97vqurK4>NKe~-;5o@P{WjQM)TiWTHS*r(+s}P3pAOD0ens<&I03z*
z=X<>C3;w`0{r{hQD?Zb3Hr}V>Go9FCr%pqWL2n}$&_h2K^>PEDNzp{1Sxdj8xyO2I
zuO(I!A1P=2PB3e`t|XT?ny!gj3r*OE$GeKTh8<IKAp~6tFT*CMxsN@`j~~y8wI$9{
zeYvq&(nZ{Q5N?bm`=3qc_CM#=P4SNArgX0N`BrRnkhX043ZuU)Cr<P|o@uhoZmo-r
z@W~FYiMRC3or|sWbelAv=vnMEo7|YEcfgl;$p&|W`AIb%h1*Q7_pkF}A49K3ua$1?
zz|1(`UE+(q2Od1aC$<scQ}NLo7k)ZEnwTQ|(fACpecbQiyntI)IA^qmZz*y7>f&8}
zrtogoHIt}0m_FYX`yS`DW|Tf-GII<zENfM|KCrdQU)Fk`9V-!UdVGDWklV85hNyWG
zz`o9&r0+NIq0TfGKCm4<jQ?AEFY1TnwLJ<BRPQ|mj}OKL_Xo~<9TP#GJNR>H+JlW}
zFfA?md>`Gue_bW(0B66hPshv(kK*~kbalrk`OuAA(A<<CbP4A&ju|#4a(mE@)||RF
zxt+MO;CH4+MOSOh^3%q*Ho5$xYn?hIT{)hZ_^c}@i0)<jTHz(pO}y5>E=}9o53Z#)
zNN#im?=beNaOPTg&)12slye}dRn1;pam8w<oBg=j>B48OJ*E2hHdmcqP8;cUZU2)E
z1H54z9!U407|dfgE7moAR`2^?&(s+egLopt$x;2VHY-*(8=q~ZVc!AXS*tAgql5V)
z9DG(C=m0cc!dm=(Eo&R}2@^xEvwXwEkZa!t9HUdUW>(9l)Whp(hryJl>-LX@&g`8T
zR|B!`1{ou~oTVM>;$YfUa2{B)QnZ^3?dBmzRYMHhEO7!I-s+e4!XMgC|4;EtmI2=U
zwx&USswR=HxqYVSQ?jaq=TkSES*a_`TJ|2qeOw^;s;(#AQZ(4@@pLZ1&$xZGiQY<k
z31at=JJg`>xUp*sG4tT(cGiM-r%+crXhtQLq-9d=z_S{20(+|J11FZ5wW^P#wp=)l
z0!IZtebH<0XYruVd|PYXcKUJr@yhkqT1E|3Y>k&%#w5EM?Ehxn<B3`KWNQDgsSuw4
zG1dK?`Osg^K0??2`YRoC3eWgrg|oSK!`?X;h1bu<?v^aH`GoJEebHZ;e&I1)k1rjk
z`|gq<PCbbCzdkhP%8xsO>G<ES@-%OJcafdM7xzyFKkl8S)Q!(DyT6Mq<|x+^T)X==
z`>8~wiLSf5;;HZ58+_`ctni$gFWSk8ubZbXde3^QFfTmEy3A;gu=-ofkDASPyz6!o
zzvW5lL0@6_C$Oi5g6uD@HvQKdvpZA@yk=})kY_{m!#-dn_Md(izV7lgd~Te40H3a6
zYu{aR4Lq~(Y`wV_&)B~3=D*#lHm=V$yW|6V?n@Ov@4`R(zYFsmU=H1P-87#+ym<L?
zJFZyQp4;vCxR;s>G(K`zsl8xUzri>2c=dnBzg2V3xCzUbqYna)#&iepXni6FAwG@v
zz~gFay2as}(#H-~{5*sVYaRMOwmx*P*`{}lFTAy|V`kqD;m+yPtoA(DQc!V^HDURU
zqo&ntHt{%oC7K9VA)XN~1;@9@c@BZ^5dA;RGw|SM;kSd|cY<@BZw`O1e)&L4f#B3W
zym;9Df(G6#HtP!%bEcS-I~m_UbMFq`{U^SQhP_;%@dbh7Mg9+#tAp)Hl9^g7Kk#O>
zsm_$_4vH61{Aj9j$f4ssLy04_lggD&5+l?avf;-I+J4!L%@x_2xVa*kD74P<W)F5@
zXI-0;j@b+S;Oh25;-NIw+ef!-y?eabb=8=TIf+UudgWdAQ?nZ?p87aHJg5J5?^CID
zzNfxPo%u(Zhh5&PY2<n26ry7d%QH*Abi4hOT}+G@ym;lhil^o@1fRNbeR#I`b}%3R
ziuW%cr<!l%bM5!c3VG1e_M>+o^SY|xTXd%|{s8u7X?p{DW8wvLedl@f;U4r>{YLHv
z%(^2*oXLkSll0UDPLt;mE#e-(+hzB=5#H#+=G;BT8?}+O3G`eOzC4;(mO=glG6#P}
z0-2XcWyW?(A7#vm^`7X1r>O5Y9(#?R_s`&L8TKLTfb$uXOx0WQ#O;<-L%Wq)1gfF!
zXZ*;S)iv-J{4qLlmlglut-P2YS)BMsll&RyDqha{id%{#(=wv$U6P?9_B?sifkB41
z+?(N?nbbhttZw?$x)L;BiiVeiPwJ7e=PXUACLYh~Y^4>WnZM+au!oMzP7r2&&@&y_
z1@&M1Wk1*M_t3vLyKU?RW|wN-q4RLIiRyn*%a5AZ<dnBLW9Av@IBTCx_q86|U>9~0
z+Kj(@C9>b^i6@?M_Uq_oW2(BwWGkP1bYg!-^bg%S?=hR2Fw_Y)c~#2I37~%nUla^2
zHN(u=bA{Y`xo)jo#pr#_<mDVg-*D=nfq(U>@sv}y(?Tu@js!3`IY0LFPQMRbjhcub
za0Yjxo^wukzC(Lt^tSFP70#M`R<7Z1Vvc}w<^O!zhCDc4H-yd2V1r1E@y_xO@Yzk8
zli)fEzoM5?=Z}3W_4F&bue<^AA?yC)6nw~fFzcIK8#~PG?)F|COHg}Ncs>TLg>!Vo
z!_;1N&IRo$PS=^eXaLvJp}MA|$H;t&B(B7VMq3}DV}Ati-2P^YHVepqqb39R4uS8F
z;6u^&tN7PX@LWXjNZ-z;ordu-KW9)EQtwmWsrvAoLh5~{z8#+Pb)GZGuf!gcyn)|M
zngfi{^0Yep|4<S8Z_aDf7=Ob3Vss7pu-!53;0&-6E%H%WQSpy>%g5Nj!{OI{mgb%R
z&hyCPWG(NCXVS8Tv&GoU{D^xA^iB4VZJK+6Py8pE7k*>!oG@d0*ULJ(KR7G3{=V5}
zMZp&(BQz(Ucn3OA12Qb#1%42&!uRQ{F+2Y9TdCbWv@M*x3(j3$pT{+aH%jL6y!IDq
z-dCT$9)MTRyq9xzY&v@nmo{nIjnN*#p`B{JccX{>)4)4<y{TR2(~KODe6_2&^)|mn
zSND_hdJkosS$}wvX+5Pn^8M?E#`+o4yGwGUQ#$+UrmKr0E+6k4=7}sHAzwFRy*8~w
zgghCMplwIx^Mi(qt51(imY`R!<Xp)e-?<|hq}HJ7*M@W!?$Z}V#Yg7KA07@#Un}SL
z@bKcBz@7PW>$d-ky*H1KtGe=i_o*t$vSq-tjc}uqWC#|y2@Ud~grFnIQ*dsGha|+w
zMJ34)2c?rXW-zuBl?J9L-En~vf=NHg2InHBdF=!{ab<GJ1_$u%z8)HqPj}zzl4P5~
z>Gu*0SOOcp?{8OasU*vW1p0pN`@HvuK2@r-&)#dTz4n^++G}4HD(`){){A}RYqxVR
zUZDNhGUk(g!ee{A*h|4sN7q#L_V6)gc;gOMVt1QJkaJ(Dd43sL+h3p4{(0SB$=*h%
z;t8z1o*RbRqMi6DXVzbjO|h8VfS|QMH)T(1c^P@EyD&Fh@5j2oGr!#%P2JQBuWN4z
z<lB31&<A}lUt{9cf(^P$SM@v;#E(nWvq>PQkFj2Q9;$4AnZ3QXzb@(91HFA{@;~^@
zoNq_}%=m?iUC7_N{ocjB)!4*a=(7>p$llaA+!NNf`<>kOtV{mp&`+UzJ@WdgnqUl_
z)YnGa8sxA1E!VdC@)7#D92pNT5!&x+Q%y?N@>Y*}n^R77;+s4*!H-2I+!jv~V=&YI
z=8)(A?V+cbs~rJq3iF;|YU49N?A(r{_t77&UZ<YPchK|QUn{Y`jcQCdU)KckUkp_K
z?V&dEjQ*K9+H~u@zWb^D8r-Vif-Tz93h7SlK*)ZtpKx_t@dx?GF210;jlIyx@ug~C
z$}d*UOZn}}kF-2W%t11MySonU1ukgJdePa<Nyv!QncXBYm~P|^zCueQxNYKd4f#_I
z#JqQ3&Al4vPGo(&t^eMo{zX5!t<0D@-dP@I|7C#3kSjy{9m`{bbtq5O4%YimUgF=K
zzsg(f(f`SO-^MyBfRVK`a3{>fpt-x^Z&LnB7yHo~Q~r+bgh@W!nx{Kjx`y$T?x~fJ
zk&0iiF9Ls_VoiLWJoPX#M4xX~<i)sX+WNwi81pG~vgoj83Vcrvqhh)Je+y5%W7;*3
zt@t<OyIH?C$-7&4ZX%)Bo3z<Yoz_#VnceVUYHm|;S;yP@l<&j2{R7S1wItXIiJhz<
zwqB%j6XcfEa%X()^luz)T2<Q{3H#4S$Q3Ii&g2oJQeJb_hf{fz)S^4^@>M#w@!^5m
zR_gz<asJHF=DtIP*c)R^)1htL<z!Ar4mb0eYg!KZ<XSKI(q|4+H=VOyp;!U7$t`Pd
z>5Z(7^m1<V`5*FZpP6BQ)BpDZ%Rcf>Kgs7zZ%oTAt8TIF?zQbE4Yd2=hH1<8neh01
zSAFBKYqNmgYF2%vSN)UM`uq=VU%4&YfMFZ82h{H7wKv;moLPJR9@=j+<Hk4hyjeK~
zAEsW^+LgUGlVhysoI!b>eaz>n2X|r*KBj0O{L9D#gpM{pq)>E(h82ueLk_eL4fVVn
z`pM5s1ho&Axvyx*GxV(8?(Fq2`xx+7X&E^`k=smZI1EpG-s~uxM!ha#nUQ;Q+N<#s
zRi8<FP%kg$Tm!aoRhYW~$ww|gR|e3jk|Sl2&QIun_OS1+ztfb~H#S{cwvyle;od_H
z760&BO$T+0o;&bbAu`b`{rzjzAHh~uduqOx?U;9_<|gm%`WpPjrRL0?*E2TvC-ozj
z7A@k=l)%*ecgbH3n9}GNzx4aayzf5fw<n3^N3-X%=jxqkx=ePir`k~`UVJdRIdUuK
zI|{KqdGF`QlZ&Y<^&+w?0{r>Y&FYAJI`D{mnosUlOmN?!wey#m<)sU3%rD-|-b^z*
zUP+9&rlPQA9(Qle3!Bnf_8)Zi8C!X|&PuGB%AHO499yWBemA~>DK)daZQonkwQcup
zWkIhl`d>J^a{WC^OTRvS!j{pG+210|p&zsmJ*sadKQF+YG1JYgX4aWt6ug2{HK~O|
zKDo#ZEASO>@k=9x$OXnt6p%NBjr{`j*$v)1h4%v1shQeB%yiaXWUOM3y8{>V>=9}r
z<k_=iE6C4{$o9~hCf`}Mzvh|Td2Do^ecJTZHZDdEP_x+tPneBOoAEV~`IB2J#`zD*
z_hyfMzx>^=anDi1M}Qfabl-Rb^GctKBZb(^pNIZ6era^7nUw%f;i&nGGH(rm`R(xD
ziM`Oy;pan7!GwKwLg(!b@u?_t-cU&Yz~{je(J98#M|0LNjd$5!Y@26h)vWMK@1%zD
zo@rOislLfCt=fPOl*8R_<PsY8Z#mO3-h?|h?`ibkdILEMy;e^d_r1*xOMS&KtPf8l
zxv$}K`hSZ3|9hX44%vQ4{B?ghx}ehkiN2eS-`gCy2{={&7k*6SYQHaWDX;-2w${={
z;1E6iJhQ{$UCWx#8hZ9G!I5@aQ{wX^_hcoq%|Xp?<IBwToqnnRGI<j8p?j1oxhL+F
z^s^6-F)!SaxxckB(5|~h>fr(9*dn{*g*oMitMK<C)LV}b3uywTTKKo=YSUMR|JwF@
z?lC5pupZv6tudtqU#dJ@a|`Q~9Gr$Q_bbvDcJ}fb*3Dxl`b)sAG~aylHN*PW9S52_
z+2`!lmabf3O6L_#n{)4mtYziR_b%<c{;AuJ1!oi|&`o;3fO9a!ZziyxyLb!nxF|I7
zI9F3o{z@k}Mz@xiHZ*!M_@Fq<dJ50*OOfBjm(8Hxf-7cIr@Qpams3MAWNvG_l68$A
zbOn9f!yojWU<wj>v|qf9^QW~lp2<6A{P;_LnEOq##?)R;JyY((y9J!Wv=3jwYDC`&
z?+AC8weefoRjKth1AGLpa4X=uaMgGHwx_4RMDj*`L|C7ivl`~qT!&o-59;^f{+r8b
z5bfH|Or34tr9bg}<P141X`T;YYl)|$^butY@pkzu{X45!yA6Rrdo}By^Lwkq<N`JX
zkkOh~=D!-==wj_u!#CpD`>{{NCk4jrZ(vOd9z&nf$;y>b{W}MfbUn7w(s{!9BYr%~
z1Qx5_U4T0HLC*fPvZu1Dh`ONMNA*}?&YYfE<7V&9Ay>c9EMG9uU%Sfu#cf~a{g=iy
z<UPk3r^~&2^E$seeObY{%G`Q#bPM2-E@Ce@2$QNmqPxo{cOZWb=>7!BnwQBxi(JPV
z&WRo>$LEj@EgLdIZFY0Kf2U91=b|Th6em2^y7*uB;ZbA0B+=+on}Ph4U0;9j2(m8+
zTg8j|Ki0b13Vmy4i$>(>a;8%;^TLVDo8eAUY_}r#A%rbbfLt%5R*<jzeUS~y9nw1F
zoW=4}yz_0^SeVBRgPAqemh9ho7+RJ-bkF9`nu~Kwv9oGfbJ`n44-r$pxFbT$K{D6U
z0Xe)Pc=3STg+8>q*vj4rvhxnsVHLJsIj~gIPY^m4z|&<LLhbrrZ3^hO5x!CEc4e_2
z-zvKwUZ@~Hz7<@XH#Tm@#x0H%24ZcmlQ$rKy~4~wZtrjW2r>!zj?K{0h>Q;NY2`Tb
zTyh-Qz5i|QLD|GS)!yXy&4X6eg(hAf_5WDQy?13MSa<*P)MtdZTam5G;aEAP($;bz
zmU!YhcyVPhI3P#D<L0fq;yIm9<Xj}bC7D~d&KA<Y;!+9XAPw;Q-HZ|8d8uF8^2h?o
z_SE{*dcBsmVV+4x+BK+8p3fF9UGA5Dx!A;tKJ1e#X6nFedHBPuC1ghwxl#Q;v6+zt
z$B!UOH)Jmhv9^&N4{GdYVmwEKp~dK!&9yV0-h32ZWbfu%k+5kgnl8D^y<F;VIyLRF
zg=(Qy(KOTde`{R$>PWWFUEPg`ep~qP=6-nZIpV>QeD(%EmhzDz6&XI#JK5xhO(oZm
z-yF|>jF<+wz0wnR%}(jw$iL(eH<(<Ebn8o`@pL-lfqz0T0ROqxM;tzQgZ&Tbq5KWO
z_M6~K$rsUeK)&o7LB8zc-b>M#no^OA%&a16RQ-hiMYpHuL$<`7*QekUT(avNY*G5Z
zfwq!a5!y8HJS@1=ZKVG+S86w(cDu)sE6iCH=Oa)9$gYi|VAlQ>!K@b9S)XLgS@iMU
zpLnH@+y-CV=9h-K(?xcPm67nO^lyNB)Fi7dUogfU$mbt(U!%si_)2%dqYp5L)!YSJ
zhOG1sArrpl57-i0f7M^&5%Z18p5VPMV03z0a-)g7=33-%JvQQ&Jvt9UPR>bq3K=vN
z`5`&vGp6vfxKcMmwnzj0wf&;ML~|9T-;rdo=o-xqv>)XCYSwi(@fYq5BM1MH&CSRl
z(E|HwvDSKZA^Mp-%zE$~zz^E)`C0$Y+kyE=VCspP<O!=!?UPwq^Q`K{Pf5ud@mSh!
zco@6kO2*WBF~8|wenp8X)mn;H_<dS$274h|Av-U%&a`H~NPE%Rt>4cJ=d{k+`c(hU
zWxQX@xe9c|uG&yAx0<s8L1ZlYfBc8A2VR=SUGtn1two3Lo582azBT*@&f%C~?ry)}
z#B;#DU~%=_B4qIq&g4t3yhLoY-(;QWCQtua6IfD&9eCt)a5b^y<qPV*Ja=C>CpVk?
z^d`=WbH@IUPmn)N?4(%rTFc;}YHU8`T&w^#(ah;@e^38TOM7_rBA#iDlxMSUp`G-u
z*4T%5KYCpTJ+5P|X3%3Q_$P1he<GdJ{c!7Moe8hl@wLNsq9b~~4gK6$oYL*$nE>~!
zR%5e^rd!(kXHoZsc&E2tV-`pTlP`4dzagukHSy&-AD+GAYuGIGtM&6XcR*^s8joYY
zK~tOai*5=qo`oA+ZV=4kW8OK%@6P}Bu$AO{%OCVY_$;SQJ3fxBGs+%;d>HK`a(^*@
zVfGI;dU5%U?tQ%rK0EaO0d)De?h2cKH0WRcs+~B<0p)qAt@hbZ0-GT}AdGHrBaT!}
z9J`u0i((Tm&~|5cD#x_CLOBFptc{qD+BA?GthG`ApH#z(5uV#I$(hz#(!RUmNAA1e
zRE*&)7-_F|gE0R3EEp#NpWsw%O>icF&*I_o&Bri4u<04?itRI-r<Q7;&%RV7;BtFY
zd4-<QJ&gD{7Or0_AK2!evLD!&>KnX6-Y)g2ShR9I!{~F1<Gl+l%uY7yllZgZIB{y9
z6&qrj3Dy++R41Fyz)RKlo0%HR{-vK$rx)M<*X<GT^N>-Zjq*;dOxUrY?`UptW`yx0
z@Tki*Rqm<U?qO~!ezyQwsGK+I^Yr)6(z61_I+|NKvwEDFS(9Vpufb~r@O>EHi~2#5
zU)3e(5ctny&K28S84cOEPlR*T(6^)!cq4wc-Jf7@k^LD{EIMjlU9PmlNB!tKG46OI
z5sF#ZfM0M@8?Ems`7eSoNuCq+&xXPu%}T+~v!lfIwf?(5MD97`t8D~6PsJ1i#1ylM
zc~d)L*(l4m#1w6<tT(=xV`GV@7AprQNPX%6_p=e({HXjvd<po&&gtp-eaYGsuL~by
zgC(vH>XKW1@A8qlIJ<UgvFt;|+7}RmUdX;S^|y$*3s;L{&O+Ota8rM*|5<Oa{_Ony
zasl$4+zZC@uty`bc^Y_|S1su4;<p}Tzj730%SGM$@T2f2wiegEwBEIFe{}(Lv3wZ+
zXXewwoZgRcJP2ImBn4CYgjjkG{hV1pntNvhu~E<fJL-m;p~<m@sk&=DMJ84(+NjpX
z29Li0f59goz&BV>@XY3I$am@yb>w8V=KW^eeVdy()4dzpyLp=b7P@!&BJ$cfPu0g6
z!-p-5jM=krXl%6s-aoURyXVq0%Y<7zXWu)IEQ;VK`@>{WrX14qXj%?MkV(kmS(<Cf
zA}4p8OgdW@4b3MrVLu)wr!Ru9m1G{V8{@=kQgQ|u?Yvw^-<;*pTnMhngCXun_6N=$
zJb*5=I3asny9hb?&p;#lK0bqkD-q=Gfkyg5&f9m8W$rwP^5qBm;rxll(^(VkO(=iQ
zK7-z8)_csaa1Ge?FbP>u$Q*YwF9GJ(1E+HKe6cg*zV>x1u#e~m*tO?!pkNjE|5S)x
zDcNa%YhKtFP0P~APb~ch+x~>MoC6X(u5Dyb>i<Y#`Otm~y#ZPcv`wFPi99&0?Sr)C
zJkXGSIqReU-TJIAW?!3qcCG7yy;)*{XV#aqHY?a4O68b2ydsWnSDU!@cAA-k+rdln
zvHD|anlrBs_XsqJVB595Ni5|;?Te6e#2KK9<qNFr(tb{Tp@~09U+SYFB~!L5pV`ri
zv4@;>Qq5W5w`aKCAii(FXLyX)T)`O#<h%GHXxHpB)QSz-TyOSVwr~3B0(*8x_`IpT
z8T@6*H0`~hbBe?8A$y?P^;<qUNW!N+&zy136W}Eo({qD~uZ9NfvBjmgH3oLdYQwpg
zV4}&Md(m$${-Bt%&Ty&U-vP(8e_deDeQC@H_N~U$-7*8?!WYnIU|gTIBi_(+!<iJl
zhwe$e$62e|F|vQBbO>g*HnbNNVQz?B#>ithQ;UuMJbQ$CcdwI;@PV_@<?|?R@+_Zg
z)9v2mdw)|1T`?A0BN*$e8`rLVcRLTPnUl*dK#pHXyyc?y8<CA~uNmKNbwyQ5SJ-y&
zh3*LaEqI^8{;|Kwo?xHeerL{;$Wi;9cuA5xKHX!u9~k@=;>met)@RvgUlz=ceW~bz
z*yr|AV}-fxML%`152N`IZ)2;K<l=K{&sFiBBy-w^9Ft7zB2U9$TeV?Zx%U2d==);B
z{<RsOd=y{pqpa_u$uVNb$^$7`%=-A&g<m`DPppiuXHTS}s8V;c#{H?4@dRgyJ+pDC
z{FM2?GMCy>`MKQxK@9iq#dBK(-{~KP+E4s8tNpWlKl!iO$dpUSt<CFr`*0w3iv8b8
zU`<S@j4Mv~bYW%uUp`hD|Htbp<E_}c%^Rb6z&n1cm$z8wWa_bf{;im{8ykru8qTLh
z^CD*Yl@;W>{609n_&1H^<YNSjYkk!*3Kjo$GymrVTlQUU?~O;7<rVjFFYQa5^*M@7
zbo2GIS~&X}-v>?Jo~XS+)$<(-%}mSQzb)@O{WEIuS5(H|JkFjn_s(|x3|g6q`}dBi
zj8AT^I2<<97hfMVxwXdRCM&`%3GOjU0N>s*!FVCD$xiM$Vm~o=5BL#RVp_b#i3!1Y
z0{p5xQ+NIN*1YGr2Pr=|xlS?MPWs(@VP#x#mg-ae%TKePtUQQzat!u@n`bUsX3Sq5
zu945cnWc)5;PG+`@QpedGjU-s&iS+}_b`UJs&z$#c}{?P6}0MR|M1n1&WCTObPx;5
zeH;FGvuYvtyG$;A<Aw$8RTH^~=_|#%_P{?q<Ofx3pgz>%%LwIRJHS_6O_lA-_l}C)
z*p!l?t#hy^EZ?Q<VS~&t_YLZ;SI7w!zd8F_JS^S!`lEh)IqOMqXpNpK^ZQQ!XdXN=
zzy0LDE@=0s2IKX>VRKoKOBzFbt+r9d{1WeWVG|hfU{gwu9p^XUp*}PFQr|bz*Fm1!
zb;Vlkt{N)u%dNcs6!QK*vxYy-8oq&;>1W7eTY`-dvUXXowb`b35MQ);TYhCqUz?tO
z>2fQt1)rbm#eMQT1h13ZuI(6L=!B<!AH1OWAK{BA_jhmoM*ZP`Z{?1YW!SS9O`e%g
z&im<Bpa1<n@q*UD(ThGi^LhvWj8wizemaN4`99PQdDtKmoxd~q{AboT8t}=&7se!m
zoeWaG-oF6<iaE#|)?%jYaWY9hn{xV+AEz!cZA&@7n}n|0sM{53L>7!Uvo`EetRcGe
zj;-Tkw|9?^=}yonc6Za)vAI7EkFo|Uh$~pWqOO|wDf%6110eIGP58_DyvvVA^jU--
zzRdD<O9T7z@b~_PFZyxCd{(iq9;p~jE$^}yYYHdFx~UtXoPGVTwpuG)<nKKB9o8%V
zcU_ZuzdDfev#SHdv5*O2tsmBEat`rl-c_Ia6dr;r!dX+xxBMn~I>yRV@}0L%h-J!C
zGayUJxlljQBPrYH-pY8}XmBBK;2!qxwNDYXIAql|5+|%>El=T$@3i1w9rmHsN@@i~
zR?XdY4|ZFW^Qya9uRW|E#$Mb=A6dx2WLf^z`h6QRugwIm#1C8E#=6&gqV>H!#D$@E
zbJ)aI{ko#>SS@GdILp_-`=UjY=7IY<kJa)&zpbsA7&9g-m%1+Yx$2$XLw-bL>qJZ6
zB)TzkJ<AT&Ge@Uha$0x7m!kRqBp)CXSLx2KkEhmXq-K&`4}au0*&_x%b-H%=-8_-P
zadvF;??cyBBoK;6x_Oqdu54TWSMFG}&W|r(E*hXij>%pepsrpccr`-%1T+*as6Ux|
zzxa`}B;v_}oSc@U@Q>w7^sZ0N_fhyk{)T9z{4!@(X$`yx@4whx(WmueZI`<F=>1fz
z!>%V{4mv}9anc*eQHT_p*uPSnA<|u0>Icl62z=<}h)+|xS~2<r`Z@6q_x!>KVPKAQ
zv!5Ye;+c3&eLSD;!@M(Uc3+WrI(kU7baZs~)$sF-#vpUCkM;n21-`R<7}-v~)?eB_
zbTI(iM!rAxtZO6xpZ)pm@_&?zPW&-_<}(%V=%io8eble!CW^o9d?kFO?c)aGHhXN`
z#^tDpZk)$cKF$u=2%@j{XGGgx*0c6+#>y^$Uj2cIC*FAQA@(#TcX&76-Yc8v)v4a5
zD0q>xGJXwt)Dd_yf!~&ICe^LNk8I=K2GK_M_sEt@`A1LNd<aJ~XlP^U?p&k$J+o~l
zJtuP3P&v;7IA^EylIR=Bt{CvwUco<&vUif|XOCiLmJTM6pVA5P$tD=iA`*w#lcJmW
zVWjr%w?y#lJdQvPdq14#7VQRj64{)p_3L#wp3H%c;=3B?W5!NmZ_D!hk{af;g1AjB
z&z7@x?pS+!Z-nQQ`}=pSW4}IJYb+mziT|`AH)mll={ND@<};&abJn6`7q<T^tP@8&
zt!L&xjr%j{{F7e~=%7i!Jo4Gn6hA2*=PO^7vzNNdxf**u!q|~U{4nS5c6+4};->KL
z4%yfR@R4{AKlJS1*b7lRJ7?+he3s8S2P>L;69&(hX3{!;K)(+4=L4pEW)(8HfH+R_
zuKcU@{R-@d$_)YRvhAuVJsvv`I~9BDO8gOI_3hYw#D8)v44g--r6wajQ3v_%7H-w&
z@4k}wDD%)mZthm>s4igE-7ZIIlL`A#p09)+?mVJ9heQl$dvjtw{w4JtH+<u86nb<`
zq#nVU{+&7paN*6I#|Q>Tigj&QezMNogrMb7Vq40ajXda=nt+*Y`{lW4dz@I-J+$FI
zQ%V#?4|TF9tan@-t9dMI72n9+adoP8G;2B7(N{Ny+SAlj2Pfzf|3bcaHU~e@i`~V%
zzP%<_akkj{t*QL8B(c2&_!#+1@LX*nG7R1oO`FJRC}16SU5U>FU*3*yk|dsYM|XMY
z+rbe2XUY~$?W;x)1>k*y-O+g==hVnY)L(1BJJCgbFy_wQ%@$=1?i_=Dh1RKYv4w~&
zp2n8ULq<q<2EnryK8rxtF!eE3pu2xir2F0S>T-y;COISK@-7t{6&%*jM*c-vFIA)P
ziOCtS!Z#{s>^tD=Ej8pJGN$HPxQK^;&hK5!@jCXTe8z2KE$O-Xcq33gb2s%BeD+LF
z!z=i3<CCmmN1x4KoYkxKVtJ3VA>!c@@a2AzV#OXd1<ZcozUje+&0V~&yy2o7YkRw(
zVFY_<Z^jwL?=x2>C>v~2t|14yI#AwT8l1FvC3A5z`<vA1DK4V#sB)=@VQ|*%(JJ`j
zlgPdr_BFM4nq;3Qei3m3`lp{3{_p!6XahgnGtq9Yp!r7g--vyKe<v|)4<1SIsko@(
z2yd@hteBoX=c#yVq2@w+D)6AkUgD|RPhziM&)z^Pp6YUX^}gOE4<oL;=hvalx(7|E
zXtV>pb1m>I7vfHMTe>C*O<DufPdxhI570H2plj|x*G%cSVT!lO$1bJD=J-v4OKjb0
z@gwJ$GIWh#-ELu3{VQ_D#w)h7ve3j;pFv}C&rHX6u+z1cdQR%R-NnU{Uo%)Ynggxb
zX~ZTx=*~H)I6if*2kjjm>c@Ro9Yx6>@xv<U+{S%1<S0#m*T)x-cZIE7XErwEO~TJ3
z4@<IVV*#=!I864OM)rsoBzHcG-04iq9os%FFW&&y(*e#CT?nr+E;3=GWX;xZe&ewC
zS8#Xne)&87I~6B!FiO8ZC^*yno6^aHbkf-X$pNi@%L8fO#(mc_$q>m8wGn^VXUL;&
z_&~ICF*^^P|3a;NAb1TLI=?7WKRDkg5ga@}{$ARiS^v`k{pIYGRE>Pk*3+>*2Wx2>
zbDKa8ML92-xRn?u^^T&f@#HmDu57gOEahWu<dnCyBXu4?`kLBBhZOIz_%ToEIM7DJ
z93&T;zVBiyTm+APKUhAKytq1_IsX>&0Uvn0>~{{8$3FjsxxMSj=}Tz;f7Qo&1w+2M
zxb8W8CjIuYlixTzb=A6FZ|ub_3D$7Fx#YzC<jDLMdL^%c2l45C2mE2^92LJZ=lcC&
zWDq%TRzB^@F>^ZUtAN_5WybVr+>yq-pIC#-J(671c);10K;Hioeq$&7>-&DbhvAb1
zI$io#c0}s@%k$QD5RVJrMd(;lpULCX26)^v)8O%Gxm{l;9<dNv?RXr2Rk*wgkIOgg
z!5{g4hHj<aSzi}^z1n;qe~7wfec!_WN#Y|!*(Z_x?|3~>53kccc|)4tY5VF8exK@1
zNRHhJ9;(w^0uM^=y1z_&*VQMmYYW{bUNT8T{59C2x)Oq;J0G5AK79DNf%R3xymK#g
zFK5Jht2sM`FWf@?qWux}c|S+HYRPrlC0N6St8VWNuPW)S&U5Vo`y+YSPCS#1on&om
zJ=CD@ijX<gTiJVMOl(^1ZCaTe>2~&Ls^*90!`a7LQ|{g#?J0U=RYRon34>nT2kx1+
zvh3uOtotpD8D>lmS?heBDDXtnusGZ8A@N#<4V(zN{pUg3@q_4d_<4&-_{zYq`d}s1
ztko{`zT}mgBh3jhG#f{Ewifo|M(az_KGRRKzsr9r9Q2=j`E{J%ZADMt-i=?VSo%6_
znQU_=fle9d3t!Lm)poi+^}G7Q7j(ZTIb-DdQa_vpI8*(abTqlw-N90FggM8+Ih(E2
zrccHFi3ja{qD%MLnGeOD>4jJEj|GdHZ{ZiF4whgNd{N>a)xa_m9g?T|XN~keaFyT(
zF#nmhvRB;o^-Hg=4|sJ?Ab)D^ymXo7&yM@Mg?*J_Y!~r8d%Hc*+|rrcIcp1RpLU+v
zMWKIe;1K(nfnv7~B}-HnpqASAQD9g5)*G+crFJR%J#}VY-(|-Ne?3dUPyKt%L8m`5
z_qensWdDlJ(DIOlF}lFQM7&b=_r?Mrn-HECoRh+SihdiA%>%!sX?iWSC}`6q*=)SU
z_FeQ<5BfdRZed*v?lJ8(Hpb}mp5guc0smuI{hGADr#dz|CnSBRGakeyHoiz*m^H6`
z<1l{T##1-Vw{`9&ty<GN2|8-c`O@v!k&;(lKy?9>o8jy1&O!EAe!K-8YW=uNkj=DB
z(er8fuN%kFpZr(%o9L;rrSF}LlMkwVN&VhNy<W*TFIv@G5b|0kb1$^ceJ9`r2diQL
z#8Ea*tD4`pv&J0c+)@0gEK?%f+K_v~WjOqbiwuEZ?K0pOj<yYWX}ogun_yN=3cJ=`
zCx77EDVXd%0jz%?dJFF)ax=>NcFxkaPjbQtzZFtDotT2;;`hN{uy$wAL3jyw&5vph
zJ%x`goX#~*TY$BMd3v3(qvx2XOdQi^ZsNi#Q$Dkw)nTH3X&C>cChBwVn@4U%;6xH$
z(;mH#9~23hzAe=A)!Ne>M$iNJt0x+06Go0iqNcPjjf?yvpL(#8^}62=2lqz?zt_@-
zHQb{!+{hbZXz?&KlnrUHtE(BS2YuGfI+Z_~=~pCaW8Ys}Y1c^)`tBI*YS0gBa)^P?
z!EOT1n~iCI95{7npkQ@6$ies)Flvps_?(Nw3IDcHW{&8ub1wJ@OVK~2No=vtVjC-l
z)O7tFa~~tFRm;3de}>Vg*wH5*fCiegLf)xqG^G)2lz@E}IPn1X$4>*nmOc1TqAA8G
zHLcD5DYo`W;KYkpH*9{BGmnlo@*6}0(Iw39)y!-1L(l|#pMmGMh354gyN^13JWm!4
zrOBPxTY~KvZI6B^<?jn_$-bxww&<M*&#~)U&`sD8@a}-_e8$>MD;dv?qqwW38#t+*
z+NaiWy6uI2JATk1*Zx?VwxX|OCNj2oP;Lgul}Xp1!B3YD27a;D8D{mf#Ne6}+!bU@
zsigyQFQ4zqx5<=!)$ovN^3b=Hdrv&_$kO8<;@)ify8n^*Z5r48HEwv~(U*c*9j)K?
zR&QgRiqo}+D{}(5O`+goYULEyGTz=vX701du6cZ?hJ38M2>Zs2YN2*>i(p~Ty<^_%
zRdZ+1t_;6)3;sHB?-tc9%9Oe93D<FF;hNF~DO}^jaV;1D*OxMI6@JIx1;3s&etU`a
z3rFDxUhyLKRJMVm@Y@Q0h3HI&AN!dxv*_{`)o5zd8T1*ceWPyLI^Re%20myy?=ZOx
zJDa#)yOukRYdI^2ZC|SAfwBIBhUcpDTH#lg7M{+Z8=<Z9r9`urUJCqVD`QkZgX8!E
z?u@4NZ>3}bd_oSwq5t~GBd-NE{N~YP=;Qovdw;}7X6#DMXG<^?<Q!3;BXd4`Sie5_
zM!<hJ`JE&(EN2huVE(FO*BZ`@UAn6C6Ym5s{q%L?qSv-ka~-+2eA~6=V8J|muG-6}
zH=orK5MAuNXW4n*0-QP%T)%3@+=vOa44<zq)^#Rt3f3;<k8&<D>FD^=(K2d!e~K-z
ze`^-`$c)!bO&7_Dzq0*xKJioD7tKD*r+ZhQdcS~k6q4PNvjJpP8GGDOaMAN_V)QlB
z{kc{6^WxixF^e7Tjq*C_GZB<7jxLo<bnsx)#64`<qL8<wFiI?96>+Dl8uC1NM9<2R
zf9_o;LnSla*;%K{tz5nJj$QxEpY}H5(697g=l5~ew=T*4RDGkjTJuu>s<-+%WMut2
z+^2<aikvA9qpLZiTimKP(4kdr*t2S-&9k)04^FBp=iQyu(>a+QL;Y5xv)2G$A967a
zUQW-YbZ$y!sn4%KBlS6xan<K5jA7^Zce2YS6-)NAUs2aaf9gv#8mX_fjb@4Zdq8(8
z(%&apv+D0F$duvz$rs&1e}Y-(KGbd|{||4cajWrx)s8&JsZqvIo|T0Qx~QLO#?$jo
ze&57%?Ok+o&QHH7z9U+cr~gmc*Qq?$B6tKoAs!m2D}V-C!;-^Ans4g$SMYy`J5xB1
zQO8<E)(zfOD0;eicl@WdX?c%3%xCad#d~ect)AZl|NIdCoX_VrK6kI=%m>eo@c97r
z&g{DxKC3b_>Z%#DRxoAs*9nbknA6Ph)yHUPT)}&-rqI$=@44Jk2cNa$SsOv_UMgI*
z68M63ku-d|zwHWmNbudlpI}tKuRs^Ux`=k_zn=cP_)Rh=vmeEchQn1$d%gQfp4qYZ
z%*0c0xj(Hp2cKZuO0J)Krq5s+-Y9SgKEb&U7#*C?K|_r-8rU+&5Dc|xdat65aH!ya
z!P5ym!b9T)*l)|EsayZ(+tNntPR(s-ZS5}Zu;gq($jTMLa36nyp<iPIn_yT43>s$v
zzaOEkWTEDxka_GLHclq2ns@s?a1F07A>W_~yUW^;*u^deV%H0CF3B9b7m~J>WPja>
z?IOESwTB-^-YC|ny({r`lr{ZR>}31CVq>(?I=>?@xF?cn69=)syVm4iUE@Q)P-Sk#
zSEo}K%q-E`5nUx$%ZZbsH|svh|H^~4eXp!!Ut_n<ZrHV<F&bvwvsCM>`tr8hJoN8l
zz*ZYt&}Z9kz*nb@lckcI*O*}L>(n7}vJ^Wrmzo)I?Qdq{Z@`Nfkd;>tecGF;b3*V-
z-_Pj(RQ5bu|L^1tIv+wl7e3n_;?TO+ye%-X#rbn1$u;qxVlr+lXUA)gO?U|>*=NMi
z|G;|cE89g(fw)BKp6)$XuVni4_S`t}Ud>S${%V82CL&L2fafGQHC$ga7acXr2Ol@4
z#-N?G6Q2UNrdw;~2C?fkm$Jd%z#mB2qA9;U3|#8d@lodZg1bcXNxZ=IFL^5ZX`I`a
zdNYMb7ybk?()#n<-#3?<OLHY7w=!PlSfbCdG%n2RQiJ>ic6<cWQM4#xeT2t|an&34
zomd->)92P4)g2}$GA#onZ<{jk(cN~5p!RBiW$PM>=Ev^y2Iio9YRXqq+~U}M<?Z-L
z@izMP@zDqHg0GKq_r*Y4?z<39YWuh`z~IevFpM<5i&HuLu;uKYMIp2^;DcRKM-Jrj
z#~61;noh#25n6H2;Q*~Nak1waq2amkk^OQ$e0nnQ>B+$7u{1soj*(z+_%Nq&-SZj5
zm(zS@5f7hd=PSfM*2-N?*h=<3PxO!GAYpN(h8ws(4SvsnD|h$l-NE@oPd=8OzgFzE
z2HxF<UAUWdk($R}wnx)=AHOd!Fpo#EX^#@S65ol3j^9_o9gfTqv8x2*L^PksG|Q*V
z=dnk*Ys0mFG}TtQacchzG}x1#)1vdh<9y&O`p*X+`7gn7<uk>vt;nw=@@t;Ph9(W%
zrP;bDJlCgP3XfDARr{&H75_PV6}qz?7~*=T65bg8p34gfj4ekdnGVTJ*2r?LEv=Jz
zoX=RfsBmsQ<AjHg1AT}mJ=_IN)K2e+|MXtwJMT8e)7aCQ?T6sP826{gP`h^<!^Npw
ztU&dRv>rG|jGr2)E5z<gqARLc@2mLUMO=+Ku*FW+u-|IsjCehQj#6G?0$tQIDwyJn
zbj+w{6nAt6Qu@foIPu+6x`KUl_(kvLubMSivhVgWE_eTFD{tk82guV^PKL&o9JJ%3
zkD@#izr7bd<mA(zs{j7}mBI1;9Q_x}DWAz+@M7uJ8tjT1<K@mn_cn$qa*smWO#LgH
zM>Z<^9m|_|r=E9u;Nb@J^S6LQ_R74C&3UJwf#%)O;m?6<=-j&+zoz4J$P~rp?!<1B
zOsRlBYgg3l;(Xn#GI*kdJmcB?J**ni*yWBFG!N2ic3z*T?EC2ok99Z+Ur{w~Q*qV&
zRdaSJR_AoHTfdq|ogHOQ=8*i#OdY2fxojflzGE5dMe*}HA8g25!yjWG&>k)^pO_(s
zQZRgvae?7LEigoZXA68|_W*bn6`!rWX4l~ODIM#0L!XW=X<23ack9D9p<KaYkbm71
zvuA#m|FKg#+}L+~&YQWDv3GU=6JtxB**%(TQnpGPwu<6;vg4v-Cbs;6bs$(8p|P{k
z6jM&yD0b{j8^sW#7LNJYTG%KDG{(EzD5m2Y=9K*;Ynu>v9bfy+Zyv^m-6j1mTO~pa
zr+bu@<#tSsA-iikxQqjr?ok!(qNTGH1f%AxkiSgdB$IxkllVyS?=ZFz`?BmAS$nrb
z_RJlO`zAi|NodeO{1H7f%gv|cilb?gao>QhlXE7wTtlq?$j7kHRcG{@p=CYr*QK1d
zlDuzNT43*ytml4c_P}FjK7J{8KVSOkUw-_iPycHDO`rbK?bkhdhVT7+|1TTLo@8y=
zJN4?h!xG)JeC5}sPY5oW(Xy#xMhkp@sNvR{xz%e6$tO3l1{26FGZX9B>tF8pm-uMh
z%~>L7*P^AJlS#4(ldc}ru(tR|OBGXed@fok&XA&y>3CrbHDl7e4SkB4vsi@nrg_mk
zz|Y0sg(hx(I^pX~o=)-5;691$M9FlWX&EVBD~A}wi1}LF5tW&*<zO1f*J6GJlii~t
zf3zAndRX5T<g|C82efZ^ls5Lgv@STx^OfMBd@cJsweKBYYpv*P3j4;oQv*GueNr>N
z8l9lNOKuGJrg$)=8}Nk=q;kB18982+?d7NYcfJIDiNPJv{SLxk`#ahv@qyQlJ8was
zV!wjF<%@%R)NcKwJL8J+>)jyxo%oGQ#oxMX2On^JgtGvbt%~fr2fkfN{ZrW+vWZs$
zX9aP|T42^bo0CNm#<4MJYz!y&q)!cN&(XD~h_hE89khp?PVFf|etZ;LVbF#;Pyju9
zTC!#;AI{DJw358(X_-G$<BP_%&{$_WLq_rD=po&e;dsu;w6e4<EI%S;3s0(h3_PT7
zrK<~gS323@(I|Q0a6xuCTh!*gAXgkN!b@-s*apCtvJKL5X23S!E~7L*=zN2tzk_eM
zO~QH{uu1Mu+ax~o;l`DX;AF?Z*hB3SOFIkO$aaa<9m3JtC2MEx`V;Ju0|n=|OAe&{
z;{ye0|5z|Kus1k^yFNw#X7VN*!6zSGFWs+ws+HK1Zmr7)aqHVh=Se^Gr0j4jf4XId
z!$-nTc6bkVcsDlZQFtgqU*e&(eP-!!4E{MvUZ&c2<A=yrqsD9eW}|)otd5oA2IY+S
zR%6TFmJD++2|l$IkLkJYwUo?HAoJb2$xr)-E5WUYby2v8*br+c3C^w9mmGFpew=;-
z^pVI3wLFdQqPsSqNy}j8i%9qNFkT`kpK{O_(VV}OK?m!Pr0F0Z>7}$kqP3Jv)8S~!
zPED;P&O9AYuchPp_#@B(Sr!*8g6TN)=oxF`=Yz?uYxQsO&Vbe7pXob<!P(HZ5}L>-
z2;FG)&G>w9E*iiw?WZuWOUS8l{sZ*2{)65f{+{z8GS`w~6|w_Tdcbrn!@iRqmM)P^
z(6D07F2yP&JFwY`wLh#JoX;?38?r!qZI6vX4k2T7cE!m9t&=u>=L}eG8*)NxB~wO=
zCuGw({D<bmp!1j;a$e%I8At1_mcAPJ)EJF?cjHumr^b?AXt3jXxe>;*GS$i<7oW-0
zd(`!_dXF*SM|`#t51dQrOZe1We|w4t!S(er6Q7*M^>O+q_bVP^?xQ)ATC{H<9uN+-
z*ac0FCsh*@n?O97qJd{=AleP5!#kW;*aBW^7v^3g!6Dnp#V50%!844L&AjR!+C7Ud
zYpFygtein?E=mouY31v3;Fk*WJPJZ)bphiZxv^lEmy@~&MeAWV{z5gsyLfiy{44iJ
z`c*o)NBR|5Bzv^?QOFo&jNvoJv(&h+`INtF9=}zk$9;f4YmM1o4eYh2D<0}0zrPF^
zUcn9%eH+Qctzr!)`QOUn44p1JNIt+b&^F5Z(&r7#o91}djp5$mbON{WJ?O<k{2y;o
zQHsx=t>~*rpOKP%Avma$vRHP3;AqFM5<c1ksJfrp-s~e3;xh$^9q51ZfV3yDMC~m<
z(O<r3hmNYDFW0y2H{GtB9H2}-cDe02?5+67=)v65fX%z(zS+3)ODAJ1>RhAKM+3Qc
z!)zttFI;Le^6y5nm6`+OI-<w9KV<5;>>c^Ug8f%~-uQ+7htIZqQunb~m@@31q5Q!)
z1Lzke-$b(OX3YaKecp{X?|K}$@C>%M@+Z*8%x4zzVPeNI^oDXBjv*%&z~Az1Sno@F
z&>xzQd$ExO7j-)qa~D`{4{aU&vC(rqligxiW1|0YVwhUr$8C<pBxDbF5@El|k5gaN
zB5iT&zlU+i`LpXkbB?q=KL~%jD;O%C^48h@wp*)Hp>d`irFEtCg-kB>z(0!a5+B!G
zUp;q^bR4p#3%icJ=ZBjupK`7ox^!XFH5+P4rgh_hd`ZXO6c1KAoo9{0yXq%}Z^~~~
zEJMBzYm+eo9kTC2=u^cIoNkf6&Ej6xEaG3ae9vE1G<RN(iR%o6lf}tVUi({p{ST{M
z_o(uA_`t@$?7JE7X$-w<^-IS4&aZQ_ycIlUKSGN`5#Sfjz-aLt9?#VC2L6QO$ntzJ
z-%<T*zoZ;pc`svB)34qypl`*!AED-^extAb>MKR7lwNQ&u7FmOl>_r<ZG6rfU^glr
zsdElrr*GxdNp2|~DH|*Tt>MS*svFwIc;ZF1As;2KXN|_>MrfB${7?G@H94ZwNb!Zi
zoWSM0w+VPM=afBud}7JWNyXM50G`Fbqcu>VwT1m6nRN_5L^7}`5X|NNS=Lfk3u{91
za(nHwoOMJl3&vxdc_9u{>|j?v4Zx{<54WBO8)vMgvtf3$)2G(JE!_RQkGu%kp2&(r
z$bOq!r{|ZkH}*7tyWznG`4RZf_2eRyqeB!kEvKzFE|n*%HG&Lg?xVJ@jqTUJ%=Vet
zPdWWK7+ina!_I8u(|-!Cv)}K;j&|<}4v!o+`9(fw;&evA>B~PAzb(V?qu+zluRb`2
z(>NM%48I2)3(`0`INv9J2alWwKgkTuotuX+F#5olS{K}(2OfHE;7`%U;V|%=^N;p9
zxpHN5J3rxF_XE3!UcPSEZPdRZ7H{vs8R$=Ko6sMXpDAj|Vy<VPXO6=6^NfFY>!+|~
zv|r6w)YVMwPy5uRMK@O&a+BCY^%!S2dOnGsznM6e+Ii5+Q2*IP=W9Lg5S(G??szFY
zY;KcdqDzw*bFDtfUpZjL`F+X<gMSW~t1ge}9!~@QhxoK{RnFZAe#ayKKmQM|@Bgp!
ze;N07c&r8d_P*=5w<CY8_oVnlYrw6Q|4`m<exJP0IfXRu|G``}>MY(j*aMloFZsxx
z*NL`^&GL;Ve?rV$O1{<Z_Oa-If8g%m3zL7h^n!8nYg+AlC$Ja3IoY54&ZxPwpLyGi
zSANCrXQ_q4I!=x@JN5)G%+06Xbj7&u<OSA#c-ObH&=n^4gu##K4(4{;L@oE5vggh|
z#&`AAjXj##&&%k5BlW@6S8$H-*<f&qY8!sV1omGBJRy|YOUMkL^O4)oL0o>aq|D1Y
z5oYWKt8SjV&jgknIc-)e?(poioMPn59~+Q0KfLTWdHG&;-ClG?KXN7lEcu@Ztxn!w
zxvqinUd8rp&dr%qS6<w*6+Ah^vm+CB<tK>;K8!394+sy#9XOW`;1@Vy&_RwiH=Qb*
zqc)k(<=d$?)gEZ}`(Sp5&2xcn4}i-FXmD?uP6>Q9(dO6C>DTX+&H46d(J$+SA<yd9
z*rGN3f9dGCv-QqD(BFO3xn3DGv$MuuGGTZ0g4I5Bn-8sYpVp7DS+lDzo)GxM-z`02
z0(EVSmG4ccQ@)Uoe9cM2U*mDd20T#k$Dw#0*&STHinh--1(z&j9{vydRNtDDEqqtp
zsqu|(9?tIFyma3ci*iRrA6=Tgs&H2}d6a?6xSP(5%H2b)2jQUD?X!D>OTNsz-{$*h
z_-apZbZ+AH{+*3!+{4U^!~HsM?(BV*R)G%X5*>k7&vM>VbQSJ*(TAf=m|CUZ%u3Nl
zwAVZwqrQ#WrudKfc`ajpUM-vR_vFxuFMV*nDdd+f;QxwHqI7GZcXn!w?2bi@5q`UW
zN2{rSEyu!}le-Q6s2F!o-ddh%jX0jroC>DjGxi;Pz8V}=-2Cqs&DNQr6fD^t%8fgh
zuF14}s)ySk=uzg2bG_JB)&@m?Lr3xApJHDnMzF7j+e?CPz?Mkc3f7ijTqpk|A0<P|
zzM7JiRz6-~`mXzH<YljU5?Oge{%P+?wRiTH!M-0ZcbxrqE}FRKA2e-5U)Q%j&u5?g
zS@fayvcr}68lpF_zt}72<h)K8-*WKT`?kNQ;WLRprlo9ejUoDf8N2?tnLS{CuUvJD
zwd2b(XfPaq*XGZ$zmKNJYR2AkG`<|);b!vqj+m^vv+Q=-9bjEJIy)O}Bzk1>!Eigp
z_~zh%FY+hS!pm51ZjHPb8g!lQgB%nbvePr^kct2BcLcNE5#Ejl%FlDO)90VEKF*>G
zcJH4{mx45p{5kwFBA&n^A1#wM!tZ?a@$l;m?+xdX;q)1hS<Jn7-^wi3!hp<z##)m@
z{GZI{jA5T=`gj@7;l~5#@{i>ki#J>0?}iLs8sZ<%O|Q?nXRXfz?`M6wclSk2OfWdU
z?L3<|t$#ewJ~6mH&--3_eGa_G|L1KVF|nta<AL_<+n=|6)Wnqc-Gkg<|LIVz@5L@h
zR@?(FPF^%)>*?%+_4C_I?C)uB=OZy=K(4v?#94SJsOwC7x3<`ynraf}pw8tx9x`p_
z;C=c%Y7VmZJJm$Y!KTdTK4%B@d)OTO2A@N8B=b7JZ_Mogza>WCx6J2lBk)`1^Jw~c
znxBng4w=s*>F41Le?IfMpMHMDIi82p&#xN!xzk^PuMWm?g!jPjUmE(mN3B8GB<^`3
z&olM^S<gQ;^ts;K%U+J+3E9alHlEOWZOWFvXYHjEc9&rHv$k5X|2=F{7iW;XTY#Ms
zGTX6nLv>g1e}z97Yfw(U<|q5F2jLwaH_&*>zta3V8|^H3H)PE1a9mdoK6Cg7zCAeJ
z5W3wy_`BmjJujo4Xcza|yZ621*izBc@zYt)6GNY4lWhzf$hGmi{I&j*`F}9+{NB)$
z`Mp_bdo1u|{^{V8WltnN;T;IZ^5;fB(fT-c8uGU+)NpMX_J1cnifGl<lzp}LdSGDw
zQg_k~*2{h4i=2V24Yf~B`thlsn$<FG(X5uE*K=?7m4>^sIS<d-Kb=1+BqljfPnWeF
zpw>wD_2jy&Fntqi{df<1l85n8bRRco|7}ig8S$Y8;4sw2`zhy1BkZ3|!|&^+w!)f#
zms>&2%Wi6~`0Q6vdt|k0CLH1Z;YIikVa_8{Zz$FkU@sg0UA3D6>{}H0*R)iaiHm_H
z9yQeaUS{IdB8gX%?|+iL8e&Ep?fs>kUuN%Ypx#C~xd?q%%3e#=$$jICmEb*iCp)!L
zmh5Kim*Kf;?ql_8P29r7|B>`r0*&=Dyye>7k6d<b!Dn%D1#w&8OF|Rr#-~)1FXOlL
z*|v@DY+LYC1ufzi@uzqtaw9S1w)7e{)Y@N5Tz-|}%EA4Lnagi*e00{kpP}8xjCcQ<
zcOxUetJu2s7ByyiZ-AIK{yTo856yJG-Lv%%s8a}y6-U4QQzb3Yj&gE3Q#Bdb6SjFR
z4|RAJrpy@mpWQ!o4$tbJnuo$Uvwsh|g`c1;KC9a!VQ;aoi#_-X;PQc4`|x_N><N!K
zPwg={+S&KN{~q7}{@L$q&dy~+NIyFLRSoYrd&}y(^ZR}W_MtcTMN{{lX6o5;`f>8b
z_1Bj6|D25=``+nAt$QbH25hNw_<v4D<tI$9qmO7BMD9BNNbl>|Js9nAkx$iEb0K??
zT7PEJe$FIok0-a9ebCH3opaIYKY~UDX&O2DjAZ-&IrJH6o-^TZ7&gc6!9KS(;z;xC
zW%M-?{3%%8+y2QAza=qP-!aoZ?;LJdGUo@8TaHdTFZf>Oa7zZ<;&b^x9~2!%;`4LS
zp=&rk*Z_iMh@S#2GHEdU9p}Rhr-NI6=c0#up2-_$(FJ(^cc6>K5m<)PML3*~HeUFD
zfB!9${^wkqX}@sz{wDF2bFR&TVe(}pz8v(E0_XRWprdH-)|r#nqW}BhFXrc6_czan
zqnELc-zR?mq5GQyI&17m_V-!&2m^YH+%>DWBJV+OX$&vzk9pGv$8q+?VE$_=H$i%_
zmU>q;mnx4ltrz)j_2Q*x>qYh7#9rxqe54?DijyDOdu_#kXrA`@b()V#_F(JTgWbaS
z&<sCbi5@3^<W})x1@bzz51VzOoV^k8Q7}9R>u}#lV;J#BTCQ6h(>|%k9cr2SU(ZIw
zk@_+<Q!;SmyTx(J$T(tCmQ-=atl-6mh<nq?0W;pMTaeX(X{j+C|A*6i!lyIf+rvJz
zU>@F9eRk4^`qXpRZvr~Fe%=_=U)zVrdotxjHLy9m;XT-C+s|dEc^UmAKOp-IUH88P
zcFm9Y!_gt}0l_bx5-+(qPRqBmaB}?rp5kvlJg4}$Ka_uvZQCV-_xXW=Sdz1khvRo%
z`4)YbxL8_#56JsyU?4s&zH(!VKOH?SU$I^l`y6;L@h*BIGCckkJilH6ZpGgQ`X~N&
zUU=FD;&0pc{R#26!T4VA{PDe{iERQNr{})Mcj^bG;%|vm{7vz?_5AMUUvWF_y(w;|
zy*Jr!)Yce$9ySNb|C;I{2gxB_-3E>2%j&$Za=KD}&#&9POH$|H$&rpXaxPuxOnl@r
zd5gsO_ONFYC|28d?Pub9>&L<WuKk7HTYvA`Pw+kVgM2@WPRQK>I%U7NelqdXoT$%e
zT82AXN;i7%u|MTDNp61-{hWp0K&}+<Wc?ZVWx_>YL-2c#{k`k_ao$OC@qP2>d+f)}
zUju8Qfc$UCVUu1XVb+DtX9sj1D_jthT@fJG)Xjb)_bv8Su{W&mHx1hpb~4@dt<NF-
zr`L}9ALu*6*+1+Q^&il^wi-9RuX@(|UrW)*!bdz@d(p0+{J+k=yD}Px&GSRC;5gG>
zX|iJT5?QhQ)5J!{ML&_BxcA!DdFF=TIIq33Eju<ZI*NAG8uxQz`HB0k&HuLfmF;gD
z`EVQZQh7nYi+)1uVh9cwWx&9?$%LWOjE>C<kBL<z$5<HbxZEL^pJ=vY3op@4_~s|>
zxwh(;^UmZavQM8iMp`Bep;IC^7T93g_q@};UGG;UJ|4@57XxEc`^-aNJpcO#?E5}(
z;&Z*9mL(eBg9i%Wfr7TNF^}=P-s#_{_f?P6?SBs$`#rro^G|-aGmUpabk@MTXYt2*
z#vXXTZSMPfKU)0$-Z%g0{k<Rk==*&C>ObrK!Fj*({k^~a!{>fKElV@`t|)pztRQ+}
zEEt0KSUY96cYb1EF3pTseu&)FaU-mOwB8xgmw!=gMr52_n+4(VR_=(0Gy5&@;p<7r
zfM~<DiQ#Miy}(z}`H2BqMN2+7_|p9rZ2ZW%;Y-VY;mp0!?QZSb^_m<{9o`h3&MBYI
z_kLo+i0=o`+Z8&ygDk1Rx69OxZcjn^mb$+cIdPzXx|z~(f-y<ny*DX(2z$()`}O&4
zxIGrYuCx847l!vAL@!HcD(^<MW?cWO*Jt}D=6_cI)S$_<_x|4wzdIA8GwGAruhw4F
zWOU<BI~UxGMy*VD&e8erMt4&n({<k8LuUrinYVAfAa-Zr1>9Ex-=I4K=+5dfUb}~`
z44^9wda`;9cT49{KRj@D{p(HCux$-YvG-AYkNJFYU1gu{mAq@K7mMEO_o`NJD|dWv
zAs+1JTW69ybh_qU=kz&;SFHVlOqhq@hwW<dL+_4+pBp!|hehpL{2$>sHSEPAX&CCy
zf`MAX==Apr!xY~fd?7Cd#|wEQ!=W)Bh6bmgfnb@4{WJ;RM=+?~6?O53(P7G;1_ONm
zC&Lf{29u)02LeL^7(SM!!^cLZ!@2maI`9|09y}L-&u$M~z#S@MW1ZiE@8G!r{MPv`
z_%6+Jo!s@_54{ZWi0I!|^^)&lYrq$z_Z#(0zO<wF?G+}rrkgrzX<D~(_tH?FgVyiD
zbD8onlmDi)y$_rlGjL{|-L>@t#F;wo>^HwJoQL2UeIIxRE*+fP3h>->empg&_>Dv6
zRB~d-oHl}A;RlFc<bB}Rn1Npn_;sHjzdwn0w}NNI2Z*QtKJX0W56)vFcm^)`;MV9K
z@T_@%c)B$@gm1&|1K-9Be7Ayc;RlFsH~2QbKYRn^%E(98T>{qT!KS)9u5+!az5PT`
zXCzZOT(Y<FGM@GC^$wC_^hbARfO33vS6vhxrQ8_ZldYVezPc>#F3IM2Hue<v3E+<(
zN|LvfI6k)Y$X1W@iR9t%EW!8h^X{|{E$sW}tzK+1-&d@!?EANX7yE6u7yB+T-XlNs
z`bLuskR)$MHPxfsLqJWV_$F#l{h)}PKh}7X9Goc6A7am7&7GG{sGnd~uPOX)UIKa0
z5J=UIiW0x~gV+wd-^%-{e?XmLdw0CycXOt{WH0&WJ)9LwF#e7=Ik%q1>&Q39w-3J?
zy8%6-oF8hXU~5!hYozji`s(I``vPiub59$z41$B|AlSZU%p-TCjQbac(oyuHaKsQg
zy8Nl(bS(Rh2Tfb^3Kxzo4L@cMik1b?(rfclw!-BL`%1V&%+d1NS`(XHnWAO><L^ex
zDes$>vI#P28D{+I3|f};U-*I2(yiZ-_<C^$?+)kdQ@aLvUVX^N@Hs;bf7j_e%R*?X
zIyjoYqrp)f9yws;@F8*c@%K>o!EhF&nX`)IqSg82l~Ehz?&H)q$>Qwx5uR5L#EgH{
z9_Agp);RA@y_}SPLH)As?|AKD_(643y1!H2-p_ko+|#LCDPJ{zs7+#h5o+diUleG6
z3ExNUyDzHXJ9$aeDG`i<PjD{8FDqy7a@0BCjKZ@c!RgK`AE)j@ChVF2541^-^_z^?
zx#(9xElS~Guu)TaS{~<XQZj~^Y~SO?YYE|B&lqQJQ*P$Am)F0xg}l5F&!FRNVPMle
z)m_-Pk{1zbz=YH1;j2u@=KDDqMsq$*?JoC1i;MZY!k<B%%Ip*Pcgt1Z_md`+`)V+|
zBTM;&{0Y95^cVU{s@`f9Z5y!l${MH{!G6^BS!N0IO1<|nE#1TsllfkI&s6Sf__@x5
zSF|Vd%i9HS8)v*~I6tjA=*e8K{Uy#?|C}~2QTrr$QF;46LKE@XHj}--dl-G({%&9z
zbyCu2&pmJuy`HC!NPwDC%&E&MQ+p?)T|FxKr(gRQ+Kw68R``kL7X%t@>{s@(>T~qh
z{-^!@!GNu0<z(4+k!d@BIM3!Vc8$v66I$bk>8?`GG#<*Q-lybZ8|&ET9vX5wV)C!n
zzM8t9%JL(!zGu`To4e`mpKD-FH9lju4A%BYohjEC>QD6&v~TzNnST16#NNupjvD%<
z&+YQ(wbw2FKAw`7+g(1R@au0f2UQ2(wq<;$gV?7X&@o<^*gySuTAwx8(a5;K9~Ta7
zZ<$T*-JW50&@>=JCCeGZ%4}#gWbF4mzV;r@F@E%Yj(=wT&)e(S8%gBMTPIoKd{g=B
z{lN<kzKKq-a6_A;Ena&UdA1(3>1y@t9KXrkXbo4PCxsid{_bsF>>*%P9n@35u)1UW
zDRf8gZm+LzFMq7_w|?XGZ7$?q%Kcv7qu9=;|9e`0EF?!0T^vD|ehK=nAfI-95$Cpp
zlTR4dbOc@eCE_DLxa-mhtrN}a9~3>5mqZtr2gyMQdUevp?w-eb`lzChZtkp476q(6
zmJUgt?l0*?A9taTPyM1CxXOX6yzi~wl=r>8pZn<lJ9(DEMZDNrt{N}{cOjM+bA~f`
z0enkMg@HK0KAXG9{5+T}GJQ$btU<;a-jkgmT9t*&kCUTXH;0YcZ`+X9+h0bky~m5G
zo!S)fS5Ew}fc@ZtXfPImUmq$|93#5)?;4-J_T&v0w0Au<HrBeX{K;ewdpuRG55iaI
z{kGSVcd;hl4n3J<Ke>P6uRhXW<i-ET#9w`_{}lPxYdb%Yd@2;{FH7fK+k9(d^R1KQ
zS|>jmj3<kLr$4*>ZSI@yZyMMBMr9zzfrLZR+x$59j2}u~;>DAXA-_Hfe!)PDJ39}Z
z{=EMa-RGIy>&4jh?0fSX6Yr;Pi|%0Qe~Enu)|UQMyXaeArOs3x>#3+bzB1tL4+TT}
zqkiH3<i~0MUn@(^G~#kSems9HxzyZSfX*!5x+2mWK@V<O7wIMc;zZ{p>X!07Nz9B|
zFZ*TxnYFdOi9WN5by&<Tq_bp8sh{pZphbNlZ;C%}9^OpsFV?WGrgzJ_aBp;sX)%jz
z4oJ(Eb%nigWKqw@smEdRxOZmyiJ8cohD(VD(tq;vz^wUXJk`Q5W@<~a5?u)&c713t
z&pXOo2?p*}o%I$lBm!mv{2!m)OFs42eQMuMJkfbd`L3)BX!8rnaOIeAx2B$#8Rmnt
zx5<~F0l75urupmOmptej_xPP!ktY(IpG}q_<G)TFj<=9=nzQ@HwbumAgkNNt*}6BZ
zYmSArrIr4kxX3IopUAmq`rJzWMAZh;yr?~O1?Pw-;nU?ud5_$LgQ5X7V)q|y62EhA
z2Yq*8GjuVp-Ea1nbdUPa?LqF}pf<?<D)Qv9LzZ(V;Qj(*TEgJ<Hu!e|oACP)_$8^g
za}>VlpTj(%1C!zn`b*NE@Hh&6#rM=9>?^__P_04nyy$oo8gdSLmhcgr%-M3`$NKqE
zBf2<0$X!CngO4+=a9so}iC)g<rg7Z*)+o+EUs5bvf*7v7pF7E#)0jPWKK;JN73B6X
z{$-5a-GmHdt+l1cZ^I_j+B;bX%uUpm03OYY`0355t$EXerezKHvi^Ynw~zxw?WWs=
zQ}loI?~uIcV(u%@slNJS{NwNRPd&o9bTiR^>uuh*^8=sh?C@s62v2XS!JcMaO~glR
zyKqWN!@4_r1KjNu;Zyvco#yidch|j0{mvs(%pcijusji=KIK0$MiTs^Z;zTSSTxt+
zSBAx+kU8@h&(2qRF4V4!-|U)|9uQpVyrwd2R_a#SF%rl$(aXiP-sXMDu&a32@mA0O
zHEPbS{NF`w49VC36PVQQL;R*s&HW6%OD{NmAYC9mARS=k?u?W#qa1Ea(_yg}+XmU(
zjcgV?(B_2ffC6Y?^>9W#D#;(`b1tBcwev-7yFbjgHm~h(c_nL{x^ro~b?2IsU%Jz|
zp0%3DDPMPHeKvP9c`@CW`WEmxSh^mvwdA>LA&1yB^N*YqObvg*S@$4v6J01j>`l&&
z+jr2DpFPR%@Z-s4quNiR6F0%jx{H-Kq1BhVkM)a>c`@swveu;+`Rm(&PFs&&EJZKY
zqZiv)4`Jldh9P=!lhupWnR*c(4ufMEeV`jtdJ)*Xame?yUOc&MVfzc{M&0-O2J@%8
zeI1Tkr<wGwo+{gB0e-4t_>1iQ!0ujP?VEhQG8m)Q_EObg?yd5F^5$#(5Bt}!CW7PJ
z`#)p`>ig)<-mb4;53{!LcV_wM2+8i}kd5WEuW0f6zQ7!pb0>4fdUyysd<wj{7u#|#
zyip6iYsu-aM-EhkoAOM!NqV-WoN;QXJvI@WQ2qGyBRMX)jT_VA@x9DUJ29Ht2IY78
zR&Q0@m(nfeU)DL4!2a$ckD8;@g2LvBFkV+BXC06ivM(dhGW=FQHHa7L9=c-DO!V3T
z@3`?M0ylDOc@mkUn$her#ij2j_L@yT_g3~G8#Zyr#AC?17leDyr%I#QX10G#c^rA4
zqQ%<jw^bwiUj)|#Fhu!OAKYbgVheIla<OfU*|B_YAU3}#5L>i2h)scg%I}41BfZpv
z+abOA*xJahqkQUYPVnvsGR4Yy<aZEx4t?=8C8zVpnLlbRT|*zyb!&Qk&+L?Z>H&9r
zo~35(nqKk249V>N)O{hkw=#lETE;uf-5<+&->o0f$I<4mpiLKj72Jp(hesX|PcYx!
zM(zl_$h1_huioWxhRB3dI?+cKF|VuJ^89r>Cp6{hZtD~+FSd6ecAheu%<KKLMDI<3
zi(6C|LF3J`YbiA!pBXkETadYrz3%2MI52MuX!izkOMG9+chOTc*v<E7+HTic)f#no
zB@4$h>whtDcd=wvs`fH>vKOV!qg66r;1G`-|5T~`u7okOBU{V+s()B+`LRlT%N>A)
z!9a`F%iUwfw_gH-M!u!>b}=@|#r95s2<=NN3tDz^4$W{5EkgY2bM*ZJF{hfs@^}?%
zM)&k+4Bh))@q`zv#^$*S8tXat$`(gHUD%RI-zfS&QW1=KtUr9HV)RH!2{7~_Z&d$m
z(8hhn+PE(e<BN2Es?_w4nk{@1?~IyV4K9MM3_LXNk*mw&NzR{D!MCqt!|49rTIM&h
zu69@Wo&FMybFTh%Hdg0r9q***`)g#3*HON~TW0+eWa+ZC`4cYvY5&8l!{Xt-ZK`cx
zu<h-aPKb@r){Wux17{HHqR>w@@G3bAs=Ar@`AZf5_zm%ky*JkGQcR`|o>W}Kz0chj
zB~8?~)HChlG@DWTn^n^?7%C2Vy>qrvS8&hoF59(@SPk_Li$nCUv)ZeO4>*0KF{E>{
zc!nIrR}JJ6*Psq$R$X(nF>l^Ljk#a9Z>1mkAEHHr@p5kgPVHSc!K13vhCW=JSQKvQ
z<cyx`ARc8eTe1pS(|43y!U$s+6IvW0j^ttjA^K=A)CkX23^!FzPJX^>ZOR`+hA(}H
znyyX!t)Xss*)Fp>4DY-i3>G)6TC=Nw*pz&8*%jg$7f(S@l{B#5+pxBJSJ^Mk>IUg(
z+Uxx`-q&w4uyu7#7QQIiMB56DMcrrBtCR15t^Dxg$UW=3kKvvJ{u+>F?%ghGbKcGz
zU?Z-cL7z>FN?LA?R_)qN-(CEVOk1M6Z1Y3rFUy%9!HIkv0w=t?TH{V+y;n?X&Ff+=
zCi0%4-sGBZ`VX0$iTj(;1Ki#7mxex(bqAY(p`I~B2d#TOQ~w3P(s-d6uf9aLf1<C~
z;ZvOfT?1av^S^%AbJ?e&St7{Yxk2wBa>kwobukFVy(Mc0?#?9_0o!Gx^5LY*H7@hM
zv3AD7KIC>hIgWb>**EvvCdN#1Qmi^)+5^(>@Cx+^t<Gx07f50+L@q?9VN+OJh*+7;
zow~qmboJL%d(FGb#Pg}W=HMD0t0o>|;~Ub4idBPyjdQ%g{<3{1ZOd^kwU0gZjk>=u
zi5*f7PUvE5x2f$G_~Pby{SVtV<h?2<LcFJbeegWjyItsROAl-FO|~(f50;LTq2rVh
z>4>Ztprh~Th|NDhM{0R>K~Go5>wg6eCw)LPbh0fae|NWA8vl;_y5J+(9^$=x`9t_J
zPKLQSq>CxqIr~f{@#g5#YSypj(eep$$jKeozxqw$lNK#1Y&n|C9U-hC2SXUSL{8`G
za(Hb9db9vv9$9PmU)|VyxX-09{jS;vr&Hs2npqvX|BLG~-;<r=u}0l{8bkcz?$bQE
zEZDACqU5W^8Gf~Kz>89QO<hIghj$ZK1Rvr!F^l8l;0SI5^NW3>HS7G6PP;~k^%8?T
zxvX+vjbyG5?c1DLpVfW_8|&mX_yj2!6q6i0%Z|;A{dK6z-h1ht_#|<X<J=2+>^JN+
z@%s<$-Jkm&rKYaE`xBpj#JfKq<L*q|<?1KUBbBDKRrh}4OD9{nM{6PW->Re65=YwT
z?*4pdBIom|e-S~>HFNi8^1f8N?!EL+oFK$sC3k=Z={MhmY%W80rHSq4OntTJgxndC
zPT1j@bn?)vXV%Y$PRJ7MIk(THz7*?`{F(*rC4*i?ZVFc6sygwin~+IQ$2<D8W4~Mh
z&v9-YI;D6xx>R!p5C4(4%O8|$haBFV$rrAV;d~AMm*UTr(3d>}6-FNuv!M2O#Mb^c
z(A~}(`!HH38nfosp?9Q#cj+~}--*uCoL1*xXRwb@Z@fC*Up^z`ExCufV=MV==CgGr
z{t&<G4!}<`S1UR9*BmLf`xzcK>%hC%FS-NqGX65}K%AL=mx~maqj#2C_|o?!K<^<o
zlt*1nN0V~nwN!vl0X52g2aOAWx19NQziBT*FzH^;+Nc>{W{T>t@s``R{9kVh?A@TM
zDWrBYk=L$W0-djUD@eEV`Cs)09BiVG=r<fb=IPKAv>TkC)SfbP8Ak_}DnGlMnBFMr
z29Boo+!ge58TIUd`Jifj9;3F~?oiOy4BWjTxcUM3Zuc*P_TJRp{}x>R3O?2D-v?KZ
z#^>7odT@0+eo+y91lhmXb7t^f-kgvrt>Ay1{mS84H!&E3s8g}`mRxSzr)maj|A)JR
zSNn{kxLJaAG=noY%_gv<^)xm+c;7QEt9b7_{X37&*hg$At4{Z#He%bmadie~27R*6
zRr<ro#S>&h9x<cq!h+p|?7fOv;JxiLlP84Cqf7N$wUw8=lVeKp@u)!&+`s2k|4#L_
z?GM2vKcv6k@?EfIk2R%w=Q+l8ZPnlFY8wqMSwNfrrtgX1l3Vz$`&PFlgG=t^`#!$+
z?==UVta7q6Q*LUV_p^orz%9AiPh9gs>^kDkrOAMq({-g^T8;dtHgc(CFMF<Yx)d)u
zvwH%zSzXsP{Qhuj9yUX<F($>o$mSkot;TVCMNZZNkF`S#@aarlrfiTL&^;DmWA<BF
zfURCejl(Ewr@~B~Fbev;Or5<kr*}^f|EOm9%6a~-R_;N4g}G}zoxge}ZJD2vdzlM6
z5Bz>Fv_E1-+510RO-|i&YHP;S<uFHPY)WTEm=o$OcbotwCu@$^KS~TUyKctD%D2jS
zNBh5mS#sngpIOn}6Rf|WXXrlFlYKlyOtJpa3C$)uxApWzt5tXAv9R(?O-y!j)+F*5
z(9aszY`<r->{&h2*qTSTcJ!Iy|JXg2FGGV`Gi^c+ba(|i<U)tv1LGKIaU6O3w4((y
z5G}rfOt}wQ+ygCkgKwDM?|~M(p+OtZTH#aG^=~z~b@!vQ8a7N=c7bGyZ<frb7OrRa
z1uy8>HVr>v#xr>ZlgtESFH1c1$<6o`UBT=Q)rToSb~u{pw-C?uyK3{h-y1e$FKf2%
zBRA<oID5(bxwicu^5=@5Tg_PRJX`P<e)#gspyP$qjeK(XlnJ}N3+p1t)}oM^)$rj3
zhg1CoY(Lxng185?%sP-iH?zMa{oS)+>@wGWThuHO>>68Rd3Nr+x@Q@yVZ*c(-eI#O
zD;Qmh%`$Z!{$az0OH;p(GfSS~cil_;_*CMj{2gOl$ym|LyEM8~^m?2*d5YhfP0r$N
z=7Plqns@l(@hd{b_xk?$XQ1ykXq%PDpDWm!g$wZT+xTtJCImg6=97EPEu6wB1Z|$A
zPu1EvicfcDeX#uuYv|;%5V1+!<(8!wSI3Tk*K#L1y{n1154MTjBg3u<um;I*w)Tnk
zdx>=uUz|*ghWqB(hmBBgqZ_}ginYu^8e$Za(c4oxbl+B#=d5+^V4yxuy3Zpk3U+l9
zzsj@^I^m@=>nq7?knc8+yqNjytET)7cc<X9>ia&^?&G(KCRQe)hvfrHm&muazoGjy
zemy#a->ja-KW?ud<ISuMU~8m(<u_R`FF+Ru*KnAk%&UEt_H!;PSB&}R8Sx<Q3(>u0
zwZV4oq%H2N3$?#ZERnqu<PR|}WNbeCe<%Lf9onY=rWeLcCJ$h8$BV?PWs4GLE*AaB
zEwZ$`3;I9uP5(jN`PLJhR-B^c)Q$_0r|Y0$HP6|n+F!P+6nkva32cnzZ(qq?MtZ+e
zcYOEN&BI4e?OTd=>U$NmbM#XG;ZX*gh`eWD5R4Joa_A&SKRpx7f?Y7*1>Ndz^=AGH
z^y=~L-uuSPyNf!%^lf{$Z$tWSU+cGq7AWU_qr1DPe{Uee2Tt3=%d(kk#ocm%Td}t>
z?T_-#`us}EA6?kRvat+j10v*GiBBVv``T|>sG3W}@Zd*16Fv1T$-NQ!9lT5RyYQ3E
z-Ct?q7xO&AnKJ{A=souI`qsMNjxL06)UO|(j(xF?b}L?**B2gRO1dijc)%wIfprkZ
zChTLc<CpMp0pEA8E7;Zb7(NdDvv(Wgyy(Myw6ACU*WvRwuJPj_QPLf}xLCGTMJUix
z(OZAG51y$q)9O}XlXS5^CfnE-yzGfZkfrP?6xUxLp1V76v5j5n`5ItabJKj{)!>_B
zc1#w&tTX+uJvpB_)OU*`IuxBdWSx2JwWaKE<+?9`_KM#szOQ)d_2i!gtZwaQ-gTdW
z`u5?4gw2f@I==Kybd(uCJ?Bfg$^J){wsI%C?$~+*I7DkpUuYSAllZY{4m?Th1ktFt
zr~hHK(>*1c6VXbxhFj}TK$B|TQLV487Oi>zK?ChHpIywQVkU|;Yi>oCUT7<xJ=x;7
zOV)`llC^p^i|?6q+rjVRBhkzKJ}?&jihlA#lF+W4b?jmpvLP%UX?bAhRy>!9+psyh
zo%zU|pD;G%E9vnw-*a%tHV|yG11wA#v5(C5-GYA@d<E#r(`AEq)8(W8)y_~mD<9vu
z9C?-qDo-<2lfnl#t@&>5^RQ#3eFoj>QDsbD6?Mt0joIn^dBtA4$X~K;)BaCaF86<M
zHtH1cT3;;Um*UUOkqs7N4Q^eva#s<5*v54cc&~A^DS3=P7l*7O#-`sDYm2a#QWf=9
ze}z5qs+YahqxFeh*3M@a>rQ(^cI@BHxA!|!kIl+`a4hb@p46U5J?|goUb4~1yL$R~
zfIfAn@dMaUsXl^3`shygfu1PVd+GySMoo)A-Tl}#`V8`JGx}x-F7SDy?!I};-5;OI
zSrX2HOq_YQo3$UrHxaHr|A)oze2?;7bTQ%96`Geq+G(6WKubMuBbH%Ibb_Ag9ewh@
z{ZvduZRIN!zTH1dzaMe$k#A;kXTAd(3;eHO|6F~!*sbXNN!nRD>ytLmu@~H>oR3U8
zPfg_-ipE{&@gV&jom$?`or_Z|qQqh7r=8l_8t>VZ|F`7Ff`k7Tz23h(&iBkc6zR%|
z#BfUZy9WA6e~RCu$b9Kf-D^1w9=e+~Rr;^<`=*l5P~QQqkO%ee5RcWI1SZu*ncq`c
z)ah#kZq{Y}tMCgxUHv=W>Y21*-4}<E6>m|e57}SbN;}#0t+acNcUx(<3VV?A8FgFu
ze<yjtPX+w=KY!Za^$>gTIs+s<+RDCuFLAIWx>!0^`t{8E)P9Njd=46`&->|PQ=?g;
z{@U>Q)ZX<m{JkCYPu>l3``m2=-z)TEbr5twh7?OTpyP^Pf~K+$+JLzoU4zV@Qvx4O
zBbIQ!KGz67V7{OEevv*TA6D{CnK8Eo+psf}{Fx@=B)hDQ<KfR8ttUriLh3G7XX{uy
zXH8bSL4I@xv)c{z@09BkrCxk;JvwlX-*>TOi}rK53o}W)M}2(^d*b6JuWlu4GQ1d{
zZ?u^cuH@doTr=n67noV$h5R<w%vKEJ=e*Y&%q!Nr(^*p`H~6J<&`F!fy_rJa+3cZ_
zi|}xpXJ-EZTc$NQ&E5kL2~5v@gPgFQ6&rdJ?1#$6jPSRE{n+1ObG5NYwL6ek*9I@>
z9=rO$C3XJ}-zM){&~C7`u^p_e>|!lwO-*8);m;EAneY=1Z2>b|FbX%}DEyl7vxS%N
z$T$9L>nFD6{ha&3!u&tnPJ4UJeE8|vC$zSA0*_)O-QQWzUJfjZgGTA=3&?LvuaKGD
z1$;+oV`+7I)SNFOS2Wi8QD%w8^WPjbN1vDQryBmrmO;Fb=_exKCD{Ki-A5Q-{Nug-
zvovM}V|LR&GVeqJ9{B?89-`eza&43gli5bGjyC#In{V-~i*fMzVuDX`Smo=K^6Y0k
z6CG`?PQ4#b@W1%Z{W<@XT;Dh`f?0vEAK$}%SirY;B+Uw3MSULPD+XC<_r=oZ4X_DW
zKkSpG|2LDQr{S}CerYHBmfj-2v_YSr@=MG4RBS@;s4wkDsjd6_f7pBX_$bRe|NFXU
zCMSXzARGj0W<pewx~)|Z(rR<(prBZlK&w4$GfB{*>9z%J7d4s*q#ic@wxqgstNk?r
zWtU;=E^W0<cDrQ|wYKa5gKPI#Ckcqk?zRPyj6(B!f3Ew!!z2Vtce~H?yq@RzV_q|J
zAFjjq`kuev>w96}^fhdw_N%UAGon+h9f0NqXNUfssb*0g<2pFiEQ}Brzweq0Iuq)P
zd-$st<#TUaky)6-y=~Vl=<M<DRg*84%e|Y=mc0AksNFE0j^^>+z1N-JnE=1lX5(bD
zD9n2s$&H@Nz2@uYcgFpD?c@^7;oc`WD{~h2-oEyOooRG;y|;OiS#%Ef&VhCcxL5g+
z%FdVr?r;yBT@>YB3jg0C?mcyFw6n*5Zy?_+n$5jG#{V~+d+V=V(i!*fu|Ii{!@X+o
zY$o@1T^s96aqsoKT+X}9OCFe?pWI(kko+FB7=oAd<eJ5==Uth6xs-E8=Pu>`GVWhR
z4ceJDeta9(OTyC+3D!^ZyE`=F&@S|r@)-CYE;!T<-W}t5Lzq2S;MZOAl?M|(<bY4#
z;CFX8_s}ln%~o&~AH*T>cU1sy__&4ly+=nD1@~jf&<>vMHhG6!WOlG__+sq3EkKTH
z-PDHGPH-GxPe*{CrQnQcRx(liJg~1ky8VfzTRo%uqT!(5fuEo3ck_RaSUDU#qxK}1
z)t;_R)Mn6su)iqS%c%3r3}X%5c>C}caz9*tr_kXVr7NSq=?u=OvHO@aw7tEF>#8;5
zU_ZHB*SZq3o!T^svl+P;#FSNo)KF8k<`;MGi|aY=8)BsBW_=oOu!mPRob3y}{KQ=a
z#56+q5xkg&e076MJwL%_a#drg^SXwAhCWK2i~-ipjwM=`scJP(R#BItsx`zX{G`UD
zv87o*a{T&wcvtV6p7XkDCKpeOCC=+=D00`v@Zn3JAEM1b7am*+?$d7&kBNZ~M^=LK
z!1u&mSB=^;c09Bv-O9e}>+mBRBgAG3@rQ)E-np%a9NCll{E?NDlRCff=qJxgUJ7m>
z#b0o&c?x>L*~y=GniJ}G;08ng`1l3?#Fg+AVmR0kS_9dfwy$Mg&YP*5wsQJK)33JI
zqI#A+FJ}7HXPXPo?FP;X-~jKbymYQvESsTEFdRCs>zCL{(0}EzTGO?jer97Ee{C}U
zb9jz;eVp}FUyaM-OE%+EW8Jz8x&m<wJGLX&h0B{-#>ObxSzqO5rD%H)f5=AqCcm(+
z#*jbD90L4nToYeXy@u-Gw5hhWmiAqqJ+jeX(*;*B7pE}Iz7yGuBZY~}(bb+r7vmFp
zGEMt!=O!-K8XxC(3O;3F@Ha~>3}T+2u<r+1c$^N;!-rD!GP#gzUG#s!Mlce5Qp890
z=R~Fq<(RXp_?(-nJ2CfF=j^xnj67~CzghRg_x)?h{3*Ngmb^cechUQQmbc*jv3c{S
z7(PGa`i8mHQ{FTC(^HOD{os8ARh!?JuIhQ;NYxMD_q(&-Go_t-C9@l*{MCIQn(~+T
zeQ-+E?2;*Wmh61r+tba7L~eC?6+SL}g{w9&9tYchcTS?dc3E_Z)~jJzY)Ly~6bw3m
zEBL;*<_lLshqE|0)u%uBu<WaJ=9~TTTYqr4=k|Sv6SMapjvcSv7i&#DX6{bZ$Bx(S
zGm+3-{F@)p`Wtc<O285I@$)b5obr1<K16?Eb&7uBKnHj|0L*#@P1juLqX%8~FRw<H
zkr$ChM+HCk#-d)#Dy|xK*aAHv&THp-^ELPhq-*hhY&Q4=+;vZDrS~25WY%l1@z={3
z+N~qMnd{#;Jo2>G$RY14dyQzn-u4Nf7`kDsAAd9Y`OiDu6DRIko;<Sh8hj8Rfv;W*
zU0sI{;(Gjk5$l5(zy=pC3J)CM5^Xhem0K-1eB$4{^I^Zqe;;q`xy%9HMCo7t+g8rl
zvE#5lK_92M4jt_k9SMg;SE48AZPP8>6D<j66COU=b~OeI1LiZxe6o2C&w23id5Z1N
z+U?$X@$y$#m;p<JonY~TwFvBR)rod#UoxSGwUJ*#>m#`m#fK>w5!m3_vPLv2`Jiix
zb$Bwu^GV94x}7;byiT;~_JOyS7bNg)u%_RRGY<Jnd%%+#-WPrjAv<(mdo$&a3TZst
z*R?N&Oom$M-?p-lyf4YFKqly#);s%Jz(2$<Bs1)sZ&#hCu`(loX)`k4@>Ar8#?tny
z2(pp-4D7pTLteBYFWTP6y^hdujJ^b~_`NmB_`N1++ctHX_`OatUA3V;ezj;&wv6{&
z4|a9X&v<#ka}&yo0ek?+qD&O|v;UDRlO@QXk#Oqr+M@19SAWeU_djxlJ%^rJ<bA8Z
z7UF+ha`o5njZ7&hZ`-i(vH|wxHBQM%mPFmP3Gjold=;46I_z8C@#2bhOg_$7IEBN=
zqDkZ+OQsg$oA=IOw)h0zMUgk@>x`v|0dQ9E881sqiMLsJz>@`|D0-XV5VSFL-B?;|
z$F4qc*VWMBa&i~KmhL?Ktn=Q-ZW@>mEWWZdDOd;&8~)HF)AJScOI>b&hwOp`bHg9i
zx8V;%$-%E&k=*cyPO?2zP~HtJ(wwE9$jy=8Xm4zle5@W_q|skO#BH0{&(X%&*l}dH
z`-_GpCHOuz1GBl<Ue)}s;=f^?YIs)9HKNmP*x-=!B>yCJ;*qyM`&Tb_z|BX;RbJY~
z>^pFyoz1*2UrL<zqQK#Y(6>Raaq~@I6?|LQ<fBj=L~*+@YXW_Z?ADqDI6H|ou`+$H
ze3{3ZCntZOIUPIK_f`A2n*e{)qBCTb)^(`abnQZBjUbOjQvp6#{d>&`D=$ZK;CZ>p
zG;2!E{fWELrH_8HFgXLABhzwLGQ-}D9`Z`lpF}6~*TBUFjfdPy7u#IE&hMcE9K|OP
zzxqo{@Ea{kk*}*U$R}<X&(X8VBfT}gWW%kVEZ@R2U*uhQ_lt=T`w?#al7+M2z81JU
z$33_sYgZ}G&<@O%3;xb+;2*kx+E(m9ZMW0zfZwik1j}20bVcSZp2vT&_Y;4=l$gj2
z<O}B-R}pJNH%Vc?$e&?+S&~4eerYnk0`@4;{)-Q>{~|%V0WP?Vsqt6dn0oMytFDH|
z^d;JV8GpEBtl*GhT<_cloq!wq-Iv9~b!NjDK0Z!&Y{V~-Y553zM>+4y;cr(#7gr;j
zu0fCVXoIu5_oO1jiy7n8yTYbW`%nhxI}N`9)*0=WyA;{<Cia@<`j(CR6mQp@i9aqP
zr@v(q<B#JvZ{nl9OaoWPm&Bk`;c{58pXV;w49^nY1J6~Qzdq}>Q1PC3!qY48ldt_9
zXrV1Mvt`54kyUSTt@|gJEWr;ni&#;G;QX)rrkOp7!y}84wJW5v#5ki)=SjHmeXXHv
z=c9bOuZ}HwkmsYU<4it+;X3|j!}SR3mJM6=72Maot+u~JzuLVc>z>swSp$-3p3<7=
z*+sPfb)E_6%;FP#O80f|VeScbqO+inpq<-UOW{zk##*D_WPL?b>aQ9YSYDJRqeW-x
zQ?&MVeDpd`G3Z~{2l=o5^!w}Ng2)FK%)u~z%fB~T+i0(176H%5wuyWjXm8B~HjsEV
zvd+qX>EQvL>)aOG4{Z*CuOVbWkPjhR6^?2xN01q*aD%6#lzH|>3H-~xi{2LaSu|GB
zTpAvU?5luBt#!<|*F{r_(Okb^pUiRQsP`Jo^}h_~_t@O3noS!YwK`*wr&q*jFYv*@
z!{C+0_&IXm%}z2H_mPz|(D7zMN3)X0!0}AWY}VnNq?PyGp1cpnsqqa1W6Kwo;qPUw
z;4vrVSNB-?wRyf^unIc;D1Cg4K5jsdypi@lE}m*(V%M5@MVj0?`S%jwd6a&{lf|Rc
zD@`VKDQ9ztAEWoBzl+WVJV$OYCzkySc`Pm1I^TVFT{_*uJG`s<5LWNHwk{)GIsyLc
z9(Yp$j(lK%HA`ck;)fg6OEnhx$C&4|^e1Tt{qGsZ^F?^u)6Z+qb)tUcHmB0IMa)yr
zsI4@6X6#y!ADkvuUTS*!9rA&-ChlCbD18ZYK{lr6n5XcgKNaYMrL>nJE=Rll@WcwW
zD}9kRznww`*Kj}kp5oQg2_?IN=cNnAnaf+`_l96LBYdZu+4IyEO1gPwuO0gbv2ib&
z-9>z_U;6{2`DT+bOS-g&RJf^+bbO6FJ>AWa5AulmArACZG&KDE<J^-yuKlRR;GcZH
z(TI8K8|=^f1RwbCp&s$V@b$lx?bGzo!}1SQ^e~^)uSUL?=6$>N?8mZmFZJx7G;_DG
zWE~P&@<HpM_w7B_(!P8Dm6_@6v(mlk?5p}+*6EedoI^4ESC!$JowL}hnI>iwWA9}8
zI`=#9+C#VCw@PClhNZ8eN4Ie;hP+Pax~wI7NgUa5fv!7;@Y&gYje>UwKIx=JzAFEz
z;-9g?b2?-BPG^if|5*MrkA_mpv2eWeZqZFct7lQO%4E(tJMwUPn(4#$wkR{pWbFRT
z3Fc<!gWaJyYCaXr<-Y@?Ku;VPLSF@EC39WcO$?4KvVA>k`?4}ud`9`i<T1=j;lnUR
z%llk%tVbBP#(WRg2bdEva%AZ&;`rF0nURIiD*A%y)7~K6Z|ePKf9T79c6e~bKVmc2
z?Avngfy1%ZXCBk<SmCZm<!=t!Q5%X=CH#GVg3-V8Up(BOx2+!luI><>2`0kBhmS+^
zk2_s2E#Vt}vzfIFV!$c*5xi=2pMUV~_~!=j+i&B2+ZS!M(WZS5K0ZjB!h^tP)ebHJ
zuN|>0d1T)cJxw>6e__l)Kf3-;{150y`OWrSD|5WO9xHQzDfHU!6uXt7*=}Wc9)59R
zCFmBJXYl!N44cKH;{kuO$K&|9IJ9l~=b-=IMq(Y2hw)wZkefTpBx@$S$-%SP8;S0-
zn(=pBwA982<C7E962MYtQw<%*2Tz}R2VHVUN$al5N5YBAb&hoC!Rn;04W4b1_Ih68
za_uL|hOcbYobxu+A7I~B&Sk`Vqlx<X7t9@PubIk*dFGe5z^|f{-8+a~yr{DZES^bb
zazC2y-mx0{xxtMd60d^4+SsXVX5~5Nny1#uZhoeWI8d5gY4Y?sifZnxW{unSqr1-|
z_m%d~FLLk5iJBD)irqUdnC;$CK94gHID5F8*s%2QGFQIn+?G=OA?hQri)-r4R6PTa
z(V5ayZ({tz%+I#Xey$`qQi{FOkWc<Qznd1ieYxa`eFj*)!h6c6yUE5i67~0@55_L?
zYMeyigEi>jdPcF%GIERMBY1+kCw1uG<bF}t#8ke5-j~MCN&E1a$9p{{mwiY1ExYlv
z?=pE6J563oOmVvl{QOJeh+9qG@}1=MJq{mBxaW5^MX}BAc2*9t5BBx<n!bbNzSR6D
zdpaMg=09<fONfJTzbQ`Mn0rCzhjb5q5Cs-(%vpIDJDG1ed*n-t+`gQP%!;z>@f`xg
z?{Lomn|*u_AVcu2t+4ovydEkEC11s-D7s`_E0t65D!S27Nlj8T9tSoqJo8{)ShnR3
z`M(cP?<RQXfa=}k)$-r%yNQ~rBeR`y#l!;I(Rbj3k?(}s2rqhdPaJZutev+*cAjWs
z;Or3J$X0kk+LIZ!Kh+V?_|VI#DIgvg-i}P((Y(Gc!=9l`X##(6EqN<E1D$M7BiBky
z(J%AGN00{%$c7X$Y<#=2X@hnLX;*D+2%Dz`(>&JE(unVm+vWRD4fg_GFm!g!nB3XT
z^vC@0E6A7s%(hgx;pHvtomIaYpB-}q9}44CAAbJHj+pc&-^SK>G!|k4$s@oqn@$y9
zLw+rk%-atxqFZjiiCprn*xx&`W2&J6^+~LyufgQB07KdHQ`7iQ<7>*6v@I)LQVOo>
znP5$nn-%{@@&_ebcuur3-)~><X1^EAN#htqx79eVz|ObhSbvk<FE)M*M*arcIY8St
z-B{YIHrv*h_M)epGLB#UlQ#}Mn>CK@dSCC|bYod>@NO^`55G>Hc`cnbN{mf=9c1T4
z*;m+u-DhoF>^$vBMvgsH9U5L7rA=xubh_+AO90nF@JjEvyu-Lh-%;MT%R4;=o76ak
zCZC#7K}?i&Ji$7l13smE8;cwGUrzc8m8a<CO{PD8?!|5Ji+uQreeNHZW^TXz+?9z^
z_BA3)^qj5JltVoY<VA6v=`Fc&es9|n=o-Gan(=B6^tp=lu=ZbWjjX(>{=CkH$gay`
z)crj1p>wYtx$E3(fAFDCU;Ed0efrwVZvXI;C-^<W@5@`Oo&+ZjX`fj4WcM)hUDff~
zdDHF{Tx-hM%bn<dH9xm=3uie#v)<<1b!}j-ZScP);O619mw)5?BKw0p7sI>4De`h`
zJ+;6Nf~N1Ng1_UqTvfWjtf;xnOl$Z@vvv*t1Nc=%J^R}be~(l5Q`Zf94Zi?=7g1Z)
zgi35K8tZz8WQE!aWwmub|LMOTA6-&oD4{+1ETXjM+V*~!RC`(v`G76l(NzU&;e7CJ
zfKTA`9pWJ|{6cLPdOkAjtmUH5>LPQ8`XE<HF`7H#s)55j*O)u9?~l?JzNi86X4x-b
z<3IL!_Kybds6D+G^sRoQ^q;~%U03WT%Zd%tC7zCawR7|5A7=i|z_JZkzQ+7DcRd%p
zGx|KRi21Nc|4Ohu2@5|T&FW@?h2kXvEVA1P#wK~bpYaKf*vEI25=RsaG+wPsIrwB4
zmtkBbjB6SEwrTjj{!o7Uuv?aTG=*Nnnj{nCu?4a_eV>zj0NCumuR0mD^E&vM-Oe`V
zm)%bKMBd_r`ebfB@=*bM`!4?#?~bwV4mq0_q#AlhmY5GLLw9&}9{Y=?hm+5<k2#>b
z-9_+4=v{TBU!9M<eZMCIB~u5cBhT>19(+Ib-k@vA#Qn%ktAC}g$h;QLtN2rBb1<C0
zy&2qkjW)E0>LBgBN;?VQd64(5ETxUtXjA(d_9IWFOIbPaU|r@Jc;^A+eGR%mkIA=t
zf}q3tIPV`o?i=tc!Ti2Vj$i<@gy>{=<f;9@PI#S-&w``$fMAZi-@l)+X?^#LzavvM
zrabz%mrp))yOVjym(@)l;Y*c!?d@IG8jtQnlph2BbS`T(0AJF$;vsY%eCN-Q?-S28
z@}1&0V&54yUBDN9zR1gy4Cq1fpV+!`#fUk$cOWYk7SN{JYoElvYT8U7D`)K+*JhSH
z{b$<L7@xy#7cPS9m0Pd>Y~^!v%%vSgb>!)r`hsG&{9g2}o*VA(e?44K;r_)B4sUOb
z@9TNA|L}S3Ios1eef#jiA?G_6Ozk?n`lEkTzm=F^-AA8Z_h&y%)PL)HiTak``O|e<
zkKeFwTkDS=%Rh0&zP!7C^w`1USM1y0`ov=$$5-!5z_ZPT)2Eu&KYOfm_y4NzFolJG
zcJ%A@%YXUpb>{fzi7T3^d<ql!ZXtVz3OjhdW5M|=I(WY2a}U<P_x8=}I*xyK--E4_
z=T6SQW_jYKIV%fw??il`F@?+HId0*hH?hfDC#{?Ujuf^Q&h0#B`SO;_&9qlOVAkeS
zlPIxw*3`e_|Nemv@}D9tqQA038|wF8`j_h>cAUSr@4=LrdJTI#CJ%PhClZtAKJoRh
z*LQrqZ{1nkfAU20zHb$rRcIoUmw)T-Cmu6A>#~RGL9QnXCKvYPnC12wd!G`zf4q6$
zS<J;=1Li5NJ(zRW@&|X(2m82m|69oIv(zVhtdNm~*UU4OA1UV9psm^Diu-L%)^kzs
zxp;8D%v81!k9`B0uU%lea>>JKqpv8q8sO9+*6qEl+vL0VJoX@KllYHTU^aPAeu3E&
zXDwaUF(0_3TYDJuYOO_Kda_xbM_oekrlku^WghcC$aw!<W4O>%9?Z`x%!}kLH;nBd
z*Op#nDwpO_vvHv}FFV#H-dIgA*2_#~xL|nkpSA9JY^iH1TNq2+j-_zV)_k*PD}D9Q
zkKmH0HtW3idm=tumzm01{PTYbj+Q%<I+uc@Dd6{~;HY~IV**Fb-mmtX={<*+tub8}
zSRA}z-@zx$+^eo3zsL9O=sWHA!+x{E1CgBN=nxfK=`-hO$&xB3-|pAdUS9Uwt!lm=
zohLQF^U9+m3tjdJ$H5Q5S8xtsJY}I-k$7p=)HU!0)iwANXlXw=$*<lQDIbEr-Ovxu
zCMP-PqW@KY;NN$y8-mBZdS6|6PSJUfy&le~*m^v^54kg|7MtxW`ewZHEwmvgdW5Hp
zw*$B&7^C}H)*Rj)<$6bcq_FmO(^VFUEVuW*z&*YHS<^+lW>)PNsAb3ZC_h2IikBGb
zHo_<6>)RyzMEow!nRTaJn>4{S_)Us;gBlp<9h-`Xbx7|BuBE~!_2n@<3_Z9VT|j)#
zVeOuO8UBdxT>rl*pC;cit_SwO4`0R}w{=WIEt+qfzDwa1VQ@1{UPFxECG7canq>ME
zC%f|>MjmN|FRHG^$Zqxxv#vP_XL|ylsxjwxA-B4My@KLr$dyga*izza@Yl?0>GAM?
z<x3mJTK2K~>Qm_5b*5)sy8Fvs4$b*JhqoHjDPFl5{wH492>%nW3}1{d5<Gn1AG$1$
zOdoN+1C1S?h&QH{S3ypN)4CZy(dYNgZw=3lB_eb8pWRWvn)aF_=S+>ZhE^KZel_@J
zj<@Wi&dpl0sbfwDc>$5u$XwG=Ft>5a*XlR_?Ur?3JD=HCwHlumajWg{<#PCFtaZ}d
z4pUHw9=^Q8gbU|?_M7$dhrYEg-1_)q&ETD5!pj>Y)rGOv{FPPIoJyc0JpMc6ZlKFX
z6XCht5%+MEYcXIF(9mw<cri?LbLktbLl?E`mRBvLjt}}%_rIUJ_5pl_9lto2{ifvh
z^8Ty9yJL3V%JYFWJZ5Ua-OoQ(4iA_Q4`?<8d%^|bJ=<EJxAG&GYtNf}_(JZUt<+$7
zyqNs>RZhha@N5R2L#?|Rd)>a~NVs!oa(K_i3&Rz0*HpxesSs^eqyJglW^JXP$oCY)
zCmO9EiMkQHz5SXUlaW31rml#6xwAgZXJAF|x}g<4>)KnLx#juo)2p0t%LB}DGyCKQ
zE-;mf)z%I?S|2NFpWa;Dv#yF<`33k8g8Sqg&g%L3BlYPcJJ-34!!VwI<61P*Q?J;C
zQ_@vm!1_JLZ*0{~*>yn!_)^yvpQE#V|Ksj=*du%Be)@NW1AMOLy+G$Uu#wuB=owWn
zjy!VUvFfA)e;I(kMBG&Wp!AN`*kg}_t2<5jkXe}cXXM@?t(W)~x?Dvg>whWjr6O**
zu3f@!jls~r!H1D$myFh63+xclxNIst8@JDT`!~>oPB~+|%19sc?0dbZJ%7@x?EG0H
z?ePq15j?^BqD5eBeH%NWzi!~T3wo?(4?MO&Mf9(`rQ_S2C)(IyR=brw<ZBBLd*BzP
z>|@gXZP39k+S>mZxdGvbd?1^ezpylOfSRIlcpm!rw-10H`yWHk#>V_pp6#K(ksG7E
zL)gW;kvD_*UI(bXV|l`_cCy#m6wk-r?VzvS<g_-s?us`0g7>dV50R_<kVzisc9MJH
zZSu1ZKIA5uPoMg!GSpcts(U+)e_eHU^Vus=K%0f^d!59d&?&TyeTj~iYilnyme&?G
zmzik;>&to@&7{JC_2>6K%YEkxw>M}j0iDgaV<>1T#}-iCX7RsgEF8%LGj3%qwmG;n
zO25Eq>c;iaUd8BYmo+Zgh<~mFyS^JZZ)X0%x{TkaH2{pXPb=6189X;c+(7Fd(AZ{d
zZ#_4Nj-TTC5O}M1zWht<e)j$~Xl<}}EREvJaT(9xbo6s#3J2zfl2O)1xRnNG%3EZv
z9zFZA>VVdSJykpNo$}4#)~n#U>N0$pd2gn_CzwMOzK?AAwugJcc*oBRxhMbmC@t>2
zSUU3$<(t?fU(-q7ME-W0yFlKm#z?GgQwd{350_ut#_A-)B-8MXowyQRUH=1lCfwKi
zl4JBaM*iBqtgqdx8!Q?LWK~cjBpCnEPijv}{`O<<6^#H3WET9PKM^AL0-VgwzicOt
zznS$l;0<{po0J!l_G4>$Ck=d$To)=2c#pm}P&;DFtyaEvZPB~TSMLP#O^uoF%<Tin
z)mNDBB<35yTy>NLqhQQ~tfj^p#1{te{T+L+e3LVw{TgDWwZuy6MsX|3*fbCMV2P7$
zdKewU#vf=`v9Qy%3ojb8mU<@zyn{9jcD>&BeTkd0;~N1C@V5f{2r*-)>*y!h3yK~Q
z^mk-s4mKIE|B%r>y-l|Tc{aon1y8{$PW!?O!7Bl*(n%jTh!=DNr=9G5O%Nwd@VuV&
z;i?)R@ckJTiuuNvdn3<}oUP}b7UD#bvs3l^C(89CeiY*V&JezQ?3)^UFVyk}v|E~W
zuV*Un?QmD<y%@D2A3_&;tCq7D203qzKGbH@)%dVjXRQUe)R)G;Y2(KDs0Yp_?vL*t
z{2t{W&9^o!3FFtN&#uSyo^k`w7t%J@b|(6q_Ge==W9zD&o`SKso|uH6fSgm}ESsK~
zGI7pqJL6P4G55kQ<<5?fL;Ks#pZ!E(bc%9lpZF<y=tlB~=x;N>gSF<|t+6;uJ>X*>
z63!NbvvuI?72quABZR#?hh6e-*)?%m;_%8?nPb;0fzA;t#b)>KwR3ND9kwj!`X)F&
zI^XDfy9SUQf{{5!&OduY66{522Zux0wx#QvdK;)sG(fB*oNrWbV1@W*>6&<N!$SO5
zT;GU3T(u_J`*&WuC;NKlf-ZRdtkJ%k&hL`FF#5k{fwdP#|8J?#zTuPiOUt`%%l=<;
zLD%Q`|M-WCrjf6KP2{v}#((tv51VOQ_*h<WyY<zhmwCD88(7y`_xw@Ziz9zh;E-_A
z;vP8Y`uL}3hrq2Gp7-!D+!>i?x@xJdl3n{Jz`ttXFB}vezh6Fja8LKp3p<J5R@ChE
zu7Rt2^xSvf7<p<VwRoDM7uoRy^e>ul{c!~}F_-rC)1IDJo6WqVG2uVyG+DHvHk!y!
z->}BZX)B?&WxI5PEE*BrAp<HC`&nP$_eK2V$Dn)d0S@@5;I)MR;$QIfj2kjfpAIk6
z6YxCIoeQtaZf}(5`EpcoXL~;@#;frM_M(H%CAnTrykB}x^lut^6&HxopJM)YUhqQs
z^B#T)T8GC6dY<A2Y5$($2ZE{E`GaxKjns<QdNE?J=7VGNI)b^X9>lR`>V(&dzas0<
zcY$Aj5A=cDT{s<@uyXCgOEb3}zIz{eew$`DT#@MkX2ol68-5cxYvISY^4&zcjxW#H
z_w!;~srj~i{6D3=ozTrO?9-rc>Co9SYu60&)M_=yT4>*^2XU+!`mgoq|3-fwM5ZM#
zDLHVA+Iz^be)TJPuvxeRtiTtmD~!N<r1K4sql%8x5>?)X<Rq}VjeV4>&_fNs8+=_2
zIm`b2SvDti7xP<4UBm7T_;DG3igBx5t)Jf2a|2w5_b$@9z$c!n)_xFw?K3S)liJ(9
zB~)GBK;P(FtJ1&k>1OxC=Ui-0$LyG<{#i@nvrY^C_CB+zea>7HDnup}ew_9ye^i$#
zW`B<0s(B8Qmm<ISX2!RLx+Vj_U4BolWwQI<Pd?of$i}~#V*2cL>I({HL7T#V=}H65
zrt34{jMiIl*~}WL?S(f+hev>i<|f!`?#QrN!TV|6yA;1@8o#n~Pc&cc39Mtx9r&b~
zZ&I~DYFh8!m!PkK>27k@+apgaui+_R(v6I6^kJgk@{1?#$%aX>g^A!X%M=5T;!$`^
zxA2&5;nB-jl|S?*{{LQJ5x{^wvD-Dr?*W7FzY7dR|AN8!6TsjSU_d-zbWTI)nj7x9
zd*1+UYfio71S;P__~<h4z}6I8rI*%lP5ZEv0~x?gwBhou;F`!9ug02&9%8H;{L|J^
zY$SeQ=aa=hY@670L3?_q8oCYM(Z0I$`@I|#<tv^X13qriW!6|Uj-Lh3yi1!gasu|y
zX28G4>u-WTd8OMe3}{C>+z}hQ#5O^1WB+)6U{f+@Pk+Rwj1q$h-XWG=d5S(TTXs%e
zQv05z3rOdcJ`i%TchCtQ{ZH(j$Jxt)uJ}E0afBR&gTO=k)v+h*2Sy&9_69YTM!?@K
z;P*3%yF$O)z!}9Eb3VShm!L*r)rqs$KD(*rP6r$$=2|hdSTvSfp;)7VXVmiS0Y6qe
zLaca*e$-wAe(r6oQHu6nfo`CaO3fopZUnj}F$&pjiT;m*2T#AM{7m>N`l!VZ@)E)O
zLrLt*6t!Rmc;_h3SIO3;&zER(ONiWh_IrsRYfe!<8h^uaYMlYcLHSGRubJ^}z@Ff&
z8O~T}?hPUDAEvGk?N{z*T*8s@xE8?u6qr+^TRPZ8`j`3m&AlP)<Ob?fy`cS=WiwYA
z?B@Vx`0XmNbEj^lW|3f5%`-PJ_haN)X`K#`C%u2V>05xmR_mm-IY6$o)@lEAV)(#7
zdBuVUV{ci2ox2-2Y#^^)uvC0Z@Dto33#$LprG4?~6mvu$TN2=>=G!wo^0eK5j6E!v
z=HnxiJwCt~EKOl|8uaU6e4;<Ci`G!<iEh)Ef<8x|_xZZ6zXVTtCD$qcW5zmKYlrrO
zb~WCh-5`(RP3EmWlw%U~p}dL#=56rrWcM?KZ`(eLPh0)%_WRpOf5HRtS-XB^>_-6i
z4ebVeVYFX#>ukQz1FsF<(evVa6XAt?Dg(?v;3tj9I6JQic+lzk+Qr`bpT2M8k(c@4
z2SopH*fXlVN+E1J>JOv01o&rl4s2xMc!Ey=L(N}sl1vB3#YeCo*!zO*Cfg_Q0sI>_
zP|%j(nXOMWVgq~UuKBfWcY8ibjUmn)PfHWy+Tpn|usaD4-<Lo>p1lU|%l0W~o~7_+
za@{N+us)ah)JX&XgL!Jsnycoi`37^<Jgu*T=QUsXJGRK)V{E4#w{#o&3w!{Moxk=Q
zYyKzelv@5nJ1#o!DD1|)E1fqRUjmp(=e1+^=|MVg_J8TT_P@m!A3n9G*!!dF@7eny
zuihB4Li|#Dpd_bW{d;W1kXtF8I4-`_?CE_L@9+y`&{@;IFTm=4@?`-x_S~G9G0Qyl
z*5ksN8QWh&essLU{u*E@Su$*S$&BsKvknvK40`9#TRabpdf>t8U%HcOf@H$8E7YgI
zUVXE|_w19-Y1gZn{j#B1ozgphpSIPnV1E;RAE8h6ExqXlWYu@GWWSyf4(Q&r*GC@F
z9w3+VUk2a}TJI|A#f#r(;2|Yz7Wb;%W_&@%f;NHGK4A6zF>TKB+GJhz{0%(+7W`Fk
z^~X~2Lv)@E&;dN9KY=`}!PXKFjo;e5#9cFg338>Y2U((f!5SMgvoIl<5{!8wJ%%w8
zBN>Ay8T9&N%}bM$QRJF)-O4yT5}L0cBIbSoz8ph_we^~{VeCQ!-ZH;M+8Z*8pW}Q5
zyV#>78O2&rqs8|V_;vzvXyF#@me8`MB@L|IW@L05->a!h4zFFMej4FX#6_oumfd8Z
z(fK^monB)NGH*j?eE-F3-~jU@&UL9^AYVa}b&wnu3=+VOYn87(?%~<5pwICzz6ls_
z6tCg^X5W@=x;4I}$+us({2KTkJ$91bgqOk-FTdII83ueqIH)mO{0IN;+fO|*#x7h+
zQ!9oX{_Pp|?P?!Ruol|WBfQSWXVHxKjoOi3oW>rMjZUuri8nH*($G<2BNNlmIoto~
zz{#;|+!gc}@D$Oq=+|)lw6cgXe?1GQEscO%iE-CXha=VC(Mew9(U|&rgK>zTJ)M)q
z|Hk20Fuo`{NHAuNRWMZ>%E#8Xa#i%*t33hO1**lWwkM)**#TDX&x|}R-;v(?WA=pT
zJ?Sd?uUuihe+he-1DXqH?P>ZrdCkKG^>=cP9=}cdZGHcE_VYeJ;NJN95~@w|7I|Na
ziRm2iV|+_i8TdjMI4vCNp$^TP;IMRqm#8Q5CbfyE?f+twb5}~&-0smCv{3+khuKFc
zdQ0)Yid<LuF=VH!Mt%<W<sZVYFtwOZ%uL63G;@2)-$8StF;i^gfob}A6B;X7bIFp^
zozw2^1)a71Q@pG7P#?-AAE}jZ->-K$-;2q!hIap^;vJHafuBS27x?W}976cz>l}Lr
zh5Mo@_?)E$@J@W4I#<Nh4d;S+ae7~G+Z)*Z($|8%lrxzfw`l|)kIWZ8Q4Jg9ajj!>
z?X~V%_TXq+K|AC9B;dbra&KU7+VN-UXXAA)+dgY*pF>AceG99X01L_6CiLwF?Ndib
zjM>;9{&2=B9Psq6;_VyR%g`u3#s^(<Z;f9geRPb#M{o^vk4E^cbT4~`z-~|PDrNnZ
zM<CrT<R<DX4vjpb|JidXLH>BP)BX6sCEl48K|fkQ=?r!a{g}Y`HPn22@NH_JQ5!Z;
ziF7H}Q#|Y$<mBMv=mA<^_~{Y&8-79STa#P_wxY4oHSp=!{txId7|VFuN$cy&r0qv9
zflnZpf|}=|>7d<T*G`Y8dyTHI-W7gKG`=I`bBmwZwzGAv-J$^xhMtaPq;rkZz)F6<
zTWkfnvRAxcu(dJ;*u~L%vSDlC3M>U<(Z)LbzljQDJNuRs=ew1Xo3h&yrPK#R_jvmt
zdJr@v+OoAX!Gn+bupbZiEZbysErRinhkLcfH7{Nez+3j_2JGVj@?BbA9eG54j-%j`
zZ3DYWynLcH`Azy&d+nZ&X0I3L^7yY^FXpZNq(@jc{a?vC9pJyk?`-~L>+zmk8}W-l
z;4Zop&d!t$?87uJn5rHaZN>#td~aKUsa<>cm)1%=Olv1THaH&~_jO|7oN!*c@$gtX
zVidl=2@h(wxbFFB13sql1~4xH<}YjhKJNOqhQ+_}{LHsCM)BRg1MT{@#_0HbTVwRU
zZ)^Cl_vHI;3f~35HyfTS{tNJY;<o_L0gJ<9;rV|D>^%5Q95V>$FNhgf9t^Ic$J=;8
z%8wUdpY1*7#|!Y;?^V1&?FOG7WXOLdcJNbt@WB|y<4_Er`sv~ZLA+oX{KRj%w~`t#
z@7$K3T!=jS1phy=?@G?%^XNu8gnTT}PoMbSF2*W7K>SU*3-trLMyN%Z#NUJdGc|hS
zZ8m08jgIq4+PVvWeN!mBJjVG_((677eoYhuSU}vkR{3Yd0I;*B;_qMHhMx*wL0|Kx
z#GF?A|KxiV25mN5pEvp8`1v(f;uwAJKwFy`-w;0I8tN-;Ms_I{5Xc$vg1-ux%n$H?
z2kl7TcX?m$%8$JU-Kht?3txSO=H@V#AO`Ru{NI|t=DUqrY(X1?S@U}j^P9+@{~A8b
zU+2#c+6(;onpYqF$)Efbv5megSuFcS^U3n(@70+}norP<?u%wLuZ#V8WzR?c{E2v+
zVi)h+wk&xI{EGO+Ud1mIw?O}arz%&*&B#^??wyPSoMYnv*o#m9GxvpO!mDf<6VUKP
z@~x3}$NAaD@G{Aw>}RTxHLsVWtBkwejx9UHb*q=zcthappSwMPjmtcIU;kdkBqWo(
zc);}0XJnt~xtExW=i?70Pi&OmPG{(x)E|`}bJW(b%fW7-J{oOh`?-d&$p>i*zEFRF
zTJUa>S^UmzdCAAXv$j0WJHd7zF6A8Jv&_OwOD=WPXIF^s9%b#1Pl4|PmvfMViirv*
zOQ;=~!2grD>$c$m@W8O=U=Tk^6x(^<S;LD1`M17JakAOlq18T1=b~%oBN_P4EYnAQ
z%>EE<svqIar&{hB7S6qGac183t$&Lwz~^$;eA5+$4$`zE|4S*jFlSBaa7lRXp&0&9
zU7OALC^SmU^HiNNSO<+Ii1(;ny%$rC0km8To~aI>!#>Nn#>o94>>%Z*4A8&fIom(*
zFgM;d{0;P^z+W7v-Xgl@LbYY*S+z8C32j<l2Cu!5xa@3yY%Vk;dJo2;`Kq1l*z6YS
z1Oz-o{%XN2({d&8J8vDeH#^2!u466X@s;n~wlry<$CenM|JiPH(@y3a9cxAhCRURQ
zH@qCBjaPVI`+(KHVrRiTh>`4l8kwPae2m|!@3M+{6f=(m>!o?5&_CtB5=?veJ$@dg
zJUf0K>QjAb%*u7rZ(Y;>zqkL1eS@3hX?6y9VriGP`1j|nkJ-~*(7h!00z0SL^N)|A
z+hG0mzDHwoEL~~+Q#!kp`33f(ba(1_jOyxMK9o}dT~!1y_Tp)(p+UWT+MG}SL0pYG
z4He)`MImcbjGa#Y{NgA$87=l<fnGQ=64KtCe)%+xJ#MIZSdd)B7#=1rBOa&qwsIPJ
zk<Kspq^YMb8ZqFDcts32{M+9^AMl<uy8NBc@?2=-ol8ugV#Rat2`IkZMm_i!&e0w?
zV%ui!@&^7d<A0i%T5EVtVYmL1YxN0eRW*L&tgXfrjA!ne*5T}a2f}l=@AUiq24hg)
z+5I+z=N%e=FJ8i&)eh^pLv{W|^Y%BqT<{qLhXpI>Wk=<n8Y|PK6aO`Q#KMjG<$->p
zF{Rlkt}&OGxubDv&21TaM!YRMPCa)tPAxex$ILBc-i6F(hu}NU%5AR(onR+e&LwA{
z-Ivv}Q3ZdUG4M7p58lg$K_hk2?g0jG^S<n;fiU<4EL68s^t_*In&T?gQuBO_b<tdJ
zV;))`&2yta&uAvko-2MA{9`rsgQ2w@FGF_^(H45!j$_c>4CrnKwAAC%o&1Bcm4(Ze
z1{p^-|A>41V@H6~^7FoP+f|~e9okDh-d@{md4znoI*-)z-DX;rk(=o83GEFVQf&`#
z1pkUBgUPq~F0>M~{W`xdW50`FzLDnwxG6>`JP7t^Yk#(2E?@bF&>wvtxgD$cS^)dw
z!2Xl8iHzSN`EUE?euA|*!gV_r>_*X$=*Ms!I^W^N_Z9Ciw*3a<2>8DG_}Ax<+4vXR
zfoCA^2e6-@?;Y9sk-@v;pKZrB(40yZcyWFCOiuS~ns$S+YK*6QPPr>;^B*o4c|^X*
z?74V6t9X0xu1h<5<|jNW8aZ*-_sQM#Y7dUDYy1v+!euV9uGVBeMJ?lWEi{paZs83p
z@r~gtXjw2P;1AQ6iyv%*Ke*_#4~M50c5^=;8cRr)SNSvy4^urEi=X}QsHG;OI6`Wg
z+gCZC`UBMXaB15C@2eHx1t-Ll(pAJxs25|%4~zr<nQQJCHet`-UBVt!;l)1q*gk6i
z4lJbxGPxa+lTqd?-joQL%tPqTDb{U<&zD3Co{l+V``7n)d4%Fi>bo6(rPf$_rfQQ*
zHvAO0#j(?=rA18uH?x>}32}I(T_f~Y&9R4i7(c(noH!eMBM$BlGp3pAzc@Ub8q#mm
z-akSA`=}f6CVG;_CB4YjKM&12WY_zyR`eqBVbF`df&D7I=rZ<`ul!`|u(kWqD;`3B
z&^V|!-c@2|w5V?X&o6OLD0lkQ8pl80mI^n#oW?I$!umkptB?;nR6ElYFc07=7zqyI
zQ><x5azZu}^<R_Jf8`TS#@UA{pYG=;Q8!mS3HS{7@R1%T+=%mTocRp_OP$LjJW-$9
zupi7AK0AAq&rUb9;jyy|gE7sqJa&%F2RhD})W;A!GN9!R<gE>WGYQ75b>8grUQ2&|
z9P>EiIKo=Lz!(<hTb<I@K}diTnyYFhY5gvxt_g`-i@rx2!Ta)G>lw`lUwLK~Hr(~J
z6ZF54HkxeS&`iruKE}ClI`c#D?IBhb%tPzEjqAaG$!uM_1bHm@26L0oU-&W?dJOot
z#%FaS@LTu9r%&=1FIMo+=UW@W@+{%L!&(YIT*iL#S<i>1HvW$1v)lLhf>&cN0gMw~
zd|{ODEAEi}{4xHA^N~&9yY|#@R#}Au{sz25d-;URG2)C>Cg+gwY{UA-Vb!~?;k_F0
zxQ%##3r`cD(Hy@99Azs|3(%gSEg9vk`O>h?Fpsgn&+t*r|Hr{Q*$!=HddoKGP&n@G
z6Yy#V$aa?uNrknSZld$PiG^@(MKR;J9a+iqD=hy(Rz3_q*)>Afj?@2)HMb8R1s^mP
zmv60AATPx)9wra6+s}h+g9hTP`%8>ZyiR97X6BpBOSxllZWwtI;GOzNWZ|2xe-V7W
z9en*bbXkesHXD9Pe8uLFr+9uAV-jsjKd`uq9QwVVzys))@mPM<$XFVAb`kulBwTFy
zRc5~Y)+c#FaPGzJ)J)fyG}a;DcB;IXF%FMBf86EZkn&xfsObvUUAU**2<5LXV@&PD
z*n8Oj#T41^Wm;VL_3eynH8~L-@e36v9?gxH{MoREJvDbW_A18+`@!yyt0E6rKA1-3
zfHKZl;=-;;KVmO8HIEYbffKpJYmpb|W*3_dXGID7`0gi;l9&mPdyV)$eTo*c_mXfA
zeQNsl_KU$`Xz)p5s^gz&0-o(n<V>>;vgc}wvD@fh=XA$eC&9a&{taj0#kKa#%Yjdh
zZznN_aS$^bAO>yQtjTJV`Z(j;G}H`Id$MT+PqmvEha=-@TCmec_0I=+C#Zo=uC}Ku
zqpJ;EXZmE{1U1fG<dy2Uxlz_=5%T;xw~xF~#l6?6R(hH`L+Q^Wf0@6*uP~~2O9!Wp
zmA#JqmR&I_^YEwH-@r?IGVE`3uC!u3)Ljqit*bV>YObg6t3}^Je#0A5HTb|+B9nn@
z{ELidx6_q=zmXjSJ`tyG%S-MhexJJ1tsEea4L?^!`YyNcU$1s6S>qQkSsx$P9@fU|
z%)->Q<d!gx)b)mQD`Y1c&c<dx!0!_KLSMA>!x~D?Nk$)~9mPD5cYR0DZ$_4y6XZ0n
zz2!>wU(y%nqS*adCLcUo?!ij!#Xn|N>FgKPIoN&868Qxya;W>)$edz)%GkfwO-{l9
z_*lkS6#DI40$$TjHMKVmFbBpywHX@P3C~ytKYQ-e!;5?1Njsqz)_oN;UhzlTPsbSG
zkM(b|U;KP{EB1WXg~--)-U?gCJoSF&hMWq~-Vm{o`F;*`m2#k&!yLvl*lGGcf&MQ)
zOdOmVU_Y36j_mC;a&=U<<#~rO4WXOEYo`tZpBj7;vP*>ff;;10q4QzdLNo07J%hZ1
zKc^+ddQ_{g`?}{e7;~%69+}U4H@-cxFv|5X{!_^Y@Ejgay(Dr_iH+DZJL-y7-6>ip
z=RYI<{M5%etA;tvQ7uKT&4gdfpbfoGty|8UnAuWLV^;Ot`6W+J;$Hm$PfwzLZpEe5
z!;6L2Z)ttCUYD9x-+RAV$eydUJy)4kBW(rAk9`VT1DtpX`6F5sJkral{n~B%)L%eb
z`c^zau$(2iBp&SJkZQ(G{xN=><!(l2Wehy#_C;BT^kb%P<&Cl7S3<?szoZ(}?`#ZJ
z4m@66IdC7};dvD`j5*U8syzOcP~{CbesTC1{6V;TODXjjX;1js5H@S2Lza=t@(<!O
z?1RbRXB&n;{ZrH|{4Uqtr1qnHZ1RN(KAa%~eC8f<$+b<~b=RmKImw65W3z@AKk~`D
zhCk}tgQwzyXBWE6QRCRfyo3*;#X;sb1|Rru@qzhj><`TI#?HAWD+az&Q>pQ5+#0_N
zK5T(bL*PRX*Fu~H9^gZX2_3>K&7NKOGI(CK&8#ges=YG?P7J)4zPFGQJSd&QJ^WTE
z@#s&<Hy?p+V(1srFZDYgnop0(H=i}CUuvC;%`9}xS%ovKZt3Yy;sc9o%%T+INqD?=
zQ(*J%3n9ai$69;Y7+Q1L7<%VT=KXLr`ve|`XJM;|cS#@KHHkfJv?Y6C4F2$Z8d$db
zK0f)xvhOQ)!sM-A?9}z}{9{@VwGr6qjqr@@XRYp?McV^+(I+??%j)xt`{BLQ_9Na6
zjY`KGklZj%%l$9v+yM5>!W;1WZIa(_I&(yK++^!IW2=eZkB<>arxoovz_*9rL7(l+
zZK5*;bl!k$X=u6+8MDdyB5siUJ?Xz|tW?~HI_UoS12eHhtHLu|93NMzutn})W>%%f
z;L6M~xH6rbIOW9!`!uxn^3#2fdLi-;XT$xRu*povKCpO#{;g*{eF*!)mpR?{nqiAS
z6WCL-rHpUuI@r1n?F)ZYuT|%D3O<`&AP<eTKZfoidYX!kAUW_8{Fv!Zw=eOlky)$%
zc4T1--<t3DI7?1;593^zh7J?+Ijeab9UX&?jzUM0KLKp?JAW~Jbqs7~jDyV#U^8P3
zY!u&lx&(S)Y}v4Ri}A|_8&5+PKG4J^oEIh<lD(hyX=nf%8lWB7`xi3@!9)8_@QG!f
zfmbJhZ#UO3fnMU{`t#%&wKCw*F3-i3^H3Y=A}6V91ex_Q^vB`wb>*^0t9^XX@7FFo
zy=|&Boax)Avn=oMd`zk_t$D0JcQmeLc}Eb}dXqfvw>Wpr&fS+8dVYZMv@s6pGLok=
z;Tvx;HtXMDjT2ckEctbr^cds?{Js7-`ix}Pr9WX0DY7JuERlSaYzbtE=xmlRPqcSY
za!@ib#Xi>=&y6gUyndCKfXj2D<5VAQeV%97YyZTY>N^wXvacUKWC{KK_yoB<%>PSP
zMtU|ede5jICE#J2qj=MdHS5R8#~It}m}`Qyojrk1<(1HED<8F|GKH_h>RHsY55^p&
zmis}*KZ0!0o=%NRak+O}cj<jv`w?K3t*<1Q%Q@Ur9p}6GEw~-UU&;Af*ln{~+I@WJ
zh6Y}!I5Sx?)8c~%mjT+7Y*+$Z*`E~bUGj0l^FgW4>BeM=C;NC&=<$oUfU$5xx`lY6
zub*zBett&!sjj!7qjpa+8SRJGGpv{P$8GAyH>0?AH~yJ!&fAc#L2ND4J<XhOSzpPe
zYWQU};}VWhx3Eh*<u2Cc`#v0`XIZ`LDZ4j0gKw)|a5+XD(H{zjKBRF&+pMF@9!%lj
zw}l(fUqG8%eA*m=2MHI1haviJvb7X=4!JIw53lYE<a_*IsKtgpDETk_Zv<V4GnMW7
z>Un2btn;LfSbOIn`P$HjeWwZ?Qu;xZv3{JITw2#W#+1tU`nLTXCs+7Cyz}7V|H0gR
zT4>~&*5YmcYu;~uYh=+g%oG34Ci#ko(Cb3-RpZkVzsVnS4?T#v27AWt<(_0du{HUp
z?EAW}_ugPUN5gp)Qv@s4_z_D-9{&&>#aUn3`~m$GXVH&m;}>tg9Ud>Z2lUf8>7<Q6
z;?vL1XkYWuItFVu>y43xpJ8mGW7#x~!0jM*%1g&Jrr8yT__i_>AGqwkiR?7P9E6Kn
zPw^$}&r$tI`o<~O-VYB*+1T2Ivbi1G-nNmI+ju%T9>YgoT6+4ndWatf<JUM(*N*(+
zMYN-N$hJP+bIK{t<vIKyn?~d5S^hN15yjL0ZRf}%yJ*MGV>SL$e0ov(Z$#F_Qu1xs
zeVdzfe!$QTV{7T?Ts-?;Z=KBt!^g0xIdUa3v+8B5E1@@u4~V~=0$XIi^d!-~>f;3C
z)Vw@Do)_!?BkpClbvWz4a4OKZ-UMIO)=#*9I+!?|O|dKH!R~>qb~Hw>Pp=K-7X;%u
zdC&7hsy48$?Rb}dcKs6GPCtLb#~b5x<-Ay2JHj{x-=KXve)y)#wFcVM{0WGT&ROq!
zV>{{Bj8o4rXishJ9QVBZnt?2v=v#Gttbc_ViQ~F`s_7#;&vnuL!}2%oOgd?=2B>71
ztue~|X!iY-f1ldP6W;If@6SHX{e*u%dYb!j|Nes0+;{!^7oFyQ)W5&v)ccw<`u+-s
z`847y5B9smn{EBknuRWYQhf2$9@Tz!<wFZD!M6iU?EA=}&Hnr0wBKLiQ^Nz)Fb&a$
zVtw!04zRQB6lJxO^4l@Ld*<x`W82Q`taf^W@tk=(0j@Z#iES^M)m|bP*Qd{XT&$gK
zXF*mw@nBrPK|8FmZRet_cHCe*4QD)_(fNTBw!I};?L~ueoq2nrlN|iQ@*9T@vBP<0
z?T_K}4n8t`VJk{oXRnNXYWB)-#FPu?HnRu3A>Ua$;Q5573jg%Z{qXcqhnrMQg%p0?
zYU*1&VZzJtfn{RRXXiv{FJ>YYr?f|0unJvr7qYNnjk7im&zJrX)aa^0Pj1(}9%n7F
zkX7O<Rn(A+@w@t2&fuYrp!%*!K?^T!s*h3Uu7<j2PLbOc0yb5>AEaOE^{2waCac|`
zE?5q8+F54SZqt}Q`jvi%x^P?I6N1Hg?s=Vgzy{;0IDki)U{PesW58uIbreI)AOFkL
z2I>YUfQewCSV#m|bOQ^Qy~pjq;#FV~v9Nf4POgPTZpFK`wF@|e=DA(9&)!;Dow~KM
zF-o1Q7yR$P@xH^%vGJ)7_SJ2>wX*wJuck%!r#yJoeT!=^IBR>DS2jHD^@y{!5k0ML
z2hXf_);jwA6u<u%-Hfr<_44}~$JWlT`+@h2@;~Z+acgA<`<x=H@6M=pSY-9(naCRd
z_nONyWx%)Y7ZsIFy?6F;cEr_<z`mMm4z=pDVQ>2_rhV)O+i%*d1!Mblowbt5wqG}7
zYr#y^Zw@dF`nv*~x^B3ll2}*Yz4>NZ#~0o+ZEN)TIgw&hzM6U}5&DlaCiK&m6nzRF
z?wb{r+T$e|l4FXxgb!ii2Xr7BtD~)2>f|<?Na0R&;dWqzuCy@pgO7CO>ytC7>mWSU
z0k`VR)s-9P-Lo%pi_QXV?!6Lx$XzqP_i?whv$^*pUCrjs%4XIt2FxD6v9!0!<Q<Yf
zCBX3j7fY!z^ry(!2zq|bgKqijjIGp!IuDxP>B<KO|0G^_^?Bf2GkpKm^*8rE8;x9T
z>5V+uHf+VojPZi0Zr^s=c<)(w@3?lp<Mv(c{7zR{QO(<~&IgaVeJ_y1^gOi^57N%f
zcih~YpmvK(%`L<KXbgHTG9Pfgz1-WK#=5IH54c5rHk<BGs7-PQmQ>%-*jrcRzFo!`
zl#eERFrHucLD>T}@^8`4ZoeP((e4Z{Mt@vXdLH(V^fHqJTugoJ#-{b6pPHzdR(hVX
zJT1l;<i|fhX3FPJb;>W8YOH+r<rguPT{d>ExxE(7snDF2Q}-t8c_Hl^+BdYH@0faX
z<7d}Dm}90s7&Fr@q<!rHI}pyV7y!0^&F>+8E1!28Fv|x{0e`K<M%oO#b9{I^%vW=5
z@NFFR`;WXYJE;e_-$(3DZ7Q}bSm?gsp|%B+ztXdQY)IcaUnG0awsfZ3pDE~yvX_7K
zYy|SFgkMb`uFf>pRA=I!tDznO=hVPw(wuoFz3cCY!#4hTO<$GxkK${@GQ>{@_#NMJ
zRb`Yjx^FudKJmkamBRZNc+|*s=T~`)Q=Aji_&(bHu#<^jT&;Y&J&iR^W@tJwUhpn{
zG1s@>!+C`00_YWWoabC)dZ<rL%<XfbKJuzWQ)@N9rY!}PO|(_*#yZu8V59$yj9qnf
znrNTz&c;9aa3;natu9Wiqm*_>Ywp44NB1*Pw@mA8;ekDLl=zvU-vEZ98TGAmyhO9Y
z3FjZ3O2ZuW-h}si$KJOx@51U#=(6gJ-dD~4@I}=b^M#r|es`MI@X8uv_NdKLYzVcR
z-M@XmjQ1C2y}y9><7f7MZmPh>Yjfz2dVkZl!nbn15b8_8+YB-@#W@~L#Pwez4>$rI
zO!8%s?r%jl=OK%pn`g=mvM9<~58}xsPUKJz`0*V4YcL$C*y+pWA0^x*w0kIxY)>PP
zu5xmg{|I?xqCcMVWA$eWDo)p)>@d-2E%s)U8OzHJy3pUU))wBvyGOFtqa!?aJ;vXE
zB9wLCt3mG7+Ewh@*}j?nqTmOzH=|f?l=U}>uk^!*JEPxnGb!#{eV4c=xeT7Zi%oyY
zx5z2l{^5+)Eju3}SUY_O^+(URzi+%tf8U_LM^Eif{2;`5L*Tvn);*aX{G)-Mj((A8
zX3PWBp@=iD0qRg_ybX-KYTJjwN3YhXuIYa^?rHpE+Wy8Fw#_)J{&-y5{8!srzg*&5
z&nL<(P9h8Y8^HPV)-*49mJc;tTiU@L<Um)O>*WDx4Ang2c)I&k2i;xc4fwNd&s~CE
zndr}M$H{6Z4Q^%MbK#}lIL<rey<PB!?EW3%qG@o?>!;E_AFOe9o2R_zny!A{bN%zH
zWGkP^{5NNfyP9zt^!MKe49HhLV;Bsa3WFClj#tLPA$$Jg-_e-$&UhFEu=D6+Vtfdm
z$!`A?xJ3W!aESq9^%1Od&wm3pcAktydosr3NcQ;0!$){!cuzTC0geb(!Q2D*jQStI
zf8l%-9!ZS%r2hdJOGb?GKV;vh4|^XQTJIa)k7nK1y->ofjLf6{?(FJhxD3BIx?^e4
zm2Wo#ry0odHf*6=gcIbd%tu$55B-(${fco8?N8Lbo#43x$d3*1e4P&@y%X3@MaNsa
zhI`r1?(%igh-f;W{gDak-IsauX`38b+sImk@n@<ZzUvPH6VZ+832Llu&(@ugtyE(o
z#HY-Ova)C9pg&i9Ir_{T^gZk!@`!mig4_wAU!mugcavZA0R48bH%oS6%!DhrPc3Ip
z$Fp+9IBP@s=q{T!SXp0%+}HgW=eIlYkmWh!`J>*`n6T9rqDxM@^7{FmujBW9gOAR@
z(D((v?$yL$&|kYR!)^l}S8ztf&TFtoxpoCUl5Xlz#)<L2pl6U@X?}O3Ywbe6I*5)}
z122i;FIT-|!P@4T+{n31zzQ4Uj_y_Xd5L2zWA53{3f5QW3@=7k{6LhNSQl`{;027S
zD#v_4eH7%IMdke0JPZEV>C5|u(--b>`to0r9^~mbwY1;HSQ}aYTE;3LWO`DfK243z
z0DhX6Y`r%at8zbg0?P=n+)54hoxpJ`Fw6ml%01rNnzQnW8$0VeuG_qBD>d7b$3L@A
zF-wgR*|q9E)@)>fS^GM3Uy5C&u~KhtRXM-44|N2%RP+1bMeTFcUNE1{<Pqo@=?M)}
z&DsZ<yXIEGIfM=8Vas!``o;D+vGpY@%ds<d^ITQAcfI@r?Q`TCY>1h)f6F`%`Y>{+
zSFSdDb?+R`?xjxEQvY6z-?~Q~0Xqh*xBfrL|A2-?-@niQUyEPYpB}&9DVxU2%b<P9
zO!1g*(HyXY=1!HHo^NTYgKue^+}!m11ah;Qc7pbU_D;heH$87Wd6>=TcAY9ax_sWa
z>G@RIZzMm(8@>5o`s?L%+;lxV`uwT-z$xQOm@chrz<Xt<n}m7salV83OYiK~b=SQ3
zzxB;}svdoCU+X%`pMkUJ!SZKd9q2m_ZCd^d?dZPczuEWc!`{#4&)N6s+ury2|0(Y?
zCVM|Rar<`7;ZXst24mN^#{cg3y;}9ZPJd0D>%}b`^vxLhW)xlXA>xv1J39|E&`W=9
zdvhje@19fJv$B^wZg}FT&TDmb@)AdNb>;DhX36Ky)_1i&_I;i4aVGE2KK1>P-M~Jp
zCYtQ)H}Pd-Pwtg{E&W^jSC9k!vTx(SN!M0m<I4U`0H?-Ma_6vdWB73zOUXIM-q;Yr
zN1?rCiY2|9{kq$$$6@=!el@h0y}rNk_{ftzWqho~==kRRcE=aUPZL$0LTCq_Kx?J7
z3GmaWjnm%$Z}Ugb$34|q@;|^I6KBA;&;v*LW5VNG!5Y3RUqvSv<&UW|;CI>l@l5!(
z&mS#(-NnD2|Mr-!Z^0Yw^FE({*YT%pO|nt`yG8spWnS#e;;*L1yok@s@@1V_Abzae
zmH<BD%Wb+IH80-H_ZWW6x{mT=)>b&B`%cQ|m)ZO{`+kpqKbs$C-%t4Wv-xrM{kVTW
zn;&Q2cm4amyfD(ov+qa!`xj;LbN{~M;pz(EYU4!lxQqS^@wk-VUl2#5jb9g!3*b-u
z!;24P$K`tb_7Z+P?F`!UZTl6n?KcN;!bC7GKmK(l?ErK9-z%K#cw9Uf&zZL~IzQIP
zwud|(9hV!7%a4DZ$+%cc+fH^|E*gyM%-hMX_ccAOGZ$3v3;)l0a(29WUlk4b;*#jj
z#U|7>gY%z?us>?i3pa*L23w)BX{K9#bB){gcqp{I2LIm1=<YeqCby!)q(0GHWBQ(m
zcT8`ZX3Evh1NithOi{cod}s(;Bk_z|8Rh(G`GmjIZ5~dkK2V5!AKFJ|Wg@iy8g!Vr
zl)AemiF)C7;!@K$#I<JnjF<g%&R{51_{^QiLi&or>rM2hb9iorYJ+h$(xhO|N^mZr
z)lniYIl$Os=rPt8i>z>-%J%D_$E2%%?K65m@)WtquA9kOhOE0Dd&%VN>Bdfd0lhT`
zI2vGvUw?VY<VediToVt$cid?h>wM&s_=tSAtKG8B8sqtG^-QgabO!eW{0Zb+<O%v*
zLZ9>-rr$AruKDfsslFoMgyxvbJPw3&ms1yU+Vdu-Fn7J_yVrI5o-2E9&X-+ciJW6A
ze=mC%`tQ9=KHQv&E4lW{WbAd;`~l<k>0G;mreOKV<lGj;YW4p4YtCD8FZZ60nyL31
zuT8~x?xoGG-~ch4L+#*+{J4Ta?F7DDz5hyr_#w~b&Rdq`{K`YmV5|Lz_w!tnc^({6
zKdK32pk3vuoUz{6w9MwujL}1{^>m7dn)2;_s6YqQ_|CZ9`U%?ou-|U|sqF^qZ}rRg
zvN1l{)9R<!;5UuukI_-9xF&qF?OcC`?OaAX*N<z5Yk~aRK->yi`laxs;f1;r!p9Kw
zRdSg*5uTi%oDZItTu=UCDpXnG77o|;hAM}Mf7GV=zdB!ezN=yee>uOachpom)c$th
zfwa>Xx*k5~&hJE*-P4B8rHN-ltGEXJh(??>`NU@u)0`beeWE9gN%tM_uq3~roPMp$
zF1bkkJCzeXAHddIznw|uv!jf*M(0C5N%+B>WH?^c73wiBYOW;<%n9a4?IPxo${$|M
zoc1%P)y%0OYfjbtZVcvxT@i`8ePPJ}Xq|cO={8|ICv&0ZM0|j`XkM;ApK9i(IXT=f
ziA2ij*PGis_3bD&HsSN4-B%}@UyQf&v-PL;)7kgPV2uI!GSxv22XM9R{Wt7;Z#-w_
zAD8|b*wGq`U=Xa&MDq&PFnfN;*D?MJ2l=SDrVG!F`g1hWmCj&}G2e&rZvKnkV1Cx`
zeY*LL+W-C-qm0pIjDmsIRr3&Tj`7cC-9J<K{Qv9k`%eB}wEiQt;TNd`CV#;W`3p|m
zHHkV+A#zEH*<FW!9KIMwKEp@W_K@SFeEul%S?62ESMiPB68|9I#q4`6=X*B3V|}B$
z#joQ#%JmYy%kV#6;pOO@gFe_8M;Aj5JLeFahj%uTyHfHgWdFsS1&{wGml$vpzGV5?
ztMTbSXV?Xa%x|)}MbFK-iC8Ya_KG+@biMb&Mfj`9QP_+e7yrR`vBUZ<t{WSBcW#nC
zbv5-;!#3_7$M+ISkT=CUz=1v3s;iF;gCF&1GkNEXD*=CRyO8m9?7F-y)qdHLmCKU>
z{|HTLuaD1T9+~_5*UY}69NE;Vv6-GL*dw~-u_pMpt_@;S=($E@jd)0W9__JzX#@V<
zxEt-%`)VtAuR0f)MA1=sw-GoYhu7u<_oi=17tT8*KlOfcK@=-r?l{XI07k2UO?hn3
zoUO#T%YoG`=tor_F>Cj4s(X7EIm^iXzRj((R+3xM@*2K)<$7&toxHLNIe8WP4z6O(
zZ*Zn`9&3(&yMML%b;}ODR%2G><>z(Ql>K<l*62^>3@l_Xo^h7fq#|9;`lj_8%%tVW
z**?t`y=z4i<E|oxpz|nh0lxRY$1G}^&3bW9egD{H9!qrQMQ+OjKPQ(5U3L#JIlub+
z&Wil^tZbT`*ZDlTN6V0-k@J4?=!SXjSD!VLDm%zMI{%i{z0d2}TgrM@_c&em^6bdj
z)h)Y#M<mL)qxsuAqP)ZY-2LIm9_0QXbeQ}<(Adb!+m4UCei!`w)o@{j{HX2Vc}>*W
zzM;bmmmXig?-dg{q&Ve7*M(b(1x1Y0*#vAl64jMDw_}KXUol{zc+gg2JI?yX^%KEk
z8*9C~%)()+VnF$hQ`iU`I+)LD;!iP?yS$1Vq%HsH<!)UknO0#IHVU7BU1@8{O2rO@
z^G$KncQN<tB5vhXPQmgH@*A$oH(gtaLzTI-$9i;wGq->f`!`+ncJvp-4f5T}tDVU5
zSe!hh$)>B3XZEw6dPj7%p7!GO72vkML#<O+8h7f-*kxt~&zFl9npT0k3DLsF%Qg&*
zEEFsj0M`qCa)136Vka7}@F2=qfkSy5y{s`bd}$-PnZ^BO;0HNs$yeBy`KysdadHTu
zg+uNj`!K;{=)R9RW~$>(#USlww=-~JWbw^K%gPPs<+jnzb7iSHhV$;XPBzm_EH%fW
z-*nh4j}_%kGA4IYlygL|rF7=3Vu~$m&<Eq_QaL?2m2qg%!oE)TOv`-b$TJ7g<yAb_
z$UH6WbHC*Nx)W`w@Nvzx0iO5c1+>FBoz}T4&6>F@YuKxA=L()T@_btv`c}UAK;pe-
zm2mDY_*lFS*mB;=>zn}?z!?717ys$V!W7Sl*H~JI$NqR0G(!6^_UpT??^#*%h4-v%
z%s1tNM-$J*uQz=r->eY-UGonktE!fmwF?e|U*mYEYk8-$JQnqMr-^#JQ!vqb>b=*%
zjevK4Tl@K-yZfNE4)WT*X)ZXo^p?-`)|mXl(pxU*4PF1u{)6O_J(JsWm^t=w-diW<
z{}z@yq0XyKUgtsRZW(qIF|uEZKZV+_e)~0O^WgECeI?GML$BmH*YZr)!H2saeT{3&
zu3ymE9cjO;8@p{6@w*YuFz)#obawkaU#$_(A?En$RLNzZ-peP==NBcHHJC|<HvAhl
z-f8YNL#O+hhw!iz+b}jSe<gO@3ek<|t?5%n`DHCz_K41X*>f3i#Ang;u$z?Z3FOYR
zCR^@2J7=}l1bR_h=<{pyiFxky<xUfQ7Hl#vigyO<tFunwdtDchS2v;<FmtS0Wqz6Z
z(a5R?LgKehMLGQYzB2RT6WV_Seks1GvD-Ex<~rkw_KTpwB1`){!j=2;%H!}q&OYyJ
z6TT(xy{zQ8d9viV!zaWi%qPMphfnU4C6^^GH@tVVs~kek+BTbPT-eSBnz;{JZ6wEP
zwF8}klV##bv|aXvyT2NPC$Gl0;6!&ldLOtkV4Usk3yE*=jA3p~q7U$T+w0J8Yh)$*
zXvOBTU302T?yYIoLO9JiE{hsBx#Y4%4w>B}tIEL3&oIYE=zM^2?T<$)l-tq7Gw{?y
z>0KkMguBYw-fEoXO*|JXroSxw4M7)1bO9cx1rz9^3A(6(E-Z~6^mDA)qZFsz655UK
zJe9{p1HKARwe1K`Xiqwc_BS=wQ9B_$vQV_T23{87tOxM5<@K0ZHF?oj`afePcTOVr
zvVilcUvn39p2xed@`(c15_s^MUS#|=;2m%<_&5UG(DzN(n7&f#lQxmJ)?mz`=wEvC
z*1BlUgS3-~n~DhQV>C`+-lV+jh*>T^qdwYbL;WmxdSq28IjQ1HHC)#_dNzH0WU({D
zEO8m*t*r&+RStESIA2urdV{r6OgnhzRjq+PmK5#Pu?D)Qu|!y-1a007ygN>eT&l6D
zAJxm(8owf%<6U_Bq4alwJ?}<XKjl2sz<(NPL-~H1n}LSJYi^2|zBRLR${zyGvA+OL
z=nDp(VvzqO$b9i%JyVjXI}!hs+t<dkCFl*}#p%V}b8f!T^nF?DOaEWsdy-v`NuA=k
zN1IKiV9{6VjZ;u4J&HPq$(krWG;&~@AFRU%mcQKLxwt{+D{+(1s_GzIx19X=!EoO8
zn@nM+=%pK+>TWepcDFiDb{8cs&t5;_sLu3k=S)wnO*?0KiXSL%>Wy$@`+<iX&WVX^
zH}q4=S=4UCkZ0{2+RXje!?_i^TJPEyGX<UZkKEsXFYyc2=ZF<JosC6KXN<h}=nHv$
z4tinf-J2h4H2Iy>N~L~gsI$iBF^2U}UPeCt!Ud_4-WPzwbL4Xyc=A?0`Q)UqMlUW%
z&FgL84DEL4F*c*1GZgBn&+eymI1ha^)S_CuM^+Xloty{ypW@uFOMumFe^{5vMJEKW
z`=jWH@=ey{K-0+H>W`S-p;?A=)yNTvrsfRJb&`otZl~b=MoB2S{{m`vNvEFWvOlys
z`9?`iaw|Mz{{^+l=b6XO1?HEH=vx;ure)}F=86aUmqmLH{~5WD7ZyzJR6a+3d%ob;
z|2{rvZRzNLeWUqK0rE69d2(mWoYmPFaXPWd?;y8R@&~-hKa_wkAHa`y6Zy)2f-Kvx
z=H_1ZpH={isT<au-@6mLBp+B@Nq%T7`uw9Y*18G3?)ljBk6vkVJ9lEoJRn_RO{_Ns
zTvgx6HSOD8VQo|F$q0Tc=VVay1D=fPH?8^LsMAvVzo`|44Iz8sFu1ATQSjiO*#CHz
z#nZDog`*`ok+na51Kg(_?66Hbi$QCkdj{NmEj+10zjaplyW~^beUFapHb0+Qcsf3(
zItpB{9c)fDwSFJLm%hm6RV(L5^Cf3G?&nf#tnnb9nsH4O3&t;qJ>{Rx;O8<c?|R^P
z-r_jA-TzeHwd$<~unKafy|W(tvpW1*_{E`~e)}A@t<Ef+$((dXDFMA{Az(E~PHhOh
zYFmd+^$9oA*6&oZkGd~*zguqDFQIzf@a47W^u0|L<QAY$7=90M<{omi&!8hwr>HNw
zt)R;kwLhAsPEj_0i2tm*@()9tuS%REe(%zx&MSGvF^8Igb&9&6|B3DWd*>_OWxC#K
zaLS)Vj~Wb5p}y!@+lQxf?(GrkPMNdzsPD!aY*lFHt%mCI81&UtVYp^8!_(otwE1J~
z!&gFP?PtNy8<DqKzhmLW6~C{!F)wIHcCojP<PVoJ|IwUu-aVz}`ED;aJ$@^DueFwp
zGk&p~X?e~(9KRJ=n|no4yr?ZVCn*?4kB=-=>?Qus)s>PX!TJb?<>ziMA|IakvV2jc
zQTDX1bZkwNs7oEgNhTRhhq_98!u)oU(Rie*)Xm{{h(2<=;`r4Y=a^G`>+!4ETh5#w
zzLPTx;4|@3H}eZ(LqX1m36=bRwr}BKcK)|=L&*6b1FyDqp-lWsH5PVlU*h-8{_mUl
z{ne|y>t8L%G?JH*VEv3a$DZT#yO)eS(l*mjiwnF2<{#&O{K}dv*zevZ*iXc-0(#8m
zRkm$#!%5|Kg;M!ljo^cmDCi2gllbj$MoVE=C|$_!P}1p{+-2ftbv1^NEr(s|prP|@
zsI5#Cn#C5s(>0dQ#s@={@xh#~DEP-dpM`qXV4udn1dkLBf;Tm*uC)2|ZC^5(w!_Bq
zfHC+4&Re`<kB9yK^LtLk!CR~QT-vpLuc^zl-RkrO{n~3COEd8;xpo}!x1pu%XWypJ
z(uln``s|?hU*m;eFACsA4h;S{#qRtwUCGrP&wITwT;a`s9pmu(wbvKcWrA_3?bNZ6
zMb8Fw3V%GMeRzUkmEFfhz^rI{4fV`QUXBljyCTVvM{L{UVBWSNTq(H6-yB)=FF_y3
zwSZR#JW_l?{6Kv6i~jj7&bPkOuNax_i+$-H4g32hsPQ(PcnCGZR!m<2e^i~B@bro!
zg&L<<k5T^cQGAL{=?W*#?y8;)KE;c=!qKT+COwt^PSTEheQm}qG8q@WQ?fu~9t5Xd
zVlO?!4h8QRHg#}a`>!nCP@m3WkG{+E<NFWhHlF^b=lkQ%&l)%N5rc7SuX-q9UK}%a
z#@rq{ci3SL?SJ^;q~njjeM40;G07WqFb|C}F-6yY!?9<LA)8-JFY?D*^e*F#PcYsM
z{&=TUog8n-B)zd=$4LeOcRSu`zs2!lpIN-XZXLyothrhEx)Y2yRN})oYrGp6uN~XC
z@xljxYw(Tw<Bh({c%u`HcY{CPDd2Q~4<Yn!JGOD-Rqot>3m^WkliT92+W+Lt-OwM%
z@3B1K2cxy3i@{CRQ7r~H-^6~FYzyc{IVn!hv@VmFj*KwL_&qh5OToF9(GgPg(RL5A
zZ9|Rsdjr4M`M)I#zj>8+{hP=<<eF_$GLO2IJs&{kl_K+~1J?LH>Lc?%Uhlmd@B};l
zmWM1~P@P!vRH#cX8h_TtBt!53Y>*WpcmV!Fcvr~QD>y;j*f47?UKr%2j?M?2GMLZM
ze3KcZuI3`<^EC6ZeBjO+&K9LM)t#YCg1Oq?%rWsf|M%zk{peNR^+yXb?dOi2*R9N>
z`&@5c?dX{|^FMK|_ilPVGKcvD^Ao=tq;}0w>Nslb-rSzEa|^R3#5-587oiXRmbr!f
zx&6@QC~H184k<bB7I$Hf_nGL7u4-eFZrpSY!rNauL0vI;`S?Du&-)}3f;IyldwO_|
z#aqF)j6P%Z7wM=<8g$Mf`Ws{n)FK+~GsK=v)nKvn9PKk$BirWQ{|Ozon0~W$*okPN
zh-Zp?c^J&!*Q@^@F{Y7?r|$LDSucihE4Fy7If5Q{(mri7rf>b{s42-FkfWar>)gnS
zqvS5f|GcKJ<U;oOYHv2@x-|AzS2j*Dm*SgQo4_yLh)vZv-7KD2j4usec{TMWt*zQ0
z>J$Af#;%Qj&h({<h`C|Y{a$IPtMMl_eO14ZEmdTHH$IB5{qJh};`Jue)L+vl`%ZS=
zAT>O*ZM^s&cs5?o2~#c`Pxhhgy!gj#?#;CL*QlX{y^+RVTSoiErg+chkbK0&|A)M{
zkB_sg^8c^<p2>58KDVTm%%m-}Q5S?hg$HwIl0qR^X$gwR*UTgZ3vqQzQTu>o(iYL3
z{Ygja6Zkc0D=x{3i_p3mUG1cGt8Tx$(sY+~)$ewaw6qXcd2WZc%<uiVXYO>GrdZH@
zy?(FP?~i%S%zfS0)49$$*E#1p=Uio5Z2CZF3p#U&6*lQDC5{_M`~lA1p0y`7Xg~7i
z+RL3tVd9sq<h|AX$g!_|w606A@nAPnHml{%C&^{X|EhZtkG9m4cQC83xpB|rD&~CP
ze@y=l5SJY$j=Sm)<i~~oy7ORt!pzOJA#exANZUgMdy8y^(up1Jo|8T-cuOY+_Cq%7
z{h0zYSL^k6ytjpT_ukht^P0yK*Zox|F$4Xz1^D;-f>oiJpL1>aN%91_YtMSOJZn`8
zZpu6L6!jy(v+^JBtrjl8Yv(sV6-rbR|F3tBVQ1^&o!61YH3s$hCDpNu<2A|BV--)%
zt=61Are}YBo%GzjHO~B@6~D_gzK+el_IDX@wyx{zxqdW;z&~bV&(&X;zB<W;82;A%
z=`i=NPQqUGI(=djar--%tEcg`@&3S(B6oaSk1${AG#|-qFQ$(0`BLyoZIZ`yUN!Yp
zKEPeCHT0*t8pmgN-b0+{RAQo5=bo+PnTtP?yP>c2yR-Hrk9X+XB+b6@yqAARlkTul
zes~Y}bVt)ywiU#WwiI;fj-|=a^Rol>t}fD#+>Q;kubgMM4TjQg9rO(B8QI?}7P)zx
zqk{!;hy3Bl)N|{YS3Ccs+X~~_k2_19L=-z+XCb-~asA{BgQnP{ct<i~ikPwJV5s`*
zgLXX1eMK8CtxbQe27T;`+H}P<lQ?So_I5m6w)!YG!|30K5*^se#4F5X&e`A(No<<p
zC%xPa@r?>>s=L97sb+rER~)Zkt!tj1TfLt4+UscZQz7Bi5cu8bKtIvlCGnNNXMZT-
zH*Krk0C&zrw`J{Q?z-=sTdgr^JZ?KrhZ5{*^J;h=1TPeCZxxwpp2f(snU2ozyRdLd
z&0G)00~fI8!5fElyGf$&5cZ;I-)kSOhrSm9`|RCAtd;A#(9Rh8-zZuj9kHGM+iNU$
z479Pgy^j0_H)r!3M6cla-`$Vx$Vo3E?gOkygiPnMPU#DuvJ)D6|CB6m8X(6(gxm(}
zx0O_@4Rb6rS91#Pytlfy#LV~R`7`0xG>822=%>svy5CNWgkh5NH1Qz8@Xn*$4VMSQ
zFgZFr7)DtW!N~%jqwYMEL&5A7Jo%2PeM6p8_Zv9o!_dGV`q7KsG5D-RbkOhOjOg3N
zAz&>Wn#%tkbWzc>;8uIQXo2%5!Yv<Wg4cS+uDlR}8+pIna~>BaJa^ZG`P5=#R(zn~
zsIpnWRr9O`M>N-2zb{&lv8|zg_JfpfdiQ1U*Az6Pw%fH1@S*iCT<n-~ZA2%qXTS^H
zwZN7Oo@L=wW~zm+@7H`kPTf}UZht5d{f$ZJo+x0LQ2Bg*dvF~M_K&HL;l59;NoOvm
z{1M7s9EQid!rg8LSm*PX%myFvNyW(RviFs^_C62iU;AjO_I&O}DC^Qa(XaUmxR+{7
zRz~116Y-U{yE)tZFRQxk&7!V0a&NSK(oTFEy*vsohw*>a*u#`7r$`(8KMK#UAm>fE
zobTJOTw{_CDc51F;=~nQVQe@ZpS&jBM!t`>D_JAu10jb;;Js%1@m1$_Nml6m3v#>4
z9y^<F_JX$i3%aJ$$7e3bK7>8#v*cS)j(hP9?bpgzqI~r3enAcp?EXUzb`uW<C;lR9
zYbOWf*WjsDVg7se_AvCJz0$eFEC}avpWOFJcnodS>fAJ!zvQ>?Ikk@~zliorH-E`C
zD-ORL&R-(>t`~iik5cp<Wi8Zas+Ie)fLjIfO~2?HILa;`!0$-&{}0wMMO)->Ty`NJ
z<$J|G-iNKcF9Y4lHX|FAczUMDKPPi3-@6NsP365?#+dC9dlBny#Zu(l@4wVxd{e;X
z$$JBaoU@sZKFwziJ^-CIx+pSAe~T3_WSqL!BFPxTmza64A6V4&5za>2$lGno$l1-k
zeqo<kR^l_IS{L$RR{atfUSEIeZY{yMAHJzQQu+1`x%$m4WD(@W=%vUP_c)3E8JweY
z784;?z2?Tf=R2C{BTOGb_JgTKX1<G$*soIX<`nx*Kl+Dw#v8ycdYPG*-P`KZt7Y$E
z?-E}LW24i4##r6G%Md@;d7+uB`WAa(kUh|A!(H>cX?Fqk`WHgg;a}tLegU5uz;+e*
zjje1=AG~xIXGq8?k)LSXCb4!8|L>$8@V=5gaNTpE>gsFEyx)v5^FKYoY(M6k#@*p2
z(aHLK1U~4^E5iO%0c`Z~<g!j;t+f}n&qAiYguZgJ@+Z>V1tuIJ-&q(rSZg1-6P#vT
zDaNQZPB9jZeGM}7ju$gK*1VqOZTamdIS2CANp;jt3+pBMNVeHjF*trV{g$xCq9y3)
z_^J<ddAwkNdw@>c|Hzwva@}I&+j8XF>&X#%1AAZtd*F@8xmn*mt*6%hF#SZ35hZU1
z;f2T~3E_7Ov;w~c7kx3oFgz|Nr%JaNgC6nuy6WI~Gyfw;$<0>etb87sI=s~v7aqty
z8rfP9CqH0%9X8}>5W8^>4@D>Mq0fB0DF83@p4KBwJ=qI{M=9={6COC=b_6(x2A@EO
zG3NXC2=0-iMe~JMx-07Y+psTy3xbo;x!hmZcZDx^(iiN^p0{{()@B!Uc`*F-Y%@=A
zTuU9reaki>`PaokWUr~k8c){toVv;+Jlyogg={*H9J`4C->d0c>$c`lX5Od!Gdq5G
zI5YPI@YnjiK^|!5c+q^t*89NkmYLV3Q*~CHbL2j2EIy*lG09$^dN;IjF?{*i%nps~
z*PIu>flR7gwd|KJzrK<_BrD&?vkLa1D>QD(rlI>>1)j_cn(czI@aQT&NAMFE?$c-C
zXLqX4PUZ2QL7#tNr8~Jp$mQcXzV7n#eVHB9eMaN84}PUDHN%RpFYbKV8#8M?4|+(4
zZ)1OaBeOlc3|Wc(v^MHnW0>@xnH~Rm{;BnU;&<G;;J!1xs)4b8<Pg3gdAQ->|2E#^
z{-7ysz(cV3G4BcodeMy{tXE`AmKM~PM-NvE7Q`WGe-TX9YCn)J!ah@B>>>8DVcHh`
z-3DJ!EY#13vUHr3UWVQxIW>$7>*``9SzSzRxb4x7_7{~I@?%|z{x<44?FK8JpC3#6
z%eC5HTC)2~GRGrRE!^SwNA{QYV@2~d&qd6yjkQ{<Z(uICC_jPbYNV_A%>wbU<HSa+
z0CvK?KtYyw1h55oc>hD>57jLPxBifO&v~wB{(EW5l?jjqR5!`oMNh1=TUWT}!MdM%
z+8-BFM`N4Gw}+#`Pw8+0;WT5b;Qwuut4)pXz392+&~W%ai{_8zxyB<p)_Bg-dz|y=
zf0%pgpt)y)>@VIqkNOI;ZtipT3DH1)SyXG7;~`<rmc&<>$8b9y?W&ysYbTl?ZVP%p
ztsEIQ1s~GgLq7KN{!He@VCTem<<=~|h#&o>Hy7rX>MNT6e}Rj}E?E7V-#Z2~JJJWv
z#PK0;E<m~9F$R2kF$V|1U?0z;&lJu71>b7tU--th_DpE|wJsba+c`P>F`O;CWxt|~
zeKo%<a1tGwcp<?^K0s~vo0AFpS@WAS$0K^(!<dfaYa!gYE3Z$%B){D-y7X|L@W=eJ
zXd0dfOxZ6JZr|$n2j=AW=r{GtOydvuhW9^XSW}nhYrn{?*9Q8$3%Nx+SbM=f#^Sz<
zd@SB%n6qp55ndC==&sv~=*ZA;fHL>pMshpz`#SZ<zVL3=O8dfV{MUJ^{Po@Uu&JF~
zm-TlLZ4MxZy1op*MP5Ep)U^dUIUqTixFeS)cy5+_sSg<=*7k4E2RY$tkd-4-iETty
zwvd%0$Z<8u%59e+BQHcgzM7B2?{6db+Q`JWA|w0xHd);npZ2);liF|l1n_!>KJ>d2
zS^X2X_M2=D0cfa_v3ULlLHF#kj{AHqSC>_ef>aB6Y<OS1I-kcY|A6F^6tZ6UJ@9#r
zBR4L0JjXLTRA2nvtDo9HJZK)DR~wG}Ua(t-Z-v(boA6CmTKQYrXfw$^rF=5Vk<~`|
z3BJ8`(^?4b2Z8&BPP6Zi!M@|Zg3)1r{g?XMN5H;aupa~Lx03Hou;-qaj!o}R3;y05
zJ7!v^!5)A1xZvL56uWk+KN<EDOqXCUn0xT^_Q$~qPS+oWJ@wta6_|VVPlG*e{7JCi
ztvihix=z+v=#Yh7qMwJ?W7`l7LIbaTv<N*?ckC5+9lzPQa%BG{`i}NR3Y~OxJhY4s
zQi)EHZY}Au@DXbtZ*=c=b@cw)w3knJ0eEXDi{6h6@JMaqxNl0;uWVCo$g^9{xdvrR
zljxF??X>smv%;2NY4K119{QWmRWV{(yM%kk(GidNtm>oJnZ$L-ipRmbNU77c&R4wm
zHTL&ozFNv;@3QuCFYr(Z`8+~wbF+=yXqyG=d}eRNuI-8xnywbcFZ)5Wv184QTeLp7
z%EYDXHCLg3fS>p?R5|Qb5p*ng7dnqwS&4p^Lf>mHgg@;v)m!ij+F?)Ldz|}xn|za6
zXXEdFbUgPRp@;s*4OcDX{-$y1*6SscyKo&qF3Ok5dwK8Vx<$z3)2fc&EWfsEk;|_`
zF6X}8-C3Jd&`gV|j|lVd`Z+?LBKZSJR?j?SHhVB@=ehcy#kkb3>qiF+z!l=VCv;!A
z$!t!c4{6P`hWYFEW!jUhDtT1p`LrteKg!y>yoWsb;;ZP135)ZFVSdEi^7)a){^jB>
zIr00)noZ)PL3~ld)b-z5n+W3PWy2#1Zm&hR_BZ&V1@TJqei27qrC1K@b}M16s7;tB
z@zGiwTo}a9FrxiqjB8hGb>#2mQ#{^JfS<2h=U}&QH=DI?VQht7OtA8ij~u%<E{#cf
z&NUB>QR548Zl*DwT=&D_v(b_F=w^Hu?Zam1=J$8o!uRzkXDttN4){j)e8yex<ArA5
z>-Xa;Dft>4>)+{fX(((@j^X1;+%0!|wys;K{pSStRNU&D7OVG7;SRd;?#%h*%YvtW
zevIKh!18Vf+6v*9Y6b9r$3OOt6_FnNKF8gGKV|JRO$!47_AvK(IQKlz<D{Avj{5$K
zqrZOuIaYViMoszN5O<H6vE&Ej8SQ>Kq};B7jz=WFb{I1RPBjiNR||h#e9yW=_i0Sc
zxxOoV^p1ru=NeNhSpXkb^3kpi_e8kM4!XxaX_r+v&P($5oc4LMeW2$4r$mo>ueLS3
zQ12|_dyDcPUw!}n2=lF_ZX0(7tKBGbsP&P%AYiHt<zf7V10TJr$KhE=8Tx2DxyG2o
zbERhAqB7t{y93-!>Ez(FocANQ&FpdGRq!$Hq%26h&upC~Yd*koIrCXD{7z-h0b>mv
z!MC>me6ufjtPMYY&R99SX!BV^i|;27cy>JQIz(u{`L>|z!yKXgd>GVYKVi=$zn;H}
zHGB!1Z(|VnF_xtt$47Ym%rQ6Ld3U5IL=J~*jdl5*cL#fRp19zp=fU}q-@d$={~PZs
zy}2L1@8C`Ts(wHEIj|MX1k--j@Tzs(bqd@?4?G{&d`a?=t(nY@;EiVKB=P{%ke_ac
zZ5pD`;Ev0q<*yHN=Q4IF?vkjw1z5>eC76ju7BRLJc0nwB_Z>aY(Vp+##{B{7#rfUf
zWBBg7dy4Lxc(b|Dj1S*k)pPhgpV_bXT1-(a`)pPZXV~!r@Xyt(@A977Hv-H(V^13D
z0>2M~_lMw32RYZ*Jz2VwTfWir|APChsq?J;^+z-g-H-AMY$5~5Z@+~{iO&n)o9_<y
zgy_5Z?m$lsu>1uuDqvjAj3N7cR*&A1&0-et-3DyIv#J_1HVaQ9c!HDE*$PZsc(?f`
zyGqa0=NEwG56C68<BhicvJV5(zJfL3o<i_f@V<E6te!S-U3mN~<?@OC7T>QAI$e7A
zRb(t1`03rq-OW8SfL##SEuy~&W1I=>Sd;OQyJz)m1a^9d+=nqegO9}`cULkF<KkV=
zhu(!;TS*MSec;xK-518chkTyeFv<0^53=5wj`nLhGWgbK@U73-e0+TTd<ysww}Lz*
z{?btsy{3tKu#+D*jXrpb0heuPs=Z+bpUQ<5X6jHKb4tBgyT4Yv0N7Q4=e5w1Io7s6
z%L}Yn1@zc?ht_2}KDN`l4>Fclc27djjV@yym(AicgZ8&!bN3O;629T$g?qrq2Nur|
zjgJcoXN`X)x?>}{!IOhNe|H7>Alu1l5~d#IOHH7+T=7-ywwcolZ*NBiVJ+hiunz}}
zsqV1NN#R(V?aSJEX-ECn(2nd#>L--zCkpN<rlx&yWMM65WE<$GmVT(eG)UeQ#lUVT
zG;@e~nzw;|yt;Sf`itcH)0lhV1%t@p|4#hM@w$Sz-R{y1HneHo&q)V`zjwm_wJz(~
z8^lk)fltvQGdcDgc231}72!7>X$|zq56;I}cM?-G2fAplcY2=ReM@x^+i!7eWMPF>
z(i#xoGiL9R-IJ=#iO|E0ZKe1y-%BlH#s{aEg~(Pn2hIKaTUsNcyKyb8!5+h1&HX>S
zrTY1wO{%W2tk&c$*ev(nQr*8-|4nNramW3?yrnwz%WQd&^Sx9HdoT4<Et~-{{s3*K
zSR0LRHo5TYfJZO;8+_}_JB@EB$ljp+N&d^M$zF}mm7(OD$@q9SUTp*!pJ9B>t<Wv)
zH#2wm`Me~*cfRR!V+0H^$@Vv?YM^COJo|f^V71HwE{Ba()&$LM5j?)+bR8fra4}`y
zo!n9W0<m-@c6(nLZIF9rujZhbrW7{UXrVJFbqV_XPr2{BhCP4Vre%?9y6-XfZF$r>
zv3!3&GG_aKex5whR_wi-oLJQ6j!$@E>PE95Gu^kc1bHoUd&$bK5Agku<5xa^Bj5MU
zS~>e>*5HBleLakUb4}!6Gck2wQv5u=E%snvs)F^iTBA#$HE7IwQU86dN$$BsE~xg^
z8@D{Qgz{%7e<oWVgeF)cXvu20$2Jp>F}LSwf6qd*^cBv3zPjFuN1wu%3VoS7tjI?{
zvAdZubiKfxbXQ;xhqwQp=YJq~=|u(RgO7a9fAjz5`)XoxI(cVWq50sq&NJgX_+LQ1
zrGe<O%O*y@oUzVt-G=-<Sn{vsibG)!Smw#+x(9~!92fp5>t{?^8!;{`ScguY>0F=^
ze5~-D-}=)FYu6^>#m0Aj12{WhI1v7*_B7Kl=sUmaK)re25oGja?e`zO2YUVC82^%L
zKG0|E)+Nbn{5M@0oATh!C6gcg$&yJA{&<O9llbJ#3wl1;|Ng`$lYF-G`S5~&_~eHc
z{NR(fEZFhMo2Ng$WWn@*STcF~50-r8q8&?CU3B%5qkNv_vxCpn2Y<BWv*jON^6%xh
zEP1Vb(vnGTjHDUTUimF>H2Rm*$G14&e{_TGi?tx<?=+@0u*q2~{5kj_c}2)SyOaCm
zux&N|!Ll3vwSaSL=6VQt2wq!}y**gTE@^<7^4&!F?q`3KtyuT2zQTIE&N`vXkXLXL
z{y7(Rr;-0;(|O_2;yM3~o^|+&(mBs#Uq3Q!%$yT{DCGPux@=&B(<NRbo-)Lqa$b9M
z*)Dj=-~7v|*hsC>O!gcHoKpN?v{Lc{vQL>m79i%P<LBn3&Y)>T&LHpXq@ms5*YD~7
z5Fhbs@gnsVpbcM{i81$hOR}kF8~I4tKg&9xIe2DchIPJ+wbeZqcUq=e{QR+EKm50_
zRWU$!SnzGyc<iz#9yMjeUD1xAozBI9*lzY$@ul6`ui+)oeq(Dvc07s~K8kJaII;kD
z;dbks@b{csdbp==#@CnPesPC=;ElDed=*Fja&gcUZXnKVVs}3{<R=zXvP4}Vy6l_i
zVY84Yj#iG1Z!Xn1r?>tb-Yq-*tLR?8uW|YOO0ChBS9MOTHJQZu=`>`Lsof|3a4r5V
z6RQ3j9Y^`)pTAUh{7vqD;nKx(wC5eZ;)Xf+qI4gbcH<nadjMPkcH`I^TOVhB>)A(q
zJb#&W6Q7TVoH>{B|HG4=g>7a^tHt@!fNv~)`Km6%2lJ+xW}Yp4v&IjlW~yv__c&<z
z!^qk-ykE=xk2@`F*Ob*2I@QZcP5dR=YhzvdS@V7TZnDoCvY4ZMx6Aqe6F$<%ldMh6
zWb!-E=WgG)2DNL=++9A_hOXKFEO^aL^gWh$-)H+8E&$%az&^LU_pVPN7g((+<kdmu
z!KUo)tu}dq5Awe1sBgU!fLCr(JT<>}v7ZSZW3kaT)3(N{=LUJM20Hr%b_A8HuAlLY
z9ZQTOaoX-X)SU@T1}cAwZaB8;Aa*OYp|Tm!F7=k$Q?vc6zUrzhNZB92tDW`*t#>ik
zpE7pwE^w~Za85}KVO4&+%ehbJpl@82H)ig-Zah@^Ou5?MioAFecOAdP8fjcFBIBtK
z-9sZ8zMtm<=%5FE7j(Y}zuYv#%v0Zz6-0j;Ll?eSf}h~6x)%K6A!IIheE8dGe1eO{
z1)a58_+bggnv*w=Ih?Vv2fKa!Z+Oegln*i|;m*OIUFhERa#^Wa`V!CD;Q<?flkg?V
z9f^7`2pkUudtDv77y0Hz+SYh%-n04r3T<jGnuq!pF3PuJd118gb?mSXxe-E)*_`l=
z8{)rUGrVT3!NYESQ?-q@<SV7Nxj%Z`zn1vp6~6M;+4y=Lg$9IE$X)62d=rDX?AAbZ
zS^1b~-$m`L`~D4m$O;qT5pnU@e)vrPWM|<L@^@UmqUX`z*q=Q5WqW+=A@*o1aQ}Yi
zhVa5etXuzGk)9g(^A{u!nQ;xXh@~8B7gXKE8azfEC30PZa;Pju{?nQWR|^>5_YJuX
za`@e5E*u)5Je=d7{j6`8Ik)8IEWJbPyq9kiFiX{j;Gw=2v8Q|ejMi=owAhY3fl+YI
zdgRvrLVSNp;X91$AZP0GSHV7{oF3z34<VkS3^<fkn6lQ#fk6eisvT%y2>nYkPBF2^
z738+=gwEy!iK{EBpCkD|vVuka59Imr5o5*L>C0lCwAIjG;~)c>Ig%kN-bH@zpJW=R
z0P|zSLpq=Phesv5{2u%I`&joD<|up@-U#1+$9juDai3-tz9m&E7jMxT>pW4vg};Y{
z7rERw13T-mcjWnCAy;BM!RA<tol8EJb(}xfcO74~2!HN9k0*Ui&#H}8w4G|o$)8Qc
z-0&>SxKba@J^QGIoiDoVqdb%RlP?cR7IODr|N6eK^N!}UU1tUx+WS`L{y)io2fIs<
z|LuDN3-=K}D*U&^>%fgg$lINHc7o=d4M4j7@)eTR3%U!a^A+ZPx$fRX?^k_r;*>4I
zXA-gpDBsob<G}8hSvk&!E*NQT$=U^4XY^DY^R1lon9Ik;U4ndkvBqj9G`tQB`hS+K
zBf8Yy_N(0Zqk2a$<_yFj4``jRrL#^})oZ~2<hq`&rV|&e41b|^t>^#l*|6jnly3C{
z^MbD9tl0_H_QHDZP9@I#)99C*ZL{~)PnpD53(dG^?|IkFNqbU5YMn`xKo_?nyEmDs
ztq3HI0cT;%LYBpLTHORci-MyzvaWtd@U_DaWE}h<-r<|t3a@E=16gM(<A1%C_=2nO
zcWKL>tH}l!gtku{&V0@N&0dn`_X=#L?*B64&iP-&9ZUM(i|yj2+`AES*8iU0LEcf>
z5Wo9nPY7KdQ$B>~bhGRg>>{f^Hg#Bj-D#|$66i>_t2*AfGko(6&)s@w&;G!K8`{_#
zBFMcvv3Whu-c$+g2cYjd-Wj~LrDqlIbRh3;ArBAop&K6>AO}n(xnF#zy<=MY;rD7s
zu&NwG{zKUp@YmaE3WrK~Hgha8(nM_I)JxqO?wLT_8rx!c&MUqvs+2P$a`B#W>5`tU
zlpKvqpJI*&0_J@|<O+0d_MR!-|Bj!|t(=QCBO^vwLuBl|ABK+{W&MuYRzpAjO1Jr}
zhAsBwhNE_QS&%!hwJ)rIcUWz{o2QnM>jhpx3~nL}y%=C=%+v;c&l#Oof9}%iLHGgo
zj&AuDqs#I;dykcHQP1V;=F7VqOY)oM3;$giW?eMrcIF|wO8=+G%SQ}G%g;ly%{TO~
z!Y+&NpTXB#GH;6ev++kQ3nL%)-|xHmXlZuLr^Y*_Aq>r#=Qs3$lCf&=Z`Ha$&l=7P
z-f9lQ&pAVx#<lEa*p}dL<t|JG_f_~HasK_a{?NkMdf(IrJyZE?o<)E)JasQJBf1xK
z54>GHv*^4ztBagD{owahU}(zBJ^j#z#$PVD!k2F&pU&D3nmG>hhUd7rE4@hVU&;Eu
zRolO(4z_1(!d4ZwcQ^L<<T{%iV~TU}!B_q8)dKlrL+6Fic~KYkm-HZdEHY?cMLjlq
zV)LwxrYpid1hSF%Hr8_Hf(_-HwTYLw7p$B;+Ijf;>f}_jz;LD#ML)8?{ZOCJN1lYI
zYZKy=Vf_2WD{b!U3q5Tm^j-zDFa2l=u(_qBAbvaidID!NtlQqB@Dl@Egp>U~YYxvE
zj<b$h%Z?e~13o;R_$&9~uPzyIojon~RWrSzaYI2|HXP#6;(-~zEpM}@4RwOI8#tF~
zFLe@YZ0PTjXOU@4RrBKPIYB%A&e8L;=LEIz9_humd@p-8kVMYw$2JpX4lew>^9<}U
zR`xt28_x|4PCL&)=63Ou^NilHoWXKd0MG9W=FST`3&FEebB_i8u&6tcbq#Fd9<>59
z-!wRh2`|Q%Rfa>ZO{EF>Zo+*}KN?tFn_e}(<B=5Sua!wBJ(Kf}8Gprjh(jJ)XU5(R
zlg&*z<6fPS_+m3SH|Ym9=wb~)_ITM^n2Wo|4%C_W49>4C&h$htoat3*9D(2ROnAcC
z`UEo}W_HE<K7)Rg3;|Ex3lQte%52iP-vIBQwqL{N<TDNY@ENNEw?_AycH74{D!`oa
z4NoL(%Wd0zjz5Oim(HyEui#7$yh{P^53#mQ;NKK-+iYR&9q^@ywQl-*b8>U#{&Ml5
zqr`QHMpnI+ncIeZ*8=a}#oDg|f0C^Ks~7J_wwqX0yEx$LT<X7<wHGeRJ|~^~*(c0q
zkiQE1;wIS^F9Zj?wHF=;4i~<~+B@WPa$%I)Z!Ol-u%13(8N9FaQRjf<IE%9jUu@zd
zS^7~fF`IonRk;f_$*K~5gpga-@LV{(<@cGn(K~DBh?dqfpK5qQjc?je^}~-o62kuA
zGZ&U^U@qaiIkQ;d;&r?R`>Xh+aJvm0>V&VXvM-FS^IbT!g}H`lTe$uR^OYYC_QEsf
zIsGl>X~;LUhc-^GOLUceC*J4D4vGaNo@&$Pfe>fIw&E2wJv+ZXEjgl^wZWfr(`~Jb
z(nni-T~o>Xas1t!ZJjTe6vdzU2C)|UO$@qXu=Lw{5<mO%&4NkWudkkje_DjI$d4Z5
zOjm29@&Gn-a*6rIy0T+T{Hn!Rdqo4v(O|C#C7N#lp72}?nrdRLLt{J2?G<+7QT%$;
zm*OD$<<E)jWjj1AdOR~XLfh5bOR57$?1X_{-0|SU;AgI38=E_Gu{dKi_)wg}X?#d{
zSM7bJ)GWx(r6m3c^YZ;b^?cX~@%ulPnP;}^zZq`F`bYgoPXRtbmp*EqwcR>)Ozr&x
zu=d7*Eook<JC4%f`WlDp6PxSbgQMzt<5<l&O58R}+;KSg<QKZ*D0JH?Vhoy7*e;5x
ztz!4xVz>XV(f@_O!y7}GF%-CCC^&5l`Q!IsG1^#eVJz+$Ne=$U@m)0F_sISC<hq}^
z@<V<b-Hb)&HwHPgrkH$Q$VhI#`0|K8UHZ%U@p!)Se?y&ltl7)CZ~04|R>yE&f-IX~
zH-(%L7|P83ocHcC*W&X-u5rc4`?5T-!Xdti*vb%bm38p>dgkLBYr5*lpHNT!1m9Sz
ztB(8$_2f_RjkUY#$e$1*e}b>r*TtSN-rh|75i~=NPQ}f9u;O=SO$9zMO=HeG*2G%a
z24A0hDSOc*Dvt44VG*Bar7Q4JslZ35Df-~mHoikP{Jmm1&sOl+{Qh)>dk0_d<4w_r
zuO^rBnhJb~D!%*vbkdj2&Fk97glpcMh^HT((|x|K2y;@b<qTr@XA=LeIn5v*ekL)`
znp2QCemAG{SjIM+aRstDrq!<ZapCK=Ph9bE`zM%tptG;iq+Yfgi_;$bH2=EPBw#qj
z?XNC66&POV_E%@hfnhnn?XFPgw73f|;8byYahmv|bj4gg_xYdDnCz(<Q}mh&@@ZG(
zax&|T-W?Bnm&dCzzVr5pUuo|i=&)S>Ez$M816F+25zZ8mJzEMLa&B~#hdb@+==<3#
za=GFoYsq(weo>43$z9Q{<X*&<08bE1>0_{?_B5HG{bSN+&vW%zPk$A^siltmr%Kcx
zKH@qvZl|9b`uPICm*@IfWc&>~$5^d{*s2Ecr;5%amhNdQ{rW#x_=nlm8f)Mx)3}B9
z)UMh*`XeiSY^Rle897nU6_=wj=|Kj582--KM0@W2=Xs`fBi{{Gw{!n;<U2PdYF2Y!
z+51f6WO6(v$xn^_!IfjC5XYHmyQnMkiiOX7w!eXgOxLf}#)hK!0PXbO-MkQ<i|u&w
zP#9Tj5LtW+@|6d}BY#1@KjvluLu3;dhIKr{Mjk&*8wY<$JHDdsOdI;=UMs!xKC8<?
z2h%z3mK9-FC*Fd7jgIBonYjzM`}GZW{NM)p&1TQmWT*aTKACOkqy^|YmT9oanN=Cw
zRZjk^vR$Pnb}i@O>x;AY>so%353CH^&r9u$wZG0JrWN_e^|zQrG3^{M_R1p-=&P*p
z)Q9THo4&s9HDLN#+m5AoTj@7`2JPkHe+uOSJ!5Xk^!xX3MFx={#|+vz$l82o#a%r|
z$T8H*I&4`nhco};GQ)dc<hjoNq{r<c|9%o1_#X0z9qO>UlAQ52^E<`9Vc^e)I%>NP
z0&Cg&kC2C`IB3SXIk+O+X$_vFc7m^rISOtbWPL2gdk1@rE1TknVq^d8=bna;F%6xH
zM}c=9e8}m#!?xpL*8j6n6L<G(=K5)$Dbtx+A?xMMF>2F3cCy*<VT{=mE!KOBVb5jW
z(es@-UkD+i)3!kut>s)cXo{;sCV5+X2%Z^UKOtI59!KiytiIDPUoOkNXQDI788d!Z
zvYi|PR)>MpL3ENy51P$~n6Jig5c%^ka|R~!JE7nFzWd?VopU+U%H2WHIoBj)k6Vx2
z*v^=|@%xY&TNqymn|A2-rTYhNXkJ){&K1U%7PY|zo@=ZQ@^jM(Yvs?$9eQN2C~mI5
zWFc@Kx6>|aJwjetk6w?=%i^?QeE7a_hlJHy$20M@)Psfb0`TUs<f8OppKx2}1;yPJ
zCVGu;Hs=(`o`<%XuEP&oU75D&eBRZS`Be0pPS&KEwK%lR>GJt`PjYwdRWUt3h+o@b
z_}9@N)k5dB>GbYeaIiLgd~Yph4n^JSm-yQ5%(Un=9ptC%7z0nt!%vT%+H>^O4m~Nq
zaV>J=bL7q&xWXoXUSYTR+6>N8!{pCHesa%J@3_Yo#}^6PG5Xyu_Dyo(J%-()1bw56
z^P}rc_HJ|X!j-k~Dbf0q3$M$$NWK?tE<B4on2}$b#3yWDTr&9VIi~S7_MIK%yc6&G
z>@FYrT(s}qe8k5b){CWS*hSl0u%q^pYwytCEB{?tm7D+WQ44>`g4n?hyX$xO33ej;
z9Qu25-#uE(e{yGGXFu3M4m|eCw)aBg@Yj-=(Y`~#sAOj6%YV6RLVQkpiRSC(yL*9L
zchWKTgpo(rT)f(t(%56*c!en$GT_2i@VpthxemH*=T7$L(6gB%c?f6pG|j|*3=e7H
z{BKWS_aj@Z!r1QM?nh=Imo|a(Uql}7yzAngFtAcgV1WE~ZNN4K-Fm+xtivE>6^qH2
zHv>F!u;ET;pQ$%X6@O!qhj%LH)j@J!imx9=S3Nkz>iW!cnXes2XTmO1Hb@ybUbfTr
zwGIYM<MZPCrl_IKl(d#&$8hnPZ<~23&dbzZLau4@!$Nn1Gfd+7cN4RC1vCJ^dH&r_
zLbNxC4f+MnjMc^s!H)7n;N*4Wc|7v4({&Z&eeLO5_N7|ZFpHO0VrL96Ud}5T!t7N+
zXe<gHZZuZe^0nX&I$abxgO|5Pi5uP+Apa@PZFry|=bKv=B}d*g)9BXAm0Nk`;m1SO
zwfKKUwvJ7tc9Z{(y`@5RXm34z!Gp$yX|s+xA=+F|e<}}LM1OhZ>nYzz`9{ja0h|3Y
zP*oEMv`PjjVIJ>4WIibRt>D|+Z{9p!^2D3ROZk*N@#e>)*SvYqd@%Fw=rtMqXfpWG
zWHLp3il2D1ZQ5V%r0mUB%2x65N3RL9-&Pps<s>#dW7d~zPadZ=hjw?_1@U~^P388#
z(dbn;YXReY`u6s<5WZiveyfc9@U9Qt9hYAN?fScA7ea6Di&S2a2tvOt(C@|Yt?wA_
zbK&=$Q=LTfRPBj{W%!qsUCh~tfrh{1ysL-teLn(z8)!Iu!v%@E)?clCcUeuqSy{{(
z-RG(QnO)bo^vj;tm!u4x_jKB2PtrMoN4rVU?%&#7F5R*ZiEa=6ZK$gS+;nM{eYqE!
zU1is}eeI>qD%w80+g$$KZr|mi)mc_StTSp?qfeHRqXt?nZ0*DjupZk_KCS93ewbFt
zpYPG?W6)}ZanyOVIwqHk^6puy!>NkZIa-}9TJ05|WUaVYb#CfFQM{J%$Zl;Ge|({A
z2-7Hwgt+gI{qzC9lddrZL!1FM2AEGcWF#N5_60**8K1?o2+y#oRDU2xLjl^#r=z>D
z<$JVs2ftf#ZLg>8Hsqj6>`CEV+bwR}_RxB4%cAXO+O~P7m?^Ifk3MhCYu9_0zn9!V
zc{pz#`)MPZbgCU<spRJ)d1in;T6V+tJYY7vG6_6kfc-hZ*_G<%&u>z$ew274w?24q
zk?OJLDPQ(|$-Q13joXYeZtZh3G`7;kU4rpXc}MM$TPD%Zcp7LExzpt%{fuQyu3R>~
zddhszdOzjj6(^zXXr9avMP|?#26E3OCmDFBp6lEy#XhAo6;B5DWNl9ll+0?_qeaJF
zo;5G$;>2)a99m3-u?-q@tTyZvZTDMG*x`4@t?=}C+j#bAzq!-|F3RTO1IGuXV=8{9
zly{%PX0nU;XmZ`P{e=H}`24Fm*?|p+59K`HrE@RxE!|_wmnlJe?{nC5kVoeQz^f=W
zrZ9f?dfthA=%CN*dH4}4q3^bfh>iU(`f0XZo4DsAjo!7g1iTNh7wetj_eXnoHh#(M
zXAbYGzk|R(pFj0W$8`0>pLCh<Dg84A9zB)IN9XmM%`a*ZhhVt(4BItwkGlrwTCdz}
zW5@P$KFB%MD*3>me}Iz~aMN7eep2LAda9(lGgRc-8^g@keV(&LcK)-K=p^Pm0L<Ly
z*do1mJDWoZ$8YAo&Ulr_O7Yom@cXt8U+da#FHFY!roI^O8w39d<GTmn8F$p4>e@|!
z5%G~uT6P$<)Ako8-GOa#7clSq^7YkE|Cj8OQ(_KzU+=>{7u~R|Cxy*1>RWb<vjW$q
z)8QL`tYgD?HxF(n@285%jTdb?cEuPgw(5m-`&Zf4-U-tu#45~$A;Y<;H_m(Ql6`5$
zS>1{}^@sSEkMVozgV&{}|1{oroZsvIE`$&Igl_e(achkE<HbA39d8PM%#J?R+MXT@
zAP4yVIcv+34iar<Z^h<sVJqrr);pH_j_umB@X^*gc2kerhF!sVD6v*NGvCYFzufZm
zAL|LzN7Vk<u`p$t<7URB`B<EB-B#!9b81$ntuffkjwold*&9r)+3(WCtJkK30r+X9
z*(ZGWaAGI;C_VHv8#OTZ@+m5B%Te<7q+1t(GuIMBk&T5C&WOi*^er0B&&xNFJ(2ZY
zIuZKa&X}|I?o)XLBeM5H)0NQi4Cpxs4P#SFTffClNghPm8)}Jvx)J;)_gNx93}F@z
z$qxxl_oE{U2gAE+69M4bk8USg4(IUJeRtz^Y2`<7-+KyNXDyY}&#S9C<X~{yabZMG
zEy;%#H0Hu+I4@c@XQS7@ctzMQ9UjAQU%N`(zSOSr6?io4!9{l7Nsiek{<gh53m<}r
z6aSV6AD!WQxfTTjkN1h+MU(>&Sc%_lA@`rwAAH!Z90j)E1l=UzTP|MT4V>0zZMNa3
zIO7LK;&<3Avvyp;Lh#v@qw{Vj?a_nqJB<BU->2X*=?u8!kJan54L+!xOR75zm-Sh=
zNVhx<7J)wj7RoPp7Fg`WHXXiu1T41ZVDZBoEPe<qDo4O#AP0-@jerGyHSY)(cLR%o
z5wO^L3KkxIjLbix*fEbj`(qYoM5SF{VcnE><PCIvmv7_4CmM`ytxdefc~ylmD?6UU
z2G1Sx(E;`{=;DF3R=R^YG4`^#?pnaxzZxncj(>9Z>pA)X$EwU!(dUFJ&Vp7d=6^!+
z;c~D4kvR|gKkVf^AfIV2=RtnH18@J0(vQZMq94(c`ax%#=av&g8-*@a?v)wJIKN8Q
z_{{}h0e@ao{2F%MD74=(U`{#{O|~w3dlcGp+s3zexIVG6!)-%{`E3Vsv9fAgd0Z6Z
zs<u0>v`$8~Pe4QM7deS2^i#tbkipkN{P(@!(N}n8aV}+$|G&aMzO&G*d>y}wSH9L!
z{_vMes(0919(7?my$;?nsXM@26?^m<?&^8=1H|Cq+vGQsV&fm<%)pF~amLk$UYl;h
z78}A&MStlU#)2I)Q4{5Z{TjX<>p)KJMQ=dQe`d!Iu1yn1)_0WOM}K{7dNSt;8{pfL
z<27bt;*j5`wO)S#XSmGgVfM@B3#P?F>;WM&ZSQ^4?bv2yg{Rp&zwVnH6Kr(m&<Txd
zT{_7x;GWNDy>ibuW1lxR8t-$6YyO6BY-}9oABt_>;2RhF`V1!?c1*nHDl4J3WJ9fZ
zwD6?YUZBLxlZ{kmVPnO;Hp9gJsl5x>S8M(*TUTvHeHX+k_UF~dr{jF~PSub4&W{b(
z$Jg;Z&IhBu^I}>*wdK}FhW7oNLyUUS$!!bFj<RpZ@mZbT9rcxQ=I6$fKNH+ECH|!^
zXTGNS3eRukygPuuAh4du`aPpuC>_W)q7AK~-U}bj%oF~3_-KB|Ik(;w9f5-`9f5=1
z`zdl#47at`KCLZ7nTLDw^U@eTfSfr2dJ_&l3f~kSB6~bD^_6U_wY%OQs!PYn{iwVm
zZY}}pI-JM3Wdot~B<APVSx}!=-gxNt8AEJxN^6p{VMW0Q;l+L6VJBzjrH>1SrNeO5
z-r&){`VkLMU*ZFABEuJh2jB1&$4cCKB{8kL<PpKh!RN6EnI`Hh8g8$Xc=$q|X^o@4
zLRYrYyQ2RB);{Vh7=G8`na+HpK3~jFnM?CN|8O0LoFCC|x$^hQ6f_qlUNwr1Dlpk>
zk6sF2p29aY@GP>V4Q=hf#(Y3$+T^B+vbTSQ7~Cju-2xA<i8?Q(kZs&GLJn|g6?l2E
z+*_3^d>iMKxm+QJygI1`#FC>cq{w9xMTYq5`U1DT-pLO1>Z~-_bVqB?F`dhjlQ~Z{
zoqZ`}Ca=xT_tNH7oJ*jaIOEv6!QIX`t**{eo{h&ASE#<6^v+$Tdgpx3{m&PVOZ7#6
zz&H4gJo?PK!BG0Zczh%91K~TZ^Y;V1FWIGoJ-&l|r{mZDH67nGCnYC>S8lEV4>tv4
zy{q|;hHtg_i+$oHVxZuGwfKSEmHTa-$K5>qZbu(dSujbg3IBy(;S0=yG=AO0BNJ1i
z{6nlaeN>TCO>1vn$jtloWV7R8@bDPE;79SxQ5zBDjPH{>FbW=xHkN*T&ad~za(;B#
zwYlG07-L=Tw^bBf=6JvHU%MvvyZ^lC_$&GS4dkCUa$}o-{pc96T3-LbOZJz)k9Ss8
znx*8;b$!61w}Efi9v=r++F5h?M6CZ<ZK84%e+UO#o6Cn-1HoH7;i1ROW|w~qWaf45
za;gIZMGKxL_l9U|0`dEzt=Z6(c%<F=XkV(uidUY0D&I>~`7prkD0^V)NM^@=^g`8r
zC0F-CukN+6zSIUQzAG<>Kv+2luAuIv;LDqt?X}{OV~UrU8*hle{|mj>m@k|ckHWJu
z55Bpiqbz#O``{-X^rJr1zQ<<_eRR;q$mefhN6;Et(Clh-80{mjE;7!{eFeF<;|1Hr
zEj^1~VCIT8vBCCDkj{)>%n9)KoA9@C_Ar-MasDh`B_4PTo_!RUkiQ?lkMh`8<D9=i
z)A(`3)DHei<KUaE+t?SC@5JqcoGGFM;hOs&-Z-*Pw;$!NpdYW#a`v<7w4FkBa{E4@
z*ureTtLfM4ui7^~ralMNC;hm6;7|4N3!%irFJ$IE0-Uyh!=3ZFrw|&J&&n2?e5%IY
zy9>P0f8wLky}Xkg?<BbMmpgI;dz+9mn&JOR_=xuV_268JHPCs;Kpkgu@;6pp{5~Az
z`<h|JefT0N&M=(YpE}9uvzGqH4DWYiVw~x?d)+kVARJsoc?y2n58SoKxwOwbMEkm*
zgjj8U<5vYwh$1(+@8$d|ygDAQkUxQBH1E0F7VDt4I@A_r!)+noy;WPvt#hiJd1Gsm
z45GHY_Jv#ef4BODt`gtQ(pB_eZXd?aEDCPvoe9`t-FiAxt~uS$tQ{UbC_bO{Gjn6o
zZExQM7lZhld3$Y`wj^7v1a9Q`Ob6+^172Ohx3_=0ID}2h@GdgtY5o-kyuU*GFmjYf
zOYendJl^K@qxbX<Hliu|J;C5tkyj@`or>K4E#E}XA5p%CSs!CdI)WP$FT3I^r}-(8
zudvQ}O1_F|<WE;$K>m|F^`8agTLGUU<f8(=_EwlFL$k4~D(`D2v?Dq#gnwfzDeF|u
zC46Ap>?y6q*i56;`!{<+Lj?R8ByXo5d}Q?C^cCC(GZB7|%mqx|pe=OZM2AhB3U+AE
zw`6#I*z>UI;(ufhX&riVK5=j55BDMV)BglkPopdU%9tHtjh}wQ<QiB0wdX05{8Pf%
zn<)$7=h{qJ82Q5D&X;GIPn$itRes8bdEATNt~ZZ@;d#u@&0}hJC-d;;u%0=HR@C>g
z6B)Pf3G}^+_6>dhGi3{Tp6&Mvx8Jt)&Ps5nQ8wP?uV%J4H99W`iGzwV?`H5^zPwp_
z_Pg}#ypoyQLp!&Tdsp+>!S8%L%hXx>h!Y=PbK=ChPp<QmPr-_l&m+6W@Nrij_xZb%
z_;(?jZ1->k|K{`nw4QJ0=|u)Uxvri&#R@p%DDLj(EHuSACVj;vqq;PMEcsjq@y)wU
z{0L{Rl4m5#973-XtsH{>pX+eCjyzP`MSt_eBk^%fBiHTl`X1S@#lD(^*Qsyivr&IZ
zU(>S(s3*Vt{CSH8GUT;6xh`wdlnpbdAG^4pwQ*Y6`9lYqzw&juxQ5Nt;I9*4obW=~
zQl69@*}_-H##hIiUqtt~;Im`r?kUh+F5W!D$XDWN;VQ{Y#6!R7>(ad4JsLa;my17}
z?aHrx5FRyv4k&&py<<E!8TpKc*$=GZ>>j1D48z6Mkxs>OY{}W(kc-@W*|NPccNaEo
z^z(1PjI)$yUIk{sz$J0TLgvFtIO6dM@q>Ig4FDVYF~0`hygq^_2u2>f{%o*<cYCl3
zEB_aJgJ2aPFOvr=&P_Sr&%*0x=-T<PdQ~zj@Y#;s)Lbdw-zV>3&m4Nyw;BKatn4}r
zNBBuTUT5KWx{s}gW9I@#d$mJuXVcxpxu;=Gd@1tz>0H#|uFlnl`&5f>jyTBX;H<A6
z8P3>o<2cx0d_!B=({+wi>4-Nt)q2NC;^%>%MmDdC?dDbKFSEM-?tZg*fU(oZe0T4p
zjr_WvP2b_X#c-zLaHf*teB}++edIIsli6+d$@TzTp3L5po%LboTnIm8!#JaT?c}X7
z;4|y}r0ah*f*04qALXA+TQ1&(7sJ1ppLD49iRe(K{v{`?^E@eAD*h(;?BinrE!gB)
zgr=U%=3OMW)kNqqr%U07(v{*YL3j`?M$aMtL&sQn2ylw}p&{axJCdfl;^*WsbIOjj
zU5)R&--);N*wxB+)j=Kc4DpM7S-c;P)giABc%RL^r2I-pfdR3=RURCakExL}tbwO)
zO1OI=@|gHUlg@M|;!8npCgta0udHe!?p?8%ui$TOV>c83Sx8>RkYX90;>`R9Hzk^p
z>+1O5f=^5ZXYqVDhLPj=E{j0x4r?`Iam&IPiz^p$4wZ=He5X_Fa~cD2JWHF=k%?tp
z87+0z4w6Ukb<X98DeX%lM}7l+9N975A9B(M*GfLL_uBXqD26SR^-<ru3wbhxFVdC9
zjt#zxdk64?D~6vB@V>>nui=|Vy#^b<hZ@E>1K*)n3Y~b%PeRojE->?3wuY+fR+t3<
zWbQ7;yqo@%1AMpI#rHyO2V5DnJl21+^OVC`0=_3hx_ePEz^}iCj4Yp`oUh;W<jPi_
zr2x34JW0d&b;;>_efu54uSH$T%aos!Ni<!%)ohlZSc=@OZv8y@Zc<jh%i`>aHjl3=
z?FzQIGTxJt@wUjejgP7DJ&0@<20sVksecRJ2nOU#tcHItAO~gjB+lgrS?daX3j)X(
zJM3tAsuCOp-y;*9#7<<GKpwu!)+KzG?gsBd=E>^zpPtCMZVva=pIHj7BZs6a!F9Fu
z!%(&0HibRG0p`MG!Atlocx`8F`tRnp0)|iWU*k+pVr{{bwypS8f-4ztP%swGgnwdJ
z-@|*}nrpq~W4Zg4Ok*2m!d-pB-w9P?KXuzlZM`Y6k#@G=d!Sfq!Os716n}buLkgde
z<34{?JvrY66Cbh^aqTOS3mZG_te;2}9KHj7V&I37VsxI6!+D^5zlv|}44K4Md>8}r
zok5?7kXH(vY3)aTQa&lc?jYyQKik52Gw_p*0N<<xcA??;5pUfEV|XIy>B{w^u6vXi
zf=9{WFd&>^%wfh=fZW$hzB6RoA%`=4owaM<aM#AqeX5(HkH}w6`=Q37wMv5j1B_=-
zyx7<=jVWovoBXwNW<ldk_#RX;Z{?w(yi9Y$C#N+9-A7FAoB?1)e+?bzbc3A3>6}Aw
zuD~Ym`oyvpQ+?Bb^$ofYYi&PkC%TDX7ZBYpelF7}I!)zhH|X|hwYvC$%}Y4(9@>-*
zQEM;X39Y@_u+^93j@*0>J!EzL@;-9$+Gf7s;Lb~U$=tK@J~H>F^^fTN6!Sf8{@9%~
zf6ZMmu#aVS2!Awg=_%*}33nZ1rt9D|lei^+9jCF5FJb?rUP5E~kdw&RC37;%Od@kR
z_J&<n^%9;RyBORbLu?E_viK>bO>~@_hgf*%@e<_++6unO|Emk0RscU63ocshtG$fP
z$G*Ciyd&Qh?t$|m{3gTlxiS8#7W^iKhk@{h30ui+qc%$5eaXV?oxk!MPGXaR1{Vl!
z{|v0ueiB|LJjn0kFyj?J9?bbPB(cX0@T^mQ0y)~!w_<@sdxN{!r}5FUZohuNxqZq0
zHt=C~5PrEQO9x%}?Mg0;vVM0^CxCBWe<{4y6qE&j>)Hw$wlF7?Dv1YY{!{tEwc*vw
zA+d$|bdY=E`hejMbpOgQ?TB}6^!t}4XPfy0$lOkJY}_nfz7Uuu9K-!_{8sG8Tfxx?
zj`*Jnj$3kY<o;~@PleCP+thD3936(^7vY0~qxONp5pZ067C5R84~_=DAQ(!95geO+
zc3EKNZ^|`Ct(n#ezq`i5+<M!r_bzX}$2)T#W1Pv;*1KSMy`y>S{k+CW9z*u#;c-TD
z>n)#_4=`5o7WLz;dwySsMp^e%Zrv3}w}CMns{9~py}R7!uJyA0J6Y?;@sUei{6Xm6
z*LsAztDmd9I-X*^xi7h!xyOG>d}aq_Uqmm&NAV@+5c(nQDgW0-X#TOOW?y*bPs;~O
z3&4rOvX&d^17ENde$0N;hEE3k7Fd~?d&+l1LoLwI9ntaemgvN|;P=?A%X?1v3aaj4
z?FCEaJUSaJ|Mm=677fF4gJ5}n9_@^PWikiLLplGU^g8^FbMO@Xj|NluXO5($|KgeU
znTw$Z@<EjC;okH;$W@x-9-K&RXduiUv&T#?+sgb{qou&5;Q+9<$v?52{rM1l=Mw54
z4*aGZU*o0ZF)DowU(UnOl=hztvDM<I&u{vAc@6o3#K+rNKmFdt{&0}J{sCm2jo9TX
z3(V4hWy(UVm3X{i?L^=B5iZ1sUa@e<3AP(AHq}?sa2UVNTJ(ckf1M$}`3-JNpX=8)
z-YoEBJMsDluqEmLVfOClelXVEe^WeHo!5W?dS#Ub&1;<xu8piV$+~Ls0rZM8!6FEs
z@OVIRiWp_a+<yZ;W6)DQ`)%q5_Q)k!9usCyl6?6awF_*2*O86UH2;*Dr|199^L}4R
z)dlcV?c<6uX1?PdU$K0lU*FicmoxV;u<HQM0ca_R3_vVaqt-$&Z!-SYAoftz_XDF!
z;D5IIde7VYpJ%^441anKf7yYef;s=h*dzxiw)uJR<}hpd96qxHMT_QOw>eD)JP5A2
zGC@vnIS9US&p~4FlGEkO6!)`#mAT30>G4C^BuJGt%oBgadMrmLtN%sOe9h+o^BMSg
zrV;tN>=VF8zSPe#r*{d4A>sy;pR4xhuQ|6SqJ7x}4>c15z}c|$F5$<wT^hHBX*{q;
z`Am>=p!1g5W?vLsTu=X*N|SEG#uuO;Z!Z@<oX<1K0Ttqf>|0Yu+50+kdms9V8#AC-
z2gdHwujnKQ{c?`v#tb|UekMooY|7lduME0%@H<S7*!PYwuPy9xHe(Jk-h;c?1Mxi%
zl1sD_eivkKs{v*{_)7$z*(QVkK6$4EiwLmbj{0tJCjK4bnVU>u>w5TI4gAh@;0KCc
zc8GR20*fuiYFJ+EkJYkg8u;D%>8`HR5X6tXd39uUYOVGK$K`k8Z{Xd^{%>aQ(!z$|
z<~|VYo&aVed5huziHWYNblYlPO{`-q!kPz+DLd6}Z@GM!4Dn?tXmcCw2%p<olRFus
z?2VpoDEY+ICv$e+{Qdvrx_|7#PZs-+$?Epdlze>T@1wio>X852z}3x{aW>C+cyp<f
z2y+&&IaC?j96EItARUri5wXvs_s(DpUtO^{y(<-}uEahNUA{P-qzu&FTj2zUzQDTf
z+8(Nw3|(h@H`E|&GLL1;i=DM$%DnhM?@mW@&s6ChmD{|hcl)7D#h1z#^cbHzIR8XG
zS@s_8rbCBDx0%rW+i#i86>59z*UERGvq#Vmze?`h7Us~b^9<vQA^YrYlO9aJcI#sI
z?1Q^i$c<nUZM3PJBqPVu%v`A#dleYVhTgASv7FIZv>`e-hTH@i1JB9G1pU@LE4f-_
z%DI&PTsb05((F@?$gKb4>G!MO3m<gf|EcmY7j%8P(BYo2LhJ-~H~gBIK;(bynZTv5
z6Fse+GuKY`xYZ%#;~TJ*LyuE^<llo9CFe($!B5bQ^(_1Y@DtqPcPwL@mtKdjKU-CH
zb14fo$enG1;jfM>hX%33W6ZoT`hNv>hcLAL*&?%J>p-a5vOAY;#Wy1gY&QVc^}sc9
z=i;<+X2gtB>B6=dzP=uqNj`7B+l6rqTt+9ae`zsoZT&$O7n-@#9^31@eEifo>)ouQ
z#^7)U=fOhpP@21Ehu?ypr~B2>X~Exm@OKe9`YE43;f=;Bd$&6eY$craHwp$7=rJqU
zPn(Bzn5-_^e@REV{8_`mG6F1BE<MBomaKn6Gq6<Ly`DvAM>w$_7?4k6ui(nLyPF%k
z9hd+M;1T5P%yQ4p+Ff`+*T7?-#l+Qyd}34Zv;Ga_4{^`SrnvTX&Aszg+1ANrM(*W{
z1rPEq|Cq7KHY~fS$^v?x!$qwf{yr}`Ih=Iimczv$u=pNz-Df$TAl$UTTkk#fBfM2V
z+jv)e!i%X?pSpKaJR*C)ln;Cq9Ts$NfnNkz7t4?RKx3i}-7O#GIqeVM_55jUM)x)s
zqeo9+?8Ib)xBGt0y&s%)_oLhB+0~v6n);n1>bFsMCw1t9^*)t9$m1Cv4k?yb<Gy&J
zGpBNT?VOqZ(41>ajxAVJbZo&+c*7B5K0>}@3z~=lXaO#Dfeqyup5Fk@s{9Z%aS-2s
z==^;F`Pm1Yc>Tg@iQ>PSP;D14N)+5Xp}GmVIJ9X)x&14Dq8<Ms!Ph$G2M_pu)z7`E
zy^kk-?iqo5Hx1_*E58fAj_hYSHaj1_0qUz4JyLVfyT8LX%A((yxqhu&zcut5q+g4E
zBe_0nNA?MBANr4ua&NA?j%DUccD3n8d^JQ4pL&!o^%+cO8ac;U`3d?S2M<sk0s<Rd
z7!|xVjFw~b&Tp$1|0HkB8gKqs1v|k__dEzr^u4l^_iOMaFCoub5S`eATP=H;-Vyu+
zubB2~)<omoh)<RwM$1QxqaWXiZ_wUInEIgAjridxH;w98FK5R!16cl=_jlQ6&MU^+
zsE>`@X|I@2)vLu`<ISgn@sG9!-nt_*xZ`NZjddoxQ*8vWTWLIMQ{(wd-V=;9e)acl
z=A(J&-ClB|Y5l!EN5W8W@!%-<s86+Hk-J89Y<}nCOARri!A<L3+!nq_wzpUV55BU+
zY5g=d4<EK1AtxQrHJ*+5uNiPb<DZoqzutvLr+~Na+UvRMdNA99ZK#d%k!ymiG0#ss
z#3#9H5<!<deV)kZn>Lnzn!1O51@1ew2Q!W0-Rfhw{lQc93V^{#7+C?}(NnVKBI;?}
z|4;7wR=yo{18**BuQb<o{`%a+GZ&VuNhSCqm}dLP!cu#-TTa`8wObZ7E}R8puYV6O
zPDpm<JkaH_?B~PhUD%Su8{xTp<KM`A&@Lb63{d=2{MIHO+h7l_h*tEd-L_>mcYOI1
zZ6D+NPCH$(+)k6@t1CoKlcxVue=>4U>6(Z=HD0l)BwdpncVY{%-4%ZGDe~UME6t>M
zFghu2{f#X<X59XQozD1(M|rO3(oC5-`84NQ@1BOO7hAM@=E%Lyx<@*~UEki=b@rn%
zlbdNsWA24tW^=<#=$225clPJL@5!C?uXCP*>`@!@=Klcg9AfU$UGm2<gLsU(n`Xom
zbI}2B2tZFA+%49L?A{SDE4Ls!NRJQU&lw~Z4L&>+WnE{ok9Ay)Z4%jik#W}SypcPM
zdA<l8u;Vgv3sLWj?EM|&JP#m8>Rsu=Y6pEM;kBhWG{NUnz(X>pk8z~H1=+pb^<fUO
zyH+xOPYzK#`DakXHYa`so^a-zkgRtIJyK^vr@;j}_x7ui-`c-6(Dw>H+Q$m9NnJNi
zaq66zSR2X*d4AYzAYYD|I|mzrL3fevAYI@EY*jwW5Aj`N`CG4NjSA3}ThNu;Oi^p+
zW!J7Xz@^O;w>I<rb8^vLw_-)lpz)Q}t(e_2i~WfFWUW!){(`Tt>I-gP**3j#Zlu2s
zaG;a=&q1rQKYboK?SLt5WzTN>8Ew|B__&+nwQj{FJ#~(IhxxcV$0TNPj->i(TjSIm
zH8-`l1=xH0W*ck27`WEe=jzs*#3Ih)RHrnr-v6cVy2ZJ77Mnx?al76--q;2E7Z|7d
z`WYXU%Rk~GH->9xS4pZeE;wUn=q~=7P})wtEB@PxpDZa1SH_$Cy;ongy!MHcS6#Fu
zv+klLZ(Q{;zWH<{mNb3sM@xRl|Ereo`tFZ;_G6y?FP>${Rs2oz7NbiJS;Dm+eSb;O
zi<i4T-jYcNeHUL;a93pE!Cd~Vt;POn+)?Aka874ToM)9;sk!k3Zr{#u-|8#BAB`)B
zel~JUJLy~f*I0!^I?H&3{?(q^-llvHsrm61XIA`kv|kghed0&V?Z?b5p*he;rsKy;
zD!!IjvWEZHgm-;+o%-$g(UN!Z%$r+<cmQ+zCT(lYIv)Jt`6=dwykDk$yU;weYyeq9
zxGWm~>+bc-uD_*yS@Hk*n`K2;Y*<!!LFYY!xqtN?J#{7i(v7C1l$`ff{&7COi}>%W
z+8yBem<z}2`OFn}ENpRnWgEwuWi8koeXD2bo(br`z@4LqH^R|^@T9o<m439GJyZR7
zxU26OE1DO!K}#)TH<oW(QJKqU;eV+X-cjIRl(++2E&&g&CBNb!@TNFSeo1o;=S$JP
zkJH}r6?ZPIH2&DkyOvY89$C<=42^wIHjOg-t{I}WcpKyD1wPpJ$hYE;`-%N{447+7
zd%%GJW7x*0g1Tnx=dmaF%A(#_qUI%wv3PURT)s2LJhLY{)5TMbgFe%<$jSUuK0A%S
zwH;b<`^9dddBDRIkCe8EYYIa9)>O&%@?pu!rP=ltxO2*HNBXSSP72(~FLP)&TW{7G
z^|Tjw_0+!=Fmc(SdH=~h$!tH~8sxWmMm_j(AN3skC=5JTw40m%lW#TuEqUWs|Hd)<
z&H)Cr`PMK<jt&Froe6{fGhwh#<2Wz^4*ByRSw~}5oslr`V5jf1!NYqezx^}d5_sou
z2?AsF;jOcD>HNNO_;F6Kap%ccq?e4uk^DAC!bf;zsP{}BjtExX+&%bk#_HO(g#W_%
z05sr01L94Bp9PG?7Yy=&%GpE51@g=3!z~|sW;rqyvA<azv*JFB`!sAmK0bav1$=bJ
zMiHOlC-P~|8>3gZ5c}Z<c#Y&8Pkxb|%#&Y&?5_{3zG(bTWR@hj^=<aQYZ>oP+4FV2
zHk)@t(2FO#h}UZ_h10XNuDN=$i%0hwgWxBe%xuuTLipeKtnOa<Ah_~b)^BYF@{P{F
zeejxE##ssPfR8Ngui&n5%4TA#;CDQVtm@U3Z9HEtYG=%f%cLLIHzz6CGA9?FbKltY
z|J;4Q9r|e>!B>WPN)9hv-a7Uayj@%#g{Rc!Xh-n>qx54Io)do+?Rb1Le|_K1{6_Kz
z=xd+w!C~(R<m3K1%<-K0!@14R#nH3PZ<xMwV|3}8F%HwWN5A>>oh$d~*9seVKdp$i
zUoASVA(u|g35$=-$H&Ldr+`o46E#;yukm2)(Qgwr4DqKR^0|u#6Hnh`J=!}l3V#xB
zIivoVbFZJpv(x1PkH6&e&yo1c`jXEAxgd~}3j(M2>9#w{`n)atjn4n$_zT|}=Kc7%
ziqDKT{@#&$Dr+{9_n!^l-x3av+2_Im{BYN<_}t)N<?(~F$Vcpd=P-ZK8F-Oh$8(>*
z_|Hh$;2q7M{@wXQKlwb&!|}7>!JljXn#Vhtzwr0ZG5=vces=lz$vvac!JljXn#Vhu
zKXfzN{D=7=bgeaX`60AD%n!q($UFJv(8C$>PJTJ~;+E&+DI<9)uUuujh&K=~v^JS)
z@ly|%0y$aU<AWam9De_=&i=mMtwBeU?NWWHO>1-ZeQ$1OlsBGUu6q73=fiV}yS>`M
z2G{$zd`D&XL$_>b;XKFv|4k=h@Q-dWI=9qWvM*K%uT(!CZ_>9ne*a?HoK2gYlb*HB
zjkLLN^fu2%x6<jvyE;t4+4Z`ca&&vsD16H~Q+{|`{CgC<KZ6g0zo+<jmfv|W%ICXh
z)B}ITzw`OtTfQI056OGqIS0NPHF3qIWcgS1AK!;MP5isw`_7rV;2Gmj5{J(F-$t+9
zn4Iahe=%$I0G|V_*BS4pOnkHVzLOo#TfUDy=L@`#o#q+YXj+($?0Oet!^`i(wZY|d
zeJfza*HOoll|ILB6R`HJ(6_Pn-O0DNHu^RxvoE5uq}kV`?@qJtf91VnqGsPm^gL|#
zeOTX)*>_8RdBE&j%75YSFy8?mMFTG10Vh4$WNcZ!kuQhkmoq+>ujJ%7m#^fPr$*sB
z`Q^!6d5-U$QNJ@+K08m3%da2Jm0xz2@^G$v;aSR^T)A_W@<6T}ULp959G}P2?7zy=
zu?M%|=Zw|Bi}HDp$A8qGeeWMBZ#;Xs<WKEq;@LHw#1A8DS)JBf^6q^8H){Rpxz#^|
zXMf_<I5odB%5Oit+{Kw3-wnW{^I_z{$IQ&~<+GIwe%5`b+VyC}tM8Uy{YT23)BDbc
zk6VBGXyrc{K36A(i2LBI5ohSxc%kUES-*bi+d<;70_fTgUz=@D=igquO@1D-w`}k7
zQQE`TS+L7*PqLBr!6^PSUfc4!&{<W8aX5?v9|5;sO}%07+vT2hdu!m<XKl`@{$*#@
z7yRMhn?~CEy!FZ7FWU3u@zd;{@B>$_MMlxMv=*Wvx7|N&e`H)|+WyYq`+?#8answi
ze-7`D@c%vRH~G4eV4(TS1}(eq8U2Q_wZNOby<k_4Pmc!Ad^m0y0Y~xvVHx>t!csiN
zvvHioemW`)`$y_}@K%i@XFnZ=WB$0$r~|)M9m&Y93@{1|^WitLzKgrm7u-A;O8)S0
z&!g|r;OV`SKfW{I>b!Hf27#;k@L+ou`|G*ER&Zi0IT>ykwrW3r{G-B$dT)iJZv|iJ
zJ?eKPj(V`u_uHZWGvLd--YMSxIpOQ#5o39~@O9xsy>|>>Cu<-7WAGi8+j4SKK=$!G
zea;H!<d%H7Ex+8!mFLTC`Q^;P-J{<^U-WF>1)Q;m7`JD~PJ-vIJ-nVXdd_m{InVEC
zL<i(N%}-3H-d#kVM7{sOLd8q@hT191=kwkk{*L-!k2}{sM&kqLq`x6Ay8Dy!Kd?W&
zJ^c-S@s9L2>Yb@)_KxJ?;bHx4)1J4dzirxM-j@DG`)^Bs+w^wyH*YWaDtm$Sr*?fO
z&Av8$cba|DxjY^w{b`M!ht0mv>f15<<kvJ@9x(e>@?SVQOo!luWE7VU!3oJKDz{Rj
z&|!XgauhnuFYg?M4)e>Sx$+zzFtY39mxpuZ`TA3Sxsxl;*Prss1G(~i{VA_}G(E?o
zUBSb??5*W*8=nu+z2N1+_q6)6M=wXecxfPKQ?jR8)$Uy*Ckng5;4k`6+Tz|3@$ibU
z<kQ~AE6}4Vt|qTaBcFrho~h&v|F>th?d@N7((F?onxA4{D~K(xQ$O61;`LFR>qG4~
z(SDQK*Jm-G?YTa_duAV+-x>PR*sR{=;msN4&zxx!lU>TixwGj{?>SrfIqEO#N6|Od
zpQ&$nI)-8p-co=0<S6ZZ^33+!y*GM}`bYFk{ll&QiF2&~i8JeKeLj!h$Nz->;<o!I
z=r7rEoxA?xzMp)1{u?>j1%CYJ(_cn|XTF?zh8zgr(mK|H+h;rLIvXslKcc^!4Td9S
zWeeWu=`Z<k%pdm|b>NqI`pc*=d@K3d#a-t9$Ml!c;OX(t{PCRuSLXCi;d(Ce^*O^<
zaAGWyuk&H6IpmLjBz#@?Q17j9^sV4)1<p->dB^Z&UjJW!uL~!}@^<0t!iReA7{18%
zhWh`%(O)(e{LkwzZ_&qSczRCy3-X++zbwqkCz2y1d${fWsr%F0&|k9SfBX7Nw%)nx
zFYf#2qK`zg=TBKUoP$2nnLU4U-_M;V<@2xJk@{3Jd;a9<BU`0kB+Wj>Ie7eA`Uo-m
zTxVeRJ*e-n+4n$xxs%gh0$Ke<^2)Ftl9SV2J%qLO<Vh=;ljHO40r};fx$=B_Kz?~N
zSDtSV$S)7)%JcP*{BkE(p09`Gmj`m?`FcoRxjoj2=gZ@Dk5^TDa=3N-ELRS;oG<oO
zglA#bwqg~@(qo=pVRzCtFsh>s$@6OGATs^(yf$iSL-keHmFH=v!YLkZ!&@7Dt1Xiq
z&q}rDo^3-v*0-ywy*~Ah{pN$TXUB4VX3xM!c~9luIke$?TW8rCLnwESU5N}dnto(Y
z=j@s@5`(S&Y<13AHox<ZGvfUozA`JDKYZsb@;$zT^NJ6R(q>hz%@3X4W<Gqak9?6_
z+~j&)PW^K^!vH=b&oHc8a&0ue^EOVd`;mLjlko-jkrPvQM!R`|N?*OXT7HrP6@KDb
zqkW~sOIt72CwzYuN>|?3wx9fEG5-oX?GM~iT|eC{u<pINdJJ*@ue{rze)Up+`n4<k
z>DL$d)4e5Ten*K}dDkVxc+g%kw7G@5=(lp7SIHe$Tm1N96kD<2i_RM2RBy18p|0T7
z_wTP?5$RdHBG@x|b={l^)<vx^5%>Eq_kV8xs>+V??c+@RJo~)ZM0+AR-6ym@Kh-o2
z)p7sZ)lT9~-$mqMh%P&y&(W*=>0>qi^sW3(*ZI?FUs?AX*ZI@M*z)jGP5d{p%H;D{
z`3K@szWo8Gr+Iw++Dc+@e3rjq5}%;$+goG%hAPcPv2EaM?Pcwc9I!5Ez5K<`?YGaj
zV!iQ)%0Iq1vhX{6GN!P#v)m9nS=c%QAJ>hxNvQ4L)Ap<M<G=eJw|$k(^p)*BdR2Y;
zD<?t^AFHWPKS#d4bRBoeko)S5>*~{ARa_A;`vv(<e85a|y8yU7&-ja(;|G`zd7`TS
z%6U($IS0qcNI3pH3&%yk@q@r|LVewwMYmni^LyU}#xt&J5k9>Kt%8Oc+uy2u2HcNU
zb?4&0T)4}!_8zdTp+#n5Z0lv~A6c}vxo5z49(N~Ndz*;`I6zE#C;7^XnVWohXIf=@
zE&N}VM_4w0&FK#XW}FXv)x0jiXKlh%@@g};4EaIGN!Mtt2&JzuW(|2sw*P`Vy)G#>
z@%Nmp-Cr}wy!6Ej$+yp4d788C;N*V2?mJF|_8%Hs5X+~Zn$^AEeRJB!mVC_Le)Ue1
z%^%X{cV32;8Y8dX|K%CS+V=N@SIs59*y4%3vs>t6Hhsz-JBz!t+K79p!*08$*zB`^
zRiB8gxs$vK<ews!NjG_mgzJ(Wf@V^g^`c_tZmF&%-=KBlB5=Gut+H1yCHDP_dhonH
zZQWRqz;`%%KY0cJSvM~REkZ0P^o3v0Ke_UU>gU&enSGD@(Drg4S+}3Hr|o!!Z4D*K
znRf~6dogeqUO9}H+yHxb0!N#?r}$Sa{crFqIIey6H)(_QS*>x^8p|E?Z+Vu@Jsa&)
zPWzqUd<S@`^-^wk#ip>1<FIW*mnJcpb*i9ki(F^qJnGtYKKaV0IbGrf57U<7iiy{3
zHQYN{$R2taSo*-r-xZIEv6kcZ7$13L?AATRa~=Se!YiH0etgYcJ-V|}`C||JF6ovn
zUE>VVzuxOaepvKk(?a60I4|_I2AF4iZ^i0w(Ptraqj%pR7OTdLX=TrE6wN8;#Zg~T
z)!&Nt?4s5%e&`iG^3OoON6CeLn9mOG%2Ce3{?D79*Zd}tCZ_x2oJoF%&t%#jtsUXC
z`cq#P<ESCm%@Nx6=)9PE9oE#=#qP6DK>MFq=u=y{b`8JDJ(GS_up@t?;4XX@4B3;{
z+(o(8?LDlS@`P)Q!4I1`GiE5ZtGr5lp~aN#6<_!?v?RVDIuc(%&vogj*3Vs{tmBuc
zul%y26`j8>;=hZ7_^*%T!yYdb9~2KXhC9B=L+tT?*|jDF#>e4RRoVD?tLoENk}rZ7
z&?$=PWzE9;-)v86`0SM?F^OkwFPrLTFHV-vC3ko8%TDzmWgYgU)(xyd#3uh?<?ixu
zDR<uzCsmot^ByiemAkPWSSy}>>X)*46byGy^?wkXB6DFM+7u*LVSsV&=C^VXY9H$V
zU^ahUyK-*_isE6)1MtHg_C)fw{G09wTx!hZ(oZu+6X0%DW2%}N=TTxmwZCWY*U8eM
z<c*W-db&PO{g3mJjB<qU?0xb0n<&4K`F#1c#QyCuUnma&uUu|{D%}Bgd{sf$?eqt}
zkZ(=?30Buc#;E)s2)4@xA1>_buQBO2DC_V|Y`qIS?<bG;l`HOD_==l%y|DEd{MfnT
zBWuIpbsKnG2X9>iJS)tFtp@r@El>{kDOL93H49T$Ve`FpO^@zGiIamsWwzr~yU!hR
zB=9`ObL#@LRKG)v0onR%<;06O`7UgY5I?Rw$eOF-yEMkl+*8<LPaaA!wlrn`4i4$r
zQO2d`5oo}Jn{tjEU$uyQiuL$){M_Yb8UuI8tt^Hf?Eja&w~vpqyb}Je`<}@Q1SOF0
z7SNeVP)zEhw!B8g+%pM+#9|4wT5aW?1Qku!7O@KGnmY-Kn!YefrK{a$fVMhm-DNAb
z%(j*Z__O^jzulGCZFjf(JWdi2UAm7ifH*>!-}l@zcQSdy2(;VJr~AizX6Ammu5-?H
zu5-?Hu5+DJm4=1$kkUV~U0XUwr(mh2uayD|`HZDs#Yf-}+REO!z9{|fqSU*@c5Ue_
zOTF90bD!nE<Z*W1-N>~!_{bVQPVG>+?zFd0u0bp6yVOixRNf*mPBO~->5ndIGE(DZ
zoaRdPH=p(!^r`i-m$x(BrqhSCEja-)^^a{Io2l4*v18wUXNdbo-~B^F-OqUc^`Y)(
zy#L!l_Xp*@u;;D94&z+x9O1#^$UYDA_N&arx+emWZKI9yt>AqhbMlUBsLM&s(rww)
zrW~!e1hBu*SBnGKUcpthyY5?6ysMirq=s)9GAgvTsIpXa#zEKQGICyxv(8Iy`KnGn
z$McQoeaz{#MJoC_IsFaz;5hYsgm)$P4*Bd?=aRQU=K0_9j@%O(3on^V7DNFr&s>rf
zb$HCllOfL+^Zb87cWH-QB4yInW1O*;ak%R;f9c9^1R{58qscoqq24SqqN~8OH1w^a
zOUXI*qCTqn5$p)5bDXVZw=C3htLqkdTfF2VBWH5782jlUdeV!2mHBIURT=hf1}&6L
z3kzC23@uFR{Z^>#!+!Q~(V3ye)SS)L#<Z-026usfgEqR}0OzkJlCvDV-y~;*;2|>p
zE8qeT&)#eERzch0G083eLVb?i{FnOh`X=-Qd}hl!>SK#65_uwL>=kE!MefYztmljR
zeDdtLn1k-f-|Oy>$RLq{9?pB2U9&=-2Nh?!`p$dFJiEVWS#)j9f@t067DOAa&5AY@
z6+}NF^8B7<<;E21tuHBQ@!oX%x>;YieccpvIC;0q%+F;-&1)A#SKb~VX9{&-I4>RK
zT?@OvB9D9+)V93{ITK_Iq0idyExv8u%F*tYhkt&36uV;F!#^JrEp)4O@d}yi$mR#9
zk&otr@lEK9Ky~drgL=-&`_OCX?G}CBr=tPsW8QgD6Igv}N_7yPpmqdfRS<1J2XBRz
zweM9$x1RiNjZX{TBevS3KI|%Z?mE7M#h)$5cRM!-Z%Ym(xo>$z4=sq+f`|Oq`7bz!
z$EmpuZF)k+CPrSS+wTe_V(j0m3)C!ib;E1egds&8^x(f&MgMJ;xwZnkViC5u34aN`
zte?rFW0VW*%KU7(`Kbb~{bGE>T^Fx2uPlgqp}D#K;&nEiim~BWQTzOJQ$j0sSBuWQ
zI&{P#=mHJKwXZeTl81R+Txr#fW7Il_PCoL}`KyDH_cd=Tu~a5G)0Fwea{A6|zo~Yu
zwL$GNa>Y(@)r;M&Q@^*u<*Khmr|P#ib=*hIo~!9+C-gc&-WuwFl+A)}jtn!QrAHOk
zUxMBdIy?j&Zi5bzw|?VvW9=`={ThcBwa`FlLB77VV*CAS5_EtDb<n~hS5qzW(<GN)
z9l7HiddT@|4{+6@Q%v$8tevXXZ6t??$c^tvU9B8r^#j;D?t;&+Zzs2F9GMb4pZbdM
zpvgD6cFJ7v;@TQ`@G@V^L2{Ci|IEIo@r-`c#p@(LY}OYpUgu^`W%B8|o4KFCtLxz7
zZuG;wx881#$EyEK<u9pCk0mzgK4Le@ZyP<mW!tVrHXm-=l}k?2Z;sco*WB>%E$KNs
z8yW?nkr!SGQzJzeTLT)+f;J}nSH6~U8KdU<a>xZ?=X5S;dx{(lGVf&mNxoT`<2(4i
znEKciuI%~%@{;^L<FwnFI)c=GDdD&GdT&cRbHFFI1@ZkZc&nZDrZaZ(?PC0~C+#}G
z32fu%a*cIwz*E9!mGlu)xz%GBe}|v6i~9H}$aUeTQSei#rspY_mbYzHaNd7HW1)Y5
zn(29$EMv~()i*JQ`XvR?$<RC(dRuG1w04E2>TSOieD^N6B*kWbmmIM4`Fq9+xT&?0
zn(w*vyQq5AJe7sqrO(myX~Orc$HtW*yB~%B<vr*5Q9OTL^_}y)>E}~0j?Vin{RELk
z<ubRJ&q7b=KTc@tMXuK(o3MQ*#qcK;x{Y-*9<d`ia~!$%kK{NB{{8j#nlAYFW1=#T
zy$YC+GxmHfo>1=SAkj@?<A|-(^S~>%opa}sc`e=W<wc*reci=hynS8mWf!%)3Ed?R
z%(d|90{F5L8g;WKSp=PO;L8obBK#=4HyIj3m({|H7VycwzVN2^ix=B`KJW7v+b}Do
zYE~$9m-pAn<zE4x3V5lpGr64lPGuUn18c`zp?R|le_t-X8y(#+nw)rg*&giVz{^sT
zb`&|r^1xvX`PUV>@;E1p9V%-CebaS`=2G&;<ZgdP^4I&T{84RkK~($7vho`j`N`L$
z=1Lune|<Z-<;4kVR?fnvj#=Fogyz&0hpwa^nYVjZNY<2-|KZV^ICXyJ9&typzuInq
z&%Fy5L^rT5@F1^q(S?%NK&x-&Ke8G=@)(}g2gtp=VY(VeZId=%_neToyEx>UPTnE%
zdcBc@O-n9&Y>qZ^+ecXswYfO|66d;i4R(zUTOntGr?l+=KJhv1)(h%8MTQXTD>V>O
zYlW(WehEB|UTiOcW;Ygxd{<>fvr$Bh!BY9H@H<qv$@?q(&HN9LlOvD5yssCBK2ec+
zwjMh|e#^5B_&YM66@7c8S$q@)z*E>JHIy43QqMQ+X}&u8e<e3vUYX=V{t3SyHk&%K
zZ*1x)mKtq5Uq}5dpDVlN0CbFio5gn%XDLcr3PS;M;CL(Pld<w6SA8ygW8^OM<zHXk
z&e^5ul?$S+O4Y9dZe-KA={y^B@~B=<eh%ytq0f8tt65DQ^8N+D+Em-rK`xQ8Q~6XF
zuU>tzOK&OSIy}{J%FY{d!IGXyvH2&jx`o^!H{1C&dJ1CmTerNlq-Shw{(o@&|8V{P
zkawdeFE;<XTu*NN#gZhsHM+>DQ8!v^c^Mf3eaYKFzP()6RPv^$@;uZV(GqfTlP|Km
zvyMD`)PwK7gIuf3KOguY<Cq)Fk1FxEAdk>-ThnK~y9d-A3c^=C4=f`0;dQL#7Q^S&
z@cH$e-*(yOw;f)6kU0`gpXHX?luB$Q<fiixpRvpX&q2<~V{6I0xQ5?8=0!1c;t0HL
z=Qm<*=w5Hg$K0^}K;&H^56bfu*jN>usjuKneTCPWf9qQH{H<#>KKk>wPPXRjabM`v
z0d>Qzir?gD@ho!p?B@T4Rqmb@ystCg0`T)G#z}aByruT{2L2ym4k+^NI{sd<4;_1O
zGcXHWVh_rke;=7Gu+Pff`HX(FiW=Nm<q77Z<UbZ$%DR@CtnV!=zXO@M3Z0)+?$vi9
z`#Lw0s|-2QiNC9s=a3CG2a~Ne4t>a3QeU;{Vb;&?`noahyt**C>9N~iN7lFMS>^G$
z)D6teDu0DMZ^@I|>hR<K^)lyIy(jV@yX?+>HhoHlirxC#^`2!Lz`=aty2P6^Mwfn{
zG5Wr{%AULL>)(4u=Iy~5DzOWjS?13hw~()tv9qrAN4If}ynJPfd|)x~vKITJvBetw
z6}0`7_1htEZs$2^U!Ffm9@`1<-0oB4jHjO6n==-ddM#u98@CwIH)WlIoELZnR)N`(
z|BlQj-yd_hpzV!na_p9jE`1AF?xCMIs_}i5EG~VWdDw|OdyDp7*<=+pLi^|8JHf3R
z*(CUhOnSqUSDKPX-+QK;wgex^YdWDyi;ArywwSd@iwf+iH4*cKK14T3|CaRWsV)`x
z4>4z6S2^`|-A2aYl}#Iq1P|F`^Yr8IT?2SVv)6|*1~*Z+L)Hx^1qOI$_VS(2g!KjG
zCO-Z(jE~fu>SX;dw(9?-Z;`X#dh)u&S3j3}E`BO!Za8~EdH6~-H}&jf)=tznBqwKh
z^n&tuj+$$oz`jJ^y@@~9I)cs3IwQa{sps{wAkQ{lwE+C4wQb}2W@Mj_-0Qc<^@_gh
z=$a0Z*`Jl`$O?JBiRXR!YUyXVW^s)*-K@sD*36T8wcG>V&~@p1)bXyr1in?s-$vx{
zW^#%?iA)4PTW;4Pi%<Pma*K|h`!+JM37EE^?+!3--8_@Z139hjDfHi0X|oB~`tC_S
z$Z2hx(PMXW?^^VWgQE{PF5#NcQJy)#oRoGg^qsVMbrv!iT{<5bEc01papw3{koSms
zVWCr36(Ns{mOL}_q07EI^P#(cw(w_5ezEWuOCDH%&GX-#*>G9w%!a$=|L%pmmpt@P
z#q%quTkb;#2)qJU1^tLVy@vJ$=P%N(<YNjyn|t|7&*pyl#7y(DlQaMFviMB%?w*-{
zdH3&V|34P~d`WC!c**}>_|lTA)HTmveQ(9{t@xv*-7a7ko}P|w7rmXxN^Wu4v~yv%
zPvqWYXi|{6k3M~u`=TEOXPxJ_3$3}H%B4BEt(E_q@1XW8wu3c#VoQ9ck{b1g!_<JB
zJ5Ftiv)+x*mHjk#=-cQ>S@*`T;(z5up*S|p7Ts9)SJ}q8WU;Y2#yjHcnYifwd9iHw
zxJJhMs`wYnpTYlS<uUFh<3m}%y%s-a(XLNNb7c+8?+09yt8c?!IGKCm)4X{`tmp(j
zIP*QDe7l-l-Qb#BU&%UY6>EmdlD$Q;#v~U~nYzv=`fgm1^}qN*kf-&IPqX_`Y9P=a
zF)C7{byjCx%CEUq^xDdlUvoRZd;OZ|MNO$_qwK$>{hAK%6vIm!&<|HI$AzzS*VJks
zx!Gl2_*Bv8T449#>qKuNOH{e_%|K%6qWk7e1qZ7okPy5DH#gVr1K;DiySfkeiPdX)
ze_|T<<E+nbA-|g7?s828_lfn}S?k{p?%nuv9o%E&NFNUO?}5AEZGOPo%%<<)KBkgm
zP1eANSm$)&t2@Mc;Sl}-?~Gp-c^8@UCcAU;tjc*UQ_b4)6Xe^os^{6`CvdK(%}MiW
zGRCi{`aW<d8UlyCdJ#Aj)mM_M^yA>LCXIvfo`b{SJ_Lt2_Q}*mYv(;9w1z*GH7O+Y
z78un{Yj+9V%gHI;NADt=-VUtg@Y>JP^wwP|SnI}64+eS{m+VQ?TQ3WrhTe<Pu*QGi
z2dj)}W*-7;rhJilrklsJ7FUIbJIQk?>m6IRb_dHFf3`H5NF=vxMITu=EP&UwYU_qR
zAD!r%)Y>TJ1GXy5Tc$G49>9P9balBsPO@k4xu1PHDs;%iUG@$fxMc6(cPEmwg78|G
zGfw366WsR{@3Hp|um{Vwo@Vc0R2p~LJD8E4AAx@JW744cA$wUekM`)9^JwsMl8;lK
zySZO`Q$`Ej)`N$S9P!Sa6M70Q8-JHvE;fKS{hnf;vVO4lB%JpY@A=r5kavR2S9!1f
z-^jtodm`V2e~x2|?S%eMLH|~2MSe&=;b)%MLY+4B4Ss5o3GTd9-J5SPR&rf*kH+V5
z{>!|ReD{m6$%4?+L}tkz%~1O=thJXb#>)gJk$;`8skYA2(T(@hR;TMK`@ipMHD0dW
z!?hxKwwe7csjs!pn6ppzEpNuRBXg}3+sdR*krl=D>*wi1@a|T7ol?;DR~yrNKfg`R
zcHXCs@ABU;Hp`J8!k4!~7ttx-NIx6?Fgfc-tmn1Kw2zGuW-TPO0^-=iwUeEApkG9^
z=~jo>&0QX9C?RVDS1+{Bg?4%59K)XH<oTFu#c#A+<|?r}(v~IbLE3Qc$vR=A?PSg`
zjr~zYywBOTDeVlxF+T&xl8=F7COov!562O<<KWoyz)QXMWucdSL2UCvuZkWe|JPR0
zan!LByG9Y~(@7q9FE%fJaek-H2s`5;<ElMpbr{@ta%T5Du-Epv=!{E%xx+qXw3fAR
zAG|L`TxKc;RmN9hgSuv@==bP%gVfK<(IVaSX^EYk<BxbbD<!|BzOnR0->>%a!VKYs
zy}i8P;72T0s&D8tsBd^hVo&Y9$=8wY`_&=)CI{Ka?OR~b;cXjtcyUnwjAL*AoR2td
z|M_Rue`a3wLe}&4_;My@r#%j-+~&?+jf}HT_G7~rguLuo5!VwkssHJX>!ISXi{Dzr
zYq~?lMi#&Ih}WAP^2M`5X0|Kh#oocs9}04gJWj3E|L5eXEe)I>k5g+TxWq`b%l{?p
zGjT2)zIs*o$}7CoBzX1D-R_L5%~QUCJoU28Q_lGI!!NG(KN+xNSe8B+P|+7`91HCA
zpo3#q29C$bpD%cpfS+Ma`@jpn);GWxTuZ>y`i2%M0Y@+R3ZB+C?6rDZ<AuDJ#@Bxd
z_~yAHkAdHA;>F_ZPj3ashvomLR4=X;*92c=R>D|$I-CpJv^37gs5u4=`oZ51-`H8;
zt1dV*d@oJm`)R@NvNXPPjKp>Ff6g%Yt~y8fhR*_D>kRQlCdv4YOOK~LzE>KF^W;A<
zhYm0I8{aRTBYds1z*k*(X5)(-6ny{XL~1;3e6KMQ`{n;N!{GasbA+#X7Wi6ch%a(i
z@ck>nkMXqe4H$`U$^XDG_}+Vt@HNf?U*$Qo@kNgdzF$m_r;RT%`}6W2c|9aQuRTZj
zdd~u1>kRQVQuzAP<7wkdt(6Pp|KefreefLNJ1?zo=MArK(Ic-a^sVS3Eu0h5jZq=|
z5D`s{4(YMc{MI76IVPl8d7M=_kN<ka86)B!5@xZHkoqj5TY|S!L#9{{Il2jZInn*$
zsV$;&Ok$>2%;MaqR}Ip)Cb}uCSNx`*-o5!T+m=h|p#FA(qkHAs(MRIPo)A;}CD!4E
zD^oi71=b<2W$55k%vMT&%h^i@cZp52aR=u{{ellPXt4EhXaN2?cyE1Ni)he5@ZZ{`
zN5bIj(16$&8}~+R3<vKYfOG3N@Y5{0Ezye2G0?uSir|TU_)cik()dbznWJ+v;q8ZK
z_#EKbbcT4=^x^p>!SgBbtO3uOA@IELEb+9?0iODWXEvUn>%;R?g6DU^lNkNh&kcbm
z{P1zd)8XNM<7%D*e4EY?-<$jJeLn%dKLFpG!T07N@V)rs<J%8U;~e0rd(LcJZ|%eL
z=Yr?ofak5?dFv2(mYpS@-gAIw(;4Df+lOb9;Q15qtOd{7A@IEH<KyY@uPp~(y*6RT
zF-~o={Uo9b<m`X3ig(EVb_qJB&X^L?m**ym`5iDPh4e8hBERKcKoy1RVntlj`mR}1
zLv`jfuIcu*fcJusXF9n8ZsPNW+=QLOfSdx7hg{+&@wFs8mr&!y<ld^>M9h`Sksy8-
zg-@avPS*LdCo3?@dK2IIt98W5={zGoFO%!)Jl2O?mvyM;)v6wE{5;lQ=d;eFJ`8?_
zhS91=_E!7$Rp|pC5q<3N2`vWqvBU0zXEOTOK_5GuK8j=cA#ZrBz25an-DUbg4<{PV
z@84H%A9Aj0V#;TeqIZ_iX-7a{zE+K`G{%Rj%)*c>UqvdZZBrGWz;7*58J-xb!nf?o
z*CUnY<WQA&3cp>E%J`H}AY4QozB{5*bJ3-Cbm(ENob~FD^{?d+zd~M!&#0(}+;yIL
zs>f56I%m}n9@dS5`yhB8RqHBQ=T>?36g+V~RK*(ChKF@-73*6Y9@e@6*14`+S42Ng
z?O5@(_W2(2NZ5VjGw@g&uBPvV^zFHxkClQ!Y7T{EJxt6>Z_S})E^HY5L>V=Q99RWD
zje0{Kd@{lVp3mqB&vWjm=L>wV<ntAseWJ;s3hE7Mz)|t*svi6#)Fvue>-kQ0!b80w
zeDs^(?Jq0NF`7^53Hh%Kem|`z%vu%7tn;(w0De@iov#spB5->1B>&G2pBiKHlmmMg
zu_u}5J=*ah_SPI)RvB?>4%yF7uL8yj;?92&kveCb`$*LQn1;X5O7Zv+sc(7e6h2+n
z@EQE-%w74GcbnPwly;;IWu{_{wb+VX-S|8A^ZtQeKd0OFb5b+b{+9PM{dbbvFBMOq
z+K7Setr<Pbt3ngmtINl?s}a}1nFGPIJf`c_b@)pHUbWOqjqo~r*=9CpZK-cvhyO&G
zjRm#oI^l2O3$`+9rCQVpXP<el><Pxcs5ZwrYh&rypE~<r8GRhW=PTE&Im7{Zh#_U4
z&6-0^Uh%DS{-Fe)l!nim{ekN5(YMqHS6^84numA=o%092)V^`(d+USLho+7+d%#)v
zuI1dw_u0?bO1uhtiq&>aXlg$z>LUAyTbJ0A7m4c(7YEA0Au9Ov#Ra7Nl2U8+Vq}i=
z!Tvb)F|&!qnh@!!%pzuYq8+n)?3PJ(e8%y*$&s~9S}0LJCF1Z)ZLJYK@tR7UfbP&U
z(fO><m3k=_H5Bsk#aG(29amecqS}MG%M|<dlfYlARMDTnf4})gRbtIHEp)U*3*mpS
zDU|U^zXR^k;%QZ{d3g{2;W*zIHD2-F=UqDSh7;<gu4N$Kc)}<23|vWF`ikF3Ot#4$
zfbKG)9};IKaL7I;V`|qW-^M!{V-rk|fANFvWzw#+@3ea-&u8+d0xo;rGPk>*?O$_&
zxw-trYa)j~OB~PVh~v4DIG&q`<N169TH0|uCVUbmjzHw;9Qee@QFBcAM9%sP9-8!r
zj@qqjtEcB$9bT_pFF3S8Sx@_*WfGi|4eI%1gZ8{dTqXF16laXo(T85EU1jbP*lSmL
z;SFj8!5gazROk-q3EUk%6|Q-MF<zOgTJ|Va{V@EtjXfKQAznl+Lg6`Wop;yqwS4rf
zJa{v-#f_XZQt?+l_ATJ)a(H`|n%3LjQt7X@vbe?X)g|V9oSd@&{(9L9@j@>-cVG&?
z)3@xi(C#=Bp69HGTu<D~m^Wq{>@#VHfh#p8_|8b)RL&TVlYCB@^XttosLjG_z%fVO
z*JKPcp8pGZp8h6z`{oyCHY9FpM{f;`N{KT>kL=ZmJ0BhS0J$qQUL9UOvMe`JxLpe&
zbMW`Okt3tvd#x=|pT{2I7-CGaQasKcz6Ncr(T2UQYMf{!DwO}-IQvsJpQQb|==B|S
z(-$V1RJfyQqDsW;w2+pcisfU!e|G$G-bcTNE7VSfKY!wOsqdk7wohdLJ>OWZkT*lM
zr^xReo2a6?dbA_n+}EbMhBn!UQ|uS0`D*8DRcdF9wqDn@(%+uaA_DL0<2l=~N0onz
z{|Y=fUy;Dp*wM;0&#$U_)RRWJXYZ&FJTp~~=Jvnlo2<rlQcq1&7mn|w&RTd>{#=9c
zjh7%B_vVIlYFvu{Uh1kw!MFUERS9CC+x{;xA|~f$RrmRQ&j6R)JH$N=InX&%MU7lF
zXFYQvNu1QbU!!(*RvP84F7<Aln9>4p<NR4v_(^%&i#P+*0Us@ub7+&0<(#yS#^)kO
znd@PF>ONu?R(CEmeysBSA3nz(xrxk`eZxzj<NOS{uft=+IFzmoz@NI}td&~or+puF
zuL8*ZAab(SY%0L-Z`a5k#XhbzK<-;^HMbAn!Zri`1Xf%A3vV_eU!<Qm;6dj(ZMzOW
zliPH7^as!&2wt7gF?KAcw=Kc7lemv!_9K~_hp~e?d~-zyFGRj9LcUywd|8ZqsfH(s
z6|79f3JULcW$2b)(Qgp^M2_jqz1hT>i4OQGxNRM;=5*$u<3_1j5=Wze>vG`X99Y>N
z#-g3QPA~6#mc7mx@gVKQgGk(~mouElh(nVzG{+dP6|M<~FX8N_#J1gRsm%_a>cix0
zZHt`GQFCPP!?;52Y=rj|c<FVvUh1vy+cdtfzHcKqfHS&`m?qxyp-)6U#3%6%b*Y6X
zI_bYc6&;o{{IXx|^!b9!e_)q>q)qPa3o`zlx>oJf4|dw`DiPU8?ch(q|IoR!QcKqY
zp4Mh!&zQs)oZ!5W#4O`0TJ42@rf2YvCj2wnD6NCO$KapY-hU~2Q72X$-Vyrxu^DuD
zs+Jn-E8xFT=$wK4BX)xWyVwsqZc&?KY5T$9AL&Q<N5*!b-JqtcagL6XG2^^KRK_j*
zQ0_7l7={`@A9Yz}tln-=n`NxS?<Qy2@`V^43qEt;5!-ZvVqOj4!_H#0+?HvaUktK8
zY4fHxb#8GeIw|0<r51gPPI|T2SQFB;QfXRwO{>?w!s!1<I^8}5ounU!P71yi+e*$b
zihUI?fOhb>PAsnQf0#H8p$|NjxJTktIn$Afw=QVAoBy7Z?3)*=<z2|3&OB^0bR~3v
zFDHx^-Y-_JJlUg^INz=kBU<H}ux|=&%Q+Ejv%_684QV@CUb3M`d7Fyj$f#_1N8T+b
z{@s~7Uh1~S7_SO7;joK%td|)>zQ?r^AF`J@7h}#fVC(tq*aBkFa#W%*J#Nh1ghh<V
z#~C|q!ti6)#lA5-NBosuy@Eb<&U@@dZ@df)8<eW9aJlP=0bPC!dulAW2&~=Mo<87x
znDaaW_rn9=_A-{>y4p)UTftM>t5DQZ1|J(&k!#4h;og_$gjYKmpGxrVf?s7kn4A6Z
z=6W=fZ@bV1`VhP;cG_^fyHaU3j#Oy1VJpc|OY4x~4;!4ZbE&)yob?ttsDQbVIQFeh
zjJhHZD)yEw69eTfA`^c`EXQ8#z2;=j9Kl&=y8^s*o)ez=Aw1cN&W~XiIdDs@(`Me2
zYaVoD=JmhidL44CLE>Ma=|uzNP#tnep$kQq5yw|8YZ%r7wk#4p7g<!BA&WBCFnh5(
z9UF^2H>GrUVcXYl9$FS196}bwxn|OLofn%vZQrYtoMmCIi5|U-`=Y1s2M?JSo8+7N
zuD$(%dllEP!8SQ|T7_G^3vX}oy|W;}IXLV|{2_{Y#aP?VrE9Fm8SB}+EB7<6d*Lhe
zS#J!n<M*@Ae}9IULE<|m;YawX?U$caCjM?`Z`@fsdIcW*7~;#<@MGxsF}BK{1b&R2
z_^Nb#8LYb^8omr2U&dDUBs6>(I=+mpqgnUk%TV|-w(9OkVYb?7bp^^}Icj#}=kVKO
z<B6`)-RMSOxBa<y`J>|J^m4XLKfIyCb@=g)Cpq`_6zA;RjQJWpJJi4#W=mqAnr@i~
z-^~i@%Ri7c1v1udr$I0LprL8%Jm=YV=8)>%(4lopTZ*={mLUBO?4Pq95$7FQKUn9Z
z6VXWyeBo=6H-qC7Hc8xxoQ>A-0SO*)SBjQ>Ys}O>N0Zpe#n?o5r}4d8C3>&jm%i4e
zm$%+Wti15po~+P@naM4!cWKd=`0tFLy}#ns_Wz{D&iSzPCpD}g?J=B4Ja_>AP^v$P
z3qOucI&ci_abx^Co2GuC$#}~C3gf6VhW7pn<ES%+TOVgE8Ash2!^d5b@Wm=|Z+aYM
zj6P}{tpVfs?SA7p`D2XZWV^0u<~V+vaddRQe4l<yC);bnfnypk9_g4)v|}$MPBN3m
zz2i56F?}&Treo7%`uF_LgumbTs&g>D`n3NU-;4kF<GbZksX2Sv@r|o<Fn|ANeB)(*
z{PFdSWPD@iV0>l&`_ElIV`Gd==bk(H{Ol)3Fn`16V0>lY|IdAVi8uLUkMHFp8DHxh
zjIYEy{JD=WKI%XA`2O^Y5zJrn9E`8Tcl^1J@0EZ2@vRui_!=W0Uxg1ZbB)`(K9abW
zKlkw^-gn^qZGv8d*SzOW|Nipw5zJrjIT&Aw=lOFV-@qS#d~X<bd|&F#2mN-Q>KQxF
z=<!^^zTBn6Pi3i{3#yF7O2v5~eC<_*qasydfBA|qeo;dYQO6|F8dj@UvB&WC_q~@d
z_>vKITUz-6>R}Y)2h$DmWNvDo@Ahu%a9>K^lv%{ARH?++F~lhm%Mx^{owCoOZ(xs)
z>#`4>WwHM|o%_qJ`3E@j99C-f+j&NhbC!v{f*R+)f0-&oj=U=8Ub=Gh$a%z<bmash
z27MVHCSMevruaACku^VkyvetUsr`~W%<%yvE3?>_9m~F~3x8X_9dkhL#x_gj6MOE*
zZW$LLHv~Bf3)zp&YCAxzY<G!DJcy0V9!a9}{?vYK17}VCqeSgA$KO!ea3wTUYIWT<
zfBA;VoGrXU{D_<>gbupe))Bv)bI#CILDTr}#zdIw@2FT-D1IaH#PVCY+0SMlaxQz8
z+qKX!&S_7`|JKvV2RIjYi%KMa#-4l~-@oH~4KY%T!LL5ap5xs{^!*Z7DEX}S^5$l(
zy!&z^+FYrk&Fld;x40vXm#ai4`)yBcB%dOF$8T}&yLBO-vDSR<F&0)$<3{#gxF_S%
z$UUo>Jqp@sZ5S14U1pEbYKy(N<8|XB-!5U#xI0iDz8s&_jcMN=ds>d~t`&T&dVh5D
z-mFk7aJRm|e)Ipb&!2_9?V1v?*q5+=#xs?~r#zrVV?9aE{Z0uzb>rm7cZlnVSHg#<
zk~@?t4#k1R{%uVR#jCm3liZ|YSB2s?$i8l2+hq9rsXRY>1FDQY=-JIz1@QZ;+15Y%
zqs_1Rqvk|4%kg7<i}UPOUVt;9D)AIK46Lz*rCS}}WCr}Z@lC#n?{hc4Pw`DkKQI3;
za_`mEMA*NJ%30B?;L)dUkUa@i#(wrJ&t!6BT%wkDK7h{{y1~<{8PnzX@5yDRqW8fk
zjRk6U=g-I+DBr)6y$PO~yl8!FJm)Vt_b1~RCMGFf0)6m(;(ul@a^hjBEhO>tv9v!l
zUMKsJ>agrh))718@NC!pDc*GQ=4#}O?s?z_V)tD5(>{YQZ7KV=%h|up3Vo$U6$&0n
z@W}-i!9(zgC6cpcjLBgXl0EN4eL+O_!2inS3R%_cna@;-E7>RQbZL>!H5z%%;Vt&e
zJBeRtWV}0PFkU?0;8KST@?|PDb>B99YKw10Wu%$+s$8y?i&W9R-RxsDZzK<^)%dg<
z8qHFZ_Emy=^Oi-CI+eArRd*fU3;i0Kjp$M0xrA1o_%kIZ`@wG-5#f<Id3y5o6zo>c
zb&(G$IsZkQJ~g?ekuff&zlF3LCy$f`?>vm(wsE1*R6Bf-{43pK)NJL-X~S>2Grl4<
zX82i`TlDFnzxbrqqTS?pX=Fc1a#*(NIft*~w^d;z;^Z7}qEGTHB}&x9eG8O(A8@xF
zxY77=gK{5!3)o$ZpNWrJ=xR)bC!wFjEJ(ZrITKohMjE+*<DX!U2|vBH9o}I)Omd^i
zGeS2RAEDt6WS8)t$P?kQdXZ@&1H%`F{xNxKi+Pz!NIsI-?~*UJBmX*)e-2-C!xuWR
z)TQ_K{p2G^@r5>sFJi70znM!P)>TGgIpgGG&r)(t<?;T(vF=jxCA63t`v>Hh@YPpF
z4vwuVjk8B2IIeJ!a~b*w|Ca!Rz?-OF77=)5KEw|tmtPIsvd<nz29z+TBoC~S1O36*
zNG5j*udNYW;aSORDs7syfB(_sEPK9<CEkRw626c&6*9@@4STG#yZrq3j8Ur%asYI*
zHz0jGa1_yA1$-)Ju8*@1{d@j@t9fxG4o_Qi!4tS-%sSa$kZ~i%#6Dx*_^c9sc-M<e
zmpN_A%k3)K#d8Ahb+qH)EbV9ZDKL8D$>pcm8<J;b{yf6-w_yv2{PwaB8&qn%Nvwpr
zRPr}@J|(*1jT?*~``B0W5^v>U+|;I~rz=#|ySg6k@Ohh_79Q5UjZYJQ*An>Am!2>T
zf5@L7u;UoQxv{4`#`MD*yjD>wd~6jWKhQlvU}#0oKgM@6V=TJsU4Dn@Pvc{#*n7ki
zyjQGZ9d84p@S0UG`GE@CrZHBskJdyyrNomoemT8|@@4i_oNMrz?8&rtv#)}FT*vbc
z?PIjn{4D$8j7I}7)#Y17KjD5mbJAkYBJXB3HZPKzXNUd73^?yO@BA>MEotLf{@eUb
zJgCSkkyDDkMGl+fOO^LUraAog49|Pmw{SkmW*z<S<_tFRK4XbfO6&b2%d(J@*~Gi#
zNd8y!|EN?vE#s;&ewD~z;E%?^`6Mx<6TxdLHj@bsVQ?@vE&>j1AMr$o1IRxUxhXk~
z>wah?Bo_}dl^j0k`#SVKvhzar+1Nwf7eAsSb0@W#HyVjIo>ZZO<W4$3Y?e!r7iKT{
zk<m}vv2&6q0)O$BGsq`4_4Os4uG_yW?Y^|}<dPDeBi~I+yM0Y1{&I#je>49r@&zY7
zzc@e6brZYpJ1%YCaju(xYb3BWRx4Hcp$5H7^h<+lLd2ALz+S)1gCMZTJdn7JI@f0-
zzkw&Zz}tU?*a-zKe(c50vHXW7v!F>MH1tWlBJ-#?L*BH*<2?^l5lgfH+FlE77ovx*
zBj=bN`lrvR!XR^5WEW$<`hDcP#MQ9xp77F-q8~5)NW6qWKM*TA0i2xik~u5(n4|N8
z>{Uu%3OWzfU(B_FJ;Moho@R%C67{($-pSw(6;IW5ba~llCQiZSC6<-(bz*>t0cf*h
z?1gXGvz7R7&72x?Tho|_?C}{F5btwgh+Og!qcEkrIa42%oPm!KTP!ip-Rw<sCcjO~
zwmO`3o;)LSNbaR_ETm$N<t)F;RQm(KQVT4#HY~awk1TL#Li;ov(``67mkBJ>fy3OS
zB0gX-fg?DEH~{F_ML*rZayzhe14|eE$u;n6b6^p;1QxlMneRd7kk0vjmvLHn>~jP{
z7aJZqH#q`$0z<=N=NlLf9y#mJ_?(V5{b7+ajU#}?a|W>V$rrU>cqEPtVP3o{^P=Yg
zjTmPY3NQ{O@N75p-z74|eN$=GQDT<g36%SC$>T@NhHs2~>v`y)a_!{q@vTa$e+)gS
zo!ULVkr->=rDMidD0jWjyP;?sZFCl>T|67Ac}Q(``s-#MXU@Z|_T2C@@2DTnJlI2w
zEOU2!CA!B)K2dmUoa8~0z7}Ek{wMR0Ir6F#BjMmC--@ySCHIqirEX3NF9lvl3M7uT
z4`=DW3p{mT+~*?p$wPh=4>=C_FL4AHpAKGh?U4eBlK|$uDVQ_i>DTv|)A#+OA^Ofa
ztG>1UyRiwHp-&xSOYXc-&jZ<!9&F)5`42xWv{(u52QF6$?As1x$E$VToKW{hSEP~O
zKGuDm%)g-gX5Dw7TZOWDPWXXwOmx<v1E5<L|C7YRc0pI6q1c1TsjLC3`6iaIb3FNF
zs?n>gA3Cuk8ROZV#GfGtXZP~K<^B19XOWTDLQ^et_YJDhrm4tnp3{NZu@kpKe|Zib
zE|X`4XENz8XCPb>Z_GMe=6P?vZKa25&{dv7d<4YBBXf56s1qr9(`Mad?%HX~F6V4(
z>P&#x8s<ceT+petPw?^UN>{*#G2%&VJks&a<g$nciNz3@z;#w9c8z`iUl*qGT42+3
zVt>YwaY3HNc1h=PNcAH&&#$pfk76GWytk7W=R&Uk8+@&hClb$^nI|^R*g3T7g8tpm
zUvkAt{#YkptmMiReI#`YGVKM?Q^sU}d3>CjW6WY5#TgSnXTpy#c49A(XYcTx<FK81
zuJZ-fQ<K00noot6>MPhN@R5CwvA6Mclk*XtNZz2Lqb{i~jo*-3vv{?|>s6lAA}DCP
zQ5#hq|L01(rouGgody+A=+wzZY0GHrj&5}9>-ZZ=T&{iV)P$DlQ;iSt{VbpCDrz~d
z7wuc4Pi#4U6}HNa0m39F?89C-4DXV|ZbF-^4I6;*;5P%23YUHu{GvYBgcjc>>*=^_
zYFpK&)*^B<w$16`9L`j9=OpA^9<>};SKLQiD_nPcSMuGRa>eGqe&OUL-OO{52SIev
zcU%)&Uf-BpvRN-`AqKKV&J>yGA=bcAliWq}j@TG`$eY?;F?mVDwAg&}CL@~Mcxs8n
zM0S1Ih}K%8OS?XSO*74!-vloh#BxFBJZy-l-HuDm-mFh+yBA+noG~D-68lW678;|o
zTZoZnYzEWTe=NEDD9^}Tv6_rTE9<VNCB!l^=F^cujW+)RE93H5S#_z@U=iMy|Gm6Z
z(cfnABiCj8hRVx&V$G+K*Qt1G;T7SV`)Sjk?=L@sU4|@;;un#;n*C(8*e^@DHk|#^
zL)|LTPYU@ZbGO$gAG<K*j(bAOkY9eWW5V8$GJUokGm}^(GmsVPUWh!Jp%QC?#M|?~
zRlbYIh5nlFpdLsRA`>iqN~riSxo31e5xluFv9h=*B-ajLM^EEAXR8wOztIZ~3ps<4
zaV^L`R;yPf#&d0Dt<n2l<Go)<oF{G0Q3>b$;1Zs_cUofQ9?fn$E8UL7-%9(^w&GeB
z>&@<k$OW;ta%_9cwkf)=O50mk8TL6PvG1HZL#Ma7ekL|opIrgnME<RTZf?nm0S%`^
zJ0G+Y`%CODhkjkquN(T6r0I7<ntq=iK);Uv9GZUrAJ-lH9s2z;<C;UiJzN_|zn7%V
z)6nn5bUT^!+rhPN=+_1Px}aCuMoigc(9*UMd+De5(eJc2;%Vq7w&Dor_nMjFzodM_
ze?5F>@?VqSIt2ecn8q=a|L)JY=FsmRt_`H$Ur3v$q2F!kb~5Q_a_x-hcUrslH1reu
zb_DcmPSfvi)AW0O0R28CxDG+TOVc=J(r-q_HHUu1TpLKg3#84{&~HMzolN@WbL~v%
zm#oxn8_luHj^Q&Df76j=Igy<ckw0SFV)w{ew;TN`wwH-LCjR->zbPuW^}YNTA3e63
zeGgkr*6(~m==YieY`u6l{_wk8iFh5~HMEnqiNtRrHk@O>b+NV@XurMhmHdFJEX;m~
z;4JTawm5YSzhELvt`X5s25VmaN0oeI-^H-+9QZ{SW!h~)^oe7)9a*+8atyyHv<Mx!
zUKQH5L)z98+uX7B+R^LsoV+LR$nyj3Jx|8^Sk4|x4rT|2o(Ej)rHH=*T4EOnEm!2L
z)o<YsY@!aPm-7-vnA(@QYN?#Z^n9RJKSzB3Mft|Au<|bTZ1#Tg5;^mPebVgJLYCNX
zUh$Dvtqy~a4L3GmcY%h_QO;*o{KmGuIqMd0CjU5oF)e-0t-HX_GtekStAwV9YfMW;
zOk{A7wX>yj=F62;W_j7mDobur)bbO5K`(8vRWfPgv+3D)4q4G&!$}ospgoiJGWVOj
z*pLbvQtIwV%(?7C4YiIE`|@vjM)a`gUx_oG2%Q`oI`-qmcI}@SX9&cfiBA}xmR*ym
zjm0Ci81=Gv7QUT>>hhyvH(_@Kv$G-%*Qf+@w!GmH_TbJRd(t8fT5J=c7w6LM@#EkA
zHs^i61-^1m_(tTnjLBs0<g#yPtEilz@Ui~$<fu=^7!y-xuZP^$32Y>j_hLUD9W@_G
z*_%{aEQ<ZjXnd@d@J;{vU}E>kv$1V=m7C<7Fv*cK9eN8N#oF#Fm$Mx)Ia^5{iXb@}
z#10l4^Tj8ur;q8_efosM;*URyUu-S!N=&*nQO(<}7aq3QdlWz9*h{Go0(>5PN9J?J
zdIj9IwAH9j+Q<62C0Kh=qVmI>xiS5NIrw5f8O9eS{VVFYt|2}>&e}xq^89O6Ps5(k
zCj}3Idmt|N(&kp$6k7PG?I`V9$7%Nm;06wYkK%llyf5vkA=(f;J@{=qS<{&BV~d<f
z&OQnc$Zw0^@}7~VnY=G;i62(_^d8NbD>OR5e}Uf(uVkCIB{uwManuc;JLl2g_@)-&
z{7>R8$$9=we}p+&b`XAUW<G^^Ua9PA;El#zZuE3&O(gf!fO|6cMSeQ-`p7bOdXH3-
zIdA72ICcxZQtYYYb=jP2b+w&9zMf#ORQOHSFS7m#7PCJ%TJ22K=S0?zH$ttfneV+4
znTDUw_+hF(uf_A`trsO^Oiac^zv;1#`#Fcu0F9^6hScdTR$=_61#PpyiyTH}(yp8X
zkg*P^Df<f7tIdi%l%3gXw(&x0?u1#({EmGZleksMyDf7>cq~Yq1>Y@k)=#DjSdkwt
zY<F3=n9PNkn>K!USNS^Hw$l7bJ-NfB@Z9phT^yCZH<Nc)`j<8Nv2|**@L!^SVPvyz
z6*=_5Z)VRu$2ZvyJSQrppF(Ia^QDTl;{w)>ti{vv*5gv|8qeNUE@urZ*n8TF?2&d4
zGw$*&xXXSvvd=!}D>?_-*s|{cx<=qXfZxXpPl#_eSgaDhqsbSYHLt8~g&sl+X)lu=
z8nh7pJWAjH%ySLAE44Lke5P0Nd`_>Q)E!g%EqL%@;Tw1`jy@6|gs<#;3<tKPa)|zl
zGoJV|69=~VBf@8mJnvIk)j@dB;lJ$zt_$zk{MRh}mxa$vLoQ~g`OlTXe>v>Y>x=>8
zi#;u4VZL7#oz2|ws0sCr=rr@gD)w$B)E@(<hHogDt2@5>UO~C&_^-ZSfR5KA@$D*P
za@NAUJ&;IZ-zJf-<}~<*It1(~@BHfdYL<CVAYl{<ACHQdP0P!@W7V8>#pD^T%Z-@D
zMo7)O1-~uNU6VRHY&I2^OW&H+T$5y6zPkIbYd*m5;JrfSnR*uUub?gOol{%pB+2cG
zf3?D;m2TyJ#Sw)ZN!8Wx0*k;<f&ZssuPQIPA}b_yw^nd2e+B3AS2XB+TzuSoviM~4
z$$4JtWcXd~a&6YA(28m;s&<SDRZvHx;vMU1sc+UmU4+jr)S^D<)Ii-Hfu$B$=N!V0
z=G<IxyuCMFFW2RnF80=bF86>%+Z2e#;V*msfY-0lr9Rf~#d)0H#V+v~#VtO=yKjY3
z^|jDnaPzVM>ScY<RmnP&T;A$I*E0Kk`~jBE{3~(hU!gt!!lTseOgN-=S)BLdoNqDj
zLsqgsimtZnEQ?*3sjGw3ialPpi2b1JIGeM8Id&~`411<o552Hh6`J=267hGFFWT?p
zGg3|DK48w6_vs0fePDZh@6r<+WuDwe4QFptjroWw&*E&B2`$W98IwI)xu!O8eR=u!
z@qN`%<BK_X&&tsY;5FktFS2R_=i;Cp`KAlnj=g<qi&uE)+CV~h#)9A3SG8>$m9lMi
zIC)u}c`Y`E7k|9iHDcd5wv7c1u>TU~wR!?N?6mn0SRI^)r3>dP2hv04ST7x}_hX|$
zhbKlQtT+2&Xk?F6#tz#dl?xjjyo`16k-l8m-aHlcVQ(Qj;2HM(h0oz#;pI4c^zVE{
zZFb=MSK4!MZ0c$45cyTBhu?GX3nP1FugAPcPlOL7UzB_m4vg`Nhkk6sc)OnPb|+u_
zE%zFrgN*gB`7M3@3w?=S1l^kAk@PuZd9MJOGaP;JB`&w&;+(Ocy%dopP91>;VEH-i
zOFweXL})I2;>bls+o^msS-p8=_9OS4JV_OtEwuX`c(xGVjopTGwh$lM5!x46Gp~o!
zHl>V(CvAfd?C-@tP=866<gZBiwNI=eCq>HUxAi~!MG1-fkoA=0+&OkjZbbGs6ZNAb
z>uyZxKK!%jK;$xhzqsfpVn*->Cd_WWng6w}>QZdJ)rP`$WA8p#zc^CIdS|*FCo;v3
z6RDf(FYk*JDcV<pEm}9%NZf`W&50F3w=7>-;4k;{p2Umb2ds{x6U>>!EfkPnqeKho
z$R^XJhsJ$?{{$X6i0m+LVeb*YhEiF14>pf34Z0RaYJvSu`dldS4=SrAj{FL`av~Ax
zf(GeVbYvxV@d4yi7Pd_*XRIyudJnorm9>s#PnCP|NwOz7Wnb_HBk|T2SLuNn%n>!E
z<v;INn}c^Oj=Z&{l55BS;u|dH4EFWx+j7<1Cyyt0cD5K1p_k}p$roUXj6?^fY?K09
zMjG#@`Fn`9oF7=6b=<LAL>4Y)zqOh?N-000*i;QSszf*ZR7JlJV<WN8P$PK6pyOMt
zjqLx#yF5y5uz%#ai?~0E&p+@xi47;eH%#@fKZtG!e?W~}t~W5&LFnB*sWMWFKQoM8
zcH4GUR+|M+%RaJ<x5!qZ)lbuHIqhigC+)ufj_Y39cN2@mK6<^y+^o>l>J3vX*HaT?
zd602#El9=Zpj%jPNu5^Xz3{}=qMz}u+?PFG?Rd_dAmiBne$Jd)#w`fHtYGZI*{wy=
zhckbV*Ny76Yn=H-{iim?TGU|AycK+3zf{>aYmB^Hub<40n9#`rzt}95*idZMy!;<3
z`f{PaT;P6vIr&bmRtdfnubX@hsOWU^QplV=0B=$&$+nTYv6bIoJv#%N79N}Z2J2So
zs~z92)VBlHyTpcZ<Vehgyp}%a$vS<{a}_ET118s<wWj<Q93(HDtSiYKx7w05&rN*8
zXXG(kZNML%ReZCy@|Y>!^%$v~CG1PCGgxcdaVzMIhU>{?1V8)OfA)CQYV_FhH@WU%
zZ%5{9gg6^J_KkI_e~e-tQ3slwX#$6rwmi#upZ>ja?%1mmAJ}8db=qnN9v|0vj`ya1
z$`jV?yceEFHDbN&cT(41)m8`PzwCkkN-bsGz4}df!Z#+h-$iWaQn6F~maA0GhSOK-
zy{~Djw?aSry;pgUSR6Tv?$D|qoZ#ta?I_P0vsCn-95@Aj)@wHW(^W$DglxQczMZq|
z_Vd$KbPv}B9v^u;1fCVZBIk%3c;BK=p`)KT3;TIDXNc4Hwlcr$wx_9t@T6x}YP{Z*
zvATpct$bghRtK?x{Dms|9M8z}#OZX19D0uY0i6w!f2Q$igLcE*$Ky1+!Xh@5xgz{1
zd2CdE>&<fi+uZk)6aOjs&R5aR@|~-qPssNrD!Pep&(*}*F&F*l%dg4xD^&Dxxt`WN
z@-6YRZ>4m>rd0m9aoFi@?DX;2TLqD~x2qmEyn0|`YX7rxJTa1Pbvf(pP1k;=gqoyU
z+W~C%vDDMM@H4UbJ)Yg?Pb05f7k1h)_H~Z(kvfUQ*L39Y!JkyKmCu{h^*9edfCt}F
zC%k6~k3m~S?j7MZKeT=d`fM;%===F9^g6M47W@~6$Aq?Cq324qT4PL|cZEluWZWC{
z-1_UdF8CoEY`nTQ_Fuzoh0le5-rg>;$x9>R-#N0Z2Ar3%hRaI%%+fG*!XMwF-Aq{8
z8Sml==tA`0DfYF-Zc^vPk?qN`s^?^$HNR)7>gmqODedyOBb{SMm!52X`0Adys^{n$
z)+NpArBe%4&wlc<9zc$6P%1ABO<JMF@4;L4u)1>=mNL&m{xMqVa>g?`*65M_GRZ-F
zlDdN{rm3Do=sg*Wo~cI9!ke-ppS}LP(l5BJ`CrUeJvYSklegwu^H*G<dS;NTS<ybW
z%O*Rn2U=v>+J4rvLIVeXp^4Do-xjLEPGW02Sqq+Qe*Eg56~Mn&Mc=L*b23@4dQLTe
z{pv&atHf`ySz<?%vrjhv1J4*eZ&zN=ec)~WNA9EZ#x5^Cy4Q$)9o~BiI<^Q8rg=#C
zM)*T`M|ec|NBBl~NcctgNBHIYykn0g>sO`lfu(s^;eWe<d+clPXYam^cE9Y5xnu9x
z{EJSL{d?%#k!)uDB>jv3mpK=2VC@J$%h<6e-{S!m$tjg=ZoayXnoGjp4zIJ<78)b|
zE8&ex;a%jHl^<K@QRp#by~O8b@`=fK+B`cC830cTEnA>hoEq*9oL%^RHRhP(Ul187
zylMM>;Y(-FKF*#LKIYI)#<O=Uc{g(`8*M$4iV3)r@w59#(@bbJRQ-0*FBO-lckhG`
z$l0}@d^gou_*D+**7$5{S-MyG<^f-MMcB1E2ELj*^;=|`M*VR6y8IrK`W=?v`9`^7
z-pW0ZyQ)xXEM*;*d|Hy5u}YB}hTJCGfY(R7$_Dmy-7(LuHyBHahj|PcEAcZL*E+eT
zCa2ynrL7+*Rqn`q{GB23%Ys`-{3(vU)bkBH=V#@~swe9{Xn3u8Ro$*C$<;?b7G0@C
zmu8Kpreif@HI5jB>e}ghit4;C7X_$iW>9mwPyeQBPD(wZ50Q2FYb6fIo=4*2O}cXT
z3;ny2DZd3Z$N%mwYGiBltJB{h`Z)qUeZUZ)uR=o$`Rjwb-k+o;-fzy4_`tT4murcc
z(_bq(iA^E3l!*T;J6512j!)GRA9%FHiBD+w)L36Vl)ubPo7CegllG6K;g`0hO=-gi
z4lAi4CT(cUo4POE^jhOIH8VJE^2|!|AqIFqI4ysse_HO$t<-XtnoH<9JBQ%$?JBgl
zMryfEY)b}^In;4YQqR>WH0*qVop+hLWUM;x^6qL-`eD(t^wA-*rHee0+zSQJ*#@<`
zE2fbHkozC()k1IKvpa;3mpI-w=1-ZX5i^7wlsT-{dY09}C%Mq*%}Z5u75P7Fr-}WM
zn-}1dE4kIEJNxGKYFC9@{hjcVk9B$HGrZ3_)laO2&Eql7dSDle%(#k=?DI(b#aZ|p
zfDgN*T4KCA8QTEyxN*k86U%zn_i43DyNo*IdBju@hub;IdZI+-?2~v+ss9w#b6VaK
z{{}MW0qQy($}=JjCF<R`h`BhV^cD@;J=WAza~OFkboehmm(u@#?p2?9tZCal*~ki$
z`glr>&if6y&pc{WeVjS4hrEcj<YB2KFJk9ib-SoPKJLxCN_HJ09%coxudBdwyQWtk
z^6q^)sO7XY`}RI9v7sx_5vAx$^UfJ-r9Ct5Su1TzyFp;FX+b{V<G}O&5!PnNI65zk
z-%n0?_(#S|YC*EL?~t*GU;`Ga!XIX_zvE*Lt+{wlQH)%n_|&W8i`UF+JXQ7NhV#{U
zn}6Z4PWX9dn(vmuZvpsijjor8-T4?fJ3Wi=FJPCtXQ`#zvZ!aNyITUx^$oOBOWQ_1
zIg#L3{R;QeW%Vm}*=?uW3trq_w5IswqL~W*hK`nNiuj*wnbD0;Q~Uxx_BYC@PiZn9
z6|QNA<LL1>))-Oqp()E=$5-|LVk>Q3Y|fhnPPZXj;`|mL=&=HS;{8c}=9Hf~<!4U$
z6DKeCCnToVrWxz6uH*nY44s+Z(6ErbMnCJXDrCwlX`8t5k_M$6HmLXQRjJ>??~l+I
zGP+GM7j$YZ28>&GQH!$vPVVW%=>h+Kp~rTf+syb0{uZ=RA|L9_UEVY;L<R|MS^t)4
z4+?Ht{VK+&lW|lJ<}VY!2J41;nM+a={!V0Wfbmn)UoHaomOblhcgfoM0Qk2uHo4G6
z`e~%U+J`*LjxdhWCvu|Nhg=Het8oVX7ciz`XZl=5IXqD26_}C7@nu$#PpQ0TfLrqH
z%3OEnX)PPTuN621KR3??zz<no{l9rm+TfjfX~TKnH%ZNtaSIX~KHQjmhj+t^gYypX
zfj3)T<-a{f=rNItB0Do>qsULO31nTSh;_B)vy;af8SUjBz9fl}*(C8X65p#6HyV_j
zOzHSuYR+S)5qpat5Px}8;yoKCs>Ds?9yj^MFTPWJfWimPI<ATK<V+{Nd^`46?i=)F
z_g{4_{94#1eZSv+3Lg@%5o7U@un~Wvv*&NamX6sG*pO%M$T>NIP2g(61{e`s^f??{
zui9|!j$BK<##gNAcI=<M--~_}*(slk$kFyPpWX04Bf1}ZDAZu2>sf=hpJz4V8{mg=
z8tV~}fsSsr+coB~muz)pw&SNAr+ufrFtRK28P1R_Pr-H3p!eIE*Uo#k4ubE+zi2-n
zn`=Msw4d4Lp!d+J!dph#FW13uu^)z_M`k-)2haiCY}X+>6Iy5)ZN)wY4LS$YV86g2
zXKga+kO}v|cWgPuJA$`E1M$B)w3F}Q=;1t*+5RB9U~ftvXF?ZWnn#>*{y6+GB%Z)B
z6pv)WKkz+G<SFkB<PisVhdvU2CpNUq1L1uybHQLP#9S+oNxP9T#8z`(vG$Ss=!S9L
z%=`3V-zUy$sQcfOImP>p>Vvrz_<^S5m!JOXh9aG{@Cx?Ax55jJ*Q;^GJQqNA>#X-(
z*kKL%f%*V?p`G)*4~=mzso2~;KUwjMyOYoEzFW?mG`iG_a<Ags{jYasrLTWynCs#G
z*L}3ZIv|RDX2XL2=vAL_DYfEP&eQNoIP$>m>qqVL<@=3_+$9w|+UIw&zPkjtFIL%k
zS-$q7hWrKfcQW=OPbyS)z39}p;7R-4?`6FET>JcYxi0nDOIa&qfwS<w{oKxs=XSNv
zKjd8hdB*h^eRDmzSK0m#Q_g>2133Bj?KLAdq^udYvrk1#_ju8-C5uX04!N?+4)S@E
z59e44Tg8VYzB%#v0DBeVBEA>)zwDR~=D>3HdzNCUt$vi>Z@AoL4iEXTeOVW<uje`(
zX8q-rchT32z+2W)Ro05No?O<M;Mj^^#ETD4`t#Gz0-oKyS=sS6ar`N}(Y24k3%lLM
zdj_&Z`fz+?K{;0fe%;u>nd`-%z4j0E#^oE*pZH(!Zy4hDd7$CP4vZe<K77cs*w1zy
zZpV)$?U#--Lh%w6>U8Cn9rS3WZ?MO?O#Gm-kNDW=D0^Jd8DAeA^@c{<x<Te3a3{R@
zy@2;{F8y@k`#RWQjTb-Lo6tslze4X!I?KAy9wTf3g-&(oC-d{0+)K-;9Ru}P=KOAi
zW{x~@^oBpJzl29Kb(qXu<S6aU8Ki%N_D=s!d&9^l-XE<0+6T&R#$V{-$Y5u_NFT%D
z<@Em%`0cmxOUoS_Kjx$8=szZY@PFGM0zYZj#xE^5ZT#?s{;}~BJ#jkx{?Pg%#it+N
zeiOJqntp@ruaWZqKz<&Mmp_V!4d!S+-8pEC2gB$~&rxT74rN;n1z+!2rFqKM<@DF9
z%N<>vsmn9&vnE?DF+ZZOWgcr^QRNOl3jTxcf2RL^c~8gB=bFa8;U(e|bnTONSTk}a
z*s3Xp76OYi|D{d)9rov3yr;awzjKE4Pw`0Fwi&6690~nXd^<AvD7t;%c>Rxj9O3%x
z&s;tZnsa9`Csn@e)neO=EK2K7hyP^$A)ki5e>(XrYip5zt=O@R1MHJt{dP%uea$|Q
z^zGOOcDrY{z8=!P8DyWN^;_nAb>vT`>>l(Uc8#o^QgD_JvZDq)Z>rGCspnsPB{o>5
z4|?8Gp<NkrL1KE8rS^+&&4EvuYJaO-H`M;WmT%;@_^_P&A`^RMK6JLnSk`aQx>x4Y
zW_pb6`%2btnfK|#zMr{%%e+tD_WiUB9rQjh+4sE}>%WZm2l20=pI)bU``@?QzI1s0
zwC_(p{e7W}c6Fa^l}SH&-@ecOdFI@ZXB_=x-}m;PJA>}$4}Jf1^Cy%4hMhmd`=@ri
za@O-_1bo^ze_nk>U3@P5Q>R_$Y#ks+g!g-8$?&w;G!!kgjJAfdp%|M@uULa=&^d68
z1CI+FY5&v?hYp$JH}D;SS>73ee+n2r+Ws9x7hpP5y7&gzm&2_8MnoGMPhgQXgw5+2
zJaRhvi2W||?7!PTCG)?Tvp1E*gW!iL3>YdTK7$qb31q)`I(~}QDtrp~H1LhA6F){L
z`&*oSNXWAbtQ8-~^AA%SQ{J)ni!=0`BSX%p5A^a#`$+L}e?A(KeqNN;&x;1>=OO2m
zKg~NL|D5&7u>7M&U?2C%7x*pZuW;mZCjYb#oRiQ#t)F>s1pS!3`gzkUu@O9PrS!8+
zS7WdrWe_}J75Y(X4s3cwjlf=rsgT4;v9G^rgOT$4UyLpFFrU}4rv|kjS0Ra$vY)5!
zr3>HQX`d(0!J|CytUDxjiWtTHU*+4OuZpYvtL1u3?f<fTht+<mC)a!5Qv2B(n<RF~
z9rA6c{kLV__p1H)IBow`uN?wE_1YouRIeRE-?pyK&9D<P@5hI*Lo)BjhOk32?}vx5
zLo)AM>HBFr$+lxM@0;oSR}2H6k-k4~nET%JePihRj-8?Ba~2|PgFCW8=%v3o*#7W8
zs4tUeeC|M*yzk5Pb7lu$U%tQ0=jCJg%e3qJ-W$>L8Fr4eEwDJSWv<PI2S###kbRe%
zb$a{mSMGlIZJzij`wqW=%~ONcFTb$;2NKI7`<RmRWh>_z@IzB4QTE&m>^)5DDbCq)
zoj9O`51H!42m9nxDSIt*PgM3f1)h&=@1Y^uduVWbwr<?av+Tb*ZL{w|OqogqfWrWe
zPJG%j1{IqXIPS6c=N<mA-+yp~?>{*BeHp)@^nx?LGv#YzhOH#JuGh9;U6ARUlyML~
zNwu4jTbb>QR6i`lKm7*#EUy@xyGie{u3UAyy;nO(_IXuE_T=q8GxkU``yKR-soVPD
z0DVaN8!QzPd3oEal|#!{OSji=j=X#&E!Rd$zpVr4r!2kCKKqz7^rdy|>GbRA=+`+=
zSDN~MfoC8MGwC<z9pst3BRV#dh7Rw@cP2dtzHjp`@5gxGp{c|tXTJY&_;V0_!RbtS
z^qkYzfWE-<ap-H)hj-4DzM2>NnfL!-^kw}2ROoBd3V1#aeKkYxU0<9D|7vFH{g0w=
zuicaOpLoUplHpU=EY6RjQ<S=Km&i^f{+G=AjG=ws8s<KD+xIi=ri}MTDxVq$$fq+M
zTYp+M$vi%td;%`~6K5db(`yE4KT|#pC*K{};>5pP%>Mkq^>k)CXCg;ZZ4TCTS_Vyr
z^)C!VgMsoAezj$YtfTGzhFCide8-U?`!i(hYZ)?D<m*uMaAfdl=>p$<6psu?7vBi<
z*R|q%86j;l=l@7)lR5u0dBnk8zJ)#?Ie*V`evXv>jTyYu&;A<5=QSMd{Ue{BDf-7o
zZhxivO!><`a()`A^?4@khvUc7@}ZHzhaZy`Bc7i_&|u(PL*Lpyz~1>e0>7cnx4{1g
zpPwI-E+1=tj(|3U=I01#W7{v#^uN>pmyZ2hDzTqIJ9k8C{b#SyI2RqbB)vxCOth@c
zB;TW~eVlKJ8)I#>RN}<8rr&ol-YI>*;seQxr_+YyDzn#m!?lxIA1u|->%Hwjo0MHJ
z@^)l?$vd2dOn6SZBA$~u5znKX3(QipI8#}^s!)y3y@D9rlf=6dJ4O86YK!j~oQZkk
zLHDvloUeFgT4i3{<ZEB6Q#pCRBp>S`<;qJcz1~lZST^Uk+;I&*gbF=E-b;yb%8H9^
zV|5f$A9!1Dec&9sJ}|Tiy<*o_&TgsXd2&yc$+M0OF5#W#-gk8So%kL8AFJuVdfMQ8
zHP80$7uvA0E_GtUoOP%-9sl}1dQa@(-2?QWO~XYg|AC9OcO8D)cjRog?y=(=<-U&3
zMk8i{bE?r|V)67Uatm-yQD4M2W2;|pMAcWwHNe?Yi(D+3a5?>-q+b`$)N#gk1@Uvw
zu?AZ~JcXRAQeT?3O!!880NvzF3P5Y=*G<erH$0-~+rk$>K1rL;%r8wFFV9Oq&U^Cw
z5zcZ*EI9cC%RITpdp^!$R2rNqCFbr|qCbj>o21W``GNI*`L9<-@Y#h-+V;|xc~2@{
z;|S+J9AAS&&lA8eur<(bJMC7{ZY%As;<w|wa3f~~h5~rAm42%7tJb$mKSlU3Ci59#
zUxJg<ubjno^l*$gKf%+bMq#`A6GkCtx#1gPGgrr;r_iH<ctS6II^%EkB;Qfi1tED>
zaCEK*nVX%bCe6V&y@RwP_I>Hg;XV1@OMi9r<@7Ioo8p%lX}_EDPT#M(vbWzM`y%dT
z#C=_H{^|Onc1dn;Uk;9(t!V3H&Q+%OH#F$u+>`Hz+1ohCnQuS)8WqH43P1UwTg8~v
zIqU%Axgot5vXwm#N4|)B40uzrao{|4##P4HnH!nEWu7`Pz%TnHe}=R>l%14m7c>f=
zWyJ4`{_x`u<g6ZZCLRBX{B-8bwWqN!eY7PoIPE$67mokQK+ZUJi^ET62;+W3e3sBu
z+EMAX-$-E8GVpcQ79R!QN7}NEP8k4?jE~UK)@9I;IXByx^S!zd8D$_xsGDKSC`Si6
z-$Uv`r$6?{Y+XnjAEgT&-jMI%Xzo1oKm3t8&+_NYA0o4BIp>@`{+l%=?|!W&>z^O5
z*~r<Z=d4XN#pGH!r0_vJ{)2nAuln9S4_~|Oo?LC~Jr4g&=WOT(m9==oG~<Z_Ygg`i
z*t=kHow_Km?!nxt$cAw*o0Yxy9`RngxPo(|LFC|WHRD2=&kfVYEXlrvvz(k+cjh!P
z{F?+8xi9@z{6|&Kz-OHP74t*R_x&E7F1#*!UGUlX^+4$(7jTx;rDkz1aZ?+(d;(lb
zwM#>zGvNOfbz0b;F3-|b&G&&>;NPHfY?v=9RP&~<Te)kacOf{<0H@LYaFTn1Q-h`*
zZYSP;<Ja|4f%%aOQhRm+<KY2t-5v^*-UeI&;Cd9eBEVG!T)DtC3b>vHo^EoX)IFFp
zbp~*Cdn*^$apv(3mA&{7G|pLf$F4W%bA!4#Z^MJ5rfz`7&ze=e_ey~IAUIU0(TBGJ
z)9s-YOt+<BO3Q;+Pv_qms3$Ug7=j-%Zk*WJ&Um4BXz%pCo%j%En{0hGjQ^s2p#L3R
zHB=1faQHa<ktyG{X6OU)51{|{BYRm_VE3eT;6VK{9B#g0^q+H9PW0c$#LtfZ7)ocJ
zl}^Im#13B_hMwJNySKLY>=E@wvNm<deCfi5u1%k36dfgb;8W{0-CnPWZW3EV+OlX%
zrwy5FqW474jkq1?EOYj3+i}KM#$V%%qu?OC`4w=;zlMBptWD$@`#xtvhrj<)?|x+=
zwBk(e(n4@sPF{I?oiLUhnQ=X&VaMs58Rtx`eKymk6?tsU(d2a+&-s6{wFupUpChkN
z`mE-!Un5^R`J>F@l-_sfD|@Qivd22)dC4J}+CNR@@RVHT0oHpuYo^+MwPE_;%!I3p
zd=mm&Q0lIx;j4oNb-)&Es)(56hV7R8m;&39KG>cIHp$g*vhI+34s2#X?RQ`!FGV_+
zIx;n#W0brKDfpQG9}7OI8#)j^T}90EGvKS~gYRJnz6%GySA2T-ocyV>|9sl<jOigg
z=Ca39S?-XGn~bG1cDK>LNp8&`w3M8Fos6#+I(5o;0+al9Xl9S+51Y^3cmkU}p1^0r
z#yC1~$rxTEuu1Mu2R6pnhE2wEVt?4|@l3;Z&c;*Vlks%mV;p<oV+<z>e3uOaAN-a{
zJ5$E<H1PEsPk7IspYUGcp!rGu1#dQV>krG3jsdV_j^hAW>~Z|jxfw^zNW(K=>}0<F
zlfX36@e}%_VH#@u`q5`mnm&tEbmtJYSwwCSH?hMP*F(ke+>ke(9fId0#pdXcH#~~p
zTBJCh7xH@Z_^n5Z!{>#(u`&F1MSSM@p<02tnA|Dk3N@}y$vpo}oI4>-#AH5*tdr}0
z@~vfF^ONTceZJE$`d?o`{x#}Tw#hrr^X51D_(u4|d`kQ}{o_vh&AYNx-GYH~v`;_u
z$xZ5l?7w$$ibnS?9-2myzgu$4J9H8n6+@f*z&)%_BOiZm$b4KyywI#z==8W2@j|m=
zq0{4f#0$-YR^}tF$bHZ$b`7}SOnz=?WPp$TAGzZEZ@)5CcQqF1yY~7iq07WJdDeMu
zAYH=ujhrsWZVA{qy&W0u&?coHGw2gnXGfo=KOy?8{{zq`c9!(fFZk2ppNIYc^a-CO
zeVYD+=+pEEppSKy^wFgr&3~W#@yi)<Y$1`$;YSA3C&2wwjeG3d47ogF`D1=8`fL(C
z)=xe+{Rz?M@jn24jI*Q<YlJ@;{z1<V)az%>Ki;#X4>s+e41JzBSM*8kXUf`G_Q*cN
z9L--}nXx`j?bkYU+u0wJXJww-Ht}ey!`bh$-yg8PcGlK^nD);OK5}jD@5aYt<7emh
zNY%J3X8)y&Jk~mUsrc<f+xYfwqW%GOI=zoBj^gtQ#i_+9zV<H%)n@1Yfwedr@rBrR
zEt^wyEe+_KS!Z)Z{h!)M-Da)jbTBMALl}}SV&l>^eWdO~0^8Px5n4zskfYE>>V6z?
zWwjm07T2JQtaaJv>hQ9jRAYz*Cm-pR+o_3!9q#9v)US@?|8jUn_@olN>xQV|W1O$-
zJonV@=`c2G5p}-WDfLF?6d0k|+a*8Ugtqp_7e~LGPY%)Z)U3JW$zDNTaeuQvvVz?6
zUe3Myo5{^bK9KNT<i#a6ZTFA0a?jfK`4!|JjXkkA8opS3Q4`u4XhUi=WZJiuZu=KP
zKHw$?e~p{{LdnZz0kg>(vMUFFMz)$I_oWT-ch?stw|MKwDJOM@a-av#aPFf;@}580
zlica&T34kC8N{9Yl-g%ZwZB_B+1EAcud{^xSG%87j&I3fFZDrsd5CqA@LwIiaN$2c
zIbEDOB2q&{>Ul73b`IKJy4K-;%BYRxP3PD5vi4U;k}r}duJ8r+CIyEA;9o=SpRKY7
zN6!B+Ye7G-`hj2IkocQr;2_rwU?B(GzAk)HFPdtz0nNjwlC%9bPSl2GEF{kkbqqRI
zG;5I<xrZcIuH+K0pl{i;mo`7-+u?l~Uj=<Vw*QU1XZX5o+=s}?=8-(CW68^gF28qM
z%Eu=DEb+66KgLkZCnG0BEu@HAnyM=kWX&phgBps6!+6LYX}I>H9&+To^x}U}+hUs*
z`r6p!mV570jA#FRZJD*gr7rjf{pLcJJr|^A`1|B&m0Hr0>+?hAh13o|fgG^s26^&j
zZm5~ejRNZJQ2(%?IW;$e#12TEE3fPUGanpVsdo(b_8&u|0RDo`c3rC`@r5Z_Uq?+h
z^|5Ct$xT>ea$WEM*F-~?DyJ?~wB%E2b0IlB%}0!g<c{`|cTr<sH<%4CuxC(6u1{6x
zFSm3xmwbQsSl6iWo3FY4wX5;lHx&ieOPoXNXyPi!`>igmdTj#pkoU(4?@*6;+4c$K
z@1Zsq@6UF|TZg~Az|+ga;N6dh#|sbluMM84U({P4Jm#Vf5jC!wXoExAH6HQ@@4g3K
zV~vX(j!ImK3D1zvb-c{UN#03iKfPOtuhBj$n9Nq6ROCSVd561H;Cvbw$=92>k6M<$
zX3oXo<;}X<NBzwow^DoRIbw3|9i?_oVw{fZg)MI2k5hB1RiAWNaZlQ~a!PWG2A%MW
zm$@JGEb~2Rly#oUnWOPe_miqr+U#O(z>6)=1Ady)_WKoTbNo2D!B;S^<eT@A3v;`l
zG)k%4GxzBe$(?34?=fG4=ffk4Iz{-IZ27@_G00=tSEs0`O>j1kC1<~%NWNIe9FzQO
zlFw20I(qqLdw;$$MJ_RK)lA0w_sJKx@T~C2Uw@L?Nzl*YzY{kg=iQjQHTc=0GL{Xe
z;3wv91H2~rm_4*1dHe+*@4Mi$#wZWF)EuGDdy`Z3>*SvC4!Ow5?<M$3eiQI1ixbBK
zjiL|meuL!xLf+W#OWe_KX)l?aeT&p>f*u2D5rhuHyAs<|Fa5(4a!$^XA&&gWtX-9=
zQ`KL89bt~9>Q-ejXGOnh{d8CuKV%G@6J`v4TAP}uo#Q{A4)adz(_!&Pw1{<{+PSsn
zi_xDniT;{s&zavKb7N!FtQU&O8-1mU9&Mu5HFK6Z)N+(L41VKx|ILz~@IQ#In%K6x
zLq&H7a!<a=doR#d_|`8*k=aYt^@Ym{@(c39H-9mz*asj7XP!l#&^UAZNnMr4({tV;
zPrA(cPOh(cD0f)_Igz`#7r&C6aL^T4mWzH9edvYO>;Z(fLW@2fIK|e12E25X`L;Yq
z&5ENFj<O%|0?#pBY<+icdhP&Qs8ugG3_i<)<gOJQK2?<560Whwc~-An7@*sH<Y#qs
zn^Pmp)^C+5{Wg#J5|{Z>2`=gR(&@|>^r@2hQsU^-$@YA)63JOoKdpCuFxN75qd`3n
znY-c3m~Zd&)xeQB8D#f(f!zh{Pr`HU_ZU&}v-uvJyi7+18O%qyCi>I&g~`j>kx?3a
zEp)ZeqXMJQT=G;L0dDyp$LH?o&;z$39~l1_I#lrRse+bH_&}a}k9TYwxhL-|LpF%s
z{cZXkFEt0^Htq#2ao&kb+w>**%{u8nC_Y`THKp4r<b7$U3w!33bQ_8}muiFYOSf?!
z&x`&}HudRmkqf(_Pn2)woLw9K#G2e*z3oAF%O~l|!hSqI($nk;omf*~*Nw5Cmt1mo
z&6u&a-jsQG?3VmU6E)04e;%(JhkngU&BZULbY_@+;?L68ix)2>=7<=^m)qyZOURi|
zy}9Hal5f4`>adP);Zij_Q9nNN;S3}3;f*Ts@0Y5b7CE1#ZFw*LW#&+&7LsSFt0MI@
z6Y<NLYoB1A(??F$qa8tH=7X-B7SFG$dgL1U>Z3;*aw61Q@A1T|dXgo2`G<!`MUpdB
zPsR7t4M%TLi3)e))veTVX=l8Tx{83^8jpQu*GrMS(r&j^lgoeRa>q=*=X$N0*~rvn
z19`wpRJ5}pyHw*D^5s^4-c`6y8JD#9sF8JuI^E?iZQmiIcwf0o{r~K}eVmllmG8Ts
zr>b9|5qSr}*j3&5LhDI9%3DWBKiv(2lA{rr#EF?u-Hp-M=fogRg2LEOHyE9?lThjm
z6U|9C8Z%aBxCbL-th`a+OJ10J25{oc+}t}>cY~O8CQ%Wg6sY_C?W(7#ZVMG(?(yEw
z{i8lr_3UTwz4lsbuf5jVYp>mT8|y%w<Jx<*(l>j_gXp*ixvT6etotd}vPx4nP)@99
z3|Y+hk}=6y^iyAQxy6Zp<J0-Okv;|wjWjbetxFRYuh?}KC-8&5mxJs3pIMNh5AIRa
zoOT8n(>~{8nv+*auVC--YVJJvRN_d>HLTU#eGtmseW3eIrzq!bS$!f3?8ti7L1N)p
zUnRH8r=UZe%{?6CI83*=@v|5=>tJRyf}@_izaF`=xhp%<cOUX0<SuE5m}{cSyS<4R
zDPwB-%Ery$4ue&{M4r5UHS}AiaZeq%fY^|9bz^OeI~XO8f-xLnZA%FcyldqiZKIFX
zD(8FppNLbegf7xy{)s!8dG;dD7MO_@k?Fslx<52-M&($uY6R>4tDm7Sa5%pJhvQ$%
z&T0bJ<Du#1!)3F3xnHIq{lBjjSiNfQL95zLzH>{jKIo<UC||=C+67Mgt8?+9o~eIb
z>msrWShx?K=k<rO+oU5kK|9e%a#`;vH@oIvFSyuH0Am?AbXR?3*#Q$?vV;B}CdZ=g
z>v<&d>#2{h79@=`vMv-}CE2g_zdKVlCw(dTB8ekSXV)+7d&s-};9Xr)XCQNXxsww<
zg?BeB6-}BOqn#z-rvY0x))?tDQ@nW7qG)GBw^!?So7(87h+j0}Ro@+R#qBBXUQ35c
zYU+-KRxO4e<a@3G=VMi`Zw_%E)K#6kphv86PN$(w_uHoS)9{P<SNB(-Ga=h_pN~5b
zjrdd3;KNMkegyCnWh|!To_#UqLSOiveegr)t>pBUjz-zuE*HIkF|gkSt-R#9(0SqF
z$XrX`7Va#+L1T7X6;CNz?&sbz*{m;KYLY+y6LY`zXo;Dq*-sA27r{^LcvkDvo@o9K
zu|D1p_$q?D@8do6+hi~EqyzY&ueHm1ClVV>y_WFhnJ9a$vekmS#I!D{-xtYu$vEQ&
z&qQ}$Z{j0H0W-PoBaY2EU32hEy$2lR!Hk??W*xl2Nn9e@hbGrVuybN%+><%RyKM!y
z=l-?jM@r4u>_~5w)|`VEddY9_uI8C^_RoQzfcFhJ(cJ1K$G7H|a(0WKq?h%<?{;n>
zL(+F$VQqxQ{Jct+m^s1NHE$0vh6r=(05Fzm4u^-%G4-R|o6jQW;HQ1cmwpKSasP?j
zGs#Ik*E8|>zw<l;9S$;wG_UP^TfyB~&{6a03CcA$zw5dcj^-wEKy&k#j4zm*pB4?F
zUmE(?vzCwlx9qGbz@T|<d4M^dX1=F*ruh=c+&XxopE#p#65?Z5u4+fN?6`znsyyQ^
z+_Asm{k|6OHsRPEV{VIu9Lu}C&w8~E{CuhUpihnC?}1ZuGk{S!WNjW+=A`8ba_pC$
zd(S>My&m6<zcdyq?X>)Gq2x7pcY@ER@0Z74goag=M|58ZH1_cq1@q6&JI(>rnX?B(
z?`qmBAs(kU{I~bUxc}_>P)TRhOxx{7{H0~kVG(i0Rcj(^z=6F>qlr3NgLF5FVCL+8
z%^ku&YiF>gOOFoL1{*iR_+CRtw(A74P~UcLaHpMYi04bq%MP^Ayckbxvu!7Tubuk%
zZ?vy6t$)MIzCc;%0xwD2-!&m(`daKBbjZdC*%&6`gi?x)!Pb}0(21NG568yD=|AB_
z#>T_xv2oKqE>61{Zwj;@gT8{C<sRx}AM@*{=Vdqbor%ny>?Mgk>T$;V`x=;^+H=r5
z9&o8F7q^t_SMf9<pPc)^)C^3`7N(PNOFNbG9eAb#i(m?ybB<02rgMR3<^3ix9hjoP
zv~mN!E8^M(53xSUe&G2Q@bm*uAARbXe1!o#f=%$KtT2v>xt<KgP6HnQE#N`c6vFf8
z?*<-Xo<iPfz+);;jUUd16vA`OyMZSHJdx9Y$A1fWI2%$3&wqLs@PxpR<!55T-j<(Z
z<KgEC#Gy=#b0=HI10UjT!4UB9cRxOihtGP4JRHynI8MdG;@|0l0UAYsBMKa`4fvIY
z(Pcd_oRV*W=ahUK(B+-L0A1b+hURwxLw0@XUMqX8AAfw}_>;P)Yy$f0MD*85i6ht>
zQyA+?bguoIa=E*w`n%?hZ#40<{U_&D8?$Gc|J1yeNLl<G|LJ-7=93@spP85a4e`hR
z&*x=Vn@s;*qZ9SK7fqGKvv1hDx-tjqu-~vx&{OuH+sAt^L$7T$nW<&|{B?gYTkd$x
z+0r)2pZ^j67xT{ce>tzx|JA&6{N3{;PygbU(3ZB_!&`nd2Y;1oUarhmB+^eh@yTO0
zJ@AzVFN3^&3|)7*;=1s!JZAWPUiotmq#BTg7ks*N*Bzw~vaSt06aLx*%B^L-?(dsq
zUfgHg7hgG#b=O4?IZz#rYYhs=&bs8gi=%VRu|?0KM~(Hf+3jg?6r!wzdyl%&WuIz3
z>k{~R>~kj;Jsb8vG8fx$dy{c0%nh=E)t4DqjNX%Jot!va9g6qj2a3Jo-FCt3?4}HB
za#VW281C==Iyx9@>|de(pM@_!GX9oiWP+I)JE5~g<KpRM_`*+Q_ZV`SrLo~+x3eBn
zHxjyp`zuo5%>!@sTLSzUbbaBlvbr{7F09R@A13x~8sF>5A@H%<OblF2EUV2_R@M>|
zWA;uyzcw@F(%Q_5QRcC`(VM1v;OorV%x5q3IyW<3*%H6tZX0v+t(g@eGmr+a?%98}
zFXVk=-z0R+$*ixH*ta{;_ck*>rOySiHqW~z^IR42#`p@gE)#o`3^#sb-_)CDW+K&>
zaMujF-1(Oz&2{LxlYuuB?kp?I`N|^PUETz~`oNp%cjJ$NH|a8&*3Tp^g?^rJvUO5C
zy<%h{+r~YttEVJ1HgNe^8hD%jMm}Wl%5Tm++Od3^xXDU0Y2Zfma<lr@Oao(mgZ0k`
zZb#$8u1KTn7{=!?zO&G)r=r_vd{M?Ve0+7>2~=B+-VvH=$EUG#*O9${yOJ?#{+rc&
zk1^Y(@qd~b6R!oQ=y^*oW(*oj`VI7I`5}J;F7&;gHJLLn)UkKU_HP28%)?-hqY0bk
z_}XRIoDMeUa^~!xFlRrVU{1&DF2ZIE?t!LWRYASY)_=5&_@$wBQX$Uvf#0pOvYYCG
z%YP#~i@fvbCjQb=XcZX`ebC7UO0t`-%RisSe5nMt-Q&6*&|K90wU)oebUl#9mm!|R
zKFOFCzR%}>wHudTA^kXhKK7-g|Nklag9{Dz<3oaH6X`OS^N7=W(q#+z?Ih$U=nZiv
ze8_OktiSI-Xh9--waF}H{)-R15;N<_5-*buO<rQc-o0m=$(<M<Gy9o;^0_*+Exox9
zy*dUR#K%#1SLF|c3^vtN&ZE(v<|XCg?QV2R(L{6ejn&sCzQuS$(DaYH&GA1j@{ad$
z@0M`Y>wMumcY!a_E&H+5{BKrHxhjo4o4xCgS7kru&-b9;A9s7lmA6OjsjaW&e+$R@
zFW-~i(eKOizf~5ze>=}C4@}oR^OG%q3l0OU+=U6;PS1!LUZyneWzKi-ec+>va!1zz
zV##+H^KuxR?HW`6`Yy)&^N5Mh;O?vQzqoQP_V3GOH%_0s0p0iKCfwP_JB`duwR12O
zuF+j?Uo)khrEz34G;$^`A}@hk^9VjN?uZzeL3=u<Cmy~5TTlE0t(L04L%`g}+M!rV
zL)%(MOJ;eQ7teGPtT$U*!V9qBoWy41bPDG$p4pJtUs0bhwO-~f!!1w7?c`KwM(wKo
z!Z<tQo4vbeU;D5Ja{EnoejHz0!abV~>sM()d$8ZT+e;p1U9o#i@SX!)-D57Fv9gr=
zWZ9oIX6hw7(P0mVN^81g@2@wti-E0tCwe<R1!TdJ7dIKk9In|vEi@xC#?*wu{=Us=
z{4jUnH|}IlO*ZLz6W>40OEyyW;wCS_y%b~b;=>u|mqU^D4@hpI=j?_@IuB0cEOnZg
zcj_IS);OcjlvebzrfL7Q=TGgPc+tDtd%^YL%XB_AcW-;JmuXm^p5abY?v}PTlkR2}
zJlIFN8@*Qdd<48Bev$mrdF01<t~h?tWrfFn5balmy@VSMCmiAwPIczkaOOC|dE*>S
zayhrs+^eYl5A9pp_R(q7ulUd9>@hsJN_Pe~7_&6ZoygF(CWfCwZHQ-{obDxmPM;yp
z@90?@@OaqS^3QOGTl`T|-gz$1A2FdNYQK*)SLchmIRmbBx4~Ob3$I>TW!TH3E_l{m
zC)j}H1M+7)$@yvZbA0WO?Ra-^4*D+{?~~}V4{_!>9V+WNkhd`pU|V)`&iVM-ryo_F
z=ks*~o>eTz3*Y2!OAkGXF=f|{O&r9p(?=Tzk#`3c;q!pkV&M7(d?uo;Xz>f_&5TiW
z@2_ZNuN9h~pWC0)dj}Tj4721_NzK#rnYQ%F!K=7?_4O+FR4nal*hEKKLWvA=ReLjy
ztXXZ$lk2baGGG0AeeJ(6S7V>WNA?~1W3E<uGY9Uk@~5u6oV#C{w;uSJNelt<dR5cN
zh4wyW;hi<_Cds`f>c*&Bhu$K3WvcPLaYvV8&W^M+a#vRlH)~24)~*?E=5*1{{*m78
zy{xZab=hZUuh4L>nvKV1Kj+tTvzwYmE=sKYsF#_JEZATs?_P<YTsl}i{jG5q)(URP
z%BGI`+B)vzOY{6QoS(aX^peC56B@wQ9lRgp3&ah#-Rs^ap18iWq_*jj`s9<?)ol^h
zA^eez_;0VTD&fpK_ssD-=1q7)d=q@u)Z~02DP&iS@q44p9Av}b8D!zHX||ITOk1GC
zweV`wv9dXO-bR0q@+=0-24A7}8e-$>lWiZzSM?3{I_@bus`%<GzR=huPO_POkV^Q!
ziFf4BgzxbK;M;IZYQOq%_RnZba0*7@BuZSvlsC#|SC{+yTBfHSc=(O7IoiK$a+m0y
zg8_4x{XptJ$g?BtD{22U;LWTX9%w@EIdbm?WX|NC+R$Wt9VJ%23U<--5!S}*uVg*u
zJN6xu`5SmA<;ur3xgzD7<o)jCB^tN#ZVIlax%24yjT7d6;XD5&@w_SfJ~Uds!JNBW
zFs+1EU7X1_;Jgj^>knsV&c)Zem9hx;(`ih4SL14WH9Pa#SIcH6C=<^$$tQ+fotURZ
zjJt0Cm1nW4g|$9$7@H1dX9i=Ie^=v;&8|;&4`he%t$5Z9WS2MR`CWRO|GV7X&M|0s
z4fUP^Un>RQvFyyF@~_f=`lYftZI?UAJ1N)q+B{sFvt<^pKhDVUNcSJJv!c{jdB8u+
zsl8|M|M=RUSa}k}w;RPN#m={R8Xf$Q#&_bIIXlq}?tST%=wMO&9T8;1LpA7RrDl8g
zdATyHt9@>vE$goFlH-wmt6%wxXW5^a`Dxaq=ZFu}oc|2Jk9>Y%=32g|d~-o&B)X%|
z{*_1jY3<#xjyNOyeJOsg=9~j}+dU?lb+bP^;l|ZRZ_Q@6b@03SM0T6%iSJFQ?zulQ
z9?fmNm!_>?z8_!v)T6|wZ5>0OI{#JpT=G%ys}0M8`0ph5c3a&1EP)?rkNiMdW2({<
zZJvng*yOl7it`bXDe-7}O5EKr!pb)0*(TX`&cq>caa#+|odx(0;qS5j1J10luFk|q
zG<asNu+QoAsXP|v(r0)Aey4n&VfsuX$2aEgRLZDNd`w&A^YVZ{$afL6i;mf&oP+W+
zH9!}aew%H-Cw*Q|GS-&-SXa{TbTjE_6a6}2c%Ob-7^}_$I``!IUUiDTho2F&eY0Ml
zR^R?x_r3IV`erRZy}m2oa@_cXb&u7Xa6Ww8I{#Qm%c}0P;?-taJery|m~TXU<b2X(
z&QY7<oe9Nx=N<D4eVm)`LwqBiQTyVRk^pY{cq?8JkDfNo=y$qkM&B)rPdpRK_bZ-x
zL3djVXT$m)j<aBX*#1w4Znl5uc8dO=InDlu%SHUtd*q*%9^)_<40B;~$B0BAFaJL#
zD>uFaS-G)gh^!pCj)1SN0lp0U(0vu_H9mQ*E$;$X8>6RQS2h-`D;x9c%Etc(*Ok-8
zm3TbJ0Wug@J%}6pT0ZAbS#x6_ee;?dtFpdhd-haoaPv9n|Bl%nn>x4#58}$olTkzD
z$>14iy`Nw62I;8vGnjwxCw$F$_)=PvkpbHGU_CyGxBN4$#l_%Koay@s&s*Z_jMKx{
z`w7?kfv13eVRT+>;ba$kpS{?jCD<17_u@lK?%-Jy&+wVd>_8W=d&0yTSBAagpWu`I
z<|jUyy)N?6KJEf-K)>rCR%Hb~-55GDxv`Faf=}T)4{<MO7rCtrHre_we`K8Y>t)k+
znUKA+Q@P1X@P$<Ic_iZ1lHUk>+HFl^*9xXUM`4Y|mCPNce6#Ou?~$+Ozl**nJ0JaQ
zW6Q?NGt$M(DD+T1($!>}^kd_x9i3+oABFIF^}#o`eZC(ecgTuQrsnq(AN+p?|9`R5
z{{L6YUpYHfdhjH4r02-%CRu+N+w`^2q#Eh1<FSDi8$3DeasQ{8pxC$P75j#6`s(eg
zkIMJfi|)Fabv8u2r9lt>PRFi!T^&!(`&mcFyd53u=N-aclm00^Rq)Cl4Qx>dUw8l2
zCTYj{i-t_|9e?p`Bx2&1-q?Ip<21G$z1pyzQ#WX*unmp(cLn1S+&Dk&x)td7+UGU!
z!J(0gm*5Waa<e==I`?}sHfs8-m6x=+ru9*LtSxuA%N(<HTnqFhW^GBEaavn8wokp)
zjIU_ngU-J(dUj)`<)y!P7MOba@f$>dRe0K5%6RY(JkDOde9iLl+4u9Z{0U;%UL9?c
z_8BqY2AyAZr^JL;@3{O0yS{-x=N^;zXLNe#e7tg$$yAn^%&qX8+W&X(D;zx!jsv{i
z0j?h!hb;}h8-Po=>*igHH^yuj3pTaQVKCeupf-`4HN3NT=9<{ie<pUNgT9$3+huFW
z1}Yo_dX&BEJFr<i`VwB@jcX3kM-Q|JaHMxMzMZra8*MTRsJkJxFw@U-#p?N#O<-)l
zqE1jI9*{3aWxe3C_i%Rm4=4}p9y{jzIxIf^(L*OT1u!XZzw9Wj1A@!KQE>lwa7J8w
zF)`xA#TSKs8sW_24&Q$^X1jr}PTEbmoD{M1a{H)-_-H%NWOhK;;bV^Rd>hX#y!cHu
zUY%u*0hj!2iUV-yLv0q0Nig7>8ED7n@Ty{{Dc3rs@9tr=2>RakI<cd?V__hEAwnM>
zxW=o3&w#Vm$OifP{*iZv;J~~K9Izg1T^oXfs#D;A=kEvywE31epxoks?>FHf-}mX@
zV8uPos>STrm86s_<tK^#&_Xg+ISaeP_|32#bpM0L9C#RB&>Aj&kX@Y$t$5BSCc`jK
z0vz<;=Ozx|M-<-s?`z;Ua)4)&4*_2cFZZXI%)?=P^t>a#V!$Uc+8Ewnz$@x^KYq*r
zS87x5tH1r<Y)A<9HvCQEofddP?<+2_7`%nBb^*%{V4=>N#+uIiiBpVw5O3Y@5^wlZ
z-!tAOybHY1?`h$U_buLvz&iwQ!17M;CLN{l%*~-?I%8vc?%T!LDa}*%@pay2J36t>
z<NVMa5#L0NzRuq0%#Ga(f!4^2eW?zkI3dpbHdubk?L$oN8HK&ap6eX_Pc=C4a{gm~
z%<(T_Kaz7LYfD-0j&T-htXV#ZcBYXFGvK+`LeubtPwHv!<6J<q6Bkdd$Jd2#e_K0p
z=c$pL>0|A0F_Sv`LjKa%LbKTyn6~83&pYuAR?nH#>7pOl^^QEOo5{mkiT{_i!^Y+l
zPdN}}kLoq{{obITO5fPLn*krE=+h<U&S$Sh?J~}#f&m}e#^;FJ4aQi;n7YBul$e)1
zI>O96>mo06G&H3~<B@*y957afCJh+o_MEj}K|dMK+?w2T+i`G%Zt@k*FIe2oTtK`R
zc|m;>7d?pz&-nQJ`W_}03x8iVABXdG_U?9MgkWK9u1RZu7r%d+vo?B9Fju3KwdZlB
zcT)Jn^^S`#)wYFh*WQ=IsVzqzQeP^QKBxX|+ti5>_pIl^xC6gqn)$ucl?=+oE!XGI
z7-`);v}_?h{>#y?7I9u~=sBaHodAFT03K4v1C3qJf^y?I@vW382L5q!;Erdl2+DeS
z*2}qw6f|k6He)}|cij}|x6z;44v+k4b!w`|r<Zkn9s7ccOSg384CJJBXFr&J(!_U_
zo()|&$HrLw3h*-x93o>Q6=qv6vh@J`cOA4|TecuGm-n;>DPC0k=mFx(V)#1y&;<_=
zV<vty!~^P?Uv1b+oYJE<T=x1aTO&uAPh0zdMKNlTb@*}7gDdClobN-=b3D#Uu5q@c
z84o(_%)oZgcegnk-aZ?CnbPywGBZ}~YoC(XfL8G?ap$$u89RIDOE(a|4NlOTrq!$s
zomHXw5$$<eo$>6>wvcJPTl_8^5ZE-g)Gp_ul9zKfb3grenQ5&r5|8;B<>DWm#dwAD
zdeQuOIsKo_Z}Go)B%tBt(5ViZR8!W1&b&+d68i~}>Kvb1zGhx<kSMc|_kuQt^AJAj
z<q`S5*`GE!9_$gULH|KL^=+RGn=|%VK2}mOv5I@uySB}|-ht0@GQ8dM65n6#KCy||
zj;nQ!$-<7z8@l&vI5$z2IMQfxaZBicVdizV&1~UZ!4~!iUY6dDFMVS_`e_K-u7{>=
zb9c@Ued60o8*hK&me9o}Sy}GSzaBi|PXnhDdPeg5`4^n4fg_G>1K*qYCroPozgO0M
z=@XoDs529DxuR*)zr!TNCwj+aFQ<~W4Q+e0?O&p}#tA)LBmMdRg*N}}K<MgqZfgFw
zE9ZY{U1|HgHaFK!FYUB9m`pqEbX|^IamlYmTXnSM&{jQdb=COu9bi>IAEzygGw{)e
zzN`7)ke}z9v9pdep4>k^d>#9Ajk)te7KdTZG|+}{5(D>&S16>Z_%iqedS9UL8h9i`
zUoFU|!{a#*i@u{a&^2n<v+U{6ekA&q;-1C=<6&a=8Nao`3itI3+gFa@M(x7_lk!$O
zi}CsU9a96JPaXF0!;C40pGP*b#(FOO_lCkf-Spjbr9Bg|r0Gg*6?ie|$3)osFwT;8
zVz>4KYyZbg^7o^O-TRoA+z(tWyg$I$gT3+klB08W5>LVSh?!?^nlpL6_Pem@zexY`
z6-0TiH6yyFa+%<Ih_$NfqA|<lKe&;(>oA|4axYm&-6qO5k0RG&InPGrp0)FA2Xe6Y
zU%I9`?5z*l;q+NI-K?r&PMo`^W2*XQ4{P~m{0`Oh*+P7Jh_-eAjNp4D4<CDo%R{Ug
zDwAD9jGNt04)B|O((ENhq$l8&<7-{cA}LN6-3A${x$-3Yrj?u{Zitw8_2TNz6OEB`
zUcml8&Uc#cGZ=4|a$Yl!v<JvJ+2!9YCpY(8v#OlmKO+|@^E%$(X&*i`(2akCJ^N&r
zN9;H_;eN_BDdffu@;kTVPg$t4i^+pX-7An~T{GEN#K+ME?b~@zZE0^jXis@KpP$w>
z8osYdSEEB#n4i9ICb5MT=6D<*Lbk#?jtoksKlPEM0WU8s|41_X_oI2uOdy76+z#%`
zbimW)8uQw=A3Tp<@yy1q&pr#j0zK8rCFYXiIt$~c+8N97wG9dIXwQ>BY8G4*KCyXe
zr4w$|S(~3S_Metr^f9fEJK&SMfmOL#f5Ly^v=EPbcs6{VnTXk|^QV7+MgbrG{I3?Q
z$;K{QH3NK~aj`e!o)UA-sIW;U{-W*K8Br%b!i?w~MGWCqo<GLtrO?Ga{h<*(4W%|7
zXX(WyV>(^l7Y`f=g=<#+e#IK>^05u3WJ$w1XIZl`x3!ruR<|0BJ-ed>{6m*T*ucLF
zjqXvL(LrN&SAfgb5;L~VIit0iv(D$a6-&-6;l5GFyX_fsChJ~#&w`_E&#u4mhBa-b
zq;&*y<jxz<U(@KA+ZImuYQs_T!bVN)0p{$2>87@UIF09t15p0jD@U04i=i`n+MKbi
zz3_R}f2>$@kK<NcMBO@PjFqir8;Jvqn6aVzz1te*nQ`t$b6fZVCw^YHH>2buWz!yE
zZah-{%vAOLTjo^@?>6&Z$8@u1J?91VTyqk>zGj0Ny_<6|thF0D8`hOhduCl|8u>PA
z8_It^^%*|krh<5<CFM@(l1EHw#RbgS1?1&jZ^n+>Z`RBXfr|~y`362M;PSiKwmEki
z_e$Ow`IPzcY?VDyP`)AiRpJGzh^qqUz{J?co?C8agosr;7agNK`sCE}kO@zjP{l*Q
zbr-(FhVs;BA2DT}yoYWR;#|rzQ#X`Tcly)7S6)#y#<BTvQ=t{leHXe{0n`4_^q%P@
z;m&IC*8*+ZkVDOpj;U4PQGM1qIUQR3CBD-AprYXr{J+GR51xzv*3)J<pAU3{F}smb
zGeQeE=VY9UHt-)pMg+1&-|cIv*LcX-7<qG}@P9k_4rH2r&#v7%19>L##v%M`W9%NV
zkKZp{XOe+j>L-@)@O5MHBaX+9s58mqh(~rflRTa?$;u%xA!pBgHD}Loo<G@k3o$_W
zu;jnmG1`4%$2k6<2q)H|^X}jb>HUqN__2?hZOv}|jF8#7Zw3BOGo}9a7whH2HCMA=
zjyy+SCsvu5&X+U9kGcGBh>$OVc3-a!@lD(LcGYGVdPeVWMgj}<46)2}`2VmIuO0KP
z2ijS?vujPV?jLu~&;A(s)PkM<{3zmozVIEzNGm?ND^xzC{hQ%L@565Vfim*cq0@eg
ze!I@}=Qqta+qAy4x3R|aJc_((r$52kTjwR)X?s&B67R~6AT9`<V*TCoy1oxgt<=w!
zZ|S<PJlS=7DA{$Po9X(WPNu6Roax$Kp3F9kI7%C<MqtCG(N(KCyW7<omTzKQ*Kf*`
zf4jaqo;@)#;dhlM{pS}ayH<oVsmsjF^-osE$!QYz(J%bf;mqwTO=8{WIKNH&l0Q(M
zj3^d2a#sA?o#9LxIQhTTn6h|!k^Q~LY`id@UXuUqUuw@YN;m(H<0m$~fh=!tydvp8
zxggVxzsu)6e=YyZCd}}EyddKf^Z6TWq6fc!Me;Iz*Ikjk4&7Vu{|k8s)XwH(CpM)y
zH?j;l@3C(F7+tFy8UbIXdnE03El$SDj?VTUT%1hJHZ%Pv7biE|w>Y_e)8gcvzge90
z&{eu?OtJ$QUO-=IU&|VT{=Bv(yJ_uA%0BKTe>_{~V$7@`({B35oYkMox9mCIWu2SV
z`y1A6_$oGS@$KDnSi7KK6MQLpq0g_HUhdr<xtQ~Wq9?u|tu2Q0w7o5Sle-z)jC-E#
zxyA>~nx-cP*P*WtU5A`mT8FMCj`vg8ZP#G8EyZqIhMm70-LAy0P13<i=)e9`k<R+C
z(^)^t>2%L(UuwSm(1Y$j-MO#*Os8{_aXW>F>2tr7te*F!WaMbp;y`znV9zGougk?d
z``C^hE405rd@OR^mu-rl$V1=K?{>;v#?rOI<ept;GO4j<o9g*IYiE3$v15G3-El*%
z9c-te?cCLnux;FsZ-e>LeP*tX&$F(MP*OH}*E3FLs=j~aWX|H-ziV-#ms~2n%dB3W
z;dfkiWN!=K)$|QN%NLye81@|RuTYFHYbi0HyPtHYa>usjn3qI1So)X1JJ&gDH?*1A
zUa>gA*~Q(JoMC>L^`rwDA4LX9ZoEKT(!uebVq)XMQTkGokzRikzK@!-I**J+uLS>h
z-nTfhep7ie{TVO$!lmGXIhjTm-)X{~(sNx?(%ErWd14xMo;Idu;YhQsk(lO6V7!2w
z18<DSe|{OfQDwI6|7Lwc<0X!6ccTgIZZYAW{h#rE(1!kk09rl;_|XM3FQD5>2iKhP
zmjD}j-3#cqZ$$7JFc;F4|7$rs`!O%`Sz@|{kIhH0O*vcT(YOCFd=KqY_(pnpM>rBM
ztN;%YaCU$_qiyiVZ`ex^@5Ge%hp}ib<>t(U9?dDuA>sD>GqRifzhi!U)Fj_Hke&78
z8h#(h&TN~8?sxzlnYk)hyT4XC<3ie1o9)0&?v0t(QQxi`c^gFY^8oMk5(oZoZ=BeK
zF9>@R`xrQ5?01PTbg%TkvHvE#wLz<Jx%YZKvHr5T6}#rok=-z@M|2auge&IeK+`1l
z_UKo3gx>w7-ldILc@Fm(>J-EM;#a|49+!$4{F~4x6KQzOhu(eFxjq7)z13NHxBc&s
zGgo`sn|WFItOL#lV>&yKbKS^@82n~s|HGV(Lk4MFpP}u!z*PwU3;3L*yZ2v)oXd|x
zF{S;Nah8=c0);rhr?k9-xgs9wzpp;A06wZ7#z*CU$S%M3kJ*_&qc8E3aIN>B_(OK4
z{5l$^@F2dqh5v#}^J+D}w-LMG{QKSe?tkc<c+_;iqWSRapXBWIW6&u^?yK1G>_+29
z;`igX(R$p(|LDclalgzY()71}nHTq`A-5F=Va|$og<RRvd%8H=5&qeo`xGP7)ix>-
zta0DYj!$$gagtqa6BAvBkP#KEbJct<;}fiX$crvu?3&g-zml~$Vp98j<brMYdDckQ
z+R8onb~ty^wSL3AN_+y9K7N=;HRnV^R`-<7u+BB`%SpZAi$BXQZyD)jUOvv5V%F%X
zoY(AUo?Qn{Wj6@7YqhthIT{KLT=5^-<)YtY;SrzDWqY%8BK&U~Z&v-|9%4JWpE6hj
z%(ZKuXt!rWp*JvUeQSr`D|zO#PHHYa_<hzR=21jzT}SDR&r!CP-=F1M^XD=>XPvVB
zK{wG%v<%aKiZb>piTB%j%MHBW3%rGE=1AUot2wQCx&4BZ^IB_TE$!$$$}+yu<7^HL
z15XytU+I+n%rEYD&z%qT>ucBIiwbnaLjQt%+uCE>4li(jn0VqP#l|?C$#e7P0^7-5
z<!fz!$i&ZLo$eZkK6v9@`?~WyI1Bzmrfrk|$es3A`znuhCR$v#v#B{0uR>pG@W;k0
z*Exv*#%Q+_ue-aJc-v`5>o~hA`?U!jHa3nk`P19?;V;>v_#KDwSB~LK3}=L5_?x%W
zpOqtDn#tKJ6Mqevr|&Vq#F}$&?6Y<)vpoIh#Hic{oWu781^bQ%Pi(UOLTum|=dg4K
zQVc(I-D2!x)`L2aZ=UD&n_Qj$u=jJ+eF~pE<(|$(QzuOhtI7yDSBS-4z&b6QcVJgE
zq=;L<uW$i&Y~<4W@GbjGBbPorc>hSW+^LW+quw|d_926sKj}RY)VZ5|ZRAwzZ?V_Z
z9x=Q<P54El=0C;vf73}EKo%{Zm)&##`J=TeHpa|e|0($s$=y%}zP2HY$JF008#;#X
z1Rl7Cvj(fm`QL(#e;)8?A4@Qu2TTDh<nptyEC3ciU*~S(&Ff65g(a}rFOlAtAOB9q
z?csM34r2Hfl)uVHzpEs^oP0Aj4!gUXIZj`x(2D1RdJbi(*Zst>GJFP6+VH?-cZ}G3
z=0{K`MqiaG$7Z(W%dMVa+pVL&6m8b6%$=VP>NIigUH$ZCyEt3tw7!_Z=DH`>XRtqr
z3|iHW%+|aVtiPsDA9(e9AHN^!CdUsn*!}D5ChtT}W(T;?n7ZKI^efrrb@*t~hwvS3
zB)@{-7G8Mfy+)rrQ+^NZ#DNs?<=-WDRs=hmyZTlw=KtpVxqFE|RrlZWb-Nj#)`DOx
zDfmR=-$@^K{PRpkXHhI3`K_2>&D~Pw?la!mahLXXf=BVs{s)~zALlRnCx;TZUB+2n
z&S30+us+d0xl!kQ=g4M#20xNwZR97oGvAivfT691b?csWZft&{_h@$Z9h41~AMDFx
zJ4%K~PdJR<!GN<fnVWxt-TmiFXQBHMkHS2?e;oG~;d_-%+U|1x9J^Dx|3~mAnQV5Z
z@T&PLd6|nF$?fIqnRux1nZbvnoPdgPGN1j+edzFeqI+`jH}acCkcpB<;AD^S&W&%j
zvC`+oW2Njf=vnvqxo5Epc;@7uMP}rlnHrwCxo0VUPnE9B-k&)G_`?a~<#PIQCL!5&
z3Gp6PoORqda!sttjkkT_+|0LFLvHOr?lV5Yu9!0MN+ADaTjJZoKF{U#JhaTU_PLek
z_`{^1YhMH!?u(5piMM^!WZD}1`E7S_F87WwpAtT$e9E@8-D{-Z5VNtcHug2AR{DPg
zT#@6wHbOg+i81zmJoGEhgxWp%X3k19O{z~~1GPqw3l?|z9Lcv*X5}w?LT!_rq<q%I
zL)2)mC<ab_bk}r<cE15mkomXr4mS9n*z8<CF7v1^wsXFo<<|K1^XgXaoFDxkU)$H-
z@IPKbHY9ica?dN37ns|e+TXw8T!ihQcl{0X>b5O7UOCg;R(Y$bMZRV#KV^=)kD6o^
z<8eRd+*XN95Fc20<u@!FX0IV5l-KmovXj2UHsDMFlX&VC_(l5D{q9+IzrpGM+P<zI
zo!Dd;M+tht_pl8|Yz)WCBcb>+KKTW~zvj{Td@8>TOzTP$m7gk0OjuW*s9X$u*P2ZA
zjbE5sbzAg_&=;ff#l-hVp2TkyuBh8+Ue;dJBeYq*r!-!+H57luV_l`qX4*TCPxX!0
z&vmKWe`BuhQ$gK-&ee_8kUtHW+xY$`zAb-DUjPp32Jf(}T*sMm;>s$)W2Nuj_C-4<
za`zjXbnY(EpnSzT-ubr4tQh0owu1MvjUjlj3?Grh{&hv-b>>UJgT0-hL_hZ2p=IUl
ze}|dlCCu>=32eiqM_NWEj<k9|cw_ab#Ic*bA2{%td@>rF*H3ONcvrSe8vjx@Tavgg
zv?w9n-)C*}E+j^Dy%T@*LiW}|rlt{{X(9T*htB-433axZX}cTIBd3ovvlgwdugyxf
zvo>#ouRHKDEw=V?`9O$u;<eFcW<wo*C*-P+t;xDM5M_N{HV#__yP%$TWBAi5&E$bc
zk)P75BliE<17E~99izS8Z<ZwbTCib(sWAU(?Dg!-K|aHlsbY-5x!|4TkvhJ15q!27
zzrYpv1+K&|umr!rC-Dn}tY4r6|3Z}U)-&D}_qn$nV$Eef+O;w*Jm5?ALgn!&YqZ1p
zpN38Ug<MM|-*3WSG@ZSLFz0DxE3S5<yO)8F2zh4f!K22wlQI5~ynPY&s?7AK9$<`f
zx)$JX=eg==-TJ#DWwQl?!OvR_&0b|6T=+{fXRv|n`O=1scRrvPN}XY<#~1V@xqcph
zCA&>D(HWy3zLK5gjYm#|%CNy36ZPN3zi>tF+)gj_MeeLp`E_NBkhk9JuVJs>O}&Pz
zz2w5Hu`Ny2*I9Q5a5yY?jk8;HYUcO-%(wNxasXIbOv!Goi!B>F9;hxe+dbe=9!Wb+
z{QA$noZaq0<2T^H9gN+<cKQwFPZKjE|M0Ekpwu3;hrQpoiTHQpbnZX1WJVgB@S{t}
zYe#;_zD=wt^i_|(Zu4TopZm{TIAa&>ykPNBI*5;5ZVrZfDN~=z`R1HukNQ$R9nnm&
zmZHyUGk&-5ZRvA}9Co2_P4aAWzxN05R>2vlkeMTS^(E?w2LF<8OZu1E(_V<>0e(CF
zgt=jSZsZWIl`i3-=Tzo-KzS?`hZgWeiZfHP8878-HLZc7*BAIs(ayKj|L=h1{G6=U
z+>G$N&Ws;u|7~`8ef2`t1!U-Nv$JLrv&K5iTI1QXg6%J&TQFxTp@+`rdbGJyu;t<K
z(d_~rG}4(EV~lfqD;7D)oxEEppH%ik-uDN}<_Jf6=OW%ozn**F(C(LjHNBtwo%}wR
zvS57-&Nt-tKb;=gDAK|9Pv+cuMJREx;$^_q{>csYoTtuv$_~!0wNE|zD{Ldl{6Lo&
z)b;ZIjbP75a`9rFy}AjR%Gs;o{Y$4gOy7o>TSGju;2DqJ#(uj!FQ)Tjiea6@f5rCC
z<@>Z^`%B;c%$UYt&yDeJ3K^Kwfu732oj)@cJR8(8u&t}m{g~(5^-TJj;^vfpNc+9a
zUBwP;RcvhEeK}pJ@4os(FE&LKeu2)J>6GW<KV2L9sq&7n8QkX`qQBtllCA~)?K$y6
z{Ut4Xl5-W>I|!vq;x6ZU+1E;#RB7Bj&zG&YRXMn0*q7Q{kiOBx9zmdQ82NprZ=9ob
z9Ni}0hjJ*3Z^hpY$QZ3Xo8ier_y%ll^Zedn8}))Z!{29|imTWf#8uS(Ew(>AB77On
z0tr{zZ=c0G+xK10TIeLuANF)}_D|zAI)ll${65xo&iJ^T@6maZChX<5ap;EFnr$cC
zMB9lFA96mQC`+_`o#!rRbI4DxcEn!}u}SO^ZEB~Th<6TW`6}bxvbhysl8VGPgB#}}
z?nOS1@BiY<INRgG?-P4|n9gqc^DEiIVaz9W&796`VdhMu=1v*<x4u;;c<$u;SH17O
zEZ=_ae3xLdyfG{m*KmgKwD7?hJ(u%&!bNZ<$>QXWBKRmBk%%ote-u9ND4j7JH`fQa
z@uTr7{6&MfG1GInxgd`lGkXv>H@{D~SrOod@fXJp_6NAMI4fd*h_<tUKWBfOq%ZtF
zNMCR?guYFdzC&$?DtJ)mCq+lmPW1B71BcTp$G>k6)0je-@^~GD3A|dE3h??~U@DZi
z?Ehx0%+25DP?)Rrh|Rxh$m#FY1atP#vNO@K#-Lw~OMHv@aA|0S&FN}&&YN>Or}C#;
zJfw4RmNA!HoFmK}a^}s{`?GHU>!qtZ+&FT3&!7CypWTwepO|h7$>+IMv05&9CGv4+
zTe1G<R}y=sSh(yofBw^@ici8$<^P}adq~~&Cf<SE3F;oMX1{S*{p|(y)z4%6fBi{v
zw9sC!@}=;f^?0A?7JM2MALpBwf&UuTo%sH#-t7%9t(fahX1^DkV)E<w5At%b@8+R0
zFlyrsuS!H1xALSKd~HFlROP}8@}*iD%+9TQ!pp0`Q#iI@Ou=|;f04^G!ij<JhzUvd
zGJdVQ!ogaNLohAQ*(bxxS5t0z_>&7V9(%UP>!l|0pW@<SWMEA!bac)<>VLa+QD!`I
zrW~2oD?HJ@Y~dE_OMb6*-PQ<l9^XMtu6&}+8R9GMkhy_Q`tm37VOV~MG$I!#)<o!I
zHT#JVjKYqj-Kl@!FSUKGzdW}#eED+pVr-*44b)GXu~~bDx+&Iv!x+^^Zwv8e4)gC!
zL)#O2<^$I(aD5+bZ->X!hT^bP_FMA!6yj9Ri}D)p3a>S^#o3Hi4)7D#xN0XhN|d(M
zR@8UnzotFW6@Pi{73fO={sqr8>h?aIqlf-a=D+kyiwEKX?fOhz@q_SjD*hS1CZ3cp
z<L&tnjZgF0K~|fzWBtpr^BwH^Gmt6Z$=-pS3Q6zCzt^3!LxcB1Z+h=X3Hf8Sz65Y-
zt(E>I{VLNMhHp!-tw!(VZUg9o-S%_G+MC@|yyWIDGncTDm@8v<EH=qwjPpTkqw+74
zXY<x`mKi=T!mrvtoHW9W?QP{Z?L2pT<+9D?jp{q|)L}ahmtwP0RuPAPGwGI4{I{Vq
z_=FPamT>&VYUTWaH!jTU6r7JqpHB|go7pcrziiOIeO;@!<<C~vZ&|UnVatQ9X3KwH
z?QH2<>+);?&lYaEuC<Y8VV;#x9^(1sJYU4KQl6D<Nw>1skM7*txsY}K?4GlsdwQCe
z)I8(v!MGu21^xuivwJ2|rf2&7qi}Z9QS6=$H}{_QGtN+5zV*%zRKAWpBsY6ovLS!|
z>!H;A0L}+)J_+ZFuP)f~xtkleWGnpng7@1uhqfH6NX-|#-~MXY!YY^rt6-LGW$-~e
zoM$pG{n@h?zBh<75u924tz+=N{0s0_dYKc|srllA40&L+CxC5`$vkV4CoV;<3~%Ey
zC)Y-ulWSu#{wVBe)wgw5HzfP3>&bP6+<h=Lzc)k<to3fZ3Ot=)eAx^A`7wAs{kWIR
zUYMFMxcXaof4oB+TjWdWLk&sQ#kLr%mu;lpk5fhKo&aBIU{&2I%+K18x$@tMP0a%P
zX6EYt^U003)VzFj8agyIP>!u#_xcay=re_LREF{U^E3D5_7VHwrMB_T%Ran%eYO99
zhaK+V|6s3ocbzF2h(_*w;5pYFxXhSN6LLG{PZ1x8&&8)Zf1h1`;QU3Fe_tdg)^CwX
z#D~?0*SjO=@{Zd%8on0Kig$l|CUm;3a@pe-U=v;uTho25xy{s@Yi>l}uJqU=z=zV}
zHe&0S*YpzGX7C9Mf2tp0UdPbSyQ!=BS2c?L^(^~}=nnW12il1t4DuSep7O_<q`N@p
zJo#SCH?dvrCxQLTUTqaIn4W892Xnpe=k-JM_$GWi%yrhUlR0rRtqYI=3-NV5V|}R}
za2fpZRz9t4#AeBz&uaoshraD|`3Pyd(09|G^LK8IuDjg&SFQa)u4IjKcw6;v(^d-q
zgdIcPCnwpcPoch(3gzUWWZTL8w_IK*>`H8vosVjNyoKK{;TMn{s`^^XRLAj^i*@It
z5oqrD#0%uxbJEUUl^gaMR4$%~6qcv*<=C!8%e(XC$j_qXe!e_%it<>#{DM=Id-?K<
zPf;Gpm(M*#xyhHqOGV+!`!)@{RkS>nTXW2(PEnp;lgzcJDEIUAW2Y#O<;!n8MY)$R
z|MDryBl+?*#max0s3W(c=-WrGKCSCf^8E#|*#_Hw1?7F~iT~xf<saswcsMo=dB#3U
zFaB<PZ>`7@<?0%%-xcUhT2~a8R*!$gn0Dg5PsVOnah}Ar^>R8^^aAG^)zduCdmeQZ
z=WWKcPZb~P8S~CQ3;uT({2$^Y$nS9|UY$8(&rucn34Hue^u15MCl_BJI$tt|&qHHd
z$=Le23&hWl5B)6J;ga`dwEPw9GmmC(8h;S;cVo23zCaVcwBh>#I~hxWqeuacZURS9
z@W8oZi$8o0%ke2&{2A(4yfJ?H-=Y!6K2K|J4xBo9oXRIByyz^q@bQ1}?eVQxaXa?B
zym&KyT<hx!@Y7;(a&j-ofS)#epv@b7iyt35W;lNQsn8$%pa-vN0!L~5c&Eb4PT&?^
z40=-Gp2=_+rJDsXDV{2bXV*GF{7X&`V|*)!SAP+Fb(cf0M(NL9<~-zDJKy^!E2l7V
z3c$60vX|(Ece;r;5Pa?Un*_rkoUBtrWVVI#<ep9;e3F$fRG2-__|vT}ieFVRr<td2
zY?*s5pDt6<s{P#-?5H-+yj+j{)XRA4dB;I^X>K?dprZi4<cRqAV1;?<h16xrLAy_F
ztYnX8hY7bvX-D!sXiM_HupEEsatljp`e0qbp}O_?x<l%tGpK&>j;){XSNpMrZHrbx
zzZ!!RF>&n)1#mv&pNtWH%X+lSx_z=<>TUXonfP|z?*}fOTWB%Fg5S7u?w!E>Jh&BH
z8^CQ>9=8r~BzWIr4#BUte4pP2S^7782kWCjcFMnwezA9>zLACBC@3GY{^i$~h}J*o
zB>JeFe%`$P6_(S7T_493$k)Ph`nKg$PEig_w!CotE2v+L=YsJS(zIz9?>Xhf|G|5f
z@5)VX?Sl6-t^j8N9}d9-_4M50fqDTRiox-2`=_m!o`KHKc<hA@<Nad%+g*hJ|5uOU
zbo&?nbXMm@)+Nahja%~Lt#GJ(mc~K0`gvU(y-V^#G$Brsc!Rlv_zS<){LkYrct`V}
z`xy3Y@aEY1Rn+zQ08i_1K1xT>{Z0YH0qFQ$=(xdmh;?QUoB3MJS>F{VWaq14zE<Yv
zYuYpM|DCyK`!%)p{SMwe<@?A3$q)NJa!&2*UDaV9@6GKa4<tVXkKWyoa^iYlFcp2j
zJ10MK@SOYh?Wauqztes<?Yp$k{$70gjm>i#>7y$@-Ui0IA{cMl#5un-xeq)yc(ZN$
z(|Nb>{UP{4-rdRjIxpP|UZeg+=<z>eOEc#W57SpQANAGCTp!ZcjjY`sIl(!bosK|@
zBJ>JkLu}i`c&XjOHlx@pL)!eWv>6M<J+<jMah;`0Z^-EZEv&N#tDQv5ko&fp*f8=j
zDi(>h_eA}3-_&;f@V389+kPmH&bTcdbK;8QJyqKtK1lVixFg$sYR=oYe=F^G=iB$4
zxXx>xvVHC;6bz5&+J7lZPWIurc@z9=Xg`&2zuSp__pRC|A7&aDl=sr&K6TOCx4(||
z)A{yO+}Zh7?X&Nk28Q*y_V+~1+_!Jvr+v=1q}k_6r=9q%Z`D3~%xPd~<()w0{kOMx
zKlOXwr%lCu;J4emi#<}4a`vY5-R<oC8Q;PBMPALlKhpD<vsZWD7|+@J!@}~2v-byj
zZk)Ya^_@0*|F^>Ol-b*(=iO%Sqx$yE-tQHb$IRY`^xQLhyY(G0d%sgqu60jquhu)4
z*f`{dm8}7ML&}%GP5IxxP5HIO%5(QO%Ll3b7UdV&Y~!l%eb|_~oG;Y>yxl9cc>tp5
zyb<QzeV<2{1>W3VbS~~|Fb~(;wRdHa_O5($d(vOc=Xe)B3EGw|C0)D$I6UC!m9Gal
z>OQAE+Z-GL9&P=_@31~`PQ&ZJ*={*$A2k1pcoxBeKixr=HDi}ugwK8Dr}1%o{n{DC
zYgaUw-1*?9Pvh7B`ji>iU$Z*!vB$pBP>U@!J63un@qWsyTs6>)eu*!n#wX`h415z?
zl)V1(oV;s##!JdJ+)T_zU?0l%*?cTJOLoTQyd5Wd)zMyR5!*0|?Kj*uY@yvJIhzvO
z<t0my>mG8wnLf3DP7KhJ1>U)xO~zEzFK(Laa0ai^gl+u#^><8}Asov#H1dy|@7~g<
z-vwv)#lzVUzKvnAfA$^VJB*KSBJXeihT@-3;xXWTeQWQp3m-bXSrcJ@ycsxM?!t_H
z4gRD~H8xih@M;~<JGcG{Tbg%n<=q&+RsWkoeSBy^-`Lf*KJ>}$rxQ<i7+)s)59BV(
z$JK=#8{b6Uqt;(yzck&evse>aAI4|bbW20+<`Ofzg}$-Rm#}VK0}m|K`W5pco!UPY
zj5eMy59h7Bh<(k&D%hHUQ$C0E(JV1vcQ2iQ4I#VP(jNaQykPChYT-uf8tXnjfVjq*
z#!uOu$>!!Ge4+WM@#{J54VkA;(q<d|DW+#8FzWZuhS5rL?XP(j%(1tX2cIo6e~G^o
zPrNI6a8;4^u6lEOc0OPG4(Bs5i^J!$t^dh)Sf9Ae;q?P~Y;N=@%lk9If1y9q+ENSN
zru@IYP5J56ALdVeQ~$-v(SHQL&iZVy@P`Nev4!<dS&n{V*DUHc*!phK`jXW}%h6xn
zQ~&5EsxKK3wf#Fq`#)v5pQ|sQQj4vB(jQ$o{$l0WQCo-mVBX4xdMi8FwpGN363zQi
zT97C5<)riWQ=$JP(1nDDR4C^w81$u=pVEf@z+o?DKL`G!LilBm$_AGmD*Oe$r=s=q
z{-fX>*^eKJ@tbo8;Sa`E6#oC8esA(0{=c1m0sj{BAq}6usrP|@rHk&DJ}eyz{fQh7
zgZ^pBDcyOfxr7#$^zYF*l91Ia8@S(9>+(bBc|JO`-u(hHPk!qDWyHduJIGJnN9<}l
zYX$e|cD9c(nO(epJ+=U`l1Xd=;uQ0G<uIRh?=YWrl)l=zuT%Mg3-!Umvowm)coq2j
z$eGhfA8oYX%pQl}Y?;KK4`+><(O1*t(m@X;uATFa^rIX*v8lk0ol?(Uag4l1=uiVq
z*!MB^2>KsqABj4W`{y!7#nN^&zFwX!r=ND$BtJp^l(vqY^Zvc8{Hhaoow(|bj`n#u
zoh27fsCJakN4V7bwGf;%jk9M|mZ~k~_UXpoaLDRQ`Fn5J6G1;+u6==&^mz83B8(-5
zP8Y~$cS3Ftr`|dG55%u$G;VZjJLbW6fLZ%IM`$~ySOV(5Wc$g*wOX2^7Z&1eJ#{qZ
zHf)Fv){ScNJgaZtH?{r-uNIqQ_Cor42pkK)<FQec=SaBx8vLMVmt$Y0#6#e(OuRvS
zc{)_ulh$~NDOdaIr-i$g$#0bj+6!_ab?1HH$AGm^e-HE}_V7MX{Ag|rw==|F!CbNP
z13OJL70>AZO2$)YO9lMVGO|9=L{6usk;cY~i|@4WHpu_j4pr0-&PXsf-egw|<@=L7
zl72fL0VdJkap95j0v?&rkPz(R6Y-?ZF)V;D@e?h52_Dy8x(h8;SMx65o!?pBIq72%
z-<eUlya-Vf>TG}~U&7W4_Tt}8w`qsJTJk!{ko~3n-a}M-OvFctr&1xizqCjDHpOJ5
zQ_xnR9~7?dgZn+6`?mW-I!7^lJrN&@|B8(%;L$?8ZF2!U`F*Fo@`Y*-BT~4x@-D_#
zZ2#ai#<%ya#y6<*<zb9y{|Fd`e~sV4=VW!-yiRB+j}(-vO!Kq*?RYaUzjh+OTzGE<
zayJI=S59DU;QrmB@{ISylaiGIPyU|Y0safugb8V9uhs>>gS*y{zZ0>k|GI;7s>o8s
zHY)bJP)@h&Zs6F3#F29+Oe7qSbxb)LiG||+*G(dl4#%s=yW@Y|Nksh8cvY;7-)<rj
zDJSN<oZq2DBsC&l<&WfdI1!0e(8ef!mr!?9ysG<*cr-Se|D}ocPY|zt<(uu(7`D8R
zT(vd^b1#Cdj5QQ__K70TK3?S6>>|%DDe~;2MV?g^d3Mg5pEa?z`T1N3_y7HgO)l}U
zinUhUrBmha^B6-hTo0jB>OIoQJ?n#`(^YRC^M{Id=M{mk2<;T_5zwjT-O{Q1J<_S;
z1EkZ^B6#>P(XOTld_`#2gf0=#DfRt#KA(!pKmR?_%bohc%`1G`Z<2K%CK?u#iA8AG
zgl!SfYx!x=Yl!@dy+=BAe1LQ+;+Ktmm}vJ7*Rv*Uyns%>>v`w%Y6zXY_edvq+6OnE
z*xz~6eEKla?j7nPP0}&)`h<TPbSf(UBJYu29UmaQnv2lu!$iY(s82RY*T~ar!fDWJ
z$h<P|kxuT}AKbk9LJ>NBm}vKjBJdTVU6XW;Je_(H?^6D;r}y6MsSl7&Hx<FdhlzF#
zMc^w!yC&%vc{+KgL8qefFLm1V+B3xdbwBdK&8sgJ!N-S*hL;zCuLupBq$i%K{6=TR
z|M^inuk2al)3SfN-y@wmK0rF%QUnhlCfZ$D1im7)Ym%Orr_)XEmQMbAq?3Ej2REO-
zQUnhlCfZ$91im7)Ym%Orr;|AiIu(_FvG+)?jt`Jtw->?3hlz$ui@;ZehE38n^7Oj@
z@7|^S^WGz!+{zDbUfody4<9DleYyyIMQGO~T_aDYns-a5$a|zy#|KEKjv{#YFwyR_
zMc^w!yC&%vc{-)O_s-{2ApaB_RHeNa_EE_1t-M7w&4XuNex}?5HW!WV?#5Sdbrt#O
z`zjURv+Gg4uYI1kZ71~3+6e&<`+L`ffT6|iyM%1}c8`g(0E~5yVb8_xCq>STdxqSI
z+CyglSo<LT#2)k!hY-#0hx8FE&`<n;;z^xS_S5rY(0dw(%5vk#^>bSNr%$tg?wxpF
z`%jHIz44d4&;65Y*y5i(w)YGFgLXdow8yibsQXjLvsd`I<pu6_D>y?do(TBC@yBs*
z-S{{$83}JA`6QuplsuctU*KK9Ug0q}vEo>W7!&qV#lPf2@PHe>AF_X@=i-%sPR^OZ
zp48C3gZVQEFY)FRkazcu%fU=O<dZOSwmyhcQ2b{Ab1$&CdAO_m%A<ZMuzi{QrobGT
z?q%xMxrw@UA?5q9V-eiM!ek=s(fh;T4&b$RL?O%teP=`Ay>+9Ut89D3@05@O;`rLp
z+?N!JA6l!tVs4M(3i@ugu_pU^8+G@m(^I$3Y^hu4YzZ&$o@h4YTsGk=n-`cTDou&a
zC2iQlbCn+ve5Tt<5;1c96y6bL^Jg@2mmBd9*-C$Y<Etlfd47mvc<~T9K^dRoiH7Ib
zQC!2JwThFxDgo>^7TUf$J(u@JG&sICcVDyOh2?9=<;Hc$jqBDZpUDwoFtjhM_@3>=
zwNIh1Dcq+=GIN`QM)BF_zsmiIrNnmM>)F_C&PBJT*o#(db%QZWR+x#c%6Gqf<6lqx
zQ$E|>vzF-I+UMK}or<+K<f_?3A8FSk?%=EnVk~SsYOgkADsJ0ll64{O+Gc;hSlqZ`
zvEjp+K|J;ay!R(>WM^fnbFnenb5`Ct<)#bnh*p{6s1^63a-IJy_D-?70q^RYoYi~(
zhmFz5-S;{e-&1!oE=qAXhIon&_TM>2Ho&}Fp633K2E}*rU-2n@yx%c}yBgpZAKq<Z
z&s}j*zW|SSN4(4oLvB!K#6Tne4^r2d@=l#Q=nIwAaOQ5{ZpOTbe7D4t>{DL>jEeL5
zJ7`C&OQ+&~g8YI$yr%XY+EYwf{~=<MXjf~%`M|6Aq27Y{A@!-g)^Dg!C?24FjL9g^
zqw4C;0mZf`u4NJJs!a72+mdF^y}+DP3{r}it2A{&oPBQz>yEk7p7yhuFZVgLIim9*
zd7lq(rXVKya-V3z`2=G650V2~IMmrct+6HyKHZb&N%||C#OG({a((uXC-w(<N8Nq!
z|E!qBeYlf3MSo%9?Q-W!^t{c!=jO}Yo>XYXb3yw$E78o@Vqrs^gc<Olk;-FpbNOym
zUuAk0#N0RO88qfh!fwG-3rzjU+t^&opR=@<#-OqCdd8-hOwdLE)1WMr>}DOevYU1M
zEoAprt>wm>kXuKP(<#X{<rd&>@FB9AvDh-nC*@S+e?)jbDX%vwj=&jJTwcFx*dh~i
zu)))(gpGBIoCN=w^5qtGa$yz1o?lOL@SSlg_<mx~VFkIEbO*QO*U<v`#aWe&+s7>=
zFP&R6ncqkL=b}srv2<z9dKlz#rE<YDkAge3#eX^nBDt78k^P5j!R`2v<t-~SPRfg?
zZ2Wdxsd=oId{~v7=ZO$|$y#OaHFV5lR<=Y^{?wcd%Do@N-2Df9ZSxV>+z%(mkvq>t
z4BSQecpAZf%R=s$B{u;%HRxmcGGL0icK$8R<yOqyXCKUS<o!nTkBi{By61?QOSS=9
zHM!1p@4W%8P-^{D?q}HMe^hyJl#hm7K*%C{{)Kk?nfHo8tEQ|48L4{W`G=94+<kG2
zV$}pYiD8JL%bi7I9pj!wt%u}}rT>;MFSK)7FsGq$0JHF$(?{}Wz6xNq^Z-^bz$5cW
zc+^}G9tA^$`ijrg?*NyDu}PAFil1V2wEFI!E#iI(&TOgQAYQW&KS7`Hp{1SPQJ+D7
zK_41(AYX0!8*}Y1{6N~rhTt5q^mTNUjSYtUXco7~LHNRhuHv^|?u=>rdZ@M?{JtGd
zp+Sx}i{LaE;~(>5RDRnR;QxcnCu=j@-B|07G_!Aj?@}|-SFj%*LKdgOS0>6L_wFm(
z^}|;dnba%X^VNC76W`facIWqBi5_cs_TV-D`pVy(bKsTex}QH-wukq|ciZPCT=rn4
zx#2tK@X40N+H{ZO3S*8xY};I%aB0(}%?8`1+u2N;ZobVv+I+~ix$8lfHr>HC-8Z!f
z-yi?3ZS#uvt<5gld|Gk0i#gNA8M?-C%%4#c#?_7SRypJajE?D;O5F2JRmNOWPyQO>
z+?aD?FX?7I&hcPQ4y2&tPH23f!c7D;excGy^p6iE0{XsCSx^44uBitq8hFlK2zQ5S
zb%(=S^Y2qd`B&%s0{%7lg6`tK<h$$v>8k;q>wzidm^u3PfU)l`*7Q6NV*lB*o8rB`
zyK=C3z=S=R+00qI2<u!-wk7L(jCC@?njIsDS{OV<CXjO*T*V?LSqgn4$cs{Fd^t28
zioXruujHob;O~0q-VP2+puO;T0NM+evFRrH2s{vm{`Ka{L>L}0@LSZBcA9lhKd9dk
z6Mir@0a(J^-^G7JS(GySJ51TdhI4#3d`C2?FTWxoK5WRh(ZGB5cX{~1Pl!jSeP?v^
zSnS!RdF00RLdOET<gMxOWKlZU`1+XHyV>HOc^*5(JRdb|o{xNg=XsfQ0@j8G?o!cR
zFy-ikFC27!u%Fx!((BH<wEvZsa`N4Cm*+wg`o7D$)4|;<{p1`E>ihz^(`HHse#!cm
zCa06)-X)hen6lj)jy2r3k~=dDI!y<$tIY4#e%=e#3(lmrrZ|(CzINpk;jnX!>zlD%
zHzNBl_NP|<y|W72V)<hFti0P<l_Kw3<+q(xJ6Ugbj504L$hY5NQu|WeA792=Ub)R#
z)eHPPj@7+9f-=|a+ULV_JJ7SMc>YKv^*}^-!f-!{p-tu@Ya#g(COe5)OUO?+xjxY?
z9_0?ybK%>%FnQ<fdXZbBg0TfU+m2)AW!)jFHg~M!H*2`o(T2#=Q+4l-4_+eJMzMUG
zRp@idgW#5@_bEr!e(r)I=gvSm=SzTXs)dbutb5DT0c^;7^y1_hf)AOEPMi$d<1Wyo
za<!-1)DCyVac_*^l}-U1`+(yCjkOmzsu<5d@?5ymxnCccbl1xu4$xU&y;6Og#DVJU
z;GKL<iA*1G4A^(z8Q}O8WkYkIvo0~`CtTZvJ&uk^{(Qv(a}RV)yUYK)t`}i^y_Gg5
ze`6GVFTy(Jg}E=0yo<m;E`n~(JdeM$m^GVrfN_YQp{tbh*yqUCFtH|fZS1I1zHkP#
z`p+r&VkLcdT*Uo!{P+3ad~Ng5`U{xj+_x(oiFoJZv9EZ_O?XZ0D<}22Vmecx6Zm;O
zMD?W;$S#y#5Y%bD!zA~Ei>BL6@&$|2yRAMZyHa*ip`HCI{1)6nBOO(?bf!R0#m3$^
z<uY=3qo+=UhLg*?_m#ri9=R^=*WFTlR=Z{(1wW_8q0_madb#=DP2_Hz&?8$qbt3!2
zotG$Xdt&F#OHAfZ!QCwMR&=|i;NUUwmh4|>YW35TdhF9yj|HdpZuLT$hF!?nY4UV|
z2i42j){oudq{zz#F7#}8JHeTD@mk^d10O?9KUWUrP>*mB_!+F8{_)GLo_-d%sQss$
zo*rRrmLBNoO^iLz(<6+lP)|3^5o5-88s^Ps82ceNM`OWU%$}FtuDgV^mVq0q8|mFb
zIu9RPpeJcAO9#Yf`clJx<?ea(H0i%uw`16!fu5OGZuz_(9`ID^9q5_a#y6k8e-(V$
z_VD=}X$fQFINXtS^87t_vepE+oI|dH!`Fop&A;-J58)qZ8F%fBrpq}qJlf290bQPa
z#__N0;!OIzvhOGM*mcu{mZUkqo?^c4xmb2J_oVNVzrv|#-i2+z-5bUHFz638&G=Me
zyz6p)ADKSu@O6#Wjwjzk(VPZN+yfGv*FVy-fV{c6Gy7U2E<lzl&q9_w%7^dmn0kZ{
zI6IkhfxA++S7B3C`44b*?j`vY`a+X?G`<*l5u%(gQ$E?4Xz{gcXBacFf;q7y_O&T9
z6jN!;<j&ZqP3BeZ=lE-QM6muEdTJc<DfRL@mova^ZDb8<B4<E*shO?z1O2IPabzxX
z#I9+q<3s#Y!j*+Z{nMUsh`$G47<qCs*;&fnpmO~5vr3ug<Vl#kADZ-Yx3g#?nR_m}
z$_C>s=^%$g)#B#4E`ABg`F8rUb;;upryh5Iwg$9}!powm+H9fxFDcj9)V}yON0Y6$
zD4&deYySK#zb#MU8x+47VAdFoZ}zUBY|#GC`w0b`@*_6EBUOewGhXFRG1hSDj{$D<
z-GHsxjIN+^;fI`TyIar)bbhVHIXXvoef`7q>?XA%-)kSf9?j7Pa4Ov@TJCmUJv}@5
z`jK8T%y?X2eHwg?KpyIy4P#84wY@ckOsl?e<r6LFFm32C7tj~yBQxCvZF5G_&VTM@
z?o`{gw7X#49nZeT_|)$IWyg6kpUQ*_yyX4(&nK{UY_n_e1S>CtwO@V#e9;@_gK;90
z;%;~T4uRN|xXZoACVf^sHqK;NYcfqEokT3Z$I{GxW;Ob7ZwY=H!(Gz&;gq+%9llVW
znt?yK_s8<FId<OQ%hCE6YtH$thdje>N2dR0pY`27&#$Fc9@%pt+?7xn_)LbvuX&-h
zDxj@Bvje^5LwUR==YM*<#w1agXXbnh`0$}kp!3Q<F=YIVyPcQ|2Rv-%43Cq?!R8Jp
z(G3oQ@jp~_{1baN=g0qj#_#9%?+VB2=l5BMJRALX<DWP<{$gVg4sz?$Pp$vR;sBle
zJ>h^jhWCntn}mbUznR`Xatm5-8-jyL9{>)#_lN^x1l}tSW(WsGc)loaobv(TAo3n@
z!2bJt#legJ0S>-UgyzL~<Gl9=2Zi!G=NE8mq}K#~r-zYaZ3dkRznc62T??|Cq*pS(
zm&^W-sSJ5qxYww6|2qF(6xnRongV^O1^J+Mn`Db37aRPl_;h|ZAuGCadnPs7|52MU
zWTa$J(;wXl(%DR2XA69F@^9d$w08kL&+kB2Q;yqg$fa&c;y8N7;mfRD(qrcmx)keJ
zrjH!?tOew*H}SFmablD57NZNrcb57~*?rs8_iXNedxgLB*wO5!?ArP*b}ZE2al6^l
zM_zU5VuN{!kjsZJ(;nPH_TXH*2WQ`BojtUy)ULDHC*8d^c0f8J?Hpe_l08M29H#7>
zT&??@wKvE*!`@1|%}IFNNik%9u#r4Tjobmky~Ph9tGR=`hCULtz@I+TOEh(x_%3oN
z1#tFV{bm@CuT>r^e<`pGfl+$E2L+$-YvJ=v{DJoXU*Jaw_|p&8Wb8*b#+}mkUY~H>
z<xHv8VTW_2E@w)cM!NW1%2=z*`OQ8t=Sp49ls1hFle2Xsbu0K?!a6pJx}*4Ans7K*
zYB*Qg<d!9*14|Z*-obuKtfR=Y|5b4@c^NSTzWlmc_{{34iVGp8Hv8Y93A%{GS<=9d
z{1SXQhWnXx##}kxqso=#quW}Y$g%qY0S&O}li!Ax*zrl}NwN!5q1-v<mFyi$j(nrM
zF*%yO<PG5U524XDe-$zD3V3`JI^ECl|Gap%8Fv@o2l>vfG^>7ztyg(H-{=ReCFIj_
zMh_T%|NU*PM>mv^2Y`FtM?wScmf!c6XPnf{CC3(g@%p*v@#!+9tx<BgEI=Q9g!AvO
zBMa2#U-E1N{-)>6bX%@6opoj|j0<eHXXKAE=e0(;pHStp`TP;uKQkFWDqD|y9dWN#
z@5hX(O@}J%nAQJHjQPswDB=WiXZV+lXh<%>CX>%?fcLJfFOQe!$G(y=-^rNe1KYrN
z7h@m6*mvlg@s>08N~dDL<JlFr-FQ@T>O9~`lhgA_KKPnjdl?VqGtrIh7*+QQ>;d%n
zv27+|%T<;i<KR9>3+0ujy0w=vs$64?fLo1G<C2Y#qvKB#*E6O^pq*$bTOQv|PhC0p
z7%-+f#{a$Yh9r9iGhYam);!{s$3ws=eM<I17#g?G{`2Gm!Jo1G@ii?+SC&e~n}K@P
zg_tY5tnNA8&+7+s3tc(FGoP}-XZih0ornG#*JR|gxbvLsCh4b=W3tx+J+;^~(MBKn
zuEdw(MU7_zyqJSE)N>zxrJV1|?b%5Vju>#lcbEdikpN%wy<Y7u?oDj2!u|;p1BU&R
z0%jLHGyroN|CXnB@oD+g9V`QO`M!d(81=C$GyWuO(7`kExxIlHV~)Y!g?)A$E1Nyo
z*06rMd4I5MSU;P=)A05O-yPPD{}%1E7is4P)~DYwuYU*KqwwxQ@cCkBWX(bFIm5uy
z@PKH)0oqqO;el>=_`sT#N52P*m8R6v{*ftOqRug^9x-2g;A!?G#dB>Da~r<<<O(O;
zI)e3I^GJ7BidNXYn?&nip6Yihv|{jX#2kHd^R5z~k@#&3ZE&COD$Su$_!oME`v)fE
ze6HLpzbf!sMJIGkEdl0A_BRdh>yB)PXOd|_pY7Pw%D-RuEL!B*&U_C4!uO14u2ElV
zUu{IEcTJVAFyKvnXUU7AoI$MJdvdygi*At1D~R5LuEAYTX|FcMy{i5^FPTCY65jl@
zsTDqWXOGP#IV|T-JGeN$_GF%VpSXqn#20l$yk!5fT>Iw|&(O}N8y?<ItWgI%;<NAJ
z>pA;74aV%Yu^>}Srk6NCmz*p9-PnD^c{tFyJ#3iEUafR63qLxK__%O<fn0R&@wihq
zG?11Z%XmHNTe(9U9&L!O`ma2^h4l;XWYfKCuNUAdxR31!ceTB-dVJ#Aid=k4FY#Hz
z+j9I`_=jr#^&@6xC~Wq2xS>wn3C<ljJsWN!AO92L1+zR34^$spF}IEX{xq|^%jFIk
zWEH;Iaa}**o_FrS{j`~|#NwKJDh;qJr)Y$+9swT7Y2Ceav}NRs_M4jL_TE%AS27lV
z$SiVzBGYpB!N{MmtJI8*LAUfG_Lp2!tJtX;?(pS4u9_Y0l-AH>-AC?pru&go$dD|$
z-=dG8+m&58;}CM@XruMhwsud#KZ-7THa-&d(T~2`h_6b0tyny7?y+U~*MU!Zr~0$7
z<7W_0wIRb_ZE>t_KiNFGG(E>8XY<Y*@Y31~7cyVZZf(>Z_weUocM?~1XnbB~`yI}*
zW0xB44L*54oO@%_+~)k9(GM}+^us1z&s?~&N_#Ef|I)xuH?ii=rske0uBjKgq-jg<
z*YR#&{#|&ExTlkM&^6r@n_GXQ^}$(usy+F^u}7{pW=e(H=(@vf>AHh^t?qF7gtq7&
zrx?EEG`U=V2)?uKq*i_}PtWm^$CknWlxvJt?4<~I+*eg&pjSWsWQ#Lw5PWSt>#ZHG
z@=#9>mlJyqV-FnzUq6CR>*1L?_#^ViEIi{{p5adFabKbA2=r9HO{}-Q)x`F3zup<5
zBj3W0%b4roPY<4rT0iEbnu*{?&x9YZ0{^6N#QR60*-Z`kci#>_!i(Cpdj;S}?PS;A
zIj`#kI6482PPkh<+Uh#TpZ_ZKzMp$rg{w;JEaC02?%HMCJ~1fL6YV#&AAFXVQ^R8s
zkp;+`tB~Cj@gZGJJl>~>$Ge96(oWv<mtu||hA*>M&YG*ac{zBR#k@M7?<txS;3<4I
zID$r3@J#dXHQKA<w|r6J!GMoNk3eP)hou`?UMP=jUB>2HdLl3L{<g;p{%fqZP5MY5
z%WjvPR=x4r?DjYKZTl^_hg5UXmY>LOm#!7~*rZ!%p2uYC;Ww226!;Fm@&oRZm90|X
zKa{<47@TfDr!ga6BD_DY%`KVn{5a%0vE^-_$HxgR)E9Q)o?Dwurt*me$5lq&+hp4p
z%yE_1>)v|w)YwhzX;R+SN7;$diMB79<I<0Y=u5Pv{iXnyf>*v-JAUFgZ~X-G6qurR
zyg9r`|Cij>x{RG_eUcH@THediB=48x*{ojHB8?-G-{U({AFSi~Jy!8hfp0*(m%`Sd
zeb(Jwr`$__M{8w@wK8nxw43_Gdh|5-GSPuuEx)wZKVmXFJBVMD4ySc+A!}U+e&BBS
zN&RabgnwrFlxxkalm9{M9_y6iGyD|#KXb(52V1^>___=46|TGBVd-J<5A)DRuGxCr
z5hh%-*PC>p*{RxsUx)B9dmwvSxF2jM_OI5QXsR?Gqn%t1=bYYfi1<oNPvIE&TF~=k
z3(|*O6Pw53b8(5GEHw$?MEGci?*e=*03XfxhJD)gm7|&Zg?Nae#|H2UAF*9Id=$gO
zA!0i%E<(9IAK{m}x$zd<lLo)MFL-dFy?C_QHFE-c6*-W3LiQ?jO0%~V0T(W^zRKiu
zm%!H_nd#ZP>>@K+lPaZi=3~}|Jx_&(>Yus&yFBifh3wqd{%;_g4qq2euqNy)qyaX~
z;QfpqG+-VNd{H^8cX_qXvG)u7nR@IF_JVg0(h9mM?zEZM(o@k(`0ZxRYl3FF=Unru
ziuh~MsTsP7R_&}uh3j_!r(#zHW8l|{=Jm%k^5D?2M&!rIy}PKH(5cw&Cg4==L(%k2
zy!}4Wv{0@Jui|Y7n}R&w1CKJ-3_7c9IN;qr5t-<W@%OPevZvuE4c7i*-QU)N4Jp1w
zk6HSV8`^C~g*xqAx@SSAfqNn~hyHwI&UU(=d(>BB%f)WG^(g$Zt#ChN7V$CB->-Yt
z-eW-@(SMcCq<de4`YG(0*iAE!7QQcAEXWNhxtX&&SyTL_GukgFKAF7btM66r&yJ<5
zubMEft<+n!n*Gjpt-tKoR+{mxF=Q-j$yWJp(&!%F{1*Nj)-v{!YVPB=e>wZOyno-l
zd7o^-{!I!!LvcD<zk>M?_|PhEb!#ivjZ9R=SWkXols^=EjBziO4n*wMSKM0pzr+(!
zWP--%BclVKk>-Kc%;5je-$5T{!#i*9aoQ7~{@?7qdwiVLdGEX48QpvVY)dw_?4TLh
z0W9(f6nsGmpjVOs6H)@Qcglh6Xe2p_6ZfQXY>2r8jcfvGwcA)g;>5{`N00_aZCbb3
z2}--;u}RXTe7cXZ!KCfkJ0r>F<}|^vjWq@{=lfglyQI-r0z;C$^GE-f&&<4+wVw5?
zXFd1ztU|aeiCNSv65Ny0H8)ERGUmI_yv=VG!B~m^zvd(8!;DpX1!`WOlolT1jJXXw
z#KA)w_e}E4`}jf#w_9Vff7(Tl;hwB!e3r}bS&}!KZjP1oEX$Vgo7#N%ESKT4j82QB
zn-k?d%kWu7r$y7v_$-&<vy4tFNjKxOT!zmwI<1s<r}FMpewU@2@mV(Evy4`hr<>SY
zB0H)kiA{ZQ*{MiLs-<Qb{GGEWYL=T*(ht4QfI~a~rQfM}y^K%!cQl{HX92L@>a^#D
z^}Ss-rsBp!%y}*N(K*PHLFk!v#M687<P)5DEx+YBdL6p6;#b?_d#?#-=^Aty{Eea^
zJulx6`tz1g4&}Eb;8oDo4ohdOYdv#&L^=;RXKl;xqiY#xvG}=X?+c&fJ@*{^EZ8f9
z99Nqo{LISbz;~qc<rEiZyw(?P<t6<*vO)gp@!!t|vUs}*ZCs60@BNzjwqq^OmE7Fx
z`*isb>4QIQZvvmqzy}|)dn+ssJB?!aoTcFBa0sD;I~)YMSz;VqWf|vs@KubPENz^2
z&5f;y*Y9R*lGD;v#Oqy-hQ$TrJx=b9VGb;w=<oBw6LbEDh4?CJQ}3{rq#tfC)FWM+
zYESq<X7w5H0H538*1B{N-Wzj%2znU0L?Dwh(NP(kk4B02l;Jb+dU9(fJO6;CfrH&9
zJpj)<x}rQ?#n_JDT9JMgTkb^1B>V+a(sQ{skB{hN;9?{BurJ%}_2f5sY1ty2Yn!w1
z{-nwJ`tsQLv(AFHFTe-KTxfsIpJJ~sI@>Jy$hl@wC2ehs&RwH%e_wv3=)5&CZ2Q-+
z<NW*m+==Miy2fk$+?S(suh$sk<fo`cEO|L~N$>$7)MaL|2g}TzvJ2S|!LNH+m08@l
zuBpDQ(k$^G^!w2j)*3VS`r1nW&g1uQtA30#*41VMHvc!u@$u3peutInPwlIpYiu8L
z>N51v5H)MM&I(}40oP!3P9I5EJ2W1ROSWf?nR7U@`D<IV*ul_cPVL{b&^%<On#F_A
zm7bGdXaIcR@9KN}9P)rF%o6o&&M_-};LV(4mY8yLQ;nIsCNkNqyem5U`fu<V!fqPG
z-u7wJGjqBVz$6+r<ZcryvTdWAJ(VSIvelTw*CGFgxG#DbK%Y!7o<aI7K_<BvpkHnl
z9|MOUKAPY8jAxd-K6!L58jt14Bb!GaR8?ILUN+2c<urbUG4BrNu$??o;a1}`X5RJL
ziwu1<rQ`k;-Cw-GJOtg>WiRq`jXd*>sJSRcjw-TyZ8F+;=P_&n&AE3Zzj9rLS-i5s
zEdA;ys%NM_(Zi$k#d#<<wStE|j3vawn%yUWi*fCFEx$v$*AU~aHIb*}Ba>dE@x1zr
z{LX*leHY)fYYDzFbn)2w#slb%r|!BYeRRdO@U`XG-Pd7ve*hZ49v&C9JnpS<7(11>
zIMiOZ4ZwelGm(|kc|2FXRAU*2c6A1nc!bUrMfTSz-kJ+>E4;4dzjTKKd<XB$tNR4M
zU*q0U+Fze9U#hkpZt#1{Z#cqJi}OrJ^C(N$uUOhws6U)wZITBU$OiP16VS$}og4Vp
zrJwYkLdIZ|9)!OSq01_NOui94ulur#1D)-MkNpSdK4n6k$?Y={Z!(rQ1%Bp2IpuuB
z;zt3W_lP@7&x;TXu|8ePha@)@LpcFYwEPFSEzd!Qisy8~+w9yTFAaO3W2_1B+JtO4
z?f+sQHUD#oNT{1l#<oXaT?t%CXgH9Qp^QM+E#~{{@6lernKsw^wvVz0fjQE9CGdsY
zs<nozY%Cp^>ymcw(CKa1d4l#tvxRcC7g{|rU$`7Sm&eLh_^9x*ADBDO4(tRgKad+k
zP55}6EGlXb*k$vM(1gWHfoyd$!s*fzo`=Qwit+Fuuvned>d1jCasFv+ivHdB)-7Kq
z{@Fy1G4i>;a}nng!%qjy@KS#odFAA8cL5{6``!GrCPre3uDuBD)ga%RXfp~8HPL1V
zdCDDX({PS4ZK^iFcx~uC_i^?QZG?NSyuKmksPnIhDPW^9_x)}B_sAKD$KKnM#TI&G
z7XDOhj}&`5>~){((A@vSb>wZGA%4?_EesE<*Ln?f_@K7F{zGT=il4eRhvs7wBS-&S
z?P7ZjaejN|jq;_PJAgs)NMJ~vA|@ah!oD^Z^yQr@U!oi=`ETM^m>K9i+dH5ocXsb8
z@N*FUt{4*IyhHejL01hc;j#LDk6D|*zqkopf@}G*tv*`pbMVOFEcCrdx6ru1+K}I(
zaY<L}Wd3#ov*z1BZJz+TS-DAH#PiU(-6!C)PeAXsvQMC~gmtPmV#EUB<(<Hlg%&#4
zi!56~eJu_9QqI1ambs$_8+-s6k<)+l*@0H};j)(h3_VY>G?^=3GSKSVvlt5Lesul=
zzB6BV0rm`YJ|7#u6!^bDo}}>MXs8T4?uJg{8FN#^g5dn)1(!Y8G88RC$4a&=xa^V7
znhG<;Y^YfgGv=Z}U~eOL(>?!1#-zO(FQIpg?t|EEbH=r|1Ae_YX7OhF2N_R?DYLnr
zyNFA7@ea7^mrQW5>l<AP{VbY3^`v6SrSL)1r@fnQ{U2RXV&lf*Dbm$Kepqkkm{^PU
z7#i$)@kE`C+B+FIgzF3NBhz0d;@>d<f7iOqpx4weH~1Y_)-X58v+)m{gUw0|@F;e$
zZ4=+G&P-K%OVQC{iqXIuvmK`A1!yo2tq;w~Z+Stw2)JyVrhJ?7z6B-TP4kJNYu`%S
zC0*5x?C)>Xecm79`->6c3TK-|?*`v5J+irFAX-tU{WW#K`fl+4$t(Ll+qv0Wn;@>z
z`3(D9^quk68fbPS?>8}L+MDwtbMSn$#Lm}2<_&zb#4EfhaptVicy`V<F=y@J^Q*N!
zOsSnSH_m?=&hK>i)p`|fogIW9k~PwdpI*71%g`6dTS9jhuO^4$aF(?p{mT2iH&?V9
zzdOx7s*mkwuiMrr=WKRGO#i3g57KRvTT0Au1ojGiOZSnltM&3U_cn2FGQaQT+Wg`C
z;v?ZT;Y8OqajvH1Y=${?bHjS?*ZT?j&^)Oh&6VBPG9z<G5}Mb2J*Q`M-@WVRbvJE3
zTNbRf7m%^C4LK8X%L~Yw6nrnsddtF-^sZnkp8tPh{<H8n(LnZB`Ne%a<6zP|+6Q7~
z8TWxlwyxceEjYpZW?QSF2=DYOxwhHakD=debD?citp5bL7ZL1buP$O57q*f!ABPWS
zKUZ_9elLfHn(vORU=PX+axSK`@BI2st`EMSdH|b~)$2`U3UvXdSol~=9r(JWGY_FV
z30B3O2j4IG0Z&IC+5=x1U_8?45AsamxDIlERm9}hpKblOn`PS@YSyS7;@i1)=CBzU
zIwsRM?Imum9j*mevsk0-DXed2FH)q!^t1P)zgSO$_iw&8Lu@h{O*h^B`Ta@S9AFRR
z?$`1=wSVbD>)+Vo<e-bMjE9fMSWDyLgB<iX#RoET1RocL_&|Qv7UF|v#^8hd6X65?
z-pAUZrb;qB9$pH4grj4R6pXzoP26y&{EXA=*hAeD-Wx~OpQfW+5$GtKTeGwg9VLbi
z+W<e5p2B~{FxJGN2PY>|%!~V7LYs$xS2-8x$%}g76$V`;PHs#se5v)4pzS33Pb}1b
zu>Ij7%F`&d@gUAb+@kyot&vZ{kHq)gX94i0Xp_8<o6OCthT%p14WUl840t`-6s*u4
zdtK3)N|32rwp9bebO)nf0B@XU)K4RPAQNppQ1T}2FDPh#_c-nAeYLG`jYsR@0(2w!
zY9(J8UmbFOQCBfefKmEerT`~CcCYr~rN|Xf9f}7-oK#2##aNs0?}hYrVLVg4kPo?D
zH&v7_C%#)+S21aMUBz@h@#S@8pZ8Wc-053$a$5h$3H3iRC&)a5>{GwDh5f4Cm%-z>
z?~gO5zW567e~kB~%V<8eKd0jJ@R#ha89#@H%DV2Wp3Gjy%rbMSvHWIIw>fsteq)yR
zlw&WFBc^@oTjPKI$NLvH`aOgBUHcY#UiZM~{J(GT*aHDP@UQ9dckkY+dLRwt{l+(M
z+=|bE{ThLu0gd&mf1ex^jsHjF8zsR%d3n&!$Hvglp~xuxbU}BbAHgdc63psPaH~(j
z{(+PEMVTu?*q1G|unXqhjMJDz&kL`WFY)l_OLjE^gXBmJxK1LI&5dUIX8sF4&-`HD
zOHos&F)i%r+RFbHd_ij}Hg{E{*I^r%)|HuEGb+pvW=t{<@8f*abJ3gdEf8Zeb1$t)
zd28+bpciUi&O&?d2m8p4qP^tS3!#lWxGua(_T-x*Pq!L##OYDFHRWl1Mbe?HtdR~S
z-ReX~8GFSdeXp&nP^>mLpZMZYo>@n1nRPd!Uwy7*Q#Cqx|MBR#b=iCF*`EmG%f?IY
ztG;n*w{i}2O)^ftTJ&t-uI|3=J~OO+EHkk?9gW8EXE&IdCmN{FB!5^Jbon~ZRHMsx
zutsN~V<~4RhOX<~eCKd$bmrj%I!NqZ|B2+C?|XvWi$3yBHsAG6%W{8n1+)ju_;Y%`
z(X4jaBZgi{F3R+u;UDs7L%QI@e6s9i9e^k2BhfW!<Y4la`A;10Fg>m<$@E0ae8qYC
zze>9rgY*E&NnJZHymp8-<qsGHX7Q=OuT*O7VRTi+E3IsI@$qMnZR=-Lb$3Rp4yWLQ
z4>g&mb#F55>6*sBn`aa!!q2<8>DV>7I5~2Pqxr}+H)q9qSsU~l=w-^E2=uZO9oOK;
zxfVapa(uEu-nIu`Uxp^!I28+O6JEf*?uk|l^^A$0Qyr74b#H7D&SvnfJSO1>n&^A(
z{WktTGVWo<G5f9{X6?p*f-!eS&OJN;+{wtSr#$n<1Ms=0-I&dd-q*ck>#)WxTnGnt
z{6+Bgp2W5mj;)O!`1)ldWEo@j?A8r6^T-QEuk<cNCSf}^{EU288^gr*<U5O=$Ju>5
z$e(}OkjL`xyys|B--UX^BIf>Rv_kQW&2jXhV4te;P(wY2yr{;hW^*DE_z9Fpp<EsI
zkDi)^PS_^B20bTk^L47~7ETYY$!D5C?~!e-T)!8=3Ar_!ANuE}+)VZroW&Z@yV3<>
z#Gdg5Oi!}D5?q@}pTvWeb3MI{HpGu!L{=rV?+KpLC|eBLys9$4MKwG2L?X}<`P=ZP
zuSrkk_ozM<*zoc_sqJKuZaRwRz*i*v$Ud`kX6^A3_DFg7uS&7W6#FrK&8&$b^3bB-
z=$=;s|3M0w<mg!bT<Ih3tThi`>Z!Yyp&MxL@u+R_;v?kD;Uf~fFJfnHMb0G7^K;Rg
ziL;_dugZ{5h|E3sC6oS#+4(I8zhuulwE1HlK`vsq0fx5KWAnlEj&j171DgwGW22hi
zFDmvF<aETa4|P4kK2YUhxHWC>!*5h~%8n<@Nr6{NXIk4E=D(|sj`l$d|1Nh_c8j$E
zXtx;84mZ?*9AkU&+?cgFIv*~_X0%pYRTe)Y_!o_KK_6XH@Nu%2{Cnh+l26cL*JQ)B
z&`+}ETx{Finv!&mao4wAom&9C3D4{c-9j8;?amp=>LhJ!f+iy9*G;U`J6E?4H)0P#
zvpYP=Rz9uRN<ZiM12eW%CpIL8ORBD3xQ)GsDg4VHM|b-Xd+v8>FCzaxhAjTpg~sl=
zS6jt<?%&55hh5O~ZuGOnpEcD(-!~;*D_<(Oe(|gP7WuV(YziM5jj?WhU=bd{{m5Pm
zkD7UsMOxRwf!a`;UHFoBLW8Qclv^WO6VG%xPCt4qgFg2$_UjAQ-SC%H?Ae!3dI|3w
zkIsSyXHxqvc(?dHcRfM<fGqM$_#LnPoy@~b`4njPBzV8&=+(Jb`9ARB=9~|_8P+$O
zDOz6TnO=>RYtQmu*N=0}^&?%w*?pSpS?CuB*poU7JL$WY{$|;I_pS~>n|xpRgljX^
zJ@M>Zn^PcuDcXpT>+~ngd8+AjnoOO4`nAWK&=1(FpgLqHfc*q}K-Q7}U}+0F5`Rds
zMypn@8-7T>=IUU+G#^R$Zt;9c4%#_mjO%L6)19^E?>zXI+R(Fw>rS%9o5}q0EHc8*
zpKuc7sr}H-p@S*Np$OK7#)&chwB_A10$ja1gZVAMmD+K20EL@`{K?=<wxb8$dfB&U
zz+JXXeE!_NTH)-f(_u{22G@3z%QuoU_&)Z{vbRMzQ%!@Pac?&3P<Z=Serx>+Z|;)<
zXT|u7y#@Y+-$MN5=Hs`Z9pSJL7QrqY>UoDl;jeJ~4nE;9$fZ69UtF~3M8^zjKYD$(
zJ$V1o71O}|^z=;l4t8H|@N;2&A78`6ti4ub(Vp}0H&@)SP<%=MA3@G}8{n0!GoO2}
z{!+1PVr8tejPf59FZkS89ystW$%hZIX0=!OM*6%7cw2~5m0BOv0p2@+zM6#BqX83V
zZ8#9uemLZ$;&O)iaFWXwZhR2=i_Iz3M-VT!at}JTF%#<2B_qr)byK#%Gm^wh)MjCO
z$@6J{3AQrry@<Y<yv6j3hL53FZmTn=*8k7^7Wo^+vyK7Fe-KNmA%9}v5wB+ta5i0d
zH8n_s+Mm=Sr3NUu$HYv1>3QVNW$*I)7vcA)LVg(PM%7R^DhAH<%xQB;eDSnv$d=6U
z{1~1nd%(tJiLVUdgYe)_xiyvP4&U@x`a_RCd?__m&N54O0J~w#G_WYqV)vljq?#%Q
zJ}TY9V6SvR$L;Wjwhe8=K0H5eZ4vU%JEQ3oItczy;@nlXrh)uU+lWh7kb9oIC$fS)
z4KrwKI{9GNyY{M0)fB|f6bDPx`JAvvg!>_MRoU5X;ww`M{7u|1r0s(|x9U8T`#%0A
z*OpNYRcJjwC3B_bI@>V&hHa7LmBO2q8~E2n2l;a{R}S9Fys>V!l_jstU*Mlg&d^$q
z*gS9iGyU6UnNxxXAAJAD$>j?p;E7DE+yL|7)~>$iv+pXpI>_gL1Yd6ooD!#)(GL6`
zWABBwJY?$1)$w6nYhK+p%%0Z%wrQmc8}OxPu`L^kCB=}PZO9bmAt1-5w{1Lo;d98y
z+?o~XyO~qFUPAq&3jG5-udRYNYn|vB=^#~^hpN|V{-Fzvx0XE}1MmRRo7NpMn8kWl
zaYn^me+Z2Rel>Dn?{R)LKizdKzcbDK1Ts?k@-h75$B;?nI-k1(xmLyRY2k0Rr~fPX
zFFLbuE?9=W5!i>KuWeKETP9lXdZ!H;VCS|Vjwc?HM25Jz{R`T#Ys#H<$z0oY^fuPY
z2pvGfqJu2FCk`Ds+bBy7roD{A_5*Knee1bK@adi#7|yS}^iST{A{Yg~V*l=0`6Dgt
zO@@4v%Jjm^q=Q%WIoLh;lY3V1tKNuf$6Xf;y7p7P^G}YAkI2_+ab<aOiOnaq{22Zt
z8WsN)@7+|$dn?V#E&mbl-b^9y4e7-B{ym-xY)tXq(D(mj;QN>FfEvDaFJcc$FQ0ky
z?bvRWecNAWd|c~A?mat`-{|UsV*vj+`0DOOE)}m4J<HnD{V7@EDRw;a7lRwki{sPw
zy7tp3#ytVQ*7J`47xL?2aPIiEc=Zl=eZ~K$I>pw<KZa*Mf!@0VS$_=JcM*%Oxy<Cu
zd{6dB-)E+gn_kJ@Cin%s{SUAe0$Np#Qv3w!pZpABPBzvy!&I97Cs|h=A5?wYD(dMF
ztKb=3*ZYdkr5L}SkLlihk@^(<4<KI*JbDMbIfbuGJX~w7m%LuBFYJxO9`A}TVr$Jv
zz(Z=81Al7i!W!ahN%%+%pX@C7h;&o&5d$Ad{M*?Jar{?}$3GU~I}`tKykk7v>;f;l
zBqza5rbxe#|Kb0JM)kdhZ^s*`hj#Am@DAmHxNF)kAsQ;?50ik+t(T87cDGK1JFOKT
z+^O$mQQsr{q?m?@PZjf$!khr*D@LeKwi2GZ5!|+#%EOYm8=;GKbXcEtE+1AD-l=%4
z=FVrXs7G$|M_i6sH9BDuey{hAGB()>2AsS5PDaQ#=jsid=%~Q|X8IiL+W&w2)^c*r
zyt=AQP4(j01LRC0v-cTnL#?qY@|83%$*E?C=tT4sIp?~x_YqSc`EOCXCRO8T+b`Jr
z3Xca*i$!1G+k;ODyVmtJctIc&+*<F&@2r{xtYOyrHNbH#de*2PNo!s0O7Hm|d7Ex6
zzB*U>&MYe@Mf<96EO_zx=U%<lTiDKiuSmguuK}wcnV$bqB|b=v2l&ANHnn(z-Yb3{
zy6@LJmN#IF8}MR`X?ZAO>YgbzODuhS>st2K__<f<TXdq@;-VA$ZR`=5g`cX*?zt;j
z#M&iK-r^vXot4PWPGn~#I=aR#+ONz!$ezxCFW7O0`+qctT8CM5titPm#e8dh$!?S0
zokzx7{gXD5<arl9E4?~~eyTbWR^DE6t=4Z#&E31NH09T&v*nsYd=FETGxAfUt27)?
zuJq%q{Yuuo_F-#%2o67Dc1|>(%=JopuR!){OnwnOzoflF_~fUs{|jWVqg{Q=2Y;cB
z2?zCYTzpOTmHFA#={C;Wt}(L?$LL?rrto2iR~h2Ltz17aqid_~|5Wi6#yx6J2fnCP
z=$+CpH{p|y;Tr<4`?Tklx=TIKz*C**mY*b_u5rWqVYPc5{?i0@Df-WvjjZ)AqqoS1
zd?CLROZ=RknGY<9Kf5}u-zBl8lU?{DoNs9!>lQh`SZ&b9^qsY)M{U(2`z6=fXTe`r
z-!|Naj({9J{7L)+(v4REqp^B%6?*YQ)eVd(i9SpmVn-AE1X)+)=9$Ao=mrjsA^eYm
zqXxVfehZ$5fvugqD&<F_6CZA(U)7y*IeeLD>jB|$LCimyrSE;*)Bgy+_w&2)=8oZm
z(UR*;#cuFga=86?e&u>&ru>7O$5*blx{alUmB>!$DT7}@dH$kTgKgZ+x0~ZrVf}yW
zTaZu5?$bAY&$0$*lCSVM`u|SZ|Jc=WVqZJ4V^!ag+=v;@c9fl~z1<o36Zm{uwyyz)
z8^Prqi^n;KzleNVhrX(P32uFECFbr=GK>G{jr_><gC~)H<Vo(Pf3-)hL0uDjbLVVm
zAD)AcKZZ{zStJW$<M@WM<gI$4J)m~fUYz;c&01CNO_DinGIO5l8kyHh=Jmnq#muRL
zk-fKvn>K%W>t}$IxnJDHcw)R$!}aSJkL>8nqBFZ?e-9Y5vj!Xl&s5rHK8d_u7n#|u
zzT&3xsXgLrmWCqqwXu35eg7Bw6FwSfGfrPM(x=Fk8eJ!Wze;_mzvAn<rh8`0+6vzB
zkYVH_?E6>IMr8PV5&Wd0=_vAUBoB>ebZwCJ=`BL`R9X4cawqG=#oQu`f@dmNd&9Jq
zEvWCBm=@5M=oUV*H$F;#dx^G>p+E7Op#IL-{ZP>AUikt}bP%J$277H?dHOYM_SeZp
zurd*Uuw+Fu^WI6mz;oweua-5juDrvK&BI=1pI#Q<r1nzf)|92SUT>cj;JWQ>)--tj
zxz;$f25&~D)<nI-*O3=}8$4hadvN8CpF{guaG-bFMrdLt^YrEFdP@^?kSmpal7+IR
zeCj8*@qP*(0vv00)1KODgI6jpq~D(uPlBhk0n04(jZ7KzGlLpO!1OF1&3OWTApdxj
z{*~*E?%X07pgv;Qzk263`@C>~P7s~>lyY@<H7z~7fE;I5bpP?%FINvl=Mtj|^2ATF
zw`&jY<f7Ge9nfrTG}65Xy;f}|?xSvL)O5$AUU%X?4;~q{=TEfF!oEfy5>BrJ4;l2G
zZ-DP4_Ajx$DM@VNRx|ssc=UQ=yx5qMd27El*}rpu{OuEw>NOc++rr;n(K+4Y;eS54
z);Hgru=u}_amOltwskPNq^=ddsM-$fZJT25o&ELOse_RKUilL=Z%_U@zfv}+_L#{I
z&8@ixo0FIcxb0ZN_-?*!xDh_n3GDwm$?UA4pZ34FI^D|HV$+&VZba81-Ur{Q?E3~j
z8jIUkg7~r8RC|sFi}$&C#O;+c$QngYYDP!8nt0o__@jb&Tinck3V-Z$!Q2MSZP0jz
z9NRYFYG7RL>^ob|*xIZ-LJmx8JQ)Fpq6xvX0eE&$C)3Ui*OUuuq_@-Fw`oiIvtX1B
zAUNfx)_ZrtC-jaX=Snmp{ksA?dZZs{Pjk74*ykSRRcB5Jo+inpqJI7x@2-BC+Kdle
zo$f@Yq+XS*iXLu9ZZ?IoO1K?F)`+%|!RHpY;qdr3+%sjv-)loJQvZ*^CmD;@Z%bkc
za|-Mo@KeF=59Sv=%=7MD=~UW-rS}Z;HV7QW{RqF3hp}nRC)>%X7d-E_*Gdi#z7qV8
z+cr371v)5x|0eD^f5s+$+j&Q4a=b(Gay>jvbaof_C*o<(AXD|sXW!%*H!kh(RsQ!-
zp!-{1cM!RD>aHN3W_cVjH1W8E>g!W$rfZ%7RGnYst-TKZq&f(yOCdh@BlOxVJm5Cz
zx8Tge2>(>9O}+pZYwKd~iDGSTzfNije(ucWJ?3V-dB#kOJr*NoR&yXhZTB{0KlW@6
z{d%v?7#N}->SvMzOa2z?Ts%knM72H=)On|tX20|ki@&11+KEcZc~j@=v626CZeqFe
zBEHgsPB*!x!e85k&eZlE+QR<{|Gp#k`Um&N=9$Z~)NA;Wo=4{Na&Lfp+Gmpq+lX>)
z*=cq5H&vqxeQG{+;@hYZ-@!96YQzumuAxS}+T70jZBwanM!k7Mt@%~dllQ4NU!t=F
zh}RyZo_vCu@86=9e7=?U?*8G|Ra3rXq@H}q*G+|C4SnL9sspdz=oc+{YQ@K+sm~@V
z%u@s8k!5c+cjyd*{9JSDLEGo@w0uHsQ?E-8Xbkr@*Qbt@FKPP;K7bqXxe}LH^#uAX
zxeQ72)9hTvuC@E;V&Go+^j&%n{IxlJFdq2?6UpX!|5xQp)K1|&a(wK)#4owGa_qfN
zhiw(kMf^XC=OVE`_Q47}7wvi;n9VPM`DegPdlu$@3}DVen-=E8SeRGxo{`?k93&Fx
zanRE%<<Kp2sWByA%FC9qYoRy}x*LA^x1Zu%EBF5D;Qeg)zHAz`@qYSndUFH6-CEWf
zcKWSJl2gvTLOVRLxvd>;`<ETAyiM8XH{-jh>bR(9G3!YCM;_WZuSfFP)diGof_^)l
zypA4fE38ezBfHQq6|ef2$>fpe%a`Qwjc3R~Nt)EJk1|(g!TzoClV{7!(%H0~?~J4?
zS6tS;?$R6XAO^Npa<lWj<Rl?$2G9}P@X>YNKs_S%hIM|J`}pN7E}B^j^z}{Q0e@et
z*6cVoMBX&E<#XWj#E(_~SoW}V?3sP<IR-rV`Str#_#x*3yGQ<l{>KyV?db*H<TSHn
zkT&sq^w+!y4CF?O&p7;{6D^97Ppo^r=zlR2dCE|~H*@yz5?^^Xj8$V39Evx|XZDL1
z(BaYRpN%vw+=cw^MGuxN*YD-j&q<Am4a~eAevh8jRc+}Af8T8CG^<v#8&jo?5d<;t
z-N33`l$q@5>P0_ME~<SmwAr7F5OX6YV6TNasIDEYC)v_9)4(G+0fIFVVa@KRCd3R=
zpTHLUGI&CM_j|}-*$V3KvYTVWq7UimvvuFm?FGKo$(&E65gqW&d@7o|flkx&;8Es<
z8We8sG#?S#b@|!Ko5okLSH5}er+pY3SM`LFz&`-pw~@d7W1dlaN1+MP%$$%WlE2FD
zbmPqe-vH0Rb8YTVBRPPs&*whL9?ed_Uhik4=6bDD`SKhL@<FKmD0I<5F1czdEBE}6
zJr^RVY4mQ+g=nHaa})dCsXOpjvLQA>EAII(!p~Yw>0#{`h_IFi>FZZz0qy!PPYkDr
zz3<@sj^G>z4&~7+P9%L<`SZXrrHLF$;26n)cW^9+{(!^gz&kkpC4|E~KQSD;dC$So
z4IG<{vHKa&jn+thrQpX|#x%%UJP&*o-rp@f%iTvV%o1*aS95(oeooQS7xY~;M;UNj
z$j7WaCg!0ywMRa+^d~pJM`_E4CjNuAExi}`aNIM+?Z?pzql`tcs4mw;&kf+0I2Q7j
z5AuAlk2a{A>in4JHgi5qxE91igZ+5q9<I^;*~#f&-D*x1@=k*f%lXRYi>G4WB|^TF
zl%5zfi~Is!qx11z1qQ8C<%z9;@4PTod&n#6R8#L@v)}(9Ikw=Wt}{}yW~kb%ycZv!
z_9rY@zMxw^i6-_Dw4&2ykW<a{)%m)&_LK0j@py;R3-|J#`VDeBX7&9ueP-!PeWuQ3
zFA07z_Yu$A2OrIHFB$kHw!2(_o#zfOO+vf9$P4hi{e<!?E4*&A$@Em8MeW$Ump0;|
z#2K+ox6i!D+Eo3m#G6$+5Wafq%hhHPaiQ(?`>&zC);;@W&nsUnTfTfD`urNn2Ei49
zU#**AdKTRrd&2O$VMFW*)*JS1<>3tL&=3nI&)|t|FSBQZ^>{40Y~i*7-mKq`5u=|d
zZaXiG+x|PSC>L`iZVO)${L&9!gQf=150A|r!<$F&L9Su$b@t`BHZ*qSI$#S}AMR&_
zXW~K{hxqRRu_3j`n1)s7OgKgtwPVuyb7L^@UFhG|6HuG3eaG+R6aK$wTe_>-cWtkr
zUA37inzsR-Vea>JRU!MBmw%(}TgcluNAp4(RU2*_cJronq~E_n-|Lht0T+UCkUj?<
z!Jh_i&|GT0|BCs1?~CwxVivmp8hz^-`PqLK+NJV`-DTz4+&*7<9`<*o{e2X;@Wu6X
zMrN-03F}j^uxHWcnvfT<{Xm$XV`+`LU82#M<mM<JHw7K~Y76+pgFIl)=r?V+T#{bs
zB8HF6;xd${qBYqV@VWkmn-@Q!HFp7g!{J!#^5>#|u78y4vf<zf+ih+KyiK;vh<wC1
z@~d0@Q?jKcCkx{axi#0pGd?h~AGvVdzf9~`G|rsNQ2*uh^A81cmc{p>xqf`iwLo9c
znik$<tL@-DH#WhkcNBkhc?+x2<tC#4IYspEbQ0n7Bsdg*UPMmE_s76cZQ-JRS1t$L
z{}Fv5*SAZqE8box(|eIamlxcZ+_%q=-<AYU<@8$G18x|{DE`558-9K#<CB5>7}*~?
zGEYU%4KUYTpP)VrA1jx@Z?XV(;YM-Yn@gG7qIb2Y)8er}-iVg9jz!yNIyVlsqpXcX
zj0st1&&L)#qED?E_lyrb^4q%qdPa8TM6gdpgFZIv6TBx_wHHy}|8O$DQ*F8abuH+>
za-@I3C>XxWbB_1xJMd?Y=EVvg*Z1*T%M{xSe3+qqzmk2LoUPj@9W#Ybc^mqF7do-U
zr()fVTeuewiNkxc<Qip>7s^5E#m|FPb*fwIfoswQs_~`JXI&QlUOayej$-?&k^X`l
zT*dybCiZvDh(9X>pV*C`Af77kIq`n&p*MY7&@B_}i#zdtKlcpdUxdHv8RqIC<eA`2
zvIa!|;*~YPscY!^{rPjuDc#dJhMKASD!v$wg}q#TL(iGC9UnYI<9gwF#`PR|y*%?O
z<I(sYz|W=eeYb!%#dCzCozq5nm3W%23C2CZ=%bfJ$Qx)%&g)S=tn4=V>6(bK{~Wu`
z$IfYlH%WfWHvK4Lluem^L-t!_#D04f8Dth5*or-$Gn33xwX1xDSvM}}KK6*UyS6*K
zYd7|s;P@ZpK_{k|CAVY${2aN8ys`F=elJH>WyaV)v#kB2wqyg%G_$4{K8_wFXDvU+
zwzGTlfK}scW1d8(lDpp}UQ(dXjL6&d*h04jwvd&Lh47kiZ=U9@M)nXqQhHWOGVDRW
zK7~D$!XCQm62=nRLv7eY>Q}bVV#!XPf9B%+7UBG3;Cvf4t3lTgO~czpXnIV)A$=Fp
zgrn`DP0#~$A-b_T6|^9jZa$db@+vg2a|{gx^Zn{EVkP47@OQ0e!P3OH<Fk8;_^j5i
zdtUrjzx9sZU&Q|uW0mi!=5@37C-748_m2DoyC%+<k6|OlIHOJeq(9}^-q0Vzy?tEY
zD&K~DiW;x-rnG+S8VqByj=zXUjLs>tn7QzoQ{giSKBbckfM>_k2gc#Iwk>>qBkk~x
z=-Iu~i2WfrDn1_YcPIDUI+=(!WOz?;M#1=Yc#6g<f8Y<@yR6Z#6wH@s_BLXr$_Y7+
z9iaBL#$R>MbFG+vxv^;+{o!-p<GZFn|5hC9zA5IFA14>s`rV47v>G##qxbIB9hd)*
z&n{D9&kyfle?_Nnjx=Hecoo{?Z*p;TO>9nEuR*#_Cfa(y$M3GQ+guDx{g4-E_cQ7}
zU61je&wF~_#nTLN2;D1TF7BO5eYa={`e6-cC>ZiU#@7GP-gP$**xA<SD)={&!x4`T
ze=kW4CysA2NjyRKRYPkP{&@VzJxTB>eP;mKztKJyp%x%99Qd-W_Y7Ys^aXp+vO8xB
zSZpqBB8=TBf2EL4i}7n~dQR23Kf5VCBbcJyO;s9O#E$LF=HQ*;|J%r*A7@K@gb%f`
zYW2rQ=CBYxH=pD-t}J}cXMW%A9IC!q=%cs#tJ_bfxx^Q4>rZ@ab5mMpn|Fcx7}t#{
z?UoE<&UX0re@S;1eJ^ndJ|%K@63{>l{oCW7eCmT8rblr*$#2b}_&0RF7=L#?x*K72
z>(3A75M8Qp4tud-m7nM8lC?n#TBEFa3xo7S`&<1(hw8JIXWB0J>*1~Jm-Bx;K>u;G
zX{%4)@-r3A`$Y5jPUq0B%gln2Idto=5n6O}=;kjI&Yycm^9K!V{&D90XZAk!P$8V}
zWd45#<KO#Z^X@Z)f1L5ZUHT2--&@QJ3-Qth?j6qGiU%@({|Wy)kO8gAWn!(ivR5yI
z?tou(QH*t+C}=AZ##Pyq|2=PNaQ0;zvPkRS$(#s$LU}?bSf`FxE1%4*9eo$e70K0O
zfn3=v8@y1ipvT$&t7vzqGT=XL$PV=0{<vS;t@!my_}E5tK;+2g@#IJ^<0+OS@Q{(Z
z6~Ap7{9UYpuA()7zSq|X?!B1J5t{DB(D@7I;ZgX|^T?tfV>=YfBgs{_o*WNzvPwKi
z@9CW%CrwYGeA*2j-FtQ&#;{A6+mYup*h|dso4x})$`3mj_Q5%kJ?A4UKel?+<v+*Y
zeOez0)1$b7!|6}>J<)tQ8Y|=-y#-?x%qC%;{%zrIJo!C>i{x0`4HV<fXKydCNVgn$
zXB_;U_FgP_Z*LI}-PrYAh|l8pHFouzDZr_0&%*bABm6S1-wXT-Pr&ka@oVwJd+!v#
ztV89*|L*Y1xPBk-Yw-juZx_E7KfL#j@#}+M-hV6l9kF}hk0W*uJkr@cUIN=DN?V~_
zWUz~3h4=mNK6_X7{%QAt!M;Cx{QJImG40#F@ga#ft8c9{tuNhcK;}LMe<H_avw<Ia
z)Z{k_uP5#|*0<@M<!zTIsnw=;Wgj{jo5lWDZtUx<+qY~h)_lfoIUb-kV`l>Y0(0b(
z_=&Ku>OH|&;jIPUmD(roV2zac^{uPDwQcZT>Ic@hQYXaI@2P%$(+{ahNPcc>%&c9l
zc<VIo{}4SyvCoeLHSHo*T>A;{qid22THjj5`~3Fi`SlIipjMswR=!Fj--Uf68|xeV
zpg*&~udneVs^wBGzo~7v#9OOc4Yu7?-r7d}rrp-B;tL{HW8eQ^(4T#uXY_s`gGSHX
z4fGez5PqFAh{;z?p^wOpiDS>iuvt3UgGWx+>DS3I6P^=;rhW(SBqP{A?DvyTMeilZ
zM+2W@+FDOrq6g*Fx_ujk^&lK9svkcS8s%)LoWbthRcprWKS7?|Y4FYn;7Uyd7h@@g
zOLgJbGoDe{f?WBLeJq?qBiP;vj#SH0?T(IjSFmp-Twe{W6}PtB`m)cz$$e`loPqzP
zSnu-S?~T&CLcU=AFw;iYx3wS56(c&Avke<r=WcyD9m?qs?wN_~zwux#)N#gv@o66z
z$MCi@fH5Az=-_j@;akBs!fQjE#N=b5Kh24F2{=2Q*B0D=tMRoJ>2SXb9~iYIk1WIw
zjO|gc{EW`K$&<3YY_y(f6kgW(o`~gTQFxhZW{Q`U!pnB?{A2L2C_HD?hVwqVYWA`_
z6|<gyp?UgHblQ^6655Ba!FTSMe~Ee8yM#UI#NOuM<L{hmjwoMpL5Y6{c)MvEG4d~J
z%+!AwjF!}Ok~`Y0|Ku?#H$e7P1mB>~wbrR-t#W7uv*LnHd}~jz<G<d8rsoTh*-M%^
zkFT@DKT={g?qhB2TebP#t;#hp_!jB!@Fy8-Ep<pXvOlbo|C)QXse4)KI_tSOe!ULz
zNxl$?EqM~ZXs7QVSzuCU)Si#8!?l+nC%3S@zcdvAe&E0H3e(e3VV>4F$i3dNAe@h6
zMdN;*WtTik&M$i_@H;KepR;U@$A3L59Hz;+j$Pt!h)?r3WTUaVhFEOPApBajs%m*g
zb!@uGzlC1wnvZZ+AM<IZnHe?f&Dufgj(>sY9RGkOw-@^)-1>d9wf9!K+5Px^rSFet
zmldx+#~<FQZ8n~6rZK#geO9cS71|TKi|v>Md&Iz-v(IF!Y0aN0{(6hn_L<mcZ-zs!
zpuM+)zk%X$q5u7!+h=D)pQquMas4JV`dh;<GU4~!K6_{QWn8}x`2A1&?9J`74D#SD
z?X#-DK1;&0WuKM$(H_}nz1U@K@6bMTZH?G^iFab3jh<V_nL+)W8FWX@2Cu&65@Lu~
zp!fOM5ZDdaWvcHw_RJCA<l@VSyAt1tC6-V8T%saJ4bw4tx08R)=8Pm7>m$UA40|!8
zZ`2s<G3r0Y3hZ5zX|C73!fPY%$HMpLy~+E@@!vm)Eus0ViBX4FXP{O2mnZq1T)_G1
z=r@J+8(OQ(kuLPK_>KN>7kcqVY(c~Pw<e=&zX;#oh|VVew{#$<H$}4feOAwkWgpPq
z9rUM_T`B*G81FSGhY_7iZ8Y;)#itxyY9n!Wo?Qd(rQb}iK_|@cyFI)vT~Y79fQ-cU
z{{!t!Irt{>@{IJ13G9$Fm61-zf2TTz{J&22JKX&y^527hDnH(5o??Z*mje6cOvm<i
z<o|Bw$=N-P%#+|4Z){FK{7r411a$D0{0Dti{vpRRN|V0>{*!w9{73szI4iv`#l928
zYfjx&PW>%vEH=x=4|B(sVk5H-Gx$RiQ#gw!MXZ>!b`CwF-00Fi_LB7_C*ik2&+f=x
z(vz$*m$RPs3BM6TtRCHbV|Yex4ePg!IWg2Ecrw-W#1+)5idUJQcRjQFN?rRJ|5@`b
z=Y249<y})tZn(3={E5y2{a^R@-_XQ5{O|XF|Atm<wIq8Ow_W>#8}eWJhfn7p-Sz2g
z^yA;mvM(nSJ^#Fi`CLF75fhmb+C}V<Wi68vbddGCjr@7RaOmqMop}9?Er-7Dr{n+B
z)3WDVetp}#M?c$mcP};N+x8FP`-)HXrcl@Z`iH;vwU&)v>;G)~-4B1g>Gk&g%gFcd
zFeTSFV8;+&U%Bl5KX2ijg6Y^GJtdi%4XdUmTS~GumwT_&Tn;a-Z)VS`;&Fy&8_WNq
zrHN-f{DF-;NA5>`WU8qr52{}HRNmR2U%(!ga83r7;!A@6yFAu5@<fj|E6;;{pkdur
zpS@u0(W_4^|I?O%$MJ=hq&}<p$vzl);;XFd&JX&(_OV%4Eij)=+&y_k)NHD5qVL36
z$(E*RN$O8T>jtTJacHiWo(oQ-a|}`oBf?z5-|7#|ZA>forIB&6ufdMfW1QaEz|T0N
z;W)K#qvP(X6%W&{YDd^HELeu@X&A{-X}H83nZy`mpKI+wD=nSyZ`E^dhOc8^|6PLL
zCE5G~+7G%KxT&c?egpjaa&zP*?CVDI74%*gc6a0DnfgX*E&J2_Cu-pRS#S)!7V-1l
z?9mJOx%@ojRoNJ6dn~x___^bI>Z|a#`dtXkxPE)7|9qVB(Vyl0I=jQk!Zu(<URycz
zSSW|+^J#<Ky^H4rcVXM^_lSQjJfm0p8ES6yhOueuk&U?t{gLcLP8InUJE=_;qo2fw
zC-6t|PO|8o^}Hk4&e$Kh*9=>K<n5+@LZ2jl&(mPT?<v?)6Tvo)uhjY^$M{Pp@Jap#
z_$u~II{AS8yZKD~2h96ex$`FZUAE0}a#PfX)6Mkl<d~Cxh5kEhm!DyNO6s?epMsyP
zA9!wxl5>Xdi260rI{5{y{N(&)UvYSIw#|dX9_;av`#yeicwUfy#D3mEbXez0*M5j0
z?c*hn%PXO7Ho2`$>@^w+_x<Xg{KT%G5#Koe=SpBvosUXjArB2$$R)<NeCn=%E(DW<
z$M{|V3wZ~bkmj{#Y6K4QoCN1Y_XMAV&ExzlA6{16-`m2Ci3ITA%ReLBl)W`><VUTA
z_p#PiDu+yd!}gKfz#pW&(&RqrD1$Yo-;G7%AU8Y2am3E$+ZsnU9LH~Qj^9@QspxN=
z#-iw{md4Rh--^b)L<#ZXQpFI`KD2d4a|!)8{7*#Zh3lU<TYnV&72W5ic3{Fjg4Tn%
zlDueCo=mvr764BPb?)Q9)K&s7FPInTy?>}+?NM(&H^}<Zb>%!em>hlUUa<Dw0bQ7~
zw>K})rt5zqoQzrf%#mID;N$VPSo>b4tjA<3f;pmY&_rw8N4K5m-k9}2W&HIo_#(`c
z)|hG-tq5UUQ3#`r^9B6rSOI@>Fm_S**Js|6$iInTNfNJ{=-z~I7W6AyyBQwXiCw=D
z+}-z3W13u@!_d05fyK`?mcKM*PYo*ez<73HGe68Z7_#NMpsB$Jz4W)>)%TVxBR{OH
zn>j<5fR{Yjn1*LlD~`25Tmu_{Gi1#UXtrN^h2zbI^nD0;o~NIZWMleX;t@LI>E6xv
zZT+D!I~|;Z=y-bH!A2a#`U}1dEb99aVCeuB<;8-V?gX$L+!DZ&BG1j3lJ3;B0G3rn
zu%yB~YqhPlrgav9Zx*jJ@l@f$FgEO*TrYjbH&BBSej1~{EV4&D*3q#qd=&B45gHC_
zTp`19>)7v>*ckYD#>AO7n%slr%dJCpCL*-0wVcl*UrWiOHHW*fWfD!kt>=_z0tWW%
zCwVSeq|*huTtIVi!JMh-iScc+@9IgEnY6v;$AfFh7}vbuTDCU0W@@<>39b=iweM!;
zb1j-~r`A9Jx3^s*9M9q0xJdd-cfP^7aZTw~=(rJFb?ZOzWQQ+eT)D)hKKdUqamHN?
zufv~gATJ)QwSPuu)_=Vt`=XG3M9+tyA4e-6BbV9H%Kgm!V6?PuxhemvLE?d@s5SOH
zH2kONCYnppa;((P)o@PAh1eK|=MvZ!qN#ysS)ZdT(fgsL)CAI;IvTfh1&u>jteqW)
zmiqnl9n$%a9?L{qN9vxrTHo=C#_pj<qtraAI2@0CaqB?0m$u{m$0nQKtv;T=0G)|`
zV%V}nk2a?dvYrOI8`H5;lk2MBL%+{oAbfk>>QiyTjOtX7L!v&%)M|&G*>iN$Ea>^W
zmQRkY)vmoas;hQF`?y2hO}xt_C-r3Siwqx~?Dt<5))IdLnsIf+3-Lby%`IY&=OXBI
zJo;1qgLFI9MRxl<+wixg!n^}Z7vWyd)Qr>V!R{4BX6k*_eH1;b=2&4Jb_bj6O}ECd
zvT_acytOgbiR{IO3%#{jY|e(uy|rD~meFHDo=cQkH{^rZS}&?;;j=$3#hz9-M)6ea
z;@kl1{9kI>qs2OBFKB<#8(wk_eu)P1OMJDzog5c*_vkA@yPK%5pf=QAmb%9S?9<O*
z%RZ;_rZhZ0UC0kTc$@a2L|+fy?O+cWe%KM1w3jD39Jb53aOT3%d)f~d&2sM-*uyXS
z_0VEVTa{NAn{DdawEv&I|MGpA*yuZjYp8V|b};ymPo)d^O9J@!MSy7;V@LqMPkdJJ
z!V~YnHorr<g=kIpfZaX|Z(1bWOPA2v8oJ+04_-`Nb8t3ve<Q!a8GGdm+bG0ANiZL_
ztyQm=FY%ZY&e3Vf0=oz7`mH*JZjXeOKh|FroZa{Z{3C~$zf$1QzIM%hmO2jCv92}u
zDd<3RKOi~x8TOaqXHJCkK5!ZHLXM5*ihQNTS>W}Vqm=k0eV_}C@xS1&ftNJfIdpp=
z8g9n#puR*0#M{ju<0E6P5+UAQAMzJlnqn_Tz355%FJ8|tp&rN`I!or0?0+K8KXR7L
zOW1AL{%d>r)?SMQXURBTYRD;w!7C2X=0FF!J#9{<KAhUrnIUF9dq6n9GZE5@gF$iK
zwgmLDQa%*Z;z2Ko)qZ_!0W|XwXlNCm#GDmvvpwpQdX|ptyX-}j4+y-B?C;flhzA3c
z-816$th~EuK15$xcyKFt0=FwgcU^qTr@{XnN%$JRl)n=WH5a|ix9Cg#CT*Qy_G>b}
zU&Ns&#+Qu@kKpX5tiM8>DgQz^^Y|9dGVmq~AM)DaY!Yi%I8&RusQIWi)gSxM?EEK!
z`M3LUiswJhIw_ui&9`CQCYf)=+zWAJ``&vEwkf$z=#N?-nzx#}qv=|Fd`;-@H8<iT
zL|1J>SH-@zd!6tH+Ps@HdB5=8TGpz3N_sy+yIQN-C;T$=guL0_1Whk*R6b*HF8y^~
zvem)q#Rj>O+;@oD(@m3@k4dKgh3mbZ1zC?87N)*wx}R&{nto3Pf17;trI?w%5xMtq
za{oH+u2`|jr*0fR!#p}=7Cdb<et&Bc`i1A$`qbja_WgK?PtC`&!w<72oAHUw_f75^
z{AKPv$%l<s@E&KpRnSIk12#}evIX9DedpAOJ*V99=NMzP_+d;#7mwYq<So=ZjqWYZ
z&Tp(&97pYEFW@)%Kc0SH#BZ%J)@}CU#(MajeNHu92S4QZ!&6$CO7UGh;@{E4NqORp
znUZNs6O(5z&72)u8mp{Wngm|(z4nW&Q}da3t*8ZN<X#JLr|Z$z)?_c(R;_iK$gs{L
zW~ulj=N6?8U8HluBIy?|h^D{$KcT}KpKFa=YvNk7^w}lC8*8K|7UJnKwX?|Yf4(Le
z)Yx8R`XAw1M0x=F4ZhplA$+-mm8Sn?be9(&jimqWqtt3+jt;UO?gQ4J1M7v<x4WPD
z32<8uZp+qeBA*9+t^W|d-vRCGkL{^`8C&r$jj4O_(Wdkue$VrnL*d|R<ih%p4h(dV
zgbotWKoS~g!pDl;uqH{(pCo<MKm)tMb!Mth-OT9WTAe${m>6G9epDZNJIWqT(Oe~Y
zO*PP%doM#>D$$zjqrHIE9Nw3+){z0>SV|d-S@Q_AL#@L_=B&nroy<XUrde6)u?Gd%
z9$p^19R2smuI2MDS1x0ee!JkkN7;+3T82KfE_g)mmys7Gcs9{~C*w#^$1@2$9gKMs
zV~zli3CFz&+;)Q7pFlf;$3O$<?AO;!jjox`HNg{e@UR#A-4nnwzW|<Vfu|XKySc^w
z=s$=~@-gQ0Ao_^I!DBB3eMZzLG}uJHt&Dr<`TR=iWZU^fey@!kCYO!&R1eknsKLaT
zvoBq+<VpU!b+`Nw&p^Wg{88YKta;=hdm4E@@nX%Ahj=z4S}qkWmtn&d&>XV=;3JXr
zOR6~lO+ODEy~O_DmyxRnA8AU9wnSq-x>p9i<LF==Z3-6kaS^{`A-`ycU*Nkx+{7G5
zpqX0MK?Hu$HO@1&$dAHjz9BeSEA%lv!#cTz|5}4t>T=sPc#&bPu|_V4qz_P^f9N9i
zd{;K|zllBg#G-+ru)S5``$@Nk!}ni8X8oA=Ut)c^HWI|si{Ia%_km}yVC{ZroNKC+
zm*p(D7s0FIGB1~dQ(!!J0(%Ply$DWUE(f2$X(svoAF$6)>U*j1d0_e(&%ea8TK9Th
z@5Xq(o#&m55}h05k!nP`GtZB%h}yFq6oatO!CzIQ(qp~`@FPj@>%4{a-sI;xzmHyc
zr&r&3smXO-HBN4F6LkQv5qA<hOtml15j`4{2YoyDcHMv+Zm-CFWwP0^1A8hNLFZ!L
zUH){2_hQsrQ2%k+ZNS^Xd$+-hQrOAQ@cuKrpXA+MY>Ni7?1&HFu(AQUFFCJwu<5pU
zEVwoo;T+9}$#Kp$Q|o71a$kabR<Ae<{f{-(M%$^$*sACbyJnaiG}x1X?owsoih2^e
z_8=pEvg}l+KV`V{3UjLUiAa6oVbgOy^)NEnpzXZhxWn&nfEWB!GK}>$BB$V|wT#2n
z$?T<mt!ligzN>0>x_X(*M&w=z{LEW31pip(^WNRj6<04O9(W^ryiMs-n@senM)n)D
zVH382|2TcMwR`o-N3eaOdziT!_i6m-SRWdM-%-z?ujcL&+4bAw{+u3ue<x<L`}~y^
zxfs_>;@ln|9mxJRoaLqGIGf5Z@q%l~xxux>Jg!B8Yq59rP%{ubCtLi>(G%Wda;=NN
z-8FpQ%;zH&xmI#fT37SAFnQ&%SModm3-dRmecaHK&b|;|5iPumO?r%4azlLY#Lu8P
zzMp%dqrz+CxN<&rv~LUFnzLQZ**E!ZX?8&ncjU~%BNh+ThL-LoJQ#R$mUU&H3+qHP
z@BL~=_Y1E(`+76?kU>u`;oIpSij&for4tvwgEyU?t7Ek1V^820hz5H{)P{S<)je0t
zy%!pe(MCZ3f!{;xL9|^+|I}U@b0$Qven<ECORm{**tLtD-%*lY%G`XHxjay|%-S@n
z0i?BjHgdde2Kh(C#=EeQqCD3*+4O%7I&a|GPqCd7*yrrg?62|{b+2bl)DqKPkB^{j
z26RrH{4Dz1LlN(K^t6@hsqw4d3D#naHPiw8)P}5UgHAKlWYKlKXJ{+II!v4$)}H2B
z;V)lq`ai}y+9$efYVd9^?<Sd>W9%2zyU=kR?eup=yeS>P(SWSeUXRXj99iTA^HWz0
zcRT0oy7_bX(b^YoJ4{fka5r?KeWuuI_#B#8m#V!yx;E9W!_SM*Lj-)O4xVi<q&xK?
z+AxgC#fA&#&&7Q+(1Y_^hz>Mw;=A%SYVQa2dg@X|bFVth<MGJ^>!g@Y*0Uzs+wpg)
zt`50xq9tPQIq}v6_`L0Xre5*YLSLc7&zZs>)FBFNah>)1DzQP!YoR@z|En?S{FQ|I
z#ZK3HkHpQQWB77giJ>#Tm3*&lyj1HGy13LVPW&313K=SR+iIZ?@FAFeVCEc?I{#f}
zvF=gVW-T>aa>vP68<b5)t?d$GYdO^f;rX26i_DK`NAG2-&EnhNWvstcb-7iSzOdcQ
z9QuCVug}agOU26)&zpL?X7<5H|N2X|Zkc>%G5O5=2FnM<SL4JPkq;ryjD$QB-i1$<
zXSW-2ek>m)PLsl?YOlpggKNx73ZE)?nUVU6Vlp%PcAbw*{H3{L*DdJ9Q_mVE=e<7_
zsp#2tJJ)|r9lDczKIQfAdasw;bt#|sdAXY8{a2XGm-eM1rhC`Nx%MeOU%4u`YwK0q
zd+-X4C)I@9e!%bFwJ}-`+-rAz`>I@a%eLy&ebM?|e{&W3SkjL1L@>s^!^kVebq(>h
zY$V|CS$G4r6mvI2+Xnq2VrBJgJ2%;o2DOfxD$wVI_j~Xw;>Xk4x44oonl@{JM|krL
zaw|s84rBCYn>(z0LYAoh4z+N;bGgnyWUe1Q&+lm?K5{<qRX`8l{x`4w1?isDdwHJo
zkOrxz)OkDp9PsyiW>Gz7q3wg0?K565_b&je#+;$8=Q%fNH9m=lzj;q?&)H_jBkyg@
z^<LG8{ER;J$ffqXd*~n6*AK7;o3X<_{!3Fow0(VjlsXxYeES~pCR_780qt6u`?B(P
zqJ4trFVDU@-C;`E(_WJ9efXYSds%6E;7N076qu3G{q40L^|Pqax5@Nq4JHPC#sRKs
z@Jsy?+N(B8QwJLBvDubpcdW0^%r#3BFS8!rg<r889iDRvk3PY5#<A|snib38-yXQe
zU$)n5pAy6fs7INBFB)PR8RpAS7dy-IBhUGj_PO3U_({U&G_O8&2YY!g@rL3JOM7Z*
z7dztcZt4N2nu7L3LrK+%S){cS)I!QaC(y?j8I?nyhbP)v0E0z-v^HBGycr%l8y-7)
zrnIYVKbtu|0#8-DslohCwIv=a*^vl!NX@Ny?}BOK-_!yN*LafJ?yASsIcVySa(`sZ
zA#UQ--zvmSk{A=~aj&Iw=rIGGXOKyZam;vl=d^41R5mMbLG$Uk{D5)rtopZwc+O%!
zt51)0!1Y|5^)*1h#eI&p&v}}xO|7T#=4XJMxVM_0;<hK68|kD;#-Lix@^$IVD)GqU
zw_crA-5s5|r8(1_Xuecq=(mZ#4>NZo?S*_tI4XvJJlv?p{xJJ$hlz=h=XdTC#Q0|O
z`(}P;7}Mj>!`=LLb=<yee+RW}<=<3Iwiq~mG<<#?&wr-i`HKslkuE6u*PQs_^ZR*T
zcB1-P!EeDJS!8h?>IS+eTU2sUx|hCn&C)4!r2exb{{whZBmcwo#u+mo`PCa+&}}#C
z+!MvfeufW7<JSAOzfiZ;Je?Qzr&^Bc&z^_!WE7ikQu-8mghy9QriQN78SQ#Ke(Mw~
z$E7O_U2D)8I4`SQXB3Z>*#lPvGCOq@^7ymxEM&G|?IO+>$m{?=^hu71S$v{nYFaY;
z1oB$X<u5Sk^yk(M;&+ssmh2WzlZ-*{Bv>c6!)sIrGQ+ypJDe*S%I$)-iQDLzRFR!{
zqT_?|<p(_I+Ca~9xs(GdrRQ-Dmhy*Id;mS~`gH!usI5;`2`tL%OJY}Kt};8mM;j-k
z0}$uUBF7}7M59OP)A9}S9>g~!W5sWOj(l8!d`xKGtb7b~`SEy&-r0|g%sgP~4LU%k
z7JdycQ9oxQFD0wBKNx++%F92do@?^sjrFo|5*6rBO{|@UfR~NOGlggW;v)Ir<jBQi
z`BpKn%rfTeIK1*L*K5ctGs2IPU8y-%Chfj*EPwWo<VX2)i0AR}ILZ&;#mtk|rOwe1
z4RrFITXR-gxPEQj+3DoRz4|WZb{=%y&)nA6H0S2>JLY4bFUMCc{}=l-Bly#(1$})J
zcDMf5V%Nv9y~zviuI8im@F(@3{AC0>I@g~4CRsF<GcPUuUe5l;&eC*JZ4<}zsDUqk
zB6E{d?ZND2;`zj_mYP%UzWg+LM)&c<_GjTAabsHY4d#^Sk-qC1OQ@aStaBo5zL$+t
zmJ!P!9#f}hywLxUrrxI7sO8KoZ;4qvoAG&!&oGABQSYhQoX67|oqf1bXBojKl2;nV
zOE#;HwCqF6i!MXvA`1t~vFE_)A=*1h-QfQU@7m4W1B2x6jNQ;JwBFN@jnv1tH`Ujy
zs>n5-XO?)EU~?=dpZG@A`kCKNy`QH#@ejA7J4IG<jeHRgzd)QeyzSHa2N;)hxdCvb
z`pIAWuK_NlyDfh&zFx-njdIiT2>ydMXeY&(RxQHkZoH=?w?BbCpnA~T@V~rBoGHaz
zmNAbH6U+E9afF{wEm<?4>kndQ;8W=b{_EovX2uJWWyYJ5+JHZJ!S3oteA&QcYhLR)
zgU{E;=X)PM-+S@-F5`a8ly}GROO}xXt-Z%7^cvp;K5xYu64T`K=B%_h@l~E92PIc#
z{Ce>g(N6NyUcK;s5?aDvzT<IlzmEFJ3D!PwLG)+wkcI=7@vLGIu^8{*bF=T_ciZ~u
zvh+9J2Mx6oyO?a24)aV6wx>SX!nGBy=f>Fo{`D-{V!e*&qE7cI<eO)@p2g#nMS9sp
z{Jrsf<{lgjpkwCN{9&la%tU|rpw(kuTXzGow(HPkMtQ$<ndGM%>yzbX=>~9l=y>_k
z<fj_zH=t+NP{S_6wb{{Rb(;CJ^K;b3WbJy<+V~3BqtKh<8?E^6BE%lt8XUmB^q^PP
zgI$BNH(1-OLGN&)R<e}&{Zv2`ZqAXZBWseJsebu{-8vMn5FBsyOypPj#cM+z2u%k(
zkag5`bAHPY-jJS@Y+0`{h58TY<BilRy@cOdrygseree}U;+6e&k6Om7pTRqR82|bS
zv5|)vyT@9yu`l8<^SPF9_D|_7bn#o^MKQevjK7JsD1JL1UL~GNuGUk_ET1iTN_;~6
zRcqt%8Jx*ii_eF1a0jCCx>n<@>EhgyLHJNxG;;l5EAc|E4WQSHHXQ$QysP*cwJiG|
zVoW149slTvti=!N;RlV22jT~<<+}+VDRF=KOUbva4zA%3rJjCp4S%S84u7auVe_Rn
z$MJ{C$12|{Hm!JDi-%vd<~`W+_(hZWMQiYbvhOcfgKxA3-)Idy@WoR>jKXkUOBOzu
zJ;y_?MEeevN792e(ez&*$ZvUpc*+ntZUf!KDUbsR<L3%_%fB-=cZTN_ev6KJ?c4^s
zWuXpR#q}ZZ_yrT4yv;;EH2`0XGAELEWz12BDSL`@EuM-pKl0y6?uk}2)Kg!uH%~q)
zw2o|PDQN$j8Uy^eFh==Z;LsY>ntPu6R@N|AUBtlMnFXTbEV)mG*W5e*8osj)-!^*W
zjt6<KkWcEG_@ww?_Bmqltl`8<<x4g8X~3p$*@}nI_1?q(PGrMl#EV*q&2{jd;{C7E
z=4@*18|52?yjQ=)cOM3RyUv~+3!nN+JX5|z{`Mb(vxEKubb_*{)L*qJ>DId%tNK2h
zXG8~G@ch*4`JHMnc4};Udj5X;lAbJm#p)`+WkTD*;ahE<3}H$>Ikt`2y3YLs_?4_a
z5<aKj+5eT_`6v8GH|fhd`4F!8%*g-H20<rp{>2+x?0kea#(r!J)hpK8N(!#f#t=_E
zpE**yzhs>HekJ^tKT~m)@7&0FD%dIV>sY@$K3dnd+N(rv7Pjf;{+6&^*G?gQxb|ev
zC<jdMsBh7ktM9{JF8Kg$?uGNQMp!e;&=Z=#capxbed-d7-|5GCzJ&W~U-!3Rvl#PG
z_1OI}|Cm<W%IOGv_+Fp-_Gnu^3Hfi;j%u#ghW#Y*HK-rOG1PZ)KhocH|6l_;NC;0U
zZHayaOA1&HHrVs8fal)oQQz$kAIn5XV+)f1#W4ZlPjLYJpnVq4_-9uDtKfC90DL{U
z$H~b#*KFT+{MKk%u$Q9eHDX^q6p41Pi$o76SuX~ERcGYf!}8H<KHDGIvbDteXlGk|
zeGAyp7yH3a-MuE-{jCUg0%wcLmu}~ezU6nXrEeDti-&%9`P>Wr?Rv*Beru0~YeBFX
za4}xo(v3|q%aI!RVcar-|FH9oXgXD-L%dmSC*Mo%Bi_(6FyG*}V;tzD$p0;(8ABa?
zWP7gRLh3pbC&}_m9lC#(^JZhfteQ{<z-I=01a@Gsw&cf37Qw(dj=9sG1K#52)b8!o
zCMVyt8>{xyXdazy>#?>9&yFmNEiMXiDHsg=NAJbaqhsK+6BveAN4DLN=eRZM&K=Zq
z_I|kbm1C%R*vQ-{zo;;dESft$UvUiOo<sM{gVxxp;m|(9zE6UiUGR1Ctb4R322ApS
zVC_+poW597bs6P2Ywl^kc&uH>tmE_TTE$-##8QFB+VSwq9Ql_$=<YqKOAUGwbJ-E=
zCSJunR`o4q9@Tz~Jk2chNG{NkHgG4H@>Bd%!JJj~?W)E;1C~_NIP($1um1PujvY-V
z_goR~BnS3!&Eaq&{`pg$arwLAB{~y1-~8^U@vqr>TW;*fEiYqCkCs^8(%Iq-TbjPz
z)OXgJarfILCfFlrh<(30KiadtMSC%2OLBfWb0z-^GK1U=@Q&~0Ah=ClrL$&B4!^`2
zmH*wrGx%r_OLTNMKwb-QvrfuvzHVWzZae*`kHkjPa}fL+&MHWeC;5dXX8MUIOLEUe
zO1m>3_}Jx%bIjrt_$QAk*AXEfjsC<Z%Pc>h*_UA+1Y3f0a1U<r)1M$V`H(4nYFiz9
zOUW&|06QvgVn>YW+V{fd<kq%t`}O&YOfHYD-H?o~U5!o}W6$rm*w>q2&+onL?OpwF
z(-SWt?_zhSzWx%hy#Viiac=2C!(L$a=T5;FKjYmda{VFls!Hzu*4OW4A8=Pi$&|^)
zyWZdjnw2^an{{&C5aVMXZ(TMzsqf{==)ynQgv{fNgcmQ8KVf6b3zg7VslT=&o~+K!
zFYU?Jl%<ok=q2RDyj<D5F#9O+ALwu(THZG_L|!Md`53u0<mJ^L+HZPZzJS>NMV?|C
zE%}SR`WHV$EC&Ao`Ng^X-<tmB<QrQCE+W1`&Mi9RV)3fyu@`zj{l=E(u@x*&`mm`N
zesw*d@4%-hI?^-Dx#bDE@A!hQ-v-aoHN89LJ?QJr-aGN+GI$HT@D@{l+j%A@J0!uJ
z_($`Lb?=Y)uW#jEZJWU!U+PCG-Y(eJ0k`gT@ZZuLJV~@-pn*d9CV3#A+)U(_qs^l$
zBKS1JeeBGsXy_>Nj9M2v=ONR;b3d{S9oE!6M9gemgnC)5{S4#doFgmS+8_AxR>`+O
zw#~Bq$mh)PiDXz?fee$}a(u`ze$~2ndrqVqjf{siXU7xuo^FCa74lE%6B>gXlX&$&
zD9g+@{$fV9(%b=0Q?7Tt<WnNz*BkS$8QF_XeWDC~kGL2y@C~f%JH+oEhu<Yw(``K0
z<;`9?G7jWNp)3x@5%N-aLnhjKpba0q+Gww~du67lXsd7>8beL!d(d}rTstXUh;{X4
z`1nrFZ|S^;JZp4z<S6=~c}1~mcZLi4Ry}d<Q@W2I=oRTX_{93<6HCl6Ipox-!kD$>
zi)sbf@!-4Cf5939Ch1LeH-viZvTGPaK<|a{iQnoS1CL2U|E?Xqp9*6Sh1VX(pRpg>
z(O$F^^s<h#>A%9bbPkro0cV~KAET`#XPKmDp%Va)$9WqW#$?~&yn1-{-zhgT%X1n}
zz%QSCY%^_5!w)2XMB#PKgWf#`{p6pFJniV>)Lj+nQ~0lru9%cQzG4)|mR=eH+PCm4
zA80ndNX8}Fl7G48ZtpuacSpWMO-DW@--#(+O<c-LOzw$fruMW=Hfb+;7BzFu?rDp7
z)|c7&MkL*NPg%P2y~!)b%ptz0F>`p;=p3$Ziu5Fqk&B@N&7+0qnPxk$o!6LC3F0=}
zYE8XhW3G>w%$K(&9zYKU7xDL8n@g4%cqr?e`A<Y9r=@G@*(7HI4G>@a^7*DdyAHm0
zxA%3wgxcn>U%h|u1@rfMzWw9bU&p6;-8Ck1cscrl;SAk&&f$%42Cw<WJ^KeagZE+1
z-!*sd`Fag!?B>hw>1>!c`-aXsJfip|6W=H12^?1cXc((&#fc*yU!k>8*>~!$<@l4X
zBaRT9(QV8t7GBYJ&ChmUDLZ8waLQIu|Aupa1w&!~kz@Bf;8*y-3LJm5tW|KR2Are6
zLfTGj^m^9);Tu~LdpLh@4r}{i({u9K{1$XEyPsMxdCa#jJaKJ2_%rxn?Y&UnQ~Qb&
z(cj*9!Fmbl&9*TPz3tVSE~2-+@iU{h&F_%j_O73p-u8||Z+qisMsIunPt%*lJ-V*w
zjy2OW1kDxlXD_6=H=(z^zXf{RE8k2py*>BAfZo13JD|6Z{*LI)>BHj9vtr?Xw%GXl
z*#i4J%*%myotO*H3;9=90skUjES+o`;qi8SmWRCW^lJ}(%I{wh?t$CFS~wA&ap?Ga
zk{GAXID8h~or1?-GE+Q0I8!MLk6%~7-}P)VkSn8oj$_*;$FU2o++Yo>%@cFQXM(+O
zg}Swa?|Ig(gU{hl`~1#Ln5TuuSMj52U*M~?rvE^}zCi7(J9Ss!L(qI91MHd<UWLcr
zjpq$VkO3a@VBpW#!-g!#o{hb+<n(c+-h2AB$6NgV$`F_M*+%vgrp~u#gAP9v%E_Ns
zjmk;+-U@N3XNz%|BHp8G;yX@Pb@ICKn*7@0gVwiKfWN|VJGdMU$KcQZ4e=ML86SV+
z&|PXAT6z4I3Gi1p7JpxQGyL)FY52o-It_p0;Pf}fAGx!?8U0OwzpKU>(>OHwc>4tS
zgI1-dIr?jOGyIK1*Qs&VYib;vz7zcAo0Xpt=yfMLrdYq-334l)9G9+FMefG&TPNf5
zjPyyb%B`82KIv?pQ16pYW#tL7PdZkieq|oC`qgRjj&Q(;ewCVhx_%X#G_iiQnp~ta
z)vszUN?ti@lh-31D{~8b-q5S7$XR;`eOf-BufZ$o8?MdmM(16;di@BmeYSFx*T&!z
z55a30r`4qmzHjm``fKho{l_@N^tP6z=u+hDccVWx2X@4B*g)^XURZ~0<z1a?dpL$)
zQ$E*0bSBxJm$aLQ40~IhEH0M8y*%&a@9|qdfY0)JeD)v2<_mI23Uog!i+==fW}J5K
zjdZ|0{C_(-;7*<|)YA++{c~J%eCi#`$=EqPk>vCqD<}OK_{u7Ktem{%^tF|2IsMv$
zTmAmW$qkY%<m8a-q2vd~%E#3Ob9S11<k@20lq6o5BK8@9w-Za>9QWVd(~O_8lRWJK
zaPM7C+z?t(T&<1yY`i4!VLJI<$p4e$$c|)K2g}ZHxDVaR+Sr@R+620^_VT*1K3y;e
zZ&%h9>n$F0(Ir{SJb28Bm9@-=WNq?>@o`j)w+A<(x0D6*;bfYf4|rvvzEV;!AH}jZ
zISyY<hO%l5UPE3x=31!N6yh}*^2EYxmM4PiGm**4=X7*#ar`#q@whmaJRT3n<IuP0
z_%s~<88kl*j-BqMZ_!~Pz8{-0%Ck<x_jo#KI0s{JJKh|OL&r{!{H@{pZOHF&@lAc3
zaq<1(({Vc<oj*v<`nWU=k0`|Phu#dwJX<`E<MN8}@LoI4yW`OL+o$OtC?00*WE)4s
z=PkdCAwSN_>Dl;Gw7<aS9-Q4%m@iLW!5zwvkIT0j;XPuk<SF#Ky+#JUY2cr4wf`iv
z>$l4{;Pj0GKhpMb?E2umd)BUCwD8I|BA-zxORUc*lqDlRBWw=&jSBol+t=d{mcK~8
zLF@CY9q|`!m&{JE4?_3kFX|*l)Ok+@ey2(4&br{a(090feM^zw>BFP#tdB%{@I4p$
zowkqo0X{l`-)WE4i?*Nc2RLg)FOq+~*zc5i6Tj0>-j3gCN%BhTyFo8%d)bh`N3Q$S
zbA~m)=m2)E28;Yq1H>QCzz?-uegW-Uk`5v{_I7lTf8%-KJb^Fo+2!~FY9l?R*YO>R
z^nB#$z#s59*YQ7X5Ax#iKS3vc;C~tyZerr{KaJFtU_ERv^gA32{k4iqs_&Qhp6HoD
zchCB*0{`!S()T!i)!$?KmcPr+FZ`%j=iVLCxYN7G@w5Kc==)tEegC1pq3>_)4e0x|
zYk$A!`|a@gQ+Jh;@9$wVmfLul<0VH|l-XEWZp|cejwT0ty)Ovj2Cd}X`mE7GY{x-z
zf80Am<YG!U>2UidZ<0N9HTi1VH+c=QjBBxnuA{vVjQGP(bW~ugM*9YdZ6>j`^29dV
zsIhti`!#N^>M7itm?h6m`oH>!!2jlxU*hpC{agD#b$?Ge`2$7%pT{ed3x*xHjyUrQ
ze5W18?ky;_dkcab8oi$)ZjhZzyg+q-sOywKpVNE!d^A0XOl4n!-8)z^JMir%!+tZ^
z8pIjyaQLWMY1SsmN0jWR-TwDZqYe+bRwp`^r)9IbHut<qo3S^@KcLMNJ~?s(*Y;jQ
zdz&(MBrZ`5_uRfYw5i+zwMpFV+zjUc2`}o;`Mq49U*&$58je}o((@1S|6%sQ=y!zq
zQ*70)FZt#}J;OtO592qmx(0GwdImCwxI4Lvv0!hW{DRUs*cW8?8%X!K=?H6LbRO*<
zQ^l;~nP@ndm3E)0<|;Nimn|K%tsE)oE)K7T+^7ux6u;m(<%;Mz&AWRp1OD~gAaX&m
z*|I+rz5{yT-ne*40i%cQ2;N?Cd*m7~BkvD?gTaQx$I%}<o?k3~q8AOu-y0zxXQK8d
z)7Av{G$--{I~nMOdmY^TTmt@IxA`jPQfDr|h1h+6=2L$E9L9K(arhUT#e2|qHSfK|
zb_tN>PBxqVZIZ9TH8Ipz!Dp0xS<vua6FaXb*G%mZ_UZNhfmxYArykrC(ELfh#UG*-
zYOk_yC_2Bc<L;Uj_0L2e63%Mtpf6&pnM=r-U~lf=Bc?|=U!tw~e6%*>oP(w{2ThHv
z$6D4Rdm4LuuA`@|WgW4X;u~A_OtNS_3g&_6yuJwU2nM~QzWwvfVq(GDcWPe^IFep?
zCUmIW{$e`(TXIQEB4|T&dh!}_ONdkV;@c7LV2-D!sx>d?_U+#n(#uR^^Gw*A-Zuaa
z4n^nol>sBU75g-QqP<KAYqBbMRy34+gMF5<i|k&NF6s=aA4@~DZ{SBpx=gmJhq168
zX4-wh_F8HdwG2!y^}oO)I8q;?mH4#*zes(ysXuu>d3L<_(5IH=c6~NNuEk_>K+yTX
zO_$oc_u5=)&*Yw%h0E_x?Wq{KpW4&dFB)V0EZVil>rXY6kK7x1mp#NI@BV$jKWu+@
zHs{m_W3k_kc5OTZyasayk0hU}cpb&(Lv!SZ2nPxBLt^k#!x~cU<plY1333ZE6RZ{9
zoA92-on=lOEQRaH((FWSLT}L+`LCtS!?gMyt&2AH%&x<(6D>v;z>CU=Z)7gD_jYs7
z;wRgbI|d(2w$HYB6P^;6k|Qs?FItvkd_9Rv4SOwSkKpjKa&y!E8!qdfLw=;CWnx4T
z`4wx;)9dN03SO3k1~rz)&K`|zh}Jb%osn6Gdx`&l_-UKNYxQ3F9`(GNC-Lq1<m@_m
z^KpKsXuFse2gtqpO=<BS){Wp2EvBab@25rby0@=`784;Y>f6o#nb0Eq>i-Na{%U-A
zteQUo9S1olP6qrfIn9=?<~1w6T9>-#^ZPa5UuXPx?Y|~Rl4PIw&}`)6Ny!K3uypmR
zVe-$?h8&UvK5z25ZEUtzxs8T7i;$Z&&96_*F!d>DZr2Rz=RtD^$tQy^O(*ZSZt<E0
z!}s!hYt*dKS*)TZ$%@d{Y>~W3ggoyK?nwu@cAPP2KY?4Hj!u8THF(Kp@h<VD&lmka
zpuX&y9>v8kxQ0Gy&v2J+Xz1I);^4SooWAhOlOKj{34HFkcX3U=2=Vw2Uj4=vw?;%a
zf)RX=?3LAj+i#e|x(7L{bte6Gxyv^X+beFz@j&q=wUZ^r@GSb7`kh9<iXU1y_;!7c
z*Pr@&h4DL>7xJ!jJpI>Rcj(^kE!ThL4QU*{8wdXCEPH^}u4?4!nUlruz_;By`@?7C
ztJbsbzwX~o-N^r!>jt0diPuNt$N5d()2h#7;jq4;5^{_<A7({qdKtRGLG%*QsH?eY
z*f+i!zr5;TW~h_dup_AZ*uY+kUUE#llwTjGZeC58BbK1%q94}WOoVk&S^t~Y{dk$`
ztmfL`aqJ^HEcx9?J*QK5EhD$)>NIfKd^B6z6Q7D|d#Zk)x1RHsRU>s#Q15ggtnI1!
zu=T!>MYo<soiEl+qM+{PbwzbIe;U@^><a5{`qbUD^H@+r@>${Q3iO#A`@g7H>H2z#
z>)wXO`Z%>W&E;d^_@VB7rm?<pn0uFuz4za_7fCeMdw<Lx>eY?)P3-q<tnx-`x!U&U
zQ}dkXEG+Pi$}GBFB)QMkw<1qYdrSMlSBvVb$Y+*CpOe0xW$gL6=2Wxj^c+9kJH_mE
zxQ_q-?7ew>oYi^veP%|M<R!+oyvh{KNM^A}1I4SrM7Jcf1k(^~hfqk-$Reo|<&(yk
z7>pfs%Qj?DntIIQ#H8`aK$=lX>VlnkNE*hN(j-owU^^vbX+0yEB~jXdjj_htyx-rs
z=axo`iIehtp3nQd?;rD-nRB1}EZ4dAbDis$KO=97$!_>Hv8v=E6?{^P4QMv8bMo+V
zOz+$@{Tt{cGYegEI<gsEPw!33@E$s;-U}n|R37GDPCHKURCR=>dcL0V`~Au$Xkv{y
zbJ-*PKE+!4yueW3`u6hrq~Dg>k<PENu?LhrFh+D|WwfPjJujr|lwu>HGsTz+?|uDr
zV0&eq{+JZ^<o~AqPT|fs8%}S|?FsC&?^rtUY-ricGeig2$vz!4UWzS9u7``D1LZk2
z#2Pn}U((>WApi9W_Ngo#>>f9Dp70+Xr7!2GVcq)r#<niR|Hx#|ww7JZSS<eQZf$&!
zOB>_l1R?IU@p{@99XQYpasA*}vP(3;y1mRi4EMW%_t?0=gz~WPglCE^6J9d5d3v`F
zd>@RT!grsBz5vX%md^41+_f`_*$ouru1%1ONqIG!_?E5~hE6Q}3TR055c~#r<uLAx
zm`6Z<aBNTK+|L|{q{?F9<<VZ?vm?M73WqY_+(fN+9@orUxt%_|(!i?_mpXv^m8_e1
z!fwvRYF=&JLkn+67Sik1JY3>Oa<c<w<Nn|an-=f>`=<{F%i?$JzT(Bh9kbGhP0=<R
z6L=o+c*OB-%#}o24^H1Y7CY=z#cK;sk$>pa-_TB`TXHl=47kbuP&6@!mQ;R49(Gak
zA*ZRYxPPsIem~Fe05qLB2N@4tTX;d|{v0jtpOMC~3!(2t*ps$jWPUnN!|L}>{55+U
zI=(R7Psgb|9jAXYJRRRCxDDd7*Hh+?b?|z)&_f|@pA9Xh^ECd8(Pu~Fv*=$mt8+r%
zuRpExIcK2viPndlTVF(c#TaB-2!GgE-ygP7`yfY_ysJNUywO<ygZy9_c+`oN<2@f1
z@wP7fE7xGMb;Ng`7|w^)fUVc>&lu{%;`z3bW{3}~j9iFO+U_Fe|IkzTu=Wh^!*Z}Y
zPOQ8!5yIy1?E?#E`A!?L5#UdK{yA4X<odjS?$7bhy&qXxWO)g;%SP?<<XTH@e6Q>i
z$&+l$IO0i6r(_ATrN))Kzrpx%*&9#tOyySAAQy5UGN)WHBP!l9I#`o>wxK4hGpfvG
z9ds;x&HB@j;gU(<W@oOom@#?h?9dOZ<I~}Zdz{r3Ca@xWD}FF?b{%UzhdNI7L*T+#
z<{IrCUf&ih@bOrGmwwCN^*#RUea@mOKAt%iC6+M`Vrho;@3|H9zn=c#UvcsyrOwlT
zZ@kj+<}wDao#Mo^v?E^FH?M+uIC_tH#PdGAHtfvwfz)b;++~`}4B<6-{8KmapYs~w
z+ceJ`5~+IhlbdV|`bHZ++wY@$LFe@TP#@j$-{!|V3;z!D0LGqQhrDAU@I$^j!9R-Z
zgm?U2KOJ_)oD}CbB(o2eJEzhm!5ZF6;>SAWF69~Hm+wSz8w>H>Ngr`(TWgz=?~dob
z?{3Pqd0!0u^6dBd?)vgu1<2h}=)1Fer0g8zhx`tVF)Lr*8QVNN|DDyp0|oxOwKtlb
zm$#Um*_IFB*S;}vKDd?I=G5%&vb?`0)#;Gi1H69^I?`w1>%?arUu3c;mzeDA?$euh
zSAs|DgRwv3x7PmnB8O*;Tjx;nI2N@yTAcSm506`dqj1ZodFzA5_7z?!KfvFN0<QRE
zzIQyg<F=rgDExB%D>vJ(e-e3oGv)q&|Gn1yd+Xr`&DO>^7oQ<`Lz}`6;kwN^fXyRY
zPGz!beRyQBXEMlQon6;C)9r_tC+Cs6IlCXYwyM1d+O7O?<F3Z<p}W+Ps~z31jl1>y
zxxdCc<OJ(nz&`$=7S6e%GyR~R9MJjk2<L>OhaN%CUEVamz9lk0f?sAE_uWemKE(Mf
zjftGMNu4hx-^Oes9WVrrG7i&~+o9(=i`_qW&u{N&?##u~;DF~IOy}oeqvyMLE|?vi
z=VULVT>BVWx4chwyL_^(_?>n;o<COn!9Wkz4~wh^b~^I{|EsDN?a3$m)BlzC$<AYK
z(T$@w;FGNa_Mrg#7oI;>awg*B{jpWlA+N5U9Rl8*9k==Jptt=O;KwBQ)awyb6+39-
zrLZ^toVYw}yv~0nKal7U-h5Q_{^w?1H*Jvz8`ywv@^R|EnM<d8KF&qVVXBk7op%jB
zKKCO048EV!g{PW|UW4Dln2_i5grB$@&|y^O7I|gP2+D}Pz7yQY%R`+3)OpZ#cRShh
z$&u7FLcZn_?i^BlS5ar+dd6!4`=0;D;DhpE=-#Smlr`l2Cj4~TBerW!8)4xlbq=Y{
z&1X^PTqg-1{WIujsckFVkkxq9j`~W||1$c}9(JI@^M7i6m18LgY;~Sc>*i2je9fI{
z?78kB{LUFcEQI?f%A4QQu@KndchnjwmtKZ-^502c$T=*{gMApuCj*~3#vY8uARo5q
zM=(q?F7JFq5xi|gtRo0)IU_3@S$T8uYcp<lF@B$92e1j#R|c4Pc^LzCjN*kEU=xSO
ziZA=Q8C6DG69U|uaTM8RE|w3QJReVSmPR@Nu&AVM$sFZplzy&UQ-kABl!MCd3$Z8k
z<KK`6`8Q6oj`x0EAB^d43s?BRy{%lbBFb-T!@(!zL-F~ebJ&vwQT9Jf%L8^lKya8G
zmF_c+eT=EGx0u&6i-Xx`I*XFe+{X7ugV}?8YEPb%*bQye{&eA~XYLra`rxLKtd*0k
zNR2<q*#FwW-Zk90nEFC6YkxcZ{!)-NoZOk4P9Ba|N-p6X<*6mtOV^y-`J?6Vt+A|Q
zcyuhocf^dbetf~X1K*lpEjp7A=9wRR<BnH(dj#4;NNbOP{tkiznR&XGPdtWw26&s=
zzwB=BonR$%y_g&tocjxu3Gc$y>5|DaGkb!_<cXdC%Kn;_n_;hQ<wh2LI;Yvkx^$kU
z&j9TcbL{OwFs?Lb(!1b;8o$P_Ir!s0%6i`k&OL~a6(6tl^|Q~Ajjzi8Ud8W^=6?g%
z_@?)Hb%19Fdv3J(g5kcWG%}$qdV2FSlSK#cmP#jk4*ye&y?1@u(Od(prNw!8avB=a
z_|eg}_wB=x_ccAr8-JR8I7dDq@XnXz=^%Z)jV$NgGs=0%DCunecnW2?VcdOVaVA+<
z*8M3whjAMCoB@U|x{f~<|IWWaNWAU$^*MFeKE>BlXV7z^k{{tb|H$uKWU2@5TVU^l
zSKhuwguN%rKfHa5?SuC%?6WiMTS$ieDw*5yA>=W7NH&xE+x@b8#fN;mSF-tIkL8wj
zeCTug>;Cb3hdZ|HKb-m5@xx~A?ng2en>J;xOdRgW9XuTVu+yGtb)HmxvvKP!(t9T1
zLscLD#&;!q&(gy`{O#P1E9g(<f<t`g@H+gtl>Zs^BF5~EoUDH!@=R{tGR|4gU=Obu
z+-?3reHNKNzW&X750Eb-Ngkf|C_FQbj&TV2O&*~|>03>*hrTVJDc~^|LQlKl#~<Pu
zJic1`0&9)FNKSdRjZ6{Gkxy5$<v8@Fwtao#&{lH$@vetg{eJAV|Crk$-9~fs^$H9B
zybh)M;_K2cKBd0V0VMw^w>F5cfAhcEphGD?ihZBFEAb1>QoS2xe15(a?dJ=oad2ih
zp3p?jsY0HR5>F5<48s%Ngr>z8R?@!qUc?u)@8a_X`#aAU?C(5Zu)p(s!3|D}ozv*?
zgARCs{*UIr_<`#A^f!PX0E_f6{Ge@6uGIgN{GbUxb|F6q|HjJ`Q7Di9C;UM8awWQ?
zWbB9kF1KT))hk0*2RH<tq*(WdgfHl>K8+UA=MV8m1YX#L?1&#WrMtHj(j~gn5W2jd
zwxomjy32p^-{RE_&ecQvviIfRF!USe<Lh19sAus9`6XQR^<=9@=XtDO{w?N^g9o(O
zcP4U2AG!Rj+?!<gv<mmtkz+$>NjV#RT6~552(RCMT2ua_!DH#{EA#TDYJ8ugO!JiP
z9c9dxHleR`H|2IrvvBTzM$pd`pWZZ&LR$0ohM;TcZNbLej#1Q=-6kKFY`1fv`;(OE
z|6G3STXZSe;_p5AcrIC__I=qSTSxyjwoCKxmgc`DSGT-(=ss4V&U7=+WqWC!Z#RC~
zsv7_56W%y={@D897*DVyw^{wm_if9t30!29&%ZQ2;a{BGT!m$C`1Pxt>{l2^dbE=*
z!xnmp^0ym{#^JIy>Pvfu`j$PVG3dAQN2yQr)TF--T5m&{*7Ygy${&XvFTC205f}&-
zew%{RQjLr9ByFmXih}$EvW0TTb&kG253X`<Y46qcYyE(u60@v-aCBnMo=|KyxTM@%
zij{f`f8U9fCaW`9((g0Z82N$r&pyI=6nLp(jB9%Ws}1@!aUaQ6&S6Ch&tE;abxU|p
zzAoq6qs5xz_WjWb=<^}sjPZYJUg7b?86z+6BwiQ4ls(@b9@BsRO7#oRx4*_-nK{ez
z?X~mVE3d#up)p30nTq2mL-)~nkrZ(x_b`uJIDZud7YonHeY#kBvX{@m8FWrF3{AA+
zFR1+{XRzcO{4TQZR>z+6pGS<{5p=?zaVG0caR03;Vm+Z1$%V(|f0hjg{P9aAL-haA
zqQH$Gan1OH%gu^MFI`{0excd5o@Wi%`x*4KHu5ZSmlpQ4@`{na26=t?2hD?uqf%SH
zK$iq|HGyI?H*%n%23|ccvbUjTH+T3%PB_V0{0o((=EfOQKX6a|)P<LiR4no!++SJm
zpAnnV)4@JRIXEx|8rAtO!9JBg+y4akb)5A*F8m(UhL2BO*T5HKf1xW0R|3|btofId
zyQn`GrShpMmzkfBI0H<)b7|8%zp%7_eou3sh4yw@!HqBR{fESI<98A7f5Fc!r}Jcz
zMLvz>_Q*f}F5*SyA3w+D$FTJ+U5u3vy!yn-3HY9|&Hu_+pI;Z}z>YPKgFXi4iEg`E
zIt)IjtFdD~>C_nVL>q9b16@J(wD_O{t`pl;?XoAPXRYL1Q(l|5$QAu&mF|j}Z0~lE
z9i{rf&-xYhPLw=SE9DadzAm}^^gj5I&lBC>c36Hk>O=?Ssz28JfrLM|uD=?%Mjeag
zH~({Z>~!K<-;dw?24v)7)~3k%&h@T%A^C$B|Bmlf!1P7MwB_$o(ApXNS4ZgA+BESH
zbnV&fVQgx2y)3@=?5t}&pML;fh<KLeY4B8o91%VVZzB9wd4_V$W7gV0B0lJuU}mu4
zQ|Mi?+XM9dcK0n<+01^i?0Us?{^}KC=WZd6M7g|)2Mb^0_3im|2j<%s>>c9hvMu8i
z(tq_G1`cs@{XBghV~@D|zf0aHjm7e6*^k^mj9qH)BZlWCtWC-N!?uk3h;<LKXJ=M=
zW!y)sdx&ir_Yd28+()c?h@rg~D!#b;O7$77hkt#6`>4t}Cvtj3qV;m}#9Yni{e0Hx
zvthw^-wWPVda#ktLO7JhFMj17WZ)u`O>=h6U|Xcu!HfO%8>=|JcgF&2O`_u@=MYm@
z!~$bjGs-K*nWXX#MdDZ4b&+q<Y#3&}D6dSxr^wY5p6X=hZa`Mpbq;##ylCh<PqVHL
zc<j~lWL$LJ(0ZDC`a{fJw9Ni$`VvFT9lu|?CYzp@|DC!jdk-)e1<yI&9gK~(z6<Od
z{60MwhZ4OPn(Ujktbc)gOp{+!Jc@e>v%xP0*-LTv-$edV#Sz7^C!)k8?O<(%n@wMM
z-^@mGu)6F+XD;z@bk$<w+ukqxdvf)+XPVg=>`dWq^fHrmW||$Vc-9S`ue!xap2Yrm
zkUU^_{rIX~S?&sYbBRfcp56>isXoU0vc-<#3q494>96pWXq;PvQ(6MVoV32jWbZCz
zAB;S|Y0mzpwT{3${gaUi`QIa%96A#E53vLeG$g$Y|HDS#|BxZp+9|c`exn0DM&S|o
zxChqF-<J^~A9`Wk_<!US@43;ZYX`dK`4D=QZWI8Yu!CNZPf@(?Khc5u-eu3iz6&oD
zJPT=EF$=@-0F?)z^TIZjYfd=g-)Xe${Z8_H+H7L2;`DjvZBA0_$KL4dyMR0Pa&}#C
z$|5~)G}Bsc+W3|7TljPX=Pu-F#F^JFnd<WHv0(Y==;cm!>lNmWyKXVbox#cN#!POH
zLT4$~WL=fJB^3;|uL+fp4w!TI!iV?P62B7(uiH`+DsNdpp5vy&xur*|$X~R?Nq+fo
zZqC-=^p?8w!5P*+{b(?@4Sc$XyYwcKZ_T~X%uSauckFZR`KR~P*TB!noksnCm4B?P
za~n8v&0ps>JH+Q^d9HP<<&Kmz@e=6|vFA^2wbq-^L%3g7_tTkiTen2#LKDpQ!3kT-
z?-Z}N3Er@bJ+c2pM|*|!FM|(HuB!=`nYp^t-s;xC^y_zexUcpd?n80Q&@Jds{X~Fq
zhCP5L;6t2(_UQfz8eH0hufh67_}z1H19awa9R$4UCj8In9!>b4MZfW7rskW~MG4I}
zUJZ{>*(Xg+IL!CuW_A1~_;ES>c$rhPgJ)sxp^1OgsgXXKB5oson^SY=n*JQs4+h=x
z;b`HuH2y^9G#njtaA(W_+{X9yPUGj9=&FhJD(pLrJn!opdHILXmDK?T(GY9#g3Wz2
zNVW$iqAOcnVIn!g*)JxhUb=<kz3w_Gl=qVJlKCcB@!|>eJpDg`u6G!FgnjSi4(M6(
zP_(Xf9tBQ>@zb<`6X^AKv=Va}XOFHG{Mr4B+|qlYRn-$dx%e6Mp6cp7o$J?~ioay<
zN`3q&-?q-a*|jT_9q_ty)9COY9?Co35+9^pXfd0*pS%dGf;9*4_0IPk1m}gf2Y=-G
zrl>Pp<MHR<k41Cn8$WSOcKkohExm!Uh|fNp@N%I}C5}P;rEU|i8OXy9-o~9}ujKOW
zPpsDYL+SkK6m~>!ZcZ0`Te+yw$Fuu@r`i>rw5n}>yR;c4E~$_&Zl%o^c}IC2l>_nV
z=W{!+1WtwU*BnGkYAgOx!?oKy{}8<XP;T}!<UxFsa^2(dUFJ9)INz0jUvg@d#sRJ9
z_gczNqW?+82u7miUy;vNZKcQ^YU%YhQ*(~m2i|(;HvP`OU(av<-5>K?I<j;ni<kIb
z4E6ozYFoCr{E%-Uzce>X%PWy*!0gBpll{a&Po^D#Hy6?~`<zyvD5NvLO!nGO{{8f3
zY||I~J7awO(s=Dy^6{|3?FGzV{d@k<$(_A5r#GKuEi@jT$M?rqhF+jD#jfhP%HOQT
zFUh--N7DQJxK^DX)&KwCTj!FmCdTA>bUB@UmVViY{FH3h=ltc(^Pl7Mj45hqL$7E?
z4zxPt*=4_2I&~d&1LGXdJMaER1f4B_E@oKIRH*Sq+I`{qaItN(u$?;E@!R*?ixV?f
zSjVA#`+js>-}|>O|EL|uZuqtTp2iUfo7jIc7bj06{=I(c;}4l%$DsMq?mpf5E4~-b
z&(Sc)@L9|;lAohL&i~>3_9?&bndXOI#^%5F*CEUp9mc3N(EK$Itu6YCT_=AI{&PL6
zMW+9NF+19$1Lgtp%-i2i3Fpup#U&=qwN3L~V^(W@g(E(k)9_)%cgp|fpL2iP_M(4y
zdnW9S9bd+ZG`471<H_UM+pV#1S9rD6j5ss?UgRi;$@suUUYq{B-U0mG{(N*O{+|hd
z>5uvzzWel{v7Zs|9TR&2nA`W#XVDLPxQh3*_2Xwz-!(D$>wLU>n%~AX`yS)lAD{dc
zag{q}-`DgFu6?!Oxz?r+KY_DgYw;6U`}h~2%^~<%_?$lM^FkUdd`{o?Iq?x{-{N=S
zbH-$!=W%H8^Eh~<=XPubc;)jCJ*y>tK2IOpMIXQ+7Jwe0k?jT=IeYr}J~40}y&Cj~
zjN&H9O)i<rz2e!fW)mwsYstOg*$niRfxe>9G<s}{Lma2@Rlj@Sh0x?|blnwo=qcn|
zF86a!_<Mfj+iWrT)FKxJZqz$<nlE?ZI;uaetz7F61-5=asuO@8Te#%!%yskcsII^E
zK71~~_jWe&qiHaIg&#Ta5lefe##_5QP1`ovyAL6c3gv>@DD40D@Yjvc<0ly0MqNQ0
zeeZM5ps*jwA0O|1elP%+^SqR`8!vm+$7SJ4BWn=`-i@W4!C-y5Sf4QSin4}&Tk^N*
z&ZW8lK4g4P4YJ>Xg|Tqn{SCDj#D-O!W6)D{oX2BdFQ6?S{`Q?b{?>xOg=?fSpY8gz
z4O*W*`3_y#HJUnvKW_gY%J)B<Kj!(Ij{}8kHiWO{`J=y%(u2+fkHU632EjqR?T>{;
zpr9>u)FC)#dGRnZA~RIS*{5+x53uhH!|w;bqcQ6p&D)2;Plv&uv&D}gaDlJ>v2cmx
zX|Rv}{s*wJ^JFa20SjRx94TDa!SD%$(TR9ZGSr8UVCCbMPhWlVD=%Lx%|i=5%?E(7
zl`naoVBiVi!sqm1pBKung6FPiK2N{lGsz#tU;;BMZ~FB!D|;gGKTMzMlRu@-%!S6Z
zL}_;`Jb%N+wsPV&Mn@R~`dy0)4qD!VOx0W?rf3oS6|<v~TihukUe*kaDV9w!#@auB
zJyg^w+uVoYndr@bUbsF@1+-%I`v1-H!C!NqC!Y;}AC6WE=g>B24t?~IUwg|(3+xBm
zo;iPrj2cWIXW$*kw=0LdyL%|_h`pWtFx;GmTc3_WbAx_<uYGj3^E-ombhh)ed~xu4
z4x!)t8d&=M1MH)-h0hTD-B_UCY#gZH3?AzM+~Ymrq#Y;k`Fv)$aTMa-|IYpcj0xPm
zF~E4}XU?fL-{;JZNBj6(ll7O%pUIvWIb5V$VmEWwY$NA#z3*Houupr+_&03+sh2tT
zacYfsU;Qhb*RuPU?0-pDbJ2UalQ!v~7puIB_Wuff>Ck4A=zah{H2rj4h~J!hN8nQ{
zUZGF!jjZmTvbDTTzBI~ipX%I09CLdczAWMGRp?jS;A{9@wnx}Il~1{nw*7mL+Nh&@
zmKmqrPmI9J+AcNrj>sy0moP5&UeK@I#md)Z=aKgr=?(+U&CUs!DE74L5>HnuCKfm)
z-JbJ9C3X(%tA&a?HHSmoAJ+!o?BZMi_i?tjjWbz)oTt|8u{<}o$L#aRd}>XAePCo3
z?Hs`ukI!eZ=D>ch&UfsOvY*PmdWvTwR<|!!oxQRvV^R7`<70L5ao_SehAG1jRIPG&
z{Q$q7zfN5x>~GMPzgI5aa%xQ-bKt(-GS+F2vG6K{htE6oE%~Z*&FHd8_90p-@m)$@
zG+;aJDKhhvPjUwH5H2Zq>Lk|w(IE2V+Q|G>H#hB?i$7Gk43%$^J(JEj`<dUVCO(2^
z+Lu}toILtxoWFW>g2u^xVeEf`r^Jy??2*m0?Cz#rji#)n34OjT&^wR(sN>1^(9%Y}
z2i@tQ+|yzDFU;euHBN;ZUwo|GNj^v0abjB!g^GwT>2Du-*^>rmD%XDIKxp~0U9G`T
zi)0r1{5<ZcZD+qQDIfN;+|Lo`?s~sp#V&LK5B05n)PG^$;saJ!xZcT%2bi0idNr25
z@@t2ds~ul|P~AfK>%F&s{yp2DU~J(ZH8Jg_Ryf$2Gq6YS#aBQ#x@+SpV8J|YR9^SH
z*l+W5v3Iauv&r8)8{BgFJs6j4j0$^GY4)F2l9PiNoPTNp{>r2N%qU_xFY{=n|Bj94
zEbeO_efNW48<(MfssA!`r>C%~EDmBH`?MlG&D*m+KZZ^g3q|qAhuOElzH&J8P&dXT
zQh7Y@g4aaAHPL|e-F^z6`5B(ccgy~scMj=1cfZ3sgZtJvgN~=?36@LpV_i}>R@U4f
zt34NK<G8)Cwvh`pkRNZIYZC4!&paOY<7a+$#<3RkJrF+_H#92z`J={7PSFA5zT?be
zd%HQE&A4@L2Ycbh5cYPnUH_1kF;+iE9{Fo;=_lR4UuE(<uX_sjw&HK;TX*(5kpoHf
z9q{&r?Ha3|)>zLxS?2W<8kg@M-QoB3ABeL@<&KEe8Iy3}wP!U3?#uS^>`Y@29}Tfy
z^}t~n<5*_l5VUZROwK5#1AS63n86r|+=|`^<7g^^mce&_9N>Sly8sqC*8?3SRjxDU
z{x|~pJG}MGgN4_Zk3)VwV4L?E_~>4P$&BmUc3hLI3wfK}!^q>ja4p~z$Ba`N6F=$T
zJdJp}cn9)sqkkW1obwKY%bu!qlCy|86E7&_L-Da*eB2+(hxFdyKD6H+80GP-Gu`*#
z_x(Ej+=qkBi_H269&b&^-}5lx?eBT;@wN~q9ne*}*l@0B=-A@Oy20ap3R&gD<Zj?M
zm3TqL4@!0^X7KmH#1zC2iZ|=M!F?!hRxnXr#gq8_y72x6zi+`rIO4-a@bK4P^EBXS
zz>JJN^`w(DDeksl{a5DY3$a@pb%&E3KY7&p#-AUP^bwzi{rE@4HWkX2IPVP}|5Mw@
zU!2Dq;hgP<`<>K}zn1a$d;L9#F6Dxc4*00HUGT8)cd^%Y;W*qg$-O)d`D2q`RrsWS
z29GcP-eJn-4pa7?VahHTrtB<nM{AvCp8k634w6r?21D<@>X*wt{Y$_5ti^xN9!SGe
z$S<P&CfUFg-J|xb*B0w3zd&eXo`-HU$w!H8@a+h}QasP|eMA4@88PWtyV0@K<|hl<
z^m)^8JR06*d7(QD|5jfbuXv-{{ELD%2anUAAAa>4^xk>;mW)IX(cWpr+TtfFzBqbU
z#W+)Q@8z6bn=igu)=6$;%Fpr2uk*^IUvsjpn?~(w{dTaX^-1De>I3-kO-=Oap?mbL
zPZJmO{b9<#Px-fqArfySzAViATE7KPNB3*JcXC2`r!|LEXt4h0t&3>x2z!~*JIIf-
z8U4xTHt^!wyf{afeua~TcpavF_sLOrKS2NLOE^;4kH3Ci``$fyg7K5|v4gfm7hWG;
z9$?LRxIUtnjk^0z=03O&U;krgDO*cUqbRYu*P_>Je=&|NQu|f2qK*9!!`@DsbCVAF
zT$;$Og6@xg80_TCv|@si?>%u^XR(#jC>aj)&Q<Ji?E-QZfnR0@_)q&Cyr=ga@_=R<
z%xYpdSEozr6HY!alCQgA2P}RIoDW^fd1`()a~GkRh-?Li)sAB4ef&}WnYi`>!o(}l
zmuv{xkx}}I6Bn)dBEwg=7MazO(OSR2TBoK1+o;I(&iAYShSMc;1H>$DV~mP(Rh`|~
z6@iQDYTAgo4b1nRDQ2N)L;rivo#Z`qc)i!nGr?2xUAWx+*+4>e>apXeH+O%wj^9qw
zB_~SZcr?Dgc{4|~v#(%&79Tk~YwZklW3?;XtXMlX(S@w9htF4B8oav!eSBdw7z>Rv
ziF$N$**2VIRlIB7zX5H+EBo3Lt%0*@%hDV4S8+1%gfA<7-Jwb6aLLnR-y=^;>%H8G
zSL|M?_c)8XQMOC;JYqMXO`E@*+~$Qi?DG=Qg_ZZzb9mRbxA1D-^YHf6n(y}6NfX12
zjrzJrQFp=0){H8*%2@1pYv-Dl_Yq4KMNXukfy@=w@6e~yWUg?Mm22-k0FKEYu`$B9
zEv^!~rg2A+`<Vvf>Wc$2yNLVjfQFi>*IcwP8|8VNSor2;CRSlWJ!$%ljv=28^1l|J
z?XSs!8yyQSqVpE^+fCf2+U_Rq&+Gp)!}i}z45}T&Sd;B0#zy04D$0)oIWb@y>lnwj
zLF2$S*EmLUek_X2{Qct?9u9rum^{ol(0>Mu<1)q=48+{aOfuf3@dSFbM;Zn$JL<__
z5CkqIjHfcc9*PkZ+&LGhxxy2&>+a?L!Ow=EjiAo(*fp_msAMgG+3XMGVQ}7{zR4xg
zR38}F=VGr<g7TL}tNZ(`(|MFL^l6`g2e!}ZL46|I8+g}Wf8E2``f=pQ{rz_HsWty%
zdH-x|BVxE_t6$AYyh3F^<&1*nuQK^#nkcJ#i!#<oxcJR{S<@Sofj{zVY@n=d6gl{R
zOBuMVdVfh-1$v$T@%gi8^-W+Wx{!^sP3MQ9rH}vY^yX-B-Av&`3f{fU$^$dLp~PL>
zaBX<L>NMi(X;MG%mW9-BqE2)av_!0Gnlr7eU(d&YrD*Y2Kk=S(u5NFXcRX75d}Sfl
zyU~PN40W4n!(kt$sK{M>`?ZzxTj@*n)!$VGW3u_>DEs6-#z~(#H$^|ym%mLv8F>6M
z>SypFF5?}Y{V0TkU|{duhCkHa=^W0$|7V}P?ZDAemmC;noto#UGt83!eml=?gZjtD
zt)7Iwq_r=cbM5uc;Wp&p?2}6m>>TMXR!m>p1<qmj^mPY5&Hst!!7WG29x9j5sTuwR
z&uB>_hXk8Bz@-+rv=PG)F|%W8+lP_g$MF|WTX?+nzfNyfyqU&d#oV<<n!9A(sWngc
z@kZ(S*_I;CW{e<C)4Mxc`%UnvtOE`!{!{nCAK@IA@I|^t<~!a!+F{AX?ZKL`@<WG9
zyqtNQc}aH@XN->%-)xdIjoG(Sr#BxB)g|ZPhfX8sxpQlA#YJYtH-JM#xjEP$i=<3!
z&dt$XexF_68F)u_(=zVJ-g7?j%ai)-m~6{J#(fp~&GVL)y4T1*gbmn&{CIRy?AU>#
z>@m*a^!}`f{V$ybnqu>Z2qsbZh*2K77W`#J=8f=l?tx&850N)1gMT%}7{l95a@EDM
zCw!gAyN5o_bF*uxUZnELyG(Z2`rjK`U;PM%#||vaPU5@wXWaSx55bzb-!s|ovrZb%
zq{(IuGIs@WoJ%VlVyQS+qkihCFWqFS;odC9*NyM82;a0~9bM*z?N%KozI$Tc$JgbZ
z{n-!AQD>qz{~2bEUAy?`m|$jqU&<YYzkFB1<;;dL?}???kf%$0kaH2X%$*%ew;KI^
z-Nfg_ay`)Kdi$UHb7Guh&l=a=pSi@7OX<z%!IhjXqAdLg>(X2lJJt@r+~eI*t{BJ)
z&WNOQ%KcCpOCJ~wPcQ4t?Ir(S-RaHdIy2`4ajvZ;&f!2kbMNLH?!~kd3dWAD560en
zbVQ8%-V+vYkhdpV1BqNKa$y#A&>zVQ|HjA2S)RGr$(CPg_H}>O$sVuO`(>S;UZ?Ys
zz>2dOoT2FaGJenQ^~54CkzZbCaHl~F9=@m^_&X=P1YUKX*-;ZR?NdXhN51LwtM#iR
zi`o}w)hBzi;VSxs-_(Z2y`ere|M?HNTh!;}p{aY1H+W+Z9;)5=G&4Je{>3@D{b^)>
zx(Yf|zM#>_4DLz4_XevECmW#~1006Mv0-rX2)MH9>7h6&o5dYuJNWqM<DlZ|)4)M_
z2htzn8#|aB0l;ob=lh`P^k#gt!i~IrBRm!kE1p-l`|rQW&GyT5{x|*T2WuQ;ow@V8
zCE3596q`QAjMsdRa^|!mFQY`mN5RFxu#dmW8FFa#7GSP%3-&vaGlG3<sJtiAMSLr;
z&w>xiFY<$J9?zL{GB?M0g;;6ekl~r=?G?@-y@Z~7K77>K5v=)ex+r#qNnI%#tUXcp
z#Fa;!CvJ_pS2p&(>xsX7easWJC+eSQ>>bN@!xNE3%(*m>ZR|bgiEQ^(HE$gVBzB}O
ziPe;t30IIWcv@&o?AT9&i6gU$V=m`HO~lNJ);IPBDTiJcHyF<Mkl!R);l+g2qi5H?
zn^-XRBK&+1zdp|_eeKoYldl3J?XP{~D_=S6!zZxz2amjhJy7w*z#I5hW08{$2P(<s
z5G)GrRqShh%8c)tXy*R_xP<wg4vnZeIN!YS!@1B-%cNMv@>dqb;koB6-+g7eWJK&$
z_~Pl%dG9~ZxL3A1<_#BFvwH#i#MkhQ=d!`rOKK1B(HO3NvvGbg?Mr9tV9duu(BJZ^
z`NCB_Pjd$5FNl|pKHIn}3NPKs{>@7C&eqVRmd_o_Eq&_%dpJL-PyB?~aN&mdlyGL9
zV#rw|%U55_4X|ldUIAbI7Ipre7`UUvWi11ri2d$73C$*r**OmT@T=g&8t5_391g7~
zCclq{&$Toxz9?Et9Rio2VfS=y=d-LyC2g5p{eci|7-T_u9J$R$nf6GkaaSAoD!jU7
zH2+Qc-de|b<29Z~=`+imOL({O67$CUC=;FEGRy2E_jEQ>g$x|TV@xJ@Ry-zk&>LTv
z*!@BtlYz&C;W5(9c9W|!-Ce)hlyU>)+Hp(LH?aS+fO9^SXPz1nV_y3W=aV1e-r-D3
zT{2CM9K9FdEJg2M*CnTxnAp@~_a3N#c9wG<Ok@8reCgyO#@;Y=?BQSL=7>K{hZoti
zkK$3#?Voc;e0nsx!VI(Hgy@eo5$v;lu%A8v_G#tu6YT%Q>|m|hnV+TMiZb9Xosl+-
z;e4FVAoF{Anc3GxKbp%j=AwBBC+n84*`@i^p{q@uV)o6@`L+wq8{)4;4{X>1o$uHC
zk>%0(Ra2c!&EaP`PZjFi9iBgzHICJvOZ+fC`C8)S_dqMEE1oM}Tg99_KJ4*em7Pb~
zqry?@O$|-k3*T?AXmH;6_3xCkwO_xMOctE<&UoH=n0F#eBJB}ka3Zhfc8Xp^D_{EY
z>CMW$*>;X}yg-Y=4qOMGGp6w&bl?W`Jn7kO@PFmIc1t{+967hNjd~&K)uWSFQZLBw
z+H0%kucvMkyry=8c_Yq!qMQqP16p5Ndy#oVI;Ut7U1x<uUoQQ^hgwqDeQGaC8y_8w
zZ-nm)mV0`ptM+&&z#YVsnb&0K<No{@Z#l<I_!)GsaU9H#Q*Ca!?jG@mmK5uvx?!HP
z#}NAkb*pUM@O;1BS~Iz2CiU+5_^SDJtwl>VU)MBW@UZwzerfTNJO9_|%`SWtowPaw
zyj1qrl(pHiK(+Sv{dWxKfixG^cl<WyQc0iEm(`!n4QgGqK3bbj?thp5Kt5V>TZR(v
z=D81_2z&~Cx#se<fhA2N%{=v~Sly97rC-|Dcp}(3&MY(jT-MR{iG8Dfo-1f4^JZ>o
zly>y)WX7a+dJhb2Lw@<ugW7nCHdJ>`e(tjC^#9ND|5xSz|0)01GnOuVsDGO;yC`2r
z@cL)Uq-XE$#fM!m*Q0x#WSp}X&u~^;XOwnMaLY%~r}(jSbMfQzILD%~PrlZSSB%{{
z%0(m6N77a3Qh7Mu3>=}y<WH&ZAph>6UhTDJ#j1C?i*Kn)m22)!>!>B=;VtEH%3i$8
zE!SMWJp>Nr)j!<p!RCH&K=z{GDSmxWc$&9?=H_i6J^L7AmW;|k*XdA6=Lap^rt5t2
z{>vEGcXSqszPkU-Yj+*v{2g<VT_BqPTIxH;56-P9Dy_R`_rcs!XnSu($+Vtkeg{l$
zQ*9{FQ_646U%cZA)_xkXE`mekcWVy>!Kbcy;)lV`k@R~Und)4EKZoyE&_$~Ayy>q>
z%)Sv1d|^uwFnXMJ!i*EYDCdjK#BTW1MevAa@T&Uob6e_7X=f$RHo&Js7kNCZ!i?zI
z4X>&Vn2Caa#X07U&ynY77y1zVd|$NX?)h=#)jXbStQwzi{de%q<oRaDRb|uK>#I!c
zar|M1_v^6bB4f}Y-n@4c@c!nymvT#`k36IEr^t5mQtmtEQWM(>kAC!Lxuq{7BjC$>
zku}*&b1)`en}+vG&c*Yx)#=R5iOM!`=ddo=TQ_hgGIc-w&)^Ab=_K&g-hfYcftetg
zm7Z0%TKuAevvJZl<=dGGY*>#T@sKX|B{Jxp-H$k{!^CM+Ew8+L+G{4E`31(P??7jO
zeAgLl1je(eyOB8=##jPRV@$}DIojJWE_(>wfy4=N<4B)9ceK+k__Xz`IUt!PS+)f@
zz08`$C(|Bdi3H3}_5CvbCm)tyRUO`cd1WZ^b8t!HOY_{0ahBJoo*(8}FT6#$PBS6T
z&I>;ltm&Ns-q5CS^w;zOOgf8M55+4<j{FO2@-jBt55NVjQHW0w_yJ!gH|B_*6ny;l
z->yAS^s(D}iT(U0IXx8fxe5L3o6qv>dFGijBYRwazsftmrGNU`q#UH-u)DY^J;t6-
zkA5n!TH^>!oNDzt^{r2l`lStGN89DEME_Z;^UmPvVsLKpSJ9Q-*Mc=|pD@4~+AgZU
z+l(<2!r@dox_NagxYNWtN5*m|LGb+8gZOk;K0B8CqG!jZ<>!K~9II_W*Hj*l(6nmj
z!k?E%b0u@dSDD|Orh8WR?gj>;-RJj{lbSjBa?(LpIg^|e%)Q)Y=XUPmJ-sjf^9aA&
zn1j!^m6PIIKk~|aKJ!c7O;e}r6YSX_ufngbIZ!+9s>4y>sC9e{ym86(nYl!;sC`j6
zSO1Ip@h42yaIe_S<enBhe~bR3d;!J4W+bq^u<f?q3&GFGq*mOE?*7N2r()Lgad?Q<
zG~#HzLOmma#f(x%{>(+D$blY%?T5%6^lGTMx;0qRGm|*1R~gfL0=L~gI#AO7Jo04h
z$1dFUk<Xii+KTUVvLAn!$zB&IYTpX&ypM4|w$o(Q|0@<Q<?zVqoxfdldh-g=0I>Nx
z<c?tS4?LgQX7+t?1bPDTPJ)BEU3ToKo+jA?Yu6l5e<l!U7c4417THD4i^M2Pe@?b|
zyUBi-Hg_UZ^n4OB#p?q*TJ`_IWS8<>HdrL=;gM{vI&jbdml{uwNi>2_%H!q3PVukc
z_5L(Gy*1C9h5LnkEy-Lq!{f!TrAtcx``B<i)+pZ2>h}13NA#rG)2;egbpD0V+H&}9
zY2>*ruflIHq@MWgp3}AS{65>zLzbP)?eP21dI5_!+V-*M&e-gD=5d~vv8-e)@+E4{
z;$>&Do$vWxpY8mDZ#!FAgs*L|-z)PYV$^i@)b4F~`+n-9P@c=5sWR;srTGYUimms~
zi~h6c>w{0*IwirxcY4|Hg=crMS9a=nZnL)+>G@=BU*yjdj@vQi&$gzZBb^yMO1s?E
zPL7+B#3_6@N0yZ0M@HV|&x&W*r#;p@D&ge`hj$|v#p@c7QNT1=Im*mlAFNC8yXRSS
z)T6hKB(@;5x5BCHX=9(j38NnnOWKNk`6%oC5dQ8tW>R~rnbflf8aT1i<6rj`FU)@1
z{a`}0^z3BQUXNc(yeD$0yTx3(VT<BB!_b8}S$6>W(vv}MmO($i3YN8_r)D35N8>-(
ztC#`wpq}NN<B#J%5sgZ&$<L|1?XB!*v>{7e$rAM7qqpjA#_QSVG82`Hz`^cY@-1?O
zlg|Ynm2JC8{?tVYjal{9vj?*?7}}dA{<R66hJAq-v@gI~K-ZIcCU1PGeC4Kxwz%bz
z1<I`!XqUW_>~eY67{)uwWWVz+v*WFxNveP7VzFH(@TD8vt7NQxT<mVn=AT+~4R^j=
zOROY!NaFuYh1g?eKQ7xcI`I|uKU`q<;>TC+dVoF+eo5_t!UwY4ZJXV??sE&auKWCg
zwn`^kyC#&}`bxmcx7wcsve=wESm)Ote$uSodT&XhYgQok2>UpOI3;&mARFf_>ejCZ
zq#G`ly-=}W_mwI;&*7Ug_d1gd^S$++=}&||8%jzJBmc5p4dhqHU)&oqi@KTvv8g4_
zCiG0~EYsdqMf<$dH61;Dkx9<_*MQ<^_s`iI$ZG9bht4p%*vcSqTLg^ZG06Pt#*lQ|
zCC7P&d@SpU0LPb!H-5DY9(yr;GT(S`@?P@WcV0mI!qGH7OZkp^zjk^vcd_6HzA8~k
z?lh9B;pYqNZJfy7HT<Bm#7WlUSE>kMUj=VEZn%d->!P`7?X~V-hE7!Wkm!YRr*m8P
zQ@^Jaeu^))x)(VoIGxXj`R&)7q)$|u_~MuUwmzZ%an`lS`fEp6pDuc3wLixSW8Tnw
zbS~cF)C}_0tk?aM@%@2u#1;#GWJ9Bqv{mB6J)GOwN5hQEA184dQ=;&yCidB7(?n-E
ztC8n-gc+w%%-RPZT3r9Zop+eE+a6h`v7T%?;2`T&SL-L*ieO*V(au)-kv%5c!o$<;
zcL)|Aq|EY%8Tfmkcj2Mv*f7R3@f+Qpl4}U;d)b~_@#4;p;BycU^LdSERC_yGJ7BoD
zx!jrgtO+e@G$UFnwWown_YiUBf3?iSqF-<l&8B!!z;PGXhs^}e=`C7jO2;>w5u<BO
zsHZYqf4tsp+mb==>4Jajey>wM&uwmk2D^Zd&h@e9g>E1?1xKSJB>QM^%0L>-ptl~W
zQhW#T>EO2LPh;pl$0RdORlCMy*X#%N*=4lz%9PMd*)Lt8qRvC$z1B{CxkKRSD^nU~
zwnF#a*hJa~^x-JjiKhGFIr99SywOSa307Bp&eT+#3?}%Ge?9m_#o7>`B0eMd6hC3^
z942OE6@A|^O!*zaov{eUek_T<hoty9<=^&U;m4KOcslGd?Jbo*{_x`Ck3R!0u*Vb{
zx$h{j70>Fb2-rCIH@i*j--tiSH3k#h#{vyb>a1hW&7}<5BA4*Onc&+Z{241|zS}Ha
z3(t8Gd9v<-x<ozeRsU{h6K6NyaG}Gt>!Q1AO?eCZPfLT>-M2XMiE}61$NFs>`RE<B
z#Ir{(g8tCcWPcrkC)b5d?0(vgnBu+UQz18k8Gj$^f4>PV%2W~SOrM{>z%0FwH8x>0
zzU{iET^p!RzkBi1Ctm?SHQstt-2OP9`@qL#w6lr4+^KACwhx!?in;-Ox`S~53*={=
zjVD)3-r)T#>62Z}*lJE>ZyLFpVxLF2UbxR=$fJ?2BK9CZ?<Qzba>y_bow<lG&o<t@
zmN9F*6(h`w_pvwemFuGOk&)FKq9*oOu&Dh4{MXf?=@X`nyJ+rxyfb=)x$${&^~`J?
zu>{*>aVejfp9w5^H{V~3{II+=Fs5a6#4IgFFL>UJSwwEEO|`WB{HOk8Nz3`qZ}~dw
z`?wj?-V!MO!Yfm@Zuw}Wxcx7}Q|CPf+;nD5V{xmTnlNK<t4xi1p;JSMRW<pGYCcCS
zs!RN8l>MvE5o31Wg$olOA7kdYmpC;Qrlh4Fz2LK#kk_%)*>q@aXbI~QliqeSyw6}e
zSGdj_Q#XEjOKq!J@oVmPyokLO>3y$pFG&Tqk#uAF$+~3?@Sx&$7o6K_ihI=V{n&C_
zXA$f5C8s7%jvyD@LB_O0Yi}6Z3N!!cz4XnxXpi&T;Grvh862zt2cybK!@6Zy6ZmMX
z4m`4Z-{3?O?+RDQOS9Se9qU%M5Vae;E;TC>V~I6F$1Y({<UZPa75J>f9~LMz<6YKD
z_<A3*68xJVSuk!%WjHwcR%1q+(z*jpt)V5gW@<~(mmBV3-Iv~HN)|ER6^9sy@bmeJ
zTek!_XTHIVV2@x@=LY6{JLCB^d7Vv9ZqAxwGf%hz4Nm!NkyCSDDeFJd-1rLe!>&6x
zPz>IUJe-@|N}YqiSFnBw7#}nvEIjXrHy;GHA3K^`dOxsDP|t^h4}(G+?n0+3#N(9q
zXc)sk@t*Jv9s9<M_%4n-Uk(nnJcgh0^ZcI~C|<;vCd^#%Cre7t|6zH8{glU@3))Kq
zBS*c+yEXqgWv-<gcm}Y*j>Vor?}{?twmkelF8Fr?{{p^}fM-W|-p1OCmP9{o<hd4}
z{t7+6!j!h8de~E;jyuoP+)7`<DT_<YU3m2k^i%u%VpH?iJa1cHmw<1zt8Dkd+>US<
z+#xU3UB%dnqGfDtKew&;t_v<nrbW=F!tnRI;JZWWtr}X-(EeSkO!j5QslKB3Fo%5K
zwcu^MwC;F@{bN1TT%`YYFfQel5gi<`b1CjA+IasK&FKfw!B*xo^3~kZ4LqOAbLrF2
zDY@^6MOk;1o!5`}t#PwAJz(6ej9Y7=bui$qU@tlnEaa2)e`{>=wQ5}7W?aa&?S5WO
z_~v%y+YuaW`5-$)xr_T`pN(ZP#IgiBuV8J}o_mL>88&8e82CK^><sUCF%(`*W?_7Y
z>>IUhh?A`H+h2T!_J>)=2Y^R^`<|U8-Nrv3c4P_rg`Qqx&)OZmHI!IYX=2BKx7Bgr
zGXdxi|MlyN!!~AoEE+VxhPCbrkssGdrpb33J&a#>oSAdy7wVG4L(hJYc>50lN1gk5
zkeKNT{5#QSo$RFLclHvCu_F!+4#qk0hXDRco&9-`vp?u`_Uw<|Q(e0*`Ix9X@2N}P
zIZQv%r~k-4cyDkYilH4+_VuA<VPe2cxDr_jz72v6T++hEaQ{m59?p1@BiGJj`NC}L
zJti5g4C0Hmx~RP?I@;y^7hDI_B_1h?9yg#a_LTlBW_ZXrA0DRcey^;M&ZFywmRX#a
zKL9?dy8d~-4s@JjR=2Ff#;Zqn=+`l$;C3d&-WF?Kzx3*?!?=_`X1MZJaK81hNq(B=
z78dFHtUtHZf92+Q@DcsFi&L6+exA0R`w{%Q&BMGOfAj3$-@^NabpKA%MSOy{_EG3V
zbn(++@Kto-fBwHnA8wvL-2V&cBZA(aKkwQp+6Y|c?iZbiW@L+f0NNOrKie=IU8H^w
zy-2PPrWf-E(92&A^M3dbpqGaS)64oGa-{!`;k+*{FGq^;0hM4^lqP<T?69%~{Z_Ih
z9O67rd^~5~%E%?o`Nb!lWORa=ZP2@>8ne;L4bIw>z5ba4mOkN?X>3gUdjq}(Y>JzJ
zrOy3KU4LH8mcw(>*iQC0{6v1G6Xf6XX-nVkP3#?VzG=(Y{ye?tu06YnhtZfM+nkUm
z+nnxDjZ@|6*^c%G&NXwKBkUb<*I`3@U9x++nT?Hq<56PX)-X=B@9bf3XZf1m1&Vt^
zj}}iZ<hAm9OTOuh(3&c<ueHjPZ+g$6uH;_Bn!4nA_=MW_+x6$*eE00yj}LC2_x$#q
ze=PX@_x-=a1u|>^44AtM|I*wg-<>ts7RWI9o*UP2hN8-oR~hs=r`!82c=gp`uhhX_
zk({!1syvzHZ0+yc*<A4ZvqRzLtRGsY`(8v}n(NB^IpM$?IefJ5OK6=3%R`s*T;P|*
zF&}p(v2HhmM^jrCW-ZR$e@)hXKl?DtKi#{8GhOJH$rSb=I%P5%<a{t^*`m)9pF*F}
zp!ZC^?24kmF8d7MfS##LcaWv{y_2y$gC0|d-(PJH8P|J<DVsY?*?Wd5yI`0y{HjCx
zm@rHkz9sBMPp6VE7k^rzFSic=xPO25(Oa*Emal=9ujT&HpvT9cPo2@~LbuNBF)`;Z
ztzqqpcf%tTd+4vZ^WXR~(IX_w!==KPK&)TB=k*?Bx?lgJyg#_j#=FRQ1<f^bPeU{D
zQy*l_c0&7?4eHBaSM|5e{vbA#`V;Q?x`W@(yLeYPq-USvx8)nsd4NNq&J(~Fc_uid
zLXDn%fNxQ}#?Y4Z^rs8#gEYJf`(nTuH{`%ZUk>=Rt#8>BdSB;a^xik#<~{$6iF{yF
zFLD%9b>q~FOmde!OFOmNJ7@VXHa6KmPpKFb>G1NC1<a&a(47+N7-cwHJC*(PX)%+U
z#{WP9SlM%9=r7qgI<R0A|GtMqh5Rg@*O>>D_3NU2XC~tPc;8=kbstXlm#sq%uty^~
z06p5A0g?eejN;Hr;hh$#|I$9Icc+Eu&gTP)Q&8PJ9rU*kJxAF`QTy@@{sn#1G+vdR
zobMwJ-IXt2)%y$XBXGcL2c8^;=HX|3zn8$<%4kF9i5+;n&V%~n)7akR9T)rQD}%;n
z>*o2C#^<+f`B<@M^SsFOgYb&o*vs<AX*`4HU~QxZuRb{=`r^?G*IRulw%>=Ljm5F}
z<;C7>?$cbePq;JxVh?xbUu=>u72uBg_hZ{Vf2!#mj6b`B=k*4_p&<AZX$Oz;I22jW
zSuEs?k4M6v6nLb$6yi#%bC|L(4V`mpn6*p|1Dn(`WYyc?PwG7b@#oS(YgC9osyi6=
zsm1;HbAo*w;?OqU0{%#j2nSN|<LStbUxGi;JpMS68F~EC@0H-stUUfi-v)n14jP-S
zI|zT&p7zxPdHnHZjqvBh#hfGPmk)h3pgpF*8StlY&DEdwQ+yoy9>0CRyTzaAJAgmy
z{s8=Wau{404yQH^vu^dnlwCed*~fnm{#-T?f8xJAGyh3ZcL@I6@_X>7`klj{)q}?N
zN8u0S89aw~41b(=0DqJR<!t%Sx4pRx;6KCR)WbvPoEk<}4a<{|FK^3#;8}(8YuunU
z8o+<fz~6lNH7x&uXT4MW=hr<0ar=+LpJ90DJBB~#N&jQ{rF=AJi$BBYI;r7sYRfSA
zbKNjy!|^2igKvvJ@T@}oaR;r@0Q@-ve|uZ}foHu_`12Qo#`Z_y&oDgnoxmUIGm}g6
z`Dd_6*hibKSZFW*jCY<-`A39b(s?BBYz~rmc})ArPZPt^fuHvt?EE_9WF>nh0sIz`
zO9R{?9q4Hy#=Q=`DuSL_hh7yRFWHCD6~4NrA&b3f^R2|64aWZFLGB8y1UHc5e(n~l
zGv$5UR@V!*_2p10+@~!ZtFOyTudf?DP@k_G-LKDM4`pTlpJYElI+^o~hnIysQ9g#j
zdYWwY!E(U4VVJUOhACSQPLK3-Zh!99uTwh^m;dcI{rtvAPb$=Ps5_+pmFzp@?fF}Q
z=^FH~Dd=I&JSRJC`CYw9bg*z<2aD2PIIn~0_bha<r}DX7!UZ~5q5hs2G#*>8a7^g3
zYRlpy`j^IhjORJ@ckOp+9D~Pfb$xU%)zyBF_A^!HuokkL)rWF2_;7lb-@a|3Z^gcK
zdwVq-bvE|Yno)^U*yBa`=nvgsvcz`pZ#3-na!xRsuCGaf*U=r==Ubg8v3d3>Ugp=>
zvtev;i)XU?S;s=VKSPY`sWttvTj_khe#ODscewYk8yrhN>iKlKM?2{KkL@>{ugzS@
zp5g=eS=I&~QH)UFWc>kS4(*S`-7U8>j;-{65iv}*9r8dNI!E~!+V(5nO8CgW@eN0o
zjJEqxx|`g$H|~U1473+63iZbECAOBcr$yW}dw5yy(aW};9+Ti6`9$>I(TQkqT&%T{
zvS*3o`xf8N^Z8FcZ>cQAeL;b2>u>lFYt~AvS%v#|3j`1B&SYzGk&VsTK<srCo4T3*
zz-@dKyE=Ni!~J&3MWh@m!Nd~ad}PU@#J7M8dmbC>ZC-|=&J1?D*0Zam&KnbBoxwO2
z3yqKMb?q@~jz^odFUMI~zQt=II?KqOqi9~RuyqUe9gj8xTVfzL(T@L4Gzi~;_oQ_O
zn)9-?#5HEvKh@q5<GxXIN`nI$r+0r#K8BP3hiC`*Znt}Sz*hTKQTUp0wvZplzHWYi
zGj;GOJI4HZ%V@cW-?l8zuPT{??#i<MFV<CXP~ShKFX1oyWBYF4cP`X_f9KI#fdyws
zs(7~<d_1yblwJQQIGw)6?p^MGlh`DkTL_k!*^Nc!&*IFH?-dc^4a4lg<M*8t{d#?k
zTW;nxb=KFgFB!vcGq(-+R1(AH?R8JIbf&nI6n;#XXF1j?gKsi8j=q?u#%rIS<2~0I
zm2U2jQ0!DLAD2}$QTI0oiD$;|z?j_pJ8@z#6({v+V(ZfIoj5U*>Vxwk`8y5!+jod9
zv2cS14EKR)y@mU`b#I+>4)IBf2{hSAm^mY#gdc&aX0_tW{X72-{)o8GCz<OQGcQd2
z=##-3`ORj)1Dd{196xvzy^Q>C{LeiQOr+<5!`OrA9Osjv-6z^|n>E*TSzS$fl9}7p
z;3OUH)vUPtygMYnp2HuXzND@uKGn==<UWHi_h+q}YG&8dR~rAG@T3d4T=7-TRxs~4
za}_QUH`RAfe24C|&f{VnTqNE`=lIA&eNHS6zQxC4qvr8VZAJ322e!RYXMU!-q7xtA
z0>Dsfr}qT=Gqvg3^&o%jx!!t5^J^#E)W^~sIM{_86Ak$Lo^`-OcYW&q@gqyFW8ZTT
zv1DFs>mm5#A?Q-MGqm^2dRY1q+=IYs2Dk;D?Dz2`O&rUxu;Q%T*}@9G*#|55UXu6v
z<~;bB4<oBf04F^ctn{8>747xnCkDSKpONTC`_aSEkl}8q9irv+&n*zWonHU^f@M#_
zL)ZQ7g53IlSy0hyp2)5L*98@0T=MIHpPj)P`05<ZU41FmR`*(aIRU&o+l7mEK0yy3
z8yDvDA(4Y1t@D}SW0<(gM&ja{h=;k2{x|4OC-5<PG`B<TZhqwSX0`G6JbR2-&?466
zv4Y=6`Q62M#D`Sh=eK%CJ`NwZ!g+l91ZCT(&si7ZW09MDKg)M5-&;8w&;@^}zq?||
z75w-4yWw5MR45-p<9APQ?&s|u|1IS0&k@5W{Ndb+jic9G9BASr%)`eMe~gkLYFBYE
zxjl;E2qOQL`zU1N;B~*NkHg2BM{wqYvrF(e;o`Q76+d1CuN`#HD>04Yq0YPEdG`_r
zr#nPhqqfPMX|nOZlPq5(KDs)3vA2H2gs#XD7ovM!yQ+vSMRyio%+4}djWug?b$Gl{
z?>Xn^?|Nk)z~vrEwcmf&tJl7}%Be|R;PEndm8qGBJUF)B<B#&~z8!yjtB*fU>f?`_
ze@J{;wdW@l%-}m4O=@He9!rkn(cDE!epi*bW4towUG^SRTV}@Q>y5SdnA)=VIbNAN
z&b!A{?>fZ7R3f7S@x{>zfh2p`ueaViB2n?%g{NA-L^*jvTOUU6xIefWJ>`_<p*u`z
zZ+kDWFzkV*;e(=&H2g6)%4FwrR?eUY25o$ncMonF`gXyIpm-8IQuG@IhQ0R&h=t-@
z)u<6QZJWsJKXydTmsfEnhIKQ_X<<z4AUZ+Ed!QW~-|z09vLUzGMgHg<^~>O=%}c^F
z<f}dJ^-nz4nx)~*yTMK9F01=wDnfx4Q$`FUci;Vxd?jIMOXoL<D{pBdHnB!?U`%~7
zAb<a6;7{p0F9S5k6g)ul_vh}<tx)Ia=UL>C1cv^6)pqK%&i7qtb)DTa(RHrN>pIuL
z*N7poYjuWozO$M+Y5o5PYkjA3J>rjUyTw~0jm`eYR@Iv6e;c-U2kYh5_m^!wU7V2o
zR$adyah?Nps)xOG9v&9#DT2>xKUE0l?V~L$0>s0n@^DT8=O{LSg)_1?1&*ayPd6`X
zeK|}0A!YrrpWNxo)wJk#(7QgLLFNvSmD)>>Gd^;caOXpP{(i<uokx~5*!vleHD87N
zT$sqtLjT$mh?!u;i^4VG*-PMCFF2JhoS%P>D>zq(N9ZiGqxpJ;IMKmbnnIk2zRS!`
z6}IQYi+J2Zc%`sW?L0ZpQ3!v3tY?}pdKtPwJ-UJRVj9>dy^35$0ULKe6`IhwK=%&x
zLGCD3yTj=PqBr*?<QR2((I*50^{X>gf|GvhnP|Q33#O*EK6NE$S7K{FdG!<buDa%l
zt#jQgzxv-rPkimI5l=L|2iRjzwFN_oaF}z`4JPK+o7IAWCu=8nM#Vp_u1hkQYI}}|
z{3R90T0@+x^8KWhW8#9VYWSWrgLz5LrQ!9{kaH!B!>6${`<(9-j&&5YI~<SxzlC-c
zgJWTq=l$UH5Zdae!G8XC74LC4cJWqXOTP}>&&0n|tgY~ABXxGcqo;yP*YU1&kucA^
zeQ!?>`ETm@F~ICK_x-Les4u-nvP18_hu=xYa6ff_&i4ksrBg`mTl&DZHPllakWa&Y
z`#!Cztt0S3wdd2NKQ{SN%8~>1C7&m#zU?D#6Z>>g&X^?MrGKkmoj2A0U-M0@!hrZB
zmA_e_BOSf9*y=-yQ<8mY^(A7IM5FcN2HKi!<i4<a61HI+T57_UD%6i;OU1{MFN!#T
zt>{P6jZ{y$NV^{Obfgn`y-2!}^dy%#={-Z7;GMD?(fv{rhS!g*T?#$U<_zD1(u+o7
zQ=m^MzKQ{N(l>cOienvoM@(rfTw)ToEM4lA#Ya*W@XDg2VqxrA=^bJGleOfaFxUpQ
zRVK>;x2)RD>s!dmbI2X!*`l&R#e+B(kdz%Ny-WAcXP8Tn@-(_;&A$=@t@D_i3A_1p
zZe#fam&UjVklb?UV(5%N-H$B_E>eGgfX{or<JqC6l(W~BPBIq^w1kN>jUp3#Ua5NK
z=DT{Q!at=O6<K?IY9IWlKPOE2YrwAr-6v<tdv<dcB1{Z;oO9Ef*CDIxl#)|xDth^}
zPPILw((8K$HbuC~$sQwL(1V<})7_`OU1#Sao3LV_oNLR+$9OiOWSSQvqxhIqsPRRu
zWqgp#6fOuSn9t&%wLv}I*V^I8(Nw-Z|NHH`kY}g4oa2`KD14@P9L~ol)tA8+J@~nv
zDIV%4%tzlkV<A1y)B6U(BAv%Y*?rx}`}7`Sc{yhh;5;Aa&F#6c*MPB${-)S^;^4B*
z(cI38yzQ)S-<DB78rv`UuBD#r6%QvCW`(bQtc>U}-E3mpo+mzLy@_3a?rH9QzZU$M
z-Z_4k<pX{9-sb851(T<L^`$w<cG^t)YU_9TZ{-s&D&>yCP*HW^_#*gxr9<<5V?B3e
zG+_6%;@iNcTUr<DomV%`SzUWQauD1Z0i0@=BKP?1x6?*k-jMgnH=_4DxXYt~_gi@%
z+k$sSbhh$7Iw|*j5ZlLp;f2~#+yBKFRfl)`VE7nuby~v>j4yKY?Y)(ZPkt`7{~Wn?
zD`~%x_EWUqNZTpK=HK=4g}={ju3#>uI&;cdu?RTUbpw81WOjrzleK2y8zvav9}c@)
z$hl$9C65TVZF!utg^&NkCpKw({@qqrjq_ml9Am8KcO&OA>NeiDWjDGJXCk2=Z!TA%
zk83_ps~*4K;(LVIwx7E|R=C8wnGbm5Q2$}u=ZGFdJMu#t`X(30lbnxfAEEwvH$q>k
z7gQT2*n@BSNwaa?7L7f~*mW<x-u1>Evg7XLy*e|Z^Q!QDTQYCvcK)N<VJ!d6H}*oZ
zt<=m`td!PVaaGzQ(f-d|_6oGWgRHdY1PySnfo~}u2;1`oom-ehEYQERj}V{W+2mpT
z_HpF31D)!(?m6*efsT`JM6|7Vpu&BG&4>E;HDv$UI)nBR)RyEyfPDmq-{Nt8ERgmR
z!r;%~vwF(mdMV=^oOj*dBl2^+s=v#rcMCcGbyi>VbQyo)yTVJ+Np4SYpU>}3ttsW~
zeh_$#1YV;!Q!akZde<83&ob;|;MaH|f)7))Df%<S<>?$mAdOEo6^z~atcf)#zRV2~
zBUHq1`Oinh?0Y|L$VQ1TYpupsLFe6CX=>C?1^Wgj_0X2+W$-|?&whi;IaO@U{Vw&R
z!J<UE%EVOH5Ie3|!-p>5OdR_`+IL8e<c`dfR~_hj)jX;C%RZVu92rOcIPmEQ@N8(i
zec7(B?GN7f&BNxm<ng`nrNi6Kd-<?g`z(7FfAzIo$-S+$=T3cp>jd{ompRX63@@HX
zu4wGH*3%`46l*AdEVlj&pT3&2SGyLTGUSxTS6tJ2ojIlFZ9HQh$>{qH`VeOmsS|w<
zauu3vU2IOd%uTY_?F!VS<VPST&)>td@G6MM6U+oBjisRNn&{U|R_*%h)p}hZ*?RA!
z1Uci$Yds~=y3L&GV&6<_=KC=-oDn;<M*I~WY{~mrSN3`Kc=F1a*DZWCuZov;Uzq||
zIFn!V4Bvv6VJ}B8D}+~&+&xaI18jlYhZZ&pZckF*t{Zy-Ru2TPwN}xtKy1!*_7S!P
zV(4s}(Q#ks+baN<9P0RU89Z)e&QklVK);kPOzo@P<3Gk1PP;|4tNk<E|3c!y^LnN)
z1O9*f{(l#KN7s?72OPKSi4Ha#j(3CO$jNM94vIXE|DV9`&y;)ky^OfscM`wr^Z0!|
z?Y=#J%O~7_9>cSD*z1SZv|nubcm51U6uA)QEND}`la%gWhi=q#9=efuJTlL>Tl7v9
zp8&a(BJTWH6gsuKEq*XP)82rM|E3(DM75r+Qyyb<#M&bBPigk*mf=gTr*17gcp3kj
z7L%8by*kMuwIO*e9-(pgW9`oC+s(-P0KAX-@UDgMt{{GvejiJ;7<o*tqG89Inrp{<
zh%wDLmD>?zuF+yM`?IHVFG&A?l|AHX<ndT{eO0@AZB=_<BYyA?pi6URx9(GnIVyMr
z_v(KdJr<kjpOD2%o0v~z`A2%Ci)_<=EAxqRzk=oI$N}}!%-K`r&;B82d!xYhBj_83
zcf#ara+$Myv<FQ|PniAiZtg1V+GCVUuKHDMC~S((R34tMVi#!q-P~W8!oMlqTlsY!
zd&_GF9VZ(<mBY8qemK6~HheekMNaZT_F4@(k9#?O(WALJ*n;?6tGG9>IDw70Jrcek
z=9&uar*AjW^J5Q0-xXVz9usr#w|3)p)iLP{$c=p=W!7%=%HkKrBGH+Y1=(xww^_7?
zhll~zIv#3w5;lG#7__->=74`Y?`g<BkTS7{qk&lTey2B%oIDsTvw2+mX@x!2PkORI
zxFDNqEpxs7cW0O@`tRVm8qOP>&0N?25py+p8;g7});>G*xB2=0t&<?HL(-dbsHcPY
z?&0Q4oCEu$&<XJ;+$(5vm8nc}3K(pcJoM+UI-36i<{y34+oMxm!C5fY^Er}rz^M(K
z`%`{<Z53I0tLG{cF8Q=IlmF0{J?AVuFtp>#Mt%F|j^&@$eH9<%-o&HWJkpsZYfYH5
zF_e8eIBE2H_LkT4Yy-5=4c>}Il`Ad+-Ycg`96DK7aGzqN?>@yzEfL@&eOC0MJo5gX
zA@@}}$&U~#wE^4z<<N)$Z9W67xzLjC8d$G86uGBSc2S0QH<)0%i~qf?2py2SB2(l}
zP`ifqy>r#xxo5%oU(pd#Crak^3U<IEa(jc-tpuZv-Y+edU!v)P_#OB>lEfrzZ!Wr8
zKKkvEwO3mk*oTp9h~RuDdlUVwB8P!sCU{NC-$6MTUV`sC0W*9j`8YLiP8)z(5q;hV
z%!a#nGMtCmqXjT)17@=O1dk42raOL8-2Eb0%>`zI`}pJF)PDzxU?E#exmv`dQrNG8
zUm5mU891b~6zJLZJfG|*7rruyvlRc1e28<F;_A%l&DK5&c{;GAvr5iMfJa+LnWW2I
z1xK*O*q3a%7WqG`#LVtR$3<|-rrTa~;Ogwu*3TT6#M-85donTlhPGsPNk;Cbk5mxZ
z5M+O90=#?zJe;!D31;<I>D#64o%|0F3)Dt`ZL~4#=5TLCXi`rbcCKRaviOfO_14!O
z`#L_%%sPJaX;!{9;4Ih{p3%_QW(9laS=bUg6utK|2Q+5kp|vmQ!)5;Vc|N}8p`gh=
zFxF_j@VnOA7@kL_oR+R(d57Q}U|!Pi9on()7U;p!e^0F$!M(77Shi(k;yCp!KR`D)
zvIJk~ttE+@x(zXoqY@vk3Sg5krwcuM&w-yDWbRwxLD6$K!w$cbd_e}bWXK<4+ffWu
zt5N<a$?@%maUW|gO%R_W|L}H`BEAV9Sc>&RUMDM{VS`QP^PrcQGxB-7_OH+*k~%kL
zZk@Hu!5%In&$xk~ILL4A%c$1g%1HRlS9lgB_bYab&OnWyed`swqO4^FIY~Z`FXWL>
z-ON_@D1|HOyDBcz@7LJJjJ5`s1kCmc%mH7?^hKJ7;ZE}m?M*V%M;ks<@J0Ck>o&^e
zXMJR(nbX0#DEDUu9;5Yo1lVW{U%^l2kK-X?3kt{b1MGNg)nu5wDZn79y(XO{qJNvq
zMY#JzVjK>DYl4qp(?)&@J7(cEFpl0^IOeheW1eWr7<1X^Np{Sh%_ZN)5qz8Aw#6lX
zyz1j6aOtPu(qrIK-NooVT2B)gtuYD~?8hxV)_iUMT7o0wNEu*HMy&toD%q3hWLJYf
zIwPnYb^Ugw)m`w7ENkWN9&{TQcxBLO<fqxqxVo_qRc9G@&FI;`Q?8uI$Dxlhe2sOp
z@Nc3UaaTj~c!qp|=$IPUFRAxbQ9u2>$rwauT8|?)l+3ie`-_a3GGx<Y(Uf$!D9`;i
zU!lFSbIk;Fy1C*nZNW+Hl3`jC@u?`fU72xe9>|q=bP7JJp8C)j<o6POTil-E?S0Gw
z&sRRrd1YYL#QcD%)n7B<-}cGmb`u>81IrA2<QqH}4NJ#!2hslE_L|Te2h+EIf1>2|
z5%wCyV>R#42TYBTT%*k}G~Kbx#CB{mu{e5N#{}YY!8h?y=G^i==&@~N@4Ps2Jw^Qt
za4+ORnJd6yWN=@3{vM+EWMl7&`Zn#gfmh;_9bNcoxMznPL*UfpmP+{k!^O0XK5W~@
z78%esI)BD5qumrdQLv7mN83ExM%!G*mYhp_^~k)h(@s5O(cD1(iOnC6_R7EA%(!o7
zp31K`!<eiIo7kg#%LnA5m$b1i|3W^P2%nYY;nzE=C!3(Ku6Ty{wij#t+&5C8Mr@qP
z)oIq9dugiCC8k`#nqAJv)1RJ6C}&&-*vr>QZtPBTy~a_*UifbAXZ}d9eAV*V4ykwT
zz<Pgkrg}>U)+3))Y#nva*gy76VgIVXiuzs*W-;+Yf!ML;k;vwLS)hD~M{h0l;)gEr
z;F7^NZDq7@J0BCAxx~pn3oNmbdZahC5eIT=jrf4_KfbRoMs7YhKNT6=2#mGQWF&W&
zlvte-U7dK2DX}+^3obk<46VB0j+NEuHd~3c-AW8?6q#db2O2!Fa&+Pf+FVnCyn*N1
za>*9>OSWZH;%Rh<H2RS8x#fs=G|TVl<&Jo^ww&w(=<rd-?9auE4fW)%Pj`}gzMh?i
z4)i{;Rfz|nnYF>XnOl(|b&5wrp6K^Q@Md>_JUO?IH<z1pLCteV`~6MB4%Gfr6d1J8
zw)W80V%N2SvsR`cXN2<)Lr?cWNB(<;I2gfA^)=2EuyT3FjuqWg?}$gF#sVw&dv5)n
z1=3fVfTj95xXxWL7oBC;IRa<y%D`To)N;{Vxuwm#|0wjO_e5J&*vG=J$_-Ahvo?^Z
zr$6NgZiTlsp@U~zu7l?<V&5~6kX+kZFz$(3bJq08l4}xof_KE(fsfNV*P)MPh*NMG
zcZS&f6wmy2)Tj1Ggd<u{t+!p{JdgEZVtGeCPm_IK5HGD*>6_Jt;D!9?_!@gmkDA!e
ztS*Ue$e1-Ijaz#Kew%4<dN=st^X)qLZ2csUzTpk~bmn}x*gM-leBFz&3!v|gNNmO@
znQbX1J|4aXZX$>FC$DyDj(|gw_hI6fzdYBmI!~H)+KexA+M-$W^*mYc)TmCJedjN~
z*Q@jJGI9@4Pj!Alokno4DUXNx{W)S$8o)z*<rDBfj5nryQ7b&Xd81oyVFgdU+mw%P
z=Cjh`p@;Whc|Uuf!08_1!jj;W&y$6x!mG{iCpL#QwdIOg=I%w6E61bYTX8a!&^<~O
z$eD_b#F~IV!oA(XJ=&J8j66y10IulP$sP3J^4p`m{9T{?@5AT3je93Jz61Zxu=Ob)
zQooq`wDVJ9aC6|+(FS}fqs;4F$ZYi&NzI6bSPSV1QPB%{SHXTmhQ0cx%0Lb6EiI&d
zwc)?7d$QHW8Q;HP==(lS433eCa8HV2h7>QP*dE0UWm~T9iyP|G`G^T_M(68a&oaB7
ztb@ICQ0ux1o$nq#ehh_lzBcfs44$$(&r@vuybU2c>C5kBPnPv;0hj&0USpr~kLnBj
zg{Pjmuen}d*U*>Natq%x82<+NHF2ZFAC^^TkT;eOz&p@`b{-i}r>wJHyaHTQotmE9
z&JPcGKC}(;Q0|m$2LAS(%wYJ(u?y_8JU=;8J?U%>6HiO$WY2R_=O?yX{cYGbWd~X~
zTYJl+EC0Qx(`SA!N+18hSZC6Y_{*<}smV3SPV@549=&yh)#2Xq;#O?mN0t;JI|J~r
z607H(SXt`v7-Xn;%roo-J=007!LugzyLX!hCv)B$JJ{wrShaX=dmDJHefOQ;IlcJ=
z{J5Dofj#5R>_hCkbARWJQI|VimYWr!OV^jLUubr%XCIpQXPfIY&KZm-^(%fHSka_7
zu@Wb_wha4OIpBiM>WZ)zKgQi>E7CfjL2L{Bd{dn9XkTA8_sV)hPJZlbd|(~eMe$9<
zu;YIw59JFN2F{N?el=&$!((Dm^bGPXE*^_+7h+tuqpLUY-OP9E?Zly?Z*1lJeb{rQ
zBh2`UKjoYP{4zbJuGgTqzXGib9+F-9Y+K$mA04EngSCRzXGhTUQ<NPSuF!AkXV#)i
zj)|G&%Xh_r;bV6&E_iqv{M^7k@-}e&l~9rOOX<FihP#`3v*>#tnTp?v_?_lb?utQA
z`8hd1k2M!3=7G1!6?;Fq;$P5%Hcn-Kxttt$Pvc{Eupb?0RC3+PpHIvGPKJqFG}zZC
zp%Hst4!vMHK9LjDk5=J}_z(FNIQyUXiO5DS^o#iI`uQbX`Vh?H%pn(?*rR>rZOkuV
zrnF-#ZEXHQJwEzri|UaJ;*GMs!_3D}7A{49FET5Z1LrvQ!LjD66Vq9jFzb@8q7J%(
z@`q;_k8p0^O!MFg?FE2a8i&?=&Fi_@6R97C2V@#e>@WY0Jv;6#ezblBe(y5q>s%WX
zw4O^SU3}?2u6&xc@%fi6V{9kDixbHAKDxzz6yNsuIh)YOl>eCe*rf~MvEr|i_2jQ<
z@b){S6H=?;{hTY<`isAyk94C`gD$!ECVmU2KL20HedwUVRJNr4JGXQ><%a)_Cfq_!
zo29q&Uoc+)?7qt0y6kA-(?N8iI__oSo{90o0iE#^yo5V-j4|x6Hx68%1z+meYmGRw
zV_iE=Zx%d%Ox>#~d!DlMk%0!BY2#kbe*BGszkwDPnZK|oaAOr8a?ef>J!s4yqg-?$
zzehdo)JJFI!$EI6$6fp=crIOlwOaa7-YeqsJn!lKgZX#W#zo{%)jV67X9`>CamLia
z+67E;JNOuj6gf58e^5WamTn|o0gMcKpyE}@EjwFxr3e;=x?Pk-EZib3Y3S}3{8vBZ
ze_h&4d4;KJap8gODlcL^&_6%NZ^7(-zU>;rrv*#H+FPCqUV$UhQws80l<5rJMxCMi
zrDB7GAJn(+=k-GApU3!^sM+`T;<F*~S?>&m^fu|%K2F&)mFR4;4G&%xyn7Gv!5{oU
zRl9fAf;&l}f9ZHP1Lvua&bE3U_q4rm%lg@|8rJf}$`Tu=AYOaxx8bwUljWPKz=}G2
zluhtV*_-~_>N{%6+h^R}ylVt-d&U&C1XxGyBehN>S1Is~!e23BYQ$rs@|(e9U3@TM
z_`44apGKrxq@fe(7Se^KUz}KZO~TegPvxxIz<pDjyYBy??%m^~uI~K*GcySwpaKaO
z1KZ3bc#B=NLI@FUJ`+%>TCI>)tNSezVl8d<*B0@@ZOsJm($Z}irH$1-mH~S)X@9%4
zLd&$>GC^zY!@VF_+i%;gpCo`<+N~Cm41)7}zRu_KNhXtEFWdco_xHy<X6Ag(=Um?B
zect!;KFaC10KLuIBVMfB^sbLT@m9wS@Wcrl*+DGKgMJ2SIkr&pKL;_;L4V+|y-PgG
zclNWUUa?s&^lK^q!OcY<|5xm*eD?wmO9w_{8{_#;zLf7sD<%^D;zFw{iEU!dn*_&s
zx%`f&XlDlR>HjYuH1)qA53F+75A17XI`#Lw%0zQ$-=WRy8>8pAWt=tP*}w8Ez%Q+<
z)>HDj)=s!)@S)vJonVdfPnLo&6S1F`u-=o2y9{|a2Rx4~o&+zBU~?(6dhM~6@=p1s
zd+#?k&-ge01KZVTPxs8%!KdX<<?h+u$3m%Cl5<ehmEBgf_gI~i>%cdQ4{6g*Vowb5
zCGs0VuQKhtmv1|x^NsZp>l=6H6JH9CaKW>7;K4ogC%riDsa{*qVGGA6<E!d;F5CfM
znj|lN@)z)s`S=gvMZvmi&$#rT_WiptUly<9JVCHGdhZ`fZ@b?sdV2%(b}ICC5jeCM
zST+I6_aoDm+IUFyExG#>z(M+!`bgpnEtI$Q{3AS93~$fff=4(d8}-fXAB}eb<2|;~
z$#h_g=w;mTg>@Sv@Dym`;Y2O_;9r*P;;zQ!?d%o#ZDS`IAF4wS>E(<y_d(UT(Ejsw
zVw>k(cfHqkj5b!Nj5_X<;ndIhee4$S1)C)>wK-UW^_L717Hvc}axP9*M3If6$VLvb
zQLsi@pEp-b>4g8;JLI)y?h15Z)-Zp!IjMD29b3M}*chIk@1d`^nUna-moH?`3sytc
zW5o#cjxn+yhOXP<5z4L^p^W(tdzbZibHxWb6R+lX-V6MzISbl5HnOpAb<3`{4bZG}
z(Jk>6>30a(fq1{np5ysi<qvl*$1jJhas}fqVLiwf4o@g;1@D?1Q+kcNI<c#g_kdHA
z=z!Y*OgKNOb&2u(An~rU&33~Fdl;`fKa%Qe@pRJOM~PttmIt22X07L17jWTp;Y6$a
zgxJdq;GnjI!zy=a<CM?7&fRrSMp8Y%tQXsman61gdp16?aMusO0rl%1kxWohAO34%
zlew=o*$e-3&r02|zMu5u!XCyZJ$X@gz5^Y)#>_Oe$#c+iwwctydE()v8<XdlTu1oI
z^YiHQ?giLDr!YtS91cE<AKqNopKCQa1TEww_7%33K=1y-Qj^*vJs-YJKi1x)-!H!#
zxUMbq1%$1=2^yM_4`ZqcV{;0Riy+JOVIKq5#3tf1E^{)(4|nN4u6FEWy_Lji(68)H
zl*<-7z)y)C&TYV!^i%Z29^g#>-gD{y<gn~PHx``bF9{j$-J#vBngeu9zEHL4@O&Np
z6xsuBlnsjZz>Oh$zZ<<Y0S)Uxo|Y{!GJ)T~MKn=zWrDUWe9!Xf5b`Q~!jr#{sV!}i
z4e$bQuLb+;Kx9FE-x|+%qgbM|xmUgCP4pM`WfYu^@yUP0oLq{3sTu#$%yLs#GK%w^
z2h8%VXCr4(FFVz6hwqZ}u^+cOf2G*oNLPaV?tRtBoZxyRJ{OHo{X}^;!8-@&V*}3)
zyb1i+zv7p@hn>v1;IM3PniD}wxm&<B!6Vn=$;y(`MH}<PS@!mEH;uI$5rZRmfM)?5
zT;iVcqlf|Kyw%<BFtsL%tsY*uJ?r6Nn!8SghlMzJBfc=<Ai7%90@f|S!FzA2>ksg(
zy#UXiIma~J2%gFQpxAhD>KeV@TWvDO9!yra;qbU)e2|+nE;d(-W9S3Iv2NBf%)JT1
z35#DkSHRp3lsUPl!dh4PxquDx5N^o^D7=dP5jZ8Ab1_Z{XM{he!W+S>jx+knBD~XH
z`{IA*cW7+4L-*RUW_gJF04=S1ir-U^rJ;38_vdS?eHtg))(vfAjWYj+92w9%_*v6Z
z=vnXTrMs5Uj_93ex$5iAF4f;d{i&4Q!gp+Za#0*yao}f$wwEr9Zfxcr`i7T7%cH#8
zuq?E^owd4xItCsSQjQ4ggYxWhz%C;=G#InoOpC8R#+^JaIGFsm{Eko3{(%bw+i+(e
zYa>5NQm`#+?0l4Yme7`LFe(@PUG}qm4qoW)m*c!&I3~rR$X2BFAA_CI9pa0eI$-Zc
zpM>^I9Y>oPOMj;7yoX1B;%Zy;XKG{T-M-D}V40qWx&;3l$2pmUjBkPP0sM&LL%orH
zHIH6=LCA19_abkc2QFf6w4<1R@eKCi4WiHg#QypsW0x)bsc*g2p*`8lUMwpdKQJ9>
z{0D)7=;sW74#o6SbW=LQLEzI44Mz^C4cXZK5NBzT>HPH(4%@j<Uv_+Q|712WrU2%4
zF4Pa;t@f-;1dfh`pQ~O&PAX{oe&$kKkIO}OD2EL6Y@%>V^rx3Th0o^K`KH6%4=3I$
zzmxcHlxLDt4DAN@9$4L~)uTnW{enKlpR`vB$6;|z`>CLw3#~)P98xB^!o9_xTVY*z
zZ*e~^YnkQDPGOr@BU5;`w6nTg=BW09v+ytSKd9@~!NvsqRY&@0pf7HHINx#B@%&ER
zH(}?D%w8<VZpGhz)tT7g1e1}TqnkFo-E(y3I-Un`95%NWVDm<Pr(&d4=R`0*c)=>h
z_l>t1Tlepgo&2`H<G=Uyf%m6${oT*tBlAaqC;G*QC%n~RVPx~mly&_S{rH%#AKSV5
z`tcb54nf&pHNF7G%KKf3ej3C+DgQzi+W_}i->?Lk^*r>6&`kWZ+?$jz&MJehu+*4U
zZ6#(^a|wG2ybEHyLXML$oPEMhmb?2KlINfY=%Qi91WxX}j5&&4=s9v(rU#qm&CE@8
zdZx0Mxu+$1GCya@4D5c`6B^IsEYD?T(vqKH55yj^mHQH-6U=jVzJ9J6;Y<kr0FPMo
zGk(i|gIuKZ3U-}?m>9*tSiK*4P<nsj%Z>H<e7G}>ohtD-xmF@(PQ&-j^0e%pZX|U+
z{_KYHLdzZOoDFlK+1SS#W`vf<C{KK&vA%gbb2VmB17~UzQ+0Rh{Q8KgxMU0TIx!(x
z(cqB7h8!s&Q+Y`O*tv_z@iGfP3;3>n5}e0<0KL57VRT>ka>I7`5#ML&`OEBU?4JoY
zoO&FcLC;*q^?>f&zKP!&8}D_qPN6YQeY<!JGQ?K;>7gIV+oRPEb>J=D``FF&u3<eL
zt)t>i?{DmMN{HzJR*GxTTJ}I&m%?iY{JzK_C)ZqoKV#5`A-E6=W8sn@r<CB*%z6cI
zxfOT@uyL^2e)-twIlEXJ3qRH|s29}P%H9i^>6d()IteG9F>mH)BQIE(CB6h+Ku=fw
z6x?B6z0h65UJu4BUeL^V1D{@qSmJGG;L`(#PRr3QI1~ei8h(cD3>$`Y<T&3Ba;#B)
z6wxej$$(etNAyK~WHesZNn=aw06(xT*t+=HklQ+w;7~9Iy`w#qAV<UzVjL=wMcatm
z#5d8IuQn$W&Xx6v(HGZ6&zM_h+pv6|dom096W>N(u8$pI?&#%(Yq?p^up7n6FJs0J
zeWq9f!(0mM%f^;?xv@TrZ7=b+j$)f%`{=8h$IyEBP_F^oOSAQjopp)qqta8;{BM8`
zguuCwnR3bdD2Ml7a-IF2en|_sZc3(K(gv=FCbU;9^vj=mdGwqdzZalS-J7-c$pQPO
zcvqTu%B*}1eZ)mE_W*wA8=2lSL!Cc@zaN^9oKWfH)JE@_@y@IGMxM-VpgrWs%uD^V
zQ@RiBzH(>oSIf=ZEyP)G1;-EYUW@Z|J@*Tb>zQvdj}eP<gm&V@Ai9g4RW5cW`G^Jc
z%fThBv19t@xa>*cn#$2HGSW$Y^@4|MS?n~br*>8x%I`=qH;sKhWBRbEmHl<d{JzZm
zuwB&-%nLb5@fIoOb$~YXp369|(A<#cHxQ#DS?DWHEwSvisR(nzMn1RFl-fC|F7(3A
zNA@iI)wBDql1vzBHSB%0iQGD|v?RIc-i5KbTNYN&?PKnugTWY({W>%M$b87<hHWGx
z`akfjXzu`{CQCPGiWYE&`&aqd(D0hQ$P@p1x*xwppUEP*z}}4vY^j^uC)fcqi|4-o
zzK{=PwXfk%hiH@fUB72M;y?LF$fN7<=D=<%yPfQA)##n#8M3K{pxf=l<c6RzTcO$c
zJZI3L*WwwhSJRSd*q@ol683ordKwM(Mj3Pw888ucRwZ=z-~CP}-<_g)0X%x(Lqlkv
zZ#R|Qlkr(wm-<uNS?Jvo=&5{zA!t^dTtx<26=HtKva8-JI7se3Q9!F`zmQh7L)-5L
zuHGENDYcvAo@BL~Q2WeD_a;Z73(j$D?*U!#=OUaCzJ7|nlDWKWpQ}XoK3YWgUh(PP
zR=&XlFE3O9-4p%#0c{noy^U3?HmMKMcCeN~4BklVsr%Ku*a`29ig*4#+!dyuM%MJm
z;?mCfT1V)k)-k-+f&Yd&w~-I3LHw=CG?kl>$M2ZGsfGqU%(r;swZH+smAnKvU=Jsz
z&C;|U;FlzBtXX_-7VBHhJ;3n2@B{cJLZ(jb5?|Kz40xfo#s9MBd+mx}_0o3|-eGB{
z-bV+SB)+Nf%-|g-oO%!aS~&pQfaCzntKoO(22G()I`w8HG#fb}I>Xcyjzj0>-4>Jj
z8{q-p<M{?|d#&ur9+GV|@M(1~5|3SAaZ%@AbT$B3T6_y_aO$_796d*JRpB^a2HqN1
zGxj>2{nXszT6g-0!K1{Vw654f>YL>+!Y<heogqHe+9ipfI;mJ*?LB>n)1K%oT;b7Y
zyO+yqqz{RHHRB`blY9ova*5d_25%$#W?%5GzT?XhbDNh%=Nfz((BoRwTM;(nlEj7_
zfyO4ZZga4?VdFV6$J9EErz|;VfQE`cB)Egn@&{~y;tBKVx0in51)J2~hVRd@JfM;O
zh4+R1i+0Ypw6nycoz#Dbz7_Wx7tLV|vMpXno02uv9_yxdYT{q_%BcIS>Lsi2AyiMO
zOP=G@N2l}6e={LkmwxAYUfDT(Q$}3O@=rk{)Rwu()C$In&0IUDk>+zIed`QWFZIRC
z6lW#hYROD^3geGhenw6w_?c~!v1>f-Rg9Ohzw(QGM|*fdCpLk@S@wnMxOF}(om2Pw
z8oKfjINmXL7#v4}pI~SE$JV6&e@y?f`JorQmWIa0wJwy$+_|Zwo^h6X&or|$S>x0v
zi8l&h^tk-?-2Z!ox%1v^yDxt7R)^)k>{;<&WINWUtSkRKFk&A9@g0Iy_Mnx~_R2OQ
zd{+LFP|~Rn9b`{T8@eZ|c_!LWxKG|enJFJyc9z<ByM5vg-6t@ase*O#Tp!lax&gec
z^!Lw5>-|tM+^?-02KV6ow}Zdn*vuIApYQb#*-91eUA0lTfAO`|XkD~-Z)Xg`cVrK{
zhgxo(lZpxN*~>xS`VNDCRd)Yy#>vM&?O*NP@;?Nx<WPA18s5H+_+5=bI1<a&r}}>m
zepD2cMK4Vqp=`Ae+eFmgKdwg;MuKMpbNNI2r_v1W{{Vj{_<dwKyXes!Z?6>2f297Z
zi`Vb@;rk|N<L%b(-ReJpMYKM(Q?QVqASg@Jr?yk3_(S1Yc8U)R&NzmA8a>kZ-u&h%
z;4y8Go{R(!?uoVi5QpNyBkkeyNPYCu#}L}_^2j(m()=H~kX>9vfB%j4R@@U=Tu6fx
zHD;pQ>GjiY-w9hfJZp@(y$|^_hCh6OmSDe4LYEWIUsU%W{yfs9{yY+=p2zm$c`#?u
z;DDEmH2wg8)=O5clV2g!>Y_&r9wGQu1i5?u!sy&3$lk~wnWV;J>y@=esi!$2V@?cH
zuWI3}xee46J&hN(haKQl?ddE~&@XFs%6gwGsFxuAFu~ZmOR+zr4~X|I@%t6NecZ>H
z<~{gM!L`t`s=4Ar$c=L~Ugm6Jub7vhZx<c^RAc;p!CcaBQ?IJ9J>nWp)m~#ky(IG8
zsp=gq=oi`Il=bTUH9;S@xra`*Cc5|4!UtJEdr)>*{r?#MkMLi5w*KGdKUb`a{x9|a
zYYp`OL;nBI`~Pp|zvj?K8;|&9@AvD-Ua5C(@c)0!|Nmb9zifee{vQ9oz5AH|SMXnB
zlKg)vnKJ3=a(e^&@BbQ$o)IY_#=*-go@+gW7zb-7vofjjRx9rC=q=;%@1NfJCjM*5
zs6E%~o19tWZO*La-P()D%!+d$w{zDU*dTkxqR%oe#W}>xyV33a7~DGey??G&KAdW7
z7iud3AIDx&!(Pcf1Px-WL;QuGC%<x<J`OyAAMQzX_Wj1v!BY6RVl~tL``Y(fs{}f}
z>gV&LIu&=i2bxJgi%O6WR6pt0cgRuf?srzD6>~y-O*`i&-M;K92b-qgT)m&QXa5$r
z*L#ZgvWj7$y-MZl!A^LDn4BZ%wrXnvZIz-+xEIkLXBLBJ1M79YU@@ozY@J2?3;qnr
zqsq~)+}cNPxt6tfFR>Qap?{WGeE@sjUXvxR4!GyrN;>mxrJe5nQC4@zuQ8eYeEiX0
zu(sElD0@EyY^<z<4%SDXidzZtDTFST-Z8u{jYIv-`g_hD(+@tJ)CW7>vauc5-iEA|
z;@X}d7hM_iRxWV64&Vkju~#?|BR84wLhGP)*P2ItoM-{AvfC<;a*Xd_ozk4ci+&H;
zk2sas*Ba}4W)Pe7^~U-*XSrg15%Nn@AH6;dKB-+Nz$a{)de7Pk=rd?rI2W{?MfbPx
zkguEbDpB6WK6d?9n>%!Pes1}`LpDG6VE)--Pml+Vew1HTwvQj5>78A385j20Tq4hz
zeLojvGkUCx9}m6g2Iy#pIq3{L`DM>cxnYxYkyn#N_)q;|W$4j<P8IS7GH%Ve(w9B;
zZQ=Ucp=<MD)}w!(U^J!cZ}(X}-sbc<PM$P#R&w8)?03yyb3E_=;S5EEliA8T^by~{
zcqh6Q_>yjc?~#|?VCQpd_|JX|C6kL*UTcW2pRjxyKDAgMHfY^x&%TPj1kXRs)EyzW
zWc2I6!ZEoOn~d7{W*nN7I1d|Z3vFWSp#7%vu$}9@O6-tZ$=ewfK3o&exZ607iVZT2
zk2bmjzw?9Wki^Z#z#qkC&AT?baVB=AB>vkdv?<AYYuyziKZ<?V_mI=6XD#TX%GGch
z_UiDOmVTZ2jBjvu^*v-d-^rXshthA6pVMEvEP3sW`D=SdFh<{kiCsIvqBmcg)R`t{
zN{VxEug09IDHj`(Ei=<}ek14l`J^^{@vRQl%%0s<pCRC_HDmu;n%;+OKK*;(5p%OS
z*#tZ0rgG5*t=U&!&3EWo6>EUb^)5#?KkB%=gT2A}mD_Jh^v8%(YPbwLE^>QfdVihX
zRXd9x^xjWS>93o`S{wn-^em3OM9-H5&!-N)gY!)=>0-{$sc&+Ke)D|kZ+@Fo7_-(^
z&tzwg^@US2_>NYal=w-dnSMBagt%|una9@C+vm~leqwJT*f0V*VBt=VCl^}?GWibd
z<m@N!T(aza(2q?qa~XC~Xht>f`Fq6XBw;Lqr33vvE_m?X<GYC|q))|q71M<T`3E)r
z2dMJ~^<|r>0?$-d!d`ZHPkHlt7>mx7j)JbpN2GNVPG#v!<IVawqW6xFuQ95zv6nLF
ztm<1lCmi+WsPXBYj{%#?B)%GWjRQS?5C5yz6LSw;jy8a^oWB|mzE=79-`ZK@*aRn2
z1-)2uBC>o8{|#pxd%nOPGLggSm*gw4bUd>Zybbt@Z1fth#&i-{CdpVXEGVPy)LC}U
z)4Kki@h;#Qyl8tMA81aaH|IM_#$_uGF>bBz7JLEk!Ec~>>G^>&lQ~prG7Z!t)+6&_
z@+qobZ=|HAhBZ>YxI>l5)N4y0edQz0w_aZ2eCwqfoo}7S{J^J)W=z?mOG4&wBQ}#5
z^J_Gv&o<BpzNn_?`1rWC@M(viAzrvGJm&C6CBKX@6J@V%3y(f*HY6*|cr#Hk0loen
zaM?53oAF=|%=Y#``sMtbUT{=n-U`fx>$4v6_ClbGZP<oAj`;cnu?fWR*gXi$C-$zu
zW>5RhO)>Tr{Bwe-*M14%cb8ou^cl0O48P}W3tMo;Z-2VqevERh!B_ciFeR<dp?uTN
z)`q5E%zy1Gjp>T-dN?Ou5v&<JX}fnvNLkl@+LRojcI+DYKHS%QA8sKYs*Z4Q8f$vk
z??b-lfcB_Q(H`~VP*?Gnb{qq^?BR^YwRFr|9l!FQ%ZH$P$AkJjzm?}N`2Q7qTUo$=
zOwv5JjPVtg75?^Y!y)2pp%bmd;?lOAo3#z=tXYWM7ZLBQi=~0^=IX|J;65pOhM5yZ
zb}=`t=%38qxRd)Uj<pce4UL$}nncefr{12+Q=G$CG}V0h_OhE+?0R#S$tjn~R`!|3
zQ8kY}1^=j?E_@Bw81{9EhnJ}(*wY;JrskE2UEBlHDmt1S*Iy@_N?UkxYgBRA{#d$C
z=4+$)QKU~m%bTh%a5B|ru$PH_(ms*Q2X0T)o^3;4bkN&~nWKK#<}~RZ-(Sc6%|tKa
z%m*=PnpfziHT_ZcbRPdnVyq_%<Bv*NItbhoc8&em3F^h5Pg-~4XKRQx1JBRudYn8T
zIwzQA-yG*W%aX{{)@FWV|6P7_Bv~P!OtMJMSQ063b@2)8KtA0Pp4zGyZ`xR{d2bFs
zQlYuaS1R}&Ygy3w<}B7gG=nvhEm(9YuwloouOv>qPdRbIiZ!2)+&Y-cN$aJxBG=#|
zt((@SaLu${(wPL$$2fCxDtID4HHCp+0M9siHl_pLVmP|wFO4E2{=c*tz-S3D63mnb
z_4P<ajrf;vMtZi3>@L657S`2)=JCBeWcU4-Z{IK}zIyYdWW`$QX&xGDA?@_`^>Fx}
z3RW>_oZasWuFT2iskIDpeZnQchh~cpS}(&|2e~^nAA8muc{v+dGDQ9xc>jI>#rNso
zJI~(Suk++VKZWhT?el93-d{O5&VlzAj{H3Tq<M}ws{xvD2;DO91AYxU83ES<A7C#z
zHbxVN<f?43NtFPjgVVXUDl*#YdIzUFo#dU!Y^6Nr%-pzjyvbb&ET4jgTewRXI&-Kl
z)WcrUxlP7l=X}7U5sSoc3fFpI9_W^WL)3r^;E>=n@C-e5__ObI9%g>O(Y)B(z1QR4
zU`%a{srPzhOxoDSzFl^Dyt6VCIot@%`PgJ~9#ekn=}zXO?{YF@pe<hm2YzHmZ>$WB
zK0F`U;C^V$0dv~84QoS-ulV4t{a*!Em7!6G_kd%sL`rJpk52=KSCE-Qp;6D?db;F@
z(BUZis4r65mDmvPXFuf@fKvw_3w26oI{ZYq^OZ*<#5llz$T4#8u{i(dcOHJCu~YqP
zyc)wxX3VpBr^@Di>y3=Ad5JltY3n!mnEGaUvfNCq%|C^>AK^4_ZT>0Vi5{By%~a9h
zNKNx;(*434n@=-2yI%a(dR+@_)`v_c$aNaP7CCsi#=eBubkVwA$<2&8!QK_jwGNX1
z)Mh+HzR)q;FHT#~Lc2}_b%2xV90NXy3Etj+mEY>;Y0ectot&A{I!XS6Kjh9{)-v}g
zK03S84BVwxv^nOrI6MG8o^hxnx=(+MnS2n8Nn<&LZRBaU)V5RHhUjYW3EE5Jmn^L3
z(7xl}#}SNOV}w6gJW}5(kJ7h8-$U?_IqI3{bYOdV75p>dN{g$1$$9=cWBg0@Z`-nG
zz?1t5;TL1A1mgg{?q3ML|0l*C_s3p1e#IRW&hO8`55-!XT;s`NM;3eM{K=g^Kzk*J
z9TmL*Z*+bexn>{tqSYiu#XGgP8psJEUDQ~*tk^q`eu#F6W;ob5R5!#vRvqpW%JgwY
zOZipQrf7n6Fx73L9<oFx=2UHLJ_BDf?=-Pr*M$pcHL^w(?*(?NZcD4<*vLFNBZ$o?
zrqh4PH9B;Pef-~uUwi*jGzd8CeVQBxqGg4+^WTMEJ`Mf<?f9c-njI(C{D2(UUQThV
zLxF!);4*mwUX5`VgU+Re@bQ$V&2!0ho{cEE4j&NwNO^@$uGwRGQPSq-ydafW_gDS)
zclJWrj<&~=7ukHAw#>QMD~rC%=Hs+w?z_CQ>?JlIr!7m)^2#_voV*YIthS@IUKu{?
z<b5Sx8Gb{rk2=aqy)xnhY?-O2Y?NP*-|t4}xP7?nn)vt#Wgi=%?6wigmX1*Np%Kcs
zX9;)>u_q@!FhbeYBa~e^ysVi#kqO!7%vq`HXJX68mJ_N<?hDpq0%xEmko#TyPkhpW
z{shnTzi`dVSZ{J)*nC1(PuJa4+@;xouGoW42h1{eG#W1t>)Wk6_n6yt`k%P&_Y8+&
zV)Y1Rca2c?e*$Ml!i7b{$I?trlwjSTtA6`+5A?0Vbr*k)c(&pjBFIq0H_away+$};
z<t%6cYlz*~Sea1YlJ^|wf$@DAedr{;#3;rni-K3Z=oiFHWpw6Hc^t6EY*G$b)f3+7
znP^1N&!5ykv23<~WcEL*|I)v3|Jnb`{U^hJ8vMzx^@repx`PbDIruZKMSqE$Uh@i{
zu_ig`B0j>8XFmAR{=<>eY8pbPw?>hDN}`SR;aI#ra(29ai*bJ6Xx3LW8gu(QL!YU*
zdgA9Q!V|swJ-YEthi5vu(z)1tSGMlDmstH#=#I*Pi@aoQP>tvkONjYRBiB5&Qu%Mu
zF_8OvBmHwq&m&%#{3)ZQpB25c8#ydN9M}TRc^yJNJFx6l`z|)frft|oG{y*H3>S_O
zAKH>q^RBJ*6`qa#W?3tFC!F73J@Hc&hsKZE_+xA-KSU2gU#i1ayZoKs{B*_m&v<$T
zy7MOG)D?eEGIsGt;d*gy-3axRTi4e2bL*NYc^PPT6mSj^zdIT`Lr-K>4L1L-zMF3A
zZ<!F!w4vL@fY%tt75ZrN-0l)HCj{(DfL#@E*#PWHf!#>Ca0R=^u%|7-*CW{Vg!|`=
z0(OV6|CIu}L-Zv%RyIHMG@HxAphs2%yDu+m;k^=TpKG@Hb0ZtS3LHinpF_OmsJ{?A
zWQP)N=@Xp4IYP{^a_3@$yP*tP^n|5F<lrQ3H#lblAIJB^d1XiEtg-Kwg!?V5mtmJf
z_qOy0{aW-1xD4U1y_Ab41^XdHzAw=u`JD^<__M}C9JU?LhR|PpJo)*<br$6PO|nHw
zUm=GQIXg;h9%6h=R?i4@mpjLTPr_ZdF}HJ_&K~&pRut$niMP>bh=s06jG)uV#~{6C
zP^Xz{bsE)Q8jg4Npw}2Dwh`Wx!@ivR0Bg}5wtCH`*z5(YgEx*~9>q4*5Mw&ICO*Wb
zDmyH&@L~Zp|CwH_zNga--We;IHE7p^1N#mBq&<+}?0EnW;fnpucoK^9RE#{&RZgxz
zYcuI%+zI5N-ud{U(8Ws7-*k>E8N54!Jx%l_$b(j(pAC-JuIJ!*6>qLs|6t5V@dqAd
z9SiM#SmH8C#-y@a8G~$p8bc58Ucne$cq;3ZdFTu$w;#UDd^5#!)f|KQ8mD$+;+(<x
z_MFLj`8Xx}p!C{6=j>rVN9BjaPcbmB5!NA;b~4@gqff5+uGJrMt=yr<+!Dk=DtBu+
z?Qj0}mEdf+b27ho_BN9LCelgH<9$>4f9&U1=6-j9IXQ*jFU(nxJ2Sc9WF_=L_U*Ej
zEBg~+#z>yzL?ij0yu2aHli29m#xhsRvVPfL3!lw5Z~xr|&PmBS%5yq+f6&ubHxZwZ
z9P1F9t?}7&OO2yXv>h@T6Xiaex6bG!?{X@!C$uX1n1kJLTB~v$t4-OrPSx(Uobh_Q
zel<?vVKNy1Tlv~VSoT8vRDKzDnp%xb^ZG>Coa9Uxb;1Mhx#Xv?H0)<r<`R3natB<9
zQXb4D$`}*3n@k&Xl8s+u&PJBJAYSx^0@^G1ioWRla<Kjf!Nnj?o5exss`O`ajb^sN
zQ<C6cl=u`qyN%xmxaWbGg47Z47GIXV<3X{D2e{jzhjWeaxtgTpHEfQ_2}b9VYL9?V
z8e?+1ssFI>mwM3aj4N4_JtbN#+7kF!V(=?3_f@1OpaDsEoO0_Nz)k}#${b{mUs%a`
zBlhV*a9DjL&y)Ryvs293whhhDI1TX9-1RxhJz9nOuC)ijKXg|>FLqtogP8xKEaM#5
zf7p1n|1{6UgHHVc?7H#=Lrd!t>_N>nafWBl*}%S3-hRoup6vZYi-U<Ojel|%`6_Y;
zJ~!t4{5u%?=N6uys6w8OlyvFrv^T!*+wp1NOo2bX0DqhUfBd%Pk3ru2r)-<bi|pNN
zfQ?CaC&DX_adyz8OH#>Ep?=YjEO+i51J1{|yMkEieaTUbcjbzH_%3ld-1|$Nwy-%&
zZoDQvQ(5{-Pxt5%|Mlb1(~H;_#AYO+54Joy-}2vduT#%j&Pi86cUAv^E4_05Q+G#U
z8@)XD?n~mHu*n`jK8BwXpR9#dVUFTp%*v51xCEcV{O`(Jt(YFW*5FZ)|6Ob7<%SQ}
zC=dLb;JEOs=Uk63tgrC=5l7gcd&qT{Sm)HsPZphO>T-;+e)NLev~YS~B21or<fs<D
ziGQkTxz>4bN+j~EF_DcghC_#6c(DBuyQcUqqxjcVzZrbU5-$LK&TWZ=4x?i=eF@sK
z7W~*5p0aUscuFh&{iYcwn)YwWH@qhQ|6TVv^;3{ndm=ONo0oOne;;|}I8T+JJWWiP
z?lUkKv&TQpo&nxH&=B!DGuhO+jl`|77hK?-zuII@F#a!*Qy70}eNyYqxQI=ERsUV~
zw$27Bhlu!}&c=Ll4`-?h>Q!-OPdTYnU-jaNc_|m1)%i}X0dtucUAWdezk;mBm}?&T
zs&{Ti@4B;yi{KsRz0uHa;dz<L3FftS@Jw|SFC*Tgyu$7*lZnwMd@Yw`JT7vx;$_?k
zW`~^*xluF^J!hZo(C_7}i|iia(+#HlaLJhXcca*;66bjP>~+c&<8n6p4BnS<EsrnX
z=#C{{33$1hGmA&iv1R+PIO;YI$OE+D;WDy9g>&h~)djqhIW4mFB@3K8)Lt9MUJ{%k
zRvvlfS1-;b{|4vr6oYWxR$>?Nuj}`G;MdFg>As-sST9yvuxsY5QM}-+k>n=5gS?wj
z%(eqvhzf4KtS#?G$Cw>&u>LQ6=n8PqgO|fx^;`84>!=4FpMVbaQ*YY5EA4#%%Ii2~
zOxoUUs+cnF+S&1?hyhp4#`*|na9(H4*#8ZY_q|s2&=<h@8C`}oAcpMQY4+!yqr{c%
zAtx~VN&Cp<%!=YKgp(FlK1~3p>>bP+uR}fuJEr?g{R;<1&k6Ro-OK-i?FxEpjCiq;
zAIzT548iB4*<^+K6fPL<OtS6!G)iavRi5U&b76Tm<!RryWY4xT_duSsK5gM$5v|fb
zv~BojJMFlNax>pUyY_wIDt9v#_Nf?^z|SUrQ^H)%<~;fW@@?$qoL_>odb^3IO@K4I
zqs);QaKjn}zAx@8?b3hpSk)#=LN`?2YL=7CylD%$_tJc~XUz?I-Y}D#mhyqV6#CYo
z$e6BD*7E#WeZT+mn9_|K`rG!;G$mhe#Fz4;Yn@#O;WItFr+3EC#%^=k;UDv^+UaGy
z=anGyhB*J@_xCvR%@!xLJdP|BD#dQ#zxxblHOEYp?CiaFHu$LD@OE^!Zp)iqG-D1Y
zIj5H-#zF00m17><zjrJ5@Re`}-vRC{{Ib2X@To^blt*<p2Dz)!W6ZO=KNEWG72t8j
z+U`exc)Hnn1$QDE;2U3?eY9t++3Bn`j~d=FYoD^;X=A=#dhwQ@E04yHI8)z^PTS3W
zQTffpTq$Or`Sg(UYzaBf8i_fIU3`B<!#6_9U1+cFwrbcBTJ8XkFlPxG_J)@C5Z8Ba
zbk8H(X6|_eefe-R|DU1lvw_dkd<(`&a7^O~jUGClQpP2Hx8VV={XG%d{8Gr?CHg7K
z*AZ*+3g23bC-_bPk9N%kn7F_s4NPLRJCm~Hm=X(<tv*biLDp5@TVK!baDYuVqP|0q
zHq%Ck_j`C>aM^0%+Wn};qF8(fII#}EvE)&5aM*X5@6I^yCdU(hG$#AVKT$7E{TOx0
zIk!IwjJqhig5O`E>?`)$JbIr$W|bF?`74ass}p+k@2JB#A6&z?+IMK*(3fOUProhH
zhq!};{TPFuDt~1ae7YBYCYzCRSBr1=qK{Sc-HmT5maVg~l1Je^camepzN;8#Y=2Q`
zhR$+oPbTFvz_%@#F^eoD{6xmiy*LUzXe|EwFmlf%`az}*Vyls-YO>g%5<Ckb6FT|)
zc60IB))pS;%tr#+Y>30t`{)w2S>z?#zn`OHP`)Ya3Naps@#q|K65679#As7vw6uiz
z%66*qK<*_r!0M8W2YJZLt34q9($~^Sz<}>1*ygu_w^gIe&XLBNWq$_tU-j>59hejN
zGC-ran_!W~vgID)NvQKvzm6+9$XWVATGqpv`YmDP8DO`L+$5a0gNKE^b>j@K+UZr?
z75AiyANR4IEhXsLlq<eYed*mj{4N~Vcl|zJ=UaNQ#_`9%Da$^vFr4Yx1oUnIhr;&L
z<l$Cai=Hc1(9X%mB6<1Ri**6X+}w$QeI?R4HCjsiUP<Su^cD3L*zEGGxyv0Rx1DL`
zC^sr&s4XYgmwqR{I-GylzJQHn6u~F)Rg*)u%p`7$XI3sPO;vL4S8;5wFqbBBEZ;n-
zzb^5Qe?&X~XmS<k`>T*!Z`*c7eJ?n9=bqA3Gh>)<&Kjq9-ZX1%mfhOFA!<^k;Fp8#
z58La+vzJBtWj72VgDs=4Ugo5-JHn$<74X<F=fw0|ZCpiuec{YV?Ua60?TohVgqer_
zBSYs}{(-)bLBjO;G&bT}`BuE~RqU~)4=N6YF;3X<$c72)9tnrQOTp#ip^WsBH1iOQ
z1(!7TPt9QpdP<h>bkY8KF>G?GFC9jA3_T7HOY+~g!@C;yWZqR9#qaLsUDYjocesB4
zL(9XoK0k&>JW|?Ur!~qU+g!?eZvdAH*D(p~9)ZsV&z0i@+1=Vz-oxC_K~Mbfx)N-L
zk*=43$06D|0I%i_3C^xGys(@4OL;C`yr17{N4TZFL_@W<k_WWjT5Hi!mFc(E@hs}8
z?k38gIdQV%M||Yt3jtTF>q19G6N!cH@NA!+&(`9oFW-nxN=DLia^(?YwCC~Y--a@;
zvX>`(fV?r`N~=SUv}e$_YRV0FiYTTKe7*~~CyA{Tos_)!lbdJn3Sb<>IZ02ocaQMS
z<M8P9L+%JDAGq`3Zc{$4g%4x3=lxsk-B9FKLYLFN61{JxKgr^EU~A|GSFl})HVvGm
zzJv89F1SXz=3T6Rf_?ah#&>}Cm0NBdcRERLOwt$jja&?x@>}5iabTQZuiVRnca>Ti
zCOsV5-UrN;8{$}t?*H)ai?{X_KQBbGio8s~06DO3!=+B<DPrR8<=n7r{)Tmv{T^Ne
zewQ3}i8+0YnBBnUpBT-ZQJf2z&3-D!HY0pLLchvw6e?j~J&A6QJtLq!F7wX%d#IOZ
zy*wM>MXWdbW>LAJzCZR}<k>>L6z9B(cW<fg$nx?w9Ba`%SqsTC%pE!8q0L5?ypU{^
zydG|q?_fg>XIaYGi|{PXNpedmbNUK%GSH<h_<<N>Qv_K}^NK^0K3vvMie4vkJW^V-
z3z{{N`fBIP#6hp89oY^m7^~X389j7bHU6YXNo$&1c!^~zfe&}u(9We3`|DcFw2ez?
zJAehY8+2>#u=C;cRbw`@Cu*XcZ+P@uPUef-$V(EL-Wmbc77mtnvxd~)x$jEs0NW?o
za^*Ba_qM;4s}r5NvcNtO#kR`Xkk%OTWLsoPYnC%5x~Hu>JpCHhbE3}HDnDNj{Bo-C
z?r00fG{fF!GQ;wV7|*q5-{g!~dw|pMR^j}th|&G-nczKx-!+YnSH(NJ!z2bBuN-4?
z^XP9L^i(nanp+j?lEl|MdD+T-=x5HHW_F53X2+PFcE3oD!iN~NtG<NONuA?z&*Sb8
z?K$jt>}$Qh1$io2M4R6L*LF~E2hZN%S+*EAp?_)@8a#lLL4N^Ge&L=_=ax%M{SMxJ
zoi>ug+VFU)@S41UR<<f`<7)P(cW>Ja?rkIQA~I!?ezAS$l%wv5e})me*HpC=eR=4a
zvdbx-1wGU=o%s`8w)-2~-mxEHqhODS?x2U;yU~)KOtN=Cuk`V(xE^seO-tT9*<s;b
zAd3VzG}65p7T2IDx-&yL<ols-x-a8IVAlc%MeEbh6lWZ^xC`N(H!a<jJ_q<=TQfJ^
zW%ouixn9!O$-aJv?CUwn*XbY*e?D{py!Pd6av99@&Llw}(%8$k(sp~PnPcArmQIx?
z)4txKc(-z!yQtfqWvchy1I}*L?C4wX#lv}d*e7@8p*`Q?4ruK?gAC>RGH?}qvIp2Y
ztdX82|H{mE`JXJpFV!DbrZM{Q2>}kB294Ot{O_K`eQPW4*p(;GY!tcpZqCMv-k}c-
z(mVA3LVDK@oILxp=$&`>f^zv6-n}3=zK-8U@q$C(Nj!dHl#~0q@CDce@G_kBRUboP
z<>@k-Q+l%5p}SB%$i2?TfmwZ7%%1b;<DA#J@Dy^9PJ@1V@LTG`5Bq=Zk>ADb9mWyh
z*JjQ-970d|9xzKl3oI`nFQfL`itA=?Ogs`F2D>$ngmNRnc{BW5XC*?|0FE%eC&&?|
zxrESR61uB7J=N+(-OAs`*}*&4c`-uiOFi8vVdKH7Q_YG2<DTY3_#OSWjC-2zs5(7$
z*S7K8-Df&graHkr&AQKTpv=FgIn6!IN%}5cckTjt?nUkai9z$Rd+mJz8}}XSOln0H
z_ImDTmffq3=UaJ>Znk&8_Uzx!EPX?FYUsR!*6d-vr9bonGue9+J}#PL*tbT&#n*w$
zX7Em9D~3zE&W{6^4j(QqaLHoBSAR|PBibUm!dZ=}#jr{i!0PkB>I=Zi9RXJE2(WU2
zReA(i?F3f4xvQoSR-Xq}n}Jn8d-R?5;kJ7i+&J6m!%cHg4w_&NQNe8l_?&95s=jgx
zlNigw{XcC^0*|Jv?eS`lbr9Zm@LT)BW&H+dtL5btU7vsYtq#?HyLD(*?yRD9h@#`W
z@X~vE-?j^FE%rgF&t`CckWLrehs6H8OYgG&S?p5U*8$!6HRBcE{)PW7JE;C2<vWna
zdiec+d(DG&-V&Z%v_A&d`8$lW(BC5e%5WKXw68OdK^{B}8adWG+lI_6o>U;`&RLI~
z+s7Rw8<2B#-?rg-Am_GW(?A|+YPWK(cQ!3KroZlm>!KT<2cJ(V=gOzy>)6BOT%HB%
zqP;#$&PARtr2AXX_U!lI9(3Qk3w9(MezBapfb(|kzMQK$Nj^2mxiKr}dS~vc3*=m#
zxs$EQAmhf6cjdoH!n3Cl*OP>=93$T1teaN$N1@@e(?!A6X}&Cc0QgB34)lbeuNL~U
zx&r5EnrV}`T`LPGfML+rO3B0OtEdm-<FM5YfLS0*4afq-REri`c?(&f9a$iR-lFjh
zo_*%*1^b{|HoD~HUVUVwY&kLj=av;i(u3@$wbB`A&I?-^AW1&+H~xKoXO=Y%!^7|?
z;K!V2&nkw<HSvUandqzZ8lNU)uO7||_FoMiR1Ytg{Ppzf`3{{a3S_<{cpbw}tTVY$
zbdc^cQ~M=!fJe54Q(GdFTa`!8(gn%-$O+hO_SWN5lMaAia_=$p0sCC?Kk|&|X7F*4
z|F>W_2qFJ(LH<wBzV6lR4$l}O|4+m3CEr&7>*-eZ_wE*p16R?E8Dk4%f67D;7c-ul
zie!HmJ~yA|lKtbp?0*@u|KA|{Cy@O$r}rTHOZN5T|7I)yXR)QH;d{vQgYrLi%V13E
zPy4+c`9G<=5y_gANuQ5z*>pxFLrwDafHTZ6-n?U<>69)|paa-Dg}rt3b$~O5=m7S4
zuwTFMR;Y6aV=IvV3*H};|DB!z`G3g!C9JXX^!LHb?LD2ywn^qA`=n&EI5<%#-zQ!i
zO2?1ElVlT-f6n1O)}zM!7CGP)IQG}Hr~M&6eqp=f2g!4^x9{FH+kYm$|Drvo?#Tf1
zy;!=+KH0F@(=Av7JD;g)7y0xal|!!zb&jm3b8H{ri~c*s^`vt&_MhxfAF^G*)3(P(
z&^?61`T5G7Gp_R__sASsJU*cJ_AKntTTbu%0(%7ea85RazB1W2$gk6SCUk#-NB3{^
z=zbQP%NBgdZ^*`heXI<-IeTaOG2+r!kjr2DeKL2!)gnJhmrNGR`N+B<^jhKe3S^hI
zD)Y@|<{=ojf7a@^8PPGr8B+HGLtbNO+vwBI7py7Ur96A$J<hw$oMXgm2w(AebDv6>
zxHxD9V=>b4p?CP0w||MdeeHd{D%ZZpPGjq^$EWaaV0&<(U487e#t8QVz*Bsif?ccp
z^(MFG&3p%Uz0{=RruM~f#lRiA*eqMmyTvp;ImFI2#oD=gSYO?Pxynqz)-^>m!M3+1
zpa~xSb^V-tk`DtX<!{hgc<s+Oup#z?r@8ByH#WoIUHQn*GSG6?{D0S)9ir8;nRxrp
zyL+LmwYJ~oy<xD2h9ECu58<9c<x;%{zsJ?cOaaUS*a%L*BY=~8k^dVzf?$bVa-U)e
z(D^cfokXw`oTTfqma<{kxvq;C?%*izI&jj1pSg^CT|}eJjDh=M8?f&@b0zU7lw+fu
z6ugTLeoZxZd~o)SJKwy!V(-R3-oi()Du&}PFEq7Z6dc*hE@#RG#~d&`#yGVWf+IL1
zK4{0L=LA(*SpM`~*cZWF#X)$m^zsVKIu$H|onR@R5ECqcZPWpld~;vkzWn-7C$_Og
z1F#L?DcA<^6rY*r@fovbP5<54GbY1pcVlPjhR?{3x|?}F0Bq7j?$jwAxYOb*#*8~S
zkNGj@$B;XMxhcMpSbfV|h}E}qJV*|KUtDN*TD??ox(GWy`$=#(s5Lv2bv_fg64x?$
zSzW(mf8|4o!DECgiF)S8x8^7QIAngooHRe?6yOf`iR|M}hg_8T-O2n$`SXh-zX$Vs
z{IZefcL<otrZzA~#`}lncnCOXp7ScrPLh6eN4#)hYS$rPAvkHShk%Fb91|a4j+*bG
zkJa|K5fjmkEg`wh$)w3C@FqCDAKOQB<K?M0=9|nL&>QS3uTFOAQvK|ee(+j3$BuBe
z=GaHVoto>5=+;^J{K2!cR^Huj$h)9@k)3YlXs;$J1AD=AYg<wNr37Qrel@zA0{AQq
zzdIE}W@;clK2}9r4!LapF0cCtYI@GYwnE*sZx^XTZ-)<TigC6_XS%v$Hm@&nyXLtV
zv^kU{Umtm9URjy%FvLJ|R}S*z)K>ZWkA0*OJ}|ATpS|>kVpc97HkBMVqOZ}InWO)@
zPbi$k?#yq)*eKs2d-qH}k~<VTh^&i`3L6Of=in^ye(tysU&SYG$Y%juTiu!1O-Ga4
znemC%n=!;AoNZ={o=iZ7bC^fepOfrW0Uif(gJNVjGcDSZ(|zE2Uw4Ab&u`nKf3xyV
zdlq~fwtR9{5VOo&h$RtBM`|-@OKqz??v4Q8C$~O8Tm@rZ9*qCiGG}#&euNk38vC--
z%<Q9eoQYuEDhqs0r*Zd;c$Z?w6pQ!dFM)YJ4<4DC?`Xe4cf31t{G27gFHO0fE3rM=
zdkOgBTKMWiqs<N2sJHKgug<!D*2XY>iC^9UjAsL<B;Uj6JGc~r#-*)&<gCN(@YVm#
zebYg|i)mAIv5fY#4{qiTq)K1L-8E!<9uKm6SUU8LL-naRd9O~cxdvac?l8TU*xdIb
zFI<Pba6R(E`-tx@v3`RC>_y3Gy5m}Qt|Wb4iF_n}WuU8nBm02p3h~C4hqJ%%<z&R;
zEnmOJWX4kGz(s}aoMqd&Pvs4=yQ%HL{jENN{SEA=YR@J8eI@&kbQ!Hrf_mCViI+V5
zkexEbUhPqiHui&X+M$m2oa*(E=g*KsU$_+D<U48K#?3L8wTveQEm6K7>2(ME?^3??
ze(_pqEwm0dzn-5Rtn;6`#+8vWyT*!r(q2?Pw*%0-gBKtpG4_KOIGKAHSJa=!Yy8$&
zkavg7<5u3+T>HJ}8OcRj1NmgM4w8|uDQ8^PBapL>kSj+tLB3CDOiJ(Sp4cljU&^`5
zr%Pixz?cks@g?Yj=*A(|dl|6q8wan)M_NoL((<oBC(c6#?g1YP<*>^C%y+<#S{>?4
z$1fYu5%)jxwdbi{)|#AfHKJ#tZQp+_-%&-m{;OPN*}kE3ui$xcKc)1eaSgQp^L*_I
z<~OiUnUnTuIqymik~}0?C`6q+JhYB)@q&*B@8G|4*+YdgzKcF@_t#7>*1@C2@?|+W
zjW?iwZ$Otn%{)#;KZIAo{?<Cf&oa5IkbNVQ&UdTBsa<cJ?C6L8sNLhYl%M|)|BJ`c
zEge#{sX%uK`Y*2A4Bt5WsHbyiY{I7i-o-c`v~eT%o%{q?Nl#JE(4f4y?RM@sI)k=P
z_uJQ)=cL~1Q0)7u-s$09qmW-;YoT|v9viyJ7s{G^-|x4MyN!16+Ymed&nJ{8BQp>$
zUhWY0&e#+uq8JhRVH6{x_|vTDKJg*7@CRZHT3;a_f5O*m3gK>lqj!88zp`{otwmxi
zIe|V9IzPmiluMHMne9RRjG1pz?Ty$QvDM-`JnYhseov;KEdANOptA{VLd9zw^z|L?
z9SibrC5U<YiTWDn(Sad-Vb{ESkLCMzJ}&J~hBl~=^T}U`oj>SfQxF$UADfhiKV#?P
z$<m1m{HE#yI@b#yp%2c<dGSDI7QO=6=PxlC)2F^B+rHBDRSuqPQD4|h66kUMe1`Sa
zVf*rUW8xfqjf?1uy&$?aq_65w>dvLuw+s7N?Dg?c`DHKsBm20}?*sk2xQ`V}!>P7)
zf3>Tvv2qvdotca*wNv^nbO(KRlk{EeN1N(f7vzY!-8Aj~tKi+(Gnd`j-z4At?W`ky
zfi0ZhNQT3yD0*9RPdKIc+GN;!CfZh6653^-g+un4%0iXM%+MF~i|2NuAIFhLvW!8w
zo``kJATup;kWZl>o2*Vd%gWoE4EjV4oxzR=yVjd4N;~aXW!I`RxpHI(jWHpb0X-Iu
zt_hpmTH+>*-{(@ER~nOPra$DYiItx;nc3)HchIl=%^HXBrV1LIU~MZ+d20+gV@vp~
z*2l50CDDUJ=x~O2Vy1jRPnkii2i=dWu)1%BjWdSEc5NoEQ*=@Oumi|c>%i$G<5Hfs
zH&<NIX_#veV={RD=SMb<2VZpNdF~X_dJA_x%R4G7=bmrjnaVy%*-^plFlFGm@cDg|
z{e-gjzeE}POZ!N<%RjHOKFZkN+Q*Y9`}L8N9g>kmH<0t88{WAn8%vfBVM_@iLwmHt
zJD*U}d4zjW>lZlnZNMqP9Yhb$0p`HcrTvcHQ0lB}X3bTdOruu^*{A7YodKtg>@cdQ
zIzQL_s>sgGzAmWW4`4f;kKIvvvh-qODh6U|f<3#E7_SySD=e%%|Hc=I573#4)x<@h
zWQ%9m{TJxT9Um~cpXts^l`CH05-;vjbg^>ngwD$MmDE?BnABN$qD+3gy&MfmwY^o|
z+4k1t&bE7|@|lLe5<Lg}5RQfzTQ}eB^xL-DWZLdBxwhZ)y{)u<7Wb^Cx!dB~!o^7;
zoq@6O1cf$4#hoQ7FO;`-jv~%y9p^15PxG!<-#-g^-|+g<WA41q<P!8b9EYB^I3yiZ
z>+~`{ik2ZZoHEabBX~duWyiV8l#N@>C!p{Bz^0vbL#Zu{Pa2?WM}Wn{<fk|eToof6
z^z{Jy<j?90JYsX5y01B2U&@<HoYN-7IVqnscXZVBpr31BN#|$3?v&qZuufT5qhcwb
z>8exzyZlc1P6wY4Zv*?$&L2~!iv1Deqx~VjUw(ZAJL4F5tL%)Ykrxq}hOsDis%KnD
zXJ1(<`odWF>^Ss=@#qVud-g?a1R?l#0(<=y?2D44T;hxdXdJdlOK+iT$jh4)yJP8G
z!&S01SlTC>gk;VHI2T^o+~14Nuf2Q=`KIqc-kgFTCL!In+RTxk@(%PY{NXojhOQ^z
z(G|<?=)V-*%Hel0?zzw>=~klO@=tGpE;mE>+K`Ly<~*Zh57B2!V|hQVJq9m6h%PHS
zdk~%A!x58Pjg4P+DCuY|)RRBHnXy50bC<Da*3zD}?PEufESxw~&#;xrMhdQOfd;(1
zfVjFLG+@R64Oorup+z6|zVe334kZ4f+;qxydYR}g{mOPOJGx??wB{P$KGsh*=^18J
zYBOV+T>zgX?@R?gb->4E?+u3!{>2gCvxWJ*!TC(-5`xbp>CCj1@ZlraJPKSo3gEKd
zhfBK;mrH@mBLi^3_X1p!7A_S7a1m`h4?EJSXye^JO)Q3sc#z<-8o0F6ul9l9BAAE=
zNhgPvrG%G?HBy|{%fI2=X$^WS@oNrol(J#G2@bBo*8F{P6`2RHKT}uF%qRH`Ub>HQ
zo(r3iElW(d_ZZpV(HSXpEyaG9zX9(j_JsIRdq%|S6icxuya0dN%;%<M&Hc^bcGa@G
z`WtsSxeqQ&^ha3}lhxX^^ebL0!CDg|X6>CJaH@y7Ov7$+oHhmPD09@>DVDbpn~Ou)
zrNDp4yVzLlyUbnhqPW?2M_PC7H3DLD%3U8~T+t-BPpq)$w&D$?Z@15%WBrDz8)Cew
zV>kn5>pU5<X8?ja?)_JGy2PZkBSYzVIFw#gjlRe{G6}}&qTi}a&#F0(${w@jJ(O={
zUQxZnyc8>{xw*&`#ki`qlMP9>p7&s@lMJvG8n6^OqGbH!jb>T%t`_8n&G=Otx%0S%
z+zq8Bat-GLuW5mP90V5)`)mF0N7oT2)YZ!v?Acn%d(k-_0&ni9Ku#n^OK1FELT-p|
zaB|<HJoF}UL<RkyM=XNm3&Ezjk=zo{Ezzj-R5Qn|MxJCoQPx^^;T_B`Il%WkUs-yD
zy~yIqx3MpQUp`Ij?784p&$-x*R^HVg&pNr<m5Kg8r7g~?rqouYnbP_x^c2Za&A`g6
zyvxFADPxZTr$)xEd&*_EZ)Oh7Cq~!xFbCT&b5Or`aQ;!T6M~2Qwax4+=)%6lXSoNB
zSXs%FF0t8yhasNr2cP9GOwNiSN7dRo)Q4sgqf~C=!@HrqR>tjZ%*ih8$>dk$E(PwE
zKh!Po{J7W+T&*?j&RDsoKiPuqzAsWQIUD({1~|<|_O3xsS*~;E<=M>@uFto68?+w=
z&vV4F^POC?5c`*M#l8oAb~XI$8u;0@@U!<4Hyg3`uSdXzB)W>|FY(MZ>Qnr~_IDy*
zdl&cQXii#x!9jND2FCd~I<{cigB``WDbfEgM>sdia|6Ax^XqH0>x*2m>1O69x@zaz
zhc2e}SSKUiK^v1<^Y2uJQ{O}Gw7MewyT}j;aCT=evL?1+^)DNm;?OicJ!5TVC&>Tc
z@LW7j?>amae3VO8;}Kq{uVp$<M)~u)p8{Lnt@OK|IH(BzP;zQ_C5dTPJV=aKh6crh
zFgBeBYWmwadSS%IGkgVHaKTZF@8GD#_m}fK7g9b&I+wqf&S5VJe&wvu<~_*@#Sv*8
zf;H3Ldy=zY>bH;n3;RuCQ!4J)-jf2)(>@LO-W|{6Yn$jNg8lj{%tLKOuw$3f-r)OY
z`G!gJS0}+$&cN{diq-A^nQsc_*bTqddxiaHsXOpK@5G5;`v~I=(@&W8Rd)k0+5(JR
z>b3);*%n4>zj1Yx`nOPD{6@BCtwBJ?&S!2~Z^?JEgDdxK^-uHi4cBDJv;JP*6P{ed
zx0T7DmyCUgd_5Aa%!-G}23)iUvh-)4`SvTtqh3tgr>egdcyzpavZI^!JUf%8mk9Ut
zk^HzEn_{3}Nw3m4Uq^l!w9AkW7Q2k}+Wh)a&%GHb1!v>v?!=Lei+g<bOumu(+%mr5
ztL{|3B?mpZupT~)ZN-~U&-4<`G{vz?nq1F(W6yN-{=2@D`@qrqL<v0PBIL)Jz%)Ya
z{!J@)xr^BceO`_j_bS?CZ2A0|o%#F(J`+1XS7$coBJoVJ23d09%DKlc2xS`9b0+ga
z({!wivqo)Y+;>vWXEODt@R`bITIbZ6X7<#7?ys}3LDx76uh(9D<H?egc(!*JI5vUD
zOzzk<q0F)CLzyMZnom?Ni=7a@?dHsSJGcQ+nEgxUr*q=RbOxpEp8aYAz0aPr?t%9!
zx4_Xy;py{2nJ7Fg*AU7i+1I^oqH*-`Bc44J%5Z_arAxv3%%4VH>(#Mc^Gh20BP+=*
zk4%)OU*YhvYUXxJD093el(`!^dgHeW=OTO9;9UAX=lAn<=E6J2mU#Uvh3AHs#dgIe
zh(=7d^U>I)Ypwbju@Zf($pka!dr@SAPtWfZj2l@K1DwgzFfIyjkz6bK@-lZmyHmGR
zxSufOQ{k*V$|^iQ(>ISCP54vs-!vtzL@x~+JsYwI+OA~HM>+M0v&<a39@2%Udb+S+
zSGhLS*^C{pa&5RXmYkcaTpK|rF5y$kXB3~&ot4pWeS$hBJtvh`ObzGscfWO7XXV}n
zCwIR!wo`rIiC(yS&zKV~aaZCkflncUKIt$f_CqT1fiYG$vOYfGAbCbHUkQ63L_8xK
zvv~(R0e*89^uWCvoc%lQ{5|HyiS_&)^KA5Zm;4*j@2pHjy=2k6-4!F0fy;rv@W<F9
zd%zL**K77)N)CW1vS;YT!u<{7C%h&-MfO1OXHmZGjL!4!&Ua{>(N(54jz357Sk{NE
zK9GMj&RXc|Waz2!<-B128b`wS0|sTInOh!w&4ZWHZMV%avxE2DA9>@pYlZJw`^DWo
zLfLmlDEs;dWsi+e_UH&@;IUvhq~H68mkDMe{7<uzOZsP(mu+k?Wrw5KgkE5u>O6n2
zzh1`|y<(kt4&2KnXg7;oqIXq4#vW^5_rLmMFR$6ZhxZy^zcLpSexQeHJp-E7`|sXb
z2j@;>8%z^)l0Bqzr$ck-$hLNJjb{VNLsR4%dJ<XcR{C#Qd(ZxZ%o*F87stt-tmN*F
zEa$nlElccb=c718hjHnSjz73hvKPJmJ~0=bdY@eC?UQs7P9Trw+(Y@Db@cCYe~<RM
zd~G{@yjrbt=#IwMT!o*4J9(tL#a;4IL!)jz16UC+agg=aJRf6D>-e;paBJ+veA8ph
zc^#h?${PLh=3jB99=MCfv`Zg<D4t0_U}i79#A~Y$TpWOzUoU;XY5FjGWdWbvrsS|-
z)&s0XYyY0H9fKy_Sw$`+Y^izdP@igH&$0%^xMg7sZ^&VnblGddbL@q=?|dk9eh+J<
z{r4oe5!mC8G2hio$@7Swtai^&&@OX6b-Us@e!FLw+>J|U7uXDI_ZHgSHrVcu|Auy_
zyj{Bm<DKHS%f2gacU2hqv;}zLKRCJ~o{2K<-5U1?X}{{!?SIF@!}l3fnOyCSjGMhK
zdwwB2j;@bqRyBrFLAyVGKkdRpP6dx4?bi71LRW^h3l6MWH`wm^AD~_E;neL4&i;5W
z@!JJ&irbAsOB3*?fPTlOdG>ls|9{5)#G|k1tV6Cw{>d2PD3ZWPHmE$jKK~H*V|Zg)
zwutQ6Dfc7TWx);e8T^n-{NIYxxyAntUb!vEGte9NdiWnaL-AaF_<+Tms-$NV*DYF8
z!T;~h#|Cr_en0q5R5@M7!L#Obm-z}}Vkp~6tT1uG=nL>Qr=Gmcw2S>LA=(Um&-#1W
z@}zl<=olVf)3cu}F|~qSAy1S~(`8O-U+wmMg#KvzZQHGmTib@<rFLs?9HCv&4cc{S
zOKsx^w(ZxJn~g_-gZj{1VrK4;IcysXJldRZsa@#c;q$Iy&7bxB%Cc2#wKUwDQ;+WD
zpk5EW4mqtgdj)yet{6U+{3ne1+S}U_NyU=yObwggC!j5y={hjFkz5MNMODbCGjA|E
zlEBu&<uPnNz$QZfZluJ*+VbFfQ+sqYWz(74V@@W_d+9K3u?Brh#4otF0ov1ujjfS0
zxLTv#*zJ25b9|23Vc&(0Mjw2uW9L{W^R?q``|q4>c7}Ox6g2EkwL@JuGOFu<8MU!_
zfwRkuF{zMSIXAX;%;M0im2<a1FC{0s%t7la7#*q{%bg0N2F7`)^6Jj$dra+B?=(B_
zWBq$>@!E{~IFl?GZ#cVTSK}S`JQ(0pI^e_PYcLbcbM_tjD#jzhDZtHGa?WrVGmq#c
z9`0G({Dk!1LEM~t<?wZ5P8sBK>j$quMqXV*PMa3+6FZ{Dq2KZo1pi+_4`5xo`tEmf
z3nMeez4SRJCph+0$1@*gA0Hq`>i`cy##ZcqdL}tc;8h=9wshBSY{7!1nb}{r)Py%G
z{=~sfrTdDb#9BJz&BpY{&gp*|{<9@Argba6!xND)HNOx{k;N1PBRVTy2;3AqmBE)c
zF3J1h@#H(Rdw+7*f%Uq(h%@fQgXz62bNT$hx_Ca9hX?-q@j~pE5MvfiB5o$9K9>Cl
z>wYe4NnN#V=}9?l0=F3V&I`WyonD=W?bMLV)3=XwAwTc6vd#|59qcCL3QdNM&ZcIP
z>zEt9b#QkdzB9Yej|0CX_-Vl7Bz54S^*qZgA(lk>b#m3%B;becMa&c2?ZIDc@2O$T
zCD1o_p2ik}o_anI?Hz~vs-t#J!bOia(#J5olAVq|(KD$x*UZsaR$oQF5&6j&yKKQG
z3x6x)&OF9!X|ZT7daC^`T8yr0f8(>U@gxy&3VZR<)oc2Nw;JCG;;kl|$s08%_X5_A
z{t_3OIfmGN!A-so*?uc0c=p~Z6H0{*{@s`I9ZB~5aoSN_oP5lJyHn=PCCoYpw&124
zL!C{GGjRkyrTFVnUfZ%CJK`b9OW8M!CxVV4_yT|VB;vq0@J~Fm5c@p-i9tW`i~&FJ
zWPB4kAJH=v`fdG_#Hn6nJh`3z`dFW}GyOPTXjTCC+yz#5wZ0S0ReMNd6#mz?M*B53
z<b_<Q34aj0Mtd*KoRi>PAustZb&j&ncT%qBg+4?FK2}`62l&6AIewn~?0)Rd{w0r@
zdhDCeI{8qi=z4K|t-b7cI+uOk@AFN_Z8pDwWKoSt{s!&u*qTIt47fM1iS~oDHja21
z`}#O=)qY97ll?l&qwUQX_<LuAllj5^e1~(cnPc}9JVSd*^U)m7jyk!|*T5s@i+_`o
z5MILFQTD!B;qyr2T{Fq*FnhhYMDI-LXVJHwWZW&17ogGDSFCQAVEo*z*Yz;+YmD<s
z$_c5t$Zn-MkR#wQx@pq^&U$T;&q_3(oCYQANv)H6bE5yi>RbDP*|Vng9Q+ldEUglq
za(|w063zP5$-Je3yXixAF2$Zb$L|X8wofr<$O4iv#J5lIe-OT-yIxxC;n7Qrl`q+7
z+%-4xuK14jykI2WBf6ov2qw{g<?ILWOT%A+IrDtcDR|7@SP_pgpBWlY_BX^9<>3d4
z2iy+~S17KNwFvap1bUrf{PleUb)^fN2l6```5n}0DEM7p@ViC7*>iV(1KTXJt7Oz$
zfPu=eD9x6ftTKnP8!5Z{E0iIdOJ}I|%cgFl3_T!+jcE*J-+@+s=N~9TW>LN0`h84R
zAIPzajkrmD_<B`x!_fIgsV})xG%Kn7gzqJ*JATdiR!{0CUdpG-H(0uiKO!O9NC8ck
z{Akya{Lk7WBhgrRfq%}I_!vLuvtncw8+#f09QyR$7l_G$-u=;WveL2J!hW3W-{qyt
z`}@G7^{>2%54@6iZ0Jnj8~-`$dK`MM7*hFsgjWtc!txO4PSVG#^s#)c%02qx(W8;}
zpLmB0UH&rdnt+a%2}j|d&~njT(ertS@*SU}&i!HJBXT1Qj&+o!E7zk-rtcoQHW|hr
ztlN!xe%H|F-{g6K^CRu^;Ed~FUjd(=()G*V5Jz|w<NWQ(4)~VMjZ$oXND%L3pZPXo
z(W($M?1g>AMU$&uv{F2}mU(5D4;|a58Jm2PqV>JAEbW&};Ny*Q2aE4>Rs#IpCRxDp
zweSGlFQn@u!W|mx{`B-tJ0{u@?IeEzw8EpQ0X;oR-`}A8ZrK~4r+uu4XsUR+^tfJp
zc9Pv6_?>6-N)ij=ZbM$;EOMH&1EN)i^8$(+#}-el(9|x@oRq75=`!+<_K1&zH+G!R
zAw8>tPW4Pej-<TTr`_AwJH`AaNnZo;=h);Ge?FDibC<m+xgm?c&1G*Z9{F|fv8RD~
zKo6tf7d8xAmi2ig{bXY7U+uwO_>l5ftFHTRL)T`7;DijJdX=;r?0?BNH}I_a5_lMP
z0?B{fP4IwE<!3L24u!BQ^?e<BM?K3ktgRPc#{=Yu!N!7(1o^ha+LazYZhZ+O;#Ko+
z$qRsOc>S+W>a1zkhZuv!Q5(PN`4t3r>*oN*q3@6j6?lj?1><&^Uk>=3i2T+0qR0Pw
z_+-b`v=h8DPWa8-kI=^g%1?#kp;x@IB>b@`2FA7lPx&xy)cXH*KJQd*^l-=O`~3Gc
zZpF&lHsB4vq+Bx4H~3a8bI`V16vsTh;F&3UrZ{E2r?!K&!cLHpKRRenxRET9mE1Gg
z6W@NT<9n13(g06JfG%Zp-ZE%c@kIJ9xoWVkuP6K}zvFk{h4MHSuFJEV^BwRnn|CQ_
zr*M4o?FHj&WB$Fg@o$uIwu%^|2xl2}zY+0v^eaD60N<mxlyY`G49^wcXP+TwL#Ov)
z`_F{P6E1!nOJ9_F@zcT!>=*o3c`R{p>gSY&p-ssWBY(_Z<u6oBjP@!1|HGpBF>(oc
zc|^k4RlPhSjLG_Z`>^9CMiG+`Mt;ZNyS2)sB&)W4#>`bbPTSv;Q<wctOcr!R=cXrj
zEx$wZIrV|J)*yhN_E#1BMR(dRg%<SDp594IkNGw4aL0w~-}@Q7ulnR7?~LmE98>@A
z0SrfIJAhX&^ApVp?8dY^gl^mM6zr{hL@{2YI!`j^Ba25{_y=try=6@2(LVB3x12^C
zb(lD6@-(j)$Gwcq`66!}H0R5K!|U+YWZ1FypX(e{gnXWyHJaE)K2PW3WJPp=*%jr?
zJ2unW-uc)rD$Q)wuXIDpv&7JOYgyhEOU_IEE$f!xz74hA$lN8v-Sg$QI->Z3d-1{B
zJS*1#W1b&e;n8Xrd$-1*Scm}T0euMO({quBLosCAu+~1NwZ9VIzijGP;rm~R@Bcmc
z{;y`9*K`6Kiw6T^OV3VS!PpG=)W<li{faT@%=>kml~?~+#(ne}C!=+?{P>y1TqCry
zeUfx(|9lwp7tYYm4eor-$1pGFGvQsDkLI@BpOf1A7uvx-m(lOUg(jmMr>eKqhs#{x
zqPCL!cg9C{DVL&4`$=-E9tEF{VyjZzd^@nNp7qco<+d@@jgcp|de&pN+dQ+xSy%eL
zTYZ}`W}I1Bxj1Uf1-ZH{73=VE#K}#ocWf?O{^LVvRbE=;`bF4GSd(&cLz>)oKl4_{
zWO6MuL_*6KQt!@2Cv#UXc6QFUKS^AsT?=&N<G}o<?8#&AKzC*@{es_$xw6l7mJ*(v
z#g-+zal5aN>i5gYA?bSx_0h=#`sfTZd7R<%JZ){}oW_7oDjgU3up7Ps-zFvtosoMA
z+QAi@hmJk0{rP;@<nXy>g7*#jasrt}XZH0TFt)MWq5;uyW-l?uIo(rW!pVJ%t$xcH
z=A`<G@vPEd+n8i>%FnHSv)D7XOfe@XqdzHLc{Xvg4Ur0ae~->k{g5>}z`ovwj4pdi
zlJUsL`%}sj*mIPJum{;%IA?BZ=?}(uZ@Z8G?0Z9gtN`~lAK}bp!iR$OS;YD%-vTru
z)9`R;xnOIsIbjE=H4$f3C3%ir$|~Q<H}OGH<di6DoahbJYpo?m>Kh$l(K>!Nn(}8c
z-qys|-t*w*aA@QEH#F{7ylH@YGYWodE_!bb-=-|PO6>qAn{Qg}i@q7wqM7)XPuvbo
zB<6_uY*);#V9cDiYh5)rV7y&07ChW@Jvb+-pbhNHJa<+!1aLW*wLNCxvOPEtv6Fs+
zwk%Hq9u9e0Wlv(Cz#F`LVNvK3_&9KOKX|9O9zLL^#V>pEi}*{DTpf1Yz7O+d`V0Qs
z{@A~ogXqE7S59`I4{i7I9-$9`b3s22b$-LUdMDt?)}G+exPkcu^?M5XQTw7Dw%-DJ
zul-%jbA{V>p76(j-xl)Pqt&8ale?bW_*Taetq-&$Zfyo-T{EHc)zJAZ(D~+z+biPG
z`8c?RU9(pDeVRBh?6j|nM#iF}Q%4_wPeUU`^O{8yxsOx4^&7O^%l$Q$kMdvZZ|xj|
zyl!B=pGO|oIG!kg!$95<trzns=7Y_wrN`$*>x=k2{pn1P^uXjElllec+u@sY)JK5x
z!E>$I<4N+O@J!>A9K@MZcu{%Rx|^}JGp~8jZ#`FDUBSTg57Of2DGT<-UVdAApf3Fl
z!I@w^iswPSAvk&J^&QOLtUkQho03k&Mg?t4raFe5?ijqihc&Wm4&4=RybIq#EIrSz
z`(>;dv|x@K_UJ<tyO8KZ6nY-z?8@u#nb+Ynb}W*yShFhHCYHnU*{$5AaO?sruMgZ;
zbMzMO4npS0MwYywzJ*`0?7UP=_`$i&psxgeYW0=SUR0djSW_>0r1+=A8K%Au7!JJe
z&Pz=!dOsMegPfP;K9;*C6}&&i)awk}!29O1)O&e99WixVpy%pC=hetZI@sqZQ~xw&
zE_#@9k6f`l-x1A^uG{UGHIK!gN|}3nbe(c1yOXl32521Z{AY0)^U*%tifrk!&+_bt
zSCBEhy+9lvW#6DZ_Gpbe0-oIQy8MU8sPL3@aofyQd_`l`UaQbp`$yMprp)5NOz*s6
zVVu8W`E|A=z!Am$&jKG5=P$Xk$B*sLSDAXd-p|h`E<d?Q^oDu9X3O4r6*lsR9sy_0
z=WGi+6Z<N>P;*f|{5rL=86QEWMNiHs@3?aY_hX;9Vt?;T=3A<}^fveRu?eA#vO_+@
zoe_q-^GnI09wvvn`OQ81d&#4|&E`<w^Jt~{$Uo#q-_zDGW7>83QOU~<dCmKgIb3|y
zN!HNC4;|GvJO;1I!1*t5OSY!%vNh@a!vE%XJ@;6=*=mTP))|63`@c)Phl35rVSh%E
z1!PwaelMo2S<pdr_8Z<*Ob_oUZ%R2iQ(mWjk~MwTcJ>amL3vVSqq22~^-!*qZumyf
zmOYc;%Nsj+uCro2oaMA}sIAZ%cv~g*l{9jM^0cTQc=N#c3+1;oJWOMF-XFt+qA{!}
z=-<82v%BP%;%i{f=Q-o%&cXKpZw+vuI9{+D`9LwVh4HdMoUAdg?$i1qA8oJvS@-2%
z0@pNW<h$)_IN$LU|MRT7^g*qsAxFK|v~WGcuix{aGsa=<S=SpEEYZ4tx&UYGSre@h
zxD@0%))_AO<_x~|G<KJ813n?v92tDOY~PIqK2d`&B3VRl!Hbc~GNNw=cq@j{-uI(8
zJK`1%a|-YUIo9UP3D#gTvGbF`n<rSS#qcWO$8l^$T9;z{==`Ta{E+Nu>lCby<Kvy^
zV@Ubx!9n$nGWpz#;K)|xe)Qvka;*zG9p<jHb;{wqmvK$NW^KZiw%woe|7O<UFt7~j
zi2ka*-%}QhUw10r2Td-%^Er54cyDt%cB&Tq1#OOZ|9lT?5H}_lisBOl=Ao#`upbBR
z%=juk_@|?z{;2z()A&0J`$BhYvhOF}G4TGa%Wj)1J5x7&v2Yypo01M@>$_fmBaMI9
zd)TtYm+gD$;o}@uKVeeB>EO<J@rFMIep`#+XA<VQKNp5E+R_{YIQ%K_>nVnxW1iDk
zMuK7Cnhbl7*k8R@48s8S`hL6jHFv$AEr97Beiy#~UxKgmKLoyl6Jz;P;cMZ;dw(u`
zwJ+4~e;a(6*Z&0kwQyoAe=2+}e0cBAhA;HP@ctiyFZTH^<^30()O|crXr%+K6g?Jx
zhZ5#FJvU>#=kTD3(Zc7B|9rwJo-+pfK5;B+zxe(8h)?=s=zDV!eF`xi2l{SlJ3cMj
zHuPQNwr!G!GJ?EVxX0B-;r@L)`V`R7;Ep1}VgOb?EG(?(TYc&oFv__lW=C*mx?;(C
zu|@S%a(_0@5(Xa#{Jp1=dyk1%QSKq`8LD??JDDfpm$#y?ZXuRD$~XllXST^WQO{P`
zNX(4xS$Gv4Nqn>gKgaxXWRHS+^DlNX%;|>t7n_W9sN#2QpMHOj74&CL(choiS5QBI
zu}>fWsP%0xTHk@a>*JMO=LsGUA6R4Zju)?SykL#rZhbwxQyk$?9O*9RKhP=d-C}&u
z9RHO0Z7rG~`};ZXJRve_;okWp<{0zm_!pYrbFv+rYJLMa?~l>qJY&=vSo#p`??U=e
z@LYR8vWd7J_G*JueRv_Zyf(#fF^9-rr#{3!SdX4<z;AqehfTEo5$$VJAgh@L4(E@W
z`&E9NvBvq17ChHDY(Ed2qMz;bGr{i%x%`y<IDcF}W>egwmFOlKX8;S0p<%pP{tR<V
z<EJ&qhav7dw!fXx+)eG&H|w2+&2y8+tkS!JOF&~>-|uq5moqf4Q6=U%*+DD~9i!i-
zypivj<ISXdv)H?4n&s<%X(rB`QL?xtd2dBf_T;jvxhjuwo<ijj{>M3^uf81m#U^r1
zFm8=Q?dw?s<5PKn-`UZF&otIV(VYL#bK0I1wB5$Ltl<!t{h{Z2m-lj8cyBi!@~JHc
zc1?E7j8|g~zcZf02E1eR%y{l9zOTHgxnK0c0cU#FINvg6)U$^B?X>O-(RB}%jM{h`
zZPHFA3e3}d%f1=l(I4#ZJiou_f33fH<4dm7{kqVB8tllME-NwDv(}3)f4=*2{r@8W
z-+gWN^3^5g6Qfx7U)`U%PWt0N-~Zj~mS7(@oITxg)eo-Af9`u9&wp+A$9p2T{R1}O
z9eX0@ykje$vuSI-331O8IKz8O@RcOke_Nw_Du9KJrCI|1=$v2ri(g!n{9@*IXKk8$
z@>=$Xz^(RjGZ%ZuINrTR@xP6fg(=%oV(LBI`GMVcmDf7IH?$j>X>Jd#9gDvvS<yHi
zyXxu5MU4}5e@Th%vdw&>oqH^qZ!i2$?Qn*tUOY{0nYHDMw^3jA<$!-Qq{-QZj$gGl
zw74C+Uz|BK&cyd~o>?v)+Zb)HXyKi$d|I&i3Rl#ALio)b`{?s?^jS$iee@Z@t`PL6
zdd|gW;{EM!O|7Kdo6kRc`J3R`f9Sq>(M3nGi-}Unu_^F6CtjUJPY%I*<sXj0^P>iy
zkB!OU_o<%gel%?Fn`C<ro$~Ja!Mljdp~cEEQ4XEmVek6Ync=wAwKWfGrzh{!`x#%F
z`@>|DAPzNU+)%1HY&sKn4cHhq1-^*H$44l;ZG^H9jZpT15z2@eNqV-8!9K1Wq3qqm
z%kIMNa~JYSHtfY$I3>{1bcv1q>cNJaz1p#N>t(NI|6+T>?qPE$1!qzIKla`|KI-bu
z|39CZkVK$z372rGnMu6H-PRTYiPG{(f{4%?5HFSf$|UhZ&8{ut1%x#dz+1E1646G{
zEdy$G^6mD^T4;&2>wv9m>+b##T6%NWNy0^&-PQ_71_|?hzRqVpVG;)0-CrM%-#_0!
zK9Bj#`JC(fywCe~-sgP;e;@X;$NRC5uz!{NcYbHXOE7X`fwq9jZ`;MabPjrYAXdP;
z6L%7Yyr08+09kl=TOc$7IF4vbl(H}Quws}8<3q=pxc$sAC2q};){rCZh8$@bSZ0sw
z=eOfagH4CCx(ogBE0z>~&l`%d9cm3FfMWpLVJWb5fr<Lr%^sD(cGG>4?BIb8hy5(s
zdwg48J@irK&KMK+xuIz~N9kPTmEXd;^<&t`*5>y~J}UjIy>+E~v&SPZ$cD9jtcSzf
z$Fk1}4tw`t`*{4ar3u1ge~k^`@7j{SSU!9x2aF>*U>wN-<46t|M;4tqzR3I>X*D_0
z@Z%Z^o5;t#wCp*H3_ml?U-#CoM!YN+dXWnj!CA~@)a{%D4a|!YOKV<fWdOOzLADAa
zL!Gbm4W_e}cv`_vkvE3j@v=<*n9gy8%j>T%-Rb;GbyXL8N`X4cZlmn=Zl^7~&6eF6
z_yXw((tqYw+4KbI^TL%*B2(^0zVG3CDAVR1uTAGineTta_axuX&wNj2zQ3CJeh1&*
z;rqpz@9$*3BPW!MGb!gX?7z#*s*<UO81<Ziy_nzYkr}2_4je9}-7V0A@aQTVo3_Q;
zfIU7G07k-dwe1drHYYwV*`aqAyeT{izne%g`$)u)9O1;-AJ`C1)_C-peIomxJDlCi
zkO8qH!W&XabT!d$Bl#%9r=;UJ;xFi6cKz@kA&>vv)|0s>FF_kbk3p85y+6TzT#~&h
z?YsE=EnQoH&&x!7j)vj$Qf&A3k01-!a@sp&4@_h3`o4ZyXSBVz<5YWdzWEs5(RJy~
z!>Xe9UlZ3I34!bFJ?+Ft3$!XuEb`rJoUe-OPP4l%GLJ|OlKfLR!PLFKVyfCIPh74$
zW~RhXf_Eowsm14Ha(rfpxDRFAg=Av4+kWUw0e%toU1tj5jmMTuirYQ&;H2K}%T3*q
zrj?Zi_@^%$Wp0mzbvLeAm_Nd_)tJexZm^)W#^krkR}opia$2aUV<~e2y{PMRFK%5j
zDm1epIA!c_#$G%#UFK9JIRn+q9rNP*>}!=b6SFA7S(WDd*?YUt)J1l?3r*hW<q6)K
z&qW5hh_rIE5FWq$9KDw@ACcJY)X@~W7&$Rw7V6#QJ(OgB=s&z~N#G|R$teBO9RD^W
zH*h|mbAo2uQpZ#k6xMcLMO@yC`F|L{@51VlZJGzkQ(<sqwkhb1a_&2@s=lul{@xr2
z+A~Sj_*o{`nYQ0T@9+WWym0NQ_TRF1^Zrv#ThFD$SAgE(yS`BWO&<MSFst(AGR}64
z)17Zqn=bwf?tu>m7jy-OchpvwwLTCWz95Ml$6jWY+HF`6s%&O1>w)3$ab^dyz;gIt
zT?M$fx!EkA#~s9*N15dhA=gD|$DxgS%Cw9y3lrR199a;qY#C)1+TS9x@JSxMA6xQy
zaNq{~j+VqD!KtnFapX1DMktT@zl8JS;BW}N<^2_3h-*!3LB5bLThI5seb&azK5P9Y
z+LyVGeVOay;JDpe6&{|rg}o7Qb?=2)_(&i1?O#a~-U&~Ii^A2bf1j?)?vvV$N#@ep
zpiQj}-@i;aDf|^a3%_@9Kg+kf@pH^-ce~o9jqZUq0=@XF*9q^6jnhiJ0&p+TJCAmk
z1fABy8T>QE(i8p}?yoA1Mi(`(HptiH@?SU@`mm{M00)<XgI7=C9UN@1I2dTsI<2ud
z7-$OdUJ4GDS{w{CImCR5feUU^eWm<G$UC;@UiMtes;iE$Ke3`=R-52l2yIVt2Wb8L
zWtFU(3i$bS`F#cWCb_<TUPI+B(iO9SwS`^~og5385f1pYIp{Qfi8~p;8Z--pZ&7}Q
z!?$o}d*iM3l|9SCmBOi~D8H8b10T)crjM5=gTu=?Lo)H$C{v;G+G~!~&T9Sq$#gsS
zzAxy4Mkc{it)VX}A8|p1bIN;?HRa=;Ek~ORGUXPLS2Q7w|E0zO?Oz^dkG;Og-I-);
zo#bl>x>ZZ>aF)C1IpKe9TU0;w+1snvY~jx7`hDCJQyw1ajHouwg01K-YtdaA)@*&E
z=48XZs|o|eD=SzaU0k-bs~-3}`I(JjzqhR*QL^$Dbdv(k66zdb39^6V7*l~QZn^AW
z)dgQ$Bt6Fg&#TGj6q>5QNK;iZ+Efk9OU<mdP4wTG!qyt}<9fzr*JV?vQhtFxeRrXE
z%y}g?*b0JrOcaeuFcyv1&Tq~1wg*Y~$1mRkn_fDrO+HNn`2v60b}#>>_awm!<uS3#
z+g9x685`Xc3AnazvEQXD3V~_q@7asTuWcP=lvn*;v36G5UuXYs_{+90@jn@yTK+h{
z^}t$i_xr_up2fom-yX=!r%y{FjJJNlMU|S<UvP)TNi!G^-e69X=w#Ga6`|g)i=4K<
z1h3x$AF6@ZVfu79Hml7UZz_e0r3N06=T-&2<l*A%(dG}LZNdf3nGcicnLb@XpVGjh
zD+7!004!QIF;B}C^OtrzwWdbV?oRRx_ASKqwf*tO30w{9CqJ|1E+C)q_8;m0{Qc?e
zmcEJSW$^nSNUsK$8Z)@$fJ@G~;0U-B%;3^(nL5N%|2O$XKiv%7^ksk$He=DUZG0a}
zw=8|j_(PnH)}iCqeW@$s=LKJhBG>zU)jB*|xiGZO=9@E@F?l}i>6e|?WrOg`^sgQk
z@2_>*bQknNbOr8X*c&mf<gw)t{kmZnn}yHJGGkx*rCGj=_1cV2;stBg?5i1R7T*6O
zVsf)CUp2#8v1>0cgoj7jzctYhx0&l3RyG(j+I=q6YD~%gXso((Hn#3=@u+`6=8{be
zJ7Dx@*ymQ>a?%unKY`fo5o0<}6-1iTQ@(j_bDrt<*Oq=o8wYq0`iy*id>-V4#e=Sl
zGd|0I<WIPT7+8@!?C>Yj+q;U8DLL0`%X9v!r^v*+ZH)NY`+JJqco+Us-JDVN{9J<_
z2THiFoH9MgWbZzEs{H_a)luwD$@kOS@5Ao&48JOK7?}cEFeY#1Eq#g?nM^;hx5nhX
zCYk3!+ONhwpZxN9AMXJ#H2znKfpXy;=PmBSr^5E-msh0@7CG@m$c*V86^I|gCth>f
zgAE}viSv8-dK?0`^YL%%X6{R_5ASrquX^Z}*3!Wu?s$Y>Kb4o)dgIFam3b?Pe*=AA
z3O{XOO??;qG!@t(Gi8#{@W^Ph>K{l?EW4?13vr`Vm+E+qwCLxmvAy21llAj4@w>I3
zswPHGWan%H|2mqkTl+M=itF9foOz*ErLV__Gqm!?zVONhWKid|?E2*I6Ajhac`xN0
zV{{~SGw+E%6wHW@tHz%Xxtg|Y`>YYs#%RLBldbQN{|ygM+;_--02_h6Co|vS+0p;Z
zeE&V)kGd(X#q9nYYzLgRNgbJHQtQ`ya`ReZp@{}aZjKV~CtGfo{`u_r<`Mbn{->3n
zNA|vokMdz;XK3K`LzmXZFHItsBU4=ZAF+3l8GC>7AyfC`WsypFc3XU;xgGzLy7Q5T
zv7@!EM-FzJ{MPlvx&e3hmck$0km=aW+`!lIWggL+#Fvfhv0JY!xOnDaXjVOI_Q*8J
zI>>Fz8S7zHJ@Zw~*w{I$N**qlVa_4Woj-5D?Q*`Yb!)7hRr9o#bsL@P!CLd}&%NgT
zqZt_4nESw9cD`RjXUm7cE_MKVoYh8H-;FnyyL*8BNe}js9$=qWozlEBmwi4ijVHgx
zAm7>;-!zWVyaUTlonbh1DY^=>q3F_lVBQ5x1#`i;#Ek3(o^^utVQ^n(9l)(t!TkHw
zA=zj<zZp1<{T}b4xoQKNyBEFdUE#A&e-(3CIFOUpLPxUYO3~VLll|>JeU#l~(0Ar%
zEZ^nJTE-cV{?!ijQ)fs5_6&nx?%0wb@@XD+IAmPLtF<bB>V^sU#LaL!C(a>W9CWlV
zFrl@ESeG@%?YstfY5o%U3`R;hdj;-t2Ddyw9dpJZ#|BMX6xtwNE{Yv2DVmhAKZY~5
zN56f1LkIQS0nhqZS99h-HkTTFilqOY_J!2h9c+td#D>ge!vL4ZM$Y4W{LOCF9mDM&
z!3=YSi%r$cjNIn=EJkiMRmofL>Wko$btm!v)YlNcNg9`6Qp&yzey=tjh{p4;%wa==
zTP2;Q6koyGAT|qEYdz4kRrdcUJ)c<7kI?agnd4`=RRoY&q`5b|8{z<T@m>#%Bfz(m
zvL%_d5T<NsUZgUFU$<Xw$2}#B|DF8fY3~_+Q<o0L577eFPTNJR@XPddkRdQt8QIS)
z9na#i{(i6@f9?+2n1T-J_btraoBv$1Pw}skoW;~S(K=}2EJv4Ujn22;=2p4zN8ya{
zMSEfneu@0=Oa?>c%(tbhUBO2ttLzv0yt3d!1-7Wp7(T12S9VYBH~97n@&EqSgMD=U
z@f}-|m$|Q#_{yBy>*G9>#b0Zei0-WgKbqms$FM`DSWnpBs*qu4+&Gp#(qG}qX1AiZ
zbM5-cTwvZgJ2+?g`477H)Pv8~Zx*|x>LYGXdCy|gc0PKu{H}%5sfli<>JcueF2$a!
zCN9ilv}vFL#!MPvpdIVY#Mf>Fr!=-Xtec-HUL<9~y^0icQ|&Mw@5~=OSMB*aW7w{N
zn#>xgWev<>4V;!41V`>cu|BUx@hyR4g7ZB}S9`(CH@7d%_&FaA-s~V|y^Am0{=mf6
z7x_Oa5L=|NPYlHNsxMJuTx-r0n@3|k04*rsj&H4>1K`v3tO<=z<MPL-@y$tj<r<iO
z&9`u%1{|mc2mHCOr~dG0V${*UH;!B1an>378vS&+msouiJk>8BZtJ<jLVkGTpvfW1
zdoX+YcFr(VJx{uY9rCE=*Dx=VyZpxhOW=aPgSY=G*!pzG-_uM4m+nsoW#<|XT^!bS
zY{^7$$#lFI%#+M%=jF)a331(zoobpCKY@Mj{S}kr?-Lv7_rEdy7T=z=^SgI_CG?0k
zoIJrG&+44S$^4j$&V9!ea1dJd+#=#Hf-90+p-aTTjE-fl_VxsamD{|~j@s2X?acpt
z<IXpcX+qdd-h?hhjC+shO6)W6$?I?430^k^kxid|1zRd~*&rjVUDnViIYHkV;MWn-
zx`X-U&%o=`W>{|*^PUKhU-lpQ;Q}vo;PMzTS-;CzR}f$Pcw=$g6hQm2xg%43wpw;b
zcT}5WOe!2gmnb%?!t@)xv$Ld_*hj!hcw%+Llja}({{D1(?DAUpexRxy-x;-+UVxpc
z(WJT>&TC6InN)XepiSp=!x8$`%(n-4zRvR$-|(B3UrM?sP?f$#{B}Zz&Kjrh=2^$n
z%Ck{49J?obQR-*L4!=!%T}Q4057_UD1o)-Dk&l~IA^IB`j!$qPk60*_Jr%Tfv^K*F
zyt&HUT>`C#9@#bT<4H4jVjZX7$%4(3BMrn6y20KBx9F}??7rACZ2Hacj;;7ngM$`l
zWRsk!z84EFdo{n;--R9utdr>S&A~}cTgPA@{j5pdLcGdnzzNNLveeYgZMtQr`kTDY
zbdEY;zFduc^83tpn(x)%QSv&svl(7hKY?*f&c8(Kr<t|DIeD-Cb2D@RyP(P>u`Aj+
zSPcAGU)}2hZGvz26&`E_$F7;I6ZTm`yfY@97u`eq;AwG3446pn(fO>dDS@_Fx#WB9
zkh{Wk9&8NYr%qpAX8ccamu4^!PnPhzSai~fCnqw`od4!Nr1E4>piOa3uo_ftxtHH1
zrhn@vt5dr;(<!)sYs*8#Tfh(g_VwI77SmWK)>OHiAv`%OGp144Afe&Oa}8%6i}0U~
zF8b+vUistDg3gDlJ0~4XSLi&g#=JdqzRf|_@b`X_&kjDjR2?#PzyFQfFFQm3>T9qG
zUJISQ4m;iFvD4ka*+$PkDB7BwYAO;M?_zwv7oazf@cF|;_yhYCtSj{?nps!waA@&$
zo}V@Lz)tXB(NpwksGqg+2=Cy_d;I;*BrsH3HqA<2l_QOQoRROT9BE(o(gwBhK#sKL
z9BC_Zq&4M8YdkXzUSZFmn{;}E**3!Nk=AoI(V!<9bWLoRoiXP1c;oeP#WB{rhJjNZ
zXN!avElT@y!jScou8y2{-n!khR_mTlaJXc>`|0!pr#@4%Ztbih+Uw$eg4nm<6~qQB
zLkHh_Kd~-|)#@y3-07k_R--rXhPFz79EI<_XfiUxn0&s^Hj|pV(c@|tgj?kk5hh=N
zr_rAKpVWkHv`+GkPwS!Uolm2eZZ;E}jH$V2E%I5&Oj)4yFS@^*{7*sSU6Zdnmlukj
z827@~`p;e1+9*0V+O(GCRrl4HAaORmeT#1BiuN_shBJEeCg~I3Uv|sRL&Q=NO>k0b
zBf3cR1)SWgwth>V&BRy|o}VO+YzyP*0?$Lp6;}!-;J4=HcgMVWao<i`c_Va$m?^AD
z!`U8x?hc}#X+185f5ot|)DT<RUyE9sC46(W_XJ--MoJmvo}oAlew>lEmG$AB|0BKu
zJj!LA32%m}KI+xFl#DDo@T(uCD|&eM@0L}*_Zg$ct??=l@r%%#sn8qglHz-oc4ur`
z$RQp7W4z-W%MSXw<J~J$G5C|E9oWPLCm#+mdj{Xb^~Zsia6N%-`umhSel7fia<V;Z
zKh7^Rly<dXud#hTdZm?pe42P4b0mKuzb>mAP+yXGT4isr=TH`C`|w?yr<je7qW{5R
zZ9iYnSuD<RKlPjbc7M(KuoLZmZ>dRrn>G0cdaK&exYWm!z)!I4ps)Uz)t=wB-*=t2
z{-E!gw-5TR^JjnTyWf`D|1tT~>jKDidHBre%>FQ6-?cJb*C>N5U7+*&<?pXJ$J2XD
zJUPzS8+Izra8qGiGI9w#d&<VgC*RRPY=b5F@%?$kvMoKYtsS{E3a<$v7nh(v^t_C(
zGWoiu!AHesS#zG=AbifqTgAjDoW|W@A2t;#8yiCBHzT|FYpEPPNw{IKibcMN9c8VH
zp6E0^#Gc8qr%W3M$HoQfq%)wS7JmN;_W6+A$8&bOth{ke$>Oiy5_m-AwYDF`9(rOT
zu`FrNg)RrIoI2Ucf$B$;bm{JXTr{20-9%r|nRc`Ujh*+fF=L1Mee!gfGuEl!Pv}uo
zDYkAjUha3DOGrBS<MrG#F_pbYGojZ7f7RDW1}^I3Ih^Gx$;j|(-yJoW2Oe887v4P2
zTdUe<^Ui1w=uErV!|Go>2c2muc7rRK<E!A~S969kVC}4FV$OAIj_6AnPYX8susf?w
zeMoZNDa75O`qscXvc^}ct8V;hb=6I~tE-xg`|d6OR$X-=JiZ2++F0Wdv)+BTk@p(|
zPTNbo-_*dJ=loCe{_Lsrp2McB?HT^pbH?sX_G0Vd3&^IgPrf$Y9zpL7g^){cHLH%%
z?llEwdyF}dtP<mHU31wK%PWz^>SB}K&KGOU>!SZr_G^>KLzaF<9by8NC=T2P;&ilG
zSv^6_zz0m+`<~~exx+|v;?cX^fjHA^SIfVF@q@=<Q@~i9-mc)(4s1Vl@U_>g<^>*!
zHF!9YEi)kh+W8)ohQ5gW_A&5BwuL?6P;Dv%JWtc>sn*BI6^xnF=#V=_FJrCx^Q!Y}
z%9C@RICtvLQ-ZVOnx|6cL-1AIQQ4S)W%A_U*gfI{e*NM<%lV%m|7NuX{)Kq|HSbY=
z?U>Plbv{YFBC^+1N&oC(y@0FbqUGKAXVe@=C;qr>|A|jD4^Mm|iEb<zqIr1q6R}i!
z`*_(MGPrsT<)PE|e7tCfXo{gNOP6VX!ZWAZf!nrlF=v9It?G}~K>z9&J%2y^k;XCB
zJJ4mL85{}aQD4mSIokz}MCW_*R1}{x=3%<$KlY>N62YbWEiRxN`95Sip9kI#_>r|_
z`H{5@@gs|tnpE^*trO3W%=R;LUO#&K04@xiIgj3&BkeREoz8a}k4~rM@FUxJJF%WP
zf2y;A$634Z0DC{M&IiI{wjJl(UKD?@37q465Bik=J}$rFO_KQ?^cwLh|19Sg<SXvm
zwPk>lWbV`LXMD)A({v{F9p*^zbnqpUe_sFUA3f*!*Ld-uvSID_?=9xMfAvl~e>w-5
z!Z#-H6>tapjP)<0-A9P&p?e*m&$2aa)4hhohZSwxrh5%FPsh0bO8$|Gd!Ix%_GzPj
z?_1|~{utX<l(mc;w`d*wJb&fgJ0)ul%gCOMA^Cv}Yl<R=>HNl<CeOxFb%K2}qsUm6
z-k&d+dH7fvtiGg#*p{rNx*6cSK@Mb(z{bRnu5df|-B8)5yR>zOkH+o$D=N0S&Q<oW
ze%0cf>XE%$b?w3iT|!)wSLuV3xx*`L<>%rB;t^r)nY+Rij|lTzZsTK4?uasHVcO>o
znGQB#E4FA(<r_5<8ckm-(H~|YJ6^#ZTE76+2N=8VQw$KZvJ2fdN}jGOyz`ph`$d0y
zjypE+we;>jJx;xf+f&W@3bD>)6JUL9FqeJA(%|Y#k=ecVH73dW8tVU<y%t;WElFh7
zVuHMpiDvrBFXqSZ?#6!tTTe5#hvrjx@#aM%E@{3u5El(e62AqVepPz7v3G`E4G;U-
z#eFj)pFDFdS^NTTxHqd@_$}OyeA1+j5|8EX(m<Q)^6NQ=J0T)-&#WWC+Og&4X38}T
zE_d}*%4ODK_F721cdu9OGnsPTgUkJdcn9!)pFa$&tAT!g(JL2$pT-KX74LWHbFj_t
z?<LwtxcSWT1O2@jSp=S}u^Q~SkwcVkI9>iB<eTm10k_-Etiy*}l(;d1ogM#e)CYf8
zeaT`oQ+G8+;PDC7{XOd5iv7Z$6MP>Ync6qguSa!6u06Az0T^BDjrDxip&jo8>fcNK
z^xq}sL320nv>iEFFeCDw+B!WBVldX-Q9PuryK=PU&*NQ;gMQm_=-!VZeb>GB0s7JW
zJZ+wPro4%dP%3*Z`*$QnzM=U!4THDYJKSCbe8DM=--ku$ztTI{3-ENhEIuQ;w=0X!
z{CE772jN`~K9k77XA(L1Od<!LNn~(a@<SMTOY}tk%6D>)ll+z6XP=}K8eGL0aQQ6%
zfcMq-EGOVIigj=TS|s^dd?tdgvW-a~`x);$O1+o_;xq4G>e@0x`Ap&?XU?VNRqz+p
zAv!9ZJ@N|hXN?I5bw^kYG4r&(LI=}3E(P9^Z}Gk1^!LVYzGs!$j9=k{?0ud;B(Kt!
zL5qjx{mF0Bb>oH&#=DU!I|M(U>rL0qQ2Ku1$7#I1gt&m)180{18EK*?**N3=dwR!z
zGDeMC@c+Jj_wERIj&~pa+h|94q&b<hzrWpoug-e^B=7yJz4Hg+m5R$@R_1_l4m?Wc
zz@uaiJWA%kqvWC-ZRDW0$sBY%2`&xAi)4AmR*0S_evYm1jF=3{b4IzzInuDxhLD>K
zI)h-gle&t*XFoQBg)cZQStL0YI{>j5j&U!IVlfnD<gF93{~}Kfjm0o`^XXU&27I-7
z!22^}b)1gHu%GX_;xMS~GsXjrQd;)<%#OpL_FiB-iqUWo{K%HGh|$<FDXRT#-KFJp
z2p=S4m7H|qCY0FQg<XE>x?mi;<2Lk@Z8g~Hm!<>plIR>8pG^A?OD{70E;xzqwN3Dn
z?b`+aN|5P|d2a90kDC4vHu0t0|F|?=z*87s+B}?R1kXsG5AmGKGb+9UcrFd*Rc%y^
zRAd+PAp4Hov!wSr^ib_pu(s`8=tYIZqmwMa`uq~K)|H$J9I|PlVwpaQ4d%{!cRb<i
zF6=L*HhzXXK&Vstw8fjeIhM9X7{?LP>vv--ET!%VZogX#ADHj1a$C(R7hfuk_rv!P
zORyB$qH#5wxMG}3wi90v>_wBj`*S?`PW_)9G`$IIiTeusW~yHicq{t?mY%vrCZ#ym
z-vh?`*;kr|oHiOBwDsKTcySrAY#(;3w$Puo=c1QB%pN@QTuUi76Xe1$@}^`z#eS2`
zs>BrcM&Bc*Ds38Q_V{Hh`wTHY639M&%sJuhG~#HhA9t%C>|ctmpzrNPmQ8Jh#|v+!
zEL%eiZm+ELuLygY_4Fqa047Du%~(?vDdkMxSp1d1^C<N`$#?Y&ovE{hI&_!w=HSHM
z7UbH00sl6Ve&lF+y5>c5rn&ih(u;rY`M|lS?dJnBk$c*Hembr3%=vbg<Vefx4P@hm
zo7o!}lm;w@;*Sdqho&WowYu_m?7=pgwtdZMPZ!Pd53qAc>>p2GB}PvM_U>x%1zk70
zP1)VD^GAVKgfoBHd1MRp^JuTtVLqhy9szeXr$_j%wxmPZayQn}XK#Nh3|(|shaQg4
zMSqFzwRzUewR?hIA18GjfhTC~zD6C{yrDScb{69=S{yQ+JJFM|ah7M(mau%rkzq<B
zBP|Un3ys3whaN_M0wYbl)E(UxHe=cXc~1O}3FeX5UDZB3H~4!uvD<Q_-JBzheZS0H
zoG!~=!Wn6EbEJJFN7{us($33~HX%paxjEAEbEKUbz@O87elJJb?{cIa%8~XTInws$
zNc*=OX|Lo+`==af&*w<{PL8yW9BJRmk+wBQ+Bb8gZOW1MaE`RE=199gN7}t!S~g#d
z-IXKXZ8_5B=SZu`k#-M0B*f~H+<<+>o?9$JCy!k|I9Aq`e}7sANU~;q`^qllUgbRl
zhi}C`l_ifLe{4_;u?edC<C3fI>f3}3-7WIuYRSPa_6ZmMr+38=+n0$ECE0tZOcEZ_
zADbtqOv0V!#1B)SeVN3;mLdM8ehlrmJ@>ZM%P(3nSWo(~XJ4Z~qE$Y;61;o%yB7xR
zKa(Qnb;%-?Wgh*hEHj<I%%VS@?c^0(pHFW>^5cRQNtSV-M*(QhmbK^gInX2n4GOoK
zcxaUN3MO?d91ktJHOG2w$dPtKj<j4frY1+e%X6fa=17~IBW-MswBb3@0y)x7oH;kK
zcXOouHb+`_j<jFrNZXqu?WZ}?cIQZYAxGNtInw^z^yC{k+IToe+ShWVeE^Mtr=F(o
z_v9#hyO%bI7Tua7Uqg<xPv%IQkt3}Ec^Dsxp|r@ifyO>Em?nju`~aFn-l1zdw#e;_
zWN4D~OLU42H)Lp%+K62!dGW5k-^dR%Lzi4=Q6xi`^u7YRG%ceqAxm1i<o7Q-zG3Q#
z!F{uNhtMb0m*k#>q4a4N_8{33)Ssba(Asy-LZ7l}irPDzMWf_n=i5Z3A5LOl>d!)-
z*pJFZpDq~(efm@7qA%uH|MPRC<)T^m6b*$@?ElI|`(wG}qVJuFPqB_1Y5#xGtgq(i
z%i0`i8M$Z>&C19{gXmK(x#;E`_0{A^yF5o4GR+6lr;iV&PkoyP(||!T6M4_TTYL>a
zkUo|F`RLQ@L;ChVqEGZ^=otQN^oh6(e-`>ge1=@~$ti+9-JXMX{HZckF1;-m&B`TH
zmFH;p|H@SRW4UCi@0^Kae-4_}BE3JeuN~XuwJ|6yBWDdt`&y2C_vc8<(5yjaGcwg6
z`jnBW2IadoM}2d1q-A8PL1o#~@aa=K<2#NGN4lIZpTv;4vg04`dHe(D6M40^2i1>!
zmQ9~F(Z(S837PB9B|pW7^zDB{pXkrfG5mMwlMhG9PhLFmb2v8;Kt~&H{mbsy%9$tW
zZTKb~TQVZf`5^qi@rTAQ-Qhige@s1(iOj-|RA%kJ^~5|<S~zr3o4%XKg>8|1Cmtd8
zmxVX6!?CS*ZYGwvY?|1i|6mf2Zi<v+j}+b#M?9J@+w``*QO;sS)^b)2Tb}a96hpiO
zoAHJCXyY%S7~+vpr(=jKe?wLbabjfr$uY#6*RGo-yWBVE!+!RpoA1q!H{V+jmkm$$
zvLt6~@2tUYo^|&}^IX%f?_GS8Jv}lX|4-tO%f{Y)-FY8pOexv;sCQBGXE;wwY_TYN
z<cb~8LR|8$^qUVyUcfJvcEcw5Zu8o&&LYoeo9}T}Me;|+V<jz%q8)s<a2(dweCk7<
z?u^b{uf0fgXz9-N#9EI83i*C6`|+c&|8JPpd}>U*`5PwHeCnKkXudZ3iRODJFrJA#
z#XOUECi6_;nacBFp7VH0;>`gk)tt{WoabDgu{;xaCi9%fQ_6E8PdU#=c;@oVcTy$M
zhh`b}4F|#FX2<&4M>9Coymr{C=G(}BJI`G__wd~6^mk+L6<!UT6=FZHfA!Va>*wQ>
z!JRzoygPXmXIyivxlo*O`B-lT7ar#KzY|ydKJwc>;U9avaU}Zznm2p4uS0&$77wAH
z)^8R&u5d51+i9D+r@uY2)@gILbKWO2rlEcJ>(hBBTaUFpd%iXPHx7k#M7o1*8?VQA
zE+gCdZQ8bOJ9BNb$8pAbk7Q)K?6MYrp^bN7`-&jv)uGQRe%biz@92A!czrSU10H%z
zw2}R+%-+F!z+*po0@vTw7r<}C#m}a@0NhbNe8H5@pwC4E#2`P#y@=3G*_>>Qd+bm8
zhA&yF0w2nuH0f+`iZI9i90>M9%RL5swZ~^^6n;^6BA-g<)1LOY>+kG)1i!fGSkI=W
zzOc7p?Q44f2KyZ9>s_gI#m^~odLF!cA=57p!<Tk6_N+W;-5Ab8anDa?J`b>0bZBBA
zP7J+N*VpsnhuH%<wqz{(Mn&MsIQEUkd;Yb}9u15J=2W?3%*-NuNuz5yHv`<F<@lFh
zVy64^f`4wxzRM2^AFLC=ROi!tTBE(CF7~~StTvs)!M~^BPZ#5>gw0U){kCQ7Aw3cp
zHsZePt9G(~)N~I18`bE*;gu`<E+E$Lmdn|1nrEi}V5`%%3STAmvYNWs&(VFpdcSz1
zQx_U^pYJ4lf6_tD^qCDUlPBtYAJ0_I2;ggK_bs;22gNEl$evPFsi_Eq7xGzB8O2#R
zz}}j0brpR)P)7U$@;yDn<m~s|?3ej{pC><W`rC)k#gWzAaRnY8z)q03AKx#{fzBJ@
z3uWI~gYWS@32eBVaFI;|hJB5O@_8LP|8%6ubSkz<VzOvRQR~b?e1-yrO#yt0gUeQM
zwydyeD{+Gi@S4tfdFT4ZotwGGJwO^~&ZY<Fm9@gl76rKXobzTQnltAPxYuaJukdr4
z1w1zc!^q#7x}PAItYu!F#4oFqISDyaTe&NE%=9nK+Bq@LbS4;AGkLoUoVr5bvf|^W
zO}?1Wcl@gJs@M-rC7w0gg{z`>Vb0+ShMbcxPZXJoH2ba5Qv8rK{)ep}>hiZoId!6U
zzyGf3w`+p?vIL9AfmKyWZAxcoEgrE(CIg32@E#vdf}1ZNnepB_)t-`k3PR#3$-K5^
z_WP3g4tM%;zus_@;!Fj+FA&G4rz*s{hOcQ4F{M~h;%CbD<qO#}_P^nGm6!p4YcQ+6
zJm2(3Hi^GQ$0jfI_*U~G)=A7wMbr2JZ{to!XzgrZ+;xSi6I>#+{~~*wF9oIy+(G>k
zd&Y0IIA^`{>j%W!iSbz4kbUPDYft^snRSg(_3jv9D((@z!k<pONp~_VZkpBC9sK+y
zOYzs+0v*yi(fh?wr>=HQU@@}CSmOPTfln`JCS9>A8u9B}0e%qkVxZkd>)*%y*O_*^
ziD993)&9vw{CNvZ#TwhTx2BFag0KHC_a3uf`d!ZD`29DWn->k8YIH9T{iaM5eD!?V
zr&^!(<ZIwAed>CR^+(+^wVzBqqMH_%3O!s(Qf|j^`p!BiG2@#anuc#Zv6X=T#LbuC
zdo#=|H@6X+0eP&4^9~kQ<a^%i;iS)lozFV(;LpW5N5MY9Liq3^Xy9UKU>!7&cn-u-
zO9YqhKfoSw4R_ni-#Q8|>s|z<b@RU~bDwT3lh#98DQ5(`!0&^#;2rB%WxD9|fsaB%
zYB`UGzf5#EK6Oi+8Bx|#WQkKjEU~?5{1AvI_HJ?oxVSFzeDZG5AI@(ap&sC!-WRMg
zBi+u>QZwCOCx*S<0T>HkiJu}_?#OT4&LjUDABKIkRqLUdG4|}cMtml|1>a$v-S0XA
zO+`j^fuUetU5IQ7uc-j$j}kCK_?fuf)U`t+W6Wce@3t>DRP6NE@1uc5Hecvk@}c7>
zpT-#?Z<>6YStnieLvy$VU+*w`RL7xd?Crm^0{&f*rQ2u?Prz5p`UJzjAOD8<H~zrz
z<%sw&b@;wo+Oy(}Vn+hJ@cGXH_>bs}?wS*<gd2uCx(sbT`ct>l(vp|2OiiIpix1G<
zO@UyW&!75OA4%$f@T88G@leMB=I$JL)fX5OvPAiK;B*Z%adnw_{qZHCzUDIXk1^s%
zh!2}(tNSK_pYA9RC+q3sOM&912fuRmH9j$Oub*^0?Wb$)is#9{c*l**9c^y0YYRVG
z#-;IzU#cHp0KfdcTnF#*`?Cex^U*R7*P>b<F7cxer-^;XI$F!!C4!4_Mku|Ibe((F
znenT4AnzS2n4vS{?KRw8j$g~8<drX*aN(SKQ@7*OshLsq+d*&_T@c(U_g(JhUd!Cd
zM@Qq4e5HAD`5wI$8RJ^#lJ?zR-NHfDtNA(y-{mO!wSoWo^XZpW-O6j{l{(c|)u;BN
z_fV&NK^faO)*@>%zGL)PbN?p4E1;i=jDOB0wDH}m=s!AprvH0nKY;&x{iluy{ipps
zx|h#SkKWE0__mLB1kZic8+$c9{Xy1+aO<nU<5}djhv<Ls>JVoLp>wR+21C3k&H%0m
z1QvAjJ9ky-&hV-WiABS@gD3wOoVhVz6gzE^a9___V@9w>#>7^Z?xgN9s$({13TrtV
z{t9QpOPpYD;z#K^{Ka3_{-xS~KUiEYc`1o6?~CyA$1}2#JDs!U@bVD6y9!<&1#hEf
zlI7)(EUVf%1zz51#*H`$-oM0IUgp0JpQkaBeU3u6w!@?QelaY50{^Q**1)5}aq5aP
z{_oyUxfB2XF|&h3O(F3Av4H1;-UZH=1gAC?Ug6Z4L9$q}mBl<ctQa}0c*GPdhanSz
z^P8w!G^=u&sdxc=7p{w!Y3?5z4!+XvqXFnBZA0q@wI60L_yj&OeZROeF8S;z^!0A;
zg7?p5ltOE7`VQyx7|;9kQ?g5_6WBnn8lcnbnD53{Yw+XG>xklquklA{H^z6>Hx8XQ
zsXj0tNsS%2|Ngsf|Kr$dL{}AeK=Mf^a~ehF$>Ti;4#>|%JnI6^PALvaj5?9)f!X*b
zkA88l?nUVN;A|3KwB!ix#KyNwZCTpOIno{XK?6va>};SdiD`CyczElty9eC3)^%ke
zYk~gZ7d5?$GQy2@%s=Zrbw4;7W^50D`vLgaO~f3~_l9K+JG)ml>?}=`?A(gnxLfb*
zjg8HuKC0~}3mH3)<ijL$y(ZJA37PR#&otXBqf7fL#}&7h1fAYwKk+~*cLaQ6uJ-7>
z#}WJzCCkF2J65bUuSfD(Yocq+eLZVywkhf*{!iVOwf|4w0h<@!BIsQBt<|C@duoo(
zO@-0d40Ly3{cGIxYlbnYS%s$4WQ}`0YcmY&*EZmbmRVc+UB|gyjk~Ov7_sZ!zOuYP
zpUy#5)3#{Hc<QtB5FI=Z*R0N(htbT#MW^RMII6N1=9I4-?af01d{ABBP-;E6v`(<6
ztO0H<D<eDWSJv;WUKvt<+O|+`HZs^e`oX!8MU$>1elcZNa@Os=OWo9Jeoxj0+lpWQ
zi?-Fl3)=+SPp~F!Yz8ZX6n8{eLprY~ychn8Uq+y(!oe_SuGCM-;7aeow=oL*?Kkj4
z-#Fi&>V8=<0j8W;7d~ysqT9oqo$T67TrvIbGoU;^!e2I=%j5oH`eDyat_ZY6Gi@dA
z5f7W%@vTST<<v2>%@}<S<J%QB6Bjt+oL2Qc%sfx{*L1u33NBY1w`*o%lRFC@!TM60
zrNFT(II-NNog)74JD%QAl;@^o<4a`5MS1bM%(&rWtd}&rD0!Vn|5eY>JYC42$;Q*N
z%6rI#kAi<YkX5F^qh))o1Ex{>9UTHcYbQX)jY(Fa4u7vmazIaTLb>{7c?&#8?RxX!
zcAm&e7tPE5Ccf7|doF!-7z^_49%DZ2opEV5buM@#e0ITq?1t03p_^NuOApTPUTX92
zdfdx@gmW`~8TVPmbqsWb@%apg^4iq4v)<{m{aohVM;ig=J<!3k!8J*n4sku~Iwjt`
z>d?HXOsVK_Mn8YG@GSayEo(PRKeuhef3xp67ObSFQ)g-mG)*$}uh1o{fsL=P+j8RP
z$ZpF2IP~K{nMcE)=DbZiGSVmD1(Mr)!0~{U(K)w7-bT{ZPto1NQ=H$-aSyZP81>Wd
zUr|POvosF<tl09iV#~86t4PP$#JX3U)640n-#^W<FRO}fD6geEytkug7L7EW9|3ND
zJJOr{HZ(5jwz3Hc|NJ_Y-UY5~9ILTM7lo*!?<6`o^J)?S&RQZffj?)RL&`dNx#v*l
zL?i?L4KUL0FZn&nIz7VtN(O%r9DMbW^z{4SL7R|2;C+h@ZcI;i8INQelXbSuu(ox!
z4SeN%i|$ql+OuuD3i@VB7nL2On)R~y;q-JXmjd&ro=>+Y+6rd)I)`iqf*Evsxgjpa
zL(uw`P2k$9`kf8en&}TNa#M4e`yl`G7ZX!2m|uRC*O!4f%WraaHnd3hK>W?VgYdv+
z`XnCEvaoOFVR&N~yioOZQ(pDF0}M)7V|O$5_0WU$*k?+0ZVlP-Y&zcODdXqufv0Un
zw)AyH^<Q^I7qzA<)}gQZV~_Nu>!ty-f8?9+Q9QTs_t3pTveeW8SxPefcrz7wYU+r|
zR)_Fprd_O&x51M&oWtt^Pqaqf29{mmzHnt0@Ohg){DgH;!Ma%gKI`J6S{IW$)@od$
zldL1H4as6}m$@m$HSpF>5n~|_^wfR_clLv8l0AIc-q#tfeu{h4|FdtVr46iU=?D24
znxM6I@u9P<HQ@R|Yi)vEYu-5&$>v&XkAVk|GT!1rYpoc&n@10n?@@5I9sAuz)(3He
zv*u?)W`2q-Jy2ea*XrnhS1?2CbOL2%pF(%sW9@gqXd`JqXG}H?+9O+(eFs0J_aCR6
z?08=Q-tRS;&i8=t(TxSzVvEXU&-)NO{Fm?&cxU++z<=2oOfb;;2C!Vgy|z=DN_UP!
zPRF)Ara3UaH&Klphx}8p`AM%)Y;Q+$S_W4h{Pz#Q73OhLE?l8L#e{mJ!c?dqTQd0K
z<H~O2(O(9P?gX{xHYJx0@ZoXZ8h61Ho3<X=bsOt-Ip-x9yX3~`8e|Q4h~!1fgMpEF
z?*$?38Nl$^70^KB4(v+c-}nxn)^)85w8f}5#C`UvYYKHe@qnqAhP)ton@TF)9A?IK
zBPZ1d#xL;8)lhdevP2kKllPh@M}&|geA(N5!ILBW{HNs!FIFIHy2DV1+n?SMLZ*<O
z1y3taYVG_}db@tb<FaY5c-?Qo>*$2)s?ZWM1KZ4=Vr-aZB62%68Cxg)DLIKhI(^sK
zmNI<T8e=m^<1CBrC0N6mmo@o31@V9hRF(3*CR*86R%qfq#O0cO@|<|{V{ZTKlf&aJ
z`6e|xQFt=So?{C-NDZ`IbD)04mZdAQZS;bBY%wvkg}2-nD;o#4kUjF{oifU77{F)d
z#oA36`}mc2^~n|$BThhwvtSJ)YCFU9o7jG<x(*xgF3|Kcv0EiemJyRBh>b0Iqj!d1
zu*sIY!qAo&^M3^SwOjHX^<4eA%)G!GRfo<1!Kt=ynap|X!{Q50Q`fhMeSu7RoERsT
zmoOK;P8j1XN|O6~(v9AC#lEY?eyn_9S9h>^c_Y9i*$A(MCfIpK4&GAgX5<s*ly9|9
z=a7Y|SM{mhaP$J(es-O*P43F)?i2QDwa2vj8gD$R?`%9)GPnAxI_tU1D;)icGwMA-
z`4c0}j)C<>e-#s3b8E-J+SE9F_~w$SlV4`ML-PUSGtxx2^U<kTS0!db)5XNYEjp2&
zxRv$3`$T$r47w2bRB3A-G)jDXDfVo`zJ_goH1U3kALQFt)sM4{`vm>b98dl|a%s?8
zI}Z5j&!yEzSU;iPrFVRT_AQ?D5POVqr<a=4iUsNR6HDFHuYZ@`F4-peK(NY`dh1Gb
zU-<OZ&k_rV{yG*%ymLgVcj%apW0xO_OUe7s%y;7cOunpsUJD&)zX97D>q%#nx{2>u
z%3feQdfvKnj}G26Z)R(RJr><_5}Qx#@j`6WYYG>~=AU2rk_lQJSM6gD=m;{mf`M>U
z>o)SRsd&*bJ1X9R#_(M>e#K}P9X?6S8|hKRXYCA;zZ-bTUeYDn1YMWzr81JYRG-f4
zK%chBj&&Ej+CQ_Ym;|waNfA5H+GHm!yW5_v5{;5v8KT~B=4@4H$l0onHsX|m8^^KD
zI*e}%JZcLt*V(E!1K!!Ho0vbp-5BjkS66>U|HNYstaIbwTPnFKy+gXOQ)sk)$|XDO
zgHD_-d+)yNa>{Ga`6BBx<uW=pF%1UGEoH`&Ny^;Rr;*kC`W|gwy${=Q+j01t;N<s9
zu?mbC-zr<;FYY&eii;SIBBP%CWPEmJkIeRyHP^K=y<>tgsj0|;idA!v{w6+^p5B6t
zkIksu09(6O(C1&GEWDzw6g|HgT3L^5Swif=zx!dj4tvu!*_#4u7$dT=bb)EepqjTR
zbxAg4pA{a<x%R71%N}=Kot`fFBPscb`4*ksv%%A=dzd%#P;UBL1B{a3+^9S=s;^OU
z2sW~fSH&gIn&5;H$y(EiAJDcN;8*Yh8`DB^%oDupUUTf@+vF=^ze%nkW}@AzU@iTz
zy^7y|+4Kk4OIV6+qZ-?h<P^O>hyBfE56WQ=%79DkNm`j!dr*@5WOpxO4@y2H@ab*G
z(XYl^`PMscCS6BsADN+3a_cPSr<=Pb-hl3Dy$C+OjwN`CuW`A8)vf&c4ErX^;||#~
zQT~1CmfAP@Q}#@%X*+w*ggubDcGCR4kSK7rbc_9vip;)BbhxRTnU!Y}_RSFa`p6@?
z)y1AkIBUN|wuchzSL3li9Ak_zaCxETUTa?aBaA`ie4B%8chb#b8F&nWMJ=`_^oqo2
zQ`bja)4zjO=(}XE1JefYa|sszi|@W}{MNV6BCj)Fnzt;S*v?td%IWMKQoroHnk&tl
zXjTj3|2aI-*H6?3U*=T1lGUZ(2#)Q{oexLJ?#V1z?&1!Hf&Ojz|JFaX=l3s6|I}aX
z&J|9^&XC<ltts_$JpI(Wk6*2VCvdd-9%G7%{*h00>8$11zRB-H=U|2VItwd!r6?m_
z<J0V;)TenKmpKzF+_m<A0KO66L?i&+80!u?6FUn$5#9FB#AefN|4i&r^^bE2>@!%~
z_GLu<6ij6+e{KzN2L|b%Q|wxmojjwXSw1t#OkurF8St+V{oW#a#(c|;eg$z(t9>{I
zt*^*7?Y~HWR^A^-uLq8@?L0k~eK>ejG5kbpSF}!fMCY!8?jm1r`(yHTkbS5|^O3X4
z*8%NQB|hrQ*V_ik*8xwyzF4#t*krf=*L}=k5PNnb`>Ud*@Qf3{PCCiXyVKLPzsa0*
z9wEIO*}!E?L*=LtwtdI$?Toj)LAr_J?YMWQ>uS)i-en$Ev0pKRy_`4Elaa0J?f{kv
z@+r2@qc_ahsWZ2lBYl7H%cd?d$YwQRz((Nnz^P^e^D|*!-$n4Or%w3=y$6o(f>y{*
zVDmFC`aXlc+`(MT!bTuj1AE3c**>(#t-TZYy0sG=Tms&aU+c%(+?KeVyWUCf_}ZW{
zQ#y9b29mWV6z2;)c#(WMz75U|%q#Xp$t03-Lg+!*54P28N1wt*skMNdv-c%rhFAl<
zb~rSgwqwX5lK-%gZi9=py>uaS2p_J#3Yq}^i_gR;(|rYNld-z2Z%<wfbZD&PIYVAd
zl9w_m)n%}csZU}06UL_IK$G+?K3e((=o#&Xx8+;ksFF2K937^&tH!$%O!PlQzT`yO
zU=4KhJG6bPdm$S|=^MClTE++eyU6d<5g);xKb+jL__Nbm9riCOK8NoMdna2m`xnSo
zozy>|Z)1D3aoJR#^z93g1$-Dwj+H*{kIP{_gp;G~xb&`ZNj?gPYEryge30!tSO4C-
z4xbP5M%bT<Wah!&e@o<mtDR3|(|z|6;{p5T5$f$muFyORhme1)EyemdaTnP+#2Gr&
zhz>~`C!wu<!HMN9;6xZ)6h7H^a8~i<_jB%`0(f^d1>-5=iyr-`Nlj<0;-86o?&#YD
zjhzTQUJ8tB3TOOcWQ%(4*4(^9G>&@!Mo6BGGXJ9as^fk7@)W<_$net9g#Q~e{MH})
z5$w#^Zrbj?_42-w;JBtj?N$DwHhu*8>b;9td(ih3aayCmNOR@S)1!B%cXUGMx;VqO
z4}Ypk<c1RMzY!Z+a)b6m^-VZ+g!o>~#9_SpZtlzgCWgCbWP7sj#Pw5r2m21ZCA-;o
z*{ayrweP?%ANY(9#B98>t5)CK_r7b|Rx-|$;A1oWdW<{h-vb8^?aRY<HKpS?{g(ae
zF#dxn=(k|2=f!bmdo<rots(}`=HQ$^JhAc7P0q4a_#sU}Kbg?6hnU*2JJS_U2B*BX
z!k8WGTUI5EnW-{{eA*Axd&#n@KK7T}N`ghb_4xR`k3V4wzHn&YocLjM?#Mc~>cugf
zGah4RBtHiocDW;qeLNSs+QphZ{6sL0oVP)8qt^D}Cu)gpZ7Pg>wmv8My{JQZrvI&E
zD9-OOmaEY-#rsu%f_rgnUiP?>tef=WU=?!vhQ?3LN$tiDjQoo<_6T(+$)mQ_2IcDd
zfYZ@07ZPuNY6rHLvC1bIJGH=c9=a5G!P~{t#{qBo;U<Qe?N!`=^(4<D+*9Zh6RVr?
zcEMAU*i4@KDt$ba{+{}Ecmy&MaA4jxn18tnJrW*FAFxey9!5uMM#o_NbT$&R?$ff*
z5VtsJ{_%F!#|FiC6dzL^7AE8uKTRgxs?e9vGZ-g#r)Vv02tPPi_ZM|4UkP;{W=$rE
zr`}Vf{HE#?;N~p$1Dk_Wi9tEB<Bp9_Zc^-7_4_*J*ud+V?{aS(6FYjk``e)<<;wpQ
zFj^fP_u4-}`%eOUjpyi>=h=BZbSZOtkqfL`Ym*3Z51z&_(63CKO4}dxoBJ!&Z@<q&
z`>Vb_m9bBarq3~K7Fst4!Ru+Psb<!F44l!Liojd-?G^Mlt*Zq5LbT}M4b%F<&{cRz
z)5Y?akxU}lh_V+e?%E)}TV(m}p^Koa(2WVE2%cLsqH7v^v&is0?fCg~=S4Pds!ieD
zA?QJve)P20#=i><cQUflLGZL|CTm@|roMw`iaVos$($3AhhGPl2WGQZ2tDco-=gGI
zeO=UL?bsQ7F&SJDp44)GgZ$nM_z_I3n@r3x-KVqneB>M98n{xfxfu$7A1^cq9zHM+
z*A>k83VjeRu?Ek;rCjs!GO<_Wo7X|RK0a%n{XVLG^;2~Q+1vatXs2*FvAAHyHEN4>
z7W&upcJTy%|4uaWt&iacJ4jwV?RzpFzZ3bMSbTvVYEJyQ(7f~jJN4C{6Ylu7y5%pK
zk6FxzEhpN^+EzZzL9yn7zREuB&&hb^q}|&q+8}w!#yF%*lrowR*~CtqW48Oac{#Y5
zyeYT-ehJ@{PjjJpk*)O!>TuOQFo^vyz2gtoCgAz-zsmbm?tGD+c)GueFML{tPBwz?
z4Y}L<5bY_iY)Y2q$!45oTk3&kyiNN-Xy6rE3tFGxsBOz%pQ5)Pv_AD6dZP9DWKVkg
z#0*Sc_%v~6umLBr0c*XP&!y|W&$ndPY5Fvb|32Jqr2T>UYX;wuJ@9So6&{CXa8H1@
zU$en*2EqU@$+{Z*vo8}vn>~lT+prrl7vI)@c)}WfEiUHp6;)kZ;6-+vS?3-6Iv=8J
zFMYHBkqK7tUvQG`Qfcq=jxA-wetZdpvjhDWY%}qBMDJfzUxtiDZSNv()9JRon6ugS
z`0||Ybr`!;d@b14@T30r7Y5;hw?8OZGYUQ%=#3+pQ?dRteg#`NPbB+F2z)m97Kj!`
z#+&JPl0PQd&d;CmE2zef5F760m3*BTW2Wcoe+b*LVk~*^De5>43*r-D!;rqK`ngwT
z0B^O%zBdGJ$N8^uOAik9c{mJxw(ItXd>er45EyRZKDXHJ{&ow)9Px>4I`iH`xl-Wb
z-}@)ncl}oe_QWibUzc4Md0zaYv$YrIF4pz5XZyMYnd05Sebsp$`H_7PzJ-bJw<1%=
zs?508^ZP+%THZ?6-JDhCgYt&qXG_Q{d=RY1{~^7D`-ui%sJ{Dn^;enx=EAv~_$C^m
zI?#jc93$gz@M8aSw-J8%N01GCSh?iW*!{XKJ=Z#r4uX!C@j=-T&iJ5!UuWnYr|YL2
z`l9M=plw4P@_7is8^Pf-%4w{Q=j&kmr*hZ4o!+sSvVQ-D;_t41PuGnBP9FrzU2ml8
z3Nvum9$}1ir(cU#8GZT~GIcTS2!>-baEjD8ZSUVlEVpjAiZU}IrGw=e{f`|Rye4!P
z!rA)T^2>DHp<NlggPx4~;;DAQS@4#=cLKh2wz6CHr|W)^Ro2h9kN&-u)u#Hdx(-s8
z^cm?ceqQM|`u<XOe$te0C|sR=>AD}#-XEh0(JUG!9P`_<d?|}|{<Uy<$hwa(re^wi
zn%<ZW`Ez9dm+ft!&LQQUe@oXroPmkP`4D+EzOB@$-x$9ykk*-1htj{9`TiKc&u7X!
z%KHc5(3YR3>+a6L;|B8Hk!kk<-p|^<pQP(<CEr=UznZRV$kZcVnyw9UF03Hl|FY9|
zym7dVz3KPq$l^lIK%B$*hY>dZ_4|#+#+&X&R}|e#r=9rhZDx7wFHGH+&{JlIoaHg%
zC%<(8@7wXm;qKAdQ=R3zq=%iDUzPmb{HpHm`BmXB6fX{qL!SKY{Hhx6(W}mLkUO37
zdifDfGpmwio(^f}1f9+5KAeX=gzf`wlqY$ARC*9{@Gf|S&*NL@$NTVeeDAmm=qk=q
z&ZGZVbB1F+W8h3B_@4+a-9LK+eJ(R~&y~`@>1KHdzoFUJbAK-~rCp!Mf>Fk&yTXKD
zn!hA_v_~dlU*W7#a&5I@JXR6ozTf3u^{#*N^k4Q!HYm<4y5gegD_8WvD=RkNZ~owN
zE;1CtE^lJ*Zbqj|a(9$JHnk(Wt!!Hn$|bKd#FI9A^0*uRCEA!n{ON=IKM>3-f5shr
zKfGf8yA$BI+-DPjwr%Ea@oH>8j`k9JxaR`-HC<~uzu9oA{XOKxV<qhIj-$WmV#%jW
z+pD*nYS+E5n#<%g^h9G?OES8<eq*;bR7RGSR@R^c#kgZyd1N!hZqTW<7NOsQh1JbX
zQPV@rw_u@scKqC1hpu8}w-CCK>|73dRFM1PYv+Y3m(B}UGT)tok;6R`JMe3GYWJ)*
zofB01@^gvIyTjgZ?Zc~!xmDjEr|*(?x01id_AA($Hx(N}R{v|c|1>zxRF;@LYZL3*
zePz|LGKYJ<G>&lt<2d#2$bH;lt#%XG)ciWser&$i{$22q{T3I!_E%+Kr+A${>|EN5
z&|YEyR$d!gXWjYLox6d3aue{Lm)S>Wzi+Ab(TNxC$o`8D+m|$d*a@DbgUM^Xdrs||
zD8lYaJ-}$&Q{9(Y7-hp}X#W=a@FDL2e2V`FeD135%mts@{s-{+*na~)UuIm)Ye#ak
z)0W=sRQ>u5-7Oj2i@jt~$PK;L#hjIao7`VnnLR)FD}Wz&S$O+6t#fH(X<If@ok`Q&
zgel9K+}l9;(q*Aa13qsZm?ICLfBtrQ`vUqgoBQCa;oV7SlX1*U(Jb1WnS6JC6?|uA
z5<2GoreKC}B%-@?pjXsA7MsqhpFx*rKW3I!|C;j5cQ!rySH2}@RHq`pLZ|WR9CP~5
zq<2ww^1b<0&M-4G^2>r5CKO%tL*<|5t~$avV)zvpwZ(p@^pc{7z<tVwu)}E$B)Chw
zUb0d~u6SN$i4m9Gj_wxsaYXB9Og(h~n<<PLe6x4|YAjuhL%d8h_H(r3o=ndWJx-FZ
zgnLn{>6=S_V_GIZl3nM_!L&HZ{%%CFS4P(o4c!6X_WS9}hXZ|L9Kd(ryXda^FoizY
zGVe&wF6#Iha5#$2tM9h{x?1S%?EUgb6@61X$4;hq{FeUubt~<^_^)5xp?UnJ{&vlu
z?v*r*r9Wuebe|+TCii+S9k_#1-|?})R>^&)<iQ3rz1AgaA7xa&n)R-;Q|#$m`r_Y7
zsc(M$wjBCHX(hfz54v&Xjj(@HN*$$1r>YdaYS{U1Rjtk;pj(x(&&xfd3-g1~MK%1c
z&->OB>#@I{UujZTVoSMkP4m8*yg=(Zx2&~vWT3TdWU#dwUx-GYu+h6osUO@&UZt@N
z+?^S6tKh>kpfi7RU)FKQjq35ob+&#TJXP=~^-FW$!^VeC2EHAFllDk@kQFX~_BFqS
zECCKRzY|!V(C>?Z<soE@<|oZ^SHE8|%Om{OK+{A+1K94N_f^ernB`&iyKASqRr;p#
z4m7p8(5;$H9b5PYysBnXzFO}id8baD9j`XL({792-&tBYTXpg7<{4z9T{gC3Z87zZ
zGi}1JYQ00lRc{yP?37kZ-8CbLC7^feW)9ol)I05qkG{dX4+H;x7{!b9d{5jIW9iI;
z7pza1g`3Ye%b(+J81`1Vzr?}T9_T2Ywo&Ja7L`tW>UQ0y(pVTA(YUf?@j4T{^w`YJ
zle@vKr$6QH^vhoiJi)o9pD<S4n<5-n49p~FVY#>Zc5H^@o-yV%=xgV9Pu6T)!5PWj
z=<m+FX{~p&evkjOCPlx;)R>|LHQK*NFHazIDUZ^2qvKoN^)JryByFp1tq-;3-?bt<
zbbwP0J}$OAWexbAkbQu<R6fjjXEWZn=x-Tg6ke1u#vQ}QkI>!8VKe^H0N;+W7ONTG
zKz`bMDG(eOAM%wQ->bkG+442^>pK@SE^Md+<2qwJ>JMX4fA&yLFxttl#-Q=+;5{&s
zd%@|GY$UURCzoMyR``cDJ}7)*d)Gy#)2D6nZwNt?<k!%J{koez4}90Y3-j1bo*v{$
zn-AKjd|v_HqrWysXQ5K{dCn!G%R0l+zxri+Url|X>~M~Ja;N)wmB$21_6x@8TIcnf
zsN)&z7X7P($n=V%o=04pV8>DRp`W7fY7_j~J52A5rtKNd<4cZ@(cdn~*6^Ha_)Up%
zmWMba8IXL+esDv;q@u{9mgdSXLZ9*3AFzw;vhYBsqkl&hbI*6JV`c4bY@#9hC>^T{
zoa+MTeEct&YL-95`U+fZ7S_x%W0(Gty*>UzbC&Ny7MJ}rO3VxP^g0b^94&m=&l1e=
zp|E!aX7iY#_h6efp585*=i7vu?=`7AxJS16g+OQIeq`no`BlV!>1@7d*sACd{u4n~
zYrfy;Zr4s?!E_S;rSptD-z3i_U^BGrR?@$jBmG;XZ_Sb3LHf6Hq<@F>jvVRFll~oJ
z?Fv5L2`<ggn^c5&iOt{3@r@WZ5#mlOj?K{ivS;<#I}}gnVaB<Y=XsvpJbQV%dEVs-
z1Uj3?@|5y?oTr9|csLPar)^$)|E$exADGqraNtZB5huI(GiSCLxta7uPHOY1;c>;u
z39*hE_SZm9qKg{A<DvJgHt!9vPQ5$E{rko3*pUr1_H20|A$bX0I|kkz^44wDVb)y?
zn@S>2I%A+Uk!Mngpm?OWj!CbIAoC?gR>vEm9ZT`id=USw0`mTIp-I^_m#?+ut;d7t
zhp)s;8~HEUWwaIyu@ee<8#g?_wR^!4VK-#u&fTorr;$C+&&Zz5@GI<MbqQz+^xpb&
zJOl4OOnY0vf7P#kC4>1LhekQ^gC&9ZtG9Uftsfdy&HtKsl)EOo*prL0J}nHeVG0Ho
zZrCEVZo7)0<Iu8d?Tv>D+9G^E^+Qkg(Hdm^R&50y4)6%Wo16i7{F9|?#A2v|=FSWN
z55a;M9d*^{HvwSb!#{8tXKR3gk?;S!(#mRhh3Hg-u|Y@e*;ehPJeKLdtA3aKk$#t)
z+3!8{TYNBtykv-PeF)f#js-@0`>*n~Y-9{2oFTdzy7eRGWBszm$~kNDrqrx);2(MA
z0c8HIjCnV5&=$t5{3@@pZ(-~XxTW$J!z%@!r6#aEhK#}enjPW+KAyyYOEhR^Jk6M6
zj2+#ZSTt5o9s_JT9Xqd%Jqw-So9b0Ne*eDoNBS4&FR=ad`z6{LE3A%}AUnFqLJo5f
zV-B>RVEYIU6wauh@;CEv+QXrqb|-!anqQfLKlop92-@A#UL9B8entK+^okF}Bm63d
z;?Z9*ACg}*uJf4($#0&FVmjo*ljJ#ujsm~7e#q-WiA~LBd@nJ6>aZ8c$Ftl_)fpFO
zF|pCCjHWY_OSntEfVqt3vqqVhXg+twotn3gGFA?Z2H0O@-<I!HE_1MMf}4tN1$P<C
zo!AqA*%<tYJH@ZXrzH!fZuZtr!rm`2FxEZc(`#l=qrYZm4~&&Pa&OH<^96gS7yef_
z9@wid>Qi($`{T%c$KX?v6LhbfU>~{t!;51VCN_l){FE_W$e0$NNLLKaH^suxqdnez
zC*ZemCA52TgmJpV(FZlo0)B^suVY2Gg0E5Uh&tpa;`Q8WI6GHo#w~zHEk6f4(<8&p
zLg`6i^oK&)we}MJvrpE(9X|l!qToxt7QPYSE11pZej?$z+7*1&ZgiNL(FlAaz*jil
zoQ2~-i{n8H->#41dnFiuRI-jKj{@g<Y*vDA6x`_MdxkbyI9FpQ>n5+@8-PBER*5!6
zE+huR$FW0QE_o~u+8KOpGwX3J=inMY>2_+&q_t}N8hbVA9^5@#j|}(LND?`*gn5cE
zKR*G#HCCO|uaV6MSk$3c2|fw#T=(IFzTGaH?e|_hO&@*v+{bG#u6v+d=YT`NL-M!o
zo)Zl>@Co6wvnIIM@PtR2G2Dkyeh7G9z_X(CN1Ij*H*LhAXbmx5(U*eIE1Q}F1-(zP
zexG3uUZMO;$iTAUMTdL#|L$NO@}5J#$93Fk=M&o<?``x~zw$LYkM!hlFHV4DHl=Hx
zAGG6}i2gdR;~#mKJgaxf<@)a9?7isD_53&VYacLBo-qGcen6S!lu`WYgPcV;z4jgX
zI(8sy*;r(kaW8TddgHb8id`GRkDlN##!y7x$93FDJKa~9&Sw~da1VdHPH=kW{fuWW
z_l^LER3rHJ0D3|m{qtyw=@7kN4}IW1#9qNZx$MTuXu4p=)_ZR38wc+n$@hAAK!m=O
zVrw+OHv(O#2X9%+O;K>9=H$G6*wB_k7wW)~s_3bLne~Bc>+2tb&X$5h_27_V#aVxV
z&B6Gg*1WiUau3{;Za?r*<aUi`b1ms};=+4kJo&UVH+^Azj>nS+=*wxk;K7K#SRc^_
z)@C;BMrGlq@W+q;t+=}Kjhl(@kdLeK#}d9)0s{_ZrK$=AKQm6Y+H|0(Hv%s=O)D(S
zqKy4f=3&O_6+2lwgJ|kqIcO^SK;8a(3m4<3x|}iBseA<3`E(MxTsHyOMKiF|7=&}F
zGJIROi^#v9ZX+-h{9=OJ(mw*XrDwwJwI7HFou;2hS&P~Dx8eP4{PSo;HMo(%A&Y}A
zaVIu7W@BuKZU`^6Habc7akQIv;U+jUQ*&i)mE`m0=H=(UY4O85%l5xAc@x+~G>_xw
zRkYs8Jf5CouOFJfIn3D{)`!Qhv&Ru&98SkB`r+Rt0nO=ngu1ofWjlkfwYSi3y`RUs
zO=E1W<k5Is^j+aVRQff05&EvVFCwqL<0sm5F?2>}T=eZbq9Och?EZX7rcmsZbWrzj
z2jczfba!?hwhE`i(s%U0<Bh}EGr}$bo=K+_E#F1`Tkw%V9=CUOONW&X=EvDWZbe?H
z0Vn3LH*;m2`mL_mW!nzgIIN#%97oHDyTN$t8P_%Z*S@9dw)4V&f37~mdxG>B_y47u
z@`=?|5EpzWkw3xsi&x&s_?cJym-ms^@QcsnbSH>z+Piw+71)QdE%$|KU*-I#^eZ1;
z+=D(FhIRzb-@R$~hs^fb=%%92rTD3?uL-y6d-P~YC9>Ue13lTow|nrVTZ7EBG-&=H
zzn0DTWA^ad_*YXGvp-<>x-1Tr5!01^{SrE<JW2RKJ>`@Z&y0^g?fn+-lVxMTk3`?L
z^1mM2wtP+X|5eIsOjX29EHRUs=HVM+sK<^UJm6a@eB^KTIm_yIP98a_Rb`ZS1NBrF
zc<uci?<%A6@QpfisaGDoa5;vEIs@K2D_8CG%eE*#d6ZvxB=|!QXn%auyra60WiIn@
z750Fljuz(cAbm{2*V$v)E8G-}lap2F9d>S@!)<>>oyw!T5<T1$?<(pj5N|jOE`etj
zmy}QV<X9Z49l)!9#>d&(U*Oq~uuhLG4#sU=*rk13F~}a0AM5FtY#Pk>!kX*r`)aXE
zH8XzAcZ=zpiQRD3>`%cjpntwy)yz$|my9;cWoLsvOb<NQvdH<1uM_VncKfdMOSj8z
zXz~J6w8qUH?Tcbg%%<7@KijY<L_XiP=#GZQk!K5e#G~Xh=#VE&9{WGkGFjz({8XPA
z|CxO*^!mIjtIsj|H@l9#P7AM>tbX_UmFafpQ=B0HX11T9UABG~UZHl>AN}@c?q(Ek
z83%lR1}<8<LcU~>HJ+G690zn-?z|JddUUIKJvN^;1{`Dakqxm|`FGLvul})>1B`r=
zO<|iO-IRUJ=-LnW*|f-rw%Gk9u6KPi=0k1a(7B}H8$OUWsx6!tMOxr=T9kXe+%cqa
z&-K0N1fD&{#zqPm{D{ApBkkH8X`jiFHaADw<z8C0ZD}K8E<(nJ&f2@K*?-t0|1RBi
zge}#^KJw>IztK|oJZHE{fu{>x)#q+}MP(!HzDTeQ*!!;&{P)jt)o1LuDtpElSx-aL
zM9W3j-+|6M1NUG5ILH0hKeqGY_xUZ>%CPlrTsF@bx=#$A-asGc7^n5BW%ZR01S@Ai
z8~%`FEkx0W3x-`bW3Cz2x*mIXDfl!Ty->1Q5`4Q4oqHa%^qJ7Bn~WLOaV7M0DYidD
zS;=r$U-09}X>-o4`rnOgsB#*ozs6pH&nJTg<<z?uy|J|(-B)-i8l3(Al3`|HA(y+=
zaL)FCIcNBK+aBj{7)uRh3!y`A7Z59e|APNu*#R3nd@WRoPbK4?jlH83eF$Ib)cN!=
zk2dQWH?(1T1N&~>=+xMV+q-4EUF|;4`s~&H*ww5_**&h-J7q&FBYg!SmpK^M@%Jg{
zHgs}hz@%nFGeV3vB)N3B;p}B}QRq{#Ck%T%k;}0Qv(MwO*QB*sf3DMdQ3ziP_I9G&
zYv{`zf<ZH|`RW;R5PM)5-FpNwpNntyM(|ZM68k`V{a4*MaC=RCUdH^$7DgXZQSz+g
zJAMZi{zGM!8)-*y^PhB3z9ad_1rBmSA#y>WqX9gxK`uD5xBwa~-;v?)fe~?NX{rag
zImkQ&-hk)h`|d(xf#;ax=tOn+Fgy}4uVFuKJC4n|o_@$Dq7NVNB=A+Amf<TNV{Nhb
z*?9upiuei3UnQokcn{y3q8GtGMNhD?cm8(uzA7s}c=3;Q?u>Z9t&gtPx!$}EjbZ57
z-d)HF*uJ-4LHx2S#!YFRZKm`lsB;x{Dn7z7{L@#jGp|SBy)o9RjU|E)gv#lxn(}vn
zw~AY)SY^Osn;)wzQbw#Y{Fz;7k@Efs9QZZ!j*Yuh{{P4}izEwA0v<_tA#_zSzwP;<
z2=(Z0`6^@;?fcsQdHCUigYxg*WTv)m4ixvEQ-=S`tt%@F;O)(6_EPZOtRH2@N@jVG
z_qQag1PWd&aZGO^|EuxMEQLlV3*2~(DMsHeZbe3Gb?A@a6J&q0KIC-B?j*Se*rbY`
zg4QQSgk}maUF=5h2QMbJhtt-_d>%!%)V_^BXXwSfud;u2CGtl#bKwHFm#B+)M0G~;
z4Ei%RN-H;tMlWUWUb3Rjea_A^skOvDaFI!#MDE<dnVZeQNxfP#KLXw_vxZfl>P;{g
z>=D?y{Ce0QNU5C4t1iDha&w*RqQ9sCw&0D{s=<e*g*f}*QOX@|_n_@rMAh{s>q7Bs
zezlhTlzWjFjUi;M%{nuSz2)R^%3+rgK3Lq#?7_b|mNm}VJk3kXM7tNhO?L`l_ZTD#
zSJQU?>bdwTU4=Y6k2P~OYi2%c27jfX=da|$_etRE)0#rot>CY3-ymHu_rHDV2>PsW
zCP#a_I0tg?3;pdi@*xZqW8-#u=i!f}{hY2qajRtb2;<f~6cc+U2AqWtE&OV}#FP9r
zro4g?_9;7ODg!>Hv=8dTOR&p^Sqt~TO4hALRyYX!1K`n385qhI^iqKH@#N7yoZn8A
zvxO%(W3RS!&Pwpk@VS9``VH`&C3sV}i%xpO@q714UpNl!(7BqhWc_6oJ9iLAXK8SJ
zuM3QPxMF9p@GCJBd$mt$<1OJ!;J0r$7ofHwULC@bp=}E<eg&SeUTwTUt>+Z&8shh8
z9lsC0`fc44oZ4DWd&tebZ@tSrHO<<oZx;;oVN&nKqytlXMmI^niR;tb#hBEN<m)*1
zcRvVxv<}|E4x@DZG%Btm?I8S9Ygf+!z8m_I$M_9A>?PJ?0@>W5UoGeY%)O0s6*`)p
zSp(g%uxI?ssYi3Zhq?v#7muYYK115saLT~z?6>nhzj_O|ET3xUui;@A#%_0*U;7Qb
z>|q^9XY~E59on_uGCtMpV{DU6R=D^|XMcNsq1$;O`kibZ?BkRxj+g9CvI+UNQ|bSO
z;xoa*j$w>hvPEOav~4!|y-DcCO?;Cb=Ot5MV{hD-Ph4YQ5aHYXz-kLHXkiX1H^#RA
zYE9~&ufL$L0X%g+eLl1?Z$S;Xpgu)N1Eve%o1Gp%_G~wje{~+{8^9QNH$8`KYHKFG
zwqT6>vjDo-bYOE{yoUJN*O*}=YIuBHtEGNxYl5yH#CK14r~Rvg`0usQ#~$$Vz~(ve
z3)qvbhK7PW9S5*W+49gHoi$RK1F}gWL*7R}?}yhAx3F`W@WGkTDp~x;%;$~3Sm#l;
z(pT{jwU>lPM=9S$JBOGfwWYS%kKLiODv99I{d>RX`_FiHw)-|G<fn4kiMQgzBDok|
zzexSF_{Tgf#g?0ZZsFgcy_YeYIjbt&s>TEtgg;f*>ciZJ@ml&0%oeWIoDkn?smW_H
z%+-C2L$R^^{9VCe9Wm;U(C;YUiVS1$=EugT_2%ctR=$;7r1{Yt6f!r_L2)PY?0KyN
z_+U!+8gKFtpYjIgW*`P3uo8^5A9diWta-uaA$zTpnU{m)^XJ9p2c{Ym@_4yqtNWOj
zDD(2Kz;!L-QM>+}Xg-q6Wi&GvYUd#HsrtjjqEbwkuP_giVTB)B3$ASPg~sx<=dfQ^
z^Dg^@3%rpn&=c{IWKLMyi+ZSMz0P?f@1Fm+@=MC=tpOhAllLap%>~H2E$p93{y%?B
z!QvaS=P`f1G3KwVc<w%foF9Crgf#pYNeklBiOhWKjiKs&vUPZVmw{gG<NN!W;b7lP
z^@aS~u>pCs0G#c9!ift$-A`1<#hcY<c#ZcRS+08uYl?N-lR2v>p8{lrPW*;1ahdBL
z<O}U-y$Vb&1tu@-^zqZPsSRU{&pzhH-(=nIW{l6$hgTWnbByuevYRXK<Gv8V?f~ry
zem(HG+2DtKJi^0H_t~Gz1N5yMJW`)I^OhnG-s!#qSKq(m0Dg1wx3Kx>Ul_P^9$tPP
z+k8Kd8%H~rh;Ir;^5a0au|6IV`UoCD?_PdR<@_?rqqMb*)rafvcJ#OZ4P!1tchH{2
zTN!*PWi3V+S2J}A-=AYVA$0Zz{vUvbcC$_|P&?32(aXTf@Xj!B*^Eq}b@mkcj`(ve
zcJ*MDo4N)6wYm852#&z7?iR{+6RYNC;Fw*u8d~n}g*7neYSY!6j|vRXDefBSd<%I(
zu<06A6MqYtkN8=(Uk3^TaTi}9pC<N{1$8$`r_KBIns|uzl((VKx#R%we~WeXZ@}Z*
zz~PF_+>8IEYjx+zDEwf!gJJP#Ygar99z`;;(LvVNu_a@yJ@a@Y_nk2Bsiq=iuW|8{
z=m?@=U3VJ`p9s3qENocPNlJ>%A7TsfJ37z&A@Pw6?~`8-`1y@|xAQLS9npOD9&R$*
zqv+%>m2%$`GVf5ip$oiC5CcKuicV&|QML=aq>pE;S&x1|qq+ZL?{VnX1Y+cL{lbY4
zXTBaqHi)p78b$8mP7d};-Od*{pITz3G(Cjws<!Kqol2R*z_RepXgT!fYqfD=(^sO)
z?v(H14d|yEi7U~J{)A1ht~oHV=|N)R=^X2>K+ytt+?bM#ElT|@&YWSLWcie*TeZ*+
z!KH}Ud|Qx%Mf1BPZ!xZo$ja*Dql_iHpO4|w<M)-brgjhY=R3>}e{Q<(9xNw^iErD#
z`m@N%pF>Vwh@89#Ie9U2Rfn%p=3WNYQ4i;&?YUQE(x`9?9pN|N#vg<II$)=D7T|7_
zGU$Qu$C+c0kxcI{c$DV<MfMX)rkg)(0rv%KWV`8-G2cVh)1GPz@D8m+#zcS9cgbo$
zVI8ULKd7vk(EB!P<7{JeHV`Z5`~Qczw~vpqI`jX}J(G|?d;oa}1ZrjyS|zlrErBqi
zW+p*JX|+PCRNQ7l+7g@Hx=2+XTr&Zy)^t}QDk^R>fwr31ZfzCI)NV<jRa>@OgqCjC
zcAZH;(ezuZJY{%re(%qjxx*v`zWdwP?~mUf^O~9aK9ASAp3ilzb8^F-l$XyYN}cvB
zTm7}~rET>nx~AHEA~PP!)i_hl>&4tF=9?HgmQNp=54rNnil>5mcPqC~`s~))3$Rzn
zE4G61y8YZgq@M>n2KRF>?<4rWi!V0s*U@%Qsh7Oah449YvZc=H_%6C@9NDyywLY>G
zeHH#<#CNcfM&j##`5XNedT*eo;npGPom_S&G`WTNdfn${>74SH!O!OWoioh`j}H>>
zRSTXAx7T8?Xnu?NzXN*tCU7rc9p0sm_?6*vL3%xqg$0ebu?Eef;J*!xvmNpTh8%KV
zuqW7z9Z|Zdacc-%EnVbO?(H#Zw=oy{nR@TA&iAiu-1;UyVD_kLu1=-Ouc59(`}wqA
zO+7z#&{4*y?iUw*bnBbYN(cSzxNga8=?A^^BbmFI{UG+Wleeu4c033VEp|rsUHmlX
zW`Id{8&hxl;?@TEo7#5UdzQYl$JM}k-*nK%e6Lf?x0}yRI5C#B;%wm-!TT}R!yp5M
zhwZb|cv!%D(dtK`iROo@JH!*J7TvkkG~78``L*W24<66tnTgCWHBT{)t_+V6UN2re
zt6zB4M4Q(l_r+rj_3;HRdkq>5Ggg&z%j82l$^~%upHt=cQ5M+k?ge+0*L)2*&ughC
z{o$y`qq`1(JF*A+#(gLK@avob-UeJnJLt2??;w}H!+xXudYWeucrqEBb8*Dt9p^ib
z-_>6MZgmEkLk90Gyexjf%Y5)g@NS*(PS1kysKxLl&R`S@x9jjPmH{up_1})A;pY0H
z4kVZtXKQ=#t7=c~@B`@1H{dI%cUHbjS=D(7xJibv2Fb^WAq0<G;+62FkDWdqc>X&1
zt+?Bbn1TsqdyxxT*F;9=iSS%&HQYSJD>VK{8D;)v_%dyOgFcBL+Lq&Yq~r|cN+?Ia
zDz}0;MEIY2mHS(MPtG6K@y;)sa`@Le^IDb7D`I~O2d{xA={d401@BFvAK~MRrO;zj
zvMc7Jr%C^1eCTpz@#&KN;6AW%*8q9clBg7)aCQb4mG%p7YJnwku+#b;;IrsueGSd*
z)1oi%ybQX#k?)w!M#vxdU=w@K;Fj>qv;;fEzkB}C)QkiN=7C@Nz;n)ROJ+CWAG?@b
zR<3{SwN>~)(Er$z*x5v#c`Hqg@(|UbgMpVfR-y0u&BzwxjBJt5S?@gf$8PZzNmsP~
zv4_^^3{`%Mmp+~(_jT<_XW6xvnwkJ(dHLhMild%M1u2iStl>^mGkMy@6>)DcrZX&W
zB757Bfp4;(uCn4`anI*hbqAQ|bk2XWR)*N?UhJ^a2H(~M@avr+dF3rg0NZBpsdsw%
zUBm;;V^3*cu5_8L9~0d1eHH-om~hC`P&zvdEP5UY#^SP3SZCnWn2%3Hc?iAOBEk>(
zg=euwPp)xVwN86I>Gk1zXM(Xf*z>~W1bsUVC0m7i6B<hUeR;tobLvBi)I>ft;2RsD
zy|z!`8v{pfy2)(8cX1j{<BvT3*$u(uuMZ+;ptWY`axQogxsdw?N>48<J>@9=_Pyl4
zkbHLWIsVVy{y5|Iv8KhychTsp_~a8FctOL={w*cww&Yb7&(XUs-o?>dCHKOtg)1+A
z!t-pooc|Al<>ilfAO0}4MQ!|m-{QBc*hkm@=hUVLm|rKqj?;HB_fqNkcX%$}miP<&
ztM9<i#5aj4V6G#Xt7K#Zo$^lIxsvuZ4#3mp9m+{0x_y$E_Xsfu$FDWzE6Cq1TooL~
zH(b`Qz8<2l@n-yURpdCj1^=nqt@TdqbC`EOvVHuDIksFxV|C~MsZ;Y`#q&Y)Zx}rP
zJ9w}8H`DGK@Ua*8hMBK_#gcx-bctRXzMP)-QpyTGpHR*U^jp!wgS<Oa{xYrYB$Liv
zR%mt5bbi-n==&J$JdQ81JEMbIxWJnPlgE*TlA%w*<DZ1b&zIi}+2QIc+vv9gf9~hz
zou;b{z*&8BHy?UWnm;C}e;Kl8X3Z%bMY47+F?s4s_c7J~JXQWsQII=xBD>$AyaR1Z
zH$iS9m-8FHfvyl41+6tS%=V$1l%QV(naf<_Zq}fmR4r=Q>RIH6=JU$bX1>);@*6w4
zQ#Er}Hf+5Jy`v2o8bR((ML+o%^$mSoMH{8Y6qN8WlzDSr>FjOXBh&_+&tskOaowo)
znoV9oAM#FfGvJzFRcwszqfNff-Z}n=b?F>$h2(3)PXzoTlu6M3ceCX0_$>J=SdJt%
z@9^dQ74|Me<}DdG6mQk1YySwAvg<y_+Q|Rv$^^-P|L#BK_kQ+D&LnWx3;PuKu1#O*
z6{e>40d(B_(5eJ*Ujlw>uc?auxX)(x+U=o0lkqfG5nHilyA$vugB|#DJL{j_$1k$_
zc#SsQcQ~=ipwndym%~dL%gb5i^107XdQb56)Ij+-c1t_>jtsMTN9sO_|L?_<8xD9!
zm1*r|w;9JNC;@(6Vqdw>cVQ5ntJoCvb#b=51D*4L^mfOwvC}^3y^gW5#4T46PxO!E
z4Z<&1<>b!?7sk{%<6Er1?A-j8FzXVbOcA_HdlXuCA2<jt7MA!p|H%2{TCb<i<X^R_
zoAb8PN42M053KOPwXD4hf7|FFHV@}%@WHRSi+i6~i#poTxuqcez1xUxpMPD!f#v7}
zte<3s3#;B4=niX<#n{-wqjwvFu|8-LS(SW@aUED5jQt89*-ZHYu8|%vzVkr6iS<=T
z7pUCZR{?KAh90O#F0Bp5TCU_d_@KR>ee)S3b62k9cd2uLam44Oaj|bsF!?TZ4$z-s
zqR|bYt-{8O(Rt%}(i5;%Y8hLvr}aE!2)G-I*U~>SNb)DXlyCT6p5)6?{>w*58^q5n
zI1WF)jBnX`;+^hX1K<I+NZ+%__Z0Yk+a;WRrY}En{>~+)LciUzml5}`x*yNfnfD3G
zG6wiy<2%#Y^JWYo>NQU{6}M29*qkxxIZSG-(>WN%g8jeX7-N~mH%88U<ma-H@D8^R
z;pRBoeo^0p7pKScPBCpW4%>FIsnEThH_?8jmwPACrRBSVSL|j#GFC_bip_*~&H``n
z0hz`I_(YJkmp+m}-_UrQUp_OgJDmT1`-PJm66h6cw7-V@Dn@^9&ir1)Z}vWj$C-%E
zJZZpwOr_547|%QDm#T9;zvH)`&M&k!!JVh<9^uSQw5L4QUiJnCbWzsN)kU>OD*rS0
z24PziHvW=ayRumlncR~T@q^5UZx#d3=x9?T_)1n5P-i1FO64(6LPK-C<DXl#_@e&9
z_=VQ6=F;1Wy%W+g)2!{5qvRzA*B`)kN&zQ7@RdB%?|jO~2l<)v(9fL4w`o^?=1K5i
z!^hH->;H$(YJSoQ-iDSX-+K961pTzTJ{HzbWgg)DM#@XB{Z_PsudxTZ6t7kv5z2^P
ztDX0GFT1Z7Ux~H-8tSqA?w&2%Pq7NDd*6f8h;uhNJ0tKO>5)<FGueSY@JBL3u#_+7
zbBhE0g6V_g+!cO*4H#_T{nwRanz>hE|6dF)`Ud6SO5ek)d27BCGWYOKwDV5imm|0f
zmI3DaGIP})vGVe1u1_)t$?(USt9a5}&IzUE(?sss)SM^VyjmadZr1mSA4dPQHX3$C
zwaygf=zJZyVbC|ctTVWszK6oKSJ0=cc_$qBH@=6$O8vX=nhCsgwqNs*PVhO}cWucC
zI_@m^OM>@`Nfmu=_|eG?LCV;D*&+Tdd}KBDU1kr>ZEL7JNq|>(Jb!Y-8Q-G^eC2HK
z;U^!SWgI%kdJFZ>G|mKe$^zbNPA?UrzYmdj31SaJ%+WvhYG9JiOLeBPHlri_hOrE7
zL$c|2!#r1xh~dhIkX64NrhGGaxnr2;-Ryz>8_&-)u5Rq0EyL7vc>aU4)N|OkeP)<?
zq4$Xi$*O1Z0bXY147e@5$igh6t4d~__6+;ypZ*G890KnsbGgICv5ZV}=OtO_{vKMd
zoqSaHWR2;x_xNBM&i0;MRDXB2_wS@?7M<-qd8uwa+k0|R)tv49Tgaxfz2A?1%=@A9
zO6*J3T*-5-LHpU@)0?WfIIDe?Z=<}sPOc3Q<k^{Mr5PVlA#I%TeH?%L56FcHE~tHX
zt&XtQT1LCvufqOC`W)}k`Vs6;IGwhC_Rlltddm(k&h1dXB*k8pqRVN&Nqh~TRM{fv
zaN?_TlUHJ6;e%PJyGCr>alL7UW;S$jpG!Bgxf0#INp=@|23^=9Gx)!c`Ulw``UScy
zdaJuXq<F2N`$N06KeQJ9Z}*3Mnf)Q!%IpvIXZD8%>Pq)OzYB!XHR6orrT0>&V1(?F
z&&-V#Z$}?KxtbigoGCuM_$vJVS91?@`fTxxoc;=pw@Wetnc%LC<b>p%=D^(!9bxPi
z`wst_3lm!gI_nz6eG8vvABpnX6R!ehieGcfDZfUD@woatKEgqK`u|qGow<%+jo)UC
zG}ot@tJ-wv&uvrtE_QsDXXaTs_l+N(WX*C|{{r@}JjB<XYxk*SE4%n~wEnz~pI;|G
z4EoH?#;%hO{Utie1op89)m6fok55l+A)c{cxgjLm!Fl2m(QnbC{giEbA3WIZv}&)p
zYZdt5;m${JD9%2C#);h)>muK#%C}Sg;KFm*cR9af8TIr``AO<V1!E`qzmjhZ-SR(t
zvA@E?kGtCO=a<z0(?{{K8e-*?+f*@P-e90b=LEZ|(6N@DGtFG8^QWQNenY&PAs<6w
zTTzHT=j9XD7h%8Ic#VVCn3)S{YdLp_DkpxJxLA$R%NVt1({-J2hj<ra35xOWc$hbK
zAbv7WOR>qZXKulh7iW+=LvTv)DW&}KV@*0=*t*2m&3P<O-`X$W&p_|<a~_NR6C3|s
zN9<^nGg<Iu;@!q~uA%Oj57IF3lh5T78F<JS{1bjhIWJ<aH?yMnK*%l762+eGUZZ>N
z$9Gmy{)g1<_Hg$x|CjLp`})tF#kOt!ci8ti_P>YN(C_fS>k)FSl!ap4eIx!wEFWt`
zedfI2T>5nJqUUD8;S>$|Kd-zDpJoqzJo}qBbg2Bv)$^gJ&p=PtvwxP;dh)N*%hCVW
zr2Cvpnazx&l72Op=vAh|eb>XYo@~B1w7;7~v-53#YG3`SFZI()KN?3f&s<zOzI=4Y
zpO9@k$bGln11_fLw0pK}wTq-%jR$8Ybbf*Vsnm#$R4T8d>ml?o@=)42BR3Uu^?7h3
z0M5zxE8IGU4my$jQfxQtj~<6kf2aa~By0O+^tj_|u>-MV<Jc<?T=&u0+BfJTUhxpR
zVi;W)oERf}_WoPuY!#k8%^s`hLHDd(%N~@Tt$FXBJqB1$9zCU{ZU#A4*yqV@SknJB
zcn;^R8tdQ}DNj*j!(z&_r|NhM2kog6`&!`AM=y1H3mqHl;Dc6VpQ@eS!cfQ9OIT}k
zg{b9q!Q_5?7~*03rF+81TwP-6oM0fgp}c>;_j+QRu-DMBwi)_oO`@_vyt%gj{qmQ~
z2APqzK^$U`ynNiT$cAU{A!cJP7|VWaP{|p^S|ots+t`C&&$_SUZQ?n^b2X;7#}cc8
ztse)*@w<ut&w}@%3V6#9m^Y)tG<k~}U%L*Uplk*2WIM*UGGnyoATsw!xZ`v063HH;
z#-=f958*AwdmQ>m059!Fzm+vUt@~SyQR6#Q$#~eiQ65d#mQV~j?Ir~y!6zblLfe9Y
z<}H7OTh`utKv|8|EvLRkAKC+P$7^vK9#RUPZ!aV6ku&UF`1jyPojI9&V1D)m+wdD1
za0Xd!&z^+g*V%2f)5Zm~(M20^&Kl^9m)dd5aMo+9`g$_ckN8?GXT1&}hn9#(QZ_sP
zm|}ZbpBnhZK>jheEw$sPzaz*j^%uqmGLim7TjH;3t8m4Ntrh4AD~Zbvcnb@Tdd3#W
z$0b~K+i@19&!2sbF^Q%`7x2*<-51`?xb#fzPlUd7clkWzVH~<orSdzV>jkOQNZk`<
z_mT`T%a-O9ZvlO{^w0iJ`ZxPe@lumKpD~~tSR9{5taBH7jA7rf>pU|HIvx`*hDV~y
zq~om8a!&Lx@;u6FU3g!(sBUX2b3Rma=DyGJN$?Zm%f=nLCe0(_>rE^UzCCf>oY}`W
z2V+HxR&9+x!`g|LVACB!Zx=6#Z{`k1=J^!7MEwf}?_g^whaoYRoyXTR|9SV!j&DfU
zbp!+Wm)dy^KcncvpP>tl)1`@o@VZp@G@E1sKH!B;T)5kqsZ5Nn?0ricjC*mm4}pC&
z(X9Gs&0>eHfgU!P*e}6fVwJF+Czq*hi`&q*>}q#h^A!6s%(yh3i5Yqw7#I6jgT|HN
zUjsA?oaPKSE?|0yebxSFOpG&%c1-SFBkq{A53KchQe&fU@q7Bk<{sZkpSz@c+=YB}
ze_L9ld{DX={ep|KzjnF#)8fEr=(C}9KdHK``_OV)&(oek3;1CN^&xpIS$ur?XFE9G
zXYY1Ueth`KF8MRW-!(t+_ci#qH0Ew-aV-7%i@_(+Cg;rC_@Agx%gm$1ZdUMrY$<yf
z=)Tgo4&HFVG>}4mHTz#UAi0$XJsrH^ylD@>6Skv+z0Ljta++9S@{Xa4LFWr{`BZau
zr`lsGf}HVr%bUags9E5fKXrC7I$GCtp;$COxN1M~e!|ILLepKFz(MG&iT9=;xT>Fb
z>@|#8`<0K)_Cs$~?3Yv$KNbSNzfPW^C)kU#>w&KENA#My3s23hL37)jo}1)`;XnG{
zuC)F)F0KC&FCsng9$=Ua(;N9O-D@m)tX@F(dWrw)Cjkt%59#N6^<(h{{RsSji}(K}
zT%tTMS@0771vBxW_zzR%FKjZc+EZI$B9BOSY3Ka2bWgKlRsT5I3Y0U<^~q7DB}DFq
zP2`U-{Y`t^GdHinj~wni2(lO9_c|?6Y!ICfstlX=Z^NhSKT)-(RJ;kB?u#d?_skug
z(^9;m`+FZw{=)TF<}_a}8PSYfXvz<M5XLuG|JQ$fq$<bT^5`h<p!}VYtAksEQ_YG>
z?>MXXYYw*z=rBc%^YG;e|8B9c8QXcuO?D5mEKc6iI{4*L&UlC6p%uiiFrP8uQHse-
z^VBHge3V#vwXJx2l~>sf?Dq{<-ek(C&Eej+i{GI;pT`)m5z2g=3AZ$v6-Q34GUc+_
z<;Onjy?Jo_csDW(|DMe+;b+fEemysThr@ZWG0bs*hN;`kcwPI;$C(J^$S&n7)Os4|
z&i$XQqw4w4F-<<pm?H3Zx1E7D8G8@?XY1$k=}r9J$pPG!jVF9?$1D6^Y4w;it`FEg
zL*}8eH{;*4W3;wpIxfU*CqAUSpYhc`ck&cp9Qq#oaQW%yD5r7tLKkOhFM+>pepY)b
z@6v1FSZd2|>dMa%ho)=3k8kFb@9Pxr9Wn+7-`=VDr2UC!>c1U5a(Y((L+9I$|E@Ia
zefIdCbH|2^`vhbA{aNN&hd<AS%lWkTXUd+-w>ww0i=je%?pAxw_W1H#;z_aFr<e=U
zvGNXn8xOV@cM>(`bSOqrdU7wiXeGK@J^aDq4RW9#9pEN#Q+F;FqI+QD*t>e;@I%F*
z$yYAkF5O~1`g+rR-|RMYiyi2Y^54s^Bm8ReOl-WEGdE#uki?L<&LUzu$MezsqdIHa
zOq<$wSk4`abs7Cx_K3!*eTMA*9>Wjs_PIuTRd=H&&M%*hy*q0?dhlb_=(LQ-%ig*>
zrzCT_nRy&#PO{H#;rA_^uXE@0GPD_mmyCtyya3N>TI}n0=M;tioSM@ld%i+*a=e3M
zRo%N*rr3Q2?n7l>?X;_Ttw-*-^9nLA_4TsHB;EdAI`34Uc23Co@Z$1*og>iMiKFDO
zNH)$zc3(v<i`Sm*^49L%SE2oxBJ9+$Wr-PS*`1gXOg;}Dq~CEz8n#^aJLQGc`n{lU
z<osKFukJj#VHKZZ^lSE(Z*X&br18d!{hrgIy%FJ5YHj}O+y&d2KxSDQfw$}{9MQ3V
zt+(~9;=GQ1)n4-EGOqKTv`?@!r#01d9`^GX&bLOc;2b3P>JqD4ZLHs9KYOI9Mn1Rm
zX*!?w`QE@MHS+tZn<H1GnkIClnhNp1nPkTyZ1JW^{4e4&nKq~J`3Rp2JK~Mt<YM%3
zZ*?Gk(TG4iFBD6ajtHa*oFw^$x$DYFc1^Q-eERP6`Brz|r8AC-p|d#7{iE80ad9So
zbEeGY*CgW$iIJP`B>OLMk{dkiw}Inz;Je*#<M(UqIaym9+>+e#n?k$aX7`-t>wHKd
z`)!2<mafnZ2kkw9Bg(~j_eadkjo^L){m|WedK?^C4{o^ijE8s$@Td45(;>XtbcDO#
z!6ot?$+oa(i6m#{a3^kJGwnR5{oy5<SWBlM(Z*d~>>+JsKRgT`L^A#PkTdB0$pm9<
z$|Fun^v^i8hopDmdV?=`e3|>)kn>*Su)OtL^L!m`F~8QjC7hW@-+BwVnt1q{jxgi*
zq0dN;H*sEWA8o9mEc@u}rSnbPeI786=UvTxEKUddA9sLxTT@=6H4mgp4RL<KWUA5|
z2vLuF$y?&3BU-V{?0rsM+^H3>thRn#^%LxMxO-A@P80k5oTH6T4q=ZKHhu#=G2X%$
zi8;k@Q4t144lxMP4^!)mZ?w%N(2Y!%KEe7e>%!NfF$<3rTdEkFdE8G;{2DR$q2zYp
z*6R($Lbdq3R@C>)-xmUxySRT$a#pcxf?ND3I?ePDcoRBZM}Kb^z5VTBp1m>5vpvH+
z+d0g$)x$hnKFqVl!#vwI%(EAUdG>>0o`HA5Ez2X^J*H=ddA50&XW-~*bvF+4Z2d6L
zSmV>`vSve{SsIsKbbe^CUWCjzTp9xJCzKtzD3pZXagHOD#d}{#^Imj@UTC97{57-x
zI|g3bvk?3M_Z{dX$ol^S&-7oo@b~-{ohTN;kiYw9ucD85ePunDVEZ!{(J6lDMj!iN
zE}g|0UpKhw>WzN(INFf=;bHJMgnsPeuR%w*_zSK^`iRZW!ox2x4)zds4cv{A8LRO6
zaMpPBUwik&R<LJI&ceRbi#_0c5S&lP)j2Iea9(X+OF5T6TG*o38s>bac}PF_)3fYD
z!I#BD+;Za8E-zQS%-hJN`2Rm~^Z5bW{S<DVdUgsoPdz(@o2Q<g!p&39hOD^@*ATic
z^z?l8J~wcC-ty@obrR^E<G~ZlpR4m*zp@Z}vU)`8Y~bngqi0z&+2$@T2~TxLj&N1}
zjch%@)g4pb3tlI868B%)eZl8t7ik|*{pg&N&e!%-dUPgYci>&}DXli-@++|Zk){tk
zG3>W=9+w=^NxHAp-G)5B;1u@^^lbJL^IY8Or5(KwGnS^FQGuS`d~#G&2NFB-TT^eK
zAH3|uQk(MwsS5CA$H;)>)XGK75#M<iKEwDMX__Czi|-!h+3M4ufxqc<?3Go6ctiVp
z$PoOvz`*hZS1)sOiy7|pIaE5b_1IER@))qzzNgKXv=bU(e93xGaz$p0@dD%){JJ<|
z-cJx8bQoR}zxv_bk)vBaINs<<w*M^n$cfuM$@qOcK7c3m`TpM2aK`J!F5u+j-Zt#c
z=j*4Um-KpDJvr-kJEJ2upJCTQGxJ0f`vwQ`K{FPe;riByt}BX7*A<bq=*6qe_m8bL
z9S8R~9mxCljaj$AIq@*LLYs?@WZLHr<(<XBlD;L#OzqD^?<1cRe5;oj$Q<tZNUe8b
znooqaiL5a*lj}pVC)XP89iCJspV%Sf<)hwlEhs$W9Q-=t&6J&M&|AdwnqNutybyZ5
zautf-;X9KZj?ZsgC$hIS!abCaA4tbGk(a5j7dw5mx3FacpSJnQ%Rgj3nupHo3wKuV
z?W5nwUq%Gto96|57n_RXjaA7Lw^v!+BUxXS6kZ%#T9sTyS^d}VyZQZvrr`Glr-OS!
z9pLPO3(-;08OXmJxuTwNXx??fnJvfi<mbd!H5y($8JuJO{s?0Q2GCHMrAys=nz@(n
zYxtPd&!J4e?s#sY&v+{J$TnitzkyA+6_~3J$I?Su*BTCY-TcvtEszg7eE+FD(*4kb
zn@ie`BO`CmluLS0nQx)*Jq7)xW%U3L3UA_hCYSV}^55n8reVr=^8CBQJpWgocMkLX
zM?C*mWA~P_+aH=sdeA%Nk}et93hgAbb4q8I2`?GZs`CZmo)N99OZd%xNO(zJt77uP
zJ$bG7^yIh7Zy#Pl-f8kkH(|ftSu(0Mem>8(k8J&)=Amw*o^){Kp>C>jlH1S~PlI7r
z4(dT;RL*O1P$$~vt}H$=szdk|A$NA&_MDZKQ_LL+bkD@Xk*&Q;t71vwa>Y{<%SX2A
zTts4Fm0}{71@nW)nko0DhjRk>LwmJ%jc;7I)4L<r=0g(in+m=<;H~hq>l}EF-g`&1
zR)OoMy@x0Dyi6ZEg2{mK?5s@Xz2CsTwCMT>K2LIsEE|bEuQvQ<!cNhHhd!>N57ADP
zKBCy~dcVJSB<GZLFL7??esuUF@W8;$?Cav^vwV+piS6*c{iWbD`#A0M!n5K3GkeG-
zy9r%deuhf)@Md^W`@H(umE<l8qtjGzFGAPfoAMAo;$G+uesN>vt;XK5V9QNpA0OS~
z2=S`z<ige-uJ}&<FOYkb*VxkIJ~jUYbGGooMlbPB*ePC;^j5%+Je}1in)XCKfUmGd
z_4rag#kkgfaCM*uJ*CP_XsO3Hy|!mWV8<HM+KVizh9|83FT=Sb?p-m;=WY5feghxH
zK)=M<1FsVLP@iExcO${Gx_zd?&mEhNa@FJ4j=XAWviX+FKdzHseme0X(gQMdUM#yk
z^RfJo`&?9B^AHb=ygMTBGwNwBnv>?y1P*!4f!*6Z)yE8D?%mK<l!N^0tp<;OVv_eU
zhc@Q*AiQ@U^SY})wS~F7Z`;Smp1|+or~Ui(a)y|4L1Gk|>1Q~87QR>T9by*&j}_#_
zKkfPdP)5h$ncUkGLoeN}^AuaK+wQ!=%sj+%`IJiV?F;85Qx0!*V&}@=&TqZ*@NT62
zpDBxfJ~!+CcIM?|{jZ|@N&NANOxwt^1<9=cOZa~{>;ESHzn}HLiuV6c*8lCie~15?
z!=a6#SU-Be_<Z)9*wd6h0ol;_Y+UDC@Fke>_z}i6mhxZaANPzeFr0IR?i(NEe88%^
zLdoC_Gh3`akTW;A#@ZtjI}c;OguyS>nE-tBJ&t;9p7D)w_{3e*+l2p4&po{Nox`5)
zEi?OT=?g!C^=q`z$Gqq9>B-kM;MW*8;McG?$ew7C87EO+Fy8vT(*9rhCSIHaJ#%-K
z^a>YW-59oXzd<{$L*63z3wf^Ya*{>dTdQ{=d>Q!AV?jHvlKx7@#s1pBxE}o7|9)KK
zX0b<qmT@_(g~pIQri1+VF(%nmVLK*2X9YPI##+8%*K(}Qo%)}d-+tEockXY>?B@4>
zUX%@ow5)e^5tqK}*fS8nhM(>(L{|`viLR2+uM2O%FoD0v$NJhm$LS_1{vv)WoPYCk
z>HUoGj5MzWSNiJyn;cZ|jj#t@9Di4M1mF0y!X*XvJZT(Xm-yr)?rW7zTFD-;^BZ6c
zuM2Yrm3T?ytr3C5%b{3&2Xgfy`do`1KGw6+^5&P(6(644AsEHc%?<HGsbVMQ%a3j>
zA+KDBymCF>yw;v;=m-ChU$`<Be%avf?<wW^e0)y&UCr+~CRxjG%{@_?6FA<-xd-z8
z`6@a4ax41s7Vv<$o;W_weduM#fzJ3v!~!yx=AQ(UUuJG!VxCJpqgqofjB&CP`xWQe
zEdOtT<|`OGej&wRR9p^>h{cIs4(;(xKg&Yf;Jx@MbuRqZ`=R>^$-7|k;wiz7MCsf>
z2wwMHo~uv6Krj&uB0mKNJj;f`p!r`zJIq`2*WBl6zVn00YxF&b^KkB*f$7gOa}I4K
zmR+!i$Hptr6X3V*+~Z?I+~uCr`T}L+l}6{v-uEF>wMU!+HmR363wwzZD?W$kf17!Z
z?wH!i^GfWej4!o#G`S_})9=Y){(iI^-vN5f<HXgAKfAPR@eN;v?$zkR@2LNGp~r{$
zA4b<1wk&#%TUI$j!jx~|S@d30e%mWnZ;)L;e)!0OX`eK$qrgGQerK|oHELza);h`~
z^IPk|t4hvPb@<3J^XGf^kT0doe_P#bKl1k(Vk8V@+m%cEDSQT$^)Cu<O(|xfJW}-b
zrENvZBQyXv=;zD8tUD{uLBqeK&l7fyIvu`?DSHH18_pN14T~GVS9DmDf&FIMm(I2(
zW9MA6gEJ}UYL=F;ak`?Z8X{V*5M4O%1~2E{QV&;NpL%B7S9`o){+47bIsqwnn~VHm
z&zM>td)eGa*8{E9o5)k5AK)~QR}1;w*Yz*t1m+CQ8qSj3^l)m+>dYAk$&UxWL+sTc
zzAZVDj^SWE?YZx923f+V$nx!?POax^<br(Bj}aGfJiYeo(&zotXCcHFC9Cv(7yNo0
z{Q9f#CSnNIrO!kZb#BV?i798$P#$+N<8;TM^P|LVuA6x9D*2q(?Y*hm^0m6F@kJru
z-F7!qPUGsq#~`0Y#L71Ei-I>f;EVB*Ys}-=b0gA8{op|DZ1aAIJ!@p+y873ulAAov
z{O;@h>9cFp$FI9A@-ut)p>5;Ql5`vKe<Q!R{1LQKeEI2Z$S>ixLmM}SX{!gmJz*31
zdg)7N>bn@P3s3Ex{7>My3V2Qcp66u2a|i7Vg{KRXUSb8(@_vGaht8Lt=^gpH3nv80
z=Yn1^nz1%R+m+zuwadv-2F*B}!TvHd{~hDByut^#?p6-F`zU8bPc}}>H2!iKc_zr~
z@@>vA>FlTIu2i&zY_W59eZA<k$c<T+cOk!g=(gxHccj40=s%=&+oMBl<Mq0Oo@ch5
zEL(ag{(OUSYFB0DuY7>GV>?EkNmjaZn}$Dh=-e)%j61&_<R02YK8PynKR`X!yLAoo
z%^^ok8@$E~?ueI0jn0hYCyppbtLbB2X`Xy!L?FH=n8sV;gM-kE_A+JP4E)YJ^;<Eb
z$r-_9{AJG8VYke=VNQz=o$pp~=IKiAWQR9<fcffD^ZIh=>mcog!NY;J<X48jMA&y}
zA}?h(cFsZCkJDzDvii3DBgZ1Nn?!D@pX~P4=l`k?+B!9koYuU3$Q;((_IH-G4%V5P
zyW7aaAsjiaTx5ZAWm~!je%h-~A)8ak<!bQNeV$NV$+~yw6P?A)Ir-XGO-<~U(6ma<
z#Q8WY{zZ6(k2tp|IvV=d?&d{-e)8W8=#A(>jn9%}p=%IdoM8FlK6IjVeA|SA#A@Q(
zkaN0sHv7Eyz8i=ehnA0=Yi53X5O2(}yfeO9xuhm_uDlxg#-3dio1}LkG7kFL#F)CF
zsb==&be9KqV|g6iKYF#9nWFDhY83mJh0|=_i{BuhZ$LiR^10oKO$8?^Z-7@-m>P0P
z)Kpeu3v<pi|0DdK!(J8gy0X$NtK%%P;t%4_8GNGb36i5I@hZG}G5$LAl1Kgw{GQ`I
zx?X&-^f*J_ywEgcPh;dl?(h??F;>Cv$wejo**IUv`S>_~g>UrI25a#+Yav+Z_vgu9
z`Uw9M{4OD{8|Qj=78B$7+LyS`0$!Xt=vk?l>cq=wT}kJDE76yNe`jiP!RH)gVk!Oh
zqBl+*_w9|!iLsyZb#whK-!?fd`_PrhMQ3%VHRwqD=3`Il8=a|*@2Ng=oY6;)d3JZD
zH>a<I_zk~!0rZ)mOg(W*z7?hY@)s%(FS%e8^JeAMcKEAgiPl#47**B-PxcKPrUKK2
zoX=!mxAJEE5ZJ-WnWj5mk1{sJ!+afh%9p}fU){%>Brem^cF)?J)}!dh<fG|Sd_{aZ
z@aK1GtaoKZaH1Wp#}Bn0)GY_5y3Zk`cUmvi*$m$`&iuqqbW-HDb0hF)jEQZWh3v`b
zvIS^2#9Oe>8<Rgu{Cpbt5x#Ih7qhZka!B|b2N(4_e4&$ke6cgFi8|p-ebs%Cys&ri
ztS`^{NEZBgv1ouin&@dC<@*49?d?6m<U7^D*k68p^R#z=LrgO`tg}3|&ZNd`*_&E(
z+sfG<?(nI+)Nls=+{QKVO2r;k;lqK?E+{ECfgbNja`~LsxJ2)mlisEEJ7Q60o50=B
z#(nU=H4OosOD4y<a%4<u<jw&LgQ$2N^#;is`iNxFq~@u8qppsW^w$A6T!-vi^7(Lo
zi80BKPBbg`;S(x0BN{g|7WFMTqVXwC!gDQm_wsBBXN`JRd~s_D^X%vO<5_SM3<bMq
z$+f066a37P)XcrYrE9>YDLl`@jb8Alr<k=6PJjamaAh-R8@NxWaR0_@J9_yqn?|;a
z-lxE+x0zdt^0IB7;JmA~W7gA#bkOP0F?#+{{75dpTng`$A3=1Te~YOJ4mt<yvHY%Q
z598!KtYbV`{LV9o-}USfKjX|Ad|?y%U_x+b-)CQ=83g-%jltx%J&XnZw+Wsn-uIU*
zT_oW>mz?f}oywmnT1$-mOo#4e&4$Z<Y*)c#-wy09=G}{qwWMcctKgH`2!EX8#HNW}
zHZpJIWPA?u-bo%B&&|ZnIW3W&@eKa+59}L=etwNy34^yoal)kogAHM6;T4m-3tFhw
zcz~Jg-UF8*-xXtQCJj0_p}MoYrohK1TP{df6`Y>Th7n`P#=Cv!5iwx%MP$QEz(;4u
zT^=OZ*mK09dt`xy5#_~`6z5gB6#nyvRLy>PSq?JfW6)xdd}>e7#!_^aXW)U=<jt&x
zZr)-~>^`39?2*}>Qa(jwpttWebcG;vV9x;$+1IL@WNJoz8@qofo=yhVS$N83@P@Am
zw}zH099-@_%6&!Upg&^JlX3V2=Nnq%^PQNzGn@5&kG(<Y1vzAhISIuQ$h_`^&e{}C
zi@$1Ow+z?M*unk$j($F?a=<D60{y@nd)8)TUSpcRey4t3;5~4SH-a<U(z=D@k@$4>
zT+)0R-v;X-UOgUM>IJ95<mN9l&dzuN{4hV*k>b2o6hC;^P=3SvV)%;6;YUaoo^Q5j
zpQ2l54Jey{=CW}j0e$(P3GG7&w=6#LTe(&5Iv@Rjc08=NVq)@;qrINoo%JU|dv;7B
z54_1e%^ozYWAlpe3gUEUYRw}P?U}OHcItGmDCz%B4%w-|4e3F*;Y-(<IOSmxUx{oN
zuZNDdGk)g$t+&&3bP!#;N;&~;bfFV$Glc{CZya2cetaM6_80i77rgZIt#~={p6-ml
zPQM%QOAO10Hm3Q|K6DbnU=sXDc>%KNt7l_cChmg|dh&+Xy+mK4tyo6yau_rF3$c*Z
z1AYC^Fs>hyzwV2IBmB$Sg!oH!KDC*7hv7@Tjp)(&f<s|TINu~&fsOWTwV$g!S?$OA
zIPc}&FRt-Qerw$ltd;Lp(;<9W0=_6$jPT?e$Shljee#|mbk~kf@$t<kH?YQvd*A&G
z{YgKOE;^Nd+#EPA-xNRSrp%ezQ*7;n(e$4GR`AVF8)@4;?Q5LPf7#jcTh8LQY;A)r
zAsxO8pM>lz-CwG`QQ20mPxA8qGxyod`S?cqJkyw((ZwD*+k0Xf`Zk@VKJm5h@!lP~
zJxhR3<Xh9kKfJB?@Xnn}e22HS=<_^Bc4%Ij=R|ZR&F{6dz)i8WzjE8b4pA(v<c!Wf
zTUmo_x{CKY^A-fI*5=9Lfz}@+J_$d0ROPDEzDb?Sh~s~hUonmkQoQDydXJ6p<2d7-
zp0S^FMgTlQk9t3f4poW2PG{)s`ep8!^?@VW$FXqE+&}NG&oyUTAI{9T(WmC5JG5M$
ziyxp<`ut-W2Y3}B9#G#FmcYQy5qcY#FTA|#Xv)t0r@+!Jca-0!jq}*><NU~3#u?)5
z{2$s*ZrFB~b@FqL{_mK}nQ+a|`T1=B+~>0A{TyonkJ)~<_BlI0?`-XJc0QQhCOqdV
z;P-vn6nrhdw9pSWto+Nu3l~oEHQ#fVzC(XX)lAE@ZQB8d2Gwuk3@U9jo}~>x`-~H5
zLq0dRUw2$;YYES_*Q8jT*>9${oIrM-I7@r&|Cy@EISV}6f6scbW-e}NY;J$?^}r#c
zpSoj_p8Ba_#`cM`jG_6rshWlKai%qI-jk|%qdmg|GPEoB`Ong3;`LO`e^BR4Z6<bc
zml*K+#aYU9|0Y%Q3C88l&7JpQVCurd)jO2;^h|v<|2kDOnRdQKy)%`m`}b7M1!sXl
z-Of}^CGWpMKM(SGfY1GWzRpK}m$iJ>@NvhO!|xmToT<OWYpI(1hk@yD8DsXnT;jz#
zPat?JMqKd_GxCY+;SB6$$d_9<7k!YNbBgW3u4)a!lOv;yjYn92y?0vgDCJ8d-*<!G
zp3~Zd-jZM+otUE5cd9<zptwsn?%ln^%WYTjXe+SY1N0LhZd>s<Hg;QmV2dbbI*#2k
zq2bPc`O$qm7v6VqR;U|4Z<u_AoVg@c*aX7-CpLNIBMl$gdkVMkU;0Bc`a?5q%)n=}
zO?RpwuNCvPGXqQIUoN44#Zd~j4*f{x1knc~)Qe=vVCe{!PiCEw(Rd=jU}!nXFU{{3
z*7Q`JbPTEL$OcV$m8T<pKjOj3+}X)<cRl6*?m6FB-7#KjS|10Nl3mjGi22|?Qd2%P
z$GNdILLR>c{6?2H7lp_>O-w~B#2OsnOlH3BD&+sZx1ArMn=F{dXX=dJ4@$bsjkQzB
zV~TI}8GObLddmot$DM>D()SzXJ1u_BorR3^Tn{$&l1~S>R%Pluh|XDwU80=2PQ%iz
zm5(~h>X3KnrDJZp+7l>ta_t>f&Y~}E)wzT>(P6tNTW?07_g1avzVZT<A-=E1Lz&tq
z9DAQv?f0BzLE4$em}(z%mI2S2+NYgm&HVS@w`7mnue;hLZ>vi8k<U6RPVGGT)!28@
zd;hq$r|POW^GUz8FVZf3)b3(@wB^5b(H`;CgQLhFfPQ4xB;)6HVcv7T;%rXkKj>zz
zx^Ggre-Jy0^|JR(`hR=Z9_5hofA8=1=)9j`ec(`PrpBW?Y;1c|=c0pFl5;<1&+_OT
zhD%%P2ky3g)y5&G&t|~yz(egjh#r-9Tlq(XL-?F`TOPIhYR;MEb|kzbI)sbNFFE#n
z_Sf;VjBmKR-;7}YA3aI^h^}A2R$WhSb)6@9A&Z7pH=BkxgTKXD@h3y+xgA;-Js%Ez
zXzz<WnxQQRKZ!%%<<OS&Bx3aY+R<O#m`eAoOZpy-^jtNTdzhCSW2e|gm)6}eM4`J$
z4XZ89Yd)4PyyWA64n*_5v4d&;v88F6$LD?;%{O_cSelnkqIL}99ZIXi(Wiwsckqdh
zZ~K<?J?=)%z}MmtZHex|?ExKKaMd|yx32md`ai<lq9+H}c_*t*HV-1U(w?hQ9Ip!-
zeV<(Y(g03row2pZ^Wy0^Ok9v~X9Kx7gj2$m^$+1&d^jJR8CzBjZcDGJS{DpN$SLw=
zd{&!B;J@PCrpI|kUXeOIV_x>zQ!3|ey;aZ718$z2)=l3E2K4S`o}G}NXj3o{$Nr0!
zAS2p1AL5zPSp6}4FW|D#S$p&c`x{zQ-bMSH^J&NN(-aYp60c65N9zYJaoU>#9dkEU
zteEp?YKyplnmD#-8$KPygtd`_@U>E68u0Ceyi*4IcEGJkW=g>XK5jmE(NTi7FP~&)
zHp9#99RqWM)=pP{{T`Ea`#gfYar<2&KP5J+nLlIpL3|03JkI}LMvUzCoK}sio*aq)
zlR0XBBjHiA!8;%O;F3vx=%#qFZ|mj!x9}oX$A=GBbJTv2og+R+&GA&s&J^qOvuBZ*
zr{-w*6mdRY@le9O3i{A|e@YIX4a`-3bJw<2-?QNtZvV638`)#<Xujyei8jW_*rMMJ
z2A=Tbwoay=?8qk1<i_g4|NESkJ4Lw;<bTO$-cuNpp$+!1#!P13ZFXHJ+jTX}xhb=*
z%Hxqg9>2GIc0=+Nh-XY7FTi*{ZtRiHMHbTbWa1%*&Q<+QVXkhU<C&}5uU%JfRp7BI
zPius=eTlsj`BLhHXN+CH8#qHW-2Rea53krI9_{859&7jA({g>|b?N+r6WCjNIjuMB
z%HDT>>N;b68@7#IS10W`FxE|cLT9%ACHUcnC^)G#lHa45_N2Gy?9>!!w`gK;<;2;+
zz-06@@!PQ`eg8%j{CT_zzXv`l#knlM7r$sex{+sW%OAfoqhC4hi|~_A#1B6FS;SwZ
z&%;#9XFG}g`6*=y;XGqgP88|;`|P`-&Nbw|mz}G3OZA-h_`|8Ad=Kg8PxD-`Yyy_L
z$0|H%uWsxB9-o5cSa6xMr1*1nc3!yL%zP9pus+KlYs<TP)0%$<4v$xv<RtdoyXY66
z%dWJ~h5SgsA^Y59g8PpS4JtD>lbbl5`*9=pAIN$6^roPVD}Uk<WIp=x6YQ-AcwX`}
zx*Q)LA9O~0_D1|y`?;>pXvb*v!}Pg`@sv$@m5*yw$H}$g)91ja({?=kW0!on2NxD_
z$BcOQxyXHQ+41G)cf7m_S;m?t@FPh-+t%ZWMVAooRbZg$$(?V!$bFluoR#<}Z<k-e
ziEq0gx*b0p``*!?pf{)9d}P~0&Ptz&f3R)MLzhRtOq_Oc^Mdem@aiSxiyF)SO?;zc
zZtLOxybstH!Cx6g1}L`ra>n-b&Z=beQ{L9{8S59USTMUq@z>=uHs4{#%{n9-&+ABX
zCi_^gaxIXj3O*~o+gypR%K9+=Sfa#~OJ|kbazAI&TYHuVW8252_14M*?7g6a>3$`}
zhq?9r#O2qalj?mt`}_68=t{S&H~kfD=#Js@lqVPe4}7tLc^u^o<gJWJxEf(hVIT3j
z_~^Xo&mQ#WCiLgvrI8{Z`m>MsLG<UIwdC3<Gv)X5|IL4Qmif4kq#GT$6219Z_Skx;
zZ-BeWHw9)z@j{<5)0Z&T5aaS^$~}nQskl$+$~o{t?t$A`#W=T*C0<Q=BiIAcyg2*Y
zNv>XG?y2$q{)LnsFY_piC<d^!DiFNP%nGwVMJ(7d4>18b6K`HsHL?1#cS?Yf_&xkJ
z&bSogDjLF{8S9=%UDhJ3_nGI*t4!-&bhu*g*goVvcWz(b@ndrJC*VDG9|H$IB|F2h
zc|E+`uX=*tU!2Ik$4AY~dT6ecZ$GwRrSaI@@5)Of-|1A|<;*kXo4y)KHsg!DFTZ`G
zVwGiMah^EVME<K@>EfIxX){irZx;EAsH5i|)-i!@?ygq?9sLsO)p>#|L+G$ovQvm(
ziO44ijwtU&&kRp1HtCHvFBEup*&o?^1zwtOJNB#aPdF07h7ew<eiic4ZNtX4R}XGu
z8f~a7@d+``gO>S?DdVn(a<!@PX<Y6YyEwx`e=$Ee=EiXgmcThCKU@#=fNs`@Z+Lfi
zwQPy&uqB+bgA0{I?bF!BpFu~vf%`ghtX<Kp@i9-Wp&cVQsQKGDB7=kEehN)9Gu{5v
z_qtE+{3`cLY2L!``~I3577y-)f4TL9Z^D1^k$FE%ZP59^`cY=x*Xh4Let9c+z5C7A
zoMjF&(P5vzgd8sIE5ciA4fj6ci)1{l#l#!ppQ#BmzGC9s;3GA~A7`%}+K8NIX8NFw
z=#}1p3meTzIQh5qB^Yhx`^~7ctebqD_vb)k-{d#?MFf0^a30ugH%NPGH%R*t<f?7=
zFCLDiaZZzUT5>Q|E*gSI690w&8-87>xI5^zl6n#Lblb<8a>3^3Bh40f4Yi*COdC22
z)-}qMkDzWo|AohIA#bN5TlcR=Cu85kfIk)R;s|nC?<HF!!tZ;c8{?jwmbbn#wLh0<
zYSXvh>h=TpAiq%pSqQ#2Ui=y0$v&<J{RsLQQ)S4<O^ni7+VZbkQ<T29(G<Yr(>R5m
zv2VVKdGFc0@vZ6P=*jRho1dxJxHOKBoBIUk6Q@#4d<EltYdU8)s)Mn)<XNkePZ;0M
z{yC@c^sUl#-MHpjO4&KkEpXR=@r*))%t4<1oUz|`1bhPTEnflm#baDPqO#-%D-2^p
zv|s6E&)X!goeJNQkNvNC6{_Q|zt$dJT^PQgYo(9<AJ%bqxSH5s)+OhS)Qeg_-5aX+
z#hh!1lm92mI_vE18sM|9ntqw{ntL{F+z(7#IUf<9W8RuGI!bImaM(eer{74;)O@_m
zi+!T<C_G8+h{x5NO&i6N@UgJR<uq3P5uCnM`>o!-IQZhBj-GqL?>B~y37no!`%7du
zwK=Ul+Q){+6)^9vd^0QF77F;1dAj5L_HB1KD<ykh)w~6xzj!Q+Oa?~2xAQ7~%)0^F
zGgnyJ8%lHS$Q2`+V^2Xe2kaIgKLRd|M4(gANEkgZj31(uHs8cAlfdUFdW!ygYJi^5
z5!3XfHV>xK^mN1%P@Ca}p1?Tj{`}XeEyCqjhR&UGM>2B}|J8c`x-`As(ZA-+l8g%T
z4czQHn!gfT$nOOBAbB@{ztmfC#fKa0b9m5|HitWW8@h}CA<e(C@kV&|OUB~X7p^?3
zu?eO}(&Kn8GmfrgUd0mnJPKaP_9^^x%F?{$-{5a6^`rw7;}^m=s5|Im#qhdjbbi4q
zi0$OU)rUP|dCxdg6MZKGt510?tfJg(s4+<g3Q^B*rpyn)146WIfB)QYXNJe-AH^TA
zYcIZpC&@F;9@wsl<SZEn{!ecBTK^m56%CI~@6i}!TNs=TBC9jMV_n=EZ;)~5!b#a0
zVPtqw!}9)PlnLVRNGw6uLT`}YQoa(sUtVHfZz?fAlr8DD)x&e~dj}sz5Sme(Y!o@)
z<{<_VpUtMPARo=RmQu#2INK`b<KCwlhi0%f=f_8xn0U8x4BPd=XNufOs!#d)it)L1
z!z=4Dvc&I8<Fkjo*=l6SCS*tx{LY^@7@u8uyLcR>4c~uf;C-1la651={(0KZXx9sU
z%)wWv^#VSp)+<8?LDm0brvAI0K&@~ko3GHOViPR>T$birlQZ}e`4xN%+}S;}4()u#
zt@Cag=g!O2iNBVv^9$Y!ALOqW?-LyS!7Ez#!M9QY^iTMdA+Ad6RRs<Uk4M*hxS<F7
z@R{fW{3@O7HOBP*ZrTP8<r+))SE(2Ob?A7&L*)R_97KnSLhiCCNz<a~OOK~LGajq2
zXZ(@m&xpweP`kk&43<@QvA;er?l9w~-Pbj4jqhjBxA2THYwSG>KinW1vvZ7Gg8pCF
zxr(y%HA{DEx@($XKTl))1^Gq3OKuT#p#`tRIXgkyxzdS|gRc-9R(mP3x+hiBE%~+H
zOCAyQC;0rAX!EW0)g7we18<LzCpAhtRrioTwM#Y<IygBO)_@C=oBKIafH65PiXGGo
z-*|xbMr7_wiCg?LjXvmpJ2@iudq<RQgU<t}n#eig`S=0AE7`94osS(cY`g>Gk}qH%
zGFh=#igie&<?HkE4JgMbyy|(`9adH&Z}->Yw}kHYA*Up-HJ9E}@`*9N{k6or<f2n&
zWc5DELtoEJr<AO-^(ZUZ7Dra&??|H8#5Ct0qc6hGpx4~_(C+i1UHQTt;vb~zn*7`r
z;a^yNgMZ?sD(^H@Y!&?&%0}Q@lEXj$R_et^!GX{yvrFsg4;HrO0{^bx<;~iMZ@dM3
z>!!T&4&D7PDfEiMPRZxQSni}|9LVJ7Z4SbPhCYzXW4Qx*A$PY>Mm`Sl_XvE;otx%0
z04Mq%`c6Fiv}e$Wt?%xs(<d3+(6cM|b|c@d{tch^F^_?^(Zv&17f;`<(~Qn}$rI@q
zi?<n@TTVKq`&;^ZcAW%!+a;MgzoVQ9n%74WpEeg*dcViHA7F^C81ur<M|>OE=`k;U
zX;EFjA9&ScLnUqx{;1yMaz~ugcR+R`_(t5<jVbU?dn&)k$!#&ngdM;KU3*3I3ZL$k
z<n9q;bM{?B`(57Jz4~bX4!+wNUtavFlU~!B0#_eI_9ref$vFL4_<)D|*Lynb{ckPa
zj<+vL<B`tq9Khz6z3Hw)v6Ft6xJdR2=SN$rJNCm*KE^x_u<rA~x3@0}#x%x#+>w3_
zxOb*8x_f-@ZNTrbHV?l?A$iDi@kdX#`KRCyHZQ}``XX$fDZ~_-WDoeFvv7-=tj{2s
z__63JvU@AA4E9|Y2s@@C_}+B^pS}-X7l?C~EqMI8K$P!A*iHu*PQ;#?)G-#iznn7)
zQ?&k>etLeKZqv;R-#pR54!apUY)aYD`di2evzT$*O3tc0YlFFMrJC|Pf`#OvDm9!X
zFc*Y52N4{b{vSM_@9C_y`@A6iKbTh?@WYQ1GfWJbH_FygE-U^AD>CnHHptn`yBWOW
z{}bSf!PY=-m4BPPA+s5sB%=eX|IK=~BkLJ`Z_=~gtY`Gm{Dt)Wbnf~a{89<{tmsT<
zIV0rec(2c#Jb&xllX2)0-)ro>N^>$w+-V#c{?iQXf}g`?SdULfc!GZizDnFhFvi~O
z0`_X3*Iw;7=5ApOkBWnL#aaHHw`i*eyP7yE@N|4x7c`PPE(k9i(HUhd_-@N0pJ87L
z9<MQKe2GRo7scT&JA9E7>p}nTxjQ$|16)$xaUHchx6hXIY$^P*)QP?KoH?1==2^+z
znRYIz)h2eZG!$zZVLs`bXKEH*Z(j6JpWN(?J=k6o;6K{SD`6g?8%??Vq~7Wfx$DQa
z_{-VXXvz(Ae`Ps2w=DiGXo9Y8!(ZXFK`WeXPpr-jc!FluA=YU>b39n@B@dcx>G5SH
z@SZ61)SW~*6V*?y^^t0>!5i_xybxO1MQmsBr-=joEHZ|*voZa^HNG}CAphZ4!{~C7
zoz<oy4*f;1<r_MUUS}$X_P2yNoT<MqV5|NNelpqS4s%Z|XG}Ys*5mBKG|c&M!*RPe
zFt+nX`c&KQJhq>uT{A!3ZUi5X^y1KU%wtFQO5J@_?BXjh)LiBaX?GLnXU{a=;JhsO
z&~EcJ>2?R&1nz3{V}j4>s{)aLnU!LVwC)M!6fe!S^ZE+&iZ8z^5cHyBHC+`@nK(IU
zhr+JsEOTVP#=@?+hWX*M!PjKtU!mm})pxXtHDN4X#?s@xaat`n(vIHg>I@ANoSJHE
ze4YDNJUqI={3gouV87O{ixe$KSE!f10Pd526<-hM3o^ERPjxT`zVIK}Q%!z>PiE~|
z!J9=VC#s1Pco_X-<f(Xw1oKy{PT0eIH|Jo-c3lzgWuIzI<Z}HE<4bN@(|q~YF9SY{
zL$UB>hWz!plnb7eKIkycL<>BaKAX0CPuM+&XK0T(OD3pa@e9t$jZqFYhZrm4>)Nfj
zVDXex(*+$m!<1?o+ff{udr~x=dd8d#V~;fJJv5O@o!3zb-(gK-@#hS3=GonG;(cv9
zO__FnU``IyUz@J4@@gagK&H;aCK&`isvCTjy~p!&1HtL|`DojT2oFau`&@68)z1{G
z9Na;fv6PtuuRZDw#0zr+oF_i{yP2HXX&TwF5WX|x#SAaX++%2UmHDUZ9zO6!dz_Z<
zv411JcyPXvPL(v+Rf3cD-c>(>{5k|oBEUfYe!=NZ;%15&r{J^A!`X`S%t^i1{4`JE
zSd!Xvv~$s#u&-)!`Ask<tAKwkG^Vu)jxv8mNBb*jZa7y_-s&G6c`A%g_eT{UZn(+o
zX|?0@<_3<^R+nry{98S9La{aQ1KPK~*(%e%(Lw){e&V28II>&y8@rW$tlb)CFHm{+
zLK*x{v7a+<gmdN`iOhGrN#{t+zUTcAuoO&gh7Z1&rT=M9T`&_24+Gbsa1`7Yu4a9H
zoL-+j%mv!BaY(B70`W)MTaeDO3D{PHzjd6Y4RKeUL3hI6G&6)8imoxOub{`e`td==
zqj+T5TVd>A*UlBZ1iL$-Bkn32a}@Z;^Kt`sf60_%!#}^5*fi|+1$O<}!`2<el6~?&
z#c5M(Gznd=w1BnBF`o>g*FoQ9!A0B!>;*^A_c+ts?+4bEm&0G=KfSphe!{(tS@JW&
zo=JB363W+>r^`qE{T05^_*{`AAwPERXkY?w@$tOphLHMQb}jw-7z0-JpmuD(Ure{-
zTS$4GJGq29@F#bT_4~EnGuS<o;XBwp;$36mVX}L&^F{Pb*4^=@^8~!8BxGjZBc4ev
zCHW<eu7_4Q$8OhHc_&#v@jB6qbSBpDg2)5jX>IEbx>ZOzQbB@vT;<fe9Gs63Pmr5m
z9oru?<qz_Ezc;rmKXi`lzuo7c_ubE4&a31^xti}+_<oalc5vrsitlMbQv+_ZUy<7v
z=b2eq*YC+8ZY`C1u?*TJ=6&}_a$>n_P<31V?5TWeO-^HoIHR6IQw}e0J%--zY-a6%
zQO9WX0&E1;m2Oane(1d!p3eFv9>@(iJFxFIa2ATP(^R&0NZF<7vb`Hk(u*#TXrT^m
zHBo*f>*u*0e4<_SyjjlO=pVG}jxW)M&irt0AcTGI+FXh+mwz+@T!oK!@UHtOshP9+
zKJp5_(6z{}SFquK03ME>yC;sE{v_|>;N`vta$9?m8`5K{&|~h|OKb;vOZ??jId>B1
zJmHp?`6OC|Yw!>BAK-c8OlV>YeythEF_%6x#&P(k#$n4wCQug~(E8i>8Dv&eziGqu
zQCZtNZ?H}H9+|-pE?k68|M`ydu;WhPe?Eau@7gQEotKYW--Wf2-8`%R$@<v&v@o9?
z>G>>SKJzm3i6()A^r<cKWiaoDDTkcYyw_0fO1IpL>3MIby&m)n#k&N(IabHGkG&S@
zPCa*Dg>4Xu-Ol)wS8)g5>~)p7YcITT*Z*R2j_RGB$v2cezrEOy?);=z{GY!?Mg#NB
zlrywn?CMq638Uy^J>wMpMeluKqu>y_og6UyhPSQL9ffi5=`iQ44p%y{Fz>HnjYV7H
z5nlMek9mX3H=0HD{RX~LoZ%~_|DBrE!x<j!-?r1o?&8#jKU0@H0ZHQ{A2YHplIP`|
z?vy@*k3?q`XTW1#z(2YC*Zub1QpKyuX3)5-%%d-N{T0LZn3tGNVlgxZ@c|pNrnpYZ
zOFl$B!B{)|7(FHy9TL|$<qO1k(VrW8)=dA+v}1J@Y*fXbiB=z@T_5YQpSgU!6h8#~
zWJ@mgm7h2>?y*Jg_H}*S)LiU?NBSbW!|t<E_<}iy`~%27ev5xbf!Aq#I6uulyVz@X
z`EWRbpBR17*DQWNsdJ<+wZZwc8KZF+Uw4t;bnQ0rm3xY@{o$Wag?g(332ax#7u{{2
z`I?^!E*9J(<i7O;%K6qkBMIb@f$u06n)t|T`16C*jZ(MGLw{;_blaf1l26T-rs?w#
z{91BJ^a-u56Rl#utqaKi42=@I@M7eG^cwjTb4%Qp)+_TnW^POSo=*^yF@ZKB_)tXO
zg$;N09~EzBtwO?A{6G%tDB4yT_Lg6NGt2+1_T2cnh<-CBm;U8@K7`ze&>r-?&fP~H
zH{FyE(8UAbJN%@lP;!BD#=`Y)&P`UKugJ$GJm-9d>nj>)BM#pj+HL|~8;7^nfw$se
z@U3<7&Cg_h_<q(MMaEAg-gqLgG2lQroQ6S?7#I294LE0E$9N;m-?8&2HZbFV*ZYCF
zW&H1P%l{_Ye6ki6^uGldZ39N_#9a*?qt18R`PQCgzLYtw9=hGoX9>x8WGM0S|Fij`
ztAKMio@u_nxK-=@|8l<cpFQ8`uTwAn6TD^LMY21&*Ua8IJH^_|2jOwZv~}qi9%7N;
zDa!d3VU3sZPV&5iJIt#T_iRcUL;QxHwT`7dOE1zRit$hVqbWax+&F~XxB^~!ALVP!
z)W+^@>GFA$_hs<}bom;y&ui)5;f#vtKRg`$=cMUBl12Yf^6QE23*ec>oQZ$!22&HR
zHRYaXn-@4Ae|W(X6TPE5we1d*<C$#kS-D4hV%zRF?{{++rJR0%=OF!$wLhKjWcnS%
zcgP1MzGLo6_rD){fA_-l81_R`2j(*;pBXa)no*3(@{+D1^$TyZ<5l^IcN6ab??ooZ
zq<g8J;eNz0xq%$BDb1hYSxug~?>nC8?z)oZr(B+uxFPr>oi}V2AKJHSk9qXVkGMSU
zRp2X__{j@U$(X*x+Ub7+*)oU!(vhY2Ud3}WI=cI1%A5S??wIP0y((Z%u!nK}Re`SK
zlGWqNhOUK;Ct=S(I&}70gyp}dAI+_&)Fi)4Up=MpE!IVIn+YtQ#aFrwc)r8=Eb)`<
z@&_~J-&q>`k%eJx@JCl0)57`fAMHcuBo|`YyDt!DanFd2itB_{#+cEbjm2hE-!yVr
zh^O2~ta~Nx$NwHVa!#nA){L}gcWX_4-#fRlCfqBcm|p4b8c+0is{Cuq)3W(da?zMY
zU+Z^}&6OG1{OBG16%IOoB|5+V4s=QCMcLE%9CbNwwk+58^`b2wYb(;32FV9_fX($)
zi%gL`5x*VE7lQ9q1-d?hFAH5lc5npw9Dz?++m(H*gA2`ot=fdGn!0(wR$Yfq5<7}r
z6{mgKs`0g+R_xJT{@~@UsakV#boqzml~{<ba4N1+zw_?}9)n_9(|0<nE!VCXpSjn0
z9K2S1M!LaK#;<XG{!%mZ$60bha>wcpS@xrCE2C4SZ9Hs@Z<?*utW)ns6YHg|;vAE#
z;~Z=W@GBW@0wv&N33IY@h+fgU+VZ%<&P}`*zCQdBok!$+cL{rT{BOzp_jsZU{FHgX
zeb4W9-mm3<(tE3&ziU@%{@gu3?EKF*_an#(J9pxKUK%v_3F*1tj=uMH#&*uwRf?O;
zwyV1C_fC8B5$q~tpS7!cDNnnz(stFZQP@>ww{q@$VK9kpwd-B)C~I5gffKT=a&nv-
ztNGlAU8TH}ZC`{3f7H}8@qI0^-fzQyYn{A4L!N?>E0^~Ba`7EuTYdCg`QF)==6uj5
zKE>?)wxgqk@q<Dq)}Hc>B!(W_-RH+waUtUzg%5XQTCY5~EUj1GY0nF!<3g3MqzfHm
zC_euIn|%^}?IDI+x}|V_T*J!rxuJ}H89~2n&ghruJ%i2--M5&1F8m9D%o&1i#?ehb
z(l58MM_!jXZxUa8df)iQP8&~xIcN;dDO<_vU$emLap+HnGWx^&x15rv);6L}w*EA9
zp38rnnz;`hLpgSO@Xhz2mpj^L_FdE(!T;>#qdi=!6Fo<{g4{s-Qgo-Y=n|>Lj*VT4
z=a?5$(2{6KXR6^r$x`fMCx`aU#jQ=~uL<@AoU7qsQS*9H%6Zh<iH!ND_)Qb|<<V1@
zCGg!R=(h{sd2o!4kwd=Zw*G1+bET|w8&`(|KNfhpYPVK>?cPW1nDySpbMi--(dKp0
zc)Z}MK>R#Y5zLz(SP1Wmo@*+wDHhy>&n3z?G=01H*qiwN_g)YwiZ_LS6o-f5cUzYb
zk6ZiD<;8!Ud(sDv#Ory^w|JG>Mm`X;0j>Yu#Ok152VS6Yg{GJpJ=24+!)tR|4+EF@
zQu0AenK+|o24}3MjGobh?>;moe@0>(yn``uUr1S{34V}ZU%-!Eo{8OE0Ns{{)>Z}T
zu;mkZS5eL^c=JNwwAK?y{JyQ|^9Qm2AMgZ1w3m3s#BSaL9P`YwUlJc_^;2}xa^kML
z;Ln<i%NI4C<kF&PA@p3`0q5F)f@A70rOUp7e<*eTN0;43j#2q<;p59fZ&wBOi{DNR
zt?Kc@!^s(o91a-f>tnv5zN&!m%f~!J+{w{<iGGis5yF33yY^R?`<QS1WfKcFp;K~R
zPjFpYY|?nJ^mICi7X*_ZVppG!oCo#`LZymf1}DLXdxa0IYuEdEvw{b!v`;qc=A%^s
z=_@z$EJ2xgDf@eU-oSFo9`qKL$$mbiAC61s+yGZ2%y}ic!|CtRdDVW%JMpWI|H5}|
zbwOWah~Iwr(0}qy`eZTsWIH)J^lT5$3~-o)uPH!YFXf!c{x4e`ev+KRd*%Il1v}oD
zr*=o*h<@-Ozn#z0-c<ax%*CKbEidUVT7E&~sVMcrJuCOfCUkYBdnhkC?Ap(g!xLzC
zug-h*>MYo}PVu%Q(0Uv^JczF}I3vT~vd(<T=3WmEdx2Pj^;ze=3^rF39t%$Imd|u8
zcHYo4Ud?NW2jX)NvRk}Md{DHiIAGvmebM8Qnep?HpJq~@gWYnxx4L6IZHBl{G>8v-
zEWT*Pbg)m*%6U>~VSM8+(Y4f$S-}}j;ygU~oIN@timzkDr_y~XCjV~B;|uMXf1L@7
z!p~oTms=PQISUr?!p9k(`~;C9XTdIjpGJYf>I@%mhmW^s_;{1I(4Ga0(O)|>8Egs0
ztiSx4)XWEup?Bi%j)qb*PbSm4ndfU87Ho2&cR0UYw?MMXj~;J`(`4Nmjjy>#HvPGF
z-5=T=o*4Z=@c`24hT8i%JfETGq5=FVL*JhuKZoerg@Jg|3Ft;^?!qC6&&ic%vZ1Y>
zb{2WI>+@+ixbiF;4k_eWGxBV@=3D{Z?MiLw6b+yg;G<e_HF^SZH0*1RDBH(JdTzvc
z3-U5?G(qBMiZ3Q!hg@aTh_l`2%`0m&UVA=kAG`}ZTW|tiaMYV)>&87!fj3h(vN~PY
zkk_Q6NO{S<Whrt#Ca{&`zfZ^8HfQ!5+VFWiJB>K6LAj4|<_rG&(C=Nn2_?M1@R@`!
zK)Sr(w+~%kdeF~_CH^V$#DSjVTX4@Ep1__z0{=V&&+lQ(as2&W%A{l83g;iWm$;e&
z)6(pnVB=`SQ{&7jgnYOPI5`cow#KO!0#*k4i0{#!KRKy^l@GtTJKv~a#h#|&415Q%
zr3vO+2`*{A>eq!;691sB>m33s>iWn5^bWB|$|GOtJq4>;;N!wdzw^<_hK*Osg4G1Z
zCcphS3#+t#?fUJjh_4<VR)w8Mfz^==tcc&ug4Lw?vye^0!KzNOGy^9WMqdEWlE7-x
z&Q$rM;P;LE=e&9H7HC9#BK!};0%z7r>(~Ts^a9@oXtvg%W8N1jGUu2vn?-B*5$u}b
z3lbcM>Jh$w&$N}LN8Cz(T1)9IyP?M=w5{_>H=|c9;oUZH%lBZaX3M?K<Ont@<1Uw<
zk?$KT<lBelT)WKYW$)&K;L1bjl-iGxz7vM8NIpNj=tJ)Ji7be7CcSNhS@{@zXgXsS
zjfuWQTcWY$^j*go9^zYPlMVh0olow%kk~iI*Mo0bINJ^^|Gp@-p@=qefKS>#G7jH~
z&SRy0C(3oBwm#1H8lLw;3vOArjC>*AacxK1a^qbT7h-7F&5I)+x6U@n7ahr>AFYY*
zm)S_ZKzE&7|GWI!^6eMW&QW}7R)(Rw9D>ghZ(1(fc09K27Hos)puGX^OJ#2$E<YLd
z$x$#fpI}t+IMJN?ciWN<B%R`&-(r)YXU%(7w%Pd3tNGq|JhkO-pg+}<&L*3!X5GmR
zk}q~{oV6Mn4^)Q_;Cugka)WK3F{^GAdC}!HTkJiq8TlGVXHuJ=S)RVb-tFU0wC&cl
zXTh*N<;NF{G*;zEbKk2@AOH33wzuHnlN<hnXM)`i`F3F{ILF<x%x@m$+;(*4{5bw$
z+YawSS??N{|C#3MkRxXqb9MW$>q~vx7h}GJc08=zz@1XeUGoSsmM;1{Q@f$Rq-ta{
z+(O$L6Y@71J~o(+e{;6_f9C#A>YlNE?$WB}eR{lOJKZsAZ1THmd|GR*&mV%R4Xe)5
zSK>gb=F-eK<%1avi&J+eJ;6J7E`oK}p~3Un#Cvx=G%l6Vx@$b{+6#|{(#{~9g5M2&
zuQ^;t+wS_heF%?+d*;GoDDDX+3o~;N4G9-@j`K_~_T!6u_n%H~aQpbfS;}_*cdF)1
z$`0yV^vnF!??L#eU^kikG@6TkAIm(mbP3&#gf1^|$H$y=`M>c`sV!IXOmn%F?*Se}
zyBFR3;f6oahTiE+#!$G~btEQKWB4PyQu~EI#$xB2i4S%66uBVnjBrSh59e9trZH=*
zZ)e7B7*BC#kKTmM>%XLp?7OuzE*G{sd!OXYO=|7P*JVQ|xNj2qwA=q2@dfb0N^Inu
z(V<oCoN4m!JoVqN|9z+aw<GiY1)+iRe*MRvKT!W%{?8A^4p%!#Jv(xZlRP@#NviGs
z8~DwAGRGG?$rH6s(qE#ooOeg&94F?eoA^Qhbo6L_ueSM;%kG<K$}PTOcNlz0TZp+9
z-Ut>?U4~um87H0F?o)-4XHD1?w_wW$k&h1h>52~*%)`*XT_5J|N4D#k5Ba?6UI&#g
zvLK8vN^&k-!kJTeyD139iduq!2<OIvUUSDS-VH?)$F@DC{o@UrIP*uD#020H400|A
z|0g`kk4#s)R{nE`md`{N#3z_oiHU-T_$V@WY59tX=PG496AUprX3Kwp8^^$nFtq6~
zw(y6k=S_4Hu>st#fKJNTCG&68{JJ=MthsDq-iiqsIwu$ZE!}7C-xH1;t|tHbH6hl5
zJ0ouhC66x-u?8V@YcuXA#8{H|;0_m8dM+U+HE?p{Qxn%?v#;fTB<|DDS#9OeaPKBN
zc%EP%-;D;ucVt280(4h=Kzw71PwGr<H-V?{)ka3(>w`C<cO-Q_DK&@BYVOYZ6Z%7r
znH3=(Kh9okPoB<|!#`(B)&)5WVpcxQnyRe`_hv;taEOx~*ZF7aHLnSFXzXj)FSO$~
z+${vmy1-fKCr=+9%paeHURcWuj(H2qy53LCT;&Z0zR5G?v$np}3VSzLSr=!Jj?iYf
z1f2-j@8jMIbgJ0iDu2t~DxdmjT!LN|XZ`njOv`ZV);?qKx<xqqnZ0gZ(qDk_KCg+n
z_=t}q#`+DqKT+?4;FR8Jt#mJqY_P~I&6&N~_nBj+9qgpt()T~gJwVNzqlr@Q7&@iz
zuc?_@TjGCP4|30)+H!)ySTH}hGBLvw1Fu$^2zue|IV+)o-F3_fd}|F{Y65}OygkHg
zzF)_lM)tc|pEZHK9}fR+>OYvkefQ)qWPiifOB~D}xWAx~y949EQ@m%1hnzn26ZAoQ
zl&{Q`k3iS5#XZ~`wCc+AntYaZ5>AW0KEv-eXh*Wc#oc-QHomUi@wJA#+s!WB4O|2)
zl`Bg3|0;%0>ufyu*d8z^gV?Kelq<%srd)c8{j)J{JMb|O7i6IQctH+6A@amNY)<xH
zitY@)B-VOci}9x^rqOSncuKJaYhU7KVf2#JQu1qKljzQ2@u+@y6h6Uq$H8M`Mz<R9
z+sFDC;sp5KJ*CO%nB3&)&{z_bWq;;;y-(m%A$I|DH38|!!2JU4b-czMiwR&Cp)O^}
zu~WHMb?`066ie-BF7!oQMbbEFU!uyupKQNz;x#l*jZMCIaI5pJdZ)Gc9*3CdiJXb%
z&ZB!g#J>kS-eQ0M>#RfS66RBH<ISNF`C!o#3r$i!mka+by*BYn=yNR3>akfXOzgj=
zn3>Mnkj-gdM_hw+<2Zg#)#<7BwkE2%yPAC(+O>By|ABMm@>j>1_i=pLM;iHE&j)xJ
z=9A%x+^2h<<%xcBXNx}@c%oq01y2;5T^O6f(|P?Vx?;~87>K4W;~cu+E#8y>FT__q
z{10-oQeXVW=2PaG;_l_geRUV(Jf$D)a^nJIA6PyNz70HskHs&_z<nX>;=+LW^sM!?
zCQ6BW1_tu`s^24xCiw@o&u?gB!KWDqevnv@eOKW|d@O#DPy6lt37-3c{kj*p30~I@
zT?V{P%iht7Yn#xCtlXuTK&`QGAqbyI|DN2r*!|5|2A(s{iSUmn@Ut8GaGwL;f!_}8
zBsdRnS){iAvT;Q%m8Pf<eo|AM(LMBi965W-TJw64_QIKdR8M97jInO*-}d_ttlneS
z;n3AdzYn@Er9A5}+}gxx$BsK|Ov0aOTYyUoeJJ*#I30_CyxnzL>;+}qxx`nW`km+l
zN0-ANGqDzvsk<6q>1_5uiW*k*uOh~x3f%JKn(`{}>o_<WWFCsg^foN%FQwlwWA806
z9nWx1PB4~!9fr<SPV%eDXI`)MnIAT1Vl6a}9^h%us%2!d#xRlj7nhnJhVWYsj1_wS
z>CTj0v&HCn=oL1%i};?}#z)Y38P9?LE~ERyGvm`)N68A8M~cVaO*t1I{*m{R9VuvP
zI={t#|Ap_p=l$>TW*m4^4&FpE@j9Ak1l`1)OEdaRGk7x_yqP_2B6u^gFG@_qQFzTn
zaK&WdipuJ}a3!(kbX+l~;R<w;q2n{*%D2cz^8W>{gofZs1-LMg+-9>g@i_1y8=oRv
z(H^k@4<>Pr7N-BA51;QxES^lVc9`%)@9{mn-j)@QbP7k(F*%|O;Rvy1ucs*24330j
zX}tI)J{aXC6i)nR2rj5?<@R>h{hu;x{e8YAD}@8nm4pW!)Rms@>gdwXUESQ`SLS@C
z?1*qiH+AvLzL)P}h^`m{=Pl08y&8N^`|`90P!3PiUa@^=eV*yP;yB}tWIflM<h$88
z^cnOsw46J~L*x_`4hSC~C2sR<_?RH>t^$0l7*_~B7WPH77qI3F{YTfB*CY6Vv<|{W
z4$Tzq=HrfCGR~zR$vVMVa>-qXo06$5zs@edkaysNE5}^9_Ca<T<jhsyJh|bnqp2-F
z<M~T`lo!F}k<K@3Ezk6eR|1z)d~z`E4~2_lMT9)=;+Kc;rTkIy6}@HCX1>K=q%(@I
zunvN^@_T0g*BG_thxyk0$FX+q+*AJ#ckdn_)pg!`ubGjMK#sWxa}m^<k+2Q2(_FZY
z?L=D=wu#9(i9t<>$$2$G*d|uf6yqeuIME1jLZY-ru@hY5RwHm?kDMkx4J3@?9!B8!
z650k#O42wd-Xn1hNn;xf8bF@&{jHfTMnX{9_kI6(-#_+e_Uyg(v(|dnv!2^}*0bn)
z_t57pCa&i{8S-3fCYjv3Z5Mk7j`Z#K^4@1;AMk7g&(w~6xnK1m2)^XEDbJHVy6<1J
z)8?PUQ<Ugm)BQ{kUC7YxWT4?d{`*4S6La0Xg?MIje@*(xNV9hYdm>ZjPuo@g8smg_
zni0o?dXL{yxcA~wUFDo$?g+l%9^o7Jqro=)$JRt2aaK1{FXORVuo?_{U|#))N1BZ<
zMW?lEf24GEz4!WY4SDuo<l0GmcPn)_p%=F}*)yUf|7$3#7#r0UqFuf*=lf^jCZ}1L
z`EY80<H7gfvDR0gU&evoX4@6M;QMZD9Phgt%K5;>Z^69-AJLgh9v(dWUT*(7hx8A)
z`$YE+ebic&;0pJ_%jjb$*GI3N|2O-$Pv>)7tbfvdHFn-O1Zkr~8#TtFKlMZJP4VD9
z=zV54@7DO@{dI=Dp?<p`=OjK4kB=%wq8GXkKo=468tVUY;v9NQ<!iuJLB=Bg6CtOf
ztr6QAV{F@6)*9`+g%9__|Jaj}W*?W$?bFHF^{=UkpIBTQr*6BCG@qw?^CiF@$mO(G
zwAeu`#Yf0f&?Gp-#;hY|OLXjwb6_fV%=@8p<11;LPmUCwbuk88@%>IX$sYLNisgM8
zLmNky_nk){mhQ1lz51$6!SUKl)yJMiGyOkbpTD4PhHRUFsf|~#u5=e|T?emLzZw@b
z&TGZ4!nWAfzvdq;&k(MAh|j#6wjC<<$G6h<CgWQe;x`HI50%!&u>}-+P0lCw_+yWC
zqJKvVu;a*m2d|hLEjHmG<#`s4p(pZ-_!sVWTV4@lFQ*~KLb*zYgApMP!z*(!SfV5G
z0&_*(j0)O1pMGhrsA4KUreY_IEg1H*&(LoIC5EdKo)l$#dIObJ%B7?Bbg(8GQ7#JY
z2St|^9W<$(qHFLl4VqKGMRT-iw!^(KPYuj<!B9KA=ep01@Bhl?|Ae2*H)p1jCkkCK
zM7`C9^Wcbq6b&~K12Bztt9?2vCAuQg7hxZV^onn0GMj>&l^jvI5p^?`jdH>Tlnv6y
z7HqT#>rc@9oMoavuDdu>t#ypA?NH#Fs%$-l%~AM4qzoMty;J>B-}3v!`&lQ@CHmLw
zvg4B9#udbU>z(@Oy;nc8&xC{QH^SLVBh8ybd3ioxZ5+zu<ZoeaSl;cJERP$&<zRj)
z_yfF#?==5}1BdT~@BdHM4;>8jzxY4Vf4&>&Ki_%%7rlx$)_*+Iwtl=5pFiHj{V~y+
zzu8X=fd8Y}Gi_>_@3qBd?y`-{jU@Tv7z34AOU@zxr_YyJTSS@1DC1IwxohD-v;IFn
zUuM?`$~;aPQ<GR;oP$GLfd8TMW&A4hBxQn>xgrOL`R4zIEwf1NSr#yJmj_K^Sxm6V
z5$4E$USNHS=1I;Xp^W;x>?spgf0aW_<-}LHw?01Qi16-T&%2jy<UQZ5`^Ui1lExhe
zbzg7q`~Fe)%d_{k%>CK>SM_{-_I{|2^%d5Q#V@Bl^xe&WXfjrZDKrIb&rEaTN1yh^
zw<5Q<jx~u&V!9jPF<Zf17jof>70Y*g{{?5p?LIT^F1{@=g>8Bt2PaQ|+_Zm<GR3B-
zt>gnvcu#?udyH`?B8PY3in};xwXnH~c{Cjz{b6`nQ6c;8dA1wbwgJ393~dyR%swmD
ze_-7X|2R}==00qQ+aRZRFVA10E`9$7|C{)~K>zu6ry1S+F#UQ3_}7^4Z0>oaCcfng
z6OWCB*CW?G-u<<+MRS{&f6L8xH>(cftY#JV7tPhT`bOXC8~bhEcXv_#2=Ngiew)C{
z25_|=JWZcw;?pSC0v)cvu1gWCqWGVC&tzsFB2H4@Xsqu7uI}ID{$g`pyjRyHdCw*0
z9y;4|F9k<jp!<n`d9d|M|E)ecoPIS_UmC=}E-`<r$FnbidR*FIq<_a)BZ2nqf2XLu
z5nbBwKbogcd%B3Hi=P8GYM<&9Pq+YP^1lW%z&O$8I|7VTlZ~GURB0|+zP#pt#jU?F
zS!U;f&q3!4`r2!Zi95(ogItyD>7B@02>xMYleM#Yu*dK%CX}1aSIj(SucFqqRn9S-
z6T~~o80|q&UHSM|j9LKwQa-6=w2AcxVmkb`TtDsU#Qzz}wPzabDTtQ$g=kZw^bqRz
z+SEf`y?JfwrA<B5tLM}!+tap5?NgidF59N_bqUYP9Y5Y7hJyHs@yMlZ*%%YMKIF+s
z=>Z;|jO(-ObdhUwc0Bm;@DjOtm}kgv#@*u4E9bRMx`J<1wte^*2GuEC{FmAn^ABzx
zc<}7wNY#aH`7gDZ^WBBhp>596Z&nvQf&Qc%!mGe*De{gDFPwFcKE)U&vpx~qF2*ZM
zQ}_@>PabZ3teIr%;Cuk9=VbNIe)97OFIopK1OA;w=8iJpKX1patSY;v_fxAAVSEgX
zn{v0C2zEFAqTuy8JmldfSUJqIDZ@OIPa?1VLGTbH9xh1!Py<cdGX;QaV|3(S<6b%G
z>=^~j?;w4-iWv3J<G+dBo`aP~L$MEM{f-9zT8y<Zhq~<jpXS{|d){-MJ#YeDP<UST
z_Lug@&{YTa(D~1ov;KH|wl035Rrumsv_B3Xm&$vvVuQ*PH&mJ}@5RiA&Y)MaZmKf~
z)Q{*8JSaZUcV+e)t+5V0n}paUix=fY?O*f40DWtI6_69O1N}M)A6<WgnSDQPDMUvY
zFCLT|C-vb_j$RHyFUv<ciM#wJy_{Iq`)f`6dh(4Az#y-$bYj8q0Yi4VzV%>f+yrC2
zV2m>9^@2f+Za$1@?*j%p{AIzwmbEZ;4TkYz6)@ldmj#2hXA8sc8`O^F*8-#BGGSEY
zVAKwVQNTI6ja8Qkqsqg_U>Hx;0ONy~3FCtvJ_f^>{~=(o9(P&zxY5Ihe-J(n&I3m6
zWx}ZS@G%(1dg0^t%Y<>ehmXN9rqu#t(PhF|<l$p5j2DHEJ1-N)ogO{{gYdCD42)%$
z31gXukHIhsDuHqDWx}}E!^dD4PhAa+`-X+F(UU;~bM8J5AA@1cC#IzF!OMj4pofow
zLHIa$6)@IbCXBTnJ_f^BFMNFcGGTn(!^dD4)5?MI&C7)GO%ES~VZ11OJaL&Yp78Kd
zI0zrhCjev1Wy08!g&{uQzve|NN8y<pm3y%_P(ZvaIhCduatq@#k`4e*?L|%&<n|T!
z@Ls&z+gGgdK3MG}PVUQW{}$^s9;|ijOSZ81-h-v}YVkSt?%+2FD8AP2RgO|mYEx}o
za6-SzY}fwR{}4{urQvk%&uo8c5FEv~)3?0#i1*tyblT&!MeWLOPvg%s+gTsYYtJxn
zM*YWdI1O{V;<vqi4d6PjJr+OE^`-FBc{H<qA@bFOb5T4q$1Vk@=3r*~^gK8hZ4dMP
zQgBklDHi6zxoCUfJ(q&h`g&%2&*k6;I=>X05cs)mP<t*MFN<g9+@;`j_hz<F%Y$=K
z{4oD71*Z}G`10Uf6hH8yOTqDhpWo);XC40Cq4aF~ReNbToj=WNpE(H5Mds;^mxe>`
zfbC-j!MO;YKX_?4sTVTa|G+x2N6#0<bJeBcwC>1k|JmihS$1hSA@K9QLH)W2e(t<9
zobF_1`xSX`F50g}mxj{_evak!>!S2?`=#Odz|Tv-$<*oGyzKhU>81jEb|Lw7WS4EM
zWqn3#K7IIh-dP%mpMn=^U9-->-*Rg{e(vXwvF9>d-#fZ}m5Y61_}-qa&H9df3SLZR
zH|G*)eFs|@`?nU`qK>m0=ErG=UF#|3yH&3dGfRv_1lvXHxKUzfP4ve0m|wPIbWv=S
zv3uEejzYgLkR6#_ua|9OZ4~PBZ0~J%`r?Lo>Yd{_n`H~Wcwlb8=iuuc(f)OQzsgnX
zD{l7{n|R7CZvP7Zzs9vIHj-z)c&Kp{>t^^usP|Ex`=+z6b=e4F&jR*bIARRb*RvMo
z>(A^BZG3-wi;ujx>`fxJXJZqww5->(*AhqT%f-+NzUovPRFB#a<lH4!@dRb8yOwa4
zH8B#}GfXZe&XpL?dQkMWKi!}`o2F{G?^)QH9j)M8I@UK!S>G%-6ONw<JX#j@)2?Fh
zb1p*++I2PttsDPww2CzqY}aTNz7yg*qh(II7<||{M=bE|;Nu9mcnKWLp#K}HO#G{5
zzWCR`p>%-gFn$k9FN*7-y*}{mP%h@x-=BHYI90a(MtqozldWIlnEdz5?ELW^ZVb=E
z#zxJ>&a8lkdgmM6W$&{z(98XyJp9S0Ec``$)dz%Y;ZS%N{xuH5CrK42u3}6*JV_7O
zPi(XH4zUJwoV|wi`riS*^h_}UvSA1Mm)rMoF`9=a>+QQ~^I4;*K49@|<4m$~p|#Mf
z!S5U5Vn1MC4SDbUeNMQNOFrjrz7L#p!qd1q`0rpdZ)M%Bfp|{Cnw}}>C`$$!4(Pw;
zhcO*@>c8hxGSFv;tEV(DBg46aJ*9Os<m+l6&VBtP=Rs2twdF_94&n&XyQ$}Ct_*d>
zsJmrIJ+kFFN2m)QwOv=f&1dE$X=^7J_-c;emsYH)*EUbDbcj(1QnqotlZbMuYz)7)
zZF8{WPOse4v~?F3{$=Rj-*tGRFTRg<C;KzA4^OO#$MA`FbLsn#d>Y`bn@j&KtXRjL
z<Z>$OVVpXFljQ2=d*<Ro?J@G;N3LKUj;p8K7k7$HTZ*$fds#<4G$jz<PI(8vcCTGS
zt>IZ+Jc4hvmFw_CVqbIRpQRj8AGAwrtu^uF6*b{bt_c0?<ci@}?dGCw$Gh1d6@yoH
zbLoE#|6is(YI9AdXpZ7&gfr1sIld!ZncaT)b0O>RzV_2i#r7;qOH1(Pca|1${*}%a
z0$0Rr`k?cjBh1RrkRvblW#8hnt477AG?{(r=8^F-a>twkm#24|_Q`+#{AS{R69(Tt
zI7ysXJOcfjy`K1ZTzKlW<;2lmZQ#+YHIS!LYZ2!-Uye0gyRR}b!inDnuXPGcy!FBI
z#kUm0TiJISfbX5duQ?O=Cux_S&45;ek>@w}5aX%X=zCZzCBMMR$0j^h7X6FoH<y}6
zpYYx(mc4=ZYd`n=X3BgZ$r^*JdVsICgz3xStDU$hHg~AqE^WGXs)-xmsXwW7rhY2@
zbeo8U#_#w1U%bGXN$femS9WWzPY!*&mTw9sI`JTIef*z4(Zp-;UydlJ&-CALFFYn$
z3#wsk!d%)<x_p8YkI<fJtl8;X^<90`+DzK^`-LI>eqo^BGY0kh1>0}oLw#4ji67h)
z`rHcx{XR%tchX-suRg_T=^H)Q`}}t=@lIzES>CkxR`xo4gk0RW$30r<xei$Xoeaof
z=5_y?TadrEA%7PTYvK1|EjDW3qG&>NBN`IV%B(xDCwOrn9&G6b@8Hw-^atq)mL|~=
zM3Z&+4O>_f`8@H4>E^<C<XR`}a(2Um^i45ZkqY=+-R$E#);>|zS48es<_%?tC7)EK
zI1<5{#vJm_#OouTMBk!|RN><erzsa<{qoz?lk_87%%qZ}-z4S-Chu9!crGW_b3A8T
z5Nns9-r4EqTjHwMeGhvynMaCG9fTXkJ*%V0N1vyotjp>skqXoP_UX(f)$icvR@_VD
zwbWaj<v|Ygpfcacm5KIc==Uvgt!3)@Kk^)zFkAO7_d#+N>Am1-O%!+u%}4b&&3UO2
ze3e?`-0q*$9K<Jk+CRDN2mIfLywCRKx%)&Lwm*!WaI7)Q@{bG0&Fgnor}K4b+}>f#
z*w2*ZB}2w-M@e?v&dy|yg2s;XJC}j~v(T;`J7?Z;|GKqh?2k#%ueoa&y9V|bZQyJO
z#>d72`3A-?dp@8YJNlU-W-`sVoC!>>(ivj^nCq|RStE2|Oxd0YW7taW>21VI-hZb_
z#PFr7-)CpSuP!o%t?X?Yb_{oC$MAr^tZh<Y^1^RHGo8>(h+IjX(9C#bOpF+e1naTF
zuj&|&%vXJfG&YRcs@%A`XE_UK$k-e78<lyFH}<D8vvkIRo>lYA(S924mvQexJHJ47
zsQ-y`nOXDR;Xc<d(Wl1T;Y{3rgFd!!U%|dC;rLnZ)h^*s<#ir!{@81r2F5>d;rQQA
z{T|+Yk{!A6j=sn2HLS%Mr_in`1vNK&0%67?;f|r*Z?nEUn%~10>e-P4!#w+!VV=D-
z%(H*UK1(r{p5HLiHO#Xu!#w-;Fwg#am}g(P@L5v*jZ|FF*C=OwsjpFZMdU$rGVNth
z+g8j^w>$`cs_?f5nP2wV`rFcxp6q|&Dax37xV?a{5Z^Hn+ZM>u;Q(B8;m9&$;a>E6
zba#CpsbD`8d`V|$ze&5seC0Ow2bCX)d_g?YwD<6=w*FSud8!ZWg*I#*Zf)9wAB5(z
z^(u~*m?_l_%z-}5nm<rh@x8;rZTW&px4dl<iq9VkUpoEe!f(!_-FNUadUQLW|NK8h
zzd`mxYD`^ht^dE%Z?ZVs*QCyK`cKmDAX?9(NjsjR^&FjCj7C#A8r532Xw-L8^fgPP
z<O2}BUW`r;{0DUQ=rD8^WiRCA(pl>;-@B(S|9i!G+dd;-^XW8GC;hyLb6GSei*0<Y
zha1aV=Vo;v!#*wBR{ZLkXXWTaHRPRdsT~p4{<Tb{v1?>5`_>`{YB-z7*xdE0rNkf9
z-WGOuo3PuY{K@`!s)1+lV7JH@kJOH6XHP^t!g=DEnWq2luiqJOgzq-}mi5wIHHqi{
zDzho_Z6CSGFXVr#USmJfwb>kDYOCinX}K1C8y;eHqq&21qfV<g-bQ>bI%8c{XY}x*
zxr<Ed8m=z+1#JIwXAQ-2vDmh4sw=mzT>6h<O}+U)V8a%Zqrt{#`nr&@im$-t%btf@
z$2qas{j+P0*;BK=cK^4hVC!kETJp;;+ktaJ(eu6dj&5vuojt0(5?*|P*6Xw9z8mx*
zVh3Uu;wy%a82x6O?MH48LhPHvJp1}E&(;p}?7?B4-8am$dxv?pY?x>GATMa&qG6sr
z;Ur4&|0sSSN>05~;9q%rPxGssy&mrMtC)qM@db)0uzntBIyp4Hfbti#p>~*O@TCc~
z;Q(!juxG80x+k%pO>rJxJJLK0pT0F6yHRcULf<xGpQGcl@e680bkzC#RzLZKpo^L8
zk(oKZlsz(~$KiwZXW&Dt*dr4e0j)E3`c7r_9-FJaCbz#Y#2$eNaS}n|Fl^uOGbs+k
zi-kxLW2;ybwdI2TeQ=m(Rl_{180J~oFwf}Y1$EHZ3!c#rL#%@rqoMc<of&2ME#oL&
zJM>*L&~Six@!E^IIi~q#8gjg8@2zPs21z_hb9vI=Ywyi?c)8XGvvI^$zrfcgADEAC
z_1>Ypofmn2Ez!@V;Olz>eCZ{_!B_oR_}N?-=iz64eOdUq_#@`8;01J!yL?di9nhg)
zTPOPrJPpO2bhZ284YIAWb!X#^Y#s3Ero8n^4;PKV(VEIZ=u$a@ytToj;4-uByq`w4
zv)X<Fo66&(SznFLB`=nbeUQ(F_NM3KqjKI)Ucq9MShpb9Ms6#71FVVScev%B8g}e_
z0e?gVx#HO;fh?;hu67)KnmwA_KH85E3lR&dayvNlhxZ{<uqOmBeE2>md=0rCzjLFL
z_^uf{PVvEixZ2c@K&QQSWOUJ%hsG>^!@1>NVAa=NF@9V_kh~BdAio81qv?g%UB$j<
zm4734tEq3j*9nKP{S0=PpSe4Sv&@OZeDgZ;LLS2wk$>nGC%EUO=-l=r=ELoCINx0D
zZzAvHa^^VaBv(ZqxNAo_eR1&-P6I|c?e)>#89raL!!rZV&gVadc64)gLpS_gvBcFr
z(`@LgSBAL4vF?Ip^OC%;_W7HG;Ak1Lp_X&Q8^{^>40ND%G0B2Zv9BbA&#T7xuJ570
ze&mK%ZUOnzs?7v@zIasY4cI}Gl7;QsKjvHWg+9ePUG*pIr7tsc50I1ZjS1O3P9gfP
zccI{i+uy_cWVx9WU4~C$A>%pG*nKFfyU}lEKnr^%Q_1y_80wGlah8VsG3x&b{5J!B
znRQti8-@0QrDj_zeBj&IZ`EU*w^Hn7*10J?y{28cNb303haAuOO4x5-eSo}eRmy)q
zVZ50g<D3Vd+3;ElU85C#NIt^$$8X4;^G%u9WX|~Fd&V(Qi@ddS8o!(B=*DK~C1!3d
z-?f}8dh2VG<r{NW$3D`ws9Jtl#?HCfNsL%B{=RPfA3jq&w#E34%QsfDAhH9xXfs_K
zY}szD0g%I?+!U__L-j|mVLXeARwfyf73{k&e}Cc1<Ok(LE?U{h_=RHNFA}@&sp-z@
z4$dTcg>p~7-&uY1jgCb}ZYbc~zv6oxV9cN7gdN7d1Am}1)zo+I{9F903D!fDW6;!p
zrku8X7hh`yxd)A}M1IKP6YOEems~!N^R_v^ea3arIr@Pw7_;9+fP0i&Pvr}E&u?fv
zGz+{M?i+*IcGa5N84adpr9T*3<lk8P;0n&Dh&kvUwApVajTL^Tjj4UGcFYxbxa5)1
z9Go`k_6K{oCx2X3@CMF#hv%<@)}Ym@k1}VX;F&ooU1P6j6We=ulVJ?Sldx0meUe|%
zhioy;>k#ug#=Nf1&1=KFE@xf`*~1+D3nv^oUNonaI-tvOeXL2=!YgXw6*{8=`G)Hw
z%P0Pdu?zezGpho4KH%Zgxi@-@eC|1TA?~NBt<;@7n%VX#>Suq<o@0TLRn;S-$GbV_
z@fdU7@H}}WoA1NZF>mBq^zQ6DaSs>G`6K_g9v)m*@G$tMu4>vYSi(`mx$?I@!@Y;A
z8pdjV@$M(qZU}7dIhfg|HG1;F;ZwD7EAfNZ`DgTyv+q#3KfZG6yPM!4uMxizKU7Y9
z$#u0e%x{b4sQppSpVypK3`BO_f$#AL>-$5Seeq>{+lvqR(B>NZo%@@jIofZ^`CYTs
z7k#U^2d|B<o+OvL;Pzy;%m35zJ@Z!l4eggF&tcWq7InY!jHNFh&uWUXORF|4N_IV?
z^`_>=-|~!giRAbGYEkscr|h%t|IIVj9)b?^N1pNp{CAiSqT$qUGWGN4GdGHzw_CY)
zZg5twe<-lnJXA2H03O?MF0k^I*E97G-|&q^A#$nC2WJoe>G$rtj(qmla<!PE<Gab<
zdfS3VyLTZ7FRXDw<T$~fi68GMd0e}hFYBqRk@c26(1}N{>bGcC<M4NR{U7-+nR<Bg
z#MBQqENXo<+t*gkuXV=Y(-YqZ)^zeiIpdwM?(y-#1CU(@=;t(Nb*MObXGk<0LstAN
zG<UNZ7l+?f|Hi*E!v9myRXO)@a^{r(Q($E`IU#@aiwtM9!{@2j&iyyCbHA0b&>Z(U
zTNYVfp!Hecw=k!tQ?D=DX`jc)4e3i}?~}@n<i_mt)V{%Uy_RncSAcq2|4I2wkzM4E
zn$9;hBff6`N8wSeS7h&Nz`fd~GufYsnD!!{f6ozT8hJ3lJLSG}g|qsrz}abhE6v8+
z9!%2DU^L4=L=T;m5xxU9*GHggKJ}8LGs{=tBjPE41h&RNdA%I)R}S7-$EcryFI#x(
zJOy5P|7+ftPc<upjCVOX|A|8y;IIF}yH3+;d9BtH%E!Qe!F9;Z^0^rATR-|O+rLim
zEqI%GR%xP(0@2R<%2_XrzCw9qvT%~5-67tAN8b6G-FGteH>(aO3r~Cd?Km<H=&|+F
zkqey5zB0;v`6PI_exZrfPc!viyOdkC{Cku^XDIKZ{k-$|@K)ZLkDEITv|{P&#Z3K#
z7c;ZG`qWmh>}R<b?TR11z<rQDieFn^J!#>C9?t7>JXyKROy9&i^j`Q@EQcqT9_HT4
z_G$Ru(U}aqxluS#nP|4J%FX%mHQ#v6)J$u8`77UjyXa&8^7hm3ao-NWKVJf0CT7~%
zzuo*1WJdw{pw`DUFAI+E{-gerPYPP;X6^~+tHGOeUG3rj)vegNIlW@2PNBA_A69PU
z>E&Kq)lTg{IRvZ#{gm#nv(#Q?99Z9#KG*dX$Lt$nMzmF!?q{&Cf5txDpS^)xUkm=D
z=jQM4WPgq3Gks{+^G=8V?2r78DQGjnjwf`c1#MWUI;x?&uhE{E^1uYm9ZkTCoQv#7
zX53!QxPL};KHu4aOuW6Kz}%-f)M<+6cCu~^oZG!UG!3E=y&Lb$WB<zSec;31JHFe`
zif(gjr~1{p73-JM!>#UhUF6U9_pd34AEV9v=s(hT*h8C^T&RApS-Aq<Q1S7P@2};3
z!vkjJQRYx^`YroUEG~>szj@*Q^52`4;J(WLH=lg)D7+&$rhGBFewCiD;D6|$$&1~s
z8y8*k`@*r24|U!5-S<WpRlRxj*w{m{%?0P~*>BF>wSPVMh>?f)J7&a`Ao`;**R~&C
zM;y5+EGeWthsYsdkO|nYiRuF9ZRtS4huappckH<D_Ai+!#@@&7s~P$AQqkiK?A(~v
zJ-=$goL7gQT~rmMKkENa4f~uKoA12YFi-F)f4q^gJBp6iLk^;YxqUS&ClVJx{+NU8
zn>mWkS3?e9))TAN7r{>pIRBgdHoo_uKNml>xq|UUhu%Y;^r{-x%>8@6`I^5p_IBtY
z|7Kr7#pVclA@kkN>6qQ8fh;XD@jt0Uh8Ai4mbu2>D2F)`DKM*Bv>%!K#sc=>F1{tM
zIiX*}GfTTKvQHfSv;y3C`^0O&N&gz+hSp{M=uYa1MYoUrdTC^Q?7jwUgjY^y>VE<)
zc(ktZ%hLPv@gvZKXuS{|AG*@a8VOwJf6=wb=AOXFu0rZ>Vouhw&#%R>H<$S^pLcH<
z&aeY_(~%|fr8D{pnl&e<0mtF$U@U6%pS^Ytm;QGXJ8}s5$Qia(UhcVrmH66`<yAL0
z@!$QRARc93l#9G?p*;2#doFx&oq?+V&p>~o6(47y8rl>xg*IpNI`;4>XS0tnHC!i{
zuj32MzRHKTZnii>Pdri@U=1JKLr;gU&&Ka!r?IYx-A&)t0^>+&T^wFHx|e+}YyDd`
zAG)4?<;@@Th4$*?)#s|6@*UOD@_7x+anVl-oL$2j8RKC0S{y^avi0H@BcHVOaUPS7
zMXc~4aC6Ksww!e>TRTQSTxdIL_aWj_nHJmJ3O@YoVI<Znk&mlv8`Y1IU0WX7vN=Ux
zu)p`(v(f2O6dq>#MElhjwZE0zwOVWS@LX|)6YqKCJf5MwS;uI<azcQ|*X*7!=8N*n
zD{t)C2l_X8I4Gj+8T6A^nPVg1ZSohYKGDz5cvr<5QIfHX6me#Qban84Y>Gb~C6C$f
z&^v>)PrUEgl-l?-;Qx-jLq`GyRiTl@fq45=o*sm|#F0vqP#!aVdl<Su^t8nz&pH2{
zI<FaN(l3Kcr_hWQkD#ta&X;1F;j?W!R|NYsZ>I6wJ3o8_?^XALFFmvQr}Ue1ce=Kk
z;<f_lJoJ9X*949Sp>g)&lTV?bS>wB&F+%1vw?fbEK>m=QK9dYI9Jq$I3!ba_m3yb>
z!h_~s4ZbpahA;QU=pW9P^67V!rQfx*N%Z?W`dVa0l^i4P8T>sb{2jsf-OE@Xye+%u
zPc(d(_!i;Ag|?32gVFcD10Ui`f+2j?eu-~@A=*f>S1?NX6z>lc`*4hSa+N=F6FlxV
z_}j_M_V3gFC}XV{8$ajIcyTsaUyYR+&&ghwKSzEWFCM}t9MT>iG!qOGTgJI}YL~k%
z@(&^Kf<N`S124@df1f|@GLA01JymBCnNnZ)=K=g_{P&MRFQN~7a{nv%u9N>S=l<97
zKgG4%E6;s5*G~SwP{z3gwWfXBDB|ql-#0^h9ixz+@5k36--YrNv8HS9!NpR(JHvD3
z6r2nnAyy`RC1d{u>=W|zRf&FXX1pI7#r{n8*M*Q(Npc+Sx;L}~xi(`BIm%lC<D1#f
zSFhNFax>M&U1^LvbQaGnQ~wxe5d{NN7qYK%>^k6e5I6MLH=|{b`KOk6_;~!wTQ^H*
zaqz1upZv|_laF|9kgZD`hQ_#&etp4j()VA<{!H$57G=!VJH9zG!PMg`er^)yrW^LR
zd9dZHRc=7RJqZt(6*RNm(wcDco8-tVsf%}yB3ED?>({{RuE?Ha0KXi&jXvw_9>G_e
zJL#kC7x&ZOYwDw4&Zph+mUeBfeA*ydEi>cczvBn`n15F93-nFxd5pFw7rdo!jSabs
z)XyK$$LHzeKp*JO1^r+z$IyPL59*8h;iC_o^r4fw)DOi(dhqtWo7qGz$EqOov3gMr
zXDE$tHpGTKFJCfaRL40J$eXd@me}S-V6^O=-(MS;+=h=c(a;<|S67VwVa7MhpOey9
z6YKQMwb(V_#19>XsJqsTUnqY@h_f8R;K7^2Hv`jahu2@>V%B8%BznWI2jL@|>sI4_
zhM1Bc5$~}Yyaa)dU1<4Rt=bA*Hk_Q_?~pgJp*eIeMLTbz%oN&rf-zVAs8ZH5v^Vk{
z#z$u~YK>!H{Q|$)QAcrr#Hf<{E~a%1zVY@)N|s0S+GY6-aO^tRkoc)a=urMT=$ROy
z^Zq(7?#hd&5})dY<{KHGwJq=`_>uTht$3%!DRjoU5C0LJO&&sLlh|wO<?wnwM`!o5
zw*7ow`@I~(qO%0}{9vxmYUb>MtI#QjIX~=4+AI2=6)*#18U6AL17m6F7Wz5ESpHjy
znSEeTec9Y-s~N}V8AHwAyQ$Noi6`y3Bw5;5F4!dP`UPb)24%VPr9}VoojU<|bR{{2
z{Kz@ZC5etB7cb-2!5IL*XAG0n5$3(<zZ)9q1_!gC|BgWRJdT-{QLkkDf41&_zKpti
zu=PASq_JO1zf;6EY21|y{rtPhxp&z!2d1(&<SgH2X=ZAdS8nZ>(R*^=e}M1xejQ`t
zy{~|-Qp_8{|Ivxe_D;$S@H6}=pW*+&T!fB=E9|M`KE?pQS5{_VyBfYf3B5nYyperb
z1Y^tEnd7^>=bATB=1me97t9sf;LGF5DkoX@=U*gu?vQ#Ll|Mo}G|w*e>QJ43pv{Wa
zy;!>&iGyqZLjR_Vz9$y+YnOUY>}@OW6)%1<7&X`s4^T$&Rce!B?C$5kryJ^b<a#H3
zn0LpBS(IL|tdjh|5o{suEAgSX82|Agxv)c%9Bes!8SqaZ_pR`C>1oM8!-4CtEuPL~
zW=XfK<xIGvthY$NTwaV`37iUG%ci>**!Kdvw$bdX=8Qyq%4d$_i*T6BvR_6rUTaOD
z<QC4PsO9oMund2mzuAH3`{7qQbFl*-O$t7@i*>RF?2A_PGp(yzeU1OGRHCm9vN!xz
z<{hpqh>I_HXO(+%I$-$_HU|1z&rFjzhVB-Gjt*DOw|RPdW}>5^uN_10>ZUKd;Qx&|
zz4st-))o#j@ff=NQPw5&?LlI#kFwTqOgtSMRBQJy8k0_<^V;%zv$Fp%b*jFB?-+;t
zv-+az12cM|F`YxxK^~pMTDwC}v+V%4!QlDx>JL9!o2`>}CTS<SaXLvE1Amc@on*{n
z*w(uk(^lr6uefuw#=nj-vK1vO*%y<&f6?raofJZk{tS6xd_LKgzN)pw1{*fIXze8A
zDn1OCaSKg1cZe?H<Cuq~*b=~#Ztc-n2V>HMt!oPLU*eOHe`baJVplkC$FLR4@%g&S
zX^WpAi5$6xZw+g7-uI$0&klHzJ_!DD^1wLITQ_}qn7%w*@E!8okP`;FQ-4GwMs?7?
zTI_?J&~Or+-g|f6KEPKEEgfNA{D|{UBG4y3w6~-5GYY&Y{dDogtN!cQYot9-@El90
z%7v9rrwwLQv&(wI*RXecq0<)pg`(4Afs(2}1O8TUd<VY|^S#EW0=;_~dbe4!yw68J
zs@I#hG#^@-*8%#Vvw_rpA7dsTPYB%Ak}t8AF=`-xOATWaI-Ox&1*(QEga1)we5W#V
z0>IGRW}NQ`an?6;J0V||-Ur^v%-M;L@*CKP8fT3w@alW$Lnm$3e%V9Ji+u*YANo7Q
zd|1ZwTI~4ly!Wr>-luq`IrCHgx6|Ld_^-8kkJsDteMR@clx-1ZzMu!CkHTLMZmx?T
z<J-`o%y!9o|48;K$Sw&K*!9n&eD?$39^G6U7d<bhOec8#4!;_w!(09F`JBm4{POI>
zTeD?EBg}!eAp0E(I9pKkvsAF5N5MYE{VlX{Grz%HOpkcl(EhjQ`sb&taL}zfbGG9W
z?yvrQ)(#7e!7sOFM7$rr&WXiEtfTw8h&Omnd(qxmS{!GNrF)5y3Lv{O<RPzqzi;JH
zY}Z}n;;A)N?TqmQjU?2rc&4JwG35s=uVwrU{mA8^9++FA4?n(0);fv*^_Sppv1{uQ
z{1R@ZS)Iau*S==A&a`_n;=3P4f8_rs_|@D>y$_y-EaZEezpxRTp?}S-#7Eu68t(bH
zdbOjId8c+X%6CIQSchG0STn_TOdJLWDkEMX*{E`*l!>q&=Mw+x@muEAfXyRbS%Y4D
zx@ly*4>_wm@HNcmazm^beiG@2c&+<C4~*{<6O}^Ga^a~V`~=tuRo$i8XT9%J%)D=p
z3lGM|t14&yN0Czww9#9_8Q}{m=6U_EUJ#t8I#zv{c2Qn+Y|6pDioEn5{0Men9QdWe
z5%mgwXYGgE^^NfEUFhm#g9}#K^?T~rD7%?G4*1I^b+rOleyJ_?J9sPY2ItnV>3v_b
zA~LUWMR1<M$5}q!yw%E_R2z&bEwSyZbXK1LMofN4#_imP*w<tF<_PD8et;+XP}<eO
zbJ@k_8vI$5cdoYf+CUzI(@h_VYkjqpG0H&qKV&ZhzM=Ht-KJgq`shbzwyCc!V<!Gn
z7s&FA%8yoN{Vd3uYWyrwXf?<>wYkEKTN_N4t@8V;{Oo6GVBC+w@3h`gG1UpXMflD+
zSL~-NB0J!}&3@j6fU#>uaEIWe@GA-jM|j5i_i^RohDJ8ZCe6`^#bu60Hi|~B0(a@f
zCOwyRUynv2#Ih*XL9{bDN-QDt;^9`mLHfkG;#DU2uVv+?^j>EKatizg$C}wYuQYFM
zK)0w^^ZCA=qs&{xD7JH6=@Wqm8h1GO?A>0Yb75zl>g74Qp)=K)7o2MBSZCN@^9(+G
z2mf+#yqTvp#6N*vI9E69qt3`^GfVY{puyzrjf3dJ`cv5NlP=R<HuwSX)ut5tfmowx
z%Wr>#H3A3tN#aAYbm6mfVb4{B_IB2qw^GOqH%BKfHcdWVOwQ4TGdfEbQTAtAJfpJ+
zx9P>?x`sARp|_h^PP&u1t$8h4dP~os7tMG344Ts#yIBq|@SaglYfF|t{AL*bFpqi0
zcXqG$67<H`DKnk@w$N@5^(-BmrQ77MGuyrS<HD2jb^LB*)0F!;t7?5s*dMJ4n+-K#
z@U*C=z*hzCtMc3TB5euK<`(F2#;>w`i1BzW03BOixxw;Eo5NpoEk-{qucRN_`PLh2
zolgR9#8<?+A2hFV@-dbL1+3S@LmC!@=B3~TpA+9>yuZe;=I40uZBAzF{M34~hu^;g
zwxt>7fmg>$-VgM7ooRmuns{M6JOet=SWCCp*gV3w;wRgACtjp;XkX=-=7i>h%e?W<
zY8!wz1c%Z^ezq!mmXX?d;AUWHzU9tI5-nIbxj5FOcndM64^WS_p{O^RwUr0)6xlgy
z<8gkyaxVJua5UDF-`^qaBR;2o3+?mp^-IcX9`vtC4CGx>Tr2*dF2z`$LD!S6%z1%{
z6YNPTN0u(eH@z78&!0aIKGT}roJl>=={NXUorTV7vk<w(vvPPv9qUGvN%IarX$^kT
zy4*QCFI!)+?FT$b=dmijR(Ai{RfTc4XhhuNn!Vn_oe7XXjPV<T4YTFSnz(FxVr#>l
z6;5L9mA-fsKb|Rp{wuORFJB42?Cq1y@6JU33z*|c#USzQD)|zyLzCE_>ZAM#Kg3_K
z82Ou;JNRr+o!J9VPCtqtB8D8Fvf?3o&b7YPctr3+G}4xcpFI*o&PV+jG!O;ule`yg
zw~jK2R$%Cy>x_S@Jr`6qqw;5+U3E*`!||$jIIj`<IFFlcn}vhYj|FBleR-Sg`i=5o
z8|<<gY#%Sq@NaW8V(4RZ2rXGydA790ZO)Fj{;nK8-tuTD_by6%4f*5q>Fs1*8STH9
z&2QuR@hw`s<l3P*r7_ib9)-Us2eoj<IHiL_V7|jU#ma|>tIUs=KdJR8`rCwlw;b7d
zaIV4jg5R)5Hk0wimm6OjIh}X-khRK%8G4|pkM*|n`UmdnQ+%Hx{^J?=TLb!f3>&ur
zy*x%NhSrEf{CYTM-6(Ff)<a#Z&@qH>bf=Bd&n5fd3vpzkWP5*fzO&l7YTleE?djQS
z+FO|;z3?b>qx8fNAalU~iC)PxKWp%%U27-6gZb?#j4o<LUt0KH{?A13VC{x+n&mc;
zfBYt%UDY?&$`<(fs)=S>Bm2(uT_<IH#3H7UQRppue8ghu`N7eAgC6HhK=x!|4H_re
z6DNS}4&fJaNH;72H`s>_f6g!dTa{}d-lG+n+X{ad{BWOQ|Ilx_e^c$_*Tc`>@!!yA
z&6j0)`fWFMYX6$S@&CxU^jh*J&wt?Rapr-h9a}RUHeYj+y0{-#hfhNC<Rgrg&P#0+
z+?mKo_=(yjx{0zMTyjYNy?6hn=Zr=EbMwHYar*8xy`#=8)D@s!{4C8eY{#dl&u<D!
zq))|Jk2n3C?hegiv!SD#whF}vqI)$ITzy|7@BLSNY5z3ztw!`9<)PI1G$&Y}t=y}%
zk<zYZ=rKK&zVKScXc_toIjiUG(m0{Bl~c!bY(4C&s#^4z3iOQMkI9aGBscC6;Zd@H
zF&BOdg=fZ8{S2}O<>A`}&(MSPWb2n}W$ga+zWz<N|9tP^#f+H`ZJ33~pw+SuMbihN
zOOKvK!=g>uS(dJ$Rl5d7-Rv>xUyj`(npWSmw_Y^;IngilCAy9r8_Wyz>{jX#&hOwi
z$Xqbk!4d3UTR(F(&U4{RFq7PeC=;R#eJOdE{~7xGah1u<y`g;-edfzx@#}%I&^U8w
zFx`W@Q#a<z-)ubiaPn96{$^$Fyi3iY{=xlI?6&Gt|0CxHzY|@;gzS6i68UEoitkCD
zN|t7J2lr(H{<Pb`8S=<g+Ya~{`c3-KO`P=$k2`n|V=jDGj%Yt=?Q!U9Vu4*l%)D&U
zG4?kzru3C@ScQ*@GZ#*?P8%WzM}TLt;Un;@C^VAUZ5XQ&?LD8%mJ21X&XpN&%Oq81
zr{Rn$U;3T863)K5iufL2^cJ?epQJ8gwteP9?2%{xE->BZnsl(vY@5Vbt_Ig`mlH-$
zpCdRueAB}>oqQ7_raRk~+;=;H$({>+-@9&fyL?;nlS~uuK9N1AF$(<C*px1QKbP{*
z<!dTasr}r12S3`DI>EVptm#xlk+Zq-5ze?0+!*gw9-6W=u0H)r{=)|Je&mnr3dsw>
z{cr!C*`&InS~KI@=#X#Sn`qY$d<o-Vo3tU%IloWO4De;M_2z6ge7K8li9{DIBOdG)
z6T9!$$48I-$m0{oe)O3sV;4LV7`yQClCe)0o3Xb?%pJ1t4z@V|5Cn#7_Ht8jd<E;F
z<?tg1-f+~$F&8$w@WN;G9Jxfh>J5HB@sDE8+sn`v_j>wwmDzUgwu1E3Am?l`S7ghb
ztt&`xLhnf}G-;P}w1XNiWaKa5FIH}HUULu6Q{~u9ylX-qsk_C@iZFHuv8fKhSJ1Ct
z^OIA=`o74k;81_(l8PP7QEbwJ?Ab-sA40yS7W)#%@KyRg>zkEXiaeYN9aVE}=6);J
zQtq3$j&t9_FXhpv({45O==|h$$SdT*L}d0C--ku?Pfl9<+j?jRy5AzhbNL!K&?g@`
zt7_TnFdlie4nA`ivi>{ocfxn!@4f{e+j?}WLSNt9yXnhMm)zC&oj0BE!|X3dALwJ#
z+}I-~pxCCdAqPM17}kc&#OAfvgJa?jHeesSOP$1z@kvcY4-fvCZ`Rqm`RQ}F%}@8C
zFY4U^c)s>MmBOq3mHX}NnJN9)%r-ymS;bzU`>D4cT0_Sp7M}dA=!8+8dG}VYB5$p9
zq89(8<MM?{7mZO?zul54IXjX1vd{S)^c=jzM9=)@KQE>Y^L`9H!FPtGW#&?JD1Gl9
z=Gn^^K1<RryQVo&XMN}8gh=}8;briJiL7a6^S++f=U=k=yy(l)MazizrD(#fbJCfg
zkW+)PhR)xLLvwbn!5ffKZyhe`D69NnmQH0`9&2&ZFB>zikn)<(#rz5f><ekTr_9V+
z4{aO@jKB|}m@IQV!rW5ZE1-#G<W30zx4IyEcA3f?C6|H9SsyZVdJFk-4$__te`@BS
z*L>6E-r{@jt!Y!l{wHW$bBnfqtWoPy&ggdZHt=K8p&)#1l36YOR({U>ed-?gSTTOA
zNhbXdoFi`e%1wod%(GlKjY#;u=Y%7QH$<PvJUaq@1K*tzNM|15sw_%mc25nbUY;7x
zbnt&G*VA0ja{Ykohg?75+R3$>>t(JzTtDY}gX;*_AGtDtbmK-d*M;wjM~H98*0F6l
z>q}?O1`?SQqr(%?t4@C~J@?1>K-18|zd<uW=2{=$`E2ei^1jgTAbm^2v)$g&;mkO*
z@`mqn?geArdKLOBJW_VjFQA*pw66@jyK7h<5goy!TzHec$7XSx&7l2*5$22kfrt7W
z#wj??%yGyo<c>9S9dZT5^vk$K#zOzMaYmeY3j94X#mrIr@H@fZr&?d&GjD_EHPXqh
z>M|REv8p7jIpyv*X?HXF?6d4~T{oh=_*7N~xchmxly}e8BwTox=6gB(VFB@-XIXdG
z{s+xb&E+Wbw+}v-hL@$_W2)OQuPr@*Q=K!}L)jEC=D}~AB_Zs)NzIk$kA3h+J$Dz^
zSYL+^9#C$kG%sK-rFh19L*pzw<6BtCx*BT;W1-9Drj60E)#yi@*HV&N=%gRC>uA|H
z2*Hz`?vvjaJHMB;--FH2I(lr1c0?Jkeei{HGom?2oW1<t<)*kf`Om7mq&cczY=2!L
z=7Ri%iu1k)UxfJmEzyU|rbX93@m>p~sM-9Jz8lq?R4jO|eCw;3dY$7}Zbmj6o|l^|
znv*}vdrzGAV%{J5s!30dB5%PPytv(E9#zACSNuFv@9|sljB}Koo8!gArA+M8c+ftL
z!IULm<orU`BZ*5$qQl<>eLC>>ND1S1oOQP)H|`LgMUPJwsXtSj7yJQUdpaxQ^ZBNW
zE)gBd7q`N*ehe+ZM>M|P*h=ryJhk6L$C|H({QXhCNfS?%kZyglBg+>;?A3;EC8DDY
zG?Ue>xlg#6y7Wn4cU)=uFQ~Tz8f2bMcEAgBNc<`Y?MA<0<{pHHNJo-h)dRhSOnG~h
z_xZY>`jVXK+om~Td7aIHb5)na_)E``{uG<-n;nw;U=P|Y@}K5(Cfg@+xe@QPPjoC;
zhW%rL<LOe5F$XfQ`x8}?G0X|!zxY*Oy)!5-q--GO$-~n`Q-+CIRx%m?wCWXn#W+4c
z#y2~{*d@WgHztSPm&M;9==iRHNk53({~~^#4XP8p!Ju<6PtiHh+g`}b7R^ZKket4h
ze35Js{q%yzR0}+We)*+CqicKkG5E4lO+5RFWDYUwd-0L;-CF3+(+e~=<;VE)oA8&W
zVQ7c5rY{)R>YA+V$eo+*BB%RyPii-XzCrl)=wI;v4&Bs!_7<B<#NvirB5v;l<U?UX
z__NQ*ui$Q-*lx$`rXgi3uWHXAV+NJ&y~>vDp^pyz_en?A8Qjm6Fh|HQR>)YQ*D^2f
zaFAEf^=#<<IfHC-kZTV3x}a~sk{&zUb02bY7d&5QKM2R-sj=;u*}IiTl6m6xj%v?T
zBYW2Q6T)j|A?K#ojci9pw6aO`o;fYq#FgQ~X37+Cm2i#bD&?BUHHE93tCH(FuIstp
z$2F5{F4s+5)m(L4w{b1x`WV+@u1|6;<!bP!lgOS-6Zg$rtGL#1t>bFrdX(!Pe_Apy
z^EvLn=!bSDaAq#|U*&p)Ym?vV1jEsVV4rI8VIPgMHW4<}-a$4MbQAnymL7U{kFvIr
z>>}ynQE;dE8~i<M66pEZ$?d7iAT~Q=#lFa%lH!D4@~7CWHc@;B<zrU6bwP4YBHy9W
zOlbjo7P4~A{4O(F@m8y+nOVzeQ<^+VNlz{>CcY{svn9Xnb7XWG{EL09=*9T;kk?V<
zvk&>)J((C5<Z~-~Tz$yr8h#CJHf3g;<-38Y$2*a4Z?JarDtjq^@nzrQGvmy@UgG%<
z0_W2UXSGGiiKcn!UF-3m>MZDk`~8VGluHgDEk1{;K5Ubd$Titvy^pdFVXNYR&3JT^
zMD3dL#nF4`?RdlQZ{9rx8OzxM4z|S^bh^LcjBh=kf&O=v`xN{~dCzqA=J$_hbIaX1
z@rkl<>1OiEm7+gP=G|3YlUlyK|GU}uA8=VKbK4YaIKHd*QFI*tq_%^|h-vWmCriyf
z`F4=gD|P-s65FZ=Kb_?7Z-^`WRC8oUZF6u(8h`K`#M~xX52KE%Q}p2z3vX^a2+q^=
z)$70dcous~G9%1&>NbNtWX3~3iRiuI9S(g}Jnd0pH`4U;+qVbXh^=D{c4~74eeC1E
zY}{-gCv|;3ua5`DJ)Z011lz|jef%u%*ODI$J=XT~6nd5VNuI5$8ugF(UYEMNxsorH
z??};)6z%OOGAldj@4>~;H8}BT=;ZBl+Fpl-)^MgpntWuM*QY9r+t1V$wM*~2p1yRf
zOWqv42|j+ppNIx(!ftO#xV3ct1DPL3KNKAe|6S!vM@QF$Q^yNeyRVmo*JhA`rB1qm
z{FAL`op9<%NjO;SJV-thd?FpJGqRS5ebDpC;xKb#R4e`}cX4r8@r;?J#o^2wCE;DH
zdr2>nZ$tPIkNvBk!()$&7n*Gm;t0d!jw9yvxQm{qxgkAE^z|e;HYMA|OFg;n9?$xL
zqo>Jx`A5?qNf*s+rL1(&!^o*@p1u)XqYq{9|3bIKOZ?&&8SC>l%v<3*iH(z@Y-m39
zd^~8+7jzC6&HWWL^oGBzxmA8H<gDhw(XacUt^C;H30BTpU6DAeU;B-6*p;Lhj{tJE
z_t9cvO#@ce_CC5Gu5;4`_Y>qd_%Z!e4ngAO)6!*$Z%?0QKCn-H>^bJqSY)l<kx$R+
zkzO7>m3xbK>YHdpv?4nBf@E{v{LmcI{Fuk{Py8`6Xnja^BfIv>&Q%+PQx_T1vl*O>
zF=_ug?1wtZU-K4}@`U>|azc9hW^60;BEy^r&iCy=MzLqm-`uJ7dwt9Ni@__<h0_y=
zWkXl1`ryaSKE}FA`;OeexUP|m1$|uE$Tz3?=G*v>Pg4HW?LV@yS(<}Ma#fyY-tHQQ
ztQukBTgD*=dA64S%-#5bMP^@!Htf3AB(_}X#A7^Pd!->C=ESNfWmV4~4`w!L?UDG6
z`X1m%wRTH=!Q$9vcPss2KDdus8)&bMy@wYvfA(722)x^S*+ySA>615Q?F;u&#t7Ni
z3SHu4+_d&qC+rVn&+-1`X2#rw<|!lp{E>IEygrFfEc!twZ01p}969hTbD<7i!@N#W
zR($TSzs(%rd)W!_?nDq;XT3a)k3JFoteIuo;?^PyY4;|RPOW3C)?{@;2OFf~3V&Nq
z8#XU-2hz_{@HM_oPv9)J8tG~;V`q~m!K}w`)iO06ME8_Vxegrmz&9l0YPk1goHNeM
z{z5l204(``XlLRib0AYkoA3=y1@1(6h}Ie8(+MqkXh&n9Z|*YiQbWAfHOQqMtW}qr
zvStTg*}-1sH|5+tzQp4TZk)%vIWA{fr=YPQ{(bpS;c;W%@K0|340e&~-PH2X{xf@O
z5=G2Q_vbZ<l$qETdOtq@b47C}(I&x;uy?|POALaAQ4V~;Im)=7#BRv^9GqQ0-`bOg
zbEY)cP}pTd*nAO|o;kZJL_Ve<aD%1L593+Q+IV^o{gq$fZ?SEU*U5jDKGQqCy*$9Y
zs5I@9#ytLnVVzAdYvg~3Olg<zLHERjB+wVSLVwAA17hp!9Q!$R$lS}<=VjZRrj3H5
zG8Rs7>V<GN<iR<9AsiRo^EB;?e9O$Ta~pbb(LV)KdJFWn(s|U(w(rOlr+1mUtZwSP
z|8Mx=CYt|wpZKvmq@9|V-sSEYrv732rZG`}ZJnM^4SHYvE$E%O5Q7eTZmUh8UoG0r
z+-t%wS_@C9g?C28lPGh+_oFX-mMX1HxJBsq#P@{Io6(>4Djs?!a|3_j-UCDOBTZhh
zs&6uRiDqNh%zoO;Qm$F?Qshi}J9`f%t@wOjAMMr{zd8&13?A&oP}?&28FyBg|JjXR
z<xnok_{*m9v0m#S!_*e}B3mfaiQXdl5Pc#u2oHOSz0}x?<}!gGu|vfP!#QIbuSU_5
z*0ngtO!TC@<@mX~${mv^p9Vc252VNSW;XTWQ}S|hxi1%4yF2*V%q-b8YV*Ct?{3n#
zNB=xCOJl6DJ-sVh_9}JD2PGR;bL3>DFL8!BCtX$hJmfpEayx)NUF1*K{{!)byze<)
zmnd9u|2)Z=L!|}cVJoKv*i(!AU-nb@h1LX!6`AHnUz_$@VxCPWG447yial#l)-ti@
z3_hw#cuxyH4atBI{ZC!*OH}fWZ01V7lYOgijQz$Ok3E(38_Fl5Z-g`XlGqPx>-^5t
zHT(Uhu+6Nvs}EoOThWB64@IM|H4@h<8`9ZHj*_47?D3L)`kx%_t6#vg@*B)s#oU9_
zx4wqn=1K>gPAq7duRf|ee(Bd9(KIsgtyc5|2fIUhgG>AJ{a7~Vd(M~jXK%4SyB{9B
z6h4g~E44Z2YuazvmxGUcgQ>UtT(TFQJs@Wu$=&b0)%xk=UzeXH0)3_0L?^`g&ot??
z@^``e%|(1&H|Bg@_|h1kvgXQ%$)~k6*M>ZQm-YsMi{|Oq`09IjuDz<Pqb^h&xv_HH
z*R0ra>0eV=|J53B*${u1d@-prdH$|P2K&2|$8zoWo$x$tclX%^;pi(xbKQ;{??8`m
zdyCsY#Co|MPvoNV4D=kquM&(ds$s8jrp&DTt52a@{1N|Vg<1Jt-Qyp9`3&ooNxo;!
zy_fGl20fRv=c)L5U%ij^pWo+X>^`R>i;<1&b*eC?<R-2ZI+JXV9>zv^J+fHqF7yR{
z^=ovqkoC>@x?~rmn%SfJ#Vr4pJd&<`<cpN=WgenWxIgzLK0><>epNm{U}6uX_|D~<
zBaCSj_|gXt^34(Oqu5&?`5EL_Fl}a5koe1TVj0{YPH1O7^`Ab@*wTM@<`t_m<s;aC
zh~Ic(06%M8+UktR*sKpYtG7k3yO0<6G$22(GwChRjw2rfbgOk^_0>J1Si>PQ=z8e&
zbbz%`%HgXHzQFGZ{v-F@6PB-B@J)t3o_?8fe2b52*tVI8>=D8a7+T*a1AM#N8UC9o
ze6#z)Z`dD*UV}bFo<!*%;%|a;CQ#H~USz^}x6)Hv0y9>pa=zrBWoDm7CRI24<2TPV
ziCN{tw=p>SLi|bo&qe-A_D8jkV-x+XoZOz-IyEdDikHUjf%l+qX8gozz*i?GH<jH8
z9h_T=uF)_*(ScvCHD^2Me!+X;DT91;QwMx>qQ{A5Dsyb=;5l}Et)<J~aK>GVG1K{Y
z2cfHcc`CX(c)dS;x}m`O!3{a^)JE}g(e&YUWAH)X3*TMHFMC^QUvHgg!i-HV<s0fa
z(!}~N@lT%JeF%TWt|u~^WYaqEL7mCnKp&iCrao9|a~OA(HPC<XBpf9_jy|_1yH=L3
z+hq0_bhlxiqwff(>E1FshdrD|$))@o<n@!i^V8!0wmn;?v_~aVe|T#m%KiuU2e&31
za;Rl~I3h8i%fJUb7?Bf<`^&c_r29wjhNlM_!b!%^h2G4kvvhBDUioFAsSx^X#gb(^
z=H6{)@20PkN739E|8hrW_Vc%cd+_B>tiv8+f5@Gz1DAk5`RF*OT|8ayqyCyRHJ_qB
z@Gz9#g@X&8!8>};OJzS*pz|JN4A6b<;Ov6*A>Os3ziYoit#eIV<fGTLH3i8(jh-(Z
zETCK*CeYT(S{C2i_;>kCgXE(FZEeJd;@8W`j^?cFKxU`=O6Dh~${rX^y^LoNf6$pg
zEo*7$<|PG*PcNOfV-9CzYEGZTSD^Wp-aVonKhz@W{bkHM)o<rKdb#=djn-ZcvUkOu
z%l{=0?ud=(o7)JFn!5xW=55xG$nh@vHs@{kz3{mNamMgV;+UvQdDF9TFJ)DkBc{KS
zIqaSy<_F(aW^MB3Ugo$<JiPQM_XKN3e)%hk!o79S(Kvh-UyOdpy^=9HLBFq*&myoo
zwFUX`dQsRt<AmKK{JzWY=@DVs<C!;#!X59y7s0p*CbntL=QOG7Gkd6e2<~K?aE9sF
zj=+TGO2r)`f0;k+DcNJ|=o@yLWa)xOd8hx-hFj|689MiuSZ6`!{q{Hi-_dy+b2{%Y
znKwGm^hRX#uejHFrju7ZX!YD6dajFphFrhnEcX6*%1Do$u;Tu{Q}C5!g=ruCLFu{d
z1ytN1`mEkRh7Q}2r{`*)r>E!2S0g?5&Pubdp)#xIipH6f&kd}fZ)T2d1s~+2knceA
zr}JTO)P&z3Kc<iC<Lr$WKaJF6W}k#U#h*H~r`sWSC;Dawwp<<e)dA-7xKBN};-A^i
zj_)-2i)??00kC_9C(x$|bcgQ$oYp%hl6#aO<!$bStZzv+ntUBT&bf(kud-gAQ29rP
zw!P)chW#0%+hy-d*8F1+<A=Np=4|I)<^+8hm-7z~@C@fB{KN1?eV5|90D6kw%HN4y
z+kTzxYw$+O?1Wy!+5Bq4g<@-jk4TR9yn@t!k-jLVR6et{EvzHL`(00`5Z`}<HAv}J
z%puK@EG-k8$-F4ro7uELJ|XFO%=Ha#!nX#=pGiaH&m`o}q(SRLDR=`iplb;_QFl)M
z<d3iT3I5&m>CpuV<+3{8-pO5l{F*7+Azmu}_$F;}IMYG$p$Xje!CQnooflD)$8*gi
znb{N2>m~2ydyu@JwB!NHcf@;iMQ;^N&CB}g#M>Dc!4X`+7u-+|rc-NX%SSPZt6KAy
zvF-)-LF$i8BTkaB@hw@t!z`FaTncg1#M~^w|FR4nXi|XvHIFWgR~Ua=3Yn<bCH84q
zdQE<fJk-$fY3Ma5f4iB~7Q}ZZ*^f@p+?bR7x}SauxiH9YIB@{?7N4wRjyDs*|HP8~
zJ>qAO&GJ=D%<U2PaPRFAPb2qF4kPz9W|H}yyqCQ5<;nXSCF{XK5Wdxb{921`6U5Fj
z%E@^Xek$I{Un>6puiv+}Un1$r1?Wl7r(iFfLw*@>Xrzy=Gl|L6p&S*5OKa2Q52%{T
z|8v))WB4cS>84J2W5W82h=p{n&&C^yZyv)RuR25cxfz4>#3ifyCNU1~`y?NyHn-x-
z=^zin(ccpX3k^reSrG!ZWN(Ny`5<~zh)Xd8mGFUHbknSkpYy$<e`~)leuDIqtf#4M
zo<4P0Wt+1y@-XG(D@q}M510DWsrMBmeh%H9r)$pm%G(#N{d3a$?c4;8bbd?ks*m}p
z{bA~t@MVI~Gk8+FCqB@)qdGA0__E!Z`g2p}Ti=@SITGBRDapg#lmg+aeaTYArcXY8
ztQ+15JTp~uVs)Qep2bfiG%fs0$EKBz*$95%_4sD9Hk=RKNVg=;D<QlL?En3kv36ze
z$FjKrQq=trb6xo9%*}TXH!khO@0d7K0$$1sY<`b{z5~bh8#wY!|NgU?`p=!E@8DtL
z636Odk#Cy%PyPjY7k?yQL|K*Ivo85u?Y3L3FUkk+b8@^-a?|BZ5BvUCyl2hyg7@b#
zv$36?lMkyrI=?^D;qQMo=TkA9eI5js>{Izp<lBj8%?_Uma`L&;SJ$OGYE8m$4!cuS
z*vA=R;34)JCr~9$Y8;Ud(QEnTyI=j5Gh@(KrN8JoYY)%SK71|uCKs=}nOLElcqW~R
zT<>m2Vf$J1rqqua`vAU_P5j5dsF*tO9gSgz-0;dDPps8zDeNx!cl_`iVyRwpcTa84
zY$^<AUN^)Inf^In$ZR_II=lus8ErGOANo4+F9BpIbA_?8Yv;nXnV!`%S(8k&Kaw>S
zWFF5y9Wd!h=#MTiB<I8<L%bJ`<m*eeTi?`x-2S@oNPBwf#vuEy>iWiC(;C)`E&o}O
zJ%7Tj8-Wftxm_^M(JuSW`W3U!)K;@8GyBO+8t<u9+kyGx?_})$FmE0I-?8J*ECnAk
z!P9;xQGoCGVaK%pMERhRSyA=^JWe|!@a{FpzZgDM6PVJLs>EN>eA5p2O@evU939V^
zLkqZIE{5<Yr&^fP@MieK@nA6egxkbeZk3J(U0q+J^;*`gI?7lFNN5Zh%Y=)p8>$1i
zX9s+Z1GrJ#Yl`^UFgeS^<0rROo5{zcRi+-D%bp=$j(j?eJ{w+V_63WwI=J*EeW$V^
z{8y>9|D!K-bj^NC-zRTPhZvh6dXyb6XhZ&*k;tM+r^#zomyLh?4fnEPf~T@N!*DiC
z9eoMq<eu=KJeisGEpRMd?$@;MPI9&Xg8zys`!VHK|MR=s!OtRW{MA`Jj1K?hDe^5+
zzL!3De6JQ+?!GTO#}B>FN#C!wfM1RM@445yz%{^?uAy;zCW($VNY|KR<=w$%<`F)n
zL+H&uGo=I{Swj9L!@YD;%{Re3*o<Bd{T*84q+cfnISLIJ^e#{S365ZRWmWDc(z&6f
z$MLnt$T_eIJ~Y5zh}rP?hxvRSUm<S8d+ywy<tO>R7>g5PJvPIugwH$ZV+LR4zw&Fq
z-y7;Pv>PKv#~Y{5y~8uc@ZcjKi~Es{^1V3NYPBnxSTD=2?Svj!)(5S%u}-?jg;w!t
zPLvKIeb-=%iZ0>z&FhehNyg2tNx@_7J^G+x;XFN8GN%~1aSr-IH?NX>O&<>=Iu-`!
zSs1LxxqqyK_9xrD`PG3b%`3W)_k+e~@_;^)f`<n<S7{QLY$fTE!n158=6RRscrr4g
zF()6Q@I<xy9C0Fje+(oPe=nZ|HeFS|{-^y(YNK%4ceXAOT{w5%Y1*!sysekh&qs3o
zWKLRpl~~CR>{Y?CFx1Zs{e=Ef$is5_x#9a4*Lf$S>q_6X{k1Vs!}OK9CJpJU>N`g)
z41q8S<)S<I2z+>mu50_sw=Q_V{z<eh4eodr{wY0JF;LaS*3KY@OX?>6GY3RFik}KW
z1B#zg92LCF#@l8@3roQhJdE`x8^0YAjV<LYuN-eMo8R63zfYcz)q9mW+{&EMJn`nR
zZ0%+6P|cfYZjNc*%%Bf7lvSG=KSHij=ryE$!2A8$4>C6OOMl`P=v?{$`t3eD2fY|7
z#xwb^?+%hDUDO@u`@%QLW#8T+U;8KUyN|g7-zGT-Z$<ZJ9tn1goV5{R^;^*4e4j>d
zfiC24uc9u^$prR<`lncA8&?LNY+O6|84f4Eq5r`s_7gsT<4?ZrvX(FrSfOVEw(izi
zbSLVSPNuo5d93vYtu_1sTkAM}`IDu{26A%RKBAK=en0x<nBC{6vHCV^_nHF%$!O^D
zrl*|nJpnTgLK-hyMeC9UTusEaKO8XWO{KmWPd1tM$M310(ZczzQT9?<{{ZrLBK#nN
z4O&PX<#q3JRv5mUr{3=*9PALuUirVS<!pdAUckRdd}RapYejZEwb;y3JtMI_1C){f
z$Kkz?vei4X=Lq1d-($|zKB}0`D&i;%<EZwr&!IU;P7wTpRpPtg{Ix^O?_PMzLFnuV
z^rg9e2s#b1&klJRmS3imwjm=a<0Pby^ui;;*i1)`<NwO|R=)Dz<wq*0It484n>hiz
z6YPWeo7>E+aJd;5D)QYCT*o>wd2$R_^>T9Ryit>wyzy_!+}CTY4=qMco1Ww1mswxS
zr*iv^BiQe$*L{h}_?A@HXRrlQlsiP6&<Wbni_hW|?N$He9}S(fy39uTATHK7wO@Tv
z`@aP}u<o%Z1irL~VjlHBg&$Jzm=hm(mYngrZ=+mwq4_`;W1um9j{nm4JiN6PzPrhT
zsXl2BX$pGkX=3jXJmPHAh_K{a8b5+?FJFsr-HPueU?$i#@QU>{JN)y_j&c(?-bp?1
z`;CfCuzlNv4g);JfDvc^n)tc$Tgum<^HRiH4x_6*1WjrG=OlQ^+y&vbvrpsa;hPhD
z%YvHqxkz3li8DDpPJ7NKmng?u3-MWzb<UYr83)&opM6cF&ku~p{P-M+#|iL!%N8eG
z`)<*k0_dR-T8%Earj58TORIIzUkkJv!<X5S^GO~eex128PGv-^4W{6@;k`W@BS))V
z9{XFsdkenM^~Hs4(dVL1On~od9vlFVDpSY)%AaBr$mgPcsj1B)Ig^9^WSc({j}iBC
z6x^P`W_^bkAL%CYsfdppg%*GO?z`4zcW(q{wUd4WpZzZ;kjKBASm96lEX~&_Mv^NO
z8PQ(r6xp+-L*PxgDL+@l`YY?A=ZfRy=SFgk;ws^~g6ln8SH=%A4nFdrQs*MpAk*cu
zh*{l1Jl<3@bM15boiuapHvNv7x%LJ97SHtkCHfEJR>3%Ff5KJYAWjK?f_w-^q0t6-
zV;}Ztjbs}#U;m$3V1~{0)WiIhZgmuyI@M&?>qKWmZM`1o9$ltObKofQNj`?P<!1I7
z_<OhZFKJy8JPL23PqpLp_5Sp^JU@f??viT^eCK0KFI;2D#=U8cA^up-m-1dSJNbVR
z-?ldAPrm`ZhurDb{`dj9JnfYoa&H@R2Yi$Ve9c>CkaGxoK7>y*WF{@FaOSmv``02L
zoj2es_x$AIk(y6E(1qeB&wVmG7bI&P{OssqZ4SP4&1ZKpzxdMJ%$4zAU}A~JC-gwX
z^6D~t60!q@SK%hdBUukdro$&4#i6}n`ppE+c_zM2HlTCUdB3$|<LrvUHHx#tXYGu3
ztk2r9adv^#HLR7%XI*<1-*<*RtO0!8bMalXt|*^%4}R>oinN!xCb8@){4{fK3$y=h
zZuf_2<BBiNOO={AyZ$@85joY1pQ3ifT|0XA_!7JDm!W_5K|gP4J{!|o=FSA}O+{hw
zo;G~j(`#(}S8V}jf`XS=z|2X$R1;1Ts}qE#-TjpP3zco^lPpO7EbrYfdH03fyFc=7
zSKd4Nle|0k?ga1tCGQ<R{NyL}?yep3>-S)*%7>YPF13~_zw5(4#qauhZY^U|7VpG{
zwQH}wk8?oWA2@0J#m8%iIhD=VQ-VJ(e;tIi4$Yg+oIg(Y(`zq1hcv#Ea&u^^)eW=x
z552h~zvwRJjOQcq=8b4V^`8#-(|!0v9q3={DzYt8_>_E0Dt4qwJ{Av>^I0@mOUywp
z^ImzmWwS=m3x>wSyPN^zLa$+RJ0{`nK6Eutc1Rvnqwm(SZ^MO7|Bd+@#_u1LZ~hT*
zW&QP6b$t=OqPVmVJ(Srr1)T_;(B>+zd8u-9J(`>A@1l40G7h5M9>ziAQ4_!)cD?Ey
z(e(m8>>fKdBf46D#{H4o!v6z)?35y>*Jyl*=R(KSm_^^tY?pl1z1KEJdL-@gd;k~p
ziGJj_|0MdP>{sGhH?F~c{Vlqh>|pmxSvy!Z?|>~#e6so>Th0CTyR#2tw}m3YHM-N=
z@770xS^Y3*vijj8*sfkX<Ogy7?cD($sIh#Bx<5@$1nX<Dc+dJ;B!8q!BBz_3u1tLs
z=jMD=`aLj)>Lo5Q<|gvt_D|8y>+x^mn+b0r->G5!s3FRl27HMe=Ha`MmD4Fx>@y1+
z%!uY1Xk&!Wl=#VobM1n==iSZz^;;h(8}|}>NcCM3pRL|);rTA=PLp#j$*=4`>A2qh
zGOI&On-7oU410LrPR4gGdwMjk+GF|s6X?TZ3ht<(Zt42O#H@@QeYbuAxRKuR_rTPz
zbk5tk_r`G}b$IuW<lXCeguU;-=hu!I`HRUfd<XuAjdwzu?;yu)o3LXi;PcepBdzgN
z=Gmz}=4y4|s^;l)O#RK+sY(Cjg<6ACn>(O)t*t!yXtXREz(!qch+m#u5`m`ruty}@
z!uWU}u=Z&-Z?WuC{9uXG*r+Zxs^XMVdA4#nd2M93>UsHsS@TvvV+YX_)&bYrvG5_$
zmGZrKbEg--TdnraA}{n#F&^446=9BkmhY8QL+y3<L#s=TjT`jVl2$J#w<a-KBhUps
z8_wN2p}nh-=gh~)PWNw;ta9K7+4=6bx}tmy?)CIRKC`8MyMN7X;Foo+&kN>K=3Jf}
z7Y%D&Hd<)5yPt$lE~CunSodn;ca@WF=f52b_PzHE*;ne(kMG|(M~1P>&-v-~O|g)Y
z%MHk7@fY=P+8XY`7fCuVzBea8d#dezoQ)yRmfTv{{ygn^9vtWMQ{{}fSQ~Yg(U-v4
zMc*II)PJ7$`Toux;CXcG^+UW;eG%XJr%Tk=$r(l((+Dv2t?hqDw%_=gHfoQJkGL!c
zybF$3MtFH8_dk~RtFc!Z*|#b)utyhqVgF5HeXgwbhpp-F-=ukVvA%Y@nfe=Z?Na$$
zxL1sy+9=pf;Ff%)woUrKBJcj*+`a8j?}ap^K7ZvBb*FyAnNqpBRaS5w%E5Gd%iHIR
z-kQqWKTIFo%JTNe?^tW@y}JEW2{h6>wf#ltFpBQ2bDg#4*6JI?+PF8}nt;#Evh-l%
zS+l<7*aTt}DsQvz+()p}sng=W{#ND;H2*9yBJflDo!zsQ-P5c2V4vANTT`s>T6GL6
zt2iI_0}m>j^K*N+yy_CTXyuHZUq$*i&85sxI!g|f-*s787a69ka#)Bq@@1#tTyfFp
zzkBcKx5jca`1AP4X?T#n!&fjsfB5R#Z&H36Y|${kU*%m)_#S57x3V|&8QSmB?ukp3
z4Y6nSZ*yfOKNG-|{^8_gyl6rGCBgbJ&pKsaS^FXzyXN8ZByGM}dwlF)6`XZ>^~A^r
z;=$55eX>8Z{SUc%zMJd6_MYmyEth~DdO1`7S+B2@|K26~+Rd3o%e*$^c)I5D#oArN
zIYytL{6*ih_NVq~{60!K+n-_9R_yb<b(Pv&KV=iVbOU1w-rYCP<3l(VPSy>SE9-iJ
za(aGpF>||zJeZnqyG;97=Ij>6M0`uW2_Nfb4&UDIeTzMG$GQGZe|d?1`u;IfKlKv*
z^u3U&AAhO$KgrZz!F!z*ZRs8U<NWi5{ki)R<CxmPzU7AVG#jC;{59pdc!8n6{hXil
z6>^Wh6rI-IACUhg`Wkk@z#jN(Ry56fk!vUZvPSf<CUmtH$Gla8u7*5LK;N=E$NE^0
z()mUP-6$DoIN;=Rsd{G~sUG=0RENIPb9Dc)4&SM~-s_#2o_oi-q6f=+SBDNzbb~YF
z+Ud@W&n&s8Z^e?k`+_6oH*D@R{BE7^tS(q`Z(oy{I!<|qSnItH7~__+#^pn&YGKVQ
zNc+gY^<XP{RV_Xp<$CHQ57Q0gU~-n+v!lZou;+e#k33A3<_eqliM_q`*u^C^OYXM0
zq1ICVBb2YsmCer)H4>i=KD3f*Y^#`J38>HP?YPs!LzF!&om}=k__TOXnPA7A!h?S#
z`v<KZ?=Sfy;}+sS_`O5*yZn!m4*?&f{XT?mKZAa(T$(MuQO&k4;FvKTWe0O({vVC6
z##Uq8VG5gDhm5a$4K<9fk1?@hJUu%mUSFV_H(v^lur!lTC(_qFI`ilSK2@Jz#({q9
z_xPAZbNTPO!JGG;r8Cw9wZ4!oKgO2#;9v4P)=&3(-?^7jPsFsp=#`IMM){~|-$8kg
z)}^lzr@wD2zh3(cHdlw9J7%Bq-<hD<r&tN^{h)c_(Z1#dxc26S514jt<mQdxeK7w$
zb=ddNmB!|R_tb6Q6XP=Md)j2*2Zw*}uwP8?v$T4CUaAk?+^n9TJ*zefO&DiZyKh0`
zyzG5Zd!y#E{u{H}K<nZ!9u2v<9Lndw$p9>J47~yk4Zz|oM-Nsg!oH`=gy*$Sep0nR
z5OmUY$X@@vTt8_`1+cPse%|sQ<-<~(Q5m#TzJzv9chcpQsorf?J0;A!Hea~<9{$fY
z#5QK*?vzJs2eLzPhRUm@_`4tT|Nk)e?(uP#W#0e&oyn<9?I}Hx7BZ8RLW82x<IrNh
zNlJmn1xfROf@>xTNFl3OP-tl-le8<a(WS$w3a*{D$dd4|B5gGzuAR18VY|CR`v@qm
zok@Da>MHb<u}$ZBf4(!{WRj*n`uz5_zvqv6&CK_EAFtDWUDtix*R2>t-OY6RGLy8u
z%IkPv?~}P^Yh+1UuguoPBlxYPD;RW|$lR>omuLN+G4Oj!F?XPIC$a7dQ5>W035k&B
zr~j@H&p=scJ>xu%VmA8E;vhRzzQ4~w<tKJpMfe98iyIecake%)r_Sli@W~behs)CR
zP_cmDHRQDAj&b*%uvdVA{1mdm`?woGI1sF+K+lse!v<ySlc|qB<iw9FSC5<PU2v4|
z-X?z2gi6V!ZFN}SBw1#Xo{%@Z(Q{F+74w9xcJAD=b2x{Y8@AS19g*ufcf&g2$4B8~
z{f;b7$1P;*NRhe2Jex7hvq{4|%Nyp|*)%=}^>K2TXWtv<**^{Q?73l{{oOFn@Fl`i
zgY>@$KFo8T;a5E88NShTo=r+W8w5Xm&nlPwY%8=^#~s@8WjJ~+IDP{9`yTindcI6F
zRzz&=<D4-Iwx#JU1|0?;$ohRx)^EmY)1Oo3imcz|S-(rOeisk?R(?WjI`K}>tsAdv
zapp{87&=$k<<=+DWs_y-jhtV|rf-)H-T7%P9z?^z{{k9rI}Z)l4x!;C!_eH7!#pb=
z=2`JD&qfaO%rnfhKb{M>$Pb2j_VO^#I){1o_rpB9YnW$^!#ulXm}j-aJcAyF(raWG
zy53sK9b10}4M#@*KR~~X;lG@I?f(M$^^^=RgKru_zsTgF<Bxo7m}i#{^X#Hwo{b*n
z*`F(ye{?P^Bj4+P_PQIdANi+Yo;^0qv(FFnY(Op#v^OA^2c9A8GH@Aqc2W9Sw!DoD
zL(^N!2hs2AfdLsj=!|b<{Qm>=%NT~v^DmIU&fLzCzrMeSeqS0^hiE$w{oXQ!ev!vR
z#~-O0=Ghg)JS!dM+4y0e4anpHS{RVY1J8Dz3(G8-JW%fCVah!<%(Hujc{U)E2ihBu
z$pg;@Wb(i>)@H$K5d98A(_63jGwB!E{r|iEz!-+&|NoADf7oG}f-t#3Zjdf4oz~TJ
zr58_*VRP8n7omSx=*eOK<v4zr)uF4{v*X;gM|-z{5}${AW-ApB5h#i01xjAGq7`SZ
zB=@%`Q1XS)Rq_EuUbX_-izpeD-&Hc!1h#+7B#)1@qZ6<fq_bhGygp@!yoh`L`{68G
zXONzTeUlo=e)|ym**=3fR_N-S=cU9}k>^u3rE=7#?S~&bc|K+PrR~2T_1_=B9mAc9
zga1}4wSEhI1evp9Ql&S_RtV95Xh`3J=i~Grs<Hy=NB#A!+S%Vn->QFh+CNcbk`s|h
z!m0XDU%~;t$Km^8K12I@ocTET%k*`k$adz}w`!NuU*D=9b(qniz1SJA`#Br$(vZe3
zf1&8gc}Kin$r;a!*iJ7Q-$mgTPw1+k2YZ!xjg|+kj+O^Ke7t;eI#k!vxod3PV7YN%
zq4<rK%S~VQT=9**F5jr;W-$iA%%-l>pOd#g9k1->n9khMP%irZ6tR}Ny9N8;b>*uS
ztt+M(8~OE9oKJIXWODEuY~-orn|KBrIaqTpe1hyl+TcfaY>>UY{@)+Y`hCg3?|Y}(
z(R~>k`3x~;vXO&@=i10>&$W?dcVyehD&OA^<8yz@=PVmJ1PyN^ZjC+Kqq31T2M>ON
z&CE^rwpE$p8p~YJUWHE}2)qpM$URtNu${B*4cX1QW5KnZe@Ojr!lUx}3GXhhC*T7T
z4^JrIZdu1}p5WLmE=`IK9K2&Qn|N;6!4Lb2!heu;Som%k&+p5Jfp7V_&s@AawpGR_
z4y*?C*|+M4{kHw&OEY#o{;9!seVQ*_{?Hgj8(NoT*FXN5%A_ae3Ac{Kp2xoTWNi9Y
z?!66Zyy8`C`p}uw>&ACUxWbsD8@Ycjh#q9{k3zfA$T&0Gm2Dw(&=9oZ%%6Q0%{w&U
z3+P|3LIb{lfoB80fPrTNzJP&e1A6GdvjIJH;MwjpTnCM1Ko1=#_q}1tJw42``-XWo
zj2;>qMh^`QqlXSB_d>(Srzbgg{BzFODo2dN%kZvp#DvgKi{RV;P8(lq2Ylz`o{^2O
zF$~4G!_(OKDtoSdpQcA2d}i?V`uX;=HV4V6<vfcQq@R($KA2~vp9Mz_@RMkgK1El-
zVe}i94jsPXoUO*7d*|G><|clp*QWu$STFej6_Y0)7k-D=1NpkUJH4KWS5C5~oWO6P
zdhVz7db{IZkF}@8Gx2CC`xN^uvu({zJFtd4<C_2S{p^dK&7W7o8M_AF%h!=DcU(V*
z;;59P&&N35^c1y+;I~tJZ}SxG;Z6_!o8)g8vm@7Xh>>7zQ=L<uiS3eWDsRk0r`$o6
z`*ixA(IM+Wr!z17q?(sxmEv$UH{x>lYF!AD+f2OuE-|(idrb}WJCT?mXl`~8nq0x2
z9r;a;hM3F!!2QHsv*#lZ!*7lxfBH!KJxk{uvf!ik6!Wx``zYM@4DGT1Fh^@`aE5dx
z&Udm0Cb;<RabZ`NaDAEk|JXNqgNK-P=<F%tH5%wwc)}0u<e?DE?!U++C*_;uub6uf
z_!Gko{EIrr0e?H!%nbq`w|{3o$<!RRqg-(6Ph*h&qCV5>?(XM*c)D-0BQsdf-8eVJ
z^r+r!?s|9@8qt|(jZLxNZI3<mbmGGXJ|G5%HSz7tSlH8d#`2%Ph8Bon%pQwi5kHxl
z^UsuZ`ns)JI*4;-FpcZQ$yWMN46#2>ya#P(!#7oJz0tSI>gcPMKI?IC8lk-Q(@)&$
zMc*YB4!Bs<Uxxg+bF`hjqj>Sm9j2i0p%0ij9~{AbomN5f%wkj5I1+v$NA&N!1?5MH
zKVO8rzn=Qga(jq;Zk$h!##RP<IkT3Wz`3Eg_XC|e%kg*QyzBOkEFVu?btC!ZIKw-y
z)KZ*haQ<P%E<#5ei2t9-{W?3zc~i|=+(!P0HJm&6$;zhQYTDgIo7F3tdK=k8IY`W0
zz2#}%!9G;mB<}5FzYTqRd2npi1BQL9Z<DLKWv&T)d%}j|+ppjZ2D$!ba_&IuYXq8T
zWKCK_J;iWqKM=US<i_?q!E>#j6S!B-dH(h_X&Hh%`66prh+N_gn-<R$oGi;KbZC^m
ze9Y%djaIl0nl;xhn~#1L_2rm(tbfFZPADgqF1d(UPw}PjkMF$P&M|Ye&O?h@2Ve4o
z6Q_JWan_V?BJNUn-N7Ar!c*U>$`0<AAs$RLS>5pm^5h&_TGauL!^TtcraK1puW|U!
z<j?&g@cvU{FlSP;p$F#<@&x^Aoa~P}{aT!9RG;X{=o3}gLe)-RF>n2wLE0@b_WL&d
zJTX4R5q{lclCQhq>-xvB>~r(AFR1=gUSf8!sj4Zjxl9KZ3E}`<Sj5rGCKl-YoY|)G
zDx<kpQr^zME1n0upi#m3iyt!q!#-Q^O7vo2c;A)qG`LkgKeXbb4me0MPI8f&+Lm<r
z8-vh;+V`(0A@>qA$oXWoul_?r>IdNi;aPkEE@$t7Cq(<2pT=&OpD&q)vBvZqbN#l)
z#J6;~7U<>Y#220*c2V(6KIWqSMVl(Gc7!V@?v(yx$5LCJF)@CP>1pb0W1oH^_5Y~)
zl(($BLe)`z>r-XeUBcb;bj+mWbsQLvIqt-AI5_PFr-DfpGFCjUIt|ERhu*U8^UBs?
z)s9(++(AYLnSTTGho_xA?JDGcwtNYWBrm~S_MhQn598LEc4Stva+KwqBlN?&23a7P
zU=))Mull(ERkHUNXF0D7A2>WP1opz+1m%-<X#qSjeuoxR$H$oqcWi!O-T)oAV{GEw
z5bG9aYzFJWsa?a$LI+Ngg(q3xPc`LmR>R^ByIl4ey`87;%^M^ms~KktwwPi}pVFH5
zG1jVaW^M!bl`3!LoOMqXKgmsvn$s$9%(}DHSDL2FRKD&%omk#O-q`8n&~WplIxv`P
z2TtVM(Js%F!ZVb4(=)LK_|J7@7V@F#a>>wX<bIjlX^giW+5b`#>wFM8p)YKfiG@LA
z&Nmp}e6Q)x53F$ov76_Zi8WvP7%(!^+Jo536M)|-&$RYA<gfT7If~w7y%SCz#2(go
zT$wPGeiEgwOb~3-GT~IyBG$#Lv5yvWSCJKtdF$W&6ziYHA^XUM#TVhxC*Z{=$l-hr
zuX@wGI+RaEyQSb>GEY3=;Qn-Kj`(^ZI560c8uwzCmY~(uS+YU%48mIt$o|l1v$gU<
z<UjB#ACaD?p6h*UzS;UE#<z{}ZTr6(-$ZA8oOzxzn~%n4GfwgPeD34Z9afF-lH^wd
z_|Toe_=K8EC#TodCU^+E7FNS2Iq*;w^A3(O+)Z~|m)1Sb&qsp}4~dtmW;TLLolk6m
zuY0hw9@beX;E<DngL$7Zh;K78(&t0=Tx3>0MLuuEM>arjt-bkkW6WDHc4el<-2yJC
z*DouD6BiGDU@knw|C1azy{Xyv(U#&vF33yM9sCfz85%t0@wQLQ(46Q`G%LE>Mox0Y
zTM{qBIbQO-!Y@-eFYu`h-Lgg~PuY71IQ#LY$JE%ya_X%gyZ&kT?r5BxM)w^^&G{d+
zk>H%Q#*2K?TF^gUKlxlW=AklPv{QF1HTyd1X5;$r`2QAg$mSD`-yQSB!>KtpP^RTd
z69{si9(flKpNdDttHcA%ZG?_C0Ry!W@|yOQnfZwST;9|CrI$X*_!rP#kal$U?Lb@P
z0O2f)c%J-XTfa~2pyZg9DXYHRvWn@BVK?agr?}@WpEAE-4_7=V91Mnin&*EWPtCbd
z<v8o$%JA$tYi#bEzqCI!XFO%ULA+ukbMk}B257Dd`O(Nc8h)LcBOPN5WwPJ5c|Fd1
zKl#sA{6}i`QR3SKi?@N7#^$%@avxKuwt+TuFYQ*=w+XCo2huTf{cD-%v+`*Eylgy8
zqc3OO;!f26#kzW&dOm2;kyV*{QTNi0J2!o&)=1`iJNkA>|INwx{t7x>`F4WXk8Q}(
zZRFVyjVC4>tuuQ=d?NUoO7P=a<k0}{<V~}kGo~$hrqA}6x!5G@#B=^&QMiD3VYkih
z$%EHi|A$Q73F0wSwr^E6_QRqM#^uP#(0JAlkC_)LhKBV$i5zv<1FfUcL;JRmZ!4uw
zV%40!)^8~G$Hs-Lj46-Pw~34+PpSRBe{AS!FS@nL=)L+mKrEy?2aR9z(4E2Z9jZ_6
z%<J<_PWN}B$%O5x=`rBTnHRc<F^%S%zC$DVW-Kx3sw0tUtlfz+>BvQ$-=&Wrc2mz7
z<SXysY3E#9HvAixHO%)c^UwFA<8Q*IQyZ$Uc)8$6)(7g^<cV<bn(+hu6L@Z*Pwc|x
zkRSP&w#~+Q$=6z)IcwWMUFnu;OXF{yX6AG=|3$tc<w@wjgPnfIts%B)7k$g$n;2uF
zYZ$l2tnvq_e~|Bl?slf`w?9!7ZZbLjcRZuB&%cd(7wb)K`dpqf_lccPFg|pu!b<3{
zyUavCPn)!njPoA(!~N$I%3IOH^o+UgiBsmK%y<(MGh>a9cg8wsjLb!2yd`UlYV$y5
zjB5)tKGSYfS8&$3nnuRQd1+^SDl6EkzsEBD`MFEmflVykUp9V*>w5ux3ookELwi-!
z6MQ5aa;9P5XW8%7^zWtr4anw=#0+NluUK5+C&4`_PXD1lum7p%n>*uh=1x2A82;4!
zuc!YW=Fn&c;A}$+F=#<FBRGpDQl~k?!hBU$^w30khaRAVtEZdrZOm~IbKH(yq&ap|
zM*1$cXCMKbs}AMQtt5uO`x5DZp5`F7rs%5_+RK4vZ{y5P3wPX$P8>Mc18^7w{|tS;
z!*~Y4pYr|iXFTrQ_5G*dKZ^OgW3tIxalSEqBdc79INbA<yF05~47>S!<+Q%K{Tku~
z&sS~&<plr3C*TucdQ$(vOHbzik<9=7ng74c{C_9&U*}d-|E<h_#dS(9?c=}X%=@eb
ztofaiQOMYB5zf7&&k+ok&vC}+yvx{8sw4Q@oMG6g^F$fBq_Yg!|9|WLAGE)c_O-kI
zGaoTm@}bLzX5mMd4_$sV<kuiSdJucj$C}fCKRvO=emR(zhuvM&DI3z=3);$9o?x9~
z->_FX+a=#atWk=?Gvq+{(r4I@lziv;c8>|PG@3rWmrqLX@Bi$;dvvTo%U$XBy_xqb
zK0olj#LN48((hS6)@l6+-pBqEcTs8$xv$g{4n8=xBlzGrKI1#oXUl^{9W8iZ294=^
z18q8E`oWMkf5f^<U1v{gXZoGf*KU*4m^B|C?}KMANcZtCL)y<{?=^eQBQ2+Y;ZXG(
zHx-1NHjN0YjKR;lfq8#%w3TcbZ}mC2WS_2{{Im7sn{DB{Mc+5^{uayeA^3%V{LiI)
zSK)uQ3QULd4F9w94F9uLV5Ohof40UNbR~4QOR>So=T+jvuKA4R%%x?q6)5Rt@9sIX
zvgI@8pIfSO&kXkUrhVQH&6Zl>mA<pAuU5F?KhCblU%gIy!ua*qDTeQUbo(Iw?fXZX
z*^1MgNNx`N2wNj<@*Sk(^CAyq{k|vb_f1*9ugLn1t=(U@H0wA0xX;CJ7BPJCm&>*j
zZOM=A&?e&&?o~$L$FWuA7u|AG-+J+?%R3H#QAWC3FVFQ~yq|tPsk7kbzV*oH$?ja!
z&!;$dgX{cYEYpX+zc-|u+RLuzwj11(8-9>+NTv)oj&7cZfSdbHV{?9I@pjsO;OXdF
zBVE$#_)@>PDKG5EjvvdPnnO&ig%2UO<9qCbz4_Qj!pT|WbO2|kW^mq4`XxG;C3=1k
z{Ra8n;HkooHnF)3e|f_w{4MC(E5uu8FC@P`XF0JM%^lkJozVGixp|@$|70cmimk{6
zAO12uSGhN5m?wgV7E5273%}F`J)VI2aN94%FS?Spt-k!Z!Nv5!ex5m#A2x5_|5zOV
zufYb+!zZzy+%JB{Vx~%8HCs#Y7xk3sK4;x?G^PJ8+|o~x3mu)Xfp&u3taU!dX*})0
zZpMnw$<O}^bb?CkQjLS09ch2vgC>eDHu*rN%^q)#)2?#K$=4YJ?%KzQS99kodG4&S
z>A2{Sav`$UYo@|ar&HTv=v{I2e+Ngv-dSUSuj?~Sus$Vc$!A)HzFm#)auM+dSNHoT
zRKJ9_)P`c0Y{6`=@@s@@b#~V9{Vw17AKa7|aO2>0Zo|QMX01s3*9X(Yar{TwG=X2K
zGaL6`BCm`yZuSjKCf6`BFDg0Pcni8U_&5f9BolrAyrDK#X!`200Ss%i?rYJy@OLF=
z*H2VF(IRwn=)v*bVgr}1XzZ#dw@DBjrtjdM)OpQ?>??qiq4e#JQM!-D=lTdYQa2lJ
z@-N4{_0ArW_Mlo>TYG@Z-*88g&LT6e8{<VLTJcF=R}cRkKjdG~ALAOd{tob6I_?AC
zN7CziY_E6c_ujAOJbV>;X!Xh`_m&;}&ik9^#NMwr-lNyihQ{c9opMFo=djxQOwK5K
zW_<Iy+Tc~4_q4D-u-3*myE^iW{e<1_8Qb=By}9FCpW)L@nMTTlMv-eNKiJZ^debxe
zr*0Tsb>{YcRbMqzea2piEwX$EeN4~co>uNns~E*6$MmUBbR6z$$KTHRiQ(QW21WUP
z6eA%1KTw!66R7pQH<g?)z+QEsz`g^8i)Iejh8tgkZ=_S}z8RIajY=InrDG2gp5A#j
zIAkna6H`spfgyTJccJtO<$6H&5O1OVn*_LW>93pdIPV!p0$Q?-!FOw-ZoGo#cSCL8
zdUv1D-S6bCaVK^JdB?t3=AQC31#cwbXP2&eK5Ue8w>(YzmLvD-$x{>|7tk*`o6(N%
z_&4O&d<cJs_+N67yaMBuXOi<>wJ&nUEAGuL$KL)Z<Eo21aC?_w{0Fdqy4i19i%+a+
zWn*v9@r&Koo3qGXIo;!%x0dy)4L-=3W=9`!&Vh|`&U!s!K2S(rq~$Z=Bl7eV?!aCx
zVIOJ6*snaT`+O}^HB+`5KK$@@GxDgP{X`#fQRN&NzI#z7=fwq`HZVnRDmS{<gL_^Q
z9?8G7kG(R;J;!Ufv&lQfiNhGWUn!V26)<-A23jtZ9s6{-9ew&#YL45F{L7Mq&RVv2
zv2%y;$r^H!u;!HzN91P@Pj?7g;LGnr-{AgWNAG|>Wamp>>;7P5s&l7s<jmRin^}jN
zreBlvT#QWZ$qAR5$orD7JvVTMdp&ZMIYs=)S<Z>aui^fV1y=G*g_X4NUmJ4utM3Ff
z=+pk885^ET+o=-KkE6TRvK~b%CeRk=Oj7t&QrzL3sMhyHeCYHEjdhP%+~N7Er$e%S
z^>5FvcVLL^UQZ6Z*T{=<ko&=0e1H3vRb6e+Mg*M43ky5eRGDxk__4wLDsn8eK|ejn
z@M>}(_mJD56nbcY7L>CvL9PZr^k9wm&5eH;-}#!{aB7R-l3R|fUEYn16>d+FTeHVI
zxjcvcs5meSW$+qdz0rI8?d2Z!q4dthc?^D!Z(&^M3!-g5efp@U_Em?u)_U++XV)>S
zpcB=Zkgnt4^?~aCy73pzmCxPP(z|Gn_Tznus~PRY)%YJUgYMnbcwC%_e{JRx8ZtKJ
zT(Q96CTO7le$8vxbCNEFZz@K4eOuF82bU?q4?Tu=eA8>dH`dHMrf2Y&>bmV|O|pKl
zcCTO*Ur$b!1(ncF`rafjb7(*x^4k}OIqR9+0H0K9Pm^<Aet5u|Z=wzCK{R|M4M(j<
zgXW#NZ*(JewGH36Jfd~SmOR9t>dgO7-8<^Y*<s+qbBlXN-FdieYaS!vzgFhyBd5|v
z<Po_sqVWpgfL!q)SL*Rk8EnTc<dkKm6tW&HAMph1E;%oJ>|;CS^?O9`e>)9U4nu>s
zWEC_xlr~&itY^O2xC`q)@Nr=x8vhA4wL=T6$-@7aDf6~;F>v0CF11#5)JHs>^Ty>3
zlPM><P&v_t_8~&FsXC!jcnw$`swb}@xu@g1kRi8P(e3Cx9j}=><?WSB49T8WyhV{o
zI=@-t;^?T(Z(=P@lCvegz$BHQ`V>4R89W6)OfPLIFH35P4?oVdX2q|RcsZM^cocH2
zUt4Vrn{)mkYo&9yP!aku`xIV2J?xLHXB?+k50rQG5V3-SO%J>;d*~1`ga=tmyCf$x
z26!t`rhGdl>Xtp|Wv-Nq-&z?x^@2$rs<)zV0*3<&kdcfzK|Qy;VC0sU&q3pE4YA+D
zT=xT?Wfk1@$X!CZ7YUvi=Qnx%IZ|60ryqEEO<v(7J{qq(cFiMu-1EPi9<S)bsh9D4
z^k&9*k}(=!7zdU<a1mcJf4=xZ>n8Nx9!J+`@fJ6?ao1>M$%6KN90^}8j)X7p<KpY<
zYVT%~%m-iSvPsExLrzN7Ra>Rwg!}ZG5JU%1nQ7c>)yldMB5t*metoP5=r&2kiTEXt
zSr1B)GdHnswsWz)va0Wrd2R6Vv+%GDFYmm_j#k6JEhfh~Oa6WMx7tj0&XQmESJ*!I
z_C$*nz?OBEI~gmZ2cgRi-YL!3!tWcsE^T?rJ;1vgcqnJTXiH^mXbXR_LtAbxyjN#f
z!{@?-b{zVGKCV{m3!kC%B^nf-(Babg@Sro%*Cy?wLnjf@7jz?fQ903y=t^S}ZMkDS
z2>#qLa`(G4#vpc*_{3%&E?#$FV>)<QQaV329{H8Q?bk)0H;X<!{q*V5rgRv0uFEd@
zKhM<*jFq=+IC{*Ur>81CM{w`V(SbvT9($ROa_%Sxnj!YprE8TDANr)H;CqwoR;+E@
zBYKB!N2cX?>cQNO6n?jCc^+J8xI#|ye7qyi-$f^hj7iR$Bpu{1^_C*1ptUK`S-d(o
zobZq{eHZYa%ez9JmC^_Jv5=2i|2394ew7g8AEYZB%ITQmC6^|;Ns2w<5_FOju_1Bg
z`o6*hoN=;Wn^IiER6AfsnepiU%Y%=ay63-$O|95sWNvV>+C{g54^!3LF{-(;K6xGb
z_BizYUFPF4;|j5<qv+quJ2t>a$Xjfhqt}t^KH;tDu$CcnnOCBW{#av0`<q5s%GDO-
zc9D7V>r4KMcjM>{#PdW`FJQCUcG&Rohp=tXxf1AEigAnIf!^1{eAFhiX@FM_@gI_d
zA%0K$xSu@|+8$$OhYIbL34Sx4W@JcRyoTRiv;3)RsYkAaIQnF0HvX;)#?B3mstio=
zA<s9HkCHj}qH_U5d=3V>lrL&h=c?4%_1w2t?kj?JwrHMHj#}_-;ttkw6RGW{{jzKA
zmGF5@3-cVo9(+7+krRh_<nQ<mzNE`_W5Wt(WqcYqH}8*K<iyvh%~<Acm1<zpeVF?}
zoOq6OPB-baD)aVEGiNB?6QYrMf``=}=Zt#XLm$%bQmL2By3(|M_YaI=B(RZP4Xyf~
z%jh?mm~qi@9QoHO*`CQsB|451b27BQ;b^aodg(kW+%c1h8J|MFG~r6P$G%wpF8K-*
zBNug`;~Xt*1$N*cU2UA`L$tB8H~maBhizN#(1q#)E9J%)j+K8n1P%{?o3DUhFLc^E
zHXUOoo9b%kcc?Z3j|gA!Tr=kYFc)pDl01ReG#<gB#O3p;ZF|L2jtykud#$>Hq$M~6
zCx<<nmwkcbqjjE{;`B4_Qjm|<c@~<Qeir23(gJ+)s_VOu`^Iv(gCyrg?5MQ=7M+y*
za!zj4l1n+`^GV=~ja2gKf@DdM&$5DKDPt<Zp7fD->?zuL6Mepy_^@Gd`uBrz8j1{$
zQ|VOyUvc?6?k|{Ph4zX^l-p_g$L*DeklCW=gXA3){~o**zuqg#0h<ROPU<|=gkNGG
zJaxB89)$Kg$wPbaR`RZbmqSh1S+B4MxzCP<df7*XwzuQkYd8dr(AI8~tNXz3_R&_w
zvga0-<b<w@-vRE(R}mtApk&jLEwsIvHt4fwmx&&1=FZxEDaZbc-%b0w@F_9g1mio#
zbNIjcV6#oWc<fWBo*hkev%d)M_Ih*5*^4ZcTv&_zh~wAnzQcZ5cl`QTs}i%sv$^d(
zvzQC|>qhK1%UF9VjOXa9=nxyRkGkvamm4zAFixF4sw4E@P2B^GwJ`*3NUowU$yR;i
z2r@<E*n*E_hncg%XD^RQAL)TUzfS&|UuW+6>``1!PI=EWCK<|-+rHVR?$uG)FITfq
z$Q&ex@B9@x#(`gO*(0?L_?X03JKh1N)jTUO;cK`j-pAcIKE`{=Sd*kbXAL>L6dFZl
zhz}0KBZt9dFKfYpT{&UZ&C9pL@y%5M?wIb>oiXyQ$SxQE#a{9_YfEgaCt$q57r7<B
zuCdZQ7<xA~$Iynwn(A4_+<=kA9wz&pH6Hr%ul6o=o_(L3)X)ddiIcI~Q_w?#yCM%!
z#%%dSbVmfgw(f{$J@XTfLz(gd{GJaVO2>6OYYFQ|!n4SUCm-<{VCe<NWe&fOi+j^+
zha-<z7hWZQ*LrM^`N&)4`C|V4d3T<a?ApRSRu8s0ddR6MJzDz8TKH43*dbu{Ta{;y
zf?ox^LJs8R4d_FO644Fv`~^EIIxGFS36y=p1Uxsge~q6D{6s6JBNxa`TVWGl#2Q~Y
z4SyMWXWQ7y2aYht#3jtXx8<>J@ai}AV<%}d@rpslo3QAs5?Cd^Z<1>mkM0moSfR&!
zANTEv!*lz`TPr-Zp}qS{4f$Bs${$u6^O*KvM&5azUW*UL)4qT1BUhE2$$PQnjNxPP
z@$m8T$>EdxqUf|_-QO=X!8Nt<Ns)VE<t7@t1s&plnz^#wDss#iwT*mZkIMXWiJgDu
z)V`4&$5}^@?c&@MWll3zM@P?Dlst`mKT(hTgJ+MtW1_dBlLeR90bBm(SAgS{_=m_7
z8)u&J??XHI&ooEYf&jhF33B&%C{vd8^fAFBK{>(616)KyD(}EzlyP98eT@dj_`^re
zu0M$ka@GL!pI6DVX$(GHU=(Cd_SYB#W&M=>E@k7`To(Co^z23ct6alph@n}CZ4RGL
z`}CBht9hpP7Iy2ilnK$k%IzO*mbWY+PKG;zgNyk_7clrEgT=fXiSD%y8buE%IkMv_
zeYdo&U07nS?u#c{YmH~qJ;6rW?J+M0tMYo;Gw9VBy?Fjj9izeJm}P7C-sc(JzS=W}
zJmiyzi=Wo{4UHGPmn<~j9r+Q~Q(&SP&nD~>Vo<`nh(TMIRpvLBqxbRd1JJ=Yp`UL)
zx(FEOj5|@5AHLu7fp%!8R(K^os3unBYY(wUx4jA+<1aky^qJpz5}B}_^M>2cnisc^
z4qX)_w!x4$c;j8cE<fx0#=Cr7EoSo3O5z-T)59G>v)Ch|&C*47mz`tCn>Esjfw<k1
z8@}_N+%UFEc`I@yScPp!O!drh%G2(xDcw=hRb^pkU2VE#Pq8mk=<)3+rjIvDD=+GT
z2EW^i?d?Y&+c-r$Wi=-*F?D~lGdFzlesc5E@9AUQH{s3iOzs~;Ozx=8BzAE#IP1mN
zG>bk@>>JymbBhgDQBBN)Jv3uS@y^Aj>)@lrx6&8;AFRa_f%k+?^6-QOkAshLZ?<Pb
zd&?E(J+<X$42AIAZ)mfyHuC;4WZ}vCk*S;?>?QB&>0{h0x&MZa&+WW8d}7}xI+|Mx
ziN6i)y`0Z)*O-@Ox2_G24M$c?Ut!Fs_QTMAi77m4e+#=2`fnr-u6ml_+thUcK1##5
ztgD{8o3EwsYRglz*0<~FjaE+kF8{8l%Z#_Z-e;CS!rBtKb9z@WR?;Ouu+OwU--0f-
z1H2sK{~2Jh4%u~PS6VNZ4R-<m9s2~^)zzC=4;??$XOM-GY2qd5VfiD^vzAKERj_x2
ztU8Q*i%+*#r0xcfIk8*JLNlIwDWX2|{U^u^eAqj=qoUyIzQkpYZrq3bop~{90&8k>
zg0UXtc`0<VoqLWpeZ&L~GFR5kTIDUf^xNDW#(T+>)5w^o?ls}Hg~%Fo0q&eCKmOLp
zj>qlN_5?ae4>G1CE51nU%Jbq4Cy(=_&PgwxU9YnflGz=^wBY0Bu0>Nf0UfcmjD2Yz
z`ea^&yS%4%!q@F1DX+4RVCNn}R(V%jtY2pQ;kzpx|GP0ISL`r$^mdb9Xnecy1$%4!
z1+iP6XPw(^3fjM2z?~4jpB5hkF8=Aeidn}B4<Wy%aEIA}%S_!@n8)p&ygeJ~pLMQg
z7rC%1y}k4PmOXjV$+OTy1Ls^C?()qy{NBKPTESr>^tcoq<uGHK--r&g-A?`lyt;G1
zcE2%u9&i6o<x=NNFL6lhy>z}$*)_B5z^+ToT*3WnlUvi><oE&#D`WolU92<2IyAq=
zx@Ivp;;w6E(7(pi$aoqv<Jq4zo;A#6DfQl<ZP5y2ZLVCO*73U0gS7YltG={tHJY_p
zXTnn0#0xTOXrc`H$l4M68}yVCJK$T0-VT0_JZ<WH*RnUsID54IeB3OzeX(M*$c!_g
z*5XgXs|}wv0rNN0mIkLG*YPt46$i`u8bar3V0~2{ebz$h*{@5_mY%G>JVj<)&kd|O
z>|;RJ$n{+ANHxx0MmPFRu$6d4%EdRcPUV=Suhnd2?R{Nquf=$@wyK>3IwXF==;h4C
zp`Cku;Z?w#*n@K2vp(~8+@&!M8pF@FHph%#Yc9HCE#rP-6nFbgFv~CfEqn<sMOQKC
z>0;;!+O9D}Xvt(~$xNrN$2hc9D|j=8Q~Q>5oTwL{*wJI~wf9owXM1Y4a&33>ei87n
zr)&S;j;^(R?en2G`x7?2Hl;j7JZedqy}SVbfZ8(Xyyk0}xw3|<Ot&|eSb?0*gXn}u
z(7oKbA4F$6f-F#fIn-mGN$D+d%CcY5DZORq<-`GwH8(!{(Ao7deoM!gf-m%K&Kwxi
zHD3DqYs*aCesqoJ|CakEsqbT~rHs|jUWnEt(a*;-^z$G(SP;EHcOOl9{F&lue0(#~
z`ULkV9$j;aT;+M`^)QHR*V-6Fx9@4zH#n32KrC_`y+Jw%zxPQ0P+4Op6$U-buhjWn
zqqQAhOEdNBR`Kk0`W8F|>&iuTK=lQC7w$*i0q($};VWitrH_1$>`hc&>*TeY3yr-O
zS&JTjEVZqP`<r)zJIz({P_oc)=S2@PjlJ}mgFG)mS8U^4+D7!ojo?prA#Vh}53eSU
zkoW4p;YMPKk->>IlR9krOF(nql#Y5C_~ssH122`-!AI<ycJmB<VL7@|t<Ab=e68r$
z<m^M{`r)a{)n=xRZ4iQQstRmub<Vim?bxRSd_x=J7x9h9um+UnI(`k`DtLu=@qYw&
z1=t&RaCU|F{Emu0?&#O2r%0cE-PNb>B~QO_`}_CP_FO0*ze~oS^2iG2iBCxTZD;bi
z-^CNzn<HPZ`~Ln^oyS;vqz~1bMenJds&!924R7vEHCfT3W2yBK?i_OYUcQw};nCx7
zW$=Yv8fIJu7$k_50S}IU;#FkDh3W^NNMxw*?Q&=aACHBPLT5_^KO34-+Y$6fwG+P*
zx}_~6zbHO9=_jS=j~XBM>^OF-*3l8f)wpBxNOlxbcb@3+9RJQb*T1vlD%#2R?@V@l
z0ZtAa*H4-8@4WtJ`FEBNwtF519*ei9=D4~+Quh$ZE=$kn#&|V!Lm92f9>I-I4>BRd
zx_kh+uz_<*|M9}v^~bP-L-*!{&mbEV({cP}^eW2gOsuotN8G{_9&6lQ%HHeA32*S^
zEcdgviG~h%r<M0CUD6>Rgl~#$_Q{>cu$@n#hr$!flh_-1=!?38iI@S$zW6!kHD!Oy
z`oaX~9`6a<Z>2pO_0{Sv!G{^DRX_e5tI%&I6h2X`dsQbk``0~L{9VSdVGMUlp;L)(
zbl&y=`kUma_*{B#5*|M#TlWjTa4+&}6YVw7$ANv=?D#z*w9#`nW5>_&3jF8dwTm+f
zQ`oZ-?tRe7lf7wr*Y73#exCOQyl(-fJ+p4=Smm8mv#QiYk6NMepF@Uyex%JgX*>F3
zD?c1Ov*_{L@#U_{L#|k4N9=9cx4bqd{O|s}H!ek<-Oajx5%x>lox!f4m0R;|Vpi<w
zvEnM<Pl}~;qf3`x1YK`pO*E^=E-it-cV58#3-HTB%%=^%Pqp#B@VD5an+o#U&GerZ
zSK$wquhXEX{^N?^3XS2jj6r>;`^l@>-QUmdV)c<a<6V9PdcQ=m<(73cgdhAlWPxY(
z#HG6P0a~w%V7Hl=9q`g$F1fF(oc0@6D8}v(dehDVGj9Jh{A29l99met?+f?Y(Yr?G
zwO?0R-<A4w&hjI~VSJ*pr0X#Dd7fqMx${1J$|mpV^W?goVLq_u5|iJ)+l**_mOYrx
z9W&Z1K7jqlU3AaA_SyL}h(}c{$Ghw`Rg9pIkD9vca_vABHX`vIff!?7GQtk{u`dgN
z7rIZNo_B`lGYd?h3Z2kD3Y&m60cTR69$wa7U;=yN$Bh589$<&Act_PWy}Lu)o%S)4
zY_eyx?;eXUWBTsm&lV$Rth{C~_oRImc-{p(*>5P^4NM=p^Rr!_wMNz~spNhO${zOp
zOYv@#U%q?w1xp{{evBC-?8ll+Ui*kq*A)sEcVuw!6$j_}HHX1P44m&qS1=~8yo>P=
z6ho}Y)S8KW-;D0K(|8Jn^H1FQ+4&z?He>#7bi0%%&(ST*`CVy^ci=S>9rZVy!(ME$
zexnBhw`e_ce~oigpFocp!QEPa@Q&d9i1wLgMEjEKzR*>E?MJ$neBr`-BCNrc=E28G
zp;P&5XWHfM-2V~v`%HK-?NsqSBUazF7#pR+j7Z-X3jCCl`>rZGa91>c?jb90<QKeo
zHJz0++Uw2OX6_2F6CROKb<bUw#^c{pemCRute)b~)@JBpXYK%fxB0j~gt@*8eb0ct
zcaDJWroUD!7*<`Hrfu-u?g?HU5IpY$o>kM)Ex|<^rXy-*f{QdvUvpskY5Eke;1}%#
zF5ycaXzVI6`OR&}ub+B7HM>7(-ng7HGc8lNp6^&?snfpkRf^u*WrHojj<^nghTt~i
z+Vc4`a-kz&`!2fT5>qn%54+6Em8Rvf-K)nw;|GQ_t}E}l4!FkA6{~=&{2rzD%=Q^;
zO)u-TW7~=Trqgy0et{PJ0!zM=stY1JT%G3MkxQX}9W3vI=;8;Ed9n|*F1E7%OHZ;{
zS3~HuKSo!OZgUXb^bq)4YjSIjv2Lz~M|Y#2@;$EGn^UtJ8MAx(&f@3hrRF?qathaC
z19h96_5<4$v*9_Km`nbg)%Ihu1@OP_!QR1lJh}6&Kc;Ph5y(I3LKV<P8U8UZIAa~J
z{gHGT`CE`{*ZwVXnsUKX&B=@pI{ucMIxO(!0dIbAwwb*s^qcYWIaa|74d}{EzMbef
z-f}<V+sJ;1v9V=-yZW(y|H*UkE_$4QRA>)8|3<|J&3kuZcSc5q+MD)T;X6DY*#(`8
znE$iSre@!c{QdSQbE9LQKAWn$jl1m7Z@C9D|ES~uGSHb{_d}C9Rx#FU#_Y=ff8(y5
zGt~uQd=IsAnPUUrn%_9)wu3XZZ^ECxKa|MctK~dt`TiN^J+=As@%X}!8|V!mjeU-F
zikucDzjb^`FFC%XoU8jnt*y0@jT_Uxq&@kLFG+qR`I9~;_+G*~p5<S3eT%MN5xDjH
z6CFFim)0i>RJVq@#OP?<LdWd%`C@xbJn??nAFS|<0*iRC^qr6uA=80AwYP#;_zGg!
zD}0U*xi**k;c~ef?k6jJE3Sq<m>*|jS}$E>ato_i%S#rS_jWMPZssLFn9t7Z{fALG
z*W2+OSLvBAlGm#_fBHcBzxAsfS8W)TGx{@Uh;t>jKJrlH`ULT0KYZwi*PngpN251B
zw2|}@;f2%e#}-=lx`h|nMQ83p#~QI`&E7jb@ErWx?ak|y>?>dSS@?IP!@v6(N9f5^
z-3aIn8TH0YE3f7lJhB*Gy$+iDgq7D$j6{3Yik8Q&yY9~UrSM^1UV5#V884YX1Kf!p
zWv7cDZR$F(BQ{E~V;?q&UCZ6rCV2t0{hVb77GF1KzSfWt+({vM`zh*Z@8kh=ujjc}
z`iOJ}ctg6T>?v%@XdGY2+O_F@1$${~_8I<*NAzBIWq+A>`Y)f2{;%Y}_{-Rn%4L7~
zXydEs-bc&w!ZCO}h@a92-deuQIfgH@--SLQ9QprHKi`j!ukp@?E@a)f#ykC8CDYA&
z7W3=&7Iw;iczAQ3d;^aEP<H*R{7!Kn8#ZUuYfY-LKW@6#;2(hp3pbCP)ZTzx=_#1x
z(0Y*H_#q4TUu52E1^@AOD;j^nLJ#*WuY4p`m)s}+-Ner0^z{wSS_bf2o&c_6=dayc
zPCvazO>~84Y<t?@SJYX=vyc}b0DDI{_|A6XyI6DAZC&&^uJx|zU6v^-G(3NnXT*xU
z;b&g~e`!q|AEx9)5V=(4-&t(%|M>9vsgHY0%{X*Pa;;g*{pjq+<lj4rZ*SiX9rE!N
zBXflxcr&SZCdDX?mfnp2_Jh&2(Anh9CeNt$9(<FRfd|Q*9{hyz-IlizLxhht4jfgk
z#DuPr-_`Z8+Qa%-J&unx1M|I`Mq2HDa8(7oZTVS!+;Izj3jf!dy?3BLz6<;gZpjZf
zc?$7oawjS{3O;a=<8y67Zsi~=Z(|*P7WuXbStfia#x*D7bG<EeVZYBc;mdoY)I@4a
zr=#CL#69QekQVmn$e*p*+vFM9ej0q7Mt{D~XN8kDk0B4jl=2hk2=coY0-JgCeSD2$
z3*dX5ToXZ-w&8o-biL_1{OH(@BFFbSxjcrSRcjLGQykyx;YUBw@dP=GQpiKK<A+v`
zufY!}pKHe7`Yw4jP75zL-_X$%%ncuAtl)3&(Ou?>BX8wiA%APaSnUgfxq(&Q!a~W~
z7H>hb-I}WVvBwVFhQGB9+KAlM*d;sKKr@lMO1n0ohsxjTvvO*%lb>#+4ci}k+J;s(
z;J>*Jy>itu|B9*ck`>PRgUr5sES36$Yqzy-fVQ#QWDj5)yd*yq?ceCw1|#7`@i?|_
z99vg+jl1!)?4$IbYnE*y`EdvI#y-Yg@%jPmst4}k3>@^Q_!=L3&<=m!liGIe>9ccQ
z1y)C($2(~M)jyt{b7{ujXi|UJsa42C`9tcj<*YI^lt@iNe&c`pd}>ZLpMOC1v)*h=
zut&ze)pzX&fWvD1)C<jf1zLxwi!MCg#OhZVa3|mI8sbZ2ryXJcj=izTq2;OB-)By@
z{!Qzp(2Jw1M3@6HH!nGHa6@9C8_+LzEKc8Z636a$%N^<FY~u^)Ci!MtceQjBWFGoT
z96e03HGU2L;S6jYA0P0FV86HVOfd@<GT2r*V1>@N6;DhcM9w5<t;4^fI>&hzBHl~C
z-FlAx;l`(K&IyOF;U1z)jB59oVa6ewlRo{NHFxEK#^>NNbJo0#dz{^Q4UGYB_(Q6$
zmH9huWa8*#SDdeWf*67?x$tshLXahHdG-DBpQ?{ed3&b*^OW0^RaUmU;<Oc$t#@vl
zuV(#LnIG}LZ&lRE6_}3mx5$&}?bO-D-_J6Asa^SRIP>|j;vSKIWhU7@kGN}a*nP?*
zJ@DyMhg0iQ(6i)Ws%2b9>T&vQ$$v3b9lB~M_&QLA-)*xe+<+dSTuA=-IBYQd@_giP
z3^LE-_#(D~^N`>GPK7(o-|0JZW+qXHFPCT1V}i){llV6hQ;nm0rfx9F_;wS$=?Am{
z4t3@;UW9)`zZHKtIrDq$;v~M1^mEPuo+`4^bV?4)_=hvkU#&`V{wA85$|p5qW_%WV
z?UT7veX5oGV~LeKT}F)jC06oSA^RdNMa~(;RLg{ppy-gXN#8lX9e8BUDC+!SYM1HL
zd;Cq#``(`pyvL6kNbO0#2Pn?_<j)4)SLpq|^n3U-kf8n4y~OqPFz2`M*#R@18%o1%
zQfKNNgKh=C^w^G1P(CkzCU!u34$j@;s=vmHo}>-6nR=Y{`=@sL_hx?oEc1H{zu(II
zUcm1f?xxk=0yzfZ#n~q&+m4@I`GAjszaV3=`HnDG$6u7W<KhYO0&XZZ-`yx(fpPUz
z=Q_Hl#x|Xppj3?&wV<UC<CgA&WSV2Rt4{mRT4UqTvhaSQ+8b7V(NU_2J4;Ta_ljdH
z@jo^*&Jb(p!}!{e2loLd{QfUBty`SjQ8n9%SM#7h21P?}arZTMd}D8vW7Cv3e4P6G
zDx>jNtZ2zsvFB>ofBISV%ETS$G^``b^#7g8Xkt6>jn&+<gg$mvuVhd5rEl(ornY!i
z#(!G9GERJAd=KCFF%7Zz+J6*IEqtf`(3N4<0qw_ia_4xjo@rh1*Inb#b-d|Zd>v=5
zCz<DPyy5enTR#3uWpuXJB#qD97&~jRCal|=fKK;sG6B(q=<|XQv9`d6JS3f-Gmq9@
zloPv3FfK8%t2R7fUeq`oyg2b~1Lq_3{OjMsS1LZnUlwmMN%Xe86@S=qRaFR|-Q%3W
zAy&Z;Zzc;zcN|}Z9H`C-q$XR$0r8DIh<u8>6(3E@cZat#ax(QO_+^~NwC$DraOjt3
z`XA>%=ZGhqS|FdEDL;<xFdVEBqQ#8d&^}P&9~TAU-&qvEFI!%@w$k}dys#)>ueAd9
z!|DI_!&czFsmzJ;v#~FqVXdEfnVDS%zck>N>u!c7HZKY^5XU%uzV^pF%|7-5LaaZk
z<72MAkQE?~F3KK(&MQVE4Q7s>$B`fLGH4rFVj9zOFwx{;uUvGF{DbaY`KNhBE?^wU
zw2knOkM|yDjkG##(JSqzmLi`dA4gD*es)Y}AD3@G{HQ!z7V(lhf(3IYMXa!7SNvw^
zqktG%!8LQ{Fahr1_b6kijYC(G8^k+t))TpLhv{3+`M&rK=%W{!*(aNbwOr!~s~zIg
zJ4F*^j9F#HLk^#Q4V?iSXh%Ez06ZqyRyYO>L%QE^G<Gk%!rmY@74tzatCkLUDeZ7>
z(D1)vg|BNTdejc`FeoO?A1Vre{Ws`Ej7k5$%x}Rq_DBY{m-EfIg1|`l7M%ztqB+4i
zaf6Ar(tj!cyMY0)dBcT`HLYOYurl$j!R<-*Ww$T6IOsnzH2Z%7nW()+3)@AwkW8FQ
zKBpq?7Aj)>3!X<Ns*Zb?kK|%@oAGA`_o21!seesv6Mcnr_7gr9tv~W^YJG_L;*+Q~
zqQ9x^YZY<cVsa(xRVC|HCF>REaxURq4lvVu_^v;{L7aAJZ%~}FLpMX8!LurtUAMak
z`aQ*d7IXoR9krnA1m`x;8HBs?-_Nq0eAPM&*SG4Y&&Ry=Z;F?ojegz{&xwCD2m6*Z
zA4*pwc8)#1%Bb%);&AeyFMPJ5uL+b_*%0S{H0Sf-bLd!w({rAI*K?kM+o8`~{5E9p
zi!QZJ_ejkG$4~Nm8)x8k$I}FG9U6pd{9l>%Pq@Y&eWN9_1`h2*`1ZY@8U)`zh0EA`
zscp_#otx3ESQE7#ia%2=ALuAUZnpv(mq#O?hb}f(t}G$O#QvDzII(lV2k<K_MTYMo
zKBP(OyVbmrJ6e%5$RzU4R%;z6H+DQV$Hlpxi{BjC2A_Qh-7!&?mT&%FU~522mA_1F
zo5VPFklSoWPyXCD$!Q>2^dI;}B$wWiU&WgxH;3RlaRdFsPta4lWM2FR>6&JI_X74(
zuQIbAN2cuKTmFK?hoL+2eQQj_w2{k?JB=4qM!&w;%-K&)^|v`Yn53<M&HU*nHXfSV
zQnfNxYgWeZC1xGDs5LLXB{zI}jryd_PA@r3r<U*E*|re*6js~se17Cit>Fgx{>2RR
zUudL~cnW{B&x!BYNNyRmb>?y8fOnegPp96m?in@nbf(@r>_2uxZ>rajU2iiw#l6UC
z_K($uTQ_m99aSv#j=a$`)$gz7QXd*t{nqUITh3o!zRw+bW1adt*~{ob&NWcKa@oMR
zQ~T{c@lb3Dv51RJpXgF_<VOeB+)se32iPy@nMMA92h;bNZNi_)*|+v8Q&eL{6}P*2
z)FUHV8y48nNz3N<ibt8txDc{^<A;cKflkb;X&Ujrh8&|^_9l~0I`oj1Wj7s3t$&37
z+Dp|q^evpk1DQ1}Z{6M`W7W8%$2ht)dd!>XcE4&f;i<%|UI|?c)n|^=&Zz~&H$VfY
zIG=F=dgYc8@Q1g!rl>hE-|}A24*fW1giDA+GBpp(_f%imUNYNS&RSfjy(IgC_I&-1
z@ZZj1Z=T=s)l`A&Tg;R_%V?|Q%j~gSWa@n2OZ(lzB|P_@kF!CGfV+3uYH}udn{Dce
z7lZ71+`?X`#-aYNWq+-{#VjwlkiCzbb+y|2smsWe9aUGhR~U2j)e7Ph(cgA>E@+2G
z_LSJAN2`3H;-`$+R!@AgL7%G{8!C<?hos+WZk&mSrzbn-T;tn_<wkc4!9y#F<v0yI
zWCI%JyR^lA%)>eJ#wliwX98=ez6&@<i%wjRPTawn3GYICWe+-W3p(+o`ahN!ZggVK
z<2P?6m#^m|_R8J(dlJ`hzXdvjc(fbc*fZN+Y3AE2&k%EV=mlt5dU8fbmR@&cmHe2F
zPSI)5sguYWgTCAgzKO$(`p}p8PAX>N$SUGcmf#0~h7#aabv=&F$bIUx5lhpdQ!a8X
zcMC#8Zn-LG&M5<Y-d1}~-|RzC-z_6Kr!vwr-1l+lQSGQNw~hXHtW(m_OUOa|@B;8-
ziVItb;Wf}f3>_SMa9s&Hvb_d=;JI}1c>ZYe1EB9{4MUHX?mVo%{9I~l{Eo_K?;3P8
zXuXZ{CFa5R4SH0S0nfnrf5A8L$FVt@f$4g_iCa^h(EPFUg7eJ0xG9*M;BIA=wa^z5
z_<i;Jtm;)DKRD->!nT9Hnr9M2;qT<^59?8kIZHOV@?ZFoTypXW@LclBeU_*|$ETh6
zGx*0D;||tJjaU6(bJe~;U!0k7{wMZa9Y_@Bcl`aUtU-m>II-aVCs~(}-2wQ)LT)4&
zPl7R&e$v+)r(JB|<~8_m<M%>OtDx;Qk`10c-IFD^i}ob8S4Nd1f@kflWk+M|T}!TM
zKk6WSFWmV}Zu=tiR}bS0F&AEz+ZQ04z;nozd(emGbdorN-{NBvf1W@lJ<wuq6mMSF
zL;OCn&~BbO9{#DRY+m))n;xtE7JiGDy7^dM;y{>pkak9EjYMbTe3YXb%8u|abaZy&
z7_cQi4845F%u^ZZbL5>|FFh6+(r-W5-%88Ph7GB0A?Ws6_8$^=1Iwv=ZZ*lc*6~+Z
zLw0$>pE`uTe5>B^{1u)rHPIZ&*i8F<htln<ow?ehWA2fs2JbC?mw8L4e}sK*>6;1m
z5Ix|en{i2Q`}r-|?fGP5ZxwUVJYw6?9m?RBucyaqJ)PS27VU&sukn*aBRk0h*y6z*
z<epcZS|gpqIR^<HO)*mo4WA3psoXPk(i60%FQl&p#OQoe^f;Nhu`ePVX)KelpT9nu
z+!f4)_@s4;PwD{&jhqurP)>MO+~f)RSim#g5hCA&_FZD||1s!TzUX4;<N|WT9j^dx
zn;Flt2YL;<o9y=qj2~K&zU{2-s_(<bwx~0EsWsEfI7+hOSBK_5G-Y=57IM4z%7{;6
zT`b9uT_qZCK&~}_hl>2rRRQRnv#(D6iQ^U6UHBr8!E1YkYsPLEyXO3MBmME)oomcv
zlHwEX&uXqaDKC9F)SjvfWbiwbwxu`Em;V^~bM=9~^~lTU*Y&>)*#2Dxe_tI~qi@$c
zWSn?RvWs=6#*u6AVca{Kyq2cl&X?|XvZ*p!j2(2#F~*D>aCBt!W%hyA>Hc-Ww+Q%V
z`-`+^<NAvPU*PpdeObm|bOZ7U|ImJ7TQ8jeP13$(O#DuG7uos)&OeU9jvd9Ct9zd<
z_NyvHzpT{>WQye4*I0v9Px3{wWD{#wzkFi9Z4G?q;#=?*-G#ufU|xcMOmNoRenuWp
zM?Ntg&Nd}ehwZ-Z7phmzm7My=>XoU&$mqo8>Xo)_%42!nnX;8xxBBAWsa_ddjNS>Y
zMd&L=OuwZ(C8oH!fjeq6PS%TBjrCvoFa8f`j^D`%ybb?qjnsN7-0i?Oe*oQBa^!E(
zjSnv13==$h8+pORoAvNj<kQHNPb2$#&XsNQ=ZPk=<@$f6ee`wkth{BifgM{3`)H^w
z9MAF(8sQ#TX4}FVUjyeI+&p|*k9-fO20gn9x<qEwXuX{w8P~%;3^2MD_$JsN)$gnM
zt+lX%_sM5i8-E5JBOl`UKlT21yU(tN9*%BY4Si59vO9mSa{dX1)qA<aWO;tSttvZJ
zadszHvOY52p<@)?#L$sNGx5#nn>ScdCugx&YYJzWkRxg%+s2W7BN^EOO}2i6^^NoW
z`rYv+`?N*y*C}*<)-Kn+-gtwlTV^BU(e3_a1iqRk$~-g}E)LEgN^ScX@R4oz)MKfw
zkMesGW4J>5Ldcx?$gf?<2hG9J_xsnqDdm?_MzYnlwd2>D*+FpO`qbq!AI=}HI^+|s
z{Ssxj?YufUDQ3bK7%QxO?<wf4;!~#`e16jDDp*faW8f?K<{49B3}=K{AKReqO_w-l
zgp;0+m$o~)v`=R&JV)a*$RVP&ocK0>hJXC%({W;?I7b})v8Qt826)Ivxp!zY1V13>
zbxu1Pymfk)+79tsWp|E9_i>D8L;LX&Gd65L)HTR9)z9I#^5J{{xs%V_@#U2(SJ7Jf
zOt8mDv_$mSGGAAS_7|{Ut~>|At%oxVW{iAeIn9;whl6vC`BHq!p+Pwva-22t0JgT)
zNsGN*?eU_gI=YwFSu4Gr+LIB@9l&pQ7`bIJmYy<lA1JOB{3;LCVamAvvctU7*y9WA
zXg+knd2Dzgr(9<M+8BR=vg%W@4wA(Q${)UreM;I_E(*c&QPzx8#Inc18Sn_l!DEX1
zJYIb-RX3UUDb}DP*g{%YZ(hiq*wDni$boGx4X{qDj>c-UPV53#K5{ygVo$d6yNW&W
zRpf0@UI!nv>D(s(&eJ(qCOT)_H#ukAJ%#m(!9d?zg*{VB->1kgRd1#?{}nj=2)J2D
zA3mN-Zu`N>`dfWnDyK4|SQmWYq8|9~$lyZ1U!8A;&)op*)41?}3vx!#p7`ENtcA{v
z_CU+RMK`dO{qCpl9(0z*vE;hR;36p5NB=(Hu5m2{2g8l+uZWiuEYU%U^DAzC{v`59
z`UCU5PU{(M=K$Y4;1dC^KZQpQuDGptGqJau$@{X2=hYuCbNGjtm@qcl(K!0O<jDa4
zknaNi+4;%adMgWvPrcO4-pqFs-&HCHt?OQgP5i!iiXEutvmINnfpc4B)9gScpB7|g
z0)B(;!)=VOHM0giukky%`kgbqwU;p$jrS7H*L5;p54v~<I2_G5M{x$h{`kE1$_e(&
z-76b<TUR!8?c#aUiraf{2k$S!>)Wl7%@Nl07tM&m?ZkmTG96pR<QBGAR`c&lP2KH_
z?3EW=zInG}lOFQsmZun(&u{9Quw`#EdF`BcDnG*WG%S$$*xS;fY18qG4q9)PrsaFK
zY>eML%(F++&$8>v|0-EKoDX&ju{#IgnX1(f?n_ASK`Y|RmGIRmXvvjd{$CErg@-v~
zGpt;wPSawMD;Kiqko_`8CRE$Rb(l__!I_Rch)E_gUso3V7<|3sG0A=C(A!uecksTA
zu^oWU#rp@KW1YQ)2OYU59=k*`0NVS{2d$;QpK78%TUoMnD!7bu7Flr+_n^Cxzoqk*
z>o0G&DJPro7<Vb9JY$+UJIG$ZnDXCwN0%$EBS?Q6xqHFB>qEUM5BqA+=kLgQFB?;N
zHJ4&9>p3x*)GNZin$Q^}#wY%3&Wpnb+a^6(Y+pa8y~sTNv|<kQUgci=@|X9$l`iwq
zICx&lSxM;-LFOvm^7kXmjsFe}DJM#tHT(C-=my66JJyl<yMkvb?~*>w{`WI{I0qVo
z-~QA4f%4yjqu<j<-Sr=8uLQ>*;^WSva#eaB6=rm^&LaE{Ikfb8fBPSqho0#yLGT7Y
z@iAkZF@7gAhg&8;%^a?D=HR{)EH#JcGIL-QgXX~4ZwxZt4IaBM^p%qSvF>M1mCWfl
zef%DNlfCng@LGbov;K~^h&xSC?<9CS2_BNjU}AmnrA_FZ0l&fH$;3$ZFo>}u=BM_U
zH@9;Fc{?=65bzD&I<J@5o^jvAp4s5#&M(flx8+yPTsy{|+3`SQ@AD7b*6SM~dCh(l
z-+uD(G(FJR<$;Hnz{B-czQe;y(Anz6!^Gg|oM__%w{=aYOgeX8y38Y#apJu>1EaX6
z7VOLfbCb`hl#l*5=)Zhbe4O{_&R%G>l#lbC|3-3*Pa|tk)q!gq|Bql2Po`$?ftELz
zyrb{_8lRk%+q@C^B6)EK@*-t&j@mqzjF8@azI~P8oYb~|B5v#_^hq8;&IINb4)t?i
zBs&hcJ9;4g<)M0@&PJV2uX1#z>5I?-E8Z*}k&fvW%(gK09R4GBi4)H$RLr<+1kSK_
zCXq3}XAkBiIGYU3UIcHafcG+D6?gGl_R~)EJg049B{V<9ORQiX!|9!Z`@dX8&h%k)
zQj2%Hc&B(0XTK15`KAxn--qr+N%zkCDd##jlN&p;UnQM3rvlw}7@6wGSK@MHBfg10
z=_IjHl5fuVGqE|JKF`=K*3D-apQD$egJ_)UU-C^pm-KgT`1{hU;S=bh-_Fo{)Q{+7
zxVihuneuPc`y#aU1U9bPc4ch#n&7|%ThP+|q)xy2;oaCCt}T{b*0se3J^Sgo>r8z6
zFwZuVADXdff9gKIl{fl0cI#I30q*1@XY?0)w<%{da@S@Zh&f}yPn@++Rfo-fg891r
zr{R^3$N3)5^?z&TTQuv^kmyHtf#&)!??bfjwjmfgHr($AV5?_e%CsXpCU|P_yYKUE
zFwUlBaFzDq$WN5U9X4MU4kAP99nbXP;NVv9E8iHj_COxzYkB9$1>(%KpO8dXmS05h
zur+4(p`XCc+L|>N(Tv89{qkOn^{iqH-}v(7M^Yb;(B^QovLiuU?7}pk?4yj^ALpy~
z>TH4Fs`}Ce9GC->5V&$-sCVjjIq#ik4nItB#=@RkG@BP<#O)m!rkvzY{DquAcG<rq
zRzmx?v7-FBk{6E>i|CFmO(W^tSKp-H!FWsKsf_2t!NvMTs%{H#`62IL;qwDN1YQkW
zcH>*Ay7!O~>W?|R?%Jg9A=6xVK2F^ZK0{?r4`txf*Ihn!XdW68KjH&R+T9MU`|p00
z?>4*qsUiOh`JbI5H+`42hkL|w$T^)yUfh8(O4sZDuzZHBuWzM&hmvIp?u7XoIZ@;2
zTQOoL+&Oi>Wjkd#Q<~maUxdDoE=IfLA+L1qq;&5kKGk$lhw!?BxlJjlCMWrY9pvxe
z>?Qf^H|GUH(ATV=UDz@Elp*JL`d;c7=lhT0J9cB#S`?#JZ~F9Jduw`sylLS52E8Xf
zMDIC^@4P?JJn(+I-rt>mzk|9Z_{`$>!e^Pg1LCPM9r4syKI78ya;fnhsr%FAg-d5V
zTL#*5#`FCl?Y&~qU5Pis*O%I!ez%al4E2@pdcq5M7vE))YU^~%1szxJ!e>C)1iB7%
z>fkkjO&eluO#RgKInS^|6PIM(6A!3(!b<ce|7pV=naGNNG)ZjN*Y9=mK2GcW+amLX
za21+NyaI6;q06w7!AtNmY;Bdt=lq2+<_X{7#R2<5Gq?K{Z2xL2uxSSSA;=!(rI9_p
zi2ZGMk8lI~dXbCSOEa;+npA3Td}&@dRh<|3Sh8<@#TF}YXzAjBZ<iH5c=O`Gfm;^`
zdg>Pkx|<dU5*sR`oXMKIV3!rRn(wKccUz=y&bn3WdlYBh^gWh*Hs~f5=u6k3-&h4E
z`aistGr?JNCGt!D2mOAP*nr4`**^M-{XY5$+%>2B=3H1za(oZ$(LoP4dlk=ZI)8qV
znX_KD1-=6J+{{w1N!DTKCZ?hja)*FhUvex}7Q0II5;c@>t_rk}qvQne!Y`go%&J_O
z!Y`iM_1ePVUC`2Zcz%Uh8RYCavfJ^)x9n_PsQ$lnQ~pfRtO5UDEQZg3bEWpl?;6<W
zKDkG_@Fb_6>fCqBh?$~e)%j8>b&$0s86UptZp^BC>K)ac++X+p&lJv-e^_<zE2nPr
zKwY(=`a81fCyug*g705@{019Y{U_KHP`<*3ybn10^Y>ptJNKsBQT;?#{rD=@#w$%S
zwdQ9F<7GMF#!a4ZOWQ*Wo!Et@9DYCS{BAirvIDq9TiPC3*q}UkJvrf%&6W6>6yKLi
zx%PCO@6g`oO;Ye^Y5S@Z=itDx%^MaRzjzOFg1LR~7HekrmSJGIihaI8uq?qm)7b>0
zoMFkK`ya>KRX)9UqJA1U&l_wr$=RQ<oO(UG2E%V?{doSTxPy3HhYepI#8$TOFI1w_
zmU;8TmC#-(vTv6B@7TZAnf!1B8SCecgB;nU*e@YyEiwWAoP}Q6Ltn_$cZqeesps2A
zzLQ(=#nhXq+Q*)mGmALT$GNZRz=!d9k-IrWd#QQI1>{QiW-F}t<?Pty_&j_FMP@58
z&mAY=Q#TeTI}RtteN6aeofw=3&c?>s<6$j`THKFLo|<viC-3drK^#d7`H1c$Px8Iv
z&5ftn+dzkV{mozEKQAb1KUI2Zc!kG~9_Ld+E|M5FX2}}MDPMBbTK*bmW=m4m@<-G@
z=QpI={gFM+4Q=T%8-8OgA3@t2&RWagb;?X|%7F9odfMBJE%z{=ucIr{fA|!i1FUfe
zF2RR|PP7R-*}cCqkLRb6QQYS_xoq|7eLd)Y@_&&JGTL31UT3<?ptGCc<qGmw<XAI%
zihw6=X|F1=-gbN+H`9)EvB^2CfxuBZW46!5CmbO^OS1OY;?PS*x9nf5<IvqX&!F9N
zo;m$Gdg(yjdxt3pPoGn_X_#lo8Xqwl?)oCRcG^q4U4A9&@LzNP#AiARfzi-sc|6lP
z@^8$)cnxO~!O?ZdVh2a)lEP5|wuNBxy7&CBQ5({mDuB@$z8zfS$5cCaLLUyU@g4jT
zdRWW*C)(%>Um|<Rb={m-kdCObui+z68R?!XBYG&~*=xT~)#<(mJ=6R9_^o%GjjVf@
z^9yhDU;2i05Lf4LbeN32x)S=;o}Y9xXH9_rrC*;!SN1u-xf90up1@f#;>(=h<P~SF
zKreq?=Re#v!v?nU@l3;(lik#S4dd>MG%!{N2a6U%hiUy>vMdh2y7fP|pl|&j7_Xim
z=G(=YQx0A1Sf<`3_&VHYjr8>^%1Yh~7w&vc^pBOkGGo^F`SiC2&Q%YLFMSV=+m_l^
z437HL`3(2D)+gadYoyK??LkN8%uM(y#&o`Z{KvEVN#CX6&VMM(cD&E|)Ii_*?Ed~e
zGY-x5JM_1m|1O*~9>MlF??mVFH)w3{@a?vtxqL0_zwj=)%jRF*jnT)w80q`6EZXC|
z3GzejPs88k`tUS{OZ(Dyw#Lx4P9Q(Dj->Bm-{r)UZb4oIp@a0<hxB|SrD;CRmLpqO
z<5gE}WY>4*Hso$e2euiXLJwn4ReQKkGOwd=jm4ProjZVzb9TwafnrOf+Y?u^H<hwF
zDt>5|n~|pOTG@s#ndSII>ngV5LuB8l;tS**L<b9YE)JNF5cdH*iNg+GEFS0k=N|Ic
zLHEv`WvoA%gKGn{-mN=Y7I&~V*B)DX4fk?;oI6@7eAe;^{>h4uTg&747%Qe(%PZmU
zU{z%x@<B5<xECD&U#WdPx*sueoH<xt3BLr{_m0mpE2Wz#mvitl>Ai&@xwZV<LBl%P
z93uuKQD%i}-iG#O*(-zKLF3%cIO9BDAs_Ch#eo=iVh0c5%cac(ZORw$n%d-DoI7WO
z-Gkrl)Vt?^f!<}tq4hY<SY!h_c;Vd7iE4u!9@vMMZK3_b;P)0g_i_?j+83H)<^_MS
zIB;UK3CE`K`(^qp;``T&1CcR&zlr{=dzOBQPJSidKce5ceE&P|Kg##s#epC(IKiEi
ztK@q(^%wH}FMMChcQ^Ge=KG&0cM;z&Tj3);CVZ%yz2#ZNzu{XCa-T)e*a7DpD=^ZU
z9=!Hm=iWglCmpohgD#xdPi*^St*3TUb^RtCCzj10jp%=+nHbGY=maW9j8h@FipJ?H
zl=ejotY6^e7;W<0!ObVZjmhbqXYiBZ>xjzEJY#_`t<itYUI%4kL)th|Z72U4xa<2?
zz9XCyF!7?WMH|>e(cfn3hkldVc0T$Pu3B#~brX>(!eiWR$4m%oPu-cv5;JELZC8aR
zaF0o-){idd-p?q0Pk7NEu-DcDCyld*xpyP;bq{62%l^@H?vo#S|D*#S%Yn~BZa>#L
z{j94Bru)f;@A>+C;Cy|a=l)CfZ`1c*X7zu2rvD&0Fq!AND&L>q|1Ib1pE+lb|4+@o
zn*KM_Z=*fwT=>Etg0JLk1$`X=zA7ucG*MpgU7Mjt(O_GK21~|r##?*rl!IOi#cK&@
zF?Jw*2PS%(6Jry)j$Bo==>w-;<V-bpVAfyjn=iVpB6nt0u>9OHW#PQ|eDk03=g;3_
z{t3n-+2zBY)p%qt<S?E^jHRA2Y3vg-c#6z4bD;Hgp7=y(Y=ZOo=;QrgbB8SLJ)42q
z+UaSSH32i}B`%IU&}XA^=nO+2@>BVt`;B}f<6hD|4X%7symk!UXc%7=?PmW@zKeRD
z%_}o~{!7_EF0G2**2o=0$esrL4NiTXZOojb{hV}4a1`=o<`hZK>3s9~(a`z4J<*{7
zcRqh=9{-%_3;B|!^U(hpew*lTSe`x)eusnKKV<qfoC9+B%MA4E!vB2pZ98B8e*u5p
zpXuM8Vdgk|7M#*gH-D=CCi))4Z`8}?H@B|72l3v70p3H`b!1#!W(<+(?ikX%?zS=9
z{HxFDe=xthb<gQPi}&6BuW)gIP3zzwHdw|D*S}<X>3;$I$7T8sxpWu&^YQOFU;lpr
z{hd}!B|H|%%go*W^ZW1qkH3um<rmzTk-IMJe?kA1$d9o06EkuyM(m3#=hAX_K+au|
zB@ctd=bx|Kap2nDUh(<M?aFE|KJonJUdU?CCf4$N{W|wWXXYWj^L*t#B)lW{;^<K8
zfTMJ-I6BmAdECQRt=!22_mH=7|9E58{o{?uQ<dSYZ(;W}_~NP!@jg~_5Fd#0F_y7D
zEJDv&#M&VFT7PZX{2t0k-ul@KJ3ycJ(x=KEpwFh!mB~2m;ahDt=%x*<m6e&b5`4|+
z;av!SD{{0@?WmrYcA%S;@r;g!tWW-DiZ*G_HobG>WhOeHuX#Gx@lN_$WNT`x>hJtk
zYU|o8nEG@_O=fKyiu32QX@mXs^Oft$Drc}w&R1@CR==@7QEplmZG`Y)oUgroS?vXt
z-|{^3cvv{k=*_pj1<rw$cu)QmJ->-(`d_29od30%|FU8A|N6}T=FI;kng7n6(!5`s
z`F}&^eO2baY;e{8Smysr&VQ4<QvVr)Xz89znK_v<zRdrRX8teA{Qpqq|C5>jGc*4$
z&HTTZ|M(@NFM|v9>Ce2E4J3UUUAsSzh;(!E*s$lcy<-OY)b7yqu<U4^aX?S#*FP>^
z)-?aee6|x`*nmCQgwMIfHt$s;ODyQprmSSN_5u1<?RXv<u8n!?-*noHO?TQG+D7*J
z;I<dR#>_5f)Ba*~qusFu=d@ADINUb+>*GTjTHhwmiD7SF<I<QkSLsEXr^c@5KE`e{
zcK5yBDF!ftzpEbG7Tcz-k-an@^9p9Qg+7zanGW9)<5ESO95IH(g?QR4t={ijqqtL0
zHW9E9Jly^{59O56-d}KRs8)B!Dh5*HQom-IV>5r$CtobNQ*x%<`~d#II^~~so-M=|
z5ZX}ejGJ@UF09=?d|A&l-l64u<f<I{tiSJT|NHwE4&DCKXKIjN<YOsQ{$|U}V_xHX
zjG5=dw@v(@6IZEunaGA)bgz#KS3TRD%Ae~e&Qr0TdM=r4eCcx8xGfoLzaIj=^cUzR
zhRs0F(62+!^w*E8&FqzvhrWMbt;Bea8qqxUTFDWlKHdJw*V|dK+Puek!@9Du_GA7d
zs~)phLq_7y@IV)v&Zf4pXO?W#H#AVnw;_hPf;BmY??iLo$zAbk^C<M-(zd=+Uh9o2
z<)?yon~1H+;|zM=DsKldxZ%EC<WHmS0el#Wg)HN9kTHv2pCtzw_SbBOKgiW3e(fo<
z$(vvTEg^DM;^R4ZiSj-HJ8TT%e#Yr}gmSrRi~B1#vEQdX*X@k6`=JfR7eil;3}GCy
zUF1(<txWGJ<DcqVRn0jxa({X`w-3J^y7spD-S+hMSd2X0obh`eTFx<N9?PCz^)!2a
z?x@_(V5ZCw_zhWe^t#MAcCRSDr<?l}{sXui@_NhVm)4jyM(^p=Z24ZZ<yvZud4n}p
z{xm0VOW!K1qp#Y8a~bPF^hVVS`S4kAH?{cnU}^(!^R~CGUDP3;3VHDMRG8eOI=j|3
zDp&FXojjeZpw(wNd5*D_*7*ek?6gt`2A-qx*GWG1t*X=+7H9sgAEeK_-Fsqkk3Niy
z6OGAl%=p%sj9=U3fkn{PZNPjwWpZLBpg748xudh`@)G(>P|gp$xJzXDGT=UA*5kDY
z$cLtKGiGhRCmX(|z!VyC>meI1J2-DcF*IM-3e4U5!byqAYkm#dy&e3<X*+Z#eaDK8
zy_l94X_*e}Y9+f4d&vRLK96Ey+_9IzpDpAi41z!Cuon3j=!SMmIZK_-fA+WnE%+^4
zdGF=StAX!`-K{-%*m}8%xd>;1;l;Ch-fv-E4{Kb|e^r5}y^5TUjmGmrH+9!Ac9mC|
zSNYF9c}L%6?Ab7?H|D*Z$f7?6p`jFVv?{0Vm!;%o3o(Wmx>HG4I?wM{7{^zLDOO$0
zP5kNwUfX?U`M2SRT{+%D^%YzfDqdq>-2Pe0FJ>*+#j_@OQezO$CxC;G`W3*>l?mH<
zSB4(AdEJ`g|IOR`$46D&`Tu8T5)!~4Xb=#nnMtThY}Ks<n2O~l0kzU<1-iPWyG#;W
zX|tcY6#G%cnn~i%rdt`&rK|nOMEsT5uC|J9*0v1Ls;%7?u(i8wSMMZ%wzPHS_W*G|
z&)2#4CX*r1e!rjH{UeXbz4!clpZBlxe!tKARP$bKYP?zxwXHQ#8F-21^*bgxw`BNU
zulp?+YuNe6h4m|*_#$htAWFQy+W#&61Y=cSfAHZSJ{P$yz5uT7=y1L>7y7x}hhJ3p
z4;*cH&18^s`zmKEZo82_gK<h8VmnSnkVg&VeXBlt^J@**8)Cn?`8Dx8jV~yxwbq)d
zAFV5VYh}2^%z)P}hlehH<eIy;_gCI`UkN;~{^{@TdE~+Ed-^Zw-qZKX!+X}}-`vxF
z>*j~*k6!Z{`Gq^Hnd9JH+p8lFb#Qk!cWzJVXP$x=II@!brOSV7VdkuCcFfg!U%5K8
z9NZe)bYc5s;ACZBFg|yTCsV~E0vZ@t_5JP$Yt?kSxmx2EFICJ$Y+T*+r8ncNf)B2f
ztUz}xfwpM#w9kx9F8u7RC5!Grho6rQvhMP#*^in_QepH2={k44^4ZxXoNZo53`7)r
z{3z<p<NaflX(kWa%j_5Gcz*NpX|qeH1JCb$?3HF<&wY{TywF0fo$ungpP_6k?W^q&
z<>t~R`$2nNq@M5V8B6uDX|w10WrBOP?U-5PV9XtiRpV4UK^b=}K6LD@>wb=|i9fr4
ziel#B+wc|5GpMr{cm-weFDR>W(jE2fty3e@|K9&5n7nmr!*paC=byqg8NbX<`nugO
zvr~Q9?<F-q@V|fA|E797sP{7O2mLqnQNep`-B(vI2YfLzur=3k&M7yr%Ja_%SKX61
zJLI0roq;9=ZR8yCuR}NTnXcCPu0CX86n~QT0S>yEzKMV9eGC~Ke3P9EpWten6K-@6
zpEtZe;n2XU?{@!=e*b`9N%+%;Pa6Dtt`%JTBfe<S<JZc}j8B}w`H1&By_cQLSypn#
zT}7;Ne<{9x=&hagY&K=D_7SHp`nw05{v)zXzUzM4bHDBM?g1w=W6g}+pG0QBTgyf7
z+yz$(PrCE>x4!n-&wciga$7e+XVdE5-}(DUY0d3N>t5R#DXFOpmDsyNV}H2ywa=V3
zy0h_fWY0q`Hz6CU=~sRJ?uBsoPg5O}>sNO?=tfTOL7!M1++op2-1Z;YGbVuB?_Q|4
zKA}G1n*Lagubuf=z4m02`#AIdr;zaL2Ueeco4$8OPO8zpvyVaZJCL2^!`)p4O+-y8
z``NNr#Y5_uugg50_hEa#_H&2OOFEr4c=0GaCso|xJ}cZEf%oqrUMhRf$GUeg9`z}`
zC}v7J=M#Go1|Dg~7ezMhc&e`Z53kmD3+D4io7~bi6IVO^d$m5qK~QfRde-k=2z6(f
zYtqiEu3PJ+HK-fy&xyL)p9QcGj0BqyeHFq)u+TaSHiC(0qP*0cR>>Kqs{Q%J<zK$_
zwdT()JES#!jBgI@SHgp1<f_*GFy9ceI@`b&`6)~A`IT5d<#nvV?dTC5j8|uU1OvsY
ziAMXIx#I@>l@Czk$JSn>J^v>3G8fvY{22Mi(NSE+gFb8JLxQ?iuaIs6{tJG@c3a&f
zHmIM4@OjR|-{<LQS$JlaeTek4>Bur<$<_69%;`)2jT{Z=E0xHtMt)s<oza2(b6MiA
zlrz=Rn}2s?mNQR%%(GCZ8REY$+P#f(0LoWD49e=)zcvrQX{dV<yf_%|!RAPJ*hy};
z@s17U#5;y;4w@`+hpfkTY&9vxpxhKTr@xQffNR(nq`6zRtIDL3lTB^(V&ZQ2t*V43
zk8V8uP$g%6jcHN6`qk?u*C7WDG7`P#w9q$0ab(S+O3rH5A>XQiq3RTt55_;N-cO3^
zopWrxVdZ~6ynIYHhrOXx#e4a+G5A{7)I-mMSEsw3z?3=mHAg!oe;H>=^0(o_FtIA0
z?jBv>^nSS6i634O*1c&nV%6Xnve4pg$-G=U@-w`;eX@H~*y^Z)QMRlk1zg~H@I>O0
zY`ycSmo$U*!uT?5y>m(i>qT4qvKJkv>=Q#})0^3^U5`Fz40kJ-n!ROaX2S&bY%RPS
zZ)Uwvj(%`e$ojB}DZI*!l*?~4=!5!5$)-8Kx%hoozOm|kSFT(2*H`8%Zax1u{61W9
z+xhvszJKMayEa}~2`}3OZmxRq+gJ8oA5QgO#T+ANpT!x*)2x2OS{Ca!hIzR+gyZQ6
z=*#pM2DglIL{GpD7Uuj)|9kchjwJeZ6u4I6?@nUh3h=Rym>cntz+c{lJuy$tZpA|F
zC1zH6s17za__4D;wES@WDfr;eDNVUAmwYISe24)9mvg(D#`6BMQsS-Q_1A=Y(^bTH
z9?Z|^;+~MozYPzrMN@^p7T1>!u7zM%$C-oa&th|AzcKeTv)o<Fowl82arfS`RFas6
zkM3t5G<H;K6gVV3HhPVdla5(#Ms<dkefE&c-ryzV<(DWMLMFNBdv7I7YB|pvbw9%F
zdABqI->*Z%u`S>p^BxhmfTLuDaO-T!#@B~aYv^wlv2Ly5i7i!(Q}iZSi-(F{KYQD)
z$S9N29>C&1F?8~0zs2~@WqdKlr?Fk>k1fsE9%F1*@T@l7bJk6+G-mmZNuRtW#2DTF
zvbfe$>sq{~^I6k0dqUzwYQDz!sxJ5w^hpljLO$?G>bTY6)OqwhjsM}t3#-mMwvB){
z=yw>sJHy)(4Y)_jX7#_txo_4#zzgBPhiSi%UuvIkX&K(F{k>$xb*w|Mw?}8}Z6zPJ
zLAJslw(YFe8B7zeV$J75-;W|MBg>j*cd+m8Kt9yNLzd3)ct@Z1{foF;0J`r&7jfD5
zYi=69{Bq5#g}!O;ALTvvF8Kq!JuY&jaF3fs|Ij`^*yBHbIkpC;8d*(#8umq!Bg@cB
zOZ|Pm_G{sjh;Q+~l_RsXXVd;(b+o^)V*I)@QSmXxaSl~826Qa$tj_!jn#sA5XpcGC
z`r5DgE*pT#tDfpe_t0DjmKg@mV2vbu+1K|toL^BK%)qJ=<WY#ciRgs*MKuP8`g4z#
zy*rw5W6w_|R(rYZ`>_{*PivE&EoxyMZP<N3HuOT6G!h3nuxd!A$}W(&)xmEZULIwC
z@tNO;QahT-*+F0J=ssPt@v}~CtP^XQs`S^%g%6RhGA{nyM(kwY^|C!A7dos_j5X4G
zt&z(f_6{f3dHdy!v)h2{T-jEL5z<^n71>uF1^$W^4$3Wq$7wy5no+x_)7Fm#HwXO&
zSi6VvFI;ywx;Z>C@riIMy9ipQ|E0jdAgiV4H%8&Td@DgOWlWw83%Udz7QYg-*_gTf
zP>lB0F@NoM)?pWL_!SJAr-tD#+_eVo>F*8`>Qs#GBftaLDCb0Kt`Co_50AObI|Lm2
zfrrKu)YWezu&D<&DkInshc@G`%bRB3!F_;zz-FnBkKl-fjo_g@OS}I~_*i{Xq^H$~
z$6Gf~KK+UR%-3#WuDA35JpPxy7ouO{XC`iXC;z<8l(fB*e?c*8*g|Twf6}<J{8~Jl
zHV=J~Tpx^&ytwFoo(*dMl8DVK7vSRFMPXz}3Ayb9UB_5m2fK5Q`?ywS!|16;%ThD`
z?WR4%94*eZly<k8@w->7zW>2G<DgH4d(anmKgr%T!=6L7s=e5-7P#EK3=hnqZ?uNb
z+}#H3GN+i@H0_Z;{Z;H|gYXY6yKZ*u6f=XpD7o!RygLghN1prL)x>LwAEZBP;y*gY
z`@f5L`gD_tFFuL$US~PEbeVZ>kS>bsVO`Xh3>EBiE%UppXloj}yyDbkC;LzI;QdP)
zfWf@(y^HFxn}t#)T=}}_F*CvRs!jka#qA7}$G}5v5R;8Ou16kw?Wm1RWa;Z&>{YbS
zw`243!rK3dkx&d%l=VqpY1khSCs6>qqi+s}or6qM%%;X7*{c6H-H8m%-z&bm`&{&D
z40PkyRXOh}KklY>C%5Ll<b#E6zU8;++VwEIL+lIEO~?jx*bL=$#`xO9`Lzjbe-_@r
zHy)|zWUY2P*oU)U`53lI@{ABC`U>T=w#lR9-3Pxkt```Sa7A{XAHl;OWsS6!E-{&B
zGv>!xKjP$HCEr8mN2nj&Q#SK)`nZ>R&r((~mRg%fDA!LMuk4c=R}vVG1V7DF@XNHz
zzp;9I=1!CQC3S?K$Kd}K#XFW_gH^oaC>!q>tm*zGWvqQUI@IXyzk<Jf68^g3tOmPp
z={v{c&9lKD*`Q~!cTe1Ax)bDLOxzZ>=YCozGtV!Ym94)s@ie-IVqVj_Uzb>yBsjM&
z?8Uq2TO;#BkBDbyc`-}3Y?e(pxe(#8VG;c*pM=h#B`B-7RQ(3y>^o;T?$uQb_vV9p
z6TrPo!M)3v$K}l9qny?9;wX=-xT0I@1K-$gS{i4IcSqqhmcLzR-mMyU&0*rJ7Ehqh
z{RMEA-%hYqUH$Dll7B83pZ1c<JAke>BOKwbD)BIEh;Oq$tHuVbbEx7|)de=-SUGo{
zVQak9gwA_Jz6Q(xM%4s$ao8=MYa-VEtFg$=&YdVVM^=m>20P3-`|$1vKKv5$5+=Fl
zr_zjSaW9;A%K`HG*Ku#y%bXWB3$CB7J1#@aPd2SLv2%^)f9{H`={F?{<WD!`F$<N!
z|M|ZJdNJZR&`*Z`p=<e6Y6Y`j9L#S}TtHrJ5My8(rgiE*blE|gX<PO3j5m$UQN6kQ
zh(866dS~>G@=f$9|NhQXL(_Lm2~TIwn%jr0Piz}lyYtk#=?B&mZ#mKF6+Jc5<}S{E
zZ04?X<yuqje{#Pq*w21^C$U|NsG}UbyU=lWRB&bl|LU3LW@bG&qx0W8D?-zSFKxt<
z9tB=8VsUm=VC!HFcUII*XMa+g_!a&vpSBa5b-rvu5BD9XcGB<7TNx8=i|!M@GVw`~
zDV+zyQ+9`lhZj7AleO>UH{1qH3j2y>CZv+Yh^r61ZzeZt({^;1lVvya#uIagm)XVm
zH8yjSSEdeHiMgS{cJv+lT5aN|!^hkDQxm^~9O`zAFJWW&F}9n-WwRO|bb2=f>qI?!
zGS0x`I~gln`Ymg3%l_EJe^NYdVyuF3JJ>Q3Zw&9t!lvDW&0hc;wIlc>-Y{{U<IG}<
z5!`xy;lWL3hljx>IW*@qdTgR^g!VUk?VnlLexHeV6}OchYAd>roO8QIXe%7H>o}^g
ztz9Or{fF@OQ~YWjEuFjh4JYy3{2|urb;VCkfTvgVBy*mArM1)=WcHQK)OrWJRJ3R;
zJ`Leoj94M9WdKXTz>tGzaP5g@D*TqgMmhK`Is98v@gxDxq=&v~ENS$g#P3F!ce^+5
zSAJHoM)2WJFz!C`b2O4eRlJNG0Bbcb>5mq_{!ljaGRky?@xSujz#p;6SYOuL$gY0;
zLDl$xOgZr|_<f?rSiesld@Cp?o>hrWQ+}VIjYJi;VEBRiJI{BO0B1iKjHTYBJia#B
z=E@KsMNb;k4K#Q0+~e_k!G9BDv$AmBrMW<VP#YUY;N4p9=dhLOyhX5vT0ij-)ge#q
z2Kmv%YxH~u&(a}_?SwiPuooM#<u&YG8jyvBc0%o8$Yc3TbMoxeJnWsa74|jjj_8Qh
z`ApJmyJ9nWG0_+P9NS?q|6<!=+kdg`(896Ec9;Y{8mIPig)o!<#$21+ZtHNSRyKIq
z4z*sA_s{(sar3O7Y%+o0!@`TRK7wtCy87-=zIgp4Ur*G&>VJdw6X5bl?W=#UeeTsB
z*1m^NYF}$AeNFy`U>$?~y=M!K^c1eE{A*3<IsL4o)_0z71MWlabC+_B;DnxElV*=5
zz0sxIWN1w9w8q+h!z>nuu;a$&nA7KC$9)pqEnHjV=Ahp`2CokM_Jwv~Yxjk|tlgK`
z1PeRXOtxQa<H#$<f!$Yk9Tl!uF%Ijl@qLUjnEOa`)jS(~{A~xH>%nJi9lPz>9qbLl
z<F9YxZdK;EKA1Oa`kO;}`|eN7+dKaP?P=bDJ+EzW-Vt=Tp}qSE^R{>BYTo_+y!-um
zCxC&*B)bGK*c$lrweG=R;2#gqbK>oz&CEy86FxHA8CZJK{DC*`oqK+MN%Z`_$Y&qs
z+Xm_2;qlmX{+3t~_=<g=%Ja>{zWBa%`!32m_UXgkP2=6yi{72fyYjkT+L~eOIXoY#
zkMlg!K7WAcqXp000bMn&Vd(n|o+lMN&*u5}1?A`PoInpvgszrfbtyXT+u&X`dxC0{
z+0!&_^Mh67=eK=vZoInOVgDN5%|3sz>Mi{_dv^Wr+BRoZ{bxbjoIj6!^<&*(_KWiG
zHljBwCvWKPP<JM>^!0Oq<1YNI@6Uu%FJV6nBS#*^{?)MTv$NrUEirIjYfz8AxD*?D
z6hBSjcL$wOYq50P{DC)Ehc{S<%~}WJufrr0f0%VuA8Pw0Y?6ibv+S*cwxxes{*4VU
z9OeF8aG`nHWsKX~_iLXoUSe?sJ}x`Jm)L&@AG6q)v`2_yZ!_uXshI3;ZcQpNioFi_
z(0V$4VeZ=2-F&jGYR|KA6uK<9mmGsHh&^SZ3fVWt?$x%&;E~+-m@{K&lQNb^VGDm^
z4QF;v(m9-SQz7D5!kKW&q$8=eF{Yb#avAzvcQ$=R>vD<1+*xL3rrO%&4;$ZeV~xrE
z(~X=ZJKx(AYTSV@HJH<l^jW+|XRl-T=)wLxuo-GhYU==PF9ufklMi9W2L{$AsyH9c
zb8u(%Bcq6mf({bw&$X|yaQ*5$J9oWHda`%u>=HJDHuk~9H`|yb7aF(Y^X)P4AbSQ>
z=L$o>M|0CTQ3p6_U(bCCxnMkQQCpkXWBuT~fwihD{lSjY>H^+92A-WK%(*_vib&CV
zmtd<2)f_xed9uQuUyD77)?M=$f9;nJC7V1Sgo~Z5@)ffjoosPiyY~GPdfJ&&47;J=
z^ZIk|tz|!Gb4X;-g`4a*&&RikINpQ!cLr9~V^3*dUkYFI?IB5EnH<P(u;T_t4EG5=
zKznPifM*!|Lq4v6Bdd)Wms-mndmlde2iR{j7QQDJf+xKR`U~Of4RoL+c6hBrAx@yv
zE&Mrk*5GRi#`+6jmfTez&)9v?-3x>FiqBMx?cliZ#cM3cO!@jPz8dIz<IzYrdVlWO
zpM<;9cD&f7h!aRBO*~QK^lrR0)NR<yC2Gh$H_i0k{T-+G70#Yt&e=8FHg=yg$blC0
zE8X;M?kQJHnC*}CRt!@6Uy?`AHL17DoZiRD7gry}*D%#vt8-5#e>pkN*n{^pl++#K
zF3V2#x;CEX+|i~NpYYXX*PeSQ=tFS$A#nHy<`=wkS+ho97~p8M2uDR5Zi7iJWSxbd
zcI=!f)fg=<`)5frI*$kJT50=Wjek!b^=>_=xZ;YQpg-Aig8vmS1T447&k@L{d_x5L
zOd0-$P-_2@(bh*B(DdF#<=}C+=3w)f?nBIZU!<hx$cmG?`!D8PWtC_W{x!>k&611E
zbA7}RNG3Uzo?jZixzKR;&q4CWJr14&kL^40wF>XGpJ%<W1xGqJ8nfE~2k9`aqo|Ke
z2(L=~^Ja2_&qGc$fN$%di8l0+W_0C-%kjw+)UD%v5|}EsGSKzZR+KxCaxG)KO<8jL
zr=XcnakrMkp1D%KQSdzGoC*&%xmc8YODCC?F~%DLr?{Kd=4_UoQgf(0YQB~D1?M24
z8P&(2*^^Nm3U>-bvA0Gk6J<|I4yW8ToZojDi$^2geeY3xy~!dPnMGNnyil}vFlaA2
zCq<6ag|1I;F7)Q&*CuBm@dRdhzBSbCVt2uR)60DaDb7n_JFM%@+!^j>obWSpP4PSP
zhvcGS{^n%l1Mpr-p4evYIe+LRv*9q~6pRzV*eto_pIx4_?5{-+edn3pU%pPhV`2jO
z&Lg%*aRDaOlEJs&)|%SyR)tgdv2KD>o_G$yyuTVd9Xe_u+!NS5vKQzZ_`$rR;ECd3
zv!|9IPePX8W>1~h?UE-c!*}U__1O3H-2u<_Ez6u;+Hifish=2SL<ed&e*xc#=g^&m
zf{lqL7dD%95B8tJ`+Bo7iSNMrbkD^WfsFLl!^<h<!XuMK>ye`!TL(Og0jnhZz&+h;
zXrnLX8fahO^nUO+9$b?X%#5S7F-P}l&~_g%3^BGKmwX@atn_t2%|UY%t*Bfu2bFP!
zC)9J$d5v?v^`*q#53I*n{JvW2pR6SIT;m@sS7XbyO=DiP0UcZ|++%+|BjdN19>}jY
z&y2O@ve+s!etWDVxrWS)T+0G$o75NsTJN7lAB-`G=j}RMvimaDD~x`8IkM!V*f_7~
zKC<Ft#EwL)jXllXp`s5Lx)+{hxZg+d>?7gWk>8Ui4jv#}n|dwrNvvOz@%Bw|a;3!5
z3xD*jpO}g?Yi#NF0QUu*>U3wZ#RY4Vzz;z=<RNExp`l82$RxP@Blf73<3h{XLt0*t
zrJZ8DOz+Lts!wQSA$CyPr|?aEW%h73nzf>>VY19+-=KRNvZuno@WmK%!9<b8$~PQi
zu1WHwS7ta5FB(w{%3EGLq7U`s?#gfAoYw~Nh&ny<{zKGT1@5G)Jm1KjccJG3`ykF~
z6S{5ygUs(4GwVNhy@?O@&p!Y0zacLOIGCYc8GJ8slr>*{A+}Nc3!J6OK$Fo4=D9bc
z=w;yV4tRs^FmNNIdgPC(zre%g&A(;5ibF8w-J|f9Z;*F%)i`(<w3#k~h4_%*M>{pe
z@Y7h5%>BF6(Rd5#!P3C~;rBxH0E6{mqdUlQ9Sgu?))QWoO9I0T@eFO?MbwFQ8t$I1
z{H|G^AQ$wL)RByN;cO=-IpgB@65avl?dD&}ccZgBv=_7`d1v(*_<Saej>|kV$Du`N
z<hb8Nx8kjV{un}@SiAvWMN1dZ&oFtw7>?JE*VdUsZAqpG2We|u&<=7yGC*r^;&vtu
zwd3a)R69C<C)yNT0@^e`$k)!|y=bhj0oeh+UqqZkj59Laqha}c0)5?O9W%eoZ}>F0
zdIY<3`Zjc{a9Hu$r=@Q*y|-u$EId5frv7xNKrpYUKNsE66~HZcCs^&!d+>2*0Y1tf
zDV%hDT3kXOQ_*k!hTmW><#vQp^(MVtd!b$EYzfNl5|73n!2Um%L1w4l&TrUEy*}pi
zkM#2<?-UCx`hJXOc-=GFqg$PT`r4Ca#1Aa*_Vjq^PIZ*iy}cT@t>f!lYFl$q``@8G
z)em@caL<VNpL8yL8-=Va{B?o*`2FZ-;P&%B;CHZZ50=7L-JdJnS9UJjH~U4|yA(gC
z7`cO-S5S<ca-kntQHqZy)MM|~Z8&9{)yH1;;^h*==CnQw-s1O=|16O&>rUj$`5WDx
z=-@s?bce(WC)c{v<XR(<c<amP1>E=6x*Pq+pi^(53^F&diZVw`@27#uH^>KQzeP$?
z=peb)v7z2Xhvgk{@wY@nNjz=1<56b~ll;QB(<YK?<<8F5=8|}8Wk|X5`4&lSyqtaP
zwfrsP?`FmbKTUI9y{W~?ZM-nFQg?7{{JYS~jnDA+pP`kF*R$4<Qp>x5PwvjW`L*cl
zHOVqlyAytMn0JTKGh5#Z$B$5MAM@Wh&&2meMx{26H@*L?vm3xY$Om(VliY4?^4Bnr
ze|yii6)i<?xdwc|r#;t{zq^UOnDF7<J^8gxnVD6`*b>!}J>{vo7RDPk&($+7#j0kP
znA~-p^Sawjn0VWXyI(;jH6c&>IsZ{*-$izlpltDVWt=I&N2s;(eBqO9e5&RWmA|53
zjPm{LXMEQL<0G~yz=^(>hsUSYapy$7;S}h)WY}GaL5$jw74rx0P235bj$ord4BRHr
zr$aw!V5IW}h2Nf^WM*_>w@Q=4I5r#KG_kigqE{)0eDeIz)w1cMOE2$M9<YZ)%gw3D
zg}0yX+>${4tZPCR&m#92Fw=cGveRej*REkQy<Ka#13vQ42l0KNTWSq=z)RE@aVWJ-
zJSV7Ihs;&}HTFxL3Beqm2oAn$#?>EoKV%kLyxSX&CvJf6vnNR0U~(Eumh-sj@*%%P
zn*4>L1GjZ-x7&IWe<xcXvc@4liSXL(;D6}qox9Ay;JZ%$-Mt0x*7)z%7QB1Nf48pS
z-FpAs6W%-N5bDS3OizLH;K4gjn}J!_F*Sd;#&Fh+wP38R;qrH*)4loGu|MU>0?V6-
zXVAFCpKQJLC;0Zz3BIj4!MDy6eCs&=H_`7I;88YG-@Wcbq2&>C_uyJrjB9&PIM64%
zH8dJ$?W6A>zV-%vMD@~9vp6xOA)cs=c)VpwB%b)J6L*N2Xhjcc1YYVZ>g!}-Xs`+V
zNPr(nWV~=eaia<7P%usOgCkA&E&rp;##rciH#}VUY4PQE`NjKLpTA`6;?Ip+@E-%?
zaX-S(==b#|<*R7x5oo1x1^%ryWwwm)cmg~kz~RKMvYCw?e1Epg#w$VF*3NLU${@2i
z_l<v;d7#TQuA$s(!^=gA%dy{U8moJCp`X2Fsi3{R`-j@g^p(v_FwWMpNc^p_^}Pwn
z$g#lh)JXgs>>!mpLZ`l0RyWXw4C?^L1KYEU%~SLQ-Y+zUdqMafGsIkuV;>X^pO)l~
z>t>UD&`_tbKGs=9?3(Pn*$=RP1jeoCn~m5%TgMvoLh?^7DjzoIt?v$vF%9gqe0R4*
zz7sV@diZvC#pUrtGx8>aPn5gQ>Tj%%w+C@xt3&UqZR`8EseEwWUtmq#vN1g4j|ZMs
z|AU_<E@sZiSliCDc|+|axyL(b=N#4Z*5lJ!Tk0p!E!39Uv2`CkPTePl>V8~fIA=jz
z^?@IGxz<fiTyNrPr}1Ls#$^lQgYR3gWy1^I>lef`HSFh*a|XL|(-z{Lux+W|ONoK2
z2DWcvyY7PSW59MU`8w(tcS3vF3q#9Y_OdsEm%?Y&NxTD212c2o{5Ux8#m@b0cyO+E
zPj&s+!TClRb8-~%0*rYsvGE#f@^a)9_#Q&Pn=;B=)nA%ic(l~q(4bs9(5Z6VJi>U}
z*gIxB%2I!`Z__1uUiz`jCDL#5cfEL}=J3W{-?eet3EF!fIYPhpQ1r_0J@LISJOY08
z;Xm3$ymlXdiV-NGUOoNIHQ|=TeCYg&rrAm2Kde6s917Ow+yCmVkH-1IkQtw-0G}uN
z{GcKdKMFmH?<0fWb;i~m?s^?qv6qr=)QTLiG9!Od_qQpB?<|$ZS0I|6@`^{(qVaSx
zl$z*23$AJM-F8tv4X;T2YuU_Y{Lgr5s`!nfLm$RJpmC(3U(28L%NU$3-uYe0(TS9`
zW5w2)zTC;BFQyK>jP;w9UWR@{nam~|*YnH@;+;m4OM-!7kh*|1cr+-RY`$XT)39&8
zjI!U5Q^UUbvdVr#UJd)^%Pjj1xi##YFT3nF<X7RheaJ2GL4C`Pb#ks`8S9oumfe0p
zdKvtUvpw!Z4RKR%X1VJc;u(kE_59A|_lbshlH6(TQ~bvHUBkKpEB6R-9`Ho&o%Ejb
zJj>Q~Z-dS}%xna2-BlKM-$i#i9CP69vktwGh?s7zT>?E;aMN0|FU$>Gkh$dH_ndEi
zx#O-mw{_e-r?umrIp260y6tSRbgDjWy@TPndzaUzeMX;fJBps48ZPtHkL0iB>aIV*
zw<7sFtX`4)9rmsB1Z{Tk?P=?ieMV>A3hUjh+z%I(E5>$VBeKB27Y(tv3HWnf@yOhH
zr&wy~Zh7|5hUYgQik>35Az2WeiOq|;2EPB^vt}S1CANork#ms;P2q4S@?$%2>%0pZ
zd&{&vC_W_KHHveLclta?XV1iMvmNu}`DaVxbCDOZi?HwBRhlxiT}RBW5&iQ%t#X`a
zX}ml!`+Dv7X|KwU&0QALS;?dKWr_W8PBJ~g`zO&2Dow=3kW21d!<^ScCkg0TJWPD#
z%kU|^6EEw7Z`}sJnhRgb!<X_;Z2Uq$bFCg@HoO7<0*_MPgMTe$+*xeN?Tj&`^QhR?
zmLc=BHx0wHn&HW#KG!_^Y@KPL|2D?nPC50bHIOgiW$;V<Rd~@1-){W@whQ(Vt=OsR
z&_!C|KkzF%M$V$4uUGUK&cM9y(eew-qvbbz|A}!oOnr3R4R2I@`TTEGB+h@BGcY;_
zvlKbIiLvE51LHoWySdIjtJ0LUM6sLeT+N4R<FB45KlM{jlwY-~V&y6PUAd~_7JhHJ
z5<a^-#8_LYo3-^qEp=U9tbbxRGNc6@VNWCdx>e_37_W4RXgdFb=poHMN<1qBoLgH>
z_f~YIDiayIncqifPrQ8t|2IC1E_2z~;qw2TA^C4!DVwExP+dQsUpQ#~PkzQ8+HHhh
zTNl9d&;yW7@ho<?D)!~=ujilZ`h-0bY4-~^2)>L>dxdYoXB*ek=Q%@tK3CA6yQOT_
zR{Co?HIizqrrf<J56Z$v**^yB<bEC9sm$r7-`yQwCzrE)v5FH$pXl%Wcs$1%*>}*I
z?yxz^Iv*W-QVLsM?jL}U{YLKhN#MyD{0SG_24KnF=x*$ShP)fv^X<d_cKE8&?#vg{
z4-sS8ox6<ta)<%yf5`Nn0)FXkF$cP+CkJvAoiZ5-ci!K`xt;Lj&PkEUooiaE4oxnB
z*J7(Bwsp6|nWSVGn<FuQS!^JE>)3O{hyNFIbH|Y{p66_TIF<a6NiE}@!@IppfOGha
z-NZ61X3qR?cHhnahnETmDmbq>d3S{8U!g;PDSSrH#wuqI^zP}<?5(TF^$sq!ba5As
za=q*SyE&8M47+PCY;(Q$t-~(OU2|uc@L0oN_G0XvoMp9ln=SD6FGsO;^sU40yMR0y
z__L$Hfc~B%&$Hd%RI$!;pqW}?FBJcGlrisQJsK}XK2Oj&VyE}7SYz?G81edTU&+`0
zjqqs-bHh(1o?!8*!o#P{$muR;2%moa(hxpLZVP@|zlA^a=s1b(Tz$Mio1*n!@@v-{
zyG-#O9Djj_JHEeJd^Aj*E!63Mh&$XE`{9Z6yVYL99mLh~TxrhOEm}(gW6QGzW9F%|
ziQ+Gn{4W|zAd^0-@tuSHwV~AF@oyQU+PaYU*)1h0PmeXd{r>xNc^{)~;nR)=^)dH#
z*-#6|Q4Z`hwm$GDcNycmYJT^YQD%m5(9M^iPfwP;_spJ|KYwp+<^^oU;173Gzgx$d
zg2v8|;UB2*?8)#C?Z2YXU-EhKR`q{8ew2F8laKWy^qK8oeCXza?Th~S-UBY#2Hr#S
zdcT49nycoN$cN+m^c`E1)==NSRrvi#IQ~1nTbKbGwPmQQyoJap_A<%sSM$Hx62835
z{X_xo=v^0Ml5NiI@b-)BtL^!5-{!a4=FBa!vBa=J+j2!QfUaaU@qUGEC@#vjzy8?v
zb$1QxJ*>PdUEnxvD7OB#YTw5Te(pJYV6EOMzEFM0=BVFy{9oA>eoL9-;wk43w9i!?
z-P5RF#W3mj4Sp+q-<5uquNa*fnh4bdar}zgKR{e!129ug8pZV=gx`G@U1QfdCZ}_V
zk*F7sSY5(i9A8BJN#^SD+zYt$tK?ijX6<h_Ddo5IVqnkcIrMw<GHgUo@;f+ga9wt?
z!I-UI5Z?eEgL8~!J~0kn?0t~Cn0?i1lbM+^*EZeUL=c1Xr1Xi(*CU+8YQ>MKxVXLe
zHr4lDY`8m^tNwT4FN$gV`p=LF5gU_P(?^U~@<_f`<9-euNaJ1x&$E5F@niZ(-h$5$
zeF{C-&Mny&V!wVyPvh47+L!1j`6=!)tjEVrf6k%&4B5kcd*;GC{eF)!7JraCDw70;
z!o^BtA$x$;vZd}{&wKVIR_~_1@)chWy`}m7@Q0m&%7U0O>2k@Z@vmHjZ{_QzwuxBp
zI%k4~dExr%EM~MQxA3d%6BPrhI;vk!y=HVi(NrCK)J8u)UFEQRj$TgT<nQX^$;D<?
z@{jyR%uLl!f5q>g{JC25Kh^(J+FSemBiDMhkE^3@gxtAR=#F8V4>eMd&(P~zd6bj&
zC8;$(LH<#%AKB_&X=)S11*>0Z?zp*>zeb<ZIr>?D)s6Y{ZDPJv{(L$AW%DODa#v~g
zB4j-6r;F%V<4vB<-r-VUFu5TfUBT}t_B}W7JBIgv%kL??2R5+|A1;}R7A_;L#j=rL
zLHWou?+o=w@Ce3t#~1LeHkl0pZW?@}o00)8oN?Sf7mU;=@#Yb7Tb`)D<X1czaOfu#
z^g|rFU_a8_{$iwlD6f73964cs4-WNLx5}Sa((5m%KT^LHBlSzYKRLg{K5oB99MdOQ
z$1v;oajh$Nd~gp*^fFT``m}Kee`^-Ehn;TpBOC8%-?IlWH=wii)yEU;ixm%L*bgW7
z(B5=@53`rV9-2H*ACGe8G+Tvl3!D@`NTUZA$`{!*+HNtmE1=P)`pK#B!1#V>*}42i
zKTr7h8u8PA!?w{!8`t@?eEW@)@uLw-MjgQ@0zEYp<ri)X@LPO~`KW)zq_yb|YvRb9
z?fDJKE8u5g{D|A~Gyava43=ZRQ@1U@_>k(dKDI7=F};<29^*+ig;P`EcWtTzz6^f<
zng5*_lkt3Csqff(^*!^`GVzg>Yid|;@?JFhv7H(}cd4x0TWxwJ_f<yapMBCR7e#+c
zK=Xpb*}DhUCj8v+iq%Yh-fP=^)o=TJuTGLUKYdp_ZNz8>e7YL=KJe50+C>`I=b3xE
z$IIOx<!Ago??&R?lBeR$4{#UGUi@&C*h|p2Z4TzHG2~WxpQ&wQ%^%ntNp-Q-!TL(4
z67QG4b`3s4jb+7qWvLavy6L{OKL<N+{A?Gf4EMha{wuyP?)1v7#6xs)U%*%VI70rf
z{0T5yi7zHx@gcSKedf1@90dAbXIs~t?ftLwtO1@To6X{LzYHDgUhE8c5dQ(Zz1qx3
zpj+WPv~@+-dmGHkQv?$qPu74R!j(<PO75rKu;vP<_chubT$^utaCV5F{YTzE`zZ1u
zSx*jdXJs&c_gcn(wazo&ztF})BDcfl_Jx{9-3qgKk*TQB*yn-^hVzP{ck{LP&{h}i
zJd3?eea&SInU8z2xN<Qt;T&i5K;GiQ`ri$#{U^!?{VImUQ1;1>(U0yGWxmc8?0K#*
zGv<B(8^xjgV$C&%+*ZHBr~7Cl$hB%=auIk4EM7$qeRiHVhG5Nf=L!3WTqt_q_R!|%
z_o$6J;-jrxTlv8D*v_Z-bk%0|$X~JS1?IE$zU>vPbEqP{$J`ovsM1{j@LBvxj^xV{
zt(C^vqdBgaux|33Q`VhAz2yd)Ko;5g<+*G2^NcSaaRy8|>!q<lC;3X#o3Ahfk1$5n
zSDt@chw=PP!F-Ir#=^r8?_KaL^XvSE<LPCa?lz0hiw&%8TjcYjzB6UhwsJnkezrI#
z|Fi7j#gjhc^Q6aSOh#8yjz{<sbpzf#oIjNg%6nw9mA}t}ciF{$pO1Kbj?~}Uq5ifq
zZ*p;+In*EZhIrtyeLO@Td;7KK6+L&*j&us<w%u)Tdhht6;-yUIBiO$Ra|EZM?JVCl
zPWLkXPi!FjWcP3I0Z_jRm^1)m(R~E_dL?<g`Y0ow0Pn5cOPS5s#I#1i`W*P}5WW?z
z&p-0suFop-oaza;7Cn}K?hggyzDD!sTgNTnCF2sDrOOGvjp#RZ1^I?G_CBx7SdB^N
zrjipH;>0M{)HPTcyR|Mkq{odUUoWOVUw_*=sJ~H1I!hqWTak<G!R$Q%fxfc#d3Z7T
zn+2=n=dc%oBT>N$pF{(2$})!F4ghi!4d$43Kk1bXQMQy=_xboPg53OV9<KLBKVk7?
zYg2gQAZ}{@BjL-~Vtko1aR^_iuX@4XNVo%C+uZ7NHO7zn{WcvRKi|Oy;nRbMpZ6Ew
zC-p|^BcOqI>0?u!zb?+1f0lmz8vPx!KGgkF`p?hlt81RAZRXrWQ^w0xKN9?2^yi~;
zqBrP#tLXc&qmw+{gSvkTevRNEe5+Ty_6fhej&@HsKN0>4-xAaf;PVZ}Tz7GRx0C)X
z_;ij0pX8)r_$&K!G5+e_<=6%Ode<KxJ}dnB2riZ%-RR}-_w=$M*a$`^TKk0hyU3rL
z@#Z!XJzg`?d?;T?k0Z_JQrd6)fZu+?+dGcbzI<vQp$~u0xK(@Tddh2V;*TfVHwLu7
z5g%UWLHL1B{|<h{LHaM_3^09&2ecs<10EpUh|;h6)80+}vF@ENaUL7tFF&e--(s(Q
z;rrg+4!V3*I3+&vB6hD$+<SrkytS#_;|U|-a(VGuJz2mDsCT0ExsyJ+ssnsDejo2(
z*BVCu%L@9aKXD%|^pQNv<IkJWC)u-at;?L4KfgwQ$Iw4@3h`ki{`|{(3iz{sAIkCg
za|7cFp#vm83>|OC&uGVvDB0u`#B}bhSobOESMIm4t8K{FN~ir6IJe?E`3=u*b$WF#
zL8W4PpUp2;xh`UV(ZfzxJJPlO4x3)sv@fjWjAP<yY^CUN$!h6}cP~`E%s(l|(CURZ
z(oP%eU}0m1^T?6#xpO4=Q15v5hX99fXU=u#@wT6+*Uw1puNbL)%11bB63EAq=<$oR
zA2wfI=rEtGf6qbsydl{aLH0Ei$iDT!NA!e#*y4O}h@QN1L-*;tSy0aS?P*<$%k3#B
z=hPg(y|Wl+(62f7_~j1Kp4PMRF>K+!&UrWbMo>3;!SU<90SpGq5ib$&isCVU+J}{N
zil`5R(BRyL^n}?3b4w80a=iAY70ivj`f<zISma=hPEhXZf_b>a^dGO^F$Hi*pP(FP
z%Ln0-KIi!D{kpIme%9mlD;xVDoKMj2(t`F9(c`ywRzbNaw0gXLA1o;6o}fMHfrH~a
z!8~5`@j$c?J;5C!H&IS}OLl`w_JN@{uzA44GXLT6utNS7`w#J#yBB_1IKlqlhmtes
z&SeE-GG`rsj=#|ykzxJFw&$ta@7o?fUQj<d_4xI7QD1y6x+}kUGGi!ZKee8?qBWaC
zsb+lIlDmqvG5D=3qvqZ8RqQRv4d3+n#B9ahIOyL=>g+;pR&oxuFec0;HvdlUrK!S)
zUdLTq+W(Hk%N)fqBYRbDP}iq?V8bisXJ0yuubwe#Y|RN`p9;p)#Xdh6Yn}E6;QZOd
zr>^ZIb~o(AWk34rZ}V#z2f3;y+8BfDXwO^!Q7zGvIUB-QGSGJzURZVc+2l<ojtQAB
z-^gG&{M*MX_XCxSl-5*z7k>-uAlcH0KXgTSytSR&AU?r3u3){SZzxu1#VF6NvW#yA
zn}y`l3UXmy=a-!;yrAs&{q?@se}3G5p5;G((|^9mf4<*;mhN*t@2s9fJO3j5U<}iF
zr?vZ6JLWTb-tX7@j>Sjr|KM3;obP{spZ|S>-|m_I^UwU}GyLZ<{_|=6^EUtaWdHe>
z{_|-6`Cb26<1FD_FwUS{{(Ij1kND+|@T_q^;E(H||NRdC`(B<kZp+J<=R5v)?Zq|k
z-Tt%A80h&e|M{T*-0wdVFJZsG=|AuEpMUK?@8?;xo%mdShG<^CUFi^M{8M`VqYvkw
z`Q=aX$NQ@PJeg;3&dV=Q<f}?z1GnFNU+{|X=@x(91Yczr)VTk!b6{<Z`Z{YM{_z?z
zP<|=d{%l?U+`*ijUkBVy;%~5Z{G4XOHJuxHb*k?lWS^fQ-mb9B9=_W?`4;tajRgCz
ze24OLc{vdeHj|Hwu?2J5yQs8VxrldQyVMyCc*WKo*gf-?a)<Jvc>_^klz-f;ber(=
zBggagrAPBWHY=0mrgsN166=YR$+eVsE04)7*g@mWRrmLPYW)SAH65ih(LI0piR#WH
zD@J#(;`^%R3sYU#J6-0qd*i^`qr~H`Vc&QWd9ii2u4z>0YVyjQwse_Ue$j<%CRdQJ
zzJk1%i{zK7#!p0!8<lVE!yblzy7g<J<!z&}TXL4SGQ<Dyha~X?4(B2@_AdI2r9Yr^
z3dC@k)KBTNkDP}#j+N)s<L|8nZZ+a>4seeWC%%Y#%2e0AG8E^1uiHLmy2g1c-|hK7
z%G_UXQX8ts!xEmbyA5CK{w0@^8|-q<&V967d~^~#xvc`55`BETsLvZm=u_=i4CH6X
zcPae1m9zfA`UYnX3;PJxPd1-Wf&VmglFsyT?h^m$-bM2{Pr|*g9bUdN3qShEaxOq^
z{uKU~$d%3VV)m!@{FrC%UY*tYd}w(i=Y#~)Xo=Bzx|PV5<uUHxX~XubIo-;fWLs=R
zCd87Ht?ld!)Ss$&pHeU8&IN~#UJ;5vTY%4^0pY&p`%Q2*7|T=CjqWGk6ziq2#S#~$
z9@qHxmCbU?@Y&I)J=f99eI_&VcFojAhVz5&dSb>8l+C<#?+{G{Fw?p0Lb!d0XN|#*
zJ3Tp7=Z`t5TvyCR-(s1`sf&5<0-NKFUG1v>V7<P(C%<7A@9et34}|-o3*o(Cz9wO|
zoyGV37UhccXwjpO2zOhT)>K0`o}axGS}Lird0~B;jIh4f;a^wopMK__q&;FKY8=k8
zz(eiYxY&l1oRc{oUNn{mctI{p@Io+QEcT3Nmbe+MsS9r>FMDq(Yr6yAxbF0I(N`3g
zu`V2HG2jII>Yo0kb}g*$=^lJ8q8-IsWD3?<b+pcUZ^t;5+~eR+s32!eH~s_RRU^MH
zV~8I1*U!&EQ`p9jfn6WD_@p14`z!P)o_9biJD?TilGC`vQ~1rT-T^N8JUa`0=-ege
zcXo%x-+)uFMp_qp7JmeuEB>IE3(eosA@LxZPa!YW`f^d5a{L#sUyu0gVeAs(wZZ|;
z*4G?~j2gDCM<Zo5THAa++^zK$j%#hx=w$99))n6eYfKE6sm-%4TBE;WZZ7;&c+eL)
z6L?IjDe-YbXP8xA{49Y^72rmOHq=&v^-H7k1~?nY2f?kO0A|HJC5tXq%u@nhH^^I%
z<qm5OugI+<j=a*CxaFaYTX}mek7fMR=|^-TUQ}FOaVf#r_Va&$myPHfQE-vC$`+UP
z^YCv<O_uf)%k{SW7vQVIIl-ljLHL-+4e<i4o9?0L<4kM7_t*YA{EK&@!9sknGIRud
z5R4A@58+iYjMR?uhXlA1@Hw^jF8wIRCddhOuz8fl2j!@(0#EC0d`$^-&%NeLO5xcy
zkN4_ai(+s}dX$Uc$cl2|lf|J1a3;tRCfpWZP;RA1+Rx^!hH@%R?1@3|CTX@cJnhN1
zMc|Od2k=1nK>TOzRLMBX{y_5r&o@wC_!Ob7eBO}9=ZxL^t3Cgy&dEhP%(e^s_EreL
zDm>nk;G6KvJsy5RvriSm4)_+ztS-x&bgz_T);xHV<d)>=W$@3-Ig36dzveLJ40j<E
z;@QuDZ-6(N&uaSG$-9J43!C_#vGx|%Q;rv%=?u!f%5!!syihPf{}axEPc0eYT&3VJ
z8T^@u>>S^-0G#_Y`1U4a0rzt5q2c%@p41lsM=7iJj&L8k?ozV&1w5`l0X(4HVLZy#
zp%14>=ldh=72{hzB0TeQ)a+kUVsjDK0yB%_7SA|e+FT0$g?n->$SCx)BgDY2qKwu=
zc{I_Bw+k+|?ZuZ_zBdt_%03gjbnp~&+Ckz6l9Ur|X?&vhQ_*=`@Fgo97u_&_LwNeX
z{|j`6{7#1_j?LasKfRH&EI;_?fwkj_L){o2-=ev0Af`b+^VW0B^3lXUE7n@&|D~W@
z*1kUjnKPm18<~N%o8dDWX9hojwW)u;akjH8Hao^Xn0WKr3};{%&e)9QMWL27@vF8@
zfn7*#$%nK_=U$j^ns!ys+K~#%ug5mspgm?m`4I59rDz-xXvmHQUt#fB!jxBh?BICV
zI|SpApHS@wYZQ#Bk2N1gC(xJj{)o3I?~n5T9BiHsom|>|gt%MQK6N4dWE^>JO}LUA
zw-b8)5%>#6mIio!z<<tyJNlmTpMS`+WZ_8qPB5<G@t9&fWu4UqcVF0CheNpO<;pAM
zfy#@gvf_8jm$V<=C%!127xcHH#OXcKU~)SDY;lwLIIX$EegJ%FS#e)-@<rp!jB6-2
z8~j~+nwdd<C!3pIyd=gu$vEZ5HLSaG<W^4e?&CT*X4B+@w}qzI{R(HEEiU_KMBC)E
z0e^pmu4~W6j5Pzdj63wg0dQNs3Bm0MI#QPTim$|ce+0Z@_x~Cvf5haTHQ=tkTYp4_
z={>~0CFn!#i(YgdT5?5w)PV!?+wWAn;wQ*Q+iqlH&7l|Av+xf5c@_Gyz76S3Z(}RB
z<A1e2H*r*Q;mIJp>h@7L3LVrlXYFTP-eI(eXVoU}va~T*^|8gc<j|14tPc9pSWX5X
zWJe)4cuSbM2!86DdRMES^|{iHzBgdMNfVo1Sx#&PdoZ9}tG<#2dZ73NdRvdT#~9y3
z9)Yzka49Ymta)FNY=|+(BMr)T)d0Q^mkohj00z&*k6puOir4T{+}k-3oFImO;omdI
z1bD<cEI-5@1Hzlnk&pLQ-gn`PR+*47E2I44d+$9Qnf$8iDi@Q!7k-<?U6F>n+zv-R
z+~aVc+e9;Q!Ivlp9@N~!+TF(gb=(CaI6CC?xA`tI#Lqy_#c+ks)jmym;dk@CA^5`k
z7rSNkmN#YK9euzs#9D5#e)A#Tlx3`1=SAR=%JkExa8!KBKs&{;0Q#o#)}Kw?)%2}r
z!6#VTI&w-YhFExiM=!b-b!4}*a)~}1?1-%2Gd7;OX#HG|N7$SU#+Mbs5nq<svrWPg
zUzQC%OZSF<JQFL3!zRz!pbi!AkD%Xr)^h)OCMSDCA+Iq0oj=Nt8I&!?u{!jZ{pStg
z82#9Nk?kLOC%O&tVTx{{-)Bam-2<|f3EsfZ(k?pbXx87-B(x=7p#6(zSUSWRq6NW%
z{NJ`O-`?|j09(HKbTSB+<IRC`-u&2m3eL8@0@w|#`WJgglk!Yx-GX+MZ$h~yR$|Lg
zu8DldN!yMFFud2#Ga)|6SryGa(S*(o-%5~Y1)8z%?kAtiy8A-QM}yDpoXKErH4*MF
z*}p!NJMcs(S7#!f4cLHN$??*~IIE8?wf|2u^@qFQAxnvg(tC(%JoK<lXPI35J=Nre
zQJqH0uzy>CZqnPh85=Qp+DI&A40`-J=L+<E61*?LH_@v3pqZ6i;PmR7?zp*!+~yjS
z_E5o?)<rUx7<gnm`d%OUPaF5Rw6mAK7@S)LFUe0yUb1e>ra9T&p?KQ`#LMjEu7-Pw
zt=e+eoCG{o^VD5eqN)9ybJ@43V!Gm{yFMS)xwjPas-1w$hh}Q@Z0l5e@=<m6Eh7Ke
zk~5}P!e3Rdt)Sl8C8{@Zs2;d^!0+n-=QR#4ooMT+Zcu+yL4D@ZD_-rg=M4H5O=~a8
z9Kny|_Jhrayp(4S_Ma`N|9?7Oo|C`J<R0#LWlp}+<kofkXwE>#-_L1#mKa3z43{$?
z?{$1_PQK&bIc?;1ScmS`D7y`MdMq;~m4Ax69pMwn8Su_l#<2w51Q_RE^zbGBD({+|
zoW-ZnlmWJ3V3h~fdF1_4*6g>~XE|rJa4PG1f0g+nJZ3RAl4o?EopF*2$D8pBLVTA^
z$Zh8Q2sqE)zlZZeHvb3JIuqn3OrR&u{?U8N=~$D9nA%U0`@9`|O{(AiP+Wa=k2Q<G
zzQv@ZCtm|kT`U<150IXP&0yidi#YSQBX8Sq*!OsSOza6o1j~to{ha0ZlRQie;$6qm
zuI5}!&w|Y{?-q^lZo#qd0vhhScX*zV5OIzB*K_AQxOd=*x*RlZa~luO6Y|oNnaEP<
z2EA?Iav1r}|GCwyo1TGdjlRY3<!di+8N5wxs=ed(dnx%z=*!DN<-txlm5ckmaR;*G
ze*ivtXkd^xq0ehR_lL~_7n*kt5$C|Xgtsv>HFXX8n!abq`!@JKF*WrN`#`}%-vlFQ
z=k(fIWNRc^BOK{3=llfxa#u6{xXcBq{Q6LQKKFx~a<lC-mw#q<=`<6cKXu+~^|zKU
zvd>Wyf0MWs?Pt_ahx`oCW)%E~2hNa8kFjr=3tldpjebDC($CT#<_tf4Sl|17nJ--|
z24B7(c@eD5Kk~nLq<Ee9V)pg2nE_8rLigfBgEFkz*qm$9KMm(`?RnvI%s}OM?y;2~
z>%ptVOsc!Z)qP~Zb2{&n$iH<LI|FCoPt4!@5u4xGo<%vCvnU$x--VYaITP1@pL5HT
z=x^>_>n5Yy_Nu<lKnCLpcyaN#uxCuy+G$+W$>kYSasllE6Y_H|{s-u8AH1D&UEg_=
zvyHFF=Fk0f(F*uJd_2RMZ>?)PXH{d-DbVrw9%AU$+IJni%MiE3yWa=z*6_~t-o3@U
zq+|lTB)JN{&z{4c`9Xik(w}72lgO$@d`dCmH``jtDe->JHq&1-cQds2hf>Phul9d%
zl(sq<xAK^&PEe*AKFJvfl_5rHZStWJ$~04k^9m}1uWxM<nNXQTXOA-17N@rz+|%>j
z%EJk4+>3y(^zUkHUvCfBC+30^gE;L>P3^+A-ORfP>)4E+_Kq#!E`D0cg<-yA&cexe
z`v~$W@Fi<qEF9sNx(5T?Pxb5mEPs8b@8xbN!JhXqqw$AQzvg@Kn%zTec(Cqmj6*o-
zqQAKfoDF8(wa+4d;6N8+%_9Hclm32aLeHEH-n%}^N~elZUw2$^mJyjZzGox-xztI#
zGaL>#G3RQ|N%j-#tn;ba^Ef*SJ<xt{KlbNrMW}ZgGUj&9`DV#y)pia2A_sMcYZCc#
zDZWHIxAnpo`8>w=ECF8xOX(AR*z4QCoh-6Wc-V$MAw9zKAan^A`Ifu@*^In%(Iu#F
z<#V7@$fhV6-2uPRS{(HCibmjHD4!ny*6IuY;-Gw2UG1kkSbx=(ezE@=Prp$8wgUP7
z55Ur^Kct(ezVw+6;HLWf(K8M#@$?MU?<%N&Z8`XcozMh&4LZf3eu7?csM*siDvzU|
z98bUa`Uv{PY<zKnez6ffBbJzwg68AWHS%l9ZkE0veM7p1^opI&gB$EY26Yd6SGL*x
zQRq)P$o`Ai>yX1ryt@k7z7H7gL%vHFki7rbzG68~&Pof@A$?-n%bq@g9rb@i&Wom<
zOnyU&kAK3uSb9RLZwfwJaJ>(F$p^RzO~jHOFB{+<DEYtLU*~5eW^xAO*ZJDlc}^GU
zQ{x@Z6(JY@TzzWCOWypW<na3MkmK&Z52xE#H3xJP+2|f)eG>)ykze4ykF-M5mL4KK
zqG!eLi*7}~hdi2IEt)<AO$W5x;`799@RI0Qr<Z$ik)hsxC92#2{yu6p|4+i7tv!=+
z;S@e=KWykvetz$Fy#G7V`(@pH-EOsVctqhLwr%XN#X4Ifdu;Y>s|)wLc7F{$W;io!
zzxi$G-0|>n`27uzCm4q}uH*HYq)*xX3fqz`z3^FaCxy?udA8$%ex8^(u=XeZv)T#X
zckzBxQ9YeKE^Ox)JO}(i`4E*0QG3&1KWg`)4X1CzrkRufV{i_fOUfdX55kjY0AIV;
zzbtI+g3n=hioRCYo5n65ed1E(mzj0(IZkc~Is7gHwkya%KZjVZsrU@t%j$>a=&q{>
zkz4O{c=}X)5XCy{%T`y8UR4(-M`P~5(s1sNtHJ~Cw1x-L>_ekV;fEdY^C{5SbnJY{
zzf(%gsUN1#PqCMjElIf!m5b2MgLTYzkk5wihCJ=;S#$1+(p3Hlc-hn8mHFn<IC|1R
z5<cvJUxKUT<K7pME4+JWqZ!b9@q4}Bx5a<|viDx^vdV+^Dto-v$=%u3Df~_Ce&=Uq
z;NVAyVPH?RgERU4?3?;JO3>FQ)Rfx%yc2uU;3)YTY7#TalQ^ZW_rPT#oz<|puiR@&
z<8F1G_WaBH$c5Fns5IVJQP+zc?rp;kt9J9P72SKc&^EkO?aDW~nR&|xA{nZ-GsNn<
z&GjoYiog2+@psClwPN#1wd>NZyM%tIf7X9^zD~6nwD$;hPPJLso)h=lbI<2@$^3YB
zF0sKnKQ(vtLghPi7lnG&-Wb}8cGShw=d)&=b@4<kziaB^hP*@lkuv-{^6gBhkuA1!
zSAMO=8l}x09q0#JN>c$2X<q8T6u#NS+{TjI&(4cDdi9?So0;yax?c9IGqNvQU9zUy
zggcvkdqxsnvcFYujI<=uHXhFE^wrC%yjZqXp~2kJmB`TOg1UH=Hg_y7P4%xSwd<w+
zA3?|NbG^RZa~Wqd-`5X)-^}-41>esxwY!+dPVg+4#}4vl26HK6F3ps$B9F;s{(PLX
z{W={5bsC1(>7Y(Mbw2FZNlya?;E3iP;6p$7pnm#*Rq@(I1v79#=l9x(OLo_>w$On~
zorixju(mQXp=A?$f8`;m#20t&8KK3dHN1#?wz}(^z0xF`heSC@CPmEHU~Z=M%dZ8r
z^E`U-L-2+yx|vIUJ@Mfq!cTNQb9!=nP)F}A4{M$;J6BvZnH{^hyOH}dD#<I9eTsOO
zG3XGiZR_T?If4GAe!ldVWz$8E2Ku~lGCCvcuC>!&U6KBEw6m^Pe1`F-RQJ{|j-DRa
zlD<?$-7Q0PgZhQ~*U^WH>yMq@Pv6Mz?aej7?$zP-!$oJ;@~b}ntzXFJc1z@2@=@eh
zWG-3J5<4XLv{ofA5gc5`knmw<pPA3FXX+VZ*=1uF-y_FK%jZ6B79T*L(ph2Io+GRQ
z`m~k3vi~P(_hI;c^qK;G`Fg%K;FFd=g6p#TxQmD%fmYoW{6eePoO(s8?kav;y!}!F
zI@(X!DEqL=lg#p3=r%m*+FP>hRgHsBBD!v}c-I-`fyw#x9*+!gLOgmecvcBt7Ef(O
zr$mpme6@{l@S?c;G<Eo2`;q($@a8S0<ho*ioMd16S}D0F&47(HAkTLnI;VsGG-U71
z2wNN@F3HM&$*354jx2srE`L2RYp9E7WjmnFzUoLSsyW{jvUhLnWvuEi#@=i{yg)G`
z;$I2imk^J|{?^wJN%dU?f2WO@`AF)RGB;4BnKJAHLd+qS9zCp#dp+Y}+!~vBhIC=&
zsud1toy5<K_;d^F?3WAkt(w>XmC;yK#)bEi=eb6BulF;tkG+c>w;nhwEivCtUgE|3
zk`vJ00pZTUj<G6nh}fQ*hEF*0E$@}hYQT11g$`SPbMv8wW%8i{FKov3<o&ECFRXGc
zE52Y8J|_2KaNp<W|L|*{pKmLh+21j0kbk#<2UB+XJb5d&IOri!hHV0zPI|tnL4C{x
zuZ!RPe3ZHR#;ay@9)O3<1b<)u$Yr@&emCG(4SV*;ZEIMEXMsziM(b{#OOwYhQC09i
zXJLZ(TDuT@CPSHZy7v*=&x-})2zV0r&7)h?qg&LYThtE(d`UWP|CXWoH8Q_`?2&ej
ze(cTf6=3vTU$-gL6}RyIC~;CprSmY3j{-Bn<GY3L;k6C^`{#M@GPj6w=R?Ebv*L7~
zG10SZ9?<OLtO56@gju5`d-P~|`k{#SgB{=+JV-gC`y<s>J~rQ4xhT6Xbic;Au8ea#
z>&)V#Uj(OCupW<^=khm!qw6Cn;b1j?7MC+~tS#5Q3HW^zo_#U6@FIB<W-*q3;dd_g
z|7_y-Jb1C>b~QQ-<L^Qa<u3~Lp6kQKSw=tA^T;P_W~r?mTgp;<CC4L^dPX_OZOW4~
zs3wN&I+Gl=8e{sirnaBGtlrx?<ZM;hcFNXK?o_{A;xn{On}M$L$$|V<<-4`>fIhm~
z6^DaQ16^g)i{L+TIE}=7s*mr!L|x>ac?_NfPG^6JT?w2{P`2u%@u$cBcHHSp%bn$Q
z)N|LD#kFSHcS60t{uS%y_o+CY!v3<*u3~k%{>AI-QopZHZ}Iw)Z0*`idy=h@_u2S?
zmuYW5?R}Cw*lE@~B>tp3D#lf$;F-I-{+U=Y;s%~=H`|a?S0`%FZ;3ZdpJcWg@@b~S
zXC1Qt8}b_PE|!U;5_g(z@4ME6cTOqqxXbr{v)(=rY2tixHM}7NPQ^@_g_Ghv+UO5k
z&bGf#hVD;)>R6ggFC5|BDV`iivbVQ5A8oKawhCIU=Waktca@44;9katGMjHl{9n9X
zJl=f>Tm^T8=hEfG=j+E3QwW|2@1<kq*O`Ge<lwdV@vN!c&ssfjKX85M*zu?xv)Hpg
zx(n*9-7hM7IS*U>UU)uu@6H9M-@%^-Z)}?jJ@~XK+zDiayJm#8=hhv=r`#zcysH@D
z-PjS{MUH*fS1q39;er|9elW+ohotdNW(AE44;<pYGw^uU`5E1f1CPt`?HD;Hn?;Cw
z4}!JO8tfel9{9LsbeBc+91qvpiE*s)+83TB@zc;gccqOI9<5d`c4EwgTdR#*?!7~v
zB}Rq3cZo5n5O?+JPO-%4#^y7N(qDqR%fSsR;|5{N7((1X71rIp;E2Z6S1~m2glNFO
zSEcT@;qy*%Zr{$EyC&?sq4i_hr!6xQJa`}CPKm;P-5W-z-!j5GWc4xqJng^JynVZX
z`@{(Eq=Wou_`MvLqn|~ey)^EA%*@grS~{EZMcj@)z0OQ%$wE&q>l9{wq5;83_>W(!
zwu1gvY`-*Tm`ehAhHd*Q*611Cvm_lN1U|%~=waYVi2Igoyd3*m-M6GWmdak_jwRr)
zy4J?7JC<1IzOmSA_+M-7l$h?M-m}*B9c%5Ba7UTmvDV}`gwB%-opVjE0mqi!8tGmd
zW!-60`n$ywaFd)dyz|N?#+Y8^6z9;#b4lT#)ziGVq=cVOd>9P^m#!~-ZF}4K-`sNq
ze|Oy}nLXpn4LH4PkGn|vE@w#ip5(i8$`AIK5_eB@T=GE|n{DE%nVs$h{BrI}`+hgf
zxW~m)?oyL8z|XK=Zfm4l`Vz4eIoV#rcYF6cWqLe0k?zN~CY#p<P7eRi?&$5T3C~lZ
z&m{GfpEBTOnzP>Rjf8UVl!dGgD;}pkh2HNU%llJ@-XHScV;jr8GjZs>J0;}hDL#ka
z3;3HA$|bMCmvmkzhit`%%imo78mLzp8c0XUH3`oXZ^Z|ZYuwC!pqhG-^3;pp9$0&*
zqdY~tA2yXqJumR=ZsEC}=Zm=GjpytWWvRp$>uzq{ylGC<n3av6qOaEEC5hAFzaKI)
zB|r1K(Q%Q32D#`W2gPIeR*$y2##zzKCGWen;ai3|wjMU$s!KS%Uk)cPfw%sJ0}eYg
zz+d=oA@A3IN3e0%nA|($N{*s~CQii;0N;-CE1Ha6=<$qZa7;R}>Qtel#&}NpwBT;f
z*J_UwMQ^R++oYQt4>{uf=bM??^XhuDpD;7>t?%nL_@&$@%HkS>!6)E8RTd9L=1<Qa
zVJ`VlZzwWvdUkK9*T#h$<XxmR^?<KuWPX;fH4*p;dT<4LaH!*B-7(^LI2&hiIKsTq
z$rqL|M%jdev6-LRvog7gqoMA~G;_Tk{s!LvDP7+A3H9KQ1{@m&?MIKo3%PITP4t1b
z#o(X5VSCAZinjP){qGoC-<^e4h)2tveTIj-Q-AEY6J<Y%e=aNBeL?M3bh_+olpn?Z
zFPrTe$J<u|$0)FMk#h-nb~boM#tnN$z72auwhenmt_^#JW{mc!(C{?rwyc@fVuy6W
zj*^t*{$}tjkoR9FhpKp;yCq+Hly#gML)KHrfG4J!wdMc(3if9mVPfnAcl0UBB_7Yu
z5Dsb0Gs<(lpx*QQk#A^F{sRNy{&CjhKJBft7YQCdzvXT_>D3yq#Se6A;m657ek3Q6
zM`neSTXde;pmPrHZo!b;2!bm-E)4wLrR>94zYxCpy&s`%y`M%rZUj9p^P!Z!HO?b;
zPjbYq&pm+uE8R4S{V4MDL-0wxpE1w7cjH4Q7kra06Wudht|(?KfG@nXSF|w|x@f~!
zDF0XzoDn@Ho1p_}Itgv$Z%W!Y8_`J8rw`q!P-&8vB=MDrM#N8^cm_Xw1m4k5o_du3
z#ar6&b%?j5c@}SJ!zL~GeuL-Rx5zi><-h6Tj>mRvFa~=|RfcnIoRd{dk^E5NCF_WD
zNv;p49wyEu+dn!b9wL4+7uZDK;LH<#Dfg~=o3rMl<bM^8vc}J47a-#VA7B1v@yk`=
zU+lB%6z<91W!O6*=gwi?@XhR9`2N6~>|J5&TZ~Y*xn!PQZ=IvGvK1ROHi6VrPcx@g
z@R1jh58&fLoq@fGXLzOy@92N3%-Rh4xGRD+U%81rirpUoueW@gpY!$njD6_%i_!6u
zl6jtvzdF$I8yoQ@k8yg}9INA_+l5j|Pse|TySAirJyW3L^WEzB$o-LZ{Ar$!kM35+
zUFGE5M#rxsH<EPx`@bBzKk4iEh44e7dwNa*Op^sVzAfwP_<<f(sN)MKGmqsrT!=0s
zIt^<-#W=FakVa@+`znLYs7?P*a+ar&5lc&)<(qg8^A|JilO=0D!&(TBLp~0Rw};4s
zYkXd;`{63E=RQn1hkACOR$1S>4*TRQXJeCsCkglZ);PJNQ^LKn{}tNreosB&LEWqD
z-N7Z{jN(oud*HzvKF{}!qs;OsIWf9#3oW|7+H9L%YPLPa|2?-<p8mO0M|XZ8<m7(8
z-sG~8(LEc(V_LBP5jQ`kW@lt<O&K<d3_QGzcxQK6)uD~V>h@zh*%>LRiQf9<*OcdV
z7konRbzf1I`{EK2(<%GT1OJv^i%z%v_VKq*c0V?)bCkK0`&>pT4r;r2&)@U?5!%Qy
zf6Dzu1|QM~jLA)paS#1yb9GCpcTO;U+m~N!1YW;gmN=AM7CrR2h{?UlobLH%e({g_
zb_L}>9~skGkNkQ+f4^le!MHW%cE-LGUG#0{rE%~2SXJi^&da<R4%;y&uBz$`#<lEE
zj5$#>W|uK@I3V{rcAf-d{3x(=?x-9bV<YF(J}ew!-UnD0{p$RX!#MFP_6Bm%y#_v8
zE<Sp(Vh?ohVNP<+z0AOeJsIj=<K*5H|0PF26xr#>|3W#NPafGR87kR%O@${rkLs>I
zzVD?S1OKi-X6{91hN9++3GCpOXAlDyMs9uDgci8fW6*`B%J#cZawCgwC%fZ{@YGJd
zSKXU8dTkrsTS(h#ckgabHk&c<GvS@TKd;8NG^q2i2X3U@q%V)mPU>F|jloZ#4J-dO
z&ML~-Iv2@qSMh34J}DhmbLD-Oaj0JxT9iyHlxKhC@2^cC_k&#K!O-$v_Q#^>Jo|Ln
zc+{u06D{#%r1s$8?ci9z(PM0w&KzVYV^-ZNd|X+^>-h6YVBZuR)Xt(0!y}9Litua6
zSJ6WjI0g2#UC?J9IcDqf9iC#x&?g%hykGJ<*l$W#DAac*i}v9y)z>=l5OQ!XXVG2w
z(7EIvh?1AEGQ+-tcqaJA!bWnwx02JOj_=}2Q;|_F@~P5H-R*)4Yw%l3E}>(!+(RAl
z5<7<i{@HZft*>c3-0|7dS7z*<L3*p?(cX@5?_S9wXrNFQ8GV0;_2RwO>ndnL{tC5Y
ze4mB(7OrnsDCFVVYaFc%_hy)<)tjUfb2c~7ha7S=2KtcT_Y8CuWv-&D3&jJG6T;<S
zjWXZO&-jYkVjmj3KTNru&`ybX68I$=%2tDy!MbX^ypQrcT6q#Gy#H-p7s~1Ve~`C9
zYxodlrL*0vJPxd%?3dP#Nq-5yy=}-|^(UHDyXsec2K`kqp76!kFBo_G9?k+xLH0OR
zosNI6rOWw(uTf_1xX^O_-^u@i{cHO?{;xG!$2-=*-YKtm)_Rk+_aJHv?6YbuZ@HJT
zvyYBGn&0pn=u|e{FEQ?DfehLRE<8B_T`!P9;P!rB1~nGM@L0N%uKKy*I-KzJqqLcw
zn_OsUSGf#q*;S&!$Pf*dYtQf5YIm)2a*zLY{<#b^)>kdxFaEy%NU9VV>E2Rz75gJ&
zzUbn&sUNrQ!87##3i5{We+B<X`Q_e;tua%r9PmAP=?l<%_Dr)l<CtyEJ@2heV|x*u
zO5a|CUi?X5G70;9|6RbET$*9>Xl5(#yDxi5_nt)g<_Ej-Z|(`<b1+{GKa^$P+J=5a
zp3N!l4dGr__|_8c-Osr9U&EcXzHVe>^SW?~wMjK{zg>DV_Ro4VX#Y(9W!|$(S^H<D
z?4PTB-Dq`zZnWChjaDB|H<JA`i%p=={#l1!Dc$JftFV7I4eCK#1Kl#Pi9%~b@5l)&
z84S%!f8QD#(v7wj+duDM9s8O`ry9YVac_Eioaoc==bN0|dHM!!xAASX|IPU)?^_k$
zL?@yF@lnYM)^U*MNiQh&31$8|Uu$t0Ife0ip=4CpvHl?|qa-7<{yW`CV)umWo!n2q
z=gFze67GjXS4b|&FP=etotrH5wOSwT5bqg;$6k2Pet1tk<pbKCrn#*jovLGQ+u!i!
zop{2V+dJgkNP^>57o5jA1a!d+&(Z}Ax?q&LK|3GR{E734LXZE8{|9NcVK}Y2*hVd_
zc6zj$CT=UB)obB3#qlGCbqivR#9L%1(|pzMN7N@c?{q_>1?#SyeL>mxEN}G2b&@~c
zzq9Zf)#K8J?ji1P{WE9;8_yt(T;<cq0%&AMe#SZIld>;p?&r{VlHYOs2DWSQ>}P+@
znOk^m^5x<DL_B_$#>hO(`r+Tk)5eN$Xm{p^$OLdpJXN}cWVO{NXjgq{KOXI3&A^+$
zhM;z1wA<hDXUq-T)!^Kg`g2<n?)^{d2Qs}H*vWt2#~L{Fuf39FrsiB|9}eDO1LV$2
z_GnjeZb-k3|I#P;efn71EwIZD;_67gVfKGp6{9qX-$`>X%T46>AU?;L<VKOM`lTiR
z`_P6w{L1$^y4X9@RT?iessASr{V!aV&(W~|oH^Re_)qXa^HV&Rez*F+g*N|SZX5k?
z+FRSP5dWrj)TZ~#eMUU%T)W!RzTn8?18alv2W{)VgP^|RT8HY7@7afZ4cgK;+0R*?
z6|~_1cljxOeP#%5TSj>IB6{F~;WVN%bcKEQ`(xF85SD*1mwn*Zfs+T;YQ8T@_hSs=
zw}C&_KHI!K<9h-c7Cu;-_4D==`)ogd!0zMiIu^&6b-DS)cZ~6K_&^WEbF+HdIp`O^
z1drB$f8@gm#-x6gW801$*|=rRdus!IMR^SLKKMo6=57Kf<=^`fv4iPC`R4ogLY%oz
zv-f|_-}@)=yBO|%^=#*Z{=H%HE$R99hRL@i{=H;@f3N)(&%ZZZzK!qcQa%FY+XE|y
z{CkCSOAqb+2iH11eD6Pkd>h{r!oMfD317bL!(lVO!P*Ny7ZyE#f@k5P>Itsvc~-fT
z3x0#KdHC(+thto$R_}!u4z)j=CIb9Dm9kosukt%o*4X`|+AQULg1$u~0iJ0rg}C)a
z_>;<hgfj9WKfiw{X0p<cEz<A6s*T;d%FXJRlG9R(qZA)qYRq8#(ff(v{{ep+O-V}|
z`~7Bg_*TcecQS-+l>J36G|A~5SheZN7(O8UHddF-M3%npwflbCW??&Zv=fXWXfI9v
zi^4JvHa6-%^O8CHnEIR0S%P|XlnXiBFUdR|Vi*j1t;VAM{|n}~&CU=1<>37AO-Wb(
zpPZle<^LV?Q@eJ4;|k_C?tgxM!lM(-PkSoiW`Ji=@XP_vv<AXo)_<G6<2$wMWcbcr
zXXty>|L)JT_`B+^XFnicNCWxCO3_*B!Kv6dgN-|~I|IH(vFBCJ<9-3~4H<7^4ztAK
zB(V#q?EK`?Ln>c-dnq<^?*8MO@Fc)RjdQRc^n?G-enz6_LfUF9reomdK*yGT!EcRO
zV;{uv%(P=@Fy_;6K!@%K^jl1ig2CWg`fC-{TGD5*mVavO#XM*bhv7km{3n1r?QMN2
zI_gi3KQqGkE&sv49Dyem!tWUV1OC1V|FPv=uYADYPFN4T(b@O_PLk1r(M!bT74zf5
zcDjnzk9fsxe+C?$83_)dg0}v@z#v=9gP}2vqZkf_<1VhFF{_SpJOwcLIsXT+3;6d)
z@CeEjwtoy<7}Nh>xWtO^`?&IH1pF9ro{U92t{6uO$6s7ee9=%(I&lCW!77-00G~mc
z^5w9lsY3n-jQ?NwW0Y7u)fY`g&5(Qu`q#I)j#;ie3D%~aEKP+jZ=B8l&lsmH)u=i=
zC-F6juSmZL=+h;J$wg)#WnRL4!(Mx&z5@O^cPi&g3;Q7_M$k_z;l%&kz5*Bq?V58v
z*)h`m{#^WPE1)H-m#}_yC(w_)c4r>LU+R3^(-;H(IuibQ^=BVbe^W7S!e>q-U;iKG
zcS8N>e`<cB@&Atb4f2lT=tuuk^AjI9(ft0q>3^=lhr!tz%R|tSM7yDJp?IJph=zuh
z!EQTJnZo*JHujilhCP(Y6}Dr`pdYFJ@yd*ZuZ4WHv6v1|px*?1HQ+~@%OE^Q&{6V{
z(6(Lp60tcvquhJ=7<&d*MY;#J=nm2l@owzBC)zn}e~WWwoImd^y{E2wBY8<SljFpU
zR*ZV-t4p1;cke1Qy>Ag)Qh(u{lOxpo3~+n<F4Nu5nesIIxwqFi-C1%hy>%+Kars@#
zoZixto!op=+F5$C;d)@=2;i-e)3E)qMw{^I-HvZHVdfuB0t5Dj&%_vG|3n*ulxt=T
zvbl!viz+7)bMbO`Mn;i`GE`I8E<WDg$aL)NoR5GX&1k1x`C8kI6K^G_fCG;y{kDk{
z_lJ)@yj%QE>nK|Z`_RFhJz-!NLH^Ve|Jj60YU11$wxSwO-}`<yu>q@N=7V<cISoEl
zVk!?!b9DYYoVxCI)2(<&6Zpu;!`lzM0{>XQ;6jdF&e`|sOtxJU;xa?T7dpUC-v(A~
zelqAU3>`<1r+@ZXl0{=-eg3P)638EHg}qhy2-Cn*=WsOErvJ;`yNAbBo%jB0W@Jg&
zfQ=>J9W*1EfCViC%a>^g+9R1uAcu>sBowFB$TA6udYae<f-pf_GMA+4Nj%`7l;lKX
zJ0uyUZCtPeO4534=R)I?*4QmclQzsqHkT+(@C|FgV$SEg_H1b^%d|=RJip&_{+MTG
z)?RyE-u2$syWTab5C2^%5ONQQCOC85@6XT9t!mudXh-u>>|_Hmup=AB!8RSVZD=hl
zjME{``j#Y09;~-89-M+54-WdUm5(?u$@<o|kH)%=>$4cHwr_05x9uC)mk6eQ-^6Mf
zVESL_TjvLmk++7JcdNy%ki{)a!@$7XXYugM5N`tB+L&X19m$2+PkyG+c@Kb7&<pq!
z><bVd>cd?11b032aLVf^gwAFA2e;4c|2wDkUjkmsR}q`WyiG8%9A1j;lUoCRy9K{-
z{1p30;VQe26j5%9uw!GV-7xtEpu-Yq>p>fz&iKId!ApsG*0?U!xV{grd*gZtyVND_
zh8WoGCVmxb{hoyD#m0JN&ehOZJ!OH^LyF@EHabIlJT$2<(-TZ7r}yA>z=l1|MPI_F
z2oGuI`|v!@IKbbM;R_P0_}>|9P(Pb0xc@}H{1-18>FEsysUshFMc-G$a}!%`Ys|ew
zn?L2*ONH{?VPYF9P41w|dc3@ZYIh59moJ7*?#Gmmwh?y{yYKptZR3YU^|!pw$?d8m
zHsr4Pxv!=JiI;ePm!3b;kW$;~|2zEGncPFfxDDVR9lTC!TVi47!}1XC4Uz*xc?|^1
zLyS?dRc!4bXa0o?XM?lK)t=7NhsAS%kKeA=<Z-LlerNQI@-f<yU#>cU@3F#=H-VgE
zNn#8c>*2>jsX^d9?-}+i*$Z-~i|<$T4Ki-grsnZZ=tc1lC)k&Mjo6aIk2R*W?j~6E
zg344!|I;Dg|MlI`zAM00;y-V#09O~mBSa%UeFWeSA?UIRoYWp<>|B!)Zn{DGh6g*s
zOEbya-^3s5HWcu(0lEM$E5XanoOQBv1K)7jQ(#W^JoLzh@7eJP7bEE^@ga+wCi9Mj
zOKiR^cOnVlt8v4W1-!CMwO3~NE)9BR_$h6@bPZ*p)W%>i(Rr=K^-TsG9NZX8UCo*g
zZfr<(ln}cGy#7G{wWgAX#QAreOaH_tYQ5YpV9YwF3-KGu+2Zp+<OlPq>|<`5G`Bzm
zoZz|Ure`|0uK&e#EDrGO?|4>a{j2bB-j9$APJG<Up;m5jz(p3TeoNuZU_5AS&d82Z
zGtxQJNnM0bDny+U{88|j#4gVKz8AT^0Dr9VMz2v`d+_5*?H%#$t^FPgYxwa6B;uVF
zL?)l)TR0bIEnRP~Vw1l&Y{zDEz4>`Il_zg32P{78TJG|$MW)+3&yTGPkpnKk`D}C`
za8kUJJ`Rv~yl<e<!{hD`n9b=D&RKCb0J<W^NN1ia`jl7b8J-2m^PcAZTE9)nakb^^
zCtIw3BAyTce;Uc@yF5kQxYbp-ujxRBJVATD_U)sg{g1BL^X?aphANWlwl2yXHRapB
z=--7I2c~)M!qokj7rwH5<jW73|Ec{O?a`@!Q%?LxFnQGFe6DnBJC+5@(M36zaGHPI
z%YCQZ0<&F{&|Z|*&=5c4a({tA_OLITngM)t#;@|VPaT}eZ=L&7ZoD@yMHdV?xp{Zq
zHN1-0>v+Al&z1y-))UjPXtKR?`qmuz7uFyB)WP^7CpY)b^}}zlPEOfaUF8LpE|AuH
z)#iEf=l#tVe2l8^P}jEC==4{BGoo>|rFq1`?YC<$%wF7S?NQ%vFAg62zqPLwr~qH7
zPfoSxd+9%B?=EN{2jFt%3GX3>pO}K11LV2NtVSoD!nui=#5?cdZqe!Pd-4yQm+IIP
zjCOpBd@I*de!IzKzs>La0`2)Xg3<h2C4ZG1hoAY?)cdf<%U_yrHXHC+c&@x)BO88T
zaeWT(j<V;e{gC1u>)Fp4kM_`kg{Qi&Lb<m6dn~k`%ELY<t^9@Oq^gC_@FwANSDrjT
zAGki68JHB+S`)WcH-okI*LElHwR}POa#`Q`ciuhxA;s1g)>k~jWqpsau0h^g1zyC%
zrp~qNyWzC;Ro&wC-9XG{M~%0>s;@P$?XkXoThLFP*4MS`d-nF?w0&B8h4r=V71r15
zpEy9)SM_(YzPk$RJAOUu;djOBS-&?Jt$*fsS<g9r>sU{n0a5PyYStCJp?~BjGD!Tw
zg%&f|NMZ8sseEv2kk}@#UU4168T~MD4<k=Av=<JQq{0_p6ICol1p3QAP=dZ?R$!wZ
zksVvV*F@`#naux>?Izx7(WTc!56&`6!@C-yN%DYse1DE&#-@LoF=`B^oY)NblyYGm
zdxuxHWT}&TVLCjITnAys6@Dfd4KHoLE;cJ%?)S;mnkBZ)cha_=e~0J$yto_IuPJQh
zx;s6x54(o5E#VrAdp3qaV_pCp$bB#hhm2%4^MeMahr6YZ!pn#UlFXGH$t)@GcglSk
zCU|6)pqtS4myjd%<>pA7yV>f`We<;>36}q}Pp$Wb=Z5<!EiWwWQES|G{ydut9^ZcK
zQwK#0^Pss6(43`*0u9W#^S<HFLjy_93OL|w8eB?#Of)dBuab8+Lo*rpo$%KGB$31O
z;f<$+<BZjRPj_&L-^Gjgjrg7F`*o7&Abz_^=po6Oy|-<P@%X&UwnhEXwq}m~w($=I
zTDTorY=#y&xzr?nruF~cJhPd-TALF_@tG~)Ci~Mv!rzE;s$r+=&IA9h4BewL{>}sY
zJ~E;lo)!5yI_6Pw_?-_P{ff9g`Uuk2tMp^>|2VO&dnH@v^ySerR~GOuO)OhD%=#QS
z@7{}8Tffa`XjA%n75I*<%$3Y`-q=k{n%=+L@!BNMTb*JFi*fzOh5nMSdFPXUTm16J
zqQ1kS(v)yN9WqNbx8qwwi3)H)aw&|A^7*I>>}DYE7Gnb?`R$7T7vnFwZXkHN+-m_3
zGGBJ=T@lG~_48jgxn5)ocM)Jq&*?j~pa4V0qA^s%Cpssy-^D#M)$caBYUr^Ue@2j)
z*qX9fDqNwp40W@f`?B{yN4KpW);WMG)^`9K-O};9gHZ$AMWY#HoAk5d|5|_Zn|$3O
z;0upw>-smwOIzl)mSMx(%)jM#sNe8U)HnB1Fix#QgXw+ZPy99b*L+<K?=P4dODzI!
z8kb;aObKHP?F%#ZD*P^)i+ksW$BicfeCL9nw?m(T?@ZuJZUyLZBKXd<@O6sx0Kr%H
zaQp-PYYoGhvL!xW+YDc;D=|wV-QM^+$(IyCMlsJL$B0kOvet{>bHJ-@D=-xd!?(rl
zyv2hI`INN2;&<S<7yDhr<I?|{U#vdO(XypGiD3}DoL}a59;fZc`Cq>)82u*Sg4v$>
z!rGFXOz&j=sccF0GYwIHY}Id;EeX7tUm{+aMURcVnP05jQCc75+FCQjc>>z9y4%rf
zaz0Hb;S-7(?j%3oc=~qHO^bEK)A%QQ#FkeAdsE<_tLbl|_Juo=L*v_zun%e5KaO4@
zo~*VCzpcLUfkvAz&y(3Rx$6KugHM`$6YZm@f8E_Eec!%Y7>8^W-GgKCw-@{^8e^V!
zmhsHHUuaDCw|V(g5B*7cKY26zbpOLKd~GL@Ik`pT>yzG(U6aFapminBGPWvuBKB>z
zMm!6dOy7U~H*fX83$Rz9r3L0lgnL8=E_I^K<O}WOcjj^@>X0KKjm?|IX4tm)tsaNC
z-8}EZH+ICqUCufj;Vej#Szw-5yQ)i^OhWz2E<P-Jhwhc{N%@#`e?}S@+BK3N6kaGD
z&$lz6lcpTFt9ucAJ41IO_;(u#R*F+oKYkxCTNrwACd#E|;aIR6<U5XFTa=nD(`D-&
z-q7*XMq_dvrgZ2t@|T){10814&>ikWPdtQeI?3UjhuaW+5})cr*!vHco23rxxRGbQ
z_|keW;jXmXOtkAmCfXY}QNwtAKXoJZRA*z+^Ou5V=|jA;YZ>>n04MFo?OK3u5qmvN
z-q&4M;3FoNZ71gkEMEfG)SmiK+v!mA3%l+Qtc_D=*QWz(J2~r;;r<H6ly<QP*hRhI
zp;)wGl3BX@RN0aU@2I~{#-~12-;n!5zU(-DImvhzx!l5k0}qS92Y`QnGj*-Mc+&9F
z>S<29`fetd7i-$&GEepS6ZJ{Ee!rT(`qrGg$jufxRkl>{`408s#N6ul__?%D-pQC%
z$7TGx!kmj5&Nuxv|C9WejjnR#GYN;&?N#{DGw6pJgZ8mCF8%&jevfPz^P|Y#Q!JOc
zikzFsV;32e)%o+nS-z*yc@7rru-7S<Ehyf7lHZES^mQM7OP{HPKOdL=Q|jp;8Owi&
zPn*ErQ~fjgLl0X2HvLI2`mOq){`fwU=tl+_auWZR>@Q*$vA@3e_1Bn_e`m<}XTm4h
z5BX3CpF%l)s3882b8HUz4DX4roLDtEbq{u<=qp?A@eceu`we>n9dkJ&X-bLzE>E1G
z{>}><b0$n2IyQTJGJJ(RbsY}`Q`FP>uw2KLe31Pe!6_+&&d~9|xv7q~&QEo8J$zM1
z*CSVT$i4)&;*AdH>+kw3GL$p+s@ogHR(;fr=y^=ff~AT0<DNgpuI)eJH$u1Qc*2Zy
zJW!eHcwh#fnW>JW!S)wxCq<XQ^S~eOmIoKBO*9PO;r|hne*B4e7iY8?f8;XcaVfTh
z*?z#CZa7anCzXLms;-%geSr?}_&dRW&Np!0;EU<<;b#J;t~ogHvUy7NSARHjG%_vF
zExG@kVj{~;_v&ZAd?5JHH;$TLJ#cW~)}J2Tdg0-t=Kej_50Wo?prd~N?3+41%z0SG
z*YVao;4wd?If}On2KW4W3<fU-xku;d7!2%uUPopd_fh3H>4YBQFPI#;&JWxZEKhLG
zb)@r3W6!pC4g{ii2LrkI<Y2$}{kLZ4drTaj@@Un)nU45V<lD&kYkqeyNIr#<_KxX%
z*YbUPdGzkN!TtesGvPsluS>%ZMmAgzZ+<WMb_4rWA?pJ&<~0jHjlb%ryWgYyMZLgH
z=j;RzbE@H>U{VZ^;PD3@b;=!J_mMB>Ke)VEaQQa%?U>--Cs%2n9&RXCr%%tq73J#G
z8pW&25+60>5FIE@+;r%zo;W(F=tN`o?XCFZXVOmmvuBpwjh+-oH~MGtz;cJttut@C
zdl+BwggV*)xZ|D4DCla8#gCtkZw(~=@zacj_-#98{F`>HT_!OrgkP{gXX9b3`F0{7
z>^nvNKY!kStSUKf?c84~f|cMjo<GD_pE<|)k_q55Zk#XB?#PBQ|G0Rod~Ncxnd^BU
zo-@cCl)E3jV#UCh?LOB9amJ9j;mkfW4HJ|V#^KLR@X7rC1oc)xckoeztg`$DzFmRe
zCi6~@fButrbhSx5@|^sw9)A`s`Tn!rvP-Bt9yW}rKh8R<UHJrunU7-hXVP|#-@5ZO
z1J9jtCo%e*Nlc<|IP@i7TXOQ)@29a_R+f1Fy*JQvlITQ|E2F%fvBitVX7s-56#Ru6
zpWm*vaoOLJ-v0v6U&P;&<?O0_c^Zr0?(=!i*Y^F>c)i+vgR#rTuz6hzGQqE#4*B~J
zXIa}%kaL>%H{aK2{prU(%w4YZ*#dsVkq6b~;PWY+>rxD6V5l=}n&Mro4={{(!Dpwl
zkNn3Ttc&UI*zL@hcH)dLKpW{dwVzhV6~sB(cx|DLTGNm2R%dbO|A#pC>mUAqhhr6$
zZ;xX?EE?N?1;?BV-X6!|;D_@2wD9fcak6FP_OWG!JWjTZ+&<uh&EMoglX2njINm(Q
zM>!`-9wA434F2QlEMD?b<qP60-tXIdQMSyz+$(dgu=%2FS@>OES>|1o1(jE5lX79$
zcilylg}gGS&MONqrmVy(%PjWF(n~0t<dwNgy)tJRWu;!3i5BWbDJx6GA3k#~(83w>
zi$5?y*?kj~A$P{ZCcbWhvOk@m>|+y@O+bfn=x}@=E!RTZR=1mzc>jgmgTcCvo;9rY
z)?*6mku2gZ|C9gY`H*;v*3R%ue&R5{&*!%<N9<k=d!4h(%&oK8>wMP61<bB3=1sm1
z&-z(iQ+qnnHN~H$Z%WThPG+C`b#ghOZ)z@C;bB3?PyX7Q-)UtB$R9o1<MWoc734?q
zCC>-*0&S$>(I<Z(+D4Y6-wRiZ`LpVt(bt|>f7q8Fj6w2Z7P7<I55Lg<&L@X|hTL%Q
z5jh39;o$rBf3L)M`*ejz(+>8xWQK2p$T#$QVO-CT8<(v+q3mEU3fZBtpX7NS*|8hh
zkz_1qjQz`J;z9E93F=LtBPG$1!UcIOIh+J<|1-X<VwlR8rT5Ml*Xjw%mP{~K<dI$D
zf?kzGeqbM4S?=3&lH-!ubCKVFfdAV;j}`1Qz-MI}{%>qxe^1WA-!KQ5qipU77yR9-
zCx6y>eAps+P5sffCfMI|@IU`n?NQ%v&%xgCf7|^heBOecuMf1~^VYmv##)T$R(DwL
z)zw`NK7C4eD5f!sKhUL53-7fw>g}hB&gKw{BwAfI&!g34<Y)hB5v{5{e~<5M^s4>U
zEy1ecK!Ii><VK&6HqSy=&YV$t-LE}<;h9exK79%2eA+D^M<b`v?il`$okM#nCSS9~
z7xbn5w-?c_ZT|)B4S#a@=g@DwK)=$-;syHE@Ac5{!2<op--dp(-#?wN*t+BBSMAxo
z+==Lyu@u&NZ2XT;KoeuMI#%!D3EmwTN59CE--&*C?~HL3<O_H?HiqAyV65P;t>e@0
z+|%gSo{_cmi=I6X`h9oN9=+&Nd-TQh8;2gp@27k8>+R2retet|{i?oCW9uiN-#GO6
zTeVk2zwy)P*V~^zgMOLUc-UE9Q=nh%+ZWTY=(m{eghT5*8n*Ot9lwj|!@nEQ(lhaW
zzXLsQm#@c{zm}f6#?kZ9Gv|=}<pgCviuI?*<nJgwCkIZKzq7{CiN9X5k5qR&yprD@
zlfUC>IQg^xKKecKz5gQpGL|#O{)AUnY$GKfouJ;IO;GmBarC?Hccfq5J7ZjbJVDu&
zUfF45ojHzvtItBe=l?%Szszeq?EWkCd;J9TdtPamjWHGt`u-Quv%N>9_4oGa9u?*N
z9GntJ=|1I*bY^_FiuqDJ;|$YvKx>wrRW2XRflQ-G`~kk2+y|Yf@agAtH*l|!U*F^g
zHgd=JHth?|CWg`EF8Ky$(b?x2MD}q8b4P|fnkVo>-cOFPQ|u+Vp^AM~X3o%i#Y^Eu
z#6P4;*z1uDb7cdtZ*q)Sf${B5r``BSzRvP~#yU9b`qTD)h-q)qyz{NU*X`>sKJR;T
z{WYU{hn*|_K|^078~%1QmeSWpDy~4c9`n8L_kI07kCfkB{+T*_3~uR}_-*}26YOv6
zz47br>te<9@ih2h{U+0~t-412Cfg&<d7j^d_?BY72|m+0`IM53C&-$yXR|%BeQ}}@
zUr7gkmfe-agb*hm!Os$4ucd|k-57g1vaz0K{KdYNjB<QBSK64+&I<aOUhu6<$F~xq
zAM7}XH688eimONaX#xJl{RFg*qx%Ybzpg%C1J_Kj>V-Ic7e7mfnqR<<B**W2JU>9@
zYV2h81Rmu+SLp-D`l|c+U(1}{Vt?SRP)g%xd={p~@WTe(KWc+c^=wd`v9s;t6KIjm
zSMUkgGJFEItl$%{W%vYaS-~e@%kT-<vVu>*mf;hyWd)yrEyE{Z%L+aLTZT`-mKA&g
zwhW(uSMUExp8z_*oWw12txsTVJqkX7Cas6ok8g)>F9(BX_kV=4kqysUy7Xu=VB<68
zx8K#3z6u=F-phW)-}ZL7SM56A8FAU`fd<;$$)-JtJn22(j68iM@toC)@2RNGE@dx(
zcw6C&JJZ{fdhDjsh1;OX)!c^?yfd;4`bcag{<as~db$Dq{5-Qbc>`_SK-*hsdn;{!
zmG7_e{Q=59K)LkOw<e`}mypBwW4r^-KR!UdjCINt#j|zn`CjeqWi2|#>`YFNwY$>;
z?PIwAoQ-$PE@j^lyD3gCM4wM<tZcmY{l%3g_l2%N;=9PwjQBKnmsJpVi><o<B)PZ0
zc=Mue^2p~ZwZ}m_8Dhv^B9=t&zf^Hu3OdT|hR(lKW5~r-%07Cj$7iuYUV1k^RpN@T
zg^w><6&?-{57ir*Hv~NGy_yDphIC=&u8@D@4SX|!2c2hQkC<nPY0fqCUTF!rZcgQQ
z8roAIYESK`J+-x)J?UbY6!YZM;Bzv+!yCVc2V1TNe!%V!^VEH9UJQU2LwJzBe<xU8
z2rLIo;=32VJuJ%=|1-gSIzsb@z@y&^Ha{Te%74eYsP7p2@x}1F4O-E@&UuVi-(`IJ
z{7?Voe~>>-G-heW=Che&{cG+7^2pY)dq>_Lk#JIL&;EwZL1b}`{qE0$>n`}n-p1*B
zUErBh@RRudFoS)1f^kmR4s_<S7Vk&ip0;Q9HtjgXj`(x2G*ZxOUZszMeBJK*^or&<
zTE@Gl-6JnJ2}ZzeyX3|(#is$c0?h1t($CbF&TVTR$~oxM={|n@x`DoZpQUs!8?!Tw
z+)(I6;dAhf(}(iqXS+iw!<mY~o7wj$(3dN}vok9(cr*O1yD=3HiiX*rC2q@oihUq_
zm&p3<Rom0=aglo+U7c5T)V<Zi_-h^3A&zX;{zzDP>%!Bl4BrB-#wS}DzBWU=irT{0
zQ#<}#i9dJ2A;7pa_lfGMU*$bKd8yZLoE$-t!Bv&!NTAd-IoykqG|6=?dodG@Cy7r{
zeF&BlwSO9XbQY=rAFa_EVD}(ro{*jP{8MteN!c>aJlQhNKP9Jgzlh+7>>=K{e;2&|
z_`Aq04?L6n7Hq@lNs<wtXKw*oz931xFR_L@$u%>Bcq_${TswS9zU%@%Ku3&4KC)4q
zm`z^h!aNK%^2Q<@$nPy7HsZY0NMi^a_<U^d3sP?g$5yUPWjK?U(fH9{Ujio%H**L5
zs;Q}ah%tH{o_Vr$T51>_N%~CoBc7a^z0TtM_Q?Kgb8oJnPMk`xuZQ|1|DSFcSGLCE
z^}<W$&YcL;3%W*y)u9Y~{T=6PAEkg#=yE>~n#p-&;ypUEfe!xqwm@PxIfFRY(H9|q
zt>S&8&&Rb+$dvFOnH_$;0Q_Fhw1#nX)g<(;@v4o8@K5ic``3q@qxaIUnb!L=_3d;!
z{Y&X@!%dt&-PjP_vcfEhy&Q|StT0QfisFZfQCJ%R?@dYX+|EDdj#qwXfsOl7_V&Q_
zes|Lf<!?_jUPCS+?g=|EC$MFm&2z53L2}e{W+0X4&anI{(|<cW(IqCxz1>7teZ<La
zxXSEMzpHCX67fgSmltwBwBm|*?s6Z?hdz$nS&uz)G5J98V{Rxj7qoox!j*T#v1_nP
z*0j9Ulf4+dfimI5S5j~FaL%(fKGiJld|GzUj6P!84}7^$o+JiX{r-g5UiBwfMX+}S
zC%u<M&yelY`T%!f+{V3q_z6S2KR`P+$0*O9?(q6>h?{qSU7Vcq4s!_Cnx#qTej|Gj
z)xashdtMy<3@hVp`^2H3H}|(dry1@kcUk}VQ%<xqXmUNZrro`jwrI0UJh##;Sx&ny
zv3_4sAHaef|NZ8!3s)M)TtE!1ja4ZpRz-FldFaSLJ9Ee-z6?B@-l6?EXusnr6aCit
zW~W0;o8aEN+C-g3CpYWPdzNL8tNEZ=TT<@a7vqk&57GDhV`WR1Rx-C$j3LThP&b;~
z`$ebXX%^o+d6c=4wJG46k87)V=LGfR;IZy0$Pmx;A~}{j7sK!P?b4oL%K3{k;5u@O
zb7ZW6+HGtyi^sPuxR?`VOB~j3>xaEHFyv`Hj-SrjfA~Byh4FCawcj68?;pc!n5Sqb
zJ;8H5ix=~2?g+1E%q`q~2|xAr#960wEo(OcO^fc%)~?UDEH4)iWn2!p_U8H(DLbYD
z{~2IT!bLweCvb~mbN&Zsv_km*Z^CbIGrs>@;9s{AKUreqbTl8~rs90{uFf+E=iCA=
zJ15B*$GpbsoQaR&*S$J=FIXv@^!TdQ!Toi<E(I^GCm!mYf6q64)$-*t@gUxOCLY|~
zY;vMA(OAbPIg`{enf*V0w;D@t9s5kbPjlv|&e_fDd-zlM6vzp!_0<`FhjtqVxl8&F
zh#RahJKP1xG;lz7MQ1L69;oNmnH}>uUj$tgaMQa(GV|^;$K-?>qn)=q(KmUY^=)fF
z28$llPad6pU@(x-7;E@s@dL-jJL_3nZ0ra;3mMSAMc<DR?+j1P-fZle)d2s2#$aLr
z_?~?%knrK}{sFv%@`JnZJJOCjj#kvK*5)wupuENEdw_9!XHY9_Y^~)PQQD#0aCf}w
z_;`I4>)}N3>6F3u%gvGucijfBGSgSJ0YBi@0=*C1X!_?iztuBvqtjo;`OGz!a?dEw
zUabfvUN)B{8tyM&IWRR8UBmhJc-iuW@kfFSi~0Y<rs~SAhPwbcbJKc%>Ac2p;|;*=
zhKBjhquVOYvVnV7KkI}YQpSg;MDCw6FM<s3ipT78JzE}Le#0(vj<q|~b{D)%ePtPg
zaBbPw3;g<EzD|40;&J5PPs|Ss7w7j4uNmnfM)iQo+)yy_zB|w#3cru=OusFUr`?MR
zZDnZdO~tTZ3d}A9E~}jWQ^=p-{nJ+V)5nCoYyy0Flku&mzNzMZ@&^KI%|(3wSzvAQ
zV!p35Ym?+a&cBm5_b}rle%>|7qmf(S%g)m7SSVy=<$iG5^0c4j7q4Qy-(78X%xA5|
zQ-w2IbVsCnQ9}IElk@XDIS&tXz`GcG8e7=kY^;J7wgnTh?gnCuoukCtQ;#z8Ge6f=
z=!17!fA37bDf)@ML@qUO)<ENCKe5AwSX`$p6m^jYwahbH!!vvWqRTgFKLTEdMU#6?
zqGcYj-SGb1@@JWV^?hZ5M|`8@j~B$bV_EbVM^2DOE?0;z+7v0o7wv|218%|Z<(mH8
z=bO4!(y3S{@xs63+xCC%SpR?i_xT?9?S7NISUS}HNam76ybQk+zXQX|bE`gXavu_}
zfOlxj?jsY>82I$XM@%j@6pL2lb89X)Yp;jyl}9lKyc)jf^xwXc*m-i94-#8Ch|c*Z
zj72ml+ANm)qS17Lw|<a1PFbUcoz4T;u@m#6aWK~H5#nlAOJ_CZi9oqY*)rm4Y#DJi
zf%1S?ru)&R!4t*9FERa9+?Pche$F9&u$p#>&D-9(fOFq9I-8dq%{!i+3s1NXc+WFA
z_xt&s99*eH&P8?ZVj*`^$i{`o9iepY<K*(S<6}=!`35w`PQ~J|FI1B`ClLuxNrcE<
zpf#_W#yYl{+#L=)<6>|S9Ls=*#eBz>w>de%Z<R3?hM%SWFBtC~pM0xF>)K79!m*Rc
zJL!%Z+j`0z$33u{Sb5RPQgBXd_iMf-7kwRGa#1)DrM=jCaIO*_k3RGIPfAj+%dd@2
zK1_VzIkK-GBfkgs>ieljTjW^@*6RHJ(-k8<%%?Vu{2PSMR90=0D<(-NL9b2%gYa9d
zIdxuRT)r$lPW!_=fBh%Rt-Km9Q<LA7ta^8?bSvpq8FX6dT5<F&-95lK4}6&KZP+hd
zqqy#u1=weZxp&|RvJnJ-#clg*puE!6j!D!M^0EZU4Pe)TJK4yu+z0;T9v{m0tU{(9
zrR|zR+k0r+?`Kz`AL-V%pE+Z6bn-T682;kvZXT^j_KcTD;!En|U+ANGy~*uGeuy5v
zK7I~=xzV4)<r?Sxt?&oYr{Uf|(QBAH0in}u=$#jKRIskxC)k@0q?D@+y*y|7HXi7>
z+~|IY?v8JqKhp8d^GANu^j6RP&~toaAaQUNF~Hz`pgcB8+sa!fSt>lq|E(uag(vB=
z=yQ^n&Nn@Isds#tsdw&TJ`QW}Pt4PxJLtD?_7~*H?tq>&Z^;zRJ^WV_x6w))(B>x5
zW?-6o0Ngr|X^nKpg;(fQ*+%FC7{)kTB^wrAvLdc`3OuGuW9XZ>?f3Cawq-`Pb75};
zJ#v%$A@X4aSX<GJ#+^a;jROOd2_`;u|64t>`-I<H#kaxz05+gcSGGND-SN66JiRF^
zeoz#rY~!-)&%}|;-az6boA4tuCtJt=h8OHSeyT@jIczy=^+(kEY2p9R3*WEtecD{$
z_x@az|C+t9=XKA3Kh{C)>yZtmsS)rZ@(FY6v6W>h?RN}-Kj^(|B?MFTC4se<;3Ks*
zsC#vSbAb1@7&9&Wbxx+4suw!%hfm)^oEhg@I+r8kID1%CuyL(Ex6-s{Sa;-Udj_8|
z_jaV>@I(9`_6#cYy&`)#HYV^SZ<5XNwEO+i&#xtR{yO63gH|7}B6r?G_R-+uw?@#z
z>VIn1rtr7I&)2r_9Y=nK<$n~c*+VhY%=3d~9zPx|V@}M!bB$omolbA&cf3*)Na*=>
zzsdL5ckr<rbfGZo&KZhL@YjCn{<5`oejqc*-XHJeYs|>HG&Hi(X;-_@NL^+dIaHw=
z{ddgplFTCb7I+Sx_Gd1IM$s?S*Ubsu0~WU43Uo`#GsJAz{_$59kM~`&<$<lk9U^hj
z3~&@L%(R;JztUWI#{UD^<7G=-;Ql0Ks-Heyw#0o68(6xuV9!{#=-KkdXy#bil7Hv7
zKVNcn5gS<Gne1_D-tq+ulDkWD&R=Rq+<0R&S!w8_F?yW&XO{B&eco^PN`7BoD8G!~
zw|T$u6Ink;Ml$ZT!kUbm-~AfX6|w#YlO>5T=S>5ghu{vyL?nG-LgR|{pnsw#sLaQe
z<$rM|++Y6g1aMzjfIIyQrbnO^AMWut^E>_aGT>bcc;}yg4m6mi?Z-~_blw6^JA$v_
ze!M`f`=Q2YxYE=LzdI)nKht?9&!z=xi(#z2X}1aZzruO}d##rv`~m))7n=~~@?+uW
z+;j|>>nu+Pd&h#kh5MhdUekc-Cp?%Y=aZ8}xD6b|bBb|gq55X+Gly9FXVDJ}|Ks{!
z5<3kSF4VKv8lp+g!CCwoEVFd$zR#oG^gw>cbk%t<7L5<^KCm#q0>^+sdWdh<%pJ-v
zw(s&^FbNFhpV9mE*!6$;%Y0MUa6@$UFUyv8(a#?6MLZ$%YJR71CHX3CfIsewWlL_L
zAJrMS#4PP%{CnUbU9^LpzAqaJ?2~PrI<DMo@3>OA%H7+bH_jjb64??2U#@ZICj!7Y
zBHt!CI@8K21HQ<I=C85%<zPi1^<!}7u<!z$(7S^bu@pIhy1}vj2HGi|4GmX1%O+uW
zRdMDKnrVW@`y<9oao03Pp{0J#J6Sq#FXWp!5PxU!KTX~R;eMDikS&}|7jHO5KbZn=
z&|1A`0z6f@<qxdqFTOK|qs~ib$I<L%rl|}Z_2&PM|MdL-mq$DOhl}R_BykFwe<|>A
z+;=2?@T+$ueBP~Zd=|^LP6Q8dQt(KZnx&d2@Lyc<e13=aXgV)6i#4|8;jyu~g|+e5
zL~#RJBXoz{M;O<k!k7f_Nm?7|{=vf7p1kuN35T{cmM%M%NvExi#v$Ag%!}cj1)k&i
zaWTBR3h;KZ@ihn4J@%vgj*Dq4hE16HpwkaNx4H8<>&x>nI95{Pu2_D3WLfj|;bqWw
zzn!PKaC8mcZl1sQAI<Z-7osa&cn18>Hs`J5#_13%;g53?<GiM5oEHJpt(mEIoW<)a
zx^d37HqeYI;EZTRZM*~=o}?Y&%nw)}$)By<@weyBu)SllYMMFHSwuHln?EQTr_R+Q
zm(My*i_;m8rZvuDx;_JU7~fC7VCBKtahkS%FwMiAiSStCn>K!Y+(&jcINI^0|MTP9
z&iKyCb7<%7c#g*QGJLKJp7*zW2RL7D`%nJo```3-{nJiq`0PAS{ePc+MF(0pM`zy8
zLI)+l(5Dx}-k4u+JRaIT#e&`^9w0gY%}0^*(7oi|eY8`&&U*f}qUVyar#**%_VRoX
z+Ep7fCwSgd^n9ZJKUdU#*ZBA8|B<5S%0V#N|2W+tseJ<G=GzpKRgJ*U>g&MG#g6dh
zw{%RM@0Z?~We!`v4IXO_lJBowV|@s=twR2TwDdphr6t%de*f}ON#FPXkJn|;ahpDM
z<W!Gz4C$F?_D{|=e=Qgv`;|L1mea<_m~@u?ANl-4QD5r&82|0uCTzR1Pv`3Xi2ikc
zy4dC@K1;3h)8uFC(|Jz$=LYc;%P-{OYnSa&LC%r8-q{ds3YjGh=bBsZAU34AF0l3-
z_Ikx1lwU|NOaec~QmfxL3zk|3*<$tRCi3I?XL3Jpnoh1lE{7^>Cpw#J`yggQeO!V~
zfz87`(D=V^TYc|pY#ygz^Vo9ii1FnXcGwZpspUs0vL(os;n@-KYJBY25bg)f(l~Q-
zuQf~W3OenZ?|H|%mg`JY3(qsy4FU3$pqsYu4$WTD($Em?Bp1!0LB?{wSzHM(?i{E}
zRG|BCHsgZu_3N$f!ya0#@;N>#-I;X>on!W^t=0wM1bR%j%R9yVUoy4Y%G8i2Q>hyd
znkmFU_J`}S)o3GgJilYN;>gfDH6O`Z`@di>v9`AS5I&Fy<C5L9dMi2A(Pw3sKQz0c
zUv|@jw~>$RV)Pw!9qG5vH<JGZnhhgsv*2G4|6w&g?dI>2ivb^^;lE^T{cYiACEJq)
zU23R*q~|mni#DtdMH?som#0IShp?^q@4S)U`ANnb2aYYW$E*$IJSH1zt;&fdEVfbq
zgtA7)d<Z;Jj>4?+iGnM?#6NTg&uS)kHpsI-=9%8{>ucV!9R-`8^E{0%%-PWX&R;4&
z5;-03$@kpKJA%cr2D90)zpe4H=X;~ZsPXB%NxT90voA3bynR^9jvd7<;<1EVkJ6{s
zV?eqvIHP_vcCCfhVVz(Pe8dxq*R~kWiSckQvSt6b59i<Hcc!&xHvz5fZZ}PT^xCPO
z_;m8x7uli}%*&sT=;Uw#e+u)79%kIaoz_zHIq*fe((&hkwa)eU!&%1@%nAS364P|W
zk{#tve-r-6Ezo%QeRbW{d@nb|#C^!D4G^Qb9RE!3d~*avzp0_bK5OsAN1gtFX^J5G
zWUsW~Q>fH>K`XI%RbsQHr@O{%3D#dR8G|8mtim6^^Em#QGI%xc6aEf{tc}p^@UGfe
zzIlws#^|eLRA=1`eH{m{n+iH+m8opY+`(CPtp|Mv(cP-AuUl4M&@nr1;m&|}Fn9U>
z@F|<*ltl2h*5R&sW(WS`Xm}?1OBuh$?OgAT8`%OMn4#P@%1_+?S;j0KdjQzlF{8gp
zzn1<MLx1Zm=x^9Oi}hS%6s$GQ!2N-h73Hym<e01LAood}ecO}pnGXCe?5{Tkm~(`@
zrxWv{8GRq8Z_Taoho8kJ#-B{THFt*Zje+m%7erOY-F8z%>l$+_^@W?+J?4S|o(1l#
zUPiv*Zu~#Xq^DDNpRHTO6JC1ube`bbRG*<-c7O84v*T&!8q@UjZ@^RHWQy_hqsZ<!
zF^|RkVU6@KU@f}h?zcYSZbyuqpp+TnJw)4r{U9_a`u_&cVthwT_(tC+kX>Z@SEz09
zy9&G}zN0D5eU{-XOr5@q$8f#sRg;H|_ynzoYi2KrH#9_@=gO9dkJH9!<GV`ruZ=~k
z&Lytohxw+KzjoS*qg%YBsN8uEvQznL=vR1?oQkaje|Vm;n)&lrs()NhwU!St){A*}
zHElM(4?KkGTC6Yn_Y%(hPaTYy3ld@OxrQ2d1jJwQbzN3~d3f*HVV=FsG<^V=tN$$g
zK;J9H579MyxyP0D9i@i`eEU8<_<d{r<E5YCSed&b3_ex9!u`KNCz?S<2rm9dveCVv
zST@e++xL0s7d#T)H56!|^JDR4v2iru<D_s-ykEE}oE0DVHf{LyFS*LP_x~84s50?`
zN)x#83f^hCD{yQ5Y_s+f#sB;C>ztnm{<LLy8qc@EziM8~*CpXw3&M}B2)(bS+aJ5W
zrMtk>$g@_`mW7{b->-SLIr15PN8o4tk2d3<6|bv4SNW&{Yq!Ab!uVRXR~2|B-_%Aw
z23}WXxYr4tMsvA~m|n$k0fY8q$oOPIwpN~nj-GkOqa%0M+1E6718er{Q$3P5<cvwQ
zli$qOYcwY5I^q7ZCDKP;MUNHlPZAF(zE5o1{s-Z0rL3oT|Hkyxg!1)22!5eYSiM1V
zU=oPg>X^jlVD;o)=Hud*UJZP<hWE^EHkBU>V|%s$7v>*Lv;TB0xh>@nk{li=_#5tE
z?Iau3zWfXW@WPkC1?9u4BTpvr!F3v=xe~pEeA|bZkF|f6W7hyH^s);=@MyK!C?1Wz
z)r_s3MQ4i8<|5$+^@O)-M}1Yp@AP|6{EPRcUpdlyXkTq7p-I1O&t?kaWANIHGZ)c^
z%NmKt$4}$&C6Y_InT0;Vy`1`q6!3aAyq&(SZH~WycnR^^N~_<A$HtGHuG{qh1IgE~
z)|tho^m8k$9C;djq%C0YzmD8rvT`@=Y(+0_NMCN(rt^F=ee(k)D`WT(0;j5$ZRUBl
zRs3;A-(<!m*nWd{gOacA{DkJ><9M;G6`Vb}RYD##lgn-f=YXT$lOJ7hR7_R~Kb_i9
z8`bEq!EyR)mi5s4{ygL8^DkU&HVgmMM)E5j4my{C8`RaBss8ur?`-SluUUMdwZZqt
zu$?uJ;_>@qe|p@wHD=WhL4y;G*B|GI?(2pRf1Dhb&R>)*{S<sR8!=0XJztyodA{j`
z^mh?uUx8<QPv>CZ4ex|!l)P_2_ZXijZR^Ai_4&j?ei!qJEyS+*d?Lp0@GZ{0f-n29
z(U=ofe(2iq^RoWbf(`_n`Zq8?;j!McJe2o<YkzA2=lr$Rw{(k^0{&GM`G%xlh}TQM
zu>79*1z-Q+PL2z<vWG36zj@8vmC}R6cdg6^r&ej5=wE#c&!wOL>7V<&cUG<SHPf!_
z!LPw*jOBeLLs{-$k0V2!zb;#<u?x=|$mjky)X8oWz6NVQL_6Y%qBYr)`@h9rsTp3H
z;kjgS26?F8*YI0y#KKi);6X9Gpw0fv3*+_SRl<9c5f5HpWo<HtHiDyen5QS+!<fXQ
zE6t{LbJVZ(!IZXziHUicxu=0qIXvi<>)*L7FCN5ve?UFwT&KOM#A#m*KW%`YYCRoO
z$vkJ``;%;i*G$2-f`=*(R}1`7<64gH8UVi{wCnpYy?GF`E8Q2~3IEKUdJNeK&y+4H
z_-C1i_I#yF`ucA}k^Vc0c|Bz5GdQaMvSxPe<zGVoZgb|s`)Dsr-^<~df|-1*T65pe
zDqiw$^gVvvU+ebQ-IKY(r#$qs@JVl8vE-TS<IySm&-C*gZHf;H2G$3~d^~!sN|eB7
z#^}{s7v25r^K5he7|)hGkSy?d_H1ZbG$Nk1Nw|Vc+JhbK6nMGht>{Di!`Io1@y6HN
zlZ@|ddb>|wodx>ZQlz^pHz0G`9*c+1z)yevpP}sn9dEaEOx^J`d>Z`{_ug6X?OL7%
ztQE_kwGk};7X3$feH^^_G4mgV6FkV5ZR6qeSG@1nOTJA#<xUk1ya>J+{E)%}(Lm7J
zO79%Cl~$@AbS-`^d7qscNcAu-aMsF?Ecs|9k1hv3;{B@kIi5={NH*%uTFvLrDAPQe
zS#SLp-+RcbXXp3NcHYQd?7<F|Pjymyf2u8?(RUwZ>PPv()XzQMyS5MIc~46hoWN#w
znVWsKz&o?4cRy0}?z2VXZYe7NSz(-7hgFno9fZ${JG1^j-~~^Ut-s&*<A}dKxO1e(
zmf>@h?D;2X?zrMI@blPl6#S2uy;*1nd7K%^?^OOa=}UL~%JVO3PucG$^On^qM*ESU
zP<J`#x%`!{^AYaqV~A%{-cjWnl??OaNc=pZ>5z9vs-BzjhJKZY@h=&8)oIVnna|X|
ze;*ciG1xm;oACoyqci&bH<mcjj>`gT<CJwcfwgJAW9ZS1+=W_Cd4~V>Do20CAJo^3
zzn~Re-XC8Kxv6>)=)yVIBy?6L294{TBszHm=j=597<#(u#Z^{r5{k*PWz-9+jCXaW
z2N^^>hIjw3!@Hxud1sL4nh$Yu_Krb#N_!2T4ijvPk!$cGbp8cA3-Zk!T{mpSFCrUV
zbLzkbS-#9n@7mNgcWdCbB_&tDvw5y~#S&*hcL@Y-=&#C@*!yBbCLP5-SaOZIZArtu
zmD8K=oxko7F__>Zep7FJHTlo2XfUD4)%oTnzhZ1Pw7CtPJ4~A)r)IRx4qyh(;O<CA
z;U7z$9BE!6->|<vT3h1d?Rd(-fl184U!OtxYjrN_j-QGh9K1I^{Nb>8K%nh8)}s};
zwO;0M?l(B3^?8*KbXvO$TM55Ad&cf`f2@<>6<VA8M%@n*;Jk`SoLCj&d`Y0s;y<)_
zY-Nx$OhNK2k>ifFu4XLq_h82#sKD-OgnpQd#l0r-*x}de&xD4TE@iyAOS!9svq#e9
zt67T{VhW<S#fQVvS&8pxS%H4Vog%_<<trYnkbkkV*2Xl$UtH+zUhNN%+c^LYhuKff
z@SAz*%u)X*SC}a4b3uGMd#<PQOLCV=7j{?pV;?NDcH(Gm;N7hG$c7m4GY!PHHxk><
z9V8nAHjYMPz(09F{)yuFJD0vR-VXW_-%=m16u!gMJ<M;PH)+0xG5hqTHN=14Z$9>!
z6{hs7>wr_6erL><b!(<M_jR&1&{}_ln4AV^OV85jq^*}h4>gW+tKNyj|4P&b{jG8J
zoO`?R^*j8pzsnq1$nWKPpYf04?49O_IoC98MArmo>zq31;9l<d0PkLc=RCN{ePTIx
zL|t>Q_g)ZOPqRn0jrs<hS3TZaypXaadd!pLDEHgm#WRhGxrrX?G%g>f?3kLc#i9LJ
zC3+>ffE&@j&>w1{?RM3Rn2_|*+SsRK3#+a&>xgfv4RaPG11*Vv**5-_ywK1`%yEX*
zeq_6OzTPZ9@*Htv&V#xSY4_J@qc8U74Jq2|v%kw57FH2|I=;Q{-HSdUSV6~o-^e#L
zE_2$${O8V~weRJ>&O0<PzlbTZF<QDuVIjD(96n;EnOlKH+bhtO)=9KiZ$d*g`foz}
z$lZQpE3k*=yX9Y!PeW~g7raoP-{$)V`0N9YyW+)DWov_*V)tbp>7BcSa-YZ7<BMHL
zd+?}eGrSL+6P=F2RCATTLhbo*=I)$PniY*oj#xZ|W_=nKPG_N2bl3weD`Kh5!N9&<
z!OEe9;MU0+lluvB@8pjfa<Ou=^DfSlhz8@;#QscnQrdS~bFN~~D!WCO4W{x&(W7Yb
zYIE_09bLPx`bAm!P5DROx=H5{oieldc<94l-a<a`_}{Tt!`@W<M@}^9efP)V2`zh|
z1?W}$U;y~GaCW8+e&E6vkTpBbMuTzap0@fG|El-nKjJKy-l;Y@jhpf2{JDLd{8lGx
z-kuLc#_<9F9-_O9+1arokdmGlr+s)4=kNmEI{&P4=^1KUGTx_o!BI5t^JaY)pa0al
zD95_avA>QSBhT)NW_&khS}ZjcnsbAuyOll=H2dOvkh>2AQmr%b%?8bqyMKg_2mK?$
z`aQ_qHSy`O6u3Af*|^b|eJz~d?J$)?gV2fE=?n(Cbw;#>_YM7woiYEuJ!7tQN#l>z
z8n?2p)zlHp#qZF6`_yl1mr1;aepURg@-^rjus_Gm@C~g;rqo+gt!EHEq4f;2o@%pm
zlG!mE{r+ywob3wE9{M!=Lj9J6X6)1Ri|DgASTgic$`4)a^{e|G#D9~((-9tNeyp){
zeTzHLXh$%ZQr|uvSlLp*CG~A+JE`*ke8+irXK?mD&1rLRM)!E$p3dd#be8&CtY?^h
z(?Ju}|G&{X^R2RP7JmOF--5RXpGn9;coHxatOYyOf0{aikw=@}{h`Oe59QY13$3+6
zn`;=C?xs^*KXGk#e|ODnXpdOs!B&&7G={v+EMkw794gFjEo;_f`0dlT?mdH7jLJ1=
zuIU(fsk^o89iWY#Ov`ZgB2FJi8CRAV;4C_<T|;6<6(brXX0(Br(Pm;s7xKRfy(kNR
z)qBZP?0b`A0RH#9m8XSVTUqYu`UUOz_%Gbg@8vG)g8p!fGp)tENbBJ9AZ&rBTJX)+
zgTr4(W~~OFo8ifE=4Ww|b!q`$V$g%;Cw_blc;e$kSU3S)ibj&?1*>T*OPkH;uZqPj
z9;b2>SeWY^19G^b=p2IsEHlV-!3MZue<lyasV|y2o9+-{jK_eB^ati^bq1|pT0R)y
zDj1&zlOmnU=g-ok{5AA=G<*E$Rj<PzehPlfE?dt1Vv|zEFw<Ua2l|y=H*ibeYv6hK
z7KS3ysR}$p@Y~J(CwdoqC$W06(=R=WyB63xk)6XC5nwxj4Mco%ZO8cm$<6K-c<LT<
z*>%8c;^&yfY8yBlQ2SwUB8NWqM6l#WwNW1`8Hzsk;1iqO&2uB@1h;SOojbs}c*TC}
zjDIr7J`FS?J2)9cmN52+nPX{$^VpU*sh_!}rtXE{obKbHxwVSFmhFvgkDpVtG_!B^
zUvR#b_34<Le$UnCmfy6Mc8OJ(vXwU9Lf$+u*?kXl-O0LIS>qODjZ=^{W}K|)D)5I<
z-Scf^jYBN<cv%w`u2dWHptG;Ucnf&q-NQRh$Bcm|<8{nj8~0BX^i0iPb|QE%dY`W7
z2VC7Q{@~x!$K7WAmRE3gLA+vcrAeRz^l+DHKl5Eo3_f~wu&ssuY+Jmmdrr0feq2Y^
zj-_D~U%~C|ku}OC?!`9S|GYQId)2(>-=Pr(uZqXVy3~pn`0u-g_r(hW;O5!d$$~$2
zUM1J&I@u40jt@lQGZJxd(J$Y^m~44+t}PdSi+_%`xnA~OF)!twO~yI^54G<>vw`Qh
zQ-bg8MtoDc<4y44UfZf^+>HSYGBw0+EWt()%mpX-XEB@t;D`8UG4HhfPXsI8{cnNQ
zxORRQSdG8GBENCk^UCWb-=sfR-Rr2iW~T<N9#{eH&vYewrX9()n#5g?KK_JoOLmuh
zItSh&?w|E`h^rHh$q(HLeAc5kDki{hcVKG6X)xT4&PxB}I~co1A{}ae;pC;{8M{1~
zE5@g@!j?9RVe7veq2IINi||tTIMyaQ>KS-Bal0+Vg8A)sj>FG0ZQ>%BT7A0!*Mfe1
z47iGybB9jt%y1I;&Kwdv1z+h0p9e1mLl=BZ*1{vX7eMQRFFLn%E9bDR4rVM3gz*>1
zHVwf@_5F7IMsP3YH$I>7;jJ<GcBwBzigTX%`sp{{%=d(dw}H3VJ@qv4Rq-o{&EbQ*
zZcAe`xa<{y7fZDtxduKjyW%0flXtc(>*6DRWYFiTK7s#+?`FQ!d}CLyATD;X+YpPI
zHRe{u^<ej{9mEb2zR3O>*|68sQQ@(je5519fK?nB-&xQZG*?%#0DP*9S&QC!Uk3Y4
zZKw~mp|*r~53@J_B6Yqu`^Ni{)IlcJ%2szz<?ABYw+H#1VLwG<bg@;Nnd5Hi>Dm9`
z*#OVp<XiG=@N#gB?>+F3hC|nJmW8|xmlK=tM!rt>&=kWHUBA}T^$lkRgMI8hSpUaf
zc<M^lTe4ELro0Ya(3;CV5rh0k7xC@u=UdsMjx*O1>_PPYy00L6d)fDK`H$XX?QMe{
z)Ome;*=}s~<Ye+KFn-z3WAx|2GfX{88^ooB8MoFO*hP`mzVCCp@B4f@XmYz&1Qsf`
zaXfDkPcidZYxFMRt?!fEMLwkrcedmYo6D0Q*6;XJ$vx){e`_F^P>$wZ+=;cTmUg!W
z+IKaacWT#BqqXZ#J|MdwV1MuWYM}if`U?HqoXWa?2itV}$-*5wX~sI5Z?7=!;xQ;@
zHozGr*=g$wxpBp-bazeiVRAtLpEJh&FgdxdMOPiiuS6rV%fT1?+vwBiCFVKp=>&mW
zNt**NT>V|yw+m{U?{_}di5^Sr)Vo~pJiY)uAuPFs?fjhSm#yA$KlYq!?7iT~s}-`X
zZ2mjw9eNp(zplgt_pL@(lP)~Sx+A~48?f(0_iAHxIeI2I9S@@u71~p|`dMDkk4M{0
z!?VGKt+W&W5PasgHP$9_INuX4v}fCT5ZDk0s50TX&l~iu^Kh0gT7ASj2Y2k<((8kL
ztLf7}2e-Rq_?ZF87vO`xD)$sT4*phW@lARKvB1Urd^fN<#u-VSVe`+gWze4nk@1q<
zLH4<><bF2u7JKE$@A`~cy9M|RAio3nzjosrL)UK$P?l|M7#?W;#8X{w^d9wmLqU5V
zm&UI->8_{zJZB`r@3%I7@2VDTJ8XiH{Kmakajvevg*$t=>*lZinR-62G|-2g|K7m!
z4ZJrvDBWWceo@X^tt?H|!M8*|{`|tgB7^P9I&m*iAQi9n^a|P20m@wQ3HVML-glTi
zf;*-|2l&RGWBfI=KPpSHZ-vjk-WI43Prt_U#bYah)!u?V2hTW+y!gtgyglD9I4LgB
z!G4ilD*W2zI!B(wx2Jl=<Ix^|#7x@fk10(2Qwy}j`X$uH;To@g^l|T8f6HX<YDOpO
z2+B?{!pH8G$-z|X8(yDPX3|g=U&|WWSlv*P_-d1R-ZiC`hXqbGFSEXWa1fdq!oO|j
z`#oS?hCftmS&D79h4sv{o-t@OfN!u2KVdok!r1)4!t25Ls<d;e93P^&#A(leEqr-1
zeCzsiO|Ii6_dQODX@Bv3=7{{;>08Y6<+S-+Cb{l2cgCNs50tk-?@em^z2_J^#($yj
zedH$pWxjXCXUvrDOU{EY2h7@YXY|f3pJdjSM|$U01p;jgrrmI##`Ebr+n(*E9b$5t
zM$7T1z6>0n1CEiHGyL)uf#+W~<=s{CRkEh&N^1|9*c(}VA<yy5<=Ln2yz^Q4ZokJ|
zs{$o$VdN;|8j8V3>WF1V#^%sh;i-Y{dQ&!p{KX$hF0y$hb(p>7LGq{1hpq<6L&RQS
z-M~DDa%|-Jv4zhuC)LePF{zhk1yV0#drMXkL)G&#wrX~YLwPJES%p2nxa0Tnvy8)c
zwIlz>7Vb@qm9yr|kMm#fo>KgwLG17VdQ8_7ao$zV#_?l2feh2w;4ilQ8>v%*&$f5F
zIkKC3*|hhvrlBOteWmR$o4~&1<=m|~-)UcdF5lCfe*X8DRPuc;-|#^G+q;7KpQ9Z9
z27TclaVj|z#TXXRzJC^7v1Edu#`b&s7VY}<>)Q+`R&hTxJj$opV=GInuT*?#pkPB(
z(RN7u7(0UV-_|Z>?)w5Ir77{Yz^6_B-N?Ny;QH<v#83nCz35AdrGW1*KG|AoeMPgO
z`PcDBER{cDkLSCK@%!^{cy$ea%s;t0mKqA2yRRcKbLe_xM#lx_$Sbqp)%fPz>EOeU
zfaUbleWiOYz|Kei_&C132)NsV&#47p+XDGcnMZn>CzB7sgVBTR9)|pD;z3Dxkj80d
z7<9^OQ=>d*oDG!aoRsVz#f=<Wxt#rxu{#q#8grhXfln>T{56hxbhAs&laHFShygRS
z@bm5yALE(k^zZ0&HwDh^z9BHR`|kti5QlO;Ijqj<8yp5F;hn1gD!6}r!0fAfhdJ{1
zzyRK7_Xb;_p{kg3B#`KN;+wgA&o1cG%x<_(_dBCA*n9k{OyFZ%kRuuNG`0KVqIU0u
zRs~06%nIK9Sb)8A`4C?==kNQKIk)>yfZxmTv5x@1crAENoY#Pvy)V1U^C5lasP^Ni
z4;)t)baKHk?!%BX_QS}lKLgh^*H^J0s?K8$j3*Ai{5AdjALgEg$F*Q@hM@Zp`#%2=
z2zIY#U044Z_Z(gz-wZw%eKU?Abq3fEGG?mIb+#GCIe;D)50>H^L&r6Z_r(~OVD%Zv
zJ@$+6$tC_gViNzrM|1j9;RF3)<K|W`3F5=NHuW%L)OQ{9#~#frU&hK#{=)+9CV#`7
zz{pwQZ!@-XCwvc{Z~1eUG0A2I-fiO7CmB<Kx#X3%%f#+W!lwd{KfWSXziS=5YfAmS
zQ`f0pi<?|mGA(vr1V3WDG?w}#<5`X0NwLbp7x@!4PL1u47}rNHFwcLK??b@V%242R
znxCKbh*x{`?ax8<cL{UIAXj}me+#@uW7n8}R+zi+emTFvd3*jy^E9lbblb!51olPk
z{&(auCwB~9D?jaOVv3W0?!{2K=y_r8-*nUX&CB>k|CR6dVd{HyCYf5=UF@Sg1YN=7
z>yE*rb(dl~)cishI@!bIN=Sy0Ijr#j_|k=L<`n$Zaq?M8mpjZ^7`1yHw0r1_!Ib2A
zhVdpxkh$<>wGAKJq&$FX%YDxD_g)c-8gf;JsaI7_J`i+X;+!@$q(g~PcxeMMO+kZR
z&bVj%oIM2SG)p^4_?h}_D3|_#%}iNK5ME24#bbAOIK+`E)|S0XV65lEz_b%sWNAY>
zP*!}jL~<<9=eMPPT;(0$*-O;-d9&ru8^`XB^v*h2+uEK@I>b7>gdEGFS9$kJ25XPA
zE+<>3kcaGC@+cPWq~%PMrOk5I9J^r#du-SYn`ATW<SrcishehVFNe!G=G=MrX?L^8
zSD7i?%_5s&CpH7QBL8L!_^&&Xdv8EjJfFS61@IZ<D9JezZ>~Qt1rItR8!Pi}>r2{X
zSO?<8<=fa~I0u9r_kLq*W#A#UoV>LebgSa|XA3@4(P98RKD3^@KBt>ozlbmXO>(<@
ziJVcrp^CQWhym*;BVHMO;sp5gMaGqVx3$ODCI#Plx7@dzc&jY-7j!xlroMwNHyfX{
z{%2=MmzW9v<?eCHUP2Dp93_lX^9qxnuPWs6RfpV#g6I0+{2TSoM;Vu3@O9bO^NjW$
z?D`DUpRTKJ;S9!`>;DJ)v14~So@~95wR#^uPw#HWtGJUb3w;lV=Hp}X@<!tKU|a@U
zSY<Q&b}_cDU~HlAEF%8?$*L>$`|I5A)_8w#CHHGiZ^f2{kKEWn`9QttZ{6h1jho;U
z{FYPHek=F9{4?X+`Ge(!^W&jD^e1cgGHx5Q*9qLvSI8?xu14@zIGY7#qMyvA<OGEV
z-18M91<!)6{Py%*`{uHPfBv9(mN@d<i+r9fH9OtO@J!j`;Evi~d|P-pdH!ctbc9S>
z7#Sp(K63(EpdZ~qt+rCo#P=Ah@)|eX|EYsn#_5U<8JqZ*U^Tj~=!`MF%R1L1dtG!|
zyM9OWJM<lZAB{dkN3~_pYzAGI`fb_QkRMaYK{Xj%;clNWc$a=W7<C&=)V;}Q4}X?)
zmsxyz`7Ky#onC@=HP%Bl@QYGtlCcj`KEOv~)x2MVZxqk{r@*9m{t@xzi<R3NT`I|$
ztJXl`M~jI&K3TR@<Iotiui9J1-Z|@@W!^vKKYi5tbg~TG*a=)!b`ty1FTaxV2H+yR
z6<&icLlJC}UBOvH$yf7D%xQ&ejw;%IFXNb9V{W~Q|Hbq7&IZox`zzYgJt%(LqL;ap
zp+o1sz<X*xY)tOUMRi2K1km(kS%cXX&=GVT4jXLY-nq%c`MM_yeSef(4aM!2`0x1b
zUS=#k28z}!HkfaEjQ2%bcDzrpUe}uF+2}BaZXg=ed_;euDgTaDpBC?WL+za>9dPtK
zE<P=r<41OFz~+jc(dXm5!x}#WjaZpu`J0Ek8F;`J)&qGyB-rcxgsrn2eu!)q&Zxbg
z5c8(J4!=E>DJIVUKfaw9`c!Oyv$5FUBO6MHf0NxkiTER{zi*1*Q#i4z)ZWu9xuf%a
zhW@vp^YvCkdy?HhLVqSU+2#MSM(_<EtbA<^<R$(pI%U2r{hsBlZH)gx&h+FzSASFf
zYrFn5L+nBo{QW`GIk&;|&RuRwrj+1+ZGf)v%d{EdgIjM{ZDVONHIB_QpQ(vGn;ncj
z>jqi#nucfdt+7+?!{qR}*=bk)`Im{Aeww|m$I&IVF3PQ|@w|-B`WQIyGJfiEd<wk{
z!DvgcY)XVUmCnza{_9HNO`MBF9@mBA?>}geZ91Fub=Ek1%Prpjd!ZNpS6_0?!SGc#
z9&G*<XPc%~tqgwQgZIUCHfWP`-$${5g*!=TJq@k0U)knT#@_1^zg*vT?c}dP$EXIb
z{yxwabi9!b%ZZn|276%44<TP@@0Et}l}*vyH111i2lz!be$A&0-{?aP#8Ot9#Kr;b
zFO)&gob6`*_>T{~0u0{5*YgT6_&zvcc)zf(Jc^t7&?NBSeDW}bh)bKsKIxdAaBSsN
z>^R+Be*t%zRCs%)<nj_eYEBMg>EIKuZiu=Un5AiOM0!Na?}N9@zqQ)wPwxRH@JH6T
zDUCg4I6r8Zf4Z8z;~(Mk#V(hQ^dh#LkF$Hb#(a6=fnm;xWj{`CSm*(paVSXt*-Hes
zn}FNR!0i^|%x-0jEAe?vvirvAJ^0ZBg)w}~8$+6PX=c2BKbnK$O!hL~^o43W)U9!K
zn7}XZfKHT8J+l!U!51FC0sJElxSqMFo$Pw2z0=HI8o!X3Iobg~!7ryB{?r~Ok7knd
zauM^672p^Dz32LlR|m;0hh9-c^P=SwH$!XNoc;>%@adZtb%(*r7vLMZ7scva<by}Y
ztd#HdF5qyS_uW$ImB?50E9;+yx1{;KD_AkK8$D}hQ6Ity^`reJ^-;ln2I|AYf<A0t
zZ_|g`_4`QjyMuTW_3`X!eRz5YaTPhk8Bw37soz}NiqY5>>1hU7`0GF%o6hBK(p?j|
zw&^x6)QkA~-T?RXZp6!p6-9CHlRVHlt!!f`ky!*!hu-rYWhwG(<98$m|2jjQ$2qC|
zH~8H#MSH^S`I=DF#fHru#ID1Bieo=%9SyYIPQG}5oYGhQvFhx$cYb+h-%h(<SJ9_D
zTz>|C%Wl9|Jq!I5dqr!RW4<SlU9Yo-$63SiYx@}c4+mM(I^gZ=&%W+_wl($iXYa0L
zt*`dF1n+O125;|vZGTPwt9a89oMHR8n>!-LVB+D8{8w7Tckz7>ye9KQXaYVYo+rCN
z_CTEZJ;NTK?1N|dmTiy*SA*CF)%Z3X>=(gCv8|flfYpJ5o=jwpzKzhrJk#e3#>CvB
z@5w&igN~<pCePta4BtCxUplDvQH^vv+H`1Bx+7;<iHGs*uPxN`_g++X_k|`m%v!09
zG&*RK=eq0TF#6Va`TeDX*XHKj9O;%VcMkNX`8^pXMqGP5jAb|Tk?vI=nlu!CG2iqI
zyh}Q)Kc2&k!!3+MdgvkO?lAr8K95dx+Fj^)z36YU<*KpW4nGz^j|lb&CK|tBV)a01
zTRHM%kGjyn;m2YrJ?r9K<=oR+*s}!8L-R@hj60ivh4$4%Lv~&ZmLt1?YXMdncxbUs
zkp<3IXHNBO<+*n!1Nk}_uXGgu9f$XY_n&=Hd;S%D7M_JXA-0b~oW6LQ#-#HS(m{?f
z4!;fkmcC*8K?eGIM<cKsEZF1KVRECxuf-Q^9}~#R06Mv3rSGdB{3J4O199$Ff1ywK
zg>;v1F`pNXUX!!^f1ojU9rPO}<|O+`&aBh^ZgPFa#jD}pzT6#PjQ;Nozgs4w3wKDj
zsq8y^g7<aCrNfEFiKSK>E-@zY+E`TjjrLWl$lVJb5SQ)}t6tf+<|KRqUx^=!EPm68
zPfqU)e6Asty;wSwSvoNFnuXx2l`Ea_qd5I)&nlwd;DB_3Dia#g*fQw6{fte#SUgx|
z8jI>YO}W43f`{OswXZKXNBlKwq0KO5#$dOg8x*e}dFK25`6p>h@lvYm*AZQ*y+NLd
ze{27$c;7~__t)(N`&g<kJ!jxza2<IaVVo`R3`QH+^Hog5eBgteXpe6-?U|)~Pv#px
zSr+>cKGL7TpPsL9M&jst;B9*xT~o3(+sf~+Qg>V9v+)m5Hpn-=Y3%5cmp?+@fHq?K
zh_#Y$(dvQ3X05gUOQ-)4{K)YJ**KN8t>mjf7Z}O{ljD@zd4h8T7t7We+b7zB?^L|q
zFn;Y9*}bAdUdZ^>@Dcc#oj1BW@kFc#G|ZWtj;k3HwAuiT+vmtOJr}L3j<w6F7pLB8
z>M2fDe$)<hzAAK-AEMj61ijtSU=nMpO`?@^&7OXT9D+tajqgBlT`i2kk1P4%>-iq#
z%JK0)>y>XD)9<9ud2zDStbXs$d62yg>3HHBZ-h$v#_M`6JTQa5Z5DjKAKHp?cl}BD
zy`?jB1{a<<pSxJ^=e&W7-2z_k5RSTS@Frxc^bOseoW6MMjJ%7?oX7ocZ&Ei7U-REl
z&QS56Fuc&;XWjyzQhmRU+vw>qYBR}RsEbbhc5RvQZBc);E%>YdTY1R?+~uqK{{76d
zbu-w%@>%WrY%m(G9)2c?o{J7VJ&rAuVeEl(o&Ev&4p^5Pz_svvvsiSQM5j&S1K0g1
zZXsTFYj9Gc=3MwNZPY8@H}5x)>pK!RHZFxTiHnoqfp~q4dh%H`hs;oFHu5judjLK%
z6f;gV(*rNiT2v|Kz|>|gg%<XL^Z3d#(v9#x8P2!+YxJ9KX2h3oPxIb-Wb{<@D2oH~
zpWzP_UHhLb^RaV)&vh{u&FymV%h#d8j;BL)axQcibzErt<e*7t-GskZ{{K+&c~+mN
zr_Jd5jdV2WYHy>bkzcW=3w&G6x+Xu{5DgPc-3fj<;LzYIZ2x=X!-25$`9RwsckVfS
zTyzC!xlOi|@6&n(zubgAE%Y||v^ErcTK+iY*CMXP%WcUV1|(PEVd`6FTvp?|YXMi~
z%MxyXA;`TY=nww;Mt4B-p5D=%Q-|Ph=t$;stV>N})HDX8q9f@Mz7J~|dW7^xAOD8Y
z9W&^V!_0lQ?qEOmse|+GymxpWxHA!r#2JU`<8yhws>buJj<$u4Du2pt=wyCd{@UvM
zKWvwGCu%oSM2EudIQCm7^QynhIT`@|1M}oN3e;wi>+H1*VKg=kPQ~734vMKBBz`sz
zj*7=hE{GQ72aLn3T+TPB&8_fmJ@?|ZX7%YAI+3M|Dl>PehJDoEY;#6L7m_O(<l+`^
zuy}sHEE@dyIC~pAbiCaty~Wy&jh^jzr~;ZS=#;K_HS5p*`Yi2NHaJcqQevKueD@QN
z^1oa3DL!m2V;(m;%-IZeF+NK>@QXj>nZ*%!=0BnvY211y|C@flV84w=hYLJ?&BrO}
zYXRuc_W?;?JMeGg^|jfSXZi0qj8}SR^}m6C<KJh$$iiiu59v5#7}@Zh(K|Y&za2*o
z_~$83Ko^F68pRBq1pnbJOX36Uvy_;3Imk!tlltcZ;??Z?-P9O$CR4||L)XSGIPl2E
zN_$r+Hi7BaeL@dHTb4f{=cFgRAKItQwUWUu>!jGCvDl&S+kKw+JH5Rs+XuMxc74Rk
zJ-sS}y{@(d_wnudW4H$&fb?69qt(ppzLK$M92(DVd;!|?%#4&Rjk6bS@8ZE9=fAs+
zd4%vC==}w}=McZqLcNyXH@SZVwiZWu)`-p%&vBO*a8W!*3vIgak%?dv!FRi#cUu}7
zZ7lQ1hJL#~x?A>5)*v4$f8NJ&<&w9$R^HRKP8?(HIV0^%GmG>2^HRsA1agnnToXM$
zHNYKdf!yn}0=bj(0=eO;KrUAk$h~oKAlJLsMDsu4KEWx*`mNlJ!DyVb%g6;jPX8SE
zZxnu%L=Uhs1^Hq1Yvg|%9G!h<`|!QUe^ZeENqCb%{-4A?_vOFy;W7Dd;3JAREB0gP
z9pA^0=6A9DSAFp|+wM5|Z;<D2*H&hHTLt-V+bYO^{gyvo@?Z6%@YH&Es^q`$rh_xx
zE--R0y(ZdwIX2vlf%e`n;`7s<<ueUY_|sB%S3@+8PT>9=9k$2RY2AGtOY&HG2P)C?
zRNvP74nC@@%~I_jZwB6n@WBnXh7toSL-;c1L1**(<`QR;CO?z#Fnk5_jW&wgJT@hk
zJ3ckWy2e=780#8iU1O|kjCG9>*KR6{>svh~uk#;cd?j#YfOgThL*?wj=?>o?T3U0b
zT$^(5GdnxG!2`xpA^DGuDIEUIqJZUNz1Ydwjim{9pRXs(@4M(Y__vK*%}Wcuv27kM
z`F;ZUyl}|g`MZPf%>^9N9^xN@L*W7rxvWFj>X2hN<TiOY6b2t=fj=iDld+S88>%nf
zC;c(a?_&H>eZNk49R7sChqr5My#A>Aqiq%N$Lo8}sQ&2tGGgG5dnx-H)DsRJ1IIF3
zyjYShe3g=ao#2gh!2mo_x}fBp;G8C(@#mM0`K)#+P8>ZDy>9<3{8$!-7dGZjnl0-J
zx}3eYRC&jIxU%;9?H($7zV<hF4P@{&xb!6$NmtAC$Y)lO%HJ61$8VO)cg#%X*Yi6+
zE0wPZwdWg4qrds08R;sErQ8bPjTdL2aVyp!^G%cM#Fp*6+~U+e{kMH#Pn`&rfXg!^
zGvKe>H;w;H^pvS7jb=g(?at!aOS9d2Z}?Hk&O5__rh&cEU+4Fg9WCJ7`_1C^P;6m6
zdwneh9Z$cXdq<#YS%<f8iH^g*<(wO<D2FfZ*FMJV$K1JdLvyCg<^w#5MZpGP&MojO
z#U=a&ccE=5=yd$Yj$t2;XKVO<ANH}|j^52qVT|yGFl*!Kcr*I07y!>d7xQ$y#%ryP
zC!QHV$7^A&)sNNj_M-n?5%By5(1{P5?6%T`r(1il`JnjrH$1u#&cum#Z=pTm4(C_b
zC6Qwx?)4tve((--tB;~vSzT*`r%!clE5x`1KOcwO8+Fe&IJavIXHT@n`ZG`C3qv>5
zeV{q?8~N|5iuC{4(Bf=#Hp4R?*DZf6*k*d)$8p(bew`DIwB76EW{hk5KWvY8CTcI!
zGuHojS|G1`li(vCi?v7KkzWZq_XWO)O#-c$FPWw-kC-|$(z{~IYIAEQ;Mpvn28XhH
zOD&EG{v6)x$vhqFM=x3I(-ilU)=HiWUx;x*r`JBZ%I5d|yXy0OIqTI~pikc(a$luS
z;h){htF*Sh@EzJ-;XZ~9@QvW;`imxhvnVzqx$s$Z!$asOA#k+11AivZWXrjh7l5x*
zxxW>H^kwoq>Td>@G>&Yj%;M1xHLkrL{-~a4Zw~#=h1T=5mj@>$&+{GAQi>yT8T&5$
z?27r_^*}JS8QT7Qa}0k|pe@;Gn$F=p_IIb3Yy8w#EUBKQ*?ZBPG@lIpI15ajzVZF;
zm+yBbx&pev{+;mk58S+@`(MzH{-TJlCxNNQ*Jq9D2IitM-9UIKe*N3Xbf3T5wkP24
zZ`an@_`7YZz~A*-`vcMsRR6``+##3z>@Tn%qZm<NMs_WgJ#P}%BLjWh=w+Rha{&I<
z=6(?VP0oSWSu_0)Hy7{)|Bws3wPxZm;>!W}ym+(LSp3=Ud%#Oa`7}IvB3}I&d=Qzf
zV|v^~dPNEQg6#FxI{Q4`BGO`-mawMc6D~Z_$6<}-4QM?B&!}Wwn{KYN`$pIs_O4=l
z5c{L}`L&O+8CdkN*2OY846J;aEVwm?D(xP_w~PA7gyvd0c>^Ahfq(pW^wZ1w?1nE*
z)Q@<|_&NG?^{ubx7mufzx&qzJfd=GfnJwA@FHUTf@4gaSX?~w{@OC%3Zkdx@hy9eR
zU@bG~itf2)$rJF*6P&|z(Nko<ZX@2t(hoLkmbt5q!`uZE{-#;{a4?oCF{S%@sn_^T
z)ASJVe9+9@_oON9{)#F2#_F$`rcV=>sT`o$P<h{nf1U5?MQ+x3F`oVPW>#AZwo|~&
z?T)0IpRG4@h_}A&zCqc@@V$VUv~M+M*mtcX?vp*0b7Uh0f^EC;O&_yzaem(kc+Dxs
zGzptccHo1Y`!K{r9`2r&suqq^1^UCB6Ym5DlK;xb|1kPRm~R(-aBy!ZI?z}et$;@v
z#;WmcCB|tIegD8r>Run5)UEyPhl#6XeY&5Je+;|deVzCncu)iPZ)A~i&BQ*udV;u)
zOP&5Md;-~moU?v`f{b&YG>hNBccnOx+rMUgtp(oe;gm0H#cLOntLO>lqP6(n)IWzk
zm}c%U%rdq^b`2}pLtqb&IZq;H??J5_u;BcUY<P?Bx(m$bb3Z57lwVF<>@3l_%Nh6<
z?gEaOS^MgkTZ8ropmovkE5x+DT4Qp5bOieBZfqae*4X~ayV0!|!IwYRsJn{#Gy7uw
z10N*k*?MT9hHu~*44CNy_FZUeV`F>vk;e8%(7iJM80#lLZ`}YfNcmu}E&NsdFQHkr
zC#MAZ2W?zZs13Q?L@uiS!A1DiDU;tUt}@PWWxH9cd1K}2uTZZ4pQF469~<_4dK<X|
z_<iUxBU|`gdKXyMiZ2af7t-F4Lmi9H$b+tDO#j!upnNm#imjg~Msp{2(cWOx@PFWQ
z*!$p2vmt+`V)%c|+J4;04MLA<C;Sw?1msBM$DFs~eiMx?!?@Z1Xgh~zejm>$UkvS8
z`2+lt*O<CyCo%-j8?EEsOumZ7VB**Z8Do$<K=<M&ypg@NBEBQu)_Wti9D8yHmztd#
zpX}fau_wa0s&I81zxxfbxSh}82WG5U#wxz;@LxQ`JeRL~4>+-fyW0YsQ7^_f@zON?
zWs$qZ{4~pZ0|gyyD|%7`d=<Y+t(BR`&z1Nhtsa8>l-#OB4|5APPTI;LZ(rETBzSYN
zor6C`XJIDpv!I*p`49S({QVF6g;)P)`?dV`!imS^>pwR^OLk2k2}UIwzpxKHw6Q$%
zZCvH1*Pxj}^rP+Od3TcgXeR&i(GK{^bKg<imtubA_jR$iG>Fdh5OviSIisS|hcaaW
z^q#VW{ESt`8ObdAztp{dd{ot)|9@sCkN{Tsr6AB|Cb9mA-PKAUO#Q)4f<VQs71HWT
zw@ipuYPLTBEx)YX0E!i>jM%1CcbPz2P5kbbR#}<0yA0U1ZrSe^v8(;zr{0->*3xZN
zP%=oI&+~Qey<rI0Pxtfre*XCWk;mMed+z!1{{4QR_c^CBy$~Ff)|>unle^qoTA41*
zaxb^fv{RbnUjEncsCy^5&-}lg_Cj5r^L#xX*>SvItpP65_~>I8ezm@Njd46m*=zKv
zydBwE-$h2OxyTehq%-=UYw@aht2f|7@vY_6O{26ouC5mztGvlf^<MPjSSjw`(Y!>P
zmiGC!8h&o2yc50?T}4KldRs>^So-R~C-BxrlEmBQx{pSa(o2>`*<;Ch?M3b@&6bw(
z?JRs8WGeaotPzc=bMZei(B0~(&YP|H8HG9I!O%YEMvN$z!-e&;yHoHH>wR_3H_Vjl
zS1s*(d8qlY%Qvb|en#EPoc)LlYmq+`W6U+zf2r?EV)#4ZYePOQV;dd4NN{8Ahxcdy
zmyH8{ILA5e`eur9xPez!uus;x02#ElF==7Icbv7H7LPX~$34dBa7Jmq)=>_^w(+cw
zXl*h+JHA0UhsU;U-#63lDFY7MY)&zGB=%YBAPvMXqnz!&D%F=_O|+U^@&x)cTvu51
ztZ8w`m4(+w8~i+Cz;lEH)}gazW5<MuiH^WO9+97KdETC15DV58WYhOviXVy{R9NL?
zm20K>^<GLWd`wxc>}16%v76>Q*)Q=;%J)TWTk=8Gj(A_+E8pwB-$1MP+5F~o?mm-s
zo0^hpH`nCHU80P0Au?#H)*Fav3RZdLi~=LqmxlxUQzid>nHy<;ZP{^oD%mJ}Uib4-
zJ!h?r3;8z1`Fyf@CGSP|_rN!dug-j-R8Owq2|TU$;?*d*fsbJC9PXw6fR`WqKIdjJ
zu4l1H%K7;L>WN?T^D5JYO_iKmip{}alOMn8$uITGz(Y>~-ASyxC;yX1@OJ!+ssy>+
zeqJ21gmEr}FLO7sp3ivxh4u&Yb{F^##~|KbtT7-*^5|RIucK}5t*%UK9Hz=Sn!v77
zTaTBul?m+qM(nDvE!hH}rjGQthaNAW^VMD+TY&M`6@vEj%%l9wF6R~>4<3G^rBh-X
zvS-L^AJ@#fgLp^rfDF3%&hIuQ?>taBb%9fRu<<~tg}dWNX%E+aaAems_|Ap4^3cbP
zl%tonDep?Yu4oS2^$;^ClCxASpgT3M4>RT@I9LB={=opvyoC;uf1o&Tn1h7=+NRt!
zY^7~S&|~kF=j4^?GwHT42Wfj5U25%7V|y#`5B_iWBYkDz0-VKbUW>IW2j;t#9A9|H
z<|>Hy<3IOf#F9rL|41I|UH9jGIVhQ|_u`|5A8;23e5UuG1!v(q#n~4)@q_Unum^;F
z3bH@+jy>Nk`gRZcLwY3K1ElXW3)oMEKa#-j(EnzYX%TO>GDfW<N5-+1e2ro#(_cuv
zP@2*;9GWGTH67iV|4-I~uqzbf(f_Uduk)b<?{(bc;r+aFY8SaF#MkjFh`ljSv(;Jg
zD7gq3@;1!cNZM=0E;N+~Q-1>w;7cHDu5CfyrDCSu(yHQ(z%Z1xho)-}P-RabXUPq_
zwQnJM#=#bcexJ-kr-ga)C6JNxq!Zw4XjL&?%|SjUdC1>O;M=_l%^sTW6iZdmWi#;t
z`uFfzkR$Eg*OS+AcV9y}9z$Ap@A&fbhmrHIG8XkCn$NIaQ=soxY0oeo;oa6Jj^o!k
z{=VxHQ#{OGN{2N<c*38X_NiPKJd2;^2hZpfaubW*0#iH<A6YPpAdmBmIgk9PmrSPL
zJaaYVnF%i7@t`*scrvF~+tACrx3XqYYoEuM%jbljWb@B7M(v$Ytjc2!ueJd*a?W;<
zb0+)t<qG@=U>wz%Q}dnTE7hmjT$BRywDaQ|S3D1_6V$W0XA7hszyoEkRA1e_n>Os4
zl<F|{nv0>=k<Q|~f3GtgoE6he#p3gM-U<9$Z!EPaZfWHJF=|WW*w*r`6+>2DIWg*O
ziv6=EVy;VU*;^m&R;<e110G*QpK^{cxeD9Lauv2ISC1IhahQ*gJUbrCR{TW1iDJ&>
zvQlzPG3@_UocpJ&aZHbmYwwUuXMc?1%#UG*#ECN>*ZIVm#cNjIpN+mJzU<rhC+mCc
zK*=@nK<^pw{%K~)O6XiM50~<zz_N&5JprfiXBcY^W9MIcNqUuaoB0iWiaE#c70u5~
z#vNjC$as(bU2HZ_v@3pQJ-#Eb!3tZk>+qdBz(;-=dIQ{*`_MY8n^=JFQ{ltrdxs9h
zM!%0Omj7X6R(mKr8cenZIU^k~9lNNNwFrl~Xdd~%pUIQEkU$1ZK?aN?hCGh(c!BSt
zdSNUmrDycUsbaqQz)$&awYB-wZAq4gV>|+!Z<8*B{tCzd#a=|;k5G0hy%x@?6@N){
zvbG~SZL;s5ZF}K=!#{J&^qS?nV6Oj1eK7ZOUu<w6*8dvRuXMx_^!Y~VGW5K2cd5Q(
z4)!^EetHGA(@i!mxh=dC&hk=Ot|xLY+mAl-%Jg8KeS6rJi_aPFtn`RCaXvy_D}0pr
zsF|v`Kn?q&$JCptvLkm*HuY`L^8wEC!S<+Yy*jbsGwYnbe~lX(Q|RJ6g9LJ+gV;g-
zQv43|iQ)}~FPElhohcE~UVdVUb2xW~a`p+2%k$e&Yo<u|zUY{G^^@S&?`K@ytKfMu
z`@eOD-<?kp&$`k~IiU~sfO5~r=zskh>-T(1E=ynwN877*ms+H|uiIUkQXZEux0hP}
zhx#7T-2EluJ}*RxUBPGAa~pOMXOkWojE})|70S2<=qi+nXOT~L7QB-?fp^ZbYnvhO
zggI(je>tg-L3H)M)dzI-r}{V*UAdAm;MK6_+gr-q!ByOtJ>D14fxtA!**aDiOpYcU
z)x&;uoBel_!MErV`JR2TSQ<A3x&Aiv*%2MKXLB@i@Iw5)I~&NSLqG2Mh-o>%_jl3$
zKbgp$4t(9W>Ejvc&hvbmD>2Q-y`i0($s04oA`j4?VyOq%4<?(2dmURWZJy`Tf;*=<
z>HVQ{s(UH-1?zV;F`-xlTg_xQ&xs``{~_2@2VHv5WgMCoJ<XR4ffqQ7qdmp`Ks!fl
zw*A0E?K6hCAEyrVP*<*(mWg)IO^UZFH#1+^wBjK%X2Vfp0*9EN;*X8QyN<30meO^!
z*V{ZZ$(gt|*4oBCe8pRL^wB>&`3P{651e1>WXIor$Me!tt@39mv-*rVKResB^zpy+
zS;CB;W3+~fO){X<V(i4?FTeD-4=Xwj?Wfq`JN#TZY!xfRV&naL%D~Mu`pl0fZc+<g
zeVMZ{%)fuD7Ch6h`tpc7sLt3$({_Zu{QHQD6h<^=p9AOnH?ihL{Ii$mJbd?(<P>w?
zjGfx`sZz`Ov&_`|i_GbaMr)hK+5Z>9Jj6qSGLJn`g8v)HHJi@>ooKDb)?Et@f&KqL
z$2o7kYyH8G{JzxrVPF{gyH9zg`d8`O@_Z0Ky^%Aq%-@t+4p4p<W6(HWmOU`hkHcK|
z5;6)p%D+@ORrvm#XoG%gX*)Fn9;ipwLbvjp7eKFb>PtG0XivxeP07M{O|bzPl;_^_
zd@ZpnVj^RaD?k6O9~1E|DYYzzE+X?&eX`SEp-tzK%Bglf@YFJB#qfSCbp9ZGbuV-I
zAnom8{^SYw+}cx`VxWyK@}DzHpvy;{6`Ai~%U?$vm3(T`8%aY42MvC!d45*6?9n*(
zpnP+Od%H40&T~Ky1GwEu9&?_4(H+H>ab~+YkDQouqe;fH!dtRnYKDA!W6r!J6E!O~
zLG$ht(PSs^OD#0db#N}1drPXX+Kf4vI13+x{XSQ?xy!2ic3u9P>gk{V&7=SF`5b!(
zoij_@p~0X}Y{m`3pTEW`Tk~e=qnj%mLLW@@d^hnW$?|3UO7+X=&%#OZXkzN_XLKiG
zRh{(5Ux)ADS?Q1K#{2rCm3UgHrwly&N#NLdI(rEM-5@$qKk6fuF16f1JEx?5c=IWE
zG!M;dZ|}F5hxR4Q{vb)q%8vYnzE3z<kD6ynEgjHUbqs&+MPFX+CdQ>c8%G@<-$jf~
zw7zf@u_V#oNHbOPM>P2FyxT->QmAh`eq8eHy-<#Q+J}Yih^S}Ja~|3hy$Ii18Ead`
zjADwh>RgV`ioT#pawh723yr=?K0SD-iy&t!@o}Dp_OuW1)!2}_gkAq3w$I({=dNf)
zzcY`>kaqG#T2xPK0cK>!1Z43WnUS+r)}qUHno4_Kk>2a<<pQ~OI_F>XC3!#9#P)PB
zzUk(ygYCqNz79`6!*eh4-|Y8u0vh+0d^@0*djY_k)*yxh11sNwLkIFb@mysC`y&T<
zeIoMb&ZoEsoc#ddH=+~g6FzJh$2k0%jW6KO{5y5?_+p|zOOrqLV+HmZ|If<B=}s{N
zU(~}BI@>sG)9Q_XE?Ij<H1z{`)V_oEgulX`QvGDzdmrG&yyMrEoy3_fwytoWAdVo~
zR7`6dV|zI|v^`HwgtckD8%_R?fF8E|u~aWQu;sM*_q3t^ck+$eu{82ur71_kF$Uv^
z{<btl@XGv?<XC0hrL-50Q{Nq#T&mwfTgor|Q@Mr86+`C@>^Zg1z)L<6{%4O@Ix!zj
z_RRR_k9AsDmYok;4(DF!O1@i&FN3Y+?+GQp)u&Z^7V1XevM&*wd8(XN?S(Ol<svt4
z*jMV5tue6Hi~l71<S2fUcXRax9<lJRy>P5kzVG1iX+9m~b=mO@%B2nGrgqi7{8`OY
zxfi<Az<v|#pR&3Dd2PQ5Y-{0Y2{2`?ZE*tsEk*zG{Ui9=)A6+*12(3DJNEFkxfhD{
zzLUq-h2FDm9=?)q{e9x)edHKNIL`ONK`ZCsJhji}8V~GU_vkA^{Mn(+^6v%Dp#eOP
zFwcMdGurR?Bj<n&YF{xP@zY7|*J49*j*x|25Rds9eJIu;UnRmhN#$@YpX;6@rE%;#
z8<>N}uRWuK`;c!?KBrUB<t}(@31b#5>Fgi<mVfibpiF*ddAZJBu;cr0&~nEs?@i0)
z^O4OM=B;W@_MPP|&MX6#itjWA;}Tv%7;5aH?wl9Azc%>2Cis=CS3S{j`Fw<9>8$dy
zQ^BjzL*@f7(Z?Onl{&-v1^8Ami0~{v@l%Aoly+>EpM0Gj<~$#o7hxZ|&Zr4<(zPc&
z#yPO2r`TRW?*5SOKTIF`xl;3p=fXZ%Kf}I7_uU+!FL&Pp)~-ExKg!;)Ud~D?(B4GK
z^$r`WZZ&IG4mv5fa@CF$>rJaFIg=8*C&3#20yFVo9$s_F#fY8;zXdc(&PQF2*g)84
z;pWB@=G8GT(!!V&OX0jP|IA*UVP9;Y!I-aP%rie1=GqqOIDeb--6p~R(sl6vHKo<#
zx=kf#FF?OKk0?J5IkI~AKa}RXm&d_%f}8}^OE_n+U&0g<aq_grn-!8F5#o#5gI7IX
zcG+0F?ooZr{KLB2-vuA|2Fx3u#-8^@K4{h>Mnnv$=<Oy3Nq(qsCiyA&EdSegJ2h7~
z&RO}fi3gpyX*q_?AHwXVmCJW{!1V0vZ|@_olQqP%dtQ5yHQ4*H&&Nfx@#dza*H)GE
znrA2fc<En%F3z5w0x>E>+l}liXe4*kLD%OGSzGGyACDy74XjJc&=17I*f(d-snfY7
zz1)o<_`A&C!k=|BwOhJBrv3g69_{wtPY(6d<ef5>XIZ;YJ>axB&K>N|X!#~X)Ai?Y
zcP{5b5Esj)CYq`0kGNSj$~kx^;FlbFZy9<VUq<wlATLC)*Vyz8@R=K(bmBL0_6q46
zchEOpjJsk7`9#MKVdEchik~9B@d$f<I0q<8PSr;3vD-v0AbYkpK0<!gVPc-uW%-$d
z*XLcEXXWPw*qkfcERP8tCgybroAsprS!>d|`v2$s)8?PkzxQh&PL{?4*}ikl?#syM
zP5<WXpV_-lcCJ}-*{9$M;q94P^I#@UPDwx?qKRg3P{H03OT*BLl|^MVg3mFfkvjV3
zB>b{3_)p=t<5c*41AFk##P6X1ze|x5tW#fW?MGsW+Plcw*ha054aTKs<D@<=b9x?x
z%fUE26yWgxsE<MT8r;XJ@RSk#!w=rE(l)bggz^~=MmT3NGu-<4*Jg&ZUO7_nks;~Q
zf0jD`3Hwp9Cxy*p;rD8Z*zu|P&b-C?>>6mZ8QJt7^nowy&6=GojAPvtU&>>By%!wh
z$FP<<ikRLi<O1=E1@}f4n?;Jhn9+(c<casi&4kh32F|Ye%*9jpgO78-g<yKZ{iVUZ
z?KRA2L2z%o)<F`6bq(%qcfX83%=!#=mp!9B4qbS}C$_@RDcNU&13r&rgPjwxpuuv%
za28-F13K7)8OBBO0gWV(0SV&Fk^$cg_Ss%WOz;q~1M&YOlt~sy4h*K5{|^73(04#P
zoQ3pf_x)$}KZu?}`D5VYIBPlvodsVOGpC;{C!wE{Wak>@t}_ZE=tJoy2RMtaJ_}vN
z<<~(+TIV2_Ju8_I>I}*0-q_jlPX}~HyujJVlpPa2qB}%4xfbF{w~U|awarduZb6Sg
zU*0@?Rp_bfzib>S{dm-jRo}v~&R|t6%WFe_Kno@4%i9FKjYF>u;VudArFv`(>(P9P
zF`)0prsLRSqMbN4)O7UiT4KDGexS9Ge&Xmn)z1vlA1bR|9qCpdCHX0Bjmh{XlSGe>
zjzf!PsJ}lU@AtXUxF1PtALjm_NoNK9Vi$OA_!3nH-G%;JZKM;XZa#-|ep9Ap-TCb2
z!1wX45!}cxLFP)Q)-dM%%;_H1g|&Vnotpc!nNnB<+$Wl1)3vPO!Uw7ov2*eFxqH<r
zWA5<B;Q6S$5Nqy^j*N6yk3_#^$i0J~Gp+FRYIK#0oH&nt5bMFmR^ZdXTH52RCp8F`
z@SOVLS#VZ<1NmIVLM{91s>r{0Ka_T<qdT^Amt{)yG8q`D&Gmf$AniQi6muKRli;q{
z+gy?Eog<hqS8P1;BYhg<8|jWb@O3(ftB7xdTy6C$SbJ6G_53Er&wgregW?kGrRy~P
z<YPW*?GV+`IyO00BbIV+>@4uBb;`9B_B`pYZRRf6hkcqqfj2h+p9_(Jj92q$V_cdC
zeb#xri>%^21L$WhV`{sXvkNY2%r+5QwR7b?czv?GJ&i3>RzJeLqT~oS-Fn9Z_8Ywq
zzu_(-LvF9;sQ%Sfx&3osX=C==pTL%W3j7l1c?Dj94);|+<R-}Z&CDbAM%*2JT!$Pb
zPCK+cLA<?@b@QF9AL@OIHEqF2umNw|5>7H*0bWZFL$}b<NjMaon8N^`npwLFVZytP
z<z~v@v5L;rUIDm^Hq>S!_d(qoc$_v)ZrA2aSXlEe0`C78?QXN}nrSDs>oH#GDe+K#
zZADUJxBH&Kzu-R52edi35AlP!e*DxtJiP16W_unuM;;=-4Sknit5}hA6zx8b?BVP}
z#gm`Kk15QVmCPTUm0ZBSvV>VPLGPVU!dKsA&b7dG6SN7>Yyqzh<2iw6YxzH3kv8k#
z58g+4uYJx<@UVsT#E|cd&P2>+?h5#HwVCQb10JyU)(%haf0SHiV9xw{dLQK*_{+)z
z#(jWsAE3?Nd7Kq;$Ge>eXtQ@7w6qpF`Yi1M^J?NXiEYGdny*}uN+F|PV6TG1dG$qf
zvF;*JKggHXjhu}^KfSb9pe=K=|9vlQQvZ#}KLQW(6y0!ae51NAQa5u`SzYc4@A`k}
zZ);OF-!SQt)U75Pb<DNEwEZ#K5S|2wR(zEkok)5*xjF^n<f-#Dc4WEu5Wd-uts=bc
zZ)VPI&^F_UjCA+e_uQ4WnRsCMUUSa9!5Hp`x6cPJZy=Yb?^4IkjkYznwp+;)rSIN{
zO|hGClTV^`$fDr18oMh`?zdpPka`Qa_v3<Y&Sd9XXmW+_Oze6LpNhEAw|Ct;nmqs`
z666=juK6wd30f&54{byT=fh7QZ`vCv>)@Pt^TqeiOU;IE$ZbZZ-O@oHt=~aUB2U+G
zhP><O+&<I(^tU;eoj$*!-_x8o8~H87D(d#{G1+y%WZkn(@L8lMaX!8!b0`3x-s|A+
zHs%YQ3cyKoY2rO+jc#aNv~WjatC@mLwIaV2JxQBg<aQhG#pW#iI&Z{?ZbJ;%IEf9t
z*MWcLObq^DM;G@-%x3;o&YP_n)8c?T(MuK2Hz7MSiaq1=&S3qfb+c*tj%n_uUb>g@
z9AG@gG3gxRIY66nc&e9iDgQ6?Mb7$x#yskXmQ%E~<lJ{VoxcMI)TudE+S}wN();&d
z+wxBQo#2-oiGzt(*mHq@SbdIYiQHG#5u-Est>Blj)}W80S3~n(bdojX6r~<EQ&T#d
z7#``p8CU^Fwf8~FSaU!=BQN+h(6V@?_hzSfC-Yp#A9uNJsNrtW1<X0ZnY9Kv%>3VI
zMdm6-QDWb>p&gGs;L=&u({^2Mu6SgwvvS80Z(cN8+T>ooFvZy$1>_Yl@YYt@{4R~-
zz>6lkpZI#=GVXY$&;4J3e_4|_z<RF6!#I09;gPz(4C?4vWvo3GQ`d0k0pAVaXHyw|
zc)k&Mxn=lK{(uJz5)ZKE3!e7VmfDey7M=u$Uj7%J_S3HLq%pg~6>SX{el~(1^&Q|u
zdYv<~u?-Sw$;pmi|Mzg?-UscEnA5E>h(~+dXge53VJo-?w!)Rot>L}iVYg((f8F;=
zt{}51k8<BB_#0gdo%dp2yn9eFvUpwZWcDh+PjS|{6$kpY?9IRi)jVaBHh$B$MXQuc
zCZA`H>^bO0?>F&FOyApDY40_j!I{8Dv=iSnSH4blS^PjUeWua6<&gF+&fT1eY=3#Y
zdE=uzH=%#|KlyS+WbrP}vz^Jk)Gv>XEN<mFF29QYBHyT->Wp-f>eKnSvt0g_BUwY7
z#h%|R`#Bh2>NLhS&t#K~&DA(-$vLlumXO1IV|^zVycnm>`jCyB#qU(X6Zk?7{E<5y
ze{Gdy*@-qtJm!CE{m;zV_S+8V9{bsTD;qn9e{cPb(Doj2ayy}KVfXi8yF1{mSW8|O
z{l(Y&Hj(g}07h}%O<!+{Meu0f&p*Zc`KCB&HNIXg{J9K1x{v4ko0F2Kn)_1LjzV8@
z*CF<i1n`+hxndk&tu_y$cN;vuMP9w(;nNuI?lqtHW00qcQ@N|?gZi04Fbd;T9l+iC
zqfgIBR_m-Xa<H)*>{(@+uk88MiqaG=su`zu7Dvcx;pywX&$cmg{j6d+o;t|w8C+L7
zD}o;aO!vxPQ`>3zO7qF5S<0X2VyVe?GgolT*-6;b_$iI@PdLlA9L_q&RyYyNm7{g4
zzVvPd@04RXANrF0tG!s3_5!{LeY0;0zVMSbnZ50sO))hEx)Oguvl(Ir_L=+2y)OpO
z(<o=(kS)JGve>&dc)mNb*sKqpZ;dR@bOg^AbLaVX?pHV#TYR?*Yz&laDn=E0D~Qj!
zbDLXq=OVWIX6Ahdw)<-Hr0nRzvPSkoaF@E)rpP(msT>XIuT$+afZtBoX8=86<L{ME
z67DnTodqm`OJNgp1&6(}kikzOqdAYe3;K{Qw%-KtHpw#YDP$V->Mdgr$~g23_LXe|
zedkSXgtx&P<94u1piPUX0`|FLB(@$lcAmM!mD|DD0UrG&u=Asf5`Fqk-&i}6ZwBm0
zzLEb>0x#GJdk4<xX8bPWm!I@=a0{L4jJ>RE*lWP8XwusBtFgtZ%*H}*ES+$tp6u_f
zW?sQqt?Z{Ahjz7Yoom46s%D<tbB*n@2VH|+#MYL4+sa&_3zsw5`7Nf#A@}k1m5)@~
zWblRAkH>htJ>c<n@-)^m_lFI<8aen|gYCn&#;Mt$|5ICa*A#f=z2v`#9DD^E9NZLh
z*w+i-@1~L8d`LdDrG0eNfrlgAf~m%N;0)xIVwAw@$+_6c{O@eR@2*5A5{po|@LK_G
zh4pKxqp_{VF7(!-bI_%Ryv!}MJstZ;HY0NPXl9#})H|y~7!P$Uj`mLk*3eamr~MOY
zL$o1z&btz01zxNf@CS?szT+GG;N#!%O&%I_fV<=gcJE^Ffe!Kik7HMI=KPY)(0j+V
zz^DOO|BU-W_zm?!cwXLZiq$;Myx?>9ub^S-80ik^PtSsv`hxzh#cx>r7<nJ~yB6O1
zj&+gj5oB99mQ(q($0j>=ZlW*UZRPsD@?QDY;@|i1ulI&=ym%lt<!2kt{lnfL_;#?L
zZOFs6JXq#u>s(Lo(O`}%eE-bCL30ew4Sa?<NM5BLG_3Rcdk&$q_RL4MCS&Tt`3XnL
zIT+wO@D}0|8^q$|m~3hAqPm)MM*Txi`adt;0KP+^8H;z}x*1xFRiyVf59L0qGg(_a
zyGOdjd)~>mac&8`v&4IxdbF{Q|8oHi$JyI2I&oW>6Ep;^XSwUGu7K@QfFHz5T00f5
znPZhxWfxdKm2nK7zhqS;7fqY%%VY}n*udQ8@GalR(I;x7`qpT&`u5@7)hYP%S#0WS
zu?yw%F~&UaHAi^j4b3y|a_-p3j)$IMEN&FPf>=Re?GW}HRR=!(SU-;R1hNfWi$`+*
zReJJ^;Kb$bfxu5b0nXo{E&1&EUlL!1h9t+vAn$$z?u4sJ(7$l7ka{WBxKGuF*1D}s
z9_GvBh~#}{XgbPolc`Eas!X>n^Q!!^%rMF#epzZbb3(RI*OR>d1u!|^WUFu2UE{{`
zjpVapi<v-HhIWq1deM{8QP;tL@qlj|1fR%p|GOalvK5$Y;~tb%_}>SyMUXMo7n?Ua
zR>Ft8`wsm-=5FMU$`7S0sW;3s=^+&}E~tuhEvYyk*}5)zLB%AKU2Cc@Sx8P})9tZ|
zy_|EnFy3@k6YF%%X2?}-lbi>hUf#CjrudatCCmp$ByO*om_XmGO*Ia@D~vVMZj8^k
zYI>ydU>A8qVY?bb<R$D?#TRcP&bzfSYi_TaH{HbBGweeSc~`Xm8|HdIvW6Ijof|rE
z>v&`dbao^C^@_%!v30k8VBTF-X4ETuvwtfwjrrWG@~|oHT8V#7jQJJmRp4-7KK>H2
zzxQ$3+xY5>P0P2C$0@$w^0y{!PSZX@_Sje9i$cG;tG?~^1=E@rC8jYy-zLU~Bi>vz
zvu|9U$(a>a7Siv8ditWDsN0x~AkP;d3%bZniL7f(64^;Y+wB?h$K+4^1iWc};>BEm
zYsvZ$-;(pk@Hayl@(6H<3g_gsS^6XPE;+09HEe3m8e*LldCc8JY2!p?!=bmZD_IXp
zTzq-j83}K1HAUt5+3#xt`c<2ZV>P^}*oXt)HR3zfBIjD=pP6WSHM(<GJ2sGOZTV5u
z$%>zI$mEFXVmo%IALo63-Ou66Q5Se!8=-CoYfRFq4Ojbp6p(Mqt!#!@^T;6aAuzXb
zvyV__?FsC9`7_q0sI9=Jn0B&Fu^wEaXPoQsk%435C(C1z6=^4sd2S0bW&=D>VZN97
zBsRf$@W@(nKCd@Z;oH$M{MDP-JGziRou_nw@f7AGqnP)z)PMRD?7I)fV#kKvQCQ2E
za;F&6CVx!kdVeejpxXn`YVW34y7VgXg$j4>ImowsY=~V0k)2?!VSKU;Ud8@}W(xEv
zIe&n6vUP}a`M#yvMm`;2EKhKz;C^)a0p@RY0%MjQmHwCQ64o1_r?4*aZ!>m>sruMT
z>l-5T6VmrP!67(MOd{GsoA73}S^Z|B0-FTbE?``#G2~<fw0eMXgl!+7ZSNvvb__oW
zzRHmgsr4AyKGm{u_DHrjAGL7=^bGCEC!FH(-nqgw{A(58ffMsFewnxZhH=Wz%3O`@
z9_aF4V{aB{KTdyn;+Y<PdKBI*1br=_uL6CgOw-W<wv^Rr^d*?CA=kvtx6RmbNoM5d
z$^X~9jg7@R%*{am+UK(${A!M${SWrsG$S|Ya~JjCk!*hL4Duu*bqVDxNPp5+4Yn&V
zIvBqQpM!Cv#8-T;^_>dl;ciD}FyGu%)36ggo#B0};LZITs`oAVNsKjhq*Sl-DC0-)
zMT0i}j(3)4hiu$;V6w@I?-THR0-momvGh4cv{;djjYRjbmPDQj_`^0H0l%R)3ep>s
zo$SA%>ufvk^LbzP+i8Et*^1a~=%m*ZUY+FM>n3wS+Nm(zjU%0G;c@g7a<&oqaW~^|
z7?b3e#w_{uCCYyMD|8HaD}XZ(dXf!t0Gt@DY00iwMHzBh=lCBRF1z2Ido0kkYU3u_
zh?lk5s(!8t_=kQ%I<q_h9@K~S%i6g-=Fi3I-`w<cjPbXj&*1fIDC_3$^`=b3FHc3$
z$q|+9Mc-zdj<FvSI91O!E2_uxdoj8gJ&aB+R$tAZd)H;v?t1?2zD%-2x;YO#Gth}_
zg8@5-vV5SMzZk-p+_peIe?Mln?Tg+U^T%RF`(ts&$UX?l#`<NsvEle$Z*tE}6PqH(
ziP+$=Xm`_$CV#BwFfNDv8jR<q5C+6ag1&m7i;d`mjfvdFX_LFi;!*z__rqzyix^IE
z0rX)K?!E$Z*LUE4Tf%$4#<Q&{R~_0g+Y)ZvFLM&14YMs_YWy;<hO(&anr(?(tzYJz
zLs_gl&)QM-u_4`}z3RKois|?6x?J)d9aM}sz<7KlS?#X7ta=)AnZcihHDh6%g`Lzn
zcIAMLEttE3%o(5q+Vui>j|JYj03YJT0i3|6qBGH{Y-`b(?CPIVU$hnp-f`HTPe*m-
zbTmx(*xQyHp?O()X>w2V%g}Kl4K<n5gL<b^#{G4C)08>GFLOsyW^ul^$r+W7LRSUB
z<@O=n3&vjAAB|+@veuf_H<kwP#csZ=u~_{e@K_gJL5#XzIBpBa_xM_i<2?Ev9^Gp)
zLo_z}8=8(|bK0_0Wx59W#sA=yyE(vfoEWTotn|7u?@PylKWEn!<M6}uiw(5Qn1IX2
zFJc`On5qrg05xBP?sfoUViOue6JwCSnBjbnaz8O*|My{hYe@IOy0`2S(PF~6B#jSf
zV;_wbkv^62e=%|O%wkA?-X`QL{fe*3V@@hV*IEBrHcC9k{})0Z)(7)rQSu!QTqyl=
zitj0ppxZrUA9EX>FlJ6(@`-QGHh#N1-AH#AHu%nMCiw=oht?LVZ#Ug8Iwv*qv<q&k
zXAcEAz(3~y{m85bkxd?W%m?-;c4oHv*sjZwbJo|{|2Vo=GKKZ?YPaJu);jy+%URoc
zj=gFR>mB2rPi*;o*2116h8Rb7D7Mcx`!6!Z1LOeY&#3C&G_{}m;W%Fc-J|hhm)JT7
zDA)fgzlY~{$29hfmP_**`}d=ROZQ*#mj}=zy|Z|pAOB0;^OQ1XyYjLk%waYDxP!m&
z3g1(<ug$m*VOQ?6_AF~SyZEbIv~b$F{FTg5d-rq`cCYpZkh|LAvQ9#KQ-EpF?5=E(
zF3>)V9KYhVH)YcyXUrMLWs>Yt(H62|ukkKVC%h}HT#~IRyqe+Ugu)m4ZUK6RKVL4X
zP2lq3i+nw1X*`ZBqMbyp#<pS0GPP+3n(~m9kq<Q%GezRp7hjrgbffH<LC2pK^nd=0
z<8p;^**fkZnv?x5UWh;+dFtdJWi04HgARm$vhOlKZ}ZILe?sprvd@s;J2=<WWzE38
zJ7)%XLvL&X@5rW^+(#+9UUr(3@#Cu}+5F-obg5(+cXnd`K@V$9c7y1Sa^OWdaZA}z
zl;8Uv<zEiUWk0IE+6%vt&OV_n+F4AQbT+oq!C0kf(V6xKf^Tl&oo$CcZ`S-Tb+GGv
z8^(;pJ_PT#Ql1HDV6p083&h#GA-~PaTKGfuufhH$#y7`%7<_#fH~@dyT!s5*ceg@&
zpIGL{&Rp!nJpAHe6H|Xfe!h(j9Bh8H)KW#P`v9;o&@Fa+7W<EVh-PsU>uul(yT5Ve
z0qno&_*>^gvlgC$7x4U$=FT^QWBp(_Q0F|&RdBX&^Wk3|lnEEYiQ1V!Stf{?-N}66
z=VDHFDl(!&^H&?ln&0AYmB)q}zu@nUE4QIONc~X09HzeGxcgj_dGixIOFpNdA<5;f
z&_-`Fa$=8f1NOqh`}fe#gpxgzco%yvoB#*XcW0E1W4z`XtRcS5-Y2b_Nw&+!jdQR1
zUm)Yumv9mG_jUSH&bitWA65K>Js8-!HV%Z(7skQ7YdEuaQ-7!AbHtVhvbh!>!yhs0
zuzLsd8Skps(Ju4KRhsRxje8a%+gNjX;a|y5kA`gpcV&@Z_S_!MhmpO(o(-Lm@)Gct
z9T{gHmfwPX8><f=AGdV=bLcP4BZ8cf?0k?m9whJ6C7<(c=4IO?_Lr*z7POTc?G*p*
z8Lb1d#}_%KdZGQGwGHjd8i31cr+CA&$2zsIU^{<L2Ja+KUjts^_2+0S{9bwg`u3On
znp`yf`~&@+yMi*c{e1X6wC@5lJGO9b06F6LvCM7n6$f?vSmw4c4yrrm)ZZInAK+3j
zxsU&Ke~g6-_M_mk2DpUlL|$)2`i`=3yFp#WP#ofG<$79iHMOIA?aKR7U5_|gdEJN0
z+F3#So&0b36+Gnk=zHa2od+!lW{(AB7qG^vci-aw5P$lABmaLd{El3?5YEb(yCEnK
z%dY4DWBi5lw0(j92>y_GA*?4n%%EO4*1rzgxi0wqn?e6ezW?l(oY4ZV-9Mf<-{sWR
z-B9YQy!{VRwwAwY)`3e;pLl<d_R_G&q9@cZZ_Tf?ce)>Gt74x;tghHTj6Dm(xy}Lo
zbe>T>92y;(_9{*BE5CWSvm;uSHYwsMXP~<_Rxghu6Y{H5-*=<Y?B?MWD>{a9#{6iW
z>nc`kzM(4VPKaiYus;0|_`iXi)?cuWGj;N&xy$A@Y$$SO+4#0|)9&1=^wh~)mv|%C
zdkk-CE%4IM_IJKBjxn$=HWfo2<BP{CBG*P;GivoB?2L=u3Go?bN1U~7M|U=1hovgW
zQHbeWn~6O&pFw6+nyINMYt?b?<3_IEK9t-l`cF7<?bYbHi8?9rhC4X_tCjtgYbFze
zd(td!W$mJ43};a`b01^QTs!?7v-ocIXc^{es>}$pyn0^Tm<tQkYrfjq(Hhh_pY?3+
z3}}CiJtTR2(LC~FA~GsJ!elk3a(>H?Kp%pi5D&fQVM_q>@V>~%WZhqJC1<xp*i$l-
zd!A--ch7A0lzbHYT*cj3QG5TPV58jC1bZn`tRGizBad}7&$MqiBO#o>!+N>yy^OPm
zD$f2B;my6OD!KV%RmoMz0*%jMZ^6<glipsVbJoTk>|)J&?e4~`Tk!E8s{%&9;fxsQ
zM06n;J!5%mUy(81N!;|nSW{m-mpeMawa$cU;C$n6@T~jc&ZPbX&I$Pe_lP*i14p`<
z{+tmfJZDoA$Ymh5cMSPBhMZ^zxj%5{PpwIR@jm1@W7QtA9I{jI!~F-lfP2`k&RvP%
zFDPGH^Klt>iF@zz-0`r6IYrF44XoR2YkRhd{YhufX`(ObrhFxGS~&@n#qlk)26J~D
zn+5pE)_4%UN(pwqt4vxLzEa8Ezg5ZaQZCvOT_xhx=`}Yo&OiG5wKoTKB+DXW<tqR`
za>UK;L+3@RpfBv^yZ@m5e&$-;Q<)l_TTzY8p_rC%WDZqM6`r&{pMr)vuBuA^;A6yt
zf6uuESIthEH!G+1@viz=ayN*heVd%0wlOCCZSS(Q0q*31ZK$bmlC8^AJBTB-Cx$@F
z${8XLPI;Okjd;+8XvE>J9rL?@MrKweC1<LC9$DPTTAS#~VXw@<H}HkN$-xUL_L0Vc
z&1S~zGTvJT&xNuKW7d25o^~!Dt4gnDF77ML<zwVzAN1#<Iegna_mtz`H7pqaX(x_9
zC;k(SL;vg#_Gx@>Rg$wG#;pUV=dfOpVBRldhc>cLImub_pWvNn+S(n^F!wvx>rB`!
ztVuKmd|ky}hjWlwy|E$OjYf<WSv6P=ES%&_3+pdp|GdtJkR13HYfIvlb?)WqRFykd
z_kYbqj!Bk1LyWJDzn5<`i-(bqvzp)Ea;_3~68U!V_70wP{;tMsz~7cdt<$Q>ABc#~
zk$IxW&8J7Rf5b<!u$)<yt`{uxl?@(c;tlo^Y<z@0Mjv6G7N(g~!?a8CO*AnGrY^Y(
z7Qete^~(UJpR7tAqWum_?-P3xnacDtHzIGj*U!?$)!d~bdKiv8B1hse_OiQ-Q)lYR
z7Sq15-d^SSjp<qRlAkM)Vebz6lad+Qklg>Z=2XrH(BTUz6a9a(Dt+{?Sl|0qWy5#W
zCOoUQ@_e`8S3&MYf2m&WT>A6U_D88B*bXaj{sOSAHZ|?o8J3?jL7T|q;sM&syja<g
zR#|!9(9lzAqXIgIPea+RdYWH;{pJY^;Ma2$i{*ZB;YIWP%HVc@+qd;i4tf2yf3B>@
z{+BrQIm?9oS;U8-mv_+7iOh%6D{uB?U15{G^SI}7aLc<o#g|>*e%lz@V(;KLs~s1e
z>z(IhHFxP=jlt^CKp*{ZPicD_W$2xOecB1WGyLfe8{?Sg4q?wrH|ej`9OM4K%I^NB
zBitK2%-$zwzr{D*e}CkHSH=-nxYT5e?IY|xuGVhA#sLQVGE<wArp`0~w-3K;m>=@Y
z8^_%k^Qt&|-YnK$PiJKF%7q_-_Nntp{9qeL=RSJdht5}vnWBBhPL;oIpE*w<TZmf!
z{z%*K?oQ@%WZ%r<J4;XN*4b-u=-ynvw9lYVQ|MoB9A{>7c9xZ?=yh!Hl{znR%{k~o
z>0vXbeGxnbZDwV^>VKDanHT(b@dW3n)JD=>TViSK!;KGeAF1}@-VS~;Gn<nwXXw6W
z=S^n>`XTC0@G7smU^@O`j`P3s((BBN^WSzDerv1DhUv@WI|}%3FQ3aj^6;H^9l5O3
zcj(8V4l$8YLxyVIh@9BvH9O?%5og3^8Q;^0UveFG%VFBpnX9ZbWIKjOHgsUqGW9+F
zUf@YR=2+7vedhp+7_kWHL#yAQAL+Dbxi^izTJp8l_k9CiT?wpP4!1?pyYQLV^J(=!
zSF|ykDa6v`Rn&{WWN&F6amJRvRPc$k&qn81*iL6Xf-|9ZA%CI4lW5eVugoBu{hQF-
z6URzZ)UV*H{X6FZ*Db&`gAVB8&*aX<4jW0FNICBAL#p%UqW(_Jt$@DGUv%;uwPrM(
zdH$Ar>(EV4Dn^0*HNY>*jnI2M77K%2eWfQg=FA|z5`1(IlMh$lww$=smod=dluMzX
z)v+<{v(c$>=x24=-6eWHpZ-&;qw|iRDK~N8Ou0PcA8#g(F#LsdH3>UJHiUe|1n*_9
zU&?)H9gIscQ^k+;t{%Ra#(A;fcgo}Pu!j_1tmV4|<GK_)U5f3Qx<1jTF%HA_iSw>+
z#Ek9;{E_*MkIT$&*uS?0o-xr4nJu&{znXfo@x%6`HZD5e#%%M*aOlAL-!_k-tlmJ3
zoH~N%G}el#pB3(>i?7ggZtsbH%y?*k*cCY^lX@2FP7K;}WsA|qZr)`+(wxj;7a&uR
zlfJ*7j}5{ncCh+DFWdDKy${E7Xx?mW=c}-rukHrszHC8$^){SnbGM@7`d7`eHuqce
zKZ>nAryKca?QHoK?}sj@GoFwa|5`R4{8vfY56^Xq4+FOpa0_AP$C4*nTxx8R+2#JK
zWQyqi9c0cT+9)4qbs&E=XXVEI@Gf*&e`&k!*bVzn(!b<Oficw1uGyfokILJ4hPtAI
z1a@Ut!DN-IRNlYZF0cQCU<@jMis#H>&WAY#oHyHg_>0J1$y_UwgLtHTQGa}sdKS;Y
zMg_(l_;keC4$|(vF66A`!?N=<LU;|X+elu=$ld-q45yMO;dci#9{Lr}=g2KB=kqst
zCm)#HqjdkOq22v!Bitig$vFd@e=8jb9lSMPa~bCQychYptAwse5wj7zYWZuG-{_69
z@vA;~uy3@DpV+(1!yHQO!%vAu8(5bFw;eq1jIx$ls^}I!#aNq{43`{+uj?}J!{*uK
z`=>d{Oum`6p<i(*E2qLeh^Z@@lPU6qQ{n^enMiS0TzsNwxDA?^a)x>Gwi-L;(Wx^y
zbML3<S!|&MeRmNP_UPlr35_-fqV;33WPWM&C2ODu`2oMhr&<1iM%L`dx3A^76@ACK
znst%$`x-X${x$r8S7YPr^uCL@bBg!5s=fxvpjQ|xd5LwsoEM}1hL|;Tqx5;0`$po(
z#f8*O?RK&^qo;EpG*cFs8H;~E6n%5TxBlHb<Xg^t6?t}mZ=K<0%B#StmAQG??2X)w
zv@<$#v3VB#gudDtoH<_J&Q^4}e`k-z;kUJqwuo8Sw$zSc&#lHJxU~LDl>8ZDx*2C>
z6Z?AFJ}vq@zNbyPcrAJvf2l7a+?Pt*7yim*D^ak*(a-KV8Apn74d(BVz6#K#=qNk~
zqZQktf7MLgDS~f53*TPy>7xTa{aD7Rn40wTF2*6a!@CWY>?L>$cxQOWJVvkPP9MQu
zIM=*B2)<LqTi5Yk^rbw*{Dr`At4Y6womQGGJ8d|2n(6sIvZF9rG84NFz0R6i_M6PB
zfP5?rHT7Lr)oh3{-|6PegC2N`|NDX+)jNoz;4dc3nR^o07hOa88fwuo3I1fevX3;I
z<jlA(?2!U`=co7ty=o5`#2Sx11Gzx#VCOB#9ij{NP2p#|qkFMuJ#xZkaQA17_<;7u
z5;xeWxPf8>w^`kHW{;kW?N@P^a&z)B<`!qp-u3?7Dk*FS(NKXoKEd2XL-u`(Ny=U>
z(S8c~c_#89l&$(b6|bp}b7=oIWcrz-40jQNKdb-zcyS8a9E@x6<ZXAE;`{k7g^k2U
z&N@>OxwiU7{CNBW??z+onTR<L8;AR6t4()dQ}lx6t-z?-;koGo{OSh1lg%T02Y40*
z$NkvMuc8w_r@GARRrI1@%6U$lDN)%FUo~NL^&<Rpe2UG)5{B{nS?+O3><VI6_&Vp~
zzuw4wMZkOR`S`CP4A7SY@vK)GHcwas&)-Q*t1Iw*XDcRPs@nezx&6^Yr76!KJB-;e
z`ek_JS<Vh>1MaT?TmOC=&I04^YvEw7a8T*kJTdQ6-~c+?20aKb%x^EY-QI*JU-Z0m
z;YQ`N>0Z2!hg5GB_O0aQ!Wz!@K)?C+t1maXldVo|h&OVa31)GD&JXoNE9-QjPZat|
z<z?HUrSShyzApc-QoV3~7+H5Z_`C51liiIjl^j^}E6y21J|wPRXk|g<SEVN<n|A%W
zwEe%RqyEhxduBCsFot$Q8AUE_9cRG>a?+j49I`#fkWb_eN+vO%Z1gv!hHt!3s_&*v
z!BX@rI2zy>kGpeIZ=SYX^Ko7+ZNKezrR^H;9n>8PJ|Cj5*JA9=1vZL#w_>xW3b8bC
z%zDm$nTrCFyqKF`1g`+!gWy5sPf#v-kOF3=On<ZXm%ek?u})i#ejF^n^i3=DVBuJ%
z$E8zmgMSCZS7SX$Usgwp*Wtmij%?Yly<6J;K4gu3555P#m(3#?W#2RYFMOrH^Q~h(
z4E~dMC!QY^3+}Tu!P!C4I-MI-dV0ij;e7I!N?&5%F7wX}%H7qN+{Jk~I_E9LU9-8l
z%}FO}re4Mxobq<V@7TX_f*jBP!L-mW{CwiMKjn98=01(i=04fnCB#uVcQ(#BI6BiT
zPFdnZjNw@6sZ_o7!4BTb8r#BYP06NXl?@9oZc1vu!j>PJhTJ=)?fL1*v%8y;sdwP_
zdz+GRela+UM>j``;~p?mR)ND++=0P)Wcy@~q>z=nkR#RjX{FU?*gM6%`Le6o+prW}
zu)y?(b^iExg!{!tbzj83_R{Ln^39XbK=F^<oAT6NQ$O!}lF8%hSl29iZTQ{DB5y6f
z*ht=1e$g!!M)J{#;oE1O-(4F#@13c01o!DI@Y03+tv>C7Q2wNlt@u`T`|s!6Bz}kJ
zd>3?D0eokm4V&w}4m)W+GW>@Ie-ry=Ezh;5?<hSSOO}pkezeJ*Dt6o(eA%2Qo+H}Q
zo`0>Ol<wEu6^jqbH<@C7D|dfCjvt6Ez&`$>;uF;|$?I6s#wynG`!F*0y7ymDTFt$g
zTaDz-hs`~vWjE`14(CVV|EwTSaO#%(E^fd_TA_1E3T?zl@q=xiU>j$v-b)TJ^DM2N
z)ZNFOH@(<^<N?;<D;I0DuFHJgV6M3gbLGwm##&GA(&9)4yHIC$9Ae&lx9x7$EP}Se
zb{4|RYOA~*_wW67a%v}z9r1VAUawMzb%Q6`6jvJG^LM9cYxgPIia%1;7V*_q?p^dY
zJ-q^W+ZeUC0XWg#S7<L6C5C$!G&_8D(&apd-00cK)ZO~ODNAn7VuL*+*_~(ou44Sh
zS9aZPT7dr>7T%k%PoF0S@N`9bC3dj)L*lU;;2-AD3;v_%o`uU7?pW|6+PNM347lfa
zTKu&;j7jVG)EU*w{Xn%ryv4>^pqpRaFgy9Fm>GSPz3aINP3SA-zp~c-&ztAce|zqm
z#0iL{d+o^FJIvHy5sOy+AAH#~h-btrg*oKDG!Nly82F<XdI6TSgWth3^Z(<krhn4?
zjGMD+b+?Dwo&8nzYeTPj=+o<!9msiHfp4eZC^6lILH_p^tz%IK+@ByH?YO>b8jdz!
zX~*=djpT{~o0^TL{uSoz#fJ9m#{a88h8lD{G2(-%6<V(VHpe21Ka0(#v1**!*Kyez
zQ!ighXJ14e_CFJ^JK7mbc7K_%cQz-zudvr?1T<&w7DLaoPcDBy{rqwBKIU|AHvjuH
zcpA1OcNwFvLV8{kJCUB<v}mVs1#;D=!;Q3cGi?FKCSq10Y%NUNfg}C@@e8KkSpjbG
zy;V<RT*KJ<ehn`&rep0+5k74{AJ}@G_+sc*{y*q&kBxXeGYEd#%O(CE-)^?++eZR9
z5XM=QW1lLM4T_b$u%7;q4cFs0aEF^cE5@JmB<^hDo*MYKa0*^AU-fyVx&=PbUf>Iz
z;!*fc_W_#tLl1e#Kh7#n{|oKM`QE$PWT8o|O|^I6i)de9iF*}h|AOZ`%Hu}k2I59X
zqGp80x%Q$-Y>A%33(fX#4$R5Vk0?Tqc5hFRkE?pnmi!?0vo)^3>RaJGOni1Cw7mXf
z-RyJh_EuxdAlr`$_uQRlSPxJi6WWJdAi6ckd(pD!HvC%%{j&GZ?q3l7PI?;pLr)xq
zUN*C4yppj^ijnt*E;tIVRQ6DcoQ%qOoOw5-+uKT?lYz-ZVny@o`yS+ur_G!}-1sxQ
zE>+~-+EJxzI3pW=Qw%B}!EU_xFVpz12lL$f+Ip3ZZ;Wca%4BuUM<Y6~fPI{ZpO==b
zl}xM`{~}+-qqiP-x6|4lKW|2dR3=lz#ib{pzc+08hh`N`?!kw=r{UM1MDS0x?ek*q
z??(O>z20GI)y>>P{?Ikt$9-NUa-fO*C6R}7U+#N~+|uU@ubS_x?!wP_Zze`Y*c%u<
z*u9DK3U>VcK69+;`RJXGzgf8U7jJI)z=1c-?Yke29=_uNr^=z;&3|9IZpMP?lg59n
zw9LI+d{HV@cb6(7(rw(m?%z*~&HK8}VAUBk((}M7SsD}R*ZWZ4d)oicxxKna)H`Bz
z{#@@+Bx~udm$f;y&3*7C?t?E)JmK4<cVVQc?@CWstSD_5mMk?;=b}jeZ|=DIAAZid
z>AOq0KdsWeJU8@)ZqY;T`^Y-_Q2X_(O#RrseGR&Ih4l<OX0LSI1}Md%-G?iqcHKLq
zpFDnZj`g<)=fkj0UQ~?P1bLo{Wy)8T&aTIYe{iXpQm-{S>dALD0e!a2i(L?9PL95(
zF6%G@G`f~t!`PylX-(AK3VkNXL2|Hfzltx#z0}zV`hq=bS)DQa5#7<kc;s`KIQfIj
zPx4OpMtWnwGv|rX=e4(DYbnQPf?~Cmjm1feR`$IF|GBj${p?+8camM7c8SN{P-~uB
zP;0)o3w!zJ`x>*mYM{w+P1!tcm&O1KGqydp#Izh`K0im+e2TLGb(U-hAC1RA*Ae;{
zfDdcmqC?FUKcDqx@^ak;J6vK-@!W!G?r8FIS@YgJ+N?MmIis;Nj<lUCedZan?xWcp
zn{W`zuVvRl#?)4o{@?=gg|_g#wJKczKDjqJb8TtGirnvJCB1{JD<R7~=)v36nDn3x
z@507nY3;BiI{nEuU^0+5w4iC=e4^6)XjVB~4nA6`-4qWa({<jo?C)CQVU1DzHFLh*
z+k-wz@4AC^$c%aJKk6b6%J%cxo#O4EgWsOEdVaC?vF7PBPAq6w)9fTZ4*PN&llfPx
zlFADnf(``7*EXRCr?Z!PHhYU2(SyWrrsURR|49y_Q?{n?rPrdrdG?xzrE8GIfALjd
z_4vv9H~*^a0^*qL(a6tl%1+0|yPJLFnL+bDVecpP2lP<c-p}0WP1y;o`8uELYdAKi
z3D`7cH>1lO+B;m!xsj|%dvl`MhpxJ8+ONK7rtGhr)m@rrin+O*iN|=o^}~{~vApJJ
zQZ|-1i(hOkzDdS^>?8|gO!4P4XD6%ir(IzD5%y;y6Za;}73mYsL7E3$F@E7eydzvl
z#!F5L?k@Kvc<Vo!)IIUJMW$i@rB=3XD*&&Axje15%iCKC{X5)Mn!B0xTVS~AbLPoo
z<Y^E`%_3L#>ReM3<n3brT@$f+wlU=(WNTd7%&^aqeIcS}<u+HlYc8uFY95q-0d4JV
z<2;>cRc2p=^L2DSj>f5Wa?2R!b>M6QWy{!i$~ZTlg^pu>@=F}Xxp~dn%QmlBcbOl<
ziS}$>bJu0!ANO=0*Mh-7{y*Qlr<>xB#LqEcV&gvkdW?(B?^0e~zks}YWVAWu`ARPL
zat*G}T4d4HJ-BKMUs-Lft%;<28LMdU9M<ZD2RFcjfd*7}ZBr!O#Cz2rT*v#oUk5zS
z?WO&&P6zR;u$>${w0X^sFB4oguetLw(PsHPL}OaNaEG#vf$Z?-9jsmO&ER>wL;a9f
z%G)_cUC~TwK4&jH#qUo3e!}0&rufp|`Y^>;-Mea4^9iu^UUrJPU`*lr0h~ZjrJtGN
zG1|!80uSGeZS6RV&26S7tSkN3J5jz}2Ae99tuYz&HtUwqi)h7J0-dx$6O7F)VH^W7
zJ^u`1?<XhE@o?#^?q2pld-UfmP@C>teRo*%VSd6>sV$PN0B5Dx(4^KSLwLI*%#@FO
z!RLt#d)FE-LIyUVm#|y@f_2sz)i!S%9&+~yZ{nvRcAd7OClla4HOx$L_)cq&pW<89
zT@y2V3ebw|rN?*o+cR(D-037b^nNB?5#8Vct69y_G<o>R1K2#oO^W;ZzZcoNdyR4l
zxQiM-F1B+f*Mf-`{PO+Am$l?nKXMj(_}(4b{Rqz;AD~V8zIjyep1f(%Vkd35pEXZz
zqHZr|)sLaPgSC=1mne>b@9|mAUuHf{`0`Fj$1yYI>uY9oyO)@v`<I+SgN<io?*dQv
z=70|tM(jCxqHo=$C|ELf-E%ud-#kG)W(@HdeS0XjX@dIR1g{?>rY!n#2hsGYaB6LR
zXhnF8U?*sParzNoob)}gOZ<p9-5E~t8xejt`E^<)yTZKL4W}qudy2C8Czn0JIkA(k
znY`gG?20eZrgG+P<99n}#YWL%%4@roal)uix;28OV$qC!LfJF;2+K8>2=;!CI@4og
z4o0v!vV0ScS9z71Yw_Vm;zo_dKR({r|55U|U;Ip8gXJUQN1<N<vGshOckBZ#_F~Vi
zvG-`5ZE<pd-0hA#D;u=mPB2lPwAKz~UyBdDw$ZG!PU^98yMp+k%0&n5#D4j<^=qa2
zAJMk#9P-NfZi4+zeVJNQ%+scP$^w6)frl!w8wS@y2jqeM;CdQc0pB<}&i9Q!0&g9|
zmua9p&a?I@4CVPB--m7?ZgDryKjKa-`N#5&8Pi<($<rur()l06Z#FX4USbmR`Q%Tm
zA!c&}=bTGVrpV)y9?mVVoZ8!ayv{=ETpQGJ{y-h+=w;N24H;;si8`}`I%XMTVBT5>
z_BKn7VfStoKSwxwA&8G~_Vo_NGX5TN6{!0tbzNW>*#3JJpP+8C7habQZ*7}iWCieN
ze?<RVtna`l*<-{eWOF>mT6`ZkksMRp;n=U)Lo9!;{kT7;a%Y{5*ACG92Y`+CJm<=2
zOLV1JTNsZxCLB2K+*g35Vs9^1P2!HMNj=M#_jkU6Op{$-LBAQ=(D+rhU$$BMC}?LW
zxSvEGZ$(dxHonU@!nNX|@}uLcZ0vb&f^+sYfAt;t?wYx+CbJ|$e9+Q6aqC{<wKd40
zFsF7`BmSaz_x73A=JDxsrnM!MXREz1Ch#d(d+E{s55*c~C+S_tN4>KQ_(9*yLQYYq
zcP+HY-RtYYjn=ToGG6ng%7zj#m4Bp6^tgLTY0BezADcAbw^*MX_`8GP*oRz3*JTyg
z7mwNftl;o_Yr!9Qf0?*{c|1ondoOL5#eFR;h@PQ`tfd95IW<EIW%Te%d=-sN@x|U|
z@DHx>SKCwA)|ZVm+mE(8S;fE#e_NWOK9*|y@X5r#VH|vSPB6DZduhtWj5YT@^Q6wZ
zAlKK%&2x-Xc2o$r@_5VOIUk?rgq~%=Je4b#M{er7h2X7e<V<oljMXX7Pu<{lHJ4uC
zUvob9#K+9yqxcGz_ZjE$_AAp1g7&{k`^LP!PyRZ7_1@}Vu$L6tPC57{?2oa2?D|-@
z=<^u*)rqlRkDQyguxX3PpW=(n-G_c1>mDOIMoyo_9qtC-%%#5U*j$u--Plqtepzm`
zlPveko?r~l2=dabtz||vvd-5S^Y00j?C!uXd%G6;V!wFtn&$4e#;_L7*yKaz<U?ZT
z%YUqYpj1D0PG5ukM~&BxReXexHyFmm<@XxwaM{Jjh$|c(7tP)%UIxa(o7OsnJMX8Z
z?Mr}7IebMsqInBrXl3E=OZ6drybP>D_@<sI$rn8Jc{tE|>R$s{Qsxt#OJ5~oDNl>O
zh<`~ooj=R8tR-)X_{-=vd~{<b%~?%6wQZw2A!R0wXyXqUWbIliu+Y4F$N2s*_h}Vx
z=PadN(4KOp!g*-?*5?A2hlzi9*F>}5V*WQWUY$vW%&C)K?ouyLTd#|ziFvr>B;<M;
zC0i{`-LUli^U{2G!%*M8Geb>->@?oL;r`TF8Tm%3r3L#gwC$`t4}Hi^EVmJnD^r^I
zPG$K^{rXdLzD?($BW0^NKRhvK=LK>zkIrebej_yAP8_f09p>u<e&gynADL#)og>ds
zF(<{F%<u1bzC7k+V@;KJtX8b)CSd-~Jf}E+q@TOw+eE(Ie~kX)(8EOO2VgB9;j7F$
z#a!}j(X?nKe+G1TA%CptgmJpFgh%wG0~}R%0{^E3dwBLVzPIrn<Z|5M92w#|HE)&b
z&&3w2A|D?)v#+XaT3UIWH?n?yC%*Cwe%JB4`9{{Zu^D&r+s*F{+#RssI&>rF6;`fT
z*|)wVSh@Rlqr-anQ_eviKH9y`o_U@=3O@DiN3n~P2fUg*V7*Tu^R>p<X7jFV+Z%(j
zKTsxm6r3OXOVjeHfF8NO0eYM;M|AqgCU?Svu?Ztw{zQYKJ>~D-@E-Ih+`R+s9ftNc
z(SAsKYxy2~r%o{*OMfGL`V$RgdQPN)YoUPw|J2&BzJD6-S^FsOCp4AnC9{XZn;!8C
z=l05}-ux!JSL8MHXUMO!s4L&f0JnbtHzCf2@6r4ZPBvPcG+t_PawWJBUcL=JgcA!-
za3S2h7UHDZyb;I8`BOMq$eNDeE}Y!3EHdh!p%Jw)tPD3@0UneK6XGTkl<Dr2Ui`ZP
zK8@_0_@(c5+O;`!m-jq&Pz7h<G6un~(Q)^6u;)>}SB^0zPOErM&!QpD?t6~2`<^3@
z`;GJYUwY*s#uBcrYHbv`xh-5Dmv0-wxfl45le6zT{62&&CmkHF8NWdpHuX07xi|5=
z7GFtz$_qSC4*ZzCJbxV@y#wDycbw%rOD%gS(>k~A`$0d1GJIR;Z!DwDBlrojnNQDZ
zAECd`#lz;8o%hxb-(UILcgelORtR*!!1uD-PAXe_iZXP9{DZ-Dm(%}v_7m7~;HPY_
zH1)*jubn#ow!VLY|8h0REXiHQlMDP5`yBWw{y5qDh@WEMm+h<zNzS6*?f$^GnYZR2
z3GRqG9NgjbZ`29l;?-8Adv0NVy_M-FA9=U)$K~%Nw|5-t)ILg!H{~x3TDNa~qttTr
zDL=1J{n@o?=;SY2uxpUT>a&h#ol7~;C$PP?qrdZU%Cf#qV__QlROpz2y`!6lnl~cQ
zUL2V>iP)nZN3ef1^t}#pUsc$)<fzu|yJ=fFTjGiET?iN9Rxp!H)qPEBTXYz<EgR8L
z7PkL<S^G<=AMT$NU73j|<J$nY4EsCnJObY~Up5ZCFP8l;zhE$JC`Nix8E`$R44Qq{
z?eDyPaC^TyvHy?r{ylNnTWa}A84foFZ3&<66${ut5BxG7$?3cPMB5$QXSIa3weRT{
zf1+OF%cYh@Wn)m=C(qTVr+#QsdCtPC#wZ-W*W5Z@Dz(g|-H_KqS{TANVVT;{*|d5m
z+tB*{@Qi3zJm$pEuP>hn&$qC%!f(QML=XD@a4<HX{;kb)TxP&;hZv9e?H3Qf+xc7C
z3CDB-O;G+`bISi`spb6vtkmbqpg%o}{(o22rtDFb70Sx~U!HF(`{oNghkIq!2JwBJ
zwfkKE+sF5=RI^UmziMZ9f6Sx}IX3d+6ssiOwy%HHuE)Zd_v`pZCR+UhI&iMabFl?4
z=-cw|!*aEEE^Bbla2}1?m5sN+nBoT)wN3jme>+V@dn-8(*sST*j(MYzwRdc)tV132
z-KYqA3e}eSQa?I#U1wvKx36^!wXN?|9_KsOPqM22|A+oN2G5`MsYd1>;j9bI$HIZQ
ze+Yw_<W@gp*C*V4<#3FYwd0}p%ilS`^;EF?U*YByV|z}xF#)U%u#W#3V@ohL(MO2q
z+@CqV0o(?#u(+ka5VsN0u;_Krc*6I3w*cEFj;*qQe3~5l><ZXYap);kMn}=}S<@gE
z+!$e9`W()~lg`pS%V<1$j$h{pyptM<-^cgT#Ubtc^#3p2qH*<Gv97t>@XZ={D8YSs
ziqBk$PowyC2Hle)PTRj~x8<Kab`*EgC}y&)JWhjexUH?ikH3(gKn$JSW!4T8sWWYE
zegCQ-T7G?Ne$?(YJA$8mgnh;fSu1&)U)>QXeh<gk^|8haG`?>~*#{hr%vl{h>)_G{
zzW&g+IqxH3#*FA1&fNsJv`zcgqS|Q|SJBwP4rnKHx?N9fcfsR>(J>odh>o%6Nb3H+
z3^tizfAA6HYvx>H<nx=l`&a#|otJV(uSog(f1Gzq_4#W|)}{Y&o^jxC!W^$Dn`6Av
z&M_Rjek*{bXd(u_J7(K4j*7wSk<-{qL=Jui{0im<dE$UapAP=T!bo{|6B&#09RzP^
zVTw~$cK{dcefpDQocP{j>|f>g<=@R1sZ(6z`BJH~^@`c-QyL3C8iCF3$NmGlsbLOH
z?7{C}^`leZ5W5cC$<`{LzX#sVT7GMv;Hun@L+CH^YnK<)$7pAT$~mLAbJtM$$!GQ~
zq-+`gd&3p$9NS)nzaTt?_b&FY`mx26;G}*O$6IH4gO~;5i_EsU0HYQH;}kGPcDJJ!
zS~z2L-a7b7>+~tXkoDu#V0bHrhJUudGIqf~FW{bo5f*oK`zxC-AjUH#Y(q4a0<Z7Y
zpJYW?cW{3p&O&+;-dNMkmeZB^rGU;(Ku=NlNBS%U-3eDs_+;YM0AJX$<Ohs&lGC?w
zAI3MFm0QS-(>*Z@1>durq;R-E&zzH>XZ8+swhr~5;ginR3BGL+;#p@63$Ec`|Ehns
zxDNSJc0t$a_sw0xw;eYKXY558Yes#Z|LrrlXx2N{Mh&_DtQlo@a0hUn^A`1<{q>z4
zpY*?5v#@c6-|y3p9Yz0#bmh;@_mPOj70<*DR_@z_@6LW6Ut}?HI-8%i5E>a9;u|@T
zg6D;A!CZY^4GzUOmXEdP^iT0Idm9I2Rlvt7<OH@;(V*W_$O(U}KK&hs&r<{Nv9=m=
zO?R3qCz*XxJ<4kle|saUx}W@zsUOD}-deT#`?~K`ZA5PQ%3K#)F5zUBj9tF0@0-7K
zx*x`0To7Yl2InZP=J#!Wi9Ic@iGAW|?jdJoA8}8w_p}Q%NAzT8M-%xPJRf+M=b8R9
zwiSCl#@A_WQSTP3-Uo#1F+G!cj({8WF&p{QG1@Qx3(BWc_R$*C@{KLz$52=G&ZFEu
zk8xHUrd<O*@;7sS2In!Yy~WAC5RHt;6H7Lyoi*a?4>TncoFAQ!oqhp4Hi~t=IXdSF
zT{WEY5$@NUl55s*&ku24bDA0PL6t#AI@2^$&A!BQIM)E(vzGHf*0J6Q4Qc&!Uk7`2
z3^Fo7JR||{ve#zAYUN)d>%Wa2<oh~u2lwqHpXYAIuko^{q0?;w_S5O>GBaAac%lcr
z+s(UResg#7-0>ap#F(BR>G_jBJYM5j@c+tqzdgZXKV=c{rMgk#yI1qSo)gghKk%GC
z=(p3uvtX(HsTR(ht)RB5*oXC{(@lfmU`F%H++B2ch$r@?bmob1tIcnzZQvXq$NDIJ
z9YKCpn{n-n*rUD-+C0oXQH5rw_%=C{yZC!68r`!qI`-g`4?Oq~@sIX@<6HyXQ7al#
zd%JR(B~J$9?cm%V_0@&E(7Uc7nI#&(o|)%djX!*5e|={M{p<g6d=oy8)mV|)Dj%h1
z#-eBTSac5b>1CF5mbLXD&-vIm`%MM)R9~>WkMi)FF2;FJ**EL$H)mPAwUj+yYoB#z
z{g@v1N_2Yk&so0TSL`RUv4efYV|tdWoOK+B_~+aFs_Z|}HBVl_`J%+skqw=P*+Zvt
z=hN?Y!oziO?v@SpjqdsN^ZozL>YWaF)3(8PZ@*DFwGm#>|B;H!lD|=3dS*U1@T_^+
z|6`dYoO9RNai0&vd3t`pfBv|hzwST(m7X8+pRdyM-}}$A^t{D?p24$d$N59$)UJE(
z@o{G|ORk_?eW}l0_QtupXZICK_wU>N=nvR;<IdfE=?iaend}iGBVQ5y)pgz7`x?Ld
zqc^)A+V^Ju#iQgZ?s_<1{lEkH%e&v~D!u$>{8P?`<FMR(gWCQeeYBt-ko%Sv68vAz
z3t!Qmyrsy2*Gl!5svhz=lp|-UF7iX|XngSXT%Bvt>y@UQsk&GAa4j4{|MPx^%D|KA
zujE_t&@k@OrcGPMJp!FN2Wc1f#g;3a2UPE~e0LvZZ;Qu~vFL(>qW>)qI7ctw?#C;5
zr+OA1)LqN}mS(AY7UP*t{nrj+Z$L--A0Kt!hpB_E-Z;p{-6$Kk3*U}?-*!z>G77!D
zH?(uZZzSiXcckCPpv$ox?YF9HzX^0r|EeDh((Qr%3-pO}NU@f6kUCS0f5>o_|LX5c
z7HZ6QONIk0J+oNV(!khV&aV6#bkfn}WVfGw=7{a&6kAy{)|avRzXKV2CpjRpuO(-{
zwY;rQHuO5$U5AV%Zn|MQF?PvV)knT+ziWFHeO%Al`5N-&QlFNcc4m7k`&)1OG<Ger
zX4#rZQgH69izHiJ_#aq@@~sdXSN9+M?_!S#4~`k%5bC9`2IcYhjc@qoeNK1h5OV*N
z`$1cG**0|l=a`<gJa;VgY3bv(++Vl<E0tq+sLmSRlPh3(#bf<uu$=v=>K1$*cNNd6
zyJmE={ygU!_*$*dH?VBq#o9~i29s5L$-nVsLyo<##oFWcsN_Tcs%HY<!P3^~-itUt
zj5hTha~yr0`U=K-4$onpK|<wa<IOVO1TeARMKeo?^HcZi9{r!yvt3IX)ALU}O9rHh
zC(3}!DOX*!QPAA~FUSCm{~zE9#WO`W+K*PlUaDnl8k3?oFKU*E=0tze`=Y%gL-`Hp
zFaG<|_UbbGGV=S<l+V!yK46_>!o2@Oe*1HHt-SwIbL2T<up66*BloY0aSn=X>k7Mn
ze0r7B-;ABF+&#@zK6fu?qK>`Z$u^tVh6kgu4YlkK8hef@ZjFv_i1M2!m*qlWpRe@k
zu!cDeL(koc{g|R3d*&x=&5Bcn`-L0Xf7`#Rxm&n9G;c;XV@gk8oxn(Mo315VtBFrS
z=CV&T1)Q&_aQbsm(@>iD_oqk65igx#$OZ9f`F#3TJ74{jPp=;9RPWVq2Qdcq8}=!m
zDoTv8^iJe+T7L;;SUF5>nQ||fLwW86HVpS)F~4(WV6#~t`90*^iT;Fbk2Pz>1CZN2
zroxw%>?Kkj_}+wbdOBi&E6<eKcxd9^8;g>s$PjBg36_$DD$AYg6gNf5k$s`L8=Bj2
z8@ZlOVqd9lq(V6H^TAT+5ypH%j^wSw=?8np;u^f^8^s2~bzRv6ug5BS`d2;unBs||
zBgN~qmLZ=^v9B)zgORM?gzx3|w~<pWpT7;+!g_X{;B4bW_;W@uGb3!Q(Xd|XFjt3M
zT@%DIp}lN@I6yc*#R7nRR%f$CfR&|P?&nfHhxzNBe9W+)a-S-UxtJEGsJM&fZ{Z)T
z2V~H}gUg=4zF$iIn(jO&hi#*B*mUPP@nw7Gc?KI@cUT`5jL|`i->wY_&VoyhShe!p
zR@a#Cb>Ww({z-ixFaBg7=&1izAJiY*M@IfAFdZCAu=rw~OZXc6PI!udzpfFAdHk?D
z0Ukr&Td<tM{s8%UN1$8jc>^7?cVOd#v=_o^JZIvKuSDlw=flPY9%lOS=P~$A^Eh`;
z@GTM>5p2ullbOu=I`BOTTpeVJ;Hx(5y5K3`tNLM`G0jf)5ISCMt6f9R!k=m@&bmoC
zu2es4%fRp9vt6qi2cJ^kgGaW5-<`s5ALq{i<8s?s_LpL7<#0aLd%=1IuuHP`XwRtv
zmM(KG|4wxV;{CkO@P2^j0vzgp)eB)*PXCAS#}zM$xcKw<xB0p3Pup$MZCj%FRk4FP
z*-^uryHm)C1=vy%&NALT%xrg~k#t*uJx&94W*o0WETV}zYlyX^uxS?9eeP#oVwR5`
zt@{~LQL}<Pah-dZb;+Sk?XK!`@gY)8!}?r!A+?)da)(l1k0#yI`F$Xo6nw%sR|=jK
zO!FI}-65}Xwt$s&z2GOmp{aZI6{fhl!W0YdaOc)~&aFl^*t(prRbIESzKOFH*t<mC
z4-ijD5r+xeZd8mGIZ$5Tw*ASV?IXwAwslX{Hg(l@G-$h7dqyf|*!;WiqE9rJ^0Fr=
zD?J_I{IN(kik9=oV%?wMo9%_BVzGTl_a}LNVd@OxE>WwGZ{YtM+OI4gX{+cS&whe;
zmJaPsHJS8<v)D6xNmJ6rUQB%q8Q*5QQ-x@H;ayjCf94NP@#eprmAtWTR<iBfS;?Eo
zuWDlrJ++1XQqqm84;@K|EZjXbtu-T^1(Y(xyQy<)6Z=!{!JgS2NoU|YEY@Pj_lXr<
zf7uR|J@S2G`zmJ~_C05Bx_3Dj7}go&gAYT;>YeIntR@(1?r7!I{#A|040qq5c}<)V
z(oEcF24@moiN86M{p^vn=-3?!-9Ud1y!Hpd3wtGmR|ppexcKMX#L%J9o+J1PN1%1h
zN%lyDK2lAQw8fj(WN9Z=b6m$1kURdo$Ju$qBXutE&Sk*GgTGVg&@b_v)AL!T*jm%b
zzB+P!$$M|Tr>R@(5ZKPF7nouS*{gnQY>v0|nSU0J?YkaYU>tGE!Z8<+X{sOELaq3w
zN3gHaA9aFH2pic%f=BB;jkdr2z{0i>*c+u-<T*=Q*e3m}qMQRHJC58v?1Dn2>24J)
z(4&IIt!1zX?E%I?9qtLGUTQRS%(J6s_ML?DZH<|!VgGi%#EMUtFEp(ADuxiwH*9}k
zzUc4r`6ife|Eeb0eszcDHFq<QV4gl)Ul}yd@_7ANbQ3Z4YsX?+VB=t0=)4&}UN2Z-
zGrgX`wn%WVlVX#RiXnY=T#IH5(16Q4HJ;GE(0m4$H9=oG+gWyHg#8wp<KVtd7#C|_
zc3dM*JuZz!WAijV?lm*cuykrDJWD=_9Ur-aar#K1vj>kQHTo1~r=MJQ!kF2YbgD5+
zM}+Zh8)s&1PO;}Fh=)pNJ~7&4p9ijr0sHt7Y@fFJMS4Wz*Vw}`yKAcZY#DRP3^m0J
z^U*wz?<dW}J;j*aQ`n@(=W(VzPh9gj)p!JdGsE3y$AUc_+9~Q^WBtuP$}c#+o|B6$
zcp+@t(gxq^z1p{Jl%4zWr`p!HKcVeZjri?2?S*YyeQVqH^97H$?c3q(8AYD?epj)*
zvKvRMC*+kQZ9}oG0y%~cCf<#+=OuHtX^77v-*!B|bNGKazt^BU^-G+RvrqQ9*i_b!
z14m2$Cv$HfUv+uk|6k{vkOV>n2@(WqP7)N1U3GF3k2lRH38EFN6|&;AD<{NOSGKhj
zt3;eR0jqZDZ*s&oopj|O?ewJUv;!)q?Z!dW+R?4twAj|Jd`=S7Hr=WQAqR-(_k3OF
ze3C;Fux{PH`{O*$IiJsU`@X;4*ZX>3{*vgO{sQ#NnD~6|-}tQGA3gZ&#Zlqk9fxiv
z-)%5JjO;k)`f00I_d5Y6F@1c&4PSZqyMOVOC%*R=ZLIlHrDl7RKM=jL*ttIc`7WM+
zg?cktFRaBEnE$S6g4uq*@s~8*d+&kGtQEI>vUvwK#EK;Ay?XS+CStKG@U5_iRo%6M
zc!0u(7pLZ!7LCjMP%hehZ^4q?oNvS?2?e-|#OVKZ&6hQtEWa$m^Hj6eer26I|A;f^
znm=)q<>d65P3}Xj?cTce>bM8fu3>A>is{)k;IZa~=pN1@2FT|HZ3r$7aj|N*P3H@f
zGonwZec<dKA=Z%Rn}KD8b8d7q&mTulRoL}aS?AyKzYZA2@K4H*(nMZD#kvKtPu#+~
zZ0=0_MP29<A8=?WV$bN>pzdEdd)c)Wm(`;aQsc<)M~>dd-(zb0CB-$B<0sbKLL0<{
z-n6X9d6RsOjb2*@f7I}{G(NSZcI2b|7-LG&pXOD;{(?iS=gJRdpCQZlxRm=Ab4am=
zB)x5r%U+uS_Bk{@uRX=7sQu`T#2eAxQT_vq*FRvMy-MG;FYdbPxxfYIb@2f|gKfs}
zCk<~if1DniKa_)W>{mte|ITZ>AlLTw$*X?lJuA*V8~^N8(uW!gHqa2xg71x9PFpp(
zckU_gW<}@l?)`d~!-*l^Qg;p~Gs$Iq8*^^W!Lag3+5G%+-aMKqmk%5HgSzeBdtgP3
zSWUH80baj0miF!#YH#fu6XvrAJO~@cHUc&tynmQiE_jA=iXjv{FUsM?p0(lstla<2
zx%aH66O}wm0Wa3m37ri&nD=gauDsrTFZX;(?%5}D|0m`C|8wsDS-JmOyJ!sKa{raT
z$nqX`isX@GkU_?J{Ozr0$Vr{}I(zE|T|DOc^Ru}=*mvB?It06_QD<>)Bi3-!Y_qZs
znGwdWK^~+zLvQ19KMwB&xR3tp_-(zm_5HO1r=^+aG5l12$Gc6)pZnLZo2K~LNb%Bp
zw8y9%waunr(euvC_ST7JrE=wZZD5}c#!OXl?|B8EUD$fNuWjDZV2JG?4_RFSck(h%
zZ!U$*<pF#KMY1c{uYS_*QxtW+a{UE^^C~xmy-E62e8lIN*G_VfX<iZL)k?eGGgG|a
zp4re*{y5eGrvk>MI2qM>d|bQTAAS{haqm!XjPa*v7h5h-KG&=)m{@;L1?7UYt-C%y
z$G)WcD0j~9ZD6lHzZ~b)8iT-+`#E=nDHEh0(dqp>djNTq!sq=sHvR)AisnZqIy*FP
z$$nxOD1&{Ej{rTj`1#qprX8j%`L<VHNPdB3$P}0L<^A%jgAegUE$_5fExL^`R`IY0
zL;odCA}|>{n)Q1VcTmsd9?=Tg-9&DjHrf%*dTU+Z%=%CP<MUykj#*F_;+)mCo!ogo
zoAs-Y`xrTsR$Y1T#3jsSzX|Sstg86)`_V(c-V878WDGIjt1<5sJb_1j!IVklCtsN=
zW1l&%AI_3&H^4B+xBp~j?sCTEFs|}X`)paow)%L_8JofPb-b_TJ@?vV`_Q<6M<rv>
zxawy<|5%;&64FIA8mq=BUaTKKdD60p&WJHoOk6-*O5WTVw_<^{E)q>xyTh&l3fPzT
zMXmpq^|E|=_~O#g_Zu)^;~3xtPlUt=pN9?y^&@NQeEYn~`eqkkpBGenYY@f382tJb
z&{z+$<nRPvymgOawS(1%(NT<J|7K{T7TqU!c4PBzo@}DaC!04M`eOW@&1OuN7oZtv
zu@^g6yb!t{eg5yvM>!qw0Nb37WuF}A=-J|gp7WU+Vo*b|<3%;8Cmi9qx=z36Aj1ZB
zPEvpFR-VJt_Zw5qXYs$#mf-Rt-<}-Gmp`vzZy996uNl*?SUV=o&GUmk#l4K{tQZUJ
zQ1`kO17*r%ANz|hEPjI6k1p`mil0O0170<eY3BU;&=_zSDKIsKbxz_HV#ZBM`$yb6
zJ&flKv?f{B1ijaqBFppg(WC-n+2;t@xXA8VzIac2!G(t}<_@Hb0`bq|KR<jiW0_SK
zf9)dfOK)FrAu_RM0lD0Q<ab)eyp6@vb5Ca58P_?jWuUC^Pr*~0FUnop^KK)L#8~_i
zJ@BMgCy5Q=l|PH}S1bR=)pemtU)z2?=T66!^)r)?)ibyHOT-J~ItwTlzMp)K{FaXf
zx>{T@+3Yjm*8r!P<bCtntmIw)>VYzSb5GM?+r!%>5lq=|n5*sId~yJ~9?H+Iyy~*I
z!Q)=7_qDcvwTw7Ao3}mCseHYPrBkl<bf6%+{wK}?-rm0uA5s#yH#3&Utqnv>jXkea
zXwTs4Ttt#MgYf(zzkr{5@(ZYb7@eguu_<QW<AqMBekyq&$PF9}I4!YhQ)@0?=i}U~
z_Nvb5tU8hDxD`9}R_MTvRclB5&Gz?;_31mX;gl=xE^<NJXZW4&<=ND_EB4F{Zcwg#
z>qFuk&P@(>`SWK@ZGSZ|z4}C8Mz#NrkM}#0>mMaY7__7qu_XG@fuDo&lg%Q3Ci^9a
zS?hP<2MIFn!|-1hK806_sj_}^{H9&RlzHWxTp9V(D)GmvTo6BMy(wDcGgI1icZh*s
z1q19@ogux+;XL0#{GKO|XXagwpLK4xiB3Dse6PvP_oI391vWPwbuQm?S>Alt@GOG8
zbpM1Y?XPfF=s0us-*MaEd^Jzm^^x3s(I<AkJte;QD-F_BwFi4j>iB)?JbUm{aJO|r
z^Xx%B*?Cfid#w{e=3H+Indgk$JPYhRBhZNE85w61U#T+tu7HQM{uhp+i^Yxo<N*fv
z^Jy<Rc501sZ;LKmZ1-+U3uT>|IVSz-?`JwhHx4-jTwod-OAZg#(;4<i@5I+o2TfK0
zV{}0JPVlGs=kL?F7mr*!s~!2Qv<Ibq<s-Be{>K5^Pxu1pm-fOJnDpuDB5P0ad3gNP
zRdcHB-wb_a^My~tuW~JX_Cb7f*PW6#9Q(FKePT<dj}qSzWGn`L*=?rIcdP3{0cfop
zS!vj(GiKdm#7Ys1YTCaop1+8@zE64I#(UGQ{Z+Gi#-w1tv{du^a^ei85oaL1D4w(9
zotfQdlRR*nebG<iS9F2<b9WDPoNhj<OUy<iYw*1ldFy+%@dj;Y8nhPA>dn3-V~E2g
z9v8jv)~$thZ;ss2gR<vXb5XpDbti$x=`?a%I+J){D=XNK<bE{pYS)KX=JL`^w!TGR
z^9VkYv~n&S+ijvj@;|F?|2h-Z|HItT)Pw)Edy9!)fb8K+?A{7fMNXlz&O^lYq#E$s
zv)(g~**A7JccGBWSbgb!EcK^y73S1FU3lGvw$x9h{JXRvUPvkacY>McV}B;dJ3sb;
zbhF;M&^5Nfx7yGveT;Pj^~0h~$~d|c^^)mP^lfhicfsJd!cUA25WiHzhn^fjM(fTy
z_3QaJE4arg-QeJ(T!3%$YG`U9G{w5RA-nEQ`kfGRY`$Bx;6m1=ius-E!Y|=!{E&;a
z&Y#+O5jakcb3(kM+(KI}ta8jJd?_)+@F9Fw1B?^+G85ihlK2BE;N7NaCe(!giFIyo
zkY|r;UaW!T$7N1${0FuOyv^O0*e!l=1<!jhkuTV;iAvbFjQFBqzx8>shsilTp6Ooc
z$OGh>v+v25pl8k)p84XDyBJ>%4{Pt?3^p>m!sdr6!Uh7j@NyG2Df8a<^K*TVhL>k~
z-_mPtk20K#mpkPdagE^W4<n4*J`ZO7huDI9vwlnVBFnQrz{jBTwl^{(@XguMvQ*$|
z3rpuHXLFG);rE-g_AMm$g3v@ezmt4Nh*|g&zr*}~iEqn;(B1YX&a6Qzw}0d05DyN+
zKRA=Ex!2n#SKU6^u;b3-NpJn-?O$oXamozkRq^#6e5CEMZyU26URs=uU4PE{B)z!V
z$w6@UKFLOMA^H8i$dN{at~Z?D7cDj~&(Fh>&1r*QKLKv$Eq_1xgQ$btZ}je{)H`p_
z&fAw7{$Kma=a9eYz1UdGOhIq`#Jb}Zk+r%X_7T~8&CrtIrM4XMfQO+!<q0GH82Mk;
zejf1(b`1C^man}!zSi$=Uk?1S?Rq~5%$7sf;RhPx2Z?WNLx$4Lp6~;KxQmRIpSY&c
zd1RZvY|kdn2RzF80Lc~BT)mRv&EpovZ@XOUN?&gU>ky3(ebcxcxxJ3IT8WAKAp116
zd{?Z`j`@J_%NSc3ug0jcYMe)I&5qMOo|!w^elhdi@00wezV}|V(o~t<bAN{4f~(%?
zT#yG_#jOQ-F1YHs&H#!A^8M<fmC63tDe?8o*EYm`*E^2@lRcVmfO#zc>xFU6$(y70
zD$4mko3#h9O28*pm;Whtwc(6IzTY<6zt;TOa~|G$)b|i~E3mivi`=+|=yPY><j%Bs
zWdu9#J!_QC!^HM*r(7rgf^Ds=sm~`5USu-%1v!I6->)Kb<*#mozT5olrOtHH9|WIk
zgC<?i+zfLj@6jHu*Vo~rYKtt4?=%ZmBD0Ujkf&OYzzZtV9+_d%Ga(M~Ml!JM;6r9X
zyxf<Kk*hSt?V=|?Fw)r;)^6#;RVMMuCV%__#iEkasR#ajWmA1zV~H@1!&Uf*m;>wA
zZ4bd$Y9qjy#xbS_UtrHz#@Wiaz8+jR&7o}r-)KDQ=j-G$s9zs>tO0)4K4>aX)EOa<
zZ`TGNI3C;n3hO)cT|#{E3i76FLtXq6!00gRx#xjXTVz38an5UJ4)MX-*#_P59Pu3m
zoh`umFt(L+RulWPZH!NSS1_hppRafAG0FR}mM-dvhZP<~f53iF4p+gKuax`aZ4WJs
z3mzIv&&IlVWHLGF8IuE!B9zhC{mi*%qc1)O9uS;V#$liE74(zF4W1Sw-x87g7cjpC
z(Fo%%hbG0p5yl<4|LW}X_vJmm#M(>HTULhEnh(FxhE5WFgjow0e@L;N1>B2Nyr<_0
zUz|I<6R(s9;@=_uGt6BGJx^fomN)R6^EKd1zJNCH7I~kOt_24%)_C}7ut&1@#;gnb
zqF3|3=RsdwcC2t8)0}hjAs6?&)b#qe>c0w)s*MQw_B~msIm@RfUKO8e?dE5!^~f~s
zC1vS7OV0uDQELLd#agG_ABdYvpl{%?Q*?q%*0|hp+%rO7JAqReTSM|$W7OC#&^SAM
ztc}O8E+;n!xc0_rkkyBQyT+;ZBJ}Y%WAZbmwTzK<4*sF+UX@RLh2Gs_0(&%`Eyw|l
zWgWbtx@+n8bBycf%tiH*fn^8v{&Vo3p8uHVU92Bm)|wv$?yQ}-n*bQmkKW^xovX3s
z_bD2S(dSzAJ(qia#MhT8)-<aNG%wMbol{4a-omV<1QWralKO|?6V2Vpl{*Z7s84K`
zd7p!BzR$SUS{M(>?bmpwF(vt~%)vu65n(>sqwwUJp^q3eE1C9T&a6#5ZTv{?d=xgT
z<S#2)yO)Q)9y~uAMrR^Zx1I6~c|YPAdSt}2+}_|Rb;pfT&d)lFKKigrC7bid>^&3S
z2K9wE-YZ9Gi#7g;aa51;?EldmJl&yh3zs{!r=LCN8-y0@v&QTmb~)!_T+YLIzR-a+
zI|k3=Om-Dhl09dr^VEvfQk+(Z=M^zS{K%Mit@-7Z!N{NNi20$b<e#kGxi)fTtyy+5
zHqNx{Jj)Cy?`o{laDSGG{^WxLoava{8%D-!eN0|F8&?&^Z*(*Cpu7phs64HEaJ@N1
zz*`ydTgSkiTbPZZQY?q|2(<Py{LYWL+QfQ0!v4t|{0yzcTHnDLjy~2n$FV^j+BUi~
z?+WWndD@WE<`#Skw(kQANm;}mZmmg=MgM7hYpU2&#LwJDn{A9^4mn|$1*Z3gkrhGg
z`?5RM*nCDBgJ@f0I;lPW`<)$a51Jj^5ohx`7Z%|A=5DFf6<Qw^cD{m7Nq9&xA7obg
z71qt_tEX1+vC8dLXnjf=gWlzj;Q@SB-Z)a&V#({A#Lw0eTXP+;0(>VQ$Dj1LX-RS(
zC-!%Ie}sL+j}T)6kHy|^(*N7=e~3H7exLAfB`5Fy1^8<m7XF`c5?i}~|7U<P-{q#%
z#=*U`|C)Fh{B9x_V+CunBZX#ra#CGOY?80Vv;7tOuK2#}`Ir~&8stDxe~sl&=rl~e
zD$%WIMKO}GOGnC>XD&7A4QH7|9NFAA<_vXnaVfU#+*<IN^Rjg>r*7;6S$UrSe&+{F
zS~T2vJd>5p;vMXGjVH#tJ9+1aS5#N_J$BmDSvxHo2lX87vW9$GYe*Z%0KaN2=y)>7
zuGg~d{qpZlcD!Zv%XbFlkLrZSYmFuu<gX^4?dgN(H4wk1m{A{haTmlRg{H-YZ#SKn
zjUy8uI_Uo3lTUu;?nx%p(M7Bxvgxyn&FZwDy>oIBVKX#Zp11cWMfU$O?S|n0AbgCk
ztyA}u1%n&*I}e(EwauMc>1FVpV$hcRokY{6&JO0C@Lghd#CWGN<d?F0<Koqn<OT5V
zfFI`}Gv1=#oya2MpKShm{eF#mgJP%TuRmuIw%!V}zHQnxb54oj6TolUeG%<q`>XHn
zi?C-HTN`w64zUHBB@>a$J(Q6Q>f!zU(8F=)!2oN`NAV!ue1duNsm+_u>-a=Qn^SQ3
zoak5c5e~I(79D#utTP<OUw%;epakP$_RgwK$xn9fqE_}9l%MP#b1wPG&Mon9@LA;v
z$M3B<ei^uFjz7abyBYgO{u<5CD?2z(Xjk)8UK8)#34SjCm&#SvO?#EPE0Ovx^&`-n
z;PYkfxH^(o4*MwnIDDq}snV<CZEt0^%V#0l(>&Fm<%v96odd0UeO|)vku-jerE%p7
zQ2vjB+?jp(7evd7(|-$`ijHq)4@h(z9B*^Dhr$Kuh5{!9tXhJ^Zup>O_jdLcr<hP|
zu}O6J&7^I`rY5<zKE(U^6~<f|H1EB%0)MBu(oCx0Qyy^MtYBYhGqJO=dd?5S1D>u8
zqH8U^=jmF5E*l;n?l5ohx^!%i-}ySW9N&HUA`{vHeH--b|3uq0TH|sC2Hrzvn$XU-
zO?)RjK3sNsc?W{4%k8`ku&DHDZ_z(abp;2tV_}ik&Ue6zU>F%FnxA~7F68L@ugJ+s
ztjn%n6Q7AcFj<cuh&@I1Df$$xi|)Oc?4Q{DE4uqMU}*)y>e%eZpH2LmbnYYcQE^%M
zq%T_<$d_x`JD9|m#G6)&4r+3Aa6-I%GqG3`!FM%n6%fzFo^J$x+UZYTwGmvd0_HLL
zhyagG*jrxgzlT@Fs(W@+7~D?9e(Fb781@z%zO%R`U(zVJZ3VZj;C3UpRX>~svGMPt
zwJjU%zuNvw?8TmdA4lTz1*->R%ZX3xFPa}_Z`GLcOTkBr)+DOKnP_0v08S>eS0_Jk
zUHoximG$Ml@Z_h!i^ir;{@qt|;ia4|vAid~lf0K53(qAY;CwP=w5RQ0x7^xnqBZd1
z{9-3`8Fa8JP<LS~vO9wPXW>CUV98l4ABY*0UbJf*_A10P=pEMY*uMDH%XQbpI&*0l
ze{xv1X`vaAu4n?@b*!Cb(|Kos_h2Wlt~a4O7n;!B*O|~=HyBHUnx7|c^Y74-%+<Jx
z@$EFBQ&?9|s-SISN*C24b1RU!L2`X4--kEuD#={Vb4#~$%N}LC<R9$RSh}$}=is;S
z^h>@?p!3upm7jxs`(5C}DRvS`{Jr(82YZM^bFK~AeffID(cm+4St~cN-`M)3S$W&U
z1@|c4M0k+B;>qge%AL#@tPG~_CgL9yw<}!eF4d9pb#xozU%z&;BOl+wwQ!uxB`~J*
zw{y%uCNN<iG4fAu=RWMd>Gk9UFO0k8e3y=kyH$MOm|Gh>#~CenQFoqoU4xC@fj?)N
zv1{wpq3peArbu~BiA9<Up2@Yp%bvHIVDC!s8TM0xk;VREa-jlO-&E6*LZ6hMG~Wd7
z>Dz96y92ncui&1QV<&v+{tS1Rkjpl+Wo&2;_Jn8&+Ib_jdu-GsH$29@VhQ(le*)a{
z&ctn9?qYEp$kSQ%o~X))w{j1}Gj-{{C%AiJYlFRaC30ily(^Smo_FucLtF7<{Em4r
zGn=w^uAukUPlfI?H*)XE5<W}$+{%3_(2r;zT3_F{%r|)d3UnDF2mFBEZ|0r&f&BB@
z<ICQ^a*YqXqvJOC6G6T+D|`cPb4iG2+`~rOcW2wq)eX68m~X>)o4>hx-PmY1`)9fb
zh5Yg@nUe9L%!AZ<knaw@xA1B84QyKDe6tN-Pi9T&HzW84*OozJ#s2sP?eo&_)~^%m
z`a*w=>}?m?)>xHi!ex$qPxuoN_8_L+ad*Gr-W7{)`jdUI1U~LtZssk)pM$Mn^A@Xa
zWSs2c$o>sC1TI`qg8zm)R(!cTRyO04t6N9T+qEV-_geNGx6~(&Rc6<jsV)A5?#<EN
zBiaWcS3xhaK#lI!`h@hhVZFQr_^;v&*<|=v^37dZM_%1K`wt@5leF{cKc`Lhb|u@x
z(B`A;v2Ut0_I?%jnfk<+s(jG{tSd8H{R!48D;mCP8aJS8k1+m6(Hok#+Vwt3*1dM_
zw5PcX$4-ElHP)-hw}exQu0pSd>ARKtRGwG=jCXKO^pj$Yl5d;*Wj1eb8~d$p_qgc3
ztGOq33%{#MqJIr6BAi`!w~lFv^wxzov;)%>B_a2>^>!WqE8VHKst#JQexmhWzDJE)
zdO&b@p_jg1f1>ZV{zO~D;F@H;cZQ~oJwliJ2)EL2q@k{bwRlUUoin%4O=PK)cA*^?
z{bG=5#9Jg{Uo~?@&+LsRSbMBLh>t5X%cLhD%NzNxJ8m+WG1^aFFJFS&8p!@GSdh+a
zFbUl!=stLLJjj_M(SyrAppWlQeBkYl6Zrd*pEUE-U*EdID7l{C31Gdtsb93O`M@io
zOon^)TBk@{#@!Cd$jJWRZbXhP;{J$lm^3_+$dm?JG7W_xua5gF{c>N;Z+j`1d2c+^
zOPLdt4ZsgYd`kV~sx9FDqJkFjPWiozyNLbJ_nZ0PHWbl!i4$^`WbZZ6y)@{BM1=7L
zX5h2HNos=U*|@8^zs8r-Xze6?#H_oDV;gm5({0c_HrUW*23x!e92Imn-&?-q-aqs`
zs=2oo5r480oUXw4@c?jmg!^w+ne?%Bs)uifzN+~6hzG7nUJ(r=-^h(1efoyt>e$0(
zJXwEl1$)Ype?5Wg;(}#2eiq%~&_&zRiL+>cmwISZ`7P8(*OK}Wc?&`_AIBGas3F8X
z3D|Jl`9L1+b2y*fwyr)@$KG(;t97BZ(4yYUxAQRXlv^Z-4>QQx1luq@vtU8I0oxt?
zKGMcsgT|@(#ahk06O@(AmoM7ou9ug7OZ{f<Y}36jpEBw9yutsH55>DmO?n|?)cCHM
z?u4%93~CQ!>}HH?;Khr+k+Jj=dk8okpiRbX#s`+vqT6>p$bQag#@np(?71;~>2>B>
ziVs)zpM@*^vA-#}$uAY;nLo(4A6lLmiY~*iUD0M5FTWC-F~GZ-4(ngeYa}lnd}no#
zTc3W0{TX-pRI7uWIra?7`U=h}A+Ms&9B483E_E?|zNEfPyL+)orzq>bocphG;7j~1
z+<Q1B#sC?uShu0|vwjzUk$ocGkw0RReCyczi=2D0eXx7Hb##jS?q!@GU|*{wRYfi^
zyUv_$Wrga>_N(O1ESH!kNAeT-b{zgb2Jfn_;f$v0N$$!2B3!=pBrx4t9PN4BA3d)7
zojzhL-@2SjbPp6q4P$pXo9OoCesez2ZC}vhUgvAs#M<sV^Ud}Xv+C>}TErV@?R0hx
zvM~s5%xV)2LJMmci)cjS;jYBNu^lU^Pq=})^f6*u$z^lXG32#m^E7A?{v9mmoo$V%
zzRIHmGU$NK#IAVrJl0*8aDVH(yS7w*l(yVg^ZMR7^!wNf`q=s|`%w8&`Z(4=TbuB?
zq6fXXOGmxq{HZfqdv3?jIQz6WgZ#xFM-D@W7l8|8nCPf@Kl*nR8UEIlSs5O?68eG1
zw69^ngJ@T>z6zNjS?|e%@D*7)a}Uryc$b`Vzu|+<kS)-6*D@#VKIKcOtt<Wm8e<H*
z$StI{G#2jAn_eLrfnLNvq7$_*ow7eSmS=s2eOvPNW9Lb4DPR91<ga$Gamcw{5UrEF
zLcb@VY0+sJx<+)Sd_w-?^hx|xivRAzjH4dCh)!{9o%DfS#H!uK_ygcz3-3zmTiiu~
z7PqP(dTfsJz9+A8w-jRUN3O~|><qY7l+*oyFV!V7htNT+O|HEXKQMG+#|-R`9pFA%
z@TdDUmVYw;K8?CTe?km87mW`0|69J0j=&}njpzF&ES<bczuo9O`u)KS)7bHu{+bh#
z|JZk$zx1T+7_}{VW93-RC))R0lRoyUFA>IfWcLF~OnMwXP8WVzgUthtoSmZW6m@0O
zxFym_><P%X2d$}nZ(ktB*la)a-2<NOzQFyteF0>F?rW@PU!bcrd*)c<O5rmO<5QHZ
z?wPLr0KeS}=qjy`ucgi}F$CO2z!#m4?bzaWgNG;hewFW~JU_<sr=X<_bcVd}d@~l7
z$bxqTOY!f7`b4G#djVMfDX{`~uRIMbX?p}Lu{VxQ@Q;Kg;~In|ZKtR^0+z^u{|#84
zIJ7j5U72u8{d|z;`0E|k(UQBdVYHFqUdc?UFMW4|+3uD$w75$OTF{N5*td&n6dzkV
z$ArYc8g~l5c@<mcl^fZIg-3;d-NhsO<7NCrvJqG(%nM>01gR(apIQZfV?&6y>+xaS
zrS%B5yy!x-81ZNQ^~az|@s2+9Ke!JyNN;}l7<)X7eeUXPe4c&&@5I7Ku>U>y=kIN`
z2Buj1{1`N?JnP5$Id29WWRG><%J`5Cl4n}?FJ;Xyp8CA#k$EXbR^t@Sy68mdIPdNu
z)r-hJqus}#;X3Aaj2u_0PuvLg3!;LVXNOsP2^l4O>|2scIr*BLe|q`q&O=tv=WrU-
z_=i91g8rlzA4iwev!=oyuzowX{1WT~&(8PYE5GPu<az|YbaFO==NA>c)lR<rQC}6D
z_x08%UC0f|ndP~@=JC$!Yd*iVrg+CbsDGwDq<@F^>+T%+tShIF|65~$FV8fVt_J3d
z9DMc+^Yvh>?{}O#ZJnt<>G2VBN56*0nYsP5$U_ExYk;%v1hB9N-cxRz-|mg!$E<JJ
zo7)!oNEW}sX@vbO;oAQGq=WyatkaXD#6@#Y^U(S@!k)<RoFG}c;NAiBlRHd5sr+Eu
z_~yNKC7&bgeVnPSApCU-EGR$N7BPI@Z%d!K{37M>v>{$gvG&Sw&pM`ByoMbyqz6Z#
zpFY-*$6oR!Cc~?;k0ZnAT5FYaH^ZB^XW#j;C+b;;Iq-Q9c-!+8hw9`%CqB{ND?6s{
z0&)|as7qsWRQG3)wSfuI-_CIcJRk7TUg-C&4_LlPYZvEaV*WaXIlb<!Q#KRNT*ErW
z1(&&X%3g1sl6tRcwEW0AWh;KaaBeN)f(QFNw@z`{HyeDnB0H!2b%-Zh@_E~nE&0z<
zIoYxc`mccY<^T)%Yc5B&SUQCM^66(f_ts8FzJ!ai_!GUzCiDC^k}tP#en5BR%6=b?
zhg43!G@YTpckBcCa;83hSNW34$(R4uSdcGg8cQlCUw&`!MZTP=KgpNirpzfa{VjB(
zdxf=S7mMCcpv%MmNz5~J<L=2=zktUJx57Uu=(ro4&V&}UH(7Zv{%*@twFmKaTm9!s
z-=XI`f58uXGabb4i(fk}zry=2_Qx^oj~TSNVTogXdGh0J_;_aShH?Eh@`cHVDLt(9
zs(gdP>E#&y+P-J}i80*85@I~c7xc1t9Dj{`HP&at+@$9<uP;$fKD9ZYV1D@D)W?N9
z%iv?aS9j+OgM%B%!XbOE7a53sBN%BP^xfR?eVf{5?q2;TsDB0VXw!+$D`dRi&HZ+<
zo17!W*6<xf*7%V@gJ%%H$5*I#0>AnR>h-f0s?EsOwr6l`obkF)b{!Y_S!SMmd-B_T
z0l0fItP2_DlWZftkg@D{i5;--W@gWiSl)mA>h#O(8>)|>C;xKynOOf8W3cN0WabYy
zWjZ7SCI8&2K=kGhzTI)UzPx>bHhjRgAG-&gjR#SC)_y>?NZv2mr1O*P*W#m2B0~<-
zr`^N;6!5^F6rBF)a(uI8PP$};e8dI#U3rdO`u*P^$FW~u`dhxCOK**;^{LjTc3n!j
zKH4A8+VtOYZTIqB2@MU8?-0ET=fBF$`-NP2udKx@`blNHacEuhCtp3;;mt|&)46rc
zLG7u|*Jr)mu{ZZjWB6TQKZ9~=3!67h9O@~2{50>pF{vM`uXFR%*dERGmF+(ZuW$40
zboi?KE%_oC>qX4tbY&{YJ?zc7f^wEFwv3B*^V@A67kzQ<+k^C>`&Bfq4!%7dV{w`r
zqi9X%j=VO$`C-ma(8e=)ZQOo_@$ULnrqK+8c?2Dr{Et)N^hw(A@S;8IAvk4YHgx_X
zJFc?Mh0xFg{J-Z6{rbp5D>$Y8_GE|ZHB(mkTfLks+PCv!4YhZd+5O&q<kd*`u>aP_
zeq~Q@L)yK@q&*mS6IYum32>gOFxs=JF#gIOVsqfx)H4C=Z_xc+5&n0z;xmyyIW{&L
z;6He<>lx)i&+K8%^@nEeT<BT(=iXX3G3x2=8SuUGbt*54^4h*f@$vX~PV8ar&lxA@
zV(wWEnD#Yu$Y(|FkQ1~O;=l5UEHg7!{0f;N{xkGxR^Qvt*h0RyIj=20d3pAE))#Y*
z^~L;R3w&sOG317Rsvzr&**z(Q-zfd*f5I2@Aom$JT-zdfbYglvexn76XE`sI`o>Km
z<)5ro4mI|m$z%Um7h}|#a!tU`2fyo$_0~>|AR~^oFG#oz^=I?}s+{Lf4C}Yb5A)C2
zwwh_{;`(>=&y8r0I-|Ac&Ker0V3!YDWPCz!z2hx-3H>7-XYi$Heu6#cK%)n%%=|uN
zT@U+AJ@}eWe4q1Qlbm$xJ<c~btv286X)cL|FLe^jv76h9O}wd#vtj5t?GL$gxUVMj
zcE_s4(8W5|{Ok*D_$)cCX-|8PE_$MAxi7l!1IW>J<D*TFvxl|Fq@6l)Vo)Zti8@<+
z>EP>5%bbV6adTly@U^;-yJvi875A~*cG$CZ8)&EAAKghi;d=I?widR8{|dj`iuZ)V
ztVi6f>_?rbw`T<0IZpZ~H3J=14iIZ#kn`ey?ca$1jboyJsdm<y=+_*^MLnN<RVVz3
z)S9e+#nxrNIkROVxqc#xQ>#pR4m4!jv3t!EvwO`|(A=zog!Y=<D!=^oad+LcsI9L(
z=US6aJqZ8NzxgxvoSPfiC!NSX+BJ61IXN|N&zbu9d(N-j`7ZXHC$wGVcAp*9o_ywF
zKWF**)bP2&pRO0|t0qO=B_@3b^EEmbIm-_%u-CGrAQ9AeGd#1KGE1qygnCQ;>A9-c
zP#Vpw8_RxiX{ZZ6&)n{}d&us^$O!iAG7px9GIvvcoj-lvz0Nn^E@`_e!&rQ#KCV98
z-ui_4aH07W^P7&Hzorkni#UE{#$MU`tTpXD)s`oS6Ml)D68K_<)@bM>C%48tg8Z4h
z+{}FxpT6QfU1YHKV#`@)YH#-_<&yYw(jRB+d3(FI9K7i5?|SW7{R(|J*n#+Y_O-Hh
z*hQ>xA2i|Kz95llF0gy57mhcLb8bo3fY-eh#CD#bZ`qH+tCi>QW+c1r+w1u=j(~^0
z+kr226idAZKdGH7@f5lTQL%OtkdM3SO*F!%7<li3Cbi$aT677_Zt?u6j3Y%K+V568
ztxJrP3$0FJO(gn`A#X(A8jJR<R}FBV%tcQ6ZtE8-vwK&P%@KdrFV>GelLU5C@3_~-
zWvjmB4fd;jx&3N0Y`^;4Ph|aJoY5W;>z(n>u>P=qY$Mqs#K2dROW)eO&QHy@>Bt<(
z8|ek<2g#l88rksjlVOXZBNSib0MCD?p7qT`FOl3`y5t2f6U?{1#o6#x3lfu|BjG)X
zFTkTCx28UQ4m9u+(MlySv@}32Gvs`j`Q`8L_mwmx+`GZ=sw{qgaD!>wdi@Z7vE2vp
zD?P5ZhvWAx_^a>kf`o_DM}ajuZ@;@vzT>-2fvbB4KjUtVlR4pc$ok9~Q;PnwaR6CA
zqt-y~jZXSUS0OhS@q3Ar{(_~Eg)Q!!u`TYN>qC7F%xMLDjE-xS4|*XqvSj4AJsS4n
z0Yt+tJm2??f<zxWG_^^7%*o_w%$_9+^PWB6w7b+vKSlrUR{BIHxGO${94igETd~iP
z3$mAG8}z_C#&Oc6=x)|=^DInwH`%aH)G)WVqw>qsGTg0FT+dyfe*emIxG(C9k9=|3
zCZ3u0y5qC)ovV!ntkX+@r+8Z*(Ysl_s$aIiE^@9}e+hI@e{)lRJ#8-||Bhm&QpAOm
zQ;+;Zr7M(Q$o&yxFF_7(T1eaywp75xU#V&crAiv&-RR51$TIEw^el7I-#wb?AO?wi
z2<Wa`o%A=pf_?D>YeW1F79L+%AUkPs*U|>vPjt3mW8V+seHR!Grx)1<6K=rnL_eJy
z;hS-(jO;IO57){H;;FixX`r8>wbbTmzD8_2Z2NO<-o=seZ7*0qP#5>gZ)Sa!ynu6a
zz|gKOft%vPrqG^bVpn&4Vwuh`6K^J1dhp!^FUi)c0H)2rv>BMTUYUcb>90ZNl1Fax
ziVsrH;^O8z`~L&JOwr%ha{YN_iowGnzj-4(?S^|QUY8v|rE?eMO3r_~Blg?OeEt6=
zbt)K_kNC}JdFN-p=R3CzbbOXJOD|^+4Vp2L`jC0EX#P%r*^1aB9n;WZI)A<LPq}x~
z<2yrc>dYZuLNW~8b|#4}Q=aS8-6kzvpV}?`t51ZO3*x=WD@i^iyH_olr}C_A_SSF1
zR-hg>p!NgOt>a`HNA|bA9U%8B_sFcnZV|rkhPI3GfgwMA$Th7CEf4Wrw(fA8D%XRp
zL!ZhK>Hy<xy=+XuXn8PusB;@}+spkv?(Re9xMQNo@5K@79wCMi|JdGR#P?5OPv5i8
z@losz5vMPjY$cZ{aJo@*4p;g@*?E|6_Ent&4V89wtz++HBl`Oq^z{bxcL$%1{=xZK
z8G#=#wFVeUHe<(m^RzUIZwB66taWjwYD^+CXG~%ey6pJF$Q#`s%`>;=>cp~Juk1fL
z=jy~J;@r{sjVC&C?<o(Do{bz!v{FX#Rn%)dS#>q`)Ya^h&RDUTd`6oBlUKa>0bgT;
z`1oD^8H)@&=fx~c<=$@Y@-FdW6<qLt9DIJ|51<{!5r((q2UeRJ)A5IqQH-m9*2uBd
zq4U+(><MS?YnqLVApS+P##~O&-<21dd2RG1UyALI`KrGYz|_r~XMfF@!MWO;g58s&
zUC4Fm?ZH?ROHWz4aND!8J6}FnpF=zCZnQqxy^0-4t;pJ!nI(br5%3x`vHkAS+<NZT
zK-%q|7IinVu4BxZs`rLsC5lN3vZtOa^Au&8&y8lb^1TIovM-wH9g|RbPgfXnQ1yW;
zcVl4!I;iHZy0qI458QX(fy|F6e@!5rSrnk}+JmAsm;Y{e8GW!0-B6h5>nODCNw&I`
z>^~vLIQy{jSS>tbzV(@NlYcW!GS|`;Ia%EewBIl}>vw4=ie?s>M5cjfix^)spC6fo
zdriYg8N0<vv;N+D@RJMd85Fno>V(nW_&1!i=9Kj2bU(KFmTVl(k!FY3Rwwbr8-ndI
z@@bq{0dFif(UWWJJt&FGXm2Wfbrhf9m*Dwb*jGuuH>00C*{SbJ<mS1nm-qh-x<b4X
zkslJ<H5edo$vDO?n?ld<&-}sMfey8ywkoK%OR|PD#)l~9Kud;l*elUP_Yuoa9s>NE
zjs3ZC9xdZc3w1oZ=bRhowX+uAtF?H#inx6Ea67i{Gqit9bji2c6h5uJTb#9r%DLxe
zm-Hj;##D}Pi|^e2erf}7S(43fA=+}Q{v?!vo}AB_8tq#Nmic8wlX~Wg$7wIWE%D=s
zXH}ffU4R}86h@o$-9Uf6z-bY5_OdU*clwIgG9Bk(4_e#gyZB47XJog$gnu%%O0pK2
z4$U?3T|V2q@n_t5mGS#l9DAf~+OH@hJFawVX5Q2M&am!!Mt)-8aXIk11%K|_{P$@5
zPHQV?&sZG?#<E*H9YemGbl-$P!hv7kjcs>*Gxid;=Adm?5=f-54`tgOQho_!+`POo
zh_^H!t&Q2^t;T-ZD?fM_wsD06d{{5{H3SlU*8~y~%3Vg?5dK}Axi}Y}>bJg}>G(Bs
z{n87WZLOD@mBAM70=v(*GWM6IF<fbGYW*wUO2hdHGqvuXYky=K)lYDy6Ee>i%?}2N
zYkaP#X7WR^{VEsx7xX;uiK*f9<HyRKdA-{!Bh%gsKHiOg`i~i754hGI_gbAZf`>JB
z*|GmfTiJKS)<7eAuXpQtp1S+Ke>AhrzB-e96Pe%p<Ue5B_4)p>>5snnrtXj`C&!)d
zWZi)<c&dm*9$Smua0T#M^YTK=+mb^ko<c^!OOiX`U$AyShE+&D^^Hj!#O83@(Wg2e
zx6Vl)-!eT~_T#$_90iV|`{SQ7Y0LZEyWWpH%IqYT<(S{@-HRW@3+x?iJGrzWy@`A3
z<HT6H_s!VoEB?h}(4ft;ckJ!D1IW((^84NSJ^Yr`)4qYj{pQ%fZ^#DgVJ+Jon6ZcP
zE=HfVSD@p}9aa6Ch^cDBj>3<=ub$`r;u#x>HMBhG(sxF38<=XILFQ;Ak2s_J2cIDC
zkK`=!Q}R`E^;~4E^<kezmU16kncF-gs<s5LBhnKC!0S`coch5|&iIkn%|(f0Q#MUI
zc6(6*x=6Ul;n>GHGt7I9U;Sx)C);2?-|m*8=&{?+i-Whsr{@fG9J~EvafAFh(pP8g
zHR(Rt0d0KBZ}!E@C!))4o!d`LtzE+ekWXpkeTsfg!tdmUh@N;*I>X*`u3T07kKxx)
zEOzQ)V6z9g@i20)o3oheubZ-0M)vpb$@Pa#B%AN9E<d@z@ncm%AJ6)ute4W9wb(D4
zkJ#))Yd!YgrT$Rs+Xdfjy~U&tRhp1&Ao+qKzy~<LVUmwN7XA)rDU~;$b1Ofegv~Ya
zS^O~PL|fN>;Yz{LU5wA?NA>9+UqJnCbkV)OjmgDBKA$9Y@_jyI|CpRAJHEQ#oUA|K
z|J*m;?7HcvZ$5tBVd(wYjs7F|J>nEQ<X5@<tC^(>metOfdV}rfS@xsgDdnARy>9}0
zHj_L5^}4q^fYBr2&xqGp4_wNbbA5ODm{VyyTsbECy%0Vye{r<+AN?(d{>mQ;VY3_}
z9;N)`{J6@d;FUv#fl%wS%%65z4>JFM@!{)=Jkq+KxUc^-X+xd9TQ2Lb4fs}69D!C#
zeDZfZZIp-a32>?3=o7_b+uy`{AH&CVYzg!P-rTM9=dJH}=5`ZLx)iz39gNGn{n0Mw
z6>c|)mfg&eb((xk_pNKca#=yd`k3mVm+&gu>8(#VmtYgj!Jabb_8M|!1)-s7=t=pS
z`a7I-BYvl&Pay9CiXFJKA6s#oQ<~L{23$dNgSuDe6}B$Op65ErTE(G`&Was@UIx$q
zp`VvEA>Xx^gpWbG&z3{?wpM1(5ge%+YSZ#6z8cYw=Zn~k-5H!ftRZW)+7jrFb^EV~
zsXCDAuSwlVo;TSHd48raHc1%WnqofE6L(^t&zS%XQpWm}pwWqWKBZOQ*z+lMUol{F
zc6&ah3i_*HUiJ(HdTm*NcrI-8Gx?R4$gjk>R$E;;b%b9@_dz7luVushO6c6v##yZc
zh7s(b(fmr~fvjIi_cZK5h6)~A`!n+-)57e_DHi?ft=zqeF1fRteW&JyE#YRr^@jvs
z^TBiDiM5>E%X+RcLaqb(NCe~0PeC7I!{oy<2XEr<r`UOgv6(mA;JdJUE51&i$uAO?
z-fEy;)tKm?0bBLEssTB&m43I<FFujrLw@TM2{uBTrPzuS&D@mmR!___^(C7nr<3G^
zORaG1I&=8D_plbSGW#?(uv=1>2+qe=g;&0e{=X7F`wI7!;G<rA=Z(Skspv3lm#4RX
zWFh<D@Ed-%^hG9df^i(5Zqh8ACW}9koZ}Neq_(^#8iRhZ$<v}k_8Fo&gJRx~E&-oG
zcyrDie<+4+JB@r6Q*UM+O@1NCIK%nlCD)kHEk)4!Zv2-#)4W9Qnr{U#2m&MaX6L5f
zH_*`q9_z@vV<u(&mRhs3CRuNS<@P*SP&y7h!dgAe+Wcv)$!qT|jGM@qXf5ma;AE2y
z1{vpNCSB?JLbdl6$EBy5kS9UTm(_ln^T0EK{T6?;HfCBD*C7kxPtA{WXHVOEDuRVk
zUv57@cYTGCGmn=c525YI`KS71!r(Xs9#*mD>DyAK^*Ho^y#lQVq<6aUnT|*H@C;f=
z6Z5y1IG*VH{$RlRl7#DT67wp2D)-j)_%4)lOKWi9T{_pvqYJ~ir>>`X*TC9;*t;NW
z1nC;-sq)Bz0nVTf`~z)m;Qx}|%v{klJW{=cXHD8a1#hW#bRaQIF7T=4tirAz^BlRS
zy&?Z!a#o79om-0D#5Ta@U7WwxavRQyN=|29X8nb1cAqin0%+$T`g)m}vf}f9fxKY;
zsh73SM7{uYhKbbO^WtSZZ^jn5etx^T8DHpa#8$G8r+&p}#^4X+d4%~LSqI*jf1A#J
za*oHH#a_-c=!c7a=~~VYW#+I)w8EdrT;v<bT*2=KKG*Qsz_T0qUZT&Kmdx&Pp`y!>
z$Ll6UGY5F~5}&OB;;Q+6l}|69m-*ja)RLKAJb0cbLJq^^EHghsKEw#${p*UON8kq+
z{9xmRl8a2u74S%S6?6C_);^_mi9^Vc-`vO?i>|}$a}pu+m3YKF>V#Z!6U(2N+EN(J
zykycJ>&bLf@va*kc=9FM3Hp&+Gdlm?;ofiLxPFJBmxr)dDkxV84!Rckuv2}}ApU^L
z51)5gin@{^f)hMAPx8NOQC*^PfeBSmM(=}3a?QZ=6?a^1%UK?zoa!h(^r1_ot4cdx
zx@e$7G#R{yc4#xbMZ9{h<yEbzyEZONsBYIq==z(N@5rwCv+uhus!J><e#Tv@{_XpI
zn4r@n{n0dI_`z~?4C4=06@@}u>JooEmfTU$#`E}VMT@c#HEz+6;oNJj8MDGg*5SiS
z^k9cqVEeY3++7uv@1c)0^(zCuMNQXMwBv()y7|TWbp4V04uqLkm*z(<+aB6<p;70D
zb&0R7H1o=#%?fl`)2BF_b#h?{x?i!Gv&eNHcG4F_e9`Aw)0`j1Kg9Qmz?jY}9rA)=
zuM`2x{y<r$?gBY};2h38PpLi{DC~Ue#xnA16cN`^P^~@fBr<WQe>(RcZ+uL?a^KCX
zI3F;hv*_BlEzgIW%skn(YsleaK5811=r{SeuEm}`e&CPD$uYIFA6q1W?AE$XHpC^+
ziE=nNU*wy)yL)YH!C>yEb=c?*bSQhImo?rYY)aOTWy0xCd8a)S*^`nFI?vF;yMFK_
zU2&`wpCz`?@#%cuI7j}1r*$UJ>WEJ6z`7{wH&D#vUCeC?wowurx%W$%jwJT+2f=HS
zebxxJhY#NM{ME@DMtO!zYlFr#=df}E(4J(k^r{bAJi_l*|J2^iI<Lw2k}FT0=U)*s
zCH(oI3(l`>(^^dHsK;4Hn&0sZ?&X3D>$xO-S)P!;hxLtkVIS>logzO{FKudEH<jam
zz{j1uKEoQyx6;R56Ur~LeOz){6Y*7-mHhNEm0SL@{1v8}_xq=oBp<{6#lG;pLD|PP
zv!2|ET-bVPg#6w3*^$G)48Gm5ecXX*AEpg&@9PR=UR^pn2H66#Wim_6pkFIf;!F6o
z9;1zm7#Dkb)$)1&>Kbww38wh7b^%iZJ}Yhx_gBI@%g7(Dy^jcU2u^fb%C9Ha{x!%a
z+GwbFyQ7@D7W&B5E}H!Dtp1wq<9<BtBE^lBD<5ug^dz!QGEZ{34ZC2vJ?}D=7>nth
z3yEV2Ka7l5evqg9iEsn^?#NojSd?wgbVRO4j_4gUtn)Y#;{1aL$xY7tR~v{&LKgP$
z?(p5n49a!W*DF8b8NMCOKlmE!%m(PR*PP<}>A4tr)ys2q>WP=@5{5V^(UIhh^0)rU
zM)>5wglMXPy?DkQ+|9YNz6sgi4V)z_^`7&4`n4^=MZT6GHo-rf9O!6b-GUz?AzMx{
zw$f)Iol#+osXgc|<U$2!%&gqqgPnmcmaNn{K<xvFj%rI8FLSBIo{~Jqo=(TAC1WRd
zUe%rD<qti|H@qiZJ6AYeMcc$Q>Y2to{f?IYu;4|GbGK@2bm@HROXs5d2KC-M=)CKw
zllmQXUM)6HEoWH6oMClloB3hRu6p{;DMfEJ!xslk+AuDy-vkeIAp0o3sB#|EGQXZ0
z@VE}29qSgsBEmcZGX$G#jF50DdJR^a#u&cwt^??>3*qBs;Jm6Znx?+!svDhi->+<L
zZ>tylLA8<1|Eo68$<{uWTot^#mI`L@4!V}HR96JA3GE`+zSgPmf^sCUm<<mQS7i4U
zw1<$K2@g;&#TWuN-`n5)lu3utRjt9IP{$tvYo6<@Z&#ogTZ=QQd{RZ(bF>lqR7^3t
z@(q`Bv@ZJ4rQE;0m-Pm++ugDt6ubj_1sW(}4bzRy)(y;B&@mMO=!L$5vuF>x(fGSn
zhkU3h%1N)+qPwMMy?3>X$iY&=|8>5o+WG$bX_GoupLY8~-CG&^wdm0C$ZBwsx)pyE
zZP!jP>Dnrj_+u9v5BPOa*TRdssashmKyP*G?~WjMvSq(jZm{pIj0+ns{6pr)oWe7U
zLN5EG;n_u@a2e0{veut~-SQjy=ge*ReLTl^@}Cz1za`Xt+3=Bkm{IM1mo|16MnBhq
zoP3#gOL+I)tZo*Zo(X69<Fj2^{`lO6A^y-9z~kBS0dT*1nOi2G;pEN~^@xdIoYq;t
zYoLKMoF5e3#GXf<P);&J^`3Jx9k1o&>E)}Dg~Xv5{B9v+deg_IE(s#XSKVNy`=KH7
z^}ey{(za<k{iQ1;JGVZvVVdN+WcdnYv1Iwb_h-r^FMFT`_f~RS0-L54PN)l*iI#r$
z2<L~FT^o{Jcak|Q|C9-79-`wHnM3{=WN(gs#XQko-G2_v(P6EXVjh0c<tS&THCN}K
zPo3-Mnd?z(dF})+6WrAA@<W`BW*ox#lk{J~8R+mj6RqRib_M6QyK-=@XAHz#cATV7
zjrF--<mB^r$y1sezu@_4`e;LMq&0uqv~#|MbsfB-HBbtF=nq)?xCa)tnD<Pr=@Kq>
zayECS_}AC&ur`wo-GrWzo;R^CP1E`VIjEexb1TtnGuTJ@h2{@^Yp+4{?B3dtjs#3v
zbbAv2=iu{NC;c<}Q+>6G4S7=&YuH`*FIgX1n*|$SFb_g&D=}J(dk6Yux#)tqNCv8|
zrvrVS{zJY!KzzAi8T<nNPV`^U;Y_^rT}}snWGnh{l9{Kvo*rzWj`YB+S27*6i~Si~
zQFk``?LR4+@31x-wEJlH&1LvMz*idIV%pk*Gdj<Lw-g8NqKlBT_Pld<O%{HsyMYNh
z$=YCAyFwqe_`zyf`})97R*q(4X+$HmJx}t=%8}cUSK#*O?12u&`+9uxGjO_5|ErLb
z$XM{KnD51<;MKPAjVztL6Yn{lqv-MnuZ?$I;iNzO%Pg<62cAfBUU$`fX1eAln}obf
z?e2p&#JOiO9bvCs_!gd7*QPhgrsdft_OvY>3>)LG!K21F2N+`eKvUQ{<mptq&-3gR
z`1mMyT)cJTQgXbOVb>4Y-^wv5IQ|**bE3mZw;<1gRsQI_tB5rZ_@ft1N7jR*G<3Z@
zv(WPK3HU{H{u5%so8YD3mO{%*O~ZKUhMc?-@3aBm?=zN1{U6>Zxiaw6w>u`A$?Z?d
z4uqDp7SOn~AEo^qtqD%ZHXSzCr<kkO=bCSf*cz?b2lqvhwTgdMebJ)Y_%&^`UT#+U
zj=pVe!I#dH3`<ViNvw_Y>f1y6KW`Og_kWHQ)>MFZjqxnxoi7rD4!CcXIa@oRc-P=Q
z(8gnouNhxE`xjGhzPtaYtPM;6*i1Lu?Y+&|$g<at;j>V=;JIdd{(fQpo??>w6~)i8
z*YnG0{ttbLeUm_8^k#4}nw@xQ3c5lLC#6d+CNG4(TZw(!U}MYI>wMMlc$y&oKm5^y
zcgUw0pYR{To(@9;DdfZR=-)87J&!Zn<?EAIihn*(61gh4%7kh+tiAF9@YxL>0{C@W
zl96c-3txHoDARcmY$nf!b+KXb(<dYswnGns(eqKh=}+sbd>Q2~1&-auuHC#njj-S_
zwC6o2&)h9`&wKrdJ#Y5k^Y*;gSLE$^v+i5Jo&Dk?%MEnGKFyEBH|MUnkb47#tEsD7
z`hCbl;dAqQvNCxZGI`orX1nC85BZuJ&%O`zra2Nnvp#$O0eM?;=M_#cSDmBNd;NYk
z_gnJk;4JjRIw!sLV*?%E%RQG2{%-EK_boYnFECQBWwj&Pw|Mhn1lSL99|lf2KdIJr
z`8XK9uIi*6TYnUqXyZ&m(IY1nH*9lqSln%t+$3&-e!V{O+rK$CF3;AHkJ{ElH!eVS
zd_VW!g9H0{Wfu0Vy>;%0b-2C5z3kP@+&|!5J`K#{f8H84i@)3&R_|=t1q+cy+4v*n
zVvK0L%Xc|?&w-}If9&f-%h7oc^4#iE=+Da0arkR<`t&$*R&;5fBO}M)rxor+1Kbm4
z=M<s*a5^Q{V*SC~xthNOc51`N9*6jNI`zEwf{FCm>0rOPJJa}NG<(M5J-PmLCgybI
zE4r}rbLHLI!PtU4o;W-D#~M%b+0hT&^>)W`^t?x-tf%wNWn}N6eVz9j<D0qfytv6z
z+ALR`0&QMMn};c@wgi8#ZJqn^;cIqeudvT=uwn9XD!*5jKE_AKtF1ZsT4?LXxqg-7
zU2TR(fwlUX$(+2t^k1-6pX!fTj#J<r!AB73v%ZzVIViuPhm+HtPto|qH^%}Wi@VLx
z1$(vH=XK#V`6lxD&GG`g;pw3Lxp{m)_bp!kB)WAs|K<Bs+b42!)IOlQ2>pTlJNc;v
z@gIK{c%WDR;ZKme_?kW{n{K&3`tvLFd`9PQF3{Scv~vP@KLrN(lsp*pGrphEzWVX@
z8TCwg<t^O1kq_#34?Z#a)qdr_dhawp-f6%22=n#kD&Eb9nf9VA>~nj57S6-ucOUT>
z`Mj`=HdIeA_u6`sXZinCM{xog=V-j9_P)m4z51R^^kncx>Yk2YHour@+`FE<!8y2u
zzsf#A9_)wnwfefPL2#ead4zHOIk@?o+}MWW{9JIWF^IqWy)wvc7a4N3M+XhSHjhru
z;<@4c&}h23Zg-~f>x@<B@+{62OZ!S@n~(BdZ2cwPJH~e8;Y>$?*H3#k?l!-yi+}AS
z!0r58os+rmx6t3>wd&me_vXGQ@tuEHwC++>Id8nWSCyQ!<kc*Uf7#|DEy7Ri>rCSt
zk`EzOX6^9(8^~p>y+((aq%y{?cug|~yIS+$T#96^=4Uv6<RUMX>o&}ptGoQ{iL>va
z=j=1s{Fi!<U7Kj)eHd9STZHo~AxGaAn8aQ9T%nnS_Dg)Mq1(n~^RTy)S6;D3*_>Ua
zof+cJWZMX@C;7daHa<)Jo#V)D&lv}AEb2%79cjj=ApZjGiYDwlULfWWKFpMwffD(v
zxId~E-%FT1_Y`Xt*3oA-ux9qkR^1%jVR%-%I=F*;q?Rwb@K>CiH&oXJM)`H~>!|EG
z*dVf5Q^eTR5f7U`mWs%%sE=`2xZVbgl~WYh3TIu6N98MGv!dg^c(TJAlkC})e5kpz
zs%_+$4uF^Df`z)f;q?@EdDkZ|CwKpOtZ}pViFvt0?_jLq`}|9kPfPP6SLk3q>M7(6
zC6{Q4hi~Pjws}L*v%;bBHMh}kH@dZtd+M0aHk+54_xUv2!~6T8gD;V{c@^~7PYzg*
z{<;{u=*&B3yBR<Ez?uefyJqj-9)7>J&g@lk_fA;-l6Ta9ZDl+46Sd?SojI}Lo-py*
z+KVYS+~b4)>=pVe02YcnV{bODoTCxonJRVSn~!I<|D5-N$=_=~sme*L<NpYpgl9#+
z0)8cvRCaT&tZWc(p2CmlP`L8bU)Fv^r@<o*&rUbr82dQ(-OL5xFPAq6JWGaoZL7`U
zIBsI^#lFw8nNHUSJB^L^KYTJvQ|>iZZw=B8^HKZV%tdq9=grBsn|-IdG+*mB(SbEZ
z@qyhw?yE1hGNca~;q}=K&UK$=_AX822X|@e-n^56f@&*AYO-=f^m7jI*$&@jIFtQz
zd}u~{w(x~~7thX*EVi_JefDeu=dwd#&7b$kd--DjFamE+rH!epI8%?zU~Ru&F)yqm
zJLL}xvOis)drmB2wcbfiNG9P6U_F?9cBs&NE2;SZ+t>UfvZ*(~dcne!d(c$I!ksah
zi%-SHoyxaG|K^9+Se$VdL3`$}R}8B+9ES(rXXbiycdLBS9ng`bHGWqFXGd>ChUs~n
z@7J0+TgZOhFF%Tm({G-4>pg42;qBVKhslb*S?p8MzRfcRj-OIp_%LaCbaLl<{-^ja
zdVZ4MgX5}EEbx#l*~PxgJIRvaun-=(Kj;+t-R030XU8PdkV#f&EJrrC?Vfa#<nuDg
z<yq_<U1SDo@wvZ9F6Q~u&HQP=R(FFq;BhoKn@Y1yd;RQ5EmoPI9wD}N4tERA)^jr{
zR*Sr;J~h5sv7$+QDz~v;-du=G!4EH3RIrcl!QxWx>`Bqi!EwZr5r^BX_+sj9#;-Sr
zb)zlEdO@*NQy8Oi`jqG5zXtQ$080m$YYn0Heat<k-?Vc|PM2Z)?(tO@_z?ei^0DrU
z?A@Bf@72^jqVQ=n8CZ5ORU#iCIuyPT4eK0%bn)?vv$~krs8EKS$cN4{E3Z9Y@s(3L
zRbIKK3bE;9?3do6bIp80#8HW#y5OIz-ksXHxe;1=JM--kc!xF(ei0Yi3!ZPbkA^Gv
z)yy^zpB}z+-u@8#&%5wr<k#`=kV0o`9%1$yJXz62U(4>8f0<*5bGX>XeJu81ukQf5
zOtPl#+UCnP6NBP58{!-Sy}Qcsm2mg*CeCoU7nw${k1qWE9-sZ}meKi4aP{<Y6YxCD
zUXAG1+7rN5F#TK^@lnjbCy>2ct^3d>d&j!LA75??dQH$YLTfuD%a)nI3jC*y-{ssv
z8XiBoMfcX9vtl;!U0g0b*)6(0Yl}?Ao?yPRMJ~^?Kf0I`{+7gc=vaHTUF5@2-)l-u
z^zu8_>{xb@S-D{Phwj05%ze#SJ4vznk|7!DYV5kJAX8-0AHf%Lyhy&mQ)$6)|5rXO
zM39&Hv~b>OXd%rwZek9?>t^^kAFrd~6CY9HAp7E~cLKSGJYI3_RL<1xp0rXh`}TW@
z)yl~M$$Re2o*Z0Lu>=226yEH0rX$B0zggY1+7u^mG2Dl4gm<33g<h9jNS|l6V|V>w
z>O9IKqr{hkGG&<j>_RqLTPry``V{L_k4{|p@f7(;Tkj+v1#jYq7dz0tg+uO4g80NO
z$&P6=xe+v`$iHQ_--Z1zIH-=s&tB&C#CWsa@|$!F{E(U;**&DA!iO{4IUiUi8kHR)
zezy7x+$uf`Jf3pCL-I$u!JC(V^_|GSvd&A{$Ck|F>>GQKoL55TX}zoRFX<aPYQm3>
zUoCMf?Rs?U(bpG=`x#9~X|5Iz#o76Wb2joRbJ#y58zj#!%gOUEsNYrPmx?B4S3={=
z5!r3$=fM+N4oUwjPVYEl)ZEkX<k8zrf;p6FOlnhOaQiabkqKoUJ&6WH7ZLc*gRx}O
zXmAexYsS*d?X>CD7fc4}XqXLPWn3~_=N9USR}1p`)*Ll1Zw$m0S~@WQlCAS0>g48o
zwjoYP^Ag``?R#$V5KnkxcnkfRW*vEADR)G`JEALOrsbE4HFoU+znEUxJt=6bVs&^m
zcJjRWd1KO862Bn_U~XQ5O&xb4>MV5at@C%B;M}66OUiv$uoc}tcPecY+gGMC#9$^e
zln)*p!mV<b=<en9*9~+yeMR$yn=b4dj~2DA>INqFEE?$eD(xI3SEdJR`8TwuBbxA@
z?dF+aD8GolLwsAhI0H|Ahc&d<-*BFeu?Depkh95cTiDH#&t4t7mPemk9%H;;AeLZw
zJ1OKYbw}J8oyQ-0Js$w=?v+g}K8a*)fx&n3t$*>uv@g5rq=oa~yA*S^V*!T4>z%1h
z%|-q>)s>$E8MZgKUfhdqws-h?ac8b<1bb$9KX#75NA``^r{L0+*S`1M_J?dz|NoME
zuix_b>YZ0k&vgHwo>_Qt#>Do6?9@B8zukKeojGq0z1O?{%)OHwRDG}A-}2o1Jse+6
ztQ}SUrZ4C|iR`_3isfrga@J_3S@{|~bN-wSi?#06I^z5}TRu}?>@TTbUA|<w@n6)%
zdVbyY&JM5qwUl2*OyIAOp(?Mt_A23BL!0pMO2uI$1Iw@r3#>m`c8m8>|F0C8^)Ezb
zMh60hyfu;i%MA8guFUy&G+*`{pPi;)MHBrrqX%0Z^9H<Z&p|tsMK_-9D>e!Biwsz-
zz8v<`bpPhiy?;C7I>VzreC%cFd60Sz^;G_J<H+y7ZCL-TvpehP-#6RtU!U!ptvP4s
zuQp#LCgl|~!OltT+;+z&>^$md$D5xwpBOxpUq<#4aM}BUd-h;`4-UJ4zgN$~A!wq?
zFV&Ol>we-qy!J1k-;dvM+hvEq&xm@IQ@$zNk12oWe!?cIJI_4WzQFI(!OiPGAAXyM
z!Ouj@zW*u=D{?UO;P7tXml_Vgu-T`vj0VGe_>HLNWa|xwp*MGZ=g)sc{b06!G7qND
z@;kr&e+$0M>;D9N1t-SxuHh^AQ18DAU(H?h|Ht6#{2zg@;KW$oEqpC}sP|umuMfGS
ze*eed%e?+C(65CPV|lmmweX?de;K~WXG8sWg72VSLk|t=HFS}u*L)GPPkN77kgSeG
z?*;SUhjZ_V!?8Ma_<JY!e(Gu7Ge+BfaP;@TtA0PNex+Tj<AbN_SF5);6BNK^$d|Kc
z(yyKlbv*qVK5s<*UBmSQbS~W6{$knwJQ<ze?}&QfZxHwH$Z?J+AO1b-SMWN>KkpKT
zr_-;$3;a^U;RpSA@_#rC^Wit59&~kz{LjJAgZ(?{SIf7+;GOvAccstG!|fO5^?w4s
zf)isIjYiJ|Uke}V4X4rH6~6zg^8f!K{aQEy<97?+5%T|C(y#B`%Kx1Fwd)#W<)Hiz
zk0Sr`-$Mgde&@^o{P)b=zR#EcdGB9fo%4TT{WjV-B(KB+n^^x0*Du0Poz`!c<@C#C
zBlOGDFC<6mhj*c0o_^tXSyzGQ9Bn=Q0y(3k&paN?=ikxvMUHo$e!=E^Jyj2mC?Cn{
z7uKbFwJv>u|DNvj)}|xs#7y)V>Au|B@`dEk+R~H1r>#rbC-c@eisLg$v+s+1d-F3f
zvoEUW5wq`MeTU7y|1bZ&WA^C|4ihx{v=6QI(4f5o-UjU*a5qTr$x-M%|9xx}de46!
z8HL{S--mPWbNpsxFXg{?a_@8Y*ogPR-1|%N?4`l_**wA7dt8Z!;_lpj;#7{Y$D>$Y
zE{#ifEi(z?KNlzQpW(Mj-^Tfn?o~ea!R+2}b?j0nbaa`{c1)>u1LTS2UgmA&=8X7>
z6X#5cYlxwZoEvTBTyY)y@{tSVBcD>OIRD56CLQ7KU1W&O;}_vx5YEw8D~BJk+4h{4
z_UUF$RGq2z-jg=U*K$tsN&G*$>%i+fc9z{=ZI7L0(n}fZQ9u4%?s&!DTAi*UhKxII
zb+5MYrartl{4n#del6OPA4@p5@@H~gTKLwSo0;?Lf{DM}`flv|;?ut$O*VM+>)A9-
z!}PoSM9yjaOV|v1Ul0#*-gh_;ok>1;ydwM4^P^}^9_<d&cFtA@52yI3<de(J)v>U^
z$HsPmlm0m8`gNC57w2)?IBWDe=VP<5$<mYPXew=zv-zf}_`G&-#uI-l@lZoJP;9I2
zlhu77ob7+w#LgxL!WYN3hz5&%{mMPyaPJ88e3R&Na_&6p6yjy@H9oD_WZm!V@wUE$
z>@Q6xujUn;30=h=UMc%C(9uoWOV;}^e&E47K`0BnZTzdvyTKlEggxZ^{bQB)%B*7l
zW=URqVfJp+)-A+uI_#Zz<(%Q|l6x?}-8$%2b-nUBH|70SY@@FvTb_JS`^YKtttRpy
zh>mqvvzv?g#Ao}o=i|2dx`>BSAA+%XLU(`U!`g%0>z2O1XX#roor28ZT;oksSf72{
z;%G{>`WjgCoTU-rL%w3+M>rLZe6ES!Ij%0@kNBfa<4oKa4n+OIf~au|`0tBz&Lus$
zB%6Pic$lYkSB&zo5?k`La-@aV;x{I@$`^rKO!39wz_8~LLtaGqEq<>+_5|Te_OWdI
zs>|HGd?-G_k2Y-CJUE2!8Rc31D9<h*<yrM8&nibgyYq75AD{vD@ow_w<K-5%^ffIz
zx3?@^4b9EY1NzFJ$7aog^26t0<3?v@%PLky_!KVl@#4YtpTTE7{SU19uEnizRTeS(
zgyW;tSsWj&Hi?6IIL^|?^MiO+oRY_flKaAQoBzCiA9(hI<J4b)>l~g_Yklzzzb01-
z{3-sjupn2O`0QM8q8yWv&j=Q)PQi2V9q=qV@c2)7RvW|N6ZzyQ&n_M1*(f-Ti~?`;
z&xk%YOmh-*a=h-%M{|onubNXnel;f#zxm@AepP<>_$|MJUzL?!@^CEt=HtYJsrHCG
z9G`;U@b3Y?YtMk+H{Sujcl{plOB=)C6Zwl#p3NWS+51O%#vM*0+M6=+*@nu~;1?U>
zUE!DV!~6Ta;n(>+;MZS%dj38B4*0$2_kds87!IFNdHV8E%8ka;qsZjZczOdeZ&dz;
z*WVR>N0AM`H~a>F5BObs2K@T#&Mcqr`#s>7Hb&rgG@kyzDCI`uY1Rh0_SSp$jqY(9
z{%pggr{H(J^o^Cz@cO&L?~rU5?C)LRcl}g!-l_6A&$eQ{W^F5c7o*u$iZwysuJ`O-
zUvf-TdfOi<j&7D+#Twg0#zi;#eeu|k9Wyx2*bvVQJsaYg!Dm}<!44jq)zjDw>t&A#
zR_K@Yvd28#qVE_wb1-+EKi_`I##qXJ@$|Fwo5~Nz&9>{D#E%1mHj?ebvyo!(Zz;Cl
zD&pV5;M&RAe#&n>_#2!I{zkqI{yt?q#DKr&RC}s|J#Dogkqyb*Jo>S^x%3_FDGL|H
z;*6?e(HFwy(aO`?P@~~fc9b7HZnk>1*xFFSsmmHQHbnn}V~q{zw4rCC@Wj@7au1R(
zDQA0GI?UN#mKS2cb2uKec1jkH!|fE69}c%|@E8kzYwKbI*>;7;82A~EL$&SU(EiTh
z(EiTh(EiThP`|C63l0sxJ=@;mkh;UiVtEoAs_Z-1OcoX+@aXB%|1KV_J{^X~-;obT
z<CU%O${FzpJ-;hFjza(2ShI|Z$7%n=c%=Q`2Ojg~(<!{^>CgWzPOT0dhSLv>9Q*Ie
zuUi+t15V-RcZJhY_<tMxKPpb)<Ns0K97Rt2S9mjkZ>Sl+PN3K%n(dl2P@VP5;cr^=
z&v8#LTHljX5_OD8JNN_)J_Gp&y30(Wi+EknPoOhg-Q=NB?j;|-5Y7tOv*s%2;78EA
zfi=%QN$k4q$4CE_oP~(7cgPtV;#>XIoSDe^bpJW7^SSD~tK1~Kw$x5nxz~>0wiEba
zUC3ALOE-)$H30|T*ckL0<14^l==#v@>#yLB5!1UFzo+JfzpV2%Vgjvxa_iITqr1cx
zj|9)Pv3K40k@P;C%U=^t)`gPfFVg&$&mfNnKJI^6;(OGVVV&*6FKZ?)N*F)q#7fCA
zOgpx1a{kMI!g;LRynWeuQ=YSA_P65rUnfS+_{$Hr5x>S+wa>`^Nv@WCcFvrCA6Vm$
z53DoM2EiP7%lD{xc8@jN{LCHy;e0=S(yJ$PM+#?8>Nw*-uCa6hIhTF-M@>OpTJiZm
z0M6oLLoV(LK6-|)zES0t<-M=Zz1K6nckYdCtR=Tn#pF$o8S+XPGp608pHu_)anp|<
zzp#aK@+$K3nBFGx`E?gzJ4yco-#+qgtr9#dbMVDCC)fs|Bf-{HZYbg$o3I&zv=^S5
zh4D&Y9L|F;XEn%gV-jj7AHIFl<(GC6hW>O;wHrJs7f&<i<cLk&zY8Dlz#93WebvC#
zo+A;?jsR!DUo=I#)$+@EIMCTT+a7VU8o!~8Cj-fAxo==ifb(JoUuglpIUi?lIjgSu
z(!XHe#o1EzUBOw3ir^*D-Q-cQ_{^OVQlI6<B%t^8_8b#<<s3&;=Y$kbNv=iiWj6zV
zegkKjfQ{l$A5$&{<`x-dTY2;D!k;O=96V1$%(r*mkTKhN+nCdL(S~@_gM(lo7}<H|
zoz1g*rIHKSlj1M&lg>fda^4*U^eNoZ9%Y_=aw4#ri0@c*um8!wvV(fBx#hpp^MN)0
zl=YRC8pXP<-_H45&nK!gD>3Y0!LkWhhW#c@9{sqU>+DKvp&8J7;U~=dJMoK_^IY#Y
z`8l&YCHr1=TMK=mw@Mv&C425AOdcD<`MuUkUnqP7WzRGAUgv=|yX|;oYZh`=!<(o6
z3r|7d6y}`o2g*4YkFBLSd1dr&2!7|-vIA?f>lMw(+XGV0-r@CPL+ju{yL2l)vaLBE
z*)iypvsyOKgX~bd&H%>p?+({>T0?kewvxlv6UX2u)fv%0b8(rAcel0t)A_i{e=fY8
z!YA0^eefEw*z23&k=wv^4?I!;kJw!9;LY$Xlkvsv{+9MO;D-qC5^r+mt)&k6s+^DP
zk2J=}t?JP|dgWApNB;C#pPsK;^zYIB=A3*jpJ7&B$hyftn>(qlG?SM7)U1rNZYd9%
zl}&uR&_Iy5d}x?Eh|E5VFY=fOcPZu4g9o~6oEDW6y@k=C<zch(4tT|_by^I0AH~Da
z&SL!VEkVAQS98|${U&sPy6zQDi=Xr8<zMivtY1&Qx^?TO9nF(BhJLuC5gC(}`+Z9S
z@gwL|PanK>Yk|(SvrjmN{G`OVBiHhEgJeo~6|&^R$*Uv>H~Ax1?eudlE@R>gfa~%S
z-A`oC<5mZu9hb6YoLBJRDLt1jM=Chul$D>Q_`&4^*S^NpamHw63UFvCzm`0L!2LpS
zqnwrzeK(qwI`izJPa}oMH~Ja)ATkU((pWS`_W!EaGM)m)B^$;YSNH_yn{w^4pV{~j
zvMh#;Qog{f+{J(L3xy)UUTwZcn}TtSIsOPZM$+U4%`2yK1hkbnr0*)H<=^?%7?aY6
zjIj>=V8=*%zsZ$V+sbRA^7<`((8pQxRXWE2e43bpcP2ez>vLunT_N0^u3QS5yW(>v
zJ1*xVd8Dx?1dn0uZH5MQuDv4foU(LPzW(7X@PvH&uyP$eWb1i42pKFLBwSV)NBIdt
zwcj%<xijHpiun8{;FV$wIwO}MKlSoILe~H%oo(5Lui`LtrTT@ywusMcKB7Izyn17{
z-$DI)V)J*RXT#tmK;EI-u<2%IGIN{h6CO`&+Cfe$XyCR2C-F7Tw(EaeA+hX~YbZ4H
zn#twdY>KL}Kj&A`elufi=FI8~@KmcQT=5=Yp*}vr-3{s|rF)}!_la@rD+8nL_)+Gt
z7kQN5-WgTNy2;oU5pd)nuO#0*Stnhf`Q`ghM9&e*S=f2!*J#h?ycos{q80Ii_`s7Z
zjP>kUj9q6sB+LGTZ@~#0X^18~e7_fbpQdfqX@W+EaG%W=<n4vmhD}TDizXEKf)lDL
zF*OZ;Ul;1ecJjZ^3Hixo?f)p>MW)8vTkb(-Y+3ry{)VT%_h!-FNA_=dZ2y~w%O82<
zf$<CbyI(r~W>IPE&BIs4-~4*!(3`vO-Mz8-<kABl$F^(!a?!>I#)FG{3#Xqy-XFi8
zJhk_S%}w_sD>q@UkL8SdCG)LhEb6=dWYPS`>1Pam6oB`7`g@$dy6LNne#X#GH~p;T
zZj3GTRZl++CeU8Le$2-E>8JkQg6UP<R~w+8X8LKSpH}+$Jal9GNzxB<t4|lr*E&Ic
zsgFYXQ$IcQ^YI@#{pzcbzIy2EYxMIt{i&}7rl7t4(ZY?Nvwe-3KC{>tZywgy50F=q
zA;ITN$b;W$`}#uNyXeb5qOaLUGmU|VoKW{$nYj&4ReRNBlm2^XCNSFxt?SP{E3o<L
z%goK>e?5_z>o~#o;CPdMiE{N%)`k3>17Ge`wpUX3Z+Yg)27PnKE4rfqo5>fI9qG|q
z-;y!t5#=u^j%!U8f(IoVQsvlc@Ofe?x<IrE4{%3?JtO$mt%c|sKf0zUuJe8;R*jA8
ze$w&C0Bqa6@*h<=?~Crn)^SVCeA%iNj*bcG-ssxEj1?DhSG0KXBx|EG?utG-PWP3d
zgE{*fga7+@7aJ&=&u{Wgn)Dd@k<3BHCRpn%_Vbxp;JYap;a<Z#kSCY4O{;y;w-R~Z
zSo;g#$|Q7ByUn)}nblZzj+y7ck4^W4chqj<91_pqnU%yaNRFI+Ic-VKjMkpy?ggdU
z`nP&*ob;_6OB)U7p5yH%bT!}o528zFu?{KG9d}b!yhcuvCgrl-^8d5<?r~Dp_x=Cp
z%q;A3Q4yAlVBHy(sH{e#Tt`Xv%q-vqjS3sJ+J-Z`CL!52DS{WkxU*oQ3B53eNULd?
zg_vZwO@A~(>LhI)AT=iDg4mj-wsCeBFOf7F5!g}I`95EtGiP_0U5xFwzsK*N-yich
zXU_SY&*lAjf8Mvx`}2Mq?Y(dQ!c6EWV~O6p;qk`%Xq)vS8Kn`~rIXl_f)Vj}(}&Q9
z4X|AK8nNYg?}-LMZzAxJzW_!7{Dd#!Uy~?n=oc``a`3VCpHK7qx;W^o#w$DqR&}=l
zU+C=n7;ArcRD<B<@?Y?R&vVYXszER#fBdkqy^S9J1L0YXIa7EbcqMOXdHk``vs=oZ
zDW^e1vP=&CPd=17`e1-{ggt3;FEj{F=TiQm(zmK7=--v_-zalx=MuWAzD1Zz^;iAg
z%r|;pJ_hHlqV2ot3(9?odk2}v;$m(_Isz_c{;PTj7m45d`;-yg?`4j9fc?ckFK*k(
zvpL}Kn%)c2g0JH0buxydw=PA#xq=uUSNSv?eu~ZEB$=oKI1g-C3?Ep6pU0KRLLn;)
zMd-KSmS^1MW0mf$advXn)V4YEg0$k21mpM6vjwMXc;<4I4Zv^}FWFhfo20J_KU9Zs
zWKGKjX~i|sI@KE0`m}2}kVV9Iz^znS9r`|?36<lDj=+B`KPo$KDm|wI{O$#2(VJWP
zrSD3IJ$n;z+ydTK0k0(abNYCvbC?^6+q0MZp>vp%$*X{D&9f+HEqz(W*Nsk9UmiSo
zl5rRJ59#8H_jC;0B?nuBZHsxc`gyBiPY3v5XOY}hu6rCs#*w}uy~FpXn$(@4FYYK}
zcA|4gPIQ^;95H}|U)Nqi3|Pi4*|nd!@O{`OH%NY!Oe;Af#rHYlIav7>okH@f>M@dA
z@t<2n9fRXyZbX9vojr*R9q8;wZ(YKiF70BBgSeGP=0YaT=8=c~gYm0R=To2L)(H4w
z-%Ez$z2b89AbYFKZBb~_OvRm^)E#nD%l~>2eSp@a-bT+6+)HxLzwwO^|7qP5-=&{k
zrOYclqdu3js^#^`r_cVkvaB!96!(vUKb_e%&{UN^dg~<k3*XWQ$y-NOOze7$ejabF
zWxgDAn-KhJGI%|u%krxGeO{Fb!Q0SxGc(=76Ic839t^sAW;%J!HZo3hOX<r`G}w2s
z%s!sM=Q7yCpSa8~FIePeKr5Kf6gERAwX#22<!r7U?~uEz_ORy7%9Y5NB;t8p`<vpg
zTU*RC4^MQnZ_PGyZ^5@NHQFuQLe8py2hSka_YB##N<L^2_Dif!88!#WqPBd!d1ht3
z`MXZmo6Fi%8TCW$I?_SGqh8ufyt%aC{ITD!C~|HzVz9%O){1ONdx<v#kB{&SJ7Bj%
zELRhmmX6<Nh$R;4j(YIm)Hw?q?`iBpcRt(!o!JpGg<fdK4svK(xHI=${V_hfv>^U&
zpA%O~aRO4B8+^{hn>EHf{hR_H2bNhgxqrcW;-?XJr7bD^Cg-j0SCMn2iCnOp$DP;;
ze==tJvUX$ITDPR8uQk)hwek}mY-LQMX~<f349e3A-^Z`fEv!FtC||4aSYzBk-`5gr
z%K%HkOy}vfrl)}49%FLE3z5N9hsLO!S>mHBi7|gAG{cT-(Ngp@xA5zKDQ+`ou%0x&
z9|23A{Zh{+m7aY?`W$u&J)3G`k5Q+Gyy78qdo6Cv{EnH=nvQw<nquYxuAysUW(L=p
z@mR8jdt;WHdj2Oq9CPZ30e3dv?f7skhpyv&?Zf{2%S|l8x;2gZ{<>I3??zu2Yr#&U
z@7?P!jCsA+#>^bv_r_yH`-yoQ<1u%NnQy;4&&2AU4rSwfSGPZu^>z?5Ty^{{bEE&E
zCjbAF{Qo}xTT1_b!GFH<5((vsn(uuW8xdno0kiyMGdIOpS#R0oLSnu^f7ZMX3>KRC
z<VDDupYq+t>tjaWeg1m#a|1v68u3ibj4O?&nttxP#vjjLDX+C(x0zz*dHb&NpMNM`
zn8b6<o0$f^R6c0&+WSwYi9K^f6K{amF30w;0-D$i&;1BA;YMiVC`%g;L3<L)SqUDA
z{`P=BtD!ynHD`=Na>?FT@%2LwwfFF25BWC*omTsz8+TIv-?@MIm&91Yw(|$XS|e`I
z^0CmBF}ZQ+8t$Wx@X(Fr<P*#Pm#|G4aPECqdJ7*V)&#gn&akm<e?t9FA_uGtk8az6
z{8%%}oH;v*AHCzO?qPj5%<f-c!l~t7qknDfnMYC@J8R6)&huv6W^!q5c4oP;B)GPB
zRog=1x-5|X{nV-p7RITo23=t(xprPKHEs3hQorn!z<gD;$<{>NSlt--&hNl?PJ@3<
z=Q;}87JYi5iv1SKuOts3F<WfRC*=5DQFBrHRq3YiZLO&nBJd0P6fNWX;tQS7)E&^!
zXouzXBhFWn`r*Ge<^sI_z+Uc$cs+UYn4c6hb02XoqU>D=Z-v7*0RJBzE6!IAbYekv
z|BAW%<r!67ul)7c+46rsb~b#DdHv-Xi+Of6&+tt?T0Q^OaBaie;hKi8^SxaY;OEWU
zd;8qjG_Gb6I@HV63)IF!J^x9(@CrDswY~6K#;JQ`!d{L4a`4obl@0_vQS08Rb7N=n
z?U%WS-foHJ$eD~^?3MH>^~>r78FZBlx`FD_^RFY*=UySV$_OyrNF5gD`HRv&O`X^#
z8JfJc=>+YIZt4C_zT1ke>2;nR#U5+Rr!Ka2?}FAPwNBgIY$G(ahgd>AbHwK-cX#m)
z+t78r#6~Y}dSKDY6Xu&MPdNNS-&FaPXQw`B$g}uM%7eEzd>&XgK<}%~n9TwI%7fok
zIdjAIS!T85R)aoKb@%j%+iT702PT{5`_4CK<|ddMq!)CU@YuQ&XRLk^yr1>w?t0lr
zv>sZC8&QY-#)02FIRP2psXpxT?&T`;jN+koo>=<qmC@Y8;%Q4(CHo&WHQh^AMf-ol
zJBvH+l7d72cS9S(m%Qwhz(jHB0@xUyLqD>E@G&2-@L2^6G{5loh9%h7f;qXG=OfK;
z9{2`zIw}KfGS6E%W)KH{4z6nL#EChRygB)JBYNRC7!P}>g(&)ucvu*nY&5oC#-APy
z3>z80_^mPFr#;qX?&;!u$>RQ8zCV3BbBnFa#viiJG8d-D@T`t!>ya<>j6u1yj-E5H
zEfI#tGS}F?d>+gFD-#TRbLH_ZLpHu;FY#NI6Ui~5afTl>F)LoH7?;5~Ezhkl$qmcM
zr@-3otH+Lx-0M-cat-9!Ut5cu;bIfFI89ts@!+7o2y>x21nW8IUoPhc#EawO;KkHu
zb61YAw#1{S0oy^iMBbl%iZ%6%@@F3Q1)gaRR9AvLDTlxX#l1|?u43bO%!%l_;*J38
zn3p3qEzc|0pJdIJVEwrtNWa#OEw;4Q^7kvR#gJWBdb`EBk}g$Qm+0Z(TJ|nV{|9v`
zW{{PiM;Pm1JK)za_*S$X$IfZnE0dd%2M;LrrmY|OQ1SMHI$f<1+VlpBd!#c4&nw5&
z!8wM<*Zc9iWmC3opmS;NBoAvI?U+a4!_r-c`sD9(X+Q8(<)hdZ{*tzWeyhJh-)(=j
zo=0fM?MFtXUX@iGoKy3XLA~)npf?VV8(OHb2nS9zAE)ZKOMYDV*3>M&llHLK>s`TG
zx8tGTi{T%^9##lm9=&JBBO&8#Hmi~gk*O98)?cCHb%0mW@mPcGrz{?{BfFf%jB{2C
z`tc00tNOJc?6LMG+oYg#dH9Rs>GZ6?cEnmdog6TSSPxzeZSh>s-ano4JZlfRZ+sE>
zUfFqO`fHYkrj~z!I-WGC={0-n)1#pInS1Ve_GN4>;Z>{pla^kMX^TSBkk{djse?(*
zgC$pa3q{X164$She1Ec2Jj(wk%;>|8Z!0)SMi3rp|H#s_+y~NASrY-g*cUlq_fLRF
z9M}c>C(wy^kr(`!zE?AjE6%Lm+}D4lPk*GdFlKNgt9iy}Bl}h1iu_NC+n2XPA6J2|
zM|lSQ^L5h@@f&Gd>mRykeFHpfh<2VzYuxsA&<5ehYnN>!=)2WtfwNr)C7oHc^;OzY
zeBfYxs80i>b0ERK?lIoWw^Vsm<dcXaNB6VA-Yu{Rd_vjRIG}S?5o8_hWi)FqgZ)?+
zxkURHDf%DW+kFkrHsyI9>}kZAmqx*by~<~yukFN^`y_US$42%0@(6mPaupvht#{3t
z+DcW(J#&%2l(V>>{!BwJJkB@BX6Uf;?_Jw(XxE^FX?^vu-uA$|Iuqb5zi)9LWlr!Z
zOwWW5%%ndvX=BCB(f(qn_ON7N`49$s#^q-&R<M7hzV!mrKUwGRm3g#T**`m1%3n=c
zhrWoW1n?JJGzS`+_ErPgM%QAK?Bl-whHn=t%^PdFWJAK{P~CNuar7YzzrCi0Sij`X
z0A~Zg4vn|>^mr_R-t*<_2Dar+GxPVN8+J@I^9!MP?B`r%Q<DAZG3MYgY_%58fPG&0
z1I`>_eH#ZomVR0qW!JgghZ>YS0@z1b!$;7?WmmM{K}!XDTMvB`FIGKq?1FXpFK7*d
z+kQN7>_y_m?Eek))RTV}omjS-D0GIHlKuDyAzL_Y9(L>yW2~p_V&YG$oy9lXIFx6u
zygT}M&pyr$*MJYuq`sBfyPX8jI2*X6mNx?f=4XD-N;h^EG;(jq#Mpz+s+~0@9JhE~
z@_WXvazOiazjd!p-*W~}dAemQ$yJ{WAJNZK(b-OH$v&Mui}Q58Ev?WdyDs+HCf{DG
zxjO5eYCBiz_uzcJK@Md47-hcJgZIHa=!_yd;h@b$_K_pZNjZLHz}4DS8~QaTL+hiq
z`@fK3G%p+Kk?l%z63oZS@QlM+xA7zFd!Gl~UN6qO3%pgIp5m%;%HCPPUim%!XKsW?
zd$3>S!6o_9rENL8?|2~Cix&QCeLOOSa*W6F+e&^E&~Ynk`0IwXwM(*wz8BwC9a>+S
z&zyWCl%Kgo|3v##4g=`ak-k%3^{vjk+x53;X#Htz$>u}fcKP-{d>gRi-mxicZMN7T
z2IKU5O^ailtR=(Ra<E;sY;d#pJR6VQb=~6F%JIm4#E4~&WVzPvYs<`li(Y#?WG22v
z-M4T?K=CNC<L!z)ohY0!Z3%usZsAVRG|s9*U$ZIpyi+`*P2%4A`x)56ma9#Cyw7Ye
z#Yq+py|&C9IF9WgK9PQ`v1{pu6|5zXviT`yuKF4YSsB2NtG5E?=<~zuycRD@`v}Rm
z-PqpK&HN;}(<KLd6x`7@_A#?HBN$+#NzyL7`GyFxLNn_%*%U|TaNp>`pJHnW`M<QT
zBWDe*>*licthL-jomH%7&1>eZljrpr=F7oe(uv$5cu4*eo+XbL@xw9M-wT@se-8|7
zf9Qwu=4Rlhf?>+%C4)F(`4o8MLbE*jodljOhuti8?`6(4(apw8*_=Q>iSS<VhBn>M
zIo4#gN0TBSe1<+eM7@8`v!8~{fa29#9Fz^TL_-w=eWbQUJ0F4;rm!1IUKQR1IMac=
zqxnmKX9>m@!mp?iJ?{$>O*1sVVNMx7{Q=*0Ld%3-!ZYEX@a*HNlRD&sBfo~e!$n(1
z2K`Lm3x@)nR9x94?KhI=H9~%I_2Xy1u3mtAv1^U;PB0cvJ_^tk`f&#Ie3$$H8^Kp#
zK9B(xDfvE?%873Xo|W)kvqridJ~52h!l|UM1-wS{{sY;*fwg#pU@d%74hrFddG%ym
z5I$>f%A<XkwYQeJQ2id?xyoZq|5OH_x`71c)XyCKtehj!iIMud_FeiL)S++7_}s1(
zb1JwC7v<|0jAc7~PUC6TSfH1zk!LhEtrM-QBzBo#4y4aF(qGZi7G&pumd@o_&~AWV
zw(le0w&1XqzIed;yL=bSwWVn#xl(lKO?1P%UZ`Ghw4@_eV=oBkrRLG6v%bu!IjEe|
zfJRo*lAt}s*R_2<S!X;Y9sh6FkM1~B|B!s8zDh0@e8dX|He~TVkZ-KhrDw&aG0y~j
zm#?g)>Ew=g;G-$_QS!vlWuE4yunG3IhSI&vh04f}{3tnfk2N}l<K&X>Czt%$;Ox=s
zd|THW;%Pgv=dxZs<lDL$))czL9aZG7V?9;cE<30{O1+ZfqU;w(&86wrHds5RPovL^
z+jfJ!xWY20@D_RN-zIPUiJP3lYqvTB(a&04Wmjn*bJt$lskCioum#q!*Bgmrms3Bi
zuHx&X%E{5md)bf9N0*Aw50kqj{nv~o^G<OAa)v#hAGGPU2sV?uB}aTkxYu{J{H5o2
zgvTLghlpcs4tv<>E+&Sq-XBFCOEoQv<*qafGCP*VGE2CImdA2@BRuuK7LH{`FSmOS
z-VW|tma{)$=4X~Ch#?JchaR}?W}Zvge4}(L$<?_x@=ffWwOnP}&U`eH&3_hOJm4;S
zi^0~Hzn^`#9XHr|^VOkPCUHZ|i&O7KL-l6vH1pJl{J2mofNdDNwdBW+DxNdWStrQR
zc_}{hj3vpldg9rKcz+Jh^K<-MIg#Ab*jeO0@S4nm2)TtL39jyyF>)(p8K?GUvgT~~
z5%`ebrhLHI_IWllKOr5-UoXCTLnH5gc^UTb>Db5b;@UvY8u`RsG%A+=95&3)nEAKB
z`&L%t%Xpt@E;bSCd6~(s9A{R)MY&rxFy;%~?D|`rZ026{@)bTFMoxE{Q{WkVv*7J;
z(x-v1-t8{A@SM3CyL>0q9}9<YD5iEh*x&dHduexU9FyMAYtn@|$RVr?;`p!r%Ffhu
z?WeV{w{}xCes1K)WL>0*1v8N~g<mB$yH$7f$Kg92)y~`(LT9(_03XDQl9FTaIdRDa
zFpoSRjn(E7=OUXEp+WU?mhQ~s=w~mWAMQsV)BB#V(`@l<=S}Q4Ik7xDPO19E)^|14
zw>XwrXcly|j!Jv`#t!1%7G!^Y^OA6H=aN|F3^PBqA)bARy&3F<bHyLDcC74G*Hj?z
z&%qPm`B%^>&wy@Q+MvD0i~apYOXI<J+3Jp7XRMv^wH0RIi4bt(x#)fVCR51K=4-c_
z0d$F7&tWTf?!K#E^m`X{yayT)Vf=M(f&)qUyExsFJ@w1O!(Cz->s=>nkoEp_;zZ(0
z#8PPph58pjKk(%VrGt8-HIp~@;d3MY(5Jn1Xihu!1;IH_JAFIJdqkNh_SHRpM@u-p
zL;In;$L=s_t9{@YbAqjQXg@S$_d|Qp$FwKvVW;K1!nmMKyDv(c)=rBopmF!syIILN
zI^U4|G<J;NG4qnhS+YBbKCow%z4OzoQ}|F&k3la^@lJZ8zWvczz=pBq&~1OfeZVs<
z|EJFR;+Z%3_61uf<8x_4_n!ye$B75@9A{)jC+f`9wr{*qY<}(5_&_ed!tOIhBG8zb
zW?jzvh<xT_*u*EMpgp<UKH}4yt4%DIgXY|bPharvdnJ0boOdbe`KXCG!Mpob_}|^a
zJGVLJecZ%seT$p@=Pf+X@ch%I=U**7{}g+;*cURh*rR;VUH6GlRoZ*bS?A4k*Lk7P
zI`3Tkx5t}xt;nx-El$H`+`zLMv#uq0Hi2gs@vO?M1I~WA8rqAjh~?S)%&kfkCbP~W
z<j~4L0{sIfdF0d#aDsnj<2~#L0ry$tPS5Af{QM)lp8$=@eI%BTsGb{R`B}8l;>Pml
z^WVG9hoNZ12l$^W`#+ce1{l)rojby5^*J|@y1trVJ;4uYJ8~=fh`uF$%_mrsx~4ck
z;$epot#*FFo+oF=4CM{<BK4nUp4KgO`856tgKZ)ayJKT0oj)(czIY;*zaSJ#ZMq`n
zUJD)QgVtVS7KrYdWoDjZ+nU^cjcsdk_s7)MbT{T*MVa%^t>|Zp{XN=@dD<)fVZ!#q
z{Tcpp6VY$L3)b>#Z;Bi1ArEk)F`r642Q8#esqoTR<|Af-tz*;T82MbX@Sypr^WxdP
z#9@jOhbdBHHk<2_GkIs>F~!0%+tWz@#zX(_KIis4^@=}<-W%~_-ZcUX_Xd1=kP!p9
zq_=|i_xu%pV3)^{J>tk7ab%Bpp|C8DJP=17h$9cg3&=IdIC0|ieBYi2IW&j!bnF@T
zLZ5qpz4+Ox7mM2-MczAfvA=Jjb1^A&Vfp!KKQV)^bKT?kF8&ko*(-Rz3tpA;e?vXa
z&FlJ`fcqilN%e~lG#)B$Q_cYSNNCRQ{%LXB1N;|E;1$fFo0Z=q@UwYsMf=5P#B(My
z_jP7^TgQ)z&Fg+toOcX-jYNEW@ZmfuoflqU2fKZma)(dp?x_bqXy>D}Bl?#ipM&Vb
z3fe3pGaMmbUzGNG;Fn48p&g#OcMfy6c!;Ow{}`SMA5@<%;JZK`IKj7>^>HhUJP97;
zSVxAv$huj?sE2pG__Fh@L*dbiQGf7#bNb#OM*ZeQfBUoSb^Uek`~4X8qV-<sn{PDO
zIQ55rfQ{o5<hDwE#+UKDeO2jmp?})X{kHN0Gj~z9+RmK^Y{)AZyXYwS(|P~P;C+7d
z;QRAR@AAA$?X>Him`Y>QXHuu|cL8Hcy`8Y~B=jaduJru<JePbT+2ob^rg?Abidgbr
z%mT9%d5ULyd4`Q^7cv6t^o(>*AGn0A_?!s2jdM>edS}z-Ma8B+UUWyxXiEdU(5RT`
zP7YhWL1#WrECbn*6`xCV=qzj-f5CacNaGM4k1Qy=zo6_Mdg+#EeS|&H!TU*N_u$yz
z^YGApo_re4WZw?`9QHcJ%yQ62$XA%n_l2P+rtsKQXi`1)4CIzwx^JyY|E;b&tI~g?
zYhP8m+m;z+a~XbJ_nWxK@2J>1Dz<(y|B)%=+jW=j>F;s!O~140=|y$9+#;=qcUn^)
zg!gTcJW$-1TJ(>n!|(X7JdTF`^&n$N2kwDBi67R0(^@w_haYMTRr*iAB26ak=$^ji
z_L=lM^reUX<?uUuTlcKrT*68B>mK;zTbINlO-?L_%$K5XJ=lA4y-xbG+-rW`Y0Z7m
zL9Qt7%Pq3J_9t%P7aJc~^g`kbi^Ov+&D(ipEPpw4wsmRD4Y6LH^=Y*Ot#&@c{6e>n
zvp$3Iy~25!_!8RU>Ltdcza^Nk9)tN&op*&srBn6j45N*FhZdy5SH*HQX8uDf64^)U
z$E5M^J$NHA449KGMz(2u>g>JbG4Re~j>W^w-Rt|+{#lQit&u-9^A(4oKwB?_rnkkB
zgVwDvyFa#XOnQg$WuK0+ed=#~;S~GS$UfSqev$bc+^a_B=>hk&R~?LVPzGY&%4MJz
zfpPM(c%gTOnb%p8gI<KbiWa@d{M>n&gFiX8qw(-&V2H0?`c8PE=Ap9&+QhdpV6QPe
z#h#;h*1V_DKW2_jCz0c}6pD5&r&`PS@L1%G{bm18=YRe6LwtK8atAyne-8fPk}=LP
zR_4f0=PLOE*~rQi=W@N2{|#K{bG^u{OKoDF&f)uW&4MI6b7S9)G4a#hb4_ex(@n8F
z{H<rYiS;&^*k1T)4`rM+l!cdetmX=T6>rOY2L8Iwzjt;2q<^3PH2nWoWA&rD^Udlg
zxn_l%k_~d-x4Qk7N}bu^{HkbeG<SJ=*4-zzEef037fjXR6n4J8>1J*U9Vx=OJg>_4
zIhRj&D?Z!pf8(sqA$Nb_X4Bk`pLvA)_5<)a-kVXJ9f{-~c4y@tmQP|v{wrFe6~0FM
zz+bf=^)5}1qHT+p?9o*6>VS7h$B1mQK7NDw;>{Fe<(13?a2!4;e)DDJf0qpN{o>p}
zuiL^i51u8NKztL~Dpr8Dqn|E6p?3{#Eb@=lR)@|p50W`v<o(a+qvey<A82ZK$0XMK
z52_c??_E027R{fLzK3V#kIa0Ry2^E5_V}l!_}<)C;z={Z=?>`0-%+pn&;l*7ytY1M
zdHu#8<Fn2?@hbWEbdbATG_T0}O-G8`9xlD>*a;uAJbH5XXL&9<kmjBA*R$b2s=Jo9
zb3S}`sgG0WW0dDT@NX|={gzHWAGu4@op+ts_7&upL(t%!ZBCbbGOS#)E#CDzJQsd-
zI`A_1oA;My!H7KVeDSm&4)U~R^i5|oQ{<`?zem=zXEO8O8p6#KxM=D3^?$ZJd2Z%*
z2VKzO4tUXr3@6)8aPC|9&`GX%`~IG#_ADIx#am>%@t`GwgXAM!-@?`#$Rm#fE6Gb!
zfl>a58xt<P0AAd|^P~QJzaDiZ15NIJY9cfjx#k6A@hI<8-**dlY^+L4juO3m1$jx=
zpEZe2E2l0#W3?yKX+1mba$jy(OdXP6TK?1&9(<ej!PmeJ5xoZ=dOZVoWp{|Y%3cxg
z^UUj8jN^-ZD|xGjXYmiQ&X@YQpMRz3>n@bhxHQfH?|W6>3fG>|`1rw4wte}ynB>8$
zzE0dcYzwzwb4Vt}r42sK8b=6uY~NjG?rX@ksk_Ylk5m3)+8uFzr)hql9Gu^01s~+*
zJ40jA=towj{AcW5`=CL+_)XzAYxO4WH6+0uJ6BI7u-So^GdXK`&%Mt&$k&>?9N!q^
z9j#a4_io8s$mfMYxRVo=xt1KDe&1!`e^$4*u_pZrxL(O8FVpvzC$bOkuSuKl;s06U
zhohiB*+rL-PaPR#2C#-#jm2(@&zR*SJ$i=xVDQW4n}YnF&|}(KE{5lcck<4`zwL7R
z057$^r*Y2Vc-8cu^N(H#dr9f+Q#-PpY;eyZujM{8#K&{<%kCS>?q`<W<C7Wi{Tx1;
zgZCxB0r5nw_ux5pXB(SCa=qj>7npj;BrQAQ*#Pbd;Oj6h?aK(};uV5<2AJnq<C4D^
zKl^iv>l;p=V>I8nMY7+#v*}M31@M;~7U6sOVR+1Cej6|Y$9s_L#Ou)kvlrI5*}s`-
zX>{R}<aqp(b#)U*Q+6CO@afD!n-d<)Z*<$OAAdZ#?A*<%63@A6CUQUfr0qF)4nD8B
z=p|{*Tj*?e;Y#vQrsM}}&a%Gm$O8qd&p;o^znlFp$xK)9jK1W*gid@8eV`0DldZcC
zn_z@90E|y#%CRpK$6l-cN>0+AL;hJ~-xYsm22OfEr}X~$()$-G-Y+P<?<>83x#Ioh
zrT2$R?_aBU-&lHor1bu{|6Y5k>SGEzc??{&F%ZHg`}W)5Z_x}C!!<GWGvSXTrn!?G
zyppllZ>k;60>ej{FUA>DUHLPt9A)d$`pdJ%ij$mypNfuQ3yUZ(D9`enM$2Yq*PP(<
z6JYz!rXMfL@2p8n?#%;}b4&^xNi7O&WP8hOWUE%3LQY&`teiLl`<V4-q|d|TL*S`C
z_pb46WS!u8-va2>)RS#w-wv6=cj4VV7rRy;2>NUB6I>K5!u0!j^nsrJqoMILx{Hjn
zCtRKO&<RfHzNy;k1O?r1;yy%vQ{C_9K0yv?-A_t@<5$K!bOP-`^|Ubt{H6qN+g6*K
z)m-fzefn&}Ts=RZGa1!!d%hx$&sDN5V*ReLPtMafz4eJ~FLl7Lw4a6U$5^Su;oE&<
zC(O=$$Po9$|GowPv(T#O!YJi-C{O4d)|m7o=0R&z>)0vn`3X+tdPq54%u`=LFY@$l
z@cwOg=>ACA{o%6vzOwu0%kG~oyPw1yK$pG=?Pa|l$V4u&Yy45J+u0u>&dk#eKE-Xl
z#pV~xX>BQVil~F0j&9$`et!-Bdv1w5?)|R!IC5kgwkGRyKRasD+nv#EPyGUaf9Pu-
zJ5z>n3Kzu-gp22-9#~Z8eqoW;dghtp?*D|I-KX=V&=3z9RrKW7^h<NoBU)FcR|(HA
zcnaG`ssEz+&@t?xPFr%WZ@>C8$#(Y#wuYMYIB;qv{IC51#<jQD-2N43b@Chdv*0)Q
zL7qRy84B?#>2Xzad|4n(9qzvBp?wJaS;~3$e-?^UzsGm-gO&W%!x~75&Vu(HuN3zz
zq2In7I+=4o=cNB~0&?g|E1PbS%ptk&&v^##wz8@0iLbv^oGMvD^2K-P*D-XNJ3_?D
zV;v}7{0+p3(EX?ItNu1;CX(zysjffce+n2o*f5j8TRginfzDZG!^|wjK8Jjg!3OMI
z%@zBwbfFA7&^gE<sSt9Q#*E#opKH($$qo4?*UCBn$o*c%T&^o<kCAa6uzE@+mVRsP
ziERNq^T>pI=~v)u=uR=%tDS-4)L&VT_F#K82I`9D=cQkvo}A9MjG%L<j$B=_`9<o{
zcjfr;Zr?;7DK^`77cVUY{<ijig%9q#)#3a_c^&>f>_}r7go#;@-osda3_iTb?-0Lt
zFMoNui}HJaTRHc#^mfWASA^nj{DfZscMB8NiM1y{S66<&xNRbGlYK6km~}5avR7<V
z_Ii2g3jW&vb4pjf59+ngS$A&9P9>fFO6snhXFEUm@qRX#=l2NTa$Pdd_kUQL-+yIn
z>buV0mtW;06ZB2be_ncT@qs+?>Tix`Bf-0*-yVoY=A^F$j#tvwA5vES>_MHC<BD>I
z>B`TX*tQ?MlpfQ<S=vtShxVX-e_7jJnIEh8MNp^CaaZ<7Yp8>@62;CV9m=i&H<mt+
zeg)rE_GRyj<WK%B{eXW>6>Sx4{<z}$|At(<Pq45)p}t%j^xb9rca+-K++>dXb0dF^
zN?53`gKNjVB>mEwQ`3P;|AZsQOZELX@h#Zz7v4sCip@WT9tLx$xd~{+spvvwKjeo|
zIW9ZLGh{D=hnCK5+j-6{On;Lx2C%A}=Z@!o`#cL~!Fta9FX<@nHkbHLSez0)Q`<WK
ztgFsG=qi5{U3HFLSNR_5su(~qewAZP{<PS9`=|YL5rIAsz~c~d!0mif2~XA6fsPzS
zHy&IwnMLVafaUFcGgA3Myn-fQPq|g6D7PcvL+-rvQp$bw6y*l%bLXcQQLdSC>Q|2M
z2Wg~qJobSDcn0Irnvg8N<yXV$Xa0x9=8M3=-=)5r`Q60t#!}sabx=no9HY14(^7(?
z;wPyuk`F8$WNnVbOH<e$Ck6OkVFR@AWzTC6zNxwC5aXOqUrqtvUB12Y!gT-bC$>$X
z-1+>@J9T+qZZLDxzoLBAZ!4FYlkTP5TgV|3DSIYAjqyO~`b_D1uylR4bp4mo^<PWZ
z=StV>OV|8kW%Kp*vit32_uI<u|E%o({<8aac;-L&wCxx4QGNSuYePPfD)*aH;P@bp
znT6?{jQzXRE19hFY>eu76Q8YsMqw)&^p}_KY97C?<eA8i;9L*>`G0#DTYCatL%Eq}
z^Xv?b!;ecA_`lgXF8LV;_4c9<>6^e$D~T=I_w!bKvZ3=d>d$|to)mJwZDW=n$IG@|
zCa2Yv{73wl6MlRhKRym;3^@N6^sf|WhulWQY!eKKJ0P4C45Ex5C;PdAsr^rE$VJ$r
zdUk66skY%2*+qcURP2FPr{<fpWv^n)^lx`LJghyD_rC`mGyfAf)}0K;sD<NV&Ls(s
zOYp-Uiaim)(&Y?IFwV-@A$i$*wZ=>Ev)|BfmzWUc{T6L5|1bQkgmn<}F^Kc1xJ9;Z
z&VTk|*D&A-IFJ=CU@M&4hmMWiZFSiE-R;R-$8>yoEYIu(&-^|5{oi<yc7hmy{oJ$1
zI~XTvXdbJE&Es)wF`7%|<Eos`Z=yd{&Zlg`mGimtvZ49>hHS<o&gax_;lwMi7JXYW
z_b+n)zcIIQ=Jq)9wdOX6TVv-pj4x1l<>2{~()=E<bh-jRO7lB-wxD8u2hXgO=6CRa
zX?_nx%huAshLdxiDF@Yh&L_A#$!+AmFCFsEv;LzxFU5XomlHWZ9m=1d?j*O7lbM|k
zr5eaXd_kIX`-RMR64}nNp{^Y33fssH@TLRLu?Id0yXDWgKh8OmVD0LfxrKNHoU3}1
z^^}5ti%;g|bFDL##2l7=to+Q0%9qyO;FvPYM|k#NBAXlS_dz+aeootp88VfA{2TYm
zQ()U)ihlz>d&jD<^Dg(>k4R5gT6SNu|Jvu54n2Q%Ciy}x@?*}wO)MG3`OKX@Jie#C
z3w-Xyd&|e8@*1<PyEJ~kJaWPm{Ld+mU*I#vnVh*HW`=TJW$5!T7;H=sU*gm-&k)~X
z5Y8oeWDw3Jdun;VRDM_+^GA4g(eP)FO^I{fNqP(RwG+iHX4g3DpV;$0Z0#kxwTIoB
zJ=D3GnZKpqr<e5`e<{Igu-{`wzz@m~>v!n4wDHdHIU8(aB-l`XSR2RuXV5|XnSHxr
z=GP-U>mA|SUyM+0-w5TtJ;JjGM|iezglFqVc=jqb_IJS<yFPCJZ^DN1!(j8N5uSbA
ze|8eQT1I$w%Lv~tAK}@Dhkr{hfx?#*`zPe%q6u-XDK*N+MPk2s4e{*S1n2IcQ>n|G
zY@RqGk0m(ccJen{FumJvIypn)T^6_dE*|AwazT`znN*IsAfKYAJuCN&G;5Nx2*dlv
zI<RmmA3r+50bgI{3}v;y52P3wmJXW>)1k~oettP(PlPxxZ_FiWj~L3{ci_9w;!3!C
z-x>}luX}`NJBB|~n<js0+M7cC4-J3s;fIr4=xmiP>|DlKa(wTCd|d$?4ltex(0&uD
zdoCD5Qu!hnM~E?WD1TaM93A9O`@iY0_wevO4vvA`BHo`4fA4KH=?^f5A-KbH7>nfI
zdx87&^nU|<VjFrvpz}+22<~OW2<}H3zj%3QA?K>Vuh2q#mhG8wKTduSn;ZFwbD5@4
z_YQg=GPiTH)eS8ks2|8wrFixJcOmxX@WFfL-RjJ<_o+DjV^yd2JS*$0tEh7Vb!OgM
zoks`WTb%)q4^5-))O)KN9qB#wH>g|JP=xxu_g4Rt|C9R9r+)Xn)&IBullnhE{gL-p
z|3m+S`UBZ6klojU)2SUpa$T}ao)Zlzm*+g>x%{S@ZzYlE*n4@yyS=L4WQY-dnaQ@l
z5$<n)qpIJ#eH6Y3sRzAFSz{YR>Gq#EF=84M_kB#)>T&oW?+c|r!?pe1@m*dboc^O%
z&@=JL_!Q63Gwhk(_IoEmyQufx+OGEH_)>uPQFJoxd3xWb-q7f@-8=n`8TdWb8LCOw
zow&Tq+fkEle~Gq!&F>h$cj~&@Pj?FK6P-eR^qp;9%b4`_l#i(H`8>x5t^Gs%68x6(
zyV@yuALfUz=x0u&kGJsbqmDfXAJB1|FB09=YYEw0RFaL~ZacB<4tR^r*9mW7O+w>*
z-m;Q2KvClIWZ*4-U*av926#&?J{9nm+s-pv?YOP{J;k1jmt3uS@q6j^9!zAdtP0)f
z#}6iunLT8_yNL<w5aUjLQk-#fbFyE1q><^I3AlbpHVR}{$uNQMg1x_VsLVcOSIM3m
zsZ+Ehj16*AvAEkqe#s$Y^{z14KKwKFUEjs%&G@Cr_fO~I^iDFWp2?<XeF+})zw1HP
zw&M%pF(9vM-qmNlJD>SKs%Ince|&L=@kDO~{_iaxPRoyB*V;y3g86EhnaFy`g1y97
zI%#~^HVphd=wmQW;ao6IJ=0hNzThBdT3XC_50~1|c^K`pXzXg!L*~`^q?0DV2bDj@
zIMol?J5}zV%KGOa%Ncx2f_|v|TJ~gAm+JmLWry+e-s<%DYVdzYb^69pTwAKs&ARs5
zG41hsN2jmXfBdPx^@k^{-YTB_7t~eWj$$y#4yZor46Nuu2>D_Myje0v7~Z_&PaC@e
z8Dqyr)0O$waF}OCkR>uZMkqG|Z&sU<FE}4l$c(_76*uy#`Q^NM>L72vXhhhIN#nD>
z)f+)a@kY>5dWapMI2V#twosqobRJi?q+jGpx|pvA__~;IUgfM$UCI8Wc;Lj_@^eCa
z{u&StC~kG4RyndmHlNHByPcTqBAq&;{idrkD+{1Y%QHOBxNhOA?&!3>kvzEL%EhsB
ziDBCL)p+c6{OcPzN8Y*0E!;POoG-{y^?Y}PzKZ|#(RRoSrOh?+Z^JG_|5eA#@v`gH
zkk7_%-=mFJDXVw0_~8$@D{9!AR~$<A?z`}F|2k(m&UNb2FGi;06UJEt>feX|!mL#v
z!*{2ujc*k1J>BS<-^4kq6_3TU-Ze(CE6ybA5B?9s+f`kv^HCQcZt5(r&%q8-ULSlm
zt@S0@sFVIgO<h`NSNrNE+p<3E<6RkKs31oPd_S!{1dp+ox2^ZVxGj7lz-KY>fri1S
zY7jnwJmxL*>v|t!>6_#X_9H|45zbKeO^SDU)HT#z75SNl+6($7*y$(yFwB?65yUbN
z-o4lNpRYErKbe|kVSx|qL3qrd4ds2SS{DZS(>s`-R_3R@G(Vy_amqT#cbX&og|fCU
zrF`dKBX-`C_!6tm@_ORb6ZA2tFT<I{@-i;-Z~K*-_1?ZG=5Xcrwtcf`*!O#}{RZs{
z&zy)!|HQ7%2bObY@Ad;F+z;UQUg0DBt*G}I`M$B{3lYh{z$o$_VH7RFD5&rMWB5EH
zUKHfB*FJbKf5N}s5`7XL2nQpK)79Cxu=4plfj!SWBm6Yz7J47RA$YHMGsiEPy|T(&
zf}BH+Drk}9g$t1bd6okfdWP@%#rl5J&8__{=bLO}tr>8T|G~W*oN0c0;adNj4$c6n
ze29MNn~}<D456wf8xLncG|H)U<x_tN{bP^epSlh)u9>B^WoVx`bcHZ7kyn-I*ZO?l
z1g+E5L9Jb{jBXr4Cra_YgZdoeghaTPOc3zy9@f3fH$CBaS0lLbM3H!_YNwPNDMRiW
z;i2H8=K-8-nTmD(zp?&Ds<(W8-z)wnEAgNC7VcZxP~*=-FrEOHG&jNc2JxtbClTQh
z-v#eS>PPvS|Nq;spg;eM@DG2$E$oN)d*HIowTJu~<gzn!ef$<KYAuH;)2cJ^;CL{<
z!Mr0U?ux#?#QH_%xaXv_-QUUSTrD`SIE4Z3>3UMTtT)Nc@7gZ1@&B~l@_ndD&@$zE
zodo@O%-U77Pp0#qem*eas)v4QyisWfxx%<k8eZ7t(nk-uJC1zR#QJBGB0VdD%{E1D
zrd9O|qj$IV*8`uOvH^0fqQAY>A@<?IHkQ2nKV{1oUC3fz>6QNzb>>QPSMMa&6W>ID
zt={1yDm`MC?0OD)7+s!YGdiiS<vGV{p~YXC=#TA76D!B|J-Zf199yccKQ-DET*jsG
zb)egAnnL~`#&(oG&10PJHpZTD;h{0&<0bt-V@zp`>^-So=)9FJgYhXpn_zM3@%jB#
zIq4h@_&&3WGg0t&$z}4NZ5gB=<d_6L!cW<*f;t5++J{FdSEX+Qt1HP?y8hNW@wIp_
zb^g|R$jkd)>Z#ru@2Ux9mailhwD{A~Ee}jj@O#u$KfTh7I{f68&+-3r55I&SkTBJo
zL*osxip=hh<HsJXLE*XN61CUI{wjW5#5h@8c!}6%9l}TWQ<QJDj(U+tmCxiQ;*{Ob
z9I4KY6?Fz{LV3*W`o@Pc$VsF9@gwL7@<*Bpz6bl`Z{dgXN-H_vHipyBEH_(an|uXZ
zZ_NUHOV{IHs~BILo#<#uWR;sue$}>a#egdLMB_t{-GuI?a~eI>qi2g3SNcOI$6{C5
zNldNr#B*RADua)7_O_7D4w=mx(LY+s{HL{l)WdspmvOSa_RPV5obPW$FD~21wQ*jw
z2G#F~zfbPRm8sZAb?{Tx9<1upKKo!EHQ8d>(^ihI9?m1$v6XBZHm0lamoo0V)SZXl
zS{ho~gBOfF#^w5Z@PmCU?a>bYFYVFp^7m-VV*3CeQ}M0Ja+qLhaZ{N6^D*Rc2w`g(
zXKe_!ZRYyOim}B0QM}9XUD%U$9VfPx<f9(Wk_+C7i71++d6T}olRnyc2oq25I%js}
zoOMt>d77CU;auI(CX;4A)yBzrt<4N5h6wSvtnR4wnWC;&<a2cQ8tjB_;qLkDz2ozi
z595E2ZLXJdIm8R)oU7uG5ksKtTYaCz|31EI$p2pD^gTYr<MQLcJHB;UKL*`g=Ympv
zuUL=8Vu)XuUlqSmT}Aw{HMSnwtHZ7sLT=0BOCUP;TB8~8W^+~$U+Mg<)IGj-V%_=f
zYL_@h_}b5g4z_v7oa(EC%+tr2$)+nK3s+tlUD%^Ou$Le7Aq8yUOKHVlJ74Em`9^Wa
zUTbp)QuMPNkAnH>y~5(!pbyPn>-#~z8_OrIW?y9)arUnPH^bIHK(PCF>^y?S^US^4
zFV(#zhy$p06&J0S_iA5P+OuadHBW}MVSNUyENuIA(zliM*>Az6%DzgbV@zAh{RvcW
z;OnQpMTmney*_APZEJ4rkND`t{qp^&K{f$*R~X_Z;WMYcTHGCDbGll5<(!T1vYGP$
zwoPbFZ@uCJ1oK|iwelWftl#5&vsgM?jvaZ+;CyrD#hw!aeo62WoEYdme_$K)JU_pz
zH188!8@EdHf8TU>{a&39qpWT3fu+7&#J->HAO0^Ii=`993oy`<KGj2;A$}%Pm2L%>
z66`s)Q*UBI>S1tcbsU?d=%v9w#<Bh}irqQ6`^U$M+kjm|HFm(kHvc7I+f1D(&eMEC
z8;8wx0IS}{lko^#Z9ck!wPpQGt|b2HRpe;!eN2QOKw!5+KYO8lQS49Z!>3Dqc!~K6
z{B!<|dy6aojkdub(Z0d6zm+%=%zrUFoNg&LZ!jjGc9Fxnj9z7KaTW6?rW~d^o4N|P
zqf1`b+iKDQUf45&tb5UeL7adFh$ozc6VL#Q6HO-FA)J5~{6095BA((%>uN7$Qv8rl
zwj{2(!rFPUvoxg0Nfcpzyb$M+OSs#|x|U8EoPq5mpVhzyt!oGQ&tKP!-(S;ZbVu>V
zg+GUotrYV%k@x2Y++Y4}=11+RZ@Cl11%&t7F$eZ`cy2yeYvuR}-gUCqUygUD>SxmO
z#H-M+{q}_y>aY4FT9imtv*yC-FC81gk-*n?B$x&5RML+3f+K-!EW7v=>_Fdxz9Lt#
z?@oSR=)|+Ydd&|Lh5gLQju3nao~`(!5yr5CST-Apc_SX)$$yXY@g3m9T;N#8vkdEF
zBlP?U&J-t1?Xo2C!X@V?-n{o&4_=|R?&JCQ#+q!^KyhBM$E#esx$w&8RBsadR8Xg2
zpl5rrZM@BW)XcavdY^Mc<85X&ey@JMlUI0;EzLs~Rv(hwcMv~vEq#)2zJ0EEr|^Kf
z6T~B99eLyZvd9|E9x&*eVG4&h8$SC&WTqL|Jrv`Byo9XfGi&)p>HiN^SLwSXZEN3V
zD{UxVZ40`SOAd*;W@mL=a6u0;`oGXw?Lf~x?b+)8c*k%5Y`=Z=$wQX{|7?DRnZ)gy
zNsh#ojDxcU%~4~XjuN}8<9Knw+*<mfAAR{cZ6@9+&Qtt%FE!Nv!UbjhC;y@oq5u5!
z&BK%xjSzj1939}$z=m;M1JE!_4{q}LK`IxIMMj$isqe*OdGgMu&W~p|rK-{?=xpkB
zHwJxQklG!O8R&c}wIuerTvghuGV?PLzT=wOA{oRKI_Hvy=^8hSyuGFMM~f9tzRQDN
zNIoGyp!I39{a{_8zgT-yK>uY^5^YC@?dlnCPFiP*jjpwm$XBNiong9Oq^;$|tRa>>
z_xN*VT*YKs5R9?+rjzM-Cpl{dHZ1E3XvIeQ+e;mf&O#R2DPPr4x9YVt>HH;y7tx<w
z`mOrmN%LMrf9j>3M@QW~KXcE7705kV2fow@Px9bzjS+Ws6q*wyFFdi;x}tY4%{s;z
zThd*(B!1=7IpVE#k?U=4K)ZDvga_XRuuwV6=ZJ$d61{nm@rf=zT8jG)U9#g7oHRxY
zE4L;+=BSlz{Jz4E4KZ)k=N!2V9z9k)KRz)v5jk+I#v_}jshNJM?qw^s{VK`b0Ur}x
z4DKH(;g@V8vLSMo)!NrXx#<g^9?jW2o&~m%!7@2#u*|-SGV;qv$j_r@xSxk~UFmYz
zS1q1ddVM#t3-c6Vo+QIMqpjb^7TF0jca=JCxqqy$v&p}E^x(SieP*2o`Ntjuj>plJ
z?Ha+~8NPAwU!9v5c<leeC;tvyYt9*i96ai9@9C!biO||NOp3UV{EX?Co<|prVDH%z
zG7TR4v@OKK;9R0)*DZ>{ZJ;GD;}@+se2Vd+F_d_!J(Eui!{1n*IyS!kW&F!It3U7}
zx)OMib(rgRY`A&yQr<b!Ej)xxLFe9WE=WIDVD{yyPS<z;+-zlUyCK7#%ga;aT{`!z
zyaMXaA<Dl5Z|V(CwPQRVy_Xp94aQ;5m2b-Qz(JXIaBWrSe~hW*i#ugRUtBNYuf=o0
z*G`A=8}^*oGwVb*_-pp4y7_%_?-}WMbUJ&ese|W#vSr~?bk;h~yh=6(C(<iR`!UW!
z_RBtAvbQdDvZ<rRJyXClol{%N_p0Yf=&R}p)|l#xulhLkIc*)#>XYiDY?As^ZxlY}
zP^b35sq^5sxkjj4^=m$J{MVdmUrqBC&7G0f+~t@%!Bq1U%u(+3;vU6D{RaC(ZS<*z
z{X5}M%O{fyNAp{0Mz_To8*L8m1v=jFzO1DVCpG-}r+Hq!KIPAJCC^5ECEoQCcq?1U
z3*hEH>?Dbh*)17BJV5)Kb{#=44LO!mU*$?%?<=r*+&{s$qqHzqeftW$-Cx5#ua=D^
zc(<zbE*D<;T<St-DE5y-<D9OSXN0<5JcIo1<jFWRF3$f1|C_o}>~jQdgwbVQp|2^e
z<?3*k<rP)vMc8Bv{dj3Az5rUk*kxXtnjo(_-_y_gWg~p6dcMwk2Kxt^_uyWA(HPAK
zh%p2V4E!JkUPG5Qr%Lu5^<QIB*}xW>f|slBz1W6iEBa^KclyS9NnsmR9WP=V;{5ht
zJs&I86WE1zkZ*B-{20j8zY%=pk8+&8+-x!jl^f%CO=fvyQ~Q~cxnh%2)6J&#w9b}H
zo0NLk_g8T2nTtF!SY5dG@WzdQF<m(s!i-sQcLWdVHFfaEjrY0_woGh(Yt4fjA7=Ap
zcP<2Pk{yTg57GBr$Yl3~CT-ptnsm4W*{D!Ia$X9-Kx@R$uROYIU=wHkS5%`b4#^5f
zZ>>RZ9y6G`a_vR_T2|aK;q%(DC7PB`&`;ma^5siiU!I=3c<|XB)n=Y(X9OD9etPbM
zZ*DT_dyl!_R2`P*{?XFH_OYoCdeF1Ky3>3U2=T2SXFoUA%*$81U7;%<IN0lC-Y`|6
zN0Rt{!ndBzW0$owbqn#mC?5e%Jz*Eyp4r^8adB4!c}nx|eZHzoXLtL6@0}Z$bUEm5
zA0OM)^}T~`Y!r0qHe{GqGkSBBvVGN6U2%h7RjM|<lXvaLIh+)}<BK4EFcZA(aCjeS
zBoCu=So&>5`3)y5%QC)snc!U5#eVtVTu&$E1~x23cbSatas@VtD}gQg<R)LA6x>8}
z5++PPMsME9{zA{Vpf3~C>IX7vv(6ep-<As}u!l8lJyD!{C-ZWQb>2zaQ9Bn?x{q@H
zM)3HTOHI~3xAWoqOX=LNeU@4Z9Q_zX4)E;}eD84{`3CRZQvF)1s!R3!fcvfN-PN*>
zVb@{V`Iz!NB+5G>Tb*(rC?|<xdXwv+dlNn(0eo7By<zz)Yfg9|y&;M2k>vbKU0~bb
zDt&-&nw`bw@%Uo*@eX1@giZMA<b8=}zdTcRBJ4-Nq!S(EpNXrSLFe#@0hc0<ScF_c
z5qKVFwdVHJOU@&{6nSlLoj0&;A<yqdpF0juokFg~x1itH2M!+R48l0<2N7^2-iFPM
zvlUV1-SE4aJc2pw&iMHgXL!<KczSbtXzJlk^aI&?^R#i}wPtIN?rCdp6*eaLc8Yas
z;a$=()!&EdYY%OM+l3_kh$8#!0iJvC_npHTi*IxPo^p!tefhbA%C-V{_d?GE?*Je7
z!hdznOlQo>^N9qxM5=)C_6g=U*K%&WD!20S?aV{Zkz(_9a3D+HV))l7--TfI5B&cM
zXG3lRUQ;EHu+Ch@oWiCk`X${-zCVI-06W2q{he$)JZ1AvzHfahLEok=Q%;f~Mh`J5
zvdSZ2^c<cmJxFcZF_mOfYgZWw#>_=};Ka65jbHUhkF@hrc9uu=>Fi*DgVLV@+uD&8
zvZa~spw6SWjwMI4<I9O9+nR@8V`ie+ZRZj@@$uGitc6em=dBtf_hrzFg|q0Iugh=w
z1#-tr*1K<P{IVjs5%S=AP)=oJgVlSB=d2aIlRT(;<hzKi?Db>kA&XK*?~om{#MQ9x
z^}YQLdd)hYn7_+pB`1o`DlWb1g`PANzwX312N)~PF$43qnXT9b8gkOXpkbBxls|9y
zvm=UUfm|5m#<92y9_u{M-!r#5vs9TIN48|G1K~za_xgUO8O)6{tX=Wrigl#e(P4N>
zu(m`)MDvcfF7t5&`)8$1uLpU3V8fLqI(!wlfAyeV7=^AvC+yrbp1ousjtmd{2J)=u
zh7h_o?a}9ko_aT1OW8hPn5=O&FMsF6wmxuMxe*QeJ9Ho`JkWZZh5XRzK$j=Xu)bnZ
z<o3U>!PW)OAYScq@r`_;IQPrY)ydG+orU6_0QYp&SbhvXs_fHTduT`f=?>$k$UOGh
z+(oqwz4TQys_Jfk{vvM>E9X7VUr%ZN0y-4T-(2X><ILYQ*0yqFO=fLpN^4vD1)_1~
z^S71x+pcp~tnJFV3UrEKt~5`A=bPkM+M{tXcavPsl3?q-oUw7%ku#@L8?>)9^LevX
zWrdgbQ8sv&q7FUNJDoQO=z`Xq;hom%XlQxRrll3=K59GPXVPCdK^(>r@XD5-Ci!KO
zEo<0Qeur}l<+74wBdx!H7D#rItb|{&bjR*s{R;;IdC9I_*1XoP`l7Xa1Q{k+yX{)L
zQ~k9o{;BtGBDd&$3Oc)8@9X^c<h#+@M%JB*>^H5uoigB^#f{>5<SjXOU|TJA{v2|C
z9vRS(M}jzS!`2WqcG$CEOugVwInRh&`>SM_+7V?KwUY!-_tH<ki-~tD7WQ83gTWjK
z_VVX_r5+v$9*<u*uq_8a6@Qk@{3h#6Jh2jgdf2nd5MKxqaC;;BNg3=dW|g_2m%SwY
z?;uZ*&EJ3?Cm9%eVq<~oS&sH2^eacKOYtMcFa9ol2zV?w#Qs4oaR!9b<Wc8(Dj2xv
z-vOQp$23nGN4BMm*Hpl*gY{s?Z~2TbClCGib7_?KMLwCfUf{sq&mesh>=YxSoIVtr
zeEVL|-@v{{o+@%{Dvv8P0y|$A{3*6OT`SKvt2G8MM64q6qq0BO<&EYX5%3A>=)37;
zyL$&Y9*?w&_BrVI*wLDNn|tbeSHx0Ym9I-Kj>k5-#7JLU6-!01F+dx4d>L7Y^@(gg
z7u;B<c$mMGZT@_7Lt>Gcxbol3>QC~&E<*fPu9B6Iad-EyCuk;^XDp1c^Jv^X$ZOh1
z(frIgk3FZiiu2WH#Rl1Ux0_A98PBdnKUzGkX}y`S{g%|(j=#4D3}4w~(r5M;{anI*
zCT;7*4g()$>$m#kJ&r4kZLh>TV>4+Zzs%>A`TgK2>!o;|8JIP*wBNY_-BA0T*ws4F
z>DdPxhP!r+y?OFHW;7OH0$vyDn$2qT)#i-+aGGcX*uBO26|K(@M~Zd5jy1iGy^4b5
z@pAmLH0@MvR`5&JeSmuH`0-H+=$oyt<fpV3KGFjp`Yi3JZtbn>Dw#-UoNnV<j(@@a
zg56Ij`QA^u-pw8dwvQp#%Eu_+C*|@$P)Fw6|K|Bf%2(2c$IzXgEwyFkjgssUtf|Zt
zzm4+TlUn1c5-;=DJ+cVCE_t2@a!8zYt8XjY%bX59g%=)Y?#lNxcEKwrAnTY=-E)=i
za$(sV{$VheP;gE``7;AJ31%a~s*`@s4bFI%`mBDI%TGa{#e3DZVwIQot+IW!y8`>N
z`k^@z4V3(Fsy_TS`7J}g%KKo?GSZJ6IOzM8eeWCP@Clx&UuswWO@V(MKB}vK3C+3a
z9%n@e-h1se7j6FOy1EtJ?{{Y(3ZI5w)fsKA=;VFjGa3$sPj46tk8gLzv?Zcftnb3c
z_dV)cysExG%r}k1%-l~d$V22*{}^%QUO^6DiY@1gRUdo&2kd9*{TEn!<9RlUXHS^w
zwkGxqJ~s+}v*oJwzgn<;`V(eM+l$+D9sj8$Ja7~BEJjaX=~TBRpj%(O(9Hg3)I9Ur
z7<0o<MzKG|IrDnT%toh^U+>CQttZr<I%G+ky8&Ckwb#tHIm&<4IR5lk!{?q8htAaV
z(^$4UHH>BP`X4YB*&v$8CB9dAALz&VeA^cu-EbcDFCo|5OVH%St3L7gH|$u(wC!Ll
z<FKPu^Q_33gZ<Re##q{^vp2GM{mb`npRW7EjHlhH{uI2rIZ0hj#$h~FZ8I59JN=wJ
z3ZG-ze!_7FIzLzE_nonIFt)(1j~(z#=HbkbAtx>!A0CA1<ILr`Jdg65#k(croz06^
z-DdkJ{?!*A)vfx~&PZ(}*{67!a>|WR4p+gshZx8>qzuxaV%T}658Q=@**Fga8$#H!
zl&>p1<o5vGgjXE&K7el@aSHmd0rWx(WrI`uv-ow`JREiD6uhQyliL-+2T<?)b0B`c
zNXyIEYY<Lr|3!Q%fj!7A@u#2<l1Iz;t&_lbU_%1AN&D7K=o^mRv-a>SjX+1D%zJXT
z^2E>{Hb3PewROTf<@XUqH{iI*?Iqej7_$O8ejxBQwQX0>@c-aj(QeU+b3Tf!OTEFl
zmw^5n&ph-0P%c<|^mX^nfB53^9e3Wpyy>wWw<mgc-d+Xl&O7bF<)eT2!19m5w_Di*
z+c~~^#uDxm-0!FvJ!6R*9ye;$tjF)euG46$4nGAQ3h<=3-#oK}z9z8q1uzQcNn;jY
z)BM2a(i(T3J&XMPC)@n&SkdPM+nIb5_ymaO3bwRiVQR~r!mcHs8ry!!b|4tYr!UB#
zE4!88Rf{bw=;xc*#B3i+cB-}bh}t&(rHOe@EsxM&?{s9H()f^dtgT<;Fzg-nV2_+@
zY9F!RV5eLgGKKcB$mx`8e<zHMlJR2S#GbjiePdX9s~@kV!d{cK<Miz{fsb9~SZnX8
zeMEjI!5EKTAiW>IF2)%2uX3#NYYW<JA4^^b%|~gh#J4Qmd#5{SkCly9_F0WB$Jo^G
zlkBqa0NG_zj4>Fm#;Gw14pD2DZ7Q?NhPzV0B51$TM%DQq#$0Z<%#Sqoa24}A7Mc)B
zzrE&+F2$)0+B>ph96H-+*e6d%{$<?PmFPs9TUh%7>-sFS`{=FX!HL@L<Y9E1mrbFE
zXWpcym|1KV-0@Sl@R4)P?zK;|50^0MFJqVfGPEIwofBQ|u;gqD2V_|3%7O#-o&xr+
z1Ff@&{lj|9_c>{20<?*DZZj}#MBV@<F7-T1*+~=49*_RG&@JycJa%VwT766LzJ+$S
zheC%VW$mbq_LJH`uA%;XYjm^PXyM!34Ybn)Ej(@tsT=4&<vqrbe3|)!o;^nY){G{8
zD>8=4>$%$2f3KeSAlJ~Bx_BYkSDju%--_s+$jka2Xsq4$!Maq(qQ~ke13oxa(i<lE
zIyd^E`Yl*TX-9oM(q7foTkoWyzgtv3ntGr0uh%!~Z_jzuF^;<ENAD&loyP~wBUjO1
zzdW!FeX${j4uid`(A(ssd%@emdU6X+swaN|{V269nx14FF7>MptyB5C^|n$6`@Ph$
z%kRsDC)aT?{h#6YKZIOfuX@O%qJF9#kF&sm&82*dYP)jWdB!#D8SwE+d?$d<(Oa(>
zq6yal3t$)6aO1x#+IKa4Wh#6{K91Ld%O55u^mXu<Dxb$NubR{Re--!q4B1}w9fy~Q
zuju}lTw88UWP9-+@h*rLLf6dPT!jpR&4c|7b2xGo-xtl-1agfQtF0~J_}J8P)scIv
zxJNYgOQ8wrzlTSynb^E}D$m==iQbBwptTdMo8(KyJ>F~N6KJi5$6~VscN<OZNoz#-
z@I(df=JyY+58+}y0q$N7oL+-&B+TyJloubbZ8W<-y)2PE{W>%Eg#q*_^ZLQmM)$36
zT!$YMZLOtkY@WNn4qtl|{x%za^Qmw=`(NQP4K>_f0iRm}zq=4VHx52`2KLfXz@cUo
zF)pyP)H$KU?DI8e;CYY2^Xdl9_)SNsW^*6%)Tr9=Gx9utndjAKkDHNqM~yRP?A3?D
zk%s%o{WbwPw$)TMkndt%c(j>l?g_7u+*CDd|Mb4-{^`clk2U<?Uc))ngz_EMJk4Ha
zLpywQf-~mnRAke`eaNl1ec--_w}d8au5pI^e8Zpe7S@;id$%)R?2k07uls?29sDgA
zyY`I?WBL<vkBDyN>6`bMlU)l<oBZ#^J(f-#SXwanQD`2fus0q@pNVq*gIrGdi-&Zz
zIkZK?9K$+%+7w=WqquGDPfg)T>|<*_0e#9B_lyH4M6-&;nyw@D>~GC0t$Egq>ef50
zAK_JfN#4;K`oCQ}mFvl4y=0)z*f0-F>q`{cH#=DmIYG8dt=Gt8a_#Ugx=QDD@D1et
zx%tq&3$WipYt&clFb(=92kp~0sYzzuTz+e)du@wJ-+}E)@>Ni0Y9f1p>_H*d%|jPG
zaJ+XhdJ(x#C?lFCy-n{^#p2uy`O;kWlccK!_9sh6Ca_;h{RSIazPEb8np>~!df{IA
zVvp)t!+5+(x_a?&T5?46j4_CoMa}z(ql2v+cn5UVj$8B1nUT^syItn{2tKMh^J8+M
zbSflUNNPF!DElTfb`G+k>PgmDrCX}w*)a1N)Mw#&7X8-yomFYgufKoo({cNL8t<9=
z_C9b28X%hP>ArqREO)k<KaF+B9!U0%cDFG3cX)r^l9=|ji<``Baywz)V?Q22*s%Ai
zy%WpFs}>i?Nqtaz!QRj45AyW0$Su8}aKF_WI{WE%6FPhqa)jh@$&QlOSDNtQDEZaR
zc;fqEf2ZwvCzzW#<W@e5cAf}LJNyOw2DSf$ANr>X*bvok+S~m^$T^H%wwZHG*~Tz_
zhBfYbU~FmRUGT_g8ICKLm1tI&{vAJF+?GQ|Xyt#XD$%8VUe0b7TKf2geP^fE6xK{O
zyCwU}|LQn4);iX&XnQeaR*P24-+5|o+w^-_Yvr_5YkVcN)T@vKhSAcUC(}}|7FxQ1
zIe?Z%YRzuZ>VTeF83ouX=AhQ5+Vh|l`-zpAe43naz)|+8c(qwz`9o>kXR-I%%6sJb
ziGrDxAAS^iT(I~yFd%PgR<eeX-w1g_^3b71>~>WXZdo5a!!#4aqd_>wo^5uw=t!w9
z=^%n*9WZn7Cy~zNWK2x5$yr}DG2v3jy_|EO2p&L(K6aPSD_ef*7JUCE)+qi>!b4=z
zc^w<=+0?@w?6;|nB=Zo07Bzw|;AZpQv1U&TxVi3);#|ec#`g+b_vh2fLnS&^KK9@3
zFXg6TjI8geJ=k+x%JpCevF-kfTr3w1U#lb1J*~t2_?LsX<+8v4@b^B$JLvN>>>(Gx
z1=jK|n-i|ImPN1Q@-=g(qKlY<?!7wVvLO3Lf93nbTRE;m7F$#A6qI*o`&e-CZ;HEr
z!+n2o`@w$J<P65sj=Z?<Z;QKstv&$bOvU%@p8)o4BRp>-1}O8jmpUXTNJdaB5Aln~
zeqP+8II`{FVCcKWJ<0Izcd@s2(Bu8KQd!0L7H=1x|734*o_P7j9~5_g0{)$WpLfE~
zH-<u+U3hpL9{xUfcojTc>!%*R9EC3@t47TTb8oo!Ox29AslIyC6oW5T?cpAD)%m49
z^nSazNA=I;Km1_Va|eAIDf%y){70banU+!MH<3dtX(V)E*O!1@-B)rSG}sciZ|qp4
z?*w;!BYEGX!s$^OUx~JQm->4X9yHcy%}m5sTJM2P`{};jUN~?b>&x;G@JYDjL1!J-
zpy==4<98w&o(E_0|9mpeC?Dmf2~E#_;hs@e=9u+9U*?$YAaj^8<0J>wM}PcqofAF`
zfocBcD08O%x0{;7JCP+`a87Ic4RYhb^q&xiG_`!?EoSuxfbS)jZkj#@7~>!J;3jkC
z*sqr4qSk5V%+J+Mm~p5i58Z$Em>GwVhweijS{Vwr?F82QXYPM^6Ect5Xo5EHEPeYi
zzUwP}_ldIaWcT<azH-XpARN%z3dWoI>dE7cP)71;Am?7ff61ZH?p>9!TrZi$UQ?Z0
z__NSE<l`Q`F6}qi9D1+wX-Ob=clv$<rSoOJZe#5%=V52QS#}mDy`DNx^?d{w4BBQG
zi@udz#?}GP9;bd?>=wqVF6f2J9#A<QkdCji$GMi<l=W;eG{O6#la;Ls9GmNXnm%2~
zJ}Z0?8^EqaJ^{|)`w4AQel$y;<p0jI4&PU3R}^0%!I#+T1?d8M9(=2~b^69bzOi(t
zBs+Nx(DjYJ%w(TahsvrR*?Ph4gMr__eP22wZDCZhTLr$wN&3$rG;8DY&*k}No8De?
zTGt7!CCw%CB7Y2wod@KHp*`Q@*w@fqcdcQ~3SNv)eCVKL9FKJ<8+VFz_|SgnC-P0E
zv<5S*z2Z%yx^BG4?EWq^X9o0XTb-Gg(;Bn-YiZAT1lnDE-q&A~#28WeC~>8IIctjL
zn^w<57ZyEGAGTe$V6)~){WyZ&EPBwp-$}p8JdH#Xwj=kc?kM>SikBnPg^kS>eo`Cg
zL&!xIN2J?!d`WU;<8#<L>^Yaq&o}c@6||at<U(&BzNM-gom+h`ud|1B;ZUc}?4`&V
zj9)m{G3g)o4Qx}rIb>k%pY<Xecc8mV#;mMEV~<dWWUmhF1x@sAW`r{&*bTg(f5^HT
zm+DYk(bR>*>tTGE()a?syQ8mas1DvgKXdpPkAc7Qky+KR4rJDigEFf>Hx@qQ{dw*<
zNoFm3KaP6A7k0l2sdG3N-UmG1mYiS?KR^u3LfiPRhug_5S7Ubn`E~KEe20-C57r?Y
z=Gpr$$*fzf%vx<EL+&!jRgz!DpHd~6wWB1n)|<0VmRYNZWY$h{OCqx#kj&~Lv&yHg
z<7xVX?2{Kif`42NPY@4LpT$4&r=kDg%Trg4PE1@i%|(KF5Pqo4M#gjFc(bP!*;IL+
zujO2YH<3AdEDlYG;B$)KH0^eTn!3o7n%+oTl2<$M(G)CXw*)SQmEkFeI}7aLerGuU
zFMbEu(N?Ac2e<F1e^cGU3}l1I)S>tx>RX}h8hkbx8{gPIGcG+By&m?geuQV>-mr3|
z^;=%wQRwU*+Q@(-A<IwwxLyH`>1pISFk{SzL(FS*qHHemADV&9#rGeQkIvg`t{psI
zngZ7ivZR+U4$_kz=vhEpbhc=uc@X?1<NoT+;<m3+CclDnEyxEc;QU==+YGX;;FT}I
zQEOdtu;60XB)Ba2AA*Oxcqcj#vVrKJ>h$G@$=&%<S=F=Q&EmWa_NE=5k9WzJHOao0
zzSmjb-ks<Qd|S`Yrx6S7dXv6jSW|kZ_Oa{Qd9iDWcbDVa)WdodUa3yjb+hI{<pVi3
z$^NPMt=3Q{HkF0{Rh-+(c%`2S2KqL29Qe^!;msr5j|8t3d=rd4&-p>Eq00p~bSCq-
zNk6o~>p%8PagU8Z`s?CJc(jIcTD$Ux)0j^l>wG)bv8wCv$=}_oXH#hhxU2m~;1@m)
z@4Edu{_FWLyrcY;yc13@v)2*i5%BfIN8tBOPP)w?kF+}JG4e4e@w!SsHub&dRB{OI
z-E$Llv3}eV-3(xF*A;8%Rkam%(p!H+oV!xr-r_3WB>xj#{XN-#w0qXbn%N`cutzhG
z_%lHpCUu`hY>S?Y@!7pPy7|aBX#E3@WLWsTA45d+t+;74_V-%qfZwf{9QaRK{(Zc4
zYS&HJ8QK5A4{wTZgWvA+>^wG-cI<B69Aub=c<d-PKF^p1u5q)uOU*oNI=iOTH5CeN
z)4JqW_4b;xIIHFRRw^f=WbtDAxURr=3ZIQav3+b8d1D8Pt=vD2yiIw@^eX%28tCzm
zpH-}Qml@D|Y}&i(=tsWYKu=N!8!1!V<iFFmdS}1C-~T>Bnf#y8zWg*dpHxRS|0QF6
zE|bJ_^tz$1o8%|BIJTRyY$ab>eo`ow$6iLXq=9c0n4g{a8M24G6+cQBS<dPs_%?i(
z@*D8U6MXZ?rql7wdy6&Z+O>$?gnrA9Ht@|W_shHURb;)dyV>GS&Uu7P+nDoB^S2lF
zF9`bZHvVzBdq4YZ02|dWe6})M$$$AxV0rB8CL8ES8}OgTK6B8!9s5CPEN3gnYRR`#
zaOw%4-JS3E$8<|Qdt}%<d+0+C_0J`5b$fXFVF$T5`7m^ACwby;GSC9%oOsc_;9c*t
zp>zbj)_bEW-3#yR4TsY~TfLKnGvH;@xc=nVxH7-Q`^+Y91jbMB&2p~QXU$IT7?t)~
zmc;T+;h49PYb)1}^X>)kc~dz3<zpv^1-T@aBwlKMKkx44-ErRah0}k^JJCAjeBaD{
zhI1FPY2;@(+00mXUH<aWy8Napo6o(8x!W*vZ2GQnd^Wb5wm5t6`Mc^a)%~gk<lwwF
zw1W6o6XB<48Z&j7=Ha;qQ`7%7G<Do_{2133;X{sj*F3BzcBx=^)9;vh-|^?dp3Bl4
zN1%~wiN$&c=a`v~EmmJ8?)_jLCA~GjiT;9HDfz}tO2kqV;VUyudINK^{T<E%gKP7U
zDRh?Z%R5+;Hz6}k(K^Bp0{K|JSv^h5`a2TgemzTlh-a<f#!Pt9B<vf9Ih#hl^p2}d
z7Mp7}-_#V#>|ourHpNmcPAvZd-+YwkqRr@X8rQauo;F)Pl#<a?moleopjVvz%6-bu
z_n1+>$Nf#Q<LLRRebjNBI_|8jW5R6v{fA7UuN`|6-<Ri$JT{3rB-dZi=0mqk^vf@$
z{QbkrW7i{ZJncP9JC`Tcr7m;Ur8b7rmjEXZA2eiu<-*-0Hl8H&BHR@%6mA4Cf8;gd
zFt@wk(wP&{42@NE0$Q>q4{y!Q$G){e<A4W3Pin#4Jp2|pSpL}E-#yAYnd4@U;#<af
z!%On$<*dIg(TML02OXSekoA!Hve@aiv|b}S-DK=qwcXKaspaCEdZ%wQ_|afzvvypa
zWs8WGEf`$WgXjCyp30{x+RA@vgtEYma-s=C-vj$$&zR53XGg#@(Uibn3qRQ{I`dHS
z4ck(g-{Rf;jxyl3>MHj;s%$TR1!G6XDer5c?Plb)-|f==&O`rEoGY65W9%e?5BzqE
z%@?xWmk9!$KWfkKG$Z#-LGJqq{OU$@&YO_=M%#V1piUh2r+$?>l*e*E>$ewLs#vKh
z=H!;%;-1O8m!8vuz9YPe=4#SC<ez38H0aEBmh$=VS$03+;TGZtA;ZhQ{Sn0oVyshF
z-7`p6rO%26eew8-Z7#U^l@eWzgPU>Mm<Mid51(~der%Fu#4E)o?HFhId4a^|wKpBi
zgLsDEnnFgagk?&$m&$nu=bSQnW9Q_58D}(Z`27~;9AQtz;)v+g<TK3NJ@~Fox%rNM
z&Q4i9&!vBP;RSQ5v1sk-du)vJ{($)o#;I|CADEQ?e~SNluK1Y2TF!$99q0z=Ifq4O
zqMV(cvEqb$C@t>$@bm2hDdy|V*H3H<>XiLDfbU-+kM)=SORlod(Vc^KuA<Iwm7b@T
zBKs1jC}=}8Ui++--@HY>am56{He=5{>%GP-IuO+B@~v{)2X*=V@qLi<t)cW&^jB-7
za$Zll4t{NYnNNyW6O31N-&5+R_LVDP7ynhU`A5quVOQ!4JpUuW==sw3C%9JjX{3Hu
zwh`fsoMi1fWF!45<F^OnDxJG*&{@r6$Qge8@NmQ1YlwB!RQ-&VCtmht(Uk^y;utu9
zEWP#(V1=JY20T-lK(3a}+#?T3`@ZT}<-7J@@b1^czfs(E??GgB;<>laXRm=c>g~N|
zUHcD-0e|mVUF`==;f`)6yPfqc{t<ybc@KxON%HlyUp8u8BhMQ-OSB$-kUZwbdPbZ1
z-c0nhC$ET2qi@NUs#p&(nOcZ9mOM7(A05R%I(d#G{uSGRESg+e73)Rs(i!l1Uo=~h
zH5!l;<`vsd>pI>PPWM4$jA$0`cVGjqng+k(%z<c{%I0Z5zcaoLU2?8`ne*&J?M5%s
zIYI52JT}AXF+N>=xq_}PBM)#>wf0b<t0(8cczex~p?o0Uc49vePJPBLct13jpLt(H
zCZPUDs9)n&Ka<GS3C;ra02}#UY7Fe9gWqmpl<jv_cc#>DaK-lf5Mz@MdIUQMe&zF2
zr@r|d_3HZ`XsgPo{(YmR-wm%T$KH=%pn5oG&}{Ud@@uIh!uPKBbm=3q6F%KO?!1T$
zduV^i!gnTpJ{OyT`k$kJF80;l$B;KT51HR@dGqSd`{3nm$j6)~^IFEHfA2`q*6p2U
z=C$t79<yYCY2Cfp>qBk+Ji6%kUd!mT>cw{0ZTCs(M{Bo}URNp;IYODs;xP~X%1bPc
zW!|V>;6a0!SL}Z}UoxZn<Nt<C^PB4VR<7gfp-0@kF`Ui=XAgYCUw=NbBYj6-Q+&G#
zzyaNYy(oM2TJSrXR^r3jcP2MggmGe=(7y97?K!_fTgI(Q!>{f9Ms9Lu3uY1Ie~qj7
zA+y!?FJ$H$zpZ)RTW&1JS?{1tkNt#v^{qDMSY*BruMqNDQ#JlNH%A^f+&A7GdA#>|
z<hKy=I&Izs|5X28gzvVXj~xn6Z&2JIt#8eVV6Hi_xXyj5f(J&x4fNvz@+vW_qWC}J
zhw(nsta+!s)$R=4vsS_1+gQ7t8{5+AjY%8$Ns{<%8}IfW$5ztTiJn0DG_bSr!P{>i
z8+()UEnBNhHlnqE=h&DpH&k^;Q>Uecqqn`mS$o>gPh*{TC$b%$Nn4rlDb7>Yni~`o
z#Kz;H|F%EV{ttWa9v^ji=KbF@6G%8z4&h{iWG11t#(h>-2#_k~n*<fb)fVtj=$1)h
zE0ykAMJp0YhCr*k>8^~@#uC>|!0t9_+0s^8#`Y-#*rVGPLQ8GCTW1mkEbXcsGeDf*
z`*VNi8zuq!+t=&a|DNZMdCkoCa38MwI$zg)-R46Y3pP=D0=%QH2VX3>H1_RG>w}Ch
z1${NaW7N0wkVmj})V};Gx@X71{c!gFC%J#K=u&eX2aW^3SQ7jZ4zTvlTjZhe{bOh%
z?5~NV6USq3W@d_}N|<wj&Jp5VAlVoA0lOQpA@AdSC__$il69|J-q;u66Jjk4AJu93
zH0KUFW8gX1Dvjtos?$<pitRpJJ3ja)z7J~Kp)=*X?b`N$R}5KcbfzwC+uzu<_-MgL
z{ABdg0FMvTPmDEAVGHzPYYI>0o6`P5)q#<Wb-0$~9rdriWxLA$J;%K2p^bqxFvSaG
z8)#1}HDPQHo)N6LZW!MOfL*56q?e2UcJT1TW#IC0r;_o-@v+acayy4!s-YF-<b(`$
zSq(mi0uz@W$anhQ@AtQ!qAkg)F!_RyA*<G%%WMo?8v@VW{KF)&OZb~ByG|jy9_5`K
zT#xygpN)BBpRc{d^Yrm3ZO6vDyj*J|7zy?<{FS@VS;NS|Q@nfEzRZii^22}8uRWYt
zM-I2e7knF<r+z2cuXsk!K+oZiBFErE;WzVVZziWswCVglvqNyw+)Ajk;1pM{uKQVL
zvF6C$$Zq*mJv~Tx>w~{&jp}JLGS<TTIzug~5^6~;Kg#|@YBrTnOUkF;)N3kXuUf~E
z%wkJJ#Mal73uE^rkG=#Ajdf}0ujo^JF7zALp7AEq`Ll)B(7*Nl2aQ>v`AM(TxMSqY
z-KaT=$HHr~FnCDMm|p{vA-Ec03?8o9-&tHO$?7)x{-40xg^W)y(;80F_)1+__b4)B
z3-Ydr^$j-<1BZ;&0d)38Q~j{Yre;1L_rWWCRzC^%@C<Yn-oyPK?ycn>u{_qRQgYOR
z4qV;AwTI+0j^Ho0a`SfNFS!`(skd_TU)ZCkcO-Kq*Ys{Fa_yq`hhKQ#+|K*j)5ber
z<b9pvAsbx#1Js7*RYM!^`9;RYu#)(Ub*%xPlJ3`YZ+P~evG<tIm4n}J=9&JVXWvIh
z3g1>;>2yG|g4vrsD`&Tm`;;PQLi{R8oUP;&W>b(_T2_8Q6S40Mj_1aSQG2lgjs1Sc
zev<gYDZ4I{yWWJyCx7R}|5|GUj|k5*v+C;ESNsE)CQb;)g)53x57Dp8F8uGhm$moQ
zj=5p%B4fr~7rxu)$`#g<SU)&W*me7_sasp?XRW7nmCZGql5bWc2ehBlj89$7oJ!4X
z`BjU+^AAim6(5jX`YF1@N1)kvoXQ~IU!cDo?0xrhF9K~6YmUn<M0UMJOxfat{2s{$
z{IK_%eyigwb@{ve%;FQGAyZJh8eX-y4*v_hH@Z!}>hC&n<%v~O)4|S5G*JeBvGeEm
z)!E<F@k(Bk{Y||w{2^)1m@Hp42mGKft81)U)u%No3$fP@xTp`s<>cS%X<$8(^~qPL
zOGVzgp-;)`>TIrMhkR4q(|g#4qmr+{$9O(0xl!iwLydKra>U?sX6(|{dj1@_WU&h5
z9ePsF)#w&g_=4!m$`f$k&M#kkD5k7<k{nJePsf{CeZ0GBJiPFS)s?~VX13ren36Ar
zUp%s~9{fvA_90)1y97+7`~qk3NxuL-r}F2qhVv>JXL)Lr`yKf^GkYB{Q@vBqk7)gQ
zjNiL1ejr%c^~6W>EYE8%_*v$)WSp6~gtL^2?_J&ZU7dRr&>Y-4vN}6mGSd12c;DhN
zbJSd$X`|-lo6?N|GhTB>hba$B$DN_|uR4g%&N}3kw`={$cgss`DDrCjY#19UDn3K~
zG-_3*h$kF+khuM#$lR*)W?R*HA0Pj=o@?-_O^wX;V0!35WQ**RMb&Y^*4wL@q^^Zz
zdQkZLLto_{a5F`}HIWhET4C2qsZ8rXLlYh@JNUSTTNdW{l%=a|W-dz(+?-A>HCBHx
z=nuk0`Mn+d4#ETBQ|Srn0{{o<3Q5L*zCsS58Q1e&6UWD0exH1Z;DYoB)ugC@Ju`DP
zdK7lutl%i%!GEno4R|zVRej&H=qLtwM~1AGg{|tOTOYubF2PrGF6BM-bv8hKzMjm?
zV$nM55gYQpo(<jT)*?}VA3$dry7tBR^^2t=(f_-xH~#(o%gW3^9e_djw7^OCt@oqr
zPwBdedMZ{Ypx$Kcugqc()~maO14Y(nD|k07l+C04iSUvY?2TPfeAQ4|Onp`FOzwIP
z-)RqY*t-bW|L)JwF3+Fk{*r(hmHfJX8`0{Dg1=;c9q+n*Iq9=s#g_)%*X7bZ?GJ^$
z)mNyMxq1?IcE0&5gD!99%|7D@;}$K|zf=PswKXLwrSC_uRqld!G;${I*0sJxJNVq!
z_-Nk-Xkb|&Z$<EGv$zbn)PXBHHy{^|;tS%%;eUZY*P3|Zax+VH0FuO68syWt8a_&X
zb0zrmVe&k~57)$5Z_ZFduR`~Dl=mOK-^}uG*ifHcI7@C>R}dZ3TMH8bXVKr}&(4fA
zI^)yMN9!VfULt?;`?5amCD<vvE8gy-UQ+m6<}Gt=Ni<V#`XBqPvGLxz+pvXz0qw-s
z{8s)G=#M#^1Lp1U=n~Fq3eLw*4Xw-WOrje_%6!q&Z=P?B6gu(drN|Hb)Infp;Sr<`
zAo4}<?I~u?S>JdB`D=AJeB<IrDc}(18C|!2?oYbo2!G#KNi43?xx&m^^K;fU-|R2x
zt9tv^`^@6TJE|+&$V=Av$hVl?p6|SUbTanJH<5SPpn|2d*vx9w_<d$p(vSWAQ*<0`
z#)#%Vb^<j&%(3c)>=}huG<@nND-)CCS7<DZ;~QZIS-^X)&OO=cV98n+zXs{(;I^KV
zexLiSd`=PQIQQ9e(7EvJG5k(?Cx!fWa~meRJc0Y~!xx&&|FE@_!^G%Q@B{IrUhK`X
z`N26xb}~5MgIrTCWFz>J+@Gnq{+0Y$T0im3ySeW9d7eB6Pl29tb&BWFYr=Q%UPu0{
zC(mo&C;7A3nl7Fec0JCXe8yJp++-?bH)+gC@F2l_H0E4<$A*e0;T`XGFGOzn?-oN3
z=-JM5nHOby$Ts-GvzY;#W*1|SjQ`z#K_9PBrxco!EKy7^17GoQKC}KGZ^*3wCq7Tz
zP+}xY@}ebcjI9$uY}U#E5BL2Va~rrVeTMm^7=NbS^iSnn^x~<=IBJW9*MhUyz>&W&
zi(}L9k-_gG_?k+v9g^geq=+|Z-l1$w(cpZy9<yYe<>}}$L*<-goC6Ly+AE1{^W+-v
zS**4!?6UQ?gS9-<22Xn}^WwQ$7tYVI{vN-$2ig+9aPBr0k~fL}l<%sr>mkl-*P1A&
zL9vN2^r|?n9n&X?A7EFl!AGfal*r~$p8UW0Dh;%`Te=?nC=?!T<!M#YUF*m(d`+|?
zxOp@|AKhw8G{L(s4!mpLW8b|t`)=$F-i7uehw^8IB*VZ5^fzm}nO|lWe+qoel^e2)
z1&hcKIj0)wXTNUZpW}JU|Ilf~`|9Am(tAVXB#akK^6#?r5u3{z(T?cD`jK+zL-?eA
z<V)&7R$PgWDqGwC0d!|*N_u9?G*7>r(sdGDKy6vw@~g<(tZrG4j492^m@U#RxtD^T
ztZqrW(k&h4p>e8RgI%rPYncPF@bXXc&0fy(qr!1ycPanR(nc;kB-fxTD@Rl4-e*@_
z&e;S*`pxRV<M-pYq;|}}S|nY)Xx3})I)>r1UcRQrlMv0qhX>It{8)GwPEph268Aci
znTp~+<<DNoSOxb}`_KoV7t3G1>8n(Jjm5PWZb_>S`&s%CY!y!v&Lz-?_1nT59C{0y
z3raVJ*BW$w!!z*3xb(a#;V1Ax&)av1zG@;P@xOiJVMG0RZyvs}>xzW;+nA$bL(F}j
z#o_GS&-|VmBD9nHylnektrg=7T!tRYS{U|`1X)+*&eHEOhx!A$Mh;WuGW-m6<W>8P
zZ$S<CL@o_^Qh^oD#`T<Qvc5>U4ar3&?%)TMjO}6U((zN*a2^f0t~$p=bfW7?e8=<~
zKg#{y>(M(_l+Nh^-qJax)Bo>32^WjH!0~-cvN(<$Py2#Tcl-8y`*`zc>?o5s4vw{?
z);sCtHIm1BHv9KI-R&=QYb}<T`=6i2$N1oD`QavmTu+t_vpF}f6}MlOxy9I8V?DqM
z*l?B!_ra}YmLF1!7&@1Y_g_<3+dFQmJaPg*HR~u@AX(p2hHbZXUgv!e;8W*(M#*Ab
zS5Coj{woh!`!*yeglCZ~o(cC;;8%zCAveJT;He2}LX0M#44y8V%laK-#3CH*bkT&9
zr62L*cHtbbGQW{69$9!V>&RHgxAATJIhc77T;AuM2eF;!y>(YxL&u@El1DQ;d_T=p
ze2Ztpv>9GYy*1i%vcHe>y9Aye)E>PFs!i_h>ks9vE7E>U@OED=-U?rZx587MbKu!Q
zA#@|oriNx*eSve6Czp&d56#DaBD>W<3w?z?tG8CKu(CWVdsTMep(hyUsCkv4(Pox2
z3Y{hYj?QHM1U`52nb?U9)U|<eY`9kYlZTPZ%sfU%#z(-p)%69@8gg2e8Do9b%4yN>
z_piw;cGmb8u{CSF0jJ58Tp-_W4|=KDxUQ(!_(xHPb5sC(LjF`}q|4$qvZznE3(nMW
z)@&)hpbplEd3WW)eidgDFD3qMugMq6d9p#q^UmzVT)p4_j<YRU#JutKOnc01J4en(
z$tdJDJ`~1d>8SX@f~!2<=ffxC=6($3ea<LkBjc||=hS%SV3(Z*UQ3?HyjTHWl^lE(
zSi`FZ+V#eXFAF|Y)O8kJQ)4@a?M*SnxMHstU<{3{**!ONPh{@DXuVGnPZ8bd8g^_u
z*DUPG9jL+oO<o*$2A%_-m(&jHtz1sgl)Vm3m~Uh%KBY0C8=n)uKY*;rnfD-`{~$h)
z2d7@d^B;YwCcb9R$mltIU`>I`SH#dw!hy?2^-A9kz%SUpN?p)JHLJpXHSkmR)U7c1
z^S6>uTnW5RXf8RpYh^O}PWXGOSL)WS72oZJ@A|;yn#ibVFcG<k@BZh1y0Ybe(Vm6t
zFKe*R@hiWSk*{YEZFuc@G*V+m4e;|nSXfQzs{14S515P-t(3rX#4nkXVp>aonw4X3
zXDZI^t*QK7YyPa)k+Fhp9kvqtz*YoXGuSHrQTK5sZXgST{6DTa@VT+3WyA9O`*yKE
zw-<fuD0>NC#%F%`K_~qh*COb2HC&^nUAgKfv7c$7AN^Qy6gNg!)YULLvapm`YT#$o
zu^)Be`g*R{aJ~QEGp)zYY7ZGcikMRwYeVOmuKc4H*>|2dUTYAh@6_gdW+l;$SNVzK
zyoBzB54k;Hjz!SHbgpp>dh&2ouq3{mCKntUoN8$>%>SwUH|&uRPYo%)kli<?-{`G2
zzMy?$;XfF=9*Sj)|K-{o!~@fQ`hJv{b{+lt3VfX<W2Gzedq_MX@uk83&!0kD@3y|;
ze_G=jGkRcsJwEKo>pQb}Bl>)qwiHtzgg?-AqBApd4)@N{)-9}w^_yXLO9wWq$W=t=
z`-1R=HH<_D^M2Vbg4f@?e!kTxt{~ZSz=<n%>Dyp-rWyj#S-cyjy$1Y5vh(2s<vtUj
zp0IJ{w&HQbd>Zr3IK_g@=;D?z>!G@ldhc@T14S68_$RQ4?;<C#gItDRGuFBrtJ6Vf
zPrlLJ=v^A~1N1kJan<wuT|6WI2z$f_Y^&9Wv-<WIq|4V<I$wa-pxZ!?@x~*%2fu*c
zU!V<}6T-a10kcCqrtL6rK%dbX=i-jFzc{apa}A=O;~9G|TSx4d_{C2W?-!2Qwao76
z@%LrhM=pig$0XP(Hzc>+-XZ^w^54x<ncVe4VSlUkJ1HMT*HV0=6Yf);fBpBd9*SK!
z^!p3%J?Pk+9lVDBo^vlojX90uciC$}@i^kQUJOLBB-=mjTm%E=anUvS%IPELTUGZ+
z?}=A??+2N4?p#&>$c|e+I{3Ob7meTQ6(=)0Bpb8`*t=(+N9IXKw$CAx@U867c_)3h
zo^Q2%)tKn%_w=`V?`R!;^6Aj-KW6)+rcPS5MD6p;!(n{|hg{uAdW>^Avm=u8Tp0gu
z?i{r5Ol?S?@vhr8k$*w@^Kz9AW}jP;{r*Pw+sljcVDYi+^+fjj<9wH7V_d3lIJEw*
z#V=wV-o7v8!fyg6HW70WPxAJC1(B6DwhOEy=+Y(9Pmx1O^aR=Kb?`CvLG`Dm<IjYD
zJ%;W%1>a38e%J6}`D3RXv$7D~lsdooEGKnMA)jL?uM&^)T_@e&SMKR*u6*L`A?LEF
z=<a?0k!i(FEKinQj6d?>IP5JK-;}-a%sK2uo)w=xg<m65W_IYAQ?wr`XRO%I+D}{e
zZ`GBReCJ(@-ag9AmYh)>fO#(rcljz)jQ75u8{%<!(JeoL=J!@t_WTHc;VadZ8neUR
zb;IY=w0D@jN-<<c#~3rKw3zu{L3}cQUguu$D!jpv_ejpk1blt@H+6<L_&Ps6#Z)#;
zHI)f`S?Jq;l|&X<T)-bE97wWn%AikUqs0@nad<5HKXZr;ksHd5`W4Uq62A5&Y&Xrp
zTYG&ck$*$!&0GJTD(IH=_Hr~+<=);L<q}=ko1;AsUd>9uRIqb`L*y4@Q$Ci~Sui!1
zxo{SYEqu|{>bjAw<N@v>c3|lYABgm2gYQE1E=6nL*nl78ka#;av%}zzaOdxfF2)@_
zqqPW?z6<_j{U>Vw3%|<{7j$t*@5SC4OqaSAfp&87licEXJM{w|xkBwvu=qJ4v8m`T
z>b;zV|9^$&wZ=8r1BSewx|}sm=HG1BIlRH&X>p46R{h=ZOVyQ+f~&|-)rp=JfzCu<
zby_?8!Ko`b*987hlBs%o1of6Z9wFEYH#~UUbP0F}7Il}u3oH_@KWGtfkdCNzOukKB
z8P-l~7CD~Tp*d-9Pet0@i!VA@1r6Nur~Fyc3m$FGi!z?=A<s9)z6#*AJ=gBi7*eX`
zGnk&Y_u_k~iMjNAU3M)D{w(Ft=nT%PqnXxT=BPbI=y})!)Nvz6OKX<EcO~3z!r!bt
zKw)ez!5z6>erPiG?<Ujf$6pZS`f#4BXB}cZSI6A+9(f8c3VxdN<$M$aRZZx7ct-7r
zUwG|2#WnE}I|jzm{f6?3eNpEmFaZDcUJzSVa7(~<bT1v4T(0Z2yemGVe&+BSU87w4
z2W5B2pV5FlRfWG|1U};z9%z^&-xD=K(MgzZgRy6#P!B3T?AZC%Q^+^P!qR2r?Smii
z-tFK=T>bUZzIbpCbdd^N4quc`O05rS7a!(qpwt3v8F(f3*i6|I;$_OwNNP{zx8Os2
zP4o@vYdjMp*9HE+eG|1e)z7KE3^wG%F8zKv3m>he2Oq&#yzCd)1*eX<cp|*<aHW^)
zHRx5Z@UFohncH^7A1<_g2lscpVQFx?8%K3>X6AGKQ51EHXEwg-UdINXY<VCu-qKSR
zH<xhT(`g^3Z_lS*@oHw~WWB?hIphPMAtt6Z>gE~QDT>*9@6FEn{WkZlJiZ`n?D#}`
zJ6xS^(0IjT4fUZd9Vmxj2w#m6%d+>fIRsvx*VCuhPtw(M2Ktddg91R*k8qzklKsYx
z-f@WE!VSH<13f0me-Bm~qv}K3|2cK}z4KaBXIAgY*J;AYME3p!fpr+Ur<_LRIo6Z!
zSW`!?V7>0UGNR$<)OjTTll>Lt^;@bdm20YVwzXHy_)89k_uNt$Q%vVL?T`~&UqgHi
zT|n|hHQeine?%CY&3n2Gz79|E)-X2mV!1|5ADas-9`K8P@-&I<%eMubXDN19NBi}R
zX&rsml~<>=r?#%#r@XCM;i77-M>Jf-|L<2<lG8$7=7qUv{AEFRF77-61M{eRU$(9H
z`O=Ag^6;i*+nVM}{|UGbg;QVHYyxJLc1-8;X9v&o4r6oPfmf7f-!1i}2i7FJZ{OlW
zR>x1E`|E6T!CK?-_Wx<_;X|3${q&nzKWx8UQ}C<5aZG3b-T?an$9BRSIVWTsdnv|K
zyR4A2#L$5rGqS_G*8#WWY~p`U*Tlo($MBDHD<^b91KrO-@6WOS@6E5eXXe`Rh}Mvk
z37#{tv34(3ggrW$5?|%!B~JV_zQ)2;kM^yq_eUQmr)1fk=Ai;=&V)CMzg*rWA7Zjh
zb>!NMe)~frJ<=P|j};S5mQ`22$@vHwzlnz@qZ?gWUCEy1*~=!=26~ezbSe`%|8^1j
z5c1=%@sA|$#GaefH`{B+<A2P_>YsW?dw!DSZ7a9!)1~aot1{^?&NdZC8LMgo*32Z1
zuoa)F{^Jk&8hkZ*%YaTaKyRm^C+&IIH%7YSBzUnedgdCFj`2Lc-T0YnxDQ>Ykar>S
z0lo<Q4wBPxJ+`Pvdnst?q8v!pw0D$i_xIwbknhe1ToUkBwbxk2nGI#;8`@)n4miN`
zM8^T-g~qONpJRN2v0|}pvXz0k)<ZE~3wOpWxUT{3sj?coM~QLGPCdmLA*1?cr=D?h
zg8sz$30Zw`VD8JVG!OlR*xGk;`uBXJ5pYFo$eL8XS!?=z*u6<$ESs;6c({)>@J%zb
zTbH;xS`a^V3i$T)GHz_B`}jYZIG$i0rhRuWRn@`Al<y2&A1n1o!^Oxb+Eva?DSSDo
zGmF@Rad}Us75`*;lHBj!67Y&P?VdsIJ?-5ChPmy|(H^`K;>{z?Y~eloTgWe+xZ=le
za3<!;#hq_{)#*>pwmDGJwH}%hh!jQOea@H*{F^fvprOIKamO6##`t)V=O-3@ko`*^
zg60-NbBox+G%T73EISy>fuGh-`uD4%ImSI@@0e(q{Xa)puU}6_mtTlY#QI6EJ-~mR
zDc8$A=^dK84>&CSO?Li6U?;rEo%3VJYr)l9vt95Dweb^ja4h_IzK=Y=I&#v{ySLYT
zaGuq*onm0cz2qgvt+DIV3~a(%q#sS{ssp!rj(}UeHI==`YAPLrjm0N{UZl3Sj5V_x
z_$@wTeX=tmb9<h;t+Qv$dpgl`qWEUF%P$@XqCaGP;;oETxFk44fx~Xzl};0K;6Kda
z0rKYU9DqSqUmw8Rb($yRkBlBnH@WMayT<12%!|*I*2G)!!yg!BX3m(|H`~%KIVPXB
z`^MaTNQy^3jsLo1ys@>03~N#Iz{mQ6%ip_`+CmF!ry}E!FZFLNo8u>DrI=Lx1ZU2M
z2^)$Odqnn(d*Oli?))-7u_pXbA!wVrWaZMSz61;^XUO+5vFqFZNiBuwmSdoE{9Lmf
zaz$!JR|Buno&M3z0NeufDR>2;L-y*?=A>gm^vC0V)`l8*HLJsY&dW|^HRG!NF}_aZ
z)?Va~+Uo(H%j6$tEu>SV$jO%fR<JDuw%2e?u)hx2C!fG4Cq6+Q&-<y-b_Upjhuxyx
z^m=k2*c;mOfV;O;^VIbuu}P2r3Fk-Ao@h*KApN_6dG$PXtDTc-;tQ{VXZNqr^_34(
z#x>!KH*bqKvm<l&==w<XUhFR5`5|I(+ZBT=gx^{ivX@QxnFI!tsO^3l98OGwj`?<g
zlik0jIEM?ffpc+e4i2!_GkNr(^&Glh9pv0^Qvc}H+>1td*2*y9+7Mbf120TJ!QSEQ
zJiNJj^Qhsvm907P)GGMS?unPOk0x{0vWxeBAdi$9(9$>JtLxEa;I%>dH_?N{PsCTI
z1ja;<@r?GHOGap%;?1@{;yg*@(P_q}nkr#*t{!BOS^nw1B=Sfy)nUC-$Rx#HZheEi
zFXnd;{F1y2g2PGHeCfTRKE+R}%%o!}a_ibyhelxUt+`?>v6tD8z`I(fQv9qAI>_Dl
zT4TUU@AhQnUyqf4)C{NZu*OP1dPn`7?$69DWG;~$c_VqR`DpC2b+BX7$oYQxao3Tz
zAvn14Yx10kIUCMm6h8=_8H|%VSOdMQ=lQnz4%h>W*X=<kfae~;7ppjf=s-O5LG}eo
zUh3Yf$bZ45SGdl2-!+$&dwR#_8!(?s=@?e8K!&TX=SXaK_kVHMH<S~gcO@r@^XuIZ
zd%>h<D2LF(8h>pHI1a$w>Kd#2)+?8gxmj3C*C@&A8YPkkL-t$Hu9sUVo-`DfEiWB{
z-}14>{+K`Oo?V$8s-5TAE{lPebV=!t;M+zoKN>pSC^~%~_mMS2_Ei?U{#W3c?R%pa
zA5LcXR5QPUYgv87{`X{??MpV+5c!<K*Kgm=v3X?Ycs^3`gTLuP_oMG5Hk5qm*7gD>
z7mWoxS;(`Ve_QJz`!RQH!WX^&$3NGO=IQ#;2j--`vEsveSN`XBn~w+E5cPxaoOixe
z`lsH}nVqu#^xN|fe~16CWv{j3d)9y5|7!MIwg=~v;Rg<2H>kG1&KLA|=^3wooi(_F
zc)A~4>R~^R><9c__&TUZ93(dY9o>7j2N@!}&hs1A5jWRac*r+&BlkQ!`m;Kb_O^xV
z^D4ufk4;U9%6irAV85j7s6RBiXKgvu^|j~!VedRfj);Y`;?yN>oLV&wmj9%`^)&eZ
z+CKy;cl&R;N-=NfW8Cg?V$BPyD|hdq#_)x_#*NzRuh@}fl8q5%^BNO>34K8qd#E8m
zK8W4>FPRkPIo-3qSmydg<}Tb1qg&;!yL791^6SGn`$2VHPMH0m%4M-I8p7*+*bGB_
zVH<n#_0)vN!G8+79z2-!ZNneK=Lg63w5}e_DPCaP$B%Gk20WZGYYmgNCVB_{VU719
zT&8_He(cU)VP~GY5M$a%rDWU2KhW+OK7;5L*o$T)BNPu-KZ+}vh}r+Qd`tG~lc^P6
zT{tsBeg!>yYH1$z0kF?S&(Q0Rdmrhuwkh&LxYdE&_ThK(;rpeI^@<cQSN#AF$0Rp|
zi(cI*AN$<gGaytypcegm9zJOo$K*RZjXzO-WY%(gZ1}LNls^#$FJt$H`zBEDG+gAw
zAHkQ7ycriR!oSKKMi5g_-2h--aVea8<;O10ZN)#~;hl$b|5LaYp)NuKSbTf9$;NqI
z9W=%@t)=KJL~KoXT*ozZL26ub)+zW|3QV2RnrmQ1kamLaGS?({HMFgc@vIGJD%mw>
zebk@w>TBt51ND9Br@M|^Ag#gHW)l_cJ-E-qufrNH6#V4_GX9c-k4$pUm(0cgNyysQ
z@ST5A=U1tQ2)PTB5??IRcoO*D)piYY6OJ{r9%@6r4i67~;Go6tEFOBeq1>%p{u3le
z$=-u5L=)eJk4*y4755yVkAJtZ19uPgkoP4E?fU1)4iCR;S%W5HYl<$chlglyMIzvy
ze=Hw;e?a_HJ~bacHO@R|U!1|;_4*ipr!jd^e88<qbd}e~)L;WmD35WkL(fFemsZvF
zNiWe{<Req<;-P-ETz^om4^QV#Xl`DAz32ly*MQ&jS)A=tdQ;sb^7o|o(O=Is^qbo!
z>!^Au|J^>-pXMf?AwKRdwXOa#)UmQYdURCzu&^zl(F=YoZyes7MX!dO2E0ts?f9z0
z@8r+U#Tzf?GE@6nXiIGhcNBLS+P3HG?P0BR;Zqni`wh4?bgaMpKN#z0{|CqF;a7yZ
zhy9J;r@oi5_2Nz-;{@kY#@?ZGl1(M&2vA!Nd(Uvry7cAn2Yhkpd8TTH^*8SMitsTA
zpEa?$(GdE1$iZIVOggS@H$k6!E$QQ$&%GAI=Q19>`lXBIMfjVSxYl)vYg;b9X8Vie
zMZ?rR3V-q9`>JR9$Qa)y$voc&pzZAVH!}9I_|n8jG#3XNR;>anU)Jk<BENE`H`c(X
z`Wy3rmCo88);SNlIfTB84cG18jxR9d>#WBgTt$wc_$qqw<3aWzCZFJpzC6?U3~j8W
zE|h_HrO=P-;d!2XNs)`y-#8B*cN6{`SFTjOpWH#<{v<xLs;T^@&G#cy)P9hh)T$}O
zxj661yy|f7GHuQ<k9&FK$-?#}$mPc+zwNnw=%+r;?F-#t##iawKK_@WSB3ZvE5FCn
z6FKX|aCTpBAgjCJ8<EcF%eL=(5}I?+^SQtHHS}3%v6p9JeVHBJ{FJLDS%EELYp(e4
z(H7Q_dov%L(%wqOsrPoO-6wDDG~}}y@>%cO`8+mZ;&|R?zj{1G{_UX;y?Wd^UvuDv
zX|Es0ull%I^Kx4rxvhE1ZRL8%<h7Xs(^5r#>y65B<+qRhC>ioxLxI@CPJwwvdCSS`
zfrD~gIiI(UKC7-Jw+;V7)h}5m;9K<<<OClFK2P4(DV?}#I&k5?;HrA1^Trdu%jWj`
z@*)dEW1EXgOx^>f##~oz))m$BOwcjqJ%T^`GKq!7<s0%P$me0dyTRVH{2f1!2csZ3
zhJCpa|4>}AOnDBnF%^eQ0Z*L~Jnk}dsu|AX(jSB5$r`%`j@^TwL<iOyocR5PHAoUi
z(RJsK7j(wlb^Hipvbf@{0pq+!<9u>KXFK1?216|ilYV6+XXP@6$ob4H%|*P;8~4z)
zjkvL;0sAWj?@&8@r@u@)N!qb<zYupA(EGf&!(7_8a+0x2Pq5Du3$QSPR=vKZ2d=9=
zFJ9lJd0zbN1e;&v@iu)M`0yCs%j{JiihGWb&J9w3mghs$sxK{ha?v?L-z4ALpodSu
zc9=yCX83@Ey(@WH%BNcA0#h$o{IPlh@dEKXYP&|*x1~CeRxhNVuN-2HplR9LT5FwI
zB!A8~63FKD#FW@~HeEPyHG0Xo3-f1hWn3`OxiI7&#=Y_O+&NhPsH+k0&^a=B$h`&V
zrnlR3WSFzHfs*$_v;CRb>_M=xjcxD@4<94&E}eO+e!xYyK1G?qA3B-ZeXifb?!#bg
zitWxPM?W<KSssvoePY+=`R|k8fNKfXj&+X@UO)U2#Kco&ip$C05wJdX;aTml{#L_1
z;aYe;W6Ykz8HV3wnugo`ItD)tKH0Z4Ht5*eWH$GQJp!tkk3S|2Z|FxKzJ~hIUCL+I
zTr}o$KcJoh{CO8PTZe2m#vuK<1Dnm$pX=0)Y&FKC_v~1*wpuL5R%_7yFZQCL-&<Qv
z_teHZ@%fzn3VG<9?fBQ`&64hrXLU~Pffd~dKEfTXtEW?IU6a?l_v~1}dvD$CJ>Y7f
z>r1^i62GnRW;OUN99hM;!yI_OJoaCiie>z_c*VSff6BagsrDOqW&`?a9{TEXeuvoy
zqrAu-e6woDp`K0*UVe(0m&WDG%>`v_8sodo%jN)(+ka{Xyp25b<>dGDFjwSXx7H%n
zi0wRdPxhaIQ)xDLy^g&BUheu)_F`W$cbyze<*pxMzu?5&{B_n@I4HcrA87MjwB~iq
z%%u>1Kgm>tpmFTwF7)g40L*Al`0+Z=lJ6V;ShGo2kkf8BZ%1%RDnA0aSy}-uLHNc+
zumN^zL)Uv6S@+q<&EXo4znnZ0=~mH08n?#AGvHeHmXU$0Vk42Uz)k%Qt&bSunryOU
zEp4Gw1;OvkEl&Sg?BJlrOdh)Cwrdh+!!Hl^>38Y!a9@zQdbV5m3fFck!cGmcC*$Ka
zzUcDXSSQ;00PqVULw`VR$X%=<ym0aT<@Ck91i8hJqf;Hd_q~1f{#)$6g50$!xcYx+
zZHlsM!~TN**4h+h*9N)kt&P@2{P*j<=Ue5+{<z;q{T+9|KnOV1(TD2o4a^g|zQ6Rs
zJcHuT^WQtikY}wm^41#|Z&d9gKRT~*d{J})n`<@WystAQU+8kb_AO8w9-GzDj(0Ys
zyPiR8pd@@jwy4_m>{00eTJLp!&g~g%(yFZ@T-LsV``|aKPe{A)Nbqj5(<$7IL%;uj
z&)mv0q8+Ve0d<XHgZ6z4v->_?XB-~w1kA8e6Zwc{#3K*mKM{Vu&e)CsQ_;?0?AbbC
zr7;X+ug<zG{cwK}{T$Bv;SZyCAIZ+|2L(?2{!(%XN1OPUHGXi7eJkZTb4+VIN!~q-
z&S>Y$yGLl_a3OXs<2VG)_U6oMKDqmUZeB-eOLH=O)Sung!dNv&^)YmQN3(s^f%obw
zcaBF(Oy>ZPV0{E1(YRo8w8UK(JI8W&j@N09Wt_(_cpcq2^6p{uKyQwR(Q%HJRCn4r
zmbr7JW=DLo<_djF)<UB>JVQ7RU&-<c=_)B;=Zy~@!y37K4E};YAK0;GJ;>EmlZkHz
z$E2HtCC{?Hj2E)9;e*_>IvO&+7{63K&nSmmI)D!z=rCvX8v&QS{saf<1-d5r<;lEc
z*(IJszZm+iWSVR>+g?_Gv}4Qq4PQndK7`!Txgy?pG)DPtG%k(F^P$Uc?T&wP*Rdb<
zx5_TE|9egJ2><2xvHuybA-_C#4!_La>*ibbfu7SfI~MfEq57DQ8k5a8s@^PcywrVs
z>Z||UeezQu=Ki2L!OOfkDZgCfeb@G}UFvziB&+{c10Vgq)JNyW-t0Kh26Q<20DgRa
z-T_~J-|YLT7c<Ns>+T(9W(CamyV>J-jQx$9M+9RFmr=iI_^{zEH51t1hmKH-Pe5nI
zHssZoHx%$0%O}W(JvR+EnCqH2_xL`3uaB%Rnnzz7%&?Z%A9KFhZiXGxxy)ZimV9>l
z4>sHDnO)twzG35MH&?O8?xr<O2U6?Jbz5T1n;VR86z9gaWYDiRnA@Yi(Xs9gW-NO3
zy3KnF0xj5sEj-f_USrx4fn^7EPEQrK@_Tfa9(xK8(U)q*Ht~K3{M=tqy;|2Aj9K`E
z2|NJ)E!I9M&3iBK{jB-qfhT}Ng5Tcxx~Z`?mvSJ-*)e8R1LNoWHvRs8-~ac)LHV@1
zsfp&Dmz+yyx##=1xpMx_iR{6BbeMVZZv1OAz{7*3RZ*SWeg<6vp)?^menDLJemil3
zb;RG{f#sz<hd$p5?<psz=xuoW;>bvN6?;28-l`aR5MQ$RZiILFJyU1NKQj$E0WHWU
zs&n1Fb9^H3cHO6z`NMi%&*<5q&uNU>6CxWLowy5Hy0gD=L}!03_8juc<3so}(q|e*
zW8118>w7xSB2UwSJaUPUHMbC7p#4mfe_IOMG1C;-hJVbS9ldKhb_KbelD}4FAmfOi
zJoMyf^n7ICiA5tB_oz<g5u96jS?5%<y}R&})t&frbe@KC?rfd?WFhAvto1LNFn^{!
zn_cVRAm=9Xo)5pV_IIj%UH3k^zbY{Cm6E{JV|D(CEmNL(ZgT-T*$)4d7ILA;nJKd8
z&NT%l+WLfgUb(M+*3jlmbKjv&je|9rX?@GU%WJ=Mp0kscD%Ad2;!O5@&)LMCQhvpq
z%nBbdj!OA$&}9z#i(7X4%_~WGBlnJdf;A4(pATOwZST_=G`hZyctcWpC%y(ly|mMU
z13n^jfw#$JN!Rs}?*rV3HOGU%mUUftV$p5DQ0JW7(W!i&GbgAE1Kd)qtG90|K@LRj
zbK;e`|AVw+<svezmzcDCAcN2GzLlIb`5rh+CF^?-j;RgdnAg8>$>Iz;hPSp_R|6b%
z)^&fQ58N`*Q%hCb*L3mhKFQJaieco~<9lF^_))rdmzqk(voDmaNhg|3RBLPZG!XBw
z*O$BJf+oQ21U8L#-`?YVEAO2W<iQg1@b)yL3lS?ivB=+9Nc+m$Khu!cxr#of+;ekU
z@YqDn|COa9qnz8kqK0+Yjb2~Dn7-pLY)O$X<kPvJ53KA%H;YP-RKCxy2WIpw!Ka|H
zsgK+?0?_M;MK!=}UgvA${gvKadst7=jThriA)ERetI>yw%1<q=1;!Wr#P%HvOF!-8
zSvY$5_vhfLX9vNvCI_BdTzD$?Ein|HrNFb^g{SThz%%=f;HkXEJ;0+Gcxv4q2Zoiv
zFc-EO<FA092fI4x$Aeuk2X-aYV9R5l6S8%&`cu0WhV^-N9eT+N5)1{C*MPSN!`Djv
zmG2J6DHe``yXSAug`>u7@v+wR|L4Y-rT;1Z<@ICv8@jvr+an`=osXdJhMUQQBNzNs
z8MQV?o9K?yYoBg16OSF0zlb?Uq$iV)sq;u3@W{dt-@BJHpfkYnIc3ioXKx1d;LDyf
zE`PA2x(V1NVZXs%F)u#K^Aq{Tca~nvH~Eg(0u#Dy8+mTciBo0b^_GVBDJHHQhCwvU
zIJ`Kk7uzO(FnyQL?9iCiw&tdGlz+nh=&l}ehxA{*S^0DITe;-gFW|vbFc2*J8^3Gg
zOx_*<@sl+7EN=AHq{B6Nm31R)I>UPc(Jjcj@NKMRGk69r#K4WZ+r0g=?w)k*Mb|!b
zJ;xpu&CSZV{>C5Jn3Tr@R4ZJ4eHwV`d|=fK4=<r@{E^}b_+rb|k8+~%$5ea=KSP+l
z!tmBdKF)r^dJ}!N6n=?MRAUM944R%jBiJ4Ly!58h3%S91M)xD|0+UZW?19m{YTr>^
zO4>BWsbuYDv&Xx#{<w+Whb)&5qJ-KR4W-b%YH0w6GUA1G)FcZJA90oDr+G?-pJ}Ki
zR-_oGJ6CW1m%8U&+s>MlU=PZMfj^atPW4_c9My;Sd~W-UA9`{7eO~Q&GW3w|PIr&z
zVBfm@XBPh8nf&Y2Xh(;Eci-vq?o5-}hEE1Pz_%@>+GOYj$oykJ;S8%INBrMBobM+d
z8R`DlFMa8FV9k%(UZ=g1&->mEVedAauRU-d`hH$s-Ye1>HYCirmnWDx<SQ-?^BZ4#
z<*qsA?OTcQBwrzK`w3sPWclkiB-lGTZTarG?*yjZ@lN6AZm4q1+Yw~!mv1oplRt8w
zBi0vfz&;tqM{~UI<gz(=v|WNt(m~yiWy?cz?7SA=lGgbzC!6F4cWdC2Yp~)CcoZ^x
zfiaU7U`vdviufLi`Ay4&Yrn8rG$ekDEPu<yrrYz`J4E~N0kwg>x3A`fTAPpH@s^>s
zWysR#ZLGcP=lAwSrid@R{+siyvU5fEvYQ=nTXd@V3x4<+yObm3(WPiIRN!k-{MUZ7
z9->X@siBi=4}^kF^aSs0fp$XYKX~A?qRF<;b^D?7#OargJNtfjJlt^fc-`7Wo5t_r
z%bu@<&M!P5pS0lTp8x3Tijwu>ozmqLZ#f+pM*aTLo%djS_670=_-T3td<Ix-+I&+w
z&H6R~AIoF2I%EjEXyy}RJxyX9XX22XVqrM3>rvj@@h`Qu#@88gzVxo1>*0Bm92eEQ
zdS2J-`K|x99W&mxqwCD~!u6ng{bU(uE!sY&*t!cP;C*VV)_ziX`&zTDeXWm=f7=Gu
zAlc47CdLs0N5o%Bs0Z%*q;Fhu6!~P=MmDRR2sjaA90Ti&KBYN&^1cJSOs`OU{Z`i6
z)!n390Z$v#31t>@&PZX`9@eIWb<zI#+;#QnGqX2ue+c;EPusU4F)tkm>U^(p=vR5H
z^?1A1tZ}(F4yzA5;nHZ5IdcYGc|>!VKVuHQRQBXujKjjobrv>xm&V~I2G1?T-1-|o
z#Jm=wC+6AtXdkX{NI0uJv)s94YKNf{x??`mFhS>pc0J3SJpQ722v1KfEo43c>w~wv
zCOePR$jL3>nv2KayNBDt>3!m_f2fYG1g{T((;@N)7J=9DwX6iU1>ew`18u_TAMort
zp4B})mwWH~+?zw}|J&4H5N-%|nSA0>1?GQe78&ACIWa>^`@Ul-bpH<Ec1gM)0yEhO
z9?VWHT?GGMO#Yd>?_<-*2`y*VPHNM4>YWcB*mQdBfeu^eVWORLD`WH4w`WMZ)vVp7
z;di%aPHKM(^HtmHMjqU(^-*8yN43^kZ@vc|clTz=dgKS|<@(qT3|TJ^_bmPI)!L2k
z>|ZZ@D`cI9vrZGNUVn<UI@2(*bBa0I?TxPtJ23q%a@xU3i;GXWxOioO)0x5V^ifm)
zd=kIY6@1HgZq@|aO89M7AMKt>4nStq+G&~M&rEx(Y|XUWt-kp9^E30RJ15h}@3~$@
z8_)T9mp1Hs(~fqx7dK7Qd()IdKs(;=x60PqHqHcS0~>7_?`G&relI;Yfi^XsO!3-j
zH}d`a;x)FN@6-O!HcryU-RNb{4$tC81Ag0l@&K`AGGoA#vF0<JH%D&i#dzXFXWTsm
zPhQW*7maSAJ<U4f-QAZosjC8B@Gbnlbt4^Yh0Du#j5KW_aw!@{R(IB+%WdL+J-K&h
zE;DV9{@!#>8D-iY>G8?uYi+Earv}q%3j9caOMGY{^tuRqSPbsn1>L&1=gZs%ADYxv
zDqn1NKIho?=Z){x0bFr&Ilb%hrM?@DyL>6n(ldLF%N4uvX#E*@<e9Db8KC!E8b?ok
zdmZ?&a#H(d>KZ&89J}ajEx8Gyf&-g1w$S<84*ZI74a{>09fWvx{pax4!_S+^Tl47Q
zb@VpTKm+ZZ*(x9Qfz361EboFYegj>2^zPBIrF*UC0_dJ~6HikPMeck(8gY4>OCK&>
z_{-6^-?D9?JBel_kChkM3oQhYP0IBXZEW2#JzB%Je6!Wyh;%OTVQ(Dj7oDS0b4rk}
zg>Gl}n$+DEp0k_%GcTj3w4(!l4SqZTmm%w4O{_I{?LD5;yvBKkvmD}{TuFk@k}W>+
zV|Fku$qf05$mxui%%48TlN-yhfyDnc&LliJcdYWsYs}&&)Xp4`2hwR6-*zu1;lWPd
znZU69ibL7^!0Qk&=x;0}&pZ#EhkQujlWH~AHd}|z%{p5+cx@Pbx9jG+@Q4|+fH7OW
zcr<wLwb|1;m?k>FmHx&>&{tkpikKc_h<=LkjYaP;{u1{7_{)zJ`a1o<NH76L+a-Gi
zo8(sZ*rS76_+TR_j&%ec035bU_bVaBs5S+MBcgF^H095~>-?>3yue?DD~b(4FWY6~
zoq|?4r<%AVx_6eBD$jGtuhCP=utA2q@WAh(y+-4N8|b+eH3igB<II)1+k$hNZY!N5
zT?5@}yL2n9opcwy&pQ|4mG*;fb8%|BjeiWmDIf4V1uc1a<>Ayb;O9zkvVN`ej0dw^
zyb{c$hj{%fAH3PpgTMSFze{;PD~kqjB@-Ba3H+FZJQ`;69aCR-aU&UYDxWV%%>Cyz
z&bD>hXC5)>{+W@vnN|7Q!aARZx!bvXeK0PB$ZhLyyt|WrtRC|@-aYYMYDO9M&*j~6
zm1Ig}LQUr$Vk$M@L(Q6DZ7F_-_#GrpfnTuY_rI(AXcMxf5P8xd*|KJMTa#p(KFFDA
z1#73hhKy2Ml1ZF{wm9?M)Y=n)k3XNB?o_^xFET-#CdL|zFJNEnlYMcd&~zfRj&)!M
zZ3U+UD+||WZ%T*wjo!Q6IOw;+wL+&ewcbSk85kT+_@WW!v8Afuj;&Qw?r2}-Y|C5Y
zZ>w5mwn^T;jxV(reCQ#M_)s8EwsrTR_dAuzs|~qQ<cOnhocOMj{uXP(Sw{;r?=94&
z#4kAu-|qs=-4yKJ3=f)obTt0$24eAJ;BCPRv~r}?kgr@&E}Ee}rlps|;Pz4Co1%%5
z`R|`|q}A#4=B&AT^VXbqgMS^&If=gE(Uzqt=J`YV74PX_{vqb?U00kZ#q+x7UHdNA
zJlfN`8sVU4`|_=vU+Kj)+4z~!{8@vK;j^vvvA+YK?JoFp9pgzz#>!_)jJ%l|-UfWV
zu-87X>n>#XIr{4<G1Q~+GdFTY^2ysS!Iyw9-+NX*Rryoj=2`VG{x`J$`*Qkkr~eTA
z%<G@|RMb%KdM>!04Ev)uvgW0%cYoyXZz$<A+e8aJ_Zgi@KWL0S#LAB_u88nO<02L=
zpRqTtGH_n)2v4P(`N5fF!l?|h2Q$h44JOuIVyfRZ!3~=aaW2WQv5DUj^IKr1zr6Vn
zyhguYuWBCuLNISs!~{o~HKy1U7`{30;@S6%Gr}9%6kT{UBl-}{h(<&+0ca?fR&Iw@
zdeOavvxmt=7JeQ9*MzS<?AN##o!|)gBsz-q<<HiAAL~~N?o=!P`P%o|{64|YC%%j>
zVe#pMuAQzm+{rp5XF74>#<PfrV)r}GI0cE#+8^bu)z|qgoYM1O<F|)HUR?1~eWn<@
zVoF}WR>mxJWsI)Bg$^WngRc%9J9lrDAvfRpCoRuX+bQBSKIqgCN4BzoT-2a&*_b%_
zb=&=nOM5uQZ<SvsAA<5_KNaY2J&ODg|DToT?(w0$cnE(SGNWsHp6^3t5i_oRIdy-o
zT~|~+&+M$`el;@W1oEq%I7cbZieKEsv-5a%7tc0d+gw!7v-Lb%!?Th}pXMAd<X5@+
zS_!{hNj;db<P7WM$fxSs%Pt=#zM*+}_HrHT<L&`d?*E0oIr2B?{fPXnl8M>8QfT0k
z?Vtm=a)0_fOY3j3R`$J1?9I>`X7=U-`ziP}hhyJdZgn-U?NdvOuycIaIK}v;rxJU)
zqVpVUrg5isx$8j;k6O0A&h~P0T=27h3H?9FT14<;8}pU!ip(tscKOY*`9;KnSie)~
zTw13ve9$Q}Gxe-uhI-F8@VxKXd}@G-$Lo1=kkg8Phw+d3pgYAO3fFYBd3dnO`ZlN7
z*qHKCQ~H1}Av2}r?B`6Me3xggg!d&>%ixN>lE@W1<*QqVKg`CNm}AHkwrF3Be~L--
z9oMsyBGdXxOvz4vq{Ke&<9XFQPU7>;EakJ(q&NPS9N4AMAMwxRO1{aN5=>&$WJt5d
zXET|7iZ?oe8TcYN6Qws0B{s8=nBKxU%r8kU&nJMzh)L{&$EUaqf8sKHiOYyDuE0K`
zi1W-a<M{)7X;&<`y2TXyq^M(LqA2uBcnfXRj-!q|ym&fse&s7f@=SS1xeA&5S<?&l
z7Tq?^MAvNy6q~$2F+Pg&Cf~?ob-=OAXGUrLfmM0Q`7sY21#d#<Z$2=hEU`Jnp4oXT
z>Np2tMAy6(p+19Ng?wMp!Fwt6J^A5!i5vD1x4ZV=&$phZjUM8EcAf?3%jo1Qhd)!)
z9xxA`r}l*4LCkktjfMZj6;Bf1JHVd4v%n{x^=t%}8;Px~df;E%9P)XB(3=D8rS`Jt
z0$;S+S%!|O7|Js8f1V>Yvt%!8$(h~j7?bXQFXZ+EZq4iwZPBhN=xECWw<`6lx%`+x
z*SVpLb87Kxd;ClBSpz;Z$CeZ0O-sgKcq~zB7URF$zNxDwy>gG)A7=bv?2j-w8i9uO
z4E({ycD;9f)MZs$p&)e)c(>-{&CtB{kGXWZYcRd<rjP!{d(pwCLhm2OE?t6Mx)eJ5
z2z2&0*r)kcA1lp#Om%qUs>@vkEi=D(h-;!B(S<oo9f2I2ya$;ry!->TFHV5ZXNb+`
z;-}6_dKEct&xK<B?Y@7}9`d%zOg^@ox-q5@8DB)5Pw-ChI_agKI+JM?-K`{cFZ_v=
zyJwedhVHKi#vWeCz7t+_z4GVrVhv~TY3_y?$kfDhMF&o>2VQHzx>?xYeRF!{@K~Gj
zJQKh^n8gRdzY1Ka0uQvVRe{1|DaP|pf(`E%vX(1{7qXUxb}hr~dki=K%}%XjEW3u5
zZ+xZ3$`7rjrRy9#c(=9O%$)I&zioc;4+|qVZ+RG8T^$3blH?#H;Rni*P6GQRF^M-%
znEn&suVj|Rhfm#{z5;z^8oEk<No1};&uBVpw!OK`=?@p-54fLqYkgLiGowvKU*M)r
z-~1=LQ@+^oDFI)b`mp2PcvE^xz`W9TJ^k>!WZ?PV)O}QS5laH*?azX%(jhWUBZ&V|
zSG`gA?RzElnEh_Cx(#DWq5DiJjBHLWq8--xia`DI?@$}Sz*h}AzUr<^H!0>jbI&cy
zGU)i3QTT_fZ>rJym86$sfX8dxJA>cC;EQ^W`yVU#!RB}5L&C45{?yJDe1G;bc&6Hr
zuj-_E@U61X*mmB*7I=QV>Hi`=stwmUl^du>1kWIrWZwR=iENf^m5+wHX}0!s@wrTE
zB8#&Q`0nKuRO4ezWOY=B7}%R9oPN%(mVX(2d6Jb6;#JNYnVCiQ+6DZ32S13`s+sE+
z&XJpe8~$$KJFpIGd~J#yU8?U6Y(lT^2)O+mIxcx04;!9W9@j7UR{QphLFGPR+xEf}
zWbb%62-Q{x5KovyEaJn|2lL^(8O#?nC-DZ?PQNgx#D8QeK1v_LJLLC9&)1;m6)%%r
zExE%Ui1eu|srkY0$9V1xbVfat6$br22JR%#?G+c=vByM_UG_cMrYYWGjxWxLEbD_t
zyRoG=?&yL)4mWK{?%}^W7L(1KrL{0THq08upw~X$kMUdlJjs9bf%Go)1MM%BuH>gZ
z-{+V0h0u+mm5t(^A^2#Pe_B}e4B?-e=WgT(Yn43<+KplLH^v9WXtn1>@zc|R;lyeJ
zo$M7UKZD;^=PcWLT6;(APc~K~)1ZSUzLCet!0naD_&EFCtUR~yly9ch-+At_>hzHX
z)TCZnZS}X*Y@gLjIY%oRt~Jro-|24+E@Zz5KC6|#Uv;1z`beQKM4*rKQeS!{{^zsH
zd};VFwnX8vH>lN}Sr1)oMaRiE4?T$-R$SbmS2|a5RtvIiQW>(0+EkbGA(vz06zYy8
z@1!otns2wIui@P{P5J;jP^Opj*MMhcYkp<sgfE_1KcdngKYLkwWb>FU*6u27@q?E$
zSpUa281g&<T~!8tT7X;$=S8a`<NHcY;m)dvKE>x}n5jFf&d=?f5h<Bdl_=TCvsUKX
zb$an;U{zpw9C9h$gZ<pgShQ}~l;sX}8?}d|9eqH2-tHq=e`{qzb;=s@70X)4bMYsT
zEy`t2zKMJtPOdFDHe;->Wkz0MOX29k7QqQG&0>plt84MC=apMHteBU!IQ+R=(!|C$
z9t0mxO82hM+t0aP7WcvnUHQ?pka#&Ua=}A!bKzmQl>X4GebAtn+nX!v6Fj3asef`%
z7jG(c_8-D09eKDZ?V|>}FOOIZx>7FAhD#04n79iA=5(Su9z)NS4zKGLUzg8IYkkC9
z?EekqA@41)yga?MI(>FoHP51RFemG?neF1*fUPheoY|}MQ1Z&(oZ<9)`EH7-yJuGa
z=qri9vV*HfCN_Tp8nfejm9?Uep1|-<@gZ-G3}-JV*vD4|epC`?tX%)z=osuL+jq8}
zUFMuGega&Ae{^Tg;p<0l@IJj-Gp?^ee->;@*yq$7fX?qR>C{%>T#GDRYWi1yyT3Jp
zT#S{O7c+N)D-DW|vu~S^>as<EMe0s|kI~+hV(l~QUYJl_FYGC<PcKv5al02U-AaDb
zX7ug$UQ@Y)_3OY!TSqRK@M#^_hOTMy9&$f;E|o9agc?xf-Mog}50O`U?rJA}4Rb$n
zCu@bSeiq&0%+~zqS!i&|wPT_cjN|m8e4D$ce5xMi`w=s#Wz$}KI*Xk6M+1qut@oSs
zvb~8Lo~Q0o``&-NA;@`Wk@c?Z4+9g;Axy2Xo*BTZR`b39e{iGX@AqOuEj96{t~UKo
z9<cjix_``hozka!8-_)j)|hQgYkYkCd;;4dzXqqV3pTuleXt<df}C2oq2R|wp%E_^
zg<i-jeuG-^r70)ACu<kf<k$tx)-Kpnbd|LW{MZHltX(j|+68%8yTDuD6l2e|558RL
z+6V08;VcIH-^*S502;UUK@WX<=Q>^W6P?}c`lElwzTY(WICAXaAb#V-Yv_Ny)p3Ju
zL7l<)S>$h$^^L%PbJw@xxII5B9$|fh%rnCJejc3m=wvp(Ee+uhhyYiuFaCgy!b5mu
z+Me$M4zjP#?oUmDcf>RM5AL8g#VyFeAo#d|=UA5z_#cYAmpmHR2PQcj7G5rJ(!0SQ
z4==yA%f(BBtQ?44ZKd7J$WG3hNpC%kenMR{FTY>-H$eO3NNJ3g-_dS@c0~ue@9`je
z51iLMJGUWw>NGw*FP+`fYdm=9-Q&RW4fg%3&PYUgJm|f-us(DkQ=$B`gU~^ff5M77
zYWtmDbW107eY>&6Ha7Owq%D8#CGSc+h+M<7&`uKCI0gRi@L%5YEqJM9jfdZfeVK~y
z)%c>{fw#)$a&<P&QwRU;7|;hI*s~6Kgzdx+M2mXgg#|f!KhIRWaGMj)`$eXrvO)BD
z`LPc6c_wS~qTivuOA@)ko@*;Npr3_jPq}9yIfZ7Xa7=i$fn2KP%w2c}K0frdKV}wx
z3>ZvD?rDFZ*1`O{-5aq{eiXsbTZ<*UXR^7-L)Sv_e9^38$QsWxj0ZU5L#AdV@k?7n
zi}gQx(%o|yd5g28YdOo6XHU_mVw<~o=gkKl&S;ycSm4GGcyMBc%a3%f0c$i!4vFXK
znz#NMXM%OlU32K6J9!O!_8KR>X>C!P{f{n@#1`MQ*4K7&(U{Hzdvl#8Uz@9kNUzwm
z`5o+qCiD{73G(4f*AJtgB=c7_*_bl=x_PzkqeK1no-a~#syQ9T-Z`<tq+frkI{oH@
zrvFgw?Ug+XocIjR)l0}fg|9d~9zC4?+OY@Jr)&YmI2G%@0vlkhjWs`rU9ol`=G~7y
zAX_f8(&>Nm^0m{hFs7fJ;<RiK==yDgzf|#a*&CjHA-hC2MrIUkUBbSQ{gemZcyuz2
zHs7!Hyab$uFM3WmBUwC+=e+gQyl-bMCHLy^$KE&JiQgB`R2)Wr7}_6(uIBMheS2}K
z*Wix{^yBGMs;!>&@^^?)js9}m^gR5Bw`<R>e?<&CR{LGQ!+sYJXEXd3?h99hKd~I$
zsS+B{IQEi@A4X>?MkguGD{g7zY>%cu;21jXfX-y~qX*`>bp6CF%30i4`PG_qV*|Pp
zHlp<OF!C$`uV`9?u7v!O{u72TiiX2w7vpFc-V&Bg4L$^U#?_UIkJX_oSzd`wUp>~}
zQjMN8pd+C#g|fQ6bfe%OkON~_Tl67|>*z+p_2g`8?`{mC8|lB!OxZAGU3LN+>D1Dv
zEuYHzJgv_Zy7TDFwg-*<?5~I!UShq)Lub#j`<*VSZ-tnTZ7auzsy<YQOfp2jl~bZ`
z?5b|nG_!F``r58O8B1gcEo)7=HlPRp5Z)p9#jt@3SxaA8q}%e~##&d$W$jk_eQkCf
z(RV%j%j%}YxMe^2dFN6#l;G?r|5SVj_)2GgH~rJX5nHEch|cL_&({SQxVDz&s5&G1
zw)tDlf72)3+v3X*z1!;B$Oem3@2+=O2nMgvW*A;4oYemx@n1Q9N3n;G9Pxcq`@F84
z(R(}(xhXwy9kx<g!hEP{I%kkk4<ncUY6|=<HGNG7K5qP9^+SK3z1`V~4&1dh`@H;~
z%S`^UpFn%61%tkWuc4r;{M`A;<O^27ZxsuenIy*(8n$~HjL&(zWHGfjcsEEMbBuZv
z#%CTc8D<_IK8(0)wx$fRxN`gK?e4QlWM4SvS>Ff~_nuXs+Si#PMpb<Fe5>|s%10yH
z+ukeobxzdv;_6P-uj^o6yPvVupUuovu5xbe9=DbfIgr4oi1Ud3#P%Y{0ogVV`2!8W
zHi^tMoC#QGOiP$O>?J#if8c*;!Y>{JPC;t3s@^?#vsm}m=^D>B0R!C+C6~>q;y!xO
zV!<qeKA`$Zf6-07$7`IpY!dv$<z8$}cIKJvI%@sA9BSpEJKATMt@(yO1Rn%@g^=Gh
zoHM5y4vaGz{s1w9dVZ4|Bz=ik9WuzPy`=i%du$zb^(#K?!BzVQ4&wu;(SA?x`gO*d
z8*37*s?}CDzT`L6m3zp0-veJ)ZZ7`Jg*DW5SoVJBA<f&4RrE1=us=6MjM|Og1l;(I
z_-A0*!9CY%oO$JYmvc^H1Gy8$rt^_KzUZg-!xzTDqxk()-}zSU%Lmr84x<;vcxN|b
zlHV?NEpcVW5JIQYH#W*-4_?fLXQ~bgW`dL22m+sK<|_RL*<<sw#Q&OrpK_Oa&<}Ir
z+dkZ+V{=>>$L8=m46n-8(6caR%wgWghfuEZ8tVCZ?Q_lQPwb(Nzr?ssU5)Lpwan$i
zyaSyKyrZ$a8w~Zn4?48%=kQw3rz1bkBw`54r*iXrm46pdK4p0yxRzd#*LlESeHD7f
ziUj#YA7(6-_)1J6=S&JF)Z0-1;?r#pkS77o{`14t+uB#xY%5-Fwq5Zl-?oxf{%wXB
zV`{dsGL0DfTP4I8!`B({8hd7h{0J%JQ`0QdfA9J8txaq5g>z3oRzLQt@Xg@q(<YvP
z)_mADyGNRMN0F1B!QT7``mI+ZB!RCo#(wN|(4z1=Ru1g1<2OFr7=7j1^ywAz$dh+%
z`g6cY``<Ok_rvSL>=(Om?qQ+b|L&f7SUAd<!ciU!v`1X{+?$;jzWgqYtCx8^gB{bs
z8Y%zETU)^i8D1{?_$B<)*fa5eV~u0)%Z~Sb?>@$Pz*_tJ>#3_NI7Vno@bdL%c1UJQ
zURZi$|FxYDc7TsHa(M2-+Pg9)e2rT#Ck$-D)DX=bpY~zNf4ZkoHNbXSzn}bi)yU7#
zXnZq#KEh|2nR+aNpH27yF}eH(IVc?3v~~FYMT~bP^|ORa_wf4+J|@*_xtHHlsKqM0
z`(o|z{T6T0N4`*&w_kO2?f<XTq?63?{0x(Ru59G~$o19uzs!r)?wN7nck|MkcnvmT
z4SS6vS68Q(upW|AI?w(b&xgxQ^zY#V(wlsNNOu_7XP+xG_AL9|(8WNzW!09Z#0Nvz
zfLg1_8F;$hL0;PLU$}HP=$XBjx;8A@);lb^dF!y~E_}G~kHum5h-g;wbp!2d{TdlZ
z6Y;hXaj(eMKy>ro05+QYypw%iYvI*@uyt|+6Wr&~UDe*8vD|-&Yh};}dP?egC*59#
ze`T++KCx64&%#gbJdugC#hE$qRdC8)Ll3pr7>9Q)$nS%tBlmCOvx83wIFMprc@iIt
zXsamb?ALw}=euiJ_u5WkE-j)nefwCO2=fi0r@H>MAAjY8;KJC`#02~$c3u7%+)D(O
zalS7xYJPh>N;oBaITgsWyoq}H<Ary^%S>Rz{&UdaGX=<&*1XOnHirDBNo<VdWWF2t
zCU!Q!ABpuHCZ2o*-;iLJDsg?yitU_OY%1<%Ob0o0>|504#FmykxB8XpZE9SK?VPxC
zBIj+^&GEDEBgFkJ=rkS8<U{QBN1sDhC$Q5-6x7B$tIW*9i=6aN`Ts^>MEPyiqoc%5
zx<?~-YRP-Jk9h?6Zs5D=KJ(D6oJrlT?;FkH=kiUoJuu=JQLV-EA79gFhC!>?(!<{4
zjw3<;Tlkb<<8+`)hgm<3Mezj_B3_(F9k{<Uizknu&i>72c2IJT_@4c)HRKDp&vf37
zuEB38XyK_^{4KT258fYK6KhM}Ih;Cd%nQ0rKnLP)>?zx?xcn(-b<q>1Z{<SsVhnzM
zg4nfuYi};{^~={;Nq=*Kk%eJ@f$Ghto8Z}e(oO8UY%1k*2fy!TpVv337c)Lk+0<;(
ztDg2h{`eifc+(#4t)13MEHB;E{P`Q2n*ZsBrjJJEHoY@?Thpf_b4w!YZ-@ZLCeBuA
z`b*A4VQk`m$dt-QuJeIUk?sd)`TBKTa)vnhe(DpZcMUh+c<@GFzxHZstg3T|T_3-k
zv7Tk#ci$Ookxe@xIGjDq;D+SvaDQjW!p@0*$v^!nt!<`hbmv-pl$ou*$D8m`rhaYW
zhV_2F`RN<lYo6hJ`Kc=kD%s)NytprsrBU+QqaI&rZ=TQ>@!!=KX<*+R*Qv#I5iKVh
zF1{u>KjR<1zhugux%%DSy!nQbsow8rZzu_RzrS=t$@D#Q+nd{NC<fOIbnDicanBkI
zzl0y`YPY_O$6F%E%vCR;D*(q3_x`(MT1kvVwf`gNxnAD6azmh%g@V&P-{`kzB_!TY
z{FOQF<ZK}IAEe&3`b=Eu_Lbnj*Vb<Exd(qsb;P-f{KAJ)ziuyD*F1I3x~HeksU|lN
zc|NLS4d=T2E4$&*2O@i>?o^yO2CRkO5uUT(To-QRgC7Uqio&;|2E3^X_*R78X6<>$
zS&9#vZ?2E;K`wvbcFD$Ix$r>rFeyw-0RBd9MT@()ds0{1#CMdR5>GUj>`d}bqIptZ
z0(q|Xe(9gIGvS}or~c#*uS3RIxlCN=bT4a-T?}lx(d&t;_-#BcbG70Y(C4@ED)H^d
zGrhwrsZ|YLn(>(#{&?m<LFJo^s{5Tv{PpyA9$FLqD&NJ*+3uTdE>Dtkw5m4x-X>li
zk8lonFi0%A%%qL{jY;P2K+Etx2Oeh>yO7=koDKex#BF`EQ)T?N`E<Uvo-2vbIOc61
zv}A(oHbVo%*8IojW1Ccy$F_Bv86Q?V<}ae_noPRm#`y=H-5QAcUai|{UTxTEM*D7y
z1c;rfeRAp|`M!8W^M^MZ&aezan-=bYl0KhN?mqNeVB#e~lP*C&|9hR)1Kvi4$V}<W
zli@q3|B~l8%Tc`V(b;C^<#SAhV4|EDbOy=Y6`^!S@ngFuKJnM4;_?OfY*|;UzxCFn
zC&%!&vbJ|Ij~zYp(o@ak77H7Evl{1#J@7jDQ}M&}p{s*mGjH@?@WaNKL$diJJ0r4X
zYd*5m!4}OlTb#od<UM4(-V5Fg?w41`U;PVHaR$7|_@^EVF>dEUV8fa$-jAQ+!2HVK
zEoOG#)z$I7DpR3*;tjTT0MBgT8K=ofCmUHa<{7)iolA=G8<X$yGwjZ3CNb9p>Enra
z?x@19T$jzMQ9Grg$?GF?SK;GQ%s%)LVD?1yRl>gvxHp~L%68;N=MuA+JgSAxUFZ$0
zpLo0T)KYAMqOQ`s>Z?jW?By*7+N$pzoVP4|@o>k(n`MlnHj6i!S2g%z^HP{s-W1Le
zqFvwnjn4b)9>+YXa~U@QGalTH$A}*RR*Sbi3z&Z!^zRV4MCYrfwlwxsylEzOHuH3<
z`ep~m;zz(YkV1y?I}ZPU$h^$?a@Y?^bRpu&)Jt~x(?@^hp5uays{k*^{h@8ePUxRp
zwiSM4ZzH%QxSv6X3^VT6kgt-_Blc1Yl)S}dCb*(wPiAol*;|ZHa}NHrDfl?2z;|o7
zUt&sEbnJHT>nsWJ*v_2i-i^<SH$)~3*6+jvv>$GY&d^%w(ndA88D9Qka?!=tQou{T
za9{R}C~$q>4)pRF=wlN&qvRy?6@iEE!l$9Or6*gw<{kL4J)=Z=vgk0kFX&{SjiZ(f
zj-&3rl{jiZaa5g2<kl9EE+{=PH;yXYZr<akrmW6XoLb)a_5Riq$cL3b%)A&zE-1g%
zqan#r^`EQjK7$Os4miT&y2B=RJcHhx+6hl*4No%m6U<vWP>i~f(&J<ocpnFSSopJU
zNw}{R{8>irSK&{@T)>~$bl!vi58v6}T0*^`5#LsAT(=GOQq3es<3o`pE8$&Eyef--
zCwSin{#Aj0>%e#MJ&ob27u|8`_ZwWl92^Ta`4+)rh~2>V(aSdDcMWELhXXF&ik~OZ
z)t==Zdg(strH|P&fhKnqK`ROP&xv*uM+WR$i3~_CfG0A>81S2l4P>%5k94C5ZLY%}
zLQcmcoR1Y5Zz{F!?c>ekJGAz|3;QDKV{EB5VoAVoCiZp4Pd*^L>ITLj{6h!DcgFtD
zp)kzCAdv&ZI_4@GG$%8&BumAA6szeVU%H%}4y}>aO6{ozFLH8U%_ZcdbTbEDYT@I_
zNbxM>q?M7#N>5G_6Q0>~4eMXa`JJ+Xfs@`9A5KuGNqDLJ57C$MC#EExEfVk5^Te2E
zSsYK+q-|fcuQtTT!{p)Gd)fLS>>-cK=c{}6x@1Q7+2o9xxZ?Vf&*5=q<`U+$BwH&)
z@=5xq<WuulYG3}&N#BDVa*kRd_1Ii~$r9BHDML3v?lckC%TOysZ7R1v0{;~6^dTc<
zm-&#FAO11#^bU_k?lj~hR98j{1C<eYosFde3)y_Ra3F`ILb{F@Pxs&xVGlqRar^eG
zO}xF(^ndQFZruEbUfg_dUi7nD(NFF~7e7z@{5<jV^Zsp-ufv0<M&?EoKmU$u08Z_C
zav+BO!=jD?V(6RliVy8{;x7|Fe=mB?2IA+jY+mgK;^*(>nImIOv|~da@$)?5=flb~
zroie?yff-b;F)3#bK~ZRgKpgXW5mtBY=(Dz>=JQvo$=n0$!rfr3ZqMQpSQZGWWt|_
z<4j@wk&iCkNgrZ8bK#_Vse*^(g78H+aq@R2onh@$=w(UtvP`e(ulpADP^AkgHn%%7
z^VzHnP^=iA@PbrUuL`0!bwNjomokf0V^w(gzlf)59LxAGJ&*N^Lt7P=PZOVzz9@d&
zEM5mKC8De~zxzf;7WN@$*7AGcS#Vf-qn@`osT`Orj%v^UyUCiNyj3zxw5~ZzmNn3a
zM>ihL%%DAQ&dRsYv#N{qrC+!*HT-&}Lb}WxzJJD?mFICa-^snh1>=RI{)^|hFBm8X
zIf0CkKU8ZI03NG|I~UQ12g}L)hJW6vwhX%ZNR0^`hlkEgjv}vwHgAT`ez^GNbTPm4
z^41)HH%v&v3lFzYcN2Q*eJ0SEfL;%`RCo41Q`?EmNN2E1+Zn@|8gvoHp*(1Z`b^%q
zRI?`IXRi!C9LbhOYzfhC6X%g_A^)Pjba-?<c{*pH{UrWL{Ja$jeC_hdX}tBd!=gu_
zn-PpjItKM8l#5+{k0GD9E6eA}L36G(m5wuP|3BoLna8$p{WE4;$!GALeuf$tp9yU1
z{WmAx0DT?$wiEv&y2#%yC~J}LdPBiai|Ul4^0mC;4RM#guFld|!?1wOTNiy@4Sju{
z{FJ)S<`p+s`WjWf%QxE6*KNMQC}IiaO*uL1SC{RzIqP|!P|o_OuDnl#`sjb$GGD;W
zS;yAtCBD*Ame={lA`@SqAVyI(k6b|3ka@pB+*2_8<01AJ{K~bnuNp?aIyzsKkGz&M
znZ;XKOW6R-qq_$?<qdKGk7AR2%C?2yg0_yrr)+x*m^U!hTHQdslvUkX{Nh_WrKcyq
z^mA8F#;@Fs?iv@2sJYQ5y0*GA`oHw$;o!!wu}-JvBz>8@n-<jyJj5C|nY<ODtlr#{
ze_5xeJO9IR7q=e)_j=J;Ts(cQ=u`a9-NSYx^Xkd&ajR#K+ic-I?IwsTg^|O;@jhhx
zRb1B`!@MuQiPfpHetzM-M}Oz+{px=C*j+lC(A9bt9S~XikN?r%YTr}*WQZ=NHtUex
zmKWss{?(3jo2}*N|LnUCG^tvdRxaaL)_c+qy_yWtE3xAT>4nOR)pP0Ww;eD3jl1Ye
z<9#pR;w{n#e$F$BU+MXuWxpkh;YYK?Cqk^9?@!DVo=6OL=6{FJdHhoCf7@$Qda)a0
z8PJsz-1FKy!Ee<R)4VLKi1VC;?^?NEGa~w7#vJyKh<^VEe4pkVIrz*${Mp!%`zkqi
zPI{QmbH=y5ZwmR7_CMzpe^bxzLB4bS4Dsc+uHt{su;?Lu?->^DvEPB{%wP7mhPMQw
z*XjEK_?51g2BN>!cQZM=yZDAbHSk|LMxDN^l$Ss874xA;x19(3qE<d&+Ln>KzfQag
zJU_vFQrEkF47-LWZ?<}r;QtVFmR@LUzchce51zK)LC2Qt2w&&=*zIr5F>YK^6K_P{
zgZF)C>b;G9-@^|XL0A0dagArH#R=KSVV(t7D+b!(tYOx2klrr%dGNB|KX+}GT-{zU
z8~R?Oe|U5aFbhAm>>^vBi8_7N&}(B)Ai4%P{<&ua-=S@XKYod8rO+#KSZ6fFu=~UK
ze=Tkho3MBRuaBK{^RaWUW3Nt@e^cj*7{P?NRuY&>{+49zhs<6-`@@D&Z$)Q@49B;f
zPcC(S`I&}-Y%aCpZX<}R<dIW7vhzIt?Q_J}ACZrHvgzE64(ZXnU3=^T!7p{Cu|Dbu
z_YL-_)=#vx4nNA-6~nKp1rHnY;1lGr$u}NG7AA+Gquw@i&dQpZE%KXEW2{o|b&$6Q
zpNgOCHBoq}jnSpHy8a{43FpE0{~dP2%32d$Lwpdvyux8$$ZBM91Q{7duHL)!hMlX{
zo9I+(wA=gCZd_gH-Z$vA_i(>HTfcoB`j}V0eR<F<{s=Xw+0Qy2KlnKILod+#J=B1F
z?wLqYYrsG1IX>vs+n4-kUOIB(GY2&09_lSBj=7romXa^}l54YWmwhbVMC<lwz@#6;
z?qbchD|V?ld+q4H-d7B~i#=G6p^qnlWtg$Tx6>2vo!uuNpYX@NPrG_2$i1VyL;vXz
z@AS@a;*VbM#Jhh2eXzIqFnQ~*BeQ$;Oki?3`A+4nQ_Lplul!Q&g?U%@K|;1GZ4T{^
zwcl=SZ+vuG_kkQ{?1}!yo5&H+e#e`^t6SLrG#}ghR&4Lv*#AVXNMPAP!CCMuxC|e4
zQ*Nwt>Oid1XQqxad_33$sQsi^XNooG#WyB+_l^OtfL9%B`aRA^-VI!`@lFeK!Dgyp
z$hxd124jG`^lh*I`RGsoC;iufYwBO)_#SoHF4g}U=+yQ<3VbKt`eFKqmgDuT88q@C
z;i+Ma`YoIc^ILXCh`fwNoJ;i#vHvhS<j^&MpKf<+U1MW{Lk@G*yS7c*d76HR*;3=-
zru2I7Q#IO^(-`5o)yFbBw6Daw-`uoT`_bqFpD1%lr87HJv*2CtpUmv|D)+s$(O!{i
z&4)Y_={XTMr(&Sq!Mi<|Lcag!mFHXkgOB*crEqcJ-Amx%(0=R4Ewyx!qic9@Qu_mK
zp$B*{Q=h?pt3wRn%<Ife&r63GcxT8QefW0&jd81HjGooLYLCATjT`<~)$qT~)K1)=
z3Ha0S!0ipwU0r5?jwbu!+LP-y>$)u;{a3#m>uboj^%Z;ZtAtsb<QZ_~|6}d_<D<Ij
z{QomEKmxRd5`F}N%}hdn1>LIr2q~?(N!n72+AU<2w(e#^s-<Q>+eNGeQq2T#tBbp3
z1Wg59hN5ee+E1%3%Czow0JT-rwxF$5SME%prHk4h6v#lre4ej!=O#l4)&1`Gk9piX
z_nv!xywCghd7t-rFTUKTgW2BK@Coh-W|zE2IA2PBsZx9m9X3Dc6y_kiH<&&7Y%qIj
ze=ytkVleyly~Nh$`Tum@E2ewXhc}gUgeI*w*fU!1E4!|*a}&8Ph$FsfYbfxB=I6v|
z@<j5>{nJHn)bZcKmpE6oNq%<Ae`5E2Zc(cEo1feY&)Bw(*dp}rFg)9q{iW93L-;<=
zkF#d-a5*vW<;1*~m&UH9%s%Ddb+;4ihdr4)5U}-G7+rHs7XJSRzSGV2`_TCo7R0}F
zyB~p;sb4Tjl(HuA5pa(@ly<Hk^>hs7PfSfQvuz*VDLZsrT(RR}zKQaUd$cZ_o_P&t
zQJ5|6o%nZ3d%v$fyFI}8t&T<H-b<#iqvU7N^Ap&$?z8xLh)ZOhmGR(XY~Vbhm-;(X
z&~x~&te@r4TNXED-|9hUW1efi)gZfY->uxY5p$4&j+@C-GHK;X_TS>)Mm~#gOE3L9
z;so^0t*!IoF1b4JvnXW}(gDza^gcmO0{^=NI@w>p&3EcoDf7xYMeAiclZ(Aa(%-h<
zZ#L;&>@wEeO=_Pzi#cd0j?1T~{^oM5V_yM3Kn5FkYCPA94`>CyHh$YpQu`uvdkpY_
zS70Aag-^Lx$Of9)-S^YJ&SPU)^JYx@e%#lYzLha?f8EpAXUs_$c^yEHSbDyh8<~M0
zROf_L29sfUsbFzzEpdz+i)$7uZlbb2c?>v!Pw#Q@<=MI9TpT-xIOY9sExvFLj@r=~
zrtlz(8_3eCW7I8}#)imD)?(k2`dh`hd2QPM{&$}}Hz>_GW8^OB&{@mCi+$wr4+66+
z_2|F!5smfZM`Qz)bl=E3@uDbg)Dlm@Ts7){y4|sT?OCW8t*PDaT92NEx6TydAh1Da
zN|dn%NcoeLIof2<tH~)1Kah=>8f_kL3z_vRSpT~vWR5uGqRha@)5vr6`9J;uoKEMy
z_YhafjRky@UO-=<C&5WH<kP?u(NX~&xUb}9hc*A;KYk?TJixc{y8SPl7cE@Pvs_6a
zYv*N3Ad63Rw(QY3YdBfvSulz?CHP*ZcK@9DPK?HO0;UE$$dnY>^&|b?|7d?FhIZ9(
zb8$1W+kLt&8TgE~mCHnXwtetUW8C=~W2CL2bLfJ50rX7aavHl`YbMK%<Qne>2HHb>
zv<Z4a=kw2sRb6R(1$E4G8vlUmOfhHn88qszW7v0^Kg#-Z$hv5D->>^SPwc7B_C8&o
z&F-y-zt+QF>*25Uly#CmKkxZgeO7TZ{vOZ>>sj!BV8l7F`8A0@)n501{P-^q&!%=q
zq9yTrfT2TNr(pI7`dc9k*Srl3zj~a#*35Ytf0;kdPXIUdOSxtIe*3Wa70(9R#W(qP
zw42Je8&|vd?KIEo$8B%Z?kfCEZm2$4-e;B<!($@gZWzC)cnX_mrf6?!&8xY`cj0qa
z-?s8h{S&Sqc(t$dp9}kuD2ZQ1Kg@?rbu+w2I2Cc;5w8|reb7`7^fy%!f3N!cVGm9p
zQ-5a-;@Z5o>2LOUZcZz0e)VAParqW}n0<zO@xlQfNWV3Pp}bFgFS|#+{i)p-!P5r%
z<V=iz8=c)fRY(5vx@0YT0}|Enms5&;Fc*g4_m$U&=Nay6mxbpId>5M-&#)Ko>wG)#
zEHN?u)x!Vo#Q2w0H*KbY;~(<(mp$V>tAkcw$v>;iKVu#iWq2l8q&YkayuA7+!p|nf
zA5i(V^~u<KpuJ)Eqxvo0Hm(!i#&xo;JcFOqXz!qZueyIn-Kq=zhkTjX{VH%#Oupqi
z6Z5hE#3QD8ruR!}`^)U-(*3rIcgO#Z|LL(h_jzLXt=#LG?w9EKxC!?DZwj6-((@AW
zoQd5x>Yl4$^Do>FHx|A7A$>XyPRl>@DE&Q!ygP-AQ*7S1`7iz^yzJ6g;0w93p!{St
zxtT#?2#`VAdsbEtpQ%rx=T?Q0#~u%!+&x|6<=rXXm7B8G=w+<i&Sbps;Z(@u!>7<&
zkYnG0#u~kOm<+v7iaYc<Lm%2Nb>56{Hq}yc7jA*4wyo8;CwF(CgJj@sr^vmaHIsA*
z88o(@eUWCpOZ<8hYujXDZX_<d`%6C*Eb63(@3nm!OW&zu6m9r2(#p)XU{Z22cXV`(
zLt6oG#l$YPF~KhHByYo)vVLgR>~j~|c#TJmY}nTPJ^S+bhCBl33iQpro8LnC9dfGH
zgpNd!f7>rMJG4JfJUSsB+ls%IvXV(XJad7Kt8ckixy(XxY?6aF3$7i<&a=5wZ#Tps
zOzfU$%GMXd(_<G=58t7qN**2&45UA%-XWP-V(n(lVK4kWflNHgyuW36*re`bx2yhz
zUAqtabO8Jl@MPd>@pQUpi>p5MQS+5<85>V8G}+4pSNbPdK1TW9zH?sn{P$i~T~__>
z>iJiFzWT|l9;_}KKehTvQ!JeUyr%Bh<oJV>Rev3Pma0>_t8;!}hsK<jWgC2%qd85C
z4a^a)o&9c@XUy|i<!CpH&riD830;BRF<prv5Uk(Seao2m>$+|q6aSO0&~12p09+Og
zP42!!_z%op(L4Gg{I|Hj5&FJ>{%xn9=W~6mKIxvvbtYH!yMShf9Rv0M-pX;lA5D4a
zB|6^w?(A`#JvN^o9r?1ykKWW3el+x35B}2Gro>&!q;m0nfg<y~S)F*ZR<trE&={3o
z>s+ioqgI!_9NgMo9N01NZFEZfdA_X#zg^@fG|OI*b^Br$CEjeOj`v?-X_$GYo!FH4
zk11>Ql_#+s$nW8j-=nP^yP~{<e0F?;-uC`?LZi9+_qo9xZz5;xv!6ikzW!~$m%j6)
zlQi!#bG~+}eZSf^$P1T#CeTl`zUOX4Hw^{mIM1Maf~(47Q33s?X>$vE0-Lui*njd6
z`Gf1%Eb6HG&reDx>Ogn)^zf4IE%fz0d@H;R!6%IA`%*K$2EpbqYa(r9_mG=Ix@C#Y
z)7wKE-#*NqG|K;nC##<mKP3-S{6gWk#ha<!f5rVjuuh<NrNSNLAok)E;YAue!ZzDb
ze{g~I|2i+`X7AKH>ePNqpH6)mb=mu-ciLYf-B-NDu-`|#=w-fp9lb&PTKevK)-b$z
zgXWw`@xADsp58LKdo+F8YWozd+OxZ_Gs!)?bwgXrgt%g0L?8e8N?)gVnASLYipJu*
z!pC%XUT-g2*d-X(nzAF24O=#EdnxyLJ3fx38#*?pp<(<Z8{}V!iKpG_WXZ)mMSJwb
z|4xmB|Iy!JX`S)(2*$LlKJ-xTYxHAa9I@%~Cm4s`jT9_tD}CSfUEsp=+J_rK=N&=p
z?K<QwXP#EUb6Z)@ZB(E1&3wr>WP0;hba>kN=pM-!;>U`6$zkEq`EJ!unZ%3M_c6eS
z1S9z2h6p@f-}YeZS)R@K1b>Zh>BhC2>$ADX)t<&t2!|hnBZhcl#Q>@=r|C<ka!@yW
z{^7IifPuEBcB4z~Wlc6_mOt2~GlS?q`c|$_`YS#U{2oL78tB{uc~J)7mzorRKjSOg
zf5qHOftRoQ4%OMO26wL2`WwG(g4KHYSvd!cab_Mf$qRs6?0Bv^y&n7Cn3*#;LoE%z
zJjDEot}>5d$3k1~+F-JMZ+M>IiJaZg@(lI><tp$S2UypOf*<0ust4J;Q00|#W}v_B
zr1(4N?~^~To?A(Oz30%FTM}QXKCpL5uzX0cM2GS9^3T2vER$Pva}I^-lTWeM=T5kG
z^-sQ>YfOOqC!U6%zjaN&dz2Vt_RCKBFH@cQY+y0GZqZT`ARj2_qpd7o++Wx~GdX??
z9s9S>+&7oliNXGviSfUte<tho5C2wj&5%C+&D-?xtD8OB!P%Uf4If)1`w%|%$x`wa
zc`$&#h9}1VVUyV;ds{q7w)f{>@$By9JYNZJ48SowIlh;EKDp<SK{@P9j{lfv^Y@g`
z?Hpw$mO(qRHKXsAu4<~VIro`+$~d!om$g|e&cTQO4LaDGD}Tf7BnAq;?zVyh`*X8D
z&vUnj_(piL{2(#(C*vrFn*AcI6K*Bn%V_-Or{LYh&MbF>A6>l$n_Ydsmj3EliZf@4
z!EANE^tEZX%8voePoWz#AIsSXJq<l8DIWY4;zfL3{4Ty7fJtgf{Br*P`ZBYlEQW3&
zd6t?U7q1F3KW)ekUtWawQ9rN^NR|QH40IfAPi%2(@nbP2;i4UL$(S0h``iUQ2iIQ1
zw;}$Tx|ckNHzJRT=UocyBl4F??uDJWa@AkVTu7Ga*$DcSUWopgmw}qA2r(ymSEh2e
zd*x1U1P;LVC*<lVlyS<@n`Td{%Bzg7y<B_lWX}q?n_1gX0}Ng#|8>>6a4GAvvTaJb
zzi9DcV)ql^Vu3GkLp{F0Q}Y{=4)li%Zgtr|=D`pfC{`MGzzg78rSW!h-%Q=QkA&YH
zui<~&ICEi)F|^%%(I-a&<F=C6v~<gP@o%QCh_{rOn+)%?_d|Qo6}zzPBGdRXzR0DU
zuG_zR<<j2z8GAO@6AMuv{^7KB;xi_wbNS+1iRbIUmrA?|>oI}udY-j##^Ih^ZbuV#
zM(8}}ONRg3m$l4m=qsNW<GK2kMqV7MHrWa4H@vrfoLPRT+Q~l1K7us7N3hr~xN$#J
zFVeej@(z5xsl2at`Ss7B6U=8m;J3oJT|Y8&=QICp<O-Cp<1lpVwqobC0Au{E-~#kF
zwL1=s-In^KQwjZCVf{ZFB8k#?3-UFgb#ulq7)Mg2@qbfU{-+z@|MdNdZ+Pc&r{S#u
z;F8`CZ_kaYNrX+cl_j}R<g)Q>x#g5i=dP=%<?I<Ve(NpiG5BYQA&(gL>GcG%5n!I)
zShQ*zZRKW;tEqjC{GhYO#cSbddWQ{jWBSEVGF>@7o_h^%{ho0(xzLDYZb2}cYY8IL
zV^^nJ##5f__WZRcf33XGdk%j;dLlqs=(4!(N>}lacj6bG4m|_ARGF!E+ni*X*@oZL
zeDc<kEt~QCZqS-MYwjCP{Ioth4SIAht;=4+`b%ipZM`j8&k1v;J@7a<A31}}F-JTZ
zACR4ZzxN<@XOI>8t`5A(EM}h>awG78$a+JJNIkK$F6&<|&kgHF?&4rlbEa{B?4f=u
z>!W?-ecg||8N)mQJH_AIzTt<S;*c{*zHN9IHlFf-Cv%!()|jpR#9RvBUgp|^?pBA-
zxd+}N-RS-BB<T{VKyS5l!T|kK*~|*^Af+PfBg}bb1%01cp9Gg%*GN86M`k8+=b4Im
zx=({QFN(JbPq*Rg!9LWwoyM;B4*%^vJoLm;*0G6ORbK<(`LB0-eqY(lfnZ{vWOf+5
zg%~F)j`#n<pCwBi{3POyX?Wh!_HA35h}Hke3+T7Gy8WuJ8GT9k{vFCkbM^aOd_B~&
zNVHInULf8z0U7ASZmLrhH}X}}9_uTMtllA;n0bth^WfH<hui&ya9ixb?UZ7Qe7G$>
z8*cmg<}ZQU7xHjRbmI@p!%eg!9Zj%{%GS>R=d76vYgqrz-2z{Q*Y-X^9tix?n)ABQ
zHSwhzH*eP5M}dRpUol1Evxjtbp=olrRWMd~)}TCgrpDj>GQQtu>yn+s5Caq9&B^}{
z9CG7=#Ij9oUE2k3A*U93+3-~ald>yk%{bjTtF3%-ZD>ks^t~ThefV4KHKVNT-d=3k
zHES2IuKai96Dq0F9#FwLB>2NWn&G_>=c@QW3$BvC&>ZwOA#t#1uEx{GI4UTc_4$!A
z4Y@G2`+dMFfG(P@40!yeC6IK!=<%qC>NF+syEJE&9uIUCTMADy)a|whlJLq6CRP@A
zUt|v3$+y7%7ts`6yg7Z~qYIvwOTXfKL+oDjZQwdGwF;ll4FR*z?ST%O%p8xe{&aKC
z_PQG3tz=%hwJv#G2D=KrdWiqGA$u6->w<d(7>i#E_P@fG)BW5pdGc_!uCy^#<G;$=
zSGR_80p;<(bX<+fW}XctFJ+EYpZ-Tu)8f17({GTI1JB4YUP@g9|4o@K^Sop!HmJLi
z^&P%(=OY8CV=`qk&o(4$LuPq2-&d2G5RbV0$mggs9I)1@cg6u`;Jv+%vVH{3NLTXy
z^R5M60}be#dg%0VzVq$V-Hhc?{crK!XZZhZ{eN-r|AYKrHH*2}=y>xQ3dr|3*M(<>
zKMTL3-v5q!{nfo-(*qoB`>xlwu=F-`rZf6x(4iKd*|&cg(zh?@|H8q(d~V494*uWF
zJ{vcLjwyer`t&ZZPd}nh>dzjoFI_=wk9=?7wdCkV_=A~-JQ)Md!K)4YM*3V>alPU*
z^vm`?^$rVL?HRQ1u&D)Ga^Fmpjp1H`U(&)h*qs5+()XnQWPoRiGveG8$ZldhU2=ht
z->~~t@g?3RIG4&BSFqdi66|)%OBk#D53kogHWNdCreC$UlK)~N_%0bh9&`DeJ^{T+
z7A)b~!}nHh+-{iXQ1_F>kPYxZ^uPhRvB#4e8~G-)2fQmQkQ>yIDa*?Z?j<+gul^!8
zlovg7GWWRR6#TJhygU5yWQ*n&!m_5lZND*7*QfW7W3Q6aZ-`}<uHfcE$p|p^Vsr+_
z9)pki&+YhSmtJF*FGHR=`E_CDV}o(<GXZ~po^sHQ#cy!aox(TRi7snU8NLt0Cj;T#
zo8?caqmH@_9n(V0+cxkdf*cQqcWrLs-RF@_!VLp%q(wW>QW@nA9Yx1m;C%Nf`Jm{>
zHywvPzpQJI1;*G9#36KL;3Y3#s$62|QM0hmu~mw|e`s{k&t8XbBZGv472x1h;REHS
z??cxEPmN?b?WHU0Yt+}N^rtpdc4QfPvusy=H(L1Kz<l#v_Glpcnb>KqG0`vPiaAaY
zU$5A}#L1$$hghflHS;6djxydXID(%#skS`1Ftz()=?lmQ&%T@3eL4GGY#)9612--F
zDYFV&X$SsWow4y4SM}kK&r_bbh>rrF7-Q6Y#^6Ea;cNR{%{6n(Snwl^tGQ3O!o1jV
zGEbfS?}e_i^Wp!DP5f;e@n{vqcD;B|e3v=Xy1UOu;hB3kz*mrMDzCCXx8+K@f5CH0
z^Y{u?&)_%H<L`tQi)SB17nOdIfu`W!i_*x0o_t-0<g+Vi=R0bLatHTtmUuzA-{$4P
zclExoo#^!V1hvyLK7J7YZF*)sV8pM_emr+dJ+gV%)%YIPOCNSC1KHChyROz4uI9bk
zxoF+#52>Bpz5O4`wO#n|u6#T9Yh3&DFx!uAgpIcCX>7Dpp6|7gM$#vo<ac|4G36cN
zWpks<a^>Jb7het>8*>-1w_GtLi@|By?yxW`>2BxxF3ENL5GrG0ozuYiq+)aJ+;M-g
z-sgE^M6_)6F~&0tJqI(n$H(ehXh`xTAlsPsrU9R!&nEHg%hauQ1b>~qAsSHmzouWG
z;oZQzB#@DmE9RSlXDRPlh-V+AYz%qkB7faG!KsZV>3}1Wp*dvpU-7;?WZt-dJssAT
zn2BtKR)vE(_#n9YhD$8I+lD-&FD6XCx0|f|4R(zMy~jv5DdD?3EZlG9d5`>c@FC&8
z_P<+xM9j4N&>(LT-?sG<(}7=&I2L%v)A{$D9pT=~y>c&ezJ&WozN|r)+Dq9L`L=JT
z?d`~>XL%-E+K;>x-_G;8#368l|Huw2hl_!sVn)*29caI#dkyeeCftHISs%n=bRnM0
z58=+NOJ?r&{2<cBdhtb!D6U^^VS;}`^!^k0kN88>#dma~E}LCgmu=*k$_uuU(EXd!
zz|+z=?FwHb$~j2c8z^V-342jKWf!}U{0vE#{UhkkNi&l^-|k(T;Cs%-Et}=n(b#ik
z0Z-S{9H8sj`I`kSzU5@Ctd^b+ADk*#D4Q4kvzGSE6!a3>)_;xta>gFfdIbCxd6%sx
zPZNEOS8{DP!PZC#@l&OY0~ui8nU=T8ZpB~or-nd(EwU?&?6Ue2yw2xwG3pba)N}Bt
z#`<xd1P;UozP2y`5A<>oxHksKw}hWZx;cHy6$P@2)1Qw2+2ua*b?gV~(08^zcsBJV
z#iLp0;TwEI;{yFpk^A)wKE1%PeEMeAJq3p%_H?_m>XNZ4{@>0TA9`{i*12!w_zv=u
zd-6$gDqwjOW%n}{>~;5P;5Qan7RWOz$H0r}uX%GHW^aPdnn4$B4YP)lyp%S8aRs<r
z5ANDnZuW21vR^!cFD}5n?7_^vo-QPNq*CL(F|Xq+@cJ$p2Hx5=Mk{mBGu{G**|qiT
zzbfgTT5M*c1Km`zWL58D#GpqjO#DLX$vi}#c^|-jcVvh0o$`ldLu0CDGB48g+afQW
zq5m&90B)FQJbkC&8#vO1JXhVd3q9Y^7S5%S%mDVwXO!HqI{a_sYV+kobXxrK`>apY
zljXp$0b4?Scqh+a#wRMgj(sgRTee0^rGqVJwzQb*<A-=B+$%y}X7-+qe|7ja2JjF4
zKWce!?F)>TILC?IZ#{`DFMyH7&oc5Kq8Ab`<I$aHWeMYW1-gTt!c#r^(pVhE<@h=3
z!2?TIG3O2Pbtkp|$<oydpRR~q7yaE1U6HfKr>i^Qwb2P@(p7eg$u2?`OWzf(h#o{Q
znh!k#S8aX{;dK_iBAU=U`jiZc9-s?%3w{^q!l#LkyzJ3LYVBV}6DP?(I~+|+9Zf6%
zW5}$4*Wl-90uGY7MeE30S8lQu%wJ}Yslm^+`QZASyNEM~mzXa5e66VwPdqv{&~<3-
zwOu`zQV(#u1o{H@$s}uYYLjs+_vvB=XBae-i%K++c|<gZZzxX>&B`k{3_UbytbYkT
z0B4^blI+VIN)I2To^#Q|DdzHFWZ+4z4{;TZrNJxFV{N|u*igM2nmp?n^fgC06WB+7
z6xuvWPIB#sp15R1@8jAV0$t8jec-ETG9h0X-yHXGn0Y<}hnX8!I2;9s=^Ol*J^0|T
zgX~~`q~Q1@e7jJFeZL1>V_vN6n#K3voM_F;vF+E?xOsUc88#h!)f}a?zC~RRO8y}u
zZ9B;QcLNK_p9K2tDQM_Q`f1SF@exlMkV8D5&GSR_^-+}vW^W$y<}44N=LTX424Ob%
z%!8TTdoP$RMo%3Iv)`+}VPNK7dSi|GRZ;bD__PbYH58w|o}b$-x^B<OjvDBPboJ%<
z*Cc!D(2eH&Ky8Mr%su6cr5kTOHK2>(^BL5|{`fCu(^1}8TW`L}zQ%XyQP6;N3+6j5
z|K)t_j=wFMi#_$Y=&Z0^`NqP3cV=JycvAc3kZbhiv+`AQed0e^Gd^K;KGwMvBQiOj
zSzxkr^nL;J-7_}+jVEcFtKMJ1^Dh>bk4}zP@$54^bDyeD2Ee5z^xx<urg79gpWXio
zy4;T)6OV8o;c7V3(0wYH%q+WPXTA8qvdB(wb50M>diDmBhn@^3pE@?!&&GT|H_*>V
z)CPU{7w-Kv?+@_)>pV|?qz;)hsrxeicj|u&Iwb!$Bd_B6KNFng|5y0Gp8v=e#>?7=
zJ2`$5pV&P-V@+^hKi3ZAE&1p^`6T^tbD!U5u1>s(u62Yn@EZNN2>riI|7+LmbH;h^
zmywglkAcwp2Nf54--dmukoO))Z&uv-*VG^M48ebTetb(9(<+{SjXrGRIvpPUC0*g)
z8+08J+xM?rGnX>X#r4{=d}dCLypOjq9{@6=v78*A3HAw<QSXnlw40BaT&J;Bqo;ve
zOTeuYvV*}VxAENg6#JVq@##T}Pt(uvdmg*!G<&|$Q}Juc*SXV{nS$J&-2ErsJ*EGT
zIp|lW%F+C@))>IopWe$^IM9u99e((pK-p2|D@E=F`Nfs1#=m!G!mk+1NaVTZG`Bk3
zTe~u>^PQB-t#uiC<W<!3HT?e44`x6|F73&GG?(Wuuy4;`i?SBFkUVJ<+{a9^kG`qw
zRLb5=4l&N=S&m(?p+o+T)Wz{g?5cQVd~CB{ZWQHIMmQ9vOaz~w^{oNRFup-OkHoM!
z?zA=q=Ri)4>$$rk|3AgMyP@9|@K1b?@|nDPKDZ)!maYMx_1ik~MSN%T&1~7W(w+S0
zvdenlE!)t8sK<`A0-f*c^08u<x_j;Z<qO+clOQg|)-4#h^f3cpl^>ZpC&(wRHC*|}
zrHk}{2Ujvj>eqbfAS+CA9(ZH_qlfGNZ2rrqKCmVMPl_@p@~O|{TgJaZxE)Dc5kDW?
zioKWE_e$D^-hK?8OEw`#H$+0j|H513vvz~{QQ*_?_Bn3DHLJ)=v^@M?<+##$4}<X(
z+L!R{Z?aYf{$RV!R$V4>+Qu{&@;~VcC*K0su#;3KCAiYhGs^Hz&$d&p9r`i9VT}?V
z#9S?^<A>hT8X@+{z`N4$Cj<XV!_UOG#HT8jg?Db^TgGx>Eo+mz{&*(teU7=4+)L;6
zTIu9r^1+JlyVzA;d<3}2JSq?P1?2u#Zt-!-WeyH$FM@1T?(w_fH@(kzwlR2RZP|?l
z_yle_vZ3Xl>m){S4EI_;yr*rW?>opb_wJVbH?niLf`i}+<K35`kG1Gj27jF~x12QZ
zX04=_@*k01fgW3W(`xYtV~D9=%X94CutWYf;j#DzI4iy0L7&!mMNe0Pi_qOZ;Z7DC
zUiQlx&d`hHb2o_g5|fzk{n*c(f$M_bhrp3cgX|^tEVZrLNgj$t<j3oJS@XD-cE%d3
z6XwtpWha4&*$n=-9QtIg++=ga?n@uO0v&`s##IU8aKEa#&(p{h<|Kn`RR4~H7nxh>
zKlHy9`@~(ns#iQEbF0P~T<@-~=?$-3)oVB_BfPSvmwAqB-?ZYBVp_WkO(D;VuBG;R
zoO%2-GFyII!?+{FFUbb0A7b;S**7>~bI9gpyqtpq%qDh!tc_e}>){E+q_TgmF}(#_
zO}<;~VEOud`!_6ma}PZGKE_^&eUA?GpHHxFIcVmlJ00tPbW4IZj>9eE3Oq+adl}@8
zA5SypG0u+wM$#1=U}VR_`?>5-=<I<`H(GcP*ru<5%Z0wyfan0&D_$YUT>T?46sphR
z+^RyDKe66yI({Sk{GZ<6RgTZ+D&@V`d7)f)t+~NItIa=CPJHFT|2nz!b7Mcl?;kFD
zz4FeB&SURlnzOo6e@CuV_7Cd}Qsw#g&ht{<{W~xEw%seT>fczyO^W9qWS%%P5N!L*
z{<X`Zy)F0y*Dee9_IyJ3!Sy|#2=@vP!kT-^M;K2UoO~gJo`N1jezfJyirHXZH244d
zv;NKxGXGyeKbWk22Sf1S*RSPv2nUYA0~ZK>eAmG@(!<@{bu|ugO)<3rjM67U$=oUC
zlQ}i$zM9K_p`7r>+NxX6#+wNG#sJ=6tA0}T(*IWAE7?JxEq|Y`=gdnxI>=9?gFuhG
zyHI>*gxV;^M;MDOQf{pv=O<u8a5lu@eO-D-Up~rJ^~FYTc7xTE6#p_Uem(7civOE-
zPmL?r4)~Ew=j9jtyHWpR_`$rGyOQp!)UUlx@_RuuR<O$4a#wF)$z8pwyPh~1KUOC7
z`&_5;^gP8GUb`f#sK@qqBWK;JFO2cM)TQ&jw)0=Qlg_Mgp_`k(>&XK5&eQnzCw0G?
z0q*$HosXa1G5aXrPN~aE&Sa9FoQeIsXzo4e>Ef?}#Dw@**%t8h;JV=DQR)|8mwtK?
z-zwhCm$zC|yFhqC-*>~u18vcr>Q{umUrrs`6Y1l__n{?U&WK0I?%T;T@d^LAp1G%h
zaY0%8>{95n9h%pB#`nhF{?0IZi`{?BJ{#G#{{G`_Pn~YG^%d;@wEcjuomH=Jb!c1A
z{aMd|-C57j=bV$d9lr$js{hUW)yBeu<Cp)Jw?^TQ&GrHLZ^yv<LsR=Yf0X~GFMpLj
z_*u;r?{_jr#oC^0oXtB=H{M1ae%t3N7y16_##{2`kU8uPAGE`MpKtefe*3^EaWuC>
z`*Q~RGz{GQeG;$#&ciD*pY6~(iu&^9{MGXnneOl9|7#D>zvl1n&0kODuU22dW-siU
z%CE`4e<OcYOu$?IH{kUw!7BgXAA`=Gv#^F9X69k}F<_~^&h|Ou36pQSu&qD(@5J+Y
zC!VkKbyeQKihej#>x}O<QAT>b%KiG)+>V>_-^B7)^lq=sL0kOM0sEYOxPQp)&^ccE
z-iNo&wbB29Z}G<%ufGG|DhG|qSRL-=+>Uwt_rHHP_uA9+n|ztO59W4UlE2@{{bl)k
zE8qA(!~aiz@bhVW1MT>EQRK(;?=2hxW`}Tff7-*<^MSA8WYnjVTnp>){4J*2zpBr9
zS{i6ab-D*~I|6=R25E4x3^eg9^5Y%(GX8jl8~5|`&jaXh8$rHs<+K=S&pgii03MBy
zo8~CFg2=U(mA@^BObM_Dbq)IlE0F{8yJzs1eUAOCb=Y1!yJ-f$?JHY$wsTHG6gj%>
z`U>(LnTb!K(;3QE{;bKq>%hK>n2~!Uef1lq7rqPsnvG%GZsIS8O!l+r^Dl?c8{m!U
zDNc5e`Y?+;NwohJ-nl#*3KQtr%db%G`R;uFwu^rBw_QVwdI`DmukB*o@l>ek1@$|4
zDmSM*zrR~`&)^J;I>vSlzX)>hV8|rH<WR8l!&;H$MMVa^5?wQBvbRkLTwY1LEe|%>
z{PltjHYt8G{HNobt{7`+<uk7BucwaoWfgrd0(XstJZaWeY+)?>cxHIE?fS@ionvrt
zEb9hS$ag)?WPkU4?>vN;$1(mX$i-ttbJJth2J6&$Sj~DHSS{q;4(hkK|383P0{@hS
z=ZtI6K|R{GFes1_{cTU!Jo8>I`B3+jz~L6`ZtpycV3n8qySUpsm%wxr*Tfm;v3(A_
z0{xEsXh!R9kCwCUhRvOPYLw}(U~DUhk$YKtq_O=+f&&Bdv!uCq+mhy;>zJo{Gh!?_
zG?zR@RZXl_J%~<oVD;>s5z0R>#w1nGreJXIFUL$=kG=lr3*8Oi(!}l*K26o{Qhxxy
zX9aadfc>U1!M*<b0Cmh-vSR1a)493YcPf2A`O*D+nEh=(eo*-1t|)(R6Sm!D=qwKS
zqP}FB4Ex|eyI*5GDSiXZ`?P(Wb^Rvc6YzY3v1gi`<OAfk(EN8y@#Ip1e);89ZYaz(
zk1FGy&h1d11s^uL=0btzD;TTJ_ULa5cJ;5-*&-omn)6h!n;RIXa)4m3?+cbfv%s@5
z7Km5GhzG(Z{bG)Dl8e0k<f4@nu>y~IvflC(JyV|s=nR}J)FYaKLw{R6@X}c%<Y|Ma
z2u|cn>HeS86B~kigD~*UK`0z^;eFw`FKW}wK$mqY*2gXZ&nA!yfVFiGCxcbW8=?K;
zh2O`>6M#NgB|FZnT+xf4m)J$^_hFCTcx)lYu6j6UsP#egOW}m@!#~%hzwIeY5B+Vs
z9t_ODc4q8__51HL_!~Hfg*;^58NPm*5yUND%x|3;Id%;(&%tGt^IG6R_4gDnZa1Us
z+06L3;wBu3R~n~gDP_o)Gf(f~p+}nGscKv8sx5<GM(4}uSv%`B4nLkP^52KK_uq$y
zyi4I@_TNSG@4$6CCe{7t-s@Z1%x>k|r}#A?4>Yf8-|wRdiw2u}u|czr<S1}%<{QdE
zBVM^gzHPtHe^I^D|7Z33@b~AZR{R8e$H;dQD~|`RZ=T0JaYaRO`o~_i=6UpSmBu2N
z_~UW$iMrTxlCyqY5pq$vz%r`u(D(n+@67cM=OOKSFnq@N|HI;!$6pQS@o>Hi{3l9Z
z$<w%Rt@2(4&z6f(WYVXC$Rv18A--C=LZ-Fgmr|@*4?d7EI4;_0rk)<;#SHj~_G)E#
zALHF&#wNYNKR4*uts}{S73jW8emKfXXULE*=;-1RT}S!G>JHQ^-2r<Qei-V$8=2(o
zRW9i+!LR3%WAAW_iNB7nlIAKtbBr=PKTF2@-;LxuzyFdc>UTM?>R_H|YZ3V+iBTYD
zA+kmEoFgylqv*DN{r`22`UiL$V?Ud>H9+szke_K#hp=*Wn0}tCp41TDCS6%N`XG<<
zc&yLMj+JOHFKe*y6NCRI1`pHxYrYfktCE$U>Lu??T=TB}Mu?*jEZXah&A-?_fxTxF
zVw}Oid8rr0u1;9~HL;cR{u*sgg%St+-D7!1E);sc9v^Cd+bCp5Abz4{wDLlB`(rtF
zYcXeegu1h>W4f*+o<@AJ=L%1rq|Y;R4RFZijP~2b$r(jIn1@PJV@il?A_m}QzEO^y
zqnsgYkTVlk-rc(~7>G{;Z?#4q9d%8w#!xZQ%KmPLany`9vtvWXrvE|wT`F4%Urtvt
ze#+|k8gjl2JO_`&<Ml294Y=^#ZIp=~|LlJGUd7+T%c3jYS!R{rhOH00@xKwTUk0rF
z_qK1mSKn@CEiiTw?ekyl5;rb?Pn`YM*%;@Et~*Vv0%I>XQ(8aI`P@f2SJa24{AcQ?
zucJoLjr-e_`|Eo2jQ5lKi@aZ<kd>dYX@hOp`Z=>8Rv(K0J@w0$i%s_6r9RmAlX+he
zjNiul@9;i=FQ9_+v<x^sFh9_wK~Gj}n?bjiElOVp--CCiEdRdDWEBHw`;I=S`8$Qb
z(*OgXck0^T_5;hGJQ<7pO$6=PW)mJGzVSn6({h47j@7&Oo&D~yE1hIXey#Nc?OPpA
zxf0*}%>HWl%n8=8$?ua@F7!tBhQzK!hM=oRzl(7`l7BB<B*1w}uJpcqUi3QV^8{nl
z_pt)~CM-OeFw8UdcML68s2BFP{qVt;zT3x|C}W-n%s97DXY@%{rJ(~$+xeVxX=o(;
zZf|`?=d!(<v5ePRQm`DEz1z~E-mAUBcd3wMx(DAp{Vx)ny>r}6H|KtJm!QiYCx@KQ
zv84}<yXt3g4z-h=)5qS8mH5oSHy8XL{VQ^SKnvD43_p4tpPA>2nPk5ed^A3T{^0Aq
z8l(DvE<BKnMf$M+T=Q?32Vd@~tqAKrf~hYby)isFAj2k7=9ii~`h;DnHLDHAMB=sR
zG7;9XG`=sdG0!J%uy}n_;s*Tu_yq^`t{>SxCA3CiisRe3Mx67=m3~pLeHI-XPyCbV
z(!JgpbACJ$zJO<ef@kC6k<>Vz1qYwS#<Q2;LY{@XVrvHGeuM9ah%FuF*)797TQtnG
z8-{t7$Nxf@ZRE_z$A}YAtU(_CH@pDO=kb5T32-KM349RzhqfPgfMpDv$>0MLu4kZm
z<+cbQ8?DWg$NlC!?(18X2R8@D1uq-=%*XTBk)eT0Io}DLx4-R2_IyFnmgZMw^i1;$
zo!Wj%Pv~zOoNLKR&8NBN>^7pG9_HCFFpdrb<LEHshz>K3C_HlL*zUT($^Hu1C5FMj
zZLFDyw!RPkxq19^g@4Fj;XOK)t*>y-qR3;lamF+19{No1^5H0$4aMI?0sgwf;IBIj
z{<_29uM7Sr)|@@=#4xZ;3<KN5F!&2Co&`sre;1DXaq#yo@?I+^UbfO?=Ybcc?C;wI
z|7LxDLk;Wd3FdC{vQPCM2WBbY<ZumRH_K)g-Wu*Vfwx;L%y+hdx7kW~#4z)n7-qih
zSs~!7>d<`2?<hN7_!{Tl?~nX~z6|sEt1rLAXZL>GY)Z@>X3T#z%(FpxGC)&0kL)No
z^LBLXw~vlu<(WO(BM%SJvXx;&=veTuGAxgWg>?KFy3WSD>`YLPc!p1x{@Ed_vlM&Z
z)?MN82wOJKCw5W4%X|#t>JKHWHu$ot@VUid+L52x*INZU$)o-Ge#oW}en_7s25p04
z(9|z~?7D{GWiinYF)9hh-J!nc`xC*oJ%)ag&i6?^O6jdb`{e7gwylD>RsHH4{<Ut&
z<q`C4>qN8s8T>{gSTmL`dkJ|UWv960G<bUCx<#YR58o{8U-QbPJ8S<ju>2Y9ty=6^
z#hylfU~bwqW7p<7_EAMwR_v@t|J#aRRQ`bkZG;)W-=|tr)EZzM^6PFFzb-X5DaIj^
zs*KAo6D>CD4_0zcDZ1I`(2ESZ_`yo8ft!Wfkj3a~V|vgZ))_PN5V~9kYl^Q@SAw&(
z!qRQ2GmKuFC^kv_Y8%Q+ukA;c_WSKy9Kqhh4&8Ui>gU7}0*^z~nc&+LuuXRcx(abA
z-C5VAI=304oN$CqdUNd8C0J^%<zw>cW{5quAr>@Q*<oAp?}6hwBWSkt^5fXWh45X>
z7-FO9E~n3}eAB4;58_vwyCl5Ra3wxx=bAC%!RQP4XN0@0JJBDhQ@Xr#^~2;%*YiRA
z^lTeFi|rtWgtGqm)G_K2z7>ww-WT{d3;Q>eKcuujn0;j$zhXL&4ffp9p>-yz&Ti*1
z?6Ado+Blbd--bMy4NYv4j>Nq~U&Rmnei!mvOULg#Q`QH39>KS6o^Cw3^Y*k{JUX^0
zRO%!zGY@Vl4g})uVe`gi#DlLbGLPRzKAA(K%ySJRLhD~<&b6n%Y1xc<g3}KtI`i(G
ze$D=M?8E=ovfJm~{)h5;-&l6ryxT^YnkMpF3HR&JX~?->72(Vfv$DAt9rTR^zW>lW
z0{E%^qbq=qL^u`2zZK=Y0Q_IiM~JEE;9EO4jSI4w?SU@oHsa-(?R8xt@EO>w57O5W
z(BC%jN_|w{0>t!pn9%yI_|hEu7ovZL{wYU5CH+efQxT?rTUnn_|9n~zPix}aU7YLk
zOK?67U8>E2K0rT*^ZpY2{M_65VV{tbR3FrrTJja#0e=a>yS2Vl1Wk?!cyK#JU9Xs{
z<AwMo_<ggOvrq3Cv3MOZWv^a;$Gn5r-!`wy1&*(m&ua>dI+A8i1(RzixAvOK_3iX=
z8|M=!udv`if6wsG$Pc4)rFEXL{0P`^8?**2+#x44*Vw+T(3Eh>jt%}$PMtBH3%<I?
zr?MgF<b5j0Q0r4^VSh9}l}Db#ry?E&3?dczxut(W?8*SScEl&)9gPcF18V4Nnx}Ok
z!+H#`wP&1lK#%G3&Fr5-OE>I#NBmy;@%~*VzVrh20(XSs7x3M+BLX-5JG}67T))Zn
zsoTu*FTfuTaD5fK`SOU)rWkVszS0;8VC#ZAmvNPUwGh4snRD@Gos0AUx`}+N!8=;!
zY5h%g{e<W1?Ac&5TEpOiU$4$$P(8qEQA#`#|CWW-piM^}Ru8W7nHA=+>?p&IVa*(Q
z#rfZ!|Hxl|s;8~3oHLeUfBv)dAwvD)ul2_4tv`{gMwVO{NL8#CZBIoWh#!8Ox%jbL
z84ohH7%(avU*)o;?1h1MVmo~dSdHK(c&*FB><*r970kFAzGv_BhKlnzi^R+r*hk}X
zcDE02)#1bYC+x+vFk(-m=34XC{3bb0n0w**=c!Zh36KlxpQ!uC=b7hkr~Xl9)cRMP
z8MePI^cNvE@nY(|ZAjm`;4kXi;kUqV;8JTUTRXTf9ABL&S`SR(l_Q**U5vGs{7u`K
zn+DEtT}s=YZ;!Yy=4T}Ef-aLT{Zn6+i(c`OYrsXpF$T`pl2=k=X%@_Bvz@t!ke@n8
zt_VXr^|Vu&-(S?sxaw&~v{DOA=sV`QMt<!ueU}`4;MLshis{ZgJ=-RJ#XKs{RQfQv
zkmyH~+CR)0neY;u(}6nvFKtKrbF&@bq_G*=)SADYC(h^<EXsj}p}vhgH@2VQ));(1
zJ{ir)7mj-6nkW}moDubEeOGnd@!#~reiLam<YCer-N?I_>DMym=jrk0`QpfocoDGW
z-9FLXh0KxW{u+LT_;Wclr#dg=3{D?jyIvohqY6{JK9Yx9545lK;a$v+;I@W#{XSj(
z+F*a9jN>l)6XgB(xvpWZG6!?B`}|lK#u9_(0{Okh;z>qvfATX!YvN<R4~=q-_8mSd
zLpl3Rfh?C#<`QUOP-h8sujTu##fGzEOifYP=@M?#a(-0>ba03<%wjwj<GcL#5vE$c
z(O2Q6#lWXLP;z86yywue74trh?r{j+<yHKRM?<5!pSp}#X>>$*-10=}2Ukm1x8-@J
z@_L^_=IOhSaqfoyT}6N#SD_KzX?SNT_`4B(A`D!l%lN(_ciA2DR*XT{IGvlVI$veX
z8S1=)x*m{ECouZRVcI(y8r{7#I9T6^bJa&VuYG*;z+ZisHQL0zI2Ywsk1dky(zt)k
zbvT>;81G~&Pi8$rvC}E|@D%3g1m{~w7qs)hnGKq|?=io!1+ek#8O_pXzH&?8a^W62
zUv@k2A9_Y}ly3s?!e(f%nfE&1&e!ieAC%{N(D?*v|3T&@_1Pfm<f9Xy;|n8Z^1%5B
z6V2qY#9@y0`!{eFeBN&&f4AD`!GAIrzw|cgT#T;}|5nn^PqCKr6W}p|acX^Jx6XH`
zju>N1^KCQhv(oc}yw`aH@_)#t6)$&&!Od64^>q%-e}5cYcx{&H&xMMfKeRU3l>+}*
z)8O0#5C40R>FKfO13P5-0Z*1+cZ->uh@y+2GwOLI^Or&X%wUa8aTF2O4%J8IpekHv
z<_N!3ryU=%KgK+y#|rN}*`EuI>538$oTd(~)4SU_Yx-8x|L}LnC0KMr*Gcw1D(3MP
z)?IGdelcqX<%+{xK9N3d`o#ibPKo~|Uczl4*B7x3w(rWzfKQ;5GNtXDd(Zwz`y4nb
zR=AAkZELS(?{&UBxWl<6?D=K9^VvtmUbDV&><^;vh4O*82-|=4U9tXAjqLzAdV;2A
zhavu^2;V>c0O>)Ao6X~j<&S}X-a7pxyEZR>f#xbq{&4M4GS@pb6|?Jl-O5mni!U|P
z!kM?N^x?O}uLFaVl?^o~T7h@lJ0@g*%lZs)=V9fF8i77himYrw_Tyid9MbvHb<l=n
zfp8T$(t7=Gp<n(BS0l(MN9U)2vyxTp9GIptIfl4L#$Q4%B!3Owy@I@Hvsqh&KSrgK
z;2Y7n-79DhxCsXhcC?;pJk!FaMs>OP{G;G6arKt|^j@?V9mAR49}iug`NWy$qpN<^
zU9#jV?5!!?I@d+td=uQR50S_3ugx6ADf;x`$0>d^P8>G*a5T?$ZZBg`HF#j}-^n~{
zeL;B4+-hF!J$RuwZ}ymQ-YxUZ7|F}qHIdk9;icO3=QYh-x>vB@5uDcimYO=|$Mf%W
z)Z=#t*O2?!P*dsRgZK?HoaGkd`{?<cq1ZAio^Gh)JjB%1;qxX=s6Wr?%G`HeSNV8n
zd8U$gW2yHs>Ro%^Ro=S`y0phI(=*b`!2%wf*l4oeyYtC)Nu2OFzWEk?S`Ta=;(8y~
zwIkv>qc`&?Ynk&|AKJ*Cb@pl#PurSCmI?=S|KQ`MG1^|pugV7amFA3Go@1l!>|vq*
z#K<Q_N87G9a~?Yb?j_b9I!fQn1<)|_ukyLJ>mK&_ZK<8_t*gz$xwZulZ(SYWdOg?R
z!)iliEf0RL$=<*8{Il_Zc1yv_Pu&vk70eAh23&tUa)p^tOJ20p-QcxwFCVActN8<O
z6z^ParXJaa&Y-gdFGqH|L8qo19Vx;-SM7gsd(c@%IW;%)UeB9f&NWU0zucMFRh$Qg
zPN4MxbT}uw7Ju4*KZ4CcA5yFV3I`=;>)8(x*4hj5Iy?{lMgPqEd>#l6Q%{sJitjmB
zgPRLEdr<rbKcvGrMEB~uuBX8HuR_CCM&PIN%dNVxW_^(U*HoJ4uLRB~`OX1$gWq!=
zGBhWdru-kfki(*%1m$$~X+*GwA9*zMkKXwUdZw7*nEyO)TL^F7TEIS7`kiCm)6h+L
zrI{_BZ2QOgv6f#lj;V}CIn<QLz|xcWDfCy4?V_Lfm*)DO)zMzb<xQ;dz6GyP+wkn9
z;;kj`-NnM)Ap3aOFZdDDpZN{BUO5x~m&oDSW%PwQSO<<9>`i?u{F=viZ?%|g@3X|M
z>z!mBa1fp9{Waf(28iKSytQPx_GzVCJXsFjEs8B<exXItpv&4^4||B-&A!U$6jQBt
z`YuAbp=B<mOb72Hd>fv`-e&NkmO7f*KT=d&S99-lGdD%Q9rn5w@xJylXL(BbcWC1f
zb;_UiGT$i1KRxz?mlv_eR5)^szKVArL#HC9{H7iFDodB$)mw^OHNa7G9<?~b`7w+&
ztb5Auz+d@P-d{aXX7OP8x6mnk`Vn5F!QaR`JsJvQE801NUkQ&z=g5I0b=U!-9pQqH
zlaq+E^zrhp56!W7skXm|?qdDv`881Cv-PLL6Eq*~!ATY`hvOY5TAIisUY9*t#CdSU
zm-dY#j#fNcy7qxHb?xT0<RxK075YroYqOkwUmx?&W=I3q9^~i2TGr&@T`}<FZ_w#8
zz}*QuNn)mFHxjFW?5)ZGpWaYW6?#YVD6&AY0E%zuga7y8Cm8|FDaN5GH1S9@46j`M
zsopf_@ECNO7k=K?8OFZoyTZx75-Oz*@?Y@1@(vt@2d;b_+l#r3-LkT`0+`j|bF;b$
zbS+(P8sobK+BpiYFJ^zoD+|G2+SOc6!uNKJIZ6Oi&81^u3H~zQ(i?o=wDfz$&DryW
z)DQ462Y#DB=5|~<)6DhpQ+DPnElyH6XxRHPW4yCE%()vreQJ)EQbzQ3zdbLy)bezl
zt$>b}eGA%3(U(a&BRWrCqAl&i`FnH`(bFxJ;0@yqLSq^FAYHjBRC=UNyy#iWD_aBN
zx5ys&X6u9NO`~*<L0#FilPwLSf3UBKoN;Ke{M4^PeOa`hxz*F>r7s_&{op6foL?Qt
zJuX=+`cQsob6#DI#_f=Msux-#UtYIpP4JosPA~kgoTXu4Zs}O`Yf7EfufPKyCy%hP
zv|38e&*|N-fFq?#KGo}rUim(ROpq_%4UO!6=64?LhBLW22E2<M%k2>CUm5Gw`v9>0
zb2_oX_EhY*_(SO3PO@RTnQe$i34Ne)z4p^YXsZ_8?yzjluw+~4i0D@JRya;gkTY9F
z-{MvHBa)Jn?l*FORu@kl%*_#>f)6hj91J-f(u}`uJ99-}r1MJGo=TrqHF<sNA-^Q?
z$=xGAP_te*w1z%hPale}Hr3bB&ja)`jm=rlbNv?ZtO#4y-d}&|deK!qe%PD|9&w6H
z<8_8_9yH5;IKE+Z9sUOK0^+ig;s?FTe<5D*vjx_+4pKIS{Pkt8+LufoDuYuK3S=;I
z7WL#sRbFR&&dVR>?QN0Hr*(npKg`Y18S!};{oHUe`c?MAi@trD{{rRH=(a8J8f>!X
zWRq3cv)f8++}i%{<#r_bW*u|3)r>r{O*yGUL8~Vsm!DJK?lgKj>oL#C9zmu)r?aO-
z2Uj3ZWh>Zn=&NaDs=ddq6K$qvVH05YD7MMBOG=4tIt&d+R+IqyD0KS=_O}Rc5A!So
zt@t`k5A?d@Vczjfd`5Jma^OJHVGo^I;MABgrdoEe#t5IxMmaYN8{@`IC3aOMdM5lq
z^x4E&VNLd|Fw-TSIfou9It8z4Ty$39=4+jXm^k^bJe?VT<D$oYOOBt*&D^)f)+N>6
zrVA!c2rP7JwoZT+$9GI~X@9u+jTL+IyBl1nWSpwkpW}q`<)QP&7?XvUuhTS~{p`x0
zK_mHnHvXB9$_o{JCO1cN!<U(<L%AJup-=J3DSyiCSRq;kZsuL)arpXkn-muTZ+4L>
zsUNa0h5H%$9=N%{O?zybS&xk%3rZ-z0y!`bzVClKdD+U|$;f!|S<Qv5E59BcRlN(*
z8`1yDD~(-~K5J}@SKrw=WSste8X8u77_mLj_>|W7SDD5zeC5;hNAs3zC)TbZX!WN2
zd?nM^57Nid$i$&K*=K%@e>1fBa`EtO*pxm$|NNc9^YaY$qi;`6&hzt9<->)Cs=Z7l
zJQQ6p&G^`RQ0VutG^#SvVcmr$dweUpTO}};-otb0c#7xWi(c+-@q9JuEtH`y*6w;W
z7d{+>Pa3BSZ*$8ylTz}ZK8VLj4}6Rm%?!`d)FW6w@MckUAU|Kdv(OjmvtkAc=g7jk
zAZ9?{6~+ymHAm1uFL+)$4je~EEH44akx>@Um3OL)IhyG#AAt<&z;03Ba_wWfCZe~X
zh|Qji-Vy~r1TX17vSlUjboTHu^bWy7d~78A)h%HSn|Wt#@<^CG3bEBIdZimlclj3Q
zEEseb>1V`kS)JuAU~-hY<fC|Nd~bDaXkzPm__N@>&)IyIv}Nz%Z@tKH*~pv&QKg))
z0q|gJsI;}1^V!aIKBsVPE%v0&rnND@_*?AU;#W~UJ;=?Qi_DzO;BcD0`?Pp+KD?dz
zaaw21!=@w83vv+K^<Cr$OWpFR-lo>s^LjR3)1`gZhrkEv)ROVD*t;!#+U5Mk^h3-k
zxbVNCKfeES^mo>LLx;%q0sf-#PKWLeqN{o5-+1SH?%|m)J9@xLd-f;rjtR$s#eC6f
z2$(Ro_-}HZPs3Lv_kADR#RWdL1m9@f(R*{VWecOLTRC<+a#V6vx`E_sg>tjphYm#_
zQxW94<{4QeUL|<rPe{6~XW|=OwT|{Y+?d=g{7n1~8OD72c9>{Ve8PVB2=tz(PftfI
z>F)Wz&?j>ckp1-#^a(7b9}2$}6QlX+5gs!>`6&-EM&c^1?bShSi(y@F?#gIh_nKUw
zdrj=VgR&ZL>^bxp;@MI!=63ir_D<@yJmCH_=ion;Z%ec=-LsFy)A7#Q+!`r(t(6Bu
z>|=Lx&c=AE?6dlwzL!N=FGj};Lz~z~&&lsB`t$3uFjY=J>?zK-YrO;A&1qdR4|<#%
zWj+rh<0leN5M!M@r2UyQ;ScbrOpD%O-yw(Pdyt&o`_Q1ARv#sU(*-iP7WrE{ME<&z
zlV0J=V6C4L8QdQu1^`^0qxK~0qpV2^x1`s4vN;r&Z2s9x#OYiBUxH_)*P^pvtN3=X
z^tR#TvN><4TrR~Qn)myTJ%?Og2w&Ti+wl&`%dNn3f|+e`30^Lqng$O8?0fM0n>d-9
zqcKFey0xEQM4r2(?>9IM{}MbO`E6fkpXmMy&Uk=d=<MR&jf|K1k=@saf2@u*wm>Uh
z8*E<I&1@dLp)@R>(t|t{UlDE|1ZG9xK)MzDyc2s1{#=?ShY4+2enZ{9+>m^qgj}D4
zTu<cXy5=s!+>39^o^ybWaMb559oS0_JW%DZL6kGu$}s&GEc|!EJ3sd1GV*o^FMqB)
zO_U!x27MP}U#hR?glSXp{~FIr$b#r;&vwxKuVT)>tasqI^ik=R(lvctPoc+4=e&k8
zwmx`<!~3-58{Yo9$LYV{mfBEzVfrUIb-cmIN11#@JPewN45723eb=~p#j8To2i9$5
zKMyxf&YsBj;hWW-W%Wt;->0$~e?g!8{`8?!kV7P?eZ0gwWxX?(Ct1Dy|3Kp!r*HrG
zu&^|pU*~hdjaA?3>--pS7jIQx3w;>R(r+x-=Z0H{(YK%A+u_FHHk{qxCkp!S%SPLm
zVSFTM)?zJe3)Udzix-{^g~PDz1FvvjZbuJrvERXu5~p%Ily5=4Wbt*`QNC>P{g?JX
zen86$(T9J4{v<w&@BXIAOYZ6Y3VW@vH7yQnZmfR@zoo(M_$dCaW7L1HG1ajq|Gv?{
zi~5F+VW{s&{-nI0^DO*w$O+-&rtm;>d~Ck;Z#}2jexG+wn&$c6R+95!C;c|F25C>a
zYas8}`c<i!ecXo=b9(IG`#Kd9Be*Fag|6TB-}BucdB2wbYB$4G`j%+K#}l1@C);m;
zH}K!(8_iu*YipvJygf5?+`phc&5htV^xe}uI~Q!5UnRzoHeW98>y*x*I;!8u?O<P~
z?f)(8efRgeH|E>;9M@I(_sS`9F8q=_+nxW0oE!Uwv%e)XWrP1C<%WaD04%`6)QL0s
z*c17>MdLm`#*Q#w;M6VocYgg#_)nQfW!Gzri-x?{oO~w#O#L|)x}i(?ru6*|d}`_+
z^JLF)m#%GbfVmT2bHJs}S8_XQ^WRr<e--z@+}j&|Kz7Dp%)qYy$~FEo@b>Fdf2<E5
zJzjO4IG)?#kF6tLr{A|Jypuht^*?>riNEO){%g+lzmNyLKmV=v<D9E6%`fE|Z!hSJ
z=29>heX1`y^HtA&WA#AO{ZDUGSK!55V<UCt{k)HQeim<y=v?g&<+15sTK@HD#PTms
ze&iZL?ENe1>faNHXIpjdBzs=+uuYd~-(Rua_jl~p(d<nb({*aad0m2cy4uLT+ZRS&
z;xmw*`>59b<ln{iesmKw?-GwTiTfS!EcsGw8RQyrkKE1ZwISlgxi7=FBDtFykM1N}
zjr=-cav{ZdhP^x?hW#2Xs_X5k48+mxx_i)<G9@PY#g|ye$c^mEuqUer9&t$i=@!n#
zAr?Vrwv9q=l=tR3d-1=4S5+?dK`;D}v%qgEJ^GpbW#|xP(7tp=2fmxIyi@0?c>Z9O
z_w@()ga^u8I#~WVIgJDZ`2yqzSVp{&)^uO`=hK~0)-CVaZQ}p*My^wN_M&Tu@#9`P
z%JaNW;Qxs!zZHFUr2`6voZrnkA`>hOe_C(t2KgzYnfjX8yG*sdX|ro^WvyMroFveH
zCa-MkP2GS_tM!&rXSw>C;(3&qg~PzbJKL$G`|rtn-`il4(iz;6KuynBa@KJEsm3W=
zJqk{`ygwNVa5jK>PXfI<4a_AMe~vzry4h6gUT1&mo9HRaGb}EK`Bu3Q)X!**sa8%N
zACEHCXVPeMRD0tV5c4^iy+_xxcjEov)(z~DTL^xApbMOgr$SBWbCavqQ0HyH@qS`a
z%F#FRKQ?|0S!b|W!Mo&b!1ReF^LG00UB$|==gWVucPoS5x4ZIw71eY2<JjP5tkISZ
ztkF(3a5H|g5eNL^%#X$>|7<g`6}~Nb2R1Nxqj-{oyhnx%z~Uh9Zws32r->_(KJVLZ
z(y?@w*{85OKFwUF*sB#CW0FzoEL}3U*U67}4dazBC`KM^jTiY^Fy4xt{`)Zcx5n$g
ze_~0+&ZUf3-(nXI_>q=1ox_g=9m$V0uqJShF^k6haW9?x=f}Nr*l|zqp3AtGGH&&E
zaNHHW#f)1%FFQ9&{=&H-FGJ5p10IE}F08!(&A_5(qtmryoS74Vwlz10C{s8$hj@QK
z_SwfKnCw@GfxoMu?c%@rU$o6U*|zcV{@J#P&rsVR%D1igy6mR6pQD59n>=Hl7{B%T
z<Z)Bu_j#e<a1dJ~LtlIx9S#m_@^HAHzT8>RmuEik|6^Z(i~6!=<X_Mi;G(|B4$^po
z?VpwZ|55q>(`yYraA=Ua(w$D%xBh}M?UX6}KA2y-OoIa#4tXa#MfL05^=G~NtbOOV
zEuFBi-g@@j7xryC@0YG|lJ{f+@fX=UCH{Jn91&yS<xVItb}cez1m_*<%){u)=uTo@
zTHyta!EvVXWN1WHQz&3_p2diH6>dZdX!-E_&M`N6pYYVYKiJ|t@;2n-3I0u=hsi&z
zwen_sJHe{Kc{xa#LRvXUncLoHvR@qskD~0&%!kGm;0&31Gi@PpVizhGjwznDK8E~M
znJLR^c1m^|@hsN&mOj85*V178g%6(%hsq&vP`sb}3^BX-K?>mz9tI8%&V740O#h$2
zf&I+8!+!=2A2Qji1P97~RB&Ki0W*DgI8bKtva5DVHxL}cz~MslybkWa0B-22c*B#(
z*Ivng<mz2r$W?5a8?axadEAL{Zk?5*@*$!#5fk!gO(nLVuTNpKNY7$@>(RFT*LgaG
z;zXbw7d<7n*d(nk@#AZVJusY^j4WDt_s%eSd{}l5x}4g)OExnyJwrcOcTV<zueWmE
z_opkcGxGAJ5C@AdJqPU386{5wdDy2Jw=YNiepsHB_iGS8VC^F5BF)#)eu<gWk(a5~
z4+cHD!0=PonQRJ~;@2U0s&xYC<!Sny0Cp+liuAAmu-%1BRekb@3K#93ePX_s<#F+_
z57#Jqs;_$q#s#oE1IED9&Vyjfx?;KFZ}RZfdWm2weRiOKf-!wBgz@xYU>p>T9~d6S
zhslXL+*-cB_A>xuWVm1@UBz$T!Z=UwqIJQ^())*@cXZYP7{g1|Pu4Y(pZf6I!+1df
zj4uPG18}BJ!MQwu{tJw|nTKxnfZTzP`Qz||^^~ppVAc9d1JXsuR%s3F;9on*(eT1B
zcoNF<!4!OOE4<Ey4_2VZaqe|hEivb5^jXW3Zu8<<{V}TF5$Xy6`!qV{8gwXPE{{<E
zzB=t+kUn<Lb*ziV_Jz1_8F8Im%RI>1q4h}tpBQzd;c-8J7RB4`b8yo>2PglQ=YxDc
z(B<>_^v1fbUBA!mP&~xB-go>ew?pSD3Qtn#g73kfbsKyk9V)Im)M#y+MLl0MXTc!`
z9G(IW27R@HwW9wG90GiQE;wjEOwR_B)Lxqidk#eZF=)@0_t$pmdt%$5o-e&#a39TB
zmO^LR1E8y7$+5XNoavJ*wRSFaWA`WxwF9Dz&%Vq1{R+RA??!eQbG=~`yvq@e4)$+@
z@2e4P^L-wC1}=1f3+%5v5@7DrtZ6Z(4W8ZW+01^u?vSz_?A=*CqObFu@9_bClJ~!2
zyt3UDOYfJ}|KH`G%ci^j0eC9?Grbmm1N{@OsVur_Jo=2scUd>w@jafO3s$>`Z)l|5
zbH3-i;1BR#c`MIVW*fe~2Fi$c>6hCR#P%QA)!z_^AG@`PTrdIFEk}|MW^~tTV$-3S
z4K4UVk1ig?o-=Y%v=nzW%l5w%9Rav*pXStTpM*`=qxjrlH|y^kR<KrcY6X6R(1`B&
z53-k&*iaW4fZbYy&$ueacTw~N)=xITGi!nl_9r}7Ybds!?ZmH?nf~+lu(xwaS*_37
zy=t>qA7HOq-4t)%sR1XK^1GjXzURSHw0}>$Nq+o~uqUYL`p7(DJd!ToX;0}F(4{h$
zvWB6(Jn+qG_FLqt@Hr4$llx>~xkD^(6ZEIOE^dp7U-C`n2p+0^rh1;hH{rMO;`y;f
zOSJEZy8L!jx7GnvHibUtmmRL0a&=~k&^<UWPBG#M$_w{97)t~Ab0vA3)wYY@LVQYV
z>6Iq9zU6iH-u=Mqa}Vtix76zJtzq0ftm{-RtC(l^Lox2FIMZ+!^q_iMsWU*%THVhq
zxW9~h)vxDEx!1hav3IkabBFaTVzy2z=XrsjcmSVWV0ab{!efU%8^B9wqR?m8K@R6r
zD{f#<%(diWQqG(O_yexTAMpMzaMbz&qR0>z`$2sPFuuNRgZ-VWeyNW<KhAUA*MVP=
z=#2Okyz|HYPVRpSytjeFmvdh@M!#<wC-Br>uq?Tttt?3+kJLBStG=m^h5dVJTOTni
zoZs*b4^QO3)&KkR|6}}bMmNy+WAlC09PFj9KT}!YE<CjSk8><7uX`;w=ax5%=E_Hz
z20sGCq5bBKqPg-_s_u?_-9AppPhxora8HEH4u3r0;u)}ZhVWcl4*n~eHSkzl2YpHP
zpUJcQJ=W?gyh<`+VE*5t?ZW?Q|9`<ciPlwz?uXGHBjuVrwPIwK-50ax{O1+_;2tFx
z>P)Vj5#!#-^%U0?Tyx}Qzqhz69jdoyy!m5Pe$gKEvsZ|HIP?*dJ$Uc<F3n%&`vEKa
zYfIr9#j&fkmYa&!)kJ5R>Q&giH(wA?-1P=z+CJ7+HfWt$`KyT`-Jlp!_M>?6XZN-8
zRWDK;b`D*!JkLK}&ORx>2meFmdES*X(e3~3`D>4N6(7rei+wflJ@GvEA@0G4TpQ;v
zJrd|Q^eOgN@KN-SQ+r0^<1Fje`m|a0>0VtI{SsWC4-EE<jaSf*k3QYk>HG@5z?ts;
zy0QBre1kF$^4mc#KGjy2eJWVex+}jg;VJB@;tvEG6KCwBnl#|^+CeVv?Zl||p!-O7
zR9~f&%U?C?ax>>1tCLUfR^5Hr3tDH}(mGc;71>@`wq824`_N$fFI12(FgUd}joi}S
z6xC<t$rp(|=0Eadky~x7K4xK0+`C!gtu1N|VAcJs{Q@KHCrA;qaQs`$A-V3w-%?ka
zq}xfn5o?kM-e>xSTd7|JY7Xq<R~5(}IDO&6M^`x6{n$5Vq*rH}IurJ+!0GW_Z^{lv
z*L|QUUR#X*Q*5$d--`Y4Cb50vX@@que!&?NH$s<;Gs+wUi4hW9M4R{kt2p;>PHwwk
z#n@PT#m{YXU}%4c#Y@=|?c@>Qxp@YBz1w6hf34QMHqUe6%T9$i=jy-ac^bJB-O6J2
ztAHEChn90DyW3J6&s~wf-(HN5nP)xuYvpK*Z^ExI{St0TuDY{4{F1B`Zsn>2{fW8Y
zOQ<-$_Q!plT5GQZwlUgNysdCC`1iyP8e&yqBb4XyNb@56?_u+N$6aQV#+&-Rne&$V
z1<vN$+24h3#=hrl?p}WD`OO+d&b8VXw0<C(%5J33lIiWy@79Lcv$cgjZOwnTo${T5
zew7!$QTe0Lhsvwo_8{dS^4{m#Cw1j@g{1okbu0uYC|3sk<{k_5|CYTJsRIYTl$#&O
zhQscgI)BQ9Q~PoYsSmi?XAOD>9xUK{&i@g7EgZLx$-~pT+A+0K7FZ6nd1t`WIYh53
z0{vm~tGc&S&lSLpHr)pH5X}b<ZsdLe&ldANFqcj0HjJ$i%}T#<TgJvWvEF#JmNGm`
zL+5&~c%|Pj@n9T9MhC#NgwCGi%*$Hsspnk3XazPJxSZizCtO#PLRWBzdyPOt2U$=1
z{4e;Pwbq09aSqltBoBsWRITG2sh5kc?b7=O`koO_XRb#Q(_{z^XA4^VDb?S=-b&{A
z{Fqlq>bRNn4Sa^~srsZ-g3bXSf#z-s6DMSr5a&Okw_3a?LVmCC5}pw^Y$hxNx2P8!
zijFhYYIg?l@M?Di`7;aKcG*vx$kPz>KHKVytPgQcsMQz1HGJWsG35Px{D%B*`V(s=
z^#44r_W7(~%2tlFxt$kZeA+7mofX#A=h-z@W)btyt#_Jd)#uBR%=hcgkd^841C6;o
z=i{3hamJnq?NQCPUW44a7M<nk2U8)tR)HU4dbe<T2R5J9dlFo0n4{Ze0}4LiMMCES
zZ-=k2rl?$fu6Rg(?1eH^V~^y={fj>`{`{B=%Y?;4;Wt))XrO-WF+oSx9+PdvlIa}L
za>bt$t7C{icOHCuo(7K1u{<v{Qu#Wv!SUc~0nc;(eQ>_MAw6X6D0?oUVuS4XW)K6p
z4;|<s&ip=PX1ljD&YvK=xTcnlj!)dqyZvYDg+6Rt*0+w1ZAi}gfro#2+<RWQC;qMR
zqQ_^$-)8NqjJXPbX`jw<SaTkGl6Qaa%@NOiX<wa5y(zdh7w_IYq9pOA88Ko@Ip^kF
z#LumShKr)@kuL_f94Om*LHT*3`U01knh0lR1jZ8w#hkcp?8{)T-1XeIGdFxAezCD0
zJOL)T_Q_ptE6>SgEqDuu)?OqX3;yyXF_)ZKd$gT1^Ux87?t4~U>?e;0*t4rO!lTmR
zpfmW?a+I$|&VFRSBy@EvxWBAddBKtA9&Z<4b<l6Mhcz6cuX)&KR0r@r30&Qa&1?sJ
z)}FiY#int9w)Tudr(lloTglJ(KIW+BN%k$$t{X=8=FG|Y_``b99pA#|V)dU>_24IZ
zHn!f;S&Ahst2(}zxcC>xcFD$4F7La8lUlc-Unt(!uDR|R8JEp>l=@=9Nn>SeWze1b
zo)o@M?T$5s*GqqJMw!Pandy5cjq0u5hW>Dz9E7#X%Za^JO`AP;vuB*=<N;V1YnZdX
zqam_B3Y>utb1-G03yc**<MURHjd5p-8JBQIa!z{EgdchT;bU{%h4llvlGYH@Pis$0
zpgXM`gLz-am7-I4tazs74e-?HuX3~D71*ubS*u&I>FR!!YurcK6E808>bsOVokhI#
zV)j1$*2%7(Vs;3}9r%s-82UlCu9BUSFX9h%?DZ4Oq0OXZnLSq+_zItL&l)QiGr+8e
zaWMz`dRk1jj+naUWd$*HjCY!GYBm$!oaR1^JS->AamPZ=PleCi{IBqtk2u+JyYU%d
z%V#UmnV!T?cHalOENv63UP#;S&1N=xBKGOb3AY6pP~P@`ukKl=W<35g{pb8Dk6-7@
z*=O{5Xt|TEb$0LVEyOIbR&Y~qXhhX5ti6jqCbI8oB62N;+#7_K=l4knc8}TpPtP}1
z8XKE`FjUGs4Cx2(ANuSYKUWMk@CFXNt5*Dm=(#3j;I}+y?LvGvH5ncP93uP=Of=bD
zm+&83!M&9-z|-u455b!U`Zgaw;U7F%bce3+<nS*!|CYXP1s}H2x1l&yBz+6~5q?VM
z97T>DhKB$4dBw#$$uPLkLwj~_dTd7g>#tHTI4rpo-blVS@N)(7QQxW^J$GnJykQk<
zS;8;jYVShv7HIq-lRecGNJ{<$q0^%eF&5gMxU7w{@H}03>uTrWwo2j^R+@*?x7H;q
z(5W-Ga@O`Ok>2*u)FaLKTOY!|$J*iR_1L3oL%7|u5d49EIJ9TJ0BpEdpR`sdK32%D
z(QmWm@M)cI>dur7UHig6P^az_+#llJDPk=5nmJ93&3yzsVUM{#-Z1owos@KdkMf>T
zrvDezr8$-EoS0?iYG3(D?k&zjPbtUDiIBIzg%3p%7snm>2pIeBrN!|u-&tP<G@-rU
z?pox?ZPW!#gr)ob){xT}n1iR#A$S_>o{B%+gWam$x0u@)e0~5Iu;l}zy}WicmFD@{
zJdTPNrhd=99qft(-vr?2R##%o2YwIE{Ym2=^88QWT+xkP2R<2OZ(d-1>H&1a`zV{?
z3eQcgsUPUqN%)NVCHfIgO<b1m+c{{cux~Ek{-y$5m%cgpQ)0xPXspMZ#&xMq)i;^?
zK0MMqo?0|G))ea~{<swjK5+lug8K@)NAaeQP)~yWY}&7R47riI0Gn#r-MvQ{b2Q(_
zm}r~#0r+8p`xESQ&E@yl+Ow5sIrh7Oc8ELn?`>@3WRH*fW2?g_d%Wq!t|t79zu7$|
zuCclJ%QQBBTmx`Aqb}w!e=e?H*EVq91rDm~*P{a2Uyli7FN*EDsyw#)Dt9gYVjaru
zsjorHsBv2wYS5Q!T<pZ(uUU81fi<7IN;*OS9Xn;%TNj&Tb@;j%@`f_udB`tlEj%xf
ze5oG#h4+PND<ECk>f|-H{H_ku7@lv--V~l6NTxn!X8+~}a_iQ!&xU$Z^(OlS-#UZe
zVz-U-?1gsLjL`dTZZOYl{QBPgJ2U&h4TkTW>`U|uUSe}MYJXQGq`dxtBOR+*ZyjYe
z^zgg3Wm>$2bG@X~Jb<nGaehr^RBPZ?(-=WU)jH;lI`$I=7|#!>muD9S7*lE~eGG=;
ziJ|zt)NA_^+A3_@o`LXb)A%xN{)oK%YWtgx8EE?e-&HL8*u2|q`$etI#Ack;K4l8q
zPXQOvTm^O%_MzQhCw>)OXlCob`Z!$wG(XZABonUc>hIL`H<_Y%`D{}oeDe8%PkaAg
z=+9vdJBvINZebI*et~$8RlBjL#!BykkHgQy^i{fU>a-`<($J82Y#N%_b=qWaX8m~+
zej3SY$;SZnD!oGG+<duSzW*qGM)e!Kw(FsFv{?tf%wwHyYjEn32zYLYGfN!@KPsK<
zfs>{tRbjGec;|s17uBTJurC1~erW<8%KOyrV0;Gmdj1DwTKY-&D$l56-<!|!ocot~
zZe#G*IyI@&rlt;_>%d#<=9}tRBYMgTY<JH2V}I}JEc?Y$LF67fr|gW}Z|VQ(-0Noi
zCGjTgQqg(cCrslrZL;}H)oq;P^Kz?nqN!DBWd1?kr<iBX8m$s6MoxE-Q=V;klJffg
ziSKddDe?x{u{>ZlPm5CC`f&{QZ)$>Vr{iPT*Vw<E%RL($pFg(R<ZkIY9NcBksg!Q>
zq@E)?o_xyFrzAHX=2@X$XLWSRtGpkBIZozYG*+LJ&L@2jIU}FsBJE$4?k9NX4w(MW
z{1li<#y(k>tSk<#uVo*y!+JzC)wHu5KYtASpzywhJYOo)3?0hOT51A&d(hqL*VXUO
z?kArJ^Dj8L4Wr`O{Z963`JJiXv3wZ*yM=SMk#+2)S5D5GDpoGt*+e_351Gcp^i48<
zHuLJzpLTGy=i}IpEqObKdV<j8(q)l(qQ?i=;~^ZCEM7(ZzRv4{Z<5!}@ggg$t(-1_
z{&pA5wR+*5&;oV43s|=RhlRg_VVXXFTYh|KB>-<pw?fC@dJVWcO1jS#d6|m;0eQb6
z61ymFp!awF8*vj~DViIp^z5s7jQJ7mDFRpT+Ks>esiJCEdBcCU03ERQg%S8Jq<hJ}
z--?~AxiIECpERj;)4qYeFW<$8@$05#crQK8L@$mDFJ`|2PJ$D{yE#K}K=YhypWdap
z_2*k-(;Ub0<C9J!n$I3VM=HdX*G#|Ye*jmG8u}TVpt{@~bh@1!H%}MU<a+p>F#V}}
zv9X_Yr0XpbZ0XM;!~P=H2a<N2idEQXviAPh+@n*V+b8i`%Jx_e-CMsvFSHmSj!<@Q
zjCDG2t$NJ`<VhmG2E3#yv$g@B`_!tDb37Vx6~{%{%-#hx;bL;;u|^a*&#8%+*tBN$
z72A1V>C{B!>)5lPCN<hrFB!}I|KslM<KwK#{Qq;$q)i_{+NPx?t!9!GX@lQIZTb+v
z%_ON%r~+-{%EInu(x6oGRV)SV179*}P|&z*hoV7X?UbT2@yl*kTI`@J(-skAcWq%s
zR#tmYQXbr@plxZUX`Ju-bME_2CX-g({q6qq`(s`+bKmFTI@h_L&ULPHofh=mG|nAE
zUw!$Kg!t(jU7SfHCy2(TbBN@YX}_EO+5zzV@(0Q71OG<hTj@ww`Q+pER?j)`Z4|z(
z_@ud4Jnk^|)A4sho5$bVC?`4M9v!=0aF3kk*>l*V=uPQRtyyx=jdHP+W8b*_QM(85
z`_?ZJ*10N2{)XSbeu0-VzsiqVTZyi=LASy|fEQ#*`(|P*G=If&7bTy_0CUMX5WDx=
z{~WQTv1r|4#x?6~vv?zPev){MW8sqCqc?kT_uSn@UX5_?Y}N=ZuRCj%ud(HnvvwkT
zquDQtCqgyZGGl$A+H-8_a@KwfdGreW+j4~R%K4dh);=r0MYz1C4_K4Xu4Hc?u(X6j
z?G5+_)=e{s^7eImF8*JpcJoc^_OzJt_82m&CGM<U#yqRtiL|RWCld3eHa|z3uS_D}
zD>VBHtu3INqc>|Wg1d!(jqE_?3pW#i{r-*7y8Qmqy8A_I)ySnS+@tg!vsh&W6YD)I
zzp!(L^D`~`1T--!_ID&dQ>$__@yYIBtuq<_cn~`W-o%^zz@feH+2pcyk*`r-o*vV>
zng7IQPd)G2i}&0E+~ibTq4CWlCR}^|*L9f{I(y*em)5zt(#1{u{w#7_I#g$i4Y?b>
zza|Eb#<e@#&Ayu7t95=3Ssf=Pg#F!x13$XF?oX&E*}j?>w8L9PyY(;rOwZPh*00Cf
zJ$;G3nFfD6FP#}j=Z>?wa=P`y<~wGmG-rC=iGQgN-V8@H|J>g~yV3I)XIs;Tie>ne
zE;G&Z{=_sVIh#|l6nS}zY0mXuR>$7;^kdAIV*aN|Pd)~`yYmab#_!9KyW%^^S<#VV
zpOK~5t8=ZtHcNgUt!cG)l>wJo+L1qoI>Y{1?JJp;`P07pJa_7<?T3)pYFF(Wb3W(n
zci!?t+79Hn@~|TJa$k9Geqmp?{L<KZ<qf&L?_hmjLN2~4zFGTc@B!?t;rE^F>&-@g
zu_k1Wt*?N{%^Z1$a&EQfYu;1Aoy?16iy%ionAckUfY$1*!1NUM>~+}DcVf>9_f_Og
zZfchu9d56TjJ9J-DDy#ZrSA**mcAdDNv;%hT_D@xm6>1pRvsS4k472zx90!yK2Dz|
z`MyLa@~INPVl-Saz_T|EZAI=fDgD+v<2s4TWQb=@D*D(6-A2Dz@OwwW?*~SH+xFNO
zg8p(*WCQrHK96XZNt8azz1hH^xF6|#=i<0MdwCdmN5Lj|N<DaV-<gFMm?EW)g;96Q
zL?my%Gtz#f0M1AOoRI=J1K1+$r9^rP>h8xE{><rNdlc9jJ{hg+{ATH*fmP5tV?w?k
zu<{+7S?lBbBgp<R@*AJk^lLW`+{>PK93BbAF8<K^RdQbE!X&e0)BWhFQ$4NBkNkW6
z%Q>s@q5Q(fIj<<6Z09P@kkEc~Ro?nM_Urtm^7bIx@BVZ2*(jM*KD;+8Idq=EE6ZoP
z^bdVY7Re@pPkQg4HIm=q@B(kWaCial9wV>e%}zQ6Jkn$C15Uc0-0PAj8EEOVJP&C0
zo7|W#8GD$v4?|ZcyYQF6Bgf7`?%oy6t-5+a_aHtr<(NUIvA0`(B#zu}07r@+{UG<M
zOD~yZ^TvtDcg5q?Jrh|HzdkmwDQuoQ3XV24<ahO7P5DyJc(Z3LechV>&gZkG*u>ax
zh5pFsMaaFu5uZ|}_5fIq1U99?&e1+VroMFXH26(8GJgKDL2yz|9+O~ffuAbEc+d;I
zgD=p|-#h6W!M_29{{5xIFP&G@NB*73)6Kn^?{N+qy%NQ4>BD|`h`XV)zI{?pTz3EC
z=wWorOW^P6@#f9F@Vf5rtc1oTGye+u`YF%#tN|IIXLUT&+FkSJ@LTKMr<Bv2I(HiG
zq_Z;OBTKsMT9-V?=&Q<twRTC&B$ld;3q^z89`u(Px5lP6C+MBlko-Q*xPr0o2k$}o
zk}v0LpQT*I2ax6D!>wpGYxgcih98RNR#47|=}ik0cjy$ul>IEZhYMkf<3psqSJD5{
zx37YexzLVmtYJPmQt-QfgwIZ5U)_(7Cg87KzlXnMM~TOV+k6?D>2E#1>o4hFaT<!t
zAhT5NS0{+$gqL+*pdb7<vZl6c<5kA$Nv)#~uOeQR_HwLk%J>%TxacN$#O~*ae&hq!
znr5)g<n{@-)RA1sRAFo07p-gMezaN8jyqVAu)JReP06N(M)9Gxe~cJ0*#rG$=sn~D
zIWPB!Psqtvvvq^FrZry`jW4x!GPZ9*cQ*A`vnEy!63U7mZ!Gid*5ref#cs&_u5@w#
zjU#3DLDPTbmx(_>nXb#~l0&77wbpZ6fQh+v7x4W>Y$N|nkyCh<;62El)8q^58#JTi
zxbcq)PvKwQ?wvVdpG>qSTT%8<-ymzLO{~kn$wMKtu+^>u9qS)f-`SU=>FMZEhqE1h
z{MUH<Tc8c}EAUKh0Jja)HMigXLKV6HtJg#ZT;?iTVsbj?8_a1V@3ZtBSKsuf_&Kdb
z+;z+kz6JSmbLh^xu$d&EuX}sxqVK_{vOzvFz?`pZ+VEx3Xg@TxBfmSsyD0Tv-#<RF
zo^x&5s}%13oIG^;ju+S@8n5=+;^)Cfv=!JEEBIZ=m#>Ll;8T_VH-3Nrmd5nci-^Zz
zzimD??!&}8XQJldbJxu6)?Qi{_HI8u!wz%SkqPj<#@OCq4iewpeJ6D$t*IJ#7kG$c
z6LzhySf%yoP4DSQJ&7%`13!-9gY|n2_I8CIo22h*+9@^R?(mwnfeth22)y4Mx~8hT
znl@ga%NdusCZ&Als@ul9pq(pd^G51Uyr#PQpG|4^gf%w~{D4oMJlbvS(LDmZ7mSPM
z9^q5rl-hP%nZv`(#Vf>jS3;BW#T=&XdTiMcV+t|1Vb*XRCUhi8{kfE>q>k*A6VwYa
z{xCW~?<>(CjC<-f&Vgour3&4p^#pU#yziQeyC?Xt>+H!J)D?XlLyyiP=Pq(zYu^J#
zYhQSgwe|tUZHa%&p*58?d`ssx{u(*Xb9@K(e<yH~ldyf6;_ju3!{y7739Lz-cAaSm
zbg<<EtA{y@3g25kpdIOA@w<57V*FLxeI7VW8Of5vyi<SZ(A;_OLE!UHdpYXHkz;DB
zk2275T_kLB7nPc!VjhtnL~(=oAaYi|N%p|waq$FwNcU%X|HEs}?|v;juI31zNzmEd
z;I9ij*E``O{m_c&>`I@`CO~8Jp|O4B&V3DhFFU^@)p&M&>KSMx4-H1io7BXdRq+v>
zbePiiFl~s&N_-ltpxwR#8oP6PG_`cPM`L+ttjnh{)oo;6Z=mj3mc~lD$E~?x;3+=J
z<rdJ`ozU0U_&jM!M$wpj9VcZwX`Yp*p(t)6&ivVTeq6call49AAIs0$Z*ade_PN_N
zF7eWrkpal?F*1NXL3cd+yq83Cdst&AHsvGwW<M~g=d2I@VUD*pD6ae60(qi16wUXU
z#*t;+m}QKGaqAk3<WiJ&L{o+SHao^PPj8VkG8ZTATxIq_3wCetbn@&4<Ww%d`#HbN
zDZXu={+_t<8x;Q6nI*xXoE5<Boxv}{e<g9|se!?sGrs4n!FJxWZm?(m)t+o=*)LJ>
z@uT0<b^~;H>(H6oZs7ic&(pTW6MFZ^UgnT>@8W;R_oRK;wReJjv{P%fz%~qgmcrqu
z{BnQJ`G4h{P+LLyxBUNK_rK+z5N=iP6Z}>_2irGzjS)jD{Hsh0pEKcOJ9j$#WdT0a
zo}*Yu;1)jAuAbe*_gI{HXDl}VzV^w>{C*!NrCO`|@ZLrp3oCdRoG$raXN%^clO#SV
zJ!_}TBI>Gtor$#N!RyaHmG240`m5kM?fg~nTQo|(2(R7qdX*zWerVOdhTm$>4WE_B
ze~JExhg-p%zFW`zc`1ZTJSzLodq&)hUq)?9ci6UqIJ+h<9`8K=`F9WJch3vT;A8Ol
zac2<oVSNkz`Q7Dy8PUJm)7enlAMIKh!TNH%|7;z$Dm-D^&_1SkIG~G&Utjd_26l#p
zjs5({p^-W&f1Gzwzdg&h@T<o26Q0|C!Cw$tQaBgC^xHo~x%~bT&TpK>{hQ>BoQ)0u
zCdtF2tIj5d{%!Ui=M!z`5UVyNwLo?jdMS%d=*V8qm!?)N$G1}*N;vqVE6pV~cC71x
zQ$5GR*UaBWyl|BLmlL#kLb18Ne?EJTH-}GAuD>3A*5&7>?NV$&sODC5lY2R~l_%$h
z@tmccYz^7y`#xoAS#R&Gt7yuR4}{qBsi`-%qUYGVC-=ch#bYZ^h}GK~(=&}$m)r3n
zmux(xp3CRJ{lwCn`TT^G*5bmqbm!5ljfMG*Rru6-E*;DBwEJQ31l(_M=Yhk0Rf?Uv
z`)`Jj^XTI`@Ueq4`Q#IS^=geFT4%_g+JN57ltk;;Lwj@Kl=r9O?>Ds{T5M{s<o_>-
zUAnS$I`^%_pO-DyRKi_2Iy=L68{Zu_n6(oZdiSi%zt}XRTN8OR@ko?s%QoCNpt%?~
zk-k{>X|J_H=iRWeV%&?0eUv!Ke3y@7{X^^vWmn4QnG89Trw3=|Hpa*YY>q_6VH+*x
zZX(tWPlg<OW-fb4l)G(a4d<q>Cw6Hb`@DTTKhymL=#|ODv!<upy9w|!_&6PSms$8_
z%_+K0a>>#>w6FEbW9&zU!ZVhm`=*jxV=B3JY8tVR_J+#3IkVXvgWi97(}IEH>!Rr=
zL$lfqYftyn`b~}kY%cjg^!sl1g3lD6US^1}=41WuTJvg7@i8b5)r<?w!cJhbu{Xdc
z*iJ!bM?cM+j`#MJ6qm0YI7hdV-|Hgor)HjqWB6$6v8%%KH5bWACMO?-?C0Y6z3h%q
zB1yi9aiV?3y;V7#fuWCaIi`$rz|)tL*LtePPF%hnx8BcKvtWSriQW6>90N26ulu+Z
ztnv#K{?7uVcqq&I7#diyfcA9Hqm7j!u6|L5eb!RVgBQOLRU4FFS7i=%_;D14?YYpt
z_zzn);Z8Q%gKb|!PX7C*5-$kP&0&oU-#ssWV-DXm@$+pyl3{+Mj{WVQeYJL~@DK06
zQ+4d$<@(y3MCPXT1Nn=Pd&|wx?hQjd$1aNInp>F{;i!weEWlhw&Xv4uReWh)?78P>
z&SJB+qL(F4@mD|p`L3ZJc)3Pvz*Ws=VH|u(epRxD5YANJndRX?|K-ERPG9@XHPF*+
za2{b_(m%Jn*Qc=-#{Ed_4C~zsp%rZWGR~taH}-66-{Y&+IB8F|J$q5<O6=#=Gt9!h
zKD`}AFG#ishQl*~hq5Ku(T{Of*>HcKi%geH63#k8hMYHEoc<=}F*e@hl9Qt8n<pWQ
zSZ8dXgbby=`dEM*wPWP>#&T$exmF)B#$AjH&BLv<t(-TP+{gJo;@(@K(^$w!tlLan
z$em`OB4Tpzz@ru9GL-)nSdKJk?-;s?i5C4asLxr78PI;4-)BX5&XHE^sw_0DxvU)L
z(d7U#Sa-lK23J;|b7rQTSf8JUiA^c<Y*dXGpQp7~{oiTBxjkrc#Zi15@@H!OJ%b#u
z$AKdWUhZIz-RAKlHpi$w?}PlWds#O`DW|q%yE*W;wK0Gzh$G5!hEq5SbhPmHc)|Zb
zehsc$krH3Lu{Am*ozTjDxcKcj<I;Vm;=8x_{UUbaF#mxc^`Bv0E&rhxllo2lLjEi6
z-|~;vDlO10bWCikJ)7ED5501JZ)np8I9K*T^!8PpExQ_>eGO;dO6=J;d>=OdML*+x
z2$_?`wum#P>;=)>KJ0*z_vAa1zf1c(yuVlPDzpbQ+sl0lt!hnd>q4uCkzrS%U$&v6
zu6T}k5bhOgF_HG{4?REM_0*5}aj(*kl3QcOh3qPR7RWE>H24hetBo_yC3c=iVz3Hj
znC3bD%h5Jd3|QGyV?AEgzW4hcjLIwCiOg-{TXu}w7UEpQC5eWfQ$6SKY@=kfuP@{$
zOu{GP%?jkZ`kTGx_5lN(1$-I{ljjEdk8uViR>mIoG*cG?){bdr!v}#^{Q98y!{^uS
z(1Uoj1s>@{Z{I|pqE~C9LPH+{=D^mu4OjwuO7u-$L%V<A)}yQL!nY{igAa^vYe{Y>
zcjU*ug1m>m;DLnfE%lwn-daV!Pll%3y8!n7L%vqFoZ|oU`SF}h@N6o@aW1T6-w@uF
zkMurxZ@S`eecsjm&7<Tzd{hn$*OAXpJRB3>__9HKT=YNfzH@|^B{Ma4;Z~nH#GIa@
zejI##?t9|tIX2!d;OR}(=qutTHP?mh7V>q#_YLrL9^JWnuJ*BK)VSyp=`z`i<^#3e
z!!}{Dtq8A3{~hz~ry1~`Y^XRk)SLnv3j4#_P*wO2j)mvcZ1Zg>7h9<UUr`ocN06Ur
zO#|^NqxNb>az|m$Og7p-#)c}?A)3os(|sEXz71s1TfPk?TOt&mzC7;RP^YltifyPL
zV?zxxj~(QMcJU+1hUzGQO~3Dc-<kKeryH__@R`9piT)%*1=scDbCO)Qa{z3Tmq)Rm
zjuqKYT9?RvS~Yd7{j?SPiTz#nUgOVi_HC$EV%8f9V%B9p#W$P8ZgiCFr#rC~)$dkh
z)`$%?XSq46q+4T;0f*jCFSehU&+JV6cIbHDo;i|5KZz#do}Aw@yuSPJX`YS9tl@IS
zGK>A}E!xkP4j8^S1pfQUKaS|8xa9ujBXZx;@op=#hTHuH{3p8EhJCw?^V#uH=P##^
z?D5f`?kt#T$R@z2%+8U&wuJX(yVi0($Jb-F{eXs!BR@_cKfZ*o8C|f&+xsZ%-7H<<
z>jLd9jJ%sYN>5zRyM^-x7R!#eyrnfQw88r3fYvt9n&Ob2Z}?bjpbs3&K4D%5g#W;f
zkbJrJXZeL%M|U!>TFXn`1$4$fHfJA9ZY#1^I4f5?dV$<UZloK0xr^KxC3oKd=W*mN
z^1{m9PVA&kU+z8`nr-FoU(lb{1Il+DjB_<~C0%y~??&k{`Y)!FIPDeMJl|*Dd^x^F
zcM80OTvr_j`BCZHpxkYfmhVF{sFiQl@#$Y{zID#@G`c>*9Y%p%wq<<(BtD%jqw{8X
zcM1wm#c;a)PU2e$Xz&bu1noQMBJ7`0IWN2%pw@q4$K-(j7&NT0kLgEi3*WX<j`Gv;
z7Ix>=UmxnRKBbG$dC;g}j+Ed7rT$m&8@W52#LAb3dd@|kSa`I4_t%fIyJUmO_h{dd
z-^KWQxRr|QbI)fF68l=?0H6KXPF3K4_*_0YFYLQLOBGZ3d_U!a94|p%l4XjG3HsW}
zZwn{u3Uh3*=U@4MCR}ETtNQfOL9Ii2l{Y}&5B#3;t@tL}{qkS_J>@EqRjrh>@)Vdw
zU*eNW;L-O8-lz9|gLYI7yCat**L2~ye&fH>nkjfLUzNrzzsA|Lm!yo~{*wPKe*(6N
z?NjY)&!+Idgir8a^rBn_DyKez=K<X$MK>o$!*n1hkIWiFQ}lZ}z6fZx6+fjNM?rql
zfHwq#V|~P49#_Tl2tLWB{0Zwzwmc*_9oAi<*(i9BT+sMsYe~+9!Mn!?(|f<Kx$<#g
z&#;^UzU_VF@%`;cS=C?S_m5o4CGqnH_!sU2pYQ_8oQbv^7kx#WXMBGs-~1BqwU!&&
z^aMUWWACLG9**jKz7Om1>q9ngOJObr;^EjkL`R<Re0}Z?VvM(97xu6QwCBh9|A7Cy
zdVC_k&HJ6t&q?KXQ0^OizRBnB`8>wwM|@u3^AkQV^Et$)pSA0i#NK`J?J4vFXRJcK
zC&=fn7>*}yF!y3-*WSz8VLEYG%47X;?t}_p?mIDh4b)Ie-W6gnkQw9yZD0-5$Qr2d
zjP29*jP3T7(Ym+7p~N2U3{+pp(*@hFiq=Ku%v#XdsP8EYIxo}rgazc^NhkU3ZXH)A
zdGikZ+Wo*mPEpy^?5`7>@gM$O7ENPm^;YcU;WK~e?j(CLl1bVpsEocdG5=mKmq-?y
zJKqF8@@J*&_`AZ1djHOV{LSc1`ehDp7Tkg(-*FE4P2=y&mpT8Ke4PDep6Lwvfpg8h
zdfx_~EG=OR#Iey$=Ix36a@t{^)a{s%(%L{Y)&MN{Uefj~s`|utLw`eu@u!PsbcdMj
zuj_M{=DR-6r~A@dPx|+1DbMb6*r09R944ojMN#r&5e>uHsO4$%4zrL@+vmSKgZogS
zx5(R(-GUR|lCOHw7tFoTVGYlTHz3x!3>#bYDA``&|31JSuberMUz+tp+P%I3U!-YY
zU4`Asx*~s}$zibch=!=2j-725$@g)p$w>rb%+hy&1Ct38n?c*GA?n%Vo%2O<|57iD
z92Z;zW%4i2s=4H^&Arh%zy-Y3+#hyd*ep_fhW2IkOy$rO>|xHTS;G5p*sSzu;ygRP
zZ{AP+a^jn-y%_SlV&>kAVj$@!Cfl;YvyTPGdaY>~n_)eM9h!bx{7yaD12!gvwU~Uu
zvTZ}B^0hW605JTJyEWt|)!w3fDs^F}+nxmnw-puUmhJeP<<rr)ZlwR@H2S{~+h)H*
zT;rCN;_bQYm8-otv|zYzT=O9q$H-jZyb3riO|5UDO)p+ZxQHI&d;>6Nkq_$Y10Of{
zMt+&Eou+5uYg6FcuB$W;djC#fkv@<u@H(()uCn2AiCOX$e-nL*Z!a7N#ygpBc<q<m
zd7!z@QuagISGwdh@KJ9T^$hwV#@?xg6WXzKP~p+K_Qv1%)KE_n9@jbI$bNi|jO&5F
z;Vi~-@bBL<X^2S{tqC^u|8DRcxd<P4cet*fzTu1aM2K0leMFja{mhSeNqO;@TWCH$
zEpibwiwsj<WNS~5kJ({9W0cc7wUMMB(QS0RAqNZd#6Fj8)88|do*6X`>?rjkJjxG^
z4~|bL71RE;nKDe*S=O^3WlUOchr*YqBIF{85OZ2Z`3$tD7z&kX#Quz`J<8Q{ZuL*;
z?_bH)bPQShS$+p{_pXB9aehY_hj>kTDUfZq@H^Wke4W=T-|f+l5B0=y`GpSaco&-v
zo;}hxz#aEmZxN3Ioj#|vc0d!`Taa5P@I9PnZUZ>3qYo<|{BswKBQ2VUv7Y)Q@uP~h
zf`{x~yr*l&(lz(}6yi7{xS?UuWy=@Mz1o|Up0{O+==`%khYq2Kf8tIw3x{m;A|1rq
zL@@(fjBk^xEl;1F+xt7}z3I0vAIs9W277{iIJX_z@%96U*L>QOv~U#UKML#^wd+9F
z!CtrM{7ifsW8I@T57lweQEqND4rDj$o%ZMpzlFnCkxlYi(2m}n8fi!Ui#D~NuQp^W
z>s!zDEWh7jkFf;%!@>R-M=p5ou|n4ecoa?cA@gN_=krdgUT27iFRQ=RSxfv%bNx<Y
z43TFs&d$arn%xz?Z%E&|pB5dIxaJ9D1K)=4jAE5FKge0hxxi1l9lbHMX=w@`U3qlX
z`|*vk-w<wjF?J7U&4x-B#U5hK$QgjxSK&+jhaZTEAv_{J&22IpUSTYIX<KXTK)*<T
zqSN0LJ;xr8)>$1&?zv<M?a*G|4wHyZ;rG{Rn{yPgUTllA`2IU|mhSJnDVmOvOEY$z
zJxePcu_4L6oyL+)bN<c@kh_h20AN8+Nf)LSEAp$qX1wUkjP6O|e}=mkENs5~cmi0r
zbN^lz_*L$4{tK4ads!pXRv+teovoem$+xfKoJQ|;Td{3uhqXhE`sojwT<Zj<y9*uJ
zKRKFmw7(mFCo!t%cN2cjoNC+(Zjf`K-V2b+cC7Gw6g%!XI^-$(V=QUg=ULLFp<dfY
z<^tPBx$4w-^W#$Qcj)oG1$E-w$vs>r;?+4@@}IJ;oEe^^`rl%n-XczsXC8bPBuaSx
zXhA#4!oJM~iBt5mqu{*@?uYwv-<deZ`>zzdkJx;10qpNg{F3)y^xtFi)Z#BlE4C}C
zT%+JGj2_qcOUTVOmpEy||N8ZjJ^eneESyOXkN-wnv5m4hkX>&e|4J{LFZ%|17;bAR
z@tcM12-en%(c`rDEcF%75x`&y>Yc9te<>)N`2%H%RUc`W{2Rg8PS>v1!vPGLKTx*2
zu&nf`kF(RYdk<wb-ky8>GojFv=vvQ2hlzsczb<&*UGV(71<yZI@LV!c?ZgY7Z7C?b
zvEaFQC+PFmg6Fc;?D=%b8(-#Y?xjD^B!g7G6JPZY-e6sZ{E}>Z1$h{he-*nS$fv2j
zO`XRKBNvkq?A?4QRYHERmN~>;6UX^1GO{JYZ{mbot~G17gU@&bd7^Xcl3lCJhB!9f
ztMK}#_rN>Y(XV26C8wKR>RX>IF_tcJ!60kgRnZL<w2gplcIKHCm6vh{^-J7qOFsd8
z#km0Y0*CS%N~Q+#w1pfZF~K&AGqd=R;@od3`zOMBZnMt6L?hjX+><(^(h1C)@dZA_
z-DGhqtBt*b7QXS$@RHXN8D7_!&*QqphVsXiZ8IAVf@k(5*H+@!*Pf}1AHm8%bhqJ5
zlynjbWmsk(?lE@l^Qv#NNp|awg-Xe9^iN+u=h9gN_0vxrI6HwmUu}kZxrg<Y*$t`W
zz0tb3F^g0uz6{w@Y8IhW(-H73n?A(8UvLJt6C5&z73dA`yac$#{;CzOH6J%IA9gNE
z1{Pb{PCG99$1d&Y{cT?unXf445cE9x+YuSBG8&)SkUWZmLo4r@bItST_3WBxopH?K
z_y^E$Z<a2KziV_Ea5|H@8CCCgo=L91%s2R+_AuYlqkRvURD<$jz%!Ncd5L|{eB-|_
zwKn9d*pTR~UGnQ<-&x%dJ&|AJg3mtAgLRUJRPcU@+|PpdG1^o<AWKs|-<*lQR8Bte
z!Cw!K==BRm>vfgc4xRm$G67u&-$R?8WDOEuDc{G?roE3um~+E_>3x;a`>&5TJD=t(
znaYUQT390n_0M0^w&W>3#E-U%R@<P<4nKE+?AHd$I#aawy7!SvWW6(Gq<z|b^XbTV
z+h$=q4YU)qAGC-6r@639lznwuKQ?7dec3`my#~rT_|Sh2PNV)lt6=%Bj8F2TsNI8#
zhlw)Ah(AVXdMff}7>8#XW2HaFpuPW(<2xuj@=W7H7xZfGf_aDlV-y&L1I;h^IjHw$
zf;UgW7=riiAD|D_CI9EzM;H_OZHsXu31?aBlBD8XqNRye(G>sV#@dQ2ML)qDxRa2>
ztf@``zekH+4k)!5l+klj00Z?m6waT89l5UZk^c$$ou!x*Xm^%3uK`?7GuEfgIb-PW
zKSjUp)G_tXM8B4nIL8!*2Lt{n<cTr$@Mj$;pbN?RGx2j_JH>R4U+my8FaIZT;S}&p
z=1e?%8XRQD^6){yAv!O_Lm}M7bp*5OXxssBXfGnboxab6kDyFp`(y9|-~3ncQu)X7
z{~v)HJ5FGcj4Q;A#!v`<F@E6tgrQzBjRa#4@G~qwn0w1(k{|FwARioXJVt&LzNZiS
zzEDOMy!ZJxm+}2C>Z1|6>`ip3301rpIgQ*7VATBC`oyXISL+wbmO!oq?dQA9L2EOy
zULM-ykjLF5s%3Yguf>O9@~ZTQ%&rp7dlSEw+sqgmcwcEsx|x?;E5E^CVlL&J4E`7F
z*En`b&}KjSzHq;7FLXb&sUbzbcI_?L6qk+uKM>f^0c^qi*zseJY5cN@g}*lXdy~FA
z{Gs1{oi~gx-v6=Xp{XtZWBMOm@icTOT#8n2So2Y9OPq;6g7?1uKk&3WZn$n>hX{v(
zUi~BW{~tBJV*Yoa>px2WpJ9wnfou%)|9^3O|6}@J^p7ojps|4dn+oV(etw-P+fQ6+
z2pWXebDhv(rR9OpSRROv@Bn3NEM3#K_<(f``_5j>-gci4u%~MRUN{{O{88}X%eC-9
z^M4S&*ncm4;<rNi(t_<%C}WD>7ryiO`@6&YlG=xyVVs2XZv5<9OkKr;eCFXVzt(K1
zcsJj3u*=u5o-#bY+oYXnRKDdpauBASCEo8{lcMQ+xigy>>J=wg2ffJLD)v$_YCqw(
z?vX8&FUgSNiEkZPhm4E8b0jWPzQ!o?oFTR$c5cCMa?uSxr*80DK4j-?e6o}e;>{|t
z2TrgqeUexc;V9Ub9NP3$fqm|cUt>QP{qZ7jpNs8Ej7}~4D>d5349aWII3{0%sj~aH
z=%s}AY)v$j*d8*eWVyFDB08(|<4Yc^BG!snTXL+gc!}{V)^=Th3-FR;JT@+s@yGq~
zYYcIJ{Py=WZ=Ciwd(|4Ve%sj9DPDYS5VzXNnAK*SGU$K<!!cBfNhtNoYFxsF_Gb&n
z7r^&sfekaX={uG_G)^`j4hm0iP4n>d)-;oTu>enMZ)nr^EpAVTt6Vj{OW|sB#eh4W
zeM{z5aE`)PIkEjdzWxpPmCr%=vak`GoMimP_%g&f1^BYReSF#9KECujz*mIdqwqzU
zvG|&4@ujl4YWZb7oCW*Z!8ijLb%u3l(+DlifX|f!|L7_w^%y+yLfE4L;W5B-AsuXo
zmTPrB;J=X$G#?pgQuLoJ!t<eW_KBbYtN#mVd}!16hULLg)}D%0Aa17TG3v*F(ZSCl
zUW;I3#7{%-YHzFG_Ryw%mKH1>zWILZFR?PV8UGOVGx8;|Hk18P*za`gK*^8k*l@cn
zeR(kjL3`T22>8%3;Y27}f}J@o!LwYf3jg#Z!+E07bR`)w<{5NS{LJbin+FAXLT=C~
za0W3ALH~vFYiQFyT6`TZ!<Qd52km@|hJpXFa+7`m_>Z%H3eGIg4Q<+QaU#4Hj-fMD
zG2r;)*uEL~PlMaI&)0?g68CAh@Y%>1;CX)xr-MP`7zIE4{a=P3o*o51@~arP@zdb@
zbYuF@z>j^L#ui%<MrOBJS_#)k$DxPu<9<*3vsPZqhIO#z<S%G2CKbh|z&B@QPybAl
z?!zY;$m~A$lG%$%%h%?x?;F6Qa-s*l6D?qC+rC2hHNxPo5ja)@$7%~l$i5Q{(Bqqx
z=nTOy7Z^(76$6#>TX4q2peF)2`e<MK*#R8d)9#}$J-7SW$V0^#3MRp!cOD#GU->5O
z^M$zwT5(1t?DK`-U#Hi?j}6p-Udpmh=3omG^I4~TzfSyvO%eIFom5{N`%@a97l*K6
z2l=s-XC%&^!pGQKt+)nXH~WFgIpXqv2kWLV{F?zTyWhuNg6J^V?{hfMHngcJB|IHn
zwKN5McFht0UA|U%u3NEB-Rd}b#^p=Jw+u{*#dP79!e@#T3;L3O{BxW^FZ7R3<iGsT
zd*z2#UG6mAE8XY&p}}c7qH&SC^T%qxn)m{~E!=aLT3Ix_ZUO#EK3dNhXoQ@2xdXH{
zW!h!zIaa)AutAf^7OjKYco(dJRA2O>Iey_=#56FTU`=GO3;$4^r;F-{H$DFJ)}OM0
z4QtR=_8<D`2O3E|aLZ6n(1#uG?~$=@G2UQ|%Hg1K6t;Euf3mF+_`WOpK2S-nS&d!t
z!<WwoWGk51%!IW8xtAw4-uPwbNLC*((b=4za_rep&b*~N?kGuh+%Ybd!M2fnjF9)?
z*7ss_vL_ISW{JP9>sVxl^j`Lb-rsid$onVtp1Wl9o;`&F71*Y+Mre!Q+E?hf&TQy-
zhskwZW`-)}y?;p0JFet^W9U@HyWT(4QErBcZA9to6Oz@9jyDc$w*8+y)pP5W?DL>&
zj`_CkjB9TlAU<<fvcQH-7TB<|b)wLXV3U0|{2QGb{0`)djUUC96_0DrUv`9^{TQ6-
z9`+<{2rk((Cy1ZWf8E^|yjS@F{>SOh(uKb#ZGYQ%hM87>d-V0alqrip&%2$K#Owrf
zD1Ol#+>P#6Kf+6(|A2GnaI7<R^<J>rHVWb;{!sg(lTXq<a|GRtZD0L6wtX*NbfkSR
zJ~n9I!c0t!+B0)Ky<^Mz<JMZj$HmUT9*+6CXjD0LX$G7fWj{q@h3|Jx0pH^L;8`Z@
z?OO!&pYIAIb0=T}gc5`6&Q9qpD{^J0m4~IowgFdv1v%qaO~lroM4V>{ckoS4k(->e
zz{ulzPad}rlZ0Msz7N?HXU(F!s-WNBnAy>dnF`Z9i!(ZRN-q)fhHQCWGJK-q(tx#*
zyn=>(k<Hhx9%#fq<NnO<4q|>{$XE7+(rR0KI9d;%u3VOPN$Bte;9mDUcWokTL~oi?
z!<r!meGxNtb%XR+R5_*4Q4#Ljm}NFp0;e;9wc#wzFEI9sQ|3{{Eo$A)K349h_YCzI
zKL$P5epU*nR&NwKzLznY_{9nIiIx2kV(;p~RgU;2HXLo9HqX}d<~qVSHHX4kCGt!3
zSxb4t-B5y0w4!!R<kG~k3(c_ph->YK4YX|%wjt%j8;oOTrJ0bR{7#b`pJ?PegKV<T
z-3f`t<iy0@NsjkFHYu@p8slX=duvSk&>i8_p(>Mm>jIP8a~^BNifFo=xnQo=y5wNB
z@gdBS_5c+(uQR!dP08f)Z<;OdPH3MqpdEb=^o8K#nfAP_=Jbo3y)(1Ksw{MwJK_WF
zd3(jI#h?!tJUHt&?umQ0L2fqsU=UxS=C6NtG+lyR*WAUy5ByLQRoo#kZo>aTeS1d8
zoyZwY%4aDbLZ<|Co#adqaRj+6c#eoRv1ygl$MZoEt0vv*^N4H*y>DbLL??RJ365Rr
zCyVAu`2q~|5^rQboOzcoPV}L<l;1K7Y|^<8yp4IIEsgyW?2!yG*6%QN<3*3`fgXaU
z8;IM}n#N2ryEG4n!JTrnDW*{IkZOC?uar02ER2tDNV&jbVFgFSu+pFCK{%*~$Fj^@
z2>)s&Ih6ujL??Q<iWiMV``qL#O3Vt+?r!1CzQg%~w=Rh0@E0K4nH%sSI7FZBg=1+}
z@pxm}TmTNaPo<EybL}5UWkjFYZ8|rocY$41i9I&7X&H2*HN_Rkl`C1xFXz1A2l4BM
zt&R0c5nf8bi*S<xt~9z~KW(?o<;(&xSdAw6yn`Ph#=9tazZ83xVGU=<o$>-}w4>N~
zn%9i(Kn0FU#;Eb_qaD$h-bK0l^n3gl+}aOOJ-f!FuFg1!wqN7?jpW+5`ESRD?IoFD
zXiKttg3c}Q?aqwm7Im@zUhO3Q_iKYaZj+OEul~0=i7z~Msz-e&W;vZ8=L2iey^N(2
z+b4iku-W$gb>`pEUyx(uxBONgNBFLQ|3=x&_$L&XZ*c?OZ(yuC8!p_*UY5;w1N<Ue
zxgT3OPCxkI6|=h`3*IW;Mcf=RS2zsjPBC4gzu>&fUhL<i)}P?i$TkjaVz()?A&?<4
z`jQW3JN7j>9&WKVFMgd6F(Hk_gtQP7!ri@|&5P}8ZC=F#V&@v-E-XH<eT9cCHm~9V
z1AGhD8h7v+JN}T?3p?eHwSHK}FS-fV3r&&HYlZ(`jh{7>;vz)@0S*jvSBwYEJ+`Q&
z1I_JHXrd3gE~JMBt)0lXi_P22MV8H4M`c(KY3=0jtay!cCVClJLpfvDP)ohIOwJS6
z#epXR45A&ap$chdei7}Y{Pj|+Pdky{LpwjEtzf-Gtj&g33)+66h_1Lx@St!rb`3gW
z6CJ;PoO0UK2yd)w;SFdD9Swb<vpw1haJm^8BAl}CrI^SKF0p|1<cG+BPlx;M;(ymr
z2fr;2aL0Ohl$?~V@YbIt7I(+5C*~BnkqNiF*!f=M@J*Z(r{5U;%YUai0e{kA8ywd1
z^)a({4LUblAKkDQJKsc-D^*spp@-qMKmU8qGy=269AX_U*?2y*KumK@QoIMuv}f<0
zs%PE$EO(ql;9&y~SHQzp@V}mQtHZbY&JY_M@UHk+eMB^Vcv$hl`mTqLWY-~+R!W9t
zFNtob{{s1`S^LH~-!2+xtzq5sC#KHE>S0f2i9?laF;hCrRc06Ug1m>CUyDCvv7xVg
zSocYXQbS#`$-{OnXWt_aj$dDr`qb(WKJRg<Pjgp<?$^n+k0<xE)4PE?Lk2G)4-jj8
z;Q?91Tu5$&>SC8ga~*e-rm_>_D;1v<yAqsV$FuvH_k9xw`l?Oh5c)U|Zh<o$Ta8}E
z9@OtBv6*@D1BD~ftK3xtjD{TA;A=z2Cqi}ND?{FU@l{6m#WVg0xjkCH$~@8TzyBS!
zfZvAtaVD~#RL~Z7V@*;qs<fxJV$8SNYM{+*8T9dx*Uk@%+R2U|+YYp`kUAS2;?Xp(
ztS{{y0VXq#*qF}yZT$M@q}NR1@uK!BPXm`*dWQCr^ZoYD>)qqG_Ym!U2ftH>od3w2
zMVax$#c^l!>QE@r+NZMt<-O|%^F0~jZ42?yNt|pUJ|fDA?&AU*sQGTrs7JY1&iZTk
z@0P{Wv5Vmm#_$>Xj9rX=<4!KkF}W_EYh`X*LydI}+<D#lr`mfCb(0V2$j6X*ntQ#k
z6pgNiF8<8qr1M3y!gY-Kya#&JoT&Ye(|$mE^2v#=0vjkxdxO|1^34uyY9#N5_A-`Y
z2fd%X8<(Y^W6S5F2lqGmTD!L44tke%TH#sFK-k<J+liAr_zQcEvqtgd@^J+;kd=Q5
zdpj8K6~Lpo>ecX?V2*t>RHt<}_!`DZRP(^IUFdF&L1*VK;hAE8^?wP!6@PaocwFoQ
zJ7%9Btvy7&8tR=17m8=Ka-(4Ft@V)ln?t?gF)Jo?q`bGjl3f2Hc#wS**arIM4qN1b
z7ngAS`moKvB>4?2TV$IaT@|uA)ABqvHuxq#2l$=9=UVPQX8j<!qH#n68<%I2Ym%Mu
zBKtb1yESCI`X-uAhL$bLvrgPjoM0t;-K=91G3r*b$0D0dHlXB!3!g`QpKcXv2GLp6
ze_q_r_CI00!d^=-4($(1?*w*Q1M?8455-CxzrG3jYJ{eo#E%yn@=lCh<H#N`^aozO
zbI!C^RnXpE<ciu-J8DmDWx_48Q-{y1*t#P=ye+0^pG0R;rDF^AYc2W7$l1mkh&-m@
zlHR9i?@q~T*1*TZ<FI8+?`MGH6?E-5=B9+-p8+>X@Iu^kO_Vj^zj`{<&S$X>?Swy$
zvyO4Y<E*`E{kXmk?c2l|i7xGDm-W7au8MIs5#79yoW6D7c5z>a_ij5ecpn|Yk3{YR
zw<B8j3VJMls&sJ-JgVMd)~nUv4qITF=x01@F}0ZyjFgQG=4%D(PZ)n8zC@oxo4#%L
zU*va`ubcJ7G`mL$J~aNoe|PQecf4Tha&|=bm7fGxy0hG#@xupW-{CKEn+)5OUVf3M
zfiK1xKi;MP{n|_R9Cb{(u8dg3@T?;|YrcKWhCMfP?;tU|i(S^m=Gxl_oTbrpCpevQ
zO*B1ayjl3A-{p6|Ob#pM_0Zm|@<{0SJnEn6{tCy>@sYh5{}F4y;rlDluMu#<UFp4h
zflcS(UIwRGct~sXS9zap@_6fI_8ed3{nH`C-L%nk7v(eLZ4kUVb7bj+TwuC?B1=8x
z|BBN#_C)U0%gMP(nX~6cbH5HxQO-K(#!Roo$8^YXj%47C<c8LPUm^!e;pHborAMlX
zgS`vhn*i?MgW>qW%i3d0LLZAQIYdr82RUVEBd>Kl<tsvGwO4W<N`TW&asdSX*U@K(
zpM4|~Zh7$w<H#FC9a|3gI{OEE@=fF5hjZBT2q%tTKh@?-ly5lT!@+gaQ`jWE;>EsC
zd-mr36VM_wjDE#dLr$_@ziaDI55H?-;PdFJDJl2U9p5^}x;)ojmb!mD_rI{#pO4*n
zbk#MfN@z9LzDnzJ%QO9-9xXezlb>&B)77lc9pVR8ur6<Aoj1<%yM+rHl+RQ)lIHV7
z+cf-v_*j8OxYnBdyh!qS&ZFj(TQS4jRdA<ce;emAw|?dR){xU}eIme}p?;(m8n`~1
z-oC)pz5>iy`qdhKk8z$Gzz0`pOt<FvCFX}auy)0elgNyOe1~EDFL`KQdB<X!e{hg_
z54nca4sB$?vv_ecc>qNNnm_6D<Sf}*_FTZi2>5`HRwlo0>h#-PPW(Fg!_<%R#NmUK
z?A{_-T}ixQ(3eXeab$45qcnArG52AkNRLz_pE_wLfG7FCkQ@EjXV_G34LX@}AN{}R
zHPtWHAJ;|Gk7M(gnOcJ*XW+%{n`Qr;+xyC$r+U88C_4ff!`bWDS@D%m$1Y6tk+ZRd
zb3aMW<S6H(az82uWRUyubDZx`eyz`8bL7k5No)w6vt&I~m;9=!i_@Owkv)ek8V9*A
zWp8_D(a0g>f&;@l6Ti@&v&J7bq%#bf&un!=U7zlsXG}*|m8LFzKHqby-Nsi;y>uey
z8p@)%LB=VZ{WU%i@W1HLcyc)d>%T&O_u`)xJ!1PI17`Q)Z%)VYb7nb1t9dK@FWNoP
zwi5ejRcZzEYW!Sbt(=RGnDO0}%q{x5F2KijcoV;lonOwdrRDEY9}Z)wOkSAyn0zw$
z=VIj1mwzt8nLE8xnaa$CiB{e-zl)L&fv1zDi%&OZ!+145+h+7#mNr&VFOn-=)H>TF
zlKUKT-|?R@CLiL=@D9%Hfzt}#hvDK+t1#1#bRj#`&cj!7hx$8A?ITr+mn^9nPd)N_
zuAI+D`LkbxH^NJ!bxoWjN%fk#9h?K~TFN~D`1C5mB}WYTUCf5{0}gU+54k!Hv2N-Q
zm)68g!^v0i6Uvt*T6p%2d~=Y;Eb>;qd86<N9f%K}gbxB<!7ey55xLQNQ*257Jm?pj
zvc8rxGsr*56y!~FYsi56Xr108%bU#vlc=K|)m?_nBzHjiU9_*Z^?N?QlQrVub9+Nk
zt*N59_j1?TQl4AdB*#D;Sd?=>bXmomh#vLMz1rkj*b9??+Llpn)#5TA_RHW8vt`J$
zsxsJJ$Ovq8+UaYd3~jnUfZph<5BnnE0rlnHXzbm1`TW_be7hOic8*zl_a#~b#GgO4
ze`Nk-Z?vK#8vGnnozPoW^o~u99<DRQ0>v_B1-8M;in(U(1af1|U9ffK+yy&s5e+m>
z2u*IpZ_C=^!VtKuo)cXHoHeSW^6In2l(at!9^D(c+tTNmDEuNmaa*t%gWn%6_<eQ3
zZ**!<Ml>dVn+vYhS4Z5ey<yfB8<Wgu$0wb&g1d5h=l$f#?VUY+TlwJfP~Bndv*`5b
zk}xoJ0Mq9vYf79IW_|gzis|_B_<tv|dfQp%H?OmXjWF(h>PvPl44LUM`r&u2SwCl5
z1^t1e=GDeot~`0fB;;;^KjdeO0GE3?>niH2Tr0E`gRa^nvy=E4I0LT#t^5~!E_cU9
zY1;+oweW^)4fe1T&7V2d<H^iW;`txtdy?N`K7|ABNw)gS-&gx8{@kP=J1xBt;I@zF
zl4p`Vr+Pg(EqP?vAC--*=Rw(FpFHpXm3nz&);_KK@8GoxGyW#VZP!}K$4%Wg-Yb8I
z{4B_VdraLf_Hu)EGSrRfOxwfw0jQ%r^2QQ#upV7?1^5DIGg&(>cXxO=JKx7yfU6Sb
zaJ%pYK7>2{*PK=y!xz9E0|DNGcPbkxDl44+F>~!sUY62)-!;&2&)ugQUZ`-;r_gQ$
z{hZwvN(DH69sUzfNk3<|HKty#M(<#!&0Ao0Yd*M}q4#afTjM-4^|Q?DexJUc1-7T5
zul>+h2lS<LGi{W)6S=Z_N~k6@-7M*XMpje41$vwhZ?sW<HRW3<|2gc`KHArMy~4p(
zyOe!IWT0CeP6)mik<YJQ-dHD?B5Q73Qe{fJFRM0-%q#hYmy9C^h~&&;%r|sq<pzAE
zeNpj#1Nr1S+apW#ZaZ{$XPEpmkD0V&$<lY5TGi`B7Qaevh(6{@a%CHQ6`#Q!vy4}C
z=6*YhZ^&tP=K~jQM>sFAbXnyRouzD97Fpub-dy-?>F@Fj16(TCgkTvwRJw@V%l3|!
zheB7(r{DHU);O}u_51F3<L@}#T`CLkt&>}JHhE>i%Vdo)Z1cOZ?($_{-vV?G;}kD$
zNB{JZqXl_xZFB7-1h5DW<(YlB%H;5^=4Nw`gnh^UyJ6p7@0DX>khc1;#UCm&yR%#I
zMWKVUJJ9Q^8tY=K;7N2@_CnwSmx4$2z)x>0c4hX$Xj(XLEiIWZy!Ro`igBL>*ICA8
z+o8VN3EId4Zz~_wMINVHOUKU_t~EBb(^@F6_tVbRXJ`jK)5@NwZRcvWGhu!oGFP%&
zANDNAwg)VIFA(=++YAlg>BAV(@c#3wCr_FmyTIi7k>|zvo%_TiUH^P(bOL3ei-rj%
zt-0vv`pl)5kZV&q0GYCDyY{kuIVK%2<{4uh^9&r0c?O@j-^q_^?`87G?Smg%_Mi{W
zg%{zw7HBxa9RY)7(ezcwqKD~UIsUR;p;RNeSK^wxt&OQ$c^7^+>$UIXYbUXn+tg6q
z-G*H2;H+-;3Gx>qBc$&g<8%vu*wl5^PvjSB?%;_d(haG<Gj;z243-bcgE?wmnGcsa
zEFAwSba<9|(41${>obw1US0eOJQGdyQ70DWJ>!*Z4d55tdbgUj)Q5q+1KGLvDeOtc
z|4v}i-cbp1W*c&5g3i3Z=6tJiLH}=q`ETQ%+}J?J3-~T-h~N8W-@bfv2Duv4S%b~p
z!MLQqrvO)^kJvH#*uEFrls+2pyIYw&rD0<dxmVHbtli6b*Ao7BX3+Ufp*m<FF`L{(
zE^{hbQ-Q2$;?C3khw`<D;ep1p@KYdbto}w;dj6D>n#0JMZLC`(_&r~v?o#Nfe_0jw
zh0~i~Hh0Nk+G;}1khgZ>e*oJBz>{arqm-|t&pdOUL6#1N$Jf~XM&QnV2j3fbQGb2#
zZa?#JS0_5MbXiKgp#0SJQ_OFo*o=m`4(3T^H4oASK{?G)T)geKqxX8(X`dk{N++Zm
zCuFV*;YW|iHn=)e*MBqXNnjNX9ESH_MaLY9BhTTR!|=Ie!Z&&U`dx}kn7|q}ntP2h
zYWwxO8dGldgw$)4ZKaIpdMSG}57_pAi}tdVeHFg_A#JLUEM@y?_f>eekG8cJD_ia$
z^eG%QQU7Z^6F%M#9=<|b!I%S?tsKZ&lWU!<^>`BA3C=3*;<wg7TJt}|Z|@F6)+m1b
zl=wXw*mr-Vtru4eHn!n3bgS(Pe_G$C#d8JzXMDh|hx|Nrj5C14+LVmhelr*L8=G+$
z2G(SHrgfNN4eVHbpP%i^_xbGwFIul<@gHlw_6m39*s|nT)SPQRwzGb9m|OcC82f>7
zl+TfMiG6oFF+J4T0e*tqio%z0QwaAS<{|j6_u9wT_ly3wY>wc4)WHV9#=G+o(QY)i
z)*bA5wy3_1L1V0nJq+rpy(f$QYp=WT{m!EQqM5??-9`UJC&KAxcy7l9-h=WM|ICm5
z_RGb>_&<NGyC69SP}G)U(Sy2b>uAw`t^WeqrEhP)tT5(Qc^;up`C!@WJdUi$U1BWl
zNWMyc?Ve_Ky{fb6v6@8eZSj>mZfaf9f$f2RuK6R_VI_RNh7aOSK2P32J_w%MH7B`e
z`>EGvY7&NaTB-Z+O|d20u!W+O`7HI$=kql6RR0ilpCvzp+V}<QT3a_Vwr-p?$LZ?g
z=(2UMApYzy{oWa^A@++nkph_Gy!$A9jw|Z-7gb)}k5zLIFm=D?vIkaFH$wZWtMLkE
zjaM*VL0vmuzPE>>b;z#gv7=a`;3Gx`E6#TNm8+M?evBeZ?R*hms`*qOh4b?exD6HD
zab8J|ym{RJ@jCY=%;)#(;R!YK$&agg%JcRaVEH<5yq|C3P`FEhcfmD(8ggBF79Xg~
zvnqU`(r=fu*Ae1u;bA^nYi5!8`zDxLt-DS_FEQ3xh5nU0d8YBD$Tiw#bD>wavo>mG
zT{sh)tClkj-G;jI2@rp2{WKlqba!bt&VOvYQDy#yXDu1lJ!Pi(ndz)|KZ$>cd2d1A
zMC88*|GPsqi5B*@T>K<05z6AfYl-rnZ~K1VtVGKc-gEDh)`A-M=UDgL34HZtZhH)Q
zN37<|huGUxUom`Q6TpG`a-kpfl|lcikIsTVw^GOJe_mn>zaNJ;bRO(P+jtx2tG#r^
z3xderA0z*7!&m+!xf=1!da_G4G5Hd|O}!KB-%0LiZ%aAVr*CHe5g(reO|;^pZw+yV
zMm8QgOY$}YJ)CH}%+nW=;mCnP8Q#Er<}T45kM?(#vM)n?K-k+i)O@GN@hTtBHgeTB
z@LTiwS;jCdZ)tCoyagYHZK-Xww-eZdI8x!W1$^%PmDk=av{z~SsBDkY$4vffEg~E|
z0*;e+aEBdt;z18nE6t4IT+`?Icc}z;8D5KEhlvk_3*o6B**t@|iB^9dBAnbBGPw=x
z1w2Auc5bTXCFU2v5dpRm{<j!sZ6!Lymg$?9i13X45NNq%*jM;FbhAf4^AfXoFS<$n
ze1vW?*u1|9%Fu?|%w+S;4^X!6*ZJCy^Bvfd_Fe?R&m1cz@CDxCH>JOE!~Ll(_3^Qv
zjqncf{>_RllRr~@V))<B|810;2rL1Q$rk%%LAfaZU+2Gte{)S@_;=%liC1_oI!|JU
zy^c+2c}m~w%Wr9Y*~dxa{KU(Y6D?brKX)nX9AeWgzs*m`pP}()|IIJIZ+_xO!~M-q
z{FC2@0msAq13$IC6tq7tv46PyyoBsFYvVx6!Mw}HYQQcD_Oo>c;*y^Y_GmAmkPoaa
z22BLzI*B>4biDMkoczS%tH6G;`w%uy@ATfFpD6E@FE77e@gd_<LruyhH=aE=<+2SG
z=)BU@mm3{oL?&3>$Nls*x%P?dflNw?_p+?pBx@tca-{kCxV{&0)*n8O5i2v3xSJ>7
zm+Lt9cY<?&-{JQr&i!S8{XFg^VF0@#=x_0NjI(*l!RG*Ll;6SKA=_Ci5KofcMy$b-
zb4=}bY2(2cF3YW7xuo096YIX*4wD${H;Kjc&z?Iucv#2L)|aqbwZ`4ZzVlDd#vj4n
zQDdpIqM-}EU1Qc>{O<e9%a@ux<-ETR{o`WWMv#dy{#Wc`?STx4m2f{aF(t8(w`Y-o
zhSZM5x4-7JWBdW}2!4K&>;>4CjEmUqBeK;R(0$75bad5a$fe7%eV1YTUI8AjByXN4
zqguxc=Gnb#fO(&PPflxrFJl?H`Lw<a;?d>HAYQ}sWlXj<<N@W?lN<rI1J?;QVD4uR
zO0+=^qV!4TdM|h)A6;&B!F|<?Yvi0Me!QO|U$oa4v?KW)XMR*)ce{Tbcs1XW+k2TO
zwRy4Rb_I4C^E#?M=A!u7I?fC1ChufLxa>#+@wdbMFqg6wH7D_7tP`=%vg|u)9F@u1
zgmNmx{txj$Q&|f#*Q+THEv~$Udqx5}v~+pDsoVU#^immngXi`B<fB8%p<5#!Du(3=
z_NM=uJ}d4+R+1|VTW9ADQ%vG(nHknb3-$pjrkmfm=tl=xR)t>gBxWDk(2h)P*1mSk
zr<J|v++bdR+W{>$v5o^T{luR&vKQ@KyKzqkYtp-+sktT23dy+n#1+=Rj$CD}JeTp*
zAHeSb9n^2Z=b(2<XKjq{V%RmF*pdA1zoh??Ygg~NZnBvw`*GVYv$iq3x%@CbSjpNe
z=u7Q4ATLjHZsE?xP+iYup*q2_26=P3c3pC1Wua%$j&j)vF6p^n^V_y@C2d?4s#DyZ
z{lAj`e-^6KI@$iej{koZs?+(G$_P2EsvH}8SaG+rRyo?i^8t(J*t;yAi}5ObZDgy>
zHNU9@#{qtmiotvravl7{`tu7%Xbm~^W%<;?Ru<k!zb-mR^i!F<DDnL5(5wU9@NA?`
z{fojK`s;vvIr8J++xGMqJW}~ue)pw??Zn=l$k2|fyPb>LIfZPGP0MV+H(}2a1h6zx
zKL($7ewn+Lq2FB}8S0TvkN>O`8V>hf%=>`;-3!nK;5?A=5ypzV8_w$yl(V|wG_))|
zV8=GH9z9STgYu%MgX}p(+YW0$$={%D=?T%RVV}7WPlpTO)SRlW)`eSM9_%qOb5M8g
z1ZPo$SPq@3)f(*bPq7~%86#Ve^FX30)qmio=%bzN?f&g84UZaf7H`|w_~`64?|by^
zpZwEDE7sRP`UUu>ll{XOpL3grdgAw>W9~8OB(i5)Rpxz?KeU^c?C+?GzfWgmbq|nt
z7HPkYIgoxsFWT`6KMwtCj20fNJH7ZRl_R&O&F^10Zmk!I$wz0F5~JV{qrf>J%HnhN
zaE&fMx@v+wt9hbr5;A@=GXAX88|<0cn1#h&%!2ZGX3<xDrA|tD2=n=H>IUtt=(*a1
z?gU?po*^?bXR%)5e4BFS?*aZ<+|!umyAEAy=L&sj?~3D@y=NKPlAJckY2jACxf>(*
z#)W36BZR)-IkcH}weQXRzOldzVap$Q5u4muf9rr^_5T@sOZKuK+x`n|CCQgjW!jv?
zQz~<jwZqf(kKo6XOhjL{ve%Vwv%b0XV-K0c?dY>@#L2W0Yhv$S;rAn~ZMwL#$6ya*
zi%&IX&T_4r+qT5ZH<>w;+xP_iwFSO;bh}{hhc9&YXFKQc9z-|OpY_W}c=!0ZCbtQF
z71T8)%rVbZKFhdH-a$TRV9%g;PVl>M&7t-dNp~@(sI^U?fB10tH*>*Rc6_tb+b8I*
z3-BYnEWpmu`TtIAp55S4ca_=xSsO`j1s|L106$<H8daOJ-xWI|o=fUCZLO;^!*>S8
zi}WY{TB|==>8FxDgT8bpPSD>U?1TCKeSKIN10DA*9=*QmWbWQ*j}8rOx*R)Z8FtJS
z*fCc^<2tMIffRg^$b?&7R9wJjd*_)iJDIEd;G1ARteiofeq=qg!`iM*-}JQ?oD9o4
zbYG#YQ=JU&i}9g25Qq5<csl6A$}Q$_OnK%qLVSE7PY3yx6=xsRFNSA3dhySH>e=D{
zLAjv5<iv0t_%*oe<C&mLfjur7(EYID@1ad+V{>yyEIb+D`{=5-fzxxq=@f7}H5J0X
z?z_>G7ZGxk;G@Vz$fb~B4K;(g$CkJGS9U{p_)HGSZz_Bm>Ycadwt+h0Gb5{_>9;sL
zROZuXas}%za4?J96a&zfVQ!*)YmMo$1{WQ={4S&ql@H29p!c9H0}V!?SG9Gm_A!{#
zpxl^tnIqA9&~5`Zz3K+#BfuT}mW}32_R3=y9(=OO{6hmVEgD<J1bp9<4Y4<urIY8I
zT8lfyUm@?52VCdztUN?64z9z$yx&RKGU#)+Bb2f@<4h#$kOP}olh}79*v9y|H9uKk
zvhADlgkrUhLCXf*>u%mz+)Zn3U&fJN#kvQ1oNseB1oMx)voR75c(Ahda!<Arw=tBz
z+T`*d=JRcn&a)?T4sz4r*L3TVXVrW+@g0V@*CCsk1I>q(+w`IH(t0Mjtym+y6WvK4
zIKm0<x9QzQW@tNesaQDW@O%r|b`)Q=gC4AW2hW=vdzSJ|o*%mq+Twqfvck8@U-`Ry
z&#t$d-Rsl_v@DrvkQFX)GoIhL*pKf1P@Op^y1``}5o|#B2mA-_88bPvQWIJH<Aua_
z0n-fQ`F#R;FaO7cD@^k){2!9{$WY|{jOAJI3+(Op-V-n18k#ZrUOoXn<IuHigDmYy
zb}xahXK?SsdJ7+SYy+SAI@g$78GEilJp=8ynxjjiL-Io@mn=33>kH<g>j#%sbj2^-
zz`9`uy0!w{dvpgmeJX+b!<2)5+_r`dbE=($=`xHH{g*FEnak0Y`<b7`%nxfN#ji&v
zjO<Bj&Avo>qs60R!KQX~kL)V=MEOIcA0(S^mHa2ZRP?TLabFkM@kkfID>03Yx`q4_
zly@&5sVjYf-IEZ_X7NXhFDh7vJo5{WU(N+a#h1-L3%v^;&&0Qxxx?XHBxji6t=Yud
zY`iLB_Z~(6e}OzW1>Gxl?@(xV`+j8papt!#JiDe8Kce`0^Tvu*v6~hS914ZnyYN%%
ze&Z;%GH0!7))V{GV$N-^!d{S1&*i_?zYo5V?}3Ka-uvRc<*}=3yJuzYyI;?38R%~}
z_mXX;%<9mLZub=NxAb{kwK@0~%<ZPhW(BtYTEXlfhclFY34CV3+s2z>1Fbhj22O_9
z_nJf*)&ZZoYDsq^w0Q}ilZ-`hCn@W}T{+Og{mVKBF$mnZT~*aBxb;jhyZrahJ3oJO
z5zI3(U%EedC!V>H_pRu;)x>W?S&Od&R^rZ9xb*c?KAF!}Shy-m@u33u;JTIaD;=<B
zKyMtaTN}=of8c{D1I$NPU4<UF8a;3gdSC_qffB1%3;9)NqQ$d+sW@zCMzk{xopTso
z?}E;(?+yIN;h$Qb_u-QjY=ZH$@Zqz1$(CczeB2k}UGq>$j2u4tnc~@_i?O}!U2^Co
z`Y`A*-4VX^9D`X(Og(;s7g^KGChx=_(Fxti7N>1w$+<_Mi)Qi4^fjC*@O6%2BqZ}b
z!}@5P?$x3n;?#Rz@qHGZ;55cOzk+<#IQx0m$46t-vyY62ZZ(E8@Mad6)n{O<728R}
z{0BUi|0o;qpL|f0{ITC|$L+<R5SN;hO+I{oDLi|w?hA#7C4)2`#r6Fq>%_g-n=wAu
z@mp&a@|umgvvgZ{`Vs9n{EYRJ<c;qBD+3SQ)wbeA<~50LN@JJ>-U{`%2fL@g1v|Ju
z$a(625Zrm<^Nw>4=zg_H-KZ~j-a-!z5G#P(+$p<%J$7yJT%6Lqp1`4b%+gL)_+uVt
zAk$)+55FyRlRfv{!5jqb1^d0RTTH5ty*lxFf3@n=zgQNY(~YcePyS23`8M{1lppHJ
z(De3s{67`G)~*#A;F(~pu!g;mGp!ZY`)dW!i`EGv{p$>cN1wrZVa@<C0?>}NPZ^77
zN9TKv)2DQlY}~+KKaYL?Gx_V)S8)G%(4X#27B7k)PSLh>)<S&s-vvk5i#At9fD_^V
zXaVjE@h;t7jC1XSNXIVxzV<okoBopp?W#}osGWmtqvn7+MR~_w@y<5vocNz<E@m(n
z-Wi)2&;<UDo!<SF)4jWlwXaH@+fU|qYp>XjkM+zQ?C~SNc51I)ww0kwFm~-d?**>F
zerIjc{MSDj><Q|M52hd&3jdo6hVAp=JRaIZzxdzrA;81&qVZY#)VB+V`$Z1V-iQn=
z>fiU3SXc$8*61U1;Q7acHgqqY{8)lfKJnmrahsj+<+Y5-`UV(lF?_+;WIJgcAU&Qz
z1{id7oU@=o|C$efeXz5#V100=e)nSgUQE9l1HnSW?F6*;0&PDF+_LFZW;$p02Q{7r
z-v48I$8*W|07i}Vr$zsDk4Nxc<?UL)AB)BzzhCfP^~sOJ{(*cUlQ>@*V*g;WmEStI
zbNu?Vr0aG{*WJdN+U^x#13Sn{`20u{e5N?YpiCcfQ)PnlfP3)`3~joSb>?z(A!|#{
zgJi<oEmMWwA>ULhId`xLRz%jv2Anq=>h^NKjOurWoac~Lxm)o8{33vtz2p;ZXWP39
za_bCx51#J>`+cYEL$?gO37M~)LhL%(d_#IC8(uk36kDx#DwD4m{hq`0y)L?M_&xp=
zwXgce(OX{%&3NuO>o&c=ZMFOcCN0?HcOi~C&E0()@(V(BoU0gm$oKiPmT9)MBL5h9
z99Y}!yw~3=&6j50r@6^?(N;<4r9aq+FJnKs3pSg?Q~Y+3ukmu^0QPIV&m^AI`!;@8
zIf?J;eLKGN>#${Cj&6uQfqmOVd7c04=J`gRFKDcb|JJFKe#%#j_|$~&ZRPRz+5Omy
z#?rofI$madQ_LeSvNyxMqlLVXTgN@|Z68eiALdK4w*?>28ho8i#BGlFhC<diL|(VF
z{6n8+uY<FFlLOoo`iF#nYyj51?3ZG1+zRZQIR|t)-ucwqOzzwGiXNu#0FLYV9mquM
z1BRF5@T}rmL`R~bKn_Z_1Te^6myHt0z%07=121|$1MA~qF7Z?BR7_J)CrW+Reu;g*
zLWULB=RCi~Q-O@I^;qYN{}kV#?>YW=Aj96y|H5*zRpa19=as#0>_YyZiT7gkEBU0h
z<9@EC!ug8(xt2yfV?E=NPo(hKe%dI6L$=wFpMP}NCrnN;$t<1go5>oj5*|LnI`l2*
z?{W6}?wS-urkq>zb>=XPZJcHQu`;@#`+VZ8_pblQz+B4bP05iR_#K}?o<un30sS0V
z&F`b(aWx&Lti6?a=pf&Yqi5u$D$e=21KUQvYxixem9PQgMf?|Gj;!wxI;bz%d#U*D
z7aQ<J!*dxvukt%i4jbiI>4fJpe6o5E&t>@hT<<x@v>v-L1MkJ3;O-K5FV0!(47?ZL
zh))OJi~qKvZd-ZgeHrl|<9!HOXZ7|ojmX8a<*Xs6I%bx=hx-t`XwE9@jscs>p1Wqr
zfD6u$iBnyC;PLTM^t00~e`Y=SXymLw61j7_@r&m)?nmIc%&7Q;bBE&-W|?!@TReBN
zonL=n(e5YWHxYie1H(SXC;KiNE=dLa6X#vFY$<VXo`3c*<qK)#Fy$YH2M6Fm>7S#_
z0se>DGUj?4|AYPvcMvb(nfg*pw))fF(yc%C_$%Nm>kov_qJjxtE7Y%|=L~e3WNlFh
zgM9k-9dvCt(@^+My3@Xc4^H>aJHPAYS5Q6$(Q?37%Bye!U3iqd3(7-cbs)MxI?#PD
zYZ30AA08jN<*jPg@xUz|A^jnrmeom<&Cq?&nRmC|tlrn4C%1I0Y~8lnsmrcL7x*-{
z`BU=k%;@c8PkQ68^F55CCazoy$SB>f*-1>InR~?x@mrubo{i*Xn9&;p4wWargqJ^n
zxCef-?|p9XrmsTJs~hT)=NMw|y?VAi<|iD{nysL|?lo2Zfe0~7=ya7=+3lw(Yy3PA
zL0R<`qp!j~8W>A)A5rDj^7}A8j4S<mS<d%{rh71nChVBV!vOx$1emPccE|YCHh3_C
zeprCqj4whL$v1^hg*XQMirW8}**;NwZ~j>Ofh!xHS<^@Tl38BcaoWZQ<H14R375U&
z34AJ+lFtI)i*m<Qaz=Qd8s8c9Yk)68{rE?nx;Xnx2ELAy8!>2GINZnkf0ACPj@Cs7
zOBYLC48sP@0c^`yCkgHtJZ9Ux$*Hs7pI~17Gp$+^7ur`2uqn?1wko+)Msh6#`BYrw
zhUigs1n;Bx=v&~0VE!7Q9nFJirf|Mp_I>PJKri@*Exo+)x2JkOMP0S?OMbu1Zwnvv
z>auQ^y`p!o@J@6U`&H@US5H$${&|&qnR1WwTX{VcA3s1Fdj4acf0O3}W$+gN5Ay#T
z`p>ye{r_kFOU7i?XQN4MkX(l6EAUT<=WYnzA-`|o-6#D2T6cVc|9`=M$pW?Y1Z|xO
zw{g#|-4et!+dAS`Pws39&MC;A(0T(IFzQbD(RWLSICJdj$hX4EHK_cR#GrEKJs+NM
zkUO4h0yv26NLv|`_hgLn1U8@-(^uM@b}P^0EPqh8FF%?dws&$CHar1&Q4T$f=*V3A
zQu0JTZTC*ucif_V$EfUj^A7Glo@#CC0qk7eWo_^~Xsr09w;X-USiiJv<_`I$zio!}
z9=Wz9-*Hw-a&7QJCwJ;1CzpTH3@IO>=D__9w6LQDJ30P7x8MJ+9%ujS?C2c)nSZg^
zEX;@(m*ekgBJLjhz0>aNPxSLgAUEJgcX>1yxlVg*l<lHyxFn&xz?9ut8P`2L9^Kfo
zU6dsU9sBmI3C^o|aKXaF(eU`hY-F{~2k7tN5${sN`uaUl@S5GYX-~3>SW$BJMLFXU
z!6(v$tcexf$JT^R(#84dDE)<r1r1_II?&4*cqGJ`kImf2RzV-+e#+%LW~KUBckw*8
zl(W;4GuzCZBik!ELy%-Y<hFcIT>k2C(+2TCE3mjfAdek+TeS8pgElwW^RKgyC@xIn
z*S*AE9!TyO1~-a-$yCq={l$on7u{6h8{Yf7{DI0Xm5S>-l5I83W%OsJSi53H>|%W1
z$Vv5)|7gAkox8=0&u1U~T2JR<uWYe-==wtm?nNHXLl^ri&f((|S#_1Q{kPb?e{xY~
z*&~SnkLDlwc;NTtqqM$!crOG#l$Ubx9psC{&zMI~LOWi*#ujKu=dZ0FpZ%Z()>ilK
z!M;#(X4Y_S#(AIc;(+k&FU-Q9+6TvXek6Vw@yg6`av6B#d2VBDk7S1CdiJ#&tiMt)
zi<T|TuA^P{K1I_yQ`^cOSwAqktP5kT{qvtTL%&L}&&+e}0U79|mFJNHI%!2_tfsGr
zK4f;q!qAin4bw>rbmBG-pU<xqUF$4e7#Xa2n+uJQFR>=>&ug@vIr=dDZo&?%_2|Ek
z^?82_=Rqjfx0oDw(5d#YB+G(&?xh}IwE}y{>NSs6-0Q(<i&=OQ9E|Y(EX(`(=S)s}
zTk=0@EiB&89U0;MdVKczH_VXUd%S<P<$a5{qx9c4K9N7+@&E1B(zWpYj`2SKd*5^3
z$9SG&-4E?0KaVdGo{U{#7OrOQUG`8<!l&B5n|cgg`7*ZjGP5w(RFdF6^K?wIpK~l)
z1C{(E@4<`Vj@Og;Mh2-fh+dq-c#pGBaIC|m-)b_sZQS>*wSr+Dyc`DPS_H?UoftSa
z7kc>ZC-!ah-QS!A(fb;+@OZc(ecSuJz1BtOQG9MSoHOi>Koi)YX%|1P{Kn!<`;M3k
z#T6LlQ*&CaJeu&C`crwu8$7}~rjK^rRnQ{3Uhki}lQ@`nvLB`AtREjFrcC|lT=>7B
zTLe$$=lNP2??(Bv9>jKp=aD;>=c@~Nz609tY#ht;!n=4rbOxTU@MWXEMVoP8(-<mg
zJ3{|QnLD?QdkX!1Fk%+AC_X~_Vfd4_D1JO>qu3{}wY*(BqeqhZO*@4?dG%%Wryqwo
zOrPD*)^|Ku3g2@cHSkFc>*1r-;O>jaCjU-{KLj6x+ZAVzB1+$aFU}kmkJ-ZfE+1yv
z4q$eeL$?U#!3!JEgAKX!@Wlqd&*eAksKoRS4fQ0SDP1J_b22=qCW>4q1~+jO`ZmYz
zu=}GAV;9;r#eS1J)$OEDebGs8CI?1nedV4??AUr!ZqE@`Tw6&B5o9iHX<jT|@G-e<
zlEKKUA0gktvz;?|ne(@ai-^_g1LxvDM|%Lzne-~{<Lvinun@Od$~5fH*9P!;dwXTQ
zmvHC1=r6V}Uu%6l&~L=2zdrc44?YwRSNil~<&yXmJd2J_TLw9Ldueni!`Z<6)zKm8
zgxOvDE`4zJp{ufzzZbCX<?P_xDbbDD{)V~-?i#%6l=iRXFYelW={vrQEVz)ku`qVI
zpO;f-46_l_Y;l3i%SdmMhb3h57mesm+4))I48AmSk9l!8Y<g|c-6of^2S9AW7R5N1
zuep7Ipj`HNJz9w&19iqqe$|M6Q~$wgb8uU=vHLWlp+bBP(=zkw9vw@!?vb(2vRk3$
zA3zV#GIPJ;OmICRxX?FI`V?G(QT-S4t%VgDwy@G>0IO)Y7*@%oG4+|lG0)bGg;_e*
zK&M*o&VuemE5-P=asruA3x0{=*m44yF@t@!8H^*zJVk-swX%XcGQh8u8{n5cwu9TM
z{^#&}Cb)JBE?-6nF2Ohk7p(Cd@M~cOzX7cO-S{=ktpjhlC-Vo)&dJCFasa#o{WjUN
z>kR9LIPry&!Iu8WH7j{9Iq(JM<6`)uoO6qR!|xn*{t++vPq95t@=X4bEIh1pqLM4@
zZ`D|R%)Y3dQ+(%YXEl1(+6U;o+$QAIx{CQacV1bLJ3u^a_<W5sz|~EW?#S|(z0)|x
zc_jRPy@F4+lg-n>`Dyl|n=4KDIhS+u4bH$~Y^KTQKUcM+Q9dx%Mccxm_Gj3$QN7@k
z-H%PUKb-j9s-d3PWV2Xz1qxpL%(uAM3&@0={QWvVEm@I+Uj_fK8FPenWrQ=v5$IKX
z663pS7Wvr0XY0@N%{PE&&SL#$8Geq&8D>}0De3e0^T0UDmW%PeKWv`+4CAl1cj1O@
z+;~hf7`f92o+FAAAUC@SgGX>zOgqfom}evQIQziZ)=|x$)|ZXZ+-~5{R%=Y<y+3(L
zvJd%2esGQN+q@gpyQ>)!_HqO`V#-GVPanSoKR^>_k2<1hc0YD&4_R}Mf9`qB|E;vI
z@-DU}IpJn9-j!eFnfe|&MXWR5gFNr#%!byzmNvj`RyZ!8n?RQ-7h0S+g;%?vk;&+?
zbDVU=5-)ybb4ST4H#{D_bY5@Os;X}JV)1b%+;2>{DF2NKH^2SiDHr|j8&fVa4^O!{
z|BWd(zuo-lqwl!A{!y)Ewj;B)ofG|S2D@(a&2y%Ge_2&`byHP0@QylP*vg!2=YDyE
zJYwxUd0W_NUjv=FGl3bLAJRK?sAwX4IXG+gb?2cG-Klt`Q;Z{aE4CJT!s^YJ**kBK
z<}Q`)>_T^<{{ox{7iurCWwX?kJ*&C;-~L?1kK}6unpD}7=&o-w7qUt9U$Gx?aBRS_
z=vTgyN^qm`d2|-zp2To__Lp89y=b<9amB8V)@86SS}*eEU$P;l`3%R)MT_<HaS|Qq
z@-6=S7VWC<`}lAB(_XN@jyJ%ey(zbPd?JQl)?G|Y)c*zttX1xj-HGgX&oR4)<&h7&
z#Y2J2am&E<fx(`@j?fr?`f=(blh$Ly%SMuYC7VgKXzLT>E_xI$EL{G%>!&zpEtuph
zw)<xOcR$~o!I##rdM=%zz4<8hgEevS{8-wBW;Hj3bK$}}-?H$P_g({h`}{uCj?P0A
z&Wrw!?bo{xLpD{6J(QqdjYVgx1z+&3G6Osd%IIAntKGJeL`ZlCH&2WybDpJ>ulVih
zES{|kjGV2pdcVqB3+$})*Z&TCw8iWH$WhKnF%S9G`JP}L`X8+S36!+$DyCNL%TK3o
z{B*-GYg`@t7p`^2yP`lo4{b`P<li3(2Y1f|{;#mj@0jnJcn})m-U9DTwqo8Si?jHV
z9B4hhh1_K10*fbE_sutp;}7zm?-R?N+`!dNF1O0bo&2zqd!x-6TDQs6x}5DBzz2Fi
z?Olg&OEFA}qnB@Zc;4`F$`AAv%G42OZ=Wlkw2ZZH4|^)?PvxI0sgvy-#g?j&A8Q-2
z_B+hbjPpJF<Zw8g=!bUty3m!BALsj|li&bZQ4@bVHsuTKSzh3z;X%)r@q>~&^5n7h
zGi&>>UHkTz)b$aI(^u`Jvz#B2O_A?7Cv|K;Z8PU;SN`aImVdoFBh+@Rob_9O!-fp|
zDmp9Ec^-a^qkA`~T~{_Su#09sbD!^Pr%kWDvYOSjRp{eZdoH>7)SmqGG0vpL+O<BM
z-g_JM1#cW3Jr=ey3tL|iY;kfs+qUpync1c}$({%@>mC=ps?8W}=0j!ed*w@JpDNEj
z)w~41N9|M19Nwoo5i*nSWuCNO?y?`H`4Igrnre1GfQ@MVJgnPAgT(*!24xNRj>yin
zJn`Jpy7-l*F3w&`cJj&;yq3zgHE!svG8?k}C5ivIg>n8r*3LXW%Ie<#XJ!Hkpn@z0
zkeZo*3#qMb4Ov{ulRy#0R)w_U(q@vNQq$HVE^OCKz^X01S4M4V)mIs`i=pi;tx%cj
zy$rb2mfn`7we9WwU7txnQQEoyl3{Uv@6UOjCrlQ4uebeUUNdu^^PJ^-zURB2?^%Oi
z`MRp^xZkGQ<E}|!Oi$a_M4X&>h5U6{o(mR*cd*zsImJwIkYhbNDzP-+PW};N?I?B(
z;N^j*kK0k!$cBoYRP)L5EU=-nhQy@;E5?=od0<DyhT_{y-4@Sw>cW#wo9m>jMw!Zh
zc8KqM16Yj(r-k>n9J~hpHveN58=81o>>MXoz37f^Y&os)GP@4?J-^*FL^;24{5<ox
zo^?Q8OHMH3h8aHDVYIWND5<lES!DbG=GK469@3n;p!u42w#CU^gFmNT@;r8K(OJRv
zKnwB!`l;Ft+7rxzw$!fi*AL&!x^~t`ZD~!UyN*L9%xyF2;5@kj7Q`X8{^AqN=QmFJ
z1?Z6C!n(j2`7w2_F+slzDL;zO=_tHKbV@k+H0KMo{_(-YO8YjAuK`DE)41aNm0#z#
zY#QWg87;m4HrD?D^GV>dbojRNKJA3SxfHrVTln;STaZtl=2@^dItQwG2lG2Ls}A~A
z2mPvpe$_$0>W;bazjoRV;tgW+u;H&5f(?H{j}8CG!jECU|GBl_3n$$+)>HXIS(CGw
z+cU_&6PR1juln3Z`9+imee1b$X=iy?cy>Rq)p_#WWyrre=K<^mEA6cZD7SmR5ua{X
zIN2_{yv^}Emb+Z&JH>kV{z1heMlVvn(33k3O@lVFZldKAv9+x=$cu@gN!g@A<VD#s
z7kwpRc6{*~^N{w>(aWG4kJl{@@Ikc5ox@tv#vH8=GQ&sH`PDhr{+seifyd?>@Puim
z+QI>R4CW`jbL30p=@hLz58Pw@0{gV!;oGLy%Qjuk-Uu0!i$$@KmS8UgXG7eZq_|++
znIyY(a?!EXD`;aNJGe8)OgX^356tk_`VW_|e(QJU^TRvbdwp4Qn#W7jH*&R=^M&i~
z3iu7rv?rr8S&KQ;7r!GXr+aU`_+EAN+fHp9{udRUT@kKz@2{`TP;Te{M8UI_JX>Ax
z><0zU9^~00!~xL`@tg~2uOa_PxOP_zehIH}FZB7ZTc2}h`M)cnx7ZwA(I(_0@leYr
z8!jPdLZrj~{wj5<{rZwqFQNWKY>}sVXIx~977wqVf6T5$<_y-2{l92wyxU;Mbv|IK
z3^<1F!r2RK>G`1@DeymneTF%%GSM@@7w+(>f{%PkHgqSK;I4#dN$QaZej}TsiS+^p
za$S*$6~e=oWo2`gUgzP|8sfB_51WSTYv~u;MdricW~<4`{$%lz_L?}S8Z#Fq<60Z!
zc^5rj&&p+kUlB<<!WZ~z_We9V-ZiHEVU1UHfoE^~3Ug_E3JGEscsUC?PM<DyvS$-V
zRBdcLTMU^@cwqeoE$p4C8aweavzQO>%MTr9t#76s_rdyFHyr&+YB=kCeqB0RVJZ);
zrcGcJLQl<%x3prV;#3mAS#+1N)@FGwJx2P+8@HHav8YL&a?8=xhZyq~)-#qmH+cxX
zP<zWo&W(c?E;_n99v)fH4rf<#>h}%&9np)y72rWGg(Pv=>(iO@;0NF^^d8)Nz?jl)
z_Us|!%eM@!Enc*&yAyq-n{i?{tSFmEu1{o(wdhGv@`+^!hgRlqj@G#62_9ypA^wM)
zo5@%CExH_h9OdPlFnyOf$$4O6YfH_<KbO@+$wwM3GPQZm;)l?Avd}HfMQ{x*Et?ZY
zhnNceh((u=uQ6s;88*RRm70b}Ip^WF%&6tguh}WdPV_?z{i*I{i)u2;6(Bu@u|B;J
z8!2nuCHU+k{}^M6GY;Y%yn2*jmq!;HJIvk3Is>CJGokeyVshN`8H->)?2?Y%z<-b0
zT!F8KJi`C<B5O*!z<YyqO^sLed;Om_z1Gy4>J)1jj@oD2&4^n3ci1G#O~WScY>>Vc
zp2YhwYLoeheHNO8O=TA6K{z+!HjhoJZA07HE2xj|YqZ{ex%Q~=S@A?xF9lB%eQ}v_
zWX=Qc*spqDI%pfRS_!#9vct%oUFzh%iNDUuk4v2#{BrxoCDYJ@nG?KF-x=X4_>P@w
zRbZ!Tnrs^6|DesQGQ>5-@nJ_LH$jUtVMAVm{$rtjzwx1~_-B5hF}`g?_G<YPntU5B
ze0%##zKwA;zyDV@M&1wXcCs-DF7S`-fsdcDzG-E=2Z86a-na^%yHEEo%Yq*+`y%vj
zd27Qx(YW5TjgdBkvC766{TcaNtqlR1KFs9K=XY1N{88L@$GM#lcZtNoi?SDMYX0lh
ze5G6b>B&=x&4k7`2;Y$fPmNG#8aX-}m9G=ru7v-K*MuUh8TeSFGjo?f-y){Uy^y;K
zqM>92dUrRmeqrdDaQ)ez=T|Ei5qFAguLH;SvX3T*E>3DMmkc52;Ig7Q#L$eKcxg*b
z^wM}uB#TApt+JY_?B}fJVT!k9(HEmd(1LhTZHdMZ@#e%lOWWZOhv-{-e$~y$1}nJF
zggswooVQgLGi%0woboI5-Y6$GT)I4a_UHUh6w){Lgy^GkxQO<?xv@9xmVIos|LirM
z;eX5pwEfE}N9K^MVc|o&$RFFKr-UoP!(r^PKj&Bf5nGw~lz3F9c$F_JY2VCM8|;<S
zzvjuGfn4f-KfhrW?{xzAEbHPR=Qz;lPpMttK)h9j*7p~*FIhOHcq!`j#Z}3ClJx|W
zu=+rT`pZxAtE((Lu~kC{9q_@*N!UTfuTt6GcgPK)?tcN>V1G+))_R~{Z<l^8J$fs4
zLA4#Urx+N{nXHq}y?>%fcLTTl8J-VTG(k37c%1Kp^<q0Ry3ddPyWlaseXw4vZiaht
zy3s}Fl5^dCiZ;M$OTV51{@P#oU&qj<_L=bAEV{jWV?X~Z`lqG2qSs@r|20dS?sa|~
zmgwPiCZ{`y13W=D+b*7Jc_FY@OhEP)a1Z!Pc2X?Bn_oaTVch!v1!PorY5%nl{w3a$
zt;NG*tyi?e+J<^)%g0!AjZf=wk?;ojDa!v}f+t!7`IigV;k%UYpJ?;QR>)2x{w#jn
zD7<1$2O|^KbwlT^yaH@hmt3eDO@Z7YSwpz5wfi_Y{tEr7FRk-eXlEch3$kBN&I+sB
z4m96_dG^Ii&KI%|O4oh*ArB{Kf|J2s3ii<H=vtPp`nfJ_pS}$+7+(W(R(z)9oR4xZ
zr#sEbeNMUp<FWJ}e&qW6NZ-P}pnc1ieE4dw{&YU?0f&Z7`PJyq+sESj3wXvta7*Vs
z@3?MZH}<a$;!zHK!D}1-gWe}ybw7DVeVxy)X`u53^U&T8#;$cOoYOM)kYKqXn3E4b
z+1oTn>2P+g1MG9j5K+(0*n>;|=GXVmLXj6Jc;9dLG5!ZURPBbOkFYKQd>rkQU=4jb
z7mP(?4C?jMS+SM$eXs48M^*<s($0Z?G=If~{qi?QRtIfqOnQE}pnd&+wBUc={?_ix
zH{3+~g>%t7v?f8jb}nmJv$uNhH|2^``vg6Duq~MXPaov0wO{^3@Vu411kcdf0?Cg0
zaF%?>&ku8MW?Fd19{g5zo}7^h@`)&S2(oKVaqYX&mADrU-7wryH1~#Xo12ewaLUEe
zxC(ujSl1_%7jPLm8u6Ts32b}V$r7Kdt98%`6E*13=s(#xX0hb4li4GUA2JIJ{-^oM
z@plrxvGLYVFjqBlzV-?9yacgoh3~|Tvp6nVORm^>k?An(`v<}Ih48IxHF=}hBSDTU
z^k8C2z1$GY&z{%OIh2&*1|BpWUD$0)J`3$*-?&{S8MGrj{v|wj_wc%o1oD5o!#xrB
zrV{7yI{{xuJ|oBaWMtY_Lq4uf<o6=ld>$P{Idp<{J~r3-ZBA{(N24{}J<X(_L67ND
ze{-D0QEYAoT9us!U3<T=c{KF?7j9xN10U5hr?O9J-znH1sw4c<^JiGg#C+g;sJJRo
z*&9|Hc?K?%qtE1KfDfwgypyj|-@5a2GG}Z<+!q+T$c&uIeSsb150TxXiEqix(Sts|
z`S;wbPvK4@IT*L>C+Gc@z+->DQgcA}Uz|XuS6?437=PmJ{Kfzt^1n2(K7oBGq?q4d
z99i916IxJ5&ZWe>x?1xV^Y~Ejd92VJ!M{R0xQnuOhyLFv=pVUC{hv|T|6l(`|D3D%
zfApV-1HZo%R~haPwDVA`8SuY>K6=K^`gPrFIzA`=5$n};uhX%d=gN<xKL7fF2VZz(
z6?-iG6+QED1m13OWDq#=0yq-1IioLr+;2MefFtLFBfIZ+Iu!qF@rLp&xcYJWmaRq4
zGzR&Qg0}j?)?pv@<8$CqUtX4FUN*-MbLe0W;voUO*LoMy_>9&WzIqn@BHylio9}-H
zetqu@)BaJ;KKm}TWS~1a55mI}zFxHa9;a6SJBL6czz=)>Exe|gy&YoRC$S##B_tRR
zzL<&x_g=v>ti3;_Ga{U6jq_d``WUhfGUk|dcQBVYdKz@dKI@ue&nr}HrA^gQKjS*{
zt8II_lW-0)D)-CijEww8l&60T4JaJXWBz!~^v9E8Jj}JiC?1XR?2cf=W&eow#o@WS
zqfhtqX*{zT&u-554}s=oM=>94wZR>kdanL1wRMoQB%c7c&Qi%W$Il?HC2s#j_l?T7
z1nwkvGtVyCn?byu;Fn>H@q^YjkS?1ZS`cDy?<oZ?oNM{cve2AwqsNw+qSj}j(=EW{
zZgRN<`hfUDcu~`$W<PFgjS02hhrQxECFZK{5bM=E|IAG-<eO_NB32#P!y9JrusAzv
z-3!1@es_0a*+<quC-<^W;MIEN08FqCc9)vTfsbAGBdy==QfG1-YXdx`v#yuUx@VM`
zto<ci6#c>;F}Wpda`QN!^AhdH2iI905Sq+AH`o<u`&ssw;5pIXUsEmp9ks5RF$(ro
z$h%rA@oV)bylM8wt@jqTdbp!H+GDJTJvZ8SJ>ueRdWO&0Fh0eaYb}3IZ0(8OX-7Y_
zb1OJQr+swSi|nImp&i(1*SA>y+xw1G&ahS-#EyB8eKn7@=I&O@i(`2YhvV3k<Nt#1
zoV)gV`j*~XfIm&pgo6{IZIPm$J1yzcJI4y_x*D}dMpu+W2X!~>Rax5R+#<L<1>1P7
z!<kmiuM-=b<n8)Yg}tZtb-|N*oy-IHRk#7ne7NKzMLlP7bq-fH>R^mIqpP{;9OKm)
ze5}kb*Lq6FHSpOZ3x{`H5AW3+ve<Izb0@JAwGR6)@9%X7Jny;7m3ocXz#B_Kwc6vz
z1|yy6?Db*H0iLZKMd*F&mHSgUiXP#&;^Gn!<uACsSN?)H^03tjkt=1F4D$Z0W&JY1
zYRxdteGVmG4e;6uECvHBWU&hHurioi=M}x-PjrYqLktY@hj{0Rb<Q-``U&z?UBUSY
zFRw;?sP60{*7g+6Ptm^gsKu<aZT}ee7x7H7KwpL*WFBD6$C>Iy;kw$fqf9mXp%y!K
z+LZIVyskD{W~%-Got;}nT-_&-Gp30~j&6;fb$mY>=9q=wp$pH}J`?O*?7F%qPQGpT
zalWN5KFBwF5!$uh&QUgVd~)`;{Lkn4zZJuY9%sv6tmi%mW6zD*|HL=AXQNL~!#61T
z6WD8xyH~?c>Awq{9n6{v_M%<H*jJ>8C(d37Uy{z!3XPo^THqqvX&v(Ul8)|)*e9v4
z_k}ASzZh-#1u<R~3E53YdH!L;eHj_~i>LDLihy5?UHAGb@*jaO?k&V20k8Z@?oOc1
z&L=|_|Gb!XuT6~!_)d8^Qa8D=AcvfOm*{?%UOve2$9<5<RHM!KVTKPn+WN8NKplq<
zQfn!=w*w2EDOkcizjm(jH^Q^^>>CmMl<Y~-FRfSbzMhHSX1hYk`OvK<#;*Lb(I|KE
zjK}s%`*G?B$4491guM`gMz({$r%R4TjyP}&Fa;-E<Zzucz>eOa^Vh-~d`%0El&%^7
zb@sI2;tcnE23_>m34RDJitE=JCg?}8k}1J=DQ)uZ7UcT>%{tll<a_tmDM~(h#xv!>
zLMMIO407!<t}Vm~#5o@o?Dr_^tvw=KS;G1SxbN&OuHqh}^p)`1-RA)h;9D=hAa)#$
zF^f$>I+4cJ6883RXK`Zo7?=A+_v9<J&xZ4SIWRNO3`b}BPvVYE_#g6kLqs?R3_r#@
z!8+VPEOU&qHh5(_Fy{A;I&6(a(4)=lQ^8&BAvaa%Sp&}+;ByJa5C^Y=b?!V{xR3rP
zx}$aDJ&hs3dMUqwY~)*b&jtQ}VZE<X8Fmuk&>&)(us@atV^W=&)Y1O9lzM68k#SZY
z8N2R-z)O1|;n{~RuZ_~*LC#}rr;TplCw_{rVPx3S1!xC6hO^M6^~|%3c*n7$)?6DU
zud6}UDcj3ER>%hORg8Un`FPdQGY7xKAO4iDjxrCPwJt}e(;C(=pR&0%n+*O7?&;v1
zQ0cn&F;=bVBIGfxt6kr4sP@<NInY?O-q}llj|o-8e~aEgAJN~Eivc_p%&J(oEzBWm
zp#Qt_I^SUDG8nwj_#Ya%=GtJKapG5kIS|{h;GxHskC$E@7YvC1Gm92&(mO7D;g6L6
z3|J}#Rk-)3`;S7K$5$*bggv;{gl_4AYg+eEiIcvS_crm~SiLtO?8jCtppDVL&Q~Mj
z_Q2)$*n-)6=}N|^`7FnlQ@*HqQzPTaVEZlyX5@UTZ3AYEy*2!+e8X?yk5lJXZu&Is
zb%GlKA9<DhOxkPC;rx^gZMB>N{<Fun(#9uW_MRo!1HWXf7T3@_wKlU^oA*%`qh1qz
zHPIKiQ>iw{b7kdj!QY4dj`M*%cBc)3AN6|VIpG+#4x4kp#%T?J=O1Fs!JL}?IW<3@
zZ;%aXBk&so{LZFM(2nG;9-J@OI|ISk6;IZ_mLDH^B7<&b`BE<#ZtS`nSyNk%EY_Eg
z4<y5B47(X$&p7(@lO>12U!FgrGtcbRu|4CxoPH$7iWd&_IkxoQ3+^A5UPWG4;0aFS
z?+~r<;-V8ioW=iQzK>RSTzk1@x7v7%V@o%aYsZUa3(a)W$Chq+BFa8>X2SC#jW6kW
zh?oY&x|wsl=j@|Xqdm|6t!FGc1DanE-NF3>Hclph6?b>9+m9Ziab$-VS(z=vS@k@;
ztLuDxET-M#(eh6-_5}Fgu;2F}KMvv^i#?G+6>D{`-bLmu$r%@K&s?mt&ieiM=axMn
zxoBQEvht&gwp=WDHJZ%D`TM7SBLBV3U&uyo{1!6q#{a(e*eB|d8@VgP`d5iF-RE*9
zxtaF{vG>XCnq=Q6RX&;W>6~{&*RE^_FJr8C*YN4R?p;_5jxbm9$#~~bk1h3b_dZL1
z(htZ3u~WHSv^Uys4%aI0MIla2yy)^>&Di1V6BCny@mbUpj1^a2KeMGq`p>1@d9s&J
z@o@Gsep>Cv=_TgW7VeIEF8bVfbg!GgZN5By-uAMZ>8#1|viru*bIWR;i*EJn+&iB8
zrmmXzW?2pPv=1wH*A_FkYN}cCb~AB9E%Z@uR*VmyWNNpVD=Gh{-sNLeK9h3i?d8;8
z5!9b#YGW6TxV0VnU3QMC748UU!uZ?5{0|SlXZAGof)@Ph;Sr%l;fuhbNyMM=EVis<
z&LsS0^JdP|*lQ=@54XQ}m(`TvGm{TIXixB&K|3!bCM5+U!M4$u+;haGpUG#98PwX&
zdT0&X9P^fVj%*Qi)Dcd{fK3Q|HG;7}#v6hC3&8#ba6;{=oq6+bB>uRlHB``623Qq7
zgLgIX?)n!}I>+n1r*Y`LEx@603?byLmsxjPKXZnyFZ@({CwzzTU`+MiiF@z-&H8bZ
zR9u)hpV<FAri4i<?$(YediMWZKV_2t8q_ys|8xC}NlJ&F2aN7^2if{(G2buod6{+U
z2P4-cB}Y2YaGh^Z4qg*AJ7nLJ9lBlLadHjw9neC>SS?j~%IsLI?~K`TXW?_#>`+Xc
zrCt2Cw2Sk>TKnF#3);rJ_Bl4)0iUP*=g|{9kNeL#TRq_Wj{m&o1ka=XbL^J=-+!iu
zwo0DYxq1UWmm<fkzRaY553hv}+c-MiU4Crob9Vn3>(4JC?{~N(q&Ttouq3iWhb?zb
zO4>4WGG!sJEP9GxHk`7sSC$#>l_f?{M!#y)IhDK}$jcA(@b6VY3_;@70m^P3psaa-
zvTFw@`-E54i+9~hUSIC!mEVeZgH?)y(D_XG>#DKn>;Zlx$TKm99Hs~1i79xX!?%1{
zvQtQg&fqr-&N@nWSN()1j~t)R2m6;<8T@SjEEI58jvmqfLf8l65)U}$=Ml1bgIu#C
z$dTY)=A_56hTW{;AM6^AwQYIrJl|^#m4nEx7weW<KB3#L1MBJD<E^Kj8P+n!8oKv*
z>*<vZPsUh7_a1LOZ5eABV-4MVA|0ta`p-}CXno<3^4Fmq7zb;enlV5<VtD$!`w_3K
za1Ecl;P@Kmuw4c4(mE2mzDl{`Q^bJjjO_u|B;l`L)UKbW1NB|M+(dl*ywk6Lbc()Z
zl3PPPYdE$i2DK3O!I=83VdfvOhT-@9<JNFV|M{f`*h{I|1Jt{0fU^1l%KW|2YYprF
z7i)-o_ny~~clxeZ>a_l4f7cqO{sC*a{2#c6clDoN>N5kB{XKj00<XPZYX}VrXz2;}
zVfp`I4SA>E8V;~G-|HF%v|Zo5=xX90u%6*F{&9P9`2h289-!>+*{2^JU_ED(AKd4S
zCtA+{hN-ju59`W1{nmAW{rX<lwbxq4{{d^c{2#cM_Y5%S8wV)+d-iMn0BcDezW;G=
zR{S5<kazm6;Q;&f?^;9WAFzhuvVYuu{K^1xzIlMMzh{rm7+?*X{}*eBjQO5<<N$K1
z_H*BLeXna6(1w2WHTn-&&*lHX_57Fqb4`6=fU>`5pI$b=dfxmV=qqyXdtO&xR_-Nd
z53pa~>$*w@mVO)ls?$-A{jH8XVC9_02^X0v`Hb(zW-`y1oZ`7+*be2#m{-I3rVw_U
z#3{)&*u%DPo-UGbY9nD&9XZEIw@n}}2pdV=AhUrOurzo4Zf}XdpSr{eahAmDv5rYj
z!rt;MXRBJGW0K!rO+;6L{bkZaPVJfWHJuo+dDte^za2{netdj=8q3|p5zHH53dgiP
z7?bYbR6lP<inuqb?4^0CuelWQzS`2eCz+hJS!0WcF~0xwZ3F>Kn5)jQ=2|l5s<uho
z6_4-!Rql$%Uv2Ymoz0!`^(Enz^_=av(S*MrX3k%_+}YI0`TocKcV5Ki(`btAUGatU
zBYt9E0$b5{@cpjft|>j6h~MMeMWL%6*WIh!>)7(4FO6^e0e(yRRlHmqcRA{JQ8cwP
zj2*CzJN1;$Tkmd-Zhd%-8N6=@|D*gbXWW{<>}_q_PZy`JyG>^2)(G!C%764)oo_BG
zad*}eqoXt3MP}>H<;2=4mU%b+^>fUrBSW<HoLN-0ywZ$}n13J1dbhSO8!=~k;_mS`
zv39RwBYQO=8*O5zY?Pu8&tg|>GetLNnES`(-&C`ClXw2=ZZmP{AncU&tV81>^VSx|
zup9r-d_MS(YkO>iI&(sNq3qbor67Bua1>kNdf5uM@;n^HPKbT+OV|kOOU#ZNX5LWq
zu@e4cC%hZmq5Y5DP_{z+TMc`QBa@YPp-J`*&U3wjZ#s${d2jKw$*&BvXRlV?=a1vq
zQqT5n?UeMT|Bo`B9vaA4U%_U*hq1+oEu2c8NC%%vV}^MWZ}VkhCK`Wh79_~M-}pK1
z-{k*P<$2^=bCT^*^T|wb7VkMd)N$Z5_<R^cFgA^A&*^m?kFmy&&5zb>1$WnS9w!Fe
zoM)T|8ZU~!9mVgeaecn=XlWz3shFlla&|TW^QnAC@i|VNPC0j*yvW$55+|9!uez5p
z(N5*m60;!0STiFMi_OX1Ph}&6*6sYv(Ng+a{PUBX^mObGYvN|XeDG~c33L2v$l`zI
zB=Y_e+p(sI`@88Y3hpQd6aLcRIGphY2h5er$KS*mm#rmEy4-{-!u;0S-phL#${c<3
zU*pV@+mH5b-b(#%^8e#&Ds^c~_}4}(knYH6*`63*#QzLyKk+L^OQ#Z37%yRd(4VQ~
zCQT8Wr}j0MHOxirrFbsbuRTNz25<}wzJK=GNoJAO;5)!Gc69o#E##W72e<0Mt<9`0
za2aVRubbIav-W6N4f}MX9dFc&HJy4c=d6HBW<+Lj6Kk~D;+fWfxtsR!DIb^BZx*<y
z-)x)nlQR5A8rv@@%QHUxb}zYic9ijCz@u9!bMX)J{$ll)DM_TA{rR7+rCpa?D{H|;
z>r;<9wR-nP>Ssnci}kxjzv(Aox_@fx@{Z~k_Ion4A**`8=-=7n&+<*YYf^J3K5K`g
z`D1%;X8z%s%{ArBtC{`O!hW*<vAu7W4-8tO@d^JvMtgybE?bm*RgDwOTOGt&OvFdh
z2A+iQ!OON)Rpit@I~4y!^sZfP?92I_Pb)8RYAd0C&BPUO{;;;3@0anVhEu88iIMe7
z*0O%oNjCz^&r)CU!I`1;OGF17oe;lgENN%mCt({}&K>k;eu()bN;s#M*jY5cdDG+b
z<C{dYn%Dz|J5bB6^z8p@btW+S0UNg$*y)Zfeg272Hy$m0o@ZyV2Ue5MQSJWhoUIqD
zOzr>iq@qvYYrbWgi6o!CJaciqQNB?xuTMZ9$nSaiqxYx3@aXrR`NEg*_nbM>Y+QQp
zQ=h<pn7sDhO`iy8Qa!kwfZn!T8Rf1YGwcTVjcnkG7clrFTHuk5;J*A7LEHL12<?#%
z&(0z70nR5zI`-V4T(0)~>y*?f#9g85_0&myAo>4zel_bHA8PY)C%;q9y@6ZLOTu(V
zH-)_zxQ9+LBa7&_hO<ypXO`DA4>dOC@4#iZ$>-8)pdG5~Xl(4A%K4M17p;j?Z!>a$
zfxg|wnz!FoG^hKrrkW<=1*bCp5O}At>=|Cv@mk~2)q93d@6b3p!9kVl9MdC=Pi?C_
z2CYjB&0PDhpZ3at+cx!a2Xu?G@K>ciVv-vee=~K*%&c1ZQ*eEZKM#$qim_{4YFF>6
zkJU4rP0RcAfvi;VwLX2|>#SH49<$HDZ{v(#^RDy9|1-v}K3`$nLH>2mSNgo=v%wtK
z`}H)>-Q;k3(yy=Qs?WM@7p}#eamhPxI9lqLy=lwbbCb7H7Lz>{e2dL(?w-s0^^vpA
zi1WFf-|Z>~|Dxbch&`_}UxoM)$S($bl1vAWN=p_{Op4-5C|6l7dDqd>PznBbaOK$2
z<Guv#VeQx3;g!k<aELgsJNT`90C)0z=qodFrwZP{qM0>Q?kez=_>_3}Xg@y1!8R*9
zYzTY0?BXeYt3JHvswUPXM*K&--l^r@*{V2gsNDEtbEzxe=pkaC1RKFR@LhOx$CFt#
z4`}5E&FzbfE4a@-kb4vxd2H$Nm`M3Z_D4$AffH{kR`wwF<*%WKg=j~y((sy{jO|Uu
zn=0OpIVGcpSlF=1-TtZ2WIbPje$}kJg!5xHj9I>{DT$FzZtp~sybHfPu~rt}UY$p5
z5%W^~spbt1uhjcmr@rqC=k*?ShFN^&odol;V<BEnV<2yK8r-fVe#OSFCZLOgeF%J4
z?5g^o2F~jYV*-1cV0>-Cc%EfEs;}{=zk2qV(R|4jRX0Ccqq(kSF8`acfWPa7%Q5%N
z<j-lh9ly)h9`j<LJN$XCz%JZ(-kSSB^Iyw&)Ne5VV10BJP-_$1r?M8B@5Q2y;_gZL
zR;G0Xv8Wmk@{5h%mj6;~E%>u`8&A}pp*{O-k{64scU<7(kmI@#_VUduuBWg}wtxHI
z#^icudxH5D=DyZm3i{Wc60KI=>mv&X5xaTHjw8@=i+`KF+&>y~inUi+%#X=v1OI?e
z|MH>W<tgMvW6!083)FY>dHg-GBy@LQ_NS&HRpF#JEhqo6_SY=v`2<thb_(q^b3T)E
zJ@Ku46So=1-q`jqam`zYbZ4I(oNW7)$?auqZ9ntkbmC#o*-g`X)cYl|d&Jh35%UQS
zjci+PYUAIf?Z@!1-(ze(g-gDwxI%9)8E8P3*iPXw=ls@X;H71pDRiH%Q|`)i{#A3#
zK@ZCQiMXqo(UlQsi^iXV28VyuxTz8Sp&cG5K46a4Kj@n7YUXq5(Jljw6bDwEe5C2<
z>Z4u6j1V`vgjk(Vo(^v~o0zbrPHkvJYNz7(;+!Xq6AS6``!?c^4qRc<4d--M5o?vM
zn;E)lYRW8_2~I?#<k5*{-ZqoAJRCA+WR@Ia*;ejo=C17oIUAzTt{A+#h;hakN8-As
zO^J1;5<l}*=p+k1%UJWgL*9k-#vho<JHO@BRzc5S3Rfh@vFF^d8Od1@a2`7JVm<dv
zCT8b}ZR3;6a}Fd=ysdj7=fcC}LAk`_9CU-Rixzitz9!8aro?Y@YBS`+FzgTZ;+wI|
z2a+q`V{vi;#-W*E+8YG^fDdV%9f*=sFhbnE;gjNy_cAlC)sV;kWaKGwk5o*B$4N&r
zz#(@beNUKKJ({+aPv_7jqVMEoT5?DC&GeCapQ(liCtp6zlcPqT@1#eMF_otgKYD<8
z&QjhHT*&dC%yUPQ^pwn!JG+I?%1!o@>xtLP7gyams#`fsh%NSHggRsg<wj!NTVL!9
zH5}rZa`MDX=`7_*(t0C5x0+S$<Fn*P$^s+BwF1jwqd8ZgF$%vFC%$?OF`>XL;nC3T
zfnV|+;QJ2cDdOb1E_8Am?z(H2`q>g5y)rY@tn3VrnZ^0pQ|oCjPFuter(OPUxw&#v
zmif7?Q54ul=hxOatVONzlLN~V&Nbae%<bq0h_R$S#jxJj$b5j!W@K5dry1)k$v<hh
z?|@uYtnmh5#2TzO$d4h#5Xpb*`5D$5{I`a4Lwc@ff&bRrYyG!=ndiSX_geq0SLXX~
z&As?<m-nB4ioM$xCV@YYz1jn(z#rJF%(r><DjUGhz`JSl0(${^gREfh_SKzoi}@|z
zt!QKld!+6ce24YPK(`#eJ^wA|N+mDA|ARCB^1rKozj6D%g~IVDMlOW!R`36uSifd)
zMlr0)x8anK*P+_#`BnbD*&cI0klYA9X7&|VYu$9FZuGLdb_vhW50(Ea9pL0S>q89(
z`0wH5=vj$AIN1&!CJOK}VsVmlbaOnqr&vniX4f1iS4ki3H=Y<r?O4D);k<B8xEz{a
zxv7P@2>*mX<@~nzkDMaBZvnn7<fc&`?vUz02Zh5K;9w>|Z+K@6@Az|HA2Vks?_ln3
zS8=uYrP@lcch#0~9ld~lHFjtd??zv&tkG}bxg8TYt(a%w^lv}o`Qa7sB-%s&JBw^Q
zzITpYv7;H{w6iM)p(~AEx1-g|SszvG_LEL7K7+ABvqz)voJO3@OSSN9<QbhK5Uop{
zW2%V3Ogq<iSKnS2s?0G*?l2=?J?(M6RJj^;jzF|TG)pww7&DtQYH9b`Vw>wnFwCwr
z>2~nVEV^S;_1t)O{95#u@M*30eTKancG5MBJ$1cP6+fFg@Kn*PPH;xKoHQrF)5e^0
z1~U#E-~+Z!Fz-psS@jZry*N1vI>9}iiEhGYLvFL&4stXd__^|6bH-q)nNoQTavp8P
zK5sU3GJbTZ*)8<nXw1#-`{^G#Wk#%d*gay%1H_q8#v&L7eRL5+3~pI{5ZLeB_&eg!
zKWnBmk_RZ$Y#Oe82^g<*(l-!C8OQFTwY^~~zZp*y*)Ibh$-*<@SDWMwvy^AsdHXvi
z@o>DkzP9NC`ffE<lEdm7oZ9*?nri6tTmNw@XA>VMr!>0FW3$ba$I$DWY3DI?`SRJO
zO6M_}=W-te{I;3#!e92yzY1B4|0(JqiP-f_g}bW+_r#SmtFy>4&^u(83UY&wfsYJH
zO3!`gYGe73=tl4nFH)?|3)jI*KGB;W2}U7wqJSU7`Jd<`Pu+$*W$Q^^^7)3&%ciKO
z?_M+oc<KFKW#S=}1vE{#CHnPDVHv#6(zHMIfBypR6N)n~@O#6F<hn(`W6?>9OJY8r
zT(>=t>zclRec=7%gInRrb<tViIp;sbFADjIiCAB!<tNbr_(^mCei9vkpG4s&W<~#b
zn3e&`t{b2Xn%5VGX4U{@Q@t|nyBKp8Ei!Z1_dELY6ZFyT(nk$@MLDz&0{av&b@<Le
z|ASbrzPv>B`;CP)?^~v`5dkleysQ{vr>M@#G1#?ob?ERh;x9!L?6bRjJtOa1tmj!B
zXXBjF_1(YR#hoX}O4|Ez#&6GSZmxr79M^HS{8NZKY>3qw;0_xv51x0Ajp$Dbx@+km
zv@uHVXqSCwW_q%r&iqE%gQ-QPD#{*=FEtx(qtA!9H{Ost=m7gF0i48>LfUtd)tyO6
z<CG_n&pSlxGb52(1}ApD{BEe@<#)p!s^8tK{^X=_&rWh4!`8nI*qTx33()QEr%bNF
zw*?gLNAVxQx^RsT!UIP0P8oOGL+5{j%(U;tnWmwVG5l^Oynwj|G*<8RrL)cj(6|-w
zfTda|<|A6oJNaGcM>qStM)}ZovFF5(H+yng^nO#RKDdvbaz}T#FA&e?t{m*RpFE6Q
zzSBKh_r-fWIKR-lOViAZtrWj8I{WoBdI7j#kinHlMRt)`1e;1IUR@4dc&v@S;2~Ms
zcfget@qF25t<1Z?jICeNz8v0j9=TXXN|r3$=g#IoV?O|0G&66jK~}DgLj$txE5n``
zH}|&gC@_>>aL={K<423D$g!E0|HhLCy!<K0<pG<IZnn<c30DjGsuT0+@QvNo;;CPI
z9{r!bGk?i%yZ{*d8?u9NJ0|?CtnVHV{zhNVb5F;pby@7x&h+~3F~aHByt0t$HPm;H
zpv>Ltl{Im<fithZdl+SoU$$0dlj^$%Q<i#_bH@JK?Pcv;=)$J^tR2OkSrZLF&XCTy
z-Rg|ruaiuj&i}?7%Nz!ltZAXn7(G0&&KS>mI^)4@zRoypaPkz{3y>|_W+TgNb8>fZ
zj=K!GN4zoB-Cea2JPqi+=!wQ69Ex^Y`#_Jpd@`_4KzokkXn*-9!Tm2^<Ng^Bx4gVI
zl2yRBTqiiE`>-TeS-ODDr<UB_!m&Nz0se&#8~i(x3&Y5cIx`r;=ONitzvtf_8u0w!
z9&|bBOV>uwmqt0cX>HPzkV)BVnu~B<`&s;Y5AtTY<Wla+8_mAWf|KHndrmj$PH;!{
zJHd@T=sgFJvo)44-CV95<5or${!WdQ+Pj+6u4FOE(Ob!5DE`=&zFJ(Ro@iky{mO4`
z;fu_v`pTneakz*a9gHJR|L9Bw>*48pKkZfK;l9Qu9V}Xj49~o;K6KZvJJ>@(AA-5&
zJr8>5-5FiFPW_E$J<{M=?X(XjcQfY%eM*<roi=O2<M(j}wZSaCZ4>^W>Mht~qR5cS
z<8Gj@k6(ix@h*E2c=gByz)3QIovS}T^{pIx$~&q)Wpf%!zfaNcq2>=JgFZPwMjqbr
z`<$q0NGw^@r_WN`=RJO(R)(P;*Vi|tYr4LkDVqT}y}+dAE*XkFg*$dS#)1dZbDa5$
zHr36)jZe)c2mL~_y>wN{^bf5iXA<KYr~FKmyT9^i!Y1Wt0=}8oOr`Eo5dS%YGR>=#
zbqZjrdAvw|pWwgNQ1_MzC-qD+rEpI9GTymbd7H?W=*xK8OIGILohWr>Z<rc6t@X3R
zLJgvY(i4Ou1IhBgSetJEp0kGs;|7<N=RkY&2K3eG$mn&EK`W)FXdJ>nH-cP@j4m7E
zZ{POMx=|LtxxO||4$C{4|5M<Zt8rP`(!<sG;QqYq&cWbKPd#t^asDTGzmVsN4oD7l
z%j$x?u|BX<xTOP>4I7{=(!b31T_D%`G|aZ$L&M-lDb0s(=-csrpXxu(OwU?)d#g%o
zeLlF4uMV1A6~lKI8iNkOdR~C+aRFsx-_Fa2_f~3X-IBHBXz8RrJb88tbhT~krAMdB
zM>N5lKOMcHeZtuDr=t_JU_Wg6Z}hVXBhGKDKlx~ALdp3}J59QdxisBsa@ncKFpou&
ze?(_RPtV0WBgvPfztXQ{p881iEA@XZw)%wm>lM|=Gsw&663EfgC4l$N?2;wu4P)1B
zn#+5CF0Q_oJ=R$2*|DOGPq=UxoYl8z-9*Zyw@t&=zYRRiql0y#Pa^vfFEThOSQ8^+
z>0}&Sa*qI)gtyN4GILE6J)UoIjAy9_dgqx-(wFq9AABv}u#?}L$x|CT3XNf`+`Db<
zfZB^SJOigk4rUC{sM%w}*fXJP$Jf(X{MJ78^zZ&MQtHj)d^XFvOHNY#gUCqdlB-r@
zOuRvzU9^jglzPjPk({UUQ{ErORwY>n+V%@%0=;L*X{vp-2RZU4_LcUR@`uDsvE5r4
z;E^DQNU*QoeTzJU{FhF-=W5oEy=BnR?fm~a-{3q@T$KVZocoKb4fE8Q{rW}YM>ft6
zEy#{aj7J9^pS=z_tktByuh;;eAAg+R*<#UDOMBLfo{Nu(9%+BS%X95D-63*dRer;A
zU@1EH5V1*G^T6&Z`$$0h{)77#pyBIfuX0OSH|{;Ox*Tn$R^>N-nKncN;mK1DoM-hw
zude77bodVKE#+A&pvmg9kS?n)<+2k#Mj5Acj8|#*0>;$hwV!kUIdA*@y#6zeOpDpD
zkZ~<U?}=L-X97MB@a|8Z-lN~aJvV#(F=}1KU*At(2cCA)zpd=9I((fWuPwF{)|r?X
zYhw=VB*-7@b^pd8;G4ee0-GDK1Rf|{FQm!h_xbR+eTi%E35&NPr^MK+vZ;tKN_OdG
zN14;#juQQoCvP5?oBHFe`A_7?ON8sb4dq$r>rQMa&w4hLXq-FIkK{Lq4rqTi1Lt|@
zA+qo8d5SSl$H&OJ#K5(ecu(+<Y>*%>CiRl=)3cp0hS{>8+_1x|llfhK$`WuD`Rc86
z$#JXwX0T0at+ulNB`11&FqCVQFQd`e=lSB$v3_-i`E^?SI>QI3Q|i~b$**&|SEm`f
ztNPkPpNEH)*?R}wvJmTEUz?v5#{Xhw=N~Cr>^?c9Ha{_RYzeqm9|^C_Q`gc)%^$yo
z<gwH^QyIq&q_N7r<NN}8Df)?RC-nk0Q1r-D9eQLVW!j4`7FUZ7#(<4v;yV0<E_BQ_
zW~2M$rL`$+KJgjoCVAO-%)ZCSZ=O9*YXz?d{x_4~#L~VOfiwTLCw@%61o6B$<CIP#
zSc%{D`VX(`^&dW0_&?DH7eCG3&N5Do@dC#9Nzo7XCq${j{fviW(fd64<v#Yd)u))N
z^r=$f9S?kjbMp7*E8pQPiF_E+`y}@%m*!@C7|uP!yDYiA$A{7WDbI)TwJ+tXUGTn)
z^RR+%k>sws^9|a=pQE3(#K+0!5zCB7o_;m&q>8H(5$b2idyp~>JYT<jl<tfFU{W+c
zf{&Ou#oB53Xl%^NBk%(JvSlZkw_^B|EWR<XMeH~9_Fi&xAXg%9SsEzWlKESi7TI$B
zq0SHV$d;Zwd)hwto2DV^%d=r<o9-NN*t?Qv-(ZfCXJrRD1WW>YD4KTQoB3+H9}?bv
zkPX4`+x7XQ_=E2G{`!sn-K5_@_XcmuIG^3|RrVd@F^LZ*JG+J?JKK!xA8GR;XH#}*
zIPHAMY+`@yfHv>UwxP3Nqh#-{jJ?@d(}q5=_A5S2qUNm-Fv*<d)Rz4U9`R-TOcmhq
zmra%KQhpfUj>edvopG&8HVMxpYXj$zruBkN-$aMp94>AB!P~%q^^)I5xcVq`6Tij!
zL&QCF;!Vs#cLQ6gbFQh1V>{LU`4Bi(wZrOxzHH^mM|VSKqs4W#sSleT8RXD!PU61f
z(G{aILx{H-mOOF`cXndmIZWI{6S(X`-yQ_sadJ;{?hsvLl)cyJK%|s9r&k>M&E*|O
zZlT^n;-Jv?;<e;EM21IaUxy5HD)~3oRkoII`YSl6I@j<__1b-(nts0+8dyh^eprWo
z=txJzz9E?P_%5JDc7I}PP@7#hIl1w~@(m<Y9%K&68G+8Wz6GDA?h;7BBQ(A^ut!)(
zzrgs8<EQdVc=x*~-c;i*GvixLIcKE(HZ;eeouCcc`*7@+`G!Dl4dejHvMKRhzJq5P
zyY{-vJjUZ!INSl>1McMO!JqE&IoVO{Z{!Aim*nSAED;>$LVU6K5AfsW@=qgoK)YS&
zmF(W4D`ogh9ekV8qq6+Z!tY#YToxWHUyTc_L<>b@Y+TEg=)}9weTd;`0M?pYW2Cg#
z8twfvl=uXBfUXYKsBnF-TiNxYZ?)IO+z;cM_?>7g>mk^5`gP>TILLUk9%=OU#>nW_
zEHTn9<JFx#ioK96OLNSEYX-U_dzR>W9sKVA{YFh{X95|+t`EMZY?<PWQ#&m@fi-;f
z7MDGpop>_$YGcpi9$eieQFb)MC(I|pr-;v>A5L9H`9+C~8;?X5+}FyUj^a0=ZQ8g(
zd56pNd>QX8<Gp3Pw~Y6e4dOGHPw@{$-(Bto5Z%+dNsc2Y*t$HhxPTY}+2K?tPi_;3
zJ9*q<WMkG!W#VVd&-1MTlX3IQH-Ue-(2KP-4}r5**C)69H=*s{MAz3^Y8}Jeo9sZV
z+;?xPo>5d+JDAv|I@Z;Uov|xhYAP?C1b%=6dw}1}nYAlB+20{>=_JN-w{*~ulYSkV
z)&i{gzxaFe=ha+t>BO4HiKB}FZ}~}5V~Ay3+|*4>c&@F8d-(8wBBNF4zO3CXqO0DT
zCV;orRCiCg;A9qCknAmcUC%e;`6<J*oMpXz=MHg(@{8GhE_lcu)av1p_^}JVbhT<P
zhblUOrS(;kA49ku_wmZ&9DOTBVH*7l&!fO4_3u|yqZdNkPLl81>R(6DsmG&#>8`!H
zr3<?S%ekM#Zh0fL4*uHa#}VvDzB{7%Nx!5o*%CBg%`>YxT6$?J9uQ4Fow4ArYWDqA
z4*n|9<ZXHvIuiJ7=kFSLKb0zm0DL|a9zV=|=dN9vk9dP<+y%$!+bZef0eu1ISBb8P
z#z|&`i&)yGyv}jn*FH)><0=>fG;Wo(E77)B-=lM{GmlUHXMW@FB#T4axzF6vcF}mz
z_p{~@Tev+>Z1(tD&ml)q78vW!taHzHauudzrR>K0zy$*=CnNU_0<Y@L5F4jfW`^yH
zVoPpc9PjRe9=$q8`KFxQpit4u&8B$Yi{R08Y$0cYhr-Dp62o@MXPas^hl*Q6JQMz{
zA-1;;p87KJve^VYW>#@k3u8s+SS6i9vP__FWFF0vr-$5{@XO5Z;_8oRjr_Z<?%T?K
z`x|##3HDv^XN!B#U%{V!oVK`k3HOkImuvAW$}XM(=b-0yErgG%YkjK1KmMOYzXulO
zH*AHsz_(Y4Z{G`!NCx|r_@QqjeUVtG6VcWa@;`rUU5rVxlxXa=&1TB&&so0TgCCuK
zJ?SYEfLEY{z1mIx$L%||zQ$i*-#K1(+`e<X47t~N=y+dx_glbQ^3~tcnd01=i@avf
z%8Ra9Jrr27_dPupTvOTY{I~cmJ(WFYzUb+jcLBHmsgKO}%@onv?A5$?k|zfq0!Ho-
zv)<~usi{dfY;taWD4D;DSht}jcL;vsuFx7LX1hc2r93^bkI2QgnqX{&_A>FMJhuDM
zCGczZgZOc(1U{$!ha`3e^A(Ij@b;KFGpRaZe%Cu^B|{}fc@oyg$Z5jwoPKlHQ5ycz
z5&QOZ;!-@^a<}#GTYfDUTIACI0mhX;W()cYvB#|aRqIL}gAGJDtFZ@lV(<=)>k!ZD
z>|Ii)COe6hJ228%TVXF760xM6<d@U?zMqje;Id?#_j~En=<j{w5;F7IGb<PaV=6OO
zz7>1aGz4Q%T$VeWXIDD4z_vP5j=Uv3_$K!1G$%b#JQRC?F_EEpXlb51OY;w!oO^XB
z?RH@+_z`P8oI3}gD+j`yMYsxCs?qw)_C0nvZ2&jtGP6N6dkbxge=NT~(lM1jnu+1a
zu3j^qnA6$h*{(Q~c$Dme(ktWG5JLMN$1bh;c3~6QgMCMOcwZl%nQW$XG0r`$_)0V`
z#*wA}5IPfa9XZ93NLKl*A<ke1V||jcm9mGGZtHx6`vKskpS^@};$IA5KWn5ed}Al_
z@58cPI>u~^VMoj=9^(Dr8sjRN&RH4Whp+Cl^?)sL4kJ6S2q8mg{G(S!{uwzR+L^t{
zkpIc76c1m{e0JYNtcLhL&l*k9J`?Bc82j!X`2H*85qkM(WI+^KyPNk^H(^5C+|}$6
z?krLL)B*TD<+Ar#d5rfIui<_l`-=9@tWY{-%usg@>vKh2+W9m#?C;}Oq+N$KjZT2~
zAZw&<j&G99%<AE+iO#fSX+t&};pN0dOS-$DUrp2HlPul$1hMXtVe02D*<?(3R`Vp*
zWi{|w6z>j$SJO>oW!EFfCX8_!`N^8$DMi4-088lyH!#K(d^W>F>X0u58^K!otJ=>1
z2RF=IC$g9JnY47D>_payv1m=H`&M{F-Qm~nq~6uw+qK5CSs<fy{)jrr30ZJ}djxau
z{s(rT&7K{|!M9d<m)Xz-oydX<aoUr8Qucn)<$C0k<)1pIs_kf~LpIW;qu~zGQ1QY9
zdrR<%0z>$CKiaDC1$E5z(7pRvGw@yh<!`gsvn}*N9qp-TNu<N&cUc5q_MEzOC+&e-
zQ)H8h(QnsM%>lpKQ%>$9zxM1S;@8#=#W)S)EHg{rRvTeM+z;|o=2!ShZ}(z)QVYOu
zY(H_uvMT=WlV-z`tIZUP6Wlc{-Wu4cn3Mdbt5k-rnUnui&(H_c1$L@cWyX^S-M~(@
z#(1`@<94d!bpkup<9;3APPK)8)Q)UZQ*~bmbCG>YHYv?THY)Z^+C5@&d2Cg2Y-@Fm
z=Tzx`3-g(W9jTo?xZ=~q3^A`kCcKioUHi6PkA3l@=ppRic~{`u)qcoB`>*SM$_aUP
zD3?9!=AlL48E5z!ES<yd6~Ek62`{z3W6(YB5UAeDNA{{x(GA8ZyQgg7?$ySwOV>8?
z?f;jzF1$ZQW6vI84{X!Ag!X+oXrJ~{ienm9r+rwdJ_pg~4Q9~L=V#Fed`UKJw>6xW
z-E04!Ji8aT;PGH=UOm6z{XM_M^Zh!BK6b9IS;R{tU%bPZ_9KTLtd?9dex2Rh;A6t)
zI|08DE}KkmpTkk)(|{*PMmolSU}W!EQ9IWov&4O$c%eT$Q=G4Eig+|5hK(rtA#nXP
zGiASzZ;}NiLkr&ybfLfbxJFEcjqld;9vorK<wtSZ3;VBtZVO)`#mT+kdOmNC&HE;>
z;`df;W?tUn)7D*weMENdVC(^mT-K)NH~UI*&B1Vf!${4e448Z@Z)0R?4|#fuWVJv(
z*Pa$_xDgnv6<>}HY=_H+d)wj8Kt5{nWm4J4qO>!V{sJB5Nqi21Z7|lr7w{M4QjN)V
zyfIDCm;}GX-?pPY*W~+W$m6W}O71nsuz3%|9z#FUf91QDjA~|1S!rWESS#rVvWwPY
zW1JcZ?TZsbP#%Fd<HxB-uMI&Xb-qaZa?87yRCS}1$R^QLU^jZ=b0?OYua(V+@%O|P
zT<FVC(jhN&a=$M#Q{>y;0A3!4m+up0d<Vc^;>1rypG&tdso4ZA9vOo+?LwxPUZ34(
za?%UBRum_*e+nT}jH$>X0}P_gB0kxdp?A}YlLz+0H}{3ohu?rN!xLol+0CBYa~}Ja
zcfI$DljFrN_5;6tb=0j(b0)O3nmdfa+Y0HY?vjPwA$W#l;*zV-QK2i+QDu)4|Dw*w
zg?BwUbnmks?q;uD*j<h<deb++SISNkzUmo${|Ft|uGL@O?U}pqWXxaR-Ox(E0S;Py
z9-Itt@ipXo<~RFAaMC44W%Fl`(e|L^g%|L>5IIt^I`itm`CGiQIJ5%#`_^G{%?{PO
z!@(=$8J({ZKh&6h3x9h4kHm-ao%pz^BtJ4SNOemx@bM<_B(v2dzeGQ>-D>~+^>yZT
zKD_>6?_7v*tqj@Ool0LNHcm!;rrl}&|7JS|E1$$U69QcsDSuGg1t#|gOSg!>$HshU
z1-2+~<Y1%t(m3qYoQnf@yH;{<mgw-+UJTd}<S3oR8&Yf<9tw}ywx-^B>lehm?5cNm
z$VO*MQag<qvrRnYw(yvheRY;|;QivOCWP#auSd^Cce21LX2z`iYy8;i6n-A9lT!>Y
zVH}5;dq7{iq2Z#hT`QsEb2MH);OqfpOUb~N=OQP6RPd(Fd5mEiadfg1-0e8YUE!i_
z-!P|bYoeU{xrj>(ty~yBZKdL8h<8{Q2OpjX*W*0TB9|KKipPAGd8_Z9vCy~1Aeyi7
z1mlSM{XPUdf_^uJM{irmd4`Y~ZTtLfc+|F_FNkYt=XJzaA!7;#!LzzVq+`w`lY5Nk
zE!f43uVXs@_O6Wst38-64Q!(Fr-Fyp4xM70jHjZU_?qQD&D#fVPX`9Fe~6xR$_~#O
z2*2M22LgS(gm~chtdAorYY)k0D_Qg551T1EPa}JDo#Gb@>@~7SYh2eeu4{NEUv4%1
zXB2159uK`)S6lau;%e>p&^PiMOOb8=oq4;Z>?dT};2pc)phd_U8v?z)2zZG08p`xt
zSU0GHue+z;BfwR1{d(H(5)OVJe1fjQ8(SX-pBs_cQ=F}JklA;$$0f7N_aT0K_e}gB
zoW(ABKQc}$dySZD$?qdrd&#<zJIU|Rv4=Yl(5<#L-4`amz@T+|kgp}*N?sD|)mD@{
zP*lGY`SnWS4s$j0m(;|GueW{;WbCskPe7C1eV&dWS`&j$n7OxYQXAs^cTO@J=P|C`
z6HRp|V=0&HuCdKwzp*xr&>?)?hYhxT-J^So`eNT*z#WMR@J@Uu(3ubHbJE)dci^J2
zMAsBo{fhrTBj2aqvH7w+nvkpDeZBYQ!}-<E(PkbU2>y|jTyzcZ+}K=SJL6<zKKz-^
z2xKt!b?g-R1TL+Oo-Fvm6NxpEJ+%}6U->EB)qA-6qVxPqYoVtV@t@%Dr0!J4ubkb|
zSJ8ngQa>)PvNV(XoYaQFM`tJ#&5Yx(si_ss^!&(cUt^4|oYR8tx%cz@9%BBr{)}@T
zV^%xyf6Z6gJ;J>P?*N~dnwi5&lim-0@4nOICcw8_2Gfspt-NSeWToiBeeh+;W{lO!
zknuALeq%T2DaU>i{O-I{upYH8G$OIn0S_`dXUW-|4E7iBw^A_D|E;Xc9CW-m-|8z2
zPq1{5eJ0v7gR$cySecKMbxh=U7JNIMZ^`A~ew+JYkb}>py>jrai*@Nl#wTY(#Te?O
z-pX&396gxdozxTVs^50(H(DEqn4w@z>c5+>(t0%SFRnU|dhueOY2ENgs}6KBP40>h
z<H*Bikl3lZo!tL4iMr_a>G*!#rF3bn`F3%&a>a_~$B9*W1>1u5!ye$=$+|R^U(%s_
zI;A7Vu&rJKuh3p`fl;C$9_&ii^A*`0fI$Y^u*Mz4uEdBt5WdtOF0PLLrP#wS;Rfx@
zr|&XsA6wSoqx5Nx`C?tI1AbfHT*G|6Ra|uo^|Y^M@~!t?<lEjE&tB4bN7*>Q$9*05
z<{P?zVRj|_hdl#MZ0lM9&td!t><)Hq+wzsN(NN#U7KiX#=VSx*Wr0kDJphc{u6$J&
zd_7JKSE36%CWfnyb3nqA-QaHXN9q>OBOWV!(#eaO*)JjP>S-#$uQehxIb33D`OO|i
zHk*q4Nls|RWi6a@JTB{t{65W}*J!?jc(JHkTot7+_hn+5(fLv@7h4@R{xb3~y6aW`
zzSo{ttdr&nOm=F%q9e~yHV+!{9J;T{egr+Agxw+^F52fHpB<u(=#XfT=+bM<U3M8F
zk8(fccfgm#vjX3uXyX@YNA{{m^nE&T!MD(aZ=sR1Fj4sypo{p*N*(yfKr#D?GoUzn
z=AR?x9UDtFM1119<NU##<LPLYr%+Cw>)Zj>&>+W1jz%7{{7rtCD9=<5EzX@v-_j@U
z6`fpoyuE*hx1DHA?bu#E^RGu%2fRu0m3s^AB0mnqFWn0@4rHLm2PMbuMAk$O`Z{{p
z2cSjvU3dj}*28C`z)ifbZ`m^ib>uIw_5Req-igM&g}bKe#LK78uyjlBpQvsVHnKCB
zqs~*=F+zhsE8USjpE#WFHP-Fmj;+Hyzwx}sM?OQ{F+-ViHT04@3v9p05b9I;QB?nT
z@8mb8`F)}>)V-N+C}IpJe9qmFM}O$$@c)tD<`4PqwJxk_AlJKZdp7v5`E_*<q{b0^
z|APM~>MP5=kXgSk=??3OzmV>5ZuPO%ul|kqVz1{LcJ&$KC$X*QT;PfNYTui0c!75U
zm<4_^&CSAjjXx*kRXaD<CJellV@uBu2lcMzJS6KO|E6qtdUlZCC+c_0?tH@&^jio&
z-EnODeBA3Z>;LcazaQO~-`My!+KhGP8y@uMKZAO!{NFl{jh<}VzJhO^FIPVkUdwNs
z#s7oby#E94r(NLS-uy<jr&u+;r}LY3oa~2S{EpAd-6O|&wv~<8r?(%=Z&dDqpswD1
zr_X=EO66mY<~IiOmEAaa$HKnFUyDZXyRJ_gf_+dw=tJMte%sRDkFT?*zkeN?eZ0(z
zeK`dEJkh#^eotH!aFzb8wjW|{Z_xfxzYonn!`+cVo7#i7AIxu5Zh6)Jf&YC6^ZbAG
z(>LdkeE+uZUtPl8f#D9_d8S+ocOY9C+Ct7xTRG@%vq`erZ$5E!_0}+VF&WdEKn9-+
z%^Azx&IbFa9mDn+mJU3Hyd=Apa>W>I*@ksl{h5%>1(FDx+~degee-!p#)4;_x&;}l
z3Ep2hH`?74Ms9&Ghq$l8=1Va@zSU&f#|QaM4%z(d&wF`f<g;X4CD?1^zn3qczE4HI
zpM`AJ+DYC5#qEqX;bF+9!-BC#?7dL<^WlRUr~Gl9@OzCxvO_uNKi9IBk}nG3d?&G|
zzvXVcEx<V7k@d^C`-pZDz%I+XP4DJ63ince9)8_H@WKy{tgZ)c^~kYWqma&S16zl8
zZ2JW?ysY5-=CP&6?*!3%We$Egr>I-}uq@8p&h_jFadL>X-O4kAtzkUBFYtah0pGRc
zi#RyS<UUE9fpXLowjV{FZDw7Rk4FAFjp-(AG@){Dd?{>^Y9mIyCf2B(JB$yG0x!um
zbIiY|BR?%d?wI0^W87DDsAXtJw+FNBy6fZMbwfJjo9n9fbga-Y#&d?L1jlmu(~&)%
zB|jOzW1Q)Txr38&;NhMQJ$N7I_41sh3?+8zj@(@9F!F$$)NvhiSPJfqrkzn&R+7(x
zd)!z*<id3>b8NWRbZ?l5p8;BG%&3(yY)(^6*`}$9vTkr{Upul7xW8R-yYEovdVW8;
zYetSFjmiBj<YgIda`rhox$J~G8*U<;n_P4o@$lm?3k*VM9JB6*E03;TJDxa>dSVh!
zN7o@9A%#rec{cJMu<Cl!Sxo+*O;b0R1upk}P5psc;Be<w*Ld>x6|8S(#JlGf_<CoQ
zz~v{-H4W1givljU$i@IJw^4qGxwfoIjPD%98iUI%eC(QXH*br@XY?rlK3c(~bCjcV
z=iE<=eFQ%L825dxW{qXz56<_v*f<ZCAq#RJRnV6D(cVtbhThk?oyp7>+m+p`S@eS}
z?M-2?%H|xrCpl=(?bHJXalfCa){{CnQ*Kx@#Z$fn%yb{xOyrjXv{`wYseFg_WS<Du
z#w|X+4zk(G<~V_G7d}%6zs${xyT=Nb!V_Athgujaj_C>H%)b>^5sbO(F5M3Y9f%mt
z)pG|XYpppS<zCYVH3wj)@oOIYS@%bY30rh?ZFena?$;0(7DD$EzIH_>RCIz*!s|)I
z^#phC&{oBhw8I|X?%7<twp{kmDC*7`HELyJWYj)%@P>u;W{3JJ16C>%uBx8ejQx4p
zF8z*0$=OC*^#^94w=yQ+CmC)bdmQ`gRiENnaF@f?{60i1it?w9#{QCEpNogO>}l<D
z(V&ce>-}=GqpjThcrEcQiGuOk^<#bx=d0~F&}S?x=FDVI&SFnqj*rlg)`WA4^k-#$
zWJJ~N$wh>{M)yP`_i#7ErR4Rwj9f$!doLz;lIAS^#MYT$K69a!yOEW>SRn8IBHeQu
zte0?8uzhGre)WebZzI3p7WCWvvt}`L|0;KmNjGvYX$8+7M+eP6WfnJ)+YBG~V%0h1
zzhkh+tw47zd>+CEo28EA2(_jEYENZqa}4D!G-BIr++7v!uGU`HzTc~IV5Id&Z=N0C
z0PkCWsc_(K|J`SJ*D>8yZVS4#|GsOVnY3a%_0Bzf7t%ZnS6^S+UjX-SQ_tdp&r>8<
z9%6g}thBzu5$(s+AlYn7*WE||!Xt|tOQ55yQ^TmyE8hVh8Y9FxvsRf?8W-vQ>Mw(T
zp>s^n{nbPGPwdBnE#OE7n@fV+Pi6!-3l6=-Sb}~vcJV4p$HApSypjH}7Cb~>->10-
zbUjPlq}?M0d@$HE!Z+E4g7*8i5h7pZU)Lco(dR&WZ9j8+Rxstc?!6D%(SN~9vU_2f
z+r_;;Gmowg@cY*V&-?ZrBcF}h_%;1QZ^8R_A4r75+YGs$&6S}?LWxHBMtEJYXSI*D
zhqW%R&~9J;et?{7A@*2AHkPr($)6)xtYqB>k-_i-r<=BNS2{j&?cYKkoEYlKXBqH%
zIq;3ZH=ZNc*>vz0T<*CeeFZ#xp=f!Z_w_#uulwr9u}!ci6YzZP1HmXkdwpp_-?i$0
zkJ`ZVI7<5o=Hbo3%kdZFkPY&+xy+%7KEsUrS>`a&pM&lhZYSQSnK_6~*4cUVZbRkQ
z(MO!|OJ){M#Q)~_JsF*Q)^_MjbwI<8Egjr(Y(*$JB&0YF2YVehXk^m;`0e(?FTTzB
zg$R463;&{QWf}5N^6s0jVhbG%4Hz1CYG;Ma$jzpxReNe1_T<fp(1J_Jt+{zG-{hp*
ze3Wl;OW}{$-tvc!<+{!`(8xg*uat!+zdkB5dEZ2n-piU~&xcmPqvPPr>!YSk-UB_^
z%Nnhry-sL%*V#_TD`oZ6chcGOo%Cxb;R~XVUmz2&p^qWMiKi(IPu9J}ub&s0{2ILO
zm0`4vyp(-EZ6k-N?N>|dc_w*sQ0rcBS@xY*;MuRAH*IqE{j3@M_0`DGiel)!`o0fe
z?`G~uY=Zu-;XB3u0Dg))EaU<0<kQ`Mp?GOAcO%arpIg|{|L-KsRccGI0vfY&iruX;
z#;_LNngIuX#b+A1%g$UJ-!z@`9-CQ*yMccKJb5K@QpNXJXSJcb=G4Y(<i*vzJNOP@
zn^7I!bBPiC5_wZK-n+*+OLPt;OP`@3;M+JSy_@(1{G~QGa~X0PF-fP!=g!;2`@}aO
z9|F5s+9SY8xRzjFioW*UA7|5sXpJ-XMtiSi9W+XIg);CVp5r%g+{pj$z_&H781{3G
zP4I*^R=mpZSFy8qK|5Y02J9r-yBGWWR|lC>ql-VcDRUq{1$$;%x`o=zyyLZ*;=kVc
z72n0Y6WBrq8smx9Dh^!jGoR;ZY<<V2G5r^P^rr*I^%d<s-KQ93pGg0Z4k$QTet-{2
zbUiLUg59oP`B2J-4p5GMmOuw{kZ06RIqjf}t&gq$AU4R*zIOIk2$~sV-QZp6wvo=U
zrpHV&!Dr1#bL>vmuBns%d~Vb4@(}lMg^~+IGw%6VN8+AA9bY5gU;JkLzBeOh55A-$
zF}S#+ZTX8A$qox`uU)hJzKfc^a%o4Ldt}<bGNhx4ynrc<mG4Hi8IEw?HIlquzlVOj
zBYrFOhMwHfgzYzREA{yPq@H#1pU-UDw_wEF?t#7(=vLwrzX8sc4maa-eh9x1u=zB0
zv_v`c_{cHqC%S|3zH4FMxdYx$UPs9W7wa8-B7Jc+fp4T=8RxqaN3D&)%B@-}$th~{
zFTuL|_P^JH@m&jFC)UD_!+*Bhf7a=L@A1DSGiiSvTbi~x^*uYpar&$L$g)!eIUo;%
z)5-&B^*{8rH_oT0X+w4h2eM~-`5-rsL|2=X*lA_pGp1R2UgOOUG25ZR+hftuNkqD2
zoSZHCuX23i-0d}nvXCt^iPMsC+DSmu+bY1HYt7=eyCNNJcNOs&#Ak4aWM<h5Qs}IA
z;;#?lchEa(+dgWJ>3O&Rya`-dTpv!Vj@n#QZ*pyy@tI+c;q$nn?cI|*biQM%&Tm9a
zdMf-x@2{op;YH@WMd2dl*{D_AkA>@Rnb#8Dzssn-*==`?=(y!8v_+hX)~Jax>c91Q
z=qWaWxBh$sey|GkwlZu5qGil!NtHLh{pa`ewO)O=v%GTkmA}H92jlRbP2(AOqG#>c
z8o2-YSmJVgYxEcY34V=mI5`MBe(={tlJnQ?Jd$6%92}}E!IrbkEO_D`(-75Jw)lvo
z^mJgiemHFz7KDASyfEw6TwoTjSwbHAbGKg1Ud^T8;cK=gE?PUuR1%XYUt4P!kL5&T
zW*vIAD2Z--RsEut?$0c9e)#SciHq}t6BpMzj(lmg@80G7@LS6h7p+;|eo<zkseH_n
ziLSba`qnN~&Uk$L3_4{x-!_W7Tgg=bT^CMGjLO%=+<+;0I4fM`plhjLTt=Ss?2Wuj
zy~7vQr7aC2E++eI*vfROo4A3xPkMg;<-lKZ_qqj~Y2+Q{&*^;pc+9eV8R{deJ|r6x
zyBNO%+Xr%n?*A5Vw&Srn<@k!8y71C=>N=`BmAYNjMMki78GlSMTA2&2JtaGpKB!wq
zUEy5*`|J~RgM5C-4~1*2eOfWgDtqHeZ{2O#Q-0ag1!bE}&TWhTMDgYMM~Hh~F`>h@
z^@hp4@vK)*c}tJ(_uoBaj;#T&d-^%zzfX*%TO9JnK`iAP#ImW5eRsH5{>G?KuXl9@
z#3iQEZ5ianAz~wtP38^aDxdoA{A$78Tt$2*aPDdgB~^bbcdQ=Dc+a9&nkk}x@giV$
zo!}cz7QkzJ%o*<4pRRLq4(HhQZ27zS_4Ompvhm~DA34PGhWD+#%)1jh{6$l1GNI%p
zmy=JGcb<`sE&M@#cizpfLX^PvWcD>(N?sD;ww6ybJ37w>F5qoK`!!}N^KC;t_}v0L
z+lF)JFW=LOY7gHZIu5h@*?S*E-nduu9lh?22hFi>EzevOy4&f_GLLMrlY4i?%8Sa1
zG8emTb+!2wU%kk!j?}s<!bzPEQw)-OC*Lha$p*%{X8Cg$315Ym`4#tHR7UKQU?(3e
zxZ9BW7_krdL@d04?~*Ovb9cI#@-x|iIU^Y=h<khSUrfU_oW+y9iaej#tH#foN}bvV
z6XR<l<A>GqiSGZWU6!t~54FZiYI@mM*9ZALo(Y@WChV)GJh4;u7|~IkwSAp?wM7p?
z(6F`8i?y^<gZ)Wy13vHSX~Uf}KpAa(_(6PGz@kUiV4XxW<<IL^#$N1O7SOX@*wi_5
zx8S~!>}?iVW6_$5Ce>m`)%m(VtIhy>&8Men(a~Vfk+;I)e(=oo_noD~{@&|(=I=lI
zY=Aw8jl;I(^QZNP*oS4Jv)b=r=p6g8a4)8yyLms}S^K(hPv-qS+0z#LvR7N|PrIhH
zVd;hTCO%P(t^G01val~V%|bqAzv{nidK>s}WLE*d6U)I>XqV1XWJ*o7_=_{eY!Dp1
z7?IL-i-;)@Zsr>Y)duUTeHjbZZh-ZC^c-YrayrJ(Vtr`q$p?sY{3$WW--X9b8vr+E
z4N!J||Mhn`2V?D9XZOxS7n_6qX&U*5u>rnuzH_Y5Pmyb#j*aYN*vfzYL?+UR=@VNl
zW9rMZntxeb9fjYd9)p+qWBne1X~-$-mmhJ`l3S2h))R}DOhn4MRc?@H68BD(+_GNJ
z4022i`6WUA!cGUC2~OHEV;`!QeR!CWZQJIoa3_Kn$X|)2*b3%1cSoRiabOBQZ^%xB
zeh!B|mKwW1y08~_qHo3-yYc1j;CZkPK^^5S>coC0n`(%Bcn<rkllSYfhcrgbkK57d
z)Tj1Voz58fa$;iP0A>EZ>{ZWSmtJLzw_kgw4^V~<i%sDw!NPFvs}L56Q63z+n4jkP
zx8Trgj_j+xb6m^05VhBLOoB@Y`Bb`?-f4$M2p6<BMe8JwDi>nNK-2lHxKYu+Smkt&
zPR;S!EX4nBl#@S@{c}F@wDwct$>Qq0v?;&UckX2GO@q#}Cde1$?c(<%PHxs>%K7d)
zKIqkXZOD=aonP{#V0AsPf){$Q0*`#VyoW>JlY!rjpTDg8KY^RW{NlnNzN5^~;hFj<
z9B(JQiu0*Gxbf&jvt!Lf^W!bRY}r=)0?^I`{j2Y5g|q0#`0Un?oqEY}+@)XPuEk&a
zh|FKoJ<VUYl;3|Bv_@m-vi*UJz}NueYw53%{_3z{$`7)J{v_kaw}z6)<@%l8c8RsM
z<pjshY54P&5Ldktos#k_aFfhY&R)Il=A)}il`nVzSpNQd#nl$S@Ua@kF#%m2IcULz
z^W@W<z`4{P-#Q`l==lEv2k;}VR}APxcw~JWzC^~J;2rVx(9iQ5FQkskS%++K9ddI~
zN4AA~R5%Bbsz63=4ka5eV_c7yBva7X>-C%WQo!;WerI?$4bK)oj`=)Wzvm-IM|+*0
zA7}lg@|BjFarjEd4I3-?6MHKf{|r1%KDOHTnJIqUiru?G+{(|wCiheU-xgj6y!!~c
zz<|6Po_u*Szq*1k#+mPr6qn}5!TgNhop;{#6LXH)kqw=7M!m_rU54!S#5ak*MvpQj
zTOLM^-xrFuKdjto??nzck3Qdv91#6=?{guaXS{abmU;UY1K_$RDvqs=f{P*S5yB7Q
z-hh3uHhMP;pUlDg-n^8(_#^Jbcs86&-+_*B9{SSCNbRBPoE-b{!!CN9rFGG17N6N)
zQ^Y@`=b1FNt@SOJPp7}qbz7@!E@`W;z^^N+d9HXW?Y}}=nICLEoWR#)$99IvooR8a
zblvhV99^xLU$xc7Z>`r+(E;CPR>+r*D);4OP8xsQ&eSkdDH-Bg#&Ruj!_w(2%>jok
z{)5-j_jJBO@8CZ}pPkV98aB~*Is9b)vKogR_o9KqGvTgei7@-ieZ+9)s3`fy8guOH
z=uh%%e^dK|{buGb?(RhYk`1;99n%GVH(;~hP;ZjU{aA&yfs87jYHVPis?K-Fr+TOF
zPn93F3;H7drSV_`P48xX*J5+&g03|e9hX~oi=RSM<gfbnP?K9N{P$_OWG2bje_~7t
zU@5t^U2-e!R7-AUZ5-A{?~8r}zndzYoM4n9Mm5G96-Syv7Z&UUxB1xl<OlsV`(rme
zCL0NL$bV+(#i+WDKf(u~C#&q4diHL);KiQO^JSg+jfyp7T~-;<a>oBY*4+Ltpi`2w
zM63SmBvbiu@NWXND!zfZRLNQ!d+&wsG7jO1@T`!|3x5{Sm!9eO7yRFS>q+O8??~UO
zE1!eD*V0~;wT(z7ftQIsNKSuKb@^5u*`X5H7!2!g@$}y7J47FkVmo!;fCfSzvnz^|
zqLHVu&vf2IG;)-F`!sTd_TT+I`(#xhj|8$Nd*^r=dn39kzgqhAALv_h+C|t9CJ=)u
z+48f%;u-({jr?xl-G}hM%Ac%#l>ndO(B+BsM->aQO0giaA%~C&9Oh@&ftZQTKJsN^
zoVCZU3SuS&!=Rsw=|}70`tT3RW56w{HVek2y0V8^enp&b;oL^BKlMy^x7a%1r}`<Z
zBf2G>@{unBGwcmbA5iRL>AFAN4?TrX_O0*E8lY@NDEYhVkF7q@T(@|Bz*U7YjRCAQ
zt`Ia=^i^XK%w&T;QCm&ymA#MKxEl*=`#$?qW7fOcgQ-K-UfHw8ieC)iaH4kC;`7_t
zx7~8JJJz=QwBN>e{qLYn_bKdQh4=*B?+3GqgOVo+o{w`b>xm=4xhPpII6va#j{Qr1
zb<n1G#@l}TF7M=drgwhtzjOFp@0~YQUPcZq{XgBwovXEDuO*0`EZncF3g#_*{S^Ou
z<L_9Dzn`Go;`4jhGm4v-&7A(*e^+Nbf;ClJp#s>w&NGXD1HdZd#hv!7)z+XcuuzPo
z+LFE5!r1zey*$MGS!X?ak{I+ja!g2j<K6t5fqiBzJ~((w`nGy}w#c1{3X^sY<L?;)
zo%HmsRnoiS+@);Gq<7t8ZOE&T(^vKAUH61Khz+#4B<?uuq%HpVbT+=k$-M+U)tzi(
z=ibr%jXb_{_=Y1o2M>@OEnFyE6HkxgER?TD$)9QGhR$SR6vPZqEKbhQx^MQ{2-Z#X
zMmR^T;KubntP}$oJono0=#qWcukXH|-*^r6PKf`1$~TMz|MmV+_=jzWy*}9QqnK~e
zHPN30zk83_&t1%z$N6K9<7WuQq%ptjx1&A2*Khv-WkH=_?sk5fGw;0MzoU5s^@6zB
z=lnJ%4^T&O0e$zN{5Ac`E*PNfBLkEn)AV~6xutIzI?bxF$V+!ra1H}r|8-)=gd5|)
zjc<Y*k|iDR!GIec9*|=n+9kRrSoCert3ynW&r8awQ-+R&Es@x~Asxr2g_F6~lRG%u
zj!)$zY!at*9AW)}HJ%GU74GRgKnS@`aW2yJI7^V;RA%+RRYrHcl^Mx(;5>Zox?$vM
z3$Mf9vP$<0kn`DlMm(tO3;X8`?I3Pz_MfYVfBvsiM||F4PT`s7uQYQPZYtxRDrEZx
z`6~ZEbMGD>Rek6Ge`Y2j0ThvN$C{Z0F9cUzAqi8VIZ05dY`tJwDQwGx*y@(u_KRq}
zV9f;R_Cj~dC~aEVUo%KACf0AMm1?%O4A82r-4?OM-P&ExB%rwTV!230!1+C2pL0%_
z458ij@w<Hgn8!JD&gXnC@6Y@Gd4Jv?hp{I(3s}!K6JtVbn?1V<n-zceKz(aCG;?xu
z$5a=Y9g0*e{MuFUur~IXoK3vlWzvDD1N*A-0Bg_}u<qg8hPt{@Gdrrfd8fLy?<>Bp
z>BTHOQM#JN72@Zz(>!}|v%fcAYnRr?cBMJ_{z_tfXqz~=8p*wHs{JjYRF-?i2Og;>
zzrxi#Yhb?#yjAm-0Vm}PU4{O5c&eFwAGCfrQZXc7Vmtda4Y7gA)prs{$KFeP{I%!?
zI`fH`yxu#f4AlQsi8<%2edc55@S8o=Y&*fY$8fKBYr&QnO6<xhD?Woh?E;H1xwOpU
zd+c}}^oAku^<hBV;PY)d8;tX;+JJ8~VrKqJb8>0`i;l>Yg&OBVjdLx!HS=?Tv6&Eh
z9_Js1O0k7Gm&0KDR&ETfbn$~$J{MXUC5EwbU1(*3ScqT_1e0Q1RX>ZL9lq(>ZtR*x
zN0%<_{!RV$;L8pFVEG36Q2#Zo^Maf7`yh6~o<`0~J-J$OWPd{p+Izs|>xd^SvGD|#
z0<WNLUBAp6D1JusA=n94&!HE%=+2qr>|yh5g^mJS;o^ztTf@Z?LkqHxv&hj2*bBsE
zjt*cp#oEfA-Pc#`#X)D0HDTgDTEPeDu<FB+u*n_8PRLdR&yrL4_xoz|eep~15<0|A
z01qo}U@ff0#48v>!{t|<)U$WZzUt&FrDuOM+s0m_#U}m(-Gf_QrRRJ!bQXBXHH*Go
zg}u>-z0pS>-oEnu>&|zQbDhO8a?PH?PtkmPc=C$o{(OtzUkLjsbD>y*eHUT(pl{h2
zJ?yxo`Uvcl<5{^RL*%T^PGT(Qn$$`1l_uXPtCM~q+d_3%_=BUxbMOfJD7vUa_&wYl
zJ@R_KrIYu??`Bb_=I{~rRD7QI;LJF9Qg1R0{XfF`1@l<>Ibz4b#pDQhD=~m)Lob)m
zj%Y~hCz^*#`IdOoaoT4~9g7<HFPp%HmPOm5>ygm3=s72v<9#5<REOqDx{%s%hz%*E
zQ^k37Fjp!UbEc+VYlNoB4;qyDR%7&h=|b??MamIv>xH)t$B)E^($qy?7s>bDB_BRK
zNq!^oSMlIM{wlug$7}?6=|Vdl;6M;>m&NZ@y_r}!#w9uG?^m!oRWPo>Z-=4N;`&<g
z=i2@k#O<kGo%v|xw9gYWUM#_&?sf-z6JGVp=&JauldB`dkek%erKR0(vUgWHo7EHH
z0f%oYA*L|Y(+nTzXKoa8^~4(NWO!67<4a@ruLAF9l~<5gsN&#e>{i7otr}-u(0}+%
z%krI^k4St?D{^2td3BnQ15fe2;z>33_j3QrC}M;t`wIL0W5fl$iSD{{O!ENGdzV3%
zfxMJIT=H^gjB7LJY|dv+t{RMQ+Jby1FWl_S$oS}j>cR6GGx$4;&ugrJCs&-z*K1w-
zSlfv1c2lt;OJ9OMtfdbPi)TG`tnKP<**(j(_qfeiKO1KevL+H<pF<Y5%s<ijUF^*4
zImCRUd-QSUjA9VK;+*J2j&-MrBZ}cK6;Fz3|CsNCSJ~W^_@}7<htwb36JNs~R?e{?
zzI#3}l0T!J80&}WoBR|H(l1j!WqoC)@+p@#f!`B_^#=8PyP(eh&ArB`en;s;fVUQB
zsDt?$Qim-g+qeksG4R>8Re*nm{6D`-=h}LB<>8R&QCvw-pK#6Yf0-q{2N@4;S^cNl
zqz*OXb7KBX=|Fu4ew*mx#K3sd7~dFXZz#Otf7-{;Xw!0R7H}c2?a9>zII=5bWmbs%
zFtKto+Ym=^jQLbQWTXBK^Qg5?bg9&<+zYnoN<-i>0vvDUTuYUSr7un0$^58}EdN!<
zm3)^N!P*!5Kq<FX&tlF6sTCIQC-vxT)1Rvy$|oKUr+&))a%>^(aY*1RnVM(qY&kp*
zKfLxsBv^-5pR^w$9j5>Ox9O%(>iY%XiXKP%-zw%`@%|SxR~kbx+-Aeuv}Z~ER{u5v
z_nrK=xB#5t;oE}wDxQA>jSh!D4zbCFIQTo^9>2n8;!(x86T~A0=d&v=sSZ6S*dxV4
zS&z=7eJfI8<B?88M)U-+NN!tW&P9)OZ{>O!*A-mBEB9kuC0AB)oyqksuISP3YOd(X
z!PxdAUtdFqws`2rG$~GD9p~O{T+BX+qXYGw;Kq~EC*XM@>udJyDg6fz6w?q(k4VWc
zDp)3vQ>HFdYs*_-npa-_WpWHYq4+nIJLhn|6MLWr{Hm2-q#xU>AKFx3s>W*0Bi6T}
zGA_8FGMY!dkNLi)U>wE%tIcO|PM2LDo%Sc!NAVTrgr~8@?9{PYjlB~%!|4fP{=}ar
zz`xM{#$|3Yb;Lr)6FMUgxo`faye@Ht6Hk&$DnX9x;JLH#wtBk;-+p#?zI{wLxEt46
zx8h#%`BD5v^E->*+5E;lmTynabLN^ltv|U{W_A*IDi>fa{AnBUWb$p>G0MJyPuP2S
zr|cwqFJCu4{R(JuU<LZ6`18xsP1t|1t30)Ld3sZ#+PSCdET=nDW$sb_!JT7FH~qEy
zOr%q&ZRJ1Ue5(~R=Apx2Gflhut^tFsl16WlZ`>tDB+=!>fBz|SGRj$<*?iXniJ9;a
zlRl*Uep%M>v!4gQrV*dh9KPo`ZM$VRb|)kUnw#!PRGWL=j4Yk;3OsxVF|x`tqWeec
zLoL4`7pdYnpjqNLCN4zZSh1G=Z+sv*bz^wq=(YE6*%bK4)gSr9wQlIG^$=^#{`$%S
z`zv+>`>!(RKgAxb6YRlyx*=0}x7KYMk-=GDR9CRiPWqQ%@aD^$wX_1e>J`)bEogKN
z?aQ~e4_#vC{SR--qFW{@C%sp`<3tU)?~dhXyVw9nA|<K2;bq!Oq;*fb?!f!FU3ZwW
zLh;v$2c*-E?^#ZJtq(f!i8?PB+17r9-R~p8p-ylJeJu>^9qdYj{3a%Nob)yE+Zeia
zC3?iVv0Y1?#jQ^n>?7Hi8dH~IlhYkjRYvcm8<w0PFEV^jd2O<hlA3+&-<pP<*SFs5
zhuT)%%V-~;zIbiD%R78f7BAFy!A0Y=XXt9qnDbWVJj$HA%(-!#7hL8%>(BXG;G%qM
zevX3`=_Q;u0KSFkS2O34DXzJ?Ag*5Y)e1cN$Sn{nFIj&Tyj*=q7Rlj1hHFvA;9gS_
z@4p`3EU-gP)I7}G2?xLUq{m+}b*A=s<O4I>S%Yl!Z7$tE^54wMkoCxEgX@tK%`|MS
zX@l#L!n^D$<*hP3FQeb@5I;nwYdt2wA+5>mTSX3~-(zc`Gl+gHZt;z5?K^?Ld(c~#
zA$L}<>Z{YbOl7EdHn5ux&1(%s>nr`t+j7=XEY7jUA|GR@oV^&FBe;%n_Vt&hO34q=
z!TAW&H#qU>(@ot~7nr)n$?!(@!D6qHOH?!+IoMH&on8rS(6jb@)NHi!2YzBWi#ID>
zNcc}5cd-7SQ9OXoH|E^qAN6tG8u3K%lx{uOd&4=%F>^L&5Qa`Yi;m&hIXny7X94dr
znR8P5CdRqPnGq5D&N%0$;6uzY=N4XTdSBUDGVsd#xV~M=8HOXeU-_WPZ6`K$JF%&P
zxonXnJn<LHjg14+ckqY!D<3u|^<HaUdjHZ#y!V26UhhBZz3<?i_*dq3-~m0!zp^7-
zp2~#DO$Oh5<>SW2#J;(V`*$VhH6&AWTSqzZ%oU+t$}f85i@=AokXpw$@hE2@wT{zu
z?5x&_x|Yw1QD#SY<P5<#LmtF`MOSKJep<LD2j!(_yJfCBU4H%II`K>=_p58cqszp<
z%ZWiQNlCUG0B15+hvJDQ`g1MUYq?&>bqUw^ab3i9QHc1WNb1+&QQhuEeE-kXhpk+O
zZ0&>gve08=d1$?IoklsUT|C4g4t1I0*5MuEU$UD8$2M$6=~<aIk<_ii)nRB+@}rnO
z#UtRsoLR&EI^u*AHJ&_-0-MYd`Z*OD*k*FhLS*Pp+H0oFJITv<shRyf)~=?pmgV+`
zQ{#R_o*w8!IW$_4_u%o37MIvRJPTh(9rPieU-90;40s@367uDhzAxTeXmQ@RIouW4
zZr>lOtG&)TmBx|Tg%6(j=w}YJhM8|4+x^6)W~0Wfe!KF$b8eM!Mib|FE;deC>Nmjn
zm9TTjeUSIyf%3!(uJ&Bun@sLElT2+O`;zQ)`1ndwD_Jew_TLM5o#c(BMP$*D74Q*c
zQLx5U*#CasugxNRsG|d3_Zt0u720kyn>R@ghKv*6{9k2t@QXNbtPhdXrGa(*<SXQk
zg+Fjcal8q>(YOHleb)GK4P%{^QTFewD>rr7CmqW-#6z-ALQ~=&*o|*s`%_<UAG&Ab
zf95R@8p3~mT~<GRqZ2O)o4Wla@S*6bdK#l%J<2!xU-CVmzlk?lK4rXjt;m;`c=t8V
z!f8CO;Qe|2d-kvVocC#TujCVx>aX<iW;OFRADz_JN4?0H)cg{Yn~z_!gLUji{8Ji3
zD|=zK^Zk7E#vx_PDT}UY%Z~NRhVa!rLD_7VSGI|IEj+rQ(Qj~X!t1l&@XBr`$4NJ3
z9qPS9b{o2*QUBqoqN%hW(;K6Yn%m)YSmoWml5tEY&r<d~ep}x$xee57Wh6W-mcA@?
z`@9pKmE^qX3wJH~0Oc($zB&|-FP98n3VwrE;K87tES=us&@K3U*x#<cw5s0Br8f4<
zzLVdRb>J$#3;dp~kDC_z?y338zqF?s8f+`MnwYDGz4B|v@E-u1bH!tRE0}Ha`@abq
zSO0HvfIs=Vv_9VH;j`8NCf#t!di2-b*1vxZJXZJ8Yp?h3rPtnU@Ohf?`@!=hZ3KF4
z!z6re_oX-CZ(08c=Lw0gUtD71Gst~3n|w!gzc4ev=U(LqYj8|FI^V=sH|spCX$Ld-
z9q+l>nPHaVuP$dj0N;K2bmSwtcf)9S<95^1pg2y4vqRutGx(MB+lTJ@@zMBliR)1A
z9_g>Tf9`41k{sf<EwMU;^jG<9_u+>$rericwl{l?lY4z8d9Lo;vgyET(;Mitnu|cE
z-G}d<y>>mXqi1Eg9$1Y(k#YVx`YkkA+v@vTUPtfCUeB2q=%oi}TW#$}FMJ)H?*MJ=
zgO|9BYd`$Ph2MM~{E_afezPyIM|$s?`ySq;e($@Pm?8R|R2}p!I~sk5{;IF)XFuOc
z$1o8OzmWZJ#1f+{e(7GZg|QnNm77v$YkTz2cDhWI-m1K$d2Ad!rNoefOZXF_?=<!K
zwZ@+LW!OW9UdKLI_7!WagR<7QO?^34NCU_CwvX|K??+boyz|v*Hb?88MtJ8)+LX^T
z0>5k~_gqPd6TgKVqb2j5_z%fj_d|H++Qn@Hw|uUtdkT3C-oie89h*GPH{vM`#NEp`
z^d)FdGLV?Jk94dCx1dMn0huD5JJ_r5?LC)mn=UuCFD(a-734kcFtz&DU=wCO*ceY=
zY3kzGD?k448@kVd7Q_#v%Wr?z39GkD-&RgQt$CQ_4Fi>C<iT&!hxPc$GM^RgO+9!C
z|D}(HK4YGk0Y8nBpW>bH<QV-9ooC{j#}}8$ALH1Z>`{2KOZf${lUi@B`OcNt=jav*
zcv%+s#fZ%m{Ddd_f!~GH6EhEQ3L|&=;NM~3_b__u7U0!J{@PpSf+t2f37y_`$eS+Y
z4g9I4&GH$ut)IF-{9M(X0EUXo4D^h``D6Xf>K;R$l{vZS56JVz6}!pLT^P1<^dN8{
zmM30Kt~##0{f9ic^(p4C|8tyad8n*zf26Eu%gvwO)BLTc4~^RWz@9A+?K!ls@_`2)
z`CQ{b|4VNj8dZ@#v~OPbp|9p&ITZQCu1#MX>)i9Tgt@Wp#LX{$ZLS%2iz!*(mL9d~
z(`Rum;C<!OwzHq%Vsc9D|1|ZR()Aw~KkjsNCi2RXN5EOuvBeYdb=7?4SL9oQM{<7H
z%FrXG<@HEyjr>yReKj*aQF&88@5GB<&v?8D{9JS~KjqiyVxIrL#<VQ_O}=GWByw=Z
z=5-G(*|PSb57J%|JeF?U!G11yZ`@rC?SnVc3+?)1yE)nZM!xd^^Da0)_4l5xm)#Xf
zeVI5s8(+G9P|w>P_-cbWK^_b~>+CUg?rQu63F_dQ^z@m*_p8zK26aC4z)iK_(tnlJ
zTRw5N$0uaRV_y*Wp!_}HUc2+SVsZ_<r+6&pB9qGycc^iM;OW`Rki#?aNi0Cer;ZT*
z%s`Ja5%9tKt317GIQ&ul1Mru?may;wPR41BCr6^M0&o0hy@T=zo@C)hncd_ecc)?R
z!vFBW^=gmTBlumVH;1S<%o#3yABoM8?(i@+d0;12&O(ns&o<Se)EDLgH}w7~(1w90
zV{h5`OAF(o_)7!bBY$@*{*qi3HP){>IceiB^-kaJc#ri>?lyjGozWWgeDWs{Z=yA{
zDC0_uGIgt2-)nDnRvMm1XM-32%k;+6p;RMzD=Z9HfBTB;0eypfh*2hn93sDe&DOa0
zT+dkJc|OWqeGj}VgpqJfIJf`zr||52;TiC<uma~F!4@A5zGs48PPDGrMR3+77nSaD
zqM;)hoBK&~C>XO)V`JZr1u?P6D9zzRMP&m#4$3PAy7-&_<eS7f#1n4kOuc5>zahHb
zz)Pb17k|N4=tYm(Ex%VRae2xG7i?SvHa+*bW9v<B-fxNDqhI3nnls7Z;c#()_J0O#
zJD-A={W$-G!#7%ULho8+<pz4H@JjO6)<w?bpiC3rNEQmOYBry+epQ#;$+EqoA2xN9
z{FrV_cf_-)4;pu8<;l+6ttO}V-&o|T8F$@o^|y0l!0V6UqGEvqT-2C?SYYKQNKm)l
z>w7aFdH`;Dc#z<hKFideQD*!6qmaKJ<2(67<v)pj$E0R(CcM*R>MgGMI6e&=$DgzE
zWu2P}ek#s=T4vMKfFBjs=iZ8q{BJ|!&^`jp16e+X``%};0g-=+`DUARk?3ONUNyLm
zjxX8x)U)Jv$5xa4{4FtVQ~FIxa#CePEBHry9sG0hMXB7=Gf#H5!~gNIp1W#Xa;nPU
zqgWBa{x)|JQ?ih<`j+~lmz(&5*P7X!%T?1rUpkSo7Ef8Led+!uHwE|uY%h~<Bun06
z$<0dqot5}IEAe--CU&=U5%~u3Ded;+awql3=G1;u=@4356CM!<HK~vn%Vx>=yx0wU
zyqL3rdfib&dGT@9TEr*BhusT3o}8~SCld<``LK`c!_2FAsODCD;@7`}kHRy>FD9(;
zWKppk5zXhXP<ioA=$kc!tFNT&IHz~@LU`OC;hXL_`cFH3;6^{ZHs<q8J=b?pojXJQ
z?r*FuH7L8<p#97OQ~xVuTH}?_Bs8YjXvY1AOWpxL<(ZjqN`|51ZiqQ$DGR^oh?K$i
zE%{O@-b`Mx%6v(8p<Fi2z>ROLEPIajnUhNPIEyw-<WI}4fX7OHeP1wS3_0L>0KT_N
z`$QsPd>B)h?@2wg1S?=X99&O(HiEqy*ftJ!QMg(CFy{)#caayRc|ml}vIVg@!r?4<
z!Mhvl@y!^{O|&%W@7K8!yj!jFnOW!d@}jc_iq4-vPal8VT>}`WPb69Ub)+l9$CJv*
zz<nXDN~g1aopLV*?O2t0Azx*_okc%90$nO5H^@yd9wVBVgiOVb>#e-Y^iF}_R5qBC
z?il<Z_<P??%#gY0bQoNTpH=79Xl|rm<USml(fW|ZmmbUGO6Gg^uJj)E!i!ETn?v`Q
z_2D@4yGZlZs%Pwd|9f(d;E&vWU=(dnq92LOyvls2yRzQoLaX?{cFo+%wV#|@N<W?(
zV`h&iH8&b?B*gEvyV@U@um2TjH%UDPy`j>S9Zb(MEf2HDvtRyZ_)L`vKdSh%UFh|O
z@6)_9?=eqwner7${5WnsK6m5g=Gj~jWAy2(&Jbe+ykx6R@#Bl8*|;JP9$D%VPe7)z
z)-!Z30(@!fpl(Pxf?9G@u)8f?_`dHx|9gkIU>}IZrAGK;BXwy{!T>zxG+ZAB7Y6uN
z@-Yt%$tJuHz6EdF>hZQ|UaS!B#nU8fUxIc6ACY9O`M^+~zmMF!!CoI=Kd#B&>vJ)=
zva^RnkGH<}3x~{oJ2q90H-8A7XnZlj{KS&UhsaMgDF@z@=x4TYNw{+-&q|;X#l8It
z_i6GkNp9mqcp@|nJi=GdWXcyRCv>bl^H2jZW!NGu=B)50GtJ~S@{K#|)ST@on6m|}
zp$r=rw$z)mY5trkx1?fJw1>p%LDVPt-nSIHXOeU``oTVu4rom47J`xRR_#t<-li4J
z+i~<7PcK5Af`_(F>JzSF|K+aySZGGyM-p?Y<bUz?+dk^jJi`<42YGWG*ZKzhCumRe
zCq5_pUTc^(=BZ#VZOj+ru=7a2e<9fLeKR_z3r#5oNp|{FezMhP@NF>9pWuv_D9=W&
z7};&shT~Pdb7y*MyUX!u$D)6o`W5@mr8~Wi?xwW@pC509r}t`2OS+Z|4;4>t<r~hD
zI=S%{+QzSI{psSN%kc-F;-!N$kVVdkCsD_q_OJLl*!S|acI})o-0_Z+-g-CB&ZL_Z
z^S}gtk6q-KHrVVF8P8#VJh9|orxI1<W&tjVDyR3J<t9}DFJ5)%6E8;bozH<bw12Ul
ztMc(hBib{$YTzyA-{D?-*R_6g_C*2*#rzif%wM`4JqEp3yi~f1)-dn7bfEq)<8aAe
zD7eXP6MPjzs(ugQ2RxsQ@3sCMa(_`?^OYfohj_ze_D%}+!oO+o74a9VxA}P1C%lC(
z9RFx&hVU&ye=7^tcUw8XtkK82&Dd3vMN6uQVFB-A^fyL%@fPJXRIFIA#&8fgs{ftG
z^R>spt8Dcto$FcN%^5-L^QW5P34A_gZBrbbr`|L>y^?*}cZQwAdT)8^@T&I5S&P`Z
z_X_sXppURdv2`0T9tH0XL1&_`83!WWF>opLxA-6FU$6&lBr&s^3v>5<1F}s!$lEGi
zh_wc*E4~iyPrl$}XWvCl-TP=OyWZLWi@N@XHT$!Y<34j6>u#Dip1%%#M9F=lxzN30
z+N7_h*=M7%8DC#bF}8pXbZ)Ecl*v9FNN31=-ReDqczgx45y+Yl{OML`&eo^);1!L$
z4`3?acW|#9|50Eu+<tXK+_il-eLgxAa(1D7QzH+C$j51}cjVJMC||nmKXH47{l9>E
ztxRE0f^cTD))d{j)~~30`4xpju{3#R@!_kC#wDE8e8emqh-ruC$p`qbXn^N}zhcyE
z`EjS07thMyAL^Fgmko!zk5T6v$PILTkAFoXsVTGI4e+ySU0K6w{Q-MkSO<G{Hvd-)
zLl;X=Z|6)f>tG$i(o{j5ncBAH{TL996MP+v<xrmk8$tWU2KcXUe#yPA16-?^qrsfO
z{@x}Bn5nE{Y*p^Z{#AGej%^#<BU2qondr$*mCXcY@Eg5!1-T3T|GmL;aP0-2tL(Pm
z8TDyihVTl;kj9=beAZ3*Gr?uYZ;8YG;_*)PQ+i+W$k1=of8<-`U{CU`ZENUS$ktfq
zGK*98-7sq*A>xPayHjf+TZ6R_+ZVy=@TtDYpCH^)O!4sTUH(Vg>v;9d?b-U?fUi@(
zg;NXbI^4gE|K>RBsU(9QI?wQ1;f3Z|evmW4HcPJcIX-MvZV0Ym>jbh}^*FrOxaaxT
zEB$NSzhd8{E?jb=GpIw~hVc1G_Un7CRq6XHxCZb^iqG<{^&I&;;N{?|ayl2UOKtv7
zA2#=0Et#!#siAWLPHDaNZoiEx|2l<h&>yue*{4_-^~dtU-{!ZCE$C0dS{e8;xK=i7
zpF;m}=K1RXf{(A*&Dr-C!eo+#iQ2!kpxpotvD|};Hiy%<|1nrJ{_;=2;tVu*8Xcm)
zIR9}9e>G2<i)Y~Rg4JOkhRQRp|AJT4Jyl+1Px@uWH^7f=Isbnl&+>Sb7ZV}*zAwp{
zXAg%`kImtF>FN9-m@gZ%M9hj{^^Kq%aQYW~-^2f)+^Kn;V(0aHygL)Vw?0n}2<Ap-
z+9|K09oHG)h4ndvN3HYw5b(X#{{MUYt6-4$?a*&-rHwQ7g}e(b@AvWK1Abqg;%aFC
zesBB6cmuwoc;<j^hT`cT=VLo|of%Kn#=Gf%p}tjoe{%Kq?j*MG$p|{v*oD2!;i6V@
z1e{#G!{(bwvNlgV-|Z*ppUU!noXYBbJ2dU^(>IyOvb}n*cV>QLT<@d9z1!yu`z}LF
zSy1mX^pZr;w`!yCz1r^L7qt7Q-Y*+4D=!@F)iHnU)%Ws!PTz0m*NBZaVs2x61ZVb)
zXmN6%!cX^%bdAa1*mNOlPFE8L5yKX0kY9?Jj}Z%;+%xDQ|A^n?S<0CkoZM^pb47zj
z|B1&4UF`G<2AreR^9JiuCS1AK_R)uHFb^hSUXW}LU>A9c^-BDWW-;dtVFNUn$clB*
zj;X54+<nUc@J2Rx@Qw;5etmz=JO*v+s_$McHM^flPEQHGvUQiyMo{L0+uG**ke~9<
zb})AK7Npu8^9T7Ov*1@FWkYisy?mK-LKYW-K8+v__nGKaTW4WCjnos=AJmt|4^&tN
ze$!&VPn`b!4y`v9^dp2lrTs9J-|!6QcWVqm{e^X&_FclHc6;A#eTMipefLMpv!<ne
z4USI}&-nB9KZW1sBKWaJ_QGEZ!<Y}l01kf+{IaLR?*;W`I2abf<FxO{$)xX!VHm((
z*FW~X#;)%(1u)&oec|_i4t|~n-^BkR@D-fs%byEh3m?AwOW_-e!i)L-|26nJ|7XD0
z!im28x$w2{;k&;WzVID<Ie!wq@_~rAicg9+M)7Sp@XA1Tg_7n4z2|&b``++ATKGQU
zzmJ~bJ$<m>Up)MK<oj0J{-2cZKj3UjudfDsT6;ilO*pw-hIMK)CzUsmgPYkGxeuSn
ztJvD&ms!rP3T2!ea_V4)y)=qVDw#Z~JCY&K_1~F|mBh2}$B)4r)wslsZ60eF<4&tv
zgfjUDx`<u982Q`G-ZRzHRvua3cI5sS+sc24Z`F%eRR2TBI-~v*OWy(imF(lJp4)Zi
zf!cJ@Bh`l5Qk%tXwLbNgJ!?-iy%_rBqldCL{`;ZL=kGt%hEJG%%r7>V?|Mi%lErJP
z)K0p@%EEBEa?Y3PZN9-Fa@Lkfo+|VCqB6z&%gzmPGsM*7n$Q~@>DIp7M(5iQJ7xQA
z020XehP@eVKbP@IKR0}<xwr-2+!jO3Uiz<6UBE{2%)-W>SNL;nfKzHSS<p_P$Lal_
zYE!mBFa{I-|F3QJ;pFP4txoCXa}KlqRMMk8Rc~^J;8FbJ$M9*%UnCgGKU9Stmd)qi
zh=H$)i;jV>f{}11jnCYDpBHDl<NnQ?q^pHl1H40e8}S`U_Qu}Hy+f>6n)?UQ?+p5G
zf_n%3FIbn%E>esseh<Fao<4)Fr!tgXbZi<v8uD)+UD`y>#vfWdcbEs~M1J;g?}B+z
zE|xzvFR%MJ8sL*~qV00|jQ%`)3g*^>udlOT?9KCEQlIE1=##~9Vo5aSKL^JL>zMA-
z$zN2*DO?HifmbkZ-@%8jvu%Vc_<A=4=iA^<-ynbb<}l}m;ZHxpoF-YXLdW*~>BOPq
zr<9Mj(4Ve(+&+pkWQ*px5LeaiO{}A;A8K2Bkqz^8ralbD!Jnc1G<_`WgYZlJ$k10W
z-}?_Axt#HgWjwMqf@h+4wJSbScvgt|H*1*wY0V*kk?=$PYSH@cFza}BJr|#g;8WPY
zR@O4rzf*nNHB8@jS=tEtCK+iQ#zR|;7n__DC4MQ|6mMj&aex~KSgR@IcOhaa0~{-S
zzS-x40c{;)?7_X@QHcK`{Oe)b-ATKm=g{X$214x7Eo}EE{|~hrz&{MHa%hX#RL$RR
zv-SK`JL|+T<Y17uo;}gKEkAIZa*5@WQ+=!@M4_oZ{Pxa#Z{8c7rnuvTQZ1L@$7h`*
zO+W27<onb&Dla?`Ukc7zlaD;X^Wc9_UhyZvH=0*{_ow)g_P+|Y!PzZ?<AR3M$SIS#
z!j7vIy`V$mNla$1DC?D@LtfpC&5j9~9rVM2pBZdB=W=BFX!t9A_4@DW45#|<{r^*a
z6kiSC9>7+95&IqO>s*O1(6@Be6br8e>skqDDzURM4ldRSuPUSyAV2tD8}u_MuQL~j
zi>UGF&BN(C&c}bT)1>AyA8*k9gXk+2$a3v94Emyd;z1vRy}}#mN3x(FQE*cIaG6`h
z{I=4sD0q{Y>eWBp$IGC9lppM0P)~8+g1(3!c>Mo+mUsIywFg*i4Y4mE25dZd=?so=
zPr9kv!Y8?em_zo>W<J}jn9BM!%bngYE)S)e*ni%EzmK!gYor%yp0#&U_Nf_bQrpp2
zqGhI~#3=5*Vukz%I-B7xbloO1X(4CV<YEiz*GIG`;kl+<6FQ*Q_q1PH_^P;Kog2_b
zuEGp!$KZ%PSG(@Ewt=XLtgnNPGw{d^FtYu}$EG@kKl)bw#xQkjtwerey>klcRUK<s
zC*6qeGIrLa^-ZQ?p_k{Ecoy0l%eQ0eSnr};aDsFDsyVArd+`HV|D#6&zN>eh{QuD-
zgWtiEJBR^KvR`cn^SN`(ySu}mySzIJZY4h$ip&2OCgyv`wXC0^x3KrU<r027t|K;^
z*l#_<FWMq}F63XtFukBWCiz{;e^Jg{hEs=c8p*yhdv;2Vq2F4=JGzuyAIwb%{Lx-H
z^yxislE25o%Fi9rJ_fy+wPC@m)!%EUHT{MJ=Q&I>C)>$s5k;SBC&z^|#<V<$e`nRh
zm&k9jDEThM*pQ2m`lnwaeScz2l6tJ(5AJGSxbF?-Mr~vx%%k7Geq!FGI}Gksq5hMr
z7j%P1(AK-rr#SO%SJ>t|P`vea@{k(kf<_l}N1gJ!Rlrjt?4cw^?+;1(XVRCXD$Iiq
z$;YNPMf(Z*>t1A(gQC~ggD)kCUbqgwpXAY3!(ZLh;qSAG!MijzjZte8!;SB7jx|ok
zrueAh@#&25WD{{*TTF`cxN?p72CI{yRMk3SEAS_AhEjLM-Ncke7)Kkihl+_IPtd(u
za|CYtSZ_NFf80+_AOk-L>L+$6x1aTKjcFg>?q^*(`H$Chuc6;D+KJu0d?2=fdw)-u
z`rXeSn(f#|%g1#+q&bq!lPF<t`C;-VT&ey~sCn(u6P<_qtsijFdi5QA%)CKNKK=jb
zGwLVjQ~V)ctLK`B!}PJAehY3pfzdY~@yaCL$k+ChW9Tc?VdvOiD;8dATpCldfL1k*
z?-cwOEcMLl7~n`?BiXuq8)=8m<%6$&j5dOLljLm(U=(~W9{hX1jLwZw*%!$lBYoOL
z%?p3cHNRH$<DEgO^XF8Cd@%*|Gt%ai5gfDi9{pf{451&jH%K?kqotb)=mxq<BijS|
z0go1yfJ>sIDD)=$VvnMwoeR*z1=lonfvYuILpS8Fu;Ye~6~iSuVZWBmWfg*_dS@d_
z1}%V2-pv^h9-Vy0mpg^<_#I;vZN38iB<NET`pK{tMDr)VHTz_8NqCM6KkZ+}`W9vT
zfb%}qKWmv=^(jHjh48X(nG=73`Ya9+&)Ww+DmEKlTk~G<NO5NSz#Gv(Fy<fm_q({R
z1Bbp!d_W)g!`WgzdpVoh);~b~j9dPkLfo<Az*c^d{v2lB1@A(9c#`s>Z^5h>w}el^
z1Nmz{$+Z&QR=<<0J^3fSd=hwetk08s$`$0vMCE%4*GMjkue<2FyO4R!oGrWqdDjmP
z80NABS!a-SmB_h7Dd&4|&e$^KTq`{MMdr5^*;F0ntSMwz44W~-qKer%)9Oc!%)=L{
zKZDMeMJ}n0EHaDuj+z8(jN(0uZZR7<hp?uL*kkfQwT!2)8<9u)rh*vhq;zolr>pFO
zK<)=}C=*$>SM>=F2_LtT>@Bk}MPJmns$VcweQIab&W%&gR99j9Y7?7#Qt(Xk7Tjw-
z6bD)OUwtm@ukAxYTtqN8x=Oxj%{|bYq?2e~#-m3#;Os1}6WOOZVezVg3^vMUe&4;0
zd|Bv1nFrWA%ddg>*BCs$D_pT63M@^uYYF>#2hW2Jbm2<&W9q%9Gj}cVVCU&{vO#2{
zNUxEtE4!l+TCwu|>-cPt?}447cOl+6;HiDT$a~*`eHN9kM*h9AqkFYyaRELY&5eb@
z)~1~5P#@HW<|5xbT>hbOPrwhv3uGHeHnG>to=uZj-WZRT5LaLBbdzIlePSYd&^p-x
zq4kL|@GkLFU*@ZgO4h){w?w1b%O^P`-eu3wfbR3~uxD8N*II8P97?@N9LR7q)=Ikx
zV%HkcZ$7ci+G-nuHN_6*!?vsSfB1hD{SIXPW@K!T*NE|286Vhd!8-MD?FBICqdxKF
zAeUAenA&%~%n{w&wuiwn*)GZhVf`1=uZ|~J>-!{gcLDrw3w7?V2z7_qV_O2u)_v(J
z_%3VKz{(^VQb}Nk+_m#;b;}!?bDR0b;ko!%(y_ez3BgwUt%3OA4(yxC&#jxQeUnM_
z0L43jpYg7{IU9S9{HUx)Qa+Y$NOfGMTv_ac^8I_Qc3sx9djj}qT{gc~I1=W(N%V)C
zBKGW5@vHzoN0*k6>#)?Gt8L{Mb1ePO;tMiY_~NpUC;{yNJ1Yw;y#C$G8Gq*}C-=)T
z^TcL&m~eU`u-FSuXQ2BnJQGX;`1A$v$$0QVe%BnRHmMIT_3%e$d$qNm=u|&cm+ElA
zt7L)f7fu%9sM<dbPr*x<dObXy+>;+|PQF7p$}_dGi8h9-S9PgfjYVw-W72(scfq&~
z{Tu8DIID4pCmML8$!wge^GXVFI0O$rxw;8^pc(!&A9$0)ZLNpPq6uKM=$s{H<2RTu
zE2D-Pb1+{z@1zi)krk)mv-Fu_oDTd?o=-I7>7s5R&y1C4$e9gRmicyOX57MF?6TSf
zc8T!xT?>eDPrf|&?N7aZ-TBE)a|`X^L@7A(kHh209iJt>7n)fMT!jMxJ`B=}j}O|@
zB%Q90J%#}e1hgZ%Nl;Jm9H@^5StUEyzLUK2`+vH8@_eqczXkKh-)}Z59we}P#S04M
zi{wf`|B@{RzvF}J;B(+(N2W2pIb!PYA3o9Q<Gz(+;Ql^%ZW5en<N0#z$<xN`diWoF
zr?UItQ^^za<5BWB454erR_H%y4|C?1Y?};gMvTF>#W?i6`u1zakmOnnC;4LnzMypx
zD?ib1pXENljlkDnlBL+F){oxvUh<P&_}9ox+DaTM(VoIL<nKrdFLsg(fjKwmHoz4A
zU!JPmU2(VYqP>s*rN9OsMXc1+lcVim6y4_u^vMn%UfA=y+u)1+m6T<Ex073=2|N=I
zZPNN#+N4z0m^BZ92fLfT+HCo!@C@CvXDoEA`+j1!1AI|EYTp&_qU|*DMm#f7h3#%a
zsafcrhOwNo%{`pB<9L4CTfjoNA-K*2rW)H5Z{@cMUIFY1ZEOSlzRf$2$DWo4P&{_G
zXJ2#fr+77dL%tpA-y<Alj)-sd{9NjD()Z~&_%#C@9Z5eD7Xr^k>?uJOv@bWk33N;D
zdyD98cg*L><4c*FKJb)t)e}GS=jUg@nDMBM09N4Z?v3E9@K5F4F=m^}2)|q3o*!>K
zn|?6g%8#HqPn>Jz^lqIQ6wp{O#$q{}B~P#9ws_-U-b$b61+au?u1H2?SAYBVb>p0S
zqr`crzssR>i&OMDtlXZ!tq-1VaR7V~k0ytwjrr<>SH?V^vRg73+}Yhsc>_-ouaRw%
z1Sc|lBfCWFW~yIp)AyDGZITJ&YgGT!#Ot|~$--lIuur}~uNd4bCLSbs1TeI+!Q)F7
z{()=|+$^2EnV&rm9XIjj{CN6sS$*QI`SFZ+<sN^GdyJ)_Ul7|W{uuW7g&m8=W%Y?@
z$m$aT-3-EkacNJ9+O&NVKKVE>*#4pX?03-qEzGN6(M0`&^(I59wR{VIvh4{@8h<Oe
za0O?J1Y;C_+$-96#_#hpCMUirI0tq0kqg4OUO#1PZN$DD53KLtUNX(%`u_lL66oR<
zr+ob^u-S}fyARHTXwueMptp%0-@)^MhX?r<172on(5Jb8*U8U#1UpUm?B!kz*Wi4&
z{sr-v#Lm*xtLR!?*yG@T%in-AEt5F|4u4mx_Edv!lgZhi_?hyjjbE{rXF>a-CC2i^
za%lUGhp~YrH>w)rI%`NdOJbaTTxmidX(i`$B3z0+J-J8gm81UZMCaZytTXxh^U@Q@
zFZ(b&4%;AtPo{Z+w>K}~iCKJ(YD@E#pq#@zwl4|wCVJ4Ln^f<_9_`l^&(OZ1#~F|C
zL3<>V7kfFJlGB|y`y}gH`9?mBWYmc-U((pS@AIYIALVSSeV@Oo`yuv4B+9X^xXRa1
zioa8K&jojX=qa7yoMh}DI*YYXQ@X-o4<7H&g^tgCmHmVlF0Oh?XRLn+o%UMrQFuK$
z8BTTK|Iqo;_J1OrYJs)_ScZ8nxP^F@tfH^TjwJANh{a3%q_Ni_U$}VT9r&1+UugB?
zmCO_E0}uGU^yg*p%;l7An%sEr>*z{?@#B}A==>scA-G82_$cs@oD$F7fsQ{of6#E?
zKX*r+&ie}OX!(0}9$#=4pCR6Cvh$AAzk!dc*ZEtsQ8=r43g)eFzJj^ZytLDAjX`^O
zl^av`!9TDcdJ6K?(lK+{1aAmv&!oer(Q!;ZL+00E?$l0(7|MWe^zprLMEUIlym8=<
zdX|9i!~g54d(jrZzn0G6D*<oQJMDkd7-w@oIWsBsApe8<rE4e#efLaw=qRW6M*Ba~
zvxXSUEV!_bya@M@Bews+tGaLDU7&wG!hIlr7v5|(D$ZQ^D%|}9G$DM|_=SVQQ{kTC
zYy<n>%GM(K-iX{y`ud>ONfO}GL)2}@1V4hm)CBK?`3!9Sf-*fp8T$-BlYAvbzNXzl
ze1`mJ!l6H_Urn4D{{K<G0{k9MZ!y5n>MS$KC6A09;zMWxk2v2pitpeK^g{U$s)$*!
zeuPU4{0JAK<7ggE_ap2MgD*q<2ori-<dXadPrT2w1Ml1!LZ8GwLRTA320ww0+*-x{
zEoi(ET>ZPH=t$7&pe^kAu6En~1k8D%E!Kf8c627^-T1kZ13OH1;qFE70l(hXlVx?q
zI&&b4lJE{YKGu<<&`bccVjT$GbBHYSeGR({&mRi>LZK*pSM^4*D;SgfL?-IlDW86y
z86T`=2Xm(@xi7KpOIX(lvEEe1c^T{(g5TP{VV54hskHmZ7Ueu2A^&ub;GlDynFE_=
z;i-#(?-ue#AkW0-667t=7(1>_%-PI-JA+<7fq7JZ+B7<V_4%A*a)+-knW6Tp#yfMu
z<INo6GHd0(E(f+&r~FA%PP8<6L~_v>c)j$gKGrDcTdIlvNuSWXPKGxh<~cDC=N@KV
zLv<VgX6{9jA*=(krX_#V4{A<y%BDU16Q@`8s$c3)|8mJZ))T>>!`FvrEGJGUeA}r!
zEb;+-i*Mzd+6CX~Q~p!huU=3!rvVwtp1xj{$<l`pTyFE1d-YLHKAI+D)~}_`X1`AO
zVQrRoF6Cp!jL!0X_E-9EQt$D<@BavVmooa+(6{0}jJ7=Q@wbgu`*yCBqtnlkBlxHN
zybOu3u{m;B3+M&E(POb27&o@~?mOWZ$cVUn90}+xL#`aY&2g^$$@I0XK~hI(JblUK
zcbm&AQw_urbd;m7Xr8I>2ry~C!sJ9ln%Ca~rvy0`wp|PC{TvInZ$-Ij668{_cAL#j
zGoeQEGv?=6&^vvb01sZI@4_kRlg0Eh98C|>kZ;Qc{<;wU?31hKV@GHW<0||oSK~jq
zrW@S1zCin(pC6<Ge=qj&$_iq7ES_LjRAe5U>LLp>oX;dV7=vGlW`AX6i?@#SeeQwF
z9`$!V_rcnTY&}~)x@e9)MuzV!4~Re)7eG7z!?Dp9PyaoAePU2%WN1rui$~}jCEW+>
zQ3>YyXPm8V<*V{8s6OxopS-n!<Wu)@(U)=-PY6HX2<zvQKRVzA`20NjzsRS5<z8al
zxEq{!^|kQh*=J3v1Q>k%%U?bu+SV_8-!q%`qkB|-F7$_WqTLhC#6yPHM@k~kE7qbd
z11&-S&q1e++-I9jeES^phi=xL*khflylwwnc*@rEZ`(1?y~d>8j+}qp+Z7#iyVxU;
zM$ad&)(hEBVSn+iZx^|fkS7<AODkx<`N*<4s=vXM9)usYRNgjy4sBqsRrIV!XG;Y7
zG5EGTJXAks-nL4PDThTX_}+JsrymdE72lj(eO0&RY1DW4rmI;)4yEqA?8GFsp}jZ%
z>!QFfS<&;cg7!A!e^DR4G=n~%-)Mb9V-T#e%$syR+rDqZczk*UK3L678TJP8On(24
zf>%d1PvE9<Tv>j`+-%3sGZMQX%iO$L7E0|yK9w>*n+xV=4Kb?9-PgtZe63)9)-pf)
z{Q24C&(D13XWv@Rd|`fUz0Z^PAJ{kC=FWwmY<(AV<jv2Tx!e8uG0acjvtBv&38&iN
zX%4?&er{oY=2O4y8O_ftw_Pyj@LH`4dS_l#0kfn(M=tijnxZ)p@6h~oFh7m(v{)vb
zn!q<lv6&Jx{%Mg@p1xf<q}W6MxI^9s!Q?Z_yHzed5<hq}oI*atRZkh;_21<@zBwFO
zue@T_CqDRMJ3Q~*<jD|z?+1qB$A$Ra3VzGK*ADy)@QZ=pRphr^UJ`y@`=XnG*~32k
zs=4n6eqF%tGsGWcefZ70ZJ&kTT;TU~<h<)nRFL<>hu=Ekw-3KQ;I{_+o=zUQ0Dh<N
zyTpfIbWQ-f7twtJ*g4SCAA?=C&7__!D4&F;gYwk{xm*P20Pm#x3+DoQXyu!u&C-jm
z#!p?qUw^ZGoZx;NzPoUeb%BxCpV$fk{5cD`ciRZ?1bPYP;;ZyUewqF<<ViTZe#?cs
z9`eQ&so8WPH09&RLj`>%b3QaRzGoLYNfMgUUK-(&;to{)p9;SFT)}s(>=D*?+x+ij
z4}`<%J!$&6mY9vbqD|gE=D+_}{tNF#H_CB)t^Z$mkmdgu`9Fkq*Gk7aMZ4n5N0*ip
zFB9pJPIatpBzhOP0&dCQyBItUV2m!bb>l-<SvUu@jqS9@G)L?jr^+|6exzrPzH`I&
zx#tJ3==pcnMOrB%+l=++t;g`yxyb)7peJtQ`Sua!+dEhvn}|=Z4;)Y&6Fhv8)`a0B
zi=MtwJkrz${VAUF&EzNu=KJW<1<2J?@d3z<t<v9<^iA?ox`z0KbS>#S-rC9pyS4)V
z@3do~>>nLp)El?PB-x2P+Zy<EgK=tndY2$>#`eM2vE`>$8-kr+t#*=>Jq?D5f;NE3
znc7euJ1fg+%hyi^^CFxHUX+tQzcn~d#`dqk|CEnJz!gshA8RXTP0irXi45}k*N7+d
zWOFHT10%qrGVmy5@hC?w6ZxHvuNu|8TDFYj0kWET+>@xbzT&NezGB&E_+vQ-q&In?
zsWtdwe!tY5On?_=7wdIVQ)fN}-oysi>$V1d!KpldC`ueHI+5_o!bd(;=D3+>50{d2
zg)uJKG`OC*+oU5YCxV^Bw|(*@VcQdj(!>7mPCZ+L?@#j)q0bhN6D5P?brynRzm%Wq
zuP8r}@^8}5UBYW{UUO;O60OJVv26&x_;H127S{M3T=GML$6N0LE>n0PuWZg)+S=2U
zvweMqv!T(0ZF%rT_T|T+3ALem<@a5#+)|=3Q)+#w8Qx|67*gT*;il?Tlraj=b$$wG
zrkzx5g4Pzo*bMh!FSKJf^fjZ4lg~=HCtWv*9&_G#=JqtcudbP_0rKA+y<o;N#TCeY
z={Ko=MvowWfjv{$r5!^Imd3iDx|35)t={$Hhj`eDu1^v>63B=7Z!DYBG2PtQmE^oA
z?CmH%tlQ2pElnlng*Nh!hLE}27gW#br%$SDGkIB~ly9KCk$tZ6^k*NuZq0eloJQU)
zE2!)5`2Imt`h1ruUC~Inwd8wMJ?+$;M&|4%SA%Rf@k;T4N1>VJz+$sAOR<<+Z7e3S
zkb0lseLv%9<G=c|>tw#R9QX~_r_YdASz{C|EDcS^w**YoMw+w#RF8C8<>D!(&EGF|
zP6qn9{T3gN=tJMy`A6p~*7dSBUhpd4hPWCV;u?6}0{nIF=6pY52P5ROk1X4p27aNE
z(2at1!!2gzXMlmuq04Z64m+gssnALnIa&F`(8{R%yz4llj(p<*p9<g<h4*47G9KhD
z_zq4CuDKM_o5{1@S7z5(EIlK)Yc)REAwOpP=r1dD2HtQm{5zgYR#pBYv@(e<Te&Z^
zax=N6iu;n~%y&b5<g%WvwJNjA^C_%aWH#Eqy~4TO;D43gCGpoXc8$4%vyzMJN>I;F
zC|CSE$#co;;^z*}f1rASfqhrtLsX1cae0kB@CAN`_xi6G2H`=Pb4!Ernrpq2on+@6
zJzM<G@VxZ*<ZPr}@kZHomd6i+N4BoXTD$jbK+k^id@1sqD8>st-TF@K{tWRYaLe*#
z_(KSoCB(x<nkV1`e}Imyp7}m_%zpHXy;V9V$<sHpfvv@vnE`F<8nXIl#M)QT^Pv72
zM*o!UR;YhQ(LddYr+<#5Eq5XIMwx7^eS<cZr@trXwioE1?loSy>{`ux3Fkwc(m$)v
z-{rrlG@kys{kG~k8nb5;P3XA-Ke@(}Mu*pU8o<Z&cyiP+?ht$+;;%)>cP2f4Gy0``
z>eKlS{cyLQ$K3i<l>dnltXTplaw}Ol)!{p~aO$f)4NmX&*HHc(_{4xuHh|CAQ}B6*
z51;b}_4A?d;Y?Z!M;G|OYli6OVc=5*d>RVi6Tn9O|8M-;d+ER6BiJO-k^dBI{*!O+
z7{mG_x|@|1z(}wXoc8iAsDIT7&PE%B9uzT(@3gqr2ObOm0-e1PILS8>_(f#DijQf|
z_V!J&^SHhGRGmMd{-Ce+Y$n=%4L?R2eR~hI61+nO4UR*)zSf(9Ic9x+tLC{WF(TDU
z|N4&SJ6DZEW-y+N&JOa%gRWAadYJa;`v%cXao<~gzm8`MOu+v3d^;M$Z1SHmhOK*>
zMlc4$xl1PXPX*)nT){XtljlcmZu7_Se#RlX*oWSgMJ|1o|9bzJ|6cqncrSkaPX60I
z!b8MA3h7h+d#y3p_%DaJWb_d61w+h-_8`T?XGVv+qc`Gz1|O6I(jDE@y)5a)a5=<t
zExXOG<;0f}!{rdeRf$Y+reCc!tU9Lz*}$5X<7$nrqNfl2kaIIS@l)oSdDqW>=V|Tj
zu)6YwKv(YPy|24%XhL_>`@VC+-46ZlJEy5z@AORn6W~tZ7w;fO>@Ye{u)Yzj!z)Lc
z#wr~|V|Dm;Svh;y?0CaH^f}%>9-RPN`fTit_9*%Vbo}?&5ABm#zeE1WAA}9RA;!A<
zbmm8VmH%7SUMyXfQk&<`JTa-Ae9$iSw2x&yl{%zr0D~6RyzIHEA<kVctm|CrQa!QE
zNbDQ@G=Bd_Q&(ZRvf?&fugy?Vxs&)ghx9Eo!uIW0jq0;~wqsz;srQgyHU>S#oJ&%_
z3%&)uFK{oL1satvcs*-vz5A-XXZUuX2kyY{6s+5)Gd|)Q3j6%4puPZ3QLoRxuzfiN
z&)vo45?;BV6qS3XxLl^(jxAGE?&;!k(UG>?cPW=8zer&pzfD;W{-aXJ;2|*Y3Em|~
zroLSCZp+}iQK<)b=dCpjjYGUcc8t#-6o-f{RCA1VC(ix$_M)K2OU`QT4SBsGuz&81
z5Z}U@dICE_F+S8$Cp?$lB)cd>?rB>d-7r|U3)(4;pW6Wr9-Ap0w}SICPsQj3>q36)
z+lJF(-#$zG#HOep8NVOMkHNT|X*a+Vv{tEHgU}OkksJ2@%8QG%eLLN@-q2T#4KMo|
zpND5(PpVPu;uM{ANqgvymIp`%xY#t7zVGFHCBY+j4?oa*@c{dt=W0LW+tsYKOOM(R
z<a2$Txk+3I{~j*BsETjVOA=Kkr?uH&47>FW^)6>_h#lDw#J<Y@i?Xh7qL*76OJ!P#
zpJ=%GM5p%H1iGDY#m<M%bIBP{vjg6wIn?~YUu#+OuE`+F6oYHeAc3D-KAb5{v9~4H
zR}q<!lwAdl>0IkR@|Y@jz=x@O9kC}R#GYu)sJQOvkh;H*|JSQmyspAA<SZ#o^;MM4
z_&fQ2q3M9<^vzWLyB@i&pnk3M3a<kg1aY<=F0)63cw6gt$Hx=I*lvMm1h}Yq%KA9&
zh{pj>lN@bf*TFiq<klOki3a#$h~0_8(}g3g;QE>+_@2o<-0^jXIET;*17B?&HBcW0
zCfZ9>cNXx6C$qMeYM67?NlV9^>jpn3_cXFg>tFD^uizWInf7&`efX@@L;Uw*BPx29
za4%V`cRO~Tm3mNqG}=v;4b+EdM|<4I(~eu#WObkfwvv2*A@oD5JNV}SE+h8C)=!(Z
zADk_hR6De%=bx}`a&`sx^SD=Ay1z@$sZX%@TVR1M&?DTg0Pj}e59<&Q2Df$9bKQ$J
zpv5709>Bbq{u|NR3hBNuHuvMwqr#V@zQsIie0T7FBmW!F^|IJU>fg;;2Vy->_KaXX
z2<Ob`p>Spn<}((p4HWsE25Iq3ePk^1I}M({ZSkSd@3eO4I<U>xik@Q2p?leNV0fz5
zfu9_SA8}1Bu}<aP@XI}Q;KA{QCii||H;pz{f1}y1mj~;_A$&skST-!VsTp0A*lXW!
zB>zQ#mr3doUP@084CH?i|I(WNFRNah+7+Jg5f}f0)_~nM?2CI>4OAg#`dQ~)W+E#x
z=z>~rZ3bt)jE|*DJ`L7`$FaV$F<d)}_2E?erREQtk)Pwq)1W@MlrQd&o}F>ti*#q!
zcUq1wlzcv=KWkkvw_?HI9x3RoyAr+A_M5Y<Ut;deh|e!VN3U^jGWWQT5~C`+?Y@$m
zcCa?Q6Ft6(+>(MrCH7s%7&C6;{UtXwE@+(-I#D@?SiRb;4}(U=kDr40{_qM1*w~nH
z#y_8VxCL9v`kH`2b_;o^z#HM0%lhtdbPSjAtDa%@Kb($BMdSWcxTJmuKX2cgXA>V^
zHM08zv=`v0*2nh2d&EEcnQtG*dS-!7!ZRB;;>Q{!*OsOx;J<(Ha7jFguQCB`Ch=2d
zE;e<^PYsC~-w^mIljv2#Pjt@N#2{?g2CXZ`L40a5|0loPoD&Ya%g;{X6WkETUn%$m
zeb+S!Pndf5ssZQLrufZWPA_qEb;<SQSqM+N!kOgxWOV+y_(mGOv8u+@>OFg6hz*mk
zb5hOC>?^$(`I~&n$!+4D<~#Y4!M8(9+OZP$MmW9bv9-q;Q>#xKlC`Qwa@Rm7&Wfh^
z`?e7OFxJ#NZB23Lqs~!(&bhpPZ+Pkzf`K#sl#fV#sknf?@H|<8Z=XGLmS-l<PL--J
zFLM?aKC3VC-uCBZzdy&l{;>96`*C7_clbO}^(FB&u?AP~e1jMW&TLZM8Tu^V+83GH
za~*bv$|Nac$3|V61JRyhF&-g*Z$KZ}N$`KZkBviS<J<D;7~j)y89EPpdGyZeD#f};
zfi1H69lnkRf0B>2Fh(cFIi`hld3@EWb%~|KMYd^fzzxxXWM&i?7s5WvxRvLBcgv|5
zRy!wWn8Osb#oh<&FRnVZ9<$W|Z`EB0N3ZUQJ-r2WTlg|3!_CK=hx6M6^Tg47-8X6H
zyX<{+o_BgRf9b>d*@9IX9Wl_^RM+7#rdD<R6Xjn5p3e6uul>!xr960rjx|``>SWM{
z##cdnws3SQ-&y>7J-<zO3yc<ZfUAwv6X0*_LGs!c;qv?R9pkX&ng2%m8Q@no=a(<Q
zHH|C%yL{cp^&R~U@Lg+gs^^IRJgf8J3VeUJ={fy!xpq8Hd-S8@c{8}bC@3$PqH#FC
z%ReFAQgeQox>m8KX6IeHCido=Jky?|1Tc`lTHlO(FM0~s0Iq^hfTw!?+rKg!g~tup
zpJ{B`3_M^X&lMjo`JO>OxV+ci?7HjFK_&^O#`j#wyz|`38QV{PeX6)E{SU?=xM(bn
z506Ibyq9_ev!H*Pcg^`&mDy$2&}&A$hkbJOw7WNN`DJ=<S$*;%d`HzL*L9QUSLkXp
zy~)cwzk<ppf9aKVe#zNe*fgqZ;BU;vuaoOjeNx*?)i(D*+k%bo=HDo@7TVeAujhbg
zTTNm{N^pHn{X(y1YwGRe3dXTum~reWXv-;TOXE~dSMhSoznQyWJ<aMx!@$;68Tdr8
z4=Jca=Y&{T7wAOd|0Zf)xSqCxI7~0*yS&Gi#r{%$kMUn>?3I6)xwUa+nx{nA0Gs5V
zI~IjzZ21XxPElOhFQ7^I@doLCvCP@2uf*_g0ynL9RF{Nqtiq4ph9A9&U;8bb-OZUB
zA^eEIJI<O-t)CYJ`=F6{VQ&wq^jg)C6i;TnfqiyrTwWesjVt&S$G0nogDuaV62-Mk
z57d~)M@mzyoo!WoyUYIC<1-~M8uqRUpMG|T)|ZAohhl}XXNLr^o8q5GQDM&z@qFlg
zE1cf9Xmi>Y_&GNC_X@@$eyld9ZZWwpk3nzH7!~*C+cd}dznXPD;lO_&cQ{|c&WCio
zdpM^>^Pze9AutNYuh_iEZC<>eV)G=grZkt@^8q^Wzl7+=EY1g*6=|G7T-b^XbYAi(
z@|}1?{LsC9*x6rLJnJdhI;PsBs^ODlso!Y(hVMYIQlF2{6mL7VXQ(*VTW5r-{zu>$
ziTlGhk$Y|&eDmBGYhlD#t<ae(Q%%Ka!*4vfOT<Ssu4(jTALD%xe3~XX>d(7iwT~El
zwLNPzekJI-<WZA*Cuc0Y0PXFgoOd1y=gi-K|BG45yNcPTyvn{z9(VEHQ{^hWb5kg%
zGOLkEU*Y|n_T!y>)TO*9!oLu6A)Iz7Qw#(9-_n<dhbn)JIxeCPZy&Pf+mY={{<R*(
z4%=_6{ShH|9{d|UG0Z&T)9rDA_YvCO_{{v=e@Un1|5vB`b|?2)?)9w8J|jk$`(Nu`
zFj78uA8$mvS>8=XPnZ7R0e;|rJ1Be!;aBXZymGg%$>%rh&{&ff<F~D}wsnGW7TRLA
zZl9kQ*R>fN%)T$+F_te)_x#58oqLVN-(Xy_S);UZ062LuV5jd93wYbnrKP~F%!>n?
z<nf=D@Z!2VA~(plHMq}r^AuBS+mhY{uN<N`vAz_<H6LBd9#cO?atE+i4Bbxn<S)kE
zP%pm>dfpSq+D5>G%UA;~CuEO3N<2^F(^C1ucP?>NF?^g~<0pUDJBh9O9zO%l+FVEl
zelP7Y`rC!<M=XQR@PDzQX#HP$Zu^ZMa02`gTx^*`^WzSB@lobx8*=>^SH-#P!^fT_
z9zynFJ@}!%?PN|R_x(774TkgRB~SEDF;HJ4ep~l}TyuFB*o3xie{S!lOjDUxmjfR+
z&X`mLT~c+0xXK>Tw|X|8_v;)l=0y82)V{`|vX<`HPx9J3Ir{)S43`wvNzULi)Y(KG
z@=>TRub!#MpUFMH9IhVs%=N4pS<qf`tc68k|259O!ailr9kx$`S=Wg1x5Hms1lvIV
zTi7JV4Z_&)E(zaCh9`_W)^;_xa}Bt&pxYeG*WM9I)FqS2Mex|(7V!N{Wz(+{SMHZn
z?9~b8`(Lo-?&n_pkp3Ou!jQRk&rS*M0e%Q>D&M-MG<DH1^WJ`_Brg2=DD?(<%N5)Q
zG+T(@23%zA`-Mro4`hq3Cs+R~vGv+F@8y+{Og+A;lsM6IU&u$oxi^{f{nM=9x+kFH
z*Df>Qci85p5*}vj!&a9_PIltTPnjS;R`NV2p8kNTPb05b6J2@W64SDpGwG*c6D2Nm
z;u&&_C6;^dLcG%+C)v}E6HYa42&bsGw}JJN*i8IF<j+$4Wh=29t>;T_PVV_{{H?l1
zxF+7oxva*_PMlAhGw@Gy&QNY?IQQ1FaL&BL)Z2ce3%RqP&sk0`pP$$*-U=wX^Uty`
zqdIbrXceDEulsYOn4LHBuV826-*MX$kLTA;C9a|@m4DHkoQEFdHkYNY<Qk0a;z{Vy
zm5i$fTjHXD`o73{tjlTNRYlL`|H)Z)&7ruNXzGskhf|4%L#YGsOv$nr_TclT@9w*>
zCy{}P8D1UE=v=+qe098?b0D)iYkWO=3H#`(j2YFp%HU5iAIV<GI(vz^-raI`D*qsn
zg`NC1@$2HZh2J;$J<9J}{Jz8QFyk@Fd2avNz>;hA81IT+o&P!SUkv5YB~$L<P|n@L
zSYP7V%luvm`QP!Z-@mUePvu|p@7uUP=-+SQ{`cJ9XMoqpRK7Bl`$Lp--b>8KK0MKh
z=VwyiW&Bo!zn|ZfocG~tO#Szo&FnnBxg%@wg;qyWPoICHGoL@VJBlviZYhZqhZIL&
ztWSj5yZ0^T=d;Y`DsX^%;Zb^-slR7=C=~^M_FN;*pLD<F^d8?;lCm^ba~1nW&7!xU
z!6lsGSBeZ!+29PL?stQGw2{b{)pr4J7kE>o#(lf2E(&iu5E+%y`9_Al+8<)R+~!7}
zP3!pz_LA-$^gjoFp}ELzIVaU{!aUY+BE&EJn7c_bDLJp<yyQI5a`GzHCad9z#B2&T
zLhH;^(y?Qi$*E@;w|H%0xk>%>@4<_(Bb~hloLo7982@cMlT*{aZL*DXH&r)q8PunQ
zzk=bhwi4w2q@J(+fWC4a9p!rK>1ExuWvSe)Dl@+4tu3Xg?{bgq8z0c*jt1ZYe4YNX
z`f3QJmbO)H0=AKhFJ;N!<vVjro1n3#oTV?>F7-`TE(L4%o1Zf+@Db@DHNjqV>6OP<
zU4>2X%p;k|GEWDCHbswF=rf>0;PQqGUc0-_vT>N&_XCcf`~di*amK8_o_!gdom7tO
zyoWs=I<M@$NxuFhy&Jip`lPQb=HNNLRoto5Y*IhsUU(3a4vU`L%KFefoRRiUbZI@u
zHlCfh9o|N4ar=49HU1?1|4I|zvA0=pJNeezoxj2MN?U!*$(?_n^O*29vBt#jU$bUz
z`<k_LkMrIIhej~Jt>`#0ryAW%eI1qR;F-I=sW*DHnZ2C44=^XfskZ-S&4cH^e20f)
z{ygsv>?QZGle>?8FphfNJM8;F_7A?_D;Xd>1BRTf+!ISwq^|#YzEk+5e*c_)2XiOC
zkmgqN`p*U5#oTcz@q;LR+~&Xk1Mis^;tP}G5;gFlOLop{zt`N;I+Z;sZ?S&9lQCDB
zocOl;Qof}F`dJGss}@wRub%3yxkkV-_}4+V1v&iFWlyy~Wma~;*R`H()-}EOEbrCc
zAg(O~cR9<naC`~+A$oJGN2SoqJ^s`-%HwBS{A<5|t!9lv{AlgyRQ_Y3+*but>J$#?
zjMi_y2b_4YF{k;cV(z}{um=^J*5z3-+}}Tid4ImCH{|D(OWwy?6ue^x{HYcG)PdY<
z9LL$2>~}U_gnr=dnWU-Bw^wxM;75ry@G#__@N~~ai>JG-edyz9`<k6|?_aZPZspzP
zvFw$Ny;b05-<6@>K4{%p92>~I^2!7G_Vc@=QTLD?KRn+=Gke7U^~{C;N2BOn$N;w*
zxquv~6t8ddc|Nkj{)hLI?=D9iO71h2z~f4E4DFHH9?E6GLBak_>dYZSvd9p{!CE;I
z857?K-MGk%EHIpMwb^*=BJP2sc!Kuw{u&->@vO@8y}ImW29EV^m147!i~f0m+4zNf
zP3_Sq<&&tb*>->BO{$N*A2t2dDL<`b=aP35yEos|PT=RRW#2hE#BE<i&aP_g4M!i?
zlYJ7sn;6l3OB-`*&q7D!+)&Y8c;|NymF|9EPZN77N;&U7`pr<>y}1#4DZG9SdCpCF
z>846^>sQX_XXDQ{L^kEi678={>l#ye)`%0~i%q<Wd=25T=ALMxDW2Jk>_M)lzdlg!
zK6^S&i2jQ4MDyErTfVaqTz0Wl4}fdsFOV0ItL&v_!EhM-620nu%#2Unj(%~Rv*MaX
zBkVgjSDF^qQ4We$!qDF`{C7Wj8oCkxDknCBx-ZmR&TQ^IO5M@vW;XS)rb&I7v8jph
zuw=EV&p@l3HMxhionH4Q^e;1I#gD7-4UPhyi|-j2f4S3(?`QT@_SGH1Uqry<o)X4!
z3?F${c+x=^8_`*P*MRgs)&2fy@WXsr-K4Vz>f*#CX+P=9&w6@HW)U!3bvn$fp46MK
zqkp@_k7DUdQxoa?5&EsZ{gOV)&!j#Hx707g`s=%BD-ABGo$cW%E6RZd<;UFvFTwyD
z<PoY<d|&Nkw&m*zWtaH%t>~TmBO_``Xe)0@R&>{R`e$hIEd$YLI8}}QDcx8<bkbhp
zgjPn0iS_i*h}A=*mwP&DD>-6<=b9VNyQ$fZ%wC7T*OWW=?nj?^t%zTV_jq*qKjT?x
zcrf_?G4ZJUYV@aee!G(M@)eQqI}ON{ospFI+hf2mOBuKM?9@MWNw%ZAd^q3v2zaz@
z2z)%7U2yB|$=kIM$*e`ToF@xLOK!n;(%<FmcJ!O?@DAA&SIn-vp7U?>XLpB;8JB$&
z->h_QbcK9=Ot%w<*5P$-vyon~+hC7!_ST~O3eMhy=eXA+<H2(iost3vbNRARujFkd
zXBxYYI=wsRfM2YKiOvHWk3!pS1K%M}-fDJo(-z-7V094Sawq(kAndyAP2gicaKP{9
zwnb8dy3j@Zho|I$%~ATDWlSn}0-jS`R=zUVmOrnj2mYfmy#)+kyNh<GNq=?@y-M9~
z#Wme-JN2$`dOw6N0UzmYt7e}TGS^)d?pFQmmm#ihBD{<`>C<atyB=~Eil(F+SM<C}
zJCa@b_2J(9tWojDf93PdcIptEBG?7M?7buKh0uQ&o8m|GNpq6WTwd>3U1@TeId`k(
zgf@fmNM|h^e}X=K7x_;NKJ+vyRShhpXB5`6_*kACSWY|(jB2qnzDu2XV2;mml4OE-
z+Iyu3!SA9^4VA~=2RESQ4Z^or`hrvi<$lVuJ13hbM4!vmKl+_4z(LWc<W2xb!O)%Q
z<T?+~PvCu8S>()Zyn8qGqSx=%8Ku(u(d&0Fc}@F8p^b&`H2D-qGtUdLAK{TrUHKN_
zjs72i7c0l7botu_4<BX+&<_QV?u8y)9QrAJ-Cf$;YuGO!SYlf&lI@^p*be7nE3Bx(
zmvErEB;}oVI=<&e%SChGZAD}6u}?|&2d7#0zKgsr(#3;1gYT=gcY^sIY>z&QpA+}o
z`*XovxFCHM`ZI6mYo$YI9{vR##*-E3c4l&Ff##Fv|D-E0JS>?5jx}8)exQAdQ+l59
z=e!uMR<A1dHB$bh^d!;mFnWFLBi84*TRunT_Kh8sEA}~lC{<P`xh~k%&o>)euZ1%J
zL($Wn*znQw%&gXTvX|q$$+JSux{jR{x<=RXS<r89Vhp;{gJ;JROSrb36BiACkUn{P
zZKNY;U-smlj+H*$Fn`5k`@*}-?7%Ow9p820OTZf%mE4Ir7h3)HHe|~8iN(ccdA<q#
zvj)CLKgV6b)#@>ShRpvkyjJoq(KD1jt_NpTr*!6=&aW-tZS~@9;wkWh4X^P%wuEGB
z74kO=ZaL72`VnQl^e8lNWHfvMx%)}V+87P)$6fSxr{F3Wy>aaAP6Pf+U&^2}*g3=&
z5?$DP__6XRiJ!XE)dgId@Uh4*A{$I}S&1J+dYIc~eIdKmPX1B&-{m{!2_N$}CFjlh
zwg>kl`#Icx(E#P)b7#q>8ND#>-c-t*alM%<bbb_@-NA0^t5zJa@~}?oIl8PgKI=iR
z9tS?xzm&K%a6EYb9}jr%66E^Ig40KqhI);EZm#$^aFGo?kOk*&6u#a>oM4so8rt{<
zdxgdr^gd)*Q+UAb_iVjvKkG6db8@xVd2W}_OB+01x{);#?U@s;3x=ZcHN<-x_(vbS
zLSr<GJzqdi{_V~L`u@@W=J=htvO3YUVpUXUF&=7Ob}}ykPu3db5%`F^MRks^xr}qK
z!4IovW#N4dw?*wa<eHmLqf=ZWSv(Rx1m3i8b)R%{^!3IG<b6$#V0`c^;Y`fm_s^b5
ze77DR#m0JLvpB@rLF$8*Pi^oL<}1Lx|BE){gF6PC$5WT=<S(!%U%1u@Y+L(6sWksL
z>b@$RO71kNl<t>v9}cDdS@#cf-xNx%=iY5<jDPuIeG`hehQV)m%8#Z}ris0a)U}g)
z_Zn=3spt+<8+%)u!1a~+*|M3;O3uM%4)m?Qds1b&wl|*WTnqga`qvi!J2dmnvid?D
zuTt}X4U=yk5jQ_&{~oZ-uJGgmi)<}Ae_8fI74hfGfnAL8Hhel9H|T6{@-6hSXM$*i
zZ<Ox}MW;nLZ0^2eAjCIWz7bxXRd%xT3&eCX7b(G4>rud~M*DeKAKAL`UC1TsNGsl$
zt3CI*#M~&kUbi?gP{)3s4D<Kwc#UtOU7JcGcZ5g3JjA)`__6Z%z$T(+B`@-HEOQ9H
zO5M_{G?#BdFUZ(M(y@fM+ULYN5<bqc-I7(p;pOMi|3~Gw65l+pW*Rsw9eGMCex`-U
z9PHW3vChg2I<91|S#aMRmvIg18t_c<1>v~OdsOY)-Lk9O&|!7m;$QpyYmwdk%oJo1
zG%Gp199htWPwwTp==1Ue^FKM3D|G0LB`4VPO<tcac2;i2-bhRW=Gbt^(}U?c`UsDW
z%ID$tOZ~Jyk7bg3<9nWbH#yt`J|CT6&zAq4+UK48Ye(>PrSZWf@Z%TQVOs<L$~NA4
z{)cbh{yEVe^-lw~S@?}?p=H=(F>qz|q)k(+SnpoLx@<#a@`?<5N?wgjuGztQ@iSva
zte0-~@<(D%{kp{T{%?yLQ+qORzTH`iJdhkxUn>&O82$b%eOCXZ8~&934cD(zvTLH1
zUA>H{iFylV+~!Z_TW%69%lGiUe68pzprvRzF-`kfLuN0Fbi{wKZAxxT>G?0}k`9#F
zXJywQEUMIR)_xnnqjG#U(e}c%-zkG@zwrpUVvr%#?Vn)nmv}jNi`DUvYyI%&FU>Ty
zBfw4Vi$&+K^$X`;^~=3VnKzMdg0=M7M1(n~KbrH7H}Wm*>IeEn79Ylk@H^n^xA~)^
z*TJ7hd-86_d)RaN7y5<HXZ(gX4?s_%ZT&6)KC)#R;XfYkP9;}Va?xK2Z{huecq-bt
z7+>c?le-~A9(3xlb)aV^;?ygD5`O!4FfZt<TbInd3jR8|hIOH>|MC*~X@LW=0b5t&
zpZ@pj=Bz)4A6c;Z;naL*dwBA}1bEdt0{xXa6Wz{C<Yf<DFCLx0-#o^-?)<|1B9Cbf
zr7tE}Z+DNQzxuQd&uX#oqmC-Z@Hp$2Dx0LN{f2o-aL*Y_seZxQr=@)h3TVmoXlWX-
z3TP=NT4F8njI_kNfR=iN_srq**U)x#N$M8H_uc1D;hV-RoLTJ4qT`g2uRVa}MZM6)
zqfW0Yero$SD)lt|Q~xbaefnyPbJ$olc5DT>rg}HBuKbtc#}_9v=1*Y<+Bxv>;L$6w
z%drX7)@0dtr+giQ^dp|DSchfv>8J2_z0*7SzDeDc8IucrI@H@l{L`8GdxV(Fq;&9P
zEqP+`8DlT14)+?a8b7#sgg)gT4ENp(9QwearmxBt8sBpQI)c~RIETzc;&46QPhZCO
zTsn`KL2xpw^%TmbStrjTYwBdrQ%ArD*<U_e?UjKm>LYRQwJz;t3g%33T_PUIcgD|A
z#C-K0fxlTjJ3U2t^?MTkXl!i!=YV69wT;Tf_=wpv3az|#F?mxouLhjWKG@V7@H1$C
zMJsqK{-w1b@jtDRSe^-=TqAwkhr>G=e-?O%f8M9(j4N3*|3|31MRY+uwvUXd5?{@D
z)>k$btgmd;`U>ML{{ASsnq=-)pMQIHgvX2D$GD_}$d7&)dt#7RM<-cceI4%ypsQeA
z(!$G+t4K^^TuVJ(7yB{!Vaxb`jrV`^bNnC8|Aqd0{#!g^KE;bN*LpsILj0e@d=MA2
zRq->DM`3ufe5&HLN#;wu_A8W$E@n>&I3l|wSg$PE%em!?%jy-wAJAAoc4RP~KJY*0
zOi5k&<Gl7MSUO9y-=+|6zRkD7rT@is*`&-otu?*1B{MIC4fMCacOLuTvBt-+adX)f
z;oi4aC+D5`{W*`leQfMw`Oo949%kM|SEh1k8%GA{pUVDse%sCJEA##XV5~XOeauWv
zU5Ot05#HJOm*MIiW{&l(9gBY^rJbi?Y~T?4(Cxb;oHqwdgE)1oUyH}0TTMe(urx{R
zk@^tAc9A~qP`<!U7^F9S>#g5S?fLGJw>#a7oZQTP;4*yv+fRDeNmIDqdOB_j#-+3=
zUMm{kiHy+vnNqV&_Qyx%n-Gl-GZyVHwPP-b`%!;`{wPmD@ZZ+qpFcC49Wk6wr%Gc$
zuT1KkpaTA)c+0~7(&5fHSK_S$`EAbxW#GAn|2zHviX;BVf_I$RvklwH)~9u=w}N-n
z<NiLstt0r~emX2Q2l9KVFFirI2M7HNgY#u!O??^i8W)b^;ozI$a1NRF^~w3px&oRB
z<ep-u?f4~^i+Gn{9n43e-6k4H6t&+K)T6O_YlDM*e%XKL;mMSqICvpnlXB0TvF+i;
z0qsN!#vnQHm|utNAl0SVISUs*W=y!Ra>@~__m)=heOR1FPrS>2{-l4ET&0a|-{HT;
zbVmIBWxnNIcOLJw{U4^U0o*S2>(zg3FRyR%eG!kNep!A_p5u^#HwjOnm44Q=(eVe*
z>S)~K)5=rxZJb{}<>UuT@V)(}xW3FEuW!fC&s<+HAL(3vo94*E6uzzN8~!!mFQV}f
z>xd5h5dFXJF#O{T^qzK+DgO5kx~h9}DE`XEvu*$UblPzHOH;eXArIg)6Yf2J#x|1w
znQytqZv)>;E?v~d>p>gPmGkn@_V@bV{md^TeN_Ds&dPUkUcvupP|qnp-5{>ZSM44c
zT6c57x01(pobZ4`pZiSz`3(OmeEAXWDj%>d4_>++&20#DrGQ`9_4s^#oA7l*!S@O7
z#fO4%d^v!P_zHdiaL3lAF$xz`ysxzJSx<M9W5b?@ldm+nhD-44v7dJV`^g%nv%j4E
zkPR0T-_NrK_Nnjqzo~oo__(V&|NqQPdZ8D3Nv~-&GfBAxSCqC%hl}|nsZc2*v{A6^
znn{CNjo-yu6iT~f(smUrLdSNkwC;97QApIKD^xnl$`tUn?5?H7itFx|&m_HC6zMfX
zTju+GozLf!OhR$j{XX{h`2PNw$IN^_=kh-9^S+(;d7t;;te-*8vffzk7-u>8^cLKP
z4W1;Aboq3%^aH#PU2JZOT}A$vm(9|j(@uGmJ$Swyd>anAZ!Ii$HE{P!<PtO1yx3ET
zKahA$!PU)Le1B=fB|V(Y!l^l-_C3Hu3~FsMv^0mGBy`Bhs89CR7Ia`gn$J>xOyrX8
zQj>SbK{t${yOda8VA?;X;S%KB_DAkGy)mdGn8~p)dtZxLzW<YEc~7fZUbvleXu}#h
zfz942%=i{$BTakFT;RpGPTW9eggxO1d%w4F&vgTPza`vrZA@hCKJL1%<c{k{xbOM`
z_H|oUKEJty{oxY!hIRL~8C9}bcWwuJ!unl8?!5wg!j;1#^R+Jw-p?wRruqXm`m5{Q
z=l^%?f2Y$8-lOBpJSS6v58?g90tB%F@aBTp*fnM34gd5EV=mWt+f94fZIp{ThC8&z
zT@DRqvb3Xl4?c#NJ*|BeTl+=IUa<08n}hsY%CmJ`Yi($!1zB~9J-6GCRr`>o+S`mY
zl1rNZg+i!vH905$ddbJ<5aUzb#Jn5w1vM=REzJ_U#=Y9{x%g(Apr5%@8t#sfld*{$
z209<oJlu&lk1#bMr!Kye`!1XPdjTEhy2K&Ibd<SiHF=Fb&b~_1{h_5CxEzrG<ycFQ
zYo)a7ORPJr?-?7bn%|srS+|VXXxTZ<_$z~$=G-jKt2e-t*xSlqY4cY4alV3!J(<R)
z&zhwna@Cg@eAw9V$#mV_9r$WXRx)PI3G~&Dzr&qrmM6hMooEjlOmYXt+w~iJFZ2s7
zHk04IuD4KQ?(*01j4ecaIob-*CToZMpZV<>Wb@m#*YR%C_`7ANH#VK|@k*|D@Tv1S
z@6B@7tmJy`TqOV0YT7e5f<y2qy|4DQPZhdYIkV&wD(Mm))9{~cZuv(_-lK67cTYQ-
zlNe{BjYB=!2vIkB75W(&g??C9@1MgD;3W4zS8f=-ecH<n!;emmw#CpRYoU1ewI&mr
zaBb%|FEX=`JJu)Ng0Jft&aigIOyi6tEpxiLOW-zqUgBlt{wg$>%sAp%PL$I>dk7~R
zz&n1-I`#x<GZXaNz17R9*F#^dH>zA@ifjVit@-+US-;K1N6$Whi;VH@pFa7ja`;;N
z<fLSga$GF|7s$MAvE&7**e#3i!k;^~?y=a~s43su^fPGWx8R5Q+<CZA)9etVb7WY}
zeCiAVf6stFXBspP{&xPhP))gb`)`NUNJnVSqK68NO~}l4)}U#4PqcKs-ZgUG<uE!F
zn$R;VZyU_=_w&x3iTolKRWaQu{6rd)V|uIc$+Ets{500wjPGy9di0pah7IsDm=AX1
zxBUy~Cp{0mn6GgzDKw&dxU;l*Kl!rWh27`F6g_kO9_^>8j~T!)xO}c>aQVcZ==JQg
zQGN>L&5d>OZ1=G0bR#+EX;XBrcjNqbZjN_14tzJl@29vt=Qby&*Ad6+7HZm&Jvui(
zm~Wc=aXaMXdb@GwCLlvJ?)%}j|4m!S-E*~dz2BDm?{D8$JHCZcJ`Tf-t>G;)c@;7_
z^63g>avkz`F=Zr=yY0LplflC;(8V41)^!?mj6uh=pko|#OavVh<Ger*I>telY(>Yg
zXTIF5d~S0D9TP#v7@o&WWV0bgr<Rzb_wmv1kgsE6k@V-B;pT;$=;BJV-0B<7lz-3m
z>2%8W>A1JPGZ*07mqUSH&n?}uh**o|I{WtU8hnKCV}RGK$xy02sXd&Mt{*I74F+wd
zecJpjzN=!o%!y|O13Y|kj7OVU&Wq~5`(nR+BEDNoUmlH-%fa_AI`Bvbax37I9J02Z
za`o(IpX7T8vMG%I4b7^vFq(DjQ~UBiY98Kf#-cOFert0Y`PB|Tn!B2NJAggH7{ZK8
zd5rEGG=|I{8N-kLF{C-aQLKXwP)B3(eOP_+MLsO~Q(oXZfNL;68vL-5mDtsNc?yun
z_WZ^w+O>9*y*FV(*GtUPaeP6-mo4wFncx3M+K+K|rTKHGtsGUm0USEFV*7a;x%gq7
zBLSws7L{DI>pUO7s(TXpxsJANJB&Ypjx4UD^@Zxm@1u2FV1E=MB`=;`F@n6#x>tFm
zmvdX=$KE(`>nL&zjwYUWOy_Cxn`jR*M|=-{9`crwpXnp?)0W<>{k0nSB)TLqr-`+d
zTW_lKt>@c({l^va%>AHmpi@-8g8j-4VhUnrPO3>~oZw%_&zX{T@DJh#-$`DMM7^i$
zY&-|@F`&a<?woOn9l&;}w&U|-i!~1#yCa=MTt9oOnZl*!tUChQ8rfT|c4K3Ds|AbT
zxIlEs9quu5X`&~Ngz)c&lEiv)FT))dn<rP{!>m&rLE=*2WIxDk*wi!(`<l4?rjgj?
z=>AIL?^@DjsoS8dFuL5ZAJAk<TD$Sd?W@^Rb|0~j+BZzF*Vao6llB}paQ{g#FIvY5
z?tJSFofkm^f>rx`*c>&B7br&>_AfGa$~s~s7<00BSk32GUE6u6C6sy?d+MW%;aqnv
zKlM>!2k`6ei<DIf7U@>4F{1eY1&{oT$w9jIm%z9~arp16izBb9HP-v0rctn2`j%hm
zLmuve`0v>Jbyn*-;++)#J)fME*F!HKgkC;GKFX3*Hqx}WnQ@3dbSJD^8A=_;c8x_%
z>WzuS17a6y&1LbScy531zZsu+%#5}Bj>1_8nu_tA4MTgwO{RQhsIz=!xKsWJ2mEPF
zT2n0LzvxEzITv1*3NO41;P^E#2p59GA?IQ+FPf7t_-%=9WOL<}GYy&LVpmPU_L?)*
zZ101+oc-sK-ufvoc@Z)B&zvM~@=_<0XRp>EBcqpco}tTG9(^vvTF1$kU+kQ%Z8B$#
zbl}C<4?II=X0jLdR(G>zw={NLUA*~n=HvcITz4%+4RePKcd`awxz3po_YQordo}LA
zWqcoB97;W6>Mq%WZ{2yPY5W9x{z>{zgSWfcuYc*589Nq-Z}4)vvL@8tAN1Y2<bCkr
z%HqAhu-*IX25z1GoNB@&iLo7N#|+O!?3r2CCg4N(>SnAu2in6pnmJ!rKLK8b#uS6A
zGf&01-A9?*s>#>FS<oE5Z{x?M5aX8-{=g;rAf$7^>+Jn2*rx%0DW8cA3tbWg$K4lU
z_b<6?PH4%TIqb!zkSntt-iH`(9c>7XIB_7l(=`W9qpzOd8GRS_`Mr^NFLl`~dM|qt
zjXOCz67%nffG>#0118qk(RT@sDP7NUFU8B0nerj!&V)bVBikPD)kZsOEuGOzu-BcZ
zuF6ZdsBG<XCSJQX5?7t*WnTHvXw#Uby<k6uc#KRSmnx@QxwI>mEK9W^mty3}%(0%<
z-NuqH|AI`JO}p&>#uHOa&6dUZ23XIjKk>93i+@JYtz;bC1MiFwKaYa8kzMO%&`t~e
zyok;UWQF$qDtVq}PW2oaxJ@!}C%<jm;!}UV+BHAPSjzIH&!gf`^>M7Yd_P}r3;4Q*
zKE&6#Vax;kJehj2Ip}SV$JuW)`SJ<S^#j-^_>XMgZhgKHU9q9Q(#D~P?)2Wi<E-=K
zCGk0mPtkM1pfmi>gJ<oN)URZZ1Ul53B*}aAyAOSPvyThO@Rn>@>H+E`7S+Y0x;GI1
zgFcAoNADpww)~F0E$G8t!TuKUR~Iwy7Cvl{!SJ1eF9TRqCZ_SutFiC}@Cr_~tubr<
z(l7br^yg1w=l~w^sQ7tarD;qK;L#Gxqx*aw-A@ebR8s<<mW;H0h)?ZV?S4Mp2cI7B
z`E>s@coq5ZJbPw!j6uA5036x6z_8!<3GD|@2f)`O!=210-fi-kQ6_T)xK^#aXOH?0
zaO_TwbPC4-eh*A;=v0651vVp}Vyqdg9$?Id^Qg;-i;>^WzGDs0_s&F8pX1#RdG|N$
zxd{*2cl#LsxBGi=xAI%KOTWrJXta;MU)ng<%+em-cMp<di9J94R&LCIe-hwZx<Yez
z?}0+&WxU&e(KVe*R+XfNou@Tea=}n+*xtyns#-IpHA(zuI7ALhbm){wXylZ(&_dJp
zt<7_>b(|%M-e-tis6>7|hHacIaq_hxbHtF(bT$7&#D?@@^ZcGZ)Ryu)n9;=hFpn{O
zbedEBehhz#J77+S**T2>hve@5i^8483>%q4P9httA}hCUK8OyG+*KULA?93kba0xN
zw?OjukmmKP_~kCD?>tCsU9&&8`yVx(!Q85iL+B0F-T$c5c?cP!Htzl^G&I^|7IT)f
z1Q-&uGnBE^n<?`nZI5j3*=Putima_)`N-zOV@&=z_)9sov*wY_2U$xUf@Xy0o{dhY
zU^oQrL@9s4lFHu0$jI|b$X78IodUiO;$xI<H0NQffr}2-y?0z5%G^~Q%2a_jtta+B
zN}Tn|hc}C^0y-lHz3nGSKjLHcvH#J!&V!{+=Eu|vXhifQJJibB8FP{8{#ki+zC+H^
z02jgmF<2AiyPd%Ivy4gk1oS_ItW*4qLmBbtTV!kmxxm^$dDc}vXfv?w?0^5RwO_Jk
zIN`4uEKL5ILG=A7d(N^$)W&gg9~@;I`n`eQulc_NTgBi{4*C)7cbq9~Kj4@772me)
zbJ%M;$@Bf{U!LChw(s#@?fYZz@kRYR?*&(|FBii05g!IP6P}&}hG2bRqUObe?3e3~
zur;h1bQW2DOWg(5f?ZfS>Jj|2@`F`YwX7^(`0tbr>grqTlLOFs@fzhgaw=GxXnwUm
z88!zyXr{^cjqP@mxrBCQ>j!I=&P&a#e`9VJ*&H3`RUM3&%<_}>>^VGAdVXqG4>p{G
zp0+f7KlU!qBoo|AJ(@m@ZE-N-WInK#b1%G8ebrT+1MnxZg=f$->m!vF{OP-+JD~AY
z8~2Z3pETAEL0?~F8f*S4wD9Ti=0(okyf|lh`S>>?=T%)f#N71Mh{<cCyu*gfh|W*L
zr}=4|Ibc2F(wEL)>AY|g@n}8xNsrN=Y<!#hfZr7>$`>YEXYOc<gj=^R(fg@Y4stqA
zUX{%evsTY-j3nzaYzku5&Dz{6Hr{AyeDXtO$@%fM)6C{gdS`P3aPDCl`8i&u%&JJ~
zTG=~U-5tdEP65Az|8L4ja}zWmUS2A=<)_V0tM5F_`Xde8r;#h-%}uS#cO+ZmJAT00
ztc~>rYqiEZ+wR$OGBUkOZ3&-Gg(t5SP7g2_!e2f3S3b5k7_-J`=w}sU%zm0NnrW@`
z5*p+5s+X^;Sj(C9Dm^1FUt^m8x+hcP==8_;jmh6A%U*ZY+9~Gi{`jVJx&HXllzBGn
zjn8F#ix}66Vdf^m{{|oTC*^%`H<SBc^R2noJbyjx<g3pE2bVhe%y^TUcI(}}lR49l
zKX7*$cI2da)oV4jmB^~^hbOH)vB%)opGJO>>0PIp_cM{9T~XRn9L<CktdrymC2myb
z@~-5b7#Ex4wy(1O<Ff@h*^GXPiY|X!dr7?1q`+OOHZtjmbc}^5G7a%Ltn&cvpV;Gc
zeiB=p7}DK}9X&;y$Q$UlGxU3!e#uX_fOT{JJaFqW&N=G;24}}CzQMK4MN$R~&L_+)
z@~Dk#ij=nMuB_v{JIMSV2KNUTi^F&FYBLMkACJE(WBCyK!@bDoNo+9nW%-XdIK^8Q
z=$9P#`RVli@}d<xrV__e8=`&k1-P|N9{i6Z=5_q_l#MJ|-aDG#&s$kx^83^WeqZvw
z+nnXUhR-*mOV+Ghx#w5dlF>-X+Ja~yweaqDwa(Zv-8Gkt#%{Tf^GAAqFLRu4`>XG<
z-X5<$@8f@xd3<`&vK^C&pWR2C+^c`*#CswoT^hH_xnE-)ewz4P#_m|1ij5CE2|l&V
z%frk|0yywl>?l9PJ_hS!!7I1}SZ&U7-<}%|f38ONlaFdVKKOCiZS&h`XCHjuvMyOB
z9epRZTnnEZx}oLOm3w}T{EGjSJr!i4Y=Fa+CiCj0CiA<Q@C^QX=>ypS@abg-@B?W*
zwGZCQNjAZU+A}*`=}?EeJZ7?%Vog!&l%J{1mOsrH?D@l;jA8CO&Fr1N-Ea_oJPb^)
z0?+U0?*Ka9$~^S$LFoT5?Y~OfzoT7^_t)6<zXI1<+p~V(jUR?Rs$rc6$=7!9mfo5`
z2A{$vSL}<GqqKhjdqVB%?1J(px-*@;U3cxdCO<uCQomvBilG#ZBWpc*3v36!WHM>)
zGdTn=D<;k?S=QU{SDe_j?8C%}qsI+xE8j(qa#w4AXSKIh<X(YH4tlHBnSpDWTh>tt
z$|_c}5H39;zg;h7PcZKXuwjBRzr4`Qn$p-?Q;G~b6_KB%v`;5UepwtLC)DR)y&&19
zPuABD<z}+g4|(7yM>b}=3yqVly%}049q}9Fqt^ae^uvLLCCHDd_RdkWqI^8-e{3n{
z2s$|Np-5-Yw!XWW8~GMA|5I6KHeriC#=1YbXnF53=4>)^O|I-J*)K`t>fPv$a$<oa
z@QLK=-M1!oe13iu*=nlV7v0?}Uyk1Y92uKklpyaE_Ws?-3Z9SUep}hrIq<X-UQj&w
z=jUIw_U>C(?nqKsx>)lqeKLfy&AvWyq)&h`j?6XeN6W|J0=F5COl54Y=vKOg@waow
z)`<^sPcgDGi@chQj6Se%Zl`R?C9TVLB!K^C=$FILcR7B#<jb^8e`g}YtJL-hbm<9j
zcO1J}GB}I=Q-9L6hiN~(Xl1YTO&PE{d<!p8@Uj_w!yL8Vdzq(GH#7FHUl&~~o4jMu
z3J)*5f3^rOX&*2D#N83ac;S5OxUXLqU%PqH@*QdFdUz?bczK4h?Y<roUakTs%>PZY
zb2Z+pn8WDv<vaeJG0G+`=nil6?Qv}WJo-X<_JnjVIQwht-&M#%$&-E9ys}wT=OE)8
zEH{$K4fP?JA$cKLQ7k9U(w6dc9fZd2M@}A|$-F?Tk~vR*dhrg)=Zzm-*(>=c*_lIs
z^{h9YudWSsewi_;-JbOh|FP4Vo5M5NHzN<Ocsz$*laFl(ZD`*i@b${)Rn8t>7Fz1q
zGpwdqALu-b^sQO4ct>Iu?I5eum$O!X02v+PjOr#QF1f8b|I9o_cMq%X5d8tW<lL*A
z+r59H8K=Dt*)$!y3XO-5R}T|wu!Q}eSL>bS!`c6FZ)eYi{huu%v-C0ce;yc@EDQFD
zMzaUxuuoLadN9g9&}jC9_AN&5ul(6&?F-eL(RN=5I$rysGl@Na#y*gEEf*P6^~!nZ
z2lCXtf;}id-2<G7ePuMZ;RQUq+AQtV_s7lBpAq-5vyS_a*t@@%-%-XQz79ULJu)WU
zaaZ}mTJ2?GW7ZANZt6at_4G=!xt`w+-x_lQ`=30wjrY^WJ<#=?$Zk(BO>WIXx08|i
zFM%V;-U-Nl))>3A=b*I=J_D;;4#3;LLdNg$Wqb~~C^~57zEa@0=~vV_#krW7_y>{Q
zyQUzoCm@g2UJ~3p$X3Z=wQ1K@I)_PpWbKROmiPz!9gRuPk7fIoKGQr8ezv`+jO-<q
z!{+eLGk$2GpSqg(=Ma8-&sRN(e1iSHYOTEjfAucvkLBE{377B9fg_hQ2!)VoZNN@l
z!rI8?+<FuG`8n3_hgb^<-`Q8mgTejt>34AFkoKGTALiW!;P+o9o9*4`nm~W<N58#_
zobK5i?%W68)YqKZ_$qR1KRV_9W^>d1SDW$DEj^p-JGVd=?$Cxyq+5Tt*2&yQ9LM0c
zq>I(oduT_x*QK1=DmSBB)kdJF()dF@#TkpwFedSX_~Ks_<IG&L*WZOru}e0E;I#Sx
zm;-%(03X4Q^UrL|U+c+k-GTNs?x{E+e*v%ty5EqK{-FUh!}^H!f_5}NgX_pv_+5jO
zc>q{`%{labdK*|*Fa-5wOBMI4HtwN5YoIR1c9ZP(G;(sV&A#(*3yr0=9C-$TTk8$2
zTcF1bc<5WZ?A%aje33P%Y;XCPw1(KicZfY}(a+n_PBzlCH+}QHyGxY20^V~TfBI;8
z)9#}s>?gawdgJI^<ixAQ!^c);H#>Y{XKvoZJ(@=h-)qKR{|0ioF;{qS_s&OuaCGOD
zdyjU^bdNUS|NS}llZ0q9L_2k~p*$+(X4H{+JeTd8MZc}e6&mkDc3J#kbNAk3?L<4L
z@?RJ8uIxgs-$Q1Ky~9&J<#O!5@*?{WKg%vJH{+Bp$phh5wvF16e>kbRgmxyd$Nwg{
ziQ(6nP5&Y2>t+6b_oaJx|NYaOc7ON9?MELt`qa_iJ@EX|e=W-%{a@)bM?bi7^ycrz
z{$>3$q4SUA{(4o}9O_9nVI?+>B2HPdNj}+q=!-S*)oq6gvmWu=dlkGsLYw<&Pwn1D
zdun&hUzKcL6McUD7IXfQ*qZyxs;U3TA@1`AmMzHkG%=WJw~prlt-HvG7-I-xl0xvb
zvH5hg?w!(Q+_Kb)BZZA`SH7LKw^v^G<#IowJ1up4QF)!;ub}-HIX&2S-W|f1m<V%*
ziuD9`!H!kSv6+-7Au%mgALSfTQQg6?vF_J?!LA_3tZYQB<-P))zAb#n(WRgEd^K)Q
zD0Rbd>|Nw&8o8<OfY-!V=aQx0A0S`7b323K(mL3-GbpZHuqm!V_OfU#fKku?gXem7
z`j5;-2lo=x1A9<!aK9bsu`76w&uLfSr&C{wvzAVA7?ZW*l?ReC!M=GA=l<_L41!1N
zlc$Sd5p2Qp@AEub1c%-|!?R#q%KPy=AKBIk)+Q!dl8T}iqe;6L^rY_nkiSd!V-&-Y
zLq_YKkErIo2K$olkMSLp*F7HUD`*qC$tPC5RR<=pvu>>6d<eW5svxiQNUvS1$I!vj
zV`{S**tE{Gc>w#{=1$D3Q;DIb)Akb$rEEDj#Iun1EKNSU@$~(JbM*bab3E%h$Fqme
z@yy3nViIkC?Huo)CC0@c%M>3k|9>3A;c9<wt~mGH$cF2iAMk(9`C0XjUOPX`Ut;L{
zym?`cEIu?pLu)$|-#P~l|Lz>m&V}m-&QUIypFcu(!TfBi_UP8a6O4gelRo`=H1_}K
z7}}Yi#KY#rkmkqcv3~ZkV%`bn$Igp#P|vB$=v@AUIU(gEnuQH(^WKS<rT>e^9MJ3k
ztNc~Z*aP`#<p(&ha&yp_g1qC(Gd_`6W#tillC#Ic!;@EpGB1G#FBf=#3ojS=TW|qw
zB*O3PqviA$J-H)18R$6%EvLVT-1)D{kWJ^HTlSlhMS4rR4c_5=Wr^gR&E@OA-xlbE
zL_I#9*%lYuq)W7x5IqPN=Ni`ld?fy4d~B1<Wz4%`!pAC$k6p6Ce0=QEy8-z4`@S*t
z!`#pB{m=UOz5iK1zxO{2@G$~>eEA%0vwr>Ie-|Il|0O=c<)V*2j*ou5(?6zun(2Sm
zuXp;N_0vrMvj89D645^WTj*nzN!|G;;6pN__#@lE%)rhhhA+_XzCF+fgY1DQaUW@D
zSF!{dv@KYN2C_x(1zYhu$sF%ay8fKpih;}e=Yo`v`$Q%8hs%b?XDd5Y^xe(=SpXw`
zwN(9?xqH~p+rD}Td$~n-|ELT(@W;n^zj)r_IbrVq!N0KGt#sn@<!9l2ttHdfEt``i
z_NMKfX6Zcq2z%*YcUh>u-nWMtKj$N|to2#rFKxz0p=W{x8Ps=wdH{Dfe&rA_2XSUQ
z@&BA%(ZJekE-_~01YaGpv1PWrzpqO!;};Jx*5LlK)60f&*H1|MvG$yo?lCLnj!NBO
zrd*>H!U=YnwauS)@@*rGeE9KiDen$z?ihDiD-XQv!%3`f@~uNVe?YF#64v$G$p=zv
zCbsHqjr^8o$>-;kr$bBA?EUNB;WXzKbk8y|GmVK6><@6RdIN0?r)~@5#_u%_`MLCN
z?ulySUeW}8<FjgPIbVBurm77egX&5yZ^Ld^9hF~9TdG@JubFa!H-PD0Z1NMg&Lyw)
zHJ!)s!MQ(@Z^rJ=_TgFo9pJIJ=YAV2_Zf%i%i_zAKk1tf=(Bh}V%$v|+&8AX#!fH0
zmUzFg7w^Xy<OfL*<FuH5Lckkg?i(0qgx|Vjx0&%KC<ne<)0}ToxhU^Kl&j<Z-X<R>
zIv1E^t)4ti-WbNtp3&|plyUJJ2K3vG-LEqzvAb6E#-})$IKJB2O0zUx`L#0bX%*pn
z0N%EcUl5)gfOGktg!6^{I3IT|oU3jfW!r%bp98cot@ZG+LSvfyshj=r8|E_@|1FG1
z@od4^_b@K?6Q>`I>m>gzo!~=xl6lzyorzWgylC!k0dE0blK65K(+{$R{my<`xq$YX
zX-}~O0UQov4B!anp%|8ZJ}i@bSl0Xh$NO#d0QcAZXQTZxI^QYY5Kk2Ipme_Y;lE5r
z;Ly@r(fTpaud*}LUX=K=m*C+I@8qtNTf?2YpB7%FkL2#QaPn&9)6u@W%6%RgUcO`Q
zS;HFenK1ck$D6Zy4=-;k$IqknhKUlBM;Y=VE?1ql8`z63GiS@MdjDD5W_`(-qB`+J
zmDiW*aDQ8Id-25OMenKyy}N?GfWy{%-+*@+Y!2l}+@^OYp@X(-=$~<^|5whx@2Xcc
zzT$CxWYD-44QlUWMQ|)0@GhSCgvnbNK5fnhIhup}S^{3T^M)*zy)<|}q))W2?ruH3
zF;VZ>x&0;cq5OPlU`$-$Jqy}W8;Q%$@vQ2t&%^`&OuPMk_TS4P-7ugZ`c{9USHUD$
zg7-T6ZJz;)*7)`}Fu1{Q`tJ6B%P$eg4t*EjX`y`j(hY&!^X{_<b?JTy$-f*r6d%`a
z_rhyzjI@h<HN!c7z<%7Z?jb4NK_Pi7T>`zuT_0aL${`bvB%|mH_P-9bnAE5Pg^kiJ
zIsCSUIP+=9wdrm&)xlo>#3CK@0r*$3rF}XEU$k_L(K);#9mC!hajVm<pYFsc&MMGu
zpc96}XMc(=*jb@7C6l`@<vum_?dTph=}})VNDu4I1mQ2r{kOs0%pKF%Gxqgu4?0{r
zw#D~<#W;s09WMPH+`ACm?U5aijPLbiJhFWE6l7o$ovHS-;I53kT%whaqTgf4+^vjH
zGOYnwBe_}6{)?erGv^QLmUy|<I<QAnR`2ogjg*dE#GaO(DWBFN^h6VSVo~MS%N9jK
z^P3`O>GjC$DMfNu`*gP!$=#-ir!$IWZ=f@NGSq`fbtHqM=(E9fr86{E<T?3aC$t_W
z$AsW>8GE0+F47yfqBjDa@gwLq!24Ey3m={IsrovPAJo^Ll5kV3cTJJr73}00ZY93e
zmW%Pu>ILu?^!1mtr*`3k*;DaRR;<1%B^{f@mJ@H)%}dM?e(hZ2Z>D|xUbTCBc^9Ls
zY^s3AqDvOfA(Q5uddf6SFt1}jHg37xEFFdI^aJKuxLOpMFkf>bIHa=!_=U@cA{+?+
zACx|03|5C>X9W0XUn}$RqB#)!J!8E6{lRUFVjl2g+x_~n(30#S!K^wlXeoeQ-(**t
z6J6rLpJvP|W5*3I0IH=c`Pemn@!a^LxkwhxWuSWl94qgHTM<ejPZsQaui5YhzG}_s
zEPqa=!}b3?{1=Wi-VOe<OZ_s+hY{q`so=NdkYvzcovc0V0A^3td+>_4-&R)-vca2)
zfv{~9>1yFeaeW5=rF<lc>AT=+GocuNgY~&d4@pUnf0+D4x?{;X@65)D5mS>uR%Y2h
zN>p59W3HQ#<>a2vB%TdnUzyAouuYZ2W)|g}E9&D3a9789m1+1fie*rUSmwccF7fb?
z)R&1jkiRy-*C~E`@c*#yew1V2m@%%4HC}7)Rl}};M#5dXM^^JI+OI_3C7cUV-Rw_n
z3758pi2DsAlM~?y^U2G&)L|dznGvjUcvixG=$4gc>2UTII2%!gydOUV8b{u5`zEnI
z#>7&FbKCnGOy<Y*`^`r<lTTmW7a7)q#O2b5`s==kJ@p1B(?Y+3XWx9zHqh_>2P2&-
z_sl)yPKPh{KiJTzw)f4K%!{SgK%Z;4ze{D;aGx9TMQc@Fehtsx^<(R|Qk$#=?7iI1
zIo=1bO=LVJ(5rN8$x33O`9G0yB>5&s;L=No%?Qf=(#LP1LFdaxf#V40%SIEoV)d(k
zzD#GtLS3g?#-Mlo`_h{{9or61W|95q_;uUA)nIkMog3s$5?+l0r*v#gd5MW>kd3nw
z*{Zw7YbSW}CEq%>^Vh%|N4_hz0UlrAAn(eU1Fc`RHoby1SS>O}aVE9Iwv7gl#q^uw
z{zR>3qRgk(W@<-moU874kSqDt8#`qK3x3%vMfUKzKz}CCk%secDr0WBvsdN1u?fic
z2E9${`p26J#DHMG@J#RY+h4D(tM}Jy@VLcccN4N6JsYf*+mShES6t6p`Ge@%8_>0!
z#cJ@*V!7zg=|k8DV!f!b=q#XZhc&ctWx(km8@><bx9hKiwYi;_BDoN>srD*3_qmF-
z^w||p7xNi$*4&YV9FXmPidY=t2G;4$EUkMw{P9Xpx{N=;yxKgS?71bNi3;X!lC=pY
zviCNr>yriYT#m=aDlxA&0}pFU>r3%+UQO((r~JoMW)ka6<td?#?90VGzlG;-*WY8r
z-<%?@reB^sZ}}w~Y1$jmh-W_z={(yILaq&CJiZJe{#yAPj%_7Av%%zVM&4PU1H26#
z?#{6nESpgIo6m!`&W|uJTe({im<)L}g7&4K7hl&r=UH^mGvQF{Vf1D-&z{8pN}Te#
z7UGmQghTV62~TQuBeS|pbj!bi?^OMaEt^D73F4a)%!7Tuh1{4m8~!cHvlwzE;Q82N
zbJ?ea#wgb}&&Zr&x@v~5PBmzM$;;QEv!sFjc60d5#uuR_>8sxs(Uj)D&@cr4AJcjE
zxd``lmv-u|mL$07Ssl70=u7^v6St0oR>w;Ybe&!{0pHCK_NcMB@ATw>L*LR>b?}z(
zmW`T5=NTv8v^tbIw3_=s$y+0P+S=XZ%9+)JALmjh(?MPo+YfjmHaX9p;=1_F#P%;7
z+ga?(`G9;m$i=|UHpp?=+0kNO4z^>IJk9NVE9YNm1U4W3hc$c>JPYj5VD9wYKFB6j
zIn}o|De)14vCmG2-i|H2vD0CU!Q2Q38mHz)@cH`st$cas!1>DAd-Ohp47drrE?}*`
z5Zj=UIU8dAG%hy9@#joR@qx&~-M5g>Eqw|b9N3U=ef|{}UYx}J(*@44&EYJGJ=Z||
z&Q4-s!q{&y#T}7fCKg>)Mozf-AK@OIHPF{de1kpUMQ77>_j3rDD>~E}!7V?lo})Md
z;qaf(=Yj=!icL%$E_=HchBMg2*l&`(Mm8U9g`oQZb`<y<03ZGre5uGbwLPh;^~S=+
zmn>aQ>-yjDm)g~NoS<Fivaj6|;G2scF!W(<G}>NFTe6i||JZWkMO!Ygl_~RAw5N6r
zwsH=9y3a+vN1S3ldZX!e*~2WHGV!$TM`5fFGS(dPy@oo#Np5`Sd)PKd4&yiM=KsNi
z;qM)|Hj+Ze?tb*4hmMMVoRvS_ydNBrd*$^t*wE%o!=4cFWOXH>7m(rH{b9!K<X%?A
zWQY0PO@GhKF|U7$_z-twBz534cwMspD)iU7cP`m^^_!7*-tcD6>Z`Um=Jhl@-EkH1
zmRE*sx$cGtxkJNiLnhQ`1Hb=x)0`o+FP_8ZZ#;I&q+VGvV~&;i*h%8~DDzrAi@WVb
z572<d+Wc(nh1h%6Z(6{ZpDV^Wd=|`QfOFw2z`4cYApAv74y%5WHq`ECn8#-DEqi#g
z|Ll|g+<t}sPNip4zxr;op;tCFYd*m&Is0d!GaGmNbr$(`6ptVr*?Ss^hu8kTWJ6Z^
z)%Pu1o%kp4UW~c0_$ktfo}b>khhF#0t4*C_vHhSctgOTKL;mk}hOJqEtXeMmXo5aE
zhm&_0+Svak=AZZ9@@Yf#QMd9Zo5fS24`??PgFY&Uht@WfM4*pQR|_<;)u)dN(Z@&=
z-vWKyhtA2(Hz{J$QngF=T_ro}eF1&UOkP#))5jX<gYz@CTsLyI9vhOlr9S#-fIcc|
zzm`}g(Z@6J#xiuY<OF`ZbsMnVnvo$%^tiqm7x~1!-*0QvVD}d5o(^l%%*CeZ_x*Do
zShjH04s&Lsd_o$B@Q_1q?B##){0-hCIVbLY-;UNHlCfG}#L&fyprgcv*TkcoiBD);
z!^jO_{UhX&)Y<^s^91qjZXTPh41I-;v2$N!r^?0=|Lt!vsTs7X^R@C%mSeMue{v(8
z&J*as0(n7Z;d8O|ZQP~xfvww)T_he`O#i|ee4npFFUU6RMlR}E@IU$Gy3Qu-peTIC
zXM2eCfcl7KW2q)=omIf7|2*f6@l~lsdWK!}aKvoa_=I=0r?&N9a{9ru<mo47D4^BB
z`!gZzGWm84<C2de*q=!ge<K;y2SYlRdY}5kR#Uz$AC7G?H<ls}Y~!kT_QAF-=2WC+
z@=SRyg1Ho)4R{FfWBJneTfQA^9sh}aT5OjF_GsyFC$o@yLC{Gz$u?y_Yu#S_oy(5?
z)gEi75?dqQ)29QPo<)3XqvBh!I~`~z3+|GdEC08Rb>*&Bm*+v8t9(JSEm<pO2HTfG
z+xjksPjKxi(Y{o;Q?QAy4D<EJU{vhw9sfnx(u}1Tz7x0BcM8TV<M7st&uedTU9dM9
zJj+JN)dn2e#|ZW~gBT`59-}1ngE<o&Co0bI47z+vIp}2YGto>Cdy=vJJ=M3a5MFe@
zsqP5Z9jB*-9|zweI5VtKcMxl!c;t!1CO^e*#VIF{HItTnzIPJmL9^H)rp_yS9RH{8
z1<!($so-!bIE;$d7>gIb%-KNv`<hdg3GgO=RDT)b(YS{`Ntx}$H$PKh{-GTkPkkn7
zrvn)J)`T<v6FBk56vLU+Su4i$KME&(z6DNvT%5DCeLn&G%M>rITo9~r()>4yp{QXm
z9eakHL-{F7ntNY<FF3=0k*x7yu3;?HG2mh1k}vdr7~H4j<C^8YpUk^7I2HX*U2<n{
zya@LRaM?|Lon;XI9q37APl4Zp@ayBhzZ~%#%z?`7rOYdosbdb*x5FH$oB{WaPa_sC
z#ytS8%iaoCz@vh%m^Rd209%sZ#jpjm;g#{=Qkem8(RUwQ;5vJu*SE!SE%Hxztrbl+
z_kQ#OXcD|a2X;Qnz+04YO<Hny?@8hfM9<kvymzAcEO?p>trMvGq|5K1ANl%)OTnTt
z0j&;%x1W}sO7o)DapaY>^sGLEwxZy206dJR7#?%M{|E3C;V>$C<!(yxipAlzrcZWj
z4x_^7wSuv^chXdFRxjJK2u5^L88~|bd^*^j*>`&HM57M!U^??ZUGmkJ4c^>N@586c
z1hhF2pX75LBpW)Q%Pjo`xXfNY2p05oF)UGkT>oRR&|e=c6~J<S5gxDf@R&vC<*pRJ
zH1~dZG<*#H5<Wdzd~+r{&6sjCMSIP?r@*5tIXl5?OEl|3bJL;OKZZw@Sp?m&XJgNZ
z1aMi}_3`M^hl#SDp-<7K_*{JlWz*pEEwC}h!LSA6{2zy{2)}9Y8|4g*=v4C=$d@$u
zHPBcVS*3B!)t(&V3~_I|_|-+GY0pyQ6@96E-*|l+#G^^%O;CsVvUsv{X#OGhI&@c5
zFFT+fd>_<<Pi#HQL*^f1<j@fR1pP(vTLizY3=HZauWUW!m*C9(8u?pP&kU$HrN2M)
zhpmThQN8AWL3dIwIaqg6KZ_0t?5I=RL7Z>Z9;NOf{`q6u&`W{M;zCC@o`LV%u^+^r
z*rfJ*D&JY2A7tIA@11<7`CjjTf7*ZkB<<<$pP~GJyFO(T1?4_Is9pvCgZT|%)76ca
zfAj~P_!n*pVoi%}nJb`&K6?f`E3jiSz!9&#*2>pvcrUxa$pm%{bYyAi6nfIi{tJnd
zL5>}V|JK8Q>qmR`ZIbcHuAPpJQ_O#!jpNC&DE=N>4q79AtB?P@GMwXr|5T<=Z%B^O
zpTj(<jAW|g!y{ONvFls%ZU9`v|LbtM(Eoo1m&y!)%a;chF62R0IgG)(we{df*~`SV
zJ}I01Q>=Te?G7EQoxsL}E*i5w@7i{J-m$;IXE1Ji9$}<cHvydm@~fSFU;2F;di}`&
zde!(|fG+i|ecyA_n|If?Z15zo7t_1waPS&pA#-uAHN^L!r@hd%=)uwvw%y>fd%}ao
z33Hz1cUtsQL>K2;GZe#f?lnXI-hkFPPy8|X{B>AB=Y8v&5gy(JlW^sL2mQ9Nk~dv&
z7sFb|9RA<JIssUZ+c?2+Cwmn)>6~}49@`Es6(h4Dz$JJsU2;e76UZs$`VxF;U`kXM
z{U%PO?|DVhZ`MYA&sh`o{r1Of+wsS&-*#O+v43r{f%(}2--h7J|IU~T&qeUz4`-bf
z#)m)3`tYr-kKgLVts}JO;rZ&3@78~Xos@)+*^B%`HTk-%oFeDS-uesJ13a%&dq1aI
zMt1h%Ke6+OkLdKW(fIr$U9T-OXUE_dDP<oh5yt<^8B6$+Jvq*DE54F^<oIA3yU7V$
z&wgmR@>mm(n0Pn&Ypb2i{k?^aveUG8q&=gb<C~C-FJ-@|8Get#>)NZlnEmW9K413D
z=I=z`0qZ(%KQ_Epv=a1fZHNjdF5lM*`dCIEh1K|U$6KFn6@JC4+v!vNsbBS}+!DtY
zet@;;e00zUJ6~JooMn%C+r!X=_U}U9nQMJ4cJ0D5duInaQofg9A1}mt&$BD$;lIBQ
zU3PsZb71}U>A&}25e$jmVbxo)8`8umcXT=Nt;7yR$gSGKcRRj($ydQ$Lf)MSz8U$d
zmR!U=Lg-8RQ`3vzI<5qF9kLe72m4cp!L8?e45esefbUW5hphiG(p8TCvBmd4R^WdO
zmxMX%9O|ma=lHPie~j|m1#atqBu>ShA4;|3U)+yhvm76!=tVwi_opUh{nVx0H;*4O
zL99ym>JYxi&;Z}G`k#ycvBdfxz5F^F?=!@ZJ|vk5yixQ|2mGUbA>D<;S-L!H)zoWa
z%-MZ=3LEFZkE@7#u6Ju}ECxDwoHMW4#xtuNe#Xp~@D+FC%U?5O4f&mkyJVglh!dH+
zBzhNg_=mRPCSD&Mn$kP%>*)NTauull3-qD7@Wler=)P0v6#l!vEol9}D_H+8)O^6h
z0p2emW?(Sh|GT*6f&q(b;rSgNo_EQwJKe|i(~;>nobhpO*lWpw>vnKmf}ghn{D#3V
zXHBhtH^6Tl@CN?Rn@^v%G<6lv)W;V8dmsF)yuOMT)pMPb)PMQukstOvqvU~Pf%sp%
zZ&;^WzaBVBA|s1&Wa}Vvx(D$}2R=SquE^gWw6FFG&xKxu_jc7&w>Y;x@gDf#O;-ba
z*K?5}l|yoO1vv<xL$<WIvs2GvYfC;SLuPwl-xm$!)1CO{gFR9Du{?TPw|vt&M_SU=
z1AS<}w<R$&r97D5rOkW3;Cwd+ZM2QZUY&q8-*<=kZgdJhlW<+Uc6jn?<;Qe&{~S12
zjJ=|}?M1gyXo#4Ac!Ik(?R)kl7Gr1G_ngnM@3->)0ssALUM_^i?<W2cKW1VvYq%>-
zW)-;>1eaS$d|tYOJ%#XE!AN{SUU07g#^;%%#K+i6tMSgf_aHClp)<L!H`C1;pM8ne
z2A*;Ecw_ewC!Y9nU0ly9_%DBaG5*i4@M3J_o2waN)+tU*_J{Pw$u8}aE7mu{T!ihu
zT^=}&Pd>A8C;Xt;Dm!<?#$fmEnzH%*=s$9F=^bO}25ytBkgwk6cX@*QkS5K$ceiBw
z$x!;}PH=|)*%e>dkbh#t-c8btrO0cSewXc?v{^DYOT4w@g!!xF?(k4z(!{GHvYXDM
z+#T4<$x+GO>3huP3BzC7q<Z!ArT!w+6%57&htwDDI;g9@-w>ZuR_&+xulDocyV!m^
zyW+<-p5Xf<_H0s}VpwH69xiGlfHAwbbaTju)2s|_7OZCY9>!&={)6(z@wrE$-&hce
zeq;C6AEiIn@uT!n=Ju=3@SU5=&BP<~;P35k*6ks7=|}}~VHv;ivv1#UPwD1a+-=cA
z&cc?J6F1+%Sd~k!g*YFT4O35LpW}{M__)fUPjuZ8(FAb`M}E$C(C%XRQDqftyMgbV
z|J}o$uIj$df5~or`uxSvz)Wak88(9U#ez9+MmKA|TOM$Fh4)98%QatrKk*98x7FEG
zQc2!>`^lwU+o2oJ#(eg%mdR)ENB?7=f7r?u=1a8q5n>QTe=X3_!?eX(ZP$iPe!Eff
zi(&)35_XQt&R~wW)pMV{;a;?6${Vw4QvjcZjc1FohXs?R2gj@5AsU6=ULk*$`mP`!
zSYMg!sFeCvKWfuq&&9Us$M*zu62xi?PXXN(pA!x6p?=k#@@fhn7EWktK%2;u;5<=3
z{`+ljk0-HVzy4O)`vmzQON;hISS#!b_C&DZY|fALSH1O<-3$3+_V^IbHVxJdvc<K}
zp!#o-`CmTAvsLGKcK11+eeN939uB1%zW3(F^x{xzH0!%`MF^X;4m+#f-aYdlZ^=Ix
z#`X=9ADugZIrE@Bmp~WjOp$2yG=7vHf`b*vCh@!CSwhePc2p)g%-X@bbnd8>XI6%>
z2cfeQ7H`npYqjR=52&xagn_J*4XimzGpEytzcBK3BSWxbIQKEl-VKNyoJVG-UL)ph
z5_VmV-;zNalrs(;;-EhzmsZn;=x(t`pW96IJ*m_9d}Zg#*3-EubJwyRe|9l#NcYgj
z<+P!(h%P0&irdq;f_RPLoHx=LAe}dQt=1upJaKlw+E3?|sRZ={oGH#h?e^KZc5k=7
zQ+?{((y@gNou~0n={(W0NoOVtZ^D&uRIF1hF9Yja=mk7ldwNhmF=%YCji9`miU%RK
z#j_7SdyV!mZ2e%)i|13g7Qg3^wFX>vU}w8uayrB4n{ITCDG6`3ePCx0dpsciy&ajT
zGgI{C+41UU#$03x_DMuEHZV3Ifa6rlu+BNiDhr1nAF%#>^W=$Jhjy;QFCjdO@5TRt
z3^UOgDa)Vi8wc{mAPX$LvDV5m?;-A|kZhW#dtIRERkY*J8Rum$Ol_r2)zx=*|2y(k
zTwrBmt_7Mwo~84rZTy^K6-7@Slux5i)rWpZ=|{f>W4KuUCB1gi^xw=o)g8{gv+0qh
zT5IR@C$L>c+26ai?`<H?-`kVc8e44*kfqTJeR*wO*O+$xWXq=Uw2S?3_pwzTzInYJ
zx~vC=iP`o|ee{{|>MGxh>Rv!S&GUF{T75T8KeN%w(0$kDb3@F!6VROQqEY;yXdz9k
zRA8g(S(In$@8M#cxn3V?|3}I>&-c@Ozf7L06SrQ|8O*g}ii>$8#ya=x3NP;AR7?LE
zJGH;+*7jh&{$R{ScKmAVchIxmFD}M)+UwuqS^N#IHI83$M}*?`RQ}mwc(dNz=y?Ut
z(~MiTzR6Cu{m6f+cfw^K9$l|a2lMs_<@J6Ixy5U_KUeitS8W-yhPcFVR}vVMvqp6M
zC-L=Q9G!!&1Kp<Y!TKLR!gB0}UFAC*odHX=)e{u-#_5fTXHDuyXZQ|>QcXv>m-)?c
zoo#Q9=TpjOLTB6Glas^d2=LCgBLlh=bDBlQ=7=2$Xh8FyWB*BO-$35znbsMy^#{u<
z*)3KEHAn{ZpW{WoRUHRU0d43k(rmYc^Q%L>m}%@~olDw*Y{;|DIE|0|wQJ2;D<}L|
z7Rl-K2s5i>qWqa9UFFbRCBBeV_`|HeL0@V9tR0mcpOSu&-+rQ{(Wzafd@J9R==y!E
z2~@Y+pL1I$T59Wb(2wfP_UjGdd**mEJBk0s9mn^0{LK}_GIRISOn5Sh&w~21U#h6f
z+`&H3N4XP2^-q!WTYW5sPuW}EwJfm5WalMHQweBB<$gyweIMal@MRa5q$c_BJ?!fq
z3t!f&1CFayel&2&W`CG5OJ3Tsb04JI-9qd>bJ-Z9|HS#$ZrT>aTC46Z`qKK!!7p{}
zJTpt<d5Bn`lgJ3!>X(Ujz(aI2<7IqF;!c5Ko3Hb?O+mNcj4lQ5+ZLh!rQb)=mh^2H
zpM&&i%`MR#hTpY!MR#-)kFItU6L|@CdJ-RVU<XL253mEUHza>wBYtSY1>l6=f~oFJ
zWEgq~n4h$BJFNbaTGnXI_^0&#qmpr@PUaQ(P;&*J&es1VGR+09q__Uw7WgO}#t%(<
z_hv%lif0bacjbsTJl)_xgU;FFv)Y5tdO6Bpc#?Y>hzoa56lN=aa^YG2^W5lL&wpQ-
zwV&t0@nd|4@C#`UV$pY{Mv+TUI2*yYa$V~zU7={qCH|NP!>;lE<Jr?2e@2~l))e|b
zPG$Liisw4_dP~^I_XW<)(tRVGH?r6!%fW&AzJ~elL8i&J!RFo;tU;ioT_zf`Hn;X7
zRSx-H^?lmwvr)p<f3VHkCE%@C#z$FK!Q<NkTfo-QoN@1=#kGItPBMZds*`*96hBwI
zwf$e@`;goVK5vbEi*#+JKiwyI8}qjhS)q7S_I2Xojoa`Iw1tU9<4(aIaGR7oLl(K*
zE!E8ar2Mf2dNqc*W3v7#GhTNM4#z)h#~{0h@r8@%q8&e$=t1$C#j#=K^T>4wU4H-^
zmtPO>@w=RR*V<_d8pIdk`7;v0rTYW21^k(Fc~3d=w#I|^!iRjr@@=bLR`=m@7R-?A
z)8d7DF0D)^mRI!RHaN?Jx@s36NGA9%np2Ef@q8eMw%I!j8JF}Y{=Fk1@TGFv2fF*u
zPh0y*{Fje1_k+rH;1B7aAJ0Ar=0@Me>tD^i$&N_1oIsW=;NH+d{FexiNd39qg@>fR
zdIsOr!;#dI*Z5u>Nj*;dVd4{S<=I4cIF;19RpHcr{27V*aB9BVs6R(p`ML)8SszM$
zR`t70>X)kT>%3r%&E8I5u8QDUHd1sxB63dK*7AaMzt-TVSU*|4<=eLj_|tH%*5Zvg
z%9H3p?!l}|f_Kd&{250kY;%!&I``Ae`K~B?F^Zo|BAeZ<oVfs(bCGW?w3SePM((zh
zURKWJL=?X_KCDlb!qdo-#pIDDX7at1X^j5kmIY17NZM)K&z$x&$#2P83BToj>Nc{@
z(j4!nUbYBVdMDWQd>{JeS!7pWQ$~=RKRO2PfCXF9>J^RGK_58Ok&J#T-oXKTg!qi}
zI`3xittZ|M?5tPoh$sJxi_Hd8boMsq*`c0n#zrcZ%^mRIDb`ehEh#%O$k(7T=Fo*2
zU(A`1(l|Evp5FMc@Iqn+e0FkJjpW*@k=z@IT`&Cokle|_+jl5~O}9X@PVK0i;%~za
z_cl=O$LQPbybI3Uz0B`E`Bp3w2ibHkGJ&}mC=<c?xn!cH5no2i&)m;zUR-+NInm!x
z*6%u>Gu*D<PeMz!edJXRIFBtHhW{~Kb*kk&t;x5YBG-VW$IC>Q*hk2G+03%xq|=Wh
zGZnildfY-DUfpl0_o7MB<}vbewmlqLD%w1`o^#;Pb)nLnmEJnczD^E%taq!?8g1KN
z-H(co^G$5f<MK7}J9yr{ct&aocEvGbyh_KIS^AGXv7lIfU^k45&Rb^pD}s93lX81Z
z>Z9nj9&oFA$h}M$cv}XYZ`JwSgnz!ZX{>iXS7nVU9m)Ph=E*R3NrkzaLvmMn%lW;8
z`-YPD6yFs!!QNS-`$|eVbBI|pGJvJ{o+#m{0~x9{oapBz&a8J>{c3IHK0D+4$o?nJ
z=N<v@6VrV|#LfooiN`DrA-A>9g6z(?>!H)}CZ2%jt`#1EAAdrXct(BRv7qD<&0~W6
z5W+_>{uVE3o)caYn-in#!<?~_{x7V4{;CjmSjPxp0N%D$tFD@<+~Cw5%%_qCgP#So
z)qUAOUEj{0*Vz^1Wm$MF{-$~Cdwc+YKsc3+H0=$>Cz>jzCHehDM>*tGfjz4_@&s%D
zR7mc|pBMFP$8j6D1K=b6S#|9_seG-@)4)rDanh1IcD(XtXz6hN=OPW4=v++*{ly%o
zCZ9UJF~{DO_(ydN^1@Zye;8<k$W{yB6n)hpzp~J04!nq-MK>|%OZLz1<KA=h<qM*t
z4^Y>U&x3Q1CfQH>p<9;qs;zr~L2cAh&e~Vp7qIFc@6M(qb1vT5`TN55<-8ZH?zI{p
z_vdJQz<LZAa`dBlE}q{o^Sk)d{qy@z)R!%yeZ7D_L{B;P^fbSc>3UZzSL{36hapyw
zJoU7p{<P20hY#j@XOVs2aK0kHaG)(=>6Utf>E&EB<PK_2Z4I;~Jo#qVmFShhZCX8J
z^O+Ir5C7<Hi2zpV9G&5{@G!2yb%Sy`!<+ap`~-gbWGk}P)}uY~;@i=>9Xol+vD@&$
zdp_pCzZ~RtvGkB+P0QXC`OlOObsIh`o9iXWhtjqxc@;78))!^tD=6~?a#BkEN-n>`
zIf}MP=>2~An@N<JyovgGUcPGA``gG()t}?#*^)EQkoTpiPF%WGyeD33yL>=<@kDje
zyDJ90dmnuPhpksX;9Vwh4ex+g?@r<KX}hjJ&r9Kf`>rYs9@nBl<NDa3_7)ex@reQN
z;)zewR{+P|Cf{~6w7l)Nk$Br*_Lq~79sQIMJorBHZC^A+IbpoBtpVM8bL{1Pwa<#y
z7v8&xUGJ?h8wS4<t;i1e$RcdaYaB~kmY#@($udWZeHlz|c8|5lmJ(gb?ipOp`rK%@
zzt7@)F_S#{4*H>Q^(P*+Ji>qAu;)1X^2Gp)_`tr$_H~2b+AsBgYY%Ji8cOA%`*q$O
zsY5!o-s#3BkbZS5P3kJ_C+W9l*0i-3bI&v~N_n<J=<vGhogI3nvr=^?@<QxP{rbA|
zdu!T}9kK^4jQDK@yPhS+c>dGiy`CSV?F8#}hZw$Q<bF4_)x(D~cuN!b49VGq9Tw?w
z=9(SRxy}v;y;f&RZC{do&DX`&>b$$97w7?e+Itp-cWjt--S_|kI+2YnyZT}L8LSf*
zG+#GkZDP@FJIWb@)@<r4NxW8qap{@H)q>1#VO-o%QnfYGTeIGnOY5Cvnbt@%@E3dj
zi3weoT%x-Uym4z>>%+Y@>iafq8qS&7bDwss^rwE+emm<t0~|+~m)nSS*`jCU3vM9?
z1wO8-XL*i|G+t{twVn3yS7c+a3;Y?yeY@b)r?<ZM!5nv^KV=X0?O8DHVjo9v-YLi2
zYainn`zXOYD(8gG9zMdi<s15OJlogO&)~Lw+jrgD_yhW2lRv=D+d$iQU95;tr3VX<
z{@5+WS!i9PxT|1nioej_yC26@h5TKoTwB)u_2aojCrRc<@;3qQxkHgPv$Gu8o6*|a
zAwP9Dcfd-IS3<)Yug3cG^_;=xw|L?tb~bdBnaKRJPS0pwqY*PZfMak>$1>JFA<pM2
z21@>N#X$uzRg5Xcy0h;b(oW9js+``doZ_xjCL3wmn}jC?yXYF4<{s64IVrnc@5Il@
z>2>AEMeJL<j(i6D{ZsIgY|JV0PeQxL;e`qC_Hov0vaeV-&B{Sz(%<OYzWf>T6D_7+
z?3i^$ej<FBGkkvvI6+4K7N6ylp4_wZD%uebsy*kFwY~c0TWhRl^n5WczXB}Z<+;|o
zvc>)a+t>P@fh}h3u!&WlJ?cHPcGyhq9hxfc3n5pO&PY%0n!|clXQUnUZeW{*Zuxw#
z+MJ4?K;!%g?}a15RZMfsI5YTm^T*t34cAA<+G7gp7LW5dzU2gW+-cuJW$xf^yOZh<
z9P9sa{9ww3(_h!KdnBLjGfVINdSK6+h3)okZ0JicFXX@cK4<t8%W<0<llQ)#eqD^U
zpz`P7bFb3cIgsb96>V%|H}hW^b*x`Z{^SJn#CcQhH^bk6Z!GYOh472T@Qc;r7vmlp
z4+pe8n9tksb9sKT66+T$&TH92U!0johRbg~v1=dxtn)bwxep(f<eGS{4!;t7lsDwF
zuz0}FC7+kdiiT8HaTj*pXm0`gSbcLfNS-102F%r9yax80>^8NhxT$D~6R$x2vi_>B
zH`6ZHoWc*=Vu{hIuk6CtQGq>8E}p~)C$1cd3EeFncH+?zQ?nRfMS@sNmv7H!<k=qG
z_<vO|L5#_2ct|;i10H%9e)>E<@EG4&{1uAD&>b2{#;UU7w|&^wdhcq#sgKvRuQ#D<
z47{eiH_H8<(4EPrYijCESwGy#(WxfE4O|KG2n79qeiF1moA?3O1^W@Uf8s$B$c~`z
z;(qnq^Zl@=O`pLSf6x6BgZHDf$0NH~d2s3;apHADObs?drUSiMmnE+ALT`W6fxp=o
zwP%6Tw4Y_)K8!4GzkwWAx|bRm8B3VdTw;Kl!H3GLT=DOA_O?{+erU;1S8#c858j?u
z3-!8*V+nAsF$H~s(_O}yXyw--aHz7+636kjWs?(ZS)H#h<~y4!ZxG*kycq5(=DR!C
z*Anbs<GWb4s$XDP7xb%n*4ztL(ZZA9PqNzLAD#1SWSC^hUgemoaN?4C-S`eZ&7CHm
z3@q(B#r{EnC)-z$6P0@KhR0vNo_#wWV&2Ya6Es&br)P#$H($tpHZm!9dRR^1OFK;N
zG0Cd8YqJCSAsG?)5hWu6ANsA(lC>xP1Q_3*&wXFn>V8|nvj_U^T-L+`Yyt;=Yr4YB
zQardv8&gv3ZLM3xo}ywoPea$lvaE}*XyAT7crs!%Z{&lYlv3P^><-Oag8eql-B#vx
z!d)w&W6s+w4%>ajRq&qb=*)a5J5lk+#4Jqg`V91&IA5{{yP0@I`7)B+p_F4S8yk*Y
z!CmvAQPP#6)JLVm_*T6N>aRRWT;4@*o!2Don326T#chOXLpE=Yc?<gfAbne#hW37d
zOliM@w!Vme#e}|%E#A06^vOHQ?_Pz!R5Z4ja?-ml{;p;4?Xrnxdy;awW6&u!MfhE+
zGr`6as9bss`){>2FUx``Ibmnx>*)bzOS{&$HL>f1ew#_&Ydi_)RPsNnJzVO_FQ~mk
z<tQ#(WT;zOwXX+%c7(ku`tAlNL*C={n}%;Je8lIet@KEIAQ9FF-X6-jn7@Z2`%1Cs
zifPY9n1AM1YoMOmfqOn3_O2Y+ZJ{dJV};e8Ef!|qz23Yl^=-*u{4F73@oUZWR>s??
z`F|Lki54uKL?>Gsuy_LQ@Qi*O8FKKrS8{eo>mTTa7^`t78IOFU(Yq48=FgGu7a0#e
zV3*A|4ICB<C7nIes~54yDI9>O685`<d&v&rAWGZFhrBJvd(Gu#_8icpuJ$r~|GZ0r
zYuQ;A-_#Q<0lqI`-vD2)#kXRB_WefrE+kjM_r(M8okY*5z4Y<I_F~*BH=ywGY%xBv
zlPo^;TsRW%fG4Zxw70AK$-i%Uzkf0^>4n@UL#Z^h=eC66E;&T7(~peCmepS89e-f`
zOdGsQ70XpUbI=*Z@()_Ka8&fid61jF9}dCb&sRSjviHH+!qNTlW5sRO`*Y9TfSk{m
z-g@X2@2o^XS0U!`(|*5U^h+N-xD)O8&jsf=$}_gA?XR8Q_;c?!wi9a&=1X+?D9?g8
zbIB{or=-qZ%$Uo5p6^eF?hR{>cAf|8!xCu5%2?ig=f=|;Z5`Qi(0lQEQ0uC8>@i!n
zX#HjDg7ag<HEEs|Z+3P?#>S)SJl|_GvEEisf04bIyzabAqU+pN!?}Tv#hIUsyPEGG
z@_#Ge3;F*WX!&-NcVFRq8Q(p8-^uquzVQ#bM;h|ETcN#Q@c$Xw^Us#-pK0>l502_Q
zI3|?IZ8rG>&&gK-O+Fa$d=}Uq?;d|<qf!6I=&y2Q%I;a*9Lg7N4dr`}v1V)G8GgEd
zex2W2`Hem}%JUOjBiQMqtb9HBXe9r<-Y=}n9NQcLM`k><m^r>BlFvU8$-nVbB<~C{
z)$Z02DR(2jt`hShw`X*!r(sm8u$jJ|3UPlu`x_>CH8yo#XTjQ5n$EVBq0Yh<-hZ3V
z<9wdr^Fuy+l2<Q8mbx3U|JVl&#@qd%w|?zguiqGIJhmB}a2N9NE##5j%AVq*4Zzd@
zObvPFAobcz=d5>L^rw$yBTah)7*BmWlD`=_*ZVl*{5`s3bzQzNGLktJo|F0-_}$A|
zS?fyMH$H0{lZkzL`r*;3hj<?+*5g#g*wokgJ%xKrgSgIee~<o+C+aiqQ}x{E%)Rjb
z9*ch8yCl@;v=#5Mlojo<l;Qp_8@YitH?V&+oimj#XIrweJ8!PD>z;oje{M5!O6wcx
zgyYQRv8TeBppL;OY<Mmj)%sp_W!v8|6uN=0Zy#aoT3F9DKJA^jz<N75wL|PV<ems;
z)K}1+_D9g=ndV{gO|k!_{g}ljbuaYLHY|I!TRY)=?W14^%*u^y$VgUCCnj-(_A$Vz
z+LR3ab8>Jg7gP=$C-C#PvENjW9VA_n8`EHY{_X5r1pP|Z97LwMv?-s6&QA1zi+b)7
zMh4jR0Wu)}kGxBiqvMPEe;OJ2NBgI|`d_R)hCkB(PmB6rv6`5&$mAn+oT)zbZSG=w
zydi%LeT#l%ds{jn7D#jzj6w6Tnz>XiKl$<`1AEXR?3<w1i4XlYzG~hZY*4o??8z?q
z_FH@&$6l46&X!S5u50nNJjmx!K0iespsU;l<Qsb-?t0dTv$2ukFM|x2sI@~Yx>&sW
zxXC20Fg2DhD<`B1tHaQC@@ltb0<xO#t^Rk9|6MsT#aX&e(M#d+a9-mOt>m<y`~)(s
za(wELZ2imd@1tMjcP=~?KKoPRBy!i*gO3TR3dZ^(`|zcbJv>WDx0YhVG43a7kQMXa
z-*+Eqx+K(?dyuiLrtWG(8TOhOCv=(57S#)QOW%cSfeZRB%n#=aAL6r+&&_;V&RZVP
zKYH{J$C?-`@VRY??=k0@!Y6^h)vtTI%7@RYyj@RI{`fMlyxQKP@^^agHTH$b3-Dn5
z?Cy#%cXySfTyUv=3T<JV>)oyNaA<M&pohD@w$~46J6_n>-?rLyH&Z_9?Qgj2M=ZDP
zZlPUr*t;{C6JzY&bm8V9&^t1Let8ymnIrXQ=i!L~ZN}ZFir)Qj(7R_mJlJ~A4S1Jv
zf9j3PzI(wRTgxO%FLrFd8Z@@w3>w=jgWBsUg5%(TcX9Vf5gezPlVc;77miGh7hdZx
zH-U4O0q%3?X?)Q6BxgzrTZJ=X#fC-BvPOu9Stq#1fc<tSpR1f0&n-hAo}!FlokpAN
z!>4XSzhz%}<*S7kLiuRaJ?j1<L>t-Nh2Qx9_k^qti$<}<eicF=pPwq6=9ze<a*W3_
zE#9~2#ODwB4gcU4D1Rp~oZ|adzUjmLB;T*_-O6`Q$lLctzPVfL;_h=}fN4UC^IN<d
zlfq^=dx`Y&4}IPp8Ok^jQ~fo@>R`v6!uH%Le<AYwInK_+nD;fv5cwl3fCZY_W|GA7
z!e?sNt})d%_R5-yGaG|;f;RN6cGX@0M>o8kYdAlpy~>Y#v#^mxQkA>a<3+df!||l@
z9zy5zy<qq>vtjBK?Dk*H&BXbisOYWP2&~p-dKvje`{MbN_;|iQlzdUXJ*x8p4$q(C
zzs6v7E^(pV{LX?$ldVljN4eC~7(NW_`W@J&ifN-9F?#RmD_6_?+U`rHQSa*eZQE_e
zoovfw8RrSwaLu;Q)uM~tUvS@R!&q#bsa5-?A-hJ_gQtmIhhy}`?_!y?fiVeY#cRq&
z6wU;HZlT79%q7kMxy4>n-GF*-q#?fyIdKd*QQV&JcQd#Xj^E#b{jp+Tf9|qD|C<K>
zKelyl#{E!zej$EJ^y^J0k*zx4f1-uGK;+}#^Zgc=tcOC-NLqNM?y`#hybr~&9a~S^
z$n2nPwW+q%Ztzk2$E_VQq3a<e8MI^XDzt4=H)wk&I=#4U=_k9!!Ul|iGsReIo&VU+
z$=%)ruYOzfQ1NBnRiAv6v2Z{5vzzMP&{<c>fWKiL@K2<=m0uM5q67L`1^w4^j!^TV
zcfZj)Y{wk-=bf+XERad<<yr2h%)R&{J2iC+vEVjeu>PB}RHObs=)aGarEcWE%iKzr
z0>kU>w{^e3ma-3H*GT_K_i<J`|1olY1aVNJsWj(CRaUfU%tK`^I$q~ztq%X^YiW=3
zh{nn2IW}4qGHt1O#?1N(zFO=E&Y%3l=k!iv6|ZK2{cnMNFLXDlM0VdK;ylT{3EzlU
z0^S!7!4H;ilJs#1x>9@Z7F}DNJgI9YbiF~i8KjRTN5x|XzsL%e;s1K^2{y~UD$n;9
z^$k8m@4`tRy`!U}uNSs|nK8=8^Y=PuvDL|6d;}S`#mOIi;mwV2;R#~aE+LPvX#e}r
zj_d;2F;U<SY^xA{u#?c?N3<6My!+|5`x)}4Uthg;DswP&NqxK|Q6FDpF8uN%_y9{D
zA^)oBt(gmKYoM#S@M6g~*mLA8Pswd6XR06Z-#x-Rv%|?G$z_}N$CBn*3_Vh7B1h8L
zg;AcD{7h|{Sp(WkJDC~yQ;MI-AMZk|!ikG*<~~j=^iSA77+IHbc91{T!@uH|UX&lh
zCC1ck3PGRmj|-RhG|&-snOtOK+#IGJw7ZLYW3?U;jptg1r#wHAc*VpM)bac#>;;1}
zE1!=SX1mksGimm0^B38>z89RPosICusk<BUqh*iZTAxv_Rr$Q$BY&AM<K*vfB@?JG
zTix2m*ye?iVPr4<rPaeyJuT;@qRekM^3wBnOzle3w`8VswlGUD>?E!zN?TU;`@W@i
z;pS3uM4^}OB(C0tZe_QJCot~F<bL>n@4@eocjFD<);hxKgaNRZbye~_GzfMp+lpYX
zkZ;U~U2qF#_3QbBCVM_1jUBj^H}-FcUs5jmfZtx=J|y9NC$dHIOg#7#J%b)KmxJfA
zpm_`C5xp&2TzwX%VH2?yF4TlMht7C=#-*CDt8>eS^3B?}99!p7K9}*C$>&NwrR`VC
z&aiWAanwJ@+5O;%@wi(|e&0XAS6k{bg|=y(*<V64&ylBKt6eMXGRQ)$SCKip40eIL
z*8j~qb~5;LABWzw?if2illT#Sv2xAH<f>!LlX(63YG3EKIvL3)mor+@nbA_`?&Q;^
zacYkJoUajkdjoa=bqco+jhl7+4`J6c&Ys(cB2Ok)bq`A}_{hh-wi2%Z`|a1nb7Sf<
z#+U_BgHLXXU%qFgE&nXAUFVl~|AX?i&|A;^cnI6gurJlbnImJ`%j}xwcGf$S=zj%r
zBg{8#JD;IF;IU&t_Gry@${$POH?+5zXYi8zypQdEb7OP@<y+>(iJ7QACb*$<3%77Y
znZn3W{=(xv{J$>D?s?98uXkbef4ToI`Ep@4^p@$N?ZO!NIx@McP#VgwqD%t1>xrN%
zA|aptN-h0~Uy^%)Y3AJJ=)a|jG_jXI!;XSC{(|^gjl1HLz}HZp?-^O=$(Dw2zFRmH
zJy$|Y;3I01n{r#Pjn816w{J81z{ol9mEU(vdbEVR8pt*AOqBIok6&(!Uk;w!ciJyE
z+%K1)-0j$&<WCBH$BCCDO={<tiLs8bmLF^K@O!3xxXFa@uf|MdZHW8^xfbM{Kc~=K
zwfqU_!C5CF^W*UG?n!*Mht2r%BKyI`$1t7quOBWqvyzp>yiDU8z0*Am`-*!ll4Csk
za8-mDZgRmyxo0R@>cq<!r>l8us>|<RPws`)LsLClho%f;(YP-h>&<`Gmy78a3bXTD
z>oO1FA4t+xd9PWTyqq%$w}qCv4m$VIx{Pd$+~1nUhv@$RWn;kb3UhMbEbjMMtNG*H
zI%ANI#eP_4(o;SAnzFfuveZ|8dwQelxcnCUlF27HA0<2>PgyUNw%$uDiya^1()a@V
zQ9OJKnOndg(b7ZC1$0NQ5<9fEKEH}RfbOj~#_^NXbg#ZC9_G6TyRU-v@mBQGzSY2X
zbA5g_^U#AW(!>8I&O_Fl)th=s>#>!?Yr9Ls#Eg?8X6x8^voYI63%QoD=n%6V+F9T>
zjElST;h}Gt8tE&Z&yp?gJl0$7{?ylL_!``n8{@8WSFA-JAv=jXSnIB3y`(l;M#Wv=
zwC~sRp1$q-_5S;<ynoGq|JwC&=R5Q@jWOaIbg#tLyb?XPm3oZZ*4xVShMT<h9_9H(
z{_{uu_8LaVUGQQ1dz|-|`S0-|T6k9T{uloHUwkm`YHT(1hab{iMt{rb4_W+9lf7Dg
z%6IVnA746q!#j|>nj?c9;0*KZn3IP*J0|<{bK5beT+fbKQ&ZUZ0c@5{<kgT25dSx^
zpHD8w#wKzbW!Xb&;*1Tk$BoFLOyXT;wx!1z#MxkP{0;d$U3mXvoHIHXo%}EKlw?A_
zVG4S9(%SA1n(7k|k`L%-f4yMmkH7i3SZno;XYqT5$C7_~0z7=JXHV@VXTRE=N4tMc
z8|~0%FviE<d1hn4U$Onf9gKu`&;|G5Z&#VnJV!KBZRR?0=R#90{^&kdpUK@>myb3$
z@iE{iN1bRT_V_d>-%5L*KUA0{UJ!i;Ydq!QTQ$?k2=+=~4<lPxzjwVsOh!+o<TN=m
z@fjxIn}{h}+lGykq`Y7g{Nn$Z>+=t7i+@<NS=(U`ZA%vPFh=QM$$%NiCduHWF9V!!
z7iO!i+|0Slo4_~z!^T?l+Ked+@9yBY;1X_y*VqYiSya|%D(X#j%uK(0`&DN4D$Y9B
zB5NDagJEEM7CbkY)n&D&?P#Qg^Ht|17qpCB#s7PbM#ve|LOJjKilZ^=)}yl`qfGoE
zV8uq7Rf}v%3kK*TJCXi@{WP*8u+4P#@v~p%9y!i<T3YBE^E5kVjr}EjYhTdVk=5DX
z6=sF$Cs#UmxqIonc=ybb<=x2ZTusSx_sWvxg<AeYkNawPUs}h00``FNWhFS{g)Ho;
zoxA+G_hP4BId^&O{lt=gUTcw1RZpa(O1N=bhsDKL-M^~KxVI0BUjd%nJ$0Gd*6KMu
zPehiJXNGl4sLJ`Anf1%KnKk29;s$BoT!qX>w*GvLY1|?i{-9}G?U<W1-)_S&-G{KC
zW#!fp8K34^$L-QO&YRydJJu^T#x3kg9$-%mUDZL(E6t_wCA`U&%`skko|Q2QhcR&X
zVa_7H5)Qv^#&RdiwfG7ulA9uC(hC|-Pn*fdHHP)ZmXAUw#Qb#iv>`uP!_9j)a-TBt
zgY0`;v^0&quc=mV@1x9&NC`YOwQCEsaG~Jyb;!<E@OFD${tW(vLQgo;es;_5)4yW<
zD0*IKUTik$qv-l0kAd?<gxDf*li)rN7v9;4FC*r@D|JRbXWD2NuQBg2=?dWc4C~CH
zBa!*Er?G#W^4-AoO>=eXUgyHK$qCM!`r#%OSy{5saJTQ)c`b9&+~?Ndmd|niP(G(T
zRB|Mza{=s$n7J3OHBR_NwJ+F&Gxb4C)nxY~bc(f+CRd534lMTVA8yl@t(4q0tlE~7
ztbmrfe}8(TU`=XHkPC6giI+3i2AO7FhQ=Q8?hcmj4Ap0kMrUL<Wsxa^<x3J<$I2ED
z*HyjTXY@DN29ht92f&f!@`85|g9)6PN6q2gP25LP>Ez#tlvP=}VqOASBDq)Fdc~Z*
z;j*>E;g{(eAMFKk8f_(KHol-|$DF+OCIcS)0lx#kUJg8iBlLyI=b2aeLtW-TGTwzo
zRIYH)SRe9f=%t(Tr=deVZ=!5l#AG<>YTuvn-=CQlvi@4V-=g>B-h0*6eB_`pVjQ4N
z=#etrjHz%@=xhV$vl1~=otuVz6(K*6dGd3$oRx?+gX_84bI1RH9|4%xxshS1SawS4
z24uO~IRw95REbXGd5+(r{mb<3h!<m!EA{k+`$AoYHfD47#^yzcnW?F(DYuWgevWoq
z67M3fRMOtbxazLNjwXCJ9hz&_zU7=Vsv}M~=x?O@`%PV@`^x&vY5Hjrd`mb_{3)~j
z8}Rx!O0UUF9_6NSCK7+Pa|`{>|3EzPXQsNZf8w#;LI0l!nF-CqhzpK{j%=Oj@yx17
z=!ND;Xzk(q(7`?RncTs8yN{IoAaSekP>8*!2zsR<*n5H}n@4(W^t@+a8!yvFVi;#g
zBhl)ht-HtI#}UjQ2B)+a_S>tZJ;pn(mOC*luA$9XLOLXz83q4tX}IFZdEg}3aK#J6
z55BH*wTbz6-__i3#oF@W@ca$@r!OZmw!g1ZuP?XpztC6G>+5y!@}Ktg0mfN`o5cIy
ziW|uvyEg~?b?EJ#w5#!|UQBy2(EUpXc?SJTHu3C*9A$q6?}U)QlH<^X%|&>J_^F)O
zxUG_#rClfCSFO7wQ>0_{te&;P>(~nEGlj{l=Xdw8&iW^Q=a1F1Uplq*v2t)Qi0_rJ
z<6p6_)SvjS`Cejliex155LQl#_C~Yk{WxV8Ma=x<W!U`4+4QB@{NUcb5PU$}Z6^GB
zcci2%gnr0|%?r)Z_Dz!c=&^6(Q`@$NwKD#^xOq?eCdIu+u(8jj2PAvEyO7HI?m{YY
zu2_2)cpwkQ>{_$(sO*K+)(%)*rdYuf`NHg-Klbdl5VGZ~JnPemeon{Zj6r(KMOR8c
zZN{$rH*BGDGwlev+Va>*-t9&v8~}H|4p|p-rlwk%zuW1*w%oja7`s#Qq+&Sq7KLUb
z=12q2qNAMUhFlK&@PEefM{dMVaREHJ>EfMN>sbfqx#D9=Zn&$&++JzMr8Zxmy*g$l
zW22B0l6Bnl;m-Bncrf#q-+1)tzg!df#NXX^joH59OHbVZ{!)v+wBrWpIq4hZ{sM!n
zYPm7G7P=XE8-3MAN?N1uvod2`izA<#Y4zmBu>V8byT?a;)%pKtW&#P9QcA)t&}Ncg
zFR5;8xuzF0Nhq{s*ILM0E$(JQ(4yJ>DN8R<SeXE})p%i~8l~<s6tzw21ue9U^(zBt
ztFkJkwN+c?GYQZO-E9j6GC(@N=j(hvpJWme>h6BOf6U`EpYu7F_j#Z9d7t-rzu)J5
z;=9mcmPRL9{?ySFNM6MH($Q3%td(trbx-%$r>QgBSX?>f{K!{J3y?Dk%rlFZES{A&
z#Z*oynf+|#>VgG}Z{R&_DyumED;>1uCzMy6!>ChyF8w=r6LqWo81p3Ei9Er)o{io@
z`KIK=ZP2_>9i4jv$qS|1q+EvlY3eB*5onpq{7_xSOx$a9MuL20#E4QG;G)U&)K5K>
z!B(<AkG9IaHq^hB^i44$M9T*$KXfu@_@r+p|F`I?@~>)IHS0Y&a4DZd8=L5ZnF(Ex
zSNX2(m#5xLY~nym9e1zBtLB=wVzs93r6nt7#lY9co1(K+2eBZVHtW1S{p>hxl82fC
z$-_@_-k1ID;V0=U{p~o7uQL6Ve`B%cVtGG%2fRF*W3v^1&wam#_#h7TMAmVhztCNC
zN}ylO(}kgl^E6jem$-8^QEKY&F`S>v3%Hm47K0q{A@tfSLzCyNUX2X<O?-6V1>v>k
zf^UV2=j~=4HD>aN8t%$;<tNjEY`N995&V?)wxE~U?ZtLWNN*m!%-V?V&Gem1-+)%`
z5l@3hLYsDeZ6IwiY1;EhHc7Ll3Z~0}Nqq~)di(ayY2skehheA4e+4*Pi2pNsqkp2E
zAye3s<kuv3LLZ?!vvo`O4GEJLa?={`$kzRm-;hTlm1*R9<*VWS->B2)7oF7oDm>sy
zc*tR7pw12Bh_^cwS!i;*cvFD&PqOM^#xn{ZIn4Np=V^@J6Pny|TWILKs(BaB5)bU$
z@ZmP`K%X~?Cw`0d)#r!c6#f%9(r6~{HGC646kpUC^B8qYHdbuWdtS&+p9MT~RtFZ`
zdpbM)+rkxnx45GJ!qvj#u3Q<e%1++^4x{K;|CxBK(u2n?f<_*zNk$fAr#;VDLTCHY
z(QcKF_W59Gd^~-UKD!K=Q|m$aa#u$bVVy07PnMx$xeYpB-GN*{Jtd~N>9Sj(YjjQ%
zm*3MBW^Wl_e^N!f;8*bPYCzBH1kF5f&?0^BYtZ)F=tq6Ht^=;SWPh2J-6s1>E$_0w
zlmZtz>aEZB+AXmyxpvDa`DIhN1e#dJ|J|NFG9_AzjE^@`-s-Jc53f+adA^V5!=gXt
z4ErzcTbaGW!pT1Emy+wMX0K>QHuLvspCm0n|F!lyg?TH&dR|dbsWmWtc|qm8(Qa%T
ze9MxrLw}-&t3$;tD_9pr7m_QrzKAZK4^Farg8HV)S=UkS7HCX14cQrG7c-HmE!MVi
zEA}4A1o&qZR%WN2ytyVbopv+hwJ#z62dB22+T*TUY5I8h{n^$M_Sz=#(R*$L-aGe(
zXPsoMv&5d%`tXD|-(H7*O5V^~`1ilePFv-zX@|Y^XGs?wjNqw0`!dHz$d@$t&!32X
zdJ%P<2~Dbq!6WcrS$e}?T)trFtH%@O4aO66H-P5&)tr40uaEs_e;KH_V#6UfjWuqs
zgZ$GDEV*Tt4N&IZeq|*0tx>t0eaJr$s%jVgSjBu%+^!6B)AAZ@+nT%o@H*}8DX{-*
z_&-xPKu-7>PhVF!jPd%Whlj9-(^e06x2QdM6m`C-JxXbUJw5XOT<Y>=^{{+*v@c*z
zU#4{A^~9E5K31$cz|R`5&RcnxjG%S06#1Zo`opa89n>4J`k7$+71VPvcx_~UX|7m4
zf<0mpbHUDoup8qu*RE2EeazA^HkB~C9Ou5gwlub~Yt$$3qIK!;6DAXWl{M*!-ZiO)
zb~ImQw`ssHBA4H5Zhe@$OkJDs==jlBv#n2yALr;HLeNwzbpIFdSRK0fq9{Mnoaz+3
zKJ4m8BlYLP-+^sjxK%r)__I%;F4eb#*dX!&3GzRUPSxtDbIx@9?zL>|!@%LNW{Q`x
zC)%n#k@i9;HY&6}YCI(WeY7<@Z96oQoAyJ!f4UZ(%xo*ebbf?bz8}So-b7lHn^sHO
zBmB~P(Sz>2rBbp^8Sg)(-SkZI&2;mvU68GNg<pCqX;Z!W=2M^2j{GgYGas^Lcas(u
z%o+>E{%7b%CHF|~*b2UKaaztissX2;7cU`y12`&;1mkVUPe(;hp3SN@r@nTtzU}%R
zie&t`J>mQ_t)J>54Ifl!H+d=a5CdQG^_9<^{O}BTl7Fi8&qWs@|I{e)W}3<8`~Du^
z;`)ec9}`1P$^FLKb9Nd&tzSE6eNb&|oBlqi@{^T+tPg|l4_l25($?MIZ<u)%=KenQ
zt?Z`LR$efA-xA3z?BsnD>+;WCT{Aku?anpmgkN-Z%tzp*cKmB2@-f^hA5qbU==vML
z=zOKt-cJpGvayT|vYd}2;l}U#E_jUUQCXdn_WvthnE$_n{}zwv`Wvr5-Kz6ddY8S_
zPj`qj=;zm2Lz|9$G@2{_J;r-ZzJ1E)jgiLZ-}}8Q#<;ELhc)PzTo~mmvjbf1^uIlk
z^NoBd&H|qFzwONVM!r7Zp3eD3KL4BAv2EhRV)02nomI4HwEfRx%mWGU{Q*B6U$_k#
zKk{Nn-mW+b_xs;Mu0L1Yd;gO69D>Z!+ty^;mfrn2t~eYn9Ffe&ILEZodsl3XfAju-
zkLP#2|4!qW_-{La0of`HEXt>|m2RCntLw(4QeTv&Z}QVoAANjD@6`*F`|aai{SSH1
zB|KGjDDeC9CATiiYx~5c7~AgCXN0ys;?;ADo;hQG8Sj3+{<K^D8nVIc)2%&mv_=>^
zM&{edk?y?hIYS%m$cyiM`JGm5(r14ohTsl;<BZ(t3(Nz4tVa6LTi%a-#hR=*%Io>&
z-z#*?OG|}%V_%i9|LqS~SiH!_KpD^ZLHv7vJpe2}8zAlR0n(6<dfEj?{o6886JM)7
zv96}Tg`amYxc##UI_Ie~iMe+v+OrCwusy55m{!0q?Af0ukh_s>*FXPSP38~$|0BHn
zBx~V>wZ-vDY|lC?s{NnrE$OVz1hA*5h3>0NrXJs?l)i;pH%i9UH^aOBBMZJYEfm}6
zR7pNAYX2GXQD=*IMx-)^T}ZgqFPIm&B@iQC0RF?J{OT8DKUg0tj&f&#@)}|v{0s7O
zDnBq&G+l%Yl~z3kff<{@3G#D$?ijNlxS;-g>`25lUQD?t{$=8gtmpFsi%sQmWCG_t
zlX12TiCaJG?6|g_L9_IA>@*H~5#=-7r#^x;8+-PA2i?pYY3yVkzB;mf&n7f~GEkQd
zg^{PmRp<<Ye<ri<9aip{gx~9~TYfRl5DKOe;1R!VKz<gU?i7wDU7sw+*RO*<D%N@_
zzC;mhu+{i}SN#;bBC_?(c?LAp+xOV#*+ZM)k!JL<!o4$TNU|QirS+YqKPECI{yXY*
zsIUKgvV9^xn==)Bu;;z=gVS4>r|Tae28X4I-EN#qn~yk7&ODP@0j%Lrq%ykBOp}jE
z8k_b>ol%(AFbm!}JuF{8a7&z>3}?^n+9SGfT7ukjIwX0rWC$?_di@K_n)=3XQW@#g
z#k<r8=qM?<%6T%7arT^N{qf$|8R)(VdE?YFWQ4n`?b(Zf#*g?`_1JZmYzYi{_CocK
z=j?^fUre;;E+$$&*@cWLnfWJon(50eT}`ktZcihFp1hlLH}i7ff)6VW!?z?O1495k
zOnMo4sDl`wUCxu$=qSy$81q1Q_y6N78DAY7dnA3FJu2m5Z(<(>SKtRaGnpYnkzGko
z9l-|19FuRpvxm9Xf?vsoAU;Gxk}n-R-O4zRacYNPs~8*C{w(`2-yY?Me|YvWe)xi)
zJ`8NNoYh=rGF|%Lh)xfgJ^L)*@#)UK$nOBZwfJDa%=1Vv^Iysb9c1yN&YlitN+Q>H
zCp312lDT4E&1Ol*9~&QRouTQ@o*&|D9=|>8Gg?h%JFu~ji8~LP%!^)K={*zU*{PvS
z$;VRHrSQd;A9i*o<rna4ZN4tM5IK%9L0)Y$;naS8uUZvsb817GaG18|(za|bw<6<#
z&ouCfCY*XVU3QvmW2n2&x7&fKaZ=oVYYKJm5G-3J#UIzRb5eYpp0$(X+49Mi_X}oh
zW%ug2XR`IVT5J1pVH{-&`7Vq<qUYKR<Ns>&Tolhf3G6%h?cw({zrFl^$M0EwkLD-8
zrToHUC-2yZN~Z0`pS;BNCl~z0E)HwVR~A(|wfGXf5$e`h+i|@-m~_|!F0wETi+|q2
zFf4u_Pn}y+eycBDX)?F`0{PL-adcA)>M8>fY)ZHCOz?bmZW5g+{2BW*`tY>!#SAu`
zO&i0H<YhWun47GZo}BNhBM?EahQ6krGB(dh=I@Jhlg%H8M!hzIlviDbd}j2Tjn1v`
zjoP|OXD2>dKg0K;u}-{whRqKT4J!r+{oL`2_D9&V<a0t@>C5qR;``_EA+>yJCFjKD
zKU#aebolQVOoF#mFcnevdreaB;eugFAC`30O)CPU1Iq*JgUg)*bCXV#y6LlEhL)O~
z{7uD%dFi|Xt=!7mTW_{WH`TD_3;Q{%v%c}$b41hD7Xf-&ntplC3WGhLaVf@b?#_44
zFNzP9lE2isfO%@PznvezFDgBkd3n3Zl;Gc2Y9cGZ{R;WzUAu(7;%lPwZFc^ak75l)
z9&0q2af~7R$9;DHm?(~Cf2T8W{5X4%ZOmVheIk_1a(*D&8OS^dZ%Mq9ebX3xO?L(|
z_J54K4%XrqNd9oaz4KL9X{tDW>}JMcStzM`xx*%NxoD=5J^n)OVWI6V@qhZ>!TKq?
zOy2Fl_{Q1th%>ckU(_QrIWJVhPeSO{@Qnti&Yn?~;Ap<{^r%XmmynGn|Iepek9qu2
z^HBX}-1m3vsZG{02Az9C$<71lhd)x*^)c<wZzmRVM6q@zwRgP)KjV%)mCHU^O`I)o
z1^&{Fkqo|4-6itfS%e;mIARg{m3=4Jc5F*+a>FOl9Rizk5q)o*yTVxm{-3B#X5Yzc
zJ4U<C9Fr_uWTr<)SRLR64I>yc+SU1T%cH@^u7l9rvg^THAgO#Q*+WC<$0wMjuig`=
zQ@o-CPp1)Cp~-+hWbQo|G48;Y9oyEh37_*-ff>%;xyfuTyfs_YmLeW@OtON`dR=4W
zo4MZTT;T%m|1WFo8Bl)>OtZ(+IneRw3o^vn_~s%TA8`Iya4dg1`Nuk}xxpKzwwRAB
z+flNEIXhc%n}XIp6G4`WDs~g;n{Di-U{CC(M*O6aQ7^Bog{J9mX{d1CDAB^o+T<zL
zsBkT33h4KSh?%x3q`gsL#RS^SL;jy2y=rj6kwg{t&6Uf$(&$hOe&fGD77AzcXB-Pn
zsOb7Y*UUAa{VaFUjBRT0)?Z|)rdRF?)FnQfd-ic`&)G-(14n2L-a<Lqm^x<~D<gEy
zBnBb)RejU0Hq&vQ-<D=iEIn+8m#2d~Cy3|s?5E0ha9`U6Q<3$GuQl6+x7ERkO?ysc
z>l6n(aGhfJu`YwV;}0v2%*2Wpf)T<Qn4(xPFe1pEINZInAaPH02Q=1Xi1qh{t4*C^
z$7~7)n$of(-HN>kS)$qNm;NtV8mJ5RIn#+9LpC4cW~xtxW+HOM#1X}Bt8cD7PyQw=
zrkUx#@97WmV7&euq(8^8O$ye753}#NHIVH5H2Q*2(YzS_+W;<VsB3euuq83vv_#=W
z($$V%GIfXaBbL7{K<@DHBwpn}PXYO-Lz8J}Qt-X<y5tRbYZxE21;~r|r$z6B$3pAZ
zjx@Jy8ex{^-9P7^^!QE1=_ZqGmVIeqT_vJvTQ)nPE!B$O?1o4tQ$93)x|6wpu2Ott
z8MLIQ=J99vuX-N&GWEg>{JiFBmxqc6Ml}~ARq;C>GI982JeUZ?8-~LxV!?PY5{es>
z$9tfSSfGqMaX#>k4~zF|&y~0?UP_thP}4@*R+|<M#7mt3X@TCfL@-_&4UraX6Q5dr
zHFNuDUZr9#uYM=5@{8=Fqcua~kFmZ+*9?jONYC9v;y=`S%i5e?7U3LWq&s@Gi{B{a
zo$?QJKNfX7lowxp*mOUsIpnR0tXDT{Z3;3sN?FsK+v_TuhmUHDl?7;%wVJi3xr}kx
zSGat22R4__j{N@W&z|>vX9IkOwbp6fR2;oGuTpDR^tZJ2MkE>ibs*U+8T3d*V|+{W
zF4i!~6Ras&)`A|njP=7vE`#T1pXMaRUSwp}6KBh)_<ZRLR!1@`)URXnR;2eLJ9iFU
z!Pz*@p4E1rtmO>a-cZtDr_COr{2Qz(lB-6{Nzz7l_CD_MTN|S9qvGjSaH2DD;>j($
zt}DsoKW!wvHqsA9GIt3lSKPEBy+v|n{tBlFx!`inyov7c6LO#}=L(&H8{hutr`~Bj
zUY-vfjcvaL__~-o8dGE7ty6(zCjFAkcMVT;q>5XXVqbb<A$>>Q)3*ablg!o!tiKKG
z;G3*ZNzUBEONY5~-|c~Jjg5u7e7JX(&wD-!&);aK+qfnV*JMP~hvAQ+*&*z6&)gbl
zdl~w(=lTlS<0H2_H=DMD(7AKp-x7mjVtYsVkob3?$Hwcjt*6*eJNea?--~X)_c-h8
zv(?EkzR1wYR)ZW<1bs}?-PwHq{+ZLQYvJk068jfpf6|%0-TbGI;GoR)IVRs0@}*xE
z4=if`0KRjZcxQjJG=cu#U<bLa5WY_RMbO=}{chb~Cr@-Y<HcE~SFr=Dof`Dochb&w
z?>+|GPPi<dV9jkHuj+q+a`*95{)c*PSX)ih%lDL<?>FT6SG9rOBl0`5P5C<*55FJk
zldV5d7C$(ZH4mQDKwh<>`#JtUmHjQ_{X9C)rbtq<V{|`t{n2cX{)v2~N1sRE@n^p8
zj3mb`FIk}c(ch5%7s~Ox4cqeZ&iXdBednuYdr7`|EBXq)HahE|a}cy^;R2R}&{i)@
zQ!H-n{f@x15m;{GC*5o8w`RM_tfBA6`;_4vn)V&X+&+AX{9323<*B@?JH*;)`^+6G
zHt%WWozT99JXi61NpqR@bjL*cX1AV-m!J{;FMl6T#yCcv2H^Mg*P164vTH(@2VUR_
zpZ!`l@(MJ#7kNuO_*Xn%3=&(0|L%GD2{wknht6=0eu4BZ?%Js_(As%9wi7!}$RnMs
zPi3n=%Ncvlr?MU?kJh6PlLwh&Oaz;2$s_1dprJ@U<3ublt@BPQTleg3({^a>)f()s
zJ?>g}5oO^=^SNtqd^K|4`*{CJPQUy$(e`t3E%7?swSoD&wKQ^(m9OnLVsvz(XDMSY
z`u9^*|HahVZ#!no&a%G|Ts7v+L7!ChJbZq?bP*lcAF{Wy_oV-l<t4|D0+tBhv=4Yk
z=_a_>09%O(HFeyTt=mQ!`3v2@iZyTUM=PW9eZOXIGW;v%F5`oKQoP>I;SQe1Sql`K
zD2<Q0czb$5AXCHq>(~PCf%g-4qVj91<3acy`-<bp%vw{Nwdci;H=S4cUie)^bjmsy
zNO4{?G%9W)tP}8d$@v=R+QZq_nXG$Ga8^9vaBp4WLc0fW))v})c3*++IlEH(^t@#D
z^sp7#(}k7qh#zY&^kB%YBTg$%U=(fnYl)MeXV<giCkrb{?}1bN*}_RZ&}uxWbz|X2
zE7SDZsYTZJa4>_uj-~(7Nxw~hujzm$X@fJ>$rG$Y$DgJTS$=Etxd(7`W%jYW<PRO{
zf^QzIofv-^dhR6dz+rHkU0u?4Xd(RLE0N5cT^=9hT&;ySbiO@z{MrcffQ7+pznu1K
ze`~hsZqm0Y>&hR+74OmbGsi9hcdQo`ns47b#n_#N!<vk6tu`z@d2zvn_j=_At~1YN
zTZb^OB-7nV3~Q}ZVd$)j*!|AMCUXY)Msld^)Wmg9o@D;q&6u7<UnUtdg*<v2zVZR+
zY}as;+y!4ze2tyK;v<~#u5;K66)m~P-U%lgpvF`3(KpcZ&LUo-+7<s$o6VF(hG)J`
zXz$>sdL8)D@}VZ9b_QyL)w}K_b6K`#?IETh$f?e|Y+u}%z^9PGoN?%e=!@c!FQ6az
z24%)_$F<>pA+5WDN&KM$y4qZW?8WZ@|0C=fxRcuUubO>THT+Ng+Y}skBu(2JX*YMw
zrZQ$5J}Mqq*#2LqxYL0?1)2M2tr@9{de#i(?IdrMwzQ|Z1N=TfTwTtIZe7LyZxNT}
z`Q2B<Cjxtv_80L~z2e8>`7e-f?D7?|-)=SG63h1+)Gj^(3GQh<SyK|%UZ(_q|0q6t
z@QC6Vc-_oCA%!1b>6AYdS8INJYWXac(|$<bOBR~9v_DW9c$%-Y1n~%?__E}tJyAvs
zK>R_}kDKxF%U*;J3VIFY(K#T$Y_`lSZD8M)TUI=O1b9vm%TP3ieQ?^{^kV|;Ic34P
z_;rb=L%m05EZEPbSJzs-M^yI{u(u0Bd$V$U!#Y-mk_qCmjmIxW^>c2b{W8t*V$R1F
zn(1mwzBKZoS;82q4#9qsx=RHARfE7k<81g7b0SIfHq#UHBS~xuTj9<7Cv=v?qnz>0
zyfL)Rhh5JXh}V_4IHI^g`-_*~-NjmyiE>}>B<2xoU4`(gH0#fXPvb+ZN4dC)F!p+%
zgpV70np;Yi2bSK*_(bI&NPo<dyJo45MflYzU&MP?o$Tq3Y@x4$lQE(1<D2fsZjgCn
zj*VGc3;p%za+wdJMb%k?kKGdOsld<G9zAyef3B=?TKvkmbf<h*T3W76Mn-e)m2X<F
ze44(E^Xto@=?M?lW+pPm+o8vcZT}0~KSa3{d_goL_*qll3WvUCX*I>WpBAG`IONiB
z>Z_dRv3Vm$Q#t8M^XYEaaF;fn-@EZ9{dDC?LARR!f;;HJE!=#PGff{}c(;vJ`5(w8
zyP)wZ_AtAM6Q5hRY{Z(2;$gzcZg8V{DH-E)e6#cif7&cNxM&f+a<Bg9&~XC4YM+kF
znUCfDXt~a-=NnpEC|B#fKj6K;<-yQ@TujOxlg-em`qz~?-74Fb-+$fXExsWB5r7Ar
ze5fQYeo#FSFDNu`rI^#2|H`X;0dym>!)_)`^_Q-iwBP`3<l^T9a*@70O1jSrb7@EP
zVN5tK`;%~{yb1C~3a?K_IeX*N4U5fIpKgwCDT!A$7R9ewc$XcY#f*=&&%nQ<lOoA~
zd<i^lsqbTZ)BF=%C2qQVRtnoqc9eUDL+SocaQER?V|wSi*2U+=%b=Cq{xvYS1oMpp
z&=zy3hqju$K9!hpO*cS8&fVybFEKN%-R<E4Wa1|DC6`GS9ugn(3VKBJ$g%$G_{vD;
zy)V*NbmiYXlx-cIIeRTy_RnTpSh|Slg>k`cZA+p<<gboS^d{_KKQ-2sN7zR#brzdC
z3ls1q6#q=)!<rURTxrT#Ib!|wR*&^(@SeU;x}d;b)|C17+jH(6R?@|$cj^oq=SRR#
zN^28$KVF)q4E(kenWZN^d`Y}4C*7f(zLnyWXUjz{i5K%-X_A5PLvr_B(M#e*r28<A
z0mnb#tXmZRV(%~OZ@*lNJc2*z=WD<j{bHV4`{!Qzp*}12p7YpEE3Dp!Gho^yOU^y4
zy>L^0<stSSl9`-x!}&~}+W+T=+MM!n@s}5V#Kz@u^0DVELpJ8_^G^27vJ*J9rqW^W
zon^nDz8zT*nG9V7zDCf8bi?_E^Xzq%2hl@0_~&acUi!KxBU1ht_;Mx^I|QBe^LLu<
zk4@yRCFx|m{U3c<KaPEO3OVH&;%sYvN#@uCFBLBWhwF{*9c6wAf66xwTs=kJ57Y1O
zBEyUaXObU{{M3O@`VU{P^%S(-2^{PR*4NOE<m)teG3aY*kdGV3a+Vi)xI?nBr7QYb
zj{f6!p`_CZ?2^gLZ>~%bV`sB$0&7RbOA}S`_x^=(XdD_J0Uv|*ZdM$-Y__<qgR}r}
z318BWNH>zL;#bRWF28yFZsx~+q?7R|k-nzW({~UL(7rQ1*-w*a8Na*vt>m|w-&%h6
z@oVAt75ce>-=1;tG1EMJ1B2DWV^ip@H-$}WgnPD@vEjV+_pe4LkDg)QcI?N<l=Gbj
zIS+(Q7N5;An-qslF<$3!uH++kbd}yfT$qtXW2#0+mL?S25}02>Cxov+#fwv*>&L2-
z&J);nvE@`FGuN9*O$86I7hM%xP#Ox(1J4(9tTpVhT>a}f6GZnKw7TV<JB!f2ONQ=P
zOT2pKT<0~+@fXmC<iyrXAR8Qe!DLQ6(a**Uy{OCy^f<EZ(_UP4-E~{wGT8wPG_*)^
z`OD1zCDB>coDotUbny5zSGzXh$EcI`BpYjwA7RYZp75f*^OMXi`BrG29nqSwg}H$p
z_%A2fgNIFg8hcmGTg}M;z5=o(n^W&--?Gow6Z{8xcXhq9O@0u$>AOfrzTT(vEj6o%
zr6*g2XdN8vqTOS!WVfr`*V+GeLc>0-c60_Z%iwLtpjn?@H@ueJX4fh91-4G+SkD|v
zgzX#>zdy+xKsQqN8OG9|C+W4=pz%@vuUc#+i?h=#j05fO>(SZ6Tf}ERQ4Q^5dx@>h
z)|E^_2f;b2h~_qXW|P7{mbu9M-Ip!QUm;zsGj$YnX}X=pQSl;lBGOG>bATuM&zIQC
z8Sy^PXUCn#h4HiE$t`3rUC*zPAF<=IO~Fis>exbF*3K}va*hpKp}p~Gt)<Lstvx;a
z>MZkGYYMy|&GQ(%!0wZ4$HcW~Uiz1J@LOTu2wqjzIn5LPaU33Ttn>WJ?4#_<Uv~H2
zjr2i#TkT;T+UjK9TH9SM`cd}I58U9-%VBZgO};=L`PevHc&}m(!xQFHhv4vG(!RNK
zp1W^8M7wEhY{wWU@qVo#AA;Yz`{u&-zbNj?8$Ii953Omf`zhbJOLn~G>jf8623kMy
z2{TROp%@UzCi~<+lFd$PQ>;ws(qg2G?ir)X4(7P?GQ6F6@x~F;jZLe|%3tKk5KmjW
zT`zAkt-SENpm0xnZ_EsI{|9H$JN7UqpLThJZ=VsLc;(YBe+a;Dn2Q&bnxM7Mh)>8y
zGwEG;gnZpBk2ru0hBH$Q8eisB4A_q!FqzX&_u~=3q%y^#6JQF^W_k~KC_i0up0!DH
zUgiDyum6e_aUfXObm>WA=TdG1dxB@{iCqn@R#>~3>ysjR!GM?8J>ebn2YVd%WwBRW
zjg89?bGhNOfdwb=4LJ!M4~{X<oah`H@8Uf7sVydX3VJy6qDg*>yJ83&k!jvjzr(C7
zS&)WaR8Q?SvUg3WIL<oWwG7)RILc?wk+^O7js*HW<yF3N?gmjlbe<J@e-(Lm^G*1F
zqg#y33%4v;<@)_kc;Oqx8S*K8^G&ljV=%tGfp4+y?98rZoEb(|Ov8sW@b`w5l{>yw
zXr5tDy|h~Ut+lez6}O*cew+kW_2(PGi7ltLM3N^$g%xLBj3iG1pZfGReLO?|j?uRW
zI!ffvTPCY-drEeEEM$@gz)ga4qv}@#x|zza3*L8ze)slos_owa`m=|%#o99IpWb`>
zM?7!(cja0AE9&XrWq$wQsp?+_SSQf0RrK$V@WH|OuY57PyfSa=e-3_<yh|VB^Frx)
zfAR;-Z|(%-fA-~W<ljl{+k4U`wVxtQ^ADTxe$Bb4c%^55J`UdSIcj=!7;7)|rFr*_
zd+yvZZuxSnf6|)9yiD2{Y5nHfTlgc%mZv$Xe9~RZ7W0piQ8sw=z5#lFI+B^;(R&nn
z*BWE<Q`TWFOvq_V<)wfBJJqq)t79#7>~!n6)0pksnIG~$M*mOTH*<^bM=;!JQmTC#
zzfZ6yb>7KNw`+;?$R2!FUqzWx@=AA%UU_|KqBK6S3O$l=!n$*o{~qT>(IxMbE;-np
z-B->3n$*?EV(?n{Vw8SwqffRi;S?HF->{{{Uwr{MwhWCI{}~<V?*`zP$ayL85ac}8
z3jAZN>^YzQJ#aPpbn*XiA?f{O%z63df$w+Gf6_$<x$>vhN3Gk)Fb{OIw-JmJPXLFv
z_Q*yb#_uLX|AVewW}oa!l6SRcn~1w!OUBiHEA>GB49OsS&me1Hr%5-V_m{5+wim@<
zvi2G5FR_r>HmxAXW`m7}F|&C!&t_n!c|I5`-fLlEo)WiT_8Nz?RBPE|)#Sh;I1<?G
z4E`)JaM_@I;B^N5I83>pP{$otWVh??CCNcw12$jo5bbDBul|_ClpcMdZ_{}Xb^M+>
z)aD}E%(3O*hcU&q&p@AQub8~Q_VNb3GlI6>uxH0P>E;_vz7+YE1DB<v92?Va+Q`|v
zuQ#UL?Grdt8v)Axh_bARj8#$l5BP8GT$g%yarK~fjCy1$$E!p3Fv`41nFPP9sYCq|
ztUf+^%0#^~*wR#{ll&X_U9NW7J36mtx4G+mVf)@c!A}+{A3D~@vaQGTowZ7P;YFf<
zVsk`9<9uI39s1@V1Nw77^e;V$v&oxd(Tn5nQ0F$Uk9Sf=Hay07yXZ`NaGyR4q0eR3
z4qDjWL_W!t8c!=Xc=k!k?bG=>t(E#N9QX7yaj{JoYzryx^MDw22(C2k1>k2keE>N#
zz+F@Re6OajrO1@X7yC=2!{brP3%?HyG$!FGarGreo(B3R9DjlKujcm$=ITjr4Lie{
zb&7TF7;Dy7kdw3~&gPj%zaK)LmmIUFJllGdG~r|{@?wI$=cUx+k7*6<Z^_-KLJtQ$
zTdMf9@(Xv9_#NBKSw;9r?Ed_jg0D+_1Nx2~&Th}8)nAeB*I!2cJ@|~~&LM1p^sA0~
z^Z5OcGUBOD6Y&M#<LX_ub-H>N=E-(vWhC>=^QWz@<pa_=%#CEe&AV-P0A8Emtc?9O
zWj1`g>UrVhE6|48=vnXj@xlUlrPjMIs~y(AFY5U)I%4h#XN<S{`ykyBWno1xV7P-S
z_nX#OeLKoCH(h5`?0f&SJB-nVoZZclfqUAK41AjNUOGdgI{ot%x|7hhe|L@D7v#3%
ze0qR1<nKMy^Bc-Z&J(ZiYwPP{r|NAVy5CMY`Dod4y#I)I(UtB9{kz|0TX%SMp7vp4
z{+i=`aiaU|Y<bGPps{6t%DTaMrSa`w{1fl=vzq&qG|yD;iR16I>I_eAzmDhB&-&H}
z=c=!NTF)4>b{1<KSv%*w=&qd+VoK)L{aLT>W9Mk&IquH#%ZP3@|6ld;`(s{|&2HBn
zk~W_+*E<{2duFDHGe!QHC*7H?F?_~*KIfOqkuiib^fhl<o)IaH2d}gA?w%Rzr(4_n
z3ild9qn>QBwVMCEvPF@VEtn4jmfdwYTldyX_JOqL<L#TkW5*1?$H8#>fDbc$RbNzA
zxRKl-{A}_1=GUonSn&L<HJs~F{s6pIK6erFPCK66{<U*_f6#9WxyZsrIklmEs9*mW
z@bgLX>AOEiuH{{ARe4YOarW<zY>`enyM2h4=M2xY;T&t>jPh+TJT||CPoRfK(Q<Dc
zZj5C0b0AvPeDeEnYZ-B-&e2B0AG3A$dTm5mKl=9to!HjxADC;`Tg{~adX$9rgxKTy
z=XJ2Xgt=c*^Duy4tj)(<9QUVp<PU7|s55AOox-E;O~`%MJth9U(0KeO@5(3rQTW;3
zIiqi1^Xjy|PQ*g~i}(Idl+oTc`s1@<jJ6Mu_7H2LJ?~i5{@&kYTYWqW=K*{Gbw<s{
zr*PgvJ3h>!4cV)0Ug%Favi-&``1V8CUHkJEz8|{gw7r{N<<vL7F7b<=|D>zDctI{c
zv{tBZn(umQzW0Bs&PBjz@rF)&?jPZWZw$c4%g4tj=o|XdfBgeb^j)3L!Q1u@ke9QF
zXZ2<6*m!};qu2Rom4C1%lln#9F{<$4m{gld^jr6|&vaodj^C(y8jItT_3RuUe}=Wd
z=VeZPt?U#%>xgh-%iUgkHcaG&*0$@8R-5P3+-HklLT-7jrS{w1?7s$CZ=KcW_||fc
zZ=J>Qo4))`>t4SN?tWp8_i5i>cQ5esY&i#vkDj9~bZU2Nyzou=KId<L?AO;=5MN6A
zuaMbnKPTb8J^&1Z@ts{eh)FQxbgRk^W3ARx`Uihr=-uVDZfs=Pna`pP=IdE$o{soC
zK3oHo8~218zhbAKhchF$)0eM%?~>is{>Qv$z4!crpPzQ4XR_N5`MBWSmv>fsd0zBs
zQnJO1eaGfG|Jxhv*ZbkDXD;UWe`!4}#TJL$?$YQ0a(nd;urZ5%d;P!cx*CO-<j(gW
z)3(jmzy4nTvaPx+^eq3fM+dK8xcWM4;UfAz*mzgB5x>P7?+=_KU*M5!-RbErUEB_=
z-79z6`=mk#Yb&<|%*;?2+mZI~;p)nA-gog|dXIALYYI#z<b*00!4IoR3oOS6h&@bz
z_|As!&FB=mSMIX+AC-{rAwM7GlvnavU^(S@*ZlS4*^6fi4%O8iGI77Y2F^qH_4#?V
z4wvNEhl8A_*o|)B?0Yc-?X|$DeFpoEt-cOoH+v7`<i!t;H_$dd6~l>vG#)-rKc&N7
zNBnuE*?GdfI05R25MMxRhWhB<#p&L6srOW<{(0#-c54sEk9`Sty&-lFu60poY7a4f
z>Q^4HPGRr4mi!0D2il|`@L}sI8*$4X9O1U>!_h1_fZ@>j>}&B`cXdlc;t_N}f<xzt
z1&i9V^yk!M)TV#u>a*A&qKk;>N*%GQtj&09=`{91=yhXPnT-Ffw~uap1Kqv(Hacma
z4uzjIxD3#D;SF2bHsRy=<tCHcx8s}_5pEU<|0%bR$}gOA=jQs0!TY+hE184DyUrQk
zuyoqsZw)afIVV0njh~ocwteL6sQRP3i_+&ul4~iS&d<9{u=sT>;@oO*N$IRo%2W|I
zuo?Ze^*L?i{)X>mTXmnJ15O)|n=Gz9-GkmW?mqs7d*wqm>az|Uznr}w^ksE>(2?-b
zb8i?vB;DM<>Ed)Y_ZSA^8Y7hv&D(P9MTILv{hH@$qd(6btp3gN=MqoK*+2Sqsy^YM
z|M*GP(V1$$PTie)g0aaR#~Ap_#V`7}O6YB?@Qe-J`nStwo#kHlWj`dIVKIDmB>vGC
zfs5hj8}nyhR)swzHJTWJ^e4a=)`H7g&IQ}}f8_=rH?zKh{3bRuzMKCwsiE;Ie8y`=
z$2O{s^B9|G8Te*yN2HH&W?I@{94`po&@gMa?40BiJ^T=V3$?Ru$U5SLVF!m6YVlK;
zy(GMRHF0v4R!U5`H0`Rb2I{Rb*mfv?>`_jEGS=F2ECZLzi2W2rHkKZy20TE+>%}`t
z`JWIR#*HOo%h0Cs>c2-T>udVm{R$q}`#J(}zJ4G&DaEfzbfUXibMJAE0%sU`s|TOl
z5jzk*e+@19d4Tb(JfyuTyc<Kjd~om(?+uJuO{6c*w}K0eVdU+saL#=;gX4VuUx{<;
zZv~#e{Ci{^#z8s{;r$EV`*QF7Uhlm}UhJI*?}|U>i}X4@cZFM==gbLr4g}k}*P8gr
z#v%3&dw(pBEeL`0JbQn#odeK#fU$mp^`Mh+)wugK5QJX~mnNET`Mbk++ZOi^g_&<D
z-Vfk!Yt!IO&#|5{caoY<$O!AV?`Qu*KJjkNDfyV#Gr}WGw_;xC?zvj%d&3Q7vo_sO
zKC82kvTJ7ByCF(Aml}hgaL?JlM7jHAbp<v!-aA4ymvR2SsZ?ji%CXsl$Bx2CQhTmg
za7tYEC)UVhJ>?_#IfVburup^E%`pF=1@`9S+FOYU;LtXB6mRRn_pMqJ=~KkzgT1uf
zuiqQ+s}!8J>`Sg661=P;Jj6`zNuT2JYGec-_m-A(_$6`}^Pon)kKAcq%ec%YhQ#$f
zd^3f=aTvSH2F{-pa{ff?tNMuDx2KO-pX<ta|CQ*9KG}QF!AB=)QSP#Tiu7an<{zWH
zV$wY3)%Bv%#eWCD!(i~f8{LWjo-LOI+s(8&m5hPCpZvIZF}9h8tLNY|X=WxkS0p=#
zf$u?&$xdL}%(>+T&RC}5d5y$GZCF?H?AT{cx5k3-W5!79OYc45u56;UwV`Hcyqf!l
z!;}lF|1*YG>M6U%Cd#H5SKYVq7VmcK-gL*#_P35b3$&_zPETAA;(7>2TL0CDD*E66
zyWiHuv}L$Uz;8?a5Pa%~d{)$tTKdrmJT>&AntpWdbNi8k_S6qozH()cTo|RhIX8??
zw!Me=9g=wzdt@xO9mzg|cMEj0h5Kq0k7PnB5WgcYG{Ue(P=C`B&R*ViHD?0G54#K>
z`t>KjJR4n72s<)*65)sW;lShdo(dMV1mpwly)$K7Y#!b_=S7l5ydy8Hm;K^_;JCdd
z%wh3U@s%iT6yd8L5l$Ox+Ya3vNe)52jv|ZgglC8!_^~^>SN_7vaw=>441Y1yA>MJW
z{LZqHtJJ6a<)f^53=dMj(7*Ng56S+iwggY-_!}=1-fdoVXv(WLlz!LMCR4=Psu<Pz
zQ}Iy^1B=FzeL*R3OI|nF#^8_hh4X~QUjIG$U;k5~dho{CIo4Ititd3)!4v#B5qYJy
z^4JK2{)G4)K{F!~gV%8P)Vb*8R_G-fG*&LK^n#q+z0#%m2rx32wncz3LL7j|XV4*Y
zrn3Y2bT#)~qf?mPfs7Ugw#X}?O6g@IULTa_)AT{#wKrK!8~*&zeDU`m>XR>9y7T*I
zI%{rm;P%C|{{!_zKXEocjsD{RX&)XSt!98U#w(UHRz5A9l~yr8zFs|F4{wj6=hN69
zv-sQn$Y-FJfnpJLuiRnxhweTi*sgnr6{p0^Ms}ZRG6(NA$xdSN2##ni=V8Ich4eqh
zoRdFJlvwhbk9Pgz{DkHpF@NMYyne!q+@af)*XArbFTR5JO74DluruZ2Hx`W8`&(kS
z*HmuY6iG%dFf*da2DgPKU6n!>*W5aRZZE=IO)w9S;Wwl2;ydy;AWmEbK{VrC$f?BH
z&N#po8D^%R0^aJ7ySAk$r!t1R<VzfDs;T_?7S2?RG&5t3HI?C!W=4#*oe@{gB*yzy
zQE--W`LkUc)$Ua8CRDokHfv4=YuVP)*m?0k(e7QOw}wJ-wH?Fv?*y>zqF+AD(fcBm
zW)y8bjLkdHHPhA)eCe5je{%b!lCjAXJ&!!p;otQl|DEFtYgi*|xmSI5Tl#Kbrmgfy
zZ2P1A^4OWVJ4EYol>6iL-SVh@ds}zSt>$j)>)X0l{?hWFKb_2Os|80LjH3fCB@2bY
zPcGil^h4+B9w&~z#zK7(K80)f?tYz^Y<tL4=Gpubk}JWB>dD1{ThF-mZ|Bq_yb5>Q
zsOK*39gFQHel&PYoxq=%^aSwvZ7Of!a5G)`6}Rk9$QiLG$<Nrw-XcHnMBeJne;4%j
zJoG477eEh!cLn7v9bgOUPgl#h`$FHE;SVeO!MIrEXxFEoFMIF(d3T)j1mmiF{x>_1
zsW%GUXx}Vc`|_sn4ZiRjz!ojuPrh^&zTNo6=>I_DsC4VA2kjjH3v|P~-<H}{dy<zl
z&i<JD<E=iZf3^MkC!F5m;YQ!D$@%V&b%obweV>~1UE^{!-|z{1rhBC;gG=Vtx*TN;
zv>!TNjx59)Ae^(Gb9D)Gm}AV7XpPHL3gF+X(Nm<r$LfD!y^N-=i_VB-R*#EukC~}l
zy#~4I1Cb2>lTl<J!#ZO7%^DaJ-O_L6+eLZF-IA3hdrKFPMgHE!-pA?!kpCK>SAQMH
zFJQgSeMKm*bkTQ=KIQ&*{u?r5Gi&qla?y&`${O~3wQb<W>IH<8|4v=-+;i@G-1X`I
z^zd)hUla*g`AGQwF!GZ4xOlg0bmHAV=+4TQYke+$Hw|a~6wY(-+yIV+>(!5&Of|Gy
z&e$CYMvhv1;Yaap_DSo)1@VOTOR4;L4SOfXVWVhT_|q6ohkpzI_0Y>5yhp$-d+_zk
zz;`paj*?GLrR%@sBjHUv&tLO3XLeJkH&@=Yx;OI5My38|YlG0;khX4ce6kkbz8tzc
zwqPi9=+WIJF5NlMoyCVocb@_u@a>Gbko7{o(9qNIh57c*YM-Xy^=~>MXbM@*($wSl
zx#yd1#qT91{*UnyKl18iQ+N2~;ExYI&D|-$``vGT^Qhnpta|D}oh2>#V&JVtbX28h
zYM(7D2($$Af_vrrS(7psJVY$IU$Vao^WWjz!lqf~txr-Pak=7$=5iiv$-!%d=Zlu?
zy6&COMIU^pu=(265%X4p{o%T6%`?QCv-#3{B(LSQD0a5m*01dC`dLBh-(<{@&FIE<
zE-9adK5k$0ngZ+RrSmo68}72_bMXDZ2hhY9pmR*KE^Hy6Ga`~~e6E0cO-qb2LGFhs
zqdv|z+xqm~u7&7L<dbjAxDgI=u;0G?(8D*};niPc>%YdUzcwFz4&}?JyBu8(@uDjA
zj@)hQAl68w>V&6G>!>wx)fMSi*QM0e0j!;TS6TKQJ$)ApQQ(aLZ%X<kzB4~ZIP4A5
zz*xmT*+_>)`LL(MdYnG1&06#+yE+Quigl;{4AhTd{qZz;n8j0ya(@5&<4b&{Panbe
zj~<2w^Q)~+&EO9!cmn-(YQVtWpfbk!AUl3#!v-C{PJAEwjNc6|TrtY@hexnfYhEIE
z_+uv;*zeV$?;3lpC5L|N*4qjGMEk-E@;`UahMFSmvmzeM<>)u6JiKXc)iAH5HxvKY
zTo<qHNoOymbca6MbUoo4b}q7K(HuO!aBf>fKK8679hbQKEnf$_8UNaowLZVS9)3Fq
zej9Z4u#}UmpN2Lb2lg8Nt8dzqs$Y^L^nQT%H1F~W(ff;f2aXQXWFyoZ)EriP`b&7X
zut={9pD@5@`8xT<S90MV6lVCk&6lIY^6ON6KJDnKy}9;S+JlLgr)VPrj~6fRU@g7+
z40{@6fC#pSsM^1BPGvKDcJWc)X5i!99|z$%_j~uspY~Zp6kj^U`YJs@1N`!Mp~)~;
zxC5*Dl)=xp`KCx_ZA~y<%{|<H-G9&cY=^IRmKdwg68}dJxi4M9_(zAuKg`*8r8RTL
zea*$BF~<5{;|z=6?0u81z^36VcaxXq*PnprO9vvjT^+*Dtqfb1$NE6r+%jNZqbELJ
zHF}Q5k5SJezGG`F<1V)~dQRrMo?-jGO?Jly>e!XZZf~HDW<9B+T2Jag-?Y7fI(BvO
zq>g4isiRs?>Im@k`!1c7<e304K6l#f?{?Dq>*z%<;I_i25B1Tvv4GI&e!BLm`sUMm
zz|$kUILNU#pyS8>QgH$rje6^wFIW9oaIhCdCfX+a!%MAvYU$6@Yuf+)<S4Cq9gXl*
z*#yupc(N4tk(%xwv}arIP@T|SGyKfbm1kFxUVRbk-)!i?*Q>*`_UV507<8xn;sJGh
zm)vD#1?rOD;olQabrJvdy#pDpn!f9M2lAKF{CD-ohu@cZ1&ii}P4D3w*SCEi{7dKl
zC{KTm$tKb>Zz&h+S8g!;Z+@3~o2?BYi{!U;??D!69B%c{eqF~F6rk@M)^_YB&hl!!
z*;_*=`?arhJ{3v6y(SQM3e7a9ERs}gw)Br9?)r2o=a!mAw4H*koQg=M9-do*oQCeY
z4W03iqJ^d|QE0X`7KB<JM|Y)XBQd=i3sM`cJTf;x+$&cek*u;BS!LL@#OU(mg9a;~
znD*7kCniTeS%iF|`$}`=lXB#f&ONStavAZ=(jx+K$vaiZC!&`R^vEY`uPw=uPty5r
zz7AxxH73|HB}YD~MLsEKeXcTjR-WkEW8ynG>t@HXPCiX;oQjF8E#u~eXO+yWoK;2q
z-B*x(s^QP$=yMJ05wcW8J!kdU%h%Pwi?x1omi~eddp0S>k*F#ph8=R2>&so-J{4X1
zSkA_%p5tYqc!D($KGzguo+%!k&L2<ETEV=Doo}|M8Jn&}CLSSwdK~v>T*dhj{C}E}
zPtu(CR@wWxbE?^^C!#y~<Y&cr?t`B>===P+A{x+miWfUWt1A<Kqq}j{CcbpPBMxCO
zb)CwVjQsqyY1$7I80N@?cITmB{21Tud5Vr;eCvMTgQgPb=#PESBr{F(de_RCefdW-
z_dRv5oXZ+{1GIP}dWD-<E7@;{>Yw*%OtdGs`qNpOcm$1S>Yja^J1TX)1V6v+;zOc2
zjhSHk^M9Of{VLz2FBlGt!js~StG@InyuKftYx|79=ybvQd%jzod}a<YUBE5)2ou}E
zf%l~||GvNBQ$Iag_^+|~o9}q`s6lpao^bG}S+(oIwAO+%v!7iS3{2{oKN;@a1Q+Q;
z#JBw*x)SbUv15WBrT@HY;GWV?B4}#d{jvTxVAfct&=2@>eH-$jKaWB=a=kx){@e1s
zH-FluKpWotxzLmECo_M38k+pUGlgq=<ojmH_c`;YjQJBFUbEl+Z01j%oj<+ueZ-R`
z9nQmcfP2k_5aU!UnT)ZKtx)qpV<vi*ACkr@z^~!e?6hj;lbr|Lm3*%9%6|i8m8VmD
zn|I0I;x|5g{m-tdjPfBrj)(xm6^wtH^4eQjI`HX(`(NL$Z`A9cL(Tmb<6a>0C)2xK
zI0G**r_q5r=wEHV(Q_<~MRYGV<C&h%zK#9QuHQokL)n*#zkbk7D^(h65_DtpY<@0V
zcO~ssvp$u^=43>B>Q5NDT=rQr>EnV4yp=)gk{^9srHcCE>Uc01ueJDQ|J#G_aqU0H
zuG0x0h+c}mkC+e9DUr(5Xfq>S0}fg9qTxs-m;A&#z7R>?$lWBJtbL0{y7s-W?pyQh
zd+hA%xT_i3l~4V|_8HyW9qr+^16~w1W`yj9zrqf9dfCXf6neSIsrSZz4sX&t)4HxP
znmx))Te~W>K>TDi@ubA_8jCg+A7pGEG@*H&<4v*^m=98S1NX{wju)>T+x`&sXb)9m
z^0*5pG$Ktr*))0dO*+jlJ$rUP&CtI6R3At8>tg~Re!q`V?1k(#;CpT#yU+CPqi9Hd
zWFFTMJFh~%?k{pz+UaF~i|(tqeKRmv+C;ZL5N)de{pr)kp--P*!iTC1dXX(ree>`9
z)L1psXN`~c2=?Asz6T?*`Cs8)lINA5ajw=GkR1EYebh%>(u&7;YVB0~&NTaqN}FEX
z{?p&MbFplI_CD^lcc=YU-2NjkZ@%8?V-@33f^4Avs~<bPd=Gp1bbo^S@-IAd;cW!o
zrKAZSV#3>f&LQB50K4u*(b^yyGRy(_k#%Cnlpom^WO(_JHS+HJnQc~@Q(IZe`o>up
z;;WgNizHv^J<nte_L#@fxg?lhz8_cso1$-5%1uw>AEvcw5x$`T)%i~TOx0uU!d{F*
zefMoQ@=G2_4{7_+qlXN(2dP7Qry%n>io6_QuM;ka(7#}d_7QqU(M5*WNgowxiB=$s
zY8;V~{j-4JS$dCs)G>b`edABMm=EQ|wCV`NpOy>(oy1%@bD!@o(oj=VDLK6w94+mK
zlg;b{Y@5KXIZy`7eyqA(o{q7<e$mH+_Pn{eMq7_36Z^R6Z<|jrhwL}TTjTsDb=Yz_
zdsN2m8O{gy@y|;`zuK1?#yva@8vKk)gJJDaBQ=%Po-I-PSMGA_JMQ#xpmE>qjl16;
z*{J>h8gI>8|3_?6WbP0$w|wD<%?vz#A6?%kPydJg4>@dqw1V{qnQt-cLLN30jsHn(
zQg_rS?vi;cHac?3AX7)Lnp25fJtMlCm<#Yu`EQrTM#MkHTuKaebv0q`++I}NcYPJF
zXAQDv+%{wPjnYnlv6Bx~1iYS;j<nZm^!3)*rO`QRzjcXd37PipV1PS80`aM$r`~-_
z4?Q)~R_?lzU|ne_V_l)1DC^3in<B|=@DS-*I^b1`(KR}Yy_Iqn=6*Vw=)J5>!|+`I
z7bmd~#XbNphKKvOxBQcJyHx&q%opI@7JVpS@g-bc0IvQg{XKHh?XTuemt?X5`kFg;
z9zqA=k9kMGJ#z#4id-K(>wm@mOmw6%SKrjHU77ruqG8QxbY1OL*dI!n+a)7EcP;T7
zGu9T-Pe(2upt22D4XxY-jfTk|<^P}gFPz%G=kR{vP&R2_N3i!Kdvn@%UeBK?di*wL
zD4U^`2z%Y@p`q_E9{91gC7_#wjM*aM#RHRUMq5p4czi8+*=O6coiXJZA8Aur)uA%7
z>1fTm1X(4)dj0qIeSGg423_nUu5KrF-^Dk7{%bxM%3B^X0PY9Fbu)a)_Bn@Vh$sJd
z>rwkD;->lV2o}}j`xUsh>HvO@rroyZ)L0$W@3Ac;JRexi>lFOfr;|JW1|ANd9S^P8
zGWf>&dHd>>Twen}kJ|9__3xYL--k*18y^<mFXcJliFxp(q03U)yMW69F40&i;}jS<
zq$^;mD+Sw|=xP$Ii}It0z#C=9^WpI8>9y&(aQePdC%})NS1|ke`@@{;E9cwk{PC2Z
z++Em=TpzkXdlx#T05JC0?4b1+u!{$2ZcKuH?-+`2HFu*$k)efe>0@l0o^DCsElu(r
zJ=s3#2&KzAfGr7K-`1FPfT<D0U8#yUlgF4f8-4y6VcgmOSG>YHI!Zi{HB|fK!gt)5
zYN}UtIRmV%76xy<77StP(tI6w%^q)UguglAuGwm19&HR%Z*G6owqW+*h|-SVci};8
z`nc`C-fFJ+>vw-YI6Gek=+j_zf%iUhMQgX_OaHO=^}K0xwDueG#--I@g><~4SFLkC
z?MQb^?3RiIe3HHId}PF)xr6@<dxgRZV}A56g{ck2ei_ZBUK(|Ew6-ng+qvk{hs~cm
zk||=t%(gpNPh!wXz}{h5)Gjzz?mgYQXtzrX&D>wvL4Ur>n%Dun4cLrh@VZjjEYNq=
zv+ui+HNe3K`nq48Zq@g-qg?w1dLC=PSdHEW+*<p^7WT=${X*Xxg15G@zC8o&yd|4z
zxS;kYk6?4ig=sTwFZx+8JT>S^1XJ_5U_!?vm?n5IA!qJYdkOW`jKpuVsJ(^qJ4cxx
z-N-&j?~+4G!z1ILBi-j~z&5i3-IDO0@OTG$!KLt;y66{(0neV!mz^BqdFSfR6WQ!E
z|C{{pfT!Z0emOXf0@9-Z$A(|KdDejE$0(<^@m-{RQF}A<ximH*{xRX?C&(T*M}BP6
z87KCMEk16pJ_l}o1?<AjGaf7h;bu1FpY&j^BHs_a|JU+gzW3tIE`RpUzpNUMO?lTN
zB`K51yFZYWPlx|qdL7B90r+z$mHld!2_3l~7-|cGExr2GT^sXKk<2E(At%%Y3f%fa
z)TecJ@s5ArUw)?M*}Ts^di3Bee>nQ>iw+%aT=nw@Ri=^j+JZeBRkj-aqsGbK`!u}E
z8JO;sKe4tM`B<HR{=No(?mKrm+lbGV=57~zHxBY-G#5WgKJlNg6(GaHqhjZ=7Q(-)
zJUdQ=_&(7!uHH^I^Y1dIkB?+s@?_i8dC0b72A6Hql5MG1>qC@$;?<II8<Cgs$w#*|
zuDz3U571vy_i%g=S+MhRVkRoiCGS6Y%Y9!g*gRcG3|$EJ&l&Pvk4av=I+8qi{*bnO
zWR!#FUymJZJTj~Hr+Mv*&;_Xd0p->?$gR??@ZI7nM+S?6gNWqRarkO+51KF6HT(^J
zn(#Eiy9k~WT@;8T_el>{*+Aa13Dx%ugC?Z=>7ZY?fv>M?9j8y~>p1$?5M)2c+E~q6
zPV5w|<%(G~U+Z}ozer%QXL5XAnJMq(mA;=>_sXZNT}ygc=|;Ui+B?Sw!nN=xd<$-!
z%a_jhQFw~O++1(VyY{Fnk7rxg+3%rV`LA$D+lPpY+F5vgo6c?fvV?ROKCJzCcAv8-
z{`}G084`<Beg{23BXrjcelNx+_&eAHz7xGXegGb{*)(t51Ydd;9Bv{WI(vn>weX5Y
z?kV~>ebwAF5zbIez;D+KX*xJ_Q!&2H<Bj(%6{>$;=hbG1%=B{VRXpy-SaDo?UHBsB
z`!0{a!hhAHZ+Vw;UWoctr}FuAzSqm6Hv8n^o+Cd`IeE6=BV*f0jEw6Htn>;x=OsJC
zVR)0p4}0_Om3h!*sG>U*h?g@LWd9UDDH+WjDERT;NPl%7N*Me24e;@jBH~BUclhMi
zC@_?V$Hs@DhlbXcM$y&jE(?7(Av2ABtuLp2?JG9ZA84^D9U990E}M!I^ecnUln+NI
zYhSL8fclXyun}T&5$;OCQAF)UE{yB!fZkPaIk-_w1HG3=-xoj3e;X4IxHr>&1R1N`
zaJL8PdXJ6dJvB1^67T8rzAPJb^3bF}TY7<6k$%*~UwZ0v>!C^2ZJk?89GM3_WNiL3
z<ZWOqZ2Qso$EBxh<~^$R!Mp6HtiSdSUIQNyUHLy>uM~p5Lee{dht=S-O>+@`Jq0>r
ztln&7{5L^o4bYiSOS(T98ra$hj(>nY%kZvm!Uuh^G;^G`{d+CNM|IcW4*0XhYma<n
z+O3Z(cYt!1szN@krg1|2G<+ZoyblGdFRN#4<cnbM2;~1G@K?o>JS$dQld-YlZ2icm
z6TO&mMfR>hH^xLq6ER+(wUu9%?$=Cz5<X+|qr*|G6192HmrW))$|P+%cPILKsfFNi
zWl61#m!Nx#&<$JP@F@P6-~2@2GU*!w(C50K;ja2fCdB!<wM*RdbMS!a3CgVC9-06)
z1L-fg13NQ~*jv*=)t7C;_dHA=7k?f8EWaM~jq-(!{($?{J~C~G^a<tQ*q{%H{($<~
z;~aGNTkcsza3<JK!!yI=^Zns{|JLr6PusB(4%OBp%!gQ?d!CAHygkL*E5=7ienMmI
zT}Z?rrhhAeOZ|I*z0)LUBNt}}vA3%2Y3M}{Vi#Ndb$lnF-QP0)?4h?Rj%BCxyTr%S
z9oi20W8_!f7x5#|x#He@MeR1`CHa)+nq%4R-{Sj)m*8VUU43I+5a*3N78aey^l)I`
zbN0#Nv(j^oqz<3<^|XHY%ysct(XRIJeZMFB$OrNRuysSbqG#PDBAL3Vd`SEW=-Tzi
z?xo!|1JLf0|0eAgTG}nNblKt2?xcs|M}yFA@xvzb&2!MMaPh}}w7UY@72QUm+n+<X
zJ`UDGzo8uZjZto5;}A=~&CqWEI20dsD)hS=no1$N<^2$urH6jUR($OvQ=#2)?WWei
z!(;Pj=FqI;?cYVS;veUtS=BF^jrO70!W^0{gk}pz6j_=jJ_|HE30Oq48_q$qQ$3o^
z`=Lv-;-|T^xahB<*}^_FyAqoHck21f#l1AEv!en0I5lr`Y1YR<FU`7qO8G^z_0-|>
zP+v|Rlnz6GJsn>9e}fLU$d7Aa9$LKRe@}-4(qC;3{n7qe^!Ml>^jGfEUn_bbi);9W
zkNf{;^am_|HT^yMe~<p2g#Ornj^Fp5|2_Tfqz<1S^nW6E?=$8KD+Bfargw|ygV$$1
z1m7P0<vE#Bcx}L-{|uH`ImCYdVl8ss&n%yn-82k8mrgpsnFsmU*|Nmn@yq14lMUtg
z#ZS^%s9?KYBaj_yB`;E+<i%hxwI4rq?*8K5I@0-{nT@~MB6ywFm^3^<{HHXpWK0$J
zM>eDLkse?CP;04$a{yb>X7U}Iq%%}CZNOsjkSl9#;%?^@<xSqE;#8=wZKVf456pG(
zbJyH~@v~#@!1#feyc>QDzIUbk<U<`rw%~rW$~@rN`G_kA`})=QkbbblBrV^=M?l{@
z&JVVg7Bz1aemc&tX`|eJhyAo<A<2G=7)NCAjQYnj$-c3|_bWeFo?JW(0k(_z?KDG=
zIM}A8r#gs?sP))C50(Hn-DMSKZAl5vmSCIS?KlJLuA+N4%6F7=RLKai9&D*;>#V|O
z2UvAJOXJtQ($$r%M*hDP*)|3Z=nTHThwwkto>zI^WdAEVQ@Y71r#f=s_G!@9s}<0P
zP4poGjvM%2WeThw!vuO^$L6s0JHXq4%|EPuYzo+Z2**ySpgkejH&wS`W3jNS&4b{$
zL%1D{T$=;WX0MGH?fGpaz>n(n+YydlZsmSkul`py1gV?zX6&KV*2~N>wH4(KnuF(a
zrn0=I&4)d$`yAjOQQ9e?FQsR)b=s43jO+`CotvX%w{_>Uj~D;R_w}RS?K|<N2P+SM
z*=iz#^B4Qw8T>o*c717Nj^@|;f%uR3j-Mx&=6pV7zkP9z%afoN@g&iPH}BSu9)vIX
z{kP>OTmE<M_Q~`AqJ7P83j^}1tshx+8+sGTfYSATEqF1yQ1^Z;_Q%s7LO1mB8uLsI
zHv3Nm>$?(WXbXF<Bfo^ss-cA_``&NMCYHK5o;GItd)XwElRi7lew2CJ$i6^2q$<kP
z+E^jM_FdASlLx-r7S2O&%iMbk9{^~TJ+*1s36G43cFFUJU=?RWBAFrN%cJfX@GV+X
z(lum))v2#n%oU}Dp<l{Omu}S6xw`fmVl+@M=b@n02=(YaI<%_oJH;j=y?vVXp+n!G
z2Xm!si?{zj!ump;{<!(i!SJ^M7=%CR^Ciz&c+f#D1Am)8%Q=zPSABJ7jro!I;6vc6
z^vc-A8gTX)I2%pB7L}R!GVB?Tfv+fQkoa>W_*wwW==<72=&M&>Yu=I{W;Ce1US9h$
z>;w_|X2&xJ4-T@eXBS{EQr&a52VGf99(Zj0RB4y$ZJ-|6E&kfR3kN;(;}5Js9#1Yb
zL1@P9v-}gVrENneesh@gs#WIuRjUI0g8V|?_vcC~RBz+aeh(Xm%EX9IX5skWz<BrZ
zzgf657vp0ae5Pz&ZCkZ`^T3t4vgXwN(3PFn_qhD$div&<^Pd)1f?emWN4a`vjg|3W
z=I*xda|bxT;P*==#IE!87s}fVtj@c@>BIMKuw66&Y=Y6m>bry+AKv~?;h%MGeN7j-
zu$(n9LLYQ)L2FoEV&ndG8=pA3?$+NQEzeunHD%n%qlWQr#1D8iF=3W4x60A$Xw6=Y
z4riSS&0D)|ZE^XfCRtm+`6KQ;sb!6^G6FaakA}vev+xw?5*TyGkTrF?-u2x-|8TBx
zwBJTbkLTJ63~)=&8o(Ez>{8ZVU|$RDYXv)S%Z5=8%mu*A_hgXsyzru>%=J3b-|yIT
zlk~@lZ|`TE>dHq`7ciC4rwq8(_Y&SMeY`d|BYzpKF-k8ZZ*YKb1NFnE3HLeh8*t{;
zztrJ=$a9U~xyq~DxylOnmVQ4rd(idEu78R54=R7V>*L_xZT)Y~p?~L;zXx6CZ28yU
zRem3|{9o1okNnT!`>X0N(D?q(`u}eATl(8LxP0_imH+kN@=-5cCia`*F?%M`(#^hW
ze$P7C;?I-*e8qqN-<I#Q|FY+jgPgswK4SK4vi4d%zJNhw?zN^ZOj-~>K%LKwzz@={
zEq;b$Wp2{ho5jf6QS0v4^O&!)amL6S#QqVLjf=d|ptlyXFVlWe_5p(pQ2RZ}9NLq~
z=4#If_wLPl;v5MFL#S_OB(OBa-Xk&6jFDX-f{gP?_)N)r*(0HEx}R^-*(+W5+Uz1t
z_S3v6vE_@g#eBD5@|Xh=_9N)V*CE&ZA~<WtI$&80kFn!hV3wv-mc2)cdL!7yY<b|!
zhbI?shH~h{$XA~VKfUqg$>xG}W@!78Y}HKJ4QeK{=D+!`U(H(=>FTNPO6)zzW3~>`
zb;ip6pB>pD8U3%RJ9~zG5HfzjshKl|atFEER=cttxOK&L$ZlZ&Pl+slivO0E{Zw<k
zmzNvxS8^s~`Ew9F)TfB61Z=N>|N0pA0^}Dv2lm(6@fHuRH-V+tg5C6=)byl3LK*fr
z`-QW5#svL^{4Um;er?+NPU!3kadZaRcW7+&%k{@Oi9JEKSo!717f1dEwtnbG=b?^`
za_z0YKaLYBZ(kNPEutrMqw^Py<E-n1$X88x*Tz!DsnHN)mT~ITJ#r7R&l4V?70!~3
zsbb6%;NkPUcZ>+_tzzsoX6Z55ZlG(O(`k@=0UgW#x})60-^Y6Ze8$e?&+y@rZ>r`{
zu5aqe%kA7@ukD_HmwyZWv}-^|erT`atptHt@jt7e=VtKQaeioTn)hA!B=|Tr%qR6r
z`E1%0S046pr>Ep!>92$XfB&F!i_)_=uH9sP=?=ya|Ew_ep<iiNJV?b*Xk>oYLED?&
z2`w!J4~;`jM)Wj9_$0mIAyZie&ce_F_0P{Etr`55hWBj5&UwLiOrU)+_#I+~w0wM&
zksfD$PucI9O2K!|GGiFi9C<j63=JQtU=N&`53bq!f_u~6h%B!3ZtQ)Msa^mdJ`S>b
z@~}$=!1Z~Yf#)m>HW|C-K{HsqlE)T|YI~dgj(AV!?H0!U*-x8fmOE>ZiI-M0<^~z(
z_`>tsV#ql$<ecNc5k}UDz@N$UmULdueVdA%ORSxFX=1{hdvu?(L#(-7@QV%X!=4>w
zwx4VqO`MVo@D(2eUn`Q0bbaZB*%t3naO1<(d3#@5W%_;Mg@4Dnqz|^yA4?~0S<Ojc
zVcax+!bS9aXqof9w9Oc5Z$o^C?C`d1XRtE2{d>Tl;@CI`ZfbMTyE&aTmG&F~I5`a-
z9dry<ZvEcuO!_g-)-BN3yYar$pSHHvrRnjTHcr+)Cp7*@5c}<^dBmbA=ls>nHFj(@
z2C_-8*Qhv5or13en^0#b^^q1QP2VjXy#LvbAKybk{Os+%tm1ys^xdzA*tWKwPV5n?
zOZ6zWk!VZ##DDy;*K_gszBGxijHOA%5vdLZTB^+CBbNcY!y1;tcXuM?@k!VZozB;q
zr18BBf9K;1Z*EJGcCzt9jNvVe;rzA-ptH~I{)Zj0HUHQp{6D@bvf*=Mx@P9KuX!ZA
zO~bbIz+dLb$J)lvP+T^pmwNAIe6K0cc*^hCwJ$h)Q@f1S_+xV;nP-Vhp4+~`_N?zZ
zuh3bm_%tEgpGWYa$p$AKx%BO9of{ibI?@R<d-}s!wJ_}&Z||1AS$Bd2TB764wnAe1
z8~nLoS}hJb)quHhO!`*zSL1WaPcU_*lrNp2^XHrux&+$0HIkeK-q0H?O<%%Zr66(-
zz6$q9zJ_*^&K}163TOy@m4Uz7xx)CI;cSlXSQcK^Fjl$z`8LK={JDy??w49y%6Fk>
zGkYVX*PDBe7LVSzv6Hhjlf3ea;6J(LSLT$zbd;$Jj=FM&Ux&W^X%usXKFYU%HNCDr
zWZwD@$p#C65#5A?Ubr)KHSwce_(I^fe;XLxER3(><M|>wmv4q9wdlNy$~p&zw^3K6
z!`$oC*~R?XZ5`J{GV`F<1ZOowbBBn}gp4vn=lQ-F{6L%T4*A^f3wLZlkAgm7y!>K2
zG@reCL?4>RU!abY{+tbsuNcKUzAY7+!z1_~3zl?=R-%H1xRa6p;>;iIng7b4sq}I5
z$*1F6m4|WB`e)RC#?Rt}dC{hK`VuTC-fPoY2OCJ2@1y3R;M$}ZA<$=v^@Op{>>@5v
z#}$#xCrOW<%%9=+Gj@nRLnkrxx;`zw%DDa_zstg;`QyWM6)@$}`enTTN&ZCMcx^tK
zt$XtA>~_gGqCxmw@*3WM;k|1dl(vL-3x8hm-e>vWL0@DaeC%X)JL~oM64uwvz+m%?
zEZ(d6g4{CA&JW}kt+AHYe=0uh(z^5%;@^S1nlARyGh)GoT@LGoF(2)MuF(atCP4Ss
zkWcGIF5k8Fdh4|PFWKdGS8l06FCspdR;&}v&&6|l+xKD<juFhv8~>;HE*3uO@#DO>
zab4t-k>7T*)?_U2IeNYIf9U`|$rdqubMM^!Z#(d{e`YFeEqiKqW<2^C`Du?E$-2ro
z%C^ECen*r)%^J_XIb+*;#nq?UdOu7&80M1d(+?W4@q^&Awl6X0C%4baW8cv!2)BlH
zH-H`?K-`Wz{&zIW=We{^;|KHczlVl&zFoct4&SQ5@k-KCAv4p$^7@>fZ-Vm<(OjOH
zVZSYA{LuGmeYEfF!+pK*S^Yznwmg`<uwQREc+uS<QOf6~0@lx|fB#B}w`u$HHhVn3
z9qYH?>SS$Q(>S}!ToD}pxcSdqS=`o>OLN|s%lFjJ-~VZ0er}GXIosAt=!vB(8@*<u
z<h^aPxTnnX>FHlq@3u|Km@@}{nF^h)$2tqXe)>M!K53$P+kPH;@SOG^_-opy%;4?2
z`+C>!InXYdOz|B{V}WOkiH-RT^((Cz`fOOUuxr^G&a8+}u!aiXdb%>??nka<JV$ph
zr`U7&Y3g%y&Bwa@aq2%tzFtALtU`2{C1%2oKtW}j#ajxz(MA+G)xJ-5X*xR2WCGF8
z?Kg&4%O8IPU0zwd;gMe--Sz4#M;n4ek^Nk|m9KvrXk7d>-@fPjeM@$C_13}mp7BG!
zB{%};wJgo9BVIH9N$g|rKaxBl8Kkg1N*>t_Y+v83vHUDLbm$HrS8lp|s9fCHKJ^=K
zA1?nX{MdXs`c1)tegN44|5M-y0!IV-LUfp!AhPrt<mffX(PhZci`YliBV+xF@q>mk
zQ*|zmaUu>>4;<%$D~yhDwTT=>E|?cacc?vOFmG;`&PfPHKMs};Z~v#;*6fU>jREYp
z_WR!sq960@x3=scb|hQ=j_c1||JMI`{ldTIp1-#%EZVfu^5s8ie_iPEW#&UJz1#7M
zxocaLZyGPzTP&>oc_y}hJIAr{i+B1wF~C^a{8th$obvtg>c3mu?3e#t$$)vZrlvw?
z^BupuZR2%se16=^zy12`_pU+g>)i9BId-n`(H&^)58GG6Lxw?vF=)22fV*o+A8Peh
zdF^lFQ>ylCTbF8`bz{nvV(*IaliocHPa2Bt_P`_P4fv0LZ)FGeC5t<3#!A<n2eRdM
zUg6rgJFtBn9FIQX3gk^}KndE^oKf3ha0>sx?(N#ee7H8}z@=|KY(BpFKP}Ab=D76t
z{2=&y?;!eF?m2un{K;<q8u)7v9s+?QDb8)Y3Xd_K-8_ok%=gg`gOkgd+f9d9FN6>5
z=e}+GwFiT3N4A98Ui}LG!t6m0u~&!&TzmR!57t<ldJG)-_Vo5p*Awf^@Rk(xbHL;s
zk$;BMV`F!H#1A2Z9@$b$owM6~+kSYMi{nd)QIrl1$7kRva9Ci+S9xfI^}KH$|9kx~
z^P>Rg?nJX{OL~`t?YBA7fXpV_`bF3VH<Kp+0nvo|EE~S<@58P?hI|EH`%1|6^Dy$5
z`gs_+>E+hywu2AXw7vF~THD{mDdP1~r}h(mzlR3~@3-cWVBCz}&4=+^vV&+vKHG;G
zKl!;h$iWF@Jkj8L!otr`Xn%;sjmFoguh4n|ok%|Y$})yA`tAErTq2tPO0Z4o(EYv|
z=>E`y?ik~nV$VPvWZ!V;L3|{>QiGkC^XuT!_wDH4w(HN~wy%5x@d?evDb}714I}UL
zu9G3_ldLl#_}W?BGh;h5$~n?b)<dm};)&|(6#R(f->5SNZ=z4pyz*s)+*phK=a$|F
zf+;tj83b-W&%1qR{_ZPHNTwRVzR|n>>>JFFL1QL9rE!Zuk0HhgIeGqS#>j!zefh48
z^!l7})4Ys`ud|=;kS+^7ye~(VQC{!ryM^zix#BPTMi0zi_Lcr}5c>@0bv^zvDE!?k
zpR|5u{<zA2QhMJLjFan+?w;w%Fvj)b1Mr(WIFGVy{<N02kvST4&Nx^wqwLHL8)g|Z
zhP~blof%7Lp5q@DT(YR^AY&iJmfy*~qb#KOF+Tl|wLU%4`~MU9vEM&KoWr*oJRYF)
zDWaj?vnjuLL^x5p2^s7bXMfXpSYF9^q^J|!u*G{+`;S4!09{yx=)d_)cAECP`Y&Cu
zXeb*BJ@X24*x&m(tU0Xj`xFcC5c?;0FUa{t_JWFkcAPnVvatXi*08oy;PLdb;caKY
z<>^p9IyUY54D%nIT@ijoCOpGj5J@^k$W^RWMZmr(H1<fC`M(Q%Rhc5oFJnP;=g^M$
z!YtaJ@G|yV`l2-LlSNA=RP}rUoyw|^$t*($`=`shp7>&@*z)h4!I74KN4f8zh`#*-
z9_p~?3(%h0FcqxJUK`c#!H0~tOGr;J4ub2^VDVn*ZkBJ}v~fIepG1chrXJOW9uwUY
z`eEev?Byo;#zNDrGUw-+^Cy02W=k0TeHLA51Nsl0<;<cBP0uySJm}?(64MQjnz0r-
zSrjx^Enc#?Yh5U><qybAC84|{hf27g;F3+ntId!mhx3s!Q!tabP(K3ybv4T`8WXnr
z)^Y8JHbvSF!*7J&zp?91aeE4$FWXB;>)gu@qLbLN{K7E}oCkTCv0%?#(SYy$>H=_D
z%sDgKhvCj-E!ZX+Pf`CSWIltAEe6g%!Tk=hPy7bG411p$QTh@cS}^kfbN4A?)$HW?
z9iI3C-6UH666JUDd>^r!)HVX(m_%Onvj%ws)DKTzqgej2`PjxX4UE;t8J84s%mrT+
z`Vt4at*kZAoMbKpPA~@Gp@cS^%OlAiogcVPNUs8}vy6ep<yQ1FZ!C;-{~e7~<wcIB
zDXUl|8Y_qVNBAEko*-u;w)uVfBKvFg<Dco9`tiEnf&KH~WzHz{X4G#+N0O;P!ORr!
ztADS;=Th|NP-tj{?Gt$Z9d$?19ie|q;)_xdrC+j@3E!ticRdj^#VtF7=13ZvO68T<
zdI~t>_X}YAt{FO9ZH^?Kg>WEvv5{7+20x-%owHQEn-~+}Oy3q!KkLdpG5RPuuLc;)
zPUO%0IDHrH&tnXP_g`>66+GGYZWKLJkLnP7!n^RLv4E!RobEtQ5FPotqH5wQb+1$`
z>mvBg9C*=O^i4M~zi&iGP5iQu8^7#3#@uAvh0pkFkDkKQF5nQJTzmzF+jDRpUK2wK
zdg1HhY^F~q;8ZaYMDH=qy{6C=A+serq4|T*`p~e}RK;r>*Pdb>ISfva$C4Vu@0|t)
zaPTGYdoTS@dHuiacoteV$vxD2TX*(}8apPzBMD-@s@&hA&+ZwgV|{Uz0!JDP#Y+Fl
zkgndc$fG`fU*SI3INwFzxwI`DYs?g{-KVF-f1W?%W#)$Z7x_=Oe}{AWH-!Fmz%%_m
zCg>xwRK;QXcro>e|NZ~$oqK%TRhj?KcP4Gp3p9m7%SAJj6e$%2AuWxtW+p9C1eKP!
zvf`SVq)4T>YZj1N&`jF0g2lCgDq1g{w6IIEy4#=IO5^HwQV{E^`)dm#u9wa<Ez}kj
z$}Q2-{NA7Q{hs8TX_8jx{{HyAet&#lbNQajbDr}&&v|a=948AU2Yo$vN~h!?JX`JL
zXZKV1G1+^iesavs@#2v&SzdnI!G6ob<@Bj>B)~&8kE2b+21Gx%AW#05@9L+(8D64c
z{V$w-jQ>CMa{qVqj&nTg=kxn<-U;Uu|KQKbNBB?p_zym_@Q2=O4$pg*dvbx_(kFgR
z$yWm|9F568c@DJuko8ac=g{P#Z+8}rJA>xcrm^hBiLxG*u^vS_AB4trN1bw(oqm_0
z-Q0L{N#Byvj?>`7mrssel1Db4iEKIJns=^xC+DqNIM6#Ei4bF8{fkMyOZI;-dLC!R
z;KOOTFM*uCo%>MEg6`!r{1x&%g1o<ja|$!GC!Jt9dVrPRbCvIoJ`m`Ln&%96b%;*D
zakH6r%^x%Ha{es*5E1i2N!i?G&!K~O^vk-v$<W>&zH<)O!FI}}h&3DJP=WIJNM{=O
zT(a~-rRIfp=3npnmRup5-sUD*{R-T1uGo<Mi}-fn`@uW2UTu0e{63%kjQ-iaJ*DW_
zz!)tx9TCQ_eVMh)*SC<#sgknU!kgq~>~JagyrM(&AbZBJZV?ac+QD~?u{Ob&7-J5Z
zAJ!%F$YH0u<Z09CF7nkn-7(ioteSQ;MzybgenPv#Yo58#-gx>SfF<|pBnykqhq>*P
zMAtohs(uCZ5^h8CHYRxpy@?jW^ycW!eJX#zmbLWfpTBSQ9AdW8bF#!>z1WR4Y3M3W
zUta9o8e4uoJ`3hL%ek=1H|V)m`wlY1flII%h!LWjSh~zyK^{w@2A|80HQ$(L?b=&T
zzkjX4H%Uye%lcqwNB7RGu>SPSu341b%o*{KvD^j7K1-9ks4XksIqP;SWm3oo)x$5p
zqxe2HVD#%`FCM6aESP2KWT|{+zMpwEb)UkguQ*FLZ90E^9NM(w3;flt57kQngZ8)D
z_g|aG`NRS51^2&UJM{VRUfd>Lba@!c%dm9<-?gi+_v`T?2xo#@^;Op5jW%stiHmGo
zN7ZL;RaSFQi+`{cJ*NOa+i~I-w|(*s8tkjXW=-&2xgo-_+ATn1CR5$ki2q->6<)RX
zTVvGs1hG?VqjH9j>e~K;JD;Q%xPD?q@6@kiO!A|K>lEX;9iFgl*jT`+))#HdGcJwE
z(Wj5k>Jjt*Y#aNn|7%D2u3`N*JL3CCun&X%H`X>A!9VHG!K~5x-x%LpC;M*L{Xf9B
zF`gR1z8ma+<B0aD_8(=A(SPsU(fdFD_4mJ*d8{Q@sSLiT-C>%`&@*eliCib&Wic|g
zmbE*EJ~<}$4dO`T<Wyu2DSv28L+((88FL^`xr*40hdkut52CHR?lS)W3F<URADou>
zW1e?+naj^(JzerSzJC_K;y>Pb$NdlC8_$#9UXd`pcj3D(EPl(D$V9Ir7j1ZI1$oP&
z5#-1&{jR+Z7~z51YrN(e_;*s!SM5BnIf>3#$^KiF(-}wSJZTmPP80jV+I_L*yY|h=
zS~wL`9JBkbU1JjMKHTVFwU>F#2|iU<IY+gNy=Lhk_W)z<Qm@(Yz3z|wn}4f!kCFSv
z9+KMa;6rt{;4ftjP`tGE!(MY1y<rb$egB5vj<)rwe4-M@zK*ev2PYq8>~}GCVm6aj
zGX5O7LABs%9=bAkIJ^iv{FJfj`|ic(5Njb`ISu;*95`GQw{LvEX-(}G4|@~7%Yg&*
zQ|0_A_mBLzg%5t^D+{Sl{?W!$R(_@H?<Sy!lZP-NR$?Zksb9&S?8b@6my$${>Q_>~
zf%;|OV!iRMs=M>Suht!IdV)D!@*Z$WTc-%7-K^85B=aGC_jJx1ZD6<BHXIC#8P8kj
zTX}whL1o<-<bQb<9LaY@46C{}%NW2@9^DdK|AD+4+nxLmEUNGPFmBvw;??TAK;K4o
zH*MsE!>7IGR$%>|`sIC|_iC4QcSyVPXSnxjI~Iab{_#DWX?z#$Zk_KnKUiM3OtIjx
z^U>w`%^bFs(C)U0X7c0s&9|B5XGZ2@KbLUs5dH<_ofV?^F3MZaJO?-wp9zoO6Ygod
zf$@o^UEjis=EUJ9LLZ!EZ_8<H%Nau~(tC-@JAA~;(A6k+2k#Q(oooJ2f>**gY^AOn
z>kGkrxcY)OIe~rg#I9I#n$L%pqSZ;_OXbZ!VNT%n$;mSE#|-Z!E1<2~7@xeW)fpDz
zPkw9uq-)(H`GLLM&8K&BvP<>7o4qcNHfv3+`Qy|VF82P@?cc5fPkVQ7J=BD3+53xM
z9%?Zq2fCTNmXZ%2(weRQ+WB1vz9N6>->iCZc)j*PXq@+|pQdh4|7Ukq^?vJ6G?6=0
zYoZ6*;n_#c`durKOZuH={Iw+?Ka>Ght()uNS+ynqqTmx9devSRI3SPL>p<5c$1&NF
zq+iZYvH6aIpRx;7&c!fQJ}$g)eg}5~)O#Ne#`|Hf>oM@GKDZNLmOjG|I<jK@3k$|<
z9tTfW(#{_A@i_f4Pm`IiP0&YILk|2hm#XV{N1xDwtrv%P#1DciD}6qwlb{amTN#SK
zq_4QX{KxWvYtLc~deivHKkKYpnLw|M*u5%>H>Wsv#o)jCD0`sxPVzX@q@<Hr7<ZtP
zABT?|I98<$@rp^wj#P>2a>oq&?)eT+maIy#kH^Jw8fj}iXGwVYC*!>>PslgB-O6-)
zkfmM+ddbGR@749~J2ldgpiSxW`%bOvFxqQm@W~((l_#8JT&lYt{uM2!(1q-Jj2;+M
zJ?xGcxNV_M%VE=zLXJuXh4BZTYLe%B3&@8(rS@x_8v=balzTR(6TDej6*H~(<^Qnz
zkeShqUhDe`gh$Ca+TRsR<qpL!^L&}fdTFKy<u3I1R)E`?S_ixg_Qc`n3*d^qVw{1I
z;f`!@v?x|mqxPJSTl-kaMXDK7wxA<F!Qbnsv3T@F{Gcn9wY1Te%A$AjU$`Adk8X^S
z)z){nDZxC5wnQWBA)DEVd;pHkWzbxhb~4AHoj5r0F7&#<%`U}OT<pX7rxl-<jI;B=
z`TUxP1U8@i)?Xs0F1;Kb7$4&$)EB)==HOFqOM;K|a?^L)O_g(Qt1PKm7dhSTMg1bS
zg>WWW&@_HQN6V3DjcfzeNzwLg5mS>|&)KJ{OFbjJt~cC8HRWIeIbBIVY9rjf>bgEW
zXvg}mvF-gB@nhD9?eHi4NcSA1v1J>@Q^>ajvg2-^2KHHJ;f)4lpFZozi*JDcTajxS
z@Sf#NE!m8XVZ2Z5y+m~E__G~aXveqcco%-Px{T<diMeXxE|SCGxgkZr@JL<OENJ+Z
zX<p3O;-=N=WS-f8PPT1rVPfu(SDr_|@eat3*Ki@Sm`_JnY2Z-4toRqb<$*+r*(`ol
zKaYmSmqngF9E{KClkuS^*RK!8*G-!mUq-fk(fBG$e7YLX+_q!Kxp6^j17p@W9DYSd
zj%GE+OlXXEqkoMy#yB*gF>)76y~ZFPr(|3T|2H;nS1mGA^XuA=LAx1fw<jo<<DP3*
zE{$(ZICo{%QARLEXg7(BklxwNylPz*ExC1B>up`IE*suApo3{0TuUBSguPvlK^Fzu
zh|vc7^qQ0Wj#FQ{N&&qP-ERqw@%p{!g;nT<yqjD{9$<!CORdY&jSJ|6?ZDo;xM~Zz
zBvyv|c=OLH(s#igp^S7@hg*H>{A0-<d{7%7ns_;5k-p&jp`zFxO}Sb2Tx9%zoiA3I
zHf*$wik(28+UIR^<-~85*s)po&GEJVi}Bm%?J*sngtuG8+ZPYzZQWIwWW25L=NIAa
zFT$fO0dL<H;_VgiHhK0nikGNPinhN9Z)f1`2UIuU?TqE^QwMlkZG_ubUDt=t+n0Cf
zTwOP=J@}EB^8x>{_|N%~z?HQFZCUJ8`R3eNxBXGwBRBLMY1gJLhySjR97y7DGsC#6
zy&1g@KX2_P&|jqwVPojG=qz=S*X8ErC2+5~*~@uM!hz;SIM@6P#k+sDN{(Dx$x_MG
zW64r03!%v`hVXr&WvTiQz8y}A@tnl2?7LL^&WHN!z^ldi>5TWOJ+s<whn6)ie6zch
zPpvgV>xl;q`RhY$&Y=9Bde9JG_}NXj&N-enVkvYaxo>DoYeYXV8~9%JnGb6N3XTu*
z{i({?ZL;O~z0v-T%x?Q{elxxy`>(?G%hx#<sKO9eLRR)57bEboc)v+|1n_?@(f^8r
zpjQ#g>RVyTXIE`c&1qSUoMwKcuYVr-puHG-4&J?M`ENT8)y>#`X!&msq7UOg)p{07
z)YPpu3)ok6O2c!$eO8r`Z>eyoar(Bk%ZYzgPRCA|gB+qQ_CP>SrJWxEHp!EG>}dH>
z2R;Ok`ad6i`9;QQz=6)RDq!ctuOlDGn5zodHBM%YM@}=AzREymNk*j@mj}M$iP>$E
zTP=$#t^L~0*`6M{SDyA1tJRtSkJL0=jXZ=WkdtkZlaMvY(QVvQgNz&aJr`Sa5o2BV
zJ?`{DzUG@IU6k+NamY-6Y;B4>SKwSI+bKbwt<Dx~VGIv5ZYKkg&l8em-UQjStcy#w
z(}p?8@4pcr_(0!+hjw!0$*WKKi(Pxag|3q&fsVMyZ-1cOUzr65gs;hot|)s2%*44*
z#7*pT1#&H#_%7IUW%zi^MQzd8SozXxYE8tRGiCBRQ$BhS`?X#<_W9^IYa0qaLpd|i
zTVVI6m5?jM{u;#!J;rNl6mRsFe2n$aoRR1ocU`*I)s1i#h<DQE=j}nqs5Q|g2f%OX
zWX>pIp2l6sT(Z9G!{;&{n{+F4<eg`_4&ZlL&$`mV9F2*azP)43tP;^Lv}&&8F?i6g
zG}vs>CGP>xQQC_I^ZqgP{@SG9jz^p6#j!2;H~T8jFkKpl9dDV}tUO`yitLN=apD22
zO?nJ-Z<u@K1icNNM0)Zb@X(FTt^cm$tRtIG6>2NRxW@x0dmJ~JF;|=?T*$ZLfeX?2
zc~8fBX?L=zk^kApsmA?n@F#md5=(T+Z^Is!T^g_KGlzd?3+uOH0HRmrcZp{0SU&7E
zL*oNuk$h6Wv8OA0;iJixw&>TDO~TibT^?iX7!Myn<MOw)vhEn@{73w!@n7XhH!JIW
zj=c*$4ki#=8wc-}bxs8b=(2rQH)p&JjCToqD%yAO#)`h@&<BKH|Nes#@b0nBkFob3
zSQ*9|-*mFS7V5lb=nDFac76{zk>Fgm6!ced8T?RT>SsVh71LP1V(5jF`96{F@8c6Y
zDRT~=CE(<AV#ACxeKN6I#wcAUcMW5Nmn;p#m-`o(`e(tV;BwD?WYe?MyODZ%(R`@<
zdGJNVi(VyN<L%%;`?(A`0A@_0ra(RQ(MoKTxwZYOoc2KyKlO2_I1B%!$7B{h&Kbyd
zKNxWr*S9{GbB1(ktWQHTiBF|D|6(6;pUQxSQt#wUA?COO{V&6PT_5BAFt0w41#3+6
zeB?!m`NpnF@VEEXEr;sxK|EHPJ4Bwsfi$?<!@b_M8T3%r{3hUR(l~+X@0e%7Bma<o
z$AR(dAsDsRu-CXv?;^}?>o~K<`U+V0Q_P!U0g@4RUMQ0V_PZE&ficGnG9KPQ#&*@+
ziM@dQ*blw+Fs=ytaTH#UvBoF{RY_Tm_j1|R0Ui!eR(Lokgo7wJc=`HwcZg>k{pdVx
z=zKtzD!f;GF^^dM7;?)lXRn^GPgR@^y}S!LsrGf~Fdn#b#^ND?&aSa){;mz?FH0VT
z;%WN775sc4grEDsPX&CGVB8h>;XL?1+-_aauETFD{<zCS^_Nrsrx9>U`-+*5G^XSg
zZcNIfzg%&gg&Nm~CYmYX{*IvUONZ9nSl*wG|F}ke%u_on0$7xHr{76nsSLr=K>uc?
zw*WsGXN6qU7LSc>i%r2+9xwYKvgD@AIa8A}l-*jZe(z$fmHbZ6MAm?tR@U0|dpLKA
zxy1(R5}iQ@6H@QtZd%$8!>av_VcJUr&k@cecKmT^QTaa<m2ao~p-}k?D6esS3VgaY
zW(NOlM4qI<iT>XMy+L<172qbh7a#t@L|6VIGpq4;{m`^{FuG(sxdu(pUgHqj(;gON
z!}P)RP=4uRzTY{<tg*7w(F}97Jp|_%U`m0zR3M|W++~(R2D{&8nzx_=n^AcZX`TN{
zTqb^9YH7-ta_`~zs+g&GD*Zk`|0Ts;dKz<q*zTvs`r|GTyViec-ihwo%Q6cerhoC7
z#vgk|<MipHn>*;dKyDe~WD08}ch0c~)Z%hH^dY<{k9zmr=yDgD`rUbC5WKk?x!2v(
zUoXFY<H?twCp<KOyPGcZ>0~Zzv(}<#H;7K6tDeE1BwA^NR`yI_pCNYSHfXI5TFYK&
zK2;Z++NSmY9~YY%{2enT!<Q4gdiDVWFPC;E=?6Pywd_ail8w$L$%AL?!PW7=&$AC7
z)id~~8ll5><V+A7I5Q4ClG8Q8(c|-sF;y0<5$Brv)Y!}I8b0&a%)QPO2Y#*JjmBFg
zdC&mtDPYfl&(z}h7U6gscs1zPk`D=BcX+J@H--Q9{rQ?#l~o(>a_ee98{O~>euDv;
z|BPS?;5cwzaJG2>$K}8w{0Rm_y#z4i0-erqc5qhxGiKJg$>O&yp|(E9_!>iF8nvx#
zsI8da)<Xe3Xn&(<NOYw!wWA+R4#EGvP@e~?{+vEfAB2CN-zR&H2XOJZ_@B{MEYwy2
z|81eRW}-_RKQ5*W!d33W)fj5)Ke_+>xZ8@II@s29zpeL&+PX<OhQ~Wcu@GD{{I)I&
zwKbl-!N=WJ_Gq}y3$@kxSpSf=M1P_md~w|GGrLVR*#Iqy{&KqO1pWPtaQ$tg)XxsB
zpMl3!e;oD0YsDv6*TQtyjqJarcaU#3zBaV{qN4Hz%HJ3&{~+bjXLjAsCp>Otujsk4
zB#_;~8rcdwe?>j5sTTm#aB}x7<h@{%+?C9Y{d@nW8<ClLWad)ZfBE{c9jTezor_FM
zy_0+?eZr^YqRfni`Yx<89mvZyi>O;zmFQSW{dKHSdFesOkXym~ZRmlYgtw&w-9p>z
zAL-weX3erT(IalniuWRmC#NZ^bx32-*v<{cuew?bny9bwG)=_cMj5Tu;q_!6unZa3
zFZwsHr%puzJ#rI1(O}(h^6DmR+T)<Pjj};acIqH6T;|j7y|iuEm!f<k;mqKB8^dqO
zd;NB6LZ0<R>p~KkSqE0Tb-*y6^1GT($DY)8+eYwP=i<M1hsW6yrtQ@#|NIi$7xu@C
z*G4+3ZTV=&l=AE$a!PEjnRHu^|NF^%$}=ak_&&wU9s0{iZkKc`eDT%sEyj=8;5(Ut
zF3?`ty_Q_*1Fh(RwdV8#S|{;M+jTY1d*!}-A6>+t7Z1`i_eCJjx9Xm)2)YS6@Tn<u
zZu(R|g~Qwr8cp=2@LhWo$s^*ur@eW=-orXliSFypHEE~cSF2=yCOM~~jy%-4<f8fd
zuLmwD+trX|{;*x+`h7OPv58voE%3W*4|K`da90(eG4`JKJ%g^|=0x-1eE2TTB74;O
zP-dWKVq+GF|B2RCGDh(XW48Kq7Tq($ci*NA^iRg@$2zt>Ozx`HH{@^oB4u;rUFe<W
z(fQ3yz$^QKNw_ok1+w1iOXglj&L45y?cg^FJSk{DaUE+Ub*GDmuo=N={apT&J*qM>
z{+G=HPG!GZzqQ5|qmMYcnEV5YiRep{OkdUW4Rcx+p%<CV+9dz!>=nK*{628X7Rpab
z^i30Q@u{})o7J?SN2yP>odnKS<HLzeTOc^xnBw%OHg!IAgt~K87aOktFDWLfxQ}3Y
zk@(w-*sOD*rIsDowAlWOnd_D<d<X9>InSOER41R6V8mz6o=Yn;b&gCs`c~F6n`6KY
zjdi_<jwIMzEVN}W^%e7=ev-0kL-JAO{4-r2B@~m{bvpB;dctG4uQKM_&I$ID>ZEBy
z{i=@oP#dMx4cD1yeEE|4Q~xHF%`kq^do8%@Cgx(mO)KqWfJHt~|BNi3hsCp^FY&75
z<Co9UIg-IWiXq;W&6tL-E{3Q4J6fl7J`~IyF`&(R;H`*!IFda9PXUMgr3XFW7f*?w
z<PR55X-qE@r;7ud&MMyd3jVMW_^})MQd!53?rh^QPgP+5YpxFjb1fd%9<EaEh^+(%
znv1tG@A~g5_^UFQWBu3vH1mdEWO27y;Ju01F}!>awDE&7;w;G7hho#(rlX@VmkZ03
z|6w9m#qUf`NS3rtsJe5;S3A(lH!N=IC7xch+mtRb&}<p>M8A{q9V}^;Z!efb&3TjP
z&rDcS;QyrO$BpEJojZBZE|mY3HKI3(PcJ<-gD<Xf%Q$3-qcz2W6d#%ZOuEBmL12Tr
z_CAMCX&&t<4yF7gcx1BTP_%hiZ7zpi^u3j~6^klk51??Q^M=GH{r5sYCqw66a#@_Q
zcz0iUp7?<nS2O1=&E&kCGrem}*Y$xf=RiQG$pzR4R(_4|?56GOUlD(wI#cwVTp*tH
z_kiZvuh`D}YkA*m`{YhUKK(PY{MgLP<R@BM4Cq2~#N}E`UhfHFT7@RlHco!E)41#N
zWE*c_j^F`gQ#-UHogo7a$cAVI_tSG`!Akj|ndkHH<xF4c`M(!&HjCC@*7Mr$dCgh&
zNJtLv!7lt5wEi5lwFmvA5&a~4Hnh$<Q1KJa5W#QNIu4nM+^>|M72836R@o28NS_}!
zBKyeSw?4xM!7aWH*4diOIK#Sx?P>M@iNvSLEhzPMjfvn!ea?mVYRi#@x)VC&NB$9e
ziE1zOnvt>fwe{HHj3veRZ6EX(<4*6|9r)Gc=Mp|BQ^2?9fr~V_cn(=>%Tgw;|KSP!
zFSz87i@gPZjASErk6^qGc#tRWc#M4-vS*nC>u1-#4d~0(b$*Uc&KZ*Z=lmS9?{0>s
z*Wq7I&(yh9K20-z?q>-6zKl=4s`Eqsf)d8AzP|!~go_?vev~zQPjsU7zZCGfZsWcq
zy%S7!O~OYVgMV?F&3c)#J(SfRNwpJ)U%nHRck+f@WxM_}XZC!Mc5IuM-zu3sk-cbs
zjBDUbv!GweuQ+{g2-?ybFWgJsiq6#6%>m5lFLwQ2D*Ukzb|Q7P=WTK2pzmDr%i&OU
z|C+j@g>LZV#(Fn>X^a}HU6UE7{O5}+xzCUMblqJvF#pV3`~Y%?ITbuD(CmA|@A3N@
z;Tss>SDTmA$esbk?Zq=y(|p@s_kA})$5ua~j_}%0?lrf=CyMbjD2Eb0nSqRG$eCut
z_j%yB;W6|f{&W4O@PAd{|2n`rAi9VIatVA*4(Q@=3c5h|*#wOoHrPNZWZufjrmOWN
zd>Fvqu!Fn_V17{TKS{snTf&=rgx95%vv5rZR>glFGYf3&r=0kj)@FEr04Dq`75G||
z11X<eGz8PV$V$N>n3Al=`ktrX46<^00MlR7m*cBA^41G@!0}(J@=*i)7w-4{zx_H_
zP4++M5=rlAgdQ~Ck}>$7`p(7X%JubcDj+W<YdmuJViU15nD-R?R-tvB{M1xHXLc=t
zSJ6wX9+S8C_90JLyKjbGBJk@x{u5ouKN_Wt7Rt91Yjw1m3h*$V{~R7PF98mGUkP-m
zvA4pn%ZUfQnXzkZW#C-&r8&?z{uLeWx5POH^>X~Z@X0S;>VIHA<GqskjWM4O9~$(Z
zNmo(+hl59VoQuY#&pDh%kV#4A(&lzCmk&Q5%q4c0<2T{(5%@+lE!^EL7@4zQU~?|w
zQ}Z>Q&+GYI$>(43sX6FSIq5CfOw!MVt9SC>#NYH=*&({xOB>QHlaiws0xz^BeIv;{
z%tMD6)Gv|W%$L<M!SkZ>dCRi!OdD`X4~?-0L+i#3^ihEg5kv3TK$|~A=1UJvu|`Pm
zO(C=4u{KBB`kYHVH4UznXH~`dU@B+zO*7^y<?RXod$CEM0@r(p0}xlSxoZ0VQ~am?
z2V|t^2wsc_G#l1YrK5;OQl+dn0iDI*b<Lyv|0U(gWv$Sg+PxI}R&Cm`F%HE~OTbrg
zdmi{!`CO@46NW=NX$Bk0!-hic5HH65XC1}IcvTv?1FmfDpofhbVUDy9KW;8*OE6E$
zBNXmpuk_CnE@V47JjS8rYykVS;C2J>D>qW*lI+b>&a~i^POb4Kp=HgR{!3{6Tg+NX
z8#&;U-uEz{57C~^e*6*NqtHSleK$Z0;E1~dO{e_Wb<;gRo?k*PEATW?CrZ0-qQ8a|
zZCX9}KRWckXeM$sv1Z;^(MR-Z{Lsh%?i20$IeNX70r+4m`M;9>tX%{Ap8BDFCH0&Q
zBwAK(#jCxR=50QobbZ#i9kOwq-7cLUeZSM{Psj+yw#%b!yOz_oX!Ygmqp}OyW-;F;
zmgtl1u01~|Glno<d+2XHFY0_Y!yXiJSWZUw!aj(BmkQb{DgVH-1mo4b6PI})hCM3V
z6khZ9e<F`O=GX22ERa_sTU$0lv9A9T_C>`!;0w|0Co4_g?-;jeSaavbdXzoSJg7ab
z*|I$}X4w#e|KDEp>)(dX7h?{@U(SE?N#@`-)=jO$IjeK{Hg`At{t)BV{~EI!uj1l5
zfAeWzvSUP^2$zy6?zg^6ZdiH2{Rf&0;lw`&i97|`OM^e@dl~KDU>(aKBb2kI^|Zds
zY!*J>i!LGC?MdWGcx@2Ro<_{ywUL50)rNc(qB;4eRR2@VN1mKNjln<H5joBH|CVv7
zUGZ^kHM*r>xEh{;E>tg0ndSIcL<i)#SXqYVxBwfY`AYh#kDASb=OyfW2ZP7jDEXCw
z2hGwmPq8s%#?#JRK8Zc8cCQTlgW6N)^g$Q9tPbge|H=C&*;no3OgftE$-#RDG`H@I
zsNV(tlSioI#x6b%%kk8kecUGaES{IzpMZOCUi)QqVDM0d?%?uB#=(QK5emrb1mlvP
z+|77on>T`E!J%;>_jdg_u<KK2`te>*^Q(D9M;7ezg*dw?Nn5qsz2-c+d~FWd@)jTO
zSJH;$W@6f)-C^jv0-Y#^&$|MBC_OdM|J6S7I~()sYE5u)^u4SL%J=q=i7Vk}+aLYl
zAFFpVFp2yVz2)M-Ks)(2@u{^5J^zEyM--i+q{s$nWh~-D@sI97Y$2~9kFJJ}FxlAz
zH}PBgh0BeUO|Tq2s{uPVjh@vFZOIl*VCR09d8&QTYhHm3I=y`EGR5ERnz|7_K%bcl
zo+UShXW2OUO2*E(6O&A}r87R;i7{yo_AvgW;+c$H^qz$8FK6t_S$AZ!$+v`T?TeS0
z1?(-fc3WCFWd6~k(6yLf`e@a6aFgI}616M5eidG@JVe{V=>@b4{8lGP{Uv8ro?)u(
zda{>%bm9pEc|gkh<#+eib@#QJEr$vf`9rbkxwW~eMtM-Dr2bNQCqDcyp)YEEkzQi;
zaAd1=bOXMf?j`<mG<SicH_Ceft#xxwsw?ksved=VfW0;7%kk3358-EGFLFbfv3Hx^
z%lxj#m!kXw=Go$U40BVlNpk-3Wv#$-19;j>4y-{p0+xlsUpwC|{u0O#eFuNMxA@z`
znU>lY{g=QY-<8E9=X*vD_E&Sys?}$b;8b|N@{o^b(eE|ThTznAeZN@5uHj$C_g(rj
zbn_&7(KG0W;72|U^x8mP`LyuP(6~KlWE<^epaIFS4E3}Z++bVe@fnL(v~CojnJtuS
zWQ?M-hI`>n@g1_k%8=F23UMquR_L}>-$g5D`(qWX%;&Bi_Cfp*UquhPi{z}OGurBg
zH*8(#JFV~3jh*7x6&(u)t37ll#xL2ceI3G$lihl6z>%ZzIPdNS-nt+zA(>=#_JC#_
zZ>Zj~pk3jgduFW-IfgNAh4%|D4APBY{Tyvt`U&RlTSarHGYQluG)z1jS)kwWgXUp9
zWu5-ejy<u6cNOFU-c5{NZEk0tMCb40{|4rufR11L7`PO@i3gciOMBpkwa4c{=;vPA
z6)x4rJwYFi#_!^{&!2T2so(c+Y6mZRr*Ut3LGVnmK9|<u|9|DbwD1a^RZsa7>jV1H
zy7nyisb#Lap?3>YiuuxaV9NZ790YJAn#e%wc1^$rSGhQM=~n#8*PUgT7tkRb9A|=m
z2mfb-zQpUAYs<gzyLd|LK|;PB=*t6VMmT|9+BvttA8(}NN{t`d66`+!cEQ@p+GSzg
z0siz|_#0zpsSn%!*Su!*@_O;B_}I3~8YErN(XE4ZTHx;+0^fA%adyK{`4Z_!DSjB>
zu{Dq{AGA34&t-o<@QvB-Er{IfEqDljobq6|!h?yslgs9lKcPOwFLmI=@k_PF1Re(P
z&zJ`A-^aPY!Q7SxbRZngqK<0|J!qh<IRD$RGH%(_+IQs2eH?$P>vL-Gzhu>o{C@+#
zJ#epi=>8?+4&=S#sXf5_5W1tIyC&NY>lOT;f+v(C^jgtbQ1&cL?W@7RET5;&gL<0p
zkMQUoSLLG1=13UxcPajxc53F#1fQ>-k~wn`G#BIhQ+y|9dCI!$m`~<;-TBZ<uzn@5
z9aC;y65ZsHU%d0s$Fz600A0!M5{&Wbtl8LJN!fe6%hHzC7vV<q@XYhR&Y#8KFP@l^
zFl~ZCIfv_zL9|<)3gpZ>=tzDLt+Sj<HdF1Z4MQLDkE+dGu08htO0RP|ojZ%FZ^=CF
zk@~^IveW!_rrLH~8_KWq|DWdnKh1CZ$>4u0zmYd)p8vn@0bUm9`ziE$!Ju<^mj$|h
z9^d!?Z@_zL`EeMJ@S*wp59%u(RueS~bvAx&)ZCOJ*0L_bc~X3CU@o@twDOE&J}Pcz
zPZ9cJ#Ul2%z+dgejy7|Dmdb0d@#YBoiz2K)i~W6(8+b3D_<BCI4_a~~DIX3vG{M*e
z^ViUsMPsQ~hQeFGz7@Rb0A8D4$NYukx3WuS!*9-J8qO}1-RD7b);2V!FEPji<dlv5
zUIIU##MqoX7d!=GkqyCIX0Qik3l89s`Wf_N*;y)kJGg!`IG25uXWktg#kQM=?0<EH
zSggjV`N(4%J`bMa{PrdSb71opw-sj&itRwzn}S>M-3y<$cH2hzffU~k>^A#b-(^or
z2dDjwzD@0)!4aLWeE_V>#3w}C>1)^<J0Jbc;qDsrQ^wJ7HhcySD}ht%VI_Rn2wzqP
z>!W@*P?kHd>bJvl4an6ze))#^@E|%tLkab<N8-ru<;-m!`@NPnr?Zbag}&i2CyS%#
z2-ww{7i><u|3^M^<orM^u25(1xY$)7mmi<+lo;@2fG0-(d3-Q2;BmiA3AP=!#XaE8
zwWk=Z+H-b$Iw8EWr<1X}*jyTaO}zY)qjK&VkWC4VMRGwp7GtP`W~6(a#Bagg8sKd?
zXT;3_w!48Xj(m|VQh*oVOgw8`iCHk7{+6H{8P4a7vG!JdI&nXD*zBrU%|2!91w(Fe
z#ns?*7Q9E@Y&D;Hhn;>meYBQceqPx))26)4PTt)W+5>UkII~~_@rutVMmEEA{WHGk
z6frWvGV>zEAI76^lyoMgn=yv=KlDFv0Gtc{9Q;`8amJJ6Mlc7(IP0FR{T$;vt-PfT
z|9+s7PT}t#{?I?QiaDNpvZ<~@my(^M-|>m~ZnvOYT)<i#%zGR=Q8>i^^T4s@J$|u2
z?`dS=Uid}yqPlC*KjfQL{Y;6UzxN(uS}VYZ%ip_^T%~^Ov<$e&0I#3BSJL?e<CYz#
zx_Rujk;a<@<{t77_uw1uhVGQ7Uzm$eyx(-3iElFYJ9K{eyr1LFh7ssC{x%<e58X+=
zC<p&d!0&icv@TwBxg4!;6`uWEyEOe;JOiunTn(NJ&=+|>2NTo%e0J|+H_oYrMs(g8
z`T=!Ixrd<4&b8*bh4E^vlDndzGOu)%Xd?D(|EBZ2$W{1NroQ5I56Y1*j81{Q4X#xm
z892b7U*etUl`{-%nQrVUmH8L?$nNd0RzI!qd4_(B^h)MjzSnl_a<%y@`cawDc)hhM
zz!_t|(ZO<(-_IKQNfk!!CrKPk{cJmqev&c2p8|0k#hIGOr(1yxRDF$UCw_yG<|vKt
z#m!NY`VUaw&TUZl5W3Vzb!BI{y6ucnKK~|ip~8KCdz8LgvEf|(IDIRA6rQiEz)|99
z|Go*qbOpb2KOY%qaeOeUPp;%K=cXOmZuuX$P0^S)k22;0z842`D|N35U>2TlA7!j@
zY<O2MNxi=a)%(~e_3Yk<fQMSak)I>(&+GN0)NAKXch_G#^`vh*dU%mMldGvK|7RW=
z?*2V^HNBUJo<;AhFIL{C(3f<lbsD=%>%G<`wec6!wfw=_8=u123R-W2b@?b6fGiW=
z_n>#EEx{!IS37Coy6E?Va4A=Nq;}%O?A>_c_yc|iOl~}9jDm+WdbX?AO@F(ocK}`a
zc0P0H9)GQN_`IIaJ;dFvK%VySU2>&L@0eF7?^{{_e<Qn!F=+fF$;xiZiMCpi^&e9k
zjMd4Y2HE?8+&EP9?z+%B<=CsvwW0sCZiL&qI`r<{ywki|n1WbZ1$w7@eErkcnRK2O
zHqT7Wzr%M}hl)T0Nzp((>o)pO8RMy)gFeJ}>yHlnuH?V$l5b9NXX%xK_rC)hGs~Sg
z$jvS^BkP~$UYq&}++CGEIq=z|U$vrVeUP<8dwJWLrzA8c9Wse7Bpqu2@8}bm0Pn;Z
zhuR0wmq)$y$;Qv8z@FsXxq8{&DR|Do#hmqRWt~>8l-7^jn*#Var>-IfEcjUyz$^b#
zjQvTfmt;Jj`<*}E)#TMgxSPlM$2);HO}<2Uf76Kc06e~q5y4+Rn9nGERX8j}Cs_YU
zEb#4zag@Y2Txa(x`TIK1bB5j5p`3)3(}P?Z^f|@D;sIVX7LEV<Ag@6<(0{FrZ(%UL
z?UuIua&JQ(s7&f4Gt1G>%T@A!W_JCMa{BamUJCprUHtblI(srSf3@J0`t{N?D(R;R
zzbJXbow;CtlIs5{=v%PFDI*xa42;<bYqj<)0mE|TZ=jnb&~KRg!Tkw=Z797(vPtmC
z9?`l^+Y9ePhKo;c<u`SGpK!1*0YV+JKO!~Lbdfl=DqliuEPF{?3wbgv<b$V(x2I?;
zMa<pWf1FJuyE%bAC>%(?jdOocG8n%{KcYj!d+EG6Xj6VDVx*RyG`^2AX5f8?a;O(!
zD{8Ja&X{xz>U6V@Iv$!gjYaj!1KO3Ym<1=6w*uNt0z*3D=dvAur{w2%`$|`^ue2rb
z@yC%zt?Vo1?x&f;7w3}orKXv#I^hgiUKiLx8k^+0>?pfNl6(F#^Z3K(d|p^1oFXGw
zC%Sa5S-bqUv~@B6n*i62=GHP^-5I4EYmKvl*u(+wFBqMEEBvo;_)md<;9V#D(`F8t
zEf~+RIQH`~Pv^VZ@0nmameW3Gx^%?$^v|+$!n@PJ*}n=F>9UFgLYu|0zXAD2*)H^j
z7(6EXat(W#Q>PF+;5^w@#<!;wpUD}-2R^~RXW|CptAt_&oZY#S7>3HYcUPjb*5b1-
zP^K09v|@)3)Tf*Y+Rz?CwZS~j#-7CHLUxhIX=C>`Cgq<UZ+$M%2XpPmbkU2^Rfu<&
zaApLus+_abux+u&>cefjKGg?nxZelyU(u5ACjaYyC{Ka$rr<OA>DF-eV@7QPzkE(9
z`t`I1%!7`RITqjez2*CtUtYfdH0{+rhmV9haqP!9V@`6W)HC2-<4P;vL~X{{-w94C
zIOk=*@6WMo!ea2CIt5^h)7CGjSMfCX<Ibz6G=K2Ht@td&*D>BZf6?9vk&fTvf4LR^
zg<#JK&p`~MJMitE9nh-Y@1(7S;DA=yt5n|rT}j@FUKG=mjMM#&uiY`J<F!Yl?C&kN
zv0><Eweo4fLto)`=7{op;Jv1cl3hLEOKmFFD!%;@<Fhbw7KN*~=XQ(30b4y@8DSlG
zKY8uf4Bo$}{c*WD)>g+KP@W9-$Gv?0<c`$Xg&hTQ2DE>*|6=rc_7|tWL=Mn+Uw+5Y
zBU#J3UOL6B$zRMF;!$YvvtD(cF{dcEqRdp^b{~11*DvV!CF8u|OUg?b(|OmMBAY6S
zxkR`J1HT9GCA#J<G7Hu*j}J2^$`woP@;EaF-H^H22fYZMJaDMp)P2O5@y9xtbcWPO
zWA@$`sdw;d?1I^i|M63Z12PsX<Fy9xj#$i^478Vjxqp-TOfOIL)xH#cp=^g|X|Pa&
z|0jP*+a~yaIptKRX}w+3`%;wE8Y5c$SK0v|eJS3NXLd0E7LWXf1sz`jR<)a<-$n0C
zb}_eI#A0V5=N8sZAqMq=hwcCmZ1L)s;}`ts=?gm=kXgB(^8XrQQ=bNo01x|^8{vR`
zfqh@4U5%x&!`r0(1=l}lEb=Ylcga8O)vM1((KQY9YR9EBtX}o}JfG#{ncWnh(^Oef
zGZHT2?*Ny=4eb}>@)mH}O8e+>c7H_SLFNx0tRlCk1-_e~^Xgd(s#}FK%5;}SsvQie
z{ev(V;7b9A;7<XI&-dgk)AolLkLrldbWTWW?_j-HP)~L2m=ALn2k%?p{cPToFUIoH
zQ9SY1k;n8d#v~pPjx}z_3*rI6Cw>ro)xahC&wg`|_GSA!x>MP=stjc<{g^pz)1jZc
zXfq2gD$qsEe~k=dGT>X)7wztWhjf3c+C2>zHLq!CDT2Ie$i)xdw8pDX!z084nvt<H
z<M0?hq&}VDnS;NYka@_q1udLcS%OS&MW$Dg@0JFZ+FQ{@DMOs7FY{~vTqTFQy~vX&
zJh>8jw(IiSeR<;G5==9&r&a>b-p_iQUA?1le%8=>;ADp#Pb$*(8|3+j_1-q}Ts<+F
zJqpl<=py&XAYJ4p`Sc{Z7^&UlMI*QSecBbDmfY&i5`Al|tkYf3A>UKCc&yp%M}wcW
z=8KnWbIACA;bZ~u=lzSf$$;z4W6k6k>#OETxm1hZ<#qY@ruuxU_BKq$E~BlL*nsQI
zX-l%dL1#nOOhMLYTz8Ep&mCJOe1=ZbP5v1=;@NePF$WW@fh$611F2oXi=NW858YK~
zu6>mAnR58EQ^=)#f$oa_($y3(HEKua>9CIMN+A!{a3+ypQrn7gsO>^P*OvZi`!?Y2
z0nVnJ59bY2j)rp)a5h1ki)eqVWTElu6*F>Y{kXH>1n<5tm<|V{`d$QFs%PQ-LZSn@
zwP*e~7@N>9)n?)dIvs85OfU;irpDs!hVzdNkBJTs&%Q~fWACY^YXF{8i{P0wGCZkZ
zj05oG0(fG_0Z-}w06Zmrn*;Eecl!7tPE$-*#q*W>laJft`FbPxiS-rDS2lpBdUSZW
zqvT-jUBlz2XX@zl)iZVE`HEdugr9r>&-`P<lX&}yg-2t|zO@LR#HIdx5pNxBzEsy#
zpICUrU#WK#!IKT(sXsP6sUmttXY}Rh2y#h!llWZnN%Ckf@=5$IUY9&bA)6!<G}cT&
z*OE(?@6BaCp5~1Xm&Rl+93D@vR}KlD)Z2>ilnUTkd~A3!6(=5^{MkkD<O6svJ2pIt
zb51-w*~%h#Vt?V!*VV^{CmT8O@R0LYv~C3OTz4Gs{C0S`_(tf*JUb{Cr9ZlL_9b+r
zHFc4;uT1iF;FTvI4c}0GpyXig3rFb#mhYqwXwAI=T_79i0<5)`=Z4b-qz8!S)^S%=
z?DKw`T1Ue0aW9MXfE`VVG5&ncI2yk2x?<&&H~f6Q5jma;=>g8p8dH|(8uN<TB;8fI
z)I;Q*jwVAT8!|5qom=(~49G0-ca$y#-h7#5ZN8CZmfFs~;I}QAB^XyQ&nax<7VHYy
zk5%MWFGhdoj4k36y3fq!%`EgLnhu?zHV+*U-%D57MC@_HJw5n!cH<jb3~%kjUo-}P
z(L>W8U%M~v&2Ewn_HFdg3^^zGYvNaW^&g`j<f%QkQa0&JfAZlFt);%3=)3j1zKt(f
z99+^{rAzjmY}TYI=haj^Pp(!Ic1ECcXVZf^cZM9gVjE8O(*akv7n`hMu&(*YVBK6$
zSNi%Vf%7(C5sW_u#+7Ggx~6}sf72T9rG8hMDM!s?F%M*KAIbyrS6CgMxXMvHpqL8l
zj_k`~eRzNeA|(gSZNu}xw;7+qM<O&PXVYp-&SxMP{xMWOcK#p^!nW+^88>{jx+xau
zj~^bLuPp5z97?+<Lch-MACyaOjOP7=FuOVDTrq36TN@BRLq!k++PB`=d|HiLbcT$?
z{@`vfa3I;kTHm!2TZw%(lOM$AqdsEHg>+6c->aAW3Dd?E;02kuan1S?D{od-9*vh`
zT1ebDlokYo;CUnRFuQ1w7FI0e%yjrs`-1at_H16hK{s^y%o_JKr{V`F^Y_UY+r@=%
zde%Ruyi|uL=c~HrH0*qM$f*7O_`Fm7)~`h@K>zu%r+e}BFH(Pl^|zgd52!)8%!B_u
zayl@4q<@x^kJfGl=Ily*5VR*B#U5a^`>nEud|vsrBAp4=3i)p;DU%8OkBV32@AiFT
z8sA&!PwRs9bL32$;FH`1$Lw{8cIplr`O8zE!B;{*9_{OY{1oKD)jnlo5%+qtG*-2z
zSfFrGu5r+=gSGtz@@r_@!;e@?yeY2V_&I>JrULoW&b*9-=XUIK$rQC~{aE;p9G*YB
zpL}row*4UE(jTB*`AdZNm+%eOD=%aamp2Kn`l0x35Pq-q@oVvrH*G5-%2~&Ejofj#
zJ?$FqOlI6E#vvRFzd8piztXe$%^Lr%DT*WcIMDALex!l@%>4dO-dkGXyxVx}!nS|d
z-~Yf!<4%9gAGhGwxK&T%R=e`QJTk>hv9c!hE`JR_hHfuelX&37${Ohf*)@Z*#=?^i
zbh1T9^LSXNu(B_E;^E1Ey$GIMfS=>BF}`@>;Yr;$2#?mpm5D!NP1HT4wL|6LiC7a;
zmkr86@o5P<*JGFVZ<+#KAJ<w9T#0v{c(}5c48kS3R7u`)IIiJ*xh|F<p2$svr-B%U
z{JNQ0{yuGwIAqJSqwv?AUVRgK+(`UYI|+aC_=TKF<Fze9x2a;S?7tTOeKa~Ve}O^Y
zi*!DFE%$~K-;&;UMZ|3W^;mM<ka6wAN?MS$`!6I1^3KG!(s$nR#9hQJn^-SzpsjB#
zZoh16N#-w>FOK)hKRg!wP%;I7?<Nnq7)O4^iLulYW4Q-Eq4VR5_c;S!^0{j-dM&X)
zWS8!5P4wMJyV<w(&yr1m4c^y+oE`VH_WH0Fj%URb&J+pOclO3uIj#02)3mm4pe@<*
zTHBj4W~cJ|%~PhHHGaWMzP-M>DLcoPHA|1p+xeCg%S%>%eR`0WkTn~dVo@KSPaFq4
zx1U&eB>NJ#4Z@@K*}{|!U^;trn5<3pt>IyMBQ{lTOp%S858#<IIy}O!DVnnrX-CEG
z^v5bY%ITyr{EE^Wr7xz4#mWw`dN;f;+7y3ppJ3LkVU1Uv>i3f0fqosu&wc~B1Ebl6
z!fy`VS%i*J><g96-@`eZ1HR%S-*wLei4lF*<S!5PLF7E229JSXyH<Yi#Ll;+p$`nw
zpk$`iFTmY0@HUce5&r=3N^q*O#j(MgCzvVA(T&4#)*ETd%~=kg$H1Hg@fyic&6}IE
z>qF(Ue=%4-8;bALvH#ujOWwB$ZitOOpQ6v~UBlz=_4>9g{#FddpBn@A%IY<Z#K?lN
z9FNVC^@gsAZ`fv${n~%T#&YDtaW;U3EkYg>cD~>;tT~z=?0$~Z9wqK1pU{WM7atmT
zvUKo9?5YfOtu}*r#p<R6xlO=x!}Md%DY+;^c=SZc9L;U)<9^$LzxmID>$0J6IlKIg
z$mUedAg#fh{@Dsec^?J*+>VcndGnj-BrC}`%2!3(_EBGFMZN?LB+*SCEiunmhVCvY
z@Lp#G=i$v5wo2}~BbziQEAbDGN+Zx*>Yz_^PHvtEoin$8kd6gwQ>@mfkz@F7EsrLL
z&V_Uq$u4xDuHj;(#~YK7Oo_c~kVY(AnE<Zihyf(tI~1-HMZ1EF+(FA1qFvF0lS?Jz
zt?w2e)A7qq?9d@R=4ko#%1w(m@_V(miswaFYoJTfOXjD8^8QxV^IKULe#n`D$a?h0
zh(G7I9$PNN<_!<C*6!C6cNQIG0y-LyQzn4t82)dKSN9N%q)WVBc(iBC;V?YMFzCQ~
zYrZpxPow=jfsQni{74f+8fk66Z5%cYb5&tZJLvu5i1x$oOrd+pzw#00Nb}du`NiRT
zic&$$!Nad@q^qs>a}Fkwj~@1qek25Q;-*2Evmw3ia{9=@`z}x7?~jouv77ZOcm42d
zs%(~Luz`9wgGcmyBk_@Z0P8a@SAsKnihaWxul&REW3G#gJt%u8d!66MZfJQ#yq1qF
zmn*<)c>c};7rrbB;?m{ErguZ$<Z$%$MtC$uZjhs|k;auAKQg_Lhd*Vcdfj73#>X$I
zCw#o)k0ax=d+Nybe@uPFHq=HIn^^f#+@EN38`I<{IvuyWjQ9rS@|%xrvOWObeUoz~
z!gRTXGIlO<!CXvv{d4g~WY6);g@-+)F%PGg|NSU)k$!FDdP_&C*ZupE>)kX;z2vx&
z=kCL!)axdGJJR^xH%dM4)sf*$j8ZS%GjhF)MyVGkPhliDr&Dj!SbXZ}yShKbo{_W&
zKh4KX{bQd=+@C2iJ6mr`&8f|p=9T4{wU2$v>0KqG>s`pY)HnYJ^sbIUz02v0(i0W)
zc?msIx}$VN<+AyF;@^E&tUqdvH~+hT)5_z}A9Ft)Dzn4-qwbNDydDzIE{f%8jai2t
znqTYN6*1PHeWS?c_Gd<(=Pjip%dj~9t&!%LJv$@HKJWRF>wS%SD=*4@Dy*Z+P8(fE
zKh5gs(2mv7dpHC2p<(b`>^~oA&3L_X%Ick=HDk?9iJB)LI8v>-mu?VyaBy9Bx}9`~
z_rEl<oR5=tF_J#AU=$q3A0N5iT)&>(GhZB+YtN57H?u~mmmY-{&K<4ZC^F^@>WRLb
z?*1gY&zj0HZKra!qP4}&JbEoEj)R((p)%nO`xGQ+?i`c}tnb6(vHQCt<FN-n_ek};
z?vd;LY_xhm9=YBRN2%BTZzI?1qFy-uCpq+6?hR7Tz&6ekj1bGq50jt2{F6sEvln@4
zid<sNpZqE*bdZ*JdR_UJh~3+u7%Q<Io0}nDnf66AEFyOwA9adymS5N#6AS#CF0VlG
zz_71uHSl~=?GnTA<!`i2?TS8*<>M5;CfLt&qV>is`%|3Wcs#a%_Q$Zc*t>4++Hxj)
zU5;K`?7g>Hbad91jbYz}U0aZS$6Q-v4{$cgNdBu~*B11A!yLF=DZ93)og0U)Et)UG
zxZQk(eU*}Nr$Z0NgA1Ka<kl4N{d-Tce%N7otbLRAdJe{RyO9qzw>}YRD=i#ffB$qC
zIwkg_SW$i<ds)dF%5rvzlevOH{u230p2c2z$==sRzLN4ap;_f?R!}F6+;=+k3SvI!
z0}Ec7QnIRqI9dkV9^6z{1o5La%gxRn&O_1vO_a-Uul&FovB<~aa&)8=w$>u-Rq3<J
z0TnD-o8)UOh3=Izu6g0^hN+ehq5Bl^d&TqjPl|NZE@h7+d$5$BpPopb6F%!m88La*
z)6B{KzO3*#zt7l|m!+6k;sZx!x%i&57iQu+d64t+ZljFmw4LvIC%nfqkv7TJjyz|S
zLA$aKwPriImW~8}4!Iw=n2uAy`h7ffthIY2IzCE2Dx%?V?teJfNj8S_!;U1MTfZ@s
z=GyVei{`5HoU!pHQ>`&JWr8^0@z_d%4@3OJ{;zuHThctg9>0jyLD-A!<WH12C@@dj
z7u9~<k@~shoPCeq$HR+X#^0cPjS{0Am_&`Yk~Y9mD|^P{?D<aWJNs|7cMJNTrL*kv
z&~F1dJBcOiZDW6U0ePeHcHcREZk11e(9CjYmwo_xxp_C|;Yp^k|E~vsF8itm&NYeu
zy^n9s1DYvXbGa+8f^Yp+zEQvzebvyX=uWU!e2u+5u5aLo>pOk3Uv$<;b6fbT-&c6e
zbN#(i!ueLT(~4}c<Jm!*`mQ!hXcJgGa%;ZLSi<%9b8hrV{ly;`N=tF-i<a7V;}axy
zz6YCK{^>ozo<!Yw+6eFc@&$kF9<t?2^e21je<8=h{r1!Emo@L~i7q^Gq&~wO=q$8W
zeFx^uAN#An!u)byD>y8f`5<<`8-wIshIZu#)_=lpBXq!~*&zRh^Fw%l5A_{?i`Sh^
z<ak{+k?vd4nl{|J6}!mUcE|9kYrVN}s2(R>M6l^BkfZp$$Q~M&-)S@U_CY<)(PP@q
zA7@Iv?Z_s{(OUL6bwlUrcO|=8Ik#iyZ~VQy=KLd@ZbhdNZm?z9r-|GIo}0nZt$hCw
zbJTJ+`=b&^>TMnwZSAQ&GOLpN29&dvC`&F&*B+^lfmb7Xr602bo_UOXu6G@&ABkp?
ztwU)>ve&M8S+DIq(9KBoy3woLx>_6;A*XE07Z)BOM{YsK`GPxGb0j0=zieS0O0D<x
z0ImO@qD(71-vixf&!)xEMMvrj(5Z4vM6>&#UAJHJ0?Hqcy!m%xn#WUa3$%JX<t{x=
zId|c4_S<@#{f=|I1b_Yu^x_?7z2{^HN{&#EJ#i20<@fQ7^Gf`L(zRPh)U`dUYqz3j
z$DqTCMVvKKiJk$^#_<hE-+l{c${tT&I(JquLU-ig&1qB2=9|E(HGd!SLcA_n;ADXK
z|3PTp$qC7X;bej8W{-FM$G4FvTK`?_NV<`7dn6NFeu8LMIXxz%$A)Es^epKCf<bxz
zP7hG*Xke@<f2_@nRplOnZ{L5Mbp820aEo4+67Hva&E_1=U?Zm~!Sf6`><^jJRfcCQ
zx$J4mRFdP~K#u#v|J+}{ZThygjsILadmTDv?w%v{6-yJ}5)QX6HQ&k_(`PcAo0fTV
zZ-uGYQkJRcRSvvzq#ok`4V*Wa3}`A%9AN^mhxNTAXXqg>R%_pVu^*sy{!ls7PJPLl
zKmM9nR3LkW<3-4bOen@7+faCxoPfS|J;_;v!eKjWo9Z3-wOv=be#ZZQPCJ_@f5V58
zU0aQ5e%sr*yQq_U0<Jk{RSEI>I^yLmCc=Is&b2Z2+zWd@{SE&pzxSBVea3A5FUqwr
zw-1`+AG?v~apj4fVK!A!p1r{b<MylvKkq*ejHxPe$(RetwtQS?x|PiQ05FJOe#ly@
z&$ae`GxVbE_%ZMG?42F*XChCV4QIQ~_$qRov1^Su2|v2Nx1xV_(EdQqFY~4Uf5Ulc
z`m}t--2FUU2HMd(4!$07z6w_loiC?L{KKC)Up1k5k<C-Qwt9@)&9Q8sfq4ceZhS9u
zUcsyPo4&tg3>%P1IdaXWl5@0yGxINE9-Pjm^3VXjO5dL&eM5S17T%6IyB}HTVs_#U
z?b%K<f1-2!Zba_6cIvRD9)-r$j`*!d`H#H!;FmNqF2OmA1@2UI<v#;_DyuUU1c&|~
zfu^nOaAVautSZ~hT+XJAY>;1N_mI%vtM^-3Gx@*B+n3JR-P!N!UkPB>cl57VXaB4*
z$Vt&JIf9dwqlIm`30<N~x`6b|47f}1pQXcU+QB~X0($u@{W2E|^U${P5#)>6gM3&1
zcAWMye2;*i2HJ{2+YfQx`?J7(EE)eaYl(0h{bm2=i?G=hJJLD5N%%#vqXKKY#y*w)
zW8=-H>A)~s_!vQsbk7+|m+<3E$&u3EfSbdnIm5YjVVNYEa2E6+8f!u3#W*{DK4<&1
zV4o|7th~^4{x#`G!^^GnhW6LW8G!2VC%-~x0iW0wT@CPO{HuOmsP#KNY?{}c(z^CZ
zXt+N(e<Q}3iM9`&X+v(J=-D9WG<M0-Ex!u!aKN9x<BTx9m#o~#`$@=N>5c8*>Az&I
z$}=aLOUaTt+MmZ65$?>8pKz9d=2mBgSorQZ;>##>!&>F|FY{%IhaCNi+F~p_m>;Lp
zNydnVIb&=@8IcCpVSkD0DBoWA*@v&Mg)=#F<Ry%R+jh<d3)k;P2T<L3%4_>)@S6Y+
z=(6_gmlQmT{I~nA>H?Zof4@Ku>MoM>M<mO=B{Q!*VrBV;JMX+dx#OHw;)NSN<aNbk
zrY*6!s<#RHtAdXkZ%TIE_&3R}cT=vPGgCgk;7I)q-{w3O$}fgCA2MTCHQwZPJ<eM2
zaEa+VhqY0%zX|!if;~31_P0;Fi@{%PXa8pDyMJTP#PenJgZNaw4s7xV-Gc6Dd0cvq
z@!GU!<L{^^d?hp<=2Gu9rUwJr?jfr#vSorh*m$=Xn%MO7*EWrW(=_-N9J1ZQxK+Et
z?dSbC+px5r#?BAd8JLfl*LDT-F;bt&lZMu7=R8jJ6;&P4Z?IPP|I%Npr;Wnj1<pPk
z7KVh^_7(?2F%OA%|Nnm@;$T45{6B`L|5wK~WPSL*IA^a5pTp?-Nql3&@^Hp$oAt{P
z*1`Xa<NTk*FXyA~WZmq<|G3&e>)gMS^&HlXedw|1XuH<4M>$!7?up)THM;4TYOP)6
z&Ch{1=~~GW&Sd33efO%pF7H9s2lfE&`K;GbXyTmB2aWX;ZQ~rBo>LRtr;aVifB58N
zD=o-SKSh0gPf<ULK4;g?3yEt9&ziHT)~`QszF8~ltM2U7`L4NW!&9~#GF3XtYj=Fl
zzjq5eSm%x=Sd+~}&eTKy{1Nrsx~048Uc2M5hdHZrD!$C;@!537bC(`<mic<tJFQ2m
zx2d0dLzeq`dg^l4_&`sOv1T|u-L)&YtUuh0_45{|9UZSNj>*T+apk){${$`Oe|ThY
z&p}nu`7~ePT=tONDVx5@_~+$hLVFH;|9r4-fBLcE$r3*~k?`1jT<$nfo64iK@Z^pk
zo*3s?o=A8UFUWAFWe6V5H}dD}qsN%9-PBFZ96o-!m-%{z`Pzri+T|AREt<1uhMBW{
z74rR?RcbqXvER1*Fw!9x@@e<uXStJphN%zJ<;l<`xZK#3DfMZM^W=;3w8ONfdB|};
z&2YHvnHuTX%Q<Myf3%l<af>2@XEXIo9huf*+*dOMmsua4j~*jOw#AG+nA<x7JlG_A
z-wHmbMmq*@`PQK@Ju`K#rGMlLzFOb+k_vc0xXc&)wuMWJr&z#~^G3&$rH`QQiR8&V
zXMPRAQzoFfWALQLk{c;z_6BKAb6{eFG?zloRp5`vV1s(dmNfW`pyM}k##duyNzI#)
z)2<A6-VIwOMj0nBb5jT9r3v{p)?+t)m3&}Vjx%rv<Z2=$S35&xV%TC%_U1xug=MeW
zvvZvvd(8b_n&-r>;puN5vE<SCVc(>Y`62tii{{w`{CSLd7Cg#>6O9zp-RtE~@qFyZ
zMerm7c#d&)n(8KgbmHO3K0XMK=%Dg(?$m(hQs^0mJ$m9{6QTi?c~h7U@QpY+2-6hj
z>>ktC6GON81oB`X@<nUAd|&bprO+W#>!ojyH;6n5udDKvIUkbq1-bHZ%Db`_7G&lJ
zDZl5>Xusxo+o!K{LS+TNgF|pTI5ft$A7{D$A_kI`597Ps%|ShlXWgF(|2HUKeCO56
z+;{Z~y4B0Xs&(I06@F)(0};)&bL0W{KGM&MY1<BI?{k6pv?t#*I$P~V(>#Nmn&q+X
zwGAeEKz4gW*<T-$&!BcC=QD68)0&7k6Q4^Tdei3HgL8F+3*|{gX<K^Rzj8jelT$JL
zik_2Y(3O*A_1vYp4IiX(u~c96YF-=E^<wC{G3tpPov!C{v8w3D)!}U8HMiqG(b>iB
zUMqK}m7|-{=4yXvu7;y8D}#aC&9COkjbREgZE^%RuGv%C_T|%$Uf068ffdmy2Q%DB
zrF;)3UwYo}$CQhGz&-ExV;W7+b2x6~a!1rwmNWO&mhx<+qe%8vWYAN{FH`#lygU3k
zes=g1uETSud8-4D1M2~8xVn{g&f<3c(Y=T2%j0bF+N^0#bAG+6)6Vw^tUc;G5vuR6
zU-3D@t=2HT=N#$d+Owjworjx4Bf3~0&;>Y(F(<l%Mf9}(clNyLUCkrZ6_2_4PG)?E
zvf_)Y`Rsqx+u6<eEMeR1)uyo>y}%!X?(^7ahBhkklfQiZn2uM7r@hJ<1GA`qI`Om@
zIb+~Oc&`jxOee0kj=0(k=HjupJhpb8XJ+3LN%WnHedk@A?COqipD;ODY4Wie$0~m*
z(Z$^r)lH0J3O@bYPT`Dp{J=Vg9eb<3_M7C2jpGyFwB&U@I?eJ;_Hh3LQz)mluO$Ze
z;<fYOh08l~?kt=lTdte+Ubft;P4DKcYTup%hYQtbiat~HZ`3dS=>A&i!lIee9)QLk
zknEn;`9AtQjqg8WpV;QeoHlPoqVJJle~|7`Pclc|3e$J`lFB)p(b{%;73Y&irXI{e
z8{Y}>Ky<=_j*9+hjoOqvJw0k_%!Wjt%4?p?24A<_OuUqQg}#37cFQ0e)Q0lPp3yur
zZikESAMtVFa3EVV{Qis3xp3v)Kf-&_L<;<$hAhr19zx7COCJU1mi?{^Jm%G%4<FO{
z@SMB88GpFS>b>6Se0cGfgJWzkC$68b)6Wy&>XynmZMV-JDl2?E#pc`+;Hd>XX^fwI
z9eBDWz?0fYVSB3$#bJH`EolGgi&duWLGnEZ<L0Njy#%WjJI^u)mj3Nt)KhJqyXH0z
z&E8&=<31eR!rL2xyFYU35V$or7H^H<t>|37;{H|ljpD7ie>cyc28WiP@Og;G#rp<a
zRghyT|HnSo*8)%Y{&AfjKUe4Ev(6gsZe)$^Yv-(Dogtz%$*q^%N%O$KdI^7f(0#G)
zFS(ft<tH~1^Jye+Mlw|~nf0M{^hWLy9cYjB+_k4TQ5st!O&$L};>YaWk50ypwEn4{
zcu_LfFdxIU5krSC$gc`yl=9RhFT&%*mKgBk6!3AlKErEsTJRyy)t6wjGG4s7+&?of
z!u{kwWgcAJVtBnpt5p9}YA4)ABGks7SNb=9k2W6F{??ekpY)^Xz0P)TqHl*U+3)^Y
zsMu-9tzm70Q?ZpVD6*9=`15S#7;~hyUB7}M+_&zDDaNPnc6MuT9zKt0e!x?By}mhw
zt1zCE;6wQF*U*&<Q{e0-$|jk=+Mlqt(4PAH8L?UUDiwbkTb}8923js*p3|8`-{Yoa
z)m^}B*L&dC+1YX0OlM3V`66vMERM~&A;#I+*tm)#=b{bx3BPasge`|9@1vdgYP$BG
z73sLKY(WQkG{m^<`DJ~3&*DzuEdEgTg9^?YjHyvusjR;itTbj-ihg#R63g#`!{Tn3
zzB9l!04I19oPy7lFNV|I7cahc&ue#d`TosoJ@`Jtx*6@z-LZeVWlYDPz)$wk(w%>}
z*u2(1w``|pOkcLAbZ3N5<i!qm$3**zie6827$x_PJ0<cLnfgb0-!yM-UpKUvkDkRn
zIc04Tk22sPGn0GPH<a!)tjoj_yVhSkc4wUL6~;9GH~Wh7JPGcqP4ce&{?eUK($<>4
zyrORscR0rQFH7C;t|;C4$qP)|9OhEIc}AI8pnfu(1-HJbbZ0thRz;UqTzmb>+K%?Q
zr90=St*X+UmjZkH6JvK)>37fAo$9~+{;@mNZu^Gd_X_*j*WNUCCwH^I);>4*zsmn?
zF|p?P#Ks%RIl?F0mi*o)?khCKf85^`KbVES`sXHg_DA7pej^j>>n=;&*WXn6W8IC~
zV9H;Zt1`SdcYgZ*!*iLh%S>C0Hu6na)J?IXHe$Ao`1yCz27S;*Ep1fBxDz&7x-(Dx
z%QU7(?HKxm8!M~uujkooUt4OLw{z!Hma)GaJ-zdE%BC*x=ShC=)Wv+~9;+NOU~Z+U
z&Qr$Xu*aX1FU&QEH4mDb_r|$bHF{>}x~S>;5;UDTi@9Ka_C(LNcT#%HL!O+FgS+}4
zI1KG@Uyt7weYdl|(oSEN{fKI7<%Gl^<Mf$j?gMz=(ao6joA+HUoGBumTyvJX#I!xK
zqEvHa?>0<b0?cRo_ZoWKQKdfragX1p#(A1a^!a%uXLfS$o`psK(~snMjq5)K&xpP^
zN5}3gFovzsX}w!lOoLR=f1+pfiq^NbT-LF5#hJbKzy2D|zB{dRYs;nl_a@4|x%c0m
zAZKOn^;;?qS2VwkoPhO@{`D4eHrv`C{m7OE#<?|G(VM)}JFD)ob!WCe`sOWl&)xY%
z;uv#XOfQxA!)j@34|5%-oj7eAlU^*%4bqFFInj&c-}>mAIPdH1&TRC}y&6*+_g9fS
z)Ycxo&i>vo;Zq%3S%bx|+359KG#|p7?k>JpzPf<dJ^bCNQlEy}x%b`9*My?^nlLzD
zY3?M~e7!R?U+d?VB3u0XTw=^m<PW8@f6F>ov4vcX-}fW``EMonu_0S@-*;l#UoAsH
zsW&;}?|Gfheel@vmE;1=V7;5m{|U-BQC2x*Exb2(|JAa2nJbsIBQu@s(`V#Oi8*sA
zo1o4>`9&&!r7dsZ-v+^f?ib;1*gDDyh6dU!<G<**M2+r)Z4Cb(>LW_~;dl4YUJLDI
zIS)!S8S%WUu&4TjliT1M&570}Pj~h5-?V_24ENOvA93!i(%qu}4sTc)gKsKTm8c=I
z<>TTxY_gyA*RS7Dx-*{1aNk+sP#nD;-Z=$&>}r3qbawh&a;CUbtF~PC04J7dP76=;
z*EhbEyM!gb(ZwX2*V49NK(;Sz*f+>W;;#t(OV&7^|6uT5JS$#3oAscN`f3NAdxvb!
z4J#UY$r&2hkI)YPZ-rO>aB<?bu#ZD`cmL^@%elY%hgOGE8=}A8)3&2E4}Yc|Bk%NH
zGU{*WZ|mH%wp0i<a4VkWsoBf_!j<lzRGnIEpgV0H)m?XH>#41Ft@#M$?79}j{zM<T
zf3OE#*Nx$|J4#qDJ?@4hM~rw(gmE?^_ZqfC57@2gGVV__d2qgMZ7X+ealW0+LHZ{2
zs<<ZpDb~F5=Fd}BYo143(ygU?h}Zah;2i|#yVCe0U%O*ohwhn{j!}{!rxsl~i#%`D
zI-j9`d>E0%)8|BDB{i<EiQu(_zShytH|eK@ew5qONNiO3f_u?Tj*78ze@4$|IoDtV
z?FKQ{k1?lt?#?K1|E2!hi_Vf}JaJ;H>A^Vd0>x?f_Vv&5fG>({sHDFL<C6ZAXWW&*
z8Ua@6Z;{1u3+toIMHJnrLi!T>4kTyt>@}e7E-#BsuJL7!^_yxRn{+7MAExqSsHZwv
z)d4<mx~qitht#7l58cWO;RU&6=Ro-XIB~<c>H+7|v|l{$PDT{_AEhrEJ<LCIRa5(A
zubDhC@{S@Mr_){%J3BrFe;vA5yL3*@e$9~Ab1S)Pp2?h&<_;I5{UaM$bNT;a=Ca~K
zuQ>&574vC}cuabEqR-+k6uU5tM=@d99pOEj*Ac7p^=Cg%>fQJmt^UuxJ+*VgF=BU$
z4a9;yPU=(otbBITse6c#?VTHn-OU}U`}YKKvebHCca@Ibg#M~FGsxpb;74&;@wRx>
z`7SHAlYhxN;Kmt_zl=1_Hy4d_q8n$b%pd1*oNE$;p9GT|=RWQo)j0QF%09rVqx0N*
zs+ec!a3A!qG48!|`1>R@-UL1@wXK-oLnX-$&G#$NK=GWnKHp#O&yNrHM~?xw;%EtY
zI1IO&pM8`3`FZBtP+YiZj`mIRW0}vK>yIG@ji!QmQrn_C2e<Fz@%`1p&A;L2*~8dH
zU&538Pj1c<tbH+XqqbrJZHg{$g}&)yq5Rdp9sUC=!^3TVUG1W09spO)-VNJu;B3%_
z<GXx3Zmx!ns{o_s$<g88{F&uvP(BH-#^w9nOTIAo#5%rD%0I~SGPdw6Bc9JJ+<@Py
zWi@^@aQ8AX9qg`|j<z2ho2Xfl@^z1v3~K`G{l2LA_KVn8mz(UN4bvZ8+jE+kEjgil
zk}A$}mfT$TAZKtR3q+eH6pu`y2iaT@eS+Wcnc&m8cQs3Y6)C@Nh1x*(aC4LjwUc%2
z&_*VL?WsFB8Eb(tWbm;Jk!g%gyyDu)6Dx6Zoej>}SB_;^4$X!(go`-%(Y%LoBAn^B
z)-a7P2JgG}aslnw&!X`?$33lXd~y6L8`z)KlnMAfv>#MH1&=2UEjr(Vm20en!|{#y
zecz;#!TcBadQoIBCt=^Dc_Zh)fM2!g`cvQGK3lOV+}fefa8B_S#-rSHjp>WfoYnyY
ztw=|$fL8A24psa<-%dg&F?2TbQt9mQKE#Kq|4-E8oGHc9Yf4xLGpvEB^_DJo^`JkP
z5FaQWc|82}x#KJ+zS7*z{WD<rEM*mUc<l~97filIt&QkYc8{uyDOi1q_(KGKe+eBW
zS86tGjhGiwXD0rbf-mrgw_!`Kj%UtllMUS8Z#w$1KX>2{d?l(pVr<v55?!xej7--a
zQu480g}=VT-N&cVmhI2_eNVT3-^K|3e)hQ#>yWQvV^hgI@)1m10l6f5NcxDavve-}
zeR}6B{1@ZDTiI9j>c#MD#7J-3C?80H7(@iw5T`xC@1Z{{2BCV+NA6+~m+<~e+%>u;
zXvd%vWN1se!*k&3$^QOL3I5Y>{V&-!2!{^?zUn^i-q<WScJuz0KlRIh-S?*<W&Ls1
zb8m4h)ZP=6*@Qo}qQtylpjEZe%YXV*pFifi9Tz&VaA_DbcHaxrxdYHZ`>)-x)%uJ6
z4!q~cxd(pM^=>QU1$Qpm@Ra%!ETaD%;HZ4r+&&Yju>RyQZ|J-2t9Kr`bAG$(Pr6kG
z7`++XF>A~v`tADAca!sWy7pBsK8~1H;@md*r{|C(?#inD81D@4%;DYJ1zU0d207eR
zW+un^ETQd{<%z!M(K8*q7WY4?>$Btd<Q08!a^le|2gYOHPq`fU{=?!WKS{a}dg&y1
zvLv(XwL7*wZ0o-3ih(*|7{=gpoX)cqe_xFI$lbc5^+M|d_x*NCx6~OQuMmsNB71Zn
ztYQ7l@O>Nj)qM;4uXW1GwR!YI^!vU9FrcsZF-Nn+v&@NIlifOH@t&ItjOd#3H8Qtq
zPwk{w|6)aL$EUQ?c1fq&O^q|N#6O8lL$7?Mwyh~w*tXUg?_iAe!nKu9P6cgQ9t+^?
zxjzbTlys`iJ?Jhe+U&W1Zbxc@srG5_-2-izpuXw|HV235>_Mkdz5F;+&6>vky@p<m
zM=%uNYvK8s=;<^6eyo|@N-S~_PgTiTr(}4}F=jk|yqns~ThBD6YJA*GAJ3gmGh<`S
ztaT=F=+R{rr_7rsTlGt4T9^*k(XKg|M9)(UQ8Xi+1{<Ic8@f;Xl0`SdwR9ihSu_;J
zQ!$J>zuDm_1^yk5WLFAj8n45X9WV2l>Fc*V7w#t)ZFtJzjWq?i#-2{iXMhv;UlyB3
z{3?42+1j^^PmM)m5dFu%X$4~^#<3batd5)7HpAJdro44+mhzJSq9gUEvAccV+X7w>
z)3y6<`QvNv_W9@A^M>c2E$<$lf5se}e>mHL{n1{hVGiOv8f)C*z_W3UvEXsHXc`^b
z`RL!me|x8T9s2)q_~&ux($XS2UJvn(oM`LRMBm=2+_OQvBSs!cCXf?uzT5e&`Ib*z
z^DMkN|GK^lM<dm7vPC$$5cyQzcw@~ckfkw`-=ccYN6pOG;fA{>oAL?oI6UcY?gXEu
z|Bou4$@d23J1M{Y!o!odlUFcM_NemV_U|0p{?<#8#X%pc=blR7OJvS%^SIAEnK`!x
zy{E=2<C(})&NGE)8qe80F`nr>GkDJDxsa!tXAaM0JPDq8Jo9<3=DCKap65EA5A&pW
z7V#|RxtZq^Jh$>J<+;<~xAkhgEqs=EH5Fw%6M4#crtnPTIh*$}p6NU@c+Tg!kf)kw
z4$ozjN$||$na^`I&ow;tJlFAjm?y=vh-Wd+%{-srxs_)r&z(Fu`hSdPJI_yecJMsO
z^EA(|c=9}ZdG_->$MZbTOFX?ihZ#r4s|n-zwL89R*A2=0L0NBXZc{9q?CZlWO_}Gv
z6aUqFYtqQ_*3Teo&}V9xmo1Gawf!9WeRb@-zAy2;X2rQ}r?Q4C-j`+ltXur4ISny#
zSrm6=%~A}$<?p>0Qmh><pEEDy;EC+ATkr$3mzK}ylEyjFGBfMZoA^A^KdY8?zl3!k
z`S!;cet}BftBpJ{7PV854|9Fe!k7Kcdu#IWNjvaC|GT=0srO+&J2~}g(_CcY<5o{-
z{f9)~Ev$`MKGpXg<cG?t-f-nbgRP%S_SGG}u}0%50DpmdFB0Ho-EU5+$v1gzna`L$
z`9xcRCj$&=@A*fpUO=5%>Lihe207PGJIMJTw|3gkRX<l9U~eZk1*Ov0eZGgjVvvRK
zK^)y2o25B}PWP6wvrpNb!*|OXz+SZa-5GL{SZBtqN%qwyyyi6j;TvvCJpbwYN>(O%
z7lCul^={)e$FW7mea$bI2bZyl==|)-%u|0p?<&gJpGhAT6FJX<PvmcPo;AM&oRlI@
z%BCddj5#B5-$St<u6_1wGkK*M)4906_L9e#=iLc%G|W9~SDJCeSmw-L$v9o#+p+J)
z(S~rW&)vY8XWg;u1>+3sT@~j81MrkFjtczSqLYdl_`ZSH!ZJOxbT92xT*$cHe~eQ)
z=(sN@`+mfyUoNrKkG}x_yu=paI6M|7Tl6{7xcb@8Is==ptnZT9>>IJ;)|h|b+M1Wy
z(#`k&=s0W(V|hqE9Aw17x(iJGd1K7R{owBz)&|{&cV67IodX`VUaSC@Eg$yt0ks$Q
z9&pseo{pAlO!JSJ3x^xgK+E^M=KbKL<ub2%@wt3viKoF&Eh+YQf`i6IW<eah#$(&o
zZoBadyDClOKs&y#nP1NAsx{*eBxe(&eXYOxA$+C<;E3Rli$8rsFEVnIDbFlT;4j;a
zUNN6Jxtu-KDu=Dy_SzlX`#?FyXMMj_f7P@U{x7e3xN23(R6G?ePxNa4ubHm9&bY&m
zdzR0^$J_ICyjSgQCm&DtM9ch0bB?%FnH@u<xdU6OB@t;Z@P0gSd*Ea__()7k+-Jy*
zgx)8=$0MH&+R8`A&uqBMYrYq~!D~<UMSpQqZ!0`EzI*1XWcs}|arj*^iCiVV>~Z+`
zStnxKiSNbWQTA47zo=l84kH?9`5v@Q|AL_@Cw%ztcIe%8k>-r#(qqx)?l|&FF&|<%
zJw3=9;vM_(|0<^bEHU-7@C6p|MeoPP!+u*WyZ1`=xIRm4{rj{v=8(f<NvD1vYn;NL
z_yqZLUxQh8NO(Yh>KtGGxwRU1Qw|&b7frq18CIs)amKed&5>MDd@9N~o6PuCZaiP3
zPmj5cGuOzPRr<ZPg!t+2h>sDcCWov|^W3zUIMvhX-piS1(cb*$kg<%XZii{ByRK;|
zzSQ!@hbvblnD4F7>3a_n^PoO{kOl3~tLUVT7;+O&oM+<V#@_LZn|dcKPWMh^zwd;_
zmHdwP3jcQiLlm4^ngOr3=y!Qyi~Wr+<!|lp%u@RsxR?0v2Y%mZ>t_b)H}Sh2I3lze
zzcX=v1AO-$VpG__Ki2q+;&4mTmPYYW`{Uo|k6&;{8MnjNHN3xJZ-2GgD}G1rnXUWr
z9_j|~y`RKa)n;~ICR}RV{c|h+rh<EnG|nXDqve?`Zd^6|*8fpx9ou|i3AEk{t&3lg
z)svfy*SQE<SNR6$;9+1K10Ae`4%Snq(U9j<zGCgUMeR5lHd=dUQs<#x501+)X3>h^
zIhA+EqRR;*@aK|%KSj6W;A_XHSO53ue5&=Om`~fE_W88QOc<cw=ZJ$@x=;9Y|9@yZ
z^Z2N$^Z%b&varaOutjQS5?qL=wT2~%=4OJ3VqHS4mbNlUw4$l)7txAB%_PC4jcpxG
zzgTRW31G{lrL`4WV*4!vSc}pHL$!Wuzhx!?LDNMRC4=bv-k&>jVN9{@x4+--kNcWC
z_nzh1&htFyInOya;r@HMPrRI#dxwX+RcA|Sn?Lx`io|QFa;;%r1diEbDhS-eMzyUX
z#$nrom$T})(2@4u!HiDW!Mk{0+^hCI$d_pLT;`ens}1Q$<=QwpvgsQ4Vn6#Xa(Ytb
zl0nH!H8htVG015#_ST1OW4*SP_{ZWPc3gJ1d8bW-dt{^5(+7I1Tld-{Qp{cj_1%}(
zvFh8||G(3*YIXMiUv{keR`&njcdXL->GAqM=~(rj{CDU7VpVl0=Lxm>DE~bsXNT^;
zs{7%;u;<thr=NdG&%en1@ixYHthzt_?ghPT(fwKJI!(HtoW5VKdtdtgo^<&(mH&MD
zp7@rxYl-fcr{VYy?!mc2IN#2_t-pVnmJ2;w#Iu`!c|wkJplMSGTB5ISmCk+`ACtWo
zY8QW{rZ{W<FqH9Djo;GXdv?_d##_L6x^82<tugMl8rtpioNmK&HTO+7VN1}%P0O(#
z+ftkplcvpF-fhMgRr_n!-v5W${CE0Dc}BnJUK;9Q?)->ic#bcS_NU$9?3|{g$Hko0
zbSbwfou5Js8yg?*t6~lucvOCNeD~EALHum_kg>6xA+n|_8J}U2V|j1;o4Ze`=xAbo
zzT>0JL+}NOu}g-upTM_6?Sy*JHOFZn{m_EG3HY|HBEMiX`q9=mitD<t4bn@$Wi1QE
z&@}@ax~k!n@I}?b!$(@q496Qr+W!1>+KUs5d%Vq+3^p#ADId|`r^qi63^B<wFu0Iy
z-?AkG31WGE>~JS>n$RDD19y4N#?Z102IRXh$YT!hCD(y1`0nu;*w6E>u5g*EADICQ
z+ef>mc~xkQ3p!f%`i-;iz*&=r-nKuYeuS&|odb@mZ5-1)7LGT=<39499X$UN9N!{N
zxsV*_|6%NEEE?t?#hjC&ocZkb9Ny~pgW4ADoc5b&J8|0*+aAkz{TO{bOCM^p?zX#U
z(odUgwepx_+5?>N@AY2qrX5McrF`k)6|TkTzuI18q8ZwixR43thB?U20RBzYqI5so
zp`ZHcQXPDtIC2|*AvjazG=8=aTlJyq5Aj}lOwSE^>u-YVmsLsi^F8oxrH^Kp*=V-`
z>`p&c#*b>ouVZW`ecP&%OYs%&rhWps5P$2K>#JU!d~y1aUVNMPY9rKkV!l*|uNSX0
z<lvhPsof(h;(h7)l5DFJw{+&8iaDN*e--MjN{)uV&E#$Qtt%@kC*kXW<KnNl>^Ys{
znwr}PkB5=NI_6!Ag$rY-eygu7fE_5w_=j=$JQy#=VeR?Er$R4W$=p3X*YIHjf?s0p
zMjLf+e6(T<<IuKO`HRwXICPDH7KU7w*gL86Q2kXE|G|7tV?cVn!|!?N6>tjChRPh_
zUUV4^U0&mUH}B<ZX3GHny*+2BpN-Fs@AW#o*1TaKcIAp@S6DXK{bj~Ae&F7nRmrMj
zRjhBj`nLv5t>zNV$o?7LqA{A|NgwVu?!`WE+ig6HE&ji|?5FnJBvox*to&Jeu94k;
z)yM0W*5l_@t@F3}@bmnI)}zvMoH5k4cc&{kfw{c%EWxu%Yj{OL)-!w++pqBe$4!jE
z6&b(gN#pHmU<~$Br<5_ecVy0vYU=J?>L17+UzIM?pU*r?yi`9<zk)&K^gfENIT;OD
zlleOu#2FW&0Xcg%4J3PN*MVJYzKNezC8KA%u-$oGj^18(o;&KkGt{#-&tvbI<J*#5
zk-X|?^z5qWy7L0jv*A-eyb(O>7&pora$?yQ_{q16Z$G61f1_v5c6gexL7MB;K^Mp0
z!ymWl5@IZAzMAk|U7`8Kno^xh<L!!m*A@M4hda8C7_5tR>hE?0qMgK<*D=S4ezz)`
zfG3JGXntbwD;#=hpN(sjwbbA{JI{WYezwWrUpvpf$FsA~Hyipq!@3&(3)_O6IW!PW
z642y0EsE2$kY5xjK0%8<Xt9cR;@i_>$IpB>{*e4ipZ2dk8h^+nAK|@h3p)Dm=6B31
z?D<{O3fF<{<RkPMPg@hR(VA7qq2J)SVRqg9%zachP9H()+jELcpZ~0WBCD@|)W<sM
zRr;u-4;OvxSz0<E9*f`V;~(+&+JB)B$+;)$O3tCI#**mez^>oHusxZf-9Mx4$>x+n
z>Ux+<Y=-Xn%roL9r>&X(`bK(o2)Dkarw^25!F;m*v+3{9rt<@6^UvrrB&)B%csl(!
zG#UKfp@U>--JgVuhuBk^M|<JXoA_w|j7Fk$-?J`q#zH-V+jsi+QAXoheCmt2l7FOK
z2d0zJ$ARmg_5Dxz!@NlR@e9T*{ydX~*U9>K;Qm)|`$sT1c&l#*_iqmB`yci1)VJ$G
z<FA~g?mw!pysdwQhWY4X#^dq0i6i4ZS>tIiZ~s*u=`1{l*Z*!C8f)v=Ywqx};mt4X
za>m+aS+ex+wtp8eI`&zxI(kX8)%Cxz%cld6?69s>>xdUq<T&<Kn=tz($49i^F)J?Z
zwD0&YEteAK<=mP5*hqa3T6?ypxIAIS82TQrN+wuKSdITuhyS8jO>gxH+g*zP(v<OE
zny}p#cD)JzCHMjUOExTi{1;??R9(h@iTtsOwKVK)zOm=Ho!Co)0LOip&WsN;ChHkA
zv*%2?*y?9(A0|Cl3gE+hT64u$s*;l#hk@muC)QB^CUoU$$B)VKU$XmFzmompjQ?^{
z8f5t|4h`hLhz3E<S`-Z&|HXm3AAWb@zpOh`{!32R8u+4l=XVOy{!3TJe<A0qs|){S
z-I-O<?|1^yGHmu6@J8@_kpB|N_%Cb!7ye79?Z4z5_g~h1#}(~b>5hH}|K&w;`ny)9
z{g?0HzpVRCRaA75|FQ-?$$xRZxp1aG-}8i?Z*-pH!?@xLmpac`e@vIhk8#BoZgQSS
zdH#m&%M9(hBIC<A^bmcB-E<wN3%R60!#cm{Lf)uDmo?C3CGA8qz6|R+wUI1eCW0^X
z72f|dT_ij75WdWsj4#vtFV>L{qdIZq>tsI6V7=hzcddi`D=^7MN3#5vwf`Udm%epr
z|0S1kB)jA22K^3(|GEDM{>yG?eHQ*pgmKwSe+|pc6A_c!CcV05=^5|yVFvf_(9iZ8
zGPLQW4b>e?8^QmN{JVd}e{pCs7!HRHf@3@Wi+EI(f#cio=s=de99-AIL9|};FZeGS
z*V096GX9GL)Bjig;J=7J{*&-0+lTqT!R?><FTz_e81!}o+(m<LWYP6x_&c<f|8kse
z|AznK&^wgX-v{CPkMI}_|7U3L{{{cf`xo?w)6ZbIvt@Vx_B5Y6k>3(%W{%}PQNmb?
zAj4J`tRK|IKht5i1E=HPICffmbFTlb&7K5IC-ZR@^E}(HaM~xfb9MF}Rrc0(#lTZ>
z-RaiwaOJb1i+8_g*6)7L#pUMmaCz77K9}e9?3KiR__hzP=y=qX41J|4+0lg@PB0rf
zR#&}y2z%VTdU!b17Qe68^XYFHV$!Uyy%~7;QagW6XHZ)oA_n}es^k&!;aP8bQ{RdT
z_PEI54R!xyj0qocn;mbTp*6~MzGdPJ;sWH6ZY6G3+3s3wvBx7`!rB8d+lS6)?ExK)
zpLkqH&pGb%{9@IU#E0`;X`d%AQ*P0pTuHt++BLY`K76A&_(q#q19H|bciU^1#Qo9n
zd7~a&b;}=I#KF=r+CE@tQmmMKy5qEkkC)Q_8hkD%K5vN6D|Q>~wd;-vo-wjQISAX_
z)Zgz~949xhb*d?US-B+aTOp63wrQ?waftYLlX45dx9Ljuv*>?5|A~)t_W6bcIp=-K
z^&sx8vFT^uL&EK9OZm(X>#zgGIp%<3=~oiV4VGL@t_=Ps>+P<5@-K*O`~0lw^WV5x
zSBI9(^ix-Mbwva^yT}_9jMB&Qx9h<tkXg%KK`dHvu(~s@t{BI@Zsl@R0kileI@JH6
zDk-=+fln}X0@FfZY6hnIKUF0ck|!IPto-A`uG4|-i1r%LkCUh3>`_aUv9BcJTHJ{b
z61y!p5MVv}?Q=~y_y%&v7_wMj5sad1iPodYkrizny4JB?F8Hf~KM4HJTKo!lDfoT7
z3zm(nm<<lwa@k|>R?6mq&PcLUM{SL>W;Ps3O<Q|7wQ&zJa}&RUH+T|w?K&kRD-@r$
z+dg+B$JM9vyCalO=P;)C--&jjTjXt>17f=R*0_-O!mbMTA0${qXl87EpSo4R;k?`b
zm^ZqQ9GwqSMs>8-u<tx8x&N`*(csIj<V%##ZtD!nsZ5Br#2dx8Y`E%2RJ_2w;aeD$
ztQiEMFM499GZ%W~Xlmu1yw})vozqg|y5^ZX$i?nvj?>slT$4Cmx7snGXYQyprqRVS
zjb%MsN$fcI!YLK*9J4b{`@!d2$^Bcs;SkT+2Qu=;$E|nu&bZ8uPqO#?Q*&b%Kf&)G
zxF+V9k#*>f;8wxQ`SlO}Y((tApN@Ft!DmM7e!v`CUGVb}#2UkYda!#$XF=zPNI_)8
zrh-i)0=3mw`?=U{ef5OvtFLx@FIjJbmFsuA$ysIYanmKk!wn_oMIZ1;pSN(<fNS{|
zcGWHQ4H)!FamXB~V;!TnCeXb#*OZSxCI2d)d8Fn)(UY@%U#uCMW3GO3(Ze<E{GJi|
zQq3iM%+-B?A>j*nf9uv$!eesH)yP?od12ih-Y<3C@rwt#?#TV_x;t3=X{;iKem?WE
zg(j!bLQgC-xs6&=Y9ODo-lnN(RDRGx<84f^=5UvuL*EAUrr!6yo0>*mshukxr(T5k
zeuQ%sN=I4u_{p1IJ;u6cKl#23ji)j2NNbVyIR}=nd4f5^PR*e-KiE&KHNG{U@sYp7
z5B@>&x<dTc{d{;uaO)`*b;zl?Ut=(TN3aDQH9S40wALQte1UhcBa4UUUo{lI)w}b<
zw**cJU-Qw}#pge8<g>*O{P?Q(yv?%$#vS%Nu<@##2R2;gaz8!7xSzgikLT$Tx0t6#
ze48ufdHSjb^Ym3ua`|g#!>id>ui#2uKl|!^{5Ehs$Mqzaf5m~T4A%;-)Po1E+Q)AL
zSCyHy{yBbUFTZ&Gll)#b{F3#f9{AB!a|$chSGw~0JBgbpKCE+9G`}*y{wrXYoLBvK
zs{AsZNoN$ZmXzSkNQ-!LB$1jHKzDqOa?(ed-zgrZvA&MqRO_f0ZCXBjVjVPvj!UoY
zn65*f)9hSwou8&PQ=Rp21RE&5BicX4+Kw^%dqS(RImE*?#(nJT@r^Xou!}nb<(DR>
z4Ka^A&DtdK+oyt$y25@lHEdCrxKDYc<(3L!2jv@iAGt3LyVgZRtPLF@H|u!5o+rKj
zq%j!pA5o#Pr~Xp=7)$*cPla7y8c41DPv9B64hfF-`XltJiL{(q5zI9e<f~T%M{ted
z8pl<{bsAR**BM-8T<3Cqgljt2g<O|#1-RyLUBPt~R}I(4xE65T$W_nvX|CJ2KFf6n
z*XOzJ<+{&QG`U?B!Dsl*byYMC<r={?hHD&G5!Y$FFX1|atBmVhu8(j{=em&V63PU)
z=5SrXbrn|)*T=XPaNWpN&-H1p+qgc<bqCkyx$fn<k83OaKgaa~*KfFbxL)S^1J|Fp
zdbwWXdV}k)TnD+{<~qvt9(c64D%z2?Y@J%1<=;uB-oK_UIda+gsRPK7{4mZ3v-u}I
zn0m*Rd<;8Tj}FzE;NExaHM1Qp<e4k(6k{zZ<}uT%;Qe^6o6!#~=!rel?UTImEP^~0
zv)-t(lK(2=P(L9rKP{65UAvGCoxAm6`Yk@49O`4KjUn0~uW>^VI}qX5fBHo))ziO!
z>0JZ$o`D~`-bwvLvSiV|W4o1;>d2Fiwbc9hHbOQmTPVAdD;uU}#_d@4AAOKq7K5Ym
z>~(fsHceC8-cLuZvpV^{qMyd%402+1_R3M{I^m|OsQ8d*NRPuyw8ni#Y}FPod&;$L
z3O)9ECU)(CX7XRE7!QKecywNa-UX7Pt;!BA<Ip#lp|2nMI{hpkMB7o&Hb@(+w{DP)
z4P|Is0$r7BTLo=<kDi>i${7G}d%V66R?i7onWIdL0QYq#p=oygV&k^ys&(9K`K;7B
zI`F$A<R_As(!$!YJLYe*SbxU$Osiyl9Q$3%KA=Yo>-T1R-Au`p>{^hu<d|n6`5$qw
z*5>Vd^s#;&-eu><@*N_({NVnF)4zxQTj|?F-wpI#O5cKKaKD}MD~+++ag(e0L47%W
z7-F|7Bm8t9IM%eQ#IQ$!XDZ`**k!*rkEF|)Z@eEyTW>R;(cTB+H7{z9RHA_#Wy2UF
zrzSC8d#kps^YMLnwP_xIe|<x4v!16s#de;}VEZE5;>dEmmG~gM4AQpZe9AYGJvr1t
z&Oqx(_SO}2#h;db_jG-UwbhvR>CO8Tx%~Kb$l?RP86LjB-f*@8<2s{*8r<%-hFMou
zY+F<^Q}dS)^phXmL><i=8b-L=Zerih+NC7}0sNzd54#T3DIenL>SSoBNydM|Z+-4P
z@m>6Wn%|!y!y|b9D*to&W&Ai}860g{)qg`D(i6@z!DG{*^~1;YVTxx*8gimP!8R%f
zKb}X-v-QK_Ue5UK#nv90?};8N9TPrW>L(A0bJgSrmwLj<#$3*~$cyejGynEC&Kq+3
zpJxoc{jZh7ZXboMP4HfNRQ6eU_M`E~;?QaDJD1wyc{O9v4~^6MQhWYg><NRH<WR(k
zXG^y0_;vQ?JR~0-9M$GI&|LX8&G?z3q4137RYiL_bNJBwYW6M7=KQBiIsa)6@LdLc
zbAj)2;JX6&=G~qGH}c9iq#90di;=4!dIW*xFO12=Z>y6w%=@a7zGK#o&2DIs!9{q8
z_vyLc*sez5=`m#%b?v+obgC^Il>gZwzJCXu4#BTDZR&X^`6z!FZrUAvztfnF@iS-J
zdju=*KKmsjxdw*4;Q1QmCxhGb89kAz_P>u`;*t1c^CqK%<JF#UqT1n+8#qtHzU4rN
zlk@4@(#6zq{8k(9>M>!-{hc49eeg)|Uo<C2Z>4Nm5FPPv(Hyu2)7);G{uev6`aQIQ
zUZT~<pw(9g)9M!N1$@iU>cAFzPx=X3y$Y>PMkmoETb2)l({VYb|9?cIPo0cL@JBR?
z3}xSkXvBYC4!mS9*=v*+o!EPpmR;Isa+;QfEc|p1#P$CR{3PR&hyRtFgZHypaxVBZ
zHkDf>na4If<;*`*ttaHmkuB*y$(LyLk7(q|XYTAa8~bVd-;#~izn2Z^qy*0;!|_&6
zxUaz^k23C&ReO(fycHe-UxIg%Tk)f>0e&=yAJQkDu9q^r*do6`&nWxyL4B){Gf8(>
zCtn*sJSzQ}@Z@$8OI~?s*om?E+W0G@_W1nV-^-l%@JnczO+WI-?eiVc2VHOC_xR8W
z+8-x6OXsFMC+I8O(t0(0R^4>`CHYOtozy%gzQzp>e)Mbl{JQ;T=Aysy&|mrJuOYW@
zf(}E`r}lU2C@Wtngq?00$N0n_NURwhRvQ<w&)&I@6JNl-mBsMAtoQO}ECD`SZ+Z&K
zvi(RWKXU(>bLjIj`kYIjm){QjwoMT(C%c%}+4~iVP4vf0I~JJsjv@zlmCxQEwuJNS
zu&JY)+}_43$mM3Ae3|@join2S!Rh&&=@R})kGJfdv)Ma#-xnTRN}XqjlNEa=HVy?(
z7qO|I66acdTirk>u_~SM6hlW_?tvNYlpg@M0DJ27yz{m@2Qu%bSMjW1S@HY`&pK}_
zS3c=z3%{+>Q_%QP+CA)<P^NXUqnyL1cAWZZOKq6<QZwF{PkMHGf0(l`?D)4<GCoBi
zd$tLR%}|`E*=_wuwmMSoZZGEBlg-$E(O=(O5xt1bKIM-G_`aMwYS=F});9(Ho7uDf
z-tO&(?RMDbmTBiJnRXJ$xL{HpwP&cOHlL!sQPcSb46=CG<O751HrX&VW$Ma@#J_qf
z5a$d4`ig8#`&D<+pXeYvrhQjA>>=AsY&3?C6UprRve0wNoz|YK2>W3kk}p1){V_b(
zo~tc9Q|`5wJy$oem+srzduEx%0rGQ+X}0~s{r-Jk@}Xj?OKdboyO#U!_mAb0hyC2~
z{bRZI{;}7A?__({w8yIxKf;C~v&YN6XFr$Dt+($P&%~+iy=f<FJ4I~zEb>?LkItCR
zT87>C3X|KVb57H3g*M4f+xL^LrO$Ei=!R^+yUCcvUxwD~bJ=C+GkYA(UKAWy!5Esn
zi1-+CO<DVUrOp^iwU!*W|LHi0=lJ~f24Yh3SM51hgFAdZ?YKjs9$QxuL+NYCkH#;O
zk62{et(BZ<9ly*XUvxsh^o8_5?|om`CAmqE>nt6Ro>P{DZTZ0`l>Dfi%IKXvr)e#*
zb%JE|@c?TF=;XI)*FJNzVN95_(`pJw5gQ?Ampywm6Tx{bzwx}wqJ8cm^OT>k^{Odt
z4Ue=Jy*~1kDM7|o@@jYT^^qT)l5!7eH1Hq1Y&r!;y4v<LPxRv(PXxb8Pkz7e%s;N$
zc*fU?%%uBv1sa2!@S8^m8hx9{0cm^)-<iCTVfTEZVL)vyB9Hkc;*6q!Xys9y51-RL
z+idb1&#+>1s!ea!HEQA)S;?e3e_o}>y?B44>8^OJy=d!IXOX8pu`Gd35S;rPt?qr?
zmwNJtagJSC%AMbc4z7(OV`lOnS2-}v1*W;c6kAX?0PLg9CrSn?i5qSKzWwOEl-twz
z5U_ot)Qs-%xE5Qq(N`^<Rn#RO3f3UDO|j&+;f-v>dgM!EU1!TFr(l40y4SNW@n5;n
zvO}69>AVQTdVo26-=k~ZWK9Ac;N(2J&=r1Lzp$Tx^Bx@C<D<U>=RWvitRqMtExMFA
zGcfQ>b+dJfBg2l)%joek#ij{-hwXV4dZd7JLf%66NT;-?@-liTtqVVOL0T7zCczO_
zw{(CD-q#Up=|y+T|E#4<lbdr3pwG*0QzM=D@@eR!1+FPt8<1QIe@Bn1&d>3&4$<Fy
z=KeMwuW)vSFVrJk<U3%adm?U=)c(Tk{BgyFbS|`?c{S$=bYs)(?<!#PS2i$jsmr&z
zUHPUP-aNW&zqS4gZ&s~u8VIaEb-!8vp*LOYiwE5Nzm(^**Du>&&Ho&pdwK6!-!v<B
z@qLHqtS_Dwy7;uix$EnUE6U#6rz%6U-(_C-ZY%HvxrC3yC(-!bWj{&p4P_4p^X`rB
zE_>d#7ioH%uCeF<(Il-K(s8XL;NbWWpTNJ_1?-2aO>!6OhN92Mc&0k6JFFDlBNNTE
zujQH-i$oXrZng)K8{OmEG=76a;ma)i3*zZX<dgl`HGaPJTjw(6ldFyPchuzIlgO5?
z02X43jhf@$4-GrqIsJ3-)fWs=zeQa~8OPVt=LPdGXuAg=y3#YYADn8Fz;YLJ-6il{
za0<qAfKjk<#!I;k12!eZ`66nET-TL{faNY=8+)25Ck`5RXW)=7FhS<gW^5yOwXWe-
zlyTnH!TJQbskOw8%k*w5au%CY(nj31&EUs&AY%r5(V1(m^%CD%?RL-euvTYz*`qgn
z?GtN8tbM}dn;n7WYoG8BH*G<#I(!gY*FrCN*QW9Ma_+b`Vtb>5BgVBAev&yPYeKG3
z23SqE<W#sxkBZNZ&n2FYMixb%Zhr3_ZZ^CFetziyXl;NYSYX;F0jKmqDfp9g+I5rO
zLG$~UyXLo;oOvaDqgngS*tbybjL-V{{x-k#<M67edwBCY&Pr+2`b#9!<^<ZjnR*@W
z3H|x_WYx4;3|}Ucer;7lfho5J@mT#enS#c+Xe%CjTsDuFgR`E$&N!_%1@nT-m+!ii
zKKkx9HjDxO?=8sL(Rod2n;|c?uaa*ncwBAxUpC$P?q(eZIP30PzU!0oXR&9)gl}l{
z4}2Z{RGoouyYwtHdJfsB1I{FRIMJV)CK+4=-2{8<(bP1?cMa=5-8Zo3_T!w%q;r+|
z2F^-bZr@0k|0Lx(6RAwGW6_i`UGr<oC>9iB9LABu8NBN)l~3+wjE(Dhi}y#db6@AV
zWN&jB`iecT*=5*!W0%3^Jt`hLZU30(Z_~CLyc&S>)9@^4a_7a63+5qZ*pPDH@}^yZ
zAUfMh^DH>hw0Sv;(Qq!v?Dk8d7T<K2jg!9oBje}O;OOw@I@<h3o_X;l_MDVw#-n((
z*<H{W!LJgpD$T_HYIuJSywdaMq33FM!MrulTyow(`A+V|E7p>C1i2jf&gPXZ-<13K
z{E9a9@ySNtz;yU@oz167{SPswh4&}HxzMKXsa<bF&l~tZivJDte+(OVKleJb=>mRd
zL4WbF&oim4iT`&|2E9<GcxeUC-@*nfr&n=6Tc_7vmXw`y;&+9Ur3V#%uY9?ITmi;R
zxP>v<gg+^{4wBbU%=&)>*bMEZ_3SoVms*9fnekMLJ+$sF-N(4Ma}Cf3&O7I~?)%ov
zO63bcJB=}&n-Jl?GIIuIB{>7^1+7&qukN&T*#!Jjf0nT-oHJIme%-gm_TPHU1T*GL
z=B%10Xg#}xH8S-VJeHavKfIYUr{l%Mnuv{6;g42%tqK=%9-y4omIvpTh$os$rRPzu
zu0Jqud>k7vaIW<5gszwQA3|pyrcX1{>PF6{wU?Oi^`bLA-H-LlC4a5}xq1xQbfE`C
zH|ct4J6hutyWA*xmPocdZd(s%t~m+)z6zf~y85T|RpqIgQj9H)jrm#;Hnp*YbG;uM
zW6JB$wXA=QuIJZP;A*>wGihA(r!udLPxF0kMLd%Ztjav^<7|R-+oyK*e$I5Sq5WV%
z)s#zlf9P{ocdp49wsw>$-;KRkM?ZNyPvKX@&mqPQ{J&scA-*}6;&{TRgt1q}xU1I~
zv`X7-U4-u$80l`C%@_<Y2C;$NlM7wZ67;#?(O7iBTlFD4z-P1@Jzb4Xt=Bk$MoWg8
z(VoVV0XOsuTysHNALA^Ao?HZe`Os4FPeUE)=-Gu^)_G}P?N%{PJ@j||NYnk8d>O`<
zY=>fy3FtcFeECiV{nA%{%8J$@_$mJ0$L|0-PdJLd@dK%H$8Yok>$AnCJO_BB^OOTD
zo~nP@%?|pGoyK|uc9XrXZQ`r!rk)Ssx!`rr_P4pAi|}khr&N8&)Rt0zJ~ZmU$G!Co
z>SIG!fNOo>>L)xlo}Mz%6k4}Q$Ibc1eNlsct0MNDI|*M1nyRjJn-{!=hjM9zv&N1y
z_i*x6^nL)Gt0|+HOcCn<qQMi$-D${#<Uw*_%fsJN({|&-tYg2lBM&~l<99RXEQtSs
z`IFlu1He1F4tptEDPEThcSXf#;V!rypda=!Hx42HCLepd2K@5B;F|vnjSuD=S+aAj
z-<y`5Dr9KRq_q5;0iKc_bj$h8w3lP@=T*Z8&crP{3qPg`*=v9{eygNSeoP&8&!Da!
zx_<f_mqhE(|Ewd~u*haxz{Y;jVRO0fU~QoeJs(8wKFPTf(gCsulhDngRT7$1dM5R+
zqm1bE7XR;d@F6D(I?d|@pXabkth*f_BhMPwut3^}xOR4d*QQMibg2Xf$z2{cEC3Gd
z`zm{GyeV(U_!~DdW@Z;QvklE<`y01p;58<9m~8W4zeaEiW(VG1XW)&Z?_|Hl>+L+d
z5|~-sm^X($iBpzMf&Tes$gn8Bis=6w^mE2<Y{h-idgSz%$e87IMK2TWO}<S()lYba
zlx;Rc?D?B)uj)Fs*FrYk$bo_OTOYn88iV$mGjgy9_~+WRA2P2q1J7)`y)-;$!IL2w
z8s3tjN6YXn>v}~u`mcj-X_^fwt90cw`p7Y;&XoH!{GKzZd7b)FIUj9F7R760hRiz|
z?UaXs?d*|GZ-Pb|E6%u)kC{DYRPOUCLmka&rI#Aev*_{ivnFqe&YdhD(PMwJp^A5V
zdG6-D#>Zsz(`@w9ZuGNY%LT5xGx}-C`}EVPU9X)tSU;WGbp!o=kUsmv-<2=wx{~rc
z$qVtLr(E<Cho<t)hXU6vT<EVJFaCHRdny7h7iTw^@S@39v;n;|ce06A=No(;Z@&vz
z#h?56CY%dCub`aYO5@b>@O@Di<LrK9MC1K*WJLIByl;m_(qYO`v3;#99$dq_{m9>E
z`4xX8m&BLLl*c2z>s(FPz1#6WoO!bR74aZ5U+%h#m{2<I>9*(i!_k%6ui6x2ErDO`
zVRD<hpsfY_Ox|JH5`HIfb|wCs{e6|gw=Ee6k;mDZ8$v!jJ2s&Y_W*~Tf5;riL)=Yg
z9n|5IxbptKts$AVw(wqhR(3-2<IJa(6WNTd60QFPZZVI&esFvbx-&l&Uc%!7;w$s9
z?ausEaospRbozTNuCDR4qxjGSe&wHN&Z&7OF|@GGDG26S-K=Yt-&tV7?OT02I^0G5
ziZ9ByW8F{R!mx2OoWVPhxTFC;a?0$y(ARa20CcP4_xJe68<}_ZG5@MB)mT?NVPe^@
ziHFP2@(ttsD*OTq-b_LNC7P@sDfZ~+elLFeQTk&HzTtz06F76=I=(5VIg9Av8)?Su
zC9d`iZFLT{qI-!ODXzvCYU|{zf?lpC-Nw#;P&<c+M=ya#%RB{bOFZ}~1F31Evorsb
zes*k}Grt$yUoSRevSI&L2KLI7XK@gIIXK`8)+SONJ=(Jt!_U)s8<!JX!q-XS*Nz8|
z{s24#Cf>RGZ)LqQl53LxEm?)XTfk9#*~s^oVkN{lCVgm3WxUv4^V>3pdFWZ5`ITl;
zV^BVsIqf5{5<@PmJKRP6-}7y@Z}SW8)1b|x(nZDOIYt<Bk?gYyia&IL>Zq>H6N3Mb
z3h!(>45oo(MDt<i+(XG&<#H2s`>gH){K8(hnNi}-pRTj5btZ2exGQE&Tzi8v{?g}m
z7uxHJbziXtn)$|;&Usc}jxSC;5T7dTXXx2H`qVSE=aeJnV8h|W*X(i3IR#5frf`P1
zD_o3hs&C|FL!#A$cQHp#ux|=qwm$*gLeLfcHA8ajw5hQ~K5cjub@kqt$|KIqw@Ctl
ziWqA(+4Kt$8)4q_h@bO(HOCp;j-y{R?i7PN0xSmGW#FB3L5#VKm$A~pSc!0dIadc`
zrJ3Ki87tCL=O72yU0K>D-1MD9<@b2yyCDObAE>SR2dn|*Iq96?fX{@J<nT4|-M<9-
z(&isAIq}rdADZ7OM*lW)vX5W=??C24$ftv!`ZM6<;9%1h*wcJ<cP%ON%;((n#TKyE
z51lk-AvpNBe;#-jf`g0uLUexLHgYe33ENkuwb>qE>+2(L6WB931ZBVGS;9lEKt=|{
zA7|alfw>SEl@m}%yjlC@^nW2R8^)Xiv*4ACWy36bF>em1;Wk~N+)%gZ=rd+V4YthD
z%Q5u2qqpMRU(O}HMLe(;eS$9ZmI)W>d~$$S*3nK7{h@RJtn7Bc|9CsxU(Tg=#8b5+
z-0NvW?S1uMz+1X40lxY@z;7o!(^)6_6+QG^`oc(mWQ}d-xp;b%a?aRG)91wZxfENq
z<ufxkb<VMQ2fB@g-y7lcX7L$6Jp!Ml*F(e|pGW`O^dV>daqOXN#$#@)`vUAlDA(#{
z&8fVl)FPjF)b#&^PA_9Oc4IfB+ZBg6gpDKao3<OYP3)}9p_@h9QJtd%-L|0n)&5cH
zC=Xop*Sd)8MkVyCz-CkqBNhsuUZ+kRn^8FuzHzTOUorL~&RBnywRh~8eIB=Aj$Y3`
z*gKc`1{^!kjy<>GXAZA1<Jers9ytD*^q<ZP{F=`5fd>}f57qfA-Ne5K!#5uIWEbM_
zz=1O%-x<3gJ^wiHC|2Oq6VD7e{K8fJ<WXPw0V=nSU+4LC#9y5{qJ!!=?~amdr@fe!
z1<0Ij8$yo~dmm4K<stT(I5`HA8T4-L2eq@GcB0f19JYM%9VX@Sr{!nUNzNC2|5~x+
zXd?1caW-~Jwh=!1hNa~vP7J{D3pxwax=!cEi2nE?J@Ppo<9o+fq32d1I}5h?b}VF`
z6trchsOu(VNAe;a>SNx=H|37Y4t`(l6nuBd4(lkk9zDi9rEi-fJ35Q~)Uv0*Pd-N<
z{Ss>#BN~2}XUmYMCgdrO{6w{<19@sfo;tZt;8UQR-Y|-J;&-sGV~2EAtHyYie>qsD
z9wUF*9ux2&flaAPj-LVi)0&Z=1a>imUU1qfL1#<$99!bdvD4o!+HS|jq^~!?3-v=x
zvqpZ5Bfq<jrR5hn!k<n1jVEL{UH>9{n8Eb;47kg`5luu3(c~7MHNm?O`x_j()RBiO
z`PCVSvLBKWr!Cc!{C=EzqPas~J&%)1D!6NSw~0D>um8y-$a01^jx1kJ8K<uNI@O=e
zv#(R{r;I!Lc=VgxHzDKlX|m;7Fx}2O$!wM6JJYre17qbQgJ5&o7c6J<E<|13tA3EP
z5oISs=#D+;Lzf}uMgQ^<<p0p-qd7y&Q;K;$$=Y3WzKOb0_8yC#R@RdGJl?Km<}UJ2
zA|Y2;=R+@MOvlk@@<)DvkI~0@(1~HP&D+*R;+(yRJz11Y_u2OWeR?x}uAt94d@rZZ
zCi<+)^cSMPz5-YDx~%?`L)}+!qQ6k4zbol4TYd$v0aq)7Ym4@;v0i8Ad*+hk2fhj7
z_!jn-`95Vsj|wKiQv&URz+|990z8|T;}f$^I`EvI1<&U`03Ob0eV>1+H9*n2kUrY+
z?dpb_XjO*J4detWSGjIXn$98oz6tap`f9%YG5QdFRVIXA=lFS|^N378g84+;I^CDb
ztG~MY(tW94*3qKb{k(^~IQ`7}2mKr#ct3sRpV%~ZXvumAvh$`N8q3de@bp1n#S%qd
z!DG`Fcr4L&JhaV)w%{$CUllCd(l}4FVW}R3^Rw%O^NYYDdCtgk`G?=N&r|G?Ogl1=
z{r;?zynp{VNPlDDH2Tyx5*`5$=i3bLF8jW1C*)s@g_hrjhRQ2?9=Q{q>G>!Axl3~d
zPdJokHrlfGy#QlI`K70JNyg&jr5{^jC6BRg9nv=fiK|s%??Zeeu!T8k@n@JLUaJ40
zZst^Ny{v1rl$vlz-w4D;fKP4nNUNgq&*?SO1arv{JnyCbRMU`XDsN~s{t4z~)$Z`+
ztcU0vzYu!4nf8p<>!I5(k*U5?cUbL8m-w`|jQQnm_`!OSJtv9tojvK?w65;4b+v8J
zc<%TV+3%j?d%F4TQ;Crm5N92JGIZEn;dyBb|M6S;rN7oP$GxBbdzpJ=zpKMegg&e_
zR_5mT*W!uZ??dN=D8JdTK96tQiS1d<`P(fP@fG4G$Wo8yGu5mQ1bEiu@$`RDegbPF
zPM_vlUmG-QqfHwgr@bxsF4BWO+7BL0!;`T4VxJi{VlQ-4-luq}TnNqG>n_Gt;$ynV
z@kv~UoO3Ro$7>x-97@%?jePM*T`eAWTN5$uHS7fh#urOCPo;3UtIfS=^(N<?o3p?C
zoM}fAM&XK~q3#tPFLk{A9?n9p26l8`e|?44Jv?oJV^zCm+ikepyo=Uua>@pvnbwou
zl1>krum{_j2Q7NRbExRSdAovRo9MxN#m4h|oUuj>e81{a26`urPiyS&r%eL?sEKvg
zQk_j^gb(MrVJj7XQB37&@~!S{K_*!@h%YfoGsH~43twQPhu^WIW^6v~LwD5SyWGT_
z61aL=nCFm_)8C7)5u`l>PWZIpZ!E1FXvQB@`>nidMaOC_UH{kc-BOQD3wM75@QM$P
z|4;_bvZ<Oo-ANzUjmV$g%v`$J7(xuJXK5b(UTTBJg!JZvjAxAli*Lu=-D5?6Ut^-z
z<&2tf6Z6i;nR5~+NXN4@Z_4;}^1WVXo};mA&w0j^KLZRJGb%ry9LRVBd3%f(jTHyB
zlZ_2qAI1a82s*<A-C^m%AoL1CH~U@r?DxG>9*)LkI#+N~mvwb$Q`}>A$d`=c*I2A+
zzl@F~XQxat83&JI{2Nw4PT+uV`bE~W?70W@3~KJjIhl7uv!nPH_r8_dVDL#qTjfy2
z8;OCUH<Z(*wW9?1p)cSEej)KN7Qe!ko}&J($oqAkiERna(cJi6)vm};V&(Xg$L>|G
z<b*QOXc+VnkK${pDm0%LKDnaVJn`G~moT1>l9!<z8O6@zdx>9}d30A%hG(IJsg3yd
z<L`!7NA4RofBXouaVhY}hviRqdGIyix%LOTzG@8|(OzeA8^m+QW6uHNS?Jdv`q4e|
zE8=_~%lOK|!3SK?)zl&XBPm?RBcJ2{lG-5LHAhgqa4`O*&~+2|7kkF{Z^f5-%RQk@
zKD2}Xtfj$$qsW1Hg+1H>k9H*BmwZuli7j6d<jI*AhPa=?CEnEGbJxKe(M>Tx*38QG
zHkfYlrTeWk9rrd^#Kb(dzK)P1`83ZRT5d&`9f6jbhsoF5f~-3BPjr8S=XLOVKffvX
zFTe0-d(&e<{L*+}Y>aot#)aIgp6xg8Pt{_y3xm{`>@4P8dd`}r@#D}~u^`bo&iA<_
z*NOS$U)7AgAXs9$Q{=_yJacoF8KeKJu&E1Py)2263i}RyVV6aYv2xF1`%)W<na4WM
zP#oAx;%r{N!$O<O;njt?`O{nA`PNY<;%^Qt?=g>RK?YigzfD4?q}-GGo0&6Np3}zM
zgWZAm(-szg=#F?QwKI`Qy=g{`3;QGIh5hX7k-U(DhmSv@>u1o_9+UQWttQ&*{gM;o
zA$E)mF4f)`={#dT67OTYV9P`Ab!;DzMZfXfU!O>A(A-+|w&}PhReOW<Gcw}9%txA5
zYM-~@@tf1aihpOrnG~F%A>oRrKN7Ae2(4O~s@hdl&DwjeS$q@v@)$C*$CiunWxdQn
zcz$gHJcQ3Phf^z4x#oPA<`jA6TGr~WEjDKHdTd+OvgHGNJd?@{`j)c+lGd_WeB+`B
zxYBiHOSHBZrHu}cS^O~icQddFo{H9KHk^vJN=8O!<ntALE3NB9k!i)HzJZQv#-9n{
zcleCi(S?s;&vDVQuFRPQ8UwF`M+<v<E3vOtic`t|;dyi8>P;cH)*K43-O@p>e)rEf
zJ2T^>{GR^Y<WHgJ%N@JK-0Aqfcfr<&kMlY>B=Bv<vc?jiAB_PwzxI2^yKJ&yJndFF
zbdz#GDv2-Gp`X;ga(SJxq~8(jllx88XDZHRt?2tZFM8>($f%Qx%Q|=a=AEa$)HGXh
zyDhfQ<dpv_zKhC#AKUrcvDQ61PqDiH<{DLYHFM{k_)2dQ*L`ucb<YpUA29X4gp13~
z<>B&j<#6S4<#FY64dEKfHH>RG*C|{hxJGjQt;&oZwcx|vO83adb>Ja?*vUhDlf8Uz
z!t<s%o|nGda}+-}{ar5GS0^{GfUAA$gzysgM6SXeOWvz~Y!^6&MijK^`%wnlMK0cf
zX5=b8|Jb^YT!BKzKaSh$bgppXOunVdT%hd~({9KMw!qzGCcJ1ulV0p&4ZSk-KeP0`
z2UmzOk3X$BfX=CRfA7*{{7iBxTE99gNMA=sn)dU~G3~v5@?DuLc+E}^{PX)Jhxd;X
zAI<O7wuujWvG`cWLw?H0=TLloE_>hgzSwL1P~W1~xTcLUe)FO5U(aIwP;1)hxKa&p
zx2yei!_sxK?-g@2H<;1IODEkChn^v?dBg-y53d@hZ>g<`%GOwn8G9~Snw}3hame^u
z(|+VkE4dOMT=V%Gpzqke)5FAkYa;wFHsktZ=*M<)J2uvnA5p?MfVSn(q<O(*#NzLI
zv^oEV8SE>6YIVyc;RunmxVh-1i1E#k+&0sW&lfAQ$QzwbnFwXJ+;~~CWcIbY+#fa-
ziTsCV{Df!P8!R}3e5*7y-BdgSTrtY&x#*>L#pbgIu_@hgPpBwP88gXxG@kNCRp+ub
zraeC0stDpYS>F5^!BdDC0$(R>yKfjbzhtJVD4E56>Aa_AsQ-;T_kXW(S7*Rf#B$6}
z9KR^N_V+*b*yzM((|1ne{Qh+z?H@@^n*eRv@3S5=%q80E%@ZN)qHIeD|5G$k{Lh$~
zFa3<)y7xNl^R=a~fWIcecOm1sp_;~K(=J<>_<;8fynj*e!5u!UZqMhThb@Qj%Jr+f
z<kOk=zRdg2X21VqUh-GGk5k{e2f4`|n9+B(C#-X8ywIwiJS??a6*JfR^?e-nEwE;f
z?MLH!&9M4O)=a~@?DtdPxxRC0e9sm=X-wHd_T_dWn=5?e&EW@k_{{lL$X=(Zx;DP>
zTQz<&>sp_Q*k^W_SaVH;`?Zf)_a^vOxnw}!lM;UvTk8A(I{2Z(S9#BvsX4^&yUTu@
z9Sbe<L+|+b+^F@d@;1Xf!S}r!&Fyzewzckh#$nchvSRHna@4V98|Qr|P0Pn9yJXy)
zq+v{do%@Pg<|Kc%+O%K5+SS(IA7x!<V*gfjeG%U=n@L}iU(R@cY8KZRY^CH#^Q>ja
z#}dXyeapguL_N>uVShhyS@LLWUbOiZ{$DM79QaY94}QqE##XECUg#H8ez9-VfrvA1
ztuw;k8*AFXgs$EaHSLN?i0|(IV65@$xszP(yiiXA=QC=~LSU@+rmk<)toX|J?$BCQ
zAg=kDyI=WZRYtjF>3mn&To<}!QrNVIWQX3gk`tL%>ACFcz9*6I%)Mmwo8L~;$o%oL
zq~_<rA?UQsIMjIba_uiXp}!Vs4H-W&KGaMTEurlrzTNmGn#28Z>7&6Ly-B;@^2>;2
zrTrtlU(#C=Hu$%}T>KX14k6x2-hs6ziEfsBKL{Oc*~f>p^{=O}Y)qGFcgh)qzB75@
zzfeA+b(u%zbVrC|sLllR*+i}ho(bU!u5s|1eN^`M5+`^j?ockmgjDrorJN<Nv7X*T
zS6GG(2}{2hdkXr`LiUfhvn}1ur(Za_^51Dkcro^R_C5f;nV)37!&j!<&|ib+F67*0
zB0a9*p@RYJM%-iOS&RIe#JdoB9h)@Im@~t7eABec-pfAPbUll2L3z^opoP%9tkbk>
zEcgxl6Th#S!`wB^56$@%pK=d(w`o0m4YD!`*)hnD{+A&0F3Ar2IqSf^8Tl^2uW+-*
zSezfbSaWW}w-uYGyOVYGQ^TQvo3kj<-CxPU9<aW7TJy!_h4}GTxsxrcK3Wk7PW(vA
zs#7X_`EK?VxRa7owHKtW$qyv&R2ySxgSt0-%e4Q6D>N>UY%U7$%!OT_6rPSe_Q?;&
z4^esdYv|vS(czH$#sSwiCWV(!4jR=g85&!)<UaF6uw~MVB*C}G7%L%n@xYyKlbnz5
z^VdjP&i&FU_8R!sbsZh1(4y~V=)0P+?l)7y`QYQiHpfSXdbVe5ZZEv4k}XGGMN2>Q
z@DaO-c}~Rh#FOmHz)J%!RqteFv-bx|7MqI90qL)D?iIh2{^ERznw7w&*v3)D*yH#K
z+8Y?B%#q$H;R)5A@RBj1RSQowi;aBLEEpEDw=V)e&B%hbiI&Fu#I958Ogrm1UHayN
zAKmQ-hjLTcHWr_83%pjIbOf1D*=vHx8GiX&=xvROrs;gs7o8(G)jxj0@xD7*d;4#`
zL#K7_|E3+Cp|KHvaToW8y^1G~cGjW0E~MQUxmBXM^o~DR7M{klNS>MY&e?)9ohOjJ
zuHx)7)Vs+aGwsSZz&F`o=M&*~38syKvM~DR%>=M*3b?}+Hf@?${e<sc+w_4Je@7pD
zFF*9T2>R6Bw$%Pc9&1Ex*CIbGe$P~%*j3yMcXVNG9c`&Em)_COk}=IT?K{!ouY$kU
zC|?C<tr<hR3c)L!vVDwnURwHldO`AQ-n`DVL)Q%r+$$GD<@K%blht{(*%acR_57Ij
zo%MIg4EgnC=)9fA%J_KLz=BskKTye-HsFmOc*Izx;dbcb;&}pH%eQ#L%>hr?@W14h
z=>wLYq4&1n<FxbKZ;_t~?*cx?+P!rH(hri2Ue3u~dp&+HXXLir>mRs)cwr&qItbp1
zd3}?2;_DOq{tmnjL4!JcrAp4MSUaZbXpA`<Ytv=c@4-7$=aEdEukhRcUTUL*yOWoY
z+Lps!z|qlntG(<I9?Mv8b=f-Z+1b!`4C}}R(XpHZ;$v*aAC%1v^=$r#Ik4^wQ~S&a
zvjLm*=8=ZN=-uG8DPY3mun)0bzQJe-R_2%YE*)rx&xZ5pLdfM|?2U;{38zx-=m=~}
z5Za&@E9#2)#%vMmVXRX!79TOyrQxIV`F`_~aeVXb&H=^p;-$>#A7m}0)lGhDVcGY8
zYuXhvFq5J0SyuPa`L^G9K5f<l=NRAF%+;Z@#-)MQ3yDER>@ir>wHcV=wC^iXZVmA-
z+B=B7P+TMKGaDw!K7-T5SIP$ji+CzHtPC&p4nH@1m_7|LO?$78<hXRS9fzh|?fKB$
zDObqZ%(^!>C{96s2=BAYo<Z3qyuW*ay_T}mzfSw)EbY@7?K7Nh0!@1>ftfkesgzZ}
zM;dC0)qgCSgN*3?A9#Nldh5AupWtEdgUT;cY}nQBf_Gcs+q=uIjiz-$4g8%?eD^xe
zq{#_O=L#q4zG*B^xDdSl%6NE-c^JM)jd*9<R_;4ETf@RXbeon{EBIcp@|+i}FasUs
z%;m9f;=RT+`6=BSZUk=TpL@tt3ywD%#nWTZ{2k<>otS<HHnFPM)UKsn@pmQicGTl7
zTXWUqHoiYmrZz5s*NKB)*rhf??BUtOKJ8E;vIE~M$r}zrPw*S#I*UAD@c>>+r;6qY
za8er+!H3wF?VJ4#nABE`wT13`XAC_1PHLL`lo&AV;T!6lC$@4abdWxrP+b~UoA?b$
zvyHQdh*{l3yL<Sy`V44V$oJH<^`EcQgj1)P#S_ifR~hE5N3bJi<oLFuz_0nV57`QN
zitM?yk2d3Z@*&dyksDiAJmW5E^Hp2P1+5DQB)2i}OArUs8V6-+SD~vfti~6|R-`U8
z2YjseSI{rMIP2Nymo+9_1^qwuNyZ-g`K52Pz7~jG$bNplL&v+*co*awbCMnDzAKO)
z$&TWEqLXO$7Icb0AJHmKE}!u1n9e#Bx{o|WcvI9>OH5C)+wOLUf5JNX#t}trN8H|d
zOQD(8^<_&!reK)PW3k|gzOSnN!g27>H&%sHh<o*S6L_gF+b+7t_gA6Q1e;(i$;kgF
zC=(xMB|pxuGX`b@vopRl7S(q4__~U+g7MDu_<Cya_)?50+ppNloKF3gEb?tShj)sV
z|Alx`oN<@k?o8TEp+_dD|BT$Zn74k0{~80rX>CUSrCYGY8wTKoa5U9r;hTw1cgLrY
z%Q`M9JvGUaF5--V%-GrcDR3peqVkbk^dE5)#jD+B{Ep&N)BeH);)K4&r85^A)9=IX
zDz~(F2DX%OD7yXbk~F<e0oK7d3P0%(;VN391IIVhmSE^bHtRgDwmsw`dyti0<ZqAi
zl{wQ;a5&=|9TkrJVdlUyz$!QycN>IjYMhz*Yv>>to(2Z_Fw(P!J@%L`%i+Iayg72w
zjLoVvMg2iy+tPc*=#to<QnktxR2ktDB7UOrfEKN7XIwMBY7WwlY>;SJ5yH=9Zelj*
zyuWmu3z^$sKl|03q<lu!XrBta$=r{9^3sh#VBp)nEA2AhU@k>@n@%}tAJZ=X(24Sb
z`3P$j>3-7X?fYjhJJJ4Oaw;?JhbZ6glwUskMEgUs+V`F)@1y)~r~E9=-F4tUD+~U)
zC(2ut-{q8#SDz?9wfY1+o3JMtcp{YlrBi-#R{PHePLzLq&hheb%Ky|Uzdft{pJn0u
z;S=qPC&~@6Y0{q6{!^D`wLklK`##FAamrtlRsL8OzP~%szD4<!PWi~36Zl?}1<%|Q
z{0dUO%_$$t;@6c~@Z4~s{Sf8#{WRMT!VaQ4ACa%-!*-wW)m+gE{L5a>iYmE5XWwmI
zcW|dElzvQY%f+V}i%*q9p1`=M=4E$o9l<$4<L&dV(y}re`#m9gJ@S}roM`)9Z!^D=
zJSM(l?40mWCRS+BncAb}hYyD9&Qf=K<Ww^)NSoulCi!`Ow<>3mF%!!*-4Ws+v0+Ae
zMq^l~>y9w4HfzmtsC+H<wJtU7tiO~IV>{m{#!%`({}e_4aHl<oDT|Lc)5sf3%I7Nn
znK^JPYfB04_pok6ysM|0HcHa4^xU;9J!i1vb*w#VZE64Aj6t{6z2y@vHO-M9-GP2@
z?0l5i*w&xk;T=_VuOA=eBGsQrj^KRLevr0h%TLW`&(Vnds|t-tuB85?e3L9D_a;U=
zA=<%jYE0yH6jc=&^7*aqAAu8d6=H0$1@7ge3KkOEolBm63-||k7AP~_-`Z*&dvKi9
z{ik8RbNBJ=vIVC5y@H>gd*g`E#oEJnIrSeZ;+$jPsk+T{=MRZ3c*vdKHuod+J<Hq?
z!>&GlhSiNvTHf4JJ!QhM*n-KlGmeYAgF?|gfDhxNzG%G!Uev>bUgmucpL@UaejluA
zp?t9G*suLD{IBcT<8T8$*vIj~a%~^1iMWmCEAX#oJ-mjti`O#`lJEcVGflhJ_8fe*
zf7!+tTtgXLg=4%Ra;}xZaUDEf2tLA3ILSuPcF#fln1^aj`>Us$@&s#C@(HKF&x80Q
zanG2pX5L9|Bxmm|SrB!5)3|DlYhl22FMQ7%wXpdM@5@szncdz!v#<f%w7<EC_QrN8
zPP-Z#7qCtbKl2jvUgElH-*>vH4Y)nws$O@vFb_XuP#@o;kGE}@CUxCcW7;j&P!400
zZ2ug%({Uy3znD-q6?tY(ctGdvaGpbdq}0@ET{yc;X{O9@Y=~gkf`4E#afHxq!A;1S
zz5hY&%|w0&!}AdEh(6tCnD!FxB{K`5XSS>avHOyhndAhnKvpz&B!{ldg%7ARr22q+
zPl4$^h&|s|YP$EcR`MJ+`5?CRHO4^jP-?@T0@i$?&wl*;eWg~n*K5kZ9GKqrJY%2{
zI_g_JU8DIHae{aaH2)&w!n(D7Qzw_sCJ8AQ0NM0&g`h#zL{siZK3#L`W+o<RKLvS2
ztQUvK5vZK(T3k1d^6dSEetfIFW7QVEj~u|SU&y+iV$T|TUpn{FDbDx{vB&WW#z-UA
zm)t|!Tut}wdYdz^4qmUb{JdptfwSB8Ex&J<#onoYzTI}Xz$8=5!}xY!w7)nf`bKGP
zG{O42+D-Pk!%n+F<;FsX6ut&9BEO0S#TIBC(3ej<7hRQLtdf)0EkC!iwRm95Xj2|P
zJ3U8=Yp(a;yr^PZ3HA&4h`+>7)i}~#NBjgX;(XCWaoUIGJ9f3I`x^1d!}O(f{e#!f
z2F6Q)aZVIGr#Uhn7k=>Wzoe_+O*Q;?#>=PfHSN*?8XwXF@5x6Tghw_GTaeLg9JJ?J
zzN~|@U6wJ!e5u>PJA@BB)6U}x^_+svX@D-$Z+C*@Lg<2?skP6aV4TMm)DHv)Sm(!I
zn*g0C-X=Zl8D>q9E@o}s-d|kEe&hq-5eoS1?`P&{|2OiqnSJPqzp;-r->TS*d^B@E
zVz^cDi#pe}PqJ3AIb;^=`!G{YOV5>~)*hT{Vh8U({THh){cGOzoKe(?lY5K~-ux_i
z_T({d{uO!L<kjR9X4>CQUNh$#5bLan{FyzpVb@}FiK*TFq-(M7GyMJ+vf0S*OFY;A
z1bM8;eI1waO%3~fdBoO2t2ooo9*;L<c=9{wF8H;F4tjQ%<GcFUqboU+yf|_eAz#6v
zw{*7Xe6!tFn#Z#<?QNnxi?#os@GH4c&cEbDa&S?m%nx|?r9fF*CG`*6I&(tVl+Uxq
zK%cUIC$oJ)zD*%LQbrqtb&SriCThyJNYiu)o|mSJbwQdgG5tappMKv*m$RXXuFxu-
zg|PV*_8p+#T(niWlbFg>dv4q_MDI9Lz#quGE2OQn)9>886OU9ku{+J5*xBqshNe0{
zd<5sLq0hSFjIGyx;EL}1t|vO;nseLYo)KMt-C?5pAM{2GuQl!OQRX1>Y<`{E@K<Q^
zJbQ4xW=PvB(4^8eqW=`y^ZCEB>TzVzZHDadagO|M7ddPGmQ_<-p0?-nhP3VbZZ+e0
zIB|3jd(4LKFuvAR`VPfzz7w_0A6hltmDl!Xa>iPyOSv7=Re#3T1SltaqZ~@nSbIbE
zKQTM{)(@(pH<D+Xa!+W)FRBgPdiy4gA2)4Qp<61YTgptW-V?E}t>^veYG+WHPR3Uq
z=UAxzi_D8gX3FHy&ZtH8n^x1-sG+e1qs%CKT>7!It7S83rzBvaUuFGNZ8K?UyP9X0
za^-Mt$*8%X+jJgn4X*EF+$TMwy4b*_Z*6oR0jCY<f%IOW5nTt+Z-2XpeRI{E_tEN&
z9{fR0bl*F<(LLYEi~i-i`O*DP42k~vdUPOh3dv)o0e|9aE6`W65i7WSoYT+&{z2@9
zbgt%Ft{ZL|ND!}KUw+rkpU}LIxHdfP!~SX<^fCs%x?H|5ekF7CwIwT8S;pJ;vfIsi
z!T23<w_#s_x8Ltuv1*2RfozFpS}V<_d5EzX03WSgbaJLuC;73mJyp<5ys(gA*#PlJ
zbHAKJsq(GJk$BKz>oRv^CwXbv{CFQPGJHtz9SQM4Jop^35Qhh%`N_&hp!;fIZor>j
zkFDM8%I)`~^Arn8+l;ZCEjYXj`E1<sQFJaaxm?iLhRHO_x7q^l{kQryxxg<)e8WN~
zx^J!9WWcZFR{y4Alh+?XZ@X>{Zc_fDc%pS%!6w<urc;8vQsMj@??sR7c0<@rr(Ijl
zXgft5AVz+%+CEGj_*bU&$ZY<}4>>K1hu?;W@;xk*JBW|D{T1ZP_<ax9yu6F{4xj`6
z%6R+RMHcyL<GT{Av!f-<RSy2((&$#Vd&j<a<{*QYA%k;~!ONp1ZuU|lTYtWum?g5<
zS8a8l_f~3}c<J!5YG0~$6>YzbO->@`M?6Eieuv)P^Lx&<#1|#zQS;h6CW;&<U-6pu
zH4AiZ*0v&l$a8A%75=t83+gt_W?kf_d~>Zk|JkBI$b0H+_;<7M&TBQEd776w7df`W
ze8xMh(&RL{KHO4dxO#^or}qXo`8e}DQf77Au?6ZIGhrC<l+nmy_ikiTe#1d<x8>j+
zD|#5Z?)iOH)WRRW@lkK|di-qpg@?#h(wu56G<IR@D!u4hcqM)M9p$9U{sFK4Gxr@|
z$6AX&R2F8<dc166a8g?L$H?K7P4wv(-5)ACuKRbYj)|l9V`<$VcIx6M$)3jO&#tRq
z)kP*Ub|YOkhCPjNVK-VF7$Rk1=Dulo;$`9G&V8&bd=K}oN#Me_Y+|x6z<wvsI*Dib
zt?}W-dhg@?HLk^x%=^#qOyfQm-nu694*wtsJeBeffTt4w06c14XYmf-AdY{ec5kE}
z&!NfG@F$%6;MDL9&b>7*eBJT;so@&#%~WjXWMlgj*5ot|G#3yJjDBT1^*n7m(=_m%
z@G0<j$5&$inwgu}@L)St&jmae^3Hz7`w(MW&!(wQ;AXAK?$f5X{Fn^gZF;Lu&)_~!
z*z3s-+~kCb@62;--XR-lxb;gLLFn>6xU=|PKpS<U75rk~Z~8uRcK8(MK6G|?sB<4Y
zJDlg-TW5#8+zS`C^9(+xjyY|Vg^xM+p|UXNeb{A>@Vj{eFahi4a@XQcUzUG|oF~4C
zu13B$2k{@dC#R^w`exdviF4kIWYf|we2H+*i|{l0&E`w&glxV_f5-htwZAIUK62Qs
zd)nWO%=vYX{K*IPk-ID(G>E;I4+?#1ZTZWRv0pg2L94CKJ+#{F+(WCMIrq@2n|tva
zf7|92>i}t7^ebF4<4iLALAb1=4f$AA(9VVj8FR)GYrV&1{#%*8Vi~!xWeB=S_SBc%
z2XwRkL0?~{4e_=ut6k2AO!vW9y5G5HEVUfJpQ`gd?0R2to>BH*=bo~6AHSa(zB5zy
z4t{eO-?snwWq1yqe3@|(5?z2jF8u@SmVQq*F0y!jBkdX53$>-?=3gEcz7u2XqYj**
zso^V}d&bCR&ONd|+qsXFg{z!<Wc?E79^5Z-?!kTL@%yRaY21sx7x3H3{KRh+hxzVC
zn!aXgn6u@N>&CK7*|VJYk!j)6xtGrRzu|FVrrj}4yWl#~xd-;)&ONXXIetGioXfpn
z_wwt&j%_;*JGs^Ad*FP>xu@*`=bpCTa_(vS;PLyZ;lFXenHYl~89zR5H9o(P8Mn+a
zw=7TVh0yXefBzl%eu;jB!!D<9;M?ik1K+Qmd*FNF`2E!IFS+0GOXb1-SJclMpFe(9
z*va!r=ee<7{K<5jz`~A|8`B=S#6G98N9!c$VtZXaruZzeB$atJk}hNCZqzI1r?CH4
z#%AO~D>;sQX0vF?!1}An&tSdY#U3GYpMRK-pSg}_T4PnYC%KO>=Ul^YCo#+jzK)AH
zBKOH^=9TF)Ii0gfx2^m7)u!-q$_{@17|$JF=VZTe@_n4O5zZ-3ruXO(V<8?I0cP!c
z^68hjV;#5!!SfLLdx}3EVjiGa_r3HHBqxD<jFmy)V_(in`LS9<&d$FPJ+t!#Q=Zda
zOnKZ%V$8|I+lsW-{D@(ldH|pA7}q<juM!JMCN_KQ7<io6yRl}5KaYKzNW7SR`ZX62
z*FG|V^M89+^sr_Yjk(VWGm?lIkssw5-&W)?6<Yr-m4CsxlkE4Xt$3$tm+mWeeQlL*
z<is}eF2jpHYTE5N?S*E;1ka=$is_un+L`vG{F2zduh{(X^otZXf;U!Z)st_2;n8KR
zb;jH|#1>EO`Z;CxGAHQp6lU@YCUx;Yc>z4xOPv|y)4#%=kr?Nm3Z7o}fGsOEFCJqK
z^;2_do60Uc6PllCYU9kME^D$Ldt3N!KRUBt@%d5a{1|*_8fwn>5vRL=xmq!{ZP7&b
zg;Q?Z)(?koi+RI351BRAnk$~~pSjRAq|sszgx)n+-f+XBeKY&m2SKiNxAN`9&-p`5
zxoG$c$|PtfN*iZF<0oS|VePH!@J#6UF<&vM-7^Jme0zMRV6m8k8GK^Fp#5Z}&&TcW
zkC2aF`wV4Rms`vktF>`rY}5;D9Wn@xL12U5-CsvOvf=U!H{~&4sAIj~#B#&zcTW~=
z@0;nPJh_<HvL-$+_-b&VX)5QeL5Jtju~W884Nv)a!_o%6uYK#fDQ!MiG3S;H>FQ%H
ze1&9`xyf994db-ow-@gCrEnx3H(}d_JA$m0#7$m!8FR29o>+xhl$e=dUSceBZ7J|K
zaOPJNxUGXmZ$OhPp6|2iiGNosS_z*gt-P>s{WQ2h!y55ENO|oC+jtc*9pz3a?_zVc
zVtU8(E}9iz@SMil?#a){ck-}a21n88*6oL84ih{H_|5#!;kCnK7yI=Z;Mcv|`)Brf
zisp&->zU_@&kpUy<4S{1&6<hNn0exXcq5)n2YyE;wh-e}+2uUjN1MX)D16Ym_pQir
zgJ<DDrOO<+X@YfB@v~s-!cC(0>!r|ho*_pi)bq6~$t8sLua}Z<N*tSg72Q`rpP^ne
z#k1B#HMga|<P>Nk8EXoe#c#m3n<iX-@01)9R=ldzWmOPcm8??EBrm1T&1acw4{@&N
z=IyS<uTw_vF7SnFL?@NGoIZX`xnJ@BVgEVdhd+Mv(wmWu@2#8K7D6^0dOBmFb@+*~
zU=F5g3#fky^&7zRR`6_M9bxiB>!^=dkMMdOJo~`&Q{eYH`1OGwbNLP6*5hG)>J3-y
z;84y5Qw(u%8;1FPb{kh_wSjMRyp0z!ZPe0+$_FUtdn2_$v@bQW9uMt*H1qBv-dV4+
zZwlOzbGy%N{m>h_lp^1XO{?DP7ntLGyUlasz#AiTqT=6da8ry+{k$RE&h$plpv_=`
z+3*JVHG<bLckJM>vrM$_%-K=TWLNZD+Jxr=Q#1Ybu@_7AB?IHBE52Jin?l{oi3f9*
zVbo7qt$B!kH?g*^aaqr=#$^%jMECPEzbWF24KZ`=&FF#Z9IHb2w-IYzczQaA{>l8D
zwg%qa?9FK_{Se>t%zCdJdf~n+BNKazjV(L3vWEL%+SfZrR-R{EO<_!z@%&Qy*-ZSV
z`7i1EDx>#T3^Cy{XsdF>0_^(wzZw|V0JGK)p3d}z-g-Jgf9k`QMfxnDj&Nu?%sdep
z(z^@1C*<{c+8CPYUwyH!rDii_FXi`g*B4hcjJm%_eJuHaK88^4D6j~A)i2G|zd5VE
z&N*>lXnrlldJSi}@m}q|PXF^y(zbBiL%XfK*V&hS{Hpw8Cn+mjr_kOjl;1`<+5HB7
zyZIH*_p^2`J`+b9KcDA{q08o>V`@0FcznFt6)xp{T>69YBsns}J)8$<CI6eclBWiI
zq^5lHL&g2n)|aU#Jl4?fZ|G+;Yjh{`ZS*YF>SF!f6Mc7^a<{$2Xk46^=I*MKuZM0f
zK?n8Xf4FJaBB!QK@eAKMc3#(8<NzNazfNbm>$&W*-#RBu9JPJ3+Z^yRhC<9GJ<Lt2
zS)21tHmtFbkDQy%<?xeZ;X%K(vfrbc{a?XJO}oguSQ<)wZieKx0l99Pj811Bm#Egh
zVsBRfoc0h?z0kwj>4O&MdwJ8jYi^T_oJJY!V!XkGyP!>kGc6RSed}!WEbq1dTlYTY
zqvOZwnFU@!evjKCWH8$nb)rY#U8eKG`4(NP%U*L9-nV6FN?G>r;seu;AODkevohZ(
zon3j;LD!#ykNSgw7kuoYtOG~J`84@_AH<83JzqH4^OB#obAVm<F7Dl#`@iswp1F5v
z9pRL&f@@54><zBy_@FyFagir_>VJ4Shmmjg1ZO9o^>|+R(5M{yJiPqLdAARpnt%K7
z@*%g6m^Jiv=bKn;V3<+DHxCt4b}!PJF?-@O^*M+31$Vhg3WmWj3isypIW0AHPmz0R
z`?Nogy5nwq)AU&z(59vjzWfh!1MO`?AKT~p>$&P=pSM4_{Zw_%i@@<_1G4z;vO@OX
z<b-cB<W_Z<q?h(RUUO~JF|&B`<5kc2krP|KGWqUX$xACCXN!Iwb>z9P!?I<XZ_f5h
zrW4e8cUf(eer(>lL+09r`0~%Qp4*F@u#TD({R8{?7Nl?6D#iNAXMUr%m34b^(*47|
z^AnG;rci3w-^84RGo$14fsb*QU>=gHcD+cP_01JF{ONJ_An@;FOz9ilUf}Nl{<-+y
zUiyZfWgY6Daicsg=1;W_{(F&4;r=8tFWfsRBiW>n@EP!CPph4~nbbIe-rb2|oFj+c
zK!)2B!>XdJwQ}Z?y{D%vj@^5b`wx<PmrWP@9MiHx=pFST-e%KRZHva(r!k^4^PBN{
zwg$XcbBUMYpS~|!4-EoYJgf$fK6vN>4?j7f+K)Ih6q{Ae9x1K;FPs#+_~U%z;S+r0
z;ZuC$q2wW}d*Bw=diK?p^}&OqpL4H2cDHB!drjW;^=9XE|6Jxl$e4IKo4in)Kk!7~
zWyEguY|re4)LzH^(7FTPg;?{w!<cs`pjWDO$E;rXRzhCxd#%5o)e#EK>Miw#Q?0+6
zRXJeRr&@nA>%G?Ba_?Hd(8Mn8ZSaO~)bAQ^xRUQq=vn2Y(8Y=C*_ZMVwEqOZbIA$J
z=+VJ)*EvY;1n=6Tsf~hHIB4t)hWl1>{SxfQad@EpIaO)-9`hQszcfSh>@no*z5UH}
zc+EI<_T6Uh@zMSs#>ki?ZDiNA@A>X?T>8=?Pk6amUz{Jh7`aS3dQ9tGTkr>{-=jUJ
zg4x-3>eTz~1=`pB&&!RSW(qae2FEVdRh&Wnim#t7M~2ZI7X64m+5P+@{jo38mN5+#
zCg03Z`?=It+xwBhy`KE8x!AQ%?CDyI^)&JavuRL*ZLQwFY**`|hJjLI89Gy>jy-&x
z)ZL5^`5NbU*O70t7x~q`i^>q+duPl>3SBx=9QZjykaE%`e)@Ic4^+(!@Xapzn(MaX
z1ES@pJ!Ye;h4o&_>@RjjhcQ3WeAxic{^BZ*$iuF2sf|dcO`Y!{x;yye2Rv2B736BL
z&JFuR=a7qkPI&7n_!2vm&q{7EeeESjLva-0>FnRo{$?ls5QH9wfcLHd-<|{peH%^R
zd>+7GS<RX!Fxa_u-<;@f_Yred{`0q)M{>Ubd4FmN_59eK@z|qwx9f#w`gLKS>Zl70
zHPuDwJgq-tTlL@BXOZ6f`mDY8HAvalKSb^wa7MWQHusWowY`M@%K17!)6Qqo?Tisl
zio3i@S=t@*2LInjlTd~x=G<^ePN-%vG-)NK(h$!LYu{`(-<|vHv;F5Y-j<Mes2I%v
z^eNm{LY`uJ-;0H>qWw{#)m_}{yrcN%?A$x-T|qy5tj*3#yb9W}Vm8gtMgj8S;@8Kz
zt089K^P27;?VDQm3Zkdh7FqZDiP57&cLsvhk^!6k7t=;?gqfCfvzL-H9PZ?Odwq2h
z-aT~}cnJp|J{i6>a}e_)^Qh##R|Jy2@tgyaZzYLw9EdYtuN*~Ayy8Fk>{}-$aq63#
z8%BI7Qa?Mn%wt}FmNhTamttHG6YEIl^NcGCayCUaP7{R_`yPYzQA}>KkM%#nmV76*
z5xLmu2lffVQ}9=t3bh-{wEI2auyJmmZQ~s0TLSox_jVEw*FK#e-(uPY7jd_w;1YZe
zY(L1faV7SUb5XHvlez}Oc5s5b-Fhcgu3U!#<m317`&7=b9gOEUGHpqw)W&vOrV6{}
zP)Glt<-ZTx8F%9|COH#@HO-bQ*jodh-G@^fpUafLkn;bNxu3!P)7*<6+D|-nf@$Bu
zuZ=G>Igj^Svi|o^GVN{r7p(ia*E#Xh<E79`_C&giy;)^`<n{)}og=F!`+axWPwhR+
zlFfVILB)>CI3L!QS$l8ac=jM2DLKbJqicZkips%_4X_(ta$6O5vF55AhV#h3If@>5
z3>@bV(vLyP;p;cXk#FTgsLT@dqt2&_)1LM&C^t@H9Dcv=oWggP{lXsW>9aNXwl95s
zl)hr*%m;6~cV;njy*lbHP;87n9@%;#y?-rT|73VO&r;j?w(Bx?^xal;2J&yqA$~}y
z{15Dk{15qVebwY1;8(05PU)19ud4Zv<16Cl;%^1WJvFv3bSpW)cG*4l-d6j(z_sv7
zcslmc`+t~w^Z2-`^Zx(bJKDSeLXvkUnvu;W2w-DNb|KZ($bf+)fb1kRq}7bXVle49
z#z4&SjYhHo2hqUT3Z^FCuVfn%MoC%{?0~Y=V-pCiN$Q1?rD-!-Yz%^g-5w0+`~I9e
zR~`$Sq<!`Gdj0;G*Ua2|mghX@+0OGk=N#5M?0J9Vd}PNXORi!&gY2clc65mMA>J?G
z{hjC-y$7bovAHs%-_Ojw*BU@$e3f~51(~x7nNvo;$Mac<Txq)BEL-qk{cQu-s19=z
z*bK_)&$EjyoEzrglV%O^2tK9m+!`!xmei>ItMMTO&$?Ncox~jjfzNvDX5w+mTl=nA
zru?3z6FSykOB=&!{AjG_tBCy-vR>1gZ7gtcVf&V0Z2uU19f|n-E}yzdaJMtQ)d4<{
z#PP|N^l{03p>aK>z_kc_DDvy84}SbSe2=uT?Afd51^B6Q&%bQ|J1REOJS3g=?E-K9
zx6rHV<7cIf@4};t_ofZGc;1?=tRu&Ohl@EId@o}xy#DGHd!5T_p1$(hCm;D;t_*iO
zTuhldazd)0JGD83aj8wU9keT&Y$eY{vh!2ens+(mOF7#6n)of}K+X02{{G&|rc=QM
zxvuBqqZJM`M>;EpIKRDL@1L)`dfu~3uAW!tlq~Ioz8;~kt!At}5AOUzv+HScp8kdM
z_8IoyA$~Wln08}5a#8Zb0e4s9--v*p$cn3<tcwvd#Fw^U9QV9WG;^K?_bxWN@T|TC
zgJ^UqenjQ;bn;ua&+M7lR`9Z6J%Yc#tn#hUvS*Q}XNJ9OnmMfmr;TM@>wkG-*ZS+I
zqcJ{*EJ&N<cAyt*KC$50_FB_Cb4FDA{GO}?mbBI}CC;){CEjguesd3_oyWk3JLs62
zCSoZY!240hL){Gdx5|sq82**MH4gdngxfHBQMe7prZ!Y=DetcxLoO!cUy3h8I0*3H
z#JhB+X<j9C+QwPR&!8JcTbjq;^6pcdwIn#_@jIVyH0CJ&sbEccH}BQgcKoDI1D{J@
z-{zU}{Dz)zQ?KCf8obc-{$WQ!>W`J<PWumX{$9aP^fEj<^h7i@c%j#uVeRvW9Sf{%
z{A1-MrzyXSIY>5<zh{`o?bpTT#rZU`FTlgUqvy)Qzk3Y+62@wI2VN<HR|=s4`BP58
z*YI=6ZfM`mCA80+$=2E(v|kC0rP1|I(RS66*t}L~KWKl9;u7#kTD}-_Sxxs9*OG(f
zEc-NcKR|v_KjX{L=g^Pc)XR+VkBsrv#|u(}S8@*nYs#S?M^kSw#+MnZ`2W?%7o;Qu
zD$Tf|KQiXQE6Hm@E=g9rhp%c4d*xJ4^ApUU@+c((#=kne<tA_%;8*uM#o!a+{Zl;G
z9E&zI$5Fn6Io?P8fcB%5>!Yn*eDB4E4P@;1DWm^^O#L4J1HBP^BkTW5`eX6u{(SxM
zn;UgLj(@%~x@dD?gX`=NYh!{#ou}yUyLWm9>KHRLB%9m|P3CR}GxR9*Katp3g8Kty
zbH2N>$ohE#_%pSN#a8UlIT8@rV*HW1D{z<oi@#;R`Dad)_k5N$M;ITK>Nuu+N2X3P
z7nwj_v}B@3`P;~ohZcssbJniU)Uqa_EO}o$6vN$!y{9uT^-Q{2y5EE!wB_tM$2^zb
z_U(NCeB#Wx#J@sQ$xS8h$6cT;&~{KifA4+%naJ+}*CFiub({(M1b#!#;!55M4u(0q
zyqopB&c(p5%AU(9_HHGQcfZ$O2jG((b9l^CdnPkxqc{q1%m)tTaYh6S=lGQ{UY$j-
z4Lx#*JsP$@&Rkx{xuijV<e}L9mLQwepZE)Vh5n`vrP+6v-`D%ZP=#N$Wql>!?=jJ4
z4v+8O?&IWL{{JJ-57FL__zvdsXy2n_)AwGFor)haUvA-3eX?>fdjgTMS|43P8OifZ
zsOt+sj9T^z@`2QdBm2|2#Lp7H(3(6pKCwpYc-FAb%a5`UdQ!c7UqU8#UWnS#JCC(T
z{{0a_{5%m_Q4{}L;%ka&cc09f!0f2}$;{XHBl99>V_ySj*l_*{aK^~T?FZJFv!WJX
z*v^(Y4cYhwvdhSuVa>D&8erb%*0GL?@tiunqCa@2T4yZ_4r`}TuL1j~S#>#QD?)t_
z-B-^!5Qco()*Ouo>nq(|KRChd9GJx2BE*H&c8ET7rewyib9tDxn)*?HL0^KSpFJzf
zDX(?v-4or;e)gwm{q$+{jmD<;v!;?4%yXS_7e;n@z}-My%{g${wV+4)irL)-6Za9b
ze;&WL;;>H$2EGS)_WLRLRr&pEo=G+cU&57LFXnI+&EcwFaC6>RKCZORD9sG7^T_wr
z^8oI@0&c;49J)g=7Xq)&Q#IHK8n^b6=KBwHcC(*vZF;IM^W~I<#a&VRQTUH={=0CW
z(cFUv!>9j*Q0h+M9vwn_eFXQh?RM{;-LDthZhDVKL#HA`W=tn;!MFss<Xa3{lDtf?
z&LuCUEWpvx=&1qS>5amXa&o~_Zk~M~1-O~D0Xg$~;RN4ZIByPL&@=I24p&F3pO5Pg
z7^`s2y;~O7J(^S6m_wVQk9>NN{n$qw=yK5l@t>#pub81?Ltj)qesAX4C|Y<d`e)L@
z-~Il>wD3X>zJM0m>1Q-899=#gzJFrQ9qvQYYb?I9n~CYZiSE@}6rZ=fe_rR!XkNN~
zdU-4YyjmAE!$+$|@hkgfHg}0;SZ9pT%zcHaL1gEF3h1W%f)r~LOE(43bTf1lMMgkd
zWulwdHRM-|SBj#kgY=8x)FWE*SYPMMqf^O=oOuK-g?bXulH{OZHRi;!Ci0px$kuLT
z#02C&|7Wr9d$E1*uBee7Q!Z3?hNU5Uri!lve{N+{Gq5<E1tq<MooDrO?1SOC!lz3;
zX!NnsGH)gHY4Ej(hWgJs%(FKzPyJ^h1EHlGSR-_~uGL>Uk0R(_@JL?e!_Ym7-o@Mb
zG$%c!Gn>?2SZgkPDT_;9Sg$s%Zim-Kw;9mB_#>R-jRnA~{DyXH5TXim<TLGK-u|x(
zE#G&3>Jk2DfPau@Df}dZJd@8ve7u+c8k>A4|6SUC;Xgl2+m)kedk6jeIkau(XP%80
z_D0RTAGVnlHC3ex_DCN{=UmOaJ(8ngcLDqf&1^spi<ZHy)jKi#c7c8rJ*Tl>M(CM4
z1P038R0H%phz{C&ANL|6D`T`JnvSve&!xXKvc8*k<2?76$1u7>-<CGm3!~?XTkWMC
z(M3P|3SPms$=8p-Goo+gH&q*9<X|v|!bkob#&UgkA8f5v`?h>ee+a%xV|wLN6%4_D
z#l(X4to~v>#d!(Yv%t6X*C6*J{4-@TJnv`E#dVr*_E|`l9!<6!75^3I|BvIJIXE`{
z>F>|Q|DFHS_^0px3H<--q@&}1%%6dO2RdlOS7g4d{V)e>Mfdr(XBF$Z+<MvCgQMqB
z_5*xT9pseCh6uw`;i7pz4AZueo!A~tHRF@0gFm+8e-5)g#^-|?G4u2E_=jX<3-=Nw
z$g8$Ac)@79(AVMEB_FA0GQ>hGU&1ek`O;(uYB^h&weJ^28`vlVwdgJJCjE#v_dv7Z
zRX*HWFI8c8IKUkTZr14Y58I4B93%Y7-rT_c%F=c}dwj&RpJshw?MB{jV!rhJ7xdxf
z@vZE{fWJn!Pu!|n^}oqEQs}Pg9|*oYne6*5WGe->?9U!e9%m|ahSK09f4t|@ujG)%
zDnIvsR|enwA0L*%|HN1|&cMF7p1%GZ863z?t(~>DaG;$Hh4X%Bpq&i5H+GlDI+XkO
zpc{+-BE^W=hl1|TttUQ2Hv{CVm}An-$a=!k&9T-K9(2<Ry?Xg{!+K(8nZKS0=V(Ri
z3B@9u)yicdCjmOK^bMT&p68EV$BfWP-umKyiB59s3+`9+>4f)FL?=9#-y@$+bZ69u
z>BJwGXrwhqBa+bpjc8r+J^lyloLfX2x%J1^iN5@Jj`#mvnt1JZAEt@<qiA9;{fwrG
z;gvc+qzwPQ&SaaY^9g&hn~)FiwQ@_}TvTpzn%=&$0{WOj9CHf3l?kZ{&_4U*cK4q!
zDK$80a%x}YloYZo+jk$aIG$%#79}$)O)A4#UpA+xFj1CiEjVo*KGM&Vi_4k(@KZ%k
z5%%5&e1hOJ`SvC3Ut`X;vBs+F^v@}F@Eg}X$37f<YQqnZzs%Z%Yb|zYf2we$yWD?O
z)b{9P_Q-CHvPQ>l^oXbbn)4q`=FFtdUd#-*sg0b6r+tYYur17;4Ov-gz8_<4X2<$g
zl>8j|_Y!3dz|%}UcpzKBo=Vo_J37g&=D^Z>3}qDaYQzVid~SH|`x)%Hxr^p@R4g!0
z#<@>(dDJ8uiD_xguQO$}pIG;ulE1XLZb{WVKVGA?)x@5!Eu|c5c>Ruq%aWU+?-)LD
z>4i9b{N%^)u4^muaZt~F85!uYkC>$A9IOqWM?9E3@eFa9T43$u%zK@sw3a+c^{pH^
zH*8MSTDb{7fX-R(!#0Sd!yRw&?q<$Iewg+Z8<RcWM&7&hi0~JQl@e<{JGtUd#K$b|
zVw|G`%+g(IOZAO+w%zCO(x0d={iXbt!}`ngEY=!=@po=KIk*4V0avjaaK9#YG4>Ga
zj0$L=>z`)6z8ZQ6;kV`Nwh=#E%=mXL#oYQ^ks->XyDfrTh<}`Or0y~)t%2j*(I8z?
z310pVn=xL+yQ%)(QRNl-eCq3#*jV1NS3+`7G1+GNZ=nBH{4MfvHF)6Em>pH3HTZv!
zb);YjK`Ww<7&OWGZCSxCS<;N`^gPb9H0Js^?WylRo+~D)wYFi+tF`DwC*WHno~`w0
z%yn+vNtsM}D76WkX385<+f|4EUHlJV?C1IKcplgZ!=VuTJr@3UiBXQTGTzP^ynPen
zusnOI&$C``?UrCqwR}m>vUY2~7}#1wSLN_d-3#zsb((ck2K{NqSCmzTJ$t`U-zl_(
zEv^{h<HVXn#GPVm8dCU&cZgoAh!Ly;N94kFtm1dn6yCE+zxi$=A8Ql7i$eCQmoT5r
zU-wcm?m@V^$|!cYqZt^e$G6F9eTP#LU%cB9dw{vT5gQ)7KXaAoY`&`@#o4wy>d+hL
zAAkL5rp=DIrndq)6XU)70h+6Ot}~r2&;euK8Rg@o&q+ozrzfG8Wz5;7k#zg|_}>z1
z;d#8#%eDefYkT6n*7lX>g}==F%I^ja`!Drz7@T?71}(jR`^EUq<m<R31^#WU^J-vy
zlX+3D)C^#lDj%X~1Amrq7yG#K1Dy`Vu}^0{H}c)aSTxQiV2we$DyK3}@-7Z8v@V?d
zC358Q=lDv0k4*sIsQKNgHG2N~{88{!wb1t$YMwR6-OBsSn_tPdW8o^mlW-(leH3o$
znd3LF)SjM;NARLCMcyCY9Al0(Zv{`*|42UJtC&~eNitb{0q^gAdkOYaPUa?Zc+=d+
zD65>-^PvH?H(2bqg+C5mUeI#__zPr*@_9w0yU7n1T?*gr;8gUjxq)YGek|*%PPHT2
zh>QNneGv}on6m`s)sHD%wO;gc6|}L6XR$Thb7ITGPq7;IO8Ycqal?P%Ml$(3H~6`I
z;!*jZ+uK&zv;8IW13L^luEyuF#xc<DLX-W$7}I&vjlN$t$XEKW)Zci_`aiY#4MD&1
z-^+#-&Rf_gHi*4EP+0QBL~twKAA~O6DmYjhM}{Sw_A<c)KaJ&gV}fsfSI6PEglQ*U
zHS_vy%t6jCv@@UXo`p|lAUB2gC^(nRAekwi$lw>(^P7QL-+|4P4js8RvVQrSun81z
zgWvuQ7*$rZ68MrAUVRvD`JMZ)#TRMrvBNX`7d>h1MZdE)AXlW1F2HA2NM1o9d9cz;
z3C#=ZY;)7}vbHaq-nJW<doy)5<HdiKSd(CWH18VUo+Vd58AiTHelB5*r_2P0(_G|1
zK~D?gtjdjbFY-N;8}DA^`{1-_D$Tg}EIH{(mG$EazWzzmW+mecV?XG*KR*ARehV*s
z_&N4X3Z<rNY~@jYH>9LfM#neK8*e)4XS3u<tR4B;&b@f;g75HtJGB?+57lpAY%Rz}
z;iBL&VpHHEbOZZ8^c<eox?v@>eG+YliE00-wwsX^$O87;pP7`5)tK~ObRB_D>S-&0
zq1l)%jImMwgR%6Jck+gE_fPQm2f~9xipBV4elkMO70hcFchu+{68Y6#r){@g<6tYn
zU-#6R@ar+&RTLhqHO#Sbyjs}?m9h!Q%ZLFdJjuF({dCOb&B#t{lby0ly1Bc=&N1=B
zhfh{HY+i6E`Jp*ZFt@V7M9<ym(HQ*FZM>Rh%Er#r9J=@`%?`D>nYLuhETr6~sLvBt
zuF*z%%)uv+1J<s%s1!W_Ps;X=Ij26Mx)zVnoxKwkntPOW+J+1KHp0}`y}`klUWFGm
zCId~zpaH>KFv+nzCb;Qyx5hDJg43yTz<z0vvl@&oDD%y+R)1Zp=e}NSLpQdcx2nW+
zCXi?3G%f4CdFzdx?l-2&cOOG0Fpp(1<OSc>jvE~haMH+EaDN<dI?!2Ub$v=c)98EA
zwI@$;to)Hr%qfZ5=eMFKC6gpm<L&-D4Y1EjzIy}zn&8}a#qZ#sx1f=K;GOo-aE8M=
z?Kx2{$EEyMei`xkb$`cqK>PY0eoFg03OQd<XL1(>_LJ591<=vpDSjTkbdY4oHt5D<
z4O987vn<WI8kN7}8ycxx<t(e$c{s?$)4+AfYVJIlY{=7bdpz<DD(`icg~`*{PyNcr
z*v|tF7V3T}Vjz{|2i<8Z$~@{lY*tOZz}&U|v=b9k1z!_qyEw={?5t|n8Do7EPt|aK
z2|Dg;$O5gAi2rQfhc2tvxeei2$uw)NMXa?F<W7vKFv&J@Ikm6xCF*o8WbYYebzV~c
zx6x<gO|qBsR5@2L)jb*ePUSjS*TI8RE~IRSm)Z{>R<f>f$wzR>Z;Ht_BCqCUvwDs4
zg9rJH1NLHaEMER#_zi=-UV=TgiFKZIuDjxzC#yJ%UH2t!1Q#xQM(fF+05{crOX4eL
zn2(j!KW6;9PM#yzpYhh8wrxH9Q^u#UWqiXP?)9tQ@P2V^(@)qNfxX>22KuwPmIXcJ
z>YNy~zn}Tdr;Y8oJr0U5Sh!`=q1)m6k^Pk0n3wl&CoXS&^cRr7=2)9<6=Sk<xiHaa
z>1MOD%tKC8W}Ic+*i4n3&N7EHgT%8X&T+HN?_z7EH)1cFTg?|Q+Y|e(Gyi_k+iGXo
zGo|h8)rQLY<tmRTcNgzUoGG(KFDs8IXO1YReU+_+W*NCfi#6^BU~DntE@@`YrC0ix
z>jCC<Kl3-A`5Rzf9o}gUXPQt)7rr$^P6%{2SNIUWhsZ|?U)MY@z9RNy1V5s4UDdoO
zb>fQqGq;&d)Q5Kdj`;k3XeXid0nf*K=x=lzeDQjOI1|2<Y!kn+zpNZmT$uHJw(<;<
zl@HJ{ChLsnyVPW@{5hL^L*!7n+eyYggTInJG*6M^7XC8p3HAuICKkNElJ_$&GufZ<
zyv{T4x5U`*g+A_Dz2N<-wCSC3mC4q9(Yzl+&$Mqhy~;T%z^6I}yp-^%<iBK?;9my6
zR3JAhkQ*7s@jK3dKAi72=gF^7R<wLN^?LX{9~(X>uX1Wfae}HPH$B-u&h-AZbg_K#
z<2Vm$$($#zrOvTvOmWZ#_)|RU@oDj9b9Vo%q{+-mZajngpwr0yV9ha_KCy+5S~oE(
z*-qVJ>IQy32c0PWEj?I=yh=c)f!zItevgv7&!QisyFBOY+N0TV+AAGda9H062j~!T
z&7_;3dbDbssR-otap2=sa3C9uGaRf9_B#LJwcZVr!nHxJZD5P`ao4B8ucvcxL(-wx
zEYjoX?9HB+Xhc_Bj~`I`d+u*}t|5CfJlhSdrqIUA?^pbDG4rw!eb`Cfc?7wPA1@mx
z-%PRW4165{R>P<NzEG<7IJZ-KZWH8xc2g%#dldyH8wNi2a+Pz(YCW(ReM|n=G6PKN
zFHF4E!a#o;s2Ai_gz$4EI2#u{XVqS%F}>PD=h(KKv1%jDnkZ;fxO=$RbV{$wS0TGV
z{tD}>xXVq+M%WJ@Z9+z<Y%_iX>Bks)p0;2A67v@yYkd(N@v-pE#jJz0#>B2fPIhR`
z7%LJEWq<g-(IAJ|x0}8B!GF!U$~k8GY{MGbaPEH0J*>OIS=no%=aXp*o3Hsl9eekT
z`Z^xIiBmtaVp3V0I)e2dunY7on7253dOP*gZ~Ae6`8_=Fvlv`SC+mOs2D|=xO!$`1
zuMYcWKk~IeGD5Zl^V5$mm#x*0{7_uf<njf+$M0_BlW?yxTP|SzOq*{p$0}Qiul!3o
zpOI%>CvpY`<;g8sC%iw(Z~1$3zL*m|ay43cmgxwwPZ_(Has%*SrlTQcbJS^XfIdD=
zJIc3MM%h5eM8KVJAo-9V%Ta&AVLH?#pGr?RxRE~{T6j%)2BM>*<(vd`Bwe)pSBHJR
zkK6H;_xyzMX>7;ka!!^2(`cWs?1tdu-s`2BOlSx@+uALHC$O_K$cZnDPvPYZK7nwK
z7yIFP(NC}rtzw=$`HPt+=Fqo`DHAOfojN@#_ZoW3xRo!2;Uxo2g_&!OU-9eyVkh+n
z?)lXD*7A`Au<1J=mS=!Pu}y5=$0GFQ(r-QVFS>XX`0MG<@5`}$u_rF|YqiU{tfSur
zeJG~PSbDpUpN#zZDZWU@#?s=n6?3nsX(Rutxx&kKNmk<Pi-pC<?vO$5Ko`jv_arS)
z9E~=@+*?;^zVb$5^2N6)4xK<(2J28@-rS7riH-4UucnQyxi;b@@H#XaU+v&OpD;TP
zUgBx5x4F~Rx?|a=@P*VP>+n5ZpFz$yPe!-N&g8dXl&?~KNDge_OdWiWy?PeU*~pK*
zH@r@FM?e#^l&dS8>)z=YeGK9kMs6(oG;$+$89ar(t-8wV5A5!R6CKghEDxJY>#afj
z&%(zx+Gr-Pqq)SuS8mV0@;`tlsGp>7)vc$l`u!<og7(!n_qN*othSxitVO}0ZGXJU
zDi$Z)sQlnr@-etO2JUuJ-9^;7yFN8|7H}X3V!&W&&NxHn{<if|=uhn^9w)gKvvhWN
zEs)QHKCS2cA32>UT_qpmMbK{u9JPX<Pv93AtruPJk|tk8>kee=ju`x#cD>p@$wK7!
zXnuG!=O>mdtU}+!B(vq~5blc@2l5&m*>w@$Bl=S?s*ZBk3K@Is9xtW*wcPr#BhEe4
z$_vnZaYocS{9<#cZ)I~JgCu(bUr7df(tFv#{l#vo)bd?4^&9>NycXzR2Y#<uC||cj
z{3EnOc<Gjn0DiY=t<0K7u@Dz{uW2%!(y5GpvGvg(&zSHp*s<8$zU_}{EYBA*h9dcB
z)TY@X{<n5D-@>7tGuM|5%Apxv`C<RH_Sl18d-e&i*!%g=2fIV8J>I@@yzUOHKCqOW
zrQ_>UaW|T3h1bHyd-ni2)9};~dfBeW)8nqFl}+Js9>rGfyp=t`8RY(b$+<b4h@1(V
ziB_iV4}aKKiVbjtuM~N)ID>9rY#mysYwq4;%+kg3``1Yy3rFB546U$cs*RzuTY$ru
z(2g*)Bs|XSUi|KNIeSNRBp9|Am)177H>5txd(Hg@x8j~}xO4BRG!upt4{7^B+xjgV
zyVkqF+JrnT;S9%+r*)hUgXm4NE>UpsiJMQvM?)QlvQ~C-&ZG36?%OFK{`(bVePCM%
ze(G5r%bI@Zm2%xvE*l4Xf;zHIfVpF?nb2{w{7H;4j;&%=Oe06o^tN0~KG{<7aRs?*
zpJERdaZlR39-M^V8fLyemC}3YWR32y3&vZS(@`or4!@FY&tM)N1%?@n4S4N(S2P&#
z6ZY0(*%_k22r$Hf!H4s(9ToJ6Otxn<3|z{30y+xzDaARnL_TWkzhCM5@5Sc<&BmBZ
z@oqP<V&?ffPrt@}-MMjy*8;u^)|MLEUePymE?X&XZ6*J1ou|%&A4K=qO2U`M+af*(
zx8k3`KX--d^9;SRxw$cF@r+G$W1=kj?nTHJ#d3r@>EJ{zezOERUzzhKMWF-n$OxXW
zed1~dJh8`g2YTT3#8~g$OTZt~&=Ec`{KH?+C$R6<+A|n)J$8lG%Hp%}6x7^l?6S91
zM)_^>d)`FefNd8%;ok>8<K-KFOt!6H?9Rcsnzi7j9E_5S0gP%>IIj0~)|zk7zW&E(
zdoy+CQWpQuq&Rs7vU$~)aICRMMSIX>Gx&@ZnQY6~om9)$-PE?BVe2ys@H7Gg_zPeV
zzX(T*XiGVN>Zgg{`0}z(bJuzwv>)d`G1t^K{<BU@ot%6B)7<+5?1R8RlIqp_6TH-E
zy#FD;WuI>5`)7OyG$MN07#hj(S#u@tzC#(w3+ZX$O|tC&Uc;SgoOk<Oo&~(2?_gaQ
z$m~tz>_|Q$7kk?ZyxJyg!34I7_6W6MBgK&+qGRHx9Tmj~pUAE0EZxAzR?a<(z7v0m
z76bV%oP>)GKA{+!mG97O^YMm#N<N>@L?#gv#eYyS6z^_ZuXT&>FFBmoEm*pdef`7~
z8Vmd!9PJl!5?<;i#vAb0=z0!%Ncx{S?pQ#*7_=1uR?%B97SXEKm0tvR^6e{Dnvdgv
z7opuX>NCKh{QV8kWeYTEW6(J}z+hX3kjJga(o=ysl*5Pc5OWSbAsqN?T;C6$x!X<k
z*O}h)=wJ7W_1Ce^wlE~vo-;ft#JbxcTVtl=32d6`s=tvO3{^kaWGW2r9{6kjyYtG!
zdmH`v&E20Jz_m&-PP5|+&ENt3+xkH$<-@W4(QnYE+FHx^;qe_A-)Vx+zX!eRymI9Z
zzYVQuZ+e_HrSiSiW}92`gw{T{a+g%XJ@`b+HCCVP*n&=z+;6!C8<g{DZosZfvqn|^
zs^~Rt4nCnf1+>o0kJ+fLzr{XCzd!s#E9-JG*`Tg`0FpDZ1=`t1pgGwGTtQxdXxa7J
z8uy~Vpo6h!37sLbG%eXNnb<5keGGB|*mmI4+1+JALw%v5p7#4!uHV<;qy{&+DV^2y
zYCU`4JFp!$MfvY#pE2Bn%I9uqs~bCh*pz&y4<1RF;vK=Ag@P*`YI@;Cd}kY=i9mJ)
zyi$UXu?jnMZ<hnT7xwI1>te?z@YP!TZr0we`qaL)(Ub?Q8xlV6RleuEo&w&1lJxqP
zZ<>b&fOi}JPeHc#hl+c)nGo^F!k!n`I;q*{$rsnkUMfcK7j%erH-)jk`K|G4tS<qx
z;0qlZ-kj!r)q73z?7m5Cwci_O2!G*X?TNVCm@V=F24fqbFXDXgcoF#(g*^j|VQ?LB
zByhF<0Bc-eSH4;$eLO{5d#5#|UZhXulSWL@jv2_~IM3Dhso?1`o(p%w(3mOh`t3jR
zzmGQeKEyr{+9cm(o&0=#w7d7AXi7PBcT+xNOo!I|Y9q;aK)XKu`}?m0`R4Dv_U~0a
zs5K?_KY8k#KaUUSZO&0RKx}3nxnuF&zW(WQCk*vN@6V4hTSR;5v0klgt*6LUh~q!O
zZ%n?xgdyF3T*thOLH0?PwtU^BHjdr4KH*N<5$KQT9nM3Q@<GtvO8AAn^5Ct!M>0YB
z^V8H7AHXL&>ZGff7kJh3!#AY&fr&d~$Rko7_=KSrben80<^Eg%ZN^v!80;wNEb))d
zg%EG~dFD@B`#FG3_3~j8T-T{R{1el_vwYZsPjKeLIG!?b*&Cq=<f}}dE&oKMw0$b`
zNbK1^?=!zY!6v!zap0SXd>4#c;Ca~yf>St6ynSJf`uGoW&^I!F`h7inE6~@ow&DL)
zUq@>@b~57~We>If1$YpAdG-+Pbgrgd`3GM_F366RtlrD~JNJ7jV(;*QJG32IG{}m5
z&~=)%m|bf^dwaV=slOCGLvwq(8d4ej)A5mdg*LVqqn`W{%vtYMoF$UBGQh{V+FLa|
zym<nHR-RFY|KgJuPbf(J8Xx!II_?Pt-$n2wXAAAH{pR@SL2xp_`+f8q^tqLMms6Ps
z(YJo<&X<k%uUg;N!CnqveTp{wI%tzR$h(drKJfx$?SZ&2gYK6NB|mN$e%u4Bnt$o3
znaGBIcv&#?0cS$`3YwFSP<~<GeQs*)JLt&!d|W6GEU+Quhsm(cya8M(Hxa#fzx1N~
zG6nR@+4fc+%Ga`ze&ly}jeg|U!Eci48|S9(pzT5YEq&vnsnKQf`8xQmHRpEpFMaLQ
z9u3W_chv&<Ugu-$Z7yJ5W`<VO7A_!GC!ZX-r3<ieR^jJ+7{6S7ct$cj9{&w{*rNP4
zJSS$=8~CQSf;We{$nnO$6SyO&#P^TMm!W=dK<=uqZJe19w1u9U%UK@T2xoc8pZ{X6
z&X=%b<$qG!YsQ-j%JiyS(AUH7aTik#u2;dU`Zn~9Y_K`_syje?D_PGB@LT<>?|SMf
zFD3u16#3@^{akQ1@gsE1$);q-&$tIy`|1@p6Ar6N6Zl4af6^m6+t;^ocEm04)pk?3
zBYvj8W@<t|o(gYN7<Wh7t?0NKyDvH(d01_b5k=LBQqjJ1Nut#BuA(hy-NxJlo_+uJ
zpIh1E-R~s18^rGW=`Sxx?VnVb+E-kZ`hG1s3V88hY~DZV{8R<y_MHPAmM=)1gv~gx
z#(CXwI9D;;wO+Q}i`3nBy2<{13%t%+Xy56a=SA7yv%bt=t4ii@XI1u&`K<enw|7%z
zzlF@aYPOfX_GIRReLmdnkiGUylf8*C3}%P7JP-bEV%+jK3P0S3y+inc7l^YLcI>6S
zPr_Gw@$ak6JKe$^l0O@1*YJLyeAYbIv!E~8$nul))iQ6iBV8%@)!sgM|Hbmc)c$kG
zKc;T~2@6tvjF~lj#~%LManaX{<>%XR#o5bx?QZJi!M=gEg_k~kpMm^%clZhCRL&dY
zzs3j6mUZ#lk3r|3F=%@BKs(qXJC%d>_LYUH&$5m<&{CAz65Q*DE$pCAjWPFsj&d*5
zG}v<@GQ-&AGfeVg@|(7kiyN<ke@f(QX1_anRBL=g40;96Bk+t%S@F(|#hm|AN=%UF
z6QKD7GWw=#3bLknMeTzZV2{w2DaNP3UPHAJBj(+Y{!$yN-%R~5X9_1MJE6eHj(W`u
zqPxjMX!{#tE;XW6p7Y=NqTjx=Vscp<dP!|33Rcv%Q`bWVIK^g;p`Rw&X$1zgDIODS
z23e3mJ}lR7co8^yHQqBBZ-B3U#T}t@d}c$!(Kd8{a7N+VSDuf)Jsjh;J_6wEV}GI@
zBQPa^Nqwnr_1DIp<^&)08RrZa&QQ+&mhqyumT@lo;uz2FqW}M7E?HM^2@5A7(>sBf
zqw*P4k2<}o_iy~?o!vL&A>Z=*iDif9zQ}t!XY|YXP7EXKw60W}VdT+V=H~C!hUDPr
z`sDj+jV!!%f-|k{9?QY0c(KNp-ybwPN9%g#)%HbBW$zmO2cKn(=YR8C{BSA1RabVr
zY?g8Sm(SpJ)+pe)x8BUN`&vH3Gtsj2cQ6-0ZiVKf58FlaAzd7E=G6pcM#tkL+zY38
zd=Q5>X3Fe0;lmg-V4!#99%Q)lTXAX0QTeaFPQJ<o@WC_an4iHr?dS@fDI;IjBkU(j
zOAf;a(BGUm@x`sshSnD<CmN2T3k=`=lQ^q(nv?p6BDYiR>_d<2z0XU<;Ee=j3&FqI
ziZh0lR~2OIi`Yku4yZ36HaQmFpj{8%2>60rCUUi$)cRa|duearAupBT9F!RKnrWwy
z`HHen(udK!c1pN7c`ZD05_EYrG4ZS6nQMuWf177B22FN5`!sWX_GaLf4V)vRIqw1<
zwJBZ^ti;;!5tzBF_}vBV@X5*tr!m*_E&_ekLtk23iw{ns->d1Pihi5vx0!ygrr+~(
z{kEwc`iM~1Lx*l4hd^x$Z*9`0%!B$U&(Yj>iG9jeypXwh6WNL0nWXacdwCoEX8A8X
z(YM8=aC$!VHymmm!D-vu!&___#&kYo6uyKj#SiFzj>f6>>fr^!rZH;`b+qS-PY6$f
zS9|i<Bb?gLyoisLKco4Uy`Xt`nzGEPk0aU+`hAe+8E9&+<`rGPkg@GU*Q+jbn^F#e
zeGe|`N4?Yd_3n0_YrUr5+|`)<ipud@ZK&^W@lNzUCC6VObcbTC4mfa1>Ql}c@X<_U
z+`T5{j3@7HCN#+!R=gPEeZ)+jZOc;6Sw$I@&6NvLS7ihHjJ!8|Nm088=${$8>^1n(
z+Mlx3>Tj@e+uEOxqPu5|mk!1*M|Y6}0Z;nt;BNVSz(YMSc#0pnUQNTP*qHPiSy53|
z5A4V*o$Z|Uh;eBS0=r6eB7a7C!QH@mP;EBA%dOZwRoHC6o0Z%g{cbz&j_8|m`TeUs
zodNpuHx&c*_g1>V0v-1laE9-`CJNrGfV~P_hKXTSF@9vS#X;5Y{Fu1M*n`-L&SJa(
zd#MjTuY0c`RR_L<aR&eM@$aVbv*C|-!Ka(%Zfx)!1^-d(@@DM0ChY#z*yGLg8^l-x
zdwyUgHaW4gb-+Kc5}Q01GxP0s*3Q`NnqNa79%~|SUgpt90ISDXP01Ct-YS0&SOfA<
z&k~GV>oa6!uLm9)7<)bAKxSk;XwGB&_0XK~|0ru>5BoLEnP`%)q7Bi-`Q+M(9@6wH
z8VYDC%z8#^nT6Dg*!U)ULu~xmkLkjTvkYq|!74m?(2yYpX6Z_F3~b^B(NjHedC<3o
z%g%|@Q*Y<QzXM)y3~;We;Amnlni#`>Kqm$s3+5z%_b<scRNpGw#(7lg{{Ur0A9XqU
zkPZ5$@ag>*@k#7072r~SSx-E26nwr;>`$;6_QeUGVcA#ENPy4P!Y6#E@%(>@&-;#o
zPlq@;@)w@|FkZRaVFa)BqwxCD8$RDDZ(Hj?`Tykaf$laJaPC!NMP(T@wv2rxvp1{`
z;Ri@eeVBO{T?9O^mo;raYuW+$fL*qods)j4zz6-TZ&g?I9u`g0mf8v05RX{?&+AkF
zt0>!UN@~JsKTr5eRwn*572sPku}buuqvH~MMbSCJJ9+i+zGr-S7)K^Z2Fx7qCTEno
z$uQ$m+ZtOtW5XVwEx9uDUhMuHEJ4})cY<l~KKLAa|7^x5-}fN<+|`!+sr|&v*MY}=
zV&<|x1HP$bZKO|tCkL2=ys%&_0qr~rtUfR1&Xj=<x{*1tBKS>tfJOe?2033AZ@_b_
z<_~ye7b3GZ%dac^$d`B6|7`F-`~JLn(Ch)|bMhwgt8(yl|5CcAe8>fc<@nWF-HM^*
zYdY7rHk#L0gZpyVZ0U5%cPz$l{P^FpeseiXNiq?<Hy<y&Pv}9{%n$IMVIBNJkx6oQ
z&Mx+*k$aZdz5V+5Ja<WCUWBo<y3SA={!+s|Ixo28`0C1cbWb!{yAHIzu<{-~{{nG4
zy;C{8&(PKZ{9@XF7p$9oKibbM9o2vf?aKoH)}I`VPkxmdj9Y$|z`r7SzA`L%?)z4P
zISPC%Gid8rK9(bKeAtH|AHTnLM>jvGT<P+mW{Xn?oK6C#>nu)}fS&+1eV5}4JHR-9
z1%74g-<0FmF!*izrQc2zd@W}ko!`zy#0G@>e(bvwz|{oslz?8;mT;DUW`@AWRYm6V
z=C68dLf|F5q-9?B^)u$RFb_>8WaokXok{%6$rgNTTik*U)n7?n;qnE1vsx$1Ul8Ct
z@NEZU2yo}qoX+OQo;iwqERlRfuF4*jya?y`G|f0AE4qkxDE_*DGx=Lw)->ShEy~7C
z<?QA%H`!KG@}ziohHGlj6PLm}cHf!WyXl@#DnCbFum(IGU-5Apqi%QI4i7yx<AdT_
z_5aDa=q37%)7LAERlc=HUY9(KrsRJY9sPmtLdG%^`dJ12JdE$L3)+7c`gs^#sI$JY
z8ya83S0r5@;DWQ3$ssX1_oVlJ+T1ID9ewp97lV4fjX-WT_4DfnGQyZuyU#gCzFOsk
zo1RdKmlS@Qfme8dU$KoU%bH!{?_Uq4!nBhw9|p)hDPW8$KTsS^DMwB38P`b8l$}Fx
zx$)+$jrc*?lVp187Zg9a4f`jOS!nkP^l{%zBsOJ{v)|m>RAT14tTQT&bE|xQO`Nyg
zbcgf3O4cfsiB;!SChj~ByI^zO9oW3|<D^aR2F`k}yvk(jE=zy1^3=p9CA$LJ`Ts-z
zY1!JWVVudzxiNDi;L(|k-Njng8N}|#e;y{T=;w@2nH>fX$}JE7+L<3g??mwB*)jbW
z@aTX;;Zk@6SKq4>4s-YuF6GnI9J4nh6}0_`ouk5P>F5m~F-Kczw=i#xw$lFAW6Y7u
z{4}%AS^N|t$Gi1Z?sxez-_&WPPHQP=sV`=3nLok7oUU;wm;VfUYScT~w4xvBAK4Hw
z;Frx9hhOXA`!>-<0c#Qb5Zl0+>{<hEkFXcf-=F6k^?vkr(@g1d>|<wMZD1>EU(%()
z`}aaAodctHvbj#+9ynlGWAT;KZKAJ$Cr9|I03JebRT9s*PIf)~5oPVujBX3`GPt)o
zPO>^m{8KW<%gL)mP=~m@crTylLYytyY9dROYi`(s8!JN2k)tTylg!at;ojG<6_5p5
zD@Z?Ddlr~vLqiWkW6&86b?d>E@MmaKc{cD>&hGlBBWxjSi{{{cmbx=6ydPd4%61j(
zYBOjrz^iQRYk*5@Fy$QQ^XEzFst$a!_T0d$h<kQ%rfE0rv;r$JBi1WsoN)dKv5Ri}
z0Hg8G{cyYBrN`t)&A-RxdH7C#RrypuFW>4Yzbg9vHT<fNjrOa)MZ9)9_C^~%y}+;9
zU1l~9;}cC!FpJmnTs+*2Pf)Zu-Nmmu5#JHdCu#i&UzZPZ2J{3&yeZL`U0R%)k9?nx
zO%%pA6KllgB2Tl4@jc6WEKa<B13cmw>0&b!1;@8RD<0=z$qrh=n!NrTpGLx>5p3Qq
zE@uHkS7Gvv;};Ms0NyaZ40847c%#nkSYCtf!_RpR=Z&e(T7GA!cN_J#$*#gL!radx
z56+I!!<VY_4KzlLZ_sf&yXDKGJVtyr*o*cY{&1ZgCYV<Pv+@pNhlXo|eOxYUy!>&z
zMESjc99}11RQ_}2!$;vq@qmL&5BNasZ7E|<;KAXMJ$;{m?uEZCw4rgq1D9)TVf;7e
z5JSi=y^#C;@PV?1vh#<pC|zXcbTT(8n>gP0B|pR*2Q)L<myEB9wLURMa?^C@&4@oa
z<k~$$9)4oU8R4%FJYB~8Bj1+&!sen+?Rk&3+2212yjq_t^U<rlX<=~b;WPd`K4Znz
z^&fd)^*}9jBU-U^^M~Or`TP-#BZKd_j`Do$8Nm8J$NJ>Td(O(i@Ck4%JpMZ{JVPH}
z1K%mWgEqi{^*4W>XBl8mQtlppt8c~fW6<=yJo_}iMYqfTT6@z!n!gmcP|QN*zW_gd
zq1M04PU{)wb2ogp)A#54af|7+ALabeeEtd(6I09~LH_1w{#pS28TNCCzZAF7yjeU!
z&lBqtyT#wEJ9cW#A^y6Rd8w!UaE`9i#I)45v2;CUgs#sNUFXinn;^P&p(itue9V&9
zyOGP{m4LqlulQ>tw8Z+u&cFBpUhEC{YY%pm>RA3d)LN6@p3XkGRq~%RYprhtSgJ<R
z{2(|VP19@NAKs!^hDZPMvjp=PJ_=3mBgPJH?zd+ejEawtV`phPpl9(3^J?iimZN9k
zP3Nn86TFC?KW%AgN)LXV&YuGt__XvKhMvWLmVTk<xzO|Xga1A~Kc*Ol=BS*#Apy*Z
zcMsFA{4DwO+nVe17diSpoj!HOT~IfmTh?{ZEqBv1R>d)P{b6{W_JfLU|C49(&59nL
z`r?uM^95_LZrzM5mONNnhQ7Md%-@6E5c`6cy?nOmT>d%kFe@|Jwb&27jlbQl{e~MX
z4_Msh>ln2q9rHPO;01W#P=m>SmO0o$tPXk3U2i@Qe4aJep^&K_%?p18%o|7P8n41^
z{yp@{n)E}w&}N9iP4anRVm>br_tUs1AwP5aW~cN`1^gg+aH!b9&PP6*lG^xo^fNl*
zE8EQoeG3NBch&J`PM8>n<lAWaE{Bgs=sTxBHstFMcvx_I#2)kY$6{d4DDDV-O;o$p
z@BzFM7d$7U3v>RyIJQpwOfMVLeyQX6KHi`coSt}IuI>I=rnB{ff>i67w8J>03q_~W
z3G(N59~`zhLgDNQwW6J>FSDQ3F|`@)_A<HkT)31w_DYT2pB1}nY${(Dm5^`SaF(x&
zTx6HzR}7sS^mPMviEto#7hXfqRZ#AkLLbN4S2&uF7jeF~_*i_`4bC!oyzCu?ms#T;
zlb73ayqpP5t3K3#&nKs&pi#@u;ZgeOQSfi|6L)}0=Hq9vcWZcg`spEH7LQ0jeGYzJ
zm;0a7Pmk5)`1#FO4)b#?kDvEYKA)dEa(#X;$IrF&`7e|i&Ci$dOfdbC@vh+af4s__
zb$pATU*_2b{1#n{rhj>*>70RWDSOs|j%K)5)Izh_5c&6tSt$43BmW`HTEHU?U3Ip<
zrkH`x`dII@rm*{)SX0PG-IDcfRQ02_XM9B4fo*%N_Jj8>?Pz^c&srp!aFPY^r0)8P
zARjhp&4T?Te^r?Of_t=m>yq06&Gz!{61{V1uZ^|@V->%jGG1+j@oOKI$>o8lT!eA!
z*&%RfkPCXI@=f%&0iQ?}Wka-am6=>t<sPgpq>ZbHx3%DV4;kVV)OXJSzh{_iXePhM
zJ1NyEoXI(w__a1-x4X;(ZQJ!(A?2@Pzg`QmDb+8aPKf$0?S@L7luJEZpY}%A*P0-J
z(Z*){Iow>w9EMMoEo?T+9~u@M|IL`qZ_fVHF&p7X{x|$9)jC&1I>V*kBJkD#o*c&V
zd+c__(FU*sbk{?jDO_rhc@A)HKt?JTQ)hbaWgpjj%B5mmw3q!`#8l?C)7DDbih`py
z@YN2U5{zjjxVZ~l-9@aR4g928pC!QU)2~%>_lWkO`94T;9_P5!(^(<fFSM647%x27
zy5~h`S2=B4&t(5LaA)w<zQ|f@KRKK73-xiI)&Q}lA`|LpHN`_7`DQKQyVtiEL!K)4
zhI~QsNz>EEJzL5b-A|5Zf;h`w&N&o)hOzI(CyIyeXPv2j?*yOwD8HYxN>r}cDeeg1
zzB}xs?mE?nf2Zaa+@zsdjdg(jG}e3^Xxu?v;X*jj*jdL<GTd9Ie*3}ap!z2F{7%NH
zn5@IQLHWJF?_SQeiP4Ahm(_>zkK2G@A8qJ<iz4u8b0Odb<=|_45#+n_=S*&0&$s21
zeEU1^-EPsx=rVeS-SwEwh4J6pazPuc$ShB*oQ?aDzpx3rA&yT-XFKaG+$eFCF!LH!
z4iCDqlAJ<=4J!H6Ot~m_zGxA6?V7B=+(~`)1E+Hk8&Yk7+qo^2y9zlS$Q}KUvHmgG
z{4rwj>OV|<$#ndU7AEDhiB|6;$5C{uw&arxVApp8_KfoSx_Rf&W(%-Z(e5T--AG&$
zxo_7bYM=je<m-yE)^c-wY77zJ2XEE}lWk$|DIB)@5|>G*1~6wBkA8p0J)Hlpe${5>
zdpTcKp6^BQ1$XhtKV06~ka~oB8@9ru)vV*}*+B4Iw=p#uyKmDyV{JO+=AA;GoAT$|
zunF+5SKnoQ8^t{@-W^H}K2(s}dlq*#f5Jb<Jt3aDyMgBmQqRD9%b_*=t<ZBZxqRh4
z`(}{)^H-)*cELZL1wKz9ckH2tRM&LbF*@6>qNm+0?wA1_gAavL=b>u`dEbUSNL1kG
z1MWM+(pBX<+Sn(NAm{S|WK8?``c#6wq%Ay;@>%JII^=6^BUZg~r<2<177c-~#T(tC
z9SOIn!=e4hi6bfRSUArgb35Z~>omxY@*QfUlRc~Lj5+w9Snb;OxI1?744pN?Cv49$
zI42qDp3PYXvy)ZR6O9A^=(jJNeg}FP9kV!m4t}U-JMkUKj=z~FU$N;Bt`vum?WBF(
z@3P-Q`?*=8z2056cKzC4qKC`c*GEhF{enp)?qQDuJl=I<uqVNng;mDwU=P7i^z5$R
zDh?qS&~3}2-CbV@Y<=y^9tF!>!E){~VENU57Z!A3J}mkCBmdxNxDLZ)pb2APng~oc
zfgk_A4B=>k#nBId>G9o0c4P13;KrDb&F*&bDg2VT0w=;vemtTo2g_pc@~Xwlk4N@I
z=jY%X_`-~vTnj(WnrJ>o3<Ei;`&<idSyN|9Uk_`K<wP%g^8@5PmmzDR`A5uz9UHx>
z4*9N1utQ_O)IHABe(PD2d<H$V)f5fsym;x9ee2+%OHJ?89RI}7jr-QYKbLyF%B7c#
zR-Uu=mh6QeRJPFa&xD>oAm3GPFZ|K^an1}O7dGJ*f}4<hM2*_tFxWt@4CVJ}KLYe5
zz7ub?!vj}?v)J+Cr3utC9kJa`D#o58{g33HiO00o&=})Yd1cxAIM~3sQ{W{7Upb18
z5+B5Fn;##`x`gtTjDJ6J>zz;mKB9Vb@5E~H+sN4qV@+1MPr~gxoLO|VGHOe@)x|de
zZjccZZCm;60I!Wf3HEpqYaZbEChbl{PxbRHI+H!%AU{NZ*8!7kO9%OGZM%YrWnJd%
zWoe!}$QjMsY3TAWGF<Yyg}fcvY9V9*<IILC$PK1l<i>~|bZOf$_4xVRp-8xWeb|^C
zsvFR__)c<G`c{1RB68F%knHh#Tkyk$%*3+vn9FKB_Uft)-Pdy`IZT=>$>~SJZR;Pw
zHu*MZ2K7M?!}uQJz$>{(%xK5{kn($9TT{t>W7;d`?7ZOJA!w8RD;=u;9ro{d#_8ZZ
z%8mpwv7w-(=G!Glwv_;$2ynZ!BfAM1u;cf@Vrc7Ld@(^=Y(83?Kt|F}M*>_(Rs^<}
zU|$Garr?Si@@Hz>i9s0fmjHil<fycdCodd59KfAlxBb))mwoDk;W>9QcL5Hd>ovkd
z=-uL)pOfc#BI^W;FY-?l?={u7V|&V<uR8iYx?aP<VnWp9NP*Yzp$lsU`2DTWLH2<a
z^(dF_g4}QU1*MOwC^txMf%f(cR2H9hCO(QmatySuXQ1-J)3Eu_JziG+LzQ=P<!9!~
zrQaEzBbe2m<}z{M!W#WHdFOU*&z;SrazEjn3r#ec|NX|y$@PCx4=zu7|1hoDI7MDu
zX9GIB$?8rUYiLYlCFA|Qbc)mLMXvN?FVHr7wA~(+mF;i~<pSE&x9$j5zUuk1vtpBX
zb>9IGGgk|M<zf6Gs|xD(T*bO^(;dD|6vT7di0d-$>cL5-x1aosz4&q>?_qOILM~w=
zW1}tYCr<;~uigL;=eHBYhSk5;41!@nuKzarsh8|!E!EBa0_@eR<&L51pkKwKGoes5
z=aG=(LX4F@Ig^Cn%A*J^Wh~Y5Cx(m3apb(lx-k1g!DY~=coY6zlbGzXX7PGYVh$9e
zCg;7n)i_JBk&(}b+kfTIk?pIz`rurG#fb#AYXx>1<2cqQn3IwC7kyT;SG60Mr0YHA
zhkaR{Va96lfz2*i9mVzz@mV-teirk*?o;Btv&EbxWzVXpEH$%?#z}nF#7;{7{H5V_
zek{!Q$p!F?^pE|g+yM5@R!jDbhT-GD;N@UwbEiNvhhd0t)@?o<*X7^{>l-*S*h2vv
zj|dJM|M%gDFdlg6h_U3$NA`Cp_I<I&s&e^#sa#;c>Ry;DpcCD7Hf81XUEzky<|m3x
z&5!VHOK;0w)%|AQ1fLTdN_TyJ#!1Nu+)Gv0P&&T|S+S+vBuQ>c9&k&NTiZ)tPoum3
z9i7g8<ju=x816Bi)N}ic5?ub=e-<TwhEJ<IZOCJcG0Md#r?alx_}%Int1GtguB`~0
zk-Ubmse3{4MQ~-{P3|09rZY@T!{lAAXMJUj6NsIb&nVqBxncaSV18`d_&Ks?;Jc&U
z<-pkLawjT255X>6O6Tc*Gv(X(_nP`Py4sNb*@(TMd6sWLI>s~Td}P2NZ7K&VOqo7@
z8*me>CG^|Q1F`238ey#?8X@ley-MQGw_Z*iopU_aSU<+m>C4)0uS<rg@0sL};D1?c
z=o36_hSst=FJ&A3Yfn;)=ZdTQu;g;k$m8rseiWABBh;B|k{ienl{F<gzlU?FX>*YC
z@xO{(^JE|KUSn&fj8|Y%cAbkp(!Qb7$=gsqQ-X8QlouP|`e@(SAj^PraU6N>lqfb^
zS%!Vk8{o%2!#5f{lfNj93<zjAe@~O_Y0;tjF<&;xiSXI*37=bPumxXmr!4wLGxV3c
z-{^5{!&s5IF<wUBu0f`ilm9WHXXm@f6H~sFd8l@vfpySZU#PZvzC8=@t9u^AE;HPD
zlED|XvfU(?ql+a+#v-RGxf4Zv3(qz7-|qcjo9kG<%I963zt~ORcS2_ynVW;|SNE7Z
z+(oN6|9#+t`aP_%J6P}avTt-8`gQ3x@GcuP2EE)&AEto2KPA7g3oJd(V2*ef&}p!j
zY6ES{PUtrHsNieapzMp!4%V9N|DqkiK5&k5`zLpBS4DQ?dtIx`->cuV+;uO}x^g2h
zM(Im^M@zuXB8|<h{u%h`U&J{&wbmbS@m}u#X)5sE*gzZ@+oU(<nsLO*dhsD!dui~5
z!qijL8KjS399_JR=8eTe76@m;*T7lWRib&p1rA5c;OjV}-dtf$tXwhuM#JxLPX1oI
ze|Q~-k(A8@7eQNEqXaT-bUUZgX8|_CywF$o2p5WP6;M~Xglb1I(%3B@Uu4jC-LC2V
zXZ{EM>P+?f^8WWBXSA026>|Fk_W&G0=ggIKTKpF2YoEp<v{{o!XB&9mTI9Xa{R-zV
z-SX8nf}8sb&_S&q8vkl|B}cnuvbUs<640sizy|VL^-i{Z07JfP(X(>+BEdLCvyW&l
zq4VJrqDvVgxe-$qMa+~&;a`5><_~_qTJO@pC%PVu!!hcY{?j=<l;As<j}Y^b%eNYl
zc>zpEd?SmHb$r}ZJ#wWAo^3~dGjEOVbn@Qq|B@Pay7paE&ek*4H@x@tQ||l%`Bxa5
z^lOIofyVcL7@v5na=dSY<m<&S^w#E@i$!CWXBqS8@k!qYa~{qc+jB1-zSDaIzv@5c
z_aDpQ_iO4u$FB+I?P&drKL4xzfA@&~5AR>Epnrc)=i!{!1K3i!&n*k@uFc6j@#<lj
zSJAUJd!)?kMm8DbhvH?;R{rQNjR`&MNm-Xg-spEAZ-Twt7o6x+wA22Ei|2Pl!MTSV
zn}Iy2G!uuuMjHd~56@}A?>0lS!KZKF@_hr+uR%NVeH!zV##UpNqSujqe&65vh`w7n
z52X*@o5vhVHXg}u+D}<I`wMwv4EQaL{P6ircdSl6CcowI_91@rp#L!Eg3A88kU0r#
z<iL-?x|K5yP1afLaW8;@|CO&=Q5`|f5+7dIiR_P0Rs1B;C^``RMU1()8+io#bx3cB
z7X$nARPd<sY9~tl7;E%=|H?C*ToKT#crt)33~c@x{zcr=pmT<ctt}eHcJudlmZba~
z=`q+hW651aR-*%0yVyIhJ-)?H-v@`flP`XwNls-vQy7Oq$6vzp$;b|WtuwLbJDdrK
zF0Kx<hw^5|;vr)>v!LV9@^Pu#p{<`FS7ISATNg4z4U8$lourlc#(qKELOPfj;^mpp
z^y*g+iY}+;=wLE5$a&I?Tlu&h>{(KsL(4DW9H7M1U@Y=^3jSd4WdvG(|Mm;;f#|-3
z3$f)ELTeW>&ck;E>>V)4{szPOwT1X^$o)K<*aC6J1D86fcbLC}`1G$C?{xM7(_m<F
zwdTo%$2AWrp1&tsLI26=xQhQ>KX#VI#v~e7m3y~sfW`)>L(I8a`3oAuTeMTgIFv&$
z`rUY*LyLB-|IAueaY^Crhl|N|Y0z0^#i{o>ANb8hC8OqWj6G|`&K){lbC;?6``z{U
zDZJ(1enY;T)%YbiPahj-EaM-SLMHSaT0TDYAbcyC8q9Mo^Er+AmCf)D^F1{;&xf#Y
zb}}a#>m=q|<3Bq$*BR#86xZ*$n)%LvyBKr+Br-trJ$=}p@1~>9_vDfJUUtNMi|@;O
zR)Yieb3$&u542ot=R3Rf5^VBMDHqVva6k4){=E0udA~3>?+cmti&Egv#-LxE;UxQ4
zYQBp{=KDo#<aaK`m#h8f=bGM^$DtcJS9dTpsd|8U)7)$C=_i<9t*I3Y5FWJtCcb6Y
z-J0{RC!J-hO1Vp&c_+`YcYylJ!_ruYW%PD3p0{ZCS?2Y5>{!L0MwjcLj4$`fdpL`F
zoyHuD_h*z3=1+5Xw&)@xx;T=z)pmfJx34TYOdC1A7H!1yXe0Vy{cZmYF9vl+^HDu^
z>u5d-?jAYN;>!)`7}4q>{Gj>tw266T-)EWRhU7;;Pw$bdb6$>~BtJCI-{cH>$qtV_
zrMEy!3FznrWXIEz8PJmSlIRFu)?#d1D>wcQ+hqf~1^$K4CbB=@^#11or*m&e`loPd
z#Oe{Br`}>;nEJV$yB{P!Bnu=zBo8D@(%^UBh&(77p%1mGGtVUxB-14m;>>#=eMlw@
zgr*_er$8eUdma`&h(?eHmPV-iH})C!aXyWZf6z~!gJi%6jZk)+XoPl^w=nvBfu#+9
zESxC;ZTPZGuqQ2T_;aCoNG%FzqlA4ix}RrE&IjT41oQm%m1BL`&%G`Oto%dv*ZJ}z
zjW0PtyiYiv3$2Iw9p;;7^JC4W^PAgC56ArOV+{xoCBXYYd3_2UJV)anSZh*UI?r~k
zmy#bKJ(irul9JkQkY{o;ZEP81Z2q;$wC(OL?tVk(gT$htWPD?3GQ*lw`#UoD(_`(^
zlf&hSPqJqgoFb#cGm`^r3sM>AIRh^bPfL7q_*|1Mz05xs#<1T)ux5buv)ao=e~BVf
zvyCw=Jb}EK-3jF<pzEw}XVyY=k6_C<CAEfn5#&mQoZW#syKidb>^_IwgacP94!Dr>
z`z}JR9M&W1102<;?dJZ{Wc)8z_3l4@#D6sFBK$NNbe-&WljnyFbAN!=AIfull<#0}
zIOFRGnHGc2=P;)#x8Wno^+E45uuEFJ^OEi<j74Xf^NA$RAx3sia$1U975=xMnrKv+
zgS0i=P_)bXFK(ZRjZm2E9w^xL=Aucdx1X~3R&KbJv-n7}8&_5yME~s$$1a->Of@PS
z0Vcz{@`Ud7V*Sg!z5fpWgsEn(-s@e(^aZ*vW10Dw*0kk4D)%V#Qi%`X-WfUBa~|hN
zVDp=*D{56wzR7axT6`5G-iY^?CF_@j4^}e<wGo@RptohW*Sq}UXm-x0qW0Y780Ra>
z4&27~!%vxAkIX3C<rK=!#;?q{qv<*9Wii>)er!6sc_%%maY;sh68f=Y{qFhpZezi{
z3OyE#!Hlo(%}kzG8)l7>Ag@=?ols);5^Ob<HHlDCG}Zl7!LB?0oiz}0KxMWL&r{4H
zTXDaSAN3j0*h|c;?i019GjlgkPW6P_kdxTGAK%?f>a?Y&B@+pg^>}XS6<ytCzBs=<
z9L*+XMzi&0rpCknC0~)+h)^etf7Om-v43}(<neLv;ZN}2jErT$W%Iph#^TxH7@ZNX
zDo746Z{k13*!V2J-)0Q(!)t~yN6g2P|H?DXS(x)f)nC}8*Blk*6(RX1EX-?5r(0Pe
zy5L#kEwquC?vGjhSeOf@&kyLLDn}R3an7jV6?~eX>6=Zb=3MjZ!4JV$T;{%fVKm#l
zvJm{4Y|p0@>o%8c2(cdwyhMz-$A9O?nO*|+x`g-o!bykQFeS`w>Djegk7sQ8&nxIp
z<7J*S9*x=3kyn#E2e?|Gz4&LMS^C%!gI2zKDZa$rrguK_E`ZNm7R@e4k9E3c$HOho
zu17+JyF`z1e58I`b1hA-`VsTPyL_5_koNGCPSW^4#d*4C*x%64QGC1dQ>R`%yl(aQ
z9q{hPl}!ipZKMtOzQXW>)-RI=IqMr5`Z8^6d|ogorxx@EbMn*Nyq|$>C3@0F_;_@j
zKgaJ=*Y>qp`K9EGi;ubMu(jPRTV9ozs_|<6A6NVoJ0O%;2haFxbxS{Y{^*TIXC`(h
z;4782v|ixNdTEd`<oNAaW2wis4QnjjHOavN^7I&k_)T#eXJ>+ZIo^fmBp+C6I=Lgn
z;&MK?lsu~c-SFaH0=s+}%%An8#NQbnp)E@n#b<K{Sw)Wn&MmBrJKwLDLgp$@Ea+GB
zeGC5$cwjT(I^pzj@^E6aFOp9qTYuStUi@>_;lT@Qyg5<3U+9`KPUpv{qq57l&rCLB
z?}S-jS>Cv!pf_^1n^pTQ_`Efb8}F-5b+?F)LOnC)xY_T$?R0KvDBM+bZ)>U*dw&Bk
zT~3=Nv>8cwlq>IP2cE}2Z8{tBU|l!X={%qRdcT>xk7>Ezuk$;SSFUnqLGOJ2A8QUg
zaCa|0Yw4Ci=d@(b<({&+=!BYN|7nTFJHCB5_gVBays{A6wG{iLfOSbZcfFet+k`k8
zI`+iWBD+_n?63{nDxHK5kJir*pM`#5uPr{F?<?=^t(8tv^TfPsty+y8G8fuu#FpsI
zF0H`Eo4~c@rs7w~x(u<h?wMw8cIjfCe^zUW$83Ij>ydhQ+cmO%FJmn+i8bWq==?_3
zkc(2lZr2k!$Ca5LX}{wVdv|B`G;C7a=I<J^zjCKtKb<+V|4l<y@@#FWykj}AFCY86
z^~=9H{h^o}ws)D<UuPEIO-{qLVYB5oj6DMURV^o3y?QEhocN5Ho7Qul6{i<S#x`pG
z@^8G8oO+S9$#b7(U5!0sJ~O#?e`xxSSgW^|9JrUgC7d~f-{76l#7mwU?%KT#f8{je
zcHACv?y12hxvJRg>N26BTUI`>z6syWv+%)7X5x2VqWx@b*ZL^`*@wW{w_)IMJD}lv
z>KyFxw}%&3fxqbe4ah;+0*S_#D&5q6?6pI0Ii362NBdG`G!?$s%(dkvU&vW7iQOJ}
zs3dkB!Jfa31BdUtG@9))g+t$*(YD@~FaG;9@15@B&>`%pBSum1N<B0X+EwQi46(<5
zarhHv@p&KUTrn^E9&re@DgV(=&M=!3v{_j)W@zCVR(_WyPATY3ghI&^;SKcKW07B@
zNBKV~`2X02*>>uLX-j8ehtVgt9AneCZqMQQyXPZwL^C;?C9&X&TJ@EY9efGj*s_Tk
z)017$Yu7lZx2v+Cx2x98b`?*b-&I`Pt2oU1wGG*>`$FW9HXZb$X7i#M>@Us9R(;Pe
zMh5)xjy<vKV+Sug*>tL$^_$>(GUR@^uiUW*UceVIwdb$V?TMAsu|GIZ>r4Dz6tzCQ
zM>)@EJG`m$xD%5W^ma#ybwVeJg=X;si(F`7de1|jce9yLVohTB_*7zLD4AG!Txx5P
z`Tj%1`ZD-xx@Hvg-p!a2Gbo2$e`~0CM;r8&IEDY@<s?GW=X=;{(}*KSZkkfod_q0(
zgK5|cZgtxUPOqJFY^o?YbwxMcxLpm(>E~=EWYx0z?zX8ar#8`}W#Ie7w$lrG+Zs+x
zy5q@>A+MlnJo#4VxY=0Ug5E@3L2v9_zRzVYspCy8sXYf9H5R?l>S_=DJ~70(EX;-Q
z7zQVC_hZSoTbyJU^e8_QbGf^X_<?LKttVt}4PWWZA8vByOZOyLD~OlErQ~gT(fP#m
zY6M5(_E0u<A#ui1Q#+{r9{3UZuXH$nsG?_YljP6zo{gNBp*5gl9v=NzosqNY)b_)(
z%-qbC_4Cum8QGGJG1h%n9{v09oD4GTWpac9x%6A~mByIvtE_p5ydn85;_zRkafY7y
z4SVCUafrpD@5=9~B!AYugtH9T@8J$6cHe@%;nN3a-hqqfi37gJ8Z{j)NT%;`WK%Y#
zCl>Subgc3I{4*|e&bctm@%D?cBhS4;YofAqD7(icSM%h8-Zbm6fg7+@YVq0U_#Qi<
znsSZ9ZxYM?3-%I=w<;R4X*ZOV&f8wZ8QtXZY&}==VJt7%GVs;6m=n?Dt3%dadCc(a
za&REK$GEIL!e=EjtwpH>?HjY{#y)T)oMwg$x;@eOncuLk#|PB6$$zdnH3jh>XihWu
z!@`sm-dm&2e9jn{gf6~cI(B)KJ2votaVF5*jB=5|&Gzw$#+Q-dG4`@_O)BWEl|DSn
zpLcUG29K~;V5M)zuL$5~|3ZRiGlBVD-uKXc+oA=%-mHsyrRURssH*{nM$yM;nt2&I
z%|Lgen+oXWW%$j)1AW9iQ<G@HPX9|&vuNAQq`@9ofnAWevY_{y@WM^l0-eYdorUM0
z7hBQu9q`|U?;hQ~_%im^9E%2Hz$uz&W$&xzeGdOC3#Q$e-b-8^{tZ{2U6Uvhk4~N4
z4sVL*M2BX^sqAf-R;IhgDih8!5BscY@T}Ul0gIE}r?S4b{6ibMZy`b5DYPxQ{C~iG
zFy{t*>_<nugpN2FJidgE5Dn}{Pki?@v-ouAXX*DEvcjdOv3n-j?0CH|pA{l^yg=)z
zUSbrlo5}UJH9!N=(ypnxKdz9uCYD#$V7hOlkKHffNBAo9DS7<jDYlRAzx17GYG@Pt
zD9H!3@N_RgZ*gAP$MIW02j1ys^B~{nIORLma-PI;x8xr2)O*-SYy{uj06Z<g6QhpW
z&#(v8$A5vPAKkC~SM>Q3=b(n6tyXwU?Z)7z7`zvQ_e2jd_z4)xV(?VJgV(`-w>0`Z
zm<V4{E8mCuD2Cr&BJQ3Zf0*YYmLISWm~#`!@f`Xr2G6xH_xZT~1!aWaPyg#-9$Ud#
zthX>H0WA7XK=XoC<AKK-FJv6)Uk=X+_&n&dkoFQ4?Ds-<{^h8?evs>HJa;Kb{zxyq
zz0}W#P}@=3v}^j@9g4O1K)Bpy&hTt>!Q;b=zXF{<NdA><xMR_8rV0MQ{~$SPrW(s%
z33P10o5>su-^FLsxv4ZM|C4OP0^%(p=t5(=zsTuqga7NXDWo4X7n7(bUc8Di=^PNz
zoX)xx+_HT_npfr_!Co|rH|F+hlq<)6DrY>p6D)E4@+T|LHp?QcBYj*#m(*LwbLF8)
zR!jl+Ix8-W9rprzF*+EpewXuH{CGeAA8M~pnO(!1S20HiLIu@Nsl03s<fHaFh<AQY
zUGa|iCPf|BP3%6zH$H3K_5GSj&re>#-NwIB`?<RBQfC+cy~0!F8?$;eoa0rWx2IX&
zjy=u&Ku_07{_ify@pU_VEm;uF$pr_PG{%19rttI7#lCM<c0ue9!*gDwAJMPHl|j$t
z(bi*>wKV<q@Eq~(t-=lPL<*+OmOUW-K34RJypgQQr16;&<841wTQi{Nx$!*1c&^FA
zO*{X;z<;&b4=ugK8SO9rBWEU@LXHo8zKk4riF4Xt{Ktk=A~QVauY<bZZNNV9EQ}h<
z>b$X-{ljxMGnRb1mG4gToOn6MQ}_(~N39<me32pMp(Sx%vT8o(YiLgR*maRNKUw=Q
zxjE36_|48&cwX|AYgtF-jqfvz=M4VawYchc|Amza{ge~_bSFfBi$JEfQ752_@8!Ke
zm*?;BKUfb{e#ZK|j=J`d4zaMO&r5FqQXcH`C3@#3OMu<>dz5k4<L^}6<_qyNGWPA@
zSagKXJnMv!Z~r^|{ITlB$*EA?09UGS@fG`vq+5@E-gNAK+wiL&y>4xC`zI2O|Naqm
zl|ymVx{3M8{&N$J&wWJQZLEQgS~pXh?4O-z{OL#3?c*HtBkF>0>#t3mo2<Gn(fAJ^
zQP<(FJJoe5*Frt*kCe@;kMa}T?$RUfp75Y=`OmcGiX#KpzK&kt{|43w%untdom?Ix
zxf5Z^$v2?<80B<?m_y~UNq!>RcYj`feb&>;zYF>ez7-RXP)@mNii__-mp3<`lvE4_
zzoPX8E~kHE_Ze`O7Vjg8laf^>_#i2#Sdd`)_#3|NIs;e~^Y-JphtD~RQTEQahu7&$
zGX37p@1vCq;2Qb9!z^2kAJMtvjy>`<N4&|qh#hkeh~00vS<hGE`)moHlmu_t_>%ZR
z#Zu$oN<OMIIg(A-wBW}2m-WB$y%UzLhHsoZ3Kyx(`teRjBvHDninYUbauuCY`l1iz
z#?54G!l!Vl+{Y2PM&|EFd1so1a%XnC)eo>nQZCy;Y^p=#b+LcD=ix$ATY+uDx^3AK
za^Bjo4Hf4L;=j-0w^RP6`d9>9x1ked)66GV_bbGu)c@NB;F%a^LFwmjV@?*=6T6LY
zUT|xud`N5XI_M#WJ{_<=7Tu3D)#}sFeK0)tr+IbjS$i*^7R{E@W^A17z$s%Z!}$Jr
zt{lo3_S!hn&2gqvaW0j;f_%kt*}}xq-eAA7=3TI={2}tkj?6jnb1?Nzw0Erc`Fnqq
z8}k5j`Fzz$_?ki~#Uh12;wihy@yK#M^7s2W@2Sb0bA2E4tFys6Ss!e5OJ7IFEsmi_
zbSIJaz{Ghcp4j;s_~NXy4UFpr+7-+%luhXPbrJN9ZFeNh{@$P?<``Pp51tKl)(&h@
z=&XK8>|i~1&5S#|HR9hWK4tNb{CpAi%PF7p2lP9DjX=)zP+N{~gWOW#BmcLh$s9c$
z(KpYAL%M(3;r?myryJxH-0$awgcKXBmanmo*r#}1Ykb2RpIq6Y1oVWTO=H$N`u_ZN
zw8L8Krn122Ut#(DR$z{?=OR}0#ra;y)RcoOt(k?hlO=<&O`k(odbCF@DhW@F#6i>^
zy28RmOcYoS=XlUJ{yFV)DaSv@SzlK+aDIeieRIo+#ht==>D%#hDGnh0xr8;L+QU~q
z>m~FIF`7$scHzQ_{_}FmO{I?2wft7y{5o&0OMF4+c*>Ss^49RW=W@Rv;rA|nUqb95
zz_XRVw4wRazJTX1;>>EnL9VYuAA(73>+GQbrVQ-|^QZHEs}kmNWX!UQnCDLZYkq?{
z)p^&!{Jni;2p_5SpISU=K4ps@Xemgoh0mXamJgj{vbPg2%b!z+STk#svP$m0E|G7a
zJFZK(8@%#U$PxC#)Rj!Xv70;Go@h78uiVDniP&d9Bz7YoN<8Gu*8I85Ex97qnQ3P3
zM%IXZU#Xl;-tf}yQ}B`TzPrfu#%|O-KT~#@gRN^OB`Oc<KZjAKzQR7SR@(jXSTmB_
z$GYWy8-Hc4<vR%OPHQ{eEIxFO;;-E0nVahaEerC_>UJ(yzTc^wg_K=dm@<rQ1MoZ!
z%oW)7b!OVq7;%qaes23}`69_6atfB7&RT^yJTk4K`d`MIPH%#ld(-UW$~4XgT<v?P
zU@bDS`saVN>+7Wn=x!ak!&#mcTe+aT&55@DKjq5c*MUcZ=aZ_R<hf#k=IrCjDow>w
zWb5KCw|r?B`Js8}3q`0uft<Bl*N{)}p`6Q?$URk@qFdkOe8%|BE<HcRCZvjP`G~6I
z&ptmD;9UD3-(pO5?+bJ!+$<zkBD|3BS{5q|*Zh!qO}pL?V$4A|crrJcvR3dBBlea*
z$6o_>@{Z>q2k<wt|BrQ)cr+OzCuqggGOHUnBS&q-#=KUeb(=AdHV#uSb9?Lu!1P9U
z6c0)s9ZbxlgBO6|mK-f~9}gV(&%2K|y&nDC!8iigDw)F!^P3M_GkwGk4$moPT+7`l
zWr9y|4j>Z*<C1(Bb2-?VcMjAXOQwi+>hYWAY_greva_YTAQ|yKnKa#X$@ZE=<3$_b
zUvMbfDGWT4Uv0$Oy78H4ZZpK6d4Hm4UvqLXV<6r%tIg`+^R3>xfM=r54E%y!u`~w$
z!bjnkW8vu>>Z@(}Zfcy@Y66^Szuw2d3I36#9{q_o%PEt-1$e=q$G)_Qoa?3X<XuDC
z6RS_mmAAUgK2yHpMC8Apo0uQ(T7sOG9Qc5Bg!qCoW$%x}Pk?L^Jf-wic`r65yjITq
z9pD_!VeFEW<Vv0{8f1R(%OnFENOLw!UQmzgblN;-+USEf6k9tM4INFE1oWeLrsWsz
zQndWS_eah72KLx7XFC-W-A&w1d}1UU7n)^h$;JivCy0SaUfFqO4`mu$1oONLd|-dU
z#}j&%fltxI4ZM$m1J(H#-VbvJXbjmQeDuBK=Z@=H8d;!car|lfHD2221NT-B@-6(U
z?VO(Y{&lRcu+?UT_5DpV>mt@Y5&1nIG$%S{!y9dd={LeN)9b_U71zpdpm~X5cM+@f
ze`C*li{E-C*f#Oo@(r-Q%Nek;%ftukSOXsmXTkc=5zbhHjPMA#$o&iP`*a_>uG)^|
z)`+?Khj}dh$>hd4iN-JgsrrZ4iAVCNSC@>=#lJ@Vd>gO=pIsYtD;lgT{rHU=u)UDS
zJ%L>#8!<B3+&Ez;J_z2)2JoQCAN~P*lzR_ilChkXadV!oQvR~+ykIY8@OujQtYiKi
z=2i8$OLb`*Hgrt#0lE<lfU^^0%&E>b5M1QnBfH9bZUp~(c^35l0R4w^{hPq=L_OIp
zlDmDts@Qrxuo^xe&nw^k?(iJRv6gUQGFoQW@OG}OEMuM~fg{<rih<|DaJkL_R{L5j
zYCm;u3~|=Tq8Y8{V-tZ{K9~w~V&wi`-fC7<E+Q_m)a-1VDw!ktKMwkz0ZcK*#~K2=
z;s4S0?(tDo=l=iNdnOkkLVy5@Xl4>XNN-+%NJX<V35rVFW2Bc;&-Y}KphY?L)M8uf
zEjt%)#I_8krA6CJ5G+aMlv?;|&W#BwRbpEK?dj?1DU%BqiR}Te31ahofA-9VA!2|1
z{$8)|AM=`-z1QWrt!F*Yv!1n93eJA+Gkoih*s<JYXn0;jTQ+b+jdiWb+ewPCH7+{U
zbp4us>Y!7-nYywUdGTp-9XKXA<DnlNrF|R1(H@5n44yg@EEAXW!A0fdbE(|Uvr^^$
zjsFXPO?&k9{G=SyhDV>IiS2}DziN{l?dY(OAK7wYeCY1LoCWQ6sI-AII_2j@w1*P8
zv2#sVS##<>Oe?5Z7UPkehWGF4-YmQAw0=x_PH_UU#!tId+vw+v@1u6CmiJG7*n7_I
ziST|S?=$tQh3&-H-D)k#=~Cb6|1Vqd;Bdx&@+K;=sae~R|C*tnN64SD$+x2o&!&tJ
zkMQkHwdMN-E_%Ngy1a6;>}J^$vJI4Lby@7!>1Rp*nOPLu%`?Bv57_hAxw7x*+q2={
zBv$Zs?B-0kGJlIF*of>K36-)|*k$Oa5xHO-ObUUM#=~g5{QB~Ll#61N-$V?Hvvt^0
zow^Ij!;iS7h3?%%?qi%jtYGk~+(ERgjkVi0_N}zBZ>62*p?@%w%+lOR<@V79MZw^t
zfZ0%0&3;&iaie?R0%l|Czs5Xko|CZGZbaTTMQ3_GBYjk5wwc*Rk~$~rGtO=E40f!&
z@&(311Go!E;UhdP@bK(rVuG1=b2%{U+(_Rq(%Mb<@0RXs=S-CFg=bygKpVnCxrs&a
zy23dx##t&|^*U#O{v-U?eqF8A5=&&Skkh4jkJfh-BR9br_yOm5zin_Ae2OnU!J2FW
zpVm;GF+MM`<m#@_J0lB{jMG=Cmw5YK@AqDQCm-RQD}15M`EKNb)O;5Pw?cB8R?w!}
zldNjbRd2wWJHY)mzZzp&1^2)-&YBLC&wYh=nj7Q5s=4uI>J>3J2ACUd=Eg?m#>mWP
z*KZ&(rSSXaqHuoO7mrZq_e-$p(z4J84J897_Yx2TFzNkfJ-<us0Xmca<=6lJ<A3Rn
z6Zu~&(*D;A8UB~%%S<2a9BA_OlYZDaUYsocddd%rkMhHuS!cE@&tyBvPDtBN6aU4w
z=6*o7M)_nlf2B|MAoj3ukWJOjT$1UNCCIIlFZRF2rhKs;>_*=g`x3lOvd-lDV)D6C
zzSy*q<>1?fjq4(#Kfp(O2cK!QFLpz^%xGWivpoNQ;fwt_?TaO6|9|^phgp9VJ>-j-
zzvPSIi^x{*<y<`j-)956a|U1R<K~0Dn91<P9;4oe+0ke6F`TsB+Q8U|+l*m+L(hLm
z`(HjhHtn*X>O=jn+)TLA{+ILay9@lWGI|b>oOGxBua}uSw`$zg#hH_%r~I$iet63N
ziXuO<HF`7rFNc1pchdj*3^=smfAwbgU)S<XvgrF?F5@l)edE|xe~q8IfchFQ%8UCt
z{#TSe0Qghny_gd5OMcbA45s`ra|S;w$+OXZ*iX~t|0+KW{UAT=9J96Reb0VR`C{vH
zPx)f(HS&D18hp!4U+gvL^I`tiH6!LU|LaZK_%OK{twThQuToxe?fXvhYvns>KUAjg
zWU=ny`6bwW<Z+$!or;hr@$;oLucB!=+)o+Le_~$se5FIDx0hf}^m)E7T~>5g*#_3=
z-UcqOKkV0+JbL|QAM0wxS(rzRzL`f}!!|jSk7eG=Dg8^bT*JIA8J1tUNVzJ=h6PS>
z&OjDCFNjBq>ySrMsJIT_dM>*(n)c6_%RGPVlB+W2s8O*{jT^<Pu^~S=Zqh#0xf(bA
z9CxPrDWB|v_0vApxW7<8obt!~y7+VHF&j<!gC`y%HyU44I0?U%;1s}yslh(bJR_e>
z>!rk%J)cazo8ry#$z*p2<(HxBb)H9*I+O92qV}Z=WFHtleb{RQm*5v2A;*jPd*Bje
zkUQv{T)ron`C7knWFw*%D$S|6&G+3rx^SKx_R7L2dsZF#z`vd!qHPD8Lw;HSn9GpO
z8sJpBI%}mH`@+H2M`kbbY(Cm|u=!<A>HHUbmJ-2rf-`}Axc-ZG!b5h}D)4w5KOz8M
zbe<j078YYK$>!?EmMy1mha3|R4%!tS^4CV=9nZkq!Cw@7veP^t5kK@~dG6^QV4qv7
z%9Eoqa2dW?y1aSU^A}I?FqECryYNu{qhMYQALTPXm4Tm6`)4z7RR4R`KR#pwHmFZ8
ztyxM2Ht<gEg|Xe70(dJQ5??aYkJKD3UGOQ!{49?T@Q?LE;nD{l2PWsttxe-`U~=kg
zpmN$`J)$b^`I66izNAx-qMLlfP4H(2=RC9{>!WG%nGBjl@k<ZDyVt3cF{WOw%b<yT
z&MTpZ_$xUUzvah^9&VZzYD2Q9e2))nM?UF1+EJdJWaEtGk|}>wG@DD=_qnrL_e^eN
zjA(plEcyG7TNx`FBbMS<jH?FZRdU;ltVTUwzF=kV`TS1DBSPWSd>Li#(^&NFzEnKp
zdCzx^GS?)ay?l7lEeNd~{zp^s+KIPgFKVu+p<EbSp-gemnW@+WYdxOrGC<DCJFl@v
zj+_<ZxbqT4M@!r8ARiFFEwit(mxxuv^Rl!(T(;EQCVRM0>k-&ZQR3GAes`Dpf-N-e
zXlcquDOi~xo-a84eh*9zbo3W<pDukLm|W4pnW81hF=k$WF+TE)qYG-FNuL*owO7We
z+ifgjG1<)H!nL5}ApAY>9nOLyhh!IR9E6`bN3qakuRQP_?$TzC@aM=Vac=i3-2G`%
z>m5^wbL;<&tap6(E36F?Gjh=X!h19H3LEP>jZxkGE}X<S!BY!PtWSD$Y+w#qhiyr0
zku`#;CGFYhan>mMfTM!-1i@LuSt+a&mh=Pb4}lRq%5Tqa^VU65>kfgHF8IAeJD<IK
z^7Va`t<N#7JFufm7!PWDKXy`xG8TP5KtF;v0e|iRR?)4C?^@vV*LgymNAj2O6`sC~
zM2YE3k45*IxoY=I!k@JX4}WMV+yiFDq~sqjSWp9x!^U~4f%?8owb|Cn5O&&V-qxh~
z>Y_K@KjK$H4-20!)1S1o?#Ddqa@K|?FH??|iq5|MCqJYCK1sI3yD)22A$X@}H{P%F
z4V|Z4`1fJ>C=M_9eY?liUbIT~qLJ6?)k%-FIAhVEgEZDegW1%p=eK;BI5vi!Mbq*T
z;+<k%2AXN?{1<p?>_{j6693l2ld|99d}=*cUB$zMU-ZC;H&%P$@j28>4vctXwHKLC
z|26PH{K%#}|Gl*gtqrJc>wln88s2u|<{nJw)Dz5q(jV?IZ=Tp{`S!WVA!j8!W|${x
ziM?8nrsU=*<*|3XH3HpVqH(UavglLalB+|M5q<o3T37JlNg`W<hp~DZ&j+S4o-0gO
z|6%Act%Bd|=K!Yof4{q+_~^)d^ydd*OJ>J56sdo^<3HB}OB&|{dPaRDuoW}q%I{-$
zMjr-yK>m<N59Y9EJp9lzqhj^qrzdaPlO?+jJ5qMtU$P^kN3kQdR|z{&F#hZ}+6yk;
zZ?2O5`lxuAUQ3gXksi|+$sBuDhOTKqRu86Wdw=>n3e19iHUITnbbo-~zRu75_RmiY
zFt2ESk!;({C)McY2R)jRFU))rQjE+>?9C4CT))XmzOmnA9g+W5{hYat81Ay_X1*D-
z;<ayURaZi9+E~ImW3@w!8M{?;nM)tKGdbY-nyjrM_Zu{q<wx!eBkzr}<;>Pe{oWe0
zS=m3iX*&BOV{!0sxw|I9n026m)|nggwcmiV4|5q?Cpf>Fc$b^9|E_a616b!(8I7xH
zc1M=R)imUB+ED2Z+VbbWlknzRx4FzebI{SOZQmBschI^`cdu*xz=I384X{?TmRC+$
zH|UMC>s)NMIOn^mFWC~Acs2<ia21Y)#LeRP)`}f!Pupqr-$SOU|2*}p^Q_z2$v0~Q
zuhBT&2mPM#=7S*qXI2SkES4N7X8$^S)(0j8IzE9cb5A|LD>$<+YbATzOB$f-!H>{?
zW#L!RpUY&&$c71_SBl_mm~%<!d#`eyGS>lLNUx=PG`f58WX%`v1x<nQyC1wZK#vG`
z?FX;&qvXhE&?EHr$b59OXHPbs0T0QV{ME$R(1Ip@_fHrqeS-E99-RU!YrHu?I0mF!
zs+ilm2G-dfI)C+@L#!)+qt0I~gq8#AI5!eJwSFMmc|ZImM{C-d_y#?fNd^m-IB!_c
zI7HjN4ETH#91o=VwlmGQ5c+8ZJVnb)Jd=Msg=Yctx7ui=eYJ5Fd`DJp+eI76{44Ja
z<Il>r6Yio-+=Ld0j*|EN$dqBc=$-q{1q)PPa&MTE5|aJzmv?Z^?b<|I_U}jb$$1`@
z+{?y@EHPdliS|>T&wsTe|4Fp%;D0#HU!Bn^UT5<8A>i`Qmf<`Z4@Q&LQxCq%Iw|lG
z8(vwCk1gCaHhJ&KeW-tAp5`)}K2&ama^0+<X41%ze=WRaf5{j2`|8FXSi%3K>H|{^
zXEu$NL(!oS9eZ_J$A*w!>DV#&qG9I$(d(fOXPBzay|f!duL=Kp?Bj06v+@<?d)B4>
z&2pXzu4?479RJ8o(~SG$<?p|YhvxZ;N%RVQ^z3HIm&Un&=4CJbfd2R454?_C%Ky_`
zqd2<n8~$i8<riw5+ezyu2mPe=w>EThJ>}cMOY(Z9<N^4zBs0i9x^`tdbaK*T%R$!=
zub3~ts~(%uFn8DEf7PVxSETDpPl;zW$h!kx#P8;ZfK&AXnR91S^Lh?v2auD6uOoVl
z{XuFy2AQe)DdjWgjLhGx1$CNyr^~@6^Uum+U7~}%RO~$}`%N!7Y-OAY<>xznV4Vh<
zhFKFh(^+s!fLrB#S&1`$XpPRK<x=xi?<+d{$oAKGUOu(PbLzYlOY2ylNUifUo!I|i
zla;Huq*r$IIVd&gWSxVevxNLRisG!V^`RHhFJ0N2D~H9Cfpvy+*v-Y#z38K^e?Evl
zA|5udPIq0W&PkPQqo2@?W@VCGd3bS45*t6YPddBA0`Jk|P%<t1HIdF|aQXf)SS@sg
zPm4C_klbgqZn8#a-zdjc`wx?oE$`d#+_<x2NzQbY3=B-;9X4aKpR+YSZ@Ok5*WJe4
zVFS<f%%aR(o(*WP62D!}4-}s~*w1io-$Uq8pHB_IEPX_7Z)XxaRAZ+%z&;t;9!dA9
z_9xQ*hvDYH``aR{3y_2N;?|LMHhin)-ef~P$%N!U{Krm1H)$-U)?PDZ)BDZ&n`Oov
zt0i6*VJ)uQG^{T?o4H?SaOS#~BdcBZg~%Xdi*mQ=K2VD@=uY)>>ds;15vWbszsOXV
zpHrZ5M%|TB?AYkV%qxsV=_t>x!=C;LvQZE+6Ss{SDxF6TFFa??B^Q@<&)c!#zeaAZ
zo1L=F+cn2bShh0CcY}RCzFvXnpH8I><s2zrT5)3^Pt~9I=V=R~=gX&3US)yup{feO
zMSjBo_%uh)x&BwfjA!zGHAe>XKYM36Z76?Q?Z_vWO#5@72MhX0@q`B3RQWJi88Gxx
zzoy8`4XrBWd31QfNf<P*sDIfO%D1&<*w;iUt1*szz9L=zn(pfULh77HSHFFm7@EAk
zZ)9B^cI$s4Lk&gdI=}x{4`k2)d8>oAFH=T%Y~uSy`XC3eN_5>0f7)3ulFun#Y$GrA
zcFq`jD=@EwGa4pkzL#BE2mL<F*)Td2UcSr${IGuFXV1{*0r_I&cJvcNE62X52RG4L
zwAGnnqIV4+(OLCYL2J=j^p3(?)nBeNqZr%b*EY_p$;3;(`~hs5AF40Uo+(%<pI*F9
z5=VOr+;%Jsyc!25omW{1PSS<KTe9>W-uv<}`djfMjT1j+B%ecNEM!=+&t0b2q@1<E
zyrVhiZE%u2S4*DJFLl6sd&pcTnRJOSN=|(LNxoStFl!&Id^2C~$v%3;Hl?k0@S0^-
z{sK=9#QPaj(sMiKULhmCEWCiul?-ak$#3z`v3FSqY_sd%D9CS}-g@VGlX}53NuQ!c
zNHmAvy~JwP2?qLiPfS=)gv^OIN#Zu;^rwC@<?d#9;LDxix9+sAU@Ypp%n;wZm>gI>
zf~A3WmE)o@t=Oq}Cpt(Tr6)uO;zrkS{$N!VW&QD~u`x2iS=kP~KF3^x-ee3->kI==
z5wHoqO#GE=r+cW?r|6JLgW5?ZwhTVaJ25h^!OPi09}weOK!1J2wfsI4%r!bYUo=rW
zf+qw$)VIc-`aaVftNF&KM;yJK43H;*Z#s@K=syp!h9mkYU(bKm4UU3YIb@?{F7yBU
zcRh1P`J00LwL?$kFSnAr?CwqJPzQTVdeZ@iuYrTc(bwTettlke!>wux<d!CEVglT&
zR)70>Ukwu{tVzej#E<?POxJ%5Q16CQ@+eq68c-jZ>r!8F+R%O%!J5*4!So#pFL-g#
z<>(*b>z^lFgAA~jproC3YRQMz=4*+I`sbzleLpj*Z|Tr45W{0n|84Ie1H<qvN?o0Y
zS;ts51#Q!nU;bOxE|#N%RHh%gL^(5EHe@$4BpWY^4oi)_X~Y2Wg}`&5j{CRM{SDNm
z@GZx_X!CUcG*9<S)-v_e(jo6`mXo@v8NFoK!>Dn-P&h$nok^(w`mI>{O~{YvFpc*K
zWU=s$^S|25Tqm80ZYBPd?d7E%#K!6erj@{S@DrR3223vdM(RCyvO6_qe0WrLCi?PH
zKIODKI|DA&mEII=4al{|pNkElv7q&mrg7Xi1bj_7rqtV0M}5EV)^y*VPNIMK!`Msd
ztneM@P4ek>u#~fr)3lR+e6Unw2|toLlDQh>u#&M$tkgU2S>x6UeDJ*I7vRg{OdS{S
z{g=~q+zRAWJbzAkY0%UkM<Ha>A9Fg#^<#TS)_oqDMwzQ{rY3EqZ2xf1g6EJ|={=wR
z3G~0(`xNhMpo{S8gZ9xhPJQ6<Io^q8pMz!#{y4J0!Z%awm-Xv$<0;44tt-oklZuvK
zNVj9~@730))9qC8+^4bE$0e-4tt8fPnHgS48Di7qR6)PX;5TD#V5MkoT`ZdW<quGP
zU=?-B%y6y`AN54<gJsmG&cG`6W)quR{8!L?1-7AZp9pL|9ec3{^eivqSvk)h=l?Ur
zWqjE=kYjNkMb=9AdmTAJ%-^Tr6kad%r*wzP2{%tBfKM_}4zCnXK^B*39IHRYK1DzM
z*Lc=5jqm^9x$4BZOXGQXw+uKk^`ifqyB9ij4;S{Rw@*#+{08OXv0o@0niXUJ=}<Q@
zHPP6?ZiqBndm8iYmL~R6>FzG+MAyk*cz`(2V$RR7_|M%RC9;uK&)=(N)82iwyNNb8
ztf(D2z*&wv|D3ZRn>}pm^ZvZ-mR%udPh#jE-J`uN!X7rA<Dq=Yy7x!6$#1sUcWgM%
zO7_IS1gqm9cGiJ$S#uN9u;a;}8<?OyF2Fi&@!W&hCW1-r2u`(?7`oisBP@6YtKjr~
z=my1|&p@M*CVLNSrd#XC-FyG8G3;ZqW6Sa92Cho&$&)^52i{_y)dy?ds6qdUroHT?
z(%u{GSvrj0g5H0{q8;VVVSiqvJvjYWot{J2K;8H6;vCVY)LoXBE_b%ny;Z&TlmAe@
zWzp@CEmz!Kv1O>qUDVHBss3UU8*XY?biAo?(R)ozi%v8(FM7Y}zD0j-x_{9~(*ui=
z;8I>@T9r3i0sgxC!(kkT*^5WstG8FqN&B~=E#q#j=o;l*w@S+C9t_<9qI)yi$hS@D
zf9?a(y&Rm=e?D?LpnEwcMDRC*D^*@PuSRp7>kPl~Udn%$Pc9kpY(V__$@sn3>aN*~
z&x=KoOTAkq9l<mGS8T)g)g_}NP1=8Cb7r8{;)3iKV{Z#|l%M_P^#S&iStak*WqEg;
zzs)>u$=AmBM-KKv@0Y_Do)_Ep#mMlb`NS3iP8WRYdL_?nBX)j~*7&Mfqpf-Q`a7>B
zmb{;58e5!8#Iw)c`4i%#QO>LXKI6+BYg#P%Xj*?~-73u5hD98NyBt=Yh2BuzBz3zf
z->^H}5=zHPLX>f*nR$J7-kvbHLg%Vq_mS((eESIa#>ba;#mCNBkjT4mLHv`I><c$t
zx*wo~*e-dgU2$xMz6xxWD=ND_291(=L#6UDdTCE>eFZ*fo_?KJrB9dCy)dWp3d>n@
zdjGBn@~$(AE3oe>IbUiqa+cb|CfE)0{Fz{Purc<7W7PiKoky5!_OZ`GG<%qsv}oh*
z4z*}s=PI6?e6vUIbf=wYRWmX&PxJ|slOvdai%hDoICF<jW6oJ#Ci=>@u7<YDxf>@A
zJ)_3H7JBVPhjnQjvA3-Y{9@*<d-pvzHGL-?d<0i?BfhX=fzWf?7wuu4l_0wHZWy;`
z%|)iQ9U61S$RzkP&zSgL!x;*1-4cB!Ld@tDV#FILA12SVeZ1Ax_vXlaUpMMoaI39v
z(@y+~pqGE)LM!o2Ij(W)Y@<$$HZt4RzPdtl_R4YiPp$k8iD&FReVBH71FQ#|l<e!-
zI-WuQF3G3fNk*Apr`?WDY8llo8&&4(+_xnBuQ@of?jO^?f5dNBWz%D0v<!sdT>u{!
znO$S})H&nGxyX%~#F*I5v2NAJTTScyE4+A!H?}@dAD*4DzMC7XrT+QUZw20JV5qmJ
zu1q}jg*)Sa8d(<Mzx0dm1IpgkUcsp7mp*eLfvwY+F+Oq_AH)DyN8}s`YtDkCec^&t
zjE#o0%>SJClKDJrTVf2zbjChyc+~*kCqdJiG~dxH<Z_&QaSgoM$=X^bf1{M2M%ieZ
zw_$k8zR^kA8=*c&w_ijYS#`!{)N!Tr(((|c57k%hu?xJH!k7O@|9<;G>P+s;va)qE
z;Tio~`V5}FY@+9R=XP27se79Iavyll-A<Z&{r5)tkaO7BGckB|THkwmG2LFsNtORV
zJC&*D%=?{(n9s74g|T8}xcy;gXbyYVbC2D#b|8@3*`B_O%OGEzcRO5%UJUEbr=$0*
zZD!8hLBHk5&L+pibU$7LwCdwr+~P!WOF#SCdmok`5^U)YasS%cIwL305;nn}UhcE9
z_+QRG_FmQ)JeYw&csOZ1e7abbZkPEec!GP9eEGvOPtiblmD@v4hyIRp&+azIa+zZT
z*boNYVnf%;G#v^*Y8}f32kzNCCi{*t5_2y#!x7$tQ><c9s?EUbcds=kD)-U%9+iEK
zcuZ}6;)`*{0B5;fD_x~LZ=e2Yx^6wmza_-_priFSrb~RXflqcpC=Ex^lL2UO>b>f_
z<ZP)uD?Y}n<G1ZS<2|sPY9E@8u7BEl?#9b}uQ(?5m+q84sxg`jFlU;}@Zm3vb^K~%
zT?2iGiQ9(J=jG_n%-AP60P9%yJX#mOx~qa5GQHE<PR$HcwfCIVSp%74U$GzNh2eJY
zs1x2{WJGJJmmnuoI0p|ptO>uxxt0<1Jn}+(Xt>+vE&}eag|@3X>ut5oZ}`6&{n=@_
zTeAS%TWimYHB7P;cbMe#a^6m@6-!#~THPhOjQ{c<ln;3-w(;!dPcAeC;Cj?V^I|)|
zBY;js7a!HLx&-F{CdScTUaT?NP<3c6dJ$OS#%vcY%f%lzwciCjbWE~O%=MV~7>17~
zzioYyv0~w*iGATRQ{b;lOt_4_+37N&In49uu$z%J-`<hk5~PgQEZ8qSd>lCve|*@|
z{5e`@fG?Q`d}qaKm%3FufKT^moi(=6vyByN6Ro}20p~I3-mH<jkM*#g;NAZO4r^pT
z5#Kx7T01@_8SA|u*Rz>~zZW;=EW|NAtZfjR7tVHW<KDOHidv>J2FEgX#>l?nlfx%<
zHU+eFCUAx}=iuZ7I$rxoFm-nJ=Os7VCyU*NZb;Ie`moJ-WNmWiQSjB7>S4;jzp4k5
z<a=?R)e)W@#6E#WpSg@aoNqZpXCpgjzj@EvO!<$DVXc*Mzu$EiZ5VI1??+d3a}LHX
z*Tk+VH?gw=R?B`fWl%8~kM_X7-?j$B<O@qKrqecY1;o|U2~{(Y7jJICW=i5ioCw&^
z`P>%lvf(7_YKD7*lB}}@v3VZDCf#Ar7<A$P{qXF5?htF5>@c1RI`6}d6@J29<^DH#
zs;uCU&v_HDCW&8hwtMIE(>Vv6GbwhRud_C@TG-=`-ouX~7Hdp)OOn{EM>B^r%W3m*
z+7eHUhl?3Z62CmaIT_p~z#38N4hY8dQMD0qCdJlKK8b(G{+X5}KE7g;#!PET61x<y
z)wT&uiG6GL$hzN*2ZoHcl}C9fr-Jhl&DPgGQrRIr*3Vsh#66`qjvm3Lk3^@iuHjZ?
zql2?5wPrZE^Uf5Eo}Bevu;jFTE?Q%dtRj<~?|CZbDBsmPi-Wt+-oGn#{zkPKJE)u%
z@-jU+3*e_n=6o3_f6(D9T5IqS^F-a6hV^ayZstx+-K9wmW=!>aq4~4<rh_v`TYeF=
zI><ZP?wy_6dehoW{@cOwjxTZ^ra{gY2JDu1bw}#R$aX*e@Lgn6vhgYMmK2vM=S<^o
zFh=_)>;8|)om$Hi9S#tS_$2s0$h+s@t;b8fhhF`GU}wY>#4hH2FFZ-`KFs+Wz3`<M
zzM$7UzO1LN`Z&y4!<X~>SCseHoC3gCgYLAwvtsN)3p>d2&aYIwz#c@8En}bBa3#-l
zmv#;RIooo$9Nk}kV#2W(kyo3w`$o=ksnC6GobgdknE=0+^IUbhnI~uRdn3MW1$Tkg
zVt1Te<D!ocZ4~8krxNcB^<<X}c`zeO@pEFgaF0MZ$ax?Bv(P!Q8+n$Jwdt{1ev5~)
zFGO#_pm={2Tfm<)^gOQf?)f&%6H(?it!EQcI5q}&9|y+`Aro89cN;KS_zlImR!5oc
zdIDGGn5S4z9WJ6?h%?=NU!RyuC-IezK6KSj(EWYL^MRc54u`(g_7djw?7M^4?_{qj
zbI-)c?f2~4z#LT(tR6bq7yUo?4~zG0%ni0EXZVTGuIcyXF6r82vP<sE&FvB#e+dTl
zCHMqeJ0H!R9&M7-W9RyGa?g#O&2O!tSje~Zzx4Xs(7=m_GA8?&`=sxead&9nmz<}X
zIqz4rU^?5|y0&>e`LTl)$VVk(p$xu0h^?(NYJS@|JBFjd9AI^p6Knn^XGoeH<S}Tr
z`(sPr==MqIl#(pQoDH7r`}S<7NNMVfZN|gT;_UP2rSHkWxaxa1tqs%H9gLlCa)yhA
zZc5PC*&grC?zG(aUh;l=zDRu>rh>N^50bYf=!8tTGGR)-H?qx#LGXBRs2$oUBo^YW
ziwX{{Suc0q=w^@oZ|E})E$E_!^OJj6b6c%3x^t3ztOD5-7tf`>$ujfbfrfgg=NhAt
z(2Usi+((@#A=XUn+kt)>_ce@(cU5*e@&<0K0m$cGW3X8?hla3C*e}>)o5@G8J<x5|
z>IR!{?(*J=Z^St73Fo)2ALM@W+pDaOuT3)E`sXluK>hpniS(eq2Bqhs*?3@8Ied$~
zA6E8V4`y-#gYmuH(~Y+_qC0^`=&zk|sCG{9TRx>vPoI|P;l01)oli^8rh%3TVwkF@
ze*egO4_4~?u;`o`;y&8n>e-;&qc*$~y%L~KHDlVdw;iWTHjvitCBp-Zy=xhF1B^Lr
zxNW}uW1kHjkfRFdNX&llHQC{5`l9!%WHYLbMf9ovgM6Rqz1q8kcamTKeo>8)R^+}B
zx$tcxoz0{%z#?WRIWfadw%In-#P?1;%YEas_^H=pLxkx^Yb(&F>gij)J{0`}`H}3C
zXrP@-r~|#WMJH7bhtM<J8!#L%HrqqcDmpbd{4}~V$ul$4Y%}1L<QaL$*c0HgKQ)&u
zRlYfJX7+OxeMDJf`1vghhR!S-sk!lzbX%Ik|3n?h=<AHP?*ZF1`0*yPn&6D#uU&%=
zVa)dEB&}<hZHcMqY~W!{d2lCV*QNYq_;!5`@f6w;EP`<sZ6-JiAd@ERDC@!6n8M?6
zXwuJG%5=*1Gygf<tMfQ`M++*4of#>-qXog?ChA3@7q-&2x+wc>7?=S!6tnp+oo-XU
z@ocl*&ac${tKQkNwb*i^sru|yf9Ms_Rj@sk#`h&+aiU)<Wkjzi_KSPI=84JPTG#1g
zDn&P9kXu*v6@s%FehxWN+3|fN>$KLP-{bhLxw~dO_e^6ec92VU>wI(#>quL$8_ieF
zyIwSvuP0h=p{!_V;Kw5BKCE_t7sq>@X!7{GBij|vQQPx)uh@{vuad0=-Gy)YTj(y%
zK#OXh;V5}{_P>$2H#xVN`UAB281=>5cFqW^jo9d}DV@70BYt)RUrjc;C{Pre&KM)c
zxea@ub4r3Wc*@!FP;7p4U`Ty<{a_D;9nB5)AUa~%RA|!;ZG<;6v#dRvm@(@L^u;%^
zZs;FKgkxEG&KoxN#d4F?(@gyh)8TP`)A|kP2bp*6mdCTP3r(Phz0IAq=zjGTU~B~#
zTZ&0@re&A-`1uueL!VtyJfv|M0meRL=>c%T7MTAV;7CBD`1qiArt_<OOSZdrreyD;
zv<y6ne%5oz<<7KRew{X4;y(TuOd{LJk2eM-E9$#}vY~VvOPLq7pHgk;-A&XF4T$Db
zIv;@M%4bYazM0?BJK}FQziasI$pUK=l7$lf*Fb-h->~<enY%-8jcl)hN3^+CI&>@T
zj#FDZP3&jXS1w!<8M&3;l0}zxf5LC+ReUCVG4nEZ0sGwY(mvmLvDzE3>%YTY!xJip
zzc#v@llBeW8L^@-xK)=@?jJexS@Pz=DO-&?KL0b%E|Kn+J)ry*y_ejG7XJav(k)Li
z|4l(3Z-6iLwmleS{`2Y8hmUd&<&vx&YRttcqx=v*r$@h2zD9vJ&*}LOSfi3m|0DP+
zW+H#*qx@Em;wkw4r9-xd=6%f_71%1$<(DktZd~p=af#u)#afc)-6lIwVsE{=Yn5%S
z_Iz0CX`Yw9pUU`s8+>H1B#;+>UA-V%xnZ7d{&K`UFZNmHIB?oaTwzT#V)m?KoEh#(
zZMRLw@Wq_LPMjeGO=g2DHqFF$K8=kKn7Z<hj1`@ymAYGRYRPYYukko_CA40q_=NCO
zTw-0L75fBrCu1Lc?_zvcd-7nPS9cn9<%>=2+?T35sJgNRwnxw<o{f+h!+3tPY(~NP
zJ?Z(ht>R*r`nHNI*qKwMUu3H=29AEvR+)mWGR3o1YHYsqznfvJJhDD9Pw{HOrL&sI
zVS`3_(8z*D&%meO@jFp+%I4_J;GH+-fv*NXHH;0f_@Lr~<;`YK8T0$iz!c=Y?4su9
zDu#pDo<59<w;=aD*uAT33~?7|E_|EecQf%Q*KjuTNKR>b?aGUL$gb!^c6)%CHM=!8
z(r+JfC!Rk+-&w?EWOM97KPeU|8%OQ>e!)N>*wa9N<hpJ<2p;Og1WhUHggw3EEcOA~
z9oy1vACM2snR+UdB-e;`_V&^Lle|BW?z4}+1P5cn)9G>A-2~oI<rDy$;+w3m^;l;I
zhb`c9_zm7qh0vEF;L=_`wX3~0$}#oV!G>36cN|BSJz5dRkzK_42;bO-#Ck>Bx!3`o
zZA3quJvZnu&ug9RZ?W+&U3b%36M!ye`e1Kyx*UGJ*3-1cCRog~<ThbjlQ%M0&Kx`6
z<!rxIIUSEd|8ueJ9&4H%%V!QZ;2P$h5rb}}-y`MhwJ^$04wx3f(aXBp-_p)1&R$cS
zm!#XQVV=@`hi3ziMfoDf><Qp=*X22DHE&Gg_W|_i4&rMT{THmP9eO8F(DRmE(9_8C
z>ye{XcA%y13hq-MGRIz^%qqqSW2v-HHc4ImQ`|M(Qi~5DJ9Gtb*!Z(G@G{KU+rT@`
zc>#P*&12=~iWhcI`ME()_caPG;y%^J8VoU}WCMQ;-n#TXjGy2P<&-Ar=LfdwNiy!w
zLC5|Ze9By3^Z7G+Ev21&7p=z)ue|bPj&B=u(OS2oevz3X_z`}R+;8y$Tow0j!Y}pP
z)Y+W!IqG<>v1qYY>9^@nN4djc+Iw%+Ro<O9m(Z@{!KU3+Z``xi(6;nK6FyTv@1pmU
zqxv__ahv}ZJT>q@I&~gAjk4A^1s-jO_B;OF9Qz~ddCvD)qq2ue6YPDK-(&()S{jkr
zZQRX1g_w}Wz5`8HQ3o;UaiD7y83=)ACXJp>!>C+K!Kk$o566Kkho`X)_WAFduBVw(
zEGtf40qY=6ktc_Z7n)Yiq%CpB4Jns;%~bFbu8H-m)xM{*zEd#yb4NwCm)~F23Vhxi
zKwN7IV@B&VK21mSsh73M)8=4emR{U7bbhR_g8aX45m%E=Wekq4YvIqHv2ODGSfrBt
zxW7<0j7*-fZZsU*d8J!b@fYfrGq;_wt`mwiQg_~8s9S@apRsPdFt!1hXHmDeT5)-I
z?|SH8NM7@|n7fkI&cebMxa*P}b5G~Mi)rwUb9PI%e!{fM-t~2hbddDObo|*5qn%$?
z<rFVH4JHR3C^nxsFV^_U#wr6$Cv6zyPBx6jjK+%#Ep*;ev9VifuwxJ6XOw5<E?Ca{
zAa^ykIp)|H?7k>5xMpvR1qUC31}-|zVod{D&W}?zL9SmrV{MbMdi38PkD@g>_$|u8
zJ#enw(a-+5Y21N#;9T|sv2RW>Nadz!?!S`fvZwSrmE-W-X6|9d{?Xdr%-D~(3(NbR
zD2hGGZ|PvIj}Sv>sYj32rE(*Y|KivqC(9Pc*6@2Lx-*Uq?!&NZGILNG2IVJv?HbOn
zrfh1z9cNHsOL=i4Y;pfy0oh69S9FHx`@7sDpt~wP9<c|7d>w2-NAn>z@l^22!d?k>
zw&P=b_m)eZ@%=2{-eYZTO*wK<{5RSsuR6ibd+7g6WsAKyWneJi#P`~6#qrJXTr>_5
z!?W(L-&f9>nDoj2fJ-s^PBPaEw14uh-(l;cBYMYi-v+SV4NQK_cFupLY}ZdQ=jz=n
ze;8S}-=oRY&KSS_I;^9wQ>^m+yPo#es<meF9%K8icO&R4OL->gv$2gAd(%1B=YZok
zm`B_3u|jp{#T0`r!v}j2y)i;Amw5fp*z;3aGwo*Hn0NG^H+I<t*jk@E?qCzN-D{4`
zUCP|D)GSCcPwhw7wqI+OsZMpEVDM_*olPI6U-q^cj1wzxm;--Lj7?+jm&(ycR|lAT
zo6*nA1ufFqhPjI0tF^8w*?Ew7n9F=2e(C>V?k<`Kye@Gpjg!Niy-QA`N8<+C(Rh&D
z8P;K=_;t&H-Q~H<oX(vE=yT_(L^i%T<!V^7P#aoXj^g{dC&$P1!3z348`vAMFUbQL
z#Lny?2Xj4hGVME0wU4#%x7d3fG{X)b7a8{D==8OK7d>0oa+l04GwdNJCgsr^-?<3f
zci@XG0VnP>_Uu%fdFT!1W9j(@=FFc5;SbM}@Z?c=yb#>u5!UCJZ?0opveve3@>fhp
z5dX6n-RAkVz*qx**aR&#(4euASR(w5X#F>#xFY+s1vfBv<A)UUyPEao2eCt#m!ImU
ze&UwUkmfgIQaLB(jI~DMfJG}p&lvjAKFct$)S{afLAPpC|Ay9z9%C+b;qwgh*!s|%
zR1DID%(4)+yc;5pgUngr&A9GaWM;HH7BH)&vy$YLwgt?wk7DawK)XrWR7^tleUg01
zB=mA75)WW~Vg~gO6PJ@;^%(0S=%yaNS8KkcjY0WYj}^P?16H6UNp7m{`Z!4br1tO}
zZsJbrtFSlOcO^U`_*nl=KEy%RwG;~!-3_vOxXGcMGrT#3k42x}-kr1$F>r29$8qwR
zB-;b$UL~8eOK}G9>KY(!B)T+#ThTmtTx7P%R$fQUA<Q$`%evdGeZE<C4)tr0Q$3d~
z&BVTtJcY15w8j;}?s(<M$Ts}yJw?hNgnvGN#5d$e_kL+V&asC$D|KhKaMgP8Im{dQ
z+32C4<HyfLRx06F19a}6oYPT+pNU`6qcI`;zX$%@g*m@}@>Ly8*cBQ_7f{|!`(>=P
zd45?pdm|-(A=dsh7AyE)13&v8$?gcj6OG@-fH{&HYu0MTjZOYz>l@&Ymm5Kh<p%od
zf8@%J$+Tb2zM_O|*=32#1$QCqpmAv97}KdSDjn1W{2Idrl(*rze7O>Te9-^JJWrBi
zO6+N#%8k{3_;muEB>9j`AY;sP(~uFf+SqYqr1F?ABa#bWMkF7Za&hS>xk%!Nh_}96
zOQ#_(-dO+|)ACm(e@)~Li7o?==A5L9ZG!l!L39vt^#I@b%^AMxW9z5T*TAD!b=)ZU
zky*iF@Xz8C<ijDqjDbp(K}HR<J_wG)_kXq-7&2ipGfw%?K1_vX#^7Oewg(fkdy-e^
zY!@5Ag9#ZN4bxHVB*}Ln^VjnJk<>haOt+(RB>R%<2F9OcdcO${%71#yp3xFy>^>H7
zp87pJd;&Y+-~-tm++Eaq@PR8kLgWq@V*KbW<%Vq4xc718zvqhz*D>I#u_!zf*p$L?
zhQ<^$MsD`>1?;r`uvf#^o@4YAf?f%HC<D)jfgRh+8_(s;HG)@gHBv59*RDf{s-N)Q
zk!4?j_6Hxy>F7m2>;v9j#=i}$2Oqi0gS!Zro5i2BUQ1|yxA?z5rPELH{}2E7{Qs_K
z4gU`SA9A}_x!1yDC*L#YVM}Dtn&(wE_$)^6EDq!@@N^5hTY4q>-^Beg<j17_`vK_O
zhphix{qTMO8uy{|d>TQwW&Q7rY#V^y$|+D=zXg^`Xf~hkHtrHj<X0Yl5P54QM(&zy
z=2EN0f%gsQwm3X8(ox1D4k4K;Xz8U7jlEvR;$!gcUB;kv9cO;_l$vR)-$jR=VBY(D
z-q6#6*+S;U!}uHcr#$Zk<_FSzG}14Wk<7oqUinO!k7CP;4>iR2eEl?%jvIOUiFQJ1
z{ZuQTFfH>n=vaeJI<>yFZv7?d&!dks{C)5q_)d1m-yjPXaxn0nD?41`MGe!<@W1ko
zoYYRyQTsfC@aQtW2Oh}jsHD8)rnkZwK8Q}0%u9BNX;141mR|U9ndA%ltDO4t%jn#y
zfeJHx3GX%ks9(unk~WA(3@_(>2>u7)Prce>PGbJs%6z)DE<~JF{zY<DEK<@?b@(A~
z41DmtJ11s;q@gOwd(|`U+}IZGJvw7sp^{kNl?_#|epp-4l33)LhN@rkzWkh_rw=mb
zu-UenhS{8j+r_y8DSO=n;cLj0){)DmJga)<tgFfUtz%BRDMU^)Yu8tE7RJpduG}}b
z+f1xKapAFCWO@)gwx;I1*z?3cZXtIqd?|Lo7_;XWA;ta8;H_@k`Vo^g7+qkN<w2JT
ze9nS48<AW2Me>v8a?VUQ<40@A&(h{r>0#!I!bRp-$aRi4@xFb<@*(*wD$_8F|E%|1
zB%9dI8Z75d_Mdsba|X%nTW034e+qb$Ys!ziVQe?%;0v(#+e~24MJKfJ?x7;HYz?@y
zfd`vWmgVmx=lagV>%+=1JbKT*ZpKcCHF@EXr2UKN?_ywj>NEMJ&Da9fc5twRwkHwu
zu4L`2jdC@Ya%cMzyJInHulFf;;ohvtGr@OF=;i5KvP>+IYg&S=<2Rf9k|68&?Uh!?
zEMS{8)(roe{I@7{G?n0u{cY!e>Uf>Qoy1vYVzRfns?9PhA4Ufp01na9V%_N1A2IX1
zy^Y54&aJ`rz}^_!Qb`+ajCtz{Y;&HK1jn|R3oCa!m1fxKuD*k@I??GayrV71J|z^v
zmDp{;EO+nKl3Vf@pM(CayX--4fR{CxWITuXodu0|@IO2g8_)z=UW4}s;NvFfae%g5
za3SV89O@+x3VJYiEerA9n0vjr;{nQl2^mR}-?(X@g0}D<nD=I4=UVMocXfx%d~Y51
zu3vaI`OPP;-dA=Vb}#e8+%H=bHTUZL2}frSgY%{+_Gdgh)(MW)+~X@=U%U8%mMA!)
zL*^^)|9qa=exHX&mbV6_+}q`M2d=-F9E@h@&`kctb3F6LS?Hs&ecZh?+NPGimt8H`
z(zz5{P2!`m7re5>9<#Agz|G5<O5+_*;~j@Cvdu$j9tD9_@C)uX$~tq98So!JG_oyB
znJ_p}c6b6j>jjT;&a=yBtQz==Y+jc?+Zo;po%1W5;rxp$cW;H>!Af)%{QLy`y8~Qq
zKCyIP*<5T+e59LCd}d$SM04ygV|VU<TN7oct%0tERp!`>%n55KTUcU_ZRUOcKU=4b
zfilV#vlb#9a2$Oq*-(Cq1w9lKUW%P3dnd%&wseXYr-F~YoMRLwPcuoGFHK-R!#`Z@
z)7bfV>`v(RPbSc^1-`tL<qSV;IZwTmWmun)+~j$3^Ca|p*t+*A?mryP1OIP<^Tsh|
z_*0*{pyi*Smw^@!&vJ&J<oT0}k+DT)(!&>hdiRsi<DVAeKSB@b-(%>qO$BzxdHkN+
zWlekqJo0Zn9nUP@iN`g3?@8;F8f=8yTyz-Yym;>EIwZ<?uo~RG`MGYDbjfDQu0ftA
zqCYOmHWM%U`aS#hn29an?CPNrZyrM5Mn4u?1m23hw43||H*jCHL1*f}Rgzz-an{6|
zjDZgpIwekiQ<(Q<$VfZ!*DUl&JI`m43#C|(^igQ6bcHpT_`SE!ZmWr36f33=PnOLm
zVw_R4&QM2oRfDHH1707SsH?FTXMAc*cko_!QJehx*3UJ8p5%|Mj$Y0tJlGcK=)1rS
zf0MZ<`Q!2qkH;6_!*J%}!M2KyvU|+2o6(I2Xk#O7j>yI&<{yN&_sy_62H?d;_*3>i
za|eCtym9G(O{^R2M~5B2U$4u}>a0V51mJTqa?r&0m=)n6>4PAAZrHDN(jfbbP1P&o
zktJ}~eSsd1(T~Iqac|MhC#v>2@ULtPb4koyKlhk5@r#sMgX|YhA}^cuiu^yE&hrPo
zHnKYpK45k9w*l89DO`VU5#M^GqC>i^4_t-w!3WAaq+|NqA{{#Cb>=q<uh;xC7u|Iq
zI^_Ahtd=-)1^eeb*%eRAm}`nycb|*?ZpdR!LFZ{M2;Gx)eF>j#?p13Jy*OQSLKbs^
zi#)@Vm7Af{1axv3+?&Y}t1K|{+Dz6hF0vsVEO{trZ&6}NNy{cPbF5!3i}^$`EQkKO
zm!$U1%%a^edy}4Ly_@ke@koGu`{W#5O<Uc-_#AVtr=K+s({2;%Cd-j|{nmYJ1JIz^
z<5h5Q7Chxlfc4MAAI0yN=LQwCdrEWROrFL0d>h(W$im+OhsPi1!dN~0S(D~Z;aGDl
zf33Sd|BcgmG0W!#`r`Fs&I_2v-JqNs@TaFaBkd=_j^4Jcjy~+NrSRq;x<ouVFwGg3
z?a_yA_NS*gKkX-#lv~{KdNJp~bH2b&1k3X2*Nf)To1*tW0T*YQ;C}}?wU##n-$L>f
zeQ9J{FR?D^t2*G7zWRIBhej!zBQV&HU45pp@s!5fhm4Jfi2r7e4U5>_=&>O=S_03X
zW2|VLjNyDDjgtjF4c&`l9|xw)c^<kC+Zpq`;@Ay5Gt3!b=K1nUGi)WQ?~pBHB~tTz
ziSWUuDF!Evw_^Ck8r;iakH5sT@zp(inX4_{g;M>mG4A}>c>2fo+=|{=17FwFMSVN=
zl9)ZIv1-8srZtXyB#qV4jBFs&!#Rw9=|+wFLh#A#OL4lI+*Ew7oxXtG>oaJhFOYkU
zcbz*l06#|FO!4D5cbBSflbjbj!ZYu;b4lzFzt0Gpb5X4C{f4Ru!1iJ9Yk8mZVedop
zVzmX0RU`L*Nd3eoVzuuzRK3f4trLUa)-bVbKlV-jyW)=v+ZlTnF*+-qn{qvQwTc;L
z=0f$oV(D%wZ>>u)m8tK0ICY{EwrPFbAjAEPiHBb$4+^=LFZD3CIXP!*lyBl@vz9!@
zl-6Lg$##EMF=P0gG`Xb?-_e|W#oAw%eWF-zJNi(uP>lnBecD2QE=A94ZA<GMZ!3m_
z9SZF_mydOhhtPG3Gw8iwe29B~RZjnpP*&w0A(!$MZ;YAFH|Z}*o<=|K1gGA6c}(~j
zhQ00N@N5(8f?4ppz%Q7c_a=DX=DleP!sJjZmrC{!`xXbIT2IWBL)YI+u^?vuprNW2
zUPP$lP=1#uzmq$E`rDCpo%}9VE**Ut6a7ze4LluS73^Pc^1IiU)33%kx^&MCANTm(
z87FtlPQxZybl=Wlzr5BdqW@_qZ{C?u>i<`JPtZpI8mg~n$<_aB`f}2JX>Iq6c*VK%
z_0fi^zXvbT{9nOE{BNW@c>^b5i60XzssFMKw(?%Ql3XeuYH`|DmTXoM(`&%?)Hzt;
z5HWH1)J`s34fz~lM{C%~CbH%rdsfuly9)mG(Wm&Qx)IunL`|%MI(6h%uJZCvJe#n}
zu6Fkha`&9d-fNfNBUp@M$M)yg<NuIjfBK4G!y?%$-ONArOU(PJwW?=5Ti*pH13V7x
zW<EExIfwO=Oc?f`#4q#w7xW2yDZ`(<89kfD+@>+O!`Oqb;Xlmu<~Vz>f#2O{=a$}N
z2g%px-f5nXP$%v#Ies<qL+vA%pNPC@J=_~J#8w8&(QBIj%J7R{z;2FaBLlh4+92~F
zd(k>;iIXnR7TtJ`K7)S4n~0YzkC<3oGEbZ^HRi}uz3X`oXUP%g?+&_}&rL3Q4r<dZ
zs9B`=dqHRaqjraKpC-WrFRsY_tAcMc?dBkxedIKmtn!8Zk48G2@uqY{Z2?;?u+`D8
z;>(ec;=TdoJ=i$_U*UVJ-ly_z3QoqMC$fGv0G~(0n9{QgW8dNqq7C%R-R#7q%NN>X
zO{v<^TpfW95$G_J5BU}N2bOXphGiQBp+hnHs|ehX9WN(ca$)mdI10u$hFI66?``mP
z33RA8xr2u}H;MC$I}c-r{wF$K=X?uyt+AwF`ebYcFeOAY;YrM>9$w$f+WTo^Db8M0
zZ%y};u?<%>R<+z`TAS%3>au4Kdv!B5S|*>v;F5&Tn#V%9rn3fov3EM7;Nt>+1K%NV
za)Cv>HO*gI=p2)7ke>E+OVG<h%hWI8xvyg)ALAV4N3c0LkGbq)#F-w6@VlbpNe{Oi
zubutaU?FlNd|padAHqiUcna_PTbNVPM~AV`KTaD1#g!fXEs+k%gL@QsBpbk^JrLr(
z4@*1r^5F<kPjw_)-d>YT-FlL43uBE}G*(>>-73hpEFM4fwAOi>gg^4&&v(tpgmU|W
z$YF#SlGetxX7yQoN6ixk-*J1RyFLt`!df$eUI&ov8?eC+0IPJU+BE3Uomu4Z()Kd&
z#6H*)rS14QQ`&^Q)n(<D*1_*;V;wQrSMj^mS5{9Y?P@M+Hd(8isi)k3pRbzpim^}d
zH>R_0+0$sOo__k?WbWOE-2%N+>uvD7#g#mz|A+J&d0^iZWo*{2@$-TEJ?6fCV6J7&
zQ8;eax<0a?JVcEjf1R5A)E2=O0j3Br0e^?eEN8!oc;J$|a-SU}r{9Jq!In7R*k)_F
zFBIFs?s<Gg(NLKDK-pu)Nv&V{ZM)EdoWzy}<<)sGPU&=!O~JPuxD{J-7&jVgdiDTw
zyI@of%;@-rVjH5nVjB_seXT=&$CE|!T#zB{36d^-mNk2y_960geA;X5iT31}tp-kS
zj+IQQP8;p`bjW-!e*Y`){2Y3n!SpUR)Vm8RyftyvRn9=K?JQ)>&C@(3Tj1;9{VJdB
z<Qe(4$nN7Q`vbev(~s@Q4!+}_Fmh8q#gvMt@v*t3TBG)OI^lGCs2ra=Nk6XE`JvUo
zcY+-UK4FG0+{c+^pGetT1K+9ac%9g!=2icre$+?9S*Em+KHACa=*!LJ9?OEx_Ixv6
zXGm$>N+we0UZrxxN85v!oOQZA`1gCQR@PGI3s>K6_HnMa*`o~YpJkn1_($;x>!81Q
zT*vzP4m&Woy{KvZeQBC-{@ixq7U%q3*=POe3&HQxZW{iJ?vmF3J5&dsSL5{?W6bu+
z$5Zo-@I=?`;XYF4*z$$#LpcjRfsd+ofo1-_ck!QihYVHquM2kc0l#e2{&kfdOPPz`
zga-0WrMnu4%k3wovcZlVkA%LvUh`A=iHd#Ii`XO0+(o_5pm(q1%ung{ef7q@ynaP|
zQCR`;EY{|u;9BoCED~)CP1~X~(N}h32pdr2zJ@kE{NDioH%7Mo1~^iDN$F_GcWN%u
z{p1l(ziNM=uP@7yqbELM3S=Ko;nT#J^72?-AK4~4t)o4yR|)rxKHkvqW5j2*M)H~8
zq-d%<{!DqGz4Uo-yEgx5to92By|HGHBlo!MxzvA+-|ML>{))DjsXgc_nx^*gP40Z>
z)sc1ST<udnS|~m5#V?E5zb5|QWLg{0uVME~3v0+Z^7s2qD@m>6L05A8x>I%ucxL{V
zUeF$!Ffa>GU*|tUd#kYFYj=`wz6Y5lC*B{YZvk(nkJG{XB)r$YgnGNc+k=tPl{>vY
zh2L}FF$Atr+Uw@G?nv|ZH+y+9X&s=pQ!<>AxhvCje;pqsvwa`FRkSC#C8L-5Wx;oJ
z{{!@?{BXhIzuW)n$TZm<amIk+xZDHZ<>^oSxnj;QV(cmZW3Tq1Xq@<Sj`Uv{u`hfm
zom1<@+KL#f+RJ0-lLtz9lc)Taptpxqw&D)<Er`~>e$n|fMYK(u-nkhs6p1gX^J@G&
zHs!p1gS|)n@WDdn{qt#}AuDEC+DFZql-S%!?Jc3L`k7|<bL<y*oAPIe;%nd8vEz+=
z#xin-pT*rB=VOlqoDS9ruhFx~p~N+M{`1+~|DEy9@Z7kQJL5dJ*tc9}rVbt^AEwZJ
z=|>|sgvO8j%SGdpf!XIXA6!@Hawj+MqMYNSHf`Ye=BMP-kT1X;c1d87Y+*Mpw1WEZ
zJO31&E1-KHG$_Y^tzoZa2tPq_3t;TfyjTW($rW4X@T_lSWR1o92zN>%i(BQNSV3YP
z^lRw<2Kv=+m)r-HWp0XnF8$0o`OJ=8mwpzaj#th#v8DdAljTh8s`Rrs@b4TMIT|qw
zW0CZ;g#XN47`xnmM%`4oD`J=Wbx%I~WbBgkv!wql{>j+K)6b0GZzv}=muJ!Q;WvBQ
z3^tN@JcjjEWF@sPni!Vk0sIEhHGA86rySnQ{8;~tp6E<x_%7sL_;0$FoO{;j)wbj?
zIu?5uJfc;m>s|Py-$~nAs2ujhM^pKcj_y#vf0JIYp}pqq&%v{9JGGvnu{$4FcA$?p
zPKq3F$6hMJ&ojhD4CCmPTcShz$!EG<{v@*eHTv1m2#@K@@LB&dx`Vx6F8j6IvBukL
z<FZ#M&b}MzAC;-0d?h+Y^Umw&{8Mx8bDn<Do(#49bgdnGrf*zK_1;201c&5b^M$#v
ze0S1j?SObh7`?CYYgnI`@8V*6)DpK3F}E1emAMRmzv|hyv9WA&9*7r|vF4UQ&J*md
zG3N4^!~Iy9e!1>ndbfx(iOE;1A!Zi^o_6L{&xZ)4`q^NAu#ZmqP|lkCqbP7&=#c_o
zYna46s62~<``2C>S*JY{n!}>}PwB7cHvjY$^qKSrW8-z+XTmeUe|)7i-M}lD>*DDg
zWOGH#{)*0V#6M{?t+LfZSwl}R2VNIF6~G2i?Bhnx@aty}gJNF>o4@#QMJm?`{#w|O
zih<YiJCt#z$qW3K9u1q6Y!pMwo0f)Jx|bra@Lx2Pk6t8xke?ZWCp(w2M|?%}jtKG0
z+7+QY${5dCW3*OidFyfYZt7eW!F1kxsk{s?-yK_4Ia$92&#URPn6p$umgB9JKEatP
zyG-C(@iOqz?3NYupNoI}i=}2FXHZn-<mI#k%H@X#I-jR6&CBvLrE3l&U!sH7%tOSj
zq8aacIdim^Hjj|sD_p|DU$}tBT>73{V`96&3%xh2y(UE#F|QRjrPgFu%)Y~=P2m^f
zT*MGEDEmb87p^C568iIfxS!6|86Z14Jeea_tTDKOdz(~O?Pu0+qHVv82yN6G=MBlR
zY@A34JB;(AAEmwUg;(ts>^cuP1^ZRI1;6rr4{<I}?)yuDAN|0ZYZU)E*D||Bj}qu6
z*|^b+9s4uNs_&=x77g`VaiQ(}_vg2hxz*?g?F}m=4l{<eu0njOn_0WG%u(-bp%tt#
zp~Lsczl8or;>w|d=TW{V<5#XaUcXQA!55eVZqFHddL?oiZI~T9giRX+p8Jv0nKQ`K
zLQW4Mrv^D4p$|5HEjxsKjKI?k{7xdL7V9)+C-CX$(^Q&?vO$+3JB{!z5;ZYmX~P>>
zOQ=9z0>sGJbJKDQ`7<}uUoQAhM3-p2&C6{tIfG5u8QtjKdNcM&9Gnh7i#pa^H_}c$
zbAJ+>1)p^HO#Jpa)W6^4j*Y^PgWTUHn#l$dj>7##(N3~X{8lvdbba~^|0w>3uTM3;
z=3|?DR%e)H>^ofYYpXReO=p@GVDG2)U5!(G55B}Ht9#$2OBHiEMp?y|q)%TWKf<S}
zWJPkH#IFj0XH<FI@J>Er-Nbx$Y^C(0bbUAV#0Rf@zA2UOt1;^9CfPb0pu-CMyU2x$
zcUL2G7P%e{&kX;~g^}H?4aXj4%!C;;amLKoXs?Me6J1f`jhX0*@EvjVbv0wgyq~kc
z5qxP`Q(wNk*8rbCX8Pu&bebWbN_Cz0{<?b0;jLg7zVgG_gE`Gi=A0V%qdE5L@JBfG
z5=Tto5b?&0i$2zS?b}~<RP-+B)P6zn;3vv&Gv=6hu#q@BKImyaX39^S(z)f>$U4>W
zdG|x=sm}JZ%=V%;N4AT$va2=&gJ0%t<Xw9u*QU!R(Qg*?@p&n}_;L5pn-faSo70G6
z5l4oH+o@;ZgZBL<IV0t?c_NzjEuvS%`krm5`rmG9Z-1D+JsIQ-JjvirY$wGQ1Xm;P
z9$-I}#+&xL`g4+Krao6nPR_u$TFDh-!_!kC^c3(*Z<Xgatj~<Me0dHw?8&pTtZOay
zPaAZ(#&5pY$CS<|Ie)f1-JklBPUjqHPk#0PGrUV^?naMZ$9+`ZzC^~tAE>9XP&TTr
z<N0Z+xVz;4@x#*=NbjAIR>`th(XNK7mC!14oK4FZXTOBbexKdxJ|hDo+jZuki>)L5
zskpB{4=cWZ7=0q0@9{F*lop-^ZO}8K?`yy$U01|;YFE0l5$(ab#LQNst9!8_oLS%`
z--P+>TKJ_hH!|Kfq362Mh2+=_?`I9~1!S^hsD9tZ6}Q~6k^L6!=)WZPM>FfHA@rcR
zaLI1$v*9_+(;HWm+~Kb&DK<6-z3SVCJLoG!Jm8?o{)vqadnk~<Aeq(|y@4EWElM`k
zt#67C)xU|dewO69*1p7_L*Sq5XnioZvlrYBx3RyR`6~=f{&)egOk&8Q&EdB4j(>+{
zf+MLlL&u68c>R>jDF-O^E|++<DOif!v||s1P2ROn{<h|hhmViUd*Y>VOEK~@26!IN
z3$*M4&)KY5Ek+g-^miY39r!juHF(Lc@%E0+M8`p!7opQiXt@&I1s=oD6*^U*)0XVc
zy{KZh`Vq}mpwr0ly6(x}hVRf^>DN(tl~G-vzAF3nN!SC#+e|@%_x;4l=K^Q;g;(w_
zys%=hmvypCSpGmA(NAl0f=zqOPtqoC#eM{Bu7dyAHCqp1mmPxtx#XhBuE=KWO1?DT
z$gT-<mTnkY)L^S+m8W#h7~t@HOy)V+b2FLWu+?G>Ca_y;DF*q`I*fFi?20(Hug8~!
z9s9=XBkOiicK?Oev0nDkDDJ?V<K@G9WsDuWl``IMHxOINZ^5F^$=HCuHw##q*(vMq
zgW9=S`R4=Zm-u;Rn}1$=1HUCp0r)82M1FznYK<Xt9(z39>Y=xI*ElA(RC<SaY>RBX
zF~nx^hf3w&G-f-)*YGYG7~8`+^@A1cbNOC`+==n%fA)*aBu?(PIUf7NEg}wy?Ga$E
zkbR?dah>-U8J}CaA=isXZk>XS&bVFU-^-K0=ke$7Bdir1dL-EK`CnSCM_4O3^hjk#
zVvgRA^<sC@8;2$n9|C{nc=|d<_euSkI-17^h)XGNCyzYv?821q)D52UcgzLp`FwJ2
zY8`f(2h$q)4Vug2<V`+{Zp2r3IU!#mnVtijtk{O_4OR2&S$l;ZSBG>)(3ru)#J@sT
zutzzZ5As{{=0V1?)^y&#D|HUN=yNswN2nv(7oyj%HV>^=48|qCX^<t&c?t47e3}r?
zoR^972x~{eH<`xAO5@{(Q}`tFQuu@>o{mol{qte?M7A|lS>Tg7mo?%WYb<C!6E5<z
zGI9Bq?F?_pBbEXGa$l$zesZ{e?X^~3OLi9P+jd@0O}UBv+Rk2WvxX8e*{cuoe3zN9
zn%|v$Q_S|8Sd(hJ9Nz$0I~>UE*=2H9m$9D5zKLbp=U2@5KJw#~4D>#l)$#h%*&Tyr
z<c-cUtw(-b;hnQ6nSjqfL$55uw_Vdr?4$S5#kxDJ(<Lu|u*?~L{pl+^r1Kw#pEV}0
zC1LV<3^e=lijNL8QC{Z}gcyIXm~lN?pL>U~QxmmfS}!>pIVvD;Tx%a+bFJ9&3zZ*Q
zFj&O6R=iTODtl!BS?zj>Gn|oA#kZ87B3|!ee2C8)58oy)B4tZudvRA^CL~+N3C3>Y
zPAS<1H7D4I!X6XRexvl4<^<q1=rgSm_`hw&r|@j-o3Ox>L(2R;<vrQq45eITNo$9a
z%{jm;{@uWTKUREI#&6|N3ZEn7zm;PjOTOa7!jC*q(UBy69>Fhc4=R3D&{++f2Ng3<
z%fu3|?v&0wFSDMS9&fXFrg($oMR2P<Z_E)#pG`bN^NF6zo>LjM<=d_0;3Zf!&xuB1
z%3eI%6u4>MR(`ki$e*x953)z+*0)FIX?~M_JOs~#M?N?tnY#po^i~byT{N;-Q|pD7
z8h?zR;eP-p-8m;7s+@F+=40s)m46T$RPTLU&!QiXUx{EW3p%*zeHU?Z$E0s8?z8vL
ziP(?KHE|xl&yPXYS1fpP5LrRqyuC@R;T>U4W4%@9GGvqc-*__j|BpWpk`H<R`b%b-
z)<M=}4kBBB{CQ=EY&O9o`4FAX<-g#*2>Sba@@Z(}*|pGEbGGyPDVwhsnm;%C{ov{E
zbq;<XxoEHdG}v+QkyI|)C9|Q`Ba7Kv7T>EJw0?5XUjJ!jhs!>I2KE6cE+g7r55E)#
z7kvw$Z_4kQ+S$#x6)iVW?h0hwh6dOXM}oP|acHn?A<r`Pk8exkpLy$a;_qGLMBT|p
zIQVpx&Sd|U$Nz5hW*FI5ETx?G!^Zq%18w6M^$=@aE&r%+R6o*l(s6!2fxE3o&E4IP
z7UH9HlLM#Rt%@;TEa+wV{C)E68PnJRlM<}`O8-UDKDO+?4s1)UC(8DGh~MSdmEp9H
zeKY@;V0SFW{xaA~2D>9=hh=$jnJjFuA7g9$g7x6p>9|Zb_QwHes(sO8&N>yBfp&v)
z$fNM%GSNI!8i&`4+2~z6_Sv)0VQj9MSBITcj~&uY`6$l}|7Dxy0z+=v*Gyn*$%eAA
z!<@9Q>ELU+;98G<Bo0|xi=Cj@2ELuQmrvv9BitY9`RE><1D!7niMQ_F(fNDXOT#VC
zgB$yaw(S6x8ffu2u*lD?!}om_TRK3$b;P^^^t*#T$>*N$uvTWl%d(lwtJE=h=DHog
z%6R+Cj`W(@j`Vt&;=vo3Pj;|gR_*?9Q66@h@TPtm?~2{zDxD^0;=lIfNd`n?+2OV5
z8u3tmi01G^*mntF9f7V%)*=s?Q}LgaEQ}qibusC*@AIv8^jo<I(!uF?)ywj;WLv)T
z+Q_;nJXIO#agV0y+$`yxa^5{Z(-e4minc`WJpof7{=_rti8m@A;aP(FAJng}N0lqF
zjW#rH{Eu%B%AUhlUL&7ZG0%6=A5-Z=`&#{RB|B03vbA?RS<2ol%7iJyIH`JLH}PrC
zZA+pDW<ZzL`r!3#BkVC@o@pJqa$hTZOWH;*JT}JrfAzjLa_?^@#@RZubYB~}_bZ4O
zw32)O{T#FB2RlscUy4lZL|{fwkhVX`r#gpo0w*uKb2l=@8KM*Ks$dUy`dJGxuT{kQ
z>+N#~+j)O3JYF?E_1_@#HRy589c2M)Fhbd=eNId5PUc}VW3|R)F}6Z2=PBy<PV_eC
z3-&1Yppf#MXTFU6gR2{X;ngDURiNFO{8nFz4GNa(fPGt(eg%`(Rz;5;_O!t`viF=F
zERh{L)dWlQ{O@{FcIZceYdh<JD%Z`LuJkwi=S!r&Pv4uJvJ+d$*YA=XvG;ADp0n(U
zZw}P!ti>sv>celpGTr{ifK7A2(O)rNQSUT6&-nR3Ik63&Z>)OYZqs_^_t~*p-q-V9
zZT*n89;B_-k<aXFBc~i+Y*{Ng<&SvJQu*g?<TtmH-`q-m^S5}8zq74|J-r5b43j6+
z&bq6Gd|SlK#1rPZ7Rh@kgbkeD7pd{4cY3DZ8WXD1OD?BhM{`&l`3_0WDHBp#>EFI=
zd*A4UkqUc{C&Qd0^8Q_??u}$^Y>o0M-o7EX<E>)GAU?I`<6duGW-evUYMbO<&N%{G
z+U~WsWUl2dK;A>?vsvV8efzNTOw#NBywlwO68ulC#ZDOvWB;{HN?iWft<IJoeZ73k
ze%ke6`u(kD%OAc@`^@R;-(Rn4V66CeRla@0k`C~Q30L)ZC%kwK`s#NnzvbVa$9$}F
zjQn;_;>s9)6Wk656oWg3AM&*B&w<3{Ba;)C|KTI;<CQNp!gn7rgnsh<>+Qf?zpeW5
z*4&!0_S}1I^M3s#^Zsa9HSXR-HU+QF#u1#u%<t04BTaz}m~uJ)!Dek{Oh*CZVITAJ
zsvlKi-;G7?$94P%w(oEG46n@V7=}OZtvajY#N%nW%VaNkYr$)3@HKQ+@@4F`oAOa&
zq5GqcU|+B<U3hWmu=(aY-0^oA`%lf^{ms76Z>@#N+FbdS!wK2eaem`3+vtf__Nw%8
zHngwD+UntTy|txnvU~Zzy=b)>&WY6Ce9l_woC1%d^xLmH8*{KHfd6c8)HD6=V^8|K
zqFrEG$t0d1zl7L8@fh+2^=x{H%KXNjHg3B;ecV{y_tK_x!spZSB3k7!pWVf|b0J`_
zXP>skT1p-D8`-xCjMzPbe@v`#+sHcow!tOU{#391x3CRU|EH9wZ}s^<JOlSN1<=cf
zwTW}pc2YlL#>Nh%>!@rKXQp}2-LbLW^mA;uE(@Ao1})EpmcC5%m7OlH7V`f7T}xPB
zy&B)}8u)oF^Tkr;i%)SEN+2z}=XUn|lK2I<rt*`|?R<d$KSqAP3{4cz(|qXVIs{C~
zJjF193*5;SNzG9@AMbPU2K!^a#yIkLkqh1G$D50e07L!x<|6Q2RzKZb<e<;%i_As6
z$Y-0)`I3Bl@IwpLEnqKEyBFuBecIHxeVsO>k3(Lcy07qAZ~e4>thvajJ>9XQe&|o*
zI<q~&$(eD(x_`iLcYnIwFQbzci*5m5we9;5e*3aj{d)@LW!zJswYw<$Jv?~1qd+mN
z5A?ajbg9o@@=kbunY_u&GFmGYy)&PAuwqlG-VWXgwwb{86MlQT6Z$BJBZR#bz}~7e
zW_5@>JHB<!$+4N(=}AvV>FinE$z-R_pJmU&HN;?Kle^eb4djPtKZ*FrZ*;^?kDdu)
z<I)pRa$;2fg2TX<e&+WNyf1TG6?Ibg!8)`x?N6-F>-k%pfy#fC_5SBB_Wt+OvBsnK
zuUy4le1@1;_vUHXpng7&-?qL_Uw<QK9~|TpNY>={za0paTov&00k#YNQ#^al!vVT@
zaRHYx+Rdki`D_+z4X$mxvpO7d$rC(Ryr3DsE{M))EHIa@;%w0k#7Aq%AFJl>(HiU$
zwV_x+Ei`qHR$m(8eOtP0?HkpXZs4vxwM8y&OM>=)51+7&_h@}gbk-SPnYfL{Pq|vG
zF=At+&bWRDyFDM==x4iyZXw3y@u-{c(Rf<m*^B=sK3z_{3Hj#?RMyMDOEMz7*zfD%
zbt7=!2wpo(frpoHY6Pc7aEfH$gxx>C;RNTu)9x7Z?$nlG*bg4z47_w!=V-kA|J5@C
zuU0$eSOqb5&R6f4dA8FL<qUwhx$<}oHdYR{{~SKmE`Atew%WCi+31Fd%US^Z4-}MB
zhq(?IRi_&`)!x;72MQv*i=2EX9b#P8;rLMh*c`@we?fgm@SJ+DOdWd%oAJ-<@)Eym
z=A$;rqn>VNx?hx>t3Mx}o#yNX0V7)y{|6r`yP<kW`GGshui$wX&$|vJs-Ma3u6{=I
z{08nu=J_{y{!Q9lsW`FZv60-Ne&`xJR()yI1g}*;qj3r|hs@^Ozg^fzVUyiMyp8w*
z-;PDhF>!gA4>rd!J2!E8F&{G{d~5lP;#=)J{_`;#!?y<Wo?A4FkDfQqn00G-W6`a8
zZZ?K)%{DjvDDj|kJdS>&&Dd;mA$NiQu6#b&WxEobJ-Fhgp_zPq+DQM2KAE)fdHR3z
zE&k7hzggn3v5zf5Ka1B|ix3~5g=Zm?xV*vaUj)4_Zzo?;G!p%1L;D9rdt-)w>=q8C
zp6Ba%*Mp)xd25>!h0o}@jUD^x6XpAOw{SJ|p0ncCOL@OAcg4pq?L1m|smciMP|(@Z
zm{-4r-0WkUB`-m<WkX)s7XSUsg7PiZu668Y-rYar-YrkexMGXS1PiRw$`u3i$KhER
zpEF>_!?W=%p=M`G033=QF5ePyY;W&nwApM4HAlA8K5T6%dbnas*jO>nrizK5bI>Wx
z1@~@I88=w(mDyNu#g=&R6g(fGpX6WkWB%~yrx^Ab=r`V2J>O>h@3-v14Xm{^LEmo!
zZ!_=$YmfSS99lQ#-MeLz2fyu&DbYV}ezeF9-oyJJF4~ay7-jC>(rhg3fAU{}Su_%i
zqUDCXD?HkWMm`NiXaD1`e`qiEJ=!C~Jfr!AT=kYSmG|rU-@-qXXMI|@J`V0dPmZi(
z5#%R;%~cnStiI0#dL%n$#pA%<w#ZG(klOId=Nq<In`ITullSGStob){NAbVL6NUfk
z@(~;xn1?Em9}AhWRuo^_kd_(6EhV=vNLGx&Jh8U8<_bP39;x4G(7n8DhWTm@`s;wX
z?A1;A&e|RH*-M{M$_EDST-ykY5o7Q1>-zXf7K(2l_o`^S8QS_Z@yff_9@UQ;dy6kK
z_;<_vHvF=FTW9(f{ffZB`HHjD`hMusv$#L5s5x&!B|4#b=JV?-xkJdw>t3XH{`2L;
zvYJiecZ-psW^}~H+{%{aR%pR}?D>(bg;yN##;Ubq6W>9Pk1DUS%_k!JmRn~pxNnBp
zqw#yeiW|N0o3mopkY6?v&inG%zXxqKrYY-<Y047YOSQWkzVPmwjOA|@u9$hL|J-k5
zmNCQv5|>vP&XM(a(YVM#UwZhU|Ac3d`7?@4IC(o$c&49kB(7EGaGqnD9(8w<kCcIj
z&X0?NYgFwLU;1n4?Zf4Ni~ctBmkgJ~gXIUU&lExH;)g@G*3Q^?YXE*MrvG-}49|Ra
zy@ehFpWlU{Wf|w8ncQ;bg0}U3-{s)u)m;?6bul_#^{BJG9Nb1fZwJ4KWA><@lYP)O
z&tiW2&Zzc%xc%?Z@T-qH`WD>Ffx96McQ<_U;TFuJ;Z>dG8;fsM`Am2-pZoBtUBT$J
zou-B0^xO1d`)j@hKY^W|!_S(hvayY;$E0G5yO4X;53IOl$ZmFqDot+BmA^GlHJjN-
z98+=JVVo^Cf!$A-V5jEF2p`RjFT$5d=*9JQd?F|A*ykiGdNScsEZ1-IwFy=aG5@u@
zW>S_lv^qYD^<=|iyTG}$m`^ol>O1)rcVbU*hZcDe^s9P`qg()7*|T0;e~5Ymz;`eW
zpY)34UhwBIzSN)pUby%;glOx2;7s9>-MMRcWV_9nd@V4hryrP_`S>{g0=OJ>R3<KJ
z|D?Z{Ucdea!`af<nu>oa=V1eRpGkPHyavTrv@cTecKJ*s#};JnlROi@ynQBi>P-A{
z_8kYYQ!~r?dvD}#UQZmpfPCBna(84SD-P=2VL{Au7+>^jx7_~Blh2t}Y~O9~VDsvH
z<vHIlt*N~uQ#&_c(<Ht9*)wAH9Y%M{Q)XIcA!WXH%RFMqQ%~-L@nd}cJxuTXAL8CT
zKI-cF|G)2<2?P>kNq`WjnMqI}+SUaHTK(jm3F3lX2-rp2W|C-2p?<!N*vh7vEYxM%
z$^cf2{WJ;GmWkz4tk9BA{gfcKQqx7i+Qs(cWI>i_6;Mf7obU7Xo_WI%acMu_-{bek
z`|;lHa_+h3o_o%@=blU3+Rv%zyPADfDt8olRG!M-&U&-T4fuyg^WzhUoirhOkpEii
zQ~BN4s|M*E`w_bPvpt+A6ATRphn%5A8Qc8WVW5Ls;e%iIRP;%nuJsgPx6f<s`+5?7
z)e#5}k0#rY-@2RfT=-uljr<<d@#a2@{^jTDPw{_WivI^0hrx+Yt<}62WQ^I+wSjl5
z|NSoi)Hozvm&P{ZQR)29U76BmmPMSjE>E=s=cLkZIhEi21|L%XaHho^NZxF-OJ#&8
z%dOLe_g}fIjqA=an=_5|OfTcSfH6Ldu^vFy9OgA!yo`y7TtUBVqFEhZW*mJHf5zX3
zoBo<%O*z;;1U(sD;c52JktVt?HP&ASM(GLF{@<>x$iAL)wSK#{nlT@W&m_iZk|%4t
zYpkk{gTse)s2==rR!uqY8OHpuM}rqN{k7T*Vb9-?*7!U0(Yv)-a!(=S9o=dAM6Mw5
zz(e<xE)Dr-E)6lhL+lk)KimpWdBr=dW8)C^xtd`eZu(m6B}%)U_7UId&^6?_5Pvht
zt;D!m^{O|!L$FVtxP8OMz#rDWI@(_KW9y=6zVm*&b~5k68GBLjqt5CO&K7_>;q4Jq
zeBU!xM(ct%6G{A%UTO6I8}Lp2ugLyHuW-80eDJ=5<hkyR#1_?4L76_vR=VW>VaflT
z6(LxtbC+<1Y;|fK@tts#&L3Q!;I4rrcKCN;>*NeOXYJA1pK=`i7$4T%oSBfcC66Wc
zJn!18^fh$aPVBJq-SY5_wGGZ%Gnk8f9bJ?W;G2#8pcY?~-_R!w?9X1YAT+&te&zIS
z#=CF_I1Ur@pog+m2YnS)d2Sx!xy+lvcXWi^I+sW>HmS#{V;t)l;uop|neS8`D_HmV
z26a3#ziK-1Xcq3Ij5vNF;;||V`vP^0YjyLej?eI|k*mP#>pj|FqBDx_S({hXxYprC
z4SvV2=HfG_(e%|C{9vJrM$T%IzkvHscXZkrb;NkrepsWrmKOCDpciVM>ViMju~wrz
zgIK>etaXMwN!zU-*f=Xt^WScrF{ijCtm|~dvGJyt|0!bUzsOq66!6)}+!6MUkKlXI
zzb<apEF<pUOT@s`|H-TYeaAZ{(vF=azBJU=4!w6`<9*R64%ugqsUH7D;k7rC$1U?7
z^xgD4;kOc7UNm{Vb>93)yZ@oJ*fM%iMCL(gxoVr<!^rTB;G2C@)0^m1n|78`rvAl%
zF^>L{Y?Bq)1&x-l51e-EJnZNa=Y3qSpZ?MNw|Q56>v%V;n>A9e<~LyOWzLlDxvPP?
z>Zq&MSWaDn<JVkDvq64{wDCsoxX8~^;{h9_bB22N*qP3nIeuTgqSfuJ)j{vho{G1x
zQT^Jng@rtM9qJ3tW$rb!Uv;TJ{CrbiF^Bbkmi{R5j(5(UQeRZkpCzfj(D(h=D!vOm
z{v*kLfQN4u&JP2h=BozUxQ)Fd!mDBgsSe>T1nz{_N(ZmWwz_z|m$Y&EIUl;$xbLHH
z)A2<ayRiE{W;Eso;4ALn$3%9MPjyQ!`8m(%OA(Ew5Auv|<vfq%IZT?La2KpU<i53l
zHJKe5oGmeuv+aG+{)MACTf%B}@qA?NC~W09u^YVh4EZQ@-K}*A_E`?sxhbQI*)!(E
z7zyK>9vp1XsLwW2?JV}Po@1t#4!38p$98I*vnh{O=f*yOkC5aA%iQr(tqUD^F?o)6
zLUic(Q0WYmeE336>m{;LQbxk#J2Y8mB4Lm3FX9Y}$4&nl&)AN|#L<2opZ*foLrPc=
zDXH~vdAWRC8C-+725)Q{#5yi`6E1=aE2pzgSgiB&>}-FBnZO*m&_7+Y+Qgn+3tG3m
zV<V*tZ=e3=`DWL6(M23PXEyURX)jwCnm(2E4|qm9vZuze;#zM&7heQCA#943j87{Y
z`IYp3>MLM;R(U>iYzSp9f{!%O*7@+LrjKCnqu(nREbFruF6%3S-q8!-Df0VI;@}WA
zNBVwhsK^|8;gay$MeHM2eKFbAfYUN{yB`9FdC;G}AAmNGR?mwae>{0koZxF`yg26*
z+<oR+$aeV2$z^k}i)$ZcIek2rwU8TP(1N4q$rgJE`cPRaQ~RPSX&-CKQ*W?G7rQ*n
zZ<}JRJ64`+Pp1tvKNw{%t)#7Up;_pDp#jz$@Tm1al_Q(5%3<ATYVe8?b8iTZE?!q?
zoV91aF~!=ytg_7K^5&|%nIr6_;<fmH%J*hr7`u<kdnQ$$o+Z1#Q#)J0soKe!7dG>`
z_~3~a=Mk47w^i+R+pl(i5FaAZsc7sl`zX~$AM&;j`Fs|#cP)K+3;RqTX`d8bZyMG<
zMZC*Q#<+`%v)vQk!Hlgjv6BrM_$`dXZ^5)mW_RH|GIy*KBcgv{e(d-Q8e5F9pCrc^
ze5pKMX4?Gh-E;PYhi9G)^FN1}b5+>c69wjEVUF26mv7Ks|LtR#Kj25r^2H3zWSp31
z#=}>RGxvOYsM#DJYDJDVcw*v#rRdC4fV~2q7Jz;$;b)y5#x#4j<y#Oq5nPQuXS3E7
z6aQn@<TFOPs!en${9|t!YYO18bG`JSoYqOe$(&G*ys$g$DS5tNgsC~sJmJf`da2fG
z<Iq6RjO`c?f4z}%3l@LiHr095<B7zdtk@c7edVviscVwf4v0g|Jc{4Kt^(4#c<TDe
zne=NhryPGlekl3qTAyM~@6+f*pM{2RWPNwAL&H{{nNx!NcK}*1$Tc;x|GrasZ`_m@
zt78tq&tTJbu6C|!&S?#_562H<M6_yDxcrve<!3OywO4aJ_&8c^MKwn|^LrBZe&?Lv
z2JkY8wTSABsLt{|ik>Lk313Ovjdyt5K)iK=t3vQ}V^)1c@Y?VR;R^X<o*#R!a3bH@
zcWXl>cs*+y!lR;9S)Bht8(h3>Abv~11XB}de^|O7TRndEv}si#{zc7<txo318_|13
zbCNl3=9};}g)#DOu!x_Y9hRJE)kyYX0n5AQr@zjc-_D5!$#0QgbCG0<ATjhLuV9Cn
zS2VwBtB<QXkzn1<S1kR&5XYR=s(d}CkJE(LQjBxXfJ*JzroXht_9T2Wh(AUdW2>9-
zBbl|U47x8e(WkH08aC_h4R#FrI<x^E!&vEe=ge+sUvs4^n=sbq9bsH)Z!h&Zv{`<Q
ze3y~C!KLovwSW9Ta<8t|my_#zr{#7>|A+S|28UpNj(D~fb+j}TATA&?cMXgF>Tg=t
zv-{hL3t{2U=I1+`5u80qnxCKg6#qVCx78ujYHhldxfvh(*Y?@xMMI=zZ`^L3PfUEW
zV)>T|PZdv?nyLx*^ha`6tX&5_tI!34tP?5*iT%V^SH-LS9f@i`Yg5QyWwxVl=)Hx$
z4_?T=z3M{F9XI_IX2hW?#ZUsTN5Nwk{CLoX!T!L6yY_U0@9py|x0bR#S4UmUAD3+d
zukt;F=g(MQZFa3IlWsD$^?B?7>aX^~lIZ%ZD`Pj)7wfa`jK%SFX=%92>5ut}IWx$_
zLhSw9PCCi`%JW&$hS~G!rpshau6Ypq)3NtHK>rDc&%J=(LTb)j*H8g&Py4&H0M9o1
zMlm7=u0L*Po_-ph5n@08zVPU1Ciji>>7S{Sd63v94j<eiKczQ`i4+o#ZYB~Y|GG#Q
z&j^>>wDl@vzp6|VeUfj#QC{|TH`Ax^g3T@Xi9N+Pt;5+qGow0Nc=Wd7$G=(kII!C2
zGmrCMdY}AO6W}eu_!Z7I2gdiVC<o4!f-yAFESB7wo<{wmG&cX}!?71RH2L2#?G<zA
zl0A-ZFo!w(A|rfQbm?awBYfMLmzdl8!Num1#r8(#?3DrVUWKom;l6FD**IdmwI-xK
zAYCrs{N#gnHv4s!gwI^;C#JybcQoa<fG_=PAMh{EKL&kqWva|gl!t6s^IPaIm;KqN
z_nResB0{A5^sf>R_S2RrtiK38!6MiMm*5nPg6%-NwZ=v+N#_sBKbZWEPlK~hDL2~l
zpQrb?DE@<JtGn8;7snerxkJ7oK4O2E*5@>j;MXGg>x~P9Hw%52`JMSdd@BrXb~Vt4
z!%gg`v&<UShGNZL@s(1Cjwi#*L(s9Gb*wsvjz>Fm{3FsDrHdrf&1Zh7f{yE%ui-%}
z1JoybWI7KDkmijG#DmJ1D`(>GlH@}dK~J?FM+Yhw50Y=e1^Ncvg@}bTnP)%kJIKF{
z6U3i>ne>0b9x6G+rDNf>1o>#<2-}H6=;ti;apVmN-#$AwCiOfG+E;x^yJ*tSA|2lY
zpA$O<?W(2Rlgmb<pJagBF%E7|;q|7mjvvI)>b%%zpwXki-@kAisw#8UkMJD<&w@Wr
ztWrORVizDo+3Y1U@k!8R!&>=#yR-}^K4}&vX*rj+)d718cD1RQ$W=T)a9X~4R`M0b
z<Y)fE_qq7(C(lC|*LsI%Y-9)Wl5E6BUgSJNY@D6Y#@-_K-e(bi6S*^e-fu=;(wbl=
z_FEgj&JyPPFnvX=`#BYoU64sikOeI4DyRDPM`!kJCuvSDyMccF6mq=epwA!&eHK}M
zkTchmvK}13m!X3F*X`)ko%k^Xkh3cBRW``!FVY`LU%hdyw*xzYmZMB~{qnb)mNho=
zW|0N1;9vAP@@P~zix(l=zzg1FZtU_R+oam)@R+l-vD29o$8_jSzJan$0QjKuT~@y%
z+c@K;i#Dnc(OrAhhsXCYzk(O!ftAQ-E8DrM{bP~OMg!XzN47ax!?*x%;s^J@+ns*J
zR$hlZV=Z+2<yT4forE5$zP*oUmCKweIpiJdP02BDuQ!|%^$ZV}zev6Bnm;MWoF)I5
zXxBO6@;|&+e)PJtw|fL<t-!m;KXBZ*@9ue4;?vr{pIkGLU7oYA|DN0vY?&qK<9V&4
z>3hazulDjwKayVOoPz}~bN&<CS9Gf9?a1uM7hMI-l|pYiuRM81ljIiJAK@Q|e#0I%
z_B`$uuj}+;|K);LI`+OH?_^WNR<UAfXlujL>aC}2ipUMJDXOd>w5hVvZHm+Qp0p`4
zcQJoapHs)!G@GK|cu(0B<!_@p?pZp2Yk`&F*e&De2%1AxR??<8w$;reo8o7ww~?y^
zn_}mickS`Nao3)sh4-$tE~;BQ1KVO3Hpn_`l^WkHusgA0{mAQ`S+e;JCbkOl6>ATf
zL&kN4Jf3LgNX8L9>fiAY=MZ~_&I)n#h%(Lh<he9yC;Xa6_N1geN@sVNtnraY={M;e
z`p&-mc}?DNy>&(3U8}fbQ<yU{vXXYT0PyOY_(|i^%B|}cS8jD}dNyay=$~wQo%n&O
z{*NHnDc(p4`>#Se6NmiY<vl?<JN2&k%&M=RSVf)Qt79`MhxnS2M&xfFXYxoEZ^AD<
z&U{S%T|1~ZOug`M$G)dBzc(0JoisXk=LF|_+=wkhzJIdY8Q|z&I1``Dx6_vFr-7q)
z?I|$hdcO`1jsLrAN0S~N7L8xc97egqTZsNQ#_IUqg37JJv0rHnIOSZCYS~as(%vdu
z>dd6>j}mVQoOXYd7(241@P7kij(&)Ev)JpjEVT6w=@(wJ&<`%%v8DSK{N$EWru66o
zwAn2)nChciFXy0Pvxv{Kw<>=fv=j&58fQb0Q`M*4(2ek>cIf-H^kF0P$<AW>D`_ii
z;hY!!`!e;%OYkXXoXD3_<Im8(^f8FDz^*#JiI#69jcflqpXX}MYYFiE3Z6xuGvp&j
zANa6uH$tEIx#06~x-Wsru|3A2lLla_118s28^2m-f|`i@F=c}nKQ+*v`qAyfK5Qx`
zYji~K`tI~A-&`Da!&@rwfshO{4jlM7kLPBtCg`P<Z}@Yz-OQ!;?ZDvA=AFy=&pUeG
zu4>lS0$eI*h|(~(-OQylVR$e28D-Wabw8dJ+iA1>*KXn3W_->W&CIoj3_8n1>b`|b
z-%IJMicE7zdbr@I;;Nubw>&fA?fRtKF83Y;r?qdMZm;{@y=z`oJZKBJzAy+H(42>S
zqW7Sg9Q`cc+_Y!AyZPzU@{gzG*Sqpx`yTlVeD>i?Y%&KpyEF6F!6P%RA+xvf?a}4Q
zZ^P~^n7feg3;F)?`jzD|D>LgWSGL}k(SBY>rj<22i2rjnSMi+}KHN-<{YIXfvrXi>
zlhv!Qz4PALhS>R2tYNcnrJPnPD~oX%G41Dbo^rVDdh&debobqP-|Xv1bAdH<_LMt=
ztFPly*;9B2o~%LblOw<O4T{WSU)j^`lRDxrFW+O#;Erm_j(fvx)vTk2oNwNaFyA!x
zT|GZh=EeRt7`fa+rydfM?$Vx`>lKIX$lOflY{&kES+V{dI^#Gyc7nOak<;NFn!B`4
zbvgYaKl?Y)za_It7V;x+f8FEQsFJb+V>w-BDMc=ev!-)$+11RG*FgW*GA?E_2CiqX
zMAF|pANyiHGRjTJuAzlXw-#Jz)zm?=&%IT;dXL9mwc3;O=u@NS9+M4CbjLbU+tKQw
zv9Z84lJWBWJM4`|nWw|(q<&y)%4)yz-|oPlPI22v8~2Q9T|MYQaAI>_vWb*rg|AF-
z=D5nV8DGxcf%V9$=p<?v<7JBrhXo(fy8rFKGO!%C3`_iMxZT!l^-YtE=g8T>GR?53
zeR%toS0?O@Vc_~cFr5HrP1Jw1`ns5ORNWtQ?n7hW8JAp#IFQyq2k8fQUBX?5kbPEb
z6vr2hiG6q^`-|wq4+Zf5SO46dl=s8<8du)%KzV#vdw%H+kKA^_t@f18I|C12F|2fo
z@tLf^iOSXSA!hc6m)}1-Fgo1kSza*rRm(H`!|fl&rXDU&WZ)wMZYHjX?CzZWy;VJP
zwjOTz>VF>&EDqfFgL8j%xUu)p;ahUQz3Qs1zdYQN;d}Uz#pm6p@z$96)N0Ow=)ISH
z+wh4R?b8dwBWhp4mS;>>A!CDBv3qVF9A>|OC$eN$WBy?B$#z<rX+>t#whi^S`*nuQ
z%0T-lbo&X#@|E}%XPER}pnms6FIya19HN|V&eq*SKIWe}quVcw*cSF+FXvlfUpP3)
ztMkEUAIqZuy~A4vqxZfJUVAUF+Z>;X3na56D<Ny(6Cb7j`V&Q*<v<<B%DBkWJKMBf
zOg=xl{J!;eo8Z{{6T40IzVvguO|TvI&Ycpc&coEBdS#1!8QFS2^GOJM(~F+W-bT+g
z$7s(y{K;z!<H4|pUiHR*Ay_11j>YFYv$X(xIk4c590wM`G*b2Be~n#gRkQ3R=(SyU
zpE<@X;y5JNF)~lBW5~WQ+y3!IpE|Xk(Mf$J)RD#f&;=gYBb%>2dKCGo%XzjI#_<z9
zIEiyA(36jq*=@bEu|>CkB*MB|hi#euT5Hro16@=c#;0J2y)^!G(^}I$qa&;Rg2+NE
z^U*>4lP-7QC!EdV;MW`NU1<7kQ}X<Q^`)`){>0|Q(Dp0e`ntU_o{zpfBz)z+ea&q2
zk2C!{HFv@bOe!u<)sV2W$9Fs5D?8WjuFU<<!!1{DKis+W^~0TamOdOX!y|zcvsMRA
z+}{!K*{e#JzdGUJRiy7KQd>O>7h>1_E${!Jy|2<Y!ugAqsZrZrBCT-V$6f7Io7MIL
z?;tc_@tSjr{e6jParl(<JQp^_49xxZit<<g<cp2wz6YK%)oQ-&P1=1K_kL(dHp=54
zHEqY~*At?r3enV{;_gX<Vh2A;Y?JEYQ}AcZH9hy1bEbHf`B}?t+gK|KV_)m{j-I`h
zGkQJ^ZToArw`TmKlI<qZZ!^4kSqbRKnUDF0d{gfJN4A;Ql>-kbf}WA-IHT}E`yYwT
z@gtm{N;~6Tf3fgW>b0&bS#B?Afyc)8z$2mE_@B5#$ML&o#(KaNa$s8*INJ9DKJNR#
z)vI>f<&>wh3@0#u#mhWVt&^OX4ey6%HXHmaJ=6p577fh<=duy*XTCW2QRKTxvts>}
zd#nPQT4uK$e%NkXK$_m_PfYPVSy!(Awl{CKla}}qX1Qm)^7mr1n7_jxQQj_WLZT^^
zu^(Q2aFXfYpQ0_bb3gW;gOjL>I1{~`t)e>SP=}p&+GZmk1a#vy8e7O1&&m%u7@r*N
zBqnAcd~vinO)e`yw$&wD^O?4B;w+@bqQi436P~%dnZD>OGSSULD1R_E5$tv$=0<F$
zuQ~Q8>P)vswIC}Gw26-fR<~aFF8Q!B!)$TtoPM>lJ{Ck~l^sfJ-Lgq`54K_&V;=Zo
zh0lI$2;)$8tcr)sW1ZB~J-9SBd9>zn?E@#)DrqFETZ}i0@uu?^=>OU59p9=s*4_W3
z^vdVvk!<-+c_eS>g2&AGBY1b=XIx%vV~g-imh5OPY=;+0S1s9jZq2R0Sx9`QqMhf?
zdE|rP@|nv$IgOhJ&#4}fF}?>`>t^Jv;PM|lJoCgYdx9svw5RcUGY5Hh4t}|_SzE~R
zTy$S~p=rLYdU@f)9?7QIJ#6em$gDN(l)Vle-RHNLxak_QNtYLHvxt9Cg>LN44YzR?
zK*YlyGr{hb5k|KYj4G#-aUvN=Hco`o+!AENI>uVzib%O{=!4}?t#7`qYtGi&3P*Ux
z`}o!~r}?&EW_?Zt@^dDz_%4BuWj~c4Z1jy6zg>r2yoYfZ#HV*~p1ouWbKR8fqoRXo
zOVA9CoKJfaoPV?;n|xOlMy`ohEUscM58kllwn4+rf4F-h@g<k9dpLNan)pSYtg1}U
z>>^We<AUs8<zM%$jPX}_nRAzCjDO_2-z{J9-L~5}bFL;BG9!b_A9?tyVP@nbo9@d`
z=H;6inzdkgLC#f~E3&%4cNO@q0++K-d}(zxvgaeln^kt=meti}=<F`qzuxDaU6uW0
z{#9T7z+Cq1&(4@&FQFe6R!uM?%j|}H54Z-O3(I(~vg`A=(I5BH_xC}U4b1zL6Db?w
zjeN<T6j@KdUzP36nz-aki>YTeK4!DM;J3nLEQA*4u_jU+q#WUKA^3LtusW~s;rpR4
z)#U?c6T#P2l(jy4;=>g$o0=iSCsQA7=lrvG>!YjaBk4HTLMPSp>?ppuj{lD8O|R>A
z>hh-15VnyyqPKtNyZUk>c#)sa%+9sQI`ug>=QiIan0FFK#4VR~IQF(Z;n<C3ANmx$
zN49X;r1lhEg@1we^Ru@NSz`=)8raN2ynTFU`4(c$L-Fmje*v0~Xixv`+-2vHjcS9|
zQdqZ!|MrLRZ`wKw8vypHCk`fKfE(6!yk&~rH@dZ8o{9YtT|F0FvD)9XHfgiXZT-<0
z)>(pPhGco!Z``$=q)wgOM>l<DvfLk1uHdqf{oQhFKV@QHqukqrvQ3R`RoN;hnkrY%
zdkQmXr)=+TocUzAtby$A20x0sV31+Gtj$#|&L0)@S##+BQ583v8m%vi4{9AQIN;xx
zp^cl-f11!!_d_@EuX2s$+Sg1?3;zr@g&&@{pLIR*Q+5wLjXsQ4^q89Ylv}aE)O;Bk
zKKNrZ=gEmruJy2IePFr+(u3z)HS;MS9#*pxp3q306@8{AoEbd!WpoqyNo(Cu@%zP-
ziBH+qJ(d_;$Z*0HvH5rp#!8pht`4*pMl}Bf&6H^A2rJ@ekEdVb3!TB;YZ`1k-TrHt
zQ=b7xYMcAt<*$h{YZvW4H76YehLg*D(3%w;f=ukpQP`_BNBJ###sX~K?OA53MSIs3
zgv*hW7L?*kP_Wt5OyT^`3#enE)pR4gzJK2y_4$z2mpXKQ#o*SS9a=*h+}iaEVxX{Y
z8VHSz9$0T;y%%_=B&yAl#Fx0HnYQY?%$fu1ZQ?4Kn%)b_ro4h&Q+j9ZYMV9(+KbV}
zrbN3c;2r1z7VVE$GnV071@I2DvLU}B1kYO8nD0Y22rl=HZzP?`^o{TOlD(vYG(pm^
ze<;f=&l>M1)_HtdxXo{&_X4x<cxukYexE+)T8_^TYd>YlwV!kx7{v&ApY1(3-n6B+
zcT!q=501CnhCx?Z%%eN#Gl=>!wYwlRv`zi@7ryCTII#Sj`EE}isr|iwQ2(}LyPs%k
z<m36T!r~hM%Lk!N!6H9~lcUiw8?0T@F<lwv<gyIbm8__Tv8QtsHP=BWk~3yhY%(=n
z%vFPO!)whoRnrS5TQxSmXdd9K5S;M#$?*2;Xpi-)06G|LqCZPm!{i)yXlGDs5FPL(
zXyhR0HGZpwb;HdWhvd`PS;XGTm9rcjeE$WdqLo8s<o9G`Mym0_t{UNqlrg7=GE0}z
zxAP7l+uDA!#1C8rtjYWG?4|Iwc?G~|u#XG3r}`Z^FumVfI1}UKva3$5`FRF~%LR9U
zd9+|EZIXW`>qDwrZBaYQD9-?g$AQDNRgTaaS0=i~a@kfRm9#6s+=CwuZ5`B#PxBeD
zm0~{?obo}x&}YxcW?i*ui>cWMUV6tit+gqCA>&Qs>H?D$={b@bTfHXw((%*dt9LNx
z4d$4(1M98WLFC@}9cD?~o7I|F##pQ6Lch5CPK~$H*b2tULF8aB{oS+7UZQrqoMX4C
zU7cm&Hr228#P6_|G$JEpFutmN=s)y_k<3+VFR8S!PZ=L$%RAnlVA>o#h5SLvvPYPR
zr?H{j!}m<#if`b3)HNeH7wTfx7im*~G5CFGZ6IC9r&Y9}G+N_srypH<$GL9aO7ejF
zO@mW)O=OM=g8!oF#IGMQm@@<Mw;=CK<BOCT&dCvdWg6r+_y_ohAHiG3M)y5zV*4Mp
zVh6xgDR?PBmI}Pec%qGQ<SoPeZ8(Ru;6nI6^~RB5PJP2~YbWu*;>`Ci6+x4Ersm+J
zU~Dqqgum_76#~vP=m3~X2hhP?q$y;qiASfe7i-@9UfOv#?iz4E@v$Tyz@y92Pd=gf
zBjxY1>2}W)#~0=S*5RFXN7nte)rYSz_^c@ANz+}Pjp0Gqt~gIT-i?j^64Q?#--B`D
zxYQv#7{>EDbZuy&d=X`Z{w-y%(>~POh)IxX-Zm$z9Kpi8_+YbTQs*?;GeY?MH0RrG
zDobTIUkC3+Z)l-z*>DYGY9DP^nwIPAHq~2#y;y0wu`xLCkVd|csv|%-9_lb&bGe@N
z?Rx2%@NJEA^vbCk-?Bwv7oXA2**C&Rn7ZqT{a;^bw>6Zrj*CtQPu*m8Ue~5P;mhs*
z&m*TaU7n0b?Y3t-Wrx5^6=m4)-qKGxHW3HDQsUJJ#^3~S28@aU?!x#u`Q)dhJ~GCf
zI$K2Xu5X~;&6HPH@03*|yGntv7Hr4X<EKsGdehbnZ5lf-`uC=!>{JJQ?Z|pYV}Q8r
zkMn<#Coj4kol*XT+HYTuTqitW6PT*<wO-joKR2Cg`p>6rO7~sTh+kV=VcM#1*{o5X
z!UcXN$b~a(FY$1xL;nMzyy!>C*Nn`VjCJjvBl6US3bi?{o^0w7Y@w>W=w0Md9jZ_7
zs`C)*d~RJfv?1Ev0<6wDJ@f^gta94koEL2d_HEGXHt2QRpzxLJ$3U~RW&K+jv2D=d
zHt5oCjC1ysWJLE2se=8crW8Lt#bXF?PLR$a)VOjljjxx1`D65h#?4RQNr7DSf5uuo
zkd(s$n?5k|3yLq;X`-LwE?KOL_QyZSJT%(wuV7uN`$yQrSm*2dc~d?#+j}82SBv~I
zlX)gipSo=d2Ta>W)$!+0AN{wgZk)ltgZXqM@`pd%79K4bF6q~y{B~wCzv6`o)&MkN
zxCV~#`ca<fkgdeU0FR=ZTO>E8XgZDz5dyCkH0psq+hxB8zZ$z5(~HQfGPVEi$CN=o
z)VwVFf`i8-EMd}&e&TdYBKO}XpJ06xnZUJiym6Bce-h5MLXJd6cvdz?o#QeWSdL;h
z)%cT-iQsi)%ar{?^{Z`v{yF|l_|{?1qV0@H)?nhJ>|=4{h>OzN<j*iud(aiSFQt#l
zq&JK%mfcG2K~`V$I{zwD?Ybk?rt6vS*PzdAA#WYNDDoALv%U~O7FXUopEqm5_@RZd
zMPZ9a-m<d79>!m)9kNXdX4j{pj`EIT_mh5-e(s3t8|2uCDOa>EJ>?daPyZxXS4d=;
ze!;4C3(k+HU>wH0AL9MkFYuW<me`_var$24K;@YByl7LQX=|$Y#I$D*y$qc}>-J-?
z1CMRJ9vr#l@8`ez?MIZQbN9ZLbJ~`r`C%UTU5);@C&f1wp#!c)&pMY_b*mGJEo*>J
zyfB}4@j|!Hr60NDCw=dO_Bkk~3Ubu5vRP@(!RdF_9MtDud*-?}$yM$ih}vg{w&8=F
zJckorCL4Pt@k7>;KiD&?zXbUwXzaEivGYxlnU|cS$3=g@9N11j3O9=iFMzk@wjNUK
zCVV<y<xadHotxs&-avbI;NOz=Zr5jDwr<yF{|DfB4g75jbAV$@r`!-{NyaBI)_Hd7
z_m7Ld^k2z+7a_mdthJQ;*TZXB2Y4jYtYM-o7Qa;bzqFAK9xPkB;>OwNeGWg1=S3HM
zAAUl9=xK(RGe@i2r|XQLnrahX+e2Q>9qWLn6#597anV_<z^W|9=EaH`^(5tek+#2t
ze0KwB+VQvAMB61B$IBSw#3+hi?aUMX@&Ch}_&}oT7qL|tGx8GAHF2(3!?2=-;IS?v
zyjx}U{Kl-2K1e->I<@XT7k}65BISYK{rEQKrG=$@>uI`vN@wI_Q}$)H-?+Eo<5L>B
ztKNOgdyQN{-XGx#a3zedw~TMCTo-U1@HejAvB49=VWYpo8q&Li_!EY7L-=<LU2z-s
z=}yka=)5U8t~#4ctmk1Xb~$i$HrYIv!UIjOkC=KpHUwjK#?VL=vCC~A{L|zU<In1y
zjNQHiKG$``{B&Jw*Wp@XSln}jHE70pWq<9Sg&A3qD*R6>C}$^UX`%~uBzWemO`Zq$
z`nh{px5p0Cy90X=@@$9pG#GGl9NhSk_igr)<sri_z$UeCH8I+`vu`C5@_Hk{7wNp;
zU|+Rb7rexLL7rRat7dR-vyY(jew*0VrLpskd9?5fgRRwy?#sc~ZM-k$!6pPPwI2S1
zS))99x3K9b&0hLvJ?-k{-(K)tPrq6GUr*fQW<UK+nx51@^{L8PpUc0A$$x)O`{(RG
z;D7Vv<iF?j5BxS?2o1pJ3X0H+D8puNS|xD!FEahlXPGT=^e#WLhhP)^Sga$A<!a94
zd{6Zi{CqBbCHU4+w{YCTT-ZDr`H1uZ%A7s$Kl+*4urH@HR>hc5+N;2!>(jA~G7Nrq
z8Y?Bn+lxJHp7zyDVhn_UqYFCM+*U!~Z|~xaZ~P6r7z27Q<=td6PcsHeC}(@8=pbAk
zg7?TjuX`W<-PrA&vCY``adrjs<y4C?sWBX2TvmbqqkIqlEpeIBCBKi0)+5uzUr20u
zo%|Y`f9D>bTRI~=&P;8mjvjQ4I^w(TN2hpXx&Ps2jpbbb!^&S~hG2`!ELJ?JqrWz5
z-pFE|gt;ixotS!va$KHpl4td0H~d}w>Cnn*6I(!k?OScf;vVC~d`_kre@2?hR2u0<
z!jl&sA)EXy+4vCVu%826T=Q9gJ<1k-&jlu<SGH;K75T3_{K4ysiq6z;PX96%U)YIm
zqWC0?sqi;!`aL-=HTHt|B!RnV9rBvfU&s>J80WQ5gdW&8Z18cgMwl7Or}Q3d+-`b9
z|5ohq_ZBhcwv+x5$|*9$rO!1p;@;9W@d^L@!maJlieSxz4+>VnseMU;QS{eNyug>B
z#m9iNf*5<E=a+!75`C?m@e^k5c$0RyZFJ}9^fs;|Zvwe)J9b#LPxun=*?^zKc0c`u
z%^==@tPk$|^C$NuamBh>3Rn9dG>ma8_7ZyJ{V9A^9!$)83H^HigLX`1s7>MnYFB`D
zUA0%b1LLb-aJp@*ri~Wm{)jzCGqLM>NLLSjJ>V+@o)}{_T7xz4p8)?nd1gie-1@Pb
zh3^xdJ-yZPGXPHxKfT|IeQJ}#mx{$xHK+94UmDYzp2pQ2(J^U1MjExflQ~Uo|CZ)3
z`7@=-&z1NyiO&asyK=F=&!qgFN}(g!xK)lrH<2VRrc<VH;Lr^I*Nvp{TVo>P%MUR=
z#Amf{uoW0~^d`0tuZA*`eJ|X|C*Sd3Al+w2vZn^z*wBN<_LHm)1;IyI9=bk0G?n1P
z@LbYpraNOFn0m%??rsX7+3yFJ6U>Yz;SwJ9He50eoxLrzNqbh{^TnNvN#WDQ<y+|H
z>bsj+hu0W1DOj~9U$6__Qs5N40qhke#0?UxvOPQLFM?j#)9}&JX0tnHsyIK$qMtR!
zG-e7WC&#kV7r>{5^Z)v}StGtJ8Ocwb?Z#{wMSJy3Ow6dxbNCG~_^H2>d8LpsW3qE2
zCKr7V-rL3g(N1`Hm^A_MHqnLTm><v{!M&M19&4VN)n5vaCw^+oVok9uJTnIU?K13V
z578dq2xJ?sZ!EpJZxHh2Eb8dS_Nh9M0b{@v=|Km6n!0+h&z(pAcVquVW{a(7O((o`
zVqf^L)qVbxiOpeTQ^WZ%VRZKp{^HJ@MBOFxO<N&tFvMxF4R%~JIEL)EiBn7*n8z8@
zCcGe%ZVG&ER=>GI<IZ&Wv6ZVmcZ$|EZ#|f#&#AxXoaqNS#{nAcg7!6k=8<M1bCPHq
zowU5<3eIK&mwGSao&J8T9r~zaZ}NHYIQ3_Mc3bSjX<#l9tV&k|ta>h+|H#%N%E+P&
zwJS_N%Fn>*Z*bHAKEm+zU-8Y!o64uU1M}^+esn7XO?0ByxiF}1x88p8b+gY+<teR2
z{$HfZ7cGhgD|x?}|5f-fy7O`vTI-3JSoPE3AY#WVpu<YVx95Ao{KDz>D~ZjbH}gv3
zvL@*4i<BW+EBi^}LFxVu-p}G=qB(gzdpVdpHzEISsx}j%0ef83gqcGxCie3elXm5F
z9a8IC(j%RIOX-m8D=XGnpnb$_bo2;#y@&Sv=^u#)a~TiX8}uB{V|ngEC#+*Hf$B5y
zana||+soLq62ivgA7ZB7?7tuy1`m>RuSK@l%iNpXJ3OX!Z;oWQjMhrdVWErgaUJdW
z*?gY&y*YLaI@_I%%ya8q_G*=R4>S@c9{vhsr#fg6`FV3>^3^e5E5DaH_ikv%N1j$|
zXh+1#>KH<y>+%=_*rTu~Mf^)9_B9G-@1Wu);sL}NmwV^mJpDZ8${#{UFA=w@d4fG7
zj*Z#B<mSFY?)F*oRl?)_)LBj2kk@87{jqaa|D}w9l1#JYh&N~U^i0z>b*h=M2-v?e
zb#QD9YkE#P#zrkVLJs4i_C)HN`Vzh-8Nt<g1HhK9>mIE>Z5OZIIkZjtp^gkc?T2u3
zS(~$Nne?Ae#@&<;p?utrA&YdP52NR=G{9_qvn)1|`Lzk!zZuzyxx1~A_*2xmS!X;H
zGTt(L6@A-S&)mowdk^JECJMk?q?@{avnQ85y+Jyv)<r)<*<*?>h_*5QXLQW!mp}ed
z%6bz0zogd03fcd=V-!4vHfo*p$M~MjrJm5@MaV;=dv84#+rAmyQTeC)cei~0KM$J|
z!9ATHdh&2f-TuQmGr*jf=jajlI_II8jtS(gT)e!mguKI8H)xt<4jn*WsLY;#UT~B1
z{Z`&{E;PF|7AMm0iV@=H+%!Y{xT?jWz6!OEG_v>BdVIZ;nG2TVlRTbwR5r|vnfc4L
zr#@2oVY`0}^dWu<KZ|^g{qFu3F7FG$yQ(<LyB7In2X-75{&MwAHZYwb_+@xiX#S$<
znsbyt@WR*o;8j~xo?BK`sw~md7&B(J%JY-19bTM1|NFh@19|vy0@L${@7&{zS9q@%
zSZ{_`O@#J-0PY*1uS$3?>pC5E(3lMm_cOoDHDe-@$I#tp<dMe%441zU>WgFJ2#v94
z$iLjCZRfs1+w#q27H49FJmI$ZUlqS8NiXt=UIg8ReT+kBr;)yF0*95@?YpwgmIBs>
zhViVn*wED1NGsg8h*t42!k?c0UheewE9i~`zu}WNPic{ZTGw!Q+RU7}hv!g=hm<lW
zhv3~^(-=d-o!9WpxelZe{pC<!JNE1y=O^dlJLnU=yM1ymYr~b<Igvv8qY(RnaAW8b
zKYhFXL*N)3oFwM1pL$isA<DHTvJQ=GaxZ-xT3qSC|1J2n;CK7z1U5a@;nFiQoFkWs
zHrnBPU#HKisaLcWqAt;Z>grNmv>^Z-Rg;iW4kfnSj89b)^m72;h*I)s4s`6Q$SwNr
z=X(+Gqn}O9p*+D}nS%ZIDcFU(D&W_dcmZM(XuMalt`nf|B=<a%($5(8QS}w^i6WBI
zEaG^2NrQY5t)<O%am7`^MhAZg!o&GKvXu1gFQWe$(n14nT0i|KKl=7d@Hqn?+MnFK
zH?jF~U`opVqa7RFox9j~g8eUPPaEA@2)*dM`0d{=i?!2^D&Q2nlBeOn#EK|${PCZo
zZ1tD$^>6BL`da-hzy9r7!@#$olri_M6i)Y0mTc)$plL&ULil5RgMX?={p*&iy8fH8
z_rR+({-KAlXUwC`<CF8KKR+6r6E6SO&Ftk(pJ(0wA^v|pT)yI+{x|1G3%?L9zmxwi
z-MIHN*PrB{VDKq1bB1EOXI#~UJWcuTI#jw{(9Mr6Z&Pr@Oy&>926o2Nah^+__rv?$
zn9Y*yC!d2o1OGC{`(;j951EVO;Mp?GXZ15vns@ql5L_AZnUp{1lbp9*$bNjodSg1A
zA?6mhjm&dxN3hEtL1y}UH@dwyr`T=VFP*&sY2~HPeH>Vx+iv%6C^Nl2_q%&f?C|Vz
zWt@}ChOn0I!5#;$u1?A}_8|Pii?p6MRQooIzlm+z&gh#KM@~jwA5}2Iu7S?yVe@OV
z-r6>*02>{G$2>C#o3jUaJ<W%I)5&@bGD*&IGbNX~z2JluLuY6^GWWWeTX*->XRdi~
zr;L-!uEjR$i6-H<Ys6=A>8J3MCfY0f4qAy_d*yD~nbUDypTdps7aqhOIqCsVyZ4e#
z?dTnLn$BqJ3=cM6(S^s{TkgRJR%;tLcCQg_Y#mT`kTIF+$KA>PN6t>=x5#g$@;^hp
z%D>?~^1FUjN%_PSYfbJl&iU!|n9D1tgJW<CUs@<#NjS|(;q-QJ%6Q+L3r=&=aC&<G
z^iz%uQsM`1<h>NUg}|HSBk`3|E}b`K17|n-Rr86&<-(EHd4$&-@T#>?=Bla4*u@_r
zo&F2gF74<p`0+oC1}M*66O!CO+VT~Tu^z;}{z{MhBdp#+`ZTxQL~ke7PF<nBM0`GU
zjzRxG{uyQZD@S2}Am0T)O|Ai5&zvOrK56$)wnzSFGx7KIGPb;ott#@~PP;<bmgP_O
zo%z*Udxm>sOW~!OcYB7H#ePToLqiR^YV!Q5PTD|y(Yh^(2j$PA=U?(Xu&y}t7N)!c
z{3ydbOTLpnD_i<^<`-=}!QBF{9$@hROPS+`YPIgnO7f8c{8aao&)n&M4!hYI-{toe
zXI(jjJxTxjC@USW?z3V8-jniSeYbJ!rXP4${tfSv-$zX0r{F;ovwhgF(GiJXS8KlX
z{lrcFb85j~;uja6)8+l*_dUjwWseBwH_?xs%x8i{>E8>cZra_s%>Jq7O!3&tm33?9
z4?m5c4fKud6$aYS9#M_Ms&;>eXerEI3X3{^!upTua(VST@!Ye)qV`XA>pM~MSdjiu
zx^<Vn`@Sp}kIJ8Umi(*!iToSRlE40+$iMR}`EN_*7f!En|3h!rq}un-;K*(3+3srp
z{?xo!kcPkVRQ-t^7W%u<TC1~%%Js)$F6-}{BpYmackRob8k@Ds+CGot3lSj3bm00C
zbHnth@o&#p8<+=@aSxF7H2=7<S6V)(c>o=6hvm!zwHJD7ehgozo#?5#ka-84u_lBa
zx%M9J_$n3QGtgNLKcH+jDXc+WD7H0!pG;h){Y_o7?VsW^*n2O2W&RVvJyv$}?gI0f
zL+07Kwa&Q!f-T#ON{3B6qPE9d(~QlvcE7i#9URxrqb;ln`iIr;4w>e|S_^e>@X*zc
zz8WY-zhLiRS8e@n)n}ReSUas-`)iejFXn~VscZABnr{{2zw5W=)Lw)CBIlbLe|Wci
z1e`Xoz5{OCj%JuO@TjSl)m+Xzy3*Jan2!g=F6MhTGN|TdjUm6ID<)+G@yJH_t7POJ
zWWze-fD-(JTJY=WTrXQiPH~r4Hg?n2gUt7xR9TX*WKRk)#+8Qm{%-bI{3kvtoygAJ
ztP?OF9g<Jv5y}YyBk5XIPVIugbiw`6+eizp1zQPnIdd@a+w2)f<~rwM)=bR1ZfO`<
zy%wL%1CH<8S>>8l%hGU)9Md2FM?(7u96IZQPDEp_T|oG#<gEJj;HQO4c&ZKuh%Z1q
zTh3zXB8I@;O0(t^4ov}ed&wY!VlUFRbUb!C=Vi@``Jo%_zZD*o_Et9??bxM$e9fx)
zF>R||Nk5LEA0M*j7z=v;4DkyNu<k?LFS9ZyYOblCUQH0H&^>;5Y{Bz!_~A^ITflyJ
z-4plkwz(TqzgzOVAugQu_r?=VyFa3Pt^L#K&innVF6SO*J!q=lhlf{PlDzM}h`S+X
z(1-NiQ2Emf_0HHU);%-48y$YEA>aA>Pv1<`yWo2b_&!s;*nw|D628jq|FOIJb!$#%
z;<3Yi$|!yH#lyzG1ApuIVdn9J0oGlti|Ub;e|WfVM7#5C`##PwbNIxD!vWLI`FF{*
ze%4Y{Mke)zvctQv!;Up~vLAu_Z=gAieT(NGrk>wI-*`Cne4OWZ>hDhM6E0u)$sbIv
zL0);4^iG>X#FQA&rZ6z<(|^;rn{z?NhCdDMzgzi?6Sw^0!6x^e;AnAta+Cb&4P^A^
zBq!0P-%@sG>iIWrJ@5w6v5g(MAZ#Bhg}zL4-CF#*#+oqaqj1+4G58%l!E^0SPt8Vf
zUHx0noZ1QaZNJ2r$+l|l;qJ7PxETZ6sWJ6C_+#}}GsjPxts@WaPWD~1(@&*)@dczG
z;Cs%y^;i0G@@=bBf8cLlUbTHsV#@^jqxvhBlfR`V?BrL!Z>KK{e9I44{u$jDn$kDF
z);EE7CGhU(Oiarnug26U{1)B`XZlZ{pE*|B{hWJJz*zN1gZNS(3%y5v){4#;>wd<1
z`~y+bd~URm{0GUe`Aqz5a?WXa1LV#tm~I}EJSRTK9`Lo22apLj7iQbB!fb4E*`-`o
zOy8aPKR1;>ZT?$z@%xt_CL^~?uS}mm>r?sVbH9QAf|K#F%1QT6%;Vbc;iI2b&d&cu
zIcJ;u^-c2F`Gdo|wN@#aOm(pi;KT&6xQo_vo=oaGXOqA5KXd45{QtA^iSk!-?H_Wg
zjEm>fchH<8d%l;PlPJsB)dg-(E*s7sa`r+Fc5KVe9CCb7ZcKKX?mLq4;qd#|(lyR(
zSr4B_cCWEaeL3SZUoyVr_fB;4G5?czQ1O^MvDe4P$SypgbuxU_?Y9j9=nA{UFzj)4
z#9WmR5q_`p;)88S&uV3k-psRO_m4C8hbZGjgM|<42<*orW1S871+x~lnm86=*7}Y8
zfoSdFg6Y4+FEU=xH?4nRPBP8HS+O|qFwbo=_7%~e@!wyFu8z$QIcS&TYkR5PUqPIX
z&JUY@2i^+|wl({h`~l<ab5Q+b;6Y>1U2Z^LaAb@2Ks3&p@zLs0&K~u}+2K*0*lyXA
zQ|tlfJ=BA7tJt1MUBG&eeBz4CWe;Lo(Vm{)vUb#bF6T~rXJIe!v5t{f{HNa~W5CBb
z6JGvquTQhvWdA!ZILNbY!R1^3o%IoekGgd|INORWhkW#${2=I`TCb^@Xl^{#f=u!{
zet0?8vsOXf$#Z`5ioO1DIrh8<o00M2i_+{8@Cc{f-~nFM+k(s&2R{WSzqeG+=)L33
z1bpvuTEB?z5__&&sjGLg^iKLHejffN^o7!U{A<_d8qcFoBJ)YlRKItD|6m*&9&JKC
zXa%2}J4qk%;xmBkh1`TJJHDgRjF0?dFMGJr?N5kq(7RQ);FsS3enTBE@n2=Y*OPrm
zJh{#y%3?h>enArcPGp`q_EBR>kJ->yoR}P<frsF^qA$^9m^JGgcn{+@AbL{2x_#Wd
z;OkopR^r#l+*yFUT*o+4K8G&z)qm7C%xr$+ra3XilR3q|?>JM|vWN?Ga@i;7+X=)M
z!hempUK;yG^O<Y!O4(rk0W8)hu_3>fn5urQWDc?BVe>zv*pA7*e-)asUrTIx9QdG%
zn#Q5_(oXcjMcCoyLUWHpA4+=}>5f*Hvp0M$bqgovkYpLrgg-Mmu9Q~a8}sd@YR8ee
zpNuujkBoGgFD4$;J|vY@4^8U+EM>;=ClcME+m{PQovAID1HDO@>%gU8E`2$1**quz
zgw{9U1CrN9{XNMK!o={?JHD5v#_}-ILVx&Xd0Jbj!-e^K-tgKO{{-JL=FNfq6vr;m
zOgkPRjd1cy?rtBdKlQDhZ^Hi`;7~bhQtyA@UFp;NBABv0s(u?g`U%!8pCC<=uT5x;
zf*0!S|1;mx>k*z+mwX;{*I52B<KOLrCcX=Yf51i!tz4$DqJQFDdhUeAMbBa0(HVN<
z=z#hrxEFb>4#lTh4BbP6ipAlKHSvY@^u78`?Gg-sgQh>1g5l_K_JmXCPpR{7sc+L>
zO>B8Vu+YbGY#GX{vEb(aIRBEoVnXYuXshT$Y19vHnyZu_{OCLIp31Ae*^<fQj7L9X
z(VrThzvr8a2jNEWh20nj1ICMZyZEVicMJB82KJuSaZ%4})pikbOMtcL!e|w-$e#Fu
z?3Ky6z|FHQGfAtf(X~Y1i)g#r>Zh%GcX8#yL)?Y2bLn$OHvreyK@)HC?QC<r>@%9v
zC4X!{e~=8K`O=-w{@M9@U>%yjgIqh2A>L=1tJ38N?aL5<PsvB4PT>EMUWeqKYk)iT
z|DTqhwExhJ`>6e6_4MJXxUtNGl65*g7fmZP?CBiw$&rP|GqhsFCu?kIw2*cUqFt(6
z@{#Z;{QY5@SySikn`iD!w`bJR|BB)0?&0eyv!Y%2JkXA4_v~;Ru_Rfi2#@Nj^-Ynj
z)u!*$+dJ?%9sX|MZ=l|4*3F5Z)Q_)`v+myo{AIvj4g52Wcc|LbL>m}$^VB!$BelbA
zL(@M2e>d=V<7)~XMdgds4eZ^(-aXrHI{^G6-UEKs{Zd-pf~}T=9o=>+w(L%1KheQI
z*~bnYDUZia_RD<e<bBfMD3=Bu`eR;5)jjHSZ>PW3dnmW^Uy$A1Hon_k`p3?c{^7!u
zp5AF+ithfE_PO$PW}40V8sq}i^<J{I;P`)$e-OH)OMB}7#4k_xzsjHd{&~l#esgh@
zp8st4)A&&ucig1&g7h);PIO+vK2pOtlK<gk>}f82ZQ$EG@qiZooxuapt1NVgwEP!u
zpbxOOO=0b}1~07}Utui0Q-8d~zsp&#N;I%Wdq!I<*7Ho%X$Lkw@u&9%FY|Fa&q~5u
z%KlU1$a%~U|7&=M0<Zc=_}AWfckb+gpQrbM1t05#k4e|`c`uq4hL4Fx47>~-erQ38
z7k7FyTI*@M_-|$!y-1dSr+x_VFTEe)@UnP=e6P5}%i`i?@MO1al^ch*sSdZFr=VlJ
zQ@?c4FVA8Fa%u5w_x~;bR)33!r?)xtUD|97X!F_VI=xJnm%Ht~_FdYmI0*Q5p3z>F
zwLh&t-h;QCG4~5!%AW~;aO?kP^Sk5QrGX8MQ8&JTXq-3)jt^hyiu-nV6|p9mvFWf|
zm$Nn{9RvNs&9Al6^s!Ot%;#x)^3j1Tbf5t-Y09;(`mq7HQTrr+p;t?WDBj?Qu6cIr
ze~-30yiWMp$=;cNCeImkXmcJH{HS2QIn>PEk$-N!s=o}}RB_cCvt<Zt2vymoeO>7I
z@;zz6b{E1I#*ZJBpSe+d6}X+dGmfvv&y~Dd({$dyQs%tB&U*p%wWsPcE}c@Ja9YY$
zM}6`~E2X{`r#|#{>a(dYS<h)5Gf16<NuP?{`j=k!srOXfdOxGx;9l=eo()&`*AcG<
znA^||YRrhbd^de!2l`7&u6O-I9i9Y#5Kn?fpr<=$B}uQS!M@RE`6&y#(J7iiR!^rH
z+6dp_EP)+Ke)=@_?z6#m3clBa4*qQLA-H6db9D%3om6^6^F-{YMNwl<jMiiSY`rO2
z=E-HhIOYF%1b;`ZpC{wBcsR$zm-2%&#rWyA&Ql+tV|<Of*1~`0$wfyS(^|0u{R3TN
zG`>P_c#LyaiF^~+V<VRzw;vn0yLPTMa`_J_Ug*hXzuF*pn>^!sZEQE&IOE3R?!?q~
zY$)Se`|xAv#0NRVg&m^9kFFS^4hAJK<QG@+-Gk5GKi-m_-uLsb@h%v*;Is5K(!9?5
zI^b0OmkCbxEE?~)4&yVAawdIrO)$K6YSx;_IB#x84s=EA8T@R=Axp}JlVAL2%9Wq5
z@g&QZ?xXVM%Nw9PJv0B!P`z6`W1Kph*$1JvU~ihI`sLd!zkqkcfzoXv9sTxf9T&Ra
zv(@$_biaw%tj~*fL4Q}$XX*YR>Z?S<2<J=&Xeqg;v3f*wwCLWzyM}ul-ep<M<wrhY
zV%j&ab-?ZLBxp9d|8RKljCHa~`ie4H{~KNG`mDNpm3z>~!9{U5^sG6)v)V+zid~KM
z#nuq^i_S7<-O!1N@yts4O}0G#X^k($SO%sU6|6tlJcH`l#5No`+KkSUelPpmJ+e1>
z#}q%znNzYgC_TPTtrhH%H{_|9%$>2GUeBfh^>kvlQ~PCCx)gfU`lFlvkyKj26Nk>4
zuq8|;z0RXl+5)~0;k}T(`0@ohdV!~ZKepa<oV)mT@%K9T&Y`~KnD;niUVSH=oA`Or
z*Y}v%A83#84&BasqsXK46^fPT%}Jhq?WODnZ(T)6d<yU5!6~xKX3CsV@=eRp!}R?I
z%6X$G*#G9Fp!Ut5wf_Rtk?cQw!|*wF`_7_GCGA$tcFoV3JU?gERPt=H@y}IU7I3@h
z{MGrgnFvO~ruO%J*wg<b2M60?!#wqljXzQSLC*Z}oQ46|=Q}<I$YO&t9UK^Ep3)j1
z>l*OAm!Y|W&)_e|Txsl)b6tAv9(>Iiye~jH)k7T-*PlZ^)SAaW&)KB%Pim0;J;k5J
z>x6IPKR+s7HyzxCunW6+qr5k>&*53_f}<3?i+{WSPvvh;=4T!BjQn+}{MggZnm^It
z5&w7k;^eYSc&UfA_aQNd9!gSk0Qf;!TJr$o?+Es1+0|;<NBTOtzyF@nW50p!7u{ve
z4d7p`?-TP%k5MmUA*a|Z&waQA|51#v^Yq_v>0NW)DIAuZIe)Y`^T##V8S#&6NczWJ
z4$j^$td9cgf`PE&TPs+ns2@|f*Zu!%xHHrGI=x=^S^BSJHqnPeYiVn6j}@QR6W#O!
z@5(><11b3^E$_Ni-fb7!heeZ;p|#G`$hC9)X?bcg|1^iC+f$!B?R&XO|E#mie9k}B
zf6auq*I)lWU{_m|e}Del^WT=rFW=E3V*VgMI&r(I?kVjL;ulzg+)BGP-wOP;vDlZ)
z9z339U%Hh2fZA6PCg!i=EV}U?(0e+R?pk<EdVA~Pv68cpQ&**@7Z2#9yaLMeClb>f
zI4D;z#2Lq`w}<<{K1qKc;t$4%DbzY>L@72T&NR&}iw$LNixXEUXbma0i04z$VRBs`
zS^394jt|J9a^k<>^H<CM&Qjo2UfF6a>=<S84Tc}XW9Pa4vjh9EaDHej@g-|)a6&sq
z$v&Fi<|otqb#-13cImd`+|%cZdD!A}==&Vxea+R9Ba*U}g>2<%ePF?&t-HlnfTa#t
z>Ub}q&UV3-+Aktm$>re>EVy)QH?i-YMpk%oP%zd$rY!dBQKgLY(pZ=A6ic=Wu&yNg
zx0^2y+@#}k;IruGAaL~p&&$Yv&7Sb8`=E;|u2;P0wnE=)-trDZ78=?*|MC=_K|6wR
zHka`BrzxlF_<$qlWVeQ_lIJ(LHls9tF|dB=Un}6Bk6@E@_4*#{ls}}8wKtX6$-8SO
z;4j1cFB?#;ui!S#aT<#~==7OsWAPf&oZ^WC?5d^wOV{Q1qRa1P53J%W?S)47(#Lzz
z-S;B%$}V|EU#E>{*<9agJa_W%Z=Tb0)4;Z#?cEu_XYn7XPvKPh#d_%3onxv)R`hIo
zMo50#_!&b>HI?*>pLs3|A<G8#&bjQl1$W)pcuo`|1CJ$EA2Jtm>SeX;e}TTsPvLEV
zE@DCd>AHx@Wqxhb{Rr)CroE@mP$y=G&LGkL1^Fp!AC>0a5HXhg8}7wMI~qT*+*Zkv
z?F(8DOF!E0wjJ4^8MsgTCnwK$YL-72ZD#In8~9K76#nLqc{~5RB#kD|hIjXy@?Vq6
zFIslLzu&v^d*NdxVaquu&f;w8i6^ew;~T-=dSp108Tw0@E7Vu}7l+4W#{Xg_$Nv)A
zpK#tw!k$BA&~p!dg^eTZRZZ+$-!7h$O6TcWx~kH6I#?rg_BG?r7OlTM>yH6LeaHZz
zorzOrdBW^PGuAGf^6l&6e>q#4f$e&4`2E1|2mX>2{LR4MOr6`_1O8;Xv%z0=2K?Jj
zm312aX5ep5ga34zv%&u%;>7&^^H=wO$hY<K|AgoMgZb?bqwOWn4kIqMHKO=_&eD3;
zvimRM`>v7pl0(EsGFARgi_631<??Z5a1G)b%$3PCgli~Q7FRacFs^gBhI74IYDSK@
z@giS|XZXSm$kE%L9skGLnchFDk4uV9$3=UsJMMdpIjMG*_m6S(aO2O5{&qDyKgAP`
zui3Fph!47B+~tFg44JZRIx=o}QuGPd_B3BK<J;<-Lso{~z<5H>D)t};UC4U1=K6xq
zapnd*uXcfdI(lbuCu9FI@^&)rOZZm@&B?EUw9f|Yk3|3dMJHdectOC450m=WJ|p_2
z)IW`R=F+Lkqr3roMl{5~IDAKEj)nMtijNH7zmlQS`LEKy0sqk5CZFVbwdb46H!f~;
zckL6dT|)aZ6J<%ASLdvX$MnN*T--T08=Ta`3RttQfNzW@rV0EH9qpcS2aoNOqYJ<V
zF=-vY*bu&|Zz7|=KGxH}hPJH<PKh4L@i^yrYkwc}X|X39-hJz@@DD{#EYY4^)~fel
zV>rft`Ow-$_L3X1O;mW%b<r*DPq6PDUjbYCDm>5rgrke@9)>?iGy7x9?qDApdRK@T
zum!9UWRj<JnX|vaIhWDJf#JLh&2=H-#}wt-)0L-6abw9dg|fF5o8ACAYqO{QucK+N
z8PWb%lRIcG@!c=+<C7}bf6m^mBRN6*ARN7MlM`ou@R@qQ#a=t`N-Vy&+h@SpCgI1}
zlcP8y?iOxRxZ0El9@o@Qj$#8y;u4zE8DUAh;X_;!-u-{TTL}Bfi_l`yt}>?eChR(4
zt?7e5*-*Z{oqa>d90vR<FK2#rDDP1x7O?zl$F_c+a^fcwKa*ZmpVlVzv-~!!>FBbY
zTUiK>O2Ve53_OMMu3f70oz@Q>4UZ;X6S%a%W6<Y~+%V#SwMwgW`lqz`V$R$0{MYxW
zjxSS(aQXmn3BSUv@F@HWmoARAkIu!(-;ga`T+1&aQRdr)tX(4=7Tc+F=BVof-@W>r
z*xrYS$M)TgEo-oMW7lxs#-6bm8(%6Iv{CleZsZ`XWpr_FcUQy{>uT^uyZ_XbpJ;gU
z3fZN*e5?bP8P<fkUro#|Z}`gU#RYR^n@Ke6xFRt)eC0(ybJm(SIWgKNov9~E=5%~m
zDPMeRqvYZNvfBUO@Go2P{^7s#Z15vLx$=^DApFU}#YFI{SS(ueszs;ihCg+SmqO=?
zeYO<(bkhzz@3n4#Oa$*qjwxg(@gLXcycGOCgzod{v%uxzS#_h2%=`DhNq5-h*kU8(
z8TkLrwEqoh|0|5QSL*<m_npqaEbV{7>mz=$bRTakYnYp~_V3bP&)9QfFBJ@r4WvD1
zJrLRxZgw(fa%L=R_?}od^e5WWzOZgDYhTb_H?-Fc?TN-ke?1O;?zo~6IwX!L@*d}^
znR71@E&j)bcj-$9r}#-zmuT@6PNCU>I4z@no)k_~_M1&6JjJp9%uH*$a47ltU+MoF
z*<bnpqW|-N=TFGMZhsEEtN-z>pQm%AUU}hk9}Z2m!`VCLOYR+Wb==VWsy=YihMa#{
zi!-m8Htc)OyX;%cQF`yUhy`kW2HDt$9qJx?$#!QS;*+?bhRfIfmOaay$*O+)AoGa6
zbq%*-Kc?QU;iWOB4)WA7SLypX;G22B`1C)sM0sQzxSO&Dw#$7N{@uQG`@xx`8G9D=
z<);kFjh=f*@`vMVc%6%P<8Qxi;Mi*cSJFq|^P?!+p_STq!EZA5V{)DQjhnpE!HZpZ
zj?C3shc8CViItw}%ZXtm`(+X?16*p~=hj<mLin!b@V|<^goTRh$Mb5=uN}&~ue;U)
z79FeIvzk4GlEr@Y$7D=3LkxlNAmWwLKAn4CS0(%SnBtFu%Lgb+K9+|0<_5-?MVYGe
zb?TE2_m!kB>+q^LerM9xWYc%|JyjzAom?i}KZqY(8SOZI=Bo+g&jKt*cB6YyKl4Fr
zh;@$ybD3MuUsLtGg6v?Z`x`$Z#trk8p38WCif6TJ$8+*yJiVqSTaU_VqFmX0UM3x9
z!t|f}4t<c=q4T+t`-VAZrp?8D4|1*c+Dc!1<EAY71)UKdb+kGgK4V26LgsM#<LYF8
zNPo4ui4%+7p7=0rV*e(7$Zci}F&9$yHQTYbKu`EsjzuSnSCiIj*aLq~>|FZl@nK2*
zI3PbmaJm;cqwB-W1G2%>*7$lWIuZF(vJC#kmvwO#(sueJj(;t3WQ`$Sx0%R(G@lt|
z@`6j7DW``tg4cx&8%4Qbz2uMByr7%Cm#Tc?U*@25Q-`~@)oe<hKQ5Um(_E}r+HntS
zi_k+D-`hne6H^lnzrI2-)!u4&`if-S7vO{5#gh}qt&R22kl^$aUsv!6&O$E1c^sdA
z#iAJqZwqnuMN6W~ZsNpr(cY$|_D1JyC(2g2UrCh<-CQ=XZI@EM+rDGZ(LT;|Re2wQ
zMzAUL*AB)vmi<n-hVy|IeH=e@>{8eoJe<4Y_IuaW_8I)Vk~KovBea)W`>@}*X*RUX
z`Dr_n=ciejW~9bL7wZNA=9K?P(d8A;b{sn7%%v?|cbCS((52`>@z>;!4qtO%kdKAn
z$N>hyT6<q|{b?95b0%7w;4Vm|g-?&w^L}`Y;Kz31_<VX&?bAP%Mf|9(s!RO^Pn}nr
z#r{<8%F~X$MgO*w_w_wVyeOZIy-?qkM*H`4*SetUcj?zj2MvpU)9VPKUv468|H5Go
zEthE>FD0j)8NVjEeybR#vNK9ol5W&9&Ge7X=KSsu{1u*W6Q5lA+hc!A#v)31#yIDU
zD%M2O4>q^;y1ynKoC<#N>23WH={(5gM?4<Rs2tOq3Ee+P?4nNo$=0ZtHUCEXY4FZp
zc!<S?uXR3jDj56lU%!!aJDZm-?Q14pNM4qS%6B~P$eqa8d9Bava`doPKWnDQOSzri
z@vUKxH&RS_@da1(eXqzwf3aYB-%Xq`5$9iH3KsEGoi!|Yh~o`ik8OPjd@I(9aGh>H
zO|CU3WA2>rOo)U%Ig!djY+{-A;U?OMZKdPV5v$kM@tru;5&wwrT0irX%Dx8NcLAqj
zZe$21?srj7i2MbH|MYw3G`oN8f=m1Au=nU0y(Z$P&jpKky4Dx<{8#SA3h(|_s?E)$
zmmjilMXb)<`mc1NWznAS=brED+K=Dx`kcN!N*@zvs#X12$F=uTBbr|rVEtCH0%U^=
zGhb|{Kkj$||9N<k=s|teat`O9)>rfqWWE1;oa3goX~kUgFTTC6ojwYAb0cwRMtdRh
z>GvC*zRGW{0B#hLR(}@fkgE*7FY=7-P^`{Hp7HnsjBi~OG`nWAPWe6N$z?@m7lBcB
zf7ClZA|DawEJFJB@xOq-g;V>QDPzL?+xymlOX3pIzY|)s-`2l*z1KSZJFe9a-rc@+
z&mVR5Rrh>i^?Q7W75$&P?2V4S5&kPWeXAgRrFdt7FMQ>t%vA&PsjZ@kl4btBICLP|
zaOvVG?{mF5k@%?a+IHd*)UvjJ4?J6YGjuL$E$xYO?}I0)Ue(`Cy{cdJs(!cbT<R8#
z?*#vG@V<_|R~pfQo9?+3J%}dKuXm7dRwm<GC*_+w&KvcVO*^Z6GqEKl-|)Z6m2Y@{
zH~HpU^n+vy%_HIWE8kG2#=;ZSmnPq=lwK;n{IAG2zj*d6@=dCqb*XwB`G#*Fe<UT}
z@SMf7E8j%uGlTqKQu|WgNxpgM#A%*;CjLFhH_7v8j#dvQ_M0PLI{24<d1P)z44cx*
zHHF34Rt9lCDd%!8%yjs&;)@+$G$hu|+$)*Ek$2FoES}@*We33rg&3)E=6H9Gkjx-C
zrxQQK9AunPj4RENnnyH0rqB6KT#BsHrR~hgJ>Ch$s>dmlvfX(+a}WDbv5)R$eOGpQ
zjpd~Oi_Uw@E0&xBk8<Rc?Z}Ful$=rrU(_B0%~_odc5FOzVr_)A2l!zV^CA3v-V4ly
zvW+QS6S6@mGVSP7=^dHC!4vW7&yWeWlkVg)_AVh?9hrL-GQlilf~y%b*TBC{uW74Z
z)iGXkdkPlCeGyCtfK~id-(B44yKpC1g+IaD$v9RSFOc@uv-B~zeXTGwJsR}M-;F){
zJWD_I5c?=-Ob0sk%IeAZuaVA#iN(9Ps?T$xX{Vdcgz$wu(R7dGPY-Fz$bWMt`>UDn
znz1YCJv4$CCtBzDURi&LxY&NiiJf;&o6SE%y_zTVta?Ml>(jc6pZetw<<>7a17XS{
zKAWHV-So<nPOk%>J-;nQuRxafo2d8MQvCXOwoTOLJ|zr4v`qhbv|$_X*5cBB4`;CW
z%&aAizI6|m7+-HaeKn}{d*#@v%D?gLAK&)$2s3gRZLKha7h2FjCUZ<7?F|w?wve)_
zO~ECK$<WTfKwNRTtlls4jBe9bVFo#8GN<QRN4@CBP9Aj8dDcT8n-MVimsk%Co1wNz
zzr27wH~Zj62a8OUvqaCZpLSz|KwgO!SXS>kU_GGoo%l9!MX>KB;(7n7G1%8ctlsLC
z^=pI7b&V@mtSvz&FGVM=&h$pS#O|(LY;UXr@4=DSlb4u{C%<ZM?BV@p`t8oInvIFY
zW@8u6`zWu#%Id9#_FUam=SdxCHc_n+f15u3{gg87FUhmgIxPI!zWcEmW>DVcPXC8z
zqEn(*LL0+q$5-$x{ASBJ=#0Z!@5|7+3r{)za&gYb8Jha9bYAd{A5VYtTZzrJmgz;#
znum>3@_^G0Yv-&b0dyAZ)(+l1-}~5%dTayo9WND5MLUzP?nk%Yyl%*_NPzgu0s4Lk
zbJa$0r}fafKbFe(a&vIVQ0M<`{JV~SlCNK>mR_61TsW-tD|`<vDebqQlPYW0lAvjM
zxBz^5kn`0Z!M%dAe1e(&uK>ma^oy7NuLZtJU|)gk@I`P_MqR(W)81G~%+mGrgVO(C
zq}~6^`7KwdZsEU{`P>)&d|#s(6#2pY0Ctgzz5p@VDzSN}>><z=e6>w&55u$EI`5&6
zG!|UE4+HNTUr%gqr(WUIej~A^g|?Y?D|+3KB%CqfDpghhU8<Wk@q_Si3%JUFM|1;T
z=V6C->hqIc`2~l3eB8VtzAGQH)>z#YSH$g4`Cp}v(Q0s3)qGC$<g)*YaY&xy!%<3K
zml79pCgZA!vi&RVWA_l_r1H7a{vz5@%eN`$kwfX%>q=)tuPHUr*WmrHcAMxwyjJv;
zA}jiG8EdMvfAGl{cXn~kM{o&z3%Zj{V<vsSf^xP|PK@>hPrSIZp1v=$IaiPGUSz~=
zGrWKFkT*e_JB3%)&rdG<wL_m@X58GHJtU&?Z^2(_U1mn49-5j(-U2hIH-`RD&6u6p
ztnxBCh_kSz$qeZYgQGepjnx~+zERJ5X3%+ue#q0<Y<AWA@xkVs<uQ&wa3?&a4!8n*
zLl^6>3niahcy0_Q)7J4Ucr6EBtGAM~&=Q<oExkE38XBq#Ur~ThLn4Q7gPYcdNH1BX
zwyy39w@uyn8mvdxe4hRh45icu?hkoJlpZ4<?z}U~CqBp%q$?vvw))~X#Awj`F)Py(
zIiEAmtKj=H!AnD?FH!_ub51>Y$>^QJIDiN3s%&Ph$oM+Cz)K1E5?*Bc(Ku>mt*S5$
zFI~h*34oUp(|)DeQR36R?g~HrNo@<$r%qdF)9-+(3;iL^{pJ-WR*{)ZYZD_<Y1`o+
zerVrq|8~-0i(46hFA2Y$uO&8PtJ7NBO2eGz;aiYzHgiY`?OYG7*vuh%4(b_R9kTMK
z$tS4mZY$P{&F6^^m^Hn~Dvr*M{W1tGduZoZsmp-_csrq0<@qdn?sxcJ2);!JlncIt
z$AZL8k^I(xTvf*vRxFq14@Co^;;3maj;>=b=53!$+Rz#Ihpq*GUuPe!<_q~MxbVwg
zP`Z+ItFOt2n>sYV)Me&PEAW~B)4cASXaW3XGxsR4U^{FLBO_}~&cKt#|DLtH=Ply#
znbuFSmSv;&$}aW|($<kKKtHSgIP#bD?Hl+W;2iMEb1d}3FZ6}am3-))7n$^Tc=0XL
zvmfI5LUfIxW1M;nbZn^0z!!%zrVBn}#o|*2_ZKWTvB%MyR3|#HQzx{ZtTVN~JN+zm
zrt_Eh6yg!VM+9dKIu<;tPx_J0Vw?=#T4;a3<{NsQY!@NgCfF6@(|y){SIIyHlLz;!
zKa3$3Y_5Dm{_B)~c{6cXg)7mJbWSh4CLmr0%zox8`2g3!|NXyZzT&&dn}v*H@5b04
zvEVtIiG>g*9;o{3iQl2aQBHF}ezM837NJkBrmPV0DCNtmvO;S=Hp5O#oA&t9Kp%5p
zRB3W3%f$h>JJig$yPKE@d(qbnWx4-!$9Ahd_fh#H$(OyJz3opz?`nhouU}f(SIv7Z
zV{_s~jcZj$)kXEl5V^ep>Te;o__}j^@IKB;<_v=bW1|v&IR;#956+1C!K>)b5Yun4
zG38qCJD;<cbmrUn?77dNZ*HMYo_6F&{>?;QQ5{W;g=${|^<?x`Qjf}LW*oIs<|1N3
z`~Li;z8)w3gs)ZkJi;ew&}k#hv|m2Z^_*i8=6j{b>M(t^dl+B6JrDb00e^VyKF;(m
zgjR#lc`(fS<K155aZl?Pz<WEf-m_0w(QkGxS=Gb(OrypARAhM0DT#FL^ZeArm#kX%
z-R~YYCc6V#V$a!=#38<FPm{&D=|%W;!FTs@&b8{xBrejnkK#80-22R(^!MOMHu7s^
z7&OMbRcqz+E{v{Ti!W3EEaKwq03Yf7v)-63zouPZL>JY+BJP?~HNS+IhpJdtX(x`b
zfyaTL&8vwaku?Or#|*QpMY0a<I}dtaVP!;KA7ZxjAjk9~$JoXjQ9cj<#Cs%%UWYvL
zO!iRD3Z%{O?#5xh2=ijU`er6+>hMJ@be{PZPkt+O?&kke_wM0QR_FfrdS-?soDT_S
zYGx8ph_<3YLOf+MLD1UmA*9u6ck?7ci>AM}h_!O4OaiUewA~D((gt^#1T9R|ZmOW9
z?JfgYMPv61!D`#>TPNY*Aw3AFWKf*n=lje&5Gd~7-q-tH?{&R@%r(zpJ?n6<d)?=C
zFJNOi^Gr-m#LqY6rQN3-QL?GZ*Q|Bt@|tGmdp<T6Y%=>Uq_6e#Rpp~g@9C=<IJl`{
zDEVl^CNh%sNN(3{#|D{go#YV?OP+*Jo1kn{@VpFMb#H0z!5fR`={85VzYI-L+gj`W
z+y6fG2==R(gAL%xs?}>-e0;}&C;QZXf0(^OUW2~^vmesGa$vTT-15<-U+W9Ne|)S9
z$@dlT0_~AIjBa}n9ZO?54891??|Fxza}H`>3oN3{$D_zmdTuc<${(P!CwusII@cP{
zU*KQJr997V7oD8XwffsYe}ywHzFbIupW@wQ*1<9K=qtI-1=hRx*LZc^#&sPrIW_!j
z?UC_kcu4r7NG<thyRSFR=X{^IC=#mUtkbjKM?anBLFS@J<EO%v`_6vv)*t+Iq>b-i
z<UO)C@i(QB0_I3~#&1mk9a1#W3;eR6kp;j~eqPCt;=?t}u^(IyvW~^mvfxL;2gw#b
z<cdacvjBPPYRayFK70>e01ew$9u=+ebtb@>H<*_&_4%DL<XUEq{93D-`w%oLfL!7C
z6HnnQ@ACjp)@xGjDc5<N^CG0v=)H$;cz2{0-n<dnR%P5Z>iR6jXY&~A+M;>MWAxvB
zZ^KI#dxFVn;NsJaCk!3fP?Vj_MP7QEa_;*;=6$o?!|&4gy33I_-MY^8e=0T+pT2mH
zlcxtc<mjtu8<x%af$|sR|HWDa4mf<ehxdiALFd><AiIoWgwt`&X&&7}dHb%~+4%=K
z|C?`&&$`JFL!$f5(h<VXuIXNpIO?AqZ^<{oqdE)y>^fKj5w#<^AV+O|gr7B2Zzu=3
zgf{cvvli*w{%z;SiD8-kkM#wHrE?bt<}hEs{>B=~HmM4;ucxk{GgVj68)dFj6~TSl
zx1sx1ct+r&<!e%P0rqleZbuxcP#NB%i<KU%kgdqqUO_CFhrJ^!$Wvs%k-|JP8(fO)
z!k4VvQtrEQ>Z>N+DT>^#HNOiuOnJ9@_71+Q;acA`;!D;$^`(G!nu}`Qhq-s=1-Z>q
z{orW6-y9i8T@Bz?;;|og+1LO4XyQA+JL><ZzZ@0cU~a(OaODohY2cggevYu8xGU-u
z?=`&F9z%F&=??m4SO@CQqnvr@&-Al^XKp_O<bhE?H7>;yrRzSOS9Ab-W!&$Pk)3fC
zGPVQsTi*#b`c{6Of{&_aYiu_Cl%3>3`ZJ|3HPb`>al^i|ZIpS8Gcb^uB7)&BxL1Gs
zuN~p@$z|J5$xqq~Wm(Zm$v^jkZ}Radj@+^9<Ac?FV;^jP`dw_5#0bX80hEVrGY{LQ
z^1>Vk*G_m%k!;c97m`ozu9@3Y-!**&USDUo$4A`wgrZ6K;TNzT;U7nc2dY|SOw$67
zNpASa9C?wk>i^T^WVBhg-T(GrSHp{&kCyx6M*}9Id~v-y(K{0b!BTsunPrbE-_H1F
z*_Gw@MZu$*LBWp1zY&A?;^w=V!}^_^k&qy-zU-6<uKkSPculD-S^NrTPiTjKm_dJ-
zP?W`(g1nE?XZ$6jG&g$wA+m&MfosoC`+D{`biw{I{a{@s#soV=?}5ppa`_w24=%}n
z-Q!$$lV>=PV{Qr%Pk;=(XtUmbjrWOkF3e+h2bUZe1&z8ty57cjk<VOC!*)<}l|gp<
z#+pQ(pY`QGYkm38xxR@1!e>BSC2LE4kNpZA1^%l1L$&aqr|-IFdnkA@HY|MAT#F~^
zxiJ?<*k7<n??U*d<Rgo2v?Aa857YdCNyFzie^0Gz<(c@oXqJz6@|W#@Ikiq};EcJl
z({mN)+^h9^cOLt}u*rFHLQC)DnRG6-8?vWIv=6TTd_<3B7pq?;F)OlvglYbXTh@O`
zMD|wayZ9v$`BFtoq^CLM?OBl*DE|Z9_nY77kxYGdabySYzn7^)^A!qT8u=~v%wMVI
zE($)Xe&=2E;)wDXB_^EXoquNJS-oRi`HU-lX07&B1((8C9sCSKzraCf%+q*wy51QP
z;;Nl-IPI8Okw>{l-d`PvkBiuIu`f)9b_3%Ed<XCpY~*I<sqg(WB0tW2A4*&rQI00?
z>K8%g-nILs{d3A8<Z=7~ve_J;Xp%Qmr(*Wu?H$$R<lo3TG@KjY=S-B4e_e}swPb8R
zd>FZ8s}1kkhR>>owOEUc5d1j1<lZdy0kE&q&N3avHx@V9#HYjunPfHk-9l(xHS5{~
ztrARXc^=qqMp}k7M>&h<H9TYOm%cH<bg2CU@cHBT2HZ8~+8}Gt8>)~g6q~Ta@uB23
zy~|ktk$$zGqF)-X>z9@vQuJyeV_Jw0@&vrbhkUSV=Dg%&?02h(<NO|c?CrW~tgmTj
zt*>d$`da1iugMPo+5rEmC6694z3pjyD~W7enFD<s(C*;d!MW^3wc4fUZ@a1@d5kp}
zy_tQ)*k_&h*fX-hxgGOOGI|^PPpVCF(+j3!^H=c4?Kd6Iex2uE2`0zV-zYv1FZx<|
zgemEM2!A7M`hH;04V^&FZ|W|}*#F=$tzVZPFt7by-j6{q)3>jBay#vTrliN&XDlCj
zZaaEk<#*84q2EObzDL)eMLfkN%q9D?!j)I>OB8X|Yd!pM;NB9wv#DS4v&k2sjqq?Y
z(QHk}m*lqJN_)e=C4B9bt@Jzk0(F{6MN!7&|9-Hqm2ri!XKmv7#(BYHiuGlUHC3E#
zmZ7cky_`u`<(oda?A5f)Mfs1wA@!pMyTL~v!OQyj(fsV6%D<6)JIIj@W)){dMjd%5
z`eAm7^2SH283!`1g<j_RGForr8vljC27|0otTD@<BUwL9b4nu5aCVR6`d8W0-AX*7
zV7KC~;@Ri@jd)`GSkYsQGjr~M;P#RBn{o!cU?-Xsy;*ZanGaGk)89`ls_w;R4WH7t
z!S}06G)KnaI}?jIL;Vc@U<Gv+689v!=I2`QRo!v*lXV!K@5sWvLC$kYz@wtzlL4=L
zSYHO*R($dR@cK~Q6!3b=S$I9g!E58-HGG9R&F?3dIWX{p*Y&331Ms)40-M4OCb<Zh
z2shg*f}Hym<e76e;nrV6vz9?GA7PL3vfagzZG*F8+v<ZITT9p%&$@V)?-fVzG<8Te
z9tplQIQTrqiOZ;E{WpNqp{dX#<~srX-2opO&6x8SlFJ#~v%QbBe4Y01`C+iH8F@Vn
z3{oECGv-|}6I)-K8*6)GUhHZ5)J6<P5ZThNbEU)swx{zxNPlp~mME63{D{XiwnVSf
zI85>u>ehG!SLjlt6?hf`Yw?x={5#*pOCl=!PnojXS8xhvg0myjc<%6>9OgIO_FfYm
z9<hQttHty#z=j)q%aIq?fCtGk)k~i?ex3O1&eXb%tl?uklRxqxXQGsF?dlq*^b05E
z!l2Ju?NMwJQ-GxnEEua}^Qr-s+W()Y7zXwur}dY#KB4FT!E@1NvmmV(_*l~in3EoK
zf-rT+Z)<F1Q*?$p;xG<KSHS+af>@rqQ~FT4K6nHBJ@eY@5~Yq`IZPbEsFzRavU`Eq
z-n#G@bk)nqEpS<+aaOqU{Oi*D+#86Uk?!E=Yw)87p(7fP`k3zXbI$rlXWlD%J}Yrq
zMAyaUa_3)stR#53bFQCYlq+7N*gDqfzoPpymTj560qsBG-Z=L<A3C@FN8HEz>4y4V
zaVd+_djQ(iw*~aaKAGl8>eFf4MY>=8?TyYpG|9^9D{``U&#OI`alW^F@V?kM@EB#M
zeI_`0f@jjT)sH;nc&&#j^0PLx-$n6D8`h+Cige#6wBJQvdngkHr@`gD2L2+t5+!af
z&{>{T-G2BZ^2aaa-(uaA!ZY&vIPU^ku2is8eC3&PYubN;Y}hWCk_SI><LP#ogUoZ_
z``OI%@QKt`r>uQ>#BFbL#<wN-X*@j_o8&X#jK-vR$6Lui`l4`L{eJLj$M^nw?rS`w
z$&)d<U4HPyiR=>fS^ka$b5Kp*Q=PXQtVi!fukj&E)o}0c#8%6A^L@diebCz7{nm!s
z@4r6YqkZWx()Dh~PngCl&O35!U%NN|YnLNuIk?cBYmx(56Iuh|m$0|yBHtkM<Y&$@
z>>lokS-kHa9*Wg6j!@s#vYj|SzYzAz;0Vq~&ND|ib9BA&uWT{k;l+E>a~5aL+&DM4
zZTy+izq<a)f0%X4T$U!F6>8@Ja#gc7_o=P$OIEU)IhCHTcM0%O&*j5&>yiw_8hlst
z;;c3Q*z{TpUmo#rp5S$#Jsscg#&-!Hmoko9XUs*`O7Ej|^*iLyF0D1mOo!HHu@5>Y
zCfMrd#NZWrB3au^vtr4ZtF2-1Hkxf_DyB&>SJ=^<oWxP=pIhm#bi{-)+v-K5I9sft
z-kx2?oR*`z=^Z@%i1c~Y^8w#$zH89=KJN`Ce}oSr362PtOSvD<eSo<sGZP(qdtkWa
zor%ohr1p;g3p_&S7hJLBY@5e7ng{7TVdB&pmfC$~X1rs+W=-@akdY<N{0!RXj%)AM
z^tfzfl?_X0^a;lO*GyU_dC{Rs>YvVL)%jNM6YuQc|K;$b8OS=&m2Wb3wV&X=dj|CL
zS+2|A&&X_>Ur5Kc*^I|*LAM)joN)+#*~A&;FT8v<e0<C0;HCKZ3f9A&@IyVDI8#0k
z>`1gFSSf$9Ar{AfA#s-QWIu6{HQ-ziZ6?aNXP?+nU^5H;{zZPo(<Ohx*klumgGUMM
z34(jL{_@$&pgpov3Z6D_S;e*BDc_6eyoc*L@;h7ni_ZV}rPH{TUVr`b`yd-@&HJxL
zb`N4(#3z|$w)utY$UoG(#`Xvv>G(-EKabX{@J}(?qVLDCuRjGnk^hC*B>XSI(gyHN
zd$r5nLXMmioc(;>cU!PA&3YdDMjTu2jlj2?^0dEIao6dX>#^-^j3H#kA;*nw@4mn!
zuK-tdJw-Th0kEQve&$3vh@XA|$D}=oy}+kz*1vV;-WgYh28WZWSz&aeJ@o5sc*L8W
zW1VlA`d0Lx7ts6m(7y{l6`Y-KW!Hzn^9y+P0%c#o9`ii-kzx!DJlFR*;O}-|o&Pp8
zZ+vj+PS*W1ngjCjb@ET#Ns;s(!Ke@VqJFAxPdd*=w;$t~=1Fs;xpL>}Gt86oJaI+j
z1ZBx<$NA8#qYQnUqOpRroby>Edg6Jxpef`>hLX%YQ*s_>B`6k#d7Nve7EA66aV`Ij
z_)@?Oz@Fo4XMDn!HQ>L#!Pk(k&!r#zb<%s-AEbGHxNUeubE~=5IHjkFXTI?~{2Bc)
zF)}UF81lCNiDwSZjN;5&a4Rr<Zc@4<`D8l$w3+5(SK&uBF|OYYB*t>hdGy4ETEuT?
z{j5NKu~<XS9HNKiG8X%#xl0T&E3yrRIfJ|QVf@74K}|95dWJ{p@axHrrSVrVe%Y)9
zPr;xrepMt52ll9<OCrx9!-Lzuw20mGb$k=JM!^q1^xc8Y2Ub${q;u)H!o{zE>yB)O
zyl5f2ch_Mvtqb%T__}LT{RlYMemSVMv&R0|Ql8j!Uv~}tult%fv#*K|U9r^b=qhLH
z0R_ZBII<M7e-HL>&5;2|SsybMYZ?F^<}H)9MFY1WcpjMC&|<R={ou8H)?Z`3!i?8h
zi%!h#==MX%2-;sMcw)z3J(fjoMHdZ!KpYQq(F)ErgA*HAcb^0&!L}V3NG_M2H4D6V
zVJliCJnH7(!TIo&XRL+#7c*;tHKMgZnbW*8n&F-HRgr?~aOLuA&ZKV@=#ML~74L+f
z%*BWN#&mP!POd9*@G<V;yf*s(9dK>apy=J~ooRZ^cyX1Pyanu+>cLhUB3C><&NZth
z$^YV$zjKYs)v|twN9!#>|E@)@tLAJR*|CY;>)4P7jnnlIu8DJNMc28V`gTmhAAnB&
zXpXtNoc}uTWuVz!d3$h56TaQNklLXB-PGSkKdL90Bfp~@F&Rbdx$CGlzWN8DQD331
zJN(SCH@j#LWp{Aq?rz84Jg~l-wo>#(cC1?Z(q>FCF+zLm-mOU1O%Imt#vWK}Mihe!
z>;oHFD%zo+>xW6eYuG#5aT&gOe6}44{0#leySZNUO`3mfK4rgo5Bi_x1MD;KW)&TG
z?9Zk>ZoH!;zd$339J|hLv+pBl&xg>OO?4(2#eVYpsc#iWcSFM;mM&ox?N~89);iGH
z!_pr0i_VQ9w^(lbCiuj7@NfsZSJZRfsAw<Weqlt3LmRLON3qL*^Bw+Mrk6ZMeFw>l
zbpYO|y*iG}Kt0QH()Gqak1T}#+JcQNv^coLzTZj)*{2<S&2$*Wr+KoLR3N*2X?b)#
z{36-l^*VXTH&4ap!gX{pv<|uu#a3c_<}R`L#w>4L??HzzA9tD#M3DnrIv~0L->V8a
zIy}A?_<J=vyypUJL5tZNu^ZU}n|c{~XJ{HRTcVld@4JW?$`RLmzp|Ej`#y1$1Nol<
z?h;2o@;t7w4|V+l8T4=70iBASn10vK?{39Tr8?XGZaQXwU)T&6#j)X3kHhbPUtKzT
zIW%MPBkc9Tr&4W3zSGUv8i}FkHNzgd#^iN=7n$R(;W<t9%ck~Cof(R~MV#g)E4%4p
zPfpXkp(govYuH0Kw3^rjtTS?<?Sp5&17E6IVX}Mc{13FuqmEV7^_Ah-O$YN#@(sn2
z@P3Z<&wa#>E()9LPP~mg6r$W@@cKP(R(tJmPt&TL^XB`Co|~|Wv$W<+Hywe5;^$1S
z2mCM4T3{{tIiHw4*w`$G)FaRHKdD~)SMj8^U+^ULO#$(KwYPfYf9z#nOx0G-&!|}m
ztpi5FUjyAMT;=Uk?1tv0^)+mB*n}Hy0ruErcFr|he>2z2%4Tf!$dB(pBZF3U=U2fC
zd$?(ugq`yd@8HfIW=OC1R#SC5dUpbUckPT|2m89fxk>F6rlGPue_$-O(R4hHO>r?c
zg7*AtWA=Yo$;WS&JZ#!y8-pG2z+WVwO=0w}>&)QJdJlNjWhL)K{!p7W%j`Zo8ySGH
z6y70Uujxc)sI)mt`(Ely+}Ky5c$PPjuZ{WCrFP5EQhRB6(!LCR#-z_sycV7$yNwUJ
zF@<0BHtf3KQ6b}F-E|Ug*HmZBLmTiXe{c25mL0_1)j~_&nI7yY`d>N41=av`zyXRG
zsoa=5Ft+J}L9y3}`Pi6yE!Uro>AMH7G*xc`d&S~_cAbJ#ias}jdkJ4Krv6`xP4G_o
zp)nkSE(=yYv|-G^rV39(<tE^y^JN8-O~7a;^Sm71^N2Sqa)Za@xila}{E;)?OReO$
z;0*=fPzc=d6z!T20(XS_i}W1(cP;XPQx+MefHoHZtI$Vt_Sa@*Epfi{mG2MXE1Y8{
z&R78K>hvAu3jUJXT6>izSpbgLhCIph!LK>Ms~TGraitG6j%aMDoy&W*ahWGsi)?a7
zu?KmJJPfQc|2z0^kexz_xsDFn_I7HU_#E=i7MuS%ziVq57-@VsT-iC-G+zaLD`>x!
z{m#nKaMfYv_xiq)4ln0Xi1tC-TKSnwoHul0O90tu2KLeUucfxit}Go)@l5+)O>Grk
zL{no+Y<PA)I#oHiZlBO~`aDLpG3#x~)??bQm&|sabi;A&H<B+zJY9BzbL&=raOCTT
zGUygG&-HhKlc#8&WFPT;(KgW|m%bJLF;yj-;@N)YU8Ud&WqVjVl0(vTc5KlhbiI5t
zsn>qR!G$f4R9qZ+99(elVs{pF82!qqujJ!kEcSntC*#E3+1Lk!M?vV$*v!~0_C)Q(
zb|X2`@3BiXz7f3B_=oWy?bUuvwLi|uulv~-OmiCle38S9r>3ji!QIV&Nv(T}d#y9W
zcgidI@o!V>-r?Wvj}0BML*&c?-!0ahd??-J=#lKxuJaK0gYI`QwP8(`d1{o;JazO%
z^vef+j2;Yq%5P57%K^w9JFr*eaK5`@plWXM_xZ_jYlw;PAa84a<0Gb)*q34tM1Hk0
zvcBbmhJ5B6&ybV<q1<KXc=pskKC8JOUPv2-lBF3Bv?EzFEFJ%S#<P3>@mbwf#HZX1
zZeCBH`QD};)?8C9b?oHY&$E2wp6)7q$drxp%$^IL>$y!%y7@e(PtNmaGS89kYHs3r
z3-{80C|gtH>nJxl#dfXYfJYSDOW}nVj4QEwuoFQKRiAyn4;jxC*=C$057o2{Ep5f`
zfS%P6xL|sTeg2$|wkf8h=3!zG>BovM8}MuCQOgV%73F-G!Pl9p=zjPGenR5Mmij+S
zAHah!_17@hvK!dYC1jH==81}A>)%D+kWGw#Q1D7*mSXa)Q17X-(2N@45pu*m$P>%p
z`O5FS9)91P6<x2G!3J<Rk2SM`>ma<a@rPg9UTr4UH?W@5`+&z5373h_SyxA09|%{0
zcRBIuPjLNP=<SXx%#l6VYy6h!{2I@+UW(sBce~8Yio*Y-Q~5bJQ?QWUWZy4b4|dSk
zCdo)UFPrYHmyv_mr|to!wZIe{u6YMuQ!oUco3^t>p#k;}%agT-%hB14qn|?)_t^#B
z4!_@#b@%7sf42FqrgjK63UC#eC&o=Ji9)~Z6P82gmY|Q^3k+W^sz~NR@4_C_86QT>
zo_w0qz>lj!$%OF4)d``w))lf9v8J)jiB9VJ_vA_5_Q&HTqMf6TrPf*FByX7Zou9$i
z%Qtb(r8|Qza}J<m12-cho_oTTw_k0VgYf-sc!GG?!r!K<4(0@71DLN0<VVi-fOkH&
zUa{HL@WHz0<TLO!fd`$!gM4_^0PH?H{N|EtSjUHUY~W1kCy#DsPVzr(j=Y5o_}E9t
zlicSx^D?Hr_c_s|vC0SA^}9Dy>;9EGOg}%GLz518BJ!t67FOBal+*cvZH!a&OFRa?
z8u>eN@8z67@l(zMP1CZR$kUW_-rFN1ZSa~l_%5{a2H6iJ7qqT4NpoYcFL<Nri<bBz
z4Q60xMV9vXgh%Cn#J(1IcD@N;nLi|aWrF=Jt&(%*6I*zL)lrJyY}2M|W1_wOi%nH*
z!@yV-^m5aD*2a$P;@h)=$=D6-vqvV2qNhgBGc%*``dEHW>@n(yAXg~9HcI(NZ!pOp
zaR2DKYhxC6{*6w#YhsP~ziakPo_#>)yOF!6E?&^NBJS@k0DqC~ZVG^JD6ae93yYp$
z?JTn3H{A1Xk$n+*;GH$ISIB-T*^l)Ko|jh7wiZqPLvU$gJo`?RTS@Q>4~jIhk8ab-
zfw5Jz3Ek^dUsv&8hYX3av|}`L{mc#7?5(wmo-y90trz5wzrfS3{Z1MKHszu#z<2s`
z#LpNOd%_c*zH8>}4VPJq_TP2S>;-=cE{zg%E1!nlXwrK6eb%CB$gMLdFTa&TOUBK0
z)|329wsa2PcdlE`Jc`F&%70A{^smt*yEM1_@8&;^C%%a784=0<s5CZ<XFGd-TG^fY
z&D{ZG?uvr@X*?Jjxg9*I)jCA~E%-xrv2r+w&PDz3OZh1|)5yi2`=3kAY9L;d7>P>B
zoqptF;d_mT^^4r6xMJIj4h2s8ML&>vWqT37szJ8(Tc4UCIrW?1<pyg~Z$om${;)NP
zb7#r@5e^eq8XhGXpu*Rnya~wBIkDJU<mjgd#-iY=WbF;_q}KhFGQzXO&r?-T0BgyR
zlEuTs#!43di+4yT^r*>|$%#FF=t*#FHQyfK+xGlx96Wve*=wnvv2vEK<Z_>x)MS~V
zy#daXb7f^e_|uK7oLSoswSosv65ER%q_+kft7DAA8ISt<`0#<THrk0jZaV&zwjLjT
zE%(8s+EcmM<G~IeWzSyITJMkGzwW=Te|I>w?p4Z)Mt)gy3%!$HCEj%w-E!qgdsrmY
z9<D5zW18(-iSs}XlzmLLG4VfSUgQzwJDpmr`BLl%bN6`o_rx!O^MUw?$h-JA&F@pQ
zL^EBwn>)fJiQ{zoQOdvgj{L^Y+%PY;^@3|+n^@CY8~J+*X1C&}6<uiKeiLx`wrB$5
z@B1i&lhB;oz^})QFXGU_Y39f^9jU6vF0vdt_&npSg0>p)yqOp)`SgCf6Zwod?bgN8
zo$}f*cnKaNJ}dff@-DSs%34C)-Pi#5viS(>4LRxt>d`*AcKjoo{w+JU@n68B^`=8O
zP{O=CsX19Ymv{4G8=J1-U9dy8^xqHdD+!VhUvfD3*EMsPX^wi!rK>IK#vc-`3np)V
zo@dbB@J{8s7+a*ZQOjIC!XBz>+U0)BBZXz?oY7PJi2Kj$&6Fi~H~zJ`OS0K(TFV-H
zbE4_!E;Jp7kwFh(=V6~<kz|7e_JTJDn+~njZfrHiKOFyQcF}#Dhcb~dhphZd;U5ph
zhUdf{g%-D?b3Vp8`I}_>H&P|B3TMtMA7egZJa_fEJAmOK@Lf3GhAt}FFMZIM0S~>w
zx0=%!-)vlaP3!^YZs$|@The3O`$%1OB;a1J91zhtxelE|-!aq^-;J+@XIdwkga4$y
zA5e#4zK!%q-s!rPe}}HrnaD4Jy<pjm-$BoYIq>vE2GdS!+~4$YrfiO$Q+`0Y{Vk7d
zEQ|as^R2}@eH#a+nhVX*hqRmF@p}csx;Q*OI*9YrhA4Kf@~ahTTchy*jQ7#O&iQH!
zKIy&T{V?(YoqoT?`QBZN(VR%zec{R~-selM&;0uPKjYbb&ni9uUGCJLD(Pn)Y>XCi
zPXHPUT%EmDx%budtu<y_AqX!WZw9tn`zh?P+rPHo?74eCw6-Xi$}VyJm|0%aY>0nR
znefM7e^&G$h`&#=vYnv`9<G^>t_si8647Ydd)$vbQERSytV#YA9ElPy**%tT&<|fE
z-+Fq@<vMFlGFE>drwvV!J_NkC0MFIHV@q8kqw6L{MjHPbt{jnu*FV0Gj*QguK8N?p
zsef`=I!BZ8F@fu=$CVMIMSdpvtd+M(aQndPD@xW6AZBhrI}Y7ZV>v&(=Ue0;dw?_0
z$4h2q9Qe*sDNpIGj3tN-{upp`_Po>gf9_+AV2@;vetVqf*e}_?>S28;{$N~tA-FpE
zeaBDb<T8w2XsVK||7y+`UF>0Bpyp=I)yiv|JoGKue{$Oolh5e@aa`G~1LaRqAD%vu
z_O&ZNQyONcb2KIE$#KT{3bL=NY=VBeeF}e=+IB0kgyIc}2hby?npufdsPx0dSutdl
zV!_#o>#*}2TBWu1$Zo}X=8;DrD|V%5IkJj;nix?_9GpS7Ns#~YHsWpU<7quPN?dR^
zen^e~O~!wiaU7!W2ff}%-NxbQ<zvt>^4dp!a2gf{Tbu#j;qy(2;32pOCLb=I8`E0W
z+{*{y#Hqw{BcIEhW#i&=0$L<mk(h^V16kheftF|dJK$bb|Nhy?WeI4B+rR#Olh0E9
zQ~%Y+xBAVOh0W>Sse5HBUTsV|9>YHY7*g*3p{7}}9?|ifiFh$<2_73CdrQfgI56Ic
z!`t}Y>2W9Mo5qbIoJ4+g#;!4I?8`Oo%zD-Mmaqms1eT=-t|CvK>2SxJ0LF>yOfmty
z6Uey<;GBRj$$qnJU3qdDaSg(un%zUOZA@(M!H@e9xav=37r#07+L-1?<E`WULHL+E
zKgU@IoBNNSeWr<(lGpJ;&qKHK22ZGdow<;pKhVZ)dLR8eG10uY2b*n68H2%xTZgQ!
zd1W1ou5AefM@3A6--w2m8f503J~MN{1ht)><5$qNw9W)ut-1SOM87;p{oD%|Tfl1<
z7X`m~Z+5Z!t?D=6$ZqPmh4zoBePCB3zaG9jt(i7>@~?nFnD}5956-|-%HGen4lN~)
z47uLf`z$&XAdYMWGI*g`*|J~b%kbqn#K50gLy7bn3Zqwbaz6Fh_>0}WdB)+?wj250
z9izrOhj9jbPLI>>H_qd4W~XrvJ6(T#_rJ}Vq`<pB&WF*R#Uu1wWB;RPz^FQWffM6H
zBR$N&V!W3z{`hcH^2J;;tN;4oEZM4D`XK$_-XUk=dziR;^>^2hG`<_o>(yEkE}F@6
zI>K*N7YDqoopbD|Xnm7-o<d@#(U;1(R!*A=WHG^gEqngrd~b%`QnCyhVdFQFJZ^~D
z=ub;dt<?(I_tJDEm03>?{TP{ELs~y&>{0N;`$S8$riiHl*5lgGr_B?urDo~8dyQos
zFn8j5@iF&6ca{4|do>S=4)8ve&e_&(V<!v1*8}#1i1mc@5PV=)cso4SgOyGW1ajnC
zd$N|uhx!uV{FwT~lt)*HbhAG4nRBfH@``k*e}5A0fV*LQYA2w}>f=xPeUnRh*3T?G
zZ|1o}3y48*a56)Gz)R?WRTM|g(OABenHT$5IzFYFxrzQwxjaU9o{w$!@O!Ckia!@j
ziHSKP{BZGKu+1`STSTW1h)!hSyD0<TKjP08On0I$+(R91f0+A@1m`LLl0IrYc9tno
zpHIA;nt40Vn8!;3`<U;uaMb2p;{!ZP;s2^_X6^T4XP$}fN!)?-i*7G^1$ZU=4RNov
z`=RPUwy@B(6NT_s`dN(}Vcy9ucE{w7=ML}M78hR*IAzoLvN$uI-!X>%^YbicfoN{N
z!E@;~J^kKq;hn~G+4HGcm$-A0S%;fkSY+;rF#)fXw=65x6nEk?(tI`HarkPO_4hpa
zh_yaXo^d`_I=)l>5&1!hDJ=TH>n%#h#Q2I15x=quyWF7*kcr`OXT}qx<5Z-dlGl%K
z99rt&ujpO>c$Qxy>#FT^`=|F$O9m=u-%q;j^jQ)&6Ng^wGbQ0c!Hy3KIrF^GVs40G
zxdHx@wxu-@>l=$A2iV9w^N|B&1FykP@F#3!n!DChba%8vcXiHAG{=-g#UrzCDSi#y
zZ$Q>l8>-ts!jMCanBji0Snl4{4Lmpa`V}ic8K-UaOYN&~>Q@3e2YS2u80%2)#zFTS
zU&h1b&i-wkaZy9ugy14tSW17y3u}HU{b)@46ZCsAW%sj>5j$;Cv0*MBR_w^JKJZk!
zVn)7rbkzJ4L2^E*P1WnAJ=LrF3nb$nKVA2asQX#)V{zMX+6PYPYO8s+gJ-QDr`!KN
z_Z{4)=V#j~|F~isu?KM`Nwl(({ITHZnyBe37M#$vI7g+^@ufKV4K5@{;2YS#E);#~
zE9suWx&n6P#KY=4Vt0xplke$47C|0AyAJf?BH2(XpmB!(gVgtV^dZ&Pjhv&Hq;&s&
zb5{R|4Pvbx#m^qZ@3<H_UwX!1=^4lXGqA7MFxR40Z&Sw3#47t~$Bhk8Uug5x{Vw=<
z$c&FvB&^6F>Z!qIHu<9!`x|l^nmDs)?Hu-zm)}>jz08>2-PljaC)}?6@;kA6+0Z7*
z!i^(L<U{&=fWAYoO7p{tF}-$aE9GtCSls(4cD#Jf5JP6E%74NvDxx2Cc`I9L`6fs%
zZ=-#fli7CwU#gB114Dep!8fg^)Zc5F^T&YI<QWH!s=VYRKX!+=uy>ySZO)M#8J<A7
zu4?$-+Zp~`ZF1@##HSjfZteZLhWbL-41?zC6L0Zcw!wIgS+Dx^-Ghv&oVAbMmaNAA
zZSul@()es&u+-c)VU*K9+mf6`ej&$CT{#f_^$;;CKJ)P!@tm@9co2Hoyj9jsZ!(?~
z@g|B334O_O`k*t)+&1X%8r9$LzDxJ&*C59HOX~CUKajB>Vr)M1(VCq+o9F9SH@R#=
zubZ3p@LV|4|L4YyxO<jFgPgUtd2X_;EwyeXyvxQ1?C?D3t741_7TSG1_zP6eLF}U;
zY=pb;V=WkEl52+;MCrUv<vnq}IjEdh4qX{(=NNn^tmiL#l16j}7`kl<=Y)Uv{ER*G
z3;liCd#w7;jQ4i)U;2uqBf@92Ke9-&gVvwBPx3>qh5ynA0>H$q%8hJ7=8&%-&R!&A
zaw9DTxsm2E1|B!Dy@gyC1;k;7e`qDcjk%GP`2Rj6ek^<k{WRm7Rv<G_59@GUOE}9U
z!_c0FKlz9;F*Cy0s)E|<klD`|9~3MO(`NXvl`QAEe7Y|GUrC;gA58#84`Vk)7FhWX
z{t<LH%ReO2@T!%}<y!6ZpC8dMhZX`~ALXnZGiw2G3*)B=|IJF?mPH&eyzUvsI}Vth
zV2tlWU!`NN*ny3lcm!8I{vz^mDY2<O*03KrLHSK<c)!hq{z5y7&yno(gB@x8mbuy5
z>Y30Pz+U?EKSL|9H>lit+7b=2q5mHC`D$GtL&;tr=|NYhy(=)=&8ayZSQ<0ViCMJR
zGh0U4R@S)Uf!7jiZScLbPD{1VQ#46<&_Djy<vR`M`8pJT*6=F1rGSI>+$N5vs*0^~
z#SMS5oHH2peUdU3Fr5EEYTGJcw2k|fyM{&Bd+x}dKl^ohYz7_$jMk_R-Ml*nFVNWZ
z?Ec>%pYlxeFvQo$S#=k69$JY_pL2hetAMq=`s6Yb3vkwl_ELCFW0%e-w=!qp{eZQP
z98+5MRcn!-YmFJ7ag~KXL;lLvc%UgubMRjE><XUc^FEH8Ob+*=YV4Bbz$eK3Eu*jU
zpZJM;NB~!0yhQy`+~>(<!5IB&5-o7>Z+S)1Vr}h2*VJ0*9&VDCFi*09JM)6A@hj99
zXWjN>!>@S%BEG4f-13-w+F|BSwyKTHqhi@K=epOtYA?6u7+%3%XH%;7)sOyt&^5OH
zHE#b-^$lOk0rEm0qCK7AHkUpe8qU7MT;x>nsg`H59jc7_^eBDOJJoZLa`}4-XP-S@
z$uyb+@%uV^JU+g0*k;E^Lcr*&SDk5}8<Lftzi#vu&6zV_Pa<amm!93}IX#eSI6Z%T
zWs6>9%o>kj4l>_6aIW6tr!SuN`sY*Y^uGVQ{%f}XHFHwB6ZuN*6~O0^X=g$AIyG;q
zU;n9!^RbVm`<7T?I)Z!?zFcRnXrDkjCQr0Z^o?^`ofy2OCKyXxZj#IJfua*E3d}TB
z;BMu6<gmqlRTQ4xR|0K}bYJL+2<~3qh2Rmd-=G+balH(#%45cLTKJ`;lf4SugBLWA
z!`ND~;$yRD$ZX=L?q9w(QRj&?!n=rFA4$y4C~`gbB`Q3~{m9Z>695rufL4|@r}y82
zt5s#tOWE}gV3$}S9-Q;prD6DaIpcTB3CGpW%f;}2+NpqNd_+II_5Qw<@Ye&hp*HV<
z7wDU~*3nex418ZO3Daf}TW0P3!L_bzeLQpSto96a^ZhlP8=Y7Y#ujc~ad5Tb{D|P~
zjBiG|-H+)12HI2`HSlEhyZ`(J;p_R5GZ+_ZHIfCqh|e39znS&GGx@i44h(#uDu0W$
zsC+oS)e+@OE!MluxA$sYy=*Nq^gD+bw|v@Z#r~x+tB)GvEBFhG8D{`|XrM3JyHn0w
zDK5R5I00LAWg+`4U%u9=x1Ibz7Uk48L(Ty@5&7m({CJc<%-jdbhfsm+;r6o|{(t$v
zzLN5b6<af*{W4-y^N`CnTo3$-QB*%Q4#^Z6i(<9(%o!u|cE)-OPsH9np7k~{vTI_v
za`lz$QTKY=FVCiaVu;-O4YWx3)593+n4=)LLXMVo8_-2XQ&xeKlDEw2RV{VsF)kd!
z^@V-fBQBT)nGeM|sD8oC#x9b-+FI0r9q>Q%`%31)!!#z1hw}o9dMZXmz6CrRkhk<r
z_n^Rf;rylneZ{=LZW(l~Kims4Fc&Np&tFq$Mnc~f4F%qz46KkPif*O;t^MBr0GNa_
zV|Cv@$NTle&V;cK7)u7US<lL8lh2u~-SFG>qtdVnVy98x`}f=Jv({^OiAf$_W;*^(
z9+~bEa`j}HOAaq1wguT0`LlCz28V<{{)IF8R@SqB#yhsCl(w3Ixyo$tczb_`%&NW5
z;stX*%AZ|`{I2+u$6139j59MgLN|lZ`-*q<&U7mFNqvP^ROKhEMHV^eE+3p88-4B&
zY|qti4{-0|+r;JA2;!GF2{w0}b&ow|>_p)T@a<oh^e?s5icRA3A!owpu--B6J9|@A
zw+%Y;o#tEc)0_)-wzuz@gx7Rx-uuJwrx_Ru27;rFzL<uQr&BN$UB3Vr2`-)BnR0xb
z!Uy1eHa-YP)rN8@^dIj^?rXuL>I@#Ke}^*to0l20^7nU-39J_!PcZ+gN4`q;yC<O)
z|DEpy?|b`wN6stfy8~`};HYrSX>V9yz1!BEeB+MopP;M4WzCh!-b#PKi&K619b;Et
z{;N9Gk1D>=zG3m8W!PsNnCw~Br?%C{)Av@<+B5Dw__@;W1rM`l*>-)SKI)tP&x(2G
z_WQ5U5UqdBi@OFz0~AlH@3NhGtRg)-!LxJHu*CRC!N723^%XjA1|Fwx!Gj{&QTaM(
zU1(6a(v>wFx`*v?KIP9@Uvxqw1pU7*^S);=x+`@^S3kMz-yGSayJ;xAiF|9|VRyEd
zYi|TOdyDc_b{C?LWDzfM9lm4E-RZ`blHyz)_(G*}SL!^e1IRI_&Xjt<^JLGzc%MAD
z&iCZu4FjHBK`uixqP*iT*r-k}+vnIK{-3mK!4v)`?fyr<c3mENa@iJV+&#mG#@GiD
zQU7}edt*I}TVw8F%;*fGdKj~F&Q)g2&RMRRai2QJ=p5tyh12HV|KnKws_VaiF=PF2
z!??NMIR7j72LE4d^IQGebYZLi|F7D=nf4Rl_MAVY<1ySmSoaY7ht5%e%}Kd6Tk$=Y
z!}nyDXOB+D0`!{=#(P&cbmnSeyNSCg@&&yeb@zRH|C}JXR)SMHu^)7J=6E|AiMcAr
zmgIZXN_sY1N!j=%uSu`r%&jKzC2Klz1vV@XZOP76OYDn>_wsiatO{=T(5}8KxTc^<
zb?AGYA?2=D$^W+2c4AT_keC=T{z;KWWV$b3ex}~wj!*fS0@!Huo#b)ZW{+oNaqWef
zK-=1HiVn8dJTW)f{dLoE3)kbmGACL2)6}{uZ#Bm_z`NnY2Z%Ru$|dF|$t%(IMaq>{
zS0q#TbH`9m6kkRDjqxiJUk`Q|?7oS`=tTGlp2J?3kH71~u^U=eczwOtD#)`wvFVjj
z6Ps3;(Y?EoDb^}Z96d2WTVZUP(%o{1d8)ZSl-%Goy^j=zTkOw<h=pIi-;11AUEg-a
z3hm`UZY`q@^u?-gT^35#5Q|x6#`f0nt!$R)Dow%qg1#E;u*gP7y6Kzp>~v!%t0DeX
zKJgN4E5?j%s^R-uzGtpFwVrnJJh3>~(aN|4gEGd3>^IY~-Oe_n6z8L{X%Fl+WSHg<
z`5G8s9rCBfjf~kOUw6Lo_HKp`y^8(v;p3@o73?1?=NIHxXHQ`-;CaM<_#>fP!j*ry
z%rvVl<rQ(~<c-$Ux-a3=KijsD-dmi`CG|cuSTv$_S83z`dewQ~vziaUN1QpzotLzQ
ztI#gl+^fA-ub=UQ)9t|uvrpxNzrtp~eU$y#4-X=b1K+-i?QF?xV&<vSKuZTwXMs1b
z^NaK)=pBO(1)Yrgz9l#T>szT`eaA?d6wf^8ID_X!YAeH)PchEL+tY0t)}PwcSruv%
zzfpS^eh>8_@k#YW^CP?FhbyDhbIx}B`H?o>|CslJv+;i_a)>>H+D|H8srAr(AhRZN
z(`NzO_;g>#Pjf6EUjXk^F3hvncqU)h;;aoV#L#zj^S&CKt3bYV=BRHju?C}?bp9{8
zTGE!TV{!+ZA!abXh{4#=_6Baj_89bxlr9TSI&<mfDpLPsw=!{m<k$4kUAy|9$G2}r
zE0W#F;1)U2E4Z&)FoztA&<xf=4Ru+c^Eh<EX=nD;<YC_tbIWO*0m|N)DPP8Zn$5Bi
zQ;+t8V5E;|Uv!A~SM!@}vO1M-z6X50hBJb5h6a;UvAL+NYI4+jkh#x*cRYi?(Lf|L
zmOMbfI|N+|LF1lhFOTXJF3+K^MjLsK{;mQSH}J1MsXqg0Ynt+tQ$J&@(%4eiY25KC
zcb+@ObG98Uh_sClSAI%!&A1HkLVqib;um%9ftU0-(NgE0aSz}gobDpe1F;Rxexj}g
ztIGQp(C_~67rjwGYS}AM4gD~_aLWd0ll1?`80Qq_v~_6ouVYT#*h^hnn~R@G^wvvT
zUh*HJqjt$BlIII|jY5~JC2m!GA(XSTCA8dHe~roQEayI-IL-oc^a86+`x*~8mD~9S
zZ7#TURm*_s-)Wg|vYYC#Sr_6jtGyzm^H{dl1Vc%CPAGXkde8<B`N`2CnhP3Q4EuwA
zMm+dD>e7DEh1ljBDbv5*Yk7YS?UvE5=aR;jYp6fp8qk}Ap32^c&RY7Q_6~9`!AfE@
z`okwGz2#VXtqf(IK=(REGd>&NO#+%^1?Q!C%jWWq0@>uk<Vm|!ehgwg8TV+$-M@~H
zh!ayCabm@Qbr=4+-ez)5qhIe^jJ<a8pm@vT`^|a>*B`ywsXO-%#J+F_jvt(I*P3uX
zu-viHH#yG?IPuo9H7euG)9b|YbM4YpcP*;VhCb(`N9FmOTjC#)Qyl!&oGI6vvu>zM
z>&4TrF5#Ez7B2LMkLZol9^bflA)NStc6LHnv19NZ^zZ>Ijl1+qK0@1**JPrTB1O+)
z^Mo(n^V3Prp7%U*ba@WTRvWIAU$=SC{+8zZbJvF(C+!;z%?uX=_l^GQ73nd8_sR!m
zfrkl?)$}klUh!%P*0a+mZ2reDGuRxgKKkFW)&uRbZYfbdTJ=pd|NHbyzF^sw&xVy^
z8ywo2D2NbGyY49P(SGzlL)WD<s1Ee0F4eP?dd^jcpY`VYaAZGy1v#w;yQzFB(q#nC
z^!hsOC$#Cm#^H>CF$#tnW0*1iGh>WXXEWo<^I3hAb^0!N{kvqq%s5<MA-V9<Fj1c3
zwBHcB@GeIl*F3uU2b?)`+XQZsr35q0K?(Ae-*-#ND;{JQPjz3A_J72lUX2~Rjo9$C
z=v{W-kAaKc%Xh%ux-{<?F%P}~J>;2<P8jBVsvlDBHE7qF{`u#eKE2BP>UsQY%g?~w
zhV6=j)_%`1={X4&M%FSX|H(X<&xMkHXhk{x69<34l#WLd4o~5?!{F<rZOI121^49>
zHxq@o3GUjz3f=3SCjVZBXH@Ww^gs55>x_ZkJ$zdynhzaGKlAirU#O}b;eocL>o33-
z1|D>sy*`{dgdTgS%g=k&ExGPa_&^ALAwNT4&)g;5Ca1(ehx3u8!nCJ&)bfQjeF6MR
ztnV#;Uz!IhhS)$8<KRg2$G<BLdx)PFPoNFW<@p&|7~58IBXAi&{dLHD4fG$GY^(BI
zH1MvBcCKX%&odA73tw^?{*0kgV^}%D+ho%}z9&2gzNR*SD>&i!2ARubRB<Tw_)DWd
z9$MPJj*UKYOws26XP4`F_gX7<V4Wv+xXg5H`L5M$?&qBJXYf(64s>n|ZH^-5IvL~L
zo5VF8V*U@3)8{aBa-RD9FIFs0u4&KmaMvMx^1}7QGmyQ>zm=eG`gRyTu{ZIRtn#zB
zkNo9_XAq|}HWWKZe!&;Oku&(J$?$YDInu*^(0Q{@%UE^6$><%EPsO23?ttG5FIMZ^
zn17E21S@0?*B>i*y^nl#DSeNVd+PI)-S($Yaw}_PgJ*QF0k0&7*CKmMzBl3VkuY?=
z5+7C_&omav<i>cLLdM(qI?tOk-<D$+bm|*ZajHI>`ufw~bJczMC)EAhv+8#E2IJBg
zo}vG&i$xcKmy+{DD^7C$fN;T?d&+(4q0~D0sQbTn-+kdBY=F>{vwzO}KWKa=%_s8I
zUgmlnw1I22af*-d-i2=!>v^ST+&-<HhQ{&xYRzS_weW#*pK)@l=L~UtddYCl;C&W8
z1iOovm(aL<_Cw?uU`+NHANp)~jm=)g1o*g+@-_FGq)99(wY>1~xg%IV<M-K(L-Dbh
zSNikmQJyrPp2K{udgAING<Q~*elY)|G=COn{Az6Zn=R*Gamj}F_Vu0&?9%JW8UI%K
z{=$_jdCyon4Ek&}aze--o}jZ9dvZOoFEcj>GHan5_)9joX@gkRc5irH*XGHbvGAQ=
z9#uaN5|6^ZluL95o>TuPw5_?YkP~<QAN*UssrVY$leiiC<SO>;ie_3PDq_3f%X7KL
zF4SIu&!?7aorkh}bwdleGI~S!1{6mU2(N5e6>elNyVY9<?b^Y+Scbk%G5B}b*9|@0
z>YF4Q%J~D-x03qq;Q9^9KEHPr^;x~4XhX{zs&7kU%c?Ekb?WPduByH#__s!Qo%J_h
zDl{N$l?rbPh6J5wo*@Hb?z1}hllpoXTK5Y0s&)%`ruJmFa@#z_JB>}{UgBE)a^7?8
z;_*r1&*bCPK2hPN0amFMz8HDsoE#wCgMBe<Ciqo+ie2u~ys-~-ouB!3^EXM?(mWn$
zvSJ6JU#WbPJfFCy15M>I=~|l4TI9tt#vT@*>i2B|``cUe$6Ah@9`tuI->Xe<M8qP`
zzdu~=zyKUwy^3c8u>Y75kFEcHzy7CI4nO6)6p#M`F%K^7im#d5VMdr)tos`{_c-!-
z>;T(B7er(~xrOU-x1AqxVm7d&Y`EV%x#50`pNF59pO4>wC+8Cru@rhWf&U;mxE3Q9
z<iD5BPnY1V4%SOou)c<P1M(}0zh&OlNIv*DHS>!+L&n;Bn|D0tnNDao{_`UTa?<D4
zd6hrM;fdpV6TqbaT!vRK3XZ5)>gRju8yku1<Qz@;$GSEg$Crt3XcP6liT^7Hcw7r?
z&MzMkIdtEG?T;<rygs_hitNT_vU8z5+sWt0x?V*a8~mI@f?ea2%5~FM&#Csym)1a=
zYv`ZhTXdyato>4rtra{~40!=K(71fX+5l~b;*;6yF~B*?qv5WCzV6*t<no35AF%KX
z74+p23!%9H4zmRJ_c!_?<0>wQC=R5#)<kxA@G-KU)&gg2^IPr4a?VuAE?M^{e9Xvu
zvL|Q{#ph`=Ob%kj=cdn+RXpdocGdA4_C%;2#WnT!!^-dK%Dv!<<9|I)`<|PTsi{+R
ztK{EP>#nU|GW&ZuX68GL?P_ASJ_lTfVml}!FITsBAngolpFHwQOa1T<ckSq(JzO&_
z`IUjq<PlddZD8I812g3*i!xURKjvZf7&>^t`?J3{=vi^Tci-!KU2C3$^y2~Go5S39
z1Ap=Q9{SM=PE-K92EGf?7IvVS$X%r?z#SXkZ;(24Cf%FF%jJKQJ@3qAf-)~s<{fWV
zdnfBh`vDX?3r;e&(d}OYe#e1h0vM%`WtFcq$$a29-1^}=ng^BFd88BDk9|!1Ci9>e
zsdDPn*c;GGbH4rL`d#E5=_a?!n|Dp^yYN91v+<FCxVt?0tCOj%$rs8w%h8IQAfKb^
zQ{KEu>;dV)_7w0=XcCP~0N-@%@pz|iT016qL1Zrdd!6<KOPvK|9}vEVyQXrj`FVqX
z*7=bde9iGSSskOC=MyDM?=|-Mkz&3d$}?9V5RD*Kb@k%Vh{!#)#hgdviHSaZf#0^a
zsgYOPrjf79ByZ+kv5N`vYSvyF6b|pLy9^!|pBkyDBu_K-F7C0&pPttX->kBWWMj^4
z7yYbZO>>`&!y5$SzGP~h-fMq+oN?X>uGaEC!P%WPw-OUhJ%6W+>e?whMox5b*Ogyu
zhgC2a#EtUZLCSVBCOuQX^vw9DMgGil=?%`<!&4)F;{G-6J<wR}N~=TA**fTHEoXSl
z$?(Rv=xfl=o(_1a-=y_m{yW5jJfgcp+SU_i?!?R~#>rg+$m>O3>eV@GqSFsh?*U@(
z?x5Z`#B+g3-PB<6yWn{t^|m7Si<Uz#uxFSf2gu#i0Id%|>sJ`-t_J#{HYwYo{mK??
zzl$DeMzpRsL5o}$`LB9;=AE>0eI56*O}TwJ*FSnfsV~j*OIOCtO<zHOXybn_|EbC3
z(_$Xp;Qw0e(AdrD%lY>yu7PzW+B}E+e17Ukc+GX{m&z_gju=20Y&8*;dzAWCQQrpM
zJ$M#<;Ecz?8-3ov16Zqdl<Qx18tZfl^|bO_HvTfc*LgGx`_&Q3@eFSBc?M6>T0h74
z$S3s)#U2}v(?5g!rhbOa0O#Hhebart5Bda6k*@wXudnFu*v!Q5k8(cFU+{@&|Fhyb
zkD+TQudQhF-~r~Q71p5o3z@@()}X;T-@b;Ql{=7FR{uW@TW{e{DI<4M0sU<)50DRV
zc>AN04VY{H$Eo5$<d)L+MbICeH$vY|>E_rA_t~RN<Q;M+PP2xsS6pwvLQb=+`f2^@
z<6Y;!i0(u4K1+Y9iFqYALDjYNVH$lvf6L?fNXj*-txo7rwUtvplsW<fGX3M3+duYH
zt&4uhoYGeQkg1DA8~p>hW*oa%bJex!bsHFnK1m*6^*dVbZ*px48iU~J;+k|O>8y@S
z5A0Id<Dn~C7Lx<s_CP0wn34mmiv|A6B6rN0mpmVt^9}85QCthpYQn*Eegp2kdHA8?
zCgOwdG}BM$Ix&vHj>I5S(m*Vv;_6zFuWo~1d4zlDhF<ao9;hqqY(>UO)fJwV@4N7v
z`MwMA-y|wHck`F2b$=ipZU=avak~0Y13G2_xZu!_U{T~T$?xo$&^U<iarVi_!HLIm
zLow;yW%0Bhr;Rx6^EfB4`j+^Wf6g!a+MhT5=4-pWcl@*<%WU0+Y#RQ-_q*b^bI!_>
zzdh=I{?Jj@zmum`XOSKLQ@VcOyT+cA?cmDU{o0M6u8~*;gRO|T-y++zt=|O<0*1AT
z%rh?oGsRjemx1)+a_FMQ5nvo9%2<Hkm3^soj{&b1-tWXd$onlOL5^?U74uH8e2jNx
zL33mpI><h*v&r|<cF}h$cTM@(-6_^w1F}@lG3%*p=B)PfKRQ~#8Dz=@70OXwr|jO9
ztVz!|f~9T5$HJpWRYMDd(3U3{=cCjwSh`~k=b*EJSBl};H6pkq@%(oxflYlm@ul&p
z>G-d1VnPanX5T^DTtItqU=dpW-1__>q23(cJpf#KfJ++BfM3q0^~6fA*#%s(!6|Z2
zpxb0SXDA{+Zh3uS;);{Z(<Av;e(jM>zy4a7c>;#p<}uDF<BU7wH1(|IDjPgSPFiD8
z$9(#z`#YGUEbedMKFBzuZ>MG&#wp$w<ov|`W7GT!?*A(@$AZ1q!t-xBzO=pW9M$<R
zBDU*7_61%TDJTtBj-N>mLEsdmtcC5ljJ(L#X81z|eUP6->#hbI`~r2Wtb7gC^vzwP
zZkY!3Bgxl2@HY?TgIvRdXQgrc(~;|$cjr3s>Bx0lL)((rRQ87W>Fmc4HWS8F`3G`H
zIpsLRtDJJKJR$kveb&YpWHvwLHnP_~I%s6+W1hK7qC=ipk8IZ4!~CP)Y%%YJ;OiE9
zkG+`~a;s=8>*GCa<j1{ZJ4Msl_-1hr{z#9fw+DYuEp(t78jdVpbw^gPBa8hi+UNg<
zS#h*(6tv2WeJF~&hK&U~OCG<m5BZsU{1KhIazgt<H=2<ZoQ+&NqH#h#XDTFEzqjMh
zRGy22-f=~0>yT%_L$CjlTx|3mS?U++yY_ZQJtIriAN6H7>%pac`j>nnd0R1%u8eXZ
zQ-{8ntcHDQOXyu}?&Oaw$TG!(nM*T0=BCoxY*S)JROn2KnQuYkJgkLsz6oreqci!o
zJdeHh0^lQ_#9G3J=&8pkQ?+qbd9seP%ob3`LG~yu$hoQ1hu)Av4zz*UbJ!wQef*VT
z;YT6!UFR{g$hW(-8$U>T-Y<^4wZV$@toOtYp|h5tv-YeHaZN754dt;YeRA7V&U1Hs
z!Y%jvH_>?yWBYrH?=Rr{!|TX#$oFre`|5k?=W0*-@jpYKzQnIT{QevGxy6L1M}9`#
zv<aP>9@)rs20yoepIhqeOHSeE^fZ2MF=l$?CzKO^l7256fYyrf-BcPv)-WC;yXxvw
z`v$V?lEc_68aX$_dEQ)s4@GA}r)^{vsW(bw1Aq>6?Pm<%VQf=UshMHsV8G|55Yvwh
zi@M9ts@FdGmEs2A?+5<0Ig5N8z&}gyXOHeBk;A#bztD920X^U__RXF`<VIj-;6eFj
zKrcKPxM%EinQsolXM4zRaTvSgfs0MYi_W*m!|<@4iP%Li4t6}xo-O)0HcZ<CX!~l`
zdUrBI>uI-#c<+Op8T(7=AH;hfTwfmB>C6>=iA+0Anf2IqX=4lJR7Pc;`q60>qo=V5
zE<Xe&j-3LytpXMsI9~^PT9pI+oCEFAxm^X&g-7^C*Wh^NPq^MN1f3;A(}Y*T2d90`
zCenOOb>?sfHW+iAA6n$hp}8QUePzNUubI1~5Z%rP-9dj(-oE_N^>xI&nERA-i`+uZ
zkFNJ5%s$SE#%Ji{W_0#ngm_kMyuCsC7i68V-klsqI`jGJJo%A*jvsj!@{#%_+UL^L
zGx7H~G0|PgD(YM4LGpDmUipHOe@NTFdonUZl(ri64*9abJhf*+dhdeDp<@u2U|x}I
z&`R61+f~c20{<O0kTvqZ?wOb_kB#sbp4IO8b*FtkXZG*Wm}jQSpJ~^A1v^o=GCP@A
zX(A;ZY1?EC^s_*Fxx<ZJJs0A4dV_d4<gT)pIopUivZ0sueSto5)%Dfjx9GW$ID<F9
zyQk3$v6XtmR>U(s?Vs%VIyTPLSsmfV%OX8DaE(p3XFmV%Oy5j!uj%@jhrLQY5Ack9
zI6Y0o6;Y;p9rt<M-;9lN689^(Cx0n4bamN{=E$7aO|lU_AMkUYJkQFp&w79j`#q9n
zVRU_-?_zA_!R(}LZ$0c4wQ_v1a`yd|zn9t)Fvxaa4KArpFyG8a0Xfj*OAdS^xWwc0
zWzOk*-LZ>nPJwyli{L4|a0`5Ti*U0pT7nPZQeu~8L_Gd*<;9okY>(6D$T_++@Q|JD
z5A;Pgw(Hr`*xKlej9+<K#J`9AM}^RY`}n7Sev`GtPhaiJ*&FD{YE!T$TJ4%^pFgTN
z+Agh~e?6M^_4&z<H<|Kb`rb&tKV+`L@H*x2QO;fPNHW(=Rs#8$bwNFqA>YRJIq;7%
z@I3w*VvZ)6Mg9=>8OjLPg78C&bx?-<(hc5Otb>|C*kM@<Dx;i70pz=ytgIzg{7c&d
z<oX1bm4)Q`tZNx6yIrrvcQ!b*fV@nN2EV%pe=K<(<tw+l$S(xH)?OFY+X`Ow&);|`
zlfQ8Q`5X6;zj4!9`5S$#-3{b#d}}&=HfQE<?3re^)!d!VspyB^DgR-4DfoI7x(hVj
zp34~Y+%`uV^!%yJ^Jg;8{p7dSK8P0XS)bx9=gNQBJ$;;$|Int4>N{8dLyP$h+(?Z0
zrPE717n>5BeYrvUpxlSD<>f&~6@L|APHNaw<>Z-tDQk)SH*(M9n2wq@a-hR^lwT%J
zJO8bGQ>@Jz_L=(iUDhdoao5}AZqmA>tuAY}NgDc=dlCQmCz9BqQmL$1U9IvT<+gvg
z(IO^xeEW$k^DeRKU2_VH6j$Tm&WG5k5>H#DX}UZ!qIkJc&zj}~*sYxLUW9y6WVYTu
zgme9jIWqa<4bb9n*P|omEM@FfqRTe$3W1}tIoUl~oXJSOO1@EF)Q>`YctmZg4{HCM
zZ70%gAA9D^w!P>7_u6*ah5qcM{Qs!k;4Ej%zdx(p-39-HcA<4O{?qMhoEopj{fXm^
zrrUj%c4Z^1CC}fS42%nbF*Lnv6}EE0n6;Y>0%PstV_i0BtQK@t^KVwq?Esf%J`L?!
z+&D3^WKecGH!A#7IC*yvUl{-2fe#qu%f<M=R(Qtu79wjqb8d<wSKZ;*AhsH03Fdf_
z&fpL&n@^qoI@4hn6h~%JriOplPqOn(Y$2C}mnHOra)vVqFQSZaKg^nN>*_|v7H(Si
z;d4{DXmO-~a*XfHays`z<(6m4k%wg5C)AfqIq|ESM$-|cE#OmHgMIsRjM1KJlH+*q
z;+V;v6Dwd}EqtKUgG~_my0-xNxsd#!+2jmgN&e6a$OpcFy>tUbLyfP#0ho`0MxIX}
z$7X1xzJtG~>8SBKxwP}J5s7|Ip<MHz^X9)d^_2<D!_X5cyBm7>UG%Xid|^zLCpq>O
zPx5x|HD`IiV%pPAJlJYu&vj_Xv;_1YeM9A4ox?qk^NtRaCz^dVcA^^SF18f#z}r*@
z{VhYz!Cqcf0}WO`RuX5w0y?2RAIc->fA!-3-{igBm;*fr&u!*Z^rRL#QnNR;?E%L0
z96V<OxmhKvK*u}3#WNrILh=1vBAc2GFEqYY*Dd0CnigVTCeA|q^H)4ONIubn<P-fK
z^^}oMG{!fp$gAhvlUMJ-ms3@%$g2nLcG{G;d+0}_NvduAFX4X``A7Bs7Oq`dN1o4^
zvmRNm*u|6MfxFhJ*6$duMJxYEdHrwC{NrOdGr#2TGHcNu8u=Zvgz`%k{4Tp#x<bvK
z)V9x2UUh1(j{dPjBoA<XhTL*it~P7B6Blt>u5sUIa<L^Z{)G3LTy96ses4=Int@z2
zGtvgE-{!qTe>mS>vh%s*=akpNf9Z*xL=HWMzu_46biP?_o|^-FkS~#=9XQcf)zw`{
zTvE^~wZY@a{?t0JFWQv==M&kC8J!*2SLKI;M=FqGy_`$s)P=nPeR_3(7&h@D=h^EO
z$vMXF#Fj#bXagA#8%rQ3-VzvL)(2&8Vci6%L-Z7xy_5fk;>dF*JcaW;jU&s7#^$ef
z;<Abc5X0`&{a}T2rkr!lIC_YK(O94_y&8*!taWl3XTsy(VEmD?C!APmXUu1pZDl+v
zr}8Q*7_P^@;L7+Xmz|Lxqli8BMFC(_#92(h;}XF`G{en}VI<#kUa?}Sh?Ux&Kbc&=
z(0RqUtSAUBval;SG}u2o@=ZT-wbwcCwo>P766592z3$!EtvMfsx@Vei`(M%TV{k1|
zA$xBgHn5;$r%4D8726J-Q%uR9DWkgIr(W3`-{xNWUcjubH1t{e)63|Q7WaPck-O2~
ziJj#>$i3nh-Eq7B((iYJ7Yo8=j=pFohIbS)M|FGVp^qcCpu5&07xkd)j#c~|x^d3~
z>DZT%t<X&1VF8a2@JOIzvQKh5eOcq;s_Iw2T%Wpf7)ZV!4Gp?CtGv%173}bHmZtW;
z@BO)K*4oF;xkSJ`Z4=tP8GB=%?LnS{X1zd}#k+{9^L%-`|Ksdp#T@EhdH&on_5T-c
z2KfE?8Nn*u7uVM2C8pJjJzae(#!jSoJ@J4%{@ptKCb!9hO%wTi(Wj;FEL_~zLq9xz
z_BGVb0VjPg0iUfwQ}$}>u<}?l@qUZj@aGXfI+c0TIM9=}`f2OO^t~;sJm&XVP5vDA
zB@7{lbojQuH9U_Z+pp$dV|T~>{h#B%qCe^VSDE-nY!|F?{8_9++GU^rI(tI;`Z(7$
z!-7f4B8$g3<1W?S{U|t$-PQ3$xO($9Y3pfX9zS$&=yYtQ>Q)X77jCPcA)XTYU?U4O
z@Jp|SU7H^Qp6<2gnsvR`^vyeEH+A9XJpU;DT)rdegu(|ebFvZMA=rk{wa{TZda$uf
zW*!9FRdyP-ZH!U20Kr%BaD{v)TbSrt!};th<yjf{>5j|rZ4{p~bbB@W=4#f<>N-;z
z3D~o--_MS;vFCT~XHM^xQGO2jBvv4IyLhVo*|Mz)Px|kb!6(4EF$3D8*;mB;qGQme
zN4*pJL=)Rq=JU_FFe|Q#HF{RI(5EA9-idv2)6f!KIliyWdnGY?X0H`5!ww8B4H7fG
zIwum{ZT7AEsrDdaHv$(0_g3$%ePgQ1W5tZ?N9?uuJh7WkXN_*!ihcL#LAg!)hvhbb
zWB9*<9hUM>k3vSnHl{hUf$8ok<css*gGJA^z`L3;*d~FiWkRtPS>Bjkz`6!^p~o-n
z6nw!KKkyYEb@Ln>%1btRKEUODYKQ%%zi7pNiCkI<F6SMaVYa5|cM2N*euarVO<SsC
z+scW3&w(#`7ya18c6@BbR7Pw2J>e~7f6e<u%8Dfpm`HTxgg$cC#h#{riurkV<!ycA
z&6ZKxhk3#~z9<`6F~Jx)FQUE|96k<CKg;;uAH#a|j;?Ql?izlAYc9B#%e=n_op5na
z|7yF2XMf&?Y(CV?jF0RqS<E=K9-R8{(LH>T*&3(rAnVkFKW3-uH&*?1==tIwJLyB3
z23Ym4wuM{bqo75fHd{I8y-VxxL*g2A1}Av8Etox_DL9yQjXeCT$1^!wsK14IobVa5
zbxHQbCdSt#T2sO}mkb`?G@H2@KV*E9@+_)u;ea3f4zrgg-%RKY7r;|8^@f#qo;mfy
zZ{n<VU6){sEJMe%kkPf?4LKpTm*xbq7IE@imTt86y-K~ekz10zO8b;&G3vdo?`>d0
zeGWZ|@=WcK=U)0p<r|7o_M0lf@2)2u{@lLM`5)bW2meuUlzmzB&m_l!6Va7l>hqJ|
zu66!$;tTTH8&x-X-dlOD`}?_%Vpq|;4Z)8w*?Y^<m+^y(PR&1(a_00N@Hb3e1XjVK
za^N1$Lg%OrP21+N26r<D<Gj{j;_+v;dee2@sX0Y2Q`_vd-|Dti$8*Zf()@o2KY7@g
zZFhi6%kUemCx1>2<5Zu%NI9F>BzvrIY;^t0ikac3KK=zhu0EFT|M3LHJ}d@)PyaQw
zZ86us0#98WQ$4D0uEs~4fZA9F9=Pj6?}hsxg8L^a(|5CP+Oao0PX3bU%3J${_Y;Ak
zyB>Z`{Ym^OCpb5%gX>d$10JpT>1^!B<iDu@C$80p#cx=#Hu~dbd?9oe59=ccPKXAU
zgPX__C;i+*!?y;wKQD8idf+$1!s_SX=&<S>b5h@i;0F&MQ;wW5*v?E|(0p-e>Bhzh
zTqWa2Q(L_cmd8TA(6j|ZLen_6ZZN*0!5*JyTA7(p-wv-!VwdKe+M@T=?@T|Rd_Prn
z-_4$B>SsI8w=#E{lMgca1<!`lR$wH0@51Q=;PU~nTd!}KXT|O{O*YNZcgP*Ab&_pj
zqHzKIgQ9O`>`C?$6KLwv^vz;TD^^JK&EnYs<hwXIi2TTeqH}&^W~~#g53Q4l_!J*z
zKD7pf<9W<Y2Ww^H%1PT*&-dxy_LX1k8;zc?*s%w>AIo*rGZtP>99cX5ua#fgE<PG(
zF7!;aIGtN`e7owI_%uEPV#jng0(lji#&U0W5$BuX5BIVr`|}9V)`uT4&8pWw7+E62
zd)ii3_X!5BTwKl`Ncp_sk43KhbY?8u^Nw9M4n2HlE4Bq_h<uLm|2wq}8FsAJKk<+I
z0>JOK!DgRmKo9HTThOd9GR?OJk8K(|WGu4$SZ5qVh~s({c}L$J=e_!;Z@kcC;l0Ls
z+Y_mElBYC=Tey~d^9BB0`k`;e@LqIeBl58P=6a`l(HDKI_l3;IPkHC!i+G9FmD+h4
zzH>hFV8e6N&I<TW{`Wn7;xF~+b>gj}tDF?M?F-D0WY947Y_|`pzmEFV=67gAb*S$b
z(NFb{n3S>Vi^?hggAFZO$G8o0iw*DH;ThX|C$iz%th}aIfy3Gik5)a$DMwt$I?048
zw-DH9EX1VHP8vp|`oU;;21Y|a0Y>-$$JW1kT7OAZNdNQ3PVSbB?IYh#`V3<iM}!~U
z&e|Z>jeMXz^A+!xi;SJu?k!*)A#)|5e*thRfIM>m`c=R;oG;NUd8P&$eR5d^cKtaq
z+H&-#Lv_x+jMdT`YLI7kq2nv(WWbLP7=HgA>$etsJ%mn~g{-4;&_+kLAvQ{TMvkl+
z(cI#GtMByvLB2i4xAXb-Am0XAyN15Vo?ON^fe~w4<SXlCy~r=BGg=ixsPP~NkDUTs
zQoB#<!|&hb<4joP6SLY~cpRJWjqRsD$Lj{f?%7qwS=%1+u4R#jjojVHd=9+mgT>gj
z7qqcf@gZSHzp|EE&GBJomi*o6_(!c_ogI$O5-`ocz6iU)q6Xq)>=W~nHPmmzZ=lVq
zHO5-OsnA5&tDBs_81-CxZf$6@#yNp;>Km1FU_#jsC_9|8npd|RHnHT72bhvW&?EA7
z5_>&?*vfR?WA$Y*b$k|_tD*1elcE3LrSJ05iTCEgr(AfPtuF_NBa*HRen3Oym!E?S
zd^Ne7=Ei`nGye(b2W#cXd)OVNcd0$Kq4vI-X=f;YSDX8B_meNnnWHqEmNR#8);UIP
z{J46S*ZwU%0}tJL7W19v^owqvu_ZzWM(w8_)#;_qyc4Ne(uYqRmp^!dGY7X*PvRu`
zgibxnYqwSR2PuvgBQKwwuD2pn@5}Jine_YLc^9VMC%>Iq_dTw)ZuR_a?w`rrtNlaV
zKgE61?@zBkH-1Apr1XW~gIiAnj}O4PTIv+;NQXGi{0T<iSYkCt*$49sGX4InF--~N
z>sOGoB?In<ZsZQhZ5jpdt%1e_pf5GhmvUfJQvh#wc$(*>hW;`;b5U04>`y*JUT0l9
zzN9$vt<AT7<bgu=83*|J`JJs3U4Nl+ib?k#+rEwdFMu|*(tq{&IDHoGe2zNBSM*Fe
zs(6bV)1Z0zXW*lK0#UA8xK_FTe8?^9%1-)s_x>qv@MIM}a_m&B&n>oa3Oo->ZULr&
z`zn%uWgTc;1$lM_d)tIBHhMGov{mtE-Ko^O(gOq2$xreKdJ4~6y|90q{ja6}u@?49
zmvi;Mf6)8TXG9lT(eXqVc2d3sz5Lk;W?Nj}22ErPeZ80b&su*g!8vT~5y=4Kc;_d^
zE>Y*_OkV$4@pXPDzV7Vv=XyAs$(f4^a*cqCQEz_VuwTfoliL)MpMK$t*_uORUl#Gu
zuYwV#&wL};=l7-Q7I5#no4ntmecQ<25aq0rFViQ{knxV(GP=E-dP<+l?0sZ!@@34G
z2fS0C#j|XFE8tfucWZXbgyZz%)08*JjOE$pCVa;u=dTE^4X~eGIRFC7$FC33KjXEU
zn4hNQo8j>*&+9Y8(P@CuSm3Y(-)yOOT%@f+=hut}*G9Le25}a^kI0QoyMFrd>y=;D
zIpZUx1NM>EX>D$9(^`11&E5&+8T5mL<O%@Jis2`>JMeyCOKM#%F-zkX&YaD+@Dk;L
zoY>w9%rqWD{y%+7zpCyVV`hhuSGvI)<g(5%^fe#5;<daZPBOWI_iq0LNAfz1{5t)6
zgt<^3iT&KxN*}k~&t6Gnx3Yz^v|ke3_;R1dX<;`O4txqZ!!O(bug;d!c9QQxa$5hj
zAwNVqpF>(kO93NSzjo)kl>R`6y80~o1x`3P=|NUx?xS~`KFyV2x;ry&`v`I!<!A8o
z;Nxens}t9FC;x6;-{$(0`q_XEbSBNX96Jj8f{C5mH7i_MUSyirgNOF+0(ANF`s5G!
zq`Csk+d1n>ltw(%^%?4#^~xv1EFigwwgUVFk2;g-OSCi+`gFMRJihNwi;2(JvKCsQ
zwXAip7Qct+a3A_fGjyW{x;dJ)BY3?Ayn>23_Vtz2VjKA1q`iB5)a9A?e}88}5)N_-
zkPu=slh_KeT~8dVHZuuT6k99OR%LfHA=aXFyTwDx!8S95df3>mqqJ!B*-XGHleW8T
z3pHuGWdhb}=>fF0hsXY$Nsxn4D=3gC{O0%md=Fs~658MM{4uYY`F`)?bzS#$zVG|4
zUHE3O#UG)J-mC0yC<E=!`2#j;F8>g}tmoNtypJMR@7j$251Y0K-9`0Oe<$x!?2qx@
z*}eyO=eNO~M*|*jT#lZ4*Lr9eSW3^7?*ZLs<psbm3XMLBpGSOGe$NPg3i&GZ{u<!Z
zI3{(4d^jn5H(CR)j)`8OK2$!ppD!mlUkw<j578=47<{8YNgf1Fhm~6cZF+e0<eKE!
zG3*M#5dZLA9C7{9wQ~7lBsw9!A0LEoHhjCR@ukp;$m&qZin;sAJ<p)GdC#KRf1MW|
zZDu!6p1XzG8!or?#3>Q>ASF2Wp^frkVvX#@tqQHaWpya~uXA5VKdhT-=08Qg`+oMY
zC~qp|_K`9x=H6@far&A1IHYp;E-!?yMONS1VW_V?FX*(h$!DYOTkW=c$**g4-v!(@
z{ibNL+R%QHHp=^v!Ch0F`a%BZmSZpX>{of$)?oHYKdm8`Hd+4Br2ISIt-LJRUVM4-
zsiG^A-&tTbK2`M9q<BTLd~Nc(mFswSPm*|OZ;F@(I@PM;XNl2{3bF5!eP_r=4-Z3m
zNWE+8^;d=lXvmSrKeuf>^{p|fE$Kw!e<}9XEa&;9lUiFaaNBkEF!8h_U%<u-bHDFW
zKAbn!t}%aS#^uTO@+*>wN6bbG-rY@kKeEG<Wg7c;X52%WuX2v--zV29;CpHKDECFR
zm#?UpKL8v0IY4}*8~KfF-Bu(0H(hP>lmsxn?lIs-KMBsxdCqVT@viyJ&!rg)e65SP
z)6@QQ`|9wu^)N>6p4i^z|EE61j3Y*Nw`{C)`#$zx(nqE=Z)y6czODB$c6<pD__mMx
zgtv^nA~~1$TgHAh`IV)<S>MIpw{vcYHQwMiJCtjXfezHphgFU?4CgAtfak~;9R#Mt
zXf}O|b<~xr>qvd>n@iH?B<|3<ym4Y{X_Dunf9S;Kzv7c!l*v%Wdb_+sHjL!FWZ9Mr
zuSgczV=Zdla^Y8#=rqND1vcVsHN-`=HpSCE15RYSYyE1C%4gq=ujD_Tf|tR&xI5kU
z>+P;FM>hJV?r8|Lw%BLPP_LQxbdE%1iAfHHx%kGqN6kifjct=OV$Y}GJJR>`PJBeX
z>T_Ei|GyKfc-E%5Y?BXLG>>=>=lnNwzA$`3Hf05TR%4Sr3IE<33`~!IZmnU9f-f0`
zFTZocDEl6z{*{I3miV;Iq)Y03rqfIf%v(Sk$Cl+M=d!QtL_<Nc<IQg@nfKr~mOT2s
z|GZ<~N4|H*`*)5`YCm6QH#~C-`Gc&z8)*AI>{wf;nB4b_y^oPRnNz?u#9ji{*@E43
zwcj8A;_CX<G5ANg9KOKsF4nw!t|8W=-pjWegNKZlPEHwq&kn*PA}i`w!yo2G{H1%!
z$*T%sqm-AB9|f#Joa-kaU4rwnBII40_s^euY}u9Q%U2=euTE-g8q*YXB*C<N4QCGB
zARBAZfG#ThiMM*boeXWAT89nZ<g;xs`EkQ5*Ui_NvTf`os9Sm2eC^9~`Yv7>#$O*Q
zLTBO}(hND*^~^;%aTSc6vusv(GiUJ^%_;Z!dgdQ_FFQK`ytTh?l*^kFoR1%ZpM>D=
zk^b!L40dG%c!@V3KxT;7EQB{7z;+f7jM@FvuNI%)MPKK^clCU|+rRpGkJwEb*gnI!
z6Y%~}v6&yB9JB}TSNjg{Pg71fN#ILN!5`}UW<eSL{xW223|&t9Ne_VA#Jh~!-#70G
ze0$_c?@(+AJr#X$M*Bs?#{L)mgvW-~M8E&w60OZ3_Yu*at-t#@hq#_tidAAdRX)=k
zN?yjAeuz4`xO<rYPY{dMx|IK)yj|j8-1!BKiatfdqDdcXOz_R_&fDkl@Kfu~NuH|p
z$A#C-=N(-=MBLPJW2hOwFKJfPccja?%kx~bF$I6g_-m5TLMLYxcX;h|e||7+#JIEb
z)Vfb#pXb@M@&28YldmwZcWxNZxF#^JiOJ`%mrBU{jA0YaqyJ6#5&Kt8N`4ew>gL@a
zjW3X1wdJGnwDe)d?S1B8*Cc98{QmDa_5}NmwmZIt;`YPD0gBLpYrugIJviJD>Z@OF
z`t)9WNqcVJ2ZpJyKez<{=IX|enFV^@v)i#n(Bt;PN8@R1zbULs`2xx~$62yTv9Q2m
z&b(S(c1K>xHEX5+U3#6P+h2gbuQm4oKIaU6A~VJ8i;#2mIcNY`H>aC9>h3e{F=>}y
zJq&+-ZZG`*RCb=)jE;eCv%WHwR=k6|dlctSNdI5v#@_>>RT2CkDs#cpTBB3ik27YC
zD}w&-!A9SDSIs-kD?r&OeOsItU%X;<UrDWr7nA4Rzw&x#ujum9_%URhbki@d9~0l<
z%ZqR9uD16vYyU)}Z(1)nx9#=;e-3<8bNJ>aa?J40i(gpGN97lu(q7MLy)odh5&Ui3
zRbih&mx3-|rVouze(G;=HktI$zW|??(1|;MRWa-0w2nHZeH!l!I&g^dQoQ(><D+(b
zG!gJ<3V<DDr1QSZ=LPC$@4evU(L^KV<RekMMDO0Y;gitdb<p6aSQkr@*V@lc)1_!o
z^g4GRbi$ZrOPepDBLJr$d2_qInJw0HY>~aeR7Koicf-Gr<V_5}7Y1jFJ@4Yqg<PEE
z{`O-2l997%XXCB{TYh?eLB-)BUt9N5jPrSf!`~4X*BoU>HeQ0yaj4yqu;Rg#{32F-
zGyCw(`DWuI(~6oK*QYMuc{6!@%To*LZ%r-OxqkiS(A9N`{L!-_xAW|asRfDrF|&61
zqF3x(-*owDecaibkUQqw-vRCGG}G@eruAmcHM`rlZ#-i-hjE`;Hwu1YaR$L?ovTi~
z&)1I3-6om)&JFp<)cmSr%L=f6^0-TAO!9qn6<Zdc@5<uc<Z=_I>E?_ZFyH^{sgA$J
zD84}a{ri^r<s;lrhfn{=iH5>t!2j)*53}Bi;UAwLXXYG(Po4y3@1q~Ri#+RxCXS=0
zAH1$$);s=j@Bk~G{)v^$Jma(Dz%AHAUq-J;$u5G=bZ|FA#5aA9&T}_=A8jF@ojn`o
zNX@orOU=oeM>caem|>pbb&-x>Ve01Kx<ChV$G#7sj(q8`a8qRBAwCV9yJ_)>`S2&O
zK6EBz3i^m}Z%Z5hrN^ZCE)K*>|B-v;>ispd4E#P)jDKycnOE)i_wGXGM<h?MZ8BSG
zl0ERH?xrw%ji$99yo^0l)F+?)MPpUJTt1OFD{Hk!yapY-m0YI`JR>mG%vnPl+KZQ+
zM(zb;Jb2wzv-*M6d+>_)S%<8hsw}#GwDhXAl;^wwTkda@ufWc?2fm)%?;@6aYTd_O
zf9#d4rK^xJSF>iWf!{m2Kqc~svpYIdh2{?K?OOWfX=aCb@~h@+M|Iv{jal~Ia>jZK
z@a29Od(ZJAd@41_^7ShM^HsLd@9WLGf8l!;<CRU2#J-4>g%+G(k8OHa`TR%;`ooKS
zPvN_p?}>aL<(q!Zm(HCWF{bk#<}AOs{IQDFG|`9Vs`)+7e-8$Nhn@=-*!2DKzrxdA
z{0y|w1#NUgW7WhTQou82rthhSK7!CkCF8G#J{q>gS{k5_E%=L6uV!6+hxRAcKqD3F
zg5=h-cJb+mJ}RJ%oB7lf<~QFwHov(A`q=41mjE7NXrq;KHT-U+zsw}^`Z>Qda|C@!
zF%kJ+p^xa1?CeX?|5T=nGw=iAQ^VjYh8@LxPWvblQ{usZFK$Bq`0{J;nUa_BWoRz|
zzMykr_#xe+JI`yc=X~TSxc6c&8R7`SJ@?zOj<13S#-o2<nS7f&Y()d2MbUwuZ_$GE
zYwd530mEC^e?yFRkJdx9H#?hH!xVf+OKu&42ZtU_75Y-~bKsFRQzcvqXYW$}W}c%5
z<A1aEK=Vfq5kD~a?%^B#LFfk<E(p@Ed}smSsOPnmhklzIR@BcIE@~;G_u{4a<Eny`
z2|zc?z`baPvofm!^r?JH*;<?U7QgxL-`f75VPUPd1nUN1y!@llB|+&gg1z7!^~GC&
zwFlRsYf5bgiBG8ht_wKhnl_YUHB$L5^ygvmn&SSrPr+Nx(ieNihOe9U#cQC6FHtw^
z_wSo9z|-@Sr<%mm#|*>M3zF~Jc}a!r6%|h(3r`>A@bn9Z=jm?_!_%KT*UZ^z^Yqd1
z^l!EFR+6vgH%I2P?pER(D1!#G$cU@(b9@k7JqfO`)9y%N<NW?3X2%lnI~u;y3V+ev
z+BLqVHh<a5`m9B6!dK(9;I@`r4*zX|`6}P)n>>iW91gPo5+2fMe5)3nYnCS9HBYck
zqr1!JC*U>Fm-vR)M0@zAT=boCyB&>X12pp_^di~igRa&7aro=|+*N%N-b3yXvWPr7
zZ1!}m6)%Q9(>onGbZ|z&EKdfVKo7ba{`QXaede*>Ke@fynqr?vT1>m>l$`;1gmS@J
zksp=F2g#oX>YO)`vn-JrTcG&>Hot-QL^-oy4l#g={KB~j)}Y{!VEw5L)vrKL)A@26
zfXz2qTdh9)K9W(i*T(;H&N)u=JsuhLC(eiqyD|#9s1sf=uhC!By9*qIm~Z+5M@GF>
zK;9fO>hK<ul#G(Bl07_BR=rigzHG+deL<-I@Saez&J^{wv6j=*xx1709_Dib{!;@?
zJ6H?Yj-9_@EE+4mkV}xUosYer-F_+mkNd~N)2~jB1xBw<MGi8rgEJ)KN|FEL$pI;A
zmwZbh-y+=0tFi-Y>%zgdi^W|cr`BBwZ<|KE@haroBIMgO$hXDh>-rsghB>M24C7PV
z5gXs*tJJ5)qdkA{Q9EDT0@t1#5kFN9zs`dWAxj>njPQFucXC|G{Pu%)<(Of!^BX_T
zB;m>G-3=c<44#_6+ssMMK1XzcrNOQ`TMt3sp8I=ZD$f-b&J&#Ox5wbXs19FVELTPh
znQt31W)Lq443-gJAh$(riY5hr5B8F+$0iJx9id#=K|i^&Bh2~Ng6nIvBe?2p4Z+rt
z9oM+BW3eMUfU_q%L<jXg-=46KGZC5BYWgMbVTtVEn*9^z!Q=P5%>NK;hyHCDrZEPf
z58?S<%C$lJ;`?pT{&)E=I3H$hJwW+Z-{{^nxl6z(UWZIr&u_sj11;8>8ND&?$OyZ#
zHw@k1NPWS#)mLcW$G4ULTK~rxLljw+uw~WN$rU`8oZ<{nM^1rn^M4_y$O#>gQ%mXJ
zkyH7$oYFjH$2jzEY&sNO%D*Svc{tO2Qh()q5KmtiLJMJd$FQ{E%7(+lbx$;mPX6`R
zIdX7F8+tFDP3<&5OOj_pW#J!aXQVNBa!@i<^^Y)zk;<MS2R+(#<>3F&kL;7N$TH4?
z8DyW37seVUM<mBSdDpd1B#%$9{&er6W2g8A*(qV{6!9g`PPu)EOuGg<<=tX4rxD#S
z<Zo*EG;&NbtYEB}bKI2)vPC$fF4<e)OTJFd*TEYKW+}dQCp5DLy)(dfn*Z<miuNRY
z)38Z63k*JL_HJxxf!5I1j>tZdZF1wgUwb&>E3tWw?unD#_*4@A3U<GEQx;w?zHX3b
z8R{ZyiTg&ElwK4oO=B-4#+V&3m$yfuarDM{<^E~CFTkIp8b_tW+r`5j`(wIof9T#(
z&;Ag7$_7c(&wG_2?#3?Z&EQ|ppJL`Hf9(bESXb=YA2(bz>p16h<?`h;d>K4HG@Krb
z&g<G7;>nK9A$@SD-2o5ne*t+M7>#c5Zg%PJsb<G=`mVM-yW_LAUhq6{TL?dpJiLXq
zB)h|hUZApB&V<OdJ05^<rI7cYE|8KAfG&`dPJk|uLQjw`kfL9$N#NXhA9L0GO3<n0
z13j2C-$&_hH_r_8c$14~`HZBGCg2ev|Fk{Av+#XjtmzcKh3hGddE*bFEgO#u*Z9h5
zN3jIq`T}r`*l4b2{D&(w2g~-`SmJ4%t-qXgePFD7z@vNXkp-`U|1fr06ut%wt{2V^
z9L>(2LnA7qyuFcdVIg-|+k08ldjotLqD6yjiZpo|$fh0e9owc5|4BG<!N%=Sn<55{
zI5x!;+on(sk#L+wR}zljCT4av+d}l6htJz!TL>mkz2Vpvk`Z5UVJ|v6&f5MQ|7Wdo
zcy+)c?-E=!@JwxV6ML`2o|s9D*$1BvGkybIperp1fU7#}d+IFJ^9ITX$th^yOhVC6
zC1vzpHUPQ$RVpKS5P&AW!k8RhJ;mnLoarNeHY}Y-$ZdP{S2k}Q_PuLk*f4i(3>ybQ
z*T#qe`;poXJNCt1+r9v2E?*tCANl8p#jz^~K2JZxzIXX<9q+TX{(TeSyAy1_TR=Xb
zMSejc_5$ZhYVQ{I>ak^`ZC}udhB3s!{qWjx*bhE*X4i(8=hzUjU7Ytr+}Y!|6NqO=
zSvy9)a{NMnh2P#=?)ZiJSB_0aecx_*qrr-|VnaMeEc`)i2>FPz*d*t3e&*faFWrPM
zXtxhKo5J1bW%7a0?~HckMZJ%&h<xXE<;7=q`jZD|jGpx#xvA{s+@7GF9q1a1;H5g3
zJWZ^&+$ynk^k1`n8qm>oud&u%Icv`k4~5salQ$L5Lr1UXnRIkNI{Fs$w)aaM{akBT
zI!ZnC;?*Vp8U0)_HAhD;#}|--M@TQP<Xd`rHNPv)$6kTn$W!k8k<N1VIliRyG}GC3
zj+xi$bM*8ydXVl`$vj<~e67+-9$XAeoA4{;=;r~~m-HHPAtn9%Qv9Y9;OFS)F=9T^
zGBf90+G%0D$B_Nq;6-`iX}&$(JWY;R${P<l`b+3t+&$UZzjASM955n&(uu!(RSKHa
zbHV=LjH_qKUdqZ3RdUr@?0}^zKS0m(2J7kJa`6r6k$K33Md;~Q<I|O%el2;Sj-H-&
z$M6%z7j=KjmiRipV9$n3pbt$eH#<ZVvLEH2+U&b=z<%7~+K&z3Ws7S+s%*J`>L58W
z8u=xgu^jtxCj2vj%<z0wvK!^Ak{u~umCDIirFL@dN71<a8=^76Bm;Z}6Tyakt?(nO
zS@23ASCj`R+k*YU+uJDLLs`eRnA#h{UT9&wqRXxL^IoT2o!Qd^y^{Yrg}n!z(rtns
zjl$D!;rC4F^B}Y){nyX44?&|(L8CL+M{)b;!g<26XIluzb@&*&9NWU-BSUdS-q;{M
zk)AwAR(zTq)pCDnZ%nx16EM+Ijazj5N#>{iw8o^r=F*gS=v-ub6g-v#3%<3_Tz)Hi
z96gL9*Y?Pq<IsxMxo9QrpNQ>oHL_&_GRCt#u61k=XvecXMB}#Yfv+jXxWe>{zO!T*
z-^-6qn5TZ9<-f)k1s<Z;rM$a^dK+Bb;%WZdID~(skqeShibn{J<^IB6Qxtx0H*rM#
z4!!l*9NMRs*-spaJR11H^%>T1CFNyf!1HYTVn2PVuLV38ZHQLX2fU(+xMHz*iDAs>
zV@C?11%o_;wxEwQ{bPDAc{Y-NOnP06G67`SYQ~&vcW4YH^d~&kF>Vh}QOCv@mL}R9
z8{@S8;L(IDTlNN&dsk-D>UP=|KYxkbK@YdxLukyCiKq1uXe^P(nQM9R^_NGN{FL@a
zs_V(b2F5U)JpKMz>edgHk={I98TcP(sjE5FJAODv9#c2NToq@Lz2e1D6f+qtFAHox
zn`58&?AV4AYw@=qWMAwC@K6CS=*Cwj8n%$X>ye$=0?wp@{?6mR9&1skKSLZr@fG;U
zfD8?=_fB!oThZ6C501$0iTb|P@<xw|qc0wLAD%BcYWw1d0k$AlWm84a_fx#X=HXuN
z>AeZ~O@vt9JK*q9=yWvvCjafa`3I3>x8~2EcPsMIur}nws`eN3M)4`je`T>hyAJ==
zW@KIm^)m3gsRd?-cw&^bK%GfZ)&en@d5ylZ-qF;H(r>zw^S1rr<Qo^@Z@LgZ#~Sl|
zPMl$Fp9#U59f*;<0j;O;S!F8ObAsO8h^{QZ6S)L))YlWVsk0b0-`9yF&gI;#YX6L0
z;me!TE8t3HYgqT|S@$1iedYNI=f*779dr95<7e&0V;24$=4esZi=ipcRCD_@XLo6z
zqWtCJ$*Lo}pd1@11#Rj10Nvs@vcRhsgNY$uoES{W8TODDgAxAaciP1~dYFgK(W^6K
zdZWz!efkxy*nhb60p_tBeD#1Y;p$2oSHAWG1>nk+6E)05^GL%>Bqx^Hd+GCRT&b;U
z<UkO4QEke4yWnLpmv_a$m-bkRJ|3Z5hH*%Sp;y@RRt%;d_*Y=tghR2GZpwuVW1P2a
z`k&z4-PonMJU)<rn#T|Iq03(*m<ac>AB1zoC=`p39U*wgj(8hd5sipe1S`cS>@%QU
zdR<PxT1Oke?FMjrEig>_3g>zA%wQjkgcrs=MBYsrB<~(8Hyca9^S`MNXhkw&12iHZ
zl46zz^$p(HJXaOtw{Su}6wk&aA0{tgq<+uffoZp2m#40y-;wI7ZP(|L!;{_mQJ?L<
zSxJ45ezQ&feTP`fr`8pcSLH*eA8qp}t>-j;46mOP4P)`4<YBvwBW{5Igc$Yvcb;R%
z2M*#RK2VFD44g&RnQC-i@FV|+)yBC+?Cn1vUS;M$_gC|t=Lv^bZIiwq5U=7{n)3;w
z6=qHr{&Z}a_|>MC<F!ugK>SJhw5iFQr&df^{LNW>)X|A%_Wj5+W5H91AsF<R;>Bi1
z1$?3Vv-wG6=BjHyX_mgV+lo)d|C%AjRmRvtx8E~g_y~|!^aSh0sULb68^bwQ$CT}%
zEpjGIZ^OmpQxnr${z2*fob?QzRp(`^tXcYZYmqr(vCblsL+^E=2Nq&Crtb`OzQw!p
zlh&$5+@%dqif6EY5<asajSjB1Rkz%X?@i4@rknA5Eap&A7<#x4+jGpdX6fb30U5mK
zEqv-v_)YWW$m<|_!!gNB%YpYg;3#|dH}LC|%vZb=ot`_Pr?ww**MP;m#TT34v32-?
zW?`diz8c$1es{TJV;wIzL>^fo<qt8oMtq_{_%}9m|Ga#&L-@_*-M=8Ny_5V9Y;A{k
zV~=Hs6}*MqIRr13Z}=d1Ql3nA!(iTx{ILB?DQx6EbltbGPvoNt!o&Lf1yvq>&L3sw
zd<#AzSO^Xp!{dF~9o}5KILB6VeUx?hC)SqAjR(I!=Jz4stg-j;Zr*#@?Z@Fm$Ch1_
zoDN^qyAGbqkL8OtEvYLDtxN-pOfj~o==g)k()^Nno-U~JSNRL){gFC9rH=S|2);i5
z{Vey80ZZ&0GvlhYi7Couye4VfJ(S(m;0n6+czr#4zE7=_&MICn8)q?ouWPY$$ggU0
z>>Q0jI8a~01G<_mhgc{5+NUafEAKi3JiORM?ieg`^O~6B0c^q7wpekk1v_7<iM&bl
zZ{g?QW$3q)%tpao{OLF}MSkHb#ds3HRP&WhmqGW73YORr8OE}X-v;<DbLq|-gXoy`
zxAfb<PPss$RS!pkYZG%>kBzM}T5I_)oA&|ii5R(z)zINq;O1jpb+bk+@+VLFuT08E
zchaWAGMf%%KPetl&H4xv=V)Yn^~eeIo8J1j7$<T{w8Q$mUb@99#`@Wd2FsijGG`>*
z#DWfPoS23a{}z5EbA%(w9N|ec{x<Y2+CBi!65b?tg1|ZDE7_wl1PaZb0Au|WV{q1D
zkxio?;XmhIUJ^qV^}X})q~Ii2bV;utfo3wSXY8(RK|Zv(tsyj64xJ#EuLStY_a!{E
z{e|;fph401Kl3cWxR$&Au)^~kf0%3lGmJk>&nqcEl0U2)KCd#}%p1DwwBuv&B-V-T
z4^zKk`t)dTKWo3orMpAW-BEPSgIAf(x6o;Cg8mM<^mi0pLiG0*x{>(f!K<J{Y;di!
zi1aPym3f)(a(vS0OMUyZb8>mY&)A2Xp&l^m7oCVkLeTC=FbzAl?3pliW$b2Png?HK
zEeo%dp482nWZs<>>{IV5D4FNs@FabHCcki=c-S|Xx9m&7BxuT-tFhOfhpt=k5mmq=
zL(q4bD>E9n_dW#tqeW(c^evr#rFq+H0GbzWLbq4WZ=jB?k0Db8+dgo5n7L|wiZ_Wz
z$X4CNGmG(7!^hZLwKOe0Mvmhz-YK7#rku)LHL7r~cnf$N;3w&q@SD+Jg!-DJ*4%E|
z)Vd2(PI_+`zEkevRJasB5nmBc5kEOdZ0^8B{KVqv;vx8m)AQ(u^T7olt<y{f8yFag
z-i4b;cXsJxw0RPF+D%^t{65Gy?_->rr{?uvjL92cl(jdX|B|&K_=n_|)|(G`x!&*F
zBRdwHGz<T&y92$SK(44P{2$p`R%MWv;#*y}MdpWZ57>U*w-{TOZ#=OW%f2s9dfR>6
z11DOG?anUM{!hWglhwKK;4B>ScE=<Gzfj(ydE1V24B_>z9(S6?Qrs&M8ig%e828P_
zmV(Acs_WXaXVwiB#=9@&{F1Vf>$<k=nROEd@y(Y+m-L>cZp^V`&#W8DkFT%d{@SzD
zZ3ExpQ{qpq{cZEBU;w=w-SgLHsVh5USRUuv-#<G`-3+mhL3KSiM@PlGKLj0}rLJ(O
zd@R+sed&z-MQ}S3USe;L(3dHQFTaR01nJAuUGzOvzjkzHt6e&**N1d&>DwC1aaXr?
z^zBi$zWpA0x2<Dy2mI$*Thb>y9lM)+c<I>L`^?{`W8)(>=-73BbEL1<ibwn{Ez-B|
zLY_?*UnoMqE*hj?&v^y?>*VM2lda^3gf2tB!L~_zx}~inbMF{DNB8X=<{RE+>z2yp
z8l?Ar_R6HUmZVopw@mrit3Jx?(7Yl}{L0Rme0qv<Ca3lyx15|wbjw3cA?!i?s1vY(
z(J>@{N75^!=(^&`^6Og25y|9^0%Ol*4SYlWX-?9YMe~}|qwpM^*C#%#af#R7jKBNS
z@RUo?r}VsoXWA#;lWm!78UNVoljW<d`$KD2;wLHR_X{6Dhs?GT&*h$wO3s=*xpT69
zkJj&~^E<PtwIw*k#5en_=2q!L_|3b^qmyf9c9m{M2bWJw{yXVH@ZWvDDQ0pF_dJ?=
z@^9FDdvJa==f@*sm$u=*M*pkQ{vXN70P`qe??f*B<?4lL*%>47s<w{})=R~Mhto~J
zSOjd~z36&(NWT6#Y<9>e(G4tRYdv^5^s(EDzi8W9Q-`&+ochDtT9xE#Rr{y(aw^Oq
zTkA>RnYLE!?bEi_F=U8sYXN`aQMRoWU>}EY=Fyzax=YN&-qHBY)IGAb@bCA&$=pTb
z$kRRj!2StrtyjRmY^^TjhG-=ux}eP6(1NG)rYR$taX0Vf2T~o6rc&q(8=w{ByKO^O
z@?Y_zs}*zcJL_XBwoZks^P<}?I9YI}&YOmY6>pJ@Qf#$Vah9{_iuD%_)fJIB;=ds$
zNAwFb*oO}eBaFGN!fcODaBQ3iGF-4K7+*NIoA-j5WUzFDT)8)y`IgQ$JE+f?&>Lun
zeMr)&_YNlmGZ%O|buoS%N2eBTNv9TlNvHPgpSM}xTHCf>4WIJ#YVdN2#wUGQFcusQ
zHp)nShQTrX{2_FKhoFInbeEJ316Q}Z02pYlTH}JR^pQ5!pkjGl{}1O%z=u3LB0?<v
zD0)YjaZX|G-K=|`@r|u>*M0LeXWfr3K}WRLy>I1h<Tv>2b?;mG0`GnHy7#T@X5H7Y
z?kmw#l-t*X{n*30Z<x8Ov=aRHKzrooHutdZYgqSw)_sG!?km~PSm&<$3UotYQgtWe
zsb^eoF}@hzZ}2UgeV6YNzDMz1G#}%xH1REq{|DIbBi&7F_Owlioqnn5ynDRaC|gke
z1zV516rRi)7p%lz>R)6Z2yIKp6-^H4xU9Kc9ru-CblgVhx8m>6ar+qOAL!#Xo4<}4
z;IGZtd*ZLR!OK1VdKfr+{Pk-69>QNMI4eN>wGvwK_-h3`;cWc1V&!T6ihgPHSHU+0
zypTn9PQeP<s`!ZOwNAiAU`S4Zp6{moh&B{*TxGhU@c^<?uyo=ujtwPUK3B%h<G=7G
zzou{}9en>~{^Ze0Y^m!^XMu}1;Y_$XT8VyuPjCNawaJ6m!Mory!e0VhiXN;#I(Afu
znDe8*&Dt_iJg$I#wDz^8m+#kI6sLKE^!VRfj-4Z0U_JDvnBH=}m8(|6H+#hK4LCN5
z$4|J=#BNh|#k1g6c16elH~3x%{_&hUH_@VKGIx%m$-U=rRu43p$)U*v>qg^|f1(SU
zP-|FxLF+h;o$(%RrkMx+<?UA;ckCaH=PC>P2faaa%pC*xbA54BdxO8tF4Y>EOB-7A
z|H_<XM?|4N$*nHNIMn9oqHoz8-ypY0Wec$_Wpn(MzEZB;k;$<;{>s>6X2O8oA(}6x
zzpLJ#fb9W(_Bdmh$}`zS8qen$|0MovoeR!d_lpGY5%@0fT}on-Y?ER6vTK{1=8>rh
zj&0)V%-z#%`(oI-u5EH=UDrl<iMqq`UsspkbC$MsKcec|_y0M0_cjl=`8PJiPtQ^}
z#yVGBM~|Oq=fsRSf5%oia}KT^zxgcvgdJPu%(|{^_Q+Z4);qS!nRQ*;Y{OaV#vD84
z%(|{Uc{g=)<Bf_XI(d<tI|Us$IXb6fj_l8GKZtz0iuI0685C!%Aty46-@Y3=MZSAG
z&WNp%6K8yAz<1B{{8>(%Q8CUCIsb}7>@=L=L_5=HJ4-A9pG4<I{P)YSHOw?Krwl#(
z0D99q_=q+^<JJB$dtdYcYzyz%82M`1<7=jd=G*!mcKrczA0osZm6ucP&$rLKQ9e#1
z@_REj#WS>(kDfM%eCFI7_gJZ!_bRzF%kdwD=$n18*c9x)BK9D^i1KC*GRAIVq(k%D
zb=Ft_KB|~kHMuhx<b7n0Gl$R6mc|}M?+`5avMzmv{_E@R;x0z)5b;LzsmZ!m=Qqgr
zS^Tf|kMG^hyXRNjHh(|&gZf65POc-@Bt!hQaH^Ti{ey8c-BdN2(JK!zCt^#JS~;`6
z34cZ-XMiOrx175hYbJ8G?RmROcX2kzAzL>ov~`oKv6~JN>)63q0`%8qOtbi?bR3-}
zr~7w<d8O?AbNUoNMt&UWqOT``pJzjan2&gR2>vshz4Qfzg>$3uz~@5eHUEKfsuzX-
zX+M^4T-oHhsDD*GGFoy$b2a0fd3$qS&l=TytI3sko;fH+skuE*dwQ1SnX!<&j1Ap<
zRRB9j&y^c2oSvZ1yE)I(8{ZG<Tk%1~*~ZdVmOXLWqvpLA&7r5RN^7qGHkem-fG^;0
zls)bF=N&uf<M`)`?fgYAFV%~~YR<PY*G0$>#@RVq`&PJ5?ihBEbx&cD&AS2<;y&(n
z)Y(O*Ec9>#wjBG%;-dG4bRBUgYk@aD-D@30*OPv)x$idq=7s2e8_@f1!M>@%=99hm
zJb3w)P2=NwccW8g{NV-c^@ua>stoIe*!Y4x=1*J1b}ieVNUnz+t6C54E74PGX-_!L
z(AHDnM{UUWzKHg08evUY%qfUnBw5-Xk{q-494CKHHc=VyFGrq<#$^X2fZGi`%Q$CU
zHbayBI?GVy?DY^ZOFv231FUbYW5wH+PYKPhQ``wUK8ep`7cuDroY!HmeQcv&Ad7Vm
zpw_Y7j>+#0&QUCyeaPg|guy3sygm%yf;NhM6VIJom-4S-Z7*HVoUlvnb@n0NEo2S0
zvIb|;?n2(NRwlpU&#U@(e;!ACY7I{4Wk1o<rj@tMKg{zLqB+Z14-LWruv}i^t7^6K
z>@~=moK$U%TWR|`MmuY;Y4o_U4XnZ1^LCeRVLy}n0=4)B8qrlLzqE&(q~{pR4s0gY
zl5I0-O+^ZGY^EVJ7^{-a^zo5n-ta8(EAc8X=B@EpV^er*N@H!RoyD5++jO-Y{MRr)
z@fc@K`RyF?8pfi$hZ@#5$lm_Nyux`N-0K~GfujQq8DrZAhuT=^4>@+`i^ZHd;qvuX
z^p=J2hE{lk1z);FxPUJR7dkVcm^D?#x7Ow}{MK4l9@2XF%oEI^20W~1oqvUA3&D3Q
z`0hdn-=KEDx7y*X=Hg4hcN|);`?6W}JoyXayBC6U?&qy~1YY!3fragboIwWk@V*N^
z6L9%V7+#D|W-|WvNf(w(sQL~3x7_DnskKr*#=*5UX5!c&xXygAtJLD&%){V1ZH*o)
zyW|0It=RBySwj~xmQk$rE5Y~q{!x2aCkyZuUH=PcowdB`1>!jtW37fZw^C2CfpNW<
z7m6-vW3HCHejGks!FtjE8pakXfq$Fnz4h?KE%1p7>gfK&N`5zRhwlbcP*u-;8Ya+H
z`m8atJYM&6;7=ZG)&KCVIX!@%DDCoe;rwa#8L6yzn_%BbIp35IOs-3_uHX%u=?6Y<
zud7e-&H|U!;4((6UHrXPV~<3a>|@>)t_+AFE0^>9Lf#Ah3Eqhhh<8@|#`oUF`)=fu
z&H)z8*M};btFhI@1Fr>M4<Zj+S&KHU@;ruKDBcxC?)p-*_Tckx_5l~+`hIu`c$w@6
zeu9bGKTJE%qBCp&Zm|-p>Q!q}Zw$EAnEX98+*j;3oHfOKL%=H-NR|3Worah036YF@
zgYkOuO=sR#{vkU@d71-rM2-fTpP#wc(64ek76P|c!HsuM@~j59i9UO1v%=$5st4Wr
zqtPXT(eG5Rq<nJg+fKb_RnIu}ey@5iF6vo3@V?3Z1hG`gh_6)e-2^N+SIb`i4`BZ^
ztz1srsC058Yu(~MV~E$evOUS1{nW!Yo$OCVmu#lK^76c~S&U6>U&#1`w@Y|euKOz4
ze<6Q^Hx|uLbuVN*DmRmN7W1oSZR(x)a0Bo2nB!vAV}5n+{C24x{i|N7>M_4+U>0V6
zqO&H|V~$twF3p<tGiK39H9q63U+3;K=)==px^$N-^Rr`2tX0PbHIuif4d(Y@+K^5v
zeRM~Pdx_m~)IXD5s&N>`A-$~Slx<6G8*aZ!n0Ec_e_|cJZL|+6<np@2=y(nLb2m-1
zZKYxB*6UpR;p)1+sQb@SS2VA>>QC_$uYb=LT631VZRlBp`b~_F+p#Ct&ba+7bv<~+
z*gK~-9D8bleV!Y7)3EalViOJ9pKDKjlKygS6XD~1bRX;z`#gz*Ge*I$lpm=(XA8-R
z(3ulH^7iuv?bWKc?Glspkqe0rrBm?_owXLkM)8pg*^Msm*(ho5N|TKe^74zw5hJI`
zj(zCd3dKH-q3g>|`7-*w_7o(PU!?fQ1;|$Hg9zuy-2xwv;-`V8??~f=UCVuTiapEU
z{RXnSiQI73$SNOn8ZCaJWqFyov=-WGn9|zP3e8rM+unoj_Nvd{>xcK_|6SlKE4kE|
zuP>>&9KLSMSi`sN-$G~VMuup=n)<Zlqs}Y8!@`gH1UbO+6Fo83#4m^UMUf}Rut#nM
z4!L_7TJfJJ@T0#&ti+4c<k44;AAOLxv&ICjmda*&mAs%HWS=ixw|bGu8(Vk<<2Z#p
z<Joe?Asb8OgRBANn^)3r3+Ezv`m6Lm<>l4F#|0DZvG@yXPCgBlWqt1uo+9WftW!I-
z6XXt8o&7lr-RsbOis=An>ZU7!JN{qW4g>zf<$JzHIoh%FJ!OZ*7-s~Wst@%qTKEdz
zg3BP7D9(e;FPJ>a*aW}-%{V*w{W9P338@Xm^|4<%cX7tqQ~tuaVQ51B7x->GjDD-L
zB;-qrvaSUK(TVH}<^DvmdjyM-)<``*%G^9p&$f`v_3R7v^#l5lZha?X^l~f{^!*yo
zp)q@pz-Hcid7wLyk0Hedm?N~i^b5?Rhj|u)^MmNzq8Gi}4PREir_KYcr2M@-b*p!o
z!m*;kI&_#M&%7K_l^4zrg7fnkhjI{N(C$ccYeN@+rcU$70Q@FLAN=H0vvF<F;J87A
z9RHEpv+$*PI<RyTWWb=jPr>YMXh-yNaK^`Hd3vyN6Uaf`6FeDi4(G-81R48k;8p@$
zTlf}!gmaw%;mxay*q!#+b-g+GT#nl*vmd%x4m_nJFNZFk<m~4MPfVD*9{ATl6WCV$
zvazGSvOOGvfj`*a3|~012!G)de*c~gz`GpSy?{OvTiGx_w!+Ej&@<^H8c!eNk!%%h
z%0_yW{}=N=K%Wu%Ofv>}#P)i0bCv%i??12i%yqr%lP0(3Z~COqn%6_VIrQJ(4UY`K
zckH>qYs^4i&s9muR>cQu`OZ+5a<(5g01Tw3h~`8ucky2Q^-n*u{g1=T3+66*X@E|K
zlWn`Ej4V^-e;h<>iE|v;7IotNKRioajVp{VLG^99M*kVcI}#mc(3OYn%av=7o~18q
zs0{YjgzE==;4F26uI%+>euFnh*T=f{EOo=^YJ<k?_3P>!E2-=8@1gk#%K7zRVdor>
zCzzWPth|Ii_VW$R13rnIMlT!4OVB<#<t31t+o?R@%vfLYsK2mkrsqo>MovRVP988h
zh>;JPIppHHdB9J!{I%9%|D8FaJmB})w=j*ql>e*vwwYvR-$zbb8oHH?j>3z6`Uy7&
zm~-<ar@wGD`=)kV@i$qI8TOz`P9<);8(+*+I|rC^nBz|U(8D_=v!TxrF=A{pJAT`9
zv03`_G3e3$QN8||_zzk8b{*mw3$3ZmJ13hXem4hL`e;*5Y+CWE*C~gOXXX8uBD?I^
zmSxAb4$szp3$w<~b1KeHMj2Ozd3dqufBBSII)`=6I^6Rn`JURVI0rtX*tBvs@fUVJ
z42)O99}ML<Q>$5L1vZk4kqXNH;M{k%37&CK<51uBoY=Q08IL|t$JtDh2ZnyjO~Fd#
z1m~GCV_T64R}&+O7_$Z)+1|I98LPHUZ-zA}8VWF$ljLs*&$+q5GqtY+pUng4^idzU
zA%7!Xz~01p>{A41PJVF7h<U+Lbc3FG;p7QoJB^&LVd1kqK@JCb$aB=!w`o)KB-jWp
z^T`SJ=3URa)4Vlj$#|8~d1lY>JAEm9i!sagyN8_MCVnd(4ei<a9nbJwd%Op7f{C?9
z>F+Y~fm7uDfd@O6PVFp#AOC^!I&W2DDzto;+)w`6GH{`HDx>%6SANM5`aF5a1Np-8
zN#X~$^ZL9scSgQ2^y1_T7mt`PTrc_nr|L`bdg&_l%<J3qE4@n3GdvevB6IuG=yd<i
zJJCy%kF^Q>lt*mz4%~SDQt`?Afs16SVvcG2d<WbZq?h~mrgA!U*FE<@y-6;o{0xd?
zW2>(^IwRES(H!UI+HqvT!6H}p4*J(PG%oGyHsI$*mxjIZl$&#UqtN0vfUVB172SI{
zPVoHe%<GU#(+T-Tp-cJHE1>BtI?--)h%LTQXQL@xc?h0xi%Zj^iO(HF7bfPuhBGnS
z(>6_W4<a<JSmLGhBY$i?K8l^h7~AmC$p2`);p7;L4uPeeWBiYd{gsOc=NLn~(rX?X
zHXnlgTjBFH&RX#DA%@E_)>;|JF@_&{xe!5c5i!MkG=@N)lVf}tV>t1Lk0%8m=`n4<
zV5I&ncmlFvFLGrs_}<$PKz8QnY5ONDk5fFO$X-8%v|S9GZ{)k2{YF97q1MYYJiCEs
z0mg%!V8_J|;a~R=7mvY<;U#Cp#r6EGIta2xWxAPf0A3_K<i^F-?_B!y*069TJO%Lg
zk2K#H`;Ld5uPY0;GGAw{*RG6$Z>{xZ#hev7`t({q#yb86J~Hv5r|Ew^WxTy&%ihgy
z|H!)&<}L>gqN$$)7p+0*hRYehbjZ^=!JOxhZg_|_zY{!Fz#Bu9J7zdPlR92bFtoft
z`u1=+!HL_>%n3e0pKqgoi8uX$-^%qBj2`3JKu$0;@jmhJ`^CfHQz~;m@o@16XxZTl
zZZ5DfWA@akJ-3|r+5KasdtPJv2&L<(-VWBB=BwN*uZ@3TzTy|kQxLyUez16kmuvDS
z`s_jY#h*u!hXkL%_N#gm{aXCuApF8x&+<13?&Yk%V2`sdMc=}Ag8v)nNAMQhCh^<j
zy?@}hmoxkk#+l2rygc;%<yP`gwds6)US6_;aU7}+VQ)LR%Yxhf@^JF?c?**X>`a?)
zlRqQc4`V-OKj82K$@>ueB@LZwO)4i~GkGz&dB{6=k%x?*T4kT7EIDUYY2>wm*M-Rk
zXyc3$!R>YWi~)1a4c&UFeA(U{a`DrTk7}!(pFE~FA)2SoF`jw+KbQAwywRghnKvkN
z;#b)@o~)F<@UEW0Gdy{A1XwBm^o^g`I{UD^E9mI#r+G(W+#tRC_vG`Bv<_XJ{mi<q
zKKtBR>MEaEYgoL>wH0jMW%I45FaFF~>MFN$*!Az~;9Jj9SNY6?>U#5aeQ1xJrLOXs
zhpp?z>i_L5b%lp6@T>ZcjdD(WH#9L4Z0o`Euzk5U%D<kaFXb~2Ti4BHh){Ppzg@1c
zPI&|;Y@0y&2G{}ac_8@BSnH!^RiLYPpKk{CFfW%6kMr9z`0fVwFb}o|_73D0@Ekth
zndY1d<t%%CyW{xnvg9q_gWpbh%l5v&BFegcy99naa+++Lz=ur`K#yH}iP<rlwOS{8
z;KS&b`0eWO+gb3i4^4fbrGAj#F2C20FYZI+Ewz$kpuE&d;zjlN?fm#vf_a=5i{FIU
z%h(3K8_|_VBU|w|boTr6+r<~?ce2_acZpd#tE<B14Rc1D_*D3q_`q>|RD#i0;IC=)
z*_YAnl|vmRpY9zy$9gK~I}G;Q)#A5X4&QBcb@oF1c7>x-H_LBlS@~l%rfT_e;P)$h
z^56Mv|DALj`R}646?~)Tna;KN@owO^d<qNE^QHnD&e?hK74aX+sf@~!Pqjni%=O`I
zuzh&bdq)rW@QUqo^U{^HJ>l#=yfkyjRHD}-11;Gd;8uMrFMA}I$akl)3obVN7@NkK
zaK|YhUIu*QquZW`?yd2r+;`ghdkb>s*P55~TV%>m|DA0|a!!eXUke@sYi&r}Ge-PL
zW#yZaUurlXo_vY&8+txN#lD2!JAtL=&r3`1=DGZNpJmM5y!ZThucEt3zZETLJpaO6
z_A_tCpEtFA2X?65=`5Oi(fg~3k#C{==I*-HHPEH}dA0cUJi0v0JN#6%kq<36danF5
z1&l|&zzqJck>(r3j|B~!=Gz9IpQA6{$iAPJ>4W`xQOB?6$dIA%bNzbC;}`t$n7?2s
z|DN`93mzl+_I%Jsu5S+=wqJYv@Go?3<lCbK;qM{-56q7~6*uidf3J7*2k^yqE~kue
zRRjD#f_@hP&XR}nxpnd`>Knah3VnD!z58irmgV1b5SV*Dz2I#P^D{$ydTE#LG>$LQ
zj%XIyIY6J!jw+nz(WFPCD%(IA!yMPU`t%Cy4&UF%GxbxRSl+N_S9K5Z>DhA`;?uj5
zKDEw2#&-{}SPtFVx~nn$ck@hiCtA^Oy{~uax}Nth*g8W&^3~29onZ*R&(Ik>`f=s&
z^AmD(h9Py&&>13Q2k9G~XQ}Jy3<GwK*RQMhx1Xi%89Ia4udAy(ewMnP&d@-A!|5sy
zo~5p2Tbrvl*m9pX-UjX?txea@cY1Al<8<ZzD*771zh|$_k^Otl{(kxRB-gcP>F@FH
zjo{ncHb|Dswj0K`Ct3dY`u3i<!R!z(=yrX3zq-mSeG}i_QPyRKv#aIX3*G+r`}P`g
ze0!BM2mAJ({5yPmZ(@U>yRR%9;@cZd-jabIr_SQv`*p2ZD%l6$8Sw8(zUBJ&<XiG|
zgpvGvkHK@~YdM<Z-)lk#Snm4w{Kx=<P9pzaA-@T;+y1>-=tUZ1#P#vXzbC(pd?{V%
z4Dt!RGK_zZGZ)FF^!LK6&f?!I9?`!Sas7M!*wo5Viosj^@o7xQzbD_GU?RVs=Kk3n
z-=1=O<)6@eCI3}UzP%29%XZUv`+4`oFuuJ`p8tw+o^LPV`u2Wu9{XU1`1Tf|L;Q*I
zDay<K-O7KBMbFfaXK$+CYT|(re0w+L`1S(C0|Tya&yGXuJooCsxrSZPo#We^{x^Ml
zPQRypdymquY{Oi?-oreTo{{U*OQUCaK0S>ohAq{MuBY{LHlN-hZ1f|R<J03_k^!II
zA#8My&Qh*VPxFuA)02$Qc)rB90VmRHG@e|4p7a{opWWb4bnf}{q@T;5cNiLe6B=%_
z{dw5Kl;=ZEqrbNn-%|pA9%ovvT!CJaXU?%{Smy|chC|SBx8KkHz<kbC5)DtaX;^-u
zBKjhqw71Lk>5;#+RC-pu>(dkM8P}&*$M`QNUk_gpb%?VwUT`>XBs|9OdpSP6(|er$
z|M>JQa1r4i0*xVnPfs)~d8~e=kH}ZkkF73vRipRIzc<oYbdDbS+BW3gHrm<NkQy^c
zUwec76rO+YG2ku#-gLe{%eVZkT8HxUbn<Ko&!mqmclD92v;MY!@2vXB5dWTVGSt5}
zhd#Y^?D+S5z1$5y;(WV^sSi6}SI%!^zJB(_H?l82;rjR19m{SvV+Q;8et`ZbUL^mX
ze0rDQ(;K?JR`O21JdHbu&#qc=UhKmEQ(xY2`}_NW`@85>!uy~2?fLTlgJ+&EF9H4^
z$98)@$CtNgL|@)Hdv2kw$FGE2wfnz$##tWQ7iA~R9nRPE8QyFD!}<8CfP?sl=i|%u
z@5$eH)b;TZo7$+oR`T&3MYr~ReBK%l<@os8I1fPh7L9A22JrDU(U17aIedF#yohm~
z&8PR~;=JT;`jt;ld`o?bp5)VebMeAt6rY~>Rl@e^ozrV!S5|YTM2h%)=Zjg}4)x?t
zC4Jd`KJtgt$WE=(p?*HuAhw?m{-v@r!A-88uPtZa&zp=RX3iP#^T~(l`18)`4cY#@
zbN0x`H@rXZoZbNI;6duhKjeFcJE4@{G>lwvb?(zVAOH^tjbabJ6Cdv#$Nt9=>bg4j
znRQ*A@|CmHb#?AD>$*O#U!SF}t8<@O*Y!jF>@0O%o%_tXuAlC|&QjO))16t@)%Dri
zIwGue?tplYc&w}I+dMZY`#9>0$InvNa(s5D`}O#=YZt9QOI_jLa{PANY&(Iv@+Bx9
zJM<&{|4sSHU3}}_0q?9Y?W<92U+o=7ZaT4j?~E@;@3*k`yt4)pR;d3g{BNJCd^lu#
zJ~D><I-QR`g*)b^jEWu&bKhKG#a(@)DEE^<O($oK&Q2rCiQV`5StCC!3HQH=-)~1C
z+@F{d?tlGh!`TN@+mBb~A+vR_#*C_W3r3L}Si=3GW%e0l_@tI3%EJBHuaojkAIte&
zORRgW8~l8n7=!67UER>3d&8_{Ydc1x-*7(Hq?o^S?0P;H_xIpunr*NT8X1RtV?Ne%
z9Xfl89H%nQ1xR0WIp-acUy5GvZ`3hb@9S>ws5WLLdHv|7q0U!*(^vY*`+B#4yA&Do
zn-g?)(v0@kpAIE8=i`+NlbZMD8*4hdN1Hi`MKzs)v1ay`nPJY=<xD>I^_C;Q$yp@d
zsH8W_JTiQYiIpl3TL1MNJqCWmJ8-5wTRrHF6}0Q!+hd{cNZ(NWQ2czjefnv}JB@t1
zm!J#5z${zdk>K7#&9j_)1C$?nkaxOUZ3?hke$DLW$jx_km@$;WmeTnYX~l5xsYbb@
z+Pdd!FTD#tZSWB%rrrA6>pSYXuQ-8z*WHv4NQuRgkEMN6>E<wSh`zYL7=2vl55t3F
z`204~j@M6wd-S%@zhJfNI5BaTMtb1Kb;hjv2)Sy{(e?)J+e};(?%xeQ7Mdp!dz=@=
zKB%i{Pw)+KK3HIqqbCI>Ip-8Be@?jIe8(!`sT_ZA3Yg087s0;HT!zmCzP*)lDf%c{
zbZN7JwqNq0j}VVB7T?U{IPZOVq7(m0WXjTlLhf)h*5Zo7UzCP76wJuvK~opui!+=@
zg<fs@O@W=AE0F^~#s5VE!hZ!a<Zz`)HY^G>cVC7NQ1`+J-q@|(z*}$>3<bZC3%kSA
zNrNxtOlU3^wuZ**ja73HZKpJT>ON0@djA~Ho*ObJ=`eThaPE#2uh9MUy7Tpfb9Z$+
z`IK+l_tV2O=9K8}UyEGaJo2YUB`@R5zs~WYH9r~?TJzo&*-hIght|md&iw+{bKYT9
zQQ_}OOAEV7?_57+#?4LEj0ELwW*t7^H;Z*nH0MdK+yxxFYJ%JsSlr$QElqrca}e3P
zcBij&Y`t&FV$QZ+dFexsltva`+T4jhyzTbLYVxn==sr8<Hd*(<p5VUeq4${w3qoro
zi@kgAhAZRU)u;K%KF}R~tTB6Eq~@93ZT87uuC=zgsk~3V$gPYIx+fk!wf#H%_Cp^r
zpT8MD`@mhr*@i%Gf_Y_YL;JFRU%&ph5i1LR_@0Ne4Z%HG##L=59`V6j_SbU889I{g
zDz)$9E&5pU!gzMmX8%9;+4tvi?*9e+PjH9xZ9eoT`bPim4}jP8_yR*4!pV2@%|nrC
zrav?VA9}v&U%z}|e`BfXum1pfv=!1#eZS;xL7NuP!L}=wA28J~*K>Eb%IbYR<-NIY
zX{zfR#9vr@JD~{=mZ#P^cL-{3d!e76?WgG{s{O^#iG6oqt$!afVXt(OQ|rbgPc`}C
zw*0tGXS$JV&)!@Um>Mq%Wj8@*djs5mj6Fz76a3stEV185rqb`&<Sy?16u%*_`r<VD
zSEj+l=Wyq}8P_*2gP*Yaa_*2L=kXERIks$E@@~$>t)!j({wY=1fK^&Q(94T$z~{Hz
z=NVzXwDsTk(%7dnrK*PZbr*Z|7WNiUH(;K;BW&{)voeEEqn>+7LxrI=ipc{1rM2Ti
zYv4P*qxl`07+RC!4#x;<82QlK0KC8j?~Q$Kd~Hc+jn<*cH$fNg+^`rveXYGe@h<w3
zT^Hj1?HIXi_MRceC;X|5%8JfC-1J;GnD+;fMW@!0FI?-Mi4MJ%{#$laD>kC;dEQK$
z%7ItAm)`HpJFWYgS*MEa=xkb*QLL$soR+JZPXhj7nQ6^6W*YZ%PpNA7o_%NOe|I4p
zb>F*>_Pz1x{X4wZI2CizxAw1yJ`;>VXVD0M!pTk0i9IKtWos?YLH0otqANdn{uX<D
zeFN)H^ru{YtvS&~5Sq#`?o1{55tYD(bwJ+1Cg3((Hip)t^)U1Ekpo`||D*o_m?4*Q
z={W;_POYl}wza^`ii=h=wdDKJ4)T9f6j_u;c98?MSna*Rc!dLftMBufN7nCW{LbBJ
z$Cec)zr`4JHx79NjD<X=0Y0KTdUdy&ul<L>&YstW&b*4aPp}@I_%6CupFfZLQmm@_
zX`wamFXQ}NerGDJ_!F8V_wv35jsFN*(ffpCQl4oJ6q@EPa3`7+-riqEJ`MBs)*QLJ
z;8F1m;%dOLKA?GDi9gSef62M~N_PwC{wwC=!a=g9m^%|p|5xd|hcy=h9{cgVsqg48
zeJ?@>QXc+JVn^xX*3xpnxjl>>{O!EF=Fit$)_iNtN1Oj}{A({AFPzr=9db^-lQ*il
z<K3^l^jhJl=4ZJ}B*D50;43qw=m;}7=egKQ_Ed77>3z@@@C?l`+Yhv&Q!%DvKJ#{4
zMRh#AV)g1)_+ZMI=E%Jk`FhbMuYqUrxt>b$-SJm#W{tM7HY3pC^TyYlBB!lu#q#+F
zT1|34<LyERgr?XlTLjJu+wWn%2gzCES=Ig-p=1xft!R;%^L5t4cbNCr>F-IO*&#T~
zFHlRL-{E^9{(%&-&u|~K=J1;4KpvdN@ELawfvIM@+Sd5h?rXHK`DhN-IpA!?S5`lp
zA6m16xwTyzd|dO|1#QfUI&%w5lrH0IuD*zNi7D?|am)P8elwdr5y%bGo-%pO+PA)#
zIj}aWv_HKEosXQ9IZ?*1F+(%<-t5(kIRSq%@EpND^j3DZJN`L3-$M7(us6K_6WtCx
zJXrjUcZ+zYc6<4a{8;l#U~o0G6=ctHAQWhBgT~p&(i~V3S<M{g9HN{#ul?~m;V%&%
z^m8&h+rqC_aZlqT;Z(4>KHq8%=7rX@LZjj@f_=<|iD<#x)AqPW4}M_z9&^=r4i<-P
z_zBmcF=qQ==%JfC+ioWoiobu!3uZJ&#F!}#Y{oVtH~aH|&FeGZD@CE?;Td7tApaD<
zKnNeR#zy|`q#E`ST{B(rys0aHjZGD@LTh5^oQp?=*7T4gr16ADht_azQ~zP+D7p*T
zxUrhm=hYKUe;qjLTCsBeer%Zotyc22@A{Hm?`OGNo3jlW$BE4F<FL;f1NMx$GYPL2
zoQ1b>!0_k5QgV9>&-IKv<*Iz1>)Dlm=B{Y_cPX$ry?!30tl(th4>$?eskgIpj^oD=
zk2&@Or!7Cc?H&7>YzilL%;ULX^o4uxM=yp)N<Wl*w{#yd{J3IbsB<&pickg|_6PsV
zDYusLDm&cA7|QYa_Cxr|(d*AEsa<QqyH2h9nXPw<Uj@*s>!61Se43nzNp+lWuobxp
z{az2x>*T)Ji{XjX*|k;Uvd2bS-{6_bgec>^qpf~;`gY}(?0bwHGk8RGq3J&Yys*_D
zvZRCXX-E{ugJxRXgr>!7rbL%KRY+NA%}_spZ_OK@+S%#0qdvszKgN9ZeL3H!*8Rku
zhxErO#yqrf{Y+cGlaBdqVAoXve?1?03~%4D+H7R3+l!d<4F#OrJO+DW4E(&%T>MM?
zQek)_bV=?2`jFXn$L}6B8zW<=%Q>DJchD5a&toi+@#uMZcKv?)d7wD{0X?70bK0|?
zMT+CoHEwjp#`Rs7UlCb&>SqOopKSBr`XB#q`NzJ9tox;ONYOKWbc(LNwmz0~Z}iV?
zSjWIMFuvG4+ghq}(!W(!y5XsHPMOq)BzMe1;;X@JGvia&p59-e`>%(qBONYNDLut%
z|LsGz+-Wz@Vk2YYkGeOz34Vlr06xHF&waH?0}bxyT?0H#KK`TsO&M%g>C%F6)SwST
z*HLIex^*i!&wK^n&AZ%bPC1QZFZ@J%(+1IjDRJl^F)dy(KDy*Q=%74@mRY~;_8MS*
znwvQ<)c=<?+^gl55uIr6!HX`4%Z_>nIUt=h0!;q2#%yf-5H<;Nz@tyEp7(uf-A@PT
zM|y$i#<@G(S0$S)yW85=2aG%!|5^M^cS1i}H*MG`7W4XHQ&}H$vmi>&Q>J1P^1P`1
z$N!F9h3_HbGY{#1Fj5uY!Lz9Bd;Z@6%%!`OpY+>z?uzz((3sxUgr>)vXm{V2h|P2E
zcXkZ9j?m|5)|>h%?;wBXBK<CI_U)~kU-wha9=uTdxwYRAem07|R{v@?MoW?PP5;;z
z^_l)@oc-_WZB;$Ql>(*ccCOAe)cy$09c+KdmOHiXS(_fc{@c(&BKgi(((sDhzSq%r
z=%jN-h`}#q#yNheT|V}QuLyJ)<|coc_<)I&#Q%D^>@C3%T36mOI;O_0-zjA75BV*)
zd$4T)j-g}OIl`fhm()4&6Tp2F^E7|FyYH8@9U^DOL_Zw2p1*s({X0~}(F9iW@4UXW
zuGId?>>PU>(USPD-FJ+Ahx&VmHicW|gMOJazO)`R&KtM`R&ch!p)X|Oe%3_jr(b$F
z-4NI_k}X<e+oBb=En0^yS_{l%&)M-Z+DfCBpUaxs(q#61r`GIyvcc@zyv6Km+imvk
z^v?E$4+Mz$d2`F+=ikWw-HkPz@sGc**qQ4#!(3(Co<IjkH2qUwy3Qn{znRngof%(C
zZrMGf<4ONN^*!yc>+5pov}O0Q4$cwS-c)Ypi6^E$U}oP1AG@pEZ2u8<@LcXIvinS3
z5;uR`(GeYQnx~c#D_~EC?0}u%!z|+51YnSnz1<KTVvh%Hd)(MC07l5<@*Eg!hNiKp
zw?)@ah#vqBefUL-FDLF5<ctS%|HIsivZRpvRXBI~Xdybr7WvUAlUe)u4vYH(bk54=
z4}|6~AJ5L?vc{Lf+syUBGBf$0-&bXBi>&q=_Qn6otXhP=6PVT2V%T%eXGz1j+Ly>J
zs!E(Hn5Q+Q9KAZu6;U3#+P{V~JbZ5Z(yJm`dz6d3=InEiA}ih|z9pJKK5lR8G5df=
z)mW{s*RnfAx1WKIN_^25U*7f6xb|G=zkci4Bh(jt{R__n%n@H-r|>A;oegg{<lrrG
zG`mCVNimx0QQWlvkI>m8OKESTZ}ehpkM{MtUjUx)^>2VDXw{F8L%xniV-^HB-y*#>
z(m@X3<N$l7qWBaujKSlNBfS^iZ$b|;=<A{t!2+FmyT%=bmb$?wyl-1gl)d`Vsqrh}
zW$?Hv$;Wzhm>}b`K5ROznfMdYFSh<~{5AMBt(oMeqZ`$^a}f?cP1zm3G0Y{ueX~24
zCGK4Ei37gMJalj4x&N1RxC{IqgZ^sHF|#*9i-({+?N1v`|C|AJ^uD>|9YB8xoBoJ%
zuf5f#KkS3{UC^HodnA|s4nTitbXJo?e-`u?g#P#}G0-31Rc$%+R}KAXKZWonJc|C*
zzUYrV;`6zQdR5n6{EzH)lN_k$_tU^D;_~8p&d&qJHl14hPUsyle~S9xyh?nlH_vP=
z<bMJl(ED|KYW$86Yfqrl+_he3Z*ga`@QE&FEaLFr4E3@8x3d?%Gi=kx)T%$z#tG`l
zH&>6|qkZbf)ED(cYd;3xlHJhTzA)pimW;w@Z1G#q^j|)@uwm~CWux$J<q|g1mPdQ~
z&XpfE;K7q0*VC79GmB>*r(PA`U*;RSdQpCZQhYkdhHdhNZN|SQdF|QdLHg~%E`&bc
zPV?c6Pwu!X;au>Nc*S|-=dzc|8$$*3StI)ix?GR_R#AekjDBp;q1VHEYeJj>^~XqG
zEwGZm33%E2^1S*r<3jy<*NA?t`BGQ)`#(C$OpzY#`G2LqI=Y8N9LS&CMBAR<H|x*a
zH;3^jc2DZ?=A`*}`bWwiU2^3XZ1;ag&jMfP+IE=Zqj{8dl7e3E1TXI(U+=<yp&V3;
zu_Sh1-*M+}0?ne2-vNL00sAb7q542Q`4zeT$l-ju;s;&ey^Q`?AKQI-p#_=Z=o0LT
z+hfE_-s$$mq0xS9x9zLx??z;b>Rj|q^dx>ORxF<6V?BGY)3^A~g1X0wrkm+wtBFg;
z7&mAARy{Vs%r=T?gNwuDOq`^?DKyuw$9D9OWxrrys%3WJD=q8pGmjg;zd7Nb)VGdv
zi8tO`_W0Vy&5tMi*Y`b=Kc%^-u&7zFpN+m5&G^8Zb#}una(?Uc*;g_SAETY`GJU1s
zW!1`WKDE7;IkG0JBKXCDU1u7dF2nq0mQm-!&_QTsZ-%^xA2#^+nc6_JAr2rLAK%)N
z!+dh*S4V8-JamYdiM8Yf@E4e9OU=XwO7luWv+gtbW6Q0Al|A@O^J>rI472<yXmQec
zC9$oBvURhGMIh76gy@S~{F6G0n;d&Rg3l)fzHeikA$$~D{MUD+rL#aEOKVO1y?@3Q
zWgIv0VQ<-F)^>j*<A~Ilc#(OeC0b$P4HLgr$~NT|`L3{$l4}1i#PzjK)t+!1#^+%f
z(?7k$bQZHduni{NNgErf-^keNk*6Wbq^KiWyYaWc0$u!8*5_T6v#i7t`rc;DW%0Z6
zP5%eCVpj{Ug?)297#Y^{&6LkHhJG-eu_`B_2pMJ-A}@jIwg<DDN=*^DJH!(3N9frP
zk;&pq0c;ofC<Oc80*eT8CwlwZ`6=Q?@;%0RcBgOZ9{D)Z#6G{l{~5F$fewtB(af13
z|HnFwX!#hhwtZcEPisb2nj-un8qbvW$@c$J{?Fk5^!D-m*O>0xklmyloQ<4kpq!xk
z%_jcYCvAW5#UX5fwf~@VgQwg6^;+<!Ialy4I32@3&-noD^0UL&mWp3Du^xQ*4L0EO
zs>$2(xHWF!tcJWNAFqQ~)g+o){2OX!aX#Ky?|+>swa+jE9#uCzo!!(j-gK_U2A(P$
z&{y7fHO}c(OL(U~<;O_#{3gb&|9{p0k@zmWaS-1P&4BMthwo00@8X^Se103h_n)U@
z8=?WvK0Cp_c=1F#b_5-ZU;Z9`rn_CXLrXiLciEUJc+6bJ;?WO&^CM}V-#Izj5?gy`
zUp;gSja2>FZ#LeEF3~vGIgd~J!%XUZ>lF4XYdOmrDZ<Bc1ASPmPwkb60n_^N@SHsC
zeERDG-gm;wE=Biy7aG$${g3kQ$Gj6hi)iyw&R{u#AMA8I$FZdb!6IGiz#>{2_tkJN
z6|m48>dMTK2gv(6kJt!)m{kGJyV+8)p7ZU^ss>^vqxQq^jQ^SsT2J25F!Af9t;9;L
znVjK;{j(uFJ6=irbOZ9K5nplb`Ru_}K5AiJ@8J*0pYxMsLz#*9vgTwvH@yATmm&pP
z8|XG;{mI^1)9G8E-IN(yn|vL*>a7iRs@)L&knjU0S@%_6@<X(L<;AA+Io6c;lkR>Z
zHoSLX#*p`B;^fd@Kdb9fbk69D=M(3C&0kPeXGZnb0?YD`m{qr-6Rcdq-R?`RBcs`C
z9~y;Ej5TP?sOBiV<yGkP1@d@5NZk#zw-XtF9WWqc)0`#nWB6XKp0LZcGqD?9)O*iQ
z61Zu_>VGk2Vj>A2GUYEvBKSKB{K;<oAibR9{EJw2Q#Y{;&9$eXHmSMxa(;8_RCar<
z<!{!UYbU`g?=i{7LepP2)%1Jw&%fBrt{JWU*}%XbeNlVTZQd3=FK%vZ=qM-l9lCCW
z`Tc`gD%fa#Hhe<o_tvs+PWW%+?5`K#qtDS^HZOEk`L}|RS@F3J;L{laR_MRIFYx@r
z)e+!3p{g!)VQ(#QeEK|M`2PM)k&gQWyQ$;>KtI`0p`&5hk%Be!V7G-{B3R$X`vE*L
z4nOhw4I${CT)VC0i+zG~JHFqQ7f;;e%qc?LeK?%Wf(CQj*-gHU=J%F6k1+p-o5uq@
z&z*;#Gk42F<_Lb&LGuWo=gdQSIK$0j7Vii3PkyXD58{?9`27vm#`n7>|IK+E4i0Xo
ziG0=Ed06}(ZXQ?jJa-<uIXA8R9^a8D-?{j(*lQ+y=p41-=5d&~PVPLK$eYtV2KXCo
zrVqOF3Ht`-6Bq$6x6K&bp8vq$`NXhohnvp}JkOm^EoXs}S8~MgojacxdXG(C<PQ!v
zADzvgJ0CxJhc;fI)vcVB=itQ}n8%3p#h$6$c6PsddLBc0f%t&z2Jr&v+&#YaOSZr}
zcOa|m{xTEetmh+J|AJ2J(scq}X^(#hFS?Dq=Yf9VWBym1epP=KeCZXh%@}R6W(u)u
zy*3TBG+di6pugs}+3+W~P3o)7UwCbXC&kgzj;#3O={AY058LJ}V)nUh?ta;Allp4&
z2VR?9w0RNxqkn(8%~a9wZ9YK$SZ<q@zjNE9zS{g>UYp@@@y12uV!m{`%>X`?;pTpr
zoQ&KyoA$YFQeSP}@3k2_C*HW-9JwER*MnyoePXyauSQSGZL{Y$ZkyCsn|IQtcxjO5
zsy~#M-p2C*S_j8Hzk=2~%#j4&+gx5+&N&)}T<==y@Ant9Hz2Q?HW<Rn;>Z5pt<Ptd
zzG`u9<Mhzl4Cl#L?>E;;XIX0H$7?4Mmn5(2ShY3Yf;R6w5B~a)IoUYTx+l7}zK^>-
zC*|RrY&E`>(&Hqf?hcp*uOp}SlMCR(S0nlKI<jgx_tDg&e?+du=BIoJzhdLHhVvQ8
z*`H~S#E>1wiX7eJ3g#W8zva9?03Xi7Mw9Ni|5SFia?x!0^7G+g@&eCuVN&}nFu9iX
z&v!0NV#phN{qG)O{queRH<B;AzzzINXI9z$ca6|L&j<CNqW{_S&-bAI@txTH?;N3j
z-Vf^kXHNgsUjP3yLjOD;)c;TEAKlFGJ*a=~c(D8b$q4=Peo+5EcKRRV_1`%{|2!Ym
ze+T`;GY#K^`tNo7e`bXKc|WNCA36Q&ObHwQJ4WcA=Y#s+PXFWRpYK8aBa7_$|8Ru<
zc|WNCA2|KXPZdQbn^e(&z9iZoc6}p@)JCqp<onO;(yx-cjZVE6zs_Fj?rn&c#e=CC
z=#pjeUDMgSEFTN&t{MNVz5b~)(7vlrY3<Hr&FD-E&BOZs@bj33tje9o?(aJD(A_C&
zJIw##+J1oN(q*LsSGIFcJ#r(R%r3nT-6+7?)EzROY}dCJ-?Z%>^wQ(xsbF8(`v)~2
z`HJKx(is7{KA{9Q$WH7w+1S@TiBBf4ZyxcBs<ukszTF9YLZkcUwKd(?5ga#Va`nW}
zssy~ft?A~z&yqh}Ld>Rwm<?x!4A_~TjoE+u>W*dDezLD+XC~0!Wl#ME|I<eJ&}Q0j
z;!M-3_MOE4Fo9S#JO+EE-@;FjU`)(&3E$e&W6$FZ{~YpgIDeC;$EO)X`J?y`>3ci<
z$<F%Y*Bsx6QO*)$BhTZ=ui%BBvVA*dPta&@zd7;^=IP}B6;-u0P3wySo3^IU^vPGr
z7>|4p`5=3CGw+^^k{8Ik<;LttVN;}UpN|evRP_jR-3NW>_e1=C23RYH=c^Am`7<eK
z&!lI?OP>Go{DzwO%?(TODg2H2P=g&CskCDwjXANA9()H*z6>@QeQaS|%FD>ZmmoS1
zM#|#kICTa&OTo9|(hi^UuDK5<tavr?ubM#U;Q-^X{}UGy9HQKTbd(rxg1L!4e!(0>
z8_{>N^F$w)K_7{~X6OFgont@q{tRUt+{(u?t?FiQYk|i!cL6*=Inj>raPq0_rhntV
z>|cj|oje1@W#uDI5Zfzv{io!%bw>4{Ga6#xDspcq`3Cj%TxBA925f7<1F&xQ;<z7+
z3iej}^<Oj_m2;=xNAcar?;DZ*PkFVWcYbKu?~5K?2wls+`SleIeG%dl6(N6I^c%w8
z7F|)<N4(;pn(g?C@elOyyWv+?_WL57FX_E|;;R1j@@vwbk39S6iVC;RRj2DbdsV+L
znp5W<r#*WNqoYTCtnq>NF8}!HdNb)Ol=CiKd-~mnYx{kPoOkEt)O)t3-<QsL_k2#h
zpE4F>o$haAPQ7g(@An0A-hC?P-ARol=Uw8;(_{G*ZANn5rE=zeEp0}fcQ%ajqet@}
zyfS$&aI*gwMvpe>H*q~%KQD+LUB4pG7X%MG@r@@Yw*J}9D}m?b@;~8h6fhqJ4g-`G
z9xGOa`oF&7bA92N_}1^QO$JS2yuswfYxwqW$WQt%H{`~d-VpSoHtqfxPZRy+_HF-W
zTrr*x*SE$oG;dNg{I2{X(1?AX3pyG3U#tmV73**yhZ29slFVXaN%-Hgi_L<kILF1S
z(=#MLGAzFsZFq9)HGEp+(b{=(L31wtv2)}9d|7tWYsu4oEe}TC-0XcHtnH!muz;P#
z+(W=k@oxhS=9W3*J#?7+-fkayuc5w;2ijVQt{YkrQGCANzk%Ek@L*gV)UNnopYRcj
znxxu!4Y=rx3Bkk1_xF6Kb2l^x@m(+1CnO)2cmw+TwUYhh_=-1lVIzd_#U0Bse|U6H
zF=s@B123n8cb&S&Ba-FrMaqZC(XFMt;#2aOb<v*ccNbX6{caoG1>q#QlP#ffrkOou
z<gPe<hskU3%KnM6!i&nPkMhge%O=0oe8!0E2~n?mf|dL&<&-bejc;4!%s6v>`AoB_
zP<RE`@Lu>d=e#Y7%!j8<wC)c!2k<`u6Z})B=g|azspQ!U;#>XP|3&-kZ+7Nf(Au(_
z=knwA@H@rt4amBN!e?7_CUV0)d5{0Zd(XVIFWN3UueD`|_xrxq7VXWjpKoey`7iJH
z`K>MA<2P$)PrLKoyp`{TvMXrc|6tzZPx9YD%RNO_^0LwFVJ!+L)wk}Q@t$+Gj{W={
zo_X}?;a0kebOx;-GZA@-Up3lIel2mwFu&{h{U$OgO73kvJU`0kF#n0C%~6h4l+SB=
zj}M>!o&4{Fo)<fLP)=T2{Rcw*;`vd&Uw6kaG`=Q%=>&O!r(<ireY@D_Q$w7v?U4oK
zN0fFX{4@G$q3tc?_XtPO2l;Vk)hDq16aHm=Q^3pb&SCtQg!&(;;#?l`A#M4OTy}Ut
zar+K`Szr9(?56cMhdNs*7bZ6K*zKXtvcg@Ze)ecQ(d3)a5M__X*Fp~~e_$Q4lTVu&
zi&y)7i%Za1Bx4gzGy0<BcXoa4t1lI5?XIZrh#}W3;!<t?f9x=Yshg{fSt&X*qe7iA
zV5Vn5@<KJ9$ADLa{F$h~WNgeoW9&{}*~-hK(bDj;dpfH9_>w7WO^lV+<MW+MjI+@<
zZKZOHQ@*0bu@4dJe&e2(Hj~2;m}r`VD^~PX<9kh_8(XX;wI8GXfO5CpvHqlKS>JJg
zQPr!y8NE8gG+Gtv|FVDDp02m<d1>0jX&Qf@=K3-+I<foaj#QzUlknf%*G3<f;jD7z
zt@^}yUVIOKylAM-KfU)h)|}w5%s;)kiTSU~hF`MhI&MaDBX}X!*coCjX5#wNAUsfG
zyIHj2@0*u+KRbI3aX+<lh_NdNKjrSl8>)A<;fIypsaSyLs~;}bDcB3{i|~!w;{f*B
zOZ6VH9OdHo%*<|5EII}qM&9}AOWy`B6^u2oB4XpOhVdc`X4h!U`hfeFeLiw^%KCmx
zy+qSZeIa7;Wzbm}-%%faJ?Lrbt=UbRJ{B4jAKyey`-yzBPj?VSKMFs}FK(Vbj(eY0
zFYlWU42<@O`Tw!+N7M}vi<8cyv;6|_suVe3whqMEoM!bpyU*jS(bT;m8&8ihmbL6h
z`fSsvc&H)VnSvjm1b0uoubdO|x(4<eI<lZ_DR&f7$DU73g*~5p`OjM4W&$6G-+ieQ
zpMnSef1JI0e3aF-|G#G@fj|&23FJa#CJBl}tyKsiqRk``P^q^NFV(h8h}KB7HKH~M
znh8NsqtyW_3LY~75fiob0+pOz2%;5BdyWCCr<bFX3la^sBDaj7^L>AwnFj_$&+qm7
zV_q}!Jo~!#y6v^rUVFU*`v$oo3%s<Q4L*6058f(A`^T|9XYqUvejV){#(dwgoU?}o
zB|P(R{>C7~e&f2JwV3_)+sOFWh?CmTXgXgdR!V0RQ@|thRm1ij3%~*5JykEh%=whb
z;p~nBoO68Hu)UP`F4`<x>}d6-nXo|y1{+Tq2sSNj&G8V6MNErivhr&$h7RRVECtU5
z&+k5lpQi4V+dbr(kd40u-|=r;rwn8hcdav!6}0X6s-gUe(VWw&cZ>-UTcdlaT3FBP
z*|TWB0zM6>pAVS(27b%Od<pBN?>@eNIcEm>urivm@XrK^y-N3SUsX&`nnL|B<H{IJ
z?9u%?!<5~&ikJ>B>%K^9LEOEcI8*g|+dYvL*D)T${7cwZ%#Ju(>wv9f<}JVx+E`jd
z9WU?nJLih1FVb7Z*&qDJUEqesbQa^5pYeZq_QZK=JG<?_=<^`YJUq*E;Xkc85B<Qu
z^cmKs1$_1l#s>`VwDbUczNOw%1LVhCp*DqseqscI_?6IsUdr)}4eW)NdiXzzb+MiW
z$3mB*+Mc<|ESEnnm;ICr8&`J~F?ChB$HklFp78uv8FP%r+{srwsx8Dk`-oL^6F;Q*
z#V-B_!J}oYX-=NCA1~LwH|TOt(epQd5xt*Pzo!Sx@{D2llcC3A_BP;r!2dmb*fIRQ
z3OH|w;cqv6&7J93?ip$dM0Xx=QuwWPm`54m)9AQ$P?;>+(VnN{a^S%K(fr>Dj7QOr
z;E)Y&6Z6m(8p3{s|LQ|=Tf^9!duUg*ba)VP*Vq$|@9Pj_(VD;bzV^DQZR_acKPe~N
zSOC9j0pG6!7GCf>m-w7AaMJ~?<S`Ck_0$0`-{eQwhFn}~KD%cr=h>P{8p$WfzFBkX
ziM9VQdYHy;suv7=Li_)|JBl}ogY%an#~l9cKBq~pt_RoA0f?6k59XctmGJMu8^L|*
zDK6oAj1gW2Oh&a$<@c}n?H+8-@gw_G{$9$8@4vRt+Lvy}PSSQibu)kmV_K@V#iOm?
z;Nnt#+i;2ir$19x`~DkfTW5A{`ig8x;M~zktzUB9YwxV#oM|=a|Bg0WhV&+LcIFJ?
z*w7ccZi1g6Un0dOoHpL9-+%px)=l3vwfkL(`OiEt{q7RvnB>*sjFK;M@L%k|{&LR6
za0V(SkGgLXPdXZ>R9Pq=?WM$fCm@e5!^V?f>E@Qsj(tWteF)p|!K#t1(hWl78}kzT
zY(ggm9=ZY95ARMV=RoLn6S$xMA@)-B*g*C#Gwq|Fx)8b@l^?mra29RZ%Dt-{fdey4
zcwdzXuLA$AnEA^^+o^3or*79G&eRiU?eseXp*&}x`xfHAgnzt0$R21c@J~ly3?b{#
z*FVd7j{P99QaR|=!~oTJv6X8)%7JibUP`NE#qW&S&;zgT$Q~$s3O<#cP442VsQjI~
zILgDG00-e=Ry<o5=MBR(C+i#v?VK4%CEnHgja_3Nv96lWEsS0990vK~9_FZRf#$(u
zD`uLQn!6470<OJeI>rV%(a-!bS%f^Vz0T!lUopBZ89GxuiRKnQ1Dxc)F_}$BmB9DF
zVa?l{A%2+J=5GWx#63CE4Ci4op~2B@tMHj`Ui(OS*Ga+K9o0qHjI!DeFdqZ$euw(P
zp$^U`S?k_AJ^VMubBMNzs`9P#-s~j<A#hYU=+)f&u!XP(^6T6TaW6iXnZFlZBV2Q3
zYlySyU%(55`vcZ@YTE(6ZCINQ6L^jF^TzOEJ-<Wv4mhjU?ySz)7$RTi!Ky1-;eoXw
zX!X#%^40|K(}SJ3m%WQ{^jhdacn$4re|J@M{yyTkv^VO7=e$k~U8%_oltBBT9!H>R
zZPcEmF-Zoeju<E$V4PaJ0Bvz5Iq)aGb=R<m_(reWJ4JKU`Y66DgujCIC}IuUgI261
zF*1r@1=jw9kqth<gtZk;DRw4AJ0I{aNc_F-@343|&m{9s$JT4Xo18Pf;F4^Al9BAQ
z%EQ>OdYOYCIiohT1}fW(JVH0E5Nvx{ht(Eb)7yg9cWT?y`o{O7_Ppp{`fcMpV-5@F
z$BcBg%HG*k22E!`N5{e3KZ>=C(Sz1V{ahNiPM7do?F;@|AFZ|4#)`3I&*c4gWc}X$
z#MZkPapr+?1DtKoV0{vyr{KwE1NuO~yP$5sAdi*%Iey;1W!{pxI{&41g-gnlh%WJ2
zM&s0g)@gj~Kl;>m`&ll}RKALD?di9}Gxc9_H^h-`{}Io-z^4T1R>VpkKfh6N^Gk`t
zL(NmTXwUU`w426xC&9$9SL^~WQ_+QeKlX<A9g6O;d~>4k-{ds?ud`>_3y)k*T=N0G
zZQiZ#ziNG$|LDb0`s2)5r+7uZGtIhVq8EDAIa=8+Pom5hyDn^1e3@u=2>&y%vwHeX
zAj2j8lF|0P`O$R|5Ab38boH1$vd>m|npev1Z9*n63D|GHHHvppxQ}kT!<p9fOX5qS
zF=}aTxi|9O$$3iget6}6?BRmLzM;$+{5h23Yz<{$BL{!@4hxp4@XkBn(}Ih}TL}y+
z;me^&<THyeLvIN+(SG&5y(&7^W$-v3eA#W%`#Yd((WTnh4KGrkKVbgC0nx&tv%TT!
z|DMt`1|OxD=U-G!Z~c(<n8zBZj@Cl!u%B@SSPSjx?X|$Z-am&p2Cc;}iR08-?2}9Y
zKEHuJ#s8Kcf&Zu@@K>%a$x6vF;hy9}K0HKtTgW?K9RF?zMJi_TOz*1swsQ(tz8%i)
z+zFpszbG-V>}v8!(D!6)FYhgy8mM%7TN|#1r<&20UGPQb?!%_=Jl`5$E8kWfa_xq&
z?R9Z(C&#!0207`*KIuh{1SzwDwxRWRa_Y*$!E*Lc$iYqJCj2V;{SM%)w&nrrSJAnb
zt4(6R?7gIYjz1nh<8wRf-ZkM>9diILtaJRz^PE<e6i{x;XwC%LE|lk)JEf&_jF0LZ
zTJJ~ZMCHKsz`7Sb$qBsWGl*Polpkb!g!2XDwtz=O?Qycdc*$`fo~Qa}fiJ1>Lg3Oa
zd2kkXGr`E9o7v;(9)GNkvKhaA^iD0ENt;d#^9<JUBG&O@`J^m;#RtDK#A4d9<$mB}
zM9;+9`H3yZhG4~(O9r0_{}+v<oElkifc1^iOKRJ2{_E_R^uI&1(BI(elF^5Rf2{LZ
z=A35HZCcw^bx|JC!CaJcIZA_>ZPT8?hU$WTdWiel!royG@M(<d)0`nu%qaOvVmS}6
z?_~gY(fktNBAQ90kDX&=Z^mbijOqfOyWss6oXNF9U-@0YS}-^C@o`M{sEzkn8^sCQ
zuziH~1zU}MfrU4t+LFMR`Nk9;n&q|b@s(V0@l5}N%w2E{o&b)()`DZl3E<c<?pQef
zj{n`XB^X`_JY=7Px4dJWox?_#I<6!<550^8JZXD@oyG|6ug}PbURbv~hI_*wzypQn
z|KyuoX%>Flw%B;w)^Eu}>}&5J6Y=AW2)t2sto=9MJ~xSdvHG;=3wxY=p0<Be`A;H^
zgF9tow{wFmy2}Jg{*N<9$Dg}$5^oj72XMa31ip)}$f9+xJCKI_Q2WlU69;m9-hqZW
zW?-{?Y@W=(%QMY#+4js>%XZPezG_gX<ZZ4w`CKP)csZwd3XN<c*vGF%FIRpC!8P4G
z1pgg-P3Gk|m)vsKndKeOQwg?IJ-Y&#ARG?Tp633#Xan8Vp>s^tm31wqda{qRB}e{8
zepcvyII1h<u)n$<`%sV=_0Zw*lSLbgFEPuf2+!y{fxg+dJ?7-Bk%Rm<RsNKKAG*7Y
zGnO_zA8!LIAwDZ=1JnH|CD8MU^Sx;7nuCY&8_vtc&+)g+(ZKiqE}Z3DN+of&e(bgn
zfm5Dr?-W1r@`m~0L#Xpdem0pr3~jU1%@hyuDE2%zGjHLKbVK`D3v>4mL?(HW2Yzf(
zCCFLkXSHeg@1o7J>Z-a%+LZmh0p4W14dotV<{yUtH<Mq=$sR(un}Uumx(%)w)XDmV
zCGSt-nQRIl-(S+I=e_WBC-`u>!`YNc{HN~q?t>?O1Wnxc?}a;pWrI8agfB$<0Bk)0
z>0FE_9LyWs$vGkH9fLd3$HKv$L7jv2y=746(2=Iq&$;!b?0H*wej4q!Q10~Q_16Bm
z1OJKIRlgboaX?|eNou;E@`s%!+(H{+&L8LV+?!~^eqb#4$*!+@iGKfftM9zQokND1
zR<GecJp9SVbKgn_wyV`k#<i}dU5!QiO7hN!+o5C6zar~fc)o_Qtfd{zk(gtvzvuXN
z<9EniT;F>0!}YB>z(DiA0UTQljx`u3`&iTVJB@*S4UVnci93w@y=YJH5H4m?PPTxj
z>8s<Dh_%;`z9)wUdc`X0O6Px^Z?7T05p(i<_Orr^`0pC1-{I(6utWY`*>6VjEg6Q5
zZG8eh3ytMZBeR>Dhb3L69P3Y;jtf3m61nW@gog8*%~0#ii0qQTzZjbh^-B1ivL@<F
zQ+$Q^xy}E?bM9iiJ4%NHMDKIhJG1X8xB1Y(bjNc1#|4{t4=#uO$!7fy_}jbupU0W8
z6;5yX8qVx$uLRHD&@k4@K~m(z4(|cCX0y)$Z;!+;%l_r$jEkOA9^7=am4eH{P2s<C
z7?kn8p7%Gz_D8^}|2b?4x$p@OV=Ki5?_;0T!5AFbCakfi(SK!Z?DaFE_MTzz3(@WI
zbZy5~G>ld5A~SOpb~(j2JP8gAd{weT`mF)R=cQ&e<<$5r`(*hX%WhUHIy{LzwQSHo
zfS(?u{LhgI9n{xc{)_K}$iMfI_3}??Y=UP6dZ)&BZES3p60hpxf5J@3mTw+o2))es
z-N2rG8SSagYnMb;JjL%Lz9wuv^H{@q^yPzw&qW`Q9JAvGzEc-(-*Fz37iTZ$UG`tE
zTzF1mZ4x<)mB@X24s@<T*4-LEAYS^=yuqyt&DfOCm?X<Kvumaa@5GMsC9*{Nu-1N=
z83{ig-8R58!&)wvJaD>GLaVU7Snrc2hh}hol=q`~?{k`z&>GYJo-?ya{*PtGOb*TT
zhWmJ*X}v!sCA5xnHrBh0$sux5bn%XjSRgbTnappU>#V{~(d8W7bQiQPxuP+gd{<0Q
zKSlb`X!N0|t<bR=`x>%BIob{a^Q#BzEP+YWx#0t&%@pZ8TWL4PWwsR&hYsCT_?@Gg
zv=?`9R#du~7rwNRGoW3ou;-o3_Zs|A`d-KX6uzUjkttn_aSr^k0^70nG-Kc?|KOgd
z!|XdWU%v}o8a+dMsD9dHUp>ih1`5OM)t|x+kqs?{w%}{yZ01#I$j__pO9{3;#62L(
zh61~x;BB)1$%d3UKe@kLXF^O;1J9g8@ew9>bv2Y91_uQ@GZKn54&HHQ#^X))aQC=D
z?+978uI#pl1xH}o;WXR0KeP$F4zNCZazvY#vlqLU^JLh8uzT+K?VV8@tdBjma6AoO
zw~xL>xAsRc{5frkp22}_2l4Z~N1N<}tTsR7+b=sQ<6&g&&EW3e&|5vs*-!3^^Z95#
zVcORjr5k9=5gT8T%h5zTN5<DoTZhO8w7@xLrf_V58JG+J(m3~aWxZ?S+|A5^{qmlK
zG2Snb$raXfY^a*sR`UNfFF1Wbd75O;SFWc0*I$VKMXtq~>Fmj79M$IsnG}svzIEjv
z(zu`eg7slt$;}_m1`e{J%61@HF8?|CSNOl##s%>H74Sf~vYA{sN1lW4FX%bAQ^Iox
zwl3^yQ@X(QXL+u3(p|~1XV)N`cs7S;7VKT4n*3EJPy`&KYnk4b39P!oI}Qf5?_6?8
zEB3=ytwU(cMV5}fi~f4S;U02cYE8cUioRK6Pu=8!2=)Odv8r0X!L%b97F{%RZ?fV8
zU#4G^=-+-`3<tcjU(@$;7cx1vj+xMwy^h$H^0k&LsV98Dly4hedMB8%SA=J#wG9GZ
zg57`cKYo9!eVS~~Iit<`ZO9y7!-#-$6657OEinmuTCpkT?OwPPdVL9;y<B<@{NZP}
zI9*K{{7<{jTpmtz{EV}wmrvz?!9^VxxDz&?-$hQ6kBbwB_Z1HrzN`48;U5*dhVLvM
zJiNC!dH9!8M_+bHLQd1Hx|<hv6^|JHaq+0(hZl^#?8gr8J>_*bF8rkUWXh%wzjx4}
zpU$eQUf5ThIsBZ|d%kl)>ODWbchFFt-L!C5@hQWvEPnZ?KPvt`&xZ5tCksC+P91*E
z*r}JzqF#C34GVjV#|;0yTmOghzmmS(!)MpcT{w&K>gR*0vo6yZ>SO(U@aP?v)yLYe
zkF{yHWw)Wa5$f$&H*&-W>qcH4q0TvD_g?mU_g9yF&a(*5&KY~bWf!C_{LcBQ3$5|}
zu=saB)i|Ew^LzK_d`I{`pU*j$9i;64uJc^}dw0QQf0+1(;rBf2x%`8PukfzmvJWP1
zy6pE8UmgDYiLVUbG;!1L579p|__)om{x1Bj*xN4us?`0{58Q>9eVFI|X~g}#%R;Wx
z#=3vI=f~)XDIwON+3D&xiZ6-dA2-b9&f?f!V6(}Xytu<$DO_wGN4|n3%~@;VWmWo5
z-RH39B_@~xz3)#4pY8yk!I^&crs#_6Yrq%Da@nG8d~!OuLQUEh&L-tSW2MxYZPNOY
z=M}_06x~3d&s5(~mk_z8@CN!+e|@yCaw@N~vL8xklRjbFHVkK7@1)-ja9@4r-ujF3
zZtUQ>lg!5T>|Mdzm*nU4gWuZU8@^q9PK9<9Z>ay$^K2N*hA!&)H1pZS2VGwI!nl{o
zTlC>VN9`NvL?w)Q40HK#BQXv9=1f-6c*beJ_o1(L5u^X1anyD(X4!K>Dn}d2_o;dv
z@L;`HThd$HvP;uf$eeO+4(%0Vn;1NDNfvvBG}ZATzk<js2W^DvPD!!en<ZKPW1f#a
z@;u}koNvWdnZf<+*DEx(&79GQ0KXh`ic0$Wh<-ZiGE+1j*}{>B6{oRZihtGsuU--x
za|3xuHP+q6eQqCTtu<yp?P&fVnxwfw^vpi3Ke^V1p5mSIvCd;VhRjtPZj;m>L<UIz
zt#mlHN&oF74_rU-(Yx_yb&qhh_Tksr#kn}_e=Bw(j|6w-ESu%}UUc~`_?hM#!LO|U
z{n$kMuvv7EC~Mt~9e5XK=R)YcKS}f!?Mg7`b}<gY*zteB`2P=VZ5?)(YgoR<`3N`^
zV$6MKJ6d<=F`q}-qmaMo*YNAEv&lu4$DK}Y#`<V!tH!6jD(jl^Dc{1C`7s={bxPt7
z+Hd_KF??=s`=4i_PqLr2Z5|HA*x`>;jGPxcHaMITj@6fa?<bsF{c=GfK12sT#6j5G
zo%z^AUQ*1F?0R=`o<s3QJ=pR@3tJv5ZLcD4a|P}FGM9WXPH*^B?mv)y5C=MI;C)3l
zz%Xkcbh1Y1smk-my1ZnTPsa{5xa|$vnBx@8GuxD>E{XPKhqCekCwO00zPcoM&06Z)
z_PWi~xAGm2xArVyJKu3mZq&wS+xKj{9&pZgpJ~qV;VUt+eE@?lmt$tbT+c?kU0|_P
zwm`*oz<ct4lVl3F=3<X9=3O`AxEb5M4L@*Yrhl#lzooMEk!vsThIeS-3v_Yug&gFX
z3!ib0XI!9fWV8+Gaf^rt;C*>F^L(t#v0U&Dp_6t{cL?tW<3m`2&t3n)!%hb|83vCe
zuVmd#1Iin?X{zh5n|Y@;awy+LJLg^)-7_hNpxS$Z7#U07WgJdE8izfGCB(RMZnKU3
zTl$WJg9|lx&GkL*Xc5e{2Jv%#j#v>J=JH8z0q#}c!cO3R1M9Swy|(--m6ZD<u+m;P
z7DKt+zV}RaR;|N7uQqAw>i{`K;`?aj+@uXx;iX_3!_B3N$+6aYUujrvyB?S^f%a3*
zpzn{N>GUazt@Cg1CvT(dgyhC#4#{mlS`}IGF*GILQ9t=11sCK>#co%6er2NR>~<v+
zXFse7z5Aip@d?fy^5>NYsaqOy2X>Q}FSO3t`pK_N>++`}D^#~{T`B*G`ED+0&1)!W
z)fwA*_O=hemzo{P{rK)Gv@W@f$HST>)r}uu{Q}&j&@|gIxF7p}h1PWFFlVdQQ0pvP
zspcmeta40V%b3-do<rZ;7xT`d6X4wgyy4&Ac{E>V4z{7FKQV*--o>qgz1Arn{#s*n
z=<ox4hoB+ua0*{DgS>zIRzE+FJx}48{_8FiAA1|MaaJPzfq!|!T=<gAHhBI+*nS@p
z?8_23^9}w9?w^v!aMv36)~|sVJS(yi{TW^*f9t2@Iv4zRttsJsX=?}Pem#j%9KIEq
zn{%@0{G_&BYfNhndz9V3cC>y1?;8yqcC7){zvgaLc%FQ(iapgjm3ln^mAA^GH=G$;
zAHiPq;ER;)@IWtuaUSdN3HpTE(t4@AUouA<*Wzi|#&N}dh<Ax+37=klI%<27j8}d&
zoA229U9oF~xjPNp8}T6yGuh^Ai9Fwl%<VzX2WGecqCV-MDSnS~QU1re;@dtZjv@#7
zuRN^uW%(o6hrU$C+{j(u?tRSJ-ho^s$3}R6AR23{_l`H3SN5=`UihdXHqzQh!rQcW
z^i47CHvQx<red$Be+#mjJa_FrFFreDi|_pC{fM(^U$W&c=3Gg;IrQs%xGXHV<`MS>
zzVGqkZ@(B^ABS!BRB*W2B=&dH-hJTusYxbWI#9oKPTjZx_rtERbcin(Y--)Yx^3no
zx!u8cRVatEPM(1A<pk!C!=`*+6vnd48Ttcf_O#-2kUXnm9CH|l>XtGN@lf%;Zen}A
zrH<u#FW*11rJyo~1C6wi>u1gDJOj;)L%0B30v^Vvy6mmOJE==QwGT6PTQ+LEiYw6n
zN2WtF{O+afCDWrigZk3hLu`aExr3|)<%Jja2YFb2Hu#grx9$_RpWEM(_4tU}z1X2_
zSq=VJcbj^_3oHL5`9kBzW7pMp#O3IG1OB@hy!mp0tM$t*<ee3sK?kDQD$b|WGpEhK
zu5=`EP}Orbj^mS1ox3rQ5BtvzHb3cxF2qmlJVPa%HTrS^IggQJnpdgfsH*1-P=A2>
z1JobLMJGPd^VQhUv}c~}C;tO-dfH;ssTlWX4^P|i25=vjmJrR8Q|Em#(&#_`tHy@&
z@43zUVtrl13#Z)H@PcBzwXa{>w_s_h-*ldeow_t_(6$yo=S8@is|-F=&z@2F7cTUg
z&a%T7?qHsKP9v{vkITOlyK2);hkxl>)3{PPNpp42`5*B4uzJn;PxGmwPCa;9LLak-
zc|Q-aS0>ldQnl->u9`BAPXhNc=JIhJjI6IZ!E@pWHfSIH>;I4+s{KeFM%iGmK3uY+
z!i?T#+g&YRA3mT%=mM$0xT_Ew!=ThvvY()f;nNx2M(p<r*+Aa5?3|e~zh7z_x`$%u
z+RuXzpO21OSXCk(T5E=~*Gl3WKY=gNOxj-v-?8Mi@)P5;aTdR)d@XKt|C3k)+4*G~
zS%VE*xq`9{`GV-ra9-{Bdh&DIb-$0kZ^au@cR6)8#OiA7*a|AJJ#=;hhZBu42=B7S
zh%WCVesCXpp2j(teMlv7x(!RrfX1NyLW7&Lg3!V7W6}6^uB|0jUj3?1t2{Z37P!*3
zU7cVy<N%w}`Z23Qv>$IHJ~U4@pbOdKz4hD;^CRi+V(XX$PT1p6|CQ6d8`Yl1(J;eo
z^l_&6o5rF3TVmxkj(yC1pD`QM-s|^ft+HWtF|hgv@9cgwU-fmQALi~Mk98&bvHA+~
z9b(Pw`P%c;yj4g2$S(E<-|Ih%SpD_#TefoL>#%*1(X*Dik40w%Wcy7(*LJpLz?-v1
zIGZw3(LY=n{pg#ldsbV?Vl$xosNCEw@*MQwpj^(d%%<YOX3xdwGKvdRe8QnKOn5rD
zcnIA@<6z&P#{2^duw50qM)wb4tt%GXHPB4_yq9*OcG_qh(;#4>7^S`7x%Qy40|_6O
zIn%eP+`OTGUFltrW1YP`guPpKq&c78v!kSD&OkBujWn?S6*alM&#>&j>UR(2?7kKE
zuQfk(hGLG6`ux6J@W<!GyVwt{x96Zc2&4;d<y-vokHky-F^+$}1%2*<e@fpH|B}ya
zkcsAEz6n15A?IWL&=b0MyUvsBWY1YF`DD>?G`}`_MBotnPI#+zM)Y{zDt;W#TgTJx
zZ1N?5cNOYmw#V#o@Y|i_{ak(QaxKYHe|BG6nXmRFgV5vg{fDPh=cCwobbpAQ=Ud}Y
z9p-PvA1p>UikBZY&P2*iw(g#Ilku(v7S95MkH$O0inq|*Zid&Kw$Qn1+DJ!}V6u0j
zGrZP+|H^%Z&hY-JPR>T+Zzy(R>vgnk!e2LmJ=GVN^A7oz#oj85y;aDS*cP7Y4F3Rq
z{?IIE_+S|ybhxQCcW)e+;p8rygto)iIK!iEi>#PhbKXYzB0}Uj4lQF(LyS;&nPmN>
zfSdd^p&j^___p9nEK3Od^Z<hpdu99(fyfNg{<m3X`A+aiF@B1Dm+eULjpB`qfQQPV
zgO$Hexg+Z|zVsLwi2b%=@5Iuu@Nr*ZDRV6iA1E$m?4{v>8KvRy%+l}|mzScqmxd2t
zQyK=20pZ-6wZuE;IRfbTD^x$e?l<*Sse655^@X!RXKI`H%Y4S@2Isu+`G4S_>Tr5r
z0WMa2<rnC9A3C%8^T1L0BJ_I#x|r|ktX1Sz4K!Syx=Ord`4{y&TF9L){^G?iu@C%j
zc4qhcz~hBiXIo|NzB+A{<bxHnLOH)<U~&(+vgBKi!Y;dwTnj52Y3puexcaIB=MMuL
z@qg_nu*r9tB=KhKUW3ic4*X(&zdCi5+EE*Vz1rVSJIrm57g;w39OF#G_753PbnMxy
z?qKYd-#GSc#y-Xx`+}>-SYuykja|9OxbrDCcFpA}#%lMiJ%jw*uhO^r(%28h#(teE
zb=%Q$IwL%)jk7}57&V9E*YKOx|3Tm&8-6`^xdq7uq_wNh#rMSTO+&q(hh0x*JxUqT
zk4-zG8_|MjK=dKH5q*djo?zc&#W$gohwzbhxk|wE;`bskJQx0s|2F)EZ_17y8lp4T
z?8E8%So+_1jNWnpI*!T>W62HTwDJ|ZB7J2)JX~X$jK7E&ug9c!JFAi{yThDf$MPWl
zvcJJUinh%NPeNDO4{Rr4w|EM<CO99aUKEeCx6N+LA~wjcoOU(yrnvW^$Dm6reAGK|
z7~Ro_OgD$imbtJk5^wuiN!eM@zBl~C=ck1m@J}z~+&}~PR?psdD>AB{yoWbKKa1#B
zv<h6dYo0FZ7!PM-s&fY96V2gwJ#iElA)nL-@?LjibPAtz7Qg{NReAGR!^-P9BLfbH
z51_N$6=~jDz{e4r@86lPbg)|(v-S`1`o___g|=F<N8>MJJemV#w+r9xxoqZ~q<%L$
z9sQN$%+j2S4Y}>$?*+sSY{D+?f<`qi;pC<BqBij$^Ec$_>LOPE?Vs|j*c<Ku){Y8d
zCZ10WXS1)-`HKH!y+>VStb3q+z=pij>%Ry`COsaGY!G}xQ-KdLqQD^V8tojQ4*coJ
zI%VL?aq+$d->Rc};uIg{$eH&}SJU*?lX)k2%yFJ;<w}#Uc37oZ?qiRe#+=@D5leC0
z`-gpI`HPH6I+}3E2TrMP;gRqu#GO{asQkaa2R?lonPhnW@6yPMxzy3`Gs_|?p5gZ@
z3%|y+X?>pHzu-%~?RTne#&G}~xB)q$a}u&KSMu9lyBd4#pnvM5D5hI&kD_h;m+jT2
z5kKdXz@eft?7;E9tmyqSrcH2Ruiri#U8IMYbZ9h|r#zbDUN!*v7EV(i$U)f{b=LXy
zqq)RWj`2TyLm9~fKWlF16O8J320SNEDd!(Gj!#(+|6sF0cp_a#IR}$~@6Um=*0p<1
z6vl$@UBH(;LxClWw$8xCNQ^Ri@g30WyVxS^`D<Si)o0V%zC&9Uz0SSMqSp{|W?nA2
zZ&U}G?V^3Pof?DhpTS$rP0y4+P<ol2hn*Ob&%_IIJZD+=ow0`uco~E5aP!tYzN^5A
zJbruFV@Zb&(e|z2fzBuDcN@Q@|9lfncYez|!P1_e_T0idjnR&wA@<_2IrMQBF!BQ<
z?3<5O0V5yd(ztWHQC`#lo{M(f@E{+sz!nm&jKN?#b;TdzVPNm!S+j5pb*(W_$N8{#
z;C1HdrELQ|^gf6AJD7ibo4=2>`3QQUkA7|j1{!x1f1+oI^*oQ~@?Wcc+oquW6|-oc
zy~7G$+qAGZw#J6OR{kvdjC`Bn%C^Mt<FWsOy<jnqHnA5yrkG(L=O<r<#_KtAWXGe#
z!_$VV{ha_lCy@JK8aThU`i22yP<bl)zy03Ddl&DO7eTo#^xnlset(rY{{6Vvd+j0g
z{!?iCU*Ps)d=TRKBlt9?nS$Amnc54VD7pJ1{QL6Pd;^|r*VxzKgYI_?Z+p|>Eehf{
z^byzB5sTlu5x<lDEJ*xbVz&4|^v=6Y>ycT?_40zLO<`O$qncLUL>rNgs4RP(dm&r0
zp~qd0S6=45XJXIi%BP@wZV~ph9g2rK)l>+-v_4hDmwtqudKU2<!zgnb<GPo86E-}8
z=E}SKps8C%4_md9II(s3$({vI)Ycm#OTGy4ZfA$Na&5ME>85d}b_nwx%H8WbnN#B2
z8|!vDu9*Dh^*3!?`_EVz<E*)aGR+RtKLMOln|X{=ZK`d%UFE^8cMR(HA?q#$Z=ZE=
z7LBt!+jZ}yYgpUv;RCNlaUr_bnteLCBC+e1aAw>?{JP<O1I_v5t(8+u2eS2lDhISy
z+OsC|{qfB=PT5+0<CJ1YQcV{;c`f~KBJNGLnQ7SN-^BJK-|B2fVt)%V@{oSljk!Gs
z`xN8&%m>^m@qrm&W$G$7x_yq?5WdNT5oU6C7O|S<tEGE@J8`7tg0uS8cqB(^5>4P-
z<}5i8k0Yhnvo)vOYR^Wm)4R+Jc;VyG`7!5h4)fXeW(W6ZF;Bam{1mEFM%^;%N$&iX
zcGqAhtsF<31H9VE77MPr_ql4dul$(@eFdCxvxYe%n^*q(<mQ!EQb+ClMK)nGd>edZ
z&!wzWkhyLqZ@M|N^vFDU#vaj8yEq9yGQWSt+Q1Wzj5Wb!CeOx3v>DtuA*`s2-o_k0
zTY3&~5PXz-K`=V|IGAWmf{S3H@{4(|we~ZQ*jm42ueJJ8TgR{Y4C>r81URrJHAC3L
z$JRybp+3*!eFr(#-O!NM`j6;lnvZa98}DxIj;z-lPv*DUfBhul1<c{4dl<WuwxoYU
z@5j)b+P24|b3q~3h_?RUI$J-*H_^*J@!v}lT0eIuPq+a2`6+%1D_87qOIv$qkf#Bi
z>fcK)lnmScxqBvlCZeanPdE4(#D3Dl{mgUt)I&>N@O3t{^fBwOgtJ`gQ#8F3ny!YH
ze`3+HNn3|c{4MOVA!yaY1!(nV>Z*_U_B+ts)&A=0W7{7hogSLj-4K3r#pI4_Z`z0q
zs=X9C?PhMWvxexii~V;0rl=3*bLRQ4*AiNLuQ%<_a~7e0lYA)bui;IfGf(+v#Gn54
z+J&vfCb_@&dT+aUr}&w8m-yBW?APK?xAsRi+yoqjcO8}vbrk+ulhb(@UE|NJH5Oi#
z^0C*LxC?0QC`}R@mo6A}THmfVTLwHxxt-VtY@UDL3GC<f(2aZqi8@osXKly%0hc*H
zP-X60DctP9&NAD}H}r!|rPc=>bmPCaVkD3s4N0%BBu`=gsgF5V^#ZpW;X{ds-BU_g
z56K3VYrrnN82fT%b>$QX@4)*FN8WLUc=6$~uf5y3%lV4xu6^>!&l?uLxr+FcJvo%i
zO>#6XN^ovdUvsMGOmWg)QmilOmml$5dPvt66L=e0t#9cUPR5;M%r@zhw(PXzBW-M{
z&W**tkmH%QROgSxPqH@K?6?-)Jz@WjuODelB7QWDJzyff{ZXw^yBz0rUS+=rT*Y&A
z2SI2_@{8S%4tue8#Yr!I)I9vf?h$U>F_temWn7wRWzDvqmhEVj?$Xs9<*~Z6%3&TW
zkJOm(zo&4%QU3klX`Ja9)fTI}9ovp|x7EQ5u*WoVUZs(9V_OCXB8{(~Ps{>$SNT&o
z=g=M+!8bS@arrOk7JSg}BaK_m-vVB#pU7bU1%7fAwJ=^Q2B7)a7=X>->Hb&c$En~R
z$E!Gtk!1NaI#wKO4~vJ5en-l5emWZa(6elKt3}hmW9O<7t-F>mzQHbFk?>+~dg6;8
zxd*){|99_r?v4W<J!J`j9(<QQjV^0Gx|^ye!JpE@e0rEqPi#K;MR~vFe9hq(m&VOu
z{IPRrU=H%1GbU^70mdFF8-yRj)PA`j72i(+=d4B%`>Q;A&U}0A7AfCmvYF7uUTN>F
zG-4u0V-HU!CNiV-@cYeK2^#Z?=$O66lylBtt{0x(MSg{=PZ}uv$GzTVIwPt4Acr`Q
znBh5!gI&m|*{*~=J&pL{mOZhutBUx<H74+P_V&oFmqYME@NoS+Vh^ul-|b@#@@ahz
zt#`Zp?WN?tpKYRf?X+)kAYb~QHOqs!_{{NXaONxg-k|6hK6IK|jiC!$c!+)SLHd;K
z8`-&M9J*8pTax~3d?Vr0K4Qkem9{R%qqgx&FV{T@9&qMyY+&`Stp4j<W46h*-ev8(
zi7lm_pm>Jngw4>JQ(kmVYju{1_B5{?c<rWK@&U%^qkF}%zOydI^5ueA;93Q7s8<2=
ztAY77!2DX)Z;-WqIgBF<Kk#3G1@mbK?pEBCY`{_2q*<`}6kC7|n`eMc59KZRkfTHJ
z(H>v05O2_!wFZ(U^BHfn9b>gKjC?Pu=fme9_^Gb?_Z^6AP@KEUHuHVx@uM{HW!(LA
zvd7BKtG%b}y!+wJvK7g0`zCrun0PDMcGJ=6)5)ze8#_h=d@G!HtUtz%b&@S#wwg`M
z$y4+5fy&X|DcX<ZWSc7;XXX%Nkk*!y?G3-i`%TW&{tn=xy?q}4{a+29{260aAD-Cr
zQ`C;r6vorA{~>Q{rBnKqv!8brPGt8Y_AU<M)|5YA?Rv29soj%e?b_pdQvc)X=UBG1
zw6=LX-$UQ($KDIr=Qjn9Be|KjjI(U&!kJyfrG$3CN5#{gzqtJ%FbmBz?Yb+<#-W{O
z5a+doGuJaTKKSU01WQ-toJ$~tT<t1L3xpP+-}$ix)zi)rXE^lV7lylld*mkGH#)7@
z7V@Q37|xiRb!O5&bha;QpW2@F*2|xVwzvX!XTSBiVskV3{Jr+@=OK8)LGVEF^Y1$R
z+ZT<<<~&elTW^^w(39s1>>uv5&JD{)b59ZRV`XJUmB4soiZ@)unPS;ft-hdD*^?cD
z5x7;3P0~Z`!$H^O+{yX(RcVK(@6di-zN7f{smG4l1%8AYORar0{HNkT4RVihhZaQl
z)_S&wXEvO=S6pbp$M#cKzK7j>%Q)oMH=p+!xQVmL^nDN?VKKh1yu2sKm5_!UadB@Q
zbORhhXP9sW;|@LQEK=-*=g{EE2N;)+JW}MQ2+!dTTFx}Ice&ApQd~{l)FBW5?RO64
zKJSsuSv|lp^eVCnSpEI>$ciHQ9q8|=RroNlcYXnk5A*I?_Tl2u`zWt_7sOk8u+=2P
zv%C}i?InerL0G`PL%+-TeYa<$aP>OmTs?Q+c;HW7Y)$Z?a|D~_e^8cq#rXdv=yR3$
z=8M@oh@X_<KUN#&`I2xc?GCD|8fYA<wasc<l<aI$+a0F(J+&|1ra9<5-#*5_pRxB~
zzmYw$9er5qt8+;3j_vE<>pwVn?~azCSxv#Y^EZ-Hxb|VjM=WRUnfOlR`wj8``|v}J
zuQG!;lULEJ)6ArATF<VxkQvHx;mZqjj+c!CyBYZ>tsH@|ynV(4en3n3Bh%g43AG+<
zzn`Mx5f@q;vc5;wmJm<gMZT@qof-H&peOG@q2o+^NZ5J1oLW2LE{tg(CR>6@sO=(e
zczpSmWXf}gN?iFc<-^!>0~uw?$>r+LWB(Td_F3%NXS=fdS95-R&=Blh$f?5<$!T!K
zX{&rX3+*R22DVL|<6!+>GUlv6sMv(h(tcv$!e#%M>)Uwfyn(`1gH5|Xww4{Nt=?_r
zo!db^zLw_e9&j1uNcqe>Qxay*>szw#+2J5B*=FQ&BWvEvS}kII75Co{ZGAG4yMI%h
zO*_&1`)W-4q*u)HetZe6%Q>G+<X&O){Jt7*dk6bvPfw(<p^3bL)YTlH0w<ucZEpBo
zXrgE_tG|_e_aVuU?#QHN;K2hfZ~J}VmhbT!cZiqxp1x^E2;Zsi{>mMqCqH;v^NXq-
zcPzbON8QSw?6~vUn|I88XwHr&Q^Chy)$9;XIDp|Q<R3P$^l=_@axZxUn$c;_B<?(f
zy~%LzZwv1fU-$-V+09yp#(LXNeZUl&#DT(6*2v4b0f!g8kaZo)`MIZ!{{o%G>!O^!
z{+pf0uBY30zeM-=@?pw>i`IGd<9SQNtJr5av$dHIIQdu=d7pB8x#W4y4J>-vUw(Rj
zWW_iyV;&nF^Dxm4XSFouKH6nWCwK9#nECvfc;_zOc{)5z@AHni*A5|{fp7QhLhOp~
z<i1oAUi6sR(7_z#+x!V-o<Vo>`(yjWYDX;_(25XwX0;~>{sO-M@~jJa)`H$7ndTqk
zo!@a|Mxp<PDTU_V?-mAYJcS(#PcLi$-o+i*r52Hgg)*K6*B1JLxu?z)_*p}(L)VXZ
z$6AK|9huaH+*7_h)66+N`sk()5AD}6CXbtVfAC51$!i(kTE<6i_x8--h(JI1*5#Vf
zYPQ}u#lyWVx~IesK6a##e}a8Lh&AlE*A!|DqURpuOgA`d>QYnuW6XSu*0BfXK<65Z
zsmn@nCt%M3CtEHd#_VOY{2Im(`8m9^Y8+?aT>-Uk;L)3*6X^`DYoa*;nA6LCa^5d+
znVBKl3hJH~bgWxuYY!-2u<jU3Z@X!&Szbz;bCnB_a@M&b%I!rrHt56kPBXXb24EB4
z5AcyrVQz}*6oQZ7ulg$AL5}YO4h|Urm%dr##(?&c>0i39^B&~)vWwf#DUY7X7CrXO
zBA&a3efXoLMcfOtp^Nv^*mH-LJ=kvf`k<v2?v;X<ZWCSgEgLA59y{tD@3L-JVt$Bz
z3^<^5;Y@6r#)@sPTyXj8T;IT`+syjr?>lNQB%i;z5k8q{&f#r^gZkq2|5Xvaa|)Y4
z{sNbyCIKF*xr8n@1;54b$URT&nbR%(-1UrE9zBDubK&W2>A>%E_U7X2hWMS(625;B
z{T7aUo}fR@T6v$0!tj%1#>%*MFfP@9e~nrG34Q%(hAH@KjhW<gnxYSAFOm7%F#jag
zOzNOKa;F>}zubmNHMx2Ec(;kYz6A$t7J>=;jiEL?;LqV^pQDz%t67$Avy3%aMJ&ZS
z)Bf3^$clWy6#u69c#msne(y5YV->t{9rMUG1v~Q1<Sw3vz|~LSZGF`5rG5$Hw(+$L
zT<*fBrC1s4#{>TfpJiW{uUOMQ+T;GmZN0P!AFtW))rN=qmFsB|FlKC_d%3UPm6~s@
zw_rZa6jV7}$#Yz;ncrb8_52Uu=QQT6Gs@%=E|<=4!$xrNUxi!-FCMsTpipgUp6szL
zn`a-m@f+r;Irf2THe3WJ`QZf1L6l7x;V%~~gjX7G2wE0A)St$To>H!HyB$MoPRe9W
z(SL;_-aPEU^jT$+tudpkt`AM*c?HkapGnI%CL`a&y{w~X<Hs@l6b|GUnF7YY@s~fu
zPMhsrroEiwFt)8{{D1F~KE<3g|Gv*6leNYL=o~t;r?u7^_c5LafQ8KyeZH^rMDDmx
z7r!~=8Z%S!mAlc-6|d1e8EgAE-p9+G-G4YLcMg)1U*p?<sx`i)HvVZ`mFkyy`%g0)
zHhH3F3F{qZZi^eA0AtlSHAc#`<C`r=1-G$rmJ5%1&oJ#TuRa!kqWQO?_>&*QpI+*E
zZiVgz=X6sboDi;P4U=h0HZ==xp!=|JI1b)gKYvOT<`I5#=GM9k((T6{HjR6$9L{8w
z_m-G~DW#?$O|)yvmg=K$bi`!KD9!^gzuMj8b<_G<v>q$(xhk&wpr|bR$w)I<XH<4F
z-fr-W_zH3qy4Z`Sx6LJo(@tQkd4Ln!g{zv2_?PA(+|p+dy5At=!S|sr!A*PS-O%7i
zGfjBW%|99Ffe!nYrA^rR8oJJG^bTP9$!u?UH*_Z){%9uO;BF7JC*18@RzX>B``*E(
zQ20#DbGVPS=!K?t(pC>V;gf5)PmA{2Yw_vA1G;v>m#-ln3f`PI%#7({O~fO1(k3zJ
z`Tewq-dXcJcS8st$X~VI!Utf~4GuVsbFP>B7PN*Yi#3E!gnM(ym754|m*Nx9TE(xO
z=R9bK_0n4TfvwhRZIZdtV;<OU#=W_+WAEU}_F8q^{B_vd?}ErDTSvgQT=bau25_@*
zjWx07{>kOo`<VN~$k$IUw_^44HBaG|=GqS&HVEHiWActCo|t){Kh^$)JFG0(z`832
z4PG6-n|1hz`F_Iw;iG>KE{yWVp_aU8f^YtWwYPW-{6+X|^F-xE)PLc&@WRG#3%7x-
z_=9k-8=DPq9ctn4S*D<rGl+G>pRfTaSUrLdd5OhC3EZ1>Gv|k=I$SezufQ*0<Lmd1
z!o?B8*V6`lGrs--{wdwzq;-*sIrWm6QCa9^o)eji<htjn5dra7Lwo!#65V^I;GY1;
z^O%o4r+nrmeyg>&a1flg=$k#Xg#%+u!9cPpcsJwdJQhIr&O;IQk@On}XHOiQPy6Cn
zIG+QY<p=JX#d&1>B<K$L@%-x?_}*u2X1R;;+w$jOo*g4g8Ed>ORSdhvXv-&?w_Chs
z<WZc>;hq@b#v>m@D(pVR`z32ibzVINKVs?IW%u}K7I?!RyB|92Zvh9-W-kN&>;#4%
zG5&sVP<Onj@8J2S;My|oZJtRyF=YhDc-ruMc9b?kmwtVnZ5;5;Jo;`yvbj?9aXavG
zGETcp2YX1HekyhTn=<<tgLFjc=ka>vUs(&`$fv(#4+vo5b)^5|-PB(yrue8H^)mB(
z<}h<&UC?>L+)1Bq&i5W8W45w3lJDnf?&yTW3cjv0&ZCSyUUS~j@otWd*YEPT?^`y`
zvYCs|%9ry>I2z04Mn&ympXsCxFM56mJ+_27)^mP5*o+-=5%x3ea;&9w=dRZ6RmMHQ
z+@&|(MqG{Tg3=pr*Epa}C$yNwduzSnYjZUA7~OfN9vxp-Os+^a|5b2^m0_QJ6y|Yd
z{7)87{?~Eq<1aW`)|OLRn|-c~{IBRY9^O|mZp~BrWBeMM+@o!%Zc7Yq|DwKdco=uy
zN$x%Jw(PRWQ9U@028)HS;&b4lwN9~l_>hw}?$~3~T%TgDduQNh1osu2=T>ZzV9)Oa
zau0=;Knt|>UBMHc7q80|K#$z57}e#FXOB@Po*!j1miH{2N^cXs9-%MRp(l>Ux{-Ay
z8h1RMv35N%TI)u($+n{PE~MO_;?}1F`=UKB8&+YBH8$^fcxns|@M#b4#iIrL)wJv8
zF2^9hH*oeRsl}hQp)@z3{Yk?r@^<EVi<Hx#+m)0bjXg?l`y+Gy+o9-s+{&F(x~EmP
zP4Ia;{AIgs(@dsJW=&*6{};sFBd@p6Z%a&WN(VCIHm@`UyqP+83gb!6Q#;UxfhTD{
zXw%0h1IN-wA@e_;KD_szm_A769HoyKJUn?v;gy4JNbtysgJ&@3=zANUX>sqparkM&
zQ+PC#G99A^3cc7r6uTILhs?&N(Tq*QgKf*yrKfnXZxJwI!8_q^CFgnY^^d|&>JaQ#
zpK19|7SoPoL=I<8;Y029l<(%h1DL>%mWc+;$cB}fTI1Nh*Ta~dF}r}~(@&icZTbt*
zIT@SaD;;|fZQFY!?e`@I?fsMFdoFt=Y_QheYELt`55Jdu)Sk)Oi-Cudo8s}3F_NXy
z5d#{_akB6c;BM35Nvx~hw@`iw&o9yVjw{~~SN^J4dxF13GsvlrkV~JS=l9d!T`CJL
zS~3a#{}JQtM;DrUTs`rRow2$-jMuK;z09=Vc!D;1CPv%oX1>Hk9~tv?lzoITd;jcd
zGUkT^zMmoc8%x7CkY8u#l2Y!?Yu~6lX1fh%Ib!*g{s);OKh`dIQPAmV(mBEqK496f
z!Gk8*aCeZu<xbwI9ocTNJG~T&wb#LayS-M~X_@aXbUE3ke~e$!!x`N)=t?xZ*}|Vw
z1Mjj{<TOo}Ow<}ZALE%XayOXh&zAj?`%d10U-Ng-Mk02xo!G@T#rSJCcCk|IVpqT$
zgySb#1Fc`$31Fyo_?z&IwU!<u8n$(<_&vqC6X47{;GB&!^JDKf)BhJdKbP@pP6Len
zFz+0+f1+{yoiVHL6ZNS*!!+91>l&25#P0vNc8<rBe`rj{;aWVNTx8=m<J9<v#Bf`@
z<<I;d8vEZxKU?`Pdi)ZY3x0y_me{i|cqX~6=YQZC`52;QsP~_-GNB(8Pd=Ic2FML5
zSmg3sGD!Px?Y;K{o9ANv2|h2x>h;9hdXE3SRzC?=KiVHi*Xp63Y$^TFNHb+*Cz1T@
z0gw8jiIFy}kh6mMN0jdoJ%Wq<vrPL^)d8PHj~`K|NAx($+x{T+x?D&5(q5#WdiSe*
zOh)%p_A>Cr<_C8B)_7=pL2NvB+iLd(%D**t%7AFWZ~W~!*lMAzCeG=HgQ7*wM&{PZ
zo;4U<D80>#FGX}Hn%ft)?8`4Hj^b<fWpu9~^kmGqz~edO0edtSCvk$ZImC8YWjn?N
znkcLN@$vpg>n^>rQI_9vFM63|KDKSE@2**j>CpX8&NhcZuUO}_{EJs}-V~iH>?QtF
zxre+7WfQs@O}m4=w?pT4#+!C4S37>jF80{U)!xEdhqj=<tVsxj*e}oK9H+a^yeOUU
z&@GBlCx5Gn-A#Wzb_sNwlb~H6z61OOlf3vRgZhU5$d^GMVc!m;7}%H0Q}{MoV!wfN
zN6;uA-O|ualp$79z7%5;0+tPsJ%dr~kNhbU@q@l)+7E8wEX7-#q1eG0iuax23zcsX
z8?^&lbul*d2k}L{QEnz3+`<{2w>Z1AgR?vDmxg7F4o&rjA9r$oy)iKmx*XfiQ0Cmo
zn8)L@8swVr^u68}yRcz@Rp`GU1YY#6x}<d{_}BdwcHab^jR7V%0mmhrQQCs-U>3h!
zJY)WMqEpyw(Y@~2b4Fc<b@pe}5g%ssyka!ouxp~%@;Q<Jt2~MLbn#U5opR4s-;^PI
zcfsd5Q&7%%wQ~Hr<&pZt39`M59=qxXaiqpie6#z#<KfW9nO7&UD+P9yith!kIVMf#
zEdpNJo<KdTomhRz1ME21I=Fk*G-r7d#^jr%A^B#QGrt>}G9&rM-(%7;^Gyc7-3{d?
zdvLxvGadV%b7*%}Lf|4_@q`N(nhBw)&iUFa5WCYJ0=}EEkNK7l6mI^W^x)BLlhJ4B
z=gUZ=`O@-#*Ru}zi5KG!u=R<a9()I72?6;E1m9--1Pym`p6GdU`^D@>A=c&^<|BMH
z+*1?E(^{mrm4l;SKp#$%zAc(-A+_yB=w5i~!`>}C_5LeTa6FF4ej;3mtOM`3lXCNS
zj*b_aYCl+(80gLecj%+*is)WVeu$1@^6}z__}jgvz|9`<Md+S$S@6VE%clOFr)5*u
z*(jZj;eHmzqIfvZqXUH<zyw?A($V<0<lFkH%zuI6N;M9L$DCY@41MuGO~vc6v0N?x
zCN%rcSecH8j)kjo*G&yZ{Q)3Hx#C}nv0DZgM*RXEkD!lQet|J<TQ7^=lOQ>ffnT7P
zac43Iln?f@N5}uwe`x&78Na8-pThX%vuiyNDab%4^0-X7=Dq*@<}9}vHMjC@^b5ux
zeC6vf^u=_{5M`ue&WZU}ie01T`pFC8wCpcYxP|C<iRKAj_D;nXSVK<Z1?Zp)%p}pD
z_Z+ia@fW>QvFX>4(`SLVT{JUwAexVFCNk{+Hk)j8UEjKa!qd+jD16{*&dg7cKOs4P
zH}*T($tB;Vf69+=Aa7J4>PygBLe9j|Utjac2_OIZ<O#c1nD&3{kF4lxzG8y>)4NxA
z+y6n{yk7d%p626UUpZlgBYo%$Y`O2_BLQCMz6k-fvB5cJTi?2o6V6~xU5|3d0d!#F
zy6j`}D?IZ;)UVLD?urS!kiTlzjZfiBd|Ll}+pJeE6V1uS|GzB)4!~wKd#~2v*k_>6
z_sG@gt>!m0>&M1)HTE+7UX9J{05-w-W^i)IV<siCZtW&>=AsU>!DsJfeiPlRz%RlM
zWU~X^|6vbt)|Q<&J--*;*aLjJn3M3}vjdS8#jN{ZxKBMdZryHYj+v~R&69K|^lW(Z
zMcldVf+tnMlUVo1O5sVR@OtqiA3VtmU(03vx{>MPY2r!7ku*8<7PhuE%$0BXoXn1x
z&*|MLp80M&mIg*a0~+7Qv{T4fK4$(yZlykWj*Jak{w(m*+#aJp?XSR-f8u-2o@3UZ
zK60S&5c8C-8O8bRHYa|PK5*oE)*qkawm$fq)?9dC<Bx~(!YA6Y)>}NCSbxj+qBTyY
z4Xvwi)a@8k^9XSbKe#x$h9|Lx%`UU&0QCBv^Q58V$eE<Ij4%g#eS*(N*GDv`HEKcM
z(;AJYY|Rkce!Oj^9~+rnC$#zNYkK6}rlapNVm30Ju@VhvPCCmb7-%mSV(tf+tBrg5
zhW}!RAG2*3y2LQ~bt$WP?k+|zgI1i?w+smXdzOuy(6{d73Aa6EmhUcR-vJDImR-TK
zD<||rL+^jj6bM%EjIc#-&`E#u$rE~L<G+aw>Y>b;yzd%c(k_}1eaKed-+bi++301T
z-$wjfHs>MQFEf+gek@80=sOnf8{)M&(_VgL-oHLNZwK=f3`IMFE54uhiNN4Q>;F&k
zmT2v@=B)MhQHJ<J)>?R=d26jTw*-7`T5GMd=2b5m!H!;^gWm{xJpkVsZAQ;E#9M?b
zO@RyhZxQ80pH*h?%qn~a$<TRd@U#gYhe5tN@;z0|1)P)5fcUVAUB;ChzviaQ99eVE
zOL6my(Xl;u|F4d|OJLqZx${!}ia(%iC1<)aXU+-977Y)kuJWzjt965h{`?^}Xm|m3
zH%ksY25lK&HIuQ6-(O7JyN5UzOQyxqlynxs;`DbTlf`?ZdyFXm)jngj_B_<LU`Eb|
zrzV?8!7FG7nP=HPqO@70b{?gyVAHF9`R?Xhb%%T(ee=Pu_br-wFjBumWuIF2)Zgo=
zZ^Ob9i?Oh1DTW9A>@mE$)8Pq6t>-#obUMtHZesW^#t+lMno3Vm-cC<-?#AQw2hIYw
z*Hho-d$vyc0QYMD#|fTqWgm@>_KtM462&&hbhHV;N;;bOqI9$_7kXHnj%V}Jt<PEf
z^d0fjQtC(fX~q$LYPCcC6V>f|_C$4~`k{C+XSPNE<>JXFtpCi3>W@6q_tdz$7Xi;w
z=HhO}--XRSX)`cA)zrR?J||cyhZ?$Xx%7B@Zhb8$YJb=fIbn}!8af>^?8=RNX0uM!
z*z~>0CQ!%yiVr>cB>VQ4QXYD;<@Su^jN~c@_g5}(&#E^WH8t4Xh>b4Fa5<BuE2<6E
z-%6aA+cmW2(r2WfFmC(#EO3GI%1-iK+s{tt8TxvP+KF$Yn!7j?sGEg;bEI9}V@Un|
z;A=N@EV-$<8)(cs(w`;%>i5UZ|H%{0|5#aR!yvxi=}&xnJ@FZ>sS|wfrq2_#k@Wbt
zw{b*Hb2j#b^_PEp{lYlh(0<B_<-uQL(~XS-TLa(Tj`C{6<7XK-=4ZV`uR}_sx`C%)
zpfFx{&OndfNbcbQSH?`qIKkt1*eCshT&2+Ev&Ya?61o0dZ5=T^<wWzo=;3c4?-95m
zGgM#n?Iy=@$V;3jXBvGEk;6I;2ev+VqV|%Gp@DynAf5=BV#yZd3NeSu>p9oKT@vE8
zic?58=|gYY94UD15<5l#opk)536k@lqF3L)61`J=Elwv@E)D6Vk=CeA+B<&wgiogu
z>u|@w<jncT@_R~d**d9o1?^F7Jt0%}%EqXkE1ACkQRa+3ARYJ<yG>-d__C$%KI&~Z
z@Mh@~<dVr(yOODrr%60lUy_XrId32t>Yosm?M28($!_A6^T~g1$;di%Tq_QOGmUQO
z>=xpkB;(F>ezPun0kZuT>_A8MJu%t03D~Hv<ey^F<K^EwtIYD*)Nw-pr7=G7z`4*l
zbbo*`KZcL?8s1Mu4-a1bHF;+3RV35?P8l1H3y~9&XNJ9>o4wyjXP63W-^`xRid97x
zo<ZAMTjB4KeN0S8`)}IPcx5X<Z(}|1=b}$odIS2V^o9q?!z-A11uy1hhz+r2qCXZJ
zV(kH9GV!m!ixfl{%WmMvMb}5l`mR2zOW6B`b-<`zWv_|CT=gy`*0b9+I6q#exEZ(#
zrpl*l_Z?Eq8nBDkZM%3cJt%|qcew`7JfaVAKdY?|bxF6PpYK;h`}`|)j?woRi`}kl
zq|*1K>uG<m5qR1C2e0~ixy`iIjeM~8?z32P;nZ0RHK(I{<O1gNPi&>O?@Md&TkdC(
z|7$^6)c;kon4CW`+l9Wzxj4H+8&O|aRHt(7jjZ?+?MN<!+@p#HPmj_X@)UhjXF$f}
zOV5-JWa-TCaLNUwla_!x@%!}C8SB7Z>?4?i;BzT(n!{e$S_jrvJfOcOx~JZ~#Iz?c
z2hn+dO>{54dx^JQ`vJ?=h0RQ{jfZA@eb1c-44)!4W7Q?5z<XU3&;RN4x7)f~Gvo4K
z@HPCOFP%{MpGEy2o?;5FzX&?PNA-~Ak4;cEK-v6c8yqP+bR1oLiu|_hGjVkB^BC<o
zVs?{9JlIWQHYeL|GM~O=lTz$%F);ZHeDatwji&tvvA*nfK0Uq+eLj2Kc+ML0bvhM4
zIi{~HbV$Y{`>Sp9X^gewWX!V}&!^d@;?0<?=Qrrk-SjmJdRKm}hpVIa8_Hg@oO(BV
zqIBFrY^CV9gO~~71@}U>FQjkbpm;!p`jxT$p`O`(Qt=4+@~ZHa?xcJH|G6{i2(NvX
z-`-^MW1vqR(Sw17)*+a6tXw6BZ@c8<4e&y27FIm_!>otu+jW!BIm<@CD@T|>75uUu
zIeig437=qj0(u(yQSyDpHIp&Ta+}1O-EMd({HhFH>N@y>UFU)ClYbK3?mqN7m3t9B
z#J!Yljx)Vea%i`hcAr~q-34A`|36*-<K9oe-cCGsdN(#<*@&?FVh1+uR}<U416bTh
zpQ~d${d8=~(j})eZd;$!SZ_q1)L1teQ!|ru5N|SfY@x|^y=tA6Fhgt3a)KMQXOE>C
zKH7mUh)waxv#r?P9F(D5a%D#6FoZGs@cZ;I9?nV!bT+I*eehm74rg&II(V+QiB0Ga
z37ix6ZRBh|J{j>L`Gl3nTYP9UFkZ0c)WG}jkVJ5&8+mWppE!HrMa~;+CeC3Owt{bA
zpZY*%Sm&2H%RYqsU^;{J1n`1Bi&oQq@ViIoyvU~WwT!cj^)3Zp@XeLm>oozpp4($;
z9q5(P^|iOS5WPKK*QqYGbe)%Cdzp8ldzrLjbe$8e)iTWmTfXQ_bmhg*_$$VD{IeVM
zjI|c-%6_VHcd71i&t8g^J02%|%x!0^tY|Vw{ab;DWUyqnc(ZgM*-NAYh0v|UlO+?p
zz|#$F`^W(xUN)V2V>l<`u-4?v0DOFVkbX5bn-BcuO#B!zKJa*q59oY*J?&iTk5q_v
zieAM(o1jzCz2w=Q^mo{mz3qX?1BJ4gXne9sNl*Bg{NoziAL;8S;MyDDQ8Re7HOEvu
z0DjK__l81;4?tJK?`e*NBlw*R@0u>WFbT<ay(IXnY%hNy7N&&uym7dD5pgvR_DVJ`
zZ{_SvJicF~|KEV`<AJqB&zz;V>$ehP>CtmwWb@@);kog;z1H<6=5|DOfXlZ0@Z+bG
zP9S^QnI~BHB<k(QpCcH`&vnjCcHGXWw$WD-yYQB2mmTp#%3a8~#SgqOe$WUU#h<j#
z6i<`ho-`yWc@A-jN%P&aW&@+=;RV_!CK0!&y`t)<Z1n@s1~J!{e)sG2e>(R`#>4Qr
z508c6>H7Z-Fno_W#>0E-|B{1%F-qSO3~l}LEcVOC>zA)kH@?gx#FZQ`Ye#}}@nz0B
zL75rgx$Gr*!b6?&!bT`PW*0apdeOe%XpBfgKzoCmR+#0x&{>7Ivh_*d(f&aA9dZxC
z?mjAD?K7aQy{v_FnHI_>K4F$GWR2r>Ov5wjn3vn-(EWPPPMol7;-Cp(`sqD;8o#Gc
zxQKDa*ZZ7zs<+R=L)urpUnfqG&bW)c+iu3)vjo3@+W0kXupim2u`cnp{|9|Z#)>|f
zqeY)<XkR?Q=G)bskqR$sF@?2o#@WrEp*>>v#AD}QtncARc<g+e$9`XH!<^ry?5mWK
zK5NfO&$nnyv3aG$=4F)`pE#i(_}OD`SGn=ics8A9(XmJ4U5?uQ{FD(K2I%K_KKTgG
zK8(p6|E5UAGXsn(4zFIs1|pn64=mEYMY6REIh!4$z2o_-_B|)!@4sOUPV`)H5g)UM
z5nc?UuJA?tS9le_4;2rbNtuK2zWFgca0s`c^LTjNDR?l~cz7(Jyj3=aGtaSJy>T+Y
zj|_NSFs7b`pV&jhf9$<n{CH$L7mtaD(XGhU7>wq}!)V8G<xV<U&e{XouzZ_x(Rhf|
zwp|kwCtS!Jc1@f%;g>PI)t;=^oj74P^mc*f=bpxIZ~Hy*^<D+96|(_ePg4C?r%mVq
zpXaf@Hcj+4(}wKa;QbkDr<ryr(*xdoO1X!yue-g({Gr!;N^Vf6A6r^o*6r-oDzxu>
z0o_LL9al#xp#O5t5vMDsNyAl<iV6IeeN!<wCt7FW&!dbNS+`xWt-G-YkTefjM!Y{C
z;ZaHqKaa;L>dyC5_Z!-67d{*xPcU%_dC=^0|LczR<Huq&UQ#?qZf0afDKtEpxqMUk
z7S0Po%jC@&7Z^=><>UPW^At=BdfIM$^wNuR_?AxeTMLg(pq4gO_WaoYPR1E=C6cRR
zB)L2ih$A?edpb;;-S7VEQ>^=U4_2jecHh}HfKLS8AMUExxi$ZG-|Ou4$#sTYO!2*r
zKgo&yJ|d%V1NWp?o=3UlDZklE?2Go3-a&Poha#sW=R<2*>ko*DVE;=Vw~Tx%UX$lv
zk*6a<K8tG)MpmfYy_6$Pm^f$bGS0fm@4HNaJ+|(8FJm~Gcf5-{r(Z6(f^(>8`Fm$w
zN&bX#@+Zt94|$@MHvwDVIfgU)#FD0vGdq2e?Anvc!j;q2hPTL*;BC((mL6TBpf~|t
zmFMVI?JLNa5L#mbYraE#3iYi1-<cK;rJJyx-@|i_&+Du!Y>=&;Hg$)|&#AwBQFdnz
zZHESV!wn96_{2>I(fPHP&H*OCt-K|loQ1$p{iP)sjx6}ge?vb(a^rdU9b(_Q51*W#
zzr=GdFwpqsQC{$zc1AR3+*z!(=xPt+QGLNr@3o$zP6Th>+3-G$zg2Z}WAK)(#h|Bq
z5={FVwKYg`lQ@V$_&piNFZ7H#JWgNRRhF|+KE`Ru;#jW2Txd$L&aL)r)E!^(?_S5>
zVZYNk+FR~Fnma=Fi};+08oyzk4S5DN#%K;hNB$jyyy4NqN(QEt5vxYdfXd+|t$yd|
zZMno(<r!C#XlTxG(^^pNnW7wm@%a+#?=|2@X{&OA9UlvIY%YduD<<k=#t`hu=$y&A
zzScOh)4_S};F>J%E9HC3m`)dXV&kQ7vZc{&<tnr0jBe7hW=!V|H~R+syz@|}WzEP=
z<M(eb^cS}V8#6k8ywLmNSk4{?%Q8CMe0w%SN1RVFz|XVUw0j)*soy-gP-74*g6o~@
zgH@TGEsbM3lXbUh0`PgRtkr7UmC>oY8@;joV8Oi1&P&J-HdJHnN$(t@Z&#-EZR4`)
zDeusq&LY-`cP(X^okO3gZyl$(RAqLmf8CSfO*o3<cQj;oPMk*G4e;B?T9gpm(J__y
z5bi_wOe8*ydctv?bs$GUI7pjT-+7sx39&I~Ow6%7G{LdF#g*Baul{&%^-K8)vHq>T
z$2bZ+^d}k#y3&D@<`abnFe&ntI3~4h$?QA{z9c)AY!EwL<c4+)X)C5|OWqjz_m^A0
z%f@tC-&?Yx-;G(F*tf$i^D;ZnWG!2IG#36d1~w+`g25U3@5=0)VzrfN-Gf}nZ}GNK
z*xL`G+j~Y$vDQd=OqX%~q5g6BF>)(N9<R!=oKNI#W51`mu$XhS!R4mHza)AlyA*$*
z1AJ{5Y|!t#MJrC@%&~JwP30WwGRHLf8Ng1XzT)TXJsc?rGG_9(<R3!TeN0@*Fzh9Q
zb*8=<cQRwqn&O|}j^519biNzM6RU!M!1OvR8k3ddA`w23O>UNC{ADI>(PVfl<Ee!2
z2(}LLhFSMAzi{(pt+m^@`g^RrCaG-~bGNp5tN&?dMFaJ6{>N8W`TWh3tBB2&Pb#=&
zWM_-(WD9R?+y`f9*U{9{GqO|9>^Y5L&oOTc`<K(WcMUzy$-d7dd5i96Pt@m1&3CZ3
zA=EGBe)dDf>~Ss{;;{BZA>*+2LyBp+B@I6v?VN6sk}H^l>ZoiIFm^iz)x4OHP(jRM
zQ3-83c{f|_pig+HGl}x{v%ZUXhF!=0FPn+Z=0tN{S$@S7H+rg}T+o%(xytD+N??7!
zOU2gICY{`T-7<1#)W7Dah0|B){-gRe{JzpuJjnjG{&`1jNY7q%)FJ~aR&i&ves}!L
zR4g{;+*MbSpOv-u(S~63^IT-a2uCy?k=&7e?5%ULWp;nK>GRhkAADYN`sS4-Ipne7
z-PZHLCl|4Kw|ys&bFHt=XUs^)b2&{Od_x**qF`Q@C3<WZ>{D3}@z#f`A}dxyTi5|D
zKm73N#A8v8In_do?Jd+jm9n4qaR(ka?7!Dkq#`HOhVq2y?pWcz@Oqgul{=Un{jUSt
zc--~_C$|B&n;jMKpMcw>_WQqQDs&#mriVrgx3b$_$s=DY@?ZE>!ZYEuaNNS}<8V66
zIWlNI<v#FNbJRKndonwbL*&QfzAV%6IXQX5@SL>z@s3&_wzK+X?#o7p^qb6c>p3Hs
zFmiF$RPbGE>}xhrJJkcG_5o-Z*&gtY>sV>XSycZ#_Yk6kE#{s)-LJ6Nj6PSnsWi^u
z_DF@sv4DPrhb7?DAn@!%@a*H=5$5TTPdY_+9N#AT0Ctk8qH%C6y&C+N4|{96v2bDz
z|AnK^-RS^FW!rlxMK*vu<BZ|FtLFRPQ9g8U(M90A;Aq#`N}h;DXs1#3OoyxH(;p>N
zh{oWdflAsHT|CG7z@q}Hue$d0KHy@P)qDH-+pL4ee=%dN|Iks(S;dM6um#q?<*4<Z
z$M+8I8%&Mjv+(#b%@O{$AKY;K&&_oXM|B}>q~|h*MesZDsz}c{0}*IBzj|^*Q#6N!
z3wl$W+&OVL;K$b;gvSWx@F7blfj-(7(%!e>hUAyeQCEo0_l|VF9OTFmoiEo+3g$$0
zD#;h&jqWcSe<rdJ-X(eKHtGFd;PJmdATCXOGoNv6$+X`2&NdssV=E8H@%PGa{#8Qk
zUinOP(r?Z)R6h}X#7<Mc#8F#PlmJ}-le+AbV$L>I4#$Q)vgGa-)~RL780nMY5=T<u
zVv}($F^c&InY#!40iWCNfL|B!zrNp5Yw(RlX&ZY6d`o(j{gGT4f!$;Tx|-&fR{gV$
z?&`BQil#fr6>`9pkbjVKR9~=WVRA#lC(`0+*em-#>t$Fs@0e<Q-lLAt?v@zsZpl4L
zyA7gU`jmX_b&Y0!m7c$oeaOE#+pYdh_56(<;4a$KScPAkwWi>W3C*ta=T=Wv{b*Un
zI+DE&`0;IPKL4|b#Sa?5m4w2K$)nImH9ucH@Quk`=RU_VyeZf?s<S08TfD>4)2#lP
zW5@e*3xkbWov#ir+rhck@<ZU|U1LoOcAEga2)R0@^Dy)J0+@*hI`j;_nIIknFB+w9
z+TD+gmi%2^mDSmduP;a&ld#>QJE6;yCy#xnV(pcWt)+^y0q8Qp#<5eBpXAjG@ed}M
zmm7M)y;xl3>dq){ZDHLt7T{APoRB}+&0Ld4k*9Bb#^m(a-2EGzN9Mlz1?Si2&bZW0
z7It01AjEu)F~nmV>r9yDgd*QASR7<7*4$mOdG^HQ3b2qoQQ6lRJ7a2R|6U;3VLXe=
z!C&RInQOpj(a==#Kw0ZborI*!rg~>Wzq#KDzEGaBjHC9>l;)L#<8Tld7P0@x*H{Ig
zHCi{|CHtyiRvm*?OV3dqi!*x`KRE@wJQ$NH*b6KiY8Z-*+m<Wf*@<)}d;d~-vuERO
zaMQ&0NBf1Rk%+Y?lRj+iamPpZWPianD!Kab8RSk?xw3DTU+?q&cpkj<-KcH#N!6_y
z)45=UxiaSzlR{iBcr~Uoi!}-YcWX^z^pRFwv{A6j)Vs2%j29oRK~Jl{+)?}7AK)WA
zM~*#a-Z?v9$#u$~4g6brvN}%(<}I`>Ip0E`=;H0>+68sUvyr~%J)A3ZzbE>X?o)!T
zLHIoteTq990_cwIz}b>%JFS=xZ}=hNn8k;#b&P6CWlUFKdkAi^);8Sn$H;p9R$Q&_
z5a(R`cK@J~0WbL>{ddnB5MKDN#cslH=@-Jupi}%fwLb~^-+(T975ik#+vZrm(rq-~
zHJo*^bqDpINLwXqIRmQxft6sX_S4{dg3HB2z{hV{pP#AyEtwW>`xwJ@jH}*h!tge1
z0_Zfv^>KEw!qzu0zT9zad-QoCyxPoOI3Bl{Pr7u$#oQgMm_JJ|L~jg|6LYZ{d+y!#
zGjv5CwuHqd_1rr(r*9d%S7Yb>YTzLJvGu1P0;~9af#BAKycN9IhlF*OZ71vUzu5hx
zuUtq!7T(-;Zs2&F__qE%wBs?0%U2Ec7A+fU0_X+#vW*}8pMI{|{<bzo(1v&#yt3kS
z<ehlhGk<dz3jbX2l@-P{SNtM)wxhz#a25pfGT5i{zcIQ;%(>@_!qxnC#B#HV=W4$w
z96<K4kI!VE<qcOn=~^#d<#vp$75$|8$+ytCENcR|-BOj+DIE9Rd+&}@RlhL{`XGM!
zs>llMFa6+y+KN6`{+5LGKJuVi&uB}y9;L4+{@b)CTJyZ%Sg)~2&bs~F1M|G2Vm0NZ
zduiW?zM?(0HD*f(;7&sM=h)MxSTY6}{E{;gf`NaWqat+i*J0qe{Qri5c=xiE3F|E$
zajt*+>6*7Ii@kVs{_*qP7@N1xdF;H+3&8OIn6GI%cE0|Hj?Q<~H_TUX^$+uJ7d&-V
z*AG6~zK`d6$p<$a{2Fcor%~V5fvX=(sAxh5W-l8UhVI-H^FcPoeC+l3*pt^9?8ov!
zI+OPzf9<+`ZYO@o<eE#zCj5V*We>WwJ)Vo?S7hzL!J?el9`rf+-BgC>_A~7(6-RM|
z7NGkE=uNtcfAUdzU3$u~@;WKe)OubtSEiBQ&s{h6_R7=XH|(>+$Yt|=Z!5g1zoXt&
zv6^SXDd7%!T+#CT5+>RDPibSqF*-nqx($O&Z7P2DNx|mpCIiQoDd=F?_wMji`!;GH
zuX{G!8`1U492M?o;6Yb7DvCFo+Qmb?cl$z&fjzzOST=&-3|GbfBkjxsqbl#c|D2f+
z0-_>>EkQGrptWeP8xW~&nIyPtTQTjmwr?{b)}m-zs<v2cnE=)$YK_uTZSN(4+B&J;
zds{<my66OKYcJ{*@LHF)CWJ+e))irZB=6_@oO3c~CX+zl_YcU-nRA}!_x$$ld5)fm
zGrwqNs2jwAVQ~Hn!$am@3Y~&;l22N4@%&Kj>O$h8F8pIY&$=NrOKY|L%SG;)YKdz?
zwd=VSVy=bWT5nl8b;1ra>2%>Tbyo(L8=JCmDL(=qen~05b}{SL*y2IOi<>wPSawjc
zKnd6O;@@GX7Fe0?LFUb*34HF5uCV@ILy7D%v1iE^&hDJ~J~*}ZdS&UB$&8oS==E59
z7klI33LflD>~OMhbv=0c%`RuwY~~uo*W!%7imsYlhYu;(yZ*Aa<Z||j32wnmU&jXd
zGqQ8}Y)&J()3-UYo$_gZ4bLf;bhtSr|M_cpcG~v`X6tN%!+rjmt4?`Te(>k+b$#?7
z@@xrqP;}}#E<>k<_hjb|#P7<piQf}(WBD!ue$=1BJ_hnT^reD}BF9|l<7_**m0;|m
zIFsLJiN_+xx_m9Z>LMRkb}KfV{Ly~)PWZSKjieKo<8!n;m7$U5Dglo(rd543$lKZ%
zCmD&bPgOk84&U5srcGe)Gv{lE+a{rd+_<2WSg6Ft42u2b--%c7kvi7KSO;}|pI3^A
zu@jHMH>O~*&Pf$aoIAm}JbI7Y)ZUg)^PUE1pF(!T6UbQF=ZWV+0ePdZ+{cCZN4WUb
ze>+x|#G9J8o^zvPio0I8erf99mn*e~S1p_c<QI#H+d{-AliTPy=;(Pv{+oxNP`Eeo
zc~cwbY;N)(@5I>`D0;@u6}%<Z?_j<`8Ihl+vC&B#@;f%+ugU)u-sN+)HelC*No%#f
zDECUQ$Yx4jV(6WqZsFQoJ*#^nuMV`^v4Cx*#eK<4*=dcb->nT}JZsa|Pu=p9|8we`
zhFz+ok>}?bbT;{Y*Ke4|TwTAFFDF>>Cm2J%q}C)H%)iw2K^V7VexWm`<rQa$@6mZ>
zx^jKM_o!#>g2UDi@XK2H=jV4d4za~C(kVAnpQ}59I1!&mbp|~X>76oX|3%c2;J-V^
zhH7O8%ohtRu3L&Sva{~8Y~3#0h~AeYFT(5Rh!N#G%m_`bTtjd76AOVoZ1K}!{+?$I
zlZN^Zf@dmgk$-YIuxh;dcZ{wqgYIk0u@h|kSv0j$ao<{EK7afab|SJZJOoemFCI87
zA8poOM)uLJ!{?Hprr0a!uiSAdJXSN*PiuK2)UNu6d=}&nUvPLot?OsmeoOpk8NVf;
zk7i}y%>Z3qA8LE{UIxCIyBIv(XNt$FuWCOsVdFad(!J!P_E|du-vPgkuc4K1Z>%h>
z<ay}vqUtaq_uY9MB}zQad!}B4f3TlRCz~_N4EA)PQycSgAnW>Folr$C4t+9rFFIrc
z?~hdP-zrmb`sL`j`|(foS@v%YpZ5UIYUnGzxgurewDV4%TpGtaoZ9#!L;0xn7wJRN
zSi0!>UxW_J2c06CR+Mf@g-n+3o%qe6ebAPDybq7Le4jhA&kXw9`DhvRKPCUl&tFG8
zqntw)Euf9`nrLd{g?D*3%~E1G?$><rP~!gg*gt`cr=18n9&}F4$J|`IA0Gr`1L-p9
z#K=9!DEGF~n}d%1l*Z!B--pX?a`+eGUzmRd{2Rr;LjH|@SaV9=<IuM3dS{7piBX$N
z9IyP6@-gZ1^CD*|Hmt{YiYsRgT!|ltXK8)%rFBn~-;{${$Na+0IXn|#OkI!vFMS$}
zo%$m-l=oY8lUKn8&Rx#6D|k0TobTnlpJzGmy9x98sxu1somv)SX$@iTT_hT>%#<%a
z51&}?0hg{iKwP+%b1^$NlWS<OI<O<Yd0>`u`?7VPTmStM*+E0!C%)q1ZhGydqu(Q+
zwig*XU}b08OiLf|XmxInJMSy1Rbo$NM`Sxi582CjS?tWN0yAsrQD#=xUGgu(y$k7;
z3A5H7a&5AmapqG_0{;uUT)enmcA0U+yS`ti@pUfx^HF2%<aGTOcJ=t0v&`y5)VTBn
zp65f;H&Zc4j^cbCtFstul$qS5_gd+D@uE3r3a<D8YJRLQ9iBS#AbCRBjRWX8*&^{|
z$j;%y@xgx%v<olhqv6?F<9g;{om;d{`43CES2(<u+(Ma|+MD=@yN3O|cNL#C{oK1{
zXX<y~msne9PHX)=bg0Sr1b!Y_xn21O7LJB#TjVFeHyxs{Lykqb5g)z>J=HsK*0J^s
zI9uCk)jK9wQ!CF6w=VIZ*5>=2HXdP4)<Q1KUGEdhd$NwmET0zc8q}lU!z_FWZ-Y2v
z-VzUY)~<VShJT801CI%QjoI)bJ^=h`eL;L3gP-X8I$fF%+{*sB_lJ9<zhzC(+UGl~
zqnXRs3-k<NXU1=t1Rtc<g)ASeV+>OeOFGm>ZLANT6~7@%>Fe;T9NwuZdDCxYyjN2=
zvpz|W=abm^Vjb!QntUca*Hh~8d&X8c!WZ*eKJ|F<{g0Z}>lmYz@#cezbv!59NzSS1
zTi6}|wyELCo6WdbGHk*e$7#|JSX@nQY5*pEcNU#_=JmogV_7+4Jgr~;-Q&|U^cLJf
ze(hu*t52W()E-9SDdE>pukh(Ep8BG4N5G=kSKmbopH5xBcjY?{jN<#Ny!caolg`Fh
zjj}qH@r%Ky-Dglr3~bN1=ydzvqyIKgdw<Bxo>BejO39M^FZuqmkG{_z_Tb2Zfw&?5
zwQOJ2cyVyuN$guiKLp3~$9kKX$m*e&2WGzpzuu|%O7n8Y`wQ4$@!F1Pd=BRbE-_=~
zf9tj=F#<OI5#k!HY2kC(agSnq#qn{@C06|2$zJu~{ToNRpE$pY{oTR)S3EPq`2WTD
z54raXmhG2h-#hOC^f_k^_&UMYm-z6#Ef?m;mF@{AmM51@q|O1J2a1OG*HfLt`|D5a
zIj++8Lx1vL@b)@v$$B>~DC0aL@!@gm#aTIpxaZ1$FSC6)Q`~D6HYP#exPG!zfN#Du
zT>CnGaq10iD>yLcf++iK;Ejh(xYm4}JP-G%$M!?~p87VqN$=dfd0da_JMS=!7LiNG
z=0&-u`=#*gu5eM?fH6xN%<UyBZ%WTuKHZ#l!A-2GVT#p9CRNcS{*ay?ZFSr5b%jp)
zXLUxQ&To2duXOLEw!fCzcM@6Ms~W!QJIW(0^m;QRyz6Z+cTl6g9b~FPeLJ#W^ak<w
zSjLhZOCICLno8*!K6kX-gUzHytN1Z?PkfH(CR?NXL|^kiZca+_sN6;jnN+Uh{_V~z
zYhRYSx`20$59)!P@V{$UGP)Z5W&2xXcYM7oofWh-J>MK?PZUg^u$S6gnHj$%{u(&k
z<l6qYF`HG_P3?ASckKCG<%V|Fz*-0EK&(@Kh2JytRq!bOx3cwk4nKe2EOG93YE=hS
zEHp*9$)kIT^9ObB8s3XDoX$-=HyR#wW!=_Of^aqD&*?<aTYm0w(Z|U>g5Pd0CX0t+
zb6a`;jCn}DigR_<O5u3g7Qbi6uLlIztNx%^;XtkYLUc!4J@0QgA6mVL-S+DPGr@^$
zhRz_`LqGii*XC>A^*fC*aE+Wq$J@H3tpTp9fnSJmuqz#Pfg0efKn*ZN4N&ipi2W>7
zYkd=9U-mOEi9Hyqjnf;T_a|)sspFpUL(D?$Xl}~#+YL)2uU%CsK7J6mf__Vio^Cf@
z2miopZ85O8G2-;LsmQ}%t;k*%Z)L~%(Q90s4aXlZUNtal7j)O!o$HCO@C&b-U~5)O
z-uzm)Ht{{zkE~weSU++lu&a(Kcv;_;c3_sjAsXD{*%9gb7Cy(8l}?B~Jz!)0hwrE7
z3EM>!Z)5)WRrJw#e7WLF+4)rQkYax2)?|~u03PDJ3$)CXF7DcFYE$q<$?|=bX=H8U
zqh?OmFUSP}gYK>P?@)Uj_`3c~9f51|jn?yhJ$|wL8e&s)!E|ENiPl$CeY;frT{9iN
zQXP9#+jQ<Zi0r?QeiSS=ZbcthU4U;K|AJ?mJ>UEKkeS<lT<pwt&g#${?@{9wU%elm
zZtLcn&-yKPE@;GD@~K7Z%eUQEqVrwVKk&;BgiG}`(KoxV-}X)Ey3WmbM89oPf1K^r
zvax;{_kGjKY{pN@<&p1|9GXX}9)m|3GQAbjO<Jq(ue|i9(Cqm$KTR(~soQ5j3}^jA
z)@tYL$@qujP4y#0fK4{2>>zR8LFeHFd+to?_~y0ry-N1hffL=M9#i?qv!5k*My!vI
z*wG3v+jx?3Z9K_5$8(Qg*G*J~Hu!!_qyk#>D9=54%Ln*tuAe++W-)lu_$`dDIMl8u
z7Ph{W@NeO7D7CWG(lFg!2QXQmn(O%UZRq)}4l-}Zea^$KMOqRif{k&BS^Rv4t!Lva
z>OJh!iEYTmHF)!#YBorIHFxRK8}=;=nY6775Xb6VyDohCm+8$h=se`<m}R_U%)Mvo
zV)cnARwEW$+^N1)=GEE+AHH}oHr)1IGWJ}D`{ugxcnNSW=Dkm~%DqTNyQs;gc%Q@N
zCz@HlyrG+IPeBp9f!v>_egefXyf+<t$G#-`YebV^tfF`<Q9-;MF6}*!^Y8`xLmuqp
zU7F*-9{;Y{_xQh{NA|%_;nFQXDm2IJqgO^S%a>NKiQdg#7cO1gL|odkayo084y`1A
zCFGGyXCfEeTQXBLJ;1YRi`S{-mlF#<Djs0mee~eW5}!aX(W1=j5t<UF9}wMOaW+G}
zdDF>LPZ{h3ilV!OuPW9e{i528@YOh-_hmAs&Yx%jUvb{C^8QpaE8^)V7hlube#f4L
z!^KyOIU>jKPRCG5Zx20jf>H5forg1G@MF3-gVx+)_AQ@DUl8w063+Hn9BJL9>Pf_B
zo4y4&j{)uu#p@T)FW(B@c()d7Gc&~#vvgn0bjxR5$DC>9l<ky?>39ZT58Uc=m<AZ>
zMCr3Qcv>4ai>r<g!7Ih+t1$X%YMb<(xrRC%@2`v<>*_hxrpl2e^y1t&dai{!#P?4o
zU+0}&w}O4ix@RLf2Ix0eV*|7DaoFwYi{r!!oT*CweG+p_u{sra=#3Ax*K@D4-<d7h
zR?H}0NU{chZ$TGu2FLW7ZxSQ?1pWJco|$JR^`=(3zV-p&hW_d4Z<n2^=a=(bnmS6H
zbKJPzu@+yT@k`iqaFZRIO~>X>6+e3ZnHx7236BlZ1^7?MgJ86NS;h1%?KQ>pK^4Hi
zMf8}B0q?4(fyeL0_Ko_qdMb*0Taj7$Cp%c@tI(17hq}YmHcJQOEOK4AR&kebEL-(=
z{8pFdrQoKRv8T0_S{O<#y+k{miKhE++GvguF6a_YK8_8FN$+ue6nH=0qfHo|6&`qR
zD0nWN8CS0lcu0ADSJlM+(i@!~outpDBLrXk1#B01!cQ22n;>3(kKfL|(FvBndAFwc
zyPCbLuaIMD!RJw}q?7)zF4l4r{>kH^DZS^T@Al(sRqd^#Cu~~VH@L3n=y9v<;T@&R
zI6HL@vhgc;p_1{XhhF7x4|+iQLwa4XJ_0|9<`$pe<|1T4xcS{<$Om}gti|34dExb3
z(>m)tyr`b3=Wg;~moAI+4Om_F=NB`uqeDH|r?*{fVJz*v3fT7no8;HA@K0|$hu@?J
z1^<`A)0#RsS5xo6`vCZVgDn^QyO~SAg?Pw}o77aAsN0v|x2{)QA3<_ENN?m5e&|@C
zXY$axCE?Oqc|6fo^sQiR<SORg#xrN}P9?<$;wj0xpQCwbj+>jU5Da^W8M&twIpX~q
zo9Rza@=lQ^$+h?>WJ>Mc6D#M7&N{P@al4)sPsr}LG!TscuItFnjZ+8KVC!rw)<}PV
z?1yhVg0h}#M;!0@s{+q=((ijXG8*JVUp{>wWeVepM|}JsI~~<rQ||Bv*8e#5gqAag
z>J9awUVrYukUBslOs%KS46XGX*mrn!faBacK!U!H6M<#8UX)1}yS1HED7y~OHE&>p
zbcy`-gXkSU)>#|A?%lcJwU-BDo)6w<?Z_@XZgraCN;mG5e-qGY&{_N#TN&OUdigpr
zflhMibjqWx%xQRDdSfHF5wA^(I_=U^@SC;M@RyATrT->oc#JiclA9;rU*_fe!Tlql
ziFxwF69@CdA@YIE%%ios{fv{`K6&8F*8|}5m}>uzvhGWN;?{Dle+~V$zJKuEki;9A
z+@#e9TyI(L`tYo+DF)xiy?s~J$kjr=&tlKjQN%6kb^rZ)#LbrutpjyllBW(-;m*sr
z=@##Ed|m$_{e0R5X?B}vwrMDTb$90BuRP<&em3&>OEf;Qgz9(>aQ*s9@*DB+V9Zti
z=j>d-kRIYqF0RazR}ptjT-@~sWT%HZH~p$^jW4m4JxbR8DmMO+F=N$V%UUfCEIrU2
zZk*u7t_`-QIIa8ChrJJ5s@SWRa}s}O_9+Iwq>Py8&8qNVoo~grGIc)r7JeSYJb9Ca
zD{-r#pOSZDEA~R)QXAU(J9=xaF6=3>HF4>yX7U#5LpIj$EZOorF)qB)5o52e-_J`9
zWUKf`{~Y4^SI`+%?7fV>_w8*je{x`reAmQ3*u%Do{Z$9p7sY+5H$0CGdlp^u9yTsw
z`&{wuiP!%3_R({?*-x4{&h~2nZ|UMFXPRZ@4NnVY^#d$Jrz?J7EY8q~br1`7d|7z_
z<YTxP{sVYbvD4bnq~0j!8AV%G-~VIYd(e&Uco?`_eiv$=NKF-gxGfbj>7Ns`t8a_i
z@l5qK7UEm`y<=BB)n7X=LM`k+`)ikB&sLc!rys%i!p$1is5<MwC(Juz-XlKo_5}~w
zKX7umb|w3K8~K;uUqkAI=BPQL*~Cw14mC6`nEVX;b>L0KwW@Vr3J#axTl@K$jm&q(
zTr+1HK5VRUVD^dL`bWz9tm2+k?~R`m`xSA2MRpHm>pS}@*RRa<P|7b5?a*g8K12NM
z>y#*Z(C;hi00!Y)a7GW&ds-cU{a&8iR;?OL{+L|+3tiKHm=&m-LT?-2^2`iqZl22M
zuIoaRHV11fwl6MFPnm}P+>al*>MN{$UnVDf9D6gB3${7o8tpqIHyrlj0CKpAgCXLt
zDcA@0p94=zh0W1+?8c^l$k{h%H|H-6;A7p{AF7R#`=wU0M0@hp!y2I<U)S_~IoH|O
zSsNuE+~DPdE4U}z9-4hCHGPds{k4O41<Xve?`J>4lr8J|C;U6!7^26I;Vt66wuZ?A
zYxa45MZF`xKzv`~+Jta+Zgbj~`|VzdIpBPtreMne@m=etk}X}luUPhMV6>Cecj@J*
zmF>jVIW}LFpEin7YncB~Iknbp{Uhc}eqi%B<856>w0@krTWXi<d*G8d3!bZx^XJme
zU`)PlZ$=-3o4MWKU>!A)D76pvFg`kO73Tx&acXs4KBD|L<r1#_o~f-PKOK85yN?i^
zuNZ7eVs~gz=U4B{?%_~v#qU{MiXKqBuNsTf18*>g->0Z~F1}K=)=+Q!#q4>=Mc8?w
z{H|wQz3b)5fU9d)wtidA{T6=lT&f>kI)2LvdY$g2FGD=>#FC;pt()AOQ1mONvb907
z0bOe{eNUhGhFRUR-t7<2^Mx9V-<O-hUUL4#aBdFtjH}G7?k;FGg6{m;yRwtY_3KPo
z)u6(?u@C5tVJ)In%%fF%MQD&#E20@Z=A{)ljFO+vrPZA`y0nVW6DyxYF|+&*pH}hG
z46VwiW#(W_=;}PQ`XPJPCJ&|6o8#60OD_7z?0I}zrQYRSO)s}mO)r*WC4UdE@F2d6
zz;`k612r^f^w2r39p%oE3g@4L*nV)1@_}sL*7%Ok*Wjw^5mz?EudCOsy*vtUE0=D5
z;aEJCdw4=_=3c)cBQq<0Il{Ptd&4l}{`=5z+aJx0yOHO7oQS?z@IDK?kLDjY0X(8>
z5Z=|l&y2g`H<@uo)2v?39mqH12IWpP>;e{_SC$@^=@C92eJT5>b4iiU#huN1w$$db
z4{+@Ro6DX!Q+?skeK220PRZtH6!#PF+8&Tr^*@r=iQMJPy05_u@_B=oC+siI)WD-$
z(>(4O4a%1*r&rqM#}aP-0=pT=AtOT_5$272&zU7Tm7FE2=TT$RUi-<Lr89^*w$5WO
z>p0@=A51pI`VE^SAB`R$)x4Zu5-GJ;FwVxS<7cj=C#MToc&4{8hA+bPdH9Z|rS@A6
z-}B=lJR&ZH$LJ?qTy%Zh%zBZ3zMS~D_-!6s^x(tDUmFe=x%u=Lu-BV@=;}VjP(Q&3
z5&q*}3g%$kST0{2*Gvs{QYkT6gPZFCe;w*Ymi@Xn0AJ^7>An)|r)n9Qx}@M4tWEZm
zs5W7Brt-A8aka10U&d}G{sVrYhuN9s`mn+JXrdyNr8BQbR!i>gxA_Cjulbadch{3s
z5B2QEM&>wNJH8&9&#BFWI%eJb*?KG!CwTG8J0WV;UYr6>(!ivi4fQVL020@h+M3Wr
z<if@-E7?;BZR9iA8b^a0yX+xmnajSw=jcg1Apd5QS1aLO$4s>`LxerrHxSPdmn?||
zU_>tr>J`ah2FB}&4W=yadeqdaH%qy%b<F>H;35Y;Q?R}dk4+@zkla0bp&N_D_7aP5
zpDT;1mFwP8Vk+q9!R5v$Q=4?Q#>>{nn%*`xz$4wnH{uare#IN2*ADna<5BCQo+Dfs
zY^?Ir6WcVVix=?I;O>LV<(snbq~7>jq1xKF```h$RwDc_2XAYsp(enQVAMLnMOr;O
zi4f;au<uT~KY<=t2V7?}*E;SyA6$Hkb+_{Q!@wkeKt40NrJb>W&Fx249oz7`@p_Tn
zx%r*v${6d5Zw*ZO3GqP%{_RS}Ty8j<_lNT5+#W~6d6$18cHXgR{9s>k%iGS7n4*5)
z&^!S1s;~IQvzcQGwa)mfeYNkACszNVZ%?H6rF)5^mPGzL(`(}I8(%*$<9~Ka*RrnR
z;=Z{L4$S)I+lMbR_v7ox$G)9826J~eGY2$K4?s2#sFo$a8{AcB4~TFqzZrfAdo|{U
z{Ip;5Z`9|Yf6I?TwePP+2k^Y~oTdLc=FvmZzpkh;Fa7sl@c%%6J9mcufBy&m9_xKA
zJeAz?6!K*y=p}w<O?GWH+Ly{2S)1wrf?4p!Jbslw-xBiqv^X!E&kh4;OGr3$`E(>6
z-2ja9i_WWz{9tG-Tfch$aItJhsd7GcZPQuXq&CH^!_u%P69d^bv2OeX;<S>syCxBf
z+wTEd+xvOv96Cg}$;#_+uiumK-h>SQY7Coy3}^U7IBpy}vQI8MK6m2U%Tvfv>fWKU
z=iD>wzJ$3iDQ*v!a<)viO_omFuRaHKOKM5RXT>H>kPj~3*thlDf1T~8saLJ_o30P+
z`>2Y^<&(s3aP6MtyUH7f{@Z4^Ry3;Z`s*@r!$Riu^#JlPH~uZ&?^WPjQg#LBl%VhG
ze@Z>_1^WBG5vq;6z4o5ez~k?B?Hzd6a7Ie}`cS3fFm(M)^|h`Jx%;LR2Wm|%-_EQ_
z>mhGs_0000@{DvmHdb}1*LYrgoaJ-<0G}atx7KBSvJP|mP=2erHUItz{I!q2qF70L
z-iOh>VfeVUVQBpJ%>N-57mFWvSTWq!oLQY;ADLg~z$a@9V(+%H2PofsA6=yRB8NBM
zy`kCWo(xV}nug+}`?mZz!M^-nIB8T}Y6QJK7I@deqq#ox=iyQFvw_*EP;4&ehs}(5
zJu9xg_4-uEajKSuKR~TqeJWGv7q`Brt=&q`4(1oB6QXn6{33oug!``#W%sJ6UPA4S
zn&x!uI?skR4|2~uevit<_}%K+I|JJ~pWMd8{!Gq&;;Fpn@N_rduRdVKDmI_A{?NJh
zze|_o!Gq@i0N$*_w~ySGiGO@qRlGch-y1gIL-V}VMLiimO?pha$FGA4C$F87sfCG0
ztPjC6Ht)t5Gng~>vCKNuubFQhHZMR=a|Ja7#V0l3G)!M?1+@d=UA>;)RZf99EL^}L
z|53jAL&s$6M%fqlKHf+C@W?#=ZDdLKh~1bUAGeVIT#sK<j$ecPt50poQ}ojX{hEKM
z-n`z*dOEjfv^P)BXh?hzc69@KYe@?|U~h2Nr1HfNEl<z6gPzf~^o-v59rnxwdPcSP
zf_{*!p3yG&(B$-tI^S_-cX4*tE5KT9?kFh_?VD3a&*<yu!c5O-c~i>P$z4AvSVK{+
zwo*EVe4==}uzz6IIzIb(Md{;T@a*Bn6u*OR@^61T&ONL4ly|@va_rWnLWf<KngC2A
z%0Iu?Tu=N4-<6Pa9*%!)FV&{;)<2%>@$ZSyWLW-PlHuR$Ld7HIjU9N_A$NSId<J+l
zcdw-D=eha3cJR<}_sFsqg!QPyfHk#0(<^$7U_fuEZ*Y<N*~WkyU{c*49Y-wV_Qmh}
z7i74hRQn37|F2qOYI<gzLgjYBsW12PYkKtz*La5asb=sqylhX(l5N!le={u;$109i
zEUO-1i=&>L_}PnPkKQv>9>;wW84tu6Uz46#ACSjQ(*}FEhsfjlY1Ch{<x#y3zC50M
zMn)cwJbkD<cAZMkcA$qluJ1YWSan*qJTBzDK$6Fk4ibyy$W;}v$F3b}8ygo7wT-P6
zr8egy8TIR<sS8K0Usk<26n_^LWb3nX(fj`cf96Y}4F0~le^8&j$)5aNeU@5G{vd$A
zn7-%Y4}1jmnUBB43-J+i@b?~k-gVnh-!^*7(73X-CV)ThbE;}&{Jrx=Mlb$sW&bSI
zTztJ)4;_w@ZVTeB=AYa@K#qKH|G?Yn!TkeIzXe|fY=PZBfd83=JAKc=-P`iphk<9;
zVc4b!@a)Dmg^|k-y_FuUUmf`mr#7WJ6ZT8{8C07xZ)D3tqIak)boWXY3fq=j+jL9G
z#@EwU7H)r?JZpo$pP{_zP2%swIYZ^3bABE<$VbN+Bhzs?bX0C77@Mmvn)p#?m}c!8
zxBytL+~?S{rz6<Vi@zMI4J9~-kF%#+@Zri5yr-wLkJ<orgH)eAJ4EO8+}q0>J(+mW
z=DXkrKc@T6(b;~B+f(AjboRMeM^$%U?Um?p`8i+be*dhh&b!cg*wA1OL-Cz&#}()4
zOog+xPVW0>&$O!KIe))z3x0Kio_b=OwqD|2hcno^Z@zYpkGqGi{_3N;rgI!R2fkW)
zBG3A@-%fDq*M2|B_1qlMxTCUl&)3jBGv=IEX;vP7%{6ufyn`Gbs^<FU-<%;e*RH?1
z*Zi7mT;GwQV9j;Y%g*dub84<F*QAH7xxVYw)z|eLy2gDQzN=rKe@Xn}+3R)KIoafR
zfw@Gn1UkNB<?pbUT=V-7vBw>+a9@^uZ_3!ZA@aR`sI5y;v(Y){lJCX8-Zy74zUOj$
z&x?P>et;bLjzzP5&s1cn?-~8I3CMR-Nhsply8ot^H7MT?V25-*h|fdf<3pWQ>z@<y
zf%OARY`hlqWBz#ZP(LQ|d|{=J(*?p+LuO9pWVNR_pUhtj&%;j>{)4~&KlqJ*Iy8vi
zpI2t^d*_^?`0b(}J*dy)`ktfDd51<8e%GDu;`i#)v+;XZ9y|ZgfAwYgNjHlI=p*H&
zqvW(k%uAz>>^U|KUT%`-+`QKGwim_^pVz8o&yi|Q>V*`Z4ezy$Q+I-&iKpqArZ-gA
zb%xtQVwv};9jF$da}(=7P+u#(H5#9L{rjra56t(g!&5i!0Ct_v@1HMMNbLBs8QUb9
zUq!sHe9TMmi)5%ckMH=#YuPyYlt=fE$ZpnT>sMd5O0T~4`oI*$%{nV4@;k<0KE*fk
zUp40k;8ynJ66XF4^}xFDwB8MzL$TqP_uW4`JgKSmgYRtn@!6aqPw!L9$?7wmw&e_Z
zMbqe4t<wQNo1_oGw?21K3w-y;fi-))9uD_9efyVT2Ud!PlLGtWCX;_H9n3N7dC^(?
z?#3UMhU8*hocg_<-@kZZmh$|IUvuZpjkC8hf3Sxm7-y%xZ)(+}wG#iwj~gqxhQ^IQ
zlRaWhxnuu!gs~Isi_qA$@~!eb`_Kr_ww&NTdx@S6muy*Mrl=pHWB!=)DqH?-sGr!q
zZm6FqdQgApI9_-GkAB|at~~QbWBs)+abM&!hi|`3_2JpCk5mn{Uy0XER?m>p_Z<7x
z@R}K7zq+OkZ@*R|vpcc%uf57Ts)pjIeqMeYiFd%$+?RRoqo-$LJH>U1@AAcUKY}jG
zyM02snRAAGd+-MRqPcmOJ62@NYB9W&d(Run_XJ|WujblE=;!a}9bz9V?0E@Uxf#WC
zzJ1($OnT5hK0JP?|J%j630eAE-*fbL>(rqC+f=e{l&8NryD?}VtE{aWz8>(_xNKR>
zR}bjE1bmI4!~A-{@8DNoW>-EvRAvvLhX#LVZ$fU&H5phH2Pg*Ueo}j&3OVyOu|Q{6
z>hp!_L+%;s2itridh^!Z0sGOA?f>2jjb)<;q&NN_{e?d&9}3-N=lncFK3<d#x4IjD
zU;4P7T%~fH@lY&%+I(Q7CaV2l@sR2OrA?p52DF5I8<Ch0v=3hfr#fSJ#>bDX{IT@-
z2z2;D0RLmXp6#Gt9~}1*?#&vjA%8!2yuYSHJw~l3!UOaLnS*?1AAXeYzKq4M`s$-`
zeD;s!j>(#WbI#K5<chG*(w$!4$dul0&a8==(9Fik{j-!GvO3+;&$TzAFSvSJ`xC!O
z@3{J$W%pa5h0POlZ!k~XGRCy4uexP%rhZ#}O{TW**LdXvcl_%y?tIK^<0{6o{KOo}
zL8UkoXN8@!bjy17Fji<@=u6z0Cci~L<9O|fN>>|aa~=D>*8!8(Qw7ZGFWb)9Y}!-P
zNY0JDX}{33%5}9ekA<CiE$qNDL;12g)dQw)nYTD{X3I)lV{Zb#317$Cxl4IY*Geob
zk5F@8$7jb(X%cR0xX;J!Jo3@PC+o#VYke_WKM>E_K5Jm*-j0?d=yUgYHr&|P&U;s<
zbdEL0M5o8@Q4Oto%+MGyNY}^E)4uN@|0$o(VC5w2`wQ;5ZI;el^W$0JU4GhUj|#}K
z{T;X)B=@n7&-{L1cCGSCtOptEc!oMdK3m>#M7CZF`WRK$N&jd2@4}hyzu0&?&+mRb
z-(>wM)rY3Foe#|JIz0Ya>C);>)tG@fAB|)056l*gMYqKCbGLP{A6Gehc)FvNeQfZK
z<!yb}z7ab<^&Xc$MNi^2&Mu1c4m;^X)v7G7rpz(t@Z0nBE_416_NP?6mzMUH2kaQ&
z(vHb>{zk(w7yg{_-Der2$6b%kuqy*D;aa$Qn!K&c&!wE@M83B{e92$NvHZ-~;^#Q;
zIOx3TrhDh21EZ-En*K=NM{C$=Vr@;r4|UotWvP?q`s14UZXN8Elj&!+`&3<BT60Zb
zd&y~Lj=#^mg?AHZF4bJM|2MHNQIf{zw>Se9dIl`)+80Qzm9?s8e=6rB@|k(}z-QCJ
zIkh|Pvu9nWbq1&EYF{EZ{{ee-)PI29ws=$zg5GD6A{O{dsF-(9j9FZD5wRD2VJY_R
zo-v+YBmew#)=WL7nVx_9-W7U=F421&d>Iq%IyqNXFiHNp)E5p6md?Nylm|av>42Yj
zC)qo#JY(_9eHPC=Cp<s-!GPW4srzTJCigzmA--t&(J@=jKQACtb`GxdtYk{>Wy;Xo
z)q4r_-hB87nlEYXDVDyqIMld;xq$Pxbf%1ZT|5e&z?~~+p3d?3?@Gqk`5@1Y&B$cE
z-5bcBQshiEbN1v@C!N|>4ZP|%^7B6GaaFHkjQNH8RFRqW3VS(k#n1UMd$L!bW182V
z!8s@N%!;lDnMZ!2>O?!JiQ3*dV5ZjK(V0D}*oMRl+|T+IuhQ?67x&UdXW*OrbQ8U-
z95IhwC(mo$4gcELZWQ0MUadv@yZrTNEjlO4+9Ps&@PeIF_?XVv(wE{h&Jv*~R6P-+
z*z;<N>shPrnaDkQW^HI<Z$0tqrqGnl32Mc+@w@Of(S(~G6aC<Mt$929L$z+<fVr&<
zSRMvu9~Z)r<Yx8O#*!dj>SmZFC(D1t7F3~2{N9BG@wDp3A$VGGsrnZjL$B{M1GDV9
zIOE*!%~*%8D&F_|l{Jt0sr;UZae@`Rx%C-%%Hk5eQsdcO=9#>6cwW^zh3n7_^&zvM
z2RjS@vG+fGbqg{ldnp|tUrXbu{_gUG&JY>J87c-DA2U<9?dF|qTBpCpE_(m`HG=QK
zzHj@kAz-w!$(WK&@kKPi%bLsOdzT;TrML3f58u8VFW)TB@4kKU`EC9DzV@q?qXJIB
z^z4p-HCu!~=G#eJ&if+l9%j*7wSV;kXuZlS+{b;gF?Hw~jSHT}$}hnuxZ3cZ9q9?X
z7mTq=CEGlw{W}(CJ(43IU+N!L|3bmcGuW3q@dOWVUVlv&`}kFJ7tQ6<%66%@#l@Q|
z4?E#gpD)GhmM@vl@?($fJ?pp}cy$i1`d6!X-{_E@f9lnmhdgF8y1?$wxc-fS+46T9
z&gyHAfT!>O&*(XUo^89ItNR&uEZM9wdOsq5zXjv4=NY{-$?lO`2Fw=;x2!#{9%k;Z
zfq%iNd%DR3`Ogn`{}tS?_tdo3WbfOSzLvdoYsH?ugdWf-J&*j=3jD2B?|Xg7*~~kw
zHp_2>hE{iJ4ZiLw&7-^Ax&V9UiS69=pa;OW<<T0i=Zo>LN3XbeDYiMY%>MaNZH->e
z>^=M_-v;SDgMQBJy6{ADX6`<E=^BmW=FBEGNjH@$_Q_edwGph_txveN;vD5uY7TE7
z*RvKD_Z<S!T|CE{EbhauTuLtdn#kNS8C&CC2M6{(S4IR&{p|h`<JxJR2kri)LgtEk
zacT7YOkDb}<Tn(TUaZ_CYZ#2R8b*kvh@E1*SNxrwnOOK-J&&xqeB}9&Vb{;o8g0FN
zWvQjrud(CS58%3uBe>7?2fR3fal~IwwyM`kdxEDl&5%F9eaFK;tvvT(efQ#)dU$Jn
zP05x9o>^`<d(Kqv55_Rk`O>Qn^i>>Fc@F%*xR#cT>FYh&#W$=kKGd)F_1aH{@ztN<
z%(db2ft~jtzu?o4HI;i5ulc(4dm0lsf<A<7?jG_!x+dKzz0}w<u;y7C6Dxi%#Xe5Q
zKk)YiOmTa%!Hw0SJ+2NtkNZ_GK0)zDkiOyUxb{2HGMIB&XybXeU*e_WzS)luAE{U3
zyZ8v#p+g0)zZXHhRPR0AKf8{a+mT!QYj5Q24!@V{hdh^hikKMsXw6+4K5qA95ci}X
zvUz3MfhlduM@au4s(*hgxsPqg=5_zwKiKy_QXWIL`%Qcn<?}WEZ<IR$pXvkoSNhC!
zt@Q_ewd#kLj*#7b2R$qvvpfgf;yHhxRRkJnEk4hPhsN5vGG|BFeamBJR<h6JGw`RS
zv3DMje}0hkUu(nkEiFBhtuEA9R%Uu!xffqb*Xr5HOTW3V>)mf}(=&byW5!Ksnw%)x
zCz-PR%()azr>WLs->1r1CQcjn(ZZ{Jud7e8?}=?woWr^6oHH?*TzF!^<KX2;{3N~4
z3*I_r>$%<;L7cJkcxc*U=}4VvDL>7y=b+%@18Y)Y&ih|Eoioj*wrP*9;L_fp26Feh
z2VTWS7Pr;$y=>8}Gv!M=^s3qS8S>omtZ5Xm4{&}@r~C`n&c4gRT&SD3bLFv>ngQn*
zZS4|WxUbdnZvJ}>zACVE{HOek5ylkGhy~KOtJc%t>biXU|9$@G+dVuV{QLHyeDHPk
z+E_UAzlZOE9h%ppH*orX*yE$Y7iYJ$a!ojD<sRw3){92g?adl*g!yhe#P5y#?#_iS
zwR30q{K`D*yHe`|Hp{Qv@5BGSVc@Sne`NUU4*}oj4)OaX`n{)Qi}tKpn1D?%i3i5O
z52E8Nt%G~4uD8EqJMHhWj%z);J!td7**bBq#^;&b^<K()htu_q^G9Cuj6<wx`XPQV
z4*Y(oGdsov;SXnU<NFuUoOQVJr~5MgMfb$M+NIKO*sQ~;OUrNf<6gc0VlMg6-8~sU
zVb`<$vsa>b<%^tv9;$!3A02dr&5_^8b$$LSe_QEckbe0FpZ83oFEED=$`fj?amS<k
zpl48SQUzx4%-{{gn&fAa{<*={&o`3>&kCNlX!e=EmY=6H8^95Iw<A_SE|ET0^eg+4
z+&w#up`mAHNJpbj`m`t5X&RaCKLrQAUilI8srRFtKH3%VX`LZv<@~B(t>!i9z4aEJ
z^szd76?_~UJa5&572jq_O7Skg9|1lO)%WocPBDto%TUd8gM00HcVzHd3+F*asnwjs
zc)HJFkI)fE53QTU!HMQo4Me!`d%qMvby&R}@F#O*YoYK_;hqPe^YqK;0c-;YtqoIb
z3=v61njSpF7?)^_5%k~r`n_SO{5BNk*SB%{nH<iGILrF|!^3{YA?7`a-*bC=9=aC(
z2-M=PwLXJO-$R|F5dWM@-$T*%O=2q1u^~X)F4m-LgFQX^o>LS3Exw^>D7xJO&QFBy
zIwwl~eDz$@`I{P3*LnX^t@>knCJoHmC;H^zS3LfguA#Q^eBqRP9eRR;`c(IC&U61`
z_@g=#<p=m3>I;Yzx_trunJ5l$MLBQeG5l2NjN1qICAs|%hsxj2b_Ql&H;g@ddDQUw
zJwXhw`uo3Ge_8tqbq*4?rpD8+tY=N0^*pNF+9rC>+%sWpeWT7_8}Dz|Z}Rc29C>TI
zMLu{#cHE%+nC|gohc3>pT_#wV|4m{W;sSEQ=q=<T-<d#P7`3QUb3HuDXuf0YSkhxl
zKk}%q%RgGSU2#XLjXSPjEjP%of_C}V`h`4eebwd>T_1Zq^)j8KsUCEl39fvr@nTWw
z|L#Oa|4*{LeMht%!C&>seGWK$J1}1K1%@E5mBacPw94l@Ic8*iT+P@c>5h-;_ni5}
ztC2kG{Tu7Gd%nmU`uR8EN;yXSkhy;mK6*UZ88hgkXbqdO!x~#Lk?)&mZfl3_bM$Cv
z46fy_|I`t9H4Z$=4L>l#{F=A-6<1#K<%RF`=FLa@zj@CE{e>TMzr_V|k`EWlhFM2{
z!SFH{Jy*IjTMmLU;N$MV2z>g>Jg{CSSdf$9{J)Ow{5an>0<0-?u=K;f9AfNsdB)Z{
zZp{PdghPz=y*y)yuadx-Pd0oz_lAv^hF|}U8g~TzEa7+A?U}pC^#$zqukfq=TvO*i
zB;Rfi#47cp^Z8rae^KN1ASm`9t{+Bu`B(zK2pPz&aVQV&%8FZW-H%Q8`CvF1+C(nm
zy~M%xTse|2Ne&}@WBE{DvL%%9C9eyW=J6#n@14*&NpBs(H<%%uLTBY4c5tuWbI`i5
zuXfeK&&=sWSNi(yEa7PVq5T8-e=%D(&>2YC=Pd1_c7ForEd3Eb^A$s1HuZs^pQpZg
zYOI6)K^<eUUh5xJd*>{bb5DqOJKW;+{1#&CpyAAT;qboSzslBExV{}PBp>uG-ojsy
zKdE_j=2?ip)tr$jKSKPX>z(}v;g=#C4-`Nz<rAKHWoU2HMWdw?T;E*#=|38n^F_wX
z?S;ByY4-h3;D2eJ9%6j!d#1B}&l5D>Vd6g?@V}Ll@z<V<e{60R{^eh{cr=lJCj3YA
z9sewd{}o{~yD10%kr90FJ6W67boIU2a{0Xgj_iA|x##s9pZhyJ>-&PLQ;A-JvlIM?
zUK<a%^pYH}CN`6-<?ie9-+`COxlip~cgsOruTc%a>TY^p(UqGO<LTW7=0WI#oHuf=
ztIl_|cCNvDR|<3ZF{_cBb6;*euh{hz^@(|WcLcEcK5Nxu{nlr_lzghM&khwkf3%Bx
zfpx~;2iEMr=HTqz=*nE4x+s;+Qz7AFeTiM)NIrcCoF>k5efmOh8swQCWVQmCZ9rz1
zBeU0Dn9VctnIb&v`}9_3d5>T&&xFo3v%l-{jC$j{ID0vM(eN_64cx8zt*QLU=~FB1
zJ0rX^3H+G2h4(jil?{!HTR$>1E^ft-6pck&`IO43UUw3?L+F?o;jGeAxL<uyGl2Ki
zO83mtc*r}m)Ly3-qr@GjWz+EQp=({~zO%cfIOiQ^oK3ur=M3+dRgGTpj$n=IGw%%6
zbAnHBTiY|!)T)ouuM2OaZ{MMo;MaxKqiJ5aYH92!d}^N6JL*&?zMuEhsScT@{zz>a
zJEb#Yiw0}Dmbb$?55=U{aL$YJre_tKGfTqMC4q-pB{g)%_49c?OumBpaBl=XuYC5k
z<g;}~Kw?~`X1!3cs|OplY;L4duq|5}FIr^Z`>+dH)|ire`3CDknfIKu>I@Lzch6-}
zU16GfOf1|J?O#vcEX=H@A-jIDcj>{r=dYxC`)akG;m%)4z1~-=I?dV4;h(=!^3kE^
zZzNvpv*)i|fFHDe|MG3>IqIe-t%m20;(psV&NcbZjg$TU@kvdbH*RsLSn-#v+wJcf
zVSS7tKf|X_uAknGKQ-uEgtPNxj~~YPzv7<5-6#B6?lsef%3IZxJn{yA4a%GM*}R@P
z+c#ev7<%RKb>ZH>{}X!c_`}m{7e|NcwHSM7f_g25yyfb(a&%CxUNaTL>$Shx`d49F
zRQZ;}%whU_Yv%st!0gkt_MS}aCYhB^^m)U#OV2pj@k?$l^=Rn<I}ZEU{*JuW4DWaQ
zy~y`zZsbR2&vv5|L}UHCWUkBeU0&Yc4BmyO>*Di$taqfbS21R;9UHe5cmlrE-MM4b
z*qS2w^z8ij7sk4|gkT=Q081HX<qK}*5*BF<|0Ld1@P00g*Qnnk0AmgJ9Ima6dH&g<
zZ0(&n{+VoTBF8^7dHl15_-8|Sas>aZ7})imP}$i%<QbIfI8J!-e3y6lUH%*W&slL*
zA=iE1YzLp^n+e8l&o|rd`DS{bOXc4Nrldl#G<E{sDQ<h>OzL-|4QKS0Hl;%Br%`@m
z{h@u8FmuE{d6@Y}>Wh+J`CWc)xl1{SVE$3xbMlXODbMAt{V(`v{u;Gje~nROM*e3x
z`)Cv|`1kxN;M3*Pb5DW?w=Z4iOl9|_cj`B9UcDd3pUY`?=L-Fb_ZBgirN!T}X`y-j
z{AeBU`@W{mWeEdk&4qmyPCa}3g?(9c+^?J%*V`V+9`ozcQJ!8nlz)1UU_T7{g`kBw
z(xu;_;=^l?a%m+zh<=L4;ymlqPrhasK1Z%jt{yiuK1_`nUMIgr-ZfXgpZY?!FTIO<
zuJ}%2<r6<In=^&n;ac$R$B3;*_t$=to(aWoD~V~4$>xyo;l<UzA|L9<(G8ROXNgxF
zj|b)R-A4@W|K7^;8n=SA)*q9}RousQ#W*%*@@SHezfRS>he@;JxmPeRP+iW0^(V>~
zcs%%s$7>hR2OG?%tQWpmLp`uZ$*m0XTGWkeR#x<9$;7{TawGaV?|8iYUM6n4QgPs6
z@=gkQ^=nJPI3+i>J<^kXpLY~9nt<$!cM{UCIkD|_YHhi(Z6Z88@6;S3C-u}{hw|1%
zClGrEY{%&u!^8Pb59hbrbDc7^rw?<FuVY^D@ToPaFEYg6h3x&29x6+)u4M;m?<nf$
z{X2Y~#@_cBHM2h-s9j}_JN<uOW-e@@_Rq*h>t8*wjm~**Dag+I>kKBH^Zr@#9zmZY
z*VlMtpg*hrY<-P}?0m6vpVpk6GxhiM`?Uk{pnT@f5bGiX&CV;#TjSReN=B?B-1PKU
zDz&bW>Ihdsi(9TgmfnmN3pDo*V`e_f9I6E<r{ljjdo!QQwATe5+A+$FKQECzT&W!4
zl$q1Oi_Y}0u}Ij9MSzp~Z-?-t{PSOm4-URx1N&y<j#i#g?4kHmF<w06o&gzU&+V}1
z|IHa1f5h196b}Ida^A{6XqY+s5gf?R>3#`#|4BcmK{~F#tnxKtL)F%bwdRKWb(YXe
zZtM}vwO^}VCf0A`6`u3?#P5CB^I{-gvA<`0(37!2iUT9?lFk7uQ~$|b#A~c?xP15?
z@$v}2zp3AuN9Q|Rm})$j;IpkBEJ64`<-tD~b9rm%&{<3)%(LwfaBM!r@0&b0gD?sg
zf9ubdt01i6DdqK_mTZmy+e3NAmYm&_XZ^o8#8~%ftRD4wc{NiHKW+?4&5?0$8iB@-
zYkcmxj(a8x*PhO+)OC2(??*hGz79Vo`sE?^?_C4TzJ2O8ebyKHJ+@mo`)AMH_#9*9
z*3mCo437qM`Q?IV{o(ns@e7F|u%m~nqklv>@EkwZJi$9U0)A{_6W??E*tz5<y1#O;
z_DOPSJ`SqLuZE%D6#UDP_~tlot-+p<YrdJi*53x!daU>E1-~bxEb#7y5Vp3(i+K*U
z);Duv9_gX3oR}w`C+68m%yVnbIUpnTgWPclzWKZKr^lbe^@A*94BsYq54iri;BEBc
zpA}yGliOSK)D78q{Er|W57Aqr_{H~s4u#8HA4stIK9KJh`96?*30+ffO)oxBE-pv%
zfxdGHTsDErs=po>QJ1d>;Cnb9=!yWo<pXIw+xY9oQ|fWdj;F3=%+wbL*5vy3Z~P`3
z|9?^c<zdLI_&DX&wvJ%#k^Ik#xli)x<5~EPc|NIMTahoD>wlIP4)s4<MyPE)DA-rJ
zXBne65BvP$=dicZ#o9A;^a}%Pn(!~zns2|`bvtzWC;f&?0`c<yLJwaip7CTtYmX9#
zhWJ~a_WV@h&8u^2TsN>5_0GJ7ZSdnE`MtqD@a@DZx%51Fbv8X)Wm^uDo?V_^Iut#h
z_F{)1JyV{p^644V_ndfQU7mQNWrSSJ*8^)W{6XLBhxo2|P<fTcd-?`@6W3{to_=}*
zJS%>`I;VD4$34R5_X1=7fX_aCUJB5s)r%w6d2xhn!@8bBpOF;9U-QpMYJO3)^8CMW
z#{ctklF5VF{!DI8QZ=;hG0<`Ze`eY#2kiclZ)mQ=<kQ?9&}p2RdFB7l^H=xJ`mCNG
z0nSg_-`$>q9slIH@?XIpa;V#A-%>es6vZ{c`pd`oU9nwD+riqc(wo5XCiy%0O`LsA
zd_o)&&dH5_@md=nW#>kZ%*u^M1+!1T8kc_ZL(j^gThI?x?}q%)zsWZo0Uu)zfv*t1
zE9O&O@N&f+JwxLNpO2>Gz>_cD?0x_}){yZjgXc-*#+x0)g|>byT{^-VUVLHX-?#94
zYmZyM6YaKt=3uS=J$KL94a8bydcP)n3L*|Ql#sbwpQ~5TPuHa)y|+<Qa|+Gf(L`Z$
z^o967-dom|3fDcaXR`hkhnAcN4O)5Eba`xcbM*`HrNoD`*6}aO_h_u3ITGVMS)MhF
zpF2k1vfm|l@h<q?jNca~=EjCroys2P0(v6G^Y`(U6RM}iZqz$hcb2KgF*LSws=0A3
zePp46*xd6|oZo%CS#lmes&Pzl-5vA{kfW>nF?;FB&DAB?S4vMuiZP6tetL>$gYZA#
zjk}H-VL9)_t9yv&>3#k)x~wjRy*+|4W;jcX{<h<vuvU$w=Zq<};|VVNJnzHPZ*g<t
z90U9*;AhPfUMXOo^U1^~%u)6r`QvH83f%ZlTgzr}4mo*7-It=y%f55>zDJR-iOe;Q
z^9CPZyMR3-V^ia(TSF7`<EnIQ67RVdzcP0#<IZCbTGvNR?XB2}c`eS8*eRy=ymCID
z%4hb~&s*dyY2>#~;ER%n5e{3a`*!m@e#Bfmf6N`fvk16<!W@NWLqs&2PR+T%xn$F+
zyxaJ%X315@nc7#lRv+cOu`+Tvyf-+NaFWX9^(}kiLDAU7cZtQ1_M*Grr`hl82frU{
zzpowqKFNOn5#Kk0JMDL!_gCOQo^?@gpZ5f7{1AVib(U~GvEKE>IUJ+fMp}c}KhVA%
zoJFR8dt3E`Rq6SQ;`^>h547)E?<6-qYnnG12brfH#yWRTG3kVv_x!H)Rml+V^xMc9
zcTb6>JBwl+sl5Z0DXpKpKoz!%b5PrhoKVxB;8pF_#?Cfx2bZ_rci)0BoL$fgZ{B)e
z>(_U}+fnf-bbb)LQENZqc*nWWEG@gV%#2$62IoDT?eSp5m?Nrq&cFXe-UVG|iWWaj
zy&(pzMC+=e%<oUqyY9<{6L_u&9%UYTzi8`^m&CW;3C_fKmfku1hTl@#3M|5B3*(7b
zjbH|T%cmYc?nG9_ldtf6E?>rb2ik-3CEhek>-V+1KG5C`p1XQXvv9xr-cYjsMzeY+
z{3CqtzPCD=c#ShO#M97Jdvbl8wgJoeovxgZfe(aJeDAG)LZ)_mct4f<9gm-HhX&ip
zxf}tm#zBkQp~E7cFGEi}SZQjji$X`-<`i964Groz^I;r*(}x-7HP#(+LPwm$eE$7U
z((_Pf#xDK{I;5QOMdK40*AYC>w1`;nJf3}3wBflAi`L8|8ql+3@2>&}{&mq{J90Ab
zZfXad;V0c8J+_^ASa6XmY74@4F@0g>-WpHjzA+vit|CAC8gwXY=3N8ms^iBn7td<E
zYT$c@@nSq@d4}hF9=Pov86N229`yd()m>wot1pW$jT<vQ^k8{Y%#=Mp?^S0>3pJ(>
zNd_N82KhXL&ywTF<nfhedQoL0a^4*D!-7K2HqiBMK9`x;yIqmQ0yDm`BsGh7y&x}L
z;9PnF{grM-FN*$S=MJn9-O-V0=?v)(>5X+B&TfN-V<ktd<+dC-dX;y_OO9#=<tV)P
z4)$yeCr69m8J+F%^sM}H^dPj#Cr2kf$C<gnBOK<Fqx-<0WGRJyKN;Le=I8N#xULdY
zTLB*|hd;((iyY_>GA&y};}Y-IJbTvv{(;=@mll;jS`NP0?=p8S<47-;qn9_Lm%GEE
znd=y<4xQeuS~M_(z_F{ljn&;6Q}6J#bG9%iHpTtDY*4q~Ci;5#{5g2M%Hy5$xwmK(
z_7pk#6ZXcJp)YAX?w9=E0si&=J3V(KbhslRLq+r@2>%ZtL%tq+2>Cc3n8bhB;Vc;v
zy~@nE#Sfo=ujb)1%D6sH-r7B2ab)#)fLEXF8Xo@xz#8%RI~sUKc3U<7e7yhK+b-{)
z#P24SSa2CM6K+M{vCu-i=EGEk?YtQrgqTD6{ASkQP!v8Q0?##A-5p-sON=dj&|sV+
zy1=F6+<*Q&ct9{LN5|g@zH;So(OUzxRUWS8Tb1){H9S)X&)kZP4z7)RLV@3)Y3((@
zZ4!wEC-OHA+`gQ3bN-CzDw`x(Z3+D5@LO8Xna08U>w5-j-{)E+a9`*4fm-#YCIZ)@
zTzj2svB0%PXr?^LE1rxyd{+)iKFl`qo5D*jPM+M&n!(8??pu!DnqL(AmU#i)#Tx6W
zN5nYKHU;cFH*+56T#1*Wk;MI~^U1%uPkB?1UajLy^Lpsj;K^ChPUM7Z!t+evY#o=O
z#h<D9Ehk>-WWBD8Oc|7+6l3a|#*OmcUF#Py&TqJ`ImDB9db02kV;%)B+zBt-jx5!o
z=NHL$Ll*wvjLj<xF=XLn_|w1tRdO(8=E%hlv!^WLttBW6=K-T+J69HNg$B%%R~H=#
zJ|jG%wdcx0p@-`kV`ATGd1|0`6l;2bYiBdo4akA$Pyij`e;_{s{x@P%7eWisM7m8h
zsDl>O&|x8T_$+wQGa4^N&Nt4zAO3di-V6R<F8ObsMbGv=z#JxW+x>bTo08TT=keTH
zZ?4E+y}8gmnhT#~W?d}895>&uc{PuoAy+)*0?u?<9>bT%zkd@t)+ey9oUPr3&K55%
z$G<<B&!TTcbmrbh^!7$*T5Za#K0TLl?7hZW(zy*DI5jqRJv<UM;hCMMnz{Pz6CQk8
zSL845x)!shC~MmcoDYn5bz52L!@VZbc)!*)jc2;?Reld1eOMZ?*C%mZyrXx&b>cgs
z=eOSA-FpMqbne!hJhPo=Z{oWCUc~pH-{gND*c95*w`@$ZuO`&|-lb!c)TY|-%kMT%
z%$H3{cb_ZU1fIW6%uQbB`mfMuT4<g%EhjW5=qE1w-Hdl0gy&XVz`Ygl2)&gteB2l@
zUsq|Y!;CAQP*xPPeb(>S#5z&~D;G3!wiWWX_|M?H*sR*xMZe5>9~oGaqQ5G{9y9sf
z72r=}we9O)6XA1}Vntx;IX9Lr2d)O*j}!tf2mh#V+4;%$F1;YhTAF3!S98{_#yo>D
z6MX|446%>;FuU=!BM0N#A{P~%VIrYR$SK*_G9HR`2sVR!!Ur9KPjCvxBJi#Jlh*(A
zv1WA(F_`jxSNHa>k)DZvjy)f_F>Bzv;!nk$?_KIx-0t~&h`q7&q!lizY%E+lXHN0i
z_X?-cLi1lyaN5Y(E%U(XB4Wf9V|9MUMBAG$oW?g29~j=v!f!WxGM0XhcXda>&5Clx
ziiri%iKq6N)rq6%V+_U8HzlY?9v4f0i@%NDJ%8nQVvHr@@Ef4x+vbUL(#v_Lko|n#
z+371L#P-|Im(91I;X`tA6WcofWnj&FmsSyjO`f^u^VLZ|4m<UO{x$XBud!%pC2M#)
zI;$pKiw|<cIrKuUuxBL9Z7HNrbd;G*FKus&Y#P0Ff?F^b08f03nH}eTjZ<7eZMR@i
zCGFS~gqz6Tf!XDZTg|xj+*6I7jugZ?R`4FB1i8m~-0$N~V+fbvsKdwOYkLN22VU=A
zGaN3T;`jJW>a=?Y+O^J8_x7*(4RmeUKcLujK@0rQ&Y5h2t^UAQ=jfiJ-|SaE!A$Xu
z0nWd0e~NsBLBB=t)$ZVX)jMCEqw|ae-}S(yp0ICwxW5xWLHzk)dKeouS0UqY#$8LH
z>Cimt$4fx3D8K9d?DB2@ZpdNlGq`)1&+UAEA2|^Wac5~|J{)ZqOzb5Q48o1@qIr+}
zQ~w(5hP{5Bg>7QnXFb@^^_Jct<`(?^nsgRjK0bFi-?P&(zY<S3I#cHqq<HTUyj;P*
zax=HNA#z&tT6nfPwetSZHN+yHhS#}X^)-{0tOn&nvhe}F${y_V-cp^rW!lVHiLF&9
z53C`N-7ekaB*M+keBRHL3gfq^Mv+(`Jj`IeRjD(YZ%(5x_-wjPYL0(JKElMd|3OxJ
zIJadxXJ>S?|4G+QhlVNiP5h(84ZtrvCV;<TBj;WTcK$iQSq=Qlfj^pBaeqDI)h|#_
z$=v1$@b4{^d=|G!E`l<l@vq*~zea!GLkF>!Z>w-w4y;e);IVJnZwB?l`}9v=2OeEK
zn6|wQ;pATMu@8Kt7Z)TCTsJED-nfjMT`D=7Pp^MK&gzkU$#aU>Jt${051Q3o$C%j(
z=smH(r0-?DXB=~4<tric&W@7U{y6ui&>69@roD^5hQHr`CYIE@>KX5yr_ni_eYmy6
zynPRRRJ@&g?hCUQi#)ELtK-biYQ?1cmT%MN&tSvUL%RaK5vT74T&MT&@B4)@&P<sI
z9n@btz3J3h=xDAPGqEXwoGlw`HVCIH&@1Sv)4Dh(PH-HgM_#bF&rY2wIp~~ZRv!?L
z7+?&Wcdjc;+#d^1=e@!cd&i--4Ka}+CaMBY3&&8KSrmCx>t<is>D1Ehxfj{KE+9LN
z;KtW48__Q*PrnFfuIx-3r1jp0nq+$Md}wkuy6}%SC-umlQ|4&g4<t87bCwG0z2_ur
z*V6HW<Sk&FAWrW<_h_x>dTTZ0&-~xzL#5uy=%7cy&AnX1FB#M`UEsv$y?pS9E@g}6
zo~bqek!Pg`?qx07|8P0{0DhNTOP))7T8K`0l6zVLy6BsH*Lr@fdBOMZsfB!v&q2Iy
zB-RvO+qkZIbpOx!%vtem3BCt)QxLyF-IT%aq_$mu$mk{?)>AxKeckjja2$?qlD-<)
z<ZRi63=#8k#$&k6>Ph^FzGa2Uo^Zj;zLie%eEf+Wr<imB{M`^9U-=ld{_QpLWx`3r
zdb*YuBqPXf*QMysO{TejbmHT61&NP$jW+3L|AcND4NlR~^Pul@SDMw<4$4<KCEHi&
zB!=x<b`E}uWBnBIL!l}Bx#s%gscT=-yqYu4T)UVv-+b-N*WFZ;)SUD1f$GWAps%pw
z^V8dzPd*#x3iqNHw^m`hmzJ5;mH#@hW}qgt1)cnMgI#+OIw#b8h1NaKU3Zu{zc{$=
zQQo=>-F08bx@#P}?*0MiVSnw-f`vI<Sm5p8+UI4jy%AXYmYtUb4!iaVz$E(gE&FXi
z{~5avrw|*l^7L5x$s+tUQ?%JRSbguxqfGk_=m>t=^ql`MG(Le1j-}Uvi&f9AxIZy4
zupt%E+y$Hed?Im%V>Um)^L1uaZxR0H117ZjXYYS!n<*OAw5o95ueYObQZulR<7La8
z3*+NWM+4)nWE^O}K=ReM><?DHV|P2vdnTIn_6qodF~s9LK2(srZzkt4p)Yq-#L}Z<
zh0WV5pbx&-6^!2%9^K}QDQMb_J-gv!18a64U6V}6h5%zvSva{E+qQ!5J!Lh?D%M*Q
zk+0!wZeS16o{4-v(O6tWS;M)&xe32Sb<IEVJoyvOBXin5<c!|Dli#Dvvprm}dB>D+
za(9JEe{LGSAY<>CQj>HTTXQaC><7S2HTMe#p9Ut)zZ=+N{65-@ZW0{Azu?fk+nMjR
z4@qwqY}R_T7R^PTXLTdbM!8?(YRvgu(;EN8GtT)l?7A!cIk1<SV>iEvHeKm~U;mjk
z{gm%oEBK!96F&R2)nCOj27WNi5jE^zWR9v+kvDn-^?Nz=j~eOcP_Kdh_){C?SNLN%
z*wg6JDH9xHIy8=RYb+UNZU?+Nz~YQE;0C`0yz4o8znOaa;Qibi<{77e`*go|Z<yy@
z|K<0|9l$6be-z`lOtoi}w|^JE=%>!qU$qv6lgsfR8u=dmYy95G(&-bT=GfDtCQ;J(
zs<|=xg->s5e8HL9w``N;u^pqG<aT(h=M>Yi1KY7<bQRy>k5ghDH#5Fs5r1v^EB~n{
z?68N-g+XUG%g6eYnL0swO|)E#K1jm*AHtqF1+nyp-mW`yz=RjKVAHE+=pIAvyr6C8
z5zJd^I!XsPWA+H<B!0vG&R)lOKV{r=8Bg?^4^Bqo1AH0ZGRE^U&I-}>-Hf5%{s{i6
znCGY9eExWojDfRr!EY5fON=*LVg{a0l|8Cjs2@k1!~Hw8?vqT%A30xe7kEhFOKkiw
zGQ-+h@c(v!i(SY}fhla-2p@DY-;SeAdhJ=j3yuVT3$Th;z7OtpPSpK1Nx`pqzsqy;
zr<!EXNt`(Z4CeyZeE3hW{0+RCSYqq;iB57?h3VKyt)}M;)3J{E@ekX#gAd0PHA~)N
z1qI37M}s%kvy+%|S4FI&=Zsj#M#hLztAbb3f7W>LvutYLvd5C*WAR8BSmGX!RKXKY
zXzH)T&yDc2>~j<xcf!NMYf62v;B`A|tY<yjnUnk-wreB#>`>d5cl)R4x68fXY8ZR@
zP2psaNBWli-s)H9nppZh@FO1@d+}e2-y_JA;`b-<+oI#8PbRiS%)IC2cQJRZeBB7}
zgvd>xW63k{Jb3VVwHq8gxVwLi;%dd$nhX5kXS-{4Qk<!Vzf#5AxpOXpA1lUb&JZ=d
zO%K9<GvC(!!BE-r$i{*$*0lpVoI1v=*1G-Y(XkzNJP-EQ$j5d!IZ5ny$IXJJsfy3B
zj^V~$cZ6xrwmHNbHtsNrJFL%rCivOQ=c(&YXilR?UlblbRgEuftS_wd4X^93zIS<O
zQtx&5eE<IC3(Py?h-)tmnGLh$>u!v7+=uVef)BZkcr+fGYVl0&w07Z9^1r6xzfQJ!
z65%?+_0^nH!@jdE%6TsQ&Udz9kGD#`8?SD7)LB&VXah7@j*dgW)z*`r(EWyM8$uH|
zuO90(IYmxW6#1Eba9~3kUEW2U6Z8#z8>V@M-<OKa>L6_A<1fz!fBE2x^4nf~?~%q;
zd@J94_1K9`o2Ho6f-3?%zjNil*5##_YT$kLk+w^B(hJ{Vb3Fw`l|G+Ve+}57eKmW1
zV;(O$@Jcs4P|ox7<KgC-uZ5dqo(vt244sXhoj)#|jPTi@V-5N>f^IeF)<{sde$PpY
zXYayZi)VLyuPUiAwg1Z>SL2vr#_{#N&F6TsWX!6q_nnCS=d8ws@QKzFE{YApcLnj~
zD&VUUeBiyF@3I3?>_GkNuKuro$(b9JtDe!J<d=X^<MoWLP6|H#E`8$5o_It59N?F{
z&A6iqJ5$j6Ve4Z)W@SF=;Zm~T@NC?dZRA}tRmHP0Xiza8T@#AUnSsukflf3_izied
z>lNepS8TWk+X?K_JHml<LF6#**S#~Klg6BZeqYO;>T=|@0zD@mAosV8{5Ci@_vFs+
z;@@3c2pF{XL7j%43^}pNDc~&*-ducce6Z}Mf@B$b+QNcus>T;s7&09d*z^dtDFSTt
z0H-UsN4jYA2+vEOMcHTN^Qu30lpJy#d5?rItJK{1TFH6H>UwBV&vmCTR#|^KbjOA{
z;6Zwpb2!#Su%Gql2Xx!rL4AB4abUFAy-(|S8=E7#OE>CSd{g(F8GQd-z9>g0ggiYR
z0Y^T+Nap`G+Ku_@sqxfrB%if^U^e`UE}Gc(Jiq;qWECEWA8>PF#Gq@`hbsR`K2tq-
zbA)Gb6~e}bSDB>zrsen-=K%{oQ(AGR_*D3otVMRY_Tee63xAzOL-AKtm>+*(^rG-r
zA9nG_eS`RW_u%mOdzI&WdzKG>XN-Wq;no`T6Sdyk(1{v57ssnS9IFpqIIc=(aQtn4
z6Mo_|kvsZEg!hYp#o|4Hvu!(FoauTnKlVO+AX_Cn^?_`apCdyKoQssJadPa_WbD%q
ztbIBe9ZKG3!yNRKYy*4NEDzyV)pm(z1J5hYcI{i{`H#Re%2i0mUpU!4<F=dUo|m4-
zM=(Vbn<CJE4*7OBFUFY)IeD=!VYjXb*f!~}@<k1guDIH_Zw1!At-I+v+hpG=;N{h!
zP!qZSCe0IO{Aa<*hS22A!_DE#rnNP|<;!Rce#H;BeP{7h-J@m3SsVi=3j^|pp0jrP
zRpqhJTcS_Q)0qkRL-1mBY3T&XfoSi`7Pfgy4X`QiBj3FnUt}RPl;2K#-0`NaqoZy7
z0ZiBjV)t<GlguyQ(3gMNm7s4^g#M_oaD-F?n6Mq269*poqVgLAQx!5Un5v9H)?NJ!
z-t76`5v`N^T5|4_Y+Cs|!bzSfUONIm85oa$vb?E>S`qtnim!O8?$Ncp2SCq?-*1H{
zV)PH`xd%+x#?&pUr}Di57_>eIoxL)2S>+7)F~K@3(8nuTtKoiwzaAsDj+`o+gU&tG
z)yXT-ha>$i{HT5{+;ju){C;dV@M;dtt9fb;F^`Xzk>>L62?5V`{QVlnCl}aJ&-mL-
zta2gipf}LQ!^X=MXzdHR-@m>e9QwLXysdu~{4T!hrcM>%IdU!?3mN-n;<GNZukvQ{
z@HLDbe=^b}yvWXKTpJJJJEsEIHU27e@fFZoaaK(tmQ;SACW2pd2XR&eeajr;w^hVo
z;(2>7zw5UeJ##lUk9*GHxn20%uLfY2?_yl~w9kV+5$-47h`;RGT;aPM*kg<*oOk1=
zorUis-z>s)-`4uL)H=>)j0Rw?5X^VPlCfgoEE3GbUcjJyj>h@$2;=y;%=dR7>`=dS
zs9&na7P2+AS;j0trk+(!Y>)CTpOpWDERwH7j;J?IYTHxjzNe=9FKbI0j*>hUUtJH4
zdcw#UdX1RA**Tf#z=Q6u=UPJ{u`~Ve$Ai~s+-W|+d~u)r<)3LR&hJVfugKdHgRWf2
z{V{0o(=-Y^wth+8t{hnW`eh?JU=MkbzGYR^FsqZS$L7cCnaj{4sBx$xZ;p&h-CxCc
z_$y5@<V^h%arBXTMB^drpG}ZY^|1xn^~iy+>bv1&-zMRwASoO29(4BM+4K2P)}9Ea
z?bz!O_?eBJ-P=%@9JQ)CIpreZW>jyCJbZfb=;W2<_=;xK=CY5Ocj#%W{l)~I!!8Iv
zyP*LwTl31Xoc9ZUWM_7wv&cKHmd@Ibuc7nHrB|!X<jtqy8(95B{a86f+G{s&7~8n{
ze(F|rqv;zkwfnpH?*@4AOOs=~OUbka=RXmjV`qc<{Y<mo+4^_ZzqjEW^77{@f4M-o
ztBFxNMu%3Bzo{y4l2?GUs`2Cuc>fD=eQg!~t&fWyVuB!T>a8zb16}4*-#HuFxVg)!
z>9MrxVUJT6(R^LuwU=wo9b9w9$I_3ZFI(7CzK%S`KJ=@vgM~k><3G92gK>g=-ojl7
z+@q6EU6MmT^4ERKLdm|BqF>nZx6j*_r;!~8nps{L8>vjp9G~Tb_K@S*+b}9we|s$X
zP2@m+X$9xJ?D>2F^A#rJ)Q96MOfr5Hd|pnzArwl+OI#Unz+3AK(=NLg1CR4~4@?9;
zAU=L}>i^WFi^J%7@t|A#eO9&K&roam!8x(?2CpWSf{(FHvtlQjcJS3}W~wgb#-O6n
zsy$|PY^Gb6au{zCyd6Q$gf8KIw)n-rT6Y4uhtSwEGj>U=+|+8m$S7Oyd{#B#M&_#a
zYQhUA<3~<*>zaN|p$uCl_!A*&rAL_!QF^qQ_nvxWCVl}msn5?(?rk_5T%04GnJ~x;
ziZ=stT2Eha-?D0Wp=L0DFF4iT<N&MsR0X4<r*;x~cEK$^zw9mQ<M83WuxZ{?VVYG7
zjDXjOK@S^;f1%`!U*S7v|0@@BB6)<Mo~s{=4rZK+v&gX`d*t>v#|=3eW8S%#+KqmX
z8q-uimK@Oq(3kfP#If1-8tc>C<>;~UQ~3-ns1K%#$CwSSj+@%n!1H>C!6<agXmnd4
zyzO|hyJVDEy#tykHz>FzPiJ$VV)*((1D}U`J2~S^x=;P<(tTC*;;|8G!?&)iN?snO
zmm%!*ZemS!^UOQ1!aJNji4R$V4w%$-8nw|IcbTm9-$w8A#Gd{&%B3aDq~0p@<JxNT
zj$w=&(Y3l?IFF+DM8jFsa801jw_>bYj|$TDcJ5zI?ndj7uF~A$5cLsq)jIb(c<*w)
zhxqMsbP?~@=<VRWZI|DhxL>t4!M!?E(i8^nuqkO0Zg;RRMRiu`I@t#4z2nX2_sKR8
z?^*m6e=yL#5ZpJKY4{JVw^tdb>0#z^@i47z9^=IetKh$q&GpFQP5jn!WTwvd6~5<N
zV_dT5>HpvwKFR&q@*EpB#p-BlzoynCk2gj=Sk{g$yepRcpunv5`9pN>hVG(q^|)BF
z4myj5qH_!SB&a(U!aw54qgca2-eqU?2|OmBNN2#uzl(19+rWnS3D`6Ac>Uj<W_<77
z7(9CN39MUdz(0@;6Q4hYyaaX95PkGAb(sixc5+D5^F06M0|RTGqt_{h>;`dSkkv63
zFU4(huR+gvGV05nVn)N7(WMj0k^LAlwv%yu{08w~&Up%|dA`r@(jCmz@h+c{z4YpH
zguCLl5PD7W@boKg-1HyxF&*Td2s%%{r&#a*g5N*bIWl!>pMQh2m0r?3FLG~+`mCNe
z^oykE7umqIbGP@~cYG<gM|0|$hc%CKys8PZ76)8FBU=+}#OBqo7YDhzJI23;L|Jn*
zbsRdjthsy!XGZ^&z7K4JY=-Q^iJ!Lb{SMZ0|0`GTZp2UR^7>4Cy*upu#Kn@oYaSa~
z=iTtWi!(RYoY+>+TK*y4_xfsj`8=?Rcj2)%`BJ%lpY>tz@j~b-*4*KY8DFU!QMt#%
zVe%>=e9+>H)UOck-3ZO4i-}#*aeSW0$>?G9q<lZcx{~kV<b?wlR(HWKJZJqy!#fYe
z*Xz+&L0%b-p8gtoa{R%1{GCBxa1*^1_|S&6Naw}GXZ-!G=QpL4V*p0!7Og>Rp{BMW
z;>kzt@k8Zn?fwC4kN&_o(xE=A_3)$mBz)dhPgC+!18aQW-;bl8@aB%dN3tR2Yw#C7
zk7PHKYuRXXRc?&z#-#Yw^l2dLW2cfodo0NwkC}?;u7Ey`<9NQ{vdV69=Z)~{t=OP>
zrl>bY@9V-J#*()b#L~CmyER5a$y?A{UuJz*B5POP>LeHbI7De{(&-D0>8Qp>DKnv~
zrCS>D>mDcem0d~zpLG8U#^rZ=u49PYLiu=;9>sHU;EIKdD$C3_-))(C!MD1gA$vrq
zO}VgllG9L}(t|Hc-)P4t!C@Ev?BDp?!(aB8bi|n>L2W_s+BHRLl8yMB8oLoatNmxn
z=fqR74(ePT*zYAzGfz}&XKd+E)lZAb3!*npqn_2##k==X?6Eh<zYmMmN5JgUEl4xn
zCw{3fs>UaE$Gi+%8XPai{$$mM>IDaD!KYjDCVsAHp!J1-!#)cv?~r5D`t0+pQSh`J
z7?@oT&4?kbAFK6fEk|mMTh$*JCRe%fL4Q46oEy~$UoHgq3q3ptFWQr*el{Og&8=rn
z_Tgnd&8<0m0{8i2m-qD3laisyC;mZ?mq!bKF3mxnD=UYl*e4A9^}t$(ynYxy4zq^k
ztbwz2YJIqW$=X}!S!{sEuSd4mhMe9m))>c!Ru6#sr&a%N2)l8l&UH`^h+?+Y<l$CR
zA98Lg{*n3-jrubJ{j#s3hgMd*GE<H{u>Kr=TMPUknNlqr{grm$@i?*_$G3yF_sC!6
zuh*0C#Dk)>1FZ$~-?0HL>}?hgxIGK*??FD%xDnosT6R6Ls&ehzt3DddS)lofs8ukQ
zb1I)tHtAKi#ySZfu_`G&6UDbVmGwHTG0rvo^365aczn&x4YFm7CA_TfBBul{)B~XN
zH~W^2qaG0^emT;{FN#4Uo_*T$`J>bio9?bNZXClr4O7jmy$wezE}a>^JC+Qss!9^C
z;WJe2-wQv8ZVkwIJ-$P$xy<%tK9;5i!&#MDi;Y|87kOM~wt~~g$I_dRUX4SG$<X3?
zd~=8RQ+>8Y>|G3<$NW8+-sJ@EUg^3JU8UaTNNkBiFMU@feRIST-+=zIvpYlhOUyL`
z*e(A@k!AFh=pQu&Hcu3N*8C{GHI|g`ISYR>eu0&xU&Poq%C)9R&{BGHGqCG7tp{2A
zMS`^{uTYJT(>XOZ$A`Id?D)!sD{7K8;9Iz_H^sNF3{~7-25z*r#$Ptx-_Wx5{t#=c
zQxEY8rnVp!lRdQa^k5qk_%*~LZL&LEC++)n&2hwhJnQ4*ycyt?m{9K^FE}%n{-!ar
z{kTK0`eP{Hr!kP5-ixMs&oF-dcNNo^rV0~oYEWDWj_SWl&oepzex{GY;a><nG11l`
z@5Wy<^d)R(Ecrauyw_}@_?(<(JY+idHhhYEi`y_%#RmRt0Vn@nG1RVof__fXW6*b8
z;UwcLLdo1%OFYrY-k7`KO&_m<<^Ff^JHf+baQDh%;Ew$@VQ`0UPtHOy!^AdUPUFNp
zqLt0fc==%AtR7!i>(_d#Sg+)@iZv_mP{o?HmO;B;mmOcWMr8LdBEGzsT*D`m$c?rA
z!dv%|%Eug?octVe$h_sI`0LcCXSPiE?EWPC((>t;TZzL~c{-*V`aAeUqP_Sl!fzTU
zz0z11MWfKCW68#&Vsq+vU*}5pvxOqOQ~AVLI*ksM&f5-c#Wx><?;j6M?!A@%anVe?
zuNd-Ta6+zrv-rOrohALJ^_qj|Ky*rarQXq;k%0uyBbz_JnR7FOI%=cWPl#^1X9G0S
zUd?jot>?Rz$9}0Xl|ND3p?8ZmfcI(>-W)<68aGz&|M@Q0CrSWI!(H$Iyx4FTISuqv
zE-#3t;AO#E*zuOPuxrSmc+ls)=o<sSz5$-_^*8$2tq-uLcD;vN$(Hy+=LZY7^vl#<
zk9^MN`qf-h+^l^95qNhM*CXiG$jQEL<z0RO-TI>A>Q>2qOtBL%i#B0&Ojx#nHB0XQ
zFK_Q2A60ek|F1ohn}C2xAR$mQlSI^LYZXYKVzVa+;;q_7+FCv5%OpXYN?S#&ML;tN
zv0Bqs25IRDJ%<3=I%(<A7J8E27(lI+)AKE%wddFilM7xNZ6$(a6qw)pvuAdgq;PJ(
z-|P3sy!M{G*Iw&c&wAE#ThDqHzJ~qcDQ}?X3m?m=A2@o!S?~GWYh1s=Rr7_9yVi4m
zANB10S|D;S-)qc%g*~S+a^%&6@G1OKpCli4eJ<aCYqg=e8MAi9ou=^cYsoPe4^Poo
z7Y`*V8gu6ec@rgHHq`R1;v~;ML_9R~atZ(Cvl!pTYMv|pS$LbJZyqy|^YqPQcH|HA
zQ~%{Bp2RcxoAvycdQRQhsk*<$|7vV(@p9p<7WpMy8gQ<7Je|E50>|}|UC^muP#<Nh
z=F{I#sa@uJKW#nXBi@EK6jzl64qn}kE`9~}{yx?rsQ)nS9&U$^rRx2&VXra$3;j7U
z?<jsm(d|Z0=Khr>iA@pe{nMXLZBoDf!1ae*)voX(o6v>h!#w{D??s1APMIkYjpZ+H
zNNlRc&!M%zbL^Hn!6e-oncb6vF4JbtnIQdgfVrA=p4QpVSsrA3Gp6Z2Yv?KDiQ=pR
zoN*x<iJ~`zOxAwwNi^U{yxzy!pkVGJzV9&WEPuYx^bFt+o_k!eU;+N4kI^sDAF{Xo
zQEa|q);Bt7-%9CHG1`$XqIw*Cj=F;>9XY8NCUuekYfDwEEyd88mYQs5ZAq|5j(OIv
z>sb0xbEFAf>ssu-0BeDY%Z)WH>y9>+b+@6nZ$bVm4#xk$g9oGhf0ZBf+Wsm(bDoJe
z7|+mFd}HP4s{P>6yboTR<7qeaS^bsFx)$HD+9cKrUr9FnJ*(^0RKH()%o9O3j-NM$
zSVsDeejk7Bv1$hguTqcv?6%3?U!KCBVSkr+lJGJ9msn?Uey5SXvtIW2$u*g*Rajxo
z>46Ik(=*g-qknE?zm$!v?PEO%8Ij!Ubm3ST5kPM|xduP<y5t%`l)XrdXRaM(J(BhV
zj74du6&_%o_|QdaZZPpGc#RL6$%lULn`+`VWr{z@T!5bYA4VQuhAqST!vJ%t|6y#{
z40FU{Tw<k^<9-kN(;(wsHW!|Szu*;cu_aV{vX**+KI{kEoO}qq@Qzs~{w3buj@@<W
zk=m2NTX^?(=48v=cKmkQ6O4h+CgbArpl25!{q#}#A9UmRC;W_SDSO8K{0uoi8hyU7
zKUN$zvCG3H`1Ve0J^Qy>b3fy^q07S_zI~H#6E%P9Pe01|yYS$nMX%53l0K~1LeZYH
z?uwkby(lA6e}!@2%^^Oc1zp6_x=ye*o?}@r5-%G*Tnb)mOgJ0b$l|B(jaBthAGXO>
z5BgCF-*GL@$Cn0fC-Ey@^}c(YbGq2~J397^N4o!6ew$;A$*2z+8qz%09yaG&{6UHn
z^3mpBx&HY2<T}Fty1yR!+krka{Xgk1dzAjm{-O)~|IyzE>956@`EDWZj(OzExb|ZF
zG0S6lp(5c)^F&wq9$sTUwh_NA9_o&}{2THuy$uibP|vn?#Uqlbt>ifS;kxrj?4RDf
zA=c>IpJ?<AQU8)ejeUUipt$~Tg=VWSUArOCSh7FiHTagM9`Rsr7>hXtE!3Kfc2C$u
z&VgpEX-Ryh)6T`v&bCJ4M*ZxatufBILN4w2pq<Wj_>xmRfqgRjx360|l1>|az_Xja
zr2AV0TMRmwpQ3~De98SUnWC6h_Ub$S7<ZqdLAFFa&R(PS?w-Det55Igv*9lR?Jpz8
z`4-l7eDDmv_#wZ3a&H{2GCk-175_K9<!}}L74p6X`92>#hW)7M)ESOW-AMUOcRGH*
zXM*TnNAtGan%Xn6e*B)l5@Zg3r+HP>p}NpxdXU%U>Gp1rGA89O9RCiOoqcvTd-M*0
z8`ZOtdbA(r8^8*`Tk%!LKgs&!+vM^}%_p07mQc2r|1o&sAae0AvB7a{2Jyzj#Qy%0
zcUqrRAI=7U|5^6qUEFip7wW=uPYNEz;z&<DA9&8R=f#b8amS6l){)p3n}1M^4Z0LL
zmm{Brqc>*kx1i;@8FqVc8*w#%S-WAQ=Ybz=p^TwS(#BzZ1mDIqKe`XT0{QHMifc5)
z;7l-)M)V-A@g%;J@#^Widjor{noCTNeB<e5q*Dz}^h9ntpL)Sp6u#L<{rz4~<Y|2P
z{ZpzVlBxPuICp7N*TlL^{0DigUuWPy$Y=ffv@AV#+qB5BMoW57d~j2eSI5?6gpYmF
z8_}MfPG~E3Gc>Z#gx$R@?%tjLA0zj8{@SO^Mtnl$qEjDvu-`$xz2wQ*zlS{jTUdXx
z!Hwd~e~msEf^W;`69Xr^@2r^b@{ayZ%xhq9Wmt0E_-5I-(B=~CxsM~WGaY`dI)ltt
z)%iwoViR*GE+4mITn5o8v%t}4JHit>rPfRD08jFRNml=f@ABYhn&0+y^3nb*f*w&P
zem1_JPZQ_m#wn%a)xGyZFBZCiY$){Lc54#+sZ+7W_`879gALJ)K4o*ilyfFLou05K
zhcei;;-{thhI{W?3%^9D&g;Vu3*1%gZPI(|kz_1n1K;b}S3YI(#b2wa6TNsz6?Hz$
zv&23x=hAz$KWlxpqbE&f&D$HknzFCl1zzCA9%HqmM@IS?+iKeCXKdj?&c3<_-MveU
zsrJlkZ<jmPvJviJywmqhZ9|?4o+ifM<*fsEjg`56%A8z-Exym|j9ovt7u=sAzC&<J
z-o~z#PLXk7a188I@pol}7Xka>X8D+tunR_XW8lw9!oSk=Xg`(Phs2cVRsA*ip^)w3
zj~deid(9Gg(b4^8bDe%H8r}cp_M;-bAI)d#$45tf3jLS-Z9l$GKU|tfzmDfGk_*BA
zhFq}O4<)%EJ7iQYz&9Ux(`@ujI4ujr+tkkzeinGj|4cHrFbE&D*jpX++7(-}%riFi
z1otL=%^yK$+KL<?u4H{<YF~I`Dh6O5Io6`%_B`wRPQDQzO6N<Bv(aHcAe+YP*wcH^
zr_WU9x|0d^)1Q_rs&A{~KkXddUs{4+6&jznO?`p?VfSws-(I@>*$eHY%b$0^i{#Ia
zca!{n+mTb7ByW7w$J}$|kNhFz!{><gq#XJbWxmgSy4>;L-yAPD`_CeG+W+Nm<<4(X
zaJX_OL>p(4J1&ist@Ugs#thprqbsRjCHI?19vx*)D6b>?#;_~JH@#hwokOoB<>nS-
zPZYk8k#n%a9T&HrLC5EoF=o8nHq)=n;T69^_jrZ+!KaglS$srvTY?@So~X7vq1$R~
z{xa}c!}@KunVD-=73Fq<TiL6J(e+=&=6wbDmN#L`qkrqWSFw8ybh(Z1x6;p7ji>xO
zeB<)eSCD7@<m2-agWzSaaV=|T>xgM>zLaw&;S-0N{PSg7>ihBEs$Su&IK?Z|`{mxJ
z&p+i=Q2g)L8wwBn&_isZ$6WEYF_n@tia~hh4Xs7wEtfo#9i{vWw6P&n<cX_%1-`ZV
z)#tPSY<hXK2i+LlyWeh0`?e3bL#@PG5WjFOZC+eoc;G?{Ujww2Gp`0)$6i3}>b&oG
zOy$EKpR=C#n(SxckuhdJ8skl_K5+jEV=vw)8(8}lUkA@#>U|yj`l+*cs(D5<;I40}
z9?O{D2rnhsp*m#Jgeo6-5$Vs*99gy--fF_^fn;6Fex}L!c29CGgfXxfgKA(#Mqht&
z&7P<1CV#hZ;NbZT_PLdVf0pw8(5wR`Yw?33|9oqcv8fsZ)m6<qFEX-*=Pk@7WPL<2
z`HIIsTfOf1>HU9JM(d#K@VzXBc5|>90)JO{bIEz?cVXQ%oQ+5S8QaWq))cNgjQ>;i
zq#rsKj-Z<r|B8$%zQtTVk*ntxbDrO{^tR-54*SdYcJvv;+K9Q{X}{aLyb~N2Uus<*
z<a%<=?uhXaBM`hGEPP)0vhpE>>QuHKxka9tA4Shi{@<R0?;_w^oPzIF;8Pu<=~sbG
zbr45Xel;-n0iO%&-5Mw0d?N+tC1-%svXXFWyj)mADOhc;E}W<S<1~!71LN&!Fp9?d
z;L%&bUA?icYsFtCJfR0*&xLx0O9yA)G?zzZbAu0T3E~0FdCKY8#52EX>$QAO5BsgC
zgTFl~xCGOlsmXd(m+DmA>2<as4_y3>$L+6y+ogx`SBp92Z>w>9G`p|#{ubRRVq<G~
z@Y(1;{4K8b9llOEud#o?`j7Lj6dZWby@HfiSzqe;($qI<%gryLToMJeb-ZYCd>~6Y
zUBQsSpCmq=+*4q>R$|i;R2?s*T;UHFC)dh8Toa$c{{;`%po0-h$F~E>>}F5FP$#;v
z_<MclxnV#24W2Wv6#G}OKtmB9aDj8@zvZ>#RlEzn5s2Swya)V7=aC}gdFCT#JQ$k6
znp~)E?K1S=>#E}|H&(}gS(Dgg!)FZN7Na*S-cxcyxi;eXLX`8s&Argl8|qPPmk*zj
z3Hrk9pN(HqkIsCV9hXg!`}O!H2Z!rx@S*$+pKnrMcH<i05q0%LW}}UrN}R}Bjo^Bj
z$IBl1RDV1-jOh=!d&?}W(fU`setIo3LULkSZk1xBm?uH%2{Bf|)b~#L!o`lAQ16)(
zDNBu6M*91w7bokZ@6dr_sM>`;pVmq{YtcQ;&{Ndy&<y<$%&!5n^oARt-}F5RPJ5L3
zDDhPPO8<SF9}sMv<>0s!9H-auyHp+L!uQ=e-0wqwJylTe;Fi6i!maHO4^Ht!eiLMG
zGIpERct6b?S1zhC<xEL<KV@XIICcG@#_5xDZ)zMoIQK`Z@grF6e)i3RL-vyI?Jyym
zy{VqfqI>ykEMJDhqejPy9FNxlv(LJyGI(n>dm_xv=371SZ_dJ|gEn11NE>at_YPk<
z1OHFPkB^P7b>PAV(HLldt>%1iwscQqruZ1~8GhM?1?=<KfPOK>^x*UFk-y>Bf0hi+
zU(OmuPd{tbwqz{jJmlnd>+MJOS=8;?i(4HTmWnO)CjELZUX8tyXL^=xjAOqg<L_M?
z|K14!;vPR((NK~RZdpAeSMB~F)vn~e54!MA4fU1)w>QQ6g0nMvf*YnX{>TmF<|DM3
z)VcOLJl7yQidW6LN3y}B<ifUpKlL|lo3dK1QD5E(9-66Bu;gd>DjirnMOO%x$I@U)
zZ=-?snRmGl>%Hm#2Kg$3v#B%3TrM8!zzFR9Ynp%H!tTP%dJpo;TprSOs=3_eIt89|
z^h9Olf2Yq8<%CJ~)7E{epH1|$xQ)EYz>}o8WX`S<_DS?tnjXb8%qE{`f2G|6Z(Sb1
z7EyeIkKAj;h34`-#IJY44>UgBdjs(XbcH4p>QS6Xunqe<iSx_*Hid3gIioVn85`X~
z{)9aAi~L~W0oDQ?9yUOm^{X_l-tvXuYJhg(Gs~p|sh{cNs&UrXb`DQG;Ns~KXjAQ2
zv;&XG^@mLOo+Qp!_~8?JmrfsoN3zUN&aLBhaN*)Ar27=E-UqH69*qCS-MjCWlin!X
zBwfax=D9yU&2v*SM>0uyjo24JY*?u7y-Q5o04M9~^PIK$m#gD~b!n;TxdmJm-D^4h
zIp|@16kUDhx>*OBS&KH%V$kC~&`i9p#_(ovyOJ_`7XW99_1rbRMmjLh@V{sdr+7j7
zcZ){9Bkq{*R7P#7o*1!cI-3}No$uD&2`=w-+RY!*ydj38$Cs$A*v#3F&N_H*sHY?&
z)Z4@uxioMQI0~%8?@V3i(%0iz<~+AP*_1AfTj|G)(YB@yMbFY!=)c+4@aySqO&d~M
z>R&bc={@L8HZb9jE4P4k{JeWz^No4esVnm?$knBXfB4<0O~>C!%yaRSj$75Aj$d*H
zj~N%Yuj9w>+0k;zaj1r0+N@1o;|=u)kFsyzVV6Gzom=2BMqD;)zhh)tNs8WYpv-&t
zJ7nj$x`Uf5$<-YMhsIX4(RUPIJ~(M5@0@7aKsyFG`XKQoxA7mF@OszhDIc7*+}9mT
zmix8J?WCOcfvE5LY5$GZYpKWCk0f9F$u-&dGg+tGuK9+YSt&g!)ccQj+dH<b3ha2`
zZnL9#m9-<pdO?CY0iSgCz19;~Z`sugwt7wF1C&+Yn<@V@%I~JU+Xno?kzMW{Bg&)i
zFOJ}2EO+;?NVdryAJ}9fTIV_i+ynR;>0fyW-->c)sC}os6WJA(t@x;9`BK)pRc>ID
z9f=a3sONnXP0z2WgLSSR?ZYWrl=LUb?laUAqz{_ou1rS`^qRa-uVXjR{^Iw^56n2T
zeh9yD%DOh8i*MO!ieJ+{I2XTt&boNY=fE0{;`{or;TgM4o%Ev*`@DhJh6O=;$CXWi
z9ar65y`ySX%?{eH3)r3opNg3sx4mZV`1`j!JC=@kcewhG;1t~Olbywsb76Pe9leIq
z<wiOj_%bCw;8TL<8=OJdk1s*;qlLLFxLo;R@n5pQAOj3~WIc8->)8|7x4we0SQ7jb
z<DhlMf3HOkW}Q^`P3V6g47}S4pGb%KDDhOIu!;U^y!a+h)1MoQXNm5XCh0EJDZRk)
zbJW#?GpBy^pMj-g{fI5Z(ke!YIvs!LcHn4?P7DY67C+zIR`j$Q!B75$Qg2};F#tW1
zVf}f?MSKNcehpa$ee^?Hto1M7gB;bEUV!}DVlsz9;6eT$3;j;<6(1x1TQL>qzz0{4
z`?e3;Mc-;%^u5Lto~hh}>#J;Q!T*Iuf~GjPCNZUgG8;<3ZD*l}+!J<BnfxHD<Oj(p
z$Irby2#y7(;O#H4B1_%23X*WDJZmB4_2PS}dE5_fgu_uC4%j<GcAQ+X8;vpR4Y^`s
z&7MdIxQy9$Papi%u^k^bk=S<)>rkP(XMUBOb3V!hfqjrQV#N`tEnTmzmG3@1KOi|u
z@c(Fh&D|zEoxUWdd}28;E%|zb2}_>-&NJg?_*qXd%iLoT8&;2x$o27DOut<JkaUSw
z_}<&zlJZp^le^MmZwRvII<z|2?IUl=eeXPYa2>fk9_Lq&ULY9j`CfVZg1OKNzBS4d
zI~}S!#B=_W=asp@{t$GFx;~F}oowV#D{<DE>t=fUc)6nZA@O2E9WHNnd2%Oxc({c9
zgy8rShJ0OXJvXoOOmDyXMBrc>@hA1nEx*Z{xP|fCs`(_isOP6?u=tU2_)DY<JMd`V
zfnX6_<6*(Kwd4tS*>vxN2M>b#KH61GNz7n>@r~BU1|Q3a^kY~4Gi?k$RvQss%1&%~
zBoCNYdNQtm0+`#tLt9QB>zmpWlu<r-z3ItTdE!Y2CN7Eq`*m9~?BRgsHGR0n2=`{<
zO7=#-O>Fkf{NGOdWxy@}Z}7hJc~pEwrw1E@|E{iOv%k;~Zz2Cp_is;aa-Y{TuFH-k
z=Kh=d;F(cZL0>g4qVf9s&PS(A`U?Hj`Q)po>0vAHo3rfUAhD4R_dU2lxYAzDYV)^x
zxNL_MjpaJ)b<)YDFQFUMqgU&la)FCZ9lpl=Je&Qsv<zB?j%};3@-<|ma&Yt^PvkS!
zUi3lyfrp9Dkla@tKYjN!?^pfl^F#SCl?zjIMEgNC9~$r_1hJ>@eUNikp_@I%S0Nuq
zzE?i$<UYj3?>8Ign_1unUnS%FwWm+XSHK*ewtr6rbDa2&LHr2V<1hMoCLY`mZOz3m
zCb|{<$|sTTkN91K<ZDLPeBQ05zJw=#D1`rFhQ0@G_t)YfK6o;+z*N1o1)qvx99H2+
z36XCHf60&syvo;c?}My4gHv5^A#aDC_3__rr=B+SeF*$pw9%^XS*!B$U;ULXBfpeS
zdb}xh?CEmoM&||S`7*{xvKTzC_di{NE@-;8%=g5D(Fq4y7JA@yJU8cu=RR|4)9&^0
zQ5mCe^_}@UJI=oI(dTae#^$e3em~RY!O!$iR$xT-(Z|X0wcF$mMd|lad_4G-ow+QZ
z{K^^l7$_fNy_Gpwx9k%pq8N7J+_gPKr~Tx+>z<CzjV{oiT|+)J<{taLBh`G*nw{3^
z(shW|)c!5C(O$@Rp-}I=9^;Io_QT%}Uv%j=-TyAw@k?~gWz8e8&K@Fv&Aaedd_6XD
zIe(~?KB!N}@IiFaKl!X|=E^;^p|zmLfYGKe!MbEW)Td-$l56QL6ZUjy%tFxCQR)ae
zb>usB)Q^F)b9CLw?TctIy)O0X3#mQ{XKsJoadEF%@VQ!iFX;aJrKh%;toBypd9-Y;
zce8)(zRmcYj`ZQjXfvMg#xC4abO`vQoAf=rrHFTT!XKA(GM>dIV`v@sn!iuLGc{K;
z;G4kJtN*+4cb$m`Xx&%q1+HARW}p+UIhPnY<@d$^^68}iB?gU^K)cnU((wK+#>|z&
zpB^iR-(HD7&Vd7)_cy0Dt%3&JzMkotKEAA@mCK)*979jn#||epZ3C~&$(_O>I<K=H
z#T;6%^&b<P6@KcQ?El3tre}WN6ynrog|~kbzZYd$!%E44ye@34UsngGgueyss>|_H
zIdq&H`!m7z-+3nf>3w7EhHc~)s=wR5!8ggevE(bh&u0<eRMR$T%I)Tke|oa)`HoEb
z@T7^p{N&W=%S&?>4Vj!p?IyIP!yS`P8?*n_TE!}557l5V48kWHZF8W0(%yxtujYx8
z&#SHrEVHXVBYKsdwS~+Pjk){o$y14)d=pl?%cxJ~iG3p9WU}2Yv>QxoSG3`_f407!
zOv?`{zV7-A5;Z<2{z@_FE-ffma&pbli@adGvNIgJ>I=j%>Rg}Mv?m?RIVT9Yf)21D
z8{IO?c*!elx@42s#%gb7-TIfz<u;GE{h>R9^V^#0=kGQd%lD!Gh42F?&Q^6*6ZfgQ
z+;1M?{f9=|&>rWauIZ^Zip=!0v|**%xX)?h1?q^QXDh#t>PogzG^UN0h)rpv?L!{#
z(5<Ck>UgPST?Y#T*k^*r7f#1zUYi+Vo(}Cnj;!<K5kHaNbu+Z!mSK)9Xd#vyxz=u|
z)4!%<q?z&o$}8@qh5gR@<~aFx7Ga|i-#+g`;9BV^+W#tjO2#&XdUL?zZg_?Bf9kF8
z2CoQpR3mSfvd*9wB+Kh*_ceWCzHd!%Bzh{b>yRgNC|dGR$8K=_6f`uO@72Ek2k~*Y
zf%np;;QTGv2{y2Jji+7jzD!;H#@nuTRQI*;O3~4%&5~U^CT<eDlvq6<u|vsqgVVPE
zbB^Eh5VAak9_pv<7I=S^DROeu>;E_SFF3!<`zX2jvgktwa2A_PCpHFn4+zeEX>h6!
zPpTi_@FM(z)$9{L3@`sVb*=PF-!Hn6Kk0dJx3c6L9paHI8Bf*Q2EMk?r$>lgw!9gm
z_@e)guCkl&gsXGYaCI$ox(*mhfT7uV99(&bHx#ZuL)mA++YoIF{vRP9GkNzUZ41Us
zZ>G~9^#gzGGo7irwx!k8MqY0D_OWx?H9tP)+-EuW^SD>s(pIjbRcO8U|2WU4ckSjn
zBS35n@mra!Up(o=^qdD@R~%Qavk&as%+XgKPR91^BVOd#ZFx>C;ydVn@#WL-3wpYm
znY%V)h@Ccc4dYP8T%ATAnsdkrz#bBE-W|Dy{aL_&)A7dq$VjOP-%Ec4YjLyLQQU0t
z^YHWX%ix#EFN<IHj%sMXW_kU5WEN|z-mc&z-+nX8-hfYMzQ$jB{&Ju_+dI8Iu>9Wn
zFU>XwW>Bw*EuHV1WSp`E%Y*atDZj~6uz$BFZ^#Snx^qj{m7e_epvPWNKfH9lHHmz>
z)Ng3Bn7PvFx%pk`cj*87w=iBg%>6ANGDlEEmIRjHKN7t2erN7ljEmN``kcH8d0maH
zbA+(be5K~de=yHhdI}ityrFIAm&Y5I@HzSBZ@U@a>c=C@3umwNz{BHgd1&+Gnvb#H
zsBSbi?QCWHh_6t6(#hR#0$zK8>Q`LbQuZ+Dy=0o&*K_Hcb~a}Yfn$&DDR*#izCGV(
za~2Cekj~tj-`z()**7&`u<LoP&tA<OL=QB}`<Mf&GYH+PKG`!F^ra0tdWF6`1noS}
zJQN@3qaL@vE_{M(1#pQbzG!PtdmgeQAK0cvR`P#zjG(I+_`RCFZn6oz%q{U&<mKGV
zrpEbY{I<<{@ZhtnmUZuKYUn1ea=8IU(Trpl@}$naAFVS@zyGhENq(0gzini<^-bT6
z7a+Gwke{{4&bG4WI?C|**^~Ax)I0b2GWJQgAyXF_YkwQ^{E3{}_FBtV@z6qZz-OXY
z`I`<ega)p%nx0%J7*$r~*w1+|!z!$JXqGuJ8~k0^bo&Tvy7BC$3r1Wy{LmzGMB~Ey
z9^QBJzK8eSdcO=`7|-wL+5N>$W%Kpy0wdWGy{g7!?zd<&n9;h>Mn7=ieZv2F^&<nF
zA!xQNw9zHfpFfe(7u<d|u7#hb!P>|?57L()^}6tl$ESloXsng_P@2Jf<|-chO7qVn
ziDqIFPh5TQS>N7{l3Dir!)qEx$bH>)cuna@H8$4ZKOedwbJBwcv%vqWgXX3jWOb(h
zxsJo$3%a5i;5_5pyZUDZZw&dY8%=G=jpixejfS!D(5FS_f=9^@;pkM)qbEtPih>L2
zRf1J(c3Q90S!=S7WINoB{8apQ`kLgZ{+aS!&ce3}4+*1VFrU0#t$D~?@IElHI-)q`
z;--@MuD@?ZmAk(Azt<s!KM(!igHGVmU`C1tYv^ZV*|Qy`ylZ4!8tG#Y8mdCJ`PPRV
z-BJ8s{jH_%ZMEda!VYL;ejG-BtOhUXW3KwBYnSNbNpwfig7n7{=tS?fgHOH*iymz1
zbJ|a}YjSGZ)7y3Fz=dCW@3L2{n*z+E66!5QKW&)x#OD`Lm-@3k)t5%!vmLh&dWQF4
zx1po&3IK~!cA@|Ci_mdZ&I^nIXm$Ma6nqC97-_?;U*D+CAbbS5df<*hvjN`pXPbEI
zec%k(_nWDwb#1|}Ix@bIeOEJbpmu6o#~o9@)DgJ*&{)`0@HA65I@6N=UFNPuKP|a2
z)!qiR)ks^7w59J=PaDtFW{5U5F6ejhZH|xp=h(%H!6G&edhDNKMJ~r)@1GKgaAxWJ
z0J_H$#4iF*+$odFeXz7CDGTezJy)3|o&U_K*P(IN^|XJ&2Y(7OCw=TE6b);?xAu~K
zJc$1nzc+k@c^#Z@Sa)*c&J`C(%%Kxc4^6bU@SZm3iWhGIhDMLz8XFI&I2=8f4mJKA
ze%`oZ{Fj1X{M1i3#wLavO>2j89m$S^KWa@bKe5hppqMi5n#|ib=g<eM%aw)4t|xab
zbq!V~+Zo(W?7Rte_{8_|?FF$(HHO9PiRz>sV<v@-S=SM}g#9F?=H%PxH6Hdzgz&8%
z^?H%b*zTF3Vdcr{yfZjrsM|Z$#%9I8G>J2A@E<gKJm2-;8~5?d;^*!)LJq&>?ln5x
z$QZ6e-`_{<7O-UT6CSkJNc)MR%qy#qbGC>L(K%b%Z?p&fN%7<IRRnn-!cPbMb7R<}
z;!AFywSH7WyYBi?AKx9jUhBP!(HA(wVO=s0n)V*~(Z|8X1}7GpbvEGb5pG#uRJ=nn
z2MzV9AFi*w9^Io<_Okq!;IA=S7WRkA!X}g#-a9E&w{D~ID}^>RW8d_p?GJ8Y57*W^
zecjZ*;kS%!?1%V={|lU=JMEmqUa}H?E2}SH3^KZEYA*;2&reZ@-szd%l>j$u0Fg~T
z?DvUwq#l^RMVYhp!_Ry_V?WH)aP`Dc-N)$1Egw$PHO`<Hi2g*QW9iRy9c{G2Zo7&v
zId<DQ_%yv;q8l%84M30JsMn#xE0c71ls=8pp-*(!+7ZL|7u#-yi9unEleE`N-a7x(
zEk&v~G1HuM>Cgim2B^CQnq_V3thA@tmaXjB7u_AMQH*DHxz;yCe}V~}Xp|27(1%4|
z7W0^R7HH2b=;!~(P5%D3k!!MPUVt7Hzv}L@zof|V@0^i#0{H2ZYnjR~dkwK**N)O-
z-yGUtEm1J_H%f-GpB1>yG(TeUlcwg!wW;}G^UTFLu^wY+wuLfd#@fDsSe6UG@zn5M
z#`>klCELL-@ux1GPJ>RRx8hrfd!VU);@E^=_B|BzUUl|9`jMX#lv5IV(LB&OJi0&A
z&skq(&UG@6YuE={>oeg+AJl%>q)pzkD%c%Bm))AW8p;H?Z-KYgbG6We3}Yi+Za5p!
zxpKCkbEOVl&(yB_OnQ!Z>S_KD?TUXw8|R?Q<iS_OUzJZdn7c6*=bel>QXP^>OVK%B
zV=m>vkAv*d!oR*e1YZd%zJ~jt?m4Gi_cr&{<hN}^e(Jkl!pDO2U+?_#oiImS*!Lz9
zJD2fJ&$j4W@G874#ioo=b{TEyd7tV4FZwPB{+uf~)O9I#ru?zNuh`vc13h-sXD0Zo
z(JlV(jI)oA@S`$Gnaf#l__Vdot+j1qJdUpD;_^(_!SaWC%U<jm&dC3d;U{tihBMaI
zZf-mAk;mIkg!Zq?$!K4f<85Czm0yOp-OTc$gInLdfLsjbgO9=+I)|kX_>KAQv-I8f
z)>nH=Pt+caem64wCHfos^mD@(Kh)l9m-Y=e<$rC%i>o*GzW%Z9;l{Pm&1P>)?={^&
zAD;02?+i!Ie{T4?zL$p^Pt+XDx&NX^Z+Iuv`{kh{!*}M#hHG-*J#A)l-+=W4|9RnI
zYwe!R{u7H1Uhu}+gHK|gWaeb<?=1Uruf5@k;YAtdV&ApB!?*W!^oGh_AHF^R`@>Hz
z-ZLCsYi~Zh`slDZ5qR93_|pFDw;nhcL;rjAqHk?Ljtzb1?w<{3%`)e`y6VD5%}2jf
z^vc>V^*;Zp&fy^+XL|hV7sGa;>AB-uhlk5NBmeT%OnbQV{h{6#=&9v_b2dl0FE!ci
zjXC?+_nkBJ0%Pqr6Wje$_dH%@CJe<M-qL|rB)o-oblz@g?bVyjiK~I5ZNJw{(tap@
z_&zvap@sg`p9t)KKlD?|TxqnwN?yQohrXYQO`l<Jh%O4f+{pg&r%yIN9z0?1-~Pa&
z&5h>V_PeOB@x(Qc|J9nhztK$H|Ce*7wEx>VliR<4&gA`nIeFuLV<zwaJmcs*J8$y-
z_nS%kKY!xJ{oBtyx1D$G+s`GJ3h&P~j5FtOe<jl#X|%sW+mnXAHm>dUskYZSZBIID
z+h03F+h3#YH<-I>TkYZx+TX@F=xndhGw=IY%QNpgKzv3|Rn#|x-oRW+@;j}=H>A#2
zV}3a?9<j@k^j8I5Kf<~11D8FzVP9hRFu82op~<kGe-D~eOik@9)ALp2G<800qPb!3
zrS|>xtkK~68@itP-iFV|N4<P^UTvFovF4=@y6uBLV$kbW=)=Ft|7a(48iFoEnPzi6
z^c;YG_1xq{A7}0k5r{{e7;RjX7gqghM{P`Ce)GTA&s_1Ys$ZpZ6h4P9<pi(=q1Af6
z2|}xWVC#flW6)~o0ef@EGVO+OH7CA;-N!w@E$0z~=0*O&C$xV2tN(;|Yrc=hc4GhK
zA%7nS53HlcgC2Cw^T>0<+F-w~xpq9p)mb+nPC)$Q59hh|-)Vk2o`>jsSM)k3pTNnq
zb6&O9Asw%OadLg7uhfM9@p9V97&(1z>r{J10Q@VavmX5ajI;Xivt2G89P~a_iA>Lx
zei`FGa;SWOI#gD?zm9YN+;#^RkJTqt=gDzrwx-ikEAbX3?4c5`R(xpsyOPw}o!)7!
zF8$r!wD0<O7w24{fi?CImNLeQ$Ezl{#8cU$v3Sp111}IQS<tbSwr?bT&xppy1F!Vc
zr*s)7I{)n<;vR@kXRLbYv-F<28|EZ7H9trWAoTs_T<KiIXqB6u2V=-{aP<alCfDhb
zW2TskSIK#%e(K(RS2B3Yk@*Ssq@$CpPv(wD#wlBjoAeyD8Kr)W-F@@$2@<;#%SLZW
zjkj_-r0el}Xj}OMsMC>cz_vkqyZ#wGji(#;zwp+S^FPCx`>n3ZKcG5Xn4V&8oLrN^
znz4nx4gC>YD}6EW(4)Qm^rI#7>0yhtez&}IhnRA}5pSE`mlmflwZtM>PG258OCS2s
zFJ350!oLl?*pFCF9DNhtYiu<B=`@tKo|>z7>GRX({A0&9#Afi@v&rERs#D(tSA)mI
z{Xu)AzQK%CL!<Q{GU0{W!7KW1`kYmrUcR^ZK|60XhGvKTozf#`hg-d&y4vvAu^9Ca
zVOzVoyDipRQ)`sv%)cXFmX3{YNV%#s_d=ekmx5Z8=AHB^_nm0idB=Wm_~0&;*E_98
zzJ-5Tv=^X^v$o0JCh&EhbaFG&yn&cLhxh24^m<|^6Fc2<*kqfu)}TCc>>t{dUT=L`
zz3KGvU-VCV`qKO7=#^*bUspO@ss7>bID7wGn`2!6#?+(!x#j+M{Tmy*uQ5bdaK`2{
zqCs$b9J~b?6Lg+k;`{2K;C6XI!&Jqc=65N+;!N*v<-O|3`j#Def$MJgOcXmQ!Q6=!
z2Hw4v`@^)!I!r}orX7DS(^Ndq-jpoX<n{bXzB$aj-swIw6FZH$t6x3796$8!=lKPc
zB}Sm)TK+e)r|ZwZ+fuZJ>mb+J@#YOnt&HU%Xz@wvzJU6krF<Lr&vKukd+NyGe$dz(
z1~Nw~FJd40v-o2zp6%g1?QHOy?5;g3&%1!y<(bczE*t-o=FW4}m&tqbfbL9({Sb5#
zVef2u9}Yl^7hCoQ^@$uCUDr~F;EK|gp`IxBUh?kv`0t?%&o=C(UGfCUhvl><JJ>Bd
zn|Fc%KQlfdd{2~b1m0503f>p^38#wNa`AU^O^*{FqrCxsauO!@T3M`<cq3Z7R{Z-M
z`l;CW=B(t}PyM^i8w8WaRB&h=Y$o%kfS=Z%w9YnBw$cRhpjMl3F@66GGWDS9@fMWF
zS+_lo9DWCz`WWles#i3yl6sW`s~#G&y;Uzs2S8_;+sXey@67T6zU?Q^wc@@qX=^$3
zcJxG|BA7)x#Nw%)*U*a$Jp2{>55GT`Gr{RYjNG}eU@u2$UpNesYds3CxvpR3ftLO*
zdR234XyI;8)=&ugP`N?c8UV)RnatC=E}*@eXfGA3O`Kygo=RuzCg;H~ob_6@{j*fN
zK4NJEyS{PT?WDc&?WWgtdR`^#`>)zd|5jy*`F3=Y)8l)3zcYHxPK~8_Gq`omlN0W9
z;K8|!S3Njf$#|{Y*20<{bBK3e=3R1J$T!ThPUe0wbE=cQ=x2%((KEqtx*tj3|M)nG
zWAGW#*zpvNCDxtRBNE=s0~T;@CC80LU5RXRelX8}n1U$+EeR&ho$exFmRPVnC;xj<
zW~eTcel$RLU!WfwS+}mnx2$=p{O1OmdIy>cah}uT4?b{ksW;!T*XJ#tGordxXT_;R
zMFaHo1#sbf4~=_>2T-3(O3&FwejCB(`U|(tHcoyUx6kQg;+|`F>&@o8n&t-%*5h;c
z-SD61>hWKyTs?j#S5FnWdTQXq%9q2re8|wet{8nTV!sa#wl47y(bzlCY9X*%<b;Fw
z9r3|ef62OY0cAJRSIx&5<>oD)J3@TMd78VD(^Z<A(EKs*vyna*;9pqkoxXf4{)hkX
zU?x8$aJ)G`3A5UFVM&MMHT+xT`yii)x9eHXVk%p+Yy|%7@a2biuDFIEc`sXlTYMK=
zt*Zt8qka?<ix>n?@;!R-XKl?km6`($@ZkXO`*KX>9_k!~cg$W>KeCT<w}XSNs*9`Q
z+I+0nm+-%zeYF?TUNz54s9$`vAAY=z`wQTqjmGL?4Kh9(A5R};)Sub6m5u1zQobvN
z-{8B64<g5&;7T7hECtU^oMGO83`8a!xrX{wf3<m}qk($2QLdVD)$nVz)4=~)=e@n5
zj5bS%>ucC(B71<_?fV{JaN*y|H=)UiO`n7wG^SrB2V^PV3zzqCuDbXSc_g~Tf5c<A
zp31J&wShG);YT<KP{&==aW!=a-q)FDi+Mh%J|I`!zP!f&7vk9!>IX3YpnB@V9m12-
z2g(b6;X?hZ)wj+yy^mg}k9+Bh@Tq<iyV|Ax+(i4cX<zlKPH?*-N_+)-%)7qI^R3`l
zb+>v<Mf&(?4Aj2HM&G(H2!7T79j6^~byBA@cF=i0<&|4cW2gRJOn+-Azl`V4Qhyn3
zeTVy3`96cSxCZVM^f@&y^t;U&JHhh=^)D06P?j}#ryZ3~{?F`cXfu&8@T<<Ucw*-|
z-VKaoSGe`-|8{aEsC}JvCAh!MwT8Z^%_Oa?`x`vBstwAvrf{zB-8Q$2Zg{>IJnNZ@
z<9CoxzasWv9q%=7>d8s!|4Vk|JlYdY;NLB%W3Ed63-9;wUv%_&uEoHjxY7V~O}d5$
zxtJh__W0*loJ{H%HuLY(+^eiBlhUs(@aIzCt4XZ^%2z9YsBGCj`1t@i5C3_@u~Uu=
zkn6B9Bh&#Oe%ivn?R_eP{V&8O(?@qN&iHn;{`zP7F@&smgL*qXp$!vg%b!|Pe$#t?
zS3yN$(<$${w5vQ2r{lUGnVGUH>2s9+UZ3jozW;Mte|n!I>n3&CtZO|rF;zaLo2s9(
zAC#lPvEf-)b8U3#S%IedkqY2Hcpd9&#NhPdBR>YL`P7*sehsg`TXDnqqa=$~de~P$
zxvluiwbriK;-{u@{x7mP`l8)K&eitcOwMnY{0W`!#vv!=uXGecy?W>71`&LH_;X4o
z*%y1t_7>rXSl)oVug*8;m9A>&W}SI%$<)Bb1MEG~d+2&X!!;%CB~F})ndj)5+CxMP
zf!BB^R9{ot?&lqTrHSr1DE``LUv_M^6Vsi6&pmzo^&a0$mqi)jCT0;26uc07^Mm1w
ze|c&XF=InD;QjpkWPG^FV8f021JdnZl^vk0)_C_4m%y4~dwMLxAJe{bVHo}1v0szt
zyKkR{--Nyw%TA%bB(B}uJbRy#EOl)kx1Vl(<F7i`{$%QWtK?Z$=%cKY%3q@MuHLIL
z=)_u&fETd_CVfZvVqD%b(F?<V-;8k4A>y*h-7lTZuwL*Z&&+mm4_(3B=}9Dr3(xjd
zqN{fG)quZJbRO*cT)xqqd_Q`%d@g;B?C-(<G-)6EW2wh^hX17sKc^vnia8Y4xwd}R
z#jAFj74_%@TAR{0iM{NbYft8*?}SGpC!DpifXar*eZsRtitlQ*-)+F}8o>9gwKU|)
zf~ps+6_%c{X5&1|N!1UXDXwa7iT!Sb_H|!FJwKsuYrJOvOyY$@_^pTns%Z9_BX4JK
zDN>y0Z~lm#Pk)}9#5IM-{sMeT;Lp{^>Z#|w8tHs_<tNvqosU(MTo-QOETekbY4CX3
z{rHa$5!-fUsI|k%1(4=5UI}mWDIY!iQ!)xavRZx~=HT`H@Imy!x<7E$Ib=E)D~tVe
z<HuhA$L}xDyq`DA<eH;_9-XiE2>DH!m${*Lte()jfgW@3`MIHYxn~d4F7`b!hATb?
z{=U(W<LsZ>RFV^xE?USpdseR;v6#QH)hnHI6ob&}z0^0ddQSHj@U^K9#cpa()%Vcn
z6k9rv=c3&tA9&WWS)$al0(>4?J!eFDTJ=u2PSW_ZPkD1pzMuZeSM1K0M>+S}1Fk$7
zp<(UO2sSm0Snz^A*6mbQe0vY`O*~ugm`kHPIvr2qj~;y6E?*RF$_F7EWm*uLfydqS
zNwZNpy$`(%{^y)OAbJgYOnk{I|40(fB%j;u@i=;*c=<y5WaGp7!UXm_V3!mJvGY8k
ztJ2G-@6W+DT5u5Cz-d1f%T40yUrP=i_goZ~Ej)w&Mf?_&UKGBy@uINoVh{Y_apDA<
zTg{4PMc1zGWZj?-eOfr&%UI2aM+b@flK!q|>hBz$#hhn~!_Mz2;n@dNjx!xBz6s4v
z&f{->3%V*KR}(ljPq!4A0n_t1G9b9R=pLsn#$0XJr~YrH?SteM))>06#Ig&MeSY2<
zZ>RpEWc?x4Z<`f;@C>K^S51%n)=nAhfoh(AQDxQ=pMn3+DRU^9pR)N!X2lwCv2psw
zjxTJV#D2e|{Uu#&S1a+~AHYt;=dtZpWE<nCejdw*-dWQPQvRg}*F3I$ch>L8A3$A(
zyaXl2l>3Zt0<i%_=J%#YXEu1yanR463Bk)W&j%O}>FY82uKa&x&;l_#ahr9prO<<T
zvgpc!e#X)kx&?IglTQ%m13lDJR|DU}>nl`;zE?e}Bb`Q+yJrdSG}l6H_K5O}JUNkA
zAo7cB@nj6ugLBo>4DEFSlW1>%cD_X!wIdo_DP0TtW3Kl$6EB!t8%VBSyK~CTpD~lO
zdqT9;=gb9oHM0I4a#H2NH-y8-cpt=;Ny3=)(^GG*)`QaN*|G7V<AnE|11_(mPKQ_a
z6<dz1x#;iAMn~2#j*>N|^P=#B@L0{mU=1;Mz^*;s3D#kXmqo8~{wK~Qrs1K5#ZA$x
z5??g&<5ybokt%-MJ>ij?O*~#>#pC;|a2y}ZyNj)O;=<5XM{AXD&psLZVFvujoD5~j
zC&J#(OROFrbd$i(9;>u^3~(58ahQOzP0@U_Gm0EnKSEc)=N8-X#o+WPu=L&J*sjko
zc1t)5!;xdY>!A<Hrt5isvmKwi$~V%=Tv7ddi5;8FJSC2K0l2DbWzJM1<Cn6BIcl@F
z3prL>c<pLva|!2b%+)t4<AGKyxPSZ{t^e6Q9|}pw>m;5(G<+1_zCjMZcfA!qag!A<
zGJV5AWU}@Y#vZoNx7eSF??N_v-+;6B)YVpt{)1fpDzvP5S<gP(AhF8DZy;l)23B{%
zr!8<0^Umz@+ZTt$KQ3a<#HO;2Gm~<_nE{-{VlDXudH;elP1quKRC2hC=bgY`Wpsbt
zY8zkJ-QZ6?7T@9|{*F)Je<CLm1Ap-3XQI$+XrZ%zt(SPQcnrK1Fb9BPy?iGA&hx`x
zWWL0(S%7;%dS5=4>dU_p3oYEdcYOdn1meC6E~<=OhWz~yZ8A2ru`4!^5$-F-mvbm*
z!5a8^Xr7tNSU+ui<>4<f)*<W!(R&P>ZYEbkY)%qBUkT&u!s_RKW%7AY_r$CCE~ajL
zd$DF<SDWj&(udf?TxmPj&h?92ALDu#*T=c;^M=crL->Na63~Q8OTo8@&q&ddsr*}7
z5>2dOj)~8$6^{gdXPiP8i%<6c99(xoXTeKOkCSZI(Q?s?9e%VkRj#qrUeL_AEo0oG
z?1dgJXUfC<jC&X5e1Bn#i%-|L^-b1-i<7kUG4S-6bU1=Zdij>VLk6VN%L#Os7I^WG
zh7$AEKr^lkrtbMJO^J3GW9aL;)jG$<{<Gp$W_AUT0UyXkmNG`70X=(}|L=jn;M^o#
z)k9bBjiamR`^VDNOz5fsT90{Wm1{nJ2-u;qa`d|e4ZyMYmBieo;6wA!29_YYgvx4f
zpgTq(p1WgYUpRJ*u4KNeJnIkzYc5IlaeV*4F?7w`g0A;`+-!9F<jlcT-vgYHsWMxc
zn{TnEeS&_bmkafg<I-!Po6N-S!|#2IGpASlDhBVs|9e$V5;vhs;GfV%^GwrYI=?*}
zg!jg>Ya>DO+W!<>HlUNYWNR#~@Lx2?8m;gm#xz)Lb_!QIvu~Ci>iuFVYjq|%+zgL+
z1bzn{_8Q;5j$%{vXa65HX0!erWgZV?*$c?m5>`1UCkpy!3|$$YJ8Kr9IuG*h9Ozx|
z4fHlJWqxIFR`Wr-DYz;$rKz%!F{pv}HUAWvgct3B7inx1!zo_SH_^lgE-^iA%-_C=
z$l*)KCsV93n%Q-j9Mj%>Gry5N72-E)qhXfGt1YxwzX{C!j|UuIZ*9}E5tsIKZJ_<u
zriN8}O;hE7bf~oNE@i9}@M~mg&tclVgLaXp+!Ie$Waf3|L~k7|4%OL{Frza(xtNZ1
zih&wTY^gJ`-MMWhRCF8tHSlZ0`nlpjS{W~`-7|-KW0%<RAD#oRL9RT*^_chvykr`(
zS2AbXq-pJ;FWDnqyxT(V73o%bUu<R!K@Urw;5qW}*OGIRjp93wTr`Ew`){S*OD0NI
ziVsN^euL);$xvkH<Jfi6fNvV`DSxJ9{iZv=(B1JedVEzNzUj_+-N&yCAX5X#(m*_x
ziG0L%>@N<Cv3XiJ;|Mv=I8Ar-_N0EF)c3?EWyAgqdhdKGyAr*;K;!C+DPt@AP64;a
z8Asta$lM$N@5?BsaTSh*YwVS?;#uGJ!JDg)DL&{%ytYcVB|hjr`t3n3_uqxCOzaeU
zliDw6D(TK3&$-&Uj&{<=$dAoc)oE6|0FI-k4ZnNmu<=EQP1&A~&`+`}HFnysmZZy>
zT`}fPs6R3HIItSdM*aKj)cl*m{DW6B_wETUH5}oMy#_9YR~Mhe_!MXii@#Yrs+;(3
z3Dv!f&#HoNr7u{_L&>i__@myK%9y{H*lFm`KfoJAC!KF59NomnxQ@|HetDW#X%F9c
z-NaVC;4PQ$T-kZ6`X$=|TeaszV$=C5!@YRTF8+(Z=}b-WiVvMkwf}lzryp2jQ#c<J
zT;M}07anGUhY)sjfOi%+u$GvML)c6+N9)Y*>ZDG|wdd&XAozRCX&;=@=0EUmBV{$V
zjnGR!_f8Bf?>6u*!Z()YQ6qby;d7#+!Gg?-2X0QzQ{;KMXnwF@(Z%rHiauzfBt-`$
z(1GICGNA)>Z-)-pTUr3V<1-u>v}WK5ucDoIXh(Iw0AJNuiAFVdq)#W-eRZK|h(y%|
zE)LJ(dsiowE-D?=)zN0n8EdDf+vn1GWp}bRRUW`LGx%DP@^I1WAU3$uSLV@$;9a^3
zznz+|%D*<5bLaA<pA!f29dfMX<1hcZazlb!*`7&VJ!x+Tv#58~`S-LaZWBE?hAc4n
zZHvvsBYo&>>HM*fy403(D|{T-gO8f~6~jQixqs#=JI7BOYR9#qA7}4*L&K!-Z(m}*
z1H(%0@5Pow7mjbEEx{ri#q|SP_$_^m<79Me`Qn1Ia~KC~z6idLxXPy6LqY26Cm*ZY
z7hh4^{RJlex!;+M^2MN6u6UDv2seelKjq}qmv2SBJ})|x^c=xzxHfivFzgSOV|SE?
z_f8JgeeaR6<KtyNR|!A)Cbz;5h<9BPWh|t(hxqTIZQyhEx)q0_3-$lQTu&8$`161I
z&d)!;&&z%p_NQiK*!Qz8u6VlTE$}B#A+n3#Qe&3)qw6TXi84L<o^r(9dY1<nA8gP2
zef->V8i(}pk-bGOJ;#3`-%bg3pm%DhN3p-xtbe3KF`f1Jw=zsEZJQNsQ?GgV7{07M
z_}7y5p7w;}XJ>sg^P?twPB15&MSa;C4`i3`Gk1(w^uLP!*7Hq0^x|*2W8}y9R$|z#
zuQH#WWF6{x)-#H&?4by_*+%(l@;M4ud-xyZ8;ft0PXd0oDahK-G-x$R2h+;aWd$+e
z;B)M=&}?iq?4K5o2iwgWih}nueH$bOFkXuNM}M^TEk3O^-fxyzVPXTE{y6c1mtkMr
zav$(`x<;m;Gvo7+?vCFeyc7P~$F%_4>5ylJ)0St=eIxW|SEAn>dA8%~cP;QB-$pGw
zr@n}Il;@E(7qKp}zOBQ|syzsvhg#@&0GtNNt+lZ_i@YJ|OvK6ISja~Y>RE@qg1>lq
z0Nun74mUDC3^?3E|Gvz(p6Jr<b$gd~t4s)biI*nlFb>y(W6+EHUvTW?nfe|)p4b)g
zR4)*2iWzH_+rc}Pod;g^T(R|I>E~yT|J#`lCMh#Z@L$$KN2Tz{P*dXw^0>mCtC^Hp
z#QMdPtXKJfo%L?~9?%4NN<vMgBYxJ4@U`M=OZvmKk7_WRGu)8{+DkQ<UG1DteruiC
zI15_P{tj2CNZ;cD&5h=Li<M$yGFSch20jaKN0wFeqo;~r`k)I#T&Tvoej9osWiO!&
ze5c}GaI!Je>=Hi`kEn-lEQ2SBKYW&0X1Cq`O6ZgJT>q_~cgZ~z@<E>7&*SVd8IVtK
zx_D0SbL0}!+=(LNgn#IAr|PL^{gp920$stgiD@U!QQru*3}B1Gn-5KhUiHV-_KxP(
zwuKM0wk~|Ib=^Yk)d;~OgVblB3GqPRyX<Xub*^!63Z6b_MLexB_Q7z;G~_Jz;%hEX
zTlH{alh$+O#{%XJ!Rg2s+IfZlx{98}PydY^%s=IR3gh$}=iNDx6~w!qt!+QLC_de@
zz87rhErM-*e}1S=@cjq%h8QPTX1MY~<H-6Fd&BT~h_}Pbul}vsXd^osz(+syRt-LF
z=&b>qv`|K6k5I-LOP-6iU78c$|6>+%oA%_3iy;#}LH}fzh4|Jj8~%?|1#9So;BjHG
z@bztlcI2nKmUqCgvmg0cI%$3Hz_iHlzUvPS2MPmm?{5c(S^s|#`GB739oh~IE%aed
za1!*9lu5r#!S_Aplg2>4Gq-KQWtd}mtLjH?h93s$r*hiZ;74O0R6kQV@vBbGhuKAa
zu6+9}?IqWR$N>PHzLVLN>i1L3Dai=ke~Lb9tw8&W`svTd^`HA;o@rd5mG#id`bPV-
z4BS>2svG*!X&IQ<r}MzPk(2urdz<0pC4eTJy+>M4()xpZ;}&>u*N<AKu^$$m&lvTp
z-^w8(`C&~Xo=?2)9<2!w??4~eV<Vn%e-*N#4|;LlS0~?###S+}rju8q8=c?_#CnU5
zcTX;CcX?PR_R(T^xV}5i`r~d-q2mwT$e#Zoyt$7#XUh2D=M7CZ?ce&CqbE80pf(Oa
zfX+i+BIJWPC$yn;gZ-{=ef7K8piBC(HHm5In#<XuF>F|svxuK))H(n#G`H?s7-Edp
zO~9r=4#aB27d%~Cn8$CwnOwVW1om%cQHJ@SUS^2*T4z;!+Se!Zj`|qyU6+8T-SF+w
zyV>Jg`1e14jrL+w@arN^9^rlfn6^Zt3;)SPulg`P+^T43p+!Ct=0>=lx~jnGwa{8U
zxMzP}ylhp&NImOb{-X~PU*aYIkbVE*$}L6BlFR5vYRiZ0E-C!jk6$D9WPrAcDW|hb
zW3<(lZ%4}VIRkH88#(ADjo@}&5xN=uZUue|9PFZBdLDwuuy(t18M4pfT`M&1!KV#R
zWM6~VIh#=YQnYa#IME|^N-ld=-8&M?4n%HdjAGfAWY`heBC_XIo;`UTTUXB=(OR^|
zqX~NXB)rz8N6ih<q07hX!G+e}k~V2AYfg)x*Q<%|w!)f!(hrU>7X-&0nkOl`9$$|i
zIvq1#VwWX#MsrEH|1!>HWWLP)pu-EDdGR;jL&s<QKFar3gzBd7{n^@<4tU0I&86Y~
z1?b&;t9|@Nc%H;r(34EWJmC9{`%JVVnmHeODTZG3&Ye5Dy8e3Uj`BzPz@PL&{F^(q
z-o!w5Wn*uMM|T$JoL#ST9#Vnkd#+)R19T@p?hJ$9w_qqr9wG6yKE|k?`7vWv<wy{E
zgik-yiI3pDm6;JA{s7HaAO0vqJ0bX7UK-zA^P41JzjV4;67}Se$H%ka&|VYo<9vtJ
z^z*lM=mU1~$iFx6?!ogTe<;ZbM;{IJXkC&xP|htW$c;W~_4qkgZ4dr%e+}0xu2(wO
zxPP(TbI6l%|DjydgD+r?%KD(gVsz%B^&K5Ha}nChmyW-uKx@P1e)-it?S;?45B|v$
zy=oUcYRlf}LbGPhh;X}k&7AI)qDyeR)SEZ-IyB>hZ{**yQfmPBOBa^C)jHXZY@5s&
z0js`MJ?^*qPBi^8aQy~d_i<0gGp*oY9z0vTe%Dm9^WWiB>L)oS@;!X7Hnn!W?9r>=
z#n->Y#~k+1resaaN0Ap?9UlSu>&g-nj!w>NXDs3exk`WavEP|E%Xl&RYX<sjh`H!v
z9_>xjS-t3@n!7d8;%;x7-CfgWx}~RH16>R6T2~BBn&se8bM5!o%pUZ6-+89OkKB}f
z)Q9ZcgY2}Bo8-QHaZi!uoKNuH%0*86s^VDF?EpVHBSkBsscq<Eip!JDuC?4CJkyt9
zb}66L{Y@n!pJnc<Z~M8vjSd!_9EkrhgMB6w%#nKeaB>6j|KR_}flK@$LEak9>0Tnb
zD|G0t(6J%^crc|;@J@QQV1qY1db9d49!7H_yK>Cj45j!&=cVDj*Aa{S5c8UG`yx4@
zZv?jPBurY5d)i$KMmKfz9_gk(OSOL~dZRIa>oXKAg6j|BRq(|x-^7|6WB676i_c2N
zJi)U*{2r1mE#xJxN3SSh?4&o%fCs;ivf`;8=5*Alr?BfL;B)I%pP%LVn11<E{ffRn
zyzRrRt+!#r0dIisUP_g1r0@OL2)<;_a*dsp(l1<H^tXH`y0m<u-s|2-Y?9yYjO~Oz
z5UySns{1A7^?ut&&>yM)4a&EHuU5uPYp~VWOE%+av%ZsDb4~6g(D|+}qnk^fl|X;}
z(4M~A3;orjyLlYl&GRC5m?JZ5n5)f&R=kCJnU{5ae1B_dEVLiVjqQ^EOLeL)<r<Z2
z*1N<@ryM_sqeCJ$HKvW=rykx258Ua)K8Zn>YR`jySB)-fWaAkVubK)iL)-F^NPoHv
z8tG&H1>u=h_&?B#;^jQk9Ch=WsILQ*E#vtBWz~-A`3o@pf_|s-cZZH9Cw<TIe+Wij
zQ*guzvL=pQXVJFiwnaPj%zgKanX%(C7kPJi*hDW6S4)>qjf*?JjlR@--xXmGHpp$f
zcVTdKYxUhdpTY*-AijgBd7-kNezt&{()swL&<%|I67XUl<KXJ^!i71<?DE4?w(=cg
z?)Zp1DZ|+JP@nVP)_;6?=9W+|*SP(NeSeU63fcLy!AmFcF4D6zpnaalWdo@#lh&4R
zq1{tM{peiF_Ye>4v-wZ``XAuG{Ve#Z#m_rQu`%S<Wlc-E^^MSmbZgONkUcT#R~332
za4fNjOF^Ej_!YDySp2kyKQTUov!n4P!rRHM1zdVI3tiq2ml@=Hhu(PK2&_K=R<+Z2
zndw={-a)n1cNy_XkC^*k;N6(<ip@!mSLllHUd|{wzK%SNz}H2&lc{`xlJ}0^AKH+-
zm+wDx=NCpg84KAcNnZTiQ=Ctf^o<i|^9|+W$V6u&cjyyVQYVmZX7F>|=aHXode;ux
zp?|%>FPVtyt8Xw1g6O{%eHJf#{LXnJtYL17L3?UPeC#+f$ZapFmv#0|XFWnXUx@O;
zMa!M{b@$z5dhVuv)pI+txbG&rr{&IyZrKE~?f$2ITX2@XeJ-tUG3Kk=xBJf0H@9Dl
z{$KR#L#cjUcE*04-XkSht}&=h!Pv>1z1P8gewS#l8GO6=PoMiG%=tM@zL5sTLhvT-
z(9|AF#?Onq@j?rV71f+YhBz^>HvS*^+@woOuk%s14BpYk_%ZGWeDDn)`cekpXE0{s
zbvAw=A9H*V9<``xS$7|?Scl2;ZmEyVw|6}91?fHerO5fdsHv>mo$C&7BlfV5UyNU4
zC`HS$E5h4mvHuTR9yrr`-<<GX-Y?|6%X@Tn{p+H4<p!A!oYPY@|HC`)8{wSNkvZ^a
z$*lt370`$7JHOcN)*+jGC3N^h%7viAU&BWv!=9rL-FH@Y=i%FxOg=qll0J6#`!k)N
zqxh~^Cbsvp<d7$yigXgm9Og)`%{=MDrh3R@HU{N~0AI?r!oBncViZ`H0498N8~dok
zuR0{>sADuAjU%(ho|j|LizTy8TnhZDwlxN7+qIWuZ;!!kOniMVzVW$X4>|V_w~ocF
z`uIQXpO5uV^^Y?u|I_~cnfL#j{yqCY>7PAsO#gPAp?~T0BO1AdcqH+>={33dL#)VL
z*15iZDsWJI?1#e-kmr2b{)1V0?b6p3lOVni9nbw7ItF&@f&19^x{>ntqK}JaG%n(O
zq9HeD^HE~e?md~<HNtom(oWxxzKVaKaDV;pe>A-HbH8`;K<xR^oAB)<pEhf)nd#rV
zw5O{R|4baY<bI_=wm39Ij%j>>*a0_{WOzr4C*eytVRlrVu=sg)RL$bQZQ}5ey5er;
z?OUD&#Zl8!d}0zXrp}<F?qvO^^Y6<>Jc^#|(wF9(yU!}&%|5WI--90<T0fMeb(1*s
z2sAx+Be8(N)%T8cLgPNszf0GL#?tkkOSHzE?fCCb<1DqtTxx}ni!U@(gyp;F|A^Tb
z$~6_7uj1@Y?*}%;7lZG*%YF^*&BEu;+|oF0p{#GRsU$~-6aQ`Oh2grg#HRWi=eA2H
z^B0nr20j~74AdQbQ-eM?g}9$8)*HO6?`2!@`qoJiV$1X0|GqNfEty|x?-#TOu2;O_
zC(jf(e`mlOcKT^Ce~EcJ^q|>s=s}C0ho6^U2EWW5v4dF)V)W<72U9Ur*q#R6<Wumm
zB6w91F<^@Sig`@WTyIf(BH@K^TkJ<;{dR!0oGY0_tTSxQxu|k$nXeLBJo1qebP(1E
zS$~LU7{x_qbhQ!#(LfADoLI3EtEnQLelm#dN-xuzxT{jQM0cDgKV#Kv$r$wj<@_fS
zb2-1IeA%jHt7;Q>RV+pSQEu#dVu1p*RnIqyT`yg}dZdgt^=)I*vQ>>HFE>b>MhL#O
zlo$?`#TPhF`i>8oDtiX2tx|qW{CPbq@u5REJNr0?X3xL*+kJ)XF#(p4Lq|b}j$GU~
zrEvcd;+CYZ=aciA^VkZU7&-bYT;zevJox@ck*UY9*)^AU-np{-Q@x2zJMWy+9rqIZ
zkR5Qw@>6^(c^Jed)fk$@mPh1YHqeNCt%kY`bt%@vjU!Or((!Qw!IRk)?@c6bZ;BO<
z{f>Q&*!Ho5)T8Tn(2t27sD{^6+qt62w{DGk!!u*^!ZVN&qO%3W?Nlu$_YQG<(aAH~
z=f3^GLBU`nkHGKz=Be-<bkB?U$=|0sOy@l8o6Q}i;BOCkSB1AIe8%m+bil9E@7-76
zt00f_Ch}Yf7X{!!I1nuh4_^l-?@c7uZb~3NjXw7?4}y2vagBF9`N-TkpgB>+`(|>h
zDfY{O!N>gMnR9O{!t9A~?5NKlJhh4SAjdY99(e_Gat8W720Lpi#5;o1TY*pT^g$QZ
z%j>)G(e}J`0Q!I~`Z+hHdbz(FqOMSEkm`usz&vM96L4=(e4gZ;c$)h0f&a@o4C{X4
zL7l{;|Nc&U#~<$r>^QW#ddHeO&5j4|v34}C_U!omoi#kK<@q9>dwHJ0bLJ*v?$8)G
z7vEByzoJgf^UtCyxisVA=|$oL(sAfMe~#y|Ex`L7{H?;pPq;s5;?26>&He98e02&(
zw}Yd%RGxm6aId|Wx?jru`1Zc9at|+#Xbk?OdspTk8Y}a$r$%Ld)Z)CF;QX*ZS`lUn
zhCSGNuZ1-BNgn6Y>ri=`4l%Aiw~T!GV|9sCy{0l;UCP-V)T_DYmS2Hv`Y`=T>Jt`u
zkWKg)c827KD-WdO^fPCXUA;xJld{P-akD3aPF#-7y*{{YQrJ3i=mq!%bgOffm0#Y3
zKS^1=%j4Zj^jGa$YGC~l-JZSf+P@#F3raR|R>{5pHn%;7e-d8ejOp7qlULN0NAQMp
zJuARCAH#Mzxh6o2bJC~m1vbHFIp;x44tGO?E*$gH;CP$-597=3psZx*zk>(03r*$r
zIrpB(*T6Zs1<G|k7IS{R=}h)@EB0ElubK2UqYL{HJLu;Tw{FRO7nZ}Ev#7JI9;cl_
z=;knIGRl9U^K<nr=UblkW1!n4V^NIuD?9B8e>a0$&U8!3RB~T{yW9Saxuo1GtlK;J
zFbdf#wmLYXcR8s!!MQ)2{h)d2+8)XEVd>I$^`6=!KfLb0$Gz6=#?nq@k|uqX;k{RK
zJ~gycJgR@BY@?*#Wqt4)f%u;i?A!W=mGYM)Z5-#Ej8s3o^rO+3U0cv=l76F~MH)=9
zPr{ermak$Z&j#{5ky83MkXMc0+RR(iWbcs9@W9=H9V*wns(Q!fCbQ!o@3uIb%(G)n
zQw`^n)p9=BBA$DBp273X9nVvTc*9qaap`^>2Osb&**~A_Jp~T(x-J0+YESaD6_^8z
zwI7(hZ&feA&aVg{`(^^i`+%XC_OGP<t7yN9_Gi-m`)I$I_OGP<t7yN9_N&m})Yky?
zvUH;rPxgCv#Kp7v9YaPm2GekDGyj`U<J!e}`qkBsr3=fhc^h9wQt$I%*Atr$J)^TQ
zm-w-+y>N-6_dD|rzxt7Pw66;Lu@8L&KUhz3#`*Vfjr*BfHniqveX0-sD!O`q>RahC
z&rYyc+whne->Gi+JhsuauCi2_5Iz{eX)#9fFEB^SU47Zrvw4?`ez8mQpBy6v&4xWc
z$eZzXPD$0Nb@3qWjm=+idhIx=|0etY4!Agmuje`9xGdoF`G}!jVjb}zuha3TzM51&
z>z#foeiGf4`zU>KXmQjZlbkbxv0nJ1UX@Y5UrBuv!me=MrEqCjb4a%{Tsylh$DFqX
z9pM`0rOLOhD!$nV9*7_6sV;lA2p?tcQhZ((KCe-EjZC=xC#Rfvz2Aci^+UL~f#La^
zO}=O<y>Gftc+WeKg}?iG_RGHN%_8Q@I6g?xh;THIcYBn#wY$bycX}Hcw6f$w;a#3W
zcno_e_~8rqwLiLmeDmhWT(hxb4|^(r?Z`?`YeyCK)wAa79R~iRv(=&DUk@ProqYn(
zjER0I{BVtQNGt3Kg?b04cq98?No;xroDEK?iM$GZYCYUN=STCPG4%H%>%cKQqdZ9a
zvuD{6KjTD>y@>pzj=aFXfgaWqgg)7fx6#kq+jHou;=RqlHV7Q5tIc<%V<$oz<<dFV
zk^45E`XLHp+>mF$OkXyJ@GYp`Jn9UwCgh<`&OYyIamF`OHh(#>JexAX*OTD#y%hdW
zuKBiuPsImF=j>z7CC_TFiO2A}biylS=fo~C@z@;fo6ES?SYh8<FMAa%#U<74;LM^R
zu@-$^c$}$vsZaBTeRCzD_l>wQc%s9TYhHHtZ&mTFVh%^kBgdtOs7~?j7~e}bviLrR
zk52d<_06HXY3*C~$!VT(`b?{TmA+4XTRoJMzCW=x(!%{xbZ*C%@E9k)$<1pa`&MIa
zLRUKbdnYm0=``rjPVg$$i>)E(bjc@Aof@+jJe_|fX_CEm*!jxsQO~?oJ}b%B4-gkq
zfS+9Z(=Xwkd?4XYVhkEioJ#Hw0?)}jNQGVd@XK>Hmg57EEw-Eg;$P7$6Zy>q{P?N)
zoNlw{F|L*94a&3oD)=(|7wm?y_5;7<<H<EY8jVvK<*^Q|$vim&k7q{?Z_bIldJ|(a
z6Q5QJ_C!`<(+uF9&c4{#IuCuwjKnfRxv}PRFFv}@3Ll-r8Jf%~<Ln2V)}^&Y#lorY
zL1Oyrxray1okJbP8_8*mpUB7F+TxhCB1&9w4!`23trbSse`UWdaUOlk$t!vZYZKE)
zDlKx3_}_Y9LmxC~m`}e4o|lN#aO<|&NA#n-k$;iSJ{f$9kNWc9ed|nQI&m9<c{}jA
za0_0+Udo&=1Xk_+HMA+eN#k@ge;qJ?9hgh;Ei?nK1-zX++sQM*=VN{E8tfwVh4=_(
z@36@uwu5i=oxZQZ{uCXlZXdZUB$tb^O@W*Jx-*7ah{x!6asd@|E!KFWOQw&j)(TIq
zdC{3K#jjaTJMel3XPwwqFR@<f#NvTNi}gMiUoAP{>(Vj!>iGg?#pBWG>a-vFCy&Xm
zl;`aA^Ei2_lfLy`!0|TaqR@(4UtiW({1<_Lox8J|G0;4Wa&C>z;qtOiNPSGwa8Xw-
zb>%_B@SFk%e&liIge3eH_ip`r$cH$7d{@K2bQXsT?_+0y_sg`gbAsrssOxdH0}aI#
zx9iO3h2a_1iA^Owb6)>)(*uuOaRatx>@wtK)Zb40X+iqCH%3ms`^C6-lO)4Z-$}O?
zZENju{2Vjc#2cgcooyV`+xzV6r|Z04b<*cK%&)oJ7ch4}!CXGhTwcJnRPWLKNB3E(
z4RCLeDRWMut3GHVtW}TES6v?F$VSe97oY1F4@RbVe4Y15HgYc5esZcj`Y)x>A9G<Z
za<uw;HI&`+Q~*B_=h0meK%Pi0r~4)Jo;ASkqz?G=h|RuQ*(|ENZ>0(UWU*tL^>iu+
z0ltHv<4;cN(b&vync79pJSLuRlbzsvTW7pJ9NrONO<C`OfqC8&JXKKPyz9Iw{B7R3
zeM-N&azV1-ZQ_HUnrbij46-oiT$B6cB>Vnr@j>in><{Bd;%tfugI@{dwq5i>5$g}R
z{4akp+mHtedzm$Te2-my;Pn{!B4WTC^w>SGko%ka_EXT>E5v^UDKEZcJsXJM3x7wR
z?<~9Jj#UO6w9Y4Y%G%D&dhh*a0G-m)&iZIiXoB5Sg)Y<r&rtlqAnQ;q$nJr5Z{#)V
zrOonzcEuUxbqyl#0@w+XU7{mbPU&4e`Ibv)YqzI)ShB2UzRC5Yhc&Z~*p4pS>RDA8
zn}bfkPx!OQ=jx1~Y%Azjb)p~eF4X%vG!>c*kHx1ZnA#S?!7$p3!BtC+z4}G;K9yHl
zauXI5&oC=4KDDLpiK*AF4joJ8dDdJ|8No*GK5Xv{V*QdiG~akw@OzW-e%?UO@y1MK
zqE+6P7wGxxW59A7u|dnTh>^&S3~b4X^lb*u+f7d=Yx0Bb6F8?Rt1Iiop+|lSohB@E
z<OS#==c=0c`#E#=D19ID&gwcJ-o5X`H9e)smgt8lcbt3@_-Pb-J`MdU+VPPEL32^X
zFTnLKPj-8hvnKa`8$T59=vaFL=LSTpYkExKEfdVL2M$)V#udGq{})D!?6PP_b=kjn
zkVE=Wd#b5yLv|f98AGq*{|w&0Y-BoT7a#IW8iIb8e3gBE(HF12znF7Jql|;v4VkGG
zcafVY_75Lf;De5h#h$Nsi!1g*n>Kh3B3t$m>n2+;N#j-FSN?foWbo4_{^mjUu-|3k
zZ#-<`e|?N|dTsV<f7*_}c9+dFn`fNs^v~Bv-aKgch*vvv2K|@u!?!`d<*SQTgyDHd
zJmjd?I(6(e&3E#k@IFQy6z_(j7hxmi?CUU(cxM`NXz%@gApS|_^}mcH=AJm{4Znw<
zxd^%zTu1kFJ}UC{9dAMT@y&M62r!OpXKxj7zR8~c*S>ffUilY8U4i)YTkh-rMiGAO
z_G==~ed5QPkKSd_muGan;+<Z80v?vkQCC<l`k4$b2!b#5OL3DU^i6BwNB64@`u@e!
zeSdQRI}h2aUohX%J944*<XH^Eoblu_D>xHmwGSU_5Po3RX51`3WFw=9Q(9povt>)y
zAAtvdlDT?|L2s3Qnq2cbc3Um$DT|=btD(=u_+~Pkct107U(sIrW!Us|<Emiy=l`0R
z`!YC-fv5Mt*Ku!Q`7H1i+dMHc#5f)WM@z2%K>L|+<ON3?$w#}&XDYu5pE2Ho>k`@a
za_0DwFLCzUAUJmL)>eIR06YtCv8CjXT=LV+#Mwoj=eh9q9(df1Z0N*ZedV$noU=lX
zg1ZsM=?5D3Unc2t53=v8?}HEAgspo#yP|I~`Zn{x98c`@!6&1fF)!Lo(c@btWR0cA
z$Igwo^jMmr$8=hJ?XizI^f*Yr9D1B|wdk?Oa8|BxEZU46CKf$~?@NL0S?K>LID3(~
zeci=1@xjuGkq~*!3r)uU*d^yg3h_z5xzF@W+it?~$0kK?v!>x&o7tr~@%ulqe}}$k
zF5F@jwhxwGAIZ9mTvw0X5P5SSe7n@_EPxLV;lmq&m%MYEiN_|G1IiP(`kdc&4BQ0W
z{>1dGJ?H=7?#<()uI~N+Gc(x;TOdFXkjx|~5VTg=U7E=R6~v`rYQ1X9B+&|_wxx7I
zK{E+hm*_16w0s-9W<jeHv_*y1+_sklti{IO%i_}7d+Q`@f!J0=F+pU0&(~+>1Cuz3
zOYi-Cmp|q)+vjZW^WM(;yw3YHRUgV65W4B-SsRYz4hlW;bF-lff1;yoVCWHI<R{QG
zKkit*_ayZ1!gtTg8dD|zww74LBkY;H&z;HJoMSo;gL!Rb9>dU(d(Fz^Gm4hqaz*nS
z{q<Mg#^cD~AI6%gkrd8SLWgW{e;UvFHr7wjL;Q!n1us?zej+gs#><CfBm90Z@*)0y
zgBWT#a(^(gbr-R@*1>Z)!#cd-Q0CR4a7tFyk=$!TCmE}ykCAQe>u$08SuoI1)lqg$
z=pbYEOrfu7<oCw!^fRZ2(4BWk=MEdiJ%MJ}O|CIjTCYT$qdE@j%mRD`A8!?p4a0v(
zC3o0h&UA$5(w8e`f0A0f1IhbNy&m+cV+#L4hc7_~(PbayB$K0|$xW`TmPGB$fxdP-
zsSlZu+8IF`(!++>gXFyeU$E)XYi4@E*@dr%??;ZDE<J3{%9t*BZ+dj#OvND{aSd;I
zAl8;JfF)YXU_;m=-{QxY51^}^8O|y{{;S*mJjgo}JsbUfDEgewhG$AfcxSd@4{jS_
zg4m6!diJ#(18!Yo`~|<SBo~A8>)ti-I=2;`$iXJpF+Y-D$*tt~LHZFVkF4Xk2PED;
z#K~iRKE4ThQ!*$!VauguAHGr87=Ar<S~Gk}tZtX$8l}c%#V8L5i-0eCD6@a4^MV1P
zu1Nz!(&hUvwtN!nE@6{I{ug{q<&bF_LLO53cqekS580DW7VqpDmQ{5qb8hIsBy<3}
zc|CNq_4Ci*g`csueFnbSI=g`V#UXhU)BaTLPTN~O@!qpGOiX5NxGHnQd54$pbz~Wf
zpN#28UZVllJ)!;JryS}ifuAm9jz9N`30=fIKOQi_Z6>3`fuAD2IwE;S-@ecIMoE7l
z^Rl5g4IEV^eNk`;c#*;VLx&irViY(2N3zA+hZqm~YL{7t{uw+s<h{gnt?2isYSB*m
z<*t5vs~`FKSsU8F$z3(*1C95lpJ#6P5jx>A=1BMYD4rL&&imn;V@F<_&gWLJzM`9S
zjA(nLl)hm<+smT%d_QZ{gV589|G~OGuT9TaaTWsq)9#DtY3PePZF}`!k#o`eNU67L
zRQvM1H<4c|oL04`>9VKax!8<q32gq)cbfLLztdi(7>aj;`j~vOaIIm@Yz+59kT>6B
zOv|Onn)*GMJ~q|kqwGty<e|wClZX0&Gqd<lyds}uJNnsplY)}j{hRuQF8Bi28Dw++
zra7U{_wn30anBv$Imz}{Taj(~`6em&9RJ(=5m|Z0XN>xbPA~we#DJ45JURJw^W-}!
z7SYKbgM7v=S8|@^H$va-$f|RQVc&Q}!>?;A=bv*wn1h&ap!WcAhQL7XZdo|`dVIP5
zmFIb9tQ?#?dW>=P&p{sL3x(m6k?f7XH#=?myMx%5ht`p~<ZH%eoumEKm9F54QdjWc
zH|K=<p%>D5g`tW3oZEir<&M9=o&&_=SPx^TM>f2h%3dLQ6=%D#)ioyX{lU_2BN~p3
z9~3IZ7u^pHr-C6oGXC0-;hbYSZR_`q%F%*9qg=$64jVxJA#k2<Y`FCuou*jAEAZ>O
zFBEpU&z{xTG{8&=$nFftn7-JlcKQ(`?ZuB-8TDiGQ#pI8{4I?0HukD6*Phl6mvz68
z)^Xu4YwXdn{TA6(-$ajt$XQ$FV9Qt9kDk_e?XiX#tHvH-tQxa5UTAdqdUEK1+d9IS
z52J(IGOr5}ubEO$TvB(j`dMc!rvAg&<x3bhG0-e~PJCue|67KQ>3`#~$kr*u_%$z@
zlY7xG>Q6P#idN6_9&z^T_`r2mo=uy@84p&g&R_DM_~HkuH*Q|*smIGp=Rl17K*k1*
zgJJ6Ra;8YX%NGk!&QJep>92|NCHY=t$?B!iwW|4?cbfP@{P8Gd-1N(Rc2eU{_}q#-
zx$*hkti!A_F<;$5`%RJweD!>Mb%&{_&P|3!$eo|(1LU$$9QfYa<lwloyj|ox&_4Vw
z<4+Dg&K+s^(b2U7cds4Zloq=3vdH?wn`VcOJdqaqBe}30%&ql&(}3Vt`R~XRvqRrk
ze_T`Z@*P<n=!Bul2}hovJpW%KQ{Df<TIH{)(`%h)4<+wR<9E%-Y3@4o#9OJ;!@i7Q
zfA)~}r}(<YDfUd?!_dURIP)FkuI(TPC+p3?jm4eNY-<O1t=*2T9gkh~dx$w)J)WF@
z-mZLyqr;Gw#jwuP87|S-{S_a+f$92J=h&e?f{!g4y>)rlp^c{T$P?)y|9|4^J#kg&
z5PtAU_<KL}A+E8@Goi3c{-XQ|w>4*+LCCn}gyzO@rZgLx>U$k+VCS~9GRJ`hJ_}b%
zOtL6YbIr^!d3M897XEiiU?b~AeUI}YJe;2hkDAq(ZBonTD2|uz>oSaGOcH+gC9YTX
zoiofsIHT5R^IiaXG=n}rUGrd%Wo%eum>s%{JP(TFd!U;MjM?n~Z>)L-GB5GG;fmvp
za>n5z?teGW7-8bgfZ&l!qw~qx@Mt;cl}sDeuP3fQe1vrh`f>|?2J7Sb8{^8UpLXBh
zeKXq6i~lP!Mc8}`=W;=MXw0|9>_)Dw{o4Kb(ucM&H{%C{YJX?e9opt?>{xr1&e|_I
zGXCmNEA%JNLxU#+9}0OOj<;v_0BcYC6`LL%Ytut^9qpX4x9d>(Fg&KY(_F90@Sae-
zQ@m3QPotmaOYi!ix#Px?&SrFHjmu%33A5`yg5J6K7GKw4#@obr<ok_*){@CUYLwoR
zck<746tFI`bQ8M4ra=QVsz{B>Y!mU3_<2!39Psu&WV&*6R8D(7qq!?2FN*lolD}|z
zP&8h^oUMSSjBUv<_RG9r8P^RBj6xR=IkZ;1-Y<mB-uso~r>xlOktgPa4y`3_fPNlN
zOz14=*a%if{B|ie<_TwPEb!oa>CUcqM<q3eJ0e@uR%NPLCw{w`_Uv(qFT?#aEPi+Q
zH&ZQo)C`=d=WpP-R_f_;rRKG*01JeCdUzc|4;&faFZAds<_I}CGJZ}-_ddqg8TgPm
zU7QSg$yF`-Y3!nr3HJ-Cj%@KP<-?Sh+%&aDm`||r=#N_LoDbjHb#+ek&TLCRxH|mo
zFUrr?97|W+N7-iT^`J9r_`HM9rF?#z&xc%`v5E2b`@Bau`(FQ-NKx4}<E=VHH~nV#
zt@vSYr(Nf_Df>D!Ze>pYh@MDBZysQMC*8Zsog8#4Uc=so_65VaNx?RL_k~k}Pj!Jq
z=5s5*`TVJtPkoA9ztSUN@XZ!|H%94uivEa3ZhQ{$j_Bj3UeQOi2{6A=U7Z?y^^z!^
zeoVjqh^<q9&f(qePfvd2T)|eGCa+V5J-*d?R{MPF|1N$@;<r_NKY$O#9+~h{*qyZC
zzsA~H9xGSJGukVPe||sTwRULbrE;ZV@B~fCj5j5iQyiH8_wS$a=i+@Yeg1Iy^QZTm
zv>zn=dFx6OtUs4^F|pLQ*sC*OgDdYW=(^W&#hs6*)oxf|k~?yQOOszt?D|1xW>tS=
z>aeSSOIfnnZOMO_JnuZ$MoiTU4_WaX_@j`RcmWvlubF-i-siCLX;+nUA6Y5i_nVZe
zcH^qz9*vI5%GoE{SUVJOHp7vWHod@+F-^G;eV*ATUP6EAvkTr^OWRAGX)S9{Mz$LC
zM>Hn8)7qEuJJVa5$<e!t^)P3-TNXIdIwl8JRZrI4EYPf+{pK+E1eGz!`-jV;<@DW4
zUH12iFZsF(h~EVM30q>wxkr7hfgYUbNPTbtvJqG_=R|ls_eoM`Px?A%`%dSUB!0ik
z_n(DbF0T(vHvR(kbtmhm7y13g$FL8xd|fZ_dkJd-Vu3C9fxjnTdzFtp0G~;&;@*;7
zj~mKg>g#%3It*HEGn`FlzeZ<g3OGAsJ=1wb*X`KcI-bclsT~`UUG8qPXi#TNmxI`7
z(ky3}bGEZ<2j4wAueh_>jGXS^-Qyi{kz;4douXxQ{~&s%D4R8`ezWnxd>*R*H9p1U
z7jXX5&s;Oc%{|BXB>kgbn;&P4NsRHQ^h^EI7`JyDV^Y-%Jhv(~##ON~mYbvw<t0;p
zo%B70zHg-8KKffvzYXt(e!J<n`t<G>6sxhYFPpJP*1kuncVN(ip3)cwE8ll)4dS@b
z*HwqVB%9zY@(E*KWsL#8)?ICyr#6?f<yPX%<Trn?hJEG&`IfY!{T{_+azq#QR_yan
zx{LR!v(Yo0M~Y&BqI)YQh8>-Se^HE%$z>l&{VNSz77P&AJ<NHb)8}>B^U(gCSN=p`
zL=0o#$ZICgT7mIw2=5~<gU<I*NBJq&lAX}UV=fJrjGeW2=^!h<GIJl#<jgLa;hDX3
z27b)UI@)v^GgEDf4u7D%9Lkj5Gv;~&rmK*<-d(lXGfKa4<6i6YW<GzlDEhgH&)0r2
z`gs?hzi@T*bC}Pcn@w!KbcXZo>>08>Hf^K&r6Eqgxbn2GeFJ{2_TX7hbLLWKkWGWm
z6GjTn?z*K$b4xmtsDCK`mp$2Zbj@ZH^X0v3CQQF{IX=TfX6w1c&%(~sp|!7*GZvpj
z@|<l(EOvYudOU}Zu;H4S7o(qDX7o_<zUO(Y+#QlVvn0ois`6!2RC|7o{)RU$N5-VH
zoXBJnH0p;RQ&8sboaHiAKJ48pULML6l({>%A-i+nYjj&z_*CjN!+BO=?A)x!+>Yqo
z5E{RJmz@p>ryBe0kEBk^rJTN(QeQ5-?8jHvbHZ0xZG}^bpEx^o7Qg2h(52U@f1Z4A
z*S7M0Pj4$ve;WHjP7+~O0(*-2tg*?DDPVj#h1~VPe>olCE;5ILh0_^Day4x*T{%nn
zoj&VX_aydT_}%cjobvS<7XF62ax1G-kPGfMuc}*%Uu{x4+;dIQFRn0C>RrP^zqr}a
zSj+mf_M4_FOdR$D*4B@)mOa6|;uFpHT@t1DkI?;r3Et2R)W0=lcvS`Yk+zd3JIkb3
zDHq-i89%NrPBl}GL&uTC>9;wvEFDkma9F@8*&SUKaGI{IB_<dlUmgc*ingS9L*H=?
ztIAKySkg*fMel#`+_`3}ceJm|&wfSx^G~w(qc}w42s1@7<YTOT3K+BG-wPd_#Ca?o
zLI1ehnKPWo31j!9HB}qpMPKbawcfkK(dGRY=C}o&W6r+F-I8+WE#Ed<w@Lova38`4
z=&bFB%U`o>kyG>SM`i;HIz5b|VBsa5;Nz?_)?RSd?pbEbFxvIPui^X&(>3<(V5%*?
zzxs-<+S~D!B?DhC?5ZVRWqp46@~&TJrdu)M6U1<87sP)5R$*5ov9>N^$)e+P?A_I}
zCh&aI8~RlT`4u-5bS;ed_g?RER1N>9=QjlITDWZMa?@2lIAe)-968d7S=13Tjbs*-
z8GQSCVx~S~w!G${=a(!ZmR>pD*Hv8ZU9(O3u<-@XVV;?TqqXS9iC`x@85z6tId6a9
zKJtQ2XYA~~u4HVA6((gozo8ai*8#8oXuPxQ-s_V%lR05p1#(IZ2;1tA&ECR3r}kyZ
zX;o8QPwZ6d8`eg9&c!dkiP&i10%un}dZ2Q$lf5(3P|qD2<yjd^YU$6DW5LDu&sdU{
z&by2EiTa+j<N@~7^gV!#*L8TI(HQVQXEmS`=M&>yUwQqkMvbH3bI~!O56T?OL*-;2
zZISEa0&I5-dnozFmtp^~X8tVpXf9`L9?p%{7*pn@{u1V#&r96oJAIsSxzC|(`e(9D
zk?g+uH$m_8=Sk?M{-yC>xhrYOM4e6TFM1?b`QiDQrQ-RsI@*baG!pyNzQ=RyLH#=O
zs!-$M$kak;yDDIUH$%fxblptGL;Q?;HHJ6r(^`*y#rIQv6!uSfTl{X?q+ed{zDYx-
z)UQSSr|}h@jBN2=jV#dz>GtyMj3sVzCY0wg4({14ADywJnf>NE=Arcj&*Bd_iPOL*
zM;F~eY?v`vG8LOw)$<4H(Y-^~o<DxqGJPL|{N956qAPMw`uEOaJWl9|o!WCNyy0bB
zKK!m($Vy4t^BeZVAFKG^#l62eV=@b#E``T#g|{?Mh0IGNv#>01t|_{lnBC*>FRyvq
z;NQc{Lm~X@S;4(I_)oQqy7O<Ss5}1_z`xNkII0TpWqt7M<?w7GKHZ2OsYe$IA7k_C
z&rg7(i1DfqUIlm9P;$1}TAPkOOfifRxei=t<%4>ab%;#^A2d+x(lE{vXmEukA1PIS
z^ZW+<pqXud%%3KD*tFP@fEKmT!e!H9F>AOuIqs+LF*;;pYurn_)8QrNFJ6vqI(Qks
zfexZUGqUPtUV6%_=pY)17B(I3fDZB%YvGjw=;4JH$lV^VKS~S9egOWs9~uN0t9VDh
zdCNSVUYqyeQSn|eai2<_k&K8hYF}sV2FCG;(Q`v}`&_}tF1b2nI7hqE5VyTgck=LF
zWxDq9UJC}HiM2=VN_>qUivGT5z3e&Y+*1kdpF>;X=jIW_d*k>ygirAiezxcDix*ls
zokmbr<0D@vd7j`KYYYxch85SBtQY)eR9=+JPdu=Iz5c^s>jLnZcs{_q3l||8Xl$0Q
zCnotgd-xj_yJ8Hi39NWsm@{Su>})>1kK&Vj->f^?>$zX&@%yd~seZN73id|r_*MtF
zH#xIm&52X%JD{_4%}cLyZy@uqpYNh$?VFLQmLHC-5e-?NY<>}2Bf9-Npa1=uE4qHi
z`yuSi6U1^VMB87bgdW?F8mfcV&3vze);5h>^*u&s%}pJ##9HWm0D4RB1dd0FHvZ}g
z%3m3J;=b9T2^U9o&;;ltdhMit(v5TUF8b|>($8@`vh`o-^A7q_nsx<x&pOAy#79i3
z1iaW&(EFtsXLxwRl$cJ}-fK$_o&N8UEe}(d{J-Kx;b)SnYS)`Ca5h=eC0_J<DLT}r
zIYr-R8%LSH0GtB)-H(3v&tZ)Puei~D_-997$_GyeAJjvC@qumEPRl#|B3}Ok^-G7E
z-I1bOXy416uLC=2_>4@oJVqbxMaEv+5}EoZ#<L%p`Y+zy7tjy*M0FR#D;~;8A36A5
zfo{y<dja1)qn(PyZuUHMW!G8k^Ik%Gk{N%B_&%z4{PcsoG+FXFa()@-bHHyF@5$$|
z{SWw{k+^S{{0-X=fe)U;-w-xY{>HC~9m*H+-{1{BdCI@{Qv7GIn|Y)0HGYLY+BPU-
zNf;kO_T@|X8pWAWUqiq7v%HMS4COTsIxd;RZw2V6+Izff%84=g!S~45$d36MhsiT-
z@HLd%N4|!1)F60Sy3_9hBL_Whj_GS3bh<W1r>H+Mig@XuDqBCvcb-MeC|*~~uRt$s
z-8O<g<5#rPpKa+GOBUi+Y;$6_@j17pW3Tnjch6Mr4z&E!%#Jj8@Ylp$8;OfQhs`d5
z_Sx9I;>)l}@|R3<na<7mV!lNozC}))Z_$^3A^)YPe-QvTqkj7FzuNg<{hY0L^%MU>
z{hSRBcAGP4$>9s2wRjW%g4h=MN#tK-c053T`kJ>2@H++2u!OR#hpRlSg%po!gCF+6
zn~D64X6lrmL2NhLKl<5j^(Vvfb8=%ohWa5a+qSXz7#d3sG$(ekZ4~-G4}VQMxrdK2
z5t+97!aSdrG3rqaO|-Us44tu4y@otis<)NB0w3cL4Q%`2mHpTdvmdv!FaCY%{0ugv
zlJ=#0q)P*xmM&er>WnU39j8lIOP6jW4vs!uEqy9o`m@Z`&`-0|K9w%rNPJxSblXt$
zsr<3Is^?1TnH_owpHgEF;M?sykI(Q(9nXlrq@&z#M{QNH#SadP9~1`{y(>7U8gBz1
zz>oe2y;Ch+vf4<eG4?w|Yk01COmxm<fBfhi*&p4*>W$est#xGQr1N5SZncq}gC3>G
zu7MV|oof<iuDhLEEj!oF-D;})amKIye$>{DX?UG=8@a6L6LLz9GTFKUz8B!@OOJ@h
z=Ile~$MncT)<DuR`RJdD|LQKE+uw|A5$*+>v%06v$pO#ulG=e^0|z2SKV{u&)q|WD
z{5evT!hf_qzjA$Ks=b~lY2>ax<o<8maTiGShAK0?jlUYnn9l2*{>Wf&*DVi6ww$1x
z{AKAjo1c60M<3f1*}6bB1wTEE9h0xrTCaNpqW+ZV{IC44`aJmWm(w4uaaz|zihf5Q
zBoD}`Yy)wp=zJ<>pYKK{SyKsHo<o@%Sbuqz7j%szHk{+S;?6P9ROiFINzZS<7wPaV
zCC?c&y6JtNwO6g**R_#TjWut{x9JaljPyJ6P_#0I-2Rcl(<3Xfg0%f!p$X2SzXAF}
zJiMiXJcCY?{NO5Lg%0_f{72l4cxJL<axGr@f1JH2N%QS3B(CoR7hO+|HJ{18Xd$!=
zyE~_=ufHa*nEHAWJEa_3p4c9eJG$>{@t%0j!3%y{9l!7UCYZ%AzqKhYZw3W@#NmDH
z@#;4d7#!R+HM0KZ4~W|nyLb${`LFo8kD)*06P(g~p#L1(IH!P4X!^IvRBZBUPfRCR
z{wUuK>wJ~<(7xqI=^5;;`Xpb~`W?T@DvPd=-)jAaZzaD<KI~&FuMIW*Dzf!3b14}N
zqepk{iWG%XlIG<nvv%jRVjse_*z4YX^i_8vZlvvp_`DInQ8FK-4*T~X#QmPncnV|d
zWIsCnC2*VeI^jv$6VI1xZhw46c4oojmH#WU<!Q<W7?1eyH!*o|mPe*epe?Oal45?A
z{9vtDYgnf$2H~a*pDkZYWh)+y($f2A@3j0!=%}>-dG0KEE&fepY8EnJjY~HBhmoS+
z(|4_JbY{?^5jyKK(I}>eM8BITWB)g;$A3TPKj|ya>zq&IvuskqG3W(v+cv3~-=#0`
zN2l68LfcD`E%Fmi*fNYxmkgJ)x7+++r06mFBiXj~1p6XZ9s3@LO#K)BQ~kAZHZP3L
z>x~!xQTkOnId6$fSiB#M6s=SHF~0Gla~IKfn{Q_GUG!Z5-!wl&9xi+$tz8Qk>-QOh
zrLSURUBFoDs<>~C`m8d{iHGmHTTb-a{$OP4+kD1%?IzP6;+#3reb3eG7X<G_X4yAe
zUFsghURkY`*Fmv)=>@Gz6_ZbTC-zKuP*CkPV~2EBQMuS;Ka+P}ap&dWFzo$+_<eu^
z=3Hwndk^41SNGVs%Cpz7+BZdKI-=)Hee5~<m=o*w`?<rhzp?gLu804Zvd8Er4x0S}
zcl|;OCu<EqId4m#v)UlWk514YP4pb;y0=fQKdF9l{!rx%aZdc|-F}`|IjtS4ct-!R
zzTT=j+>{sX%;dlxojI)k8+SAI_pu+QHJjqfoPSR;Aw7G5=hCP<oaybllX_H6V~T%S
z<5(RXpGSQoPO3iYJc#xJUide&F2G**YtZ4fH+)^n;k31K%<jGPsoXiD!_S@)IbL=v
zR$5EEojy1E!M1+q9p~->>QVkn_4!%qkv*Z0MVZ)Lzpu!;SJ44qSvd*8I{4^&Jl28p
z0MEQcOgQ^Ib74U58RkMS@3qqL{&Rx$Pn}x7G}ez+;$c=FM-+D1eGA0(ttr+w{GX5X
zttzf>ie=k<gC9Rt-`GbkvdgNUqO;w<X8yC}7+Q<IIoqQ2(7Aj&E^YILB^NyR0QYXz
zGiTlYm(1|r_U)&#7I3$1`}pTV2eZlXp5+X+ake&`niLA(=X|>DhpwmhuTOgVU`_JV
zrgA}NYng0vMvEtjH76Je_Re;DP8RNUljq}YbZPiLA7u(DGmA2pKdpO;+Bl!PKg&n`
z1)=uwe|YjJ=a!5!`!%&I-jqz~bL-&jPJP$;SJt>Kt*Hf_`cLE69$YT@KjP)i8sE+<
ztu;yta^p=gZ{yoGCck^7^*JegU88t@$W_P%K7lQtsx#tp>{bp2i*L!jrM>VEWBIWQ
zsY`ho#Y1fixYtJGQe2k3I`7fwIU)Rksgj3)!)&$sq5NH0(kEx~chxZ`A6j{f9eK28
zon4S@gcpEgU@uAKTL+uQIjVE8w^6z#WfXaU>6_N7#1DhS1-Xk}vK~Fpb8Ix@pg(q-
z!Vx=YlX~!H0(<D!>Vj1ToyJYR8GQ8Gw|}z7e_q`?x$OmA<;u6p{ZC=;diAqMxbi*x
z&vc`;zm>zR4L?+M*?Gk3kg;Q<mD9j?Ixogw&WfIYligGwH6K^dKYLG9^QZo*4{A?q
z?Ogxh;KEp2@pBNbKQzCJmpa)yQJtzgzE07hBFSgfsrpst^$F_y!fZ1vQs~%i&+C5X
z?Zf3s>`gj?5%|cO+w9ofa{rkN|F_g!6olrXa4zTOa>0rgn&2ts|F>^LANDB2=)fj)
zDtS(3@;)88+hfU~<{aEaPTZV(tT~^>9%ppEb%t6P1l92$)TcG{!_ZK3Z1*t{--S8D
zNDLJn%G_+88Z6>mj^?)(zJph+9G~2`e5ZV;1=@!|$F$Lg`i9@M#Y>;Gc90)!&u>ru
zY-N69{Mlghr^>%WA8)0P@$;kp)^k3@$C&%-Z#WWp+kAdTaKb;(-&&nLOdwBv^>>D7
z%Diu+Y^l}9=$zjQ9riQd;zQBYE#AcTwjs;m3rr*9ozI+2@q$lo0$XIh=&35;d~aQn
zvCa+KG|*gxCz(cTe1Vz42y*y$_L2IUlUnRXZ*y{bjPOsq&M3gXe7JlTXAm6?r+J9;
zdbFG6<{U%80Q&YpWQz3}KN?#R{mec=>xsw|-!K!@fA(1i<@2fl>ts0Z@E_E{c=u?3
z=PlMt_Sp2U`IY?DK|kdpl)kg)c^`8s9&bY?oRpWYEUmpbDBUQX_`%;lsuNF-?=$Me
zBxJ?biOuxY#!J}#L_Dq_iYajH9_EEME6?t<$B;S8J5&9xUzy#hevc^fl1G8FmE22L
zLA<P%GbQ@$(Pz$-gqd?A|B(CDWrN(DLo}2hRm9#uYk=(cPpx;%<_r{ca{u~UYr>`O
zmPo1FI=>w$^zM$hoL%}}$6D8O-ikGmQcp_+9W0-AJMlQJccW*`byx53hE4A(U-Ma2
zmapj_8q77`J3a88YvIgg1!-nx{QNY<`mMe;#roY0e>KtXz{m9aC^*K?+;8Hb$Gi1=
zM8n-5({G(8)c7`n^QbR1;8jO7WI_K)oC62zl80Y9rFP|4I$_2xn@{RjF6fN6Jq3!t
zx|FA3`00Ev%Cm50zdf2S@E5KHoqtLhQ8n}LEB0PYKQ&K(?>J@MRmwTTEwwAZ+8Is}
zULmWYu+SVWb=OpD4v^dVBa$4QZCR1^zxW`s#p(y^`=xhfU*ARig4p~}#X7*X?-_A&
z<@{RL*`4VA)yAD4tX(;#b2$Fp^R#VJ&F*Y7y5lf%tF|Vu9Q(X6W2)ep#+%AVjP{m$
z*S63fH++db-a;Oes^y$tal6KLKC;mfoVkO21lQ<}2i}hq&4f?M7YS{?+F4h%f-`8G
z=NjPc3cil4vL;r0#m=)YnrzmNvfEuqENXe`Xs~hSq7R1hj{OQD-{QqJvG)?*hr`#p
z8}J7B`cK>ocr*6wJM>*;!<A<D=#0@-{?xDNPKMoqzn)rOlVYAhZ{W9PHLT!!?S1!<
zS2eKb2IlZj+$H#3==VeFeFOUStXuXjo_DR!!i^C#NG!+6oGEc|rX(qJg0nZ0uiL=(
zW+Hpr;E{KUSxC<=rEkQ2wiNTbpWK}8O!QoaBjmQ$aoo2EW~`F`u~VCU{#l$gcK&`D
z_)*=hJ(~6K2VhILa8A4epRgFe4Ldn3h2P&~{$xK@PwMPI<L^vr)dClII&Ap|oL`dd
zH~<|K_ip2Cg$F*vKbbF|q}G}L8hSI2HN}!zFg&`8H$eTh^kXS~oSd1d^J@Ht-v(}k
zxDnW>Gk0o#xID_oDwogR-a&9sYVSobvTD<AOTMUdnBAVi5AdwD)>wN)U&9(PKgsoc
zIqN5U{i1ilKK9jK64(m$MZWM3*1FO`@b}xLwV6RrU?_e^W^j8N_=`It>l6N8J2dFy
z9z)S~9?#h4|1I1XJZA9(c`c={w_sD`v#zTgY~4NoI_-4jny#Nv9=hGB{x5@O%E|KL
zd#BdFK)&fP{AuwG|LNVude&K1I%5I)x`3RMvoikau8M`l%RJ<qbdz(^%Umf2(?s5+
zZ0;EB%Jp{3|6rfr&n|P%D5fnpK0uf=KO>`bWiHJy*@BUo71eHRrf*o~s3y)2W^azh
zF2$evJ%BBx{-d)-7Tl$~>9j6w-JXfw8QJi}Yn=aOP49*;{5fW(XsZ7`-eK1NHToZa
z()#~g^gI3Bj;x%1&L4g5M?9y#>3`+NIQ_qg{{OK4Cr4*{oSa2=bidz6_+DGL>VBW&
z$d&H+(fKXu*;Z`1WJ>bgg+AB(=&aCjK9dubH92QCMtV>9i5-V?!8{SK1@pcBnBpp>
zVC485F7)0R$T4@SjvJXb!yPrNkDOXBUVjfC^?lXJSpn7i#n}J%>wokyXQvy&oarjj
zxv>oFfqXvnZ@amF&3@K2oZp$>ek$@#$`oYsQu0VJKO3!ke90TR?6&6}<Zw~_mCQ*F
zYjH0;aR8iQGk4JDnzM%%Y&P?RmCb*d+*quk9TS_YJ>U^}%`Y8LsC8>z9d|8>pIVXI
z{C=EAx7O)d4V;A>;-r4ntv1-Jo2r=V)$o}9yOF+)boHC7aXZoFt?=>eW6+H=oLOch
z=Wor-dd5}R@65OkF|IVq9b!z$j46dN$wu1al8xNH?AGUVXjl2PoU~oSxWwz+8=qGP
zuO}K;>x90?mCd-A56(c3Xh@^)s$X@h4UOxxjK#*MXTD57-*=`lz7gbXB=*9%G8kVo
z@6$|H)%)=Dn~YI0ulKNR8pko-ZGLOR=M#_F>&OagO{BaUS>#0f=>0ttX>Sv}Jc0LC
z-Y*}acpCXi;m`k~-WvExF(~0=^;;XCKazum_V)0spLMOh#{Bn=Q>X2a1N-N2M)RT<
zEG+JHzwE9u-e~MWG&o(KmA^#!j~#h)6;FE>oCGpUAC_pm6(ed!4dnM?@=Qt}d+GC^
zYB-lmpH9;<rnBO|E57kp*Vu+Z+`)dzHLxM`i{8-i8w)~NeqZRUg@vKf-<lOVd)eh7
z)-Rh&v0Z<0xqh$mY2&WEBmKPDcMO;^=Z-;_UUkRkX*2sA*Q=|YW_r#!m%Qp)$odAo
zx4<NINC$#l-F+{#_`%EHS@R-y_zA=5!5&nCIi2<W{;!sQf6}YMLIqg+<@4Fc?}{BJ
z!IO5|tGExX#^9IGzHE|vSVeV{EBhlk;o`?99Jbc&t*)~<_t^a8xM}FqI6AnXzYF>+
z?z)m(^p7~Y|L^2~C;uydTPb-^pzZv%anC5f7d{p_D;!on`y<H2A;z6H>ylT~lGBIg
zcMg7LF?){rFK0YchM$3MTT?dfg=&xch3azSIg$!Z${c3sesIHY@=Pnw<U0(%C6gC3
zF#lfDKW{&|MqVI)H1>D?<HK1C(kBzk0qg^hox^?4#u?s|ZEk-w(!YG{i{*heISy}E
zw!^=~kAI)WePcU^nknZ{{>UIR)rU>ap^f^aCw~b&m-u#lXKyVzU3@18&l7(6&69(l
zDKI}6RXfm3S1!XgS2})kzlO`kanIVx!AA$+>&r&p$~eG?41N4$WU9vHc9Sc?xF3u#
zH){U?b*T?td}h5*U~D@%YpXWZp4vJB{-TvLyiMFCGY?&gf5BY!L+AHvAg(q)2fjKy
zn)u)Pq=`pZ7r&fq)*T+rJ&)^W@g2++?Yzl4#+a+0bu*>{a7>Bllg>RI(1`QSw?BFT
z?Ie0;ak`#)8*KXRkJ|Lq_)S{*SotHZ%=1RkmOho5l(}K`>*q-m+v(RK*4+mtrA~Y-
z*1sm6J4B3S|IcSlJTU3XiJXO*+fIKqulAg-I+{Aol7Hq>_aYQBmxT*G&pVjQ{J6P%
z0y&^xR^Romd5-T_w&Pn%9ON<)9j$(6d}Hibm7jFa*!cPTLoU3{vvu&J=0MNe^H570
z@$<6ySY%4m-%_XRnZNVjEb<<EnQL@TUJ~}JmihVyzu(F`d!%_~d``#qi^mr7S^W?l
zf5zuH-Z&zipNRH0y~V%c9n~W~7T<XO7AabMBr<g;b*Vq(Y0L9=q)z)S-}TI`yx&#Q
z)om><KO>WQGSm~zW#`Bft~;80&&8c@DVAT~<#IOMgs#zA{R1#+mr@4i7`8M$ll=)Z
zWa)|Wy-T;7-S=ZRQ=84aLySE#4h$!HYCXPmE5GNPw6ZWVu?{S`o@1>NT<V)pwKau2
zGwe@hU(LE6Tkdp$Z#QP^WEc0a@H&=^%+SBX^xt*aGkbK;)k^;h?`U6i-;GD#nddg^
zawy~ARpNAR%Aw3kbg2iQQ@*%-!z-8H+Ia|>xpMiq&Q-kMNB#Ne+yZnf{SV@gS?7Go
zg?@AZ^5<Ue=`_@*{|xmh=5mO2`#9<&Z^x91#kbDj%uZQdSENYw9pd}#_?GLON!EBY
zw)@{%Fhk=j;F)H8)_mlhWVJ;l<c{+hGdI5}r{jF)S>vta%#df<m0h`i^mo>CMq6WN
z%zM<f_C@U2f1))s>!n>j%DS7}+?5NamV5q|-s9R($XQ<1T@O}CG!wm2pp}Q;l6Wn3
zIyR{tt&?)`5g7;j_ECD3P>1wiN$kGB${zIcv*s4PMX!e_pTo0G^%=T-Tz^@Q>?$?f
z6EY((znRZXygcrlpz-GfKeyOguk6}>A@>{cjBS?_tvj{ev|>jqGpyK+e7#y|q1fX|
z?92z)7p)I0e|fOe@|Q>P-A`P#<T}oQj*$;{R>M!;Ii;M=4dHahmak3cUKG};5!OZV
z_D}xT-m%^p{;}nIoA6Ns<lis<1wI8h6|fME<v%0;J{Y%iUEY}oZ#7fMn~~?Ftt5C)
zbaa=M%m`$Xt7>t{jB?_=e)z6<yP4-kPO_1c``Mc>-%cIir!M}S*}CWw;?A@=n|0oP
z{4>SVEq|D2L$s4!fM3Xd`x}oMt(T5&A3E#AMzD;A=OW-b_GQ+*0j_20W76TYe{Pw7
z#<|1b+l7AkHpOcHIQb#I=ji&SpSG5cy=SlLR6aDbaOsTfCdZO-*q+1Ko&XrM0P)rA
zE%fg^+J1_0gQGJ|W}ZVnI(?c=-p5MX=|^6kEB$5*V?5fL<~`AIz!Wu{%ROU`)RqCr
z@Kql+Jb3Vs^Vy&N<R|Z3arcWGUS#h{JZDyT*V3;JKlOXkgpYJodGT}AMt|BUKgTRd
zTcx`VQ#zhzJpgXuneab#*O9Udx!Cw{s<-jwo3K$|B_0^luX>j~kd6AC(+t}RpKN74
zt8v#}jGSxCk2#jq7Bar)9ZR%sx&^(p9-cP)%>_1JwGH-l^NkDMXZ}}a^m3*o8XMS)
z-k3&C!aLC+YoVj`kaUKh`8Too?}r}n(--$5|MO;*Bl`O=#>_c_-pYW#E^;!z+6Rk&
zMtt>M+G>K=L_fQY``?0Y@K`P90!EECTW$UmuZag2Z8k+$Y&KKW51aSKGiT!#`De7j
z&*Cldv-l|oerlU$rfgj7ho7AmKOK4+pJkn6Nr1cr+wlD~Za3vMc4GI9Gd2E&x6N2(
zlB?QGQj6vtUwqitXkTq2SKY=wfm{gc?^^i4KeFIoOLYb;Mz<du&Y#3+cUXI@@NN^f
z<M@%z)BLP8s5P(jDXHHV?`kDiWE-|EVn%dqM`s1zUI3qi_ks4p13AJAW-zwh`TT~R
zFH+9a*PKZ$imR(k+Ck+gHAkC<UU{Md8_`P4r!}?nm*SI3_@wYWau_22wb-_EQ;`>w
zRMv#PmmaBw7T7s*H6)eQQMc^#xtwo;KBsBwfu<Gst@Y4!fpE(_r@b8M$bIMlk2jY%
z#E6Cx%AA~R)|rmT)F$#L?HxqDwe)!l@(}sE<xi+jYw43@A=_I#HXA=Cob4ZbE%gP6
zQOC>fLSmPd%+VZjDm?K-RCXQa<eD~9aALw<Q<UzGli&C5*?ZMM6C6Z6_}@#a=!@(|
z+3=cb_OOQzgysQaGXvO@kuFVV{rmfci<dp<@J|n%TrfjxmB3pIW~9KEZ^CmgK_AV7
z{hfU$+0)&c7msW>XO77edXyN^3FKz?U!SNM^&n;R%t7k923y>UuD0jkI5|!<W<O&w
zChDUO;kjGku_or=F!LNB=bUopdZ&?p7X6yZ`r!?1u6X`AbiAd9>4z;Jl8wWA+0%zd
z#b<}miRjoRtI(x^n5;U}F28FwxVtoL`#SJIYEN|+!Vjv~s*~|>$6Q|FI&>3sQ*Ib1
z{9J%-D286Tlg^%dFYT+Z@;kIX7w=@EJO0M^dZ)9h7VNq5n(H_DMLp+qXM1c;r<tja
z^8;&IBY%G<VjLYix0@pA-y^ljLFwT0n6HB?qI&qn)h75a^!+ev=gHLB!E>8<X71fB
z8_GT`+*{VKf7RUN{w?L4r9J|-zlLXPjjL)aeL2iMJ}ZAq?qFnsuo*VjQI*d+)wM%9
z+ST%!)79e5>-=T2Gqoij`{dabsGd%oRyct=?1RT-k*f}yOCO(l7@5gPerD2-xc{@r
zY#s3w`B5^GgZUZBN1xmTR#m<v{NWCXKUCJV_@MP6m&x<2$l1_#%<*i=mwxn)XT|mn
zy1&%(M>8aUSH_YD9-=S1GKS#r1n~>zJFq!T&aAoHomnl9aK}s3201$%O%>IT6pkm~
zy#s&B(Gh;VW|XJt$JODvrqOM(SkIWoVJ3C%mTS#4)?ef+Jd1pe#>%@RUm9K4b)diD
ze8A|dj!iOKE3Wf$pFH)O^MkHSqH%EPu@dg7atv@(Nv5A1!o3px$>VpPnX-I&_Vtet
zqpNX_UfhgMt4ZPAYl@bCf9&;-?1=vE;CJCol^;pxS@#jYR6YA^OsJjy9blc+pSZ^U
z8gHnLz8x4%p0UyB0({=uYUqnTGcTbx$vM2^C#ERGtH2Cz5wGPUTjeu28}WoGN^zQ9
z<K9}ahM@L!E6wn#tb-}n%{XAL`_t^E%d(T2FOA$c{o3sO{BL~tMB3oU6KU7|>WPfO
zzj-3#x|6&|c>lL2+=Ks;J@eYXO#aQackA=yUtjwh>-)BAe>3@4yna1s+vIJ7-n=hz
z?M=M0;h6%)w%}Jszk0~^wMT2<2ZP)=hH<YEI>YjTz-S&CcVG1a_-HnAa$5HBXU2!Q
zZ$P$y^{sfZ6dH{jXRQrpLi1?(cU?=K<b2X7H&_+q6MiIaTvL4$ujSzNe!7#m8g<k<
zZ#d!E5-F-*eA^6foE<$J2LCtap1qQF_o9++HY@ZjxdNGs=)4TK=A^y9X?*h0Q|oW}
zb7V_<f6c*&4(>H63ZS2Lj_kC4H)r(ws*BL?zm7~L&ay@NUHV_~tJiYK`2dfpjK`fD
zyo=|u>HpH9Kd!d*y}29xaw=lkfjx}Jpv%jl)%{OKX=2M~d0Ih7+E2-Wjcl4UmnDC)
zUDDeQ^ma2bO9y(}vR~*$`?tEt?bGCU)bgA3bQ5#nfIjjAC*qqHqx%f>VgL1cbBkkM
z1w7<w@&wb6H}@a?&wGR90AX(G(7VX)+%!*fb^B!2Y;!w*iI}VbOWxvZa<>#@n4k|o
z&*SB6?@1s2VQR-pbOSnbUMoB*yWpeF0{lhg00>-ez$gdiOIMas?|xUB{O0+J(cV75
z%qz{n7jpluT0YGx!+DWHvqf?Bdd95yv;2C$@lW6COs=wiV@#IKW?XFM70FN5yqks0
zIpdPP*v?u(n9c$4Y=n8Zjk+H<uDPo+?yoL=*9=J>_uJ~nOj5&s#^-YHsD6_^`@hCK
zFrU)nwm+qFeYLmgJiB*h4K$VQ*V?`fTc-N~_NNB+TmY8)tITJsE2cwh1J%N(zDn-y
zz3d~4ACFV7);u@89NDUO{U+PvM%J(9S$HT<JPro$I@w8sZ!7+Zd=UPI8Bjjf_PK4}
z>H+$3>5~!5zY(68^(a1d_ZW+OYWXQ@Zxa|$-SM%K@AA=`mZGoEjoP1bWI3&hJY}yW
z1?@F})&%xC;1p#|EcPUuX2+O@&~AlCb?mcjSo?ZYbc8&+vRzlblo9NpTrKk;nKfp8
zwd5+IGThgQ-USDKeo%W7$~z;y3s3Ei>fNk{lF?>e1$!dWz5KVEHE~tbaI;mqbSZU`
zr`Njo{yTdkQ<ZPteKT{19*tZeTg6?nKa@>3c?Z$Mn$!K@hW3@}?zgiVe#(4(k2;`p
z*MSSz-(2>+&aFe6-gtG2**ctk<@d06<?ut(6|DWZBRkBQBt5%=ypYAt<QDD&YLFcn
zMLG3%^s*JKt<P#0NT1bTKY1(im!H%5IAbbzCU;!JxySEPZsa2Ny<TTO1ikqL^3V$Z
zylY0XAK-un!}4;NC)L|OR?o=M!~1VzED!U1Ej(R^eB}-vUez|(v=qGTsq%3CJcn39
z$uc+iKJAxte-3<6kDRGL4(8#z*fJk@!sBnTpTHQh7wW!PGcTNJ8r7G#7NHl?%{+b!
zwsCesdsJ@vJ-zI^oyygOP3`j1w(9q-xO=T{06Eq9J;z1vZ$7)}Ll~T^m-Fyp@IdU#
zuVG*7^csB_an%K`td0WozHo4iv*CUEq5kQf?VV$Zd(c)sdQkRcAN-&@A?&zF?I`vN
zzHPP;x7j^?`S&`fmrd;i--oV-F37&_*l5Fs-oyAJ(@ob5?ksCZhXt5V&SJN;Gnd)e
zrKdP=W?nHvkXPxLx$wr^_o4qP##V7|b9F0vKr%Sl(K&tcb(5ocI-&Q{9O#;4F7(q@
zF|ndza+F)L?{eq0&Q%WQVGZZ3@a8$l+oQde^S~_M4ByL7kiW1WeizT${Q5V(XHPO0
za*0Hd?r9k5atyI)M6TkZFnQ8FjPqc6Q+3mSnhm}cDH}|ndF=w|BVFfpnN8l$drwUG
z0(o!Du&Vt(EaYcri-)t=&a@Y*y@8|+r7N5p+yTyp#+C6?ru|au{POOiKnmyfTrDN#
zuWTqTAGSfdE}y-6@+!1&=Hm^u^(1ZStXl5!6`j%#IegX}sQrzs>mEiAIM~OY0WCF-
zAMjmtxA>cNn`paHJPu7tEgsL(xtBfd_+ZyFr{T%ivJ1?Rq)BE-JN%$I&|KhmHiW59
zSbNnW{aVfE-u$_0=vm`nO_EgchSnS3g!a+_5vN)5^f$R@ZleQP;Qk-<K)ep1UwH@U
z%SPr)`(N$fygYP3@<A^4KgdVHf5i9Pr8w+b-sN|8z_YSZ@+1Au^R0U{UC{0jXYe)O
z$LN2#Gwnz-w2S{O+mU%B49x<i-cY(D^Y^Xji1taY(4j)ph+G9nf)_ckDJkR`V5)>!
zIS<SWcNaA5$6sl6^+z5?qr-+ZbRe5!pk4c<!cYgY#NEJMhYBrOIJ(?5vWi?U)yrL`
zh4wo9*4nv$gZe>^=mzz#-IZ?Tr&3Pfebl?3dWE~N>rSR_yI!@Sx~1=>H)_B?IFQd0
za#riE7Rj%CX3_A?LHNi#L++8?%WfZay?c3ar^#q~V<a+`&3WUuCgInjYo3~}b$V8Z
z&Tlg2d79r=*T^!H#s2XyGt@Dwf>5?%-lJQb(mi18^LJr87>oP|(V^5hklnKywx4Cz
zl@nj%p4=kIqXWGy`AcSglBh$tjyYYC^~*RvvA|7!K}TRup?hVu%95j~MdNseeyffF
z%uNKI(;80xfNk63>zYPgw^5hYjoe9O#a!@Zrv9CHiu89he&;MJ_TzKOmX#IH@DX<o
z7|z-lN0rut@o}Yz-;Bmaq*oLt>QLLfs}1>q9{eo%Rw4KsA2Tm{UlZ#E?88dNF8rf@
zxAo*b{3hFDeowyhnC-a+zv37^<Nn-&u6^SRy0&qy`kIOGHvUo#aX?~-&|`SR1Eycg
zZRCu&9UY>*bm4E(k!|^x(jgxBajDa6lAoJPJk(F@<rr(5WockJk-b^a)|2t0YS+og
zni1%Go^8<F?u*f~oY+hlU8()Fn62OaIQuY~uW)B%{b0sCBJH=;O_j+T+E$D}-|aoE
z@1Rdq-+Azd(Ld64OF7Hz<auu(c|!-f&R>bHW9@7Cf;{iP(0gJwXEx<e+z=RnuIt}Y
zNxfAoUfZDO7DDr4_B$%UF!@+_sopY2_8V&JE#zV!{BX?W>>v;28_U20ZO4}AoZJHJ
z$Q{HVZ*(~4YES)KUdO?E{F1rTxTV)OAtSS6v5&9mJ&RZrbP!D>10MKQ@hMxkJx^KL
z0J|=oKOz>^(!u_r>eTrt^-1UL-a;3>!Mn;P(ybqk?5<av(W%m>YEQaVdi4>?izmbj
z;)@dJtP}0yYewbFM#kWQAHV~O&&fa6{FkKfsP?|>+E5@nw8FnPKW0<l>rHOiA#|na
zOgk+O?pkmMTpP}bJ-aRL*;+lz9-n-<Oq1L)E#PcmGkR(hv?Wf_A{+e>bJClQ)>uSG
z$!1S}Vn6USKV1z!Ek6;pv2)?uIn06lx!ZZyxd72X^AKhpdZXi}9&~&U`l<bR`=oQ$
zo#?m2uCzSO-yz<QXOe%E-}SsbznVW^n&^{MB|h=QK5ygmi`M5+RfCb!=rg0L&f>Fj
z&KTzY4&<Vy$+6@G=a){@T^cF+BDT$r|F&`#$`|uz_PLyMR~hHr9p~<_`sk)^>8{s#
z-k92t?6srM8@=o~n3zv*@5yStfd7)^Mqsk>uLc%G?I-Jp`5Wkq?0{k;(m9syM;G}A
zM&lzM^ps;f{xWv=eD+@CV;0{7&*5ik&b1~hxd)w&@9MbPQ{_c3%71l}+h8!*CDkoo
zRX&`2)SIbK>l8O<@mu#Ud)D$nh~q70eWA6<RRc4Edqo3_hOVj<#{3%oIetx*a$}la
z#_ebS-d?{j{?mI8f1@sQDjK8h;Bz_mM=c_jeB+>~&mN{9z41#n{DQ3RkuM{CD)|zx
zG^-!4n|aAAQZk9of4iRF41Q?t@{-OZd`mr33N|9&I6MA;PGY?<Bn(e^{(M`fun5?f
z2I)}dw;@cO-VE-6+~KhBBa%(Ma#nfe`ws!{wna3SeU*&(S9?!5u(7$zOFIuJPR4&)
zudX6z-E)kuwUl!d+|Q8%4(SO8dV_V4VmbMbnI)NKZS~2kB3r)<FGTG<dz6%w4VAs$
zHz2ZJ?ev2_isjfbK<$-flf(IZbb|Z=?<lji3A-&_V(<ae;h`7F5vKXm-qS+SJho<C
z!2E?r4{yO2p09Z0cJVIrqdj=#2}K_ETn|0n(5?`El3yrU7LM;la__3n#Q~n7&i}kR
zx-Pzz{%haQ!*8-(@1+LTC=Mun;H9p$tm)%za_FL{O?EU#W6C}Ed=7t3`vb%bu+v({
zM%NO<=F0EYT#7&F{~n!1x7S!#(LY-k5LekFKDmUpYfqmI>b`GPft_O?b~SON)lIxg
zy_1919<2MqV9ry4`7f7Pc_jD9-|nrBVr*Z+I=mMI+d|xrMjgGCtziE!VcEd>LFYq(
z`A_vxwr+GUWxeMI>mLZr|Cc_>HlNi?+3-2R?Mnmm|CzGz(VqRxX>Wb6WB)8+-<!q<
zecubrzq_yY*(Xg{HhfXA@{Pd!Z}d^N6^v5CvVn_&zE?Su+ecXkc{CE1t(_3u{{6uG
zFZNN^LrgDm+0O?{HU;Jv^ij5eJ?eyIo6ZgTz8jc-Q6FWCk^6*Y4QKkl&0cRGWh>Bs
z3Cp@C1${pV%pcZA**g4(gk{4MgKhV6p0AIx&8)Y(l?B5P#Ws9CSbqV2TygI*(aL#{
zZe>r)<VC@fU$MW@M_C6xNW!vaT+p{9F#nHzl=a|CCM+A67~EbSnEw)GclGbR-@+#*
zEbq?^R^Abq-`GdniuETf+msV*y9)i?N7-V|(k3o@VQ~A;@Fgf~+b`KRC%XF^?<dB2
z>g<{B5;=s<O%D8W4S1Z@I!9%nJ$wNjo(l$XU+nCmkG<yu<>7Z~_Oove{Z=M9=9LPk
z!1oD!-#BhZ^*(Z3yuf-)SUo)l9=fOoyfU~iaAnT2FwfchwO6uVd(c?tX`*L2IalVO
zJsX2t2XE+HnSG|LAAUza@Nl!i!?m&}^f>)xJv#q!Fxad~b&ufu^hJxFKQfs6QpP(t
zyXy>PttTfv=TzIr7x10?)QM-MFPiwgFcr<v(urU0VE?#aw*NWy#-4Ly6LVhn@Aa{U
zQa=~qt63O|G38_BZ_b4$Z2I=Zhpvyqe(D(~{dM-hhyHWiGaru+bv$zwvXy_M^O;HL
z1qXg>ulP`&so<G>hv~Wv9ATIk_`N3C!iU}(!-pP_UrL{Z4;?!zX|T?V`M{6-rT-Vk
z=71r2ad6-?HZ+Xxd=fo2JBAH?up2hCX?hKG@!gVjy)c5lla3fR)bWh4p<p_@VMAX$
zOW07yr^bdhF`jIPf60^hKC^pZLl?(kL$4)HB!24)8+tiw_>W>kokxvXWMM;_(SJ5=
zY`Tah1U;shSxFb1PaBE;PZusUV>3S3__5j0G>W~<KZ6MsO|h-LVM4hZ(dt(d&mDp{
zdtyR0m-amFkHdtXO<OiD^f&!48!K$6=C1)Br9VT}AH8Su9^WSm;|cCiSd7usF(%`4
zV>e8?q#G9WCgw}e6~lX)XFaQV7A99~X#Hk?KLQri`}Z?gP<-!ctUrd<#;~Bm?tYsx
zt72HtZ}K@Wh6Vk)`br<3<z2ijzZ{J45yjVRT8pOkd_?-^TYQ@1h+#k(ulS=C3}_y>
zkQVB(F`(wH)M>(miYAMB@A~rpnHW(2KY#(<HT=I313Jze{W|j27Y6i7@EW%6)4Poa
z71nbV^4Aw0w3U2w%^!~kUHuQ>L05lLJZL3!^Za+>L80Aez=N)i!-HDu5gQNMu)xBD
zu8zlpMs_4~KkAUshlNR;M;peOC}Zt;*2dO4$F3hr&XP>dnhp;M@A<*f5#(Nu;z4Co
zTkkX2)_{crb;jX9v)ZFLP?G=$`bqGg0sQ38ivOIAUe`WtE%?t-pAi4)?}7hZ`5Ew^
zuMt-C6Q}J9|LOmf_|NhFGx*QB2TV~1Il0SX_|LKrH=V|Rek}q1(|aDVyB_$@bo{CX
zpA!H16!_1kub8RQsnVM!Er0AzaGyWooLVB>XHy~e72IcSJnl2e3=ZgA8-8Hheck=B
z*5mTW=7o-3KObJZo_kJ<;I}V<N4_Bhe_FXhY}}{r1X+t8cnG~9-4GuOn1g<o{z!!V
zobWN&PwfdQMxgTX^?w}xGr;=w1ThmE-}YJYpWFMufBxJ5Cj93O|3moCH=U^+rSS5b
zec(THKPCP%B?11kI062%j*Xh0_|Fv+&AKMedc@;DIh|f)I)85YU)}Mao*4eqJ@#sN
zG0+G8^S&PV&-?e7qW<yn3;wh0{{sA{TlmjglLlun-doXcO+B!m{!fAZ?Dxti$A12Z
zn48**$9_saKP&!I@qg_re^&fwKk%P*#3OC|=Y;L(<9E3OHHN_#hQ`*zkJ5KxKc~><
z5&mxg`?>h;-*31I?B`Ye(yJCHr*k)t=|~3)TdUY2F>ql&UjqB-N`U=bNn1Ad)87mB
zvlZTo$9}#n?B^C^VL!9JWVZfz6WGr!oQ>aNj!xKg2K!n2Bz6KD?)f<E=dEBrZ*fMk
zpSL)B!+x$-Ok45sPm29~McB`M&OWi9d(U7$S6kT6^u*ZDiK)@OjaPcXeztl)J@)gV
zb&0W`?iltnyfcdZEClyCF#+~-4%p9w=$-$Yu%B1Pu%ETURS+vLg^xcC_VXTM?Jve*
zKMOu3_VcA)u%8o|ixqL$Pk#*i`5H2GTDQkxKa(f0Px7nYv7ag<?B@sLKZ^YfuP{@>
zue&aY$9+yfRzwf&_Y0RT+~<>z_l^53h~Yk^yYv#)^ON8|`z6MIuJ#bmv+<v`tE2c&
z2RX=*-%o}A-1ku5_|JXBdj4O<e@+KacndrlkN^A`Jd_Ckd2tW?r?B30dDg~%hS|Gg
zKW}h0HZq$Sh8d8b5c@eMhW-2k?HXY}d&E=ZSKHXnpRpeWMkQ|*a;H62FW67?yJdT{
zuX_K3rl{<ZGqy*2X}0Z&XdjN)(h<tqF{GiiS!b1x;y&+RFWVKxeU^R686<zlM{u7G
z##j->eOfxVH{9p`jE~|z&4`cUKG(%?pWYt0&pZ0SeTI6$eGZ@69rtOjjN(4s_#({5
z$KpPJNS}qh>52Qi<I7Rp=kp7RNt8x$pQ*@JZ@ABgWA)g$&p!}{uEqY<CBS{!^8ZQk
zpWoBn^Ngh%{*yjkz36{0{&V&);v9Y8Ki$xzY01aqKTmQ0cCYx)M`HL-|NlJxa|(FE
ze}eyow-f$zAF>jU|NJZ8vupkz#(#>>Svzab+a+F4fdAY(7&|Kb=SJ|KHJ=dw*^5v2
z6X;pf3;uK9C%}I`)*Jql_EvD{LHJLwTW|k&<3Eq&em4B)Bhc<h?*9z_^Iqz<@t<nr
zWAUH(&BB8$Na_p!>5Sq(;ft?NkK#X@!6AQQ{O2uE{HOefc>Jf2zJ473a~_z@?}0h#
z4gYx|{r;r*&o59{DRmY0z<(b3jQG!fz2HA@r49Lmec?Y{jJ+rR^VFcI4Qe94xsCsn
zUt!@te>gWJyx;i~v1hD-*&F#p*iUPH42JLH@Spp&Rs{dKZ-Mt&VHSmTl>F}lpOXl$
z=K;TC<3HQM>kVYgABX=;^L#q|=Y;<W{3mv#Py8o(y-)lnGT=cs{&(O%6Y18w;emL)
zD$F9d%-->z3zU~5ivO&{=lS1?|Ae*{{<9Yw{YmkkMex&|V1#62d&Pe;4>tZY5gjM>
zpyU5;{O4nwcNG5fI{b=m_|F)vJ`4V{mYf&z>+StltrsRiHyiu;FtH8$Jnl!ZpVIqa
zKU<yA_=p=DTybs``}s66>`#OJT&?@-@k`^epIS?4ol?u1we`*A7WT6qTv}NS`&l;7
z8GHpypN;)YWo=?(KReNRCWard_hhw4P8*G3_T%j}jJ@|@;XdDv#%68Y=VA7II@!yY
z&mM^3J`?dt-M|>`6CWlX_qjuTC^hq3U_P6Oc^L4Yx8lR6aDFNoe_mL@oU*TV`oN-a
zhn0o>6o!-goaeg#>?g<gj%u(S4Q=SpFt|@Jvs;C^&3ULh)-#tnY`kY}4DTtdr?8sB
zdvf8z`d>h&c&z7R39z1z%#Cclg}G0J^<2mtcf)$dVt$FRo^Jd-8|yg;o&GiAfLcpx
zpXm<zVXsjY|B1(X{x-VC9K1nmOv>B{{bZ-WFz*r0Glh3yJ$2v7PaV-Z%ear=M(SK~
zO%&_7i2iGj?_7TCiS?XCeLb<Bb0$Zzo^`!oJ?C6-2J4wb`QEUe$LPC_^;8ZA8|z67
z#lm_DXBvp*zUjGFC9LO0&I=Pa+EvS|w6;6ebKZ?-u%5luA*^S@I$~H)FLm@*R#?x3
zWn);+3;QT5tY^ZqF|21!A7z`tdL}Fz!+K^?R#?w==CrrI3+tJ%ju_U{*;o5uJrkCV
zVLgw1xp$fg>zS}@4C}eSkFvsgCM+AndcN96Sz$dBmyKdQU+kl-u$~Fa#;~5h?4zu(
zo(apwu%1u$QC3*bgk@t`&!6;BR#?x3Wn);+2m2^1tY^2fJ+Pk3`zYHAp08Wk(=r*w
zdVal+vch^MEE~gmex;AH9%4O|-Ha~Sj4s%GS{KByp4U?LOAd=KHz(Tn7S=Oi`54yo
z3(>X{mKD}BVc8hg^MXFg3hSA;Y!vJ1rmT(eT$TXi*%RMcp}RK!|G;;~_G4{)CweAI
zn;!U1)+&ACJMX1j5;m?cd}qx=ed9YF^u<wRCTow_EsP$o{2RURm@)Zd|A<X_-JHR5
z+HpVoy(hl&tvKwao=Jr7+!yzZ@=Gh<r*e!cr}Q!69q(n5XP7*o!^i=;E+u{F#>jnZ
zlrts|UuOHj`}yqbn1l}HoY<O!<j@@Fd7(OD#vM@(&=<kg2@9xa0@#-qD9f46miu{C
zrbf#i;e3$eM_251et5;&q~YE*?XIM}RPx#_V2#?$orkUTL3Qpo;~p&KT<9UNy%Ra-
z($0C=gXDTyW%@N}4XgGZH%WO1CY#3N`0R(6y91NK(Q<C}Am<G^!{7B=`f_mG&gz3B
z%yj&S`N`?T%IUXp@3e4yO|)lv_=^Xr&+-|qyMR-J4%2j*draN6e|?g(=-|U@oc<-}
zP**c!lW$VMn(ozpX6kZqAK}P-d-7Q`KLy`tT%wO?LYySNT`R|^>e87=)z^eQ)BA+M
zrsx&025-jji*5Y>9_K9U2byVAFl-7q75O)<I*Umke6+9r9=OCbZiNPZ^7PgW^&UM4
z9gO+nv-l=m2QKk8HZxy6$Eh(6r{Cb6H=96e&@fK>v&Q@k<9&}abINgO=lSkgM{l&M
zr>y!Q8rd|%k1a|=H-CpSRl`%vRM8N>_ZhI1<ek_3KJ-yI9QxeU`NLmsg9bY&-vq8x
zbPx|#@JzP(;ybmG`-XZ<VAOV(na+7R&XRJzC$6t=3`&fJ9nKoS8e>z+nem$F9Dg^#
zc&%r>QQ9;ji#5(~E%9Izt=}ofnZ!oXDq3gsxgC$0b*+p&QNOm(FV*3|Hpb6!TUY8d
zodHf24i5g;ydF|cR_65}eBVBv`|-r%qd7Z19=>5t55ni<+4;zNhny{q2auC^9zIy(
z3fX*o3FFkfwA06fHHD!A$jX;h&lqngjq_UN_n1&N@+B;-;xrfVU!>Ffj{RM8r8%3x
z?=QZu{HZB<|IBCdV&whcSgLZ+46QfLyeq(mZ9kqmjr`_WTi=dMeU5jVZsIlat!2g2
zVC&JyloFm7E=&EJ&bxR(cP-jHQ2%!7G?n|@HC-0QJwE^B|0y|B{}H@wQvd%(yzF-d
zek@-05a(iTjBMQ}z{m<mYug^ZH-8LX*0SfHF@I_$w)K<ZWq*<W-;9@qcApk6D?iA_
z%i4aN$4m(-f9hX~xZ9Hd<MFbhpZIs+zyH9x?<@Wep3^y0OV8)78>f}?-}X^#%q-_}
zqd8QkkG62L!qobcxcBJ#GdWae|5p?{>mBXbQbH`@IA^7m>%gAFc>Jt4K7T4$h)8xc
ze`<hri-n*48oCo%=L}2t{HfTh-twoWkvrSM&z=u{_QH?JpGrH*7362Fb8$^He`+A(
zh7%LOfEwD2U{~$@satf`0b60^PX({nGk@x|$eDbTs<UVQ)Pv}@z(wTx0{>~{PrZP)
z$)D<V(-!%q9Oy3P&6<r}UQ0V)bDOD$iqGI@TO5v}hJ}?@{?z{1G38Hf1DjP3Hp_SS
z_6@#n`BR-8!s^=iSwEN!wb4&)fS<kpUgb}9p2?reo_0?=Yw7ZAZ)5*k%oP8En9aui
zNRQe&Rr>vfpArLh1unDa*KW(umhvSkZ`4V0mnkRNKxhc=c5@=!ZTNEN0q!;&hr5lG
zn~=?eZPRat=gypisyK#CbTwTjUXGNWU)5J$WE+25h8~Z{$9`h`?ce*(z1kQ4_BPu5
zNd8swqKZcY_@yTj<zIb<{HxDE_fMFAwSGpA{Hs5U<zFTDBYXPY^RFUf6GewllYf<b
zsp{{i$-nxGgJ<MHesH(^tA~{D;<M*pee&Hi_*)P1j_=b|kQU9qDn4_4?o9sG2_Kt(
zH7##KmicJ@Rb;%rNB&jm*q->?N605dp4)Et+rZCa{+c%}n2n4?kdM<iTx80BI5H&+
zHl@H6C`V-IO6H>{7B`LDOl!%-dhpH2l%81JwAaYRYT|T3EEnqs#Qx;pJc#ZBU%vY)
za<R7H8!0Ag%V&V|i~TvXBHi4NTz7L8E?V|LkDRPdbj1Q>_a%H^<z%(L<9}KCR+Z~d
z@dJ-Z@0OGGttYzYWW8GXNYMTE*l$oyR>tpbW&FB>D{zKB%BPSJpF8!F=VtA<`{VJs
z+NV=4yt|>*$KiALk)Kd@;FIKM{ml4WWI^+M#Z)u3;(L{6@VUP+MGt<ja*uTU5$G&E
zKZ$v?b^X2cpF1@2CPBBuJQL#oId{LbVImmaiT(Oj%}MUplCS)%{}Cy=k7xblS{6q4
z;Mrzs?yt$uDm;XZ0|b-R{%6^MSbo-t-Se|vYErA%*K4W6{&>uomayzOWgY^9SNHYG
zHTvAKjy&1do2@r&Gh3R!UdbI-j;aOxzVqMCV0D|G63_IF)pZWKf4-Hgb*EzpHmYn<
z6*<Vr57L$EjLX$JhFq;<TH>*~73B8lmZSA%<!Bu<H_UnlT*YSPX%(ho%hhI@<C`n@
zgiAf#f72shE4t$Vu?XdBwK2P_J2qRG-LI~+?kyue(=A`?r6=)sSO>;qcFSGEPUmZ_
z@SVZz>URgRuY~zpY5Ndux6|JPxu)yU2f*!e9!oh}4^jVtT-IT%!D{eH{2R0;9nsPB
zVidc(5-jf`UWKu|t;NWGK6zUoc-F%1uD&&vx3!Kt3I3<^w&v46#rN#It>xr9GUy67
zxjy8BSbhPyccOV)9UsZtn)+rmZ>wRwDjxj`{GAB9dq1`_QQlVN#XR`pnY^vVn?IVj
zwO=23TMz#%LEcuEX}p;ExbzM3wz|BHoc-u%qWu7K_A;`CU07||g*fc)h_k_waSwcN
zd0SOR*xdm<myOOoowpVJ=)Tj68Gu_nqaXi`aoPD>Cp;RZ&1v}s$J>s+IGw*0`K<j1
z^S8c)UG15_wFFu4HRT356Ta4~{H>e7?=nX@tl`-|oa=FKuWrpJU(1z!=WmUm7t(&-
zJASw6HdExHP8+}b{tib_`L7o7s%KovpY>Vtv^pJk@0HFtw78^GxmvGb-}Tnh`CwlF
zyO7!tUYyf;{A6V7&SEpQjk)NV<82rCE&01QF(2{x+h4*53Gugo=$?O-d}&3>D{~ru
zOB?cYy+8e^O*~(7&Yhr9TY1{|#%@OAM+Y`WeeYbJ)7q?ty+Pq_mA^*&*-hU=_b!au
zlyYc30W5zA9WI-)*z~h(iq;agO?g}8WtW?xv8oj6wZ40!ZMRZyu}k$uakyzUrs($r
z@82W4bXC99sy|b{mbr<~zpA~=aSqqqB<t>@)Q0`gw}gDS240!{WizGpZ8JnU;Ly`u
z_0(U1Uu5gt-Y~oGC&w_m=tcCgm8-Qjt9Q(<xe0kecUrlgkhOvTV#R#V<Z2amXk#>2
z>-{!n7u|aRAL(?iR@RbMu2y7Axmvxf5v^RUtm(o$+bvfsdc0?@)_VFZJJA!fd;SgZ
zAh}wXEjClOj!LT9_M+qHQ(w3G+ZA!8hDMG~vU0Ni6&-p8o14@vC#&t-={*rXw-TGx
zGe7G;zYY$9exJtY=8~WFca9}*eIpK^n+yMwZ_Z8m)A?DkO<rUOzU(7Et1FtHl^CLx
zpOySacFxf{;?!+f<j)|d<NLI4=VdMF*EcTrV(90-s|PNZ{z-R6^RgC(+H$>JBN<oZ
zO4Ic`@o(9W|3$vHcgs^lYM-1?mhWQ7H8_&|P|6cq%YIV0YSt&pfjZl3=RloB>c3Bx
z12rxG)8#<*;P=}(P`4lNo&!}m0c@P_Ym&{lJg;HCXa9~|SjqSX%wqsLOK;{5>W+z3
zoOdv^6y71Jg}B4-qItn8V%ROop>)$H$xGXMv-G1oPkPeMODlb;^_b-HUNDT(m4nd>
z>Wi=yR(?;~Rt~#&;qSW`ld=3UcS3)xfpL{PV)<5)y`|J8Ij(V$bNL=HL->WK^R33o
zajR=g9(Vb4tvijky&`l#{O&ME|H{6S(`qxPN-^AJ*flVOn@8dwp3b>SSu5u%vaI#J
z@|unWW8E|7YW#0u^17G>v7D>Oy7H|a*_aeUR)X)N7Y}SowsNjUobfqVm3ufY=PG+o
zU?<ld**GiIq5UQDq@BsRn$>5{RrMut&Q<bWB5xhk{UmkU^{S22m|JL5lPKpZey`|Q
z*`>H%FF98;y-UtJFUofh&17H6HKL;qz8B_}9QangRqd;}X05!byoo&V*P}asjs5*1
z@2TeK)ur<Bqj^}xCsxi>d_^k{Ejd|7r=c6Hb;IbE@Lirxl?kvmjlionlP@QN&mkUk
zB*@9Szcb2%-$;O^J&$wX@wrqTpD>qd=vz@NkDos1+_m;m^uDAAmi9$>S2<Hp=Te22
zJ`erd;0^t5=Te=-Z?X;M4`;Bnw_!JrU&(XZuIXyqagCKf^L%2O<Tce^OjkMkB}d4o
zI*VLAi%ojVZ1QLd3#C{~KlIxI{BU7EU*jG$=?NG9bQAgg$w#;5IQy^5*biHVZXD0^
zTb(0YW;jO9jcEUeeXVo(P37J2b0#^S{gp`@9Cv4uC-t?p`TUOZ)0)i6$GLDExmw|E
ztq)%#PpX6G-Q<Msf45^pQ(T@@J?~eZ)Lhnp=!VIGOe;@n@ruk1Wh?e>knPe7S-0|~
zl1s42lWMk*&%Z<UD_^SWu=AyI?`enfrFM34zb<-jAp3k*aA#pF`&IHm*=L{f9{Pg)
ztghFT3l*JM3_adMH`%&KJfm~mVf0uuS8QfO9c|fI;V;E_=S^@y+}A>m)O6jEx8`-`
zyEonXyeq0(rB|h2)n0LYE>HT?MtP0nKdg7t@CV+d4|P{ZEuZf@5wZHdhtJ300rbJq
z{qTXXvxmmljB;X!Z0sy+!mcjP1uJiAy5^o&&-|%}nJ=5Zf!Mt51n=Tw9yD(smq&G{
z=7MMKJgOtfqxwg9=ZGscZ>DQxOQ#Fo!B0>hG>*gk-VV?8>_>=umcxum^Yt+HX%TsZ
z7NFb1_yaRDe^lL$J<vRPUA@~be~iBIwyQbLc4<z_yUi)N{>c+<&uRGms6JTCoZ5VF
zj6Su~|6RP>xl@(r(axPpuFEX-Q+*UZ!p@_53i-D4sHP#Ws!uxU9c+}HQ#F82_#W|Z
zeODX_ng=&Joh{{N#HL#2rI2`>bfTBon$|e#|2}Ne0rI=bmda*67whw7^!apt)|ru_
z8)(PI=e{JoV-H+Gj&P{dXNYe$u~;<Ts2^{A4n)@wuhd4@5a&|2JC=v_n(Lx=l{Llu
z$LPQO#M60LWe?C}r{0goJ@TM|2b~Yimpn~u&2Q&n#h(<<XuZ{29@eK{iTa=x78jpQ
zzG$)Rz4quw;G^&Oj)lc7`8;`8&Ha0{R=KL5tE!o?T4QKBvpzn~Z%eIwtj?<cVlJX{
z=d3!&=icZN7#yQZY`tUEX`*!b=NMhW)Z4o8OzzUzPUywDKz>bp{?be5MYcWw4HpoX
zd0+r|-XY+5;q$MvpCeyOav^-Fe0u3)<>mY#eRKZKG0zKL*9Ugj1+5OEo4u?{XT|ch
z3WG3kFxVIHx@qY3b8hx`rjZYN{GS(fK0a=H^$~C-kDK%c>AC!-i5-81r%aj|a)|$;
z*xsGdbuBv4V^Ui3(Itldh0!Zs)=Zw<=>5R9e(0IsRkmC_>31i{?+U*Ui1Fr+MSpUf
zO9rC$PWMb^HE>t3<v)B|`~n|Y_MSdQ7EkU}-P^(J$WM=t8BXB0Z2UW|&;66lRxduR
zjq^3|WBp|Tix;#XR%r7A{H(pHIml;tbW$|0EBgN#WW+%0$<W%KUp;p(&$+L2SCzt}
zk};Fy4TV!vLy~)P(Qc{4=lK%zseQ-~J0n?B=>v9huIBU_=qEkpUJGWI@yeFVkC1P@
zKg$`K4v)OcZ~L=+q1Cj%{pDzX#lu<j*WX`yH>JhxF#S`QbNBMEbsFX?%p6tIzU;er
zMEPUIC$eK&NB6`Oht7-oA;pb}^T&oJoWT@tN3Iy>{8eVyT+Na4#;&66WPbPCxovvv
zu@w{JT8ZAM;1%Fi+B79-?Jvi2!(M((gnPQpyfCsph<=MEP1xZxJRrX_t3hiJ-N|qi
zEI9Uak94<u8?~R!xNP6gLCi;GbB$}Rd_T)S!vEVxIq}U~#PXzHD|lZ;zeW3vBg{}Y
z_tECWX#Yo^wP~+sKOdWaVWsVM)Q0#{_lgLEp6%t1O68a)Uq6_jmN0Sh7muG>uQngX
zW-X#El@Xu72YWPzqkYh=4*Y9Ey2bFX?_UkwdZBqUyp^zQ42Rm@N7+_<yo6=lQ7q}7
z`Y7vQO_Z=~45R#e%IeI4aMBMW7rpkM`A=9+3?Ke{AAM-WCrDT}hW!ooQC3*kgk@tG
z@9I9vYA-8cS?`o!{bPaoRg_%=KlC<cVPO-N_eb-dF7Kml#mW<wjp4h$-bYzsVH1{(
zVdB5iN7)K+H3`c$MRONl+eg_tViXC>#&E~^eUxo}ua~m1GXS6OqipN39%Y5Iw(u^|
zoVuPq$~w4DCSjjrSoooRl=ZybTiGZU-qlCh0`f2>Y&V9pes^x~x}cbQS`(Iy;n@%L
zQMLk%LBg^zjP+}Ml&u3dkhp9VWBohI+8FD%j-&TuYd5|3#8-3g#oPbW_-ezt&a&<7
zx68J(_S<sM5Wlf?Y!8feF?y!29J;qrE+NL+btZ@I6%}Bt*$YaPL$?mORDN9DDepvI
z?#rL|Y$VlR&OKV8H%HeDinz>&VX!N&VUt$8cj|QRT+weo>rCGOSCxmCi<f+tc=}$k
z?AFe6c;P>6Iyk)s-_LBiZP~carYS$DX3zf_2fC=qwcxe*GVz~Te;lPuQUB;#WcLEf
z81!G#vXahRUN!ieT8p^xwN0SrCe=kB=G%3qVr#wlO!7t3i0iZdIeHFvg4Kd~9!EWo
zahB}=<Luny<E*N^zn_^j4ZXKXZ)qemNx3wjf+kJF#mppaQEt*u<f@q@fR*CWS~!-b
zkV#V!4SE<TMhb^c(iWKk&%r|@iK3mffN0gz3*!A{lC*#Xj`jkbp>5{<{+^kqnZ}~$
zegBxx%skJ&uG?N~?X}lFgLa<a|2mT!-M6Yl_lMj4NKS6y{eGS~?PZTmzq8{j51|V;
zah9ox_<Y?-ue&vMAN{-NT8dXo5<~L7+Z9dU{cU#NOnlJhw&Dc1+f&_Q4*ZfefgH$t
zs<_h?TG*v?3|(#Y2`ej(NauRC5sMzDuYVLn)I{7NcFBQdtj_^rl<<!nkl$H%oms%=
zN4tl)B09L|v%uAZy;)>j?Vi7`*=s%j<p*b8L>}HI@6J?{cSts0s@7-UQ?CD=z{FhS
zdob1HA?^+v$V}l5Z|sL!<?iJkIqpjuL^qL6EuHWN_w1d2HD>)QlV-Pf^Qm?h4&9D@
z9{=f=AB?MwCeNroJa!*PKC*^BD(yZ}t|<p<H4Zm%e)Mycc62wQ@TB=1*)`mueonLx
zzhsX?<C0$YE5@O_nRI`e{EHgrRjE|RdfID1*Vo;5<Qc;MR1me+nM4D&#vuBXXwb0k
zl@eo*{vC4jjx%~&p~VAl!#ml1UqSh78rk4B-8)vVNpSBRX~E2T*~&XsUy!IqS9=FJ
z{R;PDa)(;z_g7Zga}rLBbP~#}&%E2n{e3}Vx*VM9-sq8gIt!w&os(`?et~`5<E6b_
z%|$WraqvOxa)<7*(%dy?&2JjdT+MeStjV+6z3_<3xSk3E2N!c&3t!YTzAN5m?$Cx{
z{5UYyJZ_*5*<8RRq_W$GQ{6XEwgI}(`#RnaG6wk%)Svp|z7gcFiSFc`=<o{G2}e$J
zt_~#nR(o_uN2uOyhFWPyFnEr#!ngAN)*n7u=48WnpPPM+39fb*AGLWVvgXA#?nhr*
zv*Xb*X3SHIvSf|;c{Cp@f46hC;|}I|h;fQ{--W;M*+ubpB#+E7#Fx6F;-~xAuZZ#4
zhR^05@HD{u#80mSAN3!&tvn%omh*d?t6=C{U|9gI>K%Hz?uZKoR#(_%^ghh{!PR#p
z)VA=dIQ=y2W<*tX8Mw_Z-$|Jx_zWH1S6*n%DUI_P8Jy=wHvsefz)o!e%Z@+rTVv3;
zKTMwv4Eun8Lk9l5v*G`1%C<0%*ZDr){M-rnNWP`znq|v1!9;THePCAWHuLX*AGNQt
z@gDj>P930M%}p>;9IbD1L3=s#Y5kuydnF%y%e@IbQx23Jl)J-K(0(rOea+<wXMRVT
zYRON!kn<Hkx92I@x#pPvp#ZpAI@#S`F`=maIzHM53St|{CT%vp2PJC<-9^AsbT9sA
zT*%lfuyvqA_@T%illEdhZ_{T{)Hf+nsj>r%H4Y6g!7fghlf0M}O?}Dq-bC4JCKt7<
z?EvM|cQNXYxarYF^0j<P=SoanoU-a~0{x}OA%4(Zo7}HP{~Nhi?H$fa-s~!3{sqys
z?);s#lXKcV(3^+#Mm%Ys=YVE|%r#!i-X!nSZ5i5vx9~w}Uf84^+_e-{-(h@2={q9D
z|C;yoXfflO#l3eLkM4O)x1oI;&2x6NT6nVQZlumQ+N91?7US1gk)7m~Zcg}`FHAI#
z<z4{p;S;aMtF<>ESWb_Ya95G~J9<3T;c=O*{rClZ%NxYoKM=0b(U#gW4WBhUW9tdQ
z)%N>PkbRP%!M}qXsOD}VKW!gfxrjWqe)81Tkf-)!I*|Oz#^HPPsd1Qtsre572#0a(
zYY+T+0*~NDxO|K94j$tNR7Z3oJWr3ZK(4oG1s#0u<opcGNAPzceLo0q8~{c-Um|~5
zHcaQ*aF`uE{}gcDO26#uJ{88U7^o!<ba^AXk@b{sc}c>}Gx@pNkhw1KFMiEMcKFd(
z1Q&n$9@9`OafvPLYY0Y<(En)MJxU+ou3h=e`sqVB5H7C+2b;*v`v%WNcap8gn}3qU
z-zK^gT61_@_q3NnkG39x%nS07{QhE=+<WrB|GC_YeSq8(&wr5ID=YhZx#!Tr@#Y<;
zlzE?J-jZ3(;6?Yr34R){e2k}(b9*QwIj7uh$D4ajz#%RF4f5ZWk#m-4d;ZnPH_0u|
z{~VZzPQ`kQd|Qcp(|NO*(eR}F_G9F?ZLsCrjA-~aZ$i)XPUZHx^4kydKD_$lC&{<t
z%`e;YS&CefJiQwEwO~R)yJX!Q*0mt_e#O~Cz8>7Xj|@)BQ^}k;wyga=Iv#rg@Pp)R
zT2_4wSV$I!CrGBvivAASn$~-!N9RD_&rd37HyL@^Gig@4WcJgvlWs$DqcD0GZEn;$
z$8+&(fO{*0&0d=pH@b+Yg#Oe=ns;;u=bY%VW9(NTi`mac{?6c?WL{BpSh^Q{;*r0K
z_v-H*{H3+-*^J8>cVYB#`W#*N4cb&)@ktC^4j^+niHY)JOLP*Svz>N)%_|dvD|>I;
zKcAnLP58YvKDAe4^JG!<725J4o5Hu<Wy_`TZB>aK$fag<J;iA`a>-dAHD}~kD8Rf&
z<kJkB_p~mJmQfBa%SPej*Ys=S<4{`G2p^8Tc@Ef|3LoFce=q`{G)_K4ySn>T@~?sK
z(eQul1K|JoDEMc?JO#guhWR(MV2&(50dwIX49q3VX92Udz|4_TR&!cTS<PvEt^s)t
z|Jkq-9es=WjK-568LRlO<IUS5Z?c9FBOJXM+h?85IJ-?K)kYiwH2)3cPy}0v{X))<
za_2ZYe#;v85Syvt?KOMffLA@(F8|1;@Y;3@b`5q*HFk?*Q|znNJ@sRt)v?e@F7%og
z#sA#FIlY2ae1DKF)<@sl7~}EgKAV3vo?ihgjpzS&EQ5?i_h&of_yf3!10U{Gjgq6e
z<Intl^uUNdEctfxEZ=I$*fW8V_R{BJ=L(iF&(Am1qgQ?lT#+AYH|I(Byg*KsGgsY`
z_!;lk5kHu7SNb0Adh)Dz;pe=GuJ)HGlWTFt6unY-0oS|msqYd#g37}Ys|a~L6`b3u
z2z7Bk-j^=<;Pco2AO3+M+dnY(f9D_A?><@opUd3tMgL!i{x6@yV*alyU#Bz1LyK3P
zkqFLRw_ywV2zL+KwtxX<-eZ%ede5G4wVOMG*uO6;S>r16tqDA<yY)uf3yxfHzSH%s
zspdN0gWjUku0|%M>vKlk*2`00ucOWJ-UViw_R~r(a+P7vM;2Xl)w9*KPrjRH4KWeJ
z_*=$Y6nHi@=kZDVs`IW4@-A%t^Pl#Qzu|ALg`5rc`K$anzTO?g5%h8IE_hEGo);U_
zt8ujQ935hbKPUbFc=J!~^-kq1%E7~R{oJ4Y^uxsW=CBWloIT#W-KOg}cPZ=lHIEFR
z<U11#<X5Y)f^|=P_hi4C10O5L%qu=-2*F7EWLjwZ3-E6B6z;|4ng4eUiLdd!ZpzmR
z=l*hTdutK#x$H4xUoO#IRrQD6E8c{*kpX4eQ<I-dw*Q&wdkLm)F|NyAJLa}?D(1TF
zIkLCntJ2wW?))4NT`$*t+$m#LjG18OF`i^jk!zmL>IyDyo@I|u<$zOYblG>|yUmPA
z_1EQXFMPw~j9;`qXO7D6WA9t#opz;9IP>p^4-I$;yG%LbQtsL%9&pgby}6}Re7z-{
zM=Un(<=|~;4deDOKh3=)gExNfE}_pPZR)w;=)BAD<}>i-Ga24|rYSZbAM<>8bAD)G
zVzBPM#UIR@8l&a$_4*l`i~U410bVe!oi6%doqp;C<c7{lNY)p}JVVHH#%L-8H<Pt@
z-*_5hV(*@@P1Cy)>L1R)z|k)qoyyQ(Ajg#JEa!aidl>o&=lYTpz$r0pJF!X1TCj^(
zKDd5^^r|Vp8t%~h^{nZ}<hO@&v4fz8XUCzJVy`yXHuLo8N6;6MP4mOQ_Hi~lf2cFP
zPhrD`=g&0x7KFUM%8&_Hh8npqs|L7?)+ZgDWq&(-qVXOkR@sIZ=aJ+mm`a~<?n(>X
zt3Iuv0pJ6Dgc=wl27i^>cX$XGj*KN(74n7`px;-88p#P&{10%H4L|u41;2O(evBvT
zfo6RC-wTW;14FOL-zl50@tO3!?E}<F`(g5<AO7WVhsv#YO>bYxXD{On5}yt{%lm+*
z>@M;U<AazH{R4Wc;JKH%wV>-|_I*a?;JYB?jaS+5bOF!*S#)Z6x(cvy?yrf+mffC)
zPqJo~&hnU~D=)pqSTTG_F;_^>#9z*H;X(cx`HpVky=dIZ^F?xupR;JzPIQs>zyx$j
z)-K{~mNvYA?gt(iH$G4DW6_V^X|K>#fPeiy;mI}R!;T5im*YFB=gdbZYoF>g#C%nQ
z9af~|+pMuU=KMiqU#oNtkLh*FtK355?z-@qp$5jzU3WWkZ}%l%FgZInK0o(B9_3#^
zj`g=&k^TSXiUdvdtNrbMe%D0mS%*ZMjkMu=poa0}43#oo?Z-DTca7^7;PQL;CqUbQ
zbtdu~{pQ^w=9A!e19cUD=ebYyT|>x{rFwq`@Bha8{zt9IK!+=$JO93m-+z$(g#JhU
z5siDGqb72qZR+f!{7JMKyAayE0NT7Tw0&H#ZWVYH4dpPFHu!pB&iF(zFweQqMBKo{
z0<NX&Ya%VcS@?C+W(nhPXW@4cUyT0e@Gcv-!mkT@u7RIU@ELjY#9M38Z{-U+MBZre
zkaEtOjC?tnKhySWwtNYn;15?6*|{~G%eijgJ8?wDM6+egtJr0??)=Ac#-EWh1sT3@
z<V@>mITOAJIdjnoIdk?0@P#u6-Q8%6uQ$m09Alj*{;svcN35H}_b-C8zC3^AMebtX
z2ChGh?8_nUK=e{euD5-2$bUh6(@%*T-Z#hB8`EAAw6Q(MA1Or^?EqK4Ro+D0om1x6
z%`Z%mUF3?!z|#QjSm-6Mv-W@XOmdPy?>nHYK6@>2?^NA|=t$cc$9CFk1fG3)(4NQa
z&H<h^tWSF0<u+U0?4z{d7vE0Zbulwlaff>EjCB$A>we<a<}SM>(f^PY2{GpWhu{n1
z={(EMNT^QsIAeLfUd<Jmu%s`Kcz@Q~E7;3b8LcxO#vP;Y(e)hI>igvV858xf=A``_
zIks(oB9B0A&hGWIe0PQ0X7mIo6W+mhCg)LSTYh4rYt=#Ywqz$Zh~O237symn7_Obs
zv#oY!&o=k$p2K-&{x<gW`ir++8RxUj{qRMBN6h+Isi_FNuSta61&MImH3^gOJs55)
zNW@qZbT%gJe&r&Ide=}Ec~&v{`E%b%pSk)Lc5WB-YmT+-wb$R=;K5q%f9x9<><ugn
zB;2bSRw4Ur8Es4{I{L+-F2>ekRvoOI65J4+v1o5!ZrVSob8Xw<lLb@El44?)-X$;M
zHe%v(uq9f_UFWQ60b-kgzrCh)qU$50s~VZVcvJSP2R@Az`tB+=%?CFZ`c?;#eJ(q$
zIX`N#E*NYU@Kz8uzT?IdIQ{h}q)P-&*S*%-Z;Y4TbNWO(_s*@4yO`H6pcxl(XQRt?
zTacK#Q;v`4TMN#sTtCxO>5M~TI!<5NW6|B94h~1}qxpZ5w%r^Z!0|82o<H9FlCAfK
z-M_i0yUFbC+GOqC^l=w-JU!~CpHl9xD7d-sYRSd*+pQ%(YP-IttF16m4;=m9+i-*T
zn3?J&Mvk0xQ@zl<m;E%)<^R|=^_;8yu8}>pT4bsAKT1^(n{cqHbZ6LIm`F91j@mCP
zwb!mvyMC!{+qPucwz4NTxr-8NM{RsieXm{r?``9L>UXwW7^xpmZr?>_=^}T*Ih~rH
z?`wsdhyk3-JX^2L_yt*qT8aCs(Vg?Z^tN|Sa<zNWZ!Kp}HP8G2p9M60Lqf4sYmKX2
zaNCFt`+epccHfX#yC%Iq`QR^xJG$C#OkC$OyO#2qReEk{z3aoF>G0hn*c)^Bt`rZp
z)%S3YU^nakc!QiMHigS4AS1)>n-Vp}rn?W??DUvQi*s6CZAFRJNmje|v)=l-+P?{Y
zydj}A^m25BAaYlI{+|0lh106BX33k-<Edz1Ewb_i4eT*XS}5o6jQP$8&opFs2EWbB
z1)SX*&1;6Z2hp&2M*LEazad<EZBGSriw~wMUSa&NyjeM4=TMyXJ?lr>R~_->CwQ-R
z#G_Z!#s&QU-^+@NS+hz<WQ7TCc$f87_~-<V#l)5Sj-)CDudcQ^$gvv}f}!4h7dVE;
zH%I))`9<)=mK@g-vkITtl-M7BY|LfxlHV70yG+?5@1`oc+h+IF3)eP&ZcHquP60Bt
z{4vx0J^GTZBpX>i?^1HPa`q#n{es$0n{MKZqx+WKkyyz3lDq2G#7ne)#GPAq>z$^1
z%tljTVUJjO!GpR_H8#%I+vT2`@Gomfcz+k@@gnOw-7|WAGtM`!t9DvX^?GYXupC^w
zKhx9czP_iPHP>8-JV5?!2kzZ7HWv1P|E{jJg<bAxJ=TT9#^#fMnY`@X?z$eu8OJ6B
z>qJ}O+Sxrt{13Yy?5Q?)A7rNwd7hsL-^0BW(>4}%x(n#z>O?hqUoG{Y<9B=<W!k1B
zbe3lsIdV6a_zsx+e5=C`6GOb%gt{2hKlLAd0KZCBgxjViSR3oYZBu)~ZFPy6oY!ys
zh$#=(Uf(1ABH%{`kHyaYcjV{}Yxe@m%4Ya8bQ5=(s(tuS4Ya?`nD(?hz58I;y|l-W
zXKW&MkD||ocYJ2SMbrz-Gz)rpM{b?EZSLtk``xq4>fN)Kqnt0TcTZn_DSQ1kkI4_k
zzJdDLK|fl5RJS-rUJ<vc+dp$-A^XTv)#f&1Zi}H;sn2d#(fCgHH8zZkS^vGSv;x!V
zJsxAm&yGD(DE-x)?~8Q0Z?yO3*FjTllickai1QUMTVw4UEbZ7hTWfeH8Q`Xl<bm;^
zyF+7=33@J?-uE)}ESg7O4Yx_I-=zJSsbOeWJR#YpvIjH#f$o+JBvajY9;#meOnQpV
z^yPl$e&=BQ0?l>Hj;TFg&&*eI?Lwc)nNqWQ%Z?>IZ{UOIL}p4J)&rklB{?n`^Pn-^
zPrwh-U%JreH0~YfR-2&xvw)9_yo1HNxVt%L+_cv_HWqF|Ueuew3g1~~>3!_G)|_d|
z+h&@I*ML_XoOyUA-~5k?vGb4BFX&{P_4~{U>7H{<&1&B&vvdsOlAT4&e^quFz4s%t
zUqY_$AkI~|*bH8(X*)QjcJ&~5tI~7YtS0|~=d<*$H30m&XseU5XPDXJo%ca>i>_LD
z&OK)NFM-n(cpbbiVNY?lo_&jF0bnUu`RKP0KZ$5CW@c6Dx!S?jULK#haYHkEn&RCU
zI!D-jeUG`tR5ZHj6B(%g;BZBN-^R2S2FCKd?fRbTxt!%7chfE7i3?&KF?p;ToRwof
z%cJzS`H@HJ);-eu6-S3;jW086Ha}{PHSP6Ih!uL#Q9BFFf=#s5p#S%qIh~SgTdfsO
zV<Q~JcdIfD&~~`(Gd+^uK6Lwn^A}Xk7H#jC)g$?Sr+enkR@a<q=zH*GU60l-W2Rp=
z+swYK4<Ae4G+%EuFbDvTYV?Y8*@t!Hf1q(h{%fw1|LSL}IlD4OJ;847c;D)`Zv-wo
zuIm9l<vo1f-M*mxeRQ_*z&!9x^0^QzuC*_WJa)kcjraq=h3xPucy}l$IbG`7{b|k^
z2ZzU=@N;;``F%nsZ2QatmCtTZ_N~?;we<{j)m9(RI8zw1@3nBvYS;W#CcRfXGx}}z
z8-(Y$IeWh5D}A7^##cogOPR`X9<C$YwxlQcgH(lN+MRvF9p50Px!!zvMQd<`rp_gP
zaV7k{;mky3t-D}+%Q0a06`h}+9=-d$R7WSgR>EARcXYvHvTwG5zc0(awDnGNoA41s
z&iyl-DF4~|N#|8AJ$%*(Y(6&v8!NLm3pbB2ru2MgmtCm2Km)-8>Gl1uyz6AW&|2a}
zCUvrYJUls3DOqUDGt(08qOvgSP&aFd#wnQ%E$t}=P7^Oq%hZ3-zRzt{3(#3Y#mL{=
zq2+H=)<r%Xo8RG?0eD8|fSK3sVl#87mORs)z|sxxp9xH4&$$m5FDN#-LqXv0GQKLw
zi2!Y-@U^{+9MLoJw|Kj&_WB-V(o92r&InZ9GMTZ9$21@4Li0V3xhkhr7jt`fe4<k8
zqQAnF!*}*N`7_?tn_0`h4=lrO)>hVl>BQcj&DbU5KE-}D^f~Pf{OWJ~K2>oq<!kv~
z$2V;(5zJIiYp~X_>F|;IFu*Yk98auYti{-0Js#TaaxY2vWt%uYOnjFuC8qaXV((Az
z*e6Hu*pS6zXVGsza?0SV_HstFX<_RPqOI58O?9O0fEyC)U4`eg4ogQ~Uno0ZZkDba
z=3cT|V7&?Y+XVdu(2af2ajMqrmM)SSYmx)3;a#lZM=oQ}|6}MLl5yDjnvd@i=n|R`
zJ;a#ryT~Wa%WytGI)#U4TK9?HnAtbal&f8}>F5O}(~jCu`%XKeHMR9Tb=4lS(QZ%l
zA^eKwW>MzCDcCZ3rb=t0_(SWWbOFx<Q>F7|(xKjgcAPc;>7QyHzkxLrf7ee_-O?S@
z*CEPk{!Kh@<4%?u#@h>BjX}5Df^K)lhfQ}CI&qDey|Z3ABlO|E{Oop1bkDlzd>YX;
zUGT8i=4td&%Cim)T?WmH*QKv|?PuwIus3PLWVK=46-e}F;wn^LW#!9F*Dp-m#yB0l
z$&lMg@bCbS66RpT0i0=_5j<+l#v9<T@q&qX1G!%zzd$GS>2?>64;bsR7WnYi9iE*&
zx4G<(u}3!)#x@l05lyyTo#5<oS!eBMdL(nXm!Ly(qj$%3J$LY)ecm$B+2zn#=lInT
zhlUg@grD+2JOguhVz)=}t)DdA9_c3bH~wzUi-#GDJ<goVdgJu3aU%bh?>y5iy@vPQ
z+s_GY0S274sSD#X>tKCkUDz#sXd5t%Vjn%>lJCfhvS;v&*L*mHUJ%-+HE%+0`^AiH
z6ZL_|fllf_LA?fJwU^|yZgBJ_AMMo|_s%Bjy)Xg&lCc(o@3{MdvV^;^Z1ybo_^{SK
zw^=^nQt3llXXO`imsPv1<pv$Hf%9Vet+<C&E_wpFUxb5+#Gz_EVVzmh-3UL;pdHrr
ziL7IGIm-KepX<3MMw}XD^zOs>jazce3J<;&yY9G?>t4>9-s!#}A$SNj+3<J@U(_bx
zK@4J4@T~zJnpZ7x(AvXI9!_;UkGxR*BaB~izW$I|@isb8D`%U$rtmWHnep^((44lp
zFOFzl@8F+q1$T_k_6-NXt>*tC^?l&CPxy6z*0w2XpmPuSYC>-?p5GR($JW{eUa#Y>
zjF@<?%yh?)g{9EE>?`(Tqhm60teh#^TAV_UD=|yAnAjf%8IyQVXP>sQCslTaS^8ag
z9G!Z}EO@bRLQZ=PIVr@?jo5@?TQ}xEvP^WPxCD(u{cB9lcy=63%~w2*aP$tknoYm9
z9J(p-05l{0S30%q$uRn^Xhbwzd^vaL&NoZvN=Aq#>0=$^EN1U;9piNGYD1>qfd9a~
zoV(VS=CJqOhA!F$+-;oEmh|^paI%T^#VZ=K#%r8D<`N^#Id$Onv8{}ob#!J7SV<Pj
z2DF&Bm$k}^Eu?jseaj!@{W?WF%rn!pR!Nq1X4d9=sp~?AyB-*D2W!P)WXC@AEy>OQ
z;GM?qW{ev9ohJ9PF=rtkTsh0{M<1=EADzpqF*A3Lw_$r@Vgc<7HiEr!frQ&+d*6VZ
zNS7m3V!NSi*Vxq&5B0p1aWk))RZWR{c+gB~-JrQvX-*lrzXDm(>HbWQ*754ctQFQK
zXt?(Jo)*@a&MsnjkvUCW#q%ZSN++O8823<rC$Z1mz1@OdY3uvY);Q+&I`()Ib82Ef
z&{f$J!22cs%QkN@xyx_fb#I~Od#4$5*+%T5w-TwPmFW7`7{!TBFDqwWM_8*DV0UTW
z)&#5lm)LFLHf$i?YwoBdC+2OJF|*ot$hJE%=Ymtt`55Oek!cS|hDokTrV)ocGt9Zb
z&K<xA9BXXF55z8Rf)C}R-sb-Iiw+->47<MPiScV9;z>vDTtQAr$szG)!=F-1^*-G8
z*~CKN{Q`VZ0DT*i_F?J_vZJ?JtQFh9(dk-8fO|187ag0tg{wO^peLgfw-EQ-b~Zfj
zLLYwtA0qO26Mlm2j8Spxt;)R>c7=ZRCblVS?EwA*>Q%M4T|?X9-R7Alv>zNx4?-tg
z9zY(3+pbE8KJE3JF-mvPx>X4;cyiLZ+YP`&I+|>Vml&hgo4?YIo=NBF<Jps(opb*G
zBva<~Oc@Ius)uJADf2mSBA!#u>o)YAn%G=>-Tor$ww}Lm`CNP5T?=2AWY$~pW({kB
zY!I!tf{XO>cE**h<BZl#Oh(uFJuv+)eJN&0a!D~Wzo+h?dnRk8i4rGiua){Q{NBy~
z*uSK<p2`OJGB|TXBcIHgTWe;%QJzUoVkx3~rRAjjTauG4tReR!pVc>fzNc3-#(eeP
z4g3T2sd@T=dna=fEYfo5`kp0}6@F~}37iN&9`tHQXZ2yj#qghO0<SK;i<P$fY4ZZ(
z9`DNNU<+*dvqbW2>UQ=4w5A&q<_tmb;B(Sd*cULX8dr7UuPSCAAPmhz`-RfSMI)k%
z-vLKQ?>gchQ?})n)K=+ct*+P~yf$xJWp^Nh4_l@iA6s1o{4DtH)?8`h{O6%d^ws#5
z)YdNd^*!6rAsc~blD6Jt9kif{b+iQ!?vd=PHaW}Z?pjxv-PTWO3;6HJ;qw*B|A;xi
z%y$5qciLIQIDMHjQltI(eXP^$V?NLTe+TTdzb<^57l%x+I@EPlux{}u@L_&H-G0t&
zoVqUiC!c_4{y|+UeWuawm%Wz<n%Jkd`!&RIEeY10{SWGT(`Oq0e$4Stga)n**3JG0
zb^Ylxjep;-&kA+b2kXZDgSrjrGmU@WZ;*a#f^|nPmJGfs(MW8S<WO@yG74R!!4urz
zk?uAN|Nbnk4dgWOv|>||lLPv68+UuW(1f0PW4MF8mk-2M12&xl?~`EWbA<-(4A%XT
z{yzv;t(=27W!<<H+D_eHQuj+0>D>3S5uAP0?7KUr10%z}1m~`!*egRN=zwj=-j-*`
z^@D!W(u3cO@4%VpPwZ<plH13RKTE!&m(e8~ide(g-!SZ>dfDf9#Y)<1=K8Ao$(s=<
z@g;9WZUoR5b$+AR6bzk>??caxVmFAjxD!9i$XyKSSZ2Mqh)<C10{t#6L0-6W*jq;)
zyaOLJ%pj-5>%J<*ZZ{P2d%#yE-zRxq%C1HB>bGsfviF;gJ4v^j+Tq@Pym@@&_zoBM
zmrNj*ej;aE6x(b?9T*>JniNT(!(Pq)rv;z)UrQVYe0V6=Hy?jevfxh(BS-eSBSBz<
z%~P&5X%L$-`QmVg3%CrNWmOSRGHnoFYcN+nC9~od+NsI&ua2P0$`7i0P~V|^yws}N
zPdP*T4~;Pu@4ClC;%%;w?tG57xFUx2T4%R*u>P#&(?8aV*yj|uvq3iO{lGTPy$nHe
zy2QB~zL*#UXC4FB0z>r+U26PZaCp4=GR_cO&b+VS48fHV;1SZ^aSZ$v{HfNS*Dryc
z+P;&$Ou_mg;t`xN$Fjy8L)U+W_jX<Iez-J!=bC6oV;<l;eWrr^HjMKRlsyk#$fiO0
z{Bxi^-61pGSRwSkp)PD1!(RL$=#jXgf@<i`1Kif0&i*_)RVnn>0`1+$I^#tL@uMes
z7x;Qz_xp$^aSz3zms;#{bibsZxG_5hnpmEBqE*IJ4P7@tgRN!0UT-Q@?$m2QX2!^^
zrt<56M-aN&NWEn|ckFA?tN|VmpMqvvKjQ0sjX7?V?_?C+X+E6)nVH(*+HJ?m*mo9<
ziyQ~nUjs+`KW*&$>lQ+DFXZ^<p9wF$_<+CnrSJNCU!OU4-i!DvwHLI|TsQv=%I~Ws
zpFzGA*;nfd?SoF{LMQQ=IT7Jav?h9qLu31(6WL>;9Sa=vLo0FUtxxn)I*MLCeKNhk
zztGF2(1^>Xku$*46Ic0qw_HcQr8#5g$%fIhEj-&_ZF-ek=K+sd|2E%0d|h}>$5f_e
zjTKGRp0?Z1nxpf?rHpa#EQ`39;2!w*t^vmCbze1K>u9{mgq{EoM(egKcu@B;ikB4s
z=4JiX`~Ofp4Bwk6=d?L^mS3@w$tGlmOYMSh`h?F%;?A7*CnF;)+P7$bVOINUvz2|a
z_lDE$7g0`oo@<$pXdva5{Ky4w7VVC;??3Wo*3oxw%!8*+<9yaQ;^4<ebnn9Tjtu!|
zT88}o8ee6AF)GgQnwxy{t|O-7t{G;2G4T#5a?<n@C-EM0RlLNj!!3IYLY$Ad2wb^&
zMl6tUr+5kO#z}@**A*`j9~-+^@e-#|7TT;B{e1bi)A16wb4DY+oS3h%)`~<Ec~97@
z&{+r<`LwU!=6mo$V4ol-$Y7~*xRG-UUivvaX0evJSm$)c_HWyViH$eWAbX0cSDa(5
z(3vT<^%v@b(CFZyw4J27s;By@+fQA+*Bpu$TxH)6V-(|(kIXvy<-K9{<haKLz06wv
zEA}7xJ&m<=e2R11@6*SR$+e$@eyiWxa?Sbh_R{I-dx_to|Kmr~T%@xq{`Muta+JP)
zc&4d<kMFYZWzTZY*-1VYwSSxL2dY7Kbh%vP(Ur#!xLlXXSNCCTjceJL4zqU<%<LWP
zBaY*C?C!?3zQ~Mo$@8uDK6+kdU%96eyK=~oL)6Fm6hJ1RXV&>l+W+4QjJ!9QsnX|z
z<UnHmviB4$-fK)J^)b%3`dsob1v0Ud!H<miTl;H$RjQ-$y^Rk-b%SOWyi!DLetz`F
z_zbk)VE1=Xx<4QFv-^v4*1Z84ptUH>w-=pPb?mX7JG!j)A$0z0PV{#62-IIJ@9g=l
z&K?YYuascL_W<^)#&9WPxENVoOkB%;_pQXSw4DA!;#Xb*p2IuR@hu-x{CMfzr(Z!m
zo43))#oKp6$K9^dkaTnFcdJ$fMAyXXRHL7FyU?*_E+W3i)M<}&26F3>+2_qaGR-W}
z7~cEs#=_V5R-8^J{(A?0=KK-(Y2Je0B*u5DdR}mIqF&iZz0OQM%}>5Y^h6sLitTv;
zn&`yG;_&{!M^BcW4GSbY7qix0!dm-D<ie+r3zs4nE{h;TY<ar*m%azHdC{R^@zp-g
zWTeI$G<<VBUp)Cya+A&U9am0qoiE)_9H98~8_4Kv9)nko??X-~u51kawvTdld1A^^
zZXbCIZhgG??8{H$y>Q}=z4$+S!&6Pg3&m!u2OiP?SPS|_y}v36EmY&{=!D-&*vDm0
zWp_RQ!`P@^ci~R)q6Z(|CTIbF?$BGrjx5@F=YnnEWuk}uPq&*Glllb<bF3xnz~ROM
z?iKNpBWvBr|2I#k+)dV!&DmvmwmGZJY5aeJwSQZl@1XY_-sR$dh|L}9hX(e$t+E{U
zfnO`a7sfvD8$8=+u38bskMJfmsOQS9TEqQr136~?SY-cL;v+r@{b`)?d!EKK&Wjw}
zf-kfYAHgE`n4L}d7cZqujVWy3f<Awlby|BaJYI{xsAV7eF*I<qMVxHWJ$seA^9}cD
zQPvMTrs9jdTg?8^Hu%349m4v;=Mw|@$b{<}?f2&vV<+oBwrW2zQ0t52+o|N)gXAc&
z<=O93<&tA-!I5N_cr#mmo%@H>(reiVGJhzZFFE#W?8x3pp2{PW{+?fa_;5tq;$aKl
z#r60J)t)IjuW~-^``#Sc$HR^}vB#;h;wQz_NUjtoCa?GwInK<n$x9@wZ~mWDcan2%
zoX?qg;Uv?oXAkn*kyrmlKUL687yarC@HJ-kkj7E7>yZst!DHa#z_)&{GyOW_Mcf?l
z{up(BMjMj1!6_s1R<ca;R<iluc@IC@c_K#hV?XpMe$-sWk7`#uskw+pvw3so;dDPH
ztDittKW+3gN`CF?c3qq;zjhhohiv&ZEx2Kq=8g<kpXV_T?L+GKhxvU^=C|fJkN;oE
z{6CZ5k7s_D^7{dPlQ*MG^s$iNr;=k~&W>>g(T0(S{qYlP5_5E5w3NDnfelxl{|SH0
zr92b9%J}YQ{q-1f!GnL+`Q8$qNgim;wPgbDbx%n@c#k6=Sf5XnU2D@r+JE*Q?fw_#
zMDI25>^R<8@TV8vtR^<YgO2|s{MdS$DgWVMs$4X$T!Yzb_;1KlBbr}G-I_m{B}ujC
zj2(D!9<ZaFXPS#-_3!yFI+(*Vt%ZV>AKFMDMVsI;{jcS}{LreSb>WxPxi7n2VA8>}
zHJNr*W=E#oF+8hge?2~sTDsx<WXF4dPF0+0+~3QLdw_lfr%r6#9O6nhvi4qqobfRB
zb&N%N&+g1vM28XjQQlbb-j$jD^?XyN|NWFbgLnVUJKCH2Kfq<9V2Pf)k#RNPd(j;K
z#`{*vdBLOl693K3^w&)rKRleONHG=<u`q_57C)i<tK?yIo`pG=*uyi?faGeF-yg(R
zUe=!`*6Rj7TDO}_PRQ$V6YuQ~mEaqDx+>N2?BK}xJjFlCNAMBG@qu<=+}L&?GWdiY
zIF_~BvFT)=f!AKyW<RI@1{XFRHX_e#o6fQ4By%t4tp8|x4ty^)*l{u9P)=pXeUSa8
zd?Kkf+kV?+pT}&@<IEWTE#_p~aO7H$jka$PeUuy-@Jq;xZL}}nMD`70ueDf_g|g>M
zO>h4>rq?e&w(mosA;l_`awZDhJwE4zO_r8pob9!+7aSYDpE(|H{$zx4*gAyzkS%nW
zu^qb1B(KYYwbql-pVW>qyA|i;;PZHMKE99~Y?%V|l<DN?A(zFo%I}dw96Y{{j<ns<
zGQ}Jazp_ub_1!k|Xd|0*pbv}rX7{mZiq(D#xeHq1H|12WMn`EvPe`BN#HUfD91`hR
zX?)P3n5+8L_t;y~?}NN6Hok+eOxt)vi);E&fVqlKf7&xF|5q9w9Vf%Xf<}%!>jTyW
z#PeT`zO|HjT!YOzCIcUL)UwFo^r(rDzbW~t9}jovJcS|tZGhN*&1LXWUqm^4oiRSA
zG4ecp9yvWm{1o;Wf6lw`(Xo~IZm0c`I>!b^Xj^c|&YuGOdi#i-O~=<8o%tx}yVBRw
zhyS4Zn0rM8xG0xHANroXo=ix`YpQKOF&LUt+ID@xj=w$x4DQ%IA=L1(+Fq}Z{aSRI
z)6k{mzgjy@dva<gShw?Day*b9T4jUyG2)z2*zTIXbAa<NKA#DF<A=i?^1F~1G#Tcd
zblZQWY|XKnhdc{?Jv*plitgU482X^gB%A0j06qgBbN71Ghi6A&aGdE4e$0e!B0exi
z`A&GSfVhM8$laB+WhmFcm~Q$yIL$FD6oag}j-Hcn6E6loKN{``Vn4;+Pjzel+8Yj1
z|M_nYcPRf#fZs`etBoJ=Uod-?Z~brO%-A#h7X064UUAXNWB%kf(aUNqUsW!#g7=b(
zTKd^U=#?|mb;?CM_Cvk}Kf|x`!g=f$5l=hl9$TiEpG`%+1+~cRb@-6hg2Q@bWq=q(
zANbl1k9Lu-yPjOFip|@J{r(rXtLz>8`Y*vR_a0Am3r6D=r-xr{EoWHP4yVfX?j`Oe
z(L45b$~{HCyOvv~?3^NVmtgg+%=u!K%N<T_jZNSl8QQ2OZ?R&R)XzJN(SCnCwRIkK
zjxcAt&tsYL!>J0*Lw*?bqyA3;k6yuJ@u}c(g|Fw0Q^DhMUr*C0c=(8Q6g&np@DS~M
z5KL}81xy+<FnQwt5hihDwmoNHV8bYtp0oUJf|X(p1%ndstUJ9NI5;xOS##_=tD%!_
zXf+J|vW9MzpGtc&`RwCjaBh|CS&5JH@#ls+ptWw5Q~dSDf#L)G^pox5d-%EGnfmXX
zDRTN7{hcizije_tB2$q^Wrszx;4CdGtf+F0h@aQGCWgefuYL`l<}Mli_p{zujMvAx
zqo#ZA-kVRk`O8WZ)A_XWUhUk23^<wZ@=uZ_mhz{1f_v0<4!kE>KrDsMl5Vw(hdxYF
zG4?^)o0H)?@g(`ElfUIICBfE_S+e1`!;g$(S_yJXd6x8BXY*g+lMMsGU-Q!0McXgP
zyc-)QhSGP4>+Dys?os9%XRdefJP6EVj43e2JWvq$RPRPt&WZpszZKih3Y^y4pfc!$
z#$$GSflCE@sd}b%F3!N<X><hPW<>U+_W~q)46^5i-n8tALyM9<Ix`rcjXyKbQ`OVE
z@9<81mJNfo$RX7i3`CFF^LBn4_<Ib#-SFk?9pKBT#x|@$HahR|i&izEFW)RXc`iO~
z#=ePtPA|TrCiYag<86FBHg+HMC;rx1OS8r`$M)g#UuU4v$96Sj@)Mww?P~Ik33&rK
zArsFDb)ipQQu)DWptF6pqtEw#V-9#3eZChN*?`<GKp)HYvu4Kd4E=KkoBp%T_n!3+
z`+q)Cf<Lu}v!o|z1esm{ZtXpS7<K|@?>Mu&bNz75Ll);uON?u0J?BjC1CFKWmQK!=
zfT@0UBl}tCc}q{;3rer2fl0okv-gD9Zx2l3tflQMPQUMmHzuqkZ!CLF{m{Mm!A1Y<
zHAh_JE_bc5A~n#Ni#->MbDzS23%#<2_5B1KGv_xs$JHTu;+)?+eGVrhpcU0|aIf#<
z&Alh`?#M?hd7$-Oc@q^gmCl<uCb|guv<;YdZRczUdr*hRnXT`;bBGzU?7gg`=a}S=
zIs3iRHD_mw>}kbyagH3Frc7ta75^?h?Ec4<hs8u=<mJ;j=d^A%C;Gbfu;D$O1?8+c
z#~0FP&F?^#A7!8EcicH4SSfdu*5D&2@=^WF)>U*ithFV5X4t^5DHm}Ve8*;(1?&Uv
zE<c*;mi@Aqc4nD5JL`$vT@Iey(D|&f-{q`(+W)9A4OW`ucE&TyP41~m@$syv#;^&x
z(-=<GzhE2QZhECFXso^LMXHVmTS$41)ZZ8B@3)Lc`(2z_Ku1+v#PsNEoDo(WuFC6M
zaSVzz6Mm%McVvEN<IVY9&%I=yBu2qmXWX*=V%VbYMCE4aBIhd3g3jf<G~=m9FNy(^
zID2{n*aU;v1pC^dld*pObC19|zTPp=_gwfvXR9}x^m*#Dq4UkOp|$33=;_8){A$kG
z<jzEIP@6&CXSa!y;iNW)82^6y#QsbUOdd1u>aXw~`M6*GPF^%mbe@CWv+(F8^Wz^*
zcIfxI<Cn}I^MEh1&Ws_hDrcwmM6zX{<iF$|aDPxVt#wZNKlw<?viTVK*Bf)Ks`PV~
z)LUMgT*}(fxEOw3TeRDY?DN6r*m31C><sa49QbIxpxwHGhg^~UlgG}>UuV{Hwl}$d
z@+I>OdTxOF1v$*cJ*KQ5c!<v)mrVp+2VB11fVHZ!Mt6hLUjt=p=*NRzRsue39gDhZ
zqZoc-jj;2Go;cf18AH6Eha457-!WF@ubArNT|e-srk$0vqdb$3Ge)hy-^#@PUwYqg
zhv4dA9zOb6N?Gll#_`MU!&keXeY!#Jjx?0p$Fu$H(+zUx+0QBS&*s6NXt~i^LYvw1
z_~@0`P0}H=#<eOlu8HVwg4103Q!WqYVbAd(za3gW)wkCAfz-x5-XQq8yoOvcHG50(
zmA0^smEb@1KCpH}H9op{Wjde8=r$bvM{?~N+Uf@H(gU8o$CrGT*n+g2GtmXm{MJir
zlHn_BkoBg0K5=jI0qA~)PeI=eE*~*|)vvBZhVO-!`sWh^;3D>|X(2f~+`sTrUh5>j
zx}}m$&)zd4D;(VFIeN;TQ@tBKZs)(^2k^~DZF*uKQ}*}q=82KxweC<YYy05mb>CEQ
zPb2HD;(}{Dxgl$IaL<p(3FOP1pC0)9$u{hvl_uGMEK*wyD~3Bh|JunmrPH^*)wh91
zV&udfgAP|e!5nxQ*&bfA{n1TpT#q8(x*Zq?(GS_{8jA6rxQOU}&Y1tGn|mA{@<-mF
zoiKXU*B&##5q&I^H**Z~cT0}1z1WNyYJzsNd3-Itiwuw3wncrBIq)^+YS5#$1cMu-
z^O&r*wCATj`^otrJ#*;4hC9@6968l58fP39w#(r7+DIH8xEJ{CBiBUDn%qZU{Xdiy
zZ*=%0IydjYz>%w>8Rh$sE&m(Z9pF3YGPWLnhs!**9eAeme7G|FoYwj59I*6t&tv3q
zpna7|uVb#Lqr0QS?a^Mn(`WX#)BoXX)jzpW8AF_PdVn_X`UyFNfuGuytdL!O_*(5f
z?|5?B>FkYxKWxbZ@|)yL@xLEOxBL78<%US#QG6@1riuFX_)HA%a+ftNID^j%>@DnH
zbxY5_Wj7P=J7#$dns(0oXOB(4N9!H0u)a5N4|V_^lI{U-t}s(JZgBFjjIRIB{@2gt
zjzZ+;TI|F#h5H=yrMP?B_nmsR#}@B>!Lxls2{!cp=BC6JGxwYOn@bbKWmoL`&(|&=
zGvS`Sxo@v|@Qr=u(|N2FW4teJ*zZ0g8q4Xs$jX`crGcWrl|henrCC^VrFqhGrCB#&
zvWqy<Mdple?uTx+D4y2GeL%#`q1Wv+d5hY$-iYq>?Sh7YXWf8FJf}Em{U$B%b6v)C
zZv^(*r&bKB$~t*Y6n|2}XCpF<co5>I`OioHJAri$`5Q|3*zffp{k?>b{T?21p^tj_
zfZHLpueFi)y)_dGrqxgJaaM)1pB~?eAT(()XUn8@Mdbx?@mqbnkkQq_7ccrm@TH52
z6XyFGUvZ|K16zG7e&l%bX~-MJFCo*!Ptc&fo+6LHO>*E8L%Vi-d+3f=(O<~}Wg(j_
z{7XJ$u8aLC!K*%OR-Db)`pmjLR&My9<%u2i>fRad97i6__fQ7iG3m5DcnR~SeJ8%c
zk6bx)we*lrorn=ZkLWebyO?>$nQt-k7A@1?gV117Z7M#*X<KVzKk)$adj@jTvMAN|
z;zh%4FJ08~zWKh^)ly`E0|U)pyza=-<IU+98aLw_B!))3)W<p^m?);?_J1K>p%y>R
zUStIQ0ROrmeCE_2B<4jl<IJg(IVt9a`ejbsi+r=roP5kha|&eUB;CXZo-`-@h6Zdq
z!TJ5V=7*n=Hj=&^W81zd<~H2+vy1A%v+U@hKab4Mk=?d!%sd?%K(h2*J|08v9N`@O
zU%EPQ-6K2YV5?a#8zlyvr{x(w1oU!8t_Ox+dl^4#Gyo56wS61Yk(X*~MpV9I!RzK{
z727c*D*M-g_vr6b?O5n<HuRSpIx;9f@dz#sU0sMSKF7}QZu^dZW(03ywoPcy9&}8%
zsX%6yp__(2f<B**tdpOYn6^;kgAZeq%#6N_Ev{#80$&G513x=?z3k`RkwII=;`6;8
zpYILydt-#L**;$bts7`vy2@JYU9DNj^l8G;16i;hJvaSN?J&&GVt(>ZxH4;u>tz0d
zuEbyR?+z4yw~icP<F*$+P*=^_ArJl>o>$4gYtUVT_(h3vSyGHG|1$r<9kD6}(M9M2
zS_ifSCx;}XYFJynUl9D+A5neebbpKQzg))uejYRl@AQJ}I(YE`#ZM_7Dw`Mk(20&W
z`+-FbylB#J$f55EW*Xy2-`kBo%Kf;k9R<;s@MC+9rpn&}CfV@H(&MMekF#(zypCBb
zo`kQ7YnkQ=m@<<Wv+o!{CnUDSwcLIOJUqUUcP02T-0^MGYCNXQGFDkJ=TkhvwS`XI
zY&@iDCEwiaNtn>PH;%D&#2Mgo2KYR>GB2Y2K<MHD-31{2KGKv+tfuZ07#jiZ$$r*h
z(OmCs|Jt+dw)s6N?5co!1P9B2<@;^i=h<#T$Jp~cbahVT5OD5q5?<!m@k8LY?ulja
zB>PJ*Lu=w+U|m(u9#aGL<+qDJc+>lXz#+)F<_n=?k6@j_bA&bF(A5j=9DfeJdKt?g
zdO<eMTA_#I&9%_(BJAhI>_J~bd<c6x$acy9M%zC$XDCd2k7>W0{h}J*X`z}`Ym_%)
zxpMI%$hXQ?6fBWLWd{2;Zp*o}tkpQAm#sZoUFimnZeng~idyz=x~(bExU6xN>-d){
zRYp0r1dEsd#QnQ&3mmwJaf1ig$2yc=Uu?S5__dE>uP>$OI<+SB5VjU_r@SBiLbTh5
z&B5>9258oqzw(A<&%Gbm9YW?GZ-!pA55#;$-;zb&(-_(~lLDS=z_Y`TwtfxHCF5BG
z?D*6Z?T_MzR@xUo(2m{qgS6@Jw^PTN<EiHKIp*Y)D~1>2%m=;chSBp#_cOwCt1|s$
z({%Q4M}It&_6wCs?)Hy&Mc%>(+dsJ`qO}dXtSs#(+VSM&*gV<w1(#ajqB}JlxZDg*
z_5l~<$sYE4i8m(q9&(6#Uqk3vb-8?$3-5d2W-xE;__iE3=fK@77UN@m8XC+SW2SCm
zU%YrKXT$lAURQ_AAb!CNA$OLtwpQH?ZOb3|7idxO;L>wczRBc{+sE%FV|3Q6tQ4A6
z-EExTP`_I;?etTxcp`B&@KfCF>xEW(J@(j4!M@-5RtLbB#xMZ>MF$S-N6Wd<cr6+Q
zZ{1%bzXS61fi1wOAKm<Ta}GW=E2O*mx<tRMm!jWdd^HANP4U_6g)`4=IatE^5Um@G
zW!j0cu)b!~u*Lbx?0aawZmjlH3R`Crd3sF_F)hdkU|0MmJ{e-7-X2Up{|2!#iuGa-
ziZw*}JA-@PLVkX&z_(x%aQ*`Fvic0pdIPIX>#QYB{BI#<>Qn6XZOR$>pQr!CMSzC`
zLEzUg#VV^d<CdRh&m~wVKbIpbmGjQU+#NlKxM_Rr1DwlgW!xGMunR4t4)kD;zm>J(
zN&JenocG&kv5yN5y*aTP{KnjM*=hJ^costjHJb4|wV&X@4_k|FF8UjqV<I{Wp)(M=
zA312bc3PWL9Yd^dnzM^Kah~7A-tO!0Zv5*tkr?`sXks&Cz-MtFj!!O#TowFu-_<&3
z=|6e5i8!$xd~f5q7Z|hVbhjr`_%Cy!L*RQi?`-&UCIpx<_S1&i`27y=o$;%z;I6T3
znVyFGKKI0EBe1TA&IgF&I{R>H=~L<ldT-^7h~f`4=Td(6yT?Y~=02dIIaXv2vZ6SL
z*v!d3{`(^y`VtN6+>Y`T*P97LMDy9tzQ{A>n$v#e7yme-_c=VCmc42H<J}u|SB`x)
zq0GUfbdp2Vx4>mTJkR*|9LAn$Wo?i@#~T<!{>9*)CkoAac(<Y-KJdmSh60?CEA{z$
zn@mAjsV_?|kCvOr4M&f7_r}^2vbh02zTLiWY^ag;zfJo_a^7iw5_kB~evK&~S3>);
zfx3W!>iO`6cmreEe<%vAI-h$u7^mdiK60CKt`T{sc#dG*l0RUpn8bWww?}&`1JH`<
z>%TWJC3Mpa_8)lmqi51N_WzqQMWbLS{&(c!k)|Ac=EO9k%gaU=>>OSeY;Cy@3?&PI
zXH~-_{Ijf)IjoV3&>h*6dtl45n-j9JZbpxEBSRZb_bsrnA4*w6t2sw7cgn)mo0c`L
zYBKrL0>q#i?8gT3wti>(#L#aFeZAWzK^Me2b+KRdn_pM7Z!a{x#gB5HXqx2pNM8Z;
z#7*>N(Qd=ChE<(r+5CX|a{i~jR9Q@aVffs<Iik<W_tU@`6KtnY31zjWcTv~E{yy=a
zy4CkHR>l`ZzH6?|e+#;FU@}_PvafRzEgWfDh;EWzt3?a)-=BnI-QNX{Q|EF1hO_&^
zF=q{J{Ng976OMoPdvNDU<5;r(r1~Br*s1^5Q`A@8pHtU2oT?m67q3oF(?xlPF67S_
z&MfdM9O@kQgV2`EV>#y2DR=H}ho6o&Pead9{7XLi*Nn(r&|8&z964X$uYXJPSDZEs
zJXE~Ke7|^&g|7oYtLV}<F7*5@(i6=AKm6x$2RC><vx&zyN$*<xeG`b4xv?NJgRviJ
znr_qLb<ow(l{3)|(I?E*kHyiE40K?iIqsxL-$~G9LY603cT0$POysN|+aS)f1MEZ7
zR~32rryk;ee-kkm@Ph}u2X70k3WImi=ZXJWcqgZZ9Ve9pZ;jA$5wKw`tr!nYdyCUF
zt$Jyiu34@2*z=jjxfPqHFXBEHKWF+c2<L<zrEdEE5Zz^vA8ns))<c(^Q7DY|AkT|U
z(U8uD-cV~o<S{xRABy<c8=DXkz9kQY=R3i(O(V!4$pp!RICX^UE5UV`9BTvUl-V-i
zM&X)gz5gknAG8G=1gk<|6?;!>z|82jAh~{TT#8P84f^!8k(KlvXdE9}0<L1V-ApVF
z`xScTr7!Yfci3gR#)m$cT?V)Zc&0MCKgcdKFg{dG8Rm=qZR|bz0M7=T_caqjmAp6d
zNoQoE$_02{J<If}t>02sG*t*qdHC;3ZM@H+$AN#-`ZyBrW!XGPXyDaXL!X~P9_QNn
ztOuJWxH_;Z4$hsmL*E{7spm0p@B1igC+m_&HcK9B<vZAZz?!qz(b~zrUTpocn;DCE
z<?6RnTN{u;*4vzif~Fi<*E*zFm6pA}Wr0<}3_Zok(I=b;m)`KW(Eae2)2`awm}yh{
zOrn3$zG(gj;8gP#FBy*okFhq9BjVzYkv!_;c-$=?@gU`Hrkn$p<IQ8R$yEowJS)wY
zLDn0cgNWm6)BNB``3%yw;aMlcv4QyI<IRhJU)r`>Ox!`=180QJIQH6o+tBZSh0gRk
zKE9vP{u{)WG|~5)=tf^)U#$%~*fe+3qx)I&H^aAabOY-?-#qlDOR@QHi-RLW3{eaE
zvLE?B=3BnRi`)aI_y-rf?aKHf4qcs#tvA+=u~U3U`Lf0y(YlL|Wre@8uh>L(%`)r3
zN14e@R4UeA^kVp|Jx}*Co8;2F&H6XM;STmkn8P!~MOD1OJcvK+eFM3px#({82Emwm
zUg}{7^!8(KB&o|C&b^`uJ-eN}Rq$`wQ@_U7o@w*Y)r%S9B@vZVu8y&mNxq0ri(Ftc
zU%9QKXXCMr_o;2QtM>6{BnN3%Z9Z-5wfSWowCA+*81?W|mGyHb2wR8TC?@&erxRaS
znx2E^SOdKKt9`xS1kSYAJHS{yYswyd?P>PRpaso!Ielu3fqD2&k*ocTubR0ke}-hl
z7{(%hirUCUrl~#j#i=!6*)ciG-+>4G9^YM0u8BTc4Xs$<$z$cUd%tjY&wk=?{RO^W
z%iiP5FKZ|b?O{JQ0zP_&id_-+Z|u9$`CSuH`;47;zTPj)!{2r+RjGDVA6sW?-ucL*
zJZy00E&WpC>L(saG$WV`N7o~}G$+APbMl;RkblH`5t9`ME_OL!5d4qf4#8Y_ehD0_
z%!|O^shf?1{o_q<t7rpQ*!aa>)%}UWuhZ}O;6-hyzWQ}=bj$0ha_ANxAhZvDUJGiU
z#+OvTDl3~nGIuun;&<@dq2r(Y4t}OwKF`<kTyx!(X~*ev0`Jt9`V~KTXwUZDoOLpP
zcCtP-v4$d79)OP@5dV37&~R{K$W@8_{YW}y<#_XtvE}gJ5D)QN+B$-sl|aubW<OuC
z)$*HaPfz=c95PHI$fEhIoAP~1KK66}PzAnw?ekCM`D^Sk>zvvv=xo}r@wf}xx6L%`
zedu_K8!mR|FTb7j%ZW2cf*<W09&dipj&rD9UcNxjocG!9`WT=0zS>?tYoq)dC-!FS
zy(`5!`I6`=#61#k$?rI8O1>4`L(D-(E6+U3Rwh;wZx$r>Ozr<~_H0r+a&~*wuk9a5
z?@J!KdJ=JM;XMWD81LRV8Cg6nt^0mHt^2kTw_W{R@-&xn?vI#&e&8nGX*n@5@~7GD
z;ir@gLH<^yCI>I}&oJd{UFmf~x@O;W?wVkoAjjycR@MoX^YTo*DI4a-@^slw^pk#k
zMbb^HZ?{%7E^k~_gP!3-&+x#L+rUSFd*C|3$N9u=3vY2RIm=m_IQMa)&oJ$9KBHXv
zvD0TU?KL2Sjx<e)JP+=Y%cn+ugl^1%{0i+IZ(wcw5q&Q%)_QiUy`F7g9TiP}6`GsQ
z9OG*zg;w!fI-J=tDWr3j`Ddelk&CJR>-Y<>o8!zY$=N%tky>vJw9;@R`qE+a@>PY?
zjO=%_@*w+2t0iYD-9<Z7r<(&F<ZY^iyULkgKRhAZCw&K1QS^Pz<|ZWfCz}c{W9pkW
zGFRzme*T}d4j<+`7VUY*Vz*4?9eM6F9^s-NxQxbypJ&H_rOLF@o|iET2VTbPWz1g2
zEL_wx?zxOx@r`ShPjVK%1@foVd&~hJ{nZyRe*QNABaPo1m>k;4*vUCn;fMe8#+#`D
zecx4lweh@MD3}HCu>@S6abEuC<NpmZKk=7CKS9QWUUo7r@32<HIDaGjII#C)j|Z9W
zW6X6UvP5|4$FEV%{WSskmGCFBCJcEPUq3wQ!e20e|I(%Vho%riu&gAJFWJnvMW5DN
zsfq!2Z3KDwg8=7c@Lvzb=`&8<TI%?z@0#Lj=j>3jnApmC>Ym5iC4Gr=TlSugy}!=-
zKmGf|9p%8bt1MWz^30bDksZ^##O19ldAZPQJmXfntg`KlS-#|KysrUv0ro}6TQW^D
zH2a-ktb8V3-=xr21mnM^${o0iZoC2L6FOY3ci7^@DNS2J8%`OonH;)V?Xy=~jO^1V
z4!rF7GUg*qS4Cpz!O7)IY?-NjYYRDH?-MTb_MDK_pFdev_v3du-h2gnWW=*weI@$B
zr;#aj>^tPxy6K7jJ(EKV)&H>+`G|vccQH0E-(M9RfS(JWQGAC9?c|KL^noCE%JqXo
z4{+D{36F5Vd4kU@^CX0`j|2Y)sjG263=L@9$VU6W{hPH}vEp&slHc#)Oh5WBJQ;ZL
zDRhb;<rJ67UZuTf8$kZcKd_m1dKO3i1(Auxf!M|BSMpBlo{e+Ht8qWhn9)_r)OH_x
zr2~w6C1oUgBzN9p-&N(+uaEY>HL7jkvBz#7nHxvus*f*FfAs#}E664T%+{7n&cw)C
zw#^|Q=I+((;gB;TF#Otm#j8&Lig;i><y2mA4R<%E^|ISp7e`{1GqI1XD{<Ngvj>QL
zf2Oe{FH{{^cwGFH8k=|JCpb_3e~PRB<r6ur7u7R|R$$kXYb8Cj9T?ttpZZZB>Z>W!
z&pY@6Gx4%^OojFyC$tRPF~h$g22J;6JNFMbaXt=>Y28k><?V(qll_w|=n&dy%nSMD
zJBn9?8n<G*ah9S%vYF>zWc6ox7U2BY%{*)5v+hrmLxa4lF;hbE+O!?{Ji1#DU0V8!
zpRr=LeC6FzEBPL|2Y&Z_%GL|??hNqrojmlfCiaD@t>jJQ%6g15B#QCST9Ev>mAs2S
zs%oc%-mkQh7XY)P7h1_j-T9%3@V)jv6s!2yr%h<)PtrD(+MP_hK4Owqy38*gy4NIh
zPpIVKKKNE+l`ZCsHN;qB$5Zpw&ONm8ZmFMf`sv%Be81A4JbIx&d92!>M8BzX;5IPX
zuQmC^`JhhhZs3SqNXL7p^^uosT}8IB*O<S3ociA2#i3i!Gvve3b99sk($Dik^*opV
zPPC`KM0?^};kq1}ixG1d7tNvb`|uaa_6o``1ugn06Nf%jZ!U0A8>*`|RDW)UW}W(R
z>@Lx+1?_50j6;_$UvST2VtU@o(3{$8&D4LH`s&xFY2c$Vp9)4j_Pl09&jpT(<&jP0
zwDDY~4LdG81LLPD6QmChbgGy;{r*sfX7&39e(%dXzn0$)Ziq9S>ClsCM6@Bg5DmQx
zJ{^74iB}RVoS5EMGrYZ>_I0Q7pYMX7$D%9pe<m>@NAMvW0ymEA*7u3nW@zU-&_8gm
z2yl0z34F2&SeCCG=T9EO_H4T~FEn_TfhOJ2Z$;8)p5nAOh~7<1N3YXPQy}kv3FL+D
zpp7Qa#to}PgY>_#F|SJe{?&0-GN0I#KAs7G%QCQg8+_~D<@6emj=^<wV%47njQ-L4
zm+l_!cnR29*x%LQGfsQ5gJqjF@Edt-$LJj9>>+ou$bW19&xWUBNAp>)^0BW4Q%9y~
zKltI>R`xh;Bg>cCHXq*)-}Z6s>Fha`zD};R4wD)?Uv|Uw@c(@HU*!w(kky&>^WkCt
zUd10jJ863Rv$^^0y2Dg4Wfu@TQH(w60SDig945y3U#}!zKjq0++I^C3<C%*5ni4Xx
zDIw_#P3I_9b$Ya%*y{IyNuc(TJyrA_n7HNOO4sb2@rqXtN=65N`?rJM0J7vB^Qdf&
zIJS&pJPfp=`EVBZ7uoiQ><x!+ofzD`I&T4fYM`|M`vU>tmHNPcs~`BYM}!Yw_XpsY
z%=0IM*d8l0xYs=2q@MUs_|LXU)Xoxc`ZnWtXhQbN{dbS}b_7Fb|5LI21XJ${Q_r^9
zGzVk4ryw)#fQHpZEIQn=-sXV<JC0ZVdRd18xx6Qir2_fwl<lVME5Ny%_Q*%@clo3o
z{OMlI9QLW?`{!(HbR#;S+url|X+-;Mf|HlAAdj}zn6d3|%(OU`i;d<sm2b@SNAUl!
zU%-6~r<qD*@Gi4pQ8I=9w=-ZuxxCZ9((5zt-5?(X`sZ%xk)_L;5`)Z5I>u}0r?t#M
zyyVz(oVnWlhB57Sdp9pkVyoEetn<DVeW(*XsDyF37*`4X*4$L9IOb#x?@B1|_1OEh
zvekBZX~WAq>B8bGyWMat&$RxTDi7bXNB>{OzvC3+R~sKRcD<`bhhqKyn~zUZxR5g-
zQ}ORl4GnN6`H8X=vhfGDEie2#{5x|05O+QYYI~XA5?8?8+c?EkoC$ucmlxmV&B4Ax
zPV`~xAwzfV_(N@PEp}5O@pMmY;>^0>b9ODZKe+||x@K>;t8iy0cLsNk9~<#cnBLyG
z+_q_VDgL~(HuL+wg~`s!%<rccCp$06{Jw}Xml^VErS)gQu<sA<-p=K|<O0s*p#z3G
zKW~!9*zd4f?zZo?DdBFJfu<7fmMIx^H%*CsH_Zp#Eu%J%qPGZleT&Ri<l&yu^;cAt
zoSW0zbVt#&()AOo8k$QI_8pVp-HX2x`?9+Uzf+5uwY=|o<R*OVI(K1jgB!p3A4?Ld
zi+zzS=38+__@t(ZHaqiblH^W2QI}jeOK<sOQ=$|2Hl*q+9T>;hx89snlYEl;os7ks
zbNa_R8AlHM*9txM;k#Q0?M<M~66(6Ft14^EjE|MPoO@R*^YAj35^z{e%ug-(X<NC+
z#7oR?3D4`fPY(IAv>v%x6TWV>8=Lbanu%v<#*-hanN9vbXhyKNX&k%&r{4ZW=T&Y4
z2ifx6xrg|8^MBiV&zY2aDUm8a^YSy>wcqhI#`&VTs&WhCB-VEM*BI+U#@NRA#7D15
zXJ-$0F7sQP8K>`mGtPK^sIe$m_t$yk*@Sle@1-g_AG@N;dT(rHXK-4`d+fEBJKs%p
z+c19j+DZp+wb-=|eH9~1$bnF%{6vaJDg|d>MK^nJtXY3#tr!349CD%s_i(?+G@WDZ
z`I+e@AAXemoVsm)G`-KQG|8#VQT*Y*1Uvn4`oF|fhEMZUHf*?}$`mZxTkoE^{4wqa
zy5XS?Y}3;}rn96C8zxrS`T5)hLvd`whgRJ|j^={006EZ#$<NVGTY+CJzRQC5Jjbt{
zul8HPSKwZMGCYx-fN%Me@^_xa=Nj;SryYYiJ=)wjA!Omx8b=?Z5#yP#+YO(#(5Al@
zoe}sV*Uy)n@{xC|jB>((=(vSEu<Aq4kuxDZ4?ypi61TEU@9(veEz{h+f$uN|{yS~?
zXshKrR#NlSoHWm3=GDMnXV1@kz3;k<%9MBgwDIU#$c|#ciX2E`>|Ee4J!elY>saSX
z?UkfsEH{6Z`0i+`WAj(>K?8^H^L}~PBx1G44-L$!eP6K|x4-UBZYBmb@;%OFZ5kH|
z9=Ln&Q}y`HcbML%sejJ*hC4QY+LwH)-j{rucDgoQ8i{<**BjlzUf_JQbusg^=v%(3
z`<M?r7|L6ARzh(74LPbGM)sdYZeTb0?pkyo1@qi;roVR^@DrTw)H*;NmHiECVKL{i
z18)Hb#@K*P5`{i)f89!MW$epxYmzT>AC&Os;Oyapscy~7wuNtG9zRZx`{O<Kon<S+
zfAldAUs8Up%{Q{vL8Fl$leZw#u5@9=bllH)e`Wuk9gPf`-ksRO+K2ap+u!k9v>vYI
z{^}uLFKcGiO><4fV*D53FX0221+7-13sBxbN6c}nzRfJtZP&X*^-OQ^{lgvh`t{`E
zWD&pBR=s=H@`1U~6gide`1A$shCIg2r6!c`yP!S1$=BOmjg3Azzg@giNQ^UQOm@wh
zvpC7!S$iVz(Q~PZk>_bU2l%hoIbZHr4T9GW{G4%c9!OnVX`p}6OT#>5?I&uIfeEJj
z0@fbcP|4HG`rdh_dw?8~jb-dna5lxyeSG0@;1~H49>+cd^C_8Pk}Cfp_N3z*{K<Qt
z<og$X+b<*9U911&YLY>|!<X5<;odMgdE)qln|XGOJc#o9tR>d^F>EH{Aj{cj>5hZb
zm8uI)`=L$8_wX-z#`uHN0+sO}jr6lj&xc3;-^_o*x}m!;g7)6f%&6e-Ii3p^eaOV;
zfwKem=fKy~|2Ew5C+<bHWimR6N4UbD=3&3hb8O?wcG=B~Y#X)O%o&nyFTO$#Nru7Y
zW7HQcp!>Qd4sEaw3g@1|RJYx3aG}#Ku|>0o8pyv=Mg6JJSS4e7{z$63kKcA*@x^vu
z{lIzfzx;M=N1QW6O%L3>xAi!B+$=LcerZjz3prrHD_!8bnpmU1kb_m@>MJnaN5O0V
z;+kY9vUHA_(|*B$RC)M9{MTXf5xCsMN)<(0+QE&+c`kcE<E7gbMZdsY?qM982yRNT
zu3&F1eG|J=>$qWlqTf=^-rxM)E2=h|DV6vemkZye*Lm!G#ppW7lf0pRcsZPBdY^bR
zRq=6Xbmcb}+BE--=h%aW7DelO-$-o@@H@!&VfSfeYFi&*zdPU}K4Fq+mtOx@WRA+Q
zes%u^d43+_Gh-MtduSfU#GYaqb*5U^2NIo>@ss0Qcl1dvSeDf;S>Ax04IpP9ekHYa
zS;>UZCCuj=*k$q6{^W0Ie>rWk|B{rCtY^BZF!)iVgJ|u_)<cMeDw8fETuUF(`t~RC
zH##!dypme_8tc0whyU5SE`6!wJU)k0TU`aNcJZwV3Wnr}B8QE|{9DQCZ=okuL(^W?
z@J-ZdU@rnWuXRWAa(6>H@$-yb_#DHzkMHGak9TZY{7|aAlli;g-4gIt1Kvswke-MC
zNy_)bkJ4=iSR+krX6UJ*;f|R+ch+t2j=s&_F>|~XcsYFY+P8;0{FKx9RNwffg&w2s
zugQsH*>QBix-jqUcY#@<bKWM_Aw!egr-AIZhCKN6x}aCh)$rTadEqm~$hPpz$Fmmr
z4O+0vsg61C(GA}7)^0e8Y!z+mo(-G7uwm@6W$Xs=W+nZr+|MbavdX=+iT?DgmiKzL
zoo9Z2$M|;iwkF?<kT*6XB$^N6XMNzwREP6U^J#K)x;SOXCB6Bqk@ueL_u;(I_D=`v
z9?N=vQvJZp&;ak(f6#j~Jyhcf*4_U>@8i=$CG$8N^nvfEg=+GHb!$H8eYhaBy*OBR
z2k#x;)AxxzKK9DAhS_j^dr@*FITQluVliVX1C6!H?NKfpSM>2y^8YyJ!kzM;`Sx&{
zUZ{ID^wI#W366qmldsVB#Z&>??7sEeb$@NdI*;`Rn*a6rroi!+<W8yW%|q`h!;f(3
zyxQdWch>Cvyp^}}l8Iy6`_t#0dT(VNnaBHi7uRYJTCwnZ!t4CW9PUqOMQ84_&aU*D
zIUj3%IrpykEcRTHU-R%~#;H#%F={8e!F44Gk469PPgW9JTJ{9}HX+wuLmob<7$o}i
zPqf-S)bSQk4qk(vE|Yz*1DajNd*%Fu&M*7q#JqO%A=A6<Lgd<M@F6nM@iEEvfF5?O
zWlqLZ6nYbQzs`RBAp7-iebgQK3%PKA_7<_F?9;zFo;?@#?%(=oEzcK5l!v&VzU5Pr
zPY<~6!cN_#_L>4`vhO^H{8dGv5^RoRXWI1n_wR#qLX9(tSLb~;4jlisY+B*pwrjP2
zv=zG>*qWyoC;vw72<esNen#IT1}0V-8u(sHI#QWa=GAXOFMIrvf-#BbSR=L;Fi)M^
zSoKPJFI#l;HGZq__&LBL$8-mN=(FidemBP+a_(-uV;t)pecg#pqQ1SzNdtagpx?tT
zU!~nIHWfJRHN%zjJJYglSC?d4;6wN)(`{~ocGKsIUV8FNZw=4%agJa8d$8#=7VROk
zp4)3)3vFxv#PKKVz4B8C-lAjqTADnk0|VAEWX0DgFZk(<tKM1APA>CStUUNBH_)Q{
za&Nol?n1|{fhOz8#px|*EtJe_K)#<1jPs!H7xBAnGPyh56W#3r(V4N%2^5*$?a=Gz
zp}hv^cL3V+`8@3nW7r?_d58XjAIP2HE@AG!v)jWCiZeFh(M_2Ecd_b>{_Dl=$N=>9
zX8xGS{LS1aehxXlKI()1YI(je5>`$n>goQ(Hy-8Q@eA2=q<o0I0G;W6<Ix(M4&M~q
zL=*TSwlLN)6UU&l5(i40*k2@9GcqDA8(w<y*p}g$ZfpeOk-g7+(J%6WW9`vYg;Pd;
zmzM7AToW%n`9IVPk{6>BKbGwiq)#t8mE#k{j!w367Fc^7_IU7}<ZIs88;!sAv&Iw*
zeUiSQN7l`PA;z{efGrucW>u!o*b-BC$c}ld(0S~Y*d7{JwjWUAk}VlF(v`GtI1<m`
z@E<bqnI>~~n*U;D?A;Ql_;>vEjO{Z@`_Qejv|l})A47iIZMnXKK6F=m9>~r^_`j9Q
zJ?YLV<1PnsW8_Asz<({d<_G9)O9RA37bosH*oyz-@HzMmZzPY&h3xmVncgFR%!{;)
zGe2O=_@fJ=t;9_R*yoL*-}JY+pz~SLt?*!+^OX+VM9cjjN54m3#7_7@19d&(UD_0^
zzDvHaIDV#>^6Ws*f_nx0H+^iN(!yupl`e+A%NhSG*fzGWS2htab8=lAZ{B75Hu|w8
zCBx(w>p%X{%7NO9ObO<Olt=!TPuO`7%KqyB{W2zFC7wf9ct-v)3m)+rvs3xg2b#%;
z0Dtsf%lMHcpX0owfk(pZM>u2o!9N*`VAM~(#F@az97$ofaUKO&Xy4ny58^#KcE0jy
zIPLvA?FsjSOOvPA))`{#N4GKN6VKx#&+q1W{~>=>KWnJQ?qTfcFVA?Hi-)_jie*;;
zrvUQOi;Q@a`_%t0d+#0}b#>?epP9*xi-HM|aA`A>;Du<v-nbYq%_j-s1-ois)z$7Y
zA=;wZZj0E;O)~+kw&}JE&|-tzOrW+-tXry}#_g5?w6%@huRv=ryIUvWYGbz|AQ>*^
z_k5kte3D57>#w)p{_*=`9y9a#oX`2Z&-=X3`+nZXd)G4F<<8kC%bRXfU(mb9i|S$@
zj_Tcarr+Hs4-)6P^cV?7mwhf$v+!(}M``US-k{ua`7EW&spg9GqabS-T6XdFyydCZ
zCJ}v`<W%y}%t4=NY@Q2Gbr`=fq3DD+;P>5?DQwqGqUli$53IhOdw(bWka|=Ru1{mE
zM_;IhM*Z<yh(*4(tvu?~g^0rzl?_in@29N;UrQ2)_*<Ueygn4wS`_cq$ALc0!Ua8o
zS8zhxQ<8q!W73h$!L9yA_F;~08<Xx&IZ$4o?1!t*!!`*9hDXm#-<N%;b9Dq`3|ZjO
zsM@H0isBLS$4L(DKJad##$(5v2t{8%@a|f-Cd+Ve+28J0v{OI7hgME5d9Ke#EdG?~
zC-#xYRSr(d&#&g}04G(*xRo;iukQ$sFin2$8+iX5#uX_e=7qmv+0zEok^O<}M_moC
zdImfF{tv%3O@6F*{G;;gkZ<TKXVuLOv^y7I3ogix-*Taul7)N{-@>%L7rm%vk3VZ@
zTEE}<&iQ7|o%z-6w}Ef!k?$<pT@w8!crC^r*$n=4*3%czZS)Sa@UuN**ejmE?hndl
zC)S(prv?Y@n#Aq!Nciqn>RD`;zm9p5-yfN`bNPqPn<o9A@jV%Vuc%h)W8Yz2hlqjm
ze(zl`6NjGyUN(QUI+fNjcb01X13!5qW$No!{Ezvm#d6-YuIyhpBX#_rIKL4e!ji)5
zeCPoh%Fb8rI{p&!nG~19|4<OYb%KwMF?hCP2;S4kd9*FL=3?@-${s6NHm>%za1VCu
z<_Nx!nc$k-rncAp6YAsmXA;y`CWrlIV<yb}HGX-1@AxnBz4Wff4n43d3=C%8;vOIG
zP~Se}%q_wv^y@oN$$Q6_X%43HS^7-x+S^Obj+Vf<?n-D=c=!Z1D))CT^(S`T!AEnE
z&Ea6oD{~RBI;-X)8@;x5V<mp%315_N!iWCQO8=~jR3wO>23f1KKOOpY&^NHjHY+#T
z&`$~HHm%ox_7}ad2N@a2?ao8LeIj-y>pQQzYJByvNkM#?#2-2fbK(a^<i_`p&x@C>
zCyq=XN&4?BoDskMc*Cv(Bd+0|Y7%F)b)hrtEzODV9-kY3h?thz?k%0c|7+qgVEg6)
zU#i$=Y+PaYx}5k8jDPQl8S#Dac8&doJ-(FUsuRbW$?|LI9BOav>s#Yy{%g#_B|YTk
zN1wp%ES_NQ4fCwS`AWxFBgJNX{mYE`{*lhKT4eSWwD;E4v?bvllKVC#*MCgBW2$H<
z%$cuA|H$b0&x~1klr@FzxLL3iX3W7JbeVzgzrV*1?yJE49B?mtbv=D;^Itnn&vIrV
zb5&TcTCJknp~%_DSTpqnatxpa+gIdi_}4HqH3)o>XHEI>1y_?N-!CIwzVl-%Csz~O
z)n4apaM;THHs*5{9`joVtz_Z{JER+3c6KH6jlQ&5HC#f>_j=CN)O?pPKhy+|W-;f`
zQum}WoRhw=v`02d7JaL~<>Z;k|G5>uI*M=MR(t{eKUw$>S^R&tN9*-k@UQziC;L3;
z&&sn5KN`Mu>qiq#$fcUBe&pxy)_NSDocb(;uOxr+!$nRn`6KuW41N#!{LE!0KlziK
zMe?zIk$0(0<g6ZxWARt<pIuol|5DxH&a~cdeHzrT{v7AEe8ILWXd8?FY$?ARS<@ap
zh?c}_4ZQZcGP6c|Z6ZU_N&H!tJVZO?)M~9(@mZf_4$m}JpAP@5ck^>^7f$nZKgoo;
za9Y-ylIXT-&Rv4{K33Yh*5hTC)^aYIcGzE(|BHY#Retzz_IXo3_ZI#+(czGbrim89
z-#DXO_hP@laGLZb(U0VdXv3q4%Q?eLYvUT=72kQAvD;_YpHco0zteoPCL6j@EoAw~
z6%!cqJNI3QK>xd_Z(CT(ec3dN`EBK!IXn9A;BF7O-_2Yf!gcitZ(ci<efK}(e{CAq
zbJI4~c-kxXL^ufvAM&LnC-(VLu44bBd<f2o+-d1&H@eT3M2GXNH}=E(dnYI8hy7#n
z8Eh0>b>WG9cGmgneqzL>l>ehP=sO#Mdt+TNJqO9sXcf5$SAzcm_Y-ORIC*w-*`?$I
zaX)kYsD528br3z<BI}VE<R0TY#dlVP9IG?q@7*0((|k3##p_2dYtCLuJv6RUb12p7
zgqqGafu>7|mw$`@FP#YQTA%mrbzSK7ujh@NUrCN;<tV4TBFlL@G?aa8!z*n~z(;t7
z-2a`7ftZPtx+^QYDeF<zIl0K8%bZmcM}B)<W1iD48McDjH_+3{%~PvW+UML#UU6rR
znH*s4N*}xqxtB{{<eWs$=Dwlc|2q6E;=|BbIecnz7r7UbFJ0JqmBXDyE$A1)cUx*E
zj&v3~$mQjX*8vXY!qpMicSbt44ukd?JJ^`$q$^GA8f$CQeoEavlY2y)%GEi!#I2vF
z+F0yANVVQOVMo(^>Yb67r?^81-W20nXk=t(2`~tbYlla6`i%LR2N!3}ZPvT@F}KR&
zR;{jcvRprk+I)*~y{LP@F1W!<z2IG*-_k62MVs)Um7#w`cg@C*Bag_!e8UWQ7i;=L
z{HD79%GDY}Dv91}ucPbR>z|R%TlKWPhOHx?K-g5gwi_I79ZYYLNzqXFJp3)^MY}j}
zRe2#TB?D<HlfJaK+sh%5ZtxJX>5wV3KB>EyfAMzK&ZYn{$K3EEHRsT#*W}z2#(r&u
zuIk|VweaySo!v)UWc&_4w)VtGagSI3DLKp+-(5hhIqYTivAX~sGORMLcZp{<=J8JA
z->mtXYVs*cp_w{zQ&u4VL$8!J<?xK?@NC}wy2-wWbv2v&H#ZQc3p0QAdD>;Rk?vvN
zTS^VULL(V&>%gfmy?b}5)9&iSKZt8RoAes%T)<hbZ^GB{bK%d{Iaw=B)-~)6ZW#wn
z;4j-|<)4SclS?-B>C<Wdq-`&~n%duGvT1H5&q6lMV!p+Ld#lZk@r?1fjdPjkR8u%J
z#=O4HS;IfZN3!j~hFuHKoYv%AiO**GXI6FAg~)vf4a$88+1v+n!O~T|b-|8a;sC{F
z<U#N^n>|^n6V*HmJ{3p#1u-4zh_?q!{#eF3h3l~f({64IHpQ@`gXm0+xnrAJt4%6r
z$)cX+_2Gs0qqDEA4=yw##y0(Wh?%mf!D(*@jH<5!_s^gk%|#YhGJlQKO?!d-MdHFY
zFDNlP)FuS(U-yr$4+G0y<kg3fuQBY%Vq>DGk3qa*@v5`99wG-K1YI%LHc$2o{_!*E
zr_6Wbl%{X3&5M^12aXdLu4P=`T6=B$6MotM<7dW+1vf6aYoXSk_WDz!duHUCvzw0d
zY>H16z9``YS%20lo|PRPtA=J%8h>`v$GEokj>!wPPpcA|B)+}r>=n-QXH(0cy+}7t
zy6vu>*Ub<M(^kgbYRu+e(N?g|0oEkCgN2{<u#4+k(YKZR(8~3##BVB~*RAYzZ|B~9
z;E#PA(O0N9Tn3%piSOjMfuZE(4Q-pdIIQ^9j!Nh~v~Wy*<;yw5N_(e9u3}Efh52LX
z;Q;h7C*ZvOuUq_4;~U=eA7`~RcdLH4^GMB>E&lS@9R?n3M%8n6?vq1$rqwR4?<wW|
zTYQ0g8kxtgz?p5a?fxkFgKOh=FqhN-XhoNdZK)~`4j~3eUnQJ%ek!>C(LcN?kN13s
z*uCCyJ?|*X>zNi>bWe|RT#9{u`;ORdzm?7Z$vax{!!-E89q+i+Z>EO9R||VtlFVx@
zbcSq3rnt64DYiq4KVawOb-%y<I@VAXzD4ENg|Vj<Q@aluVK0pG9SZ*xJiY-Qg|8qu
z6wZpFhafNwkm<=XVm6cT2bV?HlfP0C(!Si`)UO+2_xIKTPX}<E@)@Trx-7`~EIf0{
z`?0cUNok~}jQiq2Czm{J`H%RD_M@1|*t<op&!YgI8Cj<smGh=WexbPbs7c9NO{(#A
zWX?>Jaz<%CwVUTD{<I>1ea|yrMP@a!KNWhN-*|3XzTy)~vgRy5#IG&?oBfSHh9F^0
zlKiel{4dYuxITl=`Nznv?&xGqUcvmVW36mp?w5?<KkwC9SkjeWMu%liCMU@!NR*l>
zPYiY1r{arAbWK&xdFnZTUeniz$^Vw?3G{_U{-I4tWPFlXw`AoQK1tT_>(t~OW4_kB
zxRC!tokhtdoPh?<=|+zo&X^qV5H{ycbr|E9e5NT0599gv;OO8q2Ye*3Uo>_z1s#Mo
zMbz*x=sS`D=s~l6!{C2DUwwrAkv{SSYT2(<R2^zE0cVlg7<gXqh(P%)V1-saf7MEp
z_E*XO3!SW#zlwa}g9T=Fv!3l75s+<d>s1{t4MhL(61RRZe0HPgw<_^}@QaRWo3y@n
zt$S@0*Dg}5p=L=d`L*mjeiJ>RyWX_>>ch|L?6^ka%=f^{-n^9Y*E{WzW4-c8wO78}
zSkqb@yO%tMdSIEIJkzoE4C|_XO-W=N|J#H3xsFx^n>Ik7jC-T{3k5HZ-a>y7>fuK^
zuz|>NigaKDo$7ho#ONn{j+wlfewJvxfzJihOFR_~nm6&;%*3u^JPCZa`rSx-%|!@0
zM3)#9BBnrmYXGc4_9#2lK-@GOTDX-t$441C*ZRXZMV@hemVz}lZsb(yg2I>V*^^8D
z!^)XR0Wm|yDtVaAJM^D(xbRPmt-l-GL>|VjU%048G+GReGQX2`Z9Lch?YHCtvG(*C
zutvj|l52QD)HoMJml5l#3=%gWA1Qd4{h-iA5dUBT+V$3rfhMFg)s_$|VD5MGF3q*(
zxhnRN=y#ak<>0T1XCGp1IXoZ1=B?&8d;8%hW7{0sn#cvw?mE-{COX7#IIrYQ(S4oM
zem&1-zKdMsJ{p{Zj_o(gntw-|WCeU;Ox{$%n)sjhhjr_RTv+w~-P&v6!5h9X8Ufy0
z=}$Z*qI&WHYzX`_k#)Y*SNWeDV>UIizhW6{QM%e!uL!i43_ovL<Bxot2@6j;%WV1r
zbDxJUb`JN?@#Qpa&Ew1u)}l)XB~7L1*mJSLx4`GWz&uqgePSIlx4q7sl}{dW(?i33
zlQ>Jhy^g$+0DgmQSx)<0zrSf2wfLzy+1_=scgj}2w_<nv5c^2`GQ!VPrkww}|JfRT
zuLjpz$F;2CR^qo2_~76*x}2IT(!I4l`^N8_A9WbN=XVvo$qz5xQaYgc>sMm<$f566
z=v?19j8k|Bv0lCL;hS7E*Jq|tFLTk^!z(9MVQ*C}{nk2io}btFG_Hs8OuNR`qA{s1
zCTq?Y#;;6&&?9y(wq(xwb@FQ%t`k?bx}#{V5#0nCoH}ObsVaUk-^;)`HTRm7Z)WWc
zcvgtEm+}e0vqEW}btybcx{;k<XlyjFOTLJ&YK?DZjjtYN`ClrCf1Sc88`qRv0)I23
z!e>_YKogtbl?Pklm0@gkiy!QY7|$v1D9Jb)-)EgPQoBRzMC-%iJ$y;@d2sqTFbSWX
z#7IOxasGSjE$GG#`uMPLz%|Q<(GzXlKz$CP=ap5#i=wa4H?=GZ#gnj8k(K>**<a(j
z=No&2-yYn0pV2;)j5vi+%poIAksiZJJBG-`(T90Y1b?{leF*YQ$$U=-eS0)@KKGg5
zmGI@24xhSUn%_kJPqb@jq~`2m&S2$Tny)u`&inlg&w0O<<K^)#eH+H**?(S)of?^C
zvKx<Jzi93hgS-?Q(E5OS@1G{W3;SKl@I{p+@nPBf(3Nat(Y^5E*?#)3SY_rrGk?oR
zU|zw8_p1DOrsK+&2Jdh9LHwI<eZ8jYQ;%35NGapf`0Ik?|0XVt-g!amz5cz=+?%fd
z)|Q3O%*n=Hg-=M%mSB&g^Y6S<=gpwUvaYRc2_jos$ptI9>6(<jL$Cf#yU#&}YJU~^
z(Z28FE70}Zu1Wdwa^m*)$N3#GvdK4=pl9hjM81^o5nsGf*YH8;JM>LGGc;b++q==H
z{=QR%Uv^s5_sE#I8&`I1$N_U1n~dz395vy|(e>o>KmB1>zoXuJM`*ae$<GH|?wq*r
zuAa{?4Xj(SbUP|l&XY6vzhd$V_DAUV**y_{W2<~`D|)l=esalXs~>939s$=|Sbt&8
z_1uzY4$2p*IrsRJbjZErvBj`G?l##S(iIOA<2CqbZy!FSX*{<5p4?oWo6z={&J9K%
zTs?0|&n?v1nO=_$9?0tcLMiqqx}{{we%AGV>V{L8>ELwq$Oy5CM|;D&q}N3noK?~p
zM?qhm=whmCq&-xsc~kle_$&OS!MOV^y6k<`e^z~*ac%grcO2W<yY{)o<vlt(^F`*g
zBG-H`NGwF}RZim#CH$^-Qi^3bz@`{+5?xfV;zwU4SRH%^O?kg;mM*!KKJJVbtusr9
zty>Y<y1Lk8b)z)QUJ=N8(p)tCSRUi5_Z2p+fJQ@01v|OyJR6`!xU;foT`*$W1h1Zn
z1k97+i=1OGhmcR;^47>Oa&H42b07T0y4nW|Enlvn7G}s4bX1w*U(eyWCwNZzpw;zD
zdK!$cdoI5<PW1&3n*AK>);tjWS(x)P9~tGuuO~h$JUi&t)5$+<!T#LFyw)Kr@1}<N
zMD`gF*EskjKEL1PwlseSn9uN?(Qy{|zOivm&-Ed*<9`Ap+O{yxT5{TA#ylx|DnNd&
z-{esno^uC$c~5?O@uVJdn08E`ysWt*+k7vKZB>EI^E-Sqb9^RsCNw#MkNSZZ%zikp
zqq%G4uyxBH$X!<zNvv)__6R5IjUSv;9h+BVX72|lRp7$_Q#I}9J_61k2(0r*{C5A4
z*FHk~M~DaD>)G+iNN!t|$?6C^@S}BxzP0DV5EoKkb>L9_Z{t0B-?hk>Vl$#U9H}~n
zOqrb^zSB1j6Zo~p(Mj$)c@1&#cJbSjOFFDxm<;4~?51v=#xLC{O#ds88NzcmW862b
zrFkECj|C&m#4QeHfsZeM<0i)Poilw+qG#6M4r6jV@*Z$j<>vjkIT;zU?zhmDY1A3e
zL%Y|DM!>iKqU(>5+iLN#H<I1<(4x{Fjn!}-R)cbWiQ#1P{I$f@V)XHC^$~d)+RW|t
zgKM{sYmP00jvt3EjLB;10%l@p_V=m!BxkpOZv^~5q_v3;^<l>F1;$VS{4NaH9ocz5
zYK}#6*FCXx2<sxes~CLu!+!0t<-o47ZiochHgHBAeevGBjtXE$rq2%We3<9&>U%!B
zyQ&ZFtB-91Zg6N}RnCPshEw&|%5#ok4G)^H06L)fhxkGlI^-VK`7n6H9{5M%KdE;$
zh<6<RdGA{Biy$<cWF95Q{VT6MR=rPq$nv`71EwbYue-SS5nxKt*76SePEz;03!WlA
z<dmA|o>?Z9*g#BTmP5SKq<%|Zf=}|#li9L4GU-d><;>is8`ATn-&gUweu(I7Lel~I
zsIoYj(4-hj7PZ<RI?=G}E_{#6Iaj!mGmh&x7q*)JKJd}P*~6{S6Y_nt#sn{E7vB$=
z8=lsEUDN+k>buunKy8ZP_GVp=HAM2^Ni)G|yVoXDE_=V_t4wl^`X2PMM&PKWePhpO
zc5UY@an6MpR>}WPbgt#!cUJj^n|KT7kaq%4E%5BdHz;@<V4$C<;HWb<Jsrq`Z)IHD
zK-;r{Z_8zzZw$?U^Gb8`#Ndm~fsrPj$bJMkvn`yN&)iA-6|~zM$eLM4+p{OW)V#q2
zuvK4d7925q)_K-@p4;#u=P06UF~>7Y!NtUhFE-1s?~QlxxAN;0d+~jSd`bLyrRcnK
zOrU!^bcdZ`f6v1wFcBV+P0UVwuoK!R*T>4QM%tZRvh|4)#;oxVkon2Wkoi-P`BS3X
z(A_srus)xD{m#2@E{m3sEA`ar?gytu{oH^2boZU9?2C`o{0sN{@@bL#htcokvsQha
z7S5cm1^3~5(Px7AH_&6HE7#_ml#emv??@TO8y-iz(Y2@ZJzqGvgYh}YtO(;i-7}F7
zn|xO<bafxS2mQay|0O+3jF@Mui3^K1Scv7nVNPx~?5U-l>{h`v7g+qjGB*R3R$_nZ
z`wiNE<h9<ls+W{Gho{hO+d2zP>WhrIvrst~?1kkWIp`dA?1RSaW6VbQVBE#TyCTGN
zGWA>GQ?arDAJGZ+9^-U#Rl#pt@pSNKR@U73Nqh+ClO~uG4evZ79)Yif8Bb%5i`zzG
zyy0ag&OU>b-j#_faN1srjb+lhv`3SF#~6ZK6Mc!cGRN)xwsT2M2YB<%6~xP~V{J;0
z5Zoo~$*xKi*>l0FuC2X{wLP-rk&-6I6u*`n0YCc<{tNtdwhw$InrFRFbB%omUAuFs
zw(KG4Ym4q_>jU}NORm}{Rm9A8^IUPzv{zFHMdQeP_QH(!bW+=-hdETA8iV(K;&fBA
zr$E;)UDE%qT5>h*9%-(h!TfveTk&~mU90_b8SRn#Q<A6ZpX<tF_HaDz%l&IHh|N)#
zC?~E~PF!tTbQ|aJ{$#wXpZDP=%ZV#T96P!L8mQqMpVdKR{EMuA{B7OK^_>XX{W?|H
zc$zN*eoVTS-P|Gl^^tWCIb>^h`$hNoDr6_kk)M%uGDrKR;5pt}))+s(2YP0%g0v4Z
zS0x#9rDr^RYYq3!N1~XyaAByha}%_4<HFWIM;_0zcnDrT01uCV2ho#9Z-c+R^(XtI
zcl%j86q{15KAo}P$2L+u^69L(J=6S{3B>#pj`GXqe*``B9rm{zs`jT2U&Dv-Cs|L2
zk++AI``~xv?MA3O5Xg=j)3b_ay5~WY$!cG;k$$>zSzFW$4d+rz2HDlQ8+m;`b_TIi
z)%I3yQ17`W^_g#x$4HJ<F|nCe@RX#D>eMITg`LC5U2W!l)m6a29wvOib`1mb?rBw)
zFM0K!TbU2Whp*OG=E{5be4HOV=seYh?CS&u{Cj2Z=0>Q2Gm5#4Ts7=+vqtas-r0yg
z<h@I@>piPy)c(AW+8oQW*DamCmv;255B?)qRU5{`-MKHRZbo~2ANbn??!~7(dpUuh
zChTWifrZnsRqY;b)#{x)gB${#NrlhRf#-5>$`){p{V_WPZEBr#t@Ep<UuyR?rhPBC
z^xaK8#B+(07gWc0UxVM7T-PxDWM`SwH<k(yK5{E_n8$)PGN|pC7Q(}@JIVxu&J`ms
z{MEYjxngy^JBa@dSvwgWehPYJ-+5fJqqX0_i|+@C(FcLaF{b@$+DV@b^PGY21&P%U
zZg1!DvFSE1J3(9Z-9;|Cciz}C#?p1Z8v}ldd9gkZ?qBdJ_8M?qJOsS7)4x5h>}CEZ
zktchREy73FKcW{F^Pk*w;o=9}@2$?Fma<!Svunheap?b5(f^*p5%GP+Bjd^3z*Ai#
zvYy&gnElkg;+&_dSr@y(t7J=8byl>iiCXB(1JT~)+pbi-qOR;nKD5=|HG*&6*^8bA
zF1f$`%3f#&-|<>Ir=nNprG)-GdTm4w*!rFHtM&ek7j;fS_KpKKA0USszCQMV=h{6N
z9?f@+I4i!VFdtY8;>m}zp6dEa_EUS-<~+5pC6^K%tg#Cv>p1_58t2JCHu=(lc#{5;
zj3EiE$yug739R@P+BM%gx6Z=Hd>_Fl@YxxTJ-<#gr}OJ#InW(6M0}z<NPbEev1E_-
z4&<8DUGvPE1FWkg@oCZ75p?rW%;SBRBiC7T!h>o>uK7)PH8`w^_=_(I|JE!rAHQi=
z_}9L2&8hIzyZpr~wZ7Qn+eeG{(QeH@+_dXH+MSLr(QhXwb*2RG)ccE}Jr7sAF9ddr
zZ(p}?QfX^q%!rF-56!xUx~bU~@4=Kyw=utI-;{&TjWI}vF&VVmt^d*;()23-rlnW-
zlSi+wfr~EqQ!z5)clJyYe01E8K!>_6*#<r>y~c7(yWaCG*OZ$)jW)vLclob*7!NHJ
zBYX7`?fLn9`Rsw`CV2N7cwYiqYCtBbE$a{eL1gDL+N-XDexIaYul?X}=`xaStf!UY
zOD6KsC_a`o;BtO4&~p3x={D+1^~wFnF#ia*#<++7lj$>0bOy&W^XB$g`ebctE_UJL
zvilXFsao`|O8$q(5Stllrim`^%fa4fe@YJh<{+Qz<Zm=Z(S69-*t~O|cldAQV<$#1
z2RPS5TXiEN%|TtK4)gA{CZ0de&2icdUaeniIs5J9n~hx_9e*x-lDhV_ysMS|MAPWk
z<>9QJsbS#hTeI+!%r)C;buQ)I_16s-41z~63MRoLSOt&Z>Vt{(^1HF8fhlr%^qq6e
z8V`=-@!o0Se7DvyecO6e=!Wd=a8eh39X~yO-b%ro56nZ|a~E~*r_H@<wU3i`ZZzSm
zqFabjC~s5WUVq%{>re80y!vAuj^*1hH(P11>o3rkViXIv>+BNW4#ivg=hi)c;?S(@
zcwfyT=3jP#_@br1dlvMR;Ip2CFCxj>bI2Lf+Az#{F|-;4m*`Q%(Ky$t1^K+48VMUr
z^g-S$d9-^x_AY(wMm`4dYZMPR-=lW!Y(q?oYpE`3+zwmI{v+mB^xH*DILSVi$UT?#
zNDc(Qgm0<EDK8OEFwUyrNK;-h%9IDeTi^U5A2R26E50P1e{pCQb(P`2;>#`c_Y2`P
z4SyINMew61&kmx?b*5qY@uTQ5z#_N>i*y8s`(0l#@lNP=EBC2|9oLwpCo1<P^Z9>Z
z+?mh+U+y#Ko75%@9+?~W{ELh}Zx*gH`h1FKG<Smeao(qAUgBCVb0}Oy*k{7ERl<?v
zq4M(_`Z&(-!F<8{kNwqd=bpKx-uHaXrKk6*-dM#*=2AXM&hrR!uYx%ijw--WBiCzz
zH;BK((|=_HC3XJ-_?DiZNPM5?)UJYdhBG)b+xxKN!`$;_^r5!?h3q{rGZrzwsWAJ?
zy#D<>FCOE^_c8c6-^-P@uLaA%Eq#=LA3b;U7w_8t(5?M{i2u8pvtM&=<!<Im^d(;;
zxZ_L&(=Pfhg_r0(b;--4!t)ou-fPbpvicM9-s69Ff;Z*ANw?lT3mS)B4Eq*M<Q&ze
zZEsi#eUwtyllP$yx1XJ%GbBsF{U9FHX!VBvb1YVF>z5VYoMnD{bLHuqtc6qp+*sY`
z<!e&cz_-Hi+x_sa8Qfb>`~=>Aur}Xmzxwbs_J7FuE=ih5^YrA6?UFHb^PN=9+vxVn
zeMS%Ta4(z)H+A7Fl>4?b!TzJ^r@>1vvLh2W;6-u>TnaZIiE4enOAM?NoxoeKz%^g?
zr7<nde+Vzvr}5Go@a-5pCm;0P+y2ORpPw-&9{zo-qrN%#&A-$nd!M@(dcUWYwJ=~V
z{O_F$;oqAJ&4cDZb1|2=;9CcohoJ-KVLkLHSqHCYFYXo8sG1P{o1)&enj5WU&5daG
zzaRa>G}}+Fms)zYw933J0XN=!c=Pi?=4H>;f%K~RvE$EJGnyZ(d$Vpd)>FYC+PM9X
zgkgII4Bq_o%?*BpxyaJtXXE=CMBmbN2Gi1^Qj;1?$5u|VR}=j&6<=)aTbHiQ<<XC1
zz+3<wdu_i=eL?#hJan<<r7u<Cx6oW|O|N;$=|iRDM_|WEHbohS)xXkqjK_0?KfyH!
zhjH&+?*iBIL2%`s2CjL31YGs+gJ1t}a)H3{;)&oF|63;i&{(qIKPxh5LF3>o0BhG}
zyR@KjY&62}2w(i>^f=I8-!hSk=+B9VTe?I?O5@kIo$8Kbqpj8c0r6X&#xHZe(LJBc
zJ;%?(?<wZpg^TkR&mRQWcTWS?$Ug$Ef(-on(2;%UUh*lau9QP=3wqY~BwIb&4xqa<
zAeSX~8<5Km_qsSQ{jsm1lW<1*oOvN~#a&;bev7vBF~~@@Ta|97{`LRMr+Ch5djUK}
zeR^$|pQ3Fs^yz)1|Ama{P|WpZ;Q9o40l>aVu&d^=&YO~5vaf)edXG{6pupW{oy3o!
zv(W{oWNVISBjcLaKRnjf4DriG@kidSmTv`nM0{n&We)ts-ABiMy2;t|>MoneXFcZ=
zzqs(u=eKd51u@ThLp)P<quvD%t?_>A9dnSCykC1Ij)lQ*fcJ0~%iGg=&vNqfKWX3b
z$DfBxjCM8g?$uR%UM_O?MHFW_-@6u`Ab9Njr+vK1fSKvI{@r}t6MWL$;m;f0`uS<S
z{e0FPazMJTr?0>J4fyhv=HPXV!7v8n`9+c8CG%Xrq}R{xL3(p1&m6*UXU~pH>&-*2
zGHZ}EWe(>XDNhUB?@U&kD0)?U;7V*|-j6JAuRSNabI$i|J=Ze*fAjfw*FM7;6w-a<
zL%J;?-`Njr3`l-``5^_n&5Nlr(eAI3zl#16Bmboqd#;w8MEUnT|NZW-zFUaTbBE;_
zman+}ADvq=8XB;6>A9|5D*Hp{-Szec;?Mf1T|10A%Ur7j2c6i&N%ooPtcb&m|7YaN
z?Yj^dc^9$jnnrwdjpXtyW6jI~kB@+pB4~?zx%LK=Q(p;fpN$T%oIU7U*t02~PW)<7
z!*Ev*Zg9-}{i7ZpXNH@z%zY28s$xyBE}GQWk7*k;Ru3;@j^@uLu6`Zy*cHs*^b_Q7
z;sZ166aLX^>i7z;!_1~UVAA|A2R9plYXvf`g}$BuuCc)N3E<ib{N(ss*ggSl4~=vG
z3%0v}ZA%)qEx_jBU#$YRDqvfIj~zc&lll{EbAgSuS_Z81OCr;cO#-$x=rNOl?TMQ6
zn#hA_FV2SMIEzL2Tq0cZ{deHlo0qP02g<xgYinPPzh*Rhq~))1&$%%VEZub%XOmFx
zW5=`Pw>*AN@c9bzEhaIpaKuE1GPc|-XHjn&_Q!$w@yi}u6*Ac!#4(%HRxneijlC?s
z?!EAg#G}=V=aHwtIe}+sKmXQ|#Kbup?*O#A2N|=!fwP$K4JEM0_Kc`x@2k_Uwi@@p
z(f)Nmel_5{1>HS!?UbD1t{shAv?klyunzt{Jx>Rit01+$sK;v0Ao-UquC49KaeJ04
zYskZq&W~kJ3;G*2N!pik5o^h0^-PoB(N_}X>^xI;2;KRM|7K~SjI~f!$eNns?_nKc
ze~>q-wODe6S<|<k2iX{v;8N$f%Fm&*Ts>QOz}V)6pPzFBwjQ`dm)t4)Xd5(_<`p{?
z54@Z4c<~3V-BIwBQScSTBD5c@fVJ}MJ@-BT40x4pvjCbox`y@7T7LGP$<J#IXZrGc
zw+Hawx@U!_>d%ND1AiWF4$T^huT;MOVR4I}Yuq($%!-}9G`<rfWk;{rd1Sdi&fehm
zZ~^|qh7psPlbYlLv#618Z;Xe!&7xVrxBwdK-4N*Meb_AOTwvNmVR*ss%_8Wrytg24
zVebfkc@{JmhW8X>3%8Qf<pkghyXDjHMIR#8jjX9z2F{OwbIIlyv=$!TgDvjz*{{*&
z_<}RzcksR?<VPK?8y@eeqaMQs6Agmf9(*eA;AcL%JPY2${-t`ireB!%=$*CX8tI*i
zu}D63@E-9<y(`JPWWVbEN%qAq7}oQg_EtIM;U?>y_OWJseq!i(&`$yKbab0^tcH)8
zgD*n^oy?*5my;_VX6kF<Van|l?(`p?C?Ck8$B6|Mv)+>2mv1BjJS$jtD=Z(&f{$fc
zKK2IwfQhUbVn1c@j`@E0*olW*#=U_r<stNz@G=wq+A4RCc+lpm`l$`8Tt^o+#f?_{
zfcyAaBCi-bhY{>?;8DGxO%AppbCH^kE&cI#*wesx>Y%5ibvJOH!{5Y*Fi#dw^!Ea|
z@UD-=u2<XJXzS5a*EIwAQKj{JTn9fIi~sm~=yE1G#UCT47O=XwYB0)YGacPp??)dc
zZ`6ISa-20cG1}-%zfR;wCB9*NHDzJ$wS37vx89=%?QvXBTdgIp5BZ?H`_lD7<Q;bg
zd^0OE+UTqZ(T-^8i{MH8|GZpl>$UsXPbr<i+FSJPofUj&R=|rfSl!sJ9pJY%BI}`+
zwm#1C`VIOk`b~QfUgP8XGH4e6#Uj~*y&FsqzKcb_Bc7Ik&qTO~&1Pc^*zr-dd53#R
zAMzC58OHw&&yXL^>Lv2ANEh*9Ba)RmNBPjKem{rC5%x#yICwVyAY;9mF=p1MvN6s;
zK|03S&l?VJ_v4R%XU_4v<BE_E(~uYMZ5V<+F;p>u=oY_8u`f*LC)ik|Ax}=%CHs#q
z@uzwk{HoF2cRx6R`%UDri)SEzlTDgWe^h7T9h&K+`ugE)oLzUDP5U2q+V??soM~cf
z$C3kS<?~j>_MqKuX}uv2ALj(<bRz4n#pKp+P3sLWTD>95%4+T{y0a)aZ6a&0g>`3G
zt1ZZAGV*4(++^loKl+OwSdaKIYww5P=7+@Ze(N84ewcheLmjYN9*C_A0_!jRMbv{Y
zYP%3Uejj`!`6;t0wcJlF>cTSB<Ix_7Wwhg7>e$1?kcss>^Vp9@PFBg$2X}Q+Q*LcD
z=bnL+eF64Bn=wsqe9~-s-Cxu#{{3Rfqs{x-mvy|!pE}NaPJD&Elk~m9jIs4I4uPLp
z<P#qNKgCy3*AhMCC^4lsh~*w25A3(B+iqZZ6FqDUc*7^s-U+VBk*IG3cb(u3d*1%{
z@t=6ZB6I+YvkGt)q~>-7I7@z*ai?{!qkhw2`96G5x`KE+27}eT{L61WCVuq}H7bt*
z#}W43rKk~mnEhq@!Q;cndN==)8k_rpZHp=D&YO#F%-B)XCx4$$0Ng^qJ4?oISl78Q
z{CtIK-SQ4-;O5ZM4ePdHe?d>t3Tg%Wusc%AtJq@|sX6v=RqA+CRqDi7s#4#AR<*YE
z8I24XjZD22p3rm8XP+;?cJl7&+movyWT50~a(Sd(YpI8G*u)bwPpW~H0Ix-~Il80@
zTCZZCG&Z(;5p(2E?e|5r{)6_n7DUk_;Derg{^1kiEp_N*4QXBM?6fWxM;EL35O{`0
ztxP}{t0Rx}ab$wp3cpXFi|H(F)fVtKRv)_?nMLmHSvQKGrQ!K6eis#(9lBoRD{3Og
zv`~0W@O_Ifl0O&^@~>OG@!i5%YCpZ0Jk~MdnRz<nWoI4uR$XH9RqM@l%sn^{={)3s
zssGeP)SpC7&0%gd2c^Uie9W7FY3sUQq4!3p*FpOoM*lg>Cyd@aYB_r%(YspCghoGv
zogMIZ_dt{XRJyGBFnjHO?(=sX3uIBRE4%G~hMD*Y+Ma-J7a{ZZ!*Aaxr4HK$_5wZ`
zh<87e6(0#~=*-rqUOa@_@Zf3AO7KNp=gj%FGz(6PINPcm-Jy7dIXGkza+<wu;CH@!
z{Bt9>9h-NanSEZavnT{Vo{N4fd?%4<qUB=dXDd2;i+^1A*T$RFBPGqvj>&5Zm~kBr
z{Wg%7Sr>ey8NIz}H*_r>@-_DKv|_g%V{Ad*rF=2L_Xx4iAUrXGKGotM-Q9H|@%Vrf
zf28EA&C0<Jn7k(=1-@wAMUON;;m_-+<2`jFeFt?`$3N3w*M;PDk09pDTtzC7A?G-Y
zBFoL92=X%mp7gHmysK_Fv^L!w%<CZ!ceOtnK{wF5-c+20K8oj+T&A`<H^t6>$jtr}
zeReVb9t}K|?a}~yZ0p1218Lx6L2w8SG^A<ZBWW5qqo{RV=KTMZ`HuvK3=@4kb(Yg!
zRA+Vsu+@D_L+f5MzNVk%oAzR3=0C;!g`pX{{#oa*@f>;GXKB9fX76zW^-O=g${+o7
zX=C%R{C@Pl5gpiZDXrfV<DnIwuj9ZRo&Q|aws0=_BjEiw{Ij#d#P{P1edBy`K*k5+
zdxm9G7cwXQCi_E0Cq8f>ey6xlN#xdJPoRVOp@Y%T!DQ%Q4)<czmwOo)pm*}?-2A3i
z_(1~y@+)1~4CrPp*@>%u3S7Tgw*ATm|Ag*H2wS`4vF4wW3z%4M+JEz4)>Fx0<X~YN
zF3VCrp6|&dJhASg#^%O=k9qbr`QT%9Nn_`F9CQ69@V|nOHC#<>%4ZhoTl!-H*{j+T
z32H94ta5q2VH_T<i$6o}O}(tOJo3o*j;}_Bk8e9LXL|fN_}Vj!x;gay+Y4ua8z=Q9
zImjo*JMC|rPtF7OaF`ld8e0sz1Kzf%g87+Pbo1g`%@Mr*LGpgL-s_8Q#Xo7pn}8{-
zbq7o_cthd^V5J@Bpy(XQxbPudXzYqLYwU^NQi~^J?9#344!C3Ag>9zsyrMOO{$9x#
z5@Vdy@8Ac>@=b&L^zfMg|CxPSd>X&S=MU+VGeO%lAHrko6!;8FKLDRkum^tdJNn=r
zI`AD9?mYJ$kEh}O25^U1e-&DP7n<3>#x~aTYO6f(VXVR8d6O?&O}oxv<l%y!F!%`>
z^JM6vNOJ_95;Uf1D|65|K{lEH;F}sdJm6QrUkm)m?nU~p0QV02Dik+Nc<}$8v%APi
znOhQRt~3U_-rrGS{N178vSz^nzeZ;P-|P>F3{g$amgdi;VgEER?ML4{PP=^@syG*R
zOxw{XtEtgBuC4o->2b~L3F5bJl=4meV##&+6(wVCisGk2=13-I%Hv|_!1BC+@AN$H
zQsFg&=UwFD^d{i4Jnurk%kv&i^SlDzq6qqA1Uo+nt$dz$wB%FIZvXqt-P@<2xwl-J
zo0=Z~g^a(Y${cLm`#$~n#h?4vt;MDBSvs3YKQVCBS^Ow^jBn`H;*~YzSJoSJD^tMw
zJrS7SN<DK^=(sgvn7<JJ!-cH98uWg~a%LKa+RpcZq2v^F7<6$K_y908{$?NyKK@%6
znq3%vm&Rx1f4>h5`KN$kqzgmW3+@`GR)WQ+?>}9de6zx&Ji7E~(hq%>N^b~>7Ihv5
zv<Xd$R$rwb51(&VD7JZOocew_a6FB_aK{rF>yD@0qmS1Hu8sG=a27C(Gzax=!5~<^
zn;y#(^kLx7;`v&O;>{mouKZT_S#Ncpmsk^L@c)dWr`A=`UOJT-pilYgvHh$*Rh8DK
zeg~~pB1@&~N}sAW#L(%(SF}Dumabp76`2@B-%r3#9;NS0old%(^xK<w|Mq3RsE>Sm
z@!|VsIOQ#VU;Ua@jpM%hU|`l)$q8GZ&;Bs<9@!o`|Mv}SZEB9(ym!2h8n<pe<u{2d
z%_o0kFL^)#biV`C#M!{!Ue#3AS;21-XL|!b$C{z$-thmW_Bu9g$c&nqq)!vvIxb9(
zym-YS>TYdc1w11oHPTU~2l&ttWQ&Ve0C&E}FGd6VFHKRC?1D#FFS;(hUA#m(y*FNO
ztZMJ+{OIE=Po<B`Zj#N^ihf;6-cN{6kWXFms%R*9Wz;0DjF!|zY91WfyVmPp?-X3Z
zXAkgu_O0wX*>GN;i=c~9d8vN?JNk(AE2V7@=@-&Zicb)8yTDwG4}NxLJWuxnD+lf;
z)wRq|?{*(PJvXi<f2Zr;_si#L$19&F`(Ow7Jm10BT#}2=vrhiZg0f2dp1tTuz34$V
zJj?ln+4vcd_dfKnBxi+k_GWt$J>a`5sVRnENzdt-B<=Nl1<!<erfYnpJ-OfibnNS2
zfBWdACRMdGv99XG)w_=JzSsQ)^_}3@M?Ki*{BD1h=>N_1dGu2JQOutQbJw8wVk<WN
z0DmfeK^wanrI?kk?3d7r;84!=QqI!u!oQ{b<MyfU+3AU%UhO^DiI1XP*EN=>IGaH*
zIpAE+{u9r6ZT_1!f`16}*SkE2+%52@`c^jnQA8{yCwi#E&SjbWE?ryPoUQHD(rv(}
z{{}f)ePh`&&=1y$Z|_itVm-Iv7tXQc$ifEA!UmlIU1=S3J%i8ZLes9CuI=;ge4aQ^
z`@YpC{#nMeZ?zN09>53GGi`4jF$Qe#t>CBO0^~dT*O$O?135uKu5F(;@p;)58lU`{
zwS3gqUe>eXfs^RZ+%!60F+p>YFJJxcWz9O|D(hMK<HBLz&BY%#^Hr-o1P*;?#oi81
zOf&~i=1$$W-Os-B0(|5-ZRDzL^o@<|tTGi*`7-<^z4$xe$KJXdgojqvubzv~#4mEH
zew>fme%=bX{irV8<L&RR_3*<ul&@=XbRpva_LTYw<0BJZ)VE**u2(HwL7(mKzta6F
zpY*+Lh?COqu5_Cnv{CHL@3?zo`f?o7W9qF=pHG_WvwpE;z(g;=&(nz>34eQ4buE(E
z5fSC&#B!qAZ)|@@CPb67&@(xE)5I=}CT~suR{J~Bzu9k{oa0@;G@7hSKRfcWX!6tE
z?@OYBExEw8a~>d;m&~G1`5kgq*E7TK0Bry-dGr1GMmK}cf#=Km+SX{lH*~UW8RyFq
zXTT39d%x!Lzc*`~p=L^i>p94nPvCPC{uD<<$A=Ga#s}9M{C-=<XtaZkrG4zwZ`f8s
zYz5kx9+}f~7a#30v-%Ft1<}{N=VU|M=fL}P<lS9-Xj{*iX6qdZ*&Fs9zU~A*4qXcq
zBdeosW*zaneIv-%MsEH5OKBfC@83s0;pcBKarLXX>)ijL{wg}F^=&)m;2!LC$?+c$
z<I&jm&^{|mdoSGcEjKdmV(dC<?%4AU^_&}1dC~f8Ldd>4`mW-mdQY9$)AFsVubXR?
z8#>y?QZt{?y`kJwzM<k;d((7g_cajb(Hy9a>K|psb|RenARp8k?y=u(z#gmOL2|+S
z?}PS2)KK^HT@@j(EYA?%LC%?By7p?7lgl-qt}*W;-D`;{T=TovB4xVvRuwt6zPvy@
zWS<=pEwTNL=317ntqhTmXRnz{xt6VGxpuz$-r#v$%W<#8u80<A<?8pwP|(7#vC8Cg
zKhM3!+19?LL-hOAJ{Ti~+#l**<D6d$_sAlyDON?hh|U*bED?=mxUP}6^-&k@n4UdD
z*WL<63fybKkz6}7{j6=bv1%kf?z|ChyTnJ_b}KLD+DP{rb*p?!&r1Kk+`XT;iu?KL
z@%uFXja3fko8=X_cp5p<y%rq8wNY+6_Nx_Vjdp)KA98UP6CTI7*J5crQh&>rSLj}&
zPKL!T`yhRJMY^^zJ(iVKLFRPnSi!Y26g!vu<Mex@@DYj)jdErs*T!48?X{Jh^?8xz
zV}f_>t<Xhf(W;>4_d~XCy(_elbCZLD>%$fXdo6fQv?_K9*NWp_euP(#TQwLSed~c$
z_&`!gWanP=_~Kl1FkYf{<BJzk=fK7<b0TjmE_lBw<g8Nh7k``dE!CGf#@aPue^hlG
zmT>+oaiyA`dUOSNXlFGxGI|2MD8IAbQ9bi=*~-CB_pVjlu;fJe5xL~DpF$yYLwt;3
zWI|;CJ8EI=!myb)wVeKb&sy{LTbKU|UpqVn|5ADFJ=9dEZE#_DVS={a`iXEBy}j1^
z>1n_A!*^*@e89}lDsmP_@YQKAwa#wdkB$%=WiHcM^pULoHb+!<5gj9VtaoyP_$;<w
zcLIL}K9lkj)D70PuVc?w1d6)njmO_!O?@3;+C%&`#F^rIh@&~|1sod~+wo|gQ$7t`
zHS^rjW%#)GEqo=XVe<pODQ?&mq~1?51OD59-@6`T48_j?`*>%ufv2jrqI_UQz^!qp
zt#`i?n2XJX?gaWoG5%lSD8zg9%;h7Sn@fC=ot=TgwnfOhBzp~(3^UPB1}1bQgSG}$
zciw3HJot*vD>XaD`f@u?;9ugMQQ0Q9fx|~t(@XQoK0o243%{A>*GHR5Xb8Ki4E|mY
zp5|xeUB4LL@NA7S^vm$Vt@-n&UI9Ic7W7OfF~vyz6_*LN$Nq`Dd&w+f)s6K_E~}6|
zJrcZ5b5j5Q%l`Qm4Diyz$hjtZ>&MI*;uCGbGbPi;wXKsJ1^+S5F*N8z4re9y;Tl?`
zR)^K`E(eA#{E3mkxF&LQT-vm-Ty9}m1T4aDkX)C>`o$KO5c;3!uQ>yjxs0n;v^Sw)
zm&5#pv*t~!*eIWxvpAfdC)JzvF;9EJV=eRK-Pb%(cOWV}{oBZO&G>5VSx_sura61q
z^v}t)_^SubNmk#S=>1!XuLu?oj^y!APp!>$%2gNqSKw+ZYf8U`XSLV5Yh<sia1=gz
z?$jXoIL1BvQx+dO4<q^ay=!|ueQmr8{}gn@nw@~3Ykb?zONeLk-GQv;`Es6_@+jYn
zc~26We~IgQ{#Bkol#Y{l=Xg5UuASKWLG0ilG@x1qCzrT&y*00Q(}&;y7v-0$KWL=u
zZ}F*NKX(?kjH~C`;6AlSN%w2fn|}`7Qluif;Oz%i?HbCyE_9opu}(kB8PCd%S`K{}
z=yVOa4flQC5ZWBwt$9$Nz{7doRkp6QY9|P9x^4zt-^KM#;5u+IwS4(4csHfnI)mD3
zZ(c}io$H~5KRWY<{=H1Pwv7Ka_Y+-Wa9mn@xRYs}@W>rm*n)o779<wnqdj|6+mu%(
z{k@95Uz};|o=)jJA=W<o<=gk6Gpen8eS6Snc7p@u6eQ5UBE)Oacgw8b8J!HjDEl)^
zd;SgdL#*0+_ilWKe%gC6>Q3}g#i(V!DNcRlj{ZGCPhwB@@n7uClS}?BBY(|j^VjTp
z1YXGyjY;yShxm|c`_%Dn>8;3!O+oMzVGMhrr9JSg-N5hqT2=dOOxsPskIrx5PYQmn
z?Yq&mUjp6jyAl5cbBCU5_r$t%_R<rQeI}iIqFjS>ph5WV^Vsn7!H1;-@+tF02YU8&
z&ut^lqjt(uP&-eidSlnO=Jh1`uqT<LBX<OB{!%CNDO>c=EWh>BAFazm%tGVXzu0*@
zMJplX0zR%j`Swe6aB39pJksDi?dQGBnQZ?yQ-!^ZoSeg+VTZl3<UE(pg0>rwabf0Y
z1N#>bfnVy;cl%d<wHf((Fc1Hfzkc#%YgChe48BnG_RKyxc%iS)7(6E%TxBEoW#3lP
z|BLhP>M4cSk>9y+H@vQq^IO&LweY%5;FCNsD;t})A#W2?O}WD}F?iEfo|C=dOh6{{
z-_VETU8MKZQ|G|zbl={S3`f>!?mb-X#wQ>gdGsgRKDnfl9EmDuuR4CTuAlx4&uOoI
zHF!||tZYr<ol(Kwh%Qk}->Ql2gHB!lOXmDQcj@)!&JQ%n{OAmNAMe+GC#|Ih>ehS#
zJf`Zi<F|vCvEXPdK7iv3$d3fyM|khY>lexP2Zqt`Ox2be)AlCo)5cRI7qHWhGk4gz
z8FUTLrR}}sVvy5T=G7_v0ndfmhhKaf^U8dM@r4vWLR<^|BvpTP+~k>?k1v=JKOMeW
zPld0vALirr<<ARe>PLM@$I><7-@B%>7R0wBX`U@VjK;3<es}Y`YelnaPfeC+!OVXC
zrfb*p|4-p>A^Pa!arEDGeLs&&$Pba8ufaU3(T@4lJW71dt-06FPYm<B6ugTcdVKIz
zy$e3LpYeW{aSrBXt`0035&wdZG4H8T&YP0nV0nHZdLeVCywrp-n+u`;2(k#Br|s*9
zS>LP!7Y@}QD@xPJ=(gK|17D+ZaV$@g9eVN(_BWQwRxjwwJvbe2QakZ4@iny(Z#x97
zEEsBT_MZ37-pd>lIfU59ZmqU=0$CcvO5)b(vyt5K9S0}!QzG*>31$y|uO8+3Y1*|i
zi1{Jsq&<eO7#*h`ePed*IA>8zc_{q%S)PqNf@i<P_`3RdHZ=f&|8(Q?<bUS)bRH13
zix{8w<-2_TH0%3S`B?rE>-#Xc`5^0iF*K36zJJJbA8>uYD%mlZAO0oR_j8-<`d;a1
zeLI2Z`0M-Ex31Oj{|~Hhi|^CvFO~i4du0{<ufFa*>)Ss6mssDw)VtE_`vJz8xfY~*
zd27M017LI4d4P4Em0sumwrR|r^cAfKS4SygEsyQv`8qGrTg#QK2i8J)tKul%F*hSC
z?+LR88sQ0A;}gjLOe!}OS>gK&t@lj*By+sp+Lumwgz>p!HJr0&ZTyvn@t*)+TKfsc
zs(v_sDy>th9<W=Fwlrh?YrJ9hQWl${`c}pnW}J5H$YO8&j2FGl<pD3={^#cbnd2S&
zyEmYmYPa45ak~_<#M0Ux^y|IEp7+C-j@*&gAA`9tE&o?wLk1=PhsMdf-!TsPKMwhS
zv~EaT@ud_vQ~ipbKu+20h`}c^EPjg#G>xa-cyuWnd%0)v^U0a`N2+~MVl-}DSoFRm
z@*|19Bb}kEz}-{*8}N?3=IZI>g~ZM@Q<CR9sl&>VDW(pae@yo_^gZEmCNxxlz7z2m
zG%1Is)5?rdZNK|jzdjjS?vz&+5gWQ^NzWmkkzQ8&VdpaB_~a0JnQvb0!bbEm@(jv5
zX~WqweSQ>=wilkk^MRtW3iMQL)%ic=JeT5OX1-7PPpoNVLs@8KWZe23|D+)LZ+U|+
z{tP-Hu&1Dd^4JJ7c?kFz0zNwLx!dZ7_C14iLl=g-2f!ftJamGIUVrd`RZgXJtf8Do
zX1dYy2IPn7Jq~d0rGISjGU=SL3?Iv#jH{7rI$Nd{y)cXTspwca?LqX^2sX2xi!Hp<
z>Z$S(SApkQD@;!i8rGT#)8<m}jXW!N@FNS3D)P$UE97NIYJ%uYI&)2P+7*~k)`=hc
z`t*DzfK57G<So_!?OU4ITTlFq9N2avyM%A)c+&4wx8rEtb=aoYqj$}euII{v3kT`O
z<lvuNG6TK%TK0{&`Pt&rKc_xb72l0~G+#GxrnWbi4)NWe>OS9^KYRb}-r2Hqi_dps
zRManRPjVJT-!t@+;2E|32tKhOegw_Ap07aXt{^`;h%ITyQD_!DNMD2JO}N_rj^G&D
zHpiIMPu}U>bS3?^;b)RPEqbc7_g#J}I5(u<`OoC>=$+1y-YLOc;_&(={#EQa7ss$$
zB8PjYgy8Ka7^|s}u5p-{!wKJ69u9)U(*BNji2i5tExZSLx5fEP#(K}?Rxcim_w^b_
z`o7u^zTd3AGUi_6cl&nz9jo+Cc!PL__=kAIZ=NPL3#{@tWb&xN`Q75l^0nG?TmpqQ
z*E<QWwJ#=_=3Tp4^VU{*-EVCbXW@i==_HMp!5_BgM3eBf<SzVO5n@ljF!sz!)m%OV
z&o6!~aaD3R{0Lrngj~%e{<36URx}AeOc5_4&pXu<$YqZe`*6ooyQVsFm4CRCx)t4d
z8ut1)A2CMudWfIMXLoxk>w<k4MtVB_64{0^{G>kCODBG2`O>B>4EEg0`G9LVUr_xT
z;wI=uZR6;39DNqjXV=5nxaod6m&@M8#-yJT`srG3Qe92FYhkEo+`RjH^z2dW<;C<@
z>mS_|GN$8F<9~8Jxmw2pjO|9nnHW<6&yBd9x>Tdek^%PET3uFjHqP#8TZC@`yj>g-
zUz0zDJglRZmrB+Zw#C_d?r?_A9@bwYu(smsICQJi{un;g&pzm^{xCRbr~>cj;2R|_
z<qRjU<nV*5p!073qc^|s2)s%$Ek8VCjtO+<@xKc>AfKb;tL(;w#EgW;OdLYX-4Sg4
zOdMVT4jUhKda!vmwG3s=z<(O@;l-zTch;lRUx>lO?7PWP(YvpseQ!e`?ucKpE=042
z?<40@6XEkt&s_RV=CUV>aa_8KI(NAN{J!M!FfR+JNhtUd(&d>O!I!``w(v1Goy^Up
zz^8t?PP%g}{K?)*6336>qewDFaQr<}3Z2lWe#c7q&HIvX_ii2xm$ybP1<r>=Yq{VN
zI!P|~MW3YpY8P~6sJ$j1T@V^kOydsd!`3l|XVCw}A>bANkR7eqWs-RQeIG#&|9!6A
z!=b)~i%-%2A@ER(?$U@2w}3TT`(>vm^gq3uq^F$=9Yol7DgM^EyfQ90z9<+NcVr|m
zfD;P?xR?bD-=UpwDc$J^<9nU9!liJ!S@j(QH^nu6WP{D~OOT@<##fW%dG=hSMlZay
zN4zn~nCF1&u$BA%ws{YuJ915H)*)_Q98O%NH7cKMCVuMD_<^nm;74okR^Zcmo}g#o
zVHT&Xm0P^==$VZ1=ozg$t=SOI9OB;n!1@k&x6f{8oudnF=h_kc>AEIcSoOAbJ<0vw
zbA1c7(xq1tmpK+g7K$&tM!oJX@GHF-U+%8WoT0wuo~f*FSI-n(ZRDEjy$BBGt48&=
zMh}PP;N{6(F28ZWPYB!y2TA%B57M;>y2coVQ}0@#aG2(!U9VSJKI+vWXk<Qm1BLRt
z4Y0pGzqWTayT%_uPGzp6WAJ3{m6VLnoU`Mf=Y19iJ7*j1oWWDkp)LN!r-ZY2cBK6h
zz}lJZ&Vk4KMuY#0)b}8I*rUGt>B06bJc%YW$M$T2LGb+I6!6$*fJt+#969i_(dH-&
z#t-}}pt>-8;P-FUC3B;pNPzkqS<$L-k(v+XG6vq~;rjc7-Zc%sS^*yq2jA70PV+AG
z)KkAJoE2Tq*(ZM9HROAYA0B@{^rf63d=Gu}`RM!fT?t<}^*93267qYxb6Bs~KKf{^
zVdyRt&W`@=4E90t`^$WL_qG50G(LTcL(e8YdcI`1YghV(LwKX=Ci%ce6@AyzZxS8)
zm8<)0<D_J28b5<=V;^ylqvu20_~*U7WY$Lyf0UnEbGnx`cq$*5_H)nR(@tJnrZ4P_
z8Lq9o8{9q3K0b|6bsfFD2kd2hHZ~@V&pbe`eimo7XSYdTk?wE|y}>;vikJobSTtf7
z+b8KaMm`F8x%07;+l~<9!Hy|YTy*ojADXqFSmHkR+w8Tm+OhBs+1KJ96W|R6ZC?RS
zWTy3%i7q1K+OnsoUh^1%-h|8Kuo>~QiAlw*ZC%h-b}KZ&xx=0xNq(mOb^N0z2FD1z
zcA5UB-RR{@(989l`f|_rai8_(KU04@90+u*8S1QR@n>}lKWjOgK;u1n33X7?xN!Xq
ze)h@WN3?kJvCk^o;_Wy%oB*yI^bEy2Un9o8k9ehGipt-1&oGc~qCE5>tHWFiZs4mH
zH?{12XtjQZg0{uKcYTlFCsx)NaOIlzFgJe1>8a)XJK=RcZ6wz$jjg;UCB57@#0s;6
z)71a3ZUKkzdC9I7#H8^_&z8K6@s1$6yynou+d%xf`=yL=_x~yeBfQE-c^I6MbBYh|
z{h!tQ+x7lG&~87t*#~Y0()!pk*H=;0b{_jWiIdk0M<<}WpMV2z?)2Te-0au~{#g^m
z&$7U?;tA9+O~-UNSG27Xyz~aB(}LeaF$tcrYs`CI&wB0Ejx(tSwCmmOhe!0+WsrRI
z*7cr3LySW)1;x$a4|RFaDRu)e9ABWE8u-MyE}!sdXf-^-=2UDzXF%?Joce;^9F7B4
z>GIwf_Y^wN?%0k__yILcRxQ9Dn@aq5L5cFSb;gop?F36p#JXz8Gfh2noO6cKG_@6(
z*t1_gcEvdG1^-X)+8F1rhM=jf(CIYt2d-fJvZob$?p(a2$H#TG{}pY+&===_^N#Ul
zp&Luk)mg8q_eSn&DbE_|_uxa{WP#W-oU7PxT0X+xG&L}$gB;NA^U%*bOQmB$dn3%|
z2=uqWKc)lyRk<OmjX%FAz<91;PZjsfO`LJ>6!-Y4Kdkq4RYcmq(d5eEHM$Rtx13|z
z6S={umosMRjPlp}8HaLJQ{d%kzJ)j8tO1;9Z#TH>X!r(kA$}wKn-;7mcOoV~4Ci9e
z{#5jy)S3ZT?1#0seuVc)PhtHi_Ug*nb6p<h=^?e`r>b@;XF#*QWarB-a4mFk9d_aM
z?8$a(MW|n7s_oaw=vT2E@G^fo=YuDtJL)~GZ;d<Y3r^*k8XM>T+upUR<EMTc>;kVZ
zL!W&xLL0xJ-Oq)O)4<y~ST6{t^#XD#tFDaH6lSxIPxGwg*Z^7F_iT2wWNM@)?|q&P
z4b~C7XQ_c+HI3L-7WFE~8}`=1slI*iC?EbQ?K!We{*ND@kM!2*_>AtHcjv+v$<^`W
zC(69G0zZ=SJzA-=t#d*exsTm|-^5o|yKt`ctF_=OV(r@e7{eLHk~h7}{X0bKCzrT&
zYV7{EG+tC|^7w)woUxdWL*nz3Zs5>ItdLl$<cE_NT{GSF&jvZ`%<65_b2)NH4)l>5
zFJcZ;^?C7XbmsO7Y$a^`2zpV3H68Ig?PJV@{A5m$S_tfA+79o4e<c3h`mWo8IX%xE
zlYU8l%1^+n_(d0d^|<tG*6%0j6Bwpg8c*Y^mYf-fb9$7&6+C0!G-{q6{HgX^rgbNM
zCwacW6g1VoJ?Ap*ajIoK)OPXvGd}!?X7(6j%bD;zmWD?%=Tpb%i#RN~S+fWCBcJlK
zoD1uXE1Wuas@o<~^Whb&b;dXey4Co{@xP_PA8!E<NA8#buC8G%T^qlUxr<<*dGE&u
zw?nuRUKVG-@iAz$_;Bt)U+nA6>jG7A_J&29c`n30tVa1-z|X6^BZ4j(p*C@4V0?$4
z{ebYX=rZ~%nislkE;fT~7QJuD7ir740WW%=@U|5nnBbR<(+JFsTwi^KY42X{j^&-%
zy=yaJ?^{p!7ofAgT54`x8R;vsVHEGZ4teGBi{-rYbH^HXz2+a+u^Sojx<BuraUwfk
zTOYCGqWDwO*BFnRe>=WyU3yH?JrnR+@dVBT??9&TY@nOCp@sjolI6{F{l1P6<K6BL
zbTl&dTi6S_<0)^PWBSIKB>#3QW0cLB$uAjqUyeo)Un6!xzG~G7w{60KrK3pxx6}A|
z8hm_#`yTC!?z8_@@tt%nCFG)XFEf%{E}m(4&~I~p8g%vnwC&XcqfSohoDpWz8+P5f
zyx_My=fDqMV(sO@6JqcJb9Z=Q3|{aOYyI2&&%OJT3%?B?*b*aN4}EN-t!nKogD2!e
zSL<oF4L^4kZT)x8UAPQiyUrU9v$leaKj<^<=VTk?K%{01d1F`mOsb+BnFOEMVsg40
z$wLd4OV1?-0KLU5ES{x%Tfy;OVD<BkT+WRAHt#)v{-PQsz2v0TlINsr-5J+-*X(bf
zblYZLS6lV-qZ95uYHGXveADe`xXI~g@ddi)A@3ANBJPS_KHSzTJMfGz-o4fz-^YIL
zH_%Uh_yuY_LnqQb_Cb?xAk%VvIh^y9+f>0=d*3R)>~Z{ULB`z8Tqdy<L|31n%_mGw
z)9c*-7w+$Vh8(RST2nb~bItIkIb6qYxHfnO=S7rCZboYMLdPDyyg2ZCa0>tR+PJzt
zzHIO(ITu0p(%#k(^YlIGdDud2CPDos=t{gxAB}qsK9~#}s4r%y+*s-Px3LZsLsMRW
zS?wH4p+{azKBNzxEj>uNKA-=O{@4tAxTHgu$MVf&ySD^>s+#z%^X{}Uk{B_I#90IL
zXYiktZ{U6__e!8CYP>C65B)WcWIq_!5Ah!9U|xJhcAW!XR_+b@OS$^ajPVGrt?c!A
z6kZgjo|b`r^nVTigVZGU{;w3T;=kHwmzgz@F~<7VV)*|Y<^nHb`)lyLAAQ(FJz2V+
zJY(e&CGmUiVV-{oKPX17kSnA3V7c^1)|Pz0eeoLQ^v-2$m5glzv6>Bx%}=aG`l%fk
z>xp?o#wu1b*Buu*QP-j0tR_|yhUTR|hiS8bu{1FM5#F!&&P66U8Gg?Z;7Q}zF{yt%
zS|dK<8uIDt-cQo^eE50fOO&2s7_ag!GHo7@{#wvO&&95KILBSnr)#IapYi(U%pCRY
zAj`DpPPp}O`n4myn|slH-@y(xt7jb>qCL&v;s*3sWM)+7A8&w8uTB4dmj8G1Uvwb8
z=+Uog!+HLRqjlNX?AG>J>E=hMHcl4woJHQ6?D!mVywmze+BeaF{2hWX`uKv}_{W)3
z8{Z@j>g7O1>X$svns47-Ej`}LgDPxmt8()sV(5lR^oAaI?!Y`K)ma$Tc3wJ`EZYKo
zw{0oUB?sj}p$Fw}&B%v3zTg_057n7P9=viT;3Fl_lb1VI$y{anM2^;7jl7@HS7R;6
zJSON5zg#<c$<J$E)u(&Ti+fFNbWM3dq8(_@`pjc#-qFc*;bh)-*z<%hHbVPQBrp0(
zWxsDobD-<~D)J{z?<cZzaT-6-tCH<~ej@sBq`xG%uBv>GpUCzz*iQuB{%AkZeC9@c
zM0zGLv_GVGf-~)hDP!C&e|#asKLq~-7X~<8Kanq;W8nITw0}Un@i@M)<M7K)`V&1m
z_=ddLjOuU5UUYSk!nT`$0eji{H@31yw_?AEZmPOn|Hdx-8?{_R|K6;;Hu>#at$$-w
zTRCm4e*?PuRt-L+^Y!fL_xLP4ziy^JqPAM+nf@T{71(Tj7o+imxjDq%vjhD=I`@hk
zLF+5aN#lTg3%ka&kHVCtz=ema7VsdSK+ML3#^TFR9<Op?l`kgyd~_Ro%5A<N{9-=z
zHhT?x&ds|RRbPuAEX+RTVlytCZ$-}A9MgU`WA2*c<;eEuTgjj0!JRo~kFRBp*~__d
zePGJFa(z3RdwmA)Z&kefFmvp!O?Q7QKCrqRn?E-u5NOg`?LyC#y)FKnSmhj3-H%7G
z^R<>VUdhb%SNdh<XZ^0sG{}TpY_?ov=C$x6-`$_=lbOLmc?FW0x-WU^?Gfo*j@?85
zRq*vm(^PL2+Rn&n4I|H9Czm#Xe9L@K0{P;nFCX%$Qn>^<^QI=?!{jEnCDHqh<R@(^
z)A^^*QLFzAWa1?97lPz3?4btK>-Z4{=P#(=Ao4JqzBA>aw?||fa__w|G3R|`Vvd!G
zpHIugeQBBai42)2IF!F&`5JuCz+V;54YLP^-^$5#`6_x^CSPr}e6_!B;?X*I>UP)P
zEcy3i)?JY2??wh{Ew-W)7V_Tb{Dn=NhgMh|$m!NRCsxfkHi`2`rQ_{uG1Qwhsjty?
zUyBo0d+CwCVE@rZo*DV%X>)kfGE6zv%4PcV<?tSNK3I-lWuNSle``$JPk9bo;DhAw
zy7<MO8h~GT^?P!j)A;>Ub9jHy=E|uU^Ak$sMN1r4PU-*c{Qd*^eFJ1vrc9C_yOlm9
zlZb1)T1DUMD*9zp0$!Dbo}_OKmQ9Uzy#Md=cOMuelahKDGD&j!A;y@Q@1}U8<*~pt
zP#%%nXZN$Avjcwx^CmfDkVAW*Pn|n2--joI@L`@(22FZ|z4-8)Od0eRa7YFbZ{8$1
z6{L+PgR*ayKl@bj=cOlH8>Qc0E?z93x_Gg8uYBi&<&UR(W{&y&a{N481Q@SygDzw9
zmA(8u#zLOXd-MH*8L}satkJl-$eY`76Y}N8_sSO!t`90(GV^&ox#E4FCcpPDw)Rgz
zPah<|w+1~`{MyUk{|}z~-@5j<#ND-@(AqacqNNr6I;yVS&i_AU{cp`&|Mb7^qkp;e
zKRACssdstnpK)fc1;td{cw3qe0GsUf9@czjes2YH_vgy*ov8eRbbjv;)`#ps*B9s3
z5<FeLyV`xwe130j=sR<~e_-uzG>kusv1;un6g%PhQ?2(uCBOHT8~^e=A#?oiwX0nH
zb8C7JmTOl@|ID`fXQ8KmqH}oqXA=GM9r*q{_MxJGZuIoeu|GMr{^>{m^rL^O)_(0g
z)!H|std4mK{Zsb`=%2_*_0PL&zA%~ml(g<iU5}LZRGF;A?dD38FFkY%dZ_ZiV(5s)
z-zSGubxZQhl)K2U)ir}Id`ei*8H0mi!5?B_(Y^HktIrKFn_kZF+vK6EUc;D-)mQVV
z_vvfuMOT#HM(<0qk9ePScle(2Y!ma`z1Z?~N=My3z;BcN9vwB&=eNnWI_g7d9d&P7
zN4+aUN7Z{hzfB~qqsmulz?(O>@3H&wH4L`<z1rT=PY<N^Q~a4$KaKG|#bEZb9(<$N
zvnw3q6MX_1{x-QQ^0UaVV*P=EY<w~JC{|s4>~8t$vE}v>UpbI&w-;URSu>_dxnFfp
z^v9e|CBG7X!To19zz;u&{JLb2?)qV#`yleG5BGmX-E{=`)Veg-Y$0bzbiq~q@=Mp+
z`2T+L%fq+lV;QW!%Ey=1UpH3Ke>XMf<@b=Soj@n@p8s>`uY={+MVuqy$*-S(Tk@;l
zpW?|b`I*t(HX2}){5pzUbM;sBSm@C8rv%#mnZ95~su^#2yZGcDblHJEm7=ygn0w_z
zXneKk;LlOdK=mS(vw7b`_=DLq?)q6qw|$2H=!FAxT<yiS`H@z~9o_ax+PFGyQQHlF
z<M~<Mo8RI24opT~i2N*r<=)^NkxYL@ro6L0Nb6(ChQDXXb(>dX$gA=7;cW)Ek&nfb
zd!7vO_O@m2%_{&u#EvX}Ld<`}?r#}u_qV(Nt|As!<Ju-MZUe5w&(CDsgXO#n_j`4F
zZ{J&{ZhyMHdw*^IaV2>AApD~levzsFp2>6nTlq)tw_N@a6#s|}iPl}&&p&jnng4$Z
z{|IIB5BmR4&L{Y5@sFT*Ra*ajiE$2G9|QE?jRx2TtP|o@$}^%S+MiATy;HIGwElbD
z$NuvA?_Ya;+y|~c$og1?o}IZqX7Jqq*7Y$hy*?bRj|BGH75(c&*LL#%Pgx(8nd^i8
z3;v4h<2Jo3y*^Gp{s-0vu$^jsJVzgYF8lB?<u9byN8=5Dt@Y7gf70{MdwSd-;h*ob
zk9Pd<)b>%P-~3PU&sSdj|NG}X+b7dM&)m8D0{=w+d^@!GLH+apO50QU=g(tJorVX$
z`j^^+FaGgCc<^BV{9evz`G7pw#qVFy#(C|VR!3Qx#J&xgq0!4PcX_b>-^=emz<({S
zPiNnB(ns39Sy@Hj&y>GMKe5mMIqaLk{`nrgE6soZg)t7)Ppn^Vr2(e*^UvSPy!|o$
z`O0PQwOt1L=P#p;=b!)3%>U2*^A;E58SkINKmW${e|cZrV0+c>TV0-S_pNFS=s+p#
zXP3UHO?^DzE89zM<2%IutQ~%%yN4C~*47{RFX+X|XP+g{Cac*i&sl}guDh4@8k15U
zAen>hoX3<R37i~C{Hyr#h#}ZLt;g>7_vOCJ#?u*P%A1+`A?ahBvsJ49zNr5ha?`VW
zp6eQMEw%C4gNFaLv)UK^61c}MzBoeuT`{?LXAtj5)lu6dFup!Up3aGB<ZuS~7_<2e
z?BEFdDUv68H)${b<Bc9I(HC)L!4~49{ZL8b$*hA^`NH7y2ES4#eFX7I1zDRGM#dyK
zhYy1Dmrp~J$9kU)lfOHewvI12&1Bfmhk1_cHg__i9GQ#E{5AfT+qDNhS?#{tAxG-(
z7NK`A##{Bxd*(tL;Icinpi28Y<{!JiDzzrRWt=xxT{jNg8|MT5-sSn=uHUYA_rtjP
z07-b|hl<(f6JYOJ8t3yFOAH)!lCM`mKJP!{YY;BN_~~@b^fc_!|FN$&Hj|4(J;eui
zy({>b&oFxglrJkBCBfxbeS<U2h48A{tYdlpZOsAtrEs9}3!h1FlHhtKo@8r#`0@M;
zFVRLg-OTsVdd|T5H0M4+Q=*}JH@H4L<i#fClz#KAuh%U5+m$uS1KdsR&O0w?y|*ry
zAKkVycCYGZqF0rP-hDcg+8G*M%=v3c#=t(jMWJ_FYUXf;KoDQTGC$*HAHz-L4txFr
z<)RvY@oS0!$|v0eJmkc$R9{KzqSjG|RkcD*cye?-xk%Nie*dC({@@XE5UhVgYwgNv
z(O!EnD{ortCo>kAh2!&MKgn4X`y%*cpReF;T}7@ja4dMYde;Kr+?0k(HS^Y#m>sLn
zENIgDsr~$%o}j6Ct%Y2))^rWM*e%c&evnq4Il|nWT(bQMjcFwQVvWPQrt!3rpJN!u
z`f+^6hDHB_b5Z`2@u_cpgxeD4z~)zaIlIhnEk2gO%QF@=WI1n#p<n;T%2d^g@UHA4
z^1SjZCzVhS7$5n7T;AU8qsVo0YkjHqkLt0xc>&}Y<(ad*dRE^YF?v#f+&jZLHTc@2
zf!Uu~wY#pgqqnZKJI1?us~yX~^j~8(7c5=XTNmu;g_jkZkq75~%*;NFAHM~9TRzuB
z&jbEPzii^B16*g1yVP{#Eb{-2nY=$hop<Ilhj(T3{swZ#CbGxHu>K#v>09gS!X|p>
zsEYVQj5C|(9(p-vQ7^fst?-<+;LTwlOl&(jfwYZLYdSW^No~4O`vS;QCI|07nd>F{
zXQa@DQnBS((b&T|@mQ0wyfXF`lTr@zvCmhgV$^!|&#QgDn6q<RZ)CqWXK*CabP}8C
z@}MBF{TJ6BJAQTQcKnCzBiflfhx*OAW^-~}Wh$ue{7Tj#xpO&Y^D*dXO0GF;&K>1F
zvBkx+7}Htitp|4f!{_W-w{1=h`}*<kmk%>%t$*-=UD|X1?+?Da*8N@37Cv)q69>_(
z-Eswc1e!lqeke!0e8MHk<}=D;z$p4n_{|jk7R-gvSCDsWJc4x`=eZ?wEbls)6}a_S
zj6DLKIWrd3lEV_KcK6hNeGd6wGtJZ&nw->6p*i&#ArIR2&v|Pxa2cjva{>MSnAk#c
zD!KH$r}dNY8eoc;^QI=Dao*Py<Ju9<n0@YkaQ#W1ZQ%R6)V(@n+G9`heUxw7Caz&!
z2xeqe>xMwI^$ufkhD<rAeLc@GuX<j4BE*N!Cr4hkWe}Mc4lw2!?3L&G&WLLCAp?I>
znTk-Kl;^(}p$6;vStixNz4f!md4nIqSGz;ONOO?0jw(i(gC=jxI>R|JqHEvxKeMW{
zE(BeN2GMoslyqG!+7I~g19K*&jZ+o=Kdilbd{ouB|G)N3ZV+xJ0m7xtOoB?H)(eCX
zFU?K@B2rt0v|2r<nGmf=v@KeXT(nFGUZd3rEsCCI0$NF|r&^&hwdXKEwN`pTXtl@o
zdz@UjMzkVIMuGXgKYM0}NyPrn>-+otF|V1~dtIOVde*a^)iIUvp{L6`M-XRxoz5B{
z--44`LQTxS+S}q=lJJ#=zRTQ4m`$O3DFZ!Mq>aDTLf-3qT|Cn$KQOx7YA*uT>!9O!
zt_fE{x9hgs;VNin9dz!Y-u$%jQ#|lN8}z;u8Dm3V<<MDZL}g##-MHZJL6lh7ws`9<
z)Axf%JL5k;EFEIOry*e525hG!WNXKtiBWW5dpiDY(R<IO4qb&VO2BwY3XILU2^bsh
zKN5^@O~Tk&YxT`^^!Wduu=Y$r2d2RJZN-rS=e7b<D!CeBeo^M8K5g#qa>k#O>!G8W
z(^OY-)r5w(EaASG&Cs{#W{tjq1GHZ5D>bE>%R9(Qi}M)K*R7c7hWoN!_}wAo8a)18
z%7^A8_$_*5V7v9St6V7aIMV=+<g{V?gy1E?+lE$V+;L(}o0nKz$rfw~a34;~vX|Bs
zu}_&<g}lP{1BZ@WOfyc765DTTw(vXz-gTzIB<04Hx9hGo)&o<`M!nPi=tTN7x!y2q
z)YGmWIktK1y%u}6CXe{g67gOm^9<yf(#~rO`wF;U?8)2}<FBJ^A#_yr{rsFl=!o;U
zvDM@W$;_^bo%sc`@zWyZG$OY0s~0s-q7Q4O-KX*^pgWac4!r9m^Cin^L$bUJxlwhx
znfkHMv>^X>MaVruUii5ocw4dQ+`V#Itr^{LK>2&Gy}i%SUIFxPtDOlm!p|T(m}iUR
z;~3`o3^c0zfl+LW_0&zs#4#O)_MfRYvGqGl_}059SI-&#9d>v>{TEo?hGO!Qgy6yS
zA?B*5&FDGXzFOM+v|ZYqJ}kYt8o6~n{kGC?Be?N>t+ZL=@}_am2kmY#p59LMN-6m+
zKJsRjXio097a%+THi1}sU?SMKx>?^I;8RJveqd3V0-sjw;X?9MeSi5~yZ_Evg(kig
zGi6C{EUfRdk^QP4U0B!0o$Y;o#;_c^X#^%Kq&LijhHcnG_1WgCsypx6U2i7NIqLB=
z6Cc@9<@M+;wOvmArPL??fuHAY{YvDX7x))q3)tK%p!>15agMHPa<y`>G#k$Rh(?Lc
z;m#4AH6P#cALPcWZJ638ePf=uqI`U2Lf@DthL?w-QRg`{GA`Q_>%N;auE;28d}EZ~
zBzh^`Qf;s;2IeDmb7x|Aw8+-+0jE&!9n(y1br^hKCEC?9(UH%k#awbtL$`WvAG~AQ
zNAQ={IuV@%guh=zt~z=u$CRx@e@Mo5#^dD1pVaco9VcaNFxPByWvgU$+blaaDbH^A
zq1R^QnRe`*m}D{X13S>f)~3o*p1U%-jdhOdN-h^trw!f%)~B^0k5#4)zOWd(1x)K`
z!%JR?BJywO8-1~{Zj^~tLVHEL_wpM(#CPIdfN~ZewJ&%IClPpL9lG&Bay2CK{EmeW
z#&`Vk&J$}CBP#w<erR)VWi0wX@r~Hp|LEisl^q<&Y4Hb!bLS8DAe3`X?qkmTSIC}0
zUSQjF)8>A!x5TCKS+pa4_9N~YiUM=V#1Q#>Boo)Z^jVoWduKu>HqnmaR5v20HUNip
z)Yq8T@&8-A(^*jQeG&7PyojRbdf0391AAo0Ce3#SxUl&@30(MqD|w8^4wfk^{!hI0
zl=I`hg%wr7xwDy{+FB3ngqud%t1#YP_0!0I;iP`l%C+kmSLKKCO;04@H!?YI?tC9h
zoPEhwzPp&eEuFww42RY>J8J~wDSDgx2uyTZOD$_Ok6FQ;S;U+JZ^K;<UEvdJzD0X&
zgLG0IcSeaen-|B|jH7+oh0B1Gl}SE3>LR~))%%7yc~U<8H_mnOOzqZ3hPCLOq5Mb5
z=fdlXiL8Suqp>(R<}QpOn*Si3^9=HHKp*xfr;o1GKB6P~`}lkEd6%EN8R<uHqMWxp
zzY-ZKyRVHoXdR|8ZK3Rdwgaa*ZSUZDs!UA%J@9@O^jDtfJhwMU`-<T_zASMMiTqp2
zpP_hJ=?CS+4w(G10@gR3#P}G_<<^0t!0X5h?BKxb8A}Sm*EV8q9DF5pzsbxh3(SR<
zS+muH6P@AL+RM3f&9Qs(N&>9c0{74s`h|V^*irl~Wt2I}T8|uFQ`7aE`@#a$e~LP*
zkj-~|wX9jX^)_@{6EvZA6L}^Q?dj~!a?e=D&N|B4U3=IA=Qr@b<`qEJr;gqJWTax|
zpEpU`!`|tqy$Wd0GWY>Rcahwd8PMIU;A#MW1oK+_k(?IJ&9=;E9jti;Kl-dsaW{S3
zHvUq^s64k;iS~4yvwFZjeN>I^K#Uo$*|dc|SCWsYlK7@oIo09a#5vpsT$GE*#c_}|
zMoQj|60_j8K4A353StD77n&C==IEZANR92=lbhDQgfe?_XK;TeF-FW~6>!&j`$f)M
z4uFd%tE^G{#e43@Yp!Dqx!`2+SN;7s@j5t>tQ<|u=@@9I;!W9m1>Rf-Cp&51(JQCm
z@y~^`FRx`!5%<SoAMPpQOfPM?^LD>e={tQoXF4CdqWq_fGaY`pk@ZnJ<9gMkH|Mg(
zU6udh6E{M`-_EhiUma$0o?#ui@4;Zs-pQ|y-<xjA5<Ecu7jIgLnW{U)y(OaEr=dY`
z5*9vnjxxmmUFd@d>%ZWu+>=DxE7n%V%r&<!Hq-4#buTge+l(9xSC}!*J=iwq&=tS(
z8|oEci{9pGT`M{jj0V#xe7{T2PesQIM%YWv#9vcjWj6dK|I(!f+sG}SO7AD(b29gR
zst;RvqRDq(l8DnmE<9DK_58-lifZgHPl=tib-cOHno#*{CArfAn+;=H1#f=y=lq{D
z#qqtUkM9GQpl9^u@l3nHkG*ugXWS0X1(hW7<BaK8xw2}v^yiPEwV)w)S&nJ>{)x<K
zYA=;8Q)5viS1jp!&MIupu*?0(82^=p&D)0B<trFN<tVFp+X%b7(ESZQvDFgK$Jpgv
zoITn;#<Zwh;jrr;^#`h6pHB=RJW=Yu89SeGyPs<2TbQ+deC0~-gevAXZ*kq`7g<jz
z527>oYi`@Tn>D-c0!y8j=7cU?6Fm{%sJjNyxh2Y9<F@O5r_!hFD8>9by!GzPB>yLJ
z?TEI1a5ei~%v-oG;XH1X_(!exJ-@GvH4Zi0qhpuX<(a7#bS`~R!aECkuY=A#(D~(-
zr`da%WbM$7Vc)Ne)kA;pa?WS?#ns_kIES0Hp)xj%dfCwHm!P5Hv(IUkosh+ylm*uC
zUhMsvbjuEtM`r4fpH;?ApM83B4)5=!pWh<S?;T~A?}KmR`P>N$t~2Sgk#}cuhI+Xt
zvv)l@<(_Oa^&a#;-<u-bY5dd-dvn_H%(AD<kR76hm6M-+;vRgC-^S1Jjv3KlkWb17
zV!>~I+WI;+TgYQ#-{AZAe4owPU-FJLH!?1LuNZ1#D~6x+SsL=cNPd(7w_tigJ_U(C
zbzz);o&3pTOT<eqy}3Fs?L71gXNOnP?+orkzbB3LA+ULM@>5ULS{c3DI9D!S6O8-;
z@~UDV{tkXS9XLF7XWG1#*w8B{nw(bR)Uucd_H8-Oa`ar!bdUPez-tTeGW?#zywlQ6
z>FM-$H?e7HjQc6w!%jXXFTQ)^O3h?ow~{-#^-S@l4+4jk%&V2N`CZ%>G>LW5a+B8Z
zU`yj#`6*RL@ZQH6b>UzIIYw3I9_mzZPJamh8=X29bylu@k~*8vyDp610mgz|>kr6{
z%ez*S*$^TJg2twC_K%Ne8rx+2T5X(-dRsWdPN+bSHulDAwxZMg=uK$U`83k*H&h0C
zdz|l&*@IAD(lah^=v)3(<tIX35Ad;q)As9!a^D*FG8gTyjD4Fs-mk!y6QGUM{0Pcf
zqTC3t(Ern%;W@r6i}RkImNv%0-Q4(tg1fM6V>WaoA5}=cefV%Mvaf5s&b@h^+)CcS
z$QF$u$~m|x^rJG`%ZWnwY2Z!zzX)0o->n=~z0?No$SKDk$9k?@v}wS#?x+ruFHyM&
z9GK`_5o-XIb<h9$IeUM68M$$r5_vD2yai{P_HO*kJq0Fw)*s?)_R)V&0sc1GBdi;{
zvqjt3J!jhOXX4u|FqypuyS|I_>-*`eYIS978@7EX|5N9t`FQIRb32YLta-f-4rHHM
z$Q9jByMeh_J1b-AQ~wu0i}d@5lVgvugNy$B9Usmc(q0MAVfXA5Eb1e9oU2dR%f;VE
zW-*onBTah`{<9e8BM*$U+tp_ecRI6Ywb5yJs$<)i2awtK7;}MeARG%H8m~(aZzRY2
z6UG|?H!F=PQSOuOb4^UK?aDJ52u^&X^BLVCr#!erxZ4t(r<rh1J@M)C-EQaHH+yQ5
zy`5U8nhRSdFwSn)=!!8l)T{d*ZBXwO&beye9y=fWLC2$ly9${bYx!N54I{6tF@KI0
zU=w1Sb)G4CGQ0f_#s;1r@!!mx($U*zI<n^x^OZ{-KImku&imibbnq8F%OsvpNk0Fc
zU{Uo8KQQhrGcoP|+1O5;Z652u3fv3+%J<~_hn~6y;bbf0b=E}eeF-Nd2<6VBA?*jA
zRP2L!qX(Sm9+K^hv)<tmPy6vE({cmt?ipzuTS@EdyU{N_z=7N=Vdgydbo6f%cac$V
zYW<a`H{Z?uVRxf**N^fx-#yGOKi&Ne{l5Y(o#)8F8~D9451j&k>)8$H;QGMK*Y8FL
zqgzVrZ?+$GWk4GJK=)zr))I&QhoMs)c!_UD4&)onQ}Of6$?<1&d(%s_U;cCEIfHf>
z^R8p8_1w1g9j{L7&u!K<azy(!U{FQdJ!40<?=2YBPR`Tkx<;lw*E2T#xxED$&vAcE
ztQ#DvtuFlZUCo~Mt|o6wylLCTT?HoAmCl`E)h66ElJ8mU^Lm4q;0NdZ_KV}0!AsIO
z)7(FPXe5>I8=djbY-dc)_#1_v>Wnv*V-Fr*mfL=Odm3>DqgfLe^6z;{Tzs!U#{i?^
z&P-(Aygc@d#*i;yEV*;?+mF4~I$pB6XN`P)!ClCuxvgHa(3YITpZ$&DePw?m7qD!^
zPdK;!DR-3RXC-`Bf=?%Mpw?@B&<#CQt$J*2XFWW)-n1;lzbAPaMF&REC%3Whb}eV2
z1EMwXqJ7OSZxEfFyQ3D__z->?#Ti?ydtN?`ebqwt_psaWqsQLlu33!%`M*eG=#<Zk
zb@);G%wt^G!yioIuCge;7yZ}xMxk>9*yq|~=wv)<`!BS++B2cq2d;l?`pTAj$M;@K
zE+ge9@1#A+=rr01VaGUg!rpe~RFs%gDRcUi_B1a)GHy$uv(J=}b8805xlYD%eAztK
zkTvYneI1y81DIb8%(-{BI>W)ApK-7c^{Do4m`@nEJNNnpXgdL$JO?(1(Bm#_zRw)G
zDeu6Cb(Y}sEB*@>;$0^%Z9TqNeh*>1iFS<B&M@{BR4;%%D)_0c`VV{@-y|DUWn1~~
zeIj-L^`!l;{oj-4{)xRsCTQ)+S+kP#3^NTUTkM<2)qM8v^3#KdYmK+J4p_!md%3n#
z>Kan-@g3FJ<ZupV7;<pK7xdw4SllO>6<}?EPCU(bwyznRHLUXJ@BZ?Yl-GJ-3wyW3
zC;+1|9mAfDuUYX!{Djzy|E!%(V61bV3w{+}qqE#<JBn?lHa_i0v=OmPSsi20yWr>a
z3lyC??<MO5S(~W5bnD=GxovTF*6DjTed}If)^#Ns%S`@j?2(jbcJi6>?+uPc5$v`8
za$-`pPjdEjwI39Hc6Jy&5&p!RrnQ1YpZk#0d#0GMa&UHnr>;5pKY?-Qnl#78i6T>?
z$j{EEyq0K_iJ2g}=w9{-ANItef0{wOhl$0n<9)Lyk=r_-TsL0u!;Z#LYzyW2m5g9d
zW7l6S>LP0-AHL5%yYig&bbDI5w|iQSjL5?WKLLG`*Rcdz?(D8AhgZs;$gyKjD(4`1
z#MEvu%S;tsE$m*=>X)v;XPsuI9liR>_UNJ~cbVV5a5ymWw}&H(jve0ggUAz`PF%WM
zwjn(Kh}NRP^RQ2@xxKHF@1`#*H%nf}iVK2a;rHM??qj>ogy-jan%_guA8s(=_ir=d
zeapCO?p|Ot%B(&(k39);r|-GW4!>7#Q^uwY=dhRAlwo}5um^E=-?Vp-0g8o*HdpoU
z8~yTooO=^Yn&c}>>?OUxGZz<KYi10viQ3*~A94GnmQ)_mdNwuw<RkV)TD_xtA20gR
z+Guqi@ipXg^a5w>gR#IST49xkKFyq_`{sS`-?=+F#l#AUH;JBQhda5eWpVDf<}Pqz
zOu?;r+2fl1qmZFZ26*Ikw6f3Dh<v>5N##Mx?>L6s>*M+Dz*0QliQf7cyW?ZlmBMj0
zvNbp*7;Y@H!`3q2X6JV``&CPQn}xq8u|bw|pN9|L51tDgl>-R5U+_1|GM?1`jo3qV
ztbr@o_mtdg%C^I5Bh*nDTR|Tgi|hNEhI*ixi5;G7PqW&NVBe^H$zUfAh_QYMUXL*L
zkI%Bn@6VW7w~B5g6GfBvqJMq_JQ{~iYz{8GeRIJ??o?)c1$k!Cu(5n&w?+B?AaYyd
zt0Xr+_zMTfP560u>-@c=+jg2jQOlaMIV+>Mr6Iw?$$YSV2L3YF*x~5<A>mSJvtVM{
zBEuf{A=bVHCTo!o89}_oB0s!TIl&IsvoB<0H@02YS7x1UTKwdhs>Gh6oiKVcJOa2E
zn6yP($50R6(kHcE<p}DrFP>5_M!lHsgsrlP=kSi}?Pl%OImHfNOn%Z<d~1aV*%KH-
ze9^!7o(O8Kz#Ys{d<n=t&QpwQ(cLVOLguhPKJ`cVz8*s!-otsJ(0?@S7LNzNWQSk+
zVg2roN3Y-gs~_L6`{}jc-u)jxxpDU|?y1}T^Pk?d`<Vyk@BY!y1kNKie&9RrT(zVj
zusLk^l|7ze!oiZ{JLp627W1w^`A*ljUi+8_8~lWK(M_GKC+<ny)9QPiwFdfPEBc}h
zTfqV@LEXo7Ykpbiw&`V&`_3y1F7}lL@10!M$T%w^teqc)4k=^qzou+Oh8<qPoh6;f
zE6uTIpXV1<z(QxvOt7HksmC8b?7~*x)p!2piP}l#gZg9DyKl(yHqT5;pCem1een&O
z_x!P7v)1i#5BJ9s`_LEnYTtBMzIW`7{CL&wOz<Tg5Miv9jB|@8zc+-P!@gw8wiT>v
zmfpS@+sE0rlw5jcGkIyDlSw{v+KdS%+=^ZI;0NR}fsReY-~1r&_OPbB9y+OpPHfh9
zGw(BHCcUqWGe0eXckg`E0?(qEFPg|DKQX~e8mUuBIhVG!dIr)+fw7M-H|Dt3A)iO*
zZJSKZcGhcK`9%2C+o!WnRmeV7Vatl21n0i>{)sh{Y{tymQ)3<mU)ox4GUolX%a~59
z<Xr{tevgi=<ee|#YkrG&@Y<r{{owaNZCM@irieJG`bW&B0COz3)3jejnIJSLo@~6v
z)HFg%TbFTPW0L+GAE+d6-<S^3`07Hdg?03fs$*5Ft{rJsFZWFBoeX_HhD{$@!Ch4g
ztVOR87a;qy$2+v-0DAYJcSOnAp^+`GVk1kI_$~`f@5I;R`)dIHEqF7C&IsfZ%T|jn
z1opw8DHAP;$Gg#K(qm?EZVq>RE^+wZ6Flt4R~uxUX7Tu(f;0=cGNz+#hN&6-%lI1I
z+eo~}RkqjYj+sRtVSjJ&n1yvqpi%lV?Dy8e1Ca+r@1EYsGGfD^A$&>b4AIc|g#mmi
zSr#&w^82vYRp*X|K;KKZv(NigYf%q2Y~uoCM5Z}ER0F>(w^wQ3`!C$b<;X_Xt>s>;
zVa7~T^Y-PYblgnkog0S@!ku04)Za!ZmQ=Z!<c}ZIkqIn+%D887XY#4WZUs(`J<t%C
zK4G+3y_NCH7Z9n%&ygIzkMYZo{~r4HDEjwZbktsSZx6b654!j2%ZPOVH=euDYpZ65
zm7iO2(eF;NWACAl51@<pHrSLWM;Cf{Uqxm4nm*#BDBHX0{&47?zOuhI@Oj9T_D(Px
zhhksL7m&f6w#>H{RbG$0R!j-^o*yO8W0yC(qZ9rYf49N+m3MA^!VjMpWm&`<c;R!a
z!@IbCb2ohc8g|GEYwV6Ih{Y6rb)gT*qg`^C&mW0t*;0)DKzF@QF3XW-<U(SFSW|mT
zqOyCK>tXDS1I+bZd=7h=>p|>{-dXr-#^x07`x@u9*JJx$ZDJEQ;Jf*n9aBGDSF=vS
z_Sk1UJGz<syBFc7JNC>2y|b_@yg3aAfW>>>%#yvp;vhCj&)B)e@2|JRzsGOde7@N@
z-7-1c+fcgA@@5x$J#!BHt0}cD_9jevN#txZH6Qp)gN~%<3~O%P2^9HS;#+)auYrb!
zaYpz@3H%<;#!dovqPKm_>2_#N^f8kARQ55x!<s*My0P4p{^@!%HRLhn`QqOsT{lpk
zg~-OgqThsvOz2WFSNIt{GB{WGD&~`q+`NKsw_Yak7pi;BX?<mjCz2nFdM-}4(vI5l
zgHyF-Mm4V8;x~(YrxAzq1@3hs-bsEr*0ytnqu_Pqiv#za;9fGMaM%xa`;X1o?O8B?
za~F6<UTzYehm$LDFrF8VGNr=BNZJw}1p8V~e#7f|rsjQMy_6V}<(B!NkM-nqD}U$%
zUoxfnUX$}mi79>RbncfvlU%@e+K>Jbe5~Z|GVxNmcf_2kTk&-#^;;BPa`l^)k<f4F
z;<N8rKRfKw*dA!C+o9jF9qA^0XeTr#Jp71U`I0HOycMr0ba+0&&-;d()xSgril&|g
zA8udfUr+Yc1`Z@&envUXy^V6iDX;ZlKOW99rSSLWhrdA-(?ok!0qf<V$CmHTek%BO
zA2{7Sm;J1s_$I+ue3t{9@Po`%zuEj3euX#Do$RtWJaj(oKaNg5!QQ&$YRo%s&V{^}
zZD7oV3nW*M@-9^;p8e8EofzgFw6S^QIB4Vx_M`dl$ES(c2h+uw^e5Wj?xzybhyVR}
zKOGcii3X}aLjx||45owk-j7e!Tto{l9k{aJ(F-a3UWhJ`4A5HtAad^A3iv<C`-gIK
ziuXKW!u#f#*n7{Ku>TqCc<}r#{yFjZK4RI#_mTnP^@GSgtvwFq&ZQo_|1A940KfhT
zzC#w)8<Tw)nIoEP#-~1qxJu2n4|;(f7X~jgHNVP9$OG}2WWxK_kfBxVHwf3RYzSOz
zO5X{>_vqU{TAu8S;m0oQYF8gLK~LWXZ@tsmW2XHm?Z?q!fwL069RuB#Ju<Sz*W(R;
z=Soxht4uT12mFiZQ*@!e#6$9BiXXmXMr4Z*w(XCz{(xqw|1RsAL&(hck(p)m_wKni
z|CuLnxR}1@Q%B=(`0x0p*~qkFE4}2v7jz$Ag1$5-&B1qmVh%&$#XWq|kaI5mhrW4|
z{-yUs|Bp>H)7pqX^O^g0nMqsM8vbvCH)~nPMdv5h^s?u?jIo;XTHggycy=_;b^|ZX
z*QFoLdjucRe(KyMm+v=2OEeFSzj$I2?!>`WF~3^urL(_iY940H|119IUV~r552?7y
z2X-&<Eb7gMF3h5aOYBD*P7AJm4nA*uKECF8-br@->QiX?3#N1?`%Bk<7<Y7o3n%-k
z&%#Nvs|Ww-4%+EJZ@=<Y?h*S2AMf}QwWoQe!qNU~W<MNl<c@0>rvt~CE*!5t*$;8m
zR|%FIX+PB#=^18LH!)_(5O;jOFPyAbM~+|NF)_ZOCAuTXmG_0_2fHg+XZnv-_VfAz
z?03m~7gy3dgZceCJL6N+pgGC%w3L3M=oVL2tG~8n-}ej}^Gl5RzdM|J2m5WT6+FAj
z!HX$DPsYB=Z)9uVv(%M6<GJvk+dlY^`sH|_>f|`KCdZ)l%?eL2EZwLz&i~i-P1RHJ
z|JC}&tdD>0`sSfciS><a(VTCdv_=1wxrkTmSO<vaAH=uf+V}5RtQlA@AJ|7sNm57J
z$Qc*zu8u4NKdSpP-l@(ld*wqNk$^Web^w_yd-D+TM82Lv;4iyUHsv8?isRc6j=`^F
z$Une?+h638ll|2t<%F~5e6V7gTgH6(WSP#CGXHW+y!Tm|=28DCGA)z7rK5x|=_uJU
z2l#gFqTRqqw5Ra}C@Y$les$?q`be@>`c`tr)vw=7p_53;7_F2smNLeV@X@;VoqWx*
z@7nPzS;VF4zyHV&cK_j9@infECwnhC2OE&~Q*8}w&(+6ikNq$Q_M^c0?j#Jvn+H?y
zun$}Ky=Cm(Y#CLYK{?@LA2#m6Bu?I2X7ldK;^EBKg>wkm=;Gexw^gaQnsoBL`jaeZ
z=Dp++c@K#z$tS)jv95U`7GLu{#wNNMPP|_gegFqoz((|P5dHHmduoTEmmbEs=jBnw
z@2@i9Rm}0-vIOlML?<0WFZVFkJuhF$dpmps{RtPs!_~k?cy;U!>=N@NYh7?G{Julq
z@|_Y}xJ!Nm*MFMzX?(1IVSLlUPvT?y(Cb&wo-0d5n~q*0NR0UMoGNsFPRjg)DZJsr
z=f7yrg`aQoXW=7S-k4G*k^)0Nz9GTz7kZyuliFtvT$2_skJLF<7M@&Zi7ub!eZg4b
z=lNZR&n16-aQxA2XSQ6Me4h5V$_pD=FTDj^wo>M(XI#r)fydRnPqp=ZkH%|WfEH5e
z?L2UC0p$YY`pU3d6odXKYir_G?c=TZHGKHa%;K>*T6=z(IppM;Qsiy;Fu$dzUZSoA
z-lZGO#jHoL5ibX4qJz4P@imip@6J0^JaFC(v=L>z!D$H}l<*;YwNKBfFZj!jk#3MJ
z(}V0urTN*kFBu@3mu=I79CB&?Bl>mPfQBk4_iD1u!M4%#WE-w+lv?k6-j%0}B~=E#
z2Ti{ZO;1++6gl`FwERA_{9j2J4DN5@p#J`wa;Y*%^65+92s}Sx376~6ZsFOk9>#GP
zd3=CRs%<3tkZmM>k)7n)NU{yjqV2%%ea*)FOJDH2#7Z|;#nQZ^o1+g`5eq>ae8Z;A
zQNEYsLtBq8^$2#C_VM=N#|e6@<}T*N`yGx?oN|ltDdl;sX0;)IaAi8Vm}$#PI|23{
zx{bG4wv*b!7ORO0H~2rb)*r#XtoD@B;K^F##i9Q|AHtidbC=G5ww7GST;*SK?Vuyf
zL$c^p@E4AM%URu1;Xrz^*PFfLuUUO%)5i>4_xkYxhq!+MMKM?YjNg9_eJmI{P|tiD
zx=P0%Hxqx{7Upp?da@cBRF6My3V73awldarjOl&)KZuRz&f_WmOK+TN9@;-tUA=d0
z_dSE?{UOaWh2Hn1(EH7_oyzOxf7q*JexeV_%GJsFNggeuogadSRGH&PeyIFG=}zEr
zU$T51<M}S-CF6WwtC*Gtjx<i;<EG^E+i6SBIw^a7^4WKi&jS44$8YXV>xaXIj8*F`
z%jHqp`Ud5$ryMcGj@~;JjIN-}sqp+;+H+tx$WC#2v?5tgGTgOSTs~#rvmfrIl+!#b
zQ^w)QA8hGU$)94in}Uy2`Sa!}=xMP08kbUEV;d~PvXk=~NjV>55|4|&wLbUZm+hxt
z@H>(I`tisAeE#3qP}nEl3z}fqk6&24uKkGM!cCiv&%9B@SySD!qO+HZ7Z%@(e}BUX
z`U_W|(0-wFE`RWTn;)A$!Z|+^nbcBz#^;yQ9<fu-Olm2hoV)+3IM@MuuhpZSy;sFu
zbXS|O+b_8Q$iwPM<N<ib<Lt9q$+NB35T6#sw$K@hC_aH}O?5H<!#dNdId<Y3)VZ@Z
z;1#{YgvrO)60ODu&E9G4V*9!HvZ2ovvrp;az9QX~m&nsg-gkVHPYg-KPeg{AsX;G$
zm3-UCI_-=4@U1()pR9~U9!~xSwgG+{Vgaz}VgcoEWFN?ww3Z_;d5CkG*ny4Wtk;Dj
zXI}`t7DtD~pD^JMU-ZO&j1MQWBH?3Sz&=_hbhV1T`5eX%-g6`;b^o6H>)57qJHZpN
z8uAOxC8l(48Xxhx{O(zNOLyQO!Ut6F=D(%1tutuu+CbmGoNcCl_+nM;$V<er6K4~}
zF6;A{_I*vj3qMM9C@^E6axZiE#N#dAgAFKHo%n(MTu-$fJ8@C)67mRyyPhB}GL7F8
zfHgWWn#=bb>a)icy@UT={$mFh^f~*`3A%cwYQR2jU6#e!>e0mDR6!r9_i-k22&@Bk
zRqUzNDR(RI^_#pF#V^>vq%b*m&0BMhVviRX`>@}%j`x`{7nroX5|iaAfxd}}$SN_T
zhL)H-e7X6<$W@wMV$SAWYa?|%L%X)8wam(^DE`Ksra0Q*S#tOyD=Zk)aZh!yh5erj
z+4T7x)3KH4<9NK;9C!Br?}hH*q3)tIaL-;Qdl_Bp(^~xUVNIz_+0Pi=(RM31{&{?j
z#_!N5d&76LPoVu`4>3K7c(MdN9?deVgC1LJ^3wvuR)-3q$@k)=F5Z+=^lAJxL1X4h
zCmngKb$l!Sq_*|=tJtsN>}tyx#u~!@w4i70i}<!BY_WC8eG%>?U06r?KIFLKT7CCZ
zk9p#&el(vwG3|$)m=(N4XD%v>%xM+U;Su&6X`4KXC2C)LRjIT#nZ2TVaCH;7S`Y3P
zg1cfXErGMyf$7q{zW+|_6ODghAYAj<`(6En+4v6oG1%yH6=TG>7h3G+#M#U8JqY}q
z^+sMt4|J~Bj9a+Rtq1%P%hs`H3j6k~p?*nTh3k!}Nn2`4fBB!fOU?_g=XHn{+kk6`
zF^g7=l{GC24V#zo2lDOs?~f$>_koYOH-5#y@r_}8YGW^bchUD3i5bOS3h$-=6?f4F
zeMj(1+(-Lw-<5<VFj9Qta4-2Oeq=V@_=~=>8-K!iUSK1Co*%glkM9!CkHMd>ya5xi
z$==8JG@IXr+y`}GU0<2%JGe=<H!G*F?6=<{_b%{I-FMIrk~3;ox?JrNOS!fJU!#xx
z^9ua>!*4M)k{gm475McHxa=z$4P6g+;s7KY^zq=|H~9Ap@$av|zaPZEpYP4vF$5ns
zd$g<im^&Z#a`H>QcA6=D)#UGxOnUX$Px0?(lth6Ev9b*Z@$omXUP!x|xRj)iKOZ0e
zxeW;)|5v_kN*8k1-(&dC`p&dt+wg1F<HNh0I2O_NFO7H3ir37hkn6*EIk66F6aAw1
zE!HPzQC53fnokrwIDUTSq&-H?kPPjF7lpGYKIUFa)+^`q#A~(@7pG?ya66P~R!;<9
zvccVcd^=M5p^W;`cn*4pmHd@BFn@}#)BYrLTARCX_m-*gv2Pb*d})kt67_1ai+z7N
z+1}IK9Xy8TzoAdT=BclnsUu%BrN3vN>ENgFemHE$&#C!)V)E}YR@phgy?2h`j#9I_
zcMkq-;Cxmecd25tyYzj4cj8ykkMLE9%*Y_`#M)aN8Y&m>YP~0#%zQ6C?NoGg2J|S}
z*#|B~KiqjgfKEL4{tdqW!SvzM)?gaR#`iB;7oE5?BAI!J*eF+K9^7HVd%sKkjpU}}
zC*`}>=N9+u$SdAAc5LzcXXY2bd(rsf)7$X(gYQGv*|ELfMeeSjN0}PRTuqs4iVyD4
zp5L{_<`wv{qB49I?a0U94eVUHY{1Wd&Jp5gn4A3k(Bwk%IA_;yW}OSn#e<?pV@Av|
z;Jv}h8af2uY^OD}#BYX`bV9$iE8wdK<R>@T1L)y$eBnuY2)urh9_0HjO438%wUhK9
zTA1lc@Voku&(z_4ep~!r0q?y1lYz1%A6Y=W#|I<h%Xbfd=CQYb8|W*0<~H3s8r-$n
zZ#Er){snLOwTAO-Hf>2p#DM{y*p3h5r7pkpGJoiBVU&0gXYUo*cO&2SugWbx{EP`7
zVt;kti^$rFvBd|c<QMO~k-PeKvknTy*X+H~j;U?Ib>EA2SorOR2jj*x_~@JUXju3@
z#Gb6=!v0nBXcHc-xSF=EDem2EhtGZ|UUO()d}BVmFyo!L1AoE&wQsSnorJf=Z^1h<
z4c&u$C_oRLeGjq=9GzwVFZutY_?kkkHIuR=@YqQlv?Y0bJnsY8O$CqPbHd*~BEo*i
z>1NT8@0gkhyd;|KnnhgZiwWDwx1eyd;#s-lW`GXN+7z$ZHR#!bjq#ckTW06y*)lrQ
zG}wN-?-%hJbm`8U(53US&#Ta_RVLrjsXlb7jr}KEXmGvPo{!i3lzOjH51qWTo_h63
z`zeC`BwG?*pBqTVZKUe){jAlwXnJRHV`|+|{e4bNsVA7-giTYhf&FjxzcPVad=hYL
zGBs-R!^HW5xvs67^)tst*qO8ucHZLH2*X-J%*C}0Zn)Mi{@pfm8qih+IJgY|T7Yw?
zcNg}RJ@okF_&=V{dFb)BTeq0u4L|dlny0hUv$tDA<~&XQh~*}|A)99(ViSzvEY#Cx
zNVeKiJNFZl@Xn*?z74EXlD7AK&zx#JSp&wiZezT3W76Kj&RX;__7?hNq5mf0LB5Zj
zfLwL$L!+2}X#c19t0fC$pD3=w_rpY7hwLvOeE$yiSLo;LrKISi*%@Z_VrXYSyxKD-
z5d+cNnp?c**}UR+;ltOaBiFF4e>=s=*WIxn-s?dZXuq?!bsptvD3{2U@#jtPO)5Ja
z8^QPOzOsEk=JS{-J*VAllzfo9=tB=k2h@FoGymXQF#(blvI`Ed2hx?a4cb#;yzD!F
z=frnO2Y9ngGVa546cP8)l#K6^y&&1(>H^scvKczzG0}uU9=5{AbMgMUc)09|Q{f?D
zJEqb`DxGe4{M2>i7n7YWS(aK?>l5s}7wk(DwCVP}V9mgG8dB`m0CXum;?k!27rjTI
zsRHQyclgoPmiCpUCuv|a`ZXON>fNSq+8%HE9KmxE_1(U*Rww$pC1E4){0@CRXJv6-
zW=KbbzCua+_?&b*{Pb3H)fW1=%r-SYgzj&<z#!Y7&-o#=Z?e#9R{9)#sL;G=Xt==C
z+~NVYCOzA&cOUx~1)TXCjvrQhip}SYc>()F;wOu7`o&}P@tQ#<avsn4h=)u*8^XFj
zfd6P~5^wGt_CJ)E!}ZBINH(ox?JJmTzCPv=M6PJwgXL1zgNeEeQtD<U*9fX-n7?%J
z;Ch!mFc3#Kr{E|^y|YtrB=}2q2zFV-&l&8pbjgC`vjxPUv%b#3rbj-Rj_u%bIb|mU
zmodN~m-6nj`+$pJqP!fM-xk&)o&P5Rmu0|ZJvKuCopsCW@lE^DSy|SwlKsT3I5q<9
zfty9oy{^4AZ;4~WwVLosbiUsE%Y`5I@2V5}jCD`mA2@3!-V_{%A`8BsZ%W@r$IEtO
z9T0Zyw>W;R|3mE4&3xOe&(zL2Ujm1$;XYw4qBVo!T07zKBb1T7qqu_t^u6y&<^&H$
zXQhXGZ!o1ZY*UKP-gP8*bPH>#64#c~7-W~o-z*zH3J+_(ny2QhxxN;QPn9l~y^+Po
zASX39n=^T`kIu!uKbt#BE@w~P)xVKNC-tvI9~Sb^U4JxfikE6X@?Bt;wUyjluKoWn
zDRmgT>YNoBX#W<co7Iz<YhoWWVK+;b9zd4%0{0Kd!6%t{0GZj_YKOD_D?U|gSho+8
z(nlLUO7-z~-W&Wp^5@8Z6UE;nAI=N-+fvsJfx469t4r2RtQ$s_aG!F2AE9r3w%m65
zNL`D0*mp-xePGykckOKLyGyRRxY7F1m9Or4?AcZEsi#9T+IQDF&z)Cb-pM{SCU<Ua
zj7w*_IMaxaC$UD}d^o=5E#{WGZr%;tzOhvM@ni7SCe}_r;n^Q3C%QZI5AKad&j^=#
zFPOg%%nv-9Tm0_JdBxr6uHKhTxFrey_ksU`XXo**hIioNWjp+Dz~HCE1x~ForJvl8
zp!a-lu%F(mnb*=;{d};*<%3I@gY;Y{{woi0kdKi=TRxS~(~afu>>0#uY$VQx^?LY8
z<{-XS9GA;SSDX&Kl6>Uy&`9-zPsm~~pn^FMFM@|C(}@q#^_jd#Td8HP@Z)o#jBJBz
z#EX>u9%WpA%0s+QOTL#+<uS_a<-I$OTfWFR5`15-afq+Q&n=9_ZR0s?9dAk-iz)XU
zZD8B&(i%?sed~mi`h5uVoQb^H!W^zBFg3%Idg~MDU^DmqT*do<^a!%DK=P9uI04{u
zJI{6Y!S%ho$6Z!~eJ^eFD_I~pAbD_{I<9Q^gx`g%o&CfK>6w4hwzYotWL4JBJ|KB6
zvY%mIU-OyL2Z@b&fY`W$-n0^}lO=-+c_+QTU*l7(aB_T;iJ!P-1UmTw)AF43rR>EU
zOwGBJm7OR(x!oGxuP2+qExwX$>DMWo!*}a!_`0cSLdQ0tTMLZ0;T+n~*;wmAd$X$#
zUu%s!I@0}rnf|A|FNR08pQ!QOgno6$*be;P9@AHrnS^y8IN~h7V;fJioHf&;eWBKC
z%b@X2`D4McKXPHS@ZE<`T(Z0g*luazyc_w{g1?T}Jk0(;H)|4S4b2&f0BdJ#&)ASj
z$YRb=bR(;LmR&A+OiWfz!4dDG>mRe1`c7+ID;XA{uQ+Epdj48@VI{Gj8?pbk0<+cZ
zC2xmzzC?d|AL5ztm4|O>Unn?!HT%$C<ehv^i)dpV->yv9gT2)Q@2~Ni)qAjedyuui
zx-LHLAB;7%oP3Tyq|ATveC<X3yk73|^ku*h-Ynn5`{mH-bB`qS=Kx;_^87B^(AeY)
zkvzYXda`4sx8ws;jL<FMBFY}B@FBa`#dk6BjPJ<5(L%l!@T|4azd`q|jq}>21MQ8(
zIwfzwx<Gvi4(dyN%7>>uWWN*xBfZzVvp*lN<v*dE&KFB=NIux?E8fVw2S0m~XOxK<
zhc2v=zw`f8w6bSVxsCz<(@PZJBAB^)MB^2&J_29)QfvV6oa_+ke(C*hGEUKe{OzmR
zqo&TTr)hf@vLp_U9x6?hC7F&aQNFFz^^Ii5C~zjZ@e6QOAUXPP@qWLg#v&fSg|Qs;
zj_l|Cuk!zpcleHbr@=#&277~;P~a}vW>qF+n}c)KFXvK!CvBexe-Fp5lRS8h_zT(3
zXZi=*&nM+V1F{h3DfaX5Y`0$48M4ntG@LUF-!pb$G{rW)jCG@hP3g*l*M7=>>bw6h
z)Bn%0rw<9|@V09Yx^&H2VgNnAMma|YedT07L;fDG`8&@g-=VMPCF4b7`}ub1?*Z`Q
z>W5pHm#1IGTP4y%iW8BaD3u0;Ytez=sQ3fdU-W(Yk_=wsjAeAc{NKyDQQ=X3_e1O-
ziZ*p0noFNLHxboy_KsYic^!8FT26e_1SdY~Zv6N1pX0*}N3p5C$hcE&jP9`}hONB1
zYwSrM=kxskIqgmZzrtw%xvw?RAHcQbxz<L)`F(fBYxZSjvPK#{XP>i1%4~Sni+vA{
z_JL#B{i>s~lb3NONqC-)z8!?Ktj7l8`99W)sd&!P|3P)!b<=IYEVb;0A0^fz@4^@T
zI-a<M!L~*w_1yQ*k-H*k11w3k0ph^GEpyAsGU3!RA5%tlpzPGU;Cs=FE33q78PI`f
zuMM2v3O>K-;A^12`DUIw@^y|Ko+Mc^$RB-u%6sieJMCfrYJW!d-+K?|74OB@EBo)8
zloh?~#eXY1R5svy57!jS{yUNEyN$Z8&HmoQxy8NDnD89xxpw<|56|P79VWktBd_-3
z>(;s@m6n~@VQ5&gMD#3K*2{P#$H)gv4AM#aA?tq5%d*~cV&;fN$!8pIkLuS+{dVSh
z>UF}inxEv@8H`Ev|3l_ncZxBq+!szU?$?qqR~^CV{bvTkXcTn>AHnJUXHLS0Gwq*&
z{eN0!wTqiy3Vtd2;aiNW0AH8vg~n0wnhSp&pY|i<s7o_fkW)l-B^yIDgRNaI+wvyO
zlXgyFgDja(AD{CseBI}~tD(L3**lR85gs<W^8hanjl4K;{yRAr?#}<fiznybO8Z)0
z45kg8v(i{44_$lL!k!VWi^k>C`U<dkm-r%g40jKJRc6V*J38^CPT5L~kLtTRMeSTf
z8~w1O{Xwu>BG`>*uKi_L{|+h>R+-Z%BY)B~#xQu?TeB16eqS=3am&s+6}*Kj@&DJz
zF;!q=qgkfrA@DgQh%aZ!_*;GaF9;Ibi|<13t;^#z^4Y$|Jc++w)Hs{-F8r6jc{|U@
zALr2Zsd)Bg@X^n+>|dqwY>wcVln1A(`>#n{Y9Cr{q}DB`uG?=vPJf<Td?j`IdHv_}
zijM;Ww~y3vmr_pcrk351gsF6yYy*2s3LepsvJJ>5<;X#YHhA_*^1lOf{%_^KyNBZH
z#M#iTXhAwrI7{ls*mIi0DR>3^gx7rjyCskC?g0D$1wQtX@Q3f`zhXiZJ91646JL|a
zkufM<LUA}D&XXGAYi51n#2U3Bc_Li<I^s2FbM{qj*0COkALf1q+=i0*47vujwe?uC
zt;nR7skF5Z8Tc~g<tw`YIpO9}Q|t~o6O|tYJ;Av#a=9e#H_#orUUG8`eS`axOO$t|
zYnJjcvwuk6fBZ5zGSkTIGs@J|VOMV*nO|1Q`I>|b&Fy%V_pH;MI~BLWD}f8icbGlh
zxz|ED**+{{e=uXQlh-<0Z?)ur@BbkNrK=jhF8*XE7bVY6kOQWcIFvo?@v7V?%Bfvv
z4eMDvjkQQ=KMZD(JCJd5=Cv0)c2^@j!}wXBpS;5&k#8fBqjQ~d*N{7@?o!nuS1NkG
ziX1Be{8<%g#QpFb8#X+a+-k1>D%x#YetW@*HBQbE!G7n=Sd{oAJ#XW=#$|gJmpQPc
z?W>7jnom1NS4@1vPak#~Io`<08t1;-V7jRhEDay!B6#IXW;OfErRta9b|;UR@_dKL
zXU*nV`0C^{<rTA;x5juIWffbp@LX~&fscodDwjrX$CxQ6)`Tf1nCZRjp>X>tV9Yxg
z#t#a{{C|mZf^i4+4SL*{#(szT1U_XNFZqIPp0)7I&zUr5jmrH5bsloOGv7k^sc?aB
zGkZ`u%2gK4B;OLSaq?s-j)t--w~c)_l~LJ;DcACVV#@xLd}H`y9lA6f#z$-n`I1DF
zALB#O9iX8MJ2o6&DmiqBs~J;r+li`G%RPC$w>`Rgt?qnziG3E8SxvqSla<>HOk*~F
z{1?f8wj8)uDu)Jg?LU7*e4u5fh5o3s#kswW#J6ovoa=rhLOfi3aCD2`E^9HNGAI9N
zU6i{H$nmOpCf$J%@z%cS(uMnds_{pX<JZ`$$O);jF_#YIFG$XzWAGf_`|gP~Zw}Si
zKYt$n<UE=O&7*GcJffP%#r^X*_n*u|a$zsDA{>O0vPG~LJ~U?KRg5=fy`lTm#cQ1-
zEqE@tYxyYi!3OBLJHu@JXuV;-V{}Ivw4!$|Z1g>Il+}F0Qh#3~G^8BL6~^0JkKF6@
zW^_c0td{+gbk>@Cdvqp&{}E5co8)jQ(eLBDD<B5!&pEBvF87S?4WR!-uRp0xk*OmG
z$^a`38PJsF$beJjEQ}IAWLe}1dcw4KjWn_1`HA~141W5qk>tH)F5OSq?aE2yj*)$b
z)m=PK9i#X~WBfDk$U9Odx>nrP-|s(}J4o{veD^bN;F2R4?|~*N&og1!K9!?PI0N}y
znQt%gY-!5z6T9Xo)~zkyENSIFZx8&p7g;k4-&h>q-2w8kM}Zshgv0`{=kOr==;TwV
zeUd#;eWN!Tv#>d6&rgnFwc}x}Nu2Op54px_e?~d(`I!wJ)kfGqplt0VVo~+I(JX2s
zSC#6jy!hO$U&S4`q7lix5bp!z%QTEX#P|*K+JbBdolPtYcDVM9$=P2cUm4@vC7<IE
zazm(G2$>d|oGiB)9fzI>4YR}6mR4k<H8eB~e+fAdw#l9+J~J@NY^r_US`?jZY9hd?
zo%LSr-?0Pm`Mq{7zkkDT_L6INT8jd_Lw4sS=04sT`&RIwGyA*wPCOsyJb$_W{}-J9
zFZKT)?fjR#UB}#X)}l6KEsEe99+FQ#8}PkCgMxuEU%Vg$d?WY}wt*+X#+jpypDx|}
zV_g>ULdU#|6my#PnEgp3=TdyYBQz1&lxAJE{ybpyclNM>)fS$0jWMOljc2&$BNVjA
z>5$ps=Gojz``ehm@~64}h^(_s&AqIbx6%I)Oxt^tdx&RPmg5_Jhdsm{=xQJFGL^t{
zFLdYDUBG!R#dMwX70w~j_NBD#`Zn*w*0gC8UZ;-fucQ6Mt<aK5@tGWej#BX|e2ZQk
zIsm_Z?3W1bZ>9ZCo{Kg@_)guvW@C2?|9izB(7+bx!=(ek(4~Xu`|*wDn)!VpzB|3?
z9n!sfTCMi|t32&L`zh-S;I^l=lK)lhsuLhiO7!vs_!DkyXwjiV&Q86`bLe~52Iw^_
z-Lz=D-=y3Sa=rTTH&;NfuT3$IuOS<_-Vcly0#o@MH23>~bKDGVcn~==jJC<$nmv>@
z8{N9lO56--VBfDMlQu2tM3en*fJS}PA#S-PlV{>-!PSS)+5InHLnr>rf=A%TD0Uz9
z3u#B=R1A@PAW`qo4tGo%3;Q-TnY3%s?m=*NfVL~}gS2B4#%ZVSf8sTl;ww{L+e5Tr
zC+We(!+zyhp>7lJSSLN=|Ht?i|22Wd0fL~d4gO{y@wm0;!H1F)<Pb5OQ=Fl);scv=
zu4Yu3Z_@1D6=wNiD~P>d8pnsG8sdq~`GGQI7Wjd;oqRRI+skSAlfhSry97kzqIKz3
z@l_|XM>0R^qn%NW<CPz58}r`^97ID^%&iu<fj`H;zxBKX{maj9*c&**^7PYxHu8md
z;Os(YzE+1@cR`8h-`j8nd+fr;8O+^<h3MZ$U;kVB7he8^eVvdm#*rT${D{h<D8Bt2
zZB-D16oSuP{%iNMmQ2RMS78@z$1bYoegi*qZ<O4p{=3wVP`@BVUCCT%mp$|WGDr6z
zs9#@F7ReTm(4S~ta<lGl-20J)pUVTkBiGZbl-Y;hZUeH|<$<5j)^CAxr)UTG?#It4
z*^&tl2(AZALar1*+h;?^v*|;7JeLDImv1(3W=Q-Z9#OeN$Zg{L!<Dq-!Z(YUO~Ks#
ze_uEMp?~+k_FTp?W}7nT$NqXZA!|<KdF_7a@6Yj?rx>p<iC4Goh7W0rI<iwGKMeVr
z(~ui8{v6*Zx?8u?w5&I}A27WGSnt}8KQhR<3DKg?z_lTV_v4#f$CyLA;$<PpXlU5K
z8=v6r_{M$4YTkhEmfuD4RPru_?n9rB4S+kB<{RM;2fmc8WGtbScWwK)Z;)s3NPl^Y
zXGb*VlyY_WER>fonDT7vo<y!^JLQ?5XUhB5%3e|rz9F+EUXua5quB8w`VU~UNhT`a
zt!UNw?p+IC$KGRYxSe^{gYV_w`zFV>8q#qsZAFmDzdP?F?C(SO$;WXIxb@?c9STj{
z1CHynyxCQjnNyE!tc9N%pbPO@Jvv7@g>Bj{pzX_$^UF;}!*kG{a4-4i;%osj%H_8M
zDf(suGR=R*XZ4Nz=jS`H!v8=YZab5S3lZ)mFN_(R;1lK`*`fO@e#e|#I$eNX+{QcU
zP0@BqQfJm$rr|8+aCwrp=g?kdQm)^Jef0qIf54&bp$)^C(_q@Z3|yqr_G_Z`LA1@9
z|CF>nf#(%T97dl9hm22aB<cKb^BrLx-K>Wcx8ctDe(1dd|3Kwo*8Y;k$$1M#9%RVh
zz_Hqt&(MBNer<DA8+xw}nz+>A?S#IrAg<ZZ9b<LS#gC~YouN9RSK~D*TlE`r)jI0E
z%9v8iTEI1g&X!#MA@!uk^}m_lwaI=%e^2&{tWjIo6eSh5kN)mit1+lg(d7@Q)0<(Y
zF1O91AiDDq`ZW-Qeio0v)$m`qU5<VG73A}B<{Tskl*-l}Bo>poS0NkMVULOa<p1Li
z(2nH>dkt9uAD6Ea+>ECLo+#Hl!DkiaT=)duN|`HT)qc*acEUbLjCX|tpBm~o{U6bq
za!AJyfq|c~)$uL4A-VD~zm;3*Ch(?r)A)AB-$|^J&Wv}Vi#sS+#rsG3pSosB{q3$V
zT_26|-y7x_#OKhcb2RuIl*@VkrJP|Tm$N_VbExE;i6LkAa&Q}fb{QA*$L}!G)Ba2e
zIaHBz5ppBR_ux&#pTW9H`$dI(Eaq?lcGY~39j-R{IqSUkH00n5T4U60Q~V=)xUBua
zQ!MaRa`axLy9xTH1?FPEo^8j1tiM%P?NwQe%T_SX!G4!6;)jsYQw=ofLxyUd&DyM_
zf1OQ#LAMY3EKr}Ub9;bgfb~cPW9}{@|0&~_zvGOvm{XA>ubpz5kKXV6622RrD=w)1
z400`giC6{W-GT1fp*aPhEsaxi`3q%i@qW_Zp>=}#5sc_Rtnq1_?ihX4vw2=kndd2M
zQhXh>nKOwyNz;hwUq?ClJOq<pQ!biIta~oLd5w+V$}z-xvLnFzz~{kB_~gEff#b>R
zSbOC78XNzTp1ZK<2EWX05qlucdii1cQM{WAYvmqxY0UKty7XnBt;AiU7UMZdV>L+{
zTb<(95{>!DGueud#b)i;Ph;@&2*wcMyp>>=$Jp9DI&Z_hw7>%Wpz*!nV=WrkmcZ@J
z;DI&t+<yjxLe{XpK`_u=q^`fuT`!3y?;?Ll@Oa#z$+iq~6Q7N4XWsaK`f2V|byM-L
zbz>@AA4<aY7Ic>8QVv|BlyT{xhI#6|hV0$L=bTuh^=B$ga2{gweD20@>4Ev?{Dw0B
zx455h3fx~m2=}A@3GPJ$k}o~bo_rJDi0(!(i?nv}UWq&*_GCM`tD~7#dl$UqKc79a
z%u0R}4|_9wu6&uHGg^@OI|_b1>4Oc_dzw1R3nv~SCvL|-u(dqkRrkhvCv$HYxlY~o
z{!(<pY0quPZP#tD9e&@FYqfX6D_!TB@Izy{$0oOu|M;fKtNPFSN~Le~W(PUkOEkw+
zI*<G>=sSXcOY|K@ANAAs!=Cn@3KRZ%F*0WYxfCmq8A(5`XuZpuR>JuU&Zy;fY#<-|
zApGteEDH-I3zIx7eo4q0a=JRQCgHmdq|mM6wo>1v(rhR6luENv#wc0v5U|vE9)vCr
zP$rdTm6I`wKG6QW;(e+qBmJOwpB<m2&(Dm%>vLq&Z6AJCHvKv|9#=Lkps&x9O$qw^
zwc{Ta-k8VvLH5+Ri@C$k9WIR-(|@V>R>_PgxSS8{B&QlVA0fRcSp{sk!`N_lGIh|6
ze$J>l@(S70k57D@-QcrxGWZ0SuH2G*5I*aOw-W3w;S4mmbo!H=Zqhl7<bFbZazCL7
z85K(U>Qiu;)Efz0nq%=zYC9DNy0^?q_T%E#f5wTigJt{8N%-B8#AiP6lUy@NJvvwx
ziZ(QU^+y@UkFU85O__`Nba|Qlol$7H8~kr4mv1+?-;%(6iE>uDH0)#Eb-;O@C$WF>
zdAL7v__MgbWDxET(9b`^y(^zwzSS7CuR(kUHb!Ni@LKBJF`no6hV!pIv8FD=j%^_y
zZ9R6PeEt_)b7Bqa;tu5gM!}o25$%FSsvb|3(JPXB8H%4B9VBNSbv|VNt~?q1J<vY0
zID4tH=pKjnyWpn{GdNc&-r{*Jwpf&PRu%HnqFro`X7OA+kl?q(nc+P0a(a{ey?w)i
zz=_Z8TVvt=!#A|<4?>H&Z{+y0OzuIj$c2xLEHlpjU7_)uR(mXc(WJ*JFO*G%{aaFT
z%v!Vn7&VGlbXP>#pt}~Z^^Px_)lU0Pu6_qb<g}N+!cN8}dYpS8k?Gt46rjH}J|6Du
zT&X*E*h^R$n87|<+UwVYFXsM1Fu(GXt@P>e4SnvR&+Do4v`On_?_gIaV^g310DkIM
zIs^FUC{J#*iFG^pj^2hJw2Ad?wzpmQB=#{3Om}uRS>*-68OOE%6<wa*uJOc+%yEnF
zEbi=UWK7KU5kF(fvaHuTx8p-xkFWn;Oa4H`#_0_HE@M@^X^mptfgVJUhkf~#OU)y#
z*Zz_*uqI&t!-PkETlWfRFGTjS9h08_pQeF+f0s_cgU*dEnl!3vDSE9&{&@YLF{*ND
z8}`|$_LSVZ`mP;jKG2yI(U0ySS&4tRF3l9zrCG)GtWR2bzkqhC)9gp9j#ceW8|5L7
z3v)G&|LubyeKPOxa?08KR)6dfg!L`GkFM^J?;*9%)Zg)H>y3)X%pw<Olk#URJ-*Bf
zje!UD&V|1oXjri8uC`jbALbq&FW>B~bc4I@<!Qz6UQHeMw)N8*{J=Ub=HBO1$NS^U
zs@Z#H|A%q;@x`1$ZufNB^a>~Z_prv$T_r0A!CCLR(Ct~{68Fn+FX0Q9CFhyyV~cvt
z9PX*zEP6_Xx$58de_2;>I=*a6dnL3Z8%J`=vO>3tF1Kytt|ik~c6`}ZXW!5*qxUxN
zf5m%WJU(r}bH&rB-ii3M)Uj7nUj9M(Zc}mN_Fu&u?inB4rTzso;lhR6M(kjXLGw(V
zx7!Y9no8<<r}wV{hYc4F>?6M2ydl~PCgsaz@c;2;iTiI37CC-W@kGoLp0xhS2p-<c
z+V(&_zQdaWeT-!;>;CeY%&j7VPaE9SaVJha{>MqYOXs<dJkd@}bHEz#UUk#)jn;84
zJV1HDxG0kFSIL*Y#g}NWC~B^%N5?J4&bc32T9@XTpfOib7XB}<ORO`U{<J4^0Nv@%
z-#`zIt_)=VFO@Fg6X^2feK}if_SYDH(ZuDuyBE|iZn6Sp@0cOI$h*1SWv%1uO<D=L
z8B4v~#a+SvM;mJ*jbqykv-!Wkofr6cvyh=TPn=ivFV<Dwo9g@OuBqGXj1^z1)}I<*
zC$RH9a_J`;8*#@qQDZNOSPRN>+24xtPW`=uF46l=`t{Q<euYw%6O4S;f@$vj>bNt=
z$9SU)0*gcO@0L09WlgFv@q6y8X6TOX<V+zi{#4bioM~^a!cOo5PoK|}EH|EpI^>J?
z$ev!o-K_tpoo@I<7Y7#mj(@jIv5#(Fr}~aJdAUC*ai`d)w+(OC{V~BLE$z9NyMZ3|
zw)Y@Mbl=jECQE+z{(HxcoXb7JHSh^{Dt~m{(Dsj!^U5*vrss6$u8pJh+3jyF{cv%7
zxoO{9Z?))-3*CXl9WdD66VSn<9Utx8&`=?BOXmz{0kZcG*z(HHQkZ2gspUQagWd^{
zlYR;`%smJnXg}Sd<xz>ag<Rn5W9`<7-0~q;qtq=hdA*XSpK|A*`q{@gKf3O6@}A6T
zcju>=Z_USzPw|tZN%xjve_;>K=6;JS+JTQF^I{EOX?NQVf%84ItNFhTd}9s6+RM)~
zEf*3?KApSNqTGF<oImYfG^>MYeP#KXk!$lS%&k$4TfB@<shoUX<Di$K?Y`z2Uhj@p
za(tfy&rI48SiCYVa_!2CO>W$i)}VdUR?Y=fqGJMS_7dH%&<PLCA7wA8pKMxe>Q+&{
z>SFGkGM?US-Yqen=KM_ddGWbw92(C(j3sm|J}nh)nv)AV?WJn1)J0j%Q}uc-!r!5K
zR$roCGEPLWR<3#<V{+S5J8Dnwbe~zY$c}-pxt+9W;X_n>iCfk!x0-U?_r`u}a4uzY
zz*iWW&+)*A9&oEO-zxh6<(#_7{@pQmQrE#Zc!&4GDknM=-3ce1jfwabkCl+U?%Gm5
zI@zY91KM*N-Eqe{d}+j@_=r8J!w=%v{>Za{$HZ#5`#jYa-Qw{$wyf@fyI!;f&EHNA
zAJr)cL@rtG30{&~-p$FRz6a!F^5!@>nYbUiV+H)CJG+iyS1OL<2y1fLE!`EKnDoTk
z@Vaun%TCtbYV{DaIxxyi`}k^4>|=ZxAI<Z`c8|BqBVV-3bA7pIHG&r(u>WXYRqW%d
zt71`)1J}9za<rmqfE=x3?<?-jaqf3HRbHSdaDJ1x?{SgZ>G?a6Eu1HLlQBe(Wll3i
z<FfnU?Qs`#Z)UCue~hk);){rGPj875LzNDVlk>X){a(YpDT@Nb;BDg8HIGW#@MW86
z(HE<h6hPx!*+crXY$J~yj@DMnkJ&IA9u6}8=)KkLJq6rZ_9C%5#4mL-hIaDH_=fbA
zU3)xpT9jumB*)ZAneo6(daoOr*qG8L@t6%>)|R@%SLej=y{@*omj-%ua?&7YY6`xG
zZqPYa<Wkq}DrAsp@bf=_O_@H?v^-7xZh=YfHR-`e*F9o?61|tZYR)v_1=Ou$9H9{B
z^ND%eFS&(HI<pU-3c70xe1LrWV8#S{X(jKruy(B-1#g2Z8$GN2RE<4EY(wZu>|bQ%
zmH&!QC7bmWeQ%j$!oV{IKEij?ZWMScUwVN0NgU_g%YVV^HGT73YeT&sL<>20@f<&A
zIPzY6s@{oSL@ROX>TKY0WVXYf&|LTSAuTTaHKsYh-5C=;Wx<C#y5=gsUg!4VEm6uA
z`dBMqb9Ry+MdhL=;$?wMyS)oOUCKN@C9g;z(-7ljKG6GXb6eN`3RuW~5-p3a4+j(W
zdb}z9jVAn9iF^GLcgX3EIPtJ^*VnW19hi<f>7_LZJLg={0e54;J9C5bfx%l{YX-`C
z!T+OY8JpwNPTYe=UyiKzigub<!yp@+xj@IP1H;cTpTO~WSun$HUx}RPfxf!H_ivd`
zFe5RaI@Y&6;2Qr-c;%?pwH5eLqv(qO<twlWBC@ZLH6G;4eB{fd#lAkRpU8*otVz4G
z$<KX)`x~?E@EbgT9yqu%L@{5IA&I+<Gdpy*);Hlh&JuPwcWhM;dE*%IN63@sojU*-
z_s7>&#vEC4rsc?zemPQYTFwWLfz#kWaA0xYp`ZIbE4WVq+;Dz+Jo092he5C5|6UW}
z{xp^QaEcW>Qf9?IElO|EyWCLibnAJ^1QVNr?Aa>&3!X19;~MbOI6N=j*Lp5WpEKw)
zIE=P#gy*pbE&0If6a3E}P0gF|>Q?c8S!Gzf%38c8BL2s(*^SN6)e3x(0~ijg?V){T
z?l^Vs<#xu2{SuR$X~YLCdq;A?KpUZ<X5)ub$S(&?94V_*PM2^N<NOBwy+iwYZg^&k
zX81OIBQKwK*4}4U4v?1?@lx^XA)lK^Ep-my+>v3LLnpK!1rF7~z&@HetpXk0-Bh(C
zNM9DRMsXR-DPQ+7dK-H24Kpp~$PXSB-N>HqgtjDCF4J%60_aEc^Jx7pe?7WibFHO(
z02^u#@6w<%_Pt_HAvY?awJ5YJ7+$!A*ivZrF=#A6|ALL+A{ZESu-43c@3Q#BGq{^A
zS<Zd0SXLKygX`N#82V`E=akbJzbKk!uJXsbG!$EYlD4HEMc@7R#Z^ys^rLbIDo<hb
zqM0#b^V&a@-?oAnUwneWByWEV?|cN^A0bXf_FQLXy0hM?<<2bRdrj@+gss1pyN@N)
zj~1nK-Xfj6#-Ux~uqm#=HnAF(Z0^LzIN#$b-pW}K(bM_J-bjwwDEsxOHw#-~f@8n#
zEs`xembLl#65acyID_<H!iGJHt$Z6ff1$$?Uj}v)?G^;s7bVuE;2Q28!p58cd<x(*
zi)R*Nu&{Lmvx|Tinr3qlS_z;JLZbUKh4Zn!A^fVBef`9mqeU|r`^;Ddv>T)j_D7iZ
za(u&rbCE5I%}vO=%$WmhTZ^;J@#@LQv<Z%{Q!%rH?{K@2_SB{eAH_OrFD&1Td3L_?
z%^LH39rt#`y3<?sVapdh8M$OHGE%<jsPqwI-GdC}zS|c08sN>6kL%Oh`|7!0bV~4&
zz6N}0*99+$y-Z#t=s_@&4Dch1qc<{7XxL^=7kw%58~dTAyB_++ev8tc{C4%w^UD`Q
zOX$e}_h6^K+r;w#v>H7Ne$OzQY{ftVLj!yS)9A}~OfW_^IctL>HP~+rf^U9rg#F@w
z=zkL4ZTxp(Egh@6+Ltrn%YZMzd_se7^Al=U`wI=_n}4MDo2{!fr%#(&uXW2B?*CB#
zy2Gsv8FxSBL`&rQ1|JhUih{vimm(7i(1**s!L`@(KA6P6`cWTRp9V%?p97Ch#$5G}
zyLQj!?(c8&EXuQY;O$!E3G=OyjTAsuRI$$OWZWwIW!)3b^E#dzt$!&mTZ1*vM$N5j
zf^>k@><`xV)gf29K8|m!L}qNF-=<7_LHH1Fz;{T#gN^&QV=Iv};t!IsTge^KWVIM_
zL>waLd)6Dl@!|)?L5ze(>!>4{1>S0&vdog@)a%KzKM5k&L!Iv|W<Ar;8)+TC54=7%
z1iQ(~Y<P~cE6$g{g1pSoNcZvhru&hd{#W=+oUvQ&tz#|aA8wk9Z<@c^|43!{^~E>#
zU2bWAf9TK(%W7b)qj-vzDxYcDLV3wX#T95hd=vgg>(0A&6IVk0y3LiGZItf{S$Udt
zage^!e}mtXzMlRlzEOLC4Igplz{+kohdWAdN;g;Cco+VdubkD~JoBvPSIG6+;~i4+
z^jC_Be<yC5*n*WNbBFYgXK~MBuZdtodK-o_hKk@j7kd{^TI}g5SRAh|_)f)xtru5d
zOUm{Y42sjuX|FQoh9oRF%Utsy{kuH*vmYe<<+8!YLGKeZ-p}EA(b{@Lo<cq$KK0SD
z#GQ{J?tDzkwljirTmG#3lP%W&R{L>u^M~^!U(=DJ866*8=j9wqX2;R`G-RLQzD27f
z){x#Fg9krB27fxm#6CstK1f~ybi&5YixfMO+abBI2ihi|J@Rp!XuRYjY(3c$y8Ck_
ze9s;Ma&t_F=PG2t6zG@r_VHzv+(lc34yeY)nSpHL9^vf?f1|@kDQnLF`~Yp_s2%Z@
z;;=qDkHj3*=SR#bF%OIL{T}Ql&BMz)(mH;|*@Pf_d)hbhL9=RGV@d4OoO(Q8W6lxc
z(WMvmF=xrZJz6g_U(U)fXZbf+U*O-rjQOhVXqg>*m3segZ4aI+`Zp)Un6P(C;LGrT
zGgr}-`-wLV#NQF-BpfF2r+bz;BjDiB0}j0%-($W3=Bqu4f%CP{3n%AGyN)fK$C#r7
z<|_Q=Ggs+9a#Az*D&Q8y7c!i=s@<sk2UoKmr*7xfb`qYaZvRyC4Kh#7Rlb$u%TC_!
z>)OAv5#rSsIQD_o0It0oW3Ixt?Bhz=0kbk3JD?AkXifbIbbX%YPmIF8<owlFKmW|S
zbb!vRB%YsskkOg_I@4VrA7A#0<2U|2XRNjUh>k^$0uR{^MaWv4vsb-EIfOb6DUJgR
zogM3qr?+=`a-UsCoLva}E(=|f1zj8Lw-2*3+vj1299ZvZzhmKo&C!g%mPO~G^QN$0
z!kR0g|4h5r_rTm9<jX$rBcEDg9XpzPwi@Ra&02qJA-L$px4|VLtM?<*d(W(D4-6sp
zhc;!0{9fx@*&)Q(A*UTXq>*P<iXCz$G#6NS(hiZ$_dAo&r~0k;;y=MI3Vws+91_k8
zOm?s2`o1C){=z)YxUr^od~f{EgckJwY4Iw2qd64Ozx;ukhw?SKb75TUEi^jw@TJTn
z8jF{42n*S5ui8g{k)ftka}ZCsdUs!n-VH1~sdpp9b=|RW@@6LwJTgaP>}8Gm;oK8z
zda++Lwm;EMfBS!$*}i{XP_ag(=(-Qo&-LT&Pd+A3Ziq8o-Rl|ic5uLXrv&fk!3$Z=
z8qRI|z(v@o+<Bz7(d~<VGu~e6^kstM4<IjPS7^@ck3eIi9XntK^eH>wO;2#`_jvF2
zqZn+rADuPqBF2Fj;MfA%S6iaz-du8X97aFm6I$-!?lb(*Y2)lqzQI}Gu7|7IJ?xd;
zM=YY^W*ol5j$vLoH!k#T=DvZj;Byb}Qu}iISD&IQ&i1ZRKk85YE_K^V%4fAFAE4+&
zZ4xg$HqPFXb2bMa_%Pek-iz(NkbRF{=<`5!Rr@8Bao4!+I>7an#l7b`e4Yn==Fx|E
zO?<K!+`+fbxy^3iptES7cs(VS`2L-Q{U2EP{mq;~567g(axaZ-Hfhh!Ka)K^3wyFD
zVNX`e#;DI|KZEfoheBkM+4yO8M(o(gjM!hk>e#3q=5+3mKg%qN483w`khNEBHfLk7
zr}ZpQh`j~<__4pSm%@_Qe&#+0x$tTBr7`izv5}X?8nw5HAENu6nFH36ZAHi!@4273
zTlx61L{4tWiQs6nDKr!svhDLD@Ru1)PU8{SoW9W93f7B3{CAu1&jp#wkHJ&4$i$vu
z|NoQiUu^klhFu;-H$6SnF2@$w`P2yZc6?)7s)E5?m6Q#D8(Ve0X2RmjW7|g{Q^qIO
zIq+o<_NmrF;MG~<G+~!Y#vDW5kAqg_r?<J+*8@*R;fINw9SE_${{-5wC)nkc1;iov
zOtz2vA+DW*jZqD)ug`Gq@Rbg8_SC8OW$HzT;ukox+VKli$}dpFZ~TI3`CnNo`{*s!
z>RtE-I@eT&Yw-=pH`ob{sf>?xL&Ddc+tEN<w&N3=)!t2CU4KgW4E~*5D3Q#*GQs1g
zl)=w2t#du+Q7KdC3+^h_`wZS^UfSNp^AC{|SN=QaYT?IdW=8vMIpp$zx9~N`67p`M
zvySMx3fmeO{SkW6`_8X%*5evaaVPat*YNitb33sEWWP?<Z|M!}s4jTl()x*hiG_^K
zdzp6VFG_vxNR35DqFZQJ^dwr!AI6#JBGZzeW*mP8{?#yh%&fC#C48jJ_Y-)F^=U_d
zIYo~UX9v!Flyk=&VLiDqIqneS{<_P@$OOqvrz|lhfrV2ySD1-OpSRWVOtQ`@>WIHI
zrh;Evi!`oiZtJy|svQq8w#Wz3p=hugTI=Eb=1;$j4~Q}C-(JwNGWccIklv10(3e|}
z)J|WXHR=PyzDWAcg6W0$q5OBI&0F!>{OOIa)lK(A3Z~B|F5Ze3Os^z1R582t?6WJ+
zXZk-1ru%&>$Zh4>QDnT$+*|FO8&!LS@Ok|s_pZhM-RTdFZFy)Jv=04>)@KS{I)~2~
z-x)#v65{!t{Ui9;2Oo=X9T<SuYnUtXP-Cx#{^TE3ITxPd9hG<CYD1IXO2X)J>Ipu+
zqzs4?Pb@l_!Sfiu=_BD^L8tv7bv$1tCLbS=a^bl+w^_@&`&-m=#-?@;(vCA8aFIIh
zPN%OlbW(ap4|5z*PHZ5w1s~C7LcTo?JmO8J-~Nw7gPb#QY*d~*_FsH^2Jc6+K1j#k
zHI_Ajvp?v_UBz4MnP6e7kCQ#UqdePw)Pwx(dWLm5bMtvK@PnuIZt!!bX?=eCN;7W9
zk4?r^FAcSqtTY*Kv___}NBVpYx^Dbi*kmDi+n)5uG*>q{XP1F*A+fp4dG68rYufwe
z=raTNg6k$}@9yiYAFgIR-(>BO;f(*od1Km-W<;)a)-1P;$8Vfj^5Qms^UEXbCBH^y
z9{n=DUi6aI;r}_7wLl)ZNRVZX?9bJCtR476KR86b7t!WX{EAQVyb)O>U!Lt9*L(+i
zdr|bF+R=T^K6sLHSJgI@_w_tLJP&vO$%hgz6HOua&{a5Mox5En|GJB0`%DB+8Uwjb
z@NM2k&Yh%h<op0@;RrcvJDs%@@<Q@}IzuUgpW*z_Xj5~YS2Ar}$8gC|;@g7TFJkOw
zM+JL|!|^v|uveJLUSXXlbH}Uf75<gI!U}vIXDKI1n!O~rW7*;gleWkTHsXV<TpHr}
zF_Yh{dFT%Io(n54Bu_(4v<#gy)=brWkcqJ<Fc^dF`WJLmE3l~pPNT<|jSl{ZGmxHs
z3En%pVqD8oZiRN9v%kKK-<rEV%JT@`%Zas}TM)q~MjIh?Rss9-A#&+k#2!=xtVLLy
z&b@tJ_}6d_L3Plz<jFL70b@<j`da5Mtn>aK;@$;5s_NYPUwdXk!aanmfMzC%0zs=>
z18;4!lc1=0BVcW7&&h;<f_MY8f})u~ytJ`L0`_1--zKQ2iF%GzP}26u07_}Gt%TNd
z+MZKpl5jI><t7Oi=l%Zn%qBww?fIYg|2Ch`{!I4XYp?aJXFcm#&uu-cVyM1<27j^Y
z@Nw2O^8U=D=m{R)m*m9r5^HaQ))WuE_rm$J7SH<Zwu!-8f*S+){sZ{_^?iVSGA=Bt
zN9V1mPK)|%Vk83oKMsA$W94q>L7WA3gYO0N9RHTiZyVUq(THx`lXG;**;NGG`OES3
zfX6@llihw3=R%*RbNW$=4CZG(AD;0I^xtpdd;WI4c+}}K;Bpq_G#6CHP}VK?Rm#Qb
zNN3G-($PL-qzE}{u%XJ%HpZsE&De58OQNAAywmf2@Uswh((mBg5FPD<#`Z#A;ghlP
zCm8D}YfljSz&^f3-e^-Uw<V96c9j*Kq<-tO)dt&%=EP+D+3$OZ<pI_c%nLuhEQfA*
zk3QTu-|Z8!oajSqjeN-g&az1EyDff)zrmm2#nHa;|Aiy*(f7$OH}IPVJ)IcP0df0%
z^7q=~A-oIcA#8b~Et@tp4hw(*c`8n0?9tKqd9e%M&U3+3<HE>VC>~Upz`NQO&UaI{
zGcF04*Y$@NP?vNFhv&fWPQY*M2V~=p>#*@X`<?tV?vM7NpL^?-ckmdz+R<&j)=t@3
zEO_bK<(ci!d6W3p7;<ffi06-a(|3vw#~7z0@ags5%y#J!lHZ;$k}WD8XVFz=`wjV8
zqtHT~x1@bDJYx^EvKKu*$yU=ag1#<K*l1MFjiac)K{C$3h93%sgxvki@)BU{jGtHw
zuiE6*8n5_?cwUCC`tl&;_(2K0WzGFAdoGaQh}8(OZmwN^LHm=mvv&DELR;j?;(iJ3
z>E2ISD}-$oSwk^@htc!?;*L|&I55{66(4Yz-}iYRS@L-wgR5IOKC|Wh9Q^_tS8iQP
zx`THgyv^;S*0X0A1FdKI*l(lA+5_psK-&BUw6XSZIzBhqlJLP{UkKlRAM=>KSkoLk
zS3?B<!Oi3idS-b#aax0OE5L6M|DxT?GzN$XE?b&5qYzo9EJn`rqV%2l*pB`1-#eL)
zYR^Khtt(64DcL<MggjF>gcvfrv2I5CPU1Nm6>EMseH2ZI9_pS=-`NgL?1erQBio9t
zW(fTeEr>o8TbvS#>)oy_KLQ!ip$on>^tTil`I(mVoqLg0q;s~gKJk6=6y7O5<ish*
z=8>zmR9^OToAL8AcAHoS!oaR}dVB$`MDd};X=UK&XywGBE7-%6(0}OX>Au@TstbU_
z?e`e^y@fHZTb@(~-9}}U@3U@E`p$0pElc0o6=zv|t2_c4zuz-v0m^N@eZs~}FMDO^
z%SYFX-upNFk#P(yv!>U+Wi2q!-BIXnhuWlW;Cj^=6LX%^=DFHRr7ii{>L_o5=T&Q*
zJ-zJuWqnM&dCzXg(%rs-_puAiLUhQP_p=8jZ?I{U@9fyaX*2Y^0)5E+Kgj>>yc4b2
z$n*w!5Ar*Z-{*LqO?&S83QUtn7*AC<)}a@NENlAk*%ieN?2}BhUpyq=U^9H@H^|`M
z>lrG(<7*8ItB`-c|D(o*X`#rW-6uJJ5Bigw9RjWxznpn8^SS|M(xdi8RmyQ;E)3U%
z@eOYxe{yf$DK4gaj+s>CGn0`I6-!pVn>E9RHz=NUIq>X3Ru4XI;(1c{lQ)BPHCSn;
zXWnZqm?s{B%q1T{aOulyt~O>e^P}3FoU<z>%(;N*2j+>M!xWEbmNu+0C(CxR?)S6N
z4TA1Hdq#skGtGI9e&E7j;S<<K`;}>?`Xb`-&>`Dw*76dQ+QuFa2X=JHN$fqFrdUk%
z=}!7x#538Al6ih1_)5s7PP}S9b$A#T;WG?AZNB+{Z%XKUp}*kx7Uskiw4Ku3j90#q
zHt?kVv<2X2w((W%<6i58@&}Sz&&fqn=Nq~Z*k@)M?*be6y0))!f+0e_H`gASX<2Q*
zVx5m5pR5}&WX46N=Z;!@F6)fRHCFc>Ppo@%=sM)vO~Cbi@P18qa+!y7+b-e%5mri7
z6kExK1MEo`o{UY%N__jo+GRt_8Hc^}r;c@e89G=u>evlE+)ivmvo|HTn`P}NG2PlY
z6L#h`<olgN|D#nF{Kng$JP;p@OC5FKQeXX#@v%j#;<+FWTsnp4Q%8BBPtj<U`Y)#c
zYD<067@VumqJPnN4&PbnifJZ(|6*dX883gjJsEnPkTt-bTq1s&ggeE@7ch3S(V+_x
zdWG6K_266e{>u~(=5zL11$j>_MhE+Q8-F=~eJ98wrO3J=t37XaFZdv_=ON<#a*Wwg
z3%&k^cBLaAi_&N9uiElrGW=?H3hhowv{~*W9*jPyU1$Fja=*Ke0>1|KYI5;ZqDRq|
z@!9ov5!+xBOIU`#Zx%khQra%X|2f52PVC@3>{4^K2NwsB^Zk*M#W|sp#p{suv+GJQ
zdxgKPvWhD-$o^$%#0&D>BOcF^%5I(|%ez^Pp)8N$oZ3c%tBOZWM=9<2jj584)z6s3
zW7^_<(wgJRc68U`jf`j4F-pvfGrn>8QP*Gbr*7n9%HnsKmmD~z+x!ChvJE;5FgLoH
zZdHa~#gXY(&vpZ+WLYoY=(}=aVExR!IhEG**&)s`fj4ZLYZhF=z5ZW*+47-Nc&=y5
zE?YLV#CYe|LGOlsX^i~Tk!j-j`gNZSquR*Ezm*ePz7oGIwt8em<E@haec8w@HCu=?
z(lcnbtsdMVFH9~#X9@VM>59?KpG|%pU@Kg2rWbNwvfV5oAHnIiReu@&O@9Iw<f+LO
z?AJmso1DKMnH9R)4V}2K#<u#jzu*(u5>GvtQGaT=uNoY5G(Q>Fxt;IP0mXa0z*s<h
zvBiA={_4OZ9t%9G&#kBB$u7DyJn__n#puvJM~9A<DYp$VUC0+X%mqL3T=<+PN6`mD
zz#6#?`~fSmQSeZ!fpvAY__Ovsh3=P+@&5tL(9F4DKGy$Cm<@aNnt{0_0duAg-4#5S
zyok=pulleo(T7(05SeePvClYtif})TKDjjV|DtadUoalwMBj)Dm@FD<CO4kOr4X9*
z!y5y0XH5$5?D_=!+Q&958UE$TW77{iPlBEv`ybHLV`tJ+0rTS2gVTwnPS8_!oSq00
ze=6ej=bELNGY$gR(eHNR)y1#;0=+$z4sUe*f3dPlcCi1b!$9}iH|Wx_e7o>U$G+a2
zn(o-3!aag{jOnW;d|q|O=yYr^$m*A-cMSC)-?9ImasMRXKd<_5|MZR{gVQ_8FNp64
z#kaIRVk(;=W&SD)dEdgGaTvHyj7vw}HIsD?D!E*p*rY**vz+0Hk{2ygS-kZUV&d7C
z8p*aNN7&o28T-gF-f2EYF0d!r+V6nf0ljf?D0cTmY>Jbe{EC$EF~3BQ70ji=`46_E
zGc@QMi}D3?OBYwLM*x|RoQUk3K#pPlaTb{w;Afs|E~;KTQSZ1^*+?aaCGxkS3tY~5
z6PfeJO%e|;I3FFQ|BW4rgFQ0%#*U8BH+CGq^u~@8<8JKeE?6luDN&~Dd-z9_i}#k)
z8y%dx`-LhPZ;ct_ROOyE>dNzKFS)Ld8Fv@=8Xt{~aJ(=<3+M6+Il5aShI$xufQ_Re
zvZyeg`|&}3v3UmJlZyR}VuxrRoHFVteuj?w3p?PE>|yZmt8?$Yxi<4gu>gvD_!PbK
zFf!0!o~4G+nebIb*uzGDGh{bDn%S-1?rTrR?}yJ7$^DMu8FpVY+2EJ;<9|hem@oTT
zGj<bnuiO@L7R$CsTg4j~+eiuLy`gJrz4-_~a4B=uWYje=P9KE9Tg!aAu@>JQ_T)zV
ziMizGZt(rHbe_tgs^^Y@XV&o>?0=bySSP6KDeTiBXf4wWZL<RKv1}W9x9ay&SBtlZ
z*bc=j$bYX`g~8OFmK*oE4sQr3W)|2SpMx3b=s+(|WAAE--MGD9d)@%(xrVxBzh6Z=
z0k7Sde=+`KVz)}X<{<X5<2E^o3cyW%FZ<ADaKQgd3b5;1#Fk>yUnm~S|4Y^qf4~?t
z2JZOgF6p=-awi=Cer&A^Y`)7^Of)%dvN(%J<)hdf-LY&Yc3tD=?%7z&w~Ael(3h?@
zhh#l+9Ck@RFlPd@a26DvE-?$fy){&$7-@}{@T>94VXQP>S9ck&-q;|M$Ey?{P9*cn
zdeMQtuOz-u-|O4`&`P)P$f|uNZJO%c3mr{x>%%`JdxL1;5_o%Zoe^?<DHaQVX|8BN
z-)j6--$!Tp{tj}_MyAm(@eIMkc&Xl(vC)an9N7#zmgLV;;3_?AH5N!`7$-VmoQY=|
zn;7R8z=Ot0<L5{3D*#{a7$FbO{2o3djZrDTe(I9VAV__x+ifR}d7}CiJMKPnWbUN4
zf51Bz<_LOG0Q|`xn+2cU&s?h-OHN|?WV)M)YA2H2eblGmIg9UFp=HtSo<;0ogce=;
z-Ji|5i5bK^;A;=>Bc2}|)*Xnghi=|;;=jAl4YG`4qgJfts#9*!$S~}^L#vHFw0g_X
zQ1LZ8*h>ZN6?_<*V1ow(ttx)64msm-XdWIs0Y0$AZi`Lm53kf%x%1T>vkG^-z!P!y
z6Wu-su@mlx1`6o+7W%Y#e`=o5zM=iG384gD8+gt<86QmCKQElo-;vI*mHUi-6Jy<r
zJaiiCM|h?=w{~xAg5um%zv{_k%tHA6RhMGyhu!zt>T}^GfNXeHyo82UXAOf7ftPcA
zTfmxi)^CHus%K@g2jSOWVv8$^+u{_*6Wy9oeFUEFwxu|qNi%Ksr+ITHey5;*4?KPE
zrKa(u*O$AGx#jTm5pkX_9w<MH?9)NwP+m_l>xUu_X?^|<_us~cBl)<*n|^SlVo$w_
z1vsxkei`(=j$Qcg(C<1nqsLp)WBE?<)JHdx4}*Dr^cGXU2RhsfjU7Wr+{gNfjSPM|
z41S7j9UfbZ4YkzWw>aX={Wfcv^Rc3SpY!=A^DE%pSrY4e@O#)S<ohjU>@<(8Pb}7=
zIwuBI^UN^c_A;i=-z#69V!`5jKM&9F;_I>+_P{sDpN}rvb5x(HP7eK!J<wiD&uOC!
zab2<z$}Z^G2kA>UXh!;H7Vv}rT;Xg8-)WyE{es7`516@nTDSGZZRA<bp7T(KzOjMP
z1B@Q{j`na#w);G6#O2-MQ?Bb=a$V;hBThKJufdml|CRChI>AP)S#BcM4EzqvJsYgY
zut&PEe#EzeQ}7Dbqqj`KpF%9*e-mcK6lP*y_(J)kD87el5bKd-!HDDzXwjwF=DyuW
zwGt<Bl5uct#>#);(CXAUt@;^PN4^AC#O>vV4_S?}BiCY!RNP8*9JXj;v5u7&Y7fxl
z_T_~g!GY56hBv@#i{+29k^RyJK0dS#8*;7J)8=IzxN3kIAKr#+fiIo-rTNQP^R{9)
zC>wRvL}(Y;89&PXtoP-_eIRdq2(FLFZjT*XXMsnlA6h6r>CB5E#10NZHX4eZdmw#5
zE*dR4rpG9q(H48qG={0$KisVMkaM7fb>(XOp768|&*J;qn|W@d*9un205-a<=9AW`
z$Y^M>|J9?+fY8tgb?(FFEZ&VgN8aNBxyNp^>gA_UY+dwqZ~Z6GrM|m^H7G*tS@iXy
zdgVe3NpHh{tatCi+gthO=g29u@elb;U2!e>q@Tjiyp(5>1MFdDLTKIt8|6<heqcS!
zeiQh65P2dK`2%aiOs%PYevdnSAJVXYhR%>0Kn&@5;Hp=H@Yw;LG``@o7(6d9z)}D#
zWtrhT^(}h8ja}BtJ$eB#a+GbwC-+ri&J6Rr6~9~N$-W2Yf~)4fSC49E{;BWCVaRFc
z;hT~Dy+1rfF*rjTz6PDEe^0Omwe~>XQcQlL&mSpoD=-XXEwb7FD_ln<0}Mw$=lcs1
zZK}QfS$q!-s6Dl-w%m5Rw&|zM(|l~|nS5+B^~8$e`vzS(zw4d?(U{`f+&*N7LQPdC
zIZJ@t!J^MhWQ~yQ#^5P}oc9gJ>-Wq(!Mq=O_yk@oT<r&!g8eG`9Q!IfEeU?7?z7;{
zi8Y~)ztW!Y7G*!H|35gNgIGY_t4`rDnRY%z9+GSnx;?m2bK?Z@@pFJFLVKIA@n8>|
zISzVS0v#F21-;A!(ZR@}W<qxFNqLcS;FMn;8c_U??lq@1hZ&!YR}y{uS)yO+QyRGn
z)ql<B2z~pN$}FO8`AnH#UUY<P-&J{{J<+1*P-p*$21Sc54VLiT+pK-da*&V7r&8%B
zE}yx&iTp^0T!++Gy=-x?y@Yrs-;gVhE5=ImM0Kie)v3B&`c}PRVhBawS5x-}eBy__
zzJ`l{(<d0kN01jC9>d((Obkur!35m!geJ<svpPO}j6LMUxIBFoI`_Du`dZ>fz<*;j
z+wRE6Z_!Fj)cKT69#hd|lrfDm7etfDn$BF%m_EpO-a>itu|3Qu=5xn>@D`%}J<AL0
zH6GN<Glw5EX41yU-ey8e&q;B45}MqK4_Dv+6ZL4EZ2Dx7Wkd7g<5ZM@2mEC?JkHy9
zR65U)iQ}<9ta18I<Lc5vNO7=<@efEYXAHyW`c66OPo{&>)aBQB1Ir}-7tG5~=AY)x
z4lO``KLSpDAEay{ZL2-;6s@rpACXglGAeuGgV+Wa4*OWlp~+``lk)VP$~3mc;`G`U
z8}IUL;cXl^6RtG>H73H9eApVt&<EI(61Yi*UAc2zm{hm>ZUW!A&)sLjA3S?7zs0ie
z`}q~T!oB+L!dF6>?87(YT}GKj3p?#VpO+iXlxhA*{+`y+(81pz(<naOl@nU{?td!N
zNIv*HeCL*H3TQK&kh%UAxrTU?)9}8@xBoZg8o_>c_^pP$Q_-bH81}LD7)4&Uju36{
z8G((NG21&8p4s=BQ4#pd8M0%!CHq1{S`y6P|G$9a_`Z&0nf5e(kw;F;jjYMO1`-ai
z9;f8)D*{&uJn!|Mmz&tHkjs7r$&jbzUBMdz?mxp%T)OxNVD5nC&x-4<|2?@^wk_!y
z+2s8&T;;^-0v9<)tOm&%0kf>8&@8Xf+{hsgtB9)>--ONDA^AF+e5G5F>9Wa<yIjBN
zc4Ij)z|zr>p&A1Nu)(NK&KXwua_XEy9obx}Gl)G&^{quO`+6vRc?s8NnP0!_FE6}x
zSJ->&Pnhoq-EUQ{6kWqly@gyQN%bbnz`|KPj)hzW&R%3s?hs`CA;d#C`;n1v$9soV
z#qD#wcCtq(H;SAQeY2orANfS0KQHKr4oj(zZsM2mif-k%FTcO!mo>tbHTIx~Iev}u
z_!&3RvZBU!`Z}>p4ZD$7*^pK**olpG_UuMRz)L<YXbh9nr}TJ1W5qC&7q`cTic6Gh
z(yKEU;(359a{O$0mH5?9(WNeI&%@r<xD4A(1!eNVp+ziEq4wgl{snszOH7#{bsA&F
z29H}#J5gc^ql2v_&G-eQqdnCfJ&1oQ!KcW28|~SvzL}W4=J}>$GW#X9cj{B-%Pe9A
zn}_kuI8Sx+W4-H3dH3mKed<elnto3M+vKf*D*3r8km>S~L8H)t`lLNn(H2kj1Ykk7
z_^Dz1;n{5#HktOmcH>aKy@_^@_e2)Q4s!gfo@$$Cg*^KfR|Gg!kM?6JM*7e9z+bg5
z9a@A27GPH*hP_}3d#$G_k4Q7+v+&8~_cRB;O*~gl_77_+@HeWCY+^Vkd#xSi#@D90
z%KVizOU!vys{5Tpy`|7wNOCECsDlO-pQ=3Re%6-=xeI)01rJ2nbK;KAF=A8wz^gHQ
zQga4a92u}@!Ki3v0kk{>JC-R9$bV^w4ZfWC8T{GU@5gK13K1XOA^ES!Q!N=Hn{~~i
zt!3C46(>F#8xwx{T=fed@qz=~Po|7)zAZC+=*g0ytlU&^ueP7s;;%}^#Vl~4zKh?z
zJr~@8vv(aI9(s6E?2-EE^bwiLqCcDISER4jZhQg!@*Onf_}$|B%FEB(S6+&JG3M>{
zg?52RHu}<xDfNEj&PY#WEo?+X$P>KTqjNu?U*@eP*<%&<32+&OKJ`41co(7XL;f0b
z%ByTUbLd{m$;Kd>DrH<m1I~CrOTt+P?}WFx#3bAJu(zo^{pn!cZG~4p$9)C!r+Ef)
z{%Yj9GEen0<npocl{>OI_iwTGhVf4bk993EXO2eqq~;A)T?u^M2fmzn#`(mWXGeMG
z*gBGMe5cCOuD`q4ps|jwVt)tlX{<Hw#H!5iMGQhE<<R?@6#E>VW*Ub~!FH3an0Vr%
zrh&Ka=z+-bA<-oD;p27szxiYAugIh7zs<Xa)PtVXD0yx1(bxnBFWisd9(k-$ewZw;
zXPR>V7ebf8H2f`^KZj%E&$E@c&J2h`Qvv2y7Vn*Rvg?6|5|g%|aK(>?Mq9kq!ucf$
z+Ij-oY5~^AX`^fZPtzFq2fp<Qn#xdIWk=c6djI^z8~>62vzUuPcV8%UCYyt6GuQgD
z9KTlu7ybXF%zu7$z#d+0Lc^;IZziU8+h?mo#7SODJ-+Q(Rga_<Hf}<vq3p~H!3+8M
zo!E@{*+j}q6VKh+3ZLII415mr)PK8=d5S$k=*9MuR%kGDB)JZT71r+=hU|*|>gd|&
zeHGO0f!`Kr-vwp&kx#Z6y3^UlEyKL^L#U@2ns24QEyIfHb<S~!_%zXV3+;vY9vj?K
zg3FK#MzFbghD#qWXtYjE%`0FpnTPk{`!0+vz$m++{jbQ6)FoTC;L|z~O7k@CgP#c2
z;E6=eq$C<ty_uEPf@bDUff+Kc^l_^(46R7M?K)n1{%4+l5e%70FsNO@AsE!Y@+_o6
z$Emb0`=8=z#9M?P`4pziy=`M_f95IYC#;)9E=$fzkX;fxB{;Mjr_3F(@oixE8TG&~
zpo38H8p`3bDBi%c<h9-PuWBEZ*7A7Fd<r=xQ+Gx(3pyg`aVN418zb5Lzb2(VLSBqW
zzG1&Tzu03Vm-0K+$o}=JZ0`G5*IRD}Hs<K3gX1(9-7Q-!elzAyY&W|3Fmg`#|2(wZ
zYZfTh$^vfFYx7X(dcnZAYlj+i-=KLlug{5s#y&${o%j{t{urG&V%gY!hvohiIrZZi
z&<nCdM7#$&!8V57a!A8;eBQ__PL6@K6XSlWM%HCVZUBFg<=*O(*`CJXJ1(zs;_C5z
zv!-->I)j`tHw+vVm2Zyr4zoTC;upJ@&PQwdGx<P|f!jTIUtb@||51~@=!HWki;z8U
zFdg)xjb|(Cp4fOOh@E*@cuh^HXJO-o-ju3Hf2(ob?;oiNQ4jM3ym^-VFwV#2t1b>u
zcQ0sJ>sk!kc3toGyy1-faK>JF{UVocS&}*L@{Pf?^t|w7Gcn>Blp6&O!`jG|;b%?s
z2Uru~hjjzY`UCuSEb>;%o)Ni)_HMx*2cL|@YKu$Y{W`BQ0<X(we`8KR`}o=%GxH(~
zK0$0(h<SiryfM;W>s~i>Z(nt5nUC0)Q1RXude-m14cP`*_r5T#-tWa0c$>4nE%=C>
z7Oe5eZj!Z(cyePoYsZ}<&CJc%3PRmDuMnH0$=O^J9Bw9_gm;u*hMf(Y<)`@jqVT<N
z(s~sd#om!@GXcHZS=)m61?8L7c#MX(V%u0C7^n2KkK?nS8J$5cdHUM1D%2P~58a#k
zni)T@dAxWa@M?|Q4<6Q1)=wQ81MC|8uw{^=n0)AK9&PeGgs%SS&kkuk?DzhBC|I`t
zQ0QTsSi|B~=Hyd53QhlEnoHF2RA{6bPr2f##_Q1Mc||5NkOjYUY3W*M=dkzsdf7I{
znf^NtBNz7fw7+?;mmJ+@SlbV<*$uFN)I<)Ooim}Ur`X5wlxJ9#ax&GWyy(!s^mm(k
z(b~1F6{2<KRPnkz<c<Cbd4pf(P^0!$1l@IDx8{G+Ixtr9Mk;=hGtXn}YQqygj}A5C
zJ8lN2$b7=3aJrfP3zy2LQHR~k%v-uq{q+r*_JGcR(Ejb;-gMJ0!8?HeWiP6`*ldW5
zxU$}%OX?N9LHmufc^@X<A7@ET7!*LZVca%D2ZoFNa`Uly&wR7LkuT1<mu*wLA>@zb
zA>$U8;Dc_)ZXNS@ZZBXDNd!93ynxPcuV5dy*$Q2e)568oUfTW^_}UBnVdzqJNDEmN
z8eOuPn2OD;>t?v=pKl&MWMR|of!#6Ai$>-F=j2d!T3)_#>_N93=#@H$@%>ETrd_}G
z;BYV6ihPwmlUL4d_j1}4kJ5c}c46a4*|QaYge^5v1ixWD6QB4Ly;U@6b5_<dY$G@0
zZ`2$JgO7aXF1DYUn$LUDIkLbZ^Rh8=v+~_~s|t|WWheU{`oi84WSI|R<1c5gwD9zf
z#vwn>4?3Wc1B}UW>L1QKKkq*E4$i%aU(K87ZGG#bj5+Y#a6C1=KHB1A&$G9BGV?+-
zkZ(d?%U^1}lAo?$?<>vw2Go;Vy}EhdkorRED{$!pooX#QM$0O@F}kRrF<&|<^SBv!
zqp$1UGe5w6l>V}>A-4m(ZElH;A17Fu+oHA7<=<~Q@NCce59g5|{n=^t((_z?=7+~H
z&hvBsg#HS@RJk7)#LFoTK8*h%3a)s^-qpG$_++DK@gfVE&oXUm|AYNpQ{yt9^NzBj
z$xYxz<0@Vw+n?|!8mRkdU*121Q_Zy_yW=)S$%DdOIluRlYu@EoD&K*eFgexq3%2c>
zDA`QoFF9Im_0v7L7CyzZ)Ymp*F~p}z<(q`RXR;PL^b8%A(#JaBXaY9JW&sQ)8gt~p
zZqy~5oTdlr6+J}3`++q*>#cC0$_GsxSTn8Oq?++>Lg&de6~+$D*cShIU+4L%f?v<f
z-hFxcy@)nM_c7M)PwCgOZnZ<d!87pzqxQka$s+oE1AGCxz78Gr4cgKCj5_nvy1fqH
zjrepxw$ZPW&u<1k)tC4#yRb2uVkS1zC-GGEuK*mqM_<DO;03L*33aq_?1R`Da0mX7
z;01^GP1G2rQ0C@C=s3(3JF#w*{+2VDd7hbe{=$m)V>3VfS-UguBJgJ0N1mo6-nE%$
zTI*NQu0igIt`;xpIo6zDJscq(8sBdenPD37Jq{KPyl_U@9%qzw=l<6w!k_84Z2Ir>
zoyH}?d~o<1aUX8EaViH6{7vz3eUiF`Bdu3Q{xu$762@ks@*@*vBk#q_K0?_j--5UG
z@CovUnA{N0{tDdsK4S45@9p2g3;DgDcfrJdp60IW1N;y@;k^p35LcP$)Dvd?6Y})d
z&sL}1iA|re{~|tg8@iywhdzppU)mIN_|UVotM6R?-wHm655#}ni}M7$=)k@4-S)wE
z+n0S*{pyFaZaK2%YS#1qX`>>e9XZq4hZ;o&-1`_ZAhPGO{=yHu3%<yj*mPtSey&?)
z)IXEU*+tm9jO;w<Hp;bl6j^#Ve4{5aM#ubg?3bwxBf-)4q4|aZLnelMhl*p%Ge+&N
z#kb&{vIO4`@yTT9B1Y-a8K%0bEKTQyVmAmii7(fo-<B@9tzBn;ddQO?Ic^_5mu<GG
z-o$y1`&p|MD__FA*v}dz`>T)kLaFgN-kUY%_-OWdGp_2#F>ICX=+sBCL!DgYscu1!
z);iyUO*V`5IFij?dhj4$Sx0|Q^+~>K$5(O!p4VE2Eoi>M|A>EOIlpDl8a58uL*`2E
z<DT=DrbX^HjgKSuL|0G2zmNYFzIfuWd@khf>3`Lz!@Dfv(+4*kZ}IScV8f@G<jlZc
z8ba5CCMNtlxqmJAZ$*FhHPqUTkN0IxQ<uJ1UHZ1Jo873o_Ivw`irg(YM7zY<?K1Vp
zTR2A;AI`qx;0qma{~~lQd^M{F#_J8}+|BuR<1-n+D}NY$%4EGLl+R3k&@=j~ahZo-
zPyLCA4}lZm3fZNxWI}AU@LB8iErCxp&N>ns|0Bll1aU;jl1<ppG7j%bVf=?TJjIy)
zI6JLc`%2|=%Ia&^XZ5Oh5q-4-+hF4?;9y^D_2eQ`U1A2${}uZ)Y97pEzdYys#bV<_
z58U5wb3QckbJK}@^ymlj+QY<mcg(-Bo;4-Ioog+u%c9dV6F(bU>))vd$uSH)9iDL=
zw0}Lce*?7N88;hAy=oNu+ZPx+RP2Axe&95H{(J3EmqyuXJpN|-Kg;7=auU1B?f8}U
zE9cv;E9yme-}^8&^Y#z#pE#IvT#s$(i(htdgAJaV!PE3~bZzis_cjwXmS(9nqlDNY
z=zgXT{i1|*ypHp{d}&*TR)##oifQL0<A{wrHxn8D75If@3q!vQak$3Zx^hu(Y+uG~
zD8(=7m#>i6cx+dbGZX%YrxSiueXqSn%!Q5@IhQD$YNN}?$FRA`G=4lD-L}YX6dtuN
z%Aw~3T?C*3(LoeC5Pb-C(ZgKM`O|*;DE>0dsn+H4ZOUJ79GcX3;=M0(E}Z(|wzr@5
znrLr7?Y-C?`h)-5$WI2@!L|1_!yB@QzY#p&7rk|%QMI4eM*B%P$`_6__mXgATklO&
zpX=H)Ct~X-m-LPG_p837GQng2o>$QYe{WDGy4+LkPmJ9}aur6s*VMCj=^En?Ut>7)
z&%$0ENCPjd6&lwnzL|Z~4~wVVv|*ud>2qr;PnPbg^!a-FjBlFuwALMtZE)nEq;Yzh
zZ<71H1zU~!eO;I5vw%a-r*?VXyvA;H@nm;-w<QUOlX)i|eDC~D-=Ani{+~IlPwTKJ
zoJyQ)@I3UT{4d0(G#O&M_N-FwGN0prQq0rQTT+NC^5D<LM}d!loXWX>A-^7LUmp8i
z@dqjA&OqWSI%A*2hvf@Gj&71Y@*j}PWslbX|M4~K2-sYY-f~6#v2m<J*sx38d@k60
z<)?6CpEolHPU)<KFYpz0jgL}Hp5PbUf_GdJ4&3ugT4YP<=^GWL-#-SP7Gy}-0$Y1d
z8KtwFL=SG+!`Lw7r)kC}(~_DpDqH1Q>lMd#7`?T%=M~O3_0Bh&>dm0|-lN}r{j=46
z$FFDDEAOcm{sXLC`6jbHKa{x<IlZj{+o5}Ag5GP-+8)-GGxshLhYx=-k-pWQle@Ri
z!WXx8>C#;`aq>Zr=?IYD&VX<1kyQcFFKfyN*!hCU%?_V%_=j1a#XH6H#`jab^P+rQ
zdma0iS)p+XgmS9)uJYFJnPwV4djef<RT26JaRSq@5psslHu09EIqN4cQ5c!1)qS3b
zi?!g(ilwXI9c^Z`fEO>{d9k}p!S2#Z4t#WECujH%=ay}hys?rq(xS*ztxp!!`weR_
zb^dT}_D1CaSKNbaFn`SWZ1ubRAL5%u%wNSGOGj0?!Zb5|5qsD*Cc;HC@eBWee@ilR
z^H=T0JKz(lE3CRGqxUKOIgf{DdM|rk9RF|CTM2w>4CG6jmZ(Q{xcks#uh;)aGR{1&
z<}}SD@~=w&QqDMc{Q5I~?4@46;o+sbG*%3XGj{iS1~_{jmNISz-86XneeHhsNma7P
zd>rL8x74qZ30U4mrludKW3=5f`ZSInE_l@njpq}Lqi9#-M?D#bo&FDKcobajbN(OH
zFb>=YZ=cW}rcBrI6^;*s<3&BpbnTncxV_1@vdyZm7IYbaE?s&ZPyev7tnUwf9%a7V
zNB`8%A9@B>Ipe~*P(&Z$9TP&gFKQ1m&WF=ut7~r`$DaFvP9OiudyU)0%zcfIpYP-Q
z<+eIBD_Q3o!0?F!&%lON{I7DKIxxLeU#h;d2gQMjx%-!X$XCFGd_cSzbCLQ2rr%g_
zglrpXS_O{lr2i)7^XW0>{#{^8#>q3tyW+p>iFf##=D%BB^i#wdSkAh>9oV-ZzcL=h
zk`n@2%Zar;9p{;_e{Y5VXH#DXuoFu+K<BHtI)dO2Nlyq}fIs2<YEyT9^(@*yw&_fs
zu6EtawLi=DEO{Im<KVCGK`A!^LdQ<^Uw-ECW<ZtWXJ#Lc_T9@qjn9tQC68pd4B_Hy
ze&WjDFWT?2+Sya1{JiHi?B=<jbt2@!&cpc~0qV~omNLq_t+y|353y$^$ex)xGk0PR
zv6RcWpEGyX;&tq`seQsMs3iA?!Kaz;wc3n>7knPb;8znnBYuP3qC@RWxDwkQ{7Q7=
z<~>kcoV)i$aPw{@G=%KOo+5B+`>-_<(<534dhEuC*PrLU3*TP4G4pX^x0ySt*R8XS
zvTNZd0jvE@^;`7OCqWa*<uqSZr!m9E!gm|%7>mxj1LP6utn+=!+SH?cwPD6sFeShL
zEzjjU3wYb#)Sgwfsqv1$Z~jW&8LdYKf1g{wd==`O&h&BVE%{v#+IHZArUloz%9*p2
z6HU7Gqw|m4{H2K;pXfjy?Fn=8ttqEzCbksi!yM@KR*9apUN@&2*?5|iFSBkXdHs+N
zufoPCd={V|zQ$PE%=Jw6Pr?5>z~ki1{qcM<5%{XxevrLc?(?;Z%U}+b4>FTfo^lf+
zjMG|T-|5F>^D=wfjdgnjo5<mAXVzIqon7mSpqHKPd)bqN)E~rmAX+O(><4W@j!c$C
zENqiq^QyXMI0;6<rTUX$v!QeJ9w%155IlrA!!lZKzXsfGW<^C!BttS0YZ>vhe&yJu
zU-{t0rcY~6#3l&8-(auM<_mNl5HaA)*8t}wXdU$<OCT$d8`o2%n8a-D@fV&rKWI5)
zqFg+)n0L*oo#*2SC+_oSn2(vS#>c?sTg`KwkEQr$_qpVg5@4GLK3}gi?LlIVwRa%M
zxae2?t^*FWp9TCjG#X-VfX9q~fyR~VJVqY}9gl6uB=?c%qHg7k<KL5RNqg5${cQCh
zbo%dl237r%@`6G8T!k~?OJx=bXW&Tml@BZ-U}<)6=xOt;SXR?a{eHzmgEv1h80`50
zZ&t%=)T4eB(3a{|48$gQMc_niy`OQ8vKL!>JVqzMFq8WL@aTK(2{F$9rlFSq*Wyps
zTy@tv#coPIZjHr0sSM>;&x_}rUhtHsw&q@FT=U(Xt1f-Z$BQo0)>()4rju_Se*Fz>
zi`suF{v2iwY2F><+MYCzB3E?Iqu0C4qq?)uyxnE~)SYGigrV!#|AzTv_r<OO9g6;3
z+S|>zKZ{+}StFs%E1^sFdvPY$mP5#kRX*}wxP8}e5c;&SQ);Xt(A?G}I(>%qqAPuB
z+>*c7ce1xE&k5I*8IvbkJ;B%{)2IzCh&DrszU!Mh))~>M;B6+yf}NmKjge^8jkk7v
z-S~^JF|n@1L@SPO%85JiKVi3{gKo$}MieeC1Q%|->^naL53Sym2H`+`hK|OoAL_66
zo|bCwX}8b!*PVBD@T4!BkE_lxA47?Lw%{{T+d*<q)Y6xAoSU*PDgQv%KC3<HPMXt?
z^1JCXQ@@Gw|4wc#&D~?n-7s_aYU<Uz{0Dft#r(M6V^#ed<pp~wu_CJHzqr3C>HUp*
zPya>#*!Y~B5b=CXIzuu}|Jb40%9y|8BqZ;k)#l-Ucb|vWdTf2fM)YrZ8(H!z_@X5v
z2EkJ;^FX;<G?sDs;B7}vybpOtHYc4gNgP8%3wqI}xf3Sc&=Om1&Ao3@3p&Lf-bcyH
zmAsaUHne_rt#1|WKr6+spNy^V`p%`%nAh4_sPn%a{W>|$Qs=9XpM>$3PGK=ev@U)~
z9F3h=7gfK;OZ2MzXmwvQpP}gqp|i~ADBp=!)-ryzpIPWrq2gtOOb3RC0js*qbID&W
z?E3AxX4bK0o~@0|jE!IoW6u#zPOq8BEy-)<W^B9e-XU<~>~nJ0O4VzU*71<m%A!ub
zA4R6nxvDM5*e<^}@cR(_zMOTyX1xjWeUx=tIP>F!u4BzqOo!Hv7QS!Q_f>X%@|qhO
zB>Sef&4yO(#JUkCc7~kB6UZS%98l*Nbj6ReHYUc$l}}38)3z+*%<t+LgRW)6#4xGs
zkC_Wy`}s5Aj6P{g4s252LVWM`S!*2iH>$4=FB9&M#3tz8kL@+Nzb_{GEBaC&Rgc?u
z3wfi0zPtUaU>-xO)v}Y7@vA+K`hAt(y|<oyt;24)qLR3#e~IT+{=&5`nXcUb<MQQM
z=0!s0674iIKZFO(kDUL({D>eghR!lS{Lp0Ac@PFqXQO{RY5mlE`yyJm*mHfF){Ek_
zu5lKx6g?IsXqmBDsWGlg8XL)i%EMjJ10IkVXG3gZ2;QxGXnlOVu1?y%MD?w*Ns|&<
zS<6_TwLa)Ml&H^!#?5i<iDlkm*N)fcb6{&_uAE1Gt-p)cSMKqhy*}tXnBY+%*6$E|
zBiyy$$uG*jMZI_PD_BWqGrIV7->pUdjKE*u<9CZk)h=6hdF^N3J70wU=*uVMz?9GP
z?%Ic~`U^M<&MA{+PW|Lz>lMjkl0`+Y?Ef9FxGt^PT6ZdWCRs8W_ss|C8+;^=t8?HU
z9_ixBpwrfU6312Wlh5Pox2li%8XwDZ;A&{+ScX}r{KOsv!F>e3UDvVv8TGZC#{D_Q
z@`6s>Yu&43ue5OOkJIJKP?m9QCErZoU?;!AkL+*BxTvMAD7eTM4Z{CjKI8CKrw-_Y
zz0<<?6?`ka?&bGrHg>r=%1;zp8Mn3ko3oZ{eU&^b8CGkqyRK{P)q1P-UF+|HXnftZ
zux}-=>sr&j%y+Hpn)k$K#C^%kkI%2|aT}1k78BEuv=+zTX>GPy!{f3*{F%#tWM2`i
zRxA2MNc+I-4)MvY;DP-C&i`|v>m2w{%2Jy>YQ$y3Z%w7$QI6bRK{?rLvwX-L=*`$_
zUajB?ag_zLs{@e>s!cGndJ8)E4}SjH>a)Mks?GwwN6z^^Q0?LUL+5<&C(m4{_&(kz
z>m&H4kuj`XXn%ERFYtCVV@jbDY*odU9~(P#V$rXPhmk+%cf~T~8TuT0G_I>Kt{JYr
z;;FRJQ{wsD&h<_30+S(JyWd!k+x4<(`@vThxw|~z2-~6)$5~Swhsi_xf@K*ncz|J9
z5)9E3vGJ-?_84d)_tf(EH=^Ut@%y(V{Y$!&r$IJ+d`7FI*zc7$CP?4k{}Zv#{0jEc
zM1M<Zi`b(MBV5quOyWR7<RFjtAx<a4r#IxSo<fY5=%g~7hA+f&>@(8!GN;6S0hU=&
zd{MX0R*Sa>!0(nJvN75nLE5@^FMOmM|I=QGv+07g70ht%>+$`ap%(&QW2qTA5!@Gx
zo?QC;2L18#EZH|893<P9B~Kc@4|*2o6=-k#_@WN&hn{t%-SO12;X4CbH^6ZLYgh;y
z0&}S?1Z@jmwbu;ZuoXPz$4?OCn*l!V=}#H&n1|T5LQQv6f=6s#*1bbBN<GLR*5bTE
zov%q-rF>IJ8-Dh;c!<G9R+^Ac9jXi5HYVfM)_d}E`h8uV^DWQ&**uRj&iZ~4--{=Z
zv(vEy{|32GaJlsj?)}+dKk(VKflaex7vDt~`<=Z$TP?eq=7C^77p%?T!?5lo!z#PB
zch@QMna7{IFkG8}p*MCA!O%_{P8@xrFNcz7Gd@1Q;4BXI)L}<W*6}q?;lE*=4Cg{=
zoUpHUjuZL*_T-z!`xvX%VdyOR_)n9@OfeAdd50Ri81sg8^QXeW5pu|%3lCY0iNDL3
zxv`6`9vn;>x32H(q_LB4AbIRQlPv`O><5XlYXENtD3d&Hj$cPUH|TKBIMY~48SUZT
zGtPGQ?EZfp$LglfkK>;b@VMjn=sCtQw$<!Rh3<=>@%R~;aanaXd_?C{;@52Qc*q<0
zv+ouAh-)qC^~^%z@~exMX0ItbdF!gOrOT$3n-Lexe%v?Aa}{x&#K>1J^$e>W-s}3<
z3;w<_Z|G~y#Km~2=c4ZMGv8I`qr+mWojHu&DBEwc4#oQ7$d$n6=ufe-bKCz5ks%G&
zm1&)ItF60+x%&4ee0rYTTRHn&^hw-0wi?AB;``;h*}&12=eWFAzbf<M|KR-ivIKm4
zspIMdOv&}T@3-;Zg)Kj+ocN>4s1Jhw`9Nnm!8ZO&;1_?dq?|K19lx%(VHf@{tpz^-
z&!xyy`Rw%%@qe;!r`&_xx{I$T8E*Ig)BHK%GiDEdN90*kT|*mAj3xAKO#f-|y5eh&
zVck8M;3M*X$o5fyoY5D3y_}q}FY-TmIh{RX*YbZM_7SbK5nwDDU{7lKjGQ`#c;}Pe
zgIDoP>xd(hCwxqW#74?zrFQhrh4pN|Uif*I@l;)i+?d_VjPJ(pKKR-9$Ya|Bcod6O
zVp7^hp-afVwH$p`-#knFqskK3-cWvzwZI^El!Hg*_J7u-?kIy_mXm+A6uzeXu$;>_
zv&9(fV#u0&tNaSHv3UgJHo?iyNp8hvruO#H&bFkwl@|v)+GH<z+h&s|KFqt?9L{*a
zt{0|0!!s}W63cnEAAD^kzPOBMb9t6|A?0{x$Z4yXj!M&g80XmcEXR-agmA|hq3YjA
zY{p-NL%|fHUxt2V(yz7jQ~jE!_;LCL{fw_=jGBS9793R?YX|r*u4Rm_<yk^@9Iv*1
zg&kuPW!6!~Pnk`WxtM1vqjBCszl7_2>ixLOdee0beekJT=w}%+SPNq@3;NL7d<8JV
z>t}8v_w8DK^O1Ss?K78?^UiCK18G<7<rvORr%jx-GiO5woMX_o9eBS87s)WhyeasP
z;&~5`-qPRkLFzowq69xZJR_st;iZqod1*_wsn!_{JwA~9)J{$YldBwUPX0dLJ$Hb8
zZur4$zIXCYJr<YgPVc><56Xqe+Kex}82jH0_Sd91d=j}gL+kVFvpV^uJ3r-{jxF~)
zxyog8cX_Y)ZgXFsV}FR!epV>d^mB6eD^G2-C>>p%GmLrm2G1h+jGbqcYvRme@eu8W
z@i0%oXNFs6OW!GH@bk6cmbR<qvv&RVhllw(j%4~e9#4Wb8L#gDv7&A}KY&NL_-F(6
zQx6V7ChkToBXZLwWL$W;O$<A83ps4gA)E7l9tTev<I^y0I&+PQI(E8m)>FTOyCC03
z^4LGz-EREwS@Jm%W1H!}^ALOJi3wDErO(N!7-=CU_*87dRCwwE^uWDdUvA4Tt9sTL
z&d0D)iJR}~oWZg0Qcr!$2x3dd`RYFyO?)Zwaj|`7$rFsPeIk~(4_t_U8*&CCpY0${
z?%)rw&*^+G^p>jNyx=6+F8s{z7GxluDgMD|V)4ci8%ZoyfcffYo=4g#qx}cS9<pzJ
zv>e!fm%_O9ZrGbm&bMq|{fDDd>RX5lnt+V`@i_XqJZ)@ScBm1&6^E}d8=HYy@g{9Q
z_tgKM7@h;*TXy2T+2F!U?xRG0r;mX{F;1+X#apai)1u@L(K>nn+WHV%v;Qb(iCtQ#
z7@FK><QqRYiO_B&TfXL=RnZZidiHTZ-}qHHS1tl9AJT4s{x>57?I#|F{BTY#WX4u`
zY$u?%O-9ag)+ayhJ^_87D8&v>-|^KsxdHV)fV`?bq!xL@^ShhIfMqxOyOaBmc)n0~
zvm~~gi!qJl5no{$^j`KYLzjZVnC?4FIx&Ej{A!`%MYN$`_(<bDU&4Q4%gs*3FS&H)
z`jVY_g^dZlqA5UK*mj-#KsM`y_A&;<ulmbYmXce^`z&A&kT2|A&eU-0>gtaz;2Zg4
zY15(EWFD2pdgZQpiW5n$dlt4hi#9e;w`9_nz@Iz6Jn4#cwC4Yc`Qo`TP*ph6Ua|$e
zd#>gGUIiVqu+<Yk)gWHEjB}X^DC02}bRK_}h~HSjSgnwZ!8)*_tS$$;KsLGXa;gjI
z*JE#Xw&%9%{wn|NsR#RzhuB-)F+YQtjLx}!tgIh7y{uekp5Gmx=Mnavl^S0zYs37x
z@`KOlTfdvQ?8B^^?cUVfR`w2ELcA%@I-=ldH!-)wc%V0Xb2X+%Z%Kzo`-oBEtc+sC
zJQm^)vz(a6pvNo;qC-Ub^d86mjedNv;wdKey}Z(H_7XFs+l;J8MFwX@AsSe@!ER>B
z;c{>N{jBHsd>5=mM%Ybmfz)xV(cs*quO7M&I9su;m2y^4YZ2!fZ)LtS@3p^1_I}P-
zVQ(tuCNVa3DezZp`y0p&@Dx{yAKixiX`HXpn8p723ETaPwU3o^0FR>wF1ZPt!<-&w
zNhvZ!od+3f#tp0oH`YTx@%`a<pULw!BZHiJP;tT2Ipe4^KXWN(x^?z#*x1rOX0rO*
zwV%h}HK|49f`|9G<L9<%;Q!6g7X6*3KF0IW5+_Mt_w+Q4x2k{SeO}Anc#mCC{LHWY
zizkq4d{0liaXfut4l8HDk~xFSlHX8|>Q$Zb|NGLf^!iimeRJ0{*(hvcoTM{pZPWSP
zcfwn=o{ASrwhhS^&c1f*akE7F?svy=?gV@{zIMuv6PHJ|Zpx=BU!7=pAMt<izK*@C
zt@?faQ${rpQygUKsO$N@86LQIbpg+>7}b(Gb(Hi*?ax&l<6iU}=ldDNUB%_$+<olp
z+uPq;-_kQ}RCEOAXs8bOoa{Z4iT4gJswd7J8n}wO-g$95b-B3J?}gw`@_(60*-<{y
z9K4RPE;1=qCEEjw#V<<PFJ5~xb-^X@l?u)RsSRg1`(S;8*rx!!ml7*IJKan!ztJp4
zCwJ(%96VFkWb>VyQ3d+VFnkvrZYJB>BcmJ%*eCRB4`4oAY^oLKulX;&U%(}MmBvQT
z)Nl1!w$K>oQYf#o&QP@zdj=(IIP*8v<E+#AZmnm~j(l?MU&nkYMb1B#?cq#v4{^4f
ztvlL74i@ED_H?MsE6{A1vvy3c^D{E*4EfQ_%*~wtMLoqw275Y=@c-fdo{n0NHQxd^
z<e43>xwDJ;_7rDo^+z^&0GeCt8S0$H^&5C->92!}TZy+SOtqJ2e?fr0M(9H!zXA5x
z7jnG@y@rq@XTYPM;!G0p?H0<&*Xz>ulu)SnMfNh7Q?ZHa*Wvz!<R&icIF?;Ve+tQO
zP)I)F!j1xWKBk_T|4jTGoPj&Vc*WyW-8%gAuWLP$g>BY77Z;m3M^tuc^<TJf@hBV$
ze`A<0@%%y-dAT)4-g=FV;^gea_$a<fXBHjfj9=Lnojf?mD~gSak6WDYx@*lMk0Dow
z@GuZOC};JchRjcin`2FvEmARY$_duOd(AoH&3``%AC*j?vPX~+bbf3ExvCQ{XYwhF
zwMe-kJ{Nn0Y$KXGQPR1dNQMe<$qvv8Ur!tA#De}l(`WzG)eWsgtXzEmyO}0mx5g_@
zzwtRQe&WP_JG>;G$Fme!s2Tahu{)wSWTGd`g&t?&ABfYyfQI(3eztlXd}tZ_ZQ0jb
zr5qr(^5>xwhUo{s1o_8zmZQtq$TW&KlI~Z*JM7g5<9d|xcMl*gHPn>G_vJmzL49jS
z;`Inu6`uZ8@=Ju7^M2`(&<8Q3lf=*BcEWfJ0RFV<Mbsm@aL3F!gDOcUR!pqRV`4?p
zU*hKg9DP=N)X@!`^@DYZ9GLwbx^U!~C*$%=w2bjbhZzIy+vqT?NyvNyavhxTjyWe8
zCcXwe`T4Ou`mDybn7YwjI2Takpz#n~l}TeO7*9R8(cv!|pLoosA!d{F!xyF0ql?4;
zy$x#~wcEeyGwXw_)yKhOo#G4lR+s%`Jbq<AbcvmdV~x##I`|vwRL>YXa4+z@7a2_Y
zcAC|#>O%J3rdammP1qrRgKm3H9O4J)+~>UAiN9bUP?P*de%euPGWXkZuQ{j~r*AUP
zl)GtMIIC(1d;5>Y9%~Zcl)iYBnB(K<AJKf%(GM7FV`jm%$T7>b@6+SmA^I-CAM-ML
zi{_Yo;NODwn2Y>BJl6pKWa=z4rs_NFGrOGl)LO4u@Em6b*FitEo}q19ke5CHKU2|l
z_Ct$?bLfq11nrz($)3ssX4sB=YjE4e{NK#`EbI|`saNOuw$Ww*IyHP!y7Yn|yi0pf
zjn_23aXhv@id-Gea`MHuWueCesVmbAZhIG5A;SKd5dK%4i=cdtUgCII?;U+>o9Gl7
zzmT(L3duhZEXu0Vp4%<x@yqZ9r*WSBJ~OgPv1~!cg*iCC6j`4+)o)G;=iFPKs%L=p
zZLR{JHQf$zX4_om7yo-Wt0R=S_gz*w6g_`_1-Mv8pETZ^IBz<@7}xP_2>W<gzqCoL
zUfv>buK9T#{q#SS)}M2QCY#wq#|D{ukq7O@GWdb`HuuvMSGyGWhB5vFxaRP`>^N=6
zn37-6r`MNwnOl@s+4(%XCV<_=+oSD8ayh$nl6+R&OOz@1c-yjNU!lF^w&?$0w=VfU
zU0Ofeue&~L{)h%Ohun2KA!|FiHY8^+V*h-c=f~IT!>px?SWAh^%au=a5$ov#=&MJE
zvBqa=o%f>unE~*n1-9&4&bpwS+VOQ^N{D&DzC1tY&e-fJABwzM;vLZTA~Zxh$QsC)
zj=X`)!I~S(3d}d=n-6G=;xulm-(w%7<T+xNW*!|@NW14=PuDV+wVsL}y0Omgx@zDr
z(u>?WxG&av>h|T<f9zaS&cNeIYr)mX70w!x63?N+ISTFKhXrBu@QY2qf{UdSg^II>
zqr0cuqpY0GL$M>xFNAgi15Cf!i%U1QB1@DGC>W(RO78<ErANh8fhywSHnQH0pM@S4
zWef@j*gXPQWmV1Md0|d?D070?bdM89@4!IJq1G`6hHnNJ7n<`=zt8+KSlP?<_l0#(
zC#(tn{G~Aa|K2cn;{Quw&G~!7n)x^37n@D-88qB04tEyxTW}Woosyv6g0s*s^*Hof
zl%U@-hkmoGig;cI{jwebQ(_+oHtEb9@;E(4-o3=LFU2W*{_jh(gFA8hW%FzJ-y7C`
zov{9`^J~c88|I8on7<6aBmds8UeF2a--=)O|KFE>`**?&en*{aEejPaDd=VW9oMlT
zop8Fi)$f<l1a{lMFMbD{hWo5C!ggeY1P^ogYcE$m@XnuwydwFa2>$9t1}I1`7}Ww_
zjLQeU9;L_!;;#kRW2GaxJeKq0kP)(-ci16&>fKq}UJ)PD|3BM(6+cz_tlK8vga5B!
zY2D+3<r8#$duhqznI?UHDR#JmrTreS##XO)XO@q2mOuG7mEWGIzrj9PvYq<d67_FC
zYyBtB0nf>Ez;m*$v;L(?^`Go_j`|~=<&)t#M|pq9ztP2yAN*VfUWoN_@Z!px$@uY`
zGt2ig={?6R?fW?S3r>G?M)}J=S3dU(%Nu{Yi%;O$PW@Gs-+s>eLv@|-GhSZ~|C!~#
z6#n$C<uB{;h45e2wS4*)_cv76*<Z#B__u#C{?9D`<@gD9;z#2PoqcirXO?&HbMgzu
zH@$0l@bg9G{lU)u#>e;9ls{v9U3+@uG4o1~DPR4=9&bT?&-QzEc}|w^GQW6eR|~#D
z>&O)ioSTrb7hlN%>{tKt$wRwRDbqVq=6Brtj$GOBA$EeGl{&4&^lmfkO~_P?2{zsl
z<kxMEJ=s)laSm{R=kHkyUMA09rMd34Oq~&YnVFfAM*cZ;>Ajo>yv+YjO`#!YVBnpa
zP55^9q}J9{vj3^jq!4@P+p&du0w(iM1$~}=vn0(vM4p_PQ&MhUDV?s?+;}j=8634H
zc(9H$En0_}4O4pAD{Irq-NU}J!gTY~!1#)q9CO{uFlU??{8LkgnDu4Y160Qz!D&+3
zHj{6xf_<#=^W<a_qei{q3ljB`3ldxS%8<G3Cjs-x$_r0+$L92}KRJRfY-6)|=|Zz1
z%k*j3GDf~Le{S8CoVP-~G3<xo{}u25ofl$bNijQP^reEnM8E#@n+NdOw%}8h%|N)j
zgnp#<F&mbdz75X+gFz4WlXK6-rJwkF;qqN<Lc-&R)cxPUV^yK)^OA58JzD#Q`X6!n
zZrZ~1&o=hToc3#18ed_9=cLt8ak5~SaJ~6Rr|&0|^;tMyNWTT+vY~Mp!;Gg3qai1;
zVEhd^g}2b(-HEZQI8^(F1rBxIabUZ>vVwd){`Byl@P|)VAD)920{(E#l$^I~h$U&T
zWaH(&oLG+!bvBIgP6HqPL^B1V4QK}Ym~!|*CsxBF4h^L=RPfH`zK$Gjf?sxgjkEmL
z{sg_OC1>v_&UX_{h#q9inT2hsaD4fpf<b2HXvXp}`d5@=HdKu^>-TYOvHG_8jqgvU
z;ORG-tv+oUy9#6dNp0EZne`V^*B<cV;(>ib4jz<KL3IBVZGeyJf)Buh6=|yDUhRj7
zaet0H2pW$N^w;W)iLZ_5otcLFi?$c-8qsUZs{P*Xxuug##xUBrje26hS_eJ2bY}9*
z%->mkUut1ag1;J#-!k9tR>iuP9}04omvA7O)|neub4H0%_sPz>qfWcTLxZnvzpz)T
zEybq=E>FvS=NI<t5orIy%Wr&LbRQ-*)Agmz!}eO}kIymDaEj&-ICXHF{>ab^>F0~*
zV{=T%c-^Q|G!$jN7ktI6-)5%2M%%?|lYORxM}Yf%pRp%#`@&tunBr$Xu~%LMoKugm
zzl`^OVjf<~h|jlYE{e}L=x@A>hu}qVyx$2OGT%7!tyhEaUAe#ZO~sHNB5zH7G`4~H
z+@$%OWfknYV$zMTsbAQzR|Hl}>4>C;*o%?>ek3*gHMgHrpw-ZO<o{vb{eYZCm7-f{
zbc+9NXf&nm4(6l>8nvNOmFb-e?>T9vFU#3dL%iF92z2004;9OPSP5O%Lc5%s1ntV6
z>uJ!wTz5W3@bd`wIlX?nDnQ@MF7Hk(7Wiiz<|M{I^yA{)!FBIAZ|lx?+v#H%dc_CR
za3M7NNUx{gH1JYC_VXw<N@6DlyZ8#jBbl#bM*kVRqnA0D;L+ET1JldAM4zAb4m>)`
zzt!Q#TLW9^uQ}KP?0$zwd!aYtIhg0dwRoH6Ml@3U<`02`d{sLt;43Tn-^KZb;9U5=
z8#p}R1RP8gj#7*@eVKnt4Rtl#kp5)NBRTKX#K<)ppW`VF4^xNeW7-h2A;kRrC3D=c
z)`;$zi#5&OzV!FHl@&QpzZtPC<pf!;xUygO_~t}|e_lL*cs*cBabUuR=g{KUlkgE_
z9dPggk4VNxum2uC;I*2I;A4Dc&2zM=anYPB<^N><L7wx$!k5NAhP~g0Z|FPG>c{lw
zVPHGp%+2m?HZas$-P`K?X67__?}&Y|_0KXtvP2`ykIkMHZ(ez1>#A8in|h>M!#18@
z#P{$n2S26n)j|ivx$vy}{@8{J_8<j9spNzTf31LLwHA8@S*LDmJ+t1~r&hnYjJmc`
zujX>u5nqG+9@z=}?fFw|gZPv9l;*1N{8#!Vp2_<Cr_$fnz9F8!oM+d-heQV@R`8%`
zTJdBlCQc7+yiaAni`#eMrNp}LkjAdr+o!>#*A7+P%4I43JoUd~>$d<?D8VbH0@tIo
zFBr+4H+U*-wZacaz+YqVK0mY`Vhm!)3Twl$neeU+y7y34dHlqi6dV0V?*BV<nM-+n
ztGa&8{~ABRK863i&~$QL**RNl0?_zo=<_S-|5UU4G<|y;E(ND99VlO|`uN!UXYb>y
z)a|Y{eq^g!=AR#)r*(ORWi|*e!i8|Mj<R~*tTmT@J~v>+n}vTkbBqf<Uj4=+l;6yE
zFPQ0v0(_UvStEt%kJQM2A)3|NqBT!_+q@}0rhTYeI1>*S4i<4Aj>N~%osXG(|KGvG
z7|Kf~(EQYTpGKYTSpM=z%o)otF*X`Ui?!{*!Pt7?K6wo1@{Q;|0dq~o#yIU4@q9<B
z*&tdMPZq9(lQb@9dL?~X`7O%)lKd||YsH&-CtQlAT>6^M`>Gys949}&j^_pN^XPu{
z-!OkY4L8ykKm0Gw&wocg=%QVs`;=eUuTytZ%A^}#Pq7MK7e5@$_up$H7a)BRJT5&>
z5IkPN+_SBKyq^wTfQQPIIDE?Su#fjIZHsNN=)=eKL2%;_&ltfPqB)sE9aePpo6a1^
zCiEEnOXeLae~>bcT<0+x9s{TN$_8)tu6W}~Xh&@ud_GTZJ(F$}JNMkN)o<<~SF-p}
zg?Gi9s#o=iC;caN%=WB!Bee@nYR=t8?y%MqtKU%BWLSR3JGB>NomJbvBe#aioFeC^
zey7sr)J?JVvp<XTB|X!ey_@;m?CsvLh4+>4tmHaX<|>{i>puqlry2c6GFRF!>|I`T
z919(1A9@etv#T5ThWm2kbL67k{D!dMZ1tH99@eOf(#(bz4E!YxeTV;%e-0Y_PLdgn
zFMh_(I^NF#pRA)B()b3xv_2m`9|o8F9u!<oc~kps>E^1pnX<cyUuG<4s(y`?D?edd
z`b08{zLSh%C%)IWkDiLxU4TEW+;nT}#V-cFnVD8f8*wW$n~6UXzilCg09Y5;=|#u)
z6ML=qMf6MW^<3}i2WQ$89nYc;w{86jX5M9}f6d@?7C9G`vrOfQ<6ggm|0&bv#H;d5
z@rSx!i`@1X{&!=pBB_?6f3|>Y3tW2=xK2awB>rkVV^UmVeDg!(?$BO{0P9*)?6H-S
zPiCWk7Mcvsz6mw;<zj6uZpkdF|B!n2QqMldtc`k}PdDQ~qMqHR_k0^!d9Sxy?oR61
zX8N%{cdOb&eAUb31%2Y^)>V&M*S%Ioy*;g-*Yu{&;Q98-xy<=C=J6(SO#J}-T+H)6
z&xe{GarD$aA8dy2_PHw5w8`}OAdqcl_Ufnqdwo!lV`l!~WN_CVTz8Q-ajXe9DL(9l
zhn`*Y<oVC7S@+P(YkvCB^K1TEaedXR^dn~aw*8W_Da#(IS+Vr_HNSlbS$N8GYkphN
zx9XLLURYBZy0PjlE2Ao(J<I72+be&w{0B7;FI~Ilm5M1<zGc3u%lP)m&<$1VOy4T+
z!_Tg%e(2RTPxM~9W}GLZ>WPYftolp2y|Uc&YTL>;3zk*aj9GSV)w|1kRbBA#^K14l
zeRa*g#cS7W29AB9qN?5A)V7O4kJgkfwO1k=RPCegfa(3xM|rjA=DxO;5w$e|<9(?`
z_pDvPH2e5I-(xlFOfTmddB<LA<y|&qqWsp1#wqjL3EJcEsI%U+B0Fv~sa21>dqu-@
z<Gl@=-`%=u@1RL<EJp_|^G#`(jsA)4vpRqdQ_lCVAk!;$?qYNw;`bY-^fwzc-sqD}
zDHdmGGk<SL&_P!k=*AxBWcq#7B8I!CS>Fr&`k(rR|FrFEX6JkO!(K@Z6+drvoAyND
zy_#EdwgF$ShBE(qHP@RyJKj6>*vc(dx<fC$S(jtoiPu4vi1juHMW3-0bFdEkhhQe2
zCqpp*K(+^TI^EZzhlZh_E09M<S;NO}LKX=Iv{xZ`Ffzi-RGD{}^N(P+*o55z9bsl=
z!ftVqx%SY7?bB8kQuo^QikhPI<uzLzdC=1)nRE_%T28OGR|U`$CxIX6y-9s6G`*{y
zXPtZ2l)t7p!aIo35N#*Z^*UtdJ^1vm19y_E#2<y<9O4(E=n5C1^K7}??3@CA)`6dA
zhzks$@61A{DM0U?&Hr1#jpiZqX@@%(bvC2M<`FKf;g@o0j_T~5b;f>8^G@ex3LdrV
z!gLA$yYua3&Yu)ssN316DVb4awRUE+cCJM)%|;grvTpv0{IBkQzR1t**J{bp9>M3h
z&S$?i$}+jmJckdey^E6Cdk33=+S`k~b|=r>`Ri|v%^V|Lp1Sg};T)i@R`B#lg4XV)
zY%A-{rpw`ljKAXI^*(}pB$xx}wAhu31L(B7=yMBkKgz4_&@yYU=t2A_nI6K}enby8
z_J=*^b<%?2UbHV8MF@G_m>$&!yuES_GP}DLM3B8BJrg=>PwA}j*f5>L;llM-WVT}J
z5PX77<0G6Z?nL#Mzia(;J~W)gGxlHYC~r4E9gR*K*8x4#9%algL<d}l-oBh)^+h^h
z7SErBX3FVP9W-8$pz(a!&(Njv>677iGxQyVzB3c_T?Ty@jwiR(z^C8PobaDxoJU#b
zkM$xWd6AJc*2?8E3%b10Sk;AZ6JPR)IoO-LxrIl}boHkc+4>gB+)A0>Qf3=vc2njf
z&OF~nnOptaYD7mpC?j2@#6mB?)*^kx&)9r`T!#!^?9!Wo&Xz-OwsqT2WFH)5S-IW>
z-AM;u`$_p5A#3`fxz^)DE3Ar|*`~54#Pb~EBOWL%_w8=dRd4%A89J}}qCTwTz3{yQ
z89=yqasDjNBkW^#+wTFK+IK3sHoQBwp%Ocb<U-l-4DULiLGUm=1sz&*v;3s_=|%7^
z=@-c94LRwR4*wOutz_IBx}#0?TR2zWBiL)z_b_p`xyUe~q%jf?`T!nITg6j)zr9K{
z^CRF9%*l1w*o;(1>tMBGzW+95+UU1nRoUMIXRsr-J`7&5@vNj@E9)tv_vVktvGhxQ
zRKNVRv6b?b$dYRB*9P64cMnpYy<fX3jotJz|BEl^T+#XHc4|Z4|BQS6PdiP}XWJ$J
z&be5WjeHneUq&0Ex7pkWKa6eAenjEd-x0^F`nio~YFF*4ZJoWKG6osv82_to<>k<?
z=5+x)cS^6Vt5km82P5+Sz%y6Aj4n5?xbkHSdwgaimq@0x_|^E<8Z%$|hrVqAUhP-2
znLn<*DS`}EMtRnP2IkcUw~S;$*~PaYN0u-L#qXX;w~v31Z~fGD`g@)W2fv~X+M|BX
z|4V$UJ!1j<c*%04zCFluc+5oNulh!Y<zEm$KCUxq6E8^r$_3~1EIjOM&NE}BPqfls
z&B$jT@a7Fq7q4CQFAKlU|B=yOcixB0kcq>m`1*!=Uhdq7jenw{yz0qRxvzfx0zY+2
zW=&q3^}iFJNSvk(zxJdJ&nO8K0}g%drynID@^8`4%jAP>D(X;tq48wC&wiE##8kzf
z|E%!z^B3dzZBjcWwzYuy%6XOMJ@bnq;!)#yG7K`bQ{SgkPk)z!?6`^YVfaCv&O=X+
z$GgpwEKR=HI_Avdyi;t8&3wvaf6r!~$&TmC2`!!tO+F9oyKS?e&{QxdJXP;_CQXEP
zJ7%*_#p!pNSs)!CvlqYAOMk~Z-$QTcpv7s#Lv}mQUb)Tx%bI<}nP~pbjpgS_o-Q12
zs%`SJ`6})9)Ae1(eiZQJ)WLJ{4d?$U_QwBo|NoM@W7sW6A}6FB&zp$u>9nnO<)4Vx
z725bK_x~JwvF6L!@OkRN^-c`0Vm}qjx0Z2;nzTHF9p}`8@4l%12OV0C|L@S^kRsxm
zt@;RdFU9&Q{*bdk8(N5w^)p6JOg1sUik}@sKYowh+4*jx#(O}6$|%<T-a+=Hlf<2q
zXUCzNP><mmnb1%WS$!mHbtW`qA@e)mzE{+t_(<h^*Z0!dot$)K9%5hz<YIeUee#BQ
zJa{+c0mT`r4<{B~QLj7<`Zh>=nb0fq#?h04gTj*{u~?qq7zmse{mg`}-D?)l?IHF`
z<KJ8pU|ctNOv5b3H4C~de0fSol)Z(5=RR`9*n){zTITM8D7<y3;T%oRz&3J06Q8L3
zyaRH_1LJA9TlDRKTx<@j^<FsB{b=r;etC7Sdi)tWw39d4ttTtFp6q!4zn&=L!meMp
zf02CnEPDeo&Cs^(&|S1hI-}*>AAp7;Q@Ljz^f$v_5`8xlFRXsC_vgK*{&J=Eh7^Z9
z*w}d{88MK!ckqy=xvew2`!@&&5#9;+ih*@wuor-TcRZ4x&*gc5HUdYcer{~P$2-}X
zE8rDQ8EB{L_-pMR$$Q{y(mTmr`actXP|6tVney$sbnnL48sN;&R{VOLuPDdBCho&t
z#k&9Pf0psE{e}}v`2<-F@zNMSn+*Qezp|zGKX_>V-S1px-8TBOe}Cz_zh3sMhmL=1
z>L;)K{+WOM@pB8qZ=PCp(Zu{??~Y%$=iq|>7&FlK%j~T~{yC*4H6zsAHsZDWx-Y+Y
z=&-xKU03|o_g^2?a%ts^o#rF|$)DbG`;NCJUvup@fA`*B8%`8mH|~)uIy~h!US9j+
z^k?lSSN`uwM}P6gp91Nz!%e^G)&Iki)l&w){lddvoBa>xEeclL@Sj<^D;~e{<BbFU
z@{c|L92xt+dR*Nt=Q~?=y*#V>hpkKYZO^;&2Y<M}{*G@P`C!fi|C08z#TR~M`19+x
z?f<WPGpGGq)%WlD`i5Jt@_yQ<bi&Pzk8VEyC(-t&`_22~KRvbPg2xX0_NI}$pIH07
z-kbIo&Mo-SC4FC=`SU@k@xLDW6VAHF|9a}r#i8Z#`ck_2Qgojd|2zHu=}W&~SUn|g
z!S7ClH>~^fh6A^3`Nrgf{SJQXxn=n)|L~8)UwXPB^*^jzmS?>6$e5h15B0j~-hX&&
z;b%YnOX!7e|GDPggKIW#p0}p;(W!6!b=&{m-1ptJy>jlp_`oF%mG@rrpY^YP=TDD!
ze7AV|*Pp&~+n5)(kMO?w%kpn+I@~j|ZEE!kf0$nO>u$G=8a3dN9&e7A6d3lElXqTx
zUH{&bX3SjFW6sZe-2UCK{Ax?ZBNs1Rxpx1iXQtgc^u>Fsrfqq4`W?SKZ~w}jIo*Er
z{v#9m9J#0N_VhuUpF1z@j=T%5z5l8a8-DTX_}6<4pL|Wje_VgVuYY{Y;k&;w_v2+x
z-g|f1y2S$)Z?8=A{PKz8vA0&V-Ere{$DZwY>(Jr_+y3kF{LD??I(*gI*}wSq*juLu
zPvt%E&2PJiOZpAR|G#ox-@)0N?eCA^789>AXWT=_N%ubT7MywS=PRGCbYrFXjh7M8
zsC45><?7DWgR2);9~f{tzbJ&JKi5F6L0m()&f{C02xb^%&gaVHGCsetsN2JHAMaE6
zP34#U1=Q&`J^AhJ)JecG|M%zF0DcGYi*RYq^XW>bUcVVmxeJ^+FQd+M>J+T1(+{kw
z(+{kw(+{kE)0eXS_|4!Nz%`I-FxL>SY~E#Y1-SfNhPJx-;(hJQ|LT|UkjgXlTm2P0
zf<KLC<n4CgRKHSzMg0)`!i8{`#<Sl13P%=KH|~W);chtBFfQThJTBqR3k*K$jrWD`
zc_zG{#t-lNa}DA;k4v}^e$|H@u8X)va^-Se%=Hzn%eZ{Bn?k+9Pkb!>@v-Ec@RPwc
zkZTB+#!dJYPK2Kexkhk};u_6$3D>1uKA)fKGU`oFjHT*~<6ZR8kBj|)24{>J$|YJ5
zj`O$>Xv_qz@m%A$#&V6}x@^qYapNaU%$qd1ps;Al6<3bUySnJ^JMURIXVIb=bM7s=
zd-j}#H!i&Uo;eHeoi}F@!<BdSRi%sO&RNL6&fl2Jii#GNbw0a(()BmbyKDB{_b(bV
z@%kA{?kbzR@b0_jJy3e@yu0rjGofh4oI6YJnS1xbIVCq=dEE_H0K>$hLdwrsc*A}7
z&bW8soYFfJ^-jKe#+(KB&AIE|d8Kz;eb?z%)DbVA^h{q&y85QO=HGSq{ddJbH)F;W
z-E>#k-S;dhopr|?o{haMslKGPz7SquD_u0_s?xh=-{As0W?a#AOA<|8edj%9%w<<6
z)n?2W)(7m=cg1(<)#?6^E8_d>=G>X+;TimbMevOK30>|l>T(YkI-`7Em;3Qu?(Hu3
z*<J3ly4*7_&Zs}9%l)V>_hY);U)bgTGVnF|dY9fNUthT7-Z?YwFTDq%a{nC<jp*;o
z%8gBw8$0<l{ocHA-o10WQgBi|dDj;%EQLTP6<q<PK!U1b+-0Y~hyJI`ab9%JfUyoR
zXTsB2PolW$IZHbeiyUC$fR34Px}7WM-Er^f36=ES`0ESHZqJK<<aRH)-U)g?cFb6Z
zsFIp?KpgvjczYA@$gb?Z?^V?dx1q)wjX3sLW9#+IfJBolpn={<OtVQefbIr~O(=lf
zWQ$W%s44)(u5D@o(9Ircyo^^VQe?%lWk;4HJC+@PlI+j2Wk=qk*k2@#_1TIX*~-|F
z$C3T%OS~qZqBwS#-~Zfu-+NU+H=ARBdEJHg-d)b!&OP^>bI(05g-<&Y6fHIG)?NHe
zQa<rvGR;P3&n4m4(r`MU3Pq^bl;8Sbb~Z^z{;Q34qrbmOCmQh4_Pct%urN}^Ognu$
z7;`2^=%Sf)9D#pjxa(`4={HLn2ILsLkx_-toLjhg7fN;ETuQ4{SGw=!(S91r{4VWR
zX3t;n$)F>=&m@_Q6=hw&-*r3xck|yK{gd1e70wijg<p*><o~be9~OQg|97Iloh!4Y
z^(*;*8~u3Ue~SK5{#Ic<_uuDR`OEp`=s(N<QvM(0ekk`Bav#h6>s+<)^U-(ZemMWj
zxwBEb@b_}h75;QoFZ@uxn*YoBYGEe-*}{+J|DW79<-VHxZP7D@_544|ck+KQ`j^pX
zqIYtCHs30IKL4kq-;r<NJg}U9EdM78znK3@?#J_gI`<>d@20G~(R%J1@_!|_UHD7+
z|2z7txkCOs3#ambJ^y`$w+p|N>lOab+-AO(|84nGg|9^aRdlxS4+^Vn%KfX{Hy8eR
z^sV{7R(LA^kD~9+{dQ`3Gymbjx8=6-Kal%xq7UQ`bAKlPE4l9~d}D4WI-UQaXeamm
z`9E3s;oNrasr+u?pGLow|DSVzC3-aXyYnB<|49C3{+FY_pIeObh3_l;wP=`oI(MNk
zS@^l=C!!xMd{g0zxo^+?o!s~4el35ka9H@+{6h40{u^^&j{abwQFy%Yt@$(gzf}0a
z=t}<Q^Xt*43!jVraPFt`f41-)`Tx4`GljpNyPT`!ZWVqo-;F*}_)@-H_*CJux!)hX
zMUAR_u;n`nmHY<^-yeNLZZZE8(R$R&ALRd8{yX!(Irs1A#~;prOZ3MIz5G*!FGPPN
z_jvx#6rRtWFRVp3az7e<G5UA(=_7?N7e1Q%=Y?;lPu8N(<-RR?qwtf3-Q4Z`V*XzA
zPx71jze@l8mz4gyqQ98Go%`j&>B2wH|8Vqkg&!*%=KlBmx#(v8f6M>&{9lYdTlkjf
zW^SVJmBK&GznlB6{8V8rhtQb+ZH51~@Q3n$zwmqWpC{MP=Dtw)U!y;lTPmE+KbiZ1
z!oQAo!Iz%}H-04lZ}U$Vem(y$a(^KA$8x_f_oMlr%>Vhq59Gf)zmxxJ{`cg5J^#)0
z-goAIzA&GACEv*R^1qh*w!)vv{~ys$fL)!!e-~ZKe=+|H`5!2}5PdoN$^1{{zc2df
z+~3Uomcma(zp*ft|8t~0o%>950~cUFo&Uc49|enE&wV!kyP{_FnS3*MnE!?7N5Hf*
zx#irATqXLE+`r2Io7`OP7YhfB<_{LWBl@{$nGyem!Y}8Wg@2s;k=%?FR^<E(`Iict
z(T&1iF8qo7uc46mnZnb#f0=)#@R`CNj6PO~bAP1p>B8OIFGiON8~Kmt&gY-Y|Ly!{
z^u@x<g-_)_n0qq+bGeD!-^=}4?uF>T$e%C#-NOG;_?~>d@OultmjBf}n)bre`OkrS
zcXPiL82@A8Hx>S7;ic%u@*gk!&ipSG{y^^SsGa-0JP&dg^FN>a^SLkOe?IzB?rCPg
z?~a}<e6a9N{!6)^%Gbb*zgGB@(XZ$JP~pd-zZv~>{*A)pIQg25{%F1#eJTHs!IHlf
z{lB?-Za24Cc(c&V{cz#i@?ZavZ-^dy^zlcY_~3^=@MPiZ@*mFO<t=+T;p@@Io_O-Z
zU;mB2=@aqfnHOH!_+0mkKlnF(c_djbm&<b%xIV!3K`zO{(F5|on*l)fWBEfgVv0m;
z1QvKoez1WiYd^_dWk~jp`LR4lukiaEzc2Fp8~h~WeDOaD03fKDTJ^yXKJv(;k3RO;
z<Bvb_#D_lg<da|bbszrlgW9L!!*x>oRQJp}@WR?+eYaT|)b(KN_=^h*>#JdfagZLE
z9^xM|T=0y@$>}`<@qW{1ID!YleZTcS8Ln7$7~;|P!+)3V^au6U(owbE6_@V%W#&ck
zrL4QV@I{%ZnHLt8+sA{m{eEHX%A1Yu?C1hKx}IAdRtFRXUmp0s3?D-H3rYB9y;9q5
z58*zp_Bt&q9X{=B5`RBF#Tqh`@-tSbYuyN*B=sF(P(ng~KMCI~>LKRigYbQXpPn4!
zkH6U!uIcvS=+Q5J@D-*WzZ*Pf@a6p4Mz>Xa5P!9Dw^bP(j_i1yUvu#z%^&51t?N=Q
zc)hEkvnx}N3kGLw+(*Y3IcKHOYLNS+eAx<Q;$K)p&}zb4CiD1Y{Jy|6Zw|&9nt|iv
zFTjYB%(3C4_3-(#^>AeBv9JG4v1{+hczyTSczws%`xjlFFn+pg{9NeCe;uAd9Upo0
zvB#hI(34;H;ol&#_Rv?7{{tT!0kC#)ZJ~FkJLp_kyK#5E-XBAUXgppbScV-x7C(k=
zX*`TJ;1_nP8KH{W&!AVZ@>49bHYMf0XxSKL6T?n`mmL-GC$#76+Qqw>%1AD;ayILI
z$uEt;>-FlOljtkP@+FlV3HNfkDmVijGI&s@jY_|N*y+_2K9YXCvlO4owddE~><=C=
zKhLh+qy<S$1brmGiyv)%7QW)O@^o66G@0^WF!}&V&K7cVd<q~FALz?i4P8AaqF;UY
z*=P<P@eQ6%{&y?-J@<_}Ifn~vd`-C?1Tl?kN5kk|^zp1dqY%LmW#)H5jM2zD8xkY$
zkB_~haUY3?xyrnMAYvzf<Q?HP^InJ$E=S&(`Li?2PBR4lfzpFsqiTyZda%`DbI?d6
zdp8`CbGIsu=6G;4JG)?%w_aPQRQKz(Ao2Tb(d@+#pQ_!mK;RR6{?VMXNqCwsn}YfP
z1{Fs=QQ=vUtjjKd)mtPX)MMttXn5ZX_{jYu>7|R*m4%ZiHwb@mIa>?TorQ17RAc7i
z!hEx_*RI!A8#TwzICvLQeV)^5Sg^(+!>6P@lUd(HZ2TOdyx9e(*YR9OLN8{{tT7d7
zOQ*e;p<9`8=kwAdc<_iA@J#$8QDyA?2glyQ<43i5rt700WrycOPd)X~S6+F=c6kW+
zkZt-r^%(!2dhDY_68)hM@$ylE9(zn#^sJ0r+@2yxskmIA?oU0Xs1LpJQM+7e5e8;<
z6&`);$=~=<bl0!C_eUT5m_5AeZlmq_9oAol&jCx&qt5rL`;CKoU{9PH)~ycE$0Yvj
z+BL}MXe{t93hx}W8;!yK!sddN5568p)Jy{5lf%eF<!$+9W`q~MN`!!q{$;&eZv)a&
z5q<{5OOs{li8}8t%+Xjyna7L6R_jhuSr2FS#Y{buNMZOwXV@M@@aKzn#E4UL60Lfn
z4jk^LxSzpWrrDnK`pfOzj_AZnr&?)-Kwqr%@$0+0ES*`PM2_I!E69$f2xFgO-R1n)
zt545O^Z4r1A7j+rHNy80Wc<(A{R5sK8i9X?@tv7PF$_1b+BmBB=r_BUwmjQ59)H2b
zFO7%$e5?1*XN4?jzu@&oZ?Lt`7K9e~W97TbByf;}k{(*9G^>I3Ku3?`S0+J<w}CAf
zMTj(B%leBDEr-KNyA!;p22i9{r@dMq?00G+qJ7$*#$R+R#7J}|-mw*<rGq~roF0E6
z&0#ub^0BScZ8ipDn4Fd?hK$uF?FIU2b+FbMG<NS~>u2d+7)`fTZ*?6phUGV%_b6Pj
zepNKqNJT(h>zdJYTFpAu+vuy0?IC#-dg$~Xbw<-OYaRUY;mP!q+Q)2!rOH<Hx#%PO
zD@XO{?daRUv)>nekA-}{{ryPv_qhLq=%4zxk3_%9)4w6z$oycnEPm|kjM9#TkM7re
zP|BPamqY0Q;etQ*qr2U$p&J1;n>&>%e#qQKe0H5IpAhf(VUT01el)@p3&JdNx$(<m
z@j*||dYNL^W~XC|Ka2U<nGn8oH0V{TgHZ4)6sxl5HXQ{2LP$4Se=Y64{1e-kl%MX4
z2)&0p4#UIr6`yose!<pt3=gh$noz0t!h;J7E?q)1j?ZVqml;u&?3`piX8NmgXw&>y
zJ;o*@@fp0pqoC%s)`g8hZ*097YmW$yFE7#hoHV~)V0X1Y>~=f70cx3gWiag3M>D9i
zzJ}{LkoLX)eeVNOd{Yjjk7EA1e-p{mv&qxfM`tt7A!YWyFc!a>V`}~Xa(x6%EbLqK
zc=VLS0Ys3eOgH-tXkum1^Nrl4r~N2*8T35G6JiKD+oz)6!u<)}wE$xoK}ZCv_@PJ|
z=pCSl^{Nv4P23BQKKb~^cv%0~)6Z<MPn+VwxwVDL&M|~a<2`*pah8wMcS$3*q9%gn
zC>*$r(fO0^b0+JU&5Mf*oAoYa%FR~WMW+#5WAHAH&$9q<G~Mhu4=>DHae$%$te~S;
z0X@u<PkiY7$A5FRcHzzGPt<o^e6ckB2|cZr7Ov`^!aujRRp~vT|EzzLhL013EF8vR
z_AC>ve$+*WQLinvYsco;cjkWO-Cue4XLJ8B_oF<0mc59NM+!OV->K+(N%My-$4T+o
zuxB$+ej>O2P<gWXPkw&m7@WVA`yX=c+?R5L+?U_|^1J^c_fOc5{PMd?xmB1&g`D*7
zG4?sX{O%Vm$4T+ou#aS*{9NwBL*>clKl%BUV{j_8V>{Q(rS>$HoocPVJM0fCy*Q5S
z9-TRp%7H92=*b2>&wvVvxU%C99%(zeTj}+^^t=>3#|%&Z-H1MGZ&m)jZBL>APed*I
zo2L7&vG+8_J^gs}Q_;_4(tI`gXPGyp`4`FiuR(df`tDcX{T}v5d(qG54&h_IWFbxa
z`_*^<^PJ-Uu7A_>_b1OkYfpDA#aH>bhGN6NN0L+_<o(`<xw+^o?|$Xo?}+|rt{MHQ
z+~;uu|LqpCYk$A;?(fej{%4}UXm>q-uaEi4yMN1`20rFal0vDXB-K~m{o^AsihY=W
z9f?2Kn;AWM{5O2!qaU08ji)v~tw64ur#~^h{;7>;vg5B^l-X3w5RKZX)HYsQC|yj*
z)L42LPAT&fayx=gz#~4;6H${<d@~hcmieGw3BI0_+5&5oMi=WZ=zP$>T6k8oXw5mH
zT-7U8A&%Gk%);xPW=7N*k3YX)daH4Ad8{63%Y8jkJ?zD`(tfYezMav!V9&Nqp^f&Q
zOD%odg6B9lDuexm+=_o%#T?FA#${M)>Um##x7jlb^TR>MG|?kQU+ULneX|Z^Jy;bh
zYy!H8x_*Sm(;?K2rV9(4Z$O6cdjuvR%LhIZZH&GD&awAVeP%9-oy?vGws;cMQi%+&
zu<;*37O(sLE=>aclz05DJOQTS-W|IXkKRQJmmnQ%FDsCX{VK;vB;4zW6cN~e>GQ_~
z3<m<cu?OXk&L(oxrbNoVO!hjxJKI<+jYv?)KPkVy*y!ID!;UKHj;p5RqmyeG;?FE(
z+qckZ_dAkoU<AhMokUqq;vWb%tFI6tkwKF(uAN`g<1v1P{_yaeeoLZ~4_K?T>KQpq
z@yy*}YosSqIWOBB#t;2cX8dGAX_vEet0D=yD}%?mF}-+B3^5BM)?5iWU|bij)G_93
zReHArQzuAppkB}G^a>ul$wMK13dQP|m49iN%kjc8;-bdV19)L!^c{U;X;1@FM#rqA
z=o778qgX=ti!OWv;*-d_q=){Dq~GdT3f0#hMj{QqOE0A!WmHwBuFxNWrkK)?aP+cX
z18d2$^dT1^2QWUgBijWo-HT@To0fpSOn7r;DBD<r`{Xx%;?rwcc#lN!7=8KR*!$<1
zx3lATUEb=Hvnb-qN28O$$IzQ)r>i7MN+&O_ZHQqy&Vn1DGu`Uh+WDP}#TT1b`q(>X
z@a&Q3x8rc@dg+D5`P$l6e`R5PdFl0on^POxQ>#;UU15A?m!0B)j;#%=BRH=DX3sC2
z7#|S*C!@-{m3RL_^o!hoNAzRSABg_Eg(!6VUl*IT@vw(^zxg%gdKk!+cfTciHM)!q
zRJ!h+UlYooTU%`Ow8@KwiQWU=`DH9RcV?kH9#<Z8%Dy+lfNn2)N_}yDbX^AYsKUon
ze(3plxIut%8Vw&MmzqzWo|dYWb{fgP=h9Kb4ByW$EwzU&-vG*|fy)@m^g~?@pIGC=
zy9XlSlzDVMOc+zICF>OFHE+i97%2PmfsNNNIoNoO^En%@J@UvS8?Qb37!Mn-ojJ4d
z8Y!F{!I^^}pZ*WZ@Xf#9ZS-7u)5v+mPV?N{PNi06Rq8+u%H_TGuv|Slnwu+^tDSar
z*y};}>SbbYm+QTr-x|Mfx?y`H<+YXND+@PombbRo=C7<Qm8{bI>Fm5+?g!&y|6aA7
z3YTK9+1Q~LQ}z9Fw*yhNde&3JqNLuLFy+KDy47f-sEn($s9uYEb(+v;U#NLU`jBJs
zm0g130mlvwVe8^bJ8ra*!Dw>a*^QrZwPD{vnYoVTKV)(23<t`H7Lsz}q(;gT$A|ls
z!Q|<=I9B#dfA@NoJLPu$u-vS-_Xch>GV#?)Uq&-YI|p~V^+qk4&}IYIr?<BJ-EI-2
z)UL@&yVJhY>J0mFn{~I35~O~bm<o)g64dI|ra(<9fQaP1J#03+gPzjr>Km6Eqqwj4
zDy(VL!@_S>b{ca$Js;a^G^ZD?caU8xY%s@_-rlEp|ALQDF-pQj=*qS(MmnWl>T^&4
zHATGJ>BZ1_HbXhN0Y>yJqy@EX*5l}4paU5`5pZ7L+Dcz|2Suss&^Ec_@x;Uz8|@;u
z$hwa;FJw;M)k`68Bwafb8b$PK@qi7VVWkPO4BNNkK_@2tNnr$2uY*djQE3lAK$M;B
zkxazDT{)=43r#FUTrqpYO0O1Mo{{!$t&~8>2HiAlyGFYHQutx7(uG$Xk5chbuZ|&}
zCT^^r@AN9YJF&)Pzfr5zLDgoX;!C#V5!`RPF9hzi<7%_h4t=6_-!D!%J5->Ov6l(&
zu>%`jo^%gY&lfe0-23N;?#={=^)&SHO@9X)Ex~T3De_4DhPt_aV^^{>?9sLqe`8+`
z>#mYTgZ+l_hVOuHEgHVp?Cdaf3A%K8{rGnM4g|uDqmQr2WCCm&kB;7HR$4o?N_1MC
z$o0;!EzBW1lZmkSmg_Ya8%4KvdyRU#_EvaTGG$2K{d@@TbUL^IoF3vrg9gSfhIdWH
zYA~RS4?0XEzj;9t*COtjK`QqvyP=@C-Es8D7vv}%=g@37h<vQF%*?tU7T%Xzl|3kE
z&q*M2bI)4NxLiIk!zka+>fe}{^0k%qEAuO54?ddo1HjElNz8-N86C4V#$ik5(Xx6v
z*KbtIj`VndJC)HOOP5J;EZ?Q-ex>((Y~gw=(=m-f--0ju@T71T8ejJHYXI1vD9gb0
zp$`Ns5O%rxrhp7i=R~+Z^!>n10U6xJ*t;+M{Qw@#!aCvCk*8mB?Wy<`yHfG*e*N+2
z6G2G!+ANeVmi&kAsoE)54(a$1QMv2Gt05k`UG|F{K~;Z_?|Byu{d5o7^VC&)-QA~s
zy=phz`z`S6Ey9?ZcGc=l7MELZ#qKq#`SNOan0+8uC^4Koa@bA&hR^TmkAo9OQ$9h>
zPr%xNPv<9$%GOn1clXbRcVGX{y5J}ne7xl2cUN4*?xw%{a(8>~{jyKDXH*RO<;%bI
zmWyxtak+HKCG@wb>Dv+L@FzbRTZX2GbLo=L@8S8^sI~0Ei@w~Juivxb-NUuTl%y?R
z-<BV@qK|0%ae%H{Rok8ro$_!_xniQW#}m?7NZa@47`ci%zJKod{2kw~_wG4B{uXt8
zeV_B`y1stT`SQA<o|oN#cD-Q!oKMj8{Sz#ei+)1C?DO|l-NS^3-}C){*$-6D<5{nc
zd|vNyAU2ELtjE6m2@mhGhu=rXrc1nVXV()?y}xO}QQyObB^_kYH_}?6>(WaOkjo!O
zeLv3z9*>N%CEdXHx4p+IPqu8aD5StdJ7Ti^y<TZYA!3IkmI|+RhITL()?hCVFNE(l
zI~Ac)xol4}vo9z$>v?;$1bSsO+y{ho7RevM*K-JueL%TPh6H*hek`KTVPTb&<o5vw
z9hhgXL$@YaIRUo9ll0cWPz%~!uQpnh=Gj>#;_~ko&bim{p44o=(zG2v74t%QVEs6A
zfd_vn{OoM{UcTx&(5*MF50!jt9}a9ds2|0<m1+Yv{ElZN88k$VVY0~=n@k29P^(Wp
z5k)~;PqJPeNzC{YI7k*mAyB+yOS@9KYZv2BaWS13_C%cLwT04LJW&e?#Oq?Oa5Q+q
z4QzOy9lZFWAY|XW=z}WoD+=e_wvFTMVH?J0@5R|O3MKx+xm`{5y?VP2TN7Qa3}DMl
z+H)<Lix(>Gb_YR10;wbhvAR1FDpjYI^@WZ3t?SWaPdv&Qphq5ilygxZA$)$Vv|PS<
zcIsSl=EVzCbz{A>e3S6~eYark?>hpvzwZdh{=Q>C_xDvBrBiC|etq-FBcD9-$s?aU
z^2sAl79*D%{Pp>po=!DApWAfBL`|R2liTRu|9iHIxVp_Da@I>x+dcF>nTe`Ll`@@x
ziebtqK{Gz}QoOdk;>leku^<~%Hjz^4ciVz%)1%&NSDGG-0=Z7;_hk_-62j_9_%0(o
z%96$n%T&D8>BOx{`;H_$l(+3cUsz-#HwTh3j452h$vHo)H5O!TM?2a20FI$1_N>u~
z_wA&-q1yA+s<n9+bi^>tH5P!oRmvH34y$GOg?hIizw}ZJnuYMz&RBSPdEI(IaLT)^
zg4PSrI}B(uV55#1EykB$ie-<}_M-;gwwtuCUgr2vZ)dn0bs?Bo_?4^t9n_O*MbGvJ
z9fYqM+-gMxXUmdlmf`uJy*C$cEib+_(X2fmZ!KJT>CDkY^T^ui`eZKlaATFDT-Dpm
zI&ft?J`<(xh2L_s!osP}Zm(V!?T;_TrcMd@hjswUK~}yK#v7&Q=OGe%Vph%H0;4Em
zVD;>F4(q+n?rc2S1qTGW+?t7>i)T&?n${1>yc}0*Z@YI|X@acUQ<SAov%!d4Eo0Yr
zwYk{3K|DCkb$!AMfas{9l}i8jdhLz|d1-BZb!pX=1Il~y5s4V6tX`dxYVj^7ywLPu
zq3)r3Fj1@C%1#TMjk@|t-gLDJJsIlda*hpa)U6dSkB6znmD)k0U)SiP7DIO4^L&nL
zYuRCq()sanDK#HQF{(UU7CJ|>Q|Hd=J~cJn?hcyMAyrFjfGOV`?$y<*rNyQB#g*6M
zd-vkW+jzrJ*v8iNO+w47+gnRF%S)S^>zfPLmlj?tuWiInKOLW(Y;$R0d$Y9s`Vy(!
zz&iLP@(TK?US|glBK2|)Rw5IINgO{NU$vsvZ>%kCmKT?o7Ef#3{6JZ~i<iq~j0P)H
z<uaZ&K=d?T@~~bXP;GTbH0e6Ps{iy@>Wxh%`|{fLrOo9nH9*}E@Z>@HHrKCgm&mcc
zxr*efjA^|dly9SSeSULkv3zBDE6I|Mr>iImhMLorGBsS+Sv&5ZZr4;D_l>vQS-eRx
zqU^GI_z7aA35XfRqe1VE7E(|t3~YJ4V4uVnJC@%mcZG@L*}U3U)4wWKZ_w=;!ZP2=
z-5#`_E-ua({v<&V-`&P;r;NhZr2$Wq$V(xza%7R7?!Z_dG|+C2104-N3G!%)`+(21
zix!mO)|lB=7S2JW5rG$^2i;s$A62CbEI0b)7LICI51^M;)7G#}004-V_P5b?3tzVb
zAB*=6_@s74<4{K}T4f!vfa2xK0E)tS8&5&{&{#w1ORnJfppG)T(|+lbGoQRHigjtf
zUg^f|-b<gHs1b5W<g`yr9NVK2NaF4eKM9YQJg`{%XVba6=V<{XAFQyMX}<5g>W@p)
zz6O^D9dUM==P!LyN~}-9qjD0#muqC->P4}a`gWw)Cw5y7q<=t~R^@0cUWIdAs+h{#
zgR(k|B^*tGfksE{$paJhhdb)#{#c^_gyqq1D#3=-wd4JCUpB4qFzxEvSe5@%^z>*4
ze(ha6?NHjax!URVhFx)q8uj>~KNV}jCVNC_yc0f)O)PUr-GqBlhdn4ho|HV%S8<+-
zz(2w_X<nxJ612BD>&5FdohEYM1S!Emj7qbr{J?klX=<}s;b1<yA}7pizvOi9AEoSL
zaFI{I60-E5_O_f>ygtfRnyxFiJFQCpw&;*(?&O*HUc9ln^g0XWc4;YTzv!&>H1tLM
zLGpeno|N=^I-Z=3pN&_Sk*nS$TM~afJ##S`rf70<M3M%~q(t8M+0$_s_A!7t4f`<Z
z+7kH7xCnEZtgH9SrY0p21puH9j#_g%nr1#%r=cg)2d(K2)UwK%m&O2LM&>s`j{#|`
zv%l91W2jw^Nf`RmUe9r2JiB}kj6WrW4ILctE6{!9bx=^K4Knt?5}z=|zvFn%)*<{j
zb(Bp{14b%icQy$Z#(sELW9;|N>~*qoK;J$ssm6`3@a(j$yT?W*q&Y1y$d9!0+Qe%}
zfQUme2J_h13IMW`#`1(wv=%;~P%v#ASK2!aXM%IW{~hG6+Y&S2rI_yMDQxKcG&5SS
zWRdz2GOmH7F=vkBp-qrki3O88z1zY+m_M`$<@uH6Yis4z`O<3%@&V5kAPQl0L-XAc
z9w<&icmn#=Ynk+6#NA*AsuJ)bg&WdkFe8&VP1kBrg8@eyQM@T_@p3{KtpjbX4&XEO
z2*BQNy)$Ka90-t9h;?JRRe@zQ8b@zdZx=7`-1ap{>uqxMd-WT$fhM`Bt6@9={_bH7
z*zX&zuTh$Bh-$+rJqIQ*#@3WLXeX@nY&q%74DEM0+{&=S)<#C$h>oGMwMn>mET+9P
z(w_U4!>24yu8*d@z^lrq4s^h~r3vnaCd-O~?X#|xlP($bm4r`ch7a;!<A|=L=eX5)
z@`P+(Q#qMcO5E;y6=5U5bQgo2WtpKeNpqu9$6HCf<GBUkg#5__Q~dGKs2{$^P$^q<
zN|fWhI+--Chbsr7%Ma>UOA1_vi=Nvr_xFbbd||fL{D;HW$_e~~M21t{_pELAePaVT
ztTWUf4-Nm}upodQUpIriG#(!CKZFm0cGB>ppG<3UY_5-8%|rUMcijXDWFSp%(=Xxw
zJn>id6JWcvD&YkD3r(;Jw0iPrdVjg_6dclfcdZh6OiMYz2h1^-UKL1qCu_D_58)J_
zi^c6NT;E=Mt$clPvs`*JMndj-iYe~NYM;q3#!G{MfO<l*XkN8pA7Rcb<h+EZ?WBIJ
z>!o;N=1kD~$^J*G(D=UbTP96THrmzZR4f_iw1W)uX|J&qnJ`M@aFh4|*~(4SjZq8Z
z3boDayk#`jsX};BO4QVB>jA|hwwL|jsw;f@B!u?4rAColmOc~0u)~d(rLW{q9eX+_
zxPW)a`)(~&zCHF0v++R}AL^CWD=58qUrZdV4SKh74M3}MXQ!S-m07dZG*?ofH%jO>
zY_^>@T)&%yPvO3^G#d#Aeru=SlRCa%ZkiGV1?T`<GpJp;d~IQU?e+4y=_QYcFRgBD
zy@3?6vAreIbUeZG%F5C;6mkzrvW9=Pjg_UXr3a<D%JxWkeS3?N-~;`RpCpi=iyRJ6
z?Vr9?oOw$XUwP(R&m?w!PF@RI7mYJ5HUq3lpIa5LCku|nhaRDSPSCUO!N4EH-k>eD
z%Q9^UI#CHJ?E4+Mi88v6H9ftxNyy6bmc~{WJx^)W$*Z77niN`;Y0yZ#IF@t)402gb
z5_GwoK(=xw_J<Sgxy)Y+<@_Q+Q~o!>-pY0xlgD1)ZT^sE%kNuH*9X;U@U4Q+8CgAT
zZ!H*vYpbp)TW>BdZxS-mpPmp$g*BJO5AJH`#y5_T!QDQG8D%5s#$;-0+R}A9{l-xb
z6G1PiV|iPauE|i5`8)EChMhf*YO5PhK7AM4wz4d-`nMX`0~RkgYDaH95B3i3D)iO>
z@p{lgqer*Al}ZGPw>>4~$u2s1s|0_Na43N`ky82dHk)bn=5!D4cCQE-ayh6!q@u=7
z*7UI5IMU0(G$O^&9>J7d*Y;~Go9mOcrgWp^2j{A{9h>5r&i95>w0yVwcc)}qItC}<
zU60kbz1QmuyXZ4rjUS?%pklU4s=_MpSfDQvyJ0BYvDk=yP~(wVX)Kj?y~Td2x~A-7
z3H0WD+9$bRKT<&Tu;x+7?I+P`OH8C|OQJl?eN{%As78pii1}XCc)IMN{0Em4q}~)?
z!?=Z*uqk11L!h<eLG`C;A~Ru<lm6LiS1a<fJ&$>Q+(_hVDrnO+bmRD4)-zV0)79>9
zy3?iy$#cJW=25?4mK_d`m}S<cV7BA(c~ow-rp?L_lS+9c-yiOA#(J+l?JNh}7OJZk
z3#TR*Ag}vGLf$#vtsW`703)c|*k^Y@`$bnDLn_JOeG`BKo2GSgueZk<-E--9?;Z}*
z_gb^K%g$KY85yVJBM#xExLLg1WaF5uC(vu``$y~#Xbh?&+uan%qPJTXWql&m?=?m2
zq@qCN3(P6-#qP0uwD)v)p;9B->GO|;Q!6R@**~T!<$isSmAqCzno)I$DA$_WDPfNR
zSbfE73*K4nQ>^04nFg1K=B>l+Evkpc<NK^Q3Kva7tI~<Ros4h1s2Q6x#HpF2TUxoA
zzGEwby@@F#P^@B{GHBL|D1xwe7EE19dcR?T76RI=el=xA?3Mg6)Y#I4r+4C|t@7d<
zYuE|Y^tg0$X@R}ncDz%^Qm0Zw%aX!<rXO>#6e9%9UV$B8FcS{GX9gf>SyUf*B}`eY
zIQUI(>|mw}X5WqJc?Vv$W(|WMt(O~E2Kf1vv}gXxa@d4HR<KPSK}_O9doAyKwK|h;
zy%Y;{04Ww(+%BsPdOsQFs01?-J}pk+<oFi6By*P(7SB$4e^}kOfwNpuG-s<V`y@h3
zG<}>Pt+X&9i~IEo{<CQRU|+T;k3T*+fq}TT*9{FO`VN4F8+<kjg#n6vX`=7he9DEx
z8NxB`Nmr*~3n`wrA?l+HW|H_h<gtwbMl8_ek#YMDCUkpoX?uB58d{C3lr5MWn-;%5
zu%gB%sn%|aMw#O15c6M!Clep*>OnV<ecHFaxqNMT4LhNg`K_yL1QTQz$5rf(1&rM%
zo2QLdh&4E4?4p<}ts5v>dIJ=o5X;+|nCQ)sj(xqH8Gy4)utsIN*Wiw(+uUB0RnzpQ
z{-RavI^%0nj;6~%LA$^K60Mt%`t0Z#_{b=nZL+hpH6iJK0{N06D~Y6YpK<9!In54I
zn49?Zezn)Y1E|dyA8#@Q^d`;_MUO-y(<{{5o86M_jzb3VZPL;fMcuH@(F|kWa!AJx
zdW3v#Ny$V6qm4d<DvLqET;8<;K5rz}*Bbn)HDwDldD@5wi9>rKbhKtP7l#0nmiu&C
zjYm`Y0yQfQ%eBuS!Ug?6hUiaw10&(A7RjO)r9(YK`L@9vdeiSkN{$^%C;Sq9Vo_^0
z4WLhv+V3feUl!cF9cfg67Y^NswC{5S1QMa@o9Um=ZIFHaj*VYts0`!@@O&OBWBPbk
zGF)uUgss)`G8Po`r6m{c$wzz(6QH*~6USy3XgeLIXlJ$P+I+WjAljVxq%45ctA5u5
z`d{PO<VoxsSs<GY7GnDFlPcj`Klf>~LuOGe`ig;iyL{Qnm9OVpi(BQ5m95RCmA8tQ
zYvo~ks#cbT3o9=%1kX!9;nL}CX>IFRLajrX!A~wVcW+E?)|(ZtD$C^Ce3*PapYMqq
z^P6kSYuD!D?bLBnjC=Au4hc1f^~wHeolnD}>PW4po>y1qua(L(-n27J{jiQguu_sB
z4rovw8Ok{Jy<>J%XP#{y#W80CoLQB7wN=$e-#vOlD-4sjcPEphyI<>#yds8i@-3ct
zcIZAY20y=3o$7a{F1YTGdd15<*+wx5snzCId46$GQDHxIYR6eR8~)hNj>~B8m*Q(H
z5|Y~Oeo#z4F^*8}dL7OI#Zt_AW>{wUbS&LCrk{{UC5y)bGk0{Lie)e0ts~5=TVWkM
zl)uh&&7RZa!peN9<SmK){1Q<br7K2!9lr*a;{(sk8QnCa{CacOBq(29m_%c<jlW~A
zcz)OGnOF)TM<(rx{Y-!WNBm&3)44tDYV88<Q5Wh}4qy?NX$+Zedjm?P*NiKRL4ZO`
z5Bojj)*UB}Cvq><n+C7Uj*X@1L^+qGxzlTK#z>2^R!<N*tgX{Q5u@_N2)mT*+ct}s
z5w!<iJdV1M6QP4hLYRAml?SIKCY_7gjm`l!k!#EAudmKyb9>mR4fY9GzPh@l9c_)J
zu2b<R1B(dn0dE>h-_Y1?)O$uhRF7JHXSi2BsJRNbeAEZ0m-HS)bf1Py!lP*4z1)_^
z=f1W?$3jN7x2^wE0LglE()#Lb31MeYrWiXu2dB8cxn-zEJqFE;oG7&-8VuNbc8eid
z7-PLP1yNP6xXD6tdKPOuBa&g>fCS=m6p5zF(Q0Q_@?0!~u1vhyVjJJh0A#|AAY=B8
zRV2jFbra(|%6DCL_U2l1#N|Qt<I1oGf9LdL{pVd!k2N{Ci!+Mm^>QPvKt)lm4Gv(_
zkEFpiJ4&ApT9UT*q;#?e4V|5}09AO+?LpZpWYi2|IOzk+gX+#p6E)9Gvo6$*yoBZ&
z9M*NmS7@!00LAL0Q-wIa3k$pBN8CKr9A$cjF*88IyHGzH74<GL7LLfi*G|Vu8SI>O
z=9G1^d^Bs2+tmJSG+q3;iT*Q0a)b-6Tpj(8`D_g$_tdlfXN<q?*tZ~#!<*<kJw5kW
z^_;*$4&8u`7(5U19O*%wX{NzG%9{yWtUZ%}`&~xCvf8uHZO_E3CYlgV@2ECU*)Ffj
z)D<{n3(UwXX1`vvPI4J$rVNiPq&PEmamvi^M1L%65GdRhvR5MkU*jUA=71UId!Dos
zu6FB}@@aM&7&C<{Tg#HaWPAp*Vw2gYf0(r1!v0~B0+n?uIp=Y5`Id-3Fl|GbI?fr7
zl@UL6&OM%&PmK%bRChItN{9A|Bje}@vP%$HU5gZdQk<{<Nl{jn;}Ncg4_7~Th(+~d
z?>^8Gt6vvOnkt?EM892x8_{yP4)5Zu`KPe>OmquS62HDY>nMtNoYV9Z#J_k@1J8_;
z?CxWiVH#)&nHyVWroL)iE<0scnd8A&inF9SeRvY?Lpr-Pq`8yQJDQPAkGXlRqfINW
zmBq5AtnP@eoAaA*l<j;B?^l-B7BO<Z5z_g0r++6NRm=S9@<RE>()?@D3g%%q%d=A#
zrp~^o3~p^w`z*VoJ7{7(8H%K9oX*%E+q--Sxa5&-dX#HBVZI=xvcS;GFd3Zb5Y4nx
zEa*kGJ;K&nvktq-0My||*ax%FR3Dzwb$9rM<Rb?DXnZr$eTF|VK=30172p>AV#9kV
zU%ZA`8<nkVxwKxKIdkFMh3V~u(z)sArRBA)rOmbZmEz@LwSO*pNq>u%Luf>*;<=Tj
z>A(+-r8l29f@}HEmZdorI#S-&)fYy~8|=P7KK^EMjnr?J^weiI6F*x1?AZCJq?*x7
zm43C+$YgZY$+p*0_~2-JZFymRap}tPH3!4W#qNzgppiz6mG4u8aorj64MSr9;Vt~p
z6-iHU6Q|?pFyZtHV`wZ&cAR`}o$O8oW%Tq7q0DsuwoU+djJc%J8113&N5JT%IH$I_
zaG@bj5TnpOP8p4FXlAz)BkEgrE<<2N0^_MAUdU~7jG?)$j~sho^HJ75q22w4&f05E
zJWH{daB3I*96DiD!VV!N?SMI#1^uMK6mZ)wgs;449BwE&iMA3?Bd4-ecD#n8$ubpd
zaN4AY>7};EwJ~xzKB+{>ztm4N>}j9!7HoBSZHc2Oi*7IWE$c#;u82%3xF<pTwu|bJ
z(R7)<yiZM0O;Y%oqpETI$(ya!DmdtK%bEus+q4RIVMg0~$@EL+yWx&FekhvL1ZQ)y
zZe+kDDIN;mNjb;rcS6Mie&45FR-d%0$18F?zv_|Xh(tb;w-d_$8^8RofBoOnk0-#%
z=FIf7f*+<HN$;r&X?~+B#{nEKKgmBrhmNOn07Giwgf4pF947%ouobBA<N3!@DiPQ5
zbO|Vz!6iE(ouZR+Plz9Z6FJ)nTe=NmB46A3HEn;xvX$j*-8xxw#u(&8#xGtDrUibl
zNdR{_d%;mQcj7WxeLY<w-oXj0dw6#=N%?D?bcx;%%5lO&|JdGBKaE+DVJ(MLSJ-t`
ze#M&v>-YBEGeiw#Yu!vK-MT&v0aW^O+wW(&gpnyJVLq`oFqT4lIV=xTG7Nx-Ywv<6
zqrg)*mPjN}MUYM>b4d2I&*tDKnT9)wA&km3KHgW*40e1%)k|^Nc4*IUPuqh)r_Bpn
zZ)})uVY>82NlsA&&y6%-5#Z}~AWnLZ9ae!8_a9-IQ7p0jf)OA-Vf0-Q#0AH|d#;=D
z5r7a69B1xQUf_gUX$clj#vOEQI7S@Bk2`)`<FP$|Ezy7YL%u;QjhxL!eF}ATMS+Hg
zrb+fOsx(*7&%rlk+0o<SrkG8{-uKwIcc3)Ddp#IM6M$`qFU6UFDhey`E|d&n(o(nh
zMw9J^nbsfdI&BTgUPs;yYjmCvjKfz!WluU9P7tnbT`jW#w6%Qojj&g*_C5RTvvE)i
zO{{&|jMKvAb4;Y`O_y#$KEv?F)NsD4f*L)w6C6vA)K}f@BPtECY?Yv6T0ob`)f%5?
zZkr^rtC<vU&BBSEfTdNwpj1ozPwn<mIqZ%%Q+x`1)#{b<%94!R{i$=!SDzy#O$Mhl
ztm=!+(YpC_62hrsyl{Aejk#zovz4fAxf(u-<R&R>RE2o8O>mag?cqd^+oJ;en}lOM
zGcD!^pJ^rpTJZ^dXTqQo{6>n4#-7j}I*+ALvJGqJqhX1yBPk%Hxyyiyt|a@{navzv
zQBNoZ{q8FoFmp4wlnU;$8thnMBzl0{tj!T$jcDOS;{f&%)l=wY=s32tIQ#4~s2<st
zT!9MQCW#C+*snBSPfEM!LTESG?3`P1^7c-2RU0)N=kE{P6kYb`2&+8|H;NvPl&HSE
zFb*z8?ZuNqX0(?3Bd?4Hj3es4aHv1DGdb;VxGAN&JN#rrNum?tE$ea{V#`r`e4nAx
zZ*;1Irs;=5ee?|wx4&r3bM2G;fgKmH@o@+En)O{KhI&(76)oe;Zx8)vzh1YdZbJWy
zW;CF>#cmrkTQBtqU3R4>6?WWhblniH;kp376F>?r7VoXC6hvya#6$bjbYAlGsi07H
z)H}f!^nzLtIHMvLBgweixY?$(HO_lAvGyr7qcDnDSA%;uO*@kkWZ#j1i*P3C=9|q+
zoQHW2!O1u@k-?gMHKc#1wIeMDQ^mT#ngm`1e-3IZC;GJwuU#V7;$>~bn%Wx#l&Pvm
z-~~7a%-CW!a(3z%E4sc4y}<geVlf_8wflE)sLQ^Gw&X%Ty7;r~HS*DVLc=?~S{Dgh
zp^o<jPW%QMvQD*w;=3n9Ln|kokyRPAYoWB9>Q~46HPkPZAMhQgXtwn#7`j5ZrX;2a
z>Y-#0Sn*3fJx*Cn$3eN3HcN@(bdBd1W0MV+a#!z0mpTw<Lt96<6u#)@zq--1#oi5>
z+Gh&nF?5Nxu&V4q7`hrq@~^vrLC;LienLc&b$!)Yh6FPTCYB5<+Vuh36`D{R7#O0u
zxBfK;m~x&exXwu<))zvH)b7#7O&iENb*5Ke3IIz#U*l<jYXnb?OFev1YKz}{4qafI
z9K%PqL+e5{%lm=TOvc-1urD|5bKr$R7uH)L)NAu<DeTl#6X1lae?6k}hQCN{mb&#q
zmQ|h>!Ht6b*0FvHtjT^vy-(%90M#k&9N^e|PLV<j{tiW%w5oD8t#<;cXN?h^paU1M
zU$Q~9<(0AZ`;mTg9xhHhiTJOvcx{PPU<{I#(^)elsnBEbOmDf9Zd9T&r74-@h~`~4
z36Sh>G`mP88f3m(Mv85)_)$MqPkX^aypi(!veDEUAMl$6%2_4J&05^jCncp2(1Oht
z8;2EvfE&qrP^jF851=IDez44d5=cAa2e#x9SOhyet_hu!hXJs<1QA7UV0H4oOEh4Z
zmGmuK^Qn)5$+ozXLCGw)(W-ZDGfJH^^u}%A+BQ0~G!AeR{Io$$Y4}KZqH<2^X>gP!
z6D716<G0e-1l}%g>tIF3^Ugan6U2h!(c0|pdb(+a@F%3NG$9bRJ3<P2((uz-Vp~d#
zg;77|M&Mc29EA|w(7~iA^FC|?it#q?D1_Ho`z36li)(u<Wn==iSAXmd4l&?~s};&0
zNmto%uDh(t3u%7KY;EGOLTC?k5p@+lPN4$$PZ%fr(H2WoU!R-8MxkaWaMXm*dS5$m
z?&Ngpk~EFV^z%e?D)ugekCzaRZ;?L1*TmqTjgYFFY<-!i_?08mPHhZe88@_bA`@-~
zb%E|($GKxN7?eXlV6V*tWVY`Ur@HD&`S{RgMjWKD4@Qi{w>yWzhD@CDmvG+T4Z)nw
zK!IG$Pq&e2gbX1DwY|(+U99S(1?=Y1+VV|vK<s!7Z`42{>gyu=ItPWbHu%cy+GhNz
z_@=Rpp1v+muV<+O^PEp6#GfB>ItUt8HCqp>3grN!F~odPnvdv)*<<*il<mp%6N6Jl
zb*x2?YtyslauVwZcskb={~Ezs{=y0z-fcNV{|MJ<kQ9DMx?Ww*j%gKh6AETLt>CPi
zUz}PZFwpM|rtnY3jI5<z_(;c7alvXkuG!)iZ(c3l#xM+ctE@w4BV=-B^@AMOY`*#R
z^iX_9#uJtnuyB4yJWKUJ`yi~~Uh<SbEz5&h6vneUsG@2|jn1y<y_c$yD@kV|77PBf
zk8WF`#xOk(Kjn9`!Ik?u$0F~@{yW`;_>RP;J=K$QDZS{kmW6S@Q%RY1cKGk(kL&9E
z*8Iwx;f~wEc3qFn1=J29{{;K+Mi7~t$+tv4Pm08R!~Dj$TM7Ds){Y$xO8bfPL>A)v
z>9A_Yc{1@nWK2HaH4_01o+d|<Jj$>nW*z0v1;`F(w}vJSzl<X}eX&ufF&L&XWqh2I
zwh%A<$3$P6jyY^|y-#&qgJs||fBO+Tk%K;l{UTn_A({Bw<=Hhw*=76kO!iLmAZ*21
zI4AJuR~FY-=Vgq`6{Ij{P=#GKt<`)9lwYoC{Lwi}@9Ylx(dJUAyuPuuyuMbla95N(
z*gK0MJ!lsNV(K<hylzw)&*J5@6g!u9tATxAp99NoaYeN^f0a#+rL7B*;7HfU?uM0f
z%Fw#(x>LqLWMYu8a(LQ>+3t_@b@D$=eY$swmy-j2Qd+r<Dcp42L#OtDL{FQ6i)+Wj
z*EiD-7<%DG0D3z~VE1_~aJ#;C=*iuA0aJG>!WzdP^_T|DdJ-3cI<2U<v2ZsPSktnp
zwWk_3Xao~OD(s>q*N*2`N`E527o5Vu|C#rFs3@OGLuqv-o#n`cj|_2ja3p=W8#Je4
z&ZgH;k_5O)cN{%N+Nqk9(OU_CJ6)OT%PGR5%`YACH*em=VoUaQZmvGtZj9_t<EOEY
z9hS~oX-|T5vsNz`-bL?wC_iFJgl0Z0ShC+~@8oDZH|M&?{O}&>`orcMMPRm3#Xc<=
zQI#sWN4A}+8GdT*NQx<^Gc|Pe2q|@R|8^NSNN@?J-lJc#kjzw1Hbhd7TRTQ#`>d<g
z0mE;f2sj?^@)@oqdLFkf!I-#`bS_EuNtcXIskDr_Kv=sC`_kt8f-P^}VTvjt0cb>;
zk+8!R>{U45>i;=P?TsN~>>yrS+KjJkUpsY5zKR|FH|TRQ#FsBM@SO)EAu2-k!}7<u
zSZ5{hej?Rh%(i6x@cF~a;bN6J$tVp50K>8oNvdNxac1^OJx2VbruMrML(xD91;l<a
z84tZ1$CK7C7#$^hfQkJ8#ix#(c!5bB=afnqPGO_%&{EYG7A97(R(E&}v4e7~)RoIx
z;g#)QRQAxW!MjRGQ=ApRV0z!64!+rs3GnBzOB;pf6wW|QzH7i?og{nmbp&M$01$ca
z#Lj_?KZ75`)uHYj*rz~fRlpn1MqOLmE^lnEZ!B$cQh6rb-R7w3(t-{o$poZ4zp$`W
zDp_u`BS^=I8tZ#fLJZbUGd5-iCtkx~LT8o(x8_w0uE~DHpHB`IIlxKNd^yf(klDdz
z$x6h+Xi8`3n5dgpkyDdldt-5>yt2Oj+V%!U>|5JZeQoK+QfW&>U)-G2g1BmEV@dyf
zaelnRP<!T)$cJfPI!1PWD0|Y#xAtp-6S~x3JWM_O8I{0z!l!9%#t0J#$Lzn4+lgzP
zOwczRR;k`OZI<jfwlNx`8ITS(ylSYWI@GIT4V!((f))L@DBsx&n*FsKfU-Lv>?fzM
zb8^mxDIrcBrLIg$%>vf}<kV5+?w!+-&)2HlMj7r72c|nxVvy6eSVo_o<&#aEG>g#A
z%eR&xdLqrI=_cZD(_6Trfe<|{nZnu4UCBhXh6Hn#dB+W_?oO}d4A719;5Z1fd#`SO
z+%kku@J48#1Y1|fOiidZnkV-G6ITys*UEn0>+@Sn)GJsx*}gUlT?6+}HdjQ~QnO9b
zS@^UNB5QJ4=466gH?!Uuq-gv={_|r8^rvwqwZ6F&J@4-mm5H^9U4AuwJN)|b#C|*h
z&h&U$C{EmsC$@O1PB{MetS|4pzhCrsGs@!`yRYeG&PC3gyKsIsZp^&Uj;}5*EXWw$
zQik|fw-#omOAE8J(>Jcop25J!?}LgKLjms^Q6|U2bSHkT&VE>_(c;)qz5RS#x;>bR
zU+thR<*@8Ldf@nl=i|lKiZd5x&d0BHcIxf@%0WAJA7mKG3p}i^YOmC84~KhGHR+X~
zJ9j=lJ2N|5yl~ze+}iuu+4JF@`dYnbyq)dLi!WX*&de5rzwn&JM$u<)-FZV6MxVXa
zUen!q%?AIv6N8C8el31*t<OzV<B1AJ<UU_%=(coLJMO;aJ|h#|@Phu9ckF$&*RUKV
zf1sLtW{^ofyOXc42lBPulPiGyJ&W+=0msq<XV|kR7xAh;8hf?w&K0g!ocu7~b@x@X
z{*0nmeSKf`AH<m-I@L<anMFqHe&cto;~f7j)?wnffX^3%*e|T_^z6YE8&Qri?3B|`
zp8(%9Pr$dWTi~0QTHvE!XN$+@qZ~%MhrZ?@8;oAHI`Tg6Pfl+5yZU~|@ca7Q#OmBc
zDV}&kASYVW6Se6HE7RV6v@b52SPsd}{L{W=uDB2Q1bKfy0sfmR0`_UpfnyGm@v|Hd
zLK0^Se8W5#`s~Qd=FdNID8V5KixMZV%C-GC)f#(vQq-x5$stomM+i7tg0+Cm-ZJ~?
z#GR0CGEInq9}ex{9X6PRtMh9dabCVABgb=AF6y&d*-jp_f}3sI$q+LDEo+)@tcuy9
zRUp2gt?09^%#)#KGr9WCoEfjO>%p|#hpq2;zW1zeQnY-H`*A?G;cD)nVLy}fo8U>B
zktjEFA%6Kj1EwC2=k61E`hoDW7=XTyBkL?}#S=j-uUR*%p!b(62;v+X>T5M}rw+_+
z@Fe_7s&NUVp~)Haz?M@m<f=Wic_cQ;I+oDYAoREIZY_vO271~sGznl-gxkr0O@i7K
zJnP0yCMbyon#VidM?eaRY)E~4Kq}npqZqLR+biYCXU;qm`bTUUl7FRIrlxAAFM<7O
zoA5#cmB4|gSdwTaoE`4OEG(+talH)P(Ak?-*DVjM^D^Ugv?Qy7OTu@{!Jx}Dq_`m&
zp**3yOR;CUSC%otNl%<5aCCA!Q$P>@7P}ce2S@0=TN1TKUFnble?#4N*`-#;nFay=
zscawWgO~FJP+Bc?Ey!GwMv`F=A0wSZHU|d`j~w#=yqn$t$t$#Qhrp3imKffPmu2F_
z*$51KsZ1s$Y~GR|zu<OEFKEOJzzJ}NgQ@|}KoQ(a<6w`$vy8{<IUMv2-U;c6z#q*>
ztr&4J?ljEGH)V)xoc4FXAq(D>DYx|B)@;|varnC^T=s=Qf_J=~mR0>Xp3fpkzc%mq
zzU8&6ye0MA^=c#Gsi8D--DG!4h=0r73_ptTtobCcN#&!Rmx42X!mwFOucEKi_Z<2<
zqoUc1zRTd6*0DP^Xmx?gUk?<&SeIhQft^&QMbEf-d&YoIB_si4?WS*+;<G~EOvrQa
z^SC(#*C_%=`lT|`c6oJ!(<`f2)P7~w@isNvst08dQDOzQp0Hk$AFQs<e;#@|;ZOe&
z?gGMj(wT6c^vu+mGiShqWE^(80YyzkiP@=rlLXyF3q}|<H|6e@cR2`jr18^X%Hm}v
zO0Qxy^VP`0Bc%sPq^u(Q`rswUZ_RY3Y$s3!$}UKndhXe-`iH+fKl37$#h=v4Iek8k
z6pW%W`bcKdNqQc05CI*>i;Q+8OgDrQv5)14K2|FC5kaGsZdl;9z)F%FhV=k)3VSCE
ziQByTT&Mkvw)#IuvS*%mTWhJVMj1!)c_GuCsJ+7xPb5t%e1hFQeAaoJD=8gD@|lev
zUtnuse2A1NZPjkaX|=R}7WN2Kp6NNY@#%G(>;tT?yk5S(&IcZFN9QKhID9+rD7r{r
z^KB&__A0#{ZJB*8=$$;A)$Nt7WtHRKH<#8o7ne4ZcTTI9w>Fno%Wey!6w<A~&KEeA
z7nepO$Lk>r65*TtM);DEY|Hyn*LqB8>}n_8SOU{tOC9eL@We^udQV=3WD()6(zer1
z@wwgC=a*NawRPN^Y_Bbb_^r)1=C6g#76RQWg&erPw#5-JiOzPdE^V5TaL_nob|RIo
zs9ax%D`$N=A3mW#X^%`TJkc))O_DOX(^jrQ+PUBm7;Xc!hNKF4r{#4iO`9AvdcGW;
zzm#v1Fo8~a3zD*Y9PXoS@adjVDvhXWYU)a-I4sMK(bTptO=xq@pWEeQ#T7H!n|!v}
zHBT>!&`z4><w)SAI7v)dZ?pTQ1Jl{$*|5>nl;_hs|5Nf_;3^!#%|HZ_m$+(C`KLmx
zEX`zaQ`Q$+57bs95-Wcko}Y5w{|r9WFr&%tm(`lqjY)lumFxR4lq_G<*^xS?H)8{m
zPb--#AhR~2UeXImO_iQ92g@-6V=B8(*49qN@dg|`OgrDdkdcP8MrLuhV|%{wrTxL6
z+n<}BhR53<a*D9inwBI>5yPWOuQk2#+O;d&%PWihX{>IM%`a<nfNMn4WRyb#Z+^It
zWYaU&(!W_xlw|;yh`l-&stf_mA~~$bg&K-$MwImv{4V=#I_q3#qmDk2Ss0_-aY|ow
zR{n#smWZkmP0OJ2Cjy~FX%jV-{Y+LRGHC4Je#Tp5jUux(+>bj8lsK4d;nppzU(U`~
z=I^#)?hc?&CVVya5+cvGvnY$2j9G?H-%_1Ih5!#Xoz1&68|zJ6Yo<v@oqIrKO3S4!
z9HF>c*?AR~meD-~#l;SFCx(6lnZC6w45^E9!yQ?Bp2l$q2U^$GSJvk}rF)QmSXrAj
zX&#41#fs4C!a312F#<NhP>w-C61Bb5r(tM)v1VTn(*ah5nc~m^HpS}c$0O0>ib!ki
z^?N7UShIBRbDrq4yHm;-N;P>%UK^yq$Z#f<C$7|^s@vUFKEKba93%b)e7H42J<asc
zaQoQ-mBn9&@@w8GLeIMNZfAcuDQphDy^|5<QI9E)Re+mHxIe)!PFcrePCLE29KVRG
zG9Q~nqg7eB&L(^LRk*>@%DO`l2mfg3v_iK3Ark-`YPzqv^}3z14)v(%JhMN6@5&IM
z7gx=wq4}G67hD07_Y-zRcSE}DdGWBf!q~GF_qzOfGKVux#(+&beKNnkId?P3+Qx=^
z)i#8LL;;}IdQB9qQ3+-N*qsIti!%}<oCEDcZgrY=7iD;om`-W4BF)a(A>VFxdCJ}u
zl?jj!Y#)h3^A7ddg;1i^*KuK}MNcg1VUvb*ejX$nOHO}}2fXs4xm<$9vTJ-Eh5YFr
zlk*z}A7Xxme749#!6<crr76A%I33TCv=lz;4QPx`plUivvyH&ds7&VtL-=81Cj{Zs
z*S5<Bk~p7lep>Z9k-30#TQfEV!@>ci?6L`8Kc3Rnbd;Hw`3N`x5Z(0UIhk`$r9!A3
zs@0dV6f3zsBa|D!2jpY%IiAl+wK|`7VtGNac08kEDDgh|v<NXHk7o<zC2|;&Hk(Cd
z-*U`M^tqN}^1X@K>f7;r7NPMPmy3Kv*wu7*Hs!qEgzP-1u@dZJN67?&nQ`M1*0*Fm
zbit$RD28&dvu5lp`SCvfjywzRFoPGfzc4KdBa--If0~&7E!Yj?qU=jKS~K24pO)lF
z)mQR=>fvUTNYpX&{a2e?$Zy`3-QZ@-#U{+(%lk<mPli>@8%E)}#j{=6a<QAYvRLoX
zmBQntW^q=RkvfF+G*gfFmH(tV3FfCf;5m7WAJ)wGtcK9!MK-{|UL*PTUY7*nRsef9
z6`4{)cZ1L~EnMywC2GpuQpK#myjhrb-A4j0z@K*|s<BHcoxs$-HXLL-!lXDSxDSY*
zk#Dp_uJsEOKy=g<$;3?<O)wO=HhBckl|?xkB4@<ryqkLwYcdrar-FIFbqUDkH;%7H
zBIjn$Kbjn8O_nsKR`2Kw>h*Kp;qFM_*|Hr3P(7^Pj9}=(@GdS}O|f_FGV4$e0q)(*
zos`|Zdjr`d{T^IB*5_$_^6Jv}x<Rc19neZp#+hmJjuB*oYU?zIzHkakY|&ylG8sOq
zOB$p1B)CuZ=n3U^40*d@d;89pT)^M)bt+w5GJ`}pi={1-O2imqq$4gso=&Gr*Kl`A
zzsMb{+6`YJ=V^{;@b2MDT*YD55n2m&`%GyN@6^qfUenCZg#}N3Y@5rZ2!)$Yz+t?_
ziHN~aYy*{k$dq>8Ia8qH?!>NpYDp73yFwsvAJ7jbhO(MUY<A|I3Yl`)s)><m1CGOS
zD>J4IV%IYgtyX8J;*!J-Jo-wP##3>w!kC_UPLO^b8FzDv=q(Fq3lsT)ZW2>G5ES8o
z_iLEo2Lf|8N@$bCLno+UNhFJ98-7_`8%iAaK&W<%uWMeRek|N8l+Et0jVo~EOs5vJ
z?!X^=PrYLY<FQTk6wto>W%|zvy!wa#jdoE~WUA8ZIw1uRjqZh!_p$l!%^&gOHKl)m
z8Ux}(k40EoSMo>>2j|Q<m`I8}zSuQiS}Iw?pnGMO?cN<fQ|x&*#U`|{D8B78X+kdz
z@T3lE>T?j!W+Ib77Zy$KC*FeHx6k&wvw@)#Z*BIkGKw{;Pb)R4j}D21i3>P1)m|L1
zb%J9lnffVhxwaSC{h(^=4QvITkf1hozk~qnSeTXqKB$V8=y()-g$=6JQy6h9Ni?QK
zP8m;YMd0gX;;-$n_sN6;!*PE1&;LMX^gZ&wCsX<!`L%XFkU1s)vH3N|pbGDp11ys^
zRg(2b`;HO^pmL17v|a!+c%wO7XcT??!;e4u!4H1m10N_93VE&&{vR&hz4<0D(=ZBh
zh~YnbVed+#-5TA$`4iv#Tlr^y^bXV4?%?%7A4qwfiLyAqd5zuZbu{@1pr+yp2cOaK
zpz!gGuJY<yLPo+Hg0dt>>+E2bx0hKeUq!7<^fq|x9A(zBCvr+#*UCxRSGU&|WReeD
z^L<K;-BC)Lc6$EG%953;a`9lXew9ytuW!Bq_=QUQ8E49h{b*u|s<WLs-=g$u>uhT;
zZC;&USR(zJ_fNpC4JR6OA}l>i=h{V~%X~Y=(jGrzy{vp#M#W1ysLF8>PRDv{L9Nlr
zF`CKE`BnAg!p8RL=VP3<^X!*xYl&r#KNWrJ%P)Vc0(7Sr?Ahv}liMa2F>i4<wpeeP
zCTN;-?$blIe!OS5D+{k0yp4?oyD!gQFurl#yDI0trHInT{H9V^C+mLIZFx8=BkU~e
zPT=YKfTqXPrdO!!`tX+9_K8|PUKZ$r9~OX?$K!g(g5fu7L!DuBTSKhZ(sPiWd2jL%
z<=Xkeir-IiI*2H`yYC8Id2@AMs=cYbyDBE)9FE=RSC_BN^Yr?vqwm{%Bt;RguTC#0
zXdZ=QgZJwjS1keOni=v=KR9lCvsel)3Y0Bc*qAoUq^<Rhl8nl5_hI=;tEK60SzLF8
zkZztMv{Gul?klqTx{JC}cWJg58Fl4)Y5Lq5wm!Mv6#T{&{iPhWzsPxZ+NHgbBiAfP
zw|TGjT*sRKhYhT?OYH9xZtvS|G_EcL`y}{*n!3g=sj@iPB$ZoH?hZnPQFM|ewwA@3
zJ_LwyU++$Fd9fezkA#x>=FRJdNNelG@MuYg`rK!&jOmEW>AYrPR%qXu=tqZm50c=<
zp@zL8Rz;y63eUV+Iv^!s-a?;kRVG+_z(;AEYgj2ji)?3ey2lFa-)?m8^KN;H=8Tqp
z%)oK!-M4i{!hKo+F8T3czF50AmrDz>TwLqeh(!yV3+9oTyT$W~_u2CZU>EPYj=1C0
zxyWl)O}@|J?|z;P{5;y&ST)VF#$PEe-kmoNg?VgSWpjQa8h+4uz5cF2-mkie*BZF{
z9cR`T-SP8r!G8<j%9h)4E8Upi(39@xxYzC=(QrTX9|FcVlufYs;@$Y@Zrr@vs&HO`
z^RYe7clX|ockadmemi$(b)V&E-42?top_IMe*2ZUso!0A?7N&F$LDGnMIdL?(XR5D
z0d&lFIZJ-G(T(3G3~rp$jjSvEMtpXUL;42|))+o^)vfRGN56V}*gA+S6}e`Iq&6%1
z;hUmD+}XHwPWN-jF8G$%+oP~5g~h#A+`Fyg=*TUHm6%gU@!<i0xbbPl{^2g?%v<sP
zQG;JU-fQf}Z>z+&De-N%tFELTjF53*&NrX%3mA9%czo$o!9&X6)F!{`9{bNnoY*_S
zrFyT`1iS>O-MB&<*q24nswp)|bq2IgVX{Fui*x5jpVP;z3hf>(tnIP|K)PBZhBn33
zE+4zcEkk^;TZ<3&`3?ECs(jM=fO`$+FPvCyAAtJ2;>7ZxMcw$*)}KCq1}#>cCckRj
zsNtuiN|pMRct76nc4_ZXT&0k1T;-|7x9{RTmcBz7R4~MEqY#d(NN0Q=g*`PmrTAcn
zL%K9qj#%i|T62#9-;H-KUX1zs;u(JDDS*L^`=4*p#&%;DHJJ3Hyxb=9ArM*P-i{Bd
zcI!9U<DoNaePZ~qhRWf*G@V9y`;1zAM0Xz1tfRi}%>mWE&955o(>Q*FhQD!ZALq~Z
zwm&$eA`DW$OCteW-D|{e6VSKl%HeI~zZ&@~gz_K#cNaFD-&y@Rr$6WQM+J2G--<bd
z(!GOfZ-<XS@-ce#2KEo=P2+)nSVq90Q(!gbvuen+I?>a>z@Vxh{afW^B-RJL!EU_Y
z?8ZlQ<WaN7Z@}*m<lrnW2+*f#{Uh8#fF%7RP97Z{!UYmG;GI_WX?CZ^iJk$!+8%d)
zwJvvlAQWdPxiii?^uR7-OH-SC2lB96<JadmVC!^O7X73l-EJ%1A^k30(AwK2|8Cp`
zPrAEI8qT^6c(0MJRoh|1aW}@4B|hYt|GWJ5_;Gp&TxiB>=E2TU3_aqw0-e*`VV2PU
zeE9|88Bu%38RX*vfwt~Y&OUev+$s@Wzg$31+gi?|)zX^{k;HEqR@#GMi}lc!N%R@c
zBAa5BETUMudosv*6SofB!fs-Hv$(RpcC9FHc(V1@wT)NQa4%XK3ua%WT?}ywd6SQ1
zEWoX~Sm-1gkY>F!gsa<wk&KpbmnEM!TkKAWv-I2W*hwG3YH00+dFGlgEi5l{cYLUp
z-}s=@#Cec&W3BoWRiX7IV=tl&3~iUU{0rfHa{cNuO<%$D&l;;7L3ZhV1+N_8U7FIY
z-`SS7%!p)r$L_4@b}z9vw(`c*uIcWGS9#Y~*01or#7uAC2YhYYKof6wPI6iPJ%8sD
zSr*Qxv+Q2N7N%aawXn}{MUb^}sDl#d-OR!)wR;b1xPrPEMrZ4<_iUT=o=rc}4!T<W
ztG)$t!+q`|3XNG^+Pc2Jn6^#rHHEgXhu$+fe3O<HrEnda4+qsL-*U*Inx6LBLwkqa
zZdKlP-?mYJ-WwdUvPk}HRF1A2>oxsK@~F6}>8a^gGJ{C$V1EIZX60^G{{DI$=jR80
z?<{V48GkfDgfGbEg(qf*@fnCu>^{PAEg0Jnt*Y?ylI+XUMw9RCY!RL;`ADS6B33WY
z;muqajn_7#GdPnz&=j~Mc~<45jOEcGGr|yM=%QW=y*qsE$GytW1DKiy6&G;pL)^-n
zSMAd+i-~`vk?KZ{>*2dXUQn3x{LB(|h=51l8TG3)-*gmYO<S6D6!Wmr0uirPoGMRu
zZOYumI!{$w-8gGCe3kWH4>u|Y;-(|`FN-hfI1}NeeRQA9vQ3jyX8e8D-_QE{xo8=O
zyi9uP#ms^}_`8jf;BUO<QqX65jjqs9;=dNX{%Lbz);Pkm1aLy;1xv&q_dcVfc6D#l
zGaPIQ3H<wuA%S~0*3;4h*Y3y%xL-)bn`rB>W3QVF=PZ7H<28=%?8PQW#ODGy^t%=v
z^$s1P;4aPr_^6uQ-(23X`(2~f$kSt(SM0g`#oifv0ACY7>iV=V-jclKnv(=fUS@|R
z<B`XvtJ#i7^C(mV(lSO^9L2%|IHrAKbWE44$f+lc3YiBXPBW$7n3Hu}u@6(@4>P;^
z;9x`#+gtV;ZQC2~NA7(X?w(ICxoH;N@O=3^9j?#8yVS^WOh2oZD<o6TL%ao6@uFeQ
z(%^`kwUGR~*eCORtpXf}rPRZJPuGE)i_DJ|zMp9^>LEOhxWj89+Wf_2;RX3B?Jt*9
zu0QC@qY$rp$P=QkMhK?-bi77$#>E{Zga^cngcSQ;K~Q2OVET0K53U1C501&u3H{ri
zazH_hWCu#}0JufCppkOrD~ge}I(I+cJGyiCFcKbl#KOB2Y$zV05=9f8%*R6D+L}8J
zFYsr}%OYepyx51&_B}Ql-rWryHWuCr;jI5=_`n{6WGFeAHDjkR-t(C-WClyjhDhR|
zkM>B(W*^$ZZ5OA>obtzJkb2rrrf#LtQ<>R%jE`Ht-834fva{)m{r26l`XYkEDB`$5
zu7R{Zt2~EtG9e0G%zTUwvFR0e$$a##=BT4rY4Mdsvh}fyg)s!-HSL``IJCcrwB+mQ
zkDsS_r{;~8rg;|Tzq2?Bnf=&h=AB=m#5~YAJ0hiLBuB8qM~<F&SDjcUWbR>RVImwl
z0)bEiiBCqy5DdP?c)!v1Qw#QQ@VOhD!{OyGxIc0H>$<*E39p+V17j{6bq1Gk>-tQ_
zD1o%DO6PI9I&+dz&WU@R+(&0-20eaN$4+aoYy9P*cS%|E^jqOG7gB$u?tMq3)vn@x
z-Dd8N*Hi3xjM;I^Y^1rb3*4~#8NWpBm^FvO#l17nJR?x)JAW7bfg`B439EQ1;kf+r
z9-S$=cg=BKxOcJ+W3@L5+~0Q<v8kwdpC7vJ(pMd!Mp$(3O{W0qH~S7wvt^81-`5Y%
z7A~EycfarR`*yQY=;FJ+K3!kFcX-+FdiZTeNW$FW?((%=1^exeJ#e?Rf~n@?eZAXm
zq3pMP`Cj4Ar>|VS2M(U6BhHN1n{mofljexq+w=}Q9VVg3vtokZF`rNC<b$(pL3uiI
zDag8t??21nXGubn1o^sFG)tm+o%I-siUkda`y!CZKcau$o>*#d%N6RSg&GGOb<Zs%
z=@o8eR|afC??8oIb3#53Pc9wDYU|TYzx*=Xa{|w&=M(_i&=bPdFE;fmL)znIolH7E
zBh8Vn*k9F6(V;%Re<2<6OPm&SpZJhF$!`K;$gNmE-s%T$`Js`{rm*7EboJY!ux4i&
zICrI(o_=|n{R8U@y{B{p%V{m2WAr%i9pkZ(DX4q~jRcHqQGO~p5r$=|@a3RUkzdmR
ztCkBGL5Ab$wX}>NOj<vKmxzW-w(p@ZD>k&-kLw5mS_0pH)~|AS?a&E+p6wSU;G=?E
zFGskzw)D@(@uw6K$M<xLTqu6p{KMAu%|(T;%9sUGu!y!??}ntdt~j~hi`(YUN`@G?
zTu`#8=Jl~H?}xeK-*M&idBy842n(zrj6XX_3WYxMsQb+MsoAL+4pq%wI5T_Z#fXm)
zEyRR#PGbdE0ZUdn-ZARoujJ3YddV$)_P&2ut#pAj=M~m-D5|x`tNX0KpY`|i(DXSk
zh|SHHmRA8D8-Q7>ivVInZ!*rzmbS9ut5iRpT)lqxv`-OxdLB<MAR!%{RvumVNzOjY
zcDhOCzF23zzc_+w`KY$tO)lo?O0xEa#0)3lLoplFVOw{lyTKo>)hp9RaN~RKo#vS^
zrMrZv`GY;HIsPY%plf{HZV0QfwyNOY`3#zkk5>2~&vBmJulX*d)Wv|8A~vU;9%a*P
z!I6*r`x4fQ!id)zu0pHJ8zt3<_UlGH+<0$w9ACS2eZ%Ty`&~yfwm&p?bk^U`&$R|_
zr{2ZuU84zpI(c-CETiw|$KEfFyk9sscVsC{PEB%qxz)!hhmTJR^zR-T_{V;Rvb+2F
zsB~EAo+IC)_ABSkNzO-DUAVF^=PH=KyZWc^!b<u_`z&**JnY{6$1s!lMC^`M7hOYz
z<|@MOfEK!+zu*fcpMQ6Sx_8ijBwp{?__M`S%#N<C%)hoY+wX=P$-B>yyt`&ZbDv(s
zV<2?FADKmUOsViQoImz=dyij=?e6KAOym=mF<E>_A$iA1!pK)CUob`={koBHx({6F
zd9p0`A=p-42|{lNN4&C3+95@3TyygNn@gMPdf%GArdxz-Bg0?SNy}y#dsYafrvlKI
z?X}nVhS-`V<_}u_ktA5=S#Rn-3xaT`zl-*)JmFn?YX1G~3rRYQXFQbCU8ElwAA7eP
znRpSnG`%4p=`2j?6~*0Bv}z8IcA9v`ne9jJzT@wnnIz@W5r;syL!aFJwy8s-&%_2M
zD(d3V?pK!hc6dye#wDZO@hT3X+($L8Lw`j3cTh@k{xebBfTz|k4w~qGX?tS>OAAl=
z(MO}`sx3=9fXfv(m?TDLWR&=f*JqUQ9XlW#7SBL&s@31!JY;Li-iLm{+N|_W{pLrt
zA8En<{70&#aYi6w@lKH2yuhoRJ1C0O!HJy&=9{Q>AhFWncv((|X9$4liG+p#we>rT
z?<dM}z|E#FUA-xZZ73Ga$<GyJX!P|u04STezz(p&%-2xcqFzFL>hzd_+t`k3B3_dz
zHxC;+_Z$KV$IrHma@Nhb#c~kHRWcuwY4C>5|E90_6|dr>FAdnNyYEZ~5H8*u&4fVU
zZuIImnERc>{wzZ!?tldaA4JaIxAc?ps*YCl_Mp?v)YJP@Uf?8XV-LF!b!=L?;{$2=
z-c{6{{efZ66+Ws4cdXV^E-G-TRM9ly!lpszIN+J^mCjyTps(coklEk!?txq#ugPCP
zwB>w&HeElh;J+BlZuepZ;)mBW`n84i)fBGNAY;|q-EUMg4OlurAx;f8y)s+sWj;Sp
zMF%UWz+VJT=q2%MIC4ic_5H$l;Mb6L8a^hcBBgKNGttQdiRO{p?%;yn^@_%$bEE?w
zOS1Rj@I{|;)L$h$rs}Q^pk`K)TG|Z8N$ryd-vz0Q$ND3TW2QE~B3o!%)_Z$wswOU%
zR7_+>-rSc}#`1E>0{LV61sM|-_ntZo_U#YNix%yx75!+>D{`xq9RqdPaB?rZ_V&(B
zwB0#8X?Ne;sD(dIQH<8m<qLvZSVt@|fAp?rQ}#jNu(#5*Hnot~4_eYK`bh$oCmn$e
zcKT(=!*~=Z;o!n3-$7YKJmTtlvOiWD?%4X+cZOM<O1EOPK0d%c>{Rsf%P(8P>n?c|
zUvdv}Rxe!GKycBQ$&Kmc-FWTH`zjwn<|EJ?es}q9n7jHrogrcoF4hp$kgzah(1CXU
zffm(WePSQHHDOdy3Sr}&-PF(}SV>3G%O39J8>i{S>3DMObVs-O)6K&Q+ps*APGb`z
zZ;rgoPYzF8nWi^%VUyo-de|6vKu%=sM?rMe=QglsL#OBTbpijgdcz<KsXop>w)q|9
zR5|(qH!oeU6Tj?zOFDIDmM-@@C<SHCgMOGYU4Ovsu>GX=cPn?yXx*Q9%$)O(877Hb
z#CH0r9Ur1vG4BP~jOxbUweBE9Xjh3vLEStRkG4V>0G}COHIKY5fBOD#`Tf46`-m|h
zwrG+cNFi!R8^bo%-oOpKOxC?H{3;n6gZLKrw?b|OatWTHhzI6E{X8qpg?&+;+_m4g
z>B9GrOcx!{)4ork7s124LEm7|QcV5a+5x)S@jz@f*e$BKk8+?EmkvrcjfvcM?Fy=V
zpE#IXVylicX5Rcl{bEZ8BHAei56C4mw+%_U7y`$3f;8~&NY4I3*s3svGU}20!!S)(
z+L$T9^z>)d)jU(6X(56O_^Hr8a1Ao8)6|qELsn*dod8JUF+#r^_Y;g+eZ?Vn3O2qy
z*?)+$oQX?_TM=Wt>>NGVoWYHgz>3d-Ze_&*2ZwQU`vllWnUc$4l~Bm0d<r^ApVS}o
zZ1*iBqPFG7*(ed}COehmRpq{7GG4ON24mkCO3F{C^A650`K-}NliCBLyk+|uftnh|
z5i*66UuUk8&QQ<*C%~+*!cXh>@L2-?Z7Zj@PxwHus8aKlItka8iHxkcP}Xa||6(vr
zkK=HlkGHRD=ziu|%hhAzGw7BG(ao;Kq2u2ieAmTTHSsk8H`7jthu-*hlO*ATtzgTa
za>SDs$n+CD+@xp;NORj%8=<eGq{tU?5;bFdGjtMB0i&f+%-Cjs1(va=4=9`*pEz^z
z^fw(#b&SIU@!O)y$45V;&aNX)WOV(S4d1QH38J((jt*zYc(jJBsc>6zAMi(MbX~Pc
z(KkA$wG6v~6W6z6;ht)RRWRPdo+f@N;=f(~_>R5<(T)i*%X6W#QTBj;fqHxS&xAnt
z$3emW!^I+&0h~rW9nW5XDDWf=+i8fYOgMXuJ<QxDtEXceT)v1Q^6Z6pneRr%8<m45
z29tB987!We#YDjP15mA1KA4Nx+{J*z8zoU#EMq6?uH!>y_~hFWZ|#c=n9fagit%D>
zAO7<T2fJ9DNR&F(1w0?mmsUw<dbT;NMJw?oG+}Z@b2+|s$!+P$t;W<8&Y=9Lmxbqw
z7Dn5PPjKs%u*Lt@6Hi=1$`PFY<tJiv8gubHt}&Fum_-kYs2!pbH6ZUb-cc{<yFxB?
zmTMxuPP~~ZU_5X<K|HBt7)1#^Bl?%<N}O+s(*W29z(S>29m>)}U&q*w?W@UdU(`U7
zszIvKzI_zMBq&=)IRXLX5fPaa<9(7hNxp*c!<MR9IKvYps{qlxHu0OzV8T^8B?Lqd
zh!x8W1>ifP?7_0Rn9V*U-bi}r6G&;=gGa>HZ`xw-d&F1~eWJ`ZeL0+VsYFl}um2j1
zVv!73$Y4?FLs9nE;$-m1#5s4okdw61xYfH=ym#iUw{Eq#&vHM!RebBMcaqfiP6gA5
zF8~(Bf0pK}Yl@Yl_XneX^8^^3cPjV#_XhWdDn<J#>xc?&yIR}2R*pIuT5CSVv$#sH
z;Ez^Gc6M%^DV}}HgYf#aW@nGx89rcVDTIFki0yyN<^kDVvS6oYN&4?}?$z&gzwpkP
zdo%ZDLxnsvM`Da=aUs*DgVPr??5jIS4sEOMjz%40k3$(@R_#P4=E}CU&f1OqRJGpw
z8V5jFrg>^GTJLOxGwS_N-9+Kd0_8*i+C~?(T7z3_p@-64YH9Ypj^3v`N|R+_Sx?RZ
z=V&IL<S@JJwob<o5Cy%6yUZq-s(D!Kyt5cSXBaBA?sndiS*v7SD$hPI@<>P(-WBVx
zlb+n94{alCxD&GD?BB-0)@65QR9X5JaH)PT>52KQ@kT(Vezp3JS$E#MvAlMVBO;-2
zZ?0m1nd}%>XjMlS<v(X?B~<%9vp~#TSXsK~9<D3}aQEJ6)V^>MOp#DGjUA+3^_FSL
z@A3D-xqD92t=r5!JGyc2*|$788z~D8v#fqc&&T!WA$Xpo8!l)|S}2|+v5vdTjG`6I
z-u*4ezNTA7ZEa>Ph*Fkh_vqF;>fJ9W*#b)s6jj`DN}M>hkx8P($*~kh)#YoiZGf<<
zcGG&rzR#z9FN{w7#Fpu}pDKJOU|-)2lwo{ImwAE$Pl^Da4vjUiZ4rCtH$2(2mZ7&M
z;ceF)*w}|8Bm0lz$+RFiNNZd42*@TfovDQ@un%?2q~!aA$7FCz*dbBI+6IE|cwdXe
z-a92ifxKdG1qlyKz2>)D(_9WMi{>iNr2U%bYfbpWn+xWsAcXXSh8JF%8tJO;?yXtX
z9FD?1)^vyOX>mSS+7ClVzm#bH^sBy+kYR8`-zbJ3ui{K09WtJ+zffKH>1DeVRR4KA
zSs)0IUNVp|SSD?x3SDav2LJQ{yZBU{ImiBVyds+)rwnuq9E+s?O0HW}5Ba8VkT?7S
z2IT-wKyBzPOs(fbtQgKiP)`Y<zM3Mzu*{qoF%%W=*TUEiVHjoS0J9&kGVK)yqxH`9
z`q3)pa9{AiQffJBE*DSY9<sveE*v+7uc;a>#IWX_Ek4640EjNxHPkE)Rn8zuQKG(M
zqNWlI8J1h!PrY^P^Za`Jj`-c-cbDHOoQil#x5kXsP<xibe>_PL4&IRl><hPc?%lrE
zy0@o9epWmA(WcDdt^bd`_kgdW==-<#B%${rBA`S?M5H&dAt4D62}w*sM>+^d69NJj
zP_Zi_qN1Xr*hR&L9TgROLq$YX?AUup@?O8)?<AAMiRk^@&;7qY@58{AYi4$KcDC2E
zdx9N7hU+|AW*!nr9l(1XN{_YLq(=AotrSm=g}<!`k36G?Jly7ajt%i&JT@q^dz(Wu
zX$X(yrw(GX!4AzXjoGiU*#m^f(RST3RTpsz!c`zzVC=XjS}&qQ<}&5Dkg{Vh(Q&i8
z9>jrU>4hFU-nMG-5U$wU58aL?Zow~BdbLW6T!K?Pzr26;p+3UvmR9co_nj3^*h-e*
zL>Hv2Fu@ivbMCltc6%l$w8!FXmRlyl&Sq?axyu7wh6qQ<wyd`0(eO*IH`&^2`7WdM
zlqj6+fjbd#cM=B_@Rc>{=l%2Hl_}R>Hk)IMQxUI{&dqmEljmoKKMc^>3(sG0Hfjki
z$nJ7x&_Dc9#tfdH<-VC~B^P?!n5DM~_vJkA6y1um`-Gjl*w%pCaVG99nz#k2OuHLd
z5{-(6cPPWccI!BbsK1V_RZn}%j%u_RKfUS9cRIqGj`Ap%=66JPw~@QI{6@h3THNk8
zvMfh;leu3Po=&px+Ey^UTx3f__^t@vpvv=__C6Io@)T{qqW8l2=ii!V-dCROJlb9z
z=H?E|Cwtn_Bsl<N>hfGeK~B%Uy>jz<WM=msm_GWzkq1sbaQcD#zHsK4@WNwsnUnKp
zdzS&d*mUKdQ^|a)nqfa+wIw6GQWq@@)a&jigconZZ#jo6qncRSzn1?UE|8U8k8xua
zoy$ho151|+w_N4+DOni8Eb4Xp91a3h2VK%M@uEo?UZDu@F_g{M+E#M+p=A9l$qBC?
zl=kkfSGeXx*DY*#CD$zqqA%U5#18r4%30F8cYh+9QRyX5szznJLECKPelHuMHtyF|
zcD>3ycdJ9f@N9(nZEv-klp5YQwPk?&WA?0f&@22DT`Kp*im1qrb<=r+NN+Zq+?)=7
z8P9j*xckj-@WW?=c2<sG>i4yRx_%qY4!dN?$<+=&@88>&%kUZkr`9}c8;)GGi1pw=
zlAi&x>*1;h_bH-VWzoWBC8|~}xiS~_#ZU3W;GT;MGs)@8OK}T_=h-_1!tTApt0CNP
z;0rRD;g_Cr!uR}=Z@0YzURxQK8<1sJO=w?1|IiuH&&h+HS=o#t?=Z~aIe>i159({5
z5(~JsH$0se8)k;3slR6dU2$ecKYJo0EiZ3iL7{%sPdcZxzRcly*}UAKcW!pr66?$Q
zkA^=Ww`Z6hke(HqdiZHadN@qW$R0S{H6iNWb9g`d$pra5vwG&5(|gkr+#|aW+uzhw
zZnca>1iMBS_C@=6e$%3*%Ujfe3o&;5=N?nl@^1Il_%8F9(mjjyA3p!7Ep~KJF~;u0
zhtFASFhO4(Te)-rU$D13mbM(QJ1zO0UZ%U_qk`e{5L`y$L?CQ(luomY)?o?nIk0eV
z*V~Th_(^|HJ6`nev)XM~>mj<^&GS)q@td@U&vOKJuv;>^;eI%koBR9}BOFeDHiFhU
z+8?oe*_W}SL#MF2?dNO~g!K{$FGISWGWlIPMNjJVm~c#MPP!)OGbBOY_&GDevmWiM
z-F0KP>n{D}UN{)uL!j?(N7oU8{u8DbaWrq&;Ow!tAS)v(#}zKF9ozAs`m<9wPNveP
zMc2jMs21>39kSivY(7QP**!9BBSsa`{<ox9zypO$U+%rQ`gu>j-5qo#vPX^zACS(r
z%bQ+1*#6A2PeVnmVtpt~r3v9FSC|#Qopj~W^n;)10-}A_d2H0q-f6Av1`Vgp;bULX
zMxk`VhiT@A+rqp0ln%6&-f_FFg7NK{p)qvR-HmVbiieWX*Yt{?yS#rQJf7id8gFg4
zL2&;&Y-}{Y+|p>vCHGhCWLfRVDsz9fbeCUd2s-oP=L#jCd$r%o&PWZ92B{(~x}Qg#
znS2W<d}VP#5qIF-Sg^f_W_R@bxJyueLQb?`MAIwPEoMQ!cW=s?%5@%ZZrgb96K$^^
z_Pe%fmMoZAGom9mE>w*S??|wKb4F;JhA`NAYeNgy+tR`EoT5ELlG@k(#?z(UZ#+qt
zcBG~-?K+YUk50ma&S;b9{zgOfx`$U#?MeuT0)#T%qbq_OZg8@pBCdOQyij@=!g4l-
zNyGde%^{y1KH1@3c$^gN_rmiNdL9t|PKPTkIyB%{))QJsCo*BxUOL?3M(OC>#0r$8
z!>&q?bO$B;M2qc!J;_)#lZ`H~w$TN+lH<FQ`-@)Nt=@3Ep5R2mW+tyAu&Y1eS+(5}
zv+_E=3J=t6RCF9)a=@b-0pTq7?*mxB7W$0k^#okkh^{G>UQ>^{Qa|?`IPZ-*mtHgv
z>~bMD5v`?mg2TKC?{7wTEW_zua)CXp%9VEYmYn}7Beiez1{ls?N`K6tX~PABa6nuF
z4f?5kwEd1A+_Y`1tyy--zw{bNc%wSH?!n0ukM*R^ZP(u3xG_6?<%YdlB7BtquMG&_
zQNTM1X7fS|droE=H|(Zy%XZo{JuS#{sw1OKslA$F>a3BRk4De=@O#?SBL2AXYMI(5
zEXq4WitODr_TrGPJhN%GGQ1na9x)1E5>hm6t_>&bwPkA5XV|;yunzWak?@(p=rtp}
zYa}cllqpYE$#cR{=kPh>4#e#;r)3os9n4n}+*{V!AMmlE;k^1{<fsX=+P6Q5xV?a4
zcoC<!yk>9Q)J)Zrb1+}JnKILgcIZT@sZ*ja1dry$YV6sg-;z_<FW04PxtYB0-zyna
zOnXYc*&4O4eMf6xnM^vAZD(h`Ry=h&525p$b$-z`CNr)(jkN<9j%rIQipHdDJ+yEv
zSLSyd-Lmy{=tzC`0XsW%;;Yl%)XD2JlS(F!o7OcNpS-fkATG)8pEJVe>GL8568ST2
zP89U-F?A{f2=dA%gScc^o>mp~@5?XqM;3LZmoU&@qHOw4m>t%`{A9RcJ?*=wBI-$$
zO+5*-OWV`anp0AZjYl}(xNO&+`0TiPI(CR3uds*G>@xLu*>UxB>6EaZ((E$zc-dh+
z;e6pV$R@IzFG|v%-<9Ka=3{%Co)jpZ3gpLS$0f`3S7tm)3x?To$uj+wX?JPCFgq?;
z+F!p3(TGKhPf0snw)%6)u)hvAewO2nAmf)Po9R<F+on%RjyIxy|6aD=f0$jSe{Y2S
z{=IC!|1dkRPxL%@UZg-`yrSp8@*)Ki`5ECMVO}JTYqXyA$q0{`@*)M2l@FhL&5IOB
zmLFD`7b%b|zh{?DvxB@yoR3<{mZOZG9Xo{iCh|jt`TS7FUX2k3`U{hi>Kh)_M=7h%
z3P<&Y`Ao;CK9|pIwDKm(hoZb~xkin1&(((8wbEp`UGtKZk0wl>rjJB^bZD8UBTRRo
znb#+rOhI0xK%#v3`uHF(QXr8Z?Sk_n1rqs_qv;SSkjRgICz=;2kjS4Hm5&ri<cE(n
z1$mJIiTr58ny2ln+rj7ci4OSkblfLVKHR)>o*51%kjM{r`<&-S`4aij70NtasC3sW
znO|WO@*?rPcGMsF;h^&LN;-*pGG<zdyhwpW{_$atd65E%{OGtPFH#_pAN>M3FH*_x
zk<0Ek*}v)w;QqeQ22`e82eyqfCL}zhV836o7u~TxwxGN|CQ*+CMIG9O2Qc=zExxpO
zyj}zzjwF8yin?0o(Ia&zR#4PFEN=s|3m|(0-HXfn7nIxWfLQn9Jz^DOKLlGS^J4H|
zNy!_DT^Xj%Vd%#P`TV^h_D%78_@?+C{`QKEiS-XtmgD|SkNqBeL!DK3=n|DUpd^0_
z<;wfFF4!;S)!@}&Q}VXtFM?XJrm@zsJ7TZJeu*_sIwEOw(wRxOCB2&TQ_>#EhbLcK
z;p7VIDtumHx4{0zhXKKWFsoL@Rzc^A{VT2wzA9cD9KyfLDlVz?d!>CVe^s1Sd2;0!
zQ$9}ls`!WsUlo5<e133#aAeA`N~cyzt#U%;zEuvW@<_$^D}Gg6vC_)Q>no?n&Wr`Y
zua(#HYndQuRcSKo=5bX<r<|E`b4sh=_DUm@&rZHG`I_Lz;=lW^BW<h|M1Q-*dc~>-
zd9lH<(XlD9#j({fSIY`&eCZ$5>iUawSVP0u37Sx4mTNmso@Q^&jbHltj<SM!D^Z#L
zJNWAlAIl8C032V}o5gPye;&NaRK7B}EVwwhFnBtw?VaHH;GUpYurjzNcqp)+Z*B{I
z3w{p14|a<UDIQW>H&zQ*k5yrLO(s?xd>woqd=h*Ryi3`Af}w2lrUpg9=GaBS@?cfa
zBsM2FIOrHVD|TtDFEwVxCd5|6?vA||#A3e{|NVdG2CoNC#&}aJ^-p8F@louOU`22z
z^`98le|Aaz6JyuM9-#iDe^mcM>VH1QA{7Q_OISP!k|BQj*CEeB?MT5f;S1|0jj`_&
zjpnx+emyD@D!v}8+Yc4}L`gh0za$z)VkPZ~>f7$BmAB6;TfX>+xO8!u^!(zu^1=Kv
z-Gh?u%U!+(L_12q@on8Iy8^PCK5-44XVcXW@zWv2??}8tTsnR_g&PB}Onf_1PrLss
zA6L{3$CY>9rUpB^@o;WI1^YvD*bgq7bLwE9Yrc4EiqGbU8(-kF;qg(=`7CXFPLB&S
z4m$4TKOVdH`nT`>Y{=UF2Y*-RyFu5Tdc@*4hBdi$=`EEu#)h0$cg^YTn>}$-^?pT1
zubIC6&UfeESaI_eMc-ZV_~R3<_~?vYYra``<>R$pxTbousjWV1eanKPBRAi?YUrl3
zew&qlRJWy**R{Xtnf;SjJw0#Gqd!#JvaZ*KH@<Py=;taPbHD-hPp^94{$2NO+-BS4
zR(<Q$=vq)Xqw3g)s!p8M=GnEUoZf2s;%l}(dTpO^jc%HDZlAR)j+*rJ9$Oc`+N|Pb
z8&2<B^T%n+C)RH8_;q_!o^;S&*~j<Z|K5jJb-KHHlY@`EWn)h6bIXSOFtyG2uTQ;z
zPf1)qyZ-EF7F14p`n=zZ*DU&CQr>mHtoUus_p^^%w+GX(A?ywfz~-mTiz-kR_GX3J
z2lfS<HDr|pTi0UyW*&3)tuKDFee;7$XBBp+eat6SCZ2x#F%M1uVaj2L{FHnBy!@I+
zoj1P16}P^1TGKsV+%m-V?3Tmo%5Zkeh4Zgk9-LkOZVRB!p~7yi$I^mfY{R{e-S+kV
zpO47>;`RLxzx}SYu5+!LHL6#uTBUNOiWO3llVU-6<>qv*KR4%$XGXgI%>KG#)4~sI
z8IG{DP0QLH3jI!jUB7W*z9Oj)*HFwY>CPo16lK`oROk-#p=4`m<-(!iROk-#p=<#w
zW$m`<Z*6V@d%|AO6s-DMP!p_0mbPtfU8n~(pQ?c^8@7zp2Rr((Wyh8wYk@68ww<tT
zhb>#Sj5UJBP#UZyWtTOpxAcql(dd?@qmfCagtgP!YwaE}E($~~WJI#Dv-+(S)*@@I
zwcN(a>b0@4mNy8JlT%VERH#_7Ql-k3t5mV4-D9z&q|#gpMPYuVF=#Z5f{_saemNVG
zA8Z;}OWZWKX&OHb{b^=ptsiT-wypDtT9|Kty4xQw)Tvvq{%#F+Z@5RJ#!dFzt7&S-
zPMy0P)b-#)4n6GfZbx)a>ye(3*|S&gtRwqm_sz-8J1YN#6HhvM-uzQeJ#E41XPkM~
z+2`1Nv-xLJ!{%>{fTBngE3=%3-K;a%RNhX+=e|83Pw`O|CHqZVX8d5&#mbzaOdEHr
z*YYB4360{ml53ij?3b*63s%;qorNebOxdCw*uKQ3v4zy|Z?x}p2Ork2Rlw>W)?@w8
z?%%2I*~et=8x?mor!xJ+(&69Y;;@G(gM!xX&;E>vmi$IRwQAL?*QimmX0&uwixzSE
z=58NXoKqtQ(T~)vzTwdT0}VJ>#h}-ace3&|_%LOy3dg~kA>8tpOSfmjQZafdX=0F_
z&S!tKv(pMQ!>E04&?0?vb21Cl@&{Qwryn1;%}Tc@Uj&FcN59`Mu)Mr9zDOOGON%=4
zjbFb08+I$q%+Ac~O<mT#Z)RFSzx>R;_BBhAeC?M{==RJ?Ptzw4!q!zwJus->F*u@k
z-jMNjF8gTkBuB>Aa%K?ydz*8!yMwoaMgQmw;7XOgh~?_X;`zb+U{kP>n4L$w!13&k
z|K>A<8<^6oDI0g@@VC!r{!V{?ReQJ&*hen@Dpa(N6_RS!iZ4{%GQw|U#CIt_U878=
zlrpLRH;GtMrOH*RYBdR$km@9os+KImHG-516)B^&JQh?)u|BF+tyaB8&04jSQz{f&
zdJiJCEK;$0m8!+nifhz#T`ZITVcl$Ft5mOS{ngfXlxhM?HzHEUBC$Pc)n?63PH|l<
zlmF_UjYb7NO+rYD#cab-yH4HGK)Ql$$xB1y#@n_vj_tp##<s>$*w*0B1KTv(zOC{8
zVWGA&XH0L)^KsM1ww=ps^z4>RY0tz)Mn8X^JaWt|ew&}l2l4o|$I)(VO1ckGfup&}
zM}gArL!t_f=9%fJhPdwG@HwYy%e@_*APVBr%5JSYc)WkBw7u%1OmhR?pQl~Y$Wfzt
zulh0LCrmtc(&Q;qd7<TuqM5Uf=dG50AEo7Y+;<fe_Uk`j;Gn^N`O(o6fZWpK0pyWm
z#)J={@Wh0Eam#N@crZTtiBfnYQ=hVOk8kYIKEH0;YL;#}{VqF?&sPz*oLJhg%hKNN
zjQvW~eUWX{3EjcUFI9Rz@l<eOzD3l{qPBnY>rahKcURiA$94Dji?;uAp*s<)&vkcc
zvck}vzt(-c+K@`z`p=7Nze_(xH!JVbR<WgP+d4x?1xt7J>a+A=ap}sIN$3t1?H<?t
z74j^&=}|}B=aXmU9|H^B!P2SjfP(n0uxkqJngUIOLxaKGkGV9smn(EX1a)HVVmYzN
ztSn7~!-65)!CA^t(i_2#LETvUST0v<lNtpLn>5&~c1r!aDK(R-KU=k8wAHw#c;6s3
zSX;bj@N@As#q~MI=u=$&ziTM7wRj_cTT`x4@HH_@T~pj3*a8iMO~uQKzb@WVycr%S
z4uTfcKB>5Y_is<mGi!71w4yjk8^;dCrx$n7ztf8U>R;>Pf5*Sg+c$5w;av}{ONQK`
zn9nAq@r1uVziB^Sp38@B^^;8dkQQ%Uu)Xv=zVywJM9E@kn<qPGv~%9WVIKSee^TU6
zww=FF;7`tSiYf5t5kc@31->h`eM>C(qc|B?3jQpv75qYhKe;6F9hVgU<TB1%6!@dK
zI2l)Zy12L&c}?Hpng#o$dE`?=6#R2hcTLF7Uu{2P*9Cg<jnw{}6BPCidSw=dA57(y
zX+iWk=|bM#$S2GS%6yfO57DRf%gExKAY*ustQ`9+y&oT7`5Bo#`t>S_*r(6(`h|ru
z2IZvn%}O6WATzCxb?2+q`JA>y4IrJHZ;xD;B>Boj_{n>^<mKn`3^FGsB~h>1g5J3U
zXw|^}*13OXevjOOu%tcB6lCY7r)6jGvZbsr9*%3@v~046r{!nnr14Pmz@SV<VP-+0
z%jw%UEze2}FO$LRHZvJ0Lvz`jR2BBi?@^NGgItV8Y4^f>o^^JG3-h!34)^NF;VJ5{
zT{+o&FoJnO?YY_ghuha6Ip53aX&J+F^X$y4ASmpcXY;6Vu>IXh=$Bs5scqXJt01>^
z`*vMAb!i)B1pIAXZhnu<1bw6zlv7n{)jJL*9As-=aCq>+9TU`9rgPM=(%PbQZb47p
zE7qQWiJDv5wR3{%OS^VS&~-q1@3j2kh1SKsv&VZ%1Aa==wQNbtu<X`}@~y2|`K{Z>
zk6YN24ZJhWrtt}?^hPtR+@C?wFw+Y<l<m(l!uggczjRdFCFrZPYg}8xI!n7IsyQvE
zAZz%*j%{r6m&6(8E^dl21#I%}(9O^2ny>^DVK|Fqo2>l)wuD&Q{GP%ggx{%2)PbJq
zw{^dQL>>DTv@W;D#C>G-=-aW&L5b>0&nvG(LAk?llayECCaRKODx~LTWM*d-7H03T
zuDQ8fewT3lR2@CCdNG93U{^?On{N-d*j3WjphM{J_}<QDZToL|wwGepQzm@K9m0OG
ziLnN;4~k>417qD|eS!mmlS<0;SInIiU#+xVd$iCdQpxo_B}=YBy2EwbCt9$!T5#ts
z?))aojoN7KwDwwAqjc|D+8^0F1Xt${9mx2rZvW2m)>a>zZZ7S|-FU@cU-jGauXgk6
zaPhyY%a!r%%G;4)BJ9}5<=ZKtjgQ&KjklGv_&=Qot_}41x5EE+{niLK-`u!6`wet?
z&eo5MJKOZI;HHtYTTd<RPs>E{zbfPEOVr=r$+I^5*m~^JR<{doIKHi0qOz9nmy3`8
zRd=f|zPw9Ye=fMZe`;HHtRFXjtUildaE?;ZUt5<Ax1I9)b>se5ZH{lBm3713ndAE{
zFYUKuXYu%9y7ri@e%C+Ie<{?f-J*H3z4vO|a5uLnh^mRPlqbjB-P~G1t=hF})v5pu
zYwcdER?}K_YL(q%ajIisUO$B>S$srCg<GP~a&fb)@V~k@J+8^q;s48`u*a*JyB}S|
zA62v4o%Ie4|3`gg)vcqT{%KGYx-R_C{@3ih<juTc>2qql5QXaPsy`9_-+Jx2Z64fu
zZM6n>Ejqo`n7ym1JyoY2UiHlt{MmT+mG-~Ne)nAZ%CH_MR8cdlRDS;O^H*(tt@2q>
zs9d{8<-Hg1N5il5?c<f2p2(jwqfjZY(#-I`Mypag&6V&+2E;ok-BIo&cb2=z2gzOK
zgXJUS0z4D!_`*V8m<ldkNZh)Q1q%bf;$tj9u<ql*%2?<L(_w-o2v+|{D6#~>AD-1=
z-P|*%*4-a|qV9fsW>7x9jNd*R2WxAha(=t5y@|?@U1ogZhh^PueBAiiG_bl7l{-@9
z+;p|+WNjM-7Hqt&9_!yi8cYM1cHP~yvikh_=F*eMw_yES_hT$Uuy)$;tWFELFdE!^
z$sum@eHK{A04r~0EcorWdR<#xd;IaSHYX}$^|<k{GFG=OI~M%$wPnYRhZ`?9FT=w8
zarsuxwZXdi<85uQ`Rc~ey8F|?@@*U^gUttvyXoyuADb@m-TmoRULEvSW;*^=Icv8~
z8yE73`04#f+cZxFi(7kK-0F4l-oy_9D`Wk;xQ%xzSpFbz!O}MVZNcKU?7Fx=U9H<+
z)lKIxSh*~4!!553ZaK8_BOw(m{y!NnyAkE;apTy6JX?0$GIaoP3vIyWzYW{XbD}(5
z8DVh?{lNM^R<>oq?u%PqDvSl|->`13uATK~b+}=>_L<%KY7b`FI+zLBa-nSbM}y5L
z7p#0bSR1S!w`{w(mA9~Or0@wGt2@5!Hs7kMj42h`$S8=}AyG{`G^)f+*eXGV$}U(}
zLZiL*2<p|VXAc8ak8*Z1)eWzjhTZGeqI=a^O@e9-cdyf+dazsL+Cfw6J~y^Hn3!z;
zR&zyr$A5>@J^I%?#e87}m$v>6tk|%^xfNXh3ro7CROnXmlHgzYHzamRa20(HiP^uz
zHT2xg<*%z}vH8g^ZT&Uety1!=x~~5|`?zjDBxUWB5vB_Ez9cxluH~<*H>zng!T#yr
zQ<y2w?i~cD#Oz<<zAH9!`B8}qsV=SllA^w?YiS*m!(1!bk_Wt^{L-#b4M`l=*5a9^
z##|HMFF26r#}5uZW?PXP^k*p@%bGKtyBG6<GlPY}GM=+u5!@2o72MC0CF_D0g4cMK
z<lUfqut(CEq+^o~PpX#`1lJ^;lJt90EV*iOo#ckeO_TReZj;<O`OxIF<lf1-$peyu
zV0iNFNf#!qOS&m(T=L}Pp-Gn|6(!F}o}c_EPvoDGJSXYiq=m_sCSR3&L-Os(tCQCx
zuS=eu^j*@+$-TIgzmeYr)QjyEYZ*Hvc4VwyY*cJ&Y%Wh{Ul_YGc4O?G*rTzhV=u=(
zj(ro`7OR-lJgHsMufdl=zod=HTavdXf1CVEa!yh#rCQ1hNxP@)mC`b$OUj0%_mk37
z`lQ(OXcuI1<+yK<nUibJ*<=>vr}qvrxgwd*-(0c>+TRXb<_U}N3XCALM_NYDAk#jW
zoDpPZWTs{Cf(!cZ%h#DR)6&zqUZ2@BtzR~^acSP(e!<oFf<ZxM=D;kjYiAD3$n0;O
zq(ZxjoS9V+DW^ZzK{NY?m)bLPq};+ndM_MU*u$#nsm2uK(UyX|ES^B(qbt1EBQts>
zNM@A96?gK}a(dA@t(RSVXSBGA-z$9BC^IcPpO#Y{Z7j%5r;&XNdKF|1rZj~LbHgW_
z=olur@~!NgTzyxBLDN^Em(I<zs`%;%MSFVrX=M^T?39($kJ|$bJtLn!()y=mG0HqY
zm0{n3u}Hrh+Gg{CIIYcO;9P{~UP$yklQ5zDoZKG$Y}B&~tVB3AQH1a17TOT<GmoOF
zz5A*5!dz}d<P75L+4N+OXJv46B&wb~+Qlr*&dp^UxKWZxY5P)mz)MmJRDs1x+n38H
zx$|u1&?g_d$;>#aA9rJH(A+A?<l!v}SfjFS0y9kpSyQtMtW7LMOmUJKw)pjBdCBS>
z4mUUa0+97&FL=RWF?wb(;jb;3x!hyvnVma8GbI`m#v&~zohQf`1*T+XzAc*83)3*&
z`mlRR)+kz+Z{yrM-$pIFLr%e<92TYQj=gP}&F+|QOKEma*p)j_h2fmYO)to@!eJTO
zPEGu!EdzV@%eMKKo0h|xVtGeJ>qvps)}v>xtyVeqe4Ht-4}(n0U<D}1?`vK73J0T~
zk;~)_3ovoBqN&r9#xn)eds`#3da!1NW(c7R(wW`l+ub9xy`ILVe15d}_e;;tOp6u>
z<|KpGa+XyPCZkysuHme>8Cm^o9)xxaexFQcD}OQv=4IvEG$o#&**~{WN&Lvnbo;yx
zv!YLyO@iJ7c;8P!ZjNnNs<X?j5UX5Vomlmta&e-60o|j26?Z6M{r>^3|I!jallxs*
z{&W6D`4#ytcoDDHu_60`-G28dJ$B5L8SVT|VY~u=Ylks=E$^hUt?kA9yrdA@3)sRZ
zTe~Od9%k{UCZvXmDN~0RO&T-YUXAA+hK5HJ;T~?v)Yf!w{a4-X(V~%K!rI)QDi&c6
z!}$rXqn>3aAY}q$uXK@p->7w5?@`xqJJ0Y(63X<gCxpW)crgWEUuivd`t;IowCji{
znn3Dv<fIAw&dJVFEbuKW_dy&|$An+92|KtHF9xtL^3aWE()db`I*#WpL9Pytb@_fy
z*l(CMWo(p)ijoRn#TKQ)*JYGUqA2ACVUKD}<sI=+y}Yks(ga?W6wQq3)BH)tD^2X>
zC2ByKh6Pc|)oDYG@mzn!fL*9vbK-B=Fmp=D``*Jx!=krGy01yOvR<jY>_T4G!Lx3O
zOWMq^1;))+yOD0sz(-FpN8N0J;Gm-9S|3aK4!^swCm?O<s{yu@)&iT6{<HY?N!!7$
zJ;S{_#6N2v|7?FMW%h=BU|(nk`$2QqA6kH&ue5{%p%t_SJ07=Ve_Q|TdQb=G2%Vra
z*tMU7z^?fm40cR^C>#cdLpQMNKiwe>dO$j4KqmBrUeFt|z|OV%KsMO<oNbVDArFp%
zd?<iIu=Ae&FaQREorl?ZnVp~5xs{!V41?h?0&EQ$1*5?h#IZ0A>^x{ZOn`}C=U<ax
zGE4zG&zT0tft|zH!pCY6UU#r-7`A5223ua|!U=F9oCNml_B@ymr@*Oj8Z3a*;S4wv
z&VsYy95@%wgY#h_TmXyULRbtJ!4kL_E`dv7DO?7Z!xgX$u7s=LYFG}}z_qXfu7m60
z2DlM!f}7zMxD{5yZE!o>0juCnxC`!vd*EJJ4fnzQ@Blmr55dFm2&{oe;W2m|*1{9;
zBs>M{;AwaUo`vV&d3XU{gqPrDcm-aC_3#?J4sXB)coR0lTd)b<hRyH}ybJHa7I+^%
zfDhp#_!vHcPhl&32A{(h@Fjc&U&A->Eqn*x!w>Ky`~*M4FYqh;2EW4}unqo%?NAJ1
zh$ZnLvOU1e^ThTjar_TB_TFdTX8SeYzr_J94{X)CP21AvVaxqVhkGn`$k3yQ4Ifed
zW47@>{W$l$^A}#Q=)%PpExGuTOP5}D`4!8qyz1)Z*Ic{ey6bPa@ur(^xpn1jx8Jeq
z&b#iu=ib%#-T%OY4?X<InnxddeC-oYKDF-YXP$lT`4?V%>E%~mUH{taZ)|vT<6E2F
z-u%wH?`?VigAYIY_>)h!e)jnnUw-xVH{X8u{SQC>^z$#j{`UJH+y2~MJd^LsOb_g<
zIMaESdD{4q!I%lh@WsB_k!FN%MB}?-d?q^lD4KnUkQb<pp2FJ|gK741RC?nTFK%)c
z@$ogQv1n>kr^|P)L?i|&VDVbe5W0ee-U-OE4!Th8WWS5?gPWhO{tEPx3{Ao6ccF!g
z;MD&R-XM2~?ySAmgKP5^M*cs+4vpL)qd1x0(^WF!JGt?39c&)h^lws9aL0bP7YEx|
zCVqw4CB+okS$*;S+VbJmG2e@a(Z8xMVZTYy@)}={OIIXf%d^>n#Y@JwoPNDuDbEXg
z^8Wl)`>a@^ey!aK|F}NaBaZs*_CFZka{Db#KAE-~@nL7<%Zi_%Umm0^C;a972>VIg
z@6MKISFfADR#hsL*PnH_Ze~BY@hz`DE1RglM0r+rXZ6MRH=lk^fm7i$SOBNP8E__?
z1!u#qW1jyX9`mr0Gi$?b6q~01v*$b`8TU~z8pgm_7zf9|c$fea;aHdic5pKVrouEh
z4yMBlD1w<V3yufdfz5%rFa(Ce(J%~#!wC3K4gUm&bt0Suw(YeI{CwE8{{P=S=h-#?
z{|}$@?%Mtb-P!)7K@UiW49J9@&<lEloo^lqeIOh9LJs6Y9vlVvPymI{5BkFZ7zl%4
zFqF6b|4$8n*Y<zcHLo47dD)TQ&PYzBOgw+1zn#@<-D4xT`t#VoPUVeU&Ho$x)i5e^
znKB_yk^gU`yf#$k5@|x#k^gTbe)vgD|6O6%6!^b81(MkImHn5Tn&ke)btzjeO2tN`
zJoZ=rDsSBJU)l1N-|+rDRrzoI^J}QQ!TYza^56RB`rozwr+SONU01hbzyrLz!-yL$
zw003}<?Xo7FK_4mF0^tH+)cQwR3h!6Ep&oZa3Ph5>(+s|rCmrR(h(B%XUCCt?COGD
zdvL+7O&BhWBr?_|usg<eSrdrZH4hi|Ct}w;T(Dzbe^^sV`}O(5vSVgDes;mqe%+Je
z(spd^m$$TE-rC`(?U>z;uU)XTU2kz=3=uzV<Klu{hjGErAK@~wU8iy35EsFA4aEgJ
zPjF$pi{Jv`vf}5%zODnd_y{j;=MOH}wImm8-nigT=knr5xWd?<t|PpBKW@vB3x~Q0
z_UE@PFE03TTP|F%^Bx!ce80RuEIVg%!Op#0u=(kN-v)o4`*qqmm_I-KZgvjmf-Q$G
z*g2gGw!FDu=Wj0f<6!4~F4#7}1)JY4SUX(sr-hwcx?tNIzpYlUUxz<Te?0v9Y+ZK2
zUk4|+Ozg+!c=>+6cFod-V_XE=`s0FMzrRlT^%qgtUkChdb`8}9Tkl=4YpO2T`t5?h
z4V&sRv0Zm{VY-Xp^40-slMDX%k8_!LH2CedVfgj=!}rI@ug@=2UVd|Ln4`RS{B#>c
zw-H|Vou&P8@u!bJJiAum!f`HwyOa|zZyR(l<=c7vl$TCa#?P~5-CzD~di(RBr#B3L
z{A@k;`?KZB@6Ye%=i9c#-v-*U?e9x$yW@Aa^}z3L>vR^lVDrph7X0PAyyY^!KEJL0
z`sK%WHl3`y3x3?Drwe|2{4(XmZF%#zKk?Jfrqu{nIkxhdUfQ<LBfPXf-K?yi_NTdR
zm;L^1d+eue9$1_G>1NA=U&gM%`DtsrU*6yE^q`vy|H?kdueZE?l0SadRu}%xKFFU3
zd9FwNclJ9r9bE9&C4aw`P65B&miEUfep<V<U&f~A2ynsX?+BNOi`z2dceAp7J1y<c
zAAcX^Z!iCq{ndEtcA>oem%o1c>+|2)U-{erX>LH+U-xEs`L_LV!9REKw{`wLa5RPe
zc3avXC#ySA+Rqz78N-D+L`JwoT->%nem5)Yx6{)8{IRq@4dS=2wmlsIE?9YgJ7?oI
z!ga*{w$;k|X@5T1ycq#5*fGQim%uii<EM?y+Y#V`jn@d5z}9wuy4iX-0$i~19N`k!
z*00`P+UB9(|Dd?;Ha>p$`1K-w+Q)Bi<EN!{_lIxY{rY#--L?VN{|Iow=7-fW!e!w2
zZEgH?+*$Yd?RosXvhLPa7p%LDiwm|59N`k!)-yl7v-y-BS3W*%`xn1HTXy`kzpe7u
zh4^U~Ki#Ze8<tIH7p(5lVAI(Jw|yPqGO$~A{XDBHewbEQ{BZwnIe*>yyUW7gtvi1I
zVA~9TTz1xdXY0n!`v1G*W99sI*?jTSJL_)8G=6!Trha;7%jV9y+p_1^7r)KgS@(4M
z|2xZ!ZL9p@*tW_~?@!u=eOv^m{x8Q}_5O9ZzZ);FoIfspyp<am_VfMm_2X9F@5k?U
zpjVgeH(Y4rBG}@I(tcj5SAIlXJW<-u^RHvt^+*@?CSthI)<v*gJMym|S==vcald;i
z>AxFnSv=e;Y{#><opZs~d0U?S<6K+6a^mtvlD0OF1{YkOU!M)n1uJX)`18W$**fLI
zF)o5_y>X$uxNUn~u(rD3$Fp4~p5(=Cyj-xj-!}ia-#>@<r%icr+wa)4^oQGmwB`4O
z1Hc8_zPXS~#Kvc`%fNp39$vmbZSA<l1wU?WaKS$pu{OBikMjhViS7K&1v@Tt!LQ#h
z?;jhcQrKNj??~LzE~FCa0Bs>rH`iZhx~GB*sYG0ViMm-`R%fDao&KVm8=hT{Nd*^D
ziCA4$XQFPdzpivo1s76@xV9wf=ITt;?I8NK;U((khDYZx_{+D&6Q$$x{B!O2xL?+~
z#n<WQ`DHCWFl<ruCqC|%wQlkC`s;|lO#929zr0THhGp?Y>G-@^UO(}1zpQnOuhY--
z%UXQ4S8sgWFKgZ6>-D!owjFfAU)TKYfbC0KyF!Zl`xMtbKF{CYTRc&BKhGbAEsHJ;
zbrIasi=XJl5AotBdvR-<-wqp|pSJFX3)bCllk1+Sj9<>S;r+m0rV2>sg1`T;JlhuA
z^5}wXD--2ezn1TUm9ya-<uY&@*s^QqVJ_IV+RFNEu{;~L3)UvTZY%3=r~Aisw{CuS
z8>YVxa^p&N7%ZKoxXIQj8-}&Z1<SK~Z2RJZ%d_pR3ofst%fK$Llb2`H#-@iqEvy}O
zd~4lYaML?}pJx5Wm-E+utIOuG-=EcG`8FOd*mSZy7kUx#(>C4wwAJaSE$$x!*to{e
z&*9{`U~Ts2we9b1njYW^V9T><8lTrOL7q+1_;R-Ih|lYiAkX$A@#VTE$U8Vep0&AM
zIr)jk$MO=5ljSEGFUwCfZkC^D{477wI9h(9@wEIz<7)Yd#@E_j-uT8(!$jkmXdDxb
zU!rkKG+v3uDbe^O8W$VK^2Wuw#gC8WB^oEoPc&YZpJ?1HKhgMEexh--{6ynv`H9BW
z@)M13qIqX!+kgvJ#!uUL`Dq&;KW*dTr>*^d+S=`>t-XHQ+UcjQJvL9`^WxiS>G-x<
zUVM8kFTTx|7vFBni*LK-#kb$`;>W@A;>W{HYkxd!do~i{m#a|;@<u1f8<QY!Y=XRT
z3G(bbF@Ct?6XZ=ukZ0#A@%<i~Aa7EFJUb?f?{`Xqyr~KDrX|QbE<xV(1bH(O<P{~z
zo0%YQR)W0a6XeZKkT)km-rNLvw%?AQF1C-3&$E4We4g!F<MV7^8=q(U^!Pm6ugB;0
zPLP+CAn(Wod3M|qU!U#Q<MZs8Bt9=EL7p8y#+S=Wkatvqy!-@t1qt#B6Xf+vkk>y!
z-hc#o0~6#8N|0yQCgR6!*Y+TKZZCei{9oH1#2<(F=anb2+_-R{i{St5xXl9>>|E9G
z&qFPqDDCH^QpN>8-yPfAzB7K_+rHCClyCd@MESOlPn2)_`9%4)uTPY3`};)sw$D$L
zZ~OiDd~0L;{Iv14{6ynx`H9BY@{L6GCmLTXn`nG3KhgMFexmWU{6ynx`H9BY+LCB|
zEkDutT7IJOwR{^!{P<eFktjdW_*&US<7@ee#@F%_jj!b=8ebb`{P^0jR36y&+yy&c
z^V7D^@8>#VJMOdY)4e=f=WM^@!ZadwEa-xztsWQbSjtb&j7!_`m*3rv+x)cczx`_i
zwx9OXcD&%Htt}(Lj`duyIuqqvTm9=V)>c1lZH-UcajFZ}c0X;y@zZwPV#ii4Soiom
z8=v?*8>jfZ!UTENK7Tx|J$~Beub;Nz`{{9{tsfU`{Qb1m@24&9r)`@0X{+B)yYj=x
zxAn;d*I#_Tm5<MJb;jrWb=x}Wf?v0v@9OsR{JQ;oE87-kxJt2~7vGln^~&mv&+D5Y
z&*pP{Ia}9k`L%iHf}a=Pu0-A9+h@zUKQ1<({j|+zKW*dcr>%c~owxq|wDs?&t$#ml
z)5A~OwD8kbza6)_VD<ZHtKUys{eIf&_tRFtpSJ1Q2CP4`3%1=j&LyxdJBAAu_vb@8
zX`B8wJbyj6eA_Pibz6V_cFE@T9B^Sg5o?zVw!Yi4;KBqVHXU5(L&R{w;x?WxSeuGm
z0^53S<LiQ@{rW6zZT82*@@9hz*8eD%z?QalSveOh&+75>Y&>jyT(J3T)5gmB)5yvh
zeZd7w=eq>9<<ORK7Yc~XatUnn*>9t5(+n3ZZf$nK(tcZA`S>#N<*Xh4^gYm3_+McE
zx^;Q+R$e>(dEoy(#g3m{@SjQ8+hyVwUi<(rZoiFp;UpKq`+D)_UfjRu<WI}iUYYp&
zL#~s5oIccL;$~iaKQG?hi@T^lPW!k_?6<eP`uy?O-|M%$X;a>~`t!seZ-4&S_Qr*F
zE`sg2)rAf&f;)O~J3e%wvy0#^Ui=_0ZpWA|*m0!`{&L|jFaG@T=Ser$Blef0?p}VH
z7x%Z5wk>rb!$q)NKXRd`i(uQXy5MhfvRo#%>q0KrcGHDy7s38ED96js_2RZ|a^WZ!
z!T$EjwofkDF`EnhTm<|3K7T(o&?_^@ix2kVL%g`Z>>usr+y37Le|s>(WnzEd<8MDl
zdu41N=7L?vb-}icF8KS8@h%hl+tZ0&zU`-6@VCR0T_&F5#cki>!Za7b{(jrvKiGEK
z1%G>O#}F>~`;X&YCieGz{=V8jhWEE~Cwl$*+q{##{9Vg=G%^0^a=vT%jHcT^T|Rd$
zZ~r~Z+y7s;fxDKm|DI*+|H3}kU*5_)KJ<?R%RAotr^j{w+sAVMbRXv*cm31(Uf%K5
zf5S1AKYw?f3q;$NzjH3|PnVxv$MDg#EpK`Ir{|mHZD;;n=av5(+n-&_OtcLAyN;{>
z=`!;_xh~;fi`cbnMDuai{wtae|E_J$fAU(^u5Ho3cUx56vGJ~Jr_prYwY=?G-ga%@
zqGjN}`5Jq9$LG7YZ_&If@7~a^?c1*H+pg`~uI=0Z<Q(&#UL)PLy#4ntZ|$NchJXK)
z&yDOFZZzRLc+<b57yoxXpY#7}I=fLxCQ=!yLoKKeyF(+`3-*InVB>xe*z-j8jF4UH
zw`Y0mI;w4VY+GW_#@O+VJ<nptGj`3|?xWiM3w!3np5w4*GwgYb`EVMX0cXQ`Z~-ia
zi(x4&gXORSZiHLlHdqCB!)kZ{9)?F@Ej$I!!1M4Dyb7<wo3IJqfi3VMd;*`rm+%dI
z4?n?gunmeKDHiapd8QFmgPKqW>cj5P2=;_jXa+6dKxhN)p%WYghrr>`9nzsEWI;CM
zLO%3^K`<1C!zdUF<KbAC0>?oS91nBhB$yAU!I^L_EQAYT30w-7!<DccR=|yLE8GEh
z!)kZ{9)?F@Ej$I!!1M4DtcMNoHf({9U@Lq9U&HtCGyDej0aHF75Trn5s1CKEKI{&S
zU{6SeX0SiBgf`FtIzv}D6uLngWI!+I1G!KD17HXYgHbRRCctEv4zpk`oD8SH0yq=S
zf%9PzEP+ema<~$f!wR?oZiba`2iyhs!u{|NtbxbjDR>rMg!QliHo-gaK70(H!I$t2
zd=EdtukZ&HLlP@t1*i<wpeEFT`mj4Rf;}M>_J!tf0JMU3&<VQ2;gANI&>ONL4+>!*
z422Oe2FAm&Fcqf5ESL-P;50ZB&V>u$BDfT;fU98z+z7YA9dI|?2M@uc@B};qFT$(v
z2D}CD!29qqd<I{^ckmPZ27f{<g=qm*pa#^2daye*hE&)OT0&ds1P4PmNQa)#2lAjF
z42EGa3dX@im;%#b7R-ftumH}2^I#Dyfu*nvmcw;$6Rd<)a1Y!M55wcI4xWRT;8l1X
z-h@r?4s3xB;S=}_zJ#ygJNOZPf!|>}#451vKqaUOHJ~=sgWaJK><Ou`FYFJkpe=NO
zE^sJxgEYv5-jEG>PzVEH5DbB%VK|J2V_*^-2eaS=I2lfZv*27<2p7T<xD+mjD`7dT
zfE(ZzxD8gp-LM)SfHm+WJPj|v%dj5afQ|4rybJHcNAM|p4qw5y@B{n|zkz*dxDwQa
z-Jl8V3oW5NbcG|JC-jAU=m&#f7>t6kFaf4O5zK}YU>+=hGvORK9~Qwya49T<<*)*7
zgq3g?tcC~R5m*aP!87nYyaelE1H29I!H2LFzJRacJNOZPf#2azh*e^pfGSV}>cZ~O
z1onpJa3HjU&Tt4E0qM{S`amuezyKHm!(j|efGIEoX2VHvDx3-D!6LXAE{Ch&TDSpj
zf!pD3SPc)tqwpj=3opTIuo2#Y58zYy3Vwj!z`h7vfrF1~PzQF0Jz-xs0NOxD=n98J
z59kHia1`{1p)d-@!xSijxiBBjfb(E6EQMvT9Ik_#U?r@Ad*FU}7#@dp@I1T%Z@?ya
z4?cp=;A{8+euY0FsS3*>REIjy02)Io><2BOEp&o|p&O(_Z|Dp8FaU<aNEipl!Zer(
zb73AVfU{vCTm(zuO1Ktogq3h7tcHi+F?b4|gO}lTcnjWz4`C~O1>eIjunl5WS*@TN
z)P~)l5j2HnZ~(M{j?fhjhaS)ivf(J`4?|!CjD?9X6^dXEoD8SH0yq=Sf%9PzTm+ZE
zWv~pchHK$QxD{5x-LM)ShPChvyacbqCfEX>z?bkn{0iG4r5f8)s0|IE3G4$cpbd0_
zL!dkKglx!%fiMilz(kk|GvIhQ5$3}JI1A2$MX&^x!ZKJ6*TKzj2iy(!!9(yUJONL`
z^Y9A10h{1G_z*sYFW?*a0e*o$pcs-laIXY4pdK`Yy`UMigtpKb4uLetgd-sr3Skh8
zfC(@ej)R#n2Tp=h;B+_}&W8)(Vz>;hglph>xEbz%yWu`~2p)%Z@Ep7Z>tO?If_LEq
z_yj(Oui*#y1^$4b2HOUx0=1w%G=wIQ3eBJew1Rff84iJNkOt|H3B4c-`aoaEg`=PV
z`oRDg1Vi9x7!D(03>*U!VKPjE888dxz=<#qPKDFqEI1by!iBH|E``hCN>~mn;0CxE
zR>JLYC)@+~!GrJ!JO)p|I(QadfR|xCya5~GZFm>nhmYV>_#D21Z{Y{{8GeIpPz*^m
znWj(~szFVt1NC8dXasvgD(nl*;Q(j_ZJ`5nhOTfZbb~a=fL?GU^o2Yqfc`KDhQe?d
z1!G}691Bz6I4FYSVJ@5m^Wii&1I~u?-~w0-7sFDx0<MB<;5xVwZh_li72FN0;Q@FU
z9)-2=6g&gZ!%Ofgybf=|CU^(7z=!Y&d<I{_H}F0D1i!)`upMHYG^ao%s0uZpHq?U#
zum?1Ormzp}2QA=0Xant`6C4DGz~Rsx(xE40K{n(<KJ<fuFa(CdNEidhz(kk~(_jY7
zf;n&^%!5<mbT|vng@te-EP+ema<~$f!wR?oZiba`2iyhs!u{|NtbxbjNq8EbgBRfy
zcnvndTd*14gAd?i*a~03*YF+u2*1GZ@FxVd*{(rFr~=iY7Sx5^pdmDdy<l%>2Kz%x
zXbtV4BXog-;V?J?dO#-hhCYx3M?oPBfWdGyjDXQF4ko}Pm<rQjCd`Ht;AA)j7QmTs
z4xA5*;3BvLE`w!oHCzkV!%c82+zxlbJ#Zg92#>&H@C2-bXW<2S8P>xauo2#dcj0~b
z2tI|+;VbwSet@6hH`oTnkW`2DA1XsNs0nqTKI{&SU{6SeeW5uV0Ii@cbb!v#6%K`N
zkOmph3yy@okOu|O9|plt7!IRgER2U^VG0}vMQ}XKg_B@DoCasW*>E0Q0E^*bSPECb
zRd5Yl2RFhka2u?GyJ0mv01v~Xuoj+zXW)5w30{TQ;Z4{C@4y!L5I%v=;7j-hzK5US
zSNH?AL#!_AKU9LMPy=d1J!k-XKoe*R`@nwC0uF>W&>lL$L2w8h4&5OgdO{XtLoVb)
zKNtu@U>J;qF>nk_gvl@sX22|%11G{fI2BHZv*27<2p7T<xD+mjD`7dTfE(auSP6H)
zU2rel4-df_cpRRDr{Otx5nh4UU<14bo8dk906vDT@CAGg-@%XY3;Yg$LQs$OA1Xo>
zs1CKDF6;&kp)u?QdqXqWA6i0dXa^mk3mgoG!4c2{GNCv0fgCsr3Sj^YhNEEwjD~SA
z0Vcszm<}^xHk<$_!zr);&V+N|d{_h*!6k4REQ71zTDTr=f?MHsxD)Py``|%%1RjGY
zU>!UQFTl&N9^QbB@HV^)@54v%DSQrJ!ME@O{0zUrHYkQ9F78%<%1{kzLLI0NyF(+`
z6H;McXbuNJD`*QHpfhxZL!ld_K?d}KBcU(kK>_rKK`<1C!zdUF<KbAC0>?oS91nBh
zB$yAU!5MHioCg=cVz?NV!WD28Tm#p^jc^Ox2CLw1SPc)r!|*7qg{R;dcphGYSK)Pd
z6E?v+umwJZPvA57625`&;V1YN{($We+l}=fDnV7K0kxqXG=M#z2{eU$U_WR92SOWY
z51rs3I0O!d?vM^WAq%o07xJMW41^&t3`W8jI0h!dWS9msU>3}Q6JZ{l3a7(aa4sx_
z3t<Ud3YWu`upCyv4RAB8ggf9axEJn+hhPmn4o||<@Ep7dufS`t0p5bm@E&{sAH!Do
z0=|at;79lceuqCHXu$dp6`=}Lhgwh<c7uk{81{m_p&9HCEul5EgO1Pz4u-?v2<QQs
z&>Q+d4jcuAFaQR_(J%r=!#J1#lVB=LhnX-NPJol)6j%Uf!Z~n0EP{*R61WVO!PRgr
zTn{(Ft#CWs3HQK#@E|+_kHHhL4xWV<;AL13Z@@-)8{UQY;UoAIK8LU1TlfKfhTmWt
zSXdtZWuD5n%D2h4%lFFn%MZzRpT)u>k%BeyI@#{ASa>f|cz?yB9qfJpp`&c~JuKKg
z4+{nIJo#za?mt*~R(?*ldlD92kiV1d9)yJ-<cGPoZegALjQqT8*X%94B5#(baUI&i
zak5<>w=hF4l4r_x?cBogvRy~FaDsfIe3E>!Y}eW?ERau^&yejJyoIymv*mN-^W=rH
zU8}dSNWM^BEZcQ_3rpmS<x6C{#&2P%e3^W?Y}fxSER(O4uafQFfQ9AqHL~3=uyCDx
zy?ldg_Yy4JB;PFGBHMii3oGT@<lAMt2Vr5Ae5ZVuZ1*QD+#}yBua@oJg@ya&2jmB3
zyRTv4VfhhxjcoTkEIcMZF0YmCeu#x9<)`Fz^3$^2GqLcj{G9x}{DN%vRV=(DzbwBZ
zzbdbnUz1;#-;g)RZ^|2GyH{gjll->4S$;=;SAI|4BHKM43m?cI${)#g|Hr~7@~84v
z+3pQl_+0)%{!+I4Mi#!7zmdO{zmvb0e~^Eaf0BQef02Kc?Ov3H-{n8#ZStS;cDY!#
zdsh~c<YYNTw)<KZD$14Q%Cg<_vQSm7CRdkh%C%&>H)f%ZTvxXHWftnoyU7h?yO(C6
zp}dFONVfZI7MjR=%6rL8<y3iZc^`RSxtVPD>nt>v_m^A92gr6$&%%LnE4j7YMz;HY
z7TU?}<qmR3xs%*k?jj!~ca`n_p@l=_L*>Kd!)3e2XyFLCyPPKXknKLCg$y}U?kV?@
zd&^n!k+R*tw2&?Lm2>1=`6xMGE|3dlyZ>pSzdS%5C=Zec%R}U$vfVeeFkGG}A1m8E
zR0}iYB6+5Ko_xM+_f;)iC@+>Tl9$LA%a_QP%9qPm$XCf%%h$>)WV>f;;d=Q7`9|69
z=UTW~zD2%OUMb%u-!9)F-zDEI-y`2EKPW#W+r457kH~A}N9D(4yPs@ft^B<Fg8Yj7
zs=Qu)P2M2CDQ}eDk~hnCU)sXE@_X_Y`F;5#`D6JL`BQnT{F(f%{GI&0{Db_X{FD5v
z{F`j|crE-WC#8nTAX!e4E65e)%5oLCs$5O3E!UCj%Jt;>@@{fNc@Mdf+*ocR?<wyk
zH<eT6edK2HesXiUt=w7eA|E6lEFU5tCTGaK<lb_YJX{_jkCaErqvdPlo8*=91G4+*
zS#0kh3`ueYxuRTEt|nKPYsfX_+HxJau3S&vO>Q9XAvcm6%T44x<-O&7<YsbnxrN+H
zZY{Tw+sf_a_HswLlYFq8Dfg6n$-U()xj-(I`^o*~0rEh3kUUr(A`g|1mWRp1<q`5o
zd6Ya_9wU#H$H~XY<K+qRMEO{Gk~~?SB2Sg4$;Zjl<r#93JX4+}A1}|A=g4#A6XX-+
zljM`-dGaE8vAjfnMP4tzF4x^BTAp{48_2uM`^sJ9!{jmYSb3s+th`ZvOAeYv!->gB
za<ZHvSCA{pmE_8D6}hThO|CB2kZa1d<l1r_xvpGKt}pK<H;{Li8_IjgjpW916M0X0
zFS)6lD(@}tD>suz$Rp)Z@@RRCJXRhjA0v;KC&&}!W93QmWO<4_Rh}jvCr_7W$VKu@
zd6s;<JX@Y4&y`P*Pn1uRPnPG&^W{_IQ{~g-1@h_g8S<I(S@PNPIr6#kdGh)4LiqxD
zk$j=NSiVSJB3~?DB3~*ml`oSom#>hQ$ydr($ydwE<!j_?<rVUE^7Zl!@{RIM^3C!s
z@~!ep`8N4>`3`xNe5ZVue7Ag$e6PG(zE8eien5Uuen@^;eneg)KPo>aKQ6D8pOBxF
zpOV+fPs`89&&toq&&w~!FUl{;FUzmUugdG?*W}mbH{=cSoAO5aEqRmtw!B$>M}Aj+
zPu?QGFMl9^D1Rh>EPo<@DsPoPlRuZkhu7KkChZq(f2+&2<@$0%xry9NZY6h;50gKU
zi&{qY&Xi}#;S1d9w7gx^{iqI+^W_4$Q0^!9mj}oL<w5dbd5AnzK3X0o50~$h?~?D9
z?~(77SIhUw_sb8+56Tb856h3pYvf1e<2pv;J6)b37s)f_S@L}O6!}#7G<ku1x_pLw
zrhJxswtS9!u6&++zPwPrKwczYC@+>Tl9$LA%a_QP%1h<T<jdtN<Yn@e@>TNH@^bka
z`C55}e4Tu~e1m+We3N{$e2aXmyi&eRzFodUUM1ft-zDEI-y`2Eua@tV@0TBtACw=G
zAC@1H*T|2`Yvm{8C*`N)b@J2lGxD?YbMo`@3-XKdOY+O|EAp%Idigc^b@>f>gZ!qv
zQGQF_B)=_hmfw+sKce*^CMU_sa*AA0K0pq(t3NqOPL@;T3UWocl3ZD?B3G5G$<^f=
za!t9G+*i(#bLBiaUoMpU$^GR4@*sJzJVYKU50^*CBjr)@XnBl0RvsshmnX;*<zwYy
zIc7iTAtcGka*A9*t|(WME6Y{ns&X~Cx?Dr9Dc6!~%XQ?say_}eyqnxW-d%1e?;$sm
z8_P}PJ>|XRrgEyhx4e(MuiQ-DPi`*nFSn2nkXy<J%B|$qavQm=+)i#UcaS^Eo#f7P
z7x^H$t9-D0h<vDgn0&b0O+G^IE~m*o<a9Yh&Xjw~z2x3<mVBh#N6wb}$~khboF^Y8
z=gS3hq1;dIFAtCh%7f&=@(_8be6&1F4qlIi%X>^tl9S~Wxq@6#t|V8MtH@R5YI1eC
zhFnvwCD)eg$aUp<a(#I>xq-a9+)&;_ZX`FBo5*|0d&y1ZRC#ZCA9-K7nY^FeT;5-9
zAs-;Oln<0!$*tu!a$C8b++OY=ca%HHo#ig_L2_65VEGXFQ28+VaJid&gxp<DlY7YN
za)z8K_mq3dz2z+VNV$)kE%%jk<XkyVK1$A)3*<t%zdS%5C=Zec%R}U$^3n1zdAK}6
z9x0EKN6Ta6vGO?i7<s%rL7pfdD^HRq%Twg3@-+E4dAdA9E|O=;v*hFD+43BDu6%-g
zqI{BkvOG_oFP|cxDxW4VkWZJ-kk6FQlFydUk<XRSlh2nI$`{Cs<O}7+@<s9z`C|DJ
z`BHhQe3^W?e1*JBzDmAYzE-|ozCpfOzD2%OUMb%$-yyG(@09P7@0Rb8@0C}}_sRFm
z56BP6kH~A}N9D)lwel14Q}R0bY55uXS@}8ndHDtTMfoN9W%(8PRe8Pqn*6%_hP*+3
zQ{E`QC2x}7mN(1q$nVPU$y?<2<qzZ!<&Wf#<xk{K<*o8(^5^mw@|W^g^4Ib=^0)GL
z^7rx&@{jUQ^3U=w@~`r5^6&B=@;3QTdAnRJ2XAP<EGNmya*A9*t|V8MtH@R58gfm!
zmRwt|BiEJd$@S$1^6qj&c@Mdf+*ocR?<F^tQ{}zoedK-RX7YY=b9sNcg?xbAQa(^_
zCAXH_$Zh3za(lUh+)?f%cb2=z2gzOKgXKfz!{o!|ZgO`yP3|G5%NcS{`AE5soGtg2
zbL3n(PtKPM<U+Zh++Q9b50nSVgXJOeQ2A(im^@q_A&-<t$)n{l@>qGCe2hF^o*++@
zkCi9MljSM$RC$_woIG8gAs5Lr<yrFa@@#pIJXbzJK2bhNK3Se8&zDb;PnA!T7s#i}
zXUJ#DXUS*F=g8;E=gH^G3*`&sMe>F6V)-I@iF~nqiF~QNRK85UT)skHCSNIEC0{Ks
zm#>kpl~>5u$=Ay_$T!M2$v4Zl$hXQX<=f=j<vZk6@}2Ts^4;=1^1bqE`9Ar6`2qPs
z`62mX`4M@I{HXkx{J6YUenNgyeo9^^KP^8aKPx{cKQF%^zbL;XzbwBZzbdbnUz1;#
z-;g)RZ^|3xx8zOo+wx}l9r<1PJ$Z}#zWjmwq5P5jvHXersk~MGO#WQ{LjF?zO8#2@
zM*dd*PX1p0LH<$xN&Z>>MgCR(P5xc}L*6F;DQ}mH<?ux(oH@trg(rk0IayATE65e)
zN^)hnid<E$CRdkh$Tj6!a&5VeTvx6q*Ozyb8_2uM4dp%LMsj1hiM*%0m)ulNmG_qS
zk@uCG$@|I8<^AOr@&R&7`9Qgq+*)oUx0Tz;?d1+~N4b;SS?(eqBzKh$mJg8+l@F5-
zm%GVF$lc{MxrdxCXULgyPq~-eTh5Y?l>5lpa$h+|&Xx1zqvU+KKrWQ~$^GR4@<4fz
zJXjtg50#IWhsnd`5%NfRlssA<BafBG$;Zg!<q7gc`B-_9JXxM1PnD<1$H~*>8FG<4
zQ=TOsFVB|e$aCcr<P+tS<dfxj@_hLe`BeEdd4YVoe1?3ce3pE+e2#pse4c#1yimSC
zUL;>AFP1Nom&g~(m&ljOOXbVt%jGNNW%8BsRr1yHa`_thT6u;1(wotC@n!iH`Bizn
z{F?l_{D!<iepB8kza?*y-<CJa@5t}U@5x)__vH`d59N>KkL6F~Pvx!hXY%Lr7xI_#
zSMt~LH}bdgck=i05Au)lPx8<5FY>SQZ}RW*AM!T&PkFmsEQdQO{Yk<pz-wc|_qtWZ
z_BsWAs%}544(b9wTeF{71r5R8^VS6Rf>f|amhAR<b7%o}OS=`c0lS@Tw|F~27w8K1
zKDfi68+3;rkO4iRHyjDskOO&;4~5Vl2Et$%3d3LojDj&R4#vYom;_T`8cc^Gm<6+8
zE}RG_!+bau7Qh*B7Mug;!9rLBi(v^|0!!g?SO!<Ya<~?*gB#!`xCK_i?XU{&f_q>!
z+z$`J!>|S(gSGG^tb=FZId}nHf>&TYybc>+BW!}r@GfkD58xyC1h&HG@Fjc=-@^Cs
zBm4}%!tbyRwnM;bY458`fr?NWszP<B3ALdv)Q1Mp5E?-f*b7o&A7}>6p#`*rR?r68
zK?mprU7#x*0*662=ng#~1A0PlI1;iU2l5~v3ZXv?guyTrhQSCJ1!G_wjE9LZ38ug_
zm<~lS3uePyI1x^U`EV*MfHUAMI0w#yg|G+~!xFdzmcr$*46cIZa4lR1H^5DB3#^3O
zVHMm3_rPknA0C8<VGTS6YvD;)2hYHB@B+L9ufTeE9X7y5*aVy5UDyI2z(?>2Y=zI^
zOZXbTh40}<_!)kM-(eeUhaidnkOCFK-n~~9?EQN+!QR1F7wkQJ4WJ>|yZD;GUXTj=
zKr?6#Ex_K(*9z?2eC?nEbb>C>6%K*Jpc{0D9*_Y&p*I`}*^mQykPn5>9|po;7z)E+
z1dM_)Fb>AUM3@9qU>Zz^BA5lUVJ@5qC&PR=6&Ao5a2A{c=fOf)1dCw_Tmnnsa##je
z!E(43u7exkCb$Jw!tJmM?t*(@HQWym!o#oz9)q>;B&>sH;5m2!UV>L(J-iMZU?XgT
z&G0U4fe+v#_yo4X=kO(b4d24|@FV;TzrydZ4Yos&%>0KGs0fvzDpZG>P#fw(eP{p;
zp%FBJy&x6#fo9MgT0l!^1#O@mbbwCK1-il^a2Rxh?$84=peOW(BOx1dAP@4P5c<PF
z7z{&U7>s~XFb2lKc$f&2U<yow=}-i-U^dK!6X9f-52wNcI0MdtbKpE!2#a7bEP+d4
zDO?WA;3`-S*TQvh1Kb3+z)H9sR>56x53Gj!;X!y9*1%)17M_H4@C-Z$FThLi3ap3M
zVFPT0O|Ti>g)Q&_d<37sR`?vggs<US_#S?QpW#>d9k#)C2vV5;kOCE<GE{}?P!noH
zU8oNYpdmDZCa@Qz!amRpnnMd{39X<Fw1W=N3A#X6I0O!ZZqOZiKnC=L-f$#jLk{FY
zJ`_TK7zl%5C=7!UFbc-NI2aETVG>M%X)qm%U>3}Vxo{$!4D;bsSO90hS#S=V2Mb{l
zEQTd;2`q)nVHsQn%i&tM4sL*(;1*a3x5Fy93+{o{a6dc<55pRG4A#PvunwMq=imi+
z30{Hq@H%XOjj#ze!@IBrK7fzl6W9u$!<X<id<);hkMJ}63ctfP*bYGj=0DiGBP&8>
zu=ht+|Nq!~6R?=S|L?!1MNMh3R+2=75Rwqpv?r;gk|=FbskBLwkS$TtE~!*P2+5X&
zBneU4R3=MOmJqTv_w&4GCd23R`Tl<Y`*&a0|GKaHGp>hu&w0Jh>zwylUT1mFoPY!%
zXGjhLL%=W~1ISsD@<0J70wpjOi~}lQB2WcWfEpm@OR576pb6#xEifPG00z(phJc(o
zX$s7MIj{g$z#7;9J75nSzzX05oPjHF2Ohu^cmp5c2mC=G2nHb_6oi3r5COJ;NU$C3
z1W_Ow>;<tP4#a~*kPK2m8b}8jAPZ!JT#yHjfqZZh6o50J5EOw6;1VbXC7={s2W6lf
zRDeoQ1@3`r@DS93I?w=`Kr?6sOz;#u2koE(bb{C5E$9XxKo9r~dcimF1M~qtVbnhm
z1j0ZB(1AE0XJkr&L0||N24sL7Am?T(07ak##)5G`1(35eRlyXX2BrgbpaIDFnsa~_
zm=AOS1Ly;C=B6<)1!lk;SO6<v4QzlNum=u+oX6<|oPjHF2Ohu^cmp5c2mC=G2nOV=
z&QK5r!a)Ss0wTe7uoFaqXs{Q=f;bQl5<xOZ1!*81WPmJ?4RS#qI0o{;Nl*aJfI?6N
zE`Up*7?glga2=F^a!>&(K^3?Ms=-503+g}vXadck6)?e5@Eo**4$ui+gSVg?d;mS*
zGw221zz@&|_;8*k4G02ZAOh$>97q5uK+X;w0)_z@AP2}fq6$C}D1otnoGGdTCIVG3
z1(5Sarvr7M0W<+QYg7x&2ReWO^noET2ByFam;(!71+0M$umkqM0jvN{z!|s#ci;g$
zfj960e!w3Df?yB=LO~b^2N7Tkhy>fgP7np6!Cnvx;y^q|1j!&3q=9sh0kS|g$OU=e
z7{~`FK>;`e3PBOL04{-IPy$N9bx;P%K?SG;Rp1_|1`k0kr~?h42{eONzywdhbI=Yt
zKqq(&-hyuM0rY^+pci}tKR_QK3w|091j0ZB(1AFR08(HO7y^a?86XGbfdWtjN?<G)
z2UNgBpbE%YtZHC7PzM@76U+fxU_Q_R44@ATfiW-zX22X+04rb($l0xSz#ce&6~GBN
z16SY<Jb)+g20p+K_=7+Y3_?IC2m|3D0&D@1U_00eqChm*3t~YWhzE%v8Ki<VkPb3H
z7RUy<AP*b^`QRid0B1lUC;}J2B~T1XKq<Hm%0M}&0F|H$+ym9%A*cm)paC?2X3z?l
z;3;?x+Cc~C1h2tc&<#F-9`G6Tf^Xml=mUJBsDB^`gn<a419C2{1dsxQzz{&rsFeY7
zKprRna$c<x7z@S$6+q6eRRvRk8ki2qIkp-=6U+fxfShTo0~kOb7y@#>ttl`A=D-4w
zvu>?{4X^|DfSh}~0yqI@;0nkYxE{b0cmp3m&cpQwfgl)!0CF~N7zhUuU<-%@+rdr{
z1){-T5DVf!JV*q|AQhy6bdUkEKsLw)dEgkx2PZ)RI0Fhn5x4*@fnrbsO2Ktd2FgJN
zs03Bu9;gNnK`p2Q4WJ1$gI2%<Pr-B04mv<5cn#iyZtwy0fX|>8d;>o~AK;^-{(&GM
zXZVT$IuHjEfSl($2n+$kfD9mK`^p0apa_%zIp=pAPyrKxDj;Y6s)6Z19cTb@{_h;1
z1?B@CzySKd5EuhfK+Xj=2Nu8zSOXhi2ke0ZSOJ`XGjIj&zyo*!Z{P#`fIkQX!5{>L
zf-n#cBES|93ATfsAPPi-y&x9Efq0Mzl0hm+1L+_GWPxmu3-Z7*kPl9R0&oTtf+BDM
zTmr?Q1eAj7pbV6Q3Q!5Ez&%h69)em>2O2;VXa=o-37&%IpdEC8PVgGM1>N8S=mDQW
zFZc$2fIh&7^MGl9oO3J;L;yMOSR6<Ia_;dUFa(hEk7a-yAm<<}07XE~Lmmsp0dg+#
zM4$@D`N(QuIw0pHYXD6^&P&z;^MMXv0DVBtPc{aofSjXj4lDpUPuUvS0CKLfJ#YZz
zd}Sx#3|xUb@BrkzWpCgE{D40Q1i>H#gn}>-4kEx75DB(}ogfNCgS{XY#DRE_2$Df6
zNCW9017v}0kPGs_F^~^Vf&y>`6oMjf0bBybpahhH>!1vjg9=ays=z%^4IYA8PzM@7
z6KDplfC-+0=b#;QfKKolyanCh1Ly&tK`;0Qet<qeHu`Bm5C{ViKnLPL0!V>DU<eon
z$XU^HKpv1YqZNS?AZJI911ex5Pz6(f8ki2$fd<e7<XmYjFdygu2G9qFz!;bUGhhxZ
zfE6I;PTK%GU=JL?3g85sfh%wa9>5cL10UcA{6QcH1|c96gn@7n0k(ihupR6KQ6L)Z
z1+gFw#DheT3{pWFNCz1p3uJ>_kOz)|d~gyJfHR;F6oCui5-0{GpcGsOWuP2XfJ#sW
z?tyCX5Y&P?&;Xi1GiU`&@Dw};?Vtm6g4f_J=msA^4<N7A(=>hNOq)G>_W#D!|3;Mm
z@5!;V`P=`TZE8Nwb|oL#w&FszF#Z$7(Es1@Ngjx+B`;U@8?{eIE~Un^12V|N2fTC`
z<S=8j%S7^|39q(KWR;Fakvf-pe=cTC%7L#V*myX3m&&Q_AnzIe<}zeF*9n#SXpi@Z
z^6c<Eq?E4te%L++?@`M`3|x?i>yfiXOq}f9u}g5wttben7iAMyq%6sc`<eSrmI~Z*
z=9Np}1GzV{lq4^%{s>&l05ZiSFK)O7uBQWTd5|2Emls$CkTL4TzG<9Yh)?AC*C2Lq
zzdiDdg*<PO<Ak$I4d(*Fpaqz~376-*=OBY*oo>MSJd5*giUi4d?_r$J-kkS%7>)&0
z*&>WQdn2#$GvVt1d3Hly$2srjp72{>HRpz`IqwJX;4Yawy!+$Dy?<^nw_R{QbK3>?
zbALPN58&2oe*oX+clq0v>8_bf_Wk~R@sIMn>iS00=S|X)rk=0buLKs6+WF@f|NMk0
zqA5=VergVtoccU)%<E70Yebp_%bE)A7Rzp$kt;B6)GKptrT(*-ehGirl;mYQYD)YM
zH8$*+I&@IEMXQ&ekLi8MhJ;5xYtM`;a4$bGR%7T$`x=Ipgf+{hG+;^9@ONL`KByEg
z`Esi{qWO(a&%Jlej$amYTSmX>|Ir11ulJ8t{vXyg8z#i~CM7OUikfqwQBL8;V4*TY
zBir`)Yr(rJ)}IT~pBvDtay4`0vC%d2{W|X}D=1BsJ2U0GW%2SwZHf7B4qrWKn>Ky%
z+8-|ygn!%^D|>X?3Kz$(%)PN^o}W0re`0|9V25=k@e<2QR_CA63)ozoQeZgph=Fm^
z>MVhPg6P4c#G;a-jz>3YKD<^tRNaN!X8%Vw_J1fcf4A%e|4GX}EgK!?v;EL@g&pSd
zDLdtE4xM?EK15DoqnT`jYL$fk1Btil?z_Hww{0BtSx;f()_aH2CXF0(YsvgE^-j%h
zyGL90s6TL!-@er4_Myv@;-<xS92qe2&>{QPCC+6Gsl9=r%LJc|ERoAmYKW39Q@<p1
zZb-w~R_&|9<Zi|kCtf)H`t6!eKfS(BTj17HG)zNI>U%<vSD%qw^R9@-h@6}&5nEIg
zQ{5%Irp1nm`5`sKGbwz7=hG++k0%#0o@w24X6((fJREepsK9$`&{BPEw{z2?p4r^U
zJ^pQG#`jo$t2bqbMwk@uG?msFrW>)0Z^f98Jtl^G6ogyzG)xxX448PO{fKx{?zMP7
z8KZY5j~_16_KvF+bv|h_TW@mt;U4w)<!ZG;a&?W$oc{iQsM!CnH^a}IG1$#R^qKa;
zjc4xfd1^A+Xv%BrXFJ|T1_>8kj@qrUFY`stk~NQ}1gzWglkvc!^UR*}mg%bM$;C|;
z74PeOwhvNOm)&8qKJNPJ-iM}B_PNLWytQ_6<PqC0t0iNq-fa5Ll;8fbElp9=q;PPO
zI{!8GR%`F*G?ly~dhVAee{{X`jGq-4@oLJhXYre^NyYiT&#O~V$vb;FG*M^BQ2RIE
zty1(A3J2d1Z9g?EyEtpq7U}neu7kb@-oCW&c-^hKnJnYIdRJui-E4Bpq?WAk&@fvv
zBWb(I@xIYl297l8({j(AoP5Nr^Uelw>GUYCo9m4-ZaPkpXo%GBIVz{6C>e14w5@0E
z7pr>b<|8{;1_tp?g6=v~v#+gNJ}dwByL$JI?gYcYZPAR)iC#Z4H-zo0m(}XtpxZTL
z*}gABZ5>Z~$NUr-@OW>&^6B&K4k61nm)kt<H1vI2^47dz$zoZpR{gBfT>%HL$OSK!
ztxmbW;Cg!N?0dljH=i!?d;5CHl=V)%j}{zU^XdEco!__GzZ-m0FGeSO*9>jF^)=rd
zdaCRUdnfnK-{hbx(=l{HkHfs(;~n)qL(e_#_2Y}Fd@axrr5@IC#vm?6z&om?gxPxg
zmd(a|i6P%=ChCZ^GQ(B{eR)K`@?JryB<|v<Z#%LD58gZKd*k6)KVNO<Qz`{-mxRRD
znapo!zWL4kxZKc}UeR~gZJZlKFBJJoAES{RJzh=n#oF;o@pVr{Mz*WG`jYGL_Jh{N
zl_Mr4c1g>hF;2|9GwGi7+Ar#AB_$hV50871KjB&Q!$8y4M~j=!oh2I^|Gxe$0Zs|<
zm#&()$K1d6WoX~tScTNy;kqL4tSy<=mX}Wtp3vcC;eUF<cXQj67ltdFx@#o7BT8O)
zUf924sKIslrKRd&3gJy-jKl7kjT+gJx%)uSldE-7CA!Z-PCmJQW|bGe+@>*-caN9M
z3sm+zRo{NLGD2d?kn#HxR!SR>QRPqK+p*>Af;*9E!+N8q3hk_IZ}C_;d~mUls2EE(
z?YQ;WGlPT8)#T+i4C|X~G+ACht<!ta=9S$c7Y?~~>7Kl$CNVHPzP_?6(<WhK<3bCy
z(RW0*$_;pw|6$^-z1nkTZTVTu$V-^MP*SBdYUM}4MRJ=9b8f5|5t>+&TybG&jAmbR
z#u;-1(Tkcp5?_@`Nmn&a62F@?UG24_+iB$iCp#oWd)~@!6nNtsJ=^O;>RgNL_}hBJ
z)z6(t$_=`9(IP)?*&Qt*XC`Z9()2urRp*n(m0P>MoH+P$^;<=);U08_(2Jw}z6GiU
z1|RVr{yFOVx~>D6uUp?=iW_v^<<#zqnXS<=UD>Z5&1%bVE!63_`(VeFxp54ZbIje3
zvE!x;YhEEb;!wrX<v;UA%?r}BoG^(#TW0Fe2<66x$@3c`zXnd(5qfG=`nAc{3*S_q
z`}#Vl(>eYLUF)WL=1K9{wOO;GrhKaipT2qY_zN3+6h+2PW=fS<T&Ue|cX86R<4R*D
zjZ)SY({BxTzPjsHlYhbmk)ny=AtBvoTelw%ee2s3u>bOgPp`*^pKJJX$TRE5!w$iD
zcLqPX?YYH&TG*cSyUd0kc}ej%&NS)<t6iIYTmF8T$hfPw9u$RpPM_B<d+M#@)4_Wu
zskyvOTGKb#Ze)^jnbyeXVa^fs)N^}|SIp{6U-zB<>b`7ctm@2X=@u1(HMZ1+^jY}C
zgb0cXFUx)~;=KB~*V^I+s%LFAZzwk1f0cW$XEtreS`*`h$Elf7Z{iB`a`O`!z3(ox
z7&GGj#M2$$qt~sHtD4iLx%Kem8>c-7eb3X;&M^G6?9EuCd#`>5nwmAJWd=-^NNl`T
z*Ok@fdptgD?ik+)r$HtGsT=n0i;Z58@-_M4IgO5)tkyM0ryY<^EN&d=wMV<E{JXod
z%F8Vm{O2ADuA8SGn0vtD2j8xBSDUpx$JPDRO*}cmdYAbC^#o~wfjW!r>j&;Nm~rmK
z3E3E_;$6F?tZ!%Qx=fnO+%#{4-rhI)Nq+8icdm;pQC(du;nqE6k;B!`i(;Q-ZA(dS
zIdN$A!-f^p?d+5<%D;G4`@Tmqb#keVV6S=f;HZpi75qO3uMK|K-lKl~NL4WZ!4LE5
zt9O0dz3{HoBI`5E;gdEx(9fInZU3pOJ?qKk1pU!JZ95_#4X)uU`H?87Z*(bp%k9bz
zpY-b|HT_=ikj>%qn>*v}N!91>EM>2sQFA{R3N-Iqf8|!=1$%Rk+9}?0fyM*lg-@Bd
zG*7)7KCi$xCGgePRU!GKcf7VTJ=jvrH@Ri6aI5Xi-ley6FV@=3{vc|7B(p(l&~Ztr
zqNk%b%%AJLXG+$=gt&E%hl_Ir#1(A|f6RPdUNl1GqWKqVvE}ndkF46^E9h#X!#F7u
zbjG70vGC#U9+xHZpBmJ!`@Qn$WsMs8HS76?lW%88k5_7xygc1RS-JEOJ=gW_0x1Lj
z32M&&dh35n;NKGXw**iE{1NwE$62W#df{T?y4YgRh6%^IO{P{DTny=v)Vts{cRzh{
zuVXF$P1nHpmjlkWT}v0}_&#@+F#oH)180AU*z-<XdGN@OUity5aiNu;)<2V#FZn<p
zpLTHaC*wDhy4w7&&biJiGZmS6KYU9nzmk3EQcbN5o+Umk%hXws53>%I(8W8;)5BOh
zl5eF{SlU%9y6SCy)cJ0c^*R4@4^OA`HiQmXcD2Rfjga2lTXNf<{rtFda*3YTykm;f
zXA6zhe3777C!Z*uxw7p+#*XDV36<?LZhJi4!c4!sD`MTNbcSwiL(%tv787o+wZ1=Y
zLdiuBozu7L>|II*Sjh~H+%nqs+)ROht%ZDJx~5H@)^ebwPADyBkFoN?kXbrYRGYrV
z?eSEsxAn}|6-$`DJ+#}od&ynT>dGlEpB!#4*nL|)W@B*L>Cr+(4^B-CDjBx1L#4j$
zp!n{n7iyaP<+9hZrrPXVq*bAFz%u5Coy7>hkmE*aH&0mS&~EywoRu`|HgfkFP<XH+
zA$!H?Z-HsMCA$l?Lc?~I7sgfV2+UW>8})H|mB{(GPv;e_+O4%=(WKHz@19*9(p0Ly
zzpP|i@v-#wvZCCmdsBu<Wx6c9bYHgdxu-uv?6%~9m!5A;3t|~JkEbq_7%=JkU15`t
z^aY<ri6&KAwOwV1`3=<@7OW<jeA#V@m#JBFSFl!l+S*&sFD^FAn)l6}=IgE{ac=#h
zXTgaJF7wa7Z=5nVvqW;xiIVNj=HD{qV-+5J-Ei@SfJDIBy*c8uh9;dhe!9waXHwvp
z$793&wH{Ut8|_oSYVZA%0bgt0Tv2}=Q8!KKIHMpVQDWV2Er%b0GQP*}nJZq%`KV|2
zM%-I>s&tF=R{oHLh6T4y58f^jKG&c;QR>H`BbLEK&(NFdejHKv+?roiJx{~lXWAPR
zCzCV9N&*{?X13ZN`*3&h9^2W|j>?U^?ItAf=1%g1@pSX)QS&b>S69|k=@@f0wp9JJ
zLs1jG#nK|3uW99p-uhgPaN8BPB9FDRu1s0{=$wSdp27JokykPU9Zetbv8ujBFJ2P8
zJH9|V!pe9`ufenWP{DMT-%FqFl69S{HLgjnQXV!ne_Z@_Z;v6uu07gww!Cp+7#*-X
z8)~m;dt$8iXs<Hgljif8^Rx#~YCK?PKh5;I$%s26Gy^oR=?+tlzrCS}?opgtd_N~L
zc}k++z(o4zL3@6fy_0$4QIYR7WO-+*hMM%?@Cu__1vx2`&mPd2W2fQ8H`6jox;<C>
zdF<Nw!WE_SGB3;vsP|iYW#EHV-*3FE50^HXSpPKrm1C*SW6i{6S!)|TYG*T+CJdF+
zQlf8*3y{9n@c5xpspAHluELvfp?sF5DSTDZincSq58OOp^~%kWvwPIHt@x1sV5NIm
z#}ussdQ|W!_3J}&Qg_VE3QV$Xda?AZd)Wc|E3-eYp&i#>_4C|int#%y54X2z@HM{>
zNS|r#S8#u}mB^^f1I|HXdUtGBPHT}mcR1$iEvx(03TM|d4W`%h9%9|ne0#}x$;S5=
z&(glQY%{A`KECqKgGM1{{^Q{t^tf^%i)Z(oOFKtOUNm9K1|C|vbXaKC8T*m@x(9aO
z+vwgRpkb-BWY)}Co0FQ9G8~7+M-IGhTk<aMMTS~p+)7)cs>QeUECQrYjGLLqT%cd7
zW!QU8!;&>@nmc`>s_m@qCRf3lV|%Wi{vu<$DLj3?<jecnFUF4Zz5d+(K=ihrjwjEy
zeETdq)U>?Q^i00unXzi66AM~e`tG&_-c)b6vE58Fg(=v$HpjTdF~h<j(BbU5wT>N|
z*EDw>J6&)<(z^6+?Y1X9p{KUnM()sj@uG6y#3#~Qaz2+G-eoiN*yrdu$wEi0rd~bN
z-S<+}*|fvhZSh=FBRQ2`f03x#&&^{Z=cmPWn^>3%ju`Ozl}1(T@DbwA6bGyPFz}RR
z%=mi#l;Nyr{O+^$gVY|xN4y`TySwJWK;4xZUh5kg7H(`5D}H6P&oUyS>1pK9YnspR
zz8||hA#-V>&S?wL5sogR_9cC%-7flDucVhQw_3#%ajAW}OD9|CWvyu354~}_uTB4!
zW2C=Wdi<&8%HbLhyUP}CKRadhyJ4B0#ru}Ji8bpACnXqKyCyCv?~qIjlpEN*KtZ$S
z$jXTmZZ<m>nO`?EVg#Hn|M2$q6WNqZS^Bdn_e%Dx+g%=ZOyF4e_Qw?^53Nr!`6phC
z>3P<Av~-M<mCDJ_bAxAOrQgxbZfP-`e!g(`oEwL~=~sN%t2S(#{7-e|?GImeDbMxw
zo#AZYIYYc%b+6dk_p3TSWWJSt?LXT}z~qU?Si4e-^JecX^FA!RGqmlS_S8zbbB-<#
z=9kN}>JF9K)9V`dw))<hM{jAkzPxp0%B(Z_%f1fwIT7(zNNrf|t=`&*2g=h$B!jaT
z^06Fu$W1yBysh)4yI8e@Rix4Dfep)5W{;It%sk7lS8-?uE4t{;w+o*=Penf2bozax
z$o1d^<DOT!@jFzvSDi3>u~i~_+pzr+H~EjxouH%eEwa9H)02^-BAvE*ol$yuZ}<M$
z@`dKgfjwPSw^G+!zj*P9h}YPA^QXLCG9+0_@bi;N<`Koa5BoC3t<}$2X}$1&cjgJr
zzBK1dP8Q8VbH=nJ*5a_GOL|7u$&GuVesfCx?Bn9a<+Fo!YnDz8&=$Pa$=5jgdz?bj
zu2O*<R$+|x*U+NH&-}-Xn3i|yw)>XK#OEUmhCP04DfX@IUCzFgU1~O0Buk=)J<GHf
zHHh1=cuZ3D;>qJzsa%X+vVC0lRxzpN72hl;*z_hmUanB#p>ZN^!$aft^J=$KqRz=a
z3v4|+{OH}IZ)f`4@p-T?^wFybGwlJ93-gv84J^ISO6%Gd`Ox2G{m{FwhTA^Ld$Z15
z%jkHU+r<-0SD#=lwJBW|p;_lMo;LQo*tQ{xPg)!w#2M88-1t%R+?FYO=lISJ7}EPD
z=ksW}=UQ?z%fwx`m<I){xOgma#FkqwJyUy*ePdjA%g3Ls9TzV0Y5#-aDgq?~Z@ZXA
zCQ3f|+OqH1w%6m|U%K2>M9*p8c5l(cPjbUN&%Knj_r80m{(-H^q#w(>A1-{I>Dnjb
zIof~EIz=T%5!3hn(gz9}j%#+$)gN`gJZ$;6vX=#?n^gDAHuPw|zp+N>Wl{TsQ>I&`
zRW$}k`!$?T&i@>~Q2NB!c-K11bM&(3<qujU1*T_KL_WMd(S6k8x2tuwEQqz$J#p5s
zqH=R&&G6{4^if+4E4my5JMxtOolgE+0{@o4za{W*3H)0E|CYf2>m|U?cSv-j$2nb}
z5kK#^ybX%(l$Tv_BGIaz-Vi_LK+`#eH-Z^5jeYAK<O`n7x{$f*&5$FFA&=DMCJx+G
z5;JV(NUu)4uos(cwjAl0KC+^1*vlF|vF&zl^BQxL(uQuGI%Y8cYNbJS88=1;e2nuf
zsX1y^nG^i<fs5sf(z>Bb3$BHPZpaotDY@XuVQ1gh$3>(E3Ji{#VOaa2qS@)u10l!H
zU)z-5ie(E9UK_osG`weL>Ze0?D>b6kGCeFhWAH5o*2WHD-Iq&;HXpC8eICc;4~rf4
zwmoEn{hi};UNX;n4cVnK>%>hxuSFw&nEc%JX@cb9xPTfP`@pj6Kk}d6y5mrPcUbis
zri*=kP1TlnJ|<RY%dR#};uoB^Y?EvOzt);pC*~<PPPlZXM0SMN%>d;ME0h&BO&S$$
z;F+UQk>VUu<>F8tSedoIZ<|Bs2-~+SmG@dyzdtwmX#3C8DH|>vokhR6Xn^FnFF$YE
zv68~y+8BPjc<J8Pc1D2j=8#nngGZ>`I`cEl(%oQB%kYzqM?YW8obgD$bKtO5`3n{g
z`P$p?V`S`ykMvQy{pJc!*!d*WHa>IWj+mMIFKbAst~w|BU{{0ZobqsgceVYtwMDZ%
zj?dmAtUTr2sL+8WGm9)4N=rTqExFPyvCl(Az_o~>n*V)hvUJ@jqqJG(n-8itY;0PV
zm2Gxmd-B0&7x}Z=!t8I~nRasert0mdV%}{HUglNwMAFDE;J~BAT{~A=ei7GcE|=W<
z!%t)NDVx0+qU{?4_O)&K9H<>9AhG6V)TY||e1WOYh4yN7cA2?Kn`=hTdwymGlYXvo
zzL?~gm3-N=)(&=6mrXV2)724bAK~1%Bx}O{%i-z{Bf9Pcd8tRXFL^5&xj4!5(q|3L
zo(;<^oI>JEXDl~b^K+%q#pTC>0>(MDNnLYUvxp|;etU|n*@2@yw})Pg{TV&OFmFn?
zsN9Q-r(@zy?i~5-+vxN2<i@oGMIJO>Z9AZ>HnjVd3B4ldsruIC1Lm1ZyNn#_deq<O
zRkD|(n8iqqX30m}EEI+W4GP+!t{M3<Jt9Qut(C*+hn=DEv<;8@^v@?*<{e<V=2n~R
z+;*&F%;1Z!rB~I3OBx#|FYlb@a_Cj;7P|+o3$tFl5)GfBxODmx{v3f^zw6^Qzs$Sr
zXCJ1ewKZ0^=j(!v2O3^P#IO8u#HHxnH<L*(obR3}s`+7<7%}II>ZnC;+|GYrps@IZ
z(A~J)2ZK(1RC}uwDAlBS*~s;ch>gEojnaox*1lSyHmOI72knvAaMQ_9{(GIe&mlQu
z-?ZBY`?fsZ*_)AW-0-cmFmiKNYw6Z)p-DSB)K0!GmXE$;Y&>$-1E$1}0_kd#pXcIh
zH|{Zd`C-+(6VAu;C$<;TKW+Rma<Rdbhd~lzJNOIEo2<DSFyiN?h(WUk9BQ_*o9}D!
z;c2Pql=l7hIf)CmwN+nxJT7zVhJ9kPdev9otseH|R!fm`%<WER#oXcEMj;=Z?raq>
zR8D-gO`=37x=B51m9M(9;_3;n4tz>2GLjvUc~wGb>(AJ$udWS!eLAI1TfO@Xt(xEO
zSZDD4b5ZL`^WFqlJ{2iAU;doWe4+Mo3pw?cltJbP<wI6~UzD)I%%~+d%}4XAY!frL
z<>}sO&B@j)44O19tkRa3c|O`THT>w3&%+fii-cN@ZXPuJg#QE&n}-a(_a{oK5;vGs
zGE)?`Z_9}qXz{t=ZPSe#&Ea1>Ej*ICmX|mk3_Bmv_$nd%?5udP6YGLD1v1JQB?I~%
zI<7goJlbsI^_YQ@kETkFak?+AEo8Io3cvJRVUrr0@s)k07MZl*>^(cntV>dLX9z#A
zd84@U))?K>dxF|+ih^Sl0?jWbJsj;@l6X+hSz~;<&Vhxt<J>2HWz7`YvgGRQvCP%y
zH9bnqe)73ix=Ln54P7wmq?Ka2T~3u?di#p+X0A<kqkKLj^2eW!@@i`<5&63NO}41Y
z)Z@p+9<_h5^_j4X?lsMI=9eF4rsvA&BUA6x9rEq{?zMGw4`c3x(KWlhMo8<Nju{`e
zq|xB)&IhAdS`SofGUmMg68B}-tn5vG$FF9uU)U9$b$0K<>y6D#>TBnBJrxdKR9Y|H
zu>NeZ#N0_Ue#A!~U%Weuf4O(*L_NO7%6*-iL<-c_h&V>Nnk@ERztQ9Q&sBXpdu_Z0
znd?RypOn6ne9usPX(XS1*Qf(oBYdQXO=YFc*ZvY+xpbP$(nxi~H{CYV#UGsK_sneE
zm%dDA?EJS{xzA_sC`>#%ac#&5?VroHiXJi!jW#_WH*|B@6QNn!dn5urjLKC?JmWE|
zCQUgvlBM@5=Kkib4L&yIn;6C_@wa9!{r>R&?&$EN4JYYAV=7ywzZ2Pf>?`Yg;<4G)
znL9t-ea095(&(|a*WHNJi7%~2TcvJw&UhnbGyGlVeZSnY_Cqt?e*8Xp?x*_e<IS_<
z3Z5HP6%WdKa(nBdx*+TDl&i9X&!xOz9V)tYebh@Kn|Cd%M{hMRDe9{j8FzK$_bX0&
z4h8vVyfd8nrb~k6I`4R8UzXzI&oYB9wM;5H)BTQr+Bb*Rn89(=raT-nI!F7&+Z`>Z
zMV>H%HFK)feFOE4z3Ybyl$qV$_4)Z)r~30*g-pkx>*akGYuDadyYc&c;l@3}j*drW
z`mLMnHo#Ca$lEQ`b?^P_8oPrQj^6*ycz?()q30jZ2PTS%*-FJ+`gW!MVE4UI<0c&~
z8ZAFy)P=4)-fzbD)I}@l-}imt=2WI(@$TTh6T2gSR^{3~Sb4a4e9%(Ck7hv@+bl$X
z4m@(~lg`Y?p|&&4=UqCt$U9)>A&>8Ow|wh(S2^%_(#NS+EYtdqtn-c>Fm3bhmGiQb
zjucxauJ}<L!+bhweaDwl`Kjv;`ZB_H`aTjlej|d<CHL*Xa-Z7v^X8Qs503Qk5(^M+
z`oQcq_2}6x;1VcmMXQmmOuZ~xeEQ^)V>9&M%)6wy{)1b{g847KCa4T?`5IoeWMrt3
zm)H|4nYO!Ea$4@4m7sU;maFvlKc{O|^^;a`HhCw@dFPHY|HU0=CsZ!DYVdAU_^xRU
zA5M+8mJ~{VqP4B#Qc%9I!)LxDYt!;q3^{z}l1uB=Wy-<r8#en?*La%EOgXOH`(ec^
zd(pents#pZg`eclxN~sJ*()+v?9<b_WCU*>KH<IO*|THot!o_f_gUtTmQku{d{AK-
zJ!e{lcC?6Vmf^KG$E{D_Tox3!zcgLl_LAvW@12iy&otQ67aTpVVYh0|&O=Hkj;0E`
zE}uHwP-s|_yFm8dh#LZ9hl|b3>h^Q@+5Bz%g?o!S?>pu`ve_`~%%MqrcfD@(-8M7J
zlboJ-H*(vc`4{ruh$`p2-nXIcR(NxXL2=J?ooh#SwI3)IJ2T~n!V{L`)^|gedMB1Q
z>{)kru4I?v&~>$ADt0WWv&d1hO`f*XdAFSXwD#e9T|*CsFHo76Jt?xXa#gaxsKBNC
z?mkD`hRrw7YMpn|W`52)de^P_A7^U^j0_6tU9;KXi{C2eJr9T9>DiGUd&x6zzskqv
zYfsG-<QUZn4Xax|U;Na`cX>zfjr@=Vr^?v_O_rIhxzO7k9`Iq!A>G-f8^)~`Ftze8
zb1LxJuTc8<^h~J<)(exjZaWe1S+O{pIn?CLs9XVKyZYi~ZRc8c>M)eA*UAaXs6Ox?
zoKv{^(iv@)6s5%L(sw`BH7k#KVx7Mt=kVB(K5grk>E1nCy6xb_TkkfQJhPU5wfnAH
zz%f3{b6qLz61n3=f3yakeJ6FaGHRYg;Z|Wj?WSEBvD<=1+$&dPeYXDiCF|#ByW<bn
z%nhy{s(i|Ova_tRt<KsTF)l92i!SqZE;Q{FUGwT-yJH`}SI$cQ#Mjf)tzOZ`^>&6I
z=3ghYcD3)?4Ev_j+IO1zoEWj^wGRhP<qs}-Q9AadsN~@0F<Yku-`VRhDCW*^2geaQ
zOc%N%-KNcG`w`pb+I559z6jr|bTK}Qu6{H3<kY@`B~jBR$N8TZdH=a(*?U@2(G&A1
zy}Ry@+hQ}Ho7vs@yw~QS<BQdof)B3|y_V|`|MZr@tF!BFi+eA-pQ68d<jEa{()qKu
z-uJ0GTg+6sV6j%pOK{*D0b9eRD^;b24fL;mEOK;4$)v!i!KF&>o{7fU@5DzQ+T1$w
zs?}hp+2XS<npSPgiQlxXOW1#^y`9%d?NO3<P3C=n5fWUxYs9klSAomox4hZvYJR@4
zOm{+6s7QFTjDyXK52AAO?wVa)_e!v4q>EC{-dST-9*`PtV6XE0yl~F@1=j`aoO}JJ
zc~}RSS4dBa(%v=c!Nz@pj5lJtS4Ss(U!1&Q-L%BpZAnE!F*HZ1%>tH7x|hU0Tk=$`
z=vwtth3T;uAN2gp)4#TmWuqo%#Z1{X#9dxG&&uQWQISu!o8wJqFL=MOIb;8n*YP&r
zJbl(}y&fa@ZR!_anVDthcMkdLyGdY=!t0d0@#}(&2Nm(_Zk%=hf`@rd&T1js!i<cY
z6Mv@76Am=92s7K6^L~l!0s7T_Vtb};|NLU*V%GYYni`4k(|(rUn$~v6xcuU_!Vg_B
zULEW9O5{yS*`C6%N!?-Wk<$|G<Rdk3zJ%I>pkN_I<z=#uPBk8zwS2bds1AwQbS6FP
zZEHz)-=`(gkIn@=81Hkx%RfEjRq**sU)(Qh(yT;9BE9`@b{WmcdeQ7QYwNA~I`whU
zea~97_P?&2esaCQL+OqYx)E+cx>rVg^FOOR`l#U4vdF#{<}Ipm%5xTb=qEDgo-kRX
z5uws27b!0r%Y5JF82f$c3Crx;)ko*1O?hndL3V6*#>>&Ka<o#lf)4LJv9J2pJ)MhJ
zQer-Z8{L{=618Xd(lcKUx_y#Y$iHvA<Is%brWsGQ3zXVs`4$_fb@koOI2M#<K3wbC
za=Q$P!pnBe_E!?;Y#E}gxNvQ#R#%e8YOlE$yoH}{JnZOYGS_qY%UN4$25M?q%1PY*
zHm=EatHFoP@^gcX((kRm`s4km?LJ{8myYBv9s0>{&*CA$@ygEyz0R;ab}0Ac$Pb82
z*N&8Soolly#xW=7w6o&qVjGX97Y}5<eHcD@#l2|ZwBpRuk`wlxdOvwr#RaJo!<Wo2
z6b)Qj9dl!V{^o%+)1uo)`|4gY8@?Vp^GN5widNG%`c1l5>kKlqj_vp{XmWW)zKGGd
zDWj!W;|C37*mm_<C}%8x>ET}2_QGc5>!H`DzY|k98NOR^lhUhFJK61>6Z7Si?UV)E
zE^FlUWv)sbIb~zljE7<ldiPgptuE-4X<XTTdwy(wM_Jv@;ol{e#fTP!G>8sgadwc_
z`8IEDYu4G!%Nt{&Joh-wns3t)pd&Qnu*m?X>&42eU0;tm><JI6m>YlP%$v!ddzEgq
z+O#W8_qaK3nE0wq=_2t{t!FWG;vX8Ry(pWipf4Mlzei>FSA)1suL@5c8R#}N>PzcH
z5!rWw(^{Ri1aHn`(Ps+Z4c|@gczHt7iCMLI??Prz*JjCQJ3f7xIBP>jbj)O5`L<U1
z1<p0&%1-pY={i`ss8z`!<cqq7m&~(o3FmtA9gkeCA6BEq_gSm&vc;V-1({2vZvMRQ
z!nZDU`~F%brlnNZz3<@$J1lR%J1Er<r@89sPpvlp>Bnl-H>Z^@JF)BP2$}H$w-hWz
zrx%Srwte)=`g7Z4o~LQAHQY6Rp2@hI+Xp*LeE6vB$<KT8DogL@&QFT_tXE=wqWos(
z#$7$$8CxtGC)(WGa^=+vmB-x;Dw}<}Tip3K`0;6<+~^tf>3f8sy#P&DdeMvpmtH>U
zi?xgo@{}?ue*a?CiD$>$k7U-beI+3{BujB$;Mt))ojaNpv<i<6-{^9p{F<HJ&RYTk
zjbi6(uS#_FXzxrlRafg&XfU*nOL*PgYX9=nx#Kq)E-T(sy?)J^5#K)MasJKGI<$zH
z<<pfmi=T}*4#pQDQf)$JcP1vPoU2=?Gh)8{*~NCP>oruP8jhUvNzJ=rlh~aWvusV?
z&zHA0yFNOSYq7lW>d?)LQx`3-wJjaXcX|=uA-;^34EYs-l8pQ-nwRen&8_X05x6QF
z`EHJc;)Z#5<|}v)YneLU?$G^ja}Do(Dpi@8=`!Ql($45g#SAa$mSgkmFV8d5wtCUI
zWK*ERa3#_2ijQ0))BU_hB-|T7EBiTfO_xZ}x4eY1+42tx+~!T&+#RlOJ5HhK$VdJ$
zUxvDfUcPzcu)%_CfulR8>hbN66_IrxVcvDceZ%FomSfj^+M?Skc4gN<@7A6jPEiBD
zEZept)g&-WgzkUKbhu7pZGKB*LA3GNh58$3_bm(DP`%;KM%j%v2Ym*KTzvMvPj6p7
zjd^j+S4U}nCHm)z+bfr0ks*3S-}H1qTBdl?dacOz%SWF@U(;UkR!~s<;HQPb*RM;Y
zXkDr{l`QEH+UT0{V!6h_Yq1l=7v?t}eKGk+L{ZC&r)H~Y-fNa!|0>K3ak{d(`Nuik
zZ;bksF;!KiC-#-AHrS88Q4r8s@IpE#mzmO25c+g+mX3boXyqUyeGQ*fky+BmN2=|P
zIm{rZ2l4Uw`n$UM^K8xq`mbKY`AGd@Y)z1N;A(aNO$zV+Zv8Q6+~3R*v73+UO7GPx
z1KfN9+1gZ)TcC%V|L;Moct5ivdiVwe@+c8oK5oB-aDsk|3oSo?-#}lUm?UT&&u6xI
ze?OPs!k`u4<{!)(MuJxH22i;V@cTVzm0KWnkIw6TR<3b#B*n%Jf+F>q9ptjo$JeJ{
zhtlGf1dkSVH{8$ch^zcpt#<u02!?(SBIV`0ex<9c|8z=#O#BLBtM&(xT>PO$f@b_4
zkp!v#HRv~6Jhw=0o1_@%>%&%I=N^^D&K4&ST2v6R{#y{QDPjv+zZC`v3iKr@@S3M;
z`}eZv1_iBgcJqfWB68aVHzo-Ra`s;B;^np;*(5I#M4Aa#g&Tx?{uvbXXLX=4@nnIr
z#SY?TfgALjeWV!R=Hl-b_**7OE95msX^|j5Uw=;KI6=I|NDyhOzh^aI)n9T?HQzt9
z{C?M3?Xwys?;GS7;OM&EhbkP@1*xy;LC75yz{eNBY4=E!6GDQxEt)6jxBiK6Xpu_f
ziAREv0&fT>=(o7g;?^UN`9J$MwEpbd2>P>clb}EPHVOKpZwpP=Q5~l!EypLONu{WQ
z|4D%a0rFd00{6GNxFo;T7R15B_@(Xu8lQkDpO6UmMWlGiDai5-9z2+DBz1HF2^mWM
z8^rzPu$;mWNyzDv@_b@4!=;Cb^9>y##W#w`W%-2op7GhTWN{^n_rLqs+8-{|f5p`!
z@f!g*{x6MMgx;t0EAT%%{LkO1vbcX?k7T$1rG~3%U^*aw`coau1mt(p<TuKs)Mf)+
zzyNwc9~b~bU<8bT2`~i<fEic_%)ugH0W5(PSPZPe5?}*tfgM;1$j`?AyZKoOUGn{Q
z7eIcy>;~Kc`3<)RAY&VT4o&^8o76EG{7Aj~0za@8kbV#VNb4u<AsDO!A%OUlP{4gj
zaW42nt@s2(6!=GokD|_|mO;3;DwCx}<hlbChTu&VBqNOXXV4@*DYp!SlY1mD5=QR5
zm>VD0ih$(zIl@S}^65$_9u!O$VC<)vx3<(skRU}63x-T)vPgaL=}Sl*q^0v4wYE@l
z5=4H(TL`Lkn5;m4T<EfOXv^42iU_I&Y78ceyhE;IK#bVZTUsUfbji^i#6~Z84V?>k
z=QEK|J1CqkWY0;5$Yo$VT93(6Byvs~dOUK?zme<n$n7|CV(ZWNV-Xa>k(=S2D_>71
z26V-2dF*6BUZBrprSaHt<H$*UltQj*z+{Dy-^t=$4~nD@FxW2~FO(pdD3C;>-Dqv8
ze^ggfOA3(q2y$+5h%u9uhig6t`@R|b1>*(u5@?D1D_dJQ%32W1<9Fyi&?RT4Lf7e_
zc)FPWetNv9QG!U~fF$8$p%lSX0mcDZ8b9r6Ys=&2#-{oPPJEI#2gKiL#$*-a8hNwO
zC522SrcV-cp%YzBt&lPyX9LSDWU}&!{vvkXY&d1Y;M_COBWM1mL62&0oVqcf^z_Aa
zdCHEQ<(mh+YGRM0=g%W2XZ6~d<NkQ$YkAU<$9;<|VzT0S<W7H+AARUW{1<wp9e6{p
z7kZrXpxX9wjy)oehCJEgpXK?GYg#f{6+HQ|<cUw}iTNMouOZ)Q#bhyg+MGL2d~ree
zJZmPafk*DfBUgo-&xXkw!jnF4pD=^GcL|e4?uA?4+&)3tgEvR+%_CpTvCrVX^OQe1
z3sxQJ1@h?I{h>$fk~3Z-pjXJF$F{34W<=@hiy89NJ2|se%9hD8Bl--s|FGc5iM=5h
zVzeM9XO?sCV<{(He~vvp>YX7L2^D?lXV}4);2ru@A2jCnLBC}FB-(m<Lp?*xp`m^i
zw}U~AtC2)Y<|o~DBb0Q-T=2g^zm^!IzQKSfm{LNs`i8~i6GBbN`$8&Ix1pX-5lNG?
zO&gZ?w`VoV@45f-dsP32PQ(f(i#k|@>pQuXK=a_-CEG{JW42)J$|-*%w!h|<6G=}C
z@;u0!am{DSmb;R2G+<w=BiIQ#u5SHp*5V*NU6iq3Bz^!RK{!!JFG(<2KtF{BkJi}l
zIw=24&I9d1JXd0yQ%5$OI?_ZCIqy@`oyj8Sb92jFkCZ5lv}oe*bj1w&uYCKjNZTZ5
zb}~JF@7FFI+lr768G!p<&17}p8n&sifpS~HY|Hux)`X6XC;Adk`V5l3eScDB{a3n)
z0tte;q#@A4>2;4#U;X1y1nd-eGg-;(v?!mj5)n!M$095Pa+Nhq7P;oOMYgZg{ms{r
z^DW0hFO2AM#<L}ydm?ek`IQln#}hec?6u&eW5v-UWg{hm@_`<ctw-etw@r<|#Eu%|
zg+AzO?E9wVv|P#%LyY63i5)xWnXN_r@#-bA4G}vbkjDlvS){*l?~C21^tooJc8~$R
zc<2$E{dzq4E#=txJGmmFFd>gd{1A40MXFC&|K2AAMWF{BC&6E71aQiRc8GIt5Ro+0
zpgSalQ_h_Jvz#YC7LW)22e}{QwUB$W^Fx*2Ql9v+kSnh5&o3o+;E@+V9s)V<+$V&S
zSCYSKVn3A0is12Gygt4ga`iAK%YvlO=~tE<``HMR!T~z2ko&RYv->OQsz#*K8l>{4
z(3U0(BnjHWp*1za`?JS;jP68E6jNxa{G^xbHZ{We|3yrCJXgg49pS&$BHe{2DU=WL
zNzVII-H3eRn%kZ+m$c)ZOOmtvLZI`X>Yfi1!Yb%Q^3*+djHlIb3KmH?0afUZ-O^t+
zlwZ(~7uYYzNaRnT`PA0v);)sjM%R^4BU36e$sto7V>%_GrY7jMJRjJ;g|cB*TVsth
z$hmmxTbZnAk{>+@zk?F#1J`h}VX$A^pI&1irZ2%))6&Xd3r+Wn)7I3mZA<v=7bg)c
z={0&{i|I8;j9ig<5;?!lV+YED-5;4W12X$ww4X*>P-8;P!6cZp{WKEjSEIL|M%t3R
zIL=$!#bk-_v?Xs&UUVSWf;>J7^8xm_$8Ia6ZuLo9(5D={M8*J8<Fq!qgayjx*9;LJ
za4c*@z=mrK=5p*b)O0zEf_VO5I(KqN^vL;d-m(4jV5;o(NFf^}(9r)L5sy!`f9Nrx
zXNNdkf5AKUlXKf-_VwGL`WHqY%D-tMiWJVQiie!c#Ss73d|Ho8s2y<koE9w>%5%+b
zlV*tfJf6wQAomi+uG_`L_G0!m$)6u|oD!KVDfazRYalDCOc`QC9t*j35|h=9Yi|C1
zIAu=Cp#bu+$xN0$k9;9V&Yk-@K-K^~Gw7+a>-*QZtDh*8AZ(i?xUzm>-6Qm0YN-6x
zdy@o7-(6jA@~4mlqacYo>2sPWG1XKi%Yj`^lzl^D+97_xeh~}GKGo2vF#+y@v<70s
zn8<aL1U>5wYHA<VQS(E_FR>?vN3JI^sI6h(BUL+LNHZU4${b{}R0Qz>CaEluG=2V?
zX|DPEG-<kIP!`iAR!n}S$&+cEV~8YGaTr=@M*leREB%1~X8Qkd&rWm_U++I<z>~@$
z@<94>A@Y%&jd?n|ZmBjz<4#c70~bSV1*cJQ;&dR6))Dkoc73tqa2FqJ2lHDT($?gq
zF!wmdSu6fpug7EM#%VX~KCBPDJm@tb4(f%n4PPA3|7+Sstv$V=XLlU?2b{i6Ee8{5
zR5xA+lT;^$Ur>RWWaz5pGg&f!qZ{^zZW(kHPyF&B{mV?OY5&yihVIyt*n{A;%US=@
z$RdQ32}R^VUK;D6Q|QmQ=H8e7ews6PjL|}{4s^<(6VJ9swFy1a))~a@F^D&$rn|HS
zu>H&X>A@ZI>3|5tAA1_}W3~^C;MXOqYzA3n>ycG9gDkTRIO}X$9{n-b24~&u0UKqo
zkynJd6uWMDZ7_%pePRR4^o6McDS|7S8Z95Q=h|$yAHh!&<6Y4oppiV#*3z3A8Da|>
zoAgLLq@xei24Q}45%VAR{bumww|`fFL9(kyZ3`@*|JoJc<QVM`c0yn${}Pi`%C_UD
zOFA=EW(K7DvsVYC^g`)>+%d`v@h>30YBAPmxJKQu$6`{Czvkb3st_@u7Y)5wqG!m~
zGu$tTDG&CX^vF0(S_|=m5|qBwV9bA^PmOtoZ2ymSg)gOm&-;bRQjM)|29r9_ueyRg
z3vwTNY@eh@4S&QjVSPh0sMqWFrTTw5T9bNsIF1+QQ-q0F*i*mSzlLMaS6zRfuNFe5
z89LR_=iWQDK4B!#$oS0dN2HvX(2XqZFK24J+XNl5zF;r=7-EXh6B&Z`ex1qc<<y5h
z*)!YlD_vqs6*|2)`uEj-t&7mld^pJxTh`DkD8rhC*upf0vbFJ-Eus@bbZ%lk!kZq=
zqF;&lfHdfc+~Slir;d%e6D!(Eq{!abl80^ubaz&8d=O{fkasVq19F|)*w1A55vm*v
zB{BqQH|P>l?Aa5w-jc$uw{;bhWzEi41iv0<LV^yANf#+L>TkelLNEF*#^LcuTvwui
z#_qSI<vYZS?x*V}3ndAA)YR5DSfK&4Bbt$pM*5;*;(!DZy)^y<G}>c~Jk5_W`C~NH
z>v0re?XO)jjh}SNaL!Z`Q{v{wx?%$5!jI}6H&dR1>Tj*&;{sw{mzZ}WAN5J!CelT}
zM-C+8Z+!!zQyHcrkz7+T^+`-JRmI*yGHy|27~0ZD%!`QQ(v>J>-!IkWDHlccd1@=r
znpg|1ty#qF`D`~+`j7YIOtK{=(8*s@Ye?eS*3>Q}@20gimZThz3(6nrLXRP~koq6P
zv;onf#)>lJt-23uM0TBJ@ay+aBE9=3k;pcg-*rQ`l*MF;v&YU@_%GskNRKrlZku>*
zy%gFyI%hwE>$FH4Qyq?RiNB4#Z)C_G=gc^BM<O?aybSUTT*DVoZ49lHnp-L&$QyEf
zS{sY}?J$&~q8{mEtNNQfwO=0#ogqSPtXQ@VwdYDXaYKo2L2mo;OA*vf70^9E3u<h7
ztVi110h(c>Zj<g~W4eSBrc~U$6ijNks%B8tr*l8)iXj@?276yvL<aXapp84HpvEz3
zD}}Up8haOwY+8`}REKVZD0Feny-zqu>OP6w8uD0r8|yiduVt45wJyR(A`gVzTCDB2
zeM~=2eBx)~A^!pS4|ZRr%7D8w#a)-HL$4Tm)siT0-m)TPL=_l~Y+Z6E>tWnWV!sFR
zGzYb@_rN)8coWJeF8ggyMP8PSGi|@kwHNW+rxxTLkZZvv>XWMPg*<Wx$VCQo<a+G(
zV#0HuVUVjpUd0oiY#ROY&Fnp(Z0J=%&w)qJn4`zr{;HtIH>B-v_e#_tdJXvx*hyyF
z`Q^W{9dAwwi@j}zTcob2x>A(G`V2NTdD7-xPw7A&3As0so3ZZ^4|J%uK*nDu$g3eQ
zWXJ!NCdR5ne%>l#&uz)sz}7?i%Y<r&RPQw4OsdG{80U!wX^*7r%Mj-^;{0ViT#!IB
zc*I$>^smXucyIp5B!Q;;2yu0QAP!ZI7}my8$KD9)u^avauGWCp2Xi_Z9&~j5bw;Cz
zXvVM+HmZ$9{tn>Z^=(oX-q5jAYGd!warRyoQT52cLY-aj+~*ul&`*PY9`woIETr<q
z9%HB}9m$*_8B09K<P5IB8~xjc?Fx*W8g(C=(Rn6$V(99W)-q@raIUH6iKLRHl-pQ3
zB2*geXFL)Sg2u$V>QUnq855`}AT=-uJmY6?U{Jd<7=?(-;S8XE4kT1UWE?^pf_ZPG
z^<1@$CBvTUmI~;RayBI?F@B9c{gDJl{*jUi$5sA^WT-Y<i*(|rwXw+G>g4uI+In`Q
zB=d?M$em`OO_OqEu-mMmkU33g5kD=mwME!mcoEfpiLX$^^KkE({cVd{+brSK6?b1Q
zA9}{nlh=T6=gu1rN~KHc?U#rjm>`}g#yB9HCbTehK#GWdvS<=LoGLrGg2&C={V~kK
zIl4*oWYH9n)Bz+4F@lK!w!hG){yWMTuCXnL5#aBXxfV%V>_vVZW})73%`GFgm*=*{
z{_R|9zOABwa)5p*TVLnb5WBK}h()pTSwK%v6XnHQ_Fn9=C*|n}dEx9f?mqM{e?Zov
zZ2!Zj1HEMEsm{STNZJba2goQ*&8rQ$qcklWF@6nnWTE%#6E&A_hK&&Ien0;!E%MNe
zot8EG0%;)`Jo@JAg?=`!Q6|*h54ERHwtd+8#$0`UsAxgoTc?e+Q;O2>=F9=986MYp
zkRC}*iv;-i|LQr=z7RDMcJeLSxX*a0HfBK9&ra;rtf7+!ow1e}OW3|3g5RLuM^Ups
zJ(6mFVl=0}q-FC*2t$neP6Ww-$YP|;woBbJ^&ExT?;_8bXk>etr)1e>rHOdnOZxi-
zRkqYZp15^S#Ndv+$U7N(JfJUb)5eNqw~Jrtkj}&|Te5WFv;g)zAq{anY!L_Xxowp5
zn4emU7DHYIxgb058SFCABSlY@3AOJ1RVL<tEdls_m=+w3wZl@3n}Sq28T<@Vw$z++
zId@&W@i%vBPMj1qfj7V+nVO2zLZ}OB9!w_Nx?BN+dx2ieXnw5U@88f-@fk^yxy(-F
zL2)_yBTxA-Nb&2Fhe`~x`A9Y#|56X7h^Mlmzl?shak3x8E=}(8lJbq+&<}$?wO_#*
zgJ@`H#Nk~4QcCcTj_5P&vY_^#_4bR$izUz#MXiztB#G#z3Z-C;AaFpCW<nl6Qn!sX
zxD_5!-+)1;*)2&Vc|eMAs?Y(!G=Wfdm}$Qj*{NpR<W(bk*9*BO;l#Mk@gJ29*mjZc
zv7ichXS%@e<C@Qd?bq4kE9SxMTcq@QpjY79#wsIvEB;=Oj1%%>Fr{(BybI6H(EiAp
zhy9I}c>a)nrw0+yHHL1OH)rn8*#pB~5qVsVodsPnID6_#E`HDrgl;#{#dAp5jSygu
z>!b(kAD|ii8hJ@m@nw&;O^pk%Yr|ejMF?=c3%Ap=cWeYKu!MS4hYcHILYEp+i3!ra
zI*_J(0OmOV+`h;b++W(4A_{hFAZO0PS%Xu14Yq&ZzAT_02z?RKC%NrwBfIcj5#$HC
zLomu-kdk-vtiPxS2GkZ1Z54UWL<_{7kS!oIF$;Fa*!SPf&)p&BeVDWs;~t5Ix`pWm
zq;nw@{fSe?{M1lN##lWvAd^8>kBo=rWKgELH#K5`^0>MG_9cEFkGUh~0x~euqMI7Y
zP|2e%=K9;mKVtKa<}Qs*lo4#JF-W*UW0O94M|Sz5m9ajI_^;b<A@rm+|L68g=IhPS
z%ZHvKyZw^!iM!UNwkSC}l(dt7EOs3bS7sd6a62)dWtSflak1}3jfRvn(#NxGBRVw^
zXD^XyuD^Zq=KbWs`+@E6LSSDtrj2FC(;lgDhq6w2zTiLGqdxLgfOyuioHF7aqfN;(
zb~9{~V+PIkd-}gV=!q?&9yJgFJN;hR>4hEM{_scoWLLbuL6B_^lD-=DdwTZ$&(c?f
zoe<bbj%(w7$H0PmF75YgFM#-zH0XHj=j<17`_eY#3Oko#WItJg`tx3tU$20!Y9i{3
zlqZd&%o!}nysQIq!Q?jfzSg?Gu2n^lpjJx%I6|#uxzDu~5nl!J49HbTzvg~#guRid
zPs)bOpUj|>eW2~PXR=)X%l>{3<G1hOgh9Up`eBI6XTi=BcWtSNpft#h(>VJG3)u59
z>RFv0`<nEbQs{^r<g7n={S)>iF}b4_vOA&I0X;M5i3s3>F8k3bgN#88GO+29QHViC
zD^oJCInv4I+T!NNq?>cMpQ()yOv8CT|MMue<Z&~DSkismY(xe?UCJUR3OYzWa01rE
zhuYZBAQ<d>p@w;*1i=vQZZO(5`wK#(-|5nSHEX>`WDL0g8?_nOBVpGEwQi$kK4eH>
zkV%gj@&6_VXfD`cd<^eK@=bLN38z1Y4>H}cff{?GaNT1($EL3BsHaZmWc_A_G*u_U
zcOS-nh!j5P;(0NH4A@jD8jw<C^p_%o+%rRH5lvtd?YCJMSy_=~JD(y5gFTD0n0pFR
z_ME6bK>O7Rh)xD{D$cjDdPuv*Ua~RSGsA-#?!H_tg3F+jaj}gh#r9PNoM#fG5Ddw!
z8dGIL)}d6H(9Gc^P{CxDhIeyz!LWyxg1>nf!rpmBnUF}_y;SOvA!#K(q>RXgHTQxz
zAu41Q_reGlB(fOIiW_7=?b}jAG|3o)tFegEWY1^PCSe>aX=8cd9#P)xxm^N{8h*KL
zTany9^c1i5?+<aGzv0m{HRYh@CmqmnfX;7wKO9@+kqOmN@Knke_J*J{S3{Tc-BixA
z8S0@1S$r9%(0m#fkhvMV%>1~caSDx$FZzvo<O?FYDb#leoQSPb_zl?Q`VHQ_zzE2n
zLvFz%=lwoX2INDoVVvNR<KC(DIq_?ykefmNckzjTU_u@Vc{5LZhD3&x@2_otYECFJ
z8UF8j8~gjf9RCJA5%)jz)Sy=jy&u2ZlUetNo*ne^Z*Y9qFMCpJdGr)vBLaFJW&Qc%
z)?GY*0DBlC_m~YG#hYz^`@KtYk7XSBPF!>6T-@)?a{VdMdkwt^*x~&?hbuLV;5)~h
zccM3B3ie0J+gPgXv6&hRxO(hoMkds=5-sR?-0EM;Q+nL*&T#j!h&@;6F`>uAHMbo*
za?;~|r;n_0qoJ2vf&DJFkB;R(I4E7(c)wJ<q<(@#;=m;FWU&-_swm@tNZJ4z8J)RL
z7}(=IjeIZe_aJsZdJendRc$OMcKTF4+25OGh+*L(L4rv+i%-QE4?RT^z^OB=LMS=8
z4^@slnn%vwGtm>{ewU8uSwpV?c1U01+TrT4zvIT<*A0VS^?xH@+0YZY`_K6*<H)ml
z(&OGAZ(n&0y~zJyM_i39&-fcV)c05rPRdCgdO!Zb4v|}P<h*?z8z=qc7znx4y|&-J
zzfHcYDS^LO%568qP8#%NpeKcEZaMPGiy;^J2RW&SX2^Sy&nlky?0V7{<IZh}p5Qc$
zAF$KRqsMON`eG}1+J`Fi?C$@4J&^pG{RcTo$D1QB;7N!0UNR)I+lQ_gxz~8;F_Df4
z(Zh?_&O=x;!emGQr)_fEE)|Ag{!j}u>Q@{C4y-H};u}GJ%R$mr1f__J;@}fZnjwJr
zl%K)ZyztWs_839Z5TA~*7JB6R&ooGwD&%F55BVFp7Q)ORzW}*4drm^_*%?YOMY!Vw
zceRGyslR*~OcC*;5x?QVALHGAK~oeFwT345QUD$Khrj0SjQ%BgVE>Yw=rur3wWh!B
zsr%*b+j94iNSfrwLDkUnWBa;TenV=4Vac6f5S_8mQGA5wU0faN!5z(*t3%4h7&^^$
z9A9Y1p39o@w0RH69qRj^gHS$b6{qgG_2>XQvC!**o-6TzOWD7<FeNh?6KWDe<}8+E
z4npk`&}?gK;NZDFk9?uwFLOH*gUs*n6qW1)bi;mcQyYtq?5lFxfq_J+5G@>E1zcWZ
zPnS^qU$mVMT-{fF_u=NIO#`N=Y_iE7?<SjUW-Cs%F^iKwH-sd#p)GA`OB&i@OIx(m
zqM}91R@6L`DO+elEGlYLrcs&ltf)MiJ!X^5Y-KBHNP-m;60<d%nKF%&jpzM2f9~&h
zFZWOC>$Ua;`Efp<^F9Cneb4ut<COV5dm~$(*|wLmRDV~F=fmG&{-8=3xAEHM=aJjA
zMNlVI!`*CY|AW=woC+y$(!@$}inL+LXf~nI7|EhB6YsH&ry8tOKX;rWK1aWY4#lRU
z-<I1QzDP{HUx3s2uWrBAwHZ|=wKuO1sv<ej-=S^7GdeM6S7!E{j7GxO+DGvjn)?%x
zF8uaUPDlRjyT<+_`i2U%ExTu{ylF67CkLWiiTeq&O^()3bH3Z2J$CO2DfYd3k<A$<
zekkvyyARFMt%65+MOdmII>V87(boUyGuJ4*V2{kK>a{TRy0}`+#B`#7{oeWGp#n)*
z>ne4cwKcKNuXa=PyUcHpzrc51qwOcWX_+5O#H)fg`0pw6I+M5TAGmt2{=ePv1|-kV
zVU67;s{>i<&e_eD81Nw6C1f75++Z%msR`wYI1_MsevsIQ2smAqqqaB)r|5@n{B>#Y
z<B!UF8N3SIjSGREU!Aa>OVml5uuGG2?}ES0{8aoN^6@*xH|a^|_ipRO_S^07JC-x|
zsr@<dF^4xQyp*&kt%tz}k)H`)1fTS{vq|uK#ws5fMJ$2$={sCLte^MgQ$V&VnK5WH
z+^YXbo<H8<%3O7#2|V_rAa8=c`HhLbS$$9sya{-NX~UE?tgpXlO<nlP`$PDP{y4EN
zX|Hz%gmKlUNc~3EFn(ERbm|N6%P%=SnM<45qtM`P%ef`-MJFsLyyO-CK6!?}Dc|4M
z8NHd-KE|@yoAy1JqBm1{G~>7OKb;Q5sbTyaQfcT09{_K+W2Dxq{!pCR5q~6fC@v0v
zOmSHu4Yr>P`W9ytGC|L4H-6O7NB)-0SjKceBG^Q#oX;btI&#|ETOAJB$h<RAIPet5
z;@2?_tvl`K|G}PuiJ`WGeEC>iS{(jh^z>@X=2yE_6((<9+?TX}V#DdfU(fo}-iFV%
zCGB+7?~gPLuitwGW>M4tl#JH4`w;y3li#uY20O<3v0Qn76nqMKZjZ@~v60=jGgAG&
z0A70K>D5aw;*W5@X>1F8Kfmtgd{P+h>9zI=|1Ep$@ZXVdraC;B;$ZuNu4`G}6rWDA
z7x81i+Rq^P6u7>LpNYR+FJK$&`c$=_NqCd+`Yq3tk7)y2bq)c`?NC4F`y$D_fWMU-
z@?-FdtC=If>$LJsAIo0Ga6SWoYLqxta0dVHcdTuUvu%MRV~fOkstr!b&z-iMxE)I<
z&jj8F-UvRbaCTbUkIxEY6nqB!FyHijCY?Lv-`R1N;(QoR(~0k-owI7by9gft`P1Hx
zSoW%3j~!Q4L(_a)SUVlVPx0&N=U;Yu)y>njuZYs=?!??eoGLi8)8FxB>Bk|WXVb58
zYJ)R^oPNH2-x`!t<Fm*70kwK9dz7<wy*iA)Mf^>L{28TBXpdZNdKzAL3Hf8&U5)Jz
zO=rlt57!so_e7)#?s>S;Up&3qVY$Ja!N-B6uq;-k#nPgH$S_IL^ucJcG=r!$^9W?s
z@Kf~%l<mt;+jA<lo5tMUcS7gpCpKp9JMx1hC7?vB?D~+=`3lO0Z(rYiUs;3GsKaZ*
z`hYs=1L~y<sFyNeyEFqvAuvLlOYZkn28+n(_?1Li+H|WY$21p9Kcmz-5Mh-UI)5mC
zC2wFpkH0a#iJLFq;e1W6Z0^WZ%YLcU$*^{)&G?JIG7(-dKZt8aQKvJ2H)&eIRL}dC
zwiV+~_or9;>h!if7iw`wH|?J=h6rOYHEuHEQbg(tWX@*4oIj0g7x1@)KUc4UI$+L(
zn8L2t4%#jgA$HwdoYamwsGRL(r;Qy~bT_Xuhw~)pZ|<_e(uVNURztn}@^`H5n45d3
zAL_w<7FkF6_U*#dZyi*#Ihr>MG*6g4zj}IgDN5b_ewo5N>~y=DUEkvBI1|pq`eTb`
z*VeN3y+)JTNX;c7URQZIvwoLSL2FxAAf>la)+Q9X30?1fmg055aYMAGOH$(2%bZqw
z-)4?)B4zEatO=CqHxFIS`2XvtjXpH`O48)=#p^_4q<a?55FF)IbR8TwkMNu}+^1?S
zr^3!7#_~U0{E?T|?|sSei=QakcXi#98%M9YVdO>oH`RTp;6UNqOeQ3m5RK(~?*2_9
zFFH{8p#pi45WAmUQpft{)rm3+>hTu!nh*FXfSDJ@;TCRY{3l+Nkr}sqT;<l`@Men#
zZHdFgDsFN1z^O(?CXVXhAvm3I+H4;d%u93t%GMiiLt@TXXfCsepP}DOwBx{!6p+@B
ztL3)uEvhHoPkkpzU+vGO`Y~ALQUz}wxrg{x9rkA8!})<d6hlv5JG_qHI=$AWs9ya6
zyQnu&r;aNGMTUVO5iR-={Ey*(2LDcHYs<k*t>nK^v!vUZB|Uo#!_(t57?vb<+bHNi
z%$)8#a`s%47>kS?v)`%W<b?T+!RpYIM+t$?!@sEXwIueaq~0~U7{#rcU*i?0{T^;g
zfAVPJU;|SvuL9CUx={_xXMPMh1IRi2n$y;9gS<571#U_Vw<bR0aQ6H*eF1#scPdBY
z$x%3suXT0EwHbf5H3ohGychfu-;!a5^@oFS%5W~)LUJol+xtgcUADHtfzCj@DtKM+
zTzxflUe!=zo4?CIacYM*oFdQ6VZew^UO)Ia__(dpDdUsTLSO?Squ0a$Ra>AXQs_^`
zX9hVNem6NjiM>}h=MwKCyh?Z@e3J(z-u?~=yQOS((<KeGH+aJ#o?Yvqs|?Ajfmil>
zr|tO~Cr^ti<%73{R=Az;2H_2a<jFWDoL`#L48dE5*Kc`2JvIFfy9I7NsPSbQZe!JH
zyWi~gkJV4i;Xa1D8y|yuX~ukG=Fic1zqQYr6+aucGB?Ig4d3L8pYv`v)g33rZ8Myb
z-#@)}t<1Ve`z>Y<jor-{+*Y_<aMf3<t|eA^+LfcFt8Vnc8HckV&aIZ?mMaDy1@C;F
z>w|B!xHHu<_%wL&wWn8$Rd?>RZS)>jHj=*pzM+~qpXBebY4T+vd<DG8<IZ;5>js3E
zHc}oLaOFoe_#F5JzDZ*+MliEhjrIAVvg(98`ugOul6yby%eb5Rc)P8SD#H=nd;Y+!
z4Z^aGeFzIgDb7Q7;N|!^ik}7ibn~5*=Vsj+)E#jz!QK3ZM13@IH}~e$t3%`l9#_v|
zaLcyQN5QS(J6+vS{ceOa24_v!fqkR7AF3PPGCa4pX6v_t+#iXnGk?q6GmJ-O$xEs&
zpcM-h(K`nHy8yygdS;M2Q<GBPq{1;1D|$hfo)WnFFSJ*%<qK}FK;vbMp9SPpP^Y5r
zf4SydLAjFmI)CBIRot5G%qeS6uP*ZKxr{4n4hfxo2b{6GG-I&(F*^pEGz`Kksdr;e
zI9%$}-Jx(*H>cn(z@1aLJ8c~Oo{sQ&@S(VC8+TZ|Bh)r7fe&suZO<)Sm)tg#pCvnx
z0q**cAP=Y?iT!fd*5hz%8cwga<ImR*bN<z>mnE+gP9K~J%L(L>ry5j!o~kYl!_C{8
zD9fZin#y6;&&^PdQbv{VViC&f2fvV9R<}M8ZB7icc2c0~@<x~AewrY+&SOLZc`<&9
zn)tQtv_DG`#FGO$Dk`<vN;ng6I{D6XdmS-8o8)(UqD=*T9tGq3ylyz{aQdO<-C*<G
zpBIVYGz5Ma-1J%DH3mJlWQa4VaCV&b`>Vlx5<#9b4`(x+9;nQ*eOzeRc747X=M^}6
z;EanC?xW+0dYM?ys9ZK*N4;or{k0qG?AiTzf$z7)Yk@bL!b`WG*avUVb;<K)zy4Jn
z9?gMIJG=re@i+Cv@AoTx3*aNjpA6x4zp=i+??d~4i{KPqPoIB1b4~I2PjQIhR)m|%
z-G|}ppwe0c9tB?r;py_E6W(+RFI}Dt!Ry(XIZq~X;Ij@_`h9%8?q6;f!TXVaxp@-X
zN&1?T^Q02DOUOu<CzXWJ0)7#^YaM@VvE^cn6SToC^{M`iG;YfK_H%CaXV)Hs_$#|9
z(NBijeO*C#|9ukPD7+ZreHz2{X3pW^dg0e&D$`}~3H+yvzsj_j&PDj4kbGNKbp?J8
zNOG#-Rkmb~N1MaVnB(fFuRHSJ2fi8q`u6Dv<D=l^;6?Ov9`}2=@-q!ya`S0_pMc3P
zKlc>A0KVZCHwL)yy<Lp(72&sLj(_P5+41Tec$>q+XJLH&iwM6De5y65TXGx1Z8F8}
zAa3I+Zd168rnnu&Z6w8Q5x2pRo6^0ETR(0wzJ0!i>re5G+40I8cuNkvCkH;91E0)+
z&pA9??^tkdQgTiD!Fx%6CcOA2^s3<ErpuqoEV$|a9lj^z->!9ne%F*gyxEkp8N%&I
zmar$l4`;z=!KcA9rR^fP>Q^SbsKw&3P~5|Hqap|1?C`dbf8Tdi;?@nmO!$MgO|w@d
zlR>W@kWO~Xfe3d#gzWu|u6P`OjkmkKlN5cJ%4r6?BLl87DSIV#8oZtF=&2&jmCT&L
z?g!d=gLqBwrabSd^t>26bA|(64d2nd@KW|S#2G<W;T?|i$XbrV>%W;k4vw3Hm_E#o
zpUHjgIJ|LqlAEqh&Nw_>xtjFzYYhL5c#l4RwbF0qP1pbp=d&o(yh*&GTc}^~#`yN(
zcv~`Gj>_*UcvWqg<J0Q!XsGYDV~ExL_kx%1O6axL^xY%ig?DD|yQhTj&K&-H4*XIU
zT=`IPtChbH%7=9Gni_aVh)0;0ZeG&~udh9GeD~zQ#~q%je51c+<;RI{^y*EC@-^!a
zSH3E@i^v%v9{Tp>>&INBy9qhN;6~23UX)gjcvY>;5#aTP<k+#5KF;;E>f_qsMehp6
zIECAT+oddVm?aL&J`Ow5$3b$YkyC{18oqs6ybeqF0(b?u>b%FTouSont$??JkA`qx
z*TXi*Ww)``f)@+%e4nVih&y~NgnK#RHq!+!es_8~itnJqi$ijJUJ5@1UWNZW)_XoZ
z;rYZ-@RE)oua*CcxD}?jE#sD#;<n*-=0o=+`z^)oVv1V@Zc8a{aoiR|Zi;IwZgaSq
zyia4d(hIKeGT|fOn~7s4d<wiJ3qB9tmj%BBekcoGatHCxf>(jBWWig(H@`7+{CmM$
zvfv}&eOd4+@I&AXdx<+ZyslgMKM#HZygGz?y{+&|;Dz_PwYpn{`19<-OWGK#!8=0!
z!)>Apd=k7SgopR`TfyhD;Jx6>;ME!YkAN55ml>Y|-<$=X2XD%PUjpySf|u-~J!ZkH
zzz=1?TfvWJ!F$0kWWh(k3p=x<AAB=-Qz-w!y4!j1R`78B*dCe#UjiS@;=klh=0REf
zSAkyuuMCABu3xR-h4*L1d%-t@x68k~TR42T$_RK@7JLf)P!@b1{6Yr2njkBGlkgv~
zddukZS7@BGx-O|)wVy4cBer~`lVz9gp5t{~K4e{ujab!g$`}6wihp{)_413RdPl0?
z9{d(Rn8vRzb#dYDj~MSwseUK$+x9c~Rhr9xi?by7J<oUar|Xl`917c|xg#95{CDEN
zwafYc`V03zj{m$jxjcV7r~kWC!#|JzG5nkOZ_Vj{P5jHRVGZ$S=fB{E`|rg6CGY>~
z=nKlf7)c+;|JXxrUw<$DQ`Rx!9Ce%$zN3$rFwET8&o^ptpS+7X8gd%#+`8LdS75Bd
zWfzfT5LmOu@&=t9GA<!wq?`UDNrudKwtA~>$uUNSwP|F;kkMN~njUuP`PRC$=^1q#
zlb+AQae5e^o^s?2+)ch9$DGA=`(XF0ui9eQXkqRI+{w4NbwS+XUZ-=PG-_^Lr}!<v
z9e;$q48951uXkkLv`J1e{kjKvaGbu-a}suJaxa5(7|w$DPChpCF?$u=u8r*eClvTG
zC@t{2dlGZwnAxkoIoM|wrx(uAESym|^RJ=JzLjvVP+f>9@9h0NDxrFA)>V-=b2-n*
zdan7x{vKniy3zbQkJrxEn%lr?7aGlVV9s0<AK|i9Vf)ho>+18J=}Nfvxa$>axf9L=
zVJ{5h8X%i@y}wPL@aSn{-xGa4KT)<`r#wL#+L=HMz$uOLhwOLEoj>M)>NZ7xySeSa
z*vZREW|z4L5Az$YD?9eAJztpFW~Wbg!C~8Cj#kF`Lsv!XkJ~~(gXfs1D}1HKA}F}}
zPQjbYjhJ5(&EhvQ?|pZoZ3O$r=2lAX^n8SV`h?3=z1HEri}2fw-@N`{9v$P)4(ArG
zW7tZfk`3zN9ylBDmx)t~oI`L*;0*FjUYdTvpQ96g6np@@SNJwt-@U%J8m9~33*g2+
z*0mkBM$HbPY!}=f)cwKdZgW24+s~0F_}_dl^>*0VJi0lf+~c^9;;y{&_DpJXy6@@Y
zAKHE@dTKR7oUM(bxy13_go$D;cfcNNd?F%0WB7?a&ia!&7X3=9pTLgX`-$O45BtOh
zoK4jM<HzKU*ZY@2DT7l6NAs2FI}FF~8!>IQ<se?seasEu_3`cV*xOO~y>s<hJ;)n`
zH^6uFH*GwF>p^Zyq)ps0xJz)Gm8SKE%b8kxl?W$){k4)tH#tQ3#qUj?H~D$B>c)iP
z2R?!<;^)(#T?G<RTX3KM046K*7U3U!pDS}$XLOyBxG`{D0=D6QCv^STF=6U@SI}2U
zMj4zTIAL9m_G2YOc@_un|KrpCPDPXVvVaz@Gnx8VaqoiHF=)${xVP6Oj3Uei{k<X6
zcXO}XDE!_(VGeB58rZ&@+kMoM>un#V$RsYtRcOSC@Gkr>%IO2_Q?4W5|Mb69|0Znz
zV~&NZ`w91UX)aB&d02KoW%#FVuh`%F=+afL^n+gjFNyF+lO2<Kl<Yh0x4+X*b)_5b
z{N6<QnZCtXp-S~>>@bZ9rVj0&Ji#dB&+I2GsJxlF^rqWnvuMmT9j!ojUL?CTuW`xi
zCmxp+=VA6o73T&nEYbZaTZUh>cT?@Yf+q@Vbxm2V?nbE{UH{}2k?WK1d^47C++36K
z(z3TDj&&{6rMuY7=o<STz&><evaZqRl^;W>0(l4FweP22Q(SM_WNjTA(%COYxP~%p
z1AHCibUfKP(mRByh>r17^dNQSK*F9W*#CBSajCzngtPR)<o-_Wpb7UG{Lb?2>Y8oj
z_XTad325M#sRtioZ5^dv{>o2PFJ(WiyA*V9LOgLT#TI`#5@)3%$CGAZ{vrjn&m)98
z@Dc3r6s}uKc^fmuEA~3t9`SADJNi%msqlQip&fHG7gE1i*u|U>IU{_-F=-F(L@`zm
z=EB|D0%l~+o<#EF_{;k!{jb_-ooQn>-E{H(K#tl;mw02?lv$o^dHsD#yAmBHl!N??
z{|fw%A=BiMiL>qs;vk&4m&;u3b*qeh&9TFdCnNWt+R1%d&mN1bDcFev_XIIfN^a(o
z@BnufJ{gG@=(43#TlK3!H!xuPyIogbm`fsRpXBODu2MQ>EO^}&x^cnovR&dB<EQ3L
zw4;O0PL2x$=wIkS+Y%k9%BKTP`zKR$C9eOFjKkN`e}Zr3J9_(1R6eE;_5FSv_a!)c
z;B>8r^E$&Bv-d_N&DULrIGTT3Qf;w)qQbgJTqZvg*z1_+hTcO_e2d>q{roJt1GTqX
zY(4O{dWvHu_{8TD>km6;-gJ0_wi0?dK$<Y_glp0df9CV<oKK6bdwwhxJ^)_v1vjs8
zxVH%reh_>Ne1LDCH@jT^Y0hy3JUYSnW9yaK*D>cTdLU_IgVT@p!(8}1yiVf|{>mip
zA@o%EZPvHXcPBf%XI>6(1)i!fch#6QZ&x4Be~M!xc;jEVdBcqs59?z(!4HCu%EN8R
zd7wUJ4|vgF^4v;oW(@ZYUu4ayw7E9v_faCgvjmFqa}@58FD26A_qWWc0A+&GdlAlZ
z!14XSFqcF7yfU^}CEcWJ5?yl?Pj1Z<d6&x=bFG=JQ;K68?!~8^txeFkn6q`prrC8e
z3cnj})l|a1GYH?GU2ry4Bk+dcO{fkMzCD)xM~QYNS<`UJzv}Yby?JEM_nQMXrfg#H
zVw`*Eho`tkU;U$qpQDD$cf-TfLpWv*>-O^e{89eO!AHRl+W5G;Y94g)X-dRP+>Te#
zhQ4Og82$QxB>G!(hDs5%b<&(s9D>^kw}<kLe!_6w`8k>S`6Ehi4Ifc5YZTr0bm;4+
zS63*X=z#Ip@6I+!gJo|G<c_Y#lYH7bzf4-XkGQ(*%FEAjeV@}pIyRG-NqBnKE!tqh
z7;=5EI@KNOUF~}6o{ixr1q#e<vG?oV!-7Z6?{}RzY5Gyx2yzFIJ269lC%G?Q6L({V
zd0S{Q$Qi9j%f{neN$w9dp^rncro5iz*U(XG7askWW#x6~4Vm`Dup;gXzZ(CZ{TJo+
ztl_dA@k3CswxC+&mH#^SE&sqgK>h7k4OeMr(q$HbX2*Jmjz{r&S>(YJEIeC7F@A@g
zr8RF9P+QQ(+S*@=b0^>1+yyzi_-?Y)3c?(G1pV4GLEkLfyx_()60DV3ip}dR@r=&V
zPL-zjns_$*VKp@EFm1ZLj=3k?X~K$jrRG&|Zb5x~`EM}(9<y`x=yit6nng!dxl>t+
zj|YR}wwgP%!ta09&TFHUVZO+ZCd#2fYrPwEFEe4_ZwP-&$L*Pp=r1J4e>nf)gg<eo
z;g+1BjVi6{Q@L+SaNFRXhr9VCYZle9i$7Go2-n^1zV5y;>0GL*q+6tjpy9ZSJ$LFv
zj{%&Dz`TFc_-g9jw`oIKTYSyPSNluMPt-unovhm>twDDq=$65)Xf~2UObpoOzR-f(
zeW*<0(Sn%CjS03-=_kyYMb>Ic(*q{Vu~2(77gih1O0zi+Ws)&sG$PkYo8qTMOo`V_
zi|ic{jXL2c{mC6hHxg2d<P8vhH5KF1l54kRE>CqwPlL|ng|Fx_2l95V-+9HZD|WJo
z3D2`t4(aHUgNJutvGaER;s4r={L3SL{BGti{c*)k(`Qb;jlTH2J5%FqJ58P3q4TfJ
zoGwZ9v2{{lNPkg7{8xzohJR+yLG@?o2dWb(x*c;s;I;#idrrs%)SnR0W%=s%tNE#6
z-=OSYn9E2;yOCk%KbrigecHZV+I0J+jbPW`kKw-`|2@ysu3n7)*Bbw0_8zt7;ex$|
zH}AXZ3EqxKx@MK6N7nsu%3avx#SS~m9gAeTN>%>8X|4pdy1grQ)+>zK3}FyEJC`Z$
zWj?l&d7rv62i}qc@5zA==fEd(;Bz_f<s5kNJ8b%Elp*dd%kbV-C3rLW(-^}2xLJx@
z3wUo9ya#+N3qA}!n+2Z)zmx@^1CRYz=J+jxH)p`hh=1`ri9h%yrO(ZYbu?2mzVMrp
z)$khs8(pWJ6PY!OuHhEX-vg%n=zv$AcgD`&o!-#f>Z@NL03QT*b6g{byM?VFwPici
zG~>kt+?L20GX@a1n&A2bENuPsfV(Rc?gHG-b!S#%eEW3xy#(PaIq=d)t^cYF{;R?F
zAU_k{20jix6Y}rhxhTS|54<^gCduA<2)8(Hv5=o|oF}s2D!an%)_(`z(Z~MH%!d+c
zHfKXGUM0Li!ZEx%((_{Q+ThK=YnHs<gXi>L+f^$37vrZNPTqRQdD&Wy^18E+@feQg
zDZVWHI!5>&@WLz3B<UE#w!GuuE8ym=ldF?{-$(vugkPCC-_Ga2H@qvm|8j?q6PAy^
zePV4(fx>SDAJ}kawLOIUyX}N`f*%3b+{*j+w)!fMJ>U!AMu+Iq_ZCz28w&heAF4AG
z@a8rq*O?=@&ES?!w!&TlUj*+C<$c(0DEe;tyTU-G!YRRRbBfz$++rziHMkXr+!S65
zZbi7o`1WZH*WsQV_;3z<G6z1F17CKy*4;jSVLPkh$87x5;VP@{>nv{C#H*iI8w=L4
z?o6|IBk-!o2gAEEJue3DFuZnnHGD_U{7WRAE$I@RKF|5aT8_dyO1wwl4D(H#LhGPF
zy(ZqW()Xh5Je6Z<KlKuxzSHGXbq>7E;Ti4U!K<!Lu6IMYRi?Nd#H~EVZ3?&26t|<e
zm87^W;#L@PQ(BgB%fl_kKR#XI`dR#k+40I8cuNkvCkH;91E0)+&pEtC=}R+zSq6`h
z{>Bg<p1&0T5#v%8yb`=O3*G`gmIdztpUr{~gI~&ktB;!mj}@I+T~_>^PAqAi%;t+*
zCL7({68t6js{6jY!@8g7<E$4m;PO)jegV8I<X`G4UBB(+h}Q(K>c!c4s((H3`ryrl
z<aN4fj{4qV@QRlN?LxAbZXh1GweTJN=DFlP2g5%tF~lq6Y(tCZeIh+C2Cov{AUxH9
z=wtAl&MQ2wx5An5oZV|V3a@5>@d(ZlzJ1=>J?Sk;dD986@1@CeA)OIc9(p~S<PE_q
zEl$oGe`ja-jNKHxqwp3&;ij{@UW7OBbD7(E-g`3Riciep;c(K~fj7dd{`uVT>4vuq
zFBXb-xbGRtg16#l!r^)cnEamQ9xs$K@3c$7*?en~BB#b<7(T3fAo4^ca=qTDj@)#N
zD<Ii6uRX?-$@RzTH_BCia|L?D%&iOG%RHux{yyKx4$ZAQ5>xA4a4UhU;8y+WnN`_>
z5D#=iURh-h>YEGvBioZy9j1OBq5_Zp+8MLI9=&=gQIE}gH|9P-TaV}9UG%)~pUKEu
zffs+3llOFbUW_Q7C%&Wb`uQfl{ygaLI*eY`cB*i0yqSInj^<#|_ZwNEJc!(y$b?q+
zRbOyD*<tnn?_>V<>u3DEA!a_{=XdI}4kCLA{1D&KDkIy+!Q7ssB@Xr5Y{pf<nS<Z;
z8)wXU;b>tJf7sY3TAhO1m88GG&j!vkocDefPAkuR7#aOk<EP`*E}TP`=cgM#i{4LP
zZa->A2l3Ok`HZn$i8dKOCXY<H-)_sG9Ny3#=0os~@J;-K{ntj_cXD^)P7%qRhTHm^
zuFY)?y%EK|ot@5{Mg8p(yu#md{j%F14cjtD|2Olm47kE+=gh<*@Ik(#2fmwJ7hT-N
z(;1GEYaH*L>3N;-dI+x%-uOEHzz!mKmSdZg!R8*W2$u_87i?v=hfhdJ3mvJ^Eh=0a
ztlwsjzu+$I^cUdIUgvZmqOoL=u#Wt8FqYKdwv5{pZqn-$zSmpI7R+pPn)~u)SrKVV
z>>}EI+{h<ouBAGxGaN^Mm$_{Ld9r^|d9s+Q|1>wA?vS8cj4txq?y~(r6}gyE70Gpu
zx{Rq~;Z(ii#bcs7B;#K5jzXjP-OC#b!s^Ul*BkzI=9}j`rNz99o0#M&MtslzG3}}L
zjKBYo_siI(4W1gv6Q}U~)V(_T64(EwzR97otAJAyryrr+ljey~nzu;jYp&^KH`yqB
zd5G`&@Wu%AwW?R?jM=*0x=~)X*u4|mr;HNT=7ux&?jW}>>d&vl34R)U0(|-<CN9Q4
zX6vTKtJj7xn!j#ml&c|Ab+H9`&3KJcvCD2dv$|;OqqPNT2%Bxx`zLH7A7so<Qs)+Q
zuW_kCW-Br$+E@?!I%eKfG$wd{Lq4JUj_glVGq1rh_B%SmakL%1kox1T&#8_D?@`6g
zyB&J6BW|9Z;5n*2ib?olM&e=GKXK{0=Zw8?%;}#VbovY7(LZ6F@33<#zc(1(e=Y-W
z2S-f8zRlk|c@d{L_)+lQLjIsVt3<arW6L&jJ+U9o&CR^ZwAGkXK8(qNd4e_ak%YbG
z!~3s@kF0;UHEPm>j<v^XpREOcM0s|*_Szy3T6C+sYwUWTo3+R44AopIEPp!##0m*r
zHY~$WFWZ`m-tE~T;M83vzA5IPcC4xT0BeNqGxlt@dqXkh&3AKex7mFsTa?dT_^Eo>
z=_%ZukzTJ_13m~I2k*0Oi#dh1Qxq{{<B(*l^?|ij#>`6!chR>#V&fIvv5;vD^!J3x
zRLto0<M?aqIb&=HqAv^iOWdI%EsQmKsV#UQ^lkkQ;J^H>&i|=XLAaOUf1EfR!T$>W
zOQ=K9j~f5s{?zm>W^d;{o|8^=pau6Q_GluHYtQD6#NXHZy_{A)w3Sp4dB%R#7Bu;f
zTRkc6KO$d~7<+e}`pz95*kQJYOh4IuC+oWh?Hy^+R}fd%ru<q+W!XB!dgu?)=h?Ch
zk1>tm{>gL#53eoEa%7Amqww)FUJq^GNV>&swFg&yo4HSPH}fyJvO$V|@TBrTG<V~H
z+kKd(1o>wC=nTi~0Ba!mxySfv4)n>)lK1657WShtzT!`rPrT=hy+iR<XXim}(EM$S
z?9buE_-TdL^WH?<?R{lC6J`Q=GjRIgG`{c5YL7Ij!C0btZuasT&GRs3B)NfMo+sdf
z3BlTtM2)3cMb>y~;a*J(wEeETBiTt*8&bb<yYR>z+JtljET3d7q~UVMsfFu=udB%C
z<s-Q_*wOS|ZlH}XoQibFC@Oeb&g@NUEE;I1{tlz#S6;s2gvoy`2^#!uMdm^%XFj%7
z*I?d8&63@`b3;ZEKSO^;AF(f(uV`Mri0sX{jcOb?H80ue*Bd*M*Be@=l-@<ZGUDd9
zUpIb(Ii<Pl$t+dw33mGk3x6ehse1>`tPa`n%j`+m^(x!>uDmt!$-YJPq7i=AhtK$T
zVG?!)Zw*Y~OuguaSMw3tIr)UGoVB-odr&XbPY%Or{^*(2PH~(r_%Roz@JaBIu`~7_
zM0bWH;tu}_p97!!7~>J&zHKs1RV_39@G^MC$In<hMd$zF5MDe?o`dIw!Vl}}E5Q$c
zBD1c(1$^RQW?g-c@K0u50}toGCv)I)4p-grXKcdukjvn+gx@FJ<*$AJCi(1g=@azn
zp9<<?40;7_rMNl2F*8R@Ior_!rzZ<X^`#fiQ8){H`#7Z2D~!P#_;fNaot|R`UiEn9
zJUyQS->}d6uTgwloe10Lm4mk-zf!o%GrupPI@bu^mj&+x9|bQ8)hWLRA^&^82md^C
zof`-5`b=hg2E6IBnep@Bn-68qpAGx7<K;Q<#vFL3!_~L={PS~plYa1O;+F{@2XD+0
z|Ct>4d51TK!uR8~!rw4L`5`|OUJiZ`yv>g1ra$z3g8J=7@WsyuZAETvxXq=wb*FI~
zz-=alH-g)AirXRFrc&Gv<8~;;Z4S4w6u0xZjfUKm<`vwAaEtNn%OtFeD?N}Mug-zD
z<-q%L;G;S4=^Xe%4tymCUizUN>34WZDF4Fu?6iUJA%8RBeL3*a9Qd@ut3u&>vjLUw
z0{A%LXTn#&RqtXU|4HTlWOlsT;R?&wpYT3nTMoR>;hFMhGzUJN17FC3YYeJ-z^1R6
z@93wW*1Rh1K4v?-i{z8xJ)WKyL&hF>C0}s+n7iSnxfACQoJ!Am!&;8=a(I;a51i%<
zW5pzR|HK({M$G4X*j8W;eBv)y&xibnZ3ULWFMcsIUi@Lk`N_=nqA~~Gk^}F_fe$;p
zgS_zR<CI}y{x%8TL;Nz~bKq0pmqO_e_tnebLw}jvS8w<T^NbX?Qrvn|+$wPENpXwg
z)|ukgid$QXTNiGvA-7VJ*N<BhZn02W!)<UZ2YxsQzL*2g`)Ky?V>$4e9C&*Uyx-xO
z`hYR;IQf$aKb!+!%z@{PS@|uY{12a7h=HqKv}V9-z>j1pzxEt>zr$4*d|eOsp<`Ka
z^<gV-w&9z;>4$%pu@5Wb+`|RpX?Rbk=f#lM1h4oh*N1%;UYb6v8%~Aiynii6X=(i!
zvfyOu!+OE{rZV?oBjAU=oVkyh0>AK;%=kR`=IPAs>QWB8<m1`>SLMK49iFL=>ILs6
zewpwQ@JaBQd@|FmH^P0`6nNX$lKZfuxV5IZE#lUc;<k)iO^VxwPcZ*ZaVy2GBIKrW
zt-!4ew;10(Ug7?#IS1aI10TwPPvpR7bKn<q;6(>*`f5Vy3)_ZNfX7LHT)0~&`n9$4
zry0Blye#BDyw2zb?**5B&*z`tCzbyp@P6>5bx>&Rn*blqfGf<xN0|GAt3QkW@Nbg)
zgOHs>CA_1a_jGz*3>j_kqF=Y^jeZuMv#0TSB2GV?GS7McTFwNV&QFqWa8}myhqpW5
zH1y&d_im^izOwd-D{A+xZ|BwIk#*cJQ1_vHE<c&CJ5hHsa{n`Rb5hlB+tln%-44Cj
zZw6{3ke7aH4WYK+1|7QH;=yizQus}>{@&sL+TsLn6Pc68iO_3J=seq8`ytw#^1t*`
ztjUi!Jx^W8R^Gfbh^_ov13Q~`_)YNJ|C+Lkm^8XG#o9XBsx!s)I!PSY5#u_YF78Pj
zDMmTX9SSE=p=LQztoZOVK^T?aM7PAZuRr1OVm1eUF$Z4s>CE!AHm-2E?%pQ+K$mEb
zYDux#Ie(lQ?ev=dp6%c{j{4*Cc&*{54_T8l=v1ySvdq4bIhk&bn3^N5QrenL&ULN%
zXaJLU-X!BNG7kO&GS(Rxe$PM(Un9zInnb?JzCrj>%?7D@t*$ycPMi5hYnwotVmcDl
zxHqD^ug#oOZK)hi`9INaZP}W*nv=LDt~%}S6}e{bpd%>{63=={M}57bw2S8^^Lmim
zkKE|onboBYCjPe0m?PuyCkpo!?B6)Td(T&lu8(|Phtc18;^Y?9r^x=3C(urvT1Xtx
z$Wn76H|g{lz9VsS7|qn9ON86K;Pf47?x!pHb9Ag(@G9`5S@2fy<t%tFc<Hy(haV#=
zM!=iEJNTwd0y_?8!>zV34QCLJ@{x1jhU4%15WWC@J`27A-uPU4{}uRe?PdK8uKF5%
z>aWz72KC)ot(e`t2dwo5?FQZ;ep<eB#=IL7eP4<nDGaUM3azE{80}Vn8GlFcSGef>
z-E{f>R`7Sk`+LRZ`>T8h?eDuTyyp)mr!7l7yYN?e+WC9x^8Fpe-v#gQ@yqwOfWL!h
zTzES#-=EHKv@OxDRCX^<@fVaG<#2DJ9ID|q;jj2Cd+zf0y{`xPqEn^D$TGYSYHmhj
z`eWO^{14)P+WY_P3-^B%{~hOC_z%5s|Amhd|L-~fuYKYEoA5vF{r~uDFFgJD?>O(m
z|LP0#uQogMIpY7%>~-<&_inu1V+^MW@L_P*FPOd>8!F71Y+o(T9Gp2gU3~lg91dNB
z<tUs>a7zD${Vj3a{%z9zkDsS3!3RRP*FluwRt0_$d__3@LU4|j9WVFvU<{}o-jU}M
z`vxYy4WYY_6qf-wi*Ty>CN6gTadSTPLyLX<x^TwaRTh2l|Ef%a{?J?<V@?bC0mzK4
z^T;guSN2Wpcr{_~N-!gq*$p+eNe$MPBGRxiVK!pzoah$`vh`i$_xEXgSJ4)JJgsnN
zoxM+DkJcDW1(qzITDy~-XX0}ZS#3W#W8P|ve#6MJed+#)TH|r;AJ@vn&Ab8=xlWf^
zv3Khb=8nYYJTm706Wdtk9?{1`GSoJ0vovBf39(|D?VVUmuk5vgR!+sc8T(e8oHzXJ
za(a=o;lG`npMEvDt-OHv97fLAs+057&n{=fW7Nz1C7VBw{Ood?kuw`{a<2K=<%}Sw
zGwS3#|COIPe-@FGcZHMl>7QLrc|Y@tE1jHsel|I3kKM?rxN6Cc@vks)Ona<fzmwNO
zpZm7Gn?^VI*smh|bbgU0j2}(&^xrH$Q~lIw+?KDTJ}-XRv@h<#k<pJ#M2yYL7TF<0
z%$)ME`QvY)d8wJ(R=QQjF6OR*$lXlwID#KSH_b-Eb|$u^+hfi*$)@GxiFm;-`@wl<
z`@#0F)=KxQb>AQ#I=#;|Onwr*)zhr|7GrE9`;0gyHYZQCkfy;ur2l^L(rPjNPW0zY
zn#OFOk#tXsO;!uZ3D3#zNcnq<WLvw4@h>r-dr6RgF~Yh;ShKk8;XC@psfd3c95d=o
zIOWCoDg7hnD=%HLwyS>@aBd56YT%4{&Rf!RI^b+5c5-e^&uN-uZ4YNofwPWCc{bPB
zcXY$4{J9_<8cPOnE5}XUy!v)?e*qWM^T4O?j;-xDyuKVfty_y8Ctu*{zOv|No>IN)
zHgV~4b{5+Mdkc*@HSiDq{F2#=k3MerraqfHWP-OPZ%fQxwQ+0bu_jIN|AUN|1!+=W
ztuq{zxRFzw^ENWw+RR*=;jQg_wTwKGX5dh}8AJBLUkGHE<8~3*Be+#7eW(61!rb4S
zV>e6xh_g0?CvNEgbNF9eTCEZHOK=-Aa~t7Kzua-(pPkzSced1V@5#)qQX1ec{nC=X
z|L$72x&y#o{^o8Ud{=Op#E#&z48IHbjlROAb%XJ1ZFk=hl%euz<}XQWEXXIdi3Qw>
zaI2&Y2-BYR*W175S;eiogac*Eof}VVO|nFK@I?K5@ET_5@k*;gk<vxRa3>P;-n5i$
z8&A+H82iE)!5@4NdHc&tX5JQ!{~zg*Odaz!7Ts`W;H<zYQJpD+6Wm#m=nu`j1&zQ~
zbq()0d17aheKA)nthw4j{b_?)_|lb`UakJ*i6(hhysF<z++OM8H94vCy(V6M4`2*V
z*%ajmNB2$;C-rB#2Sth|^K$wwJsKQWc1GT4d)7oBt^3!YDbwX=o0wfD;|-C*PW0x+
z_WeNQL-{uvs70T$Ve^WsThujEULVSrMVq-nMbd~;jGyTH7++qsWZoo;{_so6J3BX~
zscKRrPC1;aa>x1JT235J(U<9C;9RhE=CGUZ8EZJ@t(`oo*<y<>bxe?eh#3!%p+0Ds
zur|MX$=<cHm#}WJ@iBJA&R*8*tyItV5biYm78|ayukd$!>RJh<p$6Uryyf4t{R(NE
zjl^YTXRiCvERZW7XiFwf?bypXf$*QEzgk8{cSX=v)K6^q3hNf!%IGJMYx~Q$xHcAC
zZ)E&e!fks^;J*|vjm}NuI{r=k-|XToyc4|ex0mdF<qr4h9|qq8UJZW8>PM}9N!i@6
zX)&sdzn=S4M)R2yICEs|82`~(N7tUJUD#$Wx;=5ybj!|5YA36f5V>(<$QQ>YWJk?8
zfv}}BCeY?slk%nFVRYKRw`A61(Wn0+s8_o0Lk3K498j6J!95IjgzxB=Q@G|fEN=}>
zUj?V{tJKM=rHnRFqu?dKZ^tp8r{R6>Y48oNW3FM#%;b4^pL;?0wM!ZIDpqpfrPJB{
zS3A5t6#m1Z_SOd8SWR8ExV3?OcXGeo4`=E1L0wW?7{+ZLw>iFjy3?HjoQAjO5A3+@
zdFgEEmf+RAAv>>>pbGylb1HbTP`Kf}oy|G$rYyM9)#dO*A^ASO{+$q$et3N~ORHlc
zo=<=H+|o3>Wq7d=FC5>69QaBOy!30?<ySjgb>HWIcrT|7d_(P0+Pxg5vk$x&Jltpa
zbl&Oar{W!icNpG6C>)<}UN<7%QFy&|*?B7GWq1|!ne(mq>)G+j9C%9(ye9`f>~O`^
z=d154<u;iEpL2M3s9kznOU;#*!TaMuo0Hpy!<0vgTPbecDQ*?Gb%fj$pEz#qxW)MP
z@eS9*jvV+v4*Xya{74RbDF+_?tL*VFb9komi08mN9A1*ge{Spx+sO^&zz^oYkL19Y
z9G=PcHv0b<<F;fTXUf298ZwVFap7CDlz$F<AP0WX;T@s;^SVft$r11Y!q0>+fzN=u
zy{k30tI=<;mf4ov9!hXKn&P$@x5FuJHMmWtxV7Lmk>b{g+rbpKKHNr9+=g%)4!J3P
z2XWhjTP&3RaQixv17FI4M~`HeUzP)p=fFF1-~&1EgE{ac4$suSmcaYTzf5@auPt7o
z{B<@B;ruNFAHshoJPtkvUK}c)aDUyA10QgBEaX2N{=pph5r=2$pO&)VWrSJ71YGfN
z<~#bbPbcQM<~(2MKATQ>GoJUuPo?E44MXrQ!mE+Ir{Sfsq0$+S!tIXpg|!@|W%O^D
zAB&UEAFki@<CySi@WvginL>Ed{1<#rQ)YYxeCE2$c<DD87k6fEchx!Ywj6k04t&(%
znfmQ%@JqyRLn!^>^}z!8`R2_1_KNTuGN-R}COcl818;M9rug@P&)=9i{-fYCH)W3h
zwD6Y9@n6V+ujIf>|JKT{p{{wmAAep|^{*QIJmEKnaBmkRybZkQ=JdGQT_1QAcwVUd
z-s;v*{@n!4%??V=Ey4IC*;BX`;uhoEw~cV0Gw*P<X^;Cmeq%UQvPiAQe=Fb7*M1`6
z-wW~aSNvMxbi?Ts=cRB0`*4}!v6*P!b?ApT0k2oQ?|)qSNTYi}g^PL%8ts2?L{=r}
zlHm0G9rYG|7vDZ^QnN~)Pq%oZ@EUJ*Jhw;b-**i2j=&qd3|{#G>Ki<wn-|?dJa4vo
z3R9+A?YHu~_*=|}T7&#nT*`5a<93j5A7{T-39sFn;T?uImWCHzyY<4Wx-Gf<!hQZo
z4t&btH3}!q9Z&P%t;kPTH<g}C;Dg|~)}pba)V<qtr>7C#9(Xau$Mx0W^mOLH_c**p
z{?nvq9DE%4nbI=@z5qTY|1Nxg50P&dD%*?jdhQ6yR&6Qz_voi^V@OJj{}?}+Jrv<(
z;EUixA)Jd>46eM4gEzP3UdML9y994ha$Fp(O>10tza+vNhBvV*b6!s7z~>xp@+ysO
z(=zxx@-yMZ|3Lii%#2rpSAZ*Td^&s{%dI5~9s}=jxXI7(UcS4{Mw}5iql7WWx3_IF
z4;7&pkjgEF^E8~2-Pt*daE9Sz3oH6G!rHUTDTmXSgVO}(5}ZAVBVUXjJvGkVaN6#&
zeNa-m+&x4Uc%A()KX7zLIQr=itKSV|1-3iyv^haPf}iL|$d9}2SQ&kLil4xqsa7{6
zzm>D!VZSx_9lOW*eZvd$+lSwQ4(IpE7v^^gznyP%exDvqPG^odFXOlAUgvlJ3-ep?
zQR?q~&hPFQ=C=#K#huRYt6rGjar|ELe!u_ZWv5qdYWyGR-|kOtb6$rK1D|ntHQ&@1
zGyd}407F|~^K${tr7SWE|H<N+WGI{pIK>aJAD1B<aa!P1!0B@wbJvc)w*fbCdf^Ph
z>E~PVHJn=m-EbSu^JC1fBqu`s{>F!tU;S?HN!vi?4t{fE_Z|DzKXJvoc)7*cxO($|
z9olu;ZZ1V?I`-^V{e?-5xg5#HVTCwsc$3}J_IYORqjGIg{bSq5m;=F?VD1vFH*wJZ
zmuwVd6<{v33HF4{T}6@RG<&&{HIA(L?xocp$@(c<SHb?CwkoVFNi`RJL>^4B*o|~p
zlifV^Wy{Da>|ss10a;%%vJN}j3GG#x`y-5Pl8I)sw)-MGPM)|a$>3nq;fyvCk(=2v
zj2A>cD~nsUVYZkZ#D~rAE}oo{z+22;4JS_!pBO)TK291RwS8^$TH@r!9)I_MIEUaA
z_c_kX({pCw^n1=vN7BmC8IB8{b1FTj<P);ta$$WnJ*OJZ5jX?HE&61@@%kmjxgAc~
zyB+7z^qc`W1D<ooTFwM=#^Ef%IlP{*u7$&1>biQp`(&Pc(uGF4$|%zEq4fu@;Kd7F
z;IU<N-ILKSZe*eCl5V$1enw!6E<$S1>rwB(8`r&Xs~>xT*Ilu*PGa=8c1`(LMDajt
zH*&AOfuI>yTp`ygNL@N#N}OZQ%HF`*`sCej$00wDEds9rKQa)^r#9o(g4+~smHGUk
zHf!!EG$SE5bH6Rv;0KnB0r-dC6Ub1wBe+fC*1|V3jLy!^w`&XJXA1m6$dAI^@JZ%r
zxYZDDbZK8C?~QiP-<(gWx8Iz2xb+#h8Z)clUwkk1V;%e{_})f9Th{)J!^k?B2yi|j
zVQOx|ufl%4>5qdr$C0-Oc{R9|D*P@Z&)WDI`#fEQa-&T1TIY{z^`dQA-5w%4Df=yB
zff#azkzM?LtB)a0b{~6hgk%JL`IN$k(+%IRxBNOp`6v7OQSd(DDQ`gvzXX0M3tlo$
zIS!`xAH#nY_yl+p-#(68_eQwNGl*jwoOw81;-tBEuMfQZPwcwU$1$9SQSdz(aOL-<
zPcc4#S17;Na}%StPgj0lcX|0OIW?bVzV!k2sU+ubhLhzqU7nmW<m^Gt)Cb-A@_j~*
zDLeFNdOVGcsV}I2Hvz9=$n{J2CGpITvUxMfdNB4QlD&kVLHvyH9lbWmPm=7yacoGu
z?3X9;(#lp{h@Pa6`%{~bd2h9CZM$2Kw1Jm_cmG*peG}Nx)DK^|cY}G@<|fQloe>SI
z_)ST#70U4AI)gJ|F?Oh%n!Q1YX@|o@v|HqtMTpBodxLf;(+~4FqUhF6c0On-<_@P7
z(mONkY`v&}1a9Zby1l7h*P-f0fWVXTzv9p7U!HJ&UYXlZC4M^a)46ZSzCE-0XVPh!
zw#{Qj#u`kzi#vRoX^pZ89Si<O<!`_9_pQtGr@6u${<=npqsEH;__KC5Nw$&ZeVO`%
z3E7{dnRb{s#6CkAewe;O_51C}s>A-OK5=2Ixdn+QmKwuPMU@kWR{V8-#P-3_dJ~6W
z9kS(#2sT3I$yn9T0l1@Z2l$S@Jm7BK8%?}Frn=U>K)Z!E$2Vy*{kpeviQzN^KKW7X
zEr_ei(##7Z*C!^1ML18wsrXpX_sZW4Ze_R)P=~w@Kk~mR5ETqgrTkogGw_K-ziPtv
zV_6)$@Y}Rs@a3zFjM<Pa>Q+tAOn#fWnK_ab`DU67kKuLbv!wHLcKsfG>7T0XOjv$z
zTw_%)VRgZAZ>k3QYV6tHkyK|@AI9O=e4cqXV^!XETlXU7!m$qfhcPVL<|?HwBCEIG
zH;2CQsyexhtct&|Wu-h$ybr<Xyw4c5`1XPZ$9|e|dh>Ivf$_Hi8Tv2APYrI}xE+#1
zFjfucchCkH-&Bt};N*RAX*F)k#@ct9%>`zeezp!pWi$l0WHNc36V@$EfER;HuFqGm
zXHq^DehxX{y0<I(<Oh}a-e%ue6Umgw99i>*bXXT}NmGt0qtfqC|EH{u6gk1!r@$tZ
zpp{A+_a^uw@JsmH$IY+Ns&VRa__W1?xq&g(-(uzlrk~W~L+U8aGj{s0d3~O=HJ5(J
zoUM(1;{$5Pre1~5*Ul2gGI8io7|zDfkEvxiT?DWC@{&2zMH~}l!Ru!UTU({Qd>`!v
zo^<!oI|$3w6RL>mRb`Xr-itQ&ZmsZ-e#Omw>eljg;iBiO?DoK)`l=fPf5Y(oJZCuH
zXqU-WTCTX0aAVVsdv#{6>d)*VZ5*z?Q_DbYJa0d13vjcZoBI=`%deZX@=6$KtFokD
z&D9sg5YzJo^5^Te9!5WH<e0MXcbSVb0_URVyl*W>^>rG~GMpLJ*ZT~|*uHJwbn(iy
zwwzSfpQgRW)wG?X-=$wULYW~qHSNle3*enu@WRvd`QWjT|8U#eoCf!8Px6~`;9WWJ
z!5sLZ9Qe^3_=OyJ;hDAR52tT)4!kJ`-jxF%%z+=ufgjC*U&w(ME@e)C73I6x;WM^=
zm~o?FFKPfY-Ki}w7rt)Ft20X)CP4PtRePU%Cw`Yyx9CsQm-sgdhx6}F3;|_8L+}><
zI<e0Z;sx&$#^6mUE`O8Qm#8rI{dXp&38p<Pz?p+{(1vN+XZQ|@70H+h#xu2>qO+`f
zQryaLYfN#g!mT>wX6ip~Rk$gBzWs&kPgf3nFb94p2YxgQUPhEIIJ`3yKbs#ES!n;E
z_#FL6hIB|yrNa+~<mj0@6@B>paT~nlEOPoB-kwHII6epAZT{Qz`KtKjaYjP;a+E&w
znmv)c$Or7A*%vkxmF)%OT>AUu^3MAn?kR4?xGko*mE*RM;#Q5@Y>HbmZbwqwI&eFj
z;?|4XWQyA$ZsRF#W4Ikmaht?#B*kq8x4{&*1>E+exLw4pFU2i-o;h5|O?9~hw=Ue$
z&1HmF<-l8W;JsOJmFe7H+VGqCj_!W1#%aHn9?lQhq^!UjCZ2|OZF*h|8D&o~*21fi
zyqCdCW0TSdXWnyu{GK%&#jE0<snc+D_9nR>dnD11Y5p{ftiq?4R>$E*zkn>}kHOu-
z+(+CQsKHb>_aJv*HmI8lYaSWBxS6y)WMrhxgS;vBZ#-{DdR`29<?v?U)$kpC)!Oul
z(*$S9bFN&=QQ24i3%~v`xjly4YfBEiCkH;91E0)+&*i|EbKu3#XHQ>c4!k7?-jf3#
z&Vf(nz~^${%Q^7k3z^fedRgi4QNH~+=lg%Zo>o0+gV&Q%PyBc&IeiXa<U3W)J)!aF
zAiT~0lw9A!a*jBBER7t$_ECH;z&n^lPT{{=d@+rjaC|D^wLOzLJ}nN<C8rNw@mzX2
zG2$@l@WXtouQ79+dxANR^6)U631m2ZO0br{SF<v^h7#|*;&jZ~^7y=#W=yj*ZMEuO
z<x$bU5iYz#d@D@p1|&+j<WzuHKAT;Rc&+ey;JG>yn#b)<^poQC!#fYJpYPOo+4wb>
zc#XrWIi9@k_iJm(nE`JEpAE_J_Br9R1Q+2g!&?aP>@*=>;Caf2lJB!uHJ`q0gjZ$3
zP5K?)8w$tgcazIc>0)$-BYMJ(6Hh*tSZABv5{3zF_q%m-gncygX>>UF>pAKC-FNx^
zHh+!&{gm_f+ROLXfxotIJAbS1zU+98;_v8l&fm8#-`^bmsu!KV{g>~r@axR0zU%zm
zbNT+__$xc({9SYT{`&AYyyX1-^j(*oFFM0fc+UCz=H>glfWN-)Ie&XE-(T5b`oHte
z-|oxz*M`52e{ud^efj=|@i+Ip^Y>$R@LgY$t6m?)U;JO4zi(WgKefl1AJCTmEwjzi
zdGMtScntsXzoI<8Z~LL>PQrD2*ZvJxaXR62dd@ZJIfHPHc+S=7ITLVV7hPE2e{@Y)
zn+a<UP9L0czN1gW3G&Za0I5HA+YI*oi~q;I4}A68(N84tht1s}b}Wz=qpvK7SB0OR
zf46;R^bzByKe9!3nkZ*G1BGBG-122~oIgnH>85)(ed~e9{U^{xCN@fww}B2sv=LOx
zY3mTBz#OCYJ_tv1;bFqMNLU;A)_*GBaom=0>&)j5r;F7qEPmXY0pGm5wAv2r=l1?=
zwfvt4?*i`=e!X2wu#DKGKb7C{Z%~K8NBNFE_|CNX&6_`Fb5r~t_?7=*^$*cEr02_w
zL;=M4(HV||@DKAHeW~Fa{cpX0AHzIDp{+ch89d05^cVdhekcBe{P>YQSIk{Gfliv6
zoHVYuvEoL(dw=ZP&#_Bo1JG_y1^zGMe+2(SeEYk0u+vpgMq{(x{EGpmGuYKwR`w%)
z{Wzfqw|g0QP~O|QgM9;|30_qWp2<6S-SA9V1bYS=9&H@#M_mEIs-7N%e;EFJsO))-
z&qlyM+yGB?XBKYHPlCE5|4X=a;?`^Zn>h_zO34Xu{)>Lh`0<~Cf5o>9w{hGqC%($B
z7Wm8XYa;xy+txMRkf;38ZomGm0qTQS_+N=L*Fjk}JQ2O;m`t}ce+!pj<Hlo5d~H*1
zIM#@amA|H6M@AlLi+=s>s<-Ld=7GrF1RSzq(0o1gr@8N_@o!j1{<obQMc*FCN^HT_
znGM+kkzL82Rqw*G%>3sPbH&xA)i&ZtoJ^fj#}%$K?LhtTI^fY$iq{-^M{<8;B!8Q(
zMB0sISMc&pvu`oNRjuzdCSGqdzw7j_jb6RkB9Dkvome7_{`|9v{zUEI5^g=Xo#&fy
zgL$*r#3kSB3e0}Fok7#qp>=+f`WQKD-kpu!@iygkupSTWG9MzDwutak#m^Z2mhflp
zBiU^H+3?)$7ivSU-F63`*00WR99rl6{^YGezjPUXOJ+!8)cO6J7v{GGzt!uV-@TXb
zS9v>x-=Ztdnz?wiJ@CuMk=Z#@9dO17W^Yz)><E4i;b)ld=<gUmvh`#2!G>ttM!GWj
zs@I#P<_y8I!npFRu@8=3W%v`=8S$v!?!*E~^-yOx_ITde9_3$JUL0QDhO?_(YDa%%
zc)n~Sx^hwdcqu;>Kczpv>a2ZJz}d9;{kItSAaZ8&+#cN@Atz;zPMnD_=kD~JxiF`0
zEk|*gCN6t^@jFRxvV`yAT>u~VxH~@)KHsqdK0%rp8WU~wO|Ff4Im*Mb71|GJo)yo@
z@oU2He%GGAV~yt1{%4P@NqZdc-N=e=JiAKqCEA^Nool;__V&4FP$XF!kqY~k?Y?|f
z0-mmQ0N$$knL^GWavDQp0=5{#>#=5#xt42B8Xepxm;ahCTaK6TKU{FuzUg;I@;<8C
zddYv$Hy55=o#dN3WBM<DwoKczs*S1t#-KLiZy0}b)}OUsXh~E_d;SGZ^NY?Vm7DDw
z>kG^szxY*N9pcWXPI%){@~q)4s=I!#QrnY>y-ICdnrpJouieO2d(;_@nHQg3UF19Z
zY9lA;?@Z?3qiizvXljru^OFCj?|8{sW6$CHIjiFd#{3w(8hEqtWUCI(ruV+&^mf2G
z@>2R=S5|)SC%osZFbClsEIw<_8~Hh$_LP*@zKyA`n1pu`Ub~gYn4xY$)di!Jeff`s
zE|tk^g1-bm_VZ``o3cULw>}ZM@fcPacARw;PQvPs$&k&Az9HAzV>WLpS1DuU4Io=-
zP6Tf(vFwOZ4%7zkBD@aE^Zkjk(adwG(WYM!cMsh1mz_1bUZ3C0!Zoz6;ZDMBzD({S
z+#a~O;!sK)3YkPq!98T-YwG+iWk3I^9(Dc$^|Hjax#*7`Qhf~Rv`yakg!5kQXcRvk
zzi`&tL>@DKLgn>9LKjrOQ7=(9J)voU;xa;9ntsvsvrbp<`<giT6nGc-(RKVmyKpwy
z2^$Y%lWh!kOw0Jn+LmGak-Yr;yo<kd)}Idv=3vGus=?jP=-Y;h!@Vp|Lx~Y|-_zvD
z|2k{zQKIWepX(oeeN`Te!D)n}wM+EOo0V^&d5*m}dVl26u=$mdJxbhqU$Lf6B<+73
zhI26Bm@@O{{KERN^YD(sQ{EB2;VCt0Tb>sKDvIRiEyJVBNYrh{ZS|w39*R>5XEb)!
z*h?bIw)v2Ke;J%sIEQ{Yx&QR~FW--vxxy6r_bbSv9HS@Sq`cuhWIOEd!;GCq9l0x1
zsZ9GvcJ;5?It4!{vpN}m_7YWJUbek1!7u-{v;MBqpuN6Dsj}@=aV}h!pSJ?9jc=bv
z_MVX-kHo8lSMe&>pY61HsmtL~^Rf+IQTbW(ZlRYKX?H~A6!X(BSwDHs&L>>mQ5lWv
zj;7x@yIP@qIn||n(Vc0s|4Y<yf4`BnMtkd;Dz5y!h@6h!bnS1-$O+Q#nrt|~)EAX~
zh5qHY7#mez_ZvU$!Tqi`CEDyBxP6?Vn7HPwd21&6nBfNN58mPCvNc`RwN+Pjy~|z>
zmIy9YKk%V^b4QrFWHCW2u(vI0g!JWVPJQSM$n{1f@lc*^z_7dYHD}EoR?(|XTx{J?
zwXojJP%^xJ?-g~jw(4GUJ*rs;H6!N|a^gz=w;nX@RWUQmpE{*UGj^@hB`z)_SZ*u3
z{ls>}(WiSLub()LBJ1LBGp}8btjCQkjp1He;<o<XNyhz=>y=-Ths+UxMt;|`(8hkh
zVEc)a4enyJdQs|6oZPN|-+ba^-9~-HSz+qmZ3T7u$Bch5O-8CnkLuFznK*RYb(S*5
z+#PmXsEO4oYa;JaF(~V~<9Q^1%kg>RY;+}+SI|ei?yS9cJiG=nBb#YYZt-f@Fg?@E
z6RxE%pmUENf56sd8v!HRFX%dw@_;^*XfF`=Bd=%fsj_$qzxAQ<*4Ro)%kS$&q|WF)
zo|W}u()`ix{}b=VHw5dzZsb=prpIwRFZmCexCQpj=8C%pQ-2Rc-pw7KCpZ@3!b+{Y
zPPyf+pl!FJntQ@p^SORT{nrFxPSu>X_jX=Mm|JWg;`_(AOg0;=+a&x&_(ip}u_$r;
z-u=oyt&O}buz4uJ^a0$F#yw`{tk2uE5Y_>b8_f%_*Xi7kGqu!J`D<<ov^S&P?tR^B
zeW{00ca!prY^xrDZAb)Gt3R7OcdPMQM!a=~qj}5O)o#_httQ^hW)JK3V18HxZ-9y6
zSYuEwS~HJ-jX4%>HEK6k8^1%OndQFe<V~eDDznJGq*~L2-zEHxTz7W0@JjsV8^4+#
zaL%Sq=WDj?EgUY`qSH2^voPykl%Ldp+S~J(!y&Ko>)6M)P~R1omn8CEaZ%MZ1NeiX
z21JXAAFt&hh>f%$7O(uiTfep*uiqc3+jzXL;3mOuK7QT)i1KORs{FkE+uXd@jm_!o
zat^^e3@?TsKc4t~P|cZ+rorit%=}H^TyXdy>%YR!!-w<R6Meem6mQJWYrdU+)bh++
zAuOj7yajwbgxhg4#r_B09K2YF=i@84K8G`vQ+n*Zp7#cIL*b9XnYhEQU3{ADI;5`P
z9+x)7c?Mo*Tl%mh=e)zm_)e7*-Xkt5$j@8MBB#RPx#YCMYu%MOKD`dlC1(uYY!*3(
z9o`vAm+wdXzOG3>ywW=p^W0F`w<XG6yrRPVya9OaA$dN(eH~DKSHYWx7Yp%x*$QuU
zxX$MI{PyNp!h6Aw?mnCG?v@eo!n-o#Q{YW^XU6Bj2k*%oze_prk{4z7UzG!Ib-2>%
z(;v>iUWco{^0-$?%g+e-6!Fi5Pk~<mPbXjHIPY+GzQD9$UoWH|(ac4>>IK?Pht-2b
zAM4QA;@7Fe`CLk%VXGWo2fWR1WG>5h^bW%d=8+hMb9CQmS0qzsI7Z>Ni2K?knR<cA
z^hc#&eVg+0X5f|Z?eid<N26JAg){AN*Pod*`g;L=n-*^gUemo+SLnm>wgF*#mBOp@
z^Nzra;m7mBb$W9aT;Vi1yglSUUEAq_w~`?o$r*Ndk=2POm0g!BJLTUryz`xmk)bvw
zy{gJq_yYKb2Qs&j74XIfGvlQg|L^I_j8}utyeV^jwdKJ3a^Rym@M(uDt-id%^=HB1
zncC0__%iWNhsO}v`W<vKZ$4}9wRz~SMBDK1WT>oaUQB-pr-pAI2YWZomc+VRyiRzd
zIe1FP5WGovvmtqYt4newz&jpF#(iD(_ABDe!z=7Qo72uE?<LfEc(G7;;W{77f!8=Z
zQyH{7JY62kPe1rY!cT`Q9b@2S52Kg2ZD9x<zuljXpgVFWR>Yfu*ZD~DJmG%V7V6x;
zo8euA7wbtbFCF0XXD-!tygo#7+rEqL3;r<Q(T8>?>VP@Eq!+SW|2P0|6yBJ4I}9(W
ze}tOoA1B}zz18X&qOVMnNw;PDM}<B5QraiH3w-;!<>!SRp}Efyc!h6EUxqQf#!jQ#
z0Pp8J`qZ6i?G55^I^m3pvmZ{N*EBm@$``-?9fQ*Yf6mK%aIH+0Z5tO8SG*m4A>ZDf
z!t3y2I87m=6}+GC=&RSt5N83-q~{c*=j5FsKYOh{Hv0UoMEb&K_{-q*!P%p*z7=r7
zZzVLsS%lLs&SwLTw*gW8>4H=J4p+|ahm$6s{Jy{RFQf1e!5^2*-2oq++OW|{*mWUl
zR()9A=kU)_N8jo6%iHaG*T+HmIte}mKFD|8bruhgV{_mu;O)ZQ9@S1)Uo@6iERlvs
zogVk;ws0DT*R|0YY@EzmKlbzVH+^UA9o0>CZ&_+?)d#<qeT&ws$d&A7_#@|@^X=Ks
zCEU>vbD+&s@HkwZ;V606S-W?=!^9(<zQ(9(%n`ZHwfY+6#}UGuMNYXL2Ti;4`|ZM)
zz!%?rc6Ea9ycU~Z-Zn(-tmZ7bw#S$o<3IY%JCq-GEz+L67U_gH-|zHGp9t~#0-nNa
zc^T`TKXiSJ)9LyBG~qqq%izibuP^qv+=jtR{)lj{;18|!jZMxwT_BPBd7AGTY&PzC
z=GMKDx@Yd*%S8^))D_(L4EMe8HwfNT_ewbLu>3yctRr1NzFp};?=0PFVy}dQ>C$J|
zj<g6rMQr3O{c*4sSA5HGTf|N4a=$MVZpU$L{=7fYhx;-g&Zp9;DplgG6HYlC<*|*2
zUp{Y<5=wfY$PGy=dHOA=3#4Iq={bAmaR+Hgv!ALn9PNWn2mfj~DLQ!7%Q83}aEADf
z7MQ#U`e*jQXtSn&R+u`&G3(`h@3uAaI^p!dnS(QRrRoeEtCNvlPYObFH_aBAOWcMY
z@4F|iOG+BA7}Re>HxudLx3%}NC2-G)`U8=>PShSiO$<&rS{pACR&4m}>QW(Lz0ZVo
zF|7ZQ=H(W>MbkEayeU+k=7?+LEmn~ytx%mVkcs@4^oc057EW>by)XN>pE$`SBMH(L
z{mElEW(P$YAnl^ORgU-iziu!T|JUtFf0_3tbhF3~X)yKis9tX%gv66MT(SRT<Yu|u
zY$6!<lA662uB#!AWI>Fd@n0k(#uB=DQ^%<9!}*~%U5~=4f}^pT@-Tggv9F?vF?N~q
zZ30?`Hvy0CC#5bLjnWR8j@<n0u^oZNY>mxH!oo!DtpA^B79V45A&Sx0wx+Z*v%$*K
zlR;i<9GS$=$j6<I`K8uReWGom*xVJI4^f<#;2-*g+Yk8ht)`EXHY~nr=%rqN`sR)F
zTcp!%<Tj$kef!4a(g;hFt6vS$=9<3Y(#u)jekw7Kq+jr=HM5Hz-f}^X-ACEX#U|yS
zPVA%B)VZlx_za)gdJDYhcb_x!X3D{|Gc(?4cUBV^8$+%>@t@WPZ<M`+5#)~{Bl<Fv
z#-NR|#?;-WrVwcv>WiicXT$heV^g;#oM1~k^@<gfe(e<u;<uZ$MW=63eok;F0-d9a
zsdk-w;~*@Rb2WZuKI8m+EVrK;{ETweBKkS{PSuU~8b9gAxLWN=P&RKvJ2>|Y6HvRi
zVD~i^k&*ZLv-Z88hL8;PnnoR(ydQz6x20@FnEjFR3+!unIgy`TPB(Hce!<1(Yd0tA
zqG>&s86V}%6mrf_FmF{Eywk|hS^cEF5pxZXdG&<?Nq)iB==2Z&FV-(#48|+TE#j=h
z6mA2`^Ir?aFL@ux=Q%d^$(gP(SZ6pceTjW@$vD@NBaKEBeR}f#kK~v$9RG(pBRL<x
zJUI<%<SY@N>c4dHx%2Ymq{b&kd@jBMz2sAC`q6}5Mx5q<qiucrIlHI*qnp-@f8zAO
z=|Yai*66e8IU{gJy_~;H&zXiZ2B$@G_Q7ek`yPHBuXZ=dK0-NREt+})XH8pucuiY9
zkDs|OJ3kLxo}Wg}Y;+PAx|O`>?f7x;^q95Yqi$YodM!Iwj}f;%{4`Cwe5k}v%G_fQ
zoH01faAJkXeVL1k-M`V$ZSH;B>W9A@%r-<YSeOy>Q8PrgnBV3RI{I{N&(-m}t{}48
z{IRYu-~1bS#Qsyq@U7vt-H?b!5kD7ynfcu}gZ85GtGUP=1GhrW6Hnc!{B8Hk?C{=z
zxLt4${~h*C;vP5L?qF~D&V(+xkvtrM+xZXJm%SA3w+wg8-Ki3!ThoA!g;P5dDc&@e
zxRg$l4sCOp$FA;HTFm==TQ_P(!Q8-Xg^Oe|>4Ev<C<WYnBVsQ!<FTNT^*(DKHu=J1
zUy&yyYh7tRuT<;nCT`>sk?p!|`uB$8^IP@r&g1ju?LXXa(BF|q=a09WiH>}k*^-&Y
zFo!dna9d0O?3J3C*Y$4tq~`|f3!3JSH%dnH{PCS9PizZC-jL(QD`u`cMUtSpf<~gD
z%k@-l<F7=2|J|V6)VEyvcQCn``TY$lH$N{_l7qVm?L|RM{YKV2bSl}=GS*LL0@;hW
zwQyeIC~oblvmZ6GCsNDKJYra<ta#J>adsGkBAiGRp;F_Ek!&<EdG|)mGntZ@oyt$0
zJn>FNH}dq!6OB~r+;Zy39LY7lZe-_MA8jX2ZqvUvX`&fSGn-GIxD}zE&ZL#Z@n0D~
zE2O*e`^h>ouRr$p@rqaWt5oKT$vmrvNj@{y1aAsn3_p~G(c6Y~X<a$+L5DYo{Cis-
zt-}t1pGSTs{3v+Izo*}~lm83grQls8$H&j#7q5Cy_-p9Ueh}0Hxy5knNO7ygtu@81
z5x1t0o5E|utr52v-#)x>e)Q$QM|0rQIq-!X_=>|7S06t=?#Qk5RW|<V@>}!VYVcmt
zcf|TPYZ7k<WcS|c3#?sdvQDuFe?>pct=AicHwQ0f<tNoA)yrvzcZP7k$K&_@l#V5M
zvE|JBEKw9E!cm7O@*%vBPzGM~AJ!J!=aa8Dk{<`p`_b8q?~ru}|8e?s$p1hN{9q3J
zh{Gkz$1hxtOAb$0j>^aAucN0Ve&Kvf+(+;9X5wvz*9-4ZC>*bk4c~jw0&gWldL^gF
z;j<w*>2&y`@WwCY?styBYyU~+{9Vd|oAm#N^&d{ZPggh}H^Upt5RT+DIlMiTuC)7K
z@a8kfQ5g<9yhd_T?t+iuGzoqQ{|mxd=Np@nHzw=g=HX2IXJVdf){)rpZ;}_yV=8|_
ze+WLwcl4**HFj2*c?{|^ZlrNL3wG=+do}hMKMndt)uSrhdT>+KLdR-#4O(9`XeDQC
zrEU)2iO5kczf9MvO{?uz7J7_icCDv$4<fU1C38DH1YVN`KMGz2UW}}C?chQdyaF$c
z|4F*=KgxIX`EAORK!>8VZQmcc@i_L<cKx2W8D1ZL4&rBAe!gn__%(ZC-ynQW@eusd
z|FUf;`oVyoq7P4;Q&hYb@iXTA?9S~chM(e}%7)$P@~^>9n)94haC+bjDDGDWobbLu
z8=N^fd&K#EV?vJKH>knAA5P6G^@F+)eHxC-H?tHD><*0z8w()Jg4V9_k02wOch2;o
z(GP}XWM1QUr7RQ8xro9Q;)|R)#brlGj>^xdc6RTN>^|O^P76~+T8e&)dL22JI4h-k
zS%zCDZfZBA&5U#YE<?G+!MnlxguC|2g3`SEAr(=$59x+`7_RD$mxZyQX_x9ljw=4(
zrd<wiO{~FamiLAC#+KoAtvhFIb)((z!gdSVMMLi_d8M4SI0&zu?`TsBk4{^>Qm_rz
z<mWBGo8lW;rVdMm<oD9c!TX};?7ew!Ox{C~|3>iY_2=wfms<n+H*}Rpz3d%yfRFJV
zooPtK*W5R5tgDF#dM$B>ku?uj>oMXI*wdm6iF_hZf~jpBhI?cK<)wZo*ozuor%N@J
zxY~l?-D)VBw=Cml<f?OP?V-`Jg$~TL1|boD{B`~}bGnV^RxfBh_j4u<=B~PiO|vic
z7KNIEYrfwZTvKOz3yyH?$Le;yYX5wFLF9AjBj>e;Wd6b26zAH4b$8|4kGElP$`We?
zlRHz6I>T}Fm(E!|!Sh>`f4-m5REIsK+5**?Le4u}g4Y=(j?WmLbV}Y<(k%0K$a1ks
z3(t0J6<JGq(?vy`6&EW@)W4x4hqFlrlYTi<XO=IwT02W8MTU}LX>Zi2M7JbuVWk2Y
zwR>PWsYsag?RgDj{V$*M_oFp?-Rhe{W0C6f1=2V6E4HmguOxkej)LnU?A~z`yka&E
zmf;PshZH@-&6}+0O)h996s!!*(kZ@a%$^^r4+<?fg>3V`19|1Y?%La@jl5u=C)C~s
z;kChQCl1la4bPX;@H*GtR0k*F4Z|zZ+I6?#IURJuq!M*v<d4ILBING^{(3f_vv%>X
z&gkz0fxr3!)!nju&Wl__|4N05uGA|(#zOU?L51cQiMv%Qk#{YeinN9`j`e!XI)mZt
zTTU%pm!h8JwPMOveQL*R(T7(i_o=<OU3zW$K2`n62zViW()E)a;LD_^1iV5zvEMQ2
zvHgVhoHXVfpI4Kp)yoLRLOoI|d+^SaC$=*!p&B|ysu{Dj!LKvR<W9nA<Lt!J@0>Gd
znWO($7t|v)bh8Rq^HVn2;AmO#;j8v;jMP3E={#k_qW^b<P3>zl(A3IP3TuY2rhd<b
zb^rftSUSTo`1>xb{Qudo#t5tZS{K%V+W)aUY$Xp1qxpH2uV?&Jy?9M1ELHGeE@HGc
zrUNt8)F=>5H<j3Ws5hnf;2gWk)cHKg?nL&;8_umxOZKT6rDN9K?e8D%*rh|94>B*|
zGRSA<>No1oS{>}-*Y;y(+nKK>Ly&g5wty3#rj6|RUDiysK^ut?-aO$g&p18w`v@;Z
zx2pbN1<q0Y#nrCwGjWoww>G)8+Y~nkh&~hAe8W#aKb7klV;jz`mR*IvoyK3c-FndF
z|BY%zb!t1U2O{e>=BpRiPOaY%>eSzQfx$bNP2U5N9VhBF0I&gkfKB-m8Vw2}pTs=g
zv_rOacR9zrQQ|N~9C~*$4jcX58&dlu-a6lRrO`j`R9Dhwh8weEie56%wPo&<Zb#2(
zRHYi@{J?yNG^7PIaQ1hN8cwnq^mc?bk|$1T9#YDt)!dEeR-=@6-lJBZW$Y@Qj((@J
z`)C1fgnOuk{z~%@_tt{h1UE;3Om^zrijEiiK2;`HGL;Md<}i&tzabsox1ZDeW`g~J
zft#6ksm}fI50ppA`*i#A+2l;*hPhvV2|pFB&d+nX{nQXn{7UA3x1U?B)V$$ujUVcR
zx0UEk=(Qu)=>??+pFP&Bf4iSOcB}r)%ae?z-=|L9Nu3JK#h6l=L+dOC=?0I{N&15+
z5`K%?fOTfGzZn@r$e7yAxR5MkUw(ty(k+Q&&<Qd2d~^%#)Gj1bfHq_<v;Q#Ier|Ob
znbCiLz49=aQ<_6f=209h6>e9(-mam+OdXR42Xn&ZKxC(>*0zpgH-r3^i_AmsI=8y0
zdi*IPf5MHes&(cq8r5ZUM&%~yiz5%A1wXZL;$))WDAlz?gVp}uVpQYpES2Sz@H8e)
zy)GYnWadFOpX{EhrVeJ&6$y5knNw>#JrBR{-o$uobZLIwA$-HN*l}jT%fSc1-FUpl
ze<S#427Czl2d`p&2X4;u?XOlDsGrijRMU<|<<IrTNW`ih8r1!oc5gO6BD+lQ+(>m%
zHu=WfX#4DE=4wR`HYDnwnNtJb5$0}H!^gk&POM&Ig*Z3fAN093#ItE5>loZx)ef#U
z@eK8g_CQ~vHAmi`GUu^!TdFxf@}@wp#`c5AjpNp?e)^efmHr`@ekI-1k?lTNk=-ik
zx6dDcC}lIu?83y4&u<Zq@+8uv%wu06E(bbjGnUK|e$`uo@YUCr6;NMri>V)Z#Dw1;
z3V*xu&+L|&PBE@dvEAxtOcrlH#+foT-u{f$^m_7^od#PX%6LDW)Oz9GXXdN{j2Tvg
z?FqAeR7Cvtyq^B^ks!`JxXlyiaoko4iSsvJr#!pp_F$A#W?(iC6DXv|Qi`HaNq95e
ze_g@4Tk}sX*h8XYnBWMwec@EI;uSaJL!<fKb7~<kFGje{oQ<gHKWFY}h(2$^HFJ2s
z7oj%L17{A-q{{PKhSMGF8Dh%iM@G0BOAf+sd+)i`BkF^mGW?og-|(IUy#nqm+~xPN
zR;HdtKWb&C4(VY#CyhT*&O5a4J-6Dtk?)6$pZ?UmGVft2ubAC;r0#^>k?LUUa_kN4
ze|$J77tOu939B2om|45{_^Bx;7fXXGWg~&LXj@C`gG6^%V5$JvuH*BkOb_s6WILa>
zX1F!sC}Ee6F(wfvWpDc&229PgnWrUmCP(1a<lw1~y8y2hp1!@jux_TXCOf`42i}wg
zj}c^-!^ds-_CCv9$$Hx%I15?gH~~JN1)l|<1LvQF?j&N~#<1(yivY_XLqA~SVDdC|
z&!h~jq?UQ~$Im6b_v&@oVO@U>ya{-*ki767SG&U{Gd0iU)(<|3|Mn2>!wHwoIJ^rP
z!jYUAhmWR_6SfV$2(SGU>EkOoMRgV*OC!h3{cu<Pse(73L5})|R);THIjQ$VbcLpD
zR{sHi@ZdS4d-nO{^C2An33z#*%pCt&hmYBCP5F8`;rL&I*PBI7Nxj8$$*F;NF@u~q
zaTw(shVV=3_ZojUtgji)H!tHD9bM!etF1FHB@gF2t*Itq{8!D-5^}~q?c`jAoUp!A
z9kbQ-MWnOTXMF*+(D{$yzl?JaZGV1lwV&_kKmATZkL~Ts#c6~y<vCwW&*_3w{23?b
z&(d>-;B<S=Th?-_2x}5f%~zkZy7wF5IDMYk2hhq*mqe($R8ll^HlMUh`Hf@$j{J7D
z@ko>H82QvVItw=U*`U8J#%&3=8M%r7HcJ<G1^1~#0ax|5iL(@wxDD|g{eP8-c(Ha(
z>}R0+H;Oj#``{OU&hhtU=c^y@-h%!LeoS#mdk@G+{yUS5g>Anzj=#3gpR+dX>@Ngo
zcRLber^eY?cuVl+`L^=?8ivar?hnkQdVp8p4t;?>PI0Ms`aun0^_sqzS8|NKMx3_*
zr4059HG4K%JH*K@%AjPIJHyMlD|Ql$^1Y{lv!fG1zE|M3$GKhNTk$p~@7HlL;WIn!
z#H-m}NVx5phP_PT%$#BxKYRWn(Pso}8m6hH`q(yM)@Efo69JbaDS6Q!{I<$9ogHSK
zv%~C4-J@wF%uZy?e~~hXBI8R&hF|AsRuQaol!tb{_3@-b<r=t=W9mP$j!e1w|2`wj
z%&~ISfA!ImTS>%I=T?iDe~=E-$N9Tl9-<5sjOxMyyd}cu;G6RGHq-8|$KWi6xEmU=
z4f*nOzW?>QT^$vrt_NI|RVCa(xQ8UywOgaxVX>?0^NfvdgK4#<2Z}*E$Qg|2SDYRH
zM_;3U(8Sx{lOwq^aH_t1Zgo&|^vB?s_TlTVwWHn=8aQh3vx1+Yubx|7ke?3g$5@a`
zjbpSj_SOz5A0qD#RZv$JYQr_0w<!Ob+grHC$S~<=&q;STn7swv2c^zfeR1VB);I8(
zrkc8%9G*(T_ExC9_D6SZJkFhK-oe=6P7q${*UzmssUAIp1~*w3ZPtR}#lzdvRH9yj
zzNC16gT6;P{*M_s|DU$Af$#Dv?|yRUUqC`>v}{8~&1T%#%A-ti!--p7{&@icNlOZ}
zP203hTiT{=+NLel*k+HJ!-+GFP@s(#HCnW&QK=6q)2QqjTbW}|c?l%8abqJufS~Ld
zn{5B*`@7D4?)(1#^Fp_M9zLJ&zwdKh=Q`&;uh-kT&N!J$blgz91u6->QQ>OSCm~nb
z4RSYd+pC7{{l|_r*b-oBBEpN9P>FuX&^Z=BxoQ5|<{~Hl)jws9i~p~+vi)4p;$gZg
z^NABNNg5M;gyz&9=p6qsYr&P!`3?6CA>S@K#<H6)o~KiAWiUZ=*t)WR8GGblysn7;
zFlpVSEugJw=T?gXp#TtRf8A<@qCf<Fy7aVlXi#SX{Tikra)a(lC9Br01<T<HUXAH%
zER>SgLYnLt(2s2_<*I&sGccZs*@Q!y9pq2{eN0nrd*F@C1JV{smT7sH#>a3dtBUAS
z3CzjyQSf4R><ZOe^&Nut{Lz?pEolol`!J8Rk~cwnq0x4Aj#^uk)3ZBLQG+kb$1H@d
zMEaVfS;&0i>jU_kD^6rOw5~qy=*4<73oyh<hUl1yjh#;NESY{HGp4cg$Ck(ILZVuj
zOk^WdgXcrzx?JnUe&~$MI*}Pt*&oR*+t!N@CCgTxv0BE%>=R};QGdB}4^kXiz^_V-
z<FV<8)w+Q^B`a8CicXl`JJA=`P*I0Gr0K+sVRxVa7`!KI2e%89pAFKeWUe)pEAm}4
zblahO;SDD;R4HCZq+D66kV2+1wje&uXckb+F;kt<2KA~|H>u!+t))#%P@0Ip1Y*%?
zS7(iZs`2W_DQEcV6J92=bvNnXm0C#!e(A)du^38#m;UnP@HFs_Uzr@<47`8tiAiOo
z&db1iF9Y8@1-yhdI3B{o{mQ=I`!^+Jxmk70#Wzk|PtjQr!fo9TW74@;X61$c{GRX{
zz+3nx#wE{;7b|ZfztVQ_Mso06y|VpEd%@fO=85Yyk0SO?0k`iD;p-ChasFn+q)F%z
zX4NxJC}%1>mA44I;&~?~)gv?jp9j1?QJ&WwDSsRAdf?3oxcAKxyc>8o@VN<iQWo9?
zybE~oB=CcmfnT@`e9pB~(_a+ATNC9c{Vf}S4^zL%;BCMczJ>48yno2?WllzQaT~e?
ze`}aO^jiv57^eHy8IBI%J!DTk_gmT@yp27QQT$o$G&scw8>8Tx-R=>?k9lRwVKS)M
zyX-b!PO`Axm~UFhLc24Z&}sVB6D}^=yAtJ&k3}5Fj;Op^bGMVP<=0MR_G_K~#cy&y
zSNKskXz+y-$p=#fzn8xq2y3%SPGmY~kmptMU~4Rh{Wxxt64O+*rnFrqkBZ<it2FCm
z&CuZTQ2$6SEz!AKrWEgW9vzi<wYg-N5;-!86}&C~&|zt9m!U+R0B+yb{;SO4YffZp
zj1RJUIz4EcKd#%kDQJ25u}wk4%gd2mO8K@v@?2WT{1MMO&+;^tM@-~$zpmerwTT2+
z4=au?BcxkiF*J6sLe71+8w0eB=hwUQLq$R(ICFmupX~Rzy)N~m`D(*lUA_g<tJxOZ
zd6d%%(KbE1HG6+i-D-6pb=^#2&{ZEL1l@e-FKHkS)K@Qm)?4-Mr7o8iop9%c-cMa}
zY`MbO2TncoL_787iE&23QJIGGi{BVWM{}a+?a1|%H6YvWAUN1s7(0spC8p2ff0c{t
zD;INDiFEt$*6CYj1YbQeusSwMnUqULF^is8^Z~;}i)_ISW||5f(RmRfi|M2XE=@Z3
z!J9jxQ>DmxqF!gfjnuD?`i*^n`Iw@9AGi8#Pw;n@Vl3=zMOtIA(#AG1&>7fSVcaG+
z{04W2ZbyZyEt|2S;^$=FgVDFaEZX>YP@mEg*7NccnSRaBnO2|Jo)+t<ETsAaask!M
zK_1eo;oMs7Bx+WQ+zpl51pVgKtXCB$ES@AeI`ThV^qH&5x6OEFdb<0{O|vU{u6TA@
z_0xr$XO(Y#-IkemIc|rRWZH>mRw<ZWW_Mq?dDhc~TV`&3ow7bVt>+5Sfqn~rsdr#2
zNuS6JYaZ79y83(qzBc#^V~)HuX582V&j!~Gt~_=$C{+td;&I1Qo|W4|;?Z+%?C+G<
zMtO6Woyc5Lo1J}!%8UJPf=c<?R7AcvH+u#Sk3eJ1CT8GDq1&|vJK_tk`1sgHGqR(L
z+pF9Lhf1?}P8=J0;>~Qx$FWbWU(Wuh@wM9OmT2<|wPc-|QB7E(c7KZD0u{&LyA?n9
z;-SN7!KhQS{x~a<t~-%w6V1|`@6{gSSWa^_vW+A-s5ZFsKkIL_pK=;joycrgIYT9J
zKdN)4@;5sApZ7Of%(;jSYr?YH{{NQMOIdqv3d@@H|F10ZT*t3seYy2SW>jt1`*yXV
z<VT&W)w*7(4JLRlAsMZnsTh}RFocWrkCm9HTw<PdX3g_yt7dqX-+^X}(UdJxYpNE=
z`rH*Vct-1E*R;BZSZs8Pys==46?NIPx`I3M$yz~9e#&@%G7za!o_YnTo>uqhOo0k(
z`JY3N0Nzu;BU$PNs4Tou|4*yCPjBUg_v@#+u#W#BSM3s)yPu`*XPJX7<%b$P5~A?d
zICEMZ2l1xWHS%)Lw7MJkDW6uSJ%e?Vwr=Na#fEJsG8d(T8MJme5U%A~#;ZK@VZ--X
zBF+waA==sb=Ru?MCfV;M=XZNUxb%kfrO6ZCw^;f20&gOJX9DhHK?!~w_+H>$33!s<
zOf^#eXZeN%+{aI8CanZ`@#jutb}|kqKh~Qrm9`X-xmFJC7HMHifG0}1KhzNJ4%!R0
z1lkR5G_`73;Y!Tm7CUoGP<8~T1g8_-NIC1Cf5q3+%8BmBp%}?VVf1Y?Z-mb#<L)Ex
z{Li0o_PQ#^591IU*+@r#?*yLbzM($0J;!HO#Z%N?gC9sQeL?@Gmj9aOPRv^cPf!E5
zK9+#H<Yw#~Up(Q?O)Yh0dOfU<*`@Yx2CwP)6Ha#@#^doeN0r$Ld<=M(>UNu>gR?to
zSNB{-snY4le$WSQ!<QTn?)$=mp%R6(9lS6;g2;!D&VDeWI(+$r`2dm6%L_!;j*Uke
zUq!dbe!||7?CZ#{h6n`@K{*P6uKmnyrdoGu$-8?edxXnt`>&Z2%tPB`jB7W~cvQZp
zj(0F`P_g1{K8cjgGn58BXl{q*@voe)yHlultY0%niVATuSlw~ekcQ+al->TC<7evV
zErH$`^tOKWM3$ew>8|5C;y75BxMydnudmr07T$`z=W8ci?9+6j9ZlWDsZrM)c^#D1
z2yPd+#~Dl1y(3%~B#W48)Wy4T>p;02Q0gPuBe>1{NN&+&f-iR~=j6U8p}&uL0mWW@
z3n+G&I*fgtxyv)LqHOJOcPhARx;3tnvUO1t_Ni}#I)E^?x!2LRK%(WH>|?;qp85W_
z#e9!;mZjo&s?53Ab!Vif(&qETmeiUo*3qDXgr-VZC@*&?)#9UXr#{C&|4K%3q?Z}y
z@VJ}wOQdT~_;k&+1EkN{73yAYbKgr)Xp2v!IXedYAn^Ulmz)RkOmtJ*`g!hc@K7&C
zx{!FjFgnb+EW|B^Od8yNa9iY@hOCk3XS<_A8-dn;X)=Q!k5gq@oa+tH82N6v286aa
zGbr5_)vHW{{T^}lg)4lRYi5MsVcZy3pC5$Q!arv}2-mu3=f5YWwRzg@GY?fb-?-H6
zta;xH^$}s42-UASCBQqrkG>Y#zRmpp;9?!7;glV||5aZ!l5cVU31@dLcl(B}p%UF1
z;2TkZ%>My$2a2B5MWkV5{Dkh`eDbsPz(LFS)^mHu0JM6Jvc7BGe&1U}3t5*f$AXf$
zaM9X_KAa^~GhV329Q5r?gVY0IBK6Cbw=1lN=IV0w-<rt5F1R13O`;2M%s-r%g|%|G
zb0MDGY<6B=(QGdG^L#ma+LY$g2Zw^C8VmBqb7|^BjgT9q)@U_vtj7n3?1)O4bLGpS
zxOQ;pTH&tYSEOzm9IDdqO8Ib=@=XJGAp4&>ky+x`9+SC@;}`#*PKr{L=$U^n8Rd0D
zW9_@~4;(#_nKgrUd4T>YPsmi}>r^qj!%mLePuTINr{kT6|5ES?PV@x#9V$P};ACct
z|8uKB#}$68CTE1k?E~%<5D}MXY-lW(;suJBe*(l|QdT((&VMk6sn?#LpUBMlb?P<U
z#*OU@m9vLgL}O(SF4$HBFDkLpJyTG%Ew${~pq!alBNs{g47FV4VA)VP>WyPaeMifV
zMgG!jEe#-tlM3_Wmt`{t%ZG@)@lWVQj+Ht1dx86x;16TmsyMmeO$90z@)*|2kTHAm
z*9)=SC<J%SwBL2^hi|RrZ`YgAC(a#l@uj|I-y7@iod2$D08&MZxpXU&NuTa&v}+F?
zuF=X|dFXJS*1!vQBD=n6By&96<Gn8d{sGa!*9Pzu@9E&1M>3ouB<8P`Yxc7Wv!79#
zE2-?6E4EEbOUF_1^y@ayOv{pH%T(kI=`o?HdEW`$18*70^hs8KkI~(p|LHlOxw?GQ
z8@gX#vAO8!tID^`-g;%lwpq^<K0CALb@IR;H$u@7LhI5Z{IuRak~yfkn|ZV5z4!am
z+_fdt)(|s--m57YJbdh^MKQzHX$ln$`f!KMid*5=Y>m(lnLRYva`f0LB?q@3J!baO
z+d>OzyMtGSuXlvM!5-3ekzo;aZMhpCj(3k_ovrL3t)4WRBroq4r$e}#kJTEvo1~%l
zN{2U+IWV8^yTiV3IMiiH8C4@ileAcM-G!TGm8tz%Fb*BA3)e}v9F;}D#}Ql#z7!zU
zXz|fj@@V3@%1Jf_-B*YPI8nYb@?ATvZWTZ6%1{`*h+xFqs%dp{e1(#i>PV#C`rgKM
z@bfpt-@AddoxejHkTwEmo*K08N$6?RwB@t=uecGe?&;|q0L0~+j$@Jpjfct(BP$GO
zsx7x^?U$AQNtcy^)<6ph)6Lc=cc9QsI_*!FsNcSOXnUR+H^v)zUP$v~-aQW9o`5_1
zOw2P0FAZMty(5>k_q2dFkb^goy{8+zuKPx^>>Ej+!d+9qRiA?)yvx;lp`YK~`Ps4F
zFM)TFa#|AKC+852y<~jMl6#R4TP}}R3tlI9Y(aT>%N=j*<6%^UJeb<L4ZOwokGME}
z*M~f*isj!z{<?wp0oPhjzj*me7IgE)Fq4HUDZY_h`sRJ)S@*z5rpe{8zVv>7zE4&5
z7<k*kD^B3~wiTVC`y9L}0iTG@V(<p0ptClFUye=(ctsCRTp!hUdkAN!Mq^Y`s4l2f
zefxnow~k~w1TS}OE;-QpF#HwX2zYxQ8u30m);@0RW#8FQ)IwiBJb8T<hVXi5`Z<%d
z?bQQsBmYG3VzTVy97ZqjPM%YBNZFw&D0$}o060aDu-^&iT``V7bFVRS0h~5)whQMf
zaN=>&ogdq@6p9zY(~T>g;TR^*F6DXkS0>9tsAiX^7`)>9Y2UVJTzNS_Cs}R0s%<-<
z+q>lzi|3m9cotozk;9X0-2$zC@OpTrzT@;8+Q28$Z-@stP8mz6$3FTwb&ZwbcmVDE
z`d-tM7pA4NyV1lj`4Bv8OY<@;4_=cl|1-9dyo=Oj*P|nutxE7Z9m)9xcWbY8J3AoN
zyJ-pQ+aJ<r@^}B{FRR_^W8S)2xx`wp&0(!gFVpk@^Rm<RW!@S$my<T<4&VoXZ`Al*
z?%KrbP`r*ryvPplmV6XCj-U0uMq(t*N2o^JupMZu5vLxsdER=t)oMbvycxQA4`Q3#
zz?g9J3x5!=CXLU!ER`l3fjrAZ*5pOiqzlGM;{tTjro6Bg5kVQlv-6a*=VK#gFQEO9
zO<*d_N64ygewH<%iNRb*RyeNJ@g=QEw$`yF%D)^Q6ak_T=dCgy46Ry8>5!7^zvAC#
zPJf(l6dyPJm(+g=e{5Wa{aKCr@TsEkq0Qhfpm`d}yY~|#c86K&;GEpNtx;Zb2!A8^
zi@HWKYc)>4X87_+b1~by^V=hQaEtltXk~tVDw<#3?@sOsw$?X-(+kdaa4xyNw{aic
zNo*F(;1;#?-N%kfZ1wEE(-E3glhrWREhIb4=E59w^QGM*E|$cbt<F{ti_IX1uy8hL
z-jssd=5aGuM{7tfuGWRdhp<V3t96VD__d?Ez`oA(VP?DP{{!NfZXU_(mcQ3`jplaR
z%nwA<*BhIEAF+h%j$W5F&w?*+3#yJ{6)MMZ55*P3Vfj%4W|kfOkPODbSM_-POzHM-
zXE16{xj?<@pMz(1^|HOd%kxV}oAWU1@Ai>Qk!$a!Ds^9NcRt~zZ?r?Z@Q%yez-&?o
zUV*DP?kf!CZy^8hXGbzvaP{5B-^pgBJ!z?C=i}tJSEs$uP_BFV;BtX%|0n-}&xi6!
zrQ?Zx{UZKL{DePeN-+cT(NTP1B(rb^ZTRsws9*ZR`|>0QjMKwNq{y*M6l%{ZdW8P{
z%1EXb*@Rf(Hr8(0G-KV%f%lkMqmn~wpRHu!b5OTw#)_946ZNXyG=qCA*~80NW4^(j
zs94e0M0NB1yHxg=bqRCKS}o$i4FgA7^*~<+4M*|D2y6^&3$CY+WoKS-w9HJ(b~hV{
zWt>08U15dBw+j*}G&kC-EsLHp_9Nd89HCxX|B8N#`xU;;`b%G>UVgpWEtc^lT$rI;
zTwE+#rX^;SOU!GB?;jexR>mI*A-5ko%&B4%LIf?>D`jY1=q*Q=@ZFJ2e~NORvvPEw
zp<fqJLHI=oWY&&@;17JCIbR9>^M-HZsA_iC>vI>wU=s(~IA*m9(IBXCF)X~5MPn|w
z%ZU)}gG0AT)UN^0?CZfFBg3yz(v2iNp@)LuU~uSGdpezRQurNwlM=YP3oOWeV&-6a
zsD|L1yp|(CL1bxR!H>x3WQ*V)0C!rMHxCX`vz~n7L)b6N^bqQYp8WbyVRQZ9(Bpc)
zGo*b#r#AJj^`qxebb_gqS^ij_XG`+5d%>H3#mNbITFv+4AzaV&?>IRp^%!G-{EOWl
zXmF|d)pkz5S7G<bEC6ruw38Og*3<ERghi091-@bW$w<CcS`%rVIcaUAt<Oo@Kw3*8
zO?B-dZ5?UFJp1xIuP*qW%fN>&1HW_`_`JubE`Lb~pQv4x))>OYzxnzn?|5nl-p%)E
z-SO}wFWm!tA8_qE9-fT5v<LXCKfS#Fjq;Cxy8zt1j+U3H*3r%Ev$21__`Nyn+4I5e
za=7F8RE@!j_|!)5H*zLp33YDL{-3!@>xq-^#kH)EgO%BAEJg^k#WAQ_rv_O|ov%lv
z(T=r*+990oXjJrPoXqUidi8mu@AzO_+f=cfxF=dZH=|)QPT1Rr3QZ5SxEdaK=E+RI
zXx;Q0X?0Ibs}oxDuMBBj{okW?09rj)g|uFptv0;;H%?HmMfAtK8us!xoOJivf5d26
ze_ALoaqXrb4>)4y*(N7XH;}LP>XVKqs<V84%yj36@qRR}+QI7tuZ8E-HHPQ-oX{r_
zzfQA58ty{I6}Y{^Er@9v@1z4pA)l27eh|7#=A1O2<kZNO+2hELCb@{a+6%N^vN(^^
z5H5tyyrt|rzjV^ciM>WA{*DRcM3r4no?YZwEP1ER@>rW$Qz=h4#$^4j&}9KZkJzF(
zs19Rw4s;qn#QfZtZM)L^Y9qaC?n$pNiu;z!AB?ZHb1SCK^_^nphHA*$N8UwmJZbUW
zvgVeZ2DgSWb?2Q_Gr0%eobxVPi<hy!yovQC#dmhivT+vs!!Ot92$J_&ChrOfZr>7A
z93dbebc*?_X-5Wr>q&p7LfpoWx^7i@J1DRDZ6`A$()<3dm6t0AIaRHx0j*bS$1!Qp
z(OB9|dBcD5is!9;d16$u)-&-Q7qAx$m#}ZiN8{x}8%tSd6mE&n#i@Tv-h;e*4gI73
z|8v84{Vz$kTFqkDm3-7jLS!*<vR3_vk@4SoGJ_PMHJk7AY@V_4b|nZa5*L3Y<U7WT
z#%d4cZe4iN#hm|`m5ZG1&p+8&3Id&bWwo>2^;6!y-)7I%-u;l1G3vE-^RJk{Vc>o5
zKIvlfRXO?F&U}V(!#cq!twsKL5B>5kzV|m=`$XcYn`_v4{A!GI@a!hGq2%bg*D+Xs
z3g6SJetVJ!vqz;vzNZGh$C#*s7he~#Nq2))Cv=#eQtH2tdaS$sWM;{4P>%wuM|@rf
z<4#I^ChFz&TV^cVI=yTg5xB1?dp1?pQ&8}HzEs1Z@#Uu3t(dIUP|k;QIOTQIVrX-H
zII-KsSqYZ#bb*W1fNCAb&8$)?TyVPB#&a$^Z@tS|HZJEH2dGSzzd9ttRj~utCIP`s
z4x7trv8ovVE#^AdG69jw*s|pG46{~Z%iO@6W=y62c4oY8YN6z^5IfehnjVCK3>D}u
z7J+jLwSFvk1=$Er7v^4aMp^RZ;ZUJ&E~Mr!ZCOlDw1KkcZaQgxE~%HS>{#aIY@nTt
zb8EcVoX9_=i7}`%92?2o#mG%PXL+SJ@Pj|rQLNuADHOv+*`d14LHZDMgC8DR!~g$!
z2-|%7p`eWCTMjW@))I;d45+(3ZL|abl+T{@dgUw~XmdDc#JA1)Lt@2zZeqT(1o)y5
zzFvewe%kA*yzWYSZzFj7q0^qgb8z@A8o>B2{~MOCeBI<L`uu+`pX#-rd~3<KE>WK6
zC%q4c@GgM26}+7ZJm(Wa*e<J2Sz$4-dH)lhruSrqZCl@2TJ`DRGx>MN@fw6v3eKW0
zoHU&(IK^q<Bw{+Kyk>Crg0qL`-1gGG<aOB_!CU*qlNq`x!t*gWo5FgD-Y)R^o_9Ql
zr|0?VWr=<q0`CHN$?v=?LFW?i4LjfsTzR&Kw1sego<n<0$w%-t>5TNYey<sKHdcGh
zM$T>={L)ExHe+zQ=AWMf#%)NZ@@F%O!S8@}`pYLXX}4e4J`*^h%l3SIZ!b8_J5OdV
z@C-fn1TQudsW`m5s}#_F@D_iCxi8&?=NYA3FbCpl7Eq@Q;3Vu9XU?wAS;O=4ipf@l
z)5yGUAd`fBUZMWHC%exVfm8oY#;2=uz4f^d0SApX{?>xC^Tm^1XBX;KRT;bTUKLp`
zot>_@Uz*$sD=^9?-q8?EaMbO36s%HwH=DlIY_QPUK)J)%1s3f-nOPuR%dOMY{$5wC
z6)-E#<0F0xbGod_BT%8^XqA5XW;`=6`IqxU1k(rYXBpZ7!2%pz&0(X~kkoIDf5ce$
z9=w2S%S6B39rc^WS2w!-{_lsp_TOEhI@=h_)hP<MAKVKb_r=L^RsIm=&+k9!{dU}$
zdb`Zz&ZvChr9O&}7<j31^}H{_D+X@?cmqFR{d9P?eiG?NGcL_`V?2y(1>1i_zk`!{
zht-d}^!zezPI6Bsc^IvC{SEB<e{nLigYlHQ+VUjMW!m-Xu-+V`PVhcO<lCeA{AH|f
z(0V-UdfJ?{E}i}Oc}i`0AmNW?T(U8lrjEJK`~m*r*wK3U%*3cG#7hJtKi2*lJ=|==
zteHFS_10u>w;VlYo_2M-Vc@T)?8XnEuQ_ls(>aH-zh-3{|5BY~KjMQYIM2+0o54|J
zb}PrrV{N3rdtPlb#P^i^<H^jxo1yu#(d^=$DmgZZ5j8O`_snV!`R1%<@5wvmY&QR5
z`J_{p(Ls#dDoqA6msDvdw-LOa{odS>qT?ds&4`5SQWNoTCqH?jlLVnpQ{ft&MwLF0
z0^-nQ)J=W2egkWG!Kp}BWc)9-gI?15HFm09`#Bas0YNGi%JHV;*ioAwAkV@pPGuHr
z?99*lPW6@ffB5T9dh#C&#R<P^K4>40yM%t_9%Fie67=zNrk~2J6U~za8bjhmeA_vi
z(kfS|2y-lXY9cu$P5oM-weWSPoc-h*Myn$+9?d^o9b$e+km9<&EDv#9^z6*^Zs>Ft
zp30P_sM9C2>SSH1>e&4<suE=WIGc>^CEB0zO5ts;I_2&Xd&KB4*Zlm1X}T_!g?d3>
z2>ynmQ<-k@WosOMBpcXCB^Ag}p02^N%KR*DJal-OJp|vL>D<8JKHTtj++Que95u6>
zqCsz|kkFUtL%gUVk}3?9x4b_J*Bv^HID%hT!RI)d=bSpIV<&&98~Cobp30Q`CePPc
zJ#Fq)&F+|~>6c`%8<}uye#shfFbwCJvMW{wc)H{l%n7W(X)8G}P*GU$@HD((R^s-O
zg%zBSk*s|+uIoPz4_qCO>k`tMNh>C8h-b!<t(y~_2i^$Yz-z$U1zuOp)b!?2)DU<z
zOHWOzKfQDr_&kiVQ{`V0!q+9f%iHKxek1TM%AW|Xc4-Gb09@;pZx`=tk&OA&3tsKA
z$-iT72oLwK1YhsY(;f%DaQP{}zZpDve@W^S^iS<6zfT+7o$Ge_O9WprdHLzfz?&}v
z?+oE;Gv5wL{eEu<uT8)`zpFfZf!9*M$?_iuUISd~rKj)Z0_92lDYmmo@~fXpLikW3
z|3u@r7QDqPryiH0*9P9$W$;w59`JV5P2TQ%E(0IB4E$0ESDk#jcsWVs&-)}iEaguI
zUjn=@2cGP=M&P?9fs1B4@ZG?hc=qM{@t>sA3*H!b#R)ub2T|JI5botPyAS1oY@WU3
z7G#+EQ+8)`>go&w!tt1P1RENnQv*)(wIR;W|6?4E+GJrD{1rGgJbN0+yMQ;U9N_JM
zQ{RL}cppSE&R8Ef4cCP@n<mCN2+mG$Iz;CYaKid}I^q{Df-_?k{iA()mEo8!RaaO`
zrd%l(n8yyj?B;s8#ReXu{udig`MXJ-?o}cN?j9P`p;Ch8w<pszHr<MU!1dHue95_g
z&!?|qePDdgg2P33-@W>j(}Db@;TkV*chx3z+}exVKgC|LCR&$5U0=lOpp}eueU0Fc
zP>+k?_o*HqHrmd%qW#k8f5pdCh0Y%#KR3wT;y#}5q^1?)dup0!<{RJ*#5=#;=!ZOG
zO>$?Bxt@YIjW?oGPw7zC{uyh*?eHtqmG)|NdeBH1HLndsxW{t!plX+H@-Df9b;RYh
z_1OCnI{Rlup<LFbKT%nG!5?Xc2Xy$>H_^E<E?jvE+==W}Y4R?)jq@dUGKNxo^Mgn&
zxSztGiNBV%*Mtwk+{QhzdM0Pq3O}?Zs60|F6*x51H#M7(;qEz=8E|#5ag}v$_i;(P
zgx`npaDs-8cSYx2ykIVEF>zv;-5v?r4g4Lao=fgKm1$8uM}DC(IKGVF249H2IP`o$
zQhidgvdAWq;aIevEV&(7{=rk3Ug^5G#dOWrAYto>&N7#)h~RIW!2?!5HmR8mv=Mr}
z51-2H6}=TkFSh@g=poID1aE0V>`05*0>%0sz>;ou6lR~t(4I96&Em&SWp;_?zyF)Q
z{Wa6vKLJhk`^9ebjZd6%@ybJbHM6^ZH9627D=i0oQ+US$nyRk0<FEY=&H#S!RA#H{
zcBj?N^gU4=H+Q276Ir8G9iXA)2=tP_YdQM+4>PCLukW<{9qxR*PH2?ttj1%BOm;%P
z{F&+7W|ZmFJRy>uw527^6VAbDlaq)$W>OgHq04m6{yKk(o*NVghbkkQT%?GGK6<5&
zYOm&I;<EnXsmvJTJN3PPjmDpyDCS-o>D9uuQ>xJLF>#v=G{hgbK8+mnk(fX3Agv$T
z9i;Wihrh*W_qp>oc6w0VU@_60lbn<-1y|*BWoVB2W>Vk%g7@U3lfiML)BWrU9XhJ{
zPEpgEljcms&ObYqX`4kIZn8Rb<XaFzqQG_Ip5aACaJA;Nfj{;cct*+kTMWOSyAW76
zqLl}oMN^i}f^2!k{PmIdz&9LUk-CaL&xwUM51g%A9FCqD@3saed4k=*_d{bMxV~o~
zgda%c_dKotbvkIr<IdQM|HU^?`Ezkr-feWGMykq~4}9LPQ&}->w4DjA^{Gbrf!DkB
zFQM<VRnV4`72ATwDV2L#{g%svtxOJW<~Ot*y3H@1^1ftNuMdaiI-Pq>sIy*HsP8@i
ze&hdQ4@-Qv*X8=NX)IZ0AJe$b+lKB5eAoiDGkb8>(!X>|@c5D1X!U2o4xL@ydFEwy
zpZZ#|)<9>^?o-~sGv+Jo0&6h|etL>?_s@33{xS37a?wKM(N&JcMRpf1Lv?nGUT8Oc
zhq<TvCiK5I$H#T@N&xK#Z~k{9IcA~P6F-r_Q@dOMZ_XapKKLfBr8zcA+nX^(qb6p1
z4nw{<2U<6N7d=B`eeaZyf5^Rg=!mb6`AyYjEjXj#%n#eu#|FP4Q5W%$9m4zmsZ688
zv%Nb#dw7O#=O*s77c&+vnq_RhTl0yqvRvEn*8J+imG*0E)P87P>ObZE8gs{BmAvU(
zh!*Tx$pGRO^r%d(x~9XN^DJ`f52CT`_4nNcKDcgKq4(g_(H<M8HRRd(!>H^yk6lBe
zndCnK6%2XSgP*?t6@Sh;9xvv0EOvky@Cex^3G}fL8W%agG3!UC?A(6prGJk2(r5*0
zRInBzlewZThSM139wg5N^80ng$#PY=6Ki6W+b%Ubud>kFwA7#Td+<rw%lLNrI?zEn
zBSb^op~9;Nuk9~RWp=Y4LO*dg^sUhn+5~7lc(eWrnI`4%+`N-Y)6QyMzcqhLa4)^2
zs(T;kXzIE96FG>fX+mEv6ZXya#$~^ided4kL>c?`v!*A;77A0jteJ1|1O5TrCjREF
zf*=1eb&{XJh6`%X;e@Wvd`P31mhO@$T}92AucYcYI50GLUCz9*ZN|n)>!)e|m)ZZ^
z+=DOnx;Gc!^wtEc*{W~2k8yPf9g6DoHmg&A;%usM{maDvOILPBju!hmZJog?Vz5Xg
zxXtv|7?)rM3c2J`KLqqN)$A?yMtRcJ=nTj9LG}XLEp_DQY6tp}de(<?+-@|f(8VXU
z#;=u0H7mKLEMyA{??4Z%OAZSw`0wzcv|R+G3@bba<*1K3K0{pCpPb6<aD61*Xre*Z
z$I3|I@+VtC`zx#~YL7dtZaOpU<B(W@rz)@Pt1`R!LsGKunpTIaWmZpd*f^<}&+!Xr
zK=VgN6o5MB7XCP%Z_#t`qsLEqyJ0+cZLLplNolzc1&*@9gtr`A;}X8J?|%55e`F5Q
z0I47S%-Yw!K-DduJ(gO&X;yhRcP5!mGT}@RJos|i!7_gk4*!AL*{y75gG21XWSi`3
zYWRSH>+&s>$<k?c!7FMIf|)4X30lo6eu$kCJf-A19?tN<2M0glcNxE11o#;bI{p`|
zGCBl7d4#t$q<)28S}WkbbfZ(Q!-Miw;7A}R2*-bh4inzRxj}xGK`dQ(`?NYmV5v3A
zlz2ZcVU!i{)c#a+Ek8~c8hZd6-|J6j*8Vo__ei4s)BqK762Wz1>-5Um{nLD>qS!^R
zd*?Vy3v?YXuDz({L1fnQ)6R#y&c;^Kc4#qeO@uKCSQCyDvpIuG`#}+ZYd;IWwCr?b
z-`GRi4(QJ%ZLh}e&#m4`+f=n?t2x2j9XV!`DVUbe3}cxa8eF04BivG$eIKD0Q=}>9
zIxUB73xi)5mTS@(5ghQNM~OOk^4lR4k6EpIN??oaw7a=?h(V_AZTzik<(ukHXNF~4
zb?q)6d+*@1QqsM4F0PqRE{L!K+wkv}nQYCmqjknuJaFvj?Rr>d>rTB^A&>~ZwM@UY
zmWq)VKQGE1rrgdov?Uu%sv@VqZN^)FSIi!srWu5Hi&O7=3An6qt@#RF%LpoHPs#5F
zUA~4!wNgHifAkomOz(Pq%3edi9}=FLR;PGE*H5d{JYvAqo6k+5VgQK_Kg0*Z!JaeY
zjzqA-%`J_Crq9F2e=r^g+9TV-G|3T6T;pkV%tU5X&zsHz)C1lKc}2(LdAR880X_h{
zDFL5Ie|Q|cq7R*(P=6>osa^-a9GwN=)l5OBHiY*i>f=sLqzmmnSkmqL!P^6!?GxZ7
z_5MBJEoz^*-fEvcQ@~ZuPzcwa=G)KnG+rhUozxdtk10p{EqJD{^L{*~B$WU^0Q|Uv
zyY*g!9jV3wo^g}2)H;U_YaLGLbTl={qcYY(qy59DGh0Ptr7I)pYqJ6PCE(f<eI3kH
zk6X0#1xnuuPU^|i&M&(n)Io}6LeeyC70TRj+p#i-z+VUcsAyj2%2a%It$4*GT>`%7
zsngy*W8ZDkE>62DQ#i$6WbT2}!ZY=X`C1Na3P<gn24_DwI~`7}8zrPNepRLm(E8B=
z-rA1SnHttVXm#a(`VF6Xefg%M?yJ(9XFq-AmRVa1pPkV&z2=$MZJQZ9Lqt9XgEz~o
zWxMi)>ruDOeCBmR7m)zle5Df7nDX_@Vp$<F#`7Mh-1#5n8yrt+x+BvpB)mb0ypZ6v
z%S=~1?|ItqV~h*On<QdJHATE^e4^U<rPh<D_fJlHIXZ4HWAE;ZcyW!1c5rJxetJR~
zz8Lrb=QafI;5qg2v%I)I^g3{@AN?v1oKVj?PWMR+jA&3KgJ!KI?<Ml?*vNR&_xZC_
z-rdF|c5|``qz3eyleAcJPm13;3!l8@0a6+hYhmbyK5;th?1BsNT2V;sNRz*X*8$#f
z@V2`)j>k?5g@lT-Qt)<w*Z4{HW`_sgEOWe!#paWtz06p1v&K&lYkna#MxjyDbviRQ
z?9UuopIP*1mcB;yEB+GaCO&mKGr}`NFmY!UH}i(RSEAkdIC3m_n%}8^7!^-v^U2NO
z=v#D0FSEwA(QfiIHN9f<FZInh54M8ne6eT`gE#-rPP=o<pN#QxXh-Lk7m-J2IChd}
zpXzg~<#A(ie5~F(!YOKc=34SCqE4l3`l)LyU!twe4j^8^^BjZ&%VvNo3hiFMc>kyT
z`TVVKqMxZxqv|tsI%=PZe4Kj0owF&#?VlXC3tIhOMveyeVu}|RV@v#qDZIst)XN5B
z*BgEq#^>-M)JsTfPMfj9kM)4li-!(J3->a;t@OZK_156uEXaDK*uP$|<toCWwNnMn
z>xLJw3vP+l0Nda1VF+m56}%02<JQv_N0~Ys-0RZRciq4{ww?C&41@c)4Bign{UIwt
zy2a$%uYAu$bHw@OCG;|)JqAwqv*CQZ-R&W^=icC+O~<&@J^Pr`P2_9-Ap27fYbfoU
zT5?ML=XqDny*O5rIkH$Bqu?V$gY7wju(^9L!zo;BWku*QSIH^CC6uv`GE$#Co!KZ|
z`p-|Q4Ef!7{?eqYYG*0IO(olbzLos@ce20qp7uI8x0Yys)B<Lkb77gzY^;GDhK~wU
zvR<|X1c(w-?7?_vGj61fVtJ@If;j756thr!a_LtX*I#gJH1&<=d~EBZN!^@R-?xIl
z=!>T_b9nZBZ*9)2;9VhnZUXLYy;=+ULilkp<zYWvuQR7%d@UIZq{ETwNaIa;j;oG4
z*q_}xZ|gvF2w(2<TAKF>(7HGGtBlbvPrZI?UYCN`3|=44iSIW}nf3}A5?za116sfx
z0e5dU?mDWHb!J2Duoc{mFEEyc8^((EcIGrm`<fLemv+~996q736535<GAWnwB<({5
zS19aN@G`~3Yn9rj6gowBqL2C7>C8c`ce{;_vn^><$LEY}RNLiR$&HWvHT<Q&MjL$N
zw7Vxaw993mPj~yM+Bcc~=A8FhXmvqr-mZw}i0fi|o%3XKi*Hb>4@%Oj%X)Wqn=!sG
z{o-k7x4F{3FFsRYvXjNCmgHj5u%#2rZY3xCH9yJz_N~*I-SR^m{3o@y(Xn9K61hb|
z(pSaoK6y3XX=;mt@1%(MIRI|xZzXk}6S)h1S4TFM8rp+L226rO@Y7k0!aDb(wjH9}
z1^?%Crun^;dsEy$)w2&=r7p^K7b|!?z*+~>obwT-(7JRNZ83e+`OsxX+?a{impI^q
z>#i^6tX<aEEl=SKP&k^oFpK*9U!!p#JZG-zRQvkGDuSV$9nwsPHrLy~&V2Zl(M%h4
z^J{@SPg`lRU3!4m%pLXox$OheCTV^r*Nna3Z2+%0LC3EdnoGw+_+rQRB<Q&PDD@5W
zeQz9{{QeK%!*7}#o(5h#Z*q7u@TRv+4)0X?Z=JmUy_bRSy$t;LW#FlAPF;RU2ro^v
zpFj7k_Duutf7|5W*9<)GS0{&e0x$iw$>F`gJKjEd`|Q08{P<<ysa=!P*IrN(!q+9n
z*F@v67QFr`>e&*)VZ)>G?&!GtiZ%kTdB<p^Gb;jZJ89{hv|Xev&Pm%x+Jc<4A=2jO
zq>Yg_FOjDHOTCExgS29v{X9(0pOVYK)0craUk2WJ8F=qy;CrWl*Yiomo$mYQ(C(=d
z$F=UceMO6vDKxpEs8%Y!n-0EANMGZuByi`r3rXavg7HzCE&didk(@S5u1RaBfNM;x
z58*p__HFL$P}%XQwu4vy>y!6Qe+U<E>*@Hu(|$S(yqWx{f&_QpEeR&}Z80}^b3!p+
zc+M?;5GVG*Wm1}E`L~GgX!#?2_I_hDb3kqR+&`!-C*?CMWQYoGamv?-qjWsOF6h+$
z=BW7#rEW4hPOl{X*3SP*LnSdvoJyHVG5FowXs6F<Xb;gInfFoF=idrxUH#vqRST`Q
z1tG1M{$AhrU#{0yXw7(MNb4j2by}r-;*Q<$d+!>}>~;M(QJbg5+m~CL-!QJt)pw)N
znD^VG7DH?5?{e1|(B8yaQE2nHy+voyx2em!|NC^>p)-Hce~(Tv^~u|S9_PKIPEYi<
zpN`WLX}*q7R_b>~C-mFYd`v@Q0q}!7r(PXqa5`DW;>d@3C-LGf;0=J+t?}Ovp4W-A
zZVJ}EygW1zaz|$c0pa1P=aZ)m1zPFiQHztF>aslb-Z!B;|K3QCqIz_Fhx0D)8_hKF
z?5_rLI@?%pB)MxJG#kMi<~g;>XnOsIxn7yaMW{bo49*C2XZ;>yk!L?=BRhGW?BvqM
zIzxH#!dcb7<h$@M*Iqu(hU#ArZad}3&ZjZvzZ2`XccE}+Wgo)F;Qga^PCWJHS8Yum
zuaDZAj|Y+Y@%hYJ)Ao|L^#h}hr~ioMtuK$vrZ>sV`sm?9#MpP%qIz$g6-ot1D1^Z8
zGX3iNQhV4R{$SMnXsNUDhhG0};o-Fefw!K&(udK_l#RN(C4R}u4t+%3u^7oFb{i9s
zI|<(@F+cb=%c)tPmg~f^tJLI2h;A8o!dOJqhkGcyvvSm8wWYrOirNg_RMt@_g!HZX
z59YL)*2s(Gy;L=t*(tvL&n)j)t{vUBLW}Au+a9L32{?DPSNajg-YWW7GUJboR@Bek
zgyHpiLDjhx+?MM{Exujq>kd~MjYvMkT&yen?96B6>rqzNOx~U3-M4x)(=L6;CoQk^
zAyRy52eZI&;oX8g`E}aA11u3MqguN$Qz^h5FCR2JAIc1;`F{DJ+4wAm?wmIEj~kdv
zipy}bm7_kDO<fXQB;wf}M@tp$S4J;vd6>UeQ(AI_-X7Y(9+gdP#Y~UPh4uDqCUqQ3
z;`HDN|BUqyD{lm<EWFM`@KVs_!CG_rsq36uM>8Yupsr&-u`v)^{|Oyim#~^QQd1uy
zKviBU*T!je*ICSf#|;>Ki1grb%-7$t(>#e-0E{kaFHqNVO&(bIc_=qd1w<UE)OW7q
zwnhEcV!xc}$|}5B2?fhBBHrmz$eG4y$PXrMXsonkjt{Of61r=oy6`US6_)V=8LRX}
zlrAC+^RPx3@;DNO!sYzW)h4?7gr7i0$a1w#ZB!VgT#Fr5Ss`II$%n&V&QG}*0$kUk
z<4z`guW&i-tJFwD?Q%#EO`sVe4Ts=KkO=#$TcI)kGfp)p);<QG^%2%2o>MpF&WZT=
zzV?t#a2Ixtx;PhQhRZyb+ehU4{z$?NCQs|?j(*nQKOzs$%zL-iYhe@97_Rf;0f(X8
z175rKr@&~-rzCfgcs!}-7tQo1nFAjk%{0okeZt07f=AY>RxkNp^RD^X;E};#gmRP0
z7c;cP2^EF+OTkI}&p1u{aO)4yH+^E%oy7_70`Yf83f=`g^{2>!JbQaj65a=V@f7d_
zz}u#Pj{)B`1-$5ooG+dNz7Y7LPflFFKB~O2i}Hc5)mpM+$o4f`vDA7N0m5~bd4Aj7
zedd4E5PFQ5%YmGgmg^+L9WK@OlN&hjr?j>F&eTIWONxGL3M=fl+If>V*aZoZn^x<g
z!`HF*uvU4^jQX<7kd_`kWMeD!qx`($ZpMt-Jj)(m5&D)cHQ&;8pCWD<c*Po9g?!s%
zjz==RWO%=}KR={7u@(Gvn@8=eNor&;pZKPxA9i|H+&rbq;h*|_19jK~?i?kAbx6un
zJ1zs?7sBT{zQgwLq>f@l@TW(;?aSca4_M{TfU(}QWpX)d{uFS{&zcaPY(vLGR2QQA
zi|l=^;LX`O>h4bo$NvhZk``I?mr;9c1+N>t$=YK#@QqWz2QCA@I0anaGxskX{dGM1
z{+LMTQ3~FE>QS7)^YW+YG==b{1biYNjSb+XwoOiFM+m<hode)4nS#z(2)`Vix&NDa
zJO!OLHe<nC_^#BOkLKqsb9|$X|4?7A@9zO`ug9A{F`o8>z2MDw#_{K=pATr=h}U?@
z>TcP%*FCUalSgMbc9LgAb@-9xiS5S{pIx36n^UU~F-Psq-B-9dr5&M+&@dYNslP<r
zd3IviNbnNi9aF&5z;{dmZw7t<cn`Gj!?5r2_YO;z>HaX~_l&xGtTRV!&GhcI-TB->
z?-@#P8~NJ{{>4v^X8Oc`{><=)Lpxb?z{<?`a+%Y8Y1bw=G+bJ}EmNGQcu}xw{hem&
zi;^eNxojVGcl_*ze!0caa2s@5n{LpMbj(~rp0(te_qkDbr|DL!Q$Kae+SKvp^xnK&
z$`(J1Pu{Q({`~W!<85~))pLQO*Pr+fbk|E7@3EJ>{a;}3rac%pI){Nn`ct7Sy54?u
zj=mW1f-Q;(gRH}IDrNPwwa_BDk|vz`B+l`}>W?fOjfus7<>)l=oENTRe*Mz-bVFm&
z4*FDm)N3?6A0lI7W$3np9n(B^ym)86gWb?R_~lp+s=Z_fY5Pda)B0ZRbWT=Y_}nBr
z9w622Ah<m*xP1pX-o~5vzY>phL3Ibdn`ipg^gG_^-=edarIpa>kv!tgysX>G{<o8P
zqHj8QNbRyc<gKD_vdCyTk-*nd%=!*wx38i%Q{K;7UN6gtGcZ}kI~EXh&NEG}U6x4#
zykTh2TaD}VE~~Md4?4q<_w~_CDh2Hujkd;K_CXHQ3*DUMQQn{LPZ_Az!oO?a2<HX2
z<_Fc>;i??gA0;p0W3wx}KNgd=wd|El6Lp{+yxmt@dzLLzW1;O2bv9<yVwb1>`e3r%
zGz`KR9$WLD%#mBw??Zgs-fywas@=Y6c@HqYo$vjcSgBA1?tbc&`gUATl|4*aJ@xG2
znR?p#80kH@Q%^iV=rfjd4>BFay#0*1-J|}DTy|dCN%ss)lviuoTJr9uE*+DUd)*Os
zNvCcx+y4geXMAVW`vk`8xCL0`-nr{gA{>#ogO+g@Kg%ueZqDu_|2p!AXIgB&2KRy<
z>Mq1bjDj;<`ieUn6z)-K<5JE<H0>G9EMgd?9(-B-L(Cc<V=0c+qc&dnH|%?V9=EaP
zTbi_Wq&4zPUMt(*XI@NFGw@#ETOE9%ozHFvmnYIxhYjG&``)PcF-*kdi1lMj3Cb?q
zUEm%B_mZR6WWM=!iCs&yRV)X0Bk*}Wl>L2VdpN7q3;##o=I_Uml4F?{YQz;=q?TYi
zsv~DS^}3plNl(^Q%FUnSO7u-({h`Bli*~`PeBO2H)RKe0=0$wE`_7%z=fdBxE>gGD
z9af*XujM2YcItZI1K{rXF=I$FS)JhyGq0upP~F{$XV2CLpRrgztB)PMKSw38RNoe?
zIeKil-R4_UXgZTRRQt+-)?uZ7xdGVH5fzFld+y)r+yy!wo@p~%Ls2X)v*}GzCx7cd
z&HMmoz2deH|DDb2#2w`(gV@2vr7FO5VFe%0mv6I9BU13-P}Y?K+Y8hi{)1F&eWt#*
z%x6MRpu?Gvb4N<-3~%0N*#BN-J%2m(IAQgO{RV7hjl?0W^C=PKV$+GN<je)Ws|3CM
z!h$oI8T47|AFSQw>*M`!s=S}Kd2)X&XRRi`c(ZQmbYbQh7t80g(TMpud?Do*93B#V
zD1OxKaA7Jm_VCw7U0P<H$&}8bE<bW(AgG8mKGkwPh>m+G=(yAp!FOq34t!+oBD065
zI_?qNVOfGosW>2UBWDq;n}}e^O|oHXuupHOf6$hIgaZ?&L_BP%-l{!}x@-OIc@Dpc
zUpeFU%&%GfL!D)`Wx`8EY*Da=<7_%puC=CzuDtk0`hjQt(^wpZ-UZSIv>*Jj(L?tr
zHcNaN!4RL$zadF4K2PN0A1v68Ts7~Eivw{N`KzO`-CbZOqfFlwD!$x#xF+(9lBbRG
zQ@>|r#(k*`#Ld|#kG{K`JPY1(#(aWPvvcxLP1Cl!e4-F_y7C?%Z;#J=*v4~Q-V}Mo
z+syhb^5t94*nL{5&yY8abBZxS;;5bbdeDB;vx_$cTIFp`O_T2u`Rt7OgKiGRdjK14
z=<BI|S;Q96^=omzY#^<Z{GFs-&{|Mu`NtA-#(YbvHDRvTDa6`=BP(^B!>_PoSv<MW
zG}}0OieC&&I@)s!97~`)<I@T{@^z~`gzn(*n=o$VUB4E0_#pKgTM*Ze>KR`+O8Q08
z=Zl97_bF#{Z8pEeS+Ey*?>v*ehkncn<!i~Z0QlU6XS{E7ylz`4vMQK~BZz-)Q)df}
znJZ((j=*A%g9(z?1?>&c-T>`p#x->t<9wm4&0-17_iB}$NHM*S*%VgF!pF9wm9#qX
zEN?waMkgEkc|vTmbyY{y4BN#c7x{2qt)Uw8U?tbSo4M=SD{-E5xw>eTjIwrg^actY
zII@D3(BBAIVLqYiA?S$KI%qY%hjnZ`E%n<fJN}|ftIg`X(pW*q{W@AgfR5JIUC^pu
zbS6{lXeDevwVQ)G4lVbiDm46Pb*MtQjh>AE$`u*a`E*@^PQ!cY&yY^E!gKgnOTke$
zKixg{`j%Gh=<Y6|5R{u>tN{8p^kzAzYG)2KFQoo$h(mq9<MsyTr}h@VfLV}ZLMB90
zLw2WP{&tXO$>KAP$BO54cRs<6RTr%r`@vZc&U*Jf;uZX!WfpatI~=RUp*_oabUt}!
zAPVkz-x=?l*caH@fAg@uEt>q`sr?s$+wgm5EDj4}Rp$>SYe;Y~Uf!lddloZ)L)IHK
zRNr>!?0Y}+F&y*InYh09WY<@1D6xFk2hR92;l2)<bAC47o)j&`laG>T{qLVKJ~ym)
zmVDlvX!c_8=b=*B@CU4EJcHj)n;=&=M)I_1mV(n<dd8n)Ry`7Zc~4SJkSF|B@Egj`
zWE$KzcNADVdnaYu8$J5VWrYvPdRzkjcJMnZ&UiV(_5pXMD2`PtynWyefw$ZBz2SLZ
zX{nDS1_*Bqytc|Sc2^hQWW2gmMLO^7^|7kweCz>T;9+Lw&Ln0?!j_9praU<&wu0aJ
zJmpuN$sCvg{#k@B*0AuNMx9Dbi%&^=M#ao1gOQ!i?=8WD;$3dTZpJTX%4FohnxpfN
z^>7`rN29F^(4XwUr%rTYb9#)QV(M1B1DpDySDen{e(IJJZ(=(*X>dkY!dF~L{a0B1
zV?WX4naW}F@`UnD+oqLcrut(JzAc^IY95zP%@hXRzGAZ4kvG`w&d|}0WGAHRU%Fo=
zrY>M51c_P0g0yZ%HT#tMWaqK`yyC`ateMR1`j}G(VITW5RqE>@@QZFf<8;kQeWIM7
z-2!G~GKFfs3%pkH&~ILr@6K0Lm2jbR4~`#7e+qpb_^6QcQuqF~`nsty8ul@-&@MCk
zip_!Ot|w2^t?(s``_yvF<JwmP!!A^HXI5pldz4~5>#A`}jPu4pj6jLB*{$PSS4?ru
zVEWlq&7eCgJ(sf)Gj2QM^bTVveF)QNv1Kad5S><tmvr})n`WmK4yNkq!p*aEZ5j)8
zIcvN{D$>bfWs*;I^2T80w+n^ilRtw)x)rG---Gz(z5Ml1hgo+pFMgTtev~?de#7?3
z`gZ&5^z1&Y%Fcl}Xx0GX_R-)x4-EW!!_k%e{JyD1*LCE*iM)sa!8v|WZtCPRQz`gM
zemUzbApxl78CF!CJqD=r$klcP8PILKxSLMh{=Ik;^7#{IoL%cz>^u6{U*J*9o*sG9
zRY+_z@f4vsXU1wTGnwWE<f|tcZy%sdUKh6s2bQ_SwYyNw;tnjYBL4f98Py33Ez)(u
zM9sttIWC2#WUM48Bo`YE4M*_?6CfcGxqWLfDtIAqHsA4~>zA1?wobPyBz&Rv%5*n+
zl<&aHXe<x8@gHC1^ucIpl)Tak?u9*P>@M=u0f%c6yxPemcynwwhlaMCaj&xa$e;e+
z8K>j_lI2gF!HQ!_2zUQ0@TcF;-YZNjs+OnAD!ZRU(|I1a7r|`-S9&3u&GrEVn8^M#
z7uOcSTM}>|D^K|s1K$n2H~~-E>(+*F;d=T>_<G>GrpUi_3b@v`-633jxu@^;F^+hL
z-yytV@Qzc?RCuc6jA6!iKRjiEUNXkyeBd>}#kctK{8?J%uL0f!e4_7FJ=Otl1ir!L
zkL5WZNd*rh@ip6@h7SX;S!?S{`)qBE%?MQza+78Rlil`0d-MlRKBaDs_U52cK_{+r
zmILe8M(B@$yXc4TK#u?D4}JF|e;N}u>LqMEi7%{Ma@=-{wm3&Sqj6mS^1<s(G~txI
z_Ne-wB7g2Z<Mi|hLB<(M%WF#4Yqtc~AK~^KCkLrrI>0{;eiP4=`MX(vZ-Eb5@QSk~
zAI6~Mzf&y|o+{KFH~_ta;D!C@_cCpZS$gRu;9dfEA7%HbY+qM#keu6fcbwcvHn*v3
zA7ZKTFL}jeS>K2M;$NI`e8qLtDTl8RP7gR;)JNZtdiQu7&98oNQqUPypTEJr&H0?l
zP_@)9GmYjhY?wD+iCKPPORC{W9im0JQ9Gz0sF!W)&c?ShjtjqzJ@0?R7ij%@0Yj(v
zaTR5=ecUH$r)uB`C*!=x8Wk&X&5GU@Tz7Qk01==hcT4wB`wz6|HLj0*|3q=%WIT4X
zlJ143)9EDN_I>cAe1FsrW*|~$G;9ePj_BBSlskH6&ZykI<nR5fGycA=cy3i~4(bl+
z)U8?~TW7BRxJ14ge;vuUmQR-&sITQesb9@W#e16n68*z->M0D!;n*`%p!w|RwxO`0
z*yJ>}y1&7kB+rQQ++um+xnNhuuGkW+IijP)(RcYr&7-Zy(NpaYWyD+EoaTTlY`S~C
zR`#y7?pbvlppGR!K9iX%zmtD~GlM6KMG-2=;VqO*PND{1c`i}LjF+Q!x4B~H-{Z5#
z>NUp!g0Hntwt~3_kwZ0BKWF8{W7VWg)7V%9m@ojN`A&9$zvG+u?i@Ok>3u7CpRl~f
z14g`%w6pLXcRzCl7r$(ovEtd3+`8DF59K3MhkI~Myyx4F-#2O87f1ztZeMr4XpQ2o
zlYGHL3ih$=+0+UZ$BmAxPQ-2DcxDo*;9Y2&&^qU4E|_lV_z21$P86O9nFu|H0W=I)
zg?380#X%$~2RC}YV&KSfWxCcgfdrd3MkS==I71hB!`P4tlOODnK%B15GYz@0I$6Rx
z6DSPtW)TeC<g8XE%P)D6eeGw+xQabkVSOTf1S`Ak1m@Hl87ED1zHJ;^*Uq?Di!I<%
z{#kcE_8y}X@`vu=Uc~O0N~_9rSf3alJZjb8P=n`l-L}&=Zrkxjfd|5yC(H(r`W9!&
zt~i@%_#b@78z{frozJV8Jv`m>l*xu+Y!rMUe_T8qi-vQN?`eSE=)2Emj$aMEM{WN0
zA=|@8R(Wz<kmPPty2I<d3qGCC1sT)ouu>#F4*I54ythhiev2m&{8X>Ed!71Py)E-V
z)3-PHw|l*c{s#Ym-3oCz%v+Ouc~UPcd`?WqXzD|}6?#F$GPS?y>Pntt53M|#>6pQ{
zU&ptXhv!Db09X{D%Gn1}-de5hxPL-xN-6Ew^S@YQR-Se1QkS)3=<BGBJNAowYICsq
z5O*8Z918A%b&=SZK2)<g(E2_Mjp6IgX6oe!T<>U@+Qi3r4*o>`_SG{t;UHQquY0HO
z9Xd(btItl#lU)koL&}h)4^9`}n&2TzPGMhyP7=@gLZu7sd_Y)UEqLqKoXz5iy)V=}
za9S<{-x$J$>+6%`nRkZpkhd|OJ;|f)2i{Bha})WK<&OgI$$=;7&pM4wANXYDF9_j9
zZl88`-f*8(o?74=)}Ea-&U_2-^*5ZIG|v1+!Ec<r{dQgkzJCh1_WRKgt}*4?*IhMa
zEQ#^R!kYsl)<r$0!qfLI0dEI*a}xA?dlr+{7{a?9yx8JI-W1!tRaOT$B{!XQ=e)x)
z=<DR=G2!h1Z^3K8I{@Ay@P=HO)<@39kv*m_f;XCjH_@0bKEs%5oV-s;r+^nzho%s|
z)z!zf!7Xtc2&WUA;+xNU|A28gYU>@~^njBb+rF&@-xtCs>I?BxBO&|}&-A_VVv!#R
zEaq*o>BjcOhCRr?w@{w=oPX#SKb7F$jB68n7@xU%VBC=_TT6SOlfLz=`H-ZZGdfe8
zC-dj79>_g*Wqj@kv`U)JnvOoTCZ|sJF=_ei+ypb>SxJ)*i~k&Z1NqkT>8ZC{J}(z_
z=gS#0<nY83)`EKp+?~Rmo`W0vA+kIw6TC5h9pve_?X2BzmOAqNh(CtwH1&hz^3cH9
z6h2wL-Q=5bdzkO@uPt9O<&BZAi+r6trye9<cs`4eOg4vwGv|BQ0Kt*GovMp*{QVr7
zQ<u)6i@)RSxU)*haK{>3C1d!vG@s3m<r9`Acp7*saJ2>YWSev52g<A9&A>Y+ffobs
zr>@(9Yh6!0&r6nGzRY4(9VdC8$JsO<X9;;{@R|K@eZ}1``;_5ik8}K;6qaKmpQSYU
z74K;`WiZV0QZ;dYi%4pb;1wOg%Q-}!-4Zk%8K}~4`p5u2N?VbWpwkSUg?F7bTUF|f
zM#sk6M6qtVz-{)p|4zq-`sZ9+wd2n7$R6)_C2L*wX9HC3e&Fk&)yA`@gGI%(*vVKN
z9e@`xwD*I%NAl7ZD>vy|69xP?#oUu}I0;@lb`%CH$=D4~%A4M55&Q@_Z(KAdRP3&-
z6$<}{-jDJ%{@Q=W_-{Gu?MwJEIG?NBxW>KU4ZjAw{ow7spK;{&=ZIc67ub2xPix@?
z@P-~>9dUR~@!2^uKQ<-IV9wt6CB}Cv`+7=k#psZp+sO#x2u(b&b~5E}1t;D<KkoJ=
zjn5rFK>lkxYw@;Hj~JcOShr>OTYV@|Ha9VO2Z2HxS37?WfAQ#9A9pz+-&Svy&D4LR
z#_|BTEsvee<T*W8BGy`k0;p9e*qTL5D_0CP^OTFV)mqu1v7Nt0&U=)sXH30;Z-4c>
z`gYm)Bp*rVT`BH&g%n`c!D+N@$Bxzx4n>hFBiAwYyO&(5bj%}o#_bq7n^9PBO@Sg$
za!$#VY0)u|hX;-juo9YOYH81M-z>ifJOilTI{prRnU4IEvzal))jVQ#RR4Hes`*~X
z?E6D$b#7GX=c94Uu8LnO3YSWk!}Y7T=@%c+dzFJ|(`!t}Q$txTKVmKGLe5fIo2)D^
z=S9*%GD-`sR;$JdjL<3Kul=7nWAOCZ$iGKpbNdVIC8Q1ToVwfS$NC&Ll;pWqt(OPD
zpTFg7X0gWRO2gMY*4aIo5$x<<*0r-z3Vb`OMm_{;UJLY!ccQ<1_H5?BEa+Y1zAq?O
zf3MW{C7siP<&t6xN|5<*W=XCK2z)uXzUK?xnm;&X(l2GL<*$qK+Mb91Q~eiOd1Hyb
zvrChc6QNE$LVT9sPBZ{=G-wKc(J>q~mzc81Phu3>H81cj((}F1Xiuc8xmjC6q^o%<
z>&<jNi@t)r?<@4V>Ui-xngh%|nf#@svvuFXF9t7UTlw4hz8=K2k*_m0HGfXHyf%B(
zLW!6@T+XQ((%`O|@Xe`-c)h!m_XqAy-tacw!h-pM-C}^d%1zv@yi^VR=%D+(WpKzW
zP}?bg9_r2Jy^JRq!_>c6`LWK)#s8Uoz)ZR;?KEJhwvl>ZL1by-+@dL+G_Q?UB8%4o
zcqM=YXfrd_1<N&&IZ)t1BKA7FRT)7$rxeYD&Wr5-1KIQ7AocDhZHe0a=T`5o$nUv3
z|KVssC%^c%0pdk%A3B?<k&Nu{6YJx6w-W7_mne7Ft8T8*r^I*kt_wJsapjy}Pc`os
ze+~P_@Yzg>?#B6s)yMnMYEC#yme!=$0N9>2%fdCa7+P)rivP|@$L~;X%!}gCujbWW
zzZIPI;0PZa<EfIe?CvSx)*c~zvD@Qp4N1>FP$aE`oCH5KbM`{y2hYsdemv{nIJ<tz
z@#@$jtjvd*4yrmv3*#+Sw?*J}oMucr+J@(3Cl|-10eJnHxIfj$>qtxIq_vZ_I47-(
zv_&~-y`;_0N!v}@yqvWCq|HsFsjkDM%_6Os=ZV@e?-x_Ui!TE&y$rnRGVqQm;AyHn
zgn3x?hh4+pbGOzWCx@AxMl7cbWa2~^bC!q4#pPOSnoD##t-og9I_r3zRE5#Wk;7!o
z(=w>uHkY%<W#Fh|lQvooV6<AHb?ID4>lY}ey!}MGr0Kw4JFPv?YC9j&`sRO+){K|%
zZ~WO=7q|Yt*Gj8l!f$MV*7^%!z25#>X-(W-+o3h~&mpZr6s!M@_8Ns&+rNb0xaqah
z8vl*rH7@--w)u-^EiQ+j8`=!z3+3;Iak`Uo^PO7oAH@Fn*KGZkZurrNk)=?-CD3gE
zZ`Z$tdam2u`sVFQUT2~8w;jA4zo2{x1oaNj)|ucr_Yyi}tpmIR+>QT%%qv{qezMn9
z%RYEFBR+ILE-SoWECSa-cn3r`3*hE(4E4q^3!o+d$Dfk+L|c33WY8DnpYySpv*cN|
z+aln5fbZfN_n3G-8b83n7z|aRjA`p?Gx(*!xor8_+AEG}qBXk*TZHgh#jkvKmyMIy
zhQ%I6wAE-+0$=;mrN3cbr_N=X%gFO}%M<(lOZlJV*u*3hOe>g3S-luq^B7J&mFL|3
za+Qg(r4}+y%xqh-j>Y^E`P7#+2paRM&zbB^|HM3NJ)Rf7Z@}y2ukXj~?cgraxsEYD
zI*ui(9n_9Ym`o8LbO`>z++uO}wG$K0G;&~4@lyd^&3<IkM08vtEr|nJLQca(#1KY>
zFqTIcclm=B(q$}Q+RtBk&c)E(X!VT0ONwVVvh2(kL&;<&<!dJ2Zu0f>oVv^M#e2LC
zJG*=d&j;6rvK5rpopU@)spac%JP+}7I4S5O$Y=~+;CxEsb&OGsmH9b!<9vmAyN61r
zdhkmQfZuQ~)A&a4uQB}C|12$LE^-Jm14^1u8sgjDPB_JhZl^u~&04mRb@!jk?2s%p
z&BjX?vSHC@t}55vVik(NDR;1I<yuxFPqXqXRuo)OtFsgNxFZD{%-gJN+KOqlxLi$J
ziQp*C*Y$2!FqzjG6hz0abO`F`Qf7KY!>&w|uUZz?-3rt@trjf&q{>v4GF7T9t3EA!
zQ}MU)Gk)Y;rdI8GXV?c$mejEqJ097R5X?;;sYVdd-j~*nDXBy++wf#{B8u#m5>?9d
zQ?Av?$tW5tU6fby=()^7mG?T=FY(bue@ry{?sN6$g};OUdHh_a`?tuah&Z8NUAek4
zj_YaRNvuOFT!#iV6ZfZhrCD5`z5cV=>z=!pz{QDN0K5};F}Rdx>!M%JmA^KG>v<x0
z3-Au|PX^xzynPD#J1+y@KLuR-(r5_pPSnrsOBScr_}e02bGU+jjC#xv9{-egK555E
zD^)_4elq*chI;TWfu}j@@se%W3VhDzpp)R8lW`ilfG_&|xk+Pj_5p9}og97u_^vNZ
z4j%)4;fvXQn3OAurcDiBco}&8W#FwLe4_SIJ9h!kd;XmFpR#q+^A`SB<7YQ`1K=r-
zZ)bmoTkrwkLzBRZfiF6Q{ReoO=hTmI%n19`_m$|b1!vZdbMD;J*T7kk81tcgB)ksr
znmpc?iSbIo+X3Eg@QTFCKV@acyo32%!8_co-PMa_s!jBgR}76&Xmoxltash`dJCuM
zF#L<hdH=*Xi@-VHaeiZBoVDPLd7P`q<ERfyxyY*M%jdj*{y2Sm?m6F9@SDKjPF~tP
z@%>L1Y)(ym&UXn}MyXRj`FnUyeexUXw|Gys$Y!e%e!@LA+vUmllrhSm_rf{n*IDEG
z)5c9z*tg+1dhs;#UKix8dkwg%SLYFUS#V8nR}j~0shkiS*ypH{NmlkVd!giTsT-<^
zr>U~`lD~APYnRj@4r-xZz@K68ao*MDW8m%rcO%cK?;CF12C#{e#lx-NXcrIQ2mh52
ze^ZQa8fO*Y_!09XDVoXp0xmm>`p3zL(ayJ4n^!A`<Ri^NHv260+KpYsThLnC1ij;5
zjn~qJr1eps0n!#rS2Nw}BOR(&zL>HGPB&71i_Q+{41GPD&PC`PAZ<kR>0kQPX4`Y=
z+?PXV3_6|PjOmm@dk%W}4$`_s=Ov@#Wn&A|W+JT=A<<NnR203~ch(eAzg;n1?d^@E
z9U!fPXFpCOf57C8tpvz%t;U!GwVQl%U(8<Hl56xX;PZeNJG!<Hdt3P&(hi1j)xpPQ
z(HOfV`vdvb>N_u@(4v36&80h^TOvdExMFY{j$uFe);VWu{U^h<wOGu*#<Apu_2A6<
zUwpH8mzNAD)Qd_vQRSUT5ycY9VaA2(wTrw1yOD`hmtB_Etp(W9l-oq9C$gH^#_}ln
z4u1QbJ3roG`E2Z4yXsPea4c)g49yDiHhd@U6OFwEgXp+OTc~oECdxH^imLoUi1_u_
zjp33j;ak3&O{WbyZKQ3`7{1znd)5%<a7*?WZh_9e@5OYqZtQ{1UeZQH=O0mGdOmKv
z_CEL&HA`xStxw6{@<YZhv{Elverpe#+X=};xbuf-bC0`ea$K!3iuY9eqjS!0|3ikG
z(5E6`d@vS8wFlPB4)V6|rCoXE8*EIvy)>3_O9Abq4!gjcm7>0XV061eeZQDy<F9SL
z1utfenwwy!xem<6z%I&a-^U(6AF93LF&wOn1~DLg$1u2~e|0Xi$LS4JmhU7<Nneb=
z!ufaB{sg_x--L42ODO)`nj&R?G%PJdNLyC*EFQoH@~-<^%92g>dCS{Rd9uYw6>g4m
zc9hBvHyKy1Gbh1!Cb*jrZ}adZh}WVg6zsR#DU}b0Hx$bIt+2`+YB77o!K;G2o`Z}t
z+Ss*^|77&qPv>K%h{t7X;#vJz`wHWF;GFaIJ%a%y_Vv{YXy>Qbfw#CQ$Xk5$T&9V+
z?{OG&+IkE}E2KS06`1{CC&smg=uVSt(0F966~okN!60&j)|uO^PKkBK%Sc(r9rKFG
zH}_Tcy`LcS@|^k~G6p%dlDC=bdzXMy15T50UT-*lJ>eJywd0@Gx@Pb?!0S{U&cC2`
zX{v~9KsGjPSP;7=Yq3j{cRP9ay&B4te`|TQPsxTVeTVs&+65}I0AaZy;!||5gLhco
z37rw>4E&VwC3*XES#+e?F`Iq0^gY+fewsF;eItVBv7=aoqAq8ToXk2Gw8?VQu1cvY
z95+9DY<1R~T{S9Ly<laLofaGE(PJy3SGR69z9GmPIT5dSnvWeE=@=qyKhLT8_6;%b
z!i=<=a>F&e6r4WrJ4aY&)$TJ5Kh|5Ag~=pd3&;6v3MEO_9T-j@c>x;xPO+bA%^$&7
zZ2O+(gr<Y7lzCb|YktaFd>S51Yw;_Fr}aYpq!u&JPs~CQUs63Y`d~XXjyqI#Lhw;*
zee_M0z7^F`X`dQ}<xuJkYC?>o*(9`&^<Ew1?LQm0<3`dhP*<h(yo0*_uGQ7_epRy%
zpwNm9wW8cgv=Abo>{nz_x~>YR>zeRJ`$&(MlTCQas*ewDC4+^<CGLPuW&$g?K1KH%
zT_+!R65f00>aolPwefVDqqd(jmc=mGJ<0l();Y+hzcd!f)~%%VlXnMctux5$=0_Lj
z|NWX<yCoo^uV+qz)e;mQIDDvCoAvdF4hLV;15r!w34d#ZKz!rt^?t3?z=i2UhimkP
zrik*k^0$by4?Ev7mRUQCGPl^c^7cG6Uvx8^8exUaq~+$)a@RN~n8~B#1pjDR*4qC~
z_P?&d<nmpnqy?J^K1M5w`aPCTz0^kCzZB%P{$|`p;t6+<)=Zk_5aZYOSI-l!C28O#
z_!{87vNNv<zsKzM@z_m{!GhNp<d`Rk*t0Pw35}-8F8SpkZ}0oZT<q{L)|r>Ji-D(s
zj{<MtnYwvhr>vQgKiWEQ<}DfX=j#oJd(Q4l;%o$G4>$t}I^aBz#OVX4?E_QOIS9_2
z-ycV(J71Jg)T#|Hg0ml-JjX-$I(M5n&8<Ie4%^w6=l=?O>K}}GTZvn<#{2g@3h$`g
zW|M9t&-&8;T%IoSG?cyeJlezdlBeb3PqK6&&W9GAqh=rf#Q%+gw+_5oCB*$S?rfN7
z&Yer2QjaF#5-LTmS=ycDN9JiR1l0ad=r79|tD5)k$5ATl+zku*)A^4jmdrfO_dfDm
zB+ovrvxSzYBRq$v=@#44EeNbR7Tw1zK6bQG?q}gbpi{|-buMec`rx6%%qxrLp~<Cs
zUi>lqY}J^>7fF46N5t2dgQjy2(B7fN-8A{_<XL+Hf2*3Y%o6c)-?lt{KhRV%zb{)+
zEqX|~ykS0wHhO4~_{&;YLp}E7^|X6=WsC^^=gS8<bz{~Fk#TZh&l`ihniXRc`d4cV
z?+M{OJk##+K5A^9v}Muf7!Nal1pO2A8r4^G?0aH=7`&t;ZiRXS8I`>X!D3D}lXqw(
z^F{mc5KfES&4#W&%g4&BL#q|2<mO{X?@X{kpn4;l(~P_LHiY%A5VrbfFZA2%-JDH*
z68cHIn(4-fuW@fAb(;)%kv#LS9dq$`?{IZuzm6PpjA7prJeG`uq4BryBz)m@j9K;T
zyDXpgY11$=`;$7@oM>)Pr`&b$Wlo|bd-cGiE>6L>UOs3;c!iI#uD<G}%-+>wE-v-(
z7sGktW6Tj{-|uhWF5&MW_+x9v9M8MU<9j~-`pv-;ah#VX=hPv==DI`ly~-PSGwa(8
zV<s2USL5_@YjWc6&49UHa^sl4$8Ee`4z=1;@%L)TzmxoGU&{0ADelH@52z=(1)PiE
z>}H?W__6z6t0ubBwIB!>fWE~wB`eIroJ=Vz)H>D=&E`AYyk^We9w>KVaOd$Q*e3}P
z+&Mcz?Oya2*6cgS{>%Ewdh!pDe<!qjyF2M1)Nfutc{{57F7l`Ef{&Uk|J{@4-$0&O
zqpYpu?@uwdyLvUw#zGlXXX`8uNo_Y_2Fi6>F0B($iZAjo>lR$8#Xw{A@@p57lO~r!
zgKxOY!VyD7u*{C%`6E`^LmJ=8ndtk*G97M@ZH;5vULOs2eRDr`?rdS5)7mojdDYqL
z-?kFc46~c5;jpf$3!|W<W^dKnk#~l*>HJS@?4@>Den0-Y^CyUDrn)U6&w>Zs{+8O1
zlSj9&hI~RJc+KGLBTs6b;pMEeurO|!H9OHp@GpU{@t!J+>B7fwou-=$nxE_6M%z5d
zH@mjUo}bHfOdKbIkZvRR$Duo~bu4pSYxkMYsf{{9*(CNqdp1}q=^?F6kDC_q(bUS^
zP56tMgQDex$yjQW9TwWf{LLsvfAbK1#WS>BjLOyVIhDC2F97HG*iU>+L~CQd%ltSy
z&*Gy^emkS~a8y6f!<&<2m8L-OFqg1q?c!+r#GA{PNo#ktaqRag+&k#vTXv!IA8s47
zI4-Go8SS_aOwr)>>>6-qox{%k=vby!<Nu9@>-TJ}3MRwF{<-*S(*(iuNqO73!)jbD
zK+nGJ3D!`x`Anmg(1FEaq3%|k7hJH_ul2tg<Q@EAHt%Usr0!?vx`ixsRB?KRJ=C}J
zL$tfb{)?aW{Tj8K$u!&|m2Clbz90Lk-@XrzWjeKw?XbLkj0x?@nlx3~b8Sx!KAokM
z2p-!ORB%srP<ixjIm=4NG8bKX-bYwBRFCJ3mfHiY0@_LGLX*y8y|>z^eGDGyk66={
z@5`1i(MHDq1%H@e0M$o*<SE)PmYF5~Z?ol*o=o4I9YZUrOQ|TV%K8ZCsQd%60sP6B
z-IbgARI>a?w$JkCU#xuR(IJ1FF`|BLNqnn5GmdA7VyWR!?dH_A-hD;owUGDtMz=nv
z$}Mj^7LD(c5<2F)w7zX8Pwyufzbfx-$vSG|Hs<ruL=&w}Jm+mE|1kMyeUd#+{rt1-
z8Y9DrxxY-)y;5xBQt>Lm{jBBY<WlRG@%WrZ7Mom?aEEF4nM_>tXbnj>nry`c8lP*G
z!s+WV>e$Jdiv63Ar{6^#AF(=`o+drJ>#Fc<ZR_Tl6&CA=?ZUYk6TYSVVA-Lv!+1s<
zLy?PFNr!RGPR4okt<!@~5UGY=&Z8I92kutTf(_FZ25|=aO<8zmVACu}Rzhc0_Jt)}
z{sJ3{D4-&wQ1`l2yVKbqGua8LPGOn*O(F%4%W1^0#sjr3EqO<fxA2E!W{0Cs{GKDm
zn}yzd3T(kI26r8}J>a(RoWSMCmfI6VZzDLz!70tgu~TPBdbPkW{G5Fr++FXZz5hIJ
z@0!_TMHB7W(lf7~*!3e%<)u;FTw-k>&=^}~`<B*CttIB!Vrz+36@2d>%nnDV+M1rA
z_SdmnT^jQ-UQ9<JGne{v9yl$)JAiAQqzw`_0vBguA9dIYd^_OOa_Uf#kZB0MW6Ni3
zI?XEv?-F@Z|L*wC)Z60ymXIis?%_D))`L?IzHfW>t?qp7$ZQ>&qv?M}{s3o>=IE=r
zYdz7FKR6-3U3Q2iPU}J^`7iy)SSF=4?HjrIoq%~~Vq$9@+D)GQ`R6n1wRUdxd9s#4
zt-is!oP|&AcY(aKQs<q0?s3Z-uR|0kw#N%_8e1j*7yo$hdwEXXYWRM<cIVrOb$h6E
zIQ8Jpz2bbPNo}#*aE%``R;*kjAuT)b?E^>bWMe2Yqg4-=z1SwKp`$V6#z)KiAg_4Z
zc^5;dGVK3^eqtl=#lR0zhrBA+_t^F9gr>&O8lsIU$i00(bsPnE7}Qjst*Q1s#P84{
zy{!4y1y0Go;M+L;e5OWx!N&~0!(ySCzgW54)K<tNtU|HSEHqkB52tMm6h5hgLmDXJ
zxh8W;3s6OBt+?y8AiKS5H+8BnJfCS(J1??2VUP7P9s`Rjp6Nqx0<isVlsw(D&Rgv7
z)YX<J?swaNES$1eV_3YK;*0pFTuHm?+edA!(A;(d&8)2}jWaub_)x9avm%{oH*}1d
zP+gF3?&&cfbJHiShwjMh&)c0$sjnJc>jNK)&+7;^)_cJ%enU8>{={%&852|S?ebW6
zZ5#%URiRE69wu-4>hsRdf0N}+@EEHiS)xo~zJe;_ALZ+-*LKP-<}AeMob#FEGx+}Z
zS^fjz{wXov>@Q-XEe?3_aSpI$O*m7~qS0v5t{8CV*PVK}UmI@w(BLYmtT-2Wlc}yu
z_hTBXFpjLoYV$R$KW{njWXkY-EMZG$GsbNVtd!457>{1~y+6gr1$@)feEK<)hqA^6
z8Z|#Gioo9s{n59ck96vq?*n048_(VcU?M-4TEM0MhVRMS&Syroc2!$>*i<z<jPKJJ
zKq3j29!cKHMWAXJva-UvbYsG*BSiB_D{i%Y@82Vj{n~kpN0fT6(Tm3@Ym+J3tgqd<
z#%}OS-+tb752-iA___Wm8b_nlbuYM=G-ob+Ms1U@1==B9V<NeBHKBkiw0d2loX&Tg
zcfLbEwY)Y4ebCnAnkk-m-v7W45d3=9XUd7kE4GB7>X4Z)ZPldMI>pvi9{w80S2X|p
zgno`Cz}rIjR-U12W5CUsa;|xE`=$1zfnUH|L#Idk!|%IqHEWaxtGjN|)Kr|!Z6#Zl
zV66HNQO?M3F>ey(sO^*f{VrZ+4adrqUSnsi=e#q>+j`CUObcyH{pza~_Vw;q7SuN^
z24{4EoBRG7+&xb5*@1Q7HG$W8_9vMIvy9gE{7=vM%+=+a-q8K}%FRVjUzOf6d+U|k
zW<66__3X?mYGz!qbov#`rd_f8ilp;y!K<bW@}3X!;5AR)Wz&{VtC_Y`I|E}F@<Ry6
zd#F>F+UuR4*4S{iLa}{z64ITCbU}vfTy$h-6&3Ye(Yvr6yzBggI#-oZ`j4EC1a9`o
z(Vn;r^Vd*8Q`;lc(CCE5+TT9!WWK+?EDa5bta?Ji>_mI0>yG!F&!}njPiw&e(sq%i
zZ_z*f9w)7zH1R3$RJKMZ@8nA1d^`+%yWos-?@!Sbd7L}i3&2~u=zK=y=%0Q|Noyu8
zSzZHat)xv<p77d$cLBHYztrvX{yrq-=>}f(Ubh|)@5|;L;T<C10&yK|@a_x;T%Oju
zedOsOPo5jImZ#CibXg&q6ypU!v-s#2RKMSe+s&uX`fYT76Qq}r-jS28Z(l<ChD5s3
z>PhR)Noyu;J88a+iosh?+D_7Hc&5#*PvA+H*_V+dT0P*5<mBrk?ZOoK=8*3oIO|{i
ziHmU@?kh?kCA~K%UF&se9uwww=`XFRjn8OI+j?#B-QX!6p&dOhDg0LOix#tA@SIvW
z9{;Wcela-B@20&eSL?U`R&*lKw+d$iID4R}HN)f39(Gznb5rfH6P&s43&$1jYR`Vs
z(xlb%%-FWI)W-l;o?+mfz*TSkYvk_&X$$}FPt2Etvih(!dppLhI!#m~?sm;KMISa6
z@WzP4SSks~nK0HJwTm(<l_7ENSnb^Ko*-}cE92Y0h4kYSq<4~Dl+!QP|D?~L?lV+z
z{^=X~NSi}ipAzD6BR6)Y1eR|95aJJm-wXb3;fL+xWiknt+6&y;U**<60%I=vz4Pv@
zQi$*E%*Bvc2)qHfo;^JeSCZ=808TwPu$%TzY3oR9B+btOrL~i`j<i`0&GL4U)|N;U
zelKYqq%9O)&iW<zUf|m&fvcS3!25yw`Y6vu()Lf0XYPC1-*WOSAnoE5d1`^reSchz
z%5Ea9gtX*0wvo0l2X6yuOA>ghV-IOHq-lMluWfAGU6Z^Dz6bcaN#NR}hk$PYzK3V>
zN9%ewo4My7=K@Oo4szL&^X^PSu+kMoy2>a9mj1wbi#3yXlLM89KGN!sQs8@mFLLW{
z$ct?WqS!+C$;GN?=PS}io&&#sK68=$)GJ<VypEI&Jq5i1&TH)W1LPL@JN@lutxJ6_
z7D1JCxppn6>7e3sVmNw82pb%VE<uQ65r}nKnXSYMR&Z|6d*j#*p*Jw&#a@ZA@>;M8
zkD=ut7Z^O|3ak?4Wnd<AR?f6Y+IHaVw#0K8&rV0jaYbKcXRyw$pw0PV&TMp4GUv5E
zzuK*KNczW^b#x0$xc;d>i#YpGRPDx1>LtUsv7`PR`(5TYFk25p`NPj&jn|^Z%x~a&
z)<3OhC8X^-_LHnRuk<CP*MO@ssZ&%&1L^fsl+gyfHBpB0Z%|rJ86vAO)(fl&{5B=T
zdN%HU&|(J%p5y0V4B7yBc9N$#I}g`#IenYj;u1JBYT)G@PAsFa=LtUVeas)=y$Kq!
zcj%wmX9@86OXD@In6!G*7LlfU=dM*sQoc5D>T~jKAgytVe45WY!C4PZSYNO2=*~BW
z$mws?F9*RJ1JAEHBw4wmq+cZ6?<cBD-tPr@sb%pu=)32TRz%uF-=KOd0=^LVKILEO
z=C1<OYX9+krD*>@=H3TBuj8uomab$+kyO{FYU{R6QHuc;%&rzxR)7|yN0KGmvaL8u
zq9jV9G-~3eYO5q_qohisCQ9oTK?Rm=*;b4wS}@>(U=0}7ySU(G4G30?<yelDt^mUt
zFsy3Jwg4Bs-`|;;d+#I5NxQqB_kHi@^GNsp=FHr=^XJT&GiT1UL3eRU+FfAtw@AB+
zID>?jY@y7>Pd2;t+#tto)+;<_bLM&%ez)gG%G)IIhnoEOxWmbgVNMl%QdL5?0NsYI
z%yGD<O(i_YbST=~8FcvZUI$THIad4#ZI!tBhB&MdtQRa@wrya$QkcrN3v38%xw0)K
ze30;?gtv2_v&r?TV6Q4j<$4sFIcSugF8x0RcH<W5))9V@@O9gW<M?!9_hCy#wUTMj
z?0$&vPE8|az@2(jyDP7v{zzvSo=myPe|GQ*YLlzjbF7&+_e$;DZU)NH77jsAmfxLi
z%!xN#Uv4xrXT16AAPoM=Seo+ybcTFRFRwpNUJC9;W>lASJP{Ue{`eE8^0xMG2e9?v
zeJb036*{h4m=HB_I-J<Qv)yYn>%4~7&e_T;FLQEa5Bn?%?xievfBw^75?^*U!P|yb
z>|SYlvK}oVY|*2wX4Wt;+M+_Opp3L`XipkB*N|hsSm44XGX87zIjZN8e+PfPFX_j^
z#=%;^(sh3ltQ~B*Hl;Wh2=7~x&H~uLl5~oHlzIOfq_ctWV@uMh20OVVoffdkH%O<O
z@HxU;)E2pv$6a7m4}clszaMND*fEc(e~*Jzv^gCP<!xh*(>v4@-Q(wZN^csvBha;`
z;$8w<02>hI^>9++h;P|hs=zAOk{^Q?Kj`$bIZ?HnoUvA*Nu<)QAbk8GWFGEy32OwK
zNnuK-4XohduLoNW<1v9xDo!uq7YXm+UYFtwf>pNrvCf|t9?ou6oN>a32yf?JS2@3v
zV6$M;0+91!)t$41-4}Hrx15caolT}#AkM%ePLG!Jl>5Y;zAS=IhuYL$xUy=><k7D?
zp9fxd@4jVYk?lS5bA>9h&;soow2h9}bk!?Ere|*UE#5M;ITk{#tI#)yE8aXr{Dls5
zFs@(A&LPatQfCh`H}t$ID9F`5CW$-s7=6LL+uFxR?YnedysPUn=oX-xd7N=V?}++b
zL$U)N(wjV;yt=-I{`G{HqkX#(r&PNM`>xtarU|+Q==wD9+P;*a%a6XK)o66mP4PE>
zGQP|En_OwCWf&x?ZLgmBNTC27*roqliZc4=>Ux}alsprcE$ao+)225~WtqEK`?x@y
zvYu?Y!E6#tqhfM{tuZ<Y!nMP-8F(ylrudYcdtCbnZC7<vNqG6Q%mY=<-X}Y2HSyjK
zw|SyYt94q@@LN4HMd~x%#4UL)X|IWH8|CnWiEevKa%(mUM~HWfcqd)mT7L>{HjMGD
zyYn$FvRdK5g45R4FA%S;7oOq9EaoVx7rZQM`8_(6dW&m+CAIYL7vZ~V8~)qSg=k^L
z=Gd_!>ch4m#VV!y$Wq9giQCujWyZ8m6K_M?tnY^==VitX_Z`)V->FTi=!aRrs0;J6
zhBL2jbN3le)bq}plz*0+Y`ZJzsXd<}&AQLg_EKdNj)Y7fwpk7BJha1~XHF+!#h?FZ
zv=8bFtrbLHj&GlEm{q0Qv#LH`S%;n5m%eVkN@(keJmKuMBu{XP+<{!2ARt3{?{Mlc
z#FaeKL;T{O_H$0#kD+#~r3PaZTlR56=~-rTp&aVYHm6ok88k_wiQfs*$=?kxW{pw2
z&(3U&>b<fWyGq9#qWi+l|JWUE(FtQaPG=M(GgGWEqq~sn8%bhyJ@U;#WINWu^<7EZ
zM2-oW>5!jpoO8FIY2Op!4WhQF>CA(4*fX5an~?>k>#J>~b!3$JkuvLLOe^P)#D)8~
zzq9=jm9)=6;tYM6F-jk&`EIfhb6@=a2C-4jv$<3MX(3zV5aakQOllQE6G;xp>5gf_
z<UdoCxE~Mu<}yV|T8WX~CZ+c2Gq2`-Z=}1O-Zrb<zXy}V=tP|S-6DD6)id?JwD<-s
zBZ*JlrJxVLdIs+-PX0@RqO)-V(SXQ0*xB(D3HG>uF@7#XE#$p5H#;4*9=&EG`AH0F
z6GoeSS`y0sl#pH${J(Lxd`>=o=GEtyOMiLlUQS+Kj`|I;<vuT!|K;Bl{j@ETZa(vB
zvrjxzv{}XX0*y)k(R4($@q42O;@jlz{^gV2>Qi6?4u&F*hE}yaamKPiJAFzoZ9DU-
zW#Uev-YekYGp{DAyAKI@^vtWtdDz%y?akY<FM8oDs#x0&bkCVrlMyz_>Xt&a9>!Dq
zrxSMXu@{q9yz2M`_L$AOMya&bm_BBdk1X40!@Dv?;SRnMe>0=E-YUud|8KV;V_Lhd
zLI3psM*jZ4c<29l4SaLC4%N?+)c^S_zm*hx_R!NZTuf|Xec_^)*=#Ii-L^AXx0UQQ
z2hGsmASd|oQcav?{&?f9nM-S&&U+|VW0P(buMCGsGnc=<*o2LM#>H47PxJ@RLm%%a
z)HvV8ubp^vSCPl_Egm-DdZElb%^J8~^WaCYJ$&`d=HU3LD=|EA7QvsCog&gP6J&qW
z8g8O4O{Z-(Z4+#hcc*yg_&=hba^tSehfJz?A|7{x<}hBfFW8FwbOV`B^3#1zAM_D7
z<ukdUjPR;&Fz?1Dh3~g@<(jwLVXMk%qe0m^>U2SlLg8hJzGLO~;%}GqQ%dx1(psH=
z+4f4REbFws{$Ns1l0$}}xwPW4`31--??x>+VSVswY%i1Lzz!36M&%&JIa%uhY3;iG
z@?x9nuHMxh+kK=pJfr$;(7D5(#z%=g*9G$}RWTmtC~_)O^XLuRSYs`|Y`!Q}22L~)
zqqNd(*%#e+7M2=VeX1T+>2+r}?c;n!Oh#&TSEsug&b4OkfwXs#cFwBHZjI3U)-ipZ
zpI4SZa|D{T&}e!UF3p)wg14M}-JK1b=!cC&;TL?`l3T-?l|EkIuJC;HNu{K#d%nx&
zj6qkZ_pbNhntz8&_f_C!As)}dn!zekn9}S3s|G9QeyL8l4XB^+cEYW_`uZ_5JCmg~
z+X%Wy#MtB^eSg0@i1YQYE%j%pJY69D+1390cvhYkz%GF;mnY39);1%buet1WFHNpL
zh&QOr!kiZ}TOX){b`;tT0{o?NYXd(9uJppCcXxv~pT{Odps(McH&(nM!pDhcc@qtn
zzT*h^G<d7}D3|6DC&1Rf?Q-x1k@!9|4WQp(tp)6q9#fOi)T5P0!JW)^OD->tD(z=o
z8wl%M%6}Q*H{O1Eal!Tf6Zti-G#+Yr#&_Dh#$10VvAqS_$vZADRy$sKqM+`TUAc!o
zpPSkJx!j?bbL;l>=k9$eci)S-!=KIF-<Nyfh1!Fk8F?O&HDMP)rD1zY#z^l(>E&SC
zV0wR>zuSrSZq{DSdnce9e&6NAqXj(N=lVH3YBQYY^{+i#e1|b@t+5#^%KHzw7Lf4)
zIXOyW^$zCd-*b6!`kPDR_|i1mNuz}{#=oETptADkP?=SXIlpMzR}j6(+%9Rzk7qq?
zOa-Nnxs{&zBWIiT6_}3b81Lx$q05Vnj>nG{)V|W6d+4Ry+TAba4t+Mac28gK-WO{3
zeP;Oik7XHxHIk)y;tu`@aaGqft40fIT-=P0t5_LJperlxomo$OC(*0#LXTE;Ih;8#
zPFkPKJ@hhl-Jd%|cJ{oOyZ5uXnSFh^!!Km^f9AmR-JBAiwoKc;<e4<p2ZojIzq{<#
zC+>6YQGH+>d=^~Qqf4|WJtiKV(~{86fS3JfLaX?5VC%pXPnWR#7Wm&1y0u^>ORx=K
z1u0B@xf(1VtXzqCd+lKNskGadNv9iZbt)aj-R0BCadmRyt#z*~<Q}?CIbO>hx|;iR
zET((Sh|)ezoXJ!=vtW~8C&7;Rx?M}%<{f$|uXf)*MZ^CX)%LxZ_u0?pWnS#ddufr=
zS^gy&`bJc{=SH;mpQFb83(<k=(ZOrc$kk{?<9xJY)0Jq&=F8EFEnkmTG|fdTw*IeZ
z#kPN7%h2CPA4&S^@BRLXufG1Zo6XYdR*kN8uXAs6FLUp5xk<m!W%JEmn=`{V9=)6P
z`(yA`_l=XQYhL+cbm$9Fec!I=v!9P%{9N?X%hB%sXy~P=e$R{1-p@vx_Vq=>i@E#%
zCHKHLau43f9r@?n6^;LtyJFKn=C0Vhkh@~b_1qOr*K${Ey^3GX`P>!TujI1VIyBT<
zf8gZmn_ubPc=HQg9^dS>TK6Bi2R_gDRWA9yTKBSy`#^e_zA*E@{e@jAetWA=<Y25-
zIVZmQd%qvHg6NoQSskvF^<nTQieL5r+vT8o9=VtPR?Rr#%3+pz9*7S8IF0y=(PzI9
zy|^oS>GRR%-JgqwUXJ$kM|)q2_PrPle>U3R7ads4J@_xVBj2E!Z&1xt_hzbl3)S63
zb#JA*w^7~OujbzQ%~bR3>hv4m_=PTuZ}wW_JH4&gukd~1Bf5I{4T5!pof5$MBHz3#
zI`nyTwW-g{xbNKjt$Zjha6)@tuCt1t6yHa?<K1iZZmw#6rC=ApE(u_LFZKqrQSJq5
zWv!9X{wtOlQEa*W0yXEo08W%jejTJSP{Ww&(n!{4Oe=2Vw`nG}BDymyI*SHqm5)*4
zmSub!NZIBX|0Ara*2~P$?&LQK)(y77kBe(+UKxrGaWLTSpN@upDyrT0lhN=`M78?|
zq60sU1+0q1$?LU6^{FRB^Sxh+_6$aKBVULPelbGu<m=?BAj2QLsA#RF>V9P1dOt>a
zxjV?!e!0x%V;#`-L3e^Ul%e~6O&gd8nu)m<_>*mgIi-*d6Q_71a-EBl$UKj_0%`_7
z4$UrTRy$p-+fVNN%_#qG*|Vx{=&id~XNHUR6=x3IzQ3?$<hFwaQHN$o*xxX*alW9P
zRO{AyRzJYF_uH?Bee;P;h|XR?WKrdm@$O3K2B7P9`7=86LB~GOEoZdS<P_=Ugm*wY
zx0x~5^<$$o+sed0n@Ye%fPNRhVd6|~xx6@-ns1s66)&)F-FrJ5>a^cFdfMvdNvCMH
zWYU6@JESwX4~tHodG-8^s>#*81bW*QE`n&20&O8*kK{w;yuJ;YW5?yiS?(F*llB|@
zoe$@JSTz`*p;G5&Bbv}t-AkwQIejG4Lz<m;T{eFlv<X*twekg^lZk4r@>E;(syDRB
zuBzxA{!|0)Pk~rx87ad4!UMPKAfs2l?a-P}2Wn=>+0>#G1@G6~;RbnVy8Cjlr%CFC
ztv5~aBs$q}X10~qU41Vl4b5Td9;7Xhj&G|;TS&AFEa9qN++N#m=og?r$#durwdxQ1
zqGstswsGWw%F`XWuvw6`xg*5uzvptW{miNdHK1UltM)k!ZSlQvn@ebUk$gA?+G=R?
zAA(u5US7nULiuqv^V&pMzf`lqmXEYjLv4pBE&Liu<HmiL7w23W>Ah8Q#+{Kb@LG8V
z*G?<jotE%pC8Ms8jlg?Jca(I;e)HD0!x}qILetfD+4V)gZ!Fl8EBpfCCkgN3KI|(?
zpJ$T)F!Jw%mz|BHUk^*4rMI5&e!|6HDIcp}TgQ<#8MRsp+z8F7B{aqlye|RKbV9TC
zq03>9z14{wg^l5Y(pe47AT-_3i1+IfHU`$0!t_nYzy`on*Ws)d+Pm4g_W?~4K1BEp
zr{^1uURi(WJ2HDp_kR1v-R~cI-@$i}yz3b&@}OF9H5;Cy=Z5dt_uiTV@7cfZVQ;Hg
z^kH{H+mFuyD$4sHXF#8Ots|y3M{vAfd2DOvdw2S|L3*!~5AP*>*B>vh2T=SG!V8E$
z%6-nGZVkHjSJc2<+c>WHgf|LE^gi*vPL<&-G)JIWa5SzQxUb-ML-9Xyd2zzE*~z?D
ze)!N2HSDe&`nP+2aPJ5ARSf@twfBUt5l8*K;t}Rhos2tfexKUY(x^Qx^<huT!NQT-
zHBNRwpYsXYpX2{Fmf8MObJB18x=8b}0q7dLlDY@7`P~?JJGf}V)y~av@SWh*F8_&a
zVxEc2%Yhj&;pITO*{nSzQi)^%(j{a8Ze6+bL+C}Hisc{2M`D%V(_s>ybA<dfL7V^d
zWwY0%KIT}vl<z#*QN?@g%t6Jy+B+A?Yd*q+>}BzYhcyRoN5W!Ez0kXj?B4S;&EBk5
zTkJlnRwzLP4}|Au8bl|UQ=FSb{xAnnr>I-(kgSp1d+Y>rv#k}CYo9mBZ`re#7kgEH
z-mW}4=sHn1(7H!yAD_Owc=+u+uojz__yVkz8L(-W?DHP6oRSA8Q6=AD=W;#BIp4KK
z_t@V@X3lR^exsLp%*f@M!t$QxSTx%)sCGHTdyfrX4rkaJzcE_{nTJS+9eOEBN_Xq(
zYJzw@KXrMroixz91eqz`LxIht?VnYDS%CHkv^xuU@N#X#s@b<LXAl?t?s6xF=q0Wn
z)pZ~r>}ULN?c3W|$XKCi4<`$r$rRO`Nmg8Iv^;L@x|ett4_uDzsFa@g-4J;B!9>q1
z>@Zka3KM@g4ps`*!+lOoVa@IDeT%K5>rvq|gzqA}Nx()|9!;J{s$bq9{1o9Q6s~g(
z?SSHY6Gc356~FZ#rvHt=OC25Ogkdode4}tQ$DOBZ+;Voa0_r%1yAFQ>`bsBLb`Zbx
zmAL;;MyBvb10HMnTz&_j>pA54rPo6TaaLt;gz#a)^=-O@od6pHvvI&<Q((tZnCLHp
zO@Qfp_*QEhTYXuGPZm6eJoc5>gD-;<?1^Df!r3vbCu~;lRsGhxxE(Y@joZQQrct(H
zzRi_G)=Hd-pNVyr#y4!0z{xqoxpI?{;;hF1h%-Ez)H}%-za0Y~1>dD2P0J^CWQi#i
zH@ZE2BY8?^3i^dF`*QN-s5Wp3eC^L&UcA6P>9{p48L7C9?Pjy0-R%#OwJ=vS*(Cj_
zxLj&KRgcqtNUvQ0azTxXtR-EmuAO&4mot{so5)pnz2F7lDt}$V2Ej^FwECVgu+kJJ
z+CF~A!OOtQHUD|Y%}wvxUHHk<ZbJ|2WxETvpXS`g+S6vrw{=zf?n1HTn$w}$nsyh~
z7+3H|+;fI}VNKCCRVL1~9Ch94deFL}=uQj7&1}u-1|_QeR`0~#?l5B^_qvqd7O=?_
zCS2v!2|f+pF5njBHAc`7bgO^y^5S||-%ggSjSp?fXp4UBf!p>MY#v#0a3vfyGj+O-
zIUTb(SiiN)H`u7(;MWczO;7*26Ah2aQOoW1x1((&!20_C2>Vlh>GDl}FKIruZmQ2z
zd2~QG3thDUf7S7S;M=MHUuIrKzsi63(Oh_TB3r5vI?*8U&VZr221trd%vDxk&Q~1i
zj2@xiP+s}vq{F03D{eNoW{#Hf>nAZgi2jz7PX3mZB47TBTYt(gwD`#!z#j{Q=axN%
z&te5ZUkH<`u53pmQqb$vEs8IYz#dGc5kH&U)%^tX;c><u@sl0yn{}?K`WoALU;o-x
zhcS&*Gqf_Pfb<CQDu4Z3i>LCxK)k;H;Q1=gy2KBP-$(s{OIMQr{tw0FW_y=p?C8q>
zk@!xAu@18_)uw`$noF;Z^oD-}o~QJ_{)o~`>NBauq-K-!v}Mty?9<!8|B;U(5B}EW
z#eCNfMv*_l*-G_tLs1*gtXw;rfPUR?U(Pxgz`h^68eDx4{%z}<8ZT~u?*zB?G~Z_I
z+wpvqK4(_6Wu2`3{tmoTb%tIJo7~uWA?G#6PAc?{7HC_JvktYC7So+D<ds6#3*E*4
zlszVyTrA^JKd%~vCjUR*nx>p|PC`=(O^$nCQsz73QcW~%&@0XYaV`;OmV3&?`pd@M
zE3IzS4r%A~VU!)aSE?)JltQ-QW7O~OdVO0m-`H%VgsYsIp*adoFZYy_jkBEPZKs7P
zUDifO*NykR&=#EV?b6$ahIMDP_YuO^5?<%(Kk3u>8;Bl0!&X3RGC{*)`BWaJh*$o5
z^yhrbLszP*UQAV$eN)cI8K?i?Cf$YiVN_GpP7)O`;=2Ee{K9-Ezw%-E<w@*68n8yV
zGd^*J#r=>gZ<b(&B86u-A7kSgI=5O%yhg1s(pQ_=MLyd8=(5whd08#&<8^*#-5G@A
z&`m+tN}N!>n!0E^cqlvdooVQb|Je0K=Ev41!uqw&fERt_4ctqiFZcxZEfet2>^3C5
zmhp1saRW3b|HS7pssFT(!JOmJwLn+?r_9%!UQ)ig0yj2GO4OdwqlIU+o3My+3)6fj
z6y2};&Au<;;ww>{DgGvfHh47=Hd_z6TkS%wkFAtY&DtxPV7o57o^XHr7`OH+;`oHH
z(mNY=rpOS?`bJ3?>q~zYufHVyDOju4U?u9SS^A$+evQN#IUVarg1l!d)N1#V4?3Zl
zg=QW1x`g$CT?8vI#9>2VGbyZ;u)`ix-wpN78o2s^={%Iy#FDhCz-GZNkk+`1mwZdT
zOs#j=faZFUjj5VpX<TiTqj2@5(kJ0%Q=SK7f~}e`e*#_)+HGwKIT+d|Xe(cJ<1l$l
z`iR*`nIElQ$P=koV@&cS+xg^)^wj1?NptRO%%d$$>H1WrkMAxpQ)cD!6m+HM;_|oe
z6w^^V59_gznLIrYZ5On@ts9Th%avyMAI=+68Loc{J?U%6sg4gNvVkdzwG$#tNIB=?
zLuc>bS8(^)MjW)sAB^}|2l3a>TwXlx<0svLfyPz=hILB1`*uG-s6I!Cclc|GY^i=d
z4mJiRKa-Skm)Uy<D{mSEo=~t?iZ-8S0;V)(p+EWOiEWCod9axjrgRIQMt=#mTK(V8
zaUM{SG&vsL;N%i3E4ANB=x6@Im-lv0BYG}{w-UbLFTJem_eh4l+p4b~!aE6X*84oa
z>ri}uANJsgb`09V3%(63Ln}id)t%lu3GMN}@^fM@N13l7!b<tg5nl4wmlr3wXD_9-
z6P)y}3i|+5J|*4Qn?O?_8m>})Wnjm_b_(!vP1-k?+DQ{MIsem_q3<g}2HndFJVt+?
zBCAOo$H2x(-LHR5c^@GDH1V7D4xhJBW~!qjgcn>SUn;XDGOnfnEQx!Ci2BY9^cSI@
z<v!%u^tPJ3dTC4V&Hp6w^WXSy^R`Z5&!x(LJ>eG#@6JxgwEHUez=TwG&Cpi-t*7N#
zSclSIg7ttE|DD%edb$CyYOpq*bt&#B*e<XULmYM#Z1tt2e)O%U!1BTRMd!z+(1wC-
zmC~Dou00jE6fFN!4jbh@RZb?IhIUm3%?$B|M6=bkcUh(>T<JCv-uCy2E=TR84Qv-!
zyX&icDL)%F<JN?`T@Jvb2VOgOZ>sxi_QpIsakk<7h3`1`+I^a?XU@G=Z_{=Tv{3YR
z-gSz1_0D0h=6Fo{UCu&P5gw9bkDlqX_oP&fw|dvv>HC#G+*{TuRw?h;@C@zqGV&Pr
zp^Wi2H<XJ~NzJJTxEY!SXml<VG}@;x9jMf5W|7u-FuFfpG>#s#N$9<ab6zcL-LxfD
zDeRD%{r=!vfLxt>Ejet2SE&t5@b3I;$lcuM-0kYf`IR!cGae`Bp&Nuwyjhp(ub_wi
z4W@ft`o9kB7+94d4l4(n1sn62`cEBL*LA<H(Q-2{>>zxS@cC4~m0%UxPCwye|CqFA
zy?YpJcnNl78SDhuz!JJCu)ZbOMX+A5{M5JH0P6%RPGPH`#h=lVxa+~%mtd7(EvfWM
zNuvp@4(zbf^L@m0Y@1z~sE)dznSw@bCFf3uJNY)TtF-TjZo@w%^-%)(5wPK3_vbt)
zK35&Tli;P$_Pg>;)&Y`PrTLcVvAMaEcF^s(Lt@mp*f1nMSNt4(_@84QlFT<)Gn8Bq
z6bGWMg!U-31KiWjgS<DiVj0>FXiIOz>s~hI*!nkX>UIpC=f(P#L1??7opIk{@=kIH
zA1+K2VMA-!LGVc5Ticx`o#KDV=B1awTEW&T&s?gHoKI8VU>h9Yu<z*cZPUq5j=z;b
zw=?HTEW4`RSAlhbH7Olm$6>rucpKq|3GY?7AB)3YUcI}Q@PgbcZXI}w8;fnM_Ie;i
zE9Ex^-3jQd%_Q><T%0=DS2U-fSr=UiYl|kQAPx=XwmIIUHgyS_9%#b%3(H~gqaUnP
z_gt!j60kuq?<>HyC$S#4lw+q<*x?#l_4uSS$!8VAX-SRCI2ovobav)lae6PmzOq@}
zp3A<U@Lhyg3P{!~;&ZnIs~pFm8-;F6fR{Z2UsJz0NqBYsm6%V7Om#A&_k*wXvZ9^D
zCY_bpJ8U$6_4`*o1rI*QqNZ<3OD!i9iL{j84bLOr-*zRm`B27~g}8cv#OXhw8;7o1
zfWH*K6MPzcNj(nbCjHdjGX!0E!5h=Hklu0Vc0o6g>MLe9p6toMr-Np@DQjnWQ%yZ;
zf|h!;IZw%F7z=K{l4Z|ea#QV|NQ!~L2Rg_@HMAQFX~QlL(hG(0&Q>8eg(2%sHI}<)
z&TkKzb+=@K2Z)=-J9q5V!{=u<yR|y;n8UnhR}ppT`f2drsmS)8EwSI6j3RXgzdQKA
z4ioChTfXW;&V`Si#ul9ZYzq3}Oq{ZJ>6z0`ekxx;273#A#N{Xb-R5IH?Zi8AxbO1D
z3Z`_`TErxuP7A&CEgG9gc*m(#R~E~XcLY5`m^fiHp5<Q2+Rqg6j;+43*y;8=59Vbw
zrL8HxqueYK_9!{=q#Mu`yz|Op>sxuir?_9QRgKwttqCl5%DT<Iyx#J>HEW)hxH`>y
zTdurh=%Zec1E#w}LFRpxL&I3zjML#|ZXVj(hg|)gSF+9wL7wt^#gSQPYxFD~CF}No
zLtpt_SIn<y-~;wWw9AxFQTT_oP<xN~!v*4v60gq?_eb~*@PhBY63aXa>Eu`PS?U(N
z+O_FqJhcLG>*@!iE&8BG@Cl+1ZR9{N*3aXqjn+<*L)ctVsAEvsNaHb``>uZ8H_Q8m
zl!3G!R<mQ9Ha(cknnc4TesY|6jb&HdoNSYmB~*BltHK_Q4bWYHZWOwp=S}uBW9YOu
z_Y<j&)y8j2UPNB|fahO+yb1Pv8Z#;gpCde<dtJgB!Dhk2*fI>(26ho_y|-a=tie{!
zRXU*{KUL_<!%h9o$I5f&ai#XPbG0fv1pcT=#oZF%9fB#$hxMO^`SC&p*A+c&I8>}T
zzjn?%<2Rpst-(S!6*Y*+jSUOrt*iV>*gufSI;K98TQE0nQXOIUayFv6F^#JmqZ?mh
ztoi;cPWJO_j$x54lu;)%3((lO>&vYVY<>xbRddc9nA)hWQhtZQZh(mws_oZH{eHh+
zYed%}+6icSe&9;hJ{+}^3*e*RRgRBT*K3_JY+X@$T*vqo_ro_ncxAEfjq7W>O7Z^J
z&h1#H-g-g>)rNXA*E>t<&4@Tj&uY<~tGC5F+}Zfrxx0Mbw&^|2^$s;$ucw+Nb;-Pu
ze7EyEMc%8c_(qNOjj=v|+i9EpS}mFq)fPK_AKS8fWdnMmm2A4MDcXFxr4TPYOx0Fy
zI^DQ?CA)`fiaw${5<~{!x8Y^<@jr&V=lH70rgmVhZJM;zpk$S2v-at6OksomV;XE@
zGJ<xuX0@{PHQlexgHhIQ6^e$}sJ2*Wz5SKjZFZHudgi`D^E6qsU6iPKTkVkz(t0M`
za_RQzO_9&Zx+{yb>Y)BxgYNsIo<BsAn8jP0cCTzZEp@KAMza;crrj&=KFwl%-Dv`A
zPw&7}ksi&Kx%_j?dp1$d;*H)n2DT|p-sMJch0*NG*<}5W-T5XLbrQFA^Oabyq%2Fm
z>j!TKuMptZL4wXw?Rt#xKEmr1?%lJ9uT9XPkAQ1UD*tykYQ3#5*E)ttzKO{Rw0h4a
zy{C!sl>4v_hTv!NsNPfjdHN6G)e84l75~?RkAffe{YMSS^je%S*?uOm3T-dcCi5-)
zk@EdHtCBY2cM!jH`;}npn&^eiooHHrdVk?QQmEON-=5wC6>sp|m#-C*htJmS%deMm
zm8+lMNz$*r^U7keTW@gd<>uGkRtTlF5A!5*Z(p;&;I6`Rm`T+ZJ&xpK>**}+Bb5|w
z++R?0ZVN(*>^1inw4QrR=2mzWwZHod?kTi2_M(iUn^C9b!j*5+F67(0;csdiA9eGY
zpif>8)T!`$t^|9VQD<Wkn3zjQ^)Lio*S&t;<n@51;71f6Ty;WSoBWNuusO)zYCn_E
z%tLe1$^70QrI@u@pV-c0R^w92rXpMODEI<x>;dLM%6od<Hd&)h?jR8luOiN_wq(o`
z)(keZ1nU4B1+#YN<Mx0ZT|zeib`0z|G`f`DC|JjXelFm#qhOO@r9A5r-6^n{CD;tu
zMKG1AF44__%`c(L{~`_hp(H)guLUa(m><uCmxGrC+}m_2-A3?r;On^8rT*ClRt9!T
zK%z4q%9GTQZuSH#-T?F`ptt#v_nqU|RE^n39wB_~!@eAYeH8Id>OJ5We4R_sYFst`
zzMDlb?C$>k^0sVxfANpAR`8)KPB-q;mzk0{qv~!0;XRKc&!~-fJLAy4+ePNF4uV^u
z?drI)IO=$Y(_@HL+cJ=8G`69+JhyRw)LSUoF%}(*>Len@k6|}<@H;FHa6i4UsOFsV
zbb|LBe(Z|#rR{YP#yhvU{t<M);+>bEUHdrg)$xf$uC*DIpWuIt4^B-8%>#4lS$(Wx
z0Quyj{+)h&F@A{d$95|_eU6SG4O2y%k9QKUwew1_3rNP#CKXJ*)T}l8qmRH?((~~Y
z_Z!aJ&rw#kW?V`>j+5T0k0HaUKK!12)35k(=@RfPG?zY3y9~TBu}L*wu#K@cqe1h=
zsF9h9(`Zbe-F)sfH%UbueUmirCaD>>esO;0t~aM;ZuH@hbWJ)z*@F^j_NyCb&TlpQ
z(ECElHE|BzJW|=@;3I9+Xh?#Ds!S$-f;xU08PM^uAlGWxXDU@wR0+*IG^O1!uQM96
z`>=IlDG0)FA;m<v&&jDKZuw85WBw#_sX`vYzKx8wUfAZ1j5cJ{h8-FBjbXAA@4M3b
z#TU9sqxuErBbwONyZr{y&qFGLhqTbv=s<!sZj3>{^NY-nTwhA`hxS#@3diID=%xp*
zWZBI&?9Labv2Ry{v>Vb?IoyDL*H1A2bbKQjmpesh>F$j0SfF%ZZBe7*e+eDQ;FZM|
z<;kxFV?Ux3Q=$x%zTv0TrW|WUt-b!WhAexHR-*Tl*2$k{zMkS==pqtFmRe+v_ebFY
zDfOh<@<DY)Ss||MW=VT$j~_FGUj^c*sKXplWn3`GSOJ~!UO%>)El%ouJ(Y1ebd`Ir
zWUVuqw52a~Wd_U9jT>*;p&x+0i)UTpAKhScU}LU6+Y|qQ8mF~P7=0;wgm!Z65#qJ&
zck&)>&)TgiLTnR-?SMhqqc5u&&fOPr`XSnP-+V)%r_LEXJKZQUH}(|#6m|j!uDG*4
zqK`NuDKkJrek0Figs*#re&zT`=vPB4@L2RbVtf9R%N}6Uxh(pqY@#3L$UuD6#S_gU
z^D{EYduD(3%3{09#*ZhD`TDZ81aA+gdYAa_?1M8!V%u8lPy4Z)A+7nJyW-9w^<(ve
zp01SSZxFs~EFMpTK2!B)GVwSxr9VymK{Kj3Pc8DbOwj6Oi)qItMVOZ~vR%m<l$O#k
zOA|$dOw)E6x3gB3wx(1#A{hQgm;||&h#`(RnoNVdwWktlQX=j+$h*AJX3?G8$kx++
zZF_(}<dd_t$SLyN^Gn(KiHl%6!OHmzU6NUDfbCjBw|e)@ao2+>uH+wGidzZR38ryX
zm*j^guo19H)m^kVs|{5HbrRnC6<@b15i{r0N7hQ*Zqzr&TcmDgo%Y^w(&+xxD{d{C
zG}R|hg3W@>agQEdYmVsqg2q-`2Gj|hc13-C9{SPoSdXT)QfJH8me}X%yVk*Q3x16<
z)AwXBNJ`c+O~)yT!Oin+#Cj^VpW3~QXyUUSq%-&HR~C0Im9262xHnfv7lbiJ3@qHc
zG94vu-BIRFq!ZRyf(^gw;RNBk2oH6m@0$V}1Zz<o?_VUW7g&P>R=M4P?i6&BqD#v$
zHV$SjDH;6+G^ahk5zDg)4?ynOn<vd%l6U2&4f?X*gkIn6FXg!#eDyIuhvr$>F0iWK
zzT)hZcvgEF0lNrR%02nB{uylCl>TwT3x3Cs<D%gbJ_TO>AK_)G_X@uRK78Es0}*ox
z&)>^<{GWV#Fx27ez%PPVq|#BjRe-PlUBB*?%#~tWFDc55f%x=0ls@!&SGcOU=>=~D
z_p(YNkH)Rb7M#>5!lHqgyCtEtjw}8NuXFPW3!efn`6~L4RKC@oFM%)o9(^{Shj`D+
z;F`27Cf$>@=Htv0;Dp)I3v(2rRxoJH{{eEe8?Tq$=Va#+?2tgo%=x^Wd?bC)))^4u
z&SS2Ar#cb;@3Q|k2XC4_%gN|5Is2$W29-I}BHNP0L3K-g?@990_lL|&xDQtwH#6Xe
z!M**(3BP|yZ@N=Sx^Im(xzle0hiEF)+TNz3o&Nt0Tk6AN&_6fm+1^_<O!^aEZ{uIA
zJhXsMf)5I#Uu8UdX-(LR$pO94RsKmV*I9qUUrkLsTSxbep`;gZoc}D%d5#iq=)cjP
zRKH<fxhJwEWsQ|#(jnSeX!|EUZ#4hhfi=Q>Iuh5f%6IX8+S7mce8cxQWE<_>4b9p1
zx>i6p2wj=0|8dq=vevw;er^4u%eK_VRax{@A&0aUA>h}XZ?Iec_h58{_YaV6&lK}2
z*FN2z=!~{GXCzTKX+Ly>Ewly;e76Z&fnoErZF{fLrs?P>r8=}F8HQ&cqeug`mSfO+
zWhb)SPU=Ubg7k|zN{OeL^JJ7u?XKzo<Knbmzc$q2E#T$nvh{r8ah>3m;JVkP|9xN;
zU`kJyupzMKC3J_unwHQV2iplYV=>Xa@PAV2y#|kSZ6mA`YSF>1X{phhPx$+7xJv5A
zrh{Fk=%PQ`dK~Fh^IK0(8#vE=#mRniQN8Nh&LFwzG>|VYGYFQF#!k{0o%OnT-?m^c
zal2Cc8-V5*G+o@Q-vqnuds6*I<HAwsR{!}G=bNj+jSFGFvdV9Y@NvQm)IPbY`CSAX
zyO2HSGh1Mr_?cQvdcs)kP$Y$M@?`768%E$We}z1tvVGF&_jc$Tyqp^56Qu;VLObx+
zUUtA1*47+QItRf(G`-LaUrgpbwk__{F-eYSMxnXzcej>NH6ERW<{~s>uFj2*n6}Tx
zWm~cK^8z>jn1{aY?_+r+q2H6QZLywxi17qY;>P0*uTVe#;Kxs2hry0X`Dh}%?tjI4
z5gV^<4kZK4C3B;4=zF0*0=;jmDP3i~W|CCOb6KmqrNkL0&ib#T^WdH~5@hyx&+{(e
zDQKESQ*1P0e2N#|j6Y=`Dr-kyZhGyUajmG0ajWAzi!B}MEtuVzlm|Fc$nx$3=j#qe
zjW7|nq<b*>h)|?Iv5KOP7M^D@)JEwFUf+HQJ>oZzv0U9O^Nq~*KAb(<Q~Mt#-jRPn
z9&&wdiOq3F+x?tepbqS&e7Ef@sCVu#=)R~^bQqsGwRl9Ee{nnJ9`9Bc*D`gByK!4a
zjsO1)@<HCbn<FG;8_YY&m6IDQpj(|k?{sc{KaH&;Y<D8R*$NxAn}c^i-v_<bnYVL6
zZ;dFIj4R@Q1JE6VuE59DKgrKy;3vQr1h5a;$?FY6xx1sgr%rEjI;wG=hH^F1HZvbn
zn8}c{#O+@(A8c^4d>e|F<cz`>ZV_Haa4F#@2|p^@w2Tb%NUgb>ey<7I)|K;NA5PM*
z65W99HQ-=fzr%+FozBFqrE1B`@8DH=jF4WzZS&5)O7G_qeiXbJT)Zw^!Y9CcmccK8
z_kq_1V*cyfZ-AcyS9=TVO6hf{bw7*zUN9f)v_+=(RDd@xgExWqEQ5D|k1m7vf*%I2
zP{RIF`a|GzOX$17kAN?Ldq4Kh_C4%Fj;zi(`~BWRRsN=;di~qTEL-iOe(E%mlw-bO
zgYzc;+$;i=o=++Qn#Bg6fHg4XXZ@Ga7rxcEp;SJrz#GA>9i{LV@UCU>PVgS^Do?9_
zO1~d`6nts@jDTMR7q6u4S=-(0$4tdLPI$rUo6Bzsyc|6Jo^JThCGb}8Vz<6M>CO_v
zB6lRWJ=Ub!dbOG8Mjv%5SgedC@^UUi6N9@e!<z>G7MKbK2S`ZhCxW~#Nn0GWIV7|R
zshjPyCQ%nPh#@0WW%OtX2KtQbk?^0+vTm#>wsT|H%j>L4lxiJI<{^eH(24EVPoLf4
zl+1(%>Oj?acDmLpN{lvjpNa3;M<se~r6mcPgJn53g4z_mWvO0T>+_pPMN*>0wJ|{T
z)FDORJF@FncrSP(xOiN+gb#stf$Kh8x<3Nm1D>u|@$Hk~qu^sAM%FO7DdkUBu;?y9
zSNYC2rqg>${yp;-=+-Ktzl3i9p9ZfEApeEef#<Bv&X@2u@G@}ShfDX};N{>;zk2|@
z2Ye}C8w2lKlD=q;gC9<%BWx0EDuwBN7r=7fb@TV!051TqfF@j`FZp@$2cFJHDfkBP
zO7IC0Q_i;c=7DT^tr?nGXvQ5)smXMyJ@KlCZfLsRJs<DGw<Y_wBppQ+-3WAz@0oXJ
zkldnPmEV)l<*d8;J7&Pkmf%Wv9=sWRkb8ZH$)<N_zhCLD`vt}a=&D8MFX0v7b4$`y
zSv7&Ly~B?uJPT_F>jvxPUYFu`D?ZpdL);(bYXE!!e5WAhwdR5$Rd#|E|0s0L@Ad7?
z>vbhtOn~=*k2_f_S<i@fThwY7#8Q0<r_5(7SSm<s?P1oFzkS}$rYA3MEMGNS5Qgi!
z3pr~eQFuKsJ$f_onu)jeee;X?DOtSM$7|-atG#(!&(yq%flj<nG)Yr-6<au40t1S@
zdGeb-oa@$qNb?kF`uehQpmx=0>3xN(R(l1q(M>>C`F>wte!P%dBZ-G$T(|m%uK7*q
zB>SxUMdp{#9pRobkiA0K^PHTVL6B%0p}h$0v72chOYgb0`iFM#JLco{dqojG0DcTS
z-7bWWfu8_x=RRD*kAoMiznOjtynG3+@4f_H2|lJoynO4{5wKeE<)k)S@=NeP==5E>
zO8J$6T>#r9Ad!u2AE?T=3b+ZH#_ycZvSYM$VbiDD98>hktda$d@E~40K>TCGZ`3;)
z5`Qkr(_z9c5vK3Xx$V7H-^alUzANDmRz2aM7twKv{sMHf(51_@6#NGGMQ~pp*wkhF
zVK0ZK^p|M^-#s7J#cb^{Xx3%l=Vypa<?YVi*Fv0e;-ufFd~||OgX??3CA=Rzr_A$A
zA0T`L{O}T7X&wb{{(x_5kA0u74d)q4X-^S8M|goxOLcP*>;hP^=M7d?n<eo*I(2%p
zn?jf%s3u;cVY~=Q#?2$ziC=bv_0I2^UpzrpseiY2Prug6z4l3ovD`DnB5*<X>6)p=
zLPm$cRMb2$ldBoJ?GbG1rZPqMpUzCx8Ia+b^tjYM2YAQY?~BKdLG&zZ552P^i!qDt
zD0JiB1l<gDjsGfcv(7(DkeBsRE|qisSLk2R*?8~QNQJKhKeY^A0Y13|SH7CSr@?2q
zr;Pf@|2q!7{qd~)E8TAB2LH8h%bri!_k$0E`#yHd{2qmFb-8a}e*UTW6X0vX59|Hj
zj?VS(Op)nnfJHYC-8ghRMR$vFrh=e#ze4}|H}i{~uFWua$M(W36wT^U)&6wW%>BXr
zQ9tooh}Zo6^NX!sKkoJfn1pK<)aEy<#mp@poH>sluUHAUYA(ytLXx>uZOu5z!a~#j
z*4p1D)SwF8XirS%x0-pV($q&eU#K(WqwIs!hs*yG9fEgka$v>%QW`vpU#`$#O`))K
zAIO0f!GmTS@5H>=-n>cr&{5vk_^Yh_{UH6z^$)MRjjbUX<%o1+?1S`4`WF(o*X5d@
z$0ZIe<))Gj$WoVzhc2`vJnitZP2F`#az(Yw{0viRIK9^;^0>D0TdU7H;;tXZZt{ob
zgAQlZ@A1$q!E~zT49%8mtWGc)N>)wWbjis=ousqy!-+g4UeyP-{zoV`Ws*z%V+d>=
zShpeWkMJYlJ>dB%TxpyH?*l*KarNVAunkr5*j@fuq1X^@ny`7ojuTd<y7IOgVXv3^
zN6D|zzkd|@O6?anNNR#QvP&t1{r-Ay6?7MC5`JC@)(mz5tjo1I8!uwtZSo`&^i|q}
z9PWwN#BYGOYip4UoX#s*54%e<#OT-0yb4csjWga}puEZHj@H~v5B99np(uYd%3s60
z^E=FQDZe?eqmA=R&qc<Eg-bx+Q1a{Wmre7F7r7UI@T<vUB`B<%&o8@)M}McvDu=w8
zxW|b*q3_SQIeYC}?vURDTfmVj$ZlHg@PQn)uYTgRZ<!A^n{HiP3qjdVZtC3HxS7|)
zo(kQnkkgY*kj~7udAAPk>(%5Br|8~?FFLwYDD;ia=HTq>UsE0m{saAYJ7uNDrM)n(
zY&i72<YD9P?-}~Qp0d5)z3;n*zjOck1K)A*{Uh&-WNneO@sJ1me$uIEiRVb6?1u8J
ztgMEDA(73GRo?x?nIO(d?s>P#+NPG5@ak&S&U53el>6m1#Miay22T*T<?i{L_kJdv
z)_SJ&)agZ3z4r!j58uPMmujmf+i2<Ay;qC#?k;5qR88E<qv-eVop<(6u^pJWlCuNT
znpB<GpBAQ;aU0u48oi`(_&&xf_x@zQl9W|OR_>TgK6KU@eOO+cNu&m&HYa|_2a1hL
z`|@i!Rt5!x*@4WE{@ne^d`$H`2iEcc`b@{Ct*ou7N#U-AM+*6QKH8dzRV?eH=||EK
z52^eO>g>V!#Wv+V@&~nUcFL(npjN_*A7)PaHXe`#@?I%F^sntj|7z&_GJ7`c{odMr
z-!uGyjr+?EeD}fc8u?B<K=PWK+thlZkC9f+Q}fR5H0h5+jJ~0Ea)zOsfbIr#!v*$E
zoon%8?jfB%(L4O<+TDG*Lod|s`OMzuYxh5Q;Mt{1lUoW$o;ldlP?XWXhiq``wSn$Q
z_Hqfk|NP9RgFPe9aENn*o};^F&Oa!i$%yOiZ>L3h+WulnX^B}o-T9m3?YUTvPU@P2
zh}gfd57kksZ=xRd{Zw+u7;&pVjo#C>lY}q2fk)$ztrExnr-`G!I77U{y~N|5IvCHD
zIF{L6GW0gR%r$Fs;$Yp<>GoIu7PbS=FT)>=`x&91xw<i}8u~`)#lLlFoN58<1M5?M
z{iS;B1Yh_}oS$UvCh;(4{@jM3>v{p5for45_a^(#>ZJf=K}N$-%nQYv)vu?BKmJ+T
zxZa;(qP+2y{`^BP<+poDH2e>zWCj&O8RV;v!M|SevSDV`cxmR9&*dL_Ie(jvyHNwW
z==fDZy9-)<o31f_&0xb|7o3iD@NG4({Cafg*P{BNUyXK;N144}iT3;oGy7kT_8p08
z4*X)Y|Cgf7$S*_(4@Z%FAtA{)<stHzo0SZ{jd;W+8j*=bTp|&bIK*`6=e^8fkgx$1
zr!>1aj-md$Kt89w7`Mm4=#}>$dLMhG^>GSc``gG5KYr`*O2P*S?}S$UJ9?$`(6`(9
z!7hF);nReh3<H0(^v$7+3-3|-1Ivf6CCOo>zcd_N?dvFEbA(NBpYwzpW2?EH06+E<
z$RkefcH?M+22t6Vxg8ze0r!(?H(7?c#JBqY9oCBm<2kYMM_Y~DlW&GvuGhG4sDifO
zr_j%<oo#dZaPm>c_-`BGYk%68AtW34b%FJQU37if>6L7?Q_R;!=rBNA8ykhbVkl{2
zRitqgtQo8{m4?rwod<b;)_FpWXIa2=X%bg;J5T)bJzl@z*W-d+mGW5fAJLN#?&~h;
zr^y(|TtOv4AK+I9eIN8Exew#FjU{Ff%%GiSZ5q>K8N~IYe&Xlv_4+N6P~RE`8vtuo
znp~=zBVeb%w3ZR}xS74@5*b#!ZyMUw!+fJ?z0GLYEBh(3;Pn=$#hl(k?<_t}eeF;5
zK1!z)Yy((Js;q5oy^BO#V|XZ(1>~0Z7UDD?Na{>!?*wZHD^WUJ;u*bQI}gV5T^kdE
zonDZ~6?Y7}Q_!jIbO}2KHVLNwpsStV1lTl~KWlLIwwhOZ4}Chbr)TdoncdF~J=-|^
z$$g)yJ@EAY?wXM&4?Y!j2TqfmGrVf{Hc=|dzE2H*a)0-Mrw=|g@}$ynV@mmdV!iZd
z=7TR_Yrlz(3*jNQS90?W<+X!2oukPZA*=`N2v|S&x`YjYRsJk`8(&7M^HH!3U#1<n
zdbGCKxZ5`Mn+X0f3SaH8oZkertv`pJ(Di>Od%ookM7mF?vP_zh9O&-cd?4pP)8BvI
z>yjH?9}aziB#qy!hh`L-b^%^rQO9i+_(gEr598%lYxhk$vLItN*v8KhSlt{pUhS2U
zx75AX4*E&w<S)Rt^o`yZ<HyB{Gfo!PYgNxjpgVRrJ0EICC&6=mF`n1jcZa>VVgHWe
zUxKdgm(WXakKa+#BMZ;}UCIDld^dcb@O9w3z`KO|OYf@yp93Eh=CyC3y@qoIRCjIA
z?fhlNQhis=suOvyR37@bb-RCX=z}Ix23Bf*gLXkXc7!}QfBh*dXz^~_X_wLbr}f~<
zyu94=(eqj2ytlm0X7jQx-f}*3aOGz(*jRb@`G$ilYYNd^+$D1jyCYj_cljvws(&My
zg9}>=Rtc8Ry)N;^4IZm>-xJ#>am2Bk=5G!+j=l~0#^3bw@+|o)nP4>R`L@<V<aPD!
z0qCcpFV_owJ4^dhIYRgX;ngnO>N)I7SA9(oUUAp!PM6^03%>xK^IHl3P;`CI4e$c+
zP627T8h-+NbF=MvRVEw0O8<hsSoB;<qZ+Ik?6`oChN9OE<?YVDcj~knhC9e3rxcPd
z=x3mBbM#?sF)>seLun2{Q*z9&mnORQw4abL1+@A*34Iy#Az#YtG}wj|rt-Z6wjOLC
z^=>T&>AmXD#lMH_M)<J;9=v@lb9Y;Uw#DkOjx5bv-uSW;7WI!7(pmjg-=D*}otYtE
z0qX70tDx(JZUMTTPR_+oX_kJGNx^U)4oo;ie)AGLN;mEvCw|#U=2*TxilNxNS)#;7
zv6yH0y0F540x@}T^{@E<CDwz6y0B4Rdnr`NChU^eYJMAjAN>>b6OO-{Tu%AiWDB6;
zi4OAWM8Y!OyOT7!NF(PD;kT(ghrM$+dl1ijbUMBH_a>IP*-RAKqsu(Ri%Qv6G`7&9
zdB6<sn&e%hF26Rul3!Hs&bQh|r?|)b3TEPp$?{o2+_fj^OMj9r2bwvZ4gTr9HgPs`
zhKScpyiwwL8Pw|vx5|dV&dD-U3Nx;(m$LQ=XDooQZz@c0%QTv$1$I*%rwNYQP;Y65
zAce4|{aAKkqj2uE<*X5czZRAIMe?<7a(;1xD~oY_{i8W+^|KnI%p|rMvUb=gjdFya
zgJ+ZhEV9w4dfNu{zuB~ja})Kwmj6N@|1&?H@GNX6*esa(hc5N=Ua*4GUSA)0hdg^5
z|9Lc2uhA=wBhU{+uX|nN{7!%kflWD`p=`tWF6XF8<{vg?G<(-(eN=Ss^x17{mTEa}
zeud$fH!4YYZ>RI5po=&yeVQ{kk|@jyZy9Cd*=e&$Q6tS1J$QE7_AH{}Z_wMxulQv5
zAE1MrrXM*!3Mbwy&tI|@zxk$|-`aOjgayr#Jl~oaXL^?BP4=1x?e7Ej_dcJ0N+9IF
zh5T3iSJsQZ#=PbhWo~K-6{b^%V;&jLwA?rueR>I$DN?x%knZeX!q2>Yk}nrkkL}R4
zTv}b4Q=aH?^P_?13~DsJh%$N0>WQ8?_ZsDr5NB51nwTbU?P#OD=6?IzZh!Bkzo~b8
z9CsZ0Pu`F6YdXdF__yev1Zccp;tR_1U#s49k1hV(?-WNf=eGsT<eRrh_4|hNGxvS7
zF&=<Fh#xnYN-E<|Suq`!treXltNDKz<y8Lza~y3gLHC=R*z<2xH6}|N_nIPpuXs>V
z>#Jw1C&`T7<$Lzl<$l+hSJ9s-({E1v@R?VgqQ^A(#_)=8d?(Y$9{c+^HWHSRC)kyt
z8?r5#c7pGiUO--zAdq~AK0op2lpG5beR)YMq_1P(yQHm>)J1+}f5iHG{?)}1mv*RI
zV~w(7v%0;<*u2&4L9I!tvNqZOt**Y_tbU`PJUw-OhUTRf`ewwR5Uts`=?k@Ht+NSr
zOhtHgfIbtD=xN1qV})gt(`3UoYCXeG`PPy@W-Va#)x`nV55u>{<!D8yFK@M4xXYSD
zgkpY4d$={5eCEunt=Y}t*0db;Zq31Yg87iOfX(*THI2=_HPCE)V^Eu(<{LWSd3AAp
zR$JiMj^KAm`8WRL+Vp<=h=*_bhBs)_?cYM1esH-qU1wjRlO^%R{>jj&ABew0bul`@
z-2eSo7mwdu7gqHNPr1)3<8J$o2+PTDx-xptyn5faS{b$W8rvVky0qAVtBmd8EATsK
zwV}G`_!Gv94_sZml*M0?y70<ePN}j__}{3ChrWfXpxSO?FE3af+-rZMkB4t~Hm(VD
zTztodKSf@zxVpGDp9k?5+XoX{ySm{??aDYVi)732k|v^dlg?x%<-tAaIQ_O5t&MV)
zo>EbN({`>T6-`u_5T=20k~m3voj-InoWX7LLM^pu8n#jLl&wEW;xX~o<go?f4E*rb
zc+S*GI>rADJpkA`Hy@c~{AIJ)c1`4(<Sl-u*of*H@9-$9H#-K!0Lm-$E>XAPV^w6b
zo~a1|X1iOXbZV3ioWj;bdU;=Y)z#n+2fNj<H;r?%8qaJALq)SoN1=^pkPUmt>oMXU
zC9e1J6#Ngytk@<cD#fOQ(Y9~K>7oR_XtS&;o+#u*vWR^g^816nVB7hcgDkqr=Ha}R
zUBx7N!kVkG?oIM&BiK5yGVXN=YXfTp6ARL%ur9D_uu%ctM#c8E2R$qmu4>kNbp+a@
z&}u#sXoGG_?eRF_rwE^NbEze3N>Whz`B71NFR!+#2HfjE{yVzKTH3YV!&S;}Em$X*
z+81rq=7#L$k>1y)gqmMfL9<KoGyvB)T~*dvVx9RikUNOf?8?2fN9k|5y4X%sUHYB@
zuw!8U+z9Izq!*iUTL&|DgX$XEu9frz*Rq|R#}w%dHeb!wQF7F-ro}eblsYh_gVy`i
zFN^;S`R&fDi}T`Bt<J{lIY?C>(Lc#A#})@hBSW|CF2Jhv0aQ0?><z5FM87StX3t7F
zCo#Qv8|f812=8|N$?C`YB`bc7nuG?!F&$781UmmA>&e0h@pnCZ)%k5q^dNqIZp-JU
z7d#2wEOg^)2mUJI|BT{4a@FZ~Jg#)-!RNpSg_(XL^gH&1dOEe=b*ItaeJHz~mxFbK
zg|;HPI<USaSS#27ShY`2`RN2ZmP$`S%1=M|3Giv<-}i%{Pt-z<%3pLxpzG<lnsv5}
zsa2%J@!G^X=-BI#GYMU#YnP!NnLiOR2(j9Yfx|{$Ao9)aXqI%=P0_zP>8pP1jS_jj
zNh1|(uqp7U@hHq9#YpNk+v}7>WzGU4969blVKH-FOMD><YQ#Hil5Otrf-;_sS$O+1
zkBu-Oh0Bh~PxV9GkbBIYYB?WLBe3SGZ2^xM<=k4J+iaoyB$IS)UYl|JDCZ13|LLn?
zf0K<JwoW33zB6zN*FQEuySAJ5=-P9T3ssyc`C3_cVu`-$?t@W}_-U>F+$Dah`s^jW
z#!p>!YdpSvn?HFLb=>Nb;}v7j^+BgLq)T;t3~T_bH=hSTh8pidz}vL6lp-xK-(1Iy
zO6*m1@6TOz_B!6KGgc5agbu0|qtHRs8h0*vcI~){wCZ}VI{%YNe`Sp+R-;+oyP<1_
zZq(&n<%qSL+vpry%w^1$#H>gD^D=^j%I`So9PYcixZvu;>dx#}qQm6Rb%+hnU4X9d
zCCW;4(S44GJ*9qC=kD#iJHog$?v$LR|Ga!P%g>yA(dx?&6JA019O2%N)_7{ZnD`<#
z&$xG4qsFE^?j|=)5!GGrHB1}ds)nT2!wChn>*kc#jyPxwu8q}(>d!YZ6UPT%T@eHP
zv*$Njl#~-;&1Fi->nwTg_+l(;b=jVRp!U+Y^2?t_SN!8w-8#ozZe64dd>!~MaD6lD
zGByU{bX@B)PFL#7L_Dw&+WdiJtQXb>RsdF@_*}xez;2Lcz*OG-U^&oLh-iub$5Nm%
z!b=I?CH}}bYu}Kv<E;ih1x^1?TwUyUZNY3kYs2|;@tNrv+YhQWp`<scR{i*Qj=u0E
z^5Nd&<WlveM6$ip^nM2;xwbhk-#e~XC=I6)G~Zm<gqD)0Hqtvh$au<qobS}Wq$%LR
zFOlz`qJGdz=D!unAP=t^zn#MwNfds`4lx)Z(*y)-&daSuB{7owVXUZY*h^7!wr0BK
zT+M5^lb9j0+YmwQG(WDz&RVpM%Y=tkCw6Q?V27-<Z%Vl+-uT4?nmufmF_<g)LC05v
zZ&n=gl0A%cRL`xip{pE9>bV-M(_`Lm#x2*lShC`baE*Z3wWPj0P8!|&n45D?TS@x7
zc^@(R9A*fPdrGF6g?<wHCe^85Pc%WOQEQZJGI<2G!P(^&D7Bif<Mh;7cJoRXLG*I{
z&SN(+d^Om32f1*_cGWnRlk9edUVN&9IDPxC277DQcXmfQ^*bytSeXq#Hw|4{wipGw
z0H%JTtAyWCu(=c_e30J+_yYK(^pgHO(7SgRcE#s`ZrNS9?eum#4|I27ec@@_w9Ito
zv^lz3=6KMpRJ3_=<#^C=7-$oxfYuk`&CHGnRg0-H#2p<Pwd#0K&IqkLZQs;B!#cvx
zT#a?s%6~Ulc?tt^-w$31J|TchJZKbb4s53YuOkn>Y^k-l{M0rk6o2$;*n2dZU-Qbk
zL+{D#e)rJ3YWJ+|Nt}H^t9rQsec8|Yxrl6ZYHr?dP%YZmS<`^7)$tbjQ|GH~5>1H?
z-Jb42(L*;6R%(YkN#pp>QIC$dBy$zpn`KK~Y|h#!$A@mN083fU_2Zp5Jgy_XW284Q
z#+ast;dw^GDr}|5&rQSs1Izoe87FGa*Wh_4;M?y{(y3oHUKG;NcobE;K5o6cLF@)r
z^T?`p+u`A-QmH8E;xLBNj!mY;sVT}Uj>1ExDDTcl>o@g^Anud*MGlicKVv#qdw$uT
zJ%@3;rGji8CC}^rg7LuB#|i3<zM5EJ*aFxmvUVoeeB=`GdM^0+KzhB!&Voz({LVTH
zPSbTO^9}z)J~ZfGV@X*db8QM`mHzO&w?|q0E6mTV{gY1l7p}RvB}wTLJ^<bdu5S#N
z+VvQCA9%42qVV%fv;5PrlUJ;DSS?pt6wyyX-?jJJVx4PilCQ$PHBLwK3$RA*=8GkJ
zY2W*<Euw16$v^n_@jI+Ujafd$E0Q_0qKd~?%_6@ZxE9ZG#2=f%y1_1q$mca)lf|Ep
zET_{`PknbkaW)*h7Rv;R+Q#n)`6>f%)Y$lb%a<FIRp5#3XFMa0Zq^pb8Yg=YQQ};s
z{BH2xvO~Prl~Y%P_J2L(mjpdc>7QfA`!m<Vo;LYbgXrOyNOe^QO&>HRu01AwTT^s5
zCSaZXz?l#2S-JJh7ADBFCzW3>@pk^~wRj(}utBgPFqNe)VPjz9DNJ4d7}x|@w}^aO
z*2Gv%LgCYdZ}{@HET1USh=lM3rTKGld>fNmEId<GO8m8d!FP{c%d(ANUKG#0#XqZ{
zX@N%FA>_f$TWgD2Ja29$r~|r5=z3Mo9R6v`{F?up&9?Ery8V&bSjy3?n0)GyQP|se
zzWz16`xt31{QGOp=C0An0l}6b_}|d@F$>+$&tHr8RCyJfQfKf@&TbQJ@n4cAv~%3!
z)5gk#K|1>kK!QYD3GMM;;G0C7=!Y~-Al=#`bXqpJ*Ad(SZSi6HiN4?4;xSK=hd;}M
zkAzeokO%yr3m;O3iKcXpkWT(D!XMr&9aVy*ET5xts+goBz12MF%#n`SZTdc%^mRIE
z);<YN2lO4bl(^*=kVk&$n)7|)+Z~R#Oar0v6io{>t-tKsh4)Wnc2V9;UTwMunrUd1
zA6=@`0k9ij69QUY`OECu*OQI)ihC5g(IfB$(Qyeo1vUeA#1OZ>J_FYM6`xn15Az-9
z=P%)0L`AXs|10Vr`Vz+vuy0D~g*p@QVJGyJ&|dnLYr&UsA3RpZD{9sCvS{BZZ^rdH
zoeqD-%;wVP!I%qZ*|o@rI=T(bvKvK;nnaK}Le?|ync^pZPu1hs7FVN($^YO*wKs1o
zqt|V-H`!?biW9~D7dRW#^LoEG!tK(8OFC@{Z$>ei+;dogx4l+|-1!3b0WnRch-D3_
zRT@PBaaO|H<XMbWdQ^bPp3wVTgc{3V>cdpuy?@Pk{F~R}y;8~c>QBX4SG|lucjC8v
zeJ6Sa8E9E64|Y0gOOw#fK-;Ur^K(fxXSJaZ>7VzJEsco!Y2bP4U&a3ux#D*`pGx<O
z9eeUy&m?;Wq|nezBbePt`lu^BQ?C*DD8ClcY5tGo*Xhk9SBAD>9{;U^qZctT$P_&}
zeRfM~qF<{bx|>6r(3YVPpp<D9=Q3uE@PzCXK<>3CIA*h2%bkLF@E-YjxO0EhWN!Lv
zi|#pxA%sOzWx3>-D^f?gua$WN@2jDuNp2{<h#vK;e$4Q5rL=vq48T>6kmi)~tAc*#
z?_XOSbp55>d_CM54~^ER+M$^`8OsByH4b#GI3^8ERP{Un?eKqjb6WNHW6-w#!L`_)
zM(t@r`2m~fKJa9-cZ#G%bylwx1m*t>_48k^EgmP|`78fQw22-1$3<%M$Yl2wamx8^
z_#1fEscXR>MKbr4Ih2c&7&eNYUpsO7|B!sTGSV4KfvMQxJ0DF|ekt^W(D(e&HMfr9
z`D?I&B-nV}QD_FCsTROx{15CnSg9cnn*lo&(gIi59M}xlanaSV-_|NExCU~3xa4o)
zn}2*Q`0XEzjOMYVVu`A9l)tC42`BgDPyeOTOUfkKn`Gmhl_+skCf%gJ`cJ)V;eEB6
z-Y)F>$`tvHjxIlA(6>WBLELaotvkcJrYP8dmJ&1p-P-?lEvy$LdEuPFy_COb=JajQ
z400cMf%%O0yh81$<nQPQ&{T=W+mUK$R@)EjPb%{&=n5vU#dC9E&0r;9N=KKl4zOyl
zd_x@816H2GB(n{GRf3I)?qR2g^Dd}ud^|$<@etnN!X5u&1xE96qLuKQQab<rnp<P*
zaCFMYCGcr*^)+3>axO8BfvG-qHSsF}Tm5IuH(Z-_GPfo-8)K_CtazMv=bCeH-?P)=
zhVh<MHxJU(&((Ja=}nMckJ3x_B513K@o#VZYUg|@|3lE1O!@NXS(n<)5%5ZI<&pQ9
ze3m{hEQ|vRR{76BzY}^ZPx^Q=4Z;zD9~woM|M$o=(4}QLTURkD(Y0LBZGf)w%(X>E
z;Q0MUr%em4|69Lkfo=gh(>c{S-m*>VCj4N03dN!KdYv9VY<@aGytQYqIeoU@cYKp^
zDGRh%=`gEF>*L+`P7r_k+_kXor?YUf<|@jz+SxpG<F8$FcJN-#m8XBTZ+&OUKOi3x
z-lYisEK2$(E(EA9f0gpT3cAMger}ZL;vNk3Dw=j^PC|3SwWUeNZ<0Zx4w`;w+Fyq!
zx%pEv$1`oZttEXd%O*CfrMY&db~8ab)Bl5Z%YC?nUjUy44{cmwE&OhP7tCI}+5fQ3
zEraP--8p2}L?@H=?)~|Cdkcr@6xE*FB11U6ujPNiV@X%{fq&?}6MP!nWM02FT6jNr
z&YvUSrRde(N5Bifk2^fsYl72zH95bBN1--9n1Fs5`Uyv$@W0J_qRp5kghr~0H2KA=
zIW!{G`2(bspOQIv(_i@dS6W<ZHygl*!8-(K>@deo+jpzlD)==KzCidc7oNNyn*~Wv
zmfuVfVz=9KBr^Mc;`RNdpUVm4s^T{S-gtqw!~CE3*}QS%s@c_&debsy^y9c2fib6h
zgvxA&_^19S^1o|Wv)KFwIc%fk(OOBjTO|QS5|0pn@!;ke13SROYb2>FBFmjR0`X=7
zCs#Qlq;G^W5;7@RQSU^2mXz;gZPqIT>v6KzE#zaB%gEPRKlmHZ?|9ZF{3!V9zxD0b
zP~ZQ-EB}u262^RI)2f_%9ha=x9r;x_wX1pPCZTH*T{33h(tr2*%dEd#y5@WvDGrzN
zQ3ZYqyi|SLU*aDv;FEuUZLwXLKlfFMr^n9<f_kAV_y<2u`Fz;gYjTQOmJFuk?E8t=
zMZ8i0{?d0%fcJoRxcVMtT`nbSMfHia>EyW^(4U%P{Jxofqa=o?AtjuVzWQhR6>L&2
zC%P)-rw;4{nDq;ub*UWMz{{@0azq%f*vH{Ipy(98AG&JjjtTIW@DcEf-~|EXzxv@(
z@Hue3gZi^{F-$Sutawv|ub!trso(fZ<#P#q`g&aN7LW03*?JfKx_Rnn;ac$L>HUt{
zh?nL6O0Up+o1mYDzFL64luieD&Oc_4ujUumv`J3Z4ke;*8iKwV`khLHc3~>F9a-Y1
zz3(`5hoP$woxc=+3Vag0Qy6^1hQYgTj(-EXvVY3Xui}?n<^AB@E`BH{sUl2X5nRr%
z3cAD4O*y)R-yzvcA>#Qno;4i5Q=Bg1wEXioA4lakMx2}*ae0LN;PY2Gvhwp&QrAYO
zps$49=4Hem;CB)1_&2UO8x!;g@ma{3y|?cv%;+rS%z+jASF%ECwq8LOAeqY5(0N(C
z8Ef+!;7KJcu*$ctT=E{wSGw9;7HH%6v09?$yy~mx8alDX<;RL0h4HB=MKx#Qsep|M
z<HTzt-YI8$Z)1YlNcl0rCb{+EyAm(Mh>+O*%@O}X{`IUiw*2e#Gq4i!rAz&ME!ZWn
zVnh7+2ets#BFxVh!g(ueftm=fTyfpWRgKyH%XSjhOPIX_|79wJUa(zYBTCQnKeJa9
z^GUm{rU;z&-Sa=<%@MCn@%*K9C-nZ6{vGN4Z{XG7rJ_yYH^3Xgm3O|!_Cs3xU!eVi
ztGz-W+FPuq6s&ex1>H{Q>I5Wo%kERFf}|7rVdyV8S#Z$r572Uz+0P)^K2Uf*HkK%A
ziLG{+R}udR@mmY7hk0ot57`>UcI};N&XN;v+B;Qub~;s-s^^@4WNt#5fyau!mVliA
zOMh3WXO&3>;d6xdaUbf<#x3L=F;m~~w}gJ*3fWHLRNa0(=;Ko|t}Ll+mkdk%`}6A$
zMvsNQQ*%D_o~3gu8OJ8`tCOVNUwD0SR{7cH=HPZ1LYPn26x}2Bxh9CJ-+AaOimr$8
zKh*C~ZbEN*$94Zic|*5e8Xv#LXvT;*UtFPDYqfPj=7JczJZtN7I@Dt3IW68re|vuB
z6Vn;aR<C&tvxB(UYlypa!AzgRhmYiTIGe55+(p<{><w(qP&N)l4-1kR)eKt;@Jymd
z{^OB+B)5gNL;c^ZP^GktZGzhEJl{3`_Upm!Hme<__%@V|&#(Vy`p-MA2S1R;=dFBA
z18Lkbxg(DHVk>cu5vNRv_&%rh)&)KVJ|vuLkY7Jo`#Y~MRyaAt+D4<w*Ie(m+wn?n
z|8%=hm6jD})}&kLMl6qQJDwyhcCFN@1Kl%yw(Xo*BgaeC8GDA8t0L-%qyIWxH#2pb
z{HTqry#arIS9Ti@b3}ct-k^3}4P6IxbFNRzM<y~?qb!ymiYM7-^~`=5v!dQ4`*Rqa
zGofc#Fg+N1`HYIt2H8kgllBN{FTC5Am7j-NKTA9)*}+k-e+}lTH|o_XiBaD%OB#*u
zfhW5BC1Z3VV;V0m_y+xR-Sx#OH`hSF9+s5tgfTPZ{Yv(da?VN8uO{AwZ@<1cp3g(*
zBdVoZ+Y4h|TD8z@+f81g%-N%Y4ggKRn0i(fhV^4rWk&Q58#$H2{NdK*YVwNGbbbaS
zOWM3!O|LsYgSD7;KDn0`;g1K6@445kRV2ocuD%QY1wQy4*WJ2KqvQE9WKlf_*|L;R
zEQhXY{q?YiIFzT<aV8syf3`p~4owgDVO-JtPid+DbrZh&JFf@5v86%1#&W1tjfkPu
zxG@HO*LPhHHaBkl(A)-Tilzz=Yt!}nI3nCx^LTxX;$I+s@poT$e$f0p(k(qM6aTL4
z_@%^OzsR~j@!PqljuU>#BBx$c3fu_IEHsm%@j6XTZI`W_eV@krPH2Y9e7T^HvL+^@
zY}->?r}1lhYFn>Tvc5Q`w25bFXX&vXjJufH`h?Q|z#G%4Jm#Tm{+{c>=GF3HdwbQ&
zEick4#wrh;DHk4W{!x*WmorIx_5Z-z!g}u%Pz&L!zxVoLv)kX9jCFRd6N5*-+UO39
zQea~tWmtQm8IiHg!2U-Mo_h_I3Og8J{G05?hL|VLWnRm`;jv(*5!+T1v*%?Pa(hOe
zX7R&W!(o{Ou^Gl`ut0T&$H)*UaznPu8aQphR>PJsPUpdtZBvmf?l5VycDNxoFK1Wz
z^<cx}*9XyUXlF+&8$vkUQ60KE*{^Yze5ev?<<?33j(>CA%@h4vC_;kG+cZuL5Pq2O
z!>(LIztHBAtYN8?@MF+!`2Ki&32idopP+s=15G(J$CRF5BgYqE+*eH_<olV%tl}sy
z=NR<;qHlHbU^%zz!K;7ZdN_X~885BTU~Ti5noH<|tc@x<af&Oh2VG>~6Mk>AI7^_H
z_BY(Sv2%#Hlf+%EeE3V{a|C=E+?UUZg1T3B<sSNcZe~w^?%tQ!<M_GUp_i#Eeakeo
zEg!rd&fGBBb{+T}ct3cj()E40UI!rXSjum8US7@=;r<<?d9PF)`T?zA_;OM|tAM8U
z2jli1_>mpzOJ6bZPkCsAZWnaA5B)^n)D1oezE(Jw%6J#p2-pz;o;SpHGiK1FOeCG9
z39{qFDfzd^F>cHn&3&ch(A#Qvf7{TSJ*)R}X4I<Tw`BGgA1HDg{B2LA<BGN(7Uo9o
z!}MLn`IOBMUw=dUZTo)c2BB*w4*DG{TPG9LNiebYtg>!{?i6(CvJNstHQ~L4m;DH1
zi3&gPWwB(=xc_kQatQ7eaZ<tUVEfa`O=lXN4NVKtPLM`d6?t~&(e|;vhRt8C+5GK$
z$MD-X?peF{o%>4;yzSt(jjV}&@h0QEX!It?&f#3UA}^<DBXbSsk7bl}aqyMd{obKF
zYWJ+$`<~i;?;d_v?f$g~-kCZ0j*+)7>+_WC8Q<t2t=aAHL-(D1?%YTD<w_RG645)+
z(<;8oag6vmcY68$Nmt&XoYl5Y5`Kbk>*tTV@KW#@@SQstXSvVu=V@yX6AdXIt8-S;
z-k~`unnZrFO?Zt!rG)q2#n}4}3y=L`*2phrMvgHv@{F00Ys^~njrkiSpO{<)yEnC)
zPSRTYgr8UX`7_!iG`GpRLIrd~(3L|s$$eNaVqU!Yw2DT}mBk2*8!|<kuvE6yXs3Uk
zAl@|bw5}WC#lBbZ9Fg!D)FqDP*g8P|ZFxCuonc&F^WGO~*cHF)-CuZD&F9vB{+%`b
z?|Av`H7}OD^tPJ5Z~N?;nibWnSJbTHU-62XLjD!3s9DLs{1r9P4l?&P3Gq&c&_=qw
zq+4tVGBy9Zz`DUyugC_gS>Lm(l)nRn^$^x9#PcTBw_qu*d_*%2%@{Nzj;7jlTj4|(
zFqQKZH0wTg-L3z@OH55qK_igc0Hq=;<#z+RA?Q@k;eGHzhNR?ur5qx5@(pNK6SWSS
zi_qjN9j;P-tzgq&V*=>IwuGFreHTqHG_4<xX`EgEBZ;0)G^5a5coUkF&~$u)cIEn4
zv*`<;%ueSbG`(HvGGS>fwGX0>cNO2Bm$LxPxZ|fLx1d|f+BcOL8}=^S&ihHHg><^Q
z>94LGS~~GAS&2R-s@!uhdf+_fNGU#it7(4CdA407bal6)Ydp_kHe`THWAF_5IQ2=|
zwJ#T2{gB*j8+_`tY=L_n^^26D9r4r$*A_B<Kf}Dv%}G=9p~RVgG?qOfDkWYs@lHN_
zYq>=HsvDX~Xsi$LtV{O;;M3r$i_jiT+stDxzaxaNeJ=1SuV15c?ao<K^1_<8e`d`)
zo?r9M-Zg7Kz2;rdt$FveYu?kdX5BMu?)cQ2_kMCs<5O!kJ-KFc*P1P#Skv_JHCsQn
zW?Sc)?H}zZcw0e9!P^VoQSi=!wFU1gcz3~j3f2|eQSjb^#)3@+n+vuSG!<+u*jBK8
zJ@4O8ME~Ud`Udi6<DPVn=FwOfm-<5sbX|eYV>`im!NQoYGVTT21vcQ?o5@u@#^P#=
zp11#*BDsl{ajy(Z%wCCjM~OG{Jnb~4FEG7~t(Tg20&8I=-I_zXgddB2ew4Jb5&AIc
z78mE`RQ6q8tb9KYek^EM)few13G-8l(TtnRo{y@sX(65RFDHBt$oNvH(g*kc!<sj0
zc{<y@zm?w*bj?5K%bB<;)5BnGVCnKZ4z?4_pWklf_lz&6Py2Fv)c=?AGL+vu@kW21
zapIdQKMA+lrL|o7Rg=f2x8z};NgiGKg>&~*Y_{27Y5~nUY|gTbs||hUAZbkhQBrnl
zcVl3)U}e4^->Tdupj-Ik>~fn`o+grVliWBDwi@hsJ`Y~*GU1g;ar82u>lK)?oAb9O
zq&wkJb3>03y@g-hs=S=O$^X0MsrEQRx)=Y9@kxc?+hgOZ$&W2nA6k3-%B|bu1*LN>
zDN|Cj_IShNW=~5wSh;>U88<|y_PqYBbkGGqP734_UIpF=US){;W9=Wj3tVL#E`3iY
z_%ZOE+2f1T!l`lC!3b(0rq0wPDQS3KkW%_bNoVe#(HDlq`Cra&0(|Wa^!%=!ESaaV
z8U1lmOwH5U6dy-j`QKoya(POhIjgOhcJQoi#gtMe8G`U{pwnn^WHfVr$;$g9^0<T3
zZ?{I!PWt^h3&F;I$vjZ|NRzo=JJ}h8zAblQvCrkl$;!3ChpnBHuG2J=iBRUiZTkyq
zM^+qMiGK!`+1X>94sJDnz~NMNSMT$@qbGkM$P32D>)&#RntKpet$x?7fj_TUaP|!M
zIexG5uK-`Yav`=q1~U34@K*3@0sazw2Y4U2nsK;<_kte=FAX67g%5#`gR9MiOL32Y
zFMxLm-0t*HL9fOjl&t?k*L>STEO&}ryyX&jE4c1;+5c~2o(y);LH7O<u=0Y1EIoko
zwE_GXxV0Nkzk&aC;5oN1gt@D$W2t!Sr25bXJJqriboCwG&<{etQ)#62X~}wKj?x{0
z?jm%@9o>?2Kb)1WzGVXXp2CH=Kk8kxU}IqYsXifPipIg9$5z~exA6_d3vO+XXT@Cy
z)(BR?eXwI#I$yExhprvEqoVWcc&6gE@8^7-)c2P|(hdEb-laS>IQ^hZ&6KB)=-(!X
z1zW>9$PN={-KvGfh4<Jyf^2HM!_1Xz7gbP!MK6)uO}s<zo+F*94=jW={iHvVVLOt-
zG5L7STHn6Dgz@rw;xe3L-45k=tewE=?Qrg=vqeFZA=`*|>3bKJ)d9%`g&##sf$LuD
z<_<%|8{e=H_7KVL072o2m@(@+jzQD&eG5S+8uVX7xtUdS`41MZDy7UrnvmN#b%{7@
z|JA}`rCZMmK2tQD-0a@+w%nT(1JPgK1X&-ddpm9Chm!uLGHV4}s9e$}q!(n3@Zsd!
zwS_nyOv{KjNW5;+8dIiOE92YQyA}2uF?$!zrFR^Mw%~_-JHj3dJKc1>pf!3j>-=EF
zYvwmkyz(DeaQku6x+XhiqTyDjvp$I-Q&{>hVz-=W|5(4VGH84Ue7g$XqBhO7nqM1O
z>%a57pJ&ZUy1-g~H17MMPuGi6Y-L@9;-DL>D&G^C?T$SX&2%zHh&xQ&IRWW>*YC~S
zlYe)TyI@)APL(z95=FHvEJ@c+ROM}fw5on=A)d3UJd59nd<u4n`_PYTeVs}B<||67
znz+tNAgv=_PIdM;A^y<@z6<<~_?+I`58W(uquht@GBrFUEE5_3GKsM9d-V;+iPu<@
zj31?7lVB}iN_RP))ek%mO&2uMYxBO8Ey$k2y|-s%%wY#CZ$6lR?|D=usbT+CCLi~`
z>FG%_45>ZH`5gEW+I-%|nO-)6@5<0VlvjVL+=jphg)4vFURZ;^=0Oj7J7<00#GkS*
zRLl4PUH+55kzID3L~sni^j)?}OB~hLJn65lXZ+_rTy@+Ozl-_@KP=F<FEcGLR%gCh
zb$B%LMUYvrhk;3ZRgxvOj=wFWGfq0b-o2e9r>haB@uHjX)f?gEim}<P1DOw`JN=rF
zeXG-K={v`upM}0t^kIBayR;QE`?9Qk2O?8B&JeGx!H<U_-cbIYJTyF0bTeHlkNkI|
z--oW*5cfy%*MaW>w{l9xY3;A~S}Pa74!RT2jVdbk#G46K`)mVmZ1nwtXJK7n$HAJo
z*QNLLgXL`U<>CBBy8WtHnFWQF=#D@)4c)XNiq4cuDdiWi%6AI7!Oi}?p&oU{fN?Cd
zoW&uBMq9^6^WVe!w=4u5=wzN-{M{GDhYCD=6CYK6s)%=(cwuchu`mC4ye_Bm?SO8y
zDUmIJa#WYS;1|KYY?8Kzu?c_;>E;}6ix!jbnL52ajOlKnX)t%WsgTx!cbE^dMnn(A
z<Xy_|CEj;qtC#C2myqB4l48y&g|1{Be0!VEFZFK2@Ai23HJVCj2B7JHUTxB7QZ{ya
zUmG+Rp-~%7wOgJ29k-uSg8HG$*&dgpd*2Jm`^um>49yK_yw1bf^acH0O4n!g5AEO%
z-YfoL-zhUt38bbCZcAHrDsTCBP(ODq1UpdnC~56qQcXiR?i6nnZpsnbV>j`th_~x*
zKUc|c#*g{l^~Mwj^6r*p&;P^R+ef!~rFUZY#eG2V`<o&tQ4%FlB4yJyWz#lo$u=cX
z6eUqIWy=<2(>85uJhH7MN+NsY8F`GPNP;BT23x~6Y#|ADgWX^gYz}%B+u{%O6x-r-
z(Npvkt>GPbjJD`0+M*4*#cq)Xnnj}ip8LKp0P17L)7>+tI0wLepZnbJd!PG!-TSI5
zS&k~>{{`KzC;!dWuYYVh5j*6)M(`bW42E5@;U1*!C{}AIigG<`wT3Q)`SBEBe!#{_
zwb`L9@&0K#O}@(8tMaeVPi-``;w$Erc90FR`|?eU@PLLdMk4{T<NT+0V1Hk4@c6pT
zi#3Q#eCwBbO%slh!Q9Dye$6u>hV8~Y52!Sd%J~E(v6!aj!36SmA^#BaUqjfuYewn*
zaKMMxsvqDmaB9Fw=)Ql(9nMPgb&kbn)&pE(XA5=HwB>v3?C>2^X>}PM-nfP8n><r%
zefc!+tTK@}2VOoWIO(${^e~9N^5E9pAKz%Wr70&PuCPu=R(68Fe4}=&z<^e|0~Zo@
z9yK;^<=JP_A8wZu=@Lk1=vsAqITwDc*P(o+UV?`hyn%3yt8%r1{%DOaelaZBCrm@S
zp63d8#aUAlz~%Z!8ko3%ip62LH6wLb!(hI|z@vcSN(;WxMH$wOyIc;Tev=c}uf795
zLtjt&*t1bi-CY5n3qD@g&?_*T(s)qw^&-+&kY4R0$ZrAPYk+mXRWr|CH1kxaXL(|=
zFxV9HaXH4@UxODhA-vAx$fJrpTnMATl?<T#iks(l*dC7AW6(d~uYI?+`CYD`SQLwQ
z-WVRHHN(5Ge*;h1C5>~#ub?)(W1tGX;#c&tc&;u0xBu<htyH(FLq+?;9e=bPO5vrC
z$GzJ=+4||&XLjG{=UcuQxiRb?vix1-Vv=y<HcI(de1F4jK)t?x<n4OTkoTMWuQC;~
zE)ylH{!Id}06gAb`7@4h4zN667hA@RJz}{HJf=0o&wLN`LXX$y9MdA>@@ke*8l%Yl
z*?7?R{Q2D&ziS5XY3Rb4maYOm4ERP%zHsie97YzP`g{t)2(aj*AiDh<=?;C+ke8Zc
z$&8;qvDN8#W7}5x>NwJ*kjBZ3mH7^)BW#`3?X+y7{oKx);1>JF8=D_Dkd*d72X-C&
zRZE>)?^=A0_t0e~#NSo)jVq##UvYb|o0(zVEMrm)-9r<;Uh1CqODLoJL&$Z;nP9DP
z<=HXTv+?Wl_`<UbN~`vlw=30t%F91tM9M$Uso=E&slAm~2Yb-(?Q6}R^>SP=d@7eX
z45yfr{Er*8PZ|G5`CqqNk559rbVARi_pg!@7TM){?UT;$e#JK&@MxGK0W<h#`Bfgr
zzk2JFPM(A7NI(7ChOWWzgED=}IQ}~4|2vS!5jNMaI-ifn6@2}i9`V=pJuRW}^*mTx
zhd<up9a;Qj_|u^ypAGs3j(pz#Mc>gIz5X5?@wm%U;@m}<zsPUx_rVvm<ALw5Ro4Tt
zW5A+!?BlH`KOOzVe%Lqi*_Oj!41GRq`BXoe1N{}G-f!~URNRJ)%Y@jafPD*0w*t<_
za^5`1gG}BvW6#0$?#Ev*b~Z9S41*3f$gZO%2K*hBrz)3y$ppUG@Brqb)Z3Uj(Q{_}
zk;aL9evykR1KKRkr;#u7U-`Y*Q~v`)4r!j_Q#uIq5Y{m8Xdn2mkHLQ-Y<@WXIN<Go
z*BNNgpOYWsW>|CK0?cU^fmZ<D0>b7eioiOj_cr%y{r!8N41PMW<Q@8W_^_|<v;M<h
z^nBiX*xz-d+j0q)ZJ`O@<aKW+_Kn0fv@Bk6*W-e0ytt1Of7b8o`@Hvyo*Ui%E`Fom
zSu@>n#%PT_gXOCC4&K<%%!o7LgiE*Mqt4u(;VIDc&kcFYXb|r=Gk{+Myu>ijJb197
zii_%ZMg5*uzZ|XRKk%2oXy~Yvo|*XomScG@ypH%9;)|T1N#DIVGG@}eri2HS349|+
z6TJcYiZIeN^>;14h*{uNfOApDQM6R~I2i~3CIGJiXVzcS{gaJ%NSi(-oNNx?@oCf_
zIO|LojeStBKh9mNc3?WQJZ{{l!RfgF&LQ2EKQ!vdKzumA%YerK4>7>-F;)I=hA$jn
zl*>K3Y{>YGb`IYl(k=WE_IaH?t2V=nu!A}J)8K2pasxNkL1}9GJ|m9BV~%Go_%vdb
zNAeP`%!BU;5(pm8I@j}$8}gS)-}oXLwK1`NSl^-azMt6-+jgL#r@7<4uw~@A3Y>+%
z2VI~}GZU60jXTI*{=|Ovt9MQ2Ghxw52}d9M>cvm&xIqGw3D=|Ak&Ws{Kk{n-lcrwL
zghv7I2Yi|V#)s!y8t{1&ZtThC-2uFw%ZOh?d{OU5*t^VYp_=z?Fy8Qe*u(!p0}uB)
zn0Vi7$hE7$I|RJaKQwqa;~X(FCp?CxZk=~|er6?%`sY8x_s4YSG5;r!rw4f^{<OiP
z={_N*oQHVEi2`Rf)R1G<{D!Q+YJD|ajFSV72RPRd#yYtpA8u!z>;F@5IOznwllNmx
z|50PyReA8sY4}kx&N6V~z`2TWqr4W?1ebRiIQBogcbz!t1ioJ2T>&1?(H6P@))URc
zhx3X7=NfRl41n#@ygLOR!KR3+?%yZ?uLwL}D;_G}ipNnC_;$}=e*F1QFLxF=8^HNl
z<*orQ4ZNRK?i|W>0(T*7@P4gy!I&qe&)`X(JI06SdmQOfNVmo?gFY$#9FN2J<`Lii
zk2l+^7+wW@74Qv&%@4!7AAo)t@IxjL|J>J;fF}S?G8}ejv#-y$^z{UyR)Dwu7sfu=
zO3%U6FsrlzoGZY&2Ar_Lv+Cz1lyc$>%iNY{q2)2(ec{-2wfrwbo5N&n>C3DV&lTUC
zKz`XsV~^Rm?Rt?{TXh{MUd@Rr(p>ou4INzT9s=9Mry442C^S95pLh`K2)MIg5zuzF
z{qX4oWu#_tVTq;9cUZrHTS@VLp>yVGgGFq-`EOR6uMOhF_fmH7^|kqLmYH>C5q#Oq
z<hX+C*V=L!y1Wxboo1s=d56a+1=tK=8H7>Kg(D4`b*VwKQi!SmFAKbjeF{(a&FT%{
z221_k#23_&CJSU^y#MK0+<OmKmqo*gd=1wa-gcC!k&dg*J@cYEs?>GHl)vRCTGJif
z@)ff;jjOlcfz+)cySRh~nElm{>+a_Y9k=w{dB^Gmsvmzyip&4`X8sv;5X(fT6aBy`
z0LKX&LYO~1x2u480Nc>;0RH{9vo5cGW;ykvm6nNv8^MnKX!SFmv1&ccVKPLL;Oq4{
z9FXP)akjZ2n0BoL&-Gt4^dTnQT<nd|Wy3<pTLNdRY(s9~&;RqrKHv0TP)BfZ8rz(i
zhr5_BGL`U(cBPQknY#Dd<MmwzP7FBfswJve_1<hcfXV$|flt=;N`?;vi)6>WeINHP
zecJO$@6j(hKJPrra+V}b*K#Rm11K2u+fVK-Y@IT6YzqHy7r&lHziWVx0)c<u^oaMM
zH6nTZ0;pU1ziG~OhD8C(0M@QILGdyvz><I&^MAE@^d0vs;U@Ez;S>u<R|Ed#jA2V_
zy^~MrU(_jD)>E14mcx9Zo%z7U&f$CLVaR9yE%rry9vOPm#(@^4LA5-$S#f$5>8>K3
z=f8to*_eM!Qj`M>FGD4ItM^JR@|u4IXP@%ltmuX7in}Z3YHiBey58=n?g0Y%N*^3P
ze$~{QmQn7;mz(=iJObZQz*_rq7_c?Km|kFg+}@WLTKjSlD2u?a06%NsD=jDM$J8Ms
z)t69T-R5VB{%mL^kdD`-8~I$%);6DWYUBewn-7NI<}hFtG#|KM(@1as>KEUyi*w+k
zP%h6+{_y`AU}eBs`}Hzl1;D;-zxsiH?O!zHqo$5f^{et<MZfZ`WR0Fw^R)4VdT_rM
zk<Y}B?v>9`?pJmbG^h8be)S;z<fEuJ(tDYR9_}^#2J{n}Jj2w1I(6PpSM>kg7P0fB
zxtAyIx%pXEnLuEtGYA9@WHz2ovg%2l4sJQH$8#=*I+ecxf2He_)IN5+H_&~zl_6iz
zpdtom)YLL6x~s<PF)0@R=gng`4A=r-=Ge`mylKD=0hUJ?eE>dV)A>lOb-Z=Ep<3@!
zeg^AEQ$iZMvCf-!4m9k{NBPzOn1%iFZH&O?`a$#G3V<CAMMsclv<O~N&$FqwRK9bH
z8&P^~<@?IVD_XPA#n#ObcA(k}QL?-Jap>#**M{wMLiq+BXY!-V_Vb9JLHwlN9}`E|
zMdg?tzYN$K;%5=>(D|mw?PuK^u70{R=x^WYS;86XYbl7l9RGV$AK?W&23QWTi+cWi
z*9nNIx-E)1s51?-k!}lVz31_=sa?W>QBxWX+;etb)D={l-YKzcDy__;>uPd}3Dj$K
z9{yJ4d)ti1fpZl&5#T8P!D75q<}IDMA4a?v@t%L#v~K~V`+orL13ael9f}^9eyg8a
z)j9?}uzZLSZIA#cXg5D1ugmz>kXQG=YUs!L{!ZS6ctcUH`f58;Y%a_$H!N@7@sdLD
z<_61n`zExcUTe4repY8$6+OK41P1C~Z(e8D0c!`Wb)9(ttD|1VUh*^78Osz&qzQ07
zcdQBCQ&pSHR~WL3*QT4pc#$=A#=72h_(|-4|98XBrn$zNcP^_nrc~)I$I5t1YdoS}
z{F%e|BJvYe^tC>2xAU7ipYZ;je1ae8X8xaF{C+lk5MzLH6@5hg`G4AgnPbKL?IFM_
zz)K<gv-kw2373KI`s<o`KV@@2TjWC-ice6lJLb)(*^&B|*4nQN$Sa1tW@|O`uCHcZ
z`oU)2)7WHn*F6o%#Z`Rk$RmY3e$jl`)k9dvH#hgM3ot)mt^Ml<%mdiB>0jOx)4-qp
z$-VaZZ_h6bKL!5!p85QAeu3xvIi&ae8|=;ce80;Y_Gy+M-Z|ghNLTxtU;KE`)0hW;
zyLmk9fTaOz9gi8n5`cZ1@nE{N4*a!S4ZE?TBaOpU$CzxIWQkp`TgZ^Q*0bdqd2xPW
z<TovDn*M*c&3Tj0{zCg%>jzos^B?)8kl!zS{y&5Huie~4UtECs0c-7VKVTlfzD<9t
z`49YQ%T3dsa9jU;yZO&_VR!-aANl;E`^AlN19Ee}1ON*H*4i&oz<hvx+kPnmf0q93
z`i0l^%wh0c$mi$X$1Wlr*?#f;nMb)<l-s(GRSZ~bf6@`G1K@p|{#-^s%mII+{pP=u
zeawNp+B<Ikf8NI~qdrOG5kMY!gWfVH2iKW~ZjKq^mvFTb-ej@@Mcawq4LEJ;jzExu
zS`ba89cS>Juk}kOj%>b0i1+=uqp-hp-_&*6hV5&a?+}1dmG!&;@e^wxb^ZtV4&cX-
z7Uh{f&!<@53w19Wt>KM%w2SRu?ETCdu?c+rNY~zTbJIOdP~Edfl+uH<-a7%DS>UX9
z;{jIE&clBg)c)vCw8P!o1D!`d{`;Eu?`fX|v`_z7`|OW2-ydp=pZm2hZfG~Y(EOik
zve(kty))7Y^S{Y&n8pLndwdc0zp<O9e_~S~*Yv18%%0b;eP%iLBlaEBn-A@)={Cng
zqIz$!5!3Y&YZ2#>_ci2wWh>gI^Q=u;)#QaXUwD8t{8_~}inN|>H%+-x)oY21Jk7OP
zMs0A1OS3v%NAIj0SB(7-F<N?k+K)kZKYr7^i(b`7$rcUP45G!ITZ<asMWhXEzj<p|
zm&Ka>r1X~1p5j_Fuwo5;CAVV&-|I-{nz*Uk%?*12{FhFe<IB2>0C0l9nK0!%rE7iH
zaE`p(>D6$xXV(V*t!KY{ndcqe8+(|aRT%}Ocka1q+N@{QdGRYv-^yW>K}#6t$(x(b
z3$a`~ZomTwV{YAH?_}@-zKg(1ApM%Y{(kQFBk`EJkVk&s%{%Xc_&MK?^yb&EeQr7S
zwek<jBhTUKo3|X>Q9$E7>pk9)bmi{n2c1Ydc^r2^9J_fdzNeYb5?*-3(p9VQ_dUFN
z@#9XmMZaN?7=2YSk!ikBsWk-?8aS;W1zzOyKWZE}+9hk+msusr%OS#8s+X<tTnM8c
zj!U3BdOz#)jMc5mPx)wX#>zgcXvhNSTa)ugO5HEIjP$v8Zr+M8ph<^}b6Rge^UO+h
z-NeRpZhRT%Yu~+tZW;I&H{tXCxB~nd@YT5{Pyt?KYF%<2kM<VmGrYV|uUum-a5+w-
zoA{-hx2AO(rqWsd0855xp(UmQ#_NsLdQ0Lyr`Zqm`9>fAR<kW^9s54em0yy2Nu?e_
z8Qgz$q+9y|_ASsHx~kGO*D8F&e;G*)A5C^|Xq>e`Qf2p;IRX9Zhc`|Cb4AB>f2PGQ
z_z$X%<9@h^`;{`lV;vRkZI+|Xbll@y!bPO>Bi-6Z;BPsdt(i_8KRELVo%zae@@P<4
z?%^X}HJ$(YstDziWl&&_Kic`#a@Vo1aFBu9!TnuDJ1UNwrr%`KhXkgAmV>^GuG>FP
zO0n@9;CmQg&KvG)_?zhzRL^$>croA^_qjN9|NL_Xv1z&d0ogF!xeom4fA8iU=OVp;
zuL6FF%QHTc_z!dbfO{DRy}Y{DqUAl14CZ{Zz?*g6Y`j~>gqHzd1Dwam{IEWXPGMaE
zeuaUi--McV`n!}S5nn+3Y)d>g4>jIg-Xh|~Z-M@Eyz$}st^?i<_@usGb=rHqNqZU9
zjjt1U6TfrwRzb%r7`iBCThzI6<$9>DLBFU}cP)Cm!acQ6&?YMz$}httauh}<SW)16
z$-gI{XJ!T7sfLbFSKo1Uludbf1$*=Ff^IUv7;ohy3;VD#yy>e7t~+Xp2*z7RnmE!x
z1m`qL*27)h&|YtTKi*j=q&{h1g0u0-78<EfS{?g#s;X$@rLX>ly4+xiU6+sIJ-YB}
zKGKEP-sA0<a9P&pUmA6|=DumZ|BvtcX2*Y?si^t$t=B)RI@f`}@^?1#jfVTHaYqMC
zmC7J}LDAq}hWpUjmRcK*X?I*_$pgo=#wie{=Zjxvl}d4uACK{)PSV8&y2^1H`}-fD
zudS{9Rv9*xizZ8YUYUS@85Za>&5g>WqPX$_HUjwA@_Y8WECJJEj4T)MEuxHsx53{-
z|Axxx7kM@mgr?H`LT5wnHd#R>drzN%o#2z3=GnNGJd~!idFjNN+g^SA;%(1HovtCj
zGV&|nndeLM6*<if|MVsm$@xuBOwZ%U!}Te68-30xo(*$uOusM6Jag~`uF}QX{>>^i
z;X?X4($9Wz^VYRZeIKx!eQ)m6uP9^u*>8^IVg1L}YVyjwuiuGnj=sgox0Eh*;f0V#
z@<+NXi~J8|o^IX8MRah)*DsfwKwVtV;(YHPgU>@4*-jj8u_rJnhHn@+cHk`P^^M@1
z5)UMgp>iHL!5$cA@j@YXx=^Fn8<DNciP7=mR=fa|HPg5aOSd$!8Je#S<%{b%{A(r{
zukqAZFSm&?*e=Bw&wiOj?eWlxfS16l6Dv)Vm7)LUvAVPh9{Eo&&#||meQK=OmA7#n
zjZ)v>Jw{(>?}7B1U98UIFCa+>=?g*Z-8zj_^abe~_iC79#Whv;oi#-ol?T)2GV<{K
zsZj?!^M~m)oy7$DN06boZYz4-_>>s4A6E=tMBXQ6fH(hVH}!jCpV!X-@NF23$NTCE
z;&X^EA<SdQ0-!pN!1pfbG}G_|GWI{<hyL8y&o~V}{rGwTpA8%PkpT+<<_2s6&-|Id
zHx8H&uqXq-VuIdny3~kq3c#8E$2U!T!d-FbIrJ@Xc#hpGpK0J+|BIXYU1FH_x0mHa
z(iPy;fK%7USdG!K-pYbG1>qC}YZOicU=E(Rfj3z48;tcsEM4ji#VU+_0e+m!zViC2
zEZn{t)g)$)8Q36V{32rWzzXWHh;J74xDvUkzX!L$_uqYY!E3ngW*Sxbj6aX|{8M9I
zH1cV_S-Ex2{h&#eH*wxPzb+!5?*I6vd1qIPJ{TTk#(QYyfaeCD19--Gw&3ZfP?@`5
z+e8KR_9l@|#6ZV3*@7!-?=}10+(#_`?CuridUl_~{QggWc0K2S7XjYSQ%}zSGUuPT
zX`XX#Y2R9-ADC8nIe*|K5XKb1USqztqiNiLG``kpSos<o70`M8WRZUMpWW2`_3+F(
zs}f)Z!0IiuUTuN8p^t}BUG25lTWC`><iEaqKQSGcdja}~e~!J2=lQZO=e%Xm0iJ*7
z5Wo6gf)Cd3Bvk8Q)BRt%+8g(vs*?WtZZpt{eEi7A`z3Ur`aP<A2O$VJ)=%>lznsAZ
z_Cc`te*85~hw5`rr~Ls-E2cRCI1AkH4<4}VP4)Y{9{&2rD~z(Fo|eETa;`f6F!>_*
z)30xu_kUhF%3{TFexcD(R=7aH@f@}Wu%<scX)w2^)XTLw5^va6_Vi20Bab|oPGU@z
z%wh7-69BmoUqU>u12Z0+8|!EkpUwRq22Kq)JV$_|{OMtHY{*?{#M^&-)4bQ9sl!p8
z!7LYbZSeJxP%%BLJ6jv{|2*WIZyIGQy3H~bCxA$-^5=Tb0Ph;`%6j>#4T>*j4=Z&+
zK;u}kl2g}#KbLRFD+*uT8;%>V&o-`7(66r6?>kufip%jLod@Zz>*bjHh;i-<zSU-@
zAbuF%B=8HsSMt(Xy<e^Yo(FvSzrT4a+(M7lbYE0F0CNk_iGEIR>03X>9F10Fx2v)9
z^PE_2`loaqZwa@;kLk?8kH1E_)A+8fp|Ac2tO110dk9!|;663SouhcXoxm*s*U)jT
z-tGMDk=y7V(~~&TrT!;F&TI9zJ=v5?7l2pf{DFt7z<J&%nO{HBuM`tZR@I#xO~TE0
z`!%09kLe4r&lDT7|805jh2$nP-Wmqise@IYTt*)A{|j{8Mm<bFVy}h;X>J54YXV;%
zaC86Lz1zm~Bo3VR67n<n-=^<x(@)<L{lvoW8)mvx27d4_F&_{%*O-3!I*UlWNX#~{
zg4YZ;t~=mVYAw&b1pRjz`zr&Cb=Z2Y<s9M@h;QYC)LGu<`(Ah|=o}HUn84SCG}r&n
zo3}O)HtVJ&x0Z7)Vc^7ob4ABd>q4DtG4v1<fM<Y1{}Q?+#<|P67N#9EfcgW+i*-T&
z<kvTs$EHZVX3g`4YUL^Vq3e5*{>uLaeITcItMqC<DE$sAk@WOUEjh~M`Fi<f(67o(
z^L~lh+g`m041GO&f#>;GH*bwAi2lRjFyKDGdF;)8H`fx=fi&V{h*va}aqwYy5%2=w
zyf>O3hSvcv0d6;e_~&wl*P$P}M>$;f9OC=`HSAfO&RBP_OR%F2h&7xq)jvn-?Y;>7
z1>kevw~TEApTS%oH}KYgcaZ_chv7lM6MzTN-{yzmalkKCZ|Y|*j0mn@7Vr$<K879c
zO<>>LbOAuC11ICtE2!UJA%7iTr|Z3$e!i)vcb1i++^WOs;1G}F9Pl&1H_n}U<Xv7c
z#CYq#Tdp<u>IpU87dGpExE)U56@Yh%%QxsZ&v8GezX`pQPA?*82Qxw}BPnC<2|jwi
z!f!JBp4xvQ_x&hm$bF5sm$4@Zr{JWk3QfJFnB}hLpg!UI$&rhCKQFJD{#UVn{tb9u
zu1l+~4;qwHE$@)yd2$H2bHFvmRjmPYKb}DRI^tImzk)FGQu{Hk9tBF%KivTwCvXCc
zgO3wmFJS$3z<9ikbWk6+bDhuNb+zi+(j#AJXg}KW2Fn7h_<%gH3};=YTo^Cl->wJX
zE;tNq>?JxnUgxO}U!wh98(xWvoN<Z4;V)1ww`u$}$WDLLp!wiex%;^m$2e={2!hdg
z>u!7~kLx<pr;vUDVe`ZD?JD3Ez-tUN_9OHC+bue1m4xwwz)$>bgOA8G=CiuS0Vn)h
z_Ku6d&jNq;7W9t#zTi;zO{+Wf_#V8YH`@GGc9CESS*KLXzK+j2mp<+Kq}%c<u$$qE
zn@_qw?fR_K*Rf=rH0|O`lvqE|#e81wM}o^aw1NG{@{>(x_>UR=Zce*ZT-E)l^%ZFC
zFgDmqc#5h*?=e1n4FNPjNTZss`1v5pDWIIN4pOifVAtekSQ;=pZH5&9i`)jQ0=8=X
zNn_42U2K0H{3&3qWsC!MwQVzO7O-L4X4oQN;oD$qfUUG|#=8ty5wK88I~;&HJ2vBa
z0UPi9iO&B4m+Kc|JiwT*<By_$fRzB7)j<t-7I4vZC%g=}{Vs5N1M}rB@NvMG?*g9#
zeB&<g6~M0n&UD25a6K;q?g5<VviV{7b-+V+fqMZ@+yx#6Ja?D;lYm$5f}aPxz5C8`
ztAJ131>XH8_%pz7um2?At9QXa1o)-9;GYBBaTol{fcx$OcLE-{4bFY#2RsG1=)r?Q
zi{&6+7s30{2gbkNql};C{KtM`>e$piX5O2npP@U_IJe96y$<}+)}P!ew5$9T{r=&{
zZI;z9EiNPT?|j^L_Dhp*KlyRn;V&)g5c|Ho%)w<2o&UHE%qw2n@#TwvLB)*_vQzut
zMfA^}pO|vIst?<jxb~)gjpu<Acw+J=I$wup{_y_d=k$Q{o*-V<<(eagK8|^oIO5ZY
zU*LVhaz;l$kk@byah1J4(ch&D9zfk4z$b{faPy$?QSZpdTaNg9ZuB1ibm)`eb6@m*
z-VcX;czi%2f}WG_8Q^OM_-=v290^0dF6kPs`iuv9s6Vx0AMIrH#jaz<zy8dJ#TgD3
z$v5!Xpvn?;<<G5K+U;MuOq<|+msZebjlgz<EEqB*8E|O8acfk=3X>l6!(H<Ew}B1#
zB>8$oscRL#xgHe8b-mG}Q9BK5-0%E+OY56Ol*7VxOIq}5D^Oh{2VSOTfNrnJ-UXnp
zliMn;lDkcmG|E_on+}EAM7#}A#Wq3^*^dXcd6mDn9UfR4*y5~<2*zwI+8Rxsm`94M
zRI+g&x!Z-$LUo&n5>?wo(WcjlarcKc@^*@>wwUk4wnFJnT&hZ;4!j0#8NZ%RhNL>1
z3A!f`UZgd=uR;|zvW|Zb%D|gIHA>-Ka7OcXb8{|}y8}J3lIRc>>DBnb=F{+0>(G<$
zFY=hB<!a3)f<%sXk*B1Fhfo_=HO*D6+SUL-Wk+2asDFa$TGEF5`VkduZ$}VOz1-dn
zf)G>S3;`M9L0F)OCN2@qc>9fN{mMKDnp2}(2fPl+*NIwBAY9e@L!H87p-P9yS_t8y
zg{qyxDLIUBuXKut6*-oy<n0i3D@8g*u8p&)wo$r61Z>>Yl#K#tf{h9t!qrjI$3xX^
zooj*#pz79f4*wyuqKELXPFYP{Ay0F9jB$(35ybSX6vQOg$OVDPXvOf1N>kPZ=6nDz
z8a3cU3}2xX=LN-c)BxXC<+9Qc?bB_dEGcFaVe;@p(n@)oaB^SzZQ}r-=f+cvjrj-l
zAQHygu$su(CSp7b5&xJ&n+UgajgXJmLI?*e<meDZIgc=g(b>U$gRrw5NkZ*T4Pm65
zPH@f`AveZPBY(SaS*VP8DbIn?C5qcb796@NrQfG5t6D_4dHM?P8%J`~u7FqkNxd?E
zsui@=!UU!l1$T&K+iYN$sJD@Gmxy-e2@k<OO79SbJ`UIV7^&XRNTERvR|e<v<03Ld
z)t#a=Oo0jE8KLNI;U6LAZs8bR08V<8>bpc`l+wu5&Z#2X$TJ}_+bFqH<hN02Ld3SC
zI=Ssvk#S-tg82z9FS(1cQ@aRdp!q-Vm#*n;y#3#rGa7%l46QEiW0ZD#;KqQ~mdEVf
zA~7vLWKsp%^{6(n0`#jCwpufwoMa7J*kd6^6t!CYJmaOXe5mR80jzQ_zMI-|W4|`!
zlk>$<Ezn-+jgMMuqlDj<Wa1LitT)pUlLq8Li~N6ML~BFQ35&D{qnv5Ry|G>E@@f<%
zYmtDbBK2yB_GVt2>+<vW@z0kYb+wf(i9TFFY*zOA@88xRKfMlC&|`gg9L938y6!QW
zR?KvTdapWKL9gyaP~$qHQ9q40DhXKe_qb2*gr^y<*Ll#6?9R~@fo_M=O+yGV3c5;{
znaX38Y6xu_|DWF8Z-;whOtZPHg|=j$wRM~)nsxhW`B-x;I~pTeD`qD<jUKW(i~t$?
z7G2W2?)K-t>kDYQq&kSLWImGjck3l8Xd0Hq-JZ?%V;$_kc3<m|PU{4IUF{Qr4w-6a
zh@+E#o9oU@bLamM@2{7z2VzZPOK=<29%k@W%4kgR3mWg|YUF!($R_C$vpshQj0Uue
zg*M^fNtTjciE#M#?sD>O%x$}~KL3A!S+QTM%30ME<N^LE0l$IVT61g3=&x2FhxaRN
zEHoE3D+~ELL>!zFm?@dDB-=&B#t&YDS?OCRuvphAs)@W&NZ$g5En;J}rZrf-&e_>?
zbKtm;J|?kF&5munXw+k58K5W_kTwyuQqIc!j%wnr4KVX1jVe}V6pI87kHZDxaGB{b
zXE=@jWuI1UPK3UhRkb+dc#AR*HRkP@Hh>px#-x^(l$TnO!NweJj`Q3Gpr}X&Y>UQB
z4SFHf$z|6%MM)MkcbD+AF>mAIUI=#*0I0(FGK8kEww$-}=3hh&EddK25=J{lE^S~J
z)F?^V<FD07=blu(un%Q43QJ=_>GQ7RI@%qyT)`999X$0cT{JP6ZuKNIw>8_Lfu)Fa
zm}^mQ2eUU|Ig)bG(<wqkF)*%eQ42t2uCu$70FQSv4r>02OS=Yc2ZP;%gB^&^TgcTT
z{Irno!rQQ^*v&(NaKcK(9=v~xV=+9L9+7IJK({D>?E`*0<J8-cfv+>EA?)u)7zHdc
zcXzcPtReamPRkYwf}gffRB_ngw!N4}Wjt7!MT)i&!eEz@oubOQ1v(hO8U4He^8S^y
z1hkwL#K`ht3KELy?`Byv0|kmI8}w{@89ZLE%t(s#Nf%9q`XnY|qE|Y&sSR?5@j9VB
z7PC;^E-RL~tX+aZsgKGEI&IAAu~B%;nz7}zqTTB4MMC!=V@8Jv0M5k1+xj81F5pva
zQO&OvE#~kef6SSpW)Cz$X5aKoVn14>t2i%&oKf)+W~ade<%l`d3LLBGXGEA;ecOMU
z*E5{plCFSr;+-*S#ak!|FTTxb<gr3~_U&;x16*}ASGeQxxpm`p?HnXC->CEvg|}!~
zqVg75ql?86nXpl4RL0xMW0#mKF1yTkbUW-4bG<k!U7Zx&A_GI5Dm_H`QCS_L$f(SX
zP<0D;sKG*^jJ=vYEU9LdSqV{7f`fKgrK^p9H{os9hN3d7g={iprA(WQ*eGgipxnCQ
z(zN$CC_g2!rYch!2xxpthQVp>m5`Qdd!?uCnt!jXv{QOgV!^~GWwDbS`=q~%GLtgi
zL&<$I)Q3K(^;3SI<{Kc-lq?M#a!kqG;EHQXriLkpq{HOjZgr27cb_cpA<v|0j^zi?
zSN>+pJihUS_E6G7IlFYo#f)9nB&F;!O%y;+S;;Xfoo$z#cIoM*s9pL7QLfqCpJUBg
z6L;a-)NZ^=*BX=Y%oTP|N4F)WguBgc$xew#hl5+%<B)g=kEHOB9iK$Fv>lBXVF(LT
zqPUBSQ=+nq3RA*0Nu?<fp8}$yixV_!E)2CUKt|H-Cd6F3SVQT~j8^DwMBLUkYspv^
zRtFQE+hQBfT;`b84MLukG9<}Gje+NR%5(#K`XCt5VuwVp$2%n?Ghb&D>y|-B+=DV;
z>Bd`3qLRFWvLx;P0hwa@Z1z5vg}GMHsA`j-CS{wfTKtwk%UrvqZR5okgoJM84Hvx^
z0CBQH1)?|NXGC+22ZFrZu;rI65JG(@oq;h+1ahatM!1tSU|Z1ZGI*WhR?TAxX(g)+
zw-J6Dl|>?ZTEk9{eTPEe9<Wc_gb(vVPdjjl@|_y?5Pzox8-Z{msnKtKP5T4w;&^dP
z)-2>5lgOt$#-!6ZCX14)V=_SG2Ar4>VAt`CN>ngymu`>%yDZrz0f~34f#8O_I5yc$
z^(`{nO@$E|=v|H?c98HJ9O76=xrnW+aB-C3PCLVcb`Cqn2>IMz$1$zPNms*NGHwgV
ze9N$6tU!}%Aa=5uNS_ZEw9}UfuOum9;SFmMo@a65pu_6ZBEvG(HtZUf-gX9I7cCD-
zPZx!TWu%K7L(<Vp#UY7(A~_`M0~Z0=RHuQsWg2XT6Fan3_)QV2U@S(f8PL19Wm~(V
z&yNONpKB3lFFLf0r90CO);MYLG?{d?g<2AgEK-%Arty&gxy*vAF=ku`D<ZR2C@6T`
z2ekHKn$%WN8mg^ekf4HE&5FqpYv(Bfi9k)cJz&|>T_TC41-?V0Ko=`9l3lDo33dt)
zM}@XCgq;w0-~&sYqSBV)hg26QEf^>-Bp|aF#)RtMF;TN&2H|~&R3GD90;3|{vxcx|
zkTQ0W9AS8Pi~6;rjI^DDp)pPr9-|17juCQ02aJc9AxjW14PX0oa7dIpb4cPJhNc?v
z|CtuYo;M4<nTO&Bm@#raERr_<O>`A(0Of}$@UVyuQ~Y5O7$MJ`@NS{(0pS}Z#{p5Z
zQ}TdFk8xrY>bYO|wo&{MQNiy4;TWgdBf`I(0&^k);`oS&?Z{bDvm(EX>IXz%_k7_I
z9JS(%a{FfhFWyhNhlOW`0ME?W@f&-9B9DmL15|lfgl9R^<SgnRJHWx(0YV})qaUq+
zvjmy~ieND43yT1yEN)A!13JG$(1J$VDA*-3paNizu?#U7Hb`|M+QH#m2Zb>%N?%$w
z#-*QWl~>DXZkTHB*e<|}b$J--2mNR=!>G@|B}fWjzA4c!YF0N+Kmy3$F7QAFm^BR2
zZG!dx8>h9S(8i?(C3sCJDB_YzgVG66(lx}}x_>~cw=H`6HE$Q;H{3goU&jFD2Bdd@
zQbRI1(2uaW+PJuo#U6k}WUew)R8^%brzN@GU5kyHJ$a6`%yn%gYh!Jp-wNrO5JpuY
za6<3wvGEL!GKFM#p7V6IbI@p8>%ZLx<vA3N7FL9(h>C5PTj)f_xdl0c?}o1-pNq_w
z*DpftN5Stx?Hbn{mqZn7<4wF4t_Gv22db!xqP~stuZz?;x!x4<?Ua2}6t|P(qDb#T
zC2G4jfS%e5HKQo*=cK_IfXg$Ke@E12sQ8XZK5(`6mT*0E8EwYQc~|5fwwGST4O8TO
zRiqvz*K4Bi=z8r{k$apWo_X@VCc^WSeqChd$@jW&Jwd5=MdAtayek4vlK;CR_f(!d
zmvLZ~Jnx9&Q3|{xT#FQbTR4uP@Dl$7mhqD~LC$w^)`!aPh{Q>%yo2*Rl)WUvr`(n*
z9?nqdl5jmos9*6pieD1J^Bj)7#J`1?$^EXVzD&i}MDbMzM%McVH?a5ya(2GS!PJ`<
zG4tPI?CM*9*1x-eE)2a*nRi6`9j;>RU4WDCGDi8`NdWM<b>k`R0OXo{5AXKn9^S6-
zzQsCbT(^u_gA$-@2S3!hIJ(-yzvj&1^w6nHP}Q9E7*;E&sv2LHwpz!?m0*Q90GkHo
z?-SLINywVr987k1W5~KwT5?t-`^XPsFqDC(Z)#gi;=wyX<p)G$f;<mE1?#r}<lNJb
z#C!T(`*G!UnkUXQC(G@hM0URWI2^lg6+FfLH4Z0cxftgGl!#g>F@3#aNwYQx^+O90
zM8xHbp!%Q~p6y^j*bTpK%UQGAMXKL#sq7H`A;N=qcrv#`B!(%pQ)GrIwp~<4+*)Ou
zaE&I=#Ns$3xwjJ%M7L99r||AT8POe+00(z6IJ}cfKza8;ys31<xRTH^eaui+`b4mc
zf6LtjNSN8@bRPrM_;{uEH<oH!sl$C(rUxi~O6CVBc1o59D0&L}Dn(97h+*kd(mzP4
zQ!+eA$y3ZNBu>fnAQg|x{2*nI%h<5b5_?7lMya}JbB$4T$p&&AUb5A<&W2Ce0^_s6
zleYZ!6@)80379pEz)3B!o5P;{4h_+n`zd+M=ARkPoU#QTq|mZ0`(VFs$yRyr5+J3A
z8RC6}qRY1WBOLZTN|nR5=%a+Rg+~cE!N)jUetZ?Nd916Ww!jmNnS6p`CvA==ujWtL
z>IW&eY;!)vn4zZ^0Es@M!V6rL)B>R=N(&5e9p=WQ4s%7zhY6Ueqg+a5aT>9SV}!<3
zkEvQMDfkk_j@zQgDSq7MTxNK1S><zra}J$Y=Z-kZ@Y2a;K<cN+v0~%dE+N`pf6pQu
z_^NTar9o(Pz>rIriAwB)(CD(Tq6DU&lm&J@4ED?#2J;Gm;6d9Og;^KUEF3Ojkb)}!
zC?l~NDFl^@v1A68U04D+Z2RB|I-ny|W!*TeJzfD@u~Wku_3e~VDpPu=%ysjF7h}Iu
z1_sHwL%PN}?A^(~shu2auGCvMk{0bhvbezauSzIZ>d#7_jS{Pn<*HhCmHD>9v#bmV
zuF6C=c~)h#XCZY~I(sR$Ducb`J0&Z<X$_!!KP68}_W)Hf35VtY$zt0-E(==;CpY5T
zt^krAr{WpunjS_tazFV_N=%*LX<579YxSR&;RBRek@bfue?ofZsJ1MFk8(Kw7&)Jn
zrN=3;ECchifW)5UOiNEv^jYaTNcod8dXN&QW#AAY>*yiMoROJBgd<bcLsU2|V^5Ro
zq|7~yk(c$SsdPft79tj8ms#Qjp%aASy{EW<$|(+qS2&!8rR}Wron}bnSq|r)C3H*d
zEQifb#9&}duYkh?{k7P$c2<Sqw`8T%xCnJpZo9~JPGq(VR~N;%<Auf$a|L(^oYeMo
zQ)yfTvBbyKLf<N)J>=LX61^1PCi1-$+$Q2MaBUT-K8O$^2fAYyo-q`KGVk^62Qgs@
zXeQRi5|6^Qg5A&q84e%_S!`gAvK9^V)MJqujW>{HqmX|$vyT%rCwRWz<+&eHS!Gy2
z@P`aMqT@VzIoT2H7nM$`_X&3wxqAipet$2l>g4JZF3e6)vu+CX3n$aGSl>0EtNLI*
zgI~w{fAf}@mctH%UB5?0+R4!i(S*a0e-JKoLq8`2=%`+ajzZY1HR|}l231G|xdZCZ
zda7jwe*v%>USdsP3~D3E%A=~@4d{nQwfn%T#~|No_E5V7ABZp*7=&Rsjdt*w@O8*q
zJ9Nd3qPRbPj~uYB|AxlJx$&0;E11APgcm>lz`px`Qxje+9Q@^aLR$HEfZIp4>!Q+k
zjUS-FsiWI#LzKf`cvwA^hpGBo8ne?C<l@^xRbW=P*~`BVweuc(8c&%$<iww6lK9EF
zS3TvXiBW3Pvt^VAHaYg&nkddVwb<`zB65K0fF>WN9P+NrQN{%=_oLVODeyRPio)Zn
z_`p1c@RWaInbXyt%upRT?xR$5qBe`;VU&?tURFh&AbyISEZaD;_Pj!k!m9ndXdC{J
zF!{ovES{1ts;9`y6hy(vS1TH)NM5Au4@KlH@}l{rOH@RS{co$M;AILSdH9zivJTA5
zuU54<o>NzeAM@`MKb3x<nw<F|hP&{QYMKLM!Wdcna~GF?17=S=mwr=I?W#KU_~>uz
z@B;o(ht%&t#|-p<3utIl8vk7VI{rC%@OP0N;Kkq5Ce`!r1CHks|0DihYq1rs)JNy&
zy1p}D0<}i=s|5<K7xwZXuPC)9pyvr%9FQ6{6rnyywuKdwm;9Qe8#CJ95$$H$p=z*j
zg%$EpS2}GX0zFF`^DwabJE6I0W3>vjAJ}2MHr`>PfP<BX7Y5uPth~RdJo*;#f6b+N
zE$lF&mkE94c^7!2*R%u{&ufr6DEgWVv{B?W2{t9R4t0db7J5y_wt#b%;Cb-t-NV1Z
zLuCzr>1Pub{6*IZSkYJK@Ed%M!;Q6j!)?+23Pgyapubp;%Q9u5$g+fK$G0p|dg&Nz
zsIn{2XWCt0cp#0Qwqb?lPT8<R-KT9)8+lIK;G^L^Z7V@`J86SuCw1Bu=vo23yPLeH
zq^GCfaY80W2oV1ks+^SBEfimokR-AvWM-87Cu9VwlG8TV_NqkU^d2gnklwwVpt6^e
zOVYoO{AXljAC*tb&=iHw$odo^Q|Eo%!1v!rj+3^^eOz$n0jGw)$U~es`G`lR7G>^W
zr5%68V}#$tQnd{T+y~4{Ec}v14CBimjPtKy2o)Ea91#`F(qVRBDGl)mI=1lO#D`d(
zErJ9?CQJ`Av5yW3bc1UP3$O8E5p5^m76CO}Zb-mLSsW3OPRfqJV~_kp!q-cILE#&6
zqeyfKazMGvyU#4U8}`uVG~Im()xq+CVZ{v+*UJ_Z(Dy)F(wa9MrcmpjwQFqmV1-#&
zg&Kg@nhHa!Q#3emln=YarFFj*)-O9$)ev?OjziZ(vJN#<tAbL|Ztj^uEoAAg56FUL
zGCn9h5K0GSl@@Y?vSPJEN)BP49c)ZB)wdP+Pe4SqQF$L+W2ihWA}|I{vwEXC&5I#D
z1<xc(OvA_&g!ZR6IE=7+7+nw=CJzvYDKaGr;QOZqRM(Md;TxgwG&(Y<`SG_c4W=zT
zS>=cD6!a|Iw->Z$%bHiqJ|+XwXK_8w8uakvQ2Qkb5ANPs#Ds<e8b54_YpKU&)E?}`
zQ}{u`L+L@r4$Ri90EHfBP-Fe*<HXv}9B$;$u6b}rfyqEtv64u5<vg?tVL}ryP6J>s
zT_iGcE)Is%0PebiNDNRNAkD2I#>FunnnVzyy-GP9;CY$W4nZ;tTAVQ12@nK4s9efz
z>j1!hp>X@LpdssOb7kxkOiobp`xsN`VkO1LVTh&bILlp5NKZs*a7^teTsYvx2(KD<
zKf?L`1q5RQ^U-Yr`uxl`0kZ)hP(Fpnp{yeRxX57~wu;gS6%ihtKx~S+q|z9rwhG@?
zKe`EJ-*8&Ang&k00yfb?I4_K<gwM)^H7)(m$pmCtaG+Q%D-!m^JXqOomaW`9gk#Ft
z9((qb4E2&5$$H6o7Q8PL5YMn*ORq{db4z7A<<82$7*)V^Lc}{M%R9SECuM4aT;M$?
z5?T#h?`|rt%F=G;B^`U1DrNWhv<isOK8H+#wA{y;1ZUz5^FBzZS>++_lX-?m=b7Z>
zp5So#$z|YsA#*&Zxt`%d<Ihm~jC3CXdU%lmWw5W$$?~%Rm{Wzv;HQ0iCxCpBus%SC
z)rhISdrI3ImPuQ*U#oW!e!;v3+N|Y14nqcY4cc-8lpg>!V_GIYz%FvhA`aoJ`u>*2
zD?i`H8&d?1WlFCfg|nKq;jmzh8Pl+}c2-PYRf#!fL$Q-Vr<8>Cpk27Jdvyp05yYbm
z>}YK)IAd3X6$rbX(^f)*(bP7NoKNXe{Z-_U*5;i%p|9)C?|@m>UfltWlHI*i#JefB
zLqN0vJlM|=D9;cs4p0#S{Ge0ALwtz5@FW{5Tkzl=yNqAwR!Tt^ur<o@zVUwiMp@3s
z=hlt4wO63COF{{6p@f}xv?|;Dd>TLr>!s=z*7YM?hgcW4OLT0^F1<a(VF+1v8R>Uf
z@sJ(ihw8{8!thjs*{fn_NMlG*Rz%bOfd;0xFa?bTrKVVGgD_NdFtmZ0W;piDY3YR|
zIW6H}i7;3Vz%v~=nFDG+KX?X~5oRF{Vd!+HWo6`AX-d{dIUKWtEFr}<e><=odl?qk
z%f&_a+5su-g*i)B72LUR0r1>DhE(<uV)NK3ry8|3=3&Pqx+`x?wMnRC(JFWgR-iDa
z<zg344=70^?GTmO2oH$rTlnJyU?%8>@uouAZV73_+0D`_!jKeN=R0hnTdqSU*RWaC
zAnWjqN`jwZdo!l0?>o&onx<)7ylqWr@C2x}vF<+8#a;o*`mf3@Yg$fI>LM6H-RDKN
zor2F}k4<Wc=OmP`?loELB7`BomDWV9mkMjb-PfI3!@PoeiTV8UAsaMC-WRRuZDpJH
zyhu+iC)R|2n&K~t%zn6bf^i=QJoj)~LqvX#axaL$V^mucrN=y4WsQkJ?Hq1)rqFre
zJ4Qe%Epe-kbFPq90jQi^MJ)o)0~|X?@pGbjj=|X%2<cttIqX{FipDM|^b0_QBi@JF
z58$U4zi1ILd@-*qS`c<Ra=jt5mdl<uV6a+qyutDieiH*!dtFwcV1AtyPO;ZzbdUnC
zOYaaRUz3R;!kHA%>EZ^qHNsgPNHyVCc{;~mlc3h+SEa{J&J9_zQ)ELX#t7$Hs#_@t
z_7O$`<PUc04Vif$s)aUWe3m?~%J3W&knAx^phENHL}5=*U_*MJybPS+(-cDDXDEx<
zXQ=kF^c<!-;77>!hIAh%;AD<d^>vv$4h^pKpKw_K%AI1qwz^_RxOm#fpzx|oD{V-K
zGyd0Q1q$%jWgQ*(icG&S&f%9R{i-a#Op#Y)euJ}ZEJkBqA3~=^x|z~BdqkD^7h7nk
z2lFbSA;R4`3{bMujxY>42t%|5neX9L$m8%zScZGqLnYbAbFtLRTpgt7bh{n!YNs7x
zNY^3O63zeuQ#&9qd;?NsPYir+-H2PXKevDi#g1FC1E-E#A>rm1tVKAu9Jji$<sG-e
zu7Pk2%G~4DL>GmRTQP&{$E~%V8Ne}*vxlvqgViOg6Y9hzYhsW}&scp!3y$N~`Vje!
zSYZOnJY}tp5Fp^Ilh0UFTlx`(Lv8q&HDxEqF>7QiITx&sZ4_IuhPP4rur)fKu+)!Q
z6FZ&KwP?-kqu61qdx}d=PEqKHwLC@nBUZ<K3<=#w<s;U_{h-6gt(h5$AGJmwpc<O+
zpsGB67p)Z)F3eKynALLticD+t0F{qf-4E9_)F%BX<rb}3s2h)1p|t1vEl}pLwRV)V
z$S&qA05v@n9j`ZhCtG(U4qL&psNLmfvAd&Dt%NlXR=EfRiggzL;{}5^8rfh8Eelzv
zjTvgijjBAy*YlW55PaaA7Uc+ViE!ZZnmgKoLx5c;7c8XEaaiFkIFE1{BAr#|`A|6k
zKplk$TCsz0jr%U+=^7>RN&)zA7;~elY5#}DJYNV(AXw5cVIO7p$lRlB2CY6Sk~HCi
zsm@BJ0|MmEJIAIShS(@F2g-aMVTc!z#|7A?%p8s^QRWfowLDt!5fSbo_roIFvs`)@
zq;D?ss3`Q4?-909B0+3R&H_+;46LuHY`u&yRF$yg1-BEz+3l2gMAWxa^f3|GLAl37
zeFxPZ6PcZbHbkc$7{;&jL9UGVAu2zjWgnu-tX4dL*2EuSu=CLwphO<yaQJb~6TQkG
z^u}MxYd$Ua1`d~y>mA{NkKP;H)p1yZtmJ!#PXLtP7QwdRBp^5e0CNd;&^NIQQ4Ut7
zc5=TVO4vK!U?o@nb#8a@b%9k=-C&ImAkl6Lzb;^`_g{oXgAx}-xpxupOdrMG5cR&I
z1rNdDkcK}fc_MF%)E4r;Exe=Tds~D@$@{i)O}``xqf~kuOl(mryvp{{+AE>}<`E{P
zJ#54Z?;-b_qOgY&Z;IG{DqIw){gi!6V8O&-D!Pw?Z?VlQ`5lqMs(}IRA@ah)G)wMF
zA~s8f@8VrS3~?Wz^mhfcu(9uo%mJ#tB|Hyb2R!{~P{UvL2`aoI{7+K$6%jc|F=Tge
zIP@KnIJ6P?jtFA~y)G(?>j=ZV6@FRNkAX7cs!Q^`A`(kfdPU@qa}J(m@@<Ip35vfW
zQYWE75T%n8cujautsxvdO`g|8?ern!Q#-?X#-B}Tc<`R3z}uqo+<fdc+<C&`*bAIp
z_C+5dI{zv*1>xPm;OAbSL$cT<Zd37X24lP*zlfMC?8u=rp*aoPe8}R~!Z?$F)dDy;
zNIstcykOfbf<+r#Adxhnt;3&9K#)n=`6LFyC5t^j%8r;YzC(hE!|X06Ty{7a!Xt|f
zp}>SH2bggimFzh5c%=@#Z6}A*uwQOb^8yzAUY6wJy^I;_<5;lM2z&Y`fCERV*qCq+
zksn5X=mzZq`=-;*^8~wuoe?Wz3`Qk?+Si&i*?1rh%|Xh)%%?}LQM~ELs{E1{z?g~+
z3N-y+2Xc};P@GDF<mfiI^UgK4T9gd}I1WJ$921;eU?EO3X#-~vQ+9LJeFIoxS@05A
zXgK+2B>Et$xIFZBWmNdOpaD*zTSlRm@L-MldZ=O-ZtP=YtfK(O)SI+~(52u{M}&U>
z-Z8>8I0H|^p%v$-C=5|-iwF$c0T^K)2sp#JM@3Y1(<lKWHHy(r+c_P&V2hGTp+%|S
zm?>N`pdL0_wk4=7;<ahepW&ql>bO(VvY=Y=@G7d|(GHcNC{t2Q!eU1_#R=hom~9g^
zq9Al>pc|mPZ2m?`2cyhs#w}}3oWWx6Zgw$+XGa|_rd>+;fb&?kdBi3_QE(8cgAk5(
zuvZz9|E*j{atL9LBd8Aacp?w9W#Q=XTAa(wGvtrsP$~8?DARL5Ee%opY3SmsNFRjT
z&nXec{(DLtYdIz2cJiMR*o(cVM9xm`Q=$m2>!fgx*+VDUHzaV9sj=@Q%g&yY0u~(C
zNl_SsLQ9m#sCGg)wo>JUaDzWv5aq3eRJE<-KP+<N98Rf2GCRqCP-J1EeM-c4<J?aX
z<Y_?!_g;k>U>{YU5Yc_i-+K3Rk^m^xG2xxzaQFd=9}_t^b3DZ^9sUL3dyu>fBK9B^
zo)WnSDF^t2RC-DT9s;u=k`IypkSIMw^@GAS8_^t3i^KtP9b@9<I41H3sJ19d2dJ_r
zst3q-OgJ7U&oL2rm`aPH_%KzE3h!g+w8Udvdj9coEUG8S`HV<CL6Ij#_{n9|@*o8c
zisV769u(z+R68i5PgCM)QFwY1Y0}S-XF<3YIDO_YrH+W`Q3@Orm7@%a9V1l9u|#PM
z(h{t#0_LX7aZy{M+;QPpCJbR=nLH<i>jZgEh}a2OrbOWcl~0KLDJq`gDbPEI8ZPjX
zEE|h>j5q&PJAA`I&MZvM5QH*N&6u%8{IA)e(7T2cH#p<bk05q+6=_xMB{F^TI!8j2
z2RR(+F?oG3Q{tSK#$M<dumUy#*DolA9Z-@$tcK!PvL~LtcXmu(hahHT+CB*=vlbl3
z{!w;>=V;kfSl<=aq*ps<u=W?(TzZ)er{HH`3WY2f$D%Z7#qMR~2>!%v<qAe&-GSc-
zyU#~8ueIT))z3@C0j+gN>b4!Uv!6K|F9<lKuDIM#oxq)Heyu)Uz5on_wT+Y&<~ynp
zGXM(MjZVRdwHWBW@?zP=^?=tObYjY~6xPC;7kV=2A_#;4WL5b$`Ze%A1W^f??D^+t
zYAo5$y=xT*`eY6&Hl<-z?z*VKqD$I?Fcd<~J&vPoD9OVIPzybF7z<%(#jj(8yyI{&
zID~b+WgJ1QWY`wr*caZ;&IVlmh}PMU^9x#vCks}Y{z3i^aOGW^z0wN>2>ZQz;2I1K
zu5CO54Q@B#7fcF%!%T0H;CD41RE$S;h|ie1hM4X}hj~VLhe6HLT4aECgyJCh!W=&Y
zZ1C)Z9~pTDnNH;p-9e5)#U2jA$%BC7gag$e+PCN%<W}J~1|9T($n}zEfMu3IpUA>{
zVStG``T%;>0d7~yqWve9i}AL~qL#K%V3G9}wM7Z*Dj<nYiXD}OPD&k>=^l*sQ3(zc
z(UC3v2)m%SI4;wp>#pO_rc!KC=En*aJY>cxa$MFxyN*lecJdyR{+$fL3BSN`$^H(<
zq-$45!$S@#yJIr7Ckz2W`lmSFJ59(VJI!JEocNB*;C<r=yY7cn1e-Qhj>_1~A&#Bt
zcOI3V2gtoBU0_(@cJbhNd`X5M;&Az)6@=5XR}rospu&;_ZOSc47u=7Qr0?;?+LCn6
zgEUIGM&Rb~I?F9Ge2~-D4^ANez*FOBrvK?QL>w7jm<b+{@Px=7mAS(Uh%Ou>WP!<G
z&b8w_7qIRjRbrkb`fxteZ^47RjpA@VvCSjwZRerzbwo5gKrqY!7dvzxlw~uqUg7LV
z7HYn$1Hw-2kW)fS03cQ^g8J0MH2R0y9Q24hYkXjFEO2Uv8w6#yuylhkuMh0>G!d~2
zX!o(stx#);m=)gKqH3K$7~>tZ^O@VsC@bW_Bt+Yz8X|DU*guLpA&@HD-46gXW^S-V
z;IHivHwal~u^3<}!S9HGYYg%U46b@dMQxC3TSR84KfXmowkVGZ_Lm>?;tT?5Sn&yx
z35|kSz*<PlwYb3Y(%2T)uvdUcWeEqkHUe;0<*LIPu2xRt$k|2xxj}8*ie$16bPDo#
zq>b$vr8eoY!64ThpBqk1`~G!yp7nx~q~T8s)#0$rfd<2?7EXi1lKXgAf&r@!$tqa0
zAsM6@FFbPLasZFqwgrSe?dK31?x5r#yoWgq+k13GX5d3S1daA&W&~R7qK1dU0G70@
z3_JOuWu6SpqXFQ3EueaS3(J?PeWM^Cr9PG}VZ@L2z_CR@{i~w5smEZXs%~W#2fr}P
zmACQ`y1?wBWV?VVreYUG7-Yca_N_B!KQpyXUhm*XK-{+KnGN`uhy}HvR>!evV>1|8
z0qmMG>}w#cIN=jPjZrLgfO@jGK%H~@c&kXlUIThM#b<^J_rcGVtvnc|#FWUk+2Men
z1jU+Srpvug<hxwf%9JP%%_2I$tYdNu#o)HTg<Ml24-sriM0XY#C%aEC>B&p@4`46A
z5qg+e!Qxq#gPnMT3zgwiibEGTZAE;XJZa5HM3g#!4^<0-sPMmURU9<xR(+p6C^PSK
z4Ri1FSupqe%v1*6XQndrK6iEMeHKZp@3Ami22R^_@;$uoWCG!0$7KF}+?{b9zpzN)
zx75d&wZ4GndtU?xDDfUfXc}S1;PuFR!aLNDFx<tR@3TU?{+_4|1-0_8ix>`({5nL>
z4aYT6w-b<@aN@ZJ29cuIaN7ojuL;;TT-Vs0IC%}sVt4-gBEPj8n67PU3kof5??-8l
z9h|tnqaT?jcT(+pB015GOdY$XafMiB7em~;xvI`RQ4JBfNq)%gB`$gI6@=^i><Ig&
zi=1od{<u~^%nVfkdtezL*Mo6cy(Us{^8G-7Ze~6ZwMPgL#~k@T5Yagbe*m{lhJec}
zeNW^b3)(pPX)1o7xj66lh3{~`8}&at40!kmRX-5%Bb5C>B#-9X0jjM~2)zY~^gWR}
zO{J^2T$;+?7r8Ub99|s<PUbAb3(s-b{XB)PiqP}qx+?O|Q{*apM5Mnb%I6Xq9<t|G
zfmFZHjRe`3xMI<lyU{_}muJz^{Caovny9QV#J(>QuMqk*{whP<8|3&vgf^%SoDK4P
zAW9qL{6P3$uWHU;6XA>8ag~eY{hsi>6(fK`?^6AJ_Unv%Pq;3}wdD7N<5x<IT)(1b
z$FJHEcKtdgWAQ52()}K{0aJ1u+dU{aJRP7UvhdM~qNFgfd%s#^BlGwN<Cn4Uc{d0d
z6@w)7E+Ar+rN^SdrS4n+iM+^|P7Rz9@&t<qITY+@!APVuXOrWLpe_yKp;mIrSnK@I
zH;G8MHk*X2g^{%t8Z(ukkN2_5eru{jc#SJ8`V@1_j^25=5-6;%Eu6m_4A&DZN_n2-
z4JiKv^KHd>mjA*BSuBkm1euscxC%eGCs~4v%(EFdJSPI}bD1akC}8+W_U9@;A;4=S
zo?wP4b&!Qs2t3iAiQqwz@1go*P{3Y8*gH(=$3<kA3I|1enA}f@$cR@%M12b<tB#^p
zMJ%a<qOgtp^X$bOLy6-QJS6JltD$+}nxNuiB0NFKc~P5K2p<xOUF13>oM1*C6Sc{W
z_&hAj1kCglx#vZEdK{3#H09wXzke2R=lz^>5WmpO-B0<)gl{GR>$6BaNXf^9dzKJR
z&2o{@`#@utJHU{_BdA*lu9;5?*F2%hwI{irPPo*~3pm!HCV{7bg7J9=ydl_B?1iwV
zsVM`Vum;c8wnZoca6oV;x(|XBpAG}Z+JUhG{h{OzI6bAbIBrjXWow7XZ&44BR^6}z
zkGU;~sj@if-7$$^cqg(zX?r&S0`<3nG3~~kC?V)8+gYZDn?&0c1fh~sh<_oSn4oKX
z+BbNCC#&NE4>H0I(AzcM5yF5#WPcHSM@dV($iB#l^L%-VXN|d^&>A~WB-aGC(EJ)0
z*OE2;5@>2aY(21ZmM;kSSms|4@To1m0E0BeUtm>D`2`lj!!L>AFlSdCrqoLqctTp&
z7IM7ECo_C63C~uJ4Q-{`1<+55UI6{16lyolaGZeyes#RsQM@2vI7^{+Q?m$Hrzs0N
z5Zu^b5QY7eJ1^=`_?;I4=*G_rIGs4xgyVinKQE&9Q{)9!`yo|ihP=pbhU%-r@xUq|
zMew5MS$XP2CBTuMhcNAIOTm&fzk#00fJR;r;2~Wv2-gt~r;l)v`6K-Zhv2&MoNzCt
zH9Q1Qu<<K$f*j9_;)!8okw3k_NN31<P9&eha8#b3<Q&dX<s3*M=N5QTjl_8l$IlZI
zVQjP7Ir8m+P+Qpz-F9jxJG(?Cd5E2pSh7VK!e1LD_9#=x9$t?jxNczc-o=MuV!K7L
zbFs9W{VN^&a7ETM!f<{@DmXvKCI#G{Q<Jz5gi4bl$;<}KQog-BTE)F0G@8`>IEyz%
zv3(*2jmMNIZsVHdAswI+aN^!4lG|}ik<al(CU{jsPqlj$g?RVO00nkW_;y3Vv0Ie)
zahk-`ByvQ<eoKpLJ}uPG?uX8PXxC>D273VU%ZsfZCLAI^j5^rx`-K<&AiZqCuBx*k
zmU6!+qoMsQOCdUr!^8b7QKkFYp9f(V#GXFk@0>)q&^Z%9Y}Yx213ilfL&idO@T6C(
zf@{MPA^$bLd=`7!ey$;}x5k-a#u=yS2F~rzV81|MRmLOd`2GT1aiqMPi%|R-)LfDK
zdwG*0Dg1tRV)qDjX*frS6KO@uWU5n!B}Kcy*rv5i^K=^Oz8$*=v=ms=H5&v4O2H|>
zHphPYe8~{E5q$Q@;!N3s^L?lpWD^7(To=^^i1%sQ-_gM37j`p49or+rv=Q1PGghA^
zvzrgv;vvvU2q)phyGNGL(|g#;?AXN~(4{>x3#oOFEFg?5`U6&g+*_zPDKj_(H7Rij
zDmf`j5I-j+mU?WrEN&&ogiLN<0cH}`3}m{)XTd{sH|K|%nKIfQw}f62=fT+93cPf>
zM}(QSc{`j8NvYeZZrwPbO@j8uyEO;~@h%7h%c*YIX9<SzGNidKX7>RxGuFp`$c`O(
zl`m6TXB9B^W;JsA*VbT&!X6FxosyQ(>hKj*hkVko1VO(E_b8}{3<CSBN$yG)O+o}i
zd61^Su$JxW;2!kgu%y5by6q5R;bK)85vT_s*&a$Ll`gd2EclP{nFh}oYrP%Nal<th
zIrPIJ0$gjL4T*hrloEs9a+D|RVKDWOvowMctqT2A8*6NQHkM4Fy~5x^0qcgs8b>@O
zIcx%xCvU@&@@R-gf2d~enMA{xVTbgFtm?#!g->0D1oK%|h7gOg_N@Z_Dg|-37LI2_
ziHq$4_i>>yHUZ~CgfrX~m`8Ax`v`rQ*ei1o87E~D4AO2Kln0@K`x#HKP@6-`?Uq@{
zuzMxWlf`%O@tM@5jCE3BQil6^h7|iJe3R@!U%(v15osKV9+*aK2B-BVWnr9uYuhQc
zR|a>EC-<-`Kc<~~f+4Nr%YGn#pXYUKT4rcAuwMpYy_=Q}a5Qk$P#z#v+e&7N?=JCA
zvHxahzl3|XdrH>2#{p0FkaJ3gP?Jd<Bv`NSldd63?dKEy3H*+%r}xP!E=StOS`&o5
z+X*<Z)FEwt2Zi^s?j$~`#dlG3pTt>bhV0^YIj0$?2%X9P&2@f2n_zO^&fcB{o2-#j
z!vpslo?@`GH3ejS4sSzWV>Q6{2iK=Ddm6D$Cio_`ZZ&!*l9tO@^lgWV1ANpdr>G^u
zIoxkCsOt>saEBaVaTI(?4+r5(4nDE(P#DT5mS<f!Co|BblO`>^^MBtWuyG+5E_J3f
zv91F_H=4uBL63$9tPNGIZ{!LV9PG7}`AAePl>3M`v)D&`5CFfGZgPLbR{Z2g!rxDo
z??W~YT4Hd<7)JW?=mfa3G0I&RxiQLIhegny!Y^2c4~1hpXOLjWqx25Sz=1o2`SFnm
z?!u*DzX7l6Jq`^B#i<3~4@CaHeq@Rxa7bQyFpU}&pc)6i9Digo31o;+QTzqxD2Tt*
z9I=zS>oGf$R&e<3x+p(E{_Ct9&!M37Q(S@a!qwCdMC=H;A$);D_<@KVXL#f!1+R-V
z4p)3As;4;|KVvWc5bvXb1M`QX^diN6C^BpF&W}Xs0tJ33(ih0_Ls7Xv)gOw)%WI(@
zis~y=K?S@p@!>D=DrNAOeU<$9i*B&wSAU(jk@Ytyj0*YQRF3zRH&rs{MT!9E|IRFm
z%fG|*sQgMlXM2?ZslL~bqT|;%?D~LX)8FUL{ytZ=@&j&&=Q@My7+jPQ{g6SW53d6h
z{iq*(>ibOyH;4hz=v$a({uG9;00v$S`N9ghx|Q(|J|NJz<HixW3?C3kR`pI+pdy^I
z@*N~q?DIWr7!<+@M~)u$MFRlY_D%zKbs_+Vd4pE#kZ}lHivI>qf0*Z33<gM?oHt0_
zLjmOs3aKYZOy>P+a(Y>7#g{08wSrYI3T--GEyUy;+5DMh9f2s$HQdkCF~65dtp9!{
zu9=7UC~NW|;lzD0fPe_z2cHB=%s^*I-WidBc5ar5V|Z4$aq#;=c4Ut{$S0!HGs1)W
zD`vo`Q00Cc4~b~e`+4!z?ib}AD$NQPu4}lD`IXXsfqk_yE2_OzeNY5&ryGv#^-=L5
z-10W;n-zh6ia!KydLF;|EmYVqs#_?xAMSYL2*ZF?m=(#bUJa<=;o|#6Vml{*bt(wQ
z-tC+$ykpvn8yhA#acBaRPoyW9!}ISt<lQd{yQnxVN|WQLVt~6IA{8=&ZJi@$xSJm$
z#G$($LLb3GXQ2Q_4iZPV^4jPINvc`^f)l9^4_)gBV{xk<?w@DtUPw9LD)S+-nPRaO
zBN>;xF~KZZ(S{NBSuVK=+F6FH;Z^&MgS5YfUXluDc%LnufvlCVc+P<#_GsDXacuAq
z9zf44XW$lOM?6fZzH_|a7S6JwJ#bDG`>xhc3l|O!J}+=M*!{e~jUt&dB0K8QqAOYy
zeRzgtkr<4CAo0%&Y&^;5g?k6NUl5rc_Us7}ogftE+Xc6IQQM<1C!stS)k!$i3dddw
zo)zxBlwTFey$q@ErSu850A^3K0xf-76!%TS_7$57SxU>Iw4cJuB6T16PKfG#IIJiN
z_Y>f7^g#iTUGmFH{j)4W56py4Kz6amPl)(K(}<1Ca`7%4-95o#Z0T9p{-zOjKTMgk
z|1W!A118xu=6}1VCaJ`bLPV3`hCyYus3eo5ecvRLq+~l(KCC8*xs&NmYN9h!CKKrp
zT)VTB)u=FRV{p+Zt5Fy<g1Za~ZMWD#lflJUh2~%EER9(I_uTjQtEoEaO7}!!?ek1M
zPxr6h_q<={Js<bnd(XY)%%1A)zQ~DAOWkszvv8U`%jL+!WqU4k!gX13zjvKHE#T~5
zXKuZf&)l_2SdAyF7su02G-o-on@l(hvZw4RjyyRgM#Cqk%5uW<<kXH!oV`y@g7D;&
zTD+Yt+lHOW`Xt`<De*aT-nj6qd1>3-7Z^LO3oeyFYs2Pyec0r<a-k8Qd#b5G{It~U
z#m@exrKI`h3rQ9)F)5h5)NsmAH!?D(Bz-{E<Hx4lJ|$%hBJ@zI(3_TbImpx@I~SoL
zJ<;gcHV%cBHUAFN`IC6$zLt4A=c=+St2*v$86Tz8P4p@~-3%J>eR|(X!?Jr=E^()V
zBh2Pl`F=pQVjp21Yo9)1RYRVcU%hI7%9KjT$*S1I{D8hS>r>OK<ihx3U%m6Pys>-l
zs$7`vH?!=#+!w`!cAU9nAYtv1R~yRGR?bJ{eqb^XSMS1Pdg8SCQcDKje)F{~BUw&g
z<OnX4<SIXrHV#&cgM>(SNXvvO$BDkdgmc{GQUyn@T*?2vvg|xUU%F{(E9G)uG?hz@
zbW~+&p6pF1icz^Y)9N=@mgPE@To*AWL|*p0j;H32>}&Q7G>(*<)%x}wX)gcoKXTPv
zYW;zZM2Xj9ZxTCl4J0}9*(cS&3gn1|Rk@wX8@^K6LK3;DSZY`V4Vp!-;Bmg3A?%U+
zo4e(Rk;<9>xVdrvq|IgVb(`F#?cZq@H=M-IGe#tJvMe*XUsxsAY$Bt!%N&m6%vDag
zkIG4@90KIYC3D3txX0xZpqUu=n18e8tVZ15Yf#WnP0QK?34icppLd%qr=%Ta)!yIg
z6JpU+X~$}_f)||!dP3#bO0p!vq?ygRjr0Yrq~vd3s_*Nm**;kyN|2#U8*=WDH}|CC
zyj+uXWrWAF9pzlJ8En_tGO4CwxrZ-XC1q+kGBYQ9Q-hkkb|dfXIm(rJYC%@=aywr*
z=bI&^aAZv>`zd5!#=-?M13y7HE!oO)f!XIX`xLV=bGJ;E_c~T~9t4@x0SO^9zUL`U
z^FBuAz<pA;T_6wRnD6pjpoCMFCjc*SrsbKWvt=h(X6{Mm;3j)Cnh#hvB|#l;_GQc*
z@5y&rjaSZbX5_MwOxSW)Q}$&%$b>Hw_OA2Ig7CJp<mQF!eUz*5Cp2VN#6#p>q%$SQ
zzx8IThH&<~!{Q~975iCE@KED%&%-iPo_WM@=6q*%ZP2&-e0hsPDt?kP`-qf$-|<MZ
zy`mwvLM6oPWS@A8PBOK;<!=n@wnv%07R|xbylh>O|K~V+A8ksTkIqb=E$><|-(}lg
zdA-cx=KF1rG4YmjsTtXdA=@`)E5#`z62-1lQ}J2O^r^>Iqz0!Mn{t(3_Hu;ljMnaT
znd-UDfpvyIb9$=&q`pWVKs~GPmNQZdXZ1DDNXhr$%vAF%d6LF_KX9h(I_;Yts`d#X
z8`}0iv9JEPwbBHUEM?DeDo;qs_i6cmR^O~VMSND@+!K$L?|Wqa_ne)kht<zDvDMEr
zEi-k#i6I%C+R6ST@1}ZmQ+nsrF{?t^2z1P<nmmw@SrxC|)gNS5wT_aV|HrJ7yE6-!
zReLh2dZuGSNX{dJKI!n2$MwmTqFwiw=iJQq1$jE}esV@6Tbfpxu4x_|Nci$zD0$tF
zY$(3}sySJa9oIK6XZ-ReEO`iQVAY;<e(wI}_Mf~DcJk<IpAb{B74iP7X4kAUM&+Sm
zdFmkJis-_<_nG3>{nyKXsf|vyGNeXIsT~hD54Segn#abXhsss8)ZT}gv3kqHoH==(
z?%~e77+q^lSsH7d1LkCX$MMZ0MDmu0rfLr}TNCB%N_Hkb)R|gqE}qG{AbhwPuE{K8
zj*K#u>^M>`e(mZP*mI<Cq;x1JSTJvJlEJ)BUIHaI*-~bKB%@yxW@QV8T-cRIdF6^)
z$~+BHkrS>}6N&C4Cq#FzERT+oTNO0}b4Ly}kCHuj!mk{a6^5L4qrqg!K4RGNFp4a?
zaL7oFdhOy9jkSH^_$ViohtC9LcblBS$$eEZ*<mO1g!Rc*t%iAq-`r7_YGiIP)8G8+
zVk>PXj<(U1IVMSY>T<>Q3os4y#N<kv9BE>+Q&-;Xs5^fa<syY_O6&I%&HG9HG0)1H
zd{XwEVab1=wZb2i_jj)|&+ka~67k1M0%bBbI&w)z;*=e0@}{DcxxBGg&Y|UUN@}jp
zu*_r6@+$HZ%y&~!3Fsbjscrwk1L~v9G2$k(E3lEYheRUZ<@U6!a+1x0x5-IDO7G^2
z_LEH`%li=I&5eCC{qmkk$?~3~&1HCLh~3hYkCM}Ld5M<X(j1oWp<I(V+FZ|-Nab8T
zd86Z#*9$c&Z<LfvG3Ie0$;!-X<6Z8&FUXmSY=f2y{Ic~~rt&0`g;mM<io982mATd<
zQ5>HW6HVFCmy(+S898FeHCOpA{*&VMCP+EzF3Ni@O{V0)xv<*2*->N~vU6TM$bBMt
z?VqgLlQ(Re-PI|>k!ug~y$L(_kS;2_v38qeh}U}=uY3CBoUjhgJq^dSK3nFPn}m?o
zkrm6{{!0@r*>NIA$^8<Iq^5sJT1(!jCVK<rX3Ejd9J<^`R!J7B&vqg?X?T{|(j&JV
zB=oXee^0HOzrs9dAe&=l`jLINt<}|jVM$WMXPZ8||8jE-Ubx(BU2a`2rzfehl*&^s
zq9%I;u5e~$fQy>Emf#9Uo_&*h5mh-ydzND^3|;0NxMwQ7%-JcgD7eh2-7B?lnK`N0
zdzrkW<kIrx&YbM<zTDh&mjCnjUMv6O`<U<YD2V)*1Do7Akqe^|iQG??NT%h*RL?RS
z4&}SN1uDMWS$J@2uiW-<6ZsQo`sXiqc0c-3`7akD<p1L7+v}G*d(SlA<sq2;mpS23
zDijCuD9q)~{-O19Q(?F4<GWlQVc%hHQQY>p*;OJNKPe@8lV=&d`LoNbq@*RUe-PsQ
z0b%XP8&fm+a{tuj&eX68Cwl4$QqXwXko@0QFt<Kr6S92YeUbS-cTs9u9=b_5J1;i3
zGFr+1nM;h!&P&(I|HY?YD*Vt)F><{^+CVzR4|Lr*-<R1{H1{~<f{n~#*E!Q>V9Mx}
zuT!bio|3s0Am3#}>E4ogGwjZ-vKq<l+G?%|Pj59hs-#p-vv-%wo~xOX*+M#9lD(m3
zXSm!g*!LWHSx9Q}Ic8)2)VRFFG*ugS<a+kradQ*1HEwp9O<rqGQLERQT?u=xbsAE7
zt+__Fc&)j`xpRwoWkqd^*|J>U;_Q`OKwC^d*;$eUL9_pslI%Kl<C0v%^_midT(BxR
z)l6#gxw26=FC4jww)k9g$7QcH^RcP<ZDxZ(YpZ!{lYDOt49c#0xw<Jk?5E`|A+nKO
zZiHRq?0#Ts<{Iag2c{ZD*$Ptas~4S}C#3doa#|<k<<(AdKDukn+#5VF>Ku6RK+Sjd
z$)+ve9BSmhJa;Ch<@|Ejvz_TjW+#0o$fjBwoVjd4_Kn|i((r6iu6~&<|8j%uz-C8Y
zKq4FOt8#1XYG-aRwIFY98cglK+Sxyt3a)mhWQVD|2P*kr%MAw4c50`O$p5*=$y2=o
zaz9jR`9$+{fSe-A|2<D$Gkb;8@NSy9&e?hPP)pKyc52sE&aQKF65NjSjJZkK{yFCC
zJTJ9-%xnmq8FS{(OHGfN$G3tFPW}9hylAR<{;@5Q%&*%c8~&e?n!8e76t!m0m2!to
zo{5t8Eey$128$P@;xTh!ts&1HJnhoTl}@7|&uB?cP0ep~n(}|t2`@?sf99gp?5Hz!
zacb9<@^i6<BYPAi&gzKyzk4LL(|2wgF|kF@O8!4vdg6gAQ{_>owkcH|bsC$Dlc}rB
z!wt7xm6B>zwx*;f9(Zm_nt$&$)4;)XrfI9!nf(9hO*i&EZl`P)?7y#E=eR{K&8Nho
zT;<v&lczaQ9gv5t)23s}PcW3_=87B~?qObyCmYQ~`e^5<7p7l$<O`2@;p!Krk_Y4a
zbWKt`x!<`|{_^rSD1Sr1`A7FV$I5q4{$zylEQW{KV~Vn6QjX!WoRFzBnPZRh1pPgI
zyI0GxP}a7qod5^W<C4Q~)Hhm9o_&`82Tbr%CppIrWX|oA6Eb1QaV7aAdoE=wU|-*^
zPPU0d-nB1|%@;XVC0`!DPEeM3I2P|%wO+0S8S^dkPagD=e`X0JHye^937M8}yy<d`
zw>~*oOds5Nag;frOvC(fo+}egf7!eVd3SoP{NICBN6Hm3iR7r!bw)yo2byEgjM0_&
zWN}fI6QYA}vdh#~l_XfxEY6;cuC0z672$HSF<zRtY)+=-B+VFpTuDlj#K?hb-x21-
zE0p_3#?!7<axy7v+2)Z>EGPFzIy+2dlcmx05jSaA>*X!KN#e!S(Zi|9gO46R+?-X;
znjrVczEyckfcYxN`(_gFG+rBEs^-ayS!IEc7(AhvT1-i%FO~mOtJcc@-Khcd9S3T2
zKDlGHImphX<UF?3Cq!V%CS}r19+z7FjMGRQNX|)bF{_GJpAbnq-X>cNl5<j%7}H5i
zA6c`%PaalwBDuJK&-V2Yxt@`kNXZSGxUbfClUZc6J63XiCY>5MD0@=h@jLqDd|4{L
zXVt2ieo5Vq)Y^IRo$~Pe3F2$?QOOvP*Cfj&gkAlzl4$e~$k*yBS%yeF$5rJzu(Yyi
zncMmY<m+CPtl8VQ(4UwaPb7~|mN6}P&4ldBHj&BTk*^0Je!Rqy^d(t)FPg7AWc4Rk
z16Vw1mM&3BuHZ;!<)pi|`ULqpdxVCONv=)o=^rrtZj}xbc@6ELbdULdS<#tLkIy&c
zN~!dmeJOdeMrtBURr$JewVJs9l;nIKJHTgFo42f2VEsXnyr5XlJdQRGRo3qz!A-Bp
z$k$f#c!|lvj$}j9l!;rGjj}gs2jae8Nv<zxg{0E*bsq}MQzIgm9I<D+RVH%M8<W1i
zPrA8W{5Q`Ki<kRtFYb_?=f;WT+kEY?wFkB&%kuTMe&ppgvs^qNH#E%#c$krpBtT<E
zaxP!@LAXaP91(Of@@G2V`A>bi{5L=I;W+X_io>77891DQ!x=c7fx{U%oPom`IGlmQ
z891DQ!x=c7fx{VCaRwUBRf%l%U!R?z|EQ}IB;V=ZptgRe<<5U8&O^^z=OyI<&^<$G
z|KW<^DT)!w=S~OxAjRem#W`T~a;5z%6vJmJ#+NBZ|D@<VQ_+1TXh%OD%CpZ_z6ZVV
za-|1fq1b@_G-%b9{b8>dOTOk;pPk?WuzIS}!Js1LE0AAvgz{&A!D&hlp4=^;gM8sg
z@Q+dq)`31+(FGQO<3JDci+|D&?YU{_p}Y=zEzmoV-x`qd&rWK6$5*NT958jQ(vw>h
z7r+lvN>hIV^~s?=9_zvSK`?|L4}2eTbI2F%%~mv?!S^B_VD$@#19bdd#PNMacLp>J
z1+e3RzW{8(&YJhBd=C0+LECn6uhw|tn##96q!@lp(QhhxA5k3tm||nMVjBGY;7`vg
zf6uoSg9XKQd%|B6erg}q@=&%an2!&8Ew(@7gM0<@wQs3>6@HtRd;{_&$k)HA@(YOD
zg`e2ct3$5<z2-MmZ$0X@A2@I6MbOJZ&w<{WTUEbd$=4vCf&7}iDmV8FMKrTBz;;Ia
z1!$+>>ni86eNe9k{ex!SX~+M7>P4_q{tu<=kZ0a0UwFTkhmcP}z6n1r^cZjOD(z2e
zKdyRnK<|r6FMv*cLTT#dpf?Qu0<a9dFjDylNWJDO)nE8&E%#Agt1I37SH;w474tym
zh5Er~v^=2wFDYGyJpE0;-<nTqxd*=u#F>IW7dQ&^VwI;~+HpSxzpzt8+%fdn9+c1A
zqVhiEUC2kU&p5M)vw`@>Kc{+m)N6Q;(y`UwTA0TsAwLMYilw*am#R;HLpN(XL~m1m
z@D4?{p%{TKV_ujc$`&j0X`!6?p}p|!S{|Z2fW2wx(SHl$BmzHpm+Hmz58B_S{2jpR
zyOmx*IsMaK_)hpoxrcc%gdY7jUZeH*Uw=-*DorUC-k{h#ZGFODzf0*!;P{)B&c8*`
zd8=Xt7(GVy${$g__bEljNxwz-%fVmzO)6J}ANC{4`;gB-K6<0dJBWw#Ddh{0Zvjh?
z_YgPdQOf5b*8pZAA3{El`psirq@D-)8ZbtDeyH(r9;JK^aup)v*Po(!WBb&0qJ7Yx
zqnp%T^g_kpOQ2t>=)4SkV5O||=*txwdlkq3Rk48b;A2XMA6H~M(SP^_^e6a@UaWF4
z{IZ=WUx9o8`4Z$k#Km@^d>QgS<g<{^BR;kh<paojkdI%a@i?ew1Y|o=uLM08dKKv9
zzp46cC(0Kg??65edH3@wUq?Tnybt*p?c_kdgnF=Di?7vo^=?KUUjuu{zj<iie4^JX
z-`@#2U;w_0am)6i-3ILWkgMFH`WfhlK(-t8>d^C`7k^Uqg4Zds-6$VH-i3S)@*(w+
zAIjGt@1Q*Rgxd8`59VhA^HTP0S{}b$aqd%!xu0r&{O2jM{?v0I@4Q3hE1y;jAWuIT
z_;Dc@PpjPcXB0#D2`xX=b0F`$Q{`jmMV6mM9B1yXc{cS?^*<abG9UE2(s`EhE1hR4
zU%))p0`{6`DSxQ*EcI48&r*J+^K6XqnE5BopZ7||`q7w=@1+>OO8HeF^GtnrQp*GA
zFRXz+#yQ6u<uk8Pc^~reJybpodG^!zZtgz;`cG{2ANpNs|DpU!`w!(;+J7j2sQrg}
zEA2m&UuplDdcDr)>C3eJ@>eK&H>3T3p}2OhVz5Cm0_L9$KG5-%4uR=!Kpy4ncl7JQ
zUl!%jKdZb0J@z}w=OCYkeB<@-hj=*8Q$7p%CNO@T%EyrB@tN{2<m$lIPL=oJF9gox
z_&~i3<f}jjdIjVm2J$#fy)@*@z|3papNsf-oTj`3xgyYgjmk&gQslUsdY!gw{c7bm
zHY?Vq6jMJ`bib$QJx6g8Si45)1<>KR(%}yj+wDj{uwQ{*?ky_ke_yfPj*yQaUxIx8
z%_=tvf9-aJd=2si$osogK7xF^9U)(Zd=B!ZH>tdbdh7?b+Yx#p^fJ&ZzY+0+Znq!g
zE0Avi!#AkByI+y*5xha$BU-Qg;5^0ps}v*9@!O$yz9REX{qS7nhmg;_T4@jR^p}Re
z(vu;7w&MO*Dmv$Y4}Tu$I*@*8Cpb&xW7r88H{{vAlrMQIA3=T)^6OE5#yS7bnwR{A
zDxWSWdLM+pJ+N~T_!lb%z&!W?F#a6mE>Vn$b4o|hbHHak8HWS^S=e(vt9lOfSWn8g
zo~Gq#$h(o!KIGYtDc^*AllA<x%7>6=Kc;*P`8wqNTVNmlLLmDw^%~HtLNEA)>Qzv0
z_fn<VpQ%@eUKx7fEacD*oR26ULB0t2=%Xs{{JUa=d6M!okk3Ot-mP*m>OX7APeVQn
zdFR6_@1h>;M<eJ*KI#=cQ{~c#!~GBFwG^{oSM;8x$bQhaGXi;(&oq>df33)VKzZjG
z%6A~|LVg;4*bgXQdphhP&I;n3hCb_+!|~bOsPe&8ignEQd-f^aL|oq2ly)%hvtDgG
zV_F`=&W>A^UUNW^^`d;VN%;}v*MCQ8*QyugOIK=n2>H~vl^#VrtXDXt<37N=Rry<$
z^Ixr)f45?0SaBRU17y8ur*eVHwO}WzDD6R>^=ivMMavtI_aHwBdA3(uKCkjM$nQa%
z4(2V^%MG<&?rkdX|4Gq3{ah6}PtolIeXb(wLw)amR4;^n;S80F`xRLq%IE&5@&V*)
z@E5>7<Ey`QEcx1monSTW!Ty@3C_R3p;tY`SQ9n#+c?5lTNa;z)Gd{{ktF%0Xd~l}H
zG2|IvfcRp_4Wc}P{b(3|cPKJ0>P;S@{9)+jAFH(gQbqcifAd)KHG5y>SMR47L*9{h
zb(@cWf5i|O11GOke*HK_2mG~fQraC*jDW?flxDp2AHr`HcH*;DE`UAek@6MDmmwdW
z1wW8yzomQ`@<qspp2|Cjt9`sdJ_5++As;*$@oZ9@=ll%$66CXx_n)M4G3XrPYFK(j
z=%pd&JyG>ah|76^((U67{Q1yp0^KL5oQJ%(k2jDnK&}pS9<TDwHNd2mWk2{^#*%Nr
zJ(Ta>Q?WFn=)G1k0^hk8_`m?j_NBcH<U?TXS*jO<X8Te;4SoQ0A@9OI+n4eV<a}V|
znQGsMJlmJ@tu=@n@($!f$Riz21^I}`zYp{-Q=Ge8G5lvmALXn+_2UfmP@ae0+9~C;
z{*-SVqkI?gd*E*mXvUX8`+Ddn;e%B#cn<I;MK7zEnoxANDz1fG8T~qZkMbFR+x~-;
z?>t1YIj)$#QL%`AP5JnE<;RF;9P-hq@_kD_c%bql$hQzz9r3Wfkv!REJ}%<$AF6t_
zYZZeY^(~aNd=zrIM=H&F(yn)+@<Z4Sw<vAblkz!N%LB-}kk29Cs}Q(%neOjMfgS<9
z8nh4k2+&2)d>)|$I*sxP(DJ-Y@(DnLbgIZxgt(kXXq-L~@zsFoleD~!_VFI2^xWSl
zI_ni(AoE5)@mekSV8010!LB=|<?QFwYdj2gAs+%`_-B3GyQn@s>f@sxfmI*+In?@4
zZ>9CAzG*C}S`+mge6;3a9LW2m&Oa!B&GQxW*C__iRcyBd>`e|Te;9UVfa_nNeC9Ka
zd@kqTxBR=?)J_dZ|FpMK|D|_~C83PZBCZc8w$_}d{6{L*AFMd|5XH)8RWA2AMc+|=
z@M)#p&nQN}RE#4<2jw2H2K^Q=w@2klz#6ax%zYl^K-Qb}XnhL)YKn!XVgqrr-&4K`
z`3UmW|5W(^@;ts#K8Ab<dFRLQhkTS!4<6^J*MMHYxPAn^e$CrF=3&a$A@4J;AD|w{
zn~(f9EWHSN9^;Eu&uJ-g{X#!A$h(Z|dn#8(eYk$1d=>Hz<Jzb4F5?2uT5*NYi_yQF
zTUD=teAO)Z3gjcm7rw3X8T5k!uxja*p%+50`YqL~Kt8nO1IP!A>zjxR@>7<43GzPU
z+Kaf*A1ju85%M16`MSy%AYZoReaO3v=WB=`@|-tj-!_(ft${!M1<3tOaq!EEln)?3
z4!PkkYI)}8iVKjBzS6Ciryk_j)U~_<z3g1K{Cqf;xE%bF^4Gv_W<lxvR~7dINB>P}
z##x;nOTK1KRep4uVg>q~kK^|%fBn%qemD<MKZbq`eeV}4zaR4SmqGmoQLi<Kd-&HX
zpT@X}t$Mbgm;IQ^%>kRx%l?n@Q~wRb{7Apy+sBfxgS)ld`KV%JmDVRtE9MU<KZKq5
zH%iwR6|;Y*az6OX1MRmyqH+Q4AF1*V<T)Qwz6p6B@^eS1d<1`-4=Eo*-h+I7waR<H
zSHGMGDc^v+3;8`Ml@Fh(n1>$oR6&25L_hHwYIpQWDxbSZF#x|>P&yt~WIkxe|992*
zAzyy7%GI8#cwaa!JX6<+q#NgU(;?P*?eeR&{C?2SpVTd1wd89SJ!{bsXs$EsR(Zps
z=Pf$6=q6}+LO%Jltn&KTu1NTde-Y)Roy)uHmy@4XG#}PKjdI4DvE&CV+67JhtVQQQ
zCr;#Fp*og)4W6Uz)C7*dM(OmpVip(!sXqYy)U_%%16+Xq9B9hd->v@Uwm^QXV)?a-
zxhcgp+Z3rc0=?nqDt`f3*r{}2$-9uxT&LwFU<2~rPtT|61T*i_xSSWN{P2qu3$Ig*
z{-p9v=&}D(Zw7kf(2Jp$`dPQ1`FE<HNyse#i?4?tC*KuU7V?#sYq|Fd#U|t%UsT$;
zS<!vIVh}3&8TH?K3;56vf&PukUjRM#YNc5}`uG0{_8?dOXV4Wz2HnDO#z#EE=m(iy
zD(4~}{?EJfGK>6I&`$A$%Ew<<OnqK){3h5zJw4Q`{C?$U-mJ)a1*jkCIne80pmMqY
zRE%IZ{+80LKjR8+P`(HK@S93EV2ATP<=y9Lxl8}wP`dDI#TfoL?^7?@uH_E&+`XW`
z14N=r=ojuwlpnlQF%7xNFDM<oOp*O!{J)j<KC0*=9*1&3=4%}Ea20yL1C|x@_tbV|
zzS?p9qn5{r%m1FzrS~c_UzCsjLHQBnTl<vuU_XFA=8Jm%->X~*y~$gZE}-ADU*<9I
z6@Vi^A6NvIfD^y~SOJE>DzFBe1=fKL;5;w}Hi0eRB9L)bI6q=u94~2ohTov*ya@<}
z;(K*I3D;^n#E(?;Pf^TYp*VNBBKv{+1f_>xs+jtBMYel@{^w=E2hMF$y7Dnawmaj9
z9-({}^3kbEXGay;?v$@RT=@><(~z%y9DLL>hkCjvDSr+)ewxzRM|aCN|3&k%0J-o{
zTD}1J)X7TwK-PnL(cfr!1ijKarQOFUvb~}i^%I?-{NTYTKV30GJ))e_{zJh3f@0~_
z;6EOSyhpIZ_Q*hQ@?TVr@zQ_zAmxY9OP`^1^gcz#+j@`28>3$NK`qZcR?$6EF%7y7
z{Q}~TeyimH==eQK$0zD>%WEpl_~_4py%}Khi7MxQNU;ce?(dWiL8npQ=E-V5fc@m9
zI#Q|d*}8uEOJ9dP8VRk!Ki7XX&?llibA`q?3w{J-dl2hA_$;@vaftHNuVGx2F&@LK
zHQ&`^y4M|f$Q98)>cA$jh4#pvrg{<DC5!e;|Bu?uq5bk_!2VB_-?&C`VXGqh3;pf~
z-z{mm3qKz0#PFB<y_U~ledfbo;Hf_s{#bt(<8=qdlY64-55rIE@05<wPdQ(DUsZnk
zC5q)QDh5~&aXl5mUJMK$r*htl6tn2>)8A2=>kihR@nxtF^lnsn2lE8yQOc(w7XY0b
zApa6Y9yclPK+Xq7+f}ZNd7bB%lyA9O?m<4-2Kzr&3~>Bmo+HfH&cn2P0T{eM>GjW0
zTx03YzF+63I@X8d3n~}=x8fvd`pH8+_X{nb1A4zv+W&(h<uj09fZXISwLF6S3~0(1
z->31c`IXAe06oluxj%N>4`9EBI5Ug~{gig+VYl-CRDZCg*nnJcTesa1^23l@0Q!B}
z&x3x9FF445P~&z>%AW()CX}9jb+^0&d1ssQqw5rhZ&Zxm1o`cX?61^|p%+6heUr)+
zA<uf}YZ_PXmxY8i`E$kWuN22Wby33iKc*PYDppUuIN_JiS6u&T<(EGIxmy*dq31qc
z<?8>c{PgD)o#$y>``@qhFfh7a`C(4=ropd$T;<k(0{UMBMvBY>>*cnz9%<Ak{G-wV
z;&u=R$1nA=&}#x4e^9;F7t{~OFXeNPs{_~kUgZZ7cYwSULGJ)^T+@yR{TZ}_x2SeP
z<a-bF=5alhdU@zofu-N5o`XC!EcpWD%Jg?Y<;#$-Tk<~SiooWtRo+E^h%EWAu6c^k
z-t2ER^lR@LwC`5M<_8oP{HG+MnWGgO=&#c+)AICd6xaVz(YsaUd?44y3+(6UUmlS2
zJNsAZHL72Hha$__kJ|BWQGX7`ZTKmrUD&Mwr_pa?Ao~^V#N(<Lqu$QPm0tgL_0N7q
z`QSNP9zovUt+Xe<++jXmN--hiU*SVKo+ojhGKlLkX<TQCa6QLfpDnk3>R;8LxF~JV
z^-~J;1n5<Ls}hqVxSn=AXcy(H`?cIhd0$Ft-goX>tu*gD_Z_M91mstzl@36&zO@f)
zePgtL_+8CM<tK_U=+gI;ZnrD+qJ7GbAm_@Dj+jpjdHN|re&z>SzUGIDRmeC0q%`F-
zkROEHBryL|l?(eWplE_+w43{%T0RH#f2MTlrz)Q=E0+I3ac~Iq#}$W9R^;`A1=u0&
zAun{k2*2Sf)$@;l{!u^(W=FN%bHE{>2h0O$Hw`)i900nOTm=6!$j_P|A&;oHe{^>o
z>D_4W9m)@0s<{3Qit+J(n}jgF6ZFdzz3Y|lK0~o`0%(>KvwEDL1RcLl^^2E6{$|DK
zgNoCGitJa6uY|Z9*qON*alBrU^8)3IkdJ{2uTr@T;^n+Rc^`5SaBx!Pr*~>RJg!i_
z0J#uYe7VZ+|BlMLk5**+1<135epUod%THUF&+xP&<r|Q9AEkEIATQzRN_%H04uVg;
zS?DddZzMZ*Zlcm_-$?T$EpNP2F<P(4cA=j`-Dg3)mF}}Bd~{5!cB|Gm{4VOhpg8(V
z#lRg_x$h~>IH@1)Q+^Eng`X;2dZ_BL|4=@LzX<X^<cqM+e0v|!_}u+!FZxgTL0oJ8
zsI>bN#UhaLQ9u5%mOCh4|8u3+gJyh`cOW0bU;Sq)KM8rpmqvUw@H0)7i(o$on(|YS
zpZq@LeyBKi56x5Kzm#@=t>~cM(@)a!(N8GmPE~Y&q;ei`5?BRJ_g|Q}-hZ*mM?Y6&
zei%>q1Nfu8`>Nc`BUInHL}})UdX-r9V$`E_4CMYxk@X&8KRa3b`S4>DCxN_w+{`K8
z1vYR$**RVLjGOjmU~e3D=72HuD@8pHOaVh+6<7n#0wW;fu7hp>W2?Mn(HX2CsJ~Jy
z!cGY|fa^XJpaWnT*us5H+RuYu0FD5CAmy^4xt_{_J^}*suzL^CMI8U`1=@pr9@m`<
zz!BhI+x2kP+s3}Dl(UHX^n-RbYkye<It}_L&;y|F1v(4*7|=tYGobUJ`>$4iBcNT-
zKIjucmq7OwRel0A<DbPiYG9rm$2<~Xe#$-F8h0NXQ`Ke0U2sbGxQj6E;&s-zgT3X(
z9pf!Peob2Kghwknu<I2--$T&@a-35?I!eo9=vSccLZ0&y<zx7ZAfJc44|&GdLOwHD
zo#%#6Qp~Sc^e<PO1b_VorCsnDC+*C@&N$?qb5-7hJpB^g*|Fqn<&i4a0{V|vx_-7I
z<wqc&fm{h#J4fYeXLZX{&qiMV&SAVC4FTSdx+my~Yjix^A2jEOr^^q`m`{N6r;jLI
zCM|FKH=hdV>p@SE-lXLr>5|g(1@*_rwyG%adxMtOK%f3?rDs7a<v3~N$3b2^<k5cL
zR|EaBp3?VzWbwW=|5T;to~KB=(I>T?{I6?%>%i#8-TBT#u8H#S+gd*Q6UA)tsfo!D
z82n!8{QoFc#}s3re<SFd71`hD$D3EX?spX9Un+XA=N<L5#2?28_2O@;oC7`Q7fSDd
zKd#>?AAAG$Q6Kl`O1rN`e7v55`n&QQo#qok-uo$N)XTX_^%5cZH}wh4uZMWT??b)?
z+>Yx*mnyD(kJigMSLr<;RNVh$MP644t18Fq@C%@M9k2QB?(!<=Xph>VUhY*&Gym;)
zzo+pzv7-AM#c|m2;BOLi9mw{eop_(>#i;l20j0xlt6x8_$abM#aI4Bi(A)8ArFZO9
zdFIzgeqF>_1~z}I@}(as#^2QaL)0U>FVJyGnpoMoG=HiGKkUJ;_TbmR*Q+`7DnI7|
z{wn;6N(8#zgWu@EUp!;!_*?(6bROm{J2B`*NA2{tf7L}}ZKAxNKf-}3G=HV`ZGHpu
zv2CYCI|oys-)^Oy?hJ9?SbtwPf01@9e)hLZ+ZlQD()lTVm-0N4Ag~hhVAZ#Art-P&
zOhYb1d8=N$PSYK|;|%nWcgeTH$&zoiORmlDc0AOBAK!E7Jj_1__3bv}cs=aod+-b3
zTV|Y*wtRQReDJ%u@-ulo_@y59CwlOM9{h3-`xWpx9;ZNuK)W5Q;M?`Bfp6Dqwuhal
zhkU(<e4~f_Jot7zaS!=s4}J@LyS|G(<eld(-LKL;_!;o+{0#JvcYE-Q7cAXxM=(G9
z^pBbeA2jn)1Wo@X&^0``6@dOAALN2!{o{Ikuj05<`5}&5&(L*1Z4t+<-zhq?$`3av
z)_<hv?ND@m#U1-qzWytvqm7F3KPjf4ugK#z<0!*_fycdPs@(drB9G6M4<Mg|d;ob5
z{&-xbd<pUy$h(lAM!dY<N%<n=Tfk^U<H#IPjNxY<>n!T|kZ%A-p*Q?W)oWPt1<2Ka
z8OZOyN#)tj9@@*P>3uQ(BZ}U$_5S95+&?XSM)|p);QrZO#ksF44j)i#{=1@c8xVB%
zYf7)deb?e|l&;Pz4j-xhoXZsV0NI|5(}kU=U*%%huOXfs?6X~|C%?p)R5?QZ{EhH~
zIM}X~4?m>xA><3b%6s2dKHHV@-UpQ*Fn=3Ve&J|EwkPEs-e>)rOOm*97b&LCRP=!1
z<*Gk=g(BN6%XV9#ozZ8h{tS?IqFZ#lI#+7H@J1EaY(_u%t>PrmSyY<sLVb6W@_p#<
zhyD!Y>2Cu5syHu5U#)sooR2J6{WAx77xHD`+%>9KdyXRQFXFr;3%g~Y3%P|CcFVh;
z()#bgcpb-iUJ>)uq;=jm0{MlHotwBEo>k2MOfmZ>MaI*Dd=+t|aXwf?JnoCT<EcU3
zeYl>lgliS$ckz-R>H6f6KRnTV%}yMg*8`!+AL`(H9sE4_$@#xb>R;>o_*qiya6j2<
z`R>Wz)4uexa|E0ku1lKZ+uEZXC-t7G(+q#4!;ayfSb5%`4BzkY+Z6lc7dzw^?km47
z_KEx6Xyi*B@@a8GegM9SCs-ptYWU&z|HQ~wI^@eDPkz`TU(7hpJ^%H~|7PTC9rES}
z&idax@Q;Qcb@JudMSi1`FZRig!8iH8kNg#-ZZ``i?ID=GLEFL5$I0J_=ysOpP;SoB
z2IOy#`0OknTBbaYa?@^74M%>-&&kT)z2wh)MmqeP@(GErv%F~OKTiC2mQQq)-&^$G
zW$BkY%8!xqr%L@y4>y12Gu7c=n%8-ZEc~A@X#UKn+M&Nx`K(p`L+MkU`t^=-lmB1i
z#NtI*cg%N`oBZE!gz@S)k2q2>M!AHYe9Updd?7Zia-O%qywkGEX@|&t1*9c?$%n{&
zpS{Yt50uyCOdl~H;-ck0t;OxLoHY6;{jvOiP|pFBL(QpUe#w66qJ%XJtYaS#<$_O-
zC0_^MtMiZlF2xuag6}+E`+pjk0lL5(a0uuD3qT)O0tUb`umYR{hQKPY2Al=ffw|{t
zTn*6kK-O;v^$S0$Jvoi}+`&9v{x9}$)foDW<|DxM8Ser!qUG~+#mtD}@G}(Mzg4W_
zx{kL|=@j?@^g|%`_biZqh060dOaJ~;l<z~%{X3->Ag@8mJ`vQ<qra!BTp4ltPg6Po
z=AiEulpjN${%Oy@P|G8fJI_*j6#50|bNxlV!m!GP(DR<Dv<v@?dkS#}u;X0}fAC{p
zH;pdQ^4P)vdW@fT{fkuINBR285C`-b2eBeQjcz{07ioVg0VjX~umYR{hQJzd7FY*1
zfKA{cF#Tfn;{u0(9<TuPfhAx7WZXm-6HjoH+C33;1@uEfPl0|I=n(W;&^6Ex2VDpK
z2+;GO9|^h%ItzLc^hu!8FVuMc2DA(MQJ_80gP=!1%g;9_p9#<>gPsEY7|=D)InZ^`
zr+{vPJ{5Et`F|{E7xWWB4}pFX=sf6;y!;PC57_b9uUtO<uxp>;+^{9;AAOk#Fpuk~
z;rUw6S+q|CtOFZXyH%mrzAp^A2`odt0-OSdz$&l?)NIN63G>(ZpR~V|-+YP2HxC?o
znbIX-1y}<%fQ!IPS>^q|SImN@{aN^3^HDwCkiSw)k0ZWNaS=H1Hl;Z}r=EfGa}-Oj
zQyfA(i*Hgoy-U%3t73*UFb5n0=7A$XA6NngzzQ$~W^w$fB98E->aVsP2)S8c9oPWQ
z17lzlxCktwUL|1q&8QD>09b?nEa)6Cc)iLGfzAU9z%<q!KIjrK09Jq@um+q3)`2mw
z1zZHy-l+c5Z&4foW`RRM4_E;Dz!I<wtN^EgA+QRp0V50Rpyz=xunBa~PX>Tl;1I9?
z^npd-1h5PYfe~;P?J^I#1zZHC(a$qL7nlQjzyi<*7J&h<44eX1fwRCmP)@ayPaWf=
zb9|b0yDZC-PmFRi4VpEl`CBc2SZ+Hm;y2}#F}ArbZFcB)mUG?B@hU3G$H;Ik4Avom
z*bR-sEc%<Q>mx(gK}+m`p&Ov(^dX^R&{D62Zi1G2By<b3<RzgOLCZQmp&isy_SYnI
z8nomhbmTJtIs@7TE$29id=9kaKB0#|%Xwxb>W+7iPRa|Q<$VDOJpx+Ji4wX5TJG;B
z^aN<hZ9)g2j|W`_{UF3Q1^QtquYz6+x(52;pl3lp0(1o0!6*N@vE*C0O0P@BxUS}W
z1;>eBDaN>-R=x#%JomxtXYMtsA8b|hfx$bKPTizPzl)z$zkA>(#Q6`)Ba}Ojz9eDI
zJVVhNQ7k@6k^WQXqI{!bc$MP9vlMHCilgT#X0KHA)+we=R}42PI*&y;^zu(cIs8UX
zQaXAv@Dh}-SB$Svbe^r~p*%ud4P0mBx|sFNZ&vw1$Pan<bo!+6gRkiNH^TlT{~bDC
zGhZC{b?kpxd!AmWuZ|2SBHo%c&M#N@^@Xq#LceO+k#Ukt5z&RZ&(M9UqT?x=!nFL$
zeM;l0L7(d&#zUOJerD3dwAAZJ8RS*|F5wHbK3sQEj_1?SJugUD?!6Q{%kPyEJE#};
z_01x#x>Y|1&#_XUX#A{^crtI$dU4&?=wT;({rQP%@CHTNG5E6%qJ(;tfgMH3*L;t7
z&XQ7@!`h!1aS+=D_%i*r^SW3wuTt97OWL&knTH)>y8vJITXrV#eu+M3jr0Fx60af8
zT>mzi-)U_>IZh<~Cm*Z-?2i=Jy!c=|{bFYpcDSA%fPN0xj_co4uhdZV@E(bo>2nhi
z5Bs@a($_k|Fg)m+dYixC?J8G!hhpE6ze?l=HfX$*8=TVeAP>2e1Sy|%hn%6^x2-qe
zl>eaE*QavahidGZPbJjyh2JZlsBDMN7gH{JtCp{YyjqibT-F_*3%P0dPxqw~i}m6`
zxrFiia}vlsR_z`IxrQYd{!ZnH2+#4Y`pzw?oSRmA{r&2<W!wArvl9~`kk11ZtoDde
zPULe!y#B}bXnsZQt({Z6-Sa`>&B*#F4}rIPZU}NQ%H6N3z1uxcM0+R?DQ7)r#Q0*A
zyZ?sxtmls?=c9ZE$T7|9k(6_gmti2sEU!yau86!;f%bD%lncJBait(<KX0Y2DE*9b
zQh)Q|eTZZb3mxP4?(W^66u0k3usri?^}~AcId@mZoq9{lx&37X{ejo*GpC~*@_gQ&
z@qz7Z$Cu_;b$;eJv1!T^H{wh7>#E1=^)@|(a;~qhgkB!}d-tGylylvF9pp;jvmFD_
zI*Uoawe&VauWs?@L7#&14E9Og6ZBS~3qIq>fu>&3(i?@|gvBp|J{9E=Xy$G9Tbf7K
z%ckonXZtlkoArtLo43kii*ABWCTWrHq)ne|p`89Z>7-B2YkaFkHu-eWraTRr{k4-e
z<pU^Zer-C7a`wMY+Kjy%%GnMcXk)uy{+9a`AkX}D(#Gcq${AlLZFGtq{){i1o<KSK
zvrQYFyYo|lf3}ZJPobRs&8C-&tqOhSuah=oyM}Vp7tP1+kFzM}JkXhc6LTHq_er$7
zY13ybjqdr$ren*#O}DIan|8jf_St`JI)if7zmrb-H_BQ60gHA)8(H(Q>6}$=(-G!p
z_Ai_EpwIE$NgJPel$(2;=F>@=@&@Lkd7v3n<}U_4g8i9hEE;|j{8_x$kMi7ax`=Wf
zH%EAVtb=cKg5PQ09lY<)#A0+Zpa+1a-xz)tv@Or~1rDLyw4<?~MZamC-(E*2{5<3e
zK-OynwBNxuWkt{>AnQ8;IslsdoB5;+x&mbUA?Pa5%xA{dEa(Vme44*HXgmK6@aKW1
z-x>J=>KTL2IGdmgnCFeGDQkhBIp*Mc*YFp?cfO(RLpy2E8H+yv+6B^n7Ie;%9|GMu
zj!oXY9{l_gd=pcl2S5FNje7*;jNb?C{M*5LnOKY9r>*{(L;opRb|ydvKoh(1G4){0
zW7(3gfSv-H<E-&p1zoe`XF*3m=CcmEVad;fjxBx@bPGs3i=aFEn~C4SzWFrJ@Qh9d
z^Z?Mz*{04e=xm3)(V545+v(TXiEq=q=OAx*=5GkJ2Q;?LUmkP;$oatsT?87R=C1^L
z!r~Wk|0V$6_%!lm&=pI53Up}6S3%c+Z1-8v5zyE+KI))5?HGOo{P_-fqcep57K3kO
zjgKbimL<Ok+QGPHJZaDwqS!F@v!HW8=3(M$?YBeV8(H(`fzAUtkB#);``{OWrk@)-
z6QBbi<Mc4kl)>jbRsn7Er@#+^T<=st*MMdoHg)UuiE%vSdN*_QG3OZB7WiCewvK*C
z!gs!-{g&$||Dt2gHu4$pxh{wr4>`;52P}S{qYw1B;B%dkX*?uv<a6M&J{jkj^9+9o
ze6A}D&wNZy&02N-Gum#mKvQNu(Tkp$pnuxa6ZC#GmLPL7|HE#&j^_ei{*?_!QpPB(
zyLlwh`%7W|_3Cf&b&6|&C+tKVp!XxL$=4`<<h6=VK=~Z#80AAi>h-G6AoN*2QB}Ln
z`xUDnQ5*%vA60q)^jgs4K!3NEr-5@HR=NPp02e=`{3&1&=mST9gTR^hsC@ihMIX2e
zaeBb~jF#{I7e(rgL!a10{LK%l+${XC{(mn1wb!5ZySwU7`+u$N&-m`{`cI<2)1Qqi
z?f<r(O|$>o{N-rYe>u6kt9+&P=QzHz<G)w@f2sO&-m~NQYpZ|#0eXCG0Gq({1C>7j
z%mMSjA}|0>0c*fIumwyXul8JE4wwh}z!I<m41qOZ1e^yh0y8J5{T$E(7Jx<I1h4`O
zfi>Vfa1l80AlL=wfkj{dOcoLHuL`;jj9HHJCKs3kdO#l-07GC6SO+$Ni@@|lkXIn%
z$brrSec%MJ46Fj{z!<m)%($=*%mE8PA2<Q507GCM*aW6eggsy$SOQjn5wHn#AF6r<
zU=cV0oC3}Q8^9JY{V@0idcYCj1h5K>fHANIOs`ctIp7Fz0yqVXfKA}Q!&T1%jsQ!*
z05}Dl1<nIoz|14yA6NhufdOy|SOrGFdEg>2{Yc~m=m87BBCrC?PpdrpSuZq?vzanp
zZ+1^tJ^n7pa!9+&$+5hQ^N2%@@4j^Ozl@omX?|KiR$OU)vd`D^9FuQzUh{XXN8bkh
z_FJpHer3^rv}o#EnEAQN`M?0kb1BB_{0{d1OEEe56I++U9_4%O`z)ZJ%;P@s2<V{{
z{DaP6KT8ob?auC1xd>PXHh}ZM7}x~1fQvxq8*1mSjx&cm@ctU_mz@UwI^gNRGk|9T
zhk%a-z5o}*8}HNhZrzA>_kk%z<|mDMLA@t5T3Y`Am;=WD4|xH4z}7F79|8+N2Uz=s
zmixfUg3>YiQSln>#~lGBAs^~^mi>6ir-Xh{0Y*Rv?~%v=U0@E#`NXqm@`-tt1EVi$
zo;eN<HEwgg!+d<$yR&vys~M*VJ0-^XOwBjrzq9sFhJD&ORGdIOcNTfQ^-%TgI1g3-
z&y~Oak(#*AeEPqWCbH?Fk8ArNy=}O&?ZoS8L67#g^FjK~`olEj6mWf#_K55^tk|9P
zW3H>3&q<ijzOJNmXYFykRF=upowff~#23PT6<7n#0wZ7@*Z|H0V_*~50y<}EzsUdx
zfLUM;I0W>7d0+uJ0`!4JU<o(@41i@|1sDRWK-#Z?o&`q0I&dBs16x36Nb8jbW`J4X
z5HJs9KU*oHSscn|a9nhOIiLqD0DWKy7yv_H1dM^{Z)!bqzyfdrSO!i3tH4=c9XJnc
z0vCblZ>jwOU=}z8903NvDIo3FK-YmW(3w}eSzsPm0!{&|z*%7C+p0GN^nux1VQ(26
z8B)2&-I7a2xDVPtL-|FEX8V=EufQM2>)qW?@9sQj&(wP7fI~nJ$Z=KxJp%NBMPLay
z0Sri^AKhL3uz1tu$x!=C;qHG>fBS(mz<t2I!1zTfxA0=cn}BQoUg<qAQCt@QQBJ*H
z^%;Ra%Y)aeeq%~;@STdY(~1Xx&O4O82^ay_zD@a!P;m;l7TA2N^7jI70uH`K`7ZES
z;OH*pkNmUZZrD%1LFxU#9l*73SAHJxQ*RXYB6^JXjViwjaj^b>F8;OGpY>aNH`Sl^
z|61Fh@!j3^za0IZ{%l-n|F`vQn*HDAFGsWf%gNnc<twc}$MKyV|Gnb>OVywAo*l<u
zTm5t2#C45by1!yzQfcyCi{FBL4t%o+GUq%4uTVW+CvZrc4MXyofZcvv0HJ*kb_yt`
z{Sx>_*Vr7QzG29xZ4dTouiPWv(6U!&d}{7?_7?H{;4Jh=*Fn?Yd=G!E4u2*`S;P-_
z4(+*b=6)>X9W?7pKOXqE%M<v<uE|q*nLM@g`xf;}z2d97+t1D~^`;I{kMT#)8?f3r
z2H)f;+2?J=VfQ2dm53Als2%5ksfq04VSj#WcYkL5S@79!?Rqz8zem5NojmLqpC<3N
zopxMS|19>1E4Y*PLg>xE8vO_LuUmeYmu3&X6L#l|@>z@Du0QxDkIA0$N_YPmKs^1Z
zze5`B)+CK~YqH&4F({t~>8#T2@tRY*onKsVo~68}<s4r{#L4=Ut@@B3T71@Xwxgb_
zjcKc%cK>YGt4IH2JN3I7C;iOBkKvmBWY4GV`XZmyYu!mb=WW{F90#^PyIyVos2BZb
z{!BZX1^JKpxJ~!?l0*M?s~Z2v>$>}Wx(7dcm&!L@(=Fe!_^g-v?t}R;^U~DL?*7eq
z*}v`l6yc{I{hR%<0K4=vaToic-D-zj(`D@V?eQ6~erVq!X~bV3?P|ju>iA?_jgGj?
zHCa2ZwjcEK_P9q}?YI$FJ8s0)ZU@X8^gD!p!Q+hW*KW@t*0;wv&Y>TU!0rH!Yvh-D
z@XI~;)gJtY#b<q*;B)@9>(kB?^4QMPUDUqq{9yiV=iSr(!T#Ptdn@-~dz0>ktY`H-
z2gl)3{n$QUx9g31w(ETt_v3m;T;{l7=ily6_PWLUXUr#vtDQerGs5~eJN%gAtnKGe
z>)$>;!B2a<VZ5}*bxz}GkG~%6%>JJK7i}kw1IC{N-}KYFBTw{S=;6QE;os~v|KHAE
zd)#=M--!JnuXMW~6qIHj%N_MtDvyWS588g*Za+24kG-y4u3xw9qF<NZp#9uALH%%E
zXuuEa*Xr=Q)OmnizqTKY^R^#8fUWMF;LY$4+J@k!a}$=ARZLAN+H!oK$#VA6H+Jhs
zZyHNXH6Nw?!AC2O1NnPp^ta~u-TLIyKkZEps@yQ_%mCNFpj*GNYb-Ib-0uw5Q2$=P
zGsrk>WL)%fsJ}Bvz2$yqkmG#*y*ke@59~jS;B!4|_uC@+L9g{1?GMa!+b4ere8x-u
z2>1h&nrFsS0-x&*JDwr53*%{zEA;1f|He3?zp@nv{Z%{snezwsQ}f+?+T&+RY1)f=
z#2<IqGuL-)d+p;H>@BiBq1xv-UxXd{%e-&t<3twxUin(C{YKcn$QSdH@33p0`T29_
z|Mt4r)q1v%r#ODLkEb|(wvVSnD&IbydP=w38S_8mE_TGdlJk%DdZI`FVSAKemwu`p
ze$1W>J3sC9R9fS0uczRreLO?n+s8B4svq*xe2b2ge&mO7)H~uZ{mqV}Jw6aeJ8y`C
zcA6b_mde|5^=aF+`ceA*+HcuEmy54GK6<oA4(AV*4=g<%s^D`zyWMrY5P4iC9}(=B
z)-ZFy?d)LQ;ylDW&f9u#hd*OTKJ7fgKlK(Zy&>9HwVrwdHO+$&OX6IiznrDl9$(A&
zD_DBV<%R84gx&z^MSjqOKh=X@>%p&s&w4Pg^WdBQV9uM%R(?vP(H<kD(f>Ts=+{}&
zt|qG8o>`?iUo_#D^>jYi-CxNc=)uofeAXuqzNwFS=Y&0;+Vdvs^A7Ys)TceqqCU(Q
zud8{KM}6A;FsJp)vV2JC_B`$>-9Fyrm2Mxe3re@=qY<Us<K0)fJs%g9ZXX{@O1F>4
z6H2%9A1FP*_{vH%ZzCOfGxMaqu4u=dR=u`e<c)SFK6K~CTN!$sm%?{-&kJSJ%lNN$
z*jX*1E@!7iyQs$qX|#X4p03uL^{iX<Z1)2d>p36A9r2kwxBD0L?D5w2kN9$!-<=Ql
z7%x5e*&ck);<J7Q@J)N%op~(5kEy<ypI4g4@}1PH-bua4(zEBub~~YevYi^x8?e^#
zP0OBB?e6ckJ+_Op+ZtcX90yHa%_sa9wXam~{~Ry9CGMUQj_;LPug<KjKD5ViO?o-x
zys(@c%h^8Vj`lI*o9)i?r6IHf*G27iuBas*AFHrKyU|@_H-;VhS+xA5KhoX5DvTFz
zU0^?AeHdRBdYr$9tbW-(E-o{FdzOEDer)FpcIe;l@Nd@V?8l6g{fl{Lf8f4>wq4Bo
zv>RCQEI00%*ARL+%-0d<#rJBzrTw@gZgZZrT-@yUjJsVA#La%o^-8;5S?ynGj2oUO
zF+S&`-NzHgHvm4{)sC+nPmgw0uQIRqn17l*-seia<&bd>Ax<NID8~{1PU=-Gy_L@2
zvzFdU`*-tB>J5CXdpr+V<Feg9tnuVoddt<1?L_;ed*Rdv4{iRo?XcfA5GVbTAA|3I
zK>cuBI<uM&%DJFzeXj@K@4=tw!4G@zBk(5>ALEHF`4-oEAJ@3eI5gLr25MR_&TkHB
zv||%?IZrU(yl>oKxvQC-C5?F^B%RapcKZ)0U17PWbh{trm1f*-N8C%TcXL+UZ97=+
z(oP<BjP;d_Z|1WEJ<faNSHNex(@(V{UUNQd&v)%SBG2vl7xA{|-yY`=0s4JE^2~nO
zf?vir@Cj}2?1#FK7xR!?X&zXw#ZPw619rXIc}KmdH*kxk$96XX$j8=W{2uhUUZ6d{
z!=C96BOgXThTop^p=Z3w`|CcZ@@3ee-P$sChkDI>USigvoq5>d@y?ECx&F%df=_AQ
zXm<#-vAa~ivezf=<0|@9yPvJ_I8VPL@M~&$DC5TejK<IV60{e9PkYO)huV7o+TD+O
zwujaKYS1%zyDP7|wk*5$cxaDf#M90{+N0g?(H^X4=CfK)_Mbz&j*`QCpM{;)N4m#<
zzQg`f`DkB1Lfq}^MLptXe{CQitVa=k*v|GiXxHCruX0CxW_;i7`sXs&ms$T>kNP({
z>@QXSL%j}9f6nK$-J*|azL}R6<3PI%K#qB79~TWnK6YMcKL@=K^H4j_hiH#_l|$5H
zeZoCjPsTM1dH``zF1F+rL32Gt{ejP`J?fM1_2B#9+jau*E3@7GeF}Utp3M1C9pzm2
z%#ubw3`wKEx7RTkr!mW2F(x1W9x;!{?e-fo9_77(X!qHUIE<^z$2CsI(Oz#c4jv~F
zN4uXOj`n)ZHD2Vn#<;Rdx8uwyeK0Pi8P`1GGTfES@6>B`)MvHm+Vh{i&S}qws84%7
zM19)vxh9f>`=!%gSh{~?d+_rXpYi(On^rN$&m4X)nfV_ejr=>Ld-MbLzh39b^g98+
zrcTBe`#Jr#>kYrut6F+Pz1AO=-mIm!+`P;2+JGMYH#_W@d3ZVhMf_eh&lhON`J%QT
zk7xGrex=u|2VjT!qx~%S%y0Tr-Q%iPeupf*<?6>g6`)7D2s(#x9)PYO4)UkK55cE?
z4Sd$84%*bm<h?!a&3F0O^@&+u^i$e#>Y8_>WBS@k`@sP87<U$Q3BOND`z7$%uJ(M^
zjvM{69k&(dREHgNJYH^Gw&!EmY1_5dQL`O(O&;y}sl7h#5g*&f{gUR9`S3so_<cvp
zWxw1lHv+l}ISC>8@c2Xeu0kHi4%HrycPrIn{#Po`<Iqaw%b(TpyHff8D{|bAwp{&k
zI6wVM)vNJ&<Qu;a#r`~n{>$-R18w3m^T`C-iN~=F;^y^n>eVeh)}MMV^)Q|}&YIAp
zUB)$F#hC+5y*y~@F%BPm#?L(8E)L8G^jAh4wD03RZqc6Zep+F>jqC5pxxn~2N>jfC
z{Rtc|Og!e(fWCXJ%6r6{K?B__O8c-MKrRN~0Zo5XR=ng#7GI-q91ryhO6n&BdO*sJ
zu>Q|gITz?dj`?fB5B)mt)b}zlf0P>lpY#xD`lGyi1L6YuK*}``mj`|f3@o`O<ELT|
zTwF$u_3{y~-L6%PulS!dZs!$>p4F}qXdg(s<sNpOFKGYsV9#Hn-NrXmuLiq%mLmIH
zV2|aIm4B9JDTi{($CkY&<>0Sr*<(5FwJdv!mc5}bYTWdfewX$mHXF-nZvf?#&w^%s
z%a%RQvd41T8?o$_EPL~oy|QJG<+K-C_GT@6*?M<<8<stm(_YiE=e%3<!}?BG_6AVS
z{IQ(&awup1@|L~2WzV<lv7GiMEPEBp-oTf->l<43SWbI2%U)#JD_ZvEEqg4dy{2Vv
z(Xuyd*~?VB`yb0`&qX=&mjliANPoGzzIn?Y%V}@KvRAb1jac>q%O1;VuVUE?EqhhV
z-mGPh<+RtZ?8TP7Ma$lzWsl{wmwAuom-%x+Gk^K7bmwmf<?PQar@ew@&$sMNS@w#S
zJ(km6$+9<L*=t(%0?QuDX|HVAt627i=DO=UW!Ymn?S+=Ts%5Wi*{fOhSWbJhmc7Wb
zH*eXiTlQE^dkxFpyk#%@)$aPnmOYl!UemJIvg}P*_7*LBET=u^U%LBW8Z`S~-LjWK
zIr|^WX>Y)?=UVm#{;j*dIm;f)X>Z7~=UMiOmc6`XkL9#iu<VUk_GT@6zGaW)v{$t3
zl`MPdfA6mEgk_KAv=><R%9gzm%ife_kL9#iwd~DW_Ntb>$g;<B+N)dk8kW69%ig?Y
zkL9!%TlSiky?moPe=W-%%V}@Xvgf?Fdwnov*-N9G{h8&omq9t_=K;%J)3WDU_E=7P
zS<7C|vN!a#?)nZ{_E=7Po@Fm@*(+Q23YI;V)82?>&$sN&TlR{UJ(km6$+9<L*~@;t
zyS{;CkL9#iw(M0bdlQzuDa#(qX)m<wRV{mU%U;d0$8y@6wd_Tfy@CJeu5aD4$8y?h
zSoY>EdqvA$Y}sQu?KLfXEz91lWpB~4$8y?pW~}1}XdXY(d%NqKK{>}8%V}@Gvgca%
zMl5?-%O1;VFK5{svg}nYd!A*F<+PW#>=i6~i<Z3+%O1;V&$sLqEqi&KS91O-S@u{?
zdlQzuz_K@G*(+Q2SWbHtl=D1&3iRT)v|ZVbRoD$Caoqyw19=_5ze?Zq&h!5m<+LBc
zKCcteej3-2qF1W@7)ZNB`?^tBQF-@O(0jEaufH^{`t!Pmi|Z4Cb^U^Vq8`^V7JI~B
zNBr(<)W1ix?A!5sZ&dm4wTc1sm@oHzI{w<%<&dx;v`_F>=mUKq^*!kGx)bv~!S)SR
z-v!2&exZl{Ed4_-1o}YwpZb8t&%D!ryMLj-xIpHgc)R{Iru~cd=V8BX4-Q7=wf}mX
z(I0`dOSJ8WkYk)S@;WQgF2Aek_z5F-waFFP%kI$M)eBy%=)VNGNpTIz>!5RE%8w!E
zUahou74RCxGWgN+m97J)fga>$KsSIfa7Dq3Q1~kSeL%|BUX9-ie0?{+SDdYzRqn2e
zGyg=buYb1Ue$vQaZ9@623l*IL@I1wKoTn@8uUF*nAl8SK_MpEXbPn_a=;iWh$LXI1
ze?8({bFr4Ye+xwW28eU~T;(qpr}JmV=^(Fuk2ps!K|PQM=96*W-TBPE8~yJsitL}k
zq|(I?DYD(&_bSaeJ>+xxJ&;4kzN_1vahBexehxKG=5wWS-r06%obkK<GI9R7<7m0@
z&iRw`mEG=k|D;?mT<QF2kM|YF`De~cjC-Z?66Noz;}PxswI7cd=Usg~YTNztW&FA%
z#$UPP@+Fn-24>}H2loLjWj-j}arsg@cO_4Le(S}?Ui}zd?-u@B<B2}=j5~B=_6nIl
zb3V;;>N`@PAKIrs_mk=;dfU?eXrKP>$j9ATcJ=t?D>t3IsdW9x8#iv-R6JwdhAX#k
zUc#ZB3!7d-<qlc5_j~oG>z2^4{Um$WmXKR1>!9B)8?Ws?rS3BE=lba~CWQLE`r55q
zPQG^Igrs_@%62I6cgWbkWM^+jsrhQtRx!v<znixlx?jdY>o!fkjq3N>jpO56H=Vq3
z+t`+k8>HU0l<xU4T(+~+H~HLN(&Air*6{Gt&e?F*#pgcttPK~Q#j~;{{B9q+Zo8#?
zSNXm4+)MOy7VV4rZYqv#dd}@!F3DJNKSO=b$)9`9-|A1BCHA`NTfF}2vF+nmF6GER
zKVEU3mog^2F2C1ayRo!%^WIKd{3i4A?FwuL>U-gZXBABIvdXvjyS=z=?7HIC@zE{|
zce=ivelN{meC{Rrrwy;)VAXfxs*OwZDHFh*_S+TxL87a^rLk?>uiv(0`ySNLZ-25G
zy=c_8aPGyIKK<genda{LZr`*~y7Y!kTd&_@kEFY`zVN%$#POH#d;ON{wr<-#Ho9Sa
z^R=5%@w?aW*3yR3#_o=ccI)leF0p8|@1;*GY$%*19T}glezkqu=4&_HJ>%%oi=T4g
zhTD&$v1?Br9ow{Z+s5r<GI5laIT%XJJU%e~Lq*hA{BGZP_0^lVT)jdAD;`HZ?5W?9
zN$$qcldrvg``E;W>q?uqEIF7uY;cyeJA+MksC0ep_Pg!6vFCOb_avBSA_Z-ld>gy{
zUblVYrsr(X+2gv+_-Wik#p<Qb!Q)Y271^}yQR$`p-ofFpZG`nAvcRUvw^99W+de*e
z^5~7Sq};q|gPAmJu{KS+tR#^FHch^b9e!nPb>;ZjhU>;QUBB%PR<vq?{%w0Jr91sj
zjBQF9cqO{5m+jxCd)eynyJgEAOc%Bvu98!hVVky!+hm8|t)=aow{F=uzCkLzUD|p3
zct;%cOT~77whL^U3U?6}9&lBcrRKeGzt}ntP07ayE~0$;-QDM@EFZx6bLss{m*-I4
z{P5D{BPe&jVwd-s$K{+N$}8W}a-J{u9ij1+Q9ii8Tfe_w%coEt{k*$8mFiD29nrsa
zKHk@-`t#Jct_!46ecClMn!o+O?Y2+<11Jyw)Ll;h-VHh=XJ4q;c#&f1d5Yl+6g{BH
ziTSvY%Tw=q=z+h8$<*tdR7LME=C2=13H+`&e`lP(vwU}B@LjzQ7JNf-=6i~3V#Nr2
z7w7@!zN6*)Z-w5Ao|WX=2^6P+@k_wh(w_h0_v1dsqW;o*{ys_<j#mBJ8}$S+`(!Qm
z%a<g!3J-i!GDUdLP<{sYNBxs<f9CVbFFi(ADs@N4^^PxTc?I`-=f11<3txquT}t~I
zm7l&!`7!R(=D)9e_Qw$Mc_?Q^efX`i9Qy{GPr}~AG>*mlsXf+*_r(kF?_8$xt&_DL
z!55Ss^%XfD_#A`#NVV%cPxIve2=;+f`<0Ha)AIG-()$gwuwMtd&sO^jk5{atJ`w8a
zfsP-e<<7X;8v=h8$mc-911eWS9Pxt@=S|9=Kz;e#MD<rXUSnYEcrQsU_m_sq1M{6b
zQtRcsN!!o;FyeZU`ti_ilpnaa%JaDzK9>?AZq6$W^b<E!yB^xl`8%~AOd!uUDn^Lc
z`Gl75MBMSqwA?}5!H>0^`&R<&GpIj6>*;-4;~s+l9XnLMgnW4)R643D#-CGkVL$qc
z(v3c?XO7R4!A}<Xh(4o!!a0@qXJGFU$`3G(c-SqWoq{to&K&aPji{b;vtB3OvrY9I
zn0K>ipFEDQ5%M?%{W8XhgMAZhrwQ!u;&Va%e)Thp@y`7zA@a?B$mg}j(Z7S|sa~_9
zaYYYMEFixT_5;x`F=V?Uf7~ZBi}}R+fzE>=;_{I%)`QO}P2qW^dDNHo1GHO!eDHWx
zzg6QKvifcKA=Cr?%wMhT%lU(LiS6SXp8w*!A7Y$GFIPYDeHA^#Gr;GV{!{(s(C^&$
zEA6~o`*Rg`nqScI5q%ux4B$kyJHc^;{X<2}0}-%>`mi3gztQ=Q$Mq2QJ>)rL-thcb
z#ChvPZI2R;^VRLzAN_}G9BcPzoK-y6$Nfez=b!7fUM`*s%c8x4vg%hzqy7$P7wBKB
z^>6igNe0T`^Y{{AymCJe>&ty&8QQ^o;eS!>4PpG0(2tsL(R%opk87xZ3=C=-uZ#I<
z7Wu6Gp*z0dtt#iCe%?Q7dGKDv0mQ?7tr6xS7yHBf6X1u>@m;EV^Jq`5!%7&h>=wZ{
zRIbMP1Q;VfPK3Cye<?zIe6Dh873Oc~F^?ghw~KaZI|i>re3)Ny7*CbsRNujRg3l+q
zsE3R3GJ^g|`%UH-c?mFnykpf*0rt7SumHL67%dN4T5ta%#R&6laI4ZT+M9W*BaiV`
zt&evU?C^O`tY72Lsy^ckHYmO3f!YsgFZ_w}x8t}JU_9};(E#&+i*cI!lCD$T52)Vy
zP1^6`NsWW+<$W*E^;+pP9k)%4uOixq$Bz?`j|lyyfqY(yc=9M`yqw2bFY-x`JPPZg
z?`T}kb2U#pPStpe>l9=3S8qG|#pTNP--dC7;|I?xTIes_A4<PA&Ruj?!ot~(Gx-#y
z`8#v9n{^#i2cG%-TR!ke`E47%|83|)TE6&U#p*|aA5#pNM?BZf_ZacGIE($eTsLx@
z4#7|KBCRj;%YBm^A8bFaXStqa9=HzTJk0uYT=RIv<2>ix+nrziFQ4y(Sof}ftsW1!
zE_$i^zCW-|cPDbb;y7qu-+<FrQ|BX_U+c#_b%?<&en<PyA*%hK6L0O)dhYlOwIkPC
zyzXYVm-Ex5+i@awxE=4PbFm%Ef1!4?W3k&Y)1w`|BM!Htox4t&?a29+^PW9!%zc>d
zoO5REM!fc;?PB@+{T!KXl_kG;;NBY-vU#1G!n9&yB=0aD&cNXe9L~Vu3>?nD;S3zk
zfXToj?>itJTsQQ}PVP5){z)|Q=I`J-0~U@|3$)j3-NW);{%rnTEzi}OZMX1Dz3*%L
zC+*_?3+V}7k0awS9?ro3;S7|}pE)if>$>LucGa@S-tl=X_xIExx19V+>cd>DMD{N&
z!`NE5A5WU|6p{S9A|ETMBmLU*DdQmWxtV$FM>2dlro5Q@mwNf4JoTx^eNDaeD4)ju
zAL?<xQ!hQrQ=fX=2h~fD@_EZ2_eb^8qdfKLuLwK6^d?Yl>y?+$qdfKLZ)zF6Y7c+h
zf7L5a`lCMm%`fAx)x)2I{aDNSqdxs{A6GBE=>A*}=zdhAXFlxLM035ztcA`$=bXp6
z+4G<J^po6EPCxn7lTUF^&7FEi?$q349mmM5lRvX2lD&kb>qfUb5$@ZT(!OvHe&q42
z>$Z<>nwW4lZQQ=8=nQ!iId{mrY~qwF5<BL3oK8Eta9_8#9odS!^#<CRI7RfAisu&G
zKkjX3+gP`yQxiKmE1op=BQ0U)>P?%R>$lvndCO==G$xkQEgO?*y;rw{jZMyVW81H}
zwxkvwz0R9BMY1z-nh7I`N7CJupEWPN16$+c;~V68rRQw8VdLiQ8%o<YKTr0j8`Gy4
zGl@Nuug-i|R&4K%?d-*U*d^<@Y3r8J4Oed4x^Z-qdG5sY0mkzfE1m`1*X(U)R33-g
zw)I9>G5NOZv>W%Fd)wH&MV^O1S4_H4lAF`4SlpZMAlFHqOrA9_u2?%&I<tw#wv&GC
zA=;4&EoEoqb$8Cr1y;Rwzwr+2V5`5`BrMy&rB>^tYL`u{8+1>}4Gmp!ka+AF=1j`O
z`4r3k{&%dv{w8^#Ks)ED#>2#^rsH3BT`BQ!U1`uAN>0>_eS1tEz}|`_+n4cQvvu<p
z$JjkHiP5uS3_rMn7>$h$GEb--*9=cHd70s4;<D$i%17?Nran5canp0J-@I)snK4e~
z+;y@Q+u|pewKKM5`!)`NC1ZKQEz8>Ij3t>MmdZ8vr!ARlty9;4G&UY>)u)cVBzItg
z1JWE;maNa(&mB^IdggZWOUv51U2g69#rg8GHac^gJaW2JZco^|tetIR<6|4IOXl!(
zNnY%+u>Ko=zKz2Cq1e#lq&;sJ_T7PvZKKIisWY)AA7@(q#QpB_Hjr2umGYdK4#g$&
za_sl-$kq)>JlAhAV65a48+M&`{@@O5+^}uQIt|%%`r-06Sf?AdZEhc~O@7X^Yz_bN
z4s2aJcJ0<}H_F3k^2Bm!`-X#$ESn_Bq;=UuZqPmLRL<GwTeim!*>>_+a;NeCU&_^l
z$WcV$@-HqX#Nf&J$6(frWSg1J8fVuv&KiXkBnjR`WOjZ!JByu}b#?|P2Vo95D8!Q(
zL_CFnAm$=D2wrmVu-*f?=8~KQ_h3L|{rTQ|RoyjjI@{COF#T8kzV}nruU=Kpt8fwE
zB)9HwzMTPkFqAByiBwIh85X^Q-Y4V^f$-@cHGT|pqd2}wjr7&1oS=@4_?%IEuKk{G
zf29XfKkLnlFcr5|)`fb~u<YtV>vCu}pNFgCByCyZM(nwgUkyK`u8PmA#3;*V#|!XL
z>6I{6C=Duu5B;0VubZ_3d|Z0)q&mlz<6b3P4&Gfob9(LUduYL=&soJMF2HAC(^UOh
zM`SZ)Gs=kZb-7%C2iHxSlIpXnoXp^*<NVTJ`R$++A#J@I@nER3gen<@NnBl1vd{13
z<B8AcN5k!?e!d??$Qzbu-NrjB3bXxpAxwS+L`><+v=3VRrw|^Ga#B!h0YnhgK9-fN
zbN|kYZ4Jut=qP*zI9Yf<8TtQWc1$C_*xA#DYCN)|3L-pR-*b=V<83$lAJyY%o1ICy
zv_OptP>gp9N58G!cq|`}+YePV8BrW9`Uo^ni>Yn+=Ybh9os2HBw|Kf=SUZ@H=X@Qv
zM`Wm`Y2MZf)(BZP{oznPKHC62C)*&bmH<b?x9mE4Dj$#Q$l=MrhC%|y)A7#Mi}`r6
zA_omZB;KbtoOIP#)#LeCEndxJ8tZ-F`E6(2{&#o3w(aU=+Rxb@dx=|;IMoU+xF-_X
z-%$MSEal6N@TL)OZt!r-S%NBy1}<ceRfQR!%Ez>^M!Pqp{A2$`7@Y(h<7%Jx+*|p$
zh)rqPnAFhR4rCmv-zjr0AJ5v_aKE@jCKX3ddTSrLGCSU6j2I>kfP+NBrZs8&c5%4?
z_H?^Q8R!m>c<H#|Rsmia@rhMtvZEzF)C>4J{Z@dFAD=)Q7cWc)DBzK$ld(AmGrw1~
zaER1)!b}Hu#Ai+EG+%&^^ieLBPwR++dBQ%Yu&V{Iy*MicR)H4rcun!Rv_O%UG1+!P
z%p-GC=>I+#g>Wq=s*5yh#4iQm>G_nwE%I;=z~gzmZFrVO%-tZKBMfo?emfa_Ve>1d
z=eJuX?sYdFFo{c8uPdxSX27ar`VEUAu}J*Jt9fB9-!EU=ysIqvhFx0VD6tx%8a5Yo
zbR?gSMecl)i`D8~*oq^JRw)Sa;27_;()Y;Keeg)KNi=$QF_(%xz7n8%lX0c?#e3iH
zgNvCHxZp%*v=kZtGPuN_Z!0<HuIJ+Uk}607=4muE!0is^s0WRv3A(*O6l`>dL36kn
zw-+|sCg8cQ01K%MOmH3-Cg}ItjX?us@-Zc7(v(jSb<ii#B5wh{G}NO}E5f)QpfT<+
z?CP8EEMPSl6AXlW&_rm+@Nn(@#zld5=k!bftAHC2dtfe9Oa#3yV0y*^TRC8!|Ggaq
z!sGb4|EcUeRAbB?`vGd6uhO0S?(OcpfD?N3fW6`J`gScnQh6peO;7kfeeK~I?qHn(
zE70DT&-1n0)!d0azKo+!zjB45V`EmX2;I|smF_fuiuZ}$=|8sgV@tpLu`3abu^f^;
z1&=<x^NCw?C4Pp={7qle9Fk8zvi@OY=|79e%cUFn1Aim`@6(%ZONzV4_*hqqEo%Ln
zc*?K;_1i+fep~2Ef|l$x{T51y|0A~G=G`_wd-JZ)*Z3;kY56}v5#4k2=AO`-dqU3>
z&M7%R>s^{padDXF-AzSL_3LkrzdL@8!YA=_^kqw5w)~Iy#5i|!?)Vk%vHteCnx(H<
z`rX4+nr^l9l+UhW@6(s>OTJF|{ydlOJTXb&_`2hFir(0~Yhzww!p_l2daciO6cd)y
ze{A#5J4c0n{LKFH{|H)oLfhHVKZ`Pdb7=1PGYYBw>Ftu`UsCehW|lloI8OHDCQhz}
OBLA=cO`JQv?)HC+Bp+1(

diff --git a/app/src/main/assets/bin/x86_64/7za b/app/src/main/assets/bin/x86_64/7za
deleted file mode 100644
index 2824e07c3e7c86d47482586fd749f153170194e6..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 2711048
zcmeFadzh6|8$Z4~Oid|!&|!)+F)>lhlwOnLq+(AdMukWWQbYBMX7@%)HM6m8n<0nf
zR1`VqP|CDxGHP;84n=B)sQa;HA{1i2pU=J4KF;?3e&6f*{qwu7w~Mu(b+7xh?sczw
z9iL}z9a405^JdLjxa_~?t}|TC@SHV$ph5~PJpJNc_Q~ZcaOJxWLVASjaK&vIE#X6f
z&6(c?X(k)_b!C`5WoVJjyD|)Z<oDM%dnjV$H=a)AZ8YVsjaM3m_BX3%E6qoK<LOvZ
z+$=}Si<^}u{4N+kja;r-mo(Sk2pwhd|0Nc@q<H~y%op&-m91&)S9Jp{LRbIGv5Hau
z%lL%fEX~2r_BY-BM(A9>8amgnhA#3O!H@h#<h2GppZ}?T1t{acGV|k#$Q$up*;vy3
z-|Be*=!~T;!~ch$NHY(&^8QKBrAL}}i2RzIsaprgprf91-i5Bm)5<qLIe5--Umw(S
z$|=jHlue(0OqeR{Kk{1sxO!^paxGnYg?Z|p2;Vd1VufcW!8Zm*DSTcs{EZTYFG+$I
zynC6#S0ur!Bk-(5xdmP$cWDxQ@_!6`NfNxcm(hPg5<JV+YhDt(@_NIkG6}xt1_Qq%
z37(N_^q-Xk&%MRiVOkR0^@Xv+<Ro~;y35rLrAhGI0fv7`61+Iyz(*y)OWrnoij&~=
zHyZstN$~12120H|XG}Km{3Q4u%Re^>UVXCBCnpKM)asv=1m9!ZD>DgRZ1u@Vg6GaQ
z`lKhpms&fxlHe}eUTW0;CI7R)|19u73;fRl|FgjVEbu=I{Lcdav%vpH7TD`P@()k>
z59yxTYI5}Ws>_-;ZuFGDonE678hd`}?&TU+`Ty5nt;Byxst!V-)3sX*SNW~!uCmM#
z9{-=7z?sr=T_;ywb>1eAzlDE9`skXP%HlO#C(G8eJGeZx>ob2Xb>(fUb$y40x5r;A
zEidWdk}nz?8!J75!P%a%p5t5g%mKbPO=<v@4(={4S&1i)ud%F+r@W!1v(VGoRU?Z5
zEAlt2<^ow}4gzz3ovgp5BbuV|rZ($a_3`Yh^E9qs0klTXfZAKroGxoyxSYW?EnG&S
zp@|B;(5qiFDl}zO2Un%R$VrWHK@6i+YK#+O7~c*_sCGn3`xwSssWHMA!!Xr<vy!_^
zB_BS^RPyWTsAQtCj+F<2sc5i?Tu)5jZtsvpw6Zg0UHdLDR89En#1ijLxiH3HpPT>&
z;gBaVF*`TB+yjn%2zZ4iz8caaZQ44u>bX>1+tjvw-QWZxaBqU9P6u9IwZ}gwliFl9
zY5PnlyLy2l*A@EL%e;YLlZcsK<liS7Z|>-laJw%5#B3^DK;A=nJhOBEfmu13Jr3j~
zNomrWY${M9f5BFsz^Qb}G&vNEsKrnadIB@(e}En+Aas}ff?smViPbKhW;}voPA0RZ
zU}pSn1-&@dMRs0wl6vIV7aA7%F&5qAW~$&{=kaaz9!LJM!m@0sJIJUX1A4>aQHnab
z3L1sqXQR%$i5g#)ofTdYt<7MoZ(M7rjVA(EZdbmx-d%|aE{9r*IANgJC8v<$LQtS*
zPt4AsiFTa{65sAJSfD|^WG01Wnv<@Zp@VKjeOc+YlCDmkv~+RuI#Axb(^wlwqUXO8
z{z$%PtFmt)giUfS3Bm2krVNy^9}Hv>h&+KPO@B+%=O1V;B+X>d6q!2ik`}-m#yYYi
z{&t2D`6GW5TFI*-JCQt3MV^*zdiiTW9p?L%^t)tvQ@U*0VEcbMLgHAo+^6i#A0_fe
zUAMJ?XU+M8ZW`|!=;xCFj0TFc!9RSjToQxrlD>cy2F@@x>yHdtZgnQ3Y$mmV^b$%(
zRPqqm!UE3)Fv|DG)1y4r%1_9I->jtR&tBdl*$$_X<H7O7uK=G-kY!YORkI1TXiu6i
zr^0r>rlX#FkdUC11g$)Q){Vs(o<K!*4mLeweMSwwm_*gYNBm(tk;4$#R-_fUW;u^s
z*D@N}`p~IkT`@9RT{PUNW<9F2sut<;ZJH{oGV>_2$m(b-we2)As>t2|6DFzHoao(v
zUTMbETl0+_o&!nX)bd8U^2~2CU88HrARoar#^46IlWiWnCA(POytk!_NW>_h>7MYi
ztDKfC7Y*#}BDP2FBDT`q#sRYlXEphF(8-+EF!>B5^t`uZ3ZDYKv)R8}vsRJ*{l}?v
z<VHGjqwGe8Oz%jjubavo3Z_M9y=mc(<rrlaG3W{s0b@@Y)x9M<*BD}<@{0P$eKu>`
zq+GKJQ;9BQ@_am#kK{6-g*V8uR>pOd^>cDIp-;uh>Tj8Avpp=wu>8Jg`FGNhfbCJh
zr_z#u52AoH*?S6W9@X|+%_gX)PSOtQ$+1=&Ta^_SH+k%+p90)J)8HY+Ytq>VZ>8r2
z+wbmo6rHy8H%_rUe(<f8MdxFTMP@|0e1wLrly@}c+^SNp{EdT%okN{MX)x3raz6(p
z?Dsmm%CaS;C`pPZC7$5K>?~P-ph=`@YfAq96@%va&=uao2r&57CJ~?qrM4q)tBRp~
zZU8L#z8nTxIhe_n5TXi^&s``jgbN#&xEnb}Bn?wHAVZcbZzRh)6Q(XxV1q0IP_Cs?
zW08>4aD%>@`}Rft9nzP1G+2RQ-OpyT#Q%y>y)@R}Jd|^R%0X{LuOrP{(wGm`t7xh?
z+%)<57l<9ylD4R`6$wiXaciVE!HEQF!D3lOs`e;0Z9SJB8EoJ7UubJIabTp%=wK$z
zJ>r_bR+bE-A=K<2EXCaS7&N-nv}htIO-511vn=t~IE^|{FkZo?D3<QjafO)``&(v<
z8#)9!Wcv|iN9vs2iXRM53-<qbK@RxTN-v1li494<f)Ax4>7*o&Taw?35RrR84><yf
zAs(FFP97)q$n19DKH8xAGx9b`Ezqr2#F`ev>K})-FcE9G#WLD+7Gbn^`)0udRGocK
zm>P@+WlV`K|3K(HTZ!JXM12#8zJ>cx^JHn>!<8s#iT*kl70+poiXYA7NF*VhCYSGT
zR@T*1zQ1`{9}y@ZSHt#Zyjpg6noB;VQZ7HMU&vO$gL6L%s$vDXk%H+ch_zxNRqK!q
zo3=Jus7<Fp6N4i;Kp5=LVk3`=n#nsx760^cW1_)8M`L@+|7cd$8)@^hv!sA}QvM27
z!FhaCn(+sM7a?&nOQ2v^JVA5#MkSwGW;<RW%F)eG|G%l4mX+DEOUNW}Ci_>LVl%{F
zT2m8suNm;rz)9KuTq?_W8EMlWB5iuKRe0{uNSi|P*(8fNa*WJt9C^=Urj8}?B!{Jz
z<TZ{QvLt;#BBNZW$_OM;H9tQ&rJ7dWEK9tnFiyp%NRmQD<3GbJNeCn&jhQal!DKrU
zPx<%Fyobtb(06bkSB{5Covzbh;e~(<T+ODDP6Va_Sm_B)FOcyQTe}L&f557v!P`Y{
zVofvra9;V5k9cq@ZUTc6<YX%n=dzpAOy%UjzoNe4iJISgi2BNsM~xjbspKH2R;jvm
zk<MgmocAt1(s_@*6B7PLrB%N1bT?oTnjN%<p&1pSVY$3Znjrugnm_#!Umu8AG)C3S
z_XO^bOhIhOG8(qB8cy|q$HKoeZKaL{l|QE`(GacH$B&q54Fr+4Fa`b6pLR$g$oR)&
zmZm)g<wKD4Lqc<)6T#+bk=mup&3qi3o$frj3AOtHs>pbNOrN?NuxR8<mzj`?_DN@y
zxj%b9nl{!39#uBm3cmjwGrCRIf#EY5c`{~zfmJ#Ym2;RW-wj>ryq)AGhz#V&&-if;
zd;uNq_zU`8jjV<y`GN&ISkQ4#V<Q&m9M*E_Rt<S(Nqq7I47U3lqJ{Y^+++*8vaoKq
znStn1Vg*V#pt?}P0c1aFB~u_}#lf!Dvz-1_trYw<!IwqB+X3b-!VnleX%}GzM9ZcF
znXc8vkPNRb^uH~`t(12cwTf;C$ms+olIsG@dmWUl1c!f+a5yDQPLi-E*VLnw5|*gs
zI@wBK3JHf%!U<Nwpr&<L`6DD89Fw3sA$O-_woley3ua&cY1B=@Y$BPhMY%PIG8_00
z%x)sH`+-cg*{P#Db3MuCW|m-f5j=g*C%q64wsb<au8K`1XPks4T8YFt;w{@cS<-;E
zu1pHxh&!j}k^E7TV}X#4xD*qmQ{$gXp+`GN(@rM$_3hxQb@5seeZADI@oaA%5?!;=
zf0kg|$<SP`G`s`Tl%`VxO&Mt9i9g`z^N}>sHgWiATARdjZm#5Fi^gnRI495pq7%z6
zHCvG_&?;7AEQuPVaXcs5zzlyOhfxhY>k8yGSp=%^3q+bv`r!25@^N`fPJZPbP(@=x
zJGl-n&6sUw9+|O#U_##U51Hsyj!h?d>33^gok-;Vcgmk0G?ay;ECZ!3C6DH;5ss1`
ztBbZ?KWHWADb_97>GGUTE_X@peuGZEtY0a5OQLrtI%@RLb6mnU<ykilNPp~)GfbKU
z`k4O330*wH*NFQeaAk_aHP0lb#l|hpq36d|`8wf(-%RHADa6LH>aOdiB%s?9yevCM
zUgorVA|;GRf;bpH2pxeNmj8Lwv`j;9GHjXc322Xjk<&eEceM003m5voDjM*e_bi&w
z<KN=xwcisg-tX~m^sKEv&C_e6Cs5X6zh~{vmY(wU>GFp1Nl@%GuDd_FrlV`1`;Ecb
zdoX%uj4R*Ydg`;m;@`%V|M9P>3y@9s&M%}Hc}jsEH|>Co$?NP2`(*h(+R$$36_Ps~
zYc{x5(&aMf{%MkDrE-20Z`n(LCuQUSn-#&7Qj26@NP~6G`K<{bxJu)}2`qgUi6exg
zpW89Y@N@f~Lnn|;yBZtw8s(M8xz0*L@t(+$Vdq$Oj2Y<?1kUOL_Gc(O>v)>i>U*)w
zMmAh5U;bwNqgW=}@*LJDZht622k%J~;G=-xj10MDR!i6FQY)alWl#(T-lgH!WF~oI
z`@=6~cq$~pxe)^H`~7&F(MUUOnlxxOq21KkJ42fEwR&1>*Cdj@Zb?Ta8UL%RLAvi(
z&ZS`e4-pHb@WjYSIquTd2ELr|yeK?8#=;*bybIu_eVo@zw6)|m!kYme-dWis_9ga+
zG`W>yUl~+L>J}$xx8TY#Lq-E9sn{D=d>UEgHDTfQJxG6e>$@hz@w^)`3MKLG5XZZo
zgVblgpj&Qa@*Wa63ugfJ^AJ|h*jxCUSgZC7q_eK-h;ICLc&j`JBHdJ=n|0|0yVS}Y
z!niNOo|gugMrzYlS}}`Vv@E%7q1h~mYq!pnnGN32O^n(caIBVGss=scaMNVnw@|-R
z(~`FGJWA+%x68i0nX1J-;FH8az4?tR*<COO6$Q$&3x@fA<7V7GDIt1fR2spIKkN))
z6nh#B6D{KQz06L4#>|nv6s-H)V3!4UZr@8RjO_TOTQ%b1W?$AhSJl8iQ519gu}0xI
z%z?yg1x)FoN<_oYtHh;zwn5K_nlzc3^@9=+%Fk@#n(*hc9Z&LwX6tPG)yO4a6n>Ki
zxB^dFVY|a>yQxRDnywwO)o5n`vZHI*zci%DwTJ@pEfS~gGwerL>|(|~0svi)q{{|A
zBFs8JzTDa+rx1M^5;J@K5-{>I6Qph|oQK3|cm?pnzz{TK1NN;81FfK;ZeX{7Mf3q1
zwUZu(JE8vHAsk2v=vHc!EvjNPy#;M^*D-8H(Vc>UQ6@3I+=R_hCU%PU2sw4423tcB
zCcAZTmheip#mztnWXfLrINz^s?HV|;(0|~<5rHexx$g$|IW{;5?$EoIlR&tDgSeS4
z6%Qb8X3{I5?XI4%_{SPZMvobInZrCEbW7?>WGH759FM)O?G<oV5WPisaC(UZP=JSA
zseBTR9-N*dt@B&ER#z+YI=Pd07$)W+9~T_SYR%>FhA;Q9bL^5EBm7Q{@GFS$d*kFd
zey617N0qK8zdOON=?=s{Lb5!8&e*3Lxt0!lR)%N525)-f`T0n$DjD9m@sgSvD)(77
zD_d2GI>;lmez58eKEI*5R?Xt`A<$B*f8Jl%0OgwlG+Tg_O{-6JtH(gytqrF7Q-BwK
zhlA3!ak5T~lXY&Kti}JbvcBPFYeZJ}f0i|pvaVNI4boa=apZ7U?1kzVdV(DfJF2xy
zyIJ`Unb^1S1PWk_jc(t&C~rJJ)9vGZ2~RL>s|&Nr;Prd<x@V@n+&afK&g1^~226%Z
zJmuB7<J=S15`c|t^e^`z=j>sw8bu{2dduTKC&PURc(37Pn*P>@qJr(0PdOAun!AV4
zKtVbi;b7b$DDe1ylv8dz)D=#{6RvFpsy14}G&$>N8n&uB3djQ>F#QN~^3w7hctQEw
znXvO}u2n{lahjoAuYP2X9)tT19FNaH=#Z62-qdb-<}UWIifrYH8eo-Pk*yMufmIZO
z*|EoOaR7k?gCiIJ$#`EU4!XFEjWWG-$A4oQel{)$v_|jO*b<2{CT8S6(b5&3turSn
zItp&`Fm<0pF@GU3x<CFi#c=9=2;9$^LT6#*8!DFoNB4))<wHJV|H1ivH?db`)1l3f
zxVHz*xhi{B6!JA73`dvX$VoSw#Z8fSQluWl&Dmo_PL@|G@_dSf23ax#P8qG1^EQ0A
zlAUN8Paj~Q4d}r#h-}pABYy=OROl6gdq=^C9>6A7EXv-(1~4avh_gK(H#2rOY#x4I
z0~rU5BUR-FIR?Ms`ziBhAVj%@XRj74NQwDN7BHUW)6lK0UE${vM^o=vQn=IBhUUSk
z8g?N!f<~7Im^ox9<cvy24e0YLdX!8?1<W8az7YdUvmY3U?27O`#lPEf2(O~NxV3s$
z`NB@3;(%@CZ2)Cu7=z^NNH}9La@XHu<<6ko{YZ@5TbrfFL~c}(het%Ntt<+@pbgF-
zGwOR*Z*cZx_Ea4DH+cMyW-mb7k8?Lv<9Nm031D}x3MG(n^Vrfu825Fg!$@WuBe+U8
z>ISaX^~1mK<M4<1Kf0P+3ALPwEz@0jTO*Rg5294}G-OJ5v-earN>?$sc|lFIlVz$p
z)Qv_Wcp9G&4Jxu{K}EUvT29(l=_Z7nlFgm5ifm7t`0=GT)wlw@NoiQ~z%cs!P~3As
zF8UtUg$tfQy`M#5%=zG;be#)GC&KTI!mm7+@Fu(5o<Iu(()ri14K#XsuPvXD-ppHs
zFqNLJ(X)LkL{EPU`c!0r6RcXwI_<4*4l-=+UUxL>Gd<UI%gc`JfO#m1QJ*uBq08Qm
zARx`7>U5X{iI{_I41c5jEC*;rF9DjF#(a(^C+|jR9qkM3*=s6IbDd0nuOczCmHhvt
z$M-zWZ!q(05||1GuF*!n$#VG#olYiF(tl>sKJeBY`RXEg4xVylCsvInhIuSOH3?1y
zfr$ePE7DQBU2<(Vs2`j@P5SNwMR0nljK4h{lNIz_*6I`%qrEx)#^w`8a6rBOBCZNS
z*=a4Mg0c@N!*9z}F@x;E5!Rb|qDq8z@vQ5P_(#?qBCM;bE$dCUDeJ?*8orRQXzVI4
zZ!z5~ZsOcl<^w3<UFgj_k(kiHIT;u4Why#>3x=6GdGtbz+iw89Qbv>fA|&V@MS(@x
zv*<Rf0xe_LP)<}P2oknsE<so(lZz1pWD^o+)jT?9MbdqS>!fkBvX$M3(*lg)JM2@A
zd|{t*<s&?W?`3%bCX<qN0;2+loaKtLDx02c>a)l~7Ffu0avzDGlJHJ;wVLq8rfQ_g
zG^io(5Tl8X9b_~LDK4L~7xh8ZzDpic-1u?qc!*(uI~u=EsSZiW)y<L&WfdiJSM&#>
z?CA=U<N0*9vQ3E4{bcLs^clu;$j^p+W-?_ympU-=&**hB2~o|&jss7n<9y^hRs~@#
z=BQ~h7kuQ~R3$gD<Xx1o8ypp6kV~LN9K(Eigx>0rqwEqZj<;U^xDMsw0~49WWOf~Q
zbHOKWVCgCo08Ik6m5TtBb4heI5?fV_d!zhzv~jbFcOo%WEPsy9Wbb>J(dNZ2^q-d5
z;k7C=ZYwHH_H76IAHLP*C-V$xyu+C84RlNC8|6FWW%5nv3u&^F)GvWL8o_knJrpP6
zu!;$D*OSlpNSrT2aUqPM?iZ|g)K|^86@HH%wgk=@YncrB{Zm>6!}*7MF|Al4XIf<m
zs#yhx3qh1!HHGDsOgQuoWx9F;ILQJ4oa^B~sJprG5Q*`qOnOX^cI=u9&`jHRWHw!|
z^+{f@*~^NS*=h_1aJUA^qx|>S-P-7?jd`<b(+;X(r5j+;CQ6fonS~FXjX)u5k(h?u
zSC4qzWZn4xR*z>pC+fj`R1dpke*mzgCRHnhieZH<xFtm;E$+1zH_l-d_g><@pt#se
z_}k;#RCZ)w=mDPiY%c%$z+TMZ^fsKieSGv0xP5H*4Mv%ml%b5LdrYpm$=O?5zjUI4
z)2#|SO-^?h(qxO~boUk84eug1y5>TU|F01jcmlUtiq{oqhNXB~b7NfGy*b?z7=*3i
z`ZQ0o8qa_+uCfl0gAIVNQtp<Ufg9fG2~5G3^7Q?ejvj+;<TP$0JCji|3TqW@;$q{t
zI85g>!|ph6J{UKZNQ@SGL~+^qoB{z4yJVBUM%V7R3H>MoiLQST@oLL2!}^F5`q9oy
z$jjc3ZN!M{y~oKmK*<Q}of>)iKK3R|reaR5vFFG0&_r!0rX>=UD>p0dM1*Z@K6KSt
zWU%9feaOH}k_yWwWi~4tO6(jdvYg`@UvE<056*_)af-oV05yNtcIUTbZao7_113Ss
zu}WR{&atkd;G}x4Qdc%Jt5j~;mlOpTdvLyl)o3l3rhj;XmAb%7<MxF6kRkO&!DYOU
zNWwcn$k}Il6dMT96>TYwGBa2LVDyTU?W5S<Paihm7q1M-`*vvHmhZ9(%inG$m0ddH
z*#1D8_lMP!A%dgSqz(uf%@Hz^I>!*1v=Km^ICZ(50|AZG_`V6anUbckgb=9>FliXf
zgwgd2DX&8-%tTVjd>ajGbsvJh9Bt?-YfFxq^4DQ-dq8qr?ur)}S5(d}K%K`ln>^3z
zCZB#pZIj_`WfkDko>J41Q0UW5(A>U7;41f~WRWH}k;S{)jps~8`?@QJscpFKbI#I7
zp1;&c+HGcV%%F)%*hnRC$1MDo;x`+=6Xkd;{gA=ktJ84nu`GKspwj?ohu>Sor<ZP%
ztD#2BDS{Udf*Nv$>S9E`iZvJCm;g2TXL)erBE$I)l#;a{qQ^)TQdy3KZCM)Y8K=ua
z1ya%Y&U#C>#wF`ANkpp16X!yaH@88NWk@i$Z;+xxIlb8>oqoW+PcDqf%&`D!=OF(y
z$+1}*n!0E<VFI8xEeC=-sd7nGEk7TEIJ8pEg(T_{*8$r~{RgNOT6DhjM)8omck*^~
zNmmW|L-HC2`-`&EX=zSO{i_u0e?jM%Sh2m&7VrE!2Gow8fW5#_^o^NrZrVy~aVjue
zo5L(7ajt7!41p<T$KyG2-8Hl$L{=xshwSLIz`2o4Qt=h5VRT{r9=3tvUK+6q+OTj1
zRonPA_Ac0r>a7V95A_5qva<l9gJsB<?}PF2${2nVkLmXPO;#&`5U~s8)D>cqh~AZD
z`&*U-Gq3@JIUV?=JB2FL=qR00XJ-$$``EYQnR}De7(q1_ZAJYeX9FjLD^_T@&hD;w
z5iBVCXuzBW$}eVxsIM`ae0>-8b;iW&@LfH0n3zc8t{ANV?SjQ*ZW|u{Ksk?)%dLRR
zAyf(X5|2j)L8n&g5k_P*BAl6J^cdELE2WC;X$iF}lF98Ec#`2K%4rIZ&I>MZ)60|5
z4y9L2^`N8N`z1QcT}*CAqVvx<C+;e{+fhuCXa54ATuh?jNO+k2+-wtC(qo>d(~m<b
zqYpXTS%n?z-#nOVMP>&tAjccu$v5DdLKv6jbjII6Xa()ZH*q|{kPAQ3Q<VrUA^c^9
z&sZV39<Dh;`9wHsANRGQ`-H(zE}%vJW&E+LzYDHtg9_EjCFuY1DH7+SYXAv^vd9p9
zqG!O@8;^Ov1&f<`)_&7m&U}aN7cEbd?d=(DaJ~iV^69y*vg}#YySlt5>#a2Me(};a
zE?lR=d3C+qKoPCRQpAuAG2<Z~arb2J797W639l+mJ+lpt=;$o=603~7(<}wHH=sRk
zfF6}H0jZ2*awYQvFB*7Zq5rReBkkG73>V!0@}#-);J`JA_cL5W@McD@fx*GqjYWZz
zYH>)&L$#fS!I|lD=PmZ+gF7j^+ac(EXu{@CcwU{O8aBwMESS%N_MFQO95e88XCq*d
zOiiV{w*l7j*Axa;?;#OT)8s{<08k$VJZb<s$54!b0aQmZZZ?3WQNXnZupkN;WdL_X
z0p}=S<}@R7fXS7b-0{enQM|{=F!H5nCA(s&k;a2q7P+?H44BdSev2X}58hyITzp2S
zZhGV5Z|ot!h*@$y91{<j^5_uwBpl(F!DdzZ0!0L;PZlrtGkHApoR^c9q=DA$yN9)5
zEC!(`ShXKn`KTM11*#-k(aTlgsx48#FaxNJ0!}l4Sy90800bsr!*Kd!%s2CbL*N0~
zaJ6-OS!Z`4rVHtE`^~z0tag#_+tMi0Cx<u6`JXeWvK_wzaB$%2QWTWXmnN$(@e~cd
z#EI<pu%jJcS1N<Z)c<+p0z=dZ(JQVB7Q;t2dIB9bbG@?L6TCScvA><i-vJkjpav%=
zMvtou8x9Zc!jM5VE>~ER?Yw$8Ts{cl=<&}Y3ZFzwoOR^F5Yk!6rk6MaqYc^;J-L?W
zM38uYHVuj%YHnk>ecurrX>CUCPT0oa02#4!WZdv?$=i)<ikSHnc!FlI_V}?wF!dJ3
z%p-6|c~$lTFq4;mLhC2YH0QPfOF#--W&Ie1!Jy-<wR8>qXV02`rye{451gG2w&l{y
ze|EaN;%KN%n;&Ht5Bcws%+geWrhHO*Gj~O;QddMO*HW+AyL}H33=bWC77RA&Qy2`+
zXboU+ypyHzZAQLic$(}2T=Gf88+2xaOXg$t(iHg^3fVo7-fTC*5Z}j4Z{gx>$%83U
zfwPU_{QFNZ*nG#N9*Hhl^o-jRfN>f(I)^ek2h;ZMJr<m1V7WEKB@aH#TX)9AY+J1M
zXuTTbxODW~mL&4;;k|p(1*T<qaK{=x6lpm!U!4UK`J*-PIZJ3-g>JGBFPt=mPnSBt
zC71d(F;WkCD;1I3_bjD7O~QSfQV_a*+lk;yP0YrWYf1cODq`;tDMDdU;B`G$)^nWA
zRNYSM!pLyox<Oa1$?d9>>$3{r4`aYwMll(I#0JU+`Mg#9TPs_T(?H3&b`>(tPuy75
zWmDOqY_}Zk1xr!n3ADuZF}#f7Y{hAp{Pi(d??=+qZoTBrw^A9qo!m&cA3Va3$SN{;
zLm5Q3SKSp;c#@{4VNR(&CfD!`=>sN+(8Y4;=$5X5vu5VI%GwkLW){fJdvI$84<^DK
zNJHJ0z}Pfl9Wu@^)J=v!q8SO^gM0l$;P4)j5H!B#=0Q6UM$LE+_}Q0#y#1pVya~`q
zACdFwQrQ4o7j?4m3^dSXK*k3CvW+QB==R-7FB!C!ENtLuuA8(ba!KPEt#Ol$Z51ir
z`x(|Dbxj+iz5G=TG)zdYLQj&jQ;G9pCkRN=i-oq2%YjQcZ`tDfNUOO~qBC3$)v+1S
z`Emdg7+&xxj!xMtTEYnauy%UW5;qbO<VlH4(YcV>(|iQ>mre+tPPY}D&((zAlV?7H
zoF@Bqy_4obv5~$rSVu22{m}vzeV;PTwjuMnU8i&Q-W2x?5;JGNZXM?A>Ie+;YvAC4
zcG-GSefq>4XjAJ?7YCb)G8}d{co@FqK_cQ#E8@`zi^unX)(|r%4l`XQ8q9QH_KL%N
zfS7-yv0^;Wit%imU}Tf$1Y&-gfSF0mqU?66=O-37T?P{KxhN*;(*Wnf+bA5-Y7s7j
z{htQ1bRpgx;K__AGL~zyme@Ev2j0v$1-{2VqV@PXd8~QV<IB?I3FJ7(*?cNS1$gv5
z$TNmq@)dopLDm2ctJk4bWs1c;9c4O-6X84pF<9bQRJXg*q)5@~q{6VYf^i<9m}Y8M
zEyo}iURk_`<Gr+j-fD_Hx2f4A9~#@T-S7-8`_`5nfinG~L#2e+6R;!RD6b(gULdPL
zQ0ppffsZi27Neq*2ybpeEci?}KohRYb&!eVRnBDR`-o~^Gx>_iY>1LunEZ#yV4_Uo
z(<yjjXHD!+XG$>&IU*zUmcWy}eQDLaX0&#lT#NeJ^XTn(bZ!z|2cfsg!9WSWBjYKw
zIiG8ra>x6Bs~~z1a3BJ+M(>m1C6%&`K)n?WeKsWY?`~3!LUKxkx0NL%`u#mf`vnO#
z#xw@2$p)!#v1OAe+`eisW*rs}fX5^kd#B08DFuy|KAc(PFbP;eW~!yzd<D{p(g2BV
zM6^`-c$-%)eUmG;Bu%jA04=&h3ps`A_h*u;tQ+J2UL$Erp@Zt~d{CqlxdoA%uuYTk
ze?iHe@1`p3CPPu!l&G!nMwPq*B6;B-D0`=*JX1Q5@<0DTwC_MFac-#tT+X7n)0yO_
zB<~?BQjxoT+&Gm-$)b^$kW$#-Ru+Dfvap+6m5QskSca15#gs&yrH>`j2|E@TS<auV
z_)LqwK-~(HZs%Kq#{(=^rDWAZzQML>6Q$k0(-2GKIh0ASe;^E|CVYnGV43XMkjflA
zWMpc>btGh&ypfVHO$t|{aQ;6O{*4VanUS*aP;rCO6L>)vE6#XYb_6ixyp-tO<U_k5
znb^PcWI1JYNlBC@53}$<E!gg3@-vg&NOWf^?$oxs%w9ol5{`P)<P4IBNVEb8Vn(5V
zt-QFLoizaytHF=N+aLX|l6Y{p#ArEHj#Bo?@XO_KY)k9-$`|5x{C!yJ7vlb<<HKEJ
z&De1O+ltZoz{{Yq?>r{GuUGc2G*79G$o+3{YTh7o{ydB~7raL^(s+?+s(KY8<@}S(
z&cbk@gg?PT9{V*-DtT`aW=<uN58lLh9dmyUs>6Rk9wi0h;ggxMYfQ|M=BY%weH?tK
z(a{jwM2_3nlVj7z%Yl=ugWK1JWy?~R@yf0|%reX|uT3?qxqa^d$JApo5M=_BaZIjc
zav74uowY8~b$>Fft(-(;-#YlsEF^_^=U2}Qi~N7`>Q)f@h|&++EOsC9%Wudbw1;6K
zJB;V@(0)9-%Gv?SC;9SsHccp#I_svyI|jggN&{G70Q;f70X$;>x|^*e4;p|(F?<G4
z9|e>dz?LZBY6I991q?R;erm}`8E61Yqkvok;HIg;=&peH%}D)<iKj28V>M0#5tH^R
zH~fYwpYt|5l5aB0{XSa3p<;3(;OM=<jf}SbU<QB6L;P`haRI4Temrm(R;_;>=Bo8&
z0;<;=cO2f9_ETiPg5~!8G^sv^HzaCMB4w|WId-h@m9qWK-4#Fa-c$Mh7Ve6_@KlI{
z??A`}=CZJ@He(K-A9Fy2O<+Dh`(A5Z&0Ps)=*ex~XoDFtGR`<U=yf%$T%1wdzTX&W
zKl~Le;^E#&@}|Ok#b8?$3>Dx9_NYfl4){hP<M(aU(5)aWAW=xvfP(#sA{XK+#V~&u
z9dej|yX=02@hh~SQGNEl!>DJGzh3t|<m0!J6!WIZ04N|UniO=CtYmH7zPYSLItgx1
zCUE<nMj?)N<7y(?aCJm3Yl`Y4pK25)TBEPL09c`aU7`QeA$h;)xz{q*Kf=}@qGha|
zoSk%-zt^H0{*EM(RcE>9RkEr9s|fy9;(ti|caS)X*!9-n$p~~FLNQ)d1A(&&j|uz`
zc`!IzM$$?(4^={!LjPMJkZDU{^k8Tynr4{)bGeq;@=!GpOgHC~?EMwqQXX0oh4M+Z
z8R&*6luuGisBvj&;62&$P&$|!ZhVr(is9P>Y)CFq$-i0+t-atZga>?|0?F^=K8ECA
z+t7J|RbPazyS|(U2F)b%5BP3LR$G_ct<X0W+MLj#fI4$PYHgz)en)k(!MjO2xM7mf
z^j)@AuRz$v$pmiS&vXK3X%dmQn>_P#63p#Whq(uEIk+h!J@9@M&5aIU2}MzDTGpAM
zt>~L&Ks2i}D!F0N0meZEd1DRS;#DNzL7RaGEgMjy`PG2V-5{2`6(_E5gTrsIsd!Of
zyutYy=4Eg*eArq}E@_8T$S`G~&Laa~YU6U=1~zQ#+zxq3_6yNOuY-FMoO4il38z*G
zaJ+)!X)=PfmD_+Po3V_QO-Pa{E=uO^JzI`peHJ%C&XiMCq;G+#7@gW_MOV6s+{=(y
zA8`>lmcT2Re2&$OT!^Pi`TZp*9r@1Ark_pt?AjYst2&g(mrR~TgXkVlDf(P=kH_t6
z&-w8RGQjk#ga^hr16Y;q0oV*i_bI<HCn5L{qfSE7Wd?xQEyQufE!jM;=$m|Ap__|3
zh7JcRmbtp`EB(ogG~ss*_mh-+olN`<BhW4+<|^;}A#GiDrx@?+1IHQ9VcWmXxq`pJ
zReHQF3%-T1xbtO|uT%ZyiYsxp`!5CCebo<sGIDcd1a^i<zmcuI{0L<9masgJN2fDr
zq*;g!T9KV#C~s$(`y%BShR_81d!GqEC!1CQ9a+>W%M*OmC^qZ?+`5~`QEUVyL*6XN
zixy|R2fe3KL9>Z+0+BFh-2ZOeCQ2LC*;1-0TPxbO2pi`l!vQ|P)pw0--osj&&6E}L
z1#<YNVw0L2C-1z#nk3h-)Dx^QYH}eai-07*R;98<n%vI9Em{~~?XEZrcJ605fI*Tg
zeaWTiE@w8o>=PigO4rFzP}5mWnkE|cknX88b^ErV!qS2|j7+IuAKCeQ)VLov7~?*|
z%}jgL<neElX90IEVvD=UB<{TN9#U94ejxWE7skgY@T$Q&sZeHhavqr3?JnHcC#QC7
z4C`2t7LrC@(wMK2E7{zg<t*qJHN)ZLv4Pf^{U&<%El39HcQ8DNd1Qc7IqbmHN^@!u
z@D<0ye*95krSY&Y4Xh*{wjQt{=&qB%U=|9B0(i~x+p^0G)p^y&o&pN9_Lji?$PUBj
z*Z9f7<8W}VHv$Wrts6F=cQ(dv&g=r-{dhx}Z;|WuKe+)U(JMZKk+H&}H7FpgJmi4_
zF1POsI&UB}3OU(%k&gHUG(*=eI^0hqmd@(=BrTO+^de#WkfFzm*~cR4ow<@;>stzf
zyx*)9{mayfejmkp{L5&+LL7P^H1U!azi$c>7k(lHJ~dsym%$<o^rQ>;vP@3RAMkMm
zLK#_yU%_0_(8_(=(d>g*7SL+Su-$0gPVkVt>LEN;Q|sf0$~e~n5z{gh6!~8yM4v+1
zK>iSU7x_aJ=$xxQ7E=2xssn(tuLw(0@=|GpHwlp=A%0YSOkK!^r*1>?w&F80D(L}I
z7Wp4Dk{(k@U;ke*c3uT~VPJ+7mha9&V02e}1(tI052*DfJjD#nK%EmEe#}=YC-+2~
z1>Vp#%8ZR17qBNcWQAmc93$%rdVLY1L~VHmMkU_(ln{f)zaGU31>JT(yim4=byhA%
zgIN@~-U1IM5bNn2Syali>x2u4dQ0YqZ0OJ$I>-ypK=Wsi*sh89|G_2pEx0+zMbCt;
zL57h(Q%+yU)=s#kqm1X0@k`620T1_|<Jc{ie#nJiPNM88$3TH3U|Ttas$B(MG6o4E
zez-gdXMpT}x(Q)d+0qo)R%!s04&>%$(w51~fayL@X{?R%<yW1dFwk=+m<RkbzDK=b
z&<xqD2TAz;Av&fUgV<yaV3x1OwD*l=M$6BrWgN%u@|1E+0H(>^oKuy9MrI-j2a~AM
zWD*gsGE9whua(}1(w87H(&xQR&%iyeee#K8T8M6m-JQ3Q4eJIxkD0yoya=D9Mr%qr
z@H#_CTzGN&aye7Fdoj%$n*2L{)Dly`5SMf7IeWtb7jVfMj>r`VRb!JwMt0EWEqu<I
zuPf@w+>`@t^oToDY9Mak1kSnwp&V|Zb^Q@%=fO}WIZpi&B*D-|cB)Nt!6j(I%IAYy
z=)ugvLwJuNRH@r4yzw?Tuy{W*xB}v?=%Gv>s7GFJgYYIupe0sV>lu;1(nEKx$`YZU
z+b^>|f{Y%#(}**X3BStL5Bj)3Lp))P;x2LpLbCvnYk&wv=Hc042$9!cqYK2Y@|>gy
zzI578&xX9G0iRjzQ_{gOSjuu$>M#O~)QFjlaAz_3|FR33;Y-q?>L|t60Kq_HVJT#q
z+Am&pXFRCwQS_aBEDzB@W~AYh%qJTxETd39Nri!KAk=#*<Sr%jA{<)dxs=Z<w&-&S
zpL;7j&WpUAU<|o63*jgbA`|Jy3cMkAy_)22V4h%W>F^W`j;1RQZ3LZBluz>0PDZ{R
zwyw_IbduA-t|+i9ALSOVXX;O1-IDj9^5w8CU>2O2D|g}$dUXkgU^eqZ-~`JRz;ZGj
zsB|+vU(e@wr=O{a3HEH%4iI0}(~>GM;z>2kH0s>VaGVuwwBD?Q=|;{?7@lPMD;hf-
zT^7Z6L|mb015WD2A$lP{s@e0S#zyP&PHPyzlR%Md%6Aq*KvxLB@TXfM-(uipYv5;z
z{w$*lI3d(YeqPF!31tFc`h(F@uKNx{&}d*p<lfW70;kIrkmP@CKWM>X9(#^D^%<ZA
zK)X^b5)}FOMoi$Q<Y|y>h|yQWs}t+gR$72J3l_`yM#WhS8=qW^FL91-VuJSa=>kZ{
z?jdJ7(v1|!-Pt)w7t5hot33EE9U`HfkJMU*RMrNv446i+R(bz3*lmdN@fEXmv28$8
z7PF59m9@C2;{8oj>>znY#fTC7^yDcoCwGiAX#+gDv`ImJqN?)E6I3tWB@dAg0UPXJ
z#ujl_k^f;}BL^d~Q23SeR1@6}OJaRH*vOWbs9HibJ83m%+#zp&s`cfIe3EeyqH{1b
ziqDIFZKd6c&zZb77!2v8zwP_PPg{0nj%&Sd1-RfNc|OMb^3WEfeETLC5-R-Gj7~0J
zwY%ayblURJQlPrZ4nr&G_Hl3-eM(NarW49IO>~tVg=_DiWdjWM2X*S$I7Nq+X#mNH
zvxsVB0JYkR8H^xHX`dR@45H=$HPSXWvuzV>+g)yaoUl-d>D2CuZFrCo-=Ld(!l!3n
z)Q)7m%U#iznx4es9QsQzL?N}ldWgk{h5g4fR7<V&wmUnyoP%Ms#5>Htea(Ipxx*~T
zjkfPjt<i5wXlMIak*fB9r|Esw22dXbylenVqJYO0Fula!SDG9y!Eov`$K(o3uFT{(
znJB|cR@WelZ@T<n+;Qm#3LW~m{_liL{2dqO%`0gbLMKB#`K8`Wb5HBqF>)8;>m7%g
zyAT<r=Bz6N+bEpX#GTchqF-l@TuMoo7eT{2Ax%EsW<DeN??S_AJ+?#Tr{~c_en4Wb
zW!xAMw{W~cS_mZE25FF-5#|PZoLrp(S9ZY^_<1nkO&#;Cn;8f!vLA`lKlh->&Ga>~
z2Iz)r@(!ypvfJcr12i)^+W>p(6f@EQ-y+L<?9m16Ct7YlLAG8q$tw_iPb(7|wxNa`
z1{VN}Cw=qucb8O>DmdLE<1gcwh<Dw$|I`ZCY$xPH#ayhX-4zGWHUsS*7<Rt7sNPkG
zy`q>Go(m>~#N2Rzh15sg?pO<n*`cFC%xw|)UMrimme{x5tktb4#AekNY4QcK+<4=Q
zAhHS>YU}XDBv!7<l*(%?uwR8)i`cGb8oZV=9|hs>_*5B(G8}!>96$xDxIrcpK!ZQ`
zp<QD<5yAV3&iZWxynm$NVuBO>QT<{X&}8nj+`&9~zTKS^@Qf}!+&(=^?~20cYckw{
zV~xPtdm}TIG@t##23}2)Z@xj;z-Fb#RpzE2cvffO3ky=U4N3r<@50ycf~)icak6v;
zBNksJG7S86#yz*A-^nEmO`jGV1n$_dl%d5f@HG=D2cPimtWN%{X&rGn5%cGCnFOKy
z$b5cb;MQEZ0=d;2dva2R`xqn$%JWMQ{V@EV2K#fTE1{y^BI*BdD)<2DmJ*&OX@JW`
zV2Xu&k^i#nd?p@eKLhod0Lv*92tga-EsBGH_vaZwiSV}aI^dE<N>@tC61k6*{&hvc
zvG~MA!kP5HzhcAVuxuB<q%}=e|A<izj!+q*tX29AO5+QI71NseKj_KwGZJU)EeGNI
zug|2=*zG$6?;J{oPATmEBn+Kpw7^bfj!Zt6)6>|kZ@mAp75W4Lp@-&C85HyN9izk=
z76Vcmg}i7XqoR;UEW{Iq_yGw#nw?1ih%@l(+ln{+u={`;j78>4Roo|YuoGe>T?iWV
zHnX<Lw=78+ew#h(UxYwULZlXhBpJtIMrRiLw`o-!U8OW>Py8jA2hncBo=#yp@2OIU
zLNr;S|1&iQx{5q`aom>|mVJo`QvO%-vaU#5l;s#vYw1LPET+S*3;)1|`~Y1T-|9UZ
z@yD4o6<q?bm4L0U$o>ONn@Mk!xR>9R&8zTv)py`@81L4#t;qfp`8yXWlKYJtu57b@
zod1R^XPNGYcQ-fRe31Ftuk#R|Xp*C$ktc``9<JC=b3_c;j$jya9{Aa&-zK}hfI1zZ
zETi`K$S|;dqrbc4OZ<kHv1Fqy*<eem@$2|NMus_Hh-%6s1a2lUg^llnF5)c0CJxc5
z=0u=Fy9_v#yW&F5=B^_H-Jom2AWJTOfQ+Lq>aLhe6Q4{HKc9l&jdyOHi>QDG&BIkd
z)EnFtcOuYA8YyP+X*4MGJZBz!CoW>Pqbte%v`M3UzJ)f~Cm-r>gRIxzU9uX#IxcWE
zx)2$LINTKd%~U^uCHLqW<o!bst9LzRKJjoXDS`}&gS3(Gk+gUvy!y$!`JkZF6;q)h
z;EX@E@H80Er*xPdpvquBOn-MtFV!O@uk(}_qx%^vG5(xKdtYjm`FS%vqfS=rL&>p>
zuEDB$w32*`BlYli(pP2L@8YE){KzaM&g@4p?_e0`T~PZzMVcJ+7&yB?Vdj}@7J!jy
zj{wC4s&ur`2D;e*W<@csRlxMg27k24m6+Txlhbh<)5J57<tzn%|0;U3@;JaaZ@@P8
zF6pND3Cii+@*x@gV<uzq<=$Gk<Vp7V=tSrH&#7SY+y;OD1SHZY5qI@J;O=w-x0%I-
zYMk%hr?}kw(`>mV^~B7kgZc9$UB8eHvQI7t68qvsM8@xVn%^a7D{)13CPI3Qekhx7
z0_aI{v_(DKk{+h{eR7bJ+P8iY^*&>5lQ@+vm%-40u30Qg*!&-u=STUxk;W=uE#8n2
z$iqt^cXc&4j~_>tdha~gY#uAnZ-E~Z2vW5NcBXLwd!|aq8xxR}rH~&6a|}xOYZd0*
z^|_#ymll|&Qt4@OCdomXE6bEDp`F#5V@NeEk*W=;V4>OnK+}sfgF(Z4;Uh3NP4I;*
z`RG1#J}{&psR&~~im<B2*x!;eVU}XLH4lSj&Zo5WWjq$1F-jg?#1Ju~K&F3zX;$Du
zT<_lGJsuG2En^isL2_3%?_KR_*%~ZvfSUK4+;tCHWP?2L1fv*Cks)m_fCYhh6~cgQ
zLt?ga*Z+jkh6tdRaXVYN!e3JTxHU$a{0?R^6s(9iS*nZK7W9D!&u)Q9cl2#jz+e{c
zkH#HHKx6}Yn_LHx=7Ubfzj4l2k)0p!rS`p`yCI5FO5{sBBT2yW&R`2Y(T*MyKi41j
z35~cayFMB%PPLGYQAjTfsg6QATgcKVBuybns(JMa^KlR=Lmo#P7BD##Numz#Y)aPQ
z4GW3su-HOkI?T0@m=3cQlB|Qi<^J?RrW3EmPE->M8a2y-B9A`?4If5=2pr1daF&A`
z2t|PxdHal0sH53xc+>8}4>@<UugopONHWm8Gxs_ku_fceUIF$=bRP{n(A-d{IggDW
z;)N-6b+=FFZ)U4a9?)wUp#|D<bORvr21{i5pm&R+nS8RlP7k0%1$>@tp7j#gMC`nS
z`VJ!oVRFL9v~Flx6mY2l=zSH$9J|{;g!6^fY|lWj9!v)Y&%q`h?mD(yYd7S#VL?%B
zVr^%zh`sXE#^h{A`*S0P@JcXZ+}e&zc#+54SYk&xeFy9o^kq;R90)>?9u=YpI#x$@
zTn;(_mPP@K4L~<tsVP^BQVF0lh)=ii=_Srluw4$OcDtO$nLtW^o&6y9V+aG1iGbx?
zeMmdTb-W;01iEqV>mMiqI({Exs|^c!>#^<i;fu$jq9MNBScvxq2f7crupY^nJ+#9y
zXc2sCb7<C~z<HovZD+o<c^<#DS>*psK0K0Tp=y@tD7Eb)S}qiG+V=q%7?{xxuW_KU
z9`|A@mkuAI@fM=Uc^RGrPWTMV8`z|<wb+c_Cc{w`r#P3j*oDnOnFDm#O!wKQ^4VX<
z9q0+<@&x@6^`Jp6jg_6xvgW8h#hpcXFhswQ-v(kQ)KSsO`xus4`mToFw($=6<3lhx
zgSN*OTeQJ`0W`5AI6t#6VQVf;Hs1+pIrAA35{@WOlP;Jls#`=y_=U=nf9TNPU=4Bb
z874NbN7t8uu!?i>>Fr#y`QauEPm~RFDc%m3OJoGNg%=t?<n-{&h=lN?G8a4$1?&b*
zPnIBpj%m#u1pc|7F-TjKO_FmVdi{_R{mvu4TvL!(5w~wP+Fqt&Z;I~!I71Wydnf&E
zkh>?eORjk*DFm|of=-365KjW4Gph`BY5{#@JD}w=a$Meic)#*6R~0<P<@`PwOu&4g
zVQyY?dmWf^BB?WO1ogUknb^PG4D@DsTctDM$AK#+HbXyPOI2+EFUjEPZm?<vpU*lu
z9lBNJ<C(r2Jr%6Vv5+)zlQdA383p|PJ}$inp4vlyH}9SEW$&r>!vXrTH>2qHk%g#b
z3N`d~I(Z57mN2}I^UW6t2;#efE$bL?@loVQKIZQ0^ej0gjY9AVn%IO*R|IdSA&`Ie
z5IjJ8+yuk2nkp&aQUy%c*ZZTD0^_s5ILv!+K!jP2Ry2I5>^Os;W2lcnj*5+hl=v6g
z`=+X6x}lNxbk?b?<vnCjk&^H`rjU6sDgZ2>#v1lt7(EfsXpUi&4@NMbQG1<CR4CM*
zf(LvtNUJ>FpxP>2!W?RNZ%g>HT;OLvTL-UPosX)^@wRmFi!N8Ceus_K?MNuLR*GF^
zhv*c>GrM*L(NEjPfR0wsNg0dMWfWl?C+*iwlV7Gik6qv}NasA@4%;x1rU;sgWisV-
zY-`<Rj{tYc{qMqMZ`M_meKU195cGqDA`h4;#R4jH<s%qVE+ArJMCmHEoFXLx+sdn)
zqCEo!@}zQMe29dDT*&lbPL&}~4={1&a)bf-0*RRe&UuF2H%78a{(1*i$G7kjg4qBm
zQqeKQXXR5OK1t#%(?&G_7+z>Hzr4=!InrL0O5m0zf8PzA_ukJ+>oi~QKGeu;lB`0^
zO6U`(%SS+Golui3`6^#)VuHjy=)cky)p5>$Rbxn0flbnn+}@MBte667SufoP{eox(
z#!TMN`B|z2iCtw3B_;v~h=*FAuIv)fv*m=Q=xNf0=m!H`+AwK}#JLpB8lF>W_WO<h
zkJK5r`S61MgLDfou>1em;EbFsw389=V620h{#h7vval-G5KRP;JTw;)??YlFWzzXU
z%ej4mq?4_rlM^I4aGU=kX}FctoRa!bQchITOY}H=Pa+3@Iy@$<P~RAOx7cX-E_MlG
z)w(54STdcd**7N|y8F1r5V{ZYRv?N0`pfnB*b~0~g5v^yB><-d`1Az7@WGd>ze8NI
z-$m(BtC6ad(TkDl1RJU1z6TSSX+z$x>oE&tOybO93o?;#_Z6Pw!`**lvNWE_+&Cr=
z;Tc-kc;+YCJjh~LnTU+jhut6k8vE4DH2_CHHDeWPkTb~#Q7v|V_;f-NJr`e$sFQ0N
zJ0!u&+REg6(FL(~TqPNE=<pRu@2jTC{@HNiLW5@d-w!viqt!_Vw42<6gk!DCIsE5#
z5qs^DCF@`>ysd&+#xW8`kCSmgbk^=8X{~%g$jB(^55IAI2h9F;xKmJq8nkmhK>?xx
zw)7z(Hb|Z+S3xVYVTs6oDui(wFoKFTLDm&q>EEb4>bXT`R>FO5LQ+`?0QWnwy}wJw
zZ)U(xxUQ7LN}fnU#0tA?sDGQrwR;`4@-edEYB>(<l8Dn}%`6x$10_(cC@^DzWS_*{
zVf$BgA0ngRjCry_Z#~7Ir0d5G-}sAiXDl_5^;#7hng*wkF_ig+EWd{`E3#?)m}RDj
z2V$)&HAoNAnK4gqm*ek&DkpxmK4`xIhVQXe!@8(@IvzKe$IQrA+8)vwZ;}|dZzIrX
zo(!ld$EQ@Ky@YPnsI6n3v;vZCv3=sNVT;xCZ6;jC0iO-%m;(dnr2DG9Gvw3_5ufVW
zy*-<ajXU-Fb}oDXBi%WJJp*&aj=;k3jIG_g-7?CQW)h>wKNer%<9%}z`;O2Kaeu^8
zHvC<z5h=gOM3#K+j9h(prVAgK@pdodA3Jc(o|fw>z!xBIp8!_lW>0JGYUaNE3QBKc
z_B6Se42}W=>4pUQ;bkr72qNRpYq~3zsJ+(dA5X;JcWIE#P)dfQ*3LU!S;q$Py@d<J
zdGFxnC_kQ;sbA15(hmx9bw?9S`M2@!#3t7n;~jsZ9i9rNa*2bb|4h6XLesqtMlvHM
z7G}c0k`fl8gXUAc*N`}u_JVrw_{nDO_t9Fwp2e~%+WSI;Tnf%j&C*ZaoDpe-2i5VC
zTfxNlSBIKbcoiFwvh6MyaSIaMt?=KKJqwoOt{c8Az#F)Od7x<LR}=1~Q2z07dq!!e
zRfls)1$c>tqXUd`mGxu~9pwqE;Nq0s3LjlH8x;WO!KF+AkaKZ$`Y0lSheuxQ$L$E-
zL)|;E9ag@Pd(EEUD&2s$pH{oA+(gB{QBS!E5y=_!FIsL@b^%z)W6%|?TZE<^#U$71
zZ#^mTPo3lb|1D^TEdld~0I4zS>~tVDXF#j;{SkQ{t4_EI9R&PF0^>Vv0wc~ujegY(
zR;#jeO@+O^nc=>Me6WO;TV)Q%zNyqJ%RJ-+tINP@K3KuW`F^*42~Gw~H~5wlHiI{>
zK@`H>T22UO*K#vJK0OVuhVaHsM5go&(P51ksuY<Z1H_X!`PZ|U=<+)StQL7oLEjeW
z1l2{Xb9ggpXMwf;H7^+nk#qrjQVA4mo3L&TKofHo*c*7xC#pw9(jSsflb&!$x%p0Z
zl&GoP6^|$fdV^CLWmXKy3^ZS@MzF$Hg{TR(jEZGzO(#BN$@iGxt)2!jrwGe{rm7qL
zSOu7qZFeqMS{J4t=Q>vqpw4V+;0c;PnZ~*;06Qm7m55XD4-LbrU;`d8CdQ2zZeMfS
z?mVn5uz@j;HRtvm-&aGv6nV+a(>=9ZJ|6+~8BSUn7;mV{o_P#0jk5F$?$7Ftc&WHo
z@7KBvzp^yh5u!ioi^0ahHW>h~6&b)<15g{Hz0+hV0D}XeiNGktX{&#SZqo4&$an(F
zcwwHKba>YsA7oq46PkLyAE6U<eE%M_%-UVKYi!moHZDR|{eq+S0A#|8<jFhOu4<(g
zroZsz$ZYLsA=ce!c{s3XfLaW_PAgNoz?8Zx+9EH%uYwD?@MK@M*e9C_`4ULcnb$f(
z)ZNQNtclsM<CDCJB7Duc8HC`^`2K)y$UoydmVxrLYun@R8v$ZJM{+)a#{vk$S{-1v
zo5%orY+z<oE;RsK2XEJ5{_pVj2Z1sQC`I^;N$v6IeCI(wIUT6sI$Xa*scG*MvC2G%
z^}{tcVjRRj85ay~;dA$6@a9lkJn4K~_P~j2UDG<!TQ1xXo4+T1)~PLbX8PaGp@Q$L
zI-gU|sQ&JXfwbYWD%9*`wQiiRdb8x||M1QUy3br-*e2X3Q;8m=^}f0d@8tz%+GhVZ
z;KYU<ydQ)&qKDxUkjMWC-s&i_?_4ZV@$o{AlYtPzHa-#Lk$V5i{Wx3iV|$|Bhf>@m
zh)d{BcrCF7s1sprrC}<N3xF)AHlaw9k6C&Y3ZR$M8GO;dv6G1hzmMMU{Df}H9(Lq$
zXsE@=@U0YtboCwQI{;!UqU+$GTz=uRLc5OAp;7<7_grjS#{HGh!7;36N5`-x#bc$*
zkp_#ODB2pw>zqWa{csvcB-XMxtRC@L?eIQcRIhvDu>QpI+kOjZDKK<mbt1}Z^@S3h
z?*qd)*gX-1gA))|L=pZSLD=0Rp2I^?gkceccHrR0(xz5!juz&k5HM6FC(e0Qqix_v
z<Y7RTX%&%=nf(n1(efDy@{WzN+!jH26bMEh_Z##SySz4E+7IPv-SkY;QP-?s&z)}9
zkgsUYT%t6AX*6yy;;W?tM`GT3;Rp}@=I2;kZ_)1(7IE@gh|ie@CZ!J?@PoUYf1$51
za3QYG)?+#QmM8E$mx$}jE08wh;dY<eA){L2ogEJj{v>S#FRyyLtRFG}A7Yw>Z&%I8
zk&KQ|4&7jX39h0}&v2FHc!CqM2>E=tqG#3);@&6v2rl7$)4^cBtJqjl!jhPt@00<j
zbmG{C3Cv*sAWX0i8rb-@GZK9}VWsVDYZl>NCw!~N{tcU3OF0Fo()n-v44`TOg(g5a
zGl_$!x}EbH{nN2l!Di`VkM5d!<Ul9Z1=``*^i(-79~Z*5pbA_@<h_9)g1)O!vj-=9
z>9Ms@5B%}3jK~Vw=>*h71jOAd=O7luVPO_uw>pc**qfJg%-AR0_jI5n1ANN@+Y%VW
z38>8Kg~$o(&g;i1Xu_tK9zNGMV4nWxY(~xo*)bV$7z136_;5&^3jGzLzYlb|;YMKC
zO;Q;OxvcJeD2@XATi^`RoCS0_U1@5<?d_PgOAb*S{5?#IdjWAfDVlkYL>iWnb%UHt
z)`^ph{b(O?ZlE5qmrm9YKj<sr@M7NB4^Q+2d|MFDkT2$sIWd$6Fww<x4nVl+>|*G>
zu`jI@S^<#koZlV>-X(Wm+0GU4Eir^F!554dXc%Rf5BSOe^856I05y;3uvtp-&g0-`
zxbV&A>3S<IemodLYmNO;n~qbuF4WozuG6hMRYFI5`Qh~@ReD&?nT19;3kf-WU!rsU
z)hl2T9#Fj*qp(%8ws4N5FLK%*Zz1QLCZl4SR8EHGU*AdrwdN1;%4>)oa>7bgbt5X~
zOsq$R&1=mUt4Q-T=x(e*P$zzJ{*f5h_OdmCrtrv7I@ohoh`*<T!p~Wl*s_aR58Ec`
z(4(owdU-0Y**CmKt$b`B^RAJ*Vg)5s18z<+qqW$LjwYoHgw_aw5Gxb0(7Za+?mO3E
z119KWQ=>>3CmOAq9#cIN21-=^OdO)f@aw6FuYiZ+eqS}N`vrU+WN<*MSN}qSADJ^x
z9fr5)F?*7uuRt@FhjNfLlQ%xeU$1J_mf#sK;^L3rmkVA2-)YGBeffBnlPL*vVH#6s
zy6crJw1?N({usoI|Lha4vaGz{&=iyL>|aKRY(rtBwek+--Bx`o2otu#;1!vJPknJ7
zq`1p(XoZl5??WJi9#D^;Vg8-adT5}fKq1zLmJjF?{y-w%TWHgoG?&%x$F`^2hrhT<
z4#X@kO>c$|B?S;lRoO077LL3lz}nT>S?*r>=@m9pD3^z<i$Bn%KnBQV&0Ulh-=j2|
z9U4aX=rcn*g~k~6try7yr}f}rguP$@caYK2!|@lgo<*^~x5NFnWt=0)s7q-S{ZIqG
zjr$uaxP=uAYK!`V+KB#T)r29+;D@pJCf<+>hW3#0?ca0%PFo(_i2+2q1K!3)#;@KW
z_dcW!K;H5l0*&L={#hrPW8!;sSY#>Y?Eb|hbyllO*0F92kH%E`CFD7i8`(|+S~{66
z(LY{dyzGbv6TB>R8RR@b9&iJC4fy>27B1W1zJM=F0lpmY2)`EhZum6FXEZzu%Y6K5
z1JPxR0q0+wuy#Wo)h5PrNmhG++FNru$3X!cv4`Knz|755Ii_nmEUp8yeBYaKSchc!
z@hH^F{#nz$4*TTv3~9rv!e8FQR#<efefwq12Gza%+B2N1Vax=;@FsDtuPgxz$cpSF
zq)8BLP{m>XALPanj8#Uz+qxiDjRpgG|7JLtsiFDEPGUXrauF+v_qf#*#yy-pG<br?
zrb!=&mYL)R|6>T!zR(`>(KG^pd~ye%SRwE^jS6tF%?^?Yld<78zQonYX}o>!uDF`r
z`9naQOYoE+&F#b4BW}iDXFPS~rSO55$qVnbn<ifZodX(6to3?=M_#r6F?N3g;ue9A
zc&NRlav`VR@dKk`FybPj+8<(I0&W3+@Es-;U~Qz7xWNM;z7YeM-$&j_%;?Q>?M)cn
z#v&nG;3!+O8Hqdad0YMF#WgFzv_;GXZC8y`5i;2Kpak0l??zE@k^ceeGT8r^QTH*c
zU@3skoj?Z_Z^vL}%++f`2(Wz-FA>H!awB6*LL>JR&$Wbwve^FGzI|SdweKMpn3XTv
zw`XUxFaKDmOqj+uIzySNG5#J|cXaZ1pcES1s$`XMs)25Op-$d@0WE)hl7qYqVC;qV
zSCF&873aUmB=MWf3dFhB4NXyoX&pm%@JH)2MsYO0%F(yMbPH%YY!*Z@PL0FpUd%aW
z=nhmz`gKB$dntB&C{L3Pc$ZGD`A?=Rpx%cwv;LldHWt4h3@hk6&9xr9)4U`4+1byY
zN8JkG<&1?ZkinNz%R_8oGnn#8mI4m(8SKZ4mU0n+H!2=u7C%||nKfexml=48jwowS
z)3H&{IXWJM=Rimh<T=NBnnjk=rQqcJ0se6j^K3|B#LV!)BzI_k)Y!y5*B!(Bzu=YK
zdQf=$9y<nhRMia5ro!@dcq<Usa*ER(4lCsJ`VemOos)rQ{C&<s{}mbX3f5SxZeeGJ
zex-#yoCi4&VYZ(iTWp*tYsOI;Y!^Krf9g3JBLVGtjjB5^jPCTZ_azi&@q769VK52y
zFX_+4E8hCR-X?!nz^Sp}^$Li%%TWl<_PTwY^lmB!XJ8F7mSS!Nh1`r}O$Gy$i=6|j
zWr*tE?vSIvo2RBStS_eyNuP&w`<~}AE7&o7uj=&vNk*pw*fU}+Cma6^J!`ThCi@bz
zx;FauZyGInl=gtdOP6pD7BrFekX_Wh@C}zDNyXm7rSEuJowrhlsto=C0qnP?<4vN6
z%V<ohga*LI(YA2C^aPUAulvEa=B?OCaQC*vR{80FafsVaL%nwz9&rwUPvdrEeggCO
z8w6R*yrh|AZ92g$pH`|_mi04c`3@T|l0ijq?udmnUbj$X+&=xQT41$TJuvzPTE!At
zDpCulUVS)8klS|~nhnCn8(|(RY#M|`+u(T_09J61`=+RLs(m|U#h90qIjWdrKRcBp
ztrDf5LIk{1#YMh+{|rnw6i<X)LP$P1OFtyWjaI_t;6?c0Aq=>VXC#n`sIk!#$Pia9
zohjjH^<SvL;(OFwxAisVT8^C?PU>btRuZ<J;67as?_GN%#I8a@_85*|v94Yk>v%db
zy@|;86VLwD#WZ~N!|;u}-FyN&-+4fdVY!-Osq`E&97O47AYpX){An5#bE7^OE~1z0
zstJX;_t$l>?>XFBZ2G~|EWrgS=J1-rL&)+qg@o(YU1diXW2-nV+scOk%K951d@T}N
z_0Kz+9fmkey(c^qk}b+>O;NNmqk$q*$?pavI0kQ!(j!@k1ZC8axkNn|Sgi7n#jG+f
z6J26C#|1n^Z$|VZ$a(FR?3|HTjGiSWb}zCRbMDeioqW1o*W>mp^kFGe_Iz&x3T^IY
z6!OGcRzKAF1c;*Ftv`zt=;pb`#Dg@Ou<4@pod6oSZ8Ef)jil0&*GUV-*U4NN-ukoD
zaR%*AP5MM6(gYh9u_AS{g};gRf~W>@QPklS)d>ls))rJbR);>aqy$q4#$KY&RyN5<
zs`T=0;PmnJ;PgI{rkrx+a&Tfufs2bL6(hHAsmj6k&&jL;d`x$33okDWbig|n{hv6<
z2K^ct)tkPTtV{vA>K_5^s#{NBSFMwSbW0+7PV@d#v_&$VR^q3xAh#VW(VCUu*2OwG
zpgkc4euJzf{#XA7{$?a<CR+VcNH8a$XzT*h*cYkPXxpEYN(r~G(Hfu>jGOAnsC}fV
zTVo#+hEC+3%cT%*EL9Juu$FqDZPZdH9G}8cZr_^}7VP-`oocNYm1CW3!~Tb1Hdj6D
zLg4hDY?$%V^Vi3vVCJ0)M&*XlSTLd$?&prBG2u$(lx#vwUm9fQR`#kI9X{mVNigMI
zNLW&llISS5Xd#GXERnB30$~iUBZ2QcjB!AQk^{UwuDhQP{dV}ZqHp&$Zt;uRRMat8
zI;${!wIw$HS!g;<9GgQa{k<<Cedk1KSrh(9zQU6+*j4aqZh*sJ3!d(QVoXkIWN9yB
zupI2m#(Eapa=1~bpH=8;C?t22FTAr-JpmDp!(QyKUAk2#Zrv_kg4zHvk!?RJcpMb8
zmOs;Wv_vcfKb)ts8r>mIx~fcmNq^}AR+)2@r|nazJc=idboX0GiQH+QM#(Julq*y5
z<Zx2lRHrLZ)$w<z?LEgE+fT!Wrm@)x=m>hAu`E66uQPK}Sj_F4g)4esb%bH{*Kvkb
zAFz^96C!P}{YlHOe~cgEKnhc_1vcKUYQ184eT`j8X$M}`dd+MvO|TyR!~u7zV8OSx
z;7j6+jZzA!c3L_{<ziCd%SD3&Ei$iIa%?IsPJk9ejTXnN77a3*d!<cUwyks<4d4Fv
zb!f0_k&rXI>vBkTzUS)E%-wV4hsQx4#7zXuN9ES1+q;~Vrr4>$FP9*tCM4AWky$(9
zzizWOU@f*;J6Jtvvss4rcAL#G*=d@M3{BS|Xa6G4E*XZ5QwYh%QfI({wY}3?N89`E
zV^Ubg?R(k8r{1?|8@2Cc+WU0f%3YP6&*`?VF#mjv_F5JB768UZ$3ilqIGZgb_D1zO
z3)w>{%I7r;sgFVyTFAyI<Q|12_c|RsUjH2Z>7!CK&$~#h2d&W#l8mqYuY&kb0M!_#
zCot78Pd*t99p0WP4C5UGm+9<NqwGJ{7$pZAq=wD*CoG$@Vr))G$>wnSe}(aX%jRor
zeM&o4p>?bZ2f(q3JGy-z>vE?7?@va9&8F0tb4)*wxxh3^4gjJZrpC35y20()scOq^
z+RLcf)~b05)x2grkKJ{~<{f1}Pu3uHk5F08`Fbuw)tdAoOp)rOZA|6vsZ{oMVDJ9+
zQ??KIg%`^Haj?l=CO;yvZMy@W-9&=h7oxL(ei7(Rb%z3Ri2rL03!WCNE#^S@^LqX|
z?2T{WisSC1Q&oHrDxO=e?Q_U6rkMv~JC&ZUgM<2P<NOplnAhvFssEYO`IMN>C#KSw
ze=4Oxe)$CWZsNCPlBPs8dOE^2`va*YxqanY+d5eeYE#?G*hPZ<`)k9-RkfZ~ed?%G
zRb?9wnWI%b24~A`ql>W3DYLJM8hh$Lb-V^Sm5N^kRJnloP1?Mz?6?q-^CV)Nh{UM5
z>`~iMMrxbrP@R@aJGbvkx_YqVQ?pe=bY|7?b?l@XR@Z@*9rv3*5$(JydZef-{>(03
zB?YsK46~Chv++@8-6DG3_h6LOq*ScDXM&B}u-T&*D(WN)Y?>NiED(3jQsrwc;y!Go
z$Wdd}ywVjSn^Ivaf&TPyw0HlaT`M`1sq3r+mVA0O?E4Xucad<$aMiqo0cM2F+5u*;
z&DsH`zs=eK<`|o`159VlMh2KR$VCU3A0EO0(~Ns%2|eRGfSXoIBXwJ<+mo7RF*zKG
z?a~>k>ge|2n~K0_kdHUQ8cqDGNXkb<hPNxwOEij4b=kPKPG0Vw!V$a-zZcx9jnY>y
zr!>e_*yEAlRZ!^;Bo6;HhH<bq5w80liTcDPDY>#I{W(*)ex(;k>ZBdHo(zWURwt(J
z#qZc)zUQN8bEl=oeBTE1^}saBO?=o^d23@-xm8D|sxk+z%Z+kpTIH_CK96D3Gs0$U
zjEy%X8(OZjVY5HWj(=byBd&zy&O>4wa}YQ-Z7uAgG)Q`^p50Pn!B6o0kPqP}f0cmi
zek4ZCnd*o-$NzACw7&0mOI2Sg`tKRq80T9>Z^aIfJV%y`kyu6NgXcdedIeOlSY;`(
zRM7!cbR@Z+&txbPqwPj^0{pQz)s%Bmk7+)PJo_1rJEYWmDD+-_i|YMQcN(}sYOxz>
zZbZ!h%Uaj%H}lV@;q@2r!=lDsQty=T7u4p0Mpj<|g;pYQ&c&A(<Yhb=)%t^v_LNlz
zqGt3Rk;;sDQ0G{qPP(d7C;8k#jdgc-h5QWWKhH%Z*v=;p#8|VP{!ekBL7IO6vvs3_
znZ%Foy*&p$NxLPwU9{<a;P1X%-%`aC!^|3IC~_n+U2jQqVk<o*eTby5f>b9bhH_8>
zW&eMm97D=!N~xdOA}tynpPp!;6xh2ARAsUMMhm{bkNTTUO(J&9KN$JmMBHF!veB!}
zRn<)(OD!Z#7Am92-6yxN3tGDn>yBX6JmARpc!e6byv%H5H*c)7U$mca^PvzoJi{~K
zUAJ!!G%J6RFR<dZg56XzP&JFh>vG%}Byhj~J^r2Is!BR$pz03%=$+fAfnzV*qAK{C
z#rlcbZ*d=f0ZNPkn?t?A!0J1qfS>LqAo5qGcbHs>LH-Q6fq}ELP@c)l2PZ;O;-5Bl
zJb_b)i%oP~Eu`TVf`-Qp>1xc)y1_&EO@?zOz~R>n`>8|?R^hD+m&|{K_O2>rm2{SN
ziSnr$WdQho1nf}c{{}ehKOR4}w)7fs5nM1(&I?>9%ES*&unH5E#5LKQbyGH`<)4*_
zT6$m)YWa!6l~0_a9}tSaRt*)TM;q)~;sBe^-WK}It7&pAp959Zcs3Q7XNXp?u*e|l
z{r3$H&z|->H(`AzQ-I`b)3s(p<0j`YZpjBbJ~sDQ@CucHv?%D^v)4T{ZT=I-y2g3j
z|Nh1kJPTjy99lZgJ@IV<9Qrk0>E6RkwI?`-Zid4D!`QXJ*IfSp<8rdxz9X`fELNt_
z<dRFP%_V19Os=`qN{lGOhLRfF%4wZaZY4<<k?NP^&e#k?s=1X6bN3tvoBK8Uzu%wd
zd+vUI|Gi%Op6~N~uFvQBJon2N8)!R*BHq-dq9iOk!K2>Qk7$AH7*B-K5!6v9;BOrf
z#t4V?o=>2Yy`#AYay4O&3E`@G9J&<+Kw;-)I%1t&nXb?I_AFB)nfU>Na3XWd<l6`V
zeJu-(dI<s8jZW-r2~x~e=d0N$rmEI7_X*ZLA5`TWcD~ABd?_CKWUIx&cnn>_wU`Hm
zmw6aIOah)d=S~UwO>oJOvgu~j74dy_EhBug)&37Lf?4KM?QBDYx2{_&p@3zZ)O%2Q
zsw4UA?O<An3jMC8k<lh~`gybdGiMPd2m`<KrBdU~1GUNlvWJCLb-Sf7K_5f(kKMe@
zKH&p`&jZe5?+BV-7qX{F))!=)aXjZ>Mq<iU*#zA)+xiayNKyM_oUqpSIlU99&AgT%
z&vw{FIwX0ERgbR_?3agJaaZqCgb~&=WuglwCcM==mH~>?qD}hqs6$M=MB(R$Cq2-~
zz*FD!LCZ4-54L3VbgfY%q4D@Z9R`u8P&M@iYycshQJbhucxcB-`M#<p=$6qo!C%rf
z+pFI{V1nH%9qSO1!805AuMxoI!pLp?U0sId&d~(j^iQJOxj(X=Z~3xIS?H6me!!Ft
zJR0|`O+Xoef(ubT^>OELXz85wGd&wg7^0%?<SG#F%(-s>+YX#`qBu`$gvlsXoe*H#
zRM}0~&x7vv0@%iD=y;0gv{CzJl-eJnS+-I;xg`%Q#W6iB1Ifj0LO`zS_lEuN$AgKu
zgtV!VP<)jYJCyU&(@+iY%~@fCSuSm=WvbRWAwcIo>V^JV=S0=yCX7NQR9`bLS+$Y9
zf}CHC5@m6*nO}-TrPK{jX-Y58GD5MsE6dk4YwD1=rd3s72s<&Pt;TtZ6Ympujhv9u
zZgk9yx#DrGoo0;k#N?VW1)i9n5rdCPPGJPtv1#Qg<>s)4d8a9sM0oNAHygSO#dy%5
z_(|)iUNBjb(zQW)wV?Ino{>2X0QKC{de1@(u^r<h)jLOM!0}<~!?M`TVxAszKFneU
zR|r@AaQ%$)UIbarD}u_k9m&T<lj>hPS?B_!S_vDiw`vbo%nGT$tZEk#Ie7EcCsnSb
zy1E{=uhEm9AUwYZs%yC_%a|YvtD4pkt-`S$o~$~dhJe8NmNa<O_WJ`!#A}`wqpwKz
zDAM_siii^=Q;{rio{}xj7jl(734KmbXKPg<_MHN{F<EE5v~AKtoit<8U}{aZM`F0a
z0J{rX(xizh<2s9Pk$E2Q63V(7iMqyFez(8OZ`3SM^L`foU_yuW@q2u?n|q6}9xMFK
z4<d;UgAv1Nqb`u*#BNs^or|{$xRXgR*P~(!#vmW*dTO!-2J9R}Rn4CY7lH!C$%kj{
z?ZA858sfn`R>osdayE+EBwPmH3PF5Vg2;PPQa*fVesZc<IZTFTsWCE;`PjdSSZ7;d
zlo4>RYDJaO9?8Yp&}NnM940Awh2_kB<=kh7id7pD_oI6tYsuGzlZk60OzRk#Z2@xf
zA^icVZLF%M=)r5t#DI55FtFXmS=}P_NRF->O~QTe!XoKUL|9UCWbJhu!mgzp--NTf
z<vOBjLrd0y=TNTHYp7Xt!}4nxL-$DNH7Qm#m5h-4i8`2J2E){w@)o$f_YigYa-F&U
zP3yPwWss!WBj`$0v%9hNE>_b}bGp8y08?IlU-ap!2GKucdE5h&d1{o@6ji<*P3fU?
zWzv)A;<09BOiLIUU72xz0O({E`Vg!lfj414NH9>0l+S{-D4(tbv>V6qppY=tzpQS6
zq`!qPlaLxIpNE2~uMoZ$W_8xDVz}>_Dpsw5<N9ri=iaG?BGGR<gRFDD1aTA+s>aS_
z+vbarazMRI9S}LrYm8y)atum?oEe5q3o>-dOjp=$24k3mo)*&6)mUtTqjUy;!=SxL
zx8#4J=;7uXq@<*Vf#^Kfe08`h<(o^~%hhP$<0eJu8^elu!whU1{z}_u1>T*b#p-_Q
z)>SsB%f819V62T|ZGgZ%;N<MU?0QE;_|eo>HAv&1?ux4PDWE3+U3JDo>I1U+BOR=+
z>ayh5VSYq4i~}25m&HJ}IM3DsdlOEfWT_-1SC@jp_Zpc0>7p&|vlM*4a@w>PNyaY|
zCdrV-kvEL95hPN6L$x(~3aEqcCyySbpG;VzORI_2Bp6M4jJ<%SMuMjrjt9@(pSIy#
zwk>Yh{wUhQ7LV(eld(W=E0Y)3dS6P_Sgad|;M%IV^bJuij2eN$4Uq}9VSTPd0m;_3
ze}paNQJnjXlG908r);YhmBWop$Jn&T+s~+T<?oi=+p%_RQ;WkW)wS3*Y&57H<FDA#
zH-)H=Co#FGg#4ORl$2ui-D>EY`z&n$U%N9w4{-bDq5UwAy+4deQwGdx4;9Q~V22BV
zlQDd<q*S*#aBU(Ouf;$1|I~-q;m&2o@RpP&wxR8>gff7nwAS%P<_0>@(9s&;*3vZ*
zS9q<72objRu}c|@Ik?8@WyY!NIMu+o7zVl=swqk0K;B!d1~ExHS23rw!s^|3xxdrw
zcD#t4<L-3n+)jc_=5DFf@);5S?CvGI3}H808a!8S(?V<|_&6T<`vD#pk?gTebTNJE
zK1fO*k87Z6bGmGNqP=^9vWd#8*~wC~4^rdtzGa#jYGmjW_H9*R8Eil0=~*ccY0NS|
zH;kmBmsaYL%YTC5;(vbuuFiIbey8wYsW%;VLNI|;mGelDLxMq1&^r41FROZ%_~^OL
zrS4G@C|2Wuj771{UW?zOnh2S1Tt!tIacUTu4yG2Ug{qh>Ki2EsVanWBkQ~>cxjH-c
zNXVBL_Wl*AGC^W1s^w_aRR~3tqX>9+D_>VIG7nPmkAcM;-;6-K<Hv|JMz+HK2lh|b
zqGCadh651%`X75DD!(r)%_8+w{R+W6Q(que%8DBF{vYY?+WVvMs=a@5U4t&n2@Xq2
zefojE%)vfQU)RtoRJ-svI!x99UcGr))kmZ=g|%qwXJ{<<u>hA^`8GOdrq)h5^}wSo
zIu%YdrlqQarchr3lfonsuk>M}gA8&3O3}4`T`n%fO+rJ2Y_*LgstKtat7%0Qicdk?
zvQ{6YnjO+vf>sysy%pbaii7W`N(4ue(yEKlCNq8rt6TF^1O4?o`%dbK<!Bnsi=LzS
zu4g&b4Gb9&pF^BRf{#;~#s7dgw?Qsy4Ja~X0e`WtHqzG6WgA+U1}$yn`lFZC8jsX|
z+(#QqZ;$b0<?IP)QRJlhVH+BnFiAb`D?&6qf|k-wH&9{%%$52YO*MHL{e8Sb85fDt
zziKA<?pZ?AhxHJV^+N(x$`V`R3~e(RhBe~0XWr|FLs%0+)ElSx@h^QPo!a*n6%l;b
zAL>cysMXn}<CzbP@HGEAH<nHG=Eg$(&fM_FWS;oOIDTMEyyJ%<1Z3gMkLjoN+=)4#
z+4^*<vN?VzflYvQkf!->SpSc?>Gbj8mehyR$74GbZd67lmif1)9IeIeq*BkeRmC@I
zTAVQmNL?9a?;fu1t3uxz-$#uutZ8xOVxBPV2J)O^1MV<k(c5x?ZNFT^$>dqpg7LJW
z&*hpkb%Y!c6^wUvgxmo8W*TiLm&vLZ>au|Q)-=88W;2)6u<$Iw3FRn&EHq$JNydN+
zK5OsQ39=h$&dH{d8B&64A<~J{Ii;!!-*_TZ4SbsQQ}#i3YK9<EuIEFf1+$MjDf{1)
zq?BkZ@ZY8*++-Q$$ZI(wrJLlZ%2y`sbzsyysXs6`;eIAi?#ERV2~U@Ax$8p|7D!RU
z5Q~eW@LeM01E%=RPrCY;H%{{v>};pz`ylwr_C0Tspln@@ndVO8Xs~qh0jv<Jb@L6G
zd{CRwn~-aLa55$l*!t!|k9ELm7cfEPwrgf2S@Gc`aGLrLu<*S>?$OZSsIOz{mstn;
zU8Pz5a@VR3KM6Jd?tsq}Zt=2D$-(&~a9Zh)U0p2!HY?|+0o6C@&IYMhh15D63oTH-
z4ryfaq6vN5L{)O-O&SMHlVtF|T6K9G*v%8|ypTL3PVFaTrGGN5Dj%`Du*g9Nb~f`T
z%&bCje0b%g)`)lf#B88?TYkqdx<CEq9q@4-o1%KQ<km9GD#CD5J_Z9o$Di{{4GgU(
zSkMJ^JAG$@&;<$ew)WCx91T?UVS8G`J+%}bjQTve+JNfCx;8e5q3o5f=ZCc`7)!Qu
z-dF^&wIEhi=c5W9^3|pbJ#F^goGiw@r*zTd6kL}l3sLVjW}s{(1ng({+6k{XHG!)>
z-1pZGqBz*<3$T|-RR4MBr$rlm4FhJHA4jksW}0C;pT2VN*P|W^oY#ef-_~Jh8Oj<M
zfdgZZAv=T*r8*fF@gBvtA%>Xcp%`1XaGhaG8I53+4t|FqtE)K@?KguhHP@z}VYNfC
zzL_=JMD@?tBK0{@mkFv*y@<`u(ss;SL@$kfj0fpXH!bX7|B0XR=#ceO0)FI+O5aMe
zvDAhzKdglNRN}Lm<NBRTDF?9*V|GI?rJ57jEL{H}fSD@vctS~wZIbzjfishbdgKf{
z7};U)U!B%f8puP>I^ugqq{~%Ax?USXx~YQZlLY<E+BN?{^8SwDB!*CckYY5U2<&@H
zb}3b0JXD?@T)wF$z{SaFd`XaI@V)f05$>+p;J(XO=D4lO0&Md}C*04Ff>i(RDP~6z
z^sjy7v&dDbZY0!oo8!LI0p|EY2(!~5ALcMJPvgbO2ZS3LNAZF>!2CdpuQeL0@lha=
zs&k4aMzuQt+~V=MKOrks|2c*Ez_$@l-#&%X_9Y%z+oh*X0|YvGDeHsMw1d7PzymZg
zI5()u0>R14drT}aa&84{b4UPB*`)p$P4VJnuFp)s3AF;TkhRFva<W>E2-ie^bH%D3
z9z}YxGR0GHc@MGO=j1DcoDpgQ1?X$5Os91|jhYjA<=UZgo|KQdG%ciRkCGm}4^!w`
z)s8}!`wOk2T2d%>#6Jrz>K!of_2be}Nb+pW$ZM&qh&65OoCzRq7QoY<Nf&ZrFoK*z
zbIdc<Tyg)6JnBg8?wfs~YE2XLn+k3AFX-;Ba8(w<<Fn@FFjO7I4uh?5DNjXeEO>Z6
zQSv4NIM<6K(WW6-j77NHBF&}YI3cde@j)x9AlAo~0bt)0a_!kv7e`kq9aiTR5C~cD
z<6H}Ry#{p?d7f`U&4K*$z457|XJLvnnPHg2(fEJd8XsOw7VgC?(j3M7qB5dcFnr8{
zjjljcU*UpNzxdRS%7HkKM-3iHk8+Pbhv?8;U7hrmkPlPy`v(hA66ZXDQt%lbUgAdt
zUEiMhj+2GLmsDzB8%YNWl`pK8y4uL2Q?c5S3@hW*A<n;1N;Bfav9KAkR6T@%sr+U2
zJrMn+v}B`p_<OVvjtO(sKO5N{aVIV-2zwy0mjGM+**3s_sSVX2uTGcMlR?CC3~Vfk
zKM5kXsz?y4Hvmv6e2fqj&s48PxaleB)JJU&t{=uLm<(?*s`?bJWMBXWck%W$3@TfJ
z^45<)`P-`Q1y8*v=_|OU>`7Ywrnx6+qdI$;IUmU6DeP>R+FQ0rrCe(u?di9ev=oc7
zaqSJ(Y)uoj2lPRZbzJfi!{U6A_W!O8GefrUf6l_-KCZ~oH>*&Yy)!ZzG6+5)swP-C
zYa{59asG8JBbhS(P!|xyndTr>A5%xMj^?dITxyjMp^>o$1xzhRlzh4!vauo%BHHCS
zF*puRypcJTMdCwp4U%S6V-T<MTf1%gEWO#$;*B?GQFM=Zqy_2Df_cjC;U2Up_#jj;
zpZj6p$9jo@@4BiD+@4dT@ZXwLcrXN*_Ui`;PL4HHH$-~Ov+FfPFG2Jabp&PvvVhbY
z#M1@J&u9N<O+*2EPSR&x42Y*vn}+}@HMtj&XfoF@g|wK6;rguw+prMNS2fOz&+*3d
zRV6YWNbaGuRdr#EV~swY@zpW7Dsmdvead~eebl2S!DKy3H!^<(8*-4TzL!>V5|oP$
zkFVexqPa7bjr4TlfiFkm>YlYBqGlQ*O*Q$dwhyQJoEO&eLex6OAQL|YA8!#s&$mb&
zok#oNhDX{5bEP@pz#HJ8t~1nh%T~xzb-j??;3D<S2^2TG%lU`o4;bt5O@F@Ocx9<t
z{5UIzKw(zZArippw*=Nz4FF`Wj{{f9K$fE`!@zSe<-Bl9vd2_O1A3Kj?(PB&V{&wU
z8yV9`zm}Z%K|NLDmYl5WJ8)8$Ti#lAJAr!%L}xRHnTC~*zT_#Z!4NmsoNuwJ?xq6n
zJj)nKvC%}9PmrVJ9Sk<l1M2Mqx`6oQk&(#{jjB5-zc1wD5*i2-KeMMGho(wne?lF2
zRj1nP<=Z5NHRXD|xi5KjMw1}xTWub%;f#!vXnWO6pgLv9iTqn+dIVkHwbN5#Mw77v
z4kKnjId>+2r<rHPssmXp1~Ymv94AjrGOAkStKRN%=KMjx9-|o<Vc?)@ld>w_+&9QN
zS5c>dEtn^sEXK+#V^0qSa$CI7PYxo$QXvzL%?`6I_2OrS0n5n;#|%q>N|K*Ul0{4f
z=0uqqb>$F9QLPWh=2B+{D9FdmStDaKB2+5n4#itjd_U_1FyIi0Vkno2BTuASYHF)`
z#uRn<I679agnME(PlXGjKGf3Bvm92Du_(4tmegm-CQMzaj7b;=^RVj93aGPA^ILJn
z>g*6Emn)y0s4%i>0kX(juCeZb{or4t>B|SEYYv%3snvX+uWB^cA0B)eMO8j5Cq2h?
zA#}6JbX`Y_e@C+t$9mH=H)C_-FYntNa%l(~PxPc_Vct@0Y^F<$zXm;2Z`^On@_Y);
zPx&_W09qO6ehCID9IhfYy4!k2#(k_wLZGsIo>sj8G3t5B0?(pbGI>}XsW16KpZg;T
zDS@dz#kj#^;O`OX{2Ii{04Gli@(H3{nXnlP^>h-7@dtoZhA_T4H(0=WTh)9ugp_kl
zMmVo((we=2XCxSyR+$4CF&CNh{$sZ?omJh3WT@9}39O?^>v__6a<ES060DOtm$3x3
zx+PH+wN;4noO6hD*DaB(Y95f(rKZ%WgYTJIt2*%rAp3$Lwbk!{1fW+`D~SFR(A5Ic
zz*Evtvek7w^jd3Xw@|DXB7O+tk9gu|^$ZpCZj5IAWo}SFbkNSXwt+JwSrg1XQ#%JS
z2Xz*iv)^V3EmrdZb7iv|ptrs;EYl_|R<jUb)$j=!IL0R^=l-%7nGUmI5;_J`6e+I-
zeDK-DW0hEL<y7(j5HV=(+vs8jBQ^9XGZ?0WQ4(~|e$_(=a`ko6Rs<*yTOfq5grQvY
z95mCYLZlyZ@D);AR*}AuznPJDA#w^>m~#gk5KY3lEa3AcP^^l-5F8fESN=v7g34rw
zI)iZ`-;z~=88=Q1K7>Z!fqo3BSAKzI7gR03pjhhd0u4}QIeYa(w)s!=)mDrC)}G-r
zOH@&Pjz~52QFz9OcwjFfi|RK!IqLA6Cyb<&&d`zD4by|+(s6kNaP_q2qh1I`k^#pZ
znhE8!4MvfP!6UQ5=VlWqb(N0`c+fYuq4cUwNU3(h4_~2g7OB*M%pbo3@+>QwFTjOP
zw0nn6jn5VWNzDWkzBCvvS`45T<EX%BK3?bJuDa;elBq?6u90O(?G|TVrW(FGvG$oU
ztcW$vRx^e!qhnT>G0aUJ^PR+)BP$u-O=ApXZbR*&I>89~6NxVkV<u}ATxq&S9|}~u
z;Y;#cte(fOcfVj~ggjSaH$gy#8LBznTr-%ehw-Kvg`00N>Tco<L*36-O+ig>t5!vo
zyC3oPjn1>I!s8ob=z*i+7PSLToo^Y$G@->ZiOd%3Nx!kblBrAW%}77?KcmEks|U6-
z&)DE@Z-=V%64^Umf|>`_@kY8n^tte(s~TU2dgyTmd&b>>OW$~&zu;retv(~s#cC3Y
zwE7nh?MdHFpe2Fj+7DuEwVnhS@mPS2iO(7yk>F|ND}kJ|pIvC;n~6}TgV(rc5SCdQ
zR#@8!#E{VMG8?Rfpbb?IG6CpvE+FCxAX0Rws>%gYNpg94^COkHhi#w1Ax}IayITU=
zuy{2NynRj3ML3Vg_LPBUl^2f~%CzldX1XsTZi(2neVA3S*F6Zh>Z(Z)!nN5LqSquN
z_Yy*g@WB42xAh3$uajY9ietl(9)POu8sDmRzR29rx4OjJkEvf7*59--GDfjm@e5+~
z3L5PHWpMw=sy@3HXeS?LzPu6<g|4rW`64KtFPom}r$}m5H5B+vy0fD22ch~Ak093O
zn7R$nnfH%FFSEg@qqPjz#nR9rbJDvELTl4ZqaA$#$w4iRd;SyXNP&6Nf`!-kl(o@i
zl@DYVwRI#yc892?@)kgZ_Uqq<^phfd-wiE;`V2D=Sk5tZn+O_&Ox;H7kg3}sgdjoG
zQ#LXOlPO?Acl0?P^`z<up7ccbR*uW+9-`A7b)sua(2q(yu^qUn0niV9h9dUS&JLgn
zFeXR8TOF2(8*}75vw)46uBFt%y)4$=4{B$|u%8ZjXwZ2ZKMnKU%Ush%4?EtmL~a&P
zueO4kj*N(dVsB1k034?F?=CAA9kd8jJ4Jw*1D?yOJG6o4#yh^%U!P}~47eI@!<MRK
zQ|q>j2d`xHvG6*f?jbL9-e8s@vlHo3<%Qj4k3J0h>0?%pYuuZ_jf}S9mH1?4%}!le
zP~_{WsV}CF2rXk|qRvEmM(m+mwCYsVVh&%6)#v?D3M_!K*v&z}=2#=UrqxHBs==1w
zwN)(@(o`M_p?VUPk@Jt)p_rc|*)mj-_`v6S{Lllr0mM^L8=0q&a@7md>9l?U%^+Qw
zHk5(!O|m&Hk*p#a1DweuxV}ec*FgrVzQlYn`yFK@fK1Z)MkB_k_+7dNi&Q)QW8g3u
zDoXC+2#Iw(%@qM0gu_v?(<#SMF_^usRsB$mBB>5c@dX0%fj?FMH!U}k-T_6IsE-Nz
zi4GjXy>xKGd^G`au!&lVvZ$h9l33j?E?5kk<UFJ+*%ic`N{p&rjQiK?mXqlM|I`HL
z<|0vpx2kzfl#0!u*dM!9FO*mQ8dE>O43)tpN`<pLY_2Z$g>HWnv29JPRIg=Qb%=4e
zzE)4(h|f8vGHZO?>L=j%3-;r^;8r=A+Tg!as4;g_K%Vn;YOwA>jHleDZ3j`#g<3v~
zE5r1yFc#Nl7f_Azix4)Lw~xnZQhTe3b%P>Xso@gI)l2t^^M&WhjcwSgTaa<cl6t5&
z)E9W@_O<**<VX`J#L8y3ir|~SEbOudTUF77_;l5tQKM@yS;eXfnS;y+DE+vlpRiY2
ztWIwZf=fScI^b#%uJTbo@bMiU%ouvOH?dKwRZX#;r?J1EsS3iY!sN9l#}~-#c{20K
z(|`IP-`8-h=S9&bP)s<<%Y&R9i$vEaEI1+Zu9|=VHxgC=N9keC0V^igr^c4LchkoZ
zeyF~#d(}7-%f~3dDpqrewOX*uftOXqo46s~WDCa>;(p|h8~$H#ZNwd@aowY(3%#kS
zd0_5@1pLMhVN}Qfp?l-N4wVZmd~vZh7|{e~bMu4Hy4ikVa`G{NoQ~T#g`7;H0yT!L
zwx~brnf)S8@_7<yWPU^!?|+x%Evq_w+CXM}Lsc~SBPJ1FaazX0j{-4{*gY16NW*gD
z3zT;tc<(-}Xp%&kOrq44UYdz_V)wWi6K>*!t6hvirDD#1rdZW_iGg$Y>WXC)ILC>P
z=o~-Fc3Y1xegb@UJk!~O$V9+7hBZ&&1KNCvY9!;>=x`!&E)wCH8|*Ejuy+=by3+3`
zF@eHIQ2475PSe^{xXnAbQ0Hf};={Zft@Ca}&VZTo=+6(~w!bwIA%vXjscqq%RNu=O
zfGq_7j)3zG)=l-Hx4K`H4^#tR0>Y^hRp!3{rxJKHoXK7zrxDaxQv@3|^{N@z%)kHy
z*pRlM_I^3vo@j_kz+T-uq~ha*USq^MFJnGNO1)ps)KRq|I5@t#DocgBQz2Bm{QjDH
zS_fPo1f$nhJ28LHEMh;2x_$OJ`Wv5e4#+SQW#Q~67mazbruwW0bczxcVJQ%CJ%Fim
zzUYqhQ?!a22?^9i=IB?|rKJLGY*X<>l6-FUbf~`RpV~YEX{@{I<Cg}OC5^kO!dcTS
zGMSAYRJijVD&6;1{Ef^RG`})#WwGI^K;nH%!;<b0hbrPn{z9w>p$Q(Rj2Vb^Ha6w^
z7ntfQ9n9ndKd45XFJlf^<=?OKq9+5Z5TLoIz;bfaw^~3jYSkg0DkAkA6%8&ZS-St|
zNP#a@6IIwduZ1_3x{ucD)+Le)Xjo3OmyfXJ9xHDvH#{ON4(so&Ux^4yX&q}U?+{TE
zhp)8^PQOxNjMI^DX>j_rmSYYg7?Qd-4w9t<Q($w9yP;P1#-{&`s)p!<dd6l~wuV=1
zj)W`tD4;F(;1jln1?WLpuh?>rmzRD2pFIZ?IoR1M+NwKSG9d75DfLTOCl=|MSuE0i
z@fG7Gjh(8(LZ8;r=7I&_HXA+Tyl@J_lG2^5XGQ~QimC;CWRqA)m2@K<_dy8zY=s=x
zwaW<t@Qn$&K>A*~zyzCy{7#5x1hY<u%%SNoLNy^wE%+3LH4EpqhLM(AY%dLD6*B?n
zqX>e?jqfu>p6|-fQ7IsH%`|)e#j2-p_U-0&H)9f5fTZIaYsSp==>4b}Bi%s3slymn
zbih$lB2eq0Bn|QHSL@vbEvOGVHd(6keY&{$BU#n{$}nOR09moKqGH8fCyt+ucGPTn
z0&A^$fM8_o1rURvQe?aIr#_=Ku<oZyUZxdTO%28tK$a5rU!<aF&a9K+lT$BRo6XpO
z1g*c6;)I#xv?d}ECQ!ydwC$RRJ`Btd&THfoh3ZbAVG}0V6IPon5MZ;Y4Hx3e^!f}R
zrmOb&Fpc$Px&&y>4^dymroR@3@lQAu9&C)@tPC8}7Uy`aq+`}Rwh?i-Zy(8uHL6W0
z5sdIS+&{n|h7(7PjJsg{TYZVw>^}_a%2Dx?)YL2yEY(rqsA2>p++9n|<6oE`_)#aj
z9-uTx4pFV!U|<Bqg~z>g2Qx$+gkhXpr54hr64S3_1$D6tDk$y+rKRXT&Rhg!Umz(r
z0n7^I5Bw5?GKBaZR`4rGY~YRc?hgzM0x{|4nD}fe)W>E(ngFgkzXTE|A7nimP?8KI
zmIL2+U%#m=I{(Zxl$VY|8|b>yOMLS^^ya4D1IGlH#zKwtb_(45mrf6*>zuDDY_wzO
zm>bXfd54i{hw4r~P#oO0mGKaj`-9jptFRyH&)&$yOhl<{vT(bb^JB5YWi`W;LQSOG
zV_NpI8V-nV2c^8eh9DfsTNU+}hzZGB+b%kks6#P26r)3r=}?poMIh8MYfvO7Shx?c
zX`suUG@Z<<uEtB|>N;^B0;F+m)qEH>a{==`2sj@?qZC|=M5r|(+S;reH0@k6Hr><t
z5=^1a)MDkL?eCPWY-r`bp|KHZ)@(*bgX=&YNLh987A(uE5+F-`CCtz<fIx3c*i$tF
zkeT%WIIu~+hrd~RGCIYoDoQYrOvXfyX6jmSyXq*saVCy~{q?RDs=29osK=Mqch<fj
z{le6>dWL8ZbWtHMpuAyh6i!#6IaDuzsnXjf+Ga*>Ux<Acz$js0S00-}tTiK`t@kqd
zd&`=;HlR8B_*UTN?hO=@<P02_4S|9z33q{9lra4beAzv^@r*V`s9K*5ov5X3>AD5m
zCDiNq9jFEt2r=>>#Mo!6KQhTL6`xRR5M|z0yvB2f=5aL-(XJwOvnFQKLzpB-o#DM7
zu&4=eOB=sgH_e?0b4Hyz@VsllGcehqXW`>PkZ&1J7C|)k`pv?>%n1?)1ggn=q~pOp
zBzJz`m-}v*4D^;KGX{obP~C`w{$miM#qEc4<Xg6U$wP4gDjJ#hG4Fjh{T0j9VnBYR
zKA?WFYPSu@C)sl`9WZsghAs!;9&bv49#qQfUoV?6^e=dXkueEcs(9*arimLqJVrM%
zMzDl6BAnH)4+u_Q)1SSOA;q!O2ISsB$O_Rux)_;_A=z0K51bdm_i^TMDydi&Vc-qw
zdvd8p;f8;*jEsHkz<x&f4!#xNrSoLGhzzisk@+W5s!}l@Wp;xut1cv!&k1=Giqv!p
zP%vWwxi=;99J6-vGd;58ez3iTkN2j?vVf`XqFcUt1RkKi!$Z$gIxF|9CVn)MjD3Cd
z9A+6+9a4F9!+samUGqCZlY@A3`~K^{!uKb#=-tZqyZG^)1-@>&mZXdOZ*>0qCSImK
zj_UM(Jj8^o{VG8h-^|RgQ$s5?e229wI(={>_k^IH!FT?F#In9R@HCqS-2abX>`eLD
zfxePs!Vq<7Feij3^wBld3P9JkqML%`a|E0ZQbrl-a-*8J28ddW)QqPm-pUG3_*r2Z
zCPw2N>_5)>+;jQC2^CH5?_OhGVo_W@$>9C$-cN%Zh(~hNozT*`o;a8`?GNLrzwyws
zcv+5WobS(99T?C0OvnF<ct$s7^a4-xDKq+RMt|&y9{-`q<t7rN-tfeKfp~H`!RVJg
z(chWT1&r?OiT>G)Udia@p6C^fc0_;UjKqB78B|25*=G=?ng=ES6I1@%jK7M9PQ~3*
z84t^Z>x`+}k+v>UwdA*0btU>%5Bk38kmSWa+d;5h*jMS{uwTbX{SmuHChp${z4P5q
zDajH2uY#77PeV&b^jR0)-{Lz&9-V-u6nxBH?R4@%N7-i{OlFF*{n1_zMw5nl2GG<m
z2K?zqJls=oR`sNbALecU<%G{*Ve6iR3k$}Q6FxD1Sm)Yn6@7Tg)N5_ZZb8{md_01O
z*w{?jYLYpko6`{QoMOA-mr9wO{QE7iI9C;#JEAKQu@@2Dmm{o1Syatgc}@FKvR<74
zN;6-S8APc@lw6{C?HX+=9cb4<km!SUcQBgR^+_uBJQPzsL_01?EnKPx<)#l6wxd}*
ztIyjQbZcIU;-}tZRnlY;HOHaKQ!_E}z-00ew%C}Z{{Z;7*1>Zoi(#6mk2lA}L`%j)
zlRt5&#n*pd)WXyjx!c*DopB}$pNtX~Bgx_eo{RC?r;dr+DnMLE;wJjzo{iP2`PfqU
z-b38xf@{tX=MxikUFn-#)y(_%rc|Tu706;WlW<4$!DGnBVJCHg*a=+qDNyxh@f7+b
zPlfR;uIjahHusxwehS0tKM!C6)6pXBH@$^9jgy|}%6N?Vl&Nu`C6Xv>Qe{t#I2OWO
zxGXwgeKxh5s-Sh}$JekZVRM)>1y8SpKA2n_Vo80GzutM^Z86XRF|91AuLdzpc~Vt|
zRI~XmRv!@=t>Y9r1I9O>DhFa*AM=}sDcr@$&kP~6hNx7=PiMvP!y7p3Dm^yr6$T1~
zy9$ZaN+l5K{UE8S@2i*_H%pye53y(jq|wM6%I2Xi5N-j(A@5REj>MPIyTOEvdA<{U
zj3ZA`_v{!p`!Y1!!3Zc=QEC&PgA+!ki#^G9GH;vBFL#mv-%kXAYYlj~qpa#f@^A=K
zwfM!Vm_sS$-b?KN6hLMu+g-;`Q50&=<VVhMFeibbtjq-rv4zVdI4g4+!uUQX-qlz;
zQ=T18MA7vjveRElQ+p>@LmQ6sPWwXTw+-Y1X7M0jeG(J%_RG+V-;q-%GtkJ}i*T@5
zm8P@3m+#a;EWZcm+{dIgs7Tks@K`i8Ra7ITCX_V9;nPTtFA`}}oeVv%&sz=hl~cUd
z$JFDX05tNNI!Q-}86-WuM8%t?Bqxr}FtfaNZ3#GJx{akpyT5iXY6u&HeEre`E|Jty
zz$MY5M+wrYBZ_nc6RyhHVGG~0G)Cs<QpXjkD`QyM%7HFTH=lHVa$NIaQklh}UB_y^
z<2+d~#w#c&8S1mc_zFW4?Vp=H%C^@e%rY(XF+{Mh_9hgS5t>R1VO{9ssi{_VH*T|0
zNdV|-=rkNf4yWRd)Q#%T<*bH$33wxP++L}Lu5D@n)M9lFQ;O<AVeQTVBcl=YQj4BI
zOHdDQ$Yp13QCNHxK0xQi2OyDPyErb)m8?^5WQf<LkoImS24l89LhF+=y#VzkSpixV
zOOpTK4eRo*LjW_M;;@%PXTN%25)APWS^Bz4C9-n3z0|+3nUrof>mBH3f3^iJs(=a|
zINj-MCn>}wDX4ZURiM$`mPsj4vp^(=yWLrpt=?l4Zq@YK;1jx7GNPUG?L!X)6;WTr
z204ZEVOq~4#>nVK29J_KC%ge-x-}Lc2&qX(V-4{Zo6<J7V*RH^GxG-;>;alD#~tLD
zhe+q<K#o7%lH&xR$&f}(pw~L89PG@k;32_>@Vrw1Q!$;XY2q}^;_q)k!#ktBG%tci
zy>CT#CKC^O(wG1<)uQSlRJ{t`yc^#xw#E=99OaoMXb%ETIZo*N>C_#Fg%t|OQL2kv
zMmVw;Awtz$jFRKXp3C>l^~?Z2@1WD{7zOV*U0%GyTP3|ET!WD35jh9QD);71-sFZk
zW^Wg!x%vUI0g<)UjNnK^O+=&`Lrx?47%mF1JLlf{aIF=Sfu6d)Z*15C>A<P_u)3Oq
zhqHSH+{lb!;$F7G;j+NOt;y?2=iXAclmWYoPVJ{@WmQI$>W_ViJ5+Hwrrr;swmQfz
zh<{{V^&28pPB3~!^$Q{20iwRb!x<%IG^o)}LsqJXFOaim;;$NXWcJ=Ey1K6}Y>WCp
zEn`(O!Qjo)=mN_en%eO=3hCcLorcu<YR7r-Wj_o{8QK+=0hczksSlQ52gFy(N(C)=
zaHk(OUmi`(bY*#TnW!>B;2e7^-BCx60)LfPmbSv`o%E(u2Wo>wjp#>;aHl%`&sl9x
zSxcV(y#P(9hq)^f_X5;KupjOP02_0(QbiDgM<^|l;cp2LNdu{t%uIX_0+BZJ>&VkY
z*VVMEPI4ZRvc@Ot&{7>r)S>x0WE$r)lU+BmKm)R61a}dhP!k19SaO6gKH0Sb&qP-a
zo(br#LW36s#iM;!2?lCktj2<)`lJjE<{l(O2x>;e3MlL?IMSbwBlatT?HT7@Y{Aq7
z?hO|7+C*;wbnIxkthNbapbAAeKM5>@ShRMOw!@c#>=81>r1dGuB4Gt-cUt_%J_AjS
zCI=^AGV#9wJ~piX+r67QE^S<$d-l^a3UMo2R;5*#A=bA)VI0yW3iB?b>th^})r=W1
z`GK02zA$gU0nXFdGuWr!0P$thMNT%SDcpA4C!yf<mZuJNp#!@F%l`{f(Q81uR$5EX
zGkbP|Ocr#HmEK^`U6BkISm5kD%v6l;yMfz};3gL4&gA|Pp)MQ>b?X{ss^K#nlG%Vh
zAoOBY491e#fXDo>jy9te{6=Il8&H`_G=LJS9v^k^=x)ERCy(dC=i~rz-PsK+nBqcT
z_jj48^f>T`CfC3r=Ca}7y8Wh3TDW$emj%~D+TA1#9LbI+=?q`et*QZV^<AsNYo)rI
z5sR4~AIVnr@^@&i`jS@9oQ?RJ%d&n*;-IxC<1ymNjGXP3XvL~z7|<#KjRmE?AhAk3
zd4|<+V3x{Zi?yI&ZYHRWw?vY|7M~Fb`QPm^T}J&&gyhN?O8)p?WXK16yoZOhnSH!P
z|9N$<h!~H(3v9m1ksJEttyrUBqT)zXa_5j!z(>uXxwgMsf_~E$BKY4|Avg@;*g)o}
zs(f?Tw!f$^LFHP=x^8+fy;wGz^m}g5WH{eVB-DBf5J?l}oMgjWq&`L1W_~rHvdn$1
zrVX^BZH4praXQpkhlc1-T^%x~X{#Ybw)$(|#VS_BoKRPzm~vq$_3${Uhx@qxKs`Lf
zwTc7yG;<9ia{=Wtf$IF%?B%S9NOpr}3dmf}vVPBz1e#t|xSM_DH4&|Fr~+E0PGEE&
zb+nppY;9`ccn+*^zp+XdMYxsucr!v#9pB+wd&}M3SwrbESS{52kdv*23=*u`CW}=A
z#JGM?;rMZOL93(g=G%*WtIW4I`1bO3ZS`x9`a8m2gq^snTT*A9(u9<qM1$NZs9Cjj
zbIq7EPt4DZajc0*M2!06v0J4<ay@?ta{cf%`buCLtEd#0^e&v|IHbxJBu{Fwdw{BU
zqKe$r!eY^eLOEVPq8@e2$9^iFK25-{dUHOq0(fVZWB6|F-=)Ks732&-;_Q#jIb4Qa
z*sTpisv}KwTK2%sYQ|;Aa`@uLn7A~$T25TphJ?)H^{kcGMA!)X+=Q9Ale)vT8`@HV
zi6*2E(NfF+X~-fU3(&CS5W>PJ9sGz$7+C-&n$11|EBk5oowSBNCVLwZss{KwQ%sQC
zoimyebhR-+4Fp8Te)S7nPo?j)(o9stlb9fC1q4o`{03~6qC8Svm*ItpR+ea72g4{K
z{3?F9$6*{?LC=QdToFj9hQOmHf`eq-dDUwnE8grxpr}_Lll$OW@x4nL%SLt--$#v-
zcZ-KUmh`wghQL8zR=2oNw0s8=m9nzu64oCSD&-2jZFQn9t&m<$s8^ed?ua<oi0oF!
zxXbfglxNmTZK}e;s3;2nh_|0ttAIyC)SJg5o;`&k?$+-Gc$ZXvC3Qh|C}AhZL2nF`
z`2PA}?f}Y8_M~Bg2+b}*4y$gOiH(Svi7Y(XF??V7Ed}|etSj`v`6m>jXwW-*Nny?A
zA|RwADGfB&PdyQLGs2PGile`+UsT7ZIarJ=B$oS3dR?Y<vWEb!IUIXLY}-di7#Vem
zUw}v_c33lmC41J5#0*1!lmv6t{RDDa%_6De3ud>ovXl~!H)PzPzuC#=oc5D6k0nNH
ziD4kKIjr;IIOUreMTJ)$g~GgKK=(4*z?1VW6~w~6ci7x3U5`e&B+OSmFjuPTQj)lT
z>ZO1LmZvz@8t2s;xj0Dwu+}u$V}T<Niv<!r5j%856tm=^%2272CSe5cO8R<&_^0Xl
z$c3*oK^h5mx0U=9U;X|r_$qe+lj<!ZIkF?stf|*G;6ytoOba|#8KA+F>B3zBcAk+E
zmu=e3$T)zodK_5JU4&rBuM4>sV?NYWHHq<sDD2}%M&@DGkY$f!Rz8FVb=0{WjlS~V
zbQi8s`r0?nZ>r$}rxG~^%w`^Gr&-icOy->-_>vKh%o66QJ(JEX^^7`kfw|$s9AAZn
zBFMHy7lG>M>sB=oSMjPPLgG#ptlM4-3uk{ooc=K#Att_r6FJWJw5h~Xr+;1@pTZgO
z(-f+LX(ND)hCg{#zZl8nh&wEtg}l9srou!u{qHkIl=Wt|vVoa%BtV`mM9V;q43!xa
z+&`vfkexmp2US1Sp)jrI`&yJ7*Q5Krim=@E0lnrzJsI!PHM(gspTmD$5yL8}^XG7s
zpLjCPRl+R)m|5V-2_y44B+ofqM{=)(x|^&Va>1I~+nOy#Hs=`CllpxHi)D58NF3P<
z`2G;%v$DCVSu4G}fiRd%puLqKCiDGt3wclEdo^?xK*Vb+G|^lVp{npie5AR^glBur
zC4`jo$t5ehgc-)29%Z4rdKt*hE3%B8=Ugq_KAC)SU({H@9Fd%FrRA*fL^RM53p^2b
z>xfT15mp^B*%NW$A<>oAq6(Q?@Z#iydg%lh8T%1dTY>4^sUg^cZR)T@)AQh$R_Yra
zQ9?w~@)JflvME6=Ym6!FVR&;FyNlnT*d@|~1B+d2zhXB5^O(@cTg09aF+OEl?`IwK
zA{vLZvlt7E=VJ^WEUoF;tc|b-s4Ht2+@{7N8A03nP9uhi5MQ2Fb>I*R;iF_@`Wd((
zSwE@O52CO6ovJ}G1|H_(7tZ?w;M}L3Fu_xyeSlb4p%p8%gJ0k_yNU!kvZEN$bq*q~
zvWQ~Uhb_)pVBkHJHmhetsq2cY@SV?zCc9gV*ap48^p{Xw&j_;Gf5B}{+#Z7K9!VdM
z&}@B1($aCQO4Noxl|2*|<d+(chx7SDI54WOGbm?jC}WBcqb3}dxl1?KDgTA*iUHud
zvslJ#9&HDj$UZ|jQ6Y=S-vQYtWsjS<K7(7qeUZ3t3a(p+%E3Cw=)XBoy>kS|>j$M@
z*2}AsVM8!f5q?~k1>+0X1O0uuP6@_(fjyZOz*0NUFiCDT2L+=FLx&&3r-HF$RGLJF
zlfY0-;A0$FJEFVgV>x=?Z+bbp0~tA@qZzl^jEnMPez;zc4P-W@q94|pU@TGeXg}YS
z&j`j6Mb`pL{c{>R?&9N5Jh-c5{w8Skn5oq)a&kmZW!(K{+`FXfd_V?D=E+|Uaq3cx
zBYFr?&u`TU?MKvbpsIWQ@HuZ){D9!MB7UBU{|NC*P}3<F9;h@tCyTNFQR9aYf2xUp
zy)W={fO_7z|5{I7pV^Nksi}0d{Pm%yhH%f|K^K0o)}OvU)MgJwd}7ZYmL&Bb%oqjG
z_0x2%G~Jazx*VY!1G*&jKB|Z$wML$A%X1N)<cE3U?pyRcaZOCLK%E*7@oNkNY<6oK
z0P^yZ)PoqAB&oW1259gPy()iw+BMO92!DJv51&BIFJO8yfbJ_zm!s(x1k$Am-I`#!
zp_(p6(?tf-<-A3C8K6s2BQXX^Qp51nsbcp{zu}ZGAh-nsg~+$&uAZd23(;~xh?4gt
zS1nN<=}J;<VDKbW3jhf|BEe(Qtb|=^pMVcf%4ACxzQ@`VQ^1$74{kntrCFm9I%Ko&
zwK*nCQ7NeOGIESe+3JwLDH+)ZD7)kU_SQgQBp#BaQs}Dr>kF98rc?NK2vbu5%<0>M
zzC&K3S{i3A)AN#@ylz0U*^Yd?2J<05Xhgr1H$c^rr26+^IrOzi%_KDwjNt!C>JLnU
zC8<6qYvK8vJmc{cVfBUWM7Mj06BWyx8EiHKFOvHb9m%OlnzBgPZG(1ZDnDd_$zN}y
z7w2z^3UuazZp_;6K|V#2lYX)c_@us(gj<7{9F&#((&s|svMNWcs)YWze9nOFxFfpa
zsc?|asazAg)tg61Qh%wa1M4aRHAz*kUK7uKV3ed*A$KLgRqAta-Eoh1Uhs}2H5m#Z
z{Z3k;k>G!ar)#sv#4|-3U#dGrVrj1$Ah`#GHhcFlWc9XHl_9%n4wg6<Tne{fw>LEj
zQ$WZn|6nLWMkTl1y36tizH@XvNiCzDR#<lLTC-;1FDq>2%GuJdlo^XNp5r$ssfL)h
zOH$mUoTSbQL+&?8Qpe<3B+q~3xl^9M%QIh|x$;~s&!zI@t@XOd%=5f)BSVtnC4fol
zBYE28nU1H%eM7>d<@uUCljQl5Jp0MBr#!pLGftlE@q{V%EP24P>YTi{7*`U`D*7Y*
zC<{I~3GhmSsVKHOJ+HyZ1Rvtp84>OAG~2{eix7MT%_P3_&hk3p$~w#t;(LY}_i%q|
z*NfOYl!FdaB3!WPj+GA)$+487^FIitEkAPzLi|%@&f_E0LO%a1v=xq}eGnVFN(O@Y
znGA%3zUhv2a2{^3MCMs9ta}H)YVh(}mP_r+q^05{-BeZ&Y0>SjG_Y8*+LceaKQkw_
zbyHLmHv1^7aHkV&Z-voOlKQhp4SbX}^<Lhc{tRHN345<Xx+?Q_k!qKU4-D+VyS-g`
zS3v;xqnG~&_Y<fbZ^!*;%5Av6`@gtD_q%S#{oUJfkNkgdU)udPmWjL__pO)yhh?C9
z@7r<TI@;GV>Lc{9V=r}N-o|B3*LgemmNM``Y@N4K7o302Hw8Gu<D0jG{bcyp$Iqe&
z^lF15AUmiXE&86367mXu)B$|f(I5LkU`G<W1H2Lirjf>ON$f?yMz7!~>#+<x{VTe<
zpgiykD7$LPSWWp1DaQz9f~MK*tsJS_R?@uAhSkwx?P<|%3w~6)Tk1BuHLyca?*Y3=
zV@Fd$4Uur>2z66<`lqTJ<h)GE*R^i*G$qBUy?FsPFftz%tSV8YDAE+8HN}tTK(PQ6
zNorD%lt&=tMk~-v)ih6O8j`9M(4gwDyKCtr)h>vh)>yL$^l{o6i_iw4E*nbv=7CzK
zGN(QywoPMC(%26Cs5?Z%gNJF2y?FXtgK~OM&$il*Gd1NgQf|XH9{sVIs)vZZMW<@0
z#$HbBIlxX*<3!FVc@D=jeL{{UrIsyg!iv(Ki<;(OH>P94W_!mRHDYgVGFM&)xKrw_
zS_x#+R4eM!c8-VW&UBC3sK=1u4dSpx2kXseA-cX+)CZf%iYE3w8heXPu+OlrznCk@
z^1-IN8sN98x5gf(vA-sEKCqM2SBGFYN0s-<vav=gfMh7JmkNAMmZpB^wIP4e;3EX5
zYj7h`U+2&#8vGBzuW0ZWo51{(W<FYjvk2~}!DpDibu@Jk4W<nBkOq$+bAFNuwmAmR
zgldWoT0w)837)LMn>2U=HbyDMPcS;Fe3k(4Rjv7a4K5<}77boZ*>kn*$r_w|9^i!<
zyp!PPxMJdHF;s)EbOG}$4PHX<60V^+T0En{Tb>1YxCT!r825G){D=nc$B%kegL@G?
zNt@+>2G=L^CK~)W!Q(Y}od$0sb3=o}2p+A$b2T`V;1Yc95$XQ8E5O4li0q%WQKeXK
z*WghE57*!+8axwB)M5=D)*WDrHfqF$a4?JxLzJ4T!Lxq`*i<b-%Wg{9DH=S1U^8J>
z4St5;o*I1fIe??J=DT2Q`WkKCQiGo&^=J*wH#Lt3buEB<B4tl8;k`6`Cs={}WvXaD
zrY@|l;pyk7O0wYP+i7Rn*-l@4Py54TmqqyfOxa410=$^u?izfT1{Xnwnnkeh2q5L<
zBsJ(jV5Q>%ixFh8Q`@cp{a5I>A3v&hAdA#&V8;^s1&#f+#{QYu4YfY?2!2lMldi$v
z5?nEe856f_Be2cH_0-t0)P7&KByK6eX5w0Ea9M)03HD1I`}6yyVwgx8Q-QLYral$G
zrvm(GQnx{Y?!-1zv+JUy{SbaszaZ>6z<!X}rlr2q*uN6HaS(QYU@zYQY%_7=H1;dq
zpnd6@Kuwwe+fHng_cI#1H+gRl#7^m+q-O8CRYpEd7G`29Xcjfd;zP1<RB1r4X-%ce
z$dUx;GeUzy2sRD3MT1Y`M<oO*U}U~8&Rk_i9w^KN&eRm?WO#odMJmnF=Rd$cYC4X_
zUP%5Wt8ZnFHso!Zqpila5qo_gHqGHEyp=gFuLld$99ML)wUWg<WP$Ms!KOL>(cpQg
zWK^OCuO!$s$0`jjWTB4@R3MeP*VzaA1C9L?vF{4RPHCQ`4(z>^x*<O5#%UJ4$f97C
zsO!x2s{618Ut;C^3&Fl+AvF>Dj3>5fz8ktmyOYe)gRmb1_7^__`*EE$jWq9b<lQq6
z+sIgttWQ$+-7*Ee$Y!o)V>W#0v}n~pHd2v968lSyy<Dr<nAit{KCt)^RJ`^Bu%~Nm
zyT<;TDlQJhHZlib3<rwMr0Ah3dTWYjNs&ehN0sMu05+YMJqOf!n^@<+6wDBJV31)0
zQked<KvOKmk9stiVlRg6py)^y(zOb^G{rT__!pmT^vg3NQ&w#pRr1z>!gR_Gnj(}G
zzXelpY5+1mCWYyz)ip&kYV}zlh4{tPg}^p*x}C-jA^%}P*z}8<<ZXJ<GCfAmV^1tP
z5ZlP;gH$G|@_TOO+4obZ=@-9iHp3|N(((W^h+mXo$G6*PUux`)Y)&@^Vbd>0tp&E3
zDR*h?aH=>f5ZmJyF{CgJcBoh~zAPz*1XJMdX`1*2YGit96)hv38nq0jz&Q(2G$MuR
zt%X`fLsFCvrpVV6*A{@n^w#e+#h2_A?%-D+9aXZj0XDt0kp_nm{HuHv(x=a0WSV~Q
zJSj|1x~2zxo1Ov1#6Sx1i%P^c&A3ft|HA=X_aJQgMPn*!`t=QsU60y47>MnzFHY^g
zm0!$Q12$$(^ww;~QRsoCxAKb>^MP&J^gWHen+aMJgiXI_L*8ccuj>(CejKnT1!8;r
zB7_vCvva763gIt~@e)YksN!4=@Fd-_S*XF)sBF_<hR;cfuQHPq?)G0(yh0U9mjoma
z_sVFBrQd<Vbb@a+#Vk_%9!zmYH^J$oFmqy*rudW;p9fQ{(G+E<m6_9r^`NnsgT|r3
z6lOF3=PFQ`*<=oWx0B-WKniK*zaqA2cysXE1%o(sXAm~q&AfTQHtVCsTAOjiF8npX
zMk(mweYX={g#I)om>CtWX&O_X`GGW|&)Jn;>~k*3R(z)l=eL8fsn1<L`qb0BRVV1v
zIS`xO>AR_qU(?I(biua}Xl6-~7HDOXLIPPxZTB42Gqa<+#!jSqdl!q>H6z&cq2?MK
zPJLDr>?_*H9Ih*?ZWM3&5IMn(dy&E(OwmSD)Fp*ku$pL!w@A@Dm;!gKuzEX<b$fS(
ze&eLbm_>>QgDL*f)!S-Pm{sUjO%X$i^S=b8<6BM9dIcy<uWO?z`r$|A22+gE6ctEe
zdR~a8*wqm-J_@E7smoi><)AQa)m&3N{4^*A1XDbvDF%|l%&u>plJZ~hqaF#SsG=#F
zlEO^KC`~by6jv7orMys=(9&g~F!MY{Q#4{a@`EY9*Axy?m@YS5Q+z^->46lfoV$6E
z*k+k~Qe&4Vc2W>FhiD^-ZI-shN>aQIKdN;Qc3oh%C$^af85%pG19(>gHr6iw3@k8-
zp!sO2S3-iO89)ht{~TbURJJ`25Zlx~O=CYz3Eu}|8yQnzog|eUB$TDJHrbep7M_q~
z&2JAjF9))bQhI6$u+2>TNn`(kAJsevn{ChA#5Ub(zsBB4-ggk&QRPd5&HPQ&;CO;h
z{3js2M&^^cyfr3;nZF-sip8W@8cbpKRojxn^wS&1C3$yJ;q+h%v#+}4S5TOpv`8&u
z6J>M@rZD@eGf82V=}TJ1a8lF_rZD>?gGe!5%0-I}nxZ->PXAQHlAb*UyJqmEavLVm
z@m4xL4NpB!nf)nV?U_VSxf^A+(r3C_ugVQ=OAkx`J!pyM%L5H=zeIyYltv)_uS+yv
z_VZmT2w0+t{eN)(qs?u&$NF)Pz0?V75D&*?&72J9O^ZIf-&FolsP{}$+!%@3>Ni8;
zvfd-SgWbOoNR5(3i5J}RaNvFvaMux6FE|yb?R}A&E#`t#Zj$P@Ey!Z8xrN?lQR`ak
z+ob6=%J^@KTE_o_`|R6sH~hG(T}R*>sU>O~eg_-HIYz^di_RM(?l2mbe-P=$+Uu=i
zf$?-@qgwd~D+>yWW!P76&O7zwCugV8aQ@5wWx@|qYGW}rUG)@@F*n*mkDO%u-4tMz
z0NJWDA5ZfU%f}OZJkG~scm%jj#eM(7DY1Svv(;@(T=98d6GQ#azJ`8}YyD2?$)6HV
z{(QVp)PJAgBO3g>2LId>sT-xi!wBB0!T-_VM1s3(a6G{!y5N4K!Pm*Wxdt~T_@<^#
z*5K&`*VN#u1eev+-86V0nP0*O6`^@C4Iih$k7@9$r2boj3kZJOoZ-}9+dhC-Xz(ut
zzoWqy^hD8{r2b5UKOuOQR&BQiyEqB-rUp+Xc#8&)(9A8ppjtl-P9b=;1}A9nXVm-&
z4PHtxm*U|QO*OdZKVV)*gPY*)vsE}5N^o@z=FFbDxj@qWIH_mrbf4F%Z6~-$gIf`N
zzfRaL4W<ezM}u>r<|;kXXt7j-#}fP%z(ysbl3H^x$m^#4^FO=}RpA3IZ{u~-dii=?
zfKRvle{j!haU1R}Z^wPlp8ugcO3a|!ao^MPHoCw0|KMKXcHH0e<Gu=+Zdt*H^N!rQ
zxI?HYC@(_(9}=fGzm2s*{3HhC#lpY;x3wO>9ruMje66LogS>j6v{b((;w?$_#dEMx
zw}aj;65BJ*{;$n`IkpE*C!e>ap9)c#sKz^F4Xli-C{rKIY9E5{AKc%;eh_<dV$(O2
z!8O6<aYt}in94?T-=XcmkWq*8+gFCi;|{Q%Xtz3IJ7@c_5}WZ$?bM65^bOqI*)O(#
z?0^BzVNceu3?AIXsG9+7$miWM$K<<S-EHqZZp*yHb^QLkvA8hhp266+T4c-W7nY>T
zm14J$T?0~`U^XC6Jq78m?SrTI@YB0>9MRu?9VzQHvw?#4AQeG11@D`zFX6S!fIOpa
z8s#_5>2A+8zV7D^cVB^GZE3p2_&V2lXFvPq^n+#ceED}*TfwF2mh>xkjH$Mw0&tD5
z?FVwt)JZ>H#(vhmnT&kX=jCVLoa?+dSKapjd8Sl@h%yEC^|`9-_LC13Ac~YR7R?`B
zhVo5w`sFFkh*H!!5k<A^d-~-nE7kHE(fc-~DQ=*#j*UX%*S0g>`+Iut;amLdW3yk8
z9W#EBKK8TObHUqod5>+o)Am4#t?6cL@=A5a*~?$CrRSHiO)Ry*K&dNm&qy^&aV)m<
zu~@tc*s{uEe_V*MY_ly_g~T;0zu9J=bOm;@wLX`6IB!ap_07*CE$LUD8e7AWP{v+!
zI6~kx=rd;56YKM`tZnd`ex<GnZ$yBj=7XPl;Me95-f8UJ_FMpdoQ+TpwxK<-)ov{U
z$j2<SXKXK=&Ux?4NK0(b*d9H3^p{==A5VBCKC6*zONzG-$A!T5i#EIUT_B>$@7;yB
zV_6d!vRjAZM_t&4nm_#tHv4mI0-R>RS!dv#U%38@P~2n<gp`i)_A}Tde12$k3$NTf
zE&|mO!8junYCZ$l1#a^$+&4ohNkHBXU@3`xAx}2sshd}MT%n4QYF?$$LrC-$oGDFI
z*Yy~c+4Eg3G<Jc;UYT+W?9?58Tjq~d!Ui@+JAC2%O32ty*s*eMxWzWG{3KhMg3^QP
zuWOVW-K#QM%uc!J2z9((-LjgNbK-lyI1fO0dUP+?8w%v1>+gs*h+G@U*v$GQ05+Vh
zI`aee!(*R$%b8^@stkDGcq(@2*6`U2{>UY4JU<S89#h$WqcKfWy~Ti^sf<iq|A@_6
zMJno1BJv#XLt39rUqByRjFU1I`n*#K`n;b*ed_!N0MuPLPp{e@CK0}0I|F<7xwlL?
zX*PRamL;0^<r$gVq+yR<Kl%a7>JTJZbp#XD9wMB)SW~SeetPut6b3pYqaO8fL|3K2
zdqiL}*q{yI>hwZLxkjpVP-TUwlc+J{vl`a{kmu_c#AQ8eSydfU*0SCKmp?0l%a|ij
z(t#`QZ3C~{@D&>z_Y6_vf8n|8w<1u#rs95pLp*d`tO}<?!VAzqe-G_G@quWoNBPO?
zApBj#I^_V&jVq%3Y!n+DtN0KyJ7h(v9?(j(fUPD0<W{B~l)>!;>Nt!RH}IwncesbE
z^NXlQGn)e!C8$#ewK;oG4Y^%<7A0T?_D*_Xo(h3{SfdfR@&HCC^WbluHilc&1(7-l
z{MD>ToqysyjVeU2X`wTZXKRqRFREv>#wSrxFmH{FU;h<ze+dC<;aYO9^9O*q1sS?F
zQ+-X1)=z^*?*TWue2gV6H5@wi0?F!9h*G0K=Zs{&3<G;-8d;`Cze^b@?Sa{r%%264
zPG=~x>{S5OfEXV9Oo<4k=|jzA^noNFkAD8VyR77ct+OwA<IodN4h^0X+Z)`+&P09G
zOV>!)BpHINS4R?fbfo5nwKxyxXwefGKs@uE75hj2pff~ILX^tZSaUSi2#vLwSl?)@
z`(^=arp6klvF=0^=)We`1dY{_SR*yoa~i9@#(Ilby){-0u?okEUX3(XV~zFh)ykMZ
z*I3WgYG6@=cqYdYJ%{hl>-Tefe^$Rg9oE2-*7zOpD5KiwsHuojP4xQ-zSq<5ZSTSR
z-TJ+l?-liXI^S=~;hX5kYvcW#e$V3jasB?(bSONlD-~|h4DYaKN;d5oJ#QY8mG-+B
zawRA>Sq}qVM!g0?49p!ZI-paBns&l#;TE%J;L|Ajyc)}Dl$l)qZX4U2XlV*h$F8^+
zE;ZN~13p!r0E5A?#_PCBepEqN?24Pn+rdWiCClIr#)yMP!zFTCJCQNA#YV20zlq=$
z8_?|=Y+NZpv$Ik)un_Sexsp}viZs0194jeLm>CUIA`(q8;7#ljps?#<jJOk=kK%ua
zEj>3Bjd2XV;(*_r7^;v9gsXT-+%VV}asw<z@Y4GtzNo>*OXu*vcd#+^Bys-$<Op9*
z13c<%7@rrz-00vmbT8?44>nwzfaW?)-0Mcej0oxrybYwd42n@DVI7QyxSpFBrv`VV
zM7$LU$57H<=VKSbu8qLN$0qRX5s^Twzle1%)M(ftA{0#XK<?T~o}s{rkBB19@5DJ9
zO8V_2496Q3gCG~d2M9hNLK%wWdl|VK<c%WuCh0pDLZpjj5Ib9L0Vm>ig0~@RT0{=h
zL@8u5VkaKZ0^xIIpwv#Fd=N2Ll06EX3|9eSH&M$nBxa|9WLLy0jAdvK=Qjo$ufUYW
zTkyLX(CzrgZz57SWId6#K*-2L2Gep@hdUZC{ej4#d;lLfA84=YXcYg6U?KG?`kMg#
zaR3C75-|7^Z-u+?R{T3eo+B>V7yV9PG10b=YBMoh2vRO6wh=7Cp;@sLA*}#&eZ)Bg
z3!Ok4btx3DMZXcb2oIOZ6}<KmXB)-s0b-G)OJ^&cs`wBdt~`KUJMdPxfo%6NI8A2+
zcq8+S;ytkPb2)_W2HvQ1VZ@;UfS3ad6I?(r9f@Ew2LYaIf)5hB(@RZsfSEs}E+Kda
zvJJ#!AujV5ae72V0pSy#`z6kHFL<{GhZ9^tFw*Y>-lf5C-BB0lv7a0?S%~**3F1vP
zA_y%pIZ)_`OO$d6N!PY@NhC7@DyKnZ0h9Atmak88(2P>Lpj{*beL=m4%SGl8xR}|A
zL?xRnAV>2k@bCbp=w%keLSix-MxEEmAR<J-(NVk!JSW^u8W!MBN=#;dL*niNJdWm5
zHr-(;laCSvUqUf((SgK0A=B7RKRt>Q&kGAGL5SfxXEa=#Bd^7mP(GZfdj3RBRSZxr
ztpRU#(X(8KjE1vHfM_)Q`k>&C=u!g5L3KFdAN-@BCGJDP5)Uh+_K-H>ApUhx>|nff
zK$pj%2cZ9bQahB7FdFtpRb&*CV(4EGd>pb^hN1ICqv0zNG2kH2SHK6w2R>Z_`W{kY
z4d-*z1y&O@rIGj>f)^1Sl830P2uKwI{YIWJz`RJOt{5Zq!t-ENw1<l7FG=!^88Ko%
z)Y*@a3;K>gV*qKhbuD8Qf)h$KD|BF^J{froY@rpf>G`C6iRB-b7`l-Wr$McY2t<;4
z8)J{as8ki2BP3PkRlb3=@Hog>2cJhWiccW|6$6Sjpi=F?=8~ww0~C6e@!(X*A`eW2
zHbG(voDbCkaL4=!e3;WHWQ{WBvc%{Y)GVet$Dj_iK0^A_NRY5)RY&1u!T-WT!2gXX
zNTq8V@I`Ufa*{8FCZ6CjsYnH~B@s{7LQGsS*tsaB@DFHHRKn<7qv5x@#A!uo6nDy)
z186D>*CP>Ukq9wL;bFvpccC<q1$cqqpz1Wn{H^~BPeM4W39S~Ye-|q?ri{83D>FSz
zKNLd#OM#~i1gnFtp$l_>%N7-;GsfiW|3VNKvGJvAk2wL>I-7wuLh4?rB-zFn=aN+D
zcL^$JN*RUjLGcwLu+fDnZXk?S8R<Z77fBuzf-f><1e<l5*(jF$g;y0z!709gw^QJO
zqK5*(EFf_)zHZD&7JX?GiYrGTR;Q1hgedSNSuq-Cqu6XaeQ22~1dozwJ~^SwfzM)y
zCNYR)j{|U|2QC5``xs(+PT^(5adM{XA(9HBFVC3%_yO((zV|>nDF8m&JOZ&`V-&kv
z_u^NeK7>eP=ekVrzr<#d8Fg9Oi))C~kSk!3EDe^_<f51_<#jL7RZWECl#)nt=%Rq7
zZuJp&%}aE}LxkJeNG8qOg<vwU#c0h-_yp6Xb-YTt658>c4_$}{&eV;%Oe3L_CPYBJ
z38F>rwvYu;8=Y;Ho3BorGznfc|0SI?l3>D;6-=j-C-UftP!gy&Nat=iktsohz;P!~
zNMR2T@pTeQy9z9wNa^drrfkeK9x5#M7bG*aQYeoQ&nl07K6kRNAnc+;BeTT_W-|yM
zLAMgo;EHF7hb{WeV5_actVEp(Q{IGVx3QpADFNCZ!c|&f#Fv1pm{)W~E{GanFHE(m
zgei-)>t8UvXsT+sip6H8daxP$zG5a8unrMXM#E2~O_ii*&6zoDHr-~YNtqU-;R0z+
zi7K5gR0pFjgn%U~m=Wc*Gl`WcPSi78n7$x_(QqzXWLxX2M&=9WG2A*WQ>=EU@%6+*
z=);sXGI!p=;f;0C-TbK;hv^WE$kxkGbmuC#o3D!Fy-3Uo#5-E_PYK7=L5t}K$2%H-
zh)}%a!3vWiE!h|w0a9}`Aegj!1wZN|7e}QvlYf>m^+-bUt%LCsPFzRymou%5>5mxx
z;q`g*RrQb)0@1G_tZcC|1a7F=^hFeCyMtCW(O4%cV+>kPghk&AebwFiy(`}<>i2ZM
z-#jV9<mG%nhj+{e7|SZ(kH=eeEcTPQg*!d3%+AB{WlpGpb1=)2e!WiW{*FyA@pFTY
z#+FgxI+;jvjdvn3+>5caH<rb>u-IK4?4=#-mp~YozNyU4Blf+qWr|c?@Q6#lSv~b1
zC_D*5S1+%VTV9RRTKqyShU@oZd{3lC#_NU1iqtnFEvs?b1ey6dyGYgzm{7vdvk*z2
zYykl8JIwLs=2anr$PwZc;GzZA?cmY6XfDu;DBi|7<YPv|5R5`m=5DUHwceb%QH457
zOEYt1vBk*XMPhbq_8XCwENkyfJw^ODrid}7wxvf}FbU?U^A5DM*K7@_&3@n6^lLFj
z#z>H*=U~n`FVb$Ut0CKw=gq4&u<)Q%bR`hm9Pe+2ikNja-s=SA?VDuExW;9SjwAJ4
zSL>~*2kq7a8IrfmA4$D>7Ak_tV45cu?<hd87p`V{VWcT(k?aA#zH>E~qS1U};4q@f
ztWmHOV$tClxg%utJNQF+g5?;Qx4I|(Y>p{1lt=UqTKM|vh4>@Z7M8u_97djB{S^LS
z=Te4TtDE6Z2LA{hS-lN^2%RPj4RP{Oyg<ej2x0daJzcyUT5aGD9B;bB^0CHC8xb0M
zj6j7V|I!8qrHy9q2T&mg!C_Kyq&EVMB)T@}rXM5jMMkl|fIcvSXZS{T=<f&s^at^l
zbPVh;{_kkqI0`!yu(yOxBihLvu*=7bOZwmk2OBqX5E{9wth@mWU5Y}E1*L%(EF`xC
zf7DHZqoj3YNqLg(E{_P1z_hN_q09xqVHA*~5A?ds6@Z~w^yX&NP>ChB)&)l9ZcP0l
zU(c}M4m~07^_a&4@Q#DYGd`|`+np{KJXnfa#cq8RZlNY24kT@f)(dFr<Ksg23?n*{
zM}AIn<WSTi>xb~i5uE_YCTo3GDg1zER`q;qO$0Dki)E-A?=sqMy^ddFxwZN{PM6l)
zkI-Pd^^E@c8$aMW4(#%+TM-~>zV$xyO}+|ht%#7?2wha-F_tGI^AMEgq*l#G>y@D%
z3aJF|kqh}_eR&M<rxQQQ#OJ;q!7r)>e7n^KjHX+pmIm1~ATz#hn#0OE#DdG3fDNX<
z3RCO04ep}SPRvpB`Y}#qjbR7f`q2nh8mvG@?XGLH<9p==Trl!hA29%r*u0YE$vx{P
zy{%E(IT*MIAUfBh&X*r-T$7h_?iZ{31#WYb9dJ}Lqb^iLth@jZ69@tsbso6Izok3N
zq<-U91C^wvqm_xT7KuXRUB8m$tMXXB!s=DC@*mkJ-N1O<*7~p1<F<(#I8p0fp^1GF
z*BZPTiDoV3PE;caw$|HI&%|V0GBTH9vy*cfcRZD1`v@~6ll4V@PH6ic^p50qJuE9(
zw_-&m;mIDjMjw-qs@zfHrr>0)wNGbEhJVJ%>DM)bj2Gyx`8kU^fq{L!+_$fuGhx*=
zEc6)-;}v$QC19xHoIl9isdeTvU}z(t3ISK{Fy4I)p0omuwT10)uFHzm&If)=JA&IY
zx&s1P$sN7QvU-EEX)#cCD6TtN5rYWl3^12_AbP^UaJT56zYm9c$6|Zyx$W*)WgCLS
z|K(+s&1UboxoM8k(Aoxt2|w-eBXs%J4tV7s+TU*Gt5Hqxl2m1$NXqXxSKz!!!rGTo
z@;gqU(}3xxh)U2=3+~iWi}E|JVEu|EWFzBq#Ko;i8b0*pf#b$CiOX&>XvmAnBSs8&
z-7D+gSPEL(1}LR9XMM-wfm@<-QeJJElh(G4F)hbdCNI8q{nWkjt%p@e-IX@pXp;H|
znwrpfM=I{Uc{b<StS9+Nka{+|V;syDm-RM2EN~4gU!^sFBfBh##%gY*c4<$vjW#l}
zs7?B&u=v(zaqH%!!Bet2u2^M3#kCS$APZ`yE(KW~=fY<?<k|-Au?<`gY4_WVpZC~u
zkCe07>$E^?mRir|zkhf#NU?l4L{`{iUx<AX_e1k8ktut5rH=I~dPhuEFWhcow;o}L
zmmMdBxRy8F@r>iGwrFEhCnu>ga^h*gWGn$2%kE0MMgwH*Fs7{!DKIj2(aR>nQA^)3
z-s8!KSbLXH`OYRUN2u}zxH<;`in}}J)$&;n_LeNY-$3r@$g=L959>gu2-H$r@D5-G
zQo$UZ!Yjb>J>ntwKrQaY%}G7wv!pBj*7S6oeLHSqI&4cnT9VKMJL{lBetyD$SnMOL
zlv2ZT!7G*WeCbz|v_ah*&1cG8aC4CfMJlXgROvxkg!icr)(ZZ_GxB3EvE`n5%9eYj
zoUP0z+xD9&_xNzAVsg;wbnhpi{Iuu?*EPVR`6Jwdq26TqN{{~J8$_j4T9-EH6=*#@
zrUsgdn_M8_)`S>~FFmk_3wFJpYs1?PwFnJZC8-aiYgh(2dG&?ce$LJac#}WH`+EB~
zH$BR1t2q1FIMmcxW21aZFK(Ge8<EvJ(q_MEYxq~{LviW&rcjivTsPoXvt{*=tE$bf
zLk@yFwvu!-&53IpHM(4!J<68VEz$+9onoZeXN|=j8}SjiG6pM}HV3Bcxyl(1cz8Ts
z!i;L2AS%BU3x@L5q4<c9_$=VZV=)-sJ2DEFxOM%emUM!B^2@8csVkI*w#n2sWsFEp
zKZRRBI>k^xTw4ouLqUy&<dLFLSiF6`jha!75K)0Las7u#kH@FCv#?upWR!2h+-6AM
z5Q$`WKq2=@wFwk^*vgEB9rHZ?PK_j~S?`3GCWTC~WxW$pnuJcWSsv^KvGyIYJ#3EN
zp}DGD&-9#fvAHM9cDGkBGOD49>uBHJG^dNByn}vBzsah6hdsUmmwU>`wa!T`>FlT+
z7n^?Vj&@lc-oLR96c{h{e?K|Kn7MH^m#t8894+2^F5Kcu6us@a9gJlM|Bt!1fseAf
z694B(21q3O1Wh%ySi_pOjM$bKS~E&(9`X!%MkYcF7GJP+w=UJnDv}vsYb}YBK(3EZ
zo37Zp-EQ0cwZGkVyW84o1J<`pkW9e0KokL84X8LnKq4vxMDqKd`%IF7V)x~<pa192
zM>EgMeeON?+;h%7_uO;NO=U}Gn;n&(G&?qN8$3fK!jo3&_3~7<ocr-CTF$Ui{Y6zn
z#&Bv^sa?FQxW`so?BdSDX_35U<o)UbrrcR7csG+Hp!CJBZQT_Ar{s}f;*Hvt{qg=k
z)6j{Hl+sRWSGjKEVJ71MtyCA})tvZOnUe*j;5|~cDJ!uKBlv^mKA5liG7llLlJD<}
z-{RGsh2*Y?d9hZ6&lm3bQU${1bCG9Ia^!p0VAm|Dy6ASN+3|8JQ<~aa4laTd^n<c<
z<kDUHg8*~ltm?AWf}ZndRj*wwT8;cLEvYXZi-tEP9wJXa`@N$Zz3P42y*B6;+U}Q&
zVqRT^U431dT|K`Xk6vMdLHAPk%O%zGCkr2B7(j8e8YgFN4OQP!s<t`Cc6rm!eD}jg
zKNZM64k{M6v;3><F*{x|JGR!E9fz#ubO0P#%^L!EYq(|Y?u-YjXSP}1cV$>+RnJ@>
zO?Fn;u+;NB_B<)Yg<EpJ<^7}nvf6pKTJC-#A8<9>opHarsIu3po;PGwJ!@4jJ?6Pm
zl84(P>YeJcHtwZt8O_|SD=ce+S6&vv_10EO+3FeX-uHE(8SNHV(&~(M0DjR{FGbW2
zx1?Piw5p3Nh8}!d%_;e+xl4arLMLCWzNcL<Y^$xQy`^+k?m;yx=RPYnQ0h)@S4XYt
ztAmz$mI~C{5pd#vZ+7fgN2({c^Qqaft@_8h9(7Q#MOEO3E|o})yzy(?3X7G4JGxxN
z7`IvKh}rRht=<MYAS|t3`%8hvQqQOzw6lrFP(Yh}9RUMC9#IF8AiZYCbF->v@cr}E
z53Tn<dDiTBR=vQ>=Pk7(wZGJISC-DIe&~MPbZTEYVC`3LTR7vXcg&7wtki*W3U7zG
zq?=s!02~P5O;&DSmX7lORske-8T4VcX2jzFk(Cj-HE4EhrU><JGdtpyxMlT^i+XlI
zi`yQE>Fz5l0z%+5X2*=_FgCthWu-7T9M>(+r^ld{A>nqbn962MP3<Y=%2sdL?vl#q
z<twXd$n2O&{@q2DJrOlNwWqxJ_$;1GO}$y<UzMlcEG<4>-B@O+<w5G}mCvNyvrx)*
zX*IR0sQ7I@no&yq#cx;7DM!O7vehn|6IovNOOzLHrbI~ve}eKss=u^&b8&BV-DFG6
zF3Ho($L2bxb!+?<@wAAl=aB{P$@wcM==+gC6^hkPbT&5<tf~t--W^EKjiqj6sH(2W
zjU210E6IEwZxpvsMF!ovpo+YUL!^ofxpgHfax9wMXCxl>+upFaT?_fV`6!?NzYSZ%
z&i#&BP&o)-X3GQ6O3XVi-6PVc35I4Sic^Yl>vyj##nnCF1)qV|P>`1PT*Zp_J2<_?
zSC@L0SPZ|@;~egl6_j0lhFv|IWzskG_%1fT^PFQ0$~VK+-@#1xoy{UTwpV|pB>M!F
z;U{2r*g3he3E~-HI4!&_x9na@T5d2|J-)6w=vvjmM=TP!3)@EA60V;RBDbnil=%nR
zl>**l!rxH9(|+;werdjRXSx7kRdrfktNyNfX3|SaX^Sh%TP-F1%e&;gjV^(>DNBNd
z=g0Zw$|!f2U#=`^<N23-s{-CnA!CFo1=QIP?cQ=<a#%j=1Bna2S=H#>AW<EGXJ8Y3
z@3VT3<xX}H4_}2ayQ#@mofb0RW|(^Xs?3gkY6#})w5lh&wgOwvSk*uF>)QhAsM1H+
zWL-0Fs2Og1&g?j5t3k^xajUN^ud6P(H=;I+e6y<W`L&h>@No|Bv|)Cng^TN|%UlEl
zgY|S>^*#4$sZhQ45h;&Mk<aU@*CzF2^|YmEWTS<OklI&jAyvSaKrceW>^M$+uZytI
zz^C??^Lx<3Fz7$pYD0y+f@_f|<<4bs_^|a25gp#R&;J2}lu1R110gUI;V`+JNeV%P
zWO_^F0tHHnxPbjrZ_-{FYQX!5iBgdYJTF0-?<wMFIji^;iwWHQYB1tUl&QXSN!bkW
z)4D2Ox-gHG)QH?Dr9#w-;-ex%tl}Q`$|8{@FA8BuLz;LQ{@{ev?ou8@ti>rR+wMOT
zNtMD|S>MI*n9Bf_UEC9KO&CQutlzHcQRA)ZufguKOYN$6)K?+mxkYwWO3$%K9;<p`
zN!3v&xukN?P&8mpnt=TpIglr2;G@ymJ-M&q1Z}w-#S__6i~fOAHPXk|Pm+;<kq9Ou
zLFW9ua-b+Dbjyk|(?<>&_`MFUJ;09hq`E;ZS)LPFP(J1-iZS%biV+YtWE$>gv6U~+
zu38WI1?E2jcd;hiSMJV5EHA8Z`d)Lw8ys`ib|<{E@!I6>2~id^-i(VK<CR#rdzphq
zj4HlB6kgyJwHqd5UBux;2~=Zw5jyC2!E>F%FF8h!Gi5sh23v%a+&x5cJe-4{EEj!8
ze(_u$^{>XEn{}4Eicansa@^%ZD7pFT8y+8%6@_u!`_{40a}Mj`uVi~f;El=f|IVdX
zW}+X5u-pv~7oJW%Yn64(2|pWO;cIqSUIT$8&6qBR3zu)zcT1ah^X#XI9hj0!m;Ndc
z=no{Gu~et(O7@?h+Iy~*?C-aVdv(plbk_>?+NukZJ-2!H@bLM8=DmCuXx`mV5L|ID
z+Nm_#?l+rIjvCyM*8#u3L%IH@o$z2{YW8P*kdyyj*#zJ>HcQpRh0PM!vsTTc2i@^I
zU9q1BQJ=<o(5vr8dw|HI3y1kjAD%+q;K07?d}PA8$=&^SahL4{CvaCxmxe6k&vaum
zg>~cYe&g86=m+$!;Wv&u;lqtLpxEP19y&TOWo)b%z(yP>oua0d69(cW4epUA7xE<7
zw6bs@@v3Vb^JbowI#3WAk}(PhvIYcMy5zELIX#|Rj2J_t0Ea&O_OAZ0_AaCL6Wg0Q
z)}9wU4IleL>)5GU+fEyPJ0t4_+B+`vm^@yv{L0YLm}g&d+)@boFJUG5+k%0MbK_)o
zScS=hMN_((j~=E6D=v(M(~aj*Y+Q1XVM+z@mJd$poq2f0>9KHXS+Ap>lkT+hYp$z5
zZmv7W@#YpV$`b;CRR6@{Udt;h-m*7DNWkLL14F636Bnxqi{<@d#$j-=T6mm#%)1)F
z*}(7f@csV<ybFPMg24L;4esuV#a)&cEZ&ll2!=lkZd|~9@I?9_Ozy>iR&q&dZ{ff+
zz39q&Z+4j2f9Bv0pDs;y6(o0kye~sY!mh%^>Cy0!M1PF&68QnOcy`l1$4HCQ;}|~N
z6^1*3kH_`B)t9l+Edqf<pXleW)hvHM4tpl1sX?Lb&f(@gFv@WV<9tI)jLU}+0sR5}
zpm?yaU)3K=rVMHPmjlhd{DwaMe*r(@;qpKp{Dw%p{|fvHQGGnPV!{ZYdGSk*Mb#!Z
zj3_dbzhd67y;;HeE(%3gL~Uq3nBkul+Hk1rc>H>iKZm-Hn=NmE%fnrPz;T?&4ZhI=
z)iBqr<2ka*yzA>cbc^%}C|X1rxe}{i(<Nx?UM}2HzkVuD{G7@QvHPKa%o@h1x?b0F
z9`&drTe8XF;EIcq!-erriPH1!ONWzbqxnsVT#SFj{njwc-ax=;hT4V=bM?P)liU<k
z&kfv{*8+~+KKSu3`k==z9RVuJcl3YRmMZL;;p_4YhFcEkAc0YPj0RFx?EIfSlh1PU
z0D&f!`C9$NmWApTJCrguhnOKdgIby!GEoE!1nR)OqxD(d<igah!qBT~s4v5s|Ch%T
zrP_Gi*Y7#QRYyWQ)N{>jE)64oW)(Ic&^3H(SRa$6!W+n1D}dBfAV;5SC<<>d#OCTU
zaK~!ll4H5Sm4QNrhPn`F`FI%{R`_9bSdVf&GOV3k>*2WO!-iGPnbs8aV=nS4|Bzul
z>whw=_fvIlSV!@f*Hj##p~*A;ncVnZI5NI6ETiKqhRFcq`VAhUuRwGo<M~mZoH(9>
zSS_LqJ&ty6V$K`NU;22rjUI;4NL!d8`u1AMF2icxE##S)Wa;#VR^M*RyJEQNIU{|l
z@%$<c<p%RwE=T+4xDz(y>vyPW)9Q=H?1#zWg7}=|aU;2HSRLH5xA>syWx6ZwlAoae
zQ^Zs*`c7c^Y3t=jxad69+q@YCBXBwocoH=0yR=-TL?AzgO6s5gpVqH>w`6==FE>Zq
zn4&>ZT{KY`kk<T$W=lhXTs!UV+#>m4*mmb$ZM*fAYV+Zprrqn-Po7p^&VERJm%Feu
zwAl)8X)IIQY*k-ohn_`J)pr{`s=j1{9qwB8F+0>HZ@gtj-Wz{hst&boWrb90-q$Tf
z{^Y%r+*`pGrMMivE~a7};FrCN-@?*YSaRPs;H37-R^vX5n1-eURCK*A_agw3-Fz%w
zrAMD!Y%bo&o@Ec-af}Xbsp8>g9%YlB{ReaLGv=h(sP-@6j){Asc3?mHlsW0jezv2R
z{cGNMUOvuT^I73CCftwQI<sOdDoeM|%JR^}6-Dcrr~-I;s1-$r>VvhMN5uX5@%)jh
zkUzCe$NSAS!q4l&{HZ;(N2M0C$%jU$-mde4ouSnFXTZC4sDE)PbDCGy)K-6{ET}`h
zESq|b-sDiwT=UO-+BUb;ZmXX(@K3tl?)vcoy~L<(TM=ZtGk(R&CA4M4zrx>w#LA{s
z<ND*v^xm<iCxLf8>-zv}!QvGq8+`anw9|)%zocmuOGzahDs-XCv)YyNbZ$d;{kYD7
z2gc_2+DliATXrTUB3|hE@BDyTQ8Mt|^|JSe{Uv8_QSV8#AGRLWK#uJeq-Ra$eIUZl
zTFXCjF~_t2CV(jnB+s1C^hD7ocxJYI4Fu{pVwHcQpJ#rN8HMT9D=WF>-(vM>;hkKk
zSGVMzIO)|7<Sx^z_l-VmDeM`2`Z`xy8mC(dE2J&{nUh)yr*bX7HT<SmJGnQGJ7=Ez
zU<+leN1=p(>_$|ujv@tcvQ6%%C2!!lgFcvyjpM?d#Ss;=#QlM?Y}EL@<Em8Pk1@qq
z?t{{S<ndy&WdXf(yhjV=0iPD(T;!x#Wa`hksF8~XHz}Qx>e#tiQpuJHS22~1RBe@g
zm<qjEjHoxF>gibMgP1YY5K1MF7nv;|08vBhrbKb1b-&pX!=U4R<!JIK({d;E#=<X{
zE#IJs*)culEj6MrR%QZL2TLUdAY5~X*o1z8{!xk9dQ84i{dxr&QTqr0lSWz#sa6wN
zgYjZaeT&s4=RmV9oPHTP5@vVIpQmfhze`U!9=-X4Cc&2RYSR<np@jemmuO#a)xQE|
zI_~$Rr!nIR84b0jlD~rS^5jsV*?K2Ms}5y9Ne!C*1*jH6q6kIHG{7rOk9=F#*>;_V
z81lM1$hf)p3U$Q7*xj~8&H62|a2G$lQR7}|D}*th>#fny7E3)SB@e&y(L>2S6Sxy3
zWFKX>!slbztZ$JJ(wG{Q(QDObLdkl(LA^oe#|YWjo^Fzlg%JcLP3!&MwoD32@77E2
z+y|twbd&T^{yA>b$SAXFhe<$dp!Ja1GLdieKooExJ6~84Yz95Va*nX>`tHZ2q+?(%
z$-OIg44*2c@EBC;im8ser*JwAW^dKl&QYb=(NZX=o5^U)?$yj!%{8t3Y6PDRGU;&k
zS&5m`c-OmcPHNW#$Jo)`EIl(C#I<4(CEf2gagRN<^$ehz<CWd$q;^wqr+c?Q3hYon
z3;H)X#@!nI&qhO=)bHgTeQiBL73sSKb@DG;tF7mPV4nq`KJe_*p5RrQZOLK?iZ&0S
zg9psj<uW{2sY|1&*C#}cm!q5#D(ytwhbjf@R=TB9Fg}jzg`vu0#&I7*$+uvD0|tnv
z3N36jF{_8PWO!U2W`8QQFd8p^A}?U%0yYA+<ui^mX?aypta-s~`4ZRdemgQIVhF3z
z^33(CmvIp=kx3)a0a*60;GnVglE<OH31EngM9`}7@8cVi_KCaKC+5&L^*b2{v*lYr
z?EX#@auj6h@dIv9sM#2ZVPl~uwpd|Zq@4!K*dFuA(RSPPxP?-&@Fp{PC$2QPKDB-t
z;9`ZEmPcs}Yzh3@k1vLF7L<cgU>+0mlo7d$b;=nrp5eg5eB=IJ!}(8)r-svYoA@qL
z^|}mHMe8QZyzj~EKcGJ4^ulzrlxNW%XsV&BoJ2UB{FQXu@cX9TnCpG}QX_k#uCNv=
zmhr}NT9f?)wY1-Ss1^n#M*p>aV(<ITxR?I=lY#CvMF3|w=`}y2Ci%BGYTnwzef!A0
zxg^!Rhtoy%bTLnQxaKDQif0anJhf)2^v<ngXMD{KTxLIqtA?zTN1*akT09E~K0oCI
zf@b4Ckq0?JplLOGK0VRJvLE3}V_g%bo>~fhbZ2h^56mOkzmc)ZNhd9zv)9q2mbJ??
zU-`0@3CkC>F=LGkm%B~|d`#*tqZ*{{1N`J*@gcaE2U?rRPSis}|NPzjQfxLi#&WJk
z8t2-B0s9j%I65r9*g>HbW$Sw1F#9?7{BhQijeVRC_`akv=WZZ(Zb@a;A%EMym5tT4
z-H!34a&>z}l*6Fto)~1yv|Cf69GaRsroRc!sH|(??=!!<i_@{Jui&d<UDe<kqLA3`
z*J|8_Gp%O&F&tR&F<hEiEGMTyt7gae)NV}XuVFpvHj2B<j=2SoPzufX8?|b?d)w79
zG+}HKShlwx-jd2pw5RM!?F!o7lG6jx=KZoyQg5!C@lDJ8ZFjiKOzws>qRm}RS|Y5f
z4aB2VNpxe!`7!sl^1jz>wc~J~J>|8S`;Do6uSLCB<#0pm>t@Tf$WXQlZah7p{qpS4
z4y$jU<&{jvlYl+92CwXj<Ok!;HD^+>b|@G)6Fy=&9_k5gW(7{OE37Z*{^90C?{@0m
zok8!|L)4wytd3Y}gE4HG>q@R*UvnZbKNa5G_(#>_SFrpEZNT<x!GK0BYpF#(j;gA>
zGzslkCRoqr@Oh5LXXC3U<5KqXz#7fX{3eJqe>)UDY9_@^GV1+n07}xS4e+zp286&0
zA8wo{bECrMgFh&?x$gRa8lny$-XK_ho$fl`k_JS^e(O=Oz56&hD<>~<c(KE8HhwW5
zDH|zicAN?+=DJuzAP*^zsUE&w)@3D+7n*CbFq*Bhc4(Jz<O!LBajUO?PPdubHQu|q
zcHkpgj>%xqc5)b(XW<yX?J`i=*l_B09V6?vDq}J_9s`g0@*<QDb@|va*L(xS$e7$U
zmy4>G@`ht^d(8dXRCg}h3AZ8jUUEWDMZ-^-cgcKib}Ty2M~?M~5UT)M%O>K$$e^2R
zCeXP&K!0%(pvFtK`VT1aGK-Y!|G}o$L}S><DrB?|^3&nX%YK{dxTOXLehFP#q4z^a
zN9bdO-yZn@;dm0iQOUQz$^PH=F#>r2^yVny+#IJikA68y6LsdgmTv|Qi3ZE|m!@S+
z85h&XM`VPupOcS9{M+2Q6%L*;*}vBlM8GNhT1A$#Do5rQAFR>Jh2Tn0Ah<`UQ3$To
zdQ7Ozr#YSHK#%(=`}>r%b*lbO&+G3p`;^~)@58=z^1m(8-`eU`VJL8+J8nHL(^K|e
zr~x8s;TqK!I<g*<rHb{aP=V9DF#vh0q3n}VtX<v@{4r1eI8ckd!d(3}64SQ>p1xvv
z@=XI2CZ8+ld$Yk?`>g;`CH_iD2Z0QfG48hUh8m)f*|Lr=BkE<Ju6)jR^eBEYPa+*9
zv60#!0^(b_F?_$?n_L+_x~wC_4u@_0$H4EszkPpkdww;BuI2<D-jY#ULa9{te43t;
zf&~v4iKib9(%tN}h(z)kxhq&oEi8BIYcV$9-S|b>rDOMPy6*_5%0{LkE>PQwn6ly%
z(w1lqOy;*wWg@D<`%I>ta@M<!v5?yp<>)d^l%Pm`k@&Br=$w<vR^T_pGFqTMzWgkQ
zW!V`{vcA-yxIZ3#>njK!?x+u@G8~Hb6~i)m?6&c$KIo{0OqmNS;x{|VRi%OWwe)JB
zGS^a`(LL|dN#0g!#H*x>7%Yvp(;Ow!Zhb}KjW+3xnpv3{g4`W<W~KNpAz1k!@tp1s
z<0d+QUuvr^C3h6f-a!wvywI*3@8;aPnx4ZDyRXQ0KRa-SFQ;TCU;<jIwyT}CI$*qn
zA9rf+gs4|yV~#p7(Og%By3E#I#xQ?-{P0d}L-v%t)|8<s=}+uJtxI;EFUo!@W;7Iq
z2JKKfH8jprAK*-(eDiW(#g93<(n`HilxYV-zrE${w!)r}e6nc75o83vYA~vXSOcof
zO-~z72*u-}rn=~99@6qIjYAaQlFAlM88mu~A>0uVZndh{*qX{r0P@4z^&U(W{^`L;
zVaZ);u&VcP@07Gy-vWW<oi_U;`SwCwUsR7yucf_TRG%nJ?iuE~OE3f-)UvKS`Tm6E
zUrfC<E|hYNNKptUfoB%0bF{NBtD9x8CqNJ<X{(I?fjXFc-!#|Ax+j`^vNSnR^n|!1
zgbu6YRAUfg2N`QlF;_oDm)R~&?G840!37H2GcHT(oC3sm0lQog^_nHB2Q$tV>oC4x
zJMAgkttnflY;N8q<6(4p*7-J}1BG`M*`Xdggb(wbMGOiCSDL9U@J*ZM>T24t$WK#1
z19(Ji*=KuYp9frYqRFKZwaa3@mq|N<-^AgUF<jVFc3V?6GM75WbCwq!p3>vDDD@k?
z-j~j|Lp$wICUumib}p_{Wu>_uDcFoz=ytU;>dk=DlDpBW){RePC#pUIoesZ5Gd(zQ
zNIy1B+0wjQ(^c2`_<wkl4Q!P$<3&646ctNTw$Zg%o$V_y%O|Ppg^H%;s0b<%eUMZ$
zpFlXC{7&<`s8s5J4cAP@XN5Tz^^^ZgGVj0$92o^~@Cug))_=U>|B~$GnwNb37crp@
z_@6D{vqy8E`K5W1mGjug<nc&*BhB1HdGX`$YnEfkeLjQ^tk6cEo){-|YD?x$jL?xB
zt4#Ig57P8?QSTw`S)?;xWhcvYBkLCF6u@dm`&6!xl58V&=y{I!`c(<92L62vzWEHr
zLTCWC+rp~9YO63)0o&lIg2UTkrMa4Y>?$#jyOUSj#s(xs-<APOy<{a{Gax~$`8C<)
zw5xWcvcbaOcfC15`HmY)J(YZW)hu`NPmB$gn*4oUTFU-DTfJQcPV#6`;@;~vpylVh
z%wpcpYuVg}-%6A9F_wpy56@@8yT@@aQ+2h&^DAPZeq6~5R0L1LCvmm-w%TaBzxZ_x
zAKBrrJBcN3W9@oz^5qM(t@=R*xMX;KIfIEX+pTvkj4mtuZhWSD&#z}nTX>}(-Xap(
z{xAm$F=P|Y5--NJ=Cs<HOXF|hooI!ggzDh$ej&UQ<;RHss`$~0tWB?Z9{LBWfcr!*
zf93G;-}3v&IR4<xvNZFzEIpG0Mgn&c?j~~Qwhl?j&cwy;A4I9bmU&uQKa*L_^~A{M
zw*DJ-NhYZCDEGP1FD@MusuJ0-!M)F+Z5(TM_!Z0@H=#)kG8M=o|A}Zt+CrUf9f9<u
zI)uL52K$1<jq0F#{Zd>2aL-{mi!;!p1<oY25hx{oXJACwLCX;GO7;fSf;$7D4L-A)
ztM8Yw@qSm%7wCQKMFgTmCIX=$^S7_6qonB*-d>OhjC>&aGTv4Fl@$SX{Zct>HnCJ(
z86EGj_NgK!cg473J#0M=E^^ji6|pm)N4f*)z(sj8#i=jry&EeH3%gR>VmJ{{_0pL$
zbXQVpb1Lh1Wiv8oq$4Yyl7T|d=x;NB#1Tm<NIYRZdM;25oO!~0g1ck<FSZOQ{C^@V
z{f@2Jo2wx69sMm1k*`>fi_+t3WdP!M4@FA<!pH2N1!no#qdiEZK~nY?n&UNP0b*t{
zEeyOo#_uC72YJqzX8#chq~(X-rOZB*QF*?A=j(-7vf|=4_I*?xB^+~IEfLC9o8~jm
z{pd`<bi5}7TI8?V%=D>xw(Mo@#d8M9(&ycTC=p>1C3b4vMYs79MeVHGet0KR#rNrO
zgR86druHI0eo*I?%|WAxsy^%R4s%`ELaTX~FJU&17PwlTbB8*TJh*B$lF2fds(yTT
z??(aw>abMH-Gf}>S%SuM1Pl1r5vI6VvEQK=uQ@+7tpLv_r<lymH^yAwND)(OE9Hzw
zI@{pgC4Fu1{!ja-7@zcA8HP#z4b=GS2XmcGJn=T$I2a`s8TZOeP^FWDt8kQDZ#-oc
zmNco!52=#1(d7HJW=k7i5`uisx$V=b4VPfTsb~nav1PwoYw4Q{tiC;cyV0|Zoekba
zErbF5NZabFUK&x7@<<t9Yc;rqETb}8ud^e#Ju*AbxZOJZs>Qyk7R;=_gI3|>CbUr$
zM>M7#*$CKJUqQnSXgKK&P5WgYy0tfY_@!8=ufe<9A+$W|{ZV*}y}hln?sp(=%e`xm
zkD}h~J%8jE*N2-7Ys>zKdJ8Ki%(}Q;b~Zhyl+kBmshq2}9NrFSddLs&@W;`rdRk91
zXf#-3{<etsvsp;28hf9{BQsd%2G`dW27e~<Hnp!XLi)U*m3-YVi%McOzb@Ugs-6>H
z?*l<59Ez`}M!aB7tT9screDiADJU6Pr6i43egj}IAS|pEVEh_r@M)&4dUxi}EF*2J
zncJ+wV4JeH$-HGm!`sZ(bHJXJ{9uB)x)mgFRb;kYPxr0l{t4`3p1$sLQ!r%q*lO>V
zy_nX6F=O)yPKSBpCoaqEsh1Lb$rkAG&E}+9B5u19Z(4^o8u5^oeB-#~MGCCs#t8^q
z#t4ly!;p0LV+<`JhskkvP`8zITdvh}rB^ve8|Ug&%N!X}9zHGCE&g?{T(|kx&&%~a
zT(1|o^P%c>9;BzfWb^Z$0wHF=ISm9A0b=mG8bIA8%iI=hp@Rj^7n*1&@mv(2I}z*2
z15MFz)@=P1;>BSDK=^IUZS#{vj|xlX8J{(|T8}a0kmRkM*>{mpnLBSi$)D44$L*Ld
zQMAiD)Ah{iBAb3V{V(L3WxeM+-uFr?d6ZuBOL@gVmRn05cg_7=5>_-%2Rx}Y!ln{{
z5KOO;`B(n&cBQoIcx&2qb;L-Ulh$alH)%};kF-26Cj}lC?_;`LA$pGG$1yxC&tz<I
zZqQdvH-H3lQqxl58nx{BVq48Rn?F~4hCg4PEdl>J1cEvChozsCUVN`~s^4=#F88yV
zXiJ(IA(=t;=9?s}_BDZk57&su;(M7Z0Ucryn3>G;hVq0udJ}{0x=uQ4yK5fhXT7+W
z&+<yfJAM5q?&9BiB@5=8@J4gsvG`x;Zpr8_R?hKgI2Hfw$*Pp!Uo2QYPJ;Aq-ZB1M
zEyWYNqyi1;g&IV*$5Kv+J%0dA?kbH>GAE%ac9p^rao<koKcLUEG@A_OD)?dhMI#k#
zaYArXu7Xm(f4Tz99JQeQM4XKR@R^bCPXK`La{%<lbKlE-u6^(|+CD4*j_JUEuYD(7
z&zCYxYwkzsW3=ucGV<a<)AF(w6xXI}`}HNlVXynWC%M)e2I=}3mjMjjZ?i^M^*3s7
zDAm=s8@K<yOsGpOydlp&i}VnR_|a_Tnlm*iIO=Uibh<XPga#8>>sM8<4#16OxL@l9
zEPrKb;IcLFZ7lWSUWr01cg)$nPT>knDY$7as4U7nf2|}r<w`Gvsyb!QyF6;l<Ks!P
zLL0HS%vXm*!-wVC%jvHB<HHZ=--iybq^m+<=jrGY@u&`Ok2~5=L6mJt_iR%_9noRf
zPWY!k<HKdIJMI(rOAQi|g7G6WM*|{ekkH>t3CH+*{hlf$Lv)_M14?Ye&HHO1%&V&Q
z<NNRw^ReUI7QE71@>yj4zNzLqeAI}xlqo&Vda=uPXEvj5*zV--Gug66TZ{@~lVrQx
zTql}q<=JjYvu*4EkkXvh$5sa&wZm4&Es{z`y_pMeW6!KPh?0eY!11mE**nB{6T6;3
zl3Bv5Sa^RTEpGQk(#Y91K_cbu_~cNjx%y3pI+-y6BIey{Z^@YJwnlT2CU)WEd+`Re
zz1me6`4$N4Hh8fY80CC^x791q#h5;qQ#@3Uxh`0Lc&D$7>D6B0jAZhNXr`dSg0!N^
zy#>)^R%4?J1;;J9*C6mJT0}uh-CklPhgKzi#-{1y<S^Q_hTk3Uc;9WIU*6S&Uj1?B
z=1%D(vDpQV_iy8$ERu19fOe7sI`el|LqT4fE)dR=KVWoSuNN{oe2zG&6uE1j1{csv
z!mV>$_epNj$$k8-<$uTfwP<aAsuJ&B5rB^ONc&Pjp3%3*QCXE-`w(hZQl4erWDfGH
zkd@EqSBMn8l5*GSZ?4ZiF1oO$!_0&4F>jF<dEi~L7yK;>f&X0m_a~AYK3n(Wj|l1|
zb~S%JAg^xvCwbKZoYMcp*{k#Jp~HiZH^~dQgaC=jxnux~DvPRKa@3odfd@ZAuN~GC
zrX9rO3CoRbu8sFOCA0V&Op6*$KWT2$s%vrM=%re>ejY@k-AnwX^1@mynOCRl=P@ws
zv;OeMQfTg?5%_$o){0ont-k^DX04@CZS_~jNH3FmtHNSOA493RdOXBN&&}2k3b<f~
zKwuece&O_wxupIkHFpt_LR{T|zL0X<ud(4_Qe_2UWKn!1LffL@!5D55QKOfAa<lax
z1sGLdOIuOIz!|{DlbkxRA-QTnLE@e6`fH8$rd8Jj;xlOy=u!ezw&DvuOtRmG0oQCT
z&Vxw<GYC{ow_QU-N&O9p9;zNk)dN5G<%?Ga>lHZRSrzf`yWhKqH}oZFZc+{|_XXLf
za_gm-cZD(VmBsDe15Lxjc$%2Y7dM1^%oY-NWBu!>A|8;nM?vvmZQJd`Brs^+BhHOx
z%SF5&{l;8<p1_8h5T$Gs_q~<{JTN;hme0MLSuyRC8mdMsNPLe>-_Ep4kiD$KKZ~sz
z?d5BZ;H>3oK#O5Rj)jN<c%MChAzJhtaQu!l?Q1Ksqq3T1+IGS_8f%=df0O=a9dFUJ
zAhNWHqRTFDf7-^c+SvSzSS*YkTe9ID56h)Fi!8IVHbKvxbB@};7VDxE=RFLRQyr_G
z!#k$zP#egK!6Faow~1xT6)et?9DftQ%xC`g88r|QM<9v875i%FY0p_0GwN@k7F$u-
z{&DUsLtsmG2SX&^=^AHy7I_r0;a%yKq@|xRl`^{77slw`5Vk7JmRYDyMCS(0XDzk#
zSc5Vk+iVODm3hmZyFeNgE2o4w%X-HjUkvR7e=#QiApYxU&M<n~B)j`<HyPda*A2&S
z!i-;&*nQpgP>1YENtSuB?r->`SS=vu5R27u#$F)23PSD5K0jiI`>^^4PpIGV>mT@u
zI3p}9r%!G5*ZB?r*NBW6^<R;>cx1TEk>M5}GPOBtGT^Wk-DWpp?$x=99CsmXldEi{
z2FsSEET8PwoHy;9nEDj^AWO495-aK4d1{>|bGRFJ%ihmJ!Ud7{`vlj*^gjAOC2zmQ
z+kAN@?(riLNugeECB*c0d=aw87jJo*=BY17qKt5AJ>I+<!&YJ9qh^olB2K19`{?^o
zNe<6+ToU<2BtU2kKeV3Q%g&30M1_tLXA{5v)GeL*X|DbCy8SnG`{lHiCJe^V0XI4*
zYOHx?t3QcP0tf0y2)CZ&-aPt$_`lzOvnSPAFb*0G{0eG2o;cg+4fPP9Fl>BU9;SK<
z{u}-O>ZyBr>ZgAHPtm^dUvB?6xi3iKBA!pHQ}Bwo(91xW$p^U$4RPSYCr1h5(@2xR
zubMEv63r`x#TFbsXeQTigQk%rdEUBCaqM3aKi6D0EB`@aS*~>B_3mlEEQ&w)tEMxg
zp6z^UyR(9b^@!(uK&;}g3Y$zOJd?Ia!!)Sb#7Yg78Cz2QEM2;aj3cL$yD7lVotiad
znJm?35i@qsyh~<s(k|ug_jLuc*YPl?e`xC#)<JArWrWBapAZOOBPo?63nJK>`vZe!
z?uJb%N);z}nerI1K^X$d&Y}IFZBV>3)o)VbbhBr%nuUVcKWG=H+OGH@JD?|-Cb}ik
z^3z3C{H8J=OZA_LT?|vtc{Wo`@-KmkUNgrMz|&R4%xwOm2cUF^=}*097o9`LhO+-K
zRv#tDXWjh!J^AC;Lz83UCpI2Eep5%s&ud#nvxigu2>wQjkBp!Qk^gK2m*z@0{*{cM
z?VjcjVe1Qg8&N%8+t9O^Eu^oz&P22&`_Buf8ZUFN2!gkfj+&c7DX&>0)cnP!vQNnP
zsw<9J1nHkcZ}l)r9F+`XJM9It*K;?bj|)wuc8yDBCP{*>j}yFvlNc00qbBGd9iR}g
z(kG55?N9WhqMH2CPVFk@S((&R>c>m<ui{N{3TU$8c*1-M=#V9o*#{EP-P|vP85cvz
z_^f0FYL`=P%DBbXr$mz^Jz!5#cd8iTJeK_##m3|vYfKX2F6}~rYyxL!dAG4c-Ceub
zthpRZ(9s?<bY&+Guk6i#!p&`0_UAw0MyGln`-=7Sw!{Mver^7GVdIfo(@*Zc^XkrA
zdt6^mgKsr$eD7$_#t&9q*(6V{{MpFu&-88Q$Ze;-?H{?tdw*Nv(TzhZM)}KHs19Mj
z<J6hpa_cJbkt2DFF@&1W-ihPhUki7|+@F>5Bf2hnW4y99E!O@(S`J!c2gHxAavyLg
zW4r4sbkR0(5qFI5m7-6{8A<K~;`5l?^FFZ|iF2Ls{nNR{U6~r3%i6@JE)m!3UAKN|
zns0c_+Tt%A^?_^;)dpgrcjC8HZIu*>k4@)&X2UD8`bgO1mRj0iylaVSgIg(Ui*zjf
zPRyMBPD~wS5o@%z^Cn6>>Z7u_(CgWJs}{=?SZHJ;Jh#-TWp9J%-&kdBvi}3|E55Ij
zh<b&3^kk7l3;T!Ou)WhRKKt$}8?!^}F#U4trm~`N=Le_F$6q3ir>PS@N*FU*2Cmhw
zX1oKC<b1nzYhogW!t-mF6{`6*0bC;!HuW9-v+Ivr{^h^0{@8Qv$od22#I3(Nd1Ty*
z1gezYzFK%gqJFf!<WY_YdXY&lUB3t}9sZ;I$!-EE6hUu^d9w}nTruOb93X1`^XOg#
z?JT^3D&t+UKrIqS=KEv;;;tYpe??8=shrZr+N)h{cIVFXP{EHAZTB?@20|l795)fC
zBL0fweF@c})U98@%<UT5@kA|LVD>PZqeeNGEp!qWW-p@h6BcoKQz`BesB(_kA|Cd7
zv!TmC(__ma@w%u^?!raZf|$4P#;fM*{`lMPD=u^-(EPHwHD=2yKBR~4iW}6zMF50a
zzL1Vik^m6ts9q+yriRB|;WUVaY#R>QvGB9_Xus_T{634?WwyrXAC6`TC(A)GNC@yJ
zE@841=`xCY+O8N*rplXl`74oG6!F^h>g9-uKLEG7De)O3?59N^0!!Btk5+Ax2lu52
z*dhu(Hf@4!)MLlEMEWP{WBt|FRdvcnsH_ieKPG;6s~<yZWeXU~5xMI%NmCdJXbVeE
z0F~7;0F8xIflQ2Tv)G2~B$Z9S58ltEO#VlIm;0!||ESRa2-C#qNAYEOA1wcCX`#^X
ze9$k9(SEeB*-{0z@;)$ER|t7XD028&PR)_GW=9T0LsyXBnAsYlckP1rmOCix%{xbR
zySLpCQ=3wI$EV&Zcc#s)bqxGU4KP|bcR@_etv$R`&0R3%pz3CeG`Ytx4!SEAsjUrO
z<(ElTf#XFb9v<dz`z*CR{KB$$vU4G8s?fI33#rU_E3{p$Sj4`Hy6pyUp0PNhf|W5Z
zC^;gdZfP_;j}_4$K#^OZgQ>|OrAkp6=PqD*Ee?iib1bx(U3bQ26~!!tf}aXPp6K`j
zTK2DG-O>KAUf(QS6k<1joI&1ZRZ^L)*NdtqK4TrR<%E1ua&PEi_7#3j6ZKbDbwU_I
z4|+|Lr?0aXTTgAIdPuOKnp+F;5I(Ew=QTqx!vS;6@8qqE57cG#Fvriia~Iw~c)Fnj
zoEGs7%pnX@+{^Mkdlv;*3ysPXA>r&0ixku=t4+2b@t8Ww`Eijp%aCW}`w%R|&js~p
z7}*sxo0Av7lD(MvC|UqkD3HB|w<oZ^_$MFtjVkW<M6%2LbA(?!IBVUnkz8+o%=?$M
zJixQl;Zw)Fb>m{Z(+Of*f`9&h#EY!->;=3h#$;E6T3j1bhokCBC-ddEBq8GRTFd>e
z)Ef)!31ME-*YVrYMaWjHNKZC%{0Z=w9c!mcYhrL|YnK>dCp?tMTI#C{NWn3?)=GY7
zUNF%p4ga+jex~tqvm@fmsg3a4Mx(B+WxRZ!YbhJkV_D1n2^Cx{6;zTr&`Pfs=;U84
zv@xn~75FnhkWD3NDgNn^$!P<v*=Bu~?J7HzbwcD_(S4CmM$1Iq*^cyCoBiKrrxT?s
zS88@G*)JvUPT6>?ZLNk;`pBlizJY%j(}%2u1X$%I6+uC0scZr|Ov{yG&0zNzr^bKg
zDx%VG+V{m?T^?1>MBK8<Kf<_7wMU}fzhUPH2Asa#4e*n3kgOj>?exXMdrkP1zN)Pc
zOIas$G#Wk{GwZg_b{E{otUxZCdmQ$DRbMppK67o<tn0JGyh=E-_Z$sBlX#gk9*1$J
z>qk`$3|@{TahL^=`sNzh{b4B-XtLmDOGCpH@8Ehjf+FU4>JZ)GePeltqx?=a;JAf3
z%I_(vLIXkGBmRu{=x#TtY|OjHKy+^zXb=M{3HxJ(Yb%>*ZQz_S{0WdcY9z@E-5EB7
zr9ZvV5URBFr&oF!3vXS<#;}EPI@NfsoGUrkEBWrg=}~PN&IWlLZ?xP=AcD^w{%UkM
zpd<Hr<MY_Diy~_BJ<_J7KFUl+%ggRQfu89s`>UYE4`5P$Z=B?#x>wBMAA>+6Zm=@@
z&!QK%i;Lz{x~y#4OYa;G7V-yv^qV&+s=ryrh2XnW@Xe59PGeN8V!JY!{SL2U^x7+X
z*iQx%8uCZF7yHp{*S-%r>Fn!=SX9A4VNAV45~Ux<yhek(E>YDL72CrQ*y?iaR=B6j
zhF1t-E>2m+I98VZs3H7bViOsN#17Uv01S9e=P1IOh#?o(5Fv@x`w>86AmUv;2I5P+
zYEVaF;E`+tm??7<o}>6!INLY{9l6~0W}HSp?wRXV{u{BJvILr~;;ks5&nIwQTTodO
zQA5^zp^2J#lC5kis;X@3u${yCP?B>Cqagu;nV*O)XxgI6TEXyizM3DSfq80UH1rHD
zoMC-g_IVt_97Qjm?qL0&nz>m%N<LXpoB<8li?o2|&{Ae9c1$wvog8;ZC3sIAiB!F$
z=Z6>pljUqNdf#H!+UhMGb_;-k6>aAf5<&%AEK*abBMs^>AqT2Je==~5RD$+!5nBoK
zhGU_f@k)G6hzDT>{F?AtWa3A2e6}KLH9rN$n<DC?QJ7tAxPaQ(bqPZ752=OZomz4q
za&vq9^CDv0OYpyhx_^XM94%Yn-o(9@-V_)}`xSMj_MVp7T}E|Q@t1-FzeYNcZK^>X
zkA=3!L(J}b$|Tjq;N{lDD(4F_uFEfEAe)~R($f@Y;ki;()#;Yp#RMz+<1pc1VlaCg
z_dHz;iBQE^H6!u45}b>Z3VgwyKrpu_&{8Q0mL)ugIY@SfZ0|e6QFY9cvpMnfUV$pv
zr<WwpFu<9r%a7yOo#9n9%ofsaKENZVs<R=KiW)oeje2?dEw=0#hSfHM4Y5w7S$E>C
z2Gxb+zrrhl3A&<(cP8I3%+?5iG#GD_#xZ_rgB;`86FuA~>n74u%_y&(x)h4Y6v$0!
z?bPW+;wJV`M#3XeXH&Z_XU{ffY>I_aT4~K|pVU>8_;#;xVep)`;3Ux-h>G)jKI$%D
zwu%WzTm}FmPjWJUI9`O$ht4op|4xcX_t|gjCzn%Mp}>d#1*<AK_brVN24~BdLvshs
zNzp+wRL_cdbK(^zoQZ!9Zo`qO-iUb-kh&xEYBbatHMUDW$w^+&6p5y`)m}Iw*j5%4
zi+_~;d*b5<KBo3E$ufzR;rH4JBFjo_klzwUidk&)^=k*Ds;vVr=j3;Tais3T8I!EG
zs_bu(NL9lFDsz8>q;2)}D@$_C_Bh6t2DQ0C65RZpZq2XiJVA)&;ZJo(B^l|AOKJl%
zkOVS@or%2`Q$rLF&hXCoB^Jny9^Qg3d45$VzE`I?<OLYjrx^dTKwB9WCh}`Sq6Z?O
zo#a412P`}*@&B(lp||r%N9OC%;;F=-URtsai7<7L+m>1wlsxzVZNdm>F+e-u7+v}G
zq29(qBs$~V3t7a7d&556bS(6&G<|Y==$t3mFRX=dJYx6Zo4}JOZ`(w9i>h~H>NxRb
z<gaetcM}YH0$W|p1GcceB@%IY;2r1JNTwp$+4n62SETJrWp4%D;>{r^bi_7DlvhYG
zVm=>6(awk8optPq=XBA%!SIk-pHA8>r3}KB#2Ya+6jS@fVW*t)gJWJxrEE1gUP-fS
zSC$c2UM6jfjzk{P@-8u<x!(#ZK@P6bVlXn8w|WzADtwI5*T!c0ypQrO-ANie;=5)a
zP3^`om13>b#X8Br5&F^62<uT?x$hzQ-J_*8?Ejp*w$cGiLUm*O&`J@jQE%qj%<orl
zU@N!Dp#pPtgm>ag6ZMeZ2<jkW$YQD}(x(zOs9k_2p?`$OE#QDwe7j1>D#pYi?<=gr
zvP!IK+=7L9f(5|_3se%J+j0<#U0FM#@33Jc&=L)Im0v^DvpD2HS>k$VxvcN;1#S`B
zq!huY&UQbJ|4D5@j1*h`7qaOjb%-Z3a9hQFw)*NZcV3YAs9!tbZ&wz@@3h3ys-D6l
zQ09$K2yCb?s%Nao*KPL<3y(i6ez{VZVx>O6Cy`>j0M39Jvwrd%sdYN#*>R@~X_)Qe
zo$Bnoul>)mqVMSLNWWwn#{2d5q2|9FlF!6@BRm+t<wTy!8{Yr)(p>i)XeY~T_*PII
zwGna2bODSuE4iel6t|u)vF5cO3k10uFHT9%*<Kxb5;m@Wv-M+$TeV$=R&6IBvNbU9
z@ss7Zg&ixI4U(VeQet~t1EU&|1`ZpQWvkgrX?Kylo#F#ZZz3EN8iRHRuJGdD1>3nV
z6Wxsd4GdsFy&v@=wI_(WLJ0ua7&Kl|*Uxjp8xsdk5``ka#sk}Z^V~^9S+s}@VW`!l
zXgHl<Kdhxvm_2VMxrjb7lZZ?>aV9x6D#;8Kzo(S#GQ|(5@`CK+K8Z;Z;cc#)cbsW2
zD83?V3)B|cW}d)Rsvx{`S@$eA-cpKba-}+&S2Zbbq(Y<!jsyn>{uz8-L=cF(VC^v<
zNw8Nu*1FZ#o79_Tq>H&7q0uS`8bDs5$-Su!S-MD?4GKs)9W0?=0joPW-smncvV~BU
zI+C?z8ggf#3XjyF4ma=7MEj=v4Igd%2+UoAt~Z|1qL7#v0t3I|;X^$9{J>8$M`vT}
z8{Lo7hFijYN0k(KoYMhTRRj_@y7h7FsTfVKbyr|>D{5MGK_GE!sC!_>*!P%I9m!NL
zDHT;DPT@~G04Q!1-zZF!szm9uL{T_#^|G_w$ULVoK|o*xODFctU}d69;>BoibT|`X
z6j8~uI4VV1u3$;KL8U@(8{3%Qv5jsvXLUQF&8i-(W1D=eJ5pf`tjqj`^sD`<szYL8
z6>GFxU&A7QDw;!U5G1(uOE}WGHIT`E?)b1fe+jBd{0zK33$PIrfzrp*raS211dOt^
zjw(#omC6ucg-zFq-WEvL#rYfPuB+fY63B%txx7@wq$kB3oSnp;B>kyJ`M$(mxWEYk
zCDCbO@oP%%S|z~?21oal@zptmI!{~31s31U*&>=A(HA6^HPBsuK|n7qwR@va5_m{*
z4$f_#_!y^f<6O9sF5!zdRUpDuvhRF+B%62!fnXk)S;1p0w9@azcuZ=iQF81}VLKv2
zuJx68N7k|}A;;_7_PmZJ$jN8!B}LFyGzt!9%pLKHAL~)P5tj`Xj$BC6ApJznC*eXA
zv1M<|`6T*+a*{Pj-YgrG^GSLcN6sgibSCp2dfV|gL@`L>Y6Fj1Uoj3c$xBKbTzSpE
zOI;N)`eW*u`EEVtqxZ4zTH#LI89HqYK0<?L>ksG`<_5C28(rq#b+V>h2<6S!###b`
zKLrxCWAob5CI)da76;-42{#e49B+pk=fyc*;lS`!MYd|3$GKA6IO)1tY7Gou#gIb)
z)OV@qqi*9=zbFMXwsk%F<B?B%YpOohz8%w))M9qbxjp74Wkez>>)x@bg;iuPFGwq$
zY5RjrMydw~l*ZF-)ty<v19ZdLDOFb!^KLh)I!Q}qu93uxs%{DX#D=ZDUWvQ#bX(nW
zld7BCbjOrHd=j+8DyYl6>kbB;w-*br1gx1+&W(_+7RSOr7eZ-t{4QMK&G^3p-Dp>^
z4l7;4!S!F{VCxbnT^ANCOa%*Oi{wPR!V5mYgXzATLT*1p?1choivTJeoBI$#wBv1}
z4@tpwXY%;@=4y860}l&P!W@Lnkcew_4fUNaIkUpOsA%SF!Gn3%V-!?#YRGRcCw!S5
z^Oquqjux0dU;%cT)Hkl_XyNiwmN3S)tfZwtMA(>dv2Gc_iV<jA_Bj#azFoyP&Pbzy
zTxPQ7O<a>9=p33%4J32rnvXK%$IUfme5!geDh&^ViqMvELO8N(E5=u&3&n#sP?6dC
z5DR1-WTD%aF`PpO1p(ceD<5Pad(8S&_F@f6t#425>xcYR%7-9(*ayCailO2|*?*+M
zQF)iHtC7lNd&+>sv&VQTH?(;fmthcA&qAVSSv$ze(aIf*(BS%bdlJ^Nn{z<q%~wc0
zvn9j``1zwGT(Weaa!j7P<HKpQF0K7~hScn14v|h~%Pt_TJ=DD_(T^irRK3iKtRLTg
z{If4w?S$XM2h<(+f3B1BW%g>40pI`ziIU-7EDR+&?ZQuZL|*nvS=|*ZUrD|cWYGbU
zYVr{{M^wCXJ~HVAkx9EHTnTCNnqy>6&>vX;q4bIj(P_z;C>B4NOH0<ZSf?dB+BM>A
z+y}79{>jjF{DLSUVBV5e2zkN(4Y-j&u9q8w?3YJyC3qpR7cpKcDuiB=WH$UBl+S{G
zPV@)NO)jPGLgtrJlDdU@v807q<`%hirI*z$YP`y=n;fnyPfSSHmD6X`ohO;7UcD~+
z_V1V<^c*@x&#xb2enrZZ;o|2MGHXnmz&d-`xXi;xu*b0Xhswx2RV0pX_(#pZNw{0R
zh`>DjqMBdi&aVM<u&e4y-8!bW1qDXt;|#bvUyBDyPZ#8~e|Dy0MtU;^yvyD|hfcs}
z&c7DP`}`GN*)sz0RSn*^OM~;-rzBSv{+`4ZmsV{Ruhv?zH(}b@#b!IgqHYToqIbm^
zMC5UUdPY_V*fzVX_G5z^_@uxs8gNE!R8>*bcgtPM_8ku_s49MAI9~Z~<5wkmibAZd
z_M(TQ8IV%a*b)tIWUAj14G{pCRT&GOZSaEIP_0O!O(M6lb85E4|FUMwvY%M$5?m=P
zcY1?LOTCF-=C9{OzsSh`l_*tOw>m*f^qDY^KTc>M@l#o;Y-jx~$D1vpBP1HDMbn)y
z@NiCkpcW<T%h6FM7^0@u7lrFf;-`)2FWIMryT|xz1m9ZkLRl!&);sVvRkn>+e~y_8
zS4&<@wcXor&R#LyTsKLqKwc2t+g3dO2Ep}{5#?{_PGQ&ZCV!qG`+TtKkQLr&nRSDX
z*n6?al@a`s`~}5iV9H5BIJ4>{Y<Q^WqBZlBQ$z<sT8>HgiYy|I6vu~rHRyhYfs#r#
zgcnqnHGUN<X#5(R)h{Gf&H{pX@6ZcCg^pt!hQS!C!+Na9mcdwUATaNcl8o=cO9{jb
zTQx&$XVeTWyWdjhkchxNJ4&8)T9ewB{U50nV<ej32_pq=#ZaU1tISdKnk@)Ouw++O
zz*{HhJNlxOBOOr~l=_*sRGNLkU^r3}yfi+K#}_qTEKctg$^8asxyVwOe{TwESjAde
zApn!MjpRApWM{)M%yXk%$$m~)XjFfu%uI<7o;ol|<58udP5N7QY2w>Jg65LgN2N1I
z^gDVwl@;nmjlU6$SIDO|0ODi7n_r}#isiLJ6>5yATku#9xU+@ovU~lhgLyC0h~;r)
zD$)1QSyl|^{=6t{W=#!yZNB|R>?=p}_g``(SPm*GwJG4QSVusDF?a4%gd97nX2<PD
zb$rcA^`aX5gsd`P#Afzt3#@51_{vlbS{KZ!vD}B6<(w}|Vd`G%U%Im<qn*_EhF>)A
z5`u&7riywSalgrt2G^2+Y}s^#&VC*RP^7VvL&j$leRU8|2vAT|wKcrKtb0+gAyVca
zC?|t5J>p(5vuc0UOHk6lg?@hpfkkSgrr=A&Fzqgbf_a9Jsc8I~(C@W!(gq7I#LQ+Z
z^sdOAP#1FM3UB7Q(C>@TZy4*Hrrxq`CsHrR#>t!s1rw@x2?Ts`RK2JPnCh4PlhDm6
z2pA)TreG^Ms~r2?X+jWcR*@B+RbsXrq&G6cvV6!VV!uD?=m@sVj*mKrch*dvWVUW#
zc!gpr9nUI=8a)H&`i1l4OU`5%XW+_fCYQz!V6$Z*@8F>c_H}!tcuIB_sg-O<(K;|r
zh6^jr*1x89%l+0&%l$G#Gi&<7dEj&gxQ5{w0TJBgnWveYG?$3XmXA->!E3M4U2Hw?
zPw6kFUd*g#V#{qp2i!}2e!U3Btn_nNp3JXP8!r`pEw^xRl}^C05p}~D!?M3T#<1nt
zg~9`){5i(ASkq<yiLTUW91c`~yg!xyWBj{hgnwn{g6PpE1}p$dD&gO$jsGm1icA#=
z0$@G`c#WEYal(yPmgg84)m?M2*rO(7v!bRkFJ?A?NUhzC&@XLd&+vs!-gtf(ze*AW
z_!aMfzw`MOSK+A`w_(--?WwV+sM`MFN;tTxTQe<LGLz=IZUS)Ci!tw>q%f;ETtuc7
zTGPUoYu~k!lXHA#b|2z(5MDmZQj^qL|7L`n*<Wcqo6OnJWrNxgJ-lO9&E#UU<zr%g
zfYBw_myj;En$d;Hh1o|K9ZSU7n$1aF00K3Ss#inl6FB|v`S?#beX6fd{MYy#n*E>g
z`E~!>e9i(x^Eq613O*+ucm!J@bOf8NT@b4<Ybm^|aMFfhg<DIZL}7l;=i5AR-l^zU
z_+O&$$bV4Iz!b&b(wjD;++V6V=4zDXuluts&%#$&eg}~=Lf%M^|D5F|Wq7{+CH&qa
zAvZ^8ih1-Te)mAmhwwYrxl{8y$D@q#duevA@bxM9{StYe&+j@OaBO}yTl;A|$K#nC
zkB{+phwyjlsrkE9_`CF!{QdR_f4>ISvO$3%r(ZF87Rx|P*}<4si>4z}A-NgMj%y0o
zhpf4}AigO4V&iA@X<Y2^z*oWI#Q9@XfFpD#EmKeSJzDYWjmf<X=m-^M*I?=%!-wvd
z-h0<2vyvJte|-KE`NDGj%n|vr!j~`CX!&Ax+#D1EL(T$`F&nguvD_v9x)MRN+FVBh
z5ns@(9uYLDH%>cA)?})-i|XKbEffj{-03-iqx+*Z2az=&(YXbl5^)oH%BuO8+0qW?
zMAS^riJBmY6rJLKBx+<``X{31)1$2QU)3xA$MQxty8l=8io3y%CYleEH`uC$SOjYz
z6)&@zbIn%C$U8=AV**D%OV<vGIQNOQko~=ys|(GR<~;NZ1!h-L$NxTmzbZU*3jP*%
z>_5-n?Ev^+<!|waDAkjA9$RAt!9o~dD@ilF%-`bnrswZM0zb2B1%^Mz-@@Eh&2`ww
zP6rs+`?IjO#v_RDsVV;u{$4#=?+N@ZLzX>Lcz+Zhxd|bNypTD8qniIa^1mBd@!=}p
zi2OhB-;n>}-<L06wEV|YE_*XCv^`byoI~9B^61AWl|Ny9%tDv-@eE(jxm43NIl^y4
z4qeQWZWe;*3Ook;i>hPmR=O)Vf{hecvOpn9&Xb&8Jr-`7>g|~KW6zgDR}|XQ&WcQ%
z=*GUclAr>P!@6KDR<ssgqwcsxs@jtO5MI;W+a`zKGV9-q8huvyU?YJUeYAOL6#LiV
z?XzoUGNhdhsf9o3U6Mc8dQ4cvCY+3fqtlVfB^D{3SaRDyR!2gSfir||WX<5aw}}&o
z2p`PPWc+{2On#pmF~~|ldNka{si)znIg0}aGcmTkLmN11?H-OPJC|v_AhC`uXq>(V
zCQGGx`l9UEH-xvFEw51<wvx#Rm-2Wv8tRRNH#RmqZm^QguL!A_6qYHL0ZUm1;L9dp
zwch-v`nr4|8~OesoPCQTZq&k}@WK+aMe_I~W!SJ8b#Nyr#OyfNM+S%zSj|>3*Ag15
zTd~y~q{{}>naOA}%L)h1KEWOZ%i&t{is&yN=i~9{FMP;G3i|`9aY!7UU!iA=PFB*>
zwPQpC)pSV!<>uMN=3k|xV`SN=9m-m|M>gx_`4FMsnG@iRu~{V^6%q9n@nvf878gZB
zJFWD1nVrp!YvJB&3&a)k?Z%6A-!9g@no*Fz<|&_MnbEIgYVKxgo>7?<Cu13sn5wJ<
zNFNb?P99%Qfb7h=fm6f6H`xrm632K6@)uN>JdiUn31h2sd<#<|MGi?_--qxE^Y$pe
z$hzP(v*Vkv%QDH2`&Ys0IOP9Ekvq4j>OFt^aJGBnzsSt}pt<fni;SbHC+4kv&}W)u
z9Lf7SbN9r^v;sH2Ze?l@jI*cetqVve;Qg3FOx-ZeM9nv+sfoflS+o8b%{iN7tw1P)
zW*&0Y*fp1tvQje+M*lN3<A_-MP{x_DcHng6hR-(=za;6~#XXesN<(kcP*N5Pz{?I#
zsN3h8FTyv2d3-bDp+Di9%6uVpD*oxC)|2_iOePp!p(2JokB21Gc!Y<pr$k<TKFNIu
z|9t9H{L_Wwie@1}ODwdd=A&loE1H2yAU9DU@heECU?4I&yCs!rD>pgw)wN8{TWYRh
za?bFvrawJr{Dkj)ddcxic7$Ixoyad=8s(P@PEDivY>Y3taB@RvOS*1I_yyuxRuHLS
z1={koppU(g&qgF$=N8^v3}|*umGI4IN8lS=x#&pt;vC<ISQvwQ53@sVeigo1l{qEf
zI36w>hj$K?$ozuAFc#h+^5dh(k4Yo)V~d<-J7*}|6EC9rtVhNA=)fG8&1gFnm))CH
zBlr-wvL0wWN#4qy<+~Vj)%ybkjMSoeO=JIfYRs*}a4TDhS==2s+X(9|Hv8$suGGz(
z#}2_f+nrOM`3@ao8#!5r1zAml!&P0;wbz8}O5&fA)ld9v_l`2MGpzWP><4^5%Vf>d
z#9qBiF@l#@GdFR5(!g^$c`ydg9i#Bf@!`Rf-0Zl@s9um<iB~ys8AVmS7u41GehQA~
z8}I<fcF$JhRq*?O3jDU(2I$g@F}S;F@jr*VU`4aQy@O7k67C1~2;2->9>0v?Gt16i
zfc<pv*@y(wuos#g4Mug$hu>XrFD8p3Qibjw=g<39T^G!+Asm$%{Rdhs%`b|`L0>3#
zb<-7xS7Y-~W#9eqe!T@mf39EW>hT~=^<P65(zg#lgznoOe@xot;r2I9H6GbtozS1F
z7z_4w`NKNuUIyf<0+qsVIk}QpiK;H1BX;{w(+~O)xSckD>G2|mi0w*eg2+IB>4b-&
z%IYN;Pw2W#%Nvmt!PWHDA3#CD*Z_|E(2jma6Q18uPRNn?0_juPNgW+Aoyoh*>-3j>
zf7y@K^N~8_M_l-h80Gn*HhBkroU3IDhXIP*#uC^d=3c;|M~*w6?d@1)NklzmhuM<v
zaojtmT4wzrTpjO@gkB>a-WasKTZgUCA-pc;cuOua@Fy$)hhHY$SjkyBxd1Am%$q)u
z%rbEM&ryjrN+woSm+ceEZ1>S03La;xd-SiZ?pY()vsKCWB4Qy8?@j!pWEd^sT!4$<
z(L&338x5w&4$moxS4Sj;#)X2R6O|y5L+VvYGMIT;XyL^%eO>Ui{xzP-7LkuHc0#`L
z=kUc`eq7_L5zf5DM_6Gb^q!9}oh<XcNcaN~7IWuMjhOWZn8@$8LmOjwwHq1ByK^`a
zIsnERyc=t9=R84Q1b<pB@M0e!Im3pai0~kKwf5eujti&FDwyrYA4Fd+5@M`++t(O4
z{1#7l2y?Ki2O(mv+Z1shx=WB5QTL4e-Yv+CsFL4DRO7K&cz2>*j%LR_$*vJ(Mhp__
z(W`J{N&NE>$+U@Iz{$uQm2(!hu*^L|YtNsE&zm?baG=vKH~;aK3!r}W{_r{Csx1Bs
z{|@rVN;#|WlYz8VA$x#wE=3);j`#hdtE4mndfdf#GuIIP11nuaGLPn>Pw*yf<veVb
zq?~l~FZovfaruCM73gkWFIVa2o0!YxpE=3m09ZygPpIWxcJuYPCYkrsO>Imk@(Gus
z%j!$q>0V|eC3{knJg^qVyeA~}(r6$P;Y#hi@Ey0>qoN(RzGSwDzC!k!c~l*Bf78TW
zgZrB{c__Oe8T$`-Nyr{aX0Kd%k5r%-WM0uvAKcE;1;<$nhZx6w@P_gF&PgZbx%|t$
zSULJaij2Kzyh;1dB;~#Q^Q)1(SUJxb_rd#ltP9oMBqgX@UdulztX}aekW%uGXVG-9
zQZ8|4A$`a(v-K<}!*W;mPSIh!tD@ddBmq^_`_28m;CggD?6}q9`BD~jS2yvw_@&J&
za?-jZdf5>kNW7GLNhH(CXnOT8!LI!C%SK%tP8&_nUMUY_I0xx{$oy5qaDUW$d^?b2
z9>ZgV>-E5zX?~+juI~?Vo#2|#D}h%2WgCD#$M3T9iC^=xn&ln!Le8V0##UJJV(3Do
zwXD<;12J_Yp&srOC#_Ls`9FjJHXl8cC+2DsrK|a<9K2<&k&N_i{f*k!;<t<~#BUrK
zn0_)T%Df;e3DhK2cca;n7{>km8`0!=oj)W#j$_f5ztnWcO*mP7l-lK#wAD9Jom+Ra
z+h`M@ST_?N$TQtJwK!c({KD}2!%vuN4gi66T*3FO?ndcw4yu;R`7~X(NFG&f_4Sdu
zsp5k2Bc8;F%|U5TNlfNl?@&k8AtnX>t7W?`G0D9{d`c~nVsi#wp}NE74W0o^WEHA$
zk(yI$d*5VkN;%$AwAnk#W1&q^<GqGZk9f77AmsA+&tG5m;0qZb)(QPJ#r|g5IpPA(
z+B^If@dK)HY7E!!yS4zLJ7<x^|J(|2%)c}B`D$MfbbPzA6nWM1DXw{Oqot$G<aO({
zpzR9J{sc^>cg@~H<lBC3cs89gPyJ|kSfrA{ml8))5e@ApBW2l&8R98Au?ZFh_djGb
z9d*led}DBYr-p{F@6U9m5RUE~9&UC*d!ykO;<td?VPMN{;*TC`v-L-a65E|WQ@fK!
z1lRu#L<3j)@=<`*U`no!X!6)u=IS5vt+a(}%qRBwt!1t{sj26e-4`{^#<}&gGMdz<
zYZv44RGc@<G`X6sZ31=j$(lTSKs5Bcqn>f+kI-!E`)J<TMX-Ypk61yz3&d(09tF?p
z4KdvhF~`YDubZ}H4dt852imOU&{^gWx`fQ{>#XP{V##c|figrDvLMq?<s@g`pyyqZ
zlYbmZcsRjQ;we8UYm1$AlX+hk?$J;Z2dZ_80j;)WTVk7CytRc$^+$wIy<2Yb5fcMX
z>?~zI*C|6Wf4WM6&sYfGp`&Hynp^3JcF2>hR1S}l1*!4*97_ltJ;C#s(eD`VIicRD
zdNTVO4|IQVU6dhg{RI!!OO643E|#Q1dO+4dqw?*<{&!gl5XCu|&igKJCy{>4n{yK(
zojF>3HD<6-epa@1Bz~;OZd*`E_IaH39sX2gK6AgA`gp<r<wB)D0VqwS4WVc3%a&A@
znRhAR86j2TJzH;)B5Dq3**t<HD#)DmgpVO-8XNf<O>$mdTOa*{mLXoVWhd9!OQ{Zh
zNjRq!mxlEssU3G_rJ8{E+ds(5jyc93B|Bch#6BFr>x#U)JDJ3Be$+WFKO-3(p*laO
zrEGm&=2KSQpyyrsnJq0m<n>3A-|}k7Z+R0(es?8y={%%$R|5lHXe1!zoO&mF8E}DL
z#$o_?$f!?XjBy68m~hhmIL=55#s%6I6y7AHBcW1n{Sks3;ShRqPPPv_tM=^8PGPLH
zH*Qvv(rN}=a|v%7j8CHCtFMayKdDM+lPU!-1StK6!JNi;MUC+Sz`$CF_$+hHyMQS7
zx){I>tj?VIQSpb)vkz&nXy%j92@_0tgL?X;31&ias5t&NNC`5%<L1CzWv;a=d0J$)
zETL<tnKjYyUdvpYN{GOk02SQGbI&;%b<ZY#clphFe3$Y}baBL2lu!w?<C4q=F05Xt
zYZCv52yU@0SuSvRujI!^TDq{9OA#((=TMogwYs*EvjcL8H=w+%WLOJrap#xBLbzL#
z%8{fc_;YMCI~sB2zqb<?fKEA~t4-7k9eej8B&!b|6uFL5d1Hxoi<HoEi5g<rfr!<_
z3?*}#LFS()h|Bl_*#Iqa>*hJeoEkj-Om{wKw&DU6ep}LVEHHYa#&fEURaOZ@5Mr(@
zIlTR&B*mGa3U&4v=sYTi77Z1ft-lfCA4iKmwQ6vF2!IecaT|@Coq#%km)DsN$48(S
z93=?H@$TRXe#-peuy7YI#H!FJ%}IP|U5x{66ood2y73THjU}Q|{}T;aFq9lK)3Q%c
zP~4L^r}&`Rx`sF6k=rV<w7!ZoG7faaEzHgbyqq*m*DW~<WaWI|ISchwb9Iwcmadz}
z4=<L89s=~~LQ%2lgPHsS-)F0(kE8PIPwK(!{4JV4sh;d&o{1<EfT&koVTJkH<sL$i
z`<LV%NPfCpW$)CG+CCxqtfIF%W%~OW<tYAd{A51(h%iOIJis67De)XcCDW@`;xV;q
zeRTt&E^bSu=-LhH1#H7IB197q%S5=uMS99})DlT?b73yfOiE0TqL%Vcma;Rm4{)XB
zJ82@F&`#EqRB#>~6q6ucV%Bli;~L@lrXE<*56ib^on1Lo;(aSJmmwUaNNv<G3EgjS
zaTtp-J5Hr79si3Y$6@jny`3UWsItn;AvT_6Gm8})h1{~rsBtE)reAiZErC6Z|B%>+
zh=cH|m8w~Q(-IEUQR68I6y{Dh0aQ!y`3%2fwtfNpM%gv25%5R=TJ=(Px{NFK8N1RM
zi{Cg)H<*0#>O2)7(^i%j4+*|E6aMZmc?H?(z4?&1oL0->i#j%QA0R&<`G62qlXIHz
zBGH5wRj!oq=cSyH7ESBLhLtW9>S$VDOmW1J?6QI3zd;}96vn9#Byv!YoD$19A%f!y
z{3U}VVGXWC;>5s~?f$w_)_U%Pl4FPr-tQw*$<DsEGxIp-5;*R?IyVuBs!&NsN*Wln
z^~0!QKT02Y$^%J#gq#D<XFHdbR0_C7@y|+KiEH$fezLkGV||jk1bqwj0tH`P;JA<I
zro)d+rS8NN&Sm!sh>73jx;^mk?W3rRUbePGzx?}=m+ito{+X##<>USQS*#v1_36G%
zEn40JKw2M>DkaiQd8hlDJ-Gturq{U==I(CNSk~#uG7p|9gNhqDnF_s<i?5phh|JOC
z^eO6lt$Bl<p;?EGyX<Q>#6L$A5d>}xize`jla3TgYdj&hy)|4`>8MB%EA{xtoN<y}
zL0x|XPbB-V?~L6frS<GNu)qB(J$dSEQ?UNj6<>G^G8~SVs`qMp-y*cxyK-XknS#DI
zM2@TXtG4Q68XRv`Y39q6ld*9>@@R^44{j+_^Tj2H$Q{<&G7d$$4Q})0!&URi#_5$^
z=byMrFd>IoCI2YH5inbHps4%%Qts%YtUJSwd$){&6TZ8gpT=7p&bbzeom+?sPde$l
z<O})7r4-Yb(uf;@4diIoy%HMa{$5ulpOctMbqkJG2@$bM_ghiACP(SUU>?9Extw}v
zoSd`icx%Va6Ii@Q#|f=F>Yj1G<hQ$JoQxyup2Q7wo83D<H-nZ_|Btx00gtLY^Z#>_
z0fIzN)U-`os!1I!scbi?bej}vbI2K((LvLSN|m;3Wm(*HmBK`^^(8P9$m!uI+s2o6
z-L3uAZr$ou+fqP9%mhdP6^SU~JEGMYqJS?|P$B=%_c=33u-)C?{;&Ua{kbkO=bY#L
zdG5F8e(vYK`<4pAg;Sw~Z_-Ejg9+Cm2h+-!Zl~Xm+#lh|UZ!|(k~WH4TdfhMdB?RM
z+HEgCtO}d><NDVj4}9?MOT>hkhZFy?L@H_t+&4;w;&uO#OF&7kS9-5{o91QTI3{ra
z6Jq*C-6q8D8=&D{k7UJ&T3c(>OHJ4rxAZwn1PEOI`5mp8m#?uamThUguU9VT?vvv<
zd_pLwZ|$2Xl?mIGg#c$0Of^f#b;*{R)EUfn1$0(Iak(>i0jm|7@golK*%`#WGbt<r
zGDA04VyaWK?|YP%k;{_a4{F|h$?ZI)x$_^b-j=eGc{mYpy_QI43+l9u)kk>=DezU}
zy3h?fS<+1>3AvlUfcgsQ^t0TwYkFc3=P3SVM9qPp53Pp=%V?>`E-9E39<>$LqI~qW
zpFt^uP3Lf=oSN$$5H9UDxU{)+$8Ky#d+pVa;9@7cx3al273KV?uM)R|(K7b6qj2=f
zHe&SsqnPVnH(D0yL|Dwd%u*Rx9oiqZ)oKz7de605E#o|lt`dM%e+GV$`_^$E;m^hU
z7VQri&dBLe-|`#{=^u}~!Y3lkDjASoG$$T#S`j?Z&3jJvlp(zQA6}vGcj|}5J{DmK
zw+3nP=hWBYewmiNh@%)@FRDjHr9}PHcknMA7Vb`g)GhS}0z8waFWqhO0ph!PnCGQ8
z@za;q8JPZ2)xq$IkCTL3{NrO~;ju3*>u6C}Ca4l98G&!%`o1=_zFaMw9${nLDZb}r
zA!wgWABosEs@fp=H<bo!S+cCc+xf)KL%KcwKH*6d_a^(BdKQ&=7e>%%b#z}nrf+(=
zxQ#!(B7Cb*$GFxKzEw)j!UBW0aok9wm7jHc)48s~&hY9JaUZ(2nGE;W@W(!<2XAjg
ze;ps|c=l?W!`!NdZs{IwqQrQtAZpO)T+L;w@s<I$^!5^OdX3912X+~4AEQeDs`33f
z?AsVx7jE#q=@a~O>pQkA9#eo9|3bpE&=P{nnDq5kR(jW<H@$wt%DyoII|$=R8m*UI
zuU7_br>j}}f=4s(3q4&)sbHkk<j6l?kS~e0e%<F(v~Rk|7=GPh`GW+1dzuV}zF>$p
zb-NMYgLA5erZ<0^sQ|UC(c?WRk|~NehYLz$xVljfl7+HM90_C=B+sskL`j@psq65S
zdaBV=jh@UE`FcGy<L<-Um(QI*1L#d$|B^Y95b<nu&fXYmj~kk3imAQf=k!;5>Kkt5
z13sIfn`{B=lm0)pCjCW?T)oy^tHZX5oq;<Wd#Ul$!vVw^a1%WeGRAd(l}H~MOfdtC
zS_yp5mErf^C2o^_54x~-(Tm6-;U!NJMZjMADO&Mz-apRvT4u3Pog>L_){x}KISA>%
z@0_CK2Ulg@v9kZkdxy+r){bt+b~n1VyZ3(07ImJp-Fq@0XTFE`2Ra|A4!f5~A0A9y
zPbcjgZeXbRKU{BCD2Uv|FN+)oYL_!le28ktM?d-LiL<S;OT@<xu%Byb%}aM&pr;*g
zm?gB&$%QkP-x97PiXEis7jw5EZYRA(jZ9DeIg*%EQ^5HB$RFWLxL?zLg<1!TenUID
z%@{!h6CCf6yc8YC6=wX03*)!XMPc=1{sNM6i^dMgPw%Xk4x6}YhtJcg#ReFQoq3xf
zN*fXHYc3Z|uUBjF;0NV|4`E|6>g7jjNWWs#v;0bB$v|uP&mdan(z$v~5t}Xjpu}j_
zO=5mqb7wQTdeKqGqhws5dbtJKNk+LmiwEhIJjU_DUu}vmK8oMO!`%(44k%=EPSrE(
zZ77%?XeY_r)t4?Ry`gYY(VHxCywR6l$uRY=?qJZVAvbh~emF=PR>JQph<zE86_lDU
zyeL14Y2mM~h)&f*=rmynof`FI&?!EIP8+~$_6`wrD5n_69I*);@rVj1eQ-kRWAHo$
zJ|xQ1Rvh%9d1`uV;mhJ@0{JSlDQO!8xX<5^`;Rg3tfD+rILHfoJ=*mzkNz1Upi8bl
zZ=!$sq{0}c4UvRtLnL9^5J{NUZ0G@#Fs(Uvm|FvD1rF(JqUGiGje?Rm!z$;!0ygk6
z?@)`%^dVk$>IGjO#B>1_K-X%|#9bi6cof(*^Xy*P6#af3$!-&e%4|v{-PCjF`ndPw
zcldn&@gb&8?=kEhoSoW3l~rC#yrCN+)Ya`7HYYW%NB-XQH`$k2MoPqR;W}dbqIbBS
zNIV63kvI-yz}FVn-Q3Q*{(~3TitG6)o?P!2f)MYnD74tSYo;hpdKX_<?&H(4SmkGy
z=*-azahet)q&vlPv#=u+l!D`DIH-;cWO9R}gmcX!kLC=`W{D;h_VcOeto3Whl$H!5
zqEU|r_cqeM5Q*AvrAK&e&9zDi?ESu;6u`fR?g7ZfGqc>DE_2SN1G(Hzo`uX03EAR`
zkvQs<Ej5e=QBp|!ab9#z2L`_wN5f&57!qi8T$Z{tM=I;0x47O^uraq1R5sCLjF6BF
z(m$%FkHpB}Cvl%u_&0DGH+NC;<R~Y}$LZ8nURmYw0qtDEI*@*Ud}^B4Z+vFit9$zM
z3HzQbCQk7kufiV}K7<dWU~zfEGub`297i9o9YpM-DDHHuH$yC@mbUwu2ouSpT)kwf
zy#vO#1&2TPbX$*qRi~U+eqsc^!Ss79^ZBZGXt8bA+MlaiSkvLQr4E;oA1*mkPGxPY
zp;hxq(i|7h4v%I*ZKsO;aOd~p4IZ8txxV6-f0+LiGw!`PPcKLEI$q8lDjSKfN5y|!
z^13`d5KZYh8uIX5jE}lb9!C(LO!OchB;9nUPWB(t{dQ^DR%!M9Yjt$l*P+t-7e;yX
zHjMk%CwQ|v&LUGWLL}CfdOIpMWa_wL_(!|rZ6q^obPn@dj23Bk9N{hQckHG*K}4%z
z73O@77d}M7J|Mx_ncsenk~c{RB`ie||G?Rf^AYUi<fq=@;@2cQbLTM(cDod{9O!dA
z;rjR9!65xRZ|85!TNPbP9g1;U?{Z)jiJ{nVW2ameo$Go7NpDvSTCza*wJ{;8R(MGq
z9AbQ1k;*C*JwX|X?9Nfy4;d~#N}amCgylvT*KK7@s#4*$jqT%)!J<U)dj*^P3*|An
z`4JiZoAMjb8B@MysC+V2UhIIe)0hfUg<*Uj%kCd#y-)KqQzmjWt#7K7LgE=V-x|fI
z%1>ZM6fT=V3^0hNy{(c%GOx0Qqz`qw5*E6sx~-1aYeoS8;|q1!Jv0uWp`b!bxIhcU
zP95SLoPWecPaS;b=HH?L4%S5#{VL}ymtxk9x=#A;=<7@|+m}e0%DWcR?BKaci|5o`
z7ERh6EeH+hoNF9hE9UsjPIvQhERUZtWp$=^Lxk=nQ1wdFqN_rY({cVMQ0R@aoYzE~
zb!4d{f?(-HrfYJ>0Joj~70C&IMYNrI6I3XWPn4~Q-l^ZyGtpc5jRzU4q?uoXtoHIn
zlqq%*pvv5JI2=t<?X5mmiRdu75fW|0@1+J3qesn7U&eqF6Ncf``&@ZGQ_%RJ_zX^~
z@GV9EV@-Qw_O!iR@MIutEBM^7rC|`;lxC<WvGd#&t?~D^<H^zeN=aLVy}H$E{J5Q2
zTS50Y(8Yylr0p4p<Eprw_L(HD-Lk3lsW7Ejs&tunvOxX&rB_WHXd2>ASYtD)u1RFh
z?i+*Q_euD{^N_7~a^^++VqE*I=&C0bHyus;Qrpvqp`<S|?*RGr_Od5=!t<xS>=pW=
z8Av+bIy2y4(V+Ld1{b(xNR>)qa1-c?NzVTq!4rA$=%}wBC(PP^9rcybfS_`QRAsoA
z-SJ2rGq7Z%h*(h!$04cF0}h3w&3AHEG&Ek^ql<Bwpq9BSR$B6r{_lJg+gcA&l;kcl
zAMMOZ6dUkI(3d*s3&>*D7W<84@OKMx&jZs0axKJ)4HS6~1mY-UD@arb7<-ex7DLAN
zs}krYp->0UulCPR#{IVWQVrH^w^vu@-dM^J#Xlu27@ssgCHe96LgN_;M}{Cllp@Y4
zv$3A=b{Szkq(~V<k%Y;vmSX`VL4C=tFDVDMvoA;Lwt<kJ7THP!vq>iwu2jZhknd{>
zh}{c?3=x|J1dsRqCz?;eCeRR-_!L5AG|7oCtzbZPfuQvZm?v7>ol|g!wPSZs)tn%W
zV0@8QQC}CQC72#?#gb<Z$DY&?(DDivgJ@0iu(lw#ADveIfR=0M{6yPR;`=OH0=RfM
zJ;_9O(|pqVqXXUw8bH5}Jq8z7Meo)7yQvCImeRoa|Aylzezi*b{0?!P%+0*zm-7dZ
zasQkGLqdm0`0boqCj!6Tkl+uP^Qxqwp3e}kT>jiMFEWjU;c;-sXz1s5h-V}@RK69Q
zX|dO=n7tSP5fgxR&MMMyYS1kjvKaO;&ynFj9-%)FPk>d=uG;`hY4N&DX{|Muu<THk
zac;B~GiUUT_D<Mj5%lgei^`fC((W;_!(=<}@+vqp3*ls6E6**xUQTIYefjed!i)UW
za1;YMb%dG$aEiR8D)rTnDcoO#9asR2Ac5L!0p?~8+*M!&6A0M|;jfMbm*WW(;-8zq
zva8$4=uG`w7M<k;(+=w~rGZ?I@SHI`04Gh~eU$&WS-LEX`)CHo!NK+R^6LO@6p}zy
zS47gF*)njLQ|SiZZ-$oPCW4VHu%~TugXSX%l*WnR&XuRiAz5LctVMyAU3DGn5R*s7
zT`>#KIHMh=n=^+P)hh(YI97R5g}j{i$u!-*r<XXk-l5tTW3^eQw)<2Q8ovAFsloU$
zTmzV4&4g<na0w27aFlgGt6xzFv3#R3PE!QrPhAIR2wT5$sl${mfQR7u;w^@T>F7&b
z9>?^bjagm>91Qk8z>cjN!>i$pH1zz+?L&M-M@<Z1?-3`xnIOHp2Tqu`GG@IS8%yk#
z*8xW#bZ|W`3heh@AS!N>7%%D9tn9vVg#o^AuW5Sk8B8o{pRw<G&#8S2KhFuvS?mPU
z2WxwaV++QAvF@N-w?jkfo98tZ26VF-5Y3tRiww*h(9w3T>Dti9f@3!nL8dDmx>vw3
z8Nefs_ss?Q4>;d7_$EMZZQrKRRnEZ1L(3*?$1mnOX;C0J5SlXwxZK*#aL{}sCm?Gs
zmw^>arg`(8$?oMI+d+KtIykI%Yj<1Q`A*+lguRA0vwO#Q-S71S>ah~1_7TX^8e2=+
z6E11L=Agg!nOJSVQ`=J<HcLu$n}?Iuw-#fe6|QJ@o@W=ZYxyEZG_<DEuF;x?JzF-9
z6eLous#)Irab~a?b$<lDoj{oo-%cgQbrIhZZ~_3jz+5G3{1B?9S!x7#%Jnd%Aa6+a
zXf~|>F%b3vNf=3BV!K*_j3<%9cJtiyygluCL(FyD$(iR7oZZ-~@qmlhL_8njFhwrQ
zeYdNXSOJ);fuuN>{z`)c565a8ga0c;)9^gfm^<K}5__OX+rv}+ySvncdWEw?JN*Si
zA#aN|BS6SEcsq$WJ}9@-sZT?iGp2J!$W9Ox6%9={CCf2juqZt>r+QpQL_b~o=4`C7
z7Zsh6#54VN$2O|q4h}*&cn{bWq}i@diMfHN6KBG8A|PERdK=t;5M)O%HRp&WVr?z*
zG3S(-@TxsQ#WxaUo*xgUoP`M*Hw2&sF(e=D?Zl^+EvB(Vup+7tGzUC!j?4*@kriD|
z04j4Y{QykGAFyswljvpHjQ{C+*V-a>w2>YF2hcgXv!0hFe^eWg|IF-q$iG8XYx(T>
zci*ixI7-2%B|BmwS)Lm9rYoZaCT%yf=vaG6t<;oceshwx>X)yJY9GeKis&xopw(__
zlo)~JwA-Y8munMb)b<QI+E<{XndqHllytiMK|$AjrJNthnLgSf6c-UYbC?2-e_;f3
zj)=1)tH9P|zw!k<%FedeEQw3*$wf?9@pYz~e4G=0l;$I)VK`+&NrvHZkwJ04!;kSx
zAFiaQiYoq;POR9OG2JUxt^$ay-3W>!_R#;EN58>3GWlMGu3dDJymOmJZ>4s6uGfAC
zKNv&Z`)?ZlUIghpkesVwXl=bigE#hOKu0AzMmCV;_R`m2H`<F=7gpvrGi2t=8qg#z
z>mIN4714IhT2q$+e>;5-UsvK=v^42$p4wF9EqptE>9ZQNe|IQT`s+*yH)t&#_*Rj=
z1v8GwUpB@9%*U}AFfUdX!QZW!BBo|?rx{!gNJwl4&%A}>^USW6;oYg>O`TkIqn-IG
zeP9>}C=W{Kf{)J|*#NF6`z+sMY%?M;YnR)!*JU??e1GK<bNv_U`We!l^#~&+_t68O
z6>mmw;Cl5nJCXh4=;>vdb=yA{e%`TP@#Ck63%k~v-j=h16?GZfD)hP#>5v+>7%h(T
zP^s!;ThdlLfYjH{+sL&RfuTco`aJT1UE`slPq~e=KR%dxB{umQ?RdUS-`pnTuc<Hc
z|4=^9P30kZABhwllTao1+biKYJmf!%tAZkZEeiCA;JHdDu(v7ijx4XR2IGPjOCHI`
zzby(K?q5Rv_;Xwp4&_8g(j+n6mXAZAy?<z;5K4CBpl9ohSmIjm=l|9ae^~?MTCbNT
z`n6nnyS9=mq8k~y(MctOuBc+dnyvE!f+xRPBt5z3*l>*81K;=|sCrak;r;8>)XaZV
z(ZsMK#fcqJ(T}Mp{}6@4{+k_49T+*v>Ooq2<L4)bQX2FMr3Lfn7RAW3%tFJK^V2A8
z_7xJ<kU#5ovYQCSoMb*_CRya_5p_fx!8SUY$!H^rdQx<7Eh(b$$-o`;m-dL)a)-45
z5=JhSxHLfMwEUN-yda<NHr|;R(8KcFW2A+fBi{1kS)7%_^6c-5iTU_D!|U&0pO*i<
z)-D9S5%994Sik^HT{s>#FO{LTmyK}dwNHt!u`e1pWuy_s2m&P=Nv<cSQ&r+XRro{d
zZk#!0F!h>Ly49{XdRkM)@Jt+j%KrxLitVY}oh1jwzU_|NkpA+&<WCV^jr{F#NO*Z~
zU8vW|zXw<j!Ta!ddyq&%dE!<w6w4Px{yw9u$^9F7kO&#HmUuz_OeQ>>SHb<~3veH0
zor9KAp}_SFIA|$r$}K!r^3C;<yhf31#E#wU(S*r%W+zV){IThJEqC8yK2v=ojNr<1
zwG~87(q$A9)HBvqSi@gZAedocM3=d(8W{n{@jv2|CNH<}(<mKMA6GwfV>q2$8U_t5
z$WH*45oYkA9Bn0_baW0>!l+FM9XV2GGRtZ_$<9=>4(LpX2eO6G(IT1!eV-H?nTpqi
zOaNpEuSbAOsPCWYF8;_}(E_}Tq#xU_f_@0{78(Jr9q2B(|1|#GcOrkx#&%`Q+xOnn
zNpw><pW9|TJ6@IBz;=>H61@@d!z`0_AoT@?-#>r|n>~1PE$TQliUq;@`J^`}#CZIB
z^gYbo_Bi6ty66coVD>Rw%lGoyx*+WL=k0s?w7&_i8g$-!nj7A3?Za$bY7Z=VReP7Z
zBNhTxPoj*COEB$Zw{AlM@Lnug|DX|FRA-SA{4;aO-k_A*(+q1yu)?h*74s5&;vrAd
zhbEeZRXN#xrSCmW%Z|5I&Gm3aFK+F02#is?eaRj*oM214*xC?GJ$Yzzp$4sDTM^o7
z2_lQVXJYW4>>Fjp=FApm@3;h^lV~qS@T1^dhW3Je&r`&_aBJUoY9FuNy5uD_!hXgg
z{7Y}(FtQy4P*J1Bu?;o#G^<6Nf$7k0$nH#y$$N(JXgGVh^}UI0g7e<<rh%MWJK)rA
zAKoV5yv3sCq_vH?qv~*62j>lqWO+9`?V*jrXBL3pzcG975T0X5$w!gJBIO){!cZqI
zb###z87xN(&VPp+v#5iH<Ts;SkZe}e4N1?N&CB6;#Fd0u6fPY<l){k4R!GRq|C51W
z7fO8%+F3jEnU9N!K(Ub|9CNxW0#XU8MEI>iSz1twK}C)}KSig(2JSVZ>&*QIlIl!m
zb6|9wOr@P(L6_p}@>Ew1*1e#-e|80xPGq&}&{xv>g=K|2_L}oX&y)6bR0PVi<}J)`
z=9I{}c5j?p`tzpRm)~}pMA><!*eq0`>k-vT?$@96A(ZNA)r9?1_B9m$97`_0o7}po
za0gi+syE)N()JZ1u(zz@nfs*$Y5BU_%x*=zZr42fx=_gGq05NfMf!?Vy_NFY!I}wX
z*9EHMy!E@d>?b-T@^(K(kQ{;St5}EQFRV1wE9RdZQ@HV9G4}tn*e+(74)zz&2~Aa;
zSc#%bbD?ct*4Oz|JCR9RT-(QI4#TgJ%>^_T$9ILrZY*qrA}$Nf;qIH)v&v?5UF$`+
z@$F{2YZH8iJ;~Q7U47Nq=FA&*$8)fqSXn60#$a4aAC`cc#OWKGza#eQx49N+Z64k}
zg{r=aP}RrwiH#t;rFjU65`b@I-YK|KI)S*$;nE5|xb$;E?)R6&denE>1_KX;G;0^T
z(WdT2H9`^2{lE14yJ}?IYG4i<8bUo!K%||1n$jDkF>8)N>#orriZ9G-c0cat4l!Kr
zNVCH#g7kgbv$%Erj8*rqro9R7PhiOA3ep@{Z7F@Gx(U+UE&CVxi9AflntBBSrr-9o
zUQQ(bii5B^<}VdRLzg;Push#geX-@>xFC~9xH$^`3EdN&!<O1H8fR@9>Q$nAsvo%(
zA1C(eGN;iQY&+Io-9in(`Xc6=i>X{s`yfIz1NQWDVsPH2CxVtSj9SvaRzH!)93*20
zc9@w~$z-R&#u{hI`!Yo3WPlwoc?2Of`Kw{1L-GM3Lc8<bXeNsMi;Wfv-ov-B!?G_A
zH{?9rW`G_#k%?&U%$Fj(Umn6c{w1+q{>+n<L#!!lXVq7~W#0@q<PVK(k388h&xs@Q
zfCFI*+UEt|Jj^}@x+hHqEeZEJg_r!U4Ds=!*p|PEHjKVV@Gk7%GfEVI4tG_V4iAw6
zgZ4=N*phr^%%Arpzt1Sx0ZL55VO8O#gtL#UK9>KICN`L=J1+Q_VPi~VXfDxUKN)<V
z)gtmw>cwDc8MBP$U@F(vGSS-^15o6`t3FR)kCt8?h)GrBCW1)HUehUZJcA3Y9Y2DE
zDP{rbv!KZZtgRP`{tNW^ZnMR7%I-E89KY0!&eGNq&YooER?=!2$3JmvGhY(Hs*E<y
z(&tVMBF7U^MDxrfvq5zy-)c6DQP(pM@^f6{b%q<_TeTquTEVbe&7PPuaRP5BjOl75
zd0~N2B<Y7uTJldby_aFD0~%H4L+B_3e!ji*%Lvti_i{q$Om1$R)M$4^%_qq|L5yqI
zlgju!1|xPp3tHpst!}3xA>6(EN?+KRlwyRJsX@gA-WQ9CFt(D~%}^pJd2uE<cDkL<
zaH7%CzhVlBUV&NUsH&U7jZ6t*-kqd#xzL>4W=0Q@M=`>}Mm`hjE?8sr;coJ)59N@s
zNtOJWSvmOMtBwjJ&+ExOaVcX8yCk5DenV13Hc18zMu-*t3ZLd>_eO|=MZB-Y>PDz|
zGHR4AqkA&_a>|BOKN^Cyy)5jTDo)j(64sJ_>-w;?Q<gDBP3pbT|01>FaVr;0EQj{a
z=lV5HD#ymHr#T?iLb@!q=3hivQ@yB8?!e|37JXnGELz)g;*pJGVvcWaOnqfAwO4>V
zA7FBwpsKWKhduR~_@(a}7_G|*KT$2x5@_b4aA^3f)~M{V73I$4yQ>6{c6v0J$gZ$T
zpa_6ik~gaag)Bjh<AvGuO+cF8WrU^@f{}p+g!9D0d6nTeN9&3Rt<;~FjL0e2nyL#O
z)b&eVGpwNDedfL_a<hQ@>3rIpaWuoVxQOYWQ`7XAo!-Z{^mP+Z0Qgr<)aA_Q`C#x_
zcO7Oi!Ru0?boFZFtYFni1=O9Cng^4aGY>{YQ?Q_U*?ke52#6W^t5z8eV%e&7`YlVr
zjJDb7jHwughnL^Sy{l>z>4ITl+;YWf`M)P|h<*=IPP%PpE{7L*j{(tT={IqIkui$D
zc(88Fgfk5)l<QX#%Vx7hUstZ5nHg+wt}BxIg8Y(i3H1_CA|ok;bOw55w0L<Ge;-(>
zQ<<C^lI=C^(%==TQF>pg_h$B`admGtWF=h|h*bUp7IcPpP%yy~Ds-;qprtItGH7Bo
zmhc}dktfs*qL3JwG_5Kq%l31M6bJs=nT3&C>tI1CMAL1W^t*-c;P&AU5K;1ln&qkf
z_)lxUAT`VsR8GTc81F?%Aajxcwkjkz;g0>F;v;%SIb*a{5>X`RSWit0CN{(`O@<U!
zH|%N#{<bLJ5uHsJ7J{zhLsi`PF189E7knqJJ?`Y68ru5V;B1s}TU^h)y58>u(%ugX
z+QuIWrk&t&D>ix3y{UQTW-eFyXd4D}K=c@Q3|-|?$=!#zia0jAE8+wf98olw>HX;s
zICpP@p*h~u_}0tr8SSKBvQ3W|GZ6#3TFSas7<HVrBmZqOn)72xk)qwP;G8mRFMICk
zJ6(c9o$Tf1jexT}*igLgJ>`L7UvuVQbK{ibQk<{#mAXdHmRSyjxa_a|+4n}mX}+p<
z#1!u$6k$=(Wj%#=7BxI#|2y!!`eEvKf^%5K$Kt0WwGOq_*5x$y+v&%}XOZOQC?|%u
zoIt$C`ILQRpmrDuhR=r`WB-svN4PbG)32uH#%mg^6i$4&vZV5LZ%MBkeE$e+L-bsd
z^5Pg(W8ws3jt3w6?2WQo?K0dU2@2g#E<~Cyx*nGzR)hqxcE6eF2!-MFUB`=eXu;qN
zYpQ07h!<!th8DtWg?!XSU`AJUJe)_26H;k$I-nz}{Qo3G7iH&Ma0zULMrmhNv=N+h
z0o#y9hdmaRkG2|4vM&;xYmwPazk9t~`)17QHytyCr`WxatH4k~GDNM(N*D-%SJg!k
zDhd~9)yPaM4IlXnsR~%u^qBOn@k_Ue+M_-cn`Wk<^O<tPi_0K6oS#YvaVB>~gd;*l
zGt=pxiu<oKi-SKFoT;01i2vOYgDBp*h~Ws{Z4pEG|AG9&>mO^%6ez}BX3w!I+Ri|*
zpDfs4qDx0ruJ}<^H@i)x3->F4oL9>AX4Y2tpZ^uwz~TCwpbcD$q0=}lo`=W2L4*uJ
zQz)C{Pc}PavzuHde`f0uxJ&NWpZsa42qpV0tTIsU9VB!^S!2a$JF^Zl<$yXSa%=wG
zqx5mtV1$AC=EOO|XsK2AKQn^f6JF5!W8CW4O#`}~$<)aJCQ>kfc{tp(L<&YQn57Kc
z!Q?ABd5nYicoOfn@+(nV&09$o8a3OBa=hDo_)$e{o<Ki_UX0LNJp`v6M!lgua=1Sh
zL+KXh*-ovnmEty`$W~rQIVijz-iPO};nPrkz)IwFj(qdgqG+hD*HRCUV95Z7d-;=|
zmnM-l2CE9Zev9PnTgk>1Q|!@-D?LJKHsX=f?0%dd?BU1*rN?xKvt4jOTfqjx>qg2d
zmZ2(u|F`022ggAQ@3X8L2VQ0$0R7U5gH9Xlj$S#4L+l~wa9ckA&TE?6aO;Q9#BXw~
z_jt|?;6y?s!tRnbq3Hz(_S+`j{O6#}k{afl8|wqr#a_pQv#606?T-N>z!@ZT{E4{Q
zZ=B8MVh^;7h>#T1iDFGG82=Ts?M-J(-KJ+jx@RR$k-WI};dpRt{D<oAl%}|Z+*c!9
zl7%{~NUb!~!SHolQ<zVcptDHIH4<OKlgN2+ZiD}9oI{ckZlC=XX2;=_t++dsTviN`
z4zub02+asnt<8n=Jc#8np{VC}K>~C{D@HkaX(;l&04Nxo@XUt-r|erQMAyH0-cLmX
z@~cCTafJg?i6AXh3Ta-L4Rk=q7fZmX%s;CoQU-XoNndZ$XGRw@eU<svV)9V=e>=MT
zXw<)KI@cK#;h~#a-I&+!1mBS9Ngu$DK~3XGc|_-MFO33lD>NehHKQF=d~+;K(O&%N
zr!^%UPh;n1&Ki}0jbd;qqOkNds0UXW>ZW)NsbFgHGfHVg>_h~^otYt??BGHpRpc_w
zi|d;sKBq2E@pTk;>b9s>ZKsVft7O{_&Nnrm=EMqsa@GsI<Z<Rk`c+ha=PRD%V>s0O
z=g43X03jxSA>O;7UHKLri>-9!$l^67QhC!orTO2GOg+x}(->Q*=zf7ue}Pt=Tnb@+
zH~)1cG?`tU_0r%V3d*k8f<d&FbeyBeOtqwFF)rXU;)Z-{XosfrqYw(iJ&tQ_$9F)L
zIZI-Qq8}T>Whf{vm%p-Gry#4$XEOss1ODO@jEe;}x_;@yUGFfiyu$ri;ErL?f2R0<
zeFqx;{%n4XgVetC+t7gg0E0!pDQIlHi1(9snW&)i!S|AfB)&NhGH$H6Lw?6&N&Z=g
zY*DzqPpSD!k@1<EFTz2@!I|78gGQCJ>{*hfZoBn>Rq}v7t<CaB2YYMzGVs~|f&NLI
z`bFqV%Qm}Z7v!sku#yAb3j*x>Rnd}tp~h$uT-C8sh1rm$rm_U*abWdy{u3mI9%84a
z*O}8QOrNF^Hk`w%Y1{MfL8F!1F;0OD;N)LHK_eqlPS?K5g3FSBvBu6c+|7>}bQ`R6
zs3ZB`Q6e|v$&Z(WDj1_LGZUEq5C*jN+)-oN^ZNl(ojbvI?d1V4`859KM&cv)(~5o#
zp5TVjqxUgJE~*({AeH`_cX%Vb{4l>qd`usz!G9-9WiCGL*xhtsVcy!}`3Kb9^b`Em
zzu`NL807CZpY-uLp6Cq<xCd_4M?0hV6u!B|At+BWQZAd#cm2D%N%qno^4Bf9YaKtj
zn0cZK9;AlUSa<SWoB5i$8gP<QSiZ@WRD4BlTweme=beiRL)QbmNzoBk1kC+%e^OML
zyq5Xls~nb@O9ZrNXa0}6Buk>7@Zfr;Q9taL{|il!vqYW57-S9o>P=rno9tJ*qB0@X
zX<hnecoi;XN@_}Cb$`T3l`30D-k>TVD|P;25^u%`FX{hS_eEsJsWp=+J|i}lM(oTj
zyg9*5+y&+Q2brCi+fO-bPq0c$a!=e~s6<9YBOctPIWFEgA$(f!r6;biN^(EDRQ9`e
zhv0$KR{faNe^=^~Lh4H<b<|s5mVdU><qPj?t4=MEwb5pr8HBf4My2T9k_Q&hRatGx
zE=C!)+qanEbCayxpE_G*$EmD+89~=tsuhnUvy~ni8<}P10rTjoJSc1K_ovdWQBCjC
zt-f?K-OxXlVgk*O&`yuk%5Li0NPRWBkoW8*puuXiM_leG_yjPK77O}X|Hl&F%w438
zJ3vc<20oxGNF`i7&HtDWg?z5JCtNuT5;{2ekmCN8wA&q%7#=GoD?C<^1=akyd}RI_
zsmH9tUY0`Zpw3Q-=HfxP7C%<+gHeeVQLian?!0c)u?$f|*v0o+zB7^yac?r9SFJfK
z_O0U$il!gXRVaLH?x127-t{{(Klj~DIqJw!c$20f{|@~rLj6aOU<mAoZ^fA7c+FN(
z^u++Y<i2KF%*)dd1QNMnz0lOuS%v?Fv~U%$O>Mvh0||W5rYi3a<u~3*DAY>Yey<{G
z!epAuPAaxS#VQf#z*4_L70LuXUq3wmzPa~>9@);EMv{RPVU>ZDFBK+W@V90HHvc-D
zfFU@@zfDE$-~X&;dmO<g*`-#&)(C5dvbzX93qRnCXTXYVlm14dXqk{-J6!Z$keQ-S
z|LLPeF9aBdiyopors%c9MK`@|ihe;g9M$T&LnDiRp;&Y(MGZWJBl>t@Ne{53y=F;k
z3mHDV*9<v!XE@}8Wau*)N(vcvgc-Vi_0bG3vNmd>C(N*+P{T0PtS3VV)A{+ZoN(Pk
ze^3bpTRmSfRtcw`)7rBSYGf6p4uCj@x1N&72{q=UJk<DiM5TjEA_dGbM{8&drW9_?
ztqT=x{+Y(T(jPfzjKj$0#C<NXQM>BZCFl;WpH!mqD(bLjAf}<I8TE;?!5}s<_mb0T
zzZM60nR@E5*Nl34b4^L2FIH*lfLDqk=pWnR*fDBjJ|DM--ykX+pXoX7x6aZ_+`KTF
zZhhpcbmmqKN5$fP^8#*1)1h<ONe%Nq?P20^9rS%!dW*VUx>L;6xRR0@R({%M&hrL=
z0JhM}*BX_asjIWow7RlgKS4N<-sKmI4w12)-`pZj7SXebyohczJga;{GEI%SD};F|
zl6%q%=Q-}(9c?FBo5d0Qnf*{~T%1$rdM4>trU#l?Wc~?Gc=x^T?I|3Vy}*Q;@JhRq
z`0q)7jBz^;iT5YCY~e2#>VdZv@g;rY61h|V7MKSHcJY10cKW$v>EDu#Ilf{)T%;#l
zDT$+`?AT0da`Iek&N6yrxjx^=a?!y5{gP>=iVMUb;z{piX(#I5jyLUKzBd%+dsku6
zMox4hi2RMB9&48Q7tXg8u9UZ2#5?Z&?AGu{Yn3~Id=)N1=6Wb<ejJP-$!R%DZmw3=
zsG7L9iQAd68)|U#^S0oequdyG4qotEUGCsEx5k6DQw}j(LFXj>=w@?pulAJ5pncW*
zR*8%aHJK}$`Ns7~`*^lG76kr^_Db_*+mdX%z|dRyN|<pLpSeOw##M!kHOlC%{4h*k
zz#EAh3yJk%VwGC=S9XSpPZSc3{@q(SF-%mqDEWFJQMzlYHU0KimPbuugske^;xO@U
zhCq?=`WpWwgI&i5MyM^a8LYojj|pr#@O<X2)R5zTXXmLT2P-Fi$eY(Wksl}M)G*E6
zP}MU<Nz9ZoYSR2p^H}%3iIUxEN>b0~)Wyz;N34?IhZ2j6<vS-K)u=oeuI|dTpMFjv
zqh4<hU){p%z2WQ3!fSW<I=Aq;J$y|SUU!GDnZoOV@U^S(T0(;~bVuQ}GJIWCc&!Ov
zHx^#&!`CMYug$#1{k5GF^|Ml4r>0j5iLFZX)=n%dWn62g=vvS5?e7#4=O|IrR7bd&
zmEqV|P9iILB4pK=7bs61;8YSR0#H>UsXc5es#mj$Q%o!O>f&K>_VqY4`$}f^>-om)
za{-#!r`G!=V24ZKcWxGX_-iGD$NdHK<2&}`0@$la(lIl@`griwHw+MQ!I7*<RD?#Z
zfRf$LJCyoPe)KQVx4cNSoxbI;a`P_(ZJbDZ7;xn_en&zT*rz+!e7Ii(*dc8BVk5cC
z@Yn37OoG_v34gg-p~|7!z2%*JQSnx)zn5qIOL)s~=O;IIqm(4K?B*Fgs|q>Z6S2B?
z;7%R?${S8LQZ*9c??tFd9~?u#DU+u!FH@z0Jjpe=H;QDqWK7uD97BdhP8P^b+2Xi2
z#5LpCG`CZWiZnvGbrV?q!_yf=PfE!NiL$mzOmPOy-QCZV?mPt1D#@Qsqr?139zZf*
z<dgVYCFvzIy!{wD51bzIcbt<Ncgoa5XiK|eh31p%q?P1hjCST<D1tK-Eul1_O^*<+
z^$|Rn5>(Fdwi)lGt&~ZmudlS$g1@ZBKJU@-gHt;rrw7hp=iD<aex`Q1r<W#tyq|r=
zxVIYoMz!ig6ZPs@!8NC2jds~zmHFRD#x305!9eL$Z*I=&!)8ru64n)!+9Y+HBMOW~
zNTs^g@prr>{4q1U!@i-Rf^m^fu;W(2RnRGVX23VNS40eoD_Z2Wx?q<freI5Ot4I=F
zGFnw$6xHBJf#e#Z>>J7&lH5wFR7O!(Fio_W%0yhjG|^!tin@}xAWRf-C9%GcDC$b0
z2r(tqFA_zERZ`TIMALD9Wr4Vg4l7Yamc#-f76A^CwVFYNSZc_tp|xxy4B-V!MP0SX
z!Ae6xJwtpyN^Wm81o>V=Rzq@Y9*YQXN>UZ%280*Y4aw~YglF1Cv7oskKlil*3+nVF
ziZDRYU%k5FtLU#@XNIq$zj~b;zKZ_pH5I;!{^~UozKZ_pwJUrT{nhIo;cE$f(Ce!3
zwX*QKF?_8lygm`W))!u1316EFukVDft%X++P=+w4@G7Fo>w?0oh$gS?dNs7u5KU$Q
z8X3+){Fg;yxEMi_D-=v3#IPN^X<<Je7EyK=sl%^J1s6sd)>jYzaUl)3uaNLx(14B)
zr6(e9Wr^J}3ejbluoPwSB2|&dl{T&jN`^(cZ(L|0i^b>+g0K;Or>hdqhc>g4cE>T0
z81!h{d6B{2XkL-v=08~Te<8sc0h=*}Vsue{lQ`Y+0LMr1zHU%?FyGB{(XPt>%$u1S
zV2vo^neK<i83GjEG}pN1i=0(g^0gqvB6!sxv@x;%#f#&%%bC-rwa}%Kq#Zkuzm$;_
z>D^#%?Rm7-hsKb7ZX937r-!OV;*`gAJT8NRZK9Z871^_w_wXDGh(sSO7`%TDRVLEc
zR+gmXp!WP@GLPdSqy5@()+ZlN@7bO1X?8t@vEJO=i8I-CFocrq{>t=gCy#x~duz#_
z60{`g$J*VoTbu3G$d*_&Vi85GD(*u)!{sV>Y!83OzE2=k>MTher#8kq>okzg^F}qi
zo3Lh7CM<5IdToTY#{meu;WZKkFf|0cDAICcT}qs7y94$IL7xjGk!1+TUN&WBYiCv#
z!dL3l|AxPG+-_#eg~@0?kzd0JTsWTv;Ow}B?Pme_GWcOKOnzK`Dq{0+zRHre?)*Fw
zHSYzWzEI_gtSSE)-opG4_52TLg<t0(j<ieii+BqMLect?6vqR90ZC>X4l$S0ihj1U
z#ole=Igd`L@S*K_<564{%y%BrBC+u0xdm%O&H5>{6mEMqk`yXEgGhVX@@`&(NO$S-
zbv$qrLAQHOF1hMc_ha45)hn-`<1GxGxog^u8$9%&1F_E7Sf@8uZsou8Carf2roQsg
z&FooINGNP(H50R_%d98<p%*VMN&T(5lK+^BAC;<V$+xzh?76?Yk1l&LqmwyTTfw!e
z1c$BKF6SnXXu(Wg+g)btrh&Gf8HD2UzK|!a>Wo-{N@Fohx2-+AVw69Y^NZXY>p#v8
zQ*Z!EvM2}X7FH(pFn&C(eL*$V6J8>PEgB{W;SN$REjiYmWv922yEjtC;>(ZFm{`ML
zevQV3Ow)S5WCv|2JNfMmx4N{Vr4PHq?FT%@lYO9X#Qyet?{UX_n;7Ldg&qHtyg$YL
zHF6Gxwqe-kE_=pD<GwHVQfLzIC0YMu;V=OWMC$uY(gr?Cc9d7Mr-VNBiD2pCI^{y_
zLRB9RBF)CL66S$DlJMftg!)$J>m2ept><$GCmPQ^$^{S!HgWW6HTZZ{Q+gla1!^uy
zI3L1FQ}Y=2m$#d)m}9xw(eZ_gk$uveRLYH@f|8`*1I9U)4lD7GXMFIIZWL(wGXd=4
zd1&Zwb4AX5Pz%+Jhs}6k<Xt(Qo5As={I8<e$BC}d>Bl9G;hXW6TQz4yw=)_VX%-r#
z&e38VWsloSm($(#y}0s{AFl)HAI!nu+C?m$Zyb3^5&5Wu;ZO2O>ZVKn?NnxJ)GJ>X
z{HAX&Oue#gw~zPbGYl10k0!RpFrBHC0}RzL4)bRvz2BE3=On%Kfm*(JX~|y#lXfyB
zy}J&EUrY3r6=2TO)p|xJfHTdw_b(F3l0mAJnf&oCG8?UWqG{(Myyeb}HjZ$Hak^Sg
z9~E;sIr;a3CA&jhFYdQ2;7}9){hs-X##a^c>Eg?1HfNr{%ewAN@8&u8y$dPR@kZM%
zXvsCZGH9txcvaDXjzUqbadqebjkZhdx{7G-;hFRo!c>hFJaNwMgTy!&%m504-wWtw
zc)R}r+(ABmad4H{HaX|ZlBPcQ4Gv!gb@{0195pcFwAxMh5ouU8^~ESDc?Eq)1`h}!
zlEGc_tybW>3IEGFR>1;eh!V6CTxASR!}t2iXEg0^dp7?j#d9w~_J%haf9Xkd-k&Zi
zg0XYDyJiFapXCtOxB1Lc0rT<TdpxlFP$s-=>e$Acx>&gxO!Wruac@h~pANfRVGAbg
z)tOJ|w{CM#g_VC$#p#E>uCVXnm+b=<{$Wn1DVu5t5`*Sadf}T}x49*ll%V!xFzF8}
z>G~DRxk}@D$Dy9^CN1Y~Q__#z=n-PM$E&(=gYe~jD2(y(T?tXCDyT5&C|)3Sm*U^4
z#^I`${KREc=Sck<O<CO5S}Kp77{6cO^`;M=)|TgvXXaBHN5VgA4%Y4Ie`vID_!0NE
zB~D*BE4!x@PclI7!|}Qu3GbpgW?n{s>bFZ7YkDIq9D2XQ&p_GKX74RXm(Tod;5PJ+
zM3cF|gTWnJsXwq_1NZe!Z$tpmn#ALir?;lc&57<jZvrH&u>LK6=7%at2iF~=4z~1#
zA9$1o@UOj{Gklur85m>em$%j1PXGN1_+hFf;_XB<883C~H6^7Sk?&4$K$u7$I<4*B
zp)(Op*R|BHD&$~0GH@DX@Xsb~1bru<Jd9<ow=-$=+H0;W^)HCPMDdLjxjq@3!-01N
z!K0m0Zdaw7N>U92CTPrv@(qLYylJKLysKr#6jUVme}lc|>Oz6GUwl>PYF9qZ(%dGp
z8sS`@Kog7=3%I1!W3RcW)b-Dbz|#J><b!s;UpY7MuLr{%|92Z134}(++1?{(2iMFk
zldVzqHB5n@Dvk>J?bUPIfdrSV%WA{S`LW~uP-VUR*+FEk+?Z!~k0l;&&{e8@!R&GE
zTtWhlO9j(BtTHP>l+(`x&q0fXt8j7Z&?Qc~Uf|5{@9^5c)H@S6cDzYT<AIZ8S(bXo
z0LffJU8<3FoJP-OMw0F!G4dl3Y6qE1&{F`MiXY|WH91$dMhqm3&vrh_e`)?30XvYf
zlAyJ)ijch~5jH09J%K}O|76jfnwY<!ltsgXMR@H*9JB^c|1<o*Yet|rHUCQnUw}71
zUWzS18*IpZLV1FP7EpGM_m;e_+iNDrxi~ow&w#0&ehVfIs|l~L`zz(C%|r8>?jGG(
z-gYpoC$*NKX4Y<jnW7KaYZ|#ICl?0?xT<I&mrsePGCT7rQmK%<?pGR9Ck_)Y=5n;#
z*x2?Smmn>!OO--C>fW#G2`X@iyXe}0I}5>-6B-_W?>${a7sm;v4bJdq#1p~9?t#hB
zw_F8+SV5fedXsf8yPb;xK<?t44+y;48836a1rcvnxwo)1*|aJ3Px15{!ddoSt;wd%
zZ4WwrhmohcQ=g@Oibr^p-UseR2IaoWkFucDK&CK%4LEMtZ(N2LfuS=QwR3Scg2b(f
z+TtT3thyppZFkH!jG@ac*AOwm3*M5ATG$cVdP1m_<xeIz3*ha{KPYPd_Nt@dLEc9p
z=G<lYT++XyIqsiJ7<POrL4U8t=<0=}H4txl*v>2kgp+~uzUv?F+G`S#`2BbN+Wh-G
z;9>gAp@}YcjgR-|LgB~0rzdXTf8cAtbO)tj>@%Co;wauNVk&IIY8eg9&a;9kpES<;
zbBBI$nBWDoiM*lV>bh4bA>mtrsXm^&7>S4<tCl|odyP)^vEAd&)9h$ztnP!3?qJ#x
zhr?f_hh_rI;liWBar*bif(uLC&aYboErp35K~w%WkKB_@U2d=b`WX5CfVqrzh-qu}
z^zWr^$9kN2_0Kb7_!GO_!K8Qdz$ZR(eq*m*`~hLWKjkleKfy^uIyc%|JlbBf80Qv?
zkKt6M?FF~9v9lFpfBU)^A@jDh{Yde5%G<AI>)P=ov)9l)(!K*14WnU6N>07)y#-b{
z)`q&C{(X?_swlR6cBY3yY-IZPHtn=CI(w4esa0PRErM%}(r;65>RRZjc;z*L{27`}
zD84)QT1kuZ?wQ{xbA3ptOIU5VJY;&xN}@m%k#@uc`fOvn3G3QZ;l<za&pPPE5Bg_)
z=n)~e>0sL)uJ=IO{Fxmk?1&9?d8rPzvjZ{f8Hek<b<fO;0Xodww<_U>6OMx67Gf82
zQ{EzDf6l@F{;IcpVm@vx#lVHJg4_`Y$0NEY0c%Qne^<%y%rJ)=b=BTSYWCh@=ra1=
zpZhi@-KJl3DKGR|>22{IFUl+JX2!Zcq2C~qsM{J;6yP~>oMQH_uzy905m=N3^X=3{
z5?J;s%;ySQ-`u*b5?BDrTM7b8%>QQ{t8xpsZ!`@;%`b@9tHVaT3(7_P(@VO^f#uO}
zm6JqMmA~pnz4jUFP_LCp-jQTocRF*U$?RoJs^qQB3GZ!n;1h-3Wya_srb}GgcsMJl
zT7I7YJJls?80m-O{&$)cwV6Y&X_54=!wQ!w2dZB=mJx0xgUB+j9()A8|I77HHg&h{
zf#CPV2ru1NrlI;>%T=f2ofp9aRyZnN$`f_ZrZdY;tFCvO$wNa5iP+2*;RSA`!OU~t
zmB{P8a4|_E{H5z{B!0*rFWmh6^YF$N_udw1^RJ9}`Tl&;+6UpyJxewALuUhWJ;}Np
z&icJ=Ox9E@n?Knd`;xupU4p*jN!w)|tj%WN&W_xYzHX+8Rh;T}PPImW|Nr<%)rihL
zqw9LD%{y`wcC2n<aE?-aWBZa#Tic$uw&6o;$G-Gy<v~SI$@kBmZMjyjb!eWqsI>EJ
zD@2OIev|Wj50Uaf!4J71;RIbs`WHgNFPtM8!J`VsoV4(dy>nr`JNY|Nd+8*svKrVN
zH*5i2TICg}nR^o-jJ21^%!RN_9mnviDiS#T&D=zGKU}R4;K&b{n!PTM<umHG<K3sY
zX5o^31b<I%ryt1Y=R~;m^l*O;>w_6qzf15w{J(&gQ6f>j$6>)&OPT@lWgEzBuYQ(H
z-Xk&Zc?86Z5g{CZQE51kMPHRWHOzD(2@Zl?MdDfn{Y+K(<=!}ZO)~_QwR|$39vGc$
zdU;_T1vQ$&ENpNmU%@PVn=$saz$_VRm~qilz$lU&p2V7Rsj>2}-myS4!Dt8`aj{#s
zeK^=X^vEa7^EmGed(8qGT*UwKzGhQjz8wgkw-Uh4d|CLG3??q`BuKd5A(+<<)|1HK
z_09;QU(~hTh?D+L1M-Uci2I2@C>ycbG|`BaSI+QWC2Iy3?V+OKe}uHZoWb?~CM3|k
z6^JeGxc-#~`8~+*hy22DcDFspoz5uT9@9>@6Wl?`yhc|X-}HzeltNv{bLivuA|_az
zlkPA*cf9{pr}HtPRACq31n0B9@Nr{6WXz`$h@-NXGRh8CsWh8I@j(`?SpIBNxJ0qy
zv`Ke5C)gdIQ~T-_e_E{>Tw2cJm?gcZ65-D2jF+Z&myg}<bT;E+0e4eYx_ewUSH^pp
z>{+?G&@B3r`I?qN@uM^Ve?@`zut$LQn6Zj)ln+y$Fh{<W4h_qb4kn-)PqoH_dlJMH
zGpLlblMG4<o$`)uhzW9w8CJD@6TPj>cabB62h$No@xSg%a`N;!c88i8+GQo+whhQ#
z)92)UzOO_iYA(&b6rpvx*sHFV6Xpc7H3Ut2^_JX#G~s6UNfDXI%M@v-K9piXmEmeh
zYpYq^xOd^4{6gvu^@Ig~$%#UkEY#3{U6dF7Z~gxuEk68{|5;iT7$7e`PQ)8f3TX<-
zbq3PnAxVquzKC-WN{de+jE2(UbfiUY2Y<{AdITydw){urzkb)^PKA;Gw*P-F|2;iI
z{%bp(pjJoAd;R+yD_hrt*w=Z!G`8Of&MNKCvjICThF60AeESS5606&c%p5CC0IVOC
zs-$ATFczN5g#hF`oCa;xwKg^wNZx`Fcw#K#b>rf4RLQ`vbuC}>IKy%R*TJvIoA;wq
zRV;^T2$f~&muO%U2t5kS6jpBTj13Z8h2ZULS|Xk2Tl1(ap#xtqH8V*F8Hxf}bZ106
zytB0_?25FLf+T>W%Zwo{SgD)zkBDyQpM0B`HIDZtKJsAUUzI*2^?m<)fcAF?5K9zZ
z?wOt8THB=6#a4Iq_t*s{N*!&xx-H`Co#O@-?c54iz`7s7io4mom!eg;mkxg7qB1DI
zLMq|>_yA-*ZXLAOAXdgpy`4Mu*6l>TPCw4AjCx|sBc7oD4b|Sk^2;L78a~FogE}Rs
zH+nMoo4=r1$fzxJ`QU}+!bGXddEf;F+2Ed#yi=Rzpu|6SLf`ayJ#leA^>z6bOq~cA
zuqD2!o1PBkBktn3t4>+V9C8-9`#)|+@zC~-cQ=l0`)c~o=(b}_*p+vC?6z&*h4l^H
z6brR9<~y}oZGW&=YbW7NpGfi$Jt&m3Qk%o^72eBIYr}V`*twl6F{Pw$`Xv3>#}lDt
zLRre%5DzYFX8fqB^c`C*?R(8*de1?b1w0jWHu9+$2SWNpDH79t69#vO^I)Q4Ah<Dq
z<^C-zRgFK5*}95pd=Y>@d2l-c#ZZMRfzXNRjnHF-+`af)gS+9+Ba_=ENXtrepuX4y
z6&QGQ-paMRc?i{^^StS!`leSXrP$@Z>8ZkNtA6{Yn;?f9M$iK(ru_>EIoY$Qs&9I=
znSPW{X!5o*LCxrsdK7H$K)C*g;{NsYFDa%$n7(sw(t$AsxS$(fFnjwt$F*NKfKZh0
z!uT=`Zy?zbsAU|Q{`l!vQ2kX{bi5+#xD>vAo=Bel_e{uzsA9i^3ibyzxfBkzTw+JX
z%l@%4S#}AD{CbyE;|jfv_R6H5B^(|Hj7*j>I!Q(QTFPZ{;;h$SQ_Go4t4c0L+fopD
zSRd6n@bU<Lc)nEsTlJ?mq2ma&|JfPd#`ELBJ-eyK97}lnHGD<8$UV2H3Jv=eCKS$(
zx0AvD@n-(cv!B3%JgpDR-sj_fx|>IJ@+A9&UDSRZwq||$eMSZ{ZL^B->zfEn<Qto8
zx@#?E7XFpkDi0<8zo=$y>#kZtv}cej)UG<5)eQMlR%R_)n0cVTFRenFfPp)-e$EBq
z!Ac*;_OF-c9&9llvQG*RH2PW$w9xu2rfWiOaAB2ns-L#kY+tgKDmu}}o!cXryx946
zh%bFDH3mk4AGGEUOrl$q^ETw3Y*)#)Ui6aNy<G$Ahw!gq3ug=M)WvoiGk?r1OLBK&
zWlZLu4E!*R@0tv*nlK!9B<^7{fI2T)IQf|yos|s!9^=xv_}f`YEV0}y(@ncW243c1
zA?cH*v%X4yaZSfy+xX%6A^tfWB6t2*s)&VM!`T`avk}$&1>*sv3iI68Ttly5tncNH
zGsCbu{#|s_<ZG>fQgtjJOS<1U!+R$YOrJkP5v}3KiD0=wXr7znoG(`A)_+gaV0YY1
zdB>kNM|}dOFT-<vcN=#Eo0$f)QQy>5g+H3h=Sb{-J?39GJ4Uz5oxW*v)RnNZCD(_Q
zC8#Xs|C`tg(W&eXi_Q=}UiW;U2eL?*kc-i<<KKK|_)T(PZYsr%TPDS^>Tszf;eWe2
z;eUbiP&;!sIpwyja)y6J<qVk?f0r+ufSN<ErAn0?Kf`-H;k^+LE{nDfeA4t^`sk-1
z&I#)gVr|+P-B^`O(#j!FlE@%Xs1rpGS_#1lEIpR+f3pkDqa`Xws<aL#JoCZvZq^xu
zhC0FYcj*F6$qgC;!e6;Aw4uiihonq1g5L<eOx}6dRnh4F+&Pp{W}QUWYvwfhhein>
z3;cluQD`P-*+!Gz_BqwS{2k;~@FZfJ`%<IkuaG6RS9PLjr3o_EIG#z!9k|xCR)cu#
zM$7F?4dc?>cG4h)pWu~*8ZjY-4)DwuXY#V`BrF`~^qF^BEumB8!n_Cc2O>X$9+OK8
ztu7b49zw$<SA@_onIyr9awLNF0>IqgH-Lx&KyOp-Y&to1(>R1gyTc|^B3QPY_8-)y
z!EkM@elO7AQlN%`V!p$<7hAOJ9q+bfIi{amipyR%zg^1?@SA(>at6-GoTg>BQ6=#a
z_-jJ?A`noRy`9sW`NZvfwQ^gpQD?w0tmolRd@DI%XHjz@0^t5H{Rj`-TR|Y_9#AvM
zqHrCw0E#s9rL|fr1KF6*Z_cl$I@V!B?t4@`c7vTc6kY}>@PAFAj-!T8wC#=yfk~)V
zA*4<r)N+`gt`<8-^C1rH&yCgq(*iv@QPF3fR5ARV&K>+gRf!1$%u*Gg5JVCDZTqLc
z0Do6AxeagRmug$GvH%xBTrg3C%6IY&0tb6)7A{(Z5dqN-N@+4D<gTVt$Nx8j%jUyk
z+85&QrbY?1jS800@i=ePuIU8EHuJOSm_*a%m3GIkpo;=A27sM@ew{i}#0TI@OK6}$
zOPBjJmB;+`xAIXDAm`$=0#wD(<DVR_7pg?OvkzSFWuEMgyQnY>hVpZsi1yh`=z};R
zCk9*DO`E#`71ZNS{-qgXn)^^@Oy#*>UdBZILDBl)#@?!q3iD(>3|u9;;&li;3EUvG
z%-#G2gWpV9eeV0;uPPbG1N5HijQ!{>l$K6Goyt6;7X4Knf>=M(A%Ml*7DYqAZs?x;
zuckLGyK*Pf3)BCO1x$eBy)eyQeaDvswx(L)($wCJ`B3Qh;j2SJ^T&S-vF}>4_@=9Z
z<qq*$JKaoWI`u#fuE{-2i9CBcO}WdQc4%h9g}t3h{F@AvJ>E9P^&T8v;+rT{oVKM3
z>BhSC@UznUS1nima+)ypnMU$WL-iw7a8{FxQ8mDz2{t?dN9&nonq;VuKISITK*FEK
zf^lqqT{Wg$LK<-N8^~fr#xZXR|GGF1UbK5+@;Joz7nXZ_2e*401aMEAiT*R9(U&nq
zgPHhq!ttAbV8kN{hpr^G^k&Y~oLh!=<bJxCJTxfAvYJaKU}%0_h~ms28{3W&H@L)d
z{k1uk*7ff-3*D}D)*|P>qq!KChyLHtVQ)u1gIYmwIFelrGphpDC;XFy^}8;uDhZ=<
zauX0)yTE%;V>ErBh>_~m3S*!KT<^%&QS}i1u?CGrnHB4A>@PMUCEA%+s7d^}z=1oi
zV<rlH8CU|{Ar1e7%fw2DI&(n{y-5(9o{&UM`;+$c!*RTIXf-+f8&lx3xz7*vb{2hN
z>(w-%uxIMzYcx{Wr-cxDWWK;?wE@w0#ePRnp|`FCutO_FtxIv#`BG{fo_}{7#-U>N
zH3@H@o%th%j``0Ul~_g)!m;dra~~K2`92$U)Sue0DxUS|TR#SzCb=;!aBI87NgLW`
zH9T9SW%;-0FYfM+H7X$39ST>VB^RgH0?<?V?(|Kc18l+e9x|*k`S~Ji+>onh1Tc_}
z59o3JoBRm}J=P3*y&3f2M+SYkt!jvr=I79S?gzJGWimWo#S137#M?viD~Hh-@%WK~
zSq5a-T<*-s?$KCf)c>~!c=4bW`-~O;ETJ9==v(ZnLKBTwWuo!Pb`8z{x-rqX6cdd|
zGncy(rzd8ymFDI=CK@~NLYVNrIY(TMpo2r6MScn7z!SlCW1``F3yI!)I8pY^X0IEg
z45Cvey~mvN-Nmz-t|dmFflH1Ta%;GhJ@6ZCgKOaX!7bf%E*?CzSwDT#MX`|v`q>|M
z>XCnin;%QExAJ1HU)+`Oop@rh)0!IHXR;)MpQwR&z;WD&`Si~S1BheuGjoRTG!L9`
zw0y+(DJXrc9)D`N_ho-!1Q~Mxe?Sps1TM>*@;=9KK93AV6N?|FoA57=#J@3)Pnu-Y
zj<#FEJu{+tM8fa+bS2?m-R$j+TO18fE%*Nc(~IuZ%g&O6?ey1P_EY}Gg4?eb<M4mG
zPF+WDW3T?nFG(N}^q83c+nLNU@u1HQX8u!IBD-g7!ovK6PK_9!>@OBXLIVu$#(1}u
z1GIhZCH&Ptj+3!sd**C~fOkC4G=nilykLq!G)}ZR@9o0;x1=3sTc>fTwnVL>+LuPk
z`jtAv>8RDt1HLX(=LF68aL&orpv!!W)ote>`Wt5lla`<*`eC@Q2$kaAHzU(ki7AVM
zoc_g#Fttp}ZFx6nxd2TA7k#Dbt*bdcE5a=t6kSIHj?NwK0`D<Y#N5b~LCVRzkJ!g~
z4^Rid{Ta07r$ftgpS%eSE6OYQfeWf`^v&TNRH2^!nbSkg_giJ4gy|60Nkp}1>R&j{
zkiQG#>{Ltgml%z2NxW=&vmYNi1pJ`}F;f45JtE6!loX*#7#pW0uiwe+q3RfEU)2>A
zEE8K6UWID$s#2f{oktiNRw|K7|7<KuwAI^^T8O&wSZ)99OckqBFe*u6OyXfO;671_
zst4$rVYHI%laYrb^b2pfvUG@JV&b%412wd}dfE?t!m)4ec58dAt)1tUd2baAOIC#~
zc)K*KS5er*X6yhbe_yj#pD5!JpuimkVD86PEc#6RepTqSA^ln<dQE3+Uj~`;F-Bys
zK98eN#C0^u#%5%y0ol-QgbPT-vjWoll63>vjabRL{k`Y~;-#IfLuMn_$!x^VyrnrS
znvPH~A-}+FYY;@Dnsm*@&&a}gyuUz8A2nd*aLG!^1Gj|o5=Jog>Q9jAE0uU7lwCIV
zG?i_*UTU@4-(P4ie;=U28UPam@2z?1mQpLfmoG!`VvJ~VSmYcR)@RCNkHgH!e&z?I
z4hT{AR9zpc)uyKw&X)~KpZ%jAs?7h1ie$g?nmKjooEaU{nT(FkeG=T1`3fFU`NX2?
zu!r5%9<r~L+YbT8u>HzkVZS2y8F}`P-BRE#{?M4|v|9NUl*EpujGx@;KRTM96yrI{
zzG)W|BctGEG4%x_xJo9vnWRvSnz;{s04B}e2k>;xin|H0&C@KehbY-R%yw`-JiP+C
zgLyi}Qt@D2A><dH)AX{P&XP7)ikE8dv7_m2JXjHJCxeu{%{miWELe{xyoYh+=6@mP
zZ6ro)q=CRZ8%J>nS6<t1KbqZ&e)>_q+1sWCcbxi@tCwEn1na)4U)Oqx*s&Fumu!-!
zscqI~uU`*uxTv@7NA&m#o_RL8gkQ>TF6HqNQl<whj#Fvr=Bz_rANT0W{L3q|eWR?$
zFkE=lK{@C)WNWh&X~4TrS5?^77D72W+3YCC!gpVm42QChm6CB<kQt>M9N&6dvpu7%
zt)w1uYqvCHT`SA&2PfM-3a7nQPIgOaJl$Kx(fN#~XY7u0h@J>Qv&((B+chm{U+@JI
z-Zyvs&|8$BnBo?0=Gk;%n|H`%YO5HC#@DN};)%8W%u>T4JgS+lf}`0{)@FZ&anR{n
z2c%<l8}e>L{~6%|#2Vgr&mfEhje3uI{jr9(sIPx`qAov-5@tfM>aR_GG-ZFc&+8+$
zY2PU9rthGb^%&K!RryqO67^R!yy-SPP4$w@urcuZnHr~mV{Nu2SXH5Fv;y?_kp|`o
zi7px35p5^0#fa41H*x!}v3K#Uzc=XmqROze@6rGk>b(s(^ZM>K*;3Wl9%1ISd~O5&
z12P5xt)1cIzeWG<rV2{6x(zS54W`oD_|mYCX%=?%_p)T8RXv%akc>x^zqjE??KW1Z
zp%?Rl!m2se0jj$<tgaHEt;B=7R2_{11RZYbgtMYy-x+My9R6U=_AbL{_(1Ei&FSxr
zH4M0C%#KDIjyMei(DN#@Xil)I;pYQSUrucTOxJqX0b=_%uu?BL4gK7lY1m0^^=`uk
z_l%j*iT%9|8&vRN7AjbGriwB%FE|3<5U@9}GOqPlELbs4sX(grG+iXVkSdtu5d3A6
z)8B)EP?hWLP+gD52;bPy;|42EG$pn=_&n_y#UyXVIbd;ut*tRH-*8x-rpq0c_za>V
zH#{l`EO+|NRN(uYP-|0|x#>ZdrK*^`7!Z*p3Xw)E@HZeEBhVIehf078p1@Z<sTKTA
z;y21~1;4FY;8x|}01ky>vT1I#I(4#fz|3l4b&!nWoEVq~R~qw|Li8XpERtBBx$2P&
zx}xo@7`yoBLG!yVdVpWbRPyN+ed4(aV5p`HkF9)`ra|b}C|t~i*`s`a$JB6}iJ3yy
zNqi~~OI7eVK75?O<A-6HdLApouQfcDgpcJsR)vofi5_O0wxQ$L=ZxI~%t7F454jBk
zz{y1CjEm;DW48eq{TmFi@qT(cHBSvz9rxV2Pv2;cBJteTkk?!RE<0llPrJ3i>qfqL
zPr74S<!tSvP{=0b7j(t&ElL$*_i4IgV>enypn0`VxDAJanKM9h>pd6n=oR|+x?^7@
zkdP_r{aTDi=xHFBngA%L;aR;+a?gMUS#JWf-jPJQrz++>7sH{c+MzQas7tjQL?6e#
z;CK%^V?O|)RjbF)p65%pca&4R$*KJSn|AL=Z0vv_tV-Yk?FGwOEEjwuyucnHOMcP;
z3i>ZZGt1ZCt8|`$AEitXPKW*eov=M-VJE&_$rVbj51~*vMX`x70vQ?frJ?fVWXuCn
zr;wGX0)G^Q)$n-&&=Ad^1Aq<h&sfH0mQip9pmar(ya>)_@eAC@uaWE%#bveRGfnax
zER<jl!X=tM*L>`X&M_YuCz%CH^UXUTAZj1yh3}1gpKZR+CCWI{!Mn@5AXSYB94|BJ
zGlf=N(J5g$0c4{dnKtiF0-7oy1yf<h-UwaFZU7^Bn=7QwHyjaKPXrEQX9Oa44G+6#
z%!QV*<UkX!chb)6cegg|(ANo^9y<-M$GkvD1%0IVkolPROM`3;?}nrcJiaE{$|41~
zovFfroc9MIlVd&W?GUkov{^64g4-%g-5X#6v}Qfa)JB0bZ<A|19WGJB4k(q|@UXxR
zf)#7{07~UFye;VBTg}v<>jc$7_>le$4Tl|w7+~1|AOBY&CH4pct0-WUNN=iwNR=tK
zMW~Q}ecg0uFMuN05?lc+EWLn*xhscakpLuWdP(I;lqV!v^@SxR0K9?7Bq4UIQ(SSH
zOBMr~oTV6gWk}VPK$2Eswp)f|MF^EyWx7OWZQ+$$Q=IxV$J3WZ7of;uab2$rLqOL%
zyWIOhh1XJv(|Dw+nE=r&RXLm4og*<T{~zJyPjOuVW+=-I?bO>&Kz@|qH$r~QjqWsC
zBA3M&DIa!{O;X!@K^AHyV&5GlBrYbsAS6C9N?8y3U-M^GQ=-}N-uD+r80IXz4&$K?
z3g9m;=PB-ZANq?cctXMNFRtXF)jQ%ZuJW75^E{IwAW?S5gN(Ulrz3^>k^5U@<Hlrg
z?98T<(G)N_#$IIxgwuO687xN8<21*;NR(KXW}jjB1_8ZD-+&?O0muIihFni(H;>D1
z9qraW-_V1J=EIJ6Qnq_c1Hp?eYnRpI9c<WKd!S*n)k91Xte4rP3KX-Ok0q+(=OI^e
zJ#D18W5TD{*j=&O-OkvYYjwx`G1hkPEdbKqENQPS5g|6DHw{;{yZA`Uh=WgOw~UrF
z#O{@bxinIqNcZx;521{&-Bv%WnD)THslmirh`CGeyzW@-6BM9T^D=gOtaevy?CzNN
z1if^;gVg*ctAq^xu|<t2^)OEB(1r%VOcc=ZP)Z+g@oo(amy4suU_F2{@H2rtl9F8i
z4kK{!shm&Z6Fg4jQKX#5D34+TJXZ189zNFaxH5bk&*SakWA(tN3fd^)L$!D|n1T4B
z+O;%QB1Deg77<c`r*<}bEHbG{lGZEx@EAgJGTwfNK%HeX*l_k77i%EkCTRm@=4rsS
z`k`NArUjE~Jv?bX!Q48v(4RJ-a4XJ}w~SMj4Np5Bkt#RDyl0$Ryw6XJ#*lTaekvvK
zoNFC&gDFkkQ_v7#SHE=RDcr%*BJG=}u|2Wct+BCtV*cNiyJfKmu?N-DaymZ&>6bB)
z`B*?bo3)*Wt@@D7AHx$@tsSwoSF_pUvfIWWHSxHwtl>?FN2OzJbwPg6`B1|P&=>j}
z^UinO+9L?7R&R_zzuC=#7W33Sh9?5$9hnwH#<Ks&ZUZp49E&989m)367{5;Kj<Gw%
zxseCoWOgf{Da;s7*S9d88;)}t9_Be;#xJ2_W7f+t?;R$dJ(le@yu=IoCdT|y(vL<R
zi#*7V5>+dmG6dY1_pLZPhuSRS#bHRYw;}uRXvcfbJTTSNwvnpn=gXv8PY2_1HNP1I
za*;v+WIZ#tK<y)Bqn+K5gxJ_ekU*TVuhUEoVOO!v@?O{4(cz7B_z_R?O*Ngi_L)9D
zq5haH0vV3Y_A=q`uwTgTV+wdU!cI`#XFpJjyfGt5@Bm18!x8II>rdVb*=_Xr9sSbb
zSLu8_9pSQKdJ{mXp1(>f-lNuAwVQ-aUXLU)?+N|V^F5NSOwadd3}ZJswI9-R1QY8m
z7F6I+Elw($KY<S+pH4-`gKFc&2gDaRZ_1%U68toatGOznz27XZN$9j>J{J`<#+da8
zWQ1y3bv8HK^-e&e<a!rHtbH*H<J9j8k&|K<jm_5k@U@xVf=aKo!g^86V~*u5uJYob
zUi0|W7lnJx!a`R(Nd#RtUt0~`rDZXc+4-NKj~LQ-h<}L8AI(3+7)J7s-X%r;f$d7E
zA-p4K_W$b9zQV@7sd=8=ShCr!JGYw(&)r^p<Kc>PcNgDyxZ+&QeZ!mw;!Q`|WVqEl
zQXjf;&$Snoj_AOq!>WIO`^G(OC7U-LzW&^HzMOme(Ch7b?H+pV*6Z$}*WGGk-KK+A
z(M-r+L;IcWaZK0JuUGmfrr$41U5pW0+i7Uq;=$P!iZ;Xi5+8ft5q!L(*|CfnR%K|f
zf90FOSs!45c2!;(gHcnyd#Yi%<rE*R+H4A7hc$HmgnB5o-d_|!&l~sN$2tauJ9Xw(
zeNmc&k+p~XPy9RqMc^*<Cf)6P$6V~35cfZo@F&FkP##J~aHI1Rq1s$9L6suU{2AX@
zq8!Ge<8dD5txWi%ImN@w;{rxEX-vGX2m1t4_)y79!n>d{H|vVSoGo2fd0$C0MPvXc
ztYA|(THczP@;JGEG*Lz+xb)|u!lh(S)*YT<U8^(yMA-!#T3t|?x-{Wmi3!Yg6P&>d
zIPAfw4gG8-us$Apv9EK^MYd^Nk7I803YlEc$2C18i%okvM*mOcj-zUgu5yNTX3}a*
z)_ssVZie+?{%?lztKW&qA5VRPvx^B0-6MdyP#+hXU!jKa%=>d@qWZLhD;Xd#u2k>F
zH1M;&G1ReF{|)0I<1zWR%d`t6J%85~W<P4|0<jM}FCh)>)+Ec9e!ZT6Vq%&IRpSfi
zIS7bG+SB2{CD>@PsXz|Y-BD20EDhu3T1TSni@FU~otunTAe}Q|(5Yljhjj0nxjljR
zsE4i0%;<z+?IDJi8|yC~wqKOhRsvW1UVoB~p{Jb)nMp=lb7frbx#*h%_viLr3vLg=
z--xU9)dR=lAKrh00dSJ^F<t$x<-)|fvUk~ZwOmW2Uh;n|fg6*x>9kvo7Xa>t3tTW@
zYu68!Z>RrQf<?S6EulghcK`RgdBTAv72G4obR`38nd}hXFx$}H37D_Qtt93pv%_sF
zQ?;3I4D4iTr$1ZImqMsuo>n9DG!}N>Pgcoa&Uuwkk4V)2M}nKkwyvd;{$p5YEdM_H
zmyGICrxXkT9~`#-yNJ`j^u|grC&1CU0QC*LGJ@V5B~NQVbks%C93Qwynh0WX;~<P-
zHS)3`?q#Cwq|NX?)Y>-YHk}<FK^_}nA8YI)*l!ly+W;$VMLDZz|8=4cTHBgA&U(Y~
zubmQFf5n=qlet%o>2HQLKA=N<!5D2X&?)Ctj4lBP#I=^frGSfk(1PX!IpXnv=-5<3
z{6rC+c<$3rp=<6@!KVL*y|<5#s=D_7Gf9A;X;08#Q$-zVw29I-QEp`f>kOHYGcc*C
zh|;Pptu|t%5+MV$q6Q`dIXzA<w^FZtyxwnnTko~K`fV*Bq9!~|z}5zQ!sm!jGei_Y
zA)=D+`?JqXGEr*pecj*ppWo{{FUUD(pMCbj+H0@9_F8MNMcY^{^fp^o`w?~pwcFSt
z&>u6rT(zB~xTXAW<-d5(Is9+&<`cTu3Nm0<LiA-Rft&O+s14T5++50R-DK?(^`a{G
zqC_{5<nK*YY}90A6QAz&_hASchfLHOW`@5p`M@r2f#9i3FaIiZ=W?%>I8N|0xxhl%
zYx#NnwU-l9EAxgYVX(eSPn_))Kab*Z<ffb=6ZOD4Xlz^jNYMr7xhhM_is=BJ=L$ew
z#uoyczM#6va{jFb>StyY&+3bQ(dzy7S&&o3`t9Ty(D~CN(Q8qTADR3Vj#xnOuv}T)
z86;#M7TW;*4syz>r~MXgB4mKd1S^=AW8*LSS|tTj{TK%%4u-7N918U~e^96-LKkX6
zU$K*30FjHr4hl?9s4GRq67ei^vEkS_`>V1unyhXWS03xt2_lqP?Q2IFgP}62z#MJZ
z`Yic}fF;XAW27L4r~);h*^FRX*m?@BJkdaoGS$k_yGC~(Ys$TsCrD3e$gM|qmPIif
zzEl;&ZYES;?E8vLb%!Y({QR`R^czcL)bk@+6ar;}0=YmbqLTiG?G55@NtADR$y{<7
z!~~_kehgMF+1%K|U2uu=$8L~@_hM-t_w-#qXz#$jRlWe6`U))@RowU$wB6fdl~$VL
z>6fz($>OF7OFIp4`nd*EVl`$|LIAJw2Zf>O-J?~v$wt+iXDMTAg4nC>6&&pj(+=bV
z;Z&XJ61HdRk+2gx>Xnr0mRD;0uafCn@~(Bf<c%iAcZOb$<0WJG!*6rt2*_?S_EL3d
z*`N8_kuB^z<^N+hDJl{x4%~O^Df{{?8fITv3@f|ZNKFTq9(<dF00<xY$^6lEHV@^6
z{yB7KjFysLMiQ;rt3e~4=jb`}unvEpiv3#a@fy&%0-55XTor$>u=RUDzC{xZP?Zh7
zMz9WE&W5>O3eEqnxbHdOUu$`O4$6|Sj{PwBC==KAe>Lp7x05!bH;V+DsiTonch%<1
z<s@nyFw~SvRa5?YkZU82;8ufFkoi7nkj0z9CNw7Rt?cC`X2TGelJur}+0kt<mCz*Y
zR|i^Iu0Y`kVc6D@bHPcuyuY2v5RoVIOB$2qQ<PIUtwyTS2=hf>^=&unrm$K_k-m(2
zM9n#5ZsM!lL!!w~hF)d(+9+=h7!=x)o=jcJzmWWz2X|AYvnT8JDhSE*Vy{G)(H*Mx
ztgOhOxKhs73=4<>7rdR-t_4JNd=B|Q(z$*u0W#YfbFAn_o021xr<(}<!xu1fJ?gxt
zYYogxA(S2#xVEz~aZvP1eYFX9*vS=gDBc#*5-Z8BLV{iiAnD<?x~Nr3AaT_;O5{<9
zZOG+785Jv|NQ$Nd6%p(TA5HClfUaoxJ4tPn8Do&bC?h-?uxu^irBr+J!=noQbg)dd
z$;8vGFhLL(@!aT6tc)b<ydKbgLL(ZZa5%e&wt-OxmC-YjcFk^d-VxEjJn8*L=LMa?
z3d$CswH8llk?Jj0`%21->gdw%3<!+b^qVkLoVB3!1}eTykX8<`Rhm6#O(V{ca!&dD
zIC2g@91#?JUff2Bi)M=ls4*u<g+{m21NA}^<05W!HgJwOi#hpkQ{LeLJHR+uiD~3B
zw9ptC8WUH9wK8AF(1Bsk)EV7P8^w~3H4c&z<^@&5+NMMJToYIU;%srXIEKsWbp+@T
z&@zC&P*@~DYv(Z>*la<ve3i^ye?V<CP_=1@{SkK@1TkeN7y5Ay>TEJNIZDN*l*cR7
zBtFDb)M0aStzQG)eh!0d`XrXzpP9{6$nmQN!h$RiHeeK7<)+PF;Q5To!5E*~t)=;}
zlauWq>%f&GVhUhAD7LSs*;;rxkN{JbWzxL8z(4*a$BRX2HZxAkrCdc+XcozPTc(bt
z3SS!WATZeeAHnjOrZeF(KNZaw<o9!ADANj^#g!OCs9}c<@8z0qEHc*9>3_J;TVZxu
z|F{Xmx4tt{@!aA`R<m}F&t^Tw%bHmv1G(%1<2;u6C6DqXZC@D-XCBf+7Ws|_7->6d
z2BDLAP9vFR6*b~Ca5&32Czn#Co6IN3Z)R#GQ<o3S$|7_zwtyANL#kPKj>2$e=WiCb
z$v8(48N@9`pXw#SSk8Lx-O?k2Vkf<+hq;m=E24O(z%2?_gOPwodaU@dCTW8qmQHyk
zQ%!@Y8qz(DIUpzgorHEcrf(Yb9O4%9mrgakiSGtkWE!Tq&rXAVB9mF<HTk<NV-6>3
zCp}(FMB+{|+7KJRrYC{|D5Z+(J86&(i+jj4x))#@We0Y!<HjFCH%><k=@gY6WcmYX
zLqa3TOZ{|5+@1%p)txg3T9JmSEdxzu-@uS0G+S%QyTAbKRZb8$A*0m6HgPh%U1E#e
zf-AAfS%y};CDwQ}$Fb)at|~V}*uqGZu_S%{c2C{1L{;1im0%zQTXC(iyei}e&d^9m
zPf6x@3d<qGde)&qe9^%3sAq#Qe;ZRiy8nUp)plkPNJJeShz7${7{(jp(EPJm@;j(S
zJU|u~RB3uM8$xJc3C!^wLWFl<*$k8iS$1sZW$4;^MXrIhJ5>jTXl(WSSY+WVGvb+h
z@q?J9#!ri1Tz|y}coQ{TPFTy~#7b455#{V0r-!%;(Xy5hI@Ea!KPm32$($>~1q*NL
zOTx(|1fqV@ig)Q7=SZU$_BE3H&k}NQaz;#1)Q6w@7t(*3;&B&aG26w%{*2^?i6SQU
zHJw^RA(zEDGLznT<ajXl1*f=@g9YhdXSaLL;$qdb>o=^wl59Y=izf_&0#I+t2ZiD7
z{z?bwSBv0O`-}ly4vvG9A@dWwGa7Nk18O<YWn42;L6~9X1972~e)_aYH<|ecfI*bN
z57+L@0Wf15?~vIM-<1CAWRVRI8`;S-7xUS@F*)2wuZ@(mPwZP~-fIm}eY9wZ$$QMc
z=4n9;HgDXWT+`*4H;4jhzdHOlo*6t2yjtxyK^?WO&odqiV0MUJqb-+~+4j>_8tuVe
zOY5=9(y<B5e??o^UJ|P_LQ~rKKtH*;)|xK9QwVKWKZTsvj~B~h@JFX(pwRTH^yQa*
z0BMH%!NvN}RP$D8z%)linFw$^{5=AlMa#^05NOlp*6ReH65H3~HJO&uCR#sN4C8=j
zS>LKWRmwwX3*J?k#(c+X%tvdd6#}av0_N&5Jefl*VA=VdWkbvwGq^}(YQPe)e0I_s
zEzw%T1;G(Ai;B_V;(p|rd?p}sP$$owhn<a?hv6{vwQ1Zc(XMPUTI~J8vKj$OH&wb(
zGqYENeqL>)`jx7FR%HH(DdvrF56hz&<B(7p1gJ7rHQD}{6Wn}iIy7v-oTI|XzEt(j
z)q`$k>n8K6ISLRo2pALs-a6Wg#dI@Wsdrb8n?$0v``^)4zeQH+l+<FjccT5B6q2jd
zjQ?QKYJClDQ#It6lf4c{4qgl!r_3cX_1{KVv~eEM*)Xn#25^FO25u$O&F`@+uuAM^
zmS(QaTLH3SsiV`-T>J7`F}N~#VCT(nxMX3f&XlO(nQ41Hkk@2x0Wc(+60#KNZ;=%s
z(4rztB_ApB06o%7g~2WL7~Jb&a0NC^+t%YE+%3s%U^0_E!e>Tz5YVR4RFDJiFj!_Q
z<n>Zbfy{g0u3A&24#7ur`!UF8u$(M4%AFYn61wG;na>jO?qjCME38R<8`2kEeS%rN
zf5u?C6Dqa+TqdqEZ;cc4n@`-u_%DJUP-BZ~Gy}@RM+eFqk2QoY6oW8H_|iGZ(qwm#
z#1W^Q%;yYpx2e3DM&H413NN%+Slg*lO2w=@)nE$bS_VGR#s&i)uHL9Mn0b;~*{S^e
z2<1RXtcDu?2lM0yII@ZpQ*^{Cve?e;I%j65f^GUD)wYx;a~JH;g%|t0$9`Q1>BacO
z9!SN7>iUU`hj`Q;Opl!aAD=Yw0&5RmmKn*TCpQ>8carY`5mIHO*1zbai^y3!{|(OY
zLL*0T7w%)Fsz}wDnze-g;4Br*>F*ccWr21VrsZ$-1e_7DPy{EzCBvu?r7LY3v}}{<
zSfH=<8)3H&sZ3|<?^AUztGz1gK~97t=%V<3lcZv|A2jQJ`VUj#h;Epp{n%nb#l3-j
z<E!bD#&N=?ZjLEERcC;lxs>-Iw{bR>^e2Z>^(HZrym4;&`7<TkctCAPpG|W^?vFdU
zhb(;tnXhj3BS#OH^gUi~0XJQ2awh~?8hDafX@+#Ba*vGmBXl`u>nSJ)e+n|R@M;SB
z&=)7@3*OJAK<~rMzxE$rkiPt?6Nbe%4_&fOqiTjJ>!PqM>|R|G3TzHr4ZZlH=D<j(
zYcH<;Ua`-o-$mAnV;FNq5w|DTHz90J{^CxCF`E3-oeZPxo}=-Bx2PW+8<urmctaBj
zJRf_8mkdXJ6W1Dp@5u+$rBq@9fAvE?Ztz~CmbimkYfR!EF6mzsc~n0}Mmu@q?DQ?!
z1lhoGI<u3H!w&J}-bgQa+oQqLd9zOCen@hhH!1RNo%Vz|q{sq-X?~%z`p0@4Or2V2
zFFQP*(qd0gn>ZmSol4wJ(*VtY=bVIS5Ghj#brw{kVgJ3(ccv0Lf307#LuZX41}U>M
zQ4(eesYI0;$&d8ghi>l}y4{d1;DCKs*!ee|sHF{}5~+kr)Gw9zIfI~|TVI+==<uz+
zXDteE<ftd_(m!}ms<jy72EzWHli55}r|Rb@ALSX`U2}jr!Fvo9(m%ZbCUW%V)=6f5
zt}9ixcwX>3gB7^_|AStDAs29O{IJHi6lb1d5duMi6t4OAB~xANr!&jQY|4|q$-~n0
zSC|6skF}07UtV()vVEj&$D|TU(@#YlOLG#PH=S&)?fe8u9TFQ$nRhGl1s18&%r_W_
zSjIKD#OE)dg<*KOd)zf}6{k6wJbhbkzQ3;vJTA<fLo2x{%ACm!!q+@}(8S33Vk*Hc
z%95<N=ar(6c3@>27b4m4w~?)I1r4p;JIp_xxRF45!KvD|-$^znQ{7X&!<QzmZCzIg
z(d+L>Tu>`1yd1$-5!#CcL8na@L>l`9BNvho^k=DE;+fcM%)iL8EoD>~|G*!+UB#=U
zbpjQex)UVmR2wB3XyfWhI~ci=EFCePU<~z)uzoEeOF?E5a5-B4rS&)N&nw)OszorA
zKHoJlf$aE~3S!f;dn)9nMPi9;cWQ<0PWL3UpHxC>YK1D%e&3nyk2n%bO)c{%8*|NX
zs9W@!wEBb|n$E)1M0_9M#wOzaNuage&ktOLmD>Ymsu+qFael8iR^mpQjtaT;tVk-M
z6#eK*#7&si;6}myE(Hw1aBu9T_+9D@Zt_=f$;r9nZ9ELBnHMg>DxtMnR7$SM?PPeQ
zA4e)C&k#)>+HdDPh6_!OW0A@YS*p%JxVEzoSG??dr6|U4m^G~{(+9gu<?U1pM2#Ao
z!`qYVT3W}mtGQ;Ufyc6q>V}h5azCB<1s{o^tyeOozLLck!!Q&Zs|lEf<Vw9BVjWBy
zQf3HM8O%dX_Bu&dYmA4_V;ag}8~iFi$1j*hIP3O_wNJH)+UbK-TUG8ZD8fOBZ56qc
zHh=ame%K#dOC-ErG9Vz#e8w;bUVroaD$1$Kgww0YWNb3w5LjD9Ian}%A-rx({@c3G
z$cQ9we!2_WwBLD-T<**c2*;;WbwYc{*A2I)zf4u!bf*99Eoe*KKG=bL*5V7^>#Fn$
zUfb?n68s2<&c*Y-?p4l*Rt*dfnw0CP_{16~IN=Y`N)T2Rt~qAt#c|ByEFv(y%^(b4
zuC2sR)MUsiOLi}}IsI1Vmht7L2_k(3a8=N;VcbjU8y@%ac0fJ7_I62FcEK@u`Bn*f
z1^_SbRlYaVe<q(hqfPSMKWi-A`<IyRyqZ26m4B+PjSm>bxKeeS`3<?!XI!4M&k9|-
z-cNGguvKx43sZ;@`%m-BIH58-f>+6g<b5#ARvU0&Hm0FTv&d@L$U)pYNYgK6VlC*-
zX_yB^nv_~8TB;wp)^VX7V4N{?@lqS+=$dMn>pdC@<fXLelEq;=KwL3ml!7}RSvKSu
z?D@!edUTfng*m!AOur0^a&-D@d&D;q*c-dwgoHN>gV`r}RC<uA%Hb_h)F5}xbJ{CS
z!uP#>%`;|3CGWpe2$Q@^^He&i3Mu@sWgsY<?=^{Hy45Luk!%zo6&qB7kp=W{lkPao
zld~1%{wD4Tx0+=UnN`@ja9_RCia{W2(B;~W$`hv$uVRq1v=R}e#W!PCzAuM##Gecq
ziPS@C9DB#TntiAy843x2G$+%?=PHf4N>h&XH>zP3)DYBp8n$cps*`%%%QfnIC6%~`
z8~zofXZ9U$-snTRT$(=n+`*4!UM0P0sc{YTV{)jBCa&rCs|IsvACyW6z4&KxEK!cb
zd%S{`9nTZbd~xuD7eHn0-@eS78ObRV(*N=->%M7kI~#V2__@(x3S~rSLV)^m(hK@#
z57FlvI#8SrBQlv&vP34x9Q)}0WxMyfDt(%!phqF>z;jl66U_-T7m*jX-l_TRr*9vg
z-xKJK-j&l0L(<;+tjR<RR;k-&a*t9b(YrVPK|Yo0D3S%52qJ^?JK2f?tjRj+46i0%
z2$@@xWaT|@K=sJkX3LS;KS-8$v9_=Gi9^bP13_ixPbBE*LTSd)E9d#lGOp<lE<HhV
zOq1xXbE$@)Kqz0h!#RsQBA$0k%-CbC71Hz(6pDE68;h^m=Hutwa;^wN$Ldj{?yw86
z=LCl6StkR-^}>LyD|hl2*V${ki&!L_mEAnv$8CYVt~mQ6SnPIE*Nx=2b)_O{bLj87
zPTM3XvDs?r<lBE1b8WbJ$jKkM=b|XmeBa3v>#EFvNPLMzE(g2|0nGGtym$GGcR9zq
zXzuZDrgyp0yDaoBaqn`gclnhr!<f)K_;i%S_xNHXlV2IYIK+S<ur;<v^mq9<zba7Y
z^Zc(lT@K;0I=eDB-}gY6yxu1RhV6Xc&`~@l@YaI;zWsS{&3q5M9K`ooihP5OAFOXs
z6mCRd{>0X>Edj;(P3N9oke-2ADtn;1i2xeFoIjbwL%Z0J2bB=-EpqCnBwI(YAC~>9
zQ%5PCt)F(TohVk+&=tk@8PpdlRc4gf!nLUYqKV+iVG{6dwiZ3Za?-C<j#bd*vGY&z
zYnd?XJ*o2QP)&sA`JY?Ci)QQkM@y0&!h)Rt!*z0{A4*L%%nnz-%Bpv#PgH!3kbBXT
zdiQIU5$o=*NODS9*m=I*`C7&FWT|!NiHP(4*#yWr<J!)P;a_p&TpGF`Jqx}~>kdSm
z>2spVpO}ypzU@4f5xD}c5zHc3W2^Ocqw_Vw9Tb;=T$_6%&H}7;E-ur_)hDJ-FxG~I
z0Myr*8{#ElOySg2*m}DFq@U_Ut$sbduZBKU%%A44bzSPA65UzX4Lnq;n|gz^)^&#-
zDl_RV3MhZwYgBiTo0gaPGoRMX-wwXa!8!IE3YouMe|GZi5xkdLM~FjWeY1-{*KE^^
z?q)rO^`xxUk;nM|S1%8*bx`=5BtNr>0<JMd?a-ahN`G_k<-^U^)m?l~VRN@MTXX)>
zY~8f2*|G0vwzh1;RjK_O-4N@+{+(`$xcP%_@bYY9vAJd22ySrIw`JQ%ZZ_*?6gSj+
zQx{iIU`w}(c|tcT=2_jSnBBTjF=^eXm^XBzV&2w`iaDH`dI#VtNKO5XchO#eC+%ao
zi1*+kw<ugTdzbCrMXN4}Pk5JSy~}RzlJ+idco$?4%E?*@dIt7ciR+nMjme*mLu39B
z^PHvs6Wc~G*>n7VB;MC1v&pBj_|Jk~e7(-)uP+E9O~8?Es7=8!*e^9ZP1vk=$M$go
z+-DPB0}qxZu}9)5-?D+_6dn6xV{-ZPkb_8a{j*%|Ya%g{{KF~W5w_oilL*~c#C@})
zm;!zf!ymfeOPKz0vok%-|JV7ykN<D;zn}l_<LTD!&3+elX1|>Mg4Fa->gz+P`-W2A
z9!l+}nAwCZ03c#C<6TvecxTW~wgips{<3!`6<dkfnqR5qyJ&hr!Kfe<A<UZmA^*se
z@W@%#c7yMf#W;)_<u;+vv=W~JvSNBFv<xZ^qu8?9IG(^L$k%~w2IeRc&QQ#;;(z9C
zBkLG`262snk3ifa63b{0%7YT|G3}6#M&#ZRm^f?%FX7;5cepx@0|?FB&g_&eu8b;n
zhuqfT*WwbNp=-p<2*}u^q#8dgYrn#m?{ZwZx<BM>#LrrMpa}Os)<1W0_6+`~tnXaY
zzxvu|0vqw3yGb#PdaPSJ<6Dcc;Rq$eMWFh^!j1-?dl^>i2TX;ts1QTDv%=2a=1}|t
zbZ)<<y`h6!e6dpygYDSEAv3(K6dQTWdG{7;3B^kQ;K9Ag)a1n93$(ZnE)2ZI(_TFV
zty@!pt^D0u@7o)+)*L+TNGR}^cuzrcVvDtQ3w~NomFO>tXP@Mhsg!=HFF9>w)OUy|
zBvX^+Cxkmr4JXH4)a;y9mz;1?*l8&Ab;=w2XBf@o1XRd-18L{+kag>pP}fU^;Q)bq
zZr#-NN^$k$6#Yzqz!T35;5p{xV&7I1Ks-AS2;>s~qQGlZuo?`F3d^9>JQ$){2_4)f
z7+v6Dpjjf9)76igfzF7}8k}G3F@hM0H^<KdSce4&{KNRVtu@C^!ee3qH4I;RWgZ|G
zA0@GO2rc3Zo_CXP!T7LiW5XI`MCIw)KB7rcOk{+PPX;?~;;_=R!eH9~zCf1162()6
zK^&7b$EOw+X09fIrU;J_&(tth!ZC5#05U7D0U6~vMkwpKj@e3Fk>x)p5ABZ7TiYm0
zkEiYUMk%z`+)#v)q_O%yM;U|a9C4ax*VAF=vSJ!>G7d=?RNsK_V6dabCqxewagxY)
zB=ZG<WfddLiQ3sdfL4zASTyRq5OOEBYfnwcdWE%WAE)(ITO4f6(Zw_JICF|r9|#en
ze!0#o+rE9;*U&EXt~Zc?lM^f^{Op6GK6X!xM{+8xC{qggi6UE!TLH9&7X3W_=40Yp
z?27FMCgon}n(Bif0yL|WxJ>2kA?J9G_c>GA2@#N~^nlzhY%X|k34b2apUiu77=N0t
zrDxwp&xg%k1JN!rMb2V(h0A={kV$#lp`oVIAw?KkZ3ZuMgNIs-XVxzZ_5nI0<)`}`
zRHWnSz8}flO6m09&kaY?Nza_ir=VKYchLQkTAoRn@o<jNLd7RyL#Fc=rob=-0=)FU
zWXq~jS(RR)yaPuC+ssl*P{S!<sO_2csMFNzZ~d6J@LtbBzA}G8OGl`TqA90ZD|e#K
zf}ie~T9ip~D>Tnc0frv`E{`nkxwzy8g{Kwb{HEnS@s7oC=J>b?JhG5ODE46@SameL
zr*J!RWHXZaz|C5_INSlp;@HPHEd&5*D2u<lbn)kihJ}Fg6y}edAK8J1*$c-E4hPPy
zA@sq5%<*c9{Ob_^4*Qmp^dA^CSp}517a~|}D8q1je0~{Y^UDAX6{Z~BWWB<*F}`en
z7ZWvr=t9$QIklFlLZB+ng5$6xu-!N<H$97Y7DJ7;g?$%te*Z#$bI8G?&?UZj|I)>u
zcN<t%VyCi93^xC`{HncmDl-#B;;{Db7yM28<wkmO888^1U&zO_f0QZ9v_H50A&_16
zdX*-h;sabAylUtO(9ew+8W!Dc!1c@gdHCWlXpX-Ny?YV>xU&c%fOr0g@3GpQ_?NHU
z>D0}2wuYTFBxq@+@6bVKWA$OH<7X_4@r)0D%6x=G?iIXoMH-XE(Z16?3YIr%^KOl+
zrL`iXYZ?i}vSp<6WcBv%WvctFyC1Rc-s;Sl8>-$CcCMW#Me6{5%YH>Ya-MCiK|ISw
z*9G$+N?W8*uAqN;_TPVmN5=kJy&l5vtRHW8R*5@fg0<$xBG%gS@(@9Ay52pJlX{8`
z)P8)*Kx$@LDE^|Kh;t*uMKk=?nzM-(T-ddzxa*A(@r|YNts@ok;?<Hc$DkKh`St@9
z-^Q*tK1qb4Wczs~BXF8wt-ZLe)Vh0r^85a-H%C<;4h7z^mfLipd8)&kQ1v^UHm=@>
zGqdBh5mQI)<SoW_fc;CSKs|Guoy7Rms)opHBtq)c9{%_8A7*ZQEUhMGfxb0dURH3v
zz_fTOqU0rE_euh1rb1mWmka=}v|BefJo=Tc-V$n|WG^SURkx(;6>LH9I^K2VTwHc_
zj^3hnxJB*_71r9S<fXp8GlvOL^T*Gf5sb1PuAS5z_#k!~x?(p7BNThhnOU)prVM1R
z6rCE}udxgk^9q!D6K7)_2I25?BY}JlJr#=YmXohCCemzQ{Kb*BQxrP%bkx^nt!XWX
zgyIhj1|@vj^K57ta7+n_f)#QOg-+WaO;-L>UYq_qx7M05#2^?+sI5}mVU+`>)`?}~
zzw%CS{PpiyYj&z4-+oTWMguR#9t|z~K#~Ki{W>kCYg-EIlF{FDvzMlYlF`P3>OJ&6
z@JP`5(bn2+fjwfzeMB}e&Fy-z5K79dxZYie!OvR?HP;ESv+)f&4BAmH&m%FD^oa$x
zea~5IV+G8OLTBHjZ&dG#AAzf@FNi<EnmM;VS$cLYt|hLV=grG51{IHbhu#Xq2`+ai
zD@+iD_#)j{ckgf*r2*y?4(M)<Buks>s~-zHR|*rF!#<|`&>-dAYDD0*M;hFU2D)Nz
zWPZww8|05n4e|-+>mr;iTUL;^ySl&nuQ@cPLS`@l9W3sI-_&QVIj(CDQ;7Lf;>@i2
z+xWf1;CF$kJg-rCx3sTRVQ4O{92tpkF5Ma~E%UNR0<SOFoq0p+miQ;@?jz0(bC(Gt
zv$G?VLwd2xqqk^s&^pbI+|)pYR<~p@TXt@cRr&DUub3GV5YoPoeiGWm7;nieMycpg
zyJ4UHts1PAXY;|Ztix-`9LIZaT}|Gljm?9gUqPn8@B(cjw9WB7ZP8?7p+`@gg>z+f
zO&19eUB`KaD4UR6KcnuIL1<pK2Jsm9%`=^Wh7=**abt=X^WDOzGo#GufvBjmLp{!n
z37u(tOmx&2xpi90@B{gFG;rnY1!L6tpJE#WB(`L}&kEcev94p|J+BjwW__7;YD?x@
zq_bpdkvLJaXPBspFIz@x%Hx!x6OVLDCo<LL!0NOYfGFJhK=tA8JstM-lkw5&ebqfk
zTSC>F!R5PIg$?$4bnIJRhhddO?+i7Q)w;+T+GsPnS88-kZiaaA>3`#c!4bf705eOD
z`e<JbVZAgB+c-LXV%v9%e6e!QDK_u;c0osd;W|d9;L%<KpqePYQebwRI)<RAIUX!5
z#!YImq9Mf(FI{Xvb~R>~6udRl0OAOSBY%i~`4wlYvHne`rz#X=yM~u|4eq5atj)^+
z;=qwbqd7QhcV+yoIJR6kPy9mH9)I?5tM3UQhEcDA{l>3df)|&WEf4b5K<sJ!iR`K9
zn5q7IHV4kkCCJuVF5`Ucg-dwb3#a`Rj$PJK*UTk(=XF2AKfpK?8<mZ0leFMsn81c3
zuF!QDgmB_pGyuP?-aLpBTpjQ+Pu#|!TR#_)cy2RP%xafxB;;NS<Fxj|Lff~)a2JGX
zB$y-Sx*u5WT`ZIFH+-pjKRFTXK~g3ziYAM%?>ljbQ~}1DeZIquI6Z7%!Z7F=N|0jt
zU?2KH>;)1o^jUZJ*uGgU;Eox7YsK#=+o_)$budjw%QX!%Ff|(z;xpQ~dcY<#z${1M
z_1H>0&6@sEjzat=Jt64jnubF6#tB?6EP|^TgTEuZh7?EOi<nre$9i1FEVznIrID@|
z@m~273(ncj;jY6cil^A^FPi0ttqA*`hOL01h*gQF*lBo*FDF+YljA97iKhrBr~5+$
z$0degy&P7Kp-&<Mvr4P?!Br5H8?J#`#aPhS96@$wjdS)38l2eqTTBH&yR<M1_#v*s
zS|N$E;;a(x(^`8>Um5=7-5c2-AGX$>9e68toO@9TI|DdXf)rI`{*&pi<A~0zf@Md%
zh4W<E!rDI_KDu~~vk#vl)2h1(eF!VvsenISz^)Tc+Ge%<a<Ukssj7&t+nruwtu3{x
z-y#bUGG&hMMb9#8C0P-=E{i5Nm^CxvdlQs8RpVYLZ>^8^g{yZdJSANDs8IaT0(WXL
z!G~CgaVg#1_tmVxAa70i@7y*b!U&B&&(JF0yP&JpuCo#%X0$*{gpAK0k132D?XlK8
zDGG9IsBL}`S^q*$<Phay9iFN$gB?1AFEs*KJ+)&`>r6b$?~L~%J1M`&KC~;|i`1l(
zz3{4heKvJa=v)|>PLF{Z--O^{Keat>_?hudVq<*!eLJFoU9la^K!k&D!443|x3MJz
z70u2FnH+;9SXjkVxHE--)kDDQSztuLkVu3eU)IVm3ImuizsAT@GbXdmtgr<kg1~W%
zSMma8nRWMJ(1h4IH@4Wx4Thbi>|x9PEDq8g9sdr;(p$q5%OHVa#(7OG1i|oUCNay0
zyu094uiY!Z`@z6~$QNck^>fpIflSgzwJiI-aoGFcYmHK~zeuv?Etv@bdTi~^=8*5)
z(AL6&L+C*VfwM`i&Qju|W5wTSU)O?HGu=RD6_m%2ZgwuU;Ds}5uI)4$n)AO{1WZ#_
zdQ3yRs2uX$2ei(Ij45p9E40$1qeETX!<s>>v)wz7kB8np!n@38^UD)|(3qTW_=8!c
z9&=!=c$u1<7{qwZrA5epL+;|@sPo-2W;|^q9<6iZghM@M(GPVr6fxT+b{fHSMvhl&
z2kK{A@k44FLJ@@Z^R`)I8VfQH0b8w!p&g&)tK6cf0x}h37S^1ylJ-5o!%&k?%InUe
z??ySJ2?=OIDE4HgMHzQ%XpMsqV3*$8Z#plNe{UtXR{oA=4HfriGMKlS)k=TWAVzF%
z`d*XH5_IDP19U}A9Qx`u-uA`Q^CxTJ4d%1LXpn+{#ONajnch59_!#};oqUF#tc?q^
zGhhF>b>+91Mp8Xq4$Z!gMFpYy%GsoOt8>2o@oS_Sbz^GfY!IWsS6DP$1-W(Q<)jxI
zO(gofIv%)4VTkszi6^v=S9pnkTYWgFwcNyaeEz6+dC9vR@GeDODaU)4&v=(}bkR)B
z14`cQp#JfLLH*-CPybk0;8#t8K%PEtxc*Tf{9F3RHr@%Y!}X6wUW?RfL}2m6)~}(B
zMA&6)(URxyIPr9ehf31jJB|!w6_A+aB+p-`7g+^ls%{G97NqYb5A2Z9KA!X;?W0h{
zNbD6KEk0cTI4j~1GyWloYHK@Zn$Wl#@287Y;He@}l3j-kV$n1AmypU(zGtH5d{`~{
zE^iK?3mbd?ky8uqm!57}S0{xUEhS?umEHW)AK@jops3QMhL-*gThB;xT{k%+sWyF}
zAGb{mp?*f^c{uq4gKSc7@;TpxQo*c}Gw4^gdbbHBryUHrHcHOfQgZG@B{@3myio7V
zM#(v`?9h`DCy0`B&l%V5M9KNYFeT@E(c~{Z1?P^4(=w;gnQhwy*t}n-wdmQK)00cf
z-sTOe&qrwY7Sx<ent0KNs&lkabq0;9Gxd<Hipa5-KStYGFx6=->xa*wfaYn=<z)v^
zc$OK3ry4k@8vP$@FdzRPYB1Rb&H3~H(_k76W+ZuM3ph;3PqTqF?AOV@%qaz{q%bHE
zVMAsSJL99g7?C8=R_5nweI2jtZ3OmmGVFhlu-pJgbMRx;ovEz4bD$(fNQjMMWj-BC
zM3T2JU}iQZZ*SpJdl1bdxYn3lwU0+yypI;w4)lHIqm9a=Z^@h3H4)%`P5Y$FOfR}y
zUr$EAID+tSQD;}zi$z2rhD!OREk%ipo)jIkW1}av(UYQGCLlZi-)~M$?JXL`-<Qqb
zwE6qG`Mb~jecSx)H-FzR8Wjm_jQu*o;vO<|wXaQz;7DK((UDo%La8<dyp$Rg(};Y2
zaoB!NI%^4o-G(W7wv^rpUCb#JyfEtPMG!yR4ji!Bm7REpecv}u?Pm~*zLx-_aG<!s
zGvb_J$HGEHI-~LI@6#e4-*{}-o+8}*yG@1o5{*o*pM%2&O5vP?q_VkK>54J><2KT<
z9*vw;9~=r`Y>eEE0`nzopjz1+7RA%Pj-qxHwTtMewWbGF-g%zDG4YK>JNBf19%m(g
zgs`YZEDbx-9d$+C*O9;#1+8$(eA)V<wRT}4vEo%@@)FekXvNm<3~ayYu^s9AXcnDR
zftd8C8&%u`Vy^M0LfBow)~&CC9cu3|r0mU3Z148+|K-}w10ievEhALwfqH9xy9vS!
zm3|9z222^|yu&@F2iLGc{wC%T^AGd?X$&CV#sp>IqbLomg+2QF_Acn%lO_ClhCknW
zRK@;0(POHc|DKoEdiw}BPxzayx1T5DAu`Tq$+!lBW4`+4`+Rx8`?A-3iN%IBpA|(l
zS#KZW=1JYWzy}8h>&kwyk1yym(!8PiD1G4$eSwum%M1Eqn_Bl2RFYCv`jL$=Lw+lv
zumgPAUE9egPm$?J)~I9QQ*bGIz#JpTRWtIdN8AC(*fy+A1X-oDru%kK)JWpfyY&+z
z?yM#ZW9LN9nq^1Mip_RXzWqDitnNvc6OyE`x+l=TFrX+#%i-a$o8_cXJ$qE|#9W@;
zqPALW-G#$>%78}BjibRwV%=KSn4HLlQ};1Ua5zt%yd0koNfSdGQ(`TqCi>!=wL8;e
zm+QP34RT{m2ypH@o?<}&7T>`B)=?qtP@y4i;~WCD#4h+4{>UZ13k9qH0OGgYc&hT!
zW%2OpGN0nSJR5Nu=R};RB8q3$T3OOpkw<^nXd++eDsBw)wq6u+0~i~=9;#k<yGnG+
z8i{A_UJ=aCpDaE;>`ro<2nRC|J2B*(5FhZh-pA5;ymTMAH?6NmlP$%4JLF{o`zr8T
z{|%n!VL6DoA%~bdvRKZt304~nzXto7qoJHi*pQta`N-#eDU@8e6HN0E^hqzbP%?|#
zEjxvH)S=mQ1Ub`ukno#e{>Rs+Y2YFChw9{OQ>U=os}o;)W)=;i_<Wd@BOv|}dYMD>
zxBotxr-+w#bo_pD2*0D%PejgYB)kRE&F*CB&0Twl7hcGozq%V0!E$3R>DE_b+dj$Q
zi6krK?2OV~pXX?nN6%&Ze(@|5l=gKyin5SB)J?v6_v?k+d@|HFkTrLaYQ{>4J7i|z
zRPhQS`)G4o{#Gr8?zd;tU}Cr%Z#i=!$!H}Wr5YjsT~_=elOq;vL@E%iehb+$ID{(z
z$vdzhi2C*ub=O+Hn`|L>Rt0LBkTa_yb{waj1DwL=xOFjyN+Q+uv!hr7v`gtnWr%*(
zNOHzW<IC~kZz5GoY)w>`j&S8k$P2NXK%vlW%wXd0BGY*nD;RX;6Z$4Luaf=CR%8G2
zY9Z!9*uQKnmdMw$f0>zY|3aN#(h_a0`3z3hO@utfeGDDk>}&Oh(6RZPo*ikLvcb&5
z`tvr7(Eh_p_?gXG^488o;nRARZ!&X&Fw@9<aBNPvCu85zx`;qGQ(BT!M<V~gIOaG^
zTrg}|6z;Hs9mclB*BN$hmI!ER<w@a^8+@{IIiCe3Ie~NhF9)^|q0ssfj$U6X#8Sd^
z2`iU(XwNf&Es|Sd<ub0=w=r`%-we`E+nta6E!{SWc2>|kmR;I0x3KLnn)*+HqOd!}
zw#k%o>&YqWD<E8D=D_px!Vvl@jS{CAtoDAsk0d9K47*npGP1FmeCsq8LK2llYu<lk
zbF_V_z-m8DV7X3fcVX1`&ZK(cTU%@DeNz@Jevp%J9reZlpfFol>mO-ySZv-?R{S7e
zniK!Opu8-eWL^WOKgw!JC463eLF>O|Z(?us{Z##s{luG!YvY&QLshr~=b@lYS^8(F
z{gDnxDn^o>=#=e4l~e(K4*lbhjv<FV$lAd?Dm$1$*`FM7rb=9xvx8ZDif03}z{lqk
zLPfL2`3`4}F+gn7G#s)M>3iD1)moFvwx}lAg7^aC4K=EYMvdd4jHXUXA3>*2<HniB
zRb?CJSL14s+gt5#QZn_G;c!)*VJWx>gAZhW4K^}cr~jky`FQ&m&8yT%@CApbhXj>6
zceObT<@7t36jReAMsM|4^~kvd)+-jQbM7@6>f-GWXvOn6Hxy?IhlWP(HKqV3>{<qm
z7_dQQ$&GKe^A^_J`VJieAFq>v)2YOL^7VI2E6V(g@`(9r7D;{Q@moV*XD%`Fc;O3c
zDD2oCvu)5SKTcK=tk#{Tc19GoAZWIR*xDVvA?jTL3!d$JJUpop#63kQkd^9DwlGUC
zVh2$0_|BW|v*Lf@i?(;M$a)-^R=lgQqY-2dVvx0kXM@MWKhC8QBKS=W^GWIWY7E?k
zb0^U}t6h^67w{s4qL=m62Qqzp8$rruI~Y+6;xCT2u*LDpxL~jhIae*AAfZNC>vy8n
z`|t&wE<^VVyE@BEszyhOgc~b-t=Abc{6~-z8{}M#;0-RgRqsOTb<cBSh0cv^m%dK{
zHx}Cj>gYJ8W4g~-P?$MR_<{22L<E+yyYIVQfH3w?qTI26hpocAd3Ir=^X=JvKQn2!
zVC(EXFCS(aAWNJ7yY@em8|ExHiv7<4*uP=+GrN~c5_oj`AC>Vj_A|dVWf{B~ZvSJW
zw@|E1VnrGIpIf^;%clQ^{g0|Xn*Gl?A8!Bn!S;XD{^#$s|1}(UWJ$%~!K-Dj2SIzR
ze}-B9Oj4SIiU428E}pQ^le!D%1=~5)UdSuAK4<*186^!t`Rc8P?jbWE4hj(A;LtvZ
zh*r<8>K#_cT`d2yFc>lfLPc_MpFe*Sn#YeuIoI0$Cf}fg_UwQDTD?Q|Kkf`^Cpvvy
z)mRO5qNi|Xv^Wc8J<xX^<9z6;WiJlg4B477S9;uGrY?L63lJXN+x23JQ#X%3@h!q$
zzD<_<YPWj=`9-PoRluS@<y#Y-4`pIq-;!xIG$P2lkCD(UU(rlIbE2rL|HOE&pO750
zO6YTWImGjLNz!~95da)}DXSSyjg9@rhQdk6_rk0=2q?Ptd=foC()OdRtL~<Gve4Yf
zccEpy1)Z$sPVo)C9f;7Xd%DucNIorZf|4OpY>_0SUgyK~z^TI?i1os%7B`DMP!M~d
zAof5(?147QUZQ@;9;mp6xIM+b+V1n2;suM!L(BTr=f#a50-uYykCVbsV1UE?pnw4&
z&>Ni&8Mw{!N-_1%Xz>b5WeZ#MN83Ff!vGYS?A-cJV{r1u*LJUkKiLCiJSIHpkywx{
zC<)OJzUtI@20}925*p?iZgmQWmTeZo<`xC4<jj2JEA)4^Zwv76653KAg?}3<%<*uD
z++IGV#!2nKE_k;u{+bVI0airzp%>~;d&wA+#$S`U!80~m!qc7xQCEI+P0efm-@T>6
zFQE2CL6s^c`trO9HN+__t_hEy|IYY^_o!*FP|=qT;b=N=IMyRumkI0`!|(%QSd956
zrk`vzwFZ==@Bh9IN-3fXTQ4H<kPQ)bm=UV?5lD=Dtm75+0cJ(YM9G|XMCSfXN+zRh
zSkg>LV*sShbfDjgf1WEj!_`mHSgK%J0jIlD#0sh2LS)WJ5!gk$>dAHOJdH8-Kwr#)
z1#|+>wqXAQF4=)S*#G<ob7YYJY>ua~KlwJNDT;4!X3p*VQuezKA(+|^hRGHM&z3WD
z7`D44JUZ>oQa+{`$>K3NWbI~}n)zw1i50nxo@okmJt)(gc-;hFu<ghu>$Z(qI~C3(
z%_?$d8q@ACfH)Xw+mq|&Sj)%rFvzN4mIC5z$*iOg9zSYm3ziaeyYGw5s}4QAY`38+
zGYwtIn;7I_C~5BQ98sB>BPyjt>GSLp7j5^5%DQ3pL2J=*8LCp|fi5gQxZ8@ahRyJ8
zWVUI_J3Z`jp3F^r(LSQ7dE-=#%@$LBhzNYl<j4Anks2Hyktx|ng>&{%<uzUo&pzt;
zLHi=CQ0_q^X?z=cb~}nV%8aUh+Ulqh42O&^@@|=eGU5HUq21Zp_at*obBs^F_d?jW
zi~E=HYf;^+PSsm?Z#I}mZ*ut7*ErbTkKm0=7};+b<dGfY5PkBz{6n7xDSehc<&(Vi
zIV$xVYt5I9_0Ff;uETogcxftkoY65Yr>BH3)k5ITU;@uFBn6_22K-ne#&#Ar$3un1
zY-y5Hi)GYntaz5~gT=GfY|cmrD=VIsR%6AJ$|$U2di<%JfnGJZ{&E6t+3O<dQTMah
z^aO_qTm|2d^9}~M6j)l>&S~od;6?}%Ap4k$D>;of@$8UJdaOACKPx?47x}`7d)v<v
ztwa`<YVh+#L8J3FhtV$StH{nnGO{%Lo`?kAx7yD|(`XW8D~E;54oZkU2k8)9fKKkW
z?%r3lP-ZgDLNg)GTIK9JwCi*;A?nP8=z0Tt4lIleqagf8#i~_lVN0@nWbOX!()zeJ
z3pQ#NNEWC5<;mh6_RMGm4d9j|@tIDzehk!TO>3pEXrZ5*rIkgP<uc|i@fZDyEdwfm
z(HP=p7v3G*O*RWJHY2++oZK)*3$NDQQg7Yek-XmD^~R{`w@kU5AR&zRB39~VhYUo^
z@%5apHP~8n%duK%!J!u1v=QpbPrq;xX_jLr?aW}^U0vy?&3|k5Q9-yeZ}IiBWiKYc
zl4pvr=!6h7LaXl#sPS;95?nF|SWft2g<aPYf-GwBHATSXP>h=9t-TLti-LJ^k2Py=
zt=8VtKf0EQtBVq(6g!3Rq=T_ZT7M%Y*urc5J<8D32%VN~*3jg}#j}fdj@8n|TJ!=R
z%E4u+mN4dJX=Qp8h;O_27`N6uFSn8#&5;FpKP<)6$>)X$lQpH7qnUkGhUn(e58Ia+
z?}M)Twua(;Sj3b|!hmHcMU4lZQ+-kA#rnYOu_vuH)7i84%X;RRw(rPz=DTD??xYnm
z>dY)-y+8D{Z{KN$6-8^;jx^%X_)9*gGjiw|iBx$Q+30%|W;CA9ic*JGgc;0;O&HLG
zi{bO4rT)<Px_3h3XTTVDVvXb@G8geuV>`nELMwHLtcD#9_G*XTV!p7D5;W=mqxoXH
zGuZn>fxhB%7D9Z^$r2w9Qgno}#K&5BH4FMthR*mD^@c8gRy~bJu_4ke=ACK2)m_};
zG|cTg^M5+O7anbX_i18(v?cdoDcT&*v_+U)Fbt)JVK_G{7y6hf0l%Ob!NO~}QJ$Cx
zp=2>}8naXDku0xpA43_fEHZRc)Ld)=W{|<QcQ<9(1j!(}Lr4}qTUINfZL^K&a`H@g
z1v#$}ufXY7W5Swwnl;ed@8cW=k|1J0NHbs<!ue~K9<WIF@V_%$B=gC%S{H_$sV9{0
z(U|le**BH?J*x>Cd;<Tcfqz@EUM}}*b@mrD23}q8a^?ZEI=6|gi}M=??rrrEzwiJI
z+KKgnhuMuir2#z<;&c_36Kurp#)9tdheMJzsueTl4z8?ulP>R;;M6(xb*T0zk)&VE
zT##MXe)3(|0(l2COXm2Fse?-<CxC7MK<RTUWH)2lnHR663P&ID-V2<KN!zzI{Hb7D
z{M|{`%Dd>ydP%b5ogq89I9QDvUo0kW_B%V`hfAz@AFmD~!%dtC65*evbgP~Vt;FYq
zR4%cMx_ViuH(K3J-BMY<THCQ$HFh%tY(p5K`6E)#p&0H)59HQW>RRm9Rq0xy-5l3a
zx2{IlGORvig@GTFntd<s+(c9sKk}$5bDX?gFAC!C23t=_+M)Fq@L>Di#kr4#7rw2~
z(XGX`_$gU%00-VdJ9&dYYgvn<ba5<*d5}E}9B=w+<PhRlm@Q#~Qk$+WA1k>_GKe=i
zQx!f8%ldT}iTCzLt2>jWh4B~r<L{PO%Ztg$Jr!?^cb4EYNCqJVf$jxwW->-5i7HjU
zRJg=gLS!B#m6*v+wCsp?P%J0!@?tV!sEbj|ql!_3z@`MZLB3t6c}wEEFIX3(oa!Eg
zTbxi`{u~b)937ZkrhBQiUj^(Vaqo`rRmL}_csONRELbSmE4;+!byhIqdp6!r%kSkQ
z;|DUn1u<V^|8zI%@3-Tx^kdRh*l$<w@%2QiAEU$MUa*EM=Zkj4H{yeSVkuz!L_uKV
zf;akpF^I)>G8VL}A7;j?_;`Zi?*v(1;VK;-Q)x<Nu;aWtK^Udsl*}LT{W&`{8W5T-
zp-|>*Kx*2%88Pe9PX+0j`jDA1;sd4MSsYs`Ii8<v6k1x@(HNxAb~zE5YORg>j{w}l
zBN_Rdk^DE}PN{5kUbLO_BJR>sdbji#u=@Mx{$Hb)ht<m+UN5cXSM!bODN#S^>V<B(
z@5@g4DD^ZmBU@gG<<w~mP6b@=Q_=gGfA+>X<Q7*ti0#9r?>pgR-p`ywesm<^QrZ(f
z=7>20o4>yO-TC+{p!9L`@g?4y`KWzV{(L<Bzc3$bJKc+mICxmZEVZ^d7mq-!JwkE|
z;L`7paqNEnh%=uCYqIlD6HsYqkj8z@;AH&2IuB0<hX1vBSgMgb`aFE=sPpidym|On
z?pOW4`S*9`-^0HDf6c$zZCO`%lk!eZgmL-o^oVW{ZAG3{;(u+k*`x$Jrj*BC4>{en
z2dB1ORXlKW#Mhgn+<A+3-mQ~z_G2JrzE6(|bxbLXz3%KwPC)5<Rl&f`@=kUfj#m4{
zGNS6hLFxBd$!*`Y%&odAm?N4pxHF5fi`O~kP3do!X+;m~qqjJw9jhH?M3h&*wU%#E
zh0R@^CCyI55u2k9R(k`aA$Tx#Y7BaagOhIK5GKC6GsJQMFMg@ba?*Yqge89d<Y&()
zD703d%oprW^%tPzl@B#g1wpRe*goz<^?&^i{`7TO)eW7bHuN0zl~NmekNQff4f~Gz
z3K425c1xoO|6-aKNj7mn`tZm_Gf<Dfb1+0jcGs(jAGhX4g~)C?ms$3a;<~Ld(<yF$
z?78@hlQ=lnS{<qGrt>yu6@o+jxV5$natQo30>7psDB5G#w{0%T$vbmbBJBQC=P3-w
z*7Q%3*q+eD#1&AZzMUTb%=_!J?=!b#-=DAdfB29*mcjJr+1t8;ZZXVI!~3>5y|9IT
zo3VSvs2tz2<GZo)I+d3Hvl+JE@LuB?Kfmp1hHmj9d?1sQgNN-B*)Zj|t?hQ#M!)S`
z+KaFwJ@lC7ao^D6J|6pr9{UCV4aDFfK4P-8gQmLzPcb}R6Yf8Z?-BzW7WT2%Kjgu~
zp}&0(lQ1WnkakH}Pdt@vtvCZJ?f7sRoAU6B_=x>c*TTJkv3A2bhyo@)cwygTpFRIS
z|FF@%Z{_yB#Q*-@xxcjCn~|wNywo82clQ%fpZa(zx7fJuu-zuQdG`~x?`e|?cje-5
z#k%_`FRzzs^6CwpR^G#2-Y0o_H;M)19T8`C$z_dB2^O=oWQlhuJ+Hl*kIoZ16-GOb
zoNBFjhB;%qqX^wt5?P;XcEstzVs~Ssvn!%-&pWyrt-GIY^mRp?9ui9JuFg|s(Mw8{
z<LQyEO{dxq4R(|rZPeKmweEhwG_GsYakTEqi0>&1*%+<uj@)-8kXZ~|NKaATspQ3T
zLwB@xmr}U1YkRVHQI3a^Ha%I65y4xqZJek+m3>U`;MR)Pt8M46q2##Hk#)JsBkKpt
zUYF|(-wR1${7tJnRd`qDNpzr-V#}Oe)i95v7C#b-XG+)tVbC1!9fbvkl(^tYw6=su
z0*eA}Z9HAfIp5-8T|H#iK4A~S&F<RzDXQCVuYZ>z|KC?%asn-eul!<U-4-6c09J4a
z%{NqnwFbNXE}z=sHS1XQR-}UCP`jb=m*EBKG`$+C11K6=vgc&GcB8#+uqGW+bLd*y
zPyWGqKU6WMANP4oMm|2^@4)3C6CfyVof_{yruFoAzb|%zdow3Gkk6!N{L2v&z6bCJ
z>ArDuAi54K_ZFNzScJoaW)y~5I^y1p;oB$vZP6JRyXpJO&KrZsk~^%u;oA6qn7-E?
zrHTWpcwFsHRbA>f6mw{Fq~W=pp6q#hZwW}1rLRTEXN>0!m0P9lhn*z2>mimy+SP$3
z1@A;%=@L#A#@_0???dZBG&$`96WcTb|G#)l)csT=JsA^n7F5-C(zHRi#b2MKZCJ&F
zo{Dp+He`f<#VmuJ2m63AMoq6p$Q&1u*O96R3xYg4e;uG)j7Gc{Qo>_7AsFDHQch|q
zqxDi^=kEI^gw`2zz`AL~=lUv*k^u@o;@u7bb6%GO2?!EL-1jZ9=wm`9%2-Oqh!di*
zWI>!eCPbkZ`RkpjRRCntrl><~ioXtgrDPo|c0pfX=;CPdw{w}}F!Jo#lK&!;q*R01
z|Jm+j8+$(-8N~_)i2j>GAV&M+n`$`2$l9xzIG$VCdV1ygJ+C+W-Ry1+c!w?p=OUb<
zza;B<-MH<wtu@yHuky<HE9|uaSMo+5+u8EK4MbPmrb>+T5UfDb6w)Dzu~#}c0<7Ij
zA3ssEr;>=LH;vU*Kp>0@`|9M_7P9CWwtpVRbn_mws)@v7RRhm-Ict@j^xV}l6aZy&
z-xmzMMeaCuB<F_YljI1z3l?jWLo8JU&*uN;no#@*+Uk1&5iTha4vfI{%&3a#PHW#1
zDCB9xEaFuof%on;cmtI4?Nsde4Ha-6r;9%lS0cAVgi&7N?D6J<CZviCkE*Z(c>diW
zavSfGSG|QVaTK;P4-$2LCv9f-?h%pr(oa>KW+mt`lF?f=XzmYI@mD?*J4_i<Dlysm
zscv!VX+XNPvLZ@Q?utg|mA=tgc?u;`KT_TZ2WfGyILaSMwvMU{4a_PN3-Ec$2M{&!
zy}pHyne+F=Agg0sF-P6YuF4!{VJBtte>VT;GFd*Wy{c188F)ex1nEVp{Vth|>W8+^
zH~HGK1yAvLl}SK4qHC(o7$ANKfZ29N1PUnS1$JB=Yj4*FZR#;SWQvsnC_6i&9J?lS
zo}pyu*YVK9foUh5(TOabCoOtVEip<4Gev*O6WrCj${PN*5><kxM{q4^+QtN$CynM9
zNnKLGY<q(hd{dCQo)Wz_n8y^zL;1y(nJ;mdZMSKz!UL#*({l}+UXy92f$J21DYKp2
zAcJ}&=$LVPAF)^FF<zKyn)$7lMf2(6Su>pj_B9W8m*_BGrKQlKuYbV|yfN>Jpzcne
zr4D`|8hoz&Ztvq+Q5E~S;y~JMV0Qo+(2P|`8)er|_sXhYwgygUR%L}7oW8v36UZU%
zHN`OTZ7aNAaW^&^Fy6{X5yvY`b*e5st3aLTTkvgs%&O5Q()a3<`)RYCy!Yhb=XKq1
z@~#Pb)qZjTxRBn8XpsAfq%r0vxwC?F<%D>D;bm74_b_z11o~cRbT7oU7J)4Moch^)
zKOW+LJu>&q;QQS91TS*9^WH;@Aw2l&IL=!0`KieXzc-zC_M{iyeq`WKPbg44!AiV9
zA_{}Bj8*rBJL<|p2eFJuJS#Y*id2H}ofmpgG_}6H)9R?xd`IY@ckD_qQM;is!bF>%
zoL3aim!F_dUr)@lf_i96s=>JD3s>*MzedBx+HD5%jlN!-0*P%d2vv9WeP!74n72|N
z{TA6$YZ=<ZeevF#?MHj#U8C&L4Q~hA4_c1r;+fMbfo-u}>&hr!OJ+_hgVWt`a@LV`
zYFs3_w6ZWu{!tQ2K}Zy2Y|Qd|a`gHEtA)db<RTO;-Ci5)(eNk7*Q11VRv1c^^3kkt
z;E4r0Gcn+0*6EP5Gd5Z_oC#L9fd)L0<RBHU?rwCp=R*hwuZ^gnlEqmdb@qLBXuRqF
zm|^{ojNVH3zehj{b-g?GTvo>B;g8dktyW&p>yuNk*-Wo52L{*(+X1-FhK*6|fS1cz
zb=X<_epn8&_SgH4M18NO=fCwn#C?h1#=SsdyeQC`y0X)!s85NfRED!3H%Il=uMXj7
zU9$WP=~?4#WQSP#LTyVc2MStW%Y4Vw;9*Bjel>&|cw-JD_cokPAE6M2Z)%6ir~9Mm
z{{HxGhJUvi{+T7}|G8{4d=a*T^q-pOHBJ)}??7nGI`z74e0!{pm$(TfZ^EbBk<4k_
zI~&PLn9zjCR>=26=47sB<ueCwLzfb#K6DAWwca;6o8c?|BHvIY8fy3FmA0-hPP3)s
zYgLe}IeCH$=!WpnEfl{rH{vphG^Zd<`di>}Algn59H_Q4{_aRC@t>M%h+H|uaoa8x
zUY&}#D|$>dgy}>OIM5o1oHdR0HMO8dv?}o=NF51W;zv;n+7HI|f#^#wS<rXf5d2s_
zTB)o?f{eM5vqq_An>{-$!I%-0a@Hk`Hr{ZG_291PfJG7$Xq)rZ6xgBy4S^ge_Noe!
zz)EXYAw^f+15G46@*SkAtC9GFZCqI5K24EEej+{49VAKhnTfa$mYKeJCs35ZhHjb+
zk)$c6iL@n6QjZ3sNiPm#Xy7(=Ey@7gLrH*Y6_=2+;^*eFMe4qF+(vy*huk0D!JRrv
zaM@`~B952$YhMS*HQ~{3GX6O4N-V%-DDBo_O34KVCvGAw2ZbUQP8+S#9O)%yquzy*
z9}_8Bak~N0)~NF|(VyqiWku>NOW%t7TDj6I(>Jq$f<Rd?Jz0E`ZPjmT^!?KNE=-Uo
zx>pkMDV*!Hibmh55%&^5?T$E?`0Ft<Pkir_9^B?c+(i|x*Rb!BMrX>AtRT&vR@NNv
zwOSRkBWVv9FT8B4x;_4_D|6bTz2qbKaQc^cA+X&M=XRb-SEn&hbk7;72F&pgGKXnG
zvST8Xr&U;q&rlV~1{HJ3ek)OGlHrP6_-R}!+SOaF#1R4R-BDKJLLBGnY*46ZTE(43
zR^kFZtD&&Grmf>>Yv=(`s35<^xN12q^yn*mSsZrysyDTM+4wy4@wLFaVPvO(9eBdF
zraoa!eO^%lWDT6&`Z|P)eFka}T2%CPBu+gcM;Cll5|TF1M|5jOHIf<$5<>sYK(SmK
z>`7mZqLtBPpS>rNTx04;dXb#dn<-gSZ2c$Hp%v}aug9O5$4{!d%rtnLLHexTuY6L?
zNuJ#E`%?;>?e>-Bw<6>i*zK(Y?j^<In~O)OyswulRNoU|S@olI?*vsHa-NF@-iTUL
z-|%`E#c0~MH~muI`yAJzcfPN4>gtm?NL9}=+l<OHSkQK(rq~Zh^8LYSK_IS}%ygID
z7GzfNC(FMHwB`VH^`;y=|3-xiauotj!7^JTu9=A_48frhnHkhh*TZ_cq&R+<;6={>
zU>@dBw-El&&d}uB)GaH~E5g7>e}TXb!b{(UCSOu&#m^LZfQBc(4_8uLi4_~5xT!dF
z-n|AaR^kpZTQJ*3x0>URyn2tdR=NN*et5*<6A&#W{~`9fQ?Lac_sL0DQ1M93Z1;z4
z8auWV57PMLbkDgr#f6+N7h|hB5bC(agTMPp1KBgw%vI2lAc#}@4CI3#10F#X2KeZ@
zCeG}7*U${nm!R<rKY;x>sB#CrH}rxdHzLVqw$;1;DGKG05d1;r!Ef3UNKWhVqOs(F
zZr;?wh~B~odU0NJMX0Pv%AsUjR&A(k<00z&y0U|79_6K#?R%j|<X5O46H4tFjueNS
zXXT~;f03qkR7q%i7Is3m<Aq8Wp=EuDav&qHn^Uah<NQy=-S9>?r9=W7-Vn*P5(E6@
zB*J>pd8E8!B1MZ@qRAWC7kK2o!JYSDi=klWYDr6mzYBx!h0E1(j|w(w%yLo4?0O()
zrtUhe1|g_DG(XgoqxS==MDE!d{EkY$;cN^MbYa?(1kT*}Ugn<=ssK5R8%CSzM84bq
zk(68jc%5HL+@=Jd`btrEsQo<n1t9K?C>;eTM^~dq=CXM({nQJ5;6B)@Nau+yJQ4Q=
zN31{I7#fX2c#}_FTK^r6!<-7cksC$iU6MtWdgpQBKnZZ3sMTOnlz6di6vD0{>Uu+l
zozTezatM1Jts7je9?$$ER*<WbGnw@po)E<4$_h7%Y}cQdTkl41Yqh&x9HYVWy&Ea|
za*JJkWN-u-w}fq)B6qe_9%KaVvpBz!`5MW{39=4TCg=FmI=aYUp|;lk(SUIb&B=iV
z_LXk4SGtq8fHHQe2S$M}xr8oz;0y;|BbI?G_C+fv=}$1Tna3giBjk9i@la7#dzvzH
z6-9jaKCe3Z{@tT1G^ySSKc4xKX?76c)3&e`o>w{1T8-fn*UVL>6CS^7fNxe*R+?cD
z&w)GQ{?KqW$&1mfqHA#;H)oi$6Nf$*WX2AiXE0lqOd&O7>729EOL{X4NB6cn_~dU*
zbm#cYQ<4=9`g6=dY6yHopvu7@^G}eT+<qIfQpF3QKhY=gHS4t_;@&g~Mxn+gQ19{v
z*3tNDM1M8TMKJOf0gfg|SZAMMNUC$BmJ{bCnA9E&ol|}fZno!$#2IE=$3?$fBQcXC
zZ2W(W6NY1^)dV@ykoX)V(?}{rb_JDHd4y9%9EEsh_Ikq6?07)YMYNSU5}y|InI&`k
zp!^gzq*z_Uh}1OIPF~>)b(j@HpR|LJGnmdH_cpWi@^~xjM8us|b@cri`aObL4C(ha
ze6fo@#L~%Wg{=CXTJO0~+pi6&M_o9rh86z~vV@#zO#Eq+(uZF#Jkm>VpDr+#Mp7#Z
zc&#7ulo7vMPs}TiM|cRN;DFK!6$;2!RFF+senJ*KSMi*FzvBo;w??Xq)Bp>|ntjNi
zmj@q1r+$Krx8D7sSWkkL#Exaf$RtQ(p7MUtjY4zICco3@yc&`~4ZNL)Rm^kF!?>>`
zc2}E{P?JFrSf(?!d!LBtz&}mmFY*k0d0FkZa*uKob`%CX5=e+&M&i*EVvklo`P)kt
z+>0qJzS1>;@TE+JSyB{n9?kT>J%o4D=Hjz|B;{h&3cy;-X5jZ`jHWHgG(ohqdxP0q
zA$RTTc~Rg&D!E1pR=3V&0gJM9?@CW3v7%e)iEog#ITXLC%(7OF&^?E!K^YsR>xfwg
z7!A;}N&v39k1_Zt+)q>T&}a$NS$;1!8krlxyJY!~nJ%>dIp#rm<^tdhSuG~3nrbIK
zo-m6nFyS@n^mD?9Y#d<3QQBBU&RHR>iJWuWom}kEJ+O4#+|PfAfw%1&)Dv5Ye^#bt
zo3&|lcIAmARz=(&Ya}u;$O%ltX7bTzqU)wcs+Ez{v>+FnRh%%-foV0dpRN~MmjkLk
z!RGlo#_N}z+^3xt0xQc>;yMsi17YCn!5znUiAzat4lR3dJGsC5H7n7;bLR6NzF~V~
zI|oAUO>@x2iodp|A&!1JJ&{6%z>1-F+~7>&)f?%rKF>7pjWas|-*XY)*C9+``4_N`
zCs=q7UCuGp*nCHcpDXt1D*zi=&TYL0MSHMe>Me@Dh_<+QgxG-ix->6NYrXM)^*Zw(
zKqtFPq0MkI8Khaj>k^z1+*ILvGT0{S_cOL!;vkv-9&Ng$#AA!M(znbv`QrXDD(!Of
ztyzb1%XA)#7J5K<kQu|CAii!Ntzd5`*BNc=-sYjoT6ql*@!dtO7vmkD9jdZmN<AWy
zyyb*4KJELA9p6*Lmb%1R`6aR*DuBs@mdb$2s6qqXt)Dg;P59;5qwz_;)^uj9vKT(v
z?B+bopDirVP&0*lEunu!d^ggk720Js#}5}<?HhQ@-7!}CM(@rSJC>D9QNt+_2;H^>
zfN5DLjwfXEhpTvGx7?vi@}{})Z|UmS%#gHC0DR6SBkUbouh@oVCa@eu0&6sqRzh+e
zMH){m<|aEPRP6=*&R~pUrb;I%HdDoLjOVPlN7bEk+d3|qDv8G>4&DHSnXfI`wq`D*
z!J6KYKS^yo;#+T?uIb#yYyC8bZ|7b)&Lsx~U<r>(zLRTa3}4gwHcB?FBJ#D_$7il1
z#Z1f0RonrbrL=;s2#YQvCH?PjjHT49yfuVFs>2)vwKd62Hc6-vs7`Xvv)%8M<(&p3
z9J*`*Q&Y>7m1~u`I#b6f#_c%4`<h23Ar>K{o$bdN8FI4tIHLHKOi*Th);1-33&(k!
zB*gl;_sr!k)mD>zHlO=>&~m-}P6{<CO{7HJAFSiqb~@(pq!0mGkN^{IQ5MQ0%KV2T
z*BnqgsNn3DT!GxD5n1b}^nKa;ko%*}*{q$}ta^P<-hD}p_nELtHs!<+(I*0F<eE*Y
z2><<sVZMksw-nya6(=oEv=^?+-rZ8z&0XU)ead=avhvIjJn<xw1h%UvruJaAoT#sd
z4M7F3qHbFO7hGT~_D|q1*vUYd9w#z=l!IapR@KfblOgbA>r!`N1!}yRsk(8ru0Tjf
zZAMm)K|27vDXyl3oVXw#vQCJrJrOsq;XyrB1!xV3NxEH?O0eiGH$Z0b95Vm05^E?M
zA#*mA0lHL#6B#Rh1GtD8bxGTlv)RI7?9bCGGx+ZG*))ssfwx%R#70!?QGmYG@&E2F
z+t(QhOl?{?3hQg~kZJnTb;`}&qkR(PMBG30Xn5Qow2^98zhwt@EIc&__EdXekOpfc
zOs}&LKqnt@ex&a*a>8Ng4BIh6Jvik=++_1qdvHdo{Y>G5zQwA(WJYqsnZgwbv)CD8
z%B_881x*-e`VM|iW>iEep(g$89(8UZ>RyiFhmhL|gPo1QiI6V0R0_?NTEkV-vc|^m
zwQp-;rx;GogD=DoXkKR>ljBScU+A*X6(;_KmDoo^>M23GAebUA9x5xw>dL0i7Zku3
zc3e+e>7iO|oTi(8X%h8Ql75ZO>f?5Cue9E58X^CVOK0zuzAx{-?Q`CDO1~%XzBli_
zjLP*>kk0Hp5Jnk%(ajI;@rK7>OR7y;A^lQqbE(KQbv`sFkG^sm#YheQ70Q{#(z;ap
zi9$^wZgvPW%XyvUt9~Rw2-AA3{~j?s?PuRH)Q7WMvK7K%tv<Vr7q&aLVvk{-R-fI$
zOMQ6gZqd)xXV2x?>}G(9p$xFrOy~Bq-{yrH%S>2(_U$}m#?xxmAKx9c+TjJXE3LEv
z1_VQR4E8>0`*ubG7d2VSr3-{5X|GfRB1N}U8l_nE7W|k+oWCeEixMJ;E;K2c>p>8k
zoSgn;eLJ)(IelQgT<uBEWZk`ey;uNA1|Qvxp2~_^_1hJVx1BE}lPX$mO2fJcLmEYK
zEK{WvS;3XEmkV5U%8(c{0>5NIPX94ImJL71c|a<C0+4Ob%_2{;kCnX)5g$5MmCHE7
zUFE01ykltd<R(KR7<AAr5r>f6tEx=ZOe!z4?RFH9B2Rv)dIQjCV28C_J8WK+@G9#3
zh3UWWOtSDQVl`mhza3hps#N6URmx>8uczU*?~zFL_Qq@86W#oBa^hr!?nYBO&>BI$
zY_y)O7m#Swj03G#arP6b<`?1vg{^01Q7h^rIC$JN%BiOjhUSS`%B_F+iTe<ZlcGm7
z&gswNTL;%mk3NWoU};s48I`-j5W2HgXqk|&2EWAokPbs}rYAQ{_Q*<kC3M82A-BIO
z8gg-E4XlkJA1RR!9z-=LP{2T-oA83lK(I~OQz06Y%`19BE)Vv_m0$gOmV$gB24!-2
zrIq+BR4XU{WFYjb9q@dI|L)bX!{fDIN=PSz0U<|Gnd7e`VncYB(=<rSBPO6c>(l$<
z%DLim#4Ut8ZB9y#01700lc`y~)9bGNIRgeRMXu@8(1BU*I&a{t_TP~w>fWir!{)+j
z|2faB;m*HswcUHXuK%%(8RjXD+*?&d)V)XDl_2?7WQ<&sHU-l*yaZof=~t602!>$0
ziEaVUiC3w-Bw?mh?2pY#=l)4Eg?*fcrzXApF)1wgPT=zoW>S&(==!2TCMz+4)hO)V
z-$^6n5R0Y9^eMifNP|^`HXB`bGTi2KFj`kuW6NO#OMj(q_u8dwLdRx3u-j+FJ4lQK
zwnnXneZ~ijoxJM~I;&pL74?EnP0~5Ic5(uw>LZ@rtJJl4x^47*kiPS3Z%@%pA43n3
zi5+9z+^F+LW8g@mH4U*C26~54?fbITrCQfTuc2%KEoE$IsIp+1`|~29AA-ErPlP!I
zrB=7Ur$UWNyKfBiB60A0qr%RwG@^)7HCN{5ZSx+7R54eU5I-?*vKVb9JRqbv`SR&3
z9q}HKc7E2Fct00t@`#!L0rTM8s;wH-V;$|_Wtt~zZJW)L@?4-ie9b4K)T#KzB8~j`
zu!43rJMmtgQgL;RXHz~!WS(L5@Z?5jge5TbYnZDf=AD!sL$}>@U%Rst80AK9WFx*^
z5w}fv7zr32%u2j3@;|vv^wmm84i<{9GwYSrej}AK4^(&NS>CLQR_~vYT>1~j|4>+n
zd3j|;`m>KpT_el_el+Ay!bi2IB6CM}of{k<oD@uTS9>jEIDSB(a372f(pX7bvx7ml
z%ym49OPNjW05NW6O}q&hsXa`Bd$dqdWl1W2dlo|VZd;IkXbQ|>9d11#72lP8l{tm-
zjJ-hLPerKa=tNtS!AwvOl84GyaOBfTD2Zo%2eey?q}6qos2)wm^aC$)MEBy#IcAM;
z;;SjzxpftPzbfq`!kB0_a8<%63#(d3MSZ`TqY2=eN#E#uHR_l<E^59;X9Y0Q%2VPR
zRA{Vz1sktLMr7lG9vl%zuAdZ$myjQ$sa}%QV%RxoSbF~%q>4<*mJ8Y=q(CmtD=Tp_
zNeH2$&RuiW7UySbQs$GClO+Q$aGQ~LZ0URwi-51FSK_<e#P3)4!HgGR8M4(1XeH@3
zYBaQ&YOz<d+V3K}W)Z-RBHmK2GA$WRSU_k*N-}FzlJ>=T^qG+?oya^M8exrD$XeZ1
zdvKt&Qa;hPv7#`%NW2+`bf}m5=~RpD!7>Z}E^=JX#=(he9BdD|Tm)Uz3SSjsokr8$
z`!&xZz9+OT(cvAl>vc)9<M;OqyjT)C`=Z3CIe%c_f`Y|2c>}NSUxdRDqBY63A`xWy
z8HCC?Jb;@T4C4;zRduupf;GoT)SQh@JV;B-*AT20?(zOH0+7XyA#6C0GzF*;=N<5e
z){8&Mv{Ii)EpH8}y~@-dze5Fq)c=4<oe<g7!1Gv$9*?NSAZ_}aIp;$Ke1_+!dsiE|
zjQ_NB`wL^q3tALpM)3}Z#;2i}q`>s_zrJrAaFiIsFO6?m?Loyg*=n6Y&$84201G9d
zX$F-#(UE!bj*BDC`?Kui-RZE8;2p_-(Mp&n+T~2IY%))b08O^ro>8Wuo;e#5LOz?t
zFVGj;8OhClQD3%WL5h?kfs`bn>E6c$`aj-7CsZb@P~BjWai!`<hE82laU%iH?MLz|
zgMMV{_U;Ny2oUg8=at@{H8b7LFpEolmQFK%3l;m?>_w8ltK0=Q*Ec?|lX<s8y=gt&
zty{%l?Zsp?o0>j_9#AJ*08>3(W{$p=UJE90jIOfmG7cNka~TN_^rGLb6q=>`Z<gGn
z-LysDW#-ekp)JUN_0AhFtY8dV#L{tQo}mk?DVFQvV9*Bw7-0(d_8xX=5$Ex~OLObD
zUEPCEFQ9w_GadZFU6-bRDSJ*^Cnbw!1e?Bto{)86U}lZTk>B>sup@C+mai%5WMbRb
znervuW3!kMUtuZ0eqtswzOG54^E>3z=Vw|gKl3X|kvRUEoXPB37?e?G7XM=>D!V2|
zt-e(mSshZ4Phe$P(aQ~g7dwO1oa3#b%R`Eo%=o72W^4ZGyO7ZvWzGbc>2E))-30HA
zeRdHZsEQVs*)F6uHSl7-Rapp=Dd$m|+B&h`*;d<WKFS+^!k~-_agx<}By`rqTSLyo
zHi;iXPU)?(ZF+GNu!qpIW!%>Kb+0VvVN;N|yyum4^jmAq#8KATi%0oX$vOXrxpRS!
zs=5~bOftZr(KA4VXrV+q+DyfoD7Kk`B||3Uj7$Us1Vt^at)-PJk{Liz3Cu)tdOS5M
zK5lD!y|*vh-d6h%@qr`(l7NbVC?d8Pt(7xGB={hJK)(OlXC|3M?dyKu@Aq+U&6#ud
zbM3X(UVH8JnDw~J*mmabfn7y0BipH*dO06u#`{I-W(QV-qlo@HeiZeGH+J|+y3|M$
zjI>@^pc#3INN{`nm5d$x%6AIDK|+<k%2A8clLOc&=QJ<x#d(B7ej$&#(IFSXE{{AC
zsdUkEKr|_6l+6$DA9Az2+=Mn@ir>Wl8c`v<)^?q?xN8s(xH(<c<pg)?iti99LCGYH
zop68=_mQyidZ0xKWLaqcFFcZdiF~m>Nrr--jjWBiW{r&b!u&sJPZXEDr@(Pf$XIlY
zMY~59?Rniys>${WirAU2+$3PxXph_7|NMbvSpls9ukHPT#Y+XOHU2^#6|nA9zyeZR
zDW3+F<6q^##sP=KxoVB?6^vO}VLT^>^n$3Lj2{2+E%uLjL(KdkR^DK46enMpe<!H`
zE6&Zkr^3j~penQ87~iR8%}@u-nl~HmFTJW%t_)+QV1_|N<VEdVki6r|Q%CI4iu$6)
zLw+wWAQ*)tJoaG-$nqz@%R!;6QK#`kQgNs8qd9{kty<vHE^wz+aD}L0iw_FI5W3*C
zty<s`g*4()v|b=J$3d9DN1#kU1J&O3&&^(chH>GVKM5Kr9FRibLxzSGDk%DGR6vnA
z>gReK4l@)~kXg^$Xcz7}O<?fv(@VdRW&tJZ@!z1I8YuApBK_!C+xV>UAE%!?O}(cv
z<t^E291MX_<OGF;#w!xq^7lw6wKGe9KU<XTX%AAQ*++{xC~3ng;SmQK$ez)`zEpGD
z=Uh;rSy85=IWT80Y^m@GPj9J^>p3`hRZ&Ytj3-xfMIpOC?lR&EL-6d9L-xXEjxIR+
z6Qi=FT$e(~A%#+phIC_Uk-@HI&0a=YFjPjfi**BskbAr6)|~A(?iJO%Ir}Q(-ec;)
zYuqbZKI2{=|21b5Ehgbrza^}TSuxQ_6!5?vgc-B5|KPgT&$U!HwWv9*lo%W4(n5Uh
ziXc!jG=|*e7kchKyGLqUp4DclQ5?oxbhtrw>@JF&9t|{vOGmq77=ViJlu8_y!<gu-
z$s0IfEIuY5@GlTgy;1CHba4=;xuURHSx5uJwY7`glP?@kz$4WQ0c#S3pCQubD1z{m
zbcuPN`KN@-Cufc!X!z74K_C|oSAp2tbW)bC{YqKs#GKe?!oh8ehw&Pl@xHegVVtqC
zK7@4%k=Trz!J1og%1Up|$%##9aXTYz^h(WFIydz(@DKs)THH*Vi8Ojc0kjGsrqaqB
zYk2AE`_}oNvJL$IIKOlL!Tg+A0g%PHWu>tkQM$-vQM@D?a*fboXSzw5uJ{#I7II9H
zxSZl^H2!{kL{G(ojJ<0JJL!qWsO9;7l-$ABX*(+mqrs-wm!h~pNVJw)KHzNDc!0ai
z7I$WUK_c7f(T%(|+3bnXxA@&ipz9JV>^hdl&%`@OhLt{Zjz4UAi4x$!^T(Luj~ZL1
z;aVCsreUr%tq@V|Vlm=BnzQ6{=A7|iW19;95!gw@Af=Jk%DH`R>X}m}XE|@8vJfkh
zA^dMsk<(B3T;0nt7K$Mg7(!&G1!^EOj+SE}@)uPH?DY}lkLrbaBb!Y>oJi%w-|5$S
zJ;ad3FMB1~?TEM5X@6ObU7>?XS%tD5Aq`JXxYRQ^ewqjeSZn*@ow^akxVzHp-dMjb
zr_5E8?N3Y)kp?%RMAGt7%?iIOhJ3oAj>QviwJV_bp816t_~Swl!;9@ud;+J6FSk?{
zQVbSUS)l&1bBz#JS7;Q?`D8B{lu@9$@$}2om&44ib#58Nx<T^a0rUM>|D2NOzgPdJ
z8%r0_T)Hm&AtUKK@L7My|6}+J=&y?Y`t5rE2>xmnhfs@xc`Q`k;P{!@@_A;_V$by!
zh;=%P2BgYdoUHn-*MRY?ul--nUyW}Lt@L*PzZ)OHiiVNG<D{AuK3Ck+Tsh3Ov0pws
zNVQ}KC!v$!n~Lz@1TcQ)>hO<&_%ZPJ!1*Wt>G_YzfLiDSo&}aBDt+!W9Vj?VqP0Fa
zoUZtFnyC7%k1Cu);p^%tp3k!84~}QIZ{alC+kp~)({wlxe~%~rt?^rxnF&DSs(m%2
z6}0wGkAE_SKW+TI@S%A}e9w%Z^;7uhOTQn8pKye$jV;&$R)2#8UD$^q4xE(5ugp_n
z#b3NG@s$zriKLB89LbA~rVh6?gF;fns4Q@}MVjleQxrJou4a#%wKpi<Qs!DW$2A1L
zR!>H7Z|C>>_T!dH@l@^U<v${t89U4s`8_iWjPm?>1M$hM%ok_q-tx+aA&XxQz_+SZ
zpGyDP>)#8%{`mF!%70;f{+q&|wm$zfe*Kt6{>l9#d;Fh*Ut|B3@xNK~>ErK(&%cac
z?DYkrZb{xPR}*C%gpjey($T@n3O9mFi#dCz5wB!R*c^<SJ$|afxXB9Ra+Y3_jZs`$
z%_+dhH#Up9Us1?M7K`|~x_Qd92e4=5ZKZCU)F1D9?Q0!ml_n^E{&Qzbx?STWAr6P1
z;j8~27*aTI)A*VagSh%MU5Rhpr{mjSR{UG**9+hN`1dth`=|NCSrq<X<KLKnZ~UKv
zfB$*=zcBu9Q25iv-wU6A8~^g}k_cF3g@TI(JZEr`cf}l-dhz4`Dn353=3m3dyIMa9
z9|PPEd^$cB_Qyx(Zrbto#g-r`#%!YE77K<g;@t7<adgA$YpA6?J2+}x<Hmj0IK)qD
z`d5v{nxhvisltZS@$%=yFvxWPrS+kPoRAi7o@{vTC77tYiligS$Eg$2p3RL|)v67w
zez^(4E$w}dzs63Qqp_ub1b<UCM_$)fi}Vn(?vu+7Cn*@I-bxO2j&SHo#W|Wr5jjjm
zgD=Luq^%v2XsAgXp0xB_0?{U#-9wvj*^KWr>~@>bZX+RjEqR<y6Gw964J(goR9>=9
zh8p{BXys-Zw-}=?oMMdY9dxaPgR3&~{h8ZW;zR6F)0NCMndwD>2V=YYpi}oI>T}9v
zeU87;`J^-Mi2MBz30PHM@ih@^vICqCWwP4ZlOxtlw>bWOiQm>uUyT?|MA^PTyW>87
zqqgcTzqw!eWiJ8c9Mq&*Qj8u+2m_FFWTEn$dZ~LEl9D6Hh)I^?IH4I@+>X9^1E2cv
z8F+YNNNkCYnu}`yiE~vYVTB2t`wan*XR?v602FoaVdh%xTio6CgOSKpHAfCCy_V%G
zl;xAtb!wvYQ*X4L-2sYSJfHvI#>YEjTS`nn)4Q1TFxF@z2si}@#y_ax6$jAPD%YRo
zDSR*awwiKMx64Gax3TV%kbo+6VCq#y(hG?S8U>`~?ldgw#8wS#iyAvv96?JNeNrxE
zNx789>^kw%idvWDD3r}n-=>hg@KT_8bG6hno=c}=arnP_)t;I{HH8;nkX{A-ty;mT
zr(~(Ma8m{sq}kd-+y<t8K@G;w3ipE@B-igZqt$^>m6~lBB$?yfnuQ#X`b^XiN6Sl!
zYq2F6r!;}O@jrgAN2vM3I-*M-YAn-g#q1|y{0$6K)@~R`N3ErPcGE#5Thqc}gKM8D
zACzo~x(}q+!)SKmqiw4pCd`nsy78mp?^KwV9y40W9Ud$>RP)UtJu67XQbn#l<3)Vf
z2b_;l!hBMEw238AV=LL*oG58raS?vCkX|d?d+o>{@k|Wv;r5qFhYq#m#?BqkXqLPg
zMgs*ZH+wvAotE7Afw1ur?=aTbK<%DJ8&B!oq|>rD&LIwu_;(&a9`uY3Szkl#uv@}W
zV%dJ5vNG{Bi0O^MtoOo3t5p}YXxDk0VFI}RbBN{c0z8+f|KcDLO0+5nh3mrObK<G6
zb$M>hH}l;qfOeJfijeeOV20f0lpMO$x-;KLdztzIpiKQKb;*;uxDX{ibQg6)?(T>c
z&grS~dsd{XXu+P^gm$uzUel^cbQ2s&ICtUtjUR>XR)JJ~^BCv~)Ob_nGA(cf<Icsl
zp1U0D)>+)2cl=(=Cc<R2BjH+Fo(avu?uttx6^4eIl?7ZI_|xk1Z%SO4mvnQu)JF}D
zQ}0myTyz73VO>JJ6I7d(>W++oED@^!Zp);gXk%nl+=cNUUK^Vk57sbiNSRQiTgy>v
zZnJ;CRsbYL+%pR!FkKm&+?{zG&2~B38X~-?tJvQ0IyZhsQ)i9CU%8q?J@ulVD<-@$
z$&VhBN%Dl2wR4S~*LYe#`z$q6g3K7*m}dFR5!fHZ=3xpSKL>kT0?`lzmB@4Gee8RR
zIli0=wA@?*CWyGonWD_K<e+uQNBG$<O-Vs(Q1s`1D30<}@5ygf6*^z&TQ4$8iMkiF
z151{H=ImD&(XcE-Z^K#ZE1?38N~nMeV^e4y<m;Lp!Ts8Jd8TO9uq#h&s_A!ax~!xj
z!o8>Q_CI+mlbBfE6K5^=xi?7bA;WXeb;ehnvvhNg9<<|sCiq^I)H5vb_IKd|1nanU
zFx&Vdq>TD0+J?OAx#76|%a}%<T48h!Ak_+E^s0XP5cgsIOm2|csy`%Nm^=Qu6Go^x
zCmP%z{{w;9H$WI{eQ#jsrnm3qMlkArB@}4L;Ae$-65(I-qi`C0JR033BF>9y>$is8
z4UKR55(mc;q~6$qWhdd=!|v7!^AeA{P1Oh)IiFgI-N4(wqWF7HK1LwsxFu_|tPc%O
z0a0o)tYD-4^t1iwQP%6dbSNj5MmMkV_Fo=w4IfNF{vU|t1tyMF63t;7Ta`EQhL&g?
zgaq_zIJiq&)d3{xPIbKQt?@7O3)4@y!sbZh@m$Sl<Tr67)Urj~Z6$}=_o}E0>&Nl|
zo*35F?=1&bMMfho*@-uXwC@WOA=ll?e?!JG@r$>rdd}P$3Orw7jmr-QQ`Mgr+-y9O
zd-DRUU&eX)fii%aq4xb@BZc75{c8BkH{4sXsI@M46GA*D7oxwVKTUrw@M59|$FN^Z
z??*3+oo(#Y*1r-m-eJIr_r`_-FR5YIiMvZ5Jt&kG`V<J~D?-<5MO5qu<-YQ`AB|^R
zB<uqpWlrxJ2f5u18~zx(nYGx>7k-V4S&MVrTb=hu$1i=5iR2*oX|>nUeR`J5{?J(y
z5(C<$@-ERZL~lHt3lr7ul0r&4intpfB|;tOfyOE$r-TriM=pvOmv~`aVdGU|s+8GR
zu$`AQq`piY`?t@44cYiEbWL0y{N<PvY;l@S6a!(@U((T#=>|W{!CYV|f-?q(gH6?=
zLy5x|S(9^drX%3=C?bw$ogWpvvVPYMQ}|(QkHTbyF<>!EvqOy5h&c;dGiD7T4l;WK
z0gs9N;Xb0=dRs~wRNnEQZzOAPN>`#tk^usCc=)+o%8$%pjAwC4m8-39NOX-&*rW77
z6JamoV;t6fpA%nb;CQ&@;ouN)L!AQ6nJkg%8JuX$Yq!tt(eP$EFU_ZoRuwjY@1##9
z;N0QdaG;%{?pM<#tMF?IKnwXpNWwIvo{JyuRzh`d2!-o}rkmHRt}}KrYEbjo$l=P_
z`(u^S7{&$aI7$L7sUe8+>vDXnG5wQEpG>%;*)z2#u5rsbMj6?<o1)g@qf@NWBcjG@
zRpegAsS$%t@?i{yR$H-D)slbUO~{g@2;)u_I~DPNpG^4s&*lhCtl<}fUpVrZc&sOD
z`B`OsJ$JH|zgfT>X?%y&pzAS}o#pRBa0&t93TtjE8rTil{w0)ne=M;gDXpl!!kWqU
zGRuEB8rZ?-?IGxi(}0!#7ilYGU8%m>dSG`*TmJ$^PXaA?As75aX#7wLB~q;4R!rXf
zSbCpX73hw*F=9O)B|%Yghz!nXsWM*R?uIynM7V5D{fJ6{GHSGiouw2uV0zqrODQ+^
z+)m_%>Ri~7Yjyuc4RUTn7P6Y3T6}Vy=bT93xn=RFahP19RmO?GTRaljRyVlH=w4PK
zfeE>1;g;w_;&>SN_zkRRG?J7IBx6(>qdU30F0T+&;W!0tI(X+GjWWOqU4tO!;4j2e
zWv~t@eZnli9p4>-muSh~F(L8^M2$D20XzXxQEQo}bAi)Nzlrw4@IJ73hRHlF_D)V+
z>9KxFQFkQJs?~jsVG1==ah}CAF$?maQq40%Aa98MRq8DM6P<9CzY8Le@U-_e4Q-1u
zox|#hqj_o&C9)76BImX?=6_fuwa3E9BAbLr#61F<*V%DI`vwwMo=tvRK~Qb&)#q4x
ziZ|T9wdjFu60(*Pj6|vp@ZUCWfhFcCS&svIw7NyK6gHld@Qn}ajVA;p65V4-i0rE}
zZ!4A1MwkL$jmJl<gb*a(E08zqBq?tD+u$7di@3q74qg?v^T>K1;r9C~e{0CRnwz?-
z{15U_C=YER^P$J_B9_L6dMIf$byNJPgNCz)dD`DLj%<II-J-F3JN{vhODrMA)BYw)
zvwa_ZwePDillQq!#gZkPf6LbNaFjc4<Dj<oeOW}>HS@^~0Pb%jWR&u2zn{aZcq~1b
zd`&_S;ZYLN!dRn4{SN}P)=<sivzA<34s$r=>y_r6mfY`y*Z7D$StcM3Y}ecOiD3M2
z#0?{VPX<mWTwx#V-cC<+BP%1-4sGnhCxezQDyuNpJg$O&5UWl`31gyB)ncHLA?v_Q
z*edkQfV;Ox-8-GO^gztNORL)s2&B`;qJdWlm#VF5P%py%buyLGh`T$Atv0@1Zlug+
zO;5ay+;*_~>WJ~Y$SaArwAc*cN_I5xcF7iG-bdtulvrEY{1^VM)#bDOG;-X2KHfzM
zicv`}4!;_8f0Gav?vB3wT?Ry;hiw^oFKV7CCRuEc*!Ruvike^NY&V}!V+Z4JiD~b^
z&|Zm!{!IuW&jBhj!fI<@j5zrV*KP_Kn-DL_7sVSgxvu@ddDQB*P*!BTR+u3kGcCxx
z<W1nEfZ?&K!0xKxR&AB|MS$Tt$Z}{>mHR~r7I$z`W2cX$L!fFrfZgGmGioTs>kvNa
zA@i#HsL@0XrwBESgO^xqa%#X9olM7O_&%IwXJ~r6ty{^`8c-o*-dgLLYI#nVqXB?o
zF))oSh!AinadUc{9iW&j8HU1mHsh~1FB;sUC00RgYQ#^$0bMMI9WmY^!9%3`&tO#~
zuul%G&L*FAz93(NkErJ=+8b@f4*+}C$ewEDpG<Hm>=obaiUfC5e>o~5#ttOZ*f=&4
zJg*!+$ex(*ol=*7s_-qw5r0=ChziO6CX0v|cYKI;$2LZ!lce$E{fkYbGOfa_%DA*k
zH+5u|OC^*X>x=F0BdJ>uuLdm7;?w0mo~7A^kf0^b5{{K_dLVx<Qz)>F^tWKeFF|nQ
z2)m+VYT5m2q<tU1+uwk|1o0je$HWJxS_@A)F0|X0nnd3jc?DY%JGEalLdq^PaXfd)
z;!mDa7I^>RW8d_dy{Ug-T>1eZ00O3d%(#@8+ije`6dV?#6;S$a0CwE1-EkI^fjLjd
zCg3>o<q>{rYs*MfcGbueWc)=4BzE||TvF}Wf<CJr0ZMq0kJIk>i9D&OUO2`5nl`=(
zId;FPKquI$RAZg^kP;tvEv)oqowR|1kX`JCyxJEX+JR%eS05_DQTZb=TD_n4QiTGE
za+;$I+Vrk}u2#BzsoX}dPUVH~(HCuy0OeEqiwxZ)xY8AAe9Idd`VOa6k34coSr!@k
z(o@BPhlB|dbMoh<?cI<N9;2j{U)U<Yo6|8%2KnQ#F>T>%+OVPUpJF<-31vctni(D1
zu&+aQjq$fsPmgF?@*6_XiH<JmMq<+w3DZvN&%$-5!aQ@sb(f#0o6-{v?peH_Ojq#2
z_ZJW4Tg<~3oD4wp^)%v2-I<Pep<9>s=q1~6f#iY;g4gPH@Ht7GrF}97QGeH>UsMeI
z!S!$kZYaY32i1c@-K1)Wb#|x!fe*w9Z)J=l6L0zi0;E=3*bw7hu+gUt8!S2IlZGIC
z_Wq|01HT#ziIXgI){+Y-(EnZh&#9U6(y?L@Cexq)=lSaL6nhafUKqI0^e>25l9r?3
zu@8y~GOG*$3QKQGwemULo_vBV`IPztZ`CHNsFbjYPT?Q%S|;VR=fFD$sP^c==1hNI
zk}|?fh24?>z+tEl_c7FWqk%n&p|%nYuKKId;5IEGia^C@P*p~-Ef-cw#?o7~NWd1u
z<<Y*n(Zd|GrJeCE-F+}(<xhZT4%3ZSNIL`DJY0RA(w(#<-qtuw1;`Q#wUIZgjzUnG
zgxH2(_QZ;Xle?i;VU`!lu&jK{{fZsd$o6O41Z!LbYrM%}jgiC&qT*?=1c?;1YpOL~
zt8%}pG|+~^3fLn;t1fDU6v}(qa@V2G(scJ8J@G~t-mL_b$B?(W6xCc}FGyS>NE|q<
z_I{3$C1i>e)1x{M`4vRyZjqsGiJhmr+2kd1KJYBnt%)39(=5D+aguXEvG7Y6=V6CL
z6k%<yGOB#y!118g++d3Xe?@^FBtHL?F52PD7{?&6qL6d+Byr^s3Q9GARtPo1cO@X!
zI&qs;+$2q;wl@4Yzi&U0`jwOvj(nZ~t`Ba2&0O?>anlFD4$zs4ju|&OJT>(cEwUI$
z7Q#&1fw{JJZkm@$##V=yelrL!y$Kl?x|wqvUiwHR_<^?SMp+`oOTQ&gy}T4I3ImlQ
zq)>cB=XOWgz`#l+V<ZxCi^JEtL~eRmTifpZRQyvPdN}hD?v`e%eJ^F=(1=9X7B+hH
zV+H<RQ&PEAq!(3r;SrjpjRSwDzh+rpr1rNN3GyhB`y1a>Y?P}ys(JLGCpIW<>Q>9U
zM|#*xn;)?@5?lN&{&!Sf3Tq`t#!IK|xKTLjjV<_q6OyJuSn6)xzr=67ga0h(iUu1b
zYC8Q2Q{5zZ+{;uO1tlH{*FiUpxph~Zs0+bN-&mZAa56`*)K={S1^BEb-{7I{3U}&N
z!HK6b+)sg@$p11V&NiN4Vy};pk+RC+W<JH;eombM+^s8B&r6~A@d!%e72OIaJCIr?
z9T<(N_toF6(rCDDICPy;cO}fHDSj|Dn@`Mf%%MfxCJ+CJ&Tl`Gif{~rStXet0-xjm
zB2Go`JP6vM4MJb&D8eN0U7ftcCebQ$M-3E3#X2?)!u}yOiBqc?f1rfXz5PJgn${?S
z;Hnfas>lWr*phgch*TT}5DJoh5ly8Mmo-^ZiMDnbNH2zkjXB2A#seNa=F94CK2b+3
z8uqvjyq2pB@`yH-^h|Dc8WB%EM}UIWOI~RMjp7R=p^>S#caSKuC(&`D{coZ$JVCNQ
z_r_rN;#VY`UGh?fhKgb%k$FSyZ&U<ct+1}>sW|gFt#&+L5L(cQY?*4s3f)uc?o=ag
zPL7j-_sVyyqiCjl#@0Yn;%J_>TKUt~4VU}8DD3ogcELpgSTWF!x;Jz9##8ArdBZ;~
zz!cJd>(hT9R(}b$s0DB@lmE=`2Ol|m<Rp@7YAEMM-s(w&*Ob8z?ZtnMT6e0Zqug>V
z3a!WL-qks=-}af+(kDMg5-IL8_jy7@kdIySq%;vShlg^9RT!s-11S!EJ7TYejn~7*
zyCHXb+7J8nC>tW@A#OD!;GxGp=fPuajq(mYk8e5mCKAbzmit<d|2KfBp?&#>x@<#+
zG?X85T~1y20>bPajs`c!t^~?r(&~oazr#`QX)(Jt*Zir5nxXd2DOTPY9Ck*CmMLu9
zsa}VTJ)y)$IZK}4zXU4!F>7Yz7~u<!IZeiYn~@J1I%mig0SCCn<)VFH3yJ#A*R5y#
z(z+g441(f59&!S1yD!kKn7>#BsIninRan)D+46}av~q1Hgp#E~7KIz05JFOpu0Czg
zCIBiH@7Yq0<KeT29Tj^92~o71lBxIn45gs%Ky_Gh2)$<{u*qnH`*D|Oyb=jCr5<FU
z8Tv)AmDAropB%Q*YA;gG=d{~TD(y)CZAnAB?QSy~%r!}wqMSWBjBe)Q5_ToW(M?+2
zW<DV18Y#|^iRPSiOPr~&qv&gmrUWN!_hDLlMzt2IySZoO2^X`~l3j8*S<79`-)No(
zJ+N6b=D}^MYTwe57r={BFJ#UyX+D^DLE>$P502D^2?4_gu_E{Yjj$t6Id75wCL{mx
zWw+>xRmsdd<iE{Ifh?1Ap`%k?dz%nVQeUGt`-eYACEjZ<LvRdha!<zU<oR?~jcedP
z@66?<abo(W@m9Z%Mw0z`FlPLTy*cqYNF!}xoIqSoVIqzDP;Bhrg=57)4CL*w+{Me&
z_&}J-EM&N15YSC*nwz<`LGPDYKQ1wImuw|cNa#thnQ$a|R{mv;`#e_OeG(}vY+adS
zUM|c^ZmT%ypSd;mP}m$94eY{<!2KHI@Kl_+m9DF6qgLJs+!3SZ_lg+o=}|7oAchs%
zY8jIpk4YswFD#f43ASjfE@NR-jL+?Su9A42V(Nmoh)>V0aw)ZvT<s7Y-_1<5+RK<W
z;kCHjbb_2Z)UO=Iar(ALtP!_aoMlDS^D1t86*Yt_zzZmbR-r@>>|)1~!&snAj_8TQ
zr)qbI;3xej8(6N0HHA%0JkZHDDi6i*0=I-*{%^j9$dhajR*uUfs8w^@Ih?8uK1k{h
zAyfnf3A`rpyuM3;zSlX<>sW;|coGWe)_T#l=~mS_;zjNYt-A<-D@u=Ar@S@yv##m(
zvv2qGT=TWs2IWhxW~bGjL3c98Qn^D*=BZx{69hsMt@2eE+h<l7O!GjL%MNSNVS6YE
zc(1%7wO4Suo+%^l?G%K4;!?LPA2{UIl5f$sZe7FO=H%lT7lzzhQx8$7UI9kZO8|zO
zaB`el!@8abt^5eP4oGe`E5uEs5Ng;OU6MMT;VAt;)JUaDWo+>0Vv+Vr1y`MTR5iDK
zo~oBgqlu0@ExAkjP8=Po-64rFLPQ<b?ikOLh(g6-qup_`2V5iN!f%&i{>%&lkl+Vr
z5N=ICL!1pZ00k+Og|#A;C@h#ISYULjp)r5!njGeM0_XOWSkh{1FHB=pp>$K=G%mPh
zZ@=5Ys6vHNy{+Rb$|>}ijM==JLrMjQm)Snu-Hssz;s1BBwHQ~ID(Oh{Kj}H72c4Ni
zdP<9q+veY7_-fZ;_^FVLiTy#r{d}2&w)Tn~vRJPOHU8C0>fLfH4<g#m9aHc{ZPh81
z0Qi`(EIKYA-^_1EKO@*EC<e>~PUGYZnKec1G??P;cs>iTB%cP%hF5Bu%@v;~B$dRV
zQFsPi3kAaCQc+ga;fu_@NJI?gtqsdf{V22UYE2X=D1@}C{0gix68K35yYH9-c8Ava
z1&Hi{1@_B-W#O+3&8uyY=(=9%oTX$@$-^sSGrD>yE1s{&uJ&Q3nmUD#YQ9dtima;6
zhJJo_Ii{4dprLhz^zsxO5d2;*YVYYzm*0>sB|d@7pEH-xYH#1{b*lReF-uHxr`wg%
z?fr73G<K(sf~EG8{|ST7@Y9+Vqh0Zlhbl*6MW&k%$W|%7KP0h>d*o_PH&-i96f!<1
zT2Pjd`L;RLeYeb_hO(|q9wf7p75hlE-n)6*B3D$5|Iu~wqjDVo6(^Na_18FH-+#jh
z6(L8Zld`U7h6n6b>Rr5`rCfI^FJET=pm+oTKVUDpbp%rETT$yb9eg83Or8AULzSu&
zE9flA=pQf{vYvj7&-T~9G{R*jZsif7VXwNqJz%Kc_Bpf{rTVE<Zz)&Nv5BOb*=}Us
zEs4iuu>6y54lN(yO3eh->!a4A=^+%-u(Yw8Z(;LuG?OkJ!g<|o<l4Xgo|<H>*n*jf
ze2OEX1rr54h_TB7`(bJId__PmLlt1?GI{&{^GCQk|15OXcmLxs%&+<6P(QeZQW97o
z_BjG-83eiSu6cU9yo!I;OuWQj;(Sioj0&9#;Hx;KxAV&3bJn#8qI>OpHMm%Q>Nn~O
zGkF^emr{G&MF4H4mzMXN<sNDiicT4IOQi$1$c*C4n-i+9&NbKvl4{|P!Vsed7`D%z
zXkotN{*AohPX~Vp3=;EH7~kUB<fk$+t#%<(cACIa@A_o|irR$^tY!$T$`=Zt$`@5%
zAfIlb(~^eH{Iq=YMBB=(v{DDEO>06($WHLWx*6pQ0pi1yuxES`Ag&+a-=yFv5e&=$
zkkpd@MWq@Q^urY^m?!dVq1-#ltz(}&WZWxrVAu$dFNP%Rkea;=wDEeGL+pE*IsM-G
zo!|L+p(BNtYFt|`1jOYFDY`F>l;sQUH8+Dr#(U?g=HtVfRb&@;U;daXv`)DpW7NEo
zhRmSUda^o#3To}<pXX4EPFtxZ4qlm+V!SX6lY%I|95{yg!R{~>$b&~TMKan!d}8=z
zO!V8rzeTUk#yrta$Wasr!}Z*d7oRz1YUS7K#*Bi*yE*1`&&m@g*inrc{-tBgn+rK|
z(L%_#vgZW<w={s}BB3(pG4GoTq<|Ho{}2hpLyEecf=ga8L*sSxrlQ0FWS2a@HQgO(
zF=iB+Gm7mI1S;3fJij@^FKywI<cu2&H$7PCiw%~kTvx9WI%gf#W*Z--jp3L?rE+-;
zT|L&-8A$U7d?3ZtE?2oe;__Ht$mFbWJyu@jJ~`8URu7gJ#F0l{w?)3fJWe%o>?#^*
z5_v@V;`Z{-0sVE(O!s3>^%EY}nCaKCQ9I&ZQi!2jDO(oi2bZ|b<%N?k%)5hEMO=U*
zcNr6ZAo|4wp2WH_V!((-s}cQ9M)bw>h&mt6@bAAno;kkG?_`Z9)MJ!0o?I-emwX8$
zLm3ZVql?%(%NfvkLtCro=;rbwB&3pqE8mupX-{kk8=fb^M)EE>REp}s8D%b3P}Zzf
zz-^|2+eke)vmpMUjIvJ2LNk5%0cGIT>raN+BS;_fipQfmSAvJn7J$Ksu6g$FUhqkV
zGs%!%Af7?+zssRjvGl9-T624huX(XIKAF#?v4mY;vk?=%gSTSBhts2E2s4JD@P(s@
zd}1wLW}mk}aV#Ymc+JT$mYm?^Mb!Z;gzPhyC~{G~+vDjutJ&W5H73JPo>Fw{{sR1@
zc_2UeN8^)$S%b#N7@hI8tP<uZ{}`dKWtH#~`6ot8N{+kv+iJ{Xlo;1CIZfZUl-e}`
z*|oau1@WwbFMqz@z}0M0*YVQfm(K6Ydw+|+m;--bAN(Jtdj<b5Qmz;NirzkHy~M}s
z+1@%wpUbLK@3ar6i4E#)U#us|1}i=2M!w(P)yDYYFscpvsR8u`KfsQU)%W$*e^AxW
zcj~j=hwUZ(+Q`;7{4?Xx`;F%d{n~Qo|M$n^{n&Wk-kJrIehMbVcdbE>-|Tm75D>zT
z2Dz4}lVPIZBz}p<Z(sg~tly0usP(iT&Sm$oPWdC2>ZAmOX-`K5D!2-Tu>W%3v;(VN
z;G3Gh0!O<6_^CcTa9gi`Q+D}>SA9zP?wVftPR;|IPPdRRf_;W)Fzf`{ePtf;E7!G=
zm2)xKD`+muahs!XwJE?7Hx|Y-xyYR3(R1gNA*)<1wz`2=5=Vx`zGF@=;$yC4HZ+zA
z1Ar*HaX^fOID*E<J}F1|&fSVHm{K{uQ9i^b>j5^}ZiYeVAF&0)R%SaVqRvO_RmBcI
zI(2^{`5}hIAK<1Yc29FzuDfJQ=l7*O0(L85o|0I5q^i~K$UZoG-IesI0$T~6DMFb$
zTIn?8APBJEzYetX;h)6$WVmGQ-at+6uNM0A&|Kyn|MD$!rNnT1MBqfvQ=$%Jr^jNQ
z=(@1No)Mg1^Dyv16J&|GIs$&Lo<n61C%Di?`}1ogdQc6O(Jx1g4+*iPn8hn>W$ld0
z+cR8t@p1x6cnO@wipM`sw$cKz$rvo%%tQ(IEo{c4#`k<+Mp`CP@Redli~Y02F_Jzz
z{8&X4PHWldsH@~qddt+aLe6jk#@@wYB3b*Z@rrQ}osr6)zHdlb-K}}}w-Zw$idN89
zvPH76Yb(%Z_e1*Z`Yn!sg5+=S&A;BtrsK87m85g9v*qg8VGxNvxR21NR?JnXyASBW
z6N_gk_X?#><-E&gh%|b!RF-2P-tNnp>pqOb?8jG$7<#>z!!3KgIu`c99i6}AG*$db
z!J>1I{j+;y3D|FD<K!@lyMZMHB^%cwIDz_p{kl<Lzn1(7D?}cV?v4fW_qVOQ<<!F&
z$-7t>I9+4OEqM`8%HsdO$tzLUG78PK{8HOMt%wA#@xXPP^mA*aneN?SXw(|V{+mcQ
zmT4)zmUO1X<CJ>Hw(Dq7Hy@V~^(}R3ygJa9saH-8Nfoh5ogdQ4>(oZ7;|akD*3%Eq
zOF=Wa2!<Z;|H#Up!TOFL7VpF}!nY!9UB`~U(C<?efRP=D-VANH?1FQ|RYQJ*iy`Je
zA`;vbJ5SBMKj?}4E~8iAmzY{gxK{mEnKzKUYe@kvEh;V;hibdwY!Lx@Qg1RXZ;t<>
zD)%~8mZJ18V)L6qg2TFZhm4njq8@metb`#+#hciSIl((QjLfc<#vtO+iVdhabYrmh
zP5<Z$>szw7<ZDla{T?B4X|2$nOogYefIB$z>TbJ^-T5r$$=3okMXmO9cmb!YQT(yL
zQLjviwIz`Gph2_7x}M@K@hFGLQJxSqatk<U|4d<dl?D7Rbwbiq>hk`+%jNx?LJrAA
z6qho^{BJJr=JO78<6TSTqV(ToO6G4_T_eBwr?;$rkU!EPL2l}J1i5SYqw=c)?;72F
zRDMUzUrND#tG`T8IB^^k+4DtZsY0U>%TeqXqQ<qQa4<f}eGjpNFmszZU+!EGif<G$
z<swCX7Rt{;c`BBtVtFc)C+C(%o}8<i+8rxSGViUYZK;Z90t!%r9WO>!V!@U9a{gFA
z$ebFA=mr6l`6D@G<05GiPw`E0$dK4NgHE3zFe{(ikJZS2)o1)qBuAN2!f^l)ei#k@
zO;A;0$4e`su(%sw$|MP$5!_sTs%~6Az3;ro$eD9_zd3Vb^{>sjfjKACoT;kjY$sQp
z=rQlTli5A#qJK=d7KNQMX7zmR*Dl>E7SKO9g>T||Fh>3!(tdC;f3-)Cgp9*R^?c?c
zz_=dr<-UpCh$EDJt~8uS@D+Y@@X&tHL?02jKbgFED#4kqL%;T*-u)rLU9?AS8j-Mi
zsJYRKcU2FsZBSR>90}%Y)7rvZ!5XFv)3{fbB23gw{-o|x>_*O!=AgT$5mIL6e1$89
zim=Ow@2aLm=h^jqzlrZeO01!tq6nu9?K8o<L_?Q`P5J!PSNY{^IYd>OE~Qh;RZry6
zOU3wEU%N%!7-*NaI$%ggv}a%q3XuQN-J`}|+kiuB0~viU7VuI$^_;X_Pq}A#;rfs6
zBceg*O8tq~_Al;KDlz7h(YIvs>2l4xOi=}wlKkyex9U;zPkv>93HC~Ks#Yn*NxA@U
zy9E*J25>km@pY5_T~g2dAAg%_=TClHm4s&GV@LW&w%1A0zks*+F0@oIQmH%%(MQ+9
zHd+AkXtHle8i>KV1v;tQH?|7tP7&K8`8LIuxjI$9pv<IS7Eb+wI+Ol~Gry?hT)5iv
zZwGbo?8u$vzcuuvur0(n?XD|02CDv$`N#|xu~tX|=}K>=AKuCD0;eZ=EONS$$5QoJ
zCXc#$oGy=ZNnJHRV$4}!-?{?27mNF9dLgJ5ch+rm?B?#XgTL}mH-I63<(49;;%42J
zhc@K2bP=FI=qxXH?{7(A%PH*GaR8IK7(xsZ<y1>DUs^en|MA$tAHf6RVAJi(AsXR6
z)8WN(-^jMGtS*`FG&o3ag^$zJB4IADZZ0oX&7{AEzg*Tyz#ej}$)#umZ|ot>j+%Nb
zW8?5QSL(}Uu5`#hnb3TmC50WY>(Z}zThC+Sut!T)0FA_9(z?iexdMrwOu;pLRTN|j
z${}w_LyLGx^z$0k?w$Sx{FK+SL!c?tlJjUl0r&!W06NmMC_BjHt|QXCFRz&wc`4@8
zhPsDGo5YD3iHe|^(}{YtS|(r?+mEh51#L7!IJHD;b*dqKIc3f1ToEnG>zP@UE^?+S
zvb;dW@tmOUG(XF<qE<PZcgcQY_7-8JPaN+p(*=Cf?G8wkx^u4-LBIA*1|t+AP?NzF
z>c~ufHHl{wpmg(p6i$a>dqj5uK!tpje@18bYxX_2Ggu&;_-k$$h8QwlSBXc*N@Oy}
zX)P;Ns*`whZ^-?+a?eps!jsF0H_R2B^(T)sP5$>qaurxxDWhO$LQyhwZW|Z^)~&T~
ziHDGu+$IGQ>}>$}N}eeztBl2z5;C*oVQEIF9qH7g&K+9qP=Lf$xUd~eH8M(Rbq87o
z>MFXRF-$osJf#1ta}Zy7IV0aQYIP%DW`7-W7Sn<<b~)W3;V~nZYu=FZ@9wNsa#xz(
zB&i|inYjYJ)K=7hz4|57Svm2i;e3(CpVTD9mBS7gM27CeIYfv1lmcixxkb_|Wi;7|
zTLp)bepT3<AmwFc6<R!?;F$R~&R>B{^%vS;zZT)Bw2BSH95iF~+3X`p|06Pa{t4e|
z;8}{CEk$VZVSdZ|HvXnw5_KjO9^{A6O=_c>SdCN`l=l+S0Og5tbv4R$5e90>c-@oQ
zt!9@l$I_|tYy9$pp$RKk&^r~m)GVWMF^gCrI9+mRy1JCIhiy^lEIlpL-44gS;+oW0
zCe|lkgr1ZWLQ3*ftM!m}v-@*8lTJ3N*?9aEPt#DRDeIjEThM{$x|8{w**L;lMQiGZ
z{rda#_CL#{^%kf7td;gNxAZ!=qOuNQzb<~PX<k=zr{dQQ+AwF_VyCcK8#!3WqD(C^
z<54TcU;Et#hcONofH87KK)K~!W!)e|q>Xf5!g#!?r<k#QaxGhPAH34>9ap|1KthZi
zmp-hMhr{BiNRClfyhTn_@{duq$U&*3K|E}dck?Q0-8cFa!Pk!nXn2X4{|cvRExDdA
z>UxmNj0JqP29>|gmcU9+ueyHA0^LfiyICqhA|m?D@2U2Z%Hm|%P<k$uvu{~whWrUT
ze-_D~slLz*?CvFr=^ZYnQgUd9Zhc=)efIs`%s;WIj6?lrW#7qmrcBZ%<S+B%j0$qg
zWjXw>40S8BGwy7c*)g+rnOSE;T3#}T=;jkL_Ao+7zDNaLT`@-7#?U(8&COX;`V)&9
zEDWTO(17UJFEKprDM^=c9r5YtH?@HEvF}dcdadl;P)0ZhVe<*uoTKLFMe~5K-QEy9
z(W|%A%4_+@W2^JzfYbW1fGBGHRz{``t6j&h0rEQA2fO*H9G!b+79#c)NPSe}(Bq+)
z+*PIfNJra*bx=Id{wev~bSL8mSy&fDiG}?~v)0Es9G$?`y7gmqMz?<M;!PI*q~nPX
zlK`GV`D|Lfjd-KMzsC3I=52g=mzl_zoxxP11ITDqdOEn5EudAqX0(v~`ol4v!#X-m
zYyB>;#4hEzMGZx2rxpQB7D?7s<jaVWHm3<aBkH2rGs!(Cil?YKUg2_7E|??6p{Rw9
zNjLr`#Mg)aQNzz>hoa$KG{K>skxVwAo5%z1jk3Dr5#Nk~689J6X^x+?@>WMh6)RdN
znePPEvh+{0m=yY_tb=$N$>i9zu8g<IVR*Pwdi7;+%%pA{VxKcor5NPU9RCFYg+qx+
zn)X0LV@FQsL-v&`A=p0qq1jREyjQ;E&jdzy^eK~EF`e|R)_Lps(jOm;PA*j?W2oNv
z*Flk7Wgt`Sv&Unp(Hrr-rQ9d5j7%8kU%ZWcxMEv(z#c{sq2UM{nfi{T31E5`PU(BH
z;IH%{McP{8g|tj5l?Iy!yXq=O>*nQU>dIYlhN&!)Zah%OXW3hkbt?6UvASORH`S>d
z_c?t+WwExZjZpf4!b`Srws6^&_DmV;D%qkA9QwMOFUr5=(mPte9+7jsIcV!-l_pg5
z05=ZWOu<MCDXgg%GNzpoYOWlE?a1nfc@b(^{Rn@&&bKGT%Q4cjx`99PPf6A)CU}+k
zsEjJgX<k^`Whhgtf*)$Df()xF@F5u`9+c1Kx6qbV6*O1KgerVBx8=Bm2~{D4%|_p_
z4P9#__#p{d-W3C~RUg2wYL=hDwe3otqPf43MoefQIit#&=!qKR{CJ{P;Wr-GlsGy>
zOFm731lbRh^Vy5UI41dkdO&*L$%ESQ|H7^(cS%*&x4H4E@Nw6S!H#Ava@R$3y+$>;
z#0P816)+=0glel#$ioS2$zA}kWG7>OweJC~l}CymKmWLvyb6wvmHf&h)4xzvpe0?b
zS#$XrZs(}jkA931RmNT-?bQBJq%7ud@**?z+6uKV-K*dfe2<jnG^DMqKHZ#INL-&B
zEm;K&gk$RF(}EFEm4FQ^8gfr{i*;}9GXkXG8&Tr~u4&IpnmX9A&pw+hgu=wJyQ%U;
z@J4eM1I+@5cX@3(dOa&2{e$XXH}7qr2T2DNJW3C*aLDJAdS~T(6CGof0wd6D2lvQk
z%Gx>Y)8p*9fvJUB?JbPHW_bZicPf)@$rbIoTJBSs_*^|$L8>kZJRA)w%)sjzFh`XD
zIpKRgJm$GAtAkCF22VzkxUCFv_9$gou_CS!4-e961F|6Hei5Dau%_DDnIog-^~Hyp
z=)aDl+S;k3@Cj&0<t93YBpQdPo8tD4nxkWv42|Nrm$;5XL>x%xwGGxjOjp(TxvGa~
z@VA2c)kC6&dU%Q-H5l({t8Nkmx>!<=N3`<Ix}mZ)keK5!N-)Zw%jzbU&*yQmS~6z}
z1Y|DRlAegrXx-E?4p{Kp0v2EtfGmTcQ@>`zR`&+1`W<tSCP*cK=P4%AT%Wq*LlY-J
z=SjTR6BYB_5~(2heFQDBx67@YdV1n*cT4#=8B1ARH6|^L!R0!;rw0S<+E@9Zf?Hi7
zLf_i*GX!yx*Qy^g@%8c49Ce?*Bk|@CZiG`&d5vCLTf5v_R=0d)*`XHr%Q=JC=kb?(
z>a6jX|4^DBEJdg>HE6PxXGu@u;@Bv;)V2rkA<b18)Y|t2cd7@iwwuWrN6WmoE$H6i
zo&6o!EYy<w7*=!nD0Z>xp(>g5&EQL!wzfy<F|BDmDsV;n-X~=)fg_D?<hJko+(_Mh
zf=h0p#|tQ~4sJ5P=8EsSIZ_Y|TUj!t0nl8r(53tX`}PMJeCpc@*flcpmR#X;@)jaZ
z&Ql+<_dj7<LfZY2vPiH2q?8R!5q;LK=Ez4;!^VIp^&<t&Fn+n^SUlb1q{~q>ac71m
zs#hrzpd(MePHG2J7pfGxSA7|?3nl&x{Ou!#Nv2uM1rrRUX89ObET59XjX|u%Uj1AN
z1U?&8>ZYQMa^A5ksW+>~8LtGo#hmmY*c1sK(^fqU0M)(G>Kj;R4C;npi<qO;>dr66
ztTrhdf=+HX?GAaLv5ZuKwJMD5q~Du^b^hAjWKVAoJq?kuQ-q%jHNNSoaBmeORVO-4
zg;vpqd0wg#+;{M-`s7}&wc<Nzu9b>r?A9Vy1&$nDTH?R(R}0mw7z2gf&m+()7J6Rw
z9As4$cvq|a3i!Z2C9FgKNuHdRiXwRgdc~<&+TYDAU-oPnWSl;RDYGke61y0nDrt0p
zl#-TrA=uil36+z}NgCy!qfoCXB0oKO(S)y9wKdZ8*)A7HVLSjH6(M+KlVTgj&czR7
z1hGJNxx{8#f(t2)$(_`M(Rf@>ip<n`dO!IDv*5&$GA;RS3MovJARg{EK(hEP;TzL<
zFK~pjFMC#Xo<3gASCgs+j;V9lWis+03(i)%7s5S<jWI@)%W^cSZ>l}Py0sVu#EB~R
zUi)v5h_Lsl`&&LXBV+0~V_R@1CvCcuDl+va%NVXUEbJ?jH<UshQx-LUD&Rq#3vs}}
zF$Hqet<gY7B-lXT4csXSPTRwF$l)xF^IGj@unKK|DFt<R#awl@^*U2cyvfePwiVcE
zZ+L~-{E&t0qh~g@bu_j?Kx|-XgFlv5*&S@wR$Y%zU(NE7W0$ab5<u$Q<)wPCyLyzd
zya;9(8%|)0)jCBwiP#N&8r4W<<!3x4B2lW6_v!l#;$LgYrOeuxS|}Wx4bqa)OW`z^
zNfoH#N#16O0gCmdj&tx*?Xyu0h0~o>I{W(S+`8G<*UcOyOt1E27O17%FI9z^B_%OZ
zwmku!;)9=p@;GKSw!cZ>f|e#$v#0x2e8$;YJ~xsJX*ajj#Ax%Xz56}^ziepgL3cap
zzTd<kQ;j3^EGh_D!Uf1`Ra*IninvadjYam<9}6omt4Xqc2**!Sn$cM1*iycTAK-ua
z0`=GVNQ}0OLSqr8<I+fSEtJH*1`AT!`Sc1$jp_v?_)<*Ds4B!OqTg<qcn>IY9u$4T
z016cR7G(Vlbu!4u<$rN%lH#s4G91`vuHvKV-keRhwh8#Bo=}r_*2k=pkVLf?%Zkp9
zrJhz?A<RDDtU>BdrHUy72x{!T1Fk4cH{4u4CN0{e${2AkgI4zxna*L=lyf_Ky}}PT
zr$<};8AYwx`%6?JE*%!}&CT(@!bcRg)H<~bIpbvua~oBQYL<^?Cx2X)2@>h;W@qB<
zvD~6)iSeLjuLP>_CAEqq<f5;+l+(Q8ig<Hss~%#0>d3HKR06!Il?->HWg)EY0fKlP
zO5g1XPyupL>Sv_s?xQ#0j5{*2xFRhCJ18^A{afv83K+A?(qpSx{uu_mTj3R(^;a;Y
zPMr_1(`)32oWdaDTs1prf_o>D9s5?1AkkUWP}?gQnZD6Z-`>{9(9EfYswre&whtxy
zx?2T+m;xeF1zKSSTJ1fQbdK9H?hM#OdiWL4N&Q3-u4=C;_^y^%0X{{XQ20dIAh5#u
z_Cwz|M)1lfgs7r{@1d!W7o|o55w6UVw*$iFitk}H$wQhMsMD*SU>`u=uY`@Glvb=o
zs5tcwzXVsa$1+C7GMur9xqs+s=+lK2JMlXz-Hj<v*qV`xm?gq=sQs^@b{i*yp75EC
z_+v0!_R<jZ4<6MLzvpKq;TA@Pam~O>V8xR2BtdHMh?cmYPZidcHGIhl5v-H8wB$uB
zj+EELa=ya7TLnE@C~ZQ=q)kp7IaOPI6~B$`1Yk^I;m{*)HBMB}FUWGsv2Um>F{02q
zVUDQ=UMq1)3GcPLWDzqW%<RIHWD-kL<{K36UHREXG*PH%Kh>i+qO7`0@lXWbWey}C
zBY}I#j>t-eq`8zUoc2Hy*Db?SZ_=$o2SW5H=}L2=qD`1RT}%85kgJWoX8Gyh<PZ57
zolxaVnLH3LP0w}E&stulc0r@r{_;2ZVl>IB1u?Xbd78^V<94WO9AgL}3na<`2jI+2
zZ4>$-8|3N%bKR@n&n`*@m{6}iMu@DX(jz>)C4KeYQdumM<+{B<{<c&WI)BR4A9WUY
zo_v7Xd0Li!;%bXT4%z#KD639R{bJGxq!ZcKloBFKpChI|){Q=8fP)U>HVUG~Ij!^j
z^nNFrD6z|4GenGrG02YX&lnARM959es~Um8p(s-Bx1Ii`@bZ)U%kE8dG4{!-$N1Qm
zEJNZ^Ze?I-Y_yL@WjtDVBczX2(Z+gn2pXsCc-q)+I(iGS^0QW;W<(=sUxXRCXq!ZD
zR)C3KX)2Mc#`#ay|8V@k`sL~R+B!T$T-cS33BI>@n6cDD%(XdUO6Krq9%^Jw`1k?7
z31XnFhBec8A6BZ2o@IQSX&+eP9lWVv9%iJy_@D+&Nrr4sr%Pr_#$>7(S9-$6Vy~0k
zx04iNPJiaKaf(bB&@2*}V3}1V+B|c$AP2dvn(3e9R;?ZMHUWF%yTlIwi&DWD(j;oP
zH`xJjPa9~~UX=EK%*+R+;Aq|2P^hXY7}J<&7Cyq7oIyU@JMgD;%Ghgi)azfW*XrUH
zx4|32{?RR~WMuq5qucp?8BI#!wr1u-Uddn4VlO;IU)BvENo)9$<NTL+XL>(fCEBoU
zEtSGdnHS1K`^n?Ov1?+!pHr6wy*FF&ML>IcIy0_V)r%Y<pq5Ip6HcZ0m+>Tu4Ts$$
zJ!e|{B`tCjCwns%JfPSCd(-d{suTPZ(rKHd8E`MpK5}fhixtc3tg*K(R7t+G=uO<V
zX*VKaW!l-PxI*xxuMnIIjFJZBSg0F&2@F|s=zaY+B9U@nFN=*i)Z~u&9Bp3v+xpNh
z^~i~U7y|J<oZ@31-SGGclC2wPfObZW7wu=%ZtmO|_gSDx{x=y0`QI2}Hoq9a556}+
z;pu6eUmm~@lHlei`f1DqI>HyqBYk`!YyK+t4u+U>#(}Ee2wk4G{PUWX<H4evTFNI1
zYH%bFOtatpio&8X1Kn3jG6nvk)ZR}&LLFON!BBdr`ob-Qtm=F5x1WE@T9&BuX?0Gr
zHgrf&YeZ-6xX`4QX5piZ5UQ1&K`d3DX(pE&A1Q6aM|9130>cP(2|=dEbTgpQ=`H1D
zd}cb!r`!KsEE;;8ijIJ4rYS>)XwPa<`JbIqN(X1(tO`Ee!8`i}DSNL_3|6+3&9MB;
z{HvU@isb%F$|i)c!F|eRHU-Mc<*$9FQ}!`=j#IX!yhwE`w=lg#!jX=by=<wT$_hSj
zoiFfF8&j$v3qEKC?ILijrM#4Ootc&f71E3svwjsvQ8F>>a!+r(ZU3fF8Y)yhr!QMl
zf~0Bu%J#nUeKg!@uzL!Y@4vTezH=J+Z;%FKL&?72>@UI}UXdWGhtgK0&U&(DK6^f6
z2B|QP81%xqD8eE2<<mJk7TZ(Qml*y%uX9nAXLFs<0~qo?#s+<0Q9u71)yOjYaX11^
zZ=mVLG|i}GLh{kkqZ;L9_8a*BQ07PKZ3mz26;3UKS`(?o>EFkY3i^D#GU#h4q{zS&
zJLDo_YzqTAWOs6Sk&~H&?L`7~ZmY#_N$v0HQuiTabnb$047_hxki~GsIK@&o339Pm
z%I&3}XwF<-$VEe`eULUnj`S<oy+c$K)@sT8U9!K*`sE_JmeK`P))No%?5u~lX_bCi
zt-sd!h3o1$wu{Ta?4IG6o2>pO<yb!PJCchvL%pyIDn{_}t~;5EoW<^@qmcPPls{qX
zdu|ab4{=Tk8T)8KjF<R$SpJ}3j3Dh*<<9XEe3y`btKZ?Z0OybVUFWJH5djabKpVcc
z6#ocam1y$A;uDLzr}|h$<^s#JiaQ$*Mb(T5lCaQ^AEruV|4n~U>Kulh#?Rg%+$BS(
zFjq^aybAM|qQ?#rKKN0W44WGnZAxpPJsfyD_&y4VJzO;eS{;8^B3`=DQ;FS6*svq!
z6OwTceC4>_ZtSlz@7krlEF?*^b?d1J-*0fMUqGy&yF=4wM6A63pwj}XR9Shyo582z
z%YcWN=|s%CB+nm_nJ<$7i^#3oDW4Tm76S||xr#}!EzKg6wN5kv6%O-wPB>tP+^ajN
z7jkckxL3<yn4`=hWIP~$0*!$-chrxIvjRSGekS}<CLPwo9TkR}_=JW2LM<V7j0{D!
zW&Y<|G#T8j)r#3$1i^tC_B8C0BIW}!K^2Z3Eg(X{i;W$_h%utwunQ6-KTzKH5m+{M
z@M4%b!}BDVjkx@ctrB7R0a<=Y8mCQel$b!yz>O)M&;$hnEpZd2tBm(7&lkc(g7Qn`
zh9WMoq@MhXa#>eQWM{bPFk?Sw1#&8qI`G$aKA~6C{hIy#$s@q?4ZCDEEvsiSZuw_l
zt0cDgSb+09pIFdPaCI9`)wiZg+taBTGM}iUxad>=i@#xGe=5bvpjVz@Z2bl%7)vAR
zfwib%ro97dcny!>&d+`uktjVFDV*wZnheV#so^jL6kaa-FCPwfrNqB6BTx0~FFpG&
zq=qY)%6ULUq`6t#|2NWSV$*^w1-9ZVnI)Xa$%<z$!?33-(T__pVH7Q^Wgap*J{Qa9
z8H^=U^r8?hfj_5Qg`sc@Gsv)U0OS{p#k0>9#_=xd$43u)p)mi^?R(C`e8oX0fta4A
zHMEdX8FX2y5g^zLukA0t2qD>$Asjmygn*3_KVtQK77-b;H*}8V2o%nxTZv-npJ&DM
z3hd(?+QR0K=2Ahqt&ibz)O=d9c$OS0*&mWTl;$*Cvhr(%T}0T92x(PkzkC_)4a<e!
z)~qOW#g|o>b7GvI<2Q!PIdiEsJ(62l7CCo_#GIHXYwELyUm)_py~0l=0GK+qoG2OL
zsxr^VT+n`hw3q}cV=7xJ2Cyqv$vN#5Cnl$f*Lg~hj($Jqimhb-DPv&v<1_@L9o-qs
z$Zggi<pbXr$oI`hL{=EjBc=W-CpxF1q2Aed&~Vr^9WcO>N3x!n2VbSY0)NHu1Ex34
zS8?t%Z$)t0TrIH)Xb86^^xue;f0Nr{J@+?4=-80*UkITJ23>hoDA>68YoS2nx)VKa
zhy~7#{L0I)R!LN#RyWsRA5c7mVnUWOVor)$6<+Mt1k{vY2>4lorP%uA*GH_%Wz)sp
zq@d^CBH%dpO0g?JcQK96PfGy9Dz|3;3b}`U7$Nc@-axp)gxqjck4u-aAN;Bq@$XOl
z9#$owFCt__W_GF1D`LVwS}IecjX(C1_mCeOl>9jGN(JZeU4Ti>2*s*n7y$~3mP8wG
zg*<2j-M-7dfHtJm8T6i7Oc7?bfLJFHNutV}yvDXbbI85a7ie|A$BY+-IA;O@_UZ9Y
zU~kLqoPERC6QC<)m36U<N6GJx*3geg*691J<zD;qAE5ev+UBJzj^iaUabNG5u8uL5
zBO<-pQm&*$fe3}{`wu!}yZvGWuV<uP$M1Jzy^`1En5}#wyMXJ(WTicHwnDd)Ah~p&
z10^Sw+SUh3PTI@qUV6vYMS&n)EG%#W#qGh)Fd8z&1n*T_sbdpI^go}>=_O>@GL;wg
zYq2ZH@vbtx_mu4K#P*{MbQu*1{yAdoG3+XB$_HZ8VU8y*)qD27?YV*uBQWuZ2HuZ-
zHZ<Wz@8UL<P*ONXKgL%kybx>Atd|4)+Y~&^4GL;yj=&c+)g_Wbv_CQFYEoh<u+B?;
zk=ZzMlHpu5nLm=6EK-quR+qs1^?9kGPNAd#jI_)!m8|pA$Lzy_0zQI*-<{V}R94r`
zO_!?7ov}DGmV0B<tp#wCT&Pn%N6lh6<-Qu>%v!)b?(zaViSKp<w(3*wA_gI}IqBNB
zasI1F_QW0$xlR)2bpFH{KWcx`ODgzeLq{34$cX6BxY3L6J^2qdc_j^pI&WjycKT%T
zmnA(th9cIA`M8-pOssb~A*g$xW>8VINSN>q5iB*Iu91GS-z=XmKL^>`Jz_rj`m^;E
zu;05|IifmUu}Tj7;4l;B<i!_cbO!}1k3!`H+3Be|)?>7<qu&+6dK)`)0&N7^B)LoF
zE^Fcl8C>JuT>GI%@T3$yl3B%}y#bbfHkWkqiBVXRakX+37Av`4d!x*GQw&)MhR<Dy
z*jIS%pGBRkO#J5>2%w_u<Lqe+SsB66k~9dU3Pj2E3F{49#Y^TLEM#J^hFN$}^^1N)
zGys)4brPvt6}(tWJ!@aTPk53!gsEULb408onNnE+J!VBY>ggbUO;2n{$kC|LghwRD
zNmAFET7+_+MMLSs-QI+m3$#_|L(DqX7LMhIHM2|~^e{^SMqRs1Hnh?x>XKrZoYdkk
zySDwAa}i~<wJ$|g1fZ7&#$(pSjC;a&u`&3DG@ih(KiCyd=~hKiD6t7oDz<GhIrPd?
zQ_YF*I*5{Nh@U0NK`MfOTbxp26S_<L&%&v<^{tO^+($|of`oBQPN5H;xZ57@Ooj8<
zZ3XsHJguW<+^2%d=xkpR6K99pIKNi-?C(-LY+kz{JmK1fTJnFWhr!8w6?8*xM#~pW
zGh%-OEag6dQ9{nXS?j4QbM*yYfvvL&f#bOSa7M7HGGEV~*d}2t;+JsEz*6Lf+~-SE
za+^w4p1?w>wFu?IE4n*{`wZ&EsRinuZ{{N9n6yYDU7t!ekBlXwvAj?gT~1L;WsdHJ
z>=qMbP)e>7cs$5?&Hm|mXapqsjY|}qb)vTu{K;3!DXmrl7xhOLFdhDFme1{Mhwnt?
zlF+R7HJAI{!dtFHmtR9;I(~H+J}42Zv*fz^NRZ{Ko*ywt5Yho><`=>cyqPd$`|L}f
zSG;)@OYP<oKjs6-3l=}8m~%=Jfk+p+wS2z)0mtApYmn)Q_4BwiR>L(4l%q;175F$V
z<Q|n8$FtfWR~~cde-IF62u}$EkmxmmH-%xhX_ZZrt%-%={wn1E<DbD))Oa^@s~;c6
zJ!t&wsB!&#<NAduFD>Exr)Zobn$Wxbj4pI8zc}^YX!#VXbiTk5{nwOM*cBiyj5DJL
zcxC^3ZnnLmZcY;324TwXrWl}zvAy`dalrl~g+~l1Ec1kksP)O{PqSoSt_v$MSmcrd
z<uDxIenc)k*Oo5})m0X75iBHMtH^<mCHv(HP*5(>z??*A76#NA>OBu5l)z!hXTfS$
znPZ7z8p2(jq-5=a(9vAsG?3*bEuJDuxF%c=QOJQ>eYM8zmzPo5lYG$$)r%JYu8Ol+
zxuRdiN5p!#(Ei&wBJ+v?0t;H`P`4Q(1`0WPX87!#9L_3|Z)vsSucjLA-2+u1l0N#+
zu>V5VDP+8)_`h^f6v9t4&?cP;@`Zw%kVrd1*2H}7x)dth^WSPGD2$k2mO<b<vXR|j
zlwd@0l`*!$_;y~ZhXqa3RfhTFonilya7cm_g_(*Vhw3ycItB>er$k}(RRSItcK$B2
ze=(Uw1az4%)nUE|Fy8dp-EvnelmPK|%B7=hnTbuMSsQU*eK~7fPNCFW46a^K#eO1y
z^e^Ph`3Tk7PI3Bv0m(5FyQHPmjv>(r9iu#(>NWN$2AIEHH&4=y96dm=_VOYLtTT%1
z=YojXGMjn(P(Bm&SiZ3%OpyFuJrdN3kQg(Iv2`edE-`VD+oW?iInFcewCOLn+Pi<^
z4sI^ZBWeJXldKG>c@SvUcV{1$JXX*L<0JCGV4x{>)M7VHj~ThaxLVCnmp~mtHI6*+
zzpbB^e}z7M=F%=kFvbyK%kcyj%1Ixfl^6_vL^yu+40Zn4r$pj1`<9dviC;6PF3QMI
zmLuY%ufRkHCK3%*f8tbqRH+b^j5*P%{bK}nAso28=;6>2cktilgw21^2g;4MXt7yh
z*yYo^cuDvz>_e=JUgMT?Uh3y>r}c%IA&A6n-=$8CTJ1!tGCXS5P*coM#D?6N=e*CU
zdDa&2CNl_C`7)<+QZz6r5waBjS$Tp}`lO|E<y?Xlzwv(9^8c7dIpIl<r_@2$96`s0
zjY8ehJ$Q<7DP|C|P~5rg8@N@)iloK!A5ukkypcARY?((;ht|+l==VhtoGmXY`4b!S
zbYw_1=8_)!@elK<z84Jj+kt)R*<4U)?@8smj0JG}7W-OCoQt_Oq%GQTXWxrsFRDZ`
z+cVSg&sVZ`?CWwLb!_%bLc$2cZv1O*2EXtK87q?*n?c7x_IFl`lzQM<k(cc#KO)2)
z(G#7p#g7ihw+YS;70OMO@l77sS)nJj4-873%gZeJQb_eUz)br?3;}o=X-I_YO+U<;
z__C<w#~Q37_MJ5UN6<JN;RZv>Jw!Q%98t$BHE60i<1OqP?~`|AjrSpbIOQ_~enAF2
z$i9~kRl#q$;y;#S!(ll#(7&gQ)9Gff%ygBid0Vkl{F~0NLg&}z{1WyPv2IHrxKcj_
zV^l|-|Czm>qO|Gtg=HG%jot}2=EbM46n7EC_=S^&kMCD}Jk+>92X!W!O(?h-_Kju4
zt>+=NJ6rjVhh!^1S%mog<TDj26I<1&L0rV^^ERl}xrQ<!lubzKo6!NQjSKzGZz<=p
z@8+Yr!{jT%KkTk0VvhHttZe8|0m{Ah@1DsQ^Kfg18~ij#2q=c?<F-0TBz_JXrP{X4
zsX$2#-!J=wlfgx`>61a~Dn)r4Q+1(Z@WFZq@yO9B2;d`IoVYGMhX)Fp)J2UQ3|3JW
zcdKE@YtN5-65)kM!gaVLc`g`kw8&`X9o#`7UiZ`a9I_pG!9i>X&BKD<;7OMJ8Zm`N
z#^E!wKlYhEoT*LvTnfQuOIpB>KKu@$S{H<HP@9-vN<(%!5t9(@=lEh{qNb)JHRwnU
zAqkjmv}WNuvPuELN8>}9D+}G7e?|Y0cn7P#CiLq~y0H<RdF)o*fS$xU9nwWO$+w?K
zh_rx}Je=hk-7HZ=od!Dci@*S>#P*S{LqrL$-7IVf@q(C`j_W$+vommG9I6{vz(8ei
zA#a6>!oLY_(JH5MXFq8UF|1VI{*~>oR3J0eYF}jTpm0e;%~xIcyYedwo)$6Wja{Ld
ziG)FXpF?H=)=G%?1hH=;7=QJU<_ZbPwGs1HHbf%y?$pV2n)m^Y5Uk@2Nl+SSCUHSE
zVB5wUf+zB`E2@>JWP83z^d1HwkAA+&;j{B~GoST~!;m<bW&knds~JG7U+q9n1#(d%
zsp9B2ahS5c+->i{C{}l0EtmrwInyhg7I{<7$DJ=<SFgs~?`v8fVv$+#lGi#P>&LHI
z&LZO|XW2Y;&=CK2oR1DBdWJ3?muNz4nBpevakKEZY~LYghh!KTJB5;-h|v*x>V@Z@
ze?BdlW&t_tQQdoRJc<xlfCw<3v&PrB4+Rb;8jBN0uO+H)U0&(Z*XWo#p;9^~|AV{V
zc!^l167ivZtGfi7-iG*o60Qc_sVksUdr$OZ_x&=zBh1g)P(<oue(yQ+Yn1tULdHps
zx@O=Mh3%**vL9gQL>9)UWquAov*z@#Ji?a9Bh|+A30-y>>RLcBvBupKIFV>BP8_+`
zXe_Ubx!p@&0V2R)7=w#gmw4#Y!FQDb0d;Yr(PPXY-(_oj|5Piy%9{$R`A_}W{Efr?
z;3rAh=+qNGgtHT_-Oso_+fToz6Y7X0VJi6F0gq&qs2d#L*LVIAe1V6s+-j`>$MYXU
z9xwrjeKJ&pv}E~7yucIYYwTC|=<Y)pekB@;v2nXrWexO{E`3=+U<T=+1rvs*vFg*-
z|6>>$AEcJfe(sWf{-fGj+))mfmF|q6)%m3iP_u^WB<N{ymzBO38<E@*KOj3>Pv86l
zhc}AI(<?7`p4oq@mcGH7UYIy?hBle#lr0{k@|ZGt+MBsAcjO0WOJzSLAsRd0IDfD+
zc7@P!;-mSuU!VBs7VQUOD=FcqfAAy^-14vb{TP?A(P&B>pMU%C#BoYANQvVsw7Z1E
z1z(O6dyuxSM$eC$0#ywE+vLG7@;9}w#rF!!SSO-tFVm>u2leOQ{u$NUD)no{?WeGV
zjHIvN##oEUcT%ypj?0?aAyw|C%I#C={PsP@0ca}E{_A5@kt_V<%>aymotQ`=e@l_4
zX>pT$-iW7`^YPai&?oj6lI$ocj#t#Vx8ADg5YKcMRqmE5yR@X(M{$0a@E_OJ6JgwF
znlL2(WlDc8(@4Mdiw=f58r;U#33;pIK9=wuHSIL~2g<9;5U5LnA35}eY7C+yC!nvi
zHFk!zXoGe023)^RU-DT}Qk}l!OzNw7B^zSMkWFrMTh2Ti@DS@ceQ9o@v5=Z?b?$WD
zr~B^37qSDxUWrOJE?w{FiWPd;n!LffeM2a5`1B=TRLxwJXecCR7)dG4h14a7=J=r@
zGynTW7daE2<H(zG8m><?seYHdNWim~WpHZ;3yCv4oIgehsg<_H_Nfl^4WSx3IHl&u
z=}U+e=FEfo^4m+PO`ZF$tEXQcpX_`+O>YCoPy5ak=;6we9rYnI?;dS!S8!Ww64sX+
ztYywDd<t4;sa_mBYjogqnjm@BdZ~F*J^qqFQ$Zg^;;+)PL*8<(4c8-WPMT?c&1>x1
zZd>63ABjd#t>bVq#SZS`GOK5jHrbY}YokiZMs6IlZgbo7QBPMPA!3h3+w8bVm14s2
z;Frk0fO=^9a=shm2n~U!t%Ks&EcK`7(CiAF(`KQn;QaK0oIcS>h$-ER0$WGsgN&6x
zgV4wEW*<srWIhqo5OP#pEKx)AvD|Bqq3e(}o58$$32H9;6n+bVsZ+Ar%m?U~q(>F4
z!oElJ>*i@c@^UyaXmO?&o;PoxJ}T>cU4Xn3yAk)?Y<b>7Q(+vgnK;1}|G=5S4XtVx
zX^C~5GkTFuMIkPEh4@l|30!9X$<M9JR}=<mkpW2^&-(bGauS0!f0>qNv&UoJuB7EY
z$ff&SM`DVMlzd_TZlU-5!GEv6h;g`NhfEZ6dEqzKEzIv|&BU)Vzff>l-r{p2CYSWn
zz3KR7Q1-~WJg(20+{rERgQOdA=s?Lqx1z{oRb??z&;bK`3`0{l1V}#~r2~qXM2+f+
zeO?L?eH|5@Xyv?i?#;41@{Z#eS{L3)orod5=VeBKpUS}g0bx;}euVkpGZXu~dAT<@
zCvS0)sBg?Kar5|3j9(qLC6`rt3h-r*J@2l6b_StkpEd(V&~Fl1^!tzIV-A*s??LvK
zk{zAeb@dj}Z#_T2@RFm!$%(@&ZhzN-e{fpf;tP#woRfxNl{Z>utN4aF@qW@Bs`bKA
zOVW0=g7$s;G3!<;^Tw9oX0>pINU(%njIt#2f8b0VnVz4l2B!*?faw(+Co5PaE69l=
zjFCrZsWbl~S;0bC!2+iamHRDYHa&gv_*m1@jV)=TSaV1wg%J43cndh(1uOH=F`F6@
zkIU-DyN$MHkK4s63q5UQTsZy{kGV%F*(drLbsm-2YwAB<pPDE2udndHZc>#wT}jQC
zGW7e2^}qN@^;dmjebG|BtdwvZf5Fh|8<a+OlD4{mge9;^-5Bo|WrW*)<4%F+1l=SM
z3>1Uh1wWKSkNryAfi$ZvN1$BJ|B6qx*vE_IB$PY3*;D8;t`~5q6LQ~rbC-dB`p=*V
zeRXcB*GWfgPQpdfn%<4y>=Mt!!uS{9aGCjL<T>k-?i#`{chwv%jCG=ehy)Ik?~I@c
zvK~_y7GuL~jP<~yHOe5vfhPNWH5!&b$~eP;kh47X+3OFznk&3aZ$g#nHBiIMa`zx|
z_wM)PTe5EIMuKoJ8B}wmFg}(Xk8XCZ_}d(Inmxnd4rN>~^p+=W+uPatSjTAQY1!Zy
zDv1WZ%`iK*+mo$uVP+HDrA^rt4tAt>!Cj%?pS8rS5&&r&x0WOA@6EAiqvDohXULl6
zhfHKAv{(KHJzQF8JIF4NK`h4i(wC}ft<Xj%{)bX_vH6;nd4XL7iL16e@af|lWK>4e
z_I*}3Co`7AC<YFvcVu0gd^q@#me>avjl)t?TeXMhu=Q=!8jNbg_nlE$Gc#k_|Lg2A
zJzDLIDQtX8ZhCtMmBoMh&ig7-YJqtY?BkXaY(t#=N*2^;GxP7|uHb##5T`VgYv)qS
zuT)BsRB^K)E9WawA~{N%0HboYBNca&3@)+}$_8HHwWDf)6|TuGU?~5DV0)!w=v(d8
zAgSZLwZHQh1LPg#8OuY`ljabSY;I@`%~G2$DSBn2<fO06nr5oGu(5!YbPL7YXJiW%
z=#phn;;@<-*PniskFnRSKW2r=Pl=uHPkABa)2k*xv_XHR<O!u~n@p3)6H{Hi@`Q5=
zMx@AsFN#ie?_FSi6(s+T0Jfj}27JxD`vEbR@&pB%c%KKLSl<=9!q)WoQHwc~Xshc#
z2~=^tl92<))c!~EU1}d!DKZr>5hni7M;~%ua>5}BrOpv!B~k9YmfkO{>$(2=i*9tH
z(i!Jszd(B^L$YVmIfMETc)#0$eFfT_sO5P?RB<<8CP4;xN^uuWf}K{Lj1(*Q8vi3+
z;+uGV;m_%by5FcL9;B0YDbY|y;0|P`1u&=iq|m$Zjq9}UY$Z8foAdtbZ}Pk8I_>Mc
zo8Q3u4sBQ&Ntw3BpFXrvixnBK60ySA$^pxocz?tipReXE@{W<eT23%lzB{;k@w=h)
zvSco69686432zr|cFPo{-V>%~3?5jTlg5v-*K?+L<%=OhVb~n3jKk&Lun)fI+Klby
z#5;66IC|m-gXMXP5o9^l<cK;|lvZ19{g(>0*fw{GBCdu8L`kJkSJvFe?wiM!ivCmd
z%;p5PQ7>CC*Gh7U1|FR$#SnUtl<ciHN*Vddj_dnByqybRRMoZjGY}wX^aKnVD{8E<
zCdJmIT1^U;8JU<F4Vo$ztXjFPB3dd`XMkEC!I=<_$5C3fw%)dS?ZdXVS6dYj6cQc@
zs8t^IeJjzboFOWxErf^i{r>x$c?D40?|xrenRE8pkG0ocd+oK?T6=9}Q+7zhv{~BQ
zZtw!b_YS(n*#_p>qkQtzLF3p+Uufdo$q=LbJ;f9I-MfC12e5}fjwK4x4A^E1TbqS8
z2PxL2ETol%kh1I5+I3!O?~ii$+yDAF_=N2Gi0J=oLzGKVGw*weeB>$*D|;`IPySjg
zav%)oULihzm1OJUt&bc1_3>%e#~qmItfU;FoUiZh+|0d4rw1fjju4ilWJQnLosLnf
zrZ$w}$y31Crux<YO3>pA#H9veqp9^ITtr<mM4SeV>z9?gTGE#%QyKY~!X@q--}U-~
zK&y`uu8g3pv9`YkBDwd$gT+`<({KFBg9mbDsW;ofOor}sHy{1|1^f3b9}w(O!db7$
z<6m3`%0;>`gIe^vp@#33UfmdV0?n!NhcF!;>kHL+`PqSvDYM5QXL;AXZV7ol!67@U
z)xSQE-XGNv8u`&^O$|BmPl@X$BzJ-%p+<y{)f|a3>f=a7kUKLtGIVI<)sAVNyovyt
z!I7CUydi)ZpaG*aeFjq?v%WPuhY@1TgAwuBlV?2nl6fonvb%T=0f36^wLEA*Gg78E
z4?J1X#3Pd?Ub5oqe10KT%XXU8$yhu}oI?@6z9Dv-RAoh}aRDtxE1Ynfy!y6=Q&$eK
zUzN9-j(UeQyvAgqV~k@sjj-80;Fsn2x?g0>ADI<BZ~hp@kD7Y12cOrl;aDZk%o2AR
zwK|O@7<nYlXm!V{P9DGy--qdkqhRASOt24Qbw+=XZ?7|yax+l-D@GXjzXN^vi^T^D
zs<p)(Y5*S(+~-66tK|?+3%^U9T#ZJ*Rx4nudY(r#d5_Rfd9htSM+_XlqWBiim5cBr
zAv<nB%SsET7L3e4#pgMs$nG-Z>z<V{^Ly81@SBw{PxIx=@;Qi?Iea;1?nb^$NW4rS
zUREMr7E8R`gm~Fqtbli(gqf)i`SQ&bdF72=n4ty3gy~17cW;KeBo;ansR_3*b7-Qk
z(rSyLJ4CML>KD3Jj5w`ZP2Ni&PIGBJH{tdTATm7zpx_&Ax<6iV5axb?QXEqoeO_t&
zyo~F|QO6?=u6>MVZnVp*@cpS-C)c0VR#PXc6^PBad;GE$cMsW0jKvUpdLMNftD#Of
z8>`{BeXC)$vYN>FV&i7!B8aH#5gKqW;4>>fx=HHuEpQ?pPv-MXac=Bh$Y)#$1eGxx
zR_S&jZ}$OT1;Q|aFz`E9y@=rGt=rv$s|d@{Si%>(v4jrK3<`6Jv7fct2Gc*3wb$LX
zo0lC(%8W`RHLIA6-No&yMCKh1K)7p;HI?w4Z|s)Mk&SHIRNwpSd~e25_D__MeJ$h5
zh=7=!D&A3Cm42P3n2+fvjx+X3$-_iwp*h{8VnWT8<<IZbS?tGej@VBzc|SmO{tp{{
z83xi1aZB-b(K;_LgE<)UgX;DnI6a{r)a)F1eo5d(^+H=FJS$UU<~9eq+-;u~fXw{}
zB^8ol;Pu28xu?9yvt0?RQnWGu`s=UY=OKGN%1ln%gN)c$o1Gy<i(SJZkyht0($SLV
zPd!Mo_s~3g_UV(1gOK>&TjA5D&ZEx$Y+zmF+nuOW8}0H|{1-+?ORjk}Q*r!J6cn$n
zV6QN-B%CT9Y_F?%FHEGVajTJRhXSm}@0cRkkNVhiay=t!guM;cU0Smo(|bF;Uno2X
zABdOk)?;+bYjG9)yEIf2@pg~><ma3}G42dhK8ej}f6vnGz8M&F)J3Ha+ROYqcS@f5
z_X=LJ=HF)<F$R=`d|gB%ruQ#s@y&Nl{fyj83;a;?_M^rwU-ybzem$1?MdZXuQGXm^
zIx|&lc2T&48Wot%uhklvuJ=nYZx3H#Dg7^J#@a8+A`!M@ZCW$1mv^&b=&!i}0At5%
zl{mvW886e1D&uRgSe&m#hREfsicOCAtA<{5m*IS|B8lu@GOVhwH_f<<sy7(IGb-KC
zCF#p9BNVUbt&yV(jiYCk#{VOvE3D+g@LPzL%k+#VVwknL(zqkOFP`MPBi0%Pll&16
zx~`0aDckTtQ-Jl#sNKn7H=#oZj@I%(YQ=cl!UfM`PNqV4E}CXp|GNsA(*(3mOZWtL
zdJ5T{34=`huGtYH5Y@e+&B+-h?u-A)ipg{^O~Rpc5CQ-CX8Yvj-Hk$FQTjQ$;>*c$
z=R~1hi)&jw|BZ1U+aiWe3Z8BCs$)!gI@!5xj79`swfrEAoabJDv?eYBo$^)FJ>x0Y
zT*Zk9y6YZwsVCV~8&J{~`1e=CMidi`qc1OwpBc({c>WOb-@k`v#w}#YwNlcbil$i(
zo|obC7LP}5tI?kBbN4gJ5VAQ+unKclK%%pH>?TMCZyV$b;(059x8*%_$@c}h?`{uk
z`3O5<d3psWJ;?9H$x+8$`zWbOI<W|N46ota5>=78jLFHp`HLfnqfx0mE7Cvof1mV!
z*YR7R56Ya5$kUd57j22LU$C_G)0XUQzIdDpZP(M4JjAo?7(YR^ye~V(+9N$X#=LLs
z%Z}m6PdVwW?iH!YNA}}C%tiXudfgz7rhMQDZn7kY)c?AU=s-g97VujxT^>}FQ^;>M
zk{nkGXs$`WV7PXCKrcJkw<|`Y<s_V@q)@b!l?7VH^tUv5B`+IQXE_dWS}Z(~SyJe}
z<-eb4d1EO;0A%Mp@W6idfxRR^d@7ep{Pp*VCGLe(;9OIJU&g?b+>c(RwowB)p#jT4
z7+o>nFyRX4N>l<w!ZFGncz>`+%i_C6N@7(r=as`SEcR|@O~i~qbebXP3<sW9f-kLY
z7Q;Zd`_2)XPvBC0vo}Wuq7JQd4;#6A50}&U)fd=jLSJ8YuK^c3J4&cQZ<kdm%yF^t
z&Jc4&(LHGU!Tm3cIu6}6Y6l=fn^m^Bl`6V}Qu7pfVHE5Y+!^H_J=^mgyipX-1cy<K
z!;`3k==&yR#7Co!Q#FGYyvM=S?x4{tbO&p<zP5fv#O6wYptp0&o@+2DV!!vI4*R>4
zM~y(rD1`syeZjx*p#Jb*HuKZKf5|Kl{?fhRFCs;NA0)t?5uc+U8TbXYJ`K<((+Rv|
z!Q*~9@t>a`!QL{fkA;jGyRmNhnerMXCZ-4_Z++w<NqE<;Wuh^6%egv2gi<6|o_nF=
z$FgOb$i-W!;vdgXeD#3%;O@bfkR3a1F|I@Lw;?cv7wA)#(jWI8<n6=t@x9nl&frwb
z4x*tV-}fC6ck_$B7k_<4fB8vjM9C4=5X~5$Xt0imx4q?B|Km*_JTcu3bf_O5bbO4#
zbeRY49W|c6CG%#hr!Z>4ZA38`O8r`!t0L^It>mBSO5L7jE&kER<R7EILZ*=?pJn|&
zUi&ouAB4QF!Uw3hejb}>v%c-a|D!8BhWpUSi7MhGPG-1$QLk$`AxBp9l`Vz(D)QUU
zYQJUl6aRQws9|pRE_Q!Xt-fdFy%J8I?s3QMQ6nQR{ytPhlsqe}?Lo;3@s-xGMOIQr
zZtFVc_qVUQub{)$V&38LGx!zu(;?a(%6__pQbm-HU5eFm(Kt~>>YyF7kHSv)rC@!R
z=Q0{jov|#8V~Nc7)?Df9LfGuBxeqBj#ag^#57lOh#m)(*&ZbC^A{h6NFn0f=kmA01
z5pqZYeI~jp^%cJb92n}m;xAhZLIG>R)o5W*fFLU?@lTlKH@U}9*ubkAGWfv_;4NiS
zb}k-IhmA-O^dbBvZ?r%iv6oGZ1o;=}?dkM5J{e<i`XxAW)<4|y$6ypg-W9i@u23;Y
zuS13v5#TCzWg%&?-{vGfY5=YfRm9L=fs5~dbxh~XQ}9X{vvKCwF<Y#;+esX=-I}{c
zzq_otL%{l+cXcJUx#eWchcl1O^e5C62#iNLi1PDSnwN9l?NBxi6N=~q&<k+^W;zgS
zjx=<~PN($=MS;Zf*2K=SvsQM#HF)Ur5J&uF!+;fV^_pj;79*UqsWp8zo%Yvdj+O>`
z@0_px1yE4o?wEM3b<U2~Ek#AK&o{h(4Q^@QE1C0FQQw|Db3Q7<gFHTnyaR}sT+9K0
z?({bdqKily7$7_9h3^rM+57fY^Q{$_fxm};&5aM~(In4#cdOnd$frk{ckQc9OjmQ2
zs#u3SL!DC#R~@OT2_}v&X*u~}u573E;GV_k=_c+{Xyhxc*Hs-{6hEAwgNowAi9TMw
zXAgq+T^$Fo*d(^1tU<)hd3PTyh69$7%R%nz?$O72Os9ZfYz=V`!P79H<c&}9@`tu}
z>RfZIEM%_@C3;#zbNUSG#_D}ekI+Vv@D`gufHg*bW=y|F7tOkkF&tR1=;pTv&pjFk
zc;~Q4>Kvj_-#GIfiVZ0$nw8Sf>vY#^hAwvQd4)vu&d<b-;IhLxn~VMjZ12>ask6R9
zSqwMo7lj7&{yw)J2!=faIX;aN1-<e7NNP5YY8?aHxQr><-P@}C>FaXihp!^;f+2ei
zHyT>W`@wiW`gaCIQ&$(GY3RGrnk&E5(*&(G_jVpLNIHmMz**w@uH8B3HA7ZAgdQtt
zn?hj7n)|BvNR;As`N?*=!yg;YZ^A8`2g}0WWqu+(nAySO1~<_&Hqp^KuW1h(WEVJ1
zf5)?BZo3@#*_aDY^M>$6`Fjau4?a3K52hRmsEgiDY!0f1i62o(?<({CG=tV7qYYbQ
z_{N=EY_9{@-O%k0;g?%507u<oLRxL@ywLNWv5&n&i>kV#HSzjb=HooeYj&VldHOPg
zQQEhcgNvTA<n2tC`q|T!l;~y6;`?c2960OnPPgK*3e)qFbburVGs&xt>(4%+(>?03
zqs+%*bErq_^`a-pwRjo-XuHL=Rs5rLgTF;vd0YG;C^pwkDg6t=y+<_B#B#`?ySTIG
z05&v(USD@)(a^Q2`8us0vR4pq)b7M<_W4j}Zz+)5Pj<dLoKAN3lmx8>+lH<UrMQ6C
zyboPV;?S*Bg7CbX|86*EcltZb&pi4@-+<-=rz-Cl19u#r$`ZCg)4tjHY=P#XB4j_?
zeY(eZ?KBGw3dJhnzy#r9Nt|(kw`P_#oL74F*BjA_*l9GpD1S{3x5a#C<|AL*9h5dG
z>?d?wB_3e(`?>9Up8S;YE|^j-rJ-4?QM0ra1BTlweYw4<TQIQ@q6NF*d~Mw%m$Q<0
z`)A&D_03AmG=^omODYTeK~XPd{50UgURCIsWit7lR*9YI4@GuuJhz_qLgjHHyV<-D
zM{n9G1GM@Jbq&)?t((@7jC9{DBN?VmgnsP<+`CUEc$tAo+W>Q!p5lo&JKA;_w6qHT
zkYkQ7{Xn1WF3fh-Ii`^}e$E-_Ul9#iawWGnll=>#6zJ9}n)RBjv{tf{ROzY1=(lGF
zobshiM%lkp6H!5qc|yoD@Clv9u7ld)<SMuJJHj5`8eosDfpJiGFLY#X(#8z%Q9d>N
z#Y#3&zgizFU?od8!z+8EMsAhCg<A)b$MUUn^8v?+A<kJYY9FK-9J0&jMR8sZ*~Je<
zQfCK3PH4BPk{#F7-OGcBpD7Qkw2Ef_5#^^Qry(9dVZXZbF<6|Ws`MAw&6|G0Yg$Ru
z0ASQvFc`U{rVcH-NzB6^VhT;qv$;OD_+XZ-Ev%XI{Bf7&7h**G&7t0$bHTf%Xt?&}
z!dlj5C_7GxyXy)e4bw>;8E!w<BSZXJGDHaWKq-{ik$w@Fv-||}h0OuKHQmMY4EUz~
z^a3g{7GATvOrN7Q*6WHFvCU}ZAUwv64YWJUz%Zh<N1GoKB07v=Tm<XZdtkZcG)m_v
zVD@SXRsE%5=q`-@pB;la(N|lr=2!bCCjJCqS$O-)w;r?cO#DK}+vuTvUp~--Hh-mY
zAcRJ|^-%I}XkNLD2oiv|dgp!?P>OBavW?oJHF^vN1zrZF=i~k665$1}%}wszUsK+2
z6+0aN%B=WN^sLr*bnyLreLqBVe8=q`If8muq|Yz&v^W>?o55%9J{GqA1`C+&26uZl
zb=ebeH$$nxoj2oCCnN!YGav30OhjlvWgS1;?r7Gw!&CDb_Gcn)jY9(A_!0Z1DonHl
zed;Pc019`lwjqLoq1Y$CJB^`+++MXHH$*OZYr;c*e7X8O8c?J|M4~KnZ*P%O=y>S`
zJ-|-NQCnJP06l#B@yCeI<~dD3G;E9Vu1%`Pt<~dlv7xP}{qqPoT<j}djhacsB+KI1
zYJ132tVW29jH+z0q_12Lvg=ydnSz7TrHp*OvhI0Q(oyFWqo;$dtZ)alOF4H&i5Co5
z3}BS1CtQKiJaUt;IkXNf_f9qQ8?hpJJ%osUzIblxp(3uOn)8tnwyq3yzUi@<5CIB8
z1i#sB6*Z>*fJO_Ky4B%^&e+#-^Enj>gzXa&A^R^F&~;YSfWdL&YtA<SZZaNHVdsRU
zq0|#a)wF^<0MnnV1s#_&Q(^ouGvjqdwA>A=`R@ex+?O@rq=+`9A3Z_x9s2r=@}1EW
zUS*F_JRdH;gN9zEY>E38YlQeK(?z>%D=Ec#2%kvnrg3CtoSj1yL0|w#s#{aHtxyKc
zV{f1M2veo%8-@Z&VDTk9;w;X5EVbWr${p5-jX0&1!ljW=`;R}FAzL>68}r7!^lT~C
zgGG%Emjmo(@}SJc3r=2Un1Q#O?hWy~=dFGW-5xFowr)B?56)pauHIEVfNEH;B53}<
zT-bEHLCxmcgw+S3rv7*>EMz5HsNMZbg?1FwJ4YrsCf46daSunSYTz1+IvWNi#5-f<
zv1KOMN}`<+IDJoSnC}o)JwC(J#@okByWCWgo<?<^rkhH?ZYrhE)C!k>!BZ)`h923k
zmqJ(lmCB7=qNRXoOe<W-wTCFFaG46hW11s=YO^LgX@-x=BZkxbr~2*wM(uVXhY_gt
z>pa7S(zP_7-gKaN8v3`4Ok$P>rh1+h$a5Ns8vXW&b6+l8Er{T7n7qpC)&r=kivoqw
z{i(@fhm8;~N-v?=e0w76i4Q=~`D(#(QqQqyWRoS3NFJ54b<g>ag;U>>fMR^ew6K^i
z7;}i{Kz197Zjd7R4$k1Yj7le32^I|Us@*@_RPL>u?zhOSRgiuiZ5WGIMQ6l?FCA5+
zkuW`V|AvgABa@A1d5cPp;c>%yg2;U=m(px!*FS?o@3I=sq)ZfzU2&*Tu`>Pg0XliG
zGQE-CtUklThB2*!$~?ZyBK@3mUTI<{uA@Hx9Vcg2z#Srp#tAYO7VOFH@uzwUt&%J|
zj(^TuK~@+6p%-HE<s-wFb#(jK9Rv$n>OMVUM8Wwk&)$ge?{&mG$Xs6__ha_i?pFPW
zu(vAW4Ep?wAWZ84h-OP>iGTfqL6mteC|e%qQrh9^Fpu|}Q<F7-o_PM+WHY;-GS-%l
zWSB80WbI<?)&Oh{$bQ(0bZJy~ic`s1$!U0mtrlIwNfAxAyAMPGr0tcMgc|o3dVwnQ
z*8XY`QIC5?KmL$EPOq3N*xb%?PYSqfs3!$X=hyhR%D+WAQ&<~hRWN1hJ^AENx?*ZX
z?Qw#1CmG3Pg}dt#A5oIKP?1!EvhC03q0Fojl&hu~=g(jA`o=PM5kW7|lpIhLE7kAN
zA|lw61)UPoWLRD`uewj9$!_qYrBOR8gQ4F@nnUO`&UAy^_K1h0&ld8)_*r6{S$>_K
ztZW5box9_*tQEEjpIm$qAS^wRe@tiGX+3OauMnBvbcjdh-z@RSe4hV1ncv*{nv*h|
zgQ2P_qb$~ax_D;o7U}GwYAl->dWC+Ra=Z;iKEx)Nnk64kvi<otJsR>S{N{{pwBM{>
za0B9mhszQVm$8{19)-qt-I*@R#$sA_o2d{kaQ<^17sz52S=I1igKU?0A^G?{zG*MS
zMLpE|Hs<soa(L^PNFawq_k@k$PvV#_Z+dj;J2`n5$JY$^=rTIQqstb4v-~5sRTqT@
zLFvgpN@GIlwvdjX8}sr1?C%iz1s7+QFC-k{qgxYOY}4nNv#$qx)`IIHI!<N2>qa(Z
zuyqtg!PfDA&BqqAv=CbrX06Cl<BrC?uvHGW;H6oMeEK=^xV6K)jwc6u9e4Q6_(OOT
za$j@tX4KH$Tx2}OmR7m5NP?%ERP4k|wvn2o?j>Hjq$<o4WsMTJ*re#CGPG1#mb98G
zim`Ggc|yJ<YKayXkB>ToPTrtZlI<_^uClvPG-Nnob+aa7*j9AVMY_QN1AAGRDOq7w
zXS^6nt+tJ1UMw{!Sk=~L&*$OeMg#CDiKwDF$Xr|$ZrB-{$afU<PlS=`aWfm9fv4^j
zxupGuWGxE6&~L#Ew%W|)xy)j3r3&F$qkzeo@+SW87WYVWXt<AXj(n4Q0hRRL@6#h^
z-<JwPd>&F4RRrej+QVT|YwkZ`!Q?gSez%$eY5CnszA&=K`gFv+28)&*L}7Q^H_QM~
z0$jU&<H)Zo72LBeZ-m`qZ-h7azdio%Qhp0%*+|2z68~5R`+PqN$4J8rA~w!kKcnu5
zQ(i?Z6>q0|0Get0bj6}ECw?n1RATFzpiM9;jf(-y2wf5BH3*$U2>;#}^W=}#(*o9U
z8lW9qj;xWA{(D%Mpf)Heq-l{4Q1V^ANdDf0Fm9Zt6^<*h^F%B8HeW)CKAx^NNt3Nx
z|7spMpS#*TaDw+P9wZgU<llkx7Zw$|e~KSjq<sRCHfick1x|a3KC0N{)k+=zNm0@`
z<ogHG(sHcxM=q}ud5>5~zUmCif#0w^_O>ARB0pQnX$B_1{UtRSxFxgG$Deb(#`@HR
z;b_@d3Dn!Re?SCM_Iii>z4_twRTm_CkUmXmo`Cczp6b>cSZ`g%b69*P(_;;Y+YvjG
z!BCPqEEQdd8Gw_`ZMTu%N+qe)b1|by14hsTQHF}T_3RRVvD}9+OW%o|pzD5$qpH7Q
zxrbypIWn{RHPakVYLm&|VK49fVdu`H6Hjv9iaxed%7gv3yJ@*MY4$O+a_cPGTg-pj
zrh9-8)w$B^a5KrK!?z7HPj00-dY_qZrdV1>aR4#Q^atNX>ECAGz4p_;Cc%6UeVr&<
zU%sLAxFTOAYfgqcM>}6c=D87l`>xMh$%WLB*frLZ4>&1)USo1w{QEj8UT=<yd*5%o
z;aWtb3$M{Jah=hw(HZSybO8Hk$&*T7)ypY^R%$cnzFWv};~6@E{kM2nj#fI1t~290
zkj_3V(e@5fm32p#4yNKEr4uB$MLb7DvJ1^S$r(RBnz`|(7m_J+Ou=u5y%qrv-*Pbo
z?Lpmk4CQ~?yEG>+Bzh}>)w<0@Ez%M1kloe0F!#N1JuoM=kd9JB(<GE8%fm?D8jWic
z+8bEh*na%P;TozcVr6k%m5KYqj%$$n^|8LcocLh_FOkGM=>9(Ji$5#&no%7)Q{@Ii
zT)RR|$n(A?Bv0hb(xZ_VS!lqK+k-Zmwa5sJb=y3VQEQPm=g}jYoeK+7?}%*qD5er!
zi&+NUG!khj)f6~AF=p|J@wdYAI%JWRFjZNz75~#e<4sppZ7+A*pVb0Hau`al_Wf-q
zX8dj6+p~*lycFCj(q@GmZl6c{#%ZjkE*x%c7B{)JeF<o_>txe`mQwToUSKeeZ4dF_
z=wb_0*1lKPBNGU%Cl4|<W9U@1YZF-+8Oq(nM=8Fv?R`ddLID}cO&yHboDX_FRN{UV
zGhVmK8%o6kYz95=+lXDd+$fxJK5&NVTEVSM7`<c=fHTESHn&{T-x?EZJ@E{FJxJLG
z56*W=0BrPkO5+nUfr{3Bv<uq$G=Yk0fWFxo%_apO!#1%sMKf&Mz(ccrQZ880pUwke
zC$O1W6~#4(s7D~dI7GUe_@cf)?*%IIdcV9!TOhOtoFW_S^*h^Nf)p)>M7g2d2=@8p
z7XOYUP3Sa7ZRxwlNZM=#pd!z8&*QZ2vhBMNTVb%qF_;i{VWg8Q$!wJL=?38t^NjXl
z#`Enq@+;tS6Is%g5QzKpA>M+0>4(&W#`HFR(?9fIZt{O0<u}9c@P8SM5rmUB5aj&c
zp#%>pPJH!5PJ0qIl!4jkE?xs4^;`zvhl-EGKD_gz0i07)5%=!QcVymR5pikJ6Kso@
zn~O@~2RRdi><k7cZmbQ&1`=wFctq92>$4V|J`5HAyZjE93j)7~@cU}w+7j{+b|B&m
z_x_*w%ID)-aH@zCiyzitE#R1NV!1J(*dLAlN_+$Nw#3sc2mbn&i*IbKV)YKP1yWv_
znQF~dBaK`8HeudDn$Qd;lAqS|)@u)8CkM5U)Z9^AQcd(SCs@hX6QttYhQw(mzozL4
z+<)!R6|yutlPh`;@zx8`5ivTg<XJG8@y?jHQ8yEjy2L#Xl{2md8==X0C+Zu1@)Sn!
zQ6viQQ2HSE`mbo_!6Ch9XWulhSOS0(?{<BuOtrA1M7<~1$Fu*rYfs`kB>~oBWGs9?
zbb80^r#D@QmxIsC@t=J&vtH5K0qUvMrV9qlLe9Rcn%!ckI+D7gK4LYxVXl}CkG`xl
zenHL`bk{CI&%e1yOh{qE@R-kw6E-e&-EpW;yf|UMN3l)tSKhnLS%QnzS-IEhrr>7#
zdf3i)OP9$w>z+tfLcwx{yQYHlQ5mN%`I1f}ZfnRsqYR%wO*FjiInW`eS@keCo4kFm
z!6mV8B`byLtVT6eI)A=Xme|P(9H(u3JdmH%Yi#$ChR*ok)1M)yH*SsgCj6m46c}cM
z#jv_P=b!+z2RGVNO3jH-qu+D}nkC|Fhv*N}O@>v{;b*iaq9pfz(%IDUC<a1(EXt@T
zPlbnOLY*meJABuDe7dJdr-vc?>ts4qyrj9|(yFrf?IsMMPgjN((Nm9(RK+hf+Rz)V
z_MJOe8dghYQ4H3aC$%id=Q%Zomc8LP0$9#WmH$&cgOLG@JLv;42OMTMNzkfvOX@{*
z{*fhwuSiAMo?5jmLJ9X4^uwmZ*)dw_t|rY;PE@^(vSZE|&zupDuR5y82~~=Vl|)%Q
zHO?RrgQVUn^`^o68acjJp(LYL(L=4i>7hRJ5Y$7nU9~)Fb7*3Hw?@^Q3z<2aevFO2
z(NAs5@WdayFP^yFJ?T_<V#=`N0c1C%5&NP~7CHIEr;iV)$I!=SX$}m1td9S^YaF5F
zUnE5rKa^qbsDcf&{T-rNRsv`tqXuvvL%lrSnZnkf)2smt_@2Ipf5Z<9W>`HltQyy|
z+zgwLona^T?V>09i>I3z&GEF=j7pKIVkXyGz%Z-ZO9oZ(yvem5HS~TbmzBJSZtaWc
zdnqQOCvYuv55LaRd$oI``L=Q|dS6I-hTf4UMDME#=p8c25d2fq_9pnM<;`4yQWpPF
z8kL?mp4m0-fvw&e_w6q;o}YozwX6-%LdkEb|2xe8J<9(b<^R_Dzwd3^<<E02qN+9C
z3g+^uKf?{2rb;pQ-||=>tWG63K8EoVSc(n_JEzxb-`MtD6*%1#7$Z*NT*+GfDmTzK
zr><MY>-j~_wdO9Xa4w@PZ4u`i&<EZXJGs6drwu9{=**}UTl|c2&Zv~fLI;bE78BjB
zGbw7X!E=a0m<Nf!|0e20+98k~qdFC6kZm?fu4}0j&%4~LSCfF|gQ)%FcxhvIusm;|
zov<^R?40T{V&LpbY4MNtTQWPm@%D4gHV0|ScT2(!I}^#y5;#Y-d&t514`4TPRnf?9
z#oR3$Z|{oIgW0C9la$e`_g<5+h3j^T=_y-gF$ia@(^M<$Dc-rMF*dE)nW#+5BR1+}
z=PP1FEs}STl$xu80t=<^MLLf%L5D3Tz@|b>DO?2Gw3%0^-%2S4kQbGU`B^VNoaTn|
zDxJOzN@9v=^0mb8MP%gzT*_)w9M))J1+R3%YO6P|D|vn0YE$rG&}Rg&@%CoaaRgX=
z)oOdpq(3{}W)v`qtz(I&z?)RY2XTf;m|)qwG~3)U#p0x5y^JegwaD9l;f5`*%!gba
z4@YXYKN!z=8ZgNCGcl>e%Bcm{BxK|nL#z6lx8Ny)S?0S)B-I3CnOKb=#Ol4=Uj)ZP
zR)(JKXL35-h*RC1n)VzM{Ou?*JKNCMln@1+@0I8lb8Ftu8KKti4==LXuIC9~(lTLO
z_vA{1e%?z%a<h_8@?7^0lHOSv5c5rZTJXj<ylo}dkWEcd6@s3X+{56}TF9AQQnP*b
ziyRGmr<LOoR=AJzypP&jwL7Zjkh-B9>F9KJryg=(_rhwT4a1mxdzIFGwmhE^ouDJw
z#%}z|Lz<n+-p_dJrh6g2TS%5CMlqB&H?S(jV#MC~GMlsQz_s#Br<f5Z!exD9@}2lP
z_YZiYAtMo~nfk(`udAxElCpCm*1@9cZ@A6eh$L-ctr5y43XaM2w(Wk#oWY9p8%oK|
zsxKrzy5GyX3IT1llHH;#XtX4Qow;C#iyG6?&yXe&xiW*G4^67q)SI!N3aM#HI&6rm
zah~<FwLMBw-8*%A(tpU-5&w(^Pqr?<bbNWbSzlS7><`lk9{nD~f0sVVe2^NUY`lnk
zEbr-~_y?jxJ&-<x$2|XfkytjOgXe#N#ey!ew=eeh_AKdmGc91Qb0H(naQL9QVTfL&
zHB#JfT#3fkNajyNFCpiuN*xdL*dc*guHwpqH_XX7gsI}H-otY1H*hknZ(7OQDR`C>
zeiKZ~18R1O`&zG&xc?^JM@&ZAp^=QlAr*RO57Go%FOuDVpwNcekm~hb*?WM$KVu_l
z#2-ZY6Wtrh#CEY@{VT3=7m>{JC%agqkskZ4evR41@0rWkFNYy;1|2~@Am+xI)Kv^S
zg3bw@5zf+8#2q8&N1PKmBo{j|7vg2|7xPXDj^o9vN_&DC><K&>&+H9S)8LnN>0MCQ
z8D0=1cDN$6#I&mFz?sgN9(Nq$nCvhusT!;8K45_IL%wb%+y4_zltQ~Qiqs)<_aOJB
zFCc?t;xRwYiwAB-17qSFm$(n}f&Chd63yvlbJM28vSwpz0FrsenOOGPaziHZm?lmh
zm&?h$3Y2D;Oz+e4fpDyUoYJ$`>>Yo(K_F$|8<~U84;XFWd&oV6552#0r}bgLM3Ojk
ziziWh(f>V(-yD_Yo+92+eS%!dqk2T@k4F|2xFW-UiU)-2iwDO?$VCckL0P;vVmH)v
zB$`SBD-@40HR5<mk+GDFrGw+g6!0^@Q0%E}hFI^S0l}hHofHYOe3p;{j|<;VN+)9`
zEyc#s-P9r~;s)a~rA;7>XG}y}I{2;Szo5={Et24x=O5RvKTrJO$c$zpPbr=E_^JBW
zL@inH|L^)ozsg`-dw|^^@20ZIcEqB=9zOcP|KS6l8vY~m$EOdKmWHSz;N#Vd(}@f7
z`*FCD=l3-}CiCeuJ!L-KE@xQF2gmd4Pq9JFHemW;iY!|oXoLCw6qFxH`H_R;gvig*
zPl`@w%X`$2(H|Ak<A=ZhxB8!I+UnO2jppDx5%_ZB_(}bz>HYUVgW!Vtmp%G1{XZ<P
z|8h+><3sUG_dR`2|MCCbzuEsx17!vM2fk0=f12K3|FiH@y+_C1_&@S7{VyE<4E<1n
z&kekK2=8t9L4{v$fBwK#CFXmX|Ggi+{_@*>@UOw}uK@-0n}xr=0DcSjKQ(@qKfHhZ
z<mLwr<mm54itKlO9Fj*L%n#!oZm@cVDV0B|3i+2mzY5D&n7ySbzvItp^<OMsX{0k#
z{&)XQ`RcT6Sf+f<{RXT11hY1M4cRhNKyqbbOKtji(lY!Yv86hFSiyT`dPu>0MS45J
zS1x~9dQ-uBN%{reeSXV@jfQ^eKP7$bO^=nPd}X$LwRx}3zSo-fTL0aiI1NEFx8B+l
zFDiWBh8=LiLf!Gus`ZY0i}l`|SsyrmMih*R_L|TlzFG?V6$z|!1}FNgS)aAL6PrFv
z>^UeVSu=jZl*CsKiGPm0eTj}5vGJL8II86`?_B4T@h2PY&<wNH0?&&k77b}#;Z@rE
zRt`S!U($PX?%jvyx_<Cont{*0>lRuvwYKs=G@n>O|4;+m*<O#L*<=aoBGfzEYjf|!
zFB|e$QE^dmcl%bA=P#0KH{SQDyZ(VNZ4GOmPa;1L@k92eGM?}Ck~;YDC4v?tg30_h
zgRiY7dHSFe7f5Jm?=i1ebxK{?fBta{nR!>~g+f~!-`d@-Mg@?!9)~8@b!5)a8(aKc
zs;$722pz>gno}pg(3~1`7Xol;)H!&(Ggm-I?OO#jKYHWN#>uh?Zi^j}!!Ld=<(c#A
zGEr<n7;izZemO#HDQ7yW%5g&4(|deoe{6RKRzw45&%g+AT4L8gtKCt}y1cCYcczVr
z)lrAj-mju)i4HskooLO=09DRiJNUJ>*vqN6ocb4HPdyf{VD_6iH@?{jt<`x#>-;cg
zywXtO?La88J1}ds{bHhLAQerf?OCG$Vj14VE$l^#dLK1>t}y?B+59y?{R<(ZH)Zl+
zO-}kL>DkCb?!)gWhSq$0o6!K2Zg=ijcrV!_&K#A}^#{%mx9Vxs57&AL#6b0lDvuxL
zm!I#Izt_u7`5rxu`eBEc;FU)T&1a37_yo^!HI0sUa-R@pl^3{ADC#`^KP|GDuxS`f
z5HRi{jM{%NN#6FDDH1ID`0^tBe&xNnAe5W(=d0bsiYuWt>;uIcWlkY78sgH2?CtiP
zTgFMpzX3n>ppsC-{qMWUFCX66v(E~83Mwd&*9+yZ>;LOh%O4-JKltC3pGyTiBX9N(
zipRz2#xnbP-_5tgnMm}uEql)6nh-ZI&X3axZuco){rukljs9JZsGO4<{;&2w{p6Vs
z@A=g5<;&+;`KD0*UxrAVgY%Q*Uz*;Z{Fjq&XdoxwoMWW*|5f?_7ynlO_apx=L!|xm
z{io^u_dg?F7s&tT7-@Y!{r~sm|DXSx{m;NxApb8zI{x(ir|JFmKTBVQ^8Y#1zhC+G
z|Bw9tGXb5q9?)H1f3eT`Q3(G%o}}vQF+O2_oJ;2Y;U_mgGWhpIT>J$J`RkFu>q~xl
zK<7Q~8~#*NW_%0iZ{u(Nh4K9nnfC{Oc6_Pc+m~hF@4x@*zd!44%CKjzocQzJyt%A^
zH|LKR<`lbWq`3RO%i|URZ?87xM`{UFkeobx5ep4@8C#Q)lv864;N)tV<eaP^yfZdR
zLEvM=FF7pk8kzY(=gbmLAs-v8ioM_o#x(A&7a==R2{hSvBOl+Lli%1M*iGg8hZkib
z@Kzdl<#pU2UPO$86FZCJhdGDZYmaRj89&&b=v{{4wZAAJRavgRe)-Fl9}ku6`qn>x
zKYIJ)Pxm`NK4$%H|5ZL+{co;sM*`2Mr2mhBZ__XT*WlAg=F?L@{C)Q)`@rAF=of;S
z`D1p%Rso!!z+b*a=Kamj9DkvK-1>XZeILVr3-tqe`h^QjseB<gZ$80)_PKG-(=QDD
zcgpAK7oz`8`8@r?njf3d-zS)!e!(FBTtwOZ^`_p~k31e%xF2A?*Z0#e)b`UaR2%(5
zPXADu?k><jRHPRcyqBf#FL*CW-<7YQ2pauCFsn}}G4C1u_}=`tzrO5W(@*TJ4+$#p
zXH!u6GR|{5hhaV{-E;0#vmZ@x8-&M~p}JPd;o|?wU&1};CjZ3MLfJkFdHjrW1@e*l
zqw;0h@;G>Jsr?tqSD5k@+43(^zWQG%Uunu$X3O_bUM_O|JH0>nt4;apY<ZXR75_r{
zT2sC@TYf9$%l?J(^`?A%wtOGuOZH#B-+tFQHSy7qnI~n}H>asM@otH|oX8#asdiJb
z(-iF7%w?hRQxZE*kB|0flOnU8Hy1XJ=EBCytpx*2a1z$oK+Ss*qCsxxIk2g?_c5lD
z6jKK#c77wa%2>QsB>D#EeQNB{-giX`iN1mH-=|K0Hqloy>u=o5fPG|))Ct|~i>?)Y
z6%}2v{@%H|iv*i1TV3Eu^bNJzf5sQ*R7{S|spOE~lePE4Y#;L2*C#&u{p}>cihXL7
z?sdLaVxLnSnit$-PYlwb#Lfd_Us8vkYj(~lX&!w}nU#En#!=h^Os|O^L9d$$cJ1~0
zVZ)ED1?>+3m9^lmKk=hDC~JBCbKdjAdC%&A-Tnyww(hKp9nre;u=vo{We@Ovbu8u~
z&Yy2yYAC+Bb=e>Id_nxR)@6U>;dAj9TbKPe59h_7ZC&=D`P9|A>~S876z92pHBSNO
zE@73owR-Dn*XO{x<=|XOue!Ci!8(ZcYHy4uyxQxnwwWktycSxlHXXq8TA6RPU1VPR
zw=}WXuO5kINLTw()BLHlbRaEpq2pV9iPwhMr*3%No>)BEG#hL0YJWo6ybgPOCZu>n
z2)o>>6iF>aFNe60zf^I_2@1}R;=q#%UH2Z2KC#IR&Ait4PvP`O{z|@YQXt&!Jo4XC
zHirVv5W<>q9-nZj#N&8;aO=CLNN@~<Ad2wNXKjKBH>{68jllWEjC?3<mHd?^K(y#;
z72Eym&8ZQW-G5xs`O(1Y^PC$wy&(UPP-*X%GllX%k%LWVK*4k7eV>Ry72I`Lw=;B7
z@sFYepiT~^*0yaozTD^xYjiFsi#k_SG&giwNnxmw(6h-0c_3C-C0%$q)VaANl;{nd
z;Y_%b^D?s!vXY9Q#QiQI{1X!&?Y5E!lYQRdv=QMR%Z811=Q74_kJY%nGff=F(;ocI
zaYc160nACow?!M)#)hhmwl!1|O6&?)cXU!o(7L1h7-Ax?Zp4`*9CD&+`+c?TwYz5a
z3Grhaoe+^9588O=kwuAZT>sI1y0s83Vs~K9ragk#{(cqiyabQ0Y^-}FWQWk$tZlTp
zT=D`FW~`B0R?&!kQ~uTVR<mUI7_fKYlGOW`9RBHiRpNtyqC=-fOs73sD!;nX`Ce5>
zkp$+vrS=-_?^UIBdI<gEMoiu5HF`GlREp9kBdH@F`So!{z2|sodBgLGk3^(}K+O1E
zy9X?4{C1pF><E1a<4v@&nG;Wgz+=4K-j()_=<Et`Ya5{(H6(W|4;`}>5Ym4HB=n!=
zoS{x;=MIu!D%&MZaB=UrDfkQE>CAv|7x!f5to!y(jv3tkGag}7UYv$Z7GkAaZHvg;
zx@3~3x78-M<cM?oRNkD#Mf@8Xeftc4;=l8=#P3yMt#lFR;fOLgOM=(Kjl)&UJYKnm
zg!_fLclP~A;Pw_WEH1(waEdjp!y1-Qy+$!A7mZ@uw7}fBBcbLa18+AK+NQ<y$)Y>>
zzYk7il=pR@sWf8WUQes$pj^(O;xlZY2vXw7yIqN+$>Fhz-sj!;3uup3pX>`wGtGvm
zRS=u^t0dKXW9!@{v_+hD1MH}F1Jl5Ebw!tdqGq-SYoW<ZRp%~!BERXwsP=l(mG)r2
z{Io5siL}>yO`wi^N@u**C0;k2&a}JX{!1wclZtZ<rlCKlT`7spC3a^>s}IYN$*E=N
zHhr2mxDg79_;5qhiJe1ct!Z{{QwN$y-=^`4)i4M1R-<*zw)xD0WUBAIFWVm-UFU*p
zjwC2%BKSvGNjEVVK7NSYZ{5}Y8a**MEb`uES}-`Af1Wq~_AZS%5+6ZWi@8o~n-t|7
zyx5MS9GZz}^m2M~95_m=aG4tBh?p40vg|!ApRT^@{nb~Qt<Q(wXn~z&832ZPiuy=*
zLMi&=Q9$TVIPmjl8p!2WivGy2M)arr{q}<w-~6ffulv+L73ycV+>yVJ{e=DDefFo>
z9~SCosb7Ph$JKH>qC))~28WCTNoHHrDjf9hKR|rS{d<1@_oJWPa{Is1|9KzR|9$Gm
z&Y}MO_W$3~&t41=|5pDq@MZLaW{bMzNB>Iy+xOr9tp2W0zj+Sz@3;Sj<G+`GhTlus
zrIx)2A-Ja>DKEk4gMR-LytPszE_~uxLOjbG3zKWGOkeKR7a|-FQ^4ab9h`+}@jus+
z7L+zj_rsJd`-$p%e<W^hsS!^-o~?(nlrip7Ca=e@$X}`a%f0-EEIyWE2Td6JAs+O~
zZ$R*aP3!E3DVpPdYR{Cv$t%C%F;o5@!GEEAh1x&eD}SM1{<{U`X&A9I(?64cxR-yF
zmp^>fC*^<r2!oGZi#+(od{X{Dd-<R8@+VLGr2IE|`Tx_)KjAB%l>b~W|98CncYI?0
z&wBYsd-?zRiTU6EjOp)zK0Kp837+L%{#O<n{KP&H|3C8bKj7tGx&Qo%XnsDqmQ^#%
zig~^W64SCr1j}iiTJPL5s0#{b<x7pY@>D_Ef(wC}4o}@FpM#)AA6?0OqZCOEx@-aU
z)%x|#*sH#6hv(HtRtS1vy{VSjW2%i&EkspK)uQMM7VlQ7V=+ZZlN$7E)t`a4WUu;v
zoLBz=(+l7ob;rKoee}^hcsn53e*Mp@Z!uYc_k(E#@c#Ao{lZ&f9FW}srViLbYDD)V
z$AUBQ3NvT&cWs70l+jUleT8sj@?Wz5{GL84Rw9p5pI=lg6~B^3#C<hjoQ!1@uJG)~
z`^+zXWb*%aetsjbf$OLSh^xJp&A^%ueH{5)L$WQCg`*x4M%+V!UN%Qk^Vd=rbn`!v
zL8?`$?`LrNoK<s?f}Tu!#;U=a-m2kL*xQGBz2uVhVm7c0_hbmoWSdT&Nb1W^(mY8V
zL4b$yUkm?D!(H2VZy6T6PFU&=*3(>3cdOiUR9D2FQ9H$+Uk}XIunKEf3zQY9w1%|?
zO-id=8+e<{57^1wE9TMHUqoNCsfg|!w3^AGKCA`wCk@o6_)r_T2+;E5TaPL-JrIn*
zyp-ZR(p*rizgggR2P*`bamoQW1df(ze7ndRhPooFXWZxbR8r22&%s5XYCP4DH~s|h
z%qlX?enI|SZb0;+DHSyHX{jcvH~#tgJ$c>eI}7Pc3cFmHYxB#XuabUK`OC8POF@^*
zf95CVU#f|1;5jNk@5jMYk}I?Mqx?Sa6Q7!2rv9Y`d4-RU&wp!ves6vduY}+wA^W{3
z*Ct(Edi7N}(69+hK1mzq9E@Vg9+6#-QGVE8WeYtZlA2i@YFHCH%3AmpF3ls}`5S&1
z)R29qC_;g`gGKg}&8gz~{lDb&0XiF9lDfg%GHcGz*hF2~RIXEoIsn5V6Yp%UIX$3*
zTI^Cjr}J1G#ZlA~8}7dPL(62Z2;=QvW^&?+!)b^CjrN(P=~LJ(aiG0!P5MIZn+o+&
zXpY7!tW-H_2lf_Vp$}eB$uaR-?$jjGz^vLt&(ZNnH1S%G)z%48IImQjc>U<u@%H*m
zQ2spm+*)ul@epH0^(eUrWV<%b$^Mm<xp?=XC6z*KYF5479jaLo32bk)UmoAE&Pv>^
zy6yF;kpmj*){M6|C;)E|g=BfakN4k9ZCew&D&v0)rN$A2a5kYFbV*>UIS`1ZS|;g$
z5@H}IaDTk`BTj~y8w7dPL7@`Uf#g`>BEW4}vq9Z6DnTVrs-6<}KPY67r~GAUMckM&
zpFwN|u%hub>kQ;35_X<G?L5@VwK{i0j|f6t=02rb?19{2Vd%@-uiaRtyD1J@cG7W0
z?zP)32y2|#QU=WtF?1+%-u?-VI89^l)GPJ_R3)qCk;Z@|`VO#?<FxJW8(<~RWTenS
zTgmUBnN0K*Tgewo^f1UuUNTq@gRSJX=3$7He1dy5P*qz=Ymgp>q8Ei>hMY-ZY2)4?
zvC)YTm2P$<ntJHB-{(^*G@zl|N*qq*eo~mQ$Du^$K*ox(=laV%iM~Uu_AgLTqcf>F
z<Zx%*E3v6we?#3t#Z*?5&bCoB9(5um(a{l<(C?GVu3zfIs2wRWA&5JBDnbVai^Hjr
z1W-C!noGMR(9vj5Dz4%By<js%ifE6^)5E4s#o-sV{&=W55iB-JIj$QUiOOtJF|oy4
zL#fjP^Vk}72QuXw?UqPLO2~156S9}5Pu0L?^dF7RjLC$K=1wZ^#S&_|gJbvsSBF{c
z_kqT!GaEhTjFR43GoIFhLw(ypSD>ad(ZM<I86_KD4;|QoCXnh|icQHlB_j>n<7?R`
zId_<W%qoUZSmARJnX^(uF0~=?rszzNro-wm6NgK!gQ3wZl{ayF10V!z>(;YY4f^UW
z+Pln#%8@)au_v3~2e3r<PtB96xvrx#J@A9b1G>>NIEL;5P~?OVs}$E3`T8CwIFjKm
zZgg5sVDzd{#3YNRGGYvEW#o#E7HBD&dZcJ|6PR8f|1yA$^Z*(OKohLQDaxBI)E%t+
z63z502tv(p-N>i$A^>MnS+wD$*wqvqX3$sDx#9I_DjFF2LJChs$RT7CDBzG;Es=(&
zVrMlf%7mA1UD)1fvJOyIJQ%ZCk5g8RhZR(MfoITR1fr?Xz?yYYE(PE4_n{lnpZ0aS
zhm9U=-DLbuVf2Kp505^(*h*X};;-BDn9#ID|18o!jZSSdDtvCbzG>kQdb%Nf#;E3{
zC)+R8yo{zcdA7818#Xb4DuFn4o=CG2o6*dP^pRt`sGsi^6*(<hrilfRNK#AV=$87c
zFE(a^^gG6uN)BRhG!LHK@T7Iq*<_*aGrYQMp6tChw?2fNNEP_s(8II|1w<$HjA>Q4
zW^K6P#jF32o@89hgA8<6s??lgYfN3s1%2y7o$n4zyjFjXbJ5nR%|xx+uo>0Klc&$S
z;}Dq|;FnWRPZT>S@CKfpDt|wIIe8WpF}9HnJ%qL(o<d|#^Ux<F+h2?v^JMceFQWI3
z5Gx-dG0V!%^v0Y`IFJ2*;-ij=a!#0lCXvqGdX4~=G!I=JwO=9zSzi=m#m4kCnx0vE
z1^V6OWJZdXbuT9)Y_AKf?@S-9sRkw{r_bcbI%weva>a+R5i6$;8f+hh4U3!8t<E%B
z`k-=7V8ApL#)yIF=rBWoetLcEiz<!PA*HyzM7)S#0g2#-`u%ajxgCjwMn_t#gd$5b
zBi2VbuNxhWIGW^oF;0mNkU~9bx0Ebq7-`jTwBA4a>jvyK*!kK3Gxki%2w8{`@a%>y
zghyjgH(7RPn3%|^ukGpVDc=54_?WffW7Z5^J+#lT04Eqe?Q3UnBgO%!TjxDq;!V`Z
z1aC%$F}d6{8g$LsaW0u=a!p}yf}WzxemJC<87L9*m|Vry+=cK6b(Xv0;QF0CgA$tu
zb*7K-5frBPlr$iQ5<5P!lF!g1PO|=kP^fwQBYc_;5nFTr!c>?aa;8@3tmx5@gP0C{
z&ueagHCG}!s06nI^-1WV343+tYXdvoBMqYMU`xUspjE8>Z(uXA^I)s}L=c_jx?hnH
zkVjR7rqA);bx@Mwzdc$-%-}JSs^g!4<MZG24=_1o`8}gIwNd2u9O2r+fswa|?e&d;
zmm{fL%)9{3D!?o{J9YBVD630z>H=gS&hu}NCUzV+^P2GuuU>ssv@<<`9Rc_0bp}WX
znJ9nbt<$;0d~ydDmUoP|dBk@=+SxlG+WGh5@q`XYjXW@vc&jXSFs3ZFG8~$HIW~OC
zd~2BKhmFSRTS<v;4Q=aWX@8tkng}er&rFrtL2JQt^PZ=@C*LRjEBg<GMTn=lVaL@U
zq;Dr<h^dk7ANqT@qVx5N&NM95%#e$iGf;57mH2@&GZ0V#{MoYF@8=<l>E?cz&O>_M
z<EL5wtXUTb_kSh8?;fJKn|W!NE21a&qDwLik8Ym(Ki6=vN#6)7`F95BF<pyeuV_wP
zyS=6}J<}U9h?k`#-2#cLlLC;dR1n@~*y}o9XR5OO+0+-dS@z0mm@$!HYM!PDM<D1s
zYoU4z^T<sEe-j6pPbHa&(mI*^`eWJDT(vuTzovE!-M$+Lr^<(h>{?`q;<h#4KZeu_
zPOEZ9L&%;{VLu~EHf%Ps;qTF*a9UV_x<~W=ENOoQvbH;y6t&X5<(=u`4ZY#Er(!RJ
z9D+~8IYmALW-<e2vVr(S)&g$y>4KTeC|PQl$!jo^NO4-WY@eUx3fyN3<Yq%=ig6q8
z@<9c&!tUgxb!VCxXBc5iB0V6n19os1prxmn$qgA~xZ0VfUc=Scwg?O{H=nPm5s63k
z@<2!DW|(lWc#$`+TPCO1aS?M)-Wy=*G4fuvo=B!1!)qf*Y?gf{rHn9W*l;?Ke)pew
z^A*;WeoM0<i>Tj|zmN;4vv7h9h6|*R7M0txi|ddhk#X!v)#>k3MEB}k3pLWw+AudM
zCI@I8gj5<ET9_iUi>=#D0eV<X2N5V+CW()VJks@4AWD1-(8Bf$bM^#Co>jYO06(d_
zBsbUeH3zsusKiQ4hb{iL*lPQgWYvz?fn5WNemlTw`!%o4L>{QE>o6h*!dI|a5jsAA
z@}jAEa;d<0+%0VOS9%xBKO{e{&<fvC%l4|1`!@)PK@{Ez1jeZAaK5I%T*ay4)45kE
z{$AML7)_m9ZFiX#btK~o>|Nr*$$ANR1P+L%9<SfcqfcIWE$#b}3BjaO{IBlfP|f>c
zd*be}bM9{Y>fIq)4F{e_!VYbCJp%9K+tZQ6jy>_GB3C?Tn(a=O_0d)lT9DK9kJavi
z*zu{Q)hs%)tea?$k7?-&6IhkroRu1Lbhu_+Gq>H^&ug1jy}{kU<)bK=FvAlWF|6Qt
z#B(rvXZPUW6Rd`fGuKU!RiQ~Ln+FnUgwP}b-I`)TMnn@k4~XC0e8u0YVT5(2`7^-<
zZF~QVJ~klW{jc}v`Ddn*6=lbv_6gb71xuO(FL2le-u<kVjQ&G(coL?>G{OJFx3CLb
zPBZp|TWS*@mCW*RZaRdI5keJU2OyG;2z2t%;F&}0di&blz1+^SPP(b?NDY$9w2s7U
zWw9f?LtbSO45^$xDqR2a&wnkCZ#A){>)<eKnj<zBXI+c#VN)NdI-oC7volqSv#qx&
zNZ-JkSjWEE?DNvt5B9k4E-DA_>%;c&usvbG?(~HuPU#L0_z0RmN6#N`->>)V`>PqR
zjD7!v_Z0NOYI}gR#1h&01Kzb;S)=~V%Dpe6{v#Qq{sXvg&H8_B(AWKWtVj8Fd7-+W
z4WC=Pj1Avixv<>K%4{r`3Oo_RsmZW|%j=175j#{l2_WSiMni3oq@Tjepf&fRf3-i9
zX8w!6l<xVSsjyI^RE?xsCO4-ZjOZO*z0%MV7#*yqf3=1UQR2%gyyHIAgDQip%Q-n%
zrY{|EgQ*d_sg^|UC~ZP>Gdj<bt$VDSvE8R5sf&ZnsqaqJ=fsK<_l~XHs>BC^QEyo)
z#jtyIFM5f7ePA6t-`q%m6$;HGC;RN_h<mYNWGu<Vj5m5NqLW8bmsB>VrbjYO)Mc9B
zP~Xzo;KH@MCUPaG%;&747ek-=*~lAwqEGPfNkDB6pStYa!)J497NI*YL9sl&KGV?Z
zErf+uUkGsFHT0X!rZ4*_pWj}Y-(K0rx7SB|Xql!5Gwn^<tG!b`uDuKf%lh?D?)8K+
z_9?~$f`$H4gMRu8jq@&gx>m!!6Y|L?mdcMImZr5?YI#ajmwGTr?tG%@$s?K}KFw^6
zHoOzVb@qBxe}r*G!$`0ab6&9FowyrGeTOAy1=uD4Nn%xrd%?Rx_ut}#<lgR)&Z%jG
z?tYzV75(R(MWz1*7~gOIf1c_8i>Ckg6!yRR<NE(%uKyIH|C(C){de>F-=vwONyE<b
z;}K8+0vLWD0h8Y8kAPF$y%FH;M+^I3;Zt0NC~m*~|5>L0GR_Rz2{{Pp)nXR(NV_WF
z-Y2tYGQ(@Q#Zwf6wbb_O|JMBeWA#@5hvW~ve^j*DANopq9?260vPd}Z?fyup+q5?l
zG{5ucztZo2<;V8_KQsMzP5&W>Z2#$zEJFM3zZqVy|DvMQgOmF8zc0W4+^J>8zvPp~
zzZxvGWV=48w}019d28>k?`!<4{r*>fZ2#}h^na`AKje_#f6eIq_TLPz*MCt_>cPo{
z{Wq&gX3ePdyN_<}<H^64?oY~g|ANi^yMOANdw1U#C=18G*6+XK;q9OPf12rkpXop3
zkl+80TP&N*@Ou3h6{Q}WTG)T4eBPp2?IWP#lMsMvf5qf10w$&VBjA)b_C|m={^u`6
z&c(7a=WWcvMX=R8SIM7Ml_<^L)!l?puBT01tdifq84;VE!^vDZ9U%bl1y>SrLfa5&
zl2szBN#<s!IV)AK@iJ^x9p<j(Q&oe#3f(hnHDcjL-AXZ>YFO;uyWQbMy$`w{{I@y3
zo}HcCW4^5*OaPjd-NZg<5CXf~MRod%9f;pt)J|3@A=;g+(s1an?v-9$buYt{fWIti
zhc60->}eyXf;+YgyV&C@Onu0iHuAbfNZxEYue&Iicyo8dD(iGttImkfXtKwib+>OC
zu1KU81<A$UJv?%%9_-CaTlvxD+dtl^+r(o(T6%ENkX8ji4Z7c6s$Juj4pe-}Dn<WR
zq=38&e~dS#z10`bvig#`ZN1CfO@EYdr^<8k&i?Q*%)>`Te|#uG_^A9Cd=S!L+Q{JE
z_?VEzN5x+F2!fAIZ+ZBTUD)6wsE0g!%-zus9~JI-PvqglCHudCj~D(R+Aw+>ISvS|
zkZq|SPL7=w7Spb#S(wP1X3LjSG|?5Bg{CYtTQ)&10t>~9rr2|iyk70jk<+R*Y>r$M
z&GhS<BWGC1YL47y^~XfS-)fG0SM|rEl;QfLoN;|+xG#((9(%~7C4bEinY6#qUtLGn
zoRO-kD-;WKho&j5YmV_E?w%vZVf{(8*TqNWrXN-ta}9yUxDEti6<j^CSkA#dk;x)>
zVjmNoon#3cl9|FE${*7iQTPng6#<?BF#}!Ow{rR#a|_Vo$_K;w^}et@SMMpRw~~6*
zGu5j$<^ytiB(-q<)-)*i7m3)7HCOYj+Z0fG?_2KY9w-NeCO-21$Lk!8S4(cZ&e3?a
zWX5Z}#_ONg2~Be<X`W6M<;H6}AJk@9;doVNP|HaAkCY4YsGexN<_SV8GhQ)2lg8^G
zs<JD@);<(grmi`)`r19`WIxltK3+F&%i%RUUh2$V<7Gh1K=+B`b$njE+3`}(GUFu*
z&5oBE)L;McGN>S(@tXO&?07k+>U6Jn6Rj7F<2>(XusoqF?=f|j^wC7HO{s}Q-xp&?
z+8dnWFG8VjTxeDabKP3be)39eDAw}Cn7Jp$pLdFHRf&_hw<K0fiB;Hbr=-5KXR#oT
z*uC5dF+d?!H@RP)DNWhQRlUFR`C@9^0H<^=Aw3d1RCZ0=rtH!7%ZbecW>;X$Nfpmc
z%<eleemsVhNWw)6zbF3gg>@a7I3acKU?n?zJ&qH-Ki57Rt8V1m>mxsj)GQ}V?vJ_D
zCsvlYZtm_AWBA>=0p8<VIT(FX>IVafruj<m2p<l6MNPNeLI2y-e|x6~?p$uy5xD91
zu^pKFZyH>zm=FJ|a3)s5zC5$K*$WUMe|_vw)JDa4fG^fsBo$h*d)sFQ8ZMz_!{ZYE
zojC5Q`?W$qr(S(!pRT^K`>iidea4@sAmnibE&rg;O+1nnKJPq5JrY91Nr*pmkDH-x
zJ6}iPf7R!@#>I*vgJk%1%IB+N$TQzs$;lQ%8^XS?DxJR=7P5y+KX^&E!I;1Gm&l?k
z7;Ga=SmEW|B7uJdVOv!i19y<_k824%A>~}OW>xDCW);OoMx66zbKaqqhNBJ7U0rI<
z551u``?<)#aYPKpZ;S~4iVX|%>O%4`7h{cdZ+i-n!#S@-L0T2w1aXe5rF6^FNVH&)
zKtgqLlVD48gL_RQHuxJ`v75a3CN_>2r9_$z^r7u9&`*?!KbRqgkQcC$m@@?dE6w;g
z<EBE`&qbVT&_n!SvH_&TUBK#0D5kSo3<SixAJ;<5h!FO;sn`qGO|h<d86^GnN%EgH
z$x7-rm0mMG)`D>}d*`~Ve!cg2&3U_?wLY<f2^p&jhO9eRB_6MmD#fTJE3G>_kf%=e
zojD$<s^&|x^GMZfenTazthNzDP;<_kR#k#&mE$tAi7`&3Vuel;ov|vgwsyp>K#;n)
zveCZu$cQgElv~L;0N?0bdgMhJ!QtY{P~wf<T*Df+PVX_YRO4t$#GZB^c-6=b7gwso
z$Wli}^gzsZf1TUnM&C2SLu#?smxz-zkTL_j34>b%Ha+A_b=F?%$xp^-fyh2p3gApU
zWnxWl!Msdg6oUwg86eQhiRz0Cnn2NZXGf%lNUwwvR>y+6C2p$9PZcmY+`W0Jt~TQ1
zkUe-?ToU{sWKBOOf+X<@BGp>*K;%VAoLIS(=i&&-TUD07$Re)B=Dus>9b|j_Zl=FB
z#k%q-a!3r+pB8C||L<1K9aXKoM^bl~8_uknWK{?6s#qGdzy39XWc#AYk*pd?Y2}#D
zJKyl6O;$Z*o~I95btPV?)OIiLO7Ai0S8**PX1{!YP*0UxiQRcC>fHENb-%tVTy-kJ
zn+d85kR!pX=@LzAViHhmhPu~Bvi?XeAvuytR<-iVm%s9(KOt~(=3$Z^sF)LgBv)sW
z&1fs7%%m9gVLp6{9b4i)-;6UXwAn!>O!MRI9_JQMh_2Zht?6LJX@=?6tQMP?-1>Oc
zORCID-UH~+%UWLKk<>1`Fq@Q>t@=$xiX)@%Sa~ncR@>*v34`W#pz9>;tc#!%cg8>w
z1e(T8%N;RdAT}k<`9ZllC3+Dljw?tf9OTt!g*Qi?@@FHq*G9+*w@1WD>^q)Tn_P1d
zJ6okDN9@&+QFJ<T8n@OK&1?`^|AZXTQHs?)p=t)Yt4M(U!2ZPhCr1LVIyWQg3?}rL
z2g<c@N}^I*$ro5vA`L&QT5bBG!+8EEkfA88_~hCBgiP6OV@QvTe#FoJMc$mp&8QIv
z`p!;{nBCct?1TX*8xhWv3pKvBSAQgN9kaqp)<VyQSn_E><S82A%8*mY(?j!OitNo9
z@<?E9b3=!9)A3}8^3WDi!?$=1<Bs)Ha_3PGb(~rhuZ!pg)z1lOC^=ZWM+tiaZ!xnA
zyqe}B_AQ1S4c+=}&lgVEkP0Ww_G_3gBAjU)<<n5ZGuBP=6l$*N5lsgCc1bDn#><pT
zpXH%W{4No$iUdTc8A3jlYSk+!1_u_&-i#YP<+c{1ovbj%99TGpJ>4DWA%fmm$^SC1
z9!jj6{#y_>;0^K=4+a{cDe)3*8yr|k`5fnA#xw~NwUQ5D1MyU$f@~_;icIi>oPUa<
zmZKShr*Xl8aX|#mX3^2CAPfx|gJla{sv)WPC^GWtlAsT}2EBtyIbFFb8dw<#tVsWZ
zCKnG17PaP}n2I%=N@V6Dh#TWwl0Kg#-2r_^XZV=(yymJ?%*cNMn$gH72h+E78UM_W
z5GfsN*ripKb+1I7*wK}s=}4yHn30@`bbrBaR<s`f5o=2coAk=~%b9lLx1_gV8_vUv
zhpjeK`6|H7`-E^8yXdq4U|VgntYj*Qoz@S1hC`*#!}6S0+9dMNseyC@UluFYWBO_u
z_i`UcT3(hzd38_zg;X3X(qr!2#ZkcAco4tmO{cMJPrRbVZNc38jSJSSNH>{GW?l8~
zb2n-aLj9a)E-9+cTd2+LPtSCVQn~11`ZROV!z5lqPP?|7i9U|4inJxP|3c}lH^!KY
z-{ui4;5ZBeBaPj0o5iF2EDtx|Fap1)Z{6)3)I$;kzQ_H~H)O7EnkL@&bJE8<_h^v`
zISUu@){Oq=cbzgmx9c_J-1WHmS*9vNcDvzesRZkXWWcE1elKN_03lva1}yeuz(TPv
z)YTLd9P`PnKg2`sx@iBcdHhx<U+&<MVcetpw%X_Mf(M!XZZx$_&+bAXk|Rfr8wv~t
zQq^O3MgzCC@_;AhtyAb-4bEx?WBA$#X>Cu59z(6m%<)94Z9RD!L9iwd2Z*!cMh`th
zva1ef>`O-2$k=~8%qH6?9Ceyz+b>5)wX0PYR|}_4gYUMl0l9AI6kkaZKT@2%q<4(u
zTcNo^g;UEW(~$dzCp>#)F=?U1GL0}}_+!1bE;9-Qt8KONJ9lZ5N0%<*Cp!8ronwvv
zDU&IFzbak^AW>&wL^+&gI<^VdkYfwX2`z%e6CFj42FxK{qiv9Ag38J}-fI{I^Shjp
zRWohtVGQOZZ*<^YrdHduYm@-qem~^gCK`~ttpk2})zE2x1KZby8g45G2;beUt0|6C
zY?E%VWW+Q6pym#p^eoDH^8-?(Q${}%D{FMx?*$HBy^<U*oN!yZZZ62pH+ekvzzfn}
zHZ`CEGh<E@0MTxAGU??^*i3s-=NvO=hEyW*el!j;PpJbhkuT#P$%V!sbgpWCg@1DJ
z(g9Ps4<k2oQmWCp&4ZI#Ch#6jEHmd}t)y-u?wy*0x6!#vIf2cb$IjrxT)488F62tS
z&Rg#nHAO2l0sSeulhpKkxS06+(Omu>zWCKLw>&7*o?BegG%@th6Z$t@N_X7&PqX_;
z;s;+&eZIb}U_UrD!f62i1{Rb=1-n94!k<-X#>$na?FkqQyN`Q$=MepayhUwpKY3ak
ziy(Ii_15_Cnx)F@E6%dR(}PWR?8K?Mx-y#hkbT7sly7okCwdCnvz+Uu2XR_sU(v<B
zVyoF#G>xVN`-=0{4=*~an<^+$G_E^*;#56wrD1ko@!lKWz9RI5x3OSp&zt6l0wdFW
zYT-1WA5Aq0UR?v>-wbi{Z};p$K)<1BvgUF`3vonEX;PPErjI0jL%+;xiKFhxoF}w9
zMMI~HZk_f@ek7#MUCw7#=gG`yqb9C--)h@N8teCL!aC@t%fofKM+EglS;QF{sYypT
zpKy9-#5x_v;)SMAfU5}?ijQb!=rSLjQ%^*lc6~+2^yJCqkx>(Xcn*v89vmho^CPGu
zH0_D>v8ood^U+avxdLin`)Ynn=vW<{A}5l?Kx79sax8^4{T_kLjGi3`5sfOiZllv3
z437LhhMZdrUq`#%9gH?S-o2GNt>i4hisS19s$oeBTj8|1gIM%XDH1C|T5)e3I*=a4
z?-G6@1CbokZ<*$TKF03xF!q6!)aJ-9`!YhbDcxd9TW#mlhWK41@Hb6st$t<|-2vsp
zTeOh`qF%i@?X?1oVUlnb+HQsk$1(0pfjuJ7zY!ZAb&8EiVQ8d*YchUGvSj4yq8Q-{
zbj>{?V(AKv)~Jy4Nc+8fk2-gBKcsx{TIUgif#|45x<wd@1ko@oK3PswcpnzWpYV3y
zEz!i|M=v5nQT&()4Jv#~tZFO)B*1b7-IEL_IA?<p1SO7Ce4Y+0DWOERXlzyQ8~!}=
z?j}nQCXYvKS=6<yqK33CG1Gb!vj38P4IUMG!U#Rj^XN{xQ_LYLV9fcDsDFi!<Q3_H
zbi|GB4)%l;dwuH?8EJ|XcQ+B#v>KI=RfZ)oVl}Oe1W?b63r6e*G<fVeiB=)X6@8WT
zUYg|#=E~Fv@j+_R4Q}i(;tK|zMnz+43arxBYG9-NIVa&yq*>o!!?;4mXpv!woA@<@
z?&u>D=2JAcI?`~*QzE|DD4c_Yd-tA(524|1R0H!v%g8APfX_@{o>D=E!O^Wt42{Hk
zGCg}CLW~B}r6uZMyxY0m(9QbzLR|P0J=@W~boc&=dEwmR%%@_|vp8fw+xrX7uGOX&
zf^46^g23(e2K)KM-#=RSu6rwY@91jH-1?CFzPt0?0q$vSUIuhQ{&;*H4~<j5e{7Kn
z1YvCQTGr*YqsgmhoQdaG3lD?(Oc&p-R_g1rWu9^4v4y%l^kuuuK)}d4vBWD=4Vic~
zE<Soc#(Ov3J*ugLk1J8-*E-9DUJPfGT9@?jRAjYXOuJnP(J>)&mdxPIz4BXP!&dTj
z5}k)liES}9d`rZ0MC4`e3(?_4-3fit9}y(<Nq^*eh#z;#(^9PeAmUzZ9+pTJalht2
zBVlM|@Er#nXELpV|Ic<O^rXKGD3?s4n$(h?2&{)cH@wKXT^K@RL|#4VkMH7*?nz!=
z4YS*>yaqm))A{`c#yKj5z<8nVSME+sr3C-aHgxl`rcr~7tEN+tj{~c%PZRNQF&o(}
z^QF*uZ3aJHz3I!ExRcA1Czl9P_m1P(lO%e0EJ{o8a)0?lV^1}cQ)l|z^-O&;HI}vr
zLr{9!>awUMnD5VCu-<DQGR9XJ!rEEFqp1f4xa_v~O*YHvk?FfYepVjxq;iANKUEJ$
zpuSE0=W@N+n}|BPwOr9#4n(9^y8cwxl&cI)v^7%|99i@N@qCpxcq&X;VlYM4DxJS6
zjduHE{El}Xln{)J*P&$o#*cbXv@m|)gDw1+{m*r@V-BhvZc-5ZcQa*a#gqG!PxH19
zDY5r7gI}>&O{9!`UixQGK7WL?oP4e;=%_Ixp9`i>me1qY7Ru(@r<Z30bWN=P71>-<
zZLFcGR)EaHl@(V97+_5RAB1(uq8L+3GJ+$bfbhwy@XZ`99nkwNk&NFzBn%-M4O(>6
zZOR!5bb<&YuE!sYHvA=ivLx0i3k=qh&oCBIFZ7O|KRWO>Rlo*gB@JZSiQ2dMNH=ru
z)NhJB;&qUKrV{_xc$ld;rV@2>YMHXJew4Z+rwuPUkOwO{$<TZLEV9~;5rj-3#eLT$
z=>AqNOv}zfQJ0S0t)MPi>L9OL%I(vXAwvg$?egg0anf>haFmK>>7bssPeBJ(o5bAz
zU$ih9TFBE+WXI7AgFoEdkdeO92n5-UNj9Gu@ANv5YvxDDG4d^QR69FP9e<ahG)VDh
zZCASlr$BlJk_3DWf|25Y-Mz3$F`=0vFY@Ns+R9^wN_;vDEYe66l1zFvFi^6CFFuP%
zA1KMir`3JZS^7Q-`Ck@k`_r$^7@ys#x8%z^#)*SF?Vb;vk3~c#(SMjAW3$=*oM4z^
zgp1-(3I3(aY>f%MsJ*iOx|^ozC*zth9zo;4sH1mmG)=y1La3_|--M9eCg+5x(`M$I
zHLNY`oe=73GxI6h-Inj3z^i7C{&<}1KeBgko60j=Dl55h2;UM<Jfu8U@|Y66T_54`
z3`{8M*LXWVIhy*p3fJ-SYpDom&hTF<72DMxNoMCv<&7=9V>5b-2o=g9sP7NnT&U+g
zlz2j=&{^E4f~`;ZJh7Y>Lr$A86LszsgwfG=&fq8hXeLt}KWnS)1HtS(Dl9~uCj^lA
z;w1RuB!QCSi+8H``8o@)-x;07BrvMhjLxD>P(%mbX==4iyXmiJBH+*9Z{LvHWOwBC
zBDKSBh5tKJzxq&?d7z($-Bd^9_}^^z>ULZNSsgsv1*Kxz8^=~jdo4Cx81kmC#-jI<
zEP8U2yrIL`0*o!Ng;R_&3UFMGHNKI~PGFaX6ck}y^hNx$K#Al5k`R&g#4ZhR*u=!X
z$DN&4+bMLfG0By#U*I9@=6)b6n=dhi?RNo?4!XU6L=2$*NsL?=!ky#}ecc<rHyEPU
zA4qrDNrSX9vSHi|*dZ_UPn~Pirms<#N6sLxY58*V@CN%q`rVv*Sd183hMPoO3fYL(
zs8Li~LcFv&^-D2rSozTz`L)^JCi{LHY&`5`Lb(%5JBi((STuY@u~*@^DcK6=8GIzf
zKzxxW>^z`1=k^Z%6>cUu32_vjCesmxlO5T*M2x5?c7T%*e^L_rlhr(ioh4d)R4!tA
zH-QE)A3m%#&+HV#905^xlOKX#Gt3u(TXv}xjrKp%2N_nGB(tA=DhZ~dD270TrXUZ7
zUpfg*4<ndd0V*Vzv>gr(yAzr9Ml<TrXT{otz2q(`joN=>lJuy4t8FL6LQdmUeLR4=
zn5UX0`ipiqPS&qTWNMyn<8DpV#LC%)TN?upS9m722Exbm<OpS6xavfA<pahVaU#_4
z3_LL_-!a4z05!z__4VPtjchC_dkeb%Re?*ty**^Fbmv~0$*Q;x?5V7_SHQ71dI6z0
zIgoJ<J<eB%ZCm;qv}xdDh_qfX!202n*)W;`7Q*re*ih&kRsb_(+jvOd%0K{mSS8Wm
zY;^x7>h}(N*j-LSYZg_o>shN!DiuZsCd5|^El3zRfpN}^8H)Cw0buKr*Mwv%*~&Kq
z`zbUNn)4w}3TRcXAr*?+N){hkB8B83P(TjHa2xkOeh-8X8`=q)A+{E@^-v0X+^s99
z#9Fw1&Xc^)3)wH|s$AXLg+A(uKGNJ@u}^?4D?ik5{#1nOQ=-oKEm4Qq7|!*R-Shee
z7&~%f3sli!ve}JO3t17$^hOSq?L|L^b`^BH(YbzV`oHtXUo>A3&l^vRAQOw5NLy*d
zy=9#z$=@s_LWV)^K#gcIYP$vd3Fj-88LzSI`1*@mz}tVPkIjrbMXN>j)`B~GsF%r*
zBueaX_)mI=H>lox>o$yq97XBp(OPQOO0GAPRpB4mJZi$}&sd$h5@sdq4f=WpL3R@v
z#Dr>p<1xakdCxM@%XrD2723w|7oHVr@B)A?%A6H?P!-lurtrLw*02_q5Hk>&HSCi@
zfVO;m2+$D7m@iM4TJZ1t3A&|gJ^bHlAjOF$Y8#2d$OAVDbN-H9T7I))W(9<{jVQWQ
zUwzI$(0%+_ufDVW`s%6gA&_b6Gbf|%w)u27ZH|8)T@*4myD~{b7__xyY{lqhCW%D2
z+yrpHeLq8ajcCHmPX;*sIR=m!?r{NA_+e9+*>fKmAqN;(IxTX{`jeTe7Z`)2Q4N@d
zj#|uGw}$~uTPoV!7!e7iuct8e*vowlMf^WP&iJWPL~8xYn+nXi3^z^xk?Q?(Sx(|!
zI;$}r#;=#?EeLn>Ze)lzJQSq2gH1yG-a}1kY5l2O490*V=ES=YY2M%B9SpQC@itCB
zZDVxq>`MQZDu6btO<751=bEYTrKHe|+t6ec4=o#nB%2qQGrfyGTMKUQ;UneKomAg7
zF3v&TTwP~Sf%Ai@Vof&})WwTtO=e9=Kj@*JtDdJDC|^k5!8m2sZ)-uqZ$(VwRt19z
zSqq<?vxZt=T+fPeolOntaTF3PAznOy)3utg&cotozLrH{Pm+gFhZ}CmF8BY3xp$9`
zs=6A#XOaO12%b=a#uhbdS~CSTvDjt=B?l(tj1Gzg1?vr4AA~+A2pPb8;v|yeVJh`j
zdwXgh+o#q`wKoJ&$OK6MZvm8xH$W855Fi0BgdoZLUHhDwOc1U5`{%`vnRE8pm$lbk
zd+oK?UVE+g_})Fu)A|_pgw7IK`yv@a)^Dd!F3oW{<t&kR)~Q36q;oz%PVN_y8ZsXc
z1%$olYWHLGR%*8SF83BunVoxJA6tP};W$n!zc`odbf8D?lK%yPx~%J`LWDx`pF(4b
zEKBKMH^n=|VgL7^K*nuye^-rKvVvk%3-<2%Q}X!k>dq!zkT;N|WN%)O-L{sefPEEF
zHNH&kfN#x9B`#su1epLzFFy#GkI7?lJF{NF^SD6hXwcHr#35Gu&BtivLv9n7AdVfh
z=cXFcYSkfuqay=?0jb8cT5)<ygMxLZ!8IY%5}c|vjV@u+l`IlMtnmo}{0L%3+K>gr
znc>JC$$Ln&+waWSZ{Zf>V-C%aOo*5}P+sMt=_V%oHuw!PF&0^9_B2_Y@sIRRE;+DH
z_?PF>Va{jlQKVRxAt9H0xD^{<6o+rVFg{Woh-BO6+;q4rcB3CHJMMEGGf?CL_dW;>
zDzADIXtJ!wxmKz9k-ck;IJEk1X}S31D~G85%ilzk9#8e*OM3OG(rUO<?OEX?!G3|P
z0$#4URYKS2H%cb2C!0*wtm)N<v*bBG4m?#K_Aza>noCu>OkpklE)|hqrJqWAB!1@T
zyp#DsElOEQuYH+3X?cus?h&s^=S+%u{*qpGI|4_vEoAPL0X_E;bp(>n2}L$0M&10A
z1$JVuQ~<@A_0iUl7pP^5V1wCeKYf*u491k;U8~s#)b{SbgXD6*@W58y<q)huR*n4b
zN;C8e=9WZ@FScEa9qJpuxj265kF>EH#h|thKgYqQ=r$(W<R)zG%vLNaiahp^u{20;
z3#4^TUKn99vh=B~Hs12-JwsS#bRWla855+5T%pyxp%5!)7h27;JcGaqe>*9Kz=2*L
z>8qI#=37%s)>n5hWOXQB$r#d}+Yv$t=+8MKuCdk<lAF-(j?=G<{tz(%VX<oDKu?sQ
zm5hqH5sJ<c9IqP(j==)}6M6F7I%+Vo1$FUBebV~+KN-PI(T?Tf+J`b;WKa9oQVuf@
zS~s#q{atz%-5x45#Akx7Yc(@u3bVnC4?c$w#F_RbsqwBFndONdFdGFB!v(}`{oGE%
z@*439pX}RdzbV?G23fB{P~u!m*j32~Nzo6pAC8~v{g#k<t9|om;8Fu!BLQTcbz1FQ
zWPf8=mwE8X6B~JNKdp8W32~#7nDh6>&Km%4;N2YOcVcxVgS@5I3&!JqqJb;aX*Czn
zrcB(2pV2(YfAF%1@5x-3;MHlhE2oj(cVH^L4>`Nj<Ei?Rtt?R8>BpthH}yzAGo8MI
zbPNWF93Wi&on#mF+CRV5vE+H@W+wvt4t~2y`!W!80Trl&uj)OIGmaU0pr@2kU&&tk
z+;edv@hv`bJ4judvhk|GeO>#iDbyZ6_pf+TW*b}ptze&Z?#?Gq@_g6R=D`g?nM|o(
zCf^OMyiN8j;_E$SFPNSPQ4JGVX<cc?xNl|u;}&fA7b$z9k}lZV^6UAEU6J{Ty3veb
zQS~0#6K7ni`jfJH3!AUlAAUzVy~^Gj&hsQb%t>rJu4I+n%uCZ4KV>{6HnhloIU9Z^
zCWy5MWE!feFT5Ct&!P*8@i7@Q=8M?Jadf=Z9&-^mt{UaRn3<w7ud1Zt_<ZJ5yIwVN
zlqX8y&L%ImKPXFPCANv8WR=ay64lP&P?dHHI1c1~NDunQAzz=mJh*zj7xvX=&4K;P
zamSbo1#3SLJ3@!)6(~8A?7h3Q?-zT7Vrz_FjTN(zW?IQ^?o-2sZK(a^ReA9K8HEMH
z@I=pVueoTTr^z#rN9JawKf+Ym_>_j`Yad!KIo$_MF518r{U_#{9bp4dnwkU|_%Zh<
z_NDmaEe?Ogr9(aZ5zDzmRIC+CJpdRSlY_@NRe68KgZ6>cMxXaAT!&yQWKQtg+r!dh
z`p!BX{dS&`QuhL-D58p{N9YR+im~MNgA;cA`L{0>7~-%0;QRdGpJO2E2jv?ABYe;>
zBpFh3mVK%02O?b8``I~+pEa^j7qwQbtE=)vS;_4eE|rEz%jeLb$ydls>RO(lRnSsW
zZ@+kD9#WdGP+^cu6k4s^xwG%NaG)nvI#8>9$ibpkyO{PA25Xn|)B}Tzhilgf_2;?E
z!2Qy(>X(F|GgSFg7qPEC@x(mO^m^%R@_Rtz@GW(`ivytFD~_|(t~?v&HpZ{QMx=*P
zds1`eQ%hX2U2bt;Ox|iAd;<0~jTd*ZgJy&rh3tRyxJ&lQLBMUFIoDwxTW-V*Q24FY
zN3N0tgk8YrelcFKwFIC&(f&=@)acx#?Dj{grgO&mZ^n6C^&UgUpTj)#6_thl9uv8g
zPhs;7dstZf07J;J(r;Cs<DgEyWuUG@$e<eI&K{_9=i?HANr^I2%XoWFz2<?6@kx8$
zNS1~83(9w(%xb?F|JKPcV3oUwUkoT8;b$@R+UH^}3@MJcey7reUIyBWE|K0x{jv|1
zW)!iSZz*ztR(^R!o+x9+n*=%Pik@s(Zd)RG{DAECtiLi00iM+PC}?<I+Tw<3JvACq
zBeNyqu??r9LMp?gg3_8|R*s^=>nbXC)H@s7yJo=VVZ&txWU6+xH<BWT9$~pAQmAG{
z$)_RK)mf7jlax9uhn0M)ZYfFnWYV$EF!%8iW|R%y!_wtG5xHT|(pQwnrJ#m=6+3cy
zDB0`c8*`aL5LL()-s`cK1G$3XHaa$cOvD<7xz!B(#h6WOj3ee=M3R<)LRXbH8D30u
z8^eL7%AZlVjA7V^=}vG{SR1>^?!~;LqFXj&)m~`-=xL6bX~aJ6Vv@V@TG`7U^0?-K
zJAX1xxLl=U-b}QelkGY84`k+^oLs8bT1o-NxZo$zzeT)z!48}be8bp8P$?D-Hb=?#
zAh>Y40v_W7ChWsT-oof(wN@(zN!b6$gc)$#-6FMf#lNav5F(#1;j<Vd%H<3Wiia4A
z2&oE>LU@#uAU?)_ueu%-AKY&Q7gX`C)%;UROCiI2X1?Sw)d$18PxO=azwUw~LjbwL
zw&k!^@K~ITE4GH*-xCYR|3zV;HInB^u0|+OSo1#RVr?_YJ@fDUKb3!l`f!yj;r}Xp
zR5h~IzLn9JMysSAP`lQ7f3RL1fmywNG5WhQ3ubWl#W_((UMH9Y`E+GBdZ?~uiq}L`
zA``jEBO8n44}>i)S@}uPRrfV~QY1VbZ-u+Fgo85(I9pn8;06v1CB=|DRb5we@>5<_
zTRwIVEl=6^-b`=ImC2RU9r@;A_qUPXWE+2a#BbCuQxgCYqTAYs`%1k5$zzRTrMdDl
zh~0dtq&^(`tgEuf8sSb1do&+-V<)i_s<nT>Ys9>fiE%_-zlljGPdS6_887lOIhIm7
zBqd?Rnu-uxzCg-qswfaJ2zgfI{;IjfyF1w`HiN`2OjEY;e;ej3{N&n8N9L&$nxYcM
zXJ^wGql>j%8#o51-edgscP^6Qt32a#5|>u{ur$_F>RKc#AIClD+s$Tkf+6FAH@z`_
zl{Q()baJ6g(uXMFj*ms^qk(*<7Lo~=PO?G^1gK}3Jmye}OyRxsd`}f87K03DsZdK$
zif>?YR*dv6wrwq2?SId7?}J_DN}WeQ-$&i3b9PU{v4us8gd<|92s!3f#HJGar3tFr
zCC-W=nKD)kIg4>So{Ar2KfriG#;<oHfU3-9P6#vmZeC`nUN4~r5oqOB-@x(|0@zCn
z>jh!usjioUD&!ARm<{D%M#*I5Q|!~Pg<Kh!Gg*VPx&5-T^7N|tU1wKbBfH6#Z>2;l
zm3E<|ktK?JcgHlte9!(f%Z61xi}C~5xJ)w>Rk!z}@W3VT3Qw}HP>CatQqU}))#%Ie
zwCoT*%S>r`-oE^%)csg}l5-yH`YCYyBxfiLe&;TUht(RY4HWr4HPPi^ib4br(^3z!
z<Uuk*0W1^p$FQSIg-Z@@94=e2_Y8!v+(r<{N?S$llJ!(DnFmt1mS@Y!Km`6epR*QJ
zj(H%>Aw7rUYDUt_su3{FD_96cW6-^yDMtYIjx+a+t{OSi6Wt$<-{G~}muMKyUe7Mp
z*#KwC^T^NHb!ZGy^0u7i)SOGT7sf+pc2$+09sPE4CC#PALq>vBt>$ke8bLeCBDoEh
z!Cw1*S_zwt>776ZP#KR(J)zg-^>!O<EjK?5nLE<@kL6ubFEZNcN)Xj*)`1oKdu5J%
zStBch(tXY30n=V1epRoosu5>L^OC#CDDfp)yu3Rx2~%E#K#`sON7;C6wGTh4A?J6A
zoR5DpUW74-*puFhalcAnaQr9JyB_kWoGb-aV^?1Hzm$nzmF+dTxv)#ASB4eJ0j%Gi
z|9xTD!wOYjLUKVyI`m^DD{8g>rd%kvLyNyH6<p+vc=zMBnqi*EZMBx~2$A-{*J$=a
z4f1{X$g}ascAKJYy0V$;5n{!D=MABtt;JT#D)F;sOn4hZgI%Q^aurHD(3`x1QYqU@
ztu8D}2nW+$^rLp9yu?29Rt`5Q{YGO5JyY`gBq|ZxISEfLL25u1!5wbF<#T^PaC?R<
z;M;6*w13Gz@Qy&<Mo#<FpUdKK(D_0ZyOt74nR*MklDG3mmaOQ{oF!|b`x|$EFXK1G
z7oF9@Fgp|@WM+N|>)T|%s*oHV#*E4D-hj*XP_`UBxL`EL<$x<o>RYzkAs|-#0Z(N1
zbLS8ASh8vi(w=K}&g@viFTt}Y5p0y1Nz2Esy(jv`Qf=|1-Wh-~^O*#TEBaL3)yq?P
zmMDGIN@L-{Jzh~H=U(#8qEV4A(NlQfjwfuhrD*D+n)Q_tO4Q1gF_puhnB-z9>9wL*
zZiSN5FyAj(v*LFQs{JHAR$MhrzhZoh*9m8z1l@33b!M*`ib_=ifmGLGy5HAVCR!fu
z<{y%GvTDXxnEYusA5E1_mP@0@PfzjBCE}@)D3(P7`&3OeD@q$H&V!e9^qG6j)YzT9
zQRDX}{@i)ma~I>HWjFrP`Y6NQb<t5Eu1LB0DD~*o?QCHlt^5HGIr8v*9!}yxt9chR
zP<w#dS;=B5=s^`}EO}@Nk^36;AcyXK=5E)XyVH-(@8W*(@$LLxp2MGOj%yPC=BQ1a
zinW>nKpTmV&DEZ33O3As%G?-e3<Y1C{g~OwIY2|G@5b0pZ}cHP{W8!H3cfY_-jMm4
z5x*42jNBH;DO`t7vQQ!2xJs_0%YJ#t|Hxd=DMZ}MrA3nD>K%gdrTOdj;axJ<?)bfv
zqe&krpg1d3iNdVFUm@^wZQvwQVt4v69~i__C|>qiC|EIEyZd&^5G|ny|BGTtF|uU6
z_`#uM29wBm6kZVuHq05VEx!Hu9HK9j)s4(8tLcjF<oafLa5bw=$P5>259#M6aoB@L
zWZM2C^U=CI7sTY5m-^!4KTf_w3O@P0EgYU8=f~$Cku55H_7&QH{f973?C(RCuTWMo
z>APXwQY5<kGbA7TS-JNrsIsl!N^VJ`2-yUEl*2U$H?Z{KO}ditl9;<P<;y(ks6a#=
z@vAU4S57xq8}X5~GK`KIN!uvZ76OEO*<MK<sEN!bEO5&G)`VPeV2@cp$WuK+sHpNb
z!@8QS?%*i|D>uw7Ek$37zXX)p;0@}ZMbE|gc1?YB4+_2StD;-&-=8d}IMJ{*Cbwyf
z?<#<bttMddb+Psn=k<==mUmv|RZuDYx0PUpzF<zVVck}w9MG~Iu!n@8hI9_%_m)E|
zb11MiKK?N08d>&FE|U!`CmuKYdpCKciSGQd+w#wj{*O}z{8HwKD)T+ckl)vGx3JY8
zUnA_ZhLRq^XS;ZZ5?`c-bwLlwCSTG(HN$qiGg$Ban!##fGD>D4V^{AbYPH<wy(&Kw
zVV~U#sakI65fWiM5+NVvoo|d7<FC9yoEUaj7|*N_)2VcY*f&g6Q$a+%5KH`+QqjU4
zPs@(TD!`>h*63K6wR8cjI($n+#}(2Rz)YKX*ipN*G_oGy@|K3|>}Q4Uq)9Uy(m(?D
zx2(6XzFw578S@37iPV%MalIWGGTIBqQsx;^kyAMcy<MZP-`Qq@zaEL8B=QB9BV<b0
zS<G0a@gNK`#o=p`mm=xxGH$A}FK91z`@Nr??Y1ZNN}H!pL6h&^v%!Oz;6a9hmeW-^
zZQpbH(QUUt{DMd81kBxk!l1Y0I`88l=XxKB<*^Rr2VyxGiS{hU?Odb<PG)}PvyNkv
z&b&R)G5~tKP{<z#ER}=t#3K0*7>SN7!sqsihqAI*EI~p>e^UA^@y}^)!jMu;T`po}
z*istY(6m1ST}m*M{iiycv#0z`j^WPydq9L@R<#JyQ@(Q$r!*4vh@tE@MOrS7$RB$j
zvnRx5<I+&@dNvhze?kr+RQO7z=<u3Es==4X^>F6VuMOfGrGy-N+1bB>9z^c8MFbJs
zkz56Z9vfMBw)UW~C2cWUFnjIO8iXkSBzu7XRYbrDnECLh1k3_^GHOVqco8741|XVd
zSry&#%+q*7=7-a<qX#0<?2=Fb2dlIH{;CU*WKp_l1=!CYb^t4|$D=1v62DgS2}sfw
z%M7HN+!3L|{5d(aoj<zCC)dqEOP5`OMm%D6iflR6rA4=|CrFhP1o$qyAK4U$<m*J~
zs{pgc`I%<f<7gzWhyGj;rr?7wiK0$!bJ|T0A@BW^C;Z7To`BW(9AaT2seI2B(lY1)
z2R`-Qs*ba`HNQCT_{w57qkCL2kZO&zkfPNV$k@eRn%q;u1|@ytmvmK)Jnro1N}4#O
zs^jd+Z&P9P&+$vLxO9A6&6>)7RgmUGioPAhZ$x?JJmoy6tTb+n-QoAn)r5~WmHUC*
z(^%$pa3cAN?T^tfrm$kO8u!FXw><Ra_<^pTd{A)B=qq#$WEry`At~8MEokm3@>~?r
zvQi3_C>l~!WsiE+9q{N4DSn-*ikdHVYj)0RUxaGy3#4W-F;kl^XH~RMq;e@H`BG=;
zgH>6fADLJ(A%-M3qrh?|-Y)dt4v9P0(4bG5CuDWznLt-+S6`4h*=AqxMH6ky+8z__
zHxFbWq_&1elkz7M;u~oHXo!ENiuHiF<$n9=Yx3X?E0h16<m?pIyT1>*znk6PsQbIc
z{oU{WcDTRI?(bpuH*2yik?>2g7YNId8p?K9pka0j4?E1U!)aK1n5&SVXXw_|gqVqP
z)xPpZv=t|-ZL!uu%$qVOSnY?wJK@$3pwz{e6r7iPfNi1pEJA&M6!9vH*pKoV>k(J`
z=L`r#l)8Dfe{`d-*mI?6yEhjcc~<e2R(ln>TNY4V3(1+Ho})$E!(hRy;IboKi*+t6
zItB~<QL3Y9xT;X(eexhBC`|*Bsn{atDuS?kL7i#@Ol~#`d;H*+QjD!jdWJ@2(J7YO
zYxWseJEPEkxnQlw{!~%@2~04hQ9LrizG$2psq-1~QQ87IuL{KrYlUa&5SiZ|@k`F*
zS&v00`nr5I3nFnshHU1vsfu?`?C^2K{@_8mBHN96=53tAn6L4$p0hP0vD0UG_oe0w
zdn5@Zkjo-h#@>aa#%V|hQ;3ftUV5gl)dm{PPWpB4^NvTV>qwhYPx>~;Y0iP@vQHCQ
zWiYnA&0GspjF0>k%i`cnq-XFq;Roi#1+u7m<9XiThB<q$1iZBU3HO_>yqX04DrY=X
z`xJt_{ZUY-J=bTd>{t56$A3CC*73u6y`6j{`lBBk)?LDOD_gi$=u3`&2vi{#XwM;C
zw3AzkT}ZJ*Kb&`h;jU3lWq!e$+8q(YkzD@hj#NEwNj);+$U{;Y1MF{EmAQU9@br(K
zKo}4#MA{F&H`Sbnpp(MyRCI!;%eRvCOZ(G~n`KhgR8vzqQ~Pw_gd|ZhaXulYM9>~m
z)yTpnQc5bADtkY-ekIPR^E9V_h@b6K5eZLJd*Ok|z4FiPlbWYJdw-&<u{N5<s@}IW
zrQwzSZ#S&V!Q=YM%>oWS>yb@lY43VKa3GVyVh6lT#>1UY1yf@jShG*<UD7qxye&(O
z(TOp;9}hpAcdPOI%25Il^IdzaVb0G1v$r-dn{KGkbMO(Tfs0|yssSoeRcuUEk=wJ1
z*)L9wjquA=;M>%I;{aL)N`U-H3P{!Ok~LG!{!?QY_@kC#%_T1eb&mr{$h!D5g6JI3
z7A&4{7-dcv<g&>kri;Yw%ZuOQ<Hv8m8t2SIZPiF*&Ixe&jzgM|=`R;gfAeuCww}z`
ztB^+pJFt%rA4bmNmH*k$P9(e?BpqBc=M>^D$gWlnub`z+U=2H6ul=bZaS=#ZBEu0e
z$M~n3*~xdo#tKQW#{z~(>_eP^l?gBVS!fEG-qZ3#a{rGxtk}aJcRX@sJY+EwjI_f`
z6jqzEr8aKZ+O=YeM>C3z)KiY3fVIJ_psLKNd#w5%Pt}L#I`%|Pt!AS=%a>8<&6$;U
z%L6HSS2tf#w}y%^6+>`5zozKB9)QI(U}Jd=a#JDFjh?W5)(KXHuN=WNwu>Nl2fg8?
zW}Wj71CGSD0=aSGH~OwrY}r`y;^<pHeDlE-8;yfI49U>K%-<Y7xSgY+UZQ$5-{d81
zu6zE;C!TnMI6=M2CCXq<VOV=+BY6trzK320rN;F77kmGA&`8*4$3tb=2|FwPLe`L*
z;Hkb9@toSZm@6)M`t^J7Gqh(`bIdesdg9+`{m2$*BB0r}-t6qAub=a?KlZ22f<W^+
z+uNM5`%Q2DOCMq9<GT{Odj~e@v5p*Vf!NtrCqAZl^&#yHuDzUUu73WC6P{Zqk!GmB
z0U*wdk1w8HpUc;}%ew*z{l!;bdF2(|gjwIz>$km6@-&Y1ojFc>W>w?ZK4*p#_UR$B
zo(`>|<mtM(Qa2NPe3xKHr;mx}{T5mLZSQ(Lur8igMMm%XKr_iz-u2qz`oKDE@tVYT
zf8PXla0&O}xrXWWuf9U}w);bUw}>yAggt1g_StHniu<a(^>vr`(gO{sgzyV^oRe3N
zH57;HF7Hjw?p*#rQ>>}DtnSXf=u12AsEov?_LIS`6(cph(N`$)Y?0d4X6lU9JO*nY
zRVO|X-Rc`mi!^^V%)COwI>o*|OK5y}As#EI*H=xyq08`YW)u>3L2}KJ9{KH%l~dR_
zwqJpfCMDzG_9a3PjbjI#7tx++6KV-3_7xicy?*4FxNk1ud35||1>Qu-m2i=f*|Gk7
z)t+0G>Ux5%U!2pU>&FFF#a7Yvn>0BfsN1Nf;pWD%x#!WgG$&0NfeqSoE00nCz`)Ab
z%Hq0fzNJnV<Q9(7A1Twt#<7FWLh&>xllHfBxj%mKx2g98=&<VHM?3)*@h?_-WvtKO
z3>F3Tyh-WP<0J3)b_LpF^~H6%*Tj8UBKjU<*L$9!$6m@C_p=Ye-j9_zTY5Yg(_A%y
zhcQYrrauYCUh*bS=1l>>_d!WHpK;ecYU@*Z9;|OjiejOcy34;qy1()q=u$pW=p><2
zfn)3tb<r`kUh(NWNx7Qg*2nvh<X^hqIhT4-c%(it694Wq{*zn<8CqwAzdTp?<FwH{
zz-DQ*xgkD#n>8*64N;=SUslz5?YxU6H05%I@~9_n5bU(KXexSpu;<fbd%cwd%(vL2
ztxB!qz}qbYYPHN8q3TkHpjR%E+8*t$jf$>xs?!!XP-6*m%ZCrT*!vnYFfXq$lrzv%
zH!+7}`^x?-A=+Y}uP&6MiAgB@y4C)y5K*DrA1u$Q9BEkNJnWdUf4bVWg1XF~ob2qQ
z$Xkb9roFJg%Fi)UVNTMq9jO8w7KK)Omh-LUIg!83R<Yx>uX55@!g7>968p*@%RTz^
zeFL>VSa-P_=lAXrDfl+o%OMjtJ8x=V)yr;BZ%*)&E0h1?4ZjYHGLO-fE-A`k@7Co-
zfMh?b$$BD&UG|%F6Euo6zC6IUE3Z!8&sWj-;8jB`!02^B+V-nunf+KlIy%PRvi<1w
zEU~k|#B$)2A*Y<of2SBr(`!cGPGebWbwREwz@R8cQHTUK;<o=fS!6I}y{BtfiI;iH
zp<|xZq2`&{On_opcAS+a%<997Vk>Z#C!E!&ms*$BJuezU)(s!?w0otQ-nIxnIKBSw
z=Vf^U3BvH%S$w^#K&?YViB(zA@ZZhXPp^OK7py}M9<TSthZot%Gw0bGkB8Nrffkk6
zvQ!cuu67L5>t$IAB)kXA*CgYo*L`&24Mt*LL7<H#sV!mq#T{ZzJJ5Jx@;6d4kodHL
z0C!^8C!5+FWqOdoA6TpVgo26L8mm(Xo`{8FtaCur=0N*YPj$yK7C7x5IedvfA8JQE
z-gVc!+Y`G^jF_7fI|ri>4=+h!II%r9d~jQYMcHM4;lKtGx>2SlcJ%80Cb-qt?Jn=j
zs=nK2#C<<z`Oh{2E7f|D*wJ6_`?lWqu-^A0z3<EA=7}wu;x|j~Sn&sxLg-sWnVH|M
z5&bX73E?x=kX@aufJ01g2w+KKHYQ%ns_w+7Bx^2{uW-Og$xmdtNz;2`weS3Xn;s)H
zmPlt#jtz>P)zE2<C)(>gp5;?`O4g8U55vYQbHAW8orefWUBcA@kw_ADAlffN*xR4V
zG9~)aA`uNylBy#BL`S>sumnEl$vFaeL^&r+EpzeVS+X5GxYY<AFfe@LpD2d3F-`cF
znVoMQq;45<Sz42wNN&zTU<Iw45nSa+t|+;S<kWebHA*Hg^7I~>lOQuP?Yj3fN6Uv|
zx&&{^C(bhb2wy2pT|drsRp2tekIpahA7Ra0rGXLwiPYq$im~y@T}EO@cF*~WzfV-5
z_|w^2`5hJDL2;J37)`mi99r!w#DXf;BJL5}qp$1kmPV8gdhnVYEhd&xV%7X%1%kf$
z4i_Lk6fD`NqFWDJ7jUTWu&Yz4Cv2Xjo7d!o6CY$dUcN=ypp-s%{>Zog=MkDRSK$Jd
zQwK+VBrL(+NIHU%a0fX}VLW0hQF;7G+|6!Nrz&`_^2@Qxo+X30pE%YJ$I{Kq$-~xd
zSVK7YPV^xVou481pe@-eM%c4N)qo0TDBz1dv!ik0;yqJw`(^A5u^`w!LD=L5*$mqK
zxY{5mpa<w9*V~zoHM@8WVF?@>F()TFL9gzFGVjtB>>JB2#cX??2JV8{gaQZHlq)_n
zIzF;^EdLvcUD@^_(fnHd*}<qN%ui4mW@%cjEQ%2`8_&-<j#{jWjNHA%I<HaI4mkz_
zOJdRrO7aTrXZh}6$;u=8d2jH9TFCDpiMy9$*>623y09Nu6Tt7Cesxdf-Vt)1Lo?gC
zhh%bqSj>G+Pi&03xsrh}b+3o{(*uc%aCk-_aTyV$d{y7Asy;-1v)(XYkC>duolzx<
zbPjCKbaB0<99%2@p-%$Cjd*&|FE<<Y%fNXO%$rF?xdto5aCe13iH%PLs9}g*$9)6Q
zd}+1)nTla{Vp@%tC$*Q8qo4w@d?`?P;X&3qkNp5TXN5*tWC}<g1~>ND!${UG;%S+y
z)J}(cJmB>As>l?+DSWalmMagC;B%gfPdUo7?_4}cF0K~|<0#OrYlQ3=nj&Z}A&xIU
zrk-kXnFlp=gg6BfQV28$H*0sd@QUW?+j3GcOq_pzpw;b{G;<d<Fg(%?A&<9EZad70
z6p+ew-P#`lyE0c8#e=Z30#Tt3gKNJlkmJ&eG}L@$Ou*hwucf|-#ks?I)Tibc+u@8!
z=C^O=Lw9%6lWaIg``xpQy}E3uYya(ZJk?(SERcz21UY$*-m9PwTcg;`4`DFnVDT|{
zpt;IH7FuQ)QiaQqdYsn);wfSbTY!sJ%wt8&N!|hV5JD}Np4qSPB8oxyt;>;Kb#kp#
zA2_+_RuGPaSk*~q+Vu+jpQ~9)=4rCmabHdmDRI-lg<UP}0H8nlgsd#<4U9AI9OLM9
zf9?MMlHZ>8ijx%Wy5?Dkz1B5lq7^8R;h)6lSToD2k2n-Co5BtS*g^q6;}r@R8VcSJ
z((ZmoRuy;rgnaX5AY~YfTF!-Ka|551f@H$lGPH2WGR5L1m4&TI7|a(oi1IAo2vR_+
zkt>YyULb^-ze4IVh@2g<hWYLDM3L=k<&@^we96_-!4V(P&G#;h`#y0RXHwIaJ(&_=
z(^sf7Lvl*q?lE2&{Cjx5{oeg9ZK1g6=HGt%cxpHXY5g#hvMyKrd)PmPe=`WGcT5EQ
zT^B0K8X=UmDESe%6!{qxiL%A%CSkdm7BzAjneH~rYZ-_7Ijg}Hw8?5uXOt^Jb(hte
zPSw{Ek>({#h{VR(kuUHCNlfECm6I;EhPOZ{Ve3x6eL|^R)Q;}JvTObYsLVy#1IO5E
zcOp}$xi3Ql!xX?r=mpx{gpUw;+TE5Yw?D3201Wzwio)ns=Q~947yYm}3(Qxmgt<Df
zmX#v4OvFdRc{p{43%r5;dz>{d|H62lT3r>#U4>bf-S3C!woo}W+$y6qlOA2mj-7E^
zVF)_n)BJV?g&i)?Bq)QdR@yO9sEdXwj)srb%^I*K=VbTP#lhG`xr_k^;))V=a}rZ>
z62^sN3RD$MV-#QI-8F(8Q|hLdsb6zQL&O|m|Bh`!@)f$O7~G07#o$zrvQ&>|!qppV
z_eQ_P1&HX$<IH)b<>n2c<N@Ip7$>vpHmOym@LcI-tNqR`nx}=(s1=1M=xg&pv*P+H
z1hxIlA_qyZH~jT!HG63{DSk<1eb1w9J|s_7zbli;QO?xf$8Wd%$zeHX%eOo889wTW
zX)S|N^daj*tll4dxpEv5ne}5oTH%)9mda5aFze>KVrSpu{2|yP-ZXuM7h1z@)Xg?p
zC+2ZeuDwz;gb*7sp9=l6H$yBb`(%{l-SA|{BWg*UAF?hffWNQ@PFtE`+*wi|>r~#u
zg-Lp}hj6KZ4>YZ&3(5QF`I@qH8MazmT%H?ZcUu=KJPYF;j2Q(dY<-K_p2`e!hZe5t
zj46E0euBwB!GW;+QVO2Q^SAir{sj5)N7>xYwood2j}4Tz__9G&9o$oD;00-Zn3q4N
zZ~&X7)%=?I>j*Xne<7p`ujX2WsC7#XtJjErC*u_hofZG&0~(P-#8hu(!{xS=Yu)OX
zBj6IMPBBbQq{KHSwf~Eq5+LU5GO-x=O_8{-dFrAtVzhNm?1HnR!wnO2-NC;$PRi8B
zYKwou06R7|y7~5q6SdkTyUFsJx1+ci=wLe*X81$F*JuA5$8z%rl*e!GDi3ZX!Vm4K
z>*W1m`Xz5Cm&rH?-=4=5lK@=@(4axLeiknS(N*Ra7%PKMF0p_3H{p5}{%rawedRzs
zqSY*+Vc{;q>1E9;Zt_(t!;5Af6ke25bVD`>fu47j|2<chNw^X7$5}WZP$}-|xe=e|
zhmz5hs>!vW1oIq@RI$wZNCF7RIjdD#bq7BGYDR!PSZ}^|x7dV<m@S-E%%Q?;P2$5B
zwHz-bAL|%JybCNjIA_HFI-jlFSjYFHyL9VDmaJB}Ra)u}6d#p=L)kbEEjf?G!iEjT
zN(A=SV2c)e1Da*ZV85_ae6s!qn*f;ad#p^d%UH};Aw74P>%ox#w4CKLCWQ8p5D4Tj
zULlBw$?`y!x;ID4{^X66bTwW!A>xMPmW8f>1?I<>yv_Hky62xlMp}XzuXZWzmb=RJ
z*roXGVk$buD%WF|a)}b3#y+LQr^yT~%}tig=lIk<B`$Uqh;lOu$BV(oS+Y1FKrzLB
zDql|F;W~LZlZPqta54`+lXdt)Yh;_^E%Sn)pPmcRjE6YR@80^c**irxdj;K_J+o4}
z)9R4P40(}aN6S|~b3c?h;?_i7X@Z#wNzuf4ZWG6-Kag2}j$2Lf(e-D`2UgKsFQQHX
zVoa`f_a*Si9^i{STb_T64eP2oY*=NX5<T1FyriptO>ZhM5E77)oR$_2wc6f7C^#v~
z*b+jA&z~h(;{#%$lRPa$U8Q3NKW2k+1q`B*1J(qFJa2_YoUGMKfOd40JCbkl;H>k`
zoWGNuAk7-db6L;CMe?^@^Rr&|Ac0u8wa5{l&IV!`aZLGg%1;t@=5pLt`$8{+$>e06
z7#Y1ZB};A!9_}*j)YdYvyIW*n^WlgLe>6p&y<S|hG>M-GanB`oOSOY|kegz~$a5nd
z4*Xs6(#T{MN^C3G>aUV*(9?o9`wG6L$U58HEh{qe&-j$=#vPV<e^ulRF+`M25j0(D
zm_rf{AtA)~wF~K?Ok3Fh$+8BVnXwuibGp`i0?Lvh{<t%J2YgknX~Z~3=u(SKu5}^H
zH6E?#5$l7uvJWvD&h|vd%6dS4*FB6{I%@WbR|xT%A^gg)#`~?=evuNU3F~kcjk_o#
zkMNOEq^4>SCa?UG$O<NapW;o9rndB8j=ec!Fax|OZYsIedgn>zky|(S=_77LL6925
zr`dquVP+}p(9sVZl2Kf(RV2_4fIw#$-&!C-&3{2BtCXLl7wDE6##KCox#5JZM$QW1
za`v@kb$As5-v9DK8O#fvB&(O5g@9L1Mj<*Rzos!tTCnG<oMW)RAdVB{h%ES`WK}tt
zjVvM;6*#h>lKFJ=GGyn=V6$H!`*FufHR6Vuf)pC;2Z*PT90T@4W`}TgSFVc;6}fJg
z?VE+=kX+}J^+ND2i-fao)V?Xmi`|jKYIFeul={kApX5Z8;SA9shamD@*<+E+H!}8I
z1(HXoi4)1>Rqc*=nFeFk_Z=|qm<br$q_8!J#qDlqGH1+xt6%KU_q7M>V~0i&e8j&x
z+7~qpi{8fQhxiv!qyak~mOLFtBPsH69rWBp5@d(`@vYc-qqN#O**wGtTrdv-B(49{
z7T*GUp+?w?**W4ot@b*ymDPMo{fb6wui_m)Sqe$eC<ZD=6kR++pGeOEE$UtT7OCsU
zCF@CIO6Di`aIV^oJ@I{%yq#S3uAsV8mpl_8J2{;{A}8O+FG5)|SG})Ho-H3gls_6f
z4w0zkw;S>=e@e;EL{W#x&5C^2P8Oj@y(<+c<4BBb^`7f~N1q!(<_MeZ7@6lrtV{B>
z#g`OV^9m!u^_7=Kf~#kLzvV*scC0gdZvWUmW%p86H><18uQcmo21BMfXN1XqnrO_-
z*R{nLc9oSLioSx1J=W=)H>3`Jr?So75;oDUmF4PnMuBe5DqOj!x-%P+i!N*Qh(4KY
zEzkDY|3|C=*Bw5|W3Fq793}Z@5KYD-r^{wr#MJZ+HiyHZz6~3;1sds^zm9DIF4?iA
zW&d%a)yJCT3nu0?2UeR2v(JW|eK(r(e8<rDE-8Zq5V<Pal%5`b7HTW0H=h%ya%?0P
zVLWz7H`h*3n*n-)&>JF7k=ZQH<1tmj#$lP7YU;1y-T0!swOp1OuUH319-C+*)}hTi
zXKJi;kXE~yS8KjM)-gb<*~7E8K+ap0^mRl%;PY6nz?z3e-(FA0kf(!<m8V$)V;#pw
zpQ4t*TCLouk62}b`&5qTd#qD+Vs#b6kgG<*X)Wo;pWsSu?8@4=)h16X->j>za#dmp
zeiA);aHY=o^4hm`l_Mls%wLP^JdB;n&0jyl)79nXFCXQ1oLT)iKNvODP?XIPJ&N`V
zu^J>VrQ?g1h$|Om8}EFl+tC*Di1@@%>&EkC6bf$ADmv6XRrVjD4&7WT=uYO6C(+u=
znBKMOC%5-A60K*1&BIAi{{b*TBj1jGTLGxxuPr0DzDzohyqL$>;eK;VmPv1&&!>{s
zvNd+Zf9F6s^l?);E$nJp6FbuTPGgx&ekZRSp|t!ncEoqr-xNlOD17lMf*i!J@;HX)
zgge-rw8^E~7a!M7!*8aNl8^JG*2P$>KiLFRa7CXlqOUTSz6{6biou28dUjJsb`N3K
zQw3z1o2m@@M}G444wd?{qQtpWAqaA#=vmqgIYNq66nWiwuWGyRlObZfl9LrG&FLLI
z(Sgq?RQYoHLuHG~d=8nXE+RFL?0LO=)E`GuPdA{}3sq#4g0{zgo$^B{KcshbPzHSQ
zirnN+K)ot;3k|_>GCGy<_(kROliyC2|Le!!pnO5{Ek<Zb7I&(9=m)UNDsZFMD6I3I
zpS(d0X6ijRDeiJo=jSrM6}-FWQQX{N7|e>IugH%-&%X;)`GWMg^|ZgozOV<s%(y=z
z#$uIy37w3=R2S}<tUHvqE!U5}VO}lw^P9@cJp6OiBhGoYbJbWBGe?(Kr{vw`i&gp3
z9_3-Rv{GMr%25Yuj`j+E(cKSMuBf2aW8^QEYJ22Y_JSyBklQ#X!o*QbAcnan5F%8Y
zuZmknA1km=!IW|xjJ@cDG6GMqEz33$s}N=U>5YmA7%%0UtKmuZsB@f4fEo0b*`DZx
zzG{2LU!}d*OVlmzOi~Abh={%Annemf1wGz-@`JrQWm0Cq%l!DV`Cr;|{_p=9^Z$J^
z|L6Hn1Ksog6p9?RYJbuE&6xjN+P=a3&6xk@H!1JTf5m^+e3SA;$=@*PRr&CT3aiIt
zbH&LyWOLYzGrkf(<cuEtqbMovxw`pDL8iTt;y(ww*AL!vle>Dn`;(h^PxGHr#XnN_
zLI0CH_@DUC=lNN&s=qkR-%7EF=OU=A4>C(nK<ks!_2Vf_I!;u%5arM{R8l3ARN#^P
z{^)m|{F9pLQt>egIr0MKdaNfR&r12+ba_<0twmp>e7-85pDw?R@&#X`JlFqdzaU*6
z6?CgOs6M*WUj%=VDqoZ?-$r>kO8Khgi&gpJboqA5`@gvSQTDM)5uc9x<0nQHX6D*G
zFETW^XxoPuvzCyO3ososOiRX0TU>0eGY?v0Za=tX!><0zmXMa%<~P*?7G9BaJ$+Z3
zV{VU+Za2rwHygy<eZFDEq^vO_R>#lmXRDSy%ddxf!0}~OJlJDy%<^#A;*?ZI*$<m4
zC^X@rX|lyq^M#il{4N#~N!YtwWZC3@Ap)f6N(CJ;o4vM~6e!v^*k(*1Rbsp>cN?}{
zc{Qk$v&&Q4)AA|;{zD6%X5X$1_sb-J#6t`I-2HCdr<~7NzpA1x%wP;6*zsfx{na9V
zh?O>P(DDMFhR&NGA1SvOJi*R6{kVG@Hl@l%#M4OZBjT)YAU8yuv>yGj?)wvE3~SOX
zr*f&4%B%RvtbAH`<pa`{t8w~#{XOIZVj70cHM-ecvffM_+!EW~XTvjs7Vl~T7{~?V
z3#<jwL!Lt1OP+W3(gNPFR2q88eD-+-gnQt<u6L|rzCWQ#%CVx@`s%^v=*mUo*j;7o
z=0JtM5J2BGzaY96ELBm=7@=Z4&cTtVP}6;qrY)v6vBh`hhfJR2B*xL@UtcEAyjah;
zh`KZ_lKfs$V8Z6_ACczNnNLr7=}YT-^mFw|iqv=Ye77>kUT{UK<$<n^5x3sRDgSVx
zDs9U@kzU;VshYd<ON#tM$unPmB{Ta;?li0LYRFzjlOiqo*tp<X`H^UJc*B`rz%yTE
zoaA5Qg1=E2$5RVdyOk2~v5F6n?h;Ze`zaw%eXUyYl;o-WkyXK!ew5+~Bb#V)fwtiO
zIlZk(6Cox%FEx_~FI)?r<(IXnOPIDZK32uVri$^@z_om(gfc54AgHNgiljAG%<{CX
z$dpIuPsKFVnF`g-MnwUso{TS`5O9mZo&0NDa1Sj?Pg3Z?!_Q>8v54eUH{?^*iW>fU
zDvLRLw&tOdm2Q-#yD`k^#^dCXZq)JXbYqcKF|5gPFXVa~GAjxd{H3aW`otyT40-CP
z{ns7uifmFPc{4I)Jc|6q{>ImHf0W*T<@S)jH2Z7FUk&ek75R$>6rWs@B|91P13l%%
z7pdeMz#p$jZ6N)b^4%r7z6ShRUjly`KUD9?2PycE)>j=ZzZ})Sci;X-{Y$ssb9`nZ
zT{ECxZGU_kP5)>4_&<!#N#6|qFBqR^97*)6!T-~@z8L;Ae!lkj2*1Vhc!IWgl$<3G
zMmMBC?_>JtOGN7;=L3J{Hx$37ixuh9WwMUrkY!AY-{@xh7_YCIRb^W6kX9pdiFr7)
zhNJw4iV6~KapeT_^`%l5PCVxHLM9pPMNAC^>*x4_hbrF+1)FF8nT4YyxV5qm?n-06
zYHsJ~WnN-sJt9@0;-eK#J%CeLy`X@8nl0j@SbM*D829TT$@-m=`jWRZv$a(5$>3Av
zht8+&o+@W5Qx};pr}A@HOHY#*DVYVNbT_7gV!G=ew;n&>|Gjbz5<X?!m(Q_U2EXAZ
zT1}t%ppu6d7RdE0_ZH+TZb81v^SY_pbZ$dlw}IyaM6Fq0Fjf2bAP<}5VUsGhS{0l1
zshHla=g&{cC<Q;>M80+8b27iKGH-S=OTJlaBr_RjayzqgEx*mQ#ti<_)@&*er6lEh
zwn$;sVspAhZsaI{X4OkWeD4IZPHAkraee``q}5_u%#q;Cmw@fL7jlRoB<lhYZ>B`&
zHu)kiK6xPv?r7B=(PLqUtELWi_VKV07(U)8mA*oyfU#HltB^xJg`ACKQ^-+yUz5D=
zIC*>Erc?4~;^kFx{$Y>GIrA88ey%M+3!^tjp=E=>1%{783-xr$XeY?0dcHdKB0XQ-
zeRja|G*Ek{=2wC$A#@HN>m>(1drpaRLsn7Rrw+9NXHB0+7_E;&JS~_!KoJ+<Olzd}
zc4w%kfQIW1PbJ6ev<*>}Yag#Btha!xYah4E7g~_la))4Mb@@sBsY6ZEq|%V~F(d5|
zSresZ9+DOpE-00cl#<bxKa`@XnR1DDCD}TAR{n89nq@?2HsMrYP=O+~V^$)RDkI~9
zx-O&mQ3wucoefTdT4yW%LJPFotq$EmNUd-4KU;q)+KesA;9u{6k!r0VvD2mjayay7
z3o3H5<gYIa+&;L#?fkUYNt@C{Plc}NUP!y{HU3N&3S+*~A8FlvT<_q*CB_C-ks2E6
z<(uSU2r@dePEfekFV#0o)eN3ckE$Pxu2nS%rlf}n(r2zsSF<*=-PHK0!frVkB8A}|
ztv5?ChX9(T^#*tH&|CxW5Tt5K>twSo$dp*v^qleNd_~Yjb|L4^%}%0&KVCZFWOuG!
znZf_q$%MUa-Slns(H0+vkp>4<ja<;Kg&BCh`vhwL*#1+h-=BzQw7v~ybM^a=oG7~*
z-*=}>C8gPH_-++EH1WQ_`hCy*`6?yxey+EfU1P;(;b2?zFTf_}pe6O{8uS<Hr{#V)
z9=<~B>K^Pf8CDH$yg0~#RYgAtSqpq5$u4VD#QKA9a@=Xg2iLU~dURDS_VI`t-_jP>
z94CIYYPc{JO6Xa>{&h7cOlHB585;>UM7Kz}Ud7voc$UgCl7SD39xsd$>upssS4z?~
zwJydw3Zn1z)E6HmKmC6F|C{`jpOW8LtKx&NMOyyK^3(h4zF7X~K3|{#cO0m{RY|jD
znf>q9FXk)M$J*umgYyOVe1h_hXz5D9NB18fzL9*~=GNasKE4+CzIy+gzpVeql)qb*
zwD<-6KOv+4netnz`!zB(*nG(`mnU_;^m~B#M*UC0my&Ot@dv)I-v8IXxc_PRd&=jn
zh^$BH1HWkeQ|D7u;2>a;GoL@N@ANBu<`<rqyW2)NQj6bJ#7?zM@W($RwyQnR9<P(x
zS5luyX5)=@<)V;PF@z&xB*HRtjgi>SS;RW4cdT8Tcly-Wd4r-q!eP#?BeAXlm4h(C
z3xurEem!2+b-u{1^S;fj<?I$?sNmY@nsQSgl0Fwu=cuy3L)q8zn{NK6l&EHV$r^Qh
z%7Mj5_kaZ78=M1KWkbXYr4NcP%qaRO?FC9&?7+Kkmi1C<TKk+6#Z}gStdIMIU#-6P
z^HqI4>FvzdWY9DC7vuNU_s?CMzXpB%gUtWW`?EV<{ePSvJ@~_@uLJ*qO<xRudVYNE
z{TZ5@d_}#Ao(qma&tm7*P0v^%L<eb$d#g#3r?h-kQa(kGJ-+9B{`*n<=FC^V()f4t
z|AI{Zzjfo+82{701b^M@Ly!8erT(wTU-Di4Px;UB7u#Fu7mFOFpXE?wxv&V)(A(Es
zsH{AlgAqr+t<FOvzdxOyIiA~H=KGmt&}Yf{hvd)A%<u2c-x1De<CyuE%MdGgUdzn;
zW$^gB%lsy@%pzq(&yC2U__Qu_W)VlO1B9KV{UH)!A=&42)|<l;dj5xf2}SR?cpN{C
z^{Q0D)Ej`}m(=xm_?F*#zDzMVV@XA==j^xGKIdX_=5kxlGwrR*4T#b14NU1~d+-<i
z@(IGyP$OYbYhLTeW>jGx*CB*=hu_5qhZTJ7k@!4zjCc0B-|xVPtCS0;8S&Yr4txMA
zu&p!V_dY_C;*?z88x8#8XfqnbK{;UN+SWMN?~Y;3&(Ba+bEU+A^(Tf4tAZd6U#@~L
z_ZaZ~wYT6;;Ijq31Ar?n|3~<27rsl7t`&go0GMy@j&uW9a4Z0qR%8Nr)O<+8o3G%_
zKL)&qdZplP6L?2|Re0M{@a8)3vRd6$V2{WEx9C{l_Ui#|8omMrAJ@h{H{MsI;cFN8
z{ulIqC49E0;LCUMiHXHsMfPtl>c(fL!9;q%r;p9V=TYZz6PO@IwwfSP{c0mVeu_M-
zH{y#{LuW>>Me>(GYLfbv0PNsb<_t8+l##T(^vQ)vWt1s2jRgG6RN%3l3tLwD3?p@V
zVl9)Z?YAye^Qw&blY3?I72Yz}XMykWtgi*1gWsO;jr->Co#(=b|3d%;NGxiXZ$|5L
zWl}5GJV)U(eLh_2`1J(-!DZew{A&f1g0Po-rz;ld;t=$-qr0<T4GS`sd1NO?Fg{V|
z362&!$=i4*S-z^|KRC&ygH*D7RmpWKc}|%TKmVltr%4IPp*{`37m;Djnan9rnIw><
zqwO@0{mEY>ec7V|Ls*K_$H~9tWmqW9&2!~`diwl4qkmI8pYPuX(3G%vr+=vPtrcxj
z`5r@cP<jSjk|h7^H=X3oPI9{6%bnz6r-SlU<^GFGo>L0+BY~cZB!~JmOm$?=csf`r
z31m4@I+*8l@DZx8r%CbnZS77EFC3HEL!r0Q?*4q0`H)oP*^}PhCG8u|hqV=gq1)W~
z@B(i~&xc34=rhKcUva*Mj{)EL-yFX0yYShk%0rL&(4~KFJ_tVT&aVaUuhn$viO)D`
z-w>a-j?Kj94Bn2$r}6dRJEX{?CwzNJ`-bqnMXXF2Z+o3Q^uXscWyioL=4jRmnd|nW
zs^l`;nKbF?Z#v1Von-kc|LoaLa)C3K<f}@)QYFtRVxqL|QFBRhs88Ft;|;SYV=fg*
z0$E-qi@jQ<FRP=9E0f=$e1?CUqxqlO&&3D4d00rGLpa}hs8>iAPi}W9yA@#(;_rZE
z!nTKSJRxrUoVoe8QR%rU;%q3xekX(f%$LgJ*S5=DDXBTlWN)CU3?^jTDmGY(wO!g>
zIjqgypR4$H;xa-7y^HOcjDeguwsGw6#8Ih%`%Ys-MUfU8fGUIa63c=~1?(e>_2~=5
zH2Kkcyly1&7kR^<!GdjM^p@8}Jz_coQ;c|R5$cHNrb2926lmXCJvFS|xf1B_Tph+d
zT7}#oQj%OdDhSo7dmIFN5w8Ft@yK6b|Fc;TrEbmO34rFwBd&@=hUqH|bEz~EcsGn(
ze3bkoPP7ASjo@xACVsKPNV$5|UE@8`%RfR7UV*QOyExW<Qw$r2a5>Nrh*02S2M}l@
z;&Vko*o(oSvUHRSyZd`_+Zi7Y(x6oBU0u7LI*WAe!HV(G`;l)gg0}^1a}`%0bF{k$
zFuXnG<JcbG{C=j*1*P)3>w7U1xL%bumUL{>nG}<|qjl=nLJ8#a6&l`T*p!Z@tN$B%
z-Ik}M%TA~Mn9-@v^+<Jxu7m?0jq_ex)-_%(lh^*39)Y(4bQGvAhC9+s?RufBjbU?M
zk<4<{JN!LrHRnrzWaN^U(6mD2Y0!0n{Q<F>F)tb{RSAuRT^dogawU6{a?{x!<^P;L
zrnO))L{o<U%B38Hc+3NV#D?8wqW`b1B6-73>%M9Hn$O9bVLdlRe$3Tuj_dM{GZ)CW
z5evkHa%CS^f2`(Tb(3VY7gc6?q>E4axbGpRaoB%ICw9<~B6$_+(R|Z2dF3kcU+S6T
zEnH^tSe8770v|TUUg7})7w|Ac;YFVG4SVHEsKw*+@=hFe$rlQ|9}0dr`%+{*-pqC7
zW-?;MgmdT{wzH`SnQQxs7ZtrOuhfi5o)NJJ`5V0tJ1xm(zdc6*U2_`<OXdT)qenB7
zOX!kE5A4~n&0H5U9}_^BUZGR%4cq!Qmer}|g`KAE1Fls2Reh3Swx#E{GVL{(Jl|8E
z;%;D`DzCQ7(O|1<sChIZQ?)ogx~pU_A((m2F`J(kb(wgXz!D@<2<1x*FJ5z7PIa}J
z<-wiNV2FTg+%S#=ah6QjSjv=}AM46?EHnaVQFHpM89bKB%U#|0joxz8)`OqSZqS2A
zw7ajPZ3Wij6buF5uRK+`CJ@KQT+-y;3{fk&pjTuKueQ&H`gFq6FnbEPvn|dwg}*G8
z+er$_t=6nETO(J9_fi#l4jE66&pKis!g^EPblxlg26qyEm6mY?vqFxDm#cH*jDFN|
zUtGw?NFkO9nV}C92=v&Ie)I5~I3DvOX<Y!aX2F@Z+6!qc9_@5Idhsszm1sPQ(}t4u
zPJ?p(oqP#UWgb(>w=yd+q>>6%$*0fDD9QVeoJuN}sY)OOj~c+F#H)A5qhv3UX)@}+
z-mPEN9g>(pm3VoFy^b{ELmrpZg0T6H;k8R}Dug$M88X1gzuMwKx`o?BvsLH7$9|Ek
zW#vS*!%3o)hyRXDK1<aQX$@cq8sG1xDCYehK$U)Ffbt+o>>`}}_y;gI;g-tBjKpz=
z*dGvtl_iI`_7ffBa3a*u@emh2$M*=~_z0;H>jtGS$Q>6Sj=QRZ_A4KCbcN&dx-N>}
zem)etdt7|txkOlBoTbOQh{Umw>Lc-rBidr_w`}9?4mZ{M;-YgqzWRLkc(ui&j~IOu
z@`?9f@P1+EQQy1xuD)?jG<!+J><AN_8kb{P;oxdnVOSya9s)~UhBkU#I6iSO%H>VO
z=;LGwD=He`%KCOZk~)=0bmI@g@xKWIB66|nK*<{GJhPtw<~?Kt-y|fL*l-L*Mk!fO
zKW-n4%+%oJDKglT*yZngNVjr+p_>aI{;VsTfKeNxZ;iou-}#89i^s`<Ti><1mG`hY
z@!x`l%j9<Gc)SZdO03;*{H{(3-cF2C>K#BQ-UqG@oLl(E#eEN#TmFc-c8r;`P}(zd
z$ux057I&etLh&oW!X`2;SD9X~Fo!H;-s@(mF(RjM_Os#mB}a_d_D;!czHS8fYj^*E
z1{Fw7E9=TF-!E`4HpU!TqpHvQ1s%^No{An=Q+aWSQn6NUv94rh>hVjvXltRlF0nnY
zdb`KdHcIc$o%}U=^&0S9Rc`u?>MnZknL8-4yPry|PrRR}_Z{!kO~1t`%eDSh(LX3u
zzCrZ5k~O%yGY@b_(b%w?g)Q0^AHR1=0ks8Ib1m$74(~nM=w^g8VRblMLl)6rl#`r@
z%$t(8@y<q|zKMlpk@yhh!0Mv7Z%D|3N)zQ~B9R160Z2bsPnojH(=Ulv4)K*+y~}a8
zTD^@af%DpyymGTQW$<IyFXG+erbpsea4*{fJrClx@GWKG*kNzwdE;P^G5q>@^hptO
z%Q$m8u0?*1&n{T7#2}dZ)Ms5kxuO=YuI2BQbdAF#_F_mWd99FPpabMRs9SzOl6JvX
ztjjw$N3XvAL9U;Q`zXTiY>iiRCAQ^#SFp>3sP2LwJ@YQsfh5>D`yUeP68AfFSZ;y;
zc${}{@&MD`+!T-W^JeZZa8CiY&D$UHKoG%0(bnV)fH2poJ3gFcd&;O%+Oqr6oZdI|
zpfBl!ZWKJjcI46vu6M`@q1SuE@!=z_;~DxCN)I+jC6y<Si-$(~bSu}~RQ<m6BGH-$
zky^(mc3};C$Vo#yGmno1+h;$mTZDx2AwrBn1=?D#90cHvYvdx>>GK>_d+d)I!BzZ)
z!bR|Z4xtOAeOS&cPMNeoO<@%}h=^&A3%;q<{8*Fq-VdwBFt<Ldu_i|fc^hl;)Ncgi
zr)?3lJsiKxYpk=mxvAXl;o08P2~%hY$3wl~77bcWUn-I%Z5GB%#6x|pD(E3ha8shy
z*H|-BTJ)Nmm>qRBBNy=kHsn^VbJ+bx#On2Uf_OWCtYC}(u23>r*#sHK2cy}4!?ylo
zeC8NJjYL_NF7ij>Vcg|k<geo|p0#C}-WqMDn(L?rld$7d{f$ojm5PdeRWIa7<(|qN
z)(E0TXp1kP-d+7~^O?6vy{}5WZn0GLWpzR7cYs`0QXh){G;3+KAk&&t8i_wuDA7iB
zb0fZR!sdREtCshRkSh*0)u?C~d?z!6ZN!K5CKhb4Rf{bn4XLHZ>0%$TKZpd{;U{ue
zuAvflVeNGU)dkc@0B+u%B|7_4_#+6zzp)<M?j0SgStyNr*V&=Ea94CY6)r6NC1pZ&
zHO_D8TCE1>nhb7D;r;5vLiJn9SmlzgKzM);6p$a<)@o%76ssw$lB$=;T3m<ldq^4<
z(C;pnIp}ofPA2vN0vf=Kj;tUfUKmF=K^DE~jDi|ZLiLs3AuhI*Hrry`ys?@Z2j+cs
zdRO$r_-L<Q{h0`3bNe-Vxr)9`wG+SDTZg4lD>J92a29}x2d~Lu15(a*Y?WBJbe6Y;
zVSz0ee5|$>7FLo8)1(PlFU{HF&t9lXVgG@Blh|*~*&=35yxdtIACA<;W&5FHa^t>L
zBI;82e59>uRyKcU#K)H4YVwrYmP>I}Ss3f+B=L4rAjy8^hXM&+J{-|iD}RZXiB-2D
z<<$NKxAkCUK9|WvzEYRn%W|on1i6eVzs2%<eiMJRd;TqtlVoh}X`tx&&wy#|p8u1_
zYq^7}EjSyVtuHOg<L`1h=SkkjAHm13cxx$T=*l`nbw;O*S<P57lVWs*>dLx8GVD^E
z6lg&$7b@3YYL{F`$aREV(dUi$gNh&m&B?d;$gtn8hFt{5qz{Hj%6yd~peGL?>F7(P
zSGxFj@x(_TFqi_5@(3nSLBwXjI3n@?o+4-xQBTQ<ArtTKIfeF=20Uj}7T*3mY(ng`
z=B|-HZ!?;+_n*SwJJ;LiOO}a+6Y)e_SZ=n3U~Kd8u&--3Z}8&=HDWF-tfDZBt`Cp1
z$}p5+@4!N-i%55f>E*#D?e41q4o41h(SD77u+8i^Y7?Dter&FTA%(IRs;Q*o=yhMb
z0-um`PA}(z^vQax-CKz)-WCefKkltOj$H)1<j~NCii%kr#RovEw%}861RUq@d;tzN
zJ(0!ha#?eszQG+U@Fx(`ZrZ23i_qiN^}NnHC<Orgrbd!x?UgLEnj{U`bCxY5oqY{-
zq<Th<4l!2iIHU!J6|#h6r{z;xzzT0B2AVT>!@P4P*LMDh4c$z9tciKnuBqD8m-zqV
zsoLBRm<O0^&3;1=-nmb*C&~F1$$5pm%~f`5?@rZP#Aa{5)Fj4N9s8$hZ%Z9wXEt>w
zpV}m|n0vKgf%P{3U&r*CPBxiuVly@!vrB<X(x-mnRHRK6qr(<?*~}lB*0s0U=}vu@
z2UXi#AZc++QcBg_@*cnMP;fi7VbL{x2hTWWzm8U?lTI4d@ZkoIGs@b;<5BGg5HIs_
z;^SK71+i^y#`HBZDCE1T!-)T@zo3>o0N&Sd|M@^72<yGS!DalRzU%5P?g|CB&E7%w
zJ3Gn)uj|5oPc%0Pam5~E5||xOR&qU0EHsZrU_e5ZQu}(Mpv$u`PNCL1ekGQq^NXvg
z672l$#5w3kyE@>bEELR$$&vU2!dw`A)M!1fGUG2XY}zF_s}CX*QW<`_s9V^ik~2$V
z9p_Z`#RnElc>nAz2J>v3*&2z59-{eH*%0N*ByhY5n7d2X95od}mUv<Cv4t%>Bjnv4
z=2Fg{P;kqf-sN@ubc~OM?N>Jm?#ikEMV6@Z@Znb|JEdGM*82sP>L!`?8IvmG(UG6n
zL;Nb{8{`cK>!WN%#pD_px<L3Og9M|PAwh>eBo1xFe5z2LSeZ`bctS_x;ZQK<=nbR;
znN8uFFpg3r+E;Jl0WcM6g2~xC!|{I?=gT0x4<f{ym0WG{ES0W=t5*r&;p&&<&CY+~
zGsgR)*^kAZDy$+8E9@RM6tZo^$At@#<v^s>imP`=%voPIP&xyWLcs&G4<Hi|tnfSB
z=MPyEd?+f6_&;S_VY=8DHhRlTiFRJ4nA3WZtm6}4Cr$V*(`w};rS1d_&sd#qFPvfo
z58^J5G*vWyxmRBX*JXjmxlWJ@*k`4`j|G6nEZy-+AT2yhIei&JLbl4nDbXs!Y!n{@
zh*9__=%p=~1AkvCi;DO|7Qfb8oa)h3ZPNR$HybwW3K4k$Ulf53J@9hK98RR#EgRm4
zkowA|El-0?ZcScEJ4_mVX&F`NYRgU$r)B1qidtG8zr2&@*c)Uauj;GlDUA3$Z>Ual
zphj2<Hdp>!<zqmkP6fXHe3hzMx~|9eWlN>c%5(fS_JdD$l$+~nyQ0^J>W;^Iu6Xjj
z`$kBL$*M1{R|Q4EkXaR3YJV<Nr$%hM7K?&Q6dgI5*&HIcZOzSsTii9%0IIEY8<oE+
zCknH9(Cy9LxIlCDSTt6yJ-JT$RZ~Q2IbMm)P6DO4@YaqeF=V1tWoLS@+&rK#@E0&A
zFfihR{~(Zvi%*4GXDAS-YX?&_91mxy?>}P9D%d4!?nn!GIM=Uj6JjKEt~1`Le*GRa
zhGb9JnT(JjL%(Bg)Fr(Mm_(ZRC1lcaGL+cKY-bZ7dlW~Az+0iX=q9%wzo<)B_F?*l
z_d|WxBPqXDcY^MyZxFm?%w>pLR)~H@{N*IFs+)vaB?+5_x+KJyGAPcNE?1-Ze7$^@
zi_9U^F;01%w!<lA)27{h5zRw)5o-)PsjCVn!^jXZWJ2jG*05pvxQmsnrY0C57cyGC
z(Gonu$^L(oF<o)36ptck_>@R|;fUXztP}-aeZ@HxQ_2Es<S!v<_Uf+%*Ul~qtkum<
zw(T4CmG?cMZ`cWOg#rh;<T~#<HHGP{>OsidA6U0xm)^HyTyXQ8xipzu-JuwC?M%jv
zca+BLrm7nhBCaLPY*3Rf`B&5_(rXzVzvLwbby5cvvE8TvI-L4tP74^jWhM&VaTF8S
z6j;X$OSL-tUbBD56h<@0ucXkLBz<E4HDhR`aGH0mF?3EYPOjq<5BP%<3rlAYhS!dd
zwfEL)666!7U`T1j_;?%d6*Y=qtNE+oq&iesChU=lrcu!hb1k<%rD%kdvc&FeBYOge
z=o9=(QLLMd0R)PhFtW#1Tick;^<Ayji)SO`xZ=q4wTjc48<YD!k<n}@ho0Cz-^$oB
zR}?L_>*o68rBDid%AtfLLBZTv<1opC$(KNy`Yv-id8Xth5Vz>eGEN&VgzP0uGpQNc
zO^3o%xnI*PQfpdD{{rci@5dD0l~|kH!BFW-3s_F{<>1Ma{P<%@$QOxyxe}dsNCHZ_
z#u}g6LML~&Au4nc!UzX}j%F&-x1rn`^6)rwGdiQ+#czRpVUMQoVQumH<p1u)F_f=R
zM9AcY`&3=yJSeZ%rWIhi`LI$lidKv`;K?W@^rf=k=}P09oB{|U-pjr&fWdmK=0Uad
zI=_=jwR_GufH!|{7i|h3O6Kz#3T$rKBt>Ko8E9^K*}k@Q5E^d=DIp{D2XKx*_OSVp
zxL7vVr?v3nWw|0`STkAt&M=0~l-uaOxNomabf#!1u#NRyjtYn15^nAYrU^)z`vcv4
zQ(w1N5575v$iBAWZFBX-U8T8|ea{=;snuF=V_jU|32K77qwibP=7=<VMP?|VPVu`{
zL_;j}U5X%=m+)eL{O>OJRhQQf)2~;^>&Eo!_vE!H{W?Kjm!w}+=D+gFV2)t53CAaR
zF{E#LzR)wyyM^dv%>)tBEnn5ScvDk);Rvfp>@U<Jy3un)B^&>VH<8RQ*{}b=R~MvH
zLZgx3%UZ13%{ANWWXtN#c2KK5-N`oR8mVY@mXjsBM-~xxsA<j!GH^xwCq6W*wJ%ev
zBz{j@e5(%;H`dULvQqAlKp^nlJw*XqMNZGbW?lJdG*`l4%=Z)q!Q_U0tY7{zj<M_~
z{zdm=o$b;0STZ8!d-jP*rmh?ot))EYW4ZVt_J@WR78-$ua_^pa&YOzE57n~Sf51TS
z&boc}4Iy*49{aG5un)Q1Ug3oP3I%N46y{Q-n-$!_=;5JR=mF(p2K1;BqI;7kDe!9q
ze2>JKe=B*9tZ~lyGA?n=y+iS?X5#-oKC;O0HrhXWr$e1`X8Q`62-^gRaQ38J&h#7}
z7HH7T695AB>hBg5+`-1S3>grT?g>vh%CgukvMAwykp6%SP$i5RUWyCwYuTR?oy(TM
znIX6zA}z5B_RHFZ>RI@iWE>U>?2dRTiT`Z-X|jSse|V@kQzJ#n4HGsaw4Lv2D0H0R
zL+N;=^_34jn@5>2^dnjX&_mRi!GT{UB>)S)sX@Sj9m|$+W1r*>+E95U2wPX6!QT9j
z?naMpO4@1pYqz|Rj$h%PryHE77aP`@pFMpNj5i~qP^o#KsUjpp!aeZ<%*Oou&*@bK
z=PqYkb>jWYUI7OQTi4`QEt|;9Mr-n(OmJ&#2sKf$6?>LE>~wm__v`BQAJjZ7V<N`{
zrplv_xI8p_C*{zW9v8B#$&?#s-6T#xhJ~%MAaiVPC_Yjtcl5yP<y_cI*x5LpWQBWy
z7DHy26_XR#L@S|RmH>&a@WYX%oU?KwSX6GlQXW_<XEgbj#Bc8fbAhhP#ZenNhL&%4
z;|JA%xm}!;Z`g)TyK)MQBI>c0$w{sn`rk^8xR}Fu0vB_1A=I~Cuk(#CA5e$A56EFJ
zdKhH>T$;$SpSs*R<Gq{hAv?nyw|28l)gOISG$Q$|!$?Fz>8cyViet&`pda);zvS(z
zB@TLP#HE{V%{5B)vV#aN5<OI9A7lFNY3Py+YsqHbajDI{*2}Cq1+i5nYlH-l$gZp6
zDH2G8f{k<fT8k<r-MdbyZiX%rjECcM#}m(m7@@^r7uB?o5~M*4m3(uhKw@M+E}AkU
z{$ehwe*5Mn1KFuno+(?t?x+A-?QY2vdr6}4xuH#!iGVY|n`-@(C5Kc~D%D(g>%erC
zXEhG=v^*nxLN=tstOsONBk?B{(l_jJNW)wmG7q(!=I{r7!!E;oQs7si2T>6PJ`-Pj
z4R8>|>AP>ICF`Gpi~uJeyRfNq>S|>-7wX%=LR6RcBQvH3FQx|XX||V;Opd)DtjqEI
z{U0)PB(yvLDeKmq1~RC^c=j@dj_M|l^yB^8I@M%I9%g=~^*Orvx|s->J41m(8+MwC
zv~e}~PwAHmDu!AMY-=@s;HA~vNc=GYP$)HrjeppDS4cH~oQVcT<Zj)H3#_{JdjU4^
zGS&u>;74Jt;=OQoTuR1A=Cd_4UzA*_L(Gi*JM^5_r;d|qkraX}qpkXg7nOm+_rl(-
z;lO**{}GDJp}!p5v<Ok=CuhJSQ&ovC(ajSCF_o_+M}5#ieCb_-GW=`0hB}UqF7SnJ
z7Qd%U>Vd|tzg6M@srMpC)h=Gl$XmDNSFN~;SJ=l)fqC&WqV6lJ!K3c+yt4-{us?lU
z#KYV0y}t_AC<Qp7FosSl#^pm9i;o;lj2Vxi2F1)V(y<W>WNK)k22&-f#cidKTy>Lb
zxM}4;FsuS|?ZIOzgIqI_HOR0g0PC`{IQ87!Obv}n^XRn~{97nJdK!kCd;=&5cG)x@
z?f5()URA`tnOYUtzm(3n=f_TepM0FmpkWG?+Di#QE^d@dRIOU=7KXkl_Gov_%~JCZ
zq-Jt`hgy@1)9Yd50>KW>gPk__{_Be%`)F=AWSbfU(cOq|;@!QEo<hmLBnvhuxFJ!K
z7DHj8Q#2=!+kslkdGzy$eSEK9uf@D8w#Qg89xjdr*-4LV5qmGkPFYOm2j52mzXRk~
z40U$9#>?31yd&>unHLqw*!F4{R0XaoESBUB`GcNw#+&?)&TvMP7MNIApamdCEkK-`
zt!Im;<eBUe*Ao|2n<?eAnPh1yE2AR$CRqoTk<4L3Q<<Ss&GB=asvhK#F-DPJB`OE`
z$78ee<Y}rBC5HSX(RQ9lY)d~0pz^P&N+y~7BO^9NsYf9=`A4b@virEieQc_#Pe0{@
zHTl<6b&~r;nbPh@!+o4;)@>u3HZWfsIG#=!1=_%>X;i~c5qX5gu2kc(QH@8Dibo-6
z-?qs?JIvg@RiW_8AC$2(*xb!n*^N`{EElH^@^F~Do%))}iUdYbiQoY$O``yGmN{vD
z!7$C^(@@$EtXJ)qt`H+^8U9CUKa(B?{K^F=gAU$s4B4F#2Qu#U&v;c0HxG^7;O#k6
zfyWp-@Bt0#Lr4Hm-j7SeOM!_IA-H=}S*gI6f-^Pz{7!b$r#Zjf1Yp*Qix}{)bcw2P
zRXr(gK5>Ji9?e<B+Q3Juc;;u3^Yf_sk%1A4D*zw(SQC8Q^7_&EkO7K!&yNAWB0+lo
z4e;^KurJ0(yEH8L;NSmm@F7m%;=Nvc^)%0le8vg-==JEEPWL%j;KG7T?B4Wh>FI#&
z46WI~A-lPW(^mpj-1~ngfpvn!jYdh)EIcan{<mY#+UvzvsK3Ci-}qep|2LHS3y)p@
z_tW(YpnsyG%%=27%Fl6nZ(O~{V6%&)JjA_M`MbhW5-|U^|Be{W`I4nPl4%ddgtWLa
zFi%@rK+EDn>!SI%96po2aeyGD(swSk+D8XaN%c!od4|+9b&)!k6Pv0D)Xw=-d)B-a
zP76}?zpOd)pLc5y9Khh`F_C>H!z3DGe-+|ogU&mZsxwEar$6<iUUaj`KKysyePrb$
zOQ#w86Xom=Nv&G;q*M_d5L+f`Cu<8v3;&D{ZhwqRdvFD_p2LxCE;|$>gl3*2@yaYT
zSZ}&^UP^yL)#CBqzK>eX1_GLN)jjBw%;Dg^=)39eXbZNp&ZYV@bi#a;rgy)lmcG{d
z2#O3TV#F5~?%-FfZi^#kv;3BI%kQY|L;{F~9xO(_SsiT^fp&N#em$Wl>PtQa;6?OF
z{)s8?cy)bVj{PMy5_i5TK`TRM`Z|vxtDoBVHu&TW#~l5c*aDQBFNeIV^$j}+O&jtO
zX`?uHs4M!0$k#Z%K@(TqSw;KwA4!Wd2BnIsZW0#&;bmU;pM>!!gX_!rM8_bl<}wsu
zsGocU)vd3zv4>DP)X`RGVR78>jvg9XIDWJlSy;SO6lH|E+^`KjqqdmS^@R&bLBQAJ
zIp{mqps68t?aQ$)zZToim$FZrd|K^7d?v7yxUcU2qwQPZqpGg;XGnlSqbDe6+M-5{
zZ6eerikcXx88RVfWKa}TYPIEB{}igXAk0WAs1wc%$?-VKEl{-8mRoDDRa>nfpaBW5
z3~Ge{KG14KZ0$KlA^3oRNdDiq_L<2{ND#fhJN(Fb?Z;Ycuf6u#d#}Bg56^wV4U^4K
z`Qf&xxz`dmdWyfi;z7>4dAn`StW*B=jKhUm?7LWnMpZ_O4>3BkKP|y-xV2y<>cLlj
zYF+z*&y*M1a)4tz240h8F>}EZ+%gQ^-=I-jW9p0pDEc%Mtw1o=`phwK4ahj4Zrx09
zIsmuC7okc31snbl<pmaZu=+5d9m_l`nz47Vu-Um4MZ?FCZu%}WLmnKetMUbnogJZ)
zW^V_sMu$(E+XxoKeHjuSFp|D8W}dGiIpbqzI^M7J;n&4LU^7hEn^z9NkL>gmnh;yQ
z&0trTw{Tqo<oW!Rdu?{Ft?qTFdu?~G5ayCTUkXF%{qakeN~y=vO5JOfdmZOqC%M<@
z?lp=lVbrA<7NwhjN!|ibT`(e6eEle1uk4GT!0+ZvSN#-T@Iy1MN?Lfo(QNEIY&2sg
zOPN6_0V_HfCb652<DW_VGo87jKu=9-GCG*MWnqAOWp@#=<KBfi89QqoT&&DT)K4sM
zVl{HKUa=*z*EE_@%2;z3!tlW0!IQ|t*1@{mk^|;FOG#e8bs1KoZZA&c`n_A8rJX{_
zUUTF2f0<7#y&n(U0nm-Z`H^JO*nwwH6!seYqcvQEi2*H&3u?;#uFegZuhZDBFqBv-
z4RZ#PVcQMdhPebHX8j;{Ok%|8B@RP8LJOt9+iq`vPnMAUrXMo#O?&eT2N9Wv%SW7G
z1-*X{N+_f+j*qOMQEnm3HOF$+g*Aa7HfYqpAe=RJ2A?hTs(*T70XG-hPE%saTvg4-
zkoWZ<Hbp}fTeKJzNc8jz;J(>5KeGZ)jDuw-R)x*b6XT4-17^J>zD5M8lD+!&o%;5F
z(O+I7uh=-;|F#p%a`P95+Ww-N25Se@RFZlLCZM-88}H|b^E6Hs;8eb1ZMae07eWKV
zKK<HAyE7AGgxl=F1lHZyIvu^Verl4G(f)v2Hh+vjj0~_TvKxEfMH9xF?~w&=;gVN#
zmOY=C!z6~^s#hc<ADc@H(Z=Tfm6UnuIe13#UwWI!y9jg?1~N)fmfsqKS?BBm)R1Bz
zES_T{2^%;I4Ifg-Oqy;+HY5!k<rN+(Ypy@6*k~Z4MuZYgh`xaV_HAtTAjqcjv+wc`
z#2NUf6_$cvpHoZT;2I>jj`5nnKG^H#QlyE@@X=u3n<W3>Gff@yLphA!M^gdg^Zt=%
zU{R@qc@m47QCV4M+gThhsv1}2@R_5D7regCTi;oTpIYt3k~Wy+J*;P8+=#hsf>9#|
zKIuDay^M~2E^?sTfKh_mcZR&Jm!Xpx2nUfj*({%I{^D@k!<^@XPqd$J5jL5=cBk>a
zFFXjlN2HDqjG@VS0WJlqcbHYYR@Fg{+3oxXwF*mIz3SG|MpTASz?$(g)hZa2>826I
zJ6c3nv}*?Ux}i+twd4T1I2#akM1XW2#x@noV0zuMR8gBX<3q`Vef3mP7eO`9jAimV
z!>_H!c@srp8|n!ZP-7k#$%4XX%dWLLC4gla>;SCF;RubD*TWkRVr3Xh;+BZJ06P9K
z>?f@FQ<10aBM1uS=g4m+Q><>yt}_oCo&9G8o!{dl<_j71mz#Sr#E4^E9LES8Z*iE!
zh!rs94t*o9JaK1-$uh*nE(*HsKT{raUDvvQPPx_{PJ8nY2ls(q)At-egySy=k0iu|
z+L&E&TO6;*FRnk`HL}Uc-FHBPC0PO@@<vX<U@gmDYY#Mb-UUlUp#_3yv|v}!c)!1Y
zyW>5K$C-6-f#L#gbRa(KHWVS}iW=|9Z3jyQc&3681eN|rG7f`It2MlZovv<5;0t&K
zqt`P~1h(SQ07d_W5@7gK#F9RF4BveC#t$5mK7rNd3s}Z;-Bvu}-?uh5JizK__7?+4
zJobSUTanjqvY7{C&E`J-=(~t*1oHN4%<He(^0LITK`cB~ChWxQ&h;?fH=CVvz$LDJ
zYaBR9Yd9C+83%Br<Tn5!k^6ET=!Q@=`G{klSc7|XXpE-s*!TUBIz0NX4<@!b-nD*6
z>$x9&LJj1F0IYFks)2o#5(l+P?c87}@F)CS8}y-=LQ0!J#a38mw(y7<rbO%PI)Fv;
z71B-x=>ymuhECGA^nZ$AZ!&6Abz;~+Cjm-xljlxUXWH0gBf&f}y+9-8?g6Te0NGIs
zVZtSDZ**eNkzA(I;%r8&K1FdMOty7$AMPyspr^%_^PB7FIlGIViH?~rVhNMEZl6QQ
z&a9%6W-w<)2lqMaKLgA@D4>U&Lm+jkdWb-*jUv7{LBI`VqEkQ-;KBzo*f;azm^yre
zL3F$G28v37s3e5bj$I6w?N_3)I-M}mxG&Hv#Eqm=g?IKD+fMF&zFftRl+Bd-4;w*K
zObv70sUd7F@uI9by5<Xv(4O!))_okRb!+iXUJ`>Y)6K=LxQ(vSu|<mo(A}81S+#@6
zFVQt`Gm{oS2`z)|d>?`{eh;bOQQi76TKD>*amr{jVBH1F{%Z?l0}6Z8I1|!`_k|&A
zS}6>kAU(hnW6eVpB-Rxp1|TfuWnSI;>IH%O>U8UhV(7v+vSbdauQtPrJZ{{1Kc*^L
z?B@W1$2%tDYQ9mjS1eb4z=usCY@U>~z)bw|MDF*4+NgGzcaFtALCJc*6@JD81GFLE
z99=%7PvjYW{|=}yoW2Awp8@}d5I-emp%hGChIneq3&KvYq!k95nh^*6xu1}a>TApv
z95mnnV(N#u8IkWy#%HCMU?Qx|I|F6tmKHz^$bdBsgW_GK+H$Y9{K`Hx=HAN^!#@H6
zp?=uFJeaut;@kn4UtEb%0Q+*m#E^>_z#b=|E(k0J9j+xE^hEAl3)_69@Y>`rLH}&=
zYt?(XSA-ChbLXQaa4xE*?4M;H5y*lh%LfDiP2IwE6UJDWbVIL%#~1hl37CMba#o%e
z`vFHAYX#eTa=<)~A;w~x2_N*E&avj&;8rJSboABc`H^BQf<Q|fW1AvmZVj1l>T8`o
z%6}AWGD*o^R2gmBRTx~S;UEmd{;Vs+Jq<Xqk2n=8f8vO8E1qG*`5$mnQuQ&%;1~V-
z*5!mR2pYQ%jY;I4bXj7;ulfWNxmJMIerr(_<7G9&WuST0A%yZd#GAt*>;nJ8YS;m2
zM^y&?plh)LV3^|de5--Ho(L3sO}TS<JaW3x5CR)}+Xf33+KQ7Bfq`xs*)LGNCesLn
zgsb1c&Xut=;>uqkQUJCCI{LtfvX3CxO3{h14+bj-b^{!axt`JT5F)f~D9^t_x5oA>
zO!Mx{wXT6yj%UB|0hqlE`5-w9HRC(D!^uFLVF|)yvg8%ov6I&~UX~bfB1G?gaCt==
zCN-ni!+3W;O#Uzr$FBW|3V(S=cnJQ?SWJB$(itM!JlR}toznJe!Poje7g^>M4F?>)
ziViLIIDj>iFbmABs435_41XV?8A~-IhS${eiv7liJfmC+9k9lnlq)rH3Q^4JpsHdg
z8V~f2A4L{g0fl(%#@BXE*P=)Ut3VT3J_ukAs?_2(B@2g>=7<gX7-G#cip*rDex1h5
z`8NCBd>oxDo%sQgE9Q_hoZt~0oV5$U@H26<Pri}NRXFjClN@+ops)R+Pr&?1t`H??
ze&{!G{LhCCUo*$q#O<<ld^V<Ld4*!D3FxS@LKjAFLUB6U4Mo9kk1C|{$9XW-M*(a`
zpS|WD9+1bKvjFde-twXBBYWAs?kDUPSq;(&&3xx_thc!G#PLFZ1>Fb$?%tq5sBGb*
z2i*vh=GWM<F^c1@lVNW`FpKq}h#x693K59Ag3oysV~c9{#XfL74IbYFXx5MOFHcOk
zw_jq6cjy(qimh7hi*T-g$tY_AlyK`}ux<cmCXlQrmTenb@<zzJxow~er=kd^UU}N`
z>(B2TRepV+&M@q*vDD<;C0Gj|=!t9kl)WIm!zp8pXkX{Qfv$bsOIiDM*JhkF{>(jT
zj2$_5@VOE!;y3qowU04-5Crcvcpb2Ql4s5KSu@dI-@>*wcF(}19U*IcamfLQtqLeH
zgPzuEU#=<HQS!2PQy?+56a6&ribQCr*Q~~PwIihzXYePE?Q6@Y^r=aVfaDjk<6Zl{
zZ@_MCdGQ6|$Lq8e`~23hr)$g+Pn$nGgvfJ|&E73z5`m#!v_qb5=9sg6{)$6djP|Ke
zcj7#|Rbze@@IFqd!`0&~8G=4`c0jCr#{iA$QmELuG&h`3gfSF$02{nx%`F%{{4k3g
z(25U(iY^E&z;H2M4V!aeON;*>Q{Y?GBgR?PL&n)Y3--sDGltBw12E;AcwL}!W?uM0
z<0A+ePLHkGgN)8Tvtm>Uhk#|<{?$cauEKugwfo|=GXiOu#x{`#0-I8w&pYt!oPm!x
zFYdn<yS;Fa5K4U4|7*Arb<d<G)-*$0nr~p--~xQIwu8a}-rc4{D9bIq6&|QxOaHCP
zS0R+9DlS4}lM@$7lQf=6-7@*X#N8{?$&*F^1m!PaH5K6ar?p@LUL+0P^JhIi4$sb$
zxP@GgHoe7~VFv|iZf@09#9kVPgaK{EvX{=ojcG79qQyhpn(Hhn94FH^Arodu7>uH(
z#R~n#A@JX05YT=&5cmQvFfRK|5q9|5x|2<)czKYW7QGvLpY0@<mh8o7H66BCLkt|E
z-M$;APXiZ1N!N{-Ac}KL0q?^Ens#jl%Yicn;TubEsc+&y_OJZ|uqf1qy8xuNu?siR
zCehj=r=u5C%!c;=GF~cQK^0Ae73abvnTvS|fChC*75><g&x<y?fZ|A7(PuI@q8}#E
z+KQV-9S$W%!BqHR4zSu>9>TX42oGC1SduE+C+jzQ2~--)jbk}<HVaIDGaQ&G2SZ>G
z%@j{OD?xKm=kXEvrU*#iv%*j2ejyX>ytNe*>foK&T)3VsQ?hk3?$|VnblX2*w;1e!
z){1j!IakXH@4}PmTh<H1>J@o)NM4NO5ImUg2XK%KCcG6JW<Dgg3@S#a!0f~UO{(jU
z(pH47J3J;4{??%iOQE_J(5eQ-iQ~~$>=Tv>cNe;K0eWY@6tV$t^Qg+$C-gKlbKodb
z-Ax{4KJf`jfM|tUTmvn!3>QS_gx3Qt7Do%zf8oL0U5ovK_Zdw)m92v&8OjNUB~5~6
z_+}_^RUav9JjjVNB0nKjF;7l$s6`I-uR=vG!(-k9Zml;LkONeou$ol69j{X`9>&oR
zBi2N76{w;I)_9^AgSe8S_i?7D$0LHW1XDE^6vZ83Q*j3V4j+|bzd^7rfgPO|n+njF
ztpqEVZpEq#{zZm`7(hgoj=$n>GiR8a{a8-(21?%76S2=pV4mvp9>$bfC<+U7y#$^~
zec|(x+&0(Hnpnqa4_^o|q)N&V+8MX$)cMIOEPWv(oF{+aH~*%sn33zUS|`?E+g+}*
z!BwCX`lGgdRSvmHm^I){`epOH?ffkFBpEgJd`qs=mM;|kOn~edO1%dw7rsOkXP#=R
zo5|)AB7G*CO88WReQ)<yybxJiLtig1pcNFTX0l|j3+QeD8iwG=yBzF)JOM4)f-@hm
z^6dle4`0?ta+F{J$IXF-5Zd>j06~=(Oy%)zkvNBb(-AWpaQ{Mq#FUmY9lTH=W$Iu(
zW7_jutR$N4=Iba%`Yy_s-i&S?lNXcCd*lUN(so9+fsr0|#qd&g^?>;>#W0*CIKKcF
z8OBNqQm;tG7K7prT2R&yS_9mx4!gXl#mK<UUHFs2(EI=>tr8qZQ|Pl6HInrLe@6|*
z0P}M|rT|9n6b65AF;FNWI5;|HWHYEAIKPkgW!iAM=x8fmRRqNg!E5bKOzH%+0j&@f
z0*-<it}|(6OKWsujeR*7#~$)(@zK!SL|j2KKFjXyOvDNb##?ir{~CSjz7XEg5yThn
z-2Z+g(Q{VNSrc^d+^l7QMtm!4w&n$p$83<X#`>d<hv*s^8zOz}KRk?13yW0_0Xrc8
zgNZmL#Ms1Y4!N916vMQSlVE%)KZ#$SsRI-8RRLciRWR}A`;mvQFe{jYnamlOGd#lK
z3yWd?HE2tZ{Su-i`>i;o)5vk7afbdh{~GR`jGXu_Jm7Fy=g3x+>(>@1q4XepBqqPq
zsq<lWi4|sSL!gl5VQSN`4Z}+vA<L<AKU>J+AH)}bbhSe3_z+Ku?y-}<2QRJnR$O0%
zjYT=HgS^E-Yms1(xD#siUb;`#%~SC5DdIp$`Kxl&g(8B9MT_L!=K8hVP!N6Pk>^jx
ztv?wr2PV92`=+d4@^JD8UcdPa-`5}J9%{I6^b$|_Ur0Lw?+7MJT!9jsc;9wLW?#e6
z4VC{PrloHK$!v26xm4|I?8gzb^iEbO@2b@P#y}i5wvYb}_l<V(c+npF@UJ0Bz!AXW
z->5Sew>ZYO63wT=pV<F7^AHv`VRZ9{*bpL9g-X#}>>^6aLgS<}jfI1mH?}Q&vcFOi
z%{VSGomeu1zj0yTvv8&CgFpR~BQKKZ>i`G<hMm-&f70zzoF$koV(Fq50;WKxoP@;y
zE)Yz`VNjmGoW|3mIEx8GD(qx_dJF%~WY7r-b@3^_On=#j&$kp!!n;@TVfx?kd?QY4
z;s~hr>Ggasujv0@`xMa+kQS6vX|af)-H3D&!vR&&p+EDf#A44SnVC-o{csZ#zG*jM
zr(c#ZRC0KGKq>~?nE49pLXxgPAux54cmlwY_~8_}Ix(&ua@E6~Yefml5JjYQUsB4i
zJvk^wih8#SP2a~1sxFcHDjEleDey2o5g0cR*RVfl5nCZK=qhikw;gt~?(xvHbq7N8
z)o-AD$e4P#-Pi51PCMj}-Mso_kJ%0neJfPY{u~F_DQ5JX28tDHzQ~WoqHISgKGe#J
zY}j%~S9YCA1K7(nun2A7XxJu=#_rr`*e{K)!vAsjKMDV*YXj#+0g~k7CU7dB5B&n!
z3)H1pUCPx(SC@(EG6ffA&)i6EXq1=T_K_Rr<E`3824HTsRE78B85KT?OP4rY^joFN
zoJJK0I?ZSIcXs~JXwF%$3~~JCD_0|EVGuT)Q$G?CVZ<;IKm5adJ?BXw*5Xgmk6PlR
zKqikp8iSeNY*q@r87CdFsX-YSuzo}N7_el17;QSl-WNW>Uw^=ZMB2O!_-id7$<<L?
ztPo>@uudDjE)iN=T(T~*+h4J%B~GyfwY_$&wjl1uJ;#vS`oTo~u36^<Oes5naO9>`
zh9R`e3zoZXQ=1rcQGkM5H+TDCvVs-Ctz)NdBW?jK@Z^Sa77#7ng2#l!?GW!<$6^5%
zGBarQp|G^#6qb64D<XsDTs|vF8G!w_`3^Uy@*w!}dMgfT%;k+0CmZ2`7kdc?xB%8(
za%BMtE=icgkJ*@HDrq%3F4g9p2c^z9cqtcu^0aw{c;fnU9-QFdq$|%Zp-BX6-Gvy=
zf~<r92e_4#zgr&7tpq#;u>w_r<%h!vKx~OWQU#n}jh;f9646KOy-+g*(j52zQ*c)_
zYrmAX@K-dWHJY6$P?9cA?jQ}WrwKl`D@f~H8;e3x1Tf|Y;Dp01EQ4&5D&q^(lj#pi
zIU^MI`>>1sz<b3m??qP&J81C+^7Lx*117$6F~QK5e=O%N?ZL3Zimn#s)Z!fQjHV87
zo_E%O6bt4{Lg@Bn|9Kd+#Yb4m91LsF_EuO^Sq6u>=kOnte<$%&C-Ajb$_I{L=?~L8
z?cd8=N-A-)z~s{p+4rR1!iwme$@52P%a@(a!6fAojB6nFWTXmIKFrKB-hK{zh~0~&
zl#*C9;Amz?Fwj{G2n($BDSAQ)gCF#S#bj7XB^nyAwiXaDn7OmxcTXkAI;ad==G1$z
zg-TuLxk8W-W#G7reLQNy#-?l#hRpZv&mZ6<sfp7tcTScV)DYrv>VKdfo+>K{nulZ?
zo%#Xv)nQoRS#e8IA3vsoQM5^H2NLqcT4LnkyNl39x&5&myDaAy05FIX)rt93BE%!x
zuhE79E4DyjGmDD+$|)e0p0Ehg3=jfv*@wf~=7zR1rRApl^nH=?)3*ktX8Gy+kh^ky
zF`dSqrMA3DdFeYKyQAEc3s?*0OTjxs)^8edhdp?6+kg%%i&i)0o@~n3$_3)2@0Vx}
zCb2InQb!jaedZue5wb?H%i#KYqJb&cWdqiem>_{fID}_C!oDu&_7Sixb37D*7ck!w
zc7#q-Q?a2&8@-`yUrosd?9fzc3tP_SL6_<$F+bktI<nhi567dink4BztJGRV6tv~5
ziJWddLkM8YiNUq1al|QRoL?*BL_v!g04W(~MuIKTyrl2$X^As8{8RshB4?j`0X+L(
z!<wMI5ic?0k0p>IWZl8$Ec<(~B-uuvo*C$T=`HOp;5%Sut%4cqz=$)B3Nf7wjVQ7=
zoTVs!(K6V}t1@P+qW)d-8GQ!Em!V_AIzv{qU3n@}3}ZoYhFUNm>+Lwuz1!>%dYhPH
z?yWI*)|Bkuz6+KCV6>1`R0IV#U@Cq)bKUk`16msmMOmW&)Wg=>@O)v{zk?ds?93;B
zEB^GaBvsMLbMyTr8{57+U-4&6$>Co4^CKy0KC)rDt1VyPGH4ClZe3+9Wz*FVFJU~G
zILf)2H_^0mu0~o`d5~O`V$KK7RHQn7DVS5>ac;vfqWX*9d~qc>5q0g|zB2%CE-4q1
z>u^#gP}1Hg^_wtyf$bF+_@v*Cju&}KoYazn^x(uW9fVjmlww9O_y<ZghZT*omOW0H
zqH1=@Vt$t0Uwfy=c14aF3IdWt2p=dpKyr+Cy=v|bVP_feZHG8JIG`Op6(__hvU=+M
zDPr7HsEBd+uW4fZLJ=bdcmeSicO2Mj?j{R>6Rcqw3~=Vh8SS6wd)lla(*DJQ@+K4j
zn`Rv^T|`F>9rkF3|IjbRa~?_%`H_ujPzfbJr+#k3@6yfJ0s~sH)Yh1LswsR?xm2Xm
z!W6Dc&LFPgm@^Q_ruM5|6r%?=_xot=-QF{IZ-0M4yJBe7<f^eT4&{a_Zo=`7csaB=
zb|kpmTu_JRwU*)}8UzZ~Qy;_f!$TO<)AJ`v@}V4%K#*`#z*_Y<Ww-S>`KPS}_JkJi
z{3W|x{$I`hk?BTt4>Qiqq(KRm(00%Gxgr6qgwiB<S4aS>*CR;qK#Bwpoh~FWofDrT
z393A3OeY{pifV6mZ+3Ia0cR*MIf70kgiEWynTNZGW!mT-idHV2^0AoVY?s14=AfeL
z#Bdy(u`hux!F>!$9?+~B;d{JY63F=$KXaT|EhEW?rwM<?rh?|q51vf7o6<(uQ%U#H
zf1*s5(Yq2FI}J6zRMPgG;8~aldxYiBy(fq52Bu$VP)f+`R)Ri8-t4`Cto-czlAo(1
z?(DcQ@>W_!5gkKTH2f=BFItH;!7XRV#PYkVqKFD&um8!RPFdm*2Q>STl!dB%_8;-l
zxdxP*KOS1G`LQ)?h;F_F)9*ri%%nq|I0>2ZXN^#({DOE;17YZaq)1d?w%EgORLOWg
zV*Vd^UZn2}51-{35BEYazuW}iOOvTcJ)iU3gq+4z=h?8WQ;b#y0^H##hxp)avZ2bo
z!%KQCalcRMx}A<&{*n!K_^ZCxMtM!vHmVD!t(>0ifD+8*58QU(78jma#H9ci`;^E)
zXkQP49g@Z*h(`X5j?OTavm!Sn<pWv8GVaHPA1=g)VThECM}EMzh)8|hCaZ_wFUsMG
zDt`N+_z5;T2Hf_B%D|Rtd)e(5h{t-{qpAj4;<i1=PL;u0-2Pf)qbU3L2Tla9;!qnV
zS@t48&7EmXNW|}QdjC1?XuJR`c*9&n9vIO;D{5)rF-5vhY6V>Oj62+;ckxXrEE20b
z_@(Yr7|148ORDQF95uA!L<TxLO!Xtf+h((WA##nV);IqfiBrK5tl1Oo>(q;hz{V4(
ze1th?27^=IQb$f7BAueE<v?)wIjgA{8V}6$pMnr7#H|jEc<N09K|X%q52WP>{@U)Q
z{X?83=v-&y_J}@pVuzIMU9VT{&|+ueU1r~<(_O2n6`Z2iw=tpp-22@C{u5qUOL+zs
zcnH{#m^drRH~gWi$a&$lGf0*uIrKZ&k381>1pWo4<(-?BM<wk=Dy^J^bgGbcK`GO2
zV_M$1X?axBo~qJL;r(i+72Gk<<hew#``?I~D};1f{9LelaO$$6`M^mq$2kNY(I@P^
zJHa4HA&(SK_DGwdM6d&rTKHaHwy*64`=lqZkFMe!`EV*;;vE&Z@s50%@s7Mpc%(?;
z9WBRgx<99SF+#TJ#v0-Oa9?{idY83;ok(Gu>Q12CbiA}@-zrqRpZ8mY(VFB;>re3B
zg4%_A&7>0VTq+48R;zr%po^JLorJdA{>l5<rS>k~z!$%CmW}U#7RCmJM<ze`ueo|W
zgC{Y%lMmQx;t2jn=%Z@<g4`PTJHZ!j*CpQ1Iy|Ov4w{D*+Bw?5>UP~|dX!)SZQ2-G
z3&`vWZQi-ylLB^Zx}e?2`yJnx`vTtIg7?bPfI|DJF0@GjJEZd2ykEk6R?|4%fBGKp
zXBXOSxM64>L3{H*PJ}{<(U1s5S--+JU+~TE8Q(L1o5EM(2W`XSk@!~Q&}20tA~Xqr
zKzIT67pw(5s-+O-9e-%&DMW0+G(mDc@Bckg?hAQ88}D)c1vn^#g>O_o$|3uQDqlPA
zpJYC(X(I1)6vD;!!Ce^$zx{R^VOReadyr7#$yQ`aSrZr^PO%!6;03MF)xrdKBzzDe
zfpr-^uWu@vIM)1I$h>a{AjPP&6Bqu>hE2FjHvG+fM(iOJ2C?PmLUl<U1*sPEV%tMo
z(OUl^ax~(_73*{?uTD%aqiXS6A>zT6Q@Yd@bVU~NtDlQ3UJHx9M3b=iaG(xh`y>t!
z{@2e=gM1<vB@L2@KUjhb2-y008Xxq8!Olg4Kp7wk?0}T0#czhRkW%l*cl#eB1l0J|
zc#D!RM#)Ko&E=NKO3=pACgD>p8N({7hiI{v_yLO2Lr}>A)>3jee6U~^H*-jpws>Q3
zY70eCRpa9n?4d**7Wg{ts!z}f6FTloLtbo-yf~J&nAI5nGVDc?qspc7`gJ1Al5^W3
z*W^ud?n=lK-X`ZZr|&kU?@C>rAvyPc_fCf!xWDKyHV2ik5!802;)#sm^h<B)Uq4XU
zL<BWs3t0xn<G5(c1-0PRB*6^9YirQ_Q2~z2hhHwk2G8>%$+z61$opetkhdb!r&g-B
zK`E{8SySN-m{~Yb_>=Q^B%i;aIgcZQeYac4H&cbkAX4NOlB)`Ndx~2KM<x`qq^l4P
zMRtu_2$%b%G8whrxkN#-25-^)_oEQxr9%t;004(P@swdTQm{eI)8fxzX$R195Qae(
z6u!iTuRjl+X;k@PcpkXxb_5~-`P*(+wC-Y2^7ZM4s_<Wwj>5v^09vi_ObJ=V#9|mM
z80~+CRmvu$>|#lB(VKJSOYA1(avqc!MS#NNP9F?jPXOGFSW94gr5IO>Q5b_;u`pzR
z2y<#Hw@A*($$Uk4TDmI{gzaiMjA4<|m6!U|mxT{=q}7A)8SVOpiTw^$>4|5hp)V3>
z!{5yA?oOUS7e&IXhIP4Ppdb=?$!&Uj?@S^VY07Lq#TEAZ_3~*6l8WllqLR+fY%TXw
zlO%;~L6<g~sKR2uZSm-;pmAq8mZRPRVQ@PUw*w%bc&e-NapCT{14RhTmKblx>GiX9
zkEf3(Txmb>Hl;OOgTk$LAL>N%;d!EEk8D@XbT=2?pkU~5U4a51{T^fss4<xyT=MFh
z=%Pi6tg=VDMUImqlSb;3D%9Si3LWJZigP^1Bw;_48<29L%7FQ>O<T}XJr4DJH*fN3
zJd2IWQ<2Ba>T*H^w;!F!>ItkGBXu*1s$)?r`9knf&Qg-bbO8^al19|MZ87Ha&UMHF
z>oNCz(nyVNlTC|CG{(Y0y9|08+V7-nb{!fW=y`sWl=6;!Cl-63zs`NQl@C+ghnw(#
zHHrIC12{D?y|jwHtuDt~m*K*N&Nh5BTiB2Ktq?CC@y8*4X?Pv~D}V@Dk5e)sd(es$
z+P_@PG?C5EpXyfOWqmW;hfg2CLyi0JZ$41$Ql!7hhjH%1%Y5Kk8NW2+0UJxCf`3&3
zUW)%HtP;GleYb%7J0ySsEvyR<bwqYy=whoGGG6zeHPRB7LXe-*mg=J=o?}vLr^5$k
zdalu8$CE>qHyrzd6V<}f$_|iZ_Bd=n`~`O_`&N0P&L41>>aSS5e9rUstsccn4}BzU
zaw|EZJZO$abj@ZhPLDP#PxSPUIzN+~kRN35s^?0t8|`MiNo5?zj4*y3JrNnhFJbLG
z3cQ2nHHEk>Ty+9me%yFL311W=QK|DpN*)E1qh%aZ)#RWWB@gj_B1-V6_idPBhpdO$
zY{A5;BI(;7K;dBr;-T=Q(TaxUkFDP7e)%K5DBTiMFlbxnXN+ROsfU!jl0lm@GR*H}
z964$DVeWabug`dc#nrpTRiQZPN|dg*xG#OILu4cCXbxjS86_M&mM=rh(-&lvPYa3y
z`wX|R-y@?Xs1UK6DY*Ai4p&cr;c20sQ(dJG9bbwwn~FuOrR<BG*kVCvEB4*kA9eTx
z*b7fjA}e(7x|JFV9coPECoK6C!y-Z4JmK6YJU%fqVol{1si;e_ooE;54%F$6Tx#4p
zV<pC|>&`#i=~N%c9A*^sx6XlA8M>2K9U2v(rY6ywCYMs@?6faul2<X@We;-~^Yx$7
zuicy-xZ1-c=N@|ylU$4>ejMRXxsW0c$iUnWsnQJL%tlhWHrGuo%nv=j5B4xOkd2>z
zkS>}>6ghP0=Bhc)B?obztS$w#9_Li%N{aB5=l*!MOMZK@$9W2Qoz3{uExx2W{}Y7k
z!wFaG*b~&n^AXM)(0Uw1<uXF9yNtm0!GKw$o4G|IYDMrrMmkv@IIyqMM|NUKTWeU1
zSIC>k)*l8c)L_E-9alg1w$#KswK!*6{Co&ke?92Je4NnJaTX@NH4rw?X7|v!vz{}v
z6z3v}kQDn7pTf=wt&B5?=&D7u(0p8^0+sFJ3}t%=3WKs;o}p}G-2&ynjHr*tnSzGq
z{s!jyd1K=rMNYx_pOCk@3Tw7)%ewSa^ah?(hRLt)9a9DQdOtegeSYsNH5H#~#$NzY
z5U|#mpAb+iA=Z?<hbjbAf{lI$J1^O`1<Zi32q!f1X8zR)O7&G;_5aGP9}Z;Cmv5vH
z%%o@pJ_|44^j!ydpcTQ7>=2&CNDCjqpx*v!ES6mgA;~yI@Oh>uW>#Tw&g~71CFZ<^
zKa=N!_~9n!R1|0rd=RI>V1sZF9yE2h2{t|~MPui=jZK$sbk}%SsV96%FgdD<(6H4>
zW5p4O&A@lY26VqS$MQ%O&i=msL+4R&U3xyvd6ta&BB06A6upH!V_qO!W;<9g3R#1S
z<Y0Nc**&;`&yn+4Ut!Q3B`QXoyDZrdL=a(qL#fDCF0%#D8p%=872002%YFm={8wW}
zfAPI%VJ^r?Ej&Gb3O@frd<`*@aygWU6Q<pFmIu>7wOkg$mMeriLe_OTA9|B{o1ss1
zb3Sz9`zJ!nfUQwJ{-RS5Gu>R@g|9Xc^X962z%T|dKv^n8UzLF(rMD!ji@~TK`#r2e
zfxWH}lwGYV9E3Rn&VNzw#{R@R_T}jKbRmXQDJax@r?a&iJ-$tjPsO$aMX0_BJpjR(
zIGnbcqhQ-cd+@JMR`%0EpHmaP(nlwKt`OMKy?Uof7Wpvp!WR;#BF=G~e;z?3Fiej`
z`ZfSL8j+s=mk{Y^#2RIY>KVR?HXAUeF9xMtI(-|96KOi3b0a_thK%Q^Jm?iOtF)RA
z(!}fX{1+(!@$@wDl)TEI-@8VNe(UU4?+0(me4@6_=qL;qT8mer6?xXLwhqyBKJc0H
z!rX+TH*)U5YKXG4R5oy7dL~@;@Pz1MzJtpMBunWt=E3Nir|{Mj332ULPpn}Yb$tGv
z9dL^TA%erIh<Ihql`nDt`)=M!LBOG4y)kzgo^gTzzqU5QX*6`bkz<JSUASQOktO2c
zL9HsbFLDOG{NUVWhCppWktn?wpjH7O>>I6_&sUHrC+PLhK8kw}Y}3P-6NIotebrVj
z-r$bCA|G8MU#VJpvObm6-YttdNCVElni366{cNhxE7<9hE%ibT(dCo%OQaH1n)KHd
z;vR(&FaBEU|B{c3Hn2X5iyS@?{;y|w{3#WT$H44U7Gv#G+9l)sD}+H7C5o+vr%)o6
z`?c6P(4sIj`VnrA4$EIQIu2_wP8Ogl&CnCms@mW!fbER6Jmi5=?8TRf*g6mYKWqV8
z)-t?>w^01Gs?qkHB`+ejM^4UoXhdV6OAj9ieyD03?ls5jmE%K^l^FW$(j27%Ke7l8
z95c#|JjyNkMa_W$?QO@oe1qY^T0m0ZYz6!UhKIUt1Tbz5T{<7{^&D#nFW$}17UBwD
zPOw;l^%8_X&o9q{>Wz(h*nf;Q-!cy382enLTFInvpo_nrq1AO2n`TUlHa!U>JX&ln
zu#Yy;Nfd^ivoH~7wc>iyvZ8pY54AGuEy0e@rclXFdg_3ha0Z6^R;Dsx)P#BZgl9TC
z!PWU)&XneTiqG?@DhtnN4(+dE2&bUS8rs!(8C~-PA&OiTT|@6ru<5$1>Kh-`|BI&-
z>Nnzr@N3`7n<s?7XFs`lpvSy<f(bun5Zp3A**|<&)baSuT&v^o12I#@$-v17K}imy
z9BzRe#;dawOWgpLN{x3IzAwikn8AgoN#N09*Mfu4Y%Ste%Y)WyF-S-+W|;&SKQyO<
zHI?qZ0}kSqN(<eH>l9i0L(wMjlcnM+S;i8S#Z8)Gu1uXxrLifU-J4>NX6IYf1r+~R
zG@FP&I=U4;xg|FP2aEyHF$(5}M2mPE5d_&r=JvMZ=EJ^Ni=B$^Rt*K87W)?<w^qBt
zFJ#qJnKgCv3F<TBd}-C_H1us8;V~n6Wh4}No?acUfeHiqJ?&hwfIG72H?lOyc#_z7
ziXxw$Q&R=I72XD+hFEcmO&p@p;unzbRzHPD@ZH-`HK<DX?DgBdauEL|ym2$8azU>6
zkTq1%9@0kRIP%B#zPa#2;+4{+;$I<?bv2;J4mc0W?$Znl<p;d*ru(s3qnB(Ce;XeI
zRwU#vX@Px>W{g2A`(Y)mz?B$lN-nmsm9Pb#8!!*520=3{l*absw9}&I0k&!gdWQNX
z7)g5DAV6?LZ_|F+43|&N7aaAk*7d|4RfuQo1?9B(b^isQ2?#-VBf!ACDv4DQ{A8^L
zZC4$_xHXAyTB@geoEQoZR$wJzOGv8~0(=Ii=Pm)9925bb(PE6`6f$9=5K4?(_Wz2=
z0*E!Vk*AY~z>%xs7h^T04CDhgd|`+msWbP(>y8Q_H8$}`6d&7ayYy#{b3t<vU&FN-
zTza>{0m%M0%){Gv`UePy_^p~bFjE?Is^7e$4o4MnOwp{FL(d>HgI1gwgO$?yGnT?I
zU)nu_5NQ9lw{B&Nhri{fA}rapwaw={3<4SRWxo+8{9cK;DzWoee;2%BD53m=3^=Fr
zF3=Lu2K)Le6V1q_&0UlW;a(Zvzz5?1=vB7wS-iqNI?o_%xBWw7&%A{@o~*$cmYQ~a
z9F@rJ50vU~YJoihiOl92)jKfp!5eK}7|Ed6gR|jD7wfHwc{GFsy5hl3i}gcIFtR`6
z>LH-w2zXCD;nNAQi9wJY3>x5WX@_=chovYmn0P3POPh}U(r)zk<A4ni-v5Sw`_7u<
z1t8Ge1xK1e(LXV|gD}G@N=N_OZtT_&kEI&|O4vKL-uh(?(V!Y4z>%>#{goUFn1}%K
zZos>9`yQc{sYD85H_Y1&;<y;WV6QD8e3*?FPy%@)bIjM#T<`k~+qeG>Mx~HKT;{5&
z8-S5JGKUELpc_JeO(XOjA~XvN{~4T>U02&L+0V1_n4?5K@WU)lvC!J>yVvd>Q2)O0
z5ROz001wf*lQ#E347L8sXNu%u4j$IPOa$6En+(G4AS^1p{>o*m>6~fi9t4xb(ag`V
zpd{|U;9n<be9#XZx*Lvps)sIH6hbnXUINQy7t&LbUrA$9ar+*eOG%vOy9#GB6hRSs
z!or)^t|TMn9S>S)^SECH4`(ik&AcKx-5w~))y<7<wJE(+)XW57#1UtZ+uRSIT#C-t
z*g3}wrBxk(WcbC1!3qEd>@~*<!6!l%Gq3J;<)>0TS?Jw=v!Zt@QC3}w-Y(mS7o)al
zSAT^~qQ&q}0GH8`&9~vL$cpH~yB*u@#E&4Ph08^e*uE3W*qO<IcYn#}h-hTIh8|aA
zjh!GL$$#`o<C9c@Gn;D=Ixq*U6@o#dzru#uXgh+I)6K_jpn`BVB|GG4C!WSyW2@*_
zD{*;ez`GB8rt?_Lt=_TT7lYn6y5J=<VmKT`{}yoY*dEy(fQ2Q;H4B`;$^Nggpd+rU
zA&6-t7Qmk&rj39}95C`ljcAr(#94+_EVq3qZN^gC)F>%~dhR))9e^crE8ysz^vISu
z4fkM<1myIfbw?El4&@V4YOL<B92?SNJU5SX+zz)7rN2=f@SBIAA5s-)8=lf{%pEWm
zWf34<ZvVt+Z=f+3=l^R^PE9C$Cdvq(PYSb90u?Vswv;uC`>-|~oRRrD2esM`HK^^m
z`(P(>L^gK~q5oFv7Fdpq0U1ick#Afvgu?J?Tp$c->+DKF=QEHlMUUtm(;-Y(<A5@&
z55QBA@f02c-j|#cAzM@B;oz|JSHHNKbpFUe4L#|E%$`J2(gB)xlM+snO5F7!#3o(v
z`72}3+z;T`TMwhR)}kV}x3-t;4JK~g=e&!i3KG{J?iXBRzXcG^&w;R_Luxs|`4jR|
zlsV6!eZU8Z!X098GqQrKG73j19m2U1$9=8wb>?e`2&B!M4<JH`3-{kpgiBKtPi+-h
zj<QP4t!6u9<IVx%1ryG(fNkDIi5VRj1?bK4W963%e)KMb<t<ClUB6r_(*BQH@s_Kh
z<6dO91(BKR2)9Xq3X-DjUeuu^;$Ax4atGCQYd`2)xu6*twYlr?x6;@k_YVF($DtJN
zbLlywGPXbn3sZ}OAna}!=edM!E!nCkuHCoY4tQIJ#um7PuC`*KxD!+!Hi6J~Te;S(
zKPaPX{0Wrcl2Q7UGo1_5<Lg|1Ng`jI*U>gO?n2T-ynygfkJRK%ngV_|%_dIhq#@3<
z9aztG!jmhGm9xiX!{FU4P&g6vB&F-)2JR0~Em#j7*3}(k)z7}85$g(B_9}>P(~c>p
zI<&zRD<6&T`X$jpp<PddPI|>S9%0OxHYrr{GJ=N9>__+V-i_Mw#XKt)vYu?kMV$e~
z0laf`t6>vgAP|Vx)=LmSckPTaB>ppABHj^VJQ;hvh@gI9S#wS7h46WpX!)`xT2a=F
zbY<JHcKT+w`AEpDof0(v#<<s?+rMiEFPklTVs@4NlTXR_el5^~4XkjHHD0%7j|-Jx
z@AWmrZ<>TK%CJB#(T6S|v?Vxk4GYg?^%T~11Ox$KJ_b0x*tP`*56;gTIEirOgR!U7
zNuvGS^$q{k@Oac^2f`Wtu(VYiwi{m6%~=zpYh>vl@?9J$pmqonMR5t`Jh_BVLmTGf
z67+5q1$}639X1|<B^$9ctj9m{Yl}9tU5rkw>Zc<S^PRQt4z_>42TZY!x_TXjX%nY;
zSV`c#0@<|qF5HxDd!Fke(Iz?77+#090Z;{J=Gj7sE`_ZUP^JU%ruzxPo3J@T`XI86
z4vt3FS*M$?MVr`mp2*o)n*LtdHm6R6wt~m4!MRD^RVmX{=Nde@a))h`{Md`odzg@&
znZ2Bd`4yq%l47f3f%OWH!{OJuCh84b1%Iv(f9NAxydM7&PLj8^Jq^`cB?CrLeAjb~
zCA<t>FrOE1tK>o!Yvwox;wfnjmDt?MDFh+l^HZVUj(wnh7FJ5Iaxl~o^s(iGl`)>|
z#SQ_|7jVM>i`_!+*dH_GJ9&?XMeO(XdOcXs%5%N}+{HlG(Qs!UA3qtC-WW7ramK}A
z!+y<Jbb_nLnlJk&;9Yu81gws;#Qoq`pmQ8t1T{6Y6|nNvPXdf!+3In5W4?p)zIdR}
zvfHnt1cxo|`*uWTrIHKllE{Y@NdzXz$7T)l@rPUH;xDxZ2{W#MbxOdxJQq=90@jak
z<Yjceb<H5g>}%xVD?~8Y8o!}#c#<XFTzA{E&?7u>4_Up5ejgeu@dzGWD>J;i@yS4E
ziIM&?{#p(6>k}{=%75d5{mu#=e6H9OXuR)j+~7Q*DGst25%MZjlWdSvUdWtm_!J57
z%A?lZ{l>w5+P(MU1@3&>eG>#I)PFV<mQ?-mZ{uNQ6*4``KL`|^sLCfiaY{#31otad
z5qoiWRPYouL^lnn0t*>E?z(FYVnkws?bm(>3cR3bq?tQ7_;L#d`yrs<{{UF`Q{zj>
z+l_=aUIB%52)IQm#@q0m0sFHktT#9plZ;(dOT+1`5+1Gcn2SkK;~-X5xPfRKJWiW;
zF#uC}um<HZKEPTsi7o4{(xy+6%x;^;`v6;M)2*Pyvr)pjavc6TXQDjd_xHN-O#5sh
z-U0l`HGUCeLiWR8OITc^>G`#74EKjHlSrc)8w^k+<ts?(oPsA;zd|}G(FG&?n56m(
zQn|dOC?Xx)Wh<Ad;6thwflcTu#d!khl^jy_DlUB!Z-qgm%<EY52lylW3J#yst$AL^
zqy~?HZMDnxr8(<c$k|)#2$T2JI;SI37F^D14DlT5g#O>jtnqF<5YX5~Xb7Q6**-;L
z=Xa7R3evKts<ufrTP4eoh7v5{c0kHM22jZqU5s>`P)0Splyojia*5BH-R5xHpo^`f
z8HmlI2J)!eAgct70M|97u(xUDnJFS#8pJh1T150jy`9LE8V{wzaFIhubOMl8Y$Gly
z(uBGVIa2gS2Wvojobh$jq?>XaQaQBx!?=R;C2t6Xm3)~8##H&;29QsM_~cTeu!|BY
z3|d`&%)}tYm#3%UNdX}RZo&M*Es&zmCGBK$F=^6O4uo$?a5}HZl%$I2ho@(u?qCTH
zhZ|827m)~{%QZBQ12QqZNeMvl;Hx?+yLL)WXQQC_B89@oU9c7+iwkQ8kX_wyC6SqI
zO3ONDBVWdP85B-^%|r+Y9_;w(4D6F;+5?nhTk*1=D|_KqY|*TvBZ+)_|E3c?&q<;1
z-yq}kWOF_b*XoHn4Aq0Ltzt-wMoK<zFHS+Rx;cM{BpCebQ9}^EMFvG~0KJLy`!7Wp
z^JH`h(({LkUP?wEb)Ojhr0aH5*X_=(+j5-Y<qwq>qZY&+hkhF1sR-DPaHq1+UVs%A
z`?nX<F9<$hI~Ry(+`&Rv()1=+q%V{qeZBqKoYeji=u?d1nzP7)Jv5kC`T;dJKv`2h
zboMLZ(>KxgHzP57UHfh>f|pUASpAF+ZC1%-<C2pj)mTpnSeN;*Dl_Zi;7@X+A#Zc%
zPQ}*&tjjPxCPn#}aw59+ixI>)df)y#Oo|ZnJI|HNE3d@{Z}*+Mxj-F&OS~K8mjmQ(
zAzJ))^qsb6QvAm9`8_xN{W^YM)cyOQ^!H2f-I;+uBA-+FQ$T9*Z}R(9_+u}b4OI)r
zg+xDh;l*>lvw|a)!c)HgkM!{<TTH$$&V0_`$1T%(;K#FWIf5U5+HxXPZ8{U_ff=`r
z%wop(P-Yi1est*(%=j~;|G#F&ewZEF11~%_W(?jgd(knHOI-TUmPcIwxYj%qvrOD|
zOwWupqP<0qH`cHddaJZW8_|`247*I&a38`eGHoHPeG2j73wePZbRD)W<*WwRQeLq+
zrngj|jb@S)>{xMepoQRx&K~fTgPhok(&B^EYa7paeIhQ=rb2W@5A6E*ce%k)$PyQ7
z$?EHo8Y>tl{N=i{knT*R^9C$~nkx1)axlUA#=getGoSMg^m^*w=hmLTWK%u%r@inG
zH2e^@=Cs%@jK<K@c?gjDHtbO!WZfQYP*>T@pH?QW1+p!T<5%t{wFNkFquK(zmoP&b
zz)r<b<)GZVQ7*g|Kq6wklw($pu;BC?a2dn~Tl(+l2$ai;*6z&f>%mzt)9~PnZJd7y
zo4Bk<w;m^TLgwQXXwdrcmp@a^8FzU@Vc3eK!4t^*VS4bWdn=wtS`3kTm_OjH4+-1@
zph%bU(5DTI)Bgr8*Q?7d>M}=N?ok(-3?s=C>at2*{-!Q(smq7za!6hBKmlYJqAtVK
zWdtsCrlMerhwyj;5{<<*8DEIM{1Fn|;&O|+%;9G_M=qZs-;(k9c=!27Ao2pzRZiD}
zs>*wp$6oauhTv*n*|v)6d~M;n)MvYBHMji?ah(!n5xO_Gh${`(SVBT;DakBzN}(h6
z1I4^>fwTx_qFCSa3|&BCLaNfZPy)l!xDcZRMuaZo!uUN%3K$51^0SD}0L8k_njNM+
z7C)11^bA9(I7kNxJW<V}oq5pUQ}V89C+b8u_z<d>GL`tS^JI_W#LepzCtk$tC=&Bb
zgUM-l7pJMbY(P`ov$8?5u%X2ZvMO7zCmtvF8gk&C-VDU$0(P_2nR_|vt-Ia~Xpu{f
zs}x>T4&l3446|*Q%j|`_yq>msYYriFvR(WbdXs5vasi9|6v93&0^(mlms;Z~?d!2U
zDxLU&Ap-AFb>r{>eQr%Ya@+s-layqqN;-`tnMNy~oxdS9n475Z=XmAY9{V^zq6{Qs
z9A%sh5v-|ptrsVSV3K1Ch7tQ)5lG97@3gVOm=rQ!u$vDOZkW$-QR%NJ2L4IK2FLxr
zB=h^mtZLHwnw|vjp@FbG){Ib7C!C8=Q<>{|Tqf@mD9`N|In6!Ln;&V@6SeKS=`CwE
zYJFZcpO)NfhRY^j9x~+hi+n?k|JXJ_w2tsgC`o+?w@KnY7qTk69fahAx|iS4Q~8&o
zd={Fa?;-yX<R8*6a%u*A^pchWZ)Kk<PZU7Lh$qBS7QUyIu*4|8WE7fl+Z+C=3i7k?
zzu>Fj4`h17KMg;MSN%>%b}7p56@RdWBDJ&+gn$qL1*8ZdSa!$1_-o;xhOZzCzBT86
z75srrZ}=w|{aD~f1)`@Z{89cf;t$D_%CGQu^);)u5M(lI3thTewLW?FrJwWVIY0ee
zAkPSbr{?q9=m@%BV{K7cGa&P<^pd-}`X`n&)%PL2eBY-nsy#=(NqgXY(W2VHcuv9B
z@E~{*?(wI<3z^uE48684z4CbNB(?0QoBgDSDl9mWuaSNnqO(p%l-5aIiS^9HDSfpY
z|9|@!+P@$Af1j-WpKkwgS?&L1=~rm~Un23Bw?8WAYX2?B(rf#loW=k7;`dXyW`N}C
zy??v%BRhYA^Gyh6$v^e$<S%sIg!ESVzelLQV*SO=uT%N|g#2A%E*s2JXJ#tdsG{DJ
zl{=wSvX{>5Jz14=PAb{5i+WF{J6wlT-AXt1=+6J(F+D%pQ{^nqdM<YwvYtzwSy|7;
z&QG(R3!Q7To(r7Xtmk~^;;d(%^Bp{=`cLgR>96C`{r9W&?<3_yv6P3osPG}8x65;B
z`ng=55sTFQUM0^}>1VQ~S*yFx=C#w&bGzh)c`f23W<7_yJx|Db#>#61mVNz36wk_Q
ztewJdQm-qA=4XGObj0_vW=fo9v-TEz0#~M=ug5d>2dj3Hk}j%TJnNay=Bzm^Gp(<f
zvqoe+>*fl|HNF$Luw7Nol2hX^joC5H`$TOFW^Yog7I~MsN%4@p!G<2gBm>+k&(ZSV
zF)3?@<AzC4j#SPrc(GNcYH1D^VM`Cg#OKhSI<Lw{SB0_$(D|crzS0+nNTxm{^ubK(
zjI7Kl>otJs;;nG5>aK76xsXEdOZAJid@an9uU8C}PI-*_l~mQ6ew7+uQGv9RNGc8G
ze|7o#3mKKaqI^^GH8nJ6v`_Z<bjKOTFh2F9pW0mtU<Q8BZb6V^qu;vIk2XH_sQ+#e
zZL$~rG+S_YI6q8{FBN6SG(Mb^F}|4{&Jbi*<jdlxZu;FwAn~>I+Z2A#AG_$c1=`{<
z({Ju+N26bl`tyCFjrKynZunoHBHuw7Ub8Y~_pctucc1gEGyyaFV>kMJG30B~FNI&0
z{(9ecz5@M5q3YiBqqKa;*1xYn`N!CQeO>(bEHr|zte@ofLcb%&&#yNAV%>S9`GPDs
zCvuN#JE3d+cwM;2`2N7iZY(_yj=;uf6t=amC{BG3nf~c|#k$B_6ucSjkMhQ5l;;NV
z%#b(f_30kV$Fi_mzwWL4Zv67{H+zupN70|FvgG@;bG`z9T!qBF@kiJE2^Dnp-}{i|
z82KYZe|`aq<yYp94E?!8YW<4iLx%ob@^$LZ(4VIsMKR9MpZk16h~J~MQ2MhHx7nnC
z{#)+s&(cRroquON7dx+KJr_F3tmgt}Mb>kEH+|YC`gB^q?XF*bwf=Qv|11{$^jP)V
zBlXo%sz_b>;I%L$&3Z1*de-Cn=++DoawbyI!sK_fHn4U|xW5>y)K0;NI({f?PS#G~
z4cyv1$}4`!hJUIXzHD}HlMOVb8-yi9Fgo<Dbos?hfbvg4`Q@qd%Td104=lfkH>nDf
za^Ot85&J3LCL5l>Un$(Bzs%PIK*=3d<#{-sQ}b&Jvv8T6r}gKFna@YlUsrPrGE0Sh
zNZzEhSmJlo{5t?_c7A!2nIHPEs-;K$m!J4Mn*Q6MYUwdQKk=89Kg&L_o4kBzFl9@W
zc`}4{#x2y19@Zbz<6pLZ{5`0=$E=_18gwl3GfO|-Bid+|s)6cylo%QE^9M32_l{qW
z`HxXQz5z&l4f-W&d(@BjKwCU!`u+aoqtP#=KW42DKPlSiG0`tWKmLZSQGF@>y6K0<
zrXQaMB)%5?Qut-*$4^4#J!bmdc+%16m(m}z%AbbvdmX>K;h)xz-<07qi|E<?t4IDj
zM*aBhfnSq;Dg3hZ<7rTNkC}dFq3YiBpR|0)){nm@+I$u%dh5R#`tbv26UQ&*zwG(l
z|Dk?dm7&jO>BrwWs(xI*5(YO^k>B8eoLb+2empLtyrb&JJ(QoJA7_=HUhnB9@Bgf^
z(X#n3_bB>td6s^B1+?p9=8yA56-V+O_m@)ZAE=;9Kc0pxz4ou}?R#Bn0{SN?j$fHS
zGW6r%*U6uuADdq%e};ZM;6$Nnk77XS$1D4&Ewlg_i1zB=!78yUHSt{RoSOAq==9He
zF6gEo=XcYOeWD+y_1o_2ssFe7E%ZfL6h3wtoMIj)Drmz>+*7~Ag+HzfHay`zte>ya
z&&^0bU!}i4Gkq+bUW)${9z|uWVsz(44G(lZV?A-4J``)NIkk04Pt0Z|d@sj$9pBw`
z+3fE})dx4Bo@{-PZ-9|`!*s5VVomj^`5!$ZKi^3Hac+L-ld6^;^+A5(FH0ZH>i@{E
zYUwdQKOK?(X!_*X<9m=VN3IX{GCu5qHhRqR<@d++KK^vgzq7`-Cq>)sW&FwBzs>Ky
zf0^oU+3TY>0EqvU{*tAi?SVFV?D!8j8vd#AJ*)gDMO*C!|F5-we*=K{TKK2n%hIp*
zKpQ-E{C&OSpXM(VujYZWzW$_Wo4w$l-TtZZ2?Z$Wo0gB+`_W&ve=UC21J<cQvjYb~
zFK>zOdmh$Z9xd38V+NfOEphqDemPy@-@Yqgo*LkB>$=>vc5X#-X63WAYE5Yh8H0Al
zt(-*NzSG13x!j6_Gm8<7-8fJfvHeD!uQTjj4=+%O!Dnz>#XQb$R;BjY0~M_^5i%S{
zCy*|(qwRGUzwy`@Dun%Cp4bM7*QFq0C%&M?W?*g#O$7xS>wHZZd|`bw;$FYp`Qa!H
zMs?5eZ`(*2!i~cxM`joYP6(f7oo^h_wAi`GZyd;p+>p5ZuyNq@Sy!8%K$PmRN0T)^
z#s<F+=vqGGK>jQ{d<_C<b{GfxM4p*!93HI2n(z&GCr3^TSbh9P$KSPvBwqRJVTbGS
z+}7W}uQ@0D*ZDo#vu;O1$jd@{r8jQx7#uNm>$vAJNOtNKn*&<)8<|jufoobnqlFcM
zC%qP+P1j_<_Vbs-ITzw8<=cfQ0XA&-KvOFOdRyx^>p2|3UB6#@t-cYr4!qOSUP*rz
zFv#>iWc3LlVC-BP9|d9h9seF~{3|_&V2iX{N<0JOJkAC?JMpB*djyf?e3pIJIC^Eu
z;%DdsKJgppwr6+!ukSI*=U(LJmi({KKTks9-sT61+6?(B`k(4#*#FFyuV3W;FXc;?
z{L{V){8x#p+_V0gmM<t?$(LT>ANlp*PnVx9zpemC$1ERz3AM6!`e(?uEc(N<yR1j1
z>}|eGzIAJ_u{mFnzp~{2mOjUZU#32s%`Y#bge?6A<Z{=q2BVXUDIDyx%nH|bZoZ5Q
z*JjmwX6F1Tl_|@9&K(ih^{m?N_DVjXUrNr(`s9#q>y?AD)+>vlUzS6^9M_BfS%B{d
zwN_iz<M(d(dwaz{+kP<B{#p9bp1fnDzYy(wB<`KRj<J8A26+Eh`a@R#{@z!Ce}<^4
z|I7Y;11z?`2K>GB?`Z((nEUtB$E5$J`d3OmebxSb4E$S|xxSA15}KaYaY`<BlMmnR
z{MM2E^C;^N#VPqJEVl*P<}uUftYe}ND(G5&__1iSS>q|H>v3Y9vA%o&ifHzvFhf7<
zEq})P!wVRdzH)xG{@@CtjQTMC7dj1499*u%bAdA}>p9=~Y1XsPxfai9{kFK<epI$R
zJ5t_tA1}JwcNV~fN*Hbq3)KD)?5CeEjzX1$V^#RaJ<$W*DG$mSKSS@~c%#z$(&>Ri
zepjAvX6BhscvSlQ%=Esl^dHR5r~~N>kskJ^;l7gIJ@S$dzi)K{(o68ijYIXt_B!4m
zJ_v(A+K+S<k`EK3uKhLzuUYFmvb;%B-fUG~zCD9CiP^R)a6)#0>HRx}k6D|4WO-Ah
zJo*a<d<FJds=RhpUT&}Dk^Z3mk>yR7^8S98lvikP;|=1%sPdNGo~9ZRPQ!OKCkO>r
zZB>F1QL5m=4@;mM3U~rt(Ld3*z6vLztQEB7f^`?q0j{V?g$PNEn}pMNYk5#_8$4uh
zLK=jFQRns&^Gh*BVEX%zUhhk7nO}DCprD+oz)oU5zt3WM+AZtxT*wqSMRLmqJe0!Q
z%j4fZ%VYl$=TPC$@P2~OWmSf+34U#qud^rN6I1YKzj7zZ(4_X}GLGrL^E^FW+mHN0
z;=?FBGxY<;O94gl!3RPS#)vr{6v>w}`9H#8ioUmAN_xz~@Giu7EO1m})Nbldje2D0
zg&I3Zjj1e9QNzxpMhEbH=p5jC|68QSOyH}$zTthG@1uO5te!*y2+MD|Lx{ju$y~Nd
z%-*D^@Vh#pLJBwPKVA5D#f<5W|Mvy|i7EW6kB)!q5%?oRFZk~i{8^yFzdZwg_%t5*
z+ajR(z~2RZY;CJ(O?W?#@9X(K<uZg3fm-2n8$8f@1p2KC{Ux)yq0f0*y8XK%B6Y`q
zq~Jd(h5x9d<G<qw{E?v-{B6OX1uFbIGVq59KidCnw*Q+#fa&SBM*H)9l<$+()7|zj
zx3|EPI0&%g2m<VI+yAz11juavLgD|y9{7KR;6EjWzyIj??>qv3WatHd3Ai+s1q%Km
zNSbj^VUW-EKa1`EhM-@UZfmqZ-`DefvbxSizshdCUC`fo1o}JO_K$Q!Kdb$V1^?n6
z@UIm7r>F3TcqEFO;3jSoVC^OhYo!mr3E`NMh9XaUmWC35X(|g;?eEKMe|S6@`Oukc
z{~ej_yfjMu5+mpG(;fU|&DJ3b`I<lbg<l96Y}{u{0b7ybfp9l6WNyuM^@mcSN9mFD
z_>W739$0P{dH8FH$D`3h`gA5eM4t9YkN)fq*RecBj{Hn=6awda3xTuwdS<&Xm2oOD
zawb3hoS*1Xr)$u#pF_ANbc*&P$kDFIarew_<jB$=yXa9a^e8`)9#>Y79%8oblB59=
z^JpZIZk|b!A5p~iNRnC~X)>AxDw-5z(xezPx%~_v9(j$3E62ZGtbniA^Xs+pb@oJ%
zWj<L1Kl|ZXLY5BPXLCu1BFoGf-N+J?d@22*iyBAh4=-E@WE5}w3Zk=DLg;-7OiFzq
zn$sw0q1E6xK3oex1PHE}!bA4dmbwHeq>EqspSKbGr83kdM&5Qhu)OtE(x8cZCP`zJ
zKnvUuxgm9%VHt1Do@D<wi-3aIiVSw_RzX)O2pRfeSNr#>AG|R<jqe{JD!&xp+Eylc
zlL+5Q(VBtq&J2Y6yZE*P-+cR1M666{M38@{0pI#p1Yd5PB@G@z<q!C#bfU~=<?#4d
z7Ll0Ust{f<y~p<L!nap_z_}oe?{bL7FUMDnh{X3^iqZ^xmA>OPFk77}VFwT{uyYi`
zONdiq<f0)!c>Z=lc!?mqkl5k}gqO$-ZnGM=+-^qHCLp{+A^iJk-4Kp4TNl2)j{gVF
zPvhGH(f8%}N-IkH{+6OL17DGa%`U!JaVEa7+`FsL9z<BJrH=w6p!>&f0p0)JCg^ex
z4=2_MEPg<jY52=Vx60m%piw|~r$Tq>&%2?k`fnG$y^i+-y6}AsqV3D^RU;nT_b(KM
z8TcxF#>Kb5ZC}_O-&Jg%O=zv9PZ5#C$Y;I@grC|f2tOqV|3PpRgqeoFY=m`trv%c(
zj7)m)y8rBkaFltv@a=Vc|3+E5ecvxX7JQ`@rG1}A`V4%P{^Fur=%UN1X{kM&up;m?
z(MXJJ`3BHk+bZaCzdUKsPLe;gFVpasjqW&muSCS0-LBBxeoHrWySHzz<9A7E8sB{v
z9}B)}xMKTmM*0kVYn8s@A`HJM(tqLc<*ssD;&)n0n~6wb<f{chxOIylOv`|zLBD(a
z0pVu3>5lM3+oKTfPzdk3ISb+RdPn#9abj@vJVB6*`y%IdgnS4f2V>^x2?Q6x^c=9R
zP4&I|r)T!Pa|!A>0xDeP&EYo;5|py`j{$<a+<{4T#(GEQ`axo_r-%9<yePAN%63$b
zQ{a^C1*(3^ZIJ4*Q&ImTn@K7N?L!E$gihVA0QkqxvH?)**IXayT5kaU-|YeatoqS#
z3IHW*7qb#;=@JD%2>~cl0F+DoP5{uM0JtFw0GxN@dSv$cL}KuyVcGRVIik#BGdu*{
zpr>X?j9hvOYW>U0g7zf4uRt`r+&=VkMgNJXf&TAI%|<_vT5rmx|IVRD)KA*7{?oGR
z?`np`$O~Bid8+<#cAV966=@D{NPhv~N8JGEnf{ZGte>P6{Glsk;NR5@iIGna1^|DC
z*8|i$(au!>l-i&FrvT8Q0C;;!CIy84TtCZh|LNx*fq$z0bKLq<?4KA}$!af3RhwXK
z<hvMe!1t3#_n&6fnzcW3<oa1+aC^xS^{43n2y_SHpJu<r$ma$DfM;G3yvNyj3V>oe
zCxy2_@UNd{<9%LgS6$*?XPk+&P7%krkAU8x#CQMEugKGOg<8qZQ0g*nmABk6KDe$;
zyUMMuvZ~=haCzuLkLxJ+0_7(+7arGdyFrI95WTWGf5!Ug>~c@!yI>EWJ$$CPw1(`%
zM~U?^-e=*UX=&S|N=}@tpfIXOc$HIYnD~)@t8>lQGT;%{xz-)ICE`7oAulUBW?m*1
z29h3o?OtonB2Pufj8Db901n<uww83jEADnXC$K00PxRXISl>nvz`S7l%~e>-a^1Pg
z`kwNpD^>?mXxoPDrR%igS)A*v|8P3i&TybL!=KO}il*S5-+V=aLEORbi^*IP31^bI
z6@Eb1I=;luyyks;9bD~oe<~)}{6}-O__vV@M?jBjJoV8&TKq;hlz<ax<tf#wp5!+-
zOW98&yS0FYu<YtdW-EhCh_a_GUuW#nU}Rx5d;N*Le*TKT&G-Qbb6H}}@JWCms6F|r
z(czo%OL*Sb%~LNkC-m<KVNX10?Cc1YB)uKD@_Qq$W$;*gz)1SWn1g&3$r&FL6md@(
zsCZYoI>y$8wNTK`@VVlp%bEHOBv8s(u3A5}s;7WCrq4Xx<$@{Na`;+RumWf|a0I*@
zu}gR&n8D4)>;_)Q?Y$_Baf^I#MGtqO)l=G5nWqBuL(bb+-#0`B^orja@gD2+q5T6L
z9aLUBT{F%BBzod9cqF<4Ri2BupUz##2FFd~SP>76gy7s}5**fw)3%UzYY0A!OW^T|
zf8Z4jfe??}3PTVF4DVheurMF)%hyKs&_fQEX71F5lUC9uLKriHhrh~gz#5fXgWw6<
z-wnW)V(xr^Y<@3LvMJ!*XgH8-tHAIuFiGZ`=Nbn(Bdzo!b2Ad5d!7Ve5hq!ph51Z~
zOJnRray_68f)@}dF7l@Exib>!CxeiOorO3k6kVezUxt9+F6C!UOH&>U7(NwI3#TYr
zj!Dt-0_1d?K#rL>XW@nY{CPCs$XY*<c+?VKkD<px=0@3}sQ-|aVzkGqNvLQd?Q$~1
zFvW@pIT#Hy7{pd;;=~w1H$36*+n@iG@_$ZI9b8xCQd>%WQyzmJ#F`gra!r30A1Ffk
z)pZi5FC=ef7qiR(^|MEKs$ip8Wj~Jcp5wjbPgcu&J+Z1N>Vc#m>lSyKWRA&8l!!v$
z3hQ7$)B#t<v47&LRXqY-8e>{@UC6w-%8hbnRu9*fR~JFNHz!pfvPb)1jZR0|^kCZ3
zf+bwP(b5l2dP3&IQM?64#GStuHFZV$NriaCm(;AM5nPNItW&i3GO#&#x(eM7WHCx{
zeXff4aKr`w$rxM8?efnVTS$x1#TC-5gj=s}X>@xK(xBAwOc!H16gmavAOo;PF@<z7
z%$t0{{cYl&s7CkM+Y%_c3WLkdQ*>iaQL&^c5Jn3n&iPMI5zb5nimpVojWVoGVl9J(
za)=HTO#rKeuys5XZy6IQ$8+0+=$xV}J>jwN6vn!R@4`j!Lo&Wj&k@3;-I2g&HUire
zyFN+K3&FerB&A>B0<yq5l)&K1KJc))j!p$bPG6v=#tn(FKz2@#bCv{%8nD)?zR8qZ
z^r_*)8Ih&ktiCBRs)It8<!JL-1UMzxW-N1MmlmhJ7bA^ce2WZzGbyxEV$T{6NnFZc
z4pF26?PP8%ULw&}_Col_XFJmI8`>aFH=ja8%33l+hOE7-FY?!KU=K>kTK|vT{b^K_
zrH{CMRQYv3No=>G$OlhzOYnE{eDh@t&Rah+-bLiCN$|*qms;#DPzeozptCWq8&L>j
z@wMqu+}po_zeRJSh47`;nBv4JZ&l;4fe1ub2}X~t0Qa%eO+f^7FG)WoREd~o+T2rs
z4O^?wzJ9R^b#M+qiOxR96AqAT7@nD-Wip!GZEZHZx0QJ(K39nPhmKFVtf}k|zZ1uS
z_YfkeY#USL>lLUH-g^hMIvY_V_jBNkIjlRJ3%dLFN*7_flPx~8#@~dHDZ3ai<zL4O
z`icl>`@G=;UNpzwlo;0m(m;#44K5noCVw_HTotmp^`A*|56WzAw)Jnp-<kApOBl@q
zy4kmprw|sv9mt(O2-whr6x{dr2saw)GcxH`@TT!W&!7WjMl!gGaF6K)?)g)X74EM6
zQuKEdAqPGdo<MK`)eGUHYzaWM??mth#Vu%#a)c<gZ^0X*<5Dg55qJuGRE4NeDC6u~
ziY9E|#VEW}7;m!F`)XnkI118*5lApZY&Aa$m2}`!AZUJsxc1tpP1<rc_NW%~WeBRP
z+J>lpoW*XUHyr>ZR(0vviZ5mau}xTv7H`Sz=P}2ZR*oMY*{t~Rm4)QPaI;fZLg)El
zTXN^~cx!H?Y`+l0nRB^(i=sRaJ_iuCE`(?ZrKSUC{YlOEHQ&!1Va*<1lB_tO&HXK&
z1slJ)1u^o>SKCVFn+`M&LV-{nCrX%+5&g_DrIllbhllt9ZumTwP+eN_S>%<n7sP92
zTWcDg^8`vQ{#h|Rvm<q6n*b0n4+!bZO+jx``kAu;=9XkF`R>H=6rDZM6Mh?|SL~np
zn)hSpYV<gBf642B)S&-+0%az>U=p0T)xG<5?`w%G5tn|HH*-H2$6fk04(d;xCsffK
zX>XgC+G28JzhT^9y?9$pI;pp{cne7c=9_h;!vPwdk9`p0AzSW-5`!;0c(%uUeg7Na
z<n24HF*hAAtfUx<68L<E(g8Q`HOB}yk4<y)(o`=zo4s(|<RiJ+6}pQEi_#a>TqB0S
zWB?{{yU&ED{$_JFgo@8-zSI=`+L?gHmr>0jBEomh1Gp1oT<2$SgJ-{T4uT3l_?;f&
z2?x!T6MYp@So8{T^!DdOVX6O+8}RV2+js4U@PrG+2fO@piYAF^a)uY(SWyQcENj*V
z#)@{3aEO~siO(PJZFTFhAH%8;hr6l$@B#5AC+X%rMVpw4R?au_Ey|xFwF@i~o)RUf
z2Fdl<Q@F0gNR=$6Op1XFSEDKW!s+s=?_d87139cAA&}t{MXjjddFZ-c!txXz3h`gm
z9Hk`TNx)Rv8FZOg(Gq!QJ}ARkF!8(MDkQ;>T^CH$78A{tNC5le7V)9!j+1mjY%~`l
zh-|xFu|Cp{X1N4GqW)I4t!y9eD?OO6h(C7(vcdRS2*&P&&wJ@e{?!9eBHk8zL2@b|
z`2qrNe7vD?y7@`a3xv>-K1Xmy+)H7Bl4gl<vDR!IYhF<pELmUi+RWoDMYEuHeF*l_
z6A?Kt{Iju@r_cC*VAI+m5K6-^Q|XU^^Ab<^8WMfF{h#xxN#jmQm5G4EuDF50wEu0F
z;i{udwsVH7%u7h^`VHigt~dx7-+}EgDXV}Q>=_|*N636p=}tpA1sNc5B{jsAEQJyQ
zi}L=n#yN~*<mx+qOobGUwdL?8t6Gh5+9Zlq0N>b*+jkxxE8<!to_S$8w@uWod!%*r
z%6p2M@pi^j(N&5ABj@UgRr1aD|3o_AH;5CPl9~@Dd%C$$9@{J<R`em>dsosQy7LRl
zqn3c_1fb#YeT~;fP%jq_bD3K`LUGP}TuK8KL)IUJwe7+8WzseND27dhIf>o{%d^;T
z@PJXF&RSL!Wk$x)h!v3$mDAJXP#<|8dIg*CxL`#;Xc9g!76+hGZTT&@Bi~<zf`Znp
zLcO9C2_Pp1Y;?ZQ!WC%%IzUbX+_HVQ3$!RIqY@(|Y-pflUBy9dF4S8UbpyG!?=n8{
zp4mDQ-3Q?IgVF?^8RmiGQY3;e)53b_wTKXkm<+#4GH~zyZEHU`qpI+AEzZaX=DM;M
z+A7`t0YC8foXVbrSX(uX_h`kFII&nU;o4$1;!o^XC?B!)3RxGO_nLd*cpd1^+R!+m
zs1n)yjSD4PRSa%|AqI;1;yWmk)H%!C8?;W*!C@2Oa$8#t=GI1itkz#f9c1vmOAzu4
zy?9v2Y!8}m(ZTfeU}A`dm|+3D9uYFX;B>w)Xd=Mfgrcgp0eVGS_);B#G=VBYBsCFa
zDh)6wXvHv7)i~l5N`=Zm(VWP3H7<WUp|r*u&q4(FinhpFG!!a4%(!PGf`~DWqM%uP
z7Bb%pn){HuFa(a>0W4FTo8lbZS|zN2`s%<3Q6zCbg=ojLf#8kcbbewmfkua9h9_`{
z3QFcG_IMo=3)YAY8+?m5v(^zI+*g?!8N6H9;%m@8OrOv6KIb-!!{*1BI_FRJ*U!1O
z*n?%A+mHk?vs9Br-UV%n%R1!<r1aU46Gwt><E83-&?$TGx9=aXdQ7_Gpx@3)cg4zB
zw|=X|xt^5jyTE*yUH@bDU*I$h$~Zr!`>_tukp@A+>y$yr{!@Z!JHtRd3S<>q+c^!7
zCc=hhb?dHPl9DP1b8j0hA~Mx5_9)Bk(j0}(0}U7?h!F>zvqZO1!&OR#s0qzS=#8n4
zmJ-}p3H;-kuNjBEk!$_N7kRTD@N@0wLk#I8wYCDhXmCiF>^H+#_^57H`Wu%?A9DU1
zHHo-(u0h3SJ4I4=*xP<(9L6%;rRb}{#G2Co;5gC|Og0qbjz8QMM&%A8*S|YTIueb=
zcrI&3yx~vu$AgK6bI}X675S=zh6ngtVyChXz?i?ek6y7O@?Kf9Kf0=a2@8yzr~(Q2
z&4snhM@0;C<<s%y@2Qc^(TLne=l7UH+Lfn4F`02jDy~|3{ZefD#sy%s5iqBXW2|Dh
zu-^a<hoz(cdjAcGwIh05qVJX1d(^FI6NBa<F3}%{z4c!AJX6*R8Rk8^ur<x}yYLR9
zAM7|L;V)E!b$pA!<LE%NWnkIQGp*VsE9CQX^(?lJOx=u+8<Dt5mRUXkJ)#n55wen@
zG!W<ZQM|($+VEhtJdtE{qGX(J`Lp6&oy7|dZTyk9;4~eK|IoN|&{Y%9jJq0vUj}#e
zxBB%_d=FK85<V|Fd!;A58yi7YXlqQ;JIDK4s#jugmL%M$1Kn9FQb%C^`B1(pG9N{z
z^<C=%f`>tot0xLP&hY_MwJ0HOX~BwrP}tQJFqpff3qn#gGGW&)KD37CiHZIG6>9G<
zv-Lm>5qOC^e4SV4<H=@bJOO=v;13^KBpM`X!teY!&!86}jxX14?O_P?k`$`Rr&sVP
zYds+=UO4P#eJ)4&$Wd?^u>lct(;Nk@1@@v|Y#@T4@?Cy<4(!FY-30w$656-Bz1YhC
zPu{zLM^#<z;~7XGXy6POG;L9X9owYZHt|xEf;s~;<P1(E7LZs)Q!hwcDhM->dLuB2
z<aiuSt5!d&mA2a2Pg|^46orIa0ILS@f?6e7!81hVqC!9=|My+{%*>g|1!}*4`}>|R
z&jWMzIs3BqT5GSp_S$Q&&5urJpkLSp4#80C$Ur}1Ud2%2OL~P$lcAJvh0Rc%!cbf(
zCK<|2w)j#EmEWDAJZVUC7=UeZ|3ATB*Lg6mlD@&hSwU#6ORYtfL$c(enJ>>%k2-j2
z%QI;_wUIoP7$2GZ<hJ?A-8(=16+3j`rvjUweggLDi=Ub^`N?M&I0Qenk)MubUd2!C
zOb=IS@{{siQT#NpyL^%*$CqL!+9>~5$fxT(dQbe*Y*m~C{_&CnzO+ngaq!PwOVjv=
z$4GnSp8}hIaAjq0^62WLgnyus%KY{%Y;^a<KkG92$7L5d1pkQqc?-O1^N;v8zoOFQ
zALR>V%OhNBiG75)Qyy`3@a5!Dc6SEKPmH(!x8zS%PyDma8W{YS`Ddkrf2yBM<DYl>
z;-5mBe+ql&pVFbiKSehG>;OCU#Xris(V-x<*aZ&3KO%4LWnLwJ#5ep7l?MMLeZ#3A
zVNV9^lcpd2pO8P*J@HSQ)jIB9<{zj0DR?}MfBKX^MK=Ew_0B)LhY0_a*!=U~V5h$L
zXG^C1Szs491pkP<naaG1f5f+bvPx6_C|@;O{=la6e^LI_^u#|~tVRBRnSY$}XUkvH
z_@__#Q)2T^N$>pg*F52$vV{Jl_02!+nf&9k3mk%fMBW_Byuv?n7U5`>B>T8oZL`fj
zh5tw8&-9-7r`@U;^Dpy{Q~unwB#nRils{!Q|CII4KUW_i{NqjNKZE<`A6Yj!*JCcb
zz#;fY<jq^)Ra^eZ!Hri`nhaFnWFR<H{9lwmvwGqm%NpqYm-)vjf2#kS#y@?^AFs_n
z-ro7AG*|cs_vnfKyaVh+Quel<SKi@H{l_lQH~)yd`3<wG=}YWIzfx(kPoa~2O8$?^
zpW2@IXP4D_=D*B8PWe;tP#XXADSvdEfArq@XLpY9PgO$y0Xy}@KeA48%AW;xfxh`i
z9Tc0&yo!MexPG6k(qy0_Cj*srmp}c#^!jVy|C05W@^R~lg*vVJQD7lD3V!(|{0hes
z?3D-8Sm<rF1oLBsi~D1B;{a$=f%Ci-HMBayEs%=6R=-se3&jc=8{C2wvEI7yL1w|9
zZrmh$dd9-LkkXzUGre`;Vt&Bi=pt>=P56bE=X!Je41K{$W^JsfVNk2q3NHwRgLXVZ
zH#2Aa3)qHN;lqdO2HZzm<wh6eU=~<7_G<O?>}Zvnu~<^YbtF{At#$aHzNFev3G$7f
zDrB*)*!LN3;fxG{L9|Hh>T+47(aLnZ@htj?s{ITca9F>6BsxPED{RByAjYdOkXw^*
zIUw&fgdvw-8k&J2?mVFiV@$Qyunia#UyF`=WPevd2Vk<|ynZlgA3>~%k~r^=wa<qn
z>}?o)2-Wy0{Sx5U%+2Nyv5u`PIAhA)jb^rlOyj0;C#r>yh)teKx#STpk3Q^$)qd<F
zV6y^vz7G4~Vb659)eMqruczn8?mMp}&su?hL!ZWf@RiNkcaWy{8J<~{4G6&Yu-YxQ
zH-7PX-8@%TrRI;bX(4ee=R}mCr@=bZz&|`T%LDn~9&wDotHp^|cuuhipyQTYEne2y
z8N77|!69wv1385Kn1TH}e<=32Y=V<Z^w{mvxUX?ujZb(5bKIV3LGe$RvDRl?;tjSk
z_Iozm5hg&G&9AOBX4Yc&hm65LmJ**x9Xqd+h%YA#VY^T_j|v)hGCMiQXDq72BPv*o
zAO4{NVJbMt`LS`>0z3v|Gjn})E0*%J*02+m2GwB_ZZhNt&4KpbK`O|-&s@Yk5cpfr
zzK`0ufxtgJ*5D2QxY=z=T@`vLc8@rBP+ESs{|Q-@#*#*4tHeD__`xnn&{)Kpe2AG5
zG?p~+(O6W=Z?T+@c74`GvD#T_+;^9H)$sscX){_YjTMXWhF^DS#r4THHun<=y_WCV
z0gLs+KYZRrrn=RQ?JlDgqe%0aE6R`{-<<~U2z%dF+#`Kp)>=lVgX2rXCavLQ@EpD`
zX0MPuRwbJy86Fhv%GK%z;ax*lBp_r5vySGrKLk#5ct|Oszu|ekyZ|=>xAHy4e{=Y&
zx_OT<6h7FV0Idl>PHd8LcsLw5T)?F5z>(Nm^Ia0Z?fV?`;;W17*d*?<ydQt2dP)Jt
zo@xzK(LHv4h2s0`JeQY#7&Px=3)nbpmV%disuDy3V)x628g||}K;gE7EEp;33SJ#9
zn6eXHpcTWtEskAuz)&Yy%n=^F*h0v|lfXf{@G59dDXTP}Vp9S0PD-bsv1@!R?}W<Y
z_E7msT^qAIP}&?cKCLYNGyqp~loQ?!o^&UH4VJ$$yC7hSKxDqyX-C8BJJ7HmZqCh+
z@Z2YdFbh%4De7~hHP^cK{m<ZJai{dqe2O(0EvSa=6YFjKHQIu%`-r4a@h;u9HfTsb
z)EyoIU!UM8iOu5EZfk+ZQ^QxmDfE6G)T-6rfDU8yT#nI$^C;k1IhEe9H*$n;Zwt;f
zT#T2Ya!ZRofIYdOIiVIlQ{hWNfSI=v5=;**)3ndvPJpMjY1*7Oa6qYp`<OR0(_#7S
zthuLa!{SVD(2bY)`%%|WVO~N@g6_{&1ieqyH{*4!_##gsIcvJ^dP^@~qcvO&>FkI2
zfy(`+*6=*Q$CzD=@?dQ*hvqs!sY-xops^R<;L9S!6NeP=RS<kwhu0$6>VJjq7<-J}
zl)CQdyRNo)wB^X?hJKr&Gv#q_AA!5~>srN2$l%8F0Z{ify?i5nHs}jl;PVC!ekUty
z7q&fL(pz@ow)U4ovD?eDaFuiErr^Fkeq$w^GX2_^W*LPL_dYGq41oRd5!g9T`HT9*
z6Dx>YEWl<K8V(h|3t>E(cdVC%T-)UadI~K#@51?}()^>%3A>Qj4|XZTztQ39BvOOr
zpM*>d0j>UOpv4viE9mHDi^-jEKuEP;+8jq%jMRJxzs&emm>?7LFRF_Sfhc6F{DWHq
zG*_*DC$@H_oq(|;**4j0I8Y1fUG6jQtV8~2CwS`>3a3qAD!5T=4LgvEcJ|lme~Skj
zK)>-?{30~l6f{KuC!}`Fc3Yng48h~>G>@PH0`-2>4IB%fKmuiBz#WPCV=-Q%+hB*$
zp3)EFKKLtOs`ukX?97etjD%Rp^H>E41QRmzJP=($kOUj~ty;qb#1(yJNY=nQFpG0P
zvb+590qleWT3bqjL5)E>4pjAk`#E&iFqCpv4=|BGwuG|<-Gb1+oz{$daH%^whCYo*
z_U;|s$Y*!11f>%4$;if=q(qCy#RtR-`g|Dw3uu#|pFO9tsrZxVVi4n_hN%_Vd^HsS
z3EVz&3GejAOwxuQQus-DOJL%-YEdrw3%5fiUcHs$wlcPaJNW>eJNZxsTKP$E5Bf#0
zBaaPz$6Om=d%#Q}SAG|);Y=AU{}4U_@a(_l?$7BT<&6&lEKNc9VdijV%hF|VB4<`A
zmTLSy=_c@uesS8C&!}V@&=#M{{+Um0VG(1euWO3i9#cqxE_}~Fe(<ebw3N?y%|XY%
z_$GMnH$^)Kz{%@&PaWTEKx@Fr{diuAi6_CVm}mW+aTpD{z;(xi(Md`?Lcb7wBv>vw
zj@EEI2w|7+c*w5Qcqu*yC9TH}41-FEfyx%|PJC>QpO24@`=@<V5J}kKq%s|6>rS>~
z_0AyceoB!%pp}S#kgKl7Q9H<dzxitd1&PViN$Oz8Npch@SiV||{tDUYT?B0=?5QgK
zkY`WKXqCLZt(rfW8FO)@p&6BgsCx&Ex8Xb%ie2vUQwc7k*C1z4%BLa<t3oiA2f2|Q
zaw^Vn3*s+RyiSL!7s8i+07o&nZs252u>UO&;<IlO75E|wv62u5GR{KM$Nax-%^psb
zVNVU`nqP5l2%5JLKFlF-fW?0sg09ze*Qc1_TXfgPY1+#xgNEdQR(K-|T;i*SZZuOL
zv`4F7i?m)0SJqF1=8e)n2I8%Oz+vki%#>P##OF1~l?2Tv30<)DMz+U40W)Yw!Js(~
z;}qi9h6nxe*mcI;sE-|iqdqWXv{t%mVL)FW?q?KpC|4(SpvVna=S)wDj`*)i6ZgIQ
z&D-kGB&Tg-HPi@b2QBgQATjK5pQ<0&@i<z*q&+gD6-2mRJ)JjsD*q*Tn;84zvjL>_
zz0P46w;~sLpVpn=Q+xfB87~iX!_k((fls&w<1#d7eCJ4^!g@V+b&VcvDIp0+kymvH
zS9{|PYJrN#g0(7amtF8b0;A+YXjwmz;4(;<*`DPkM6dB0-=A_aj_hW805f9ICeQ0;
zo)=c|41eNdz!RGwdpJ+;QvhwyW3vI!N+&@107!YZth6EO<Pmy-2&Bs+$krAFf&qQ<
zbj%4hL@yDd#V4g8O32g9czrfJCn|VkPoVfv@QB6FhKJESuzUrAlHde;0cWTKoaFj7
z^E|x`&mDUNKVoD4uf2!Bk64fr_+hjSY*#n|T8h9iJ>jSBTix-a<GdPJ29Elp?d35A
ziLp;NtBTBpt3ht_(NFMyEW57%!e)7B?zfPqsNf&oe*qZ%_^i3#kKG7{&%zwDtE+q$
zj<h_JgAAM_`vXha);A&gIVf|JhrS|bDZXiX=4j*;&UQ@Vjz^=-*of1f(RSCyINS+0
zx0mml-O+KM<@t1&l2?d589#%XNMd|QXY%dNkZtc|$nVBUp8nA9@x;yvWRpDE0;kn@
zWjFA01Uzf`Cu}86zfj0ZtG_N;e{GNT7xh~I#og+cV1*onpvVZj6Bm&pA6xHqe5PEk
z3I0H!AB*Fy*7G<fl7ZU+03PuxtSr=?sE-uRsP7j&)^~01^*!?OFxt0jY2{E5CQK^S
z{$n}2KICkIa~B~k@V8P}Lc&;X0@gyAba18(Q%*I=%|&CC{Y!xYl0ct81^2OSJQw1*
zKPqE^GL<2l3k5fyedj^g{si_GRARk#I+T%CFni4pFTm_kil-9%7ULHV%}T;fPs#Cb
z05i4mEhjnbRbWeIPy~&T?zO9|wR@8CHkLDV*GP7|dc`AX9TN4#buw7t><1xAiFWJ?
zyuj~p{_-U}q$PAFMA$aGAH2kVe*o`GI4No~-qwmQ_js9k2VORD3KzdpE~iSQ4*u7S
zoUh^E3-||%0$k~}Vk|qgVo1A7VHC$Qj<skrA%~yl?8kpdqK@Tws$1)w4t;ti%He+$
zZ1oD>b#wT$kJC!%6>{LW2D!6Zy)*cu8&z;!*K2j-kvb+@>l*nQf7;MOZD_Sy8(M{5
zy#$9?yueqrGu|pFH}V6)m%btw&=5V<yYYg~k?2u7@iYN1h!_4QP_Pd5qnCe|zT0?G
zA=8p5IgmifE6DgF{<UVHWWs1c2{i3Z3JK|b_o_a4G2zV2Idv&c{}@&Nwcc?=L=C^8
ztAas!^v+VR5;&^6i)s9&A*2Av077&i#H#}tI+hhqc`+H2@zRYWF%A)MA-c1U!q$3f
z>t{Gbn4>M?c}RpXhz&n|>DRK%lNZ9rizZeTrA*EDh-9{QY`{ecpKFc{m5;3ozh$j0
z9-4(Pc&%eY0ua7^6Utqlb(IJ2Ct+r6XvV4Tn($YQiJ^@8TF2I~jQF}IKc(jH=W@JR
zb>b4Akf*$_ASGX^-|q4m8<mPntLsGATZtNnfKf-HbmMuY>tcn8VT&^%<6t<f$66tX
z;W^!JybwGI#x9KO(ab>GL3A#^#_BzFc!3YXk3r)tQA2f%`0H#@p>i;x`;B##IQ3&R
z3%&yAesuuWhl>K`Z$$E-bj_f_`wp;Tpm=j-e?&;2h=OhNMM{?<v;$k<))36bNR}|^
zN3C*-vnKu*ByBtxdqTxK^zt3!WBzYrA%H^?)EaeN8@r2oa20Ndz@Kisf%_`ZBdb3m
z3{{%SZW}Zo7n5#?^Xko>I%Gr}(63j9Tp#H!98qE20IQIa5*98f*VYMd@9#njnBQqN
zcTIv|TOX;>PnzK=2)RDgv3{9|O`h<%1fwwMdR2ElA1r>U(tKDfdu(zs+6ftIS0q^e
zsn$R`1|7EKkg<d7&u`#$LSJHEihM+(+?;Wp4pf%7VC|aWsR_DpWC^dK%3tKEB@U{M
zH)vbtA(H7_Q{oJKC1A?-xu(*nkP8v~Q+?1@t)7Q7e8n((z3zu&KjT^3`Z19W-5e{2
zU@YXhC<rHU4naZ?lDQ-ZvM4Df2jLZI2_GAE6Np??F(ZB)>Xc(VJmx`xm6G~r*@w#w
z=jtET3fqAV<2ON{HrBw}4|`A0h@-yI@ws@1W@dCOv6g;7Er9DY5LoWBl{KI6Tc-X!
z5#zmJJLH`q(ki8NL-xIj!C$DGmlQ$v<t(F=<YWms*3wN2hvlq(FPp=#=27)3-~?dh
zGo5Q)S@#9je|#Fe08g=Hh1oDPyZCHAwgtlt)|0U>jLfpms^_lDV>MU|!@Zwh_=m42
z@@t{`TC2V?ll^rdzxI=_b1<==x$kd)wKd9&{IlMVO0{=&x>(oi_-eh(SFK~G^E+Ck
zK)|QvsvtA+&-x2<8E@mu{q`4mk1w}Nm6JRLplbf|GQ8$811w~1I9@^n<w98Df|$(p
z1@Jxm!S?_j78jfzQi}=)!ey_0d<PK@g-{_pbCr?AcoNwoNFFShiRVvmNMQWe^HUhV
zmCs3xZ+sqj_}ju>F#Z_7{zZN5j`2JAwMo7T#v71!VmzV>+8Do*xi96bZWs@#f=P^z
zW-h__DfX8H#!tW(ARAUI^wP%oOM>z0<D3{zpU*PaQ^bGKKLr1>OzIK;vQ@nyo{s<Y
zRaM{UpL=}*{Ub;So8jF;lmx^7U;~g+xu6&HpT@7>RbRWK|7d<4DqjWt1CVy2e{Y>s
zYop&<kKF&@t8VCj0iRGXiT>x9OVIzA{Uw3^-{VWq=zo1gI{Lj%eIj%HDE$A9;9r)7
zJ>tKR0%yFHj{l5RWZwk%^x6agetlhv0Jriv#sBMomcPyKg#eH7>tEE@?gY4lUz_Bs
z;(w%_1c<1D3I1p9OZloB0Ya)^k^rNbOYy(`B|(4_@TF%0RDUg<08aeF2o}p3_ztDp
z;P%#$SrRXI7KJ)iMNolGw%2SkXdcE%QMIsHdx0w}XuQW{A<BQV9ZHAhhnaY*Za{U1
zV&g@~i8=~mJQuEwUPw`EN1>2)ROwz>MCmvpotO~uE80AMMQ=&2mSo<<TQ|FE?Qnn2
zt@|TG1~w<QT1QTY!J6}@ZcHx0Zxsyvr{K2)zu&^I8^0$ogJV_nZOGnPMk@_d@n0V&
z`+hWCITlt7sXj~1udA%aZK?TE#S;c%QcJ~L-0j0t&_E*G90ou!Zj?I?qgKDsXK9OI
zP|h;1a>W|5U>-j6O&EE#MSs9MEIDDFlUPTXW!zce(bkINaN^u}A0^x>+>!OOQU(u*
zoQL*2!W(W`U^G)3hTLyPkfAEt>MI~as3aI4S^s?t@e@8B`;F*zZfY%f4%K71Ho=e9
zZM~U0+jhmQOSvqpP3g}|UC^I9o=DnzB*a3;16KIGq`e|H{yuaS+g^d~6W9!*o&D5)
zxa_kuVYZ}x4P&uy670jkq460v-?j=GaM5LJMJ*n))-I~!58_=`;U5gJIoJPTgzea&
zJ}lbB@AjSMG=nl0&tTMVK18dIZ#fhPe2-G+YS{)e1G31$a6^5Me&mX@N58;E^%i8T
zTULkvv%=rP(Rcicy44zG2dG&9LjOu5%DX@lCd^e$+LKWRxV6!(GNY|5<ir2gpJSh=
zpU10P#=Azdw1(U8f2He#%JOYmJx|Yuj1N1Gp4L>qDe}$60MxKGu3-5GT0QO7cIDQr
zyFN#73$e#GH2?gSQ1OR)|A!cjR5#?O9vkRmpz8uq<9d{fcA{TTvH~;bx(67%LV#aN
z_>w)a^;CJe3iqFxQ3iC?Pl~c)80SM;MSFZAYE|n5xk-xrVoH;h#UF%R+wAsj^l1&x
zf&O*Nc<X5vPGzbdhfmbYA7a&!5$0{A4Y&I*6V2Qye^Tb*Rc2JOfuN(2O`(<>F{RBN
zZzh}KnSUFWj++rrQeB227q;r=ee45<%Q2#e>c(h~H3ModH3BR<Mq|TmJub^I?_{>(
zH;kbe5U?wy-7lK*zj@jAzriy1gEHKw;nj^i4|YFJ6N$)8i6Sn#xEebf7_Q_J^{2D6
zJEH1x*`P`M3vO``m8ij=#Mly|Fva}|jCB_>ZnaiH2iMKpm=lp-yf{jVL+ix{tYs6`
z(fZ9O(C}g8n&>j}Cx+KA@q!TmzJquxxKeg(jhLpmB<qieYB5z41$59HU`O1N_*dpK
zwvnLHpwOsg1ai(e^C5CN+ve`u<sd=nCWgWIz5*a%QA8FcS0P%%F8}~ASeAaCG&<Uo
z6@EFv4bSUl9`^|oAQH4uE;w(j>3Bre8^)TBKdN)hSQrR0me-+PE*W#JnI|I>2U_L2
z3woWnV9oIo<qa|LfjZxQ1t5hq^P*H%#|PG%TVd)-$uE&LG*Xz0u9NO9q4gB?9ffdu
zZNev(j%`iFBZ@z6W0v9_!XFfv&Uibt7a)ENh1n}AehfLV%wa6J2&-RM3ZnB1VI61y
zX9N-dor3;|;DY(ONcvIMD+Q4B*Z?bZ$od5*sX#HWqYQCfsQj1Qm}x6eL9<r>628Dk
zf>z%kf&p498Y$`#*GpP~zmGXZhm%tkKca9oQKGx#Tz4~k7T7JH?Ib2^3+zI^%sgB{
zU{CvIJklvj>`A|e0Kq0_8{PrIh+jBVHZZN{(I#i+Tqy|o5kLnKjsdIPZ0vJNe}vs4
zmt*?DzPMJu6j_;vVCk+s)|Ov?j%~?`8c@NDe!_VH)#=zOd=$IvCBc)>TUc2kytfAX
zV-|?fUI2b@>t=tcIeb%!zMSL8l=(6$wT5Q2MW#&1J8U{ByAzO2{z^=&`QK8=zLEI>
z1U48e3W?-~N^n-k^u+pjSq_0GvVVttVg$vA>`|bH2Ls#QpfROHtV`%0(0>Vb@8(xw
zrw?`$%Y{X*&ya4u9CTe$-SHxp9w3VsHS$+@LB(VG9x#kIh5P~@KISb>u60a7AI_<H
zd1Tg#yFfe=Z5`N6)_({74r3$N+Ql%Qo>*jC3YU{uy0NO&TfpKB&lAg;fC@ONpb97s
z^zfSu*zj0{fm6tQi2;OPfW>r_xmg(^INDFveFo}A{7>t~dN6?m9*kPd4LPbCTX1hv
z6XhpDd~kexf$<^nBw=gTjeNLHU|}Y@T$=i%Ls5y&ufbqx7E{{wWgIL=v9GOEaeND|
z_sXaVTK5fCqsHqX<T*u(kegAMHUzJ)H6Zz=f}nAInN*?;4R9Y&t6z<Ll}1Dl#;(Tz
z3seF8EZ^Dy!aTMHE|LVZTKU7F7CzY)Gy_G!QGpVzej@8faIBzFiCAG-jca{%*CQ-m
z!!nFL?Wqk2m5Rt*hy^<hoLb;(`6zE1S^r*+SjMARbQ_*TnbPWGcx;Jh2V+yGYftV5
zn<Lyv%l3S07Q$OJG^6|o;R*<0WW-!vdoPCKv(#)bfA~_-0)j>ZhiA}iXvdGQ<^80-
z;~Uf(FrMSs_C-H%Mc(p7p>@`~QJwY_zzY~pG~pXs_8AQv^;QH;b5s{0k>!+k;&(j|
z1w(MG2%UsUFUU<YhB4ZWteAk5kgGJWuc>q$>?pALHW+P1yqhb#D$5UQ^{*i(=eYYG
z!@xIIw^+x+yy-h4P#xX^e~p@uae%Y4A6q~Ldhs6G28*m!A<lad`0)fT!tX^ky3YkD
zu)G!k^T+_sgEa%J!{BLRK_bB@G4Nm516dL%3-%8{o0MH~JMv`xH<7#J2$2h-2T_RV
z4k2>7)V#VnO^8rK1U|73;m(Q=Mh#LPu5|G-NvQ7>>SYf0eE3ANXXHZ4n6jV|s1X@+
zG_(?RZ!y^rMw|lc_rqK?br-~chi@tQ1{N)2yW)Xrb2emgphyW0s(;8*!z>*iC|tqG
z5^sU85n16YiT0vLv8l8&@ljJBtFt0G*oX`t4Zudk4}hk==;vLL-KyMoeP#pM2cT~i
zg9=rrugYjhpmdZ=xmw0~u`#gl6n?C!TZUzI)2Bop$YlA7+BWz=PxB%vt2ADK2w;%O
zZNxm{dCPpMFF?F%U^_g@dSIv;`6Uk2o`=l=3he7-<deV>)D`}62$?7I<r>sxK2~)s
z>Wm?T9ERB7->4b$A-01suux3O_)Rx|%HksX>|4uPqa0lP(_NOxN;Ar!>gs|PAQ56#
zmJL=JDuwq7zL~c%N7Qn)v}eacZoIt+>6Z39#4w9t)592B*jR}Ujx9vY<sz;AuLMIy
zyew=iLO9hzDoUd!;uH2*iTyA~rHFE_q+u^r%j-gNbS~!;a{yGfYC(&b<MTXf_8kQa
zcRn?_4d_7#A=-79SlYkn7)*VO<1<wLMfhx3iO(Pgtc6dZ7h|iibo>X$15}#iq<ROz
z#9mMj;{oPzt$rSn!A_k7#ADnQAl@IeP@VNaCW#Ij$WlsZ{di>VxR>Lk$U)5d6BIFz
zWm90uBH)TXzgokG7!Qissp&1pKh8ll&ru#)FW~67`4|a>h0GTGw0u+`i$3+TWqYn6
zUm2V6E$N-Q^&6-z(T$0P@u8>=Xx<4VmVoiRlt0ERRzOFfNg^Zi3OZJzyMC&Zc=4;i
z<mN=!7{XuY`}o;NgKtXEvI?!3;KBG(ez7aX!U3Vp=vHT}v368opyzoY=*Lz?o?*=$
zkE@J7EmRPEsvA43Rmdg~z%`IvM!xtsKD3UlW@~W^4Okz(oH5?idZ?l(R^4S>QUslf
z`)_WUn{7R4_#hes4ROsF@=DS*V|)$VSD^VRUz&}2%s#yVMa;J5BkmvXMVx@GK^$nu
zB_SN7nlPf3vzJyFs&Pi^^1A?@^^aWp`U|QBDS4J@@1|-FlWT<5#MlJxrsn({+6pJ{
zl<Cg~3i}OfK{fHIX=e`c8PSb10MIS~<R(BVKbEUM1#cwWY6ug2WifoLARsd_jG}P#
zvG4Ot-A7=<vyH|z+rKBi`7q!SW4#T}JjPF=pHGHkP5UQ31GIEt3ZP7Ts146#1&{dm
zTyQw>q^!}pF%KKMa%)dIe$ML!oMHz!-R>{7;aLMyA@Cziw0_fJ;3s9B1w7bfuE2ua
z_RNBOP<~L&ANP!(y9T821Kss2<X^10R<uDc1;Y$)-$-E8e*6}^82lPukUw|=Z5;>?
z#@(!L@8a7X{I41B{wCY)cvzG2Lijt3)w0`8IXn0dXv(?guE$P)=tvj#*_&wWX!Vw%
zax}fPQMgOT6yo*DtHcJpF-ynx`Z{FhpEi_R>-gt|{01kU{d0~Qwp0c2(nO;bxUvij
z&ZPfY!XA-W$4<vFpjjbv$%CklhE&X6*yIyiYMQkc8utq_H2EEsbNLh#^O~AMDlSUS
zEBJ<SZ|?`16RXX!7nQHXRx^$QFhZ&L>#NIF%yaaRy7LK}=E2x?gR?4&tx$Oj+|u{S
z*@I6ii$AHmc3c+YX`M4&Kk1y>Ag(&d!==Py{Wx(j1aatOhf`FF;x@6#^hbzdfS_By
zeFO&ViLwvs_rbjrV^{xJn|a|ZdI2|M8B391-o~EG0U+E%p}jhGl29{Lycdnk8OH=(
zBbJ%=GVZDxJ1bBR1+|N~A4ZXJ!#nyY1QlNhXB;@E!s~Jdan3dL96b2MTO77+?3wRI
z0zTreB4e69Z0`kfTN#_&^gQ+W0e&HNz8gcH<E<mdaN&R_?&lVU%!deXXq1Gm7H3Z!
zI%`ediG}TI%rRy4fCTy<Ai-?<bD25D&eCIut&Q0f+UrilS|*aJxZJkqQDq5(;oC7$
zm$Qzj)3p<;-#P%m&PKkDj)uQex}Mz(AC0w2>H1Ll_SrYZsSn%vo<<E=X6%h0CGQkU
zZf~K@<@RR0&u!5fIssq@29Wq~0uf~<yfW-*2{Ty@sat}8jQ|w%1lR>&srXXrwM{^*
zOpOVC6O<?FN9FYkQ8_@1--ci4H=>^lrRd!%kbCfd|8NB;8y-`4t=~nz{!U!eu@fbL
z^Md$x`vD)JQf@(tJgL>ch$qajwR-ur(|H^sPP?Tv5Pu9$*5ViF4<<`d8t7rsqt<Po
zJ%klzgLX&7IEb$4;ele^tH4=AWw@3~S}P_I(>R|<lJl>1(R=EFFPrVh)<u8E6JwIq
z%@5$lgoz<zJ>501tXF%pgJ1~+QyeSnnY#J@EW~ZYL_Qc-ozK$C`zx)RvpUz?tHdDB
z;PPty5$zfjo)hglI(&Y#>uXy53ur3Z^;NC@ad{}v>LI@H#y!ukJvBhBPorHpB9VvJ
z)1sY6X$=dJ(>ymf+NI6A2J-I6Uw$pi=+ZCCUaq@#b+u26o;5sjscw$LOh3je*5Nu7
zK-sf$Bja^*Zmu~by1p>Fe|mU^fEL|<Y2*y^+-!Lnj+~6DV?Tc}+SPyFNONu;yoSFT
zjhD2J8G-h*jPZpX4=cX1yVZnxkBaO;bH<p{I$-aW_TRPJhv^`}-)KQK$F?tvtdVB^
zhOW(f#=Id9$H^X3%@9^J6X(K-da%_0OR3)z|8{B|02jkmm`#P18Tf=cjq%y>fq0DW
zFVq%Q<3T9DxgF`Jk%D7>i!mlU{vO!LI7040F~*m~Utw~5e*6XbEt25(#`s*}KV!UG
z0{j`{3*vv4?|JbD@N17pfurFgys-ORCbzApjwHzI@)m932IeVWr^kX_x(&uuyu!6T
zPJ5_tva!xLDdFc-0IXx$$P?okV~FPBMd^CV!w<Ns!ZId^0JBD0>6@Wgem@KcIHJvc
zFHrjCbL=gom-M={nR?sMTi}7F%^W-kzsqSh(_^=L7ULH$w{)DQ=o;<9NPP{hAP8>R
zv}o5+kauVaPs1apR+`ng^QPGyjJ9M~mah!|#AlXAy9S5HN4vffSu@QSEjubQ#D`4S
z*@jG?yP5kJ^#U}6V76@n{0Sjnu$p}nmQbq}`~C%0367LbceWJy71twG2yDG$n?#bW
z#L0*vOs`e=NAW%h|Gbd(vncPip_hBA>F<bX^VN&sDa8Ma@IRLC)3h6A;J~AHL%pX?
zx(**AH$L4gK0I16+`acN!#p?1a}j*Es#g$C+&z@@Y_M>1*6>y$u0D*oFl|7RdL(qM
z57YH&$V+6RVc;80B0{Ps7mw2J%sdYdTjn8+CVc=D`x6L*&62d{L#kpE*N0a#U_iJW
zP{G0JB6w2b2Qg)pyHgoH!4=Hf_Uva}Jd@E4x!h~Bk*n|;{~;n-rSuhqw_OY<L&jR8
z-g7^mz*Noh;$e@4Uv239;?D(?+~Zk_7kIecvsyi<bBEec6&lzo0hPG|EC3sus$KxZ
zN}(30YS39#4cyS0<--lCHhfUEh2TKOhEYUS8^4<qQ9@n@z)kT+c{6kH1am}I>6_qg
zFm{61h0#%4&MEjP+%CLLo{qPoob{7dY&azKHTYBI#_vq|Q$ehQKjt>WjJNxy5m~T%
zj1V>@m*MoxXWCG|CwB$OgBo*QL>3+nmC?hAlQTkL(lAFA06Hf0B6J9-gh>fznXrMg
z8f_S-ddoZ67^X+)#=9NgO2`iknj<5)K>&<j3rpD@v@f3Q9Au}<AR7{X1vIms+fS5-
zw^I3{Vxh)Vq)Y}9HH(D24dSvn-PmsZZ8`lToLWfaNI6D7J?_I0wL)vLKy|GD1V7v_
zw&BA<)Mvn^eeekF#yWHg<M50F(EgTN_=8G!%-Vq#6u(z}#W-U#YZJ)`j-Tn}El-8h
zwD1P}gR=M9di-lMUUa=0eyinO_n-|QYtJI$tKYp%$0b>(m{p(qjrGMX{_>S`2FE5H
z;WDZ|?|7W@zkK7IhyAXVOyAFRqJRFzWANyO<pe9IDVXd!Lq>}qJ!{#Y9erOj^T!*z
zLySzH`}8gl50{$l-)zMuxHrFR>>kvH+e$1H_e0Fd{Yo%?(XF%qlF4EF#^AyWn!me#
ztHti&$U>xI<7MLjbPc_wGaE)_sXb`yGqcAPZw$pA_UvM|*vu*%W-?Z7?m*~jxaMtc
zAG8W5PcZ6VH@0AvoQ(@Qe8#ISmYeYUqT98AIbwp;<uBgtH{RUb;ftN?_HF(L(Bf-}
zkMIwA(`T%Twref%0$+1SHg7I@M?>)PH~oXQATeki{`2F;l5wBIXEbsfcyJbZkP1>T
zR+%3%EMCZE-^zujDkf_ZOqd!Usr$J~)cstc7#uRG=7vg}Lv&nyBP}$mIUcuZt;~*P
z`}FcxBfB9~>d<T`W_z8kmHX#X)jK$?=f_w+OkXXivo*VTkIy)-$ec35m^UJpJ;wE_
zv2ydfK4U1Z=bE!6=~e2=I+I(p;qP%5Q&B8AF0_Vdwi1V+qn@@8nvgGgOo<`*`1_WF
zbjSwdRtn&!aTpz|jdf$q{Kx#pUQj0lb8z8i3%9R8L==oQvLEAMEDB<ifSV`o@v+fh
zM;O+u_DA>QycaiB`eTDT7(JNFsiGi+;aC{?Ln-bGxyMt3Hai^cc^jY2=DP*0yyq?m
zw}S;;`S{c7e+NKd42)!9Px&2Vx9Ptbww9GJ5gU_kE{Pr-FmJWMDozr`yY<cOIzV)7
z!Tw_OVD?;Xno%~*xaMHTAJjY#2E?#^NiW7ptXVDX(RXsgxMk~A=-17;dihGN{#uNh
z1d^PjQh7LKdOMLZ@=^Re5snFe)#Zr``kvvqiywi$aGbVuxJTXNsYf5Q=qylUX)Yci
z$%Q|3*BZ?j4WYBSW6VkS+(S<dh?d7k5D_4o&*(5Va=iJX|3EB*><WMJ>l|CY*g0;F
zENtMowHtql%y=4xxD>=xY~06Be;W^|8$?sJY<AXTywyWheq$GOszB_XoKFBwX>+CV
zir;v>vUppt`~_{{e_=j>w@S$Mj;<|P>x+Jtt3^k#*}bcvHT6Tcc%X6!!0hL1%=Tyv
zpW!3c)RpBgYxNhSu(8FD>8=i7wOC*A^WZ!+QCvZgEhbXe3!1@;bJ%&|g7`s^#E?^T
zKmig283|Mb%+rVpz`WTaE_|D}`*GJ+OG_Me$F+r=Rv}^#yI$eFgrF`{i2qO!zu6jd
zQvJikcgXb?T76hrMc8+@w&-CxJg~iwS~`wT;D5X3k6oCp5Vu>=;9Nxm?a6G9zt}?S
z`;U*lGt{*%-VE5Az_Hn$V05+1UrfmCZ$4}#b;TKjr7|`HL&IR6ZCFD4I^n?*aQ)pE
zeXkSy9l6><t^t|itZ%&Si>|`WivH8H0_Fdhy)(WT9~D32j><gZke$dAzHzOIpDH|D
zhu09vN+Jp0Irtd|6rn;xI5)dSU64Izm)wCFjCKqxZi!z3QY6YLyg{Eu{z~JmV04vh
zlrNS4!+{`#tPgzXi{bk`o<q<K-@*9jsKwg09Mdev0Z!{;sor=mK#E*uY9exQ5usN9
z7~VwpyXKziGi$SD5O;i~hw<myRK8)3hPx}<^Kl0xV)cLIGu%`ix*`K(<NEsyZ!S`K
zUE%Mj`E4mr_M2MyT5ZBEUU+y9Zkw>zL_PzdB05ZkKlsQU9H8CTj0*Bl5=BIfB4`b?
z>$eVcqawjh{D*>8@)VZP+<VN5UxQcDKbcA4b`C`<-&Ulc{RWK#G*vy0yt=W=fS3C0
z++`>N^p0+Pjt@Rj-F(l=vwRB0a%M)qCc?u(FVh`8;GTDZ_SCtZ;jz=A`;UqY$Ab2N
zHg8DqvizoyYh~BFGOsIz2$HtIVSbs+_M>p?hGU_<-caqLBCIBNp(kJjOg?K7O`$V#
z8+`rz#@l|w<AL^l)p{C}vZ18sLh$EVrwH#|mF=PU&!xpHXe{LR5_LK4)rH(|61*ro
z4C?jK?L?~98cst;JMNp-1d?luWCH;i9N+WtJ$@bjv#03Tc?Y8hhG>gCctsewBWG6?
z2OuJZ$zL&e{p{+()d*R;G;Psdd}@i~q5{<^pYb>JOKad(VElO0#P!+HPa}nu=|&tR
z!S&Y3?rROaJTp#XlF*|UGR0p*1}o=TdPInvf_}XZEZ?N~3a&WNt+b~m=+hSL-!eqI
z@nay_tjNaxhdI!=1Y>U{PS#bxfTA@NLV(7+U9A<_ryvtftKdxEzP4cOWN&Id)}uT6
z`Hc12Q%A&nkSXgnTGI?%`miIi-4{IoJIQq@8HinaFch1R>*L-()QQ#oQso2Xo9Bea
zXitSM8HXEydeDEKnpB}rgVuT6G$VwkF~+1z#zBY;f?x>`%ndY_Hiib~LL5S1_{-a7
zzeGs@jm1@2{`bi5;9sFV<vkdLYpH7$F32bdmRpez*n7WuelAQpulr#LDcyvpit*8w
zTpxTArWq4-pSENbb|roLcI&Yz<Nf8$b53?D<qrObvenNQ(^*%)X~y`2$UD13k5%aA
zaeDDe?Wq>rMx<{%fC^i1*~~EmOE>xUeO$UJmWO)<*5PgQzSr@>AIt9VD_&`=^OrXJ
zjq`Jjl?&d@s)Kjn$kI*e_6S$AYdv&~y{qdYpOmhHTL8+8Y~H)t8%9WM(A(7<NM`Xy
zcJJHhHwO5NTL?(A%NWPF8|5MMT(@~{p3iil-Jt;k6L$MRZQbT}D8Vfq{rA0I$zwX>
z@^Bp<?vSP0`>x;BW{k_d(CFmZ^ot$my}=*q)D0OU&#RcsfuAJ)r){)&*>RgTwhe@E
zqYuIIb&+<`B0du=YxAeX6@w<UwsgH~4}RAfyEv4g-V785zy)Gy_8F*62E2KTcasgs
z1oT+lk+SdkaB)@68Bf3=s06$>k@oI3?tLI@2@`Mdzh+p#G39)~gE@o0`t-;w`Uv6O
z2HEGZI{S;W5EMtOIU!$Sr*HqSk=V^BM2(Q2``|vL4aFXo*KHlUgzo0>6QW5dZ`ppx
zhSga2ZMjgcBLRH`o_&7>JlqR89C&`YG!vfbned!>z7w7#Fz!bkz})jp8ZfC5*!L4A
z$2%lQhL{e$P<D}S1n71eM%HTG7=V-_J<_@}ZOj|ZZ^`w(G0&5h#_kraq9|NXYyzG0
z3X#U#Wv5#qg!p<R)_t+zu^C^(C7%xdf*8o|=P%110Q)bfuSYxGkq#^ib;E@zw4wmR
zUdDx#{_ec5Q6b4gfxH0`Oy^$CFH$J{eDXuMLo&bnQ#OUS`N*E1UO(=dPBoCK|JED2
z&5tNQ0_8^xh#<N{622HVgp&X+?dQ#^!yI2H9Zm1=y#S)SP&{P+W7ywS_2;^j-l6(G
z_n+ziPx|VA0>NqZ-+Fx?{XfRh|0I1-Jkk9g>3uJN_)`5(z~@fuf8?L(|Brj`e-eIF
z@8GXnuj`}#>GV(V4=PXyu;m~3vmvM}5K}|=iu?ae=O)u`NxSVd>{(UN-(bnoW7$V^
z94mz!{6Q;+7&u@a{$}*7p^=ZKMZZ5hVuj2x*ioKPnD`zt7Cgdnh85)N&hhv!){nMT
z`x*83HopHny@&BV0OPw~&*NK9!~cXi{{($cLFPk`Z#0k^-!oB!Lc@XI)c8Ki!QU9)
zqLs_2`_pWeauzy_@&)m)LJO4g7kruWh4D8qsY?0vU#5If{O)A=s|BmJ7)$SFNqkNs
z+X-l<H*A!}Ly2t5ruCl98$S`*5&}WV!{|<L{59yW3HiwLx3nXt(k1by($YooKc=M%
zC0<S{e?fdv+IM$+URpXgekIb$@kp{76?$^~^*tWDkKaNmUzjXkB<Z4Lx<t|?$#j{d
z%aUoYq`h|9xYG?K8Y9&1k8vlh3Y;;OyueCyN575Mpp|&A`VDF`R<`WOR;gT-a^t50
z#zV!|8TqAHGQXtUgI1O{8&f=-lf7&yZT@A;&iPpM18nIl5N&<olvKJ0eZlM07jTH=
z3phP~3~dZ9?t8<7BslFpUV~;nSA=@#lLHq%Y?fmRy;t5uSK~;T9Mtk=^;y1?5-zR0
zym6M-%|)t}W?tKDqK(h!ANK<{hEi*kpZIqnkf-LWOnjicYNf~W{KUVs@@e?fGv@!x
zzSR8J%lvf7RsV#1Tv>ZK@-c0G-TAXV<m1s!`MBsVU?DywA>zidt(21JcuYx@^zw^Y
z{uq>B+K<{3n7>E;Vd|xajlUDq;A5;Yr9v&5g-6Z;b!ZZ74K4H-^b>&DdSs~@c@Cf*
zkBLgd4<!rO`sJliMxFCddi&G+YJU;5U>lwke$oYVXZ$SGAkfC4^&Q6igUjxc`l-<w
z?@CJIwDF$7pI_7@A#rrt@d)^A{k+%y)po=0Q_y;o=!$$v{Psh)d&e({YSXuS``=7y
z-6{NL;OFcFdT)YKnV}S<_rJ%9GgnN>ig}&#GXuZ(UUJy@b*_J6aHs4+|Gxy<bPBJB
zSpTdHr{m9Ae^S0ce^=ZuoVF7xa|S9>_)8zZO&CjYI)q5Uact|K8vi0c3Q*ogVPgC<
zJ^|<Jgnn$w@Z~FcSY<9Exh2g9i6`OIuQTv}?8RRS|4IC$uMf6DyFG0Dk2x&;G)?|q
zg8F;K|JNMjJ0|kiW|8C)ghey^KlQNt|4)qX*RFKp;Y*Hh>YHD3e4l~#yUEY5I`EUA
zpD;^eg(mBO4E%g?VX~%P`L_rAL@(oWh0=`=&pvSi)N*J44`Y0ujrtFhKR7;9B18=`
z7VSR1{;Bcw!Vd|w163FfJ>VyS{|x)heOEa7<`DAh-I=}Prx*Lp&I|g$Px|`(Fzq*Q
zNsV<tX7BQ?hyM3szq#-7f2RLX_Il%wUifckbszozQudp-q{c7N|HS;2Cg1LZHhkFf
z^Ia%uz4brIU+MCB=afGBpHBb(Df><G`~vM8IND(z1Am9St{+rk6DtqK<Afb3p?@aN
zgG3;2nSaVIxCps>D5UgZluNT$B;)ra%XiYnsQ2<%^`)_{^6;fGJ<DiIT@C>^-!lBG
z<snX<paPkW_8Xg`@1BhlzrMNyXKOd|whVC?e?om9=fXbDCZDmnWyb(NBDl453`A&m
zxY78qlNxZXa&7R%LPzz3uVzD(C5%f>3&qCu<CeZBV8BYnuEBMDKtI_2%P75r<t>qq
ze6g|E#r9{pu+?!Y_Wlx@fkWsx9sxpL7RuL(^r!!Xz7%=^*Ligz?e}eShRRBrfQLVo
zP0UqtDm6h5eZfvqMZ|A_^QWn<I=}+8rV#$OIP;7pZ&_=F2Q_9HZgYy?sLIB<bE7KP
zoDwps^6KW}++lyTqUz1ScWJYHFW{Ey*Gij#-aDG%5rO8D^sQsf!VJcK91<ymuS*^l
z{ax_Yv3V%kzAIrL*t>FIWK?X-F4)QEojMWG%do&LZ$mtGp758$eYNhci6v{tj)49A
zLgg(Dzv-m?UZEhB&aAJ1^{q_S2Tvu|SG0C){^8Y!-Q-BA_~@EP+ekxb6P%2zD8pqo
z-kuOh)J;JkcwzPQ@*@N_3<rRN@+e=%@}q?SULgR8k(X8;euw+#ejQU^MG>qIr$rCC
z!q~9DiRAF<(S!XXMSF8L;&X2Jc)hiGR$x+A$6%%ZVwb5UhubX`MY5fr;E%mIzeWD+
z@J{4+k465s(#I3p`$gaF{V3Jmn6&nGXZ6@#Dcg&**?KwZFYmj4SF-*(Z(99BT|L&n
zF_P#{)mh#91AFmzQ}$>EHXne?6e2@lbv_DlhQ{Yc_xGRo{e)GR=H|D=)Pv3E7rUyw
z_08e0V?_Xqj17M#zo|hY|94=!7<|9e-QkRHkZwPj`U6UI86l2A?|AH4|48WvY4gvL
zG`+QV{Uf0+`7tij;d$Y_UiF{hPW`i-n^#y|HOcab`f6(48|l=a5{1(Cuaaw`9`v<}
zTv;C_@SB<s(&wMDgzT{Ckl^R;^N(ZxNGoK^rwn<Pfsf~^{wL|99j5-=JAJ+lczV%K
z`=HOAX?p4ZYWmP03R5`mR53O^-Bf%2X)BB?17BZ?hhgxQJ~|W|9Dn5mj44H4$4Kh=
z5o!RopIoIYTdZ8p_NQk50%0Ot2Y$RMr#?3~c8$w8(6XbTbVEyAea`zu2!5;U;r3Km
z3g@R<_~`4fl_%$)43IMOHHp9U8JNLsdpLIVC*+$GM(|b!V-vgfJ9G_RF!Z;awQ(C<
zgKl_nGXLKkbiv!>%p=jeiK+IC7Z{=pJ&3;04{nbu{iVC2AG_dms4aP`<Ur&3U4COv
z%Z}Vr^A~APu7nG*-?in(&Fq>#R_*c|TUxAw(sk0g=2P<)1<Q9w{tT~%m1yv)H!t)X
zZE$W_HPv@9dN~5`UiIeN<BbVD-)J)?j7W>8ljslNXJ=yQ%tUld^+mg3o!yf?@YeFZ
zd_q=}xG=e*&-XLli0*M|OEzmyUffmkvGIn3A_&se=6AiJNaBzE5OBYdPL!s`i@Sp5
zdm?`Y?DVF(>P>jB05n2>A$&6`@)Pm_FWISAC*-UBf{gM0La5jA)#Lg#T|d7M`guwY
z_AY-#X!e8Yw>SO2yL?w70sdF%^7>f7`=#cO#QFs?Jhgwg_56PV{xLu59scC{C24<4
zz~60so+0m{AQp1>q^3~mEvB4t6?+(G$!_+r?)7EvPyf&EZ^3;;<|o}A2WCZ;q^pwY
zYDpvLxZo9GktAJ{Oi!2e^kjOLq-Q15wUVw)q*ebd*azAF@Id=L^=U4OtYuiuq~^jV
z36vWD-ul5=s(rbCBL0nJ+IK!qF5qY)=E>OfE@Ngc!XYy_qFcP(FJ47G@eUlnHa_DS
znX49$l!Mneg@)tU_OX4O!;n+hSWY#Hi;^7;odp7R0iM*p3yTyvx(g4c9Y|-vQwC-3
zVi`uDuR)q+zG9bQ^m&F1!pUy@PnRd=#6@3z4-eo!$h@E42Y|F0tC3#H^oJ_F2I+N7
zZ&T^DNb}@)&RZ(oinN^QZ)PWuz-fN94sz_anG$i)x&LM^BhJ&_;Iyf;$hEW5lhf0a
zHR(wNz({QlGB`zAvMen*#|>eBTo{2wzj6}v+}O2^%ek{^UD!GpN@bE>DSEnvp6>4S
z+<jY;p1=7`-}G$Cq-Vq~&<8yiXVNohmpKGIA0d5CWL`zjW~Pr-Y0|Te>ES9(dbTq?
zSfxo%iHKm+6K8r>+?7eHWnv?AqWJ%J0_$lc%pmX_1jaZsG#eDHC>Dw~DT*3v(kPm~
z{z}oeK<Hc0oxVeVnWXRXd-|rYjJ-E7&gj}teBNOf=!3owX43b^c9}!aSH@?6c@=$S
ze4eS&q_2$6(^Z=EwFu9*Rhsmb2os6%irw`Ui@Oo{KSJ`VbQ-6Vd`=-~Jbe~ueAzdJ
z#&;<iKd>r|#wq<RMc+c9Z((=(mNq5n`}W;^(^tl#lfF;b1^S@xBboFy>@tU-uZ-6#
zm{-wP#_Lp-CVgeRPF88scNghfsnVeDKsK8ouN&ljup4>*Qv}Zt)9D1CgGgj&-gp%#
zyx>Hk@M1;bRV`^0PAouD^eqzl7ImlZdAB6#d+@Hl=__N=N#9rO0)5bTX(oODWS2Pv
zePz5hFt4JojMwW`n)H?N8c}J|x0Ce!nM!l~<~j)sL$F*=lQwpi{Rc_j=gf@IQL!_B
zHv=@j_v=FA2NjLCuE?OV7b~@dK2;+0E$L3*t8Y%y_qaRzrmu`eCw)Ktl`7B&eVa4s
zyWTEy2>Qx+eSmotePz7ftJ0*ejMqC<8uT4V^4_A7B(K{^Ua0JHM{+uOAL%xt|D6Qy
zQx%(oI6G%H{{$3XHc}}3h@$Wp&!tfq=QEP@Efe~db*JwyZc5VkEU3=JOK<wJj72AX
zhua1Epzpd&`o?cpjU0l$GG5m(ucEJv*XLB4^p)}Ygi3S#=90jFR%sHrz)9dD5V*M;
zIhS^O^KT@1->UZ<F9^JKItcv6@j~FGioheDO(U>_zFwg(f+c6JhyL1_r0>O0rTe0<
zj72AXPqz#7LEpAa`VO+o9D=?wUbjK_v*|12^(~bKePz79s*)tHo8)~_rAgjGCwURw
zXT`d1#QcvEyzhn993AA%x)S95>{uahvm)=A&!mypIevAaFCsE!(s$#HN&4RKi@xbA
zW6??9$##K0=({D8zQuN#L(o^oYYy|O@hju?3+RGKbNtG9{Zyq%-~tl(LzO0hi<|^5
z1A*JR5%@n#^14iTGDtqB3N#*Z1!#QC2%+&hMdJ&WrqQ^!^-`74yQ(|A->Fa1`<7e#
zrnihuC%vz*3-m$n_Dp)0+hq<xZyCSCnOEp7<9CQklH4+W2dFg3T}W~tgzAXwBzK9E
z+}KZCu_Y6|%l@+r(AW*0ZVWJ|8WjK5WuW+pUloeCDT-hDWE#bt`%9_$xmxI5-JRaM
z7bfZbn^@oUma*!jcf>Bx2feLKdI#+?hoHBN=M$M%jc*yx$Eq|5F5`K)N|WG4B=}&J
zCc(>`1jh#SiuP^@{?D>NQ#W|Ju>fMr#m+4M5eR--fe?I)BKX|L(+KX^x=GQyM(ADB
zo!+hmNqYaq?3>;)R-N>2unY7-?_HVnzQ8WiH@#&%e~(!exn(?mN2N(_8PDHPX_C8y
z<UUTNNp7!`+*KgA)eXJ>Sq8YP8$8_@K(0<2e+kGPI9kZvuE@RU(KK@RJiez3y{C7l
z_t5!CdM`Knrnih$C%x~m3-m$n&P;m$*e=sIz1932U|vOV8P8{`Gzl)_`E->g!OKYS
zZ>uy3t~&`{4TA6LhT#7!3oPyiPd65rGYjMUf~g?*q<kT`r3n73N74x1<M^H>^q$q7
z-XpJ1()-0lebZaUs*~Oi*adp0x7eke+Y{H=MGir38PDf4uOhdM=W|t><d*R~PNhk1
zFUftDN|W4GPIA|P+@0Of`=4ci2fM-3jREE$zUi4ixe(;OVwjM7mm>Ec|B^=Tp2v5s
z(7U!fy-Tl6();a(zUeJv)k*Is>;k>hTiL0c1UKw5hak9&=PQ_35nRUeRFx*dWjs$-
zX%bu~!7Ejo1g~}yd^!l81)F@j0p&l-0*`bfcsCY!td4nNXU@F<G{4#{H1AY2f9&Bj
znkVd`Nq^FC4mO^>$}ccB_=zZKe1IrA1?o9b!>dV4fLp|5OAC07%b*Y}3!8%3)^`!{
zT4K^;12lX2I>I8Ca%NknqjkO%4^=0>CH;fa+8=&8+mB7yMF9SaX9B=@<u(AlL?mD0
z3~;TQmx$y~J%rW~h=K00z4^DMxBmonR6G85Y4`Sfi$MOJUI6%B8URlJSl<-v@V-Aw
zTudh0VeE7;UdX%>5^H8fkt6E#!=5sJLFgESX=@Wo=iC#=8^mCmg@9`9c*Vb9>>@;?
z#tTcOv+&q#Kk_v(!#_OM@fUvxONpSCY!Ggf^&VlhSk97}q##1k=?FWy1=)1tb_puU
zKxws7Mu0^86BLI;omo*Wj}WFaE2hh16(3dJ8azrY2>CFJDb7$xDM0w*!NiLuJn+R*
zX?Ck*T8wAwrfp!d2F8zUt~8(ZFkes$e8^j%nO8EZLfEI)5$>ljh}&7hX9W?$lC|rI
zi4=x&=Q>`$buhSZAFoGg*>OZLcKb0^+4!z4*`=57*6wK0o?NfH*71zIH%otp-*8)o
zSKKv&E119^E+rc6Dcy_BedXZfgA2}Xxc~T~>*`SJK!0O>o*Pt)Y&Z5G9CWNc--}cR
z6FTPGfU)1$fN(Uv==!=~%g%x08bkfsB5~J?#$EyzEPq_cr!Bm&Kl}RBvl91IN8m!C
z8SW>%Y3t`*D;PD(XRKv(&%4o{FZ!%pDDBd2ITCyMKA^%q8(js?+K^Ku9|Jsn2bF>!
zr@VtIj>HEHzro+HQ^T*#hwyxj%q@XVZuaa_8E~7lPdhr~$@PJ8vg}&<Er@hA(m|AK
zlJvu#T=`xlw@Q2Q%)d(GeoqaaLAjefx_YShlrU%Xz!%!0*O3R2@>pE~UP?$;5-b#Z
z+)bhc5gcnF<1bf^0+&vQQ^x2ZBJ;K5sS<c0NU8lj-8_}Ygog$x4{%Ty=Y(6)X|}a0
zH&oscd7I!q!rI95s3RDAR@$W-Q@!UNeBskQ9^UIin2K0G{F?Cg)p}1MQr4A2a3M@9
z+*n6~LXRs7A&xh=afkJMJHI9Q1&y_%BIFI=u~|KSACGnF@w*I)$YJjYiuf3*v|u&G
zgo+Uhf3Qp9r#u8W5D)71M0ORwOKYg_DSN{I3e^779k^4GZu;m9>Be|ig<3I)i3a$x
z6E71)M8FgTJNq7a3N77FAUA2Zd_!`sbdcsccU7>wRa-a$u626sSw$#z78qsFRoo@f
zj2qiVJ*y}-o0L)%dt4}%7*Dvr2$S&M@URrYa32qv1xV2~xs~M~MgGoDA;k7|^R9A|
zjDH~v7~W1v5=o<surm|PpP;LrlLh9HU_`0Nk?xKkD?c4fei9$tdj9Vi3n(U6;hc*@
zuJIcYST9Mx1a~kTr`w12Ij(?>ENc(qj3fRJUdR8061G<uqszJpU+E@#ovBg8Tb2re
z7DOf1HUGN$P56IJ$iO|22r^6oT$mWCOq5a7Z9x@GU}sE?E+$}v#nt9~g28Dr_UHo$
zXo&dy6jr+Vgy0vhV1RNl-tg}SRl2dKE9|MZ|LGHdlJyfzJ`nFZ{=>Q!H?0#9v#c@y
zfZUC)_EM&dLcjwC{#}eJLgxJ<TkHmy8NpL`blonaD1-o7rv}g!(#N+CH)U<>e@^VW
z6ESpf+wFC@R+jmL#prILNU(fOI3f}({<cE3AK*KHt~5G-P`at=@W3|TO@WPD)d02v
z7ceEk@t-KTtY()esdTdv{DUay7_*22Yn|~XZ#9aXHZ7=KwFaYOhITZ<_u>i!HAWI+
zg&bB74hb3`=q6|xKloXf;+^<#v}`TDYFL&XUl0CXJ=wo6qQBSvc_TUfgEHdtwelJz
zf4l8rH3L$6-`=TW-;Mlw4#zCT`n!<UxKu{DY+-`GA!i}$gEJRY-a--laG*m7<r%AW
zoO{5_lFEkn!WRb7&DtQMLQ@nfL217tLx|uEf~0V_+8ZvUaHvb=O9ZbC;z35El$85~
zMc|st3NS*f(m%R^>19QDcB<LN*5y_F-0yb|h4rF@yi)P#=xyipnBz^O1$KPci<KT5
z%lYeE!K2&8<266;6OR?mM1~WQ=b=C^h-@Pw%UPj9WP1i82Lg|~{tbAf6tLnC2p%mG
zz~NmLyS7;&^6ABb$P|8@`nMCGDUY=t@%f{O;FBkI*!^$S_KnYVnfP>}Kri^*!V2Ty
zdmEo(7ixAerrh}RZ$M}}5qj7Cf>4<Y(-68&A$0nE83=XgZ%%v`$O@VsVm;z>Xjt%B
zXyfw@uq#p4%Q&xS%fu)7yBB=66QBRZ3Kf5f-NlJd-dOZ+Kqq<93jSWuNr{xspKS`A
zU-?Z2I(y^Klt)&N_-vUi_{4-M{CN}DwJ&^b$;2o5yBB;~#AlEdDtwAv!--G1ap~WH
zQ1YbJ`CCC~rhOuI?G}a5b@yZ-v={zNc|i4u&#SK%d}662`20TDwJ&^%40Os*@^>%z
z+(mrupOe6+@;!45_d>`|_rC$1<VovKiv^vz8S_x=+IEG`pZ_`ooxSmA%Hya<e2$zY
z_{0KR@VNu*+7~{%*~ZD=z2LKx`1}(qRQ#FCik<vf1cVm+8xTsKw5snDgmT%NKHx2d
z(4xCD5ZViWmWlkNhfk0A+z6*X=t*81pLc^@`@&~8+cWvQXMD=u&<|OkLZ>?uoh3kL
z;lBZ$<VkDLZv>sxnbOg@OQG}iyE4$(8-J!eYI?-yf}aUKbsL}K!LEJbvzu*~{M|D?
z)!xe>R;UnKkcm*91uyzHAe205Exkt&TG$PtoeH6icXmVQcM|JS9+-~LLj_H0ohTQs
z;+=IFE2ZuVk#b=?fGQ;ZndGnNA^)jq`G+U+C+j;Z?fa*{vg^aW&$zy$4N+t#26<NN
zgQ7}vd{xkVl)XWOUarm>0fMpFXZ|>wVVUb;Aw-<UkF;nzAB<h4>pPB1chYc-KfT<V
zGXj#BXYD7s1~%s70?IuIn(jh$V%_ydWNV_S;&r%I#Pwp(kd}F77f0{<Lk};qW2@Dp
zHO9Xx#qBAHJYlTWXU__nKdAL1W;?C|Eq`OqK%Bc@qvL`u*Gs|vv!~-`Z@HMkzRjBV
zFzDwY6fIVxZr;40?qG;ze<kSp;Vfs1iXP}(dVI9#&cb*r7G*ZQa5~<lHSkt)qm2jR
z7;oB~0`tKH+#ZahjN!RB5w6w$8m|%1c?FOP^XjAluHx6^_>corJwF;7W7)?bSTWFd
z^B{6t38I_3!&N*I$dig&eMXhXaXwL^1z>%PIKRejo&+k3c4~7=jg?%og^ZVQFyGfz
zRfN@8E>7hGy=4pyjH8aNUJqc)O00{-92)xtTZA2L0e_>NxZdD)<arR68=Qt0u(%Av
z`AT1-WP7lm)=-7FXz1jiSz8t|UKL{q5no6HFK(H|&F~=tVuNsUh;Wb!AO$j@1=6KZ
zi!QR8*^XZ}gYHWsjYHYYXLyT~m!9}&Sc7c)ig~ndyc9Gf7cOo!!$;$4mhiC7VC=7y
zbRlDt9^Kwa9w~keS75x0uZW<I3k5=`14-P}ZG0AO%{|8)aol)g#Bt@X&HgA}f^R`n
z>eORDM||h^ajtGCY=<Ul#&wQEQQ`hrer~WB7m9aEb-cQX)vY&PL_qIKGw+m;k#|P<
zM%+#i#3vK?_}MT5#Lsaf)UeOv>%mVx)eLL*q4v*F`R5W~&Oj9J@X-emv^qTOVEi}8
ziX3<~>>wgf4?P(F7;jScNby$A#i==&>v&pdFo>MXwXCdTIk9hnUo7kb@k{Yzd?qp(
za<qkOf0*qcIWMR5#6NhI&9Aavzmwwa+Ct}K0l`!YB3OU^rHHmv{l4?bbh4P{jkdW6
zmLXw8R0!&6O>Dnf+8_R7X}>cRn<t`Q9RyQ=;Bbh7<RU;p<qZyu^L1;2KmwN0&DsJ7
zIJihzfpeS!ryvpV+AH_@1dSJc+zT;Y5oyS<CA^4>S7Z-p1#d{SkZUgu)OUrCHsZLL
zSZow0Ma%FFH?(PEEZuyp3EA+8vJiIzhtI~%j}2GCj#syA466uFWAPs$hbkp?XtzUW
zT3v7<j_WdRInUW%VxRBBG1A}rP%u#cp4RY9SX3K6jErIx-$NBk*+{um5&lNHXqDgu
z1t~LaV!YzU=vkpr*VbzFM-XcBS~%Cusj;4er3rT@&%#AWChli;wS|how|E*gu{MIB
z@lXEVi|qKl_EOxrcM7iLtnt<z%nla;6s`U~>9eW8F^Lr|YT|!~s0x|qRF!U88)aV*
zy8bpAk<G_S@PEL>rUOJq{SYQ-%W6Z>wNd79HK6vN<H1<w$N!G{tYwfe+-Qglw=t_V
zynrmSB?7r-JVwbAuL9GH00sWSgQD9ZgJ)xODLAs?r5qFTy>1yhn58xFRs=IjIfkn*
zXW<ow0PgEF9}_*uHX9jZYpo4DaCsXu8d3H`F9)g+pCmkRZIpGnh-!&W%Uu_2Dak$7
z0W+8l>+CvzqZve|Y1*9EaR<c9Eim!j(2ScYwR&8horMdU)`u|DNv}x<T2luBaI!&t
z79N)R2$}Z#PHiEtx{iM!9R(lbPEp)(mkT3!NUOl*R`2WmWp@_4P1d~e`@7DGWseTI
z<V+lXgb68WD`8LTA8?)JFaAQP9OqT`V5z!mYj9iYK{VDHB?<UPV6H=Z0u1Bo#&5xY
z3Xdw+P~@`vpr8*A5(b`zd@J}d&RcsDgsXoIZ&nPzf7Z5NDyqWNiwx2LMSI;cas#Nt
zJsDxSe0(n5n?44-+8t}-{qX^Cn^86MXbspKPPOzt5>lQPUfnd+AXF?{zX9)Br5qbu
z%KzfHhaA;;?cNhc_MW#)0=RHVq6-Z-16?T$#jh9afe#(;f_RsZ0+#CTUfjB&cFRKe
zxLjHsgD32#FrM(0u;beLgX6w2M0&+^ZB8jMXP$=ZQbya?rQqUP+$ZKYmxvnH203wU
zfY;701kBNOUSDi-SHSon`h^QO3>g;hMeLW4Es{CVKei)M52Eev!0kFN>j(P&uGsbc
zXorr$k;C=A<;9yZu}R;?yS*W!%gTBltcS@Md&Krt@{w<ghL93oP1uG+>yaA+rSFw)
z>M)ub^F3%sCi;%0){tsm`{5kViTFgkzeJ6f8**wcm-(mEbpp)SxY|-?pvjc{6EO$D
zQ$l2I%2E~tOgN;qNo)86`W%E6T@K~tSZCin7&@xoQ-sku4L6AJQ=#7SkNzE}r1b0S
zWv0lnh9NU<=3TC%4(n5MuvAp2M>{aBf7VI4d-C!09>=v|lQGwA3a{49>kCTvTE!Ln
zyE>k-_gkb1hrHq}bR@-b{83ant%;A2$qGso{$SkxE}8gkdSl*w8V+*OZ_b4mU1qO}
zCgaQTStoEs)1t0r(1yx(HgkQ4xnOud1bY6Mj-En5lt9mwY3Ml>gSsA>N$&)H_T1#a
z&nrkMY#tgvgV4ppz|SvHWq17iEdc!JV2%`i{_A1~envw{Q2YV>bR85lbjQyS<~lTf
zmZak+3lJSXel{5n{5*lg;o>LmKLmbqthuP}Ldf)~%O3=YV5Z4<A@dg-(ZNUeqmsCn
zcuF5%qS#R7qR!`s(&sm3x-mk-2z#<R*PpoK4lHTYJC;)pe?5#k^3~flHg<vB-+iHw
zOKi6}c<)i>IW%suTdbI#BO=GTzcGc|%hGu7yV9=|-(7>8$#FRqiFCYvr`K`$i?Nw_
z1!`35-#|4$r(n|>#0D~up+E&*L#QO~7vWTg9xyVCxXq}ztqP$_7_65#9fpW0mMshu
zaT;Pd@e7mqyahvBxE1*P!RKlCROhj-U<N_vB8l*9&fn$GV=3q!5kbcgb;QGisz2v1
zQrK*Spu57xCfq?F=t>j&z{zp^E#yt&b1)LDr!FbyddH`4Oa?ydlK6b}MpP4f)<c*T
zQXj_~CpHrNB|rnOpZI{+?+aeN&iNpPU&igU@yo~F@oW4riQn%)G$io5=Rg{M#l|*(
z-xYc#fVDZlGXuR#1-(z&=moOLtos@idYgdWi*58a3VOel;?qsYl*H>3NU*DoNxb$x
zf5g2Rcx}v>KQR7T9q>z_6@Dk-O>g*p1o*ujmB!2az;6X20EslnC1%~}b$Pk|E4?6z
z*H<q};q~tQX?T^(cPK0Vn|TDc5?w<ULg{lfW@XILkJ`BPD%}3MUg5S7xV_ZIZGqqx
zHZZ`E<lEWEn8fd7B#7UF!@#d`b_RY6y5aX|RtL?fQz3U>G!wbfm=|~*jmqL@0<Wq0
z=qpnk^U?hn>{w$PGBpE<GdgX|0X1Af_ocm1wzE^V_Obv_B&MI~X(IBp)OtRJpC2H5
z5<jOS!Kw~NfBErQ8Tcv8z>m^j_AKmaem)t6;}vQ67<9e^AGc$0I`MJQzQe}{7nBZs
zTnzyJ34Dw}_9Q+|MB;Gqalx5~z(<a?eL-SAUJMv9AFsiSwD~w6mBh~`UjF6z_~}W>
zaX1b`GR0f&y@!uW-r4EE<%xhdfy>L&c&kLM=Tdxipw5BEw~$E3WAF3D(9xNAOwJd7
zKsB6yi9O3;1HH|^e;Wlnjs+g=dF)Hf4?mxn#NU8w;%^|v<;$O>;cii%)4@|V^6crr
zny-+@>EM#I>EI;z!zJ|PmB^LkzXy;Y-VSFzc>Vhsc<VkNOk;I1dp-~(`tc@RhAVxJ
zjdDJyN2T#H!DG+!?P1IZKS<(nIfgj+P}X6woW_sSaM`!`=e?x_$`=3k+@Nqt@t@EG
zmH5xp17{;=5}%WiU@eCw|I0J**@OINbt3--nftEKM5Y3n@*kCnS=pBVocWq3tM%&c
zky$h#iUN`p_w%bA8V2lcUh7W_X)m2vhS@Muh&Lr_BK##9<%UiT5OiTYjFg)Ht}Q{c
zYs%1v&4|~__Nr8SExQh{y>dr;1&Q_sUKk&VCYlgC*VebCovCc+&8F1+!uHxBfG}jv
zJIwahFX*v<k6x$xH(mO7J5rARZ9Bu!zgeoicXl3L|1NN}=j@*kO=R}(dbZ>2AFdWH
z-85=kc6fl%#&x+lq+E-90%rUMt`lwU7{sk99RY}sVIb$+GF;*q{-AV|<gG(TK*);1
z(oOoPafOlPV&$Np>Em2)>E>KOGat6(mDagv7B;@yS5nTQa0<T;`wr~Rep41_T78sN
z!(9=ZAM<eC@h5@Ou8zUPS1{U&t3$sCfBPKs<b$;G!CjEU+E|6qw6NSnipa-B&lI8p
z>+J9Chu+*3QQNOu99ChvujY=A<$r-};O)7&dhCYW@u<=|5@mwsxLn;R>R4C$X2<I8
z^B3UZlumP00RSHLT`l?+su}gu{K)wWzJMKWzP4xwY)3xh!=(UizOUuOe#Mp#H&Xk`
z*Z8#xTt0o>x5Xi|<^BHFO}_wNnCGCE&9s^KhcOJ6cdelS4<TbL)~G+tU!k)*Zsh#f
zM;BM@o50UrH`a)kZfl@`-O!ByY`1|zK5Ih*Fm0kbdQGb`MY=gB*PIAXq(G5+gBTz;
z<mxT&_Q$I-YuM@B^&88MN5{Hx=^_mCvX%o|cmd%QY+{7W87n(cZ}_C3G6HE0w08%S
zLjQ%I56%(`Qpnh8J%WV!Q+M=3m+@0~{4F46S`**j)x?nyD4;_lHobPhz0rF4G~E4e
z{H!p}yM2LjzI_oNxH~2=T8|<JcfW`zY-PzlnKczn$R=5Qqq2Vz6v&G^kU7qKm~~@S
z{4yA*66>$%fy=Z-#{;!K?CgH(o8&WIo(#`lo19?UDI%AqV{aS*x52I4UFF_HQcldb
z<<+~jGKX6mZsqS~Wia@bM8C+L6Y}m|gAKq{zzY!dEOzE5XGOR5YjlSn8LK@t>BNJ)
zBe(Ei$M0;pGoSKp+o|Y&`DJC13EY%l1Uj&;*^dLw5Iwc@idCCy?sLpZCw7iU4cJ=i
zjD>Qr+p@N_xh3BJWBmcbo1|I7ex>B=VCxjX3)6lH;Nou?f6<uMz-X*#Jte*ExXw*J
z0ARSsqS4O@_UCbnWK50UL*o<Z+7#&vpGCI(pQrG7%`JjYxIv9A`cn8TBK=PRK1W?v
zlENqJ`k%q4z&qG_cdp>G$i}DO^-JQ@G2i&k4;p*rk~Hkln^UTYybIx05E&wjNN3wR
zX%YK<#M^M|hXO}{5`x3ON`8&4)+sR=WpFRSAevew`}}*Y8Ksy29#7Ga`-Z^R6?m<e
zPpyh*Xe)d>v^c%v1vT!kmv#nQdm`*_MmzL(xD5Q$5sMFl1&;AX(%?tgUf~xFXt;H^
zs@H47ulfP_XNx^L;8pOW8}L)uYdu`j4Sp_5AHZvU)KonMzc&fLv;+R{sT~LWKZd0X
z@J|ZGPCQ1({lAL=&}4d`zfALCAr*nGp^-QjVxBBJ4?I3lP>OR=Fgq7#d#u^CZ}a|P
zY|XA;K{9AV^&%!9gS4TzkJ!yFQaf7H>MdYGZ}k@P9e!={d4+tfb&Y(DKU4u%9lbV)
zg9armx&`f_wrCSRT3s;EqAF&@T)?djH}n*rrPR@O%-v;c10#5<DCcB=4w>tIhFf;a
z>retSMInArAEJo{vaC&}8?FReLoLi)EYXi8VmarGQ?+4_7bhu@8@?j}$VlwiO+rrO
z_z`oUo2&&2DqF$ZkMBJI;TyolbWZg#Uq?qOLCHXob?rSA$`28K*2wGTvjv|K?t>Td
zE@o~KSpPU{7^cY8@voo}hrAK`oKXS#Jct@H=riS<KIlXHbUJ-(iX_M*BoXpB=u(7M
zy3@yd8ejKCCK9X$()K78H=>L2<D^^wz;vhFqU}9UZua;?QLf-7MY%%Q6iK;imOvca
zvAt66b6Cfa<2B~!M!EfWCn@)<;SS2R+<kbID?U?Et_6)i9>`GO5RwDJ_XmYUisU>e
zQ2;n@-KHRI1B%pOIuSN$A(k+;Fl`cDtAu?qqEIr1l9(vmxDO+%b*wP7HONrtn1l9-
zj&d}KtP5>)Y)LTkDil<VJVBx3t|U78vrd%x&aa7zv1H=g@`;Lbz{I#cJe_eFKe))g
zMBF-Q^ssb$ZbtthS|CC)`u|?H{=+VPSp7#y!kX6qM%DjjnCjU7Aeuy99`&h4dg%W>
z$cY^5m_yhh(f^O`O7`D8>M;91Y8ZU=V7pZMN1A?LohCdX(!apj>1$B2HTeiP{Jwq$
zW|)eJ|7~iC?|$6XRS$W@+iLI%ISZNddHeNakYi?`#BWAU0~h5*JI~e{=&XW`SDe8L
z9~Ce@(PP(FV?_W@t9PyNx6nni67wl8WY*1y{><^Hm!s4ba=qg(-ZMUS-3k3d#oIgF
zY4;20MjIUS26Qz}%9)~<x8T0hSQQpT2O`^j#_CFAd$hAKoG+^lRB&Q->0VT29mB>{
zFa8E_o&KSI^UNO)`#StR;NX!3a6{(l=P_OSUdK?izFCd+&HGyYKLFkY^W^PV67xvZ
zq&>t&xII9PZ65q;fDbPUS|=UD)#h^|PjUW7)H*#j$phv7^!eFe!?%H5ZetZ3MnXJa
z1%^k<7qbErcA!YLz}{6=AX$o4mRO|r88^|6vQ>rhMN727SIC^GD|y!|hJ>D!<yyl4
zwh&!it;D(Q+C%%7Ldz5Aj+o~aWycLgPkzgHCyM&-&BD?kZz<gle9r<)S%DZ<WSHN)
zID0y7tq1_41?TOme4F2^jEzRMkR*PiJ*X{d9Ur^BwvN!_o!k1XUX6w>SmQWuy?k9L
z^VbLVtHOYRn+3=x8|a5uq{o)BJRIP3W3<OAFM=+Kg$IUxMCbm0!8x(fL#z|<TD<Yj
ziG|OC!^u7fi5tpJK(koYs1uGD!T%q7?;ajibv1C$kN`m=XV4%~X`O1UNx?R$sF?~n
zV<zT|4jKi77PV9@#d@PKBPfc2nF!}Soi_E-+B<FER;s;dwHQSp36Ke10|??BeXE|s
z$W5yRyyW|>ea=i~0(fh`@2`*NA#=_?`?l6zd+oK>UVH6<=YGT(qy-Ybc<Df?Ru%Hg
zmyr4rDv?j5RiikM#C|rWBI-pI+84ru(OPk$P*S=+@bCERXyD*Pu(5G#4L2}!I`SF)
zF}lLuR~<WsF#v@<>fIOUn)Pq#s}BK;y-sSC5%U9HsWrFagI?e%4F`75S|ysWUkCvR
ztf!9qfTs6YgMI)}IU{xGZbs#7@y$^B3Oe)a(%}fIqsU_~ep#?EFr^)j5>#nVC!@-@
zd|=SiWWT|yb<}Bxd+c9e$CUnt@MGB7=AO!%QNRzTzz@{1PWi)uSR@|#6XaBKP`mYH
z0H>kRr-=)|b;JMl0cb_oNY^X;rR%GAy}AL8UJsL=MB%auYnUJ3t`x^0$!A^hMRhu~
ztm5HQ`KPBiu^&xcQPIeS2?SbDlFiI@QZrQBhM2RnU8@T2iUzjEGqk$wRIb#Z-baFf
zp4Y5feLcdIYG1Yc^J72gZT&v~sI3fX@Y*hJe^7PfuDjZ;yN<g5Pu2Y`Rrj4sq~_F$
zCVre&(#o%xSCSPF&GIeXd>?-WR;z|~grec9SrMv|DL11~UlpOyy8Z-&D6sao_mA<|
z`_SO5<SF8bQg9!$SZk)ZQ@%sUrVKS82pKS8O0Cr(P^gy{unXk&%O{9$^lpqH%3Jm=
zANOFHb9C+OjzH(E<1w~P!PnGyDryeKrPW_mr&HXQe_xfjqTUje7VtdvqVbnjSW~i1
znWYs*ot|keSWkq0WR((2IEPxrQ{)*Grgtak3*Hi&iEbV%Mgu)er4#d(+GIruUu)XZ
z4N73{Y(QdY@PkZGCzpSv8>Yx(*0EC?c0Q^L%FPvrh~ReJVGn{iJ(a9jLM9HvSG4h4
z&zWD57k7!4usM>d_X}^~oa)t^LuP$xJt!O^7pg5ft=Qvvm;z1k<g30aYWF%d3p(p7
zm^J^a!X!jf|69>S9#)%*i4y;zjhFFS_*KfBh~o-g#`Tr*r&fweh9zX+<Bccr(KY+<
ztH6+aEU$l2u?yrV?-ugPKOVcCCwUZ7l7Et;)p>-vAFOENIcoe+9i-<|i~A{E7nCQX
zE{y#^_jroQd@g5?FQ3WP+fDL`f5=Fj)|fC&&RFXnEqTPDG9<AIirfVLc^;}8W)n{W
zhk=V>>H+CeI<b_$@{h{ya-QUIiTjvNw5XZRcLQdYPUPT7=%82rk>~`CP>(a*)O4aN
zTQHqy>wCPzeMFgBOksY+r;#5&KQe5$Zk08R<u|o_D|xL26F%q-o92r=t0ABZZWZao
z7WauRwB{0j#S_a}FLf^Ev0frRltE8ecl4-4OrTj2&|1$BA?}wxf=EP-UzVsJxPC%f
zHS5Ar;}1PN83~KOh-p6`4J(7}SaTlO<s=<>u5h=jQS^W5p}6`gr=+tjTuKY_UD9^Z
zs`cGX#HulGZ<5T~wTZdT?*l=8F)A995NB_fVJFW__3g4wE{#!x!50}G1d21wdzbPN
zceg6@-m&T_HVTAUdoGY=q}ST{^!pe=JMCWxVja6h$hf9as1!6v<%{{DxoY!vK^EKN
z#xdj#n~A%4RZg*|Q?GfujGOs@3>n{q5Eux-Ia91SWK4psyj5ZnKhpup*v(n>X)NC?
zc|L2%FF)wL^xNVR_;*TR(3(OgCSsSM<TX=>s&F5j;IW*fX}k*DJWe8LN4Gq#V-|mi
zpYGlCB!oWg6}#$#RMm7-#Y8Cl&pZkrhGDeDj>Q<xDQ=lfdZ3!oy7&E~J=&ceW*Hly
zVae$5p&ZZFnx|1O;U$E38Ql)^R*ujrf5aT`v)AGe>Eh2=uV22QzGj_%<pv>Z{mOOf
zCzU*6=IAV<bnkPzQCwl(KZc~RxuBXKIeYOej9-vtKc#G?P4p4L6KB!~1Osxi{4hwf
z7SC$wery~s(1CM=T$CPyMnm3GihuHfmDTYDZ^jyMv_b>L4aYy*e4tITxwTePYZvba
zsI{6}<&*r&*4ie|QtO(*JYWr_R>_0os|*j@0Z7bY<6T)A=SH!_RA(pDc!_f$5}xae
zjx>fQ7jwcia8{;(M@;GC9Mf`-#NVL_y22KLIvQh(joZb4G_Xrsc(*VH@#T20NcC=}
z>gsxgJPz-0h(sSXkq(SvA3`6pufArxzF=Q(@0p(K&k$^jgo&i-K$`WNC#|_nTJ&qp
z6$)g>lO9MaC8R`ig;Wla&5U@Thy>PX$=Q%gv})_QsWB%)4p9cjJol!W4dbhJK(NQ*
z;@c!Jj4~JV6A3&uOADK`=hkeXGTi+kNI??wMU7u5@v4_qJPPaIN_HksNmLwSjZU$x
zgGzi}ow>9E-lH=yq*h$J{~*6cLgr=2Xd~}U!g`+5P3328sF^Ahzl&^~H<FKSNRU{?
zxZFm22E&sAGxV*9@mOf8cDNN8(jgw<?c|)lLrZp2PH}-|D3;9!!fzOx6y`tRi^CQQ
zSitPLrYXH4oQTUPgcHboQLNyjpCZKE{=bxE9z+#WXwERXLgqD6Yw{JI6CV!Jnm0=#
zY>KKp#wIdPv^SD8y+!7J7pOPyUBV|}DjWC}49%3GKwV@|B7tW@+8ymR+wCjVOk>`w
z&6vRygqUXvNX;GcA|(E>jHD369-*5`p&LJR;}VT_YZa8~=o9v;oE%OyGqMv`&BVZ3
zt@&bdy11up*>FLhsB@@O(Tkh_+NB6HI*Ngf4oOGA=K|KKGd<d(OR3%dnUdhCM$NaV
zxx7u_L!q206f=|hrV++TQLm8@Oo{|2AG~VS1|k6+{yDHdxh{5yvw#C3Ab!N0wJ&t)
zcSFDk6ikR<n7UER9Y(}4D7c8QmjDW_=vYCmc^*?OOhe>y5r_}DgFqod$_itMnu_3M
z&h0-Fa~Qn`=XQHGf7p*o{Xv%5C>&y@a`S%E3Ox2cAw|+a61%_wji>*UzW-1;#W&H8
z@J;&+@TQ0oWY1J!1xep-vl!?0o4~If&U=@5G>W}QeGjQZs=k#Lrwq{PZyL&>P!WRP
zY2QcXrD9EPqboW#<m7MRI|vMi-Eyk3==g5iC$fczEqdy9sX#6KEIOxBiz~@6)t+{(
zS>1<7>Y*aezP^il(}pF4>G3-74PKRDOL2D@E#889Dq)R6GOH_xBOzVY`S}qk>puDA
zU;c7{Y^BmvYFGBr_+_p1F0D?6NMc%@Z;>Ywr$|fAV`Jar*1ks{0J|B2eUCHy9=o0I
zQZ1mkS@VRzJ_cVmMZP-HX&r5g7^hNPLsg!Q`LjHxo0^<@IEt%Q;&fB(p59(b)6-4C
z>|>xizA0i{;;~z?2Z`Q=G%R`SJ^yy!Rfhy}5uB#4d%xG-^e*$)yj^56;Z_J+d=-v!
zp39v0Aact@TUyMnPr@YaJ;JM${ICM?+hdO)gKHnyMh%Ov=UwgACq69JemsLWIT<m$
z_wA!SX4yh}a$kKy&&j<moeM{lMqM7WLZ0pGS=;*Tec519j|}C;Uwde-U58h@1>p`?
zD2Yw+YSyLw*!2n-Vuxp+^AmWs;xvxvRv(@6P5T?~xm{x0!`PD*C__elqx}ZGH6F8X
zCx@!VeuV_<jxRg<Zq#V!oR8zVlSo(Ff5E(wZ=VZIWcr-=b)5EOE_GuJV9EIq^K}~C
z`Ym6&VHX`!Qv3gqNjJDw&GGr%Vy!2xS9bq>W%<c!I{%d^XH~AmiYlCbxv~pN%%S?h
zUs5yqNh*;UE{$zvLdyJO+HFxk=9U>kMLFS!mY!ggBD%Db(|@$8(uzVKh0j92dRpKS
zqsI((J+`XnbWlxjuE1Wx@xJ(rdTO~vPmC?;ghbnN@+2g>m3ovzpXo%;51dyvr58&G
zICoF_UOhFB*oX-MMgCd$-a+q4v%apvpj|gobUA6y(Ugv1uhOrK1hNanc_8BR?E&*F
z2%A$4?<9H#&nW{3ufKJ)N58yyAt&~Fx5|7<^cHK$)1aC}?@?OvA|CYA1(nu{$-Uxu
z(maWorRIY=A6P4!`AOBE>4`Ir(3(%>Gd>^20>OXg1wm)xjNw}I7fDx_T^kG9<V$;t
z_Ryf|iJl|0<S{hC6Pfn%#m%%-GW|;W<J9{y@6@Y~`3<0ewn%hfmXo209()8OPFO1m
z9%I20{@ULL2kt!1wIlu@v{RxrtM$&DUt$jC<aENSPV@|!b4tyI!m&@4-R9lk?Vfd1
zB+*tZM`bxyt#VFZu<z$T|M^kZzf57Q2EU&q9G^4A;z!|At~S;#br@1P-H?`Sla;qz
zOMaIgL{klAQdiGO+_T;DjaYRSf67n5UW%yU@Rw*H9b1yvR}@=s{G>%-GL-~`+7&EL
zHFhWV4Vm+VbgiZ>Dh5nXs<_G9Mt>hN=M${7vp6+b<*6K}I{Rwow=O;u7K>sn#sXFA
zDXP}6h_<`5<Q(vZS-bf<ep8LTNZYimsS^ao0y&ZW2*QKM{yv|v*K5t<uiGjbsGZ2x
z<KjDZoinClhIYm@G}rD@%XB`y4B|6A8YhfiThv1(#scxQv45?y(l5U1#sZ-S+aN7R
zZ>`0WR7wd4Un(DMTtO!8?%h86OGK*69F@z@(e_B99kbeCE!je;i1`C5Rw@Jn9Fh_P
z$Vq)?0Iz#aq;oZZq$S&sO3Pgdo)WPK@bxK%`7EXpv&<*j_Jvew*YYPjo}BJ5o>Zr=
zgylJQH9QeeudUrJAE;9ZV<YXa7e~A=WqgdESTyy-+G0XE#*UZRfwE2ird5x~1DU_d
zOfFF*;u<A6-<Ri7qss3r$-f`mb*xIyFrKGTc8Bw}%J9X}T?VYD7s*tWe<bxdzl)a0
zFaN|<rfOg6e?&4;o-y~rV-SzjKW$l}j>pAy-x1w(XlLDJUfmp&)npU%8a-N4#aDE~
zriqiqP%}|Rk$@7lVhz@t-}JdhV0GiowE8Aht8EDs6l>Ad&YpwtR^1#+;7b*OO>Mob
zB+a;2szZ?FXs~X~n;{y2lEdb|!K_?<!zpDqo_A~4ccvSSN9*SBAG{{AS`fS6bpx-F
z4C!DA`T3Q<p3dMG!1|Oay3w+P*L0H*on)A9EdComh#_tK$Uh$Ma-O7;q4G$@I%tJb
zN-#;3shxPO`8erb*3jD|`9Po;DCA$OEbW;m9QxH$C*9!rl4oW4Y2?Aqe$zv;V~F{f
z<?d-RXBW38JA)(DA!Xtjr-Rd^9<D&XbQ{KzVZoWQ{H-N@hNRO=nd9=0M_C%=pEj(i
ziJzLbLVkyPRjFr{^vrm0VFkY%-(38|0bRVaq<Os`5kIpc{(Mc_O5p&s_!s+VwkP}K
zm4fmQX3M{oU;dQ%^SUvi(atbM5rP}}hTO)SvCjM=d!2>-Q6xG=vOuEMF2;BiF<Aah
zHx>nXw96Eu2m%i$Ua_k<=I4(uLnPB)iC;{3U%YHS3QdZpuA3H`h$evx+gjOTN05q%
z?le)hxv+sVeMYJw)s2fQW<-t0(LO4r8={6x%Rac>h3Bgj7KCassg%e%Hr~8;=J?aE
z<=p($bUR|sNB_b+U?qR`0leruVvGD#1}h{^MqSY=E8;zSO2oW%F=?{L+5Dn>)RtYZ
zj?HVyCwY}aq{E`-c;d(YsFinZ;Rpt&UQT#l&l(vy{XAL|uB`_;v}TE)t1R)yk!gAh
zu9?*TQz@sj12`&5bi@S+c)f$?4A(J^kub$c(6n366fO=p({!^)Y(Ud6P6~3^73L57
zm_nsTOD5=_&8Qsx9}ky?{^u50<C<vGBS-0#$CJA*=~dnILreaJZy~jo1D=-L2C@Xi
zDE;w80_!-Fz7DIu*8B_~bnjykL!qrc*%prrbj=m?B8ThdJD@H>NVBY-A@f#YWRdjQ
zGo=T@;A<o1GMSDM<7{j=6Dz8%G1#c2ypaap%50Iq*+hcAa}5J=XIp5<8g=^InYUqM
zZ^XQ)v8F9zUOI)?8Mo?GXAV%3%0?bVXsQ79;wgIT7MeBBQs?(Wi*Jqax$pcwh8o!{
z(wap<Baj2sQTgyN!AAO4VY%|CSFMg1m#V}3x0A#e&W!}lo~boA^QHz~#G=-aWYzxA
zHET#>?=Y=-25Bh#mG-6i>yvqXG-CefF3GxQv;HMQM|aHre#B^xRIQH&)^WpzpnniW
zC8(&7gO6mkpdwnsZWuoO<XgnJRjAfpK+P^63v|T)phn^s%*=@KWF!C?HXq81Juk0)
zam`JhLqa_>m!_JJ<T+xjV?dguPYg~l%z5&!$^7%{-p%f&a=F!kfFM|Hp-L6a#hp4)
zFMUKOkuoM_?3c)pTmOZ~tJZ7DD9!XEruelk7>uR;HPy!;kUeQ%lxJ^<8tdq(eF@}M
zBl18cV-YfbBqO7Sgn_$;qQ=wKWfwaA+a+A4Y2{hu@DR+Hzm!KZ>~+Z7KAftYS|i48
zyO_67r=lKj^EzS@HO-g634f%RO8`81z)GcXg8?*^xjhV+m2M|wQ>0lqt9=7CK|eMU
zd#@8Ep!))+N0-vLAQl5VYq2xQ0>^62XOphp=&q12-91^d3I)iKX(@vZ>1NW8Ast!|
ztW*r=&NllH5`@3Goy5ATtV<YMB}}qQpt0lo5OJjd>X5WRWIqNd)*0o83;o8v*q84d
zV9C$-4SCO@^Z3GAYI?0qqXXm(sO%tm7C!~+)8vTptg!p1L>5D4&N`lp*oS!<$HR4K
zy6ncBAVh_~e6fnV9~E=%KD^^$d2lfaSlter6#1)ME#OY#YJ2KSTE4#yr=*1`-VBIJ
z3Y;{713qlg;)Bg;+EFci=X+i|SNu!ecmZp9k@F}ex$}r$KIpmRy@PP!%*G3lA$88z
z-9{CC=igP6d>d%rNcw74S)oKa<;2g?%}WU+K3Gy%J4@6rPO{3;UjjDe=8tmXfa%Mc
z<-d#`%j$)Y8Zi+02>NoW^)0%?RG{Z<Y*VywJ*OYF_MY=|@y8s0CJCmD|IH2w(1671
zY&;W_VvJgB#g1MAJ%;d)xaoDx(=_gNazcd@NK^r$g+C$Ao$%EckCES#PUTlmU0pE^
z=hI)1SF5V1(5kMk@U`%@tU~$dsCd3RaYi`mNaX^72ZOBQGX!?6>W+#ge$`^9RsBls
zVOcE$WE&0-qMg>e9?=X2zC2tNrA8JwX;~^^VQf@B4Q^#_B~Fdm%4n%^{k^l^vrebd
zy#83Dc-K?T#(}hCN=vCbDz?%<*x02lJ0xMD!mQ;$0a3aZkLLjX?yC00UVm&XM7#9>
z`(ek)itp@)f#et7Ixauz`q;NM6#1a&&}(FC@kOQ~aGdh5=M^T$y~VG>WDYlg{bre<
zbPOncu%d~6X;m-=t;)H~K!I!h>tDk>3MpB1u#7fZ=XpQqwVvZsHdSR&pHAizyE&<G
zm!5qL9Mam@Gt9$>>d>QpT3`+tZ}ThimWALVE+*{xp0EOFq(OED@f47!TB(GP+*Zf3
zVNxu)k76~w%dg<aI*&A=*y=}w#AT2up<54u<E*{U8Q<Z(?+Y4;%dXym`JE%wP_wqE
z(aNDiwt$;dWynQZ)ejv~`7SjkGT!)oiK{Cr2^RD{_>@aJj}TS6bKvoG++&{!GZX2)
zZ@i^LmDZOj9v*cCI_6O@f$FftP;p4Y%77QNfm^!dgO%Doj2VDn^M8z+AV<KoU*;t%
zPr1~n0Jfe2EP=l^3%~U!DQaiK>NxyxFtXZSI0E06oWG%Hs-knO^a+fK^xSlVPaZjX
zYz5UKz&tPM;}4QQ-C#);Wob|BB(T?DRoe3P<?rJ^lg01Eo%M4W*}O<JoJS-fVnF}D
zs_^qDy9(3fu81b84{`NNgySWlbc4<->~c<ZYOXh&D*jMjIqam@rNW-#Fg#tb>Pr=`
zkPmw5(F$=%P{a~RHH?&pp!LA>ga<Imno3sqWyT=kSIQ^9q%0u?^p2#QD#(z8E25GI
ze+{C*=lCN;LwT|ZT}VADK@=BBsLm#c&?E^W<f$BuZbD-=VVavTEt@dYO%Q9nD$?X8
zG-VT7+=P~F!V))ONjBj=H{rf)LYte=mQCn(6S}hrTit}M*@Rtg!mezBhX;Yh!w9L4
z`P>8_2`2Naed_@6eUe=$XfG&Ygx^}dS4i>V3O_kUDmK7&5sRzV1!kvN|0|!xRr5V-
zFV=U-S^Y>E*mrVS$=vtlZ_<qQ44EJ}nY8~u{`2rJ>p>;&VURu(<V=J~4SUq_r$`mA
zT>?hK#-qw*14ab$lNF+3O0lIB<DL?~<nNL+H^256x9ErpqYB{9^dQeo@=j*T%Op{G
zM5E&KzunJLPY=)XE6ceovP*a`@DEnw7o=r6&?p@+c8U|Aa}*LDC<SPvg&(20CVsi8
z!B0+=g;J8lj=Go+vrJPe>B29kjn7HaHQdFneNH89C2289+<>x1C3KM>wUh8T8wBkN
zCA&x<T_%OJx>bFL(Ar4Yzc))rC3h3K+>QWMS;hWcuvOBozAkk3@4}P0F5E|Lp&Bk;
z+1V{!Si&m{jMn@(yk2I9uT^G87-lq6t74S(z-rtESBnCgkbQCqqIm(oEc8cUK){6+
z9b)ka32!Niq3&hzNC=11tKgML{s_)d@=Rgg;^_>di-==k84PmF5mxgihg(L>>l*7)
z#UAaUWU+8)G~b5Np;T~J*r@j>dVJcVZx0iP*818o%ba+f&-L|As-~(&b{(F+iV%7@
z0O2I5o56C<#o}`g6y{`@L_=*FKSKT)K67%|Xe>4-vx8D%PL3LlrG!ECus@;dPO4=h
z&jConE+O#9YLaJgfJKK%2a?K&dE|KZ?TsTOvS#$i9(2niFyfz!%=#+F03T146-BDH
zWFu_83Wg=Z=6lATM5jd9tYt$v5ZFwF%}zdrhy*IQG)BnwK=jBDjOd6D?7#4(w_D_o
zsXW*zpSbJNzU=O!(GyTJN{mf|KT2t~!iPHhX(E~DpLbA)Mf2=yL2Vhw*;411O@M^)
zA)D4VUHeWO60=N5{9@bWG(^@$^($xIVsAFK%9$#0|3yw?O_M*><_H$_;u`GDZN+-v
z>9`2PBM(KON?k4Xt~VYDsyeS5nC?ah6z5==IY~UTV)8Om{AQ)9Y1Y5r5q|wLxva?B
z!mpF6?cAuu4`D>4kNCP;lMj(I4GJHVj14013tyo1-yEWZtbrHNAaIO!ZEb(4uvDuk
z2{%F6v^;}%)s1PcKc&+XR}{mAMRP3pmq@o59h}|qTeAMPn^$aA)hkbx^2(R@9+^O-
zg;!pjOZzEl%vo?GUZUzLD6XOcmUN{LtWv;|&a0ro*8Cy;<Ixquw{nOB-}O)bm*Bfu
z;W`K3Q@i$u?=g`v`@y%2v>bf?9DLQE1mAB;`okACzi{Q&<B&n|?cD$#LX$BII2!hQ
z;!n)p2Z}ZuzNs&SUOvu~Io_2^Q#Y;(r>3t8HuWBL{kfs0501M2JTWjw16yJjMa{C+
zk;IK9p4eLihi1p6-cz&AEeGo=E8)+WA;H?W;}0h{-~dN-=ggb#_e6(ZYMWD(==76=
zBkWGC@q4Dq+3{X=_BbytDzTioV(G|`d7(dKjG*ERD?*DW<?{_yEa#tX4*b?j$0@zy
z_dpv>4L|oqlvX*UIU$l7*%39h%(0?RrDm>5-2iwW9d-R!1>{AML<i9{pO4jzH;=}z
z%&hY%dx^HJco@x=`f9u4k0sk;XNX>xv9kKPDqECj^Vhb=UU#dAuYlT=X3airyT7(8
z_IT!ZF8mQroTG~?GmaB!nN8n3{t+>{&EXF*63mgQ5o2%2*a#4R0tliL94hf5+q{v$
z>e!jw3)c}n{d`}1`vl$mc1bYF{cT|a7QPT4oy~JZHc#v&Hz~fIo+*}<jSG#dSUM!T
zGafDt3mXw%pnLWUQKLinn04$KYU1RDFK7{Sj8M=n6bYX)S|nrxgk?wWGh$YYxj_qe
z%X}`0aG4h`yLvAu=gii)$?T)V&Koy{pPNRo&K)LR$9J}21WSd9x{wf0`ElN$rzv*S
zIN5XIn<VmmDxwXGHg*w7P<x63hO8IzK9EoDdoECcZVr&{<#DO2#SpUT5%M<asVH|v
z2D){vp+kkjE>`CN%2`W`<s_WJDRl1y%;oW8MJ}e6Yyiv~XfXdgfa+-Mo8vV4d-HKl
z?@u0A3=jnSRgif~GRyn)H3tbt0l8A~wEB+BuZ7MOOqttS6fA5IX6dU{z_w+>*J>|@
zD?5`_LKZ9de0i(M#RA{P{o&(UOj*_B91|9^VgeC}d)1*1=G(Ux^@DJ*3!!y^YEQOV
z_S=?Jy-e&IFbDVN4?!~+dq+23#k{22@#|(;MROZ1$q*VxfQOH1$1YO4N=X1^JktU&
zOUHWb&8guhJ$!Vb{E6YXcu=^uctHFMLep$_`8ZX=7Qf-GX-hOzdPUWRE>!7bpE+7$
z8J7+S*Om^7A0>Fs7K%Nd`w+{h%>QUrnajvrHYh$ie^Tbn&s=$v@=jj2{O>nPS4ka7
z4I>9hG=*IMQVk{cw-`g!(3NB?6e9BKKUjI6E&DdA{868$e7XHRYo;o{Zo}tj->)JZ
zw+?`?SLdUK-8{eDK-DgP<GtKIt>E2fpIGo-Vvpe6l`qVOO3-99RJ!9P_qEEqGFdQ=
z*k{$dFZaD%y_e_S{p#KCzW1Y_?aK~8Ka5ZDp!o2-@i78IJSE=MEe?cz^R<6}`qiKM
zto5rAIBk7CU4E$$pAOL!(5H)bq2EvF&xik%v2Btmlt)x~kI+}~e*{0=fHlfR1JD?I
znWneWtTXSlWn%{fYsU_Xe>sQVx7aC-7|h7T0_m7AdbuXonePf8C$`b+Y{6^<%e+qK
zJ!Wf--IFaqd>-KxCrcg2_Ekf?Q+N8krKdtA_Ki#*zN@@<KV7&fo>xD$4x;}9@}{qp
z_o>*Gs_;3hq@mzJ@OzN*<?0lgQ~tqEDDU8}k9|n{e)|#Tj4J>9Q=g-JrF~<z{38!g
zK8x(aR;ulZ*<4phD+kV1YkxJH>!Xzi%@wpu++5>I)=93i!NOPjxb}8E@o={gYOEFj
zb^AGFUIB32!(DyZFU*aiWZ$B)Uqkjr`yLUS%>`np5SK2NzK`_OPozRQQx`Q!NQZid
z>88B!9eLv}dqK91JO9zw#zh5fY*lUifHtP6W1#!DA-y<Q8(Q+)(3yQyww-HM9IPEt
zQ#>(gXPUZ(a{qR=er!8RZN1;I*rvw)am~Tn5z~m%&J6o{vhUxHqq`j#XRdl2$+mM+
z`e5z!<l32Ob3N?=+L4|d9B&GqS21cR8aUz6gSF!kSv3{~Z*%QGk$r!7q$i)yj%+@*
z4qz>_uRCBB(#XN8h$ZcBP^fRcn`^(hFaLd}{cOSe3_D%$KF!8wD6jk!`|g7GM*C+4
z@4CIH;5}&1DR{57zgO^HZBH(Eue2Kq-u?Dz1@Gndi3RUIdqlx|i9MKicfB@#b_eKH
z+Cvi$9%J%EUi#Kc<7apE`#z=MyCc6MEwT?G{%Av#FWMftC)r%lN>SM$9i*g4gvwv5
z6xW4L=`9~yzGc7iDkZ<XZYoDQc4%T1C{DETK8&LGLLX$;ci2mmiR}7RsGm{ZY2|?B
z<&*p?C|_`25c-KDPiJjFN@{=KT-8M}Tn3WjFDC|`;>^ivy*Jm8U@n)>y7%^_{CL+_
zJ!`0BLnWi7{6I>IziiX;U-Q=!JC^e-OL$;Qe3Uw9in25N5V<p2ORgiG&w^UnF}KYJ
zqzQ~R#r$}<Mq)8PQIiP(14U;*ClY^`SunQdwnqkvY7<7E$XAQB=J`_8QH@O1H+OzW
z_z6xXwedMr)fGFLb1PDPn7wH49xjWj+Fd9Lr^=8I+Po|mM=ow8L{m?Ed)QFL(+TOO
z{KIYFX0@7!J)Tyd$K$uJ<<<J#o?+-m2gYwspJLC#n#;mutOacxpKPN(ISKUyzq+|x
zmJ_#&jwa)r2QrjTx+-(3gLJ8<+N~$nD#vC-Ni0?dF)kO8+Q5c;%?|wxq-Q4s>MWnO
z@Ls+)E&mmNv60@x-ztokdeL%04DP&QV6fJ_f$Hq^$GEqR55~5FemOllU10|QP2gW4
zBV)@bDLuzruI5g<xProrB|DU-{J0Y@auh)ncbqhZW+c+80u+66Yz2o4B=M`+M4v7G
z8+{J>nP2ujuMj?L7xCSyd~X;MQBv9g>YdzQ24b@ILuFh#$b7#~3KYzDm6AVSKX$&~
zwO@Ial3$+r>a=pe`6{2}U%`AWu*Xo|Y2|?B<&*p?C|@w&iT~V92Ep;Pa!8$b8D{65
z_@2CP$-RHVcYnX{ey9A_PbhDF!uMUD@V(~~zN^LZpzsyy^OyXYb^SllPm~Bem|9R|
zT)qCksXwh)`rqi^_o(Hw^iKgbYxU>0KeP^D>dVf=C+deU-TmKyZw|G57Wh7W|Hl1S
z`uFCaK3o43{@-r@{{a7&(6j%X{`dUxbHLYug3O?O9{bkEjURE&*b6MzM>Y6y4JmaU
z!Z=8Slc=#CsY13rac$<>wC<WVtlHIbAP1A7a_AF7Y?*lVIg1eX$ujZiQ?7jxukJ^D
zH~~N6*kHtsvXFr~#}SV{Yb;x1Ybupo80rjGdNa>hzuJiqkf+bH#j#6?1h_$$=H2k7
zn{!z5CUZbu4{V-2nf1F=-51$0yIAEko)pQjXb$K2=lJ6xBD?r#x>WjGidUlBT~+7y
zSP}MOPKTdc&YoWfJHqVwJwx#SI-*s(#$p)0KwMl=vrYmg4Aza=egeb@tVp82%WTfB
zpNW0m*eEQkv7w+!d_Rkt6nu205_x&<aNVHeV1$rmHAvQ^muKE+O<;a@^2vA@J-{$B
z4_Y}$JW@9sIXsh&;y`>N9?bEPok731Y3`Riv8z;tVKJd*zUA0)qyppFsM*Nw3+DcH
zHC$S@A;v|H14L%T%PPuOrFVmok%);($z~^Sq>P;}LR(mds&M>n<X&L98!`fFuv$e-
z$^84j1#h0c{}z9LWB-$monM*0jSg_Yg{3lD^+>s5<>!B(u6%YePY^@C2p1<1G~yfK
zDOOt%e7JJ{P%=K}9(a5hmiOkK!uSw_${8OC7A*rO$MI<{9W~D)cyy?DYoETvXJ4i>
zZ~UZ)46%&2Dx{kiR`$M@#aBQ3<6*x)sC~1~(voK%_Z8U3|Bja3$HzaxK7JONm3`ag
zAo=xU-*ye~G@$J74$DBk>9_v>?o;!>!uqoYer&XT_Whm9KSTc)lKEi$&+Q*jy+i-m
z{_k&pE>ZU8tbO`p=t0fbQ-puS%H+ULXSzZ0LSYcZUCN)u1@z!Apoc>IePPL`#^2|(
zZ_8$m66PE{<mT6Ya|;eKL?}KaEJ*mHp3^nh2$Dd0GTBOHD@Y$Tp<L~$6)27Ip)Pw=
z)Sr3H+G^uE=`0R<(M;+@X0Gh#Z_$sQ4*Tsv>Hom+tEK*X>?-xq{eLDus-wDlIg|~8
z#<>0vIFN9BS2sh|x_JSQVWNJ*P(es<tVAyw;l8{lFSup%x#@;dPwYh9yaB4{jeSwA
z5O}wXUqHERrLtIn4^q%tITqMN81Og@o%0QSi(xJ3tYvmIsRh@(fpHA^r3U`Qs0I%r
z4roYU%)w1J4CUxa{o9OErq%kMC5xuBpIS(7fBp66!Y`#h3w|B>_w(<+eVlw!2+vEu
z`VZ%i>gpV7`7H2#`u>gkuk`QPU;e+<zh6`He=fhC_TTH@$H+@ew@;Rra{NsMwEcKo
zp8UXED;A#s&L=4u0uO-$Neo>gF^qWqVDsscU;KyobJwMu|F`T1THaWR?3gOM57tHH
z%?(#6wZ3>1Hxjr(4EyxM{qmQ?F;xB?<^A)E?ChfvPQ^I4Hw)AD5#=<y-<ldY<Xt~(
z8>tW{K^71Am#iSd<4SrPdE|FxwderGvsQ`*vK1(O^;6XUgMWW={k3lWCw-3kUw!A3
z>#ua{e{#fU@Bfhe`qdh6aQs~JIqLt;u21g2-|hcl{p(lu(vtiEcJ2o!D!D^Xse$Wv
zO8rC`lkrvSQ`SCj-mHc@`^w=c83$|WkqSvA5(~G#zvQPF?<&=vOHT+<A4gB)oTd~(
z=IkH)(YK7AqVJ((FPsmbqCbHhpB}$|9o~;VJ_UZOcIV-@QQ#eD#igG8(K}7h8*$oj
z(EBO+|8rHpi%(tZ$4!e#Y57zmJefE861}<P=N^$mI5KNz(45TLXUhtp%HR5SeF&W^
zV$_~a?h<ulQ|7Q1%Y0y{M*?XS$H(Z#HqO{^1~9!=1ijU4!pwa|ZdV~N;U%&&kKxvF
z2o~m&wI{#d8-D>E`6%t7?gfw0p~dWBoUbm{aq~JFC3?5`{fJZ2Y}aV~xNNnUw~V&#
zUQK)WqQ#EFKTb5~A~Z75?}S@B<*fhv2mLHTaXVdmsQob2&N}V<E-CPgdGl!Hy^f2q
z#1o!Eb;x3+)RSp-S3^fre^@EEkLSg2mHyOC5WZ+UZXKKL$FN*K+Qf8BzpcxqeewQ2
z20*9gLF#;W>Q|sn#Q`VB|J6QPB0buwyXHdzX1CIDPwWuEq+9Qy*?N!IAAzeK)UD66
zm$>y2kL&6K*SGwBx1S$VUta%kES*z}DMg0izE*YO>yCt+6pIfO$UW9o+4_9_;dX%~
zQ(phD=RnEtMvTYtMBGSkE1OnHb?l^kNA_-@rjm$x)(l;ge8z5~{)p!%zGdQ67Ad-I
z2|s%4>US$I{&B~<mHL&BHU0E14kq2URMOkG4bb<zrhdFcr|TA-twV3O{PMu@1kM_C
zwpoM)EgDb7lL{(sI!MKfKe6I&D(+Afhg8jN{c3JGNX>VBV$EBqd3CmCiNPBi6Ee?g
zeAq`xqhrBqo?RZ#f_<JKM>G5+Y2o$8`ouc#(%X1y-|8FE-Sk9LNNhq-Q>9uCpi>!6
z#!`%TPAHwIA-<nzCf0fm@8KGZ@s2&s<~A`1`NSAhPJq0HGDceR5;lgc8~*N6(D3~z
zQkrpS(#+~HiJd-saNmB?1gwXg!)D-p?!d>t>NuTdJH`p&2GtYSjHm+iHL3QS&wxZY
z;Xgk(BcvS}tR-x)H(~~ZA#-Nqa=}5wY*D1JDn~O$2wPTAk35nkn(^jcOH|IqP4bft
zmGi^V*O1@Xb%LODoM2S8CBf(xV@smT8+@-5oNf`yig@4Gy=aTwk)qZXvb4Y9i|l!A
z$jjred_hQY!Bd_laD3%Dd65GIiW;x%Rb=YjNcV)GriZj^Uyv`HfguEVH#I~Js&^^X
zq2Tpo78;?J^?JMQck?U4hLkA-^q~r&?RJJ(h~K+U-ed;gYkk33$Y)KKd_rR&0^D<3
ztmS`oN3U$Z(c`-_cpLNi6aIjC{(-^|P=?_LrPh)MU4F2EerEZ>)NK8qjvq**?Oe>K
zdK{)B5(lxJ{nS-NRFZ#374GMy%9iQg4Z62u)(A612&Q(df1BNyQHSe+J+ohOu7Yyu
zFIv^Ex9=Um<gr3#s3diRH;|t7669BoMLYQv9XHm6%;Lr2RB%;F_lFWaM{8%bCwi{Z
zl3s}ImaipxE_34RBznH5HK!;*eD@;l)^7;6QtY~zw1>aQpUm;oTM|9j#IKUTjT-cG
zs~pvGGI=1VhsAs(@gL67H!^w;4UpJPvC8Qz8b@P}Rg1bzN9)a-K4e#y6<nrc>u^eO
z?q@*6xUi&VLrojc7Y>l+Px!9_R=v3Te`4R6bGAw4bo1Cb^VPa%?B4hqZ5<K&vb4p#
ze^%rN)znQim2K%^x%`FN521mQ%pHzBL4oLDPCTqaAUly^wMD0}aV)L46+fBzquYM_
z4!_oXEMIHZWnOk$2V51VDj6W%F6EDduaycTnTPV$8#$?}cAJs08)`YCvPDnaTmtK9
zqHj8vdvVjbEAAZaNI~1~7b=WjuMn0#%SY{;$GFjFg;-IM!AeA88j40E%1pYxgnHl;
z5_ZNcd)Yjv(mZQ)VsCHkQo`VxV?W|}l?WPBbhEhA&@1)yS(Q>@C~<W~%weTI5nDig
zQYvEoyT_eRqYp5jR7^O9#}M-CO_~2~3BhXTW|lhh?0)C|DI(*jyWJ3bo}7?p^*1&W
zDkpQeDjz#9;$0i@t|1&otPUUXAm?-EW5nN~2R3pJZKJh%1u{}|+YOt?d#6v6Wt4-t
z-z7GeBR5Soy4{l*uDldAwq`cT`hD-8=|8cxV&&RH9aArHB&Q8>gPeALcj!_sKU6Lw
znHA3Xx{-X;!4pSlWNHnPi%ghFn=+-=RH-jtUR1%3tP1I#BQm}i@m}i76C1N<$iQik
z$%VZ5GE_Q3#EDC?a+K4b4i05Fn0q{nf01{P&a4O96ctER1d*IP*2bmoxEx&0k^4Cv
z{TuB&HqdP!*L*}2G$qkEbeWDzhsu>DV=Gox%7FjRkbE5^8(%@iAp7?uW0M@PkWR@s
z9`4{Je?LoNeaMs&|C9S(5RV)ptnlvmshBE=dEnVtL)AV+?Z7szVUz1v5|aIzedCRf
z!c`xR_kLhaSku$1kXY}%nc!YhN4V&LHu*8sPbjcC{uBKGE-{Yl2`D}};JBY8<n(->
zXNbbE;4wQep>OBQ^L_Eq+^FBdeEAOlk!t(RzV%-A?-W_XabY@zTX>T(WuC9L@E+3=
z!djJXSGAstYuLsU37s?N@Bv+L>fNk!N5j`x9~hiqq^cttcy^Xw$?;we74Bk_i(SfD
zLy78gBfE5M87`!So&vM|@v{!H{U<GW&-Lr(1ljF$C(U^Lv{+@ac*A0I`i0bR(EYz9
znT<Jml&Ir!FH2fvD&>Rd-E94-L%e~g(k!j0X_I&|C7Bkb?}{wcH-nglgftg(JiACh
zJ4Af%96nsN%U~|EIT+~HIfUwC(s#?|lZ5Z4DTo%9ZjDn7$@U(oq#Dw6?*;7OwaE^i
zILXO|YaYKXXguE6Ug#pB<%nU^CJ1WqN4)K`&IyTCd@{Pw`!cM|k!awtSyA1aj(trj
zhn<cj`B1xnEAV@-@=FUvVWWnY{kb~<ndfW#xwtNQ{)dP|A`beHh6XrrdAp;5uBcYm
z73E$IL8`U%Fy<o=EmzyjN={WffJJrmRLQmH(#5nbA#kGR`O^JzV*_6A(W)+WXb8-)
z`%#t$J7IL<QIO5~q_-;F4Q|zZ)T?gpq&`9K%WXZ>h+M4NQRt0$8x@EHjA1Tz)p)5%
zgzKRbn$XxYX+p#tgP^_9JTkFwoR$>tG2G`e#|V+;=|^TGGEG}Cd17JuxQi376(u#>
zYc@dELo*{<@GX<@g@N_4NoMg^UAbqQHIP8zP6Mw@)xA65_4aK9E@l6&YM0*LGeBJ5
z=00F-Bd&?{9Dz(DCR_HG6LgyFsWD3>|79va;kDaeACUQ5&GyWC>6)^Clyk}>HKW(K
zu99^{>`Ph4IOZ4kJG|-#l=tOkh_hewtC-GRda7|6a8!%dB|<4-1H%<1M5>S%h_G#%
zs7<=j!0Gn}u(_&7@WDb|C8o#J@c6_-J;a1}T$6$&j9PpWtR=|Q;uNg)-i7jc`Bt~k
zKx<$z77lZHcP`=IMR4hPqs1&T&`SSV7N1vEig%#(7+-QAv^W*^c4zL(u5SurWil0r
zOMqDJOY?~<Aj=Q%{&_3#rsiyQVZQLyelT-Zu|L=iTl>L17_gZ@j_(*?bM*{hA2xr2
zz;(NV%M`G?;&`|33|a#nfZKBLl?fE)^80cLMGD|j2jI<1QRR$14#3Y1PylBkaNq>u
zzsvYC&s`IgPmQo|e|R5$MZs&i@LmS^0!?m=4+O8(58ejGUfnaUK<fiIrQo{V5-?nV
z)i_&a7pM{L%E5QMK;b$?QhuOyI0@#wG6&$-@6H3*@)iKB=A(>oA-v@Z-tzt7UH7tr
zcb5zAEWrOncz5-OmurhLx2{rv^?~~v1=a1l^1yY*_k>0TZXf-Q5g6QH_6pqNNigS)
zbijS@PkG?(^%Q`6u<`XPc>Vjs``k+k-X0g;g@FHw@b>hFx190C1$>nPtq<V8D!6V}
zv%6q?$DFSK-jW;NI)TFVlU4wKodk1Ug#+-we1J;|0WKKd3C0G*tDrC>SULV79h?z`
z-LH$C<OpLJKb%Es0D6NGj*nAIm1`(L2Uhioy=&`zPLBBNR`YMzZ#9<-9H!z^#J(GW
zL$AZ24uNC+VG;lZ)?>|pS;(9<I;Pt5VPnpCuv{Hos32s1BJ^l<^sdh=a)jC@<W{2f
zs0*TGQi9Jx>9b2{)6+@2!-GrIvEs|&L8tsy!U&XgXYff4=C2>HR^gT$b2f?hFs~%O
zgX!6Ogf6bZZQ`vDW_IGO&(UJ>AkMn#M~u-GT$qA1vB#=vCL$K%pIWRhhUewWuju~+
z8y|;YjQ4XyA`ct%REwIdAYI;{=e-(sE2~27iw;HM!rXEfX<6>Ljd#xg^kipQc$?R0
zyh@S7+#>r(Ya>k`*uq~~Go*6X0JWMl_$06W0@aJDY*>R|-d}azxvZn1THc>?-q-RT
zl=t<{dnfOW^1jY_PxC%aYHySN@iG%~R{rFDXo3XPh!><N;x0(ZPJ-;lin%<?2l`UB
zGOBq4K+V~?(3dC64*F7{?S7^1>z|_h^Erlf+n@a&D>aSN-9nJ8em+n?)qebg(tLUe
zT_oY31`hnqacI_?9Sv0GjXAQ1Bk8dj1pP&oX^S=Xb`y@KX<mgV{=LLJKS4!*uNo%W
ziJ~dTdZCVih|KA#-PBXKk!T{K8Iwwk`ZDR2T2Y<(ArVh$#?Cbp`?<UysPc$;h9GXg
zx(PFoU#X*?AFL93s1UhdEy~X&*SD5L?=TKYr-rY&?Pw3KE!hz6blRyOyFSO-`|M@S
zy=pFNdfMS5O2*Cm-YVzg^WWuAeg3-~J<oeLdR7<uqa&Z<r&;X!X(Hq!tv20K>xq{T
zvYZfgu`l3CSu3Urg#SEO%NgJX$v<MwCE9AEKj-^b7BL-H9oGdA&%ct85gd!vv|O+1
zK)kJ{BIN+pCIM@`&J2_}f&nsE0%!dZ(w-Mb!4hqmC$rdkj@_XgevrLO^wS%B-03J6
zks6aFQyzTwD1`Jp`8V(WRVQkRIT<bLrV4S*#2N7!La?-N1p#AR1U#tXg+$HMn7Q*;
z%Sn)C!qRY0>X8KJq~zMBy<d%&+Y;zZ@pV11-P?4t=c@#_k$iz2@$D<<L2uLEuf_d#
zxyqJ5KXi8In`*zNB|n7!L;{`h9U+w;3zOHn#mAaOj51yLQII=WYPd{hS=pe_;xbO*
zw|SEr;yYJ~dC;0fPIx#LkWi}Li&yPfTJi)eEhPa03@aRXeKyXqxcLysSPyj;55^RK
zY9uvgkOWbwmPV>6RZAg{wfGhZj!23GovKA0(N8B>nwFeNRkD@^!L(`?ou#a^*!yjx
zo4+33bn6L?RaKIK##p0Vlce+hR_RY@C4Yh;bu@(5MoXG9&J#Fj;d8u9Z=sUPy42{e
zs&;DH)^G2({s2Bv6U#)25%70K%`4c56w{%ES-%w3L&EbA>!t{&DC?s*arij+If@?e
zosLvm-;g}f3NZ^55ngux`imAjXN;(RcTL;Fhf60VBB2nx{~eth90(8@_7XBk_C9}!
zWQcM%Ih?x2TOZgFyNF!k`7v60<_EAu6~nJAqVS}&*ScruVQjYiOOOQl#PAk=)B4k%
zQiV00(eX!&x4^<^d$(9QLdFhijo%~Jk}6NHpe&)w=6}%Z0=>t&62&THUSAS6c1DU$
zwGIL1$f!YpP0o;Uc8R5{4Ck@nMv8`hJiOBL@;s0oQ0KyM(d`9xApSG5l8OP>+!oaC
zlp{e%%l~?>l%agZdQpBMo1l~Yq<ZZibZ3$qbVuntSOS%yCuFRxuX@)m;%ID`-^V#4
z%C%;K`JlD=M#c;}v~T8X>ifO+2EM9!;>;HNN#3otc2UFD+Lxp;5AgdF_xD2gH^r~I
z&!l0a-?`5ur(;Zzg&8GM33cg)O2%Bt37g2NgaP44oekAlSwg9pqF$2Tk!~0*Q=DMs
zBB97XR(Ibj9}m`}rH3)oPFS0e2uulCa8)|pOG`$m_7AcyTX&F;3|pNfS<apB>BKIc
z<sZindz>eE6fr^mxhvAe1e9K5ukGw1bn6=XpZvQ1dSWibekoF}&pP&(idK(F*SS_~
zt{s_o(T5zV6{)mI>a*Uz-L-3ey8V^VByPk};U5+5DiuFAH8^O6%R#S@C4{@DudXOV
z{*-8$RgXmjuW5+|(tV>S;@#9Vui6uzgoiv1*XF$PNYyiP>~KP*@LXbKUEPM2K^s=2
zd&K}FaZ1FhxovHa&;)@A50y&2UCoSNU5R!_U3L8DdFulNojZ9KKSoxmXqN7<pK#gr
zc<<|kJIQRanpO?-h+Iq~_-LDharf#wg^2;|eRUc^EFQ*bx>xyOGcj;^F$dFGw_B-f
zx9C$5t^{=@EE@DlBAqbj^H$73^u<4QwKarhvDG>2ebX(V;u~~=_HM!=bhQwc1i&J+
z5W)&dysUB~SmY>OzPcsRFvhDQ9I03KhqCXkT~DO_f1`p6L|D}V|DJ{9PW0mD_u>;*
z2!*a}l2QNXJ`HiDEmotOV%tI{Gq$luR`r;k8r#J+8AaBFzsaP!3cS>noRb>4)fK3Y
z6(ermdaI{KpQ^XNQJndUBX_Oxurp=dN|aiuo)Ici1#<8z>p+RQ=ni^e{`M~Z>gGd>
z`3bDn8n(2`w$_6G^X%&F<^8NJbURiO_-zZ{#Udy{hY$U&-(wBBXkV|o68*#9@K(Z`
zZm8>mrBTiJwG>d+Gi=VQmB^HN+v%SKIaMb0^rAL0$-lm7+_~u2lAsM+w1gjNoHcZi
zlgcPKsaXrSLzl5ZGL?c5_A68EV;MXk&0p_7OM9+*;8J|77@xWpRd1S=!JV&p_1!0Z
z<zL@bAf1cE=q>#h1fXsR1If-Hx4zW8T~qDrsc=7hv`Sh2^<k!S(Vdb&eQKa`_>fe=
zhckSR3X|=179Xj3JyY$Ws^j_i5Cv)OQ+~1YeRGAMwwj~`{s}{N*mHW3(1ZLFChRb3
zM;T137Cjz6T~e06e68>+)GC?tv_d6X_GyI;N|Vf23qN|&DYKti$ToVoLK$HmgSRU+
z@OjBATi~u5xWRePsez9<?>RNF!+Gyh1BsWn<7SD{%oQMp8lj-JOtR0ELFHl$vEjP3
z$BzszKi$sHR_AAz^CPQ)qYtQ9ywtN}0$X=*kpf0cWHC7FYgtG9sPU@xmj~E<M0rn)
ztsn|Ss54wK%)3f7IqM$-Wkmw;w6VjQ#K1A*_gC!ML9K`wBhmG@<5onZH%I-~-C2>Z
zwqg)4?%hw}MbYkK&&uOJoMX?{4sK4M5B4nV;tqW}_oV~iduq`UZKW^H;MKBCu?Ywz
zSfVBJ6CAukz{4R2+XU?R6{SKtx>-)`g}rjk785*YuaNDyg4cpoM7mj-*UbjEo4Z%B
z?iS8>VcGDYayYOsV6aIn0X;2}FQ<a1xAgaa)Xg)cT{efrJfrrM6Z!F(6>}-jXL8Z{
zRG_|9wN$JuuKh>;3EeSJS<i`Smw`<UJZ&8l&nV&&7oYS;XB^XYGD4tYJI-)<!^!cD
zKJ2Lby@g2K9FQ=!_N#nycukJA$@esYekGlEmPWs95X8QI0JP?f{+B?jV@1X)#HOI)
zqujPAeG?kXJZ-)7kV6p5Rw_&v+}AFPT0y*s!cmq129<i&>(p6qQ6Dp3$ipXQx0KH6
z(Z%llV~KAZ#yPvT__k~e!63IE&wYD3u?>%iXUwyFt7U&TGxA{N17D8~p?D@+JS;=w
zcpsP}*o!+Wv2Rp-yg8Zp39(Z-f4|J){Jk-@!diB%XkcS2xDMruq>tf}9_#m{@vaM!
zWQ}q9-&rK_l6=Zcpw@@fDKp(#P$EjLtNUtth8xIBPm2HDY$&EvOFN4^nKf!ZiWyYw
zo=kzvxl!n$!P5h~Vq>N!J{lf7o4<!@Noh@-JC5zI_-oCmdV*Q!oTY@>K}UFf>W9u%
z6q)tzx`KO1d?gMY=J_ScE#*YzmO@@-E!7S7!5hCN4i&PkXO>m094;*yU#C6eoRaCr
zS!^1~)FL2m?CbnJG&YhNv}O^IRw|OE*=wmGvq<Qs=Dq2OTS`1AD4m(tMeY=#2W@7A
zYDv~RX(ZXECB;CXE#pgOg*E@55~(16ec~Q8Huh-mh}adh7jHD@lps5yOF8_O`DzY!
zx5>s3?CN0m&oQCf3A1N<-MlBd*U!D;coTu796bubaSfU=K<yV+?G^u`z*F(fYJYXV
z`R}-P;I*Rk3Jh$UWcKR?vTH5QrJY`n^)(FJA%xJ9tn%&X7@Xk5)ux^}7xAD#%00s%
zR4}b2dz>dI;0bvG<H=1tgdP>U61&h=#wzvL`(&(?{X=lXic5rW{0qbg<fpAlK6|X1
z8@PS}iQSJwmejMCdWa-hh;NCzsrwTjiI)_CE{ct_J}?JR=bQDWKa6{h1j|o~%SYJQ
zfFD=LxhkyBJ{C%RaD|q9gZ6leYst5qr<q#vA3WvIKTbEEuCIAP4OoHySN6WZkzw;Y
z5*CqB3#Gyp-Ez5LojYbPIMB1{&1Hv*lCYfQ7BQ{)1iHtB(8I=75q3lP5Pvm0zItG9
ztgSxzLQD&3f8W5Z<;ON>F2JMi1a%9*8PFnUg~N*v&HT>6Cq8H{#r%(+x}i9<oVq=B
zn0(H6>84!gOg}S^f=YRJkfM_Q95U;1#7g7ngTpJ#!aDs;#_Jp@9}>r>_#x?frAzY7
z$!8rUIm9bzy!l-<XO30IJh4-pL0}^pLeWMJ<GS}_J+Zb-m*Ue09P&%&D!si@4ZEPr
z3%cwT{GqwbkFBBqaM*e2!=hZQwu|{Kqz92_LTE5K$Cq*pcBfA+jZa*#k7{nw7Jbl)
zR&Q()9(xNcuO!sIeLz)rh@I$AU~O1yutKSuhO>TrsJFjaWR3n%Sz2H*heGyH{CVu%
z#J?Lga3Q#=bd{_%Rx2iKa{~9N1l6*bI>&1eT3Xc1;`N=uVsF^+bLE^kvl%nwggIUu
zYLp$h|0z+ISm&Kxpwi#Dt_rjU%_&S;54~QBQ2;b%7NP$r#W@Ss_$*kX04onF1r#uG
zt#yMX0EzY^08N$7DwDVi(0Bpp3INK%W4-UfLyw6dbB-6tO61W6%Y{?GbD+tmSECS~
zu}cmB&zt|s!n0V`!;>6N&`0zKTOSkO(A@QPAiYtnP1e`eA-wf1vX96shO~wb<R#cI
zUJauPiR9q*m&VQ$c4~bW>fnrlS|;b5)SrnKlpmbB2wKDsrMNp$dsytNaQkg4%4)WM
z|8Tl?FOi2;eGt(Ld~^7B^M<(_rYGhiA3UCz>+@<qYa_TRwn{d+6jnmUE<l(dFnk*P
zun%$$GaeY;uzm-<%QdNsB(8oc>Tz1%xHV*SU_>@L)^8iqZFJzMJEX(tZnuhubcbM&
z?RH6MNPE5UcxZiwR!^ZDPEYfI&U@@9{|wQRU(dGxCAa;bt)`xn@;B`cUcQw3<g(>o
z#dfFIwE|)tgG%QHgciV4dOh`8!*faQeUnhbp#_ik_7-_UsXA}eOQhi9W>N9#;W?+*
zY)I@KpxuGn{cC0Cq#ndJ>m|0dzJRXvp2-#G+RxgFCarJW_OM)_t9#$p1COym%eF$d
zqnC5N*5ZGVTYKm%kwaMPzCw#UadGW0NRP^>(zRWYKnIu9b%#<H_8Q&mEqjR+5;>xf
zKD6X7$PJCW@i3#}vBlUcd_dZfE3t%DxT|&*k2(S)o{L??)t{l=x!PVvT8rd+&CSQf
zyU+4SHiafxBcJD8VnaJP0X5*{oK$h6+{q!BX#Nq6>dc-d!H<?4LGzD@$;G`xMq*bj
zzKldglUlP}CRVe~p-jP)eFF_he^YuHOPtocltBtDC)eQ6!~E4k)aLQo9V9FI4TB#^
z0za(3-JocLdR6n&j*(4z<M-I(sTlvq5chTU=B|iAFu`pYQ$b8Lu89?LqO#N#J)>+j
zoL^#eiL+T^ORupS;bA1^r(e^W$BJPg=b9?Hu@wtvH1&N}wVl?blG^+NG9$L}8B|$Z
zaZakNQa8{8t=Lx%K<bXf!|nk}Sg=Q`W(z-VM~v;<U=QOwBr{gQ88JE|=HPS8F}tFH
zceLc%e_(7JM3dafTT*8fKWG(Q@L_Kxb+%mP<O`kNP%`VuQ0hExLI~r$g`9keM7j6N
z`XSqwA_Iv$D^`T+(+P;7B^Fa7u5~G{GXP>=C|&%h%H94Z4(BiH-ksL(8gZTG6G|&1
zC7G;`&U2H*BIq2Ka?Cj_&fNZFUHXbx--|2MmZ`E?$USA8OU>wkmts?eeiIp~(0Y)X
zNRvAQ-0UnzI)O{D-6<^%IIUw<b@{@LGN2;Z>~fYoS4|6JU3)LnWu1A?Fps_E{+?d@
zDgK}d2R)&Q;nZbb#L{<Vp>sB?mcA>!9De`R$9U8x2K^B&)R<6$Dq;O%9x}shb~E18
zi%z!2UW_I*stAiDT&`!p^(SS<sqxXxlV#^PHQ$Rt)SCWtS(S=9J=G+VKvi<E>hQpX
z(m3{jSFAfP`=B?2Q!jR=JDV5?Y@4L+yot(1AH;+y8wTr~UgyjI^!!7|VH^oB{{TN;
zV)w0Am-_ZQXRkGjq{%{Bi><LmL}4FvD;Lj+J@+l9g<PkhY`Rz{w&2fc-Ocs}-VxP8
z$IiBtFH5?z-Iuo?CB=MZU9B9`x3;E-%F4iKi@&BsW|Qb{kXVT|=_QtY9_(o{i5Um$
z_?z<V`dPPU4$5WP9p{iotOYoAi4gYOeQNBSRU$+*|5LvG{bM|?p<ganonSTu8BCGq
z#PVmC!$GtCwd6h%WZAG5-fB(=V$QFProzwm=o~{aD_vjvTPUTxzU!N}XI<tguuX#7
znWboi-R2J}%?n0z8@0n<L&om&%+jYhbuyZ8@>=pX!LV8OtTBtbK(OckpfYh)%!|<?
zexgwqWcp1`&17U>X<Gh!a(c98S^q6hH^Qfb5K7-%Ef$S|)>mE>YINNAU5n7lpwth4
z`RE1ESQnJ#RjQ5u8OUN4QxWWy#E0*SG2tfZQL{uCG-l7WuW|8RZ@dL?@n_7s809q3
zHuVyUiJVBO(4zy{hR-asfBtuHoxha2cWH^&d4n&EOI6so&PPq`Zzt9;Da1=qG>R;~
z#eO>TVZYc<z5nzh=6;|Ir(#sZCTfjiG$Q7s6-@$=0{3)4lA8&2=XEr%At(jtw4{s+
z2f5{Qt=w;@*1OSM8n7K}dk$fHpWhE*;7Z}ldXjHW@kFKsU;Cc;N~fJQe1J)<TuKwx
z-BLpVI60|A70z&Tk1M5Qmk#7g7aJvl4Ig7*Wye71TktTWRpDXp0}2m%>K5fiMr`Si
z1RZ!2ge!WiQ7lo?$XpkGx5Gi_^$WZTI%=Vzn_N^>JE(Bx1IEVw_^_WlI6hYJO<Jpl
z?-t<WK|Y8FrNYP0cqs(PDU{jRBK}(F2n*g4vm6|#*j+7?6|#8Mv@N(L2tcSovoR@}
z4KtaSIAjGHVzcVaIdjznx|}ao@srS}*x=Y%cgp4|tdq#WmaH`45|~{3*hB-)(j^ZL
z>)yVzRQwFs(R^q6F`iX3BnJ$qF=|{<F~z!tudZqVJ5?p1%K&sK$1R<0Dx=<K-Az7H
zbjXIaE^2(Ykvh}$Q<l*IwFPdS@(1J~*oSaWNvX6R;I>ZLK=X+eXIge&-q_=AN|!BG
zTbqrH-CT}>coz4awTqpeWsuDFv0G%YWH(>UhLhaaN?x_(tBN^`(be9}qtKNs=zga>
zky092H&VLK`csu0e$|q{p~L1?LE@Hek5zJgd1{jIahUtL;@6>MB8kg6adQt*ntXau
z8J7NTL0Gkj1hs-!c?ilw;Hq$Z(t;0Zm(jfcUQue_Qc7*8{jC92Rw%Isg?0@J?bc9g
z>}V#sQvWXAA@H1AE6Oal@17(Wlq+QAy4t8w$F)tDhgV7c)@$2w%#u5C{EUruc$bD3
z4g0H43nCo8hmK2MKn~a8$=x{&5uk@L+l#b;?*a+j2FL)uq3XJp1x9>I8c8QJ#{}g9
zqph5Pt*_0_-+t>C%v5@-mS{W}bz}5;2Vtd~%?WeUA+?ciTu`aF{9SY#F2C8}1XUfU
zqqZA$bH{UKadNa8Cmb;3GC47lR|;vPJdhqmwhY>bsNq8{u|~yN_bM5mE47E#I;W4e
zYv)_Gr6gJjn~H|(YU^sF^IJbTfQCD8v#a6ScdME`M%_)e9BWx2b})OXxFZNlw||p+
zT0{fZNxyT})DQnmrL3(Z?s0xkcYkNNzt{6?FXT_oKS|^cG2}6)3oQAySVLrbpPilF
zUqJ7$PFSb5ah&-LW#vuoBl!-qMQC%^4p(T)@-w;G>s66Y#Dc?3l@U3pHnPh)i)(aM
znn)-EXXPZ6tmBNM&-NQ%#St9&q|%z1$+3e-A3ONU{lcDIcEE$rx{G|sgTK4%7{yzR
zo#PF>O6&EAF{v@+vW2KI%JTnKSin5&{Jmo5mw6gBPmUT_agI^^W>WKYwld108o3;N
zn*4Hr&3gD-;vX~L7cwuJB7P7@p?H*9N8Bh31BOzHXIuJg<q)Cl$O!pdUs{$N#-ZJ_
zeR5duDga^;AKcmeJE}y+FA^Sv#xd7ty>*gsf|xGzq&%c(fS7Uq_(ZPTt~KlDo@18n
zHO{I`pQR{UYMTcWZx0*OMknfHUYsX5MmIN8mz^)xyjepr;&Jct_Sj^svJT1e7KUiE
zzz=nR2UumsakrC%OZgQa+bg7Z;YQ4OJ9%<?W&evu+PW#T$VtfDZ~gc;4s}*7b*S=C
ze*5iTO)_>188Xk+X~{0c)4(Ku48Bm0y0B4H9pqo1x;l)ltxE8O{&I<5mUoeV)p|=J
zdPaRoW>X72|4jQ~_>aCV#}_|zxBI3^N3>;sU&2T*FUGh|Cb5bsxR*k=-NEE`;$tP|
z$(hdI3O6*1a4b>VtDV6SUR(;H_xD73+`U%j%o-V4XMjh^AWq4fIzN^2i8a%5hFnCq
z?7Ha87S0myu*%<Iv636)*k4gDUTJLN_!G+cKG-AtR+Peg{s^tO_4J!RvUtdvXWgOp
zZThJM@U#B;9aSLIv_cT#jh_nm@fz6oz>SyVaYXB^m)w_Dvu@R|L^7>{t;-em>P(=#
z1+9A$`1;HI(fNaeHj2tlYtwR3En+{YLCIGM$uA3?$ER5@TqpGD7eROy^tnc@jf$@-
zssH?~YIa)BbeEzN1nEMSD1Qs%v{sO8->F!r!+&bF+j8G}PTteay6SYDS{acEoQ0R^
z-fAT%nYrH;oZqyb!IeoE>YxAUknU~#N_$F~(F1R53vXob`lM;dW=hn&ZW^%@r{E<z
zEgG=cWDRWQ<Zhr-Ct!Iruq~>EcSHhfXCDEPEAn-0_e$Rkn+=T|Ce-UOsU>X8awk)L
z*m#O_Oe6E<cMeZ+17o)ycvnmM75SCf_{-0J^YrV2v+rg}7XhvPUx?OO{#z&FLM4_4
z2H<QC6m)5cn;0r{USn#qushv3rHQs9hsql0ptf)-8T8ZZX3V0@gejDtMjNxfgRv`i
zu^dtyA_tl-6nxN~2(X-fRdCiFc7>3DBi8}HmMD{IIKUoQuPrReR{3OKm5&K_x@VuR
z7oF|LOfu^qLJO~0Gg#wfxfNqoU;Wy`YO1i?)ZmISw+V{Gy3#d!oqauDob{sSJ(P+(
zdm-U2_iWMkjM*Ixv}p<C)!tBQwAX%$2YcTi7~90o5_Lb2Yd=-`xU+}KI`Ap>dxZ(*
zwU^Z=!sc~Bh62W_C1(qzq^<$k4YImo3*wAgQ3f4c=$G+HY%dAn*9+sW1Uc+x%=AS9
zo3({M20&HAtvu9h2s`Lm$889Lo?iKy{8#KzH~s#dPWqdqo970lX1qGPP>ml$s)^M^
z%=xZL`m-lRYnZPVx_p&XTtBbkn^LUnY7^TqbOh~79OOFmgb<2Ag=GB-0%$m3g|vpX
z(JGF#j_#Ch1h!!f-DG`Pbum7Ttd*P+jN;M;-CrK{z6(y{U&wqjZ$7FVdX*IkteG8(
zdS9mnX<s#<BwSFU>s34O_+t{i5z!j{ZJiBAgne+{+f{gT^-Zm5%ckLzR>|~973jaT
zPsGT;oa$MpsAVTGr*if&OxhXzudI2`8Vg~_<jm36>2qexdL{E}c0M`VsjVvBt-YSj
zmwxM6fBC9b*&@Xhsf*z;Ps74w2OsD=J1eF*B<tieqAZz6#sP%kg?I9nPhaME@E_O1
z<~3!h3!td_@=#!t2Jr~D*cLU%ZjJ_ew8WhVW#%QpP~fFm7Z>b5VucI`GO;7fdg|e*
z8d}5_tzk7QU5C0kd8f5)x4Ud<&9W0~P6}cZW+0l|rHw#FYZktPBY5DY+4q~1@Q)O0
z)5vbMr=f%=BKV6;XvWK-L6~4?>`N@m;=F;QhFTG|X5pUFdnIxZ{+6@hC@K|@F3DoO
zt&(`T>im<@ZggvP?cy9+p)Sj#No2F~F!^x4VTEu!LORDA??%15(8b$yYGhR&kJmkc
zkPq(`MFdZg`f_>Tc=q_p*#l7{CROTz34V#cJHaoG0R$J5v%cOc!J&$u!J4BrOOy=+
zxeC~0DV-{l$@d^>;VKq1EqOe^M!ode{<h*xO?(pQYmMhHYRtf@_mpm)N5p{lwC2kM
z?7&`a;iE!lW<9)>S%Nb}8E3|4X<BlJ%CK8o__`oj-Iw~!J=p<CR#7T*mhcUCq-Swe
zWZ1AHd-m)BtghMRA@5pFfRu-gYsx|kK13wDMZ5JK5z^F#dS;Nbz=<G&W7DW&CEjSw
zw@9mrHApV*j&h%Wj5)!Fs5t|nDn1APKkFo?*W>AR7gBPdLrbg&UX$a<tm}V8s8=}q
z3u%l^q8?xObiI<9?Z4CeXjPAFoubjHKH4YKH^m1jJdIiHl80J=5XEh|iBy_hmf!4c
zG&}nWy@*j``A8Nta*iNYFpR4P7@h=%Z>F#NwB+B^m-Vyf>qX~LkR$uQB84^n>*Oq`
z<0aCyWKdQt$>!&w;QJd=H3yO#nWNR(LfN_jpc!KH#o$n1X}yOr!GR=sE{mD{LvmoE
zvy+mO&LxiHftFkOXl%46@nc<fI~u{G!dUD}_-g;~*Qjj2<xc_sa>Z2H*cj=WYA$BB
z81HAQl^kKr_5~h`AJ$n{?d4`oM}80NcA^u=X?A0FsgSSORXHw)H9OF$B_HC=SX=cj
zC-w)LSCv)0%dD&vIcvBG6h){&uUUUs$kB1{<&~7;tC*4beyoVwMJF5En7hSPf|-yT
z9+{hndc{)zgfj0A^V|{^vu4>Pavi}CBThq_&UGjG180c|%e<MW9QMi-aM+%4K2r8`
zcfA+DjLj}!nMYfQlkkLf;%$BLE<ee?tv|nJ_y3vf_JMM?2CP2)M-i^rCkuQJ3!K#)
zr{#J;mmtGCai?1RoufUyzVPD9hpL_zjGya&r#U*0sF-TCVYzYE*Uv0}IR0k2^^aYU
z-H*VKWCuc>gBz@@D==P>bxVW^8>{&y9MsRHy!ERUhI8$6e!<v{8>fnVBY3HK57$B}
zd0+CkaXi#4!mqRDJ=F-SG|5sad`#xM=&mXaCJ@r<*Ek3`fP5sK>qo=p(b?e2cvF54
ztE%hP&xYKl%n|PR<H`25i1!)2YGW)c8-q;|lL*E(&Oii`L4J`~GD3euOO1FZiH?E1
zSwK?5vLvM}<<QS7)|)@h(T}>S7qQ;hq-L7(o$wVHNN{p}Le>eidgpE%C83EUw5e|C
zk?Hj}-omEYCW*_}@K-lp=d|r&o}$J&Oo7e+g5#R%J|5jY1<&g3eTo1NMsbBD)<NfP
zprW!0<94aX!TkX)2vT3OF;U`QV?(xC<}(wt0B)`MCk~TW(@DWDd>8(`@Gi3B%M#Mg
zUW+el)YzWA#fjB9v4oHA9Zn+CpJhe)Z>lSsq7qMWk9%R0wQ#=p&|dpe)O)WOoiUiJ
z3zIO}J&wulI{frL>YlFcYkx=c5i4=C`p7vYEqNi6KV*!qup>Mew|7z4=(f4~orS@Z
zy|bu|)ZCp#D|m6yNyxYkZ)fpP95~|dfJ$X!?l2OP-_63cz`Ymv9Sq?ir#=C8^EG6V
z!Sd3QsqTz&3$RUFg3ptEu`ubU_dFLOwhA{z?Kv-1JT&E;j6+S9`=L-O;@h)5QN!JL
zOO*Wuinmnl4dE(4c(F$^FDu>A{w~SNufv|olXX=JJ87S*2KtEKp2Pa$(tA$BEEF9}
zg#T`ceFwuuc9vi*$qZ{@VK0X08{JS#L3fV8p86)qPIr=!ue*>)xNbP#-3Wfn{CH95
z#M#7KZ$0`$nJRhxHTF8^J$hq=Xp>VV;$LatZFv@G&3RjL8E;7WJ$T}SC7_F#scDJ*
zOXnpWQm#<Evk?<q%ytHsXA;#&4{-GI&^&)3b21Y3UO<OO6T+S>urB%u--DCM!C#3!
zb4#VukE(ar)3;i|v+9Wv5<45))!(cpHaVq3n4QJjwGSRges}FbH7|tNI!?SbLxgzR
z<?Nu;D~!vLoW%0N{c_3=Q4H<647EH|s|OrneVB>fm5HZz+Rb5lfa7~w;ta%kG4PLs
zRoBbbz)2)z7tv7Q6>QKXEDl$c)EggUj_m7Sec%l(8R1*lcqd}65OR;0{}jd&HeRQ<
zRWHG<qu!5<ZHixO$>p>VPK_x?|5{BSipQgr%4Yr=Z5g$TDSs(BF!0D}06II2x<lqa
zTX?B@IUIN+sNKFc=wFMcCfVGk^2R@GAkU?lfrC8tfsf+5+&)FUFJtPZEA)b01+Do3
zI!c#C@buLi??l<MhWs=!?TrE>(ZKU4b{pOLWvRmUelY?$I4`mGxCQ}Hq=mp0(du5x
z$@~>RPs~yh_OV<`&f|@qXvr6N=mTq;yrs_WMcYZ7$aA>ro%*Uh^wvS$zH?Gzj<s&N
zK@0*Ilsvdg(~vF)zvy1I1jOq-({sJwF*h;l)ncOMJDRWPBGQjdpv<tOJcHhRC`5<h
z_6#+;=S%A{s&jbA4l^Sw18kq7$WxRZFalY7^Z-q332|%+naYwT&0@G?gNS37ks@cj
zt9pd|8ZAu!vMFDT<;ck$E@J<Q-6r}I3Zyw0#wg#}fx8wxP!2dO4C+d~SI7YsHb2X6
zz3~wT?GkUaWxHoL(l5u{MSd|`Ix?A)oq01Ot9|Fk*K%+?JMG}t@p*Dk>NpP_2(8+p
zKhhK&%|%_eh|B{V{;#MMg5^`OC-z-~73yWB6mSXO6~edy+!k%2-gut_p2kP^UtpdN
ze-$rQC#{*Zu+lJ#0To%7j1dIy9}1(Dc|Z$c<Nq>0w_aQ{43xyXXhx8M`A|G6+&9K^
z2M478DpLiD)0(^a=5*<J#j=B*(B$!4TX@lU<0<E4obs1Ois*ON%2|Y+LkLaMC8Q>+
zkxdr()5!5yOkk@jS~2Mg&1AKwy$@t^F@2^TDK;s^(AwT&AEU?Ejf~=WI!TNvw(HjC
z;?mlZjZyVW{#0nMJXgwdqUYP%B9jN=1H5%1M+36a0V3voA`=k#F&DbFNf?5DWtT((
z&5K|Q{Y&IdH*9UHco=4AbZkN-5%N<Wo<kj9tzWg_3cR7E4?)jS9<7rwwqd6CmyrYL
zi(a*PIt;c#>49SRCQ_E;%`%_ebS1Z1SA0c|k;=rc&7;Ixm=%<$_r-Ukp0fTiVoR)L
z)5HeNIKu%^-?LF+ov5tIR~SX>@^3o+D_Zh77+t?mCyR(CFvC4D;2PX3?F%3;Viq)>
z;JHttuKL9fWE^SaowiDaqQqeD*Oqk?3#_!d4d+Q<wU0SKsljfkP^&5yCZk_i4-r*C
zZwXt?y}b)wlaQQlB_bb&np$@;Ca~--c{77kocNavzhAX<e?g`{IGHA{bb1C9DwAlY
z0z~K$x9N%QhuKc)-A)rCw1mw2EZ#!q+$oq74+{lapHR(@g-<zw&9qwu%?JRBr$I%+
zTnnhENfJIg6(Kxc-C_TeIYy;R`&YW;^HsV|yf*A<R4NGgv|)++kgNg}D<n2Z9Zjt+
zt^%sY`?k<4a5Yhk$l$7r*VqLPo}T?t7EgyMkXpC$v9*Lh>icvVe{12_<T!&!Q_XF{
z=qt76SA;SCC54=w^Y@RKt=*J+B(E?dXw_3#6{2wb4tuVYQF4+agFYw*husSi<&?bn
z5R4`3KRg+atkfx|{KU`Zh9d?=@vY-11B@nWei=41*4-0hN#bl+X1J<1vHJg^?M>jL
ztgiq62_z6@nP5SKqE6dUL!la4wL!6FBq0+GiaYLUwUmBqD{4k)U5HKsJWi*gRcjaf
zrC+<)+N!mRhzem#aI1(*sVgqE&lnZ7tt=w>zdz?bvxT+x_s>h2=ef^a&OP_sbI(2Z
z+;imDts?pH@NnBy2!j0}7L@<+n~u`0qL#He2DEVRP-zHn!Qnezgabr!%t#N_^duC%
zZnnzvTA^1gQA_n=J8=$#M)#YN{G>eGR?RHsiHjqv$R5M!8AQiO!Q^&>`!)>KJ5P<N
zV+}o1q=ofI9qKTHt`GU^`5%CoB6&8A!DRTsf9pOuDq9Te*7-G<3rkp=E4X-HbI>P{
z%y-ITM}KEvxJ_z!XV<^>NzR$Q74R8m@2m0j)#V&RYk7&zsV~KN!K*L#M<1fH_2pP7
z#Be0j$dwa}6qb&WD?5KC6>EVMiz^LOb1%~avACks_5ApwZrDQLK%x5e8lgJeHW@G*
zQ{mK*<mRKCc{kV1kRffHa{l@FBt0%V&3A>~2&T@4^eRI-DK;2pKiY(g9n2Aj{MMZ>
z+(?dG_igu-wJP~;YB#M)`hls5Xbf;Uf)U$9RHKQrCVE#RgnVP5sR<b~30Pr&G;5+n
z6z#7K7#o;^{xcr&=qG`l#DlOYEt@Ffy3E+(y-UzqajNm_`#IgaT~tENv4=HVYz3<D
z_ZwY65AD*JW|G(ItS?w!*^%Ra5L%h@Je50hjLAG{T(Mpr;A(=hHmuRSt;{T>iixRk
zEQRIhs^sQ9rXSb1z<GlH$#9%qLI=h4Hn5ewP|0IB7`Uu5brOz8x=Pb0t6+HckEy(I
zY{%s<KIEqN(^Itj@TZO{1o?P@Jla66Gh)Yr+%^0qT|eq5J`YQmww831th#LP)X6lp
zq%`?XwO~Bs7<sC`;`NwuAyC8Y^Fu}Lydma;r~ztd2OqOd+}>ZZxsP;v=dys=@+h8D
zsl~h^b07KR+%Ci8q2)^45i{OtIqKAr%nf2g|8osSy+5ViOb7qSy~I*$#NoeaKW1Ao
z>=ug@N0Z~;Kf4-?J=lrvk*U4etwZ~X&u5y;;3q}rfra#6QR?WwPBtIFT;7<zqy&rb
zKZ5p<|MkaYHA1TQ&ZBgXDbR({wx7yWxE<SG)ZOH*KOsGIQTJXs{TmzCQk2py`y^{-
zUcu@82BR4Np!+zNJ`ZW7F?}^>;2-%>_@W4NARjm*obwj2pghxYXZq@hTwCJS(*I#>
zOONyCp(!e`G*@kk`b$^JWayYDj>UF1bsig24%?mec@uI6R_nM3Ql;E3tHr{w5Bg{2
zsp!Ubs#e=5Z8Ms}Z6Auku+GTq4oA7TT|WF;Z&g?6wQ3HQ$=>YEaNB#lG;%66fpg?o
za_dovMW}eIj=nfLIx#sr{jZ;+>HmIURQA3Zm33lN)`?NsdW^~rMW<&*W&HtNO-2H%
zvNI*dX)Ag$54M@EV>m`z&;9GWIFJMkkRMO~Pl+~!xiMPAH#3AlDc8@#)T&D(R;z9}
zQ!!#1;GpKO|EN%ht7I0YJv`M#n!LjaA}*YP33WBV9i46e48zTCvg+t_qoc!Z-vU7n
zl%7sNIak}h6|7z84p{WE7YM$b1BDZSkQNRHOU`7i+@BPHVO`I{;*DM+3AfgnHGFc9
zb+!sEUfU}g7>!;qa$J0xGFK<LEUX*+XUVB+=TPozey57jK{_rYzOd8UkrFY$k57$W
z>)!<Mu8)qQyk(-38vpybbhoXB?N+nO84<<lCNH8O&1wJr-$|3A5dh85F;+KZknf;c
ze<{aQW+vA*8T94g990PC0RfygDQqvzmiJifV4VqU9iyL$9*9=3C6aaUSLSE#cBZ`&
z2mB{_v4Zie!Ru4PT$#VjK5W;%W@_=;>G&5oukc?T8~FYC7*6EUv;JniB^$WpbRd1_
zs^*pD;#bBaCVE>MQFt7m9w#ki$Uk~Tz$VyV1}tLg-yt{h*NuJs@?qR!91&t$e<3^9
zCs7&eC?5ub-tz;bF7}-nNnbhsaqY*fEf{D<+qu5+icKY5&07Ow2(ISs5AStX^E#G`
z16-tO)Y<-0;vDdn_@?X=BUrSK&cs<5=4w)~nd)--FgaRzaVkm<$(4mS2HXFbwLiSt
zFhLt#W8U+>OLFEnT2x<@hCNtRZ=(hY9FzFkeFH8XMsU`|PWd@9X8Bv)5str&CQspd
zN47J_=C{nizJ@V~kZ?2!vbA{?^ELerZPV|H%q{$8j<=U(nWo_PdCRmSb8e97e0~f3
zLCc;Q+f_`OkykNs2tW9RqSXQ|-m}ubw=oJPNVXq^6y&D&v}GE~Vc$DSmQ9z#WdP63
zm_YT%eDXg&n#Gqn0t5MnESe(zSseDEeB_Xbxwy_h>JO@=c%Qm|uupY&L9p`5jW_;Y
z;@;s=#JFn+svHo|K9b&319g4eZd6T?>FxgkaWHckJb&3zHM9SdV=<G~%*X=D@h^HX
z|5tntI2tSjwJ3)_7K>5AgUP{qaj__xE;V_aI1K%bX0`w^-e_IJ`jLM68IEPWWjemL
z>tA9%XWRu{?8!8r`>@%k4&>3vmpB35)E2>5rF)3YC-e8bq$0U_c*}F~)TLrw#=*UT
zQNLQEINcOOVUO^f$)R*5^pNclR<TEThRoa9BV2|u?3f#A$94yZ>WJ)zb4UfTzvg?3
zoya(cnjCnaWrzcPy4xU3AVH%qVX`Xmq8t88m-Ir}uuEzjC2(<Bm;zlmSTc0|8^$5t
z2V!yLfsNk3eg^(v$Af`D_&oggaAXBn4!6$$IWh9GUpN<Q&=a#${E2Is;%gT2b*90A
z$MBIaqW3nVm-M(wX>Dz}T+<<Q9UPo`OPJ;tL1~H08$n<_Q{7!Dw(@>6`ItXq`(|$o
z*XrxGALDKNF}~dY<G$K{pa`-32Y7Ex4W-@@OLbSB`zV#4^kj~OZ)p8`KRe&=yh!tL
z2^r!VwzGaG${QHXsAIY$<t<5WJa&2vXS4@S-`7-cret__tpvd;5Lcbq!W6eJ3x_c(
zaeXpny1uOyKe(s`exT9FGzQ$DKj_JPgMY*lx?0`uQ^D`wgWrL{_uF~TH1Lw&8Ep5-
z;w5yH=-42j*W&n`$Bf+V_=tt^f$^*<|GUYCNH%^ix~lZBdm0MkVD2Km@nvM*QGDQh
zd}A80d1dt<MiB{fh5GpL{1JWXYDV-+e8$dDk{c@$-SKooMdoZq%SvS?s8nI0-6&s~
z*_ZMQ`e1`zWbc+evh|*^x<5JOQ{gY&;0FjSim!YLkmlo@?gD>bBJ+;%w|;x|udCl}
z{B1NPv-R<JR%(~{+p7To-p0&`9Qum)f5r6o=)s>7f7$+J<6k@a0MgyY--mTO!(W!b
zi|W6JB0HqNUj08eOMd^eZK2(uzj9NY?vnnlKIl{8FWbM$!uhps{C|MI`^dZ_`pfYL
zs&{<H#^(}>>=1v&^S3-te<Q8bF6pnhe8mp%M`R3^92`vsaB=)<?^*u1ZT#^{`(7F3
z@9M`cg;V0J|AFMzlIf$+zog5qJdV!IFRk|2BMmBZFC|20l4XJ;dN`Sj|5R}PnlHaJ
zR#1M0d)amQu6``-f+tw-&9g#0xpj{#`V+SL*yCFIIsVx?v*hf=zglPZnVNV%JpZJ=
z>64#s-CREXjqv<4OItUOX*sNQ^FE2^T4$DBmiSBS%zpKWm8~=T*Cduw$;|ReiG}*z
zV{Z87jsOqjj3s_W&a)D~Am_n}+sJon;wH;?Rz6?O)JS(8x*BQ#mOXt#t^KBEnt^WK
z{K)Cx0%NRvvMB&MG0orBGRZ0kY<jUw;vn5QLeJu(SNpDkEF3yFFEW3!hA{Vv6emXn
ztt_#&ZQm-$w_lZOKhQ68PXF<L*Kau!&9CiU{RB&XymRkCd%f1D^FI42`2$jpE$~JB
z@33*Z#~&Qqa{J3-e*aWNOrx0pm9l=9_Dc*aTtCK2xL|F>-VM3p!J`Y?{SV{ESJ?cm
z*ui}7g|9FEr|`M1=EtWuKj}3e4=k9EDVvXY{AbB(=o@QAntYS#SpLz{Pg=@aH<xnL
zK7GbVv5z`RTh5Y~hw!XRB-cOKuqWyNLT`#?W8#SJn8ULLxjWG^Oz)HQOUJIijB7jZ
zpq%6G#*w7QN8*|Bs;`ueT;DP{xv}r`rywHyUnaZuq>1tt0-2$M8AQfKauP~0tY$tW
zDBRvf<An~jBtG_o%loyC3x^UP$X>K<jZtKL>|erd2eRr}mXfD&c1pz+Eyr8MvLD7<
zbxA?RgR~TEuRd*L7<bk8w1i_d>FP_a?Zb`(TwL)@04HSLJAE921-nlC!t=i}ro;PS
zRVMj*-_}ii!)-sb3f?Jcdn|EOZO8k4!|hj*5{!!C0_wI5IPJS()s&+fN?=_0mnoQU
zmUEej@~!d@^3_~vHCe5~^BYQ%YY!Z^fB04_TP$k!qOYg+-y!|)hJ1a}Zq7fOG<%VG
zN9*$r<m;!IXS=yR7s%J1mHH3Y=iQXAZy)g~`PX*k>u?bt*@b+)`ly}ZFDri*$?rE%
zWH<3wAYV6Hsa@i)mwdT<^7VQ9eM<ag`&Y#OpB`Jthj)R$o5;Ll`pe3nMfIOVksac%
zSO0VJ^`6@nDqdf<yFc7b`Fj6-KPCRM{VS5MZ>aeX@OKKCcZ9zk$k$<t>=1v&@^OKD
z{n%GjYM1m^T>k$*`C0-FOH&}vB)66Y^0jv)U}oj(U%QuG%g1^7x}mWAH+HxD81rV`
z)i4>TaG%+5ZfC>!5@4J4&hHHSO)YNKE3zaGt<A{2E2$Ly#Zy1if+l4dCovCqXmKsd
zs1*I-h5k18ME{ZbY+Y}iIXTp_Z>nK5nzdWBzIgq#Zs+VF!t-aZr%?98+}4?K%Rger
z`PUZa?`$X!wXJU1Gdv&n>76BW8nCprJF%zr-y;yn$`bE$ld=q(cdtL2fVI>6A?lZ0
zQAVgy<Oj3%rAC~Ct&Ar#eH07w@2Q48&7eNHv7}`UGQ<cvBMmf$8)$|@&%VKl;b&OZ
zlba4~*~={Jm6UkH3U&Vml{Y@gx_^Pct6uA8dT&jN;`trOkK0{8VJ`*y&+rld!Tei&
z_>Sjae*MhyuLXUiDcT0!SBCwU{G(`nISG(<Tfec_PT<e+52|<g$-=+w{<nC4+|^G5
zSU5lX1oQK)FBQzsvM<}qe=<M+udw_I_p<Bq*=y{*O_bwF9RG*gwgRkNdwBnBomqvw
zn&exlT`RCJ=?pc+)6>e>Urf7k-=agC0{RNi$Gsyv2z;lO%)vZ+ed4_sXA56|s4K*3
zjff-MVx%FH5}#c=wkwhGp7vK)pfblsH9Y^c=t$Xre{1#FAHInnpm#o-9=F<iVdTce
zPd)kMlicuI9}nMy`G)_w^tjfMTM^`2M#L5zbuk8uORGC$eJ(@*F2zJ4wq?%AJ$RDU
zy}Do19PYbX_Fj0@G@d$?@9R^%A#-AVJ7cA2#ZhLz<{w+;>}zDqnzgUFg_3Mio9(8`
zl)0Q{RUD^NSF8v@3x~r)#vhNnIoSxRe;c~^4Yf@6HZJ@+C71Ynk^%{Y>ozX<HVNUn
zRdY_mZso1;79?SwI%|>f)A5oy6&YPLSZw|16nxXHAKv%2)Xuq7{m2~6_a*CwF8mJl
zbU);ud>-~$+5OVME2c_+v3B~`2w+-<$lt?FY{D5W$<)Zj=<1f?*_?x~_^Ol+gF=ZT
zTW1aq&8SWxkHdGW7^0zbx8*lqEZ{dbVyFsgL;2d)yV_b7Sh}$y@!epa=#KQ~TaPW7
zj{m6lp^B~&yT*~@Z_Eti+iu@5Wo|G1gH8iNoei96?otO*Q>=riv6AD5ZAS-TIrBOQ
z?pNn@AfaCE4|44fQ~Oq<-5uDj4rF_(na=Tpw$uI&bujSnK>zVy_B+2G_F50FuGnq<
zx)c4vA=HxRtGm`O*#7EEqpZ+Sv=>ABB}Nx6N(KBQtJG*o(SXa_((RZnHqF?j^wK}}
z>fi0*-R|G+tbd0V_H!5Vd!H}<zgYhUe=7LX#2$6}r{eVwkn-cS3;2&4y<_-4{rZ=e
zCtqOvbMojg8slZx>s7w|&4uNkcQ3mxe=6tv7VLI%k9R@29l$1W^1mi4FQSMZGA+Ua
zfN@5DCU=Fn2&c9j7IXTk>z6uxUKD{3$gli&e!$sgP=V27P=5tBD&7SZ+tx3?aH}q%
zfpl5pcdZ>+y|0vMu|-fNde3$n6thu-TT=N3MgP0%kJ@W??fvaLYW7U$gw8bxne4EO
z*%q%aXi@xVm-yR5?d$@7QWUE@Uo5EH@Mne?<w#LE1S<Y=xeOs}JyCyd6XJ-&{6A{v
zlV12MV&;L5z#MO1w`ejA`ww1kNX*t+xOI!2p&k+dy4(N|h2TSn0MKjBkr~EZwO{Gl
zA8ze$Zc0zz2BpT)x1pMN>idQ2ZcG~-I8_duppD|KWbQs6I4SZtxC8%-;N`KY5ht_t
zPc>9yFD1W$woKtcaW0NG%wHfL7J7xFSZ74-|IBk90@1_=9s;?&Dubz;f)A$K4={>N
z%OcT<{|!EBoN`XR7_3%4uzQ<X)x9Xc-zx0S?)sCw_hK9GCEv7uZEw8G{C~~Kf^ES5
zombf{a0R*LV)`$ihZsk^*>`9CFIP`~7F0xlgkJsUgZev3xe~l=x4+g<_ft7}ChOm&
z*XV86U*yVfTR;CcrFTDVni@@&`2zy@Y#7S?Ewf!mxlz_~dC<`cXC2oHpx}SU<8A%D
ziwXpEMeqLppFUvHw9)lA$!oDsNUPt9c0a}3b^BA~CG!)<rOFH7oiDYFXU~q>+V<@G
z<~H|A(O*1up5@wK7s1oRt{J!$Qmw^}2mV7!$dmkbZAr_1y=j&CXzZYl3esgCG)1V#
zE=y~6Uax7HJ|_9)h=p5P87DNmxSi-G8?~3<ZF(&X&vcH8l?g6=d4m#o1FVY@$9ud*
z-5t+&5{bGy-YzP2@ItJm@zwtDcQyg^pKnulx{}gW=noJ=fZ%_e(bp@R3$zn{LyGWY
zd9(zR$)cBQ+fg|SYbp6Zf)()IvnnGaKex|>IaTGZHzc<<gxemcF;gO3@%iM|<6WHE
z<kk}tN3_m7Mp4O94RLj(vU`867s;&$w|qOfb#!9y)|ul%TG<+E?ejwtF;NX9j|wF|
zr^^QzB+5V?Q{_w8<AjIwL2649RV9Ff2$D_FfpL$UyH)>|ansN!MuHrvd~a#@^ZEJS
zI`i02%kODrvIF9_fG@Pp{A#G>CekNadgf~DZY@H9+^L;(baH*klGn@FH|(*J*Q1ua
z-fxeUIdkyL8RT|wBscdDx6KCh<mPfk^9<<%bEu_qN^)!{L9mu7-k2#~Ot5<=b4HDR
zhhB5h^vqg!J&SBDe=CwV!LRo;hDal{;<L|{@!W)esfW5-!|Gpwn?63z7)0HKb@49k
zqq+m^j9ESABOyNA_I+Taow&7=QCJw^pYh|iM!|L9Dhje|G#ys)z>b6#ueiX*^dtJD
zG5u`oOpHUB4-Kwbvz#{sX6K)c-`Tk_lf`nO<CeXt(;%%0#xc2d@0Ke?51p+u_al0S
z=pnYiXu*v7-KhO8$In=_O%n3I{7<0-S%?vz8-9=;;IzK~6+cW*BGS#~Bd=)Z6-V<|
z8WzNSb!%DPh`B*j>etT+hcXxF4bw=FOg;Xk_@lBKGhg9Dj!yOmmj^2+w6fR$!wi`s
zkaT7+>5dMdn_&=2Wij3CV{}9M@FlPJH%i)f$?JOrlw>4s)hK?Qzt@Retmiy$x5j5P
zH;NQ7Ah~((a9gWA^bfbEcnB0HN(17EMO?qaS+S`tyHq6NZ26`;cf`A;k=UCb1SAGN
zoAUTPK8sJTDs3!J94*646A{N49zU5C4s{<aKH=~vVjcOukj0bDfnQ{4p`@4=5+jP}
zz()Ts8vV>kAk{COsK`S`uZ8?(bjvl<$038a3`}l4B=J9VP@Qsj+~6E7W1){6U#PGy
z<@mz>-POc{+<H>t%QWM7l4CkzIfN44G0UNUC?ozVcv92x9f%I$aq2)F41W}BdoZ{D
z1o8z&11@lMG`M_rk&F77-L>yhd$3)@25zW>=E1V$#g~VI{QBoUjPWDRUK3wa$htif
zGo1%{*3H5Gy|0+pv5RGSAsh9}8&joG3R}oG=P)NHM_q{H@Pd!F*ylf1ca9%x<5!u}
zL?yl|Zk)ALN8EDjuf;O%CTw)}K2l%|a#wcg9WT*4)crI6b0=_*X7=RX_u1r=AzgON
z1(DEV$;w($t1b+dQZ1tv%I@G>&3A8UGzirq-@Sxi>#QA0NWj`^Aj{hOFbt~iz4Hs|
zTl4ka^}TS*j_Q+x%)<I)uWfsTnj$AFRZ>!>&y5nD44cpx47F0-Y=r$)bh_V&QmykO
zbT>M-QNa1P|CqXU0rez1%Do9Qyl1#v>si8_0d|>#AO=UKCd^1~j3jXOIjfbd@uO!+
z1PCWT)C*>_meIRa--ysX=L8%&y^?r5HA^S@L>`&G|H24QOV;)sb;b<bR2>Pi7l2|K
zHgQF9@u9&Tzdw~yby5!fac3tNpy<x8iXL!a;u*z2N+llWCsLkRCS%^u#^#hp#~nC*
zK6QL<%uC$ahuM~fA3TlQ)OswrvozeU3+i{mtq)^)xU+%~YWn50{(OwJa*&2+Ujk=H
zm#!dl$bdG8!#8!XOlNe71JGL+-K)=uuf)@fT6wTL5dM*#SW=6bZ6oSAL<u)JykvfF
z3e!;1@KT~!A3d2{Nwd3maoonRB$xZQ-y@AIPh68O08ICrABxaidYnNw>ckmx>9v?-
z?{Ck(vB&etkINGejCl!5=z}w_(Yf6GU}Trvts&L`b3bS7E8#ZbJQ&rrSzxoHx|(mM
zlk%(+-A@{cJuH)t9MwTzt~hscRMig)Na!iz-*}c#0RBE%@I?iHz9f8IDM@k}&~_#@
zXeWc;J}yp#+rGz;n9z-mxOUFy{@zLjPmjTLwPPtsv}Yc}9y`}RffspLh9iaKpE_|y
zauZtjuL-<a2Hui#@5CA2iY0!zX9)%1&7eZVZXUdEkYwPA$^~APz#EO%4{8*6k!`@!
zhEm{hF~7j-`eC{Qkp#oL=#Rnh7PP*33n648<jPKw@OA$nDfux@Pp_aZi$JDWW3A*V
zq}C<d7QCAz4irkGnZcBFPXl?%Qtk92s%@Q>r`q%4NgMEz%wKaQU!=BT`na5<fC8$n
z%4lSJWjVK3mLHKNp!&>}1+ZLN1k1nL^RS$mt+BYRy9x@|7ZrZ6pfFB_ts}jl7?g+N
zQJZ_`QCk3(OXwy+`$0r6&BSLv`Pgm-u+if+^R3`(#C?4r_{tKkukY~H|5F|36Q?gY
zFvWOk?KIW)b^@mUTicGo;rYatX0g=)OL=l_Ij&EJ5Gj&Rdtq(_=UAs~d;0?(G$$Bk
zAN4Iyu)i#dXpI5a@+#XY5;X%raYg5?18M#X^YM$g+CNYb74zHJ>0>%rVS-(3Rna0-
ziR+|KagyC`gh_|vsoS+QuqzI?-ON16pJs>Ke$G5_OLSA}kCv;8m_X!Kf&9VtMEQrE
zOj*ejd*(%k#?+(AElo`zHDnu0Jv^5xCVIctcYbbDg=8BNzxLrfRXeOJ+;$Aj`}bbO
zwp1g`9;!mEX1^OJ_fNhdZ2qr?8>k`#=SV2-Sre*soc7LLoymJuFBQzwFMkLQ>~hA>
zi119ZmOlM;ChrC)L<T$TkEgG$@<(j6;oK*lN(&3A8*Q1~TzbX9xs^~d(9mEd{FTsX
zgY0}G&ow1hdffA>e$=Hi#%{fgYn2bR@)qxV<2-(ryx%uI>LKBzvwkvmahqk==bb*I
z`&TB9FJ1#g{)DvT5#q_Fhh2GCB$Pd*=VY#{ww9uR+}g^Ix=Tp%`&1n+<w?~OKlAvJ
z=rrtXN_%teq|$i$_+|-ED)US{ef>(ZP+goKN?28YQ;~PhqDcDsjqdYgeWn=72qqH3
zkj02r5PBj6#R=O`J5@R2U9I=(mp>jC&|L7SQ4bzhWglHA@~+w%kVn(C5r`?=&dS<D
zS<#37xJ5IjCx}WQJxiVj8@*Soz%>-e{G5MmpMaa49;?Be)L9LVJTg&Oi+_JD_jSCk
z%%Lah`dwZ>z%HgdGaE*l^(T?LjTd2?Jlcji&egL@TnqXakk4C&uze8TJwpl(J()^h
zXHq-wf?b_ZPY*7nl&K}E4NqQR4!5_fTgl}ScdHJuN&Q0V)*UvkcG*UBo%Z16<(9L9
zE01;2W`D*#L9=(u<4}2dqE0o7m*{)7V6i~dk3?HlE<XnsNQKqt{lU_awt&}yH2A+c
zc1XxY&Xm}cnK)5MF?h22!Z<saYu}x;hXq;5qTvtGI0;~a(?{)u|BI7Q^|^)~#MAdj
zJE%$Bu4(0g^Pz7K_1o`edGwZo>dN}?{1x)YUK2~#hUJd@@R*sIC~k|u$?ZtO?bE~=
zu3avu>%3JaohrJJ=p#J;R8Gh-3=i7#m%VKMuKpZLb__Z({i{*|5o;Y64JGCYp}I8}
zPoGema~!!&p1};FSrc(hH)>$CDRoYyF}Z2a@T|WYLxig;V9SCKqt`fg8KL0Ts8=?F
z!t+lUsTZ4Vt((?{XG_PhU@VP_<JFoUmAcgBU-$@W8pkH>T(09H9gpxjr!0AY5AVZt
z>FSY777(<i=c6~cAe$a^`R5{`+Bq%JeQ|*}g&3cEj!)P9kw~c*NB0}K6nBvRUZXaf
z+ikfHUjRP^1>^?3b<zFg_OzOd?(#v#tx5LkxJ-?O$9L*_plYqHW4$}B$$PaPbKJUU
zT|C_ut)+8<v$~1Wqt%jTz<B6^P72~?_0ZTsS6lQ~bWMM8o?G?6ACHps71PkaWB<)2
zN#h!tZtC9QFZqPl@~5ATFnXx<#yr2Nr!K{HKZZjIP)jH0=Wh2}ZC@aD9G%Kw%U*SV
zfXrl6ewVRk`x$FG$M0Q|Spdgybl-aANX$!`z*XjUm)Hh43}kXsX?WK6G)q3uN8*<q
zvndh@`8PkesV8$eIsLQ8!8~*JT+aVPZjZ?H4p;~xDq(T3IsSc_=HwRdi6(D_%pyJ`
z)A078{aI{|lxfJcej>!HqUZ@N;&>wxOf6l)Ya90|!PBu+K%5NqwEZQ`qsmzL7Ov3_
zjXH<E3__(q$Ir4N!C0Apm*P4C0zHDV4xbp9P-V6I`~siV=2&p>1+r*h$CfOfbTtFD
z5N$Bbm`(J0IzHwxtr34YHDU|K8l<@9Dc%WJERN8i76q*?Xes8d<ee4Q=snPOzoU{r
zrzD@NAc1(<MirvKhq2@%(Yd^obR}=*2W&Ge7cUoO<rLumqmo^2X;-=M#VdGS#iRZT
z)#9C9$u%xj$<?-yb|w8FsVliY_ap%H*OhDrApKEg94-<(Dza$s*qnbf+YpkGkb=an
zWF@H5UsrPf;E9@Q@{jT0u`{{WvW?el0=(o@s^F)J@8KUOUnkLzx9f5{YmT{)C@VQ7
z0>ShngbS0HvFVy1FN#QDgrvvC1#^;t<YMeKoMhz0uZiAwD;C#~jbfE5=6~2WFtkt$
zg5kq%%QmHti8e$+Q@lw7jin+&G<h|w>D4OHRcq~N&DSFBUyDDTF&!|3F^_eQzd}dd
zb<v|ZHxWDZKI}|J=t7C8wOWS;lPV_yo37fHglFs0RXp`0b<%DVd}Qy|cYL)9;qksn
zAzLFJX?^%WVXLK|$nfZr)`v&vRnqmJg;7Z&5qW91??)kuug7=#_(`Iq$36J6w=TSQ
zs+ydQOpdq~R@1$VE8!1q<SHVcHAN>)319wVIsVph?s|zFu79@!l3L0)yhp?UU-O{`
z(e$@iOX>M&=EnPg*m`Axrzokd58GIW+xH2w9K{F44nq^i=J0HuV7GT103^aieaTx>
z=HhIP2qeQEI2~a}hfGgWV=Vcdazd3frmmK%>ZW=PH(V?~n0zT5TRZYp#Fk4g*4bG<
z>ihL;+MWdmS0brc^1IY|uu(<2Y|%+ZLIqWtoXQEXKZ-iysn4*YeC<qWfRE$wYbE@M
zI&}Dz;JW{7J*P~~>3wtJJq)d2>Ai~lj<LKAV*wOdF*yYhOK|Lhp0$q8X8V6y(EoQK
zNb7&NZ48gDH-CM#pf~0TQ@shd$?v1Vdc*@~WMN$&ZkJ?ku<pg^J8)A2qprOi+=QO#
z&u5kjz7?yY!|e)mBzV1*S)l<RktPqJ_g!uBC6ZSq!@GDhJGYKJzn88-y4rBtQUlJy
z28{VgGN2f5+XC`uro+zy{eVci2EXaB`;bK=3etmt8g^oCpo##_4i`P}zxO`_L-Zl@
zq1Gc2jXY6lXp2f@X{IPKOF63MOF=ar)jVWg5#H8Q8M?eoCr=K4B3yj%3)&c~-CTDb
z_<nBPgoHRBe7N9!9q-@Fy}R<vgixkL<!M>`YLz+=rWM|;O1;a0r+ueNy$=yQ2AS4n
zR}+h4DDxn4xO;`_LKbbzfA;VpHp?t9vAl82Jx*8fS7dGqet#7F-pp@){0i3VYu~+%
z+Ahj3*=^A|B)C;ut^--MW8PCm%XTM<gj7GR%HLr`#U{=TwG7il5F>03mThernu%ng
zbi8kC&5pBXcjAsNw`AK&S?7JAC0qF;WK5Jx;Kv~R^KNR%U%%FD?Jg#Wvf~9aTJo^q
zEtr&-4S=k#U9N7qJ%`+A8)b*aywv>{(RCv$uS&t_Mwa8Sql!nr>l*O{90#!=z>yX-
ziYVz)SADPo)!WLT<8`ze&VxD&P!W@A^v=sJK=rl&#X9SwC4?_ibOQV*&;-ky)*>g(
zvmm9*Zmp%It_imMKv}GM;Rnmwzlg`EV9{gInJ^F@J)uJXMEv*WnHsGwdKU8PA@U~o
z1RZEhJrZr@*XHH-=@xTePT$?U1bgT|AZf>JzA&kP+1xJS$5`hP%t*20z5>bXSAghV
zD{U~RHu$ek5jTc$r-z;KQbC>90)S(2?Q!VX@RTmQFs^!w*!&_PUwr+?)RY-PUgAZ=
zFV13B{eg`VFBQb62n4)%>PGc4b**$1N~Iwl`d&LvKcjA(tDlmk3nKiEip^N!_a#b+
z<U~k3Dr^{vC!iyvXrniw+CM+;cADXKIk`}klPK$AUFvPJ-u#VMS<uUPYS7ky?i+k$
z-R9hy-KtI#r~1#6h3~KOU8&PL-Jr~&xH8OOqDbxYHuIOqLtv~g@d)-RvlP-f+q4KO
zO=#-bD~<BVz4#A$B8mwjE5~@L>67H@qi;iVeB^rFYfPPa8o|xu-fXEGkV|A6J&B-Q
zU9;~cfnLEBfYrbJcb~AAH|b;mQ@1g7vtc-%1i2h_UDqm5M_o79Anr_EFB}WLrqp%w
zEDfA#Z!r5l-crZSFbTLWJ@6@BLnFKD#y%asPX6$ay4!z41KyG*_E18=hQB3W@Bi%Y
z7x2iHi}Vkotvq?h%}^xgHXf1C^86`vpYkO+|2b}kw_(Zq<(?(f&Kav~l})JX&AT=L
z=n#nDkq+>quTx9J*@5$7B#(@AU#k-4*K{ur^bS`=r!}Tat3_bv@SW|hR<SLtg#IBH
zY4omQFj-Z~{7PO;TR>#_RH^Oy&Mz_5L_j(0`t*dn%1|?7pB=eh$i%~Q#Steny5}*v
zvBjXF_x&a}2Y=I4Fkdz?vc+?7=D5gi&cX98%+0~oe=Vr<7OPWY)*-?Cd$Ue;Zh!vm
zLoK_(UO&TP<QVhTtjyz>ZC;4zSsSeHMuu_x$vM|N#BY65tiUl}uQN4U^u=*pc-Bok
zxaraU6QGW#X19_OA7vr?;(ce&)7#k6DED^NDTeQC=#|mT4iRHEcurIF5Wo5B#GISY
zQ*JC>dOVvRG;=1iBBKZ|sG_r3!|i2C)jvirb^?+fxPrz*qt2Y6Ff(6+wt^bgi_CTi
zsQH945FsErvpQe1Frcq+`&8aCcOV?tdK93<LQned-;95s9z-aFkv28WjF!A{3rWsZ
zQa_woshkMy9N5CSMrd&HQ0AACH&P9!bu~;<$*zXDe!PYzS-dnf>!q_{S}3#X<AVBA
z*JTG{_Q_QBP=s7M_&MHA#lA|C*4b84#YQG)*@oq_E~f5N1?108MaM%Lxh2x~zIlAY
zzhue!CGWtC;Zk^9f<MTgAWl{z8&+|MH96egO*71=@=@?UQqB#x%g3{ujH%|Lxp@_@
zS`|W>LxiTetqbp^4QAYaDk0t%PcLjGMQ#dFxS_tW6@a%Y|3IvQ+B#%9C3_A0;*kYE
z>=K3pK2pRwGPA%`K+jH3{fjGddg^B@BfHd7|5V&`TP5|h@f7{fl+^VqvOOjBh^Y3f
z+RkBM^yzifjh^Gx1xo77T4F`bjV)%ZLT!pD3^LL~_Y>ir9a;b@;4Te{x30{{LV9|*
ztQL9trVU17bvXC}xuML8oP2D;aOMVAgzt{N$L8KOe=BMuAB5X~K*6S9jyWy>5j8os
z&{Wc4K^DaoenJcKeMThpp3Ey$Wb@axv-00rIFd%^C5xGRJ(;_iL~c4gNCqQgM{Eb2
zpC`6(+mj%`A3#!ODNmM7><1mVR*od_`R|>VFTl$2DzCv3(DsQMQSY-;Rj1>bNr>`B
zzxL@N!_H9vodqJ?ru9`5#lJCEcghy4mOcDyEQvS169DCWnovQlTZ!v3DPChTaX2}~
z6s{v+naRs1`VG07Y<;WYmC_Nidn=c$>zjuMyuz|d*2hO~bO6y#=4VW_VAZ6V`*ICF
zNF6VObU$9@d<6=Oa9cAN7JQi#^&m!_Ig1+PC9M8P=OwJc{o;E+vv>A!Ri-lg_<Szo
z0Frv07s?t%E=shvA_Q_Bls^}oeA4C8BOP?sJNt$@Nvlu>1bS~go-i-0^vCd-mk2La
zT`CpQy0uImZJTIEzvH&k9=jl#OwEiq68ZQXt++akGhDvQt2u0Ai*k<H1LJQFyXP$b
z&e{X-%V}G=|J5hh#(V1)RnoZsORI_OS;J?d>9UjwsLU;VGdea9L4n+DcE5&vd>S%(
z!&f7r#U0dfx+eZAl#)}ik*Ge^X>~|?(RjhN@6IC+TF5~M9~;p|FMqCa8z08JC)*-&
zJ{}&)r1O_tIxzH*AVWc<^h-#TB2+85PndOdixt|x7_!4d2Jl|xzf2);{&&AO&ZmLq
z8UCYuj(f>gYF&IP|1^1bNKkX=?{xQv{RNvU(A1G^9v$)f9S@&~mg>7}7m(J9gVyD1
zsY85Taf!rJv+Ao3G>P+g_n$vN(VWBWl15pt)CQLn(QI`lf5J1Dz&d6SIg8zZ)x)L6
zGP|AkI>Bb1i7))J`|GQ4dDp2xJUz6vAdJG2H%bfQD0Cl|msjzg@BUh|hnAtb_`>EX
z?l0S%_oI2L)JxsTPghc9#E7)C-o|ro3!A8C`#O&liy8)T&UNsIx*yNVRSTE>yXxE<
zmj1hn3z!zzft#AiHwXsLTL~cv-YD&!>(7r4LD*ZK`N5YRU0=no({IF1hkp7aUmE?y
zPAeiHBc~1}y?AOsK>}D5^cF>SNkKC&`4klNQwlYuzIeymc?tq_CMp#4?HT@+d@iJ*
zc>3E+=exG0qRTe?*Hm=F2uDRv)9D>i(TTfBML*Lh?v#o~nx5_dE&WV{el%pvSaFV+
zF7dST&e6ZfI@G=NKcJ&I{&zp8Q{)wyo5wiaQX9X$`0?q%*$-EEB6aDhgmJk<s+<<x
zmm!2?9t<bXLVey??L@ZdbmWIeMQkqX(txors4loTfWXF4NdN3iCpu^Y1`vx|>4f9F
zm!07l@ig~(A+KV@Q>E?rA-RIf8O`Fx1@kqypTUtJ{P^w_1^jqOP+@b9A+L5-mj@rJ
z^&04dvwG0%yKbs<(5nB$>CkJht|R9te{=Ueb93j-?pjxXv2tN-D8)Dg4KNm*<ASfV
zYI68GAJhpWJH%ImUx+Xk@tIRyAL;;0Fidu@NAN0aO%k?l%VR4pY!%rH6yfWd<pub9
z{WMo)yf?nq1Ru<9x&U8=I{ijYfqjRupOC$G*K_+H!5r`YZSK7oe?>Q%c7(s-U&-O`
z08qJe{H-s*pY9_D)KwOANg@t%-bbf8^i3A}G_e9=n`FecWBh$}SpoijNhRvuq~7?u
zE%;y(M*;qd@Cp9bJN%tR_MPHy(hl*54_lkDl{=%qza5do->XON3V(JruY+l<30n>V
zXE=;4KgD%6Ajb!I75z2$qQA*Ir@yV(80O@suLV_3?v206!G|g}U4XwLe1gA?4u8YR
zzEk{7?*47w-u=u*Z-XO335MQNV;(~ueHPo1HIM--WNC2z-4<O*f~@Rs_!kddv)A*l
zgq*I~8~Inuf9Gsvae|Tm=k*24*QC4<v}OTWBm^y6t4-Qk-lpI+zb)FKCwPI7-GO$v
zExL*n|A}F44U>K`*4Y+)jKmTaGgV_E5frV+xZcuibvqS?GE}qkWo(qmsXLd0vQ0I5
zHyf0V-VdU}S1b^KVpvM}ybCKL$wuO@BT#=?=Z9@}Qhs9U@GAMN-@7q=O}YQk;w?QU
zM6-SL&zb~j5u&{@`N_t_(<(4eRa50{{OV87S{3!j&OlitO)6Pv(Vvq@W$pJf2B|UK
z7S(tW2fkE}_RFRGs8H%$rAnC)PnV9;Lqtl4WA((*0BcrLswzg%7+F3{qb7vxBKz{X
zbfRQ@s_p?K;eT`Lu^vD550p};|08tZ4D5Gbh^5acL4Ql=6$btBwSfYy7SXpU8u$M&
zs{*X`2RVllk~>(;3-qVy8H>}?BFUb8!^d^v1EkbDZcB>jD2actz?>qj2T*GB!Xa_3
zVlNK-EDkz4664s_b8+m_SnDHEk!vV%kRCs@$9*+S8+lAm!rRA|=@;ORujOn!7q^^l
z;ns;iL-))5wI>cVHBKDevM3v|HfuMiOLK@O8gnO?WY1*;4T^N!*KhSB2N*2(DxOVp
zS%p8B`lO#O$B)UmMCxk)89QhKUj8pA&60M=*|Z#*-EX;_;Dm4J?4QO!r1bc49+5fN
z$nYP#0{<KB0UE<?W1%^m+*|bNT?^M4MUV2&7_JK#X3v&fSDE<-8~Cg}8T_F~{GrkN
zcZ}G@Ping=_Amzs3fMzkbjFyD&e=wxwlnhYdpFAfxbBkM1FaN+YWgo>`p*{CYWACM
zv~cpzp2rve=^<|JD~chsIMwERB-S}wOO)+_+`PAXb~^3rsbLq>KIp&T)8BUYKLN;%
z-jC;zrO~@VvoO{*TZJ^&W2uIzOn0W4rhB#Ra~qloc3&{p_k5&au79UVB=H{Sgv@oq
zQ8rAAbu~<-Hfn8{p<kQdvs*1?wvetrH@k`I&~j$ulDA3;5YgON@^W`r_s^D9G$vP+
zH;#R|<>*F29vLn6_&4t-S|l!3>a^&L93dwrL&U1IfQTI)Aj{`WFYAyU%Ir<|=udn%
zNJ`<%{l5F?0vMfxo*tAY*VUW5zrFkN_18v6K()!&M`BF7Q+a0_`C1g_R_wh_(2D&?
zbY3ncL`s%pYu#SS7ZZG(F_SIbS$zi=gOIOJTv)JP|LJ&Fp|Q}c&f{s<*sp_c!mUz9
z#8dlVqVfLQly@c?iPMvp)RZLp_MFlzs9J-J1<SiByUP5ttt!RiG*RsYUL~As?e!1k
zg{8h=U(&Ox``)Y`UVz!f(E@&2EN>Qh1lW<h`T7@f_@Dp9UEqHkd42J1LC4Dc8yg+I
zvN$R8XOf};XeEyZ;J5q+lIILzU-VNXum6Pr_BnZJjMaBlbVhG^sVewjvTgxFO;#&-
zuXY&S6c=1vIdQM==oM+ocPM^>*WS{U&1)L&zM<FtXSd|{8%O5wIR(<*DLpszlHV84
z14Rzb;|%P8RE;#MNfA1QV4+jAAJB8FifJp9#iyg^Yp}$~;q&zdH$IlP7d=03--PR8
z5wtgo10wxRkliHKGXKYV1*Pj9N@wu8ElS;fIy)D-X9xU(r6<^t<921Y<ohvIIsEn;
zwJZGgmhTteDNGqUU!UOck*DCNNfClIv4r4z_ze(jL=A$A@q57h0{mVZ)Mr_H;WrU{
zGu#)WxHrmc9dzTZ#8n&z8L)@z6%=oDC?3Y^wkWoJyF0SX;#bONvorK>I+r5pVb2}_
z%Fv3&y$WY-h;d=oqA>3D?J71ZJZD+2`!8_<=>ZUT$?!MsTrnn>n{#(JzUXgi3(v=6
zr!5vIL#oJYcPEWB-CSvI=V2p|E}ML?8_k@8*hvh5e)w@|_)PO_S4@|oadtXiQ~#PA
z)m0l|#8?uS(W5GR3~VLCL+oyZ{|cqzsV~00+9~fO$vWj7M{nP*^%v>0H$I+I8<RST
z6}odghbUe7n+y5N4#C|Nzs*XTa@Q33R;vZBr?@}Gebt0D;VJIjwSZ^0%y%YN3RM4V
zZ)OE5#u;X{eYNshvP!Moq2KIw3Mf|b?q5^x1gckg2^d9It!(=$ZKWnUh2UDU>{O)s
zy)x`nAy_5;t$yflyYdu@(6xMvdp{C*=#$s*)0Oo3SK<^XUC$%*LE^@2B7on<b6&}O
zLN6t=NUSrd4u!h!+kO3DCP9<_34@)Au-^erMVS2^6}(U4w{Sf@-RRd?)V1&4Nt4np
z{}4(o5RM(dsJ?Ff{C_~fC1-sa3f_-W9AHFO6;iMcjcPc+sP(r@?nS|*?j8j%wUUJt
zjIr?@>ai&JSMF<`f=#V`hep4cihs8Dzoy~^WsZv1Qu&Uk_@v#W;y+Nw&Z+ndyP*&G
ze@Dl{XI|Njf5=Zu$H@VXj(@+OqvP!F)4}_{_{Be9k^Q8mSP|K3B6_P9%7#;xR_)S5
zTLiIxH_EB!6Y=!Trg<Qo*k@iE4&YpWa=HjI^2)ua9<<z#xJ;}In6mVDc6{vHU9#@v
zV2=%})xr^oXLiT2T50m@b6WHw-FRun;w_Cig$zz7RjFJH_eGqhCC3fI?eQTLyLP!c
zlfOiiwFkC!pa{qUrHTJ4YGkOHplokFSzsB*v7yrd_>W2(o*LH4*E(k)ik?Iz$gqY6
z>veKJ2NMG{RXX@4tiU6tdBI<Yb>#;pJjiPFwS@x>M}(!s+?tzsPOc!0r6jNG=~?9v
zv=YTt_(7KkS01(DwqH_yig0(QbXpQ%{k#9D{RJ3nicT}nn>2*FV45mzl&6r_^g2VY
zvO_h@AA+$>82>BN%;8GgO8{@R?n!#QKtmKkjp0vp4J_<O4XV2UW^^$TYoGx3Y#Rd#
zfoIr;)7F4+`#L!L6bx8z6F}H3^6L8W_8+!zb*L$NQN5ycK0)a^_W$SBtGC`@`a+>r
zE7bN+Y-F7P^9*|9f(sI_N;#4q)OT-KZvKJ<!RUyCQd_OUy<{1``3fCjg1wsqwHVkc
z=pfV_fzYpq&>d0Fr4A?Th^QX|aUnB%lJPjGO`OgJ@w({9F(1uoi~fm^x=UXjN9nnM
z7oMBdonr^-gX<160}DN_L%H(9vgtB|B<5S|#h5%2L^Ln+D@2P;GOXg6Yi5i$X!t?u
zhVBw@51^6iW2p({QfMW8Vn9zQPn;8&#`;4eP=%SsZc~xFjM6JPYbvWI{riqaJH`Wx
ze8GAsgJ;><`w*v|WhFWp8xhW!jgJ~Hu|c*<KKVTXF{wl;m6r1DpjxF=Sjt&JN(P6%
z#Js~KqdyPokP|RfKJza#l&K9ZEUU#{=WX7C{ey;}suA^IO+5Wbv;)jD8d|1oaK6Bc
z=Bae|qZt|5eo5`gjCUGoy>NFlP(}}4`Z0IdTXZSq5vQKsvgBis?eYTgMN-GX@mzk>
zqQcZJE1E};*uwtS4l}0LB+>-kX8t6G8rC#ZL~?`~pOc*_hM)z%b4bk0MDY^HJ4~K)
znLBN(L6w!xe4UTzhu~T>>QaYtK!S@Y=1wnpJbheAU24QER?m83|9#LT1G4nEb_v3?
zg=Uk>IR1lZsIg~g;+^Uubs|p`k!~Yzx;-RNw-5E7m_~3?_bke7r6MiO>C)M9;0%rU
zrOBGZ2y4CvA8_4_8M&Kty6Ne1n~pQ$KlAR#J=jr;StJQ9GW$qu_tCqrRE@!$z%mek
zDhlWkr?36z48^y4M@if2#0S{VRr%#(2f|P2O+9{$%i+`_2Z$+vP83!F0r_idFqP_O
zgcULzN--?bZ@4o+cs+_O5o)9<b-w}TkLHu{kYTHb4}g)QwWM+Y<U)<^3%#purjlCb
zZ4tl)Q7T?8o%>XiSRmF7&n(Ft=r0>QAOsg#9d2J<t|C{FL6EIc1zDcX1kma@4Yt(x
zImec;PqKVx8;S6F*zXPj$Sg8bwUq|Puc=1%f)NyS74;a`V_xsy0Ox>j?W5kb0%30P
z3b+5%;AWLzix6)6gpctQTK7ROA0Z5!0<(EM+&+O!$*GkH3NI@|df44?n0RV|&s$S^
z64$)0DZ6q%_%ZtuE*T!*98X_XJ<<CsJGbRZ%U}{{Ocg4t#tzVwAG)iK{2J#Hn{nI2
zO_g>;a`v7Ol3kxZp0S&|UM-Hr&h98dnp{`g<h|f;Z6_1GL`+z)N*S1pVJqeL{fbs{
z_o<`!lYeCJDK%q6vPb8m^IxtAnR`90fe+c|z83Y}rfVz3^`{%2wxsUG^marr=o$e~
z%XK%#zRm{n${G2=(9Ks@<TX}Qw~XyMk)6C^f9vYTH!36APz-xzxWn3d>2Iet2Jy$i
z%nLkMYp;a9xPl=Mg-4#o{kQOtedMGYajTD{Fjk$v+8smO!%~6i3<fyvY445R>6O+x
zS41M}3Re78R%>Vd=#W1hEj1uLl)ruWDzN=-FfhfulLmqmJDh0r`U@IYp6F4kM`jNC
zC*t?P`;W+&v#0lCurd)v|E!o4{&`2bF4QMjC^arS;J{lRhV>hgWj(!kGG;0M8fkVF
zt-I`s4_J&)UW{2Sa@vS1j_{CK8_6ij8v+g+y;<{k9n(R={u@DVWBSC(m^bTAOBC}!
zhIyJ?3rGOHukpB&M}F4w6Hk@>bLqak-CFY*OB`WBQrX@sh8t0@CBsk25FSaG>M60V
zSv7pOik1tKD&D4qujmk~oJYFMc_ZPGj^FuT!+VP{6aSkFH?e$OLLFmPb92VVwK07K
z@#5VIKwSs;mz|o$#Af6pXNP~y^{OJ6;vOXBn3K1OP_-N#`G>Ykf)G>bv@)khFk9y6
z@BZjo181F9)eWl<X5Zp{A@mvoRDJW`yfoWfD%;$kd)`;j<$u$n6E?=vBEm+6YH`9w
z1=1;{>CDB^>c-R}jfGe!A;#&%q5jo1VeUe|#Fr4bndtpO8T@aOI??-$lK3LTbNR|Y
znbaol0XGhhY5@GNk|ds=sO4VwGq16nc<uIK#jTqZd^E)YNBWor_MyJkzlYR#>QPaE
z-<P6`L_Ta<{I|d4WSK_s(?M(Y6Qu@yIu9T?)+x{Rsi8bEu`$I&N|*h1Km=OoFRs!{
zQX)gec9H`D%B>=o<{GVsR}Si95s`yd2Ux51c}&(<B)$R`IpyU30~f}JaI&*)vqAmq
zY?T@k)Sq2Ddc$ZOYS3LXjYHL%w0J+5iKotiLk)WKb(SxL;Z$whKBe?2eayfYK5GN$
zC!ZV)n;qYbcyP>y=RX_ruX}N@$%C0q&Pch9aaV1D@?&Ao%&$KG>Yr{WdfC!&aw0LF
z;|m`>?)!g#{^rFm#5cSV$Lw!m=#q7ftf-uy`TKAQXrVX|+3h!c+)_wU@>!;W!V61k
zk@J2?Q%>lOzN>XNz~0q};ya>4G^Pb~2qM4gZ#)7j`Y52mMsL2+;G0Ush}H-*phEvI
zByxe8S5etS#}xbpmiky@>I#wJ@vj`nmmfO%ym?bk{g~B!5gk_BmosYpLrA6$qr)pH
zY;>rj|MRO0>2T8U0y_LLvu;Opc;FuY4IO3<%Qk9s`29NyS`AyP+tT4hIXe8tF6qz<
z>d(?4_kcC}MLU<wawTD<y<}q_1dKTw7+5@jaoz30CD?%W5u=Q!51;Kfy|bZ5JI#^q
zLS5!BWOU0#u(XJ`b{OFm3hpZ&5TPLYX6AkfAA6em@Cw*f;=fz3wO$qkOz<lIy+gr;
zzOe#TAzVJGn)p(Yxrv4}t<1pRwj4u5hEk2FyxY9ot>W5_l<>{zjo6A$b&?(zM<jk~
zL!XIafN!dZnC%$Htj_%6Um|Le_d`I4Jl(T8b1T;lOh^j^G;YqEC(He;FozywRpt>g
zX_lGbR5;5nZ(vi}dh2bW_=XP(=GKnq)d=cFYU<$@8gfx)C9nQCY?;S=<lXOP-sT(<
zbOl%)J%n9_LrYJP@&Gfq7*U5xO7`BF=xs9R11v;_M9^@VO!f__+0yGUtuHP;HJ6fY
za}*-Eq0~@${Rf3_SMiql?4HgpzdHE6I{3XY`2AV%dpp0GdxMv3rkjKJF~RR|?YAp)
zcksR<_<e5=*U0AJeR1&nSn&Hn@cU1G3+y!!w==Wf&7Ftu^1P(i`AU(#ZVu#9pszC<
z47`!Fd?_GH5(@NUf0khEj{CROi#e^HHWSSle4yHE^qyl^aZFdB)k9lBW2X2B?iEIv
z!8uhPX-+CDg@m;*73%Tidczi*)8vSzDO&6Fc;oVVyl}gm#!91Biv}(6^*X#~)Y%sG
zIU1#`ZJ3+9*R@>^KnavtQw=PqXi5yRj!!}F(9ABmf_6D7_wYq?%TL*{4UJ}e+acGv
zI;F(gWu4)6IR%n}tQoaf%id0NbvtQlW-6+V8+oP~e++G8j-wyiQiB8b*P0yMZn1MP
zHUBN`!HqA#WX4IibqXm??%yl6J@r*x-^lK&uYP%<7y<hdwpK^HwNe9T>b_>fP=&Zu
zvxbH(z;@MDqY+x{z;<spvX8mz*3x7R(WgKQwfQWkg$imj{{(W@Q$YvaT727H0wh?A
zzu;uTa_|u7pTg~5ham(ysEhh&=`tNuubP|&swgq1e_}+xJQ7w5O82HN^axJxvj;B)
zdZu9TZ@bM6ez){Tu(qkB%K?vZ{44n=vmMClVj;>o)M+#M>&N1$i_oAM8NtY#@Fdpk
z*D%ON&%@r|V*tBoVS?gu6&K}BrSopL|2Wlbf43jE-F|7*ZT4T-x@WN2f7v83Y=n(~
zex>qMJxNtFDw>~@7~O-H4+m>6NDV1_TL$%u_O&HCnN6rAay&>^tK#80Zg^Q&l`T6h
zCD^q{og+stZsvZSmK`O|`6|cU+iFrD3Prg5SIe=mfbq%+iIqPZ&g)VmYOK=#%-0}n
zpBd<nr8?F#c4+>g<3Hg>*M!Ov?PkWT)~vZ}LQjwB1(2ns7b<(>ZT4{N-Ylkxwkltz
z5(rDDy0(63FT?bqn<(P6l1!?!Bi{B7Z)v#waF-hi_R<Nq8FE{b+vpu4VP%dCE5q$8
z)Q@!8FKG}tuwSD$0n@2P<|nWPC(RqgIJN+>2s?du6&1&li_DKuOBE|}V|tMsmXWL8
z`=OHkbq@|^L%HZSJ&&J-ILyUNZ=I@no-Y*c5b8*6IY?4udeJK0>%Cb@_V06rH|n{c
zD~ycT%&RImZB!T}TvP3zz{4Wp6#)H154K4V*g-1r`G|1A+`ADu*uJG=!Tj@L<%I7_
zeNVfW%vSA}Fry1Rk7OsY=mzA@unkPn{4+tvCZRz3(?LPwj#{1jl6)oT(FdJ)dBNu5
zAcMv>7qgx(-dyajPw8Xsd5p~kH6PNE-&_2QH2>hg7&4jXGVI2aTs>;o5nbJ7*t-#B
zBQ;8a!AHnMOU3WJIk2$P)^31<vT^KdiDxH@DgT`-ep2L-u_x+y$ZC=t>pG^cfM$*Z
z%e`r4nWLHSytNaWS&63=qnTe6(aa%Z)M(5z5(<dNf8>EY$yBrjB=eep`#-)Ek__I#
z0*Z-w^NnI!U0I`;=aN>ofMPy3GN72@Jme^5%jbhZJC`v|4|;E)V`W)xeGKH58lNSW
z@#Tq=h&>@<d1Q--rSGREmNwV!T#=CDZC_&LgK5!Kw{~PctJQKS?q%dY2F^YX!Pe_Q
z`>c6N<0vb|LykHM?JWwzi_wtb-DeNS?{Ol5^<?wnO3P~8;qaAl@9?O<5N&Tfb$FDr
z(llUhjmM>AXL$_gB=aY1nNshaUmlw?q0}#dY;3kn^je;R9AhQ%qiHkoD;zas)*-1%
zc8TX@d7KeRl%Ifn>IC;@Rv$WGv&3~l@dXOI)b6@ikYkaKG7369hWET|D=)+TL+?oh
z7pqotA8Qfg?&)12Cw_hu{N54#KE`k6kHO2E!LJ|uzSHaXz2N=!;CEi|`xd_eUQJ#_
z><{cWvFnK=at;h^bDDG~{TVG$6*fpbXaop0Q5tTW3Na<$AD!I#x#=9347>4BM3M_j
z?_*~#w+d~_hkt{H$pl?LM{yV4uy`G-cs+Z`8~yfJwU9kF!p~`(15vGm$6^wE0e(-5
z;UOi`@!*IuXV4mMUrM9#<nnkf&IqTTcuQJ7SA#n+s`w%j=3KOij%;*<2X*+F_>&Ec
zX#BTmkW2m74k9|j&rM!yorz<h>j)aq9CJYj>e$QKrm-?J)nq=`A97%@g^K)C5-oIx
zEr%9pBXg`}Y*oKoXP(c=*r6m)Vp{LG6nm5I`rA75Jo5E(`KE3YStIi<6eW4{qlPL%
zO1!E$m7ZP`+!e+zq)mbTrt2P7areG~F-ANs3nC_k%_?b#s}x>#T-5*h<2uh82NA1q
z`iPeZm~IHX@cxf`B=O?d7c_Dmjw&kr@7$0>YpDjwgbJp3L}f%3<@D7*<i}L1&xV;B
zw{D;b0|4hyV#(S>`j;K3d5YVp;d)#C4lWU{B4_3y{p0ZuJ0aqgCGotFe0LHwSQ^kE
zk{4vKEeUQuh~Sm!BYyL+k=?Ca1MgWo7vlOt>*mjdXD4Cqe0@ZVU~1e82FE2zD+K(|
zG~LSq9yh=TMhovlZI>RIA-S6Z?W!}me9}2szSXIEM~{d9Fo(F^r^k~%pQA^OH}tse
zSnqd)&^Rpmhn<eKfB#C2Gh^(=w1xZJrUYTC{6w90Q)MS(dg?8OV|v^ty~p%Tjp8r%
z561L)-hz1qJ-44>lhiIhLfs4am})qDTjKs-D;3O_b3=*2@np748=o{AT@)UcgJ3RR
zY(;8uEu@IeZRaVQNTW7{^W|@Km^x%(s5MYUmaIYym$2D^sar%3vLaj(?(Fb6!GvJV
zi<9l=axL#kl>|mBW=@%Z**2sW`Tv5^oScT+-XtMrnZy(6ZwPrAR+f334+Z)FPLrz@
z69>dce!870W?%aKAUh;825X?IGp7gbi8#C8EvS#J%(fir408LI{(~v?>c`BcKl4x4
z9{<doMfkPv`aoGQvD(a}#raRuJ{+4L?}>?pUQhSols`3C``F*JQ;}l`VgT(eCt6ar
z)yioFju^d8wvbcCyr=Z`mq@IYztgmH*rXl3J07Nmkhwf{1wP05Gf^@E_hv1)Lc|><
znj?8ovm7la#8d98ICgGl<Df3kd;FYJZuB1NT%EVR;HHDdm4k)uCy*=6{geO0F{0O>
zyZiR(K@BD$YZqlkBeui^8yz!H+9Zt%TPf|LkV2I)5Sw$*SXuz3HyKY@wYEMA;=Pc5
z5Pb@}@AhBif&#C=S>I~9^ph?->Ys3`uKH@BNrqPVKEhQ~)mrAcbLTe2s~;F1QqQtj
zAMtNy{n2>r&HP%4bS(pS9s7mb{$N1o{izu)!|fx<gh|9{(V>fVayOCjtC@3JbfEuz
zbkeezO_#0Y9K|FZ?bj~+B-o}AY`D2|`~;nrWqp&+St%I1#y9iBmeFFRnQ!tVDHKo7
zsn+z*#Y%e}Gf!rx{ZR=%4RC`JL`@r{0$t;$=_B8kP4P~x<C{&@4ic90ak4&=SdCOr
z_VQh<S9$YW9_Q#Ye_dIZt>fe11$Pu}*Ojy5)!~|dD=KQXsFJcc;`YB%CFa7DQAM(~
zmEySA3eM@iWtrKk4(d6X^Q3gyy-xz9$3g2~<6Xy5Cv6?)#3Ao^Y)2&E8g)!_o_ZDt
zzaoIZ^|4FU(RzADb=;e4pJfroMZFnTG;i<|(3Nfu?!k`5cE8k}i;$P4yL4Ohap1rc
z$|ZREdQIJ`j;F_CI;SIlzTV5%yk>#a$$G01@TTO5%V&C%_h${vn3oFqi<WT~jvDFy
z;@)KD2KE{8YX6N*TXFf#R1dfRiSutXM$NeXzL>z)>MAOhrr6kqNiARYy%AxyRWm1X
zV%?<n;@&4ln3uvr{L%ZcYw_>~C+@wBdSc!sP3-pu#Zo6tu1{TXZg!mq<f(G93!2Uq
zr}-GyJ=zuwtoL4R@-D(bqxYoti(}u$2#QWHoY=8DVo}`#NRz^m4K6*^XwQhJ14Mg2
zkIpl|0<Ah9r)l_aBhf$m1`$U+bUf^yo`P_L_o3*LBUl;w$ucHAY?Vc=!MT@IVVwWB
zk)v=Y9&SGxO*Xr63@OT9+9V>f-FS8onX*;pIMko8H<l=a$!z`vaeRG>sj|%9?B~|0
zAn+72!6H|Vwqw^`xMvvEoR2ISTV!rIpJwZlwU2f*lsdJEFc;10LB!ZoB~H!H1=j=7
z%eFMur7oOY@2#)%-i8m?k6c?nc4K|Gp)20^^5!~}H{SE2cHdtmVSue}$-D8AQ>T?&
zEMMpsPHrrDJ~nb)xLrz6!#sp3vp$qqj35t;C*vj)%JxgNoQ#E(F4u#xC8>L=B{xpS
zza?GpR>)oCa=z<M<)jh}Ef+98cq@Lsl(h8y(T8|l$ag5Z$N%R#R8NjP=OL1X=l|TY
ztHP>Q#e&&OItb2DG&4A|>vGrcAkx!Fz^mo#JN3(-Lb9P&TUr;cdxyJ!Z@E<E=*T{L
z4O8pqTrz>LGK7)8^v2}OW>}8-(QBOv>ux&*C>m1_YJv&fFpABB^WniZjSQqi07>&n
zc9M>$0{9wJ7r;y!DWeUTVx+gp|5D@84Ku=Rf8t4w;cGNKnpvEf97g2stSNcrX?+vs
zdRcxF!CWJJrgkE;2zQ~p%KzWr_BF?J`#UGm<|AtuATQ7wu~-<@(o#vF$Jk;Tv$x@)
z#L$NHz$5i#A96{#ULUU8^dHQu&<}Dm>+~%JGwZiB>s%}o$WzLQ!`|I(k{|dPt>|t(
z)>=HC{Cpfwy@m5J!SZc$@uZJ-G8Y%_r5blf@c2CSOKPd}wlZBzDeT0MybO}_FDOnO
z%KU-}8SJ|mnJOE=?C8Nzr!}P}SH`a0TEf|PxUC!liV;gM-2PQKL*@Xc75?KsE^)&y
zu0~N8qe+86fH+q{Agi`9K)@Gx(lY`P7hN=%6V1%K#u@5FcE~8%)oXz!SP`GO7{;i&
z?Z!~*QCqsacFWe)-k}EgqmIt@+x67dzEVH@g@?4y<0mT~hTDF`TM^_|FWRT#PJae^
zbDeGk#LQtP1{<6hzWMLJwH2qJ#zAhjS<r%$%+#VR*h8Ge)!1bbs%X%B>i-|SG{&M~
zvn4=V_qAER2-~bWKxT2MmZ?(wVn*gU@$EpA%QWanmgH$}e)-=52ptO0^5UT7>`q_u
z9(+Qn`pZ;mU(bqW@{Jy5D4Eqg+|D(Vp3LF=6I)cqaA!Ozpmt0Y(9iG^2S8?DI>aoz
zgc%!F-}p8x@ZOpEjx8MUJWh@u<;a<3fv4lGaz`<l^)xE3kz*lQ3dH=n<+oOG;x1LX
zPf6xsTfkg(imK(ROQ}`2#9XX40;FdCm(eOhbLKgS)?f1?N`>t;*nN{UUAL`cIpMdR
zU#?AM{usP}J9t0H{WhilU}xZ&!+2*BIr>hW8L<t_EgfFJF&)e1#=Dp`45Rl9I)n7E
zM{gL81#GL53XDbz9&rF)+OMvrv`=Dx3)_a5fJApZ7r(x$B+xTiZHL`GTpr^G_Nl8G
z*e@~M?HfCY;D>90CvqQJx-IjEf5c{NE~!JwKD1v^{pki2Hz>D~4K!f;W-GGp4}!L~
z5LC*Kp!|q_iO&?kmu{%YoDFSRsc+E`l2AdX3LbY<zB03Kw*1&nQ$CV;k)d7C2hv?u
zs4qdU7RgNKQ+9qOxgY+`qW6l79Gd38muDJy5B94>?ZlMVYskhC#xl#^?TR6MfXMIm
zUJ;B7cSh|!8&49iPWB!NzIXN0awf`fd>6&#^ikeNEHdA{7qrbUtwttG4|?D(d(nC*
zgEL1&j7-QJMl8$A#}?ln#RTKmf&z^hb6z~f%f~vpE0@IF)pK$L7k<Y`0&6+`n92NH
zHJp5dbi?MB4q_pu>qIllE6yR_@G;``En|)mSLUmd$#D)*6h+6&@Q><hO3c@%1?r46
zO;R~kEGV_NxkdQzMgKn#ZM2ea$MjJOeU<i03@e~7Z>(suykyy2qp)vMOOCt~pDk(+
zY;T|bFZ-<(3aEc{VW9&0%r@GR%FUFP?trW`6?%`q%pXQ2H}`27jQQ(e&hq-Uf{t3e
zYEMV|_|c4Eac?>YTaUG{Yahd~lU~vN_JSnnwR~NYTMFo*7r#iSG-(Uq1F8T&+vN|H
zMf@TB`$9bJf<LVO-R|%Q8p!j9nH1R}f8a{48w&Ur{2|~kly}(7&bMOvxc&OwrjNq@
zryJG>^+O|h_`<-Kr;}av|IVHDf8+M*pGlD&_J5y({^$5N;AOk-){9=_eY^K5`=5oc
zqNxACxBLBPe(Y#{$iYwbj&IpKoJo-#_P==iv+D~LWSO*$)3*Gw-1y~=_-j``F_}XC
z**D;yA4BXp{+alVz3iHQrp_$oOz@eJOIr59n7`pKB`dxDW0$rN9^KK=$iJ`;{m>X}
z`lJdNHMbDFuBOy+5z|b?Bv2Q!vR>o))a)J3-<|Nc*_6tU+phWBPWV$Vc#fgw-Q>T8
z^J@p=|MaXvICn9>F8k$<=_@aPWa-y+iTgvv{NZX^{1ot~8?y7Gm_Pg{@ZUFY$MEOy
zL-lTcWZ~adJ}9Q|Uj4hh{ZsYN)<<({v`zb#swrg;I3g&LN54pWyR*J%{oSqlQ?5Nf
zXfJV~1=LRMBb5%WXV_2-L{z9`aykCj+n<AcK0W7L6yxC$|92G}5R48^-Y(Yp;!|u}
z!~<+&*vt+~$K<7K?AUdewm%m49<L4G+!-%90jGR#wUpJieU$iu%r*LYr?Z<vD9Rm{
zB@UC+qRp`e&B4<-eqc%Ws=R#V%w-h|q@(*T{}+GZeqqskC;TcP$*YCy=u8>r4%D7i
z_gw_qKnL1DAc{CRCQ4eWB+e`Mp-&z25(U*!B0m-!F~WdU$yXG(-8xHUW@tC+7w+B_
zN2Yuy?kIaa)QRJwsLTsBa$JeXok=Jz%<>9Cx-9cweySo=C{G|Cms`A{Kps7MdU-fG
zTiAsye#9AOYfUKe{Q@gc{A@I(zFE<TzO6IF-M!KG$wcNj-8HR=vGJ<HoHI4z-bOCn
zl)NG(UVS4-kAS{GCKpL47`vk7u(2bqOMHm?hl2@X9V5c{tAJRJ{8a243VF}*;TV-v
zB4Qoe$S_w>TiDGrTV%(sYB}WS5lgJT15zzZ@HyAxe~JA>TSv=aS3hy`c<=tHS{c)k
zSBUhczj(@giiy#eu16l`eJ(KN-hroRzVv=KDoB?d;d8{Zo`O2MnA;s3UFgWdoQ2%V
zL6+H&u_Zi;tZ{Er#hBGWRQh0_&n4o|<NJOsm55vdz7jhFVXB;XzyA(s4pnbw%h{<j
z%Ez8LG@QJe+09MK$DyZkcQLXtd`+haV-R#%?q40k9ES(lxa<7D5+?&qlSi;&`{Ip9
z{USeJUH%OZvlC9Aj=Gp=#H@;Er%taNdulYC{D^U)nHOcOLo?5=okBA@(+-;1JKqd)
zZ_vyKD3xg@l5Ga6O=vOot6Vdj6O6A4nyDIl>fzz!C9auwXa<eXw7*+3Z|9r2r)R*n
zy}8~sQ=M%FC0in*W|l0(l)s*1iPLNFPC;YbL9ss7jy<(0oO}mF)2GceR!d_Wtg(;s
zjUBhW#`brO#j}mo(pZfeJB`L@2|JYWlhn)^snaKoJ@wqnFL9%D<)rP6&TCt@)1QSX
z(LvkfY!j1cBCaMrcxXdU*Z8S`jXczqbo|SRMLbPmOzR-rQztWP*2GhQ!I<a#7kj5#
zV7;@L6nv}Iw@fWB-l^4cy(m2i={U(I{bAc4yZXITBl<qkeXrzu-^}5K-_NYj_f9k~
zCN!x$LDJb?yYjIhUT&&^xPdOhMpr|v`p~6+*k481n;wIgBe{=~|H?X@mW*aIC5yY1
zi(D3*SS-@vmkt_k{RI2Itc#;36*)el%D9imW3?WQ%fq@gf65Mdnb|psRP*@0N^@58
zbp1b=r}DfylIQ{dM3HM#6jkG6&c0<^cRt}Ex+WU0=Koq|uRnOGbhX3wNy&(1e2wc8
zzR2U=skNHK=P)eTg=MC^Vk#rXhougViWH0+Kkt%CIyp!zN?wc^z*^1~$}(??L3}I-
zCkR5>s>1fF#ZBT~0|4~Lv9nKiM69{PoQK!;O7UJ>B#z{NYm1N-v=KW)0N@<29F%((
zloO)M7HAd=V1@ss%f4mpZ*EFYw+ppPv-Yxi82WSJay>At30j1cuv)=pblhxACADx>
zF*KYcI%r<{*r2I&4dUM{fTzOXsn`xYe|tmt5Ih@&lP_%xPXo@CkoZ!I*X{(MEU*E>
zasVA)1d!=h3bBJth+9g7^(S3+<Ld@boQrwEExc{|Z>MT7LjS$Z)>~VPoqZA5$I)26
zx4r6D51ao^1L?9&YptD}t+I_f_W~L8Z5ymo&uQ?gf(AuTyXue41B^{+&r^HpGtFb!
zN?W=NsqUiTj$7Qbphcsf-@VGT)3jIJKc{YUlfUxRlyk?aHE~FP9g$9j-D~2foKrNL
z|4jV@HT9!ReKQcw(swor#LqSj;Lzg{^G};&0SX($HR>DqCjV*kK!zIFz^}aHlKnQ}
z2e+B=)QH0rmkuN4D{EY-vnZt%$Gx54-cYR-%&nsf-<Vh8CH{~A6017vWAlGqEoJsC
z@Mnkr>x}~1U9ktwe*~|SUFJ2xtL#?!`dIKPa|&J;2CoQ{dc7-nHRKEto6ForQkLIl
z`Chiq=ATjeI)~)Uv+(Y1<iP^{r<j8b1Im48Kg*Ll-hi8B4y2)8_l0`P|HoPd=8W=B
zw$_}&-So#3)!GllJq!R}vXx?7)N1vg+Q15!-y_t9V1lh6H{_K@dse4P3HBjTC@-I%
z8c$!q-tIO3N2-URSU~1;GVRn8%&*k!8WSVdb%>Ma4?|$7owFZN-OjhPd)lZU{yJxG
z(NEWG*^aoUd))(RzYCr^XaCWCstq!Qhs^FEg&(oI@Q@qUx;GuVk|^5`5+nR{LVl^m
z(|FP_1_wo0k0?cd@zldJw)v=(;NxT-{d+zh%o@e@b2P+BrRWdeYt1~KBgwWlR3Isq
z`|Gr7Gnp_1;rw2fO^ABAc7mC;K=s7EyVTeeFL{^V0->4pAYb1)HWlxd`|>HgZJpVU
z^{P|J)Okl?oyGg9<mUb@CnPtQw;UjQ53_b`krVJSQ@mIo?X^xWw{@{~=7FJb`!A?S
z`C4a2LM^M~sWYq1KCc_s&w;$5d@cL7&ODyuV!lsv-}C<PUFpw;T5jfRjr;0pek9+m
z!gdm+`UtIL$f?*a`tM&PyEvY-s#UaiU?MPL#vq^rRPRzG>XWr^OD?YhMknu3Yn9cS
zk=F#n-}BksBFhSfYUhc16F1>&WPJJ9@dH~D@zj9yq>@ELZ5UqbEG;?8TgAVKa^?P`
zH_8gqPhDOf@B3x0Ek|0;m;5uUh2&9vCAv$>I4{4SJ-T6F3(<E}BkfR4Bwtx5*JvUo
zAnu)EKxD22(k%Q`zUk6lm783m;|Bj4S3;%|<=sC~dRD&k{<)!(YL4ah$CB;?9&MmA
z)+1fP**I67SQAsJ#=aN@(~of5^{&7E!pre_lftZh<SIpsF87wyw!N1)))?88xvDiB
zV&AZ&d+4JRDbjtX$+-k|=7!Z0e@`;>g<`{XYZjcq=Ww0hJxg*Qru73`#$se&J7@Hs
zK!GjpKH+`2e$`pJCq_RsWW4iTU{gOpM+yDTTxPhaMFRhaKX>}aT-{>y1zz|4Hosz7
zf7R;vzmVpxeRr}9-i&6_KR2g61snUeXq>O|T>S@t<D{qTF04^y>tpg!Ixqm@{_7e;
z2c}N1%3x2@o&I=SYY%DynEfX)>A`!761~Ht++{ov@%ea^2AajmjeAZH>q^70zuz)E
zlq$UrE-I4~!H`o9gxjZwk-PbF?Q(%GH00yH#sR68Q=WJ_@Vw?c28kCsKEbv;jxP*=
ziS#(<^g6n}h3~SZw0z;VBTH$)fer}DkN~fktLVE<Kqj`o6>i(7zw8%ExsmY?I1{JY
zy|~Ck@3%@R$|5c$4jM2TvM2?Y-Qrs%f$}8NpVpkb#?rr*FRVP+Cbo+qCO7sAx8ZDp
zhl+69N!-3u1C8l>I>@J(r~in1nT67t$xoJp{y{N4Gfvm-MhuyC(8e}Zx)}AYo<2$1
zng5bWQu{E*i$ma`$@^7Q)iR7L`O%*f=hJ0(43`fMXVSO|y3o5^bqGVsvqtrOm-^fe
z#Sx6szV6a+MH+a{IBPw(nV=|V9MNT#ZEt7@Q+2x4fU8w(fTuFyty7||3JoRTsnmKN
zY5rGlYB|l@qg9Y?9-s85bQ5yeTuoI%nBWOoIQ{o4H<{%^7bdVxOz)|&k2?E?+Yc+J
z5Sgo#xhX9p4&G|@riZv5nqVjuP3iliwE&Y}-vx992YLg-vzDk2Nq?a3@x2fDqB&>}
zYX%6<rwU<y4@#@5$fKAFquPvPS4bcvypb?MuaR+WkWs&?e462BHgz|abjC-nNIWIL
zBU7$@Bzin`oppA&trqYV#h_Y-1q4sJC|Z+SU*gw(BFr@^roDiA$nY4R@DwIpBT+_T
z*Ve>8fPl$W4$j0m!Hq(hy~#6{E<*}bVsrlsed0t}?endh81`8ZUsN+C%K<Umc5sm0
z_3Z7!p0xl!pvtt39d@u07K4s(;qAM>I4}gl%KfraHuXTi<$H$P>h>(echThfujikj
z=N>P{!|DYuC@y69$WyJTsFgwRH+_ZWfO#o;^<VyQa40hwD~~|#3(t4_hp}y2!z4@(
zZSQL%XT~E@ZfG*DTqlt=Mofd~Jy)ck(~Q#;(j`tCpaLd!FXNiEz|-KvIm;VMRy2-W
zo>-{`9($;0v}x>z;r3cHJ24zSVg%~{>i*3|d^g;F2lhdtzy~ZZ^ONq#R<vfKw{>Fr
zo*G`!C(s+EW9y>00umot1ipC2cXYpYwl0vX!;{Fu4bj=H*)mE<uI;O|xhlS7ZJE{8
zte13Ksebiw9>4Zsnm%~M-X-zgY@(`DLPs`1btz$0HbLc;ur`~ZvPxK=O;A}SgaEZE
z?T}Hpe~6`K)sjVs_#RoX0mFc9(A&=*h@7T%HHG$fW4P@gz9pA(Qop1kxp_b$BMTRk
z0`wui=&2{&-<Zc#ra;`^<)bR%{#<+mlY%OVc$qG}X<|u7)5s1~Ch=s?h3tywln$8w
zLb3~0;LTCucYwmu0kv};iAJoKf#kORro!{7#0T)D2ojg!EoM#P-Oe^e0Z}#gTNMzz
z|EoD4_tc}zG8dBn%U5D1M4FBs7bP~U77rOaP4qTo=3)tDcqv>R+rCd~<`nFr7{bi)
z{N@)!E@zqXRAAaQO%3yBR#Yr^W=)3|@a+6CTPTUF5!_+Ky_I0OPxpa4#;PX4(Yh;6
zCu6C@XQ9A<SJSm(VtU|>O(R#vkNN+od-wRLs;mEhLJ|oIo}j2fQKLpp>ZPG#O$0SV
zCU8bVrGkozO4SExu@YqlqNoHXBb=U&rdF-JSZS-(+E#7r1#ggmB#2f4tzxx`R^^QG
zf?5Gl$nX8x=gcJmtL^iA|M=zgf;nfOeO-I)wbxpEt+loB&pArk!{iTy1kPX6n?e0x
zy_&psRT{7tMCY?96oh8KlA}m%EZ5Wt8-98q@q5O9+LKP1l^&s*EYUJoqo%{=LmjBj
z)q$zvJJv{Kjg=yXW2<IljsVzxguv4-5)EO21~CcY_pXfq8mo1y$fkRpmLEKDjsXrk
zHw#hIXBp)rY69~buD#hWc5hy>%V3>1b`}jjzO!gJb)A8S$%86uC$=7Bwd#Ubo(i$(
z6;)1b-8H^jI5Dpr6W`q-NZF43!qj-PI>H%9XVEv#b~^cArs?HG1XG1_m+<+%DLBaC
zxpH9z;p#r`J~y`?VqF;25Ke5c##j$tc|vI6z~jWmV&(2v6RtI5kIe`&E2bi+APge1
zaFo?qbQ~GY0Ky|7L$jt}Hh<+XxUNs_j&xDtb&ES>2Vo6uDv4hQHZKHyyc;eS_iM`O
zlG$>qOJ9=ZtAz7SCdYLKG|ozyG}aNBXoGMaQp#9@I<3~rfmzfwupsIVP&miu!cE!q
z8qn9^$<m*ICufbr=^?`|WSIxUGbp*zV1EN^B8NiJ#Ha8JKVoL1sqnx4Ex+&*i%W1W
zHT(j*Z=a=+;~#qMvQ~1Prk#c1^AC?|KxT6m|3Gzl{6n%tC`Kq<n<=(dI-MQwm%^b`
zpFnEJTJVm{7(r&?or!b16rlFFfAII2SH^tW!!^$<a5N<!JhZaesUuB<OuLp{(7J{Y
zkRU(IP<EtMp7z-ZX4}m&9R!0^=pJ^#)CvD{Gmu>$1+v;$FH!|?AIvGW7;u<)@fp^s
z&(JrBMrVg!(s$@SYeRK4B0l9@HB%Iu8E&Z!#lPF=Jj0>L=VpZBh)TWBnK>0G-Ml(n
z8>#x78$44DpFM&c62gbUw#KX`@PV_|H@2`I95t9b(Gzdav!8q09)QPCU2Bi!Jf{9Y
zkP{vKQ<wEbYG1hQZ>FIW=H0|7_thx-GD82OFCo69cLOH=a!r04Fkt&Xr^5Nj`EX4-
z@dl>OlL7Y<I3(!Y2ja-Qk=Gz_@enM9XyJo~v|K*WTXQ~w>k-%LHCTx0{t(8Xas`Z~
z^05^x{%nP?XWl#Wsqo6a6?%ysYkL?Z4`e-YCXVDit92BipVEgB!%0i<z3Ez{hLojG
zphcy<WYP?QNq<C#l(xd8`BaQ`+{DP0d{6J>@zj6}X(g`|f_%vubbTk5#l>}@790{A
zmOJcSpW(?J2&3t12$d8-V2?D;J3Z{vvhWW*GQ)@ObL*Xsj`XgH?RyviS@j(cf1fW_
z{Tk4+a^WO^^>~W`7FUFsz6a3vPXCT{24*JYyHRdeZNx!8Tzj2Xi_;!<3}J~~3b7$L
ztFyARXcy+lr#2Ue0%*zl8_!A%h|OzyN#@BQw2x6o{WxHtpI}|G1c>b%u-NHadSy4Z
zklm{U)HB(e0=CF>F6d}_Cd=Gwyr(o2AAl7hal|1LC_SQVzSLY}7qmxpo$hcYn}iN;
zq?J54^Ey5?Ww7p~@-I+?C1jsGA$7xnU}~cxuyi)Ue6pBPRC$}sD&t8;)|?o$YoV8G
zT$8QV)tY=7DA#hWAx?->SF%_OkmjS-m}SI>W(QdeBtzYYGl5qYLM*l>-e3{F5#4P<
z3Ck|(Oeir+@gsIT|44pg{P}b@Z;E>Z6^OD!&ORvp5-Gj-^JwCog8G(Gdxos!<9r*R
zTpNGa2lcWau|&_I<Nn|^(3EP|TJc9af<vZH(YLvm<2il?ZrWVqTd>-?W*=cIoTXj+
zO#BT&XkoEQX&-3U%HiaiP2jb-g$Z&(f6cDy6cd4p59@t|ggk=z1j`EU<M3VSMe53m
zX-0&Yf&c^fn!E{L`^<3sza*E1kAL+vluXmCB;Mzy)A(dHv+LryqIT`rEb;B)tpIkN
z^$=3pG-nhCDY|RPxf0&S42>s~Mt`m>)#;Aax)RW<ztiomW!fC<s_n{KLQmWH<cHod
zqHv|vx@sfzU?v0h^<uQeA@m8cHW(<~aa?GGW=6ci?s&V{d!?SCIUNR%UV}KOZzw)>
z5ppq!aiZViSW5-Rr~)tx367XR-V-VZ{@4<f*k~@+2SRP74^;n58OgAdxN<N0bGc{n
zL_6L0A@%%@KEsj7qsMCfpI{%Y(};))K+Fu`ZfXL7z9S%nyX$zYXUC6sN26LL{>I@M
z&E(Gcb20yowNG*xEVl)8{Ie)pSX4Ia9lNXDz^!04L%Yn1CYF^q*1i@S6ooD7{zV3=
z483frV$O2knm|7MNzAW}O9isoYRy63{Bc>dSOvR~Xv&Fp4mFm=KaQr%Sp)a9iHjTl
zGGl$jj1_dj97E%=9@^cwFcA@?99HYO4Ff*2Yd?y6l4DaxUEOtHsGDdL%DMCLMH8I`
z(ZqH%Rlla@i1nL~BhH7j(qVUjVIbS%d!OvaK0zh6DfUf+Bi_DOe%8~yGCXpD&)D8d
zF{BBzX*I!m^)DB1+aGfHkZR~=Ie}SdN1u9SXowjt^<J7Q-kL;1mA&J6<*hXAngY?n
zhg6sM+}Yaw%=p8O=}dY8Fps(me2!MMlC2NJ1-oMdt6;0S>;=n+qlI!l@}{r;K*&Q=
z@~kZN4rC7uMkW>^9T9G6LCjE#m;QrLHqL^{X2LLjYL7i2#AC^@E1p5B@$-XC1-67w
zGLu)ZoOe4h*8}rz01`MKa!x#MqZTw_soU+;B?G$$+b99lS7=D%$a-(qG~2zD)miIo
z+`JAk9IGg)9AAnMVR0m<+*U%m>xlKx#P!nDt<ZmOQ-{_N+PWvg;3P3#_AHAQY;SOe
z?1}sw*^?Xdmg>NB)=g2zJaqq1fI!#P4a?-QADqT$$Jah2OpG5HaaIy!SjszaFzgH|
zq{2eQWsMY;gwbjPh^f?;zSjts0F+%<JFx~<nU1|L{pSbmCJL09BYbRwdjt#Uo0+3t
z*eV%cEvGMFzYz;|z2KalK=nR2)5P1t-y?koL?b>FUxL^WpKkB^L+JJ$C&5}>kE2qw
zYFV^kxi*zhpFPDO0|Q=6y`k<RgB;M$(%9n69uqKn+Fu4#v%NIG951G!_)ipS`Ubyd
z<_VC!2e=?eJ?Wby8{@lkC{Zf)dr9znb@2PW;P*33j)L<+=!6XLK)4dy;XrbgG@sxR
z6ON6Y^LKBkM?ymG5ow#^z0a$B%ebhsEx3{A76zlbDlg;~Mq{?vh%$d6sZn@eC|Uoo
zZ}KlInR^*J;dL>lYha7$vJ$@}fvBX;8il~EU&h>x;2XrH>oPK(Q)z?0wXa#%$TKYJ
zK2TBumEqXyT1|bUd!44J``iDHeC(X4<fTTP_9z%OZse5(Wwuoh2VUQy{UKG<&tBuf
zlE?oc3>+`<-knlV6Fp*bS+w??8ta<p4Iy75g@l5;H;U#F-n){a)7K`ziOQl}+qm$`
zcKvV+Sz}Bqd8;az|AZje>kOiW1V#r-B+YCcm#1PX0LzaVw%YJM<^D%~E@8X6D@rtK
zt-q%PS3R@?GwIbq=!S9_oDp`_XUGtuGL_o-YrCW9C#})l5o`2k(ZYB&nnLg98*%+A
z_<pJU-Ul@}C+6gDFg^_8XZ63PVeY-G)AEYC->;?vr44Sm*4^Z&o75E9ZcDQ!tgFG+
zP{MdBitXi3x$G!jiorXN>w`!7n_Ng1{TieaRa>uWQVq7R#mD8ZVK`{c(1`<n>h0yq
z+|Yyqu=vpLDQbAKP9Oy|lcUZbSL+#Oq@0}}UIrcpBEI<_dcIhVOy#?ZZvF1Qp#+8z
zhHv5HbSN1ouno@tOeTu9bnA6c0D5X?ddj$9%rvg2NurB1eXHbSc;o53nPw+wvTD>&
z6JNUb%jk;+EVEjFrXmGT2#j=gdPA}&KA^F7y?+lqq`R?deb~COqp<)%R1&ugsy^gs
zMqEDX<Q|Cr_i#gn0~4Q7uDLDq&j0n+o^#Iw-;(VC%Zvt^%Sch6M+;sEC$6%K<MYGr
z_(p{j(Q#B`?Z-JRiw`h*`3LBkAyDaYRKn8F4rxB`q0pQIop+M&#SdT}!VhcY!=bTn
zrbW8_Wyt<dAQ(Dii(8uD9}zJmjg<%j8ZJARMyGQ7Q_fC3R?$LDrsNVmc?;g(-7ElM
zID66k6-tdd@j9ao>!v4*jo$B0!}aMSnD9`;WG+&k5-mJ!>a@gqE4IJ&P<zVmS^WFE
z@4lN$*j5?|1&z-^&#i}-v1=zG3nWYFK$=T0dqCDY)zf{45$Mv5q<Odf3ghA4^iTFg
z)e(77Sb4{s>^Z~RBhK2YRka_@Iv-1mu=8Q^$@pbqqHd?=mAUn$k*YP1NQZoA4^XRG
zmYT1ZNWqg5`khYaN!uDrpH|6>t(?`_d2$MF-<=DImdt!J{q(20U}9;(#3DUcW=TnW
z66CsCZfSKP=ZvDDQ4n{S^GqYGZNYX$#wmljVapN)xu^|GN`uY11ZbG<>X0=#JS3hT
zWJr$#EZ(mc$#j}!J`p|vPv^m7>-aZ;e^dF_#D>`d!1xhQ&d(zMN2d?GwfjF}BUMM&
z*kL?j3^BI6bL_z!gN?1xI~7%87vk|K79(dDq7?mMud!Y~y*?^Me;79RwP()kPh6(V
z;WSq2^WU|BG`mwpushveQA0x1dD`Y+uH4&?p(-LrWmdA)L$#`3vIqak+@L>PfEL!1
zylcS$ql&84BFxwJH$vQ-vBN*MX4X%Jo?tmP>m``q=M}8w>W=xZqx3>V{InnL{S<dr
zyOE-r6DlA0`ZmIek&sxwQ4t|dnDDjngv|Vu>X->mt?5G;^>wPbBwV$+v8qci4n|t3
zs|!+>6@^6#=1ygf%fqH0_fs&jti-)?1cLP3=~Zi(anu5o*=`qXVG!77R(ji?G6QKn
zSnG}*Ns!2*k(GR#O4yMEuwFY7+_^BW+CLqJ!*Pq?6hIoGYnj>Q;`a$K`J+qvjnq%p
zt>S!ZOw|<#aE(s=<S@#Lsx{%nrv=uvqiNJxgZs~w18W*nu|Zt6+Y@m<O}t*1*ic@#
zkQ0Pf#b%E(@Ngns&<gdELXIp%en)z0PZQSe$u()?xd4t2l(u%@b8m<7Z~Ea|MWN8c
zC4iX)S@ogaB^!;Nj@JwA=iY}yKIAxrvVjE<BfI1E61(7;2n(^`+3=>W5-Yi!qK#FX
zX{TW8W&=+6v=<jXV?8v^9<XMbGmc0aFUKr*;v^jnw6dHc&e@Z|*A|*<blrvgw2Z1i
z&{rUVNX^7?vx*`MCyr}$)`r{PDNMZ4Kb$(bKYF|p^a}V(L;w1r16+d+a1F6%!!11r
zTGuvEt-@U;@8^N*SE9~GjeNIjpPhv=z*SS@YuC)`-{|~U?b!vhn(W$H&9jPZXI67(
zePgI)?jfN#%WCe_Xu*~!+@#g&s45&a$|4IHJwZY`>kmXuAu`-cRFT=Iz{2Vypgl{-
ztwms`zFlZD_0AcUp3XnC9v+4gL+UG-)^cZS)iV4-t!qDmz;W`BYU+pfXGo3pU~EK9
zBvn_)MNvgH5s|Zww@W+TC@J_THLM>oCF`75!_G@<-WNk0?noCBou)4Fc40&9GuAcJ
zfLvlb{Ey;#5Q@QUO%2YfsMWA6Y&CossUkLtw!tc)I3+8+{hsvuwm*GK{1ZNTEBzPV
z8Iubx;6X$?qi+5i{<5UQ$-!nZfZiJJjwtRbzL5C1<SO<A)s%h>dJw>gvxL)$wtICy
zaI;_Qlkro*NKj_@CZT2PpXmh1nLd}_?Ea`(et}tjfmya|H)|sQ(n2SrAZ+4z$urJh
zG@0q6jqtIS3Jh+8{9tv}ht@*f8t^da845ote6IQsj1E879XaGcyI^zrDw1;in)BHv
zEP;xMkPv8Ts#&NNOH>+=9U&@_XfHB)IH0#b@`Q%^8kse#%By)rm*p%YU$}E@V}Z-G
zY97PR857bkf(vYs#4y-71?)6)W@OYKQ0ZcG$Bk1zY`n|>6m3EgJWw0@wt4H-t(<vF
zqw{;E^vdGxkVPr*sR~=)7ODNa)jEfX>Z~7MkiLWmAMW`pCR+RCWoLBOpIngsd-nUs
zVQc2t$qes+0*0~!9q+VFAdqUIiWX7wFrIuyiG%U{cyo?f_}z;#>!|kG%TA|3D>0R}
zSh8kjCuQ5U3+GOTMyFrUycf=zoc^mGvYVdOx~rO$C_x~zgn*&H^uNdzbylUfFy^e@
z3vQ6mLM)?34)-DV>G`IvSyT0H`rkxCx`7(KCvG8F-TZruRG6=N$=N$%>)69tL1+Ci
zw61+^DEmwT=94BR;X51U`RnKE`@pxK{Jp7j$WH29&%pBLo;poRwoWt7@EOST*^qh(
z6D+kTaF>JMhH;NLV-JDFZ4HB44ubqP?9^=MIVd~|<0E$+kCYpBkIP6G!`plFcTldd
zJMbr5mjeIxQ6$A#Xlm3=S}i!Tu(vmLtT&MhOT0b)xtnaBBD%8Tqeiw_#pz;In9r5o
zF@>e<0x|8+CpNJ^P=f-zr;5L~3KztqGg>|CK^;~uGwJ~6!;#;Jp9>Lr$9kxc_#eXx
z{3|0%8Hovt-?~ZtK=E@a*8ASCp4!b1kD$FdKSb-P<cA})^Y-v8JwVZwSTmHaZ1%#Z
zplx!xTHE8_(CevG$FV6Px}PXPO0<$|K^7d(er4cpa6P=R;gIg<%sa%PGO?wfWlTC?
zVA(<6*3BZxJL#g>0-{AraqYa?#Xtl<@AdWDp)K)26dlGG$`V_OVv;y9mjffyRs1)t
z4Z)&e;Z+c8l6Bf@)GnH$#N3h)0UFZHB=T-}W9+(yd4DG;t0GmU>8>s#9A>1E41Du1
z0clUykY|YurOaiLW~E^8wi&LW1Xc-K8$N|RJ8AAf!S9dht0J~h`Uo2JesmN3F#dz3
z={b;dIAduo!;_fO5AMat-*_5CuyI8$7#3jU6zNzHzx#JC(E2Da))C)@dix7pCV6}6
zEz!)B0ln7ac*9~J0wBGD4EFn+&%(!kot-RpNEAHITP>LF8Sfx(?vqSoP&{Llze*X4
zy(T`n2`S;!)V|rKq)o{*^`-Ui=htt_^r^qp|D<DIzrmiBrY|+wg!f61EpMtgHnyBQ
zqzzCAd(CVo*8(8dUC;j#Q2(H}`X=z?z^?ixUO+0tS$XfAiMe0u(Yr|UPOKy<_rwy^
zV?(>@OZ;4O%e*d=Wp15!0N(*dWwry~_j^>9O_<^*Y*7QbeTOm|`=+qa^K3}fbE71a
zH?6_PN7pIIdD}blWK6o`TW0j-sTpPLv)=vZ?=Gk(_a(inUMreG(8I^DVA1#6n<%tR
zDD2z+(}PTX1E|l(klY5qUZBtVQ>{;ekdzS4q)VwJM_=rq{SiU?33BGQKPqUyLhVoE
zW3GKoar$6t^L}!Jkp#2&-t&k51m9&BmBaT#dg1%nEE4{=`0jRoA-=cpDTnW0%Qp2N
z;rkJO{X4_=a{p5f-z`5Ohws~0WbnN;(ih*~VD57GF2{_W<NMarbNK$PLwAbrFPbc1
z)6skf4|4c^6&)ZUhwm5r3I8#^n*u0>IX_&|0%B-yNn2Ew!<P)co;em&5~tJ)|IhRB
zU+hdi{ylb3fdAj8(0e<_f9m@Z{Ffk-!T-?C@jqyPR$u%N+OJUi3gep_kHP;v4E|rA
z!~ZiNUbp>Dj+N53t_+`M6b*P!`0ib@P+ob@f%yuD3oFWS29r)U@cWv{b|@mBLi?X}
z<$`s<OZhGA_m1Mm6uKdf0V3i1Ygw%y0(9Hl7gy3)>siTvB9}#=eRQXZ?&N4Gm#$)u
zZoV37YOZ*e9GTl?X7HApkbziZYQ*2vl-bX|<&HXzYaC(+N8OY12qF&V{`N9#d3L!)
z6YrOBG`A)Gluzvk^C`F7&d#<WIA+>t`?C5UTW0E4nZEV^$^VpFZj1bc+;Y2~ga~dW
zz+^}`f4!M~cd#gr(I#o%?WTpDFF0pnZo&Nn^kBn6E#7N`nP#%E;2szH<S)2^exGs+
z?z0Xvpf6u=!NT$$p+FWZf*saMD*m+(=DYcx@8oy1PuDUIZ^EIx^NozZ-|6nS>72$4
z3mmBJ)ZAuo(Wz#ji<o=wU*!yRPd3srUol9AQg5EgFt^5gfv;Nm+V#AlK?iT)g`+6g
z`fXcuMkN+wkolJN``g~$%kS@l;5G33TOYgzet&C%*J{72Wx;E?|N58UwUk$@b&y#N
z9Q);M$=^^~;)%)}+nc_cLV^4j?58^D@*Wz^V($T>^4El4*yn7YIKA43I2^dY07Qme
zzDohA)!Xd+dS+73mr$mgB=rS5^WXHW>h3(tZ|^J;@`>TS!-Dp1o=$tC_}V5@_thD6
zNWZH-n{`T^hCaPcCPQc8s&l}ISM>(O@@x%@sUd?ZX<NkYksp-i$s;B{#y*mygLbn1
zko`!MVn5Fx(poC|UzaaGX8jYNLo61`ECx%?PQSGz@K5X&Spzrh%1EjSb>AHBirz%T
z?!*(Q|MFvqvy`2?4n$qMO_X&ul+KV{J2hb{l5VxAs-&(Gr4mr0zkb{KGSx=Y%-3aT
zm`l+xPX;->naeprcOP#SqU4x8QVjFaD<wx%j;HHnG1zW!yvk2lDD*c8Wh8{%WD5ym
ztPi7l+<G~XYnD&HgqJ*iEb#B;K7gxAymODjzb@n1+wr&>qEN=M|2e<<he_ueS$JWq
z^*P#zq^7F!>Cuii3q?;47rnk3%kyBRIHn%oZMoQ+Yf8)W&T3siY16Zl{Ei{N*g=1W
zn*Ka<WL|%Un|e;lcISD&J6|JN+ksT%-XN2QzTg@eO?<w^O3q+|_cIpoZAlr_Nk(CB
zKDJvZy?<_hXM5?sSEEhuLjet^+t|MM#gCE*J7vU~S)!;b0e%oGAnURvteAQy@?dK0
z`l$1{?Vy=X6`%gwFTs<s#&RJ*l>PyppolkiBHq{z;mKnaLK=-FaJEv?gdLO0f}~>4
zVvurkZuS8X3SK$!5^enOQOzUw+-WL?XOM(=%l>3!_Iuy|dp|QDCmxYEAHSl!YM-2)
zk+pusw*(bWP{m>^0huz|8KEu@{~Fy<$d5g-c{zMJ)6|>6mvN@DFT@v4`47}7@lbT0
zCEhQ;rVENUFDVl)6qtH;z?ZF$<l)Odc=5ZI-PyjEMVQrmlo5hK8t>1%rFSzJ1D*!>
z!sv~2o2jFF<+QfG_);3+OX<JCm+CtVzIZu&Iqdc?!xt}~uyDL%2n(h(OY4|OZ||i(
z!iXgIL71K3P<a+%UVT{L@XtT}xqRBBaMJC+KF+IfX1b>Ks2t8r^>L;yyMBFq*}W<c
zUoH)*f>3gYSK_lR@c>_@2bE6lgD*r(*@?bk2YjhA^=9y8KU3LP#FtAd^YCTOVhw%=
zd|5?umcIPa<k1~`JHeMle9Ym?HN5QvU#4d9Wx~$zr7XY~f@ggpeF^=>;LFAwzHIu{
zm*LCCe0(YO@kL=v#JzeO9`n&<`i|(b6Aa2pbN4>vqf2h<xz(g(Db97g3SG=zadZw{
zrtd)SeSCTKusnPT2X#&Fi!U`nt%h*r(H98USHYK0A5^b1_|nar?pYS@?PNddO<zu=
ze_8tSD^t%7`0_K7v-onA$zy1w&zM@t9DQlxV-8<V<!vYUGChkglXr$M<pI9n==6p7
zvU-uhmn}Jb>AdaB@Wn(O$uKT>ts44*nafgbINpPg_z1HDpYmA6PH?C?K&xW!>IZy;
zX@frd1m)r&r6rqk7AeA+X3fagayZi@oPpoX-;eI8$itVxrYe!DKJ=v|sL>FuJbZy@
zeHDCp^8S2$d6c)Wj4!*>zbw97YU<emU%p3j7GK7jJi1_XC-kL`k2!ofn75taOH&qK
zrtS=1N-%ANKP_^`mc;f1$|(93uprC7G`ja1lc`kksXqs6xT?eH&(T=yK%IHv$o{m6
z?;Tulu@B5tIPv|;f*9ev9=}hU?y%Wg;mWV7^L~s;3=e_ul>7_4mo5jBZgDy<-HCvo
zPZihR3P0^Wu8m3D)4}-2iddol-Wg9V6D#xGAZOHRFkH1#u~((d|CpbC=g*qnJbwBm
zKOsldR+5m%Pal`T$(`}j8G5m=;YW5qIDh_4y*u*L-!;|y{Pdf^P!fpGProgGx&r;j
zo8pgjd|?>38dH(3?=r7dru-!A?=We+kqT00Q66o))(iX<{83Mg{>&p@#6jv$kIx^y
z{wEEbe3|7E@b@o~F7>@(s2?+##8CUnm3;bjAK$VJ^^bW;Z_3JpIze5XemncFhPrPv
z4E8P=2K!;+FDl;D{CDr7*LmhkzI!`XK7O!F6LVXk6<Uljct~bB3k;nBnK7!bj8!dW
zPC&OCjbD781<5m{V?m<&gLqmF5@T=_B+rZ~ab0kiizp)TusnV!HeP1_t$SsCkIAx3
z_mi9KC4AN&Hc@t`?f%L1qIRQo&0Gex)JJe6dYR&*n#35zI|5&PEMWtSRwbv3H{(~w
zDFaXEOy!B=GGjB@t`@rL1$PXQ5?W8j(6Fn%MoE0C({ERzT|fMxbzkj2>2YQ5QEN$m
zq%O=o8X)<pUN*JfRz~VXKc+ublzWuXVvs7bpg#^aRG1D5Li|V)<wpjGSj4&W)sIBD
z5)%&BkP@f9OjB83N;=iomj}O<=GWOb9WhLGAa8K;XB)M(z{tb^#`<alB1}kXx^MG-
zc10=TcW3&a7>((7HotlDtj@#k1nn~CVZ;a7tn=BZ^EYWmjkR%&EiA}GIAbq|$X4C8
zz|KNufwnrokLDz`%=`L_NYvc*CYu3PS5Y(-*`J9-Z3;2-`yX|`?w(^ZoeDgLznrQk
zM(32IPyoA`_{K&#gQi9q_d)MG^wl`}MVyc173g$%*S)2yl1z+?)}KLKx!b#sJ|oq%
zG-a13w(o0=?$9}{Gx~FvbI$k%^=q@C$D=A{S;-4|Yyh!}jQX`rAFxQ&v2BUfs(TOp
z1Kbz&#73JmK74_f29yR2Hp7Pwcu)S3UM9Mbr&nN(e{n^rmDGKeG6^ej?`i`=GMx|>
zm?S&3{~WygboZ+B_eQrxSh9E`|8;*8)kEsirK#qnbuHV6TGzJFcwI{mPxI721qw}k
zwwu*z?BU$eWw?nD{2mvSles%O(1T<1G_bU$BmNMfMfa4`Aqho;yS)tjBiN>z{^O73
z78N>XKK-sXHR%wyOmnBM>qc<5ZaQF>eYHC{;+_oC{bYPl1XmX+Xj=>D6>OE&TESE{
zIPY?!9V(9A`jd?OdPPot{plY>S2O&j%UgzDxQn*?=sPm|g)hIpx?kRY5jOSgz%Lw6
zvZ2ioa&LcLe5fZ@uw0s_H`cyoB`-45Gev}M#Mj-4O_8d16e!Z`nZ`kKeUlJ2Qsp`I
zO)?!>AS*(v^%(j#{AKtn)<T{VQwPAX2sMNU%rOaoK<K8K6|iw~Be=uc-s(SL;jmmN
zbMx<aGdWhU5WD{%6o&HCn^?u+-XlwOJ|1r}-Hvi7U*x;ZrWP93vO6xc-=Gup-_Rv*
z995;S%I+ii=jSh{A3@vb^AT#boUD(Ui>`ElFMKbVwt1aBv^`x#d7Z@{Zf{<f9_Cl(
zuh&FJxlnLUAwEPk9aih__?W(w|BwXJE`%wZSRqH0l1T0QR`PH9`cZy)ANax}H{=q0
zW^H^QY$PG_$CeTN-rH9FS<mp7)4!#nM%Pwy0m+LSfn1}5f{AbwgKL(>E{&u{Yh8p}
zwhWzprN1WR(*kl2Sllcyr}nDo92%<Wh<!74`BI30^31-%tfK`bjMndd(wx{nI9jVB
zik}jJ7+4}KmsLP~10C@-UXf5p@Et_2@PpFu3akfrNjFiCsdpj%S@i0k=_^U`;j8+W
z#nz-Hy=XoS+_n#$^MmfBch~Qjq6C%6rl<8|9@26C^ESqG&&%@kWLM50UFoy+o6!9q
z=wh?<IefZ_+9dk1gU?3Td1m;NVry;^8amq=o#lzGJ+ZQfHOt0n^GZIr-_&{iWy+FD
zE~cKA$K~RtC{?NC7W00$-W9D`eh}E!bAe--(;>n)QpHFDH+7gOV_UOPDcF$7AiD&4
zCb@;EgpGk|7`u<C^P(c3ycTgfBCIE_nnT~MMtUYx`sMzta>-4)@oZq6n4Z47-P4Br
z6h<5@qUc1mpZ8kw`gcKoj_&pmW0QuFGS({Wa5(=RJs+OfnK00}VcQP-R~Oe2Rja+=
zeoAX_9f3&e%02h>?L94z%UmI3C9k8kPGh@Jpvb%K1I=3HPmXs!^mkNNU%7f-NpdJ`
z_yY!WB;o07C6}ufJ=B;7K5-xYiCnqV!L2}}AR5=vZyEcfMsH87--ekU^~l!gFw)6V
zPZ!?cF|ieUzh`;SRKCowiF_2C8w6~v;v*0A&bg7WE<8ltT?kupQd{O$u$9~lM>%e1
zFA=oi`@+tclKA+jdo@PC#k;piCBKXK;oUJ#Q&kwK`4wGl*yKLR=88O7+NjZWzvZBi
z2SdwtQU_CyWu&I7#_8y@A1i*1=wKenlzDC7N8_x7YMvWDFBcEa&MNn<))>&DxAN8*
zzA1xmtrJ-~X83#6U7r~~mkCZLbKl{g8Vuhe$X@>NP0;gFm?z+vH~d_3cK9TDFWtfL
zdC1O(@AT@MOZS%rvtY?j+A`!|Cf>8oP4_YA&ZO2=0X`*KWf&>SyLWI>{GoZ7%8T|}
z^MZkXQh3G|Tb<+A7^zy&y23+cvzDRF+BEnj%u>6t$%(ClV;3j35-4mQ4F#Abuq*CI
z@>Wshzwn>-rS{k#G>;OMtk(O1rK<OeZvd|}gkO{LaB&?MY~7N1>V8&PXq-FTl|`=c
zkMyVV^m)`N4DrA5kba32bH!k~UQY}sl&;m2f~c9>$%e0G0o=5#U~T#!(!F<Q`ZO?h
zt?v*Q=eJk9p4@%BiFccOv82=en|MzyM%%2LcpLL?;{8quD{pUev`$xb37_IDvT)gH
z@qR<h28vkIiNvid5(R_X(RI9n^kgX53W+CmqG2Csg-@pc7>uVOUqPuGC<VuADA#1x
zy53bqM64>cSF6$eS>b=;gRTeLzrZJ9wbH5QU1w_|UKG!`5*+RFud_usL~z%2wrAq(
z6z*ye#)NS8Z5U_-dHq-Jb-Y5<Hp3HaK&LAiDpkCH^MO(l>{Wc7`Q2Z?(i2Ewpy<el
zex5QPj?%9Zx7w+;c2#a&`~tGa1RhQLM<l$)H=~;>Hd;;yi*1VV>FuTEWVD_7IxIM?
zi$9p=Bu3Lm+`I~h>%!T31Fx<`sX87iAtfP1*B_6Doa)i3x2?f@T7%DqHeXO~4W3bL
zRSl`Is;0n1S6x_9ZdGxisaL}A6g&klF^GL}N7Ah3XxA9C5rw<P81Nv)Tdk)7>!^!)
zeUFLI=P&NyI0!PuwvU1Ic;{+vof}i8-i$|^@A13v$MvTFb&$)w=A5>@r_&6GXi(6W
zi$F26n|b3KWfN&7_kxCDLpt6`v-RNsCJE&=@03$?S7jHr$ybj-C&-1_6T<U*%vDvb
z?^1m@(SrlU8WHOGJq0W>EBP|XpjVxM<5RV}he&n^G)Vi?ayW5GNkN?Zo*7N5czJ7<
zmIdQlQchWxpjZ7XF}rNldu`gbEmy~<z$7ul#t2%{IkaX3K>%h-J;K&&H@X)<la3(;
z<4J4qTtqd#RcmUk!LyW7E&a;b3UuBab?>hbVPk(a@HI&>U8?E76QBSYJysrt>bK<b
zF~BC?z;8}Q%!4X}CHBj4HZJ7wTJDfaENcyw8J<vF(Eauz$qfzS^~N}Plz)KMmwz87
zT(q{k11}eh$jN>e)WR3D&t)pDp&L5q{QNe-ObX~+UcqI0-iB3916tV-jyjP8x2^`3
zzd6V7_pHy8Z^vLisEOx@seg+<r7!N0H>Fn~ESV{_S|8F*XeO-T^SlXbCWo1@))yFh
zFyx5~^M*Xe)WPMtR_iRX<ee9O*;pn~Qk{=DTXOx+v;W4P*WCXdWnHWXMrNB>VEUQc
zh<ys!dK4B0-Pig2FU|yRJNcnmcU<V-mU=Lj`M9Ad`~thyREX9OO*jZ;T}@W#87!2B
zXFe?=NuSp9YZ8QLO4yi5Xb%!X4B6yREfBSF_;J0^STPksw32ijVW919!o*f#X&Hyy
zMMy%4ErWe{F~6j;TOPo`S{~JP$k6G7v@Qp9`FGA0w9~n|^mmQ9Mg%ydio=&37)n3F
zm;-rDnD)TzuZ(Fo+=>)%4tuBJBUoicT81ca{G}HxJGy4u?hKY>p*47%lsnmFD69Tc
z!NX?wRKX^*c$5$imLN}N1@3SA_6<Rvu7)NGKzbX@@-vkfjf(HZVOC$iU;o?H_uMb&
zeiK`^Ki>g0IyT2xW>!`?4T&24S_KZEfElkgz+r~c8O~uaU<@xcvZw-_<@lW)h-%Mj
zur2*NBqG0_rG`1#D^sswJ<_{So!>8CugWoZ@GiD=b$UhKci5Qpg6wxce`ogH&%ZGH
zF4_zYhSxDYFe5O$%qhGFBar={cgRIzWLBh~yGo4AiuCj5cX@hU@cVaurO!RXS)Jz&
zF&U0#NML+U1QM7d<j%Xa+?;LBQ{$Z{xXU<J_J|SZ<i?WXle@bNt`j^Nzdml;K)9E@
zwoE(I4ANm{^vP#t@M-p$8G^u)F)Ob4%#2@1+gXN}sezY~e4-lQWlY`Gezx~nC`)ai
z;l<Hr`y9u}Gr6lm)Kq5^_pmi*&L%jPY$w8JeI4J}b$Z+V6e^cFq2S9hu)Msh-f#uF
z=w3=)-CwWhl-1s@(y+@Xyx5*a?R+D2Da74)Cb5SwgN8H8Fi#nF2};mVs{hK3yQp^q
zq2x9A67>fU@$RtJF|jtP8SpubEYsIU=kMbkPn$YEBCmPJcYWT&@G;U{N<o5g)Y%2-
z!^0>B7&7%qI#DOAi`&&)rRU8>1T>S8qC{k5ygWA5=4u)&rI2NGbI&qVI&MvdQ7KpE
zIGDiJJ?N>GsJIk;k!^;c3oEVGGm$DxpEA6Ly4ADVS(cU_D{KF%C_U_9R>t`#kV-X;
zX5uBC5!y##1#)7bZooi{K<L+=zw>lctuAtcA<pE_?stZV$nKT#@3FT`c2?(YEt&oy
zO4k{eN#inZVn2DO+$X>BDO{Y?9zRSq)qx3g12mp#2xVP}gH*0xmJ5`>zL}(IO<?!i
z-k&b;MTdv3@I{B82fw%Six+sSvW46^CC<j~1M~X34^HL^H0cgml{g-`TYe0*|2B*q
zIgice%-dA+9&NW*`8}*w24%`O6380qY6QPH7}Vu&%Du|>Pn}NtFMtKB6E$q$ru|Lv
zw@tMATmQVBZK}vxurCOiY7CVc5o&QLR2stRw00TcE)@ExpNTzJzq&DX4HyuL&R-u2
zZ3IbJQBU~s=OGabzb5o}Xmkmx>^)=WGCm&m@|DwE5LlWX#CPQzZStK=zEAgz?M*E_
zknd=cZTHmD?p=@@`E9ISrWS~}r5S4NV%$XI@P~^TFBLv!Car}J(qshfPoUndds?m6
zlgbkn!wpd}4sxlYo0M1g(i048B|h~XJTt2})?1_TnpJp@K7&mEf=0qXBvhK%GQet8
z=<Jj|#K7sfH~gxCdV?x=Ud^*qLm$lDVt9`=4rtf-0B`!6e97UDZ~5>J?fIu91X7Vf
z-)T~H6S)4QK2!ZIcLer*n`Ga2wPbAU$bNT|_*P#ODfWKOoAeX{p+I8v-6!r~@8R3`
zy<e1fe*bM#&xzUN$iTkuWRlqh{o}}^OrEPakLYXPw|8buriYRzi{+VAP_~8M(9sjS
z?_^k}>*@Dz+%44mKCvK-OdDAtSfhfi%fJ17sf-7`v(Pdx)p>?Cggel@`1{1idzNRm
zhT;W0L+{m|HU{kltD)~TBzJO_2k)b@mzuKm<=P>%EqG1Gl%o5ikj^LJ=E22pEyK-k
zov@(=U%%z+p&t`q2J5TM{vwi0$vW@m$)&7O1RzR7W}1mFfv&EzzE%P1n#U=g7zItl
zCt};k^RQrz{m3!?Um@$xy5`5)AyPwH?8VDJsho2CvQH{mheZ_WXK#K(Ki!9!{X~7y
zUyChV)L+DYWa>2k&$ObumheW0k{M>qXzY0jIJEj^l|e{u(Jz1AnRiP>IqLj__SLN%
zOG`;J(J#&UB3_r83vYxnIp(a<R44#$xr%roszTiB$LJRXl=T_20ZK076EJ#00*kT8
zeFxBIcV_xDnZ*U+y?8}e{Zxb?ycX`_e@-sz%gu}|L9<P(HNeK4#5%v1AWJXl|74!@
z$D`B-`s+&AxkQO|`r~M{iN_rjh4Ds|gc=*+RD`8qD110`7D{*I=#2eHZaO%EW-18b
zp+I{&kS1&hbCmu8*}cR$K7aP-n9ra6I{1Bs-#q&K<@kNYU3vJu0;u}<z31Q@e&1QT
zQ~aJxavpyF$dt{)@3!jy7QY`n?f=L4efgaRzppvq-{JQpW$J_9WpnfJd(SKWAK>?^
zXuk9CTZo;iFK6Wl&Ho!5?-Nvti}HLN4-mZWzsK+2oaN*9QJ4Any?^j~2ET1N`AYV;
z!Tm1qq$lN_D8-~-(|v+g>z%AR_*|)KV{^G?4|PXPD0Zp1XIo1aUQlwq&2in7ef{e`
zWxdR9H_m*DRZKu05l;za72W-&v<?tn%tDc8_OsoImG;Pfv-W72J0xT!YxtVs*HlR$
zNh)#}iq|Z2$yt=DNjxzX2Gg7xz?T@mV#=)DS?5kNol}S$dpxY!JtB&Spc{f5-ap#t
zK?e;pufBqGok-ssC_Ps*MyTF$yZ9D8neE9bs^A_%QlHlQJ607N2ycJ0sv4!I#8yT-
z`U~Voa!BoU`wXHQo;|J2Ss6`@Xb-zLwir_8Ub~1KL~pR&o7d~<h@0Dk1Zc1i9&Qnw
zSb6fuqFsIX#0G{tcPYrihqK6$<LYKzq-kkP4g4#mfyt<qq1c;IH$)6K#D+$cmaTAx
zaD=kl@y`x8#vfSGv)Vwzb_Z6_$)4{iK&Zm3mN?6-<VsbgSxUzY*%!S9ZdU7M5Kt;d
z@%G2xD%N74oLs~r2q&gjB9|)ep3!4e1KY{Kc6_RNqfu#;6Rx#9n!05&b2mP9pXM4V
zsYxF>QRGoEx0=vJnmfyO2Y(s?HDXC4f{S<^!d}H+kESM9k54sCR<^|Q67RGhVaZne
zYW#yGiq@r*{$qZ)8?oln@~qW9Z2J8eFQ(svKDi^)Z%)eAFwUUgKa=voS9qq17lpI^
zrfWOxcV<wg&+2^8@4W-@DCoOHs{H=H)TjT>kP7dHHiVzrkKG{^@pN_+-*-7{8d8z&
zm(g#S_4qFo3;=~TB(CxKpIQBca3hU`+C!C%Xkl0D^Ao%W{G3SxE`K7)n|C^Xkt~{C
z`<=6q^JVvpl89Szjcz19j+Z*r5ALvQ!UeCmr*YqAY`E=?Ct_Cju5Aie0Y4Nwuy)vd
zbD!<r=Kk7O;xC-NSR1;(QP+js)3}E-_HD{x+|<2Cmf!TtuZ|s88{CI`v>WLtLOPyG
zSgn>({X+3U{`I#y5(NLyw|e42IG?|nirzBJjW;F*UGC~E`(!$E-W6Ig=NNdBE^j8v
z+`i*G&Dj)qd?MtIZ6a>bk<|^Y?^#J%0+OO}-=}e(#EU=f`xtj-z4_y>-C_KPXU2a(
zX8aPpBDxn-wxTdAt<(=0HE^JA1BVR!R>zLYjK4zn0c(_}no-8?Q$69w1<SLk&acfM
z^#o9SC!@anmuA#{d%gTCY*_T7fJH|gFua}Nc8#r5zq-aw(2rL4NZN`zJ)9Yj97{;6
zBY71uE!FqoFY{y~frV?&i(moH$6oP~$GaERV8dlB(ZWOmf_w}MJ4L@hw?Xudg(!E`
zgk1f?&ePJmoEso!9uEE|kK^5$b_)9qv@bL_p~1QErjRtqwVjqR@C&<VObCxWV^aKu
z`CFk$^Q;BQ8Jl~Y=N1Fqc@E36qq`rWz?K)(F1N<6OO4voCf-BGhJN11KvBy!>dvuI
zH({tUiKC48|BQEL+F|FsN!{GK20mh{R2eQDTSg?%VOHyV0#SS4cpkDUU>5C+Y}M<0
zTf)0cs$%#xK0BJdS{{xz`qFC_NH9EOLU&5^tAP6L1hYVRlk-YyIS`xG%2S=0hUB#j
zZT@He`0n@~<NJphU&nj>s@7qTLpc7iUg}EO-fc63+nd3Scjwd~H=yR*4*@lP_;}}{
zny@o7l0L!E?f_pgNz+Y41i^iypZ9h8Cspo-Yt^;$>bjp2Vw4Lp^iZjXMoa~(RcY9r
z1M%l%IrGJv(8{^9iM_P2`@8C-(A-50j?DIy&ePs8@mUNwbQ0h^5yWEY3U4N^Zcv>!
zfNHR2I}~HT#)7xH_wI#%vfr_5---3N9_$B=*oeAvA;OF|f-cLVsU&?a!}F5gHk7X}
z6y`#7=z;D0E#QJm7M?OhXI40SU{W!M!<$*<5qE|(?`46mDN;Lw%bukIkhR;wg^UHZ
z!>G}Uy{D4+Fmuk)v7ykr7nOI!nK2^bUZC=oJXZ$_&`9kC5#pzsI^MJvp5)hIRBOfF
z0#nBZQ^yQb#|07mqE!bGxGt!}+AelhqdTsK(5Hn^!6S0~9Jp7kvq^|8Y|}TmT^<Sx
zJ`J~>eHv@qV~3!ytc<2c71#v?(S9%fthANAvJfy8iW88nwgzW?_Yc`3Fy~93z?#9M
zK|GLfVl|a>fQsg9)Mkiv`cDA1jqhS?cJ}>8!FP#_JNa(U@7l<h^!J2*M`!3I^)34M
z`4w?1mp_l*nc#uzC~OuNr0>Xp^!>qHX2!Ku-T~J#B3UdxsBF*;@kW?9nj`+{q)`@5
z4!-ur!^PL?)Oor&SWfcIh~D0+pY0Y%)gUaKhi-OSq>_0zkQvSHJ0@rssXyc^T#Csd
zVCXMneGtE78rRS*A_cqC1^l2%_BMa?8S8F?H!}gjR~PcQ;;<i{Tj!xkO;4*CTpp9W
znY+!9Dg=n$hkS;9srp-j>Pz#h|D(@cbl(x|yPWi@uXgIOiWYu#PnCWd&O(0l=QZu|
zSx<y~N}%3G*UzHZ*k#@^G=g~-k*?_vn(t_;s1^PpTKk06y1@`guP9M-bo_mSr`jD`
z`r)Tjz~)gFsrACv*cEWYm}d}HbJPPxYHQL@rR5@Slg^BzBA_z1y82;@y1n|YqKDKY
z4ll>2j)YE*H&#}w2auGSQ&8_tdLYDQM$mM+F$PwF&G6(@k*QfP<pOfKxA7LU1=N@*
z`lf|S9Xx;$HQo?f@^h^sm!bH6Hj{%YypI;kHd(RJ-eI{`=Nqx)ZE#;`pX?*o_o>`h
z*#vr?6<pUnoqHf{r`5+Y=SDLxUcKqYUX8)G`xriUx`DcfOp8e{_67@ns;2;Jp7r*d
zukQOOC$uW|2AC89pr^&hw@UAm;Hlc{=1B$s=!G|UukzBHf9#8%#KyH+6_+M`rdaDX
zHiI(S4;c=|MCN`k{dHDwZoLD$lT%mTx5e$B*zz4Kc^jFLA%>nx)U8aWJox$Xx4QiJ
zTOW-)j$>Q#O>5DgvyqmEQ>XMSMhmH-_lqBpey@KYeg*b5q6@yB=Yz9~P<f+n{!Z+j
zh_jXR$w>uO%ObT~Bi5L$ganMRu_*+ud=+XiNlyt6(?8+A#FlC+c{hVll=xI}`H%9t
z3V&HAqf*mBtQaFBiCB2XE*NsRZsM{B;aNB}C$EotcORLLDt`ZBWzI+H+fS-v@2k7X
zQ3ho2AKG_o=z|YXUh4Fs&WF6}n*+=gC@^tioviTAeo%-@AsJfMH9BdS97J>O_X&4J
zMAZcD;2uSPS=D&^3?ziU?<-P!V})!bt!wsV45BuRRDeZqsJ@Sjw8Sp#efWS{ddz(B
zG3(x|wP-)^?&Mc}sBCaP9q)WJzG@ZWa@*9bkG5v5P4>!n=WbK>>`4n-E81y>66Ur_
zMQ^rKTz{Q9_C;Xrtt>^DODWJY;AF4ERFs_Fd~UJyEfbQnnJdxmCU;_WW5HZ|<irt}
zt22T|cUGk-1rNzl(|Bjp3$~N%vafkSB!CAPIjbT*DLj8WkcW$$d;VtJ+BZHdHWJlh
zr0PRviqpBV9ivmDs-uR_D)jC_U*71>g^B18?Mv!fOKl&?_ca7(97ljNDwdWowni>c
z5(vE`RK$VMbjpovSD8ZqGS1~)6ix1|G6LK=6U!T&5uN$49T3QZ6U*6_namp96hh3{
zU?Qmmdr2WLU}_e4;34S7xoktd*RM}@HvKq5c5L^D!KA=DG2J2~3Oz$JsUbgdztQrT
znVL}S{KWPvxE+JFme_ull{}9DcJ&LB8-71Ih2&szFmUkhyi&4xgbA6Hn9IduH*yY1
zdibCh+Xy*twQ?_4Px?Ha(YNKdmDpZuC3i6uSDT9CuLnJ<ZLLrMCad+Y3<wC>smqa}
zo-s`8@yCfh^GDHDFq~{bA%dC~M1YWn1a_O<4MbkVtNL2wl@HK<_6Or56;5m`v=+Rd
z9Y=ui;nZmbUddnjB6{aspKwms#!#m<+DxrfE8gD3l~)VROo%)RTK5G#1*X3gkVgb_
z2notu<~{a67Kz*Vs*rX*63_CHc$i6?Tj}GkvwFNUqATLg1zqP>#LvX6%tzPC^EUT1
zINOX=5JoJBRBe%=ez<l;1ks>A#jR`^oZb2(^?h6!7-(=rw~A_3k~$M_bY|t_?8Oz$
z-WB9G2-~%Dgar>XI6JB{4?BCIW(FLB!XE{xoZ8RejTgHD>k-+P2I68@zweMuvgGX~
z=3_}(A)>NdMMmn|8vulzzh%TeTR`B#<{S*dsVn!&!eCRI+4*f294oO4Mqv&zK_&|1
zTru(^(%77VSb^`hPbpAaL4mxk%e5`G&_N*SV_y0Y(|5R&twKzH8zI00UM4S%5Q3VU
zYM%9eNYV7ohPwOZ$zgJ1=j+{Ta`Ghk@O*MY&e9h{f^z)tVyz4ma~~y#hPun9wOJ1m
z0W+cfaan=0QTt=T7Nb3RJ3WtBv29uEFM`V5M&53_a*Omm7_<0%AKVmso$r3N{(2v)
zOF#|ppUs+f@HyS>E1z05+>o;x_NXpf<d3F^&s~_Mz`P=2qk#2(O$FKn{3Q~wGcYRJ
zUeb5dH(%caKqq^hg;Lk~kPKFDdM`EGrnObhYLNwp*$Y8ZLho>sN5Hp!;r>{Vei=w)
z@Z-8E2&AhGIoALn=~Zho6g@Qx<(~xSLhm2f8N{gb5u+2tI8j=GQ&<;1Qrt_&@lOll
ziE4VceuL?CI*<&+Ih1&J&(XMfN`FRPVL&jyb>6ee$_lSD@;~{Q-|pLct%U%a?qz~d
zc{tyQWWaGe<Ptld3}2Q0JC4WRFGuSTV0rqTv($&>>7L*>^ImoK=ALw;{&V<GIgSZ_
z_X&Q72EXs~oBn0+a(D21fAFi!Z9cs7<gdiLlWk{6MK7I`9r&ik4%f7!k2+$A5z4IO
zfg-IKi{vRu%=xMB(i(NP`^M4(rRg)K&7)8At$(<O0N+rK(91KnAhHueRyS6_97~pC
z%`rFqD2TyUXDHdRhLZWq*cdK*4@i{;s+D7^C4Z4D`GH)+D`9pBw_-aDTm?{#O;3rT
zXw~N2!a34d(Uj-PC<JRk!^mmnR^lIEW7L)L?*~sBROLPNt<;fk>DS<^9!_?P*2_+@
z(st1zyyx4cLpO~zo;sE74)Ny3&<_INyECdO#xoroi9RBE40K?={F&fRrZUfA=e;bs
zukw0Rx}&m`ZlD=BDgme*a_~PW@4S<vP$h;!9ak;91Z8dKS?`?~6l#f~P!TrHiP8su
zhtr2j-McnowI(f(KeyddU%PN}sa<$-iQP52%nZGDWBg6qmC54=?K(hN(^WrEA2>qc
z>>VAk&XdzG`lOt8xJhfZ_v}doJ^tyL!ql$x@A+l@Cq5`iFCg2F_=o(Tc()P;{OZB(
z%%;2>1TIuSzkiLK8M9i)gLRGW%;~8H*uSQRg;yRGa(~}KKXk`vMd`@ji>g_zokAFQ
zMzgXd%x6F6BEF9N{q6i8KQ9COG4$)J!M^PW;tv0E3&nl#C(orj3Z0vrrhYk(>Qlrq
z4J@6&vp0w$0$FF>5SGCToSG_029xSU_w`#7{MPB$8jLz}n$uvriAB5$Yk#Z<+x@Ys
zw!vM6ju;YkhgCQYm{7bNgOl|Ay}<mddhNr`IiRwfB>UzfC3{F`JLjM>9Y$zd93D>*
z*isi71<C~<m(gC%UyNo@;PsdtlZJb&n;PuQNuL%*DgC3L$^@UkmtVS9_GmV{1cN+{
z$9XghDXGjOB{_Z|SRvP*p;>xASRwEC(+WX_T-ymhv@x6-bu<*m`(UA{!nkJXe>ov&
zQ;)<6Np08Y%xI1{e-VD9-!gl93y+};7993f>c8Hve|k{ADlqk5#{>0Gk2tep>F;O_
zWc6WY2GV!3{DS?>c}DBiNTns-bw}nc)bOQjAO@M!r-(-|`)P2qy!5$+-g#t~K6f8-
zrc-LCjisMg---G4eb_{OGn&%pQ<)bT<?k$)o$l`&Kj7EUYpqAcZx7a^mLN_?vEvf&
z^p^wTg5PV9?iu!yy?B_G;Fi^>P;~e-CyXNe+a;*anY!G0$(%adomb;;ojn@}mVs@K
z*uHu-EShBETB@ShLy#wFXUbqpxC=#_?R&3@ao~wvb%^dA<m=_vPfKj?Kl|py`@8b+
z&Dkj_OBdRyD?ayjj}y1=3LjXSS?CVxQ4^3lHy+vO4h&R@hHLvYOWE~c7G%p(-=lJB
z%fr4a<<}G2_qJMPFq?S)u*CMtIj1+KichkJ!mB;Jg?6GB6y4WY(B88?;2TYLDQQgh
ziaCel)p)<MUr_WA7lP#Sy}vg#ET)FU_L|w>ZL=Qghkts!l0!@wBazX5eRtaHi_G$v
z42&Vwi7owSuT9yTu<`rm>?e6Gi4%NbG;6v&_6V-Igk<Az@{?II1|L$<eP_@=djBxp
z$?LWcua<|!zC$u+0Y$@%XhzsL23B~BP-_R$Ia}vIIKSdsKW9ixN=fG~d}61y9-J>Z
z=dL;{`EAj_6xRFr-Yz^7!49s-bY}V`T9%w^%D*n?Ps>TPDPf0GyVCGtgIp0REH@iu
z`mM}<)iSSuj3!#YJGLzRNRV+-CZlh%SQl!+#olVY$FHzF{BV$uvwgq98%>3E^kZyE
z_|f3&l+4%JeD&9x`zM)(Nbh;Rsq10cMrjm}Na~*kY|1_FWsp?+xIyfui9&2fH(X6T
zIA06K{nLE{>VpQE5*zV8Zcl8-U*UaHxo9r_U2a&6PfD!p=X5UKlQb4U<ur}nM4W7S
zST?B)=QWnNop^X1FY-Imn>&9x9a?GzfPyO+-Gib9hF&DL7jZ!-1qQY_o!!4~Lt=fl
zuI1s+Ooa_y-PZ>2@72+4596zy&crk2dHg_PB}*bGz0uI6otLzdiYK2~S<b<No-(RG
zQy)X-?g>)6@56;Uwx6yTNj}avTAnT<zZ?=X`CFa_Cg}~?`GCBnPWa3BhGyh5g_m$P
zwv0M16#th&HlZsH`VbN{5|VEkg}R@VNX2yQ6%-V@qA=qt+YYDtvYZ&RJG^6!UC7Z_
z1|Grr+3k(Bo$;;QaiSYHYFZu^a)+8P5tm=h3Oi#Oe$M3~L^_?61xsZ_g?Fq_!X3d9
zVQnPaFE29a;p4v~9wCo+-%I&;GydDc8>$uZNLp>(C^d>~0cdC#2b7~?F_XbuVZKYb
zf2}aX<RF-_{o%W)E!+5pF?7qQ-GPU0pE3lsL?HO6zX3s#Y^GN(1~3|Q>RWJj4BW?;
z+jWU;cD!kP*VtkFN(>-Be;>zEAYrNy@Y3HUi}%T~#$c^gcR({=$AN$8jtPhyH}hY<
zKGfXb1pzL~9%EyN5Kvny`6^&(S?W{Vc#exmEf9&-dl|nt!S=UW|7jj}nSDTFYYE;m
zZe5ALBQfQivysyuk2V&+UPDpwODymYcq{W{m;JP+6S~67$fG{%l54Fb_HbhB-tqh0
zpBP%OHg-3sTA~AsHH~JY(qb+3UVG7>&@w{^UOpw*;fzgkfLHm064lQe6bDAf0!x~T
z-J~HV6~n$o?i<JPAS<2hGWSPl?!L{`>tlS0_vkud9y=zRtW!cki<^Q=wM|&p_Tx1*
zfvsZeH?3<w(V9|tlw>zg5}xQb>rx^FTzQe#p^)4%tM>L8kr#j4#4kvgi$8`1lQ;!@
z;D!$%)*Ey!Sp3G$No+roI8EBLQZwtU1$SxUw3+^jq{Q~aVi3PQt)wEWwp=xk(JDTN
zow%wjaBy@RN|%TxPSeb4V$-T2OCRPP9Ey)NO{Ap^UC^!4G-R5%#BU;gYYW+8vvfk(
z2Zr6}X6PiHyi=Q0>R$1Q*0q1;|HSr_tybMtk=XvNSS+!9Z2aq7sXokl@QeeXksWVv
zO5HwS^&@`wIA~P&dh26#$r-ctD$<}A($w(ly`U*#5#{l`^LEvspRkRwj6CRrd2N|@
zP>6lp9b1#Phxyar{TrH650mFIuiZBV^nPzEIe>TH#N@rJwAJpl>0ewqk}Ce`|FHJy
zqajq4o#KwrJHnBLTSg%QeJpoe$XFv;O88fV6^ZvKsvFsul|adgusG34L}3gQIbT1<
z0rJ4m!hyTU4v3pmHoD`76i%wBga}tk6MO?eY`JO>OYkYQ^>VuTIlrP;gKRn@{V?sX
zZW%RL^y&qaER-zr#z<e3I`&Yq&~y>FS!t(Ew?wDP{rSqwKlJK__|}LU9}--0--D$^
zrB_S^*{()lk#GMetmhF7opDueYA9h>JcxPS)G&ajJK<EU2OCQ6BGk{>=%?>0C%!wV
z!&jc<kJ@ro3AcfL!f5DEB}*&$d-9oathkVIWcmA@k7qW)n>7dxhH>3M5i=I95g)L_
zc(%s3;`UbuEX+{$y;Q4{02Q?jb+Or*=0|bfWtu-l&3{?@n+gm(4<WC*5WsWL7s8YF
zaYFOk{~2LY<n3g`{^O05I=1Hm-Cx7~gfq<tv>Qz8{eZCLs$D}?@_6$ExE7R)ta1fv
zxi-nt5aENtu2OI4^RiMjTVff@K~%$Rhre2@<-rQ_sprX}p4wDJlpbIg^r|mJ%=tY}
z;C;)ya!AE5d0}l-=kb97X>2vw>S({AERUTGzE0z-4|hse=J9{Q_c7V;{xbS4+H024
zy&sxo^!@YuETi=Oee%!t^Uw41AF)Gz^)A!?X`D|B*<U1=H=a9p05*m<$G*zDz<fMO
zX-*LsbtH#=Pk@wW{!7XB<@4XeuARfbSHAP_@bAU=Rv}*c9Xi>T!MEEp?fr(bU)tWa
zz1y3a*WNBW;CrUMru_B>X4<>*tF*T_?E$h0<juqHy}l5?&G^oMNon(8UqeA}4Vrjh
z52ZPF1n+|V5|Yw~`pk4Ii$4ede}Ux&{`XJ)3h<b{-SlrEdGq?W$G`0#1ZlSnO>6gv
z*R(6Du#MgkR3*v=Q8RSdTlFe+v*DLp51zIgH%^Mc!DX{IB|l&R8p^d`41AeS%|?l-
zB+Ph5z6r?LFUV@f^Za>VVLZRxX2x?DdGp3&_{g2oX9I5?N@Vfrl}vkQewFsV>9==O
z@Ah{4GWeCGzd@U3-M~H{X|+yZ)(os5)15^H<<4sU4{5VXSDTz6uB9bkZ8qO%@(sqJ
zlmA14Y`V^zY?!U=9~#42wz3P)&B-HXKW!ORp#7{99HLN>H~Vt~uTkXFHtN&gF++FW
zf5{uc7Mfng5l3GCKc>Ym=>JKELWKNr{+xUm#&i}9KU!VrTu7t5gbY4u7~Y$oZACa$
zUwG3Uj^&AE)t&IS+Q=7jKzu~7SEe5o`e*kyzy8!0_hSR71%3AO_50#{Jye^`_pL9^
zr@Iic`4o!u3&#I!em=>|Uy$#({CxL+alYGt{78cg;!OR@c0h*h3_^6`?bnS|RGGdl
zNcfu)gjSNomE(y_4&AXsf@Z|KSBb1;Q@fds^cerMcVi~ML;_Wi$RrS1!X#XlNf;UA
z_)aE4nhF(}kV*JekZ@8a0m}-L<7g$Qo5QHXtF9~!<(>b`e^&xZp5Fa-bH<M9oejS=
z!Bm)tWIA7#Q?g9&n&23t&R=Z@2{v`?`psofQRAWBL`~S=X+v+4wi&^=zaIq(QJgeq
zxp=B)HN81qw7H`4Ia7TDe0ihJB_~xx@P1Aq3>&M8O26P!)DELj$JxtSCcXxOsR>c!
zA1a#G$u9||+4O`!WTwSEBr_l&HR)Ery%C3Y;|^dJzc`j=n3?wsAsAKRjd%(UZc0T2
z-FaiS1$Z#oYEtVLwGbbynws{qS|6pRN9Fggh{oPqt8gcgr~u&}B}Vyks**l0$kJ*+
zohKjsmA0?~)Qt2BO{l{J?qpBlqSNSHNZ1qfdOzLXLzkwK)o}Y0)WPZIt*f=7MGySR
zym6ub7?Sf#lQ;iITYHvbV#ld`3?;-4T{t<{g`8$S-Hkmi;}C1tWIR)bZ}Rpbs+rT(
z{ixE#y&Va5`35d&S$COn7S|DzN;)8)AMjx+p9eEb2A-hMwk>7(XoD+Fe{*%<@U`Yj
zRs|6=^LVJilBLG+5Cl3Snpz-Gg)@5G!94kDg~Rx?MdK$lUe-9L%&+A&(xa|lOMaX(
z)5J19`e&Fniu7#Ey1=+FHRy_OaGsfoS;q;x?QmM=AM1401!tK-%(@qE*p45IX~(yL
z^pXxi3AiN&ljXf?N9RR`Sp|ZcFla>;nILeZa6T?$o(Iri5Ctu;UdVVQ2d|l^XWoX%
zdG-wc3gl8}=twXrKjblx=W-}IdL@PgmzggS6uHo;W}&WZ2Fkoc`M7i?5b;LNgf;dJ
z&Cn9B@a7V#2&4MRCTdusp^Tt0544jJM=>k1?2!<BozqZBj%u8m#>m>BG~6<;CKR_o
zJBvr@Ys6i#+MpLGGNP^t&FcJAGip2Y@6r#|#er|Q84OZ;Q%#^(#UQj6RPsNS?Jmdr
zq(ZG4PZm>`Gk+1K!|wHRTupq+&BnX(UBY;Yv#`y48f$|0Z{V4rrqd<AphCQ`qEt~Q
z${SOou)^CObr0Zfc%k+k<ZE;f;pD!158*XIV+$f9XOvh8moMYoqIVH-T=@A3CEi9r
zL%&{8bY#ZGRNr&A!UW-M5qMy|O|RT=nPVo~3FE!-A=?#mecI71CHL}jdAx;j$I_AO
zO15gWb_&E1mR?Jgv)Ft2mtqI8Vp(FQ=iSqhnf^c}(bO2(eMD=!tmFy6tkKn&B%Ns$
zDBvTs)mCH)Ogf16Xvk}gzb@)QLe*)T)m+URRFCWvWSKnyBx0q``Y5wfC#WNkbu92l
z;P|Cr5W5P(O}=mkp_t%3P%2L@s5)qcww9CfU<s}>(*cF7Cx@|?G9KcrG97gN@_H=|
z2B&g1VI6~LU2hmfrlQUMA_AVAUnbw8r+CP*75)v`Qtg?@9z7H4u#{+K51iJP*is%p
zZ!yZ3Q2J$XJ?#FZg=Y?wPUdRtW~2Dfsd#rrFFY-AMaiD=quf(VQ&;rN@981)oC9@2
z9(LM{2NI4et$&~<4$dR)t_0YPJ#E%hy2R|cidNGMi)2Q@^I+J{#jJ@?dWtE;$t$Md
zom;RPOU!FR#H}`zZ7hh$V(+wT*IBJnzXMM$42T^|xB<l)@ZswoiR}Ddj1wj9HoE4C
z&-}pWQaQafiB*d8oqr99xg&cD_G|9Baz(k)N}R4G^Rl(DbENU>NR5&wOvt-uhU8wK
zVj%m28s*;Is*2`OA~C0!YFvq9kjXy$NeI}|G73s33Rg1%ih!!f+s9PH6P6!b8jq<`
z36w6;S>kXj`IyhSGI(Oi!ulfOL$k@sz>(!qDNRbEqXYuMJFJE63|nT`{x$ydXliz;
zoqDXIMLnGI@>WoLcDWL?e!aPGZk4aeWa6{NzLBY{se8}B#LOMCCULxlHzj#N%(O_F
z^U)GZMeDvV>;m_Ga*>G&w@`6OqwZ}J_|c&`PJvvGvxl-i5ajTK<Wc0pN10REwbY?J
z-Lh@=(WatHHgE4qAH(XC^@@=w8&^YBw~^v4J3uP)%dbmc&T2HdS6{NdXZTvDgI<?z
z{t(N;*(m--5$#3LG_b#9=5{fR<>TE`;DtsN3QkdHBjFD=N1SEd2gAGbyxcC>7_IHF
z5{gHGO_*J^U7T90!>hBp!z(OUZO^9*J%w|g@gG97ixchrx|c^%6A(0uNaS296eW5_
z_q{n7TKO;>6x$E@y~oTzr2)$zfo1y)#=8ncm-2ZTzum9Nj^JdToPVUB*8-C(D;E*>
zSof}CSf%Obc{Zazza92N$m4m_jgeM!>f{2l7;Iqni`I136%}-a1b;SEop{;K<kIw2
zRKP;IP4%#>AFn}g#P6%Y?`y$tQLWNfr1#}F-QT<{Pp=9-?i0M<5WLUlH_*={J}6Ib
zz!obf0_C3IZ+w0k^D;RlIv;afjwM6h=?3TF)`JVgXyNj7u<icj7WLa5^7n{)K6fO&
zX|-+@c5$HY4*OYm|F-aB!W0}9hrdUGiEUx`v>LJ77n2-y$5-PmG&KJ_MdF&`S+tHL
z!$^EM-v{&yPvixkxJd0k+2D9aOPloj5Wgop@|?QZ8~9Wh1?>+_y$$8V*LLrz{R=Zg
zQM1}LR_mpzadJ`oUD{uGAulf0OAV7F?x?n?dy~e2KMG@AW_J};@Wv==%mz_PUXg!e
z`O)3&?+c?i(_+7T#pJ{96*JWB5Pp0@JV_&1Zp02T{v|8Ofthw`h<gbJC)*=d!^S*)
zlTbzbOTglUiBjFF_%kwo5@Rrbn+jS<nR!!P*lKt`07R0tDE}t5`aHf`T7LBIWf@1$
zj32rWpI8$k4q($tPN15BPwcdjW$_P_Yn#VM+~%V6J5(<C`J?h=QNqyD<LR1_--%UT
zVvaEbJ}csUl0J(v!{0LpXds(k|NL!|5v<k|`35N;m>JK}ygzQ@t5xviCHM8sH)eg4
z<F#J+;F<##{IlF48*P_M9NJ^M!C#bR{BLC%;MSFA&KGQV!6JtB<@q!A6S?|}HrmA-
zDZ9K+`<eQ_=({jS?eX1hS+5Fu&F=z{@!sF_;vL}W_t(JFuMESI(!PsL#|Od>h0T)4
zSOlg)qlyRvQ!vi#j)l%?U?<12*#p3Me__Dc=PdV*9$JbNmapHGcG-4z8Qz|S-`L9h
z_wb~s^KsO98lUULyXCY#3=5#xE?q1E)(6cD8{V!f30ij}rO`cw8wE}&vl83*>W&@g
zo>C1b<<6|^9+wA$|Kt%9#*)T@WzpI-msM~Uo+{dXji<0+Q~pM4^`+x$J7&G&baZdX
z;8&v#h2L_<4kW~GV-@_wtTHaMaYrg9y==o$<KUuX+JW0X+Yka4RQ^;m5JmPf=jDPP
zx;`4NS{1<}ymr|v#S+6$m<SIeBm58Ghc$BOB~y8Ue^|6YMG7Y7W+3rIxunSDef+z1
z$Z$krYroj;@L;>cxEHn<I~ThUSI*?7=DloZ4(4W0#xQal&a9AL+Wq$81dGPc=i8gw
z&KhyFdp-Vi857!~$=Eqm(Ww^oi_{eD65q>^(!`e1c(?7;4sTD4Eh$*uW@_obp)5qk
zfn*%GOZ=c-_%8ZOq1aQ|46*LT{Sa<7vN|TYgdE&Hl*ONU#O)JuvL<`hbKVT+1qllJ
zJBa@F@`wGh{`pPiwxk`}>s|jJpZX8$H{-vEQrY4CFUQ}zKl@Yj|9*bDR{fv#kNc!`
zaSBQ<R<yA|h0KhF#hIgh{m9_J8<`L~WRGkriyZ)EFI7l$gX~%@Hpa9R0M{J_P0{5D
z(4mOAGXhPFn0;-J0b#-ty_DH!IgwxgP7l_|_`XzXH=jzGa0FiK5K*c+)HuEH=dVxx
zH}iY=oBwC<>(ieT=+FOteqUVq|EhntQuF`5f5-hF_D@XGX7-Bk>5#8i+qU)O&`>mk
zxOxPzew7S~nUf1*7-zF{h0lfd`TT<v1Wm_CA6NYFo*6xX0)_{1*`UpBQVeh{uL+Oy
z_aG*?%GFU$iUoztxrG*F%WZ<=@E!uqDC6n<Bi^U-t};V{GA8agX?C&h-l61j<y>X6
ziIh-oi}G%ihK%rJyqD<R^WRtSUZ(f;{(C3ym3m+2zjyIoquSav2wqrVOV?`=<@i85
zxE8us%IY2RXym<1weOI!c!!kxc1RJY*}EPwExl6~_Dz{J71OnW9~}_#`u}bVQsNUR
z@#d~uB5s)(Opk8BG`uatm-Vd9&20YGrD#vO652gb5-DMU6&`%Sjd{_g*9tdgG!?{%
zWS_x}I^o0b21|$Z=ob1V=$<_M-=asoxj{1@Jq`*Ad@*{MSabQ<v8mc`<KJUPeX07h
zR(TC})EhO|D*qkqsIS)dW&S(ZQD3L`NBnoNgAjo^?5LmGdm1+OorXuf9a7fskg{%v
zl>ZKyc0`m#eQTc83|f5h0cf%Dw^_8<m_>^t>Wz!G2@#u_&^&%v*ig!*j~>W5uLP9X
zolK=15oGuc;#_~7d3SJIgMQ4DsXkOg(ito;;fD+>yrfLMa$fWvA1ytRUxDFYzC!(u
zbd#C-%XeOXWl;Y)|3&?u9`)7h-xmJQ`#&JR{x5(}dC>n``_@ko(MOQ+dc-$;5}p*6
z{c+D}6A7+jyZ7Egsj%~M*jbmA?;4zrlik=~32?J6h8@`$+j{WyXv<O&i;&f@thK$t
zimc<`^NFiVF@U>O?Yd)a_mrB^?vRD>y$3ZCNCho`mC;W~{_lwG8Xh_1TIA98%fIiQ
zVkG<d6eVvtdH2lmhrYg`BQ}lvoyy-l#d`2ty?e2yb#3hMFc%NS2cejlKDuSpuK3eL
zRyVkj&Z6}33@}$8p_k%lIoCEg&ox-~x`=a|qGM#vhnD;1GZ%rwI|+2ucA6#&e}jhr
zS|DFW+_81I)>}zMIcRjR*8++-?NN6~N8*tXqz#~4Z9bhbUHlK0YyCp8nMQ$fN{u_@
z8bAb9G$0zN^CzPp>4*&wcs>F=5d)qWE;R-;oWa%Q)7MP?Lj@l4HxJXG)jY9rgC4|w
z5OEf0n9C>l<69uC-Z6aDeMafZ_znkT!T5}vSdzbB2eIBtbf)LaFR9}19wB_+W~aDN
z-Wj{zyL|N^aG=+92dH$H*mS@fbdtgMT=}n1|K(rH)DO2g*7Jt`oBIEFVxRiacR4SH
zPbab<7>~*;k4NUD*yoRRQo>ooUmH_X%N1p!<|Pe4Jn^hD!!wun=9%%%X^#_WaHm}J
zR^k`+=9=;7DRow$$H7H>nO#`VDD*E}CjaH4Fyg%$eeP{Fny>7M4;KCGrReca7=UGK
zzC4F@tDTxzX2!))B*c|rjWBG#@s?%a-t={5Jax<hYRL+3x@l@|DY6p8m1~ux`l8!#
z_<a-&14LU{9Oo|gmY2w;w#~#Y+BVU7&iT6(2u7vR=vD*`UMNqurzJlO0R}^uamFOc
z!Rb&8j}pc=Bup0?-Tz_qZ^jOeVs2W7(sUqw^V(k=6p9v1kvr-K-txBwnOlzp6GWLK
zicAx62^Cn98&TZ*y86^x|KVQ0h(>ineHx2T+D;sG&D4XU+8odb9QBh`Ly-?3I`pc3
z`x>DnPt>;Eq^RJ@?y!ySp71-Ri1ib_!{`}v{tcWw`3Q3|x70hB4x+of?hO*GhuWo2
zUZ|y!p(Vy9HZ<?e9nxCJ$-#~{|F5Rff9Py#ZjE>FFU%_e6pLSba;UEHR6g4&bnB<1
z6dQws*2SDW{6-sl6yLF~#PiC)AAvx%|Lc#(_2vO8H1dH(JX+Vtond%;daCGPn`x}s
zEB4#ISFevMoA;Zao91t&`DW9+{4{93{$fQQ<6tLF`SgCKuDts?e1FIsJp{rvVBo+2
zA&kENNpPWp%5bU#njF?`0d0^Pdlc&ry-gz~l%NbpwP<j30>eHpEevR)1P&0GG%`6I
z(E{{4YvW%Fch((QFdov`pBxoohZ9N6f^t|gg81r*Cu#^C9d?^5O$$=q8$)65cR$<W
zTL_y<skk)k)Kzxh=dCX;4M|@&{K*`dm{$tlF;IQo%dC?T7>a<dW~q#*;G(s;6`}aP
zbar4LZBdz!bh-T92NE6u6_q!fcHMy$#4hfB7OeH<AJHVJt3rB5oQt^E^3B-5h_l|{
zw~?1q#nD3z{Tu$WIHCl0q_Kl?`<d)T(J`+hDrJGU^hCU-MxIlC8OKCdm3jB+)qQ-S
z=8*vud$-kcP;u3SM2}uBd(Fbwj<~9LU~(Vy$A^eWTvg}ijFXd9xa2O%dXss{^eJ<G
z0Pm0?rqh9taewQ5k}z51g>|^A4r5beOMMli5wN6Rlt>uiOm|3&E<i}$C|L}O+I>dA
zC%6+!!%Gy5J>tC1Y3lqpP)vuSRWERiR2r>)rqLSvA+`wKz<+JxIHta|v0x*(T56A+
zQF$4shAXhro>4iz;FE@`e_5^Hqb&k5)5#U~2~-oBE!)Id!y8&R>5N0?v(Ee8@CJ_4
zSmmuPbBEKTOUv=tG*%m336X>rDruQp!<XsmYpQ-iSG`TT9|=d};smk24l8x<@Kbg(
zL8#rMj^a{CnVO)JC0>*qscUQpBVn(?!62bX(B1kifm(MDr1pCLxS^&X`Rw8EY5ws5
zrq?Dg<-h(v;?6%luA=Jy*(PZN1a67}gBFMwHI*u<7D;G<EJ@nCC50fr3W8M7K2<<U
zn?SKZ({8rS^}1R`pbAKRL?0B9qEHHjHvN?pL@4D~1)%{!?h>GBfi~q=zVFY>-MgCt
z%J=#H@$Ku??7ipCoS8Xu=FFKhXU?dmoKFh2JdPJs_WTc9*}oze6fRPF{L6dfkIleS
zayIgbE?`;_qwHV`#d5qYwStoMJ?!p<M^OipT+8_zX=yMUQ08i$!u}vGgIppy<f@mb
zd(}z(j0b-%*9|arydIo-9fK-%ewo)W&R(S`D?XB&!CUUtxc>D^RU-QSC^vlpv){I0
z^P>oO<^wm@P;cJ1?kkT@2F%pR((R;9r4)wpj6A6df_e#sO64kDWn9u+J$F4OR|3Kr
z_$P2K!7V(YUhyc(hj*51k0?fvCazVa&6MgA2RjyPkb?k2VbRxe&F6IvuiXtb#JsI1
z4&94WylrD&o8tY;_&+%vI}mn>SdSaqkQmM0`9FEZeGkj&Ts)fIPt-k`a3($(ycsw&
zx9jppG8;&c8?S0Hvqp#ZUo<Mr5HN$njDwB=_S*Y?m`hKfzxv>eN;B15(@={a8#^`K
z4P#^QuG8_LbzaPyzk=%@FD>wym|8#K+`Vc3gHXMb@=jW7Zq{32yqK0ycJKy6OZ$%B
zKiKX+o?(7_GBf$j!*@!;+w6Zb;r-RQdpMF8*Z2YMQuq^SdBROhez-c7(>i_ZGg`$Z
zyxn7;(TUI<+?bl=w$yWyZ_jM~R`QjavCkym-s`ew+!epD{|@4umX7e3dR#^kd%%r7
zJnKHRX(ERZJ;d7{Pq%DRhHr9<!tB3~eWvf%W?!n=Kd~h4kF>}y`%Uug7AK`h!*M@e
zWOF!+X7SG5szqiKyYI&)AKA=n!rLcYY+Cu-T=$665hp_j`@ZvN*4Srsw{WTkkh?mH
z?e6U`k@nd<*!8k5&sg*NF!zG)Z!2&Cn-a<0=Q|6p7lSJtzqcu|>jkIX_`Y&;F|i#}
z&C2*Mr@cemOso%KQPS9hZqFJ@8swgd2Q%N`L4|iH6f2ZaJ#L||;>m%}ar_AU5M^~d
zU0<1e`%`hJp(`1jmmJvNS){vNksj?&ape8{q6Kbj(_n9CC3I<cM(3y?wa(~iQ!!f`
zv+tQ#8}HG~7Czr2y-jzjKh`US^|4pnx*f#JP#NBu%yOlW|4H9J?y1(#6C~|>>7GOM
z{6OCA1R=>35&uKzb=gs2g{J3K=mt~p+B_t=>kY6uXB2udpTvtzdXbo`wDRz%Ygc`n
zKUleU?Q~-sb5!1#d5Zzm%$|?!s%%d<w?CP|o#Mm4sO(i_%T+9kz+Sz84+CMm9?dA4
zb68a7$2_lA9iX<Vv5Q3A<_h0E^!J4KWNt2XoBhut(N`XEkgm6|%ad@{_?w+TwN|+M
zuD2DCcswa@C#66)8<3N-`_)7Y%#)#?vNF^)GE}D5MkIGbQ8yYU`)4HyoH0whLRQOM
zx-IsTGO247l@6~Kf5Nr!bZW5e4d&i!iul-=J}*WL)s5!NY8XQmzbF$uwImqr?jwU8
z*d&bEo`VB=B;qQ=@T%?%WTW&h*G79~eyj|xo@8C6D!E$8O6Bb}`&du7%;E5F#LuTx
zN&_RLHwOS&v;=4283Hjz^fVP{zuA;r+1;>L%y`jZq2o+Cp*?gY7d_VcE0~!VomdAI
zgUmZr2TAyB1$)!jM--ivr2+>8i73<P4<E8+%fw=6^f)v%^K(9ZM3*d$EPbG?p${!D
zstTM*hB8HLS4yY-0AY^!F9#dKx2r1SzP)39A*GNkPac0{{6;WVYaCpq&L%GY1j`pc
z`io(esiGOmz?JAA*huB%v;YQ073g?cJgP#+K4aEs;-*WF(1ge|8L8Ax>Iln4Q?>MG
zPbcJ~IQ>|Jem_c%xZ<QD>3sj<g*Z8)H?GeyzkH!0|1$qJ>-=*V-^ukjc>J!c$Z_ZU
zkIVUvKt`|%1Y3*bL0>ZbQX9ZnG|4DY&q<#d6?8XRX2C1k^2&xU>q7I^(WW7pae4d_
zHdp#V?|kmXTG#iC`VBQ>l<}hCgLm50;7!=CZ_V_@hBGXah(BN&I}RX5wdAo})2)A;
z9D%awje<pkGu4!AKQH5R@Z;T<wf=Nq);~u}QMR&Su_v?|WozINdh3(p81MP!h+51M
z-7!?Zt=vDR9&DY+b?IiNbvk5LGOphpU)Ga`>=O{&ggTP`lt1=$B@X(N9s8_DDD0$T
zbsTJKaK|!(_)9s&tHELszoaK-@mqCo-msYd7IF}|Zz=h|`X!tH5}W^+Tz+C5g!#V{
zR?J*=uiQljM=>}uXF?;0+CdS9RsS`{;(OlUYr8Vu-6Z*w8B4mw@$RB3lQpKShuEyh
zC6+1-pnnCWadTV!vl%(iz;A+!4Tl9g>h;B*O3oM$F3Gd$$tz26FS@3vs_*yWgX}x4
z%p3@Ie|CwuSygLJUr?eEwVr3ZqU^3b@(`B41_Ey4qU7z_(Vjlb2*m7INA?AWVMGkY
zpu`-P@(vM#4d+{?Mw-EjT7PV(Dbi0X#nSu2|0TiehqGYgL7aCO4HVbLWeCrdo95=%
zzbNxdVA=K;1v@xlqxN?I&Ga(ZjsBCBd?(V@VB1b-Py2_Nii}}r1Pob~Z`XNKHDz=7
z$cnqsGoVtLsH8&@7Xp?;(>C5$ODPDRklk7Cg~hiPYW0fY37=0SJ5Clo4JISM6+*yo
zrG7DZz%&X>Ec;sPbh}kF>N6rrxQ%!m36d9Z8SUk$#TCJ(BUs;hTUVJ9|MEqv!yAKm
z=xsIBcEqi@<YzEcTAP}+U;4}^*!dEiohfPimN^?5Pz_u9uPUR`TNhFkyIgcoS>N>$
z|0b+|m(y`InSx`fgf4O>O(JwMOF*a+z7=H77e9yTTMspM4%Z{r$zG=BObEC@Red0v
zYSh7zN|djsa(On?tF`5JB1w46D2ld96M}bM+&P#zmh@I`MaAQ|rK3E#Mr62;(AKB#
z!QiDgC8#!JYCd7T4#$SSC-Xa0Uy&8n_1?-_NZMCVRj>JrblYjqqI$jXuhG9<Qp)LQ
zM*diFiZq#E0ub0&*I!vn3h}ye)GY~OqwS=_V!S7K5koP?E@2HX!0AcKuhk&0yH(4=
z*^^B;^n3SLWYoYVG&wlsC!dG&w(2~biw#bb7o19I92!rhihfcx59>5`^Tc#fW!|Kl
z_vrfmG?TIv>+D*(Y^=9NCVOw(Bk{Vfw%$h1U~2Xaeu1fE>#4q}ybzaG|J(h0@X!1Z
z{0VQ|#(3Qt;rB%by}N$0A96U$|DrA+#8$O_G#h-uy!%GK_xEReBH?AG_!Z4KL}H!w
zk8+(xcDj3}c)iW+;c&NOeDLcPzCVL(Uh-`Ij(x4iG(*(R(H(mmZo=j^Ekr|*W##>h
zi8o?+8DGZVDqOQR`&Z8~*f9Hzv;0VYweLUXSH4-B8LarZ84r?>YJ}&Wjo&3<@O#Qk
zzY{3l-c}(7$ovjDXY|${a|T28_ZNv-kSJ%XCoYfD8wdBr&HmK`Bue0Uh=Y@YB!8|s
zZ7JtH38U}8{N#G?$4_hao*LZr&2uwPFlsc<r2iuFCcH=c{%-9AuUh6-SeOEH4khF!
z_F*y{q`>63$gmvY18p=8TkXvAe9Nu(Pr)MVy%Su+!u}iUGJ&HgSNZ!rY}w^peag5t
zW&9bXir?p$fUG6nrbe%7K4dGimtd~T#+zIYrd&AE5)+M-jtXyTIDkQBZ)&)3g7IaB
zvA@b{50z~{R#$C@xh$J6DDC^@V&ZtQ!eu5yUIjntmGMoIi*>Go#WVvv`g3471q8hG
z^~hex0TjN5`!CpsO}Zgkbv5Q1<YXnJV~1>2r+!)c>dil~RvP7-JSY51Kf<4Qqtl^N
zkJ>Xc{=^vJ=%EQcq1(Zij5IeEqphlWMSh?|<}W-i%}4WvcO*7a+{3V%Z&h|u_gH1B
zcF3NL<?DFe>GiExn@==*nF~os<U~~JzC(xhpX{_4qe|SmzdIf0l5BiSQQIpz%J6kw
z;@&@qU&#50zOzDp&te=GVMNXB`{GcfdGaYvC`jE<6t8=T_*C%X`0|RjS0v{;xAW$o
zT0uYumQV0Br%%)q6~O=>jN+k*m-B=WugPDvOh0w+&Yqqzl02)g(HW`x_%y})lj$Gt
zPj~WW9pSfPDAoZ#&XL(E-dmgSf2?E#28{a)g|aa{C)VT{?96^^D8X596Y!?GRYKHu
z7cqqSH_z$VYhMj;8$;NJ5Y95}@roa8IkqskmqNo*h-+u!zn=kuA%Sn9DdFdOpB1~B
zb>}0&)rVo<w1H|+x$ckQ0jY7!+~IT-X`<A=Ras`Y5h(SPuu$z_O-^8mE6WPn*kHJl
z>aJN`2{?GEmU+hLJHIKBzQa_+256}1gqn?}rBE?3%M?NvvI0KGM7JmIHoIcFMwx*#
zH(!To_Rbd~qbhY1v(oj?p^`)6CR&}*={TOshV@oNBelo+V1JdjAoiM5ka=LAq4ABZ
zJwLnVH6c{Zc!ot7p`(ocr}(CB`cv6m{|?D^Hu<Oeqn2o|KjHmjeEAY5b-4`vcKfVZ
zI}!}&8fXLQbektuHj|C9cB)pQN3Q*~0yJ`%R~n>@<C?jS1V_8su|Rhay9i5dK9=)~
zR0>!W#3y~^gg*+))8OFTD#rPauj)IC&Uz!58nwno`9wTvD+y%vLKb`nqk)Ol-o|Bc
zGNmKM$f2!D8^XO~ooP*IA&>M)CCzoCvQqEC)*~#{`@XQ4fDCSve=&C5s$UYrn^P?E
zKVar*J56O&azzC0*lKY8+WK}CMljkvFU+V%B0O%QFJ{+Eobf9$Hn>neSUT)Uq~}6X
zYw>&J?{76H8bbO!gCH^V(S8y%={w!bm%1}{FOEYY6yQPc>4bmZQ#v@O))@&&Pa!sW
z<adg9r~OF#>+|SgPA>FeM>WN3plNbAK3)D<bwWh^fRF^1_+L?we7bSpHUcK-^jy8}
zZDJzE=<9UMfN~s$W1Gi&&RoOJB>p4OJikm_$JHlTZ#j(w_v;SpMPF0EA}t!YZS8m(
zoV-BMnWiW~y14GKLs;9L-z%rAFYOaKmATX0^sO#Ume-yfv>tWSott15dkY^%q+UV)
zu59n`eJChytrmf_P$P@3h&3)~U5NJ?E_+b`*KwaIlE6?g%R|Z6xKi%5wt#JnN+h*A
zRFs?4$qgmJ8;7yDsq1TdJ-nOk<>1kSkyu_NkKluYj4skHj^=_5Bv|G*<}>Tu99d-F
zv8$PxM`p=_OQvEHTe9e$SjckN<{ViLq<v~^uZt^Yjx6g1dj)UG50Yhv$nx@DA0Ug|
z;XXhXeBwR^S=y-=HHUhl$3H(KdOVv)k2RyXcg%>6%&$?G!g<)z;XJc3V(73ZyM#ly
zI~=mB!hBY5`*Sv*8D~F7N@T~G7Jr$2_-s~CeT#xWzie$g%ZA$xlwXCv{o(I(;qRUN
z=JdPx8H5~=O0*NRuk}cg6-b)X5RIrdPa}#1@Bcs${|s}!>QzG<j$?f2`6|w=Da63|
zapCzYHd49#a9lU%fHimgFZ3bBNPb4dmT{@bObbq`PO=u`QfLyyPsCm|2Hoq<sBitL
zab0pcmKbqxMkRG+(WLVSESxmJB`3zulK#UPuvxsYKZ_Rc?{6d%2U?k87WbW@c`P2{
zY9>{}H@H4W&vno+Mr@A0Is9v!jzfk2D{Xy3|A`#>v)Erk@^Mak37O;GvnS?OGu($R
z0jUY*RJ5e@k^5Y4r>P1}Q`w332nIeU^gC6!y|>aVhR9MaF;^`(d2hdqyi6))a;j!>
zl3r*mvBvO?Y*T78Ne2I9<l58AOGqRIp_(n7be}wB&#tO55i5*fWbA%hXolzjh--74
zG*1{Oyc;ZtTAN8KD}Z>f4jMPJ&saTuu{BnH7C{n@1G<=t&6&53r4Xru3R&Ic->u2G
zvF@$e=V$)TQ$%`g@u%(rGR3=H3R2v=DW?xUf*JV(`k--<Gy32ngA<EzlV{LNAEby`
zbDPHBZFIqVI9F$N!HbHd3%+5(Cv$^d<LG|o8gqpn*PpOb(H(l+e@1x;>w{-hL5z22
z8&wdqvb_U=lS0x2pL|T3ATPuh|6v7U^;nXbc@U<sdS0t$uQ4@7*>h5g*T7>5y{+98
zYvk(3=q#}}P$ZR4#;!}>KO{Wr9%^iwOV9$zf(mSv!kqdbX}Zp+f+S;?qNzj%_@Szx
zagzyq4pp!sYb`?!BxLS~tAQs-N?G-_J}1xca>!J{WVWBjVh&`&2qtV&+ALpxI+wFd
zkKS|ANjDk3?Dz|rBaLSWGwpgLMACPU!DUeQ-NpcRkM~F2lGzF_1IyftM73X+1ed&E
z1?caFal-W}{+MyjdNJp&HUCwOP%YWel%+NzC)s6hl#4)gXtl${1tHX*;ioujzwnSb
z>H-c%W*LdS!8n{9oS?1w>b3DC)|SWY1JU5KC(a-6Q}UN|?Xl6Glo(b2;F-0QUhAJs
zeVSpPQ>!LO<MWFa0IrTS*NMmnsXOZTM$DtNjH-G7r9#3EvljU{M@SEw>3Z0rkIss+
z{B;25*tvnRB*ra4&*cqlvxMXre1+4o#@4AydKNX>W{$*B&P<gPPoH`)=ga%0Y^~Qw
z?qwuXk<z*?ZKoZ>z#?$}E3sXJtcXg@z~Y9?(HrAyUL6)^5gD&rPiXR9LX+$0of%#&
zV;Ekn{ZY13jo>no<4@$Fk$4lOQ@Aprgkr_eGlR#mTsM1_B!{ONKa4NTl+UT|rcJJC
zK<YRRPclp}mbmlDPwlHz`$jry0#gp}WqKEhm{;=Y!xyoeh*U|~jxk&IAX0PPJ9ZwV
z(baaii$aycX(%MJ)uhWSg6RZL3W+q^5~&IzofQ)4`2vX4T2&Pi>CMsoA0*PaERhbU
z;Rqi?B(1--F5&1?swAWnt31r*d6fDC=3hgp4Te&mh9a70%W|!PW@<`Gp_TYjPhWPN
zK0@O{JVaxvMIb_Yu(;^U+Sw?U87GzGi_wvk7$WdTAwMR2qbi&0@V&I>xrzJn`ibc(
z6BWVrE1K%IwLKo)<#W^EPGs+Z+{W$IQ*SeebE;?3T9{)5>WpEIugZ!|88z~1oiEDb
zcc-1-;JXh?*lN-_^b?3$*|PKI>vZ|Es=dASGdPB{3Y_uQ{-pdZ0*4AuP<zK0qaDz8
z-nmKa!m4VTP0%s}tj^qsfU$DTFhm|7$O?ts@)+`!5RfL39@X790+rhgb^maMpCCxj
z5Dnb~cxNyL)2M`Qe|}7hBX*m11>XdsNJE_zoTmppMdb)~Bv}>u$;Crm2>nzeGi;=&
z@r}P(YLo>d)y52MG<F9ua(=zxY2?>2ig;3HDt`8cg1+L#AE(~8jD!VIl^-*FWY*OR
zo~zPt<WnZ#B`a^T^nIARvnCTaRq&|YTVj>;jj_&LPU;$95g!@DScPsKfsd-EV8ZFR
zIs9Ihy=;WbLV67=^|n14pHF-ciJJ-UiIuumMXb~<R_b>qb;C*pIL0*^UV8Zp=FUIE
zPP#U((dlR<i)hJ~zpft$${zxgKB>bwo6l3wRmPryU>P~kL`@lTKGnZ*scGGyR*c7J
ze5Mbsz_+D2{iW^azBiaj^VRf+EEYF0W~B=HY_z10+-}#=*^WZ$hfCEhPAa98$!%r9
z75JebNhHovr!fme{P=mBysWt{u-9!QFP<4|Lo+1Pe~na3s&<OTv$uzMJohi<(MjIO
z-^Mx?EUiIkSP5qs6xIQ?&qy(;o=)lnHCdH@T8)Y-eFN&N)m#mCEe$Ij%~bN=N@&lR
z%UkX4*33{4Ce<V%RKRSqsb&}evXxt)?JRMG>-uhOgzq6!x}fQnN+Ns9-bRW#gK4Ar
zNN^p5gE1sD`=50EugMR$#r5}Z_6xKTLHWlZ@++N=!>EFE(S^d==-;>udNiry4(9{5
z)z3|5Kg}LAh&Cab$f~|r7aMQV&ptX-0bIXmOS4~%cxrpF*`Gm}rYntdh3A1ReTkkX
z!}z(Jv%2H+-&I9gi|Nj`N&a0+!K~?R>ey#6ijT_l^PXKFngW%;NlHP^8p60Q6kAwO
zJkLZ$|2u6H%_z95)$DVX?kBaw$m)&~qkTzG?%bDQx*J`I_F**2oX7C7@=f|nNoLd@
z?+OiSzspXtK67Q>d*=66jMl<0M*l$j;IW=cN}{sLfR6xZ?$+#Uq^j!`Rb?(=R<u2A
zZuPA+7iY@Lq0V$Y9h<<g=3kC?_9qFE*FrZoo-Cj3YTKb)3uyZD%=lT^K5hLv{dw7e
zG>Tn-ZNc|fGX2-}ww?fiTN@gEqiD&$CM9>S%%l9VjH3su(cW(!iD2{JJ*2puw=A;H
zfQ)kd`<KxW7&rAa4bRk?^vH<d*QF5k23~2TQ8D<fRHHSL=x4TVZdZ$WGZSiN+uK-8
z|N0bG)5HKm8yBI8{AT9vwl6R1<sJRGi9Zn^aDL{fx9B<BAMrC>ygVbFHoI@i`nS9F
z#72L5Nn_oAjdGIrBP!$u!|vQX3`aB9^iEGWSD{77JvG<|dA{bwVNz2c!fee+06b`Q
z`lO9#GshP9P^a{1%rxBEShrTFzr$6w=Z|rc$A_r@fnm84)Q=g|PgvAxi<(<+UJfp?
zsH;I;32MCM4eCF18`P|Y8)~wst3f@%N$M=OYW*sxan_mnl0p5FMg5h$S|4ap)92vu
z+bToUCxO~;!Wev7t%nnE8h_ld?)4OKs*{`;7Vs_wxD>F<6!4ZU;L*KvWV!1zhAb@<
zfV63=4GVaEgQ+{hs9|arbqlD!?Iiz-NC_!Ecj}%Lzcdf^Sr+v)P)`N58=}4%)b^I6
zo`#uXo}Q$Z4EiT$e)_ABG5$T*H_qde{V|o&HCp`BX0RDLs;6m&QsR&`CrEJe!c7~I
zAKds|oT7DSed|FzO-i98Wx?l7k}GS2EBU@E5SY=^wHE~7L`x$1?m*kM+_NnW@Wr0w
zQsv_x4l3tlWCuduF}HyJk>_Ub)+PLKm5`?F)xs5LA`d=WDb>c;w;ukhgta~Ork3Gl
zPBUWOtxL@Zmg(cqubw@-&R#`zZ}t+R<j$Rpz<+<qk(uC!Q&_XVQiY)_%XQ>zM2aE~
zuv2L73i|4LX@Y}6UkRgj5?@38F1el%MS0%f;ke_P@@ZxbF~f}ahN&7bnPy&WKEAh@
z@2?>g@Y8qAcU?&meXlj&FSOrl%=ec3@73n}b|a)4D%HW6CnCL*!y6Um`=#dlq%xEL
zEME4o?<SECFH5p#<%5+C3gEzwmVCl0IGex~V&~2re=awM&1DFf8^ao6UXyMNJGj8V
zu^qyNH-_EV!87}#uyeD2(VR5NQs%QwDOouFMq^Dmcm6w&11;=j&P-tSvdbCm1aBF7
zTid~OioJgDn}?{M?z#metmL%r<Mg6k_h|vx?A@<Vjoxj>=F?6cf@iQ&n;XO0i+F{L
z*10|H6?)WLPkUwVu{!ry6F&CTmndCNy%|y@-=bIk^|bezU)nmdy`M*{Ew{XS2>1)_
ztij2r+7O8%vE}?1ylX@Qmh!49aBaftACE2JV|Q|@o`6itebg?O{sEntdz_PfB)VIi
zsjhsAKc>n{768`52jfll{#>^IO+9n=o++pfEF*3e_yd+6bIx6YEwrqJ5wM!Q-wcqv
z)6_8M4iScZsxQd)>3(mhPoE3>l>5c#)BO9z4$=K$Kfz+|`cusPV)W$-wNCasOeXZ@
zMROXxyTnbIyJ7oqTxIe9X~)OFe}u(9Lu2}xwsGKY<Jj6o+$+}Bni;RLwAgz5hGYDs
zF1y+rQOp>>-F(-5U{6a1$RZwmnFP`xQI#GEo-e|&;GCI#w;BC>NV?(q>F!ZFGepcm
z)(;tfix`&C_~XPvI6Z6d&1v*+GW>$gsYdo4<E>CHn-d#$k<F>GYR1?unVO6``Z!}j
z$9hU+B3Etw`C>M+3+l(&3mmf~?k^HUwcpdp2gd6tmW=jv5wiZ&^b8i!FBMW%?2qC>
z>{V#0FSd@#I@yF=Vb-Ratk)MxZ+wlTPVWu0Js9sX*oE4}B<tfryS8OxU&CsO!q<q=
zfo;3@`pymeHR0c{a_mgH2xL<{18DModm(URpAZKH`+SN?#=pxXjwXh<pHgemGh%V?
zHa%gw?T*(y*E%C!cboFJt;)^`^ZLa&uZE2Is=4?s-?}s=YdG0)5Cz#=A<s3FLAKP8
zSq@u;rq#q3yI;wMq9U%!7El3kH7=p##E_B*S8=k|Hj6ZR|06wHhwVYn>_C^VQO7e`
zdO}M1U!0eRKMLYo92^Idgm;q)jC;3V!B0p>=GS$YnXyglo0~^RQ}IS?16Pr<fj8B?
z+WKEjb$1Iv+x^iM;74xL;`uE@N#hUEpXU#8Bss0j{sRRebqybU6LR5Ho$&8A<%X2p
zavzjzFqA|bKtw6|a1u+VCE|T&!Pgjz==M$i$xM3qAO21Z&N^YL++t9VGy4HB{eZGu
zB|3XgDkQ7-cEZ0$v${EQ*_<BtmcHTG>?C~8$lvq?xhhjZtYXG#gvIrvuKzPrKfh?0
z&@+CDIH}bxo;%T>P!KHoB-ex6nE^j?B>%C?*sJtjmgD0TnbQUj7zYGL19PNPOwH*t
zt?JDC6z>bBC{wB6=sl6GxqVM$cLOmrvFJ>gz#$mzN6edcpliu6)ijHTX?no=fug%2
zoB*7TD@8zi*0lsv!o(kGW61bEs0bR&W_cEwU&MPZ>sN+kJ+*2Y`G=F=uIf=qDbga*
zV%?noU?6;*(pVT(aWt(&KDDw#OfxTGn6pZgQQ)az?k)wvMe8@>wrB9`utn~p^#U*-
zL$bm!8)EVC->r6%i)eAek5_V-%a{-o{>f80b>r9g6aLII+naA3KI&e-rO4Z&{k?cr
z3Z`_Z1~FBIj~ot3W4p#aW5V|%2W9iSgOy8@_j>3jw}sUh_eE-PcpAK$Eq&I)A@-fP
ze{y|}kei~SIvPPHGSe-Fv0VQkbNlTx+z+i=KTWH*;`<PGh&2g919L!Gkw@$Y9Cn)g
zc&$Aq)}bj>7J(Ys=~#9At?yW?*SY>r#nMy!)@MmDVeL@=3hNS+o$9A}N14HQPVMX&
zI7w5()67c4FJ0o7|Iipw(i%L67hQ`L`_a(W(sl!7XoyVl$NeKLqV2}Mo3rJw7$8e#
zEflu)Mf-kP_>M<t+`mVoJ?_uf!e#6;)LtC4A1HJ7S;Br0F)U@qt_&IX&3=1OU7(oN
zc9X=n`W4cn?y*^$z$=0A02mRJ32&PU&)c76wNEH-z9N`~l!NxY-N}F_1Pngi_g%Ly
zva=fwJ|^zm-MugHPDELwb5g$;c1E7n^=S=^<a)H0{tvDP!c8}D)(4$uYJoKuzw+Rs
z--hVhevMpD-2e(E54Ar#FR~VD8vj354C)%wDc<gc|5Mw3{8KEW(4oN&c2EsV#O-Z~
zIx27+__PSyImP>%?FZ&VVQ-zD$P#f>(478FJ1|Y-f4kP4x{q_|Yjb*~N<n8jIFDYO
zanLI0iEpwlY)}N{*ZoskamyUh(=dnB2Fa3}_tmuD=rr~-F{|nt9CaIJEtukEG!LZi
zK=Idzx{1DJ<~OZLm!o8{+#2XB&nwURCa%>D%O#Ee9cPn)38;vz!nPMPKLCx!P%UG~
z3hZzUp-ZAtWxDwzC);o2M(w4$n1P(T`{VOvVeV9X)D!#7Rg)_DQ<g{{QvO$ll)oPb
zyD0x{m^Ym3txymr?ma-s=kf=H$cL!fG`w|G7?`#76Y(S$H}1=8F->t&%fJ*iwe2C*
zgh&^1%3Ry}g&YRuX?r=-L0al*^$A6R<~*cgwhV9dmx(?qD99GHHFFxt&0y;LM9!8t
zyV?!O?oZe%`={&9@6qfK^nFiOD>3||nNN`w=E>~OZ}9aE4kO|9%v%tZ`8;#N%R43i
zw0@kFZ(ow~nouksd!~r3aJ=~ZV}~fKoLbY+J_7dKV?3JkEUorD%g)?+mh1^XYZx(y
z*S?N*o!xG^DeA<x(a|xWg=hL&YxX$0_6(FErBM>{`u8KxubE99qikJV1kWWWRLyZZ
z<hR0f*Tby}8ZE1@FejESu#R;jDZ%K&@l~{oEE{6YF-FVFO{3qMoG!l&SV8c|zp#R!
zw$|y8eeTB57@wJ@Yjj{OxN<*^gc+~bg}fqQYP^OqeOKn>AEhVXx24BT=}zkRq_hsh
z=1iUTBen+Px+M+1T~(<gb-RS?!m66Sy2XT1G^gUImRzTUQPd~N_7$h#PO0u`s8%gZ
z{is^7ZC};Kppo*=TJhzeZ`a<;TW0kU`Q2>NT$Wrv^~3y-%~7;fkg&kS_>He3t%%oD
z_g0fL@hwpaftg35M0#9Dkoq&ar6@zSYI+)KO#W{p{)V2H)NYj>vQc-X&PFI$FH;2%
zj<Z*iK7LbjU@vFUGP<SNdmfI?(X%04zC5-$wrSQO1WPCQO}8IQ1~n#moa786PKO_K
z>6Y;H40*?H&X0G4n|s_Z?Z7yNpxn`nGjaAfA#1hL;5H2BoV?@_|6gQh$fYu=uI)9f
zS`j?(C8xl*=PPGRyd~e~md6^N8vP6En+VXnpq`f|Z(C*wqzmT-vrgV=NZC+}F{yEN
z4KKlK*px$c-khwGdKzk~!DpxoE8zqhEowyZVI2n*tS%#yIo~E|Mex3|`^Svn69G6m
z^v8heAqni$P@h0Yu5M(F)#zPN-|SVbZK`|UZnVYCCea0rPU=#TJiF9-;-5PQIo=R0
zwHkHFc(m4PNKc5?S_@6NCs1IQ8FGh!22S0>OJ><Jt-edGcJ@fKS5y_8^VZ&|Gwcm$
zL(%lQltejHI310WS`$c+IhrSIY_&~<MaHup&xBVd`xE+ub6xRwA4YE4nXH}OHV+r4
z(+O6a;}2)~EcwS11z>H=+djUg?QCvod?kCtu=NTZPi&oTO6Gi`le&_ccQ?$5alC03
zkBgf}Kku&DJ<Qwal~zqjS9ORVQAkp{*T|mjTutY4Fg)`R5DDAi*_LEFk+eC!>)U9~
z20GU?%mMiUAZMQ#<$d;?;JOlX=+HOa8Ps9u=CZxx7Z9|^^qty_QF|_WF9IbrBD@lO
zD?H&`Bkus{rFiqiFM(bw^mN|p&>iM^Nvw65?cwj*@b_ANGb3KuxyN~|Gn%}ftO=33
zvmap=AmB8PGc;3M)tk)k4OM}DF>1iP-Kx?|Rc@M6Y~hR48uk=WumtHfX>X`%r#S-7
z5wPC?5kz_!2wz(CqF9?shSJ(mB|itfaJ^ecRT(dx9aT4gCvQILsOls;%SAt4(p_j$
z*YJ$5P|*rq^V3Um{nNA240#44vdMl^R02L}`qV!?OV`yuJr{sH`&^QJ_9zr!Fp7v6
z=-4g(j|}SLo#mryag-|~U2=D&v&cC>a^OybP{=B?2zai}dzQS&7E+t{EYXpLyLr!3
z^PZ>WJ<rH{o|*SNC-1pEe3mNL@mCB-PUnBY3{Bo!qKIm!)k^{ck_gWVZd>qMtmfL?
zcoJ<5<5{<hf1v1P<e&>NRDYfEf3l-W)z9fSe)$M&5ZrdrRg$RN(6&v7Zw}UsO#I-y
z(k7=Tm<iUD7<^5|Ip059W!V~W_XkPLYA~CPve)&R^rl!*(@5l!VAqJ~sI32U)BQpt
z5>WN9mLdY{LVq&nFV<GZz0!rQKN)nTgx~0jsj4qF`hTn{AsPMI!Vf)`?ExvJ-*!6x
zuvHe6zHEg!Xk+XR$fvErZ0aD2z2wsS1*Yf@<G{t?0cyU!H>`(H=IJwj`EbvKmnm}V
z)=7V|&Ckv|!K>2;2N?m{$(LrZQ=<cu3md>}V_!gDve>H^L&AwgwZ|70afQZd=-1p*
zK>RVhY!;lQMBJG0^Ny-tfrS8qRa{NVND~3$+*?=XbTEq0>+drxt`pP7uD8E6fh3@V
zSYQ8Eui#I-{fa6srBC&dDHt={Sc|eJcI3`j_YbTeJ@pmJkVVRSrQZ3i4u3WO>Ag1m
zb;IA5@ONtXJ1zX35&q5$f9KfW_ICa9ue;sU66?+q9Q5TI*`L5RFq5hCs4JNtZ4@S@
z#9OkP*QI*qACI@#Cp|99K6++9PF|N1wuivNAw8I|j4y;D&6EI>qpXTfc=uJc^DFh7
zK=NhQ8#e)!8-3&_UyQN$axgJ(^j&CFTMev@%A`VmRfgkpN7duJb8#>)B40ai(wAkA
zs>n;8UHuExMH(<<K??8IIQ~vkrjsn8z-Di|yXN^~x9~@Hc;HY$6ty)$iF-^TpNZL|
zQqq4knAm=KKput+eY|Cy(LXZKAkOW7woSh#1eVruCEVR4|BBStG`l5jJ*c{@tl63x
zZ%x&$!ICe(x=3vq+4`#Ugd>kxd6l_<302F^D@SmbT#SX6GMixyzT%+lHL14uRn36J
zDxo-d|5Xc_8bMwSA@vdD=@23bW^-)}A(atic?dD%*kHang!G4$E)ITXAmNO{@@ul|
z&w!*a6%*OX#Yv~bW2`Ptcx-N88DMI!w1s^`+3Nmix}oiPxo2S0`d6`87pAWq2u=vm
zc2b!<W5s!&ptiV(0UhEk54mcA>0gHX><qbnpmwCoQv#|0HauPCD>bigOeCrEgizk2
z(VcX^iq3cVqlVXwinaD-df9Lc;xch-JFXtiv@w+@Zu$Q_)Ki=6P!BZJQ8S90FW+;h
zZ}`6(>L#WjOesg1IdmDP{^7z*Ie(;)Xq+IAB}p>`))-tVdqC#fQdqsMnOC3_l2tt-
z$y({8erNim^=S12qxVN<;-qsnh=lkY8wzu48_E2$hZohI9V;Sq9B-OH5!-Fgg0CHX
z8V5faNyjq1%;7!3_?sqcC^y*<QdK7+=(USXicurox={zVW-`?vvg<7r)n8Ca1d$Q@
zc+ZwQ$)Hqt*mtt5*_GLwY5G|d0bE741-~vZlkz)SRWL6ru1ZfYQ{0ngJ#wevC*(u$
zz|D9v++Z6G-YO?~Nr>0@M->M%BD~m1w*`qjyy%Sicq`R94NT#^#Nu^DOz@6#l5g*0
z>sxK>TNdFp_1!+Wx0DD|-|C@w5j1z2$yj&~65b9o#Z&ERLQe~8RYtRuyeurE-j?yl
zU<ggpwv0Z}q~4aXA*2a<?VVLq!@A$~8$*+sVcpMmk~G@Ty2au>btv8=EnaR`X~dPy
z(4;%WJ5_ik;#Bu@EM75$>U*J+JUhfY&EkFc<!pTot)G2AN0VtoX@aJ1IZ1en!D~XL
zWM>>BnZrv%7m6Kqh{Q*UZbZY<T;`^W)=3$wF&jMJFBWGu)pvJP=`b!6DLkVG>EyT-
zldxLaeJ`MF5t2;O(-s4xIMx>RT))!n;{lAGdKuZX6H@zq7Av>ZlQs{kg+W2<g;KP;
z^vFMRr{s~R&63S!S2ih4)OJU1qO7Apny=_K;jG$4UOT&uhoT~8xMiwQuW}gmY8t4p
z=@kFK;NPR*p=IDWh=V8N<iiS?MF_M#3JFDv3UQ&d=3YvA<`P>HtZE3A*HlJ7la0AW
z6BT4B`BVY<b%hPZyKYSeA#^BKBGx=oF>aHgQ}vpyAgS4u-nwJ#HB4_obuEi`@S9gX
zwQ~jd_0JOc&AGN(>7Sbqw&hA<O3^S-8(O*xOlVc&BqF|AsRlgg`VjH;e9}=9OZrEK
zE1z8K$qeI<SAM#p!fz-YyHkD{vVqN5x^u9n!LXO;+hs}>%S5@+$FFWBu;Vviuq|$^
zE6Zk1YCLJoC5qXc%#9p_`E=GkOQ@;N@_1)!Tvh}kjjwAX9Ls&Cjjs2js#{c+_b`{w
zK}1793rlr*>zvdEQH}9oI!ac9l^Pbfk5i3Df^WTOl@nXv!Pd|EXS_RhXYz%2gX?aR
zp~UjAJUjPt({tVp#%9=d$d;YsN6QxDX8uP8bUGd~qjH3^{7y4r4e4<8a%^ZXi_<l+
z!RdBPb{MAO)R=B!R1a>E7MvcnfkcpDYjD-uG|AhFl`5Fcqh!N?`Lu3Qy69LU^wFq(
z08)TU3{Tu=)<(#THmm;{mG~&?sjZNjM(;VMvx*`52p5pmJ?V6Of;5eF6RvA}4Z?O7
z>n%MiCQH^y{<!T^4j=buB7N$<xFNJcHLrZ1rn;WiZ|Xut%4+>XBiOk@elzil_q<Q8
z+v1;%&I<m1@b7dwzr$M-{ao1EUnGA(l`}a#4yAY;5u`y%l+-)1oQO}2GcIeuwLI6O
zzH9BMGtZ~#)J}DwCW>@9fefrFkJPJoy}#q5m8CL#R4X2YNwx+PUfA0>0x|lx1xN7W
z+T$*uDj9Fh8P0+~8~uO{*@9LMBw4)KPKGa&J7e|Ea>8*}uXZ7R&^fR-i<9o2db%5>
z1Djg$TYqD_+Z&!pPpnMzOe_;zBU7_lFnTt7T+Z@F;$|f$mc%;IW9UY8AD^Y~UwWRJ
z&6Xve<%#r(6}k(kl{Hae4X3Z!ZHjIw-U_>9LHJ8wB|BeMtO^D8!--|ACMyfr)1z{E
z#elm)^6Fy1*}24?P|0keCabHdahP*-A#J=_W^Qj?*hX6T&xee27c|Wtc?+gpi&ug_
z+(lS+k=-6umsjf^)v9jxW>@l`K5eL&oGvm}2xG4mfvSUA%E}gGj_vi_XUb9^QJA4-
zUC?%Vc>L#AkDv>%Sh^RUn&)jC{U9MTkuBx~OnO2IR$A9MHI6k+fW+Ea{2wL_<8yfj
z4<IJ6BNU<d65|pQ+__Wj#g0WoFg<M`g3wlxv|6?~#%uYA!2@blEuFV_{iD^y(5JzI
zJc7RbJd~ZAwTF!<LrDo!qZkq<mklHVD`V0DfL3fi5G)C%>!Mt4aKdG{bc5=k^&)e;
z*&#1lGx_kMOqTE>V|PO}k}&H1u%~sDNK6$cj!g0?`q8KvYRAk*@3s6XVsc>-*Obvd
zeBE^x{~c-EVnDH8b?!bYJC9rd(Za8cE}D~@`NLV=u%D&{H6!y$45&I*_gdy~^!#S7
z%FeX2@rcwW&id|O$e_9=Q>#(u^#mR!>P8x1WF+uE6OJG&r^9Qp>~z+#pHZB0W#=UR
zZ-o;aDm^FhkNf8kiSKljZWn5;kuxzK(XLczLFQW^wt79?ZdS%Y;d5Blks0qii$VBt
z4(+K*8x4BaFzo;`^Z66Z#b7*Sp#1QG4-Ay2uKtjLlGzMtOj(&)5ZR|{p4clhBg8u2
z2KO$pj<>T^5k(ZSDQ_cXoJHDH8LsNsfYidHr8zxDY7adCM4ydaYc2PW>T`Ycc_|Qm
zu2Jse!q3&w=Yzw~mHNE#4V$}y&(9j<zXPJ&x+J;d<nVJzl=}!Erjjryr_HxTG*9!W
zd^42q*|5}U5!#hN%%M4>5*;w|Mr8~`&8gsc^83V^!;)XTaHB>d4MOGyzqp8N3Wf?p
zbGd~Mh<)iFdlz79JSyG9Ex%)W`miw(?!o_#@%Q{lXTDv}(D!xkwQZKf=y>XN6ZRt5
z4m9&1FSY~j)QHjdy8(qv^+!Dl_M04RiFu5am^P#%Cfp;H8ztrjA+6>`(sNU$MV1~j
zN*=q`jFP^m4Zc%y_+0a-Qz<Pw#Cl98W4pLugt^lwdK}g-Unga&E|?Wagi0W2cuq4a
z$2h4C`ARPWU<UKWk0Ee&?(^^N;4SFK-$F*xpYmc5WWT$pA6)`6-i?kb1-QOmlkT^g
z8HMfoh8(GMLv@x3T8EkJ$VJ5G1efqa5lR_>%#b+v;nPq=o&`~9dz3;mXY?&G9%R9L
z{g41gn1OEOt@B*=gNlFJZ3m#F>|6|oh${^7awW>vV2|>r<x2X{c9|%mau%LxXJ(oe
zw%fDXI?^nTgs<18vSe!THTL|h<a`cN#IfWp<rgadmcL`WvdbtXF6leZ`U6p0WWCi!
zFa3`7C(DVt>`VZmFR9E|Jl7J(@4xaJl+$nGC^#y2_E!>g$`YQ8k&!J#0x;)Rc;RWV
z)aBwmP7j%&$P%WuYjuON7t5TY?xElIQ=Kil)8rDO^3ts)rTG3!N@WGC;$sE}-|V0u
znL(}1uFA~pyp9do?7Jsol7|a2Q<x$s))*+T_SE3T5?Bk|a)g~081*o(3^mm()rN(J
z8VvmyYJN@%f7D2sY5Fqr$p$-QX6vX7zc+`!{|tW%bvg%lS@`>#5WYQppK5=z-IVDH
zzh4}Fzn=HZ*o{K6A#-gATo@+0DSTfUzOM@3H}ad=YF{GEKjVF9JV$%l9@ppf?L#8a
z&fyF|_oR}7)u+&pLEEKH!MzZJA^0+*$8}Czs{qI9hj#2rYkCu2Q>AQ6#Hht`-=%;C
zaUvR&1=nBim=)<i$<5fCK^Sak&mQ<*tPH#6OhO4#Uczw~6G9s!caa-=)V=qs_Ftih
zz2FY=qJy{R;%~E#EHV+iZ2<1R!(3HG|JvPq>_b7Ld+)UA_Mb{fc&C*myeT*fH`R04
zuNv+fjQ2DdR|lQgp-OXNI@KZJa4k3-d)~aM_C$YNrTq6UMd~9vWT-yvNmTN14k!*L
z@fP<dmMG^N<Rtz;!ar7V+!hl<;!qv@If!#SCBd(nh`__O8Wki8Vg|>tQP6?ME$X+Q
z*t=j=4GA=#Jj+Y=h>w%HSXE}Ph-%l9ATQ3rk=gYx=MP*Hq>M5TG-ZB~GEIRxGL!~i
zRN!N}9vfUO!o}}2{dSAvn`ZDjQ?FJ(mDHRQS+m=kaWQJo`rO%g;<Pt2LDi#U3o=VI
zEbon?=bISwFAy@<WwmVL-^bRf2QxaX6MT26qg#A51yBv+&17yT=O|o_NK#3YC*-UL
zUtGKs>JrG>bi_lCt0U|g(BfbfZ=^OIaVyx&Ni0rxt6QzUMPGhFefdq>U#*wr`pWe8
z(EfV8A+NtqHbs4)za|5wt5#`66MV^5C+f4dpQxIj%F-%xFyBMII<{{$`<dA<Sb?rA
z=-Zrgg!r&0((iF!Y5LTUyg&6|V*m;72OdDA>WbjXSa{DKW|Q;*&g}eqN)Iygf~+Qc
z-VbaN@3=xmvF<JBTH*5HZTa}qlUV#_3oz|7S>|EI+r!_C{G-S}YIqyoakeP#FXo73
z<}A3!<T}&j%HL$ovnPC1{))_}$iHG3*8HLOdk?*D_MB5xqjtLLqw$CLD-Ug75Vnsy
zmUHcU1lt}J3h!C|5A^#p7PpV4U;l^UKMwpKlYRr{_6S42gG{cEZeK|M{qyMW4P-_|
z<Qw8oy$8P?{Pq7O{j%*V%ctK@FoJz-`pv>*`_c5vGWZbugBSlB`t8yFv$O2?^anG2
z4E`%IS7ZH0{(H9Ne@VY=`zrG3cM?_o*!26#<sVHy_LA-J1%0^RB>AxV`~QZ1L&tAP
zj{kmPa{WjC8=AlDBk1Q(szgk9lPbe{aaWdk&)!eYUDxKlEc#wy-YdfQJ^1&WlRh^6
z|IPjCyH3of`~TDZ>R}vh3^VhLb?rd3Srk_;7>mM(val(|JFwbs7}wqKsR9Cmw~nqG
zCJ*Gf^=d0OE}8XEEjnD;HwJs{JeFKbl(SQ+lNZ#)`ku&5CVS9h3N0Bj-eIQ?k$(|?
zFud~kV{l479sYy-8+PVL^IvZM$c|q-lJIvPD!*@}#Q&B2&NBEA`F-5~P5qCb`qA}|
z=mUC7pKSd<$e(-g?@weA%C@p@`>c4~!?O<K{?zLBdE*LNYY4DfORPNCIi3)v!^U<o
z`<U6w^%r$2qhEw%&4+t?uaKUeP3Ql_BnzpShrhCY-WZFYQ~e)`U*&u>{_y;yzi2VV
zdBdrhxqmnLe&J<@%k8uH`c}GXc~K3Q^QHGK{+@Y>O^<u5N5ke)M|){S-hF~BvMMbF
z^Mr2RqnmtXn72Loyp!C$S7SO}la3!1cP4gqHhvPtx*y%LDB0^Yrt9TWoOX{Q*o-rY
zU9{IrNb!E#niUup3r25JCs}>7hy5fikx?4#xUrNP+tm|0mJfJKC<h6`cY6sBuewud
zaNXiP-(3rcTfI4M-;!?^wu(a1-~2^W!N}656_=pvT=TrS^#yMiK0kyC888$dJ)ljm
zV<=(XWj(BXe&Bi|p&aN=rZRnZ=8tFfHed8t3G_3xyq3K3>i=KM<MPI_4|u!!4$XJU
z&g-A#nizhRt*&9h$9n4q+FqllF8z$R@!r2Z^w2{I1QshmwEy6<>6V&wQG2|zWiZw?
zdQEao4YxYRxI?Bs7Vj*{@~_Ur?;_HNQ_xBbs(a3(b!&pXfnaQQ8V6Qf0KjS7*z9$8
zHdi^pMHAn~&4VY|*1^=dclYrz`O0VKgEiaA@41LPec}0><onf^eZ%X2G)Vp{)_Q!}
zMfrWT;$C4@wM)|Ou6vc7lQOF*v7qzRD(A76gW;wao>k*cg7`%ENtm8fnt7>-dT9OF
zJ)&TUKFXzuL~LLdi!Q+az<s*EzgzaC_grp!^yk%U{Seu_?K&s>%0g00w_rt&7Io`O
z<XEIpm_PMKF-9wpL>!LwE-qtbIOJwoNL_E@7%p2u!Rg}N%T@k6TE}lx{6c3W6)}M#
z?2_wD6_>lezBq6#AT(C9IzGw*R)}zBmG*fHxFrG{U;#@aK#>I)VP&$s(XCSE%7q7v
zFY(swpFcy#A}SMp5%HJ~h`HQfm9^L23FF5(SmDN6$B@l<u0(X&x@tglS}c@wRrc6~
z8IQyRzEej>@2jc=h5R4yfc|RyCPEm^fB<XtqKoANkYLm(suJJ@CH=9wD!o`1B)7PN
zzxwhDd5mjC35oHwQNoLalgr`_q*AH6P`{@EGUo&84Ln@Z?%tp!?R{0f5piA)A)6w|
z6CtE4f~*T6%Oc1fAtX!WkQ|CyFjJNanOQkrU@Y}B<UK4t;Na>J5>BICd+Ig3o8vp+
zk`aJqUeBsBG6oF>JC@J{7Vd;jp|7`Hb#(Y)s(n42*HyKUMu%DU<0W$ri~dOd0>unH
z*@74^+BTTccUSbC`;B!!s^Q!cIM*?qr^~0T{1$Ns?lOEEryqy%?Ifh>>fVSTOV=C5
z%~A0u7SI)?xXJ=@G`z?HmPRSgwt&SE-~<b3j{rv-z}%U(`D5(cG`(f{acF>d4hjrd
z{_J13cR|>^$R6S^GMLc^@SgClvoB}NsqY*&jH#DG4cJu2zs`&vuXL@yXenR(Gis1$
z-cR)G`acmH?Aq*=&u^bMyP$QHjh5-3G}Rz5E%vX|0QE{2_=~!DaF(BRr1_{9=BgF^
zbe0ZlpEt9h^$>s2CIdaG-XyUv*KHJx3bfC=#H8u9X&6Y<-M(D6B}y~Pr0KV5T1*=I
za-Bw+@W|&{*9lCj2Ea%=AYHas!E|rZxSmNhnt%CHYrgbMYSC}cq^bIGMoy|ncFwSR
zaXoI-ZO5JB`sdC8!}WOX$UyJcyMiC#rjOY;y%K&thrPRG!!)#&W9}B<_zQF&={K_a
z?oKJz_1b;Mw7-eFIsU+rDef1}i&x6t>nYwFoW1CT-OY~ckV6l1fR6179vu75VDcU9
z<7h7SubB$i+mb#Z#_r(7JfjS<i?3#&3gD(v{-8UWYr|913{uS0Zd!k|+i#*%Fero1
zbE4L&3(lf1QZK?_X@vi2g#0pe7==BITDC{;9|Wy-qU*EcCsDW6NjhX{z_4>{B0VqW
zJ(>KML)@97f&#n{9zH4Ec<eAX(T_@IVu{$su@7W(=1ux}kE|a`FyeAJyernc*8>Ue
z#CcWD3~ucGoomaS)P>BV5`XLT=V9dEn&b<3I6X__oc%ZH=+Yp!g|#TnRqGT3>nXI;
zS!d1P9g7tfI34eiJ-PccPRFTK4`7ji7x0|iU1)*nlXoWHCS=^VO@dFy3W4j=!uh)k
z&GRp9#u3|xI~|{=2h5=$c&#e9<f*+2`~y~=UkTw$tLTI=6lUz995&-j^GIHq9)I~Q
z5~Rm%>ibM2r1IKNyYb}g#@|J$xy)ny<g&I`Tz?k9UU8IALCy4ACFl)L2Xj#+nmS%<
zW^<#G|LnVzR<-WK{$Y1x(M-~BP|-U<mOj3iUG@dPEk=QTf=eZvW1GEgjia9$I^R3X
zYtp4$6WtZ7?`$odDHeZqid>mmX=^<BYOM88dvrGW-l5JSJi-T)?-gFUPx7^*p2jgV
zzx?GdS5nV0GlTVCQml9#RPY*bFNK+OSmB-$C^FsK2NfRY12Hs4;quR^B~EGv32<>1
z^JlG^<_`3BzCsGzRCOagoLgF@d9gN_`SX1ClxsqLmWjV}JDVL)Vs*q2&D{I!a#`zw
z6PPQSV>_}Op>T(WBkE{imLvYgv*Cy-^mh94oykEsB9_My3T~L?h)$bP9Fck*f-w7)
zIm?fB(}c83zI<G8&;+Yfve{jH5|;EK>t$UGm#=T>enYRHLmD*&ZEtk2@p=#S8@oAT
zmGor3KiGanX$#+D8<V?Z$t{C;>-;UYG3^%DWt`-Nv@h=U#YeB>s!8wZ$>}S~XXf;M
zl9nQcO%HQ2u3ud{0DWPh){-pOG<wfw%0Q#_2HW5GSa322)%BBdGBF%z`T<X-;MJee
zH)f&XEb6~aJ4{=HEx?S}c*D7vezKp{8_sfYI14A^NRU}aV(?Qg-U(1JT$kcoLa6QZ
z6-6_Hu{#C_M{nTXq~HtpGwsiVw9^->p3h|K33r>MWC;pQ>Wm_889DnvW&_UH$$?_0
zV>%?vN}aI}&<pGDt0>4Ukj}6;5!)eo*m8V#WBJUZC#O#>zvSQA2PB@f2H|*N=j1^s
z_<Cjyi13QCS6dtW@7)W2?I&_faGHKpXzx7$IiPFbCa4O7RF*IAt*n6C_C_|m##6J?
z*rg>%3tgo%KdHZyiap6LxFNNJXW$z^TmdSR4h-*;FLQ^Qu8aT{s<5R1ydd-UY?&KX
z4g^UpGARv*p3Lrhl_ciH!6kLN{#v0*_x%May9-D#r^s1;iFJi!WmezGTED05Rex42
z_$u_ymUgj<{|ZR?ATiY<q`^p12%ocj|K!`}v|h|LzTe$h_v3%ovYh^mw>>?9D-1@z
z?>)F$3p*BdPq86)SbD<GM(@T5(0Xuu#nBfs3cG8%>xZ2W&5NctdiC$tcg`GSi%C(Z
zw!^l`w}-VJxa#PcJgrs2^QL<>oh^mk^+l*3mK0B^Gjt!8v-~Tja)Fyy^{<Oim+=*z
z%5q*-at62K{{jDv-VpruUO13DMh598$a?}fA=9z^&|Pbi132w-Hgym`D~)<{)b%j@
zg>=-_)I)t~!e5F}Qm^Ld--2Udu<NLtgt&*x5i|dSbtQE>Zl*|$fX}J?>v&mhh_Xg)
zooR^T&3U)e6-hGvRKQHonafEiZM%Y8lDB1et0@G+3jN8<=W8%7<uJC_WiI>!8@hS(
z5Bi9=oke>5bS*SnoV#P_AmfaL)`qwXjW|L(;?jN7?#}7S-CuJS{g5IWy$6!76uQ<J
zqJSek6D8@ntGc%+QP?h#&Xv=b9glAG>2o37`Q_KSv9||bQ2f>QrHp>RyfX<6Qnw*v
zQQGq4)jfD)(}am7bpL+S7i;D?waU$#HeS=TkzC*M4SRb8cZs7VAog80RL#V5u3o$e
z@bw%HxVGX&cPeq8JUsG(hwqoe6(DdD3Q7l_=&{U~$dR>^;Y98gakDG|c3kB#7=oti
zcTDF}{m>labbO0kQ~Y+BWTt4sJDGRk#5PO5c>3g6vtPcE5wWRx^k$b{I1aJ2NOu!A
zrYBQfsu7>R8&*8dS@b4!n3x`wHbkV()$#OPie`@2>`xG5)`g}CjozrLpyzJe49-P#
z;oISK+(q_Ae^ixdRcRas!^V+qx_7LUg^ETG2dSw=Zu)pQ?3*PGJw?7sJ0U%;g$=yn
z&cZZEP)Usr{eZh>TOnSGMTqpG;nSUqH%)iG%elsHJ<3!ZFLy?s8pl<siy3yH?H@bW
zj&M4R|AlsJdk3bZM<vmCCQ>zb*WWpBe<Cphe5SNU2yl1lB%Q^SOs(5At3UH;iM2x+
zz4iNsUBBP1E$aVFj4z9E9>13(ws6FOu7GAJp;u@5sHihJfNp#u3QxjcyoA1J9ACP?
zNv&tdCHzjUw1JoK6JISn{uT3!{L=ZT%5QTo$%8Q2u?FwYHAKPNG`_P^vr{r@5VTkD
z(msKE96DxMKsA8)N=|1H6QGmqhp1Mk^Ub!8{7W_cBpYn<CA`@Dl9$x_766pKv1fRF
z!6%`&u@-b83M-}IJ}p~-)7=$t(iOb#!yOUcE`zrZ5NK9Jc%Qa_jsF(!3o<6;@cu3z
zZ?D07wMDZf!n?o%f`5xwwu=opyeCF@+vn^D&5q^WuP=$;D|$h!14XRSHc<y44SpzA
zZzvwK1=i|ic~Qx(EtzeI#c*7P{mli7&0Y_b_qu~S5bK%eOcK*?1qRDs0g!kgYKN|n
z08ql$mEr&qf4X;w>Gfan&C)l-4`#zpDL$A=Q(;&y)5g2uUwCRNsJ%@n1e#q?Psb7P
zfZ<%UhN1pwZZS4`Es`*|2xA!627mG>{}?0yQ8mZ@Rx0bbD&vRMu}gv<wF@t6&fH6w
zv*cpDG!yMSxt$YCgzqdZY-Z8h<ZX;&vnJdXjY*`hC>+LQ({)0+{8Pyw=Ei!)cIC@=
zXZhX;Wpo&-yVpjy?kUbU91}x#ZT$fl$yQVrPd;DS_62Wia$C%Mr|rjFn|v9SiLWxl
zuF?BiW)81eeF}H)W>iG{z*J4z?joA%gC{zr0!Gyjn|LDiRuf%0#rNH)@x?-<@5g4@
zmKh0JGegB!XxdVTm{<5@cxE^ssmVRiJ(zQqt{t}g5`|tgacj!_6WGjZ;Eo}GLO5r!
zY~Y?kw!gR$o5>41RZ(-{EmRNFA``66+Q#pL7YfGj%{gd+*%oudFb?MO&KHb>Shd2u
zw9*qyB>A=&md}x6i<3H7ql0a<tcj3o&MiOT7eYP)d~!;PrfoCceM2tlbCx$8<a!sB
z^)!rvA#h}D-HVQF+K;>Gf6&?RX$1yl`ws2Dp^`wcZD{ZlILLjms@te2;dluX8NzI%
zB0p{1mG-%8o20%7y84d6*16-C)l<LO<%D0V<$(ZOMiiy?A_2YsoqglUH)A}!nAv5d
zF#M(}?3?V5W#nzA^#EZ;*hn02Vw}t#N#s3YYA38K#}@ZQ(-eC#bGFS#S(*O^X|VDN
zt9X3tzomFAK24FU3&LH@lD;!T{Fq5l9o)hNrlXRz1#M^^TLYr)3@X-9+tKZFKh5EX
zFm+y9|CCX?HrKV3I8ARU!?Q1h8TRrUYRI<~#Ike~@yqTv={~JphKal<%-z+7kE(HH
zvr3Qn8h84Kb&6+1+$uOG<Vic#ZlC)pgxc>7(_B!gON3>b<LvM9hEK<x<6k4RVEO#_
z3JS^!E-jHJf08A-_=jr)N9cT4b5%Kh(>O>H@24EIi?S-Ig5S!|s4yP;GU-O2QrUWi
zy4^vSD3|v8S4xGbM$OA(z)zEp7IN05H*XQ0)2Bp~PN--sJZ)<XRh*6|L1rvd!5<O2
zq4nnwdam!LP~MK+X(;|#*FQo1pY5Od>L34vQM(?kb4%)-Yr50pE~N-*DkZ_R=d~Da
zJ3wXXzHw<ICDM$(3T6t)9A|i=9TWxe(XTljV|Y)*p32-z;;>xr6@Tt1C=`6v85k6e
zyoOPkf9Aep2PqeU@7EvV6P6jG;M$qGo<x0XyBpkC{Jye+f=Uw&KA7+WoW=6=OV?a3
z$raM<s+cjP&6tvPk$sqOC@*Dgbljz=$S7iX*SkMZi@duw@#Cdm<Zm9&v~8T?bsHt{
zh7u_p;kAhI<h$r5J5X3nsOO^L(wu+0MTq<xg-<8bx`?*wUnAgZ$iXCVy%gkxj(6Os
z!We{k^>4(L7p$#C$NQy8@4+U&^y+wW_h9RZ@w(kk>Pd>KTjMNvnBRoIx|5nCj;!R&
zLz4ICt(7Jw@5sV&pR8Lmds{kA{Gdm)?>2?g$mr{|#k3utwPx=fI5$qvRXDbeGFHo)
z8dPAj=15q4Wz3YftqV8gbn)bcY+*Ec=ah0)3kMZ&sVu;avc`0NPg4m=wK>vMrazUz
z&Hs9j1zS=<-zdmUUsD1tx>K^+V&F{G>X&~aOZvz~r&kafZY(f);`gNL!>>HLxyP2=
z<J8>awA|y&+~b_+v8i3<xIIncbp0+4f0u;6E9`Gd6*Q0DHMh`BgJr8*cn$W!D9=I*
z0*t)jkb?NV1vFGG@(L5_MS5|))H2c|*K1Af?fD@ly;F2qSG`4fV*waB^GJFQtiq|x
zQTek_O5DSdrF!l_5HI$mdikrojlMh8O{Xfz-=x(+Y6Tw%N<_5r2lzQ??B=oRj^K^-
zdyGlblU4AWZxD=6i4UFR{y<#+F2nNa2`N*jo>W=b;%0xLSk!X&KCpr7r^Kl}sekZS
zRi-1lcr^K91AZAHxE8zKlV18Eps*`f0?XX#HB|d14-&(hJ&s`ia#&#q7X*)U$R?~_
z3XI$rAouMv$<^rJFD&sS747(;VRQ{Qid36Tk?A8(!_N_0x!O+0APx$GwQJNdsY)Pr
z@E_S#OYDI3{o*mZ9Zow8UDIhbwMkwYcU3FBzj%(J$TFGEx>N6|ZG$uG{rc(_Xf2fA
zi|OfoKInHa{8hriyHu~1?-j(^%k|Uh`{2^$rgey(X~vTDKJ7XtR!^kCjyHI0zu%O=
zp$9d6c8x+ZPAy`)!t^y#gtpx;{(~o+j+m+12;T@L6WY$dMih#MYR6X4ki#?`F8Z9G
zlH|>~$d34q^t9-Eaqzp}Yt!R?ReT8B-7mHr3JI%`+pM~B#gGJ7F4k*taEd{BWxIWA
zvIS@aTEI99m>K~-YXNQq*xv$bBR~v*v?MlZ{`FH`dl(+YIR^^HlNXg>c)12rnR{E(
z#VhCQ1SF|*!zk+q9PYENk}%WISaQqW1%2mOJ<iZm6I$|V(`C9Z+Kk_DCY5ZJTF~~S
z38bf#XL7Wuk6U64FZu1p-^Gk8NzFp^TF%F3rwD8XO&jy3^9}0D^mn%CVqaZjFB``>
zOir}oI<vU-Hgb0yB0hOAh%zVfC#!Ep-S>g+tv-K`?(O-X5AR+x!u`86iW9LWc7e<&
zj@>2M0-!pxI$AF^``2iwaLJBXjWH>~k??=$!fJ6Y6-f9$lkjR}t?f6@fA>Vc^ugxC
zOCJQRW;A<g$%n@Di7~%*!Mj%Yu(oNed)rC=kKxv|BntL~bm{!QLv#8}BfC4FWiiue
zTrbuXkz@8JyiI0K9Oe^VeC?#VQHxu*9Da=|?Omg`G}b*l`{YJ%W3!!f<6i&h{$_6t
z%cX>Wb*D<>6hSi%G*Ur1OprcxSedLKT7S8PSVPyK<UQE-X0vA|ZG?!#gIjpNsz_LO
z=401s>dB0OI&r_K-8TgDQbyQeok%@Gx}0#7KT{+gGg|o3zd|z@^G~R8e%{60>zR>G
z$ilB?MxvqR+V9^baW6L8@swdmF;yi={8MVQzIhWX!yf$j0PEzwCqn%St6S?RZ34{Z
zFbj;BnM(#MSLm05zI7kLw<m<jn@P?XVGq8}WXwwZ%ym>NzPcD0mU&!@wskYD-v62F
zU_P%WGspa{%ZvzrpEKvj)@2^#moV;`D&VXSLftE0IiDdD9L6x>$g<8W3fFnW3xJSl
z>BFrLlTp&|V(7c+;$4jO_$n!fZ1?Xw`dVF7{JCKZ*$T$QvW4B{Y1p4?!U&gIz}D!)
zCjF72<gfgHypcj{oYBn$bs3GZFsnr|6B}QV@1X{i6`<fUN>n=(`xZ{M;#;->d@V+`
z%xX$fAX(72sH-Nch9Qpd4k~8-3P@iN36R>}sApMB6!^(@{*G@TsK^sWJm9sGxe<`o
z)9ka~!XvJ1_(r+@-h@u%X}<54?0R%f=1}zCy$E;GBj$1z-9$>+7hJ70a<_M9>l67K
zT*2{UZ?@X$q;4foqvHN<<(PSJ<JPchZKrF8jyMmIn?hbSpAw6rsk`J=YiGE+w`($s
z=~Jfp;}$g6J@0fVo;;Nud^B6Th35fTyeC$zceuPW3S~M)6iBY;iim*^U+++?^e~F$
zO5O|UiS&`T9E&nwBZ6qJLUU%5kuf8h(<e-APU|Y66G(W9+w8YgjO}WlI~y*VU5lxI
zWBc5hW{0MI?yLgWykDYU<Wlj-pS?Gj;J8t0l91_MHfQmBS^(|i++Ex<;~;F74db+V
z-eQhv>X=aiI;8iV!A6bi6ED5)K_|68nd8Zeb;em?t}(S<s35r)6H_dazL;(;zGt5N
zjf_K8!sBizXXM5G{5eXr|Dq_HKJshC?|{IZxxcPoZLizzq`LHw+*VJt*kE~oiBN13
z$jrtYeyzE4wMk<DcLIp}^G2anF<CF1<Pa)X&0;$A_>}Dyr{f)Dja@ip`pu)b0H%xR
zo<7n&M#`72F;?SMV3+BQ*|n%77*&W27Q%0_nEIAV5^<^BV0>_M=3agkRbX?UN8JY>
z%~jk<iEGSN1l<keVtsd`7MkJbtqlre15AbAr}r^g&#g2UM`3bfOkag4zmWfr_i(p(
zrLhA24%y`m%iP3I@Tm)}p!(X?#y{g!<8epT57lu|EDl@{e?a$V@?6I*hc3wra2&%U
z9S7=j;%Ddiqtago{TRO@e`O`f<Zbk`pIY~@jmRCjhnc(LSs)qrFv87A>O37fg(>~_
zNS|{KlRR205miFvjceG~h0k0S-(XC}UC6R&0M?^U*OREm_V7P%Qm?J-jk<iZ1>|^O
zjRoX*V3`Fhi?ZBg0ZT$aC?EU=;|{g}sBX{D@HWn1?EnxjRY%C_?$GQ-B*np*V8Lz6
zx`9nFD9Mt&iv&xHIBuMUhfZLh*Bit|>KI=z5jhhB$SMMFnjGDc7jtLy-Itpmvuk(L
zi`D+5nVLMxV7e<fpP29-S8(BcdjJ8@Rc{hpl<=?7;2FD<r8U<OoHnO#AN<MXW?R?a
zdeZpj9Yt;1Q#<E08MRU7H#d%fq9oyU#m8S*RoZ$?f*qK2Q%uqL6k!VYg`&Qu@oh6_
z{gMh-=ZP!k`)1@C%Odid%x&wkL3vkmTrKWxTLGib)3#4Ze9bm<2}%!F?DlZQ?f_R`
z9+3!dQGM-BogYv5<En&^Npc<Mthj6N=mh&jO@x{#%@8j<Pk&&fdOgBh!J?mI$IM;9
zz*OmnJP8L59IW%f75w@}i3DnBQ1{(t{I%m}Fv!*<yr<%)bB=T40bERPTt*c{)|%3s
z(WO{Ecgo^5oT0PwATxAua^WKK=UA>KC%SBmS=Y>}&^2@VA$jBL0TNl)OwQ{vUCN~k
zfmmL}!DMgt3=Lv|n!UNxh&)Z}1|?{jMWw%Uty;T&_(wv<!znFww@OKOk|#5D5Nf0I
zqMxX_Sx?cGH_%G&Re2jO{R{qdCNV>4PET^NL4!r*Rvb@2P{|UEAtl3rW!ib<C2HwQ
zN*A1Gax10lC6y)@anjy<<|N-TlmE)>cq$H#wFrJ|5PZfUxY;65nx15rKJc&Z*7f{#
zlK-*@R`6nL@ZR-iYy~g<Syfje3fE`NTTbd%$e^C2hP?juBzw)TzFvYMb183ix4y_<
zC#iaiI1_&?;;h`lt1aPrN`O95Gv}I;l!=m*OfzHac|A#u9sR4j^-ccHJ_{@X4;IU5
zV2M!F8Wc(e3Z>D6+j?a#7H8e9cLJStbl>d7!tSKLNxO3;nB*t!nSAy{)!$E>>w_r#
zmZ<P8zchtgDzCglloEalSDL>4q(|kj!5T)x+e171z!2^ruWGd?m;4}Pvv+@FDA`FO
z=m#0F;WFQ3^d~2;a=lY`>*FMKlBY{~@>g!;#nSE|TYbxA?=DmIm6GZ!P3H5Y&*5YK
z`Ng84{>dYKI{``Y)dXZ*>0SsYAQTDfpZtpEp4WdU&)7ZulXuw31<^oaq?Qu?jf8;F
zcYzF<hPoBfZis*KnZMZ6KY3CJ5o6jm9vMQqBFJY$$g&7BGK4G%A;Ycm5cwzn8fO1^
z{>c@=h9#OEjkF8>lYaxmI1}&bpZv@4LpU}0yhi@X-{&QBwp|ow`C%#5)4y=gFW3hy
z>4PKrY@<7^)KE37@fF@P`V+3x%=qo7H+e-S{mXL5IH2P7U;fbWdgfs`D!V?}Q|QcM
zoOGGo%D<kc**7cij4<z?sJ!L>{wUR(JUPj0!&1hDDaY_WeX;U>0SFwbe#mn6S3r}|
zA7&5MhNB|8g!R|P(<s_!#b4X(4B7Sdkn`KCRR_xuRoAII?(dBNpRfSY!loEz0bLPb
z`?V&^vIx*?0ZSvmBNm_`X>qJFfGg+Nw`KNihJE{Q`)2f49VtIMXD@r|WOJn4d@2qu
zw+TbN>jK_LUCm;z<Bt>+9w|5XKQiy{ah}}iNRlRZrW}1{$oc=`yz}HSQ_cs@lfQjU
z-g)w8c|kv^%*Ft)=gEtMCoJ3uws72J^%1N~jar!;+jqNi_B}i_-h=L=HS=x!bgl#p
zkB8v3oP4!5^0Q{dSBC)=7=wUoXq0|y&9679o@ZHx<Y`@D%(2ouDuOTnQN!?nqdt2O
zwz-KdgeIG*90~9AsfnJ2?Rw@PkBjY-9&gD#YV_zIP>DkQ<8h09(qoW&90(tY5onFQ
z6gCZ5J-;*bjo&%;cVVY~`3Huj=D|FQvGfmUmwx%j<0kv0$KKpyfA|>hUMQP?0Re@~
zt%*kFw9h$=+4q!AjUvM66O^sSO`ptiaBb_U{+R^F`X+bf{+(<@j0m~vfS)7w5#VF$
z(Y1$ZRrbaoOr+1hLbn<dQA5!*CbGmff%&E75s9TN7<H0L!7n$FzN*D%`IDYq6Za<8
zJ9jr!aky?`BirX}l}~ho!>Z&C*ibLs3R;w@1&H_Ie4NJQSDWP*d~|Igb;LO#v=jOl
zt?RsP;m$#7NPt=u4M$W4EmV=*m2vNzW3)arDEp=ue$zg4Rop+VGT~2Q3yzN^odQg(
z_D-wB66ktU2+2$I4e#{ognxP^?`WoD@NXxnTL*e>doeSmggA{ZGa=#>YtkQ65~O4-
z4r8{({c})^2@7ocghgF4?rp_GUA7fwQB&EH;5W*FeV9E~_N)+2R-Vhiyt;yfTr5`^
zeAy&g7bggK`ZA0@b4$EJS~97qv!Mu!A+FEC+`@ObqnHye>q~S(;WYMcP6P3%waw$d
zT~*R{dqxKVp-8P_Or56|q{n<C;ll!SY~~mNaMPQUA{a{yl4j20Ns#?{(eJzA`;olo
z>}7V<%9*W7?gk`g{bl$J>}=)8`g;7n@~^u>KR9!NEaC5J8b2_ZTbs^d9qBTshwD=<
z0XWH})oB;dwT#@d;Hnle<$YBFI*yf+SNv20=f0{f5#)OzWMc%G8bY*bWOGdnA+iNq
z$hZ*F89@#UAyXqrSqO0>$oq?J>9rB$)eur0L7omF6%k}(2q}pm%R|TjgU;6H<`5D@
zke`K+EfJ(Wglvo;-wz=xBFNbx<dz6BIfN{UAhjW+GlG0Rgv^N`<soER1Q`}Wrbdwd
zpIB-rAf;`^b0NfyAP<F*`UrAw2&s)Aw}g<I2y$%*kxj#5?g$}e5oA^fDTyG{LWo4K
za)lF*VW1FH9E=YWZHXYGL&)L?^2rd=9zlwMNb%!_GaI_xOrZ+YzlI<>dHdVh`SjCn
zns_=VzK@K{#?!gu$0C>VB>QlXdS{?*vu)cgd=T;(LjD3}X0^&`_S9Scemr6Ud&gkw
zyo5im(q{jz!E2A_7YE-k$R-&-h(+Ks6+KSXwEGJ~=KDY4avarfq``AsRJ$<V&)$GB
zkC~7^!E0&ThG|)?)k$f+Z!6Nv$5jI`xfZwUc*(qKRaG<JAE)`A)@MeLK~K~AHb(aM
zNS>6a?Ty~WgjIblD^G&_sUTgv*HtVUIDeX+7f7b8<yBHc_AVn+TyH|vo^qur$P+A0
z1HtE-VG;lSP0@&~qPhUOBETmsKzBsh)(x|OoWR)rBa@{)O3`ZpGb6ww7Em7nR#`wz
z1h~xtDkH!R7El%ed<!Uu06(yR{)p|rYXQ9xV5$XdiU5-=peq7=%>tH1fX`XL(g;v)
z0gEF*p#`)@fE~VR{>%vQyah~)0GlizCk$3wKz)?rPZp391vgqiO_btC7Em1l=2}2y
z1o)l>R78L?Eg&Zs*rrh5X2k;Me=VRt8s49`fZh-g3Jx(yl%&um>52e5ekiP2UH(P;
z7V7d(^5!>9(|A_B7=xsoszHdo@=)0;Kb^ptvn2S^+c@!KtJI7iEVekNMk6qk51j^^
zwsSfjBb_vS(CLQw!o|n~;zbR%UX_yvXOf(^GRw9n@D}HUs&apbJirf)`s{2y2z`zC
zU%OSEUA8(ggXaVC;B7BY9z4s7sSEB+iR8NjPU?b496V~iO{g*=A@~b#8MCGf^?&4n
zh>|gz{xqkLlY8|AL+q(K6CTQgvX7PryD!hmgMP__KmXw4$b<fTc~B4>;2L?bB^qVr
zrt<f1i~xleup$EN=rmllI08Ix0XYG&$pYp?DOOv68v*`g0ksj}MhmEp06(&TiU=^*
z0!kvl_bgx_$Nv@(L;%+UwnTuVEMQ{<_`C(IhyVvzz%3D=$O4u`fHxMI=66Pb7c5{-
z1bEZ}W<-E43uuV|w_AW40e)oxIRTNjfZ8a<6&8>a5EocLb(G>P3&;tGgawpEDQYdC
zAOd{B0&)W4Knu`vPNOI%4{}<=8w*YQH%9W{1q*180FN5Ll{4))T*n)6>og2MN5NJk
zOp{0$vOlngeAstqo_v^T5wbcOsz1yysHg5BA6h<2KGcysCm#;y?PJS_tKQ0!56`EB
z=L7QLX~2=ba6d1M@|LW9AYVS*VZLSM!_~ZHM#<(gL_SQ*%7>N@mk$-8e8Ao8qx6Np
zw`JwSfaJr^F8w(2VIW^Vlmu@z82Qi}jk-5GO!se!0ROart_ZN%0+vL8H5QN)7|Z?-
zbMGD>Rdw$FXGnmdMkXpsuvBA>HK|yW7HeWqGcbV}nP}>jR#e(5KfFhnQM`bWnUU=7
zPK&+To?dM2Imd6cYFmqVgM?c^D*`H_R*kL7-V9e2L{#{_KWp!~1Z{iH@AduT$LmFA
z?X}ll*JnNJxvl5%GP(*Se(hy+6f(Z&WwaJD=6D$mg^a7cjG98mMP5c#A>&LhqpXn8
z>}BjIfPbBr(O<|I>1C`fWDM~#dI}l4QfBxM6*AuRGVU&9Jm+OBC}b@4GP(*GfAlgs
z3mJEN8B+=w-}f>)3K?^~j3UCg#>;3el$h#e6cNT`FQcJQ;#4oAh%oBCjOs#(YA+*L
z$QbHnloc{|&ojf%6A(rG&|ld7&v`|P1jJG=L$V$ZBmB{1<Ozs-c(U7!rn872&~*N5
z{IGRr34ZACDn!>g5I;ms)rJ}=p&zFFGyE`$;zj&$5KsSO{BVisj!!@I-u|ih;W4rc
z_~Dm4hzj^L{BWmvm&XsYc={ClFe8s2rug{b0wfN7gSnt^p3f8v4wM~TcD^3gnz)n9
zztF%BXC9@PkE4C_9xudN)cUY*QVk`fZ0KEyToI9kN?$|iyi~&TI9pzm_c#k72d$O&
zIlFNYUw0uPTh@<O4*|!933Yi~(u0by$*FJiJkEYlZp?IM8;`SCqBa_bvuDXO5Fh?a
zhqG(=^j|xit@q{nzL=CQeVX4{(~xy87i%UXGMzAuuKNxL`X<cK1DT!v?`-`#TM!CI
z?Gtw$JW8GijA&IcWvx^fZ==?I0&k~Jg)F0~njX3V^K4VjlZQp6X~t|8uScFjiS;_A
z^C%|TXvZ{F{hIL{dDE>QKA~!T#*PJ8uJ;HV@4Jh9-<Uz-BBX5-I#e+;TqTKO-vk-3
zmaR<P&EG(u(NQWzu&y5c^50X1eH>K3aoE#mw2S03=v2Rc`A5?6Qc7yS>mSKIUP?(*
znU^aZqJQMp6q7<Ve(tnlaz-&J6sUj9fshVALRb8>dOrpM_N8X~#i+fjnCvbl7Zj6s
z6_a-tllK;r4;7P(ipid0a#b<8wwT;lO!gO(PBFQonA}rL>h#e+x-QDqPwJ5JlOk~a
zq|P!wDLU9s>d5nxBA5MSYcUxuCOeABDaB-WF}c7`GQ~Qdog)x;3mi#%P>QLab>CVZ
z>F`FsFv<R6(kUi)_{r&3s)uA0pWWI91uL@TnTo7Oj*(-?H&81^=Z$5q1-X;or~d<Q
z#OF}lc?DA`q|0t!r{uFM+(-B&_=@ZBJ5WB0dBp8o1ig{a!X;&_g*sNFUvwd@x<XSY
zxj7>Iv<ccKi%0I+A@5eS-5R~a60TqXNg!V8;{IeB&9aov_M|$IoTm<E(g^9vKRmcZ
zx+U28VnLoA$6f}BfA)OLR8|B6m9^HnodidH&_v`oe7HJwZcW6#sOe05#Abr0ns`0?
zhf@1hoh?@-l1uV-D$%4-J{mg}x>p_U-D1pC3h|>cQ}N?R4{|2{KxQfgp_*Y79#&r{
z^Oa$=CBybJNnp!?Mc=m*uI^MDdNXxPXH{taY2Xao;H`3l&~P*ynqNmIqW2k2&rXF^
z4y8wuQN$Jzdsb(p`Okl2{GrrUhwAPP0e)_tB|XUF#p8e3%|!JeBCfAa`5m(5h-JP4
z@KlT^O)yn`#Lukb`C9nKqZKlIEiKG7-e)SoXL@hnw}8Lp_jU1?DukDcIIH=-Ej-U^
zlor*QX?oO8hF51Jbz0lGbUny9f@&>OmReOJVxQY--6!BN;n&jo$eu7GoIM94-qmf{
zOSm_5pL!j)?=ij1j^*k+`o@U$@(Evx)IVjdYqR3nvI*9R??&veN;&XVYkS-_l{c=h
z?;F7Ml*mtU4uiFI*y3JnPoU+9ncHLdg@~rMRkULf{o9oW+48J=hw1y6Y^*1+oile6
zdx1vd>O;=_@1}41r}VvEvMlwurV39h*8^Wt5LN3%+&=O6p`)aSAw0`IG7LOen{nv!
zg5Dby+F91vrU+^WRTXJ@qE?#L<YnR8b@76`wJ%+#aL4-$aE5!g4T{w73Ck+0c_ju^
zJBVz4I=V~~gy(()$qLhWHx*#XWz75U1)dZHBl84_IME&SGGaY!TEW1}T(FPh?*Ae3
z*_Cz95!4d58n9y?Xj#inRu82J`jJV=4UTGyTjNk=Jz;9l>iZOHYQ>-y13#hEEUtNA
zd{wtZ6*zxE=<BPqKrS4pt2w5peOrp0AzmPPUt@>n&dg$X<-{hb@6M`mR!feI%FmR8
zNH7O}yLD}p%ns*1-jdm-J6i`oa1x?m%jiFetr?{LcIyExQn>GqyZBicfD&u7E@%k%
zO&qJ^y+lJAXM!{#_+R4U1xSc8LCUj(-U?;Lu`qemaqhK6)bTISM!6HBZ!%cx&96QC
zCNo~NmZAb-7Zg)k*vIAi7*-bQqyEXGQ~K6Q91tnYoe=6qatj9lD_h5hw=Z|dwN{mg
zvln#THXcas1$pC0RRBEaYPP94ku_d{uLh}qQ6OU#zxE`wn_e^ulTEsZgf3Z=T&pDi
z@zy1)9V`t)>Al={HtI^}RiwD~{a$<u@1zs;=C8CydnLE9)&Cwom1PZ^%WG8+)udIw
ztPN`vU`#E9iB(Z66c5myTPJiLw`!M0>~D8QTE3kKrR{^Y$F2f*5b?{J&^e(m@}H)M
z5&ND6d>?7K=STeD;Dla=Z~w^KQOmDUDD3{nn1kDJ&mXD(JNUqav>KlsR})42FT8aL
z!-?B}?&f<g1nSabCOFbuYz<`&ArbcoQp*_BnGWPPfk&O1zVNXkgDv8xxS|+nPL#DN
zmZk$xRngwm$ZxNCvxNUzo6z3&H`xL9rptN9BxyD7<f@sGTG;n!Ii=&tos`%AGMXMT
z89HKK&djaBh-HekTjN&BjUj$N_#R|jgDb?kxIMcn(tOWf`6Ri#FnL!3LlNsOgN}N)
zGI{-+y*THZ<c!bWdK`eH*(-Nyj7Zy7du(zudzfu-#2aMvJCbqB^v1eR4H(PLh_zR4
zY^24;>=Khs=Zh!lT&ct<K@X97;*iqLi?g&WI6670p#PD*CvHXfxX;=1CBDE{2Ra~h
z?07c&Z_29*_wIuHhs!c;xDQjD<Dap&ft4=00IcXJ3S|xpmcYu^tBSCq&H2yZrQG=v
zB5lSAVKCbx40=PE(?$UC=EfU|xHWmUWlS<LaWw$bmYo#vxSI*q*f%CwkvA$BnHC4%
zSfM-4=blQOd)OV3?6^S8dX@I0xv3n4C1=|ICfRQPMbHe^4_g^+k2b6JfpBVhpsjgR
zD7_HcC2ape`Qes7Xxk*$<gwiEuf!lC=dF1T(kQho(7Y@(X=8TW39z+hyPSj!JLWaO
zf@`}cnMX7DG>LZ0v>mp7shZu{?7aoXepiEHt+4}<5l!=nT5wWKA*T56Ys#HBuLr)b
z>eQ^dzuGOLN(-e4m3`I~*kko^a4Dy7@S1ZL<L<_-zzqBCXwk(w&rSTy#`S(o@+QIV
znA#+P?=keV4WT3ar)knZp~Wu!^16yxlFcg;V>Pq|hxmEs7W-_eL-4@IDd#lNS7XBA
zT_K5E->kB(&_#jiCO2+Ro(=f<#7drsv%kijoPWQn=9-tnCC9RrtL?_HJ@z4M<{mqS
z6PWK?XMTjUkL2G>Pa~QwT$Rw>TXdHwb6u6+-$n>m76nYvOK;=$v^_{_2FC)+W6jF}
zfuog&jkzZ$ZMQZ_m+Bxusqx6VZ*&sjvH1(hw_^5<*vELGzol*3<DAVaZ{QQKQ?HL$
zR|FY#++;EFGZ=N$#^-`T37-zN)=CvhEv-?MN_*@h3=X@WJyC0BzsA<@t%9K`xUHIB
zi&OGr^VUK=#We=hj&uKY`7Rl<o3*I1t^iFYCYzd=eXVoU{&T<iiPnh9>>~Y7mckw}
z-yZQ3yoh355@<1X&dhNuu$Go}BRNfQG_c8OGd7RplGgp^aCHyk!1QbN;!RB-tQ$Pr
z2b{hb=IDk=k%l_f(480qd0CdBKMxZFSR}AigLbR_arF{D;^ZR-d39&K5NKYVDx=T1
zvCHi+w#uzQFQpT;x6-4C<uxH+eFoljR(Y+9WLOc>KHKi}zbcEWCrpDSeE?lC7R+=!
zxT}BL07ZF&Lc%-ukLPBJ>G_pZE<_V)Cd77nBE*dLV&3&fP1MHw6JYv^EQahEL3cd~
z>@%6tuW{k;fWtifb3E|Gy~T@Ie~)EvtH8;EFop1lv#<_&hx5ZWhU->PXd`77E8zYL
zTmkz5xjnWP&J}jjupo~yv0^SebWtv<YZV56;4h*9r!qH0xrD}5boSG_Q0fK{kR4Qt
zgOJLmRfu`9o{F^8E(oQ#eXyT<e8+Otb3x;JA)OLXFUL5nhY(t;lDooz=RIuG;u-X(
z?}hq<pPh~6+qKK}XI-}4+`gC|`qom*?qX476j!l5(lV<llscUA1UAb3y68C8wh}bw
znGkE}tZ^$J7<AZS60Dqobrq$YRar}r1&TtO+^d4Tznfq7Mg;9q*!ru4!+CoXYMwIy
z@US`wQrc;`S{uy!v>+H>Eypvoa}bR<^^`D+q2oB8IU=7q6;S~;Z1`K&#iWnxwfg?W
z=SKK1dqR+5ffKMr3#E;;4(q=TKH+XC@e94r7IOc)@R<W>5BMzev<hYiH(ZFKCVNXY
zor+rJ&bp5(4G5}lbZb~~?m&1QCZwUd|Bb6m_uV_FM5x;xzefopiFAXkwPBx}uNdJt
zu~@Opqqf1$m-!BVI5m9}#%No)ubAG#O=bsAx<DGEa+Mpf5~5gI7uQf)4Zm@v*YH8C
zZ(nOQxn=G#I_O&KO!^Lp9{_k<EkK~Fvi*dCv>)%{ov_~$o<xT<t{y;NHufACKUj{-
z`a<a+(#hud$_nBK_k_ALJi!<@uS>3xJSLr1ZIV%pe#4Vd%u-_p4W~YaH@QS;Nun6T
zvVafg8)R5}kh1N&>686K^(<o7-mbnr0`X^h*ONPPK>vhRO@KL3itMMAUVqS+a^-Yo
zMZ~V4W{$3>^qR_YPa3S_a~STc(5^mzZD>fS2!jybs`Y6K=n3bpE2MHTRE|3X`bt|A
zBys@V`6u&<K;>CyI$zkSRSdw5aT}h4I!_g?`=)rmt%fX$uxerG;d&<wO~J_vbMAz*
zx1I?3>ruqRyF9tk<k>nhV6T&xLJKG7ATOF7@#sQ#pJ>`I<>?zE4I2UiwCuZR-mFO|
zeLc7_yu^Uj2_)%H+{)Q;McIW^bZfRMPxEcqO_9?P%fpRWvjSQhj`e72dDVkNepWqq
zZlA#*Jvk4Zb7uf{zRaj7j`pQTq10P6VFXb-r-?W=awqrykXc|7{=>ZZcO2G7b4AL}
znvrL(xYR7aL7~j|jTr5!8P-(^_ZY_Cb&D9;QGlK080HT&-2s}$LU$1K@wA8s`cbe2
ztVympf8N?xF|&KP<n>l0OMJW3$_my7gt|OpnY|*68d-r~vay^>X&Utpjp^e<*H$z{
znjaUPnOsy5#q?jQ@$NB<<Mhy6m{!9M>@8s*2@6e>HyEI!85|NA0lK-$i6f>J$&uoJ
zb|+7cTk4tNH{6TOT#I=zB(V4%Q+L!E^LZa|O$8!{y+)nqrVAvs#$MIA2fJ=*V}^!9
ze@MS^>=Yrp6Kmr~l`YY6F2%-HX);3fa8M`Dk+t=8Ixr4@={*RBzE(&m2A`cx2xt%4
z@LOZ@e1yYuga6#*|3>{^?||uRo#H=F^M7afzn%W?Z11<LOTYYE+11TolqOwwnP)oC
z*L8O>d2ccKP(G=H;1JN~g71=}o4Q12#tM9f2|jvGl}Bv6M9@~GzI8_2+q6Zl0p9e_
zb93A7l{4)z{h|6_82ZefGdi<>b~~iha;ns>LeSiD+8={8^6_`SkyV7|ecPb8JfYNz
z!b@nj(+d>K{_ze|_fj&nAG2Obj?F4_5gy*uS(5zNCx%>F$rE-G-Ki@32ymR&hvv5G
zQ08sUcL|{u(4m-d!6bt6Zl3U<(=`X@X<rxlrwsj55&u0*kw<3^-!alBD(|L*&YLfA
z%Gt?$L{sH@6ZRgB>Af$w^FH7HCPb`U(F|xs6y?LFS#fsh^{N@i0SNn%ALC{+PYu9<
z>wqhzN+g7o(9`eWz<QxwFWIa9N))M{89eaIfU3U*oxwhHKpT2kZ%cZs7Bx!;WG(t+
zmY}Gl6jtp4q)2t4d2b?bb3>a8c+);VsB`LE(N>18u3VcFgU0#9)z4n<o&f&MyKb&1
zOK$eXa>ZT@IMy{D^+n@J4@LmSQUNexT@{hs0~Dd$-_wZ#;6T4?Q+Qq!n5p~@iCZ5y
zL#BTW3G%SXGqpa%mrJUcD#UWVd=+rcy-8Bi6`&MTgY)k7-0o*2a(3ZG<~?98;y}8x
zJW!(y*OesiESWACc;)0vR2iQc_PJ9OZ+5G-ApqJA!E_Oz>njk%_;Ic<1aK++YX_|t
zMFDrmPb<sb97ru4)P417VBa3`lSAYU6W3DPxL5CiWgTRGyV!z_l8ll_?_i{YwCBEw
zzWyJ205~`XB%?<<cuSQZ<@TNp9-;CPC_UooTtqlzE)_`vaXgKo8o(MrDc5<q1biX9
zGNn4a=c{X{cp#pAxVDR|c-CXPqL#aVEgljQ5swx!jP^QM8+eN+nW-`m{b}y0(6RaR
zJR<*#Hj)H<P}FZL<&@@~>~TuT`f&4h;DnDjsWhT&l0h=O8ZRbE^6{uWJDB?m`wOvg
z9XS6OLt2v7G5**zk8G?YGi+^(^}b!sq&h#mQSeX!pSm^7d0FY7j}pIX)$?~k>YO7f
z2oYPj6EY{rEfViiNSnD7(iU{4uiJ}f7;aRcbkntvu>9o_6B}Y_%+mJeZOMDxk?f_2
zwKZmKG17&stWiUz>bhulMi5WsHNmLm7^GanA92V8>5leU4e1>wjpMdWX3~7YMP?F?
zt-TBjPk}R#VLI+l$TRAua_7Hq@R@!IpY5BBXeM*H!PH!=iCSU&TOyHhuOZ9VP$dR_
zQUlb7GK)<!-X{_pxU0wz5dMI{Av4h7Wo?F}KBAzHEYPoU2utYKI}H8$z0-NZpdw?2
zlbu`Pj5t!~x?xWvR*gs8jH6Z$js)?C^NCw;W)ae~5Bg0qGIPbf+Bw{O?#swxK!Pwn
zCHP<MEV=~UpC{0a+hp>;+MSn^AaOeo;8d?E^6{V@4K@AOof;89CXUcu%o7wbp6*1F
zh@<}9sNJ&Mb*7rSzuoCV-5pTmcE3oo*Zcy;>b~L#2zLP<2xqrjV{4s*l7J_V>=3D!
z*Fx=b*vNU~cIRwraF0et8$kfo0VzAJcpW*Mt@x4!wRHeLT~uX26xIz8sDLwtb@fmA
zJ^V_CA$i^^(qyew7XS0Q432^^$#V-7?B#Is|4v6x?wpF`9sNTM)VvXKzX6?KP}XJ=
z5cW0JRbxEmNDpG@f2kaKR_K-u*+ZZH?<hx(qsIS<awPpDn)I340eXyZ_FBZ#TFXgR
z;y?3x3}gh85K-@!i5G`r$^Jdd9)rF3*2GaU-A{SoX{j&#c+ZDS^&|xkX>`6lck)>s
zFN2-Iyu;~4btrwxCWE%zV?Dm6uoxd-@b4F6kn@L`S_~u8%X1VbFa>g0lNqbIC{@_F
zhjP06c(BmU7yd`>w3&8pDX=Z~FecN;{hCM1V_W8nOS85QxSGfI8^*V#n0O%n`w4vf
z9Z8e_4L;t$JpWUC9B)Co{on3AoRwxz<NL_l(`ygcp5E_te?$0!JuPoE1B?8@FLJpl
za*x^5azbcIZSyKBcjlW?+nqBg<qo5r!fYnbDXyAu(?3(4407H@c5GB92CE8Xv7thl
zGB%M>AXJ;(WLDNwx49LN^&EJ{`Of~eLR<fkw_Go$)ysJnj#S*x=O!C&==9S|xS?He
zLn{q8bUbb6xuK^wNqmYd3Pz~NW8~SR|6j94utn}RBP&IMX+)ba$VjE3I$vTQBHiO^
zk*6k3f;OAYVYJHg2P1lRZQ{sCb4~Ic$!FV|-zIJY<!vKz%st~BNi9alnY=PD`1p?w
z)IpA6gIU!2&3XPeJC5tOp7ylH$liVJX`jxtX+!<hypBZNGOLN)L&yh>l!s?fNImGz
z0uudwoO=skD;|J@JSEYH!+gFNNQvf^L`yC-2cMu+0ObA^P+St_$!WXRY$Bhy;IzpO
z{`>?9;UqGjgQL>6DvFgkTOG*+m3jF3;hczmpn1qa&*97WAWl*^dlk?b2MQj)#HHAQ
zp$ValrsO|fQbWzOROKwWhF)Y3j*geH=k^|1K(*4+y&(zps9D8eZV`XlgHNE4@i9}*
z3(-2Q6aj-7TY;Lg#L?;k6d^}8t*atbwI#H=pNF9pXDPf{6uM_dHFh!$h90oqi4x`_
zTe<GQ^OTTHDL}&d{oQJ-xi`7hHfAlE{mCzj7>!C9StOvLk?SZ(4-L)iz93SR%vNPK
zZZ%_f`XnQ^Ru;wx_00l&^GjL)$bDSide^gk#-v;I6?svOWSUNGldqwQtdkJ%0W`NU
z)DLpX;LXCcPnm^jMnD_4romYL&a1@V#?D;RF@_MgYCIl6?o033sSdC>IIs5v+hM~)
zd4Z#HQx2qAOOC&Pn>;f+Vwa{ygQ}BfC5#!W;w|{*OU#{YN8aBPw`*|ZmwYjt-)L8!
zB@|lNX_4YqL$o-Ulf)A({#oK?Ep?#<36mn)9Ou<`IB$luUtkfOpP#2Aaw;z%!#d>r
zzRtbYu(|og^_J3TV}>AabKeE0m_<NW2>XpmUjzmu(lWa;l%5K|7q<;eHHD?h4nvIZ
zX}4-uh9wxjBmZqRFwtPZSA8nVH&q={%cgewy1I7z#;RD~Bm+;Ppwd4v>oB!;3TO-g
zXS=nl-P)JCLLdueSH*bQ0%!RSi(<_yVt6a$sO0uJLe0%*+GG2jC-9^yw(nWS5UbzH
z)wtx)aMxU-Q;kxwGwpFrPWP090V5vzDw?!5k_yC||B(pMiR4cn9gM8Uz0=GAU1_)8
zZ@0FIA8Ih1cNc@g*ZoU4o9mFXxx<}N9}JgOOlC4CR=97HF&jof)q(rFD(C8l_u{Bl
z#O~5d5tRsve?>X$;ajy@Qy!B^lA<L+lRm7@K&FadVuAKMuMY|l013o+UhR}HzSh%e
zK4oI3=&d4M&4}Y7Yg)VYVu2rtTOT*R5`I#%W#ku$xzWIiXkb~aennyy{>EDY^lcH8
zyv;8#doMWmmt+2!>AC4e=bW7fv9eTW2c?7?0RtZT-a2|0dIa^(rrTH3t8PwPr+&}y
zvT)aJO;YlN(lcNkG#cl(<0_St=?RB^JgLd;AYbwmDQ+Iph?`%-oWZOhqMi28#BHzv
z&cVjxU?}q~+M(?!<jHyZ?mxc2U$YapcEsx)J`K&gSao2R`dNmK(PZX)s1gI4G5b0~
z;Y<TQr&T7J;;6bg3xLf?Z2-3n4Jem^xFB!}<TXsT#`Jqy+|WD(B>3Xnp>DPo4TYx1
ziWJNzsh9ljI~m!z3{<o^qILs>O!5dxc~3MsaSQ#zj7oPVeKnMm5%Y3i6Z4kImEJ)%
z#n`tPS7lS2-5uJ@)D`E?6pbdg(COWNP?@(DSJ2bYBfUs^aT~rmboMIu9T?Nb-R|{x
z+O&{}7R1PdoZLbFK?$mLenq|BaqiAFS}c~=>SZ;xj^Er}x{h~KBe`yah*+&|0{;~(
z>(i%J0^Md!A2s2aZls`doavi(MU#L<TI#vO02B{OWYpS0vD^caSkxe~=s=GZw=b)$
zaS1MGL|J0h%!b;{(tCUE1qi%?+<mfHhdqxng`UCI2ckGu5#1Vtt){%m(I1eC0~P+<
zN%$Vh%ri9uB0nbKuSbKHV-mclVSdMplB|G|%=5pEWEj}@IwGC4d6ego8CsHX^Q5t%
z^nNO2@|@#$`7;+vuc1yePxmwz=E+3;z_5uR&9KmM02${PEPcmkpuedNqv$@T{A_>8
zeNmE7ta}!tZCve+Ku)2Z0#WNvU}m4B0~M?xs00I;t9cZ*Iv%W@JUK6cHG{hx#-EX~
zmOgWTo{<E2EH|TeUK-{p%i+&~f?Liq;-lQ-1EiJ*xzK}c)y<xGI+VVQXIGxRH2k{v
z{Nei`a&J>%=w?MPhog7@!a55M{=l#Mve~Sj;M08=8G&=zsF1(v5AYbpF-T<uVZh;S
z{Atmj!+2EoZzl3E#D9224<Ah6&wKi_U4ORlM+H0eZj=7BPU6oCdiSFKJgq+~{Zc3M
zPNg@gwFmvom;LHz`7a}?;0ON8JEJ^g{D<H8B@Uw<Rr4$V`PcsMBtO61|9#WX|Bzqz
zbE>I@nidq#L&fvhUkD0w`<A-|vy!e|7A>)q7bS!mNoOi4#2cUrB~tsM1mb}zO6{w>
z;j+}WgH!ujZk!5<x$d2jL@lfMQ#7!aIIatSx`+)LS~y=u52<$ofu7L9^~2VZ|2P@F
ze;;hpauweD_u#O#k0OLE18SS5!@@NT<oD&1meU_+i#pTRJYoDjSj(J;AD4{DquEOA
zRDVg|uv68j6s<e&5_}nbd6MS3mY7gBq0Hr!<5d04BFSgmTi6Csd;YzY2roi@F13s{
zk^1D`?7h^PVj^Nq=Lqy)UCJwazCw|N%^3KM0hq5M-d8jD${fODc{UM(Or_INE;hI|
z<QXGl=YnsEfL*3{t!?(Nb>>5&cf3TD!E#=3pcqBdXo#U`c53Z3{MOE<OygD-iDMa^
z|J2&s;@J~N#>8Agabf0(0r<%WO|CYi!Y~SZ_9k3%KPHqumgm^*A9*ofhiPQgT;@EB
z%-cSE)V8B_=uhQ9R;N}<;2uifqmg6>f0W~lRdm*4Kb;gc#J%FP&Qf_B((_v-@mV|6
zxeiej)LrJhzV?ItEG@Eca>YiTZW;j*F+Zc7j!owEXd4!cftJT>TNe;Tx4e4<hip$E
zy*{}!04IuzQ|GudnLsJUTOQQpg;H-)lRryfKq$c4&7y@ACje(i@lg683H)ii74h=Q
ziXk=DTK<-?6QX8{GOtn+vM`)IuNJ$==ZQFaL|JktF&dFHw>p1$o36=|Z#hpWmVT>=
z&t5om!S56@YA*-XBc1d^NVO^wxJ(8=Z#p}=P&0EPmL;kS^pl|*;5WK%t(ZprGFLJU
zoJRv9psUn-6A#K;KgFlwf`P_QSVP6vG}XH@<hOq+P}E{gG?PDH1Tl>Gf`Rg5tb>*U
z0u)I#1#Z|T(}Ml(5j=`6p`QcfMaA*o%En0U$WOq-Zw;J)Ut&hj1Pt-VZ$Faw#PE-~
zEkFEGCHP2m)2EG}`u|ts7s*2ZHREtwZxgcfwlZh<9Bpi7v2iuTQ~lC-cKp%dE@+Lz
z^ZF9Pw_wW4>N2=@&D2|Kbb{8flSeyi-u%Fvpf!Nt=*Awvg|z@?O8O5#mUWL9;sfN4
zfW!r&L9Z3H_f7tI>z3MgaVR5m;;tn^ie<?!bS)7wEK7dQM@q>NT}y-#p<aek&X*f5
zLY-9hn3iZdy=s^afHt|CIO7WXm8o<Gst1l^7CS*GJIE)_w>c0Et}*E6!ttCRI^oTc
z{oj1=yfYDD+AmE_5rK)o`b$r<ssNn(caBuUhT>=cF?B($H-X=9;O@>aAEn9lzH4wU
zSh!bQkR?Q_f`$?`-;WE7>S^d1JP2rTN2u9X4uJtcF#q?kPP7&73;eo=t9u-8TX-nW
z?f-|=0xtqpV-J_qy3{{w2eM@J_mx9sc-hLKG%`v^(ZJeh^9RXymMt)Hg^o@FNaH1K
zW-w8)vUPR<JG{`s8;51Tw%_VNO`AA2<qo2XSUek9g`&8%vo*atF`S)s4#2gxCK@<z
zRn5vt!Lnu3xepO6OSJ#rt#yEZCOp?Szd!S|{P?=|-ki9qYwr_@8@l#B7)sA!$X$Dn
zhjTND(P;fiFybM3cxmpNbxLUAg@e2Ho|0Tjf;ee?L#QD6R@ZHV9!$R8bz8;g<V#(*
zl^>scuIr4OlWV$e+kZ+DQO>0Ow8{Kk2(0%F&i&PcYtj|w!~e>y@aFeI0$ui%=kCwr
zs|(9{9+dk<;dv0xf!ue!XWt8Q6>+ATXI0KJo+S?k`&T;WL^zB{V4$tXuUzCkN_L92
zYF4E+E123BoOuot(l?Yrib@%}$0V|o@K4phCtBYZ*q3^HkBS|^FDBXRQcJNvsn8B7
zYkp_ub{xJ{U8HeQ8?vh%6rJ@z>u$`{B+7bY<<K%71|>FHaLjChQ}*Sav37gS^+it6
zHMX+c<E85(hmV-&7<byp&Ccl4jxMu@rksY<o?$nh60=^2S|7-4)7wAU5kF|$8dx7#
z+Zy`83WAuYdMm7@cEB$_>h`@q``OP%-SCnJ){AsICl@hzuKoi>_<TCr`{5wW8{ab0
zd0k=ISdVk`vGa{mEwpc!FSbW3T))vc*-o7?D{&~NX=-`UqmLN9+5a~Z>eN#pIxl{_
z3npV+t-MMH1BK2XN6)k8{h>_V^}D*F(A6Vu|JZc(wQygXhFoTtiv`j855m?p?0CPY
zC}6-5pW54R(rUPVYHiS%EBWwhU#Jaub{v_J^?_CaUM6>F5i<ZwLHs~AaUMpSPf6~m
zUy7$qoHvdoI*F8-an!;=Di)I-OkIIwHMP8YnSu^_^Uvs8OZ7{{Gs82toORkmA&K+X
z>qSy2NR@Q8pjac!RiauWC9q)V5e^v?^&Qhwds`D<oSs>qY;0W39WkrDtotw>L3L26
zBaV~oDS0t{z&)gC+6YS@13Q-Go-@mPK!2!j=nYG<XPRKbH!S2an0!c>+?cxl7Xb?@
zK)97o?Zkr>Gov#1L+7SSLb&C}XZDx9MEgP_PmJTmgK`zv>=fnNk4x;^xPE2IoIYGN
zHy|sN|3gvBB^ShvD($gWF_MoP+Jf8A>N@}WQldS)RCOU$=cm;4V5iIbvWZMOV5D_?
z;Jv%dd)Ml{QxX01-bKB4QSY6K6yJ^U-gS8IRHXQ>%6m7(d#57Bcki8HMlsEMry}`x
zRnA7e>r3gK$+RDjG7sd;$mcMeD(8=0F}?GPP4S9#<a5lZzvH!Z7nw#V-<MJ`{X_Ze
zSBMwlLh7MHs;7`zTS)a6QacJM>9D-|stT!^LaL#VYAvJ|_$ls>i$mdOHb35MzkIrx
znY)$2eKNnK_inNGZWWmt3uuI%`z8F_<J5JpK4t7j*{SDA7X1J}`@t?Q9j^61XzaNN
z$DOB&JuU8MdCm1a<Rfx9H)3BKL@=wX*LXw!g9hn*@q9!u_E#g;W{K&MY<xY5c)*sF
z{_mXir{p2Oq|%aPwsT1~T9ev$WN3UZgmi^9{v&%38+Q}ef(cwcXVb{C=n@c_{*3~$
zUU|TNBrH;Uc0@XCADSJ%Rv3M3+}eN*biP$^s1*&Yj|P^`9BEJFC|p?)<<#-8|L3F4
z&(3<4Z&Q0OPqwYh+{t(XVQg;0%`eUT&&F4BUtJJuekbu-ynaKpci*5$U`_LDiO*R(
z7+pHGXL{lrDd$_MJ%`@-nb@~0x(L9uzkk8wIuhis@YvJj@ix!$E+a%!UDV2okzbiv
zpmr2ID)$reN94Fc@y2Iz{ro*DM+9Yq|1;|s37`nfv@~jEx=7}p;XZ!MTGw?(St1w>
zTo}|jc`mWfL60?Ew*|_QL{qs9sa<Pzw0@6tN%P)nf{x2pjEq_6m{QAYE^`0+{w|L$
z&t6)msSMk*8^U(S*m{gn_r#l@iiIYvi<Qr=i)2R-L#oXJl@8GN6UBE(cO^uMG22e=
zXlv;hi(kdShFJZ&<ey9%9v-z`7uk*#h%u)z@`4ey&WQ<6JYTPl*&`6a@kT}~=xQjP
zTd2Vu6irPE2B=2oAg6~J8-|RNs-i8EFd1m(<JRs5(+2{|m=h$w-u8tJQTuGBdTnd>
z*hA>0HL0Ox(%9t7987i21GBv5*PpU`f38pCC+NEP(5=jG49X?71#RXBjjJDnHAKLg
zgSi75TB5;OC&p}uEroSHX6>+*Yd0s~3U@V^B~FT^!ofh}Zu3FD@XY7B_I8ERTISZ!
zLc$e3OCRfud?DOL_?5)h!uHo1V)jjbKS$EfuoZ3yw}i(g{~XKS#Nozl=(L2q)seZ2
z=-u=)Gl7n4x*%l=b2d-oh}q$)SWB4MX`_fgJ25Pu+-c%f3ijpdh~Q?~0uRo@=RGQ7
zEoQy9NJBnfx{8m_ZG459!2Geb%p8T$=l&jRem*qsK}vEBaM;RJ@6feQ>ce2NU*nS`
zC<4EmtMQ41lKmZ(_B7VJC78+u5@&SH;kez>HHRsfXrIqYwQB|<-L+<=+8SEg#^S^@
zJEzX6@CSVBS8+$-eVznCd@^2*-3C-(KAXOgl9BEj4=UQKa^ErVldXJ}PNRG7r<c*^
zoM9`~W9P>(f^dbNcfowE8n4-O*1G5V0mM*dI9pKA7s^OC6SXg_ik@&`O<+T|WB)Pl
zU_?dc`PPba>!Be(6r>szm`iSI>!8J>_;tq65H0SKP^3nUZcR*WT%Q|}hu3I|Aejgd
znl~pRT`gtF?OnGpIX7_&2`h3YXVuDz;bj8j2@Ne1#wK6jQbrw2U#0VpP7fk7CnL=z
z!_<*{LYo0nrhxz04-xxpEY#OV%P)+^>z`^vhMqc=rMAx=7Y#g>A4^68G595H1(?qX
z%;(pr7+I4ypA)Lw3k65KzcA>2$YT3ToxQqlpEuI+u&7+IWSmWs|Bj@%{D+($wpNEt
zIJBs>%jYht*>#e6EYVE$4DEHwt(Do1a$>`x_>4Z+Z$L7hy==%Jqlfh%wFIb2k{*(L
zuAjS%GY>+&3S_4C4NE#*w+t#vj0|j`KM`xG<bah<4c*oah)TpkJJr$e!`CC5Q1U(c
z9BH{Gm^fWK;B_a#D>P+FzN946O1g2khtS>g$uscvn51%OVp<ul;KwuH<*TnyBDYHM
z;E3*b0c31`@OAbL?A|$L&Q4TMoOB0kOHwV75}ALxw#r%>UZiTh_ANyA3+Xw~5z0JC
zb_Dm_#Oh7-#qD-9cFC&7t+_*r@U$WjYjzU9M}$&eme>)qE4Mu+_9}P0=`Rtd;sh55
z*@wF;Pb~lzMk2j#Fts_5SS$ccZY;vV^<UY&zZ?Dygl|o#%1PB|_!9$%ggS=$HaIG3
zp-pH<%pyEBijQ;y+u$mp_9|d>bnfR1pbLzT^}qzGERMT?p9cEtj4)S5r7(vP#O>3y
z&FmXAV31Q6d4Q+JyDf1k<2{M-M(i;Ugyr{wpe$^pdcq2FrO(4MV+@ut8!0h~i#x$^
zYD*yTq#5vw#Q|r&EJRXQ7%`y-TWLr8svy5E>@V#{S*Qe^bFT4*KAF$Wv6lOV;Qu_9
z{$t?&U9;>h&WGrB(B(>Fc#tae<E<~|eiIA6-T4q54|a*c#EG8TIA?S|ujy3>mz@j-
zh4E8{K6jrsdod4p+nvWLuR@7eFxDFs4_t28N>IMXUq$TkxI*qp4)xm=eYeJAk)zfN
z>gVDiW?HudoldW5Q8O>lw4H?Z+vGe&axq5M;M7e{J4FCTpz-L&SIj&alXI+h$8L;r
zR5-t&bj!uTnVU=$<xS2Oy31UuCVw+s;s&WC-@gItk0x|tP_tVjl?WVLK_!Ar4C;h&
zaA}rwiN@g<B6d^Dr<5!fPy-RWSm&Jc3lwLIB|y{8{yq<3tqbXQ>4dlSZz4B}7!<mQ
zS9zvVvb&(NPg1H%((ylYI;i;?!~Y?vmASG#W)IadSI%!VH{P{^ASJzh6KChQTm1%2
z#CrP&w+H$Ns;8MNL24z*Y^7&D0{(u^v37#tjQsEqRETUO*}p_9p-u#?olunfqk&Zt
z%vZ(haevD`?S?$!f_3j^?3q?2cVc!?)n?yFkU$w+{1{hi^dX$u7YO}$Y46`FhOLcS
z5Q47{+hHIWPaF--centj5{Xe^KGamL(j3wOGl!4!KwXI=;~uuWk7sU*v%u)3Uw7hs
z?cKV#JQ$j%_`;|anJOTLJ>N>#Ilryf&&rPJSFy02EOT^6j|7DJ>&{ftk(SG=XKvu5
z)SSA&4aX0Vhx0wa@%ngs?A`j_8RM0&oB6gDrAEsCYOJ^T+cJp`w9|pb*z2q7ja!}X
z(L24Yv!m#-6UR(npsVm~=-06i0db6VgkPK&v3(A=T-!AB4NZ$)JGGn_`mzXm$>Rie
zs@FdxgwfqGw4iY!HCyAJN9)d&9}O=n(qnj1&Yfshs$|hilEg>MMmdRAK`lR(IyI0u
z9iZO~tr2wIn9S{>rHk%<{9ydWRNQ#P6;HJuTwb>5?mGfyx4Zg_=AlhAQ?MkyUuN~}
zrPEV42M<d=ZjY~eOdlIBD39p_Qsb8{8xTL`f7!o5iK7br3)4Tfo{b)6PU+|RIp1ji
z@1aM=2dAg@9F{ngzlTHc(Gw6<7t2zn<N*Hj!U6}H7vo{Qhiq46FJXHcQKLw?ACMEa
z=T@T*tdvC4xf6l9xhq%c*;ZT28hc{)SvWfA?CCex0BftIzY27ZKqTtvuN1%|O2lv-
zAZ+tWCqAGOK#lEsLrqB)bz%Dg&I+9lkYM=(!aZ;LaHGE=R0lUOV%!dt<?X&UZla=c
zqem6BX4Sa_W3FOwKdsLBKCcnG8+*hg$VTBgh%-_Wo#WMC|5L-?(OksXPJE6%!mtSP
zcb&jF#Baa<`(ep%5&j0?TSdhA#LOl`jIOB!omv}pgN<qCs;#1>m>pqk&uW~{nE_tH
z_%QMVDQTGw*stt1Bm7$;RW=yY#5?&h!sYx`kOSkLgfgNN!}c64?Fh593n^}vc7*IK
znKG?xyT7ub4Q)kz-Y3?#t#o}yI9Hd}<SlQ~Uta2AanG+~S)I&f!|5wFra~yepdHpN
z80%{ga);!jx`1Fg3PPD9p#%?@G5D>p^;-UB&Ic2;%K1nw2cZ6e@ml7ZqW>~p%hRZg
zJ~duTd-HqAKe{UnG%Rz!`b9y*GItce?lAvhg#SB1nP1`$^vVTLEE2d@4~!t1{?kw<
zz`v*uM??hCngHU<JXv&!PfwtderXhTp7!GsXv!4(=SLO&BP)DcuWqIm<A+YzsOQoE
zqSy1mKM5de0yKPG6?y?gJ+I1a-f3hYe1dN|1j5qD`F?wXk((_Nl$ne>y^MPc8C_n+
zU4@M6yo~Nb#w8}>mQGdRS^iep6U+f@OqfmdP(?H<FVKT1wuz@PAb#j5DuLYb;)j0p
zMfK{I)&t{*zUSpPcwK#4PfRT+U}GVGX!sI$G5J3IZFzA-J)%@TAU*m{b))Mk(9`E5
zAJTFHsb}*a1{PsN{fnXWPjQ*iZWE)o;?U5-1{7#FC87$loSw@IIM&xvZ?|Go9wp~j
znh#u2#sW{7WB<u6G88#DeGX+q3!5U@(S}NiST9AN+k{*zHtd7czM+Znu-qWl=eB1)
zOiZ-a@JVu=dlcUk`$rRNJX#{aUBFc_3t>2ChR4D}zZgn0M-*9qe5vh$aCUMqwQ|rg
zuOs<_@f+5gTV^EXj|$r?IfFmBe-z~H9`$X&d2XjKLJEdbzdl|>dI)kin(c(Kxv{Ei
z9Bh924!$-KcIT=9L}$=ZIN#`LY-;@SU1L5Yw`Dw)e8W5)D#3zXu{4fx1&T`NJO6;j
z0SK*&vE8f)rN>eVWPunCNa-)P&IPfbhg%RFSH>+8Fi+(iX_4|8+V<oR)2%jfN388K
zk>>B2LFC37dP&l%+!xgQi#tV#d{*7FCs*MpEf}qTO11>^p4NK^LHIQ|%}(ci1P?IC
z$)$$j7;wH1!2dItpedID!bUF=w=S#2O7VG2$FnH4h0i<GMG*Gd>;({26>BlhjF(?G
zjedwIMrw66<w!-HG)>Bct|LEn55v(SHc9P0BQ#%*Pr@xAQZ63IK*(C5nPwjij&d$S
zaxr_`opnaIjlUA!#j_aXXU9T%L0I;b(no!*=8yr-YKr#<cO>y*L`|BkEM3OI%pOxc
zwy<&m_FY<4lkJ!eO2|fhtJ<iQi(7BSEZiyG0@;_V@wVbc$FmiiFD^^I)o$%*x87E7
zbji`aVPjPGtoqvKYu_;v!Yk;1GF5$?(KugJ1uAC7L9g1$4O4`hu@o9-C{BDd0nMCm
zSPJ$t3)m1LgQH-KdlH&a1gV#)zaJfNUbJ)n0!$xD4L@%8{t2OliQ~%Tn<>!RwU3ED
z17^tDk?IeP3x?)@nTNRb4m%Fhi@k9H%F$%WNbg#H&GE*&v$OHz2EjAL0=<})AM<bg
zBgy`yw;yQ524>hQ1jtFQfDUcX);6K2tqNss<*2|Yx?1c)>g}4uZ6eEo`OC0TpN5D;
zMxh;YQSI-rECsQr491!#Re^bU(lU(H6x2A+9*3&ICsCxstKp$aAgL{zk)kGCerYwl
zF*l$RXNWwfV=HQ~33i`nn`r7(w`x4tnO9PoKFinTeV**a6P7v$($uP85v2tj7jEG$
zV<^3w2~(TL@hg8>=E`ZhogQf2E$%%YOZE0x1H3VIj_GDN&rDjo>R(XY<hoG0k#BTW
z<|2MolL5Qo&YQIwDudSW^j)12@n)=PLYbY$Nd#6~C48^6IN*#KC4`#BYi3&GsA}zo
zj~37F!jgN_edFiD)+8Xy<L}K<06}!YTZ}s<8{9IWo%G|h?dp$z4rz<sK{;cp-EXuG
zDc(-b0*OMPHO|*x-?cwpei^pEmzYK9(nuP6+~+|NQErEuLT{d`T|#j}#IyVRV%CLK
zx%)n4!ZOcNiR7%AHOyEWYh2y9-rV%Qp63NIGHR@<<_%l{prEUfXddv{!m1RMR!N#O
zv&|C8ei(>A-f^s1vUUj^!l1G`no0Z;e~N<;IDOU|Z%lo(D!vF@Rm7XQvv38ifd6EO
z-{E`@mcIn+-LTGm(hRw^O#VUgps}afYrM*b5AdHlQ0Z*{JRJajOsB3UzBXS}({1FZ
z)>?d@;8Q~09m7^%;XI6SYZmkc{?+A<z%J(?x{%*Ytu(G1PaG5P!53?O3;4K}cicw_
zT5Y((-IaWVHo3?_U~FqC=7OnjusCj+>AYF5b`Y04nGGwbzk*41n<#-kO2A)&k3Y@d
zP^=jk`8IX6jOa^l17NykNesql-jICO{SWFvfVu=@Bo;|q;XAx_4<Xw*eXF>rQqc&~
zRAYh=N}tJc%X)Ta<LdAQzF@f~YM&Cdb_}qule^y@i1Vis&A?T>xh$DO`$E|AuT>@*
z+wDWL;}IH5{h|YA4aj*tCn*Q1EVeKC+phhotBjFC%|%8+iznA-1i!cMrISzuJx6mb
zZtY@`2a<y7!ejjgBNR0PQ?PvV4r@ehXwu5;IARZttul^ccAvsRk1*0v=xhoZ5oyd?
znpq#S8<W@)>`pefTUZBtrOmp&60kkpJ&!g#8wz+W5X>O@hJ*qYTK;<pTdS$WzZ}lS
z#t1@vVM8ICy|YFafheN;B+x3#xA9=aWaNIB=f8b<C3F!AAkWxiEQAu8W$W48XB1D~
z*mu-ubj?Q_`;P3`UNc#Zuj~>h!XZ!8$d>af6DOeG0q`;V$lgR3);J+bnA>(%wYgN6
z^3^#kaeh9NN6Ej^^NTd0bf4()TL#sy4NElCyd3{Z{kY{Gk@vUr;8(r<5=Cl+)gVS5
z;Njg#j`DWw^e?Z>&0A2Iu>_>tvoEWCQt}q6n`q3ObMw(uqA-^{<W}SXsc*a?E1G9k
zhUP6`y{(y)7-a3l3hCNtpto^<<NDV0{$wX)7ymI<Yncf}*!wvVW~aup6S?O#z6$2^
z6l+6k&$gjb$cfNw-kCTFlTC<ea)+ee4zzaTN3XdzF=}y*T6w>9?e^C6JE0$o;HLPh
z<j+9rH8P3v=zH!%y)1l&{IUBiuQmUGWKAs%^7lu1n6yd*wa{~bLs&fCfhRQJn@;u$
zR8s)jg{-JG$eLNn5Zz;#_W|@FU{D8D$QZd$h#oYQ+B8}!NL*sX7-O^wxqGk-ii+MB
z=WNzA^=}a+nT-Sb_nCj!zn8{-vVVZQ-$ki9;0w%poNCsC<@WdzW~$EpaHAC5ItuID
zlh~sLJpp=8<ImpM+k;HQ=gT$5dHB8al{3%b-d?<5iI~~5X9xJRlj{2B_jAPRA85po
zWX^+apg;mr6k|}}T>3#dtqb?f@8Jg&C4bY8Ecdd+i}DZq+WD*arO;Y_6fuHiKS})~
zxx-7z|MmQPNz2bb`Y#a8v8<^U$$o|IWwLObc4SHssWg`XD~|PuSx62;0L5*D7#Aym
zZ@RmJb9d`Ne44#D&}L8lC11Z9&yM}28pgCe2?4w;KnS-AXYyA#tgPkM%SOK2N2^nv
z8_)GDJaqOSOQl$P3=r~^oCp8ZzC-u@uH@S=co2h(y{9G`P}1g(7I2q*Z+Bp`(Nn>D
zT*1&e_V^avIQkK@(YST`0?6YwdqkQe6t9lSozd(RI4w_p=PdZLkrF+lzQ4_)nJ~ke
zCZq)$BDFJ|2hSM}M#Sv|0k373pFYwIW^+mV|Fr+0&l&pUS9Am^5hB=Gq4f7yaL*1U
zH2*4i4CbtHb#5?IZmq=-MTUBzc~A0%J=d6`WG`Hs+B+;X{|+F_>OD<1E;qd3{(=Je
z{T{FHkM{1tA|}*5n7x_$;9H@LTv|tM!rrHvPzhcq5;U8rt$>b$yiaWnIRE_uc#f=2
zIL+FGApvDi+`-~aaW-%8sc!1bh$jfA#?_u0${bIUgJDX(F4RFF&q2;NsEkTg)ihPg
zRq}jQzs^^Mi6pan5R@V}Niwf83t{^~ZI`e;UzYzOpF8E`V>Vu+GYyO{f7|t=YR=E4
z=KSp4Jg9!9sDgJwlQsm_vW%^)6$}xMxmPrZWO`&Hb>ZhhM8d070<sTfwre^m*KR$i
z*I~=F=&mO%JmA|<#<EE!XuI>>=Q*TUx~yb36}8OBjL;(@z|*qdnyxvS%YHN(9gTLH
zv-f4qHrE8g9-TPYiH?%%0-D|rK#F=kg^XybLOV|ED+j9)2EzW_gqk31UpND*Dg7ID
z-o9;`7`r`DJ7`~zO)J;c$hKp;bD6o3B>PVEO7qLfzcG25LqXXh0F&zz8lVv*WGm-k
zIFUP~xq2o+l6xwRiz-R2o2LY4Z4NJ%6_UY|pK>Q>H7X<jPR_vC%7$O4$4Sw?L3AvA
zI1>_Ocbd5XlAW%jpv#C^vEQp-Vy?S2{HE&9l;wWn(Z}ZE%Hw>=?sRWv^gjMYLv&l?
zdhWK3G<n_y7gG*YOwk{S7qr|(Gx(DGOFKtam*qyWexZdknU7v}%hG_gqool)IjncO
zCy9QiqLy0)odMPlJwh;)R@?(p2f>girFlDz3DdIwc%+fRc^!A=^W^@Wfq37Yt(7<5
zEvI$!-DPI%EV>S_mCglxkXs_SL2vb-?m)4%xc8Hvo*EoOp_6rnyZbmBg-~#Z4Jh@}
zS8kYemeD!T0Smf{7E*i4LqG0K?HP&EExj(3zKvHf+^Ibuhvv^BE!A9FR{`BHf4q5Z
zw+(a~Ki&o^P(@zDUYMG}qjw^MmK<O8n1t+iF>&&-!)y-b%+F~s)@P0pt%`wU1{F$A
z5P?1C2xg+0lr$*c<u`19-@qIwR=%xc_IwZKDq{j;jPAR&EUjhDRiTuOXbQl$o}o5(
z1ZTeO&Q-QH0^0{e;TecQwmav2@ndrxaI7~YXEP(y&EN><w4Xrk#%E#vymK$$6$nRm
z${e)`?$`<wRju>Lw<cX}U3R#fdKx6-ehl!W_Rb6$13oDpvxDzFocId#Gqez@3%f%4
z8L)P?d^wakoptA)j)5N^bP`|C@+T&k?f;BsVdea1nXCZ%K>9v~rrZ(0Z7lnUvd!SQ
zuIb!XuR$eWaeu})-a6^s^b|ACjagGi?#a~N8KKN7N_agxjGh(cpP%gCZW=nEf1U`|
z1JSv3!1VJtub+>rpYHigSjqPJ>U$&0az}dOKXCt?&Ug9!Q`kCRDr|u(Ss+vY3i`o3
zJgNHm6;%^(w=#JHhN$M<7s+LAO!{@w_1_5AAIYqPmewWTLADmQUPXN?-t{bdEdGLa
zCvJ|}bB(BDu=BxT!tHY<Lcu6G#}it(pmy(N^aVs6!|;PoeS9|hB<}MhMoBy7oSxF9
zn%BMfvcEC)oL-Qu`|+lKPWIvkx+!;7b5tg^9N%TPO>1x763Sf7#38;DaG#kSdwl)N
zVi=t1Yh?O<=?r%(lVG;v2!o%tJ8>#-bstExz?d~Xa?j?>I^F<yW*y^qEead}523V7
ziro8|eXWauAvOqvH6MS~`#AkIium|qqDpHkdG)lxN*NcsQ^073=!s<59Z)?z$sKXA
z7I~`Y=k<o_dBLOCBGx;QJxlwe7N`;hkfD5LJAa8upCuKZ`rsV#JOi>`2WvT39V+S@
z%;$!X6M>xFNBOlJ)SMDO>LizpvO;2xCa7rp>cO13FXRZ3ExMfhb0@Q!!`C@hU(1+B
zL+Sfj!%)glNjNn^((r1y<$}uO)I7uY%c=qc4X4s%_-FQN^A3+?j$-j60$_QaVfC7@
zG}cfWB!>7FRT~oEIweE{ge{|bR9{i7Myy;IkJ@<9fV01g3F<az#QLjlQw%Y9+8T3L
zI7OHjv&M~xPTYe8_K<_AJ&91pGGHToa%2E}@(Enh%(nT&UbPE*=_;jk4&1~PvWG;b
zYcENH5O9CP3JVMh=t8jM-bwqK<Y^M>h-z=+TlZ%Er1o5syvD;J8>&97H}~=VCwe0T
zbq{msv^BkvNfEtRV|wvfdcg*BpQT-MczeE2+=l_Z)Sl~;U-w#^@hL4PPouTX8bSe&
z1c6SkH7DQN9IrKePcUZP1{X|SE^$=$<in{|7<R)CKL95sW@AT71;F*|&OP_)!Xe@f
z(7Cxr*U9%~&J&<L&FH1n%8C>F%kWTcEfX|gGBwxk0v}y@W*gdRe?8XQrZ<>30`sG(
ziLPWrURNfYu7uKq=%KL(GCguenC@s<vM2xbP~GZ%-I?|S_1Z(u?b$~*s^?}sn}UP^
zF%3k~T%5SEOpb5ZH;r2*CTudUO*X}FxNgtlaNOjK^eW2ygf+n41m3GE^>L+wAMg>I
z&NWUjOF>0z=T2kH&Szg94*CCxGSs+1C!0R+4e|_u&JpG;J^9ZjOu*~TeT0iqr+>-%
z(rHH(O{54Y#JyOsCzv~4b}`oL?%%Xb9KHEt*vYOgIf7e<gA3CJUQ3`@3+=98Qt6dR
zUrz1r8o9l|8sS}j-P(iou*_X)GW*=s{1*81?U<Tk8R^?67xZ_1UR)?_KAJBXJ#)5o
z34*hUNJuww7+e&!PsgYh-Z4$%Kw$BFwJH%=EyYA|ZQ|s{)m`I8mL;|zE&}bIRfPxx
z8SYt_1>Hjj;`R|?yYe$}>#VBcN6DuVBuEdJubSEE?o_w^1M6TTi~H)qLYflPZWOtK
zx65%Eb;Kxuh9Sx~Qm44q$C_AWT{4>PyOWp~*@s@>-BJ51YIl&`?OQxJx(#e?BvptB
zEi`Ya<;MDIxrdEE!*&E}N8tc1n%XlYl*Y##)L>sMwSQ<R{h^^Xudc0t>aL7&8P!N=
zDn-tr%b*OzatHg<J8^HSq<{I_98-~jhhYONVl*l&o0eu*V2i{MPf$q0F(hp*YsZc)
zI{{E#f#?)_RIB23DKsiVsUFHp3g6IIaW8F<J`WF0WOT@|0~7kX@`~Rp6K5wCOT#S}
zS0?{-yDW;4rv7xeq<^n1VrCGhq9!Bu8TaI{dh<h{A^kflANuT%NXs*?#E|`IVi|n$
zP)YwzY`5k>6DKR(sZ?XV4D4zGQ7`KL8G_T*D+R-2k-jQd4m!}%B@WWKFGdhsQJZ^G
zhg+5L@7Iej1o2R!+e@@9zf|_^%e7P`3Kwra>#3?RpOtiS;Cy!RjkONGv^(`iAaQh`
z5fVY3at(ZK!aGDu;J5HP*w^}zrjt_1&AHR_@EFZ@ydNc8*bQ@|uqHP}i2@_t>EM0<
z1B;lbB%8igc$L6bTH!XbZ|QX2c-;Wc!O6$N47UR6%VBj#d0o%~HCPqDHw&zVo%OW&
z=ze{4n%3urzq#Kl*|+jo7^$rYqsvHrJPdRE5R#-u;p+4zb=!!m1VKi*8Mpos2fV9u
zhxz+HhQ$`&hPe()%#w2(#;3+T76{EBK?})$fG1nY?1<Rc1ji#(J#~Efh{a?ALA4vO
z+O7<xe?J^31r)+2GGt!>5%k$s?KZE<nSU^9T?x#<r~oo8<GMHTwTR`$cxb?ul%anb
z{t({~4!nRQHgT*y;tpmyxkak$>RI?N21vTb4J}J>xx^FJz8cMXuCt>+90cvw<YZTF
zp^Eq@zd)D0_Q?f0{-A*i)T%Pl4Kas<sfCICOp<XU>5Uj;OSw6{m&w(?Qm5U{MB}fP
zEf=-#uf3bM@-Cxzb}HG{Jhw8GIvHS+yPWQeX;l=qp}wyPDvTtWXxJ`x#aYP46`15%
z?758ej5?}Shs@_D2B~RuXx<^z6lNAH+N`;fXrw2Q(JuIjXweasug2UIX~lT>`EUzF
z=d4KrFXrylvc$M{d$_e!v%Iq6kU%@)=o$oikG6xK+pH0H%G^uefLH`ZZFc3NFoCiX
zk3bA3a9E2v-9DmmJwn~wmw?<);D0d|;D0ncG!e1JJQ8VsDwL9$hqZ<^CmzhnW!B1Y
z_qZ=3&QGipjK{H&ZO>lJ(Qqk8!!e)H(J*up_IYvZ(yH78j8ao+rol`=O1>V<RDN@a
zd`B^RprZmqbL3E=|8ZCdK*oOjIZ0C|GPJp)-9Em<Do`k=ILvvY*jy1d3TkS^0Pk{4
zYePRjgtJyb0!8O`z*L8uuZ7B34yHHza>U;_aIHS$<EUWYyyR7tXRGgi#e*cXaYOSr
z1a*L&R~uB+MC&zRH4)7|QQO6=;8Ng6p3gi`{%q$-s>L$CQ?MS5WUs;M0|T9M&RtM~
zR0~ExGT1qp?nzx8rHV2<wEaQ9vUsf2fcdyX=Lwz|#Nq`htTF8v?Y+auM4)QkZ5ixU
zG({C~jBeGhv(hiws*=VJ<6vj0U$Rvt)YNZOi1)3;)ahhr{6a7INAi9zW#oLF2ebB$
zLdVfx@rCpS!H%9<%@c_lCHRHrG{15E8vZ5*fKJhAj<lMY8P8-4ik@H`7FO(Zz9(5B
zwbkV{u$P&cCWFi%G9G@$rS@Q%@!g@j_ZOnvt}fz-7$#aVjBaJelRBG1?e@rMb|xx=
z8>`wlJP!?b>GSQpiCBH9O`+B<PV@PFJY%$lX&3GYR)yw04kR{i6-YOd4Jmfsp@Yy3
z9MQNH1FC3XZ(*xoy#;TLnFI)I*vGV*+#0rjRNKXPqk)|<>+Gu3-rGWVWJOUJ59i_C
zJ;*f==Q$D>Q;X=hH8lTZS_`N8YeJc91?AXmk(M~tJ(({7%a9*+XzN|1Nv49v9zG&t
zqY*Db8!)4BGox1JpD<mo6K;^EO1jEU@}wcCf2w(NXx^9#!7VO*RHP$-6t26%+|V;x
zI6i5JHpda@W~5(Ml`}+lv?8_o3*$i*`F6PuK>JEo?Tb_qkDh?6&SJuWO`bcg5%7(I
zFl$Uhj8kt$DBUN*3IH~MKHQ0yd+<3;6$;{KC}DgjUdOcp?ao%6#1IyJ&e0TBPE8@_
zV3VVr_3bAGDz6)3bms`*MvXMF@8jM^_{Si=Md|^P(q37Ph&e)4aY1+!Tz{g*mxr*u
zM{d;TP*i7PnIISKvF5G#*GEk0o%HX&NLzez2DIX5LTQJY$4PXjIIq9)N~W{15<=nE
znr6+@EuAsBF<s<+&iy;#lHcnKFwK7$+j%m6rq^~QYlgxywSege&6{dgikG+QC0(w{
z?}%^k#*kMUye=<9Ks43i>~#UB>LqU$d;`um0?a@j11v|ztfjBg_=7}zu9X&OJr!8b
zKxSx`n5^jw&a%cdnQoTTa6I6kEeOq9Q_c~W>N9K0+-y(2WU7j0y~8nXjWL6Do<*Ng
zGEc7q<oS7em{$kR(~VSHI!_C{&oxi50?dfk1d_wdN%Vvv(Uyv*Li57<N)!1_Rmns~
z--8|R^Uh|lI%l)|SYY1#Do5^f{nKNixi4}Qbbq$2<e*+&23={vPi}Yq55nno4kgZL
zKIcGwjnBi(6~x%J)taW4;RDTq%%y5BwVvL_?yQ~_5vW&<m;N?^TxGbmBW7Pv1+BfZ
zA`lRss~K-sT2|#eg-q5boWTpIX@Xt(9UZ}sast2EZV%B>*Vt2Pv|mEMW=9P1&h{#T
zdjFJ;l{K%LxjC>V_j}`|)!Bjo+AL|bPcO^duj7G~eix2dGo;jsAQH{NjQt4ah%!((
zU7y%LOvi*dZ=7FK8Q+f93G2#0L-JejBw*vbD-oA}{*5v-c{V_QVNe$WtMVkWL-kNu
z$9T@e<r_95cjBIsA9uLtNTq*7xCvA-YjC)mAJ!j>r79y56knwFxHePmH9EJX(Zgue
zGzLwY+5^_yOk;)aomW!wVP2S$nCelLx{>}qf)h8z3!h#_<c4OkZUOQ(IWtAGCW#w>
zw=def4epNO(dJ#DlukZF1V58}KHT!7S`kQ|#6qi2Kq43MSU5W;pk7CjldUp*Qg+-P
zji6e1xXQWkQAx}wZnllOR&BZ#1y8ODr_!}u)EaPK0XU+!e{8&%W&XkRr}hjEWjx=1
zvXU?pXrFfk%p7V-I7N!c#3|wGext{CWTOH1Y!+L$f<eUcz)2TSISvX?Qa1pqj0MfZ
zBaA$-T3}6ZEsB^PO+g9#*>?Wu@G!VycG&u^8MRwQwHyU6&{t;c&}bHq->FSdYgN`$
z%;2G<5>@<JiU$D<Bm?WB^&5KK@^_>E8JCqBy)koS=EaG8Jj|f>Dc(fn&rCBnxfG3$
zYsNe3ytR0IF(&{RK_r&2qg)&7*I59cE8bEMtRVJBPt@LR3h2mSzFSpPInL#NQ9Y=Q
zaXJ+!ASyUfy7dfZ8M>Z|eOUhpXDcm8=u&m+N;x&-Z;M+BJgqE)oC6VUTvsf<S;fJy
zq112XrG@gXru>h1qCD(=^VPNEl6To-YB@W{fp;;IyP>r}PXN$PcS(JbeDf<mENy-f
zPYRkwl@ZRW)jEAe2n0>g_Y(Zk1&eTkh!co-tYLP1k{3^>sms+L?LYcn7s~wZeJ<ZV
zuV>~p!AXM@(P?~@VS1O;{tI{K?i+g$A;JlI62?;g=|H~fA!c3wl)uPJmN|bHY3x;Z
zA=O1~KLC^=V~_h#;NdT)v~9Wv>4eC2k@ex_RF3Zuc>EXB^Xbl>@p4*c8Lpw+={rP+
zUlK$~RAqGEDKUf69siJoEl(TCGOMl9o>1X_WG)ql(*FV45{HfWupfb|Z)S_zoZN7E
zp>AvG1e;$$A>2hYVCQQHr15seLy!rt8H_WRx-II4EUEJqwH!CbiinLUkxET&%z}2C
zOTN}ljOgM4H%unS&@=7U*ma?KQ$E6QU|FDfbZsd8Yi13dOQ&=7vy5KHB4d#)ZDsPw
zye8o1l=n^P*y_PgY63jR*N;_sMqe?u6p>Ka>xW6~b9}pnEgNh}r7N9|C+#uH!=Urx
z!`g-Huwvwtpfm4-VMa1z+)o5^JrW18>lhpMl_nx?%<gPudO8p}R5X-V91*iSpe-tv
z8VdVn!E-&*lx1xg<yIyp#Mlzy>?9Mw(@eyf*3^&7%tX)oDXT5fL!IhnNtT;^H*F1k
zBNQKu)C%`%{N)y$-+rIUVI&`8AjrX(RN=w;0Ws(DuyJ3=#GGrVbzh*hBKcL+8A*D|
z{Lm-9uXMkqIT1to4ahc+o~0|(v@ah0Gy7)(*~VpUA;`mT$u>1YW0*cT9eaksfFn&b
z*|}fi^2G=WFqhSIJDq%?X|9oe_E-u_UgJ*v*u-k?)V_i1LfgL@ve|G{pX9mROCg3p
zD(*$Q)y>upt$}HC;3AA(>Si>jkUzgi3M~qPv0ya}&F+4lu{!0;&~PDRej0}-?lU;L
z(L<;I`!#;ut-HO<Bqj9n>b+!!c__uFCASZs_XM;!Te&Q5kMU)(R|{O8iCP3L*ycP7
z9WIYp@0k19o8+Sp`@&~fSVrs%46d$)LX)HOHu_p^NU%0*o1{?}%EcFA>`|rdN3F`W
zo&bA8;;X&@JBR3t<J1VSgPs8Ubo!0}o7?_IfL-!c@+lOGP<SvT+nrxMBsiom1yN@5
zOk-c@-)vvDK=`Hm6{bfp;;Uq*>}K7qZID^Jw1`d<(r(Q-QVd38#$o&)IN$FbUgoan
z<03yR`F5!XA>YO>Y@fx=Szn?ZCFor@6-TWND<=&KG_L1RgLa-M#%-05c*%JHqZ*8s
zci`Tp7yppf5sb=QA99vGs?Bu4Yz6ntOb2&`?eD2l(Z6qk=N3cE)53P==M)Uv3%v%p
zZ_g%cvmel-#-47YY^eKW2GM41k#gotiN{f#A_jXkX5Z1Jf|x9XI+yjMF+LUnY^71E
zHbt$CK5<skUzY6DvgEKZVk{GFx!Ys4Q%iAgxH9>Maaes<P(6Fy+3}t*(oamU5xh&C
zPJ^NjtQQf~WXJCLWc}C?X-Y64!kLGv+-9yX-Nr|-`Nolk=OQCJ_0Yhl$j9>jU82p;
zh31_B2g_M29~ygxCEql1q^>zQ(m41r_<A#Ye`C59n^@9J<=LW2j4J}?VP;is2SVvX
zWL^}wn1JOA@8+Y&h-+rPeCG*vbar8n^5kGxYw?<w*RQ-0e%@1Fp2XshY0s$KLh@L%
zI&)qvuHnb|^B*7*m!bVW&GVD6>=A*sXRuj-ZZ3tuzWc^bR5ajf_MLpOAiM}rDSPyA
z{>X58J3TbjM;`ablld~M<L9a?7d;7SA!mu6sBv+AVkS^qEPEDS|1W6udUWSv<=g<9
z4L;cJe13@l&A{XUyceZuC<`QD`Gk>u8D;-(>6~8G=@n=ZBMQ7y#gL<lzHQ~yWgAA@
zy2l+7v2O};c1__(of=ASP?ePEka7Dm6`B&U#@#8uU2QD})<dats2h_JoK985%D>me
z7hN}1;x-~~4+}T{EtK9%4!4(eby+B*j@qMVS(Qx?yf+P}nK<@pAlm%t-2vkCPjACC
znB!aLH~^Jb=5uB_A0lDa`LBbbRp&9?tkRx+M|~DiQ_k|*B5D{RJ&(JG(@cK8^UZw>
z^0w9jbe@^GT3e@<<RBhPd+&4{<YY@)L-PQ&fNv7&Hx1Q$4XL{wG&I#+!;zBbuWpx>
zB^262G?Whtrjp)KjO4kpR_(0~O<Ial3U!$m0(LYFGHY?jB8?1+W2t5kliKsW=zYm6
zWR_p&-fP+dx_uhuEBAYcClg~h7a6E)3aU(_&htBlY1*QOuQ4^d8>wM|rV+ukLdiNi
z?$aSqY&Z%E=N*!EQ-`|je3yER{lBS0r46}MfM*W!ytX&!{F(|4-BfBXf2P+HgrE%1
zeS%IDAQZSXLBa*@UwK$t_N+SL-}hNs@Oh2yd1c3T=MF2L51ef%zBVMzl5c}|79*QA
z8-CZHwOJ+-&lTN=Nbbg0JpRzDX1hK1E+_mKuLYSZH$Oe|Ewz-*w}g5vS4n?Bj?}+2
zaie@IzheYW>fMj2A7=q|5bGD4eU)E#)j!@IeJ@(&QzvFGYuO(Oe3(1Fq`#U|$@uND
zEZlbI2@MnE9%=qCF|4imqvUIP@;2JFbu%B*+)SfWAohu~X-UsB^sI!TiIkX~&#6%Y
zq}Jq?vptQzWG=ke+dwKND_!GY-O?}dAl^xarZsSI{0+BEoE=K7HKmwl`dDLEEV2ls
zz9*1)0zz3HH+Cl{=AITgKh47%GxTXkTX)4s0Bg2gc^8}dRy1k!K&3h<71q5Anqqgr
zM_2xo0Ee}+=IgswjBEI82H2pYnh&o|{%3w`zV=Q56A1R=Sz0vMK<x9;rRV^{#K~0{
zd{8Agn}#^d@Y6?YpUU{g?9;nQ&}7gAJE1FAyDjW{4<7Q3p7<_}KF4_kK48;$jpn#I
zVo(qOvMe-dV|LtOd3&OS*Q`N9NICno>0l+$LhMdnu7)}>*tpd=Q}E=h-af5z?0daE
zQRQ`%U8-SKIbYdoHmD|qM>lS8Rx2XhlKphH|7}pM@g+SCI(xU64`*vT<uWXk`wN2_
zyz|8j1VB?%l!rKCyrX4<q2uVJCo6u0Dzxa+yvKWa^vXTpm-Ce?-}lS4dgZ#zBd8sj
zC(g{ExP?WoB-dTSgBkZ?^r~h@ew(Vo+2m0A(z~tPS^h^#V>{Nsv$1V){zL(z1)IM^
z7<0dK2(oTbO`CY&1_2b)@_x_op1&v;cOv1&K>#62J(>qmt$B@aeW;)RqFtZdl6V&d
z?P`%)2g(OR3sKzdPJWqb|3<+2Ae?$P(AGV=vTfK);zwKVh_WYU4UgFiTS<f#jvW#n
zwxhMXkv$4#kW`^cx6&VNOJjZ=Wy`f;hV&(KRbRXN+6Oi08}oyHR@2F#Tg`%S*V%cJ
z0+PX=oCB>wES|`(+rZ>u2tuIpXrK)S=>7b%9j)q$1m4S(10@W&I^h$1XWA7`)UH+-
zGP)Vh)~1Zpyz8Ucwz{Z=iNZ<#IfYoDPX5h4pjh{qBP`=XFO)u?(SjE%Vmiqs!o=HN
z#BNb(?8Yfea5%p(KI7m!oF8H{1Q=v~y-l~c8gl>T?Jo=n*qYo(3vg+80|aJhULz%<
zeJei#!U-=Ct;ZErTU9*pb~LrGI&_DO(4v@aaA^iP13(__-CmB!uA+!TOUUDYn|wEP
z-FXwL_**f7h<&T3hrYRVdgzL$NU!C09nZbW3msB{8|xm3>b~S(xp_R4%YJy6#>!%5
zG&}mw2QU#Ot=hPLStjf9LDQ}A`<O27FPBhB^R8wux{WZ$h52T#{-0yaT%~`mm#1zm
z<#)23gWT2du!}K&(7uUu1L?;@tCoOK_X8dnO*3G08FvhBpa2le70X-UmYqoti+5e&
zo=?^K{f7U0j{n=nulu9IpL!M~Paoy&iNbgd@b9wK;f)C_SPixr9p<X|JmFJ<wC0X6
zbYx3JAwPFStgDFRwGA!&P%H$tgyzkoRHWsqO70=#rByCX664ok+1{;4BpjxS8y%CJ
z@!4BXq{|;WqmjpRYY~hJH<dg@==7Ml)q<g$bya2VM+=HFgP_xTPl3F6-+6b_u(I3>
z3*z<}1NH-05m|b_gq>A*tQ*QcO~0j{*|VzKn%|o>-hGm%f4;uxf~&$@$HNX5?;v4c
z2jPDmnkRZ8(lTqb;;+d$6$IZfGss=VLGCCS<jESO(d2(+p9VS$88ai@ogAr=o<R85
zD%EXWH9BV*{7Jic5>H2g6aQ_=nD@WUm^qSf!E=qzPv~r|V$h>GZs+R~TZws*M)_&$
zE9$Nq_Z}>AW%HW+`mQOi@AUy|RRoXf5o@QvzCeMuzO&5w`a?f#i`MsF4c!@M<lYDQ
zqh@_qCqJ+Co$RkK*F5t>hT6R3HySMzsr9ULs0RD|C)PJnTUlJ+u|q-T-U8c`tF33k
z&3~OW&J`m(04PfKuO=^h1>>`>s>Yb7ufnL2!UAA<^KH3mbn<U`@NLc+<&jxg-2V-#
zcSPHSn^$nJ)FHUuiAXg(8RG>+5tma9h6xmZR--&gYfGotC!=%O!g^VVz}A=*W|R_w
zU3GVH$Vb1$kdY-GxW1xwxTp&SIdFlwpLo6(DDth6xIh?+o{QK-2DP5Iw7*mVsk#lG
zX(AENW;*$aTA4ci;9f0mWfjFMp3Qcd7e5Yq?`!x$=u%-sS0L?Gy4aYxo7~VL8Sx_`
z^ZQH&QwN2bQRr7cDP@hHT;(T2^_jIK`RVt5cJRYjWt<Ft(O@xIRZLbFlQqTUY`<D+
z=qe_=i^&DW<Xy#Nr=Mih#!S}ARFmV}vq6(#re<ZPL9I}4Q@%ATvj;?rv(5QE^prQP
z{+sShBPl!cJL(`in*X3L(@{)LDJG{Clbyxn>_W1w%bSU|ZvR)}92#sB64vh`{TliU
zNdn8EuF~+7`~a;?8Ohvn{`q6cZ>D(*<!^plOkYEsU{EhelY?y-E>tGZFJSG99PR4d
zA}YSEH)pW6PY<JGIKd-`%bjl{4sVB300txn%RCLZ$@OODMG`SfvUU8HEvcfn&L(8L
zd2d}YZpGPIb=TM6=3@y+vxmlA=Bs02`znNL0pK4CRshzhe(a1uhJ!CyUhy5?ZR82r
z>Qdy_i4%OIv`S~=8^bWQz-WPv_<C~DTz{k&F>6RW%3^OOOw?^F(?KOpL|s&bfWcpU
z?sE{5r-**E%3-493<;h3wJT_^ilTiu;8o9zvz$zjoRyjD_*;gV6YHTQPNk}^EW0vr
zW!e6})bPCjFLmZ`gZbOU-;OIek<4;18P#M&?I*QvSC*aY#JDtLW#k~4?LJL3mMq!2
zo-~al28UPvzs$W0e3ZrY|G!HDL<u}mqeP36+E}4l3l=Leh*{Xkt}Y723-yYZQmoce
z$O_h5V6%|N$5mRyORJXe*V@u*6>GT*Bp?Lw25J>sFI25QYgACH1XS{We`cQDY$E;s
z`u$&CuRpIB*=KHNX3m^BbLPyMGh=4*{N$Bb&)oYCvX^OpjhTAW%fZlM18s>g+%SSy
zWp0Qevt&+4ZT^Bv<dAD;@;v+vVO->-Ux%pINLeIx;xD!%i#|t;)(zI({Oj&T{>ER!
zq}&#6#Nd<M;H#d@G+p1>e*DR=NAfe3b%A2#LGE90Az&>y=<vtY?xG0`nr#C$pu4tI
z7az|V1F6{~-$gD$KS5&;e(A|vW4Rux{cF(R#wC1<q`e!Ki^OYbgXKg-$P(iKZ^1$X
zzIaPKJXdo?TbEwJs|nr>^XyJ$=^JYO4GqEm$AngEKH7*oZG@(+jhJI2G`np?(nbu=
zM_g_r=BaXXqBp@tG~^>jnFzy2)Kc{8t^RQ~Q$-%k;Wk1X(Sj+p5$$;}pTDlAuilxD
zc+W=o`G{9+#P)o|CL6IWAF<3vY{^Ib&PJG#F|A)<BNpd#G}?$o`H1NzqHa@OcbdG~
zvqYQu;kNU0ehp;^-@qt@@>F&V<+39H6YLiZy&NmBb|hO35EU`I%*#pn%9v)4C)OYT
z2YX`E<DW>kPrSvSm*3_v1|hXzz2`mvYh%u4{$GK~{6z6icR>kz63%8u1ZOihY>Fdy
z+<XsnJhc<<sDBA}^$>E&w!5*JxVYDwBWqq0<|CF_Fo-n5FkpSD08?$#oc^H>EI(4Z
zWU<k{$H8Wg>@%4cvCI<PyQIj@ph#1Cv57Ykt?Bk0q}KEz;stbLdWybagCP?A8U69(
znXcdyLi(Yofltv(p3qmTIbCDajV>_-V+Z^GI+M(RjO}y$;A~p}V7jrS$+lk+m9$Q3
zIyYTL$UnKDWn8!t8K+j8d`|j|-elFP!au%Np7`^}A31seU*AX@fapdWThZ!62pSko
z5{&hv!75kD%xd`wUs>4zG4Vg-Kl+KDk#y2EFph+0Qq3?OLpYupQ^_XK0(S4+$)zPJ
z(^$s&vi*!WgL^B>UFwW?uc~y@+es#2Oj#T=g+rfDy}5nXx)8PL3SobEle-lcW}N3v
z-yh#AC_(<p$wb^MMt7T0|3Ocy!4vJHA4^nQ$G8f$@-A|EON0uUJnKFH$Lwvx@bXb=
zjxyE?Em|Dyz>Xcf*RQM*zszWyVU&@Q`tMr+b-b|Q?!;qK@9^oF>rdqV{sOvCy>r^1
zPtOeNy|R+Jp~<n~4gRwWm=zLG^73Z^rDo-`M~AiEpHu~6_|PXkgMnDlYLVzC5$C6M
zoXz0t+F+3PmkfoN4rgXmA_Z#TOg7Y0rVJP$S~%?(S4k^$MKJb8DQ9J$)gKjgm#C)f
zX(YR*Uz1a-ZzaGO_hL%xhWP%14ixiX_g4wq%(GbV<_#k413LlO`Q{DS(?AAq;Y@ZP
z+t&*?%U=--{lD`9&W*O@a8@B+P8q_F{#j0asZEpKh%{yCOgq)4Nx4LtvUH|>%chz8
zHLWRS=}hZq(<a(-%F>zk@ix<oNj6Pca%pA$OG;}^Da}NB`+foE5t~hVtRS0ii&Ai0
zF2*bdO}3`Hi2VP_3pg~fA!s6x@C0AZ0ja5c+R=FNWrLlCis=3d&T^BsKqRjIILp$a
zL9!{g{sC!`3cB;B@WaD6llb8hTv|3RUS^(hd+FQxf$!YIPt;rTTYflENMEOdn()*3
z5I?#d`S>&E_U6hKr}1?qT6WFVMU74@lUWSG8UdwJ#j+aDd=~O6OLLbj8%>raisYy~
zam*4yh|k*FLA*2f{!&yFu3<gAMUE%#9?l$F!px?`;JxNyE4?FSDx7JcEhsZp*a??e
z(yYF@hI9K@;95&9liPztwTW}mdLGith`;g59xB3y#}8JSkdr=-l+5_O-fB(tSmt&U
z-}a3_4#3Y~IJtkr<9(I8xSop)?}Y*0SVbvxvu+D=DS7%QUkdW{O1>KPR;wa6fcTf5
zD!UdA(-9fWU9CO-t`o#4P21Hs>=)s^UC}CU&+ycZDKP}LLT2>wL5H0Jf^B5iOWKpS
zWKYR%(D=)bgr}VFlLjhFgxgaeg_}Gb{>C$BRw4y2B09!XL^0P}tc+g9EbfE1%C*Mq
zp2oJ@Ea=)t>@{PJ7bI$lSiCn*Lk4MBJq0izO-6<%higL(PUFXKa57=|Z1%`@QHJTf
zU-Z}g)UJGq6eU_sHZT{;?m}s7<Y9TLGChf{AzuG#(N<PM-D+kf;Y2mwnCEM%@Mhh{
zKt8E0c{X`Ji-WqQOy)A%E_kxDbb;CkNhf=XiH~f2zJ6|}Zgyiz_g%x;pD`M$pW8dl
zZH-?|9~h+D>cTWfGfXuBuXh0DEBxO$1@0oWSQ>WkZ>MC}g#V+&6ZP(&N1d1x<)ypU
z^s5jlpje;qhw%n-1~XbyAvnj#Y~eeRdCaF^)O}!^LL60m^A~}}R)Iqatdxm^d9t9x
zcONCJeQyxHmN26zs4KB`P_+NUf;eqd6*s;hPDT)lJGmfE1`moGTo5P22*n*-5GUIN
z#f1yvuxc=IA1v-{%OOGBD<;l}Em6;OktfD?(qV{SjRrOK=jOEoFTeh2hlIGB(B?*~
zw>z^p5-}z-;@D{Qs((?)ne7@Zri3!4p&;<4{ppzzex0;ssJv!oq+nR3Di{+Lk^;GL
zHx@SuZ<WgFR-QXw8BT94-f;;HjaI*zyeyJCWIu^I>)d~uc1SZ99lX6jH8(nQJzh-%
z)!ZsyyZ&Y~zK?+Fq0bxAUcqO=HI2k>XDsK4?t^NHjyer_pc;JnQd9Bv<fMGXAH4P-
zS3Ihq;=OcDPbl!(d`V};1+|U~ud&0s%XV9e$;+tSzlXswFKoyg#cc{$658d@R=|?o
zE<b6<P{=mhrXx5~&<69FE$p@qAduUii(nU_I+rp-nJw3h8M#wTHpleq`+SM)wn2P<
zaS5oZ3Hbg`$P>$?T0oVQB4WR5p#}h%6$g^pWOFo=BawM<6F)>Y6DhqPKYo13F63D*
z=sM~5aK6UTjEQepC59VH!VFgM5!Qp9>6mGw+4TUWmXK%mN5)g~U6h9JYD*;V>I>SH
zIa6MX_4if|q0H)pSUL&z<s8uX*AlTY_m;ng_}yqAhg;JZP=;DVe$fM@8bj8>^p~&x
z=vQ7=1&>WNU0E_t;L+;^C1RQR4J4p?3nCI;M%~1^H4*G!(CLsCIlE(tkm8TymL;~L
zhz^1gIWKZPeG*F01QFq;xA1K&ypDrNv?@06t2U({r>lv~Y9T-)cn(`oz^JV8h|d+(
zSV_ZbVJpOixp$jPvMT>7*4CI#<*+92Pzm>z4MI-DSe${qma+hu7I_Kx_6<TB=FA()
z_!Yjm_m@$1{!{mpVA{CzC1J~~AOV+8WDL@RhC^!_ikNFyzyC`Wbkp0^hg5qHr*Sb0
zS!?<#^?`q_=@&`Smv+jz&(vz=FXDY%7;J0$`XDn|wsd}qO9utFcYgZ8XKVVd9JE%m
zSuj~G;9{q7BY@ens+yio<1ZNiwh9t`quyi1w9tx|$!Cm!t$6*z)NzS^{jqO%ik+@`
ze34@F^2J8lVhg($J4D4?BY!d#xd227jej%qJLaXD2qI!u&;#Ab;b40v2it8t$j9o5
zy$g~=YcI`0F5Yl66p!c|i)%aqaZ-PvE*?!zeH@nU{}#6w&#rGvc)uP(Di24Qt2(9g
zr)}Vj7uap9nJ~h(|H*$bE^r6FaRtwGIyZkYe7xMnao<aC>De*uI?(<yTh@#=a>GO2
zlJ8Qo9r<h@i5NPk${o7Q1~?o!VD0Zq{cNmCtT)fmEHpXOseimFT$`oY94~#4yi|v3
zKTo)34T-vDX~{0$jhKI2j{nuU@8s=L7g_*KU<ix$Pc?w>OqO{G1^)AM=%w3|Z9}r^
zET21%Tv9?Fvzq-;`8*qjN1y+c?3m5^8N8z1Aiykvm}D5yj1}-2%CIOgl{u6VB)^Jc
zo>_PT=8=6_?dJTmu-wS6lzV?O<;+T%EBDQ={bkK*ia)Ofm*&1(<UfdVJdZV&#SfAL
zgtZfc#gKJb%V2g?yB(LW_IG7E-(R|5tj=r~E}<zw&x5wK{c+yL)GEM*^I|K$bULz8
z{-Ed5G$b*yR)4b>aFHue5QtLu4`f2<vL>a8H$9Q?%#31)yn8hluyN&%bUfT1D>9pT
zLr3`H@P^%qpqdjZk$%JY(XBDFciJ0K*OU#Wc!(osFKr0b!(nN4tVHEjtI3eIxQCtZ
zX`J8@AtqxZ>P>{{xD-`Jn>&d(Onp7WxrjX5exYA6v&c0%CiXXDGxZxnZTp$?-gxRm
zREbAOzjRm(gA23a?hl~ArsNHO&n6C9@PqW%KuJZ*4Lhta4W_5>lfyHM2bGSaI;{)T
z6SFni>h=%x@%yUp_W;P(ceAPQ!_NAGbtc!#pOcO<PD_#h>}>E6Y)~#GJ{aaa?zx~~
zH#LX9z^s-I^-yGysNKnBN4MeP*^I4|N*R9)hATx}o|!r$@WYrWnlC1MW~MmRb_o0q
za$rD<bH&C}jFayJ>%3#jpym4QZm;Y&4a>5-re|97jY<xO$Jo}a?yCuDv|iaYEXsDf
zrG@q0r%OZG2Z`$3TD83!P-0L#xgmQd^C{TRvhawE`NtY0yz4XjDYFMXuQUXm$~}MF
z(Gq;B)6yR}jm`(coe^!Ujt~8?R^c`t_@k53hHiVGGo0lM1+xA<t1!#HZd^5(mDE4;
z9zeM1#p>|Muz#!(N<g&d%>!jDJh$to`Xi^YFWXT>YjL{FcqD73BVs-$Su%oG?J0R{
zh6nJOm$Q>yphZxYc!id-(af>-M%|^aL3JhzT1(mAjiwSK;>J~*`<QC;OjYP15U<r5
z?aKk0IW6pNaZNMbC8|a8E=w(LitGD%OSFLND6s}WD4rJ+Y)#+7Utyv(eNX=Dq5Rix
z0isk!p*i?$O)u<>T$GQzr881eSpYH@>86+S*~#yrZgB_y?O$oM%r}dTk+FY*Q13sj
zcwEKuCQWl8C-KJF<#LZRyG?Egi#W3~V?Ffw$?k&XwA<JLn7$Q=v?I4jmwm61+%l!L
zdI!Y)%QGQbFg6o?DiF(9Gt?%$A4Z?5aF+Fb@n$>(x)}kD&r*kKXB-;IocnQVPoEha
zN%sBA)%`=U%kYg6-rVt~1il=Hb00VI9Q{(K{m@PD=04C7j1@k_?at!bfYtJH`i3nr
zZ&oe!#;V($)TwG{rWTjZCaz&buMo4|98+k5LccF3pUd&uZXEWu?3K@H4KZS!m(lnm
zOt-`1nKP4w8Y?(M+6q}N>ZYgg?ceh>5r%MTJQ0-BxXx@h4Yg$=Y~DoMJo4<0*w{7)
zUMN&TQMQf>(sUGjj)Z+%zuews7O0+tYcfx6O>ZJZW4>BF#Mn%lmT@;d517~>`cK~7
z+2YJ&s=~i!iNNjfAHD&Mjs>ILJG<>a>g*#=QM_Mgab}OY6SVh#)lmN%v@+o>5#b=v
z#%Lv`%VlGEpgTTzL!#!vam3(7RC^!BzMnsT9Y&!n?<r+9AIiZ&yOWNS$+LpHw`wA>
zQTY=zE7yglR8GR8w37W3QDZ|$W)N%?M@G1fb{fyo-qJI5fK=V}3gq0e80QRrGQKtI
zG|JyKo99e<Nn1ahb2a0f3svg7#7@Q)@hJTBn~0Z)h`Ue9h%l3gVBN?4{jJ%AduDsI
z`t{@^foKu58ylRhDE@}6i&sC>Nw?l=jj7*$9caJPAj&WkZ^=D|d=@Me^7FK*5QZNl
zx#>lG`#X);n>M-ZmY3ZS39iYMt+NotiSiKVb%CgmXSkM|zDp4Avk*-#Dp5(3;F?U?
zPfY2q(`fmBL|JD)Nf-ZOi;D~9X2^mD6KD3Vkhnr#S{&0&H}UQFr9qzg1P@A;;$XEP
zxF(yQ__;oXuc6Jh-$7f)7{FcIde?u{)<0~bttG1cVx4o@jRSTL)NzcdsmAQ+ob=TQ
zmnh<ir*T>Z{598V$GuTosly>ej$Zhyf3|paDoWT%eX4eNtA-P>WPHb3-Fo<ws?ao^
z@e(4Bn^OAFW>zwl;zz*XHx!OmKX^Mo)48#}N}DwcWn331vT60dZ6TQr9V?=Wx(^D1
z6#=}}s*-8I8;5~HF0IAT%_ts~hR^^8#I8{{Y&Riuke1seI?E1kNmMY~7HHJkuAz)Z
zhue^))s0WqU$e2cG*q)h3*+<y>7hspBR^+pf=40IaL4)%eX_=&aJoaXkeEvj%ys1N
zp|+nn&nr!M4+<xvn-VAECDoWnV;<d6e|D>VWT~$DWoI@7L0gTm<!(i7FtK#3chxhn
z;X%>rb<_F?80!UF&xgpRj^VcEs=lFU)0BR7jUUv%g<}lYjg_?h&5oIs)ewT!wvZ8m
z%}~F!S`xaMBYA=RIU6Sgm=*i@ox)zLzl`|oQ3L{zhAcQpVjK#IL&M|D9?T9Ez#0HM
z*wTsVUC`_d!<nsm$m)KOJ|;0H0>Y_{K7*Z5z%^RUB4(3~_9(9#8n#W8D&3GuT^yOn
zDDR|7&y;Y@mcpop?qi$8U{3|_v9LJ>1Gc!jANi$vXZUjVA0L`V3j%afCOXM@A^O8Y
zJ5xmiE@szTnFK0JtNAg_D_r|p(=$m`bg&4|z%HGmbK3}P=2X@;LN?d5L1gNgQj?wO
zuar!7UTlG*(HIQ&Q>x#;{TGx88k?c9vvz|~<kyE<kv})B1hY4}nR%3u{J9yXZ*ERy
zMsPvOnq0nxFBgvD$iZ$_qNb!!&fjjQnQUmC^zZq|NugFCwjyZuB{uZA>ZWWes7~us
zx9aetwAXB#>rHjak*}^5E6=M<RkKW0M!XJWZ`a7)+1uFd;KRJ;BWP!{ks6km7E230
z?HaR>HevJz-&h4r>K2HU3RYF%pGg+&N_s2pkHE?SG3^kLZ(ATH43O73U@%$-f7qOU
zAuAyzFUfWGp$!F{)uiaw*%D-X+#aGNn6p*LRh9s&^XQ?G?PZ1-V6{`KM`6VPNC%tS
zS;z}gC|gUDB{4KU3(Dg~z2q7edw`kAPq9w8x-7elXz|znRF{)YtiS=T60VU+B&FbI
z25EX-qWZn*E3${I$EM+#C+N!N0*y))FomjDSAc=@LF3S75MRzdEc<yg1wPZCkM!q#
z{dre^-qfGh^k<v?oY=yjU+PbWKS*}GWtV+e;Xzaxg#Wyb@K_UGr}UbQgde52F76TD
zNW+59XZg$yCmkFr=^j(ce7>!u%T(z_okfQ+JlWp-3G(YRn;<>r6`JZa?oqt?bCACN
z4A{>7ioHL*H#VzvAtPWtg&NEL7xXfV_fy{(f5*K2ou%Ke;tKk!TSd{Q<7aciQSOKF
z%$jD3`5SF4HcS(~X=1l4cCn4EAogezD~96#idgUTN+JiD$Vx>%@Elv*rK1OP30D>k
z+;}R-yUc7EMCm30?kEe5v<mFC#(HaNDPZpy)VU9<bncn~o<E$~zXk+%QWL}{pU-Oz
z`+$l6(Pq_u>{-r%?6saiTgY>NpCyNlbxnmqLnH2ef}Fh`3JUD;Az7q-oI&`_(=--*
zq4e^nFT+-Q9sVp#@w|PFZgZ7Ky!$jyB2C5LiPYRDzjDbR<Xo1H5#_$NTntVo<=b+X
z1v1wkj*MY>TW{Jr)_Yi!j<zBvryrnEM)v-bKHN1*intF8v^BA9M6;}0cz7qlvF61k
z7~f*}%i9o{5%-db`_E)BPvFw}x{z^mij^yuta#g)mupM>=RfGnrNcRD_*gFZ=%uuh
zI%gTS!AxvP2vz;)R};w*_YUQXdv~ZA`1HXm>wUNISs#ge4>#~3Pp>U+;ZJIg@^d}z
za0W4YcnQn@Rfm^0B@XY`&5}KjzZ{xQfvO|!s|HU^2~etcowfl4XI@<%cfxs-ZqgR}
z&p*8%?p@{c429ZKwL)#?!QTzZ!!**hao4o1&i$R*nw`iHOrB>DK?N1C-C}{KfX4d8
zsliwaV7VZH*<EUhX@g(CgyVR@Hx&kmX}bq_){nYT4c`V3@wYK#&Ymhc0=E&T!$CUd
zYwIYsEkYu@>)R$WxH0d*R+y<4F|Mv0PE5kPQ?mdsMJRIk!1fCv><n)}3s)sRN(_D_
zHVc(+hl7_t6-&JzLoXZ6#5<zZF<zs3GY6|hADIYG?F~DR6PI4joYR5ERSQnqoE=Z*
z?p+0nt%5oEzxmY7D_nn?+g7@1wG|}=4_h5jKFVIVYEQoQSxfJFoF8n8rM7e7YS^h9
z+07Qq-1Rs1jpyJa;g<y!I?Kw(xaD)KN^H|K>@{N0^%Jq2U1{z&VivhmoVk5q*t-2Q
zJW37R%N)WC&_gG5lxx)Dew7I(2lp}<JpW#F*5=xCD>;-0>hbS-Op$!aZ^>}EPr|NR
z9vtz=QlV?im2sD>>u3ui@EsbQ?EQ=`Zxjw=AiBJVm9stNa@DN&XBvEC^b+%ywVUdg
zurzBpMyOSR5$bQNrjSd{zM;c12)DkrVXg5g&i#2*WDRSjP{(BC$0lITOr7+FCa}h)
zj3W@s%r)X39paD%4<0;yG6L;b_e;di(#5iP;TlbSA7^R96MVz0N92l(gvguL6Up8|
z>FaFz$Xxm<VQ1;Q7NtLL(wlAiDZ;6$JehRkzFyW-ze3%p1bWp`&%LKR#XgMxjo*=C
z`B*8cZ!ipffPY$hRS|jY;AlQ@TRya+Cw4Mp^~BYA0+@+bon>r0@y@BhL=_zr%QRLs
zP*j1+><=LTtN+$O3ad`z0~D^gPfc)Ack|6H{ITv{9^EcZ6d7+H+BMz_D&c*n_HAmc
zx>)1FeE@uHX^Fy3%E_VndYLO4vkq1%V;y@>)fUx@>nHu{pT4)*PulZJ$G9Ol762a;
zFn)EG*?c(Kudl=t{y|RqM4~-gVq;^~B&rHirQr=&>0ej5M^8SCfC8qVfaH@gN-waV
zr|`LoPtz!2?tkB?LA|>)3cn7ZfQI3nvxFoKJgUsUm=1ANTs4V7nqqnhrYHGd;6q+{
zCYb@`V~UG)EbU%Da1TCW^!*BrDn!ppDqxLxw-8Nv9NkS~0gjx;>uhuS@JNFBdfcMc
zzCz$Eu*0MZzyI$mv=%b^u5eJd3ezWnN8m9O7cmqef6o!TA%dG^P5U~o5)W*6+ze8v
z{$OXR9j9i$IJG?-kPJh47Fp#}ZT1<!;@;+8sxBY~WJEJFIcH+MF&-Iq_-DM+S1@tk
zM@_<q2u=T}L*y4qUTcPyf%v~Mw3l$~F*)_Pq058W!xD@Igq9;}ZJqm3ndz#N{+6<U
z%U<+Zm;QC*A5kWF%kp=t5M_cp^tfZ=uF&8u@~zP2>U@!3y@4rBx;Q6S=bLp_kc3ld
zflF)WCT~&Z`uy4${qk2lu^;!mf7*x}Sk=B>ZLH)|Pqmx);U>Na{OO`ij=%d`DTjnp
z3W<%zjRh_)<eLf!r$rLZ=pp{jxBF^hX(mORrjKw(57&TQNU&-2$s#iKda^ruB$+hr
z+|jiV@J#J%=(}8fO^vw&*5MY*dPkc2C;aaqzeRCzH{5BwDwufcCoUhv4YYs^QNhZN
zaf9rn{|FMWtnTZyS9lj8A*IB;o&#$tLaZ@o1rBvv>p+Ln8gX80l&~U|$pkMY2<VAW
zh#4tzrJLP*ESi`D>Qnl8o)p>`bswsdZDq8{5?vut*(*}1&#_AS=N{c9;88cWe1V(c
z$XbepvKOLSKw4iBt_?M4B(yr^?|eAvQ>$p;tS7XxxtqG&J#AFm?c*NlXBp+Fv&_y_
z2x_ua8MIT4_y6#<&Ix4_8XrJ?K-V+|`bVvrL4{2>9t!^~Edv}S_ma&Pl+U6U>8OW@
zz(6Y97k;yI$gA^Vow~4bHZpyJ3;FL)mYm0zIm>=dq*&|U`JjYpzOt8?-baCzxy8`q
zN^NX|!Ob*QU7`*&@xHAY+{UXxV~#gu|3%t7l^epxN{+G$%4q=oaY4D{({OQEcVnH3
zQ$Pg15;NX{0+*@4z<foZtfOrK<6`---rAF2CGlO_&74>sQi1z8X#WZ~{x|EH@|D%x
zRZF?)NI6DsXi!V!No_dHOoJ6<T1eZR*}oxzH`<y>6CP|C+<|M}*4)*sJgIMM9K43*
z1cp9uAmK29lWwiT-W{8WKFurN(<u)FOSs9y67Fj5+HPRIXA&B;ly<^8A_vP4V0GPE
z#%PZ^0bHRFSJFk!oNK{eA>rKFYzarMDPHsM{sYqbdNc5~IH85Wp`U6*Y|)P%qq&do
z6?!obN_M%m>{oOWur4pdANp}sUrA$ur6~KRM*0tc0<-WEd~v{P$7Ck5%Xyl;Qc)mw
z$Gl?)3P2^-)9|w)_viZo18{2$b9{dh0hQ*(c?99l+mp{k-G7kLX}ky$SDmkrg*vlm
z5C-*kQD+`qPUD%{h6LzeM3T^-J&8zX>Ds3W*ES*7WY5OcgsLeKz@`A;D1=)%&v2sN
zZ41dNms1N67J1dj2*`+ZbDB+jv*NK7=7kMa<*nIHw5EKt>J&+Wyy0Z%vdmjt$*3TX
zk#cetCu*EMB1V4(_RWW0#R*Vt@cHHMZQmX=y*T`(6DmUSwZKM33fQW+gkb8QzD10=
zZxK`OTSTFM3HNcc%En-y;uQYPSXj22q?mU?h6)U~&M{$*W34FG$)9Rf%|2y4;<p<}
zwke`e{Zo}Y`Bjze{QCW=lFBNn%+|azRIKF2Ds@X$mgpB$R;aEr+w@u<v>EQ*x7~0$
z%Po;qheGM2$$&E?qcR1Ex<$$mQljQ_j`T2u<hza^Sw2b0a25-gCZ4IJfk^#Rg-!M|
z<V~ESe3Aa(x`a6YBBNk`ysCkK;k=^PA0W-EYl@_>Hrvz_T04Y4{;Q9ZXgg_Mk5Z}N
zw7@SDH1X`w@P?iT4hvAfk!6s$3V)}{x}z&W)u-R(Nu|tnWfl?(gqj$0rz7{DaPe>Z
z8(n1ZE<w&ay;g2@F6vDj7t8cKe{O#W`0p_%y3_A}tQA@-5b|niYdDI0Cx}sRo_>sj
z8J7fLiEh%*YkoEw#?J2b`~07msx1kpuo^OtYi>#Ij8;Enx}Ll^ucW#Hx1#^vd27to
z%VkCW{`4||fZagFV8dLlUR0s|KT7RK`OuoCL{Kc;TD&%*A`b8>6b2|Y9rh;9)Tq79
zs2L4W#9OOQxj2jE%*Ou}B@vtS1jTIvi+YI5T<fJ22y{az{K~^k<#;}64l}1QZ)I~=
z=RG3M!V?))a)83t{Z9l#{^>bzz^Sy>V?4w<kEA@jLH^{w_l43diGWixc)ZVNSLWCK
z{ugtQmmAY#7?g+^l*|;|a@c_pRvH(}JcRAXAXOa8e7mx4V2C|uZJ}yW!_=T;CJ)|J
zN9?pHnablrXO^V)cGQn_H?>uEu0L_Fe`Y2Mg!UMGF?EvTG``oH0q6Zt_ha<S#!ZX=
z?&DwJm*>n9mKsVQS?GUL<$0morJnMSQz!N1rKO-e4IKgl?PxpR?nDce90i|TD>WBt
zcv+-)OKLdfk0_yj-k$_dn#jiGnKa#((um3Pyj!ZIu*ARmHD^V52cm6Q&eE{}Xu)T<
z_8p4ZJsTd=zs+k71ySa_0novEq?s^?3ZgX+RUON30Xg6B=l_J9Yf#9?Xr*{Eifu#A
zzo$wg{V(Su0ee#-<g5zJrF?(M@;o_HDC!*^Wo&a)-C8?9h-|G@vCziaDoKcHq$G7K
ze#F3*Qsqm)7#h4rPVQSC9nFkeoB6@oNW-2(ojH#X+3-0Z@9-h_Ly79woyI>a;9dVI
zF*o4|6(Rmi+=h=S8~Qxsjqp@l#-GvyhHpy#nYFA@Z<fj8rS0uPnc&4Tc1$e7J2>LN
zw^QcWTHYJLQ{E2$Tk4uvIg{=M<4an5ly%$1?zKS0yrtV<>1<gV4YTp%7og?89Faxx
zN2<A!7GE=bcuW1wxfZ9-02{%4;b8!S94Rj_`w6X*oRaNl0P4NPR7>UXO-|$Kl*sPS
zA3a{<jj4>d*9^ch0`Ih(S~0eIm(%zcdX;}<0DUqXq;Vl}PSdv@W!EQfRaS^bz2cvX
zE*$R*9FbUw<=lmAjCfjctb5#7{Z;i|3lBr=7=|*A*R`HnDs&8E)3zS3UGVf0xm?&-
z;uf)FeSyMwbV<|bV!!-=JxsY%OW-vn(nq^`u@P^s1J)&QUs0L-J(etGj1Npjvm~<d
z)G9JvRB4W%mQZ1Q)|VyWVub8-p*d&n=`65B8Q=4buLObOBJ?Ng2$-4lt-MmY+x&?!
zzc(?zH>Xa*Z2byWP0b%ooEul-w?G6Dq79);?4afPePKJ;>WxKT4Cjw#=o{87SEl4)
z${XG|M<JQ~#hg)GrJl2xpcome3EV9l3~e>v&g^5@p>=^Vkj+DFXaz;MQ?0+Ml4Wgc
z%)LW^Oy-~pQN^$5|Iojqc>v7gRSo2j!^s@i;JwvTw9+)*sD%8RtLghR!nrqBXAsK0
zxjGBgS?8Op_+vWuJK((j(0JyC693u0d!zuj@2w6sFuwBM>bHpIa?2Vc9`q%UZ&qpt
z!`;#Dq<;jVTFUzJUMcyp{sHNBy3q&qSjj^`R4Ly>KSOGTNLWsK_+R^hHh4CZ5zag6
zOZ=sPQGodE^izfVNYcH}#sg=YqDkJuudt?-Hkz4)wEj%I<?W(8Y2@Cgy)=i9gJ>C2
zy_}IC)z8bx^SnO`KGu}#{n-E?U#Bu<%L($q`?H4;EqrKI^S`{u;zP}d<A@}l`l3DQ
z@d`t}$!+8ax-zZ+4^l97!NWllEgqC9kB5gl3mevx!^0gm9z2Mx3J+qY!b4+MJk0w_
z|NAg~{(b-Z6!xD=_SJu)JNy4@+kaKxz5l3iKejubcgaPcvI__Y>lP&3bTg;FlT$x0
zL8p2XpFF<A26+g*a5oan{+>T%a}Q-Zm)%Q1{FP0LJ4mU0O$71{=YP){bpiCEBlnf(
z2$2Nv6>&8cXKN@AE7{L*7rEgi(4z;eCOw=Tm|-OY^Yo(iw}5}}Qpb-BW-b31x%3NO
zw_hIG@>;Ldo?>V2b4>Q-p>gYxI5Bi2aK-breTzbw*^{o_i=n{w-q}A9Nuv8N)|u=p
z{0aJx{{mhmSw<>P6_@as+5jtc#62e`pOk)-s;2(KI_r1KtNc|<zUaUSk1klv-5^>{
zgv!>CCG^5O;@1}LQzXFeP>WUiC-vCdfj~G!ELVEIN-j-+#ik+(iLr|(mBli}V#0cj
zP)v}xGQMAmIiv9rXxX0OT@X(w){|b~6L5R4*ii((2+CyFu>`W?Y?`m7aM`F5qb+aT
zS!$F_=rgY)-n_8Y$pt&vZniNfy?~u#KomFg2~n(ExT<f+?3Gq7oD<d;Ojx)buOiTq
zUVe9$MS=>;(1}tt6>c`0&<N5pj`;L`32eMJls$}Md^Lo!$N(KEQ?==W8g`I_kTz#5
zL;oPeu;7CI#GJr6Y;S60DQ~fq<rfqo*gm7BgR3F_5t!^56nlis5M=<C`aJB+`33Og
z;|u=60hM3QFviGL$#ZRgOCWzu(r{!(gk#PlyV{OSVPWn((h>{rl<j1ymMXc39UHti
zwFi=@Cg^Ty@r%M+?Ac<`jA!jf$eHus4tbk<w5^q>I*sZ+MpWHtMAZtCaEkg)_FH`9
z=xt=SifO<^&kleZjriTLTnk<Z?Lce8Vtw&%qtOwe4YzBOW%vE=()4H3*05Yo-9X!K
zpb)!pWNX==IQ|vxQT@#iQ-)n7;?z9S?C#y`x&Ek%(8eNC8msOi+P`1fyb~TG+HN9a
zna<}{77A#_R-o<oA`?F0syi{HhKE%8|2%v*m;QrIBBHUDhvZfHo!*_l`yWN)JY=)u
zvk(uWJ>9o`7eQ)f+xH_rx^4S%%`?)J1<`;$I@nF+_J0}PtjV14_8qjlRfEiY#`OLc
zyW@f?8i<Lx#alPl7Kd9yEae5=RzJVJ9}GKlkIA=^NgoRQRK6h}u9g1lk9@(^XDBOh
z<NSvIv|=>74bRZo!Aix5<^yNVZ}^Ld5%RVXseQ$({1)sh-hbeKL|(8>e(NENuPqeL
zZIj2s3k<%_;Y0XRBKrzeVD}XlQtGSQ<b7@^)H=JN(3dt8wyI;-c|Dg7A81xX9ieD)
z%_9esFLUs{-y0Zet3nQqW`4Z3E;Esh#+Qd)GbSRL{Vd7r@`&1a2*r53;bXhO@MGS^
z6+@r2^M$QN`F?Wk*(W+2KeM{tcfG3To?hEq+~YTp_9w0W{kBK6A7Mk##zR~qvk#+F
zE8Ky6zu4|Trg6(A6Dv34Ayrw~3-92q9{~|xUc;)g$H1cs<VLAQ3%KSPMu9x046(XN
z%|JK6Zoy3saO)~s>)4qx;StB?@ar@^b-#87iOjJZ6feVvktotpWNPDQC-lj;YjIEN
znv{DX7ntl6Gc=4OG2CDMM>BaNUN7G0%v=NUUdK*A8tdZ8?gX<F*uN+JszVZL)kc7K
zTVvkYG;F}SvDIHD|1|XP;vfsD-&Xkae6=8$*+!kZk{IeW-3gctn%LpUuzC?LC%+zH
z<kx;h1@i090#FSCp85do>zD1x=WI1UBuz?|Dd0;dbg>M+_05?kr!?fJfwDfxobbiT
z@(raHNf1M|F-lVdAWq{@rXLNnl3PxEy?_yrB34H|6O}cWTdHI{rM>_6-u%>8oh2UF
zK%D;JO(f>kR%qeO++Nk77_B5u`ZcPErFIPR7f?*T^ewa1L0qG1=O`WVh=Uoms{ZSy
zS+60{;K4%dQBC#_J5tKBPA>fo@7ynjewKRk3xDxgwbeF52Z{S}PxTA`v^z`DK3b5{
z{bmGDJRNfaF?Af?nqb3nT`Fgt9K{bWpVR4z<vod!j~2u7oxv9NWapaZI&a1}=K#yg
z)pc=b_5nDSXslXnKH0^g--)8%i!E0odk7XQyD0b%NR3WFDF}DY(zB{g5ucNs*&5PW
zjSRU?2G|pP3-2x4F`TlDaKA0eKav>xHNt!W?IH3-Fwo$Kd+bA-Yq4L3gspa1)rshE
zO^s2<*K#OWNEAmR7*|*|S8As@5w4)|z0u8zvpBzLtdet5@6@xR-qM}=dUy+e0Vr!%
za<cySLe1pAK2I;N>|#ULL)+1{Xv^hMo0Fk@SJ5@B-)@u(&6G8*&{?Us*eB?}cKW9s
zv%dVigi7appQU!zmzO{n&YW$;aE3A5wv9KU5*fRAICnN5sR2w>#b~WC?<_UyWoPLf
z&k^FlcFrPxg+6ahJ72=t9TL%U!x!N34sBtzSuHaWnn6=(whH@qT&<+X&2T}sW}AYa
z<Q=yKdmnu4yKLWndKm&8`+#>pVyH8VH;K{$vJGZh*gvLnx1=yL?VLv4&<m*VaVkQ<
z(D{EbHj7phv$41;%s4uYSCSPd9}{Qv!<vm!@@mKF%znZYyT|TD(cWsR$cqIlpmdfc
z1pTQS`*OT;Y*n@rP+e3ggZy%%G`I8}D0ZdVtfaP3p?=XcO<1ZldS9mbBp!Mn;>(;R
zryq;(=)F+_tFU29B5R&6sBi<F@9)TMbiR3IZ=C0W@(S9DPJL)M)i1kTxR^Dlav6aO
z3jkFzk>cJpm3c6OBHlTJ(2V&rHlXg+>jTgLYS=vYwIpO0*(REbDPc>jn!Y*da%QVG
zJzo;d6DB7I+nNGR%)UQ!LYZtIqt$Ir>NkR$V@h7}Hg8G=cb?J6&16$@!gp`!AMz{8
zcXzaH#Qx{BOtI<{M~JC+H~m&zqK?(-16C_X`ZElGg4JroAm1_R>my$8cxFcDS~aE^
zjg{P2j4tsn*t^@VRz_`Auv#T*j;%^Qnw^Z;u8XVY#I?e^OK8wS^2>MG&kf8Py`F?i
z*m8R1JH(~<!=|NR$u3x~f5V;9i2FK5Oqh`G^4H#9*nUGgR$TOIr=H=_fip}7b%4A7
z-THv)?R2x?-u>mj>4I)0|1rCWmU_V^=yfI@J7&Dk2!+}$-!eufkh}coE$oy>k=3+9
z*Swmx3)9}>ZTv)K*uJX{WjeA`0};%f;*za?#9hb3?sxD8t!{ujb53SPb3Hi1%YLs%
z;Rns+Odv^$jSqdk&fQyB{t#ZcY>A|<&x9!dEtr`zXFvXOA4peTUys&2ZkW3yPrb;^
z<%7L<OY*eOs9_u5{ROq_+1u(-?kWE*v~n_o;lyj0a~Q+iclcmctCZNO=EU6(;9gJg
z<=t-DiKFZYj>Y4d>(ls<s{d0cI{0Iwp&ERuT{cy!wRn*X3=EQZC$pLFus3hJiCQj9
zaZl!O=_xYB`_sLRsS(TiIE|Mg!#Q)Ls&Us<Z%)3|iJHIUQS+tTd)I>3=)ob2m=U*9
z^k`Fbv%%|zNcCU$iI-`=`j7B3?!P+m(f~vwio1Mt#mk4?@$x|=QwLs#Jsi)Bn8Wj;
z1}g{Eb-{|3<Qzh>)68Lf15scK*+_CqdI$1v_I@-VQ8sMNB+2bs<9Em!G15b}j88om
zx(4p6-{%?huEhFA)Dr8RF2s5Z%A~Hz%|Y@^CEsiA;TSPykp!3Q3xF?>i=4&_5WM|_
z@_wJM^k*~sPfpD&IVf3Xcl4>5Wh~pZ+(O#g7Fi91Q1-h7jLh{dU>UKBRZWuBIn<nE
zVp2Ux6W2@iNx;fxN{#kQm(Dx3;IZN;ovzQ?EoDS%OHuY9ph_Y0&<<%nZj?Igzxed7
z2^u0atso*BAtUFLIsWc9{D$#lmP!86j@pRN*EMO7?Lw!OP0L?)f7-%>V2!2R<iQMI
zx=`nlzqOU4qPN;E#OlqF)D5A&^~a$r_uan*$5^}kU;oz^9oZM*TmGyG{X(sE=Jdjz
zS{%>yk@S-@v13|RXOu7X2g^)yKO>soziW5L<Oq9^gP745mg$q3lf4;8EGXHb46=Ej
zFyKTz{2rt2;I5p@i2PVIK(>!_Dv5pZqwH-cE(#wx?BTB-Wi7gs0@9ac_(1m71&j`s
z-4~kQ4cR~5Zo@B_-woMgh|dlW5>E><|CYq;14>yIq-+dQ+7x;C9Tvt>!SCxq;#)!H
zB_@7Dww~YY9R2x2kYm3)ZOQKjzhU#cAv==a>~TThbOl}vU`(}<Ir%sHRM75|)sR<h
zrhMXZ5(}1Ib`urZ{x4wlZ1=A@f4ev)w3km_l;QIt$eVkjO<>(K;vf$68VF$bTpZXv
z*KNXjM5|w<8h096?zTc%Tu9hd7`NKS`Gs+RuyGQx@?{s;II+Zh+$<Xx<0su5ac+m*
zHRG2tQnI1W-2oFd$=B$rz=8H5s^tE4eRwCSaU!hUst=ApH?5hF=~@0GUDx2HGwWiu
zb#xg`VlA37HSiB^4?(;-?SqXk)9Z}cbKs#j;a*uLqvh7o6)LxJbXB-@bfvZ^7&g~`
z%e;81dyrK}%3896rg0b2N$VVs7k>)zA2h(5X{?3%&YC$w`xU2gJz)K3-O>=EcG!B%
z%{4Z&TK-vEYfVo7$M;w_y0hseIjlR}jD{-aM)cHA^12A#@UV6=uDRRV3tV%Lq)h6{
zl5p}k9w<eg>iOjlEm~j|K~M9JpO0sU+14wvrf01T2@7vDrSFxx2DigecV`#R(a2l4
z<5N>4QJ5nxb%uM2n}`$QaK90J#oaT9$Wx}t%oVDOYh&)_Nb8v4$`)@O6Vorg(<g@N
zn!dwtI80=TBB8}8l=5d~5XB_vYayl%`EyiyoMUyaDo!OR#+#0?BMO=YzLZO?^NgFs
zI6jfsdGS*jD>6m+tUwlwxV`;KDgaoS#X<a-F_rP^F(po8rDlhPWH|eL7AE8;zbpll
znL_|Q4-MnpTF-c+L_IVpTNK2*UuN5BLhk%dmv+@6i?(>?ra^v|LrH`lHNBcbb>5G7
z+Glhn1`NX!?wezaeiV!B+7ci9boJ)xy*aHI5f49MhdQ*YV5lz#S7xXu1Veq`<@uq;
z`m1-;ddln=hZUG<Wp3bu1poNiasptI+8mfgqi`!~W*!91#kh_~f2Wuw@D-ukfYtcR
zt!LbuF$v$9L047~yCQ@<w^BZ&6Pe^f@ZMUtP+p~}#uCjZc=(*`j{V(a_w3)sGG{Ns
zpHkD5QrWS@TTtLsZ%Oh{*3QEHRkUeRxlMnc^mWM{V>6SB$rEj=9iaF~i_a6P+mk!u
zXxcN$ht_J&8XqtI&;Icllz@kqCcU|^K1@!%5A;!tcZ{Ksm6deYPpmbAk=?`EA$g4b
zA^!5;CuI32L#(E=l^Z1VWM}2_i6}+<fkK-XC>Tpc1tSi@%A>ww_#D^ysfPeeELVE@
zBykEq01ElPxwF&M?co3Jhb<kNBxcd-smch+^Mmd!T6HAO(r4Pj4g65HwkdrnU;e8|
zRk)=PGsiiG+SD*IlyIWk3C&XpZKcu^Nlv)$`1ifH7f&va6H<%p4i?wx7NpueJoxng
za);Ert2MjKTVOky;VzF%<Y@*rX3imIY8eCNc+LPQ!iUxXuE%l3M9xvFD*V-e*%%5Z
zyc16ETLCNHYsM>Z|4PFqnT9PXp<4gZH$Lkyk|NFtnSHY<N)EAxwc-;|cQ}J1E|9>D
zwdq=VJE36265iCQ{uz|9y|S~RHT@7d46ff=062TnfT{6VoCLb><TmVF(l^{Cv%mlh
zH1%Am7T)4KCf{0XmI;0<X$f#Fbp-qXye%f9QW7qV)P#79C5Zd6x-p!<IRBy^+8=JD
zoC-uHMt(q2j8D(x=G6(lB{!!t%q%@N42zPCn|{OSHv&&tOH4B}3x)^_t?9~O(1HdN
zqXg4X*StnTeL^F3m63oya1Jl=hNIGU2nZ>Kkjdv6kc7smlxM&Z5{|5L_29FARKS|P
zP1_<VUNQ+M2k9ANG!#7>&#|N;p*6P>4KWCM*I#r4S~7KVvt9C<fV&1;8BB@7C~R8&
z{-agx0^y84DLLWp*1bMlJP|NGYfbx|pF2B0+k;PkUCfkLl9ikzR0}wRJ0nUDF%j0m
zu&oBqE(R-^B?~ELz43~A=)598#Uy@UGDMh+T@XvML6~dNXNi@Z8V&yinq$rf{U>WR
z-Wq9y>F+UlV+OS8CypmFrMUFind8s!yu$aBO{RDlUu0%9Sgx$=vmaiszS-(?apP^=
z6hY6$oowUOi+tQ*8`nTw!W&|YPZrSUPUDjjGIScB?72>%UMi0GIH?_TjGio6FlBrv
zgDkwBiBN(iCE>m$lJGGesI<edlJaA#znT0e?=R!+RHKV$H5G|@Q?YA$r>D%1*rr#t
z`}dL87^X;t@iPL9pW5js&9|94`F>nt(<dtZ;I~EMmX9*lM|tV%8HAyq<<$D=?;)gj
zruX!#Y~gX51%@~dBEkz^y;)sLwDx>=8(O$mO~B_)hx9yJL<;1=)4TyE%9-3HyqKaA
zizp$x6@1IdZUuXd5l3^8U-mgSmH5ZKw_DU??Q?$dbM>z#Z)OqLqui`$_YG^0@)MKC
zw8wa^OYLn>-U9m6BHQlsO%5X#ff>vn*^z5bjV3<(Lju7%M^xo61leTGK4>h$Yud1F
zF%!b9i-EY1eN8ZMPC+Gf$E<I`XZC$IaG2!Bg|}`rx%FE0rz=gawsBo(@((s{lIcP~
z&kJmvx|Q%M&1J(hHH(x2GMY{f1&vhS)4$vV(S$>m<6~Z|op+LZ#=@vGv9|j)WXaPa
z8Y<))Kb{%0eXRSX@gpXK=|PkoTRoyG`DWb1H>bNhM})D=we9|4qy{wjuK&SI^~uuU
zN9MaL4Zdd64GsPR6N3U8`w9()hjpXDg|=`f4c<n?S7=a&9LzDz8xfYVhU(N8Lw`q$
z{_4F6CDPyin%tRDBELjt#0CO#VqQS6XL!eAZ<ezcyYF4mV_+W@HqEI4TkS$ss=YnA
z)za9m83iQyHwC<aB&~%M_sfvVAWJj3b+&ddssz88oZ0z&aWIF_wc99cYT6!zes0z5
z><Bg|_9YAUtKz2Fo5|+?b5uVaVrH*(jeCad51Q=n_~3U=5dUcKn+<-42I*f0;TvzZ
z<-QaA{v!D82=aXp<f{zgKOw#ox&QN*(NBAGce0ysdkt+~&r3Mao4YmcZmwCT*y$(4
zyt%%TKZ|Ah9{5d+0=!{6hc*|=zv%m+*^hbbL?$As_P)svmdk`RchA~w_ReZ4c9un3
zdPLj<+17BL6>rrV6(UP5a})R?kgYQ2Jh<<!L%Kf2r=#s2(c#6tl7|O1lqK6_Ztddm
zIW?v%yx#H$Q+n-Zhv>RwDFsS<B@Z?5ZL`YipUNlHx0%fA!u_d=*mAO$cZHwP4lY-L
z!PD{{Y(v-c-c;B2UPz7q<59!D+YgBb@Jqs=fqkoKQpczNi}v^UAKIVC58y3+a_wh3
z2}am;2J!4wO}Hco=N|RseBq{w%dti@>Xw*`v=non!BbjQF}p0@sKKnLI2N8zspGW|
z>Wf^?)Dizm@>l(m`^8dEROpW1djI89`f(^_`Wf@a4C=(8vGa)X3T>i#<MhF}rq&B&
z^<2>!GrVZV5ZGFAtY~o)^wDr5Psbydahp2Kvoc#in%xhQwemlKH>7CBp#KD3<Sa1Y
zom<K63UADSg!kX7orp4bL(xw`%7LQCCXUN*GWwH>6+KCJ-!s+{gE=6#uVf^T#x|h1
zb#$?Idx`KrouzgC8k>`cHI43pDg*V6<i^n@Lz{I2(#!*L^yMhG?X_<2QF&($P#3*(
zD-vFV+JetQlo26!%z&ZI4L9`&)sM{#+uu90Sawz5YuDCDbz(?K{fV@2h`8T3^&TDV
zT7m3pjcm*VL&=`YnRu0qQHiPFgrIM6fkJ+(u7il0QM?lVC=l|<nE^6xR)f0c5AVds
zZ_D=LSZYK#l)RB;+5dwPMtDSS0$mwh$@8T#ugP>}R2WQfZFWEdub|XNqnYC4z3bRL
z^Q8Uu;$1I~s=hv4QvYrA2c{>|8tl6l=ZkoA^e~}Jjh#Im%!6O<rK~UHSDmzCX576W
z|Ht$9;6naWE#^}jUOz9GS9yQY-k4f5pK62o)UCd6Q(u>-Mmzb#|10pH`RIQEALg)+
z_IKq6?#?)_MqCUW-()V{sbS-Yz6aaoP|dQ18vfLN5~963?;?OjzW6CtNa=%!O}OEv
z@l`d;noYi~{3YM=uK7MEm~bN{P2-QMS+<>klM*B{ZsVr_;F|==Sk^TDn>EX%*qDA9
zncBN%dd6m|Xc~WX&9X{mV#9K01s{1x$*Y>i4;uP>)QwcuEUQ(PK4clrhnn6rez2Jj
zWFPuG?*-f6hw}7g!r6L=%kncDuIUyo%7+u)Tq%|7yyAwoxl9$pi)iCmuedq;8WV%?
zrd;?_8}@VIen25zN(z(z8-(L-JCF3ZTO;RiiEM4A_<NDFISHF5w#8fL{cz6-MV(U`
z^(L1^^stQXWpKd0^`F>v-1yXF=f)Sh&Q~_~nbM^QpFQF@%#89<+1Pj{QBn?+AD1><
ziz!ap1%%NiZ|5WG4UT%p*HwQy?Wnry52sxl^{yz6dee#(bC6<w<i$&>Pb-;rvBi(G
z^t94CE`j|>51^~(-u{v5r>0#Nt$t<NLEdS_e4oo_NzIQ-rkz34VwvK#bf|$xH=|AT
z!<~$o!At#eH^tYRhRgsFav_>2U&_{#hR+MCslOY)BafRZrr)cM@gxP%nnbb$*M`yK
zA5h%neV>afXEg~!)9#46JF=gF`CvRnyAy#Qb6=ux+lKD^u-p3o;r|2vq4{UH(95O$
z3*?rsci~rX6U3^n^2_ob5=M-?)_wg>?d>_^7|ClrKmJ;OD7tuv3!eJ^wT}setpFA<
zB?vuag|$vWv9tU`h2<Cgr{yQG+^}GjVbbqjT!vsT&rN0SHp8Nkb0E^5J13zD&h)%n
zKkgp6LgwA|t6H1`w5(QW(Zb-Zw@lDVP!G!;Ldlw1NGImL><_pK={<lb`7Wrh#MH;F
zqkYxaVCx%fe$H(#s1PyCyUFax{(X&qyt1=K-cMGAC2)D{|J<L}BKqKd`-u|QN6s<w
zW~S#4E>^!jkGbkjOx+0-N-Si<y9Uj=mP=*NJdR%a)wV(l^FOF>#YNrg>*@Ct4DY&e
zU90;))ILeIullj+uC0CYyzcl-4wCR4AkC2-G5(KKM8e;iN+4+SevJiU#=R@QDe!M(
z@Q4q=shpY4D3OudfkLGYb&!f87e+3MT&$zB{VtSh?n{eL)1#jLQB)B3Zm3oNdiwos
z$Y8Ulzn={S`|i)L(A}dty{TxtVVOOscSD)>p)~C@?^yPq9OA52({bplpTZ%#VWzF)
zG2mdDs>23qe87e#+R&XgWX8Iu?-B|syaQ-ZCgt#ft~>ki{}BVFPdOs)oni~0M|SB{
z29ei4*+Sw)j^MU_U@v-tjW<o}=^w2S+g>e{{{93&1uszMHnW4ozDzUsPC*wim0U8e
z{Re^Uui$isPASoLzsj|}Sjcbk@;|pgYR)aKKTPL|j~Kn@cZ8?(uQ|<%xyQH@O1%jc
zH4_HZ4^WN=iiN!^%S;wd{K;}<nLA;CH(^lCgkx=<YMX~~0ZhHkQ|V4P)|)WAX2J-Y
z=NVJem5d~LCfPhg+zBJR39*_937h8<o2S;~N!UEK?u3LlVPegM3v8Y=){V3WY5~r0
zn`fLm;R0{Ml$r@w**u5ZJd;eGDw}7LJK-vC!pxcp*V{aQGHUEAr<y!vHqTUd!u8(#
zCa_vFU#3>|M+pPpH8~$_Ai`w+q(n$CVb^5y=4-fW=HHVq(ry~?pd~rlxy2Sy*frU_
z`HM^usZeY!H`pQzi7>VN$re%Aov&=({N?<ung2L{ZIK?f$YLT)k(+H1g<X@)o4?5v
zc{*QYuI)=R5vItGY!QXs`O4<a-^SmX`LFWV*7CF&ln1vEVTwd;5rtio&71F=BJbym
zjJHL$6Jd&c-4;>Uov&=({C57<%>RPFwifw?iSbwp5vIsq_02V5*JShNOIoU#FDnyU
zWP&XsfzcGfkXc0(c1<>KzQn_t`2+GrDh;7NSe7fY+!j&THQBuRlId#ZADb`ofbEMU
zPE*SQTSQ^kWb@`r!mOFkt|(~Ow``FixgxsvO~Vv+O*U_S%oIuFi#%fcQkyH%!RC`9
z3cK@_4gOhS79yfwHVdfVW)#JUxU8bE=9r7W1n#FL;M<jzQt0uet7$J>4%eDclC3lc
zh+L<V)0+Us?+uL8Yxf1@?*j{f+-iWtvOn%TpDcuPv4t~aUvTCZ!a3Ez8J^vXw${pJ
zvhm8dr@w_$xi2`U7sA<lnL0Hn`^$a9dCusbPq!jQH{=u*!dYtIRG6nig7)Na;~5y%
zSMok^{P+<C==rI@7z)i^i>lD@;X?eJVqqEb-UqCyg|NP1U}=H`XTyzriX4J5`vf&`
z%=5M@ZXd9!3Sqr`soJIanY}J|eq7kD-&<H_a_<Ayw!;hh=owgI57{rkdcHlESr~?P
z_W|SfLKtHV3{ijf@J>7xjK76trp`WK#R_44jzPMeeA)ZxTfRLn7;Ukq8M-h06c@r+
zW?*Q}XOG?&e&$+OVi5a+wR}JUey%jI#B#EWgdgpzb7OXjh12kF#%yXKoNpL7O~Ug6
zG|qYbN8z~bFskm;r|zp!-zWt35=$-1UiJte?PI?E-olx*FF1eyT0!S-HE^b6|BPv2
zw|R1zg)welFzzgbahicKF?*U|%**5E8>YP1{BLk`Rw0Pq0%2CQY@NYPZC8Hw@-=2|
zEdDpJN(y1Ex>&H53(vX*oNv#33uEEGf$_v)1!$RJU@Q`hGlB7yc|XR&n)h#D%`Aj<
zjDdBRU~Mr+W!a%0WLrD=t*fvuY31;*@bFIlXVSNKOK<8H9?~s*d47K!Gv#&oUI>3V
zv$QaLez!2^<6Y9<?N(kEOoio7>=wSiTl>d!3%7M^?`_?}sc!huEH13?g*-g#4;v%U
zmv|TWY_=U}R#1EoeNr2t;cQDeLmpvt;&>^p8pM;Fm>9Y1ImJ6lTcAOC{de%PbLxrV
zY<@fUGsfD(?}hk_NRFk7_QBQG^dOFASk@_Jj4i%2*iXSELf8W4j}3#J;#jotW!lAV
zFb)tSxPBOfqY-1k^3ZfSL%gx??c)V>1K@xBwZqW>?ckt(+!PhsrY-mlBquWSL`I5x
zGv?Jcvj=}_ta~>1F|MLn2OoF~4mexuYRN)t>cst2$yoiVlfBH@L!7~hsxoIVr<h!V
zP7f9P;~2aW3&I}Og3v#?zLd&;T3p2+@^a&GI?Z7(mj14CgR#oETZg#M?(FNtjCI?G
zKADi~9Q<SK@NaeZFiwTVhfy4K|2<h6ul`Bx@}4L{oVsm79Zmk}fpV-?%e!ne=T~ZP
z>L-K3$?vLHY;}foHs61HQmJ-Lg*#&7Fio{CKVLg4dX+i&nNfMWk>m(#GlFUp>a=5$
z>G|r3cJQ>{3Wg_t_&OCh*>}tW#%SvZQATQ(?x?3@OWWP^#=5(uLhS5w#}<n!({1oI
z`Y?6a_+GL5ww~h;mHOo1*?2fvW$Y|5OIxfF(ny&Y^C**l$v68U4y@1q{%Xzy^Xr4x
z!|RVbf-N{h!DEoKbo|JZ#*Ivtq3?^F5<RK*l=`FUxL#J)uqS+Ib83@Lry2y;hPU@f
z`HF&{rrt-5KXp*dyLM0%55P{-Sylb~k^Q+Wb$wMo-q~>1?fM&^PROZSC$TiphbKJV
z2{{BKvB)WrlSZ9V?~LeLk7gP5S189wa*V7`1~~vSeEqzJlS1`h^G+@I&MmLrQvb8+
zb%!=9!L~FiMd^9i^o+-!Czse>PDqE8z$o7T?IF9dh)AwXNM1-_6Cd%uUmWq`#nqdg
z#vOF9daLPg+g)~i;@&jiTsz3Wl7hRowap6fAo$*?rE<1hp?c&p8sm>)DQ`@vYNKK<
z(PI)nTVA8N>W_<rL8fjeeG*(yZX!9#QIe6oy>ePoTb3YDsS>meAO>Ir%TUc3pvr0K
zY=8T~>VuR182VEIN+}5t0$37hxOOy?bLnZL>v6GHe{S3xMHAy(>)eF@?CKWNzw8nU
zqlbui`$ej`=khxR??Y?foQZ~b#fac?&2*`2<?jF>Or3ZoK$5Gn%DtRkbY!nqIp`pA
zZXA8|IoNKye>G=kD86_&04_N!;F3ZVI}V;`>>aTlM0J1Zrwz#PPNNKWq&Lttf@(kF
zjQRirPuN>|!*#e);?m=F@_59lW4YdLum_K%M%*VFuG=5obcXU+0M!>o!pD(u@PsmJ
z^uqJaNe5Jy3t!D-0<5?VN1DeJn}#`QSr<S%xL(~}z@US1j%BW7TeQRf;%!;LJpt)7
zb9hz3QDyb$D(me=$<MqMBs-1AfR?sjd)JlfKGR-*{<6<HJeul`F3p}tQXVdD%NSAq
zjHvRD06L(ViUfW^z(_}8hBXwS-s~7t6g&?`M|C2Bc=+XPGsurTF5Z_tnkaw9k@@pg
zt6z(Acj&B$`(jR;^M4u-d}AArsTt$XzPQQ`PP-7~O<-^^KiL6OWqe+w?PhS2P~Ua2
zS$mB2_}r5XH%H&d%<3E|vVsr7?gl@#6nrp_-~&W5F*e5rZ{iTNOe38fj-IA*JN3C&
zqEl<GKc)L%eHsjw6s>vXAaooLKNA`JbU*_AxT&{>;z?{$g=VIvzv@k4l`m0(L@<9a
zW2S&iO(?K{NmPy(im|JO(6%{&T#yH_2LSeA>nY&6lL)lntAfq{2+|ujGAvn%I<(8Y
zAFjEE^fkmp1^Y7%?nOi}A8yUwP6k^a%YC^}X{_(Fj}p&CkzM@wzpCsP>eSEc+^6Sn
zVuu^WH@*qSaN_O_Fcd8p3v^nF=Z$lHI>!sXbW>hXy;a-QS#CW&WCm)L=6J!9730a`
zuf#NcC1&PVV#WnAJ^lG-Nv2+9_IF12INL^;O`3`LnT@E(7nx)uB<5Ik<(W3Z(48qV
zk_c})Hzj*M@%-VTjVaTsm|G-c%s<j2yT3Kp(G?mkAE^UdM^7cd61l2@AOEC(_R+T)
z`dc6CBP9o;Jx~PJX{`WLRS~IAA{Vj1g}9YL1O>0F@Y~-8LbvSegY0CerAT%dknQ@s
zYMYWUUf%lGKB25=#>5NIcRuW6WS=@BxdB4IRY9$PBAy9NO-Fn|5l!iW^*Rr47VuhA
z+bN`fvDTC-(!cC6&`BqMsqkAru=VsLzObI>9trAM`Z@Kyi!kDkI6|zW8-1N}>i>ei
z{+n)e(%0o0Oz-~#`ugtoyV2K?HlmZh4zLlO^cAuZo%FS1yn)e4U#}Bk>Fe?>-RY}`
z`epPdcvGCYZ`ykO%}&}n{?UN8>JKd>o>e9bgM1+A-Kj{&)gn6COKze*QPN4YsdGHQ
zWsaU^y}+R9<hdK2T|xZ5>0){}x_G3`(uH0lE2N8Me+ua0zTH&u9a1~#PjovYDEC3P
zayRA5O;)+*NcG?UT333~{Vr{tVg+pKLO<qyZv5={V}Dd|qhQ?Y{lNy-Dw$O~g&4PP
zi^tn7TD+g!m}=ky1bU13)tg%SanIfs^X4z)^T(la&Qi`wL!oi8Ox+g!c~*a(<BuuY
z@z`=D{+OH{kKM&*)JrYq$KU?~nLXaHg>jhVrW%Q|%xK-2B9>pzQv@rWBKsK$q>Niw
zG1@|Oou8K{l1Tp-wm-SvfA6q<yeM@USK+SW5B4$~FuI?p_!zH0o?uVLIY#IBdZ%J4
zv$2>p>r=cb#aj0E@LxgCz>%*k%MWcn%1HQbP44^@pOmjJS6thB=KR-)UT5*94NJYZ
zwv+o7)A~4fF*~Qn$7k4>%6t#E2Qg*&m}i5SP(J4IAjS-c;mLmtVzvtdCg!dnW=lS1
zP7u?akEsu07UyFw4PqANW5y8^@vM&yEt4&@g3~i~W1cb<`p5eQLl#tjD8+OdRz@EG
zi?Ozsra<lxZL@9X&LFKJU*qe<MBwZ*Rb5QgO))#WsdDXN?9~GQE>2^bLTnf-EvN?!
zC{FbZ0`4>+wxBFOXT-dT81ue`G4J|V^)~#$Qm}Kp<Lpbk>wM1l0!ZhpZ1shq<UjF+
zkT)l1HE8$8k;FdH>?i$im^zFjZ|h2i^D%gVZNMQx;v^gF9RxZ4(qUyghh*BX*4kh;
z2(s%|>feH3(4MD)V9>S4O%OK_<UJ@SdS!n{td(1GQMr90wy`5<ma3bYz1V!&(aY*S
z(ByfMbJn(VieXOC{SNfJM(w`d{};~Dn1RSI+q449b~Zlg(~hqBpX<#3L@s}3v{|xM
z;M)`kjxB!}IcEY)25wTpVvl_7umMSqi@AL`xXdl{UCubx3$~X(Cy@uD+&M{muL51(
zgQv4(Okh*_QQM<<ApMMa*k%1ZHxlfJf=TJVAnup&Mh$`kc3M*omo=regY|wsq%~rs
zjd-SXxm@SyC8Eu32N*t|dapQj(s!K3`Nhy5JN*w=f>dsYC;Mfm5|!XiYU7Xih^2T$
zWcYE(4-<niz-#XjVe>s8<fI>js-xcN!%>Ocx`QL9$gY+U6QKTxNK3XX@>xr~zC1GP
zAEBM3a0Q$cr?G+KKUirzQ```9jfuL`__m4y@-Wh$f}(W^TryBJa}N8IojlSOAG{}#
z={xzj{wS7C`15J~Lv05lN5xXvV%c@yNnW;yqrBo@q}u7uT!k}dccj{nOa8rXuwQ>I
zreo|UW!3|@h7m(U$xpcH7pdOqG|r%ZfqY}G{_|v+9*|CctQ)zFza!NPXQpmR?cHz2
z@%DYHygeR$2sej!PCLw-0i$g#PJK9pY|h-<>Cee`-+lL?*Stn^zc=#m(Adn??D#Pk
zV=MN~)9oGdJ@nt?il;V~jII7K`Ib^}0rFZL7a$vg3_qvtF7|wSlGq&^a+Afa*4>qs
z{Nedkg2QM=8Ul=2+t0wtp@2W|;s7XK!W@au;<iAjmaeCJDM<Az_(f7gLlA{b*fR_w
z4B5&cSG$oxm@G-=e~Em|Sf}wPW(L-?FQCv6l^7z3{suInrhv)yd%CHC793W$04y3X
z!TJ^;v@IQ?>s=-6_;f$bne!{kOrAA-?0LM&LL0o;hzR#*XT8}QrvS-oGmoMI#AD;f
z)2`;pu98_J$JOED=u&6djm49BavV3fNr=putE*T<tiy@mOcN2Z5eXs|^0^}1v#5v+
z&Ee!xJP2||`D9UP@r()r7gf|{QnHzw9NE>}v6ua$2%)55W-kgqNAq~%>w`Vd!PrGU
zbH2ylSuMx+JTQ#&YiI5R3VP#;Q+xV3jbr$B<_zgchCQY1n{aZ;w=-9gP-@SCPUAQE
zSWy%%Dw?&Yx6;!Go6==oZTZP`9&p7(Xfuo(&$+tNHEVaz9z{i57w4lyAM5tplG?q$
z`JJ^}y)vJ22;GZ*ntOz6Xd#0+x{_N}yLQDiZ5{<wb`gJa`a3b!63e*1K8DMKW;A<W
z1cPVT47J2%laqbcl&Q^6_oMUE{qXM7UCV4<-ZR%Xzoup#4}`d-#-r7WpYUh$Jgfcr
zO<rG~7>sG?o*vmNiP8KuoaV-vpKWMx8h4^)hsnTWob+$$TLA49qC083u}Z*?g2=3W
z_~7U2To_nKk3@AVOB{J4?w0Hl13ns1^_|38V$I&747zf9s8N-ediDBjP;cW^d|UPw
zaJTe%Dm?4D$__@-nWO!g8QGzq&DyOIu61tTm_3O+c701|5#X5@6m3xuTh0gKoKDYY
zKZ%$o9UgN7#dhDT2KUD?mwEor=;d(CNuzC_(?bB*cBg@a&&{s_JE0q}fnNc37{J;d
zou?Uj7oXWHfM_~ikv#+2%k^l+tyx{#j-~b-<IMRf8NHHOyT2bl^;9Q)387gtOU{j)
zQ^(s4CQv&0C-s$1TE{6~tSs}hovFP&oVn(-C^fSjI{!8)&a#<D)_&I7+er^Jp{a+o
z>?p!3Xy(R_S>}S3Gq)EBsh0A!@<kKPL@?)H=gj_yLzsxWY1FI{q029+zr<<W082R4
zi-w9Lv)F>+bYSkYWEqu7giBI8!pV)<wFGnf*xU%sT}gMcKj9c}*6y3?67=IJdhRS`
z>b@72_tCkW5h&af6*WHoX+guD9!`3?Vwa6O(Ag}{q-C(J4jw+6djY@Jp9(%%@u!j?
zobr1R7~#x4g#eoMMKbDK)*QR6cy=tjrDMC{BhNbN$7l&GL(@D2Q#hS@<8F1HOzl3<
znR_S!lThk3wyUwq1Z&yFkNF0D+le={=8Y5Qa5g)eva1bBYY(IWBP}&fK6zQlY5WuL
zR`j9p<dZ*9kZjq7luu+Xs)!F>KQ{bSqWW*s4ip>g6-j+wJEJ#T^71+L{b4S}MMcR|
z&Hl>B#MwVkIJWk<OTIU3=Cq%LPRrEyt7zj@%yk%+ZX8rs{kQ2)#j&Ct+#E?Y4`Sq|
zJsztbnS5h~1~bR1nsdA>dm6w@QuYg>ZclIP``s|=)E;`Tr=ha)Ewe(5FI&b0o3)4D
zkn{$z=KH|<1I#al+cdm7SzRH9nU$N{72)27=|91E_7*hbbjY4Vm|j}9(laV8f@XCb
zKh9}<9posHPkGkKeiDTL=%jr<ZIf5%OZdq?qA$(&><QFhTA%$jab0<ZI-8qW&YTe%
zgkzvSa|<DRuo`VZT$--{Uz2jr<)r0b*+TtTi3SyFhY}lKR-)<dUzKQJJjEB-rswth
zrFQdNojB@RW=zPu(wKdlbpO^;d!#e*Y;&XoKOFjGYOiz6xmf(V?TJkE#GPWo1^S$r
zhb>`qS?s&x+G9hv#;cpBe}H@y%bXjIBjTmD??i6o4fZYQ9bvBWWE{qIW3+eKVC3Ic
zd<tH(f9$(X>O(vfv?82uinaKaLpP=N7G2ZpyS*h)xgV$AEUN!n>YX0-2c-5C)gR(4
z<t|ujxaG}~p&T#uAF8`LwOAqtv1LQIw7uFX?-+fx?%br_AA*2f9B48TLEN1!{=up3
zPG%fb*2kIqyr$bHEp26~w+5!#!l}=XaOUdTjr&ncwrA=er%3#8pH-+&>K_9m?sKW#
z{hhh@kRy`XQ{&A2rO8WD_(`5nO6?}<CZbwCJd~BQ;)sDq49whm9TCyYoX1%juE_pG
zMcpT3S3Ef|-8P=}vqv=iOx%4chR39M3r|CYUmN^P>Ybw4ih%<teZ;_lS{TZbN7P->
zJotj!)<xZxmM446+CAuk+j=;2bl%B9?E!~tS)T*4;X39~)sslzNS4)Gr?edVVGKQK
zot)yG!N=wxavN`>5_!qrNccMmdpS@0=_^E#p)(Q#|Gm7TDiG7Ra*(UQjm_Z=%eB2o
z?J21*b6Xg89-=KR3qMo6W!g@wB!6jXJ4U#8o{(^H*_KT4F`438T&lIku52C=3vbes
zQT7Xl7`tLy0}uK-%X-7KYU>9~X4i`)Fh%{556im)Un^^=aI)JU^LF=Qo}e4kOWK!E
z>zE#*=(aw2d4mkBpX`l}DK|r(JOSZ&h}l)j{C8fYWs{bR{a?Nx=G`J*v5Y^R^uyy%
zgW)iK{eJz7{xxzAHze>4CxRLt@nR(?ha3M+-DABH?|Va^PvA4|kb?PPxL|X6_2&8$
zYK9~~io)Nc)#nx`-{sjKu0vd0l6;M$(TSze;TM-CpQmlZ-K|_|V~c9#14gcQl=m*k
zbZ)74aap8hT&a`Rt&7~NhcArB%dLH(zRUaRQRL$ACS;w=hz8E)u>_J6P7%Hi5Uq@G
zK~-tAshq>}mmm+n(x}G~9?W4O()b`tH*xOZWy*gU<q)uxc9gSAIcr|IZC}oLajLnz
zwf0{$3#SF`2<GdgZy3U!m=o~NlGl!POX}RIrCctHxV0rrbM{Sj?gg_->YC1)RT|+7
zk6F%3#j^|sO#i9UO-MB23}4oHQJr^2IR@r%beL^2{xo*|3xXI{MYBjy3(HKKITCEq
zQ79eVWgv8x)^V-raD{)$2s!m2S3yAwNh7OMTyxyQ0ct5wdqweMN%A?R-bH25WC=r_
z)$V2J^J_U<3E3w<vv+l&AIL--^U{Ft@NBcYRj<dl+IQSw4VpT7!Rc(>K5Tgtz0SI}
z1M~C?bLDJw9rx{K4G;JJs8{ksL+G4{m-5WnF**mh0s&V<uCqr=<W5@7qd?^#uBX|o
z^?&tF<-+6kp0OeniSTS#>1AxTv{>1l_KfQZevK8&X?&3uIdgB}FZp1N%k0;F*UWSA
z#J^{MC*2$Pw7uBuDDWIt?4*ANCSsgldLgqxxRjvTpUbUW`m7+4ZnJTMTT1~zzT)gj
zK|XhD!#}^oOPsbY^;ggov#m*gjpXI}Y&%eK+ViA)n>aq*;;LLDvO2VmEmwD>r;}bG
zi(3y?*F9SPoV2{_#g^+^jKZX^C5jG#1l4)eN-d6pCl;c9Hy%kv*}KWr$q(}N%_iEv
zsAoU>l44tHAXmoSJ>E?vsSZTHTd7EFqO#6AuYyN^lDzRWYJdc6neDG-BZ&5`yh@Z=
z;{SG>NU^+Xg<2Oee{su#l>mA&4x{=KEg~%$>yF~Q^zU`<X#?6W<U=`3?nI{a{5aRF
zy06a}-l%bRp2p>?wo)@5&84EJQPm~MPjKR0y*v3Tgi>kl>72iQEUr8aIQ&*;iqDVW
zHmJ@$uOi-B+(5fnt`ZHb)K66E=3`yWc>|KKL~<{rkHgz?)ZMlcoZSSAsW1*Jd3_v;
zX%3?u8nZ4M-e%ZQEdyU}JXb!97FoS!uAi?tj!2*mX$ONaFs#ad?Grn{wc{x<FJHr(
znB2`~UYmUmXTF-@B}{AoYE1FX=E!8#)GlEX3;)^mj8||OsjEH>$t33;-b^jp-(j`h
zMrxSI>>Uuy-V1ms+x<Kt8>ARj;;yQLB{#}h89YSz$?G<ZCPa_<kRqiyBaQoLf8=<4
z&o>Y>{^=?1AFCK;$iJg?m|~1vhLk|L4!?w$q0g^j8*hTU$MNXG=o0VB3ffRAVen;A
zQtb!<_o7ya7@@AM#`5QcH@(dDd8v%ytmP)#oJeL&hkK<SduoolKSxY&4Z{t4M7_&O
z>Z;#$Qc`SJUpXMTan_e$3@4;VCiL?C`^z=1=GA*Y!l6l|`iZDBW;<*6u`DpPvNV$`
z($~-o$EXtZCP&|gvHHUOk4w1IA==9Z6x?fM3Hb@L5PNYPENkffk3Z5-D}-;82fl|E
zboBp4+PT0-Rb2~zh6IQjIiUuLHnvk6Yf!AgVod}!Lnh=z2aVzbYgJk;(rPVABDo?G
zn3<B(<7ir?#kREeRxPdVEm!5?BM@E*S|1T@rMA^btDZ3;sAwY!`TlF|b7m%}ZNKm1
zr<r~B`?2=gYpuQZT4nuPV(yjT^_nZ7?!U&Q7_)cB(h9l{JoKis@clI2Q)}=jv*CbY
zL@HKgyN8Le0!<j!N<w7>YNG@q!qLZ~pvDSjlG$;tM&eqranjYrEz^U6pN{S6e=+dM
z<GB@K&;_1{v^ws738N6Q7{8%;wKRG^fw(h?fft)@&mrF@cl%6+XS(gY^q+MbYxC22
zdVQGm+{10IuST$zDT(n4nk6l-uX)u<%2gK16wJe+%QuY;os}-VA&TW!To^Vw#Xn+0
zaRA4E1U1sva%ptYhi2JFp84)zz4NNS>~CUxwl9jmfM`uO>%O}#UHApF?%lfXuOPKX
z9Z<Cr<OSn|E*>FSsiz5wX+hLGV$R%hu{Hx3I@8O5#3i;n{BXKsJHuF(VmS|{6cIw@
zi~Ys<S|=}?xRV(o|HLsp@0<S7T;9koEb{jKQVevwW(>y6oG8F2n=`nW@$GY5qzSPK
zJ5Nr!M5a5jdBzZh5AF|w@n6s==<F38|Aw71e7p+QY_S@=De0Szq1XF#?cX>vSbH6N
znyJ>s|DnveGs(HSIAe=oE0C{67wtFm`vY6%cTaX(#m4Q<+gHr*#Qc4gq8Zygi+$Cj
zmZI<rg8&vCsvm1R^Ue19G*t(3Y_vatO+g=xlocywTqZ<OeJUO@p8|0a--7h`D(}fg
z+Cls+s-o!@q`C`=us4kysJ^hhUTsL%7kOoOzmFFmaI1)}SySG+5*9S>jK}N2KQY4m
zCC04swrH*&8>l<KAHKbYA?;7gwJ#1AhV}rfc}4WXTgIaQoA%{tfYu*#c8E1Z5Dkj!
z-mN?L051RZrk;f6<fY73#}MPt-|>@=mE<UlI9ugPQ8&`!!@P4eeb5_8I@l@mIYueF
zDe%Yycc!T9Sn`SJ4pjEE_re6RGdQ;_a{=u!Yizd7lj^`{KcjR;+^2bC_hFA5P0AC*
z@-n|;{oi5!?->90Z2z~0-%N@>YG35?&%u(^C;!s?C1jS^xUd(smKZv29x$G0Erb4g
z6haNRfdVmK(d`-Br@5zd@wVI7N>*ycy$;HEbaGqsQHut(8f46aN<-bTu?S0a8?01?
zRI#nU9C{*MXv|tqn*2R0`E!8LN<>L@x-n_}_b5D0bkdCCmMa1x;q!FbrxE1PE)kC9
zg;+a;O+X~1Czr+eUpLonNTB5q=bbNfH<=nS-QX5ksW~)Zz@NZ0r=;F#H8@tPf_wlr
zy<vV~Xl*?um{>THsM|z@IV^^{SrGuS(>E81|3>eaegH*4T-z;abh*a0%WMZX2>4Y+
zx9ZqNv?|dt^S!NR_xBLDs~cN(vo2QZ4tg1NPsg|_6U0h`ik*SPAe8nf&WMC}u!;&_
zCYLPGt(tpIk&*>9Z_k~K`Qk#%7AM}f=2fk*tfWUJD-dm6PHiiMT$cixdj%4$UQ%=P
zDkpGaa|C`8W>-i<#$Oh7=b)n0d^dWHeKHI?EnayF&r@S-VniU1f2E_7N}7+%jt_nW
z`f-DmyaIY)Qc24$7~Gn-TekQA(9j#153pxM6`5aRK+Aa>^WaD8J~Z~hH$@js{;`2g
zF}lbt4?|EJ;V;!Yf5<$cSfh;rh^L#3nAD6uEG!1|4;9wS-9?Fgnvhk^2cyC8IV*J(
zy+Fan+1)=ruhV%!jz?qh88ue?BM!HcvuF}^h*v37#`}+<=_9yF^wTrakLbfJP$+W~
z%{VWZZ7$FSc<v}rSQC*<k@w|{+3-HN2;^|KZd7?ZL7``1T>)V4i4zP+qoXTv3e}lY
z87L-Bx$5Ly075Dpt+KpRq$BUOyoz{fn01@jyND)EFK9V3=4@LBod+Df6cfzrc~ixI
z5h3ktY}__c_YrE*BtJ&7q^=Wsk|b{}5t+YBn<(kXYQ&u$VAJq&KCoo|&N_-!@|j>Q
z(#@Xw3`WL<ff4zGZVy;vbby;m1f&q_)$Rk17PG}NYR>O5%ejeWGU5x&KbN!~{4f+v
z04cxZoj_OoitMt?eo$_Zp|JmNQ6+;jgH*9LjPB$nc87DkRQL)N8hHE2Wc;PxpNt9H
zGJD8|ILyIr?4T+pD+7>uozLufd_m&PLRBnIywN&@)Sqp0wGR0%?4%O*WfDm2kIy>`
z8UFU?4-X;0zh4FTSkGZUp)%6IUYgiDVOwth*)IH2S5d*aSa0oac`Mp^7?rSUWw<lA
zrlO?7PV?6mW%6BK?N5<z@mq<Y*vPGB=dtwv#hSC1Ta8A<CWJ!5R5q`ZR-+F~wcvhg
z1+3iK$pWPP|D9M^7H;{e_RFnw>#L!vZq=(mZ{id&M9Nh<$L~6k#M|zes)x8+7m}Pf
z5fD|z+;70+2r?bBbzl(MoNM9N>;fEOcn_{Hw^I>aJyo^cIO+U~@lKZ%<emg*Vh?v0
zhA-FZsn_Y%x`+z7-<~Ylps2h@dQ8nI087Oac6t{})yLBZQ+0aG)5nb!nL?%DFD&yz
zpR`RL7HZk!bW^K$qf{V9HVcIEOP~A;a@*;K;RZhLwrhG?_J)O7fb@>c!f8xN2txo+
zk0su&J4NCBzY1ltn0Q%i;Uc_w%VZ%WQh<Ft=ryzPjCX;VS_On^@^GYI#r*%nN{Vm<
zm%JtCq)T5$3;Y27yU`u(P7&SU<YMw+-wCR2WB*A3_~l`$j}PL>7s%P$++eMqGD59D
zAz|&a5-(fGcb|PVde9!uj(LA>dw&>;`6I2RqG?|fPgc+EmXZ!3O1B`{_3almCN`jL
z@Qjrb{B1yCT&>WSV@_Hlv^dj_Rs@it05Geg-umSmF=wZh$k2VzTBSmaOv~4q7Q8PO
zSW9d|SY1o(8%F!?O*DzUQ{K^>>6Uud>S1tMwQ}Km9@)SV6}9>NH@)VXNUn;y!tF(f
zwBAhY9G2J@o_Az-=u{hR4QHQ&O=N+==)D65S4`N6q6i}Y<Y;O<V7`6$xT&xf{SN0%
z0g#Kg03gCwprTM~7cj!SskT;glK9QrgVMghig*xbJSA32xS>4A;i4HloDVB!{V)$!
zk}FRWRUQFE(T?~mh{k*2Scu6ngxH3&*N<TuXCVt<&jVkXeUN`{Lz!ZQS%MHW_BD;Y
za-GSnEU{$nB{~KbR}UUcZsJ3?{@UEu2Y%h!YOUgKsbby?QKPw2b1rOpSYUgW;0Nzd
zKVyqYJ_YbrGGuO>EC7yV?xLC2>V~g9B(=`sa4Si?9S#Fk+r&@OMPElic~GymFhyFp
zs7$U%zx!ovBEWw6>+9n`*J-CdJN&p{!T#u@GBTAxgRriwD9OCby_Vqzu=re?IVg+Y
zC&enpi_RM|YlBWAPOo4PK_8g~oCSc30u?Z0eRnGnD8!4hgxTSTvN`~(b0#s`>nH($
z!a&q*zcG-Zh^GI?0xUQAQQD%$XHI5tUh`XrhB9rFpt~QCKR58l*N=4GOT1p7qM|vh
zN94dW<PSEu;iKmW=j3h|yXUoq2#2{CiI!j~q${zvY~HkZdieirJ3Q2QMPWxg+%?!|
z=EZHOaxW-%3s*XSO1!#n(f)my9&H|-zJC~w#MI%|MktkVuaW>VQe9~1o4oU-kB7W+
zzHGhY<Ia~mDbM*bhx0`*ACfE)0v9>{yb%b>K@rviK8gq^Y8K(W`lH*>17at-aBHG8
z$u^5TB(#RN@G0h(?F3+R3T}b<pZq(i)LT7C{XMa(MdA~IzjAPEi^vAKQQ)o#nT_|<
zB``*y>Z*rNq}aNzO4-LB9l&jfqVYrh(e3h%VMz7vr~re*^64g#tIeVGY|K}P<>^Ap
zJMnSviAJn&gqweow<D4VpQ^q&w0iG|3K@K`r&j_%-Uy=fu~G-FK#pE7_vo5eclL(9
zLuPFlux2T|Eh4+1D7U_Joo-ZFk69x0(qyq&uInrH=$`ZIVdGUS)GTL^B}Y%VExgsD
z3R%Yp4^1)=t%3T>osEed`xfmLz~BNKG?ng9;E)X}{wLT6?K{~Z_A>4P3hV-|>6%73
z&nFQ2?ch#Ht_-Zzb4Ehk^o-$6pj`KYFWu6OafkhXaC;my{ut^UL->P_!QZ=vA^x5>
z5&T_it>&_KPT1_WMRx@Yr~66{VSgZ3{QxNrC>j}DPq2jE+Z}m`H8oMlzCTwBj%s7J
zeYm`~M&WYaN;&cY6C0b@0!BIbte&vVD|%AFu)5}&it*Q@fG6Y)U`OsAJfZ=dmEJcl
z2GCez(OI>UBC+v~KAJT?osh0io*SC?5i$qxAQzKzHof~fi4%C{GeVW)`+utCxIg@X
zEMRc{>ZHa|CiVPvix%<ZQK@Xr@19$fj+G2%CMu0uix<z#rP7-{Z-9T&rx^LbgZ^))
z|GSD`e_o8g6MZu`&3Q^*7(W?3e|p^6gx8bpY)Y)ivJ8R(ZD-YPLQqTt>!D?xrJjB*
ztws?b?xfl^S9&c!ptM3?0$#th(TzeYEuATuv5!w?Sq|GtEh7d#O`J)>M=z}+1qxq`
zuV?ctoh_x(CpSEPIQisJE$YYQZ3Fw;>E)GLWNAo#(kD-OlwM(sKPcUkl5D22<twR(
zmJ*#BXC)Uv!a{tB<)cHQZ8sms4%h)cGw*hnYQ^c3S3YvMHs~zP7T4OFXJMGh^da2=
zvR76b{-h@*U)rK*F6uLEByNHy-A=7j<SqEM%y#1`FaZY4rC2=ts-3<tf&(NTZ(FG=
zO(|`KPL2+AA+v)Lp(X+xT^(NR#+{etGWkvK4;whSw2IFSt%7SjRj0&MK9kXt`l>%s
z*6P}l_Eax%ymP(EHpyK1xk83EUkC~M5Oc>2Pu$2>wp}cS%8O=f`OSntI8FG$=5f}N
z&&$U!+=n-pTT5=>BQa2b28NMUEIFA7h1YIviE2^`Obj)dk+Wc#+#`VRm&^2d-6yj>
zoYYo21<P^-!;~Px6HQ(xbL<U!L3rqtM}o*FAY5kZY-)^O0tp2?&QSV-r^YC>3}Pa-
z^fo2skUV9uwJiN{FDZ1E4`{1a@)qcJfQT>Y(}cgslTA$8``<k&$tNj9_W8l?)Eo(Q
zr@G`v03w%Xh98XkLr)j#U>If-Dachg-6t;-r)<epY`jLdZ5bGrrzZYbdQwIHiq*Rv
zGFx$Xl?<L%w)<7P#mnR!qg<CyybX~<VgLD!u9`Nr!_SEE#O5mdiqoT9<D~{$kD2CT
z^lS15Z3`!dI3$=9Z6Iui(^8+0A0V@tBz8_WCKcbe5+9C$l|fPCS26b<nSe)z!)PmC
zGxy6ZqfQDQJ!C?_Q`6GTTSEOKfg7>5KF$4tK<#nntvXOW+}l}>jMp{l{KLJM_*xf{
zp*gR48~G4D=Phg(o!@32YHG+^LlUvN6dEfb?-wR^E8$RcjX!IiOKkt~S$sOp{nc!y
zHS;MSUy?1@W7!R2_A33$#VB?f5+j&Q^j@=h>bK_I78Kb6&EMEAuLpe7alSo11F;5{
zw5tY!bSx$q025H11HT-&{U<O6OyDNez%9C$oy(Y$@C{&E-TQW;H4>_|miEY|`3XDI
z-$v|}xVwA?d4W1`O1%j9ChqQ^DC-w~wl)c9CgIZ?!-#d?&tr=6f+D<tW^X<g48mD2
z55M2A-SZ+S1`M`5EUD;42~q!&;kV<CX^?y)IYp$`nCHY_qIAoQLa@(z;i0|D5sh1G
zj=H-KOWD@0F2%cc`m~OB%E1=ZAkudF&M7_1nNf_;wu&+#WVft0&RT0r_&>sSlRfGE
zW4b7uo9Rf8dGXMr*y?@2gcebo^b!I$9?$mTKsE8=$3Q~#Y=s}hcS#WGEbS#Hn_nWx
zvNcG+%Tq46Js0fD1?716Yu=p;LaPU{MY*7;F#37Ra=}P0SeXmjey}|y%1U%<MlMZs
zjZHoE?eYuLovJ`;<<E;uF$M1O&oqYYhtL)6PW@IstZ{ne;ciBV#SVz><`Y0mvNz-j
z^g;N!fLO+42rg&jkn7eu!qLQFp>^BpBeRg_wiXHA`-Yxax+pl<#+e4bV47r~;behD
zQ+bNnKY%LIf`PUhCv$QaQLOF8GeTBsKSxR1jp)^;_7JiYH%3U7^CjkVZl?x)rI0;B
z+d6xRBgaJmH9l+%A<-!v^)^3&EE%`mM*~$Fk1roGx2Lc|B7h_NRZus*!zUCUI0+)`
z6~7?Kt2BP8#5jsoA)cg!vsAK9QY<-lP9{vxd^{T<Io}L`vs|#i`UtDyee;Xl9xWZ<
zn?6c(a6tiR%d!FK!gPhwU%`8{?`X#<e5Pi(oEO&O-vIvRP&3$Bu5Ir<4PfA|{%u?+
zxM`_+EwHc<J;ZTa<<35ue`7znIJmezQF^jUdjg38@|a4gplhqNYyQRA1>59sHrV>0
zu@J_h_ay6gnm#p1zKg~w`i}JaG}X~b{)33qjB?SR31;y%hY$GVPgW{HY-Wo|ih+Y_
zdSlj<$Kq&+X4+Y>fL=bW5E2AC4pN<7LM6XPFk8!MQp-aAWb=y>50EGMRf8z`mHhmN
zO8#^5^0V~YnXZ_tvkL^+d?8o0Qa2-`Aayt2;yr89j6!R1iF{;fl*~7P9e=$a33F~{
zIs|-_;0XHT8gOyVY`VqW5creMEk=IBGRED5(o@1_F)>kXx)OB?zn|mx{MPU;AC66G
z#qRhYRFc#wI{I>44fk#w!{LcxQ9mL$zj{(-bVlH)t+R`6Gl?SMHz4@x@jQ$5q0QN(
zJU&A&lhLJzUsojdUJJa@<E7#;NB$D#%3aVdwiE)sYC0^ya;cw}$iO^zad`))smG~r
zkEds5k0?y<w;s(thSiYXDq>GB)lTP;+3AzZ*C{U|Ya;Y5<%5w~$y)Fc2uw+SX;i3h
z-OTzrX_dtLl(J+5UmYcM$KGFxq*_ZM?ed+#*B?<V-S8*Ppd3R_XZA6m-26}21_ySE
z-f6YbCZ~$nvXW3nbmlt(Ell@|Tx|B@x^E6W=T_6v4bBD1TG@!>dZDkUZb(lqaXMue
ztIov#9w+mw1<alkJxh0jz9;0~XR-ku9JV^q;>>fLL~^&xY3Mfs3X+}cJ^YkxO|y$l
zZBmb@J!;kD)@;)c)7B&$_ZvO8sQ)L-j6gVYC`Zwr@G8$UT;@5TIG}BE)C%!}7i0nm
z3J#Rue?r3;`XE?)chwBa>XeuH91<IX-gHQGjW%v2{wRCbP!XBO2rG3ul>W!9n?Sy!
z+nCz7Q{J1pN$T#L!%__a&Cb~$iK!&U`|?-?2Z88#dX=2|dBsFL^va{mQCj2z-2EPH
zr_~c09`1;c@p~u#@(}1l;|IsNj)(e7h4|o7Nb<@%r5rWl9c1#BQP#VZyug4CIz8s+
zdq1Gt__P;>3=>n;m5|`kB6H+GeuE=gYO#of2x$1#uM3eB&g*9|c`lyB^Y>$?)V@v$
zuG2?@@b$Ekb^Z+NoViwETNbm7Y%&<36NE2^_x3^EPU~q8D<4GQ?k^W?$^~UDqz(!T
zhVp{}$srJvi(Q!uuFVCza>1>+U~ewCJs0fD1-)EwcP==P3x-$(zdJ>_U`Z}mmJ3F5
z!OC1v-dOoHROf=VxuBg3qM{e%oskR9^n=#ulma5I5B(SwRNzr6mscK{`K`6(g6+9r
zM=rQ57rZMMT#*Z|%mvrxf?c`b)?BbR7u+5MomH}})NO2bQ;E9_gf_C`90n#mkm<yo
z-|5~<FV%6TPj2~*NPO6m`Yp8KBd5xCr-t-Qz{eN4WQ8p921^}j`ny<ZSA1%U<4oga
zGs5Kb826guQPb|JUn|pv?YI@*y!eOyN$@x6ojI^$?o5n;b77}eZQUXf0ALMDFkP<?
z`6>@7{Bs*VYpvv|oR)2^LWNG(kWitGgp}K|lBW}t{E!Cmn!mU7Km#LZy;&}4U9Awr
z+eE!E&mKQ^dd7#ia>vv8M#LVsXXzpLRJ>*56v<JxHCpquwRjW5a8%-erjVm#Dgw7T
zRMLM`2bIeKQkO3NGCC;^`goMMjlQ5u=4|DG3bI`;L?&Wfca>y})x1CV3^0rgF^-TO
z4`9yIbWPFZIrq!#XxP~(DuG<)*j9a73tF+=<kQp2)v8zup`5A3JDh@Nr;C4?7+@v8
zDMX|8*U;4B&63ulPK_;(%RSVO4kruI(usO!FHJT{D1Fr+@3n8A<~-}3I>niMI|kJp
zNYz1J?^Xzrt7mo$OMON#5_gsgamMsLKx9B?J4)R|#lK9*JiIf^g&BS@aVViA1w7Dy
z8HtamhIC;?tVU<jT09PRquzNX=5*DI7Hi)yJcAX)CTXg;s7ed@q&5Th51qb}|ApXS
z-eMIpad9hVcoK0o8cY?22KRg3N|~*~`*gPE>r`l`aj{Fy!Q}dr7IKFr-b6<8dZBBX
z8F0=lbVkY*Ps-A=K3FZ+$uO{nKhe2&juj2eGt=eE;IhoF)H5+7Xe0}7qBmFlPSpAi
zvTE_JTIr<jV*kM!A?$BYt<dnASVa_8Pzb6<G)E${oYdVK=3a@M@ru(qZ##lwbxiU~
z0HZy1ZxD4xJbh1_!pdvy>0cAup6cZDpslzd;@xp~>Q}^ttfd>fQ|pKieXh4X^(X=F
zD7l77r=&WXkckIu48OL@EW^vptpe|VpDT%-(u^E;!@cVcM)s80QW&r4N8SKD_#2-q
zNYQ6hDi`(94PLbf>zP|h!pFArW9VA3KX4kmTsV5a6H(rl00Ghie@HaBTe`(QHXZb8
z?v#3VcpJ{=IGx54>3t9K(!pjN5-ru-;<2b;v2f*Wt>W`!3wWu%W><3rckW8onROIx
zY^S^=b1%t;UWzUnG_2iKM~lAbz*_2G$i9@x!1phDsRL1DdKfA|Ew^jv%GaeQj}*rS
zqL>|vpoK_VKKp8bT3SXx*>WS?s_acVrea&4X>k;fWyB0f7JeAMG;Kf^Ynnr#H**>^
zjp_HtAOy%x!6uo%o57j=2<0j*D_Of#*Y)*HLeFa0-+Q!a^6036HqE!VNC{dWMkGof
z>xjTL^&*z^O+SK>saR2J@y^t8N@u$1Hfh`UVk@`mPbky3Y8lb`7yvE;gve9HRFUM&
z$_c9EE8SFLj7sFm%ba0G!di+w!*^ot@1%jK+)b;V2x93KM8ure>zy~Ac^y6FQm1za
zJ&QM7ryHeJQI49kOtS6<gSL2nRWSgb3c!d`&spi%?@-~XNaXkx+1eu-f!Zifo^jbw
z%6?@BN4Y>Rm%Y!%#*S-g)V&!OH8)kDvWv3$msPPOs{U~HMxC>f=}j&1-ujVreK6c|
zAIp(#j)zc3-Sz>rCyHK7O9|bu)5A|7Mhw07Vchkv*0|*niT1^Dc>ZPC1^IH+%FfoH
z8$vmh3cAQC?Dj8@(hV!0Wa|pDA$9YE?u;_Ycar8?F8Q!z0Em)ot*NU3M?FUn6~Rhs
z-A>T0LlI?iinEcUL?F*Q<0!p$)(<lENq+b#cWza1>8x*gaTtM0h<EO3awk|<OU~U|
zvoBq=s}UoP7U9}L<oYay0ftT)nzb4pP<IGd(B9?G1sv(mIAge%lCA$03Nba(cz0?W
zf8i-T`Qe|>U%QIy0DHkZ-uvGX15zn%#Z@_y@CR<;COXz6(@?9<NB%KdC%BCmGr^h&
z#7PWwRa2L87U^<~S{bhI5GXfWlWVICyXY3e=%)q#&79TL74n`~x(s#d_mW_15Cro^
zAmhxD|B%eJJ}1r+a_!(@gHGgXsMsv>Zf#OqK`EW;dWkTd)=LsDPTKpg(fcL(zm-IJ
zdSG8sdOO;D?QP@)Gk99bL0nKjBZBF~Tk<BwO3vj%gDV;7tDekI0|e{ZizA4n55d9`
zS}2N61lPtUDP=SFa(_a=klcevfkx+#jkws07pxGZjk{c_uWf-WpwK%L9@ECew1&2#
zh+A8tCTV+0cVQ&tSAYF4knDi;*4IkU;TlON1XR{C2Jhk{1uDO@G$I4?1%6^$nPf5|
z41^Yfu4Ty;0NYxRhdTXG5f%PUsTL8hRNLlP%R$u#`D|k+0Uc@Eib3)zCE)EkLJq!7
zf#fGW{NDS8iG)^sDehcRV(5G6T^|2vY6nb+_WtL<3Qqo*3Zx%-6#(ke8)v!38*W%&
z;lDox-@IV?A!2Tsy_DcH%PV_6<Kcb#K0p1|+Hxjg&0iM%fx)%|&IhzYOzqHii8){>
z#K_VZYN2kJ93N(f{qtMunYPbQ#53(11asbzuj(|?&urllrf^p_;@z+?)@$Y4RYV{o
zTtZht-Z@9Ju~6u2cOw2}-)sIFO5Lg!_<2^(_zXH-Tn6EP7JtZr|Jl!6m*;<W5p6WO
zrw4v`T6}-VHxiAA!ua>Oln=iL`F?7hp@ac5fS&l9Ea++E&vX-7-$ZA->pS47?httM
zHX-FzuFKijQ(H@nT)7~?AO6A~ff>9&46}Qt*pk4BEO6+}yiL}5sa!+!=!?(c$VA&Z
z=K$A0><zDxn(h?giZ5gFK09wfw6l_zkYugdZq}BFv$toK&?mAf9cw5q=S63^>=!6;
zfL#)_?f*AH19YDf5uMK~ZWV;&E?q{QV8|xCnw4=d@g;BR&-*kZL@p(XXun~YOJ3-f
z2K<M<&+WC66OJI8|3(*GCS|I+Q`J<AJVym(u^J=$OLsN_Cz$7f_K{8;tbCCmbE3`V
z1L}7E{llXw$x3UIfB(=*85)oidC2|4+)N|SkhA?#VLj+-1JlHC`^avDzZnF^fskJ_
zeZu`iEPZ|c1;q2QnpM)YwK#(!Q_M&oW0UmOxaFSgyQ%GE@@}f{VSr$v(x*Ehi1hhq
zG(EX6xOrGbA7X*jv%6mA`AkX#-5PTD@aKnecMs|PMWM_W$yx7wkQsbi)=QD1T<m48
zqjzncdZb#ZHGGg*CO?RMOVC5&|4!NC-kMtn{IfTlxs437oaJJ}1Y&1|b!*KlaxmY=
zx7=$LS+`bdgxrsXGv$P-sY(RP*HKI6={J~>&vFl9sPy}fKn%P|2j8wBu%Un0xQ)mN
zYM!+kUVyLU{iwIL^dPa{%km34vQ}$G-n6zHDX%3@=h{@_o#k@oWKNMRpJl!w347Yp
zX7LU1cCA&(?{-E&C6Zzu#+qDIBPrfj_7ySJdZ_uiI36XX|A!*K5LDpECe9w>kSYfp
z;?KdY#SEn{ZqzPCreTh7C6p)d2stIX4KcT3B})$rUD#NlR=b4R5j)08e5h3u#-YR}
z%|Rmw;(v>ij0ut}s#wiC*Q3vF^pf1=%jhJ1?cj$h?$V#LZ5zbtmfq>c?=0l(?}ej7
zJtCjsZ5;QUUGT$JIwUhp*U_c%l0OSbF|qg}`&lXv&x|lNMVvMOaxp(G-^v1V^zcst
z<SFUNk!+J6$V;W*fPL{(^15SHh?;`ekngZ3^+n)^1dxkKnzLNm@~cpf4M7Fds37~Q
zwZ~mPM+P07*Z#d=KqCZv3%|&TmCT}6v}B#7G9qD|`H4G|K{QJ4O`1_QcZ`yNW^UUi
zmw_Ml(l6%8O!98|F|!$0Zc#z#M?9X7;#gU6wa%;72W=)x1g|Ez(XE9hU1oU37*A^Z
z>;3!PUP(2;$PJ0BqC$E(ZQK)4bVA|gNaqRbCTz4HuaqEXW^__RrIpyFaH(y@(Covw
z0IR(_nr;Csig(v6{VOF~mIqfb^H?zF*|mar{JRg?e7(-nRyrwLaFf-rJ-cqY1=5ob
z6DyALi1+g%8rQ6TUjZKJxqn&0txUy)F5RENqRfi3T$+d4mt2_&n$_{jD>8TrM{%Wh
z)GFPg(gVLDb2B3mUf26Y5DhwfSGRBf-6G%9HQ+QN3+$c<!5MjN%pKnWSK=0S(7#^N
z8f&&(AI)rKxBBxe2bSM=B#r(=$I`8^fm^~{m`hDE&+$pWlk!&L7RqMZtF1oUt?)Rb
zo**0k9s;?;%1_BQ_+YI}EAxrG;p3;0O))8$%jYei*sM6SDE(5dycae?=g>;+5RM|4
zM`=;GCVn#Y{yfIrdt~b}0cLl0>hAn%wp-Vgep0vcJ94&k1n~{~0Mw|RxD~q#`gCvw
z0dQn)KN{C5e;Adw1G}a<FQbH)-GN4q%BNn?Gk_4-nNOj>*|)V3|My?+$3i5)Dcuz5
zr4h;xuIgYpn!I!8v&+7U?nU&n)8LvSR`NS^ahm&WL6gZxj56F>vKkKHaq$+Iqk3~1
zg|*bF{m2o(xx|3?fJtcL$dYsH{qGwZyZOk>%&go52PvGEVpG*S=quc3Ew>4xyNBJH
z<uQU{&*ETM8G_Q5)U)B|0WA-gKncWQgNYB2eC%QvZJkYghMMc?a+OS)oI6W&Ox)ta
z!NS_VC`)4$_a1_=GTy|ozbt1<fNM&BtQwW%KA4LuUC~#HBw6<a7l&QYmsaXzty%Y}
zJd$u1me+83p85>Y0r;mzn>;dI!V&}*=eb$)V-S!7nKfx4KIfjnjPpx(WYH2Ch&x3S
z<KD-UL6seTAGruR&+(^_ZM-PwYXQ1;s8Bf<R*8#?-E>q6G7ECX$HTKLrS0L~gYOo}
zAcPs`L|RLOF?V($r_!SYt>n9K)*LJ=`A~in+Np^0PD*n+ef7@x?<y6wJ|8_R4w>*5
zq{9~^<PzU!uE%%e<VEa`-O{G$-}lPNZ5J$RXYN%@nf#imO*n8KyNPkYcCkuF?+y1o
z7H35pqoQ$$U`7(m(Ge&VY^R*}_#rtH+$uU1RGv<^$+R0vhf*{33r+J?!h9322=b+b
zFx?B0$tE|80L5)k(RBk)4bw7xjp=y^d*nK!mzI!Z6NkL3K?K<vT+^U(Y{DYKmJ&R+
zq4o|xV;wSUKX^JqX@a5l)UW-RGul&P7I5f^;muE~gt~*3VD6+{AV7L6dd!ktkiVh4
zLX#vh%X5}`Pvf*xkaeECP${1+;Yq%7&$ro66ls$B5_%yo+(R3mlN!pb#mB-G@h!<5
zhRhxTp`jigrHc}xeeXE6H?D-PfYwKt*&qMU0nBU-y`s%7>Ab>XB@rKCW^Vx~IMxS|
ziom2+oG6-~-_}?7f}MszM5M)(HmaXuvLS097e6i7Yk05u$VQ%4duL<GPIy(pm)`%r
zU1W4c18WV>n&y8^Jov;gw72j<=T_3W#>7r64(uDSQa6E0Ox^{OoKV>q_mRs>WZr6)
zSMfuxewi%2{T3|_Z_#rf__u;RFA1Y12TP4^Af%5HqYNOd%HpMb2}?5LGXm186Yg_#
zVt4X5iS?C$YL$myObny<BiW|{_%aWwfmu-|bM*z$lJz%x&s#+y-y76x-f#HuOOicn
zx`HQ4rW%+R&_|E=gIqpjX6Ed)ohsXzQ{>&-u0yT%mym0Rk@^DXVI~SWMphd4*B2$9
zkz@M3Om~KqAm&+o+OG1R_!b*U1u`o&Z=gGixm^7oDN~8Q4OR+nBcem^6asPw{<y$9
z?zdTzM=ZJgWw!v6&>opXWLC`1rT@G2%O~7Xa@IZLZ)LBAt&>^G0%ghZJ;ie1|9ve3
zGIU7aC(<FGH*^U08b%5^-YHm<hedMvo2mnms%erY!KjX6RA;#$*~~AQhYstuAMGUk
z6aJX@8}E6}B6F@`p*h_tS{uO9F-?Bl(+F?rCh#mGxITiQK{%mKQ4NvfDfw$Xo`yfW
z01WJ;;&ME#8UDa3!N)2R>q$LGoL|9OKS;0j+Qmt&B!-&hSkpY5!N@$JF<(;8Z3j32
zS1zg1x!jiRVa_j}Sar@|)^af-Ni^J);(pQ%;!0^YcagGAPP$bJfn)eVra1sy)VJkV
z!s`zrwNr+n1QF_@y2}+1ojDPENN;IYH-_7)`yhMZ`YS)9k{PK|5Y8WCu9Q5^365zt
znQ2SUIH(yp4?xJ$K%@IzB^jKH*&R<KOzwy~Un}W}B0&_v#ebD`N5dg+@%#YNyA)BV
zgmaqHQeE#XsG8<{qY~$I5gpx-K_Efq)nv9G{%&e?E-f=;S>3zzBi-q-Ufrp+`<Wnb
zS-VddCC`Dbv({`nlxo|dc+T0LiP5%Czsqd8GiE5s)DJ=zlIR$c6^c$o`w22UQ|jkm
zKa)DV&lCniI)u8l#9**l4Bv{R&e7$u)5G8IGeX{;I+5{(dg^A#k9QJf(dn~+ByYq`
z2#18GmHPlD(i<a*hBQD0aP0iC{?&v$UobbP7&ZfAq;Nf!y%}|uw(BB%UjZoHDSFd@
z?o1-3#qJdT#Rl<@@vZQ;LecY^D2+R}LHU)0!Bu7cmlU9tR^~(fX~Ycp0bT;N-a`ZX
zV5aVoTs&*StA?C_-(yZevsUsq1RC8!yhOdG@@z8;Zfn!fMU%+}@U^M*4D^|2Hu+jC
zL-GY;W|SvcP;b;5h@VCgLd?O<K1Uha2q_ty_oZKnX_-N<zhA{ILYHNJ%AY_U=kp5b
zrNZXO!=7#N{ezj~AYv7TVg(v3YQ#H&MgMWHV9}gV2Rn#{CUU7Cp@>XQ<}}PP0Ba@8
zGq{It3GVS4ZPi5+2!xsNj=Liu%NG-)!1QwjX97&u5#jd_U`s+67!AA3|9E6DI)$bw
z=Dts7OcYqlCY@W3^=aiEqb01=07;_A%F8gLT?P@{>n^P&+9~lVRk3@y*Qm{q$=1r0
z@iDrCJX1-{AktdBRF|fv+qUYui<WjtMx*1;atS7v^%?FZUst-|u583yjWEXvN9Of7
z4;-*JygJ-Y7Yi1E_{QY8Xy+K6mOvkbz6c?WT_xLX^)OZ&p*4vy%^YQF)rcCcyyeM8
zciwhcEvXy>NOodZkvE)tzDP9F^DL$FxSU_hHt=7H`P>a?;9qe!5LC?+${Z_lar530
z!GEThRRQk_a*eKMC`PU{yH^F6E0~Gy)NlA3&fGv0J?LQWa0+?Ic9sFbM`3L|JyC&G
zG#bAY(!0=p5vRL)oywTF2Hn!f1a#2^R^jySRm{107u>xEi$mh6jEW|2q3wXy7XgS_
zqwV~7e;s69IJKyNt36Iu0{xfd=t0_&$%IO;uMqQ5QCD1NPAh4zt1u*|GhH5f+YYv_
z+-YUb(zWD9lqD4s3GrUOF<zrO1Kif*8jS@M7*Pvr&`;c-RCyz%6TZ|e>Rt-@WR|o?
z`Ym`h*}}{)6nO_L`_9no5h>=2Ie8oAjBqY17R5Z@Jl5oh_dkfAxj;jS2-XAiH^0a!
z5Qd|$y-tl|)fIUk%;4FosiZNnxd>sUNaV2ii9<~7`#myGEx$4bD|1($neDvh4MbT_
z6^J(RIy$)!c&(y<7)tt+qj!WNPv31dbgMRTD`_gfx<b0<YF^h|C7OL{yVsRK%cf$&
zo}uHPx=I56Hg%#UW`8@;ay3d1WodL<z1v%jFDFr!*Vs0Yg?B=OiLD_P`)&K1IT%z6
zRxl6qDCAA1T+ga}yIY6<x3RnR)T`jnf4<J#Z^|qbcZB)(B%#c+uM*|I4nrL9n0~Eb
zgs_*d@|F3gL<J|m;gZ}7RU%C63^Ka$Qw!bFQ|*F@TWv0CjxX+|2}#JTV`pHs2&+Vy
zb<A|${ueqz^$*c1LlhB_S9gIxISU(C?gLx@k)E@!1}Gq;E>%Y)=-(wx_=OU_+a=2N
zQ~v3X(0dLk1+kI{0?i=mk)tsJR0~Kl=w+m!Kq#g`*&}QD@?RZtvCD_aH9sO$rp^cv
z^5o0cyf*L8WW#I59>t}8u+NXp>|*xJJB1QKQE+7kVeslhuljXSLe43}zr9UHAdgEk
zuMtE6zLd$!^@GM#Z8GS`zkD9)caUyp`*9WhFjr%tOdn8SwQnEX!@G$&bQCm&CD347
z))M16A8_KOF;QjS7=sLCc0_T&e{vZ|glkSm>?utdM_7-SwBCsGB?zZKX7qvRJGYvT
zO?V6gnC~~Hrxs$KZ~!IFGRzNOyJwd5^&T}r@b#xqWZ7ViuJaHnwbGoG+;8?xlXTJz
zO>s-B*hQZC64jTDxN_>P=gsX;(Kf4UbXzKgJU|scUHDzJ#rj7XeFjm9JoUup3wZ?7
z^0w{lZFKgF;*ppcl8&us&ky#G%IRCx>~4++zIWcX$L(&!LKN<IY6fmTL=eGNEA_6W
zZ=dx^jy>*eDin_yF`f@O&&#O(AoV{$CQyC<gOo?Avf!x+kE!(+M^&I==D{$=ywlZ;
zh+l&dN9`4SC!3&6(eUs?uNxcc9tnYUK_!vxL>lP?v#BLm02Rb>6||T*t&KT|CO%wf
z-8P**INkjx0c%nncrn&qF;eV#NR9QChJH+67^ZXwmat5zF)(VXw|galD8?n$iv%pv
zw)aRL4E4F%iJH_cRM>JaHOpc<t7H@(8Cqff&~BfFQ2;G0{gfn5R{3it#2-g6u8hsH
zpo1kK%4FFzVzj!Rhuq}if-Sp@q`1>5b-<2D4x{XgGp_Xc=V2IY;<Knr>pU8DY1=&;
zW7XdoVRHgI=?)5@3M^`uQhCjj*5Y0^Fvvx=KZLG%Ibu|P`mu$Sl<gf7eXo(C4Q!1b
zhHwjNY)Xk1J|7w*=Dfq(VKXP98Vm^_dkckxk+GVL=(ZZ}35ZD-V+MmO#z2_nJ@8#x
z4U~f8=(hIC&@GgLjp%{gqT6~4*}!Wu>yW~i@c%Qa=6WUb1x}W}`yDW1D->OPSke*O
zi8ndY&*Ukmcz(80@@x{`S0>Sy5&Cn<UK3;h<ty{dd`WkhZi$3am34_bdbCbUUla0V
zT8iXPJr-`?49h95&bh@_S)+3S|I2r+W&!qiOKRpFpq7P*in?ubF;nPIyDBw3B8MDT
zcum@vqGef#wqPCVLv`ti6}k}h{zANGE&gAU5nSLD!BE0cXHRY+#t)0tyf^nml4Pb}
z3s@T-<S*T>U!1oovkFGVnCb7EX2o{-8JJiz3vYVE$@g)~@C{uC-4tBfYR7{O8?1v4
z7}*-@Fh$luz5j};xPhCY#rh$W^B0v%LbI-!&$DtO{>z-gjkpNB4$g96$QyEe)bziC
z(z{=T4rnB#4|@7vB14rxkjP7J6s9J78LgDE{85>caC)DjSmpxFq_xV?C*_VueDjel
zFMyQAW=*sjZ0G<{ne85+s?4j>3)9=E?+k1B#kFIxG5Jn?`fDuEi`MEAdC&Ya3{Hs6
zs<yq6<~JIhcdXT?)F$6+u8Jxp5goU&w)$;+Tahc8o;XZ$Vr>QPW};+k+40`Sm#pM{
zT$4~^zeSyrL+Z7Oqs|toQy%vBx3e7t$mvxpKi>R3N=WDl2U?bt@P;Tp*ArcZyb>&P
znm)vsL(9$yUFMo_l8SDu#1&NRA6Q~u!W^QU%Cd6>fWcr2f{?D%$)v{JN^_|)&Al;V
zUW`q1GIqK=ffKO)V|}=nYkQ8*LJZc9=P*iCvPXnDhC)r06Lt##gAMRj5!CLat@tGU
zu@>*A(P-O^m7(TG#L>Hp$ii$87>w^W3c?%cKe)pjeJ3_wCU4BalX~qTcJFFcw#oZ;
zMLm+&oUfdhm@zfJ>d?M7$>Vm*nHfvZKojN6^u(Xp);aq*Q(8{Ja%!eV_6Rvl-J;md
z@hSIP|Gk!!!TzlxpYdxlF{?4);=e}Vrdf8C;oJk2i;<U#r7}Gb4GW)S!ZjcBE-PoH
zHVXlmC!GEVj(UvT^$9pT`nFb(&H4eEB&&Y2Q58fv*gIYY;z}T*Vjxa6(!>AxxY54d
zjmS!`B2m&EKCHK#UhlG2*PUpso_+#Jv#AU}UiGc=3w_hgUT&v18~TbshV>z_@HKsW
zBZQu0;2#Nm$#szY)8sD_(P6$N*@qe;m-&$g_409-{}FZS=NKR&a)lpBaHSvQxJdB1
zHkZ<s3vSH?<s_7U<lSyU670(by<Bj&AB^_YtLCKl*yQ~j5%<U?9^A9sDg$R9a-*_T
z@070yn68R<_rP>L#F8&GD(1p-J!6Qh26?*~TyGDENLx`fDA(LA_XvyibyiNVmTw@y
z*>vF5@*K)#l{>gvek<>4nVyB%9l5JzbENuL%R)*1f8H*?!?jR!2E6OVf<!OX>$Li>
zMr(AjanVHtrzCnUzJLnSRn*=EfqKWDy5HCGh}Jx3CH@K_hI1?i-^-lBHO0p5u)}Y2
zssW7gXNoX0;oo|4<GBZ<(?KQj+)9ad_(eWtk?e3&l{waFNOn=?MSwo)M)j5t?bWo(
z=Ni-3L2N4abAl_rXzq$H`jIQXXj#3r`fK_|g(-zUkJiQ7?~!Z0>~&xCjO=ya0-5%J
z-!o+Ik7mpM)fK2ua%pe`2T)t5WP}kd=7X7P#Su!GVC=urXHkG+K+*KsV&iPN4lX_M
zZ}O`;F|8COkL)CrWVSbkd(cT^&~r?@z<<oD-@*TH(Nod;;^$_5L`A3hW)zRF3pF1>
z4Fdh$dXvfY7b1o-)MDF$>rJ}sgYMKll$7);(%T7BevV0(J=Lvuo<X{jJ8cW*hMLDx
z{|ZfCA?4k|YBSxz<QP=OTTtosM{hen^%=!zGbK?)bT9u2aOaZ7p0r#R*GeADO!@cp
zhTc(;vp9utOBefRlirvWV<}W;-%Ib5)9%n8UWsK=pUQMppln1r(1EjceE%iyb~Yk>
zh`JL%tGj8B9-5BoRdZ0`El@<HXfK0B&)53#K8OgJyIR2|^G|A|I?3JWHgbfe1$Kqp
zP|L%aqvYuDrN}zwoqsF}DNQ33C)ii~T|!P!$lFE|;bnv~H^YB(5X$Ci=>><%28oB~
zV{o-oFZ3sM%8gXZm05L{_pwKfQjeT@MyqnK;3aXYfx1ielyrHuzVf*Y`83<oTzG93
zS#N3>ldeeV2m+AElIAyK?!9mbAzN7oW~{{+tpXNA@=kRou0@rcYt`*@kEQ?ZbQLGM
zYVlR241y;_Sl~b7E})Atc-L3f-4$NmOA%N9G98nY&9@fMQ3;Znnl;a5r^dU_gasLT
zm!nlllU<beZXet?m>G=(QmilsN>(aQ@z&m^vhwZPv!}gpQbT3|Xuc6EfX)+{7rBwi
zm$56sARZ^$Oga6=Q2PWa_X6iKmV?D(A;eKDRf6n7nVXRtO><t%{D8W=**_PngenbI
zaSFRk+RogJsV>2Bhz^y;$$VORWZ0$j9Nr9Ii>@4hbeVM`w+x`ql)aBAuu19-8lWNR
z_ZJ9K8A@N)Eobkd{;|6?Lc|1_(}-|3WU5V626-VZ1>%TI54ACRHR3D=<uQefv5nW6
zCO$3#mgIMz|6S;RH}RV}`VEuVV1D7g<W4hlqaVH5|2+!}_nEMmxu>F8{_lK#k)C93
zm&Dio$T$4oZ}_czQ(E~@aumMFpI`VD9?FN*b+Z5aIezi$kvYx(w)xG>_CM|vbK6je
zL#Hrg#&baId*qdhZqo|8GtZhj{9OL{f)#wqGribgG6kc@eYDomy~`y3-LxMhzv!20
zCpq&Y(sJVN4qLooumhcE(0ogeNuPK4Q2S+|n!;hR>cSB%V}u33s(DFEzwOja=t?vc
zg*SDq9af9s>s*CyLlN1Wh9ciT7+RUmhzVWTb~o|>@lUobdVyNBcJb<B#oQ6@MTKX&
z<y+5o%ON_Rh&x+Eh9suc-O0V~g@ug-dG3N6tzK)*MMqm}rXHQxQ8FvhSJHCCL+s|k
zS=ccsy~NpisWE+}cI1g`Iaoaf&BBuAjz;&)h<i~v&v~7w^Gr1H@;?0Ns)<r7mj0fY
zp^V}c_lE1jy$H@0xo4N-xHFpQBNvx>SQ#SMB9m(%e8Z&h<9H|<WBqKyC6`*OACp$o
z@q-4VmpNNExl>Eri%M#Go4;JM@sdlA(8R=JVNDY{J?frSls^C9!TwJF9pZGgr`X@_
z^DFMuQum@#{9JcMYu;!+_=v|SoB`#tJL@q{wkuOgIA1?%==wd`^fBu<g7q8La#a5M
z4Pcr<masDHuamC+Io~;)bAEL(3tl{;<p{m^^%uSQ57~s~e$D(TGOK@wQnHth7*c;4
z6{u_jMo&SY%eofFqD(@bei5~nQ@(se%VBx_OE;8cz9NH`QjV6&FZ3UjFUuSml)w1@
zrF=v&t%2?#_WTmNBAF#1VSl~2T`SAX8}eO}xoXIFQRX7PJN)%-sMP&YncW`;?w1lx
zFUh8t>33Q7JEGqa|GQ@d?~>43-Q?Gw*gtyS@i-Jo55ImPlfAmI3L6~hL;rY<euQW7
zxSUBfK*L4}`7Woj`cQbb^vfTeUw-L-T7E6F&K=3Z+E8-=>TtUE^XE_Y|NdbAH#GG$
z%n<ZrsHF*AI7*y}23&W;*Kw72rKH$B4YTD}l(^pGH&F2k@JS;Z4t1|ey<3-R8r?@L
zgaH&9Z-lue5Y47mL-Xx?LUg)rs+es)U-Um`n9ryEPt{Ht?sf4g8f5x>@jmKIiw2q4
z#zu82Sbul?XKmg?MQnMwr!<yBG0fi@{jh8NDiNUca~1o+K+BUR*A<!&SR%ZDuXW34
zLKIc2B`K>+CU6|>nOa67OGl_uLi|?yzqb4utNU0+_WPy%?7yQU&r?_lxLKwz=6nZ3
z6FZwr(M`ZFkC#`p7P?{h=QfBw#y;WE_Y;)6gRQ(Jp2_~?9qKh3Bx0M59oZslbVHwf
zb&)iaq>Z*SlDOTryM7tRikW?($>c-l=G%WzN@{jC;;SaY&PJSNA}X^Hr<#bOY{WPd
zF`$H_+_jgP2rnBk(nQS8M!fg9HajC5@rsGCvk}jk2;s<0PdAx}t<0^7xZgyq%|`sf
zM6Ae0beITPMpI;=Ml2YrO|&2)i9Tq$^$J|CQY6M>Nr0$CUfJc&Qx3*s(NeOKX{ptH
z1nn8W@}sr#M?{=pS{rR5`mzxr6OrrSuE%5==Fc?wUp8N=crx63)_m2Pv@PaKHJXNd
zYvc=`9T6J$eymCK69t>b#D}Om&X6sy%X_P&r5E(A>teOMIr4P?jL8W5^ZZW?h0hWn
zK1==;d@fp-h0n{@|2z2f4uH=F0a_j(tiMa(NiPurPz+J~lla6|nW9ePz(;`V5fjmr
z&G8!(QI(Cj(?pbHBic<wC>t@)MC{J4-7FI^CmV5riI|y<h?$6{Y{ZvLL|HcCXcHl#
zCx87-L{~N<WFl5(BX;%Z;O@#syr>Zi@)g%upnP~m<RYl|6^i%(TBZOR;NMS%&&67I
z9(-PBBKoqe&omJ^_&i4=0{D!YFCRX?WWId(JjQ(a@Htk#0{Gn9ErVQ8_Hpp}rlh48
zcm_Uu<?EyHS@y~BiR&lDpSU>qWc>N^BU$)d_vpWa&)o;YCs!OiI9R_zfF}S?MW(vJ
zPSC-1wq`-A+(gXCMjT=ys<RP$x5#{SmSrO{CL)JWx0{F@LhUgTtyx%GZ6b0A^&S(E
zL#TI{2*D5r8WSdBdv>+2HxW66`ZW`gL#RzAA_os=XvBhQsnJK6tZY8Caw{v~nTJ0k
z|0(|5v03IN4?dqU5jptmG7-7{{9Yph`22<W^5OG#^X0>5%6$3oIZwU<`230{Er@&^
ze4Z_7=>@wDd{)WVN8vN_$?zHR;WP5D;4}JA7Ct}o@V|r4fdk>Q4E%{$ef>&-rvN||
znJR$ZvPovOvn>m4^G(FeY{a)rL~S<WViOU`M%X4Ihfq&35ut33FPMn7EVPX=5jlif
zXd-e5^_`8{vC3?b9VQ~T+|QVZ9763f5nWjj{=JFFA=IB~!~$LP9DwG-E2<U;;Lpnc
z5Pwe5y7S<3f{Dm=IAS7l@M&p80H0y=<-_MY8)W?RefWIEeEIPCynF@l`LHG}z{ku-
z&-ee4wDf`j1D_r8^-=h&90H%`BM#~kkq}R-@j~J*5xmpg&;(__#A7k!A3<4L`PZ{V
zmR<f?qnB(aogX<jy9L^o2omdAB9J2gh=axGUb0rI=~>e2*VetHO;a1L3HLP2F~MeG
zBw8hGjlOM#skVzBS)2Qb1+CjW9GTV82)$p0FE`FWh%SeuAw<{jx?~pf7UicVqE9mF
z25?P8Zc%R3h+t8!F<<_oTxP!fMQJi${-R9bODQf^#ydumU<qt}UviPM1Q^PqRb^+C
zVX@41Z0w0u*g=BUoR?55371UhLR7Lz{lnmo;oa#r3QDZDcMg22Ff#|+2uNXJR6%*Z
zRvtjNbG1F8tGf;jNR$UJxpY&m{4P329fy2u9ommv9ko)29n>+DKU^<MCY~OPyq6G3
zKZK?^eZf&U^YD&+9}LRC|CSqTS(pa#4iPE7JEnBnSaQ`h1#)+;9;VOGKEe};&~L}z
z_P~R87*CSIfjaL-&zHwSh%nVVP8m*5idp{=IJ${23s!Qqv<z`5KSNF+pP9UCoix2*
zwpsWem@l7|Oqws9yW!pqeEFpQPpAz(l5)yM@<5IEM}y6n#y`W<b0&FF)Hdwn38tDH
z_xQBQbc~7Dehv4=@}=CPcwO1sDcs{`ylA~*rA`1+aLZjR9_>)k9rpsa%O~nHn7_B~
z8H|p*j78gA7I1+0V3dCK|0KtM=+qR!IkH3G8v%|(Wmbi2R5=^V@z4Wuo}l6e-Lf#^
zeQ%>^>&>5m^S%gU9XfUM74Wlw@Y1@O<nS8ka$c?Zq8?vVka(jENuqzcRm$mhxO6-g
zaIf^m$QS9)*Tm+F`}4J63EQx-r_e(=$3B6LMaFdU-1i3|ybe6<A{=&zA$ccNYb>6o
zsWfqQCCWF4N%d~0(rLQ!fAFY4LmscY$VAMRjGAMPiLkQ~mz#*nY{c0nB1fy8W+IBR
zImVlac5s)e^wTCHN2?udB4%fEy#I)HtSTGfnF!BcoZ;T{CL%|xb(@H-*&M4(M2=Rw
zTO$?>!42+^gHYZ1S;?zu*5@3m<m5X*{`blJ!xU{H57kaE5q;TCMNC8v)mj=6pxUtc
z@=@(OxEISi|IC+<YM+;{?D?lj3#vZ${L_rP%<=bq`8WUwIUR?;-zxAoze)rsTUHv#
zLo2;$Hd2ymq$FsLAUhFI+hL6^$buZ$D?;jKlsZeidVDrfM?NL7PLR5s1xL_sW)U}k
zDxc+@Rc~f4Uq-$t^l|1KcD*kTj9%pQ3XhE~QDpA6v&BdDm9~3P(Uq7hIHr<n<2X6P
zA?P0MneCpE+yAPt`Mh28x|I+`F^nTxsdfTw^Q%HF=ZWsUY>zZf?&)rsJH1jgRl;=<
z&LZ3SlI_eb;^vK0Hnn0qDzxWIHe!3Zj+YDO=|$EZbyY1t&b1fE2@(&Xzd>&CS5%hu
zanWKk*Ohsg%8VCz*|hM!Y2gp!<Mw&yG^55Ho|L(q@dxrbaiIKKV|b@`5{Y*B`2OXd
zojepVw0|FQk<3n`90nIm*cqIJ{ig)!tQ*SyhaskpaMj*?fn9TTt(AOJ=FFX2UEf~u
zMRgpuXkRG8HNirej7fDx*Kd{iu~Khis#=!p!p$Gx?FOGe@-6d~U#Zxyn_I2;kG}58
z4KefCDR`s`dXgvf&I|fgS*!7;&^$3{K4Y36D_frCpT`-WG(S?lv(0OnmM6OF8ucI+
zlgjCnk6(LuR+bpOJafY7SWx|JjM1iVIw2IV+1GqCip?BYEnnb<2JrMBe=c1kht^!Y
zan7&JysF}FGr#iWX!cW_NZi7LwI8PnG29_#t*L)Z>@Avm`g<D-t<(}`lxv&^tkp%)
z_EGO`9M-(T*=DVYm+VJm9Y1`3|D6GR*HxpHTPd@ixm9Ql7dxRhbBw(<(CCbEp22fg
z5uxT$17Zn@R(bh8?y2xI8!`p&*!SqxkbNWX&_mu+4;A4knqludO>D~dc>9nXx<%Yj
zIiuWo$%oSPhnY_+IOW5O?~s-I@N=rJgj&>1WIJCKH=Q523n#`HU);T<Y-)P^$e1&}
zLY%#&zE6|&?iEG#HTcIYMW2Ni`67RfyEm4^-IE&Ag*`5hN{avFHeop?N?d6#MqhPL
zM%{0f#IeHrdjDBw9-{7fr8Vc4woGBtPH&rE9BM(I@i25ghDF2AfM~E)Lo4@kZlp_j
z3{v{MOZvp8+%u{ALiTL&<L<d7c)|W-^QzdmZl$2R>(~~t-Ok)9xeK$t`%Q(G`4Ks1
z4vM-{N^9yW=bjaJN-Mm3A3g;5FRh5WH<oh7lEX@FlL?)+ipN}6qYeWG5Zd|)B4sk%
zx`{F$v2d4zWm|txjesJ4&WdO_+(}P)`Zu1xdTWvFYH3mY=FV>t8>i{%Gf?gmezP*_
zY!-yFn4ETE{)~{7{FMaBI22>xo<m14Qcbf|4MiV=eP$l%!xU~wLfSrC=r(Kh)y4fz
zcGm?|Oi!KQ$x!ssQK6A-`TK7OlCn~+Gzp?Y$1t~%^X^Awsf03Nrae{K4)B!tn!{B#
zDZ#YJ<xNKPl!JLN3ZKsFVxRybzeGA@rbOJmVJ}nX<#~w}&59kGJikeGgEe23pXK)^
zWd>O7ic#HlRya{tt(MwHX*S$Jnm3p-r_scoaN_E!FltJB$SMtnd0<_wO$uoE#GG4K
zr7J9pJ%1v2;aZki;9uc47?W&<w#lHz<natFa~m7jtONEF^%U!=6FNoaK)_L#MxD<E
z%~{Fs>897$9}5XaA05sObpKAEp9WE8t#;6H=F&Pdj#TffH=_%|y?qh~Au^AKo^4xb
zft_8QhKryqtJ$`brW9R&UjL23dVn@d&@5mIW;k19oCnNJYG(`ZHou8y9s-rs&KB;O
zPZzxAPS-2Dx@u~idz@_Yf;uqsnd~}T3Knj_<Faf&v&n6jmx#5c%vXBCPCWyJvd*1{
z!ms$}Q`C8m-YctC$;mz0Ke=y`lN+`Ghepw!kqpVaMtA}s168-pXQau~`Ectd*E@Zn
zg_t$93-^*%vWr+5ANKsL<Rn2zvX2igRH%xfXDY`!I)K0$<`Y!KSx)en^Risg_eR5i
z8uv`we2_-6JBKQ)q};l@b>k@*gU~6qK^S(p$GiU;RD{?q#j$YRcr0U8)Q{UNoKHc$
za|(Tnjq9?*46kl7y-77tM`QSpvd^RRGB+P=PZnbSjKsTPyf^L)@BEmhk!5k-6rlA1
z)?c3Hb2GabhMs4rosPoTGv0_5C4E9IK^<ykSyov(^lR#nKK_zlY^sPMhA+tE0WmM4
z6(oDf*&@3NfT)nZa=Z%?wUQ^wgo_`W?~~u1KHj_bO|)vaXr2Ubr=WY-6=q5=A*6+l
z(^V39mvKptjDfQ39vvy8G<{17x)@@wS8C5EqpZ}Iq_1G8fOU#q2HTg#cX=y<cb?2F
z_K?n(?VeR;fZLuFEwU0n)n1)tK>Iqn##61rZagTt6W?-e4w<RM6>fFyQs=D6u8nT$
zRvWj@i`%4J&Ewb4lj-_B`bV;FtdvMJ)`nShnY~#~-Kc=-QKJZ_h?*Pu&tOA3TYTR>
z<~*M8nDqFY28P5iWkF;3Nrk1e6qW$<$0#jk;U4UNWLC$xUUop#YS<hNcL!s22<>c4
z-*j>)Zq@IKj@!&ocnrzYbG)LYZlr6Ov-zX*K+cxse*MtYfNTFx1g~`0jSAI=p>bGd
z5g4#Z*g>&z8_a6T{RxK^OPu_)?3IG)wh#Uza^UX}sa2|#DT5c~72NUG>bU~+O|sAe
z0AQTNdjkLODJo`4u2FU%25=9B>&%xmp_cx<8gn*q)Z?(vbZN14$<^cCN^app(ZJUk
zC?1L@Gt)X=Ew_=8X;IzoEsya;WWr8n&q^hMk4#iEoAr=6y}}F$_>mpWWHC#b>lKoi
zC;Wt7tKl}<#6`d!t!R=|bT@zaYFVF$47ys5*0WilQM^?9_&GmEbG0NML1E-O&YsNc
zj9L0IqCWg8UEwGOwT63TMKf<wMW>t?nST(XoK~KB1bsT4melv9jRPi8EP{KVYNh8_
zJb@Hxh`j22#mV|s4VjftgX4W_@EWL8=Uq?a-EsGrxu=SNssKB-MaV7N7Qiih3Bq&i
z@5G<bOWr>k2RLhD6_r_r$4ZStO`DyHmh5(+C470y$v^(>;gl~7wS1{<!H7`H32h68
zhgy!El~^!p^jtg+pX_LQQK<PaKEBOIet)H{R@ySI)t?d(F-RKP5(ZHFRR|XP5epMf
zUs+KiRa>c2AXb{PQrBx}Bq0&awk^P1P)g61`eNC|ceA<Ox*`dlBp9w)=waGJcT)(x
z5_F#s;}sl|M?XQaj%Y810g>k=EpO>DF9<7KSEPGM9$a~++y}?|qOLFH(}(`@KG7pm
z_)$)(w{7z1P|F_evhycgZx@RiMVMxxi^}B8VJ5DnkX<0!8|iZnLiTCk^=`Z7{g%Br
zT`yxA%5=QR67~QGas=Pr*b%r&@TK$~XGz_KBO=aL{)X^8UM77xIYPC0;~^8Mu5I!t
z`r|xBH^^A*-Ow<kD{tU!#P7;Q2bq1I*PrKG_J*}D%y?2*9GMT9(^jTe+gwHYVEjYc
zQ>WtEVj(TkJC~d?ewhc{y_RUJg0J%0`%};!>zb_0Yp;Vf*7h#=_wC&=b;t-mpEp9>
zaSmy3Z_pmllN6okV0?3e_TKpQza3x2(DojtL@=W~v>DQ#KcB9`X!5Img9<D%tHQVF
zDBGx`<Kx$Fb-m8!W#q`s=Gn#C;z!o+sg}L#cvmH=JhG1Nw^@J6%Wi<hE&!6e!@od%
z$FuJQ=**5uJ_X{LR975u>4yN>IFb+C$xkoJ{EiGA1}3|x{^MaXa~2DTUYE(Y<dgFq
zq$ir@<3ZBL!gmJ4?g74)`kFue3Hh#KPK`hNza7s&8B_ls&G(bR_j1{h>;13HY#KKi
zej7xIq+0U)B#3BdxPm>tClPf;nGBur($@<)za?{Cj|f(_WG3-D6dzxN1n%;mmWQGj
ziexP-@r_;}pWBpiR}#9cr$IS7k<yJ_E)r}J%AwxGMNt*g#zj$19BexcBAeT2t9lz?
zD%VMR`@*l>F;cu?HsLu^vM0D{YABJ*FJ#EI2HjpRa&Gs8*%NuB%;Tv-@}l}{I|-Gm
zI`?%E;hid(oWxebehy5n-`C40WxR5eDxz9Hl@tBGK0kH8$bOxK7o<|cDC9Z!?Iw<-
z5S_Jq5=GKy6H{Vh%5pIg6H^()^dyuglk7c-YCqOfdAE}gIdg6#_sJfXem0w)v<9hk
zvdvGr*d(<FNn|IrgHNho#t;8V@Gkk~pI2!Lh!8xlCAlY*mQ>#DBt&Mu-X?n^B(HOy
z+!0E}JqeMn%RhouxuBg3Hsyk|bHO>eV0$jukqfTK1y}k(?~5XGPLKKL*MTSB;E}-B
z`X3u9@C$bO%-MGOdf3f`2mwSGEMWO^cinW#eQz1vv_|VyMYo88ZO7&YqE?{@Bf2sl
zYC6dso;nG`7Ik0E>|<O`-T9(9S$D3@4Hkm1q4zm#lG&ThW;tPt`JL+j2H&>-UFqjL
z@VCZKFXPwfYsJ&Yyn`L<fE|qtp?b=kck}tRL>t|%x%wt+@vQ{JEyYR(g7nn3T~2+$
zlMig?$4)=cP6j*u$O`%DN%Zj}|Cp>Mg5J3Zlib@MC5X&xgmZhZgs4s)jtnjAbw2`i
z@`$Q`TgiITyR{dvd)eM3t`~$uFGMgZVR|F&$KCs6Y3$)*tjInl1lCd1Aa6#*5NI5C
zreAMNET{@K&*iORt@MxwtKtkDt=o77rkZwne|q|TC<uIXl1RN;At)Bczp2&^-!7xJ
zYv$BiDbean)ZG*|{R?HDRE!%VS*pUCmDbznY?Ze<z5VxfDAs&96dD#<*G5_IuMdgA
zlNO{7oF<J<JvSP(dj;cJE0U@X8;)Is=%q@OwwwugL;}GS1f@K;RBWfY`=9CPNyxMc
zJg?<9)W6=RGbVKPKiHj+l?kiLaR0qt_}hnuI^=$?5y6Cijckl`CEgGLg`tDv&NVn?
za-Q_QzE+Umn5$15%Ze6O*pO*OE_bxf-+O2%6k4=bpqYoXNVhl#-Z^Uk&&)fU$1pG`
zO0FFd88{mfH+}EJ6Pqu_c&Qu~qe{h?O`t?u@(XE!(<e(qx6}%!YsSlHnOC=kMOYA0
z>w`8<k#0J3V6gv3Ie6ujzZ?WTg^Q(6{Xg<PeT@+yU9eFENFjS|==&wBWq#}e^k5!-
z{JwDuf2Yg2ac;q;S-b~+qmuUw_BXrQez=T*J_D?dihpzCXH)&>Hg52aiHE!FZ*J2s
zr%U#J7qO99jdE0Nc>NeTfUe$nrPbZ#joV<Y8R0zcT8Rxjb{ME_DVJS-_OMybg@v=6
zsUxs|G*xzcrSb*x%Hgo}we)M2b9(<Dv-~_J4xtB2nQT~aAdpf_khj#5iQ`*~fTM`S
z1y3o^QX&=H5zvQ>r_6cZom$KVa&6mS#JcUrw86`+<PLu0?uhh_5WEA??!uBwoX5Lf
zFC<hA^Dz8bULquRSkBG7-CbQ;Qgbtu&C^<B6uUn0vc((7LS+4=HCS=zE*u?lrWVyq
zC6m-^yOJr^UO3v>n4c#1E+&oGOS5T$^L%}HUS42b@^q|ywHJ?-3}dBY&7kX#Pa&Qr
z@OX4$g;(`?s4zr347`Zp9Z;;lN9f4>{Gp-wGy4@c$ov+!1I$|IUysh#S<Eavd5-Aa
z3#4;J!CP)AqWz!`v33AW3;oJ3ggllg>59{v86Ye0<o7ih)N2y|Nuug+^fVMPC!v~o
z#dA-(z^HPZhlHtp+j_Za@>L4{xx6R@=_zK!|N0=os}af-%s|e#34Mr0=br|tgUuJc
zF(9xkg9c*C8Cg@D?I8HQ(C2EC6&_i5y^kbNe5{X@7d{9G*>^}W@$U{*6PFnkSzo!c
z1$&%b(TC|Sg5F)&=A7nU7n$aMt;EMG@)!q4WQ9?;_(zTD;-}mi_u|57Zuy6e?pa8X
zivRpx^yre73mV;vtK7+txEJ#<=Wo%(D?H5Erw?-ui>2=~4|DKg^<BZY;g<ks%)W(p
zM{95vwb!=lcVjnaBbGh3&a&qInJw^~=&;}1g_q{A+-#=iDf<6v1rI2@Z7wCaQ{}lJ
zf~n?O+cg8uq7*CjU&k>;i#E$l4UwVgy4Jgw6irFr^x4784Km~o<4FGS2ZSy-`Jxu+
z04PGPoSdFc5qGJ9)E8$tvp?B?Jo-r9y??~<YWmTNB8og*NkK*ac2BZmKvtiB-m?!F
z%U35e|I%s6YO^rtqp&LV#2WkI?)}=8JDSVI!!nt)N7|31c{t&l>zCRilFmN~S7yV$
z;*s1z2*DNN_k91iOnxPyRsz<zSj9}i$cP1-D`v{D=V-8&@e{7ZQmMN@M4)nL$xBed
z-mn^_R$>q3qk``%$^nmhw|I$-B1=)s*_t2^BCzQZOxEB!V0sBJ$j&abod+xKq71ij
z8fiN}tq^*O4UX~F=8D$$rXI}&i@c7OiXt&kT@$)LF`jEOx~gDw={q!xv1)~c^DE{6
z4pD3AW+ZxCKB<@=%B4VzaS5DMY0Q^xo}EY?2rZgFr8ffHqU2Qz10Ko0DnO;$lAh#B
zjqpnmCDSey4fjs_u^ed+nuSS^xitYCxa9QJQMOTsJGF>qE|P<5YEjGawtI6WEYO43
z3rjOXYRRj(g9%wD=e_sbol@~l6*IgSeuk<6(`@s~O=9eI5lnG-4@d^0t3%D)VX)+F
ztz$w~YO8dO`Geq?U*-Lbvg>+}AqqxqkyiPrf~2$?v9bD*KJ<l?<*1p0{tULDdMKXw
zPIb7YVDP+|0u)t{%l6`-qnbgcA)~TVEy4`CHzUIs{;7`{nL^kBZiR2Es4`B4Gs}=3
zO{4<B=g2n45zL*BatLxITICilW*X<nP+Q&Fa%W>=$G$~-4US1e_9NKe3x@dxzGcGX
z6YMreZc&^Mm`<jxNulbK0V+lR!7LvOPYoY|CrlsZAmfwZDR;4_w@=MflP!crEn&)4
zK{vC4ppS25g{#mQsX(NO)srIcFF!pblsOLk+$r>8M&z(VsyR((Ua#9uB4~0=5q#e3
zXO;=PLZ{^Jit!2_7uLGt7w4f2=eHGWnWY#;qY`Hx$?37J|M+ZwZc%V|dXaaCyNx>(
z(IELS*&o$%J6fI(tYDNq3=`r!Cv5G)m~%@-8yTV--VjF`=T}rlG53P!Gki_<;m)TN
zom21i-*Kf+Qp`1(G55vWP_}SxpMBQ$D~fUAReD>0D0{=?j&YP#O0w)p(5hg;m}3T-
zY1DJ$L9<_-9#i`9bLE~(OKs@CGgh<1N?nfYyR4z;GjJD#NLpU5E|e~-6QY+BYAdZ_
zgZgg42hT*m*T@G%<z~}ZgDi5G;q!DdPDiv~X41fTGXKy%qHpV%&T>!JU04Xd1g<$4
zYfA`}aUO0Mavoaak~)(H_kJBD8B2d7JS{zONq@PXYl?K)E2S94EUZD4WhEv{E*I+F
z;OK&S_lp8uplA=}B6j~dh*}Fbx+U%$?t_Za%-~dZ%Xhz5$BF)X+#ay!I^5~y7<_wm
z-=h7x)kdf9*R6(mtM9Hwh!*ax0kW)=FeR=TrTbeQWqr*X*U!$p&FUKgT%HW}|0Wn`
zon;CY{sek_0A$j_p?Xv(lS=Qt-twma0Iynu8J1@h{&e{=fF6dBxGHMcnx1?x>JZ*M
z<kbRlIJyVaCg+2i6;}}Z#vO7g0FcCof)+bPmN4@jpu^CKAb(wSlvC!MBhS1y^#2}j
zzyW<;^LleU?iw&)dFw=0@E5UlYgV6y-o#K!!}ToZ$F6whX!dfB{|QF94975mu^9uT
zLrl%2$Cr5D|4lGT1<?td8u=p~?zP?iQ4saVhi}|LV<P&4UmNA1^ziE(Lmf48Yzeet
z^Ji)ksJO9bYJ_E$Cyz?6<e_FOxu^ty&!Oie7u6u;_TNx~Dd?q`eT9cnsGU-S&_#wO
z;54?~N@)h(pbN&C>&mpDcL<k}PY@PvM!C2*JA>$2MW^V|-kh(+$|{2UV?sRsO>bs{
zr<o~K-lsM}I!rBQ2udkMyQdx+LZRt~QDl;H80MgUM551{j8ExfIa;hG7ce07P%JxP
zPEus#2Xg~4VH@~V`Xv8!dgPGWz(aQb9sA*F#8h05np~>DGv{!mVUsSbwG!{BH^yYe
zU0N7~?aJ)P*QBZJ<g-63JJ}#<bZf2lzks9}w`72ptK=u7?#R2773<~0rt}Ja;ZJl5
z0aE#lxmSWLAx^~ok$r{fN~1g4PLJOx7rDt1pbTqGeIaP3lAQ&lPv}bi#j1yZ<nTQ|
z`d)Nmp_N?5cwri&b!i(;=nvAwj7ImN4sG}rvx00JCAZQmBcU*~wIQ{Hb7@uA$6yWg
z8NI*#K}ZXUWS`5@r@EpJwB{-y18YnjEuRxYWCk1dd?uK4$6E8l3V!9PxYtS?L2r0v
zT-zv?T*be_WuKA=V1N>Hh7ft_lMg+Wdk79)5MA~t7PY*Qs=K2HHfT)15)LECW60kX
z;-D`_t~I)F_}_tQhCrH!l~cHu2P@hrDD!KLlLUH~I+jw=#I;4(CcGW<*w9DEeYae?
z7hxND`?0M}ct)^=hSWa<ir3AgYO%Zg$Zb$dwp1l6i@+-}04}}&B+=;JP}^8@gKZ`5
z22v9SJi;~R*Ge38l=Mx?7(#pqyh5)+p9_o#Xf(Rx{PlEOLPo|FXT1upi|7uEutdTT
z90_~`;3vp(PDZ>8tl!QK@iyNhw(@p$F+1-!K<cieYW@KVS#OYSZA6HOWiMjanbznw
z0U&<v;s;bYd_qb{<drL^&Q9MiiAZ01qySEGzPFWc;TtM_f$UpSWP}vyskKSd%!Fr1
zScS9{?53gtlZIFxUZ<yawxruVZ7b!Me+1Xkq95$a1$%=adrRu*sjX)GQgtM=A8O4U
zb8yQjpUZWB3?&>`f%KS*)ta`?5nK;&`tWeS*dR;~KQftvhc|!le+>`!rGba5sLHgD
z!el6fl$$f^O31;e^DNut)-TA!%XWx!e9FE&GhO(Zc))>)!{}QoWCG%xn5{ALbnzib
zWGla3HQqOD*0(k88lElHCB&K(h_PEFuWnk<+n_zkY+5TdTM1J(E^Qq#%erBwHG2FA
zYxFfEN@DKM1SyCWzROikDD<1u5;M*FRnz=3BE5&s;tCQ5QMRM>$JylFOO!B(tug<^
zsM!?sNDztCWu;zYQKHtG4Y4qo1N7Aj%qBl%@WKgHVchfPsW!V-Sm1EHq89j>Ud5K~
zn`M2lL*x&A_Gt{LVBToiHMREfb(I<sx&b;~8Jgyb+6mi&sf+pD6}B1fdBS^0@@lKR
z__ZI<Q!|pFi?Vl`zzd7Od!aUDs^!*_Q|WBmqXv6hsquXIxIA2Mt-*)b-GcG*Powuo
z@VTUoND+{C^F^o5S7h+!UcnB`{H#T%*PVqSY`)X8vC%qpSe926E>sRx=h}$v8!yO1
zJ~j(2FfIb_$JD~RVR7T>r1k@Ll2VoAU@{A0?f3nb&C#9s9e=|hP9Hz)1_Io~gPQ5~
zHu)(?+$BH9-`*iV;ogTM{2o8Ob;Iig_PAcVW{Z`YKxerIkX?`dSK^VC1O~088xQJ5
z`lfnusb$nV;V;on#t!xb^VduT>HVIENQ&Peg)758lAAOKuSWv|=&t-3)i313YJ;`^
zG56e}bgX1BbGq6+${q!1j;n_xWvBkG!5n$_{d&yvJd7bH0Yn)99M;9yPnuj{rM@ko
z&y-ioBE;ISJ*;~wG+h!cw7F2p@UKO{Tx<8#l28vT1@f3$AwRhFs;;@L&{{l+-l-ty
zBm#2M*@?dWi5+1K?SPkS6=+#dECG*T4Qa>NxW1!8aFE@zk#2xX*4an1J>Ig%ZREln
zg=^d2?RNTy+i7py`^cq7OVW;kMH~JPZSMjfRdx0K&x8O0BPS@AXsM<(wn?R$C}<*R
zGcX}%bkKOGPidu9DPD_`2o;pTOpxO^ij`KYK9xR??PJwmrFa1$36KDNR0J=mRq#?g
zhbR}V+(h#K{`NUDnIJw-|L^C0)5@H)&%Um`_S$Q&wf0);NeMVNyJKDrCH03HHg9W8
z?;yk6=W<@dzi`JqW!E2%tq2tKSH3@e$6B6^>GtEohp#*pYPt=HYVxZvD1jKF_pgTx
zWo0MLs^t6~cb1uT9T*ea&e(<yG%VB?XQ+ST*VvS`Lc^M79u;ahQyiXwfY$E=eW@5(
ziindBmZT2@V`$>Tqp6D3e<K;2W)2KBz}^R0v6%FsD!7=!>H0ha$Z$_Umg6YHr;~Ab
zlc~$$Fz8&Dd;DGdk%gsex)OWytlKSG&>gBKHKak`#4*xvn9BP}dOs?r#u3ZGUsL#9
z5-_`NnmN?E`8ebHQdKj`5UIFCbz8|0?dS5A_#Ernqe9%h7-%IoQ)|cAVkWpN@i}bh
zE_M)H=br>rp;o>BcC0jwlPs%<#XNR`{q(@#kGCuN?;7r_aF|}~Ln+{T;_1h0PM{io
znD;oA+s-z34($u9hHp#k-DRb}Evj-6^7^1OLc#Q%gG0;}{(apGzL5X(-sB%U>{)4H
zD|g4!5DoJ7RslObt9Pip&7C;rpYj^yY<q@bQ4Il59v5nT@_5Yo2(h|3ROK8Hxo;rb
zqeSvfRfRZsb>oNQot-vyx0q`0ELFVe%9d2MooLNZ=hxZQyBa@s5}IG9V|gL1;1)ZE
zciZxP&Ye%{^cG3k!z0d&;pzNH_{C>5Kjpg=HgV$zQD@ncvZf*~2PRJk2R5$iNJ!cx
z#^o&igEo^f#+@h3P83fsoyymk^Ohkik~_Ri-gx>E(<z&5n|QDMNSM8aCmd&?52Rym
zBsHismL7dd`RmTxa&j0;tjgc$ZhSYwMs+~g=aS7mIf9m;*AwOi=QM?lt#L;YH{u)y
z){vocca*cG+O$bgTk-URQ#t6x(5?Fai!*s!_z-(~L7xA=&aXfRCp(MBDq}qSg2e3c
z>UKika5%G;oC%NXA(tPMN-h-4k;ia+9^>3;-V$B?r>}fQQ1v|(b9-asme|I3<Ka!`
zqzj7_@Oa)O)az6@Hy-HxHNAS8yl6>-Gq88iP*s0Jgpf@o4qZChr%SRuuMXGGBB00=
zX23cdCKsyb5Z7;y`)=E3urn>*K2gYtY;}Z&oY#vyBD2X=q6^eF0dJ2bM-Sx`1M4;D
zIB^yg3<73%w3$cv!d8V-T!_sxqkXCcgf}$QY>o}3c80J-Qzs*}mMiq+dDM+ffB6fd
z;ni<jbJNCqG?}B!uqc-HXU#{P1J+c#*Lm3M=}eQpVHnyQP5%9Sj5#lG9@7csF@r<M
zr+2v5-3wJ{OYH4s&3m6biM@TS<mL1%YHmEgi?(`eEWK>#Fp}IF<!vYL&GoEfjR(lU
zfC<$TTf;AHOT3Vmj-QDS%e;v5x5PVr8N70(&*_S^cJ{K?Y~1SX8y|jS;}%lH398_p
z*EhPd9__T|A5FJnNQJa2%U?{_b(QaoU$NeShaVIk-@IYQk0a?@jmxj;h$;g6Jb5FF
z%rEStMQT^?Y}_$E-EcP2ET81+j`n>Zi%l;DZ;vP#3VoqrB|1U+_HcG|Kl<7JuE_jx
zU7ZRDi6i@DG9PNP(7?C+V0v6Q9^PPw*F~#cD=`gXNPMwK`D$oMdOCIkhx8(blQ+{7
zbBBZ3Uk`BgSNW#*3tS(@(kq5RdKIM<IJEG=efJ*7U%<{L_V$M&Tk~$AyV1104<$q-
z@lLPS?RnB~tjTwFZQQ~P^-3J<jYNP<nQ4Ie6vUZ<^ymQ*=d;8IeF6IxXO|{m&+7o6
z-A_3-x|s=xgjah<QH9uuUF<ZzP@iB!@H5tuOZukA>=IVoUcu@#x1!SLY&To0vzLlr
znt##IM9aX${z2B5wv8V+pA&-989S_L=HO7nBy<3>(roBG>e~E<3*80tbZHS)LHd#s
zJH4#5h<+?@V(c9?fEo~-@=ISw^^#$w{0ydm?GQdgrqjRY3#HKu-8)(eOe)j4+nJK@
z9WV=<ggD44d>7@>;z-q($p(J{JWAwgnl$UQD)oa>MYP%EydtLG?)8I$^3@T?Yr1Vv
zsNo{6>oqa@+ndZ@N1cembr%$<==`Mp>g^1}9e37AW;es#H7e+l&Z60qft{LAVLKD(
z)s=J&Ws<WwQ&PUehDXR;maadb1A_ajW^l0Ab);eyF<f^zyS`)1TL=b6G6!7-rNJo@
z&O8vwfItf-HMJ^LbW(k(dnS=$M5iu*wWNU=8GCl8ZM^fUI1;WG0Pc9Tzy7Sb9a<B?
z7MmIscd%4hXsC(ZYi5D_6-FiOGUO%TQ{v@**=YE*X!*2~DAI-*R&w5vI*(mZ;w>{g
zY6HyZdHJa!)$6Pzv6?~-w?TZCtk<*x=b}>Xe(HXpm0ZEZjRIoU+`pPBM0w<Qv(&Jz
zqNxG1CBU^Xc(o$FRD?6b&SjW4?`*Yh^i`OxQv(vTzKOkqt=rAU3W>I#MJtAh0&+ZX
z7Ohc{@p<1d&LE-F+CHu@wDDbMh%mQb^`%^9c$j^`-H`CH*ET3C{4J*WRFV7BU-($t
z+Yp+hN!C^XDd&Kr5$<8nP4zK|I<COGh}uM;G>wXa%5edP(z~kDpN0}@)m6j)sD|Ay
zbG5di<w9l^@a`e9qrf<|bFlPPxss=Zt8eA&pAChIsN!|d0?MQ9M}LTexKg>ErL*R5
z#(sGfreAM>LYVGcmZhiK>8d((jY3Dc+n*J!LO>)~3^2l%B4kAqRG&m#{!NqY{U*ZL
zkw20eR|PdjII6W-tb0?x^QBd@jI?U)3L~vrR@y`@zO+goB&{lgCI-@pe;6OLy=P79
zmQK{q{okY$R`Oy49&>(*@n~52J-F)4G6LQr1!>asRIUxCoCzns_;&B#Ij7kuEbPh+
z%h_^69ny-^#q_Pi;_2TH1CEs+xo?UG*FD_jHGE5~u5s6r5}UIcekTOo;NQm0rv40O
zK37b}n6o*9q2rycsc~p3e>IH#4pBxrKV-;K)QYxnzoXV!rMU8jPPmCJc?3NP6W82a
zN~zqCSl!2-vr?_#OaFXYCX7q3#ur2e>}RQuNDu!cp3w5I@OUU8w9`*(({YO_<|!_g
zCi@728TkUn7l2n5ozf5ae7M+!-$94GJB6OkixPivXO>87*R>=*C~CkR6+1=?+S^v{
zFR}Fe_Y%ZXI~B)ar*|xgG{j*wqABf0d}*Y85wLf&$5fTS{EUu~@zk~0hRj4I6da40
zIxY05b45vHnQ}<EzSwY^#2<<{gvr~VA3;bS54)*`OF~?#iG|yok2h|Mr0t@OTl;++
zNl)*hg!t6X#@1~`qwZBSF)LxS-C>*ejHcOe>UMaK<vaz0w{hE;lNKf>s#)u)<VE6C
zO<U~5@A%EVWBF~Z^&5)$4b9n$H`vhhv!e3_m2eF3C7+=chx^5YN2O{^v$`>4Em?TP
zRNn0HYnD?>i)!awwbS_vF5<vErEknj?CZ;p!(m2Ob5he9IOs;4wd2#@Juog6eK0?<
z@9Wm>x{EQ+X?T!8P%lNCPof-W?ef-m_3PH$?cg)|pjde2_;Rlnd$IY_kBq-!?YZgr
zk*qVAzT4FY1RMRL^9eK~N$w1q<B5abTc8u4BG_5ggcIBI8op^Qi76CFUgwbLd^?;t
znAb3fZ%XQw*xsw5@B9Md&NRLkcQ$!>jFH=!@gqv&sdF1%V!@m{gUZ$>b{!uNzqoN*
zbktZRBOeL^&OR8G+Vlv*ckg2!-^1l^d^|&bCtCh`)LEx#Jhv#a@ttVDb*<Zup_1g$
zEngE%+9ItkD)X0W!#jbO9VYe<=<r!~icC$yheNCJ*0bd`%`9RoT*oqqo^YqZjauhm
z)LC0w{z5$LMXGmOiPy=-UbqDiD+*7voQRo=%}y8%zaZuj`4od3)NjoELHIgs4UgyS
z2Xl0%$-}0pl6E>;5H`S`*9Js6>_$_76N(eUnW{DK1saJsJ3-)H=cMD|@OkNY2;#Xj
z#XpqWvX?+BWJzqzx6}ERU_vasi;yW?r6VpojTS_l8~3KBau@wZBB!ir-0ICzw?Vk#
zQK=cnf#-A6bi<(iEWIW+fRL5DjfrFA889xiaob4?pIpQ@rp8*b_~`ZMd$O=hwD<Ed
z{>#DneF%hEKQT_mfMwJ|bBdj|(;RMN3HONdUEU&zgTw2Mvs-6frWw}3(Ji#hI_SL9
z*_C)F98Y8R2d2R3&R>l#44eW=GEvayycnM`4Q#ca2?u|1>yNF@E`jqMU^SbJz{**R
zftQ^gQPA{GK?5fWEyn_4uvp0-kimZ^xn{58vh4I?CQ(G{`ZvWU_O9Uu*t2ZDHvF=7
z&?x)wCe3D|3&F%fcq^D6FAwaI`e>?=vbeKnL0Eq+CPu8{Z7S{?SWM&57ra$&KnNEm
zB;BrnNwVY4r@;=NIm7uoJwm%8yZjaBhWy~LwH)4;euT;oI{Ok^`$nua5l&L)<?VSr
zveA{PNps^rIF`iE&XW)=%zetFf5>e9KIslZfIac@e*lwj5&OzLda=(Yeha#ul0Ocg
zoiZeN{#Z;(e9ociilf+y+K{|JWD_5-HuEnnhYGfB+?GC{Rk<bFk4KpxH0ijkoglGg
zrx-Rt4R_!`YqB{=`z#}IY!J0_b@-fvc4FTV*1VWLhIdx3O;zaT>zTYl{1ZERRqwIp
z4(H8jIHG}i^T}RdC0~I&Nzl@{-rrM}zfS%@UTL_?43C)EeGy`2HeRufhZSg=czp}~
zb9f-j>=wa!A8F@HKT*1c0ZFFh@=Gib$&1X?vzn0atPZ<Px99{}+m+baE7GrHeD$Y|
zZ<`PXf1}TdnZ=;QD#QBq-jnCc&K~Y-WM_qiM;__R&ISa3lARg38S*o41%*}^o2wmn
zV0h9|BZ(1bCb1PPQ#O9D7<}}XGA9fXqA{ZurWE~s+KyOaA40tMKJMx=i;;k31<~@g
zUO%lyXJ=yTK}ZZo+m<obQ-xZ46^X5R4cPcf?3EX*hI{=s5^?_>yJGtwX)Ksx5}|YV
z(*=d+YeXX9?Iyax3R!!(<J3_Hlgb?}hD9XmauCiG`)K~KP_*ohF(rEDw=DRrF~5ZI
zs%)_aj;XMgY?|LO*_k+Ij1zC072f6C+15l3Iu;J^3hxHF1~$Hl4D!gKeFRU`avbHV
zx+RcAgYBRjW3HTR9bCijHR(B_P;qEZYbbOqdb2yQ;E)LONVhjez;j2Kw}aS#9_+nU
zDR+qLAe+t&*1)-?{CJ)4A5b5*C$raC^NQHIA?e-<_FA2~<`EClFk@gy+?i42+e1wY
zQmbU*SYOad7^+}_7`fAPVvJZaYS2!P*>8eV_!127F=o!!<K443xSA@S*|5vMfrc1%
z*}t)R3az-Qv#>{py{(egrv-3*feR#Ed`RljvZmW~8vGmtPTW=!YAkBH4S9Ee;ED?I
zkEH7G()<z+THoyq-AnHRkKiHAjksl{_0)rGScK`5$2n**H>;7ACY6p%@6*Ok*ejbg
zb1@0J1fkWrfM*?_rt&L=j^3Y<Rw9}j;MB3s+X)2LlJAT=U?)2AYn^q`FqH1ygcpv6
zalBHL*w@wgGWDntepJnz{Y{j&nh)qWgWxwI2EkggY=qV<N0%sUL2BW$J9$H__>f9+
zk#EdN$%j-L*`i4@J7W31ja%$+o8icLa$3{*d(I)K-6xL)LfL}G-+CvrdNLF<!>1yQ
zl`;a+a@^VHF24CtVfG~YW`xc}FLU<v0M`OK0k}SIM7D}R8vP>)h*^;;-vm6`^3(a_
zxE<fP%SmWMciNxTu8mk(04ir)+^dZ}b$*F6y+lIg7kr^I{9qtdzE`xsm@_B#4{U7j
zNIb;5<jFdn+DvR9TwccBl@Tuc>MiFj#-$B9BV0y<Vh|vb%Kt;udH3A(=x>&L&i0Ml
z2+iaS`oqTejK3r2jac~a?he9(<B_mm<MW7(Gm_$r?3h^+pV4`u5xGa_KhjIDkvXfh
zt&5&w5x0*&+_&gZX)S3)=+Us**_HBT@z56p$Ie0{m`@z+JAIkympRLq??NhUODf#L
zTuMqd?-oEhIqH<~-;WM<-f!e4iUw~;INumxpe1$eGWV|y=t6>{ieU67c2INbHXFUH
zS??uB=B0H@5&DxkIc548w+dCxlrm47@`{osH6RhsQo^|ySx}5u-NtD+mDB#S%D~b5
zxpGXn=u(C3M`w6HGe=k!;e&4hf~UjcN=moD;2;qI-J4CSvCAAls`hM=kjk$1aYuoO
z%gj2r&6U+V%@=8=lBa;YTF^V#SG+M)K_|quX1DB}R`LiTc-lUmP1l-^rL$k0GnVz#
zjR&08ja#|4GKjT3xp_AROfBB;sLNNKXcPZ2-S!BjZA1ay9;Od2-2|xRXaZGk-y*JT
zAR1~BbJ#LYNxfiNg9L2UUKL~3*0|mK5XMaYS)z({!>@^z!|$Jh_i+pSbSHSfnP2bk
z{Iejihv5Fgi`n}N&L>=9*aV2o6$Wh=$mY<!_qe~XMj&i)Z+ciA!h!@D$`<fLe|mQP
zNAtWh`^;?V*(y&OnWKJNf_I62<!;~@;aZKIzD|<)ktY;k3FHu^QpP}dhMI~)QQ{c~
zw+jl)MJe~Zge*<3<0HsYM&ox<7xXv?h#*7yDZD|bQ9)de&Xa@*CL#UR$G$p5uZCG@
zkCvVv;-6ywf~1DQ;x~VK*0E53dM?U&E)JgE_PH{`Tcth9Ce7TkL<hKH-;fa2gQX0_
zC&%u;n~YqrOqNc_$@mMCu~u+TmQLb>+h8(c1d}YCl9Tazld+G<C(`W3$=9xOJ5a2g
z&sUY0!56w(!%wE$BBAElcqYX*mv`fy6jeEol3!sp=zB@=2O;g4K2gzLzie)uq}B&j
zs(BWN#zU%lufHHwohNl_&(xrU>O_#23X1)#8DIx4Wg!5O9DSo&Dk3AE_Y||D;VX(s
zs^0f@FSrITo??}Bvuy+~8HcZp>x@MJrL=dH@N0-*<!(BrM)haLUg8US{>d>^49Fst
z;BX-**y)9(i<FNt3sitV6G89d(h{XD;=RPAAq{tb`$*<e##7*zOcBj@tNAZjehJO1
z@Ij~w-gZwr5kt{7M)gEE6gnbVx|km#F*bh-rh(K)d1XfD^OM+nf;I1GlC7r}mWplU
z=q;u!vA?f%`)3H3rHt{DwUHw)ocj+_Vf>P%8Ze7>?TQMTMUqnbv`P43>tre~GtaLk
zjp?lW*lgkQ>I^@c?p<Arh|w|O&baMp)=LI+G=^Nv@i9g_q+le6b^W_t;l|{$wL3S1
z)2L$3^+hW}O+0kemQW~^a0?>swPk9u*u9?4z=Ha75l>Go(JDhDP-5nV+|O>AtqI>P
zD>LO20Ax*O=Ce4H%b(YN`39tmC`R7i7koB^l8+cVWVlgZ9g=7%!L(-!nK<rm5usYo
zqn4FebEf)zed5o1leU~49JohEQ+A>8QP-F0iQ<pS95?p^eZFAOeWw{JZsC~0_myfr
zRezl9xHNweGl9>W%=I|5TUe^;tChE(r~Ub>IhOnwo#O;L{CUjjGP5YcTtC_RVJk*<
zC6g(oX%y&%;Or2=biR43NaR9)Dc1<=fb44Q+I}>4m^_RCN$S!3;+rxvznmk{X4$Dc
z>Yj*&iFSe#Cf!US$4S2sr6)3>R`N!1PpQ6sW|{N)*_i~g`WJsmRd&T@CR@FnCDMP@
znVBOqt>mc}j&PGkw8*?_x&vg%U>0(Uxi6q;N*9*FEr#C_uB2;AnAO2Ep@G!S)MXIL
zU{hwIHIIJ+22wn0J~LCDGp|;;Z(+(O5k8LhzFnJ^@lFz85jt4LbV;+P6R)X|zM{X{
zlh~5a`QVrhiFXeq+6vrdk877?1&Wwx27_XnI5SCAq(6!S$CIh@QLIq+GptARxco!C
zQ&c}P==+`!x3SpJb-mxtI~^|Iv;LUf;XI<SD&%L{xiByDH>cS5p<N+T1kfWjCGN>r
z8I$u8Y=$(6y3lyUEI&zrQDzWHwFGrmegq>k)tr|M#Zv3uV@5n%I!0B)`DkRM6VTnD
zq?vs8<)2`ah@C)*)qFHvVbtoa!8KS{jDcv!Pg&^q(J5>j<r}x(w1C`NWUAbNwpXwQ
zPx4I%k=@WeEs}USY|wfuc~)>2%us41H6?r#?~2g#)yfTB^*&)wu4Hv)(XE>jX}=hB
zCEiq)+*zvINR=(~*Qloj{gb8pc)#P3(*69v+WoL!`()?FAIf`KEyToRil(ksI14NJ
zgtm>;jjZ5p$Y2fb1biXu;MKj==TuqA-=G7-IvqYHir>bXN#UkhFdf)alMWwKq?%7g
zDVM{Ta90m@wg#*lZuEVIM`|dY!ckdkB-pc#G~GecmP291{!FFg^orJWDh^uP33#ID
z$OsdI0l<2SGTNf_1z=46`rS1n5N`jS6O>_y?DUi=>Hz$7@@2~TjMpnaEy(a#sUtV-
z9D)Uj?wzND*iqop0=3H`yPsco@{zjL>+cHm;rvizgLXmqJkW;>%jp8SMb{lR>%N&C
zl~l9iKB@=)f@`H#^Q}zy<X~Gx>eVZNOo{v7FLk%Xs3#!fQxDKGFd);W9M`}vZb!(M
z1Hj}DsgZ??ZKuH{W<M2~V5hIHhXJWH6Rnp~k%?Av6Y5GWi2~WQrOvDG$e%;|T!G<1
zy>u?6;K;;}#Ek85&)L1FD^O1Ab>>HVjK;D6Bv;RLOctynsq-gLUo2HuZ>LAkcb~k!
zP$WiKBH_9T!OSf+`wN%MxnIc%#b8_jbMU#hJN}2F_QEYV+HeMoj6g&Ptr-ocE?{4b
zuHS1Wy7?o7Z)Qy}x4F0j?U)fH^>%kpQnkwrK~kpP?)yQ?glwJ-L5iJCX(5Fn6f1$k
zMf?KHu>oV}pFiN^P7xn>LN_1hP>dz%J8-`)s8xk?_&L*uNx?UfEx%XinG~G|w2&&0
zj_M{Ez*?(IrGSN5<D$xpB6q~EA*o6+$9T4E)-dPD3q>KocA}QUx$x_LcDaUr$igzX
z+f6_;I#+XPy0zAnNS3alTRGRB>vRQe&Z<qM_PF+pRq<ZRhJ<DGCz_g3EW%(UqmXMF
z_wUvCIOs&C@IGIaM6OJH9&Q{Ol$yi<2xa^PmdR#F|LdH7-E=c|PK$z+?m0d91ApGT
z=k!BTzBs36$s<2O-Iz_h@%Na`r4-1{=C6YK{Mifwx~=oU_OswyFq>AgffKJgOQ~i;
ztmbP;@TT%l7O#E6*!%&)*32AP&0XfLY<KMl#B{wmANzDHvD)@d13DsT-naCi6_JH*
zH(=W%lfnQuGs<3^A<gR38FPx2472D`kzu^Zn`N?)SNc<>DO{n|>R#PY0Cj!D-`+Zu
z4jovX5%8K>`gaN`i&+{0Pi=S97AvpGu*|G%f8s%|dgl8RvA5diZKt+GEPR=eKo_wR
z9k_g~Ez?kBx<sh=;p7?ZR?rc64_&QdBQkU7)Y@>+$R(_)EnDC}YU@$Yh4CVR7|nQ)
z+evGaaw>K^r{z{+P{XO601KH@$t1s$i+eLwrj{MlGBvlB-}I<u3ZLlV6r5V;)G{^b
zim_G0nVq`Qlv~N9oJxFVh)TGw)Y@H1a}yAxo}NDO`~{O;5d_U97eRc@9+h3j1yVDy
z{;n*oili<ph7zLydk19!;m-;Cum!S=kCAtKx$Y1Nq3VjxafWY+5N;7vP*BN;Q&$|2
zX`G^9gN(L#vyjENIWy}N+xH^&j2brEuqczADqJ(_g3(s8TymTMor{f~g->#zV!V0h
z@sE)onOd?`?1qQ<wjU9@isDfRwpl{6gv3~NG#v*e768H(6~HA<KkMDE+@zb6{wYBN
zhV@@%2uAjp6<J;ac#P@)p{FY1l{!0dGcl;#Z4Zx6>^<I^cL#ZM&gZz}4sU6y8sBJj
z4wd~42$9EYL;t23;qmw<1Wqi5sIwbYTlx0HL27uD8jRswXGw6WIj24$H#$Z3_@5!@
zN4Y(06wywr8a^;-w~+=rNvFzPdNX}a;`8HumA?VR@{%UjS@~{B5l_G<Eyan>(>?mR
ze-XRHNzd68FL%w=hBelhopMe(V9vo1rJmNg5^vtI6yCo_4-%~?aXz*kG~8WqA=)d>
zp$_1?i0+FJT+VAGJ*W>h#NMkADf;CZ-F5ngchs$USEKSb-t-giZsAsO`K#rx#L^@3
zqt3^%FcKl$DY$nH64%a?H=4{m6tT@G>-xZ&Yy)iuy_&jkG(ugOjGaoNoIwraw<l73
z_W_V%sku0j!68MRHkpKa-Y%K82-k&2vGnXB_Zt++5LIEe_kvN}W;qKhxrM#duuDbW
zE9TK`Ra1w7Z)~r-MGa9eKzX^n{49O<qnK}Fy5Y}F6!S7UI@gKgmp}1^W!mlHsi_oa
zuYMagWW0>_J}~@<J~@+$oGHV+|DsZHTa@47esuIdjbo@&r5)z|`x6j<iPiC{OplQQ
zilGv}Xr}`UDwxqG-f3<Ek6QX}`v-fd(@z&!FXLGsc%0xp39z^!j8fwxl0vR`0~9b~
z-SBs)4OF8;4QP{shOXRlPI{2ZC0bhG4xoG92?h#V;_1<=RbH13eoGaUF2Z~%>Rg4v
zzAwaDQO5W4QX|UTkz|PA<A%kUA?faoYS)nOn3In=AY?9<I^Cz-5xF5Mz)t)ST8C{}
z2{)&HGLG<)tFe55G7&e2o4`zy4qcbP`dtE9D{UKJy@Sgy%#^nf`T-|lC8tVBxe7Q^
zZ$PxbH=m>>A3>}t)O*QF9tV>o)GNpwrvQfb@T>qamvvlvsn0?fns4}{-vue%Y{q>-
zirJz}o@P=2lGz{G2E;G0hBIsiK4OoTaOniOqVl<ii&aG?XzUq5eJYlX8ym10Ck5ZK
zY{nZ*w>y|rZ@pFtNHyUdVF&O{)lBf1QC_kuAu~urGQD-E`!ZDfN6?~fCgc|LMjd9w
z-7VUswZ9uy$m}8S7hyKaVfvv<Xt)sK?_g=!-HL1p10jlJD9$V1Wi(~PmYuH&SsB?$
zh`ag8h&i|)=gZV%2t$m_L#L?qLP7pyk9JsDhc6BZV9mZzL6tIYS7;|djw1~pSI<k0
zM&R1jaBMcv(mNMt<*i-rDqb=%cN_mk!<st%RX<TG%Rp=HxA>R3R6olA!2*|Wyc^K1
znSCvL2mR(FIkFX~#9ePtT&8|e1OqB&C0^xU(SoXHi})t^O?&|Dk(QDBF%n;2@Q$u&
z<h8z7Jay!#cXbTow716qXpw4Q9R~xpo$>fHn%eS?FOl%^ZK1(8+Zo;_HtSKfjKuW`
zeznSroZ4YZe~fn&Tm9ApZoU6O-<{g8yB=Li)#iFYv6{ciLaS`ajO^}j@XBmR*bw$H
z=_-^!(ej;P7ajS@sE445^KT}^l#s%pu~`;3T$FW0b&&+z&@+8R=qDI^|IW4}vEfQq
zv~C?fCe4x%SqBR5A>MqRgA~r%RZ7jkL0qn3a83T`s42q;e#LsgPZX8Tw&s;W)x0o0
z^3QF;^b+?6Z8~jd(H0wLNQk@ULVw9Gpiit$PU|8pxA9L#24M6tQPp?`{}{hA8@vNX
zr?%KIs+!tg|B?df#YVB9_j`D!yAry2Z%Ci^)DxwT@Isn?$ih4Wks4myi@z`V6ZaL5
zzS&5hOsR(`h2(R}$r5N^Qsmtv%N4rsG7lmn1KlIlb+A_{`dbkK(Uh>$e-F8DPVwPx
z%49x}$@|b$258NMMpN}1$k@D>h(u@(4AOVh2v>DC+5fTiV?K*c5Qv+LM>rf*!3*Ih
z6ituwYT^1$qJ~Kkh!N?Tq}w<Jxo}w4!%icT3|fe$8@n)bA2k(zvdrYdv|fiCE@wEA
zDraZZ8Idsc*RqBR)JSh&Wg3ZMQ17?YFKDS@@S&}2m64xmsq#%O4Rj8Vr)u!8YnqU%
z`GPW`SHzjvlFyB)h*Q`S88uO!P9Dw-vbuhF<GPHCj4%O(ob}7aEI{gt@#9kds`!PS
zR$Y5~G(IIbQo=4=^JB3KEdombsHr7*1vv)K?v39zDVV91M7b}9)3>SA7MC&ByBIz;
z;HYob5n4k$Q3bx>!~++*->esc0<k#%6l*9?nOAAmqv1~x29T{H0{YCI1ooS6sR?De
z(RBN@?1Pe;J(}UW*wRx|Z7IK@^)eK@2(Erwg`LiKQ=|-97fqGkWnB8>!zq=&<`BOV
zNBMpyjKhhS;C&+DRT1Z-+Ul*h)p{=hx2)xP4pW@-$n}XDGXW7Z$@VyB_><ApjW!in
zci)qNdvw&)c;m~FIdY#j+q(U#o8&@g=d%L6ai8;X4xd&5143xM5Axidh#$}?o8fbR
zq6R*%@i>9~R39Qbzc>?WG<?U7dyP~FGpoDD0zGq(=YHNV06(yI|8!nKs1x-KfR_;j
z5Uqa8n%kCvaAHO=C#Gzlx!BB-h@~3V6kra{R&<rI_)Cv&>jXvHSPc6cE<{BEJQG_!
zKTGa!8b5H>#8QJ=Qez6lk?&&o@Kn-JY&DP|e8|OZdvO3}Et%S<rs}3XR`c_Gu$I*H
zts2wUYHl&PSQ=Q+h0~F+oO{f@g<)yJ+sulh?`&SgEU7PvrzYU2qaITP+m5G8-&o2(
zx;l$fu|b>`!_G?BUAh^^fl+cEW$EcHc;?GriDk&#m_j<F3iqXcibKB74{^x%$8Lvw
z_fs&uH&Wet+c%9Pzu!j{*vRRqUfFnGta|6PpGCQFS!kLZ#{I5O8j^<kWF#ilGBh}w
zf3jF)pdWFz2Xvx&6M~QoTAV(W1?gi26Ii4LnMI8B=n8*9=DDw5VbFp_#Sk=?DI3#7
zLUlB+Z9LmgaVAu-AV+(*Q9F}So4zu?%R5nA&Q60K-0~6fqz5$v@sRskUtx(srx)Ej
z;=$sii=BVsfPgAw3VHAJ)f1aua#grWw4Qs1bYgsZ++G6n=(%Qm`np$nd0R@SvFXCn
z@zOK-ij7G13)b8PG$)U$(2IZA&L`t_6ulC6+nn}?Du2wm_@j`?`6O$ROwJmGVZZ=#
zye`N_t9MQNM$pqY;tp5#M~B_3!4MAnjYme((b6y+JXu#mU(oW}j&iwmCP!Dp1LGZ+
zj~^lXp;7r@MdlC1@H=SOC#P>D@gY*^QD!mij2kG+0`|(%8V=sjFxKNh&H=Vl8RHHP
zY7}v@#vonzo`F-k9#$4GjZY6>Z^8$P`^49jT<L}kjxcu2DoSi;qk*D8aK_kl{^`X2
z5(rjVb7vV4eCo7E2m{u-RUjA%2)0Z+QM1h2#~<_P3Jq}bPkj&+iV7js`2qxLO@^+9
z2Pu>R0u+-q!~_Zo(Dq=O7=8c=CJ~Jz9ctuU)F(TSi37mr6yRfkk}0Pg!p3+CWJyh_
zNRK^eF8$J#_JU5#1TKc@*`%Ai&Y<>KLh(HhSV=L^x?xrj!Hhs#BauEEN?E4y=R@OD
z(a+f&<#a25eJrK;F@ru%HKao+n?<`W!uA`<c({wE@9`I{eB6DNO2aRt;?IRrw~%um
zR};y(FXM0XZa=3&glX!+`#{X*iHwI3N7Z%_z9-D{plW-N)f_d?1=Th|{i=AjQxM-O
z_p80lIXHP5NnQ#6WbS(cT!UObW;t(rzhc!%IK<ZVoBfpMxm&n>Tuf{2|BrC{Lz{?i
zA9=&LkP^ZDT{>FT<-uzCd!%7Aw`CX}u@qn6F}?f5RHkAD>4pJa-X=(<sU}|C<$apj
z2%HIJ-Y+EsGq}<dO}v*GkK2Cqk<3hO$Qy|qz*~PU<O7?hkAvT%uGc#umR|9Se&T=X
ze}n(KgCI)YMgDhh5HCSKH~2o%{I2!}cYk``Pf~4d-H%UoKR#g|S9*Ui)vok5^Xq*p
zc=?cD72OxSFA9F|2!4+a3K#poMmgmTGXpULINxu_`(}{u7Ru$uBa#2v*8=-31S|xA
z`a~3V&WAd-XdkYyVXkZpxJCpHXtAExr!<;&_Xl&ZQ$cjY?urLav`u`;QCS>?T8lMR
zh1x>ZW&B>}#yiq|r<Lu^`W!Z=uekG^%ZtvN)<6^H#C`Pp!m_Xa`Q;)00j*so2*y}y
zkth~!ZXV^=okKQ0nOck!`i!RjA)~2xf7s)@F^y^o%CAxRNX~Z=i}fTv&C+0w9|~?m
z`HX!oKd+2?RST@VR-^uuR=~5;bi6WYJZFxyN-qi0-M>xD?X?+Iy~@(&1b*GebH1zM
zNx{b{`gj)~H4{@Aw<fE=PXAS))HB=O;?iW0dxm~#wuxW<Z=UDtLC@OwRP|J4N;S9e
zlilxAa&0ap0pF|i-TCWIla0pQ@7!QSUR9~)Wu$=weH`N{P{x&2Mj!TEA62Q2ne*Ns
zzK<`B=K{a*4~VH*Xy&fHwmz)m#P;6G?)$GIl%)JX465ub&gEC(G>tvuO0qUpg?@@*
zr8L^kI?lryUC3SQ?&)f;y$-f)S!pvVT!kr}XMXQ2z1{pSH1ZGdRpcA}nV=ME$ZxNm
z8m>v=?Y6!4Mjm$S;ihnMt$wEw9!I|o;p*BM(|Vydh^DTpijKN!bmK)?*OG%-cTwj(
zA<gX8&b(;(7WRwkl~&y*+)AFH&~ZADy#8;JpkEI^)NXV&-(@6<{nY#;9^y`8h4cN<
zD@y2+dpS7~tK)eK^29k)Xl~RvGE=k$0#wG#BOG^`5p+9ai)1=5-+UfBY(96ukSsWQ
zEr&fKNWn1_c}PXZ4tMKK_2_rXj2Q;0+>4-FIr^QkRXSYfz(3Hj<f?m~R&_xS+ymbY
zgpQ`pKlydm^icPVwZBkbPtA{3W46M_dsNusS6JUe^D}lrxBtY$=zuomRyVOnbz0(#
zc~T6APAwUo*4Qau=-;5eQanhfWWevL7=YZO-;RW)MSsXVHEpD5-1_5=2~IzM5|9XI
z>{M%DLX%_CL?U><pLc~P&EsHb(#uo_wcGqM>7oMKjkyVG;*^*?{!&Z?L*q_RN0`q7
zoO=r*Z6o%D-?-Cg{s`c(g)coOHlZ>2^4~+%cT;E(@S95A;W@P}4v0@;CuMu6%@TV}
zZBeT1sXL?pB0bsa-ny*2bBld~6U0Qx)xw$ZD88KN(E4f(IjV@I|7zkxq|-jN0>oPU
z_MEK>7-1yUWW1yTpojw7j+|2WHS$kPUZj0l26Gw^JJ}i4TZw_NAsvQ(iN{UVPDtHa
z<<w4;0O}*^h^BtOo*$!aSYry~t6Acy<nPT}Uk-;{rAG}if#Q(mk&E6N9FiwOygZwH
z&C193N#=X1uQuyR%b|iMb&66kDhaehHDsO)vo#6EZG>sy;?gOpQ)T{rBCnBjZ8%jp
zmxaZt>0{$xWB|$Wbi>@8@$|QEEgBl?ygHKTy2ZLnW`;b?w(e5=!zk*6x|;^$S|st=
zB<rreBqcs0*JtEPd`70Bq&S<|^b6eM$!GZ9mDO)pcS=BM-TkP60i$lEyK+X0&;$42
zXGc=shwI<m@E%P~n%!(FpJnQ#a>-py<=5~Kb@q4uD#LFER6FdQ2XhHNI_o%fjOOg0
zAD9i6xxYii4MJZ`GMzz<gX?m$=Co53Qy~ktZ407Rv+Ue;`#$ONo<tVt-+OT0B@m{{
zNb~v!zG2+wPCgr{IsQO+`M`bs_Yy+-lavw9YeNe3rM@Ow;=SJP$&{18ZxXHgDZ_%4
z`fN)7AVod%^Xxs#FJ-8Wsb_1D(gF<qJTC_+q8xroTadEIPr<W4ysG;Isop(2iS6=!
zz)llMU$(_STapi^^0w)M^xf601C8#pC%!m3a8Lv!<Q+$Oh8pVpDA8F`y>j*oR$5V8
zJKMASzbbs18S}QlH&?$g>j_XsIUWgAt(4Q(zw?#ZpOv=ma(V1*&dhK1M(b_~cC7Sz
z(!FbVbnODJP~jXQ?@Gfzd&dU9{mt)6FB1Gt=GSWsUTz6~uL*u{GQX?6bnyG@;P;;3
z_gCh3rFY;8zmeYrzdz@9LHB;4=qdjsdWtyTzqv1P&^Bl8t<vL2XX&hjt?8c)0LVuD
zegl!5^GkuPF+RPuM$;9juHw#BH9=mlf({T5@zTWhVMKOFd^iandU(J?Uk62SUJ)%Q
zVj9fyFV;ii;2G0z#iitLI|l=y&+IGm|AH4iVkMuPfoH02qMbf#=4gU@><we`lRoQV
zLR_3>LbseCR<OqDaL;&VPnT#%k*tu?{JJMT4i@lKqb3Vz$$j#7q<}=lD7V2apyK1Z
zvLhRDHwGn&+-DvW20_+xIQt)ASZpU&O{#2xssBMvyxgW0(rbhoo-%B>`_TpH;hrpl
zq;Q=`%~jZ`-tL+qq4qpdKtri)i!rTBJz1hmw61Ha&9h`}=e*|ar!v#8rWGPQAuIVk
zFvw2bF0#KIuezvABuCOfyc#}b^XX(uzBS}~#?NQuL&{gorwly(ZjPgy#Kt+Fj;X2=
zoq5XOshgJm-n82Mb2<lYEiGwUDl!<dnvY_;Zdxj(4lk3<%TxZ#K7N{({?&h3hNFw7
zrAz#m@0gcA`Y&y;#!X9~^j~Vt%VPg!4SZnJ(m(kx=bD#4`!6rBSu`#Ei~n+gd3oA@
zS!H_gxc^eeivgvbo_3x4`kjad43ifJxNLnD<f?qLsXEkf<bw2A>?u|@jSeebA~Ai?
zfgsIrYhRTLlP7q0Or#Yx5911de-F<elrgc{CAwJ=o(NSobZtPj;D}r%z&-?~!oL4{
zbg#7T^ZyHAak|Xn;3@x=i-SXd$V#QY66&&&(;ye_@+zp^)jVbCQPb>tkYF4GOx>>S
zm{ou|HPDj;tNCoQK3zg9&teTNZG7=$X0piphF=B!Z(8v?1Eb{8%Bo!SrkL3Ukysi=
zi6oZSAe00t0iDBR@^FyP7=Z!{I1Ceua=nQ~39@+dAt1dsfEJ9eW0C1<=8^AI^^8x6
z$)^*<%XD4^-e#kH^<`{4VWBC_5pLw~DWlkiC3gC<z5yT99WT?5-&p3|&j=QnHl~t4
z=qDY^)-T|5AzLlP5VGCavyo9bjpXOX<D`DHd1XMLEQ9UIqi734sF0k1VT=I-7A*!0
zVRSh1)~+>Ux^u=6>P`}vVqu@tpYHK)-PmKieJGF_Z=WxW*N-1r=H11fz90)<rrb0(
z<BWd+zBl)5FG`tAdtZ$InSt*~x$VU>?S1E8X|E6MF^@-+S5vB~CHm(;)8-e(=g0pn
z^Uld_Z#2u^jIZ_de_?#T*kIcGIeBy18}L83_dNXW0z*E$=V{vSR|dW>XWAe2ue3je
z_H*#JFJ&_D{qp&&QTv(p7H8U9J@Q`|?{8n~(cV3j`QO`H3BQ+Z?_!9jfv@_SbKW~V
zzMkH*y^a54dl~#0m)qWfOncA$E8}Zl-(!4EPJ3UDuWR?^j8FT48Q(uE{)O>f+OxeD
z%4Fc#`wRG*S&#AD_WnE5UU<a6(B9S;dyMb-)4JQs|I+qeM5LRYzbGWzjBnt-(%#KI
z+j}dgy)TF7g}LoXL}c14rtJTUFMWEp_x`Ef<NNaVUcqu|fzhvcX8~Ft4*oXI`MJRT
zGe&jV9}C!*tLRJW$pW!Vz1Y>e`NKoc%L(ybkn<|Yc@^heRQrEcDNa%qTwHF?&+D&%
z%6S0;CY2Ajz)yFhrm-irGX~9>b`~63e@bi{pQ=>S)QYWqU9kNRGuywIsRH*u7m17H
zsk!B+`PyA!@3M@*Hy+Mq1O|LpjDYSAOD1>?0)KBO{}}$m-+*p4Lpa<9WZd7d5BvEB
zetEu!S)JK@=YM&=``G!i`5p!f#1?&V<MV#Plx6d6|MGmdL-n%x?)~z7cjwk8Zud*t
z9SZ5r*0-G<_e=8q#J9`y;nM%h>+72fmzFQD&&qB0?_Zwpo4NHJ`{nI!CSR8Q9P%Xe
zAz)bxygQ7srk23LznF9*11j*&U}`Ahx_)Yz7lvO`!fTm?dYCdLv}Y2G+K+_4W)j{G
z>UboR@Q<L#y_tlGLBiZj!qGu1H)axU3hJ1YNeBl;&d($)3UZvCNjN3Q@$F2)?-`?d
zIxLg$3OU^4_7#S@*Y@F_><&<uNq1fnbs9YW4}%E`l0%=cc+Ss@R^|6;94rwgzDJ50
zJ8h@BvL#Vh5MF8c$H9FmMaDuh7WQfUT5kDFp@zR@Gc<IXrjA-`3Js#rpgxVma|`9P
zpDmxFyq~wB^Xa^rP}52iKQUETK)0N_f*^h*LB1MBCHChv4B+D6SK&^2HJSLDgexMh
zXDL=roFMbp+r6gZuypqf6xh=_!LDt<T&J?KW#t09*Yx7fe>|NamX;}(s+*$thVbMK
z!xDRkHVj2n*6=O-{Oz@@acxc?${4yrKt(<K{E&I{>F?9{@ek#^r|JOV|Hb-<rb(DK
zYsrm+n{F8#YAliNpbOnY<7ufgG5D))ILZ1|3y$&A(NGsX4H<q-x{0GxvHaA9`Q&-2
zp>OrNV_Fhx!o)wV+1+t`!<eS;gc?utP2abN8=0?_HUPNV4)2v!eeV8cGF5jp{GB2V
zADh~Jc+1n+!Q*fKZ#%JdOJd9McKBfD*C=WyW*3ASU*o4J)VQ9X;!xvSDk-t64>mkt
zC#dD`olk2ref}T8M-{PX^Nrv`)>CEpFpH--S=#c=yTw|9*F01#vQGm$J8;vorjh%P
z`K6d;7lcNaSj~TC1}dR(P5dHX9!IwJFgZt;H0-Ken`~)3i6Ax`8t~{_V7GcD*1{HT
z9%V=?2ANhHZ$VN~72p>NrP0<B{3o|2+=|5BzSGaLR|w?%9iQ!VF8;Q@)5|z^>DNjz
zyfgcyitXwbr@dFXHZtd(&Fa;{Hg7srAn$Q@b#4Prm0jK>65NTO7KU<{hT^#*2=d`!
z0}tS^hEQEdk=8a`!*x>=0<+Gxoe`xHnVfW4y*&rg7z*7yTDnpbv-Sl$#VPMybfm3#
zN45!YUXSZY1lwkV?H>4X47}LKZ`=8px+a*qx~%DoaZ0+uUGYykcL+W>dt>-^b6#sY
zQyQ_FiZGD?F}3Y$7D^48h(5TA;gUVT>o@&^IAZ$^x#LR@`dQ`f@P_dE8tZ56H&x0I
z%4xHfgo6TQbN2u8m%lvb=1mc&GJ^W9@zM6aVIS-K^;WsN^L?Ga3AyaN+WGo|nEJCT
zaduZjulBsKSsk&Ch$L880dI)m!OvP!)U^NGjTR5}Vc%(a3|vZV!?J|yLG}t7)Za0Q
z{r#pRA}egd<S>l;x-~Zqww7G#W7D<@eLc#q?wIx#BkiWN7)dp3XYtJNFaV70*;Jd{
z5VxW&<DE!>wWJSManBola^v&X@=MVUS;@QU79llSI#0;pe`0UJ^uFmrCmlaW5%xHn
zTgxvVB4y&&)3>ZAqHn*O|K6GIZZDz;jp&{A?@Hr_i2D!Y)<>Lys%gLis$y{AwLrh|
z6HsOd9cmaDOSs{uL+c(GrGAyKaatozEZ?sqsL=GP4gcieLAnm9;Q3fbZu?r}cMga2
zIrvX@>b6_A_e#9mH_=uxpE2Ne)CH@W)X|Q<`k_iRf*plHVorIrr<L8hmBqQOYCdK~
z)g6r<#eMo<W|UYXW=08^X+71KP|6MGnuyCc*-t+==9YiFvT((#ERlkaKFH5P_MUfe
za`uxQaw(`W3`IgpNM}FX^SA=L{3YwD%kr*my)v=inqK6LgGA=cXJT8CGlUHJ&P(C8
z$%%be;-a|ojc)jx;MzI)jp(+3U5Xou&gBL8kbzRI!V-w+y~0z>fxr7z#WDKacKX_>
z*;T$EtoJu02)h*yHY*#}?E;(ryRV<fw@e+fzt{;0$hy!Wel`5^Fp+~kJ}w|n8&<hN
zCWNn3Jf8Y-S!#M|3@)@Ho*IM%ZaS7%=U~qGf@SoBHV&)ava7vm{b0$55x&cLzBcuk
z(JMIl7^r<FDqLW0oL>%>jZfY2DAjVipb`gbd;Q=6-S9xs8f)E}f9|LemD8qi>&SUc
zKA&E4oi?Ts)k+JtZTWGWA*OJd_Ug1rFd}q-=FLeZj)ho}ZH@7)F|T9vNKlE<ThPET
zq9R>Cr#s<mC4g?obBX~;nX^8}M#SvP4pANVdsm3Ins@x|!vhq=%3q6BcUXz%gb?92
zyZmDU2~W!x<YK9@Rp+FJ;nv}^NYl&`q=k#gB&Sa`vD9CrgCQjH+E}l@tl`n`pzis<
zt*h{D65UOsG1J9J``8lTa|K)0_b?=-0zW&u*D!V%uHiJuuz^eT#pq{;nKDirLqZ<i
z>3vmwX1y7C`Zm0#A(%gVb9VH`RsQ4!>|;@G(j?Zw?qMB}A4?Th13*s^n`71A!<uUh
z^>oh3te41T&(zTG2vc#XAN&0PC~EvJ>8zHswIoY*JcIypW5oFfkzP<=A0?OQT-jp#
z)ktSbj5-$U9psgIJeLsX+MD;y!EFJM8@tAK+)T?ki#q3#>-NwG9Aak3!?iKUgO@tD
zq_QQqmL5#$|5ScjP`>p4u>4F@-cFsSv*#?gkmDBS)I~6hma`Ng6Gkxe0U$s{LN}h>
zmjO1BkjoV1^zTsmwID@SQNXS6vlkVo#@f;O3ynpEpeQ?CjJT)DS_U7C0C$3thmxEc
zJ4KI+fwQ$_+A$HXMOB0w`_<~6#dxy9({W>huT3*?o@lPInQv417HQgl5up~T1rH#2
zWZdyS|KTu!z=}T)G08do#asm9(t?XGMcbaTYO*!yzj^j1TUW2cXUI0ZFFwz^%QNmH
zuh#o&xo_mZ*X0px1s_*Z?JqUV^k454V617I3i!TBpY(!=MlZK*>K&qU{|kP!+FU)v
zk1!sD6Rj2V&td!cxY3KvffH2Mb#4DyJ)m<!7yKaYmAJ3{K)zE~!*=v<npw=yzfL<c
zi4aETXrca%`NXzNh|jgb9MWNc`7VW+?HE55{P7qM9(@o?q(kBb-QO<`9<@qjB#=z7
z3ZGG*Fe67|kzQE(U9wcKv8}pR_G2p%XHMjO<yn4J;6e&mO9srp(`0-UM;J9qc`DxL
z;AAJBchIZUtJycst$6lI0XbF4&R{M%QsYepPOAyG^qa~JkLEY@OAT>`s&2V-Da3>5
zkjYNrQ25b2T)iaYI)X3BA2L6Gs8_>t#3-|R@^jJDgChO4)tjw^Xo{g8G+5bE>+FLl
z#9H6Uk2x;9R43N~Yq*!!aCSWPq_zYIRs`}C;cCYC@Cz8yx+{<&5QVTHmYz|lLwA>|
z{aFhRQMoSIQj8;_!HvrgJGJvMfdO*v=Mz7ZCMbCo%a0lMzDbu-=ML|=)^qvEL+Q(c
z2~?vczSVn+Ay@8Bor}^Tm(uhc{};;FXUh9XFq@7DTatHE+u^anYv9wfB|yYZ-&tBN
z1i;gO9R?*AO)^Lzt(%bGCh$;$8%BO>$*DE-7n|I|0=a{=p1L>>EVwv)(Ay7H^7pfB
zz5R0QtvB`lI;giIsP`F(j{JI+TlM}{N!|6{m#sIk_sVB{^qN)^Pd`-p@9MraZjGG$
zCRX#ZyOkb)NHuaVYnz(;FiXm}yOo+pnwp~n4&ov@dc;BRM7<x670ly?l}JrPQMIh}
zJu1LMe!g{IvQ+EMeF#CF;VmvCe>~khmqd^YPmuA{gITP?lXrMyEYZfUdYXGRMPk$^
ztP&cz6I4gFXC($u2Trf@8&`V0cvOR;-R>D=@bCo<WgmhwbQ!U$-*WvjYY69sSx4_x
z-bJL@<$J@ec6qzMsJzQfp;HABX+ag_LKBL8dTQ3Gd)cfj_r}X#hn*>3hi7oj!dw}q
z@Lajpc_Gotc0c;mm^1pc>eicfc&ByORut5xiTR&u`xLR>m(=zKpCk^z>5Zt2(@LKP
zs89XPXeOxzLb4U&wffayIPXy;b!sq()WvxRz^(({Lzz@{CYw4_seRa(1gcbY01nNg
zM;!3RD|tZBW-8w20A%WbcL%BNqOFCY$Yr&J;xnwqB^On`$?<iDSelX?MuVGwa2cuI
zH~tQ_e%(d#0($ucwo`X;N1ghNV)gPXJL;ye(7J?cuWKA4usUXb%Jl&o62z7T>nMp|
zI-d~EFsODKVYQx$daw={PKIhzmtcm)aqGuym-tKdS5odK*v-Gz!UcruWJ^EZIe;IR
z#_in8eohqCy`U1iBJO3sh6N2ithdAJVo9`ai!B4AXlV@=Me$PGz2<^KT0C3+RFVhj
zd)(QX(-ff(R#3hqaq!rvg=b+L>vD7DKs1H@YggktGVo0Pj8d|YN_5SzlASco(-l^;
zi~<yUG2Q#Xu|s+Y33BS^rV%I9He+w;>>72d)jXSG$+eAJ4Y5apj_RJlBr6JhuY{-_
z7jHw|z!%>R%^yv@`yciAvxRNtDhys5<T|ka6hAm`J$`KcW6OER6aZNa-Xzp8lZ4^b
zm8GNGYc3)r)YMh7vZ}clIVJb6xa735$Q?!rn_GHVsr?XIjvqWv@|x_avNkm?e|&m!
zzN~?hyXh)+mbvtuGci{u7IH2IT)<-V&owvE^ewb^155^2<Y^Oif%_k)6ks2D8;@~k
zzX|MQrU@5ze4gO0Jpa()-FWh$!~03GKfL6b;9_LOWe5o+bDco420JB(wRoSdav~vE
z>fRi_V)6nev;psTBfY_L6Sv1b@ZcU@m2GwzJjpwQ<bMRoFOke_UvD)RQlUTFR}Dmi
zl;N7bIKS^Pe$DUX#3+DzDLsv+uHb&jh*H`9X|@4j)*i^fuh75`JHTlAns5e&?u{qQ
zbIw*m`C;A)QoD=J14QYO_Y|w^UGAI*_OJ)95(E0{%yg3;oj>Wq_L>XAZe%FN7ex#}
ze1UH#a~xF~BTCuSfnhe~5Y=Ey?=KnmESktHmIn<!yzl*uy)UwYe*2YFws>C?usBb#
z+U4y}R!dl2xqosG(4h`6rTHpyz#+@l<6<5?hr>Qye`BcM_4Z$8y53w1fcVlLe0hQ|
znvatOHz$~6_vRrCWgrzTFyrt;i+XR6;4Xa!5qmd0?Zl2^udmtbnl!k`rG#~p`4&2d
zz7V}(fdv;PFLAC?(f^`IJE$U6mh$Vtm~wU1SFkbTfTN{x)MRAYMUxZzk8Uhu0TMoS
zNP90X!uAkS+F)DN_hd_D&bdYoAyx+GjyJ!YK4&+wiqmiY8?Ob8s|7ob&0P&k>25x>
zs?c3{>=9D^7j{1CdRrJ#2EPs~f1UH4Cb~-8B>pvqSnp^K3K7S~I!I#qX7S5fGIV|s
zBBrc-Rzcv9&kmA&wlLJRzXaT;gyP})_CXgwuUf;1X!+K#(+HtBc^=<$xNyuA(vY)q
z*}@T(8xRzBOJ>J*OJ;?EIg^z0Xm0A#p50GU#;km{#;$%1`Rs;3J{xn25DR-VK#JhB
zhdv=6fue1#i4nVE53y0)?|2iszaz(`P*%L#VjQY4A4HZYCzqStOb9!ACDf?tu^Cnw
z6|Oz!U>7KV^Dvq50bKU8*;ksS<9Y<EKx%!WHckBLXT`Nv^B-XJfJx2w1eByEA~a{_
ztR{Y}<VyZkMUd}{W{HGT^UlfWWBcdI&)Ya&b!dJ-M<!^P5ule*ZRLi{`~>pzwy@;q
zTKtY*^B}Gc^l>_T0k?I#tcGJoI>&I2?<wTXfxornwlJIu(_LdN$rk<<h0V<LTNkTd
zKkW^#$UrtqYAT`e0C&Vb*8IIJ!5;fTDkTn&efl^%y>y}9v(m!K4epa4Fn3E@yfu_y
z9_;kJ%9zRItnVCP@XrVv(Pyk_sw!#tnAUVvg4X8jYvRF5R?@S?KDKhBiWEHKFd7Dy
z-ALbKe22g{PI!hx;JcHW{|EREqQ}gffo}w}YhQzKb?g~nqCbGEg?`xP|JPKc5M0hT
z6Mz7`C8&I27Wgksdn+>MU8AFDPC-PyCw%zL`M^(`uC&`tngGN&JQ?t6a-8q!n}Xe#
zsT!}h8+faA+BzR6pRNtMv;N*wzY)1C!z{8e(81(rI*JKU&_Xl{LnkLYV~V**ZTHqH
zu}_rMzLk7U&(*ES_^?;gO+~AY<@pM>!Wie;)#t#C-$@oCqgBY*zDRz(`3Iu{x8dB+
z%ze%xF7;Nwhsiwow2|l+ud{H@$n^np)9Ain!Odz&VrlL{f5g32Za!Ocb=<=5$uXq9
zZ6&0d=jJHXy%rCeT+c~*fQP1ygqPg_I-kQYh?!%DK#Ebh)+}?RlqIa?vTp97YYXki
z<}5EDYu9X|Se@>j$D_Y4BTcuWNkfvmTrw4LXQvWvg41|!(*eBwGXg95SJQ|4)|;QF
z*6@RiG4Uaf;00ge%f@j_Lrv-mK#8T6n98c(G7z)Iy=4IA+UIa<uT5NAQN!(rkk&}Y
zxIvH$D(E@BSCz(a4w2AetG>GdA=)1IXbUC^zx|&f-HtimFTjfo@9p0C2DiYg&L`BA
z0rt*mHlGm~uY~pByAO2&<%T;rs<~C~`R+&N`Jalz1_^yQQFW1by{VI7W+x1PzG|rR
z(F_2MIqK{IxO5RX+^f{9j(GyT-eZorI_v$JGVU|48!cFpPt<prp?O&(hI%JHoDxr+
z9#7p+gd%fvpvdI90J3n&{GB>bunuvj-BDMdD)==V0Ka9ydxd@{J9Sm<b!P^w)JC+M
zh8fXS##HZ@AI!RXhplq|%2zmv(HwAq;%Yby`4$@^F7B}-vpm=b^9Pl>5Ad%2STmMu
zqP;oa%-ED3Gq%7^kFDT5Zaeu1SUdYHh*!JQ21c4j_bF)@VOB(9?=g+r$bfsKqmdJ-
zg{q(h&7bVwf8LqQ?oYzGhV_u1K7odB)p!T3Z1#IJo$u6!TO#3>n;s)qguB@|#0#{q
z{iYYq*(cT9&6_&!^yfD!Hya!dV{)F+2!$C>?B;YNFIwGFW8K>x!9C5-Tbz#z+N|cw
z_!=QtH&~_t^tYPpltTTr)veRY2sH*BN#_rUmcNL^dqCI@@0+{;ouidJo_zlDU(>if
zQoYMcGyrG{5ECmN-qm?bH!T*Cphg9@@<5iR>a!X@#KTDP@4OH^O&f7d92Wpwt{*Xk
zI8N-l(eib=Qb`BmrNvRGQ(=_kVeU&mH^wVPx*cgOqbh7}IOG0-9R5{w=?Wt0`h)4I
zfC%=gye%Hyts1J_g%no7LOCRbas~yfYLn2-Z;E83NA~L{?wBCg*(Oi#_=Hk=RVmR!
zNm83;o-W<)*a~=1!%)nuH)Y(rf5y$pv8RVk5q~~}RVA@-d#oH^IP2H~3~}?`(jJi>
zIjJycF*8zkReR4C&0rCUiL*(M9FfTn1iHcF-hKE&B}@v1j@~lZA6Cyo|903y=BifH
z%+rDawvRo{hzgnqQCIue%5c-nQ$tp>{3oT%&AZz2HPLX(Sw_KrdHdK?!(M+OM|$Mo
zOjol*^H%p9n$;}nc+<=?4guyQADCnA5irm2f$1#<U(6X;cH(d?3n&_O+LaX?VP4%0
zzXd&*D$Pk*YU%x2`Mpd&ch4%dY$jjXdzqfwseAoOT4cT#bxficH`R|^+W*jrIq8tz
zH=fiqv+9tZPxX5~e}Q^l74&?+Kh;0^LXEGRUgaX!HnKL&<X%B8axHB#LnWVkimA9d
zsQB09X2E&C=X@v-AYVV%hPxdh%rIbpux@s*+019q7aS&!7}gPt(Yu1u?!k@bL_0Rq
zx1JbMbw~#TT)e?wEfX`VrDvgDhc9%JU+CM1FZ9C7o~U73YPbb7$~%04e?MFSt68!0
znr0fyi|*CAbWs+7+waoMoEZRcQV!ta0B)oKoF|7kf+r`1X(e`woq@Ydi{BO$Gn1wM
z6?uOmqr(26m&F`xdqv`4zv&hBGZ19`9fK&Y$yR`$oidcT2|CzDTt$<sKU~_h&88gJ
zXKSz(v6_EHZ&+?&Z!M?iO#4ONOqP@XW_t3rcZ1d!-WHxaMHjPHdane(zX*Qs<+q#u
zX8B2@Vc&C+@yVe>t-0>rV?!>(lYu+B?UOFEt>S_ehgR3+^>VNNs@Y42`FpA0;<T}$
zcJ|eN#s%%niG8`8aEqW9aVB=h{wK>3r4Ki^Ptx_5BKMty>~F<(maiAO!aKIYvjE(o
z<Ta!;HNF5opx5~B^Y@|lvXtvpTj10djH)fPlFQX%YJ3POj;~C1c5suTB)Cs;Nr5|F
zy{IjyR%Xf7GMP=jv$FXjsp$poJ^!%>Ir<sdJ_P6S9=>dGH(QWxU+#}g+qBu=uS=4J
zBIgop>vY}mJH36um~5%?4dc`J9i7>`dD@j4{uH9m(n;@BGqd<V^xr#wt#caRVGqss
z@9^C{cRfp%Y2Ws3-8h5aid?EQbVcf@9)|@fb&#$fADV8Q#dP<;YBn0!#HtE}C3unu
z&hs1?0&Yq-Y6{(kui#uTJE6q3nf5cJ(*V#c4DHPB4}VR!W|bCdmi-y-nxktJ%rHJ_
zB;-5^WYJ8!H?uAcXn>2AyjJ5lAs>;_5B2oZ7yS`M8PS3azQ&xFjp@jQ)OYh!c@mk!
zC4)uA8vtlK+<;Rqbzp^`mvP6}*&<Wd<ol8`oi}16Bt9#c{xxUQGf*GI4N*m`$g%%%
z+{z7mc9p+kM()lzR(=IW-f<7oUwU2Qqq)4Z;R}^L#hl`XQ>pG9mn<hhhslRH^#k{k
zMZ#c)`Ya<7-j|sxUkZ+J*H5)~!*~u9{sWQ{Dlap9hmMeb+r4QU=w=}fYr|bXHCyHG
zdl)$LfGZ`|QHA@<CcmBvvQ%*%M#(a-m;nNsxzF?4Lmm)G+!{g~B@qVQE5m|)I677J
zh%KRnbwlq#-;;gxHO*X%*Y#%F)QYMg7pNp7`I5t}2Tf`P6|>n1KuEru)PrvNW0tjY
z0mFCQ8>EHeMOV~VAIInU>%-2j4<a#8o;5NdXN`!?h^|z)XV1%Yize;#ZD9uBzP{`e
z1N(~hkm(9(pm0@Ue*rFcfN(W8pBvY9K4<#xgZmdqteNVE@BZ?so^c|fu93!DBJ!*=
z&cMw?d0W^4N?G%M2SR(R`RAE$(*hK*jBcY#ArNJMd(S33^t{GL$}P|RKG`{yW5MQU
zWod@Ytb7}eY5wTv<DPFq*4CzzJ>Ul(U;&^JwdWV<I(b#~#+zI-uMIb%#c3|3n3)H&
zxKg~i?I9Ky611)b;N8`??dkFoG?P74<kWvi)d*S_3y&+Dmzri3bX7ELR)gNpL293$
z#q-~0?=D`2^?yu)nT*{G!u|8#{B`^&G2%p_{>X23J<G`EGu+~oi6@1K=IlJnAn7_%
z?&+v20*Hpn;MKdMt|WL%-B6YI{K}iJjHNECU=gIFXLdDJozf69c!AADu{WeoMh;-C
z?O1imUL-Zm=sKnGBeUCJZ8)}Kezeq*aJvh;2c&yexN{^cR8n9!tQtS={FAk$E}N~1
zDk6#5_LbJWPw64EY|f{I9KuDjy!>*v@P=1pbQ|csa81A&t*#hD)7zf6%JGVzTy?`}
zcS^*1s_q#10lscB>-K6klHvT$a*sf?u25g|8Eh<dJ_|ot+N5XWMnv~Tdia-!q-Kj4
z`pzX@9Gvk6LCG4G6i3T>x7!(qAHkw~J*vL>-R?qmQs0DZeY11xt5<!COiy~$_b5p{
z>x<-6xPuC(WGg&5x57!P@K2_~9Jlj+Sf?y%2II|KklkqjI0JxBmHVB&l-6G)b+;-~
zk|Z?xvj!$h*YK+Xw+onRttI%dDf2<60_Al1mD7;xnd0_ZGN+f7HjxI$`Psq2GHX#z
z{khu=+v0<QkY!BZBO*~eOwxC<3L^SzCmACf^^DY~O`1uKq<&(nz*Hsa!u8c)-;{Gf
zYHQwI%FRBhPvg@+uJImJo~-_0&OapJYnbHQ_@oybhe+kyU<o45OOUvm`s?O`QD;BC
zyDh(=e}`;5p`ac4yW8>_`V)mG(UCXVIsYJmhOq(e8;Xa|EwfXj;?6qvk7vqGs2!=-
z)w=DDNlYz`(c3EZFK+sG8Y$`@Kk8paG<`iPGMraQ2(nolaDCkQ$bDoJq61Uaak110
zEQPK`zq5^Y+;cLG5ZMvBVW<3f8~zUP)dPKj*)l)Okl7QC2vQbl6eeZgXMUaq*_020
zl%{OTD<&mrC`ry{@-;XZ44g!C@VA+>rDX9fmYQB6Uw!GB#qQMRJ@Wh8d<SFA=npiZ
zB2PJ${<m)L`jyHBp|iPiLwC*IgRdF7-*cF!2OSn__=749QWj-XjtWw`hZzb|nzDJe
z@9!(ZRb=MKOwUBI8xW@Q)u{Wdkd-`1v^jkR`jU~~IbaU{ZW(Nu@*uxRii_vd8NsJ-
z-|v4C7*<dc*Dqb}{r~o<Vs=b0n=U8HksoliV$XU+o{0MEF;Gpod5L!{F1!qwZ}%gT
z`?i7>FF%`tDed0I*A0$nlUR2jO^j9OBitz*nZCGpII;gq>-HlGLZMM(2U*GMd9YLG
z7O-u@h@2Ae<QFLvQ}Q;pFlW0Q>M@>~1><}DxWe7`i#@pUPtAnM+-molS>PV?*H5~7
zVKbV#sK9Y`mUpf#@}iW~{vfgs`qD-y6p;U97{=J=1Mb3?Lp*ijeYg93031Zf5O7JP
zsu0MH?rq(k=d(@)x+#BO8)BTFx0JNahsm{)GXH@&N)NtN*M_<mZO$XrHT0cYQ$<Xt
zX6f<*8DT-=);aJ*@+4*bqD3?Li?$MWtp~_LH>G>BLY=2h_VumqR)oX!bH_Y*a7}-}
z9nwj9oEe@e<L_6uH&V~|)F}$)2^Z<2o%@>AypzO8)9hn7Y_9enj}0{(9ZO#}oH^dQ
zPcAcdxQ~B=H4z3GB(()e_xnkuBt01<H7hAKy@+iLdln7=y3}(TX6|2W96}g#j5pqI
zD6LIhKFdV7I)(if;lv2)B{w_x$d{<c#RWU!#uf7c0)EZ?4EO2H&-2+{@_a}`<PkOQ
z&Z9R!&s)l~#^jkjp~SlV_XuqP!4w|n@(9-J;%1p7cRymt-E7iQPTTIod-{gFKl9W*
zb@XireG}piL}ciVG3;4Q0Cs_sL7+Vu`S*YN@Op5kI%t>#v0et^WT_#`Q30@Kki}?z
z;0KL=9{J|Y=Z=U}FGX%Yr0g&fcxsNNo_f>_twWpFUOno(oU!8YH#@idFF5F_!@x-R
zO;cqwbv$s;?0tmuNACoK`$>vtju*d00u844XBIf=8X=I8yV~vp_p&}4N^OM%<a|-%
zUVSr6HmA569ahMx`Finhcs!C|{Ry0y3yL*{+57|0algA8C_WOvDa#tc2Owj}a72e=
zhTsxP4D&=T!w(tmh?iOJ?!thvDe1`)_23(XDH;AK%P-KZ_#;!X`^VgB7|H)Rf8^J9
zd2W3<{L!jheoHghjZcT+-^3pI^;x;~P3mTkdhlD~BQ(=FL?!3ZufLn2+wuRHVVVXt
z6vKo;Vh+#rmrn=#fp*bE8RkbTRDU_#Q4UMg%?nB5cC~x^Ejre5dWMww+!geSAbq?}
zQY}d9L2`HwUo+@zhSW`glE8boC#}yg9^A3JR-6rDHFI=z*H;GY4IWOYrRSFXpPwAc
zdE67EEK**>dCU${y0_%(gOsLhp6{6y4yRfW&C@XI_4H4Me_(x1V*T70P>bvFfbUH<
z<}v>I<a<5e&keqh*Y{C;*IvDaeJYx|XoQJ1w~-g`DgJTX6Aeo^xhG4Acc6cbB`mCE
z%Mwo*b?Oes6h2Uqfm*Y<RMCT9yZ+-tq4vEXr5kFoAf+2>X9Ot$)CeucINYz1>RrQ=
zImf|(v7x*1p9&Sm7Icg)0>mO(-qrHfCAVh7bI4|iyP?3)h$~BnAD(QMWDM>Cvib27
zkj)5WO0@mcM#GeN@b+Eq-evy5^;=)@53aWcznS;(!TX)T?}Fg>(DaXw^~;|ae9!!D
zBRzu;vWI#Vj$vW-XI+Oki$Yc39yaF-0|E5l#aal(0tcs6BVV(cjaf!wM~Qm`hQ=8~
zsWIJ#Qr~3bIJ}|ML?eO3P|AoJjGa^tJu&uD&u8qVRvCM#<s$gTUTSgHUh2wE`}_7%
zzxL$<UF*G@VISQmmL6iyaOsK`NQQ=5;J(;LXI(b8mF}Pz`$%FHLcL8g+QJ6TyA&|t
z?<*(&!`=Dcw}brYu_c)TXHr1-zlfh+iw^T*BQUJTiU3KdFCP?%u%piNvNJ0Y6iW;g
zc_`BZHf9m0Ma;pcyjf52oqKZy4X1L2&T9UiVHnu-a(Mp>m6lkAzE6(3CI%AJsECWS
zPG?KJIgmUuNoi6O=`pw&oQEh8lblcD=}9s#Y=$%8Jc2%o{T~R7D0O=?Qg{IF71^Ag
zqRzVpOvqtC;?^z3M6=2*`9>l3;}j#1fE<=ZoqXgOcTkzecf2ShZr?waZQ>=r(lUZ7
zMN|1EJoiv#cK@)wFE!+s=Il?wp!-_$WMh=B$53wn>DIhnya*On^FDDkRAt0_$xgjt
zG-s;2{FDBsI!~AFeLS$?E-K{f{Ghw*A^4~1)T8xn`0dCtKqC{GF7ihV>Uj_F=-&KH
zVaRJL#$Dad_$SxC^%CElz}XACWY!CFJIu&_Ws6b9VzC`$|9RrOitONKt3wb35AC34
z++ReQ1;mVV+C2jM5OGT@+UcB(3=P)z3$T9rSHyKmVm`<;)OfO4G5&o;vmiES7X;Fu
zz<}_gkAnr#=05tgY}<VLF8u8Bts%xct1fXq)gY#rc~4Ko+1$D~gssSSUhg5jp8$!*
z7=~Wg05C%gY(1FnTg@->C~U1^hK{z9+H4KR?%;u~QCfq|?wE;tVbS|Clmg$_w1Te&
zQ#cWHsqQKzm^B~~z=^7{!pwPc2_IB<!wl+eI3luKroM(=nE7?Le(#Ge?WXukV@l71
zHt1?g)T|TD@nMJfs`;f6+AdJrqV5+M1mQv+MzEXRG!=LL20oc`*a%HTf6(g-MP`^H
z0enr@I<xm-wGOLN17s+_nii1AQdtgti=^wqsX_Cw=tYu=z4Vmqf;0*-cNQXP8MVKt
ziVEN)oDQ=D4a02Kq3z!P^}^5`|9XV+8+dMNVd)|o(<(egQ3cpwUdA|>Bk%Dckd3hv
zi2)%;mUEUq+daOM9q=)&ovgfvs>DDV`|Qo`AF#&leA=uX6Ei>p>5Cb?Tf4;HvhE)2
zZ#lo<*UXQ<UNS4Cn+md0umj5zR)Ke{lrd%o*opcRl(T!G9J1RqP6xqDWL*58ScCgZ
z2XCO8-Q>!{E}fD?mQJAV>bA!;>*tN^`oRN2uzrr-5v(6yPEV6v>pSmqClZ-CmmZ)W
z!spwo+C~rh_c#Ch5<C6v+Ee}Qbc(s0t0C5iwJiFVR+ZUet6i(v5(=khZ_#+4{I<D6
zXWZ5PgBi(LZ<-*p-ZZJ;^-#0kHcZfZ>myM5D=o9ag6hr5&}x2@GO_e+w6QG;k&I`X
zX)MiIfX}N5v$&<L(<1B>c}|N^WNQj738`|em8NA^U+z7=$@2GP)}KNT4?W!aiv;U0
zsC~2BpV~VYW$2fg2i-LL1T@XAOZKV5EM+-t@P~!+uZz3RtG!ZFd$2zS>rys&wHbTo
z2mve1dTiHvjHhSxSdYc-hX?zb^@z&`qzv3;KHP%rdprvg`I1?UwK_8AF2xuED3;>T
zU?~<Hx)gt>rMU0|mg2)^j7{`Uj@1|O6Rg8;Aam+m>hEDIfVBGWeNPK<*<bvHIQl4m
zA&%uY7hjuZ4-EN+;zm$3@}Wcg%gAd?RlLtstNCN9%}R&d_PX8}3@qP7qRc_+`i2v?
z&5&z#yv`(+&nMNq^y5Y3-@Nn>r;LRj*h0RdaMN<>$4&7gcv+EoDdc5U=H*CUpu>K)
z0lX~DyjWpuV~Z2+gwZ9_2iebtn*!JO)_=B5JG#9tpKTX+0o8q`^=Z1Tcx1y-P0OEF
z(Z+sF%a>*92#0aEeb*XZxq32hJ-^nFIym!}TXDKkjK38Fm7xy~?y<;o=yf-Iwlg`o
z@aYrw-X!S|{~MP)D}})FCR*ZR&~e`#7P?4oKcF)oR?&stgWmcIvfLc@5W@I*pm@UW
z5a}p<*mZ5#9tMlJ&g_!bK<Fk+usi(o{>Co$L4;T4$Z9*a$U<7U0I8IY+6mMUT2aqG
z?iS>?9W}*DfaO*B68iLY`lK#xVlY+hV}}Vcy_^3(?%q8<s_N?Fo&bTU;Dj19DAcIY
z2E__h+MuWzlfaAyi+8HFrj{aBt*D7oufdtooK8ovinX>p<*8b2z0@lL5(tP1SnGq<
z3))ukQaxitP^%(U^L~G8pEEN-(6;aU*E^q2a?aV8wfA0o?X}lld+oLVwi{{c%NOfZ
zoz=d(zN(6hROZp>(Ek2|pSW_%C`B1gRfcToLx0`PfUQ$q!0Xv7fr5oC^?5x?eX^y0
zB1PQ$F2{T}a9-?X6+-CTAs;YQ>*Y;$-}aG_?)qw1%lew=(4*>9;BiAXlj6Hm1-M{6
z(265>*)KfmKl(>U_)k(yu|Hsrx+S<#Ny2z$*&H>UrSzV$Oj^3mu^(!~cGhp+hg0Tn
z|1I@*d3_LjUma~h>QaB81za}6EyFjxrs&J2y05qRie(z7sEvDrEgVY_8Q1mK@F%*~
zuBJqtcv+c$*m3fUwqdFI!2e$dhJzx(#n*pv0DtKK)(PN~B-C|1K&(wHf4%=4ZU_Au
z_oB93jtOv;OMj-pxtt^M+QUA@a?8g{G=)*JtIlDrHpcf{eXs_iKKI}gFJGUb2IsJR
zb)Inmw<j3>xm5J$uYc8=UYlU~lt_NEiA%V}WGVTp;hsb81=1AlXB^h^Fn9=KA5}|w
zIDLFsJU4`_fnhF0FByU9deRuSVyjKimDalw!wbac%!oB;&MPNycKk)^G2t66M>CL<
z8p!d?PS{N2oTHBO?3{bQ-~|r1KeJqWo?ZUm{|VJ->6w?FqiNk40o7FHt7Pl_<R$n)
zx|8$&O_{Um65Rug0GFxJtOfnsHlb(m5F0jhPESOC{2WMwYJamBYG-sdq2Z5v{o~v~
z6Ys9CArFa>YP##qK$%+uD$Td_C0etDzNO>dSy(b8yb;y8lWkUNQ@({Ib&<BVM;7Tl
zn$~2vEY54p`@rAB>d=*JtYLq5LnlsF>XeFl+`e`<7GFQE4iEEk^-=dk;}d41(mm0t
z(KWFOe>Fdb!TcCM`V)1}Zp#JH_I-xvk_)cILcWY=N3)Jo?Kk-SRGfs)1jiAw6UfF1
z>C7F(QdC3Sn^=n>E#^^u<ypye$ra>5r?b2~-aodHlRK@sShkTueq1-%8^CdZgRoW3
z=}4GA<SsXA&l}8IE6YD^)c=@ge!fp`C^y@MIc_~yw0=3^IL?~Re)}fXH#4bD4X8oJ
zLJG;VQ@4%Xr1J)7EQ}4^Igq2c$5&S*H?uU}5&lXOD{#lcS-dqU2JG&s$xtDZaRmn)
zK5UZ3Nl!(gJ{S;}Jjtn?mV@MSpNTG(shG_zb8F&wZE3r>@*Ayx#o0^ibD1L<*<s?=
zzvRy;K_lJ<T#Pv9B&Sm5GIf=I1ZrzG*%!&rg!-5L%xr1vLUBuOD}9q=+t^I%=HEmp
z(b>9%)a((lk6&*8tNh0+|J7@B>u>x(5Lw4)?UF5>{m5>74oq}UEGJKdlL1B+7^1ff
z*X2nl+@VtVigA*Gh~~Yz<BH77MAA*(jB<Y-AQ?_mbstZ*v>W=TGIau{^8sT!(@%5#
ztbu1+D%Ra-B~X4tA2GB_83cI@u3K=V@@9f0s7jeK^ft!t>fCInAEN1%q$Io!KZh03
zD=)X9%e=?f_yaK{E>j-_Mz#a4Qh;cd6(yY<_vanl+k2?wR4N^BxfrIH9x+H8#}BuY
zJ$IVnT6S28<mH&%r}u>*Vwn@;ctxnw#R4No=xBv_=?Y?WJK0QeU+^_hYi7xnQ_6vj
zuZ0u<)v8OYXK9q<22MBjmId)bFy5oHkBJ}Eaa3YeG+hQM#**ihvCsYK0A)Q@{WRqF
zE0qRr5+qw)3JU7WtgU{DS6>!QT|;s$LrHx~R}sXkNE%C?T`iDbAr1a&*e_O7i*!bN
zQY`z$8aI8;64-hzGpTm$(-c*qVIj}$J#0tyEXwn9^@Y`BORVc6F}lUJNJ#`8orFK5
zgWwrz`0>@V7)Njo_zc&XtBXVtvxKtVDK%~^bixsEOTiZ9M7ExeF4KsPPxwYOwTwX$
zFF|ECVO-0=%g>(B&^k+Cfg*@#3|#&;No0h}GZCTKqN%@sWT8Q?6j60NNmELS4=lw?
zpuOBQRI-Kjuk4eLruYeC@KVl`rcD*ppYhHT<}?*X%V*K@UqT_)S_W!!alPyS7DPg&
z6(dK8(h!ksMzHDDY}3Q>M3Q0#lcNp6U9~!Psfe<{s4PGt9cAjyT9MlDAe|)%vFgg=
zYo>5Kwv!ddX&jtuTorw|bnpM&nejTg5}wjn6+>EPTK$)B3{<onjQcXZ&Mcm-Xt?d4
z%~X2&M5lmVpSK*SJ)WypQA{FpMV-7cX(k3v-^n=dkm(_^YGq1Wq4!}QZ})NU<jgO0
z%+dx}&?VimDj)`D$+}`S@WB{lfyw{{G!|9qzmg%5ym$<#|3I(ZN7N|;W*(Ehb@->y
z<=W5tzZ&$hMlg11hfyr+q(qXFS+VHcuErAUIuY$Rl|R6`1}?Y``IvgN!3!wL>gUMn
z12#p(3bvyqjtzuEKbo2c2{|aap9lMpni4LEWsZ&;9dj*vt(c1TD-)R$$FyDAulE4X
zeejvPnSTZPW3*H>VXkA-)h@6r`lVv*huYgYkuBHUUBSMq(c)4~2Dw=RkmpAlHa*wo
zzvcF-64pK9eoY2&kgc&Qmaba~U#e*eW-YGfzrNNcg0kGNZ1V`xxkPgO$cHpv_1{Wv
zqb(C6E&r`ye)CJhIXYpV`R+kg3y$&mYAtn>&<4x?!!UbyuwNs-^`Y@C@FVQhZUQ^k
z@XyH&0eedKg9wDHlBINcBxf#n#Q%*W!KP+PTYU!pNDeJQ5R0bfkV<)HGCA}Eu`!qL
zQC^K-#*&jREs1qq-A1}dZlOax@Kj51)w@QML+(Oq>FS|yLq!nt&7l4+{e~d)U3%5%
z_!TzCLQ?L<;w5*W)uBv<9nLGKuKT(5S(8D|E~#!K&L4*Ms!2toBCFOMpwNVO#2Cpy
z>8C)#;vJb4a|amtP+vyR7?MPK-lULk6Y8J;TPK<&`a7xYoA&I^O$@%j5<Dw{=cayk
zKZ-kVCjo}4vk@|OH4aA--exJsP8hphK1XK19fwsGiTSry*Al?RElp_6n<WCk+uXdR
zr)H`IZCJ-M#<uOfJoQWP-li9RdRJfRr}z2x=F+bW-W9$u497WDr``q74+En^-8F$-
zuE32!{H7p22-b>T*-W@0ir^UFWRg~*@Cpq>ehQQ!v?U%91hUO}wHn0pT2+SUZ`SJR
z{YJ&ayRQzL!E4x3Ue^$*AFryGehHL93QlAmG*d$n%JWSgC;X=0sZHqR>TCIo!LML7
zs#<Qauhyj}Q&llrVZ;N!IkD~|WIoR5em2&1#L!4i1si=!C}W`uuQGkmp^zIR;SHjf
z>Q$=O@BH45cc$MZP~D^|X*m`zRSI>Wg)pK|O7u@zO(l{thn*0Yd%^uC;}R8$;{+|M
zsO5a))|Btw=!N@8F|kqqkR#A|w8mL(bulucLmQ_spI94PM>!jN%48>jt(KQ0T1-{p
z{{B&EO@)Y*oo1kVBDErEXs@qO+u18cksMwM*M#m$ON|Ru?wQfmn8&xWPjG~trR`Z*
z;LnBlXsUbwT^(I;?9f=|hzhw6J)3dL0Q4F$x`OL+$2IE3hbC~*>qAs7*7n&M(Nu<l
zdBc;;Z1*;mU3>B+GQT#wP0lXv1flA#0nSkhoh)54?1i2_b%pKCr$0ujRX6Ko70yMD
zs8HW)fz8SUG4V=m(Z}srcA~^}h%956M_acumhgM>i!7um<4kADF32pgDyGY<Vi)&|
z=<xCp{hilVQ$DH+t}ns(46;HHNE~_5P9`L63T0HZ^VHA(eQpr+G4B56!u6k_sfqkI
zX;AoS(lD$@mI;$7O($_mvr1{cpHFi}aT+5w(r8fmhlXi})fcB(XK-$?f$t9w(~R4_
zIL$^&^PrhM`5*YI^RUlO;}{+YrD`%yqDJBc@>eBZkjUOIz&JO!irt7*r&31KyABj)
zL0f$GzijlR?kEjIuw^g+jEy1Io%5bT*`gjJ#ww7HNfyPZ6wQz>&zVIr;Yf2a-!6*j
z?2~6)QOv!4Vs;B+LgteDA13$$y+aXAiz0Pu{~HiuB70>U*%R5D=kqYKj7J;RI=Xn#
zU%Jdu=P9(fh&qq0kUVxSvyi|=Qx~~`lM-Hy3iZUyJXI~-c-tkzBdshKoCO9BHKFJ0
zjGkw|DnA2>{s9}L8?60UcS6(H>zGG?RV~|zutip!7L~O31aodaD7RE|bAG?8XxObI
zhZ_L1sA=wE{!O2g(57~RX;!h;W&56_V_L3gwJ~>&o9t605N2AcN0^zALk>A_fK<dv
zcsK}m+{$cEP8+*ga6AmkafVFRswPhY1G#=p@&<2kwSO_G8$d#nrg!{~Y$r89mCABi
zxXCQYBD-+QGHGjBs+A>?y`g#qPnB>N$>~+)FcAKnMSV)*oHg~*vNOXdC9!b0+@LV%
z%iw$|gQb3ZlwgEom;;8lH<(W=EGya;iV0Lj(@!!cT<@%DeJerz%LPUnk0sSBtr{GY
z4y)navPCs+0>SZxRlzTT9=k3ft7nZz<yJ+WQ2nr6t+Zn234F_74m_$<?0xZ>pM9`e
zr;`e-v}CG|WQ(!V7eHgK7z>*geC{U|TT=@(pB96va-hbOvH)rUG*JXfAet@rsIBMz
zPM_Sf$gMgU1g^8yfi10A8mfm!)7;3VD{g1!!*-3Pr@AmtVbRoyAlJ4rrd~M=TpZLd
zR@*Xw4V}Y6q$f9(w!SHcrIn1m8bZ~P+GZ)4Eb6ABW1ntYD4%tamS}*p*_(gGXR9x?
zsT`I(h30mji2Eij5M#QLBwuwFiP*cFXX8G`)X0U9D67dAdq$X$QMA8e=kr&T;O?+x
z2**%cH)!f!1pDxq_CFF`mRq?jUHqA6Vl*|_u4xC@ONsu+%Z0Lb+i=0oB&oi9|JImp
zOR-9DOmx6dRH=ODrUO!XU!&TUG)*|r)7Z{qyyQ|)`<z5_iJJ<e>4eBG`6-vpAI_WB
zyiS-IyIz8&IFEjM*VLn5Uxjom`kc#<8$kY09|%4-k~ERMn5733`d^QAogXloi<|w`
zK?svbzmnVnBqNNb#m7$25@!<skZ^K)U^%8ae>hK^J+$r}gG$t(Nb9b8?XuTs*dDTP
zz>Y2CL%CP=5$0&wF_Bz6M;W5&i$xz{{%E>NpMkVUB5QRtbt}0SB5XJ_cJ)$O1LIf1
zK(mB_8G@y+FA)u{c}3Ig$X`s|nrIMQ`~4%*&=`|H3Npd3olG!!i%8Wkyzbi{vqj{(
zAkydQ@3cjvIz>4*De}X0nwDu51v{HhH=^DA&%ECmq?Q=qw?CrUzX8%jvp@jYyODU1
z*}_o`zJB4p?si`{xvw_&^-K3P(tX|RzSg?|F8@jJ9vIUdyoivifHpTDdRGuyO{jbs
zL|W<+s<l|zd_JXm+7Yk7ZbmdwPr_gO{{dd~-$|MhN!y)>*`4T<vCN8|t3J$AsS``o
zxu$NOW$`n4cLE-tsp>YsScqEYZ$E|Y?j_Yf=N;p$!PTzt4!%kVzD~hK^&!XzuP8{e
zP+m$>$^J#F1{tV6Qj*1dw<u;EkWEUmnEIj^qYBAS7Bi|Srn66;Xi?0)E+(2<h;_f^
zdzYh4YEbTXgb2m5CKDQ$lhk=4V`7{ASsR}mD}iasDH$$^adgQ?n3B2oL0dcG|0}v+
zQ9G&Y+G}-hIX>EOgl0m_Q?0K@7u;aUD8SZ|=Bn+_3`e$L!fOvYos%~FyG;b@0If*n
zgl%AWJ4W>Cufq2Ve%Q>d6u!R9+geeoO#?`U$F-Le;oO|ti$-c53#JELO%zY3$igof
zUp5~0FkPOX1>mrp&Tjj7EY~ekpSF+3wU&kZYp4l|++VN737910VtWM$N|FL+4!+F)
z^_lp;Hh<Wk_kW#X&AV-{*YX9Uiyox2z|`v8U3giYNOn`^G<<BI`yxKKU%>bFQ@p>%
z-=C&O&wD*eVL0MG^KbahUQQqhKVy6FyjO@&j_;G>OmZmjvlR*Uz-}cX+@7>7_A$Wa
zzr2%Lq?d78LS%tfheg=zU{V1iZ6BkdJp}9}k`t;U(e@iH;SoboH@Jm+?w5q90XArJ
zw@T;joZv~GJcG#G|G=Z2gjiz?TC$cT3!~+|Z|*B&r7`sC%^g5Kmt}N5iv$nL^4>4E
z$b!*)Z|)NvKY?iCG=Zrf6+0|5k-5?hAL_D<`3t}O^A!y_)#2ZZY0qfKzvAd3u_-rK
zGaaC6Lr^*n1t{?c(@6Z#focmtu?tWDbx<ErhbU$C1`|s)v9fj+TLc3;v9`75+;UIf
z=A^zsOC;<jkZEvKwiloAY(w=)V{P;=VuaX?HYU2@!D?L|i)z`O^uWd!_|NJnVtK;*
zdz1HCQ})*C`@viCvy$l57t@WnB_fvH&<_%5E6(by)J{j7pvtC_b($w@dXAW!St>4%
z!LB&+qfOb-`z4Yqv7x?7xK!Au-WvEcH({?E5HC5qx=MXNsOgYt)iu$S4qU}xPBJ{)
ziK4Z+G)DDrMk|SjB^4qG%)j$)=bY;=WRS(~4D|}GBVY8d3u5G~K-rs{#`i?8lymHa
z8QQFkUTJ;-ISnx*K5A_oi?u7WO3Q}gE|a}nV!Ib&A1&8Ht)(p1b(J(2_=devwT~Tg
z<AXf#q>s!ndo$E}MfB>D4e$4QYnBpn1-;X>-0wH)IhY^bnI?5*CxFUNb)ka)qZdr`
z++-$`(ewjWA48RxeW`!)ib41Wwt%3tM(-Y#X5PWj*NA6pn-_?Glj9|=T%67(H|ZU!
zV>bXLBx&NnpMcynSfBrc>|hDKMmR<=M@$TaUK0##A{dI^xQV+P09rYjU0a@Y=#JyC
z|G!fKDX6r2QyX|&Z8jCvPe0jgg4?$kpK+|lEHrB7De+8ljpch_6%S6h$m(E@a>c#t
z72{v_3n%q$reqPKPL?hjM$BaI?OYZGu{BVYn~Zi<jaF?db0@54_kweHYQFBds3JO#
z7fa&mogS@(8UZa6#F?xUa~C2RcQ=|Y%-Ve$r$j)k0di$+w6Y95SnlbVe8`CE)}^^a
z$>{Xp__7mqyAu@M{y#3^FvK|M0K<U87_6ETHRo%kt*2qUbCTEt6Yjf06)DyM!PZt5
z{l8)KN}^R+6L4||!<Lj-bY~NoC2k?H(#RqW_d5Wc7627ql@6PFM2)5p==X!@&LFzZ
zqW2HL$d=84*-z=PH2gLv1!c@|cJRC~c(w)4p9aqxf@k@9mwsIEd?yHhCV1WvJn!dO
zWZ%S9=l=+OlpKd<-Pg?Rb@(7Uo;j^9?mcubuio5F{-bdp9T?V}vkEUIac|yQrQ;Hu
z-Q4ZVT0lIFND<zuoPL&%cqS`w7|Yj1+TxiQj4Hj(@^!Y<usyb_NSm74m-N{mu5Iwv
zox*Vh?h=okCPVc|+fR;TxL;@B(gK&MJJm}s(Mwu&(=zX;#CE6G@C7!-Psum7(**rS
zytj0xrH4_}bT54suU+YO1rYJGAi|&gEDH#1+r0FAg4`M*Q#z@MbE^G`NZ&!IUqhlU
zwQI=Ni3k=FX+wpVzLyknFS}3)d!Mo8NExZbmIzOG60W@7yj7O)p*4DRr`PgO)j;?<
z7lQNSFl3_(*%X9ealtj12>3DzU~f^X#B4UMMA^Ahc;IKhjt3j#_;XgDoLI&V)m){>
zq?Mq-dq|fUWU@+zE^Tf)t(Q(OJCi4$DHop7#hNN*F{sTKHLsai>a2&=xjQ{0eDz*1
z1AHrW9i>Jewq(=QKU2^VV+6cIG~G$e^kj$S!q9_VfOhK<|GT4Qbj<#p_X5_$MP)1=
zM@edEp{znd7xgVD{WS_|>rfY$4DZ}KQWuGo_Qr(Um%Vfwq5g;a$>P}PsBKm=gf)a5
z`GC_2z+kTsFfG!uCm2>Yuy<fiZ5r6-8}lSo?GXF{_-V)(JuZfYf+`#aZHO&0UYpI%
zSD|}6kx$-5a#z7f%b^*gDin?f#xrx3(p%nk>Gr(`wCr_A`Yt}Bsb_X%?(gI{`Su5R
z%lRL1glKkWVJnV};JzuFy+L)%rmyDV>ah5SRL5_;EnoJLlug2$T*CH3!s$vlqL6S8
z63$Qq7X2XKBG<&GY*r&?@o>T^>|Wld_^<xiia2GeeB7sBXPw|OPy2l4Im*1N%iL+1
zZ&T)zL1yd}(d+NX?I;zroNfe2e*{=9q6*s4O#ZDB#idjq8dLnRXnKZPoiRF%XDyJy
zIEy&{tx=m872+BVob#W0s1qhG=y|_4^N>Opn?SK~)O!dN5+~Mh)kk*1K(9lQNEH43
zN>tu34R-UR=}W~wlO5u3P*K{r={$Xz?WjL*jpHwwv<6zH;|~5~h-eJREC8)eUWYLg
z9I;^2%Ie#Q7Arv964#eU7Z}@Wudnof12j%qIo6XgDkB9etfF(p^|gKcCz-#Litu>x
zyP1xK)BvWV0=<q^Y7)izjR9l}$Yj;SKt@fvGM=%tg%iT{@#6K?mgj>r9jmrl!0Z3#
zs_qKt5EW3s6!!0mAWxM)>xx0`6}F1SYxujYfzoS~He*u=IB8bUI)aY$Mr`DJroK1w
z9UYo%gJ%4nE))~)uqK#*_Y)T|Utla?1_6_^CzdoEV$)nSIerHTK+om0)(G@$ZuYX<
zG2Fhr&1QBnb0&8D7Bf-$LNaQ@)D6z)f~m*0&wB*i^48owZ?Stjy?x$7_ckq4H=})?
zu5%gtS2-To=Mhmmq(3sbsXsn0Mlk$0RYtGgNiTl6S+qy%*FyF)X#`2#B;;TFWI?qh
z!@bOqY@<9u7*R1PwUOHY5sBpgjF>KH)iY`$a*puPofcmZ#4eiwH96i&2qKio`d+FS
zY1v)q<jqV}AkPlfLZ}R^qoND4YAlr50|qQ*0WMS2CgtVcfnz!2-<{T%3T!v}HP2>l
z1{PFcERSczxu-`@XJP)F)utD-!u|k?s9bEoyVH6TkhnLu&Ov|wm|>AHU0FVz-hy<s
zF5P}7xO5#>D;h!T*eN#tXsWugAKFH-&1iQs(a>Him!!i;DhoucF@t&FXO<wV0pH|0
zf9!|ccEep3U&|fDjEy~A9T#P6f~i;WDdl)cm+W90#&5>tjv%h`Y@1aP!TuAavt4ex
zDc=8HC&ovLt<8E?i2oz+E_FsKDYc9252^4YvlSn>c6R%#XCfJ9j3xP(J)|?rBna($
z>`+cxR{D-P=AH){auXO>1FkgP4F-^=yI6NPhoqizMK-8B6KQM@*sW2DMp~58D0#ln
zZzJuq2M6gsk(Tc_W$sorIlb1)p21_0o*ja5mPo#X>EBl+Q+^AZpeZh27y0<Ab6*SH
z7q%!`ul<3qrE}DDowws-^7s#07v_0z>SmTUVe>C1I_D9Pw`ZcA>w<PN=&haK;S{Co
z&eUe9B!)8q#Fmswc*XnJAp)_p1-bJ}FZ*}wWzs|^aO_x7Y>CCVX~zF4v38);<eE&@
zrj6{dz2*+2Np-cE^9GnT+Si#(6PdYpPzi5iJUgH*o;jGu)rb+9II4zpxv+>0H6jd{
z`{=3Vx!wI85qULfCO^So^Vby!y_$PZ;e{4k1|8tNY&X8MrPs~T5sPvAetVdXXzbtb
zPCmQSm4Ky8QwUJ*lxDPLV^9mcBMreu2s}FK?q&+q=Ua?9r6>A>=%|P05Ue3)Ff=tt
z$eT(#+B(GInE$Zv<zu1y=nwa5>kyYC=1&$QHW6uQkV?S`uuCPa6iJrZxy_X4-?%*N
zlJq)*5?8IUqU56~bDQd<1KCK8izTZ7&t#8=Ojav|rGcDM#d_AytTIqjPc~Hj901DM
z<h^URuLU_QHz*X~rGcPQt=yB9`xH=aV#@K#?NY_FBd^<xC2djN3zDihidh|^p)}z+
zn!X08!BNDe5^epRKHMy-vs#@ovajI$!7dVII2xOtM2s7#iw`6hlH%*p*{?)4axuim
zkt#GLUtN3<;e0gnF?8`a-AB1}B@Y6{MBov$q<wCs+Oxh&q-*Ugu6lOJ%8#uvGlXY;
z`4(VyoHU%-Daxgqr?{W1Q1!crEJ$59@dd3pu}eJs?9S+@bVMazU?tD9uJc}y8cR+u
zAG5OH?ZbAuJG4v2RC6G3WWt<oqC1n$h&laB(lXi4HR_C>J5S^o&z`alQvc>P&~|3g
zT0!$lqC<~a7ajVYjp7&kT1&25r<m-Jdm=UnIrT-mKGQHsZm2^Q?T^Ey9<Jj%mCU$I
z!@WAVvh?13z<~tBGM5id_KFFWo;WySj{L=h%7|jXs+r;9P<8V+;;oF~D~fh21FdH=
zBXftknb--Ti%+(ynOqyJC|E42A2Krs_<vuP9|${AT}KL>HI~rKL?&t!cvt5+e-zg=
z(Y9^Yut>{p$qw0e!V!Ka>O-vLiwc$Nku-jRrs)|?LdlLYOPTJnDaqmjwicN6cTCBb
zQ)A_H+#xWAtX*6{b3S083z(7*_~0H@t)ng<@VW~alMncd1<adoojUB<xuS-^rX7M1
zi!*|dD!>s$D_v_gq%Zt5Z$p|l*X|G;cLeE24zLNH*<nvi(*P&{{^w2tT;ti=&;Zx8
z9tEl*<cHWg%H1<t#gp=owd<>*Ll5DUS-D^J!1gril3F35P_hbg7yWL$TaBLAsjS&y
zuin_VNoQNhWkn^IwblVn*0%Rt_4y{5+9RHsg{?|)ae{7^w*G7@u0tYE-z1UGg@m$C
zq1NsB-aXQRnUxP1?*eAJ06erI3^1y&dCoDWc{SWMX3r>TTPT|lSkL(^VBvsujnW<4
zawWG8XIZSo<^#q5)>t;;vv&xfTLH5HpW8uu6zqEp)4a(@DF|6#gNEIim!ltL5av(3
zNG*ytj_k-Q(!1dmv98>0wR)A<NX7@pyX(eKnMik?*<BJ}MO}n0|M`DxcE_arPf`9l
z>C@3i>5?DqCJr`o<t^@DqNd0h+9-*aYIjnzB1d@Zt6*&}k#6r>Nr$OXol3G(G~M+z
z!U6GbMu+Ye9r}ZE7AcU8QB-u)JP}lM)NP_C{|c3!af?5vgd&vgAJp!;KQLhmj)kdH
zC4su5VSULUJ)fLZ^F!!ut$-|Uy`bg$=X3FCTZc`$Oy6w^_okM|7g}6Zm56hl0@0N5
zP!lltN8*@whb2u<;lTxHh$YgH%~W7EZ9~>ePjz25qP_G+EEFJwP6EZERg?tf=+G%O
z5~B9W+KeHtWfMTgl`wvuV6y3L0!&(^8Ut<0V3=u(asRI6VF#()P(k;*+E77POQ?S}
ziL|z1{X;}C52o6#hS|6hevgC_T)ebcQwVJ;nPOc7s>Q6QD%rPGXl7)cN&ze^oX~|(
zA^4j&gLi_&SwUPI4?`U5Di<=R5OR|XnIDF9r^PcZd3XBW;Fa?cnBAlnq5?s*SpyD0
zq%aR<2+3yHL4h+#@2?*t-)8evdxh6&`gwt{rtCwiqr#@J>)<~|7#>?WGcUUnJlvxK
z9Zmwf|CuSdO7B?o>`cjTqqOKsR}wOg21R&U4V~nQyy2xKK#c7~ZxL&b4z-r+eJ1Z}
zGw-w8$ik-@ocu{MhuqNn&Y;re1Q?qA*OsXxO&du+{o|X(b0DkHsW1brgQDq+&_HSW
z!nrALAR%CA(NxUobcCWsQo7mkg$x2IL!!z_@af~U8IYM5pwTC3W+yn2jux%qMCdSW
zZw>`c#!A#~*Ym6cG{6Hv1*}cvu&b?c^GKUm<E3k83g<9Jd+E{ct;%y~%uKBI(vlVf
z8NhbS(sL-<UwS)voW^i5tg`6b%Rq+7D!06|Q!nwoWtymisIVir%;jAsAALkK0}e5E
zwQS6anmWTV-}w|Iw)ALMU5&UPcEh%|jkN4R&XD(ie(8!DOqAyM-jG|L)4WJoIxK^5
zG>uhY7@M4>Gc!9BLRji*q_e@4nR_oUEJ9TaIBp&FrJK9`<Dc1-7jJcKa0u&=sdX3y
zG4;hu=85URL$iAFc@rc6+gu$Tl@<S>@&%FOq2C#&)bJ4-EcI`70U~-AaJ>uA$Z!Ey
zx`4WTz<DlUOg^Al0ZC&!Wx2zwNT(MJ6uT0pS*NHLdHD^YEZ@zpj}Kmu@8jp#%W25m
zCR#SR{?AY;4Hq#QZKt-AelSozX3|Pm-~)`kasq@vkWyDxBs|;2A$JEm_5q!4A>rK*
z6$80VjSD2ajOljxYF5)iqS&v9D0YXQ=sSz=#xR^;Ub8V!gDv}z*g-HFXtyee@=&zR
zrqL!beYZUIpTT4_p!6pkC$qGfc>=(tLEJn8GHglgI-Y5J&U>ZQxsJQ~)<)B}Ab2J+
z-<^e&zUp{&wq&%p(c*cMNwbH(8y^|*&psTPD_P%+n~g))Dd4Qh+Y4VEMnrBA4Ca_(
zJB*059==~~a01Ki_UhK;nPa$Y+byP0BdMOY#tIfzRmBUdod{%2Wy`BYk}9H&Pq`IU
z?in}psgJ>|7`8Z)iA0X?RIia)gZbOWH~<DMVL*J5ZDj0CgYFF2bi46k<J>sgHpZK0
zLb$$nyvKiYUwOys(4=d#fd8BV3ey5=)tCJhgcVH-&6*bOv2=51QhI{DeJlvy6o6UM
zEEO457QIFnpuXxvAG@NY{m5Qj{<t1~KZ$OdYlAU+wKNzIgJ_~KIb7W?B<1G^JHZmn
z57?7MQ$B3EA#=NyR}JHDdyx7>lfSpoQnak-{OuqVG_U5p=Gn^6zj=}KsPYMDv?^pQ
z9HxV#qwaOm8Qu##`oPFEbFV7sKloiXjL)~p!N%hjopcbLG>|>!RccJpopg!*SFKTy
zHfF)Ln<l?Om77%ME4Al9L3Jw6v+^3e+u~Nbu?@^>Gd5bbP{ZfmaO4tBZRx$KS*}6V
z%a#sD+tzI>U*<o}nPrwZYn(b`Y!aoRaq2@XE}H(8t>JzmHvNh%;Eb&YY#JNw0;euw
z(f2)BV9}K})w;<b^N={P4a|}*&ewSMJ^K~2%(y)8+St)aD@Q#Z^VTH4)QLA98=V*L
zhCXh*yCC72l++|8mn$>-kih!SzmyjjuRxdv!>;XO6(*qI5Yxg#*`S3>LabXC(fY_z
z2?v=e$RI_tr3@=6aFcK;rclLqQ^5NirwlIc;~XeBAER`msA3U__thO?U94M?QXQ@w
zFBC6B&{zM5ywa3+{(|4+x#K+oa)|X}G_~C3RHwOfsxM{%E$B%E%NuvkA*jr$0vsj3
z&i@esk_C$O)ZcS(tZ`xYQSop)_;433z{~@xAB3{A0t-t?WKVJIWQSBP*etIHiGdch
zpju47gZtdv2L3_k8fBX1QoCu|W1O<RrKaN>ICr^<3TM7Ps)&t_KHHQsoTwZE++1Ou
z^NfvzteZkO)9eI-Y}QcA)&*76@#eyenfom{oLY1q1vKDV+pTRH+$PskxI~z{hHTzO
z`mB?ertDFh65fkV-raZDSIeWDaGEhWb69=$(*0R~lFq0zHvW_IFK_hxo;`!}ZMK}v
zPQb}t<S4vT5Ffqr5{N10t@So>N5t}V{kaQ{ojlt&YZ(9L1$)RQZbCo5{Cx1csibvi
zww~xmxtor`6>R3YO*RfRSfTzu&QsFfmN`d}sL8{B$~$GT<a+w$WSZWTv9@4nv5vYo
zu;->GWUO6BWkx&|&kRN3u67;eRXi2<hI0iqhsah#RP>wB0DWrc9i5%_E?B^s;GaN?
zLKchX#Dayi)vae&%?=6XW3OL*wj#nBJ$mJhq~ab>?|B%2_CzOVM~r7n<ARa#5)M{0
zp;6n*T2Ruu16TBw;NF82?CjWD*Cpsjf}^q(PpO&z3$3hG8@z8!&Ky)7OK#vy8T#GK
zPO_^)TYI3jz^?p5z_J#&IW{-f96DR>++Pr(^N?Qbxi44<Fwve^8C`I}&TX5=wTz5j
z`v6iHd~4mOI;4L!A7eXp`tCB`>T0`M2fCR(nBfxHt89kD3i_N_=6^I}ji2WxEYGnN
zBYG1`qrV;$@z$Dso!6~(rc(;i$)Z?)-Tk%)`aa*5$7Zaq{EQWtIO(35fhWns5Z<X^
z{tOfyes_E&$28Xah?rdNo!2z#P^3GCW1GjWoLQ6us_WbkQ_)T$p7|?<htrg1FrX?`
zZX%<{O*u3vlDn2qStq_MCurITOWn*6&%F;Mx!>T_aS!Eo)QVp62a5ft?sqPpCZi;#
z7{x-N#<{&1n>Q@}x#@<j6+21%haM)--C@C5jmBUhVW*eF)r2E!t3vKUG9rqLAxMcD
zFa+;$7yI@b4D5O0N75-jDk@n18tmWr5%y#`T{6n2O2X0W^O&FUrJC_|viq9vzMiI9
zZk8WAKJ6y?=_Z%V6QZ!Ai3@ERQ`gFnn%hV!`b$F6ZZ$wv!=lxsakG=&QWp4eAC47M
zC>#uU;GCo7D99FSj$JGPGk1h<l@vTEu}Y8bv>r;#)NsML!qi}~n$&(}nb@NYEP{fK
znWkt1cORI=P_R2=(nGX?`zvjKBG{%uOZm6<&Ao|e!`~47YgDEjCp?QlkD|O>(>QjX
ztFMv)V(Y<3-D#yMTBzhVf=bAe-w1k`ftB9~I!eGY^Q_8+eSlZrRBN>l&|_*+xiX>T
z3KD1PD~t94Dx>KIq?Ky6nI7Y5vjO`6XzEJ8ej$pp%pzYX@?vP-eu9Yr2Uhd@02>W?
zLw@Jm%ERpg^mol;>VC=J|4rKmFqzMW^n{yiAD~nDEMPwZ*asNl_5nUUv}hk7LR7BO
zYL{0h<X+=jXCED%2Lv9hngbGKjO8w5fZ^_;7MD2aBwA@2;~zf{W%zmE=JII-v~6zC
z>vwo%@QnfUMT777Kf1xE)5;7!#cnzH-e4az7<{(&_g=J}C^v*!xIY*=lUB<%fVGC7
zc^4U+_TpsdGT3;_?e@A_1Ou2Wb&pv``Hh972NWgUKA*H*NwwqZ?^;MYpeX6nurrjo
zGDcbG6wZ!+J?hZ@;EnJuFC2s#m^qyX%`a=eSl4k2ov^5m(#Li_VnTJ+<k$D(cQRyW
z8YU$GJMl9<+Zja=;!kFI7ogxYU?l&=zUzs+JVMPQJu5OMtVz0dTWZ<4qp6vf)&Hf_
zNy4bxRUxK5n%-?XxRQv!Air8p?N7TI50z?6VLY@$4sJaB>$;+Sv1*FlVjCoyK9#hL
zgWH1faJMmhw=ee93v4{(_r<=yE;{tg!oFB`+`NBiAh_)@St?*WotBso?u(7YuB*?!
z*yy=i?2GM2Kw)2O{lP`!VdD*qhow-R=8}iR=yK)OE?XUkhwx2i*5se-_#2Hb;)qj4
zlbVEb{{tPtdTjgA(d!k4wooXJrcR<5|5_C|nKzfK-rim!|9Ciku${%q*zeB{eY>Uv
zPmu!v?mu`M-YcAJ&-KVn-jp%9HR_T~I?iKJ+l@DIGN#+~o!SG9fAnsAQRLhW2^!UV
z*3;ACC99ZA=cuda{!9%WtWnC!usE{@*S0gaS>{WXc?C;NCwu3TYPqYI4y;nGCDPj&
zR_=b);+l)g(2(4A8S|}-U#pB+l;IdUDA=D5hm2mmX)2kn{TiFJa;Mm90oRzyg;DG5
zHCQdJMW~IYxCN0|TWEz>p(9`xucLHDOQ7$|_3E9~^{+cwpTD-8e-Uo*RLIK;spOti
zeR%rViw~r#+&)2ICCT;ujUfD+L3kbE%G5<BJwFMaVZQL$8HBGC@I3<{dj~*{4<ZAg
zp_t`Fx!keDs_5H;%FYN<PYl9)2zToR+z;ojewve^&W;`bh0f2r+|Csofyd<tJUlz4
zmr96?QFuiiE477s#l@WWVe+m1I6K^!-28)!rlTl3ydD|g2LrBy`g+&7-3+-A_b<9b
z%#u|#{;A@b(pkHsZ0|=1M>t}c2dgzb%64%+yL9^AB>1`-Mu8t{>kdCi_16vJz^jFq
zLmC_<XdL^x-%)~^7(ZvXMWim~*iMlx_inbIzH+K;xy`q{?6?oP=+X;z3JqkaTMvhy
zc5hG-6F8PnfaH6BpY@+1Qp7V8syS^?2E%Q=SxwE}-cHqMZS?9E#u+XCdvS{`ziHG0
zE3&uz^>|s$P1b0alP$=2G_rD#PA<K?cl^a0NU|?U<Y;%Q#p!~I)Gh=G*c3@QZ~3<f
zQh&mV@Vfi$Zl8&ISK-~E>Z|M<MVHD!l6E3FT`6Z}HGX{KXKa@s%M5D7TW;R+s^B!B
zkA7`1=dGJ`-uhk1&8BPHRMz??$gPpcJb7o$S~NW~N3M4{7#;W4v`rWqY5gY`F?bt1
z&H(>nH2bM|xX;ML+qlz781H{6waK0|;8wX)+*|@M9m+*uKrNSE#xZMsKBCW-6T_lj
z#kGkQwLcI7`>d^&_q9Id^<G;jZ&0B;`HRK#fjg_{AOGrScGY4Nh2g?Jn%)axfP>v_
z91N^1!iOs_);6I$()zxR9c?g=*dE8X@7qtO1UXtlGsixi!F!|KQ3{b2<!7xoxV(Mv
z&Qe&WR<~}9gO@R!=&qrA%$w$R{+ZWsASgh{N{5hv0YbXm=Wn78Kg-=`P4KzGea=R4
zBJ4e?&z4iwnB>p^bF0BcAN$*_;!pb9LVwLI!ryk_Z*%MBu)>ow?r`{I6*63vG_r0v
zN#B=+g*E^nq_VA+cTu16h82}Juy1)WPOodo^|qX#66(Sd#$02B%(&eu{9XFM?@!{8
z{<Z@DrULvM%LBAMm;FNc505Iw*Y8QZE%<bc`HYUHFJUyPmzJrQqUpiGXQ%s|hvGJt
z`I)(4LEuiWXANK;4mdZt5e}&H|7D5sgR3tXY{BEAsc``nh#Ld&U(m1MFLIwh3qF^)
z&yo7X$%k00e3#rE5Lkzco(>5K!KQ<Q5*VtmLYsHzFai5r83Y-YS+G39tp?wSrdtU}
zKmc+)c_!~M#y}jNojO$!u&z4Cy8IlhE8Zvf*l7A&1oS-N0MgCY4bjvdmeqZVJO27D
z@(#}D4e248+JsI(r>jIBN_c@1zD8iairmYVdYS-jJC`?d=Ut6#*jo1KGafh?(t=uJ
zgMU4?ma&Cw1j?fo8FWl?T6N`gE|>aBE>jG5SKwY;40p7_eX{3)MtW(6mEWjU(+MOJ
z8k!v%Uh%16jIha>YB$#;X0Ox&J2CrpZMMdiVnC(RTXf+wWi!F?HI4FjAeUO;vgMA~
zgkrlj6Ci}|K_Ag;moPSP==$oXZJW^|JxN2fwJfU8G|qzqNv~Vo3}$8SVdOS<y1uAS
zQ-=a(q1D5X(5V>&Bs5TotH_}J`VkaOAUpAGn-7YnenO7uwI}nxZSyz4jJ+HfP5+p|
z)b@m<B&{gr3|?(;A-OqxMi*Q?pNiR)A!^CPR5N<*@A=Px?^ix;`<Rv-!k1cdAWtqk
z*ddxaNOL8q(Ii>LyERH(xMmagO?Lid0JW`LNOI0u(e&J4(ijb}!E+a(4heP{z%EoG
z_c7vU7=K6K_>Ux+zQDiC)wimm3w|+QkB6J8%fsgH$k2&itMRooLL@k7*>P#4N^c<H
zEC%UzT~=bu`{(rJ$2&z+zXjfO4f3?0Yawc-$1}f}1Ms$GK#73JpE5+lst${$&ZDXj
zE8Wctt&MA<ed!}@yy3GaL10tH#1jWhecG42AX32GVub_d8eW97UjZUFTcIWgLBYD8
zIy>wy6ADbcXg(|Q$I>6tEyxFI(9Ph&ChW&f`9l7AQFSr@yotoc{1f>g_gA*)om{ps
za$WfXmcEe$lTf+q>&1`XIqHhLRXlrlSH7cV)tQ}I5+P*D^q|w>VEJ2B;)u)1T+%rF
zb;WSZ{p{tj<m>Ook}J!jU7bEyscYFwT;MBUgUvc7_Vy1yk{tjSt2|OiUd9W)u-!;x
zEMXf&SoArFEO!A#tKmI#e?l9WazHby&v}%koKi*@1MKoQKBKb`iIAz9*tmQ>_c5!_
zK&}z@eVZOP^c~Xv#q!R#_R{w1xC)X1PcwHsdt%gZ$o%<S>t;#OvNEGd61Dt+WJnOE
zqo_d-yBo+M>573x=UZY-@X8oY__>S3=+L*TeqRgg_w%d2xPHIbv$%h!kvi;O$rJQ%
z9(<XBXC4>)-y$1Z`}h75_}>CP?f>km;`R?IYJVR7FX356M}i-xmkj<AGJcUf`8>{O
z3i8l3q%N+1kvx>!H-s+%PG#I2;%Ky$v32?6BH&a1?fTTexc}5?xwlxj&cXHGgVm2g
zaRNRpM9^O8FC1UH^r`=cslN3u!hd6m+4_2j828kpqp5cozw&BZg;d4evHJ#h$F9*T
zB6l{)rq6K+*NZn55>^EXm24rkMg&%MV`TxpFQW$A!nYHr;bo^+Ii#CN4R+#TwKZf|
zIXM2*S3XSW64}&6`34+A4~O+~mvc&9A5cwW4ldNu|7dryO-4>Av*XyLDw?{=S~a2C
zf4Cp<tXKCtzPd_n_txZgq701#F(3>kHuw(!LqlpEeFG*?l*SoScvJY?c=AaBLF(ev
zTF^Iv&0;MAS?!I<a{6XKzwNzMcFitO!sRc%#~M`1<e-#|eM>1U-9A^|&rHUnDzzSe
zR!VwxOME(V8utZ{bPSZaL(qTouJBM%9Zs68vn4FhZ4rO3jluy;&Q4Vv{Q#;9)!60N
z)O!&QC32_pFF(Fc3i~^e+;)Fcw13f8i^tb)qz=c|_I>*|SB*L*5B~?q%r<_fd<pzr
zfDZ+YBAI&G@yB6X;}4sRS_A&0jUt2ph8&OW-Ub@BK7Jn_SzP~xq~2Ej+l%4PN2oXW
zKlu{)Cjp=OA4{@A{kO{Bh8M&CIE0^V`{Me4G@`ivr;$3Wzt%@Z{2}*;5dTe*+yWvR
z77)<}|9cw>5*I4?Jn_7-zKD3z0+M^=UTL6=FASodCX5dI^=wtN&w80zl<nD-Z4>%M
zTHmt;w;!jvpyON;TVFa|!o(pOkJPuTb+fo{L&-YGwI+8Er4`19_|W+S0=(aDc&RHc
zZ>#Ia=XWc{&v`}o*^)k6L;5#9-3`I0z@x$f2Uvk$THYCb%KN`73jMLg`rG*Rd+abf
zHoQLs8?w94@#{a4Z0ytK){Z)*I-wNvA{Q<L+Ab~WJs=jnVP)*2zd6DBHDOMx!#|Lg
zW3Zs}E4c@Z!q{vg{2Z8I<`-*dW$yHVA5Lh9rhiBhgOHZ@!q^hzZTbrVG<TgK+W1{6
zd$l%hLQJhEH5=b79Kh1jNS%TkqN(QyUK(iw^b@=Zi$4glcnApjLVd#5b}jC&!A1BB
z^gnrd;6eIJu+I!(zk#uHvAnibdg#U}T|pjrfGpv7DcfSaoCW-)k!D&kkXGP#gjw}j
z$|~xm;>mI<?pa({9=Gj8AHN+!nzHRgjr6uFZr5!m`X0r(M7wM|(XUA4`p{_Mf8Jv&
zo=Jh3HIl1hnc)B&xNQLAk!oF{-M5|SLFmUNI&9mCHso=*@3s@&%u>NYy3F<(^WsY}
zqPtWlZoG}AW*Q_W_H2x~cl)Zqp@BF@3~F_dF4{JvL(oMyNI$SdTZObS59!<6hIA%d
zGOoCrww*}koG#Jtww*{jY%bBE+fMW<qPC;8Yqy;!mhYBf+fFnKq1P36(6$p@pYOZB
zv3lDE{mZ|-gEV;CkgmyviEPQYb+I!A6^vbt<GAgl|482tMq<b-wUShB<0FBr$M*Hk
zY+tA6@@<SK_kD(|EB}dYS8^7~k(MM!`a?ebFi;y0sLpMsi4vnWePV&Nxf<;zicv1s
z7^3)i?%w>6yJXuXoKFcb(v+NM<R+7YjR(KqhaXA^&0R>Bh;gQO1VGypZV4=f%F(zs
zYI~yDIIX@9v+w!&@2~T%>V3ymuO|0v*APD*20R-Cd@Bt2O%Sk87@&R7u<b*Gz$Rpp
z+>JroKlztKNN(34Yfl((K8;cFFNOg}IK_p(It<X+SfyAP2CNAJZVv-y1u$+@0Gf%M
z+<quaI!rM?2xtid?klSCX+faXxFZ05WSDXV#3xwe!+;V-tpaMofcpdByMzHJ1px!Y
zfER;+4>kvA*eOt}ydDN5f)syIfSPbcP>&U1ibsMJ_k{u4Kvg~FhXJn<ke|r+XFA}@
z-!asF>}pM<X=(D>o~X-r{5Wiel)pL5zgJMHZ-)Ub1o+3qxFmS|?QTyp9y~ARnY)UA
z1re(7hNu?rh6)+a-cyofhn@3bMc@5}hUkI;{TgZq3~U`4=!VMWV0aQb){?QE$w`$Z
z?7}rTd2HB*4=N&L7)*x216zmN`pRuMmACvUAJNidMg6vnHSZikD@b0kC4BY-`@mn=
zuP)NYeTZAsw}TP`$-YRbRrI>8`fm#0mlfClfd8cauMXOF{dFC)RUhz9UfM?eKmF%_
zRsTHv@({kE^jx6j(fnoj-}4LVU+7;7u>K9}pP5uik9xYB(!w*7%Iv!=|6Ok1<-s>=
z)hQnKD_2y-m%lQAlYZOx3@?_?*hedmC%Xp73+&gDhYf9gXL|DBVXb~s<_OF)zg-i?
zH+i!cYB@iCMe7S=I|V!?x{c)Fm;ZkXpIb8>{4MBh^84EyAH#~qhc{khgU)yNcMc*~
zp<njs+kPE>*wlA?IAl|Yy2zIJ-J(7n@BP1{ABL~%N28wuh7K#L=a-D%SIf6e{{{N#
z!ykS_7B#Bx_#DCbA2G0%b7c+{#$SrYzr#i_%C~I)yZ=@Dvy(O!255nQ9YFmG{q$w+
zkA6}6ix@xw{%^>#&Gzq7)c*YVhJ?cAZ<QW9HvX6G59=3>Z`c3S@856#j@xd3zW#mr
z({ISK&Gz^0|8RZ*Krk9Ye)FI4pYDO|U!kRWG_a3JepY_bew@I_mY!ZiWflw=<8jn$
z$lM|JQNj&mQt7x!QT8PZ<$C4O!j#!PP};O&c!L6X{fgl={=4uplWM$yfZGPY`TINn
zW&eiw>ofi~d|b?jzJ$KNLE`_{^Yh66w*Db~_MM;qllq^(Y1{SB)907X&);4DU*SIw
zzc2ltOO^iZ@pb=4+pd3szlP)24HE7%{}1P9?7phl;-6dBU_{8mZc=6bdk*pz@fdT@
zggI>&4=A;me-qE)p)ZK<D_;(I`#+pNgLdWbL;2i%$i3AuE^W%3RF&{H;Zd|A@F<F!
zKjA%&2vLc)qgtXueEd_<q_`;32$wdjijR6+-g7yRyrKc!dWG&puf~ut7Oj8Eb}{1K
zLDd{sMN@=-UhIO*4{bbi5W4n{6aC|r4aol$ac}cvZW;CBl`Z{a-oc6S@v7GC*?yev
z_?49Gx*pn9tMz1E4=uhz`D{p(Jf)1}Z|UFYZ6C|TYmjI5kfXME$$K_$;4FRoa@})O
zHySws&**FiB0u-s9?XYoN6BZS*7V%xA2V)nWR7kvE(b~6`s|%nhS#edDY4vJdrC0R
z!}wmAj?r%Rq>XHemhOFqb3?I;{*{*|4h#+A=5frLt}q7>^exAuu$j~00-920u0YsV
z@Gm$M8^92Bfj<W2ms|PeTP^?luKZ0Z|2E#Wk6Tp!q%tb7i3+e&(c7}^3cNR?r~-ZH
z!!Kzm^Cp#n<~pkQcBNf!jq-D_zmz=m<X|dZNpwRb!Zq9+1QNn#^m^x(aZ$x#s@E{9
zW9ianIm-Cg7Bwtj$Q`=KUb4|H1N2XGRVwp*ZUA@vAHpv;_~pPqT<{<Iq57cods~HH
zgn_VtO|F2?&agJS0!%*qH~QN<O^v{-2xqak)vIGPEa=sFt^gyLJp3wng7s%*(4SR(
z=;^v?24Bs3j@LZ0;+|N8ZnHmox$cKIvd-XoY}_Eu1I055&S1QYY6l&2az<52%ZNN}
z?c!=-#RPON=<O;fJLKd2Tp>@zv*$JA>rQlwE$ZNEmHbk4sMUb8VDTCvxE!9d9<tui
zflN6>uZ(9GO|f^hpt{bKsS@?fai|n!AnI?n7X@b*RSi%c+%Esa0(H~Vq5JMcEi(75
zMZx8N^>OYZ#91@JJ1Mw(wu1E|MKd;F{wJ&RDc=2xrBHB?VwO_8SV-}IE`@?!it}dp
zj})TsRdnXQn>JzLe`_K5mzFCwBLI36Pb#8R`uP_ZQl9JJD}{b>?@9kuixn4ST!4=5
zpcB~DyY7b&8@q}5ZfPSRHw~?i^akLJ)V*+C%vGcca`dkIus@1tFRF>1nDCy&8#MQ*
zdw*HX1}Rxy)@U@=+9ae-xy26pjE-k6t7-y^I8DO{-?3Vp^#)GP7^;~2;<veXoyyIB
zK5FzCSUbb=Ds?Y?gLg(HXGU9(XK<B#SLiyeiaLmTjyS!THnYRN^42EmERHvcgFK9l
zg43o!BFVGrN?P`?VJF>7YMSFVf$?!cUdxuAx39{1pq(bFoVUKuXZFzkLtSxe<O5F>
zD(ZX@cj>E07aiJPpRe*MSBc8@h_aQ+phGcliFCDH3p1=QSNtu+6S$J^Dy8V;<1xAZ
z@qgJZ5_`b)ds5ZVk1Dj4?-ubdvDizR<K4-y-~H|xaxC?T3KNeV2&&=ld4FR!u`!$L
zCo3!Uv(86+kndl5^aFbIU(RY7*6IJ~Vv)(P3*KcHB{P}91Rh(-cbqP#VLCg2dql=Q
z-80nDhdflW&Kv(!ODU$g*w1oaqH;Y$FS(MeYvG%ueJhT`@{Kp3w3>rGyZ2=5_=JZw
z@(JFjY)XpbF{2h4w?k5o>PqKw|FaWHWL%cM$`HW)<aN;nA2fLHxxGxRAs7#fPgI)L
zuWCB0EX>R^s6kD^uAE3bJoT>wM;ydxJM7t)?weN<Kl5p`N-B9AeVIC8MSOYAdV?E=
zVRBvAA4Q+5FYCF5#!AuvzX0M`9)NZ+ob<H&zu%vEI*g}%CvcO1$e5*oHuj?Qiby%J
z{Pq6a@0Mw-Ix;i5ic1WlsW%MZWwX?2rGCljOlFNUlt=d-z@ZsP&74f^U$nl)FU{_{
z7I=5=Q7?1(R)3$%gS?MyR`l=U!?GoN%Hqj?ZEAheCAyXHOk<sZACm`OE8q~t7sEfZ
z7=Dw3UmM>7euE1)lj&0bn|v)b0%oWU=R>D+6Uk3DVFwH8B{*71({=8V>t~<lxthD&
zYY5_ctH!B%>gwp`SXX+TK4RVJ*Y)I=;7pBsQ|LlowVO#oGvg)p-XInLb7fr1r4@~J
z{L5-vlxKQQ@SM+6xGDGBo2g)Tx|0C?c-5HJFOj`$jKAHiNaU2UojRfb-wNd}y2g%)
zhI)+5Wwp6?X&aPKj8Eq~KjD1<MHur;zCBd}SfysFa>#yw$+uz+@v)tL2Z~=DI1fXK
z+n%09N5!*^V~lTP8f!u-QYY$~IFpBro<=}VoMd(MbV)!@_nk(U*Bd=u#k_~JI=sa-
zH)Ri!xe}S%^f)>*;aiiz0`zo6Ku<p*AGZ`cdODR4Wi!94$<Olibi4sKdK#VwUK;{0
z$d6lrKfD<JC*L#pc3?eG1pl8dJfNpH_zLLhWq&mved$Sr#Mva#5r?rjOw>us0)mQ%
z1l8b8ZVu?FKu#PV3(2WKO#v|xmnWtMM@*unfRqAC;xV7X93dU9N*4%;*N~8Otf0(a
z)(T1CtxhYG+Q50Rd9JJS9;H*$=hCSzK6?j1?d-H2u*YAOOEFm_kx47oIFVZ3)z}=F
zo{0YVS=BD?HBNzmenL7}7$?Bywvjfuu|)e`qu30M&Rr25dcw>qPHJ~Y(|;zC73^&n
zlfE&9*PZVo@3eKiOmKvI{~$vZQ@d1y%(Y>+3$gyS+Ab$eoNYTq4K;4XC5oVO8uv}v
znFFB6^s$(dbfy1JNJ(2qhaT+h1C{%3qv>V?ue@*kj|18|Gb}qbg~-fY4e(4_=RVsy
z1SJwp?F&fS;_b=PGY-He+%P^&{?|q(nkVj=k8t=^g5nJ;%GO}=P6AiYi-WSFDV^4_
zVKocp{APa*tFH)eee}7EucI@gYwb=2jV~?|560Iqr|Kl5W7s39tqo7uf-(AVJ~%pa
z(AT!$*Tcz|=hvT{qVtht3K(R_um4Fnz-@p%Or-+gwE|vTzpcPuMAkg~Upx4WFUNpG
z_&2!lV0>N0myIu|(LYmB$qn%9-hf|+L&^Gi^ZCLg?5gM}mu>$iS5DQ0A70Dh)?@N_
znH$CaSe{Q_(wviz-^@d@W6h*Df>WI%`vDkK59l;xlM2$Q%3lAj3qo=`7Urr8gz5;^
ziMKj3M*OCqgz?&>Usj_2^Ndt-?-4&Iq^I<o!0$@GL|6%~t$6h6K84G;U~WTaJUe-c
zPHS2)L?M?hS|?wI%euz8{NP(d)igXoQh`~Rcg4$Qhyet07iVj+#flF7;f$X1>Dt=d
zPi@L$zSu)e(0DRRv_a+n33R&gbY21c=Yb+J>NMU$Yhd);Q!(~x@N8f)%sZn)zdIvf
zNI`>JFL$Vw6u~6VTJ4Zve58FE&#6Gv6tB08NU%gIs{7J%MS5@g)4l^M3+H&$E*-UC
zw%dA(6vpp{Ix!P2r#K76;e7b2E{tbetNfqdq6TufTudu7SN$D!O6qqCGPK9N?0i1P
zuekuX-dR;Ko;jf|-v5Lt@%^~QJA><!L#C8nu&cUjsRUieq)VoIt<CDBo}mj()+Ty7
zl7oUYBOV7%b2=*>jz_LROODbGZ)UCv!IgGqz>0VhZjt&5!JHE_ZZqChD%wD2<@#HC
zcx(U0DJs7qdwOqtzs9)n+wrRwncU5dFu;rc+yoJ00n9fjf*ShD1Mo+c3rnejr3n9*
z88Sne-Qj<O|N2RVNv`$r0^)P~K%aU1$q8M+S6jCePfgv0JxVd#Oh4U<cBEqtWg`9D
zu(F~3HjRNptS2uxB|w8AAyX@g7cn%5`fW@w67uB#6rjVB(<30|+yh19Iys&R<7Sd@
zuR-qj*s^q`Z5GL0Ln1Q+K3#qBGg9~$?aAS3uRHgCyEeDGbE7@oIb`%1J881lt+nQJ
zp&acND4eJG6AJ~dwz8FcOZD!yLg*tv>0pFRp|m*lujd>*UMDWqTu{DUG<`jRII!HK
zG-|UauX|GAd4$phRbniAEoP30_$QD3SQ+aJ$7|7&%+PW&xvA{JZ(Hi5zg;}bp#w=~
zrqRL;ViPk@*<@*oU$9%^-|1bWv0kJsJeVa(Z65|%7g?zB((_z?ePQ6;O1bB5NM~V5
zU8JpNf#0ylU?=ZsM%1r7=DizT@ZMs`;iLHY<q5AW9<5&<ACHTUpA$BSuN4W8Bl?-E
z+ejWBjai_z(!RK_N#9H;+RC!A$li4#JA9hf?Yup5^UPiN7q38p%zEu}aoF$-SIUaE
zD}Dk7d&t<BT5T%LT}q-0){u8f#e^MO&ber>3EMHr(!j-EC((q#QDeWc+9^9<a7(Ox
z%Ffz#nQ&S(wMMb0w_dyWa9(;|c61PwYt_jY*E)luTIXW>81w2XawpT!{Jb&=t~w?&
zv8?Coj*^NNHAS!S%+A?3M7Ih($K%O^cWk+kzJ4p#URP<Q=e}nk>o~lxLJzc(rc_Ai
zck4eIXc0jxIg&?)p4s{M31!i=9Lg-#F_c_6k*+q2b!IE4#ftk*ueOeym7bowxQrW*
zE>=wP;_?XB9p%p9BODJbl|Mo0n7Ja5I{tc`1Ou+T)nxf3K;iHSn5|nV&WUG6@2(5-
zs+ijXdH(n0K;_}&`JeIOl84Ow&l>TielmcI#L;qo0COwr!>zzi6vH1Kz%MKi1NeId
z5hihLr%{kACrB?y3Rb7uo@ZDe)0Etqc|65VK=bqb(Yr-r$7_Kuy>cz+nEiG;O_v_!
z2UB*7^wA#7k~Ty1tR;M$3vm_#thc+qk|3n>`l{er6FkQR&)VSG?4AY1OLy{K1@Vh}
zN%b14mri~1<8_sL)2leUe!OmUZxLyRm@-i8FhSSP;?kKp#PFEU!~aYQ=FI+s)}d?h
zl9db<t2y@7GF4WAcUBSTKS#Q;AG$DsTXvj9CgnPsG}1XyW;hK`_a2x<NLNx)J&$%h
zD6)<x4=GD|H1qK1ZQLQaa2N+IoT!f;%`K-tUZYmF;U00tI;u6Fgs4H1ZF&Zps!jmR
z5r8Gb21{&9KgfruG9LXS=i0lH@^!_UqjT2LI;i1*#FxKSilW5~J4&94FFw%y`r9e7
zBpKq_injQ|M?a`J_1YC5)R-T~<!|+ie}qfNxBB&rvh}X2re7Os9QSL8FK(Xheqll0
z^{QOl%iN?#cXA;Q{hXGI?hC$&T2**m6TJFoNMG$G*YX|o$75i59iLq^IpJb`KI7R(
zgq3_}ZB$ry@(vzGbjf>pV|h#`Y~rniI9-^<Yot3_#+y?4voNDu7(sl+N#E+}Uh-q&
z<JL|GB+N41yM6$9sF|{MC(HS--*hjdyAr#SJ1d|&Dd&tTLQ?vyyp-PB6ra6PqsGlZ
zfgZ#4R3!I2Jj?LAxPX4&P>;j5<g1@>0;gZR1pOG!`sR_=e_&V5;g97?uGAd<Snl1~
z?s-k{eK}9|8;kT|OyA6v%hpi^f7tQcGvw!K?4Y@585Pgq^E^B3o*UUn$l^6W6F78|
zv2^mzHj;6UXg}J8>PVO=5?KMG@hLDk^^r@c%2GL-2q3%+UXy3lkX=1Rc8xz}-!qo6
zOEAZNh)ucw%yu~FC`6X}7aT1{+0hoHF7;2h04M2}`p3Jksg8M0<crnX6!GL)6lnbO
zvba;P)fMZ5LjJjHJbPK0e@%zZVFaxCUCy^K{m1iS_g@_F9O2<ouo~cfmV)8>?{f5k
zRWAJ^gLAp<_m%p0TJDKus@fkxpjGWKSF;8%5zH63u%<qrEh(zc_YKZr`RY95z@JR8
zmX~9|jDM)5xh%iD<U}nrOTuXCSPDbnDGvpn+#aNbng4VLsn;(VBj)|akp-nX3fs<F
zc(%DADHEf4F;J^_64MMPuOgQHpZaqDxnn+elY(8LAno%Xn$UJvK%$g2eYnbcq>P?d
zafb)RtqOGb%T)?K6pMBEQt6Kg((e+amtJ3-M72{E?zypBQdJjyzsI+f87iYE;hMCW
zuuh?%bPoSjbEQPl+)%AOfGVZ!R$8|QVCY!pzO@Zdr}&56cNgDN^!-Qo-OYEipmma&
zt+;v<+JhAY&DG#nUll?&1yo!J+4#8-O<sL-t@~Wa+Rufo`CP~r!;|{lyJZ^NTVX@v
zk00$C@&9noKYN#!tIBlV`XlMQ;`Lf0b676L!XcEuiYe+*b~4`9+RXMe_F$c%;gjof
zFSWT=@`ZPohWobcD$Qh9=^}QOKIBMoa%EYAw=pEq*lFxLl%6?pHw5EPgz$lJ*O?}E
z2-)#)b7`5ef0LXN)H#t^QmyI24UumVqLaF72+_D}4q3vI>Qzd_f;``zVEld6#^2?O
zipJk72?y7*gwopoxe}fwP9<~(CG2i|VFn0TQoWF{#PWYo1mhe1>jCI@qp8d31a!Os
zkC<z)-R^Ozf3-oIWIQ4RwHl8&T-D6Wla4>Uw6LgtF@tgVmi*yhf~7t-{xH(g1a(TT
zN2l~DI;Arlk3i}i62#XEEd`QQGirjMQs0j|L{#QOo+Cuf7ZnS^x`Em%y`<X6*bv-C
zWS+lOBM%psAg)_Zynjgm-13E3UhS}aZV=ZgK-SmawUA4ZbBZgA%NV~Nzv7b1YgC_0
zsc8ci0+ME{)ED{n0ee3O*xt_ut6Zo{ECp_$O5B&cw8b`YtQ~#kkEYB7_J8{5>sL>5
z2(MIg?&8C;hD{0ge+bVwb)w`ZSHM=}`>nt~vlxDpgI^Hu1NaRt+@yQ<fAj^0Z&H<p
z^WhMYCx8#do(-XciCkJm_etrrVIre{2E(_oe~`!=p1ZYp{G(9o`B@=eZM7TNL^2vF
zxxd=*2k$-e6sCU7?N52((8yg0xO{)~;SZJAjRgFmEaVTBeffj9!p3^-2v6FW@bD=P
zJBMeCJK}SUBCsl1R$vQNG%u{CYyFOd6c6Jw3XDRd_zUC*$1je4sAxRi*XY1o&anFf
zesLRdDoFCE2vq#S=yOT+9afN$DExx{-x|O8p}`LM#YqNjtNem1prOz8EyEL%C+>L=
z7fhjiGt^*wj$dp~aGqbRZ*Xm}N<l91E%?RXgZPj+1QVLDTHp=~gG6O&nNivA2vPIb
zK@3~)3!BpZ1AcK-0NnD0SPuBb;XzzD;g$OPTgavO4eQG<s{EZ2j$c%6$uG+P9e(j_
z{eRCdeo0;--1x<%d~A(hv{(Uks@#9dFUA+cAK~DCj$c%`@PJ<o)K|zaaz{9RQJ&Ze
zzxW%GPJ1q<;dk(vJCP9|&ZqwoztBj@^NVuFFVwGjejzgaVt!E`@Qd;<;1`{T8^6GD
zcAj699`-qY5n72YTbC!>4KX(wBu6+x{yQNe<W+>IZ{%w@nD`_LIEJyc^@igYU%ju0
zU(61mTgH%*1AfsOlp_qOoFaZ977}+;+P3+{ID;MXi?129e}i9Kes2-Kc%@FQ{~W(~
zk>EVP=&&?PjIYJF!Y}R);>W1c#Y1pObyW~l>bD1p%JU%?5+XEf@=)`O<O{J7hvqik
zzFfZ8Edahwi9;+0{305}EmWK_s!tDhwBOvPvN%ZaUu$suqDu8CmM<#*9e!~eaQ|ER
z;!N`9`9%{STjLiERzRI9_n-2M?TX>QeVD=j9KU$og$MlNIemrvVi6ybFDkdjFYdB@
z>_wT7;b-~$@A-vBN}gX-I)0&k&GQS5jV<{F_H)|L_$+pU*|vFqL3tTR^mJArS+mk}
zrXZsOQ;@r=Yl(02P&y%9bTzVk{CddWwCho$-HI`+!L>zEql5eYZMbJek$sG|zroS!
zmPzt<Qc2zt>AKl8sf>?W8$YzS_wdMtk0i9YDJw@d@99}>Q(zFxOw@{kW<+(*%|+$m
zluorN7*>4+HInLIv}p2wS2mc1tkxSc?UKIQtd`}tF?F$HQE0Hy=xO28N1hG!52$XO
zzB*i@(z_HA@&7u(^=?gm@I2v$%F{taRiB}9Dh&-3N>!+W4sADuQdM3Zw1inBuTYW<
zF3K@g32Ao08uedi$(Hp9Y+1S0>K>&&x4fjafA6tew|pwH9>7OBHPasKa^>N+DCJq@
zB`p)f9n}LIyra&^!)x8uVC@We=-X*Vde=F;u~`&^pbZC)k~7zg*St~slv9{Y(TaZ!
zi%{%0LY?w77XLN;)%q*zOe0c^jHR<^o)*<N9Rkt+kTn;2cHkXT)<-F_FQo|dzpE7K
z7o`7Blp@d7x-$M9rO5qCTci~EgZs`aMSknP^GcDM-S_`*lp;63fl_4dydtH@+VS+?
z@wNzxpz=7fc>UsZA97L`(vhXiuWvN$a(_ZV3ip#vl1A1HFd3y>KY|5sW*}EIO)TT2
zz{3*<V60y@-J3KZo|%Y^+N8?N#42x6Rp#<BqLJt2Z=HRC$Jg<7`Jes6ric%pg@syu
zjZW~_#J%NXJB#g8w(x%xUVRzMoXur~-SxGQXarM8)5L1|45YYSXEkNIS3kwxj^*uG
z#U1a}AFsQyrjl`nG78EJawwo#0fMCUvr^AYWbUeNBaldq1S#hAsh=m68ELhDMj5H<
zc3#lD>%lmbfwCF<p%4o87h~S~BeN6M6Cd&8-&U*ZYbV1x*fSqc&7~_Fyt5jNUH9y5
z<2O@ZCqwc?vb)S&mW*ER9aq;ho{1=$s$eKCs|3>I%(whIQ5~Z{pPcz|d5mj2x*N+>
zhKG?@ccU0!M60R$WS8@lrEKK-^9#A*1e@A!f5-RVV|{f_c~9Q{lv&Zg!xGldQjf43
zW+`8P?>+Qnrb*9jZ>%6C;M_t}XxB`auUYMCF0||HzU^Wwe2aF?Xgb8&brq}Ze7pW4
zZSTL;u8%EcpLTtd+PZehY4*||Ip^7T2hW>$YRh3s@ccA*Hk`%T_yhPir!apxdt*#;
zpLH{nSra7RuEJGzRV14F2Pjxp!#{s7(`2JIz#U+N4A-R!{OoJuMdz0OZuKzcV-U$z
zJ@}02uGi9%=G9|qUSH{-bnwT$-eYW>GXH7=;-lU3KKNUIjQ@R1FI#r@>RHXMtkPMM
zz>?JVTfCRuQIPk?fv?ZUo8m+_P5b~Kqbj5I*YV^fRah}BQ13|q*fmlb>A5Q02bV5%
zD{yGcb(?pMEYpBvZW%K8K*y2IoE`nT4eu8<#yerYa>Mv&bQEGqbQE4S2BA_14Se!{
zfKEqz@XD@Slv@Qbu<$4sISPmDDx%u1EB9~5^9IO45Mlm*@yz#oll4_NjXJfuDt9e3
z(ou>{L+&ZwIFE**S?(lWx8P5<$Lk9`Vz^1~9_*z-_7)A92TeJsLtY#ZTT)$1XNX2C
z+ncI)DY6K0zK}5rk<Z(mI5!FsZrz#5&-<6?!Fxi8xZoQO5o--KwEItLcb&h}Q9+ww
zQ*5KDc{Ed_mi&+LI)+iyi<N>Xfreu}+4?oDOp(rxXV_)O?XjkUq=;6slPZ@T$}A}E
zUqb-kk~L{`%A7^!`ux8P(Iq$`g@LGxvvXQ>GM=R{?W~M<cdA&f-A%a#jMq3OV{8k9
z7K{f{e?!_zZgP9Nv93wGlyq^YYe_shX@&Y?ARI-Qs#2Sb(eP}xHt{k=FQlIu$=yn;
zoIKYxY3GWj%q^>k(zT4KL$Iz%&?g!JZI@sHk{Uh`LL}LN*4=j!Px`f_7Z*m~eo%S<
z9~w9#8gy4$w`wrP-;+E2r1abMZ3##Sv}V`8!QcKoU7^uMb<?LIRLMc_XfuKp4_rSp
zA9)0kLB(9#({pIMG(oDG;j}V<vx|~Szj(N$<Y@X*`as80D#xz2QO#vvZ~Fbt&x3wb
zZF^)swT`rGZ;eb(ppmluOJu)Y*2i);D8lx?8*4CHtNLh7!rLXLjRNj#EXPn}QbpTk
zqe0a599T$XzFii8#?K)2TBuVDDx(E^x}?yCEm3wrTD(7AvIf(h=#?j_K}mWH3+@&=
zZ+wfUk(ffe8>>htV`tGtSL0|B!i+J@`3k_*E!%5N0Cm~qM?j@cNtd-#H7tR40Cl^N
zcs=f;umjG_2Nota(ewa@WPsK`11O%fT^t&5Cu9@vPE{+Vewv;}23C<q#Y-%zNGPY1
z?j>Q9cbALF4mqQF6Y5wPNqBqgJ^+=cYF$XUg7-e1lYlhqRFryY^!IcLVON}Po=*^3
zmuUKFxy39j?(^tvq77_6iFEyG1H#@-?J35SUr!;_PYHzjM;4M&fby1&X6`|tjo4X5
zWyH;jd)P~yc*-vUVo-ka92N`vm<4E^1~gWn#Z?QAUTyG8$H46wMe6VT4t+G8RZC{C
z^a<^&cFxyVM%t;D2W?58sWR!n7Qms42S3+yPg)_SnCoSm%*L}=&n$NxpbZi3LAIgx
zPmrQsbWsd7%>II?7s4pJ%1f67Do09pgXB7hb8vMScdCN^AoS+ft0Ir>3*@2U8DcqD
z=}m?%6cmhQnYV<4I02n?5~W{^clD%xv946LEcZ0ZInv>X(XOJkw$xAq(Mn{38}3;;
z2KrZSv7RaMOvcrLQ-q`88KUzYxm>Z7cuHv_oql;bTB`vN<X6jU%BXF&Syl?H!ru(2
zzKtwJ6w>6~TCJeyf@CL;SnZ^pFBlMOpTz3V(OLEelR8ymI|=k-(l~WFlZMR~U`pWv
zc}}LZ^7n+p3R~>zil(e<Gb5u#{t&nl({mvrDrvTKDi5(dRegtGXo4{_{V_qGjs+!t
z`8>3NMa6_mZ&yKg^_2IH>>9~?Lv>poQUGLt;dP0N&>rKJ5TTV-p1a6&vUOA+gq;Lt
z9ivH2qi%5CX{w&x?-b82seS^;bpIM2{toy-i%E+?DjIOAT$;KRTzQKPbX60G)3Av#
zb&hDiwfcG9S(2>z$8;{i<_`lzIe)HT$gqx%d8^@TyKCJNORnzM=&fq-{u<*vL}T=i
z%Nx8EW8QD@UL5;g`)Qa9jNJX85s~HZltmXjec(aYbJXm)k~L>`mZr+elDNoOvHY#d
zv5zm$S@huR6WqJ-+ZaMgMI06~X0h0KJo})vB}VI*d#GP-QsAFC;O$Cb%rG;v4h4>X
z=*u5CQ^7=bX<Gn6@&3wnAK;t5Z&<k!<21+0aV&L%|5rTw2P5)S%F69$BVFj88i}Sl
zn0i5Ea|2vp>T<taXwRi=(53*iRrcLRa1kL-_TJ7NkY8U0W2MpcXgSuKtAf|lqp1U!
zB%=#(k6+jJ*<jW=6wcdrVDd8^#+cn5DH#w+c2>08kcelm*D$nO*(C>!@vmUO2DCK|
zJ7Gvd2~6y0q7(@&GYEj5NzKT!Tyf}Oz5=u34!@H@!g$iBewt&Dyn?wxZ8|!0TpdQ)
zG3<>n7X?b3gQ?l;HAvbX`K|KkQuAm7mtc1L^AqCkZlVdQwU!nZ;l^Pj-6bOg&^!Z<
zP{m(OrcJaA>Cf$KPcG**cNTOnd4HMYMfJuQ|2}Ddx%81Ux`ajiW5#opo~RyzRn4-)
zqRk&e1Wb#-<gP6)xVsxP#FDA%HZmX#*xaW2aG&iY<v8cOBAwLFNu2znC5@)ef{8VG
zCdcI_;0G^QFDz>YlD`jCk;duAtantUZ0X-V-qo~1K4?ZLek?kQiuu>nYwA3gS3qeH
z65Et{U=?rhVURuSRPu2Fn2BK2E6?M9r;zA^`irTwGG?drCO7xHsJ}D}*WW|{Ctm09
z@c;BjnO}2>5pMNjOXaO4Hx>VB;e2h}$XHWea?=H0UAec+BRxeJzG1YLxdWh~WpM$W
zD6KX4d~;Xmqppr1Ywj8QIN2Zjog-(&v*)vzPikDz;4UqNK8|O9YIS3nj|mQ<!(z@x
zf{j;crK8D;wU4@w&oQ~zK&<0CVp__&xNzU)D_liR%hE#`7Gl$iPG~@iN2a%<{<&Ue
zqkwNAyCcYR3u}Ws`Pt&Z<W7ilMXr`Gmu}e@pg4N^zVzT;S711;?!0|(Qy@;McFo+_
z<UJs|gz>0_^w>cEXHy|DXk6VB&>h`&w&UXTmD0QL$=-vOs!w;hlAi~NOOzW1&PC@g
z;+mSx%)~}?K|EJ&^)8e-__BWe21Ii2F><I*&u_#2MSp>c>y-i?GY_mIwJqU3GZKce
zIrpbJB~)YO^z08Z96w{8nooMh_#se~vU2CCzu+o6QmxOJw^Hiw?9VJ6-BSWSbdNpD
z_Z3D+5MC%HeW)^~8ZxR}1Ja$OiKZVDb$;|rD1Pe}kme#8Jjbn=PA<ZmZw@csdHRhl
zwZ-oe^4t8>mF%Qahuh-QF~OVBYnu?nIAoPctZ1v8k;bEnq51BfyBYP4-^+FDCN1AZ
zNRZ>%-8K&Wz3&%Zr->sOt29QMTWz&!6Uf-ok~$XQpF&7MmEPmk)uv*Z2DGcqU}^)0
zf+_gNJT6ihz_ETO@;EWZm?$K(Lr60J4{vV*A60e!|7RdT5cI|hii(=nRFjGttV>3)
zW*~tZ88q&x+Lo3|X{D9I3{aOEoEhMDoJy-!+uByEZQWY6Dw_)lYJ%1Uaks7Dey<Th
zY}usd_x_x7?_`4X`}_W0um9`M>qX|?bI<ymXFJb%&U1R(EAs20g@!S|tyjzZOFUw(
zbZslPc=F0A2SqLZ3Tt(;aNMskgVL(d*k{1eaRAOaei(tJ85(P$+#_20Fm|oV>s3Fb
z3Y_kp3O@xbC@%y4bMJ7@^=fI$zh=}TmD6u4zy2VOd^8uxDP}uG$*+*jpGgp02Ak+P
zXHBptP5A4s`7a97L)C2*fDyAkQjkjNTb030JR1D$SrcOaDZs&`ppVoQQ!gY{oilTd
z>TSVeYSZ<-VQpvdXwcOt1-2Fduvk4^FlLXCO2tZkj(m49lIWA`73n9}j!qV|8R1WS
z?=8XM)EKhZnQBMf|A279VS{h*=s)%05bAg|IHpxLH!ju-e~%7-e;xil6#kwV{$3aU
z&fvGy9-KHQ^WjKs4}Io7yXS>2m2}z2`4M`^e43bhDtvp;E3%|)=jyt@vLx<VuYHXC
z!kfs^w$dCjN>{i?EL_C<;)FS9AvJ#l2jn=bzsr7;v$X#-jA(=sL5fv!Bk$gXHy{vf
zaes?&or+7Cd93w(4tp=={*gg*))rc}5J3C*IZyCfk>)TPwmkU73b!zCr{B!I8{KzD
z_P2~7p0d<0+``g!dgMxe``3Y^#+BS3f-%2~bo&K*Mzj!aq5K{l0gz>ePS=cH>)-O!
z77m2SsDqm#byWI4`&n-=cgz6T8n9LhW))QCpZQCLqZPJGdR7Sh`feumaG1OQ`_HqB
za1c+1?}UJJvfbcA;z5@GP^F=x=r$Gh27_n#Xywf4_NYYemm~syfjcPh+_%18lagP!
zN%fW7)})RZ)N5P$9G}okXOl0;7{ZmF?s{XZjd#BP{s~$d5C8Zt03^>QB}MBxm4Typ
zZOcWN*eePM%A`Qow%pd2JCQYUnDV^MqdU98l(jbH6BME_<t3Z)T~c;A?<;jnl&}_^
z*Z+PMKwHgIQNApdF;WJ_zmlq6qjx_01^Q~{`8R)2)ERB9QceC|<@LAUY15dF`uuz)
z5%fhmgEj`tDyJ}Zng8W;Av8+bLj6<R55fNs1NOBTaP`&1IVZJv9|Tp_6*1uS>q{^o
z_hmpE)Spev4KqKS|5_u+Em`;iKbg(3SUby{!D~p@0;=Q90fX1L`Rg^QIw`*BZTjad
z`PpmcTlwHMEB4`Onh45F<pXAU$Go+ze31{#=PjhHR3`eP0|;aWX-z<2Yv+#UcaP&G
zQKHKx0abp$pg#{UUO3sd{O_j1+#Qnkc8dRDQzkI!3TpJq!A#1RO%Eal;A9Ww9ju&5
zzk{u24b-Mm5!Pn=^F6;%C&?4b%~)hUwuA9acB?<MtqgBuJCK}F;ZVU}cmoxNjK)ye
z-4qOd!k=DyN81(O1Q@>{t!<?s4X*x{mfKbe%Dnu{bi?2foH}DZg{ST3@KQPj)6BbV
zlzWt}mYY-C%13NHCTwx-ny|Ym!rd&qhc8BzJW?5#hd5tlUMxvuKSk06dy!Jqmx|;4
zLwRw$X>1fr%~)$+a<{%lh%zU$32e`-t_XZX3k{&EX)lo7Nb`%8y>Q$mhkPa;q}lx9
z{>gp0f6@?zE}_I8=?$yKC&J%z1yPr^i-sCeK@IiPpxFI&d2KVCJ8*F^e!sb%rEU4E
zcKH3(+lcfJ1TWf_+acyMpiOb`?`jg4hqV4xUc?*sXZ+&%bs=#bV2I15NB&V)Nx<*^
z!j-@NM7~oYgU!95sXq&u9P)iL{<{wTe;)sGXqL;_DQG~zunjm0=NxFjpz(8G6!#;9
z<2R&`KG5`Evi??vD}v1)s>T273=O$dMI3pqvAI+9BK?d>;QEQ)c>B5xr?6*&>q~aI
z9~4zwV3@ni^s1_Ozezp!R~>CS)VDuD3NB;#i&`a8JFO1+pIe=C5Mf4p=_SGsdp~K|
z{??_Y{Yhl)1<2=i*Z!zT{`9tgqaXs8w4)wqMm?}h(!<QrjmPh{ec`9~675IW>Cd7Q
zrKmZTf+eWgd*6}0kHySSaJ3<iMj=`>3vYsU|3iPy8~MNN&znmOP`*U|T~KAH>6Yd5
zyUfq#5FzZ;-1$Fu<%t7_8=0j0Vm}LyZ_$1!Jbq2?5_k+OwqFX53u)ir$7gA6)uR7S
zYZDfh&{}rksZwSj*x+-Lx%s8ybiucvKs32;npqu4XG}X0K7F?Tzki@_|DQjgPyZ`+
z+y5JA#1fN{jJrjv;1Y<yU=A_RuDX#{pjL_UU;x<32Y+su7`zQQqMY9<%{hsIDd*%U
zXJbju`qG?ZZJn-1V~3P}_y)c34|>b0>$%Bng+Iw3>Fn?5<=XJ&3B8=fA3NT}x!x86
zZ6?k!8?JVc6RX%n9T_^KU7(FfbJuj0Sg(}y8a)u1a}yU${>0;%<KKsH|8jHTds8wy
zCeJ+rj&{M*sO(eAf8oY98GYS;uIKZdWa)Z9LGi2XebN46GwU0@NBubqgd3%&7oFUb
zNbT?hqX{!Y1Ubcz=NhSJN}4h{WKvA*_eV;P-1E*`*}8|N_v(?v-bu8r&`^=bXQBD>
zrcv;=rGhtS>6bF^Y$r|)=4~8IikVYCOl;{_k-CWNi<Le7P3`p7$&cjol^ovO08i~1
zp&-ho{H+NGyvN(d#>8K^p7>?|fcp#`zer9)PLg(RVL}*B4f^H2r2aJP@n3cSiatq|
zw_52_Ouzr~a1@|bJWX3{78PL#J_h~gQ7oPT9I;IqGTM`_c+C(0<1NF(MMqP9k+id<
z_cAvkwdug90Mj7t+HEeJQRCk^G$xC&mNz3sbPZhfdD%~P9-ZDR<HyMAc9mbL(Tkv~
z!nH}2|8MU12({80h{RQg8$gvRI$!25y^0}I);a`yA!*kp4N|jnM}xM(7SKP$M`vlj
zgxMHi`Nm#nW_@hyE4t~ZCU}laoDUyYX_k1>ML`^WSjLA)KX;aFPqLD)TF%HA+J|Q6
z*k5ojjr>gIi{D{|=DU9VY5K1CD~nBGGU+HT#T8H%XB&JV#*;;%=nSO-mx@GwmLltB
zPo$U$H2KE!|LF-vnZ7g#!2T41beW+zOWLPtFwsZ`nM`f8%&zAO^Xp{As&|>qbzdr(
z&E7?012g)<&2TS9Ul&ejb79sz$niEiqX;{xw-x?D_h4`^x|QO*NSjW0zS%+&?l$-j
z??F5~%@uQz8sPtUA8b#3CU#_|&&0yl?2^My?CU=%nb_Pp3@iBhDdrwA`ZBKk5u<2p
z<Yt~KH9{0OfCH-bGlK(5^TP)*7_-C!6CuA-`WbZ0Y@h06$3lc8_0vkA;Wke3-beY{
z8VHfcDm~v+0h%7mraQ~8V^^7VM!sLBe!n!q`{z{-nzNS-=hHIv{hX|BfaUT5%;=lb
zuNj$f-0;5QPHJF-_mY+cX4=tD)z9zUZRm9nxdCLQf(BRQjhg176`5P#8m1NfuZr>)
zs)vG&m)ShVoY_9iS-1|>2yfiN@GZD>CJ8*Fd%Ck8sk+zP$-V{Bj^3~v{=xm`@SBf?
zk6Ug3MB?h*Q!F@bw@4vm5@c`aj|F6d;K4kUS1u~I_nWt;H^EutU)N84oA#W~eXN-`
z`#afx({g4zo1k~GjBa$6?#OJ%!{9vAANm^~23xc8HRNa9{supj$T~$mfG@ZxsSS^4
zdy3S=iW7+w*4fZcx3gBpXw3gYm@iQ{x6b5UgilO+O!E$xZE$OSki^`B*vnRa+t!PH
zScZ!X<*+NPeqb0%&Md>0PBeH2e`wv6KipvU;Ii}#ww1_S(ht0nziw0hypc_c5_CP5
zf<%7Y$cHVyB9RQfvirhT<hUxcUR267U|$t9lMFCyeTIxi<JGcp5d!&CqMeLhi(kco
z+`|jKX&VQxmHk+D8b$;os9j~uBJdTegHZ)L*xiWaQL4&_m;)jagFg>nOXUgUt5~jB
zBBn1P|1&jQa(aLEhxF(y9e0k_2908^za|BHndtHKvCQ=AOz>E4X?_*PH+q9^Zhn?0
z*j2);-u*l2D{}^Or?VaF%Li*(YJ#&&#Y@gOy=})n&caOq3~Bf5AbApxea_fR{y|!C
zf^wIaPSAc74sLBy{Lj%Fy000%AvgwBF=j?}(#f78x`d`03X=)kKj1Q)lRL}5bmHg@
zT>gdaeg_~&nhagj7B5TfHEnUBRGx|)j3U$-nOG1#(6&YXHqAHwr?ExD1`5-%YttVI
z6Z_DY!M$Js-Ld!`Au#HdVFLa|R1NPe5|zIP!pt&(q1E2wM}WG)oiMg=9au=*lG!$J
z?lSiV$VTuHnFqtjVC&DHU7^*QE_Aj&BtzHi(x1xtC&qpWwIAsc4rbt-!`%EC6>XRF
zOQc7(UDCfPy)XBv5Jc}Wc1Qx3T8ehZc34|SdS!4JiHZF8&I;rPu{dskJOD0gft+R~
z_@%1O@?*+i%WiNX`mLes=E5aYjC?R$Wx`HS0#*VlNf%0gv#26v-=|?|MZpwyHPF9!
zHVf%qq75$FJ<<N~(o&qL)qdB6#z+tCl?(45YV@{`e}&#w7%+68K!}t83mf1SlM8MO
zGc2s=u8N4TMBm!FwmH*Y`S}+o6J`C(MBe&pJ^yCz{nR_n`I!}MUnxudL$ndVlMTa{
z?o<giT6VhU9hR9%hpJ2#_Wb971Ixtl)rIa`pd)Ey=YZ*A+#iEq<ii~2WS1C<KpnKJ
zg)bO@BW}4t7NyUik_*4?EN4N=ZL$OHwl~A5_Xpo@+B7zhx|JtVsZ0<C#in^<V`@PQ
zz6LoV@Eolx8za52Fq1hQROM~ruV%G=^ac^j-hKGB(LcH8I_e6{>Swowh^)2B=you?
zUX)YU2OmF6KSl*Gx?A>LP|f1Y5Gg7Ij()*lWTVxFhksAEW*~%0<|m?G$q%DGONanq
zdM5bzJO2bQFbJ99qud`(6=szwn7D<B14Dd|rXG3QmEHmNvUmFu)J=deQyW#y-!3H9
z8%28&cqF?{;jHEMV%9?cg9tDboTom7P_IiY?>i%n-cU0o;cPg$Vbo!C|0{>eo>I!6
zr0*N}99A5a260>~Iqjgh_`&jplJRUy@6bSk3)z!d3}ZGm4C}EJDTaNzOg)dXI|DwV
z66Kx)m)V{`IXVh*POL<<l?9EK?}z;63-EZ$Z;t&h{Km<BB+L`faTdI5kkIlSCnuY`
zc#rj$cb1$|j)ri_01bM0!(f!CK01M+DjXatjLK#@fA}BGq`LBJkd<!;g*5&K;S7^n
z-ba68KBc8dL$M;F9wU9kz2Nw&5+-(}vm_87%RC+vD>IC{<DG&2ia*d83EoB{2mJFE
zpuZgf_fTUnv}YkAl(XPl+GEE5SbUQm-H+jxQjFj^M-LI}vHE6iF*~)vcgU-i>J(w=
zhyEa{?5igKdu|_|7kmu#4SYKH04e?p{<9u5DrX;9eR8XX6%;Q}EuefUsP@<`{zvc%
z3fh;3`A-|YVgA!)ZQ#Kd=n2*zB(2<IjjnHQwT5B9hhP|R(qOapC7q@720BZp_d^Qr
z+fR-Ii)Clog?`7>Sk(czaYSlOdZSUL-)BNC9+%o*{)<ArKO<yhODJPCS4cF!i$c9S
zeVS>5xiS#n421ciG4O#A80HOEHJ6CPTcw4<2VDQpxAaAZ$ywf&A6&4)+bF_`Ob?zG
zEpP@iX*F~$lIMMJyQDS$3{`y@%NILQ|Kj?)(uwM|hk?(*`Cu2wjCnKxb*fBVL87=8
zQ9Rl(?cgD9h&5Oz@$@U`HL<L29>XBmOk?#KsAPC98hnj)ykDN)+DSEqJx^M&%l#{4
zXPusT)9Khy4)5N3QDyoA$@P|yaQq|GZ9pjq1joZkjBGKiICzxTBr7JfEIE`ekKUk#
zNov0md#!;-aXk_tFtU>QkSw)w^tj&}II~*PvZP&&6*Z_n@&&zgSXr-vX4WUcbkj7$
zyOTTZU~;>mA8Sw1e88}~ZVsnH+~l}96f!dbXBlASgVes@Rgk=N0^e9fDLzE_5WEJJ
zTk*ZOVV72X_lj&u>)>f%Wa(+3$%J4A4f~ka-5{aqHrDVRV4}7D>MHq2_?w!#1bi_7
zfo+5f6YJGOn$$NlOZo)pDkaFwoW;>4BWZcC9Rebm$^4^{##{Zt;kbf7fX@ur@M3{!
z(?UC7!-h>=e*`3<PEaYGs=|Ltd60cc+N-p<t-5i1P)7gHC7+F44PIoZ5pG>=zgpaS
zgAXcl$!Cguz!!h^GqO~cNZm6&lkY+1qjbXR!s?3?rhUHPn{jL9`~|<kJpK7in34^D
zFH_<o{rM_?dU1JoPqKsTgL?vllMe@e0QTOQ=)ST1Ld9MSFHS<w$uBJH^Umc6ZhY&k
z!=rO!Z97_syu0LFjs=}o-nL^>>MKfVcD-j&TxRdbml&z(SK3Z)NfBzRiwl9eW(5k)
zmIZT=yI1s^M0m7JSHJFO#EN-uNgd34|L#ZZd-<gFy<mEOu9w)xnWc#_{plCA?<_sH
zA3-d~oYOBo6%M}_{|D(%KMo+P5qGOODm)3@p&~UQF@Jr}6-JR5m~bYn-tu@w>WKWg
zb=H$=VhzFHx`$Z)1K&>_4qy1u=4pwo9c2}%{%!AU&AhP{AJ0b{y^i^BY^NS|Pw+WM
zHLT+_p{Zf87Gk;^@@Z4P`;lgEZT{SfgttjvnaR8}dQ11g8dqbyV;0t%(^`{UEpcRX
z{K;7dq36b5nmy8c4iLvyyU+QYwC%{BR+Wgap1sCf6@O{g+sjz-_AphwGaJQs;lhct
zy%*(pLZH^U3cTNI;70lUo6bxR>_V`h%(bKBXRqTak)KeBRWlhZ;Kj-}(1Jy7x$=4M
zC%t#I#xIw1HRpl{LNn#wK5R;y4+)j?d%9{!bWRu+W7r9ALgl=Z6JsV+%#Jtb_jPX|
z*2*dcH~{5Z5^X;oR+hS%>a7Pp?)Q}6M`iJ+Jh^*eD31`g;six^6<y=HyYq@>j=P`t
zhyHCyAN|AiKFXiK?LqTDZJAV8=VY}<t>-}%PIh(pJaC|seLj31z_ZWu=yv7mU+(0z
zk-bbRrkmM*kh4IAxW8(6*grGBnQaF+*`I@DZI|KXm+HnK!6xgE-UPRsJ%UVf9h5vQ
zD#@XurSnA=C%ct8@gwdBp0~#uvRl%D8{g(+)~nG%Bguu-i3fMHz-gcp!lzCr`zRkJ
zt3I^%p5<qiyP1IhtIE}JhLk%J+=x1U!km3Lg<b9z+!uhTRtlA6b0)E$5M>xXXEUy6
z<H|8N4;eQUZ=u!BwH?!(+0Ru?bGmuBc(q>exYNty?PWL>f&Q3GKEE2$YrsM8;&CJR
za|WJ9-Ne*1`CmoZCqGAL+p(`xHFXXdH>{*!S)wrSVB3fIcIQe3({q;28fj*8TISRK
z&Vp8w+}IAccDtc3CZYeFFQJb2%Y0ZK|8&+D&8XwsXYE`2DS43VCzexg?#rf%NA36?
zO`szr=5Om^0-WoaS@AIE`c;G1;26&sO72H=GoKEc^Eq*+0VW=B@Ss`YSqxBoU>nr{
zvf^r<5#J`RxY;+7?_mWr=R#|4?Z?UZTTW(wT64Ys1o9~<@;5jCHA-IIz&a(OD??J|
z&YAq6+SlCJ>yQ^gNuem<IeCP@2S8`EPjg=AAOts#n@(<}>g2<t#Jm1s+rxMBTIOW`
z#NW2dkKySzJmqu3RdO%7nqTl{Os<^=C)37X0%0#RKO<MU`7t8N@9#p3-{5R###BKV
z&!#FeQ;5!cO$~H593|1qwI`q;-Ef5T-q9gm*ZbOtV3<-BhRkDBpZa?*-Q3gt`hTPA
zA-#0{s6U}=NXUOm`I#$*W{+^|UOZgDD?9s@bvFqAlCkw%IVV3-w{|s`_i%Zht{SRr
zyR@z>bw=m-V`AaDcby-Xpw3UC{CHIQ4#FGgp1s*MZtbdM{LNVpP*pPat`57p-fYF#
z?#pm2Uu=6Ygt?3&Zee_t3^o;k*oei`shJ4+ay1^4Y1fyG$(=Xn0Ni3A_SgB8%+Ib$
z=I2#Rj&F6YlmiDLBO4}r|CwC-Z{|gQ_LJl9I2p8H46as%^FHlaBV4!uFx%5Q$=F3T
zoc?YgljfVpDm{9pE4B->Q*KG~gg|HJzex*|Yd>WRXv^f-zg+K9CK%nwuw*CqAHby}
z3AtL@2{!O%_z>MweAL1uMt){Z*hhg1Az>W1qhr6i_^Pw1EEfEgqJ}EXk*Q>CYK=;F
z|7~$8KP;W^-sy(UMul`XLv;3Z7cdp10n=>Mw(&&!*yQBmq=EwM0AAYQ>^;d&{)OtB
z_lBGQa#wk^O6AW~@Q?gZw)V!ej|r$_8pNa#h{Ty-ihLPvi}aDc(#Oe-qKRD)!pyhl
zyWX3Uk6t<FhmX}kiec5z@0nGJ*xBY}K}5rZvjAH#iW<p+(7UmSOQPzwOGUpAsGmg)
z5?zaaLnJb;N_G~x9tn~96(e5eYbbr>sgpa2Icw&ay`U6gL&j8#l};!2E#R_UOijZ3
zkWlu?_@>!I65d7}>%GSlwOwxiFB9DzuVDY@_igS;#J&%u&93BsjUd$o_UsAHG{WX)
zQ3v+!_TUK~^f74X!N2rTNV!)(kw#KSFZ(DYHD<@%OsSY5UBw#7XnH+kds^z8rD*7Y
z>m<~-hSVX`;C!rQ*jDJ(4bEa_>drUvNMGPp`*i=q+<;r;zZ4!cXLaEe{9CslKWC*>
z!Sr%j3D9VIQg?GayBtCu>VJFZVA(o{cHihPUxi8$;e-0$_ZlOXd+z)zDtZtub1yUe
zpS#?|rsAC`{Fbh0aQn}$f@Vc2wVe#zsyc)?A0u`pCZ(qLaOYoYD>=b`?~}m{eSC!h
zf%o2u-ZK@2y>zA`JsReLQK!Fltw-6M{ZK9XB5Qhoz)>l1GzyYN*IOn>^zN7acRI|N
z8p<@DzU~hrh}gp<4D)};!b|+cKl0<A_yyI&oZNjp$xT7mj+GmFOtaJQSk?KD`UrN&
zk@{AYYu-LnDFEr5cnmupnqJn<!~D;M)qhN-Y{6EdYCX&&)erN=v&XsHW{y<9`|t}B
z-NQI@)X_3%Wjm&$fHfol6at?%G%FO@zu^}TmXWAlj8reGKx{YuPuH37PwzFqjpdaF
z{0!X~b3ye;C-(~txb~lEIEt;Vci@%yW~jx8%{}V>tew6^(MERKi{^wZeRx;Gdr=*l
z9^uo2KntTz)C)yE5TB*dRHI@cv<Np|YZQBVx0x+$NQIdXkto%%%Z#%P+#7({&;k19
z-~FvCH92iUCm>}dsJ|A2YQk&Jwx=!zG+PE$q-N*G*TtJqlC3_P^T;n3fW`cdX5tZ%
zTp!feKH)6k*!N!bPdeG3kgILS1x}XDoU*p<Jlw_uN0)Lv={=n#O)VLJ|FKTO`Gpav
zjb6L%7-c_&OE%*ZDs`XTL@bjND$>L96Gp}-j&!oR7J&K4DwGcc8$n&R7+r9dTz<NA
z>S=t-^svA8H69pF_wTKI=GKNAtZv>J3(n<RIQ|t!+uo(#tbZ=`dZ1E<K9(!JyPN)K
zl$UePrm@=b_q}_w4*Kw@ewh8mw_$31;%(rluTUE=oUMxm(F^0>8#?QUZvFr)Q{L;W
zd;MR6=!K>p-ea$Hj}VcR@Izz0dOv1v6HIMx&L7LpL}&R?+}Kx^au}!CPg&hIb}#l1
z;+)q($<Wb4pkWa2>r8SRJ(t)+LHxmsx*@cpa5+J1q=A3yNiNFz@iYE{!3rvcM}*|M
zENR5B5YO>1-#ieRL1MEvvU)NmnTkN8?B&;qa}f%Ob2vVM=IcFe1L>gEf=16XTEeXt
z2~Ot$3k%yMAU#fuLBIY_57>#beHpB$B))r2+P9cJHoo6%=Yih`Y@qj?3G|*T26}Jw
z9yXEQb2id@ZbVqJNh{VQFK)rqMo74FwOGZw3h24!ltTFtdZ;Yr7nAd&s+;m>Be~d>
zJR16Ccot(yCZ*(&-TPQmK6xF7XI^f~J(1q%7RFvjF`8gm>K|F5%{!hrg!_YMlir8O
zO%CUFtPerZz<rV2C4gniA6GMk1@=HVHao3cj-1uBl@(^LEVxyfPY-a$b!hSCjoX>;
z2Zw(T(duNcRYQg25*vrHW4+biID3nHa<WTFo|YL?k)E5(Un;Bl9h;P)$Ny={W>^3W
z68VWkg|&)HP85fsnQcd=apIX+$xCI%ugh#3JokjrYj?rN!myvm*2dP%Iw=3ca-7yP
z9p!}yYsl&>ynuS<@A%~}f4Tph*AgprP*GhP%htGf_4FcV#7CDccQABbqqi;Mj`CeI
zbOr=6+orOI15W7Ln8JW3SL%xLhEk#^fxok4CKqn5Vqwc};74PQadJDr7%oM5S0`II
zodSEHDxTm04SEs>mrC4eB0|JEa|&ii3l`q=xjFL~k!c>S^xHPlcO+Y-lY56%UjDjv
zsuo@h<JZmSq^zQegkl(!hTV>CBu-S5;93C|h;no{@3et<kziY`;P{&fPgslx5XGy%
zq&HsuV4CI4Nc{o+Cm#-Es?IUH<V&fta2^U<Z@l^_J~8oSuc+`({kq~shM`RFrKGY(
zK^DV!^>>hLf>CRF3d*DLa*Y6^(HbJB%SII1&5rk!!m&rQ>g;&4zd!T#%{}>?fKdC2
zXMS}cbD@saI@zhfR#zQ4@IUy{3SP?=U8l+D%!!Brw8%CV{E7^{`~&2?FGSAKKeWiX
z5?I?Z6t!ihQN~-7S%30iwD{lgz2p6Xg>j!|w)JxsF6K4!eyscF27kC?ciB`!6~h;Q
zG_0(9bgyRD+h`yBnFaoI$S@M~HjNpbz6@`b_lvmmJ9=($r$bM|ohs8kAq_)PP?55r
zi=>dx+A}-Hvyo&LIZ(WmRhL|F2=+e><7@EGt`3Qv+kRmG0^A^eOL|}PA-&%Z|Gd8a
zb8>qES^D^{X^FaVrNm?JvHoF;0Q6rEWANuot6B}4Z1LYb6azEn^%m`IjFlp>xSy6G
zq;U12*!=+irymTI&hF&K&>5(9Y^UL@G0$+;U>&K`GM5rfg>&3y?BX_0kQ(R!49hB*
z%>#mopDo*ASdk92a{r>zy4Pm5&2n;+d9;*W{Q;D{3;m{NK)b#0SAa1K|6fzg!2c#{
z?9A=WYb-dmw^dDuzgO7mWwuqNsfUNFho=eeik;V|?zaSQ?wbQH!!Lw~b|3y3R{vS}
zp9s7K|00fjkE(1RPt%idWGDLwokr5cf;;F75y}*pWdn~kY)z)4VhmCNFJ6*@H`HA#
zr$ZQOcz#3AcH?3>U3qS&O6V$NJDkeTb3_+jw8(&9CR*0M-gBAv>oPmw#S<y+dRs@g
z7s}gW?PAw5tjnC<o9BJTagt@%%f=fR?0Lddz~BT!M~#JXD+}{hCfc^`?<`Qforboa
z{hfu#>z+(|RsAX_=kVw(Nr-y*--(@U-}*J_E<h7><%ZG${R;v!v<5MvK(hkGS6GM-
z*t&t%K4%d?1PBA)3<1{Rm(+^@TIgEfevM8T;Qo$%qE2%qY%G|p4V%JoXS`(v;D<BB
zLRkD|#_W^cpHqn^^-$hfID;ad=~Qr_N`UmJ0!h&V+jQ8U{M3V=pdNBpsgr9WGl2|R
z%ADMX+LAJhKkn`Jw)nr@80E@7&!^x3{)8xFG0Wg(u+$VY#GspN{ki|K6RDmD>)C+r
zWks1)RR*#P{s?;3b1~=b{08^Y$-ebUYYDy))yoE0jsN+uR{7rrKcQAhN#pkLI{e6r
z;Giu`w}AM?D#bF|lP0+FEGu{X5Gv!;U^oPIIrtal{B`$*w;{1gKy5MW#LULZU=SNo
zQGBxS8sGdC##F=>h1n+RYO2@tFGG|t5Uw>|i{-CHNv>yXhU~$3xixyv5Af4?W19>3
z!VEIP_bP;x&?z4<-{(h{40b7>61MTvl{3nso|KANvz@=wyz6w}3vFt=V*3+lHS9lP
zoAm$deUGX4ko}S5)P0Y#(v@6g3%e{vMat=${&DqVL-;7ghK-lS&EA^$($#!RHMOlY
zCc#vBZp)9RXFmPZ$u3lx{6yFFCN_8`mzy^+6xbZAN^-7#Zx%mZS2BMJ27*M-8;1TT
z67OowtV4{paqfs@t?sy+g~eqR_DNQ=-no_N{HnI0``&4b$CyL6vpK<by~gcM#lldI
zNw*BsKzgAyf(vh4HuC5?sZLJos_wTfytHJQf)d}mJJc%89&Wa1zUuQf=WWNeuJHGw
zBp^RPDlZ3`j~Hf*0Gz;9*34s5&gZBw`FhvaD}*Ng;UB12`U#f#BkR+n=0ly@qDX&1
zOAofNPk+H({(?|R)x@9U*2|*)WJb_^HJ!Ek8x4=btj3OQXaAUYX1RJos0!UNPa=>$
z)7&;=uFCU!?lD%5Qq?kXuF%yur?OP%)^fWXZef)^HncF}<B;&Snz@nn1~yWU!>d_x
zdmRj8nA)tTr7AbGWBA-7mkTAN1M5(Ac?c1+3duay;;pvpG!t2~Q2<?MR}S}WfH+m%
z<7WN9<n^NxjH<E|LI3sa8e*4N1!dKC8r6b~vK^U1tW&woRk_d7emYFf|G9!Nh89g}
zs(1joF)WQS;u3n}F>X3Jt%EV}Ik{#Y-26VtLSB1PlM55NSuFLl`<;HQt-dAY$k}Cc
zP(?<=7ud&Yu3a;~zGc#YfoX0q|3QPCqFUJC+4w|fMzyd6{bonfyQYd~ecD5xN&*$V
zWbS)olc`}SxoW~(gf05<%PdqoSOi|9+laYnO{YbhGu!r=v*+YO>j(4aeE_lyN>#=`
zbuy})jt7(J*QtfG`fVbv15M+#%vz_>Y1+g_Pm}krggG^uaK?4UH>E1(!v}FNU75)D
zYmBd-y_B?}HVxyJsZb681bxsZTJ6SU;jBUTH)lRMVa~bD@y$+l99hi$%`z`1*(>nY
z;W~hwo28|>p3`57s05R>Gh;3)&p$Yltoi#!sDRc8#=SBaL#O?V{xYOY)taj~sWx>o
zR@f;r<Q<R4L^A$T>Zskeab~fN^i8G&VPK6PZ)sz}D-4w#gxvR$5Kx2xrBH#3rY>Hc
zjA0^}{b~iS=h{nhS*mJp$>r2*++2Z2B%mgASSmh}^2Kh9O0w34U$LUscwt#7c)=>9
zy%3ebk(O)M7};wkC-0-sqZzIE6}3sPJcW(S`-MN+n*4-ra$=#JY@2ulTZT5*Znk*D
z6}Q)D0Y>6pJnkz<wp4o82$=bnVcs=@t&4W#T3q9?ibo+7kKp<>!XI`_>XP1>Ff(&a
zU~mClSRQL21jrdY_41c!zae4-^)S{dxBo<$?W#kD@a<}Llm6u%fmyd}Vh!kK?D_5a
zh2r~IHNpHD?cTygyume?%PpxP&6%;)teT_@D<t*f0n|=3Qzs{bU+4HbHfI1A&t;%0
zluw?U--_~FPjWJUzS*Hl5)!PUxfXAS^6KXKz&wV&^II~2q2<oPf6zd2|3La_zPM{3
z&#RJMgJaZ{Xzxcj89ToQ(<BGeCslHf6rurx!=5Hn@1DHrb9N!AMg0}aN(rCapaPl4
z>U+by8cqjK$?LX1HjYw<xOukY^5xZFnRBH%lUcil8_8nH`0AuH?#X1Hz3JlMFc3c8
zTo~Ig*&qE`)~w3r*!J$@BK{9=N>>9ij`2XS@h#2Hgf0Gl>(N@b^=ojh?QG0`m@bE_
zp1^t;yXrIk`Tt}G1Q|<s^UTR0#$@lMW*92lymRjh;W_7dUfF6E7qj34E*NP(b&tRi
zDUm<9Iri@`R&pMOdPE}~>p#0@a-pf*yY$#(%uljcIKM|u1<AsMa){~&?IhK3|1bon
z+p5P;(dW9l6qgpmBbI{m>VdQ1H%w$Af3CD+{&!Y1F3J>0f@-EW7n&-(Gmqub>_Y}u
zQV4q~;;72n*imgc5A$|}G~eR8jxv>}CqaqTC#gFa(&<De&+>hc0zh0<Cnq_Jx8wag
zw$FdFr{`1V{b^Fjg}*~~6_362@i1k|f`Mw=$N`IM*ejc|8`5uDIPE|Zacwo*GtIFV
z-Tr6RB)y9&i8zah<iHBG?+-U|xmOX$jZjSfE6SV&1C*w~L}%8FHg_%?>i7+*Nn8|1
z1n)qm=sA-MlXeD6NDc8%p%o>;qg||UQwu0HNDB!5Vv03@>C9CB@s*8>?lS<*_~q^q
z>~;azpk7V)g`?<iKJ*9X>}P=J<odzC1V~^QJj?iTq3xk^|Bl<(&?@RDL|WeDdQV4I
zbvHk!71Q$`iG15t01l2G5@-7OwlJb-P60fC7|!RjTjl&>#kyq2v-*;eX%`jG>N^Q`
zexrRqQ)5KIQu2&S{v*n(8u4elXPbV|xFL3C6lbu^M5uP>KZ=F{sx?%BPyS&aqy2iT
zx*95!10!7FH6n$1oI}Ik_dM_o+Vd0N(+t5F;OT^aDG7OGDD!OXtwf!LZthq8@rEic
zPcfXo`%SBNo=-3To*L{DDVkW#Cho6zO^QuPvy||@Mn&BZMC%RWwTG8SG<#1O7bbi6
zt#)AA)mem(tFa=GboT>Kb$yJ`^YV#`a7lnrP3&S?6dwX>xeR_o>Ok0@85k>+zhg8L
zJ66!$R$hv0gJ%?rtPU6vVO`;;4a5>e4gMTm0iT^~8>>&w{0H`NJJvh&GUCV>`o#Q}
z*--BP8Un@IHWQWTlaB66oiu8R|I@khKFmDE4cFj<;%-%$T4O}(%6x)J@~==H%hZ#R
zB7fp>IY8~vB@NkMQc^O#Ch@R3<Hj*F=scTkT1m3}9ZI{(HB&k^U}6ogaX7i3P+2ej
z%94IvJ4`9}d(uY}@^owMKm9*aSYujvB#r6_$kSn)*!znr?q;QxUa^|c5#^9hb<Aug
zHF~dv2C7Ow_R+vHEwi_xcnEYA{uNMMLfDnSSTZ!-I)4Xrc7?NW)jl6%4t#{RuK*Jp
zxQey*B_tV|>%`8&SXj${+>ZD9`}bgbrgVdLP0&xZrT%@I)Z!&~IS-S)^6Dm-$xuTA
z{%Eo{diBko;$~UI52I`eGz6127q}~kvqIP>L<7xv4yJgcRwd^5q-P=nvnNq)?LU<t
zBUx6FV$FibKkn6mWx<oYnrTXS|1>jontG#|3Ma3^$=<3YI}=%jrqb-xnPs#aPqaGO
zk!B*n>G|_eplC989=Q@`GS*PG(fcsbx!?~>a!lw_Y5wjL3mVB~=nWLD<f}0dnn7BF
zY{XC0-AaFsOwe8vW?^}~VjYwo=ihS;G4tsz0B%C;{dYK|;<f(_`ZGPqBMir8hP4E_
z*i^uiyxw$hfi;MK05K%Rj~ap*X1r8u&6Ip?HO&bbrs&Ca3o~o{{kf$;2zjjrZpIkk
z>JrMI%qN4Kh0>3_*8?44=!^76y%DB>Ws~zKuQ0@bU4EuN%zR-g1n`-x=R`H~NSPep
z=w!>02u&Q*`)#ouAdYzcDenocSqg44Vukfv1blNe)%MPxN8KhAiCLG6{zD>cEL^nB
z{}sxK24@Jd3PKD5BhD;;@53+rACNc7T1OYky+jq{Nf*k4R=R-yndz6#kM|k5I_cMy
zwp8bO2?O3<OwxJe;9k?X#_`7piS~}Ef4!tlxD`v*W{|yGIKkC4;NNlc5IEnX!6%OO
zLw=p#;ER=nJrn-fTL)xSXn-q^G8(jww$!u7+%=(!CW$g+?Ie3z1)4jv`+H4QD-Ph3
z%yq1(-t#Y9#{glum7~{okFuIaiBZ4g5wpH5i<upGU`p?oOC<i6lw_sZSbeY-q0Z6^
zst<$zUZ5kWP34UBbF53--_WvC7f+C|FJ>pSO`PlCTdPe^&aUxZrz;8%Hq;-Ep412%
zADZx1jVm-BcyOoL6)*F063RMMo5M?k1KO+sQ)el5?r_c|ux*jqF=Xx-y;o-5BxVHf
z2hTl1??d#yV?S?|bA1Q*glFD7IkRI7K8Y32rH5qJ9};WNY#TFYkHrf8Y^Z(A*XmMx
zHKAKfE+!e<h%rXMm4_Knr@xCxZZO6v3pMT7cQw_~x3YxUv0(Q%I1$nf`81;UVa;3P
zA~-O!#`UnTxrNE~-{VBkWKKB<DjYj~&!39Hu=PAP!^vkn`}~`KCx3_VeihbF^FMfn
zR!U@X)&#I-Kf7P7Ggj92$RhQ^$-OET=zT1g474SbrwAeNKd2hBu$@e^FKf<URV|H0
zylLomHy=-Uwz_5nXoK{JuS)M(D-x_@e-o|P`m1Fn-`xDQrtKnJoZK>`Gia?Y_G0v-
zi`!P-LkdSe@(ZQF#K%{qhT>Fc%}&d(?|~exa>S@dmkZn8^rLL|-$VHEc{*3P@G~|(
zeq?H|Ehr`x=|SH3k@9(C4?%8ARijsB-mFONk=ax+&FilZZr+AV<+6HO<>Gkl&TLwX
zJj+%qC7Hjqx{Y73DUL~_xiIpv?h3=-WwXp5!8v<57e(sJ5=t8NMW?TS$xCzmAL$pg
z_^Qy{U9XC9W}>z+`n5H7b`OMq@3y{arS&!Ql8k?>`nIUPt^Pz(BuHHKdr!Zf*GRtL
z|8<3BqL#l&S2sIZ#OZ`6{hhuvPizlxd#qYUQvx}#5^w&-aH6r(UAJ(5^<#`3Nj9Ay
zvU3uscfX6|DJHojba`n|agrD7JO7k?gMBp5H-*pBysK=SaO#?=G>FWgfxqFko}T#+
zndY?`N>wptC;K5hQ{z7EIi&m>y!7f%kr$EQU*-@TKG=b)@_+FUV-T8xhB{QD%sO=1
zDNp9VUEP{Q;JW#{!nwYyx{Xd)B<Nl<kOPK<=e*!?4&SDSbdL`0^1GY&N61{9_nUc1
z#=A978#GTF{oj#-xEoqXP~XVMa9^mFCujC>=wEno1>b`MB*%;Encd^VIi>ByO*?O;
zU+Dhpw8h}-UG&|{h!5t+H<-)XJKpXOsvU3emB7=d=0^d?KKk~6s6utqe-?y=^)zR8
zZc9HC`mYL4<Kr8h%)6=>rh|I7Xf?OiYoC2+@ou8K-W4ididOfSh2Nc2rm})?Ytoxq
z?~QMqR49jsamNi9SaM$xn{+68+*5>s0{dU}DmRWL%gNRtC+(`q<5YaU*5CRL9n7DN
zUi26j)0@Dm74(XRaU#vFO?X%@BE2j12eXL68t8hQK^kiMNAS0N8Xp_!J_OpH_!B8w
z9NuDbMl_>nRt7Veg<`k07Q6*~O0ec^;DdksudK`+%=m-#6%xE%fzL1gW|Fm7o=e<t
z2>cZ?+f)^6G=NuM!U$y=MM$^`_i6132g!<jFsm-OvVR0SMXZ9KFdUHe$3bQ3hqv^v
zNG&lwq+~oqlyKo%lj{~T98#7(ukF%PP(&vjqvMH&BKBXKd2?H4)d>H_mmw%)?;li=
zK86uilea8&jCy5svAQwiN8+g%KeIBu51oxqszBihCNgS+_of>`y`Vz@;5DlI8UOHK
z3LIU*U?33e&!1lWO`NmhOAOFn`DHKWlOi%QR75V2BJy$P0=c%~0{gDN^CcQuT8^tO
z+Jg3G2%o=n2EKnw(c_Gkz<a9t0Pf^!ky_DDN<-4yfUyByK3>X1IewV@Ftg)FD9gd#
z_$vKY@%;=we1U7c_&JR4t>Px~kCWL$6!`F~D4trc{91`)?rh^H{beo6a(`6{<urHY
zru$(U0)8~kbHz)QREC_F&a>S3j;ElA&t3s0iE)p_!zFKt1DlrU(L5Go-KX}#54%ZC
z*Z4YBiKd{gh3<FK3~<+(GzBJiX0k8|-C(>CE~jjgVi25cW{iH!#_xxdLht!Ezlgdi
zRl}cqJ(_~mM~eD_^&$HhtznzG4-r5xke?O}6(#7Lt@inzpTI@c+%L{OtRjv*k@1m!
z)Bn_bb&X+b0U0H#4Il>iH~&qZH3$)vNDaUkiXi3llw@J-<772nNBHNQEV)*NM^0!9
z_%7wZW5ZYdBrm2=b7mt9s%KmJY0GEEhqX7T_JO^%*GIM6{_Upz!KL+o@T9H3e%Jcn
z3P04?=3d~{TrV!jF4ec<Wx?B#x1qCeXYLjaEL_hn^3Zu6VFG%>6Cx>82TT_EnL|Z>
zEc`b5V~x=ZpDnY%zr3ZhNv7$h8dHsIcc)PYp`i-bY3DPn2hGdXodIHBZsCU`Of+#P
zH^tP^WXKxZ_32EgHp(~{TH$1lGS&i^i<Fz=2DEa}_4@WbVz^lzEkz%)H12!Z>bErj
zacV>VolVD}EU_xEHcxtd%JW7<D_hH?SU)Fs3pJCi%!bt9)Ov&ei}jj9!ar=(-q=hq
zSv5|Fzrd#FnX#2<4?HeX8vjafQ_%BmHo1&PqacJ?mW9d6(jGof3l&tQEe_MrE7s`I
zSKJZK9dPLHsJ4f1QBwMgZhi<h(R^daw!B+~<eB1Jsrxs%H%Wg(``?%|ho;Yu>>}Uj
z|1mP*1(^$E7#Wf1_@H0ynndQYSR(#dqcd@RqA+%t^lDj0e!dPtD5}a235_FiuH@XG
zlRJ=yq}RXEn>uu*^do;?@)~%Vz~`%fN@ug-%^ulmNp@$69Z6!59UQI~Ms$Ku`xwcI
zJ}aPDWIcQ}O<Uke(Y=We=mV!jx<RQw=BfFyhfhX}JhVA~MM!@^mpT(Vxjn^8R7X)q
zc+xi0&NrHAqk3th^Jrsy)J6oqsD9`>s^2TEe}<`_!o|u%`koqom~PuT%e-E0+_BGP
z^tbmo%;97sT!mW=Y}d{vgbkvuEcHdi;?ZTP%Y<!J^p5VaR1q4pNMVJTj-$G_h>8kl
zBL+USCjw9hpdCXkR~qX$$F8{z_m~(0kwa<`zq{5j#1et7bqgz-ZTv)10Xv*qyGFjn
z)4=&cmig9(31k-h5af}a!h5D@x`B%Q`{zp~G3rP=PRruLBm8f4G85t$!869-(9r6}
ztw!x+rdm6K<v6kMx=#54u~Z7;pu6p_;hiQBzm?=;X`VI0t7Pz}{LE@KH<cmA|HdEu
zDI_17JvkenHQ9R%C;FmkJz6DRo?p10p=P$hoJ5{({%V7H`EoYB8P~*ywv{@D1tD4c
z+d|m|@W5;KIK6B)53jB#$@M0edHp8m%ke<Crji6afV2<r)$Q6%iltK4x?OTJW}{l0
z==N#j8q)>S#_k)4n|<#T5y>7KVPH@)N$6ks@vUr6xv`F57NA)iZ5O~?CrwGlx2IN{
z4)&iM_AczIe?QA{Bu}oDLa47(*lTGGCYiZy)8M1iZq}4PaGlNlC6n9i3Oh^gyPJH#
zML3LZN<@l`g-*T~Ivhr2!H$3ljx%+`2$qVYb>F(HJeL}ZGJ)3Q=Ixz7lID%z(NKlv
ztI?;b61i^Jaob95Je8%tn%Uk1f$^`|>+zm<u4}A53a^(z(9uz4=`k|T_Q=qF^y0*r
z-?fu%_PNd0;RXA0c#baBn0YkDv5m@Ee>cTaFKGQCvZJXI9cluynz@+gttp*|h+l|g
z>(vqbf`@XB66u$S|4t4|HlRo%fA=O{uxJf)iNu08_@9;AuYPSH8p#iIcm=<I>jm1J
zU+VKMDUl>qa((CtUcZB@&23=#7@c$X-;jByD)abxHq653j1;wD7Q9jOy)}i4Xr`RY
zg!B)#?`Hlpcy1LI^Q4m<PX920b(PiW+nTQO`BA1YuovD8-zMhLg{La^5tdoC$LX%Z
zu?zgY6T~HfT-ns;<l2^G?IyQlTR$eug)_;~WR-FM9VKa$y%GA5m20O6hxt(WzIKTb
zEOv0R&?Ym$AGJ#S8hant)fjrh9<h^~JarvoZX1Q0@_%ZlkB#xSW={!pAFbsRtPi<<
zn%BwRQjv4QyZbSI>>UDgF(JEl{OnpahXfxQ@e}!l?c{{<<N0CgcD-R8)IV!>)0jW0
zlJxS#{GH%1I}4BQ<Uoh_j**}p8~QcYu4fYCk2@3nafQpi2urX#3+K?_<ow<02u6w~
zt(ngU{~HA;w2Cg{E<OJ;UD~?Qk9V+&ZZhN{{%8HL1Oo3Bd<fX4Lpmff3+3Y$YmP0H
z9wlX*dkV2V>f$-J8917O5RA6ORHE4%g+Kt%X4Po1u^E7q&&k@jz}h|wY-~-<jj?}b
zK8dAf0225;GMD&<v}y!TejqbD3{$B$5In1yMZ~<6=<DdR^rVvco6)ZMquG-Fc-_IR
zEQv!qgqeGDUm|U#uLY4ci)E>wnD3&u5E=FaSBLrsQXvcmjnh`j%}mq<hUqH<&^K$_
zHszZOE4NV_VD?XM+0tW{zoKIRZ87=4Nj6eQ@Cwz)K6kMzXyTF<K{INp2u_)w4G|h-
z4ZbA<PDJmC{Pm*eWMNi}4h_SuAdl2C|E!lHdJd^rs~=0(EvA}Yf^PM{vt<ufbjLmM
zn_&@M(_a?C1GcRqR4-mh{vXclr8P~5gg+#vuC|19W(0}sX__bh?MDpQh8cfPMg5M5
zu1d@}ud!Qr<?q(EJ|J*%S_lMk(L=r$;nm%2;U(eTpnC{lCBYMj-;i$55fa|Q^^DnI
z)>CNcrf*o@gATn2-xOL;oZO#myEQb}mlXeZ-jK53(Cugr><63?{*K|dcRhJFa9Q?E
zpy0hD(T>7%gJip`#nQPE2+`8~Ypdmo*VS|b$)F$}1%QZvIv3tx7I(h}_boSA{=&e}
z6;ys5h40_Pl8AEmsGQl}_1=F3w#Xf!cfm?w98IF*GBhu*=_;`y>A}-7m*2y7+;7Cf
zpy7XyG6yUC?>~$wb4lh|^5f{dXWN4Yx4AbN7`K_rp~{@x4OGirZGyY$njC7eG&P8;
z^hCL`Um(?<ypCkCe+9-6bzmJO^Z60{?aWA3i4{)oF*^Rq&cgl_%NrjjZkW9C-^zKP
z#1Gf^vKU`9gOSCbaWenlL&AHRJh>-G%4d{^x)+V%gY5X6(Z3<FysVPd+uFq0P2T!O
zE|fvLnS|nyXia=o{kXnZdp^@ndASxkx&5h+5D64@uHHbZY6JPHuW9rXVO4Lasxqqj
z`ZrYMR8<sK!PTjPOj#<4qFV{)Eu%i?YAt%eORporB@n5)Vi&R8$9n61Q}y1qwWsGi
z)4?qi%IDkp%h~L2TR?PXq_@O!Tjre^e`fY+uD#rneT<PsqAuAV(&kXSa~5mTVI6Mf
z#Ip2<-hHo7zI$IwKbrh)U$T=w^Fi^x%Wo)QeQ=f4CA!0<=nna&tK7ncubdz0h4R&C
z0NJ!mDpSy!Ha#FZ(_^ApnRk0)rEnwhkp2c=gLWeRBm4L=-g}Jq%2Sp#H8K@VR|PXk
zb_-260s3W0@A8}AKV3~`MT*OGD<A!@p8|0=-6mqsUw)I<)aH+3EctYs>^6U=8~LWT
z=0f>G#SY1;TWkyvZ^YiO>z8Nhk4k@-tlcKLFWkAE43ZE{i`*Mf5f<k6(%~kBmLB~?
zIIcn>mLIkN3qHrMKXzFIq5<WYU<mxWDRjvz$dc)L52*A0UKq^tCf&`O6vIMu^YrbQ
zkM^K@i^epy<xLr#<2QL2hSdeT3{sP~M~hbNui>X{%62YCKEs%D1rkGg4JN@97bo*m
zT|<<4aL{st_l(ntLCTVu<(f93X)vBr;3a^fc>&ceJSeTrYr4&U7T&omMy{~kX`bN>
z{=~5PtUdiu>R+r=cr|>EI<*8&Ywh5s=WxR_R}U-mCNDw&<^-dRpU7|q;};pZ1^Ii9
zHD{!Zi+0#3MP^<<tjym$#(vT@$a!0I{kqJy^PJqf;7{iAMg5!w|KQ2Z7X+hxqP)<u
z#+(-ER4Qkn@X23XC^rX2oGb4oku!eggx@(f-!ar|PmH`8{G89~x0e@V34UgV0bUY%
zCezJ}YcEX|Ul{hX2#e4<N)CzN$?XGNgBJc+IwQZ8Q%DoJc3Bz29chMFsEKElm;ETq
zy2KK^)d?1W>%6nu{OgDfnZRN#X7dIaEh`X1)T}q=&u%jZI*+3Zfi8V1vI1Q8g_exW
z+J{Cz5quRQ>&%F;$29A9y2HuWtiL*O3*VpC_izd<B9c(%Czpnpw+{dc6xNnb<i5=>
zg7hR>f`uzCxMy&;FG|sx>i-e-=dY30(P_{r=AFGr$J2DORBgB#@C#2H{iA6SLo-Cv
zbPxCY2{9wZqiLDHaf8u2Vx7YfPQo9_GSrUTicsx13S}uI0+`4>EFJ}J6c26%)Dm}m
zG+!xMB<>M;4Di28Y}bg;zQ(i6Ggx|i{1#q}F8mY0+`I6q;2A)j&sbeE)f`oEuzy%@
z6`Y9l_p`O6R~Uqd>W<k|u2`o!)xYTh6zQXQ>CEVC2LO36(gm9)Z0YI#oqyDPYcV+b
zBdc>v41Yft{(id2rk}*S#k-=t*?8#9|6n!aFY)!qYDGe`hriS#M#X6mhAFxTJKeXq
z{Nk%?tb#_ppjW$C1#cD9`DgB_Ua9<<n|S5S@WmBPg$uD*zun)QRu<slGkAA}+hI=j
zJu>2g7MiO!-!F4@ld)FMLu||3oxgmFi^;o0o)PflXxXa|>9tocr(n@ueIqZX80KLX
zitMM^NxjzAuHj|(F4kUeYA?0N?WX>(mexPk)?e@LQvb0wJ+xLI##?Bu-slh3r*M1E
zx_*ytPjpSJVDud0$q0g-nLp~y`bCd#)pOf}rvR}sCnu|Z+k<~r8h6#17byTl$F|qU
zYeaAD$5|w0UyPR8P&yvD4eCpY5P$n{7^p0E^B)s7lvn|npRlDAs-IS)G&z;vn&G6%
zC7AOYg>d({aBa0ZpDbA8u;0Lu4)x~S3{6Yt+{N$%AwsYjj)0YBx|_Ll3RTYChaTLw
zh_X_5mjBIag$Z)AaZ{sa-NOCVGwEDt^<Jj{Mt;jfP+QidcV=!QS4{rBgiR>j8qpbw
z5_~cEw)_2&`F}0hAK8De5aZY%5mH3@LWB=hz4+Elxgx%e;>FnbiU<+fPY(@iHyC&C
zp2gZN$`$vUcT<0GZ%O@6@nUR>yVn0`_#wo&`*|(yk6f>BefCEPuY?MCX-kB6Nvu&i
zfbC>o0d){Y+TyrIOY_hGr~M82CF@K_?oUi#V}ACri6|!Ad9u+k?d?oLGJoU=CvzaT
zaF?<5%gS2OyZ$ko68=C8;x79GVrPU>(0+u1PxT*PmGtha7XQRnTW%bb**y@e&_A&n
z*(LRlN39q1PsuWAM$h%VSu}tsS<EYXZV8_`WOILYD=(^}DokXPVu~Ks!5SVS6Xa0(
z(;6k>1teTO=ry==)>IMOVz&hFqq|}-rLp?0S1rpxWBohX#b5Kv86V27jDb<5kG|hx
zx~^Yr%FnH68Z&oj`V63oEX6oeL*7Pj6Yieqm8#~7#@bEX1UCVftFd*_zQziS(#?5?
zJq@#Q`XJ<KHZ`8(VX`-<$@@;YsgWR~={B1ho&LvZLp&ESz=XFT+SAa$6N?rsrsE<c
z+D&-pVvpG`=^eYO?IAP45bSG*iaD_p1zDyj5|O3<Fx`YCl_vCp9>s1Gs!J%xS=GID
z7WxS7w#`Rao?JEu`&;PAEc-tm@|XjnSX;km3>G!nHqiuH=Kb<tP@}WenrQ8XX!5b%
zOlmC5M83S+zm(sx8F~WxZwiM4d{k}m8z{~i*=}fF%1cy9bLK<#G(X)&d>bSAFShLn
z=afZwX!lfXJJJVtSATtJ{Rf8itMIP%JK;Bxfo<_Wf5s=bgtD?vA^rtD!$0qWPa2xj
zHeV|af|iWOS4mKe-hiog1T`_q_<%uB9M56fFiHWiIyu1(Ox_%c0qWw`8bk?ywDdXc
zv4LfVDEFK(W;hhu4z?zX1a0ZoSpKfE#0vFje5NU$1u*^N@&6klwG_5HBJ~ek2gWh*
zxSu}rBuh8x_leuU*3Al$jJLY>NhnCm-Zjp|RfVyb_U(q?{6|F(9kLYRyl$+xa(X_B
zXWi$_ZY>6TyB|1^tk%+r%ZtB^oe9uSq+@s}knBr8c2AJ7=;D2{ce0CL?Q4d|P1{OR
zkCTpTQe7nGGT<aKYS(X(5_CopL9H}n7(+i5<NZ2)i|Fn$nlI8_(*veUN)x7vRG>Xh
zun1EY4kOhd^l$In9pQ{awX!m<0gS3fpXy65(<xP?mr1-t^iq^TA-$YztKXGgiq$s?
zV?SGeMQQ!rci8%cPrKH?F8tO@FHe(_C(cOFh)9Yc(^d+ZBjB-2mePQTw2z2P_(d_H
zl_Hh!;3_3Q{#e-|l6j7_5*RU=pH%78TJEmj^<>fSCVm02!lkC+_>`^!;|Q9KNF!aL
zQ$HCfWl40Vos9}<Lp#cix&=R+QC-O*X>#G)kIU$vC6n}D%-o=4_I+MhK!nQhJGV1V
zs|%lp%|+)qj4u2Zib)^(MSnPC7k&74$`<vLt9UU*<>#3Bq^J*PO#?<b3Fx400Nq3l
zl=6q&)ZbiM|0r8O`f%U+t8IFyo$Sk-(N5%YvHdpIRPhg-?0U2aDaOH8=ooG_y{Hpn
zSSj~!?qDXzAImI9P~Q(VN_vJSHw5^9ND3Vvtp4HuYNbXz{1&cnG$g!Ej1A%v5{a>0
z`~L?EqrLy8X85l@XKohDe&6}uD%S7eU~f+%4o6!vqT&91%gW5zw21sI!T<SBB?NzM
zBq=9=cFo*&Ss1mdyWA*-+AKh{;e#>H2ua7NZT=4^F8);!I#qW0Nm3@qKTPA8x*1nL
zJZK2<J<+ye>HgYCPX4c3srXDQ@BVQ&t-L{^M%PRI&ypgF7QGyXpbUQXQDk2+?3IlU
zf~36-7nbmYr9z=7F$aJyWlr`vejXmlW8xA0b>kORI9DElanJCPP`|s~YH0hDEQtzB
z!0WMna_yStxbIx~<lf?F2R7IGlVi_Mj=kbs*^0bvCQ@}0^={KG9BYiXJ6B#$^*ZW{
z%ik6GWX;a`+s)C!>sILj4t-rm)syK9kwwYcS2^oBG?Dp~aBnhf#phL|liEKV(U@--
z`Us4?EZ<O`1f5<{m%WD!Gvf6Fy%rir?`$S80!Q3KC6<1iS-I$1BVB@D{u{C?%!@TE
znDW=*R74C<*1kfC=GbGBWGLXcUz~}SFun#I5fpN=x^Pej6{~bmk;7LD9wY&js4=?Q
zX9SmaaU`jH`XkM)D#(++SN}KC5L9!rvzRL^IsP7hz{+tUFJ}M7Y%4uuEIdeXv#(e?
zMJh9I0KVvo@xrYzHM%h(7{RD|>wj1vN*F)|UsBh{%tIj`sKE+~$$UelneE^KKEm4I
zh4sN#jWw^0l6s#K1Zbuh4eEnBeEDQO2)ekO!7RIipAsg}EbxMAo|X-0C~GSvIqg<e
z_{Y;bkqvJ5eU#L-DVKOw2y@F=8`a*ZL$qIaC=G||>GoT|b8n+nPyeBpP{%Fu)F&Ig
z^`dXv*b`(48|x!^*QO?wHfH6^Zrbxo+nW)#XT@*G!~3@P)v&!1S|l<X05U@#6MhY@
zBt^V>QlW8=ohwjW7}PoiBL-*0utkk6{#AD|4NI@8&XVFRy}x>~`L*)eS$b{tmAvb!
zvw6z2z`UfYFNs_#^reQA5sS<RJQbWJCJr&ljU-=1vivOSbjmk-0OEzvI^gu)aN3ZB
z2zc6)8iWwgcC^kW%rhylwQCJ&C8<WZtm|HCdQys?Pm@U;=9NlfBlX>bv4B-eqswYi
zN&(&*VvJWARweJxIPoCIkSSCJJaag-A&bHOYsf3nOC<mry|(SawG=NSy1w0LBhr69
zBYxLqjEeeZxBaa}koxW+DP|5acfyNshLhnfcQfot9i2A~Ke`&{%Hvr_X#{vF<WAz*
z3_{=LIk~%s%323}s`<d#YdXHhja#oOC))r&3wtd;;7b_)JIOJ(+(5J3!D!aG4=(0K
z=ve80<z}$8E29Mc<53y)PkRu#7bW4aA5LqG-(}#()*qpDpzS*P(nu6My;(;&9IG^N
zC###z)GY;n;$G^W;4c0Y^`*|t&E$&NC5<^}CM*ke0-cD(k&=}<EhuP14LDcjkGMnJ
zz~Yz!G$0)Gy)g3ycNxx<`ggLzf?PR{mR5|Se!JT5t;T;5xe(T%zFAKx0!*+H0OvwC
z#~3)K-2$~`@VnOPjwauY1~)AqkCaLO8G0sc_^vL+LxMa)GxIM!R`EW1JL=@_faR@V
zVm{lilPDkn<nJ;q`j@Mp<Bv6kZD<fXRt8)jv`QYxPpXZ0H1g_($e^K+7$W=?Qm>~i
zWvB_MMrp$TQlu9;XQzM>;LfeepRMi1c%WPtKTA`rM2r98SrP<8z&kO6DQ*F|mARd=
zu}Bk_ZeB%#l<UjF-&XzVLyLK!OKm)Kf5FI)5LaEoj#aT;A-RQn#}qD76iCgx>=L*@
z31d&V9g$X+t|PrQ(O(O)T^C}5baYDfBiC%eiX?y+5UY$RV?DE)7sBxOq-xlp8FO02
z>?-Uf?$nPGHq)`2<EK_R*`bV5qY`#C1CG`Nz^js(fBTK{uLF3?03Jn=a)hCfr?!bc
zYvPPIlNmI<yvD!gtD6mq>|^R-Y3atBI2~Ocz7jIFN#~!DZYKKnMt{ezt$O(;Nvd>Y
zyopG@FX&Cv-J&SEQ#c1mY_O&&cx`fTJUofTMxlj<Qm48c_?zw)M!pCT7&v+I<s&|;
zEY9>3zmcfo1W{30JVYtcLI4eein^Mns~(+lo*qAYhLbs343MKN^{;N`j59PklYO7Z
zO<S5J|L^yy*2||*V5X*Qf9dXv`0hV<qrTV|^VMsb;+;K1U6?NPFb%mK>p72WGj$)$
zs5Esmg&xx@<gt4;31?4ny`jc0X}bJ5Rk@S>BWzKJ-574Ndb&OSl0O#ah>TL}A7jsz
z7}864fNQ3kKc|x5;$4Xf5<$@fr~<ZgoNa9?YmUL(Z_ZyyxR^>lHI=AC)Ff6Z#Rr75
zl_n}U5Ln^Yo-6&w9GH#1;O8`&36}|7caN^~bJmiWeaeSHR`4g}ixDR*az^}!_Wwf(
z`zuWE!}QQ;hrpOhn4bUst%lW!feisT{5U!7)D*cG57!#DH|@XObm8QdP(UFWjM3Dm
z1LAU1-ZRX~e}xu8F6Wr@qb0n}zsNQ(je+LHUDGq%%tMB~=?ZQJe?wHBP)seMrePX7
z+Ll!z&a+sCA6~_=`+GdrfQsooqhV%`9%N{?f%4q9{jR`<ncOoDjU5CCz4~lzui<8k
zKc<93g@4kogcUpm%h~*hY<1bQV6b9!)2Sm-nBbq}<1Rh-e6gE(R9-aW{FoI(WBx{y
z$RXNvoY+k|;PBEtI;xMu6@dcQx!&Xc*<{qvf5Wc<9jl1!VMc0f^q2h->s{s!IvwM%
zskJ@?AHQQH0n20sH8~9w;ZfG17x)k??GE+tQeAd{{{w1*!usg2#E=NXNyzlD8+|fP
zp`!jeQZJv;Uq#3R{7PGUAEouP@#{XLAHRA-N&OG$h5GyItG51o!f(<eY|3v*k!`Ob
z_`!!95@FLzQ`>jUmyjnMvre7Xkpnh3MoVU$Iwg#kjSIND^M_xdY{>mK`k&{e@43@M
zY}FdDs#c$=x<0CUkk%t&m!CP$`YtyV7wdh3m%jCOk)lC_17(ATrAe^&+aMh)WA5k%
zaqkmP5$dk<N8HR;A|t~j?h%q0^>HJ}BY990>Wzd4qSi?F3zf(0l}527S0X;KV)md&
z+5#`1noxBW(<r-EOR`25$hi)lIx}~vmEa+%8}P9z5l9`2)ry^3Sk_4PyLNs){Y4S>
z5z+vluY?A~-PsPGqD0X)c{eXnxm|6Cx7ez8LAL*?>K~R?eO6et#j|iPIW&8^;kRBq
zJKm&>uhE`^{D=`ig0x2OM!QJ2kpLOssEH8oH0MQ8SjfYv0x#3XR}(=w@sLn7_$~y>
zIe~LnkWy(~oP|fD_nvd@s)nkUo!moAiy~Y;h6Z7kD{-5@;3Q)9;W3gTaZfX$nSaZ(
z^pnC^qCD<_pGAe2Ku6k<{-^{SvP&pxW;0v|<W8V{cMMA@uKds=Gp+$hUTWB>p$Yb{
z<odA}U(FiiAP}r{4I*Y5q0wbjA1vn2VvU|dB<)%+b@`uOi>FZUx+SA9=OK<o%a_wB
z74bA~l-5<Bb#c~SPIf;46@IZW5Vx+w{v%m)4B|4Wvjs$_;z&u0le_SJ`Y?iI(61r*
zI&YH-!>WvxAX@xQL(Z55S(@HmYfLWAl55TGVA6&WtjuhV1vkP=7)C4gUgl&A^qG(<
z9q;rrW0Up}_6nt=HRcVi3BGP9VU9UR&k>SOQzP0Qyb~y*cD%|bj$J5b-7`E=#Ek{-
zE58N)3JfJi)7~}!CG9G+Y>i(PD%^@47q(RdiwP)K0*{2ZGw3FtG>%O)$?~`{m_)72
z=qtPj?;D#3dT-hMd39wCbZX(f>!9cP^ZIdsf8if^j^tXdj-w&LTm(pQJ%*8NO6VOR
zQH6pM8F9zA`s?nrg8w_zAx5+g%{TZiqR1TZe3A8eFY>lyg^qA`BB%q-s_U}z8<Tgq
znjJ^agCo^_fGecGlMG@oEoLc;bFTz*mEkenv&_cmI!39fX-#++4{i1a*)5(!F-aSZ
znX?Ly`!BXKN+5C-dD&bw%ZYLu+=3e`?f%Z9oLH(1jo~(_>y1Je2$vkLlU3ww`%Zr<
z^YHxYjzs+2q3J?&fNj~+QhF5)N9Wh3D6r3S+NoOYOza@Aj~lw*zl?<(4R?xq0=Bkl
zDLk4&eGe^7@q3ciQZ@xMng7?HVOJYQE{+?wGU03}U->K>V>7B-&Bhq+{_Ifcwf23x
zHFnv6GJ;85#%Z~J{<mq;+n`hAT(to%i-!ILX3Oom1r6{{o|8z@mSA5-DIMh)O2D`T
z6Z90^32)#j_z4&yvr3H?7Ar6b$-Ls^Zs#eu)7p$0f=jnCf6)pt`#Q7PhmH+LFtTYH
zkh$`^R2gxDnR<?QIN9&;5WHPt#{<3Eex*sAXcn34!7}!8(DsReh?nqH&nltzIcLc=
zx0oJZW%l|Pu`>@N%`E^ILjvJ8ELLgFU7dik$4_1zF4nH5yjiTt#f)2rbg-z>|8uz5
z`XOIKp3a$qin4Tg!ZhD6nV;F3^zLgDa9T_*Nd_Z>vm!mzJghiD3qvt%^gzSaY@X3?
z2j9aqiG4;(Bd{PxtQoVYo2gaYJg;e{S<{`ta_$VR_0IB|&SF_Nk7ZrzbggFQHHXVt
zQ-eF^I`zZJo<Jikvdm`FaE)Z9Kl|!|I_GK^R+H!9H>j-o$7%*gQvhTr!6Rjnxf+G0
z%d59Mh8Ovd8OOBwlgr8~g4sOMqznS_Yh(;@vcIFTh|W{^>zr0$Wt^N^zr{3`%Ar?4
z5p>`{^Bk2)zwYe_*2-jo{u!}|(fCL+9dP^L^W+ulZ*lFp>!4Xw0owY%`za(b0en5B
zko=;bjDOzAJ@qd#FH5vcsyg$#->GuH%$jS(xEU8uy{PKgW85#FUg-{A1LBjZGxK|T
z&l!2*p;3)?-UDvT<U9bxxY;mN;77C5{dqJPtRo4hSBVcIUSx-x*K3~9E8zPg-S<`n
zWBD;sq9_4(7NENs2&7lvDpEltH3taC&!dRsU9a@d_7nNQ<i;4^)YOOwP)_zzF$sx+
z;5ySoMF1yYYb|Qpb55bGWFpd>8zUc(ooB>5$Ew)tXmx9!Box7P=c=y?LrnZo>+IEB
z%dn59(r5y{&NCChjam8f9g4g@Io8q|e|FZUs5j|7OuU_7gjEny(nfM=rmb|oeXW{|
z#)I||T+Y{o_vqyOezN9n0(PU<hJ=_{CUP`?x`%P2C(L}4oJO1D&vQ13y&%pIt<BHn
za?p>`gWNHvwK|Qfv<!ct5%2eB(=R0Bb6aOW)BU(ccUeLL!;V)&tbI<lFR3?-GId%w
z!rZ|$7!8I9kp`dwZ4!j)!>`0E<pB$CG1CvE&P2W70Ld5mDOQn-ktfJePh)&-`r*!u
zRDf6@civsA%f1za>|m&Ate0h63~B~vNW)jCLJ{sAzn2m$Yl#QpdxpY;Z&1uHJ9h{Q
zk|`Tp0UALpg7SW*^rOM}F3|P~{Yk9mPmDjDW8o&Bpo2smY1wXm9}oU&KLx9H`CSpd
z4}F62ZQ;vUUR2l(f3FMEKkg(`OZcM9HeQyApVaLATd}CU=e@NYjH!p$n0tJX<kg&z
ziK1xTRb9iEr1yB{lb&?{{JAwE#RJhBL{eNmvPEI4-KswKP2*2R?$m(s`NjvxSKiS~
zD1W#A%!*`ubNbEVp{WrG#l}yKmY%CdO57#y#vqKVq&n62LKm|xH1U1vnMgUSv_Ulb
zr)L>X^iQ_l7M}GxCH$SqumAg-Sk@6xWw{*eRSieS3IksFmI6^K;?%SzhL65tW2@Au
zE)#!|+;CzA6Ec6R{93N@mi?<zSsDRFweDx(%=C5H>c5i2*=fWFW;WCq3QH1<&|QZT
z;(xwqI~2#zu?q;cD4hg=c|v2Akwc*4oE~*I<uA(tKP(*pLELo&0S>AFD1y*LGpzA{
zcA8~wHTlI-qnssei}_iUt*(+D0bp;Sb<}DT;*U<$DD9@OM-A-L>UJX&7l2j>;j&zc
zTN%`xpTCF)w?B(cayyHpDr)8$y-(>7c#qHbwT4{?@S9YMf1(bzr==zwp3W5+Ji%Ds
zZN6vP>jaCsV$00Fj_($(G8t57gXvwDzwiBGOkLV}&ptL>t9Toq(g4Drez_Uu{nRSf
z|Ac9&Nyc*ZjjQ{@E(kreTvZRX{{38Z2%x0X3`-V1O4Wy@<OW<?s(45eBZyiurj-X4
znuYYXC@;UDvtlRLVQq*)a$s*bB|q|H#Uo|^k^37=*&k6B?cDA^UZ5BCks692IiAFl
zTW2#TZ9{9qhF05#&fKM;-u>C#v^Ti4y$=@H_EgdC+WSZNeVH0G-F=djj}y+t=$IyG
zO@p(qaEX;uC09+ou*y(HO>lr1@*z6k9q4+L$lvDw3dxJ89=zNIl3xi;V60z1W1otv
zi_!k=$gsbHU(pmE#%rjwRqq13UGH!BO#QFsO6q?|FU*hNwQK$Ngx`8$^;=SO{(<{n
zGCzPzup2IeP3|xVJdv4!Mas#3K{XW~GEB-p(nY*%Mdys*1*KPWfgLL%i?`@=R{~j)
z-)HdqCL<zY#acAWgTh(*Q1#DMeJIV{{5?1Dnr{;&pnA_^`H_-^UGyF821AmB5O%VP
z{|c?jl8hapXDV8kwsALQ*2mx}_o+no2Q)G*^KQem&`R%Q?<EiVr=}0-e}Y(ynTo=(
zYpfkFUzs^^zcd#GUQ#(|4%c~{Q86uZBF5B1MN64>_ER>cUxS;rP(xYpSD30PCl>%%
z!+>MIb^u%(h=PkDCF+xWsiSw9rz8>l$}DpgLH79xK=wCibfG;__4!Br$gqsu0<wo3
zO{dL-PX7y*R>wp<VzSGfr<BuZjaG{3|Ao_-W1_)NS$dSL=l>u1>YWgmFd>+Wx-^aZ
zoU(?GGew#?1%G>$9UoSasi}l2oX4qvxX=V)BoxlKR7i+V1<bOA6~;144W<5PTo^L{
z#26u?oZM(-V%i2e3l1~+&!}j-q+i0xjo_{AlKxE?qj-ui<N=y@vd7Svvt(R3lN<w^
zgf`liOHJjMK5EU%ZRG<LTw$If*eoWY``BLo#boxZ3I4$#?Y!Z<o~>5Zcq!P;Al_9=
z|CKfTmGPm)@51iu7WQnPDp{^AB@Y{~bn&hRI!Ff^Dui8FCsK#IdDa-unj?DQ=2Ht!
zSq7hmgz~`@MF>w>S*KFSxNWM1f3D|pF%sMQ)I357i`?q22IH0JkF%ZlI|!>zOjjp%
zX}?7Nwjc$~uu=$iu;104cMC3tn()luLlw|16Wju8q*3fOh3bdd3`3Cf=zqxeL@2g~
zt7v4ShR!8Fob1@4O2ugifT&O5NQ*Mfq+u;KoV`WE>ujjuR)K~Qc-t=qXfUjcs5$B_
zh6#M6c{3C1<Zi?rNHj0%l@+#)Ua{7~8w2lYeJ}~e>PinDGOs;rq9@T@rAh)~{pz32
zZ|}=-G9AVS3Uw0wzo1PqM3aYeO!(rdikT{^QQoRvP{)X<4tcuYZ(gJQL{3(S$%uNR
zTK`0?)*bt0nUkefWzBYk*r%!@NaWLd4lnD}$8eKI=Tm=r5Ofq*yM-@l#Z(v<%O8sw
zY*lWHj;PLzp>t_*19h1h)?!B(D^Hmg|03EVaL27C3(E+AjzuhMRiAK|k|TGIttWU#
z);Jpb^Ooq?-Bo5kL*tT`B<1xX(_4S}Q9A4YkgdUp?ES7lrbez&_lIM$;4{bo%Gt64
z?#$28HHsa|Y>idTTQIlz)hB9EZ*%GE0DskwfdeT9GA94IJ4bKHyt&ig7FS*iel4^I
z;{><U|9OT>g~@LwnEWBmF+@ot9T*-9qf(A}yi1Qx$z60u_Ys!zOPuCQ9<koZrjGYW
z_CE%<_h^jA(gDXrvm5kY81^`zrrL5$@S#FkIBwctFp6mrw=pi5Ad8@=e?UZwpO&6V
z^+l-~FMMJU^w$dBM9DU$$V<2ZDMOKjC|cZ7F0Hn3T-n|s9!E8(+!1OIAV>s%rt;N7
z^#5JuZ&mE3@{^sVmTW_gVdoycTc=@(59~6U*?k*~ir<Ej>Cc825lu^Qa&mJRH;gd_
z`&HLDAaB!nU&?FjHaJC<nb2(YbhQSVwHj7%p<xA<_In3s7*ea7UnbVvo6IDr92D3_
zt**C7pL@B_XehnNeX<`3b;;UFo+Jo(gQ|i}mZ5HmA80Z~@v?5*rEd_0K><tahA7bs
zVAa+fk%SI4I0X=@^Y2}<oy}r-E>X3TbM0#EHlCbZIf6wj$u!~QzEmZ-W?S|WQ^Wy3
zIYh3*m1I3kEvuQr4_RG@T?o5JHH=ctjiWiy;~gQ~RWs1wlau=!brnn69+O^lY6$CM
znO5e1@_?;oYDqQaVKrH*VJreqp=FboNX_4|si!|15Mxw76IQ37@U!XUk6=r<{rw->
z-aWpm;_ClDfdmeSo}i%7qDGrmcti~rY$9IHAqm;RV1t5CuW3~p>kT1+C@PVYQ?t8!
zDz&ECKDFg}tbKf}R$JvF8VMi?+SZ~~q_qlKFMAs=sO91{zxQWmpGzq1)9)WYUN3TH
z&vnh3HEY(aS+hnJKE-V-^;;iIP*@gci;o#??&EF5$?vy+>8-g;>clBu6u|85g>^U4
zU<l!O6RB1xQtc(09q*dl+)=kQ0P1(WVDZbtuH1o1lWbAT>nGb}F6SSi`t8VjGn$hh
z$70`EXyUGIsB=G=n>>9mCs0JhR@DwlKls6qktdR$^Sb8@;*J|JR|!iB-JW%C4AD{0
zWMWaTE*OF}3zo%h!kN3fXHYzrI+}!d+Z)h!389+Us`H|W^a9*W{nXF_?<y_rXE{hD
zKLLQ93hmkui>3M$iml>d^F^%XT8v>nLZGm^nP0zoqIjkm#4sgYJ#u(b286$+aBS7Q
zLJ2&p$s6C*LzQ<Bi@ZEU3)&`AQ+TTji%$@tN}Ylo;KFP;zD;g#hO=w^&{*oYLmBQV
zJ4A~&A4S;l61Ze6t^5ELp$-%kmA+<d1~gPU*z{S7chc7uv!Bj35KaUx%lE{`aGIKc
zoy@=@=$cEaU5ATi4GvEtQF>k+5-M>|^yXE&^9#Lsjypf<#p_wy&%bL=zdHqOJxnlO
zqAPo;l}7{XY)aHtm>0Ke%iLmbcD373=*_0es5iUbZ5YwEWDMfvtyq#%b!mn=nN9bo
z=dfy^lyNj5+8A(KosRFQOBY6`rDqltXK1*sf;suFnZB$gygK$SCM!jk3>!@?MR!(x
zfd!EH^dNj=$1BhB3=*uGu+&M*`SoTr3OQ{Ajb^&#XkjmmV1A2&x0>N$RS$<HM5f;`
zeka=7Fg+Zz5Zt6+tjhtW7mpcAsmFB=6{s)%Arut&reic#uGU$sI!r^ER*d{&^4I={
z@;_$sKYo%ju@p-7@lXA#cBNs;`C-Z>O8KHmv2}qEL^@*CYjFz`(HKS)6Oo~<XAs3Q
zw6)QQWrns=yW+9V-pUX7+Y>L{9q+KPVmNE^%!5QSz2RNrQ0ft0#gapUGo1xJirSmn
zL}?SAbsNh5FLHZl`9F|bUuhn>y;$vD^e@Qmi!5DY>zan*znk=%0UfZrO+52E1l_;0
zT+=%2n}(A@>VTnHL!Yb}is1d09wuJcKQr=c+0gZ;8$R_44>s)Y8_$2(zk4&*mF2wD
zQ^e-D5<UnsU~LW<0&V(NQj?yGZ)Hs^Wq2a7n)P@%Z56zPH+R@9W;Ym1$=W{nK&OA<
zmWtnpl#^crQ*aM<Eu!Wf@ZexGIi=^Eqbw4hwZ4dFv5<{^;ye)&EFjcyoGhY9L;+l0
zAl(E&{tbXcYkO2IU#P+LC^fw553J!?vJa@CWh_`LMhD=}(w53Nt<RIX8Xq4^#r_wX
zC6-!QqxtAOd4eY@;RjHc(t6t@N9dov*&B76ybme@(DL$@lULFDXPz!TnIjWMvO&YT
zgGi+On0DP#YO-9=V^+5(_27`*Skj`=)v$u*X%&Z3i;$61A<kd0FU42gUYfmq=<_Nm
znAIPS(FgTv#P+4n8(~}7OtP|V;#a~+Oy^_g4^UQGse2#oJvl$Gz5DbLR+MWmc$7n@
z&~8gAo!(gLAx;)E8~<RX>Af^C_kBxB3LJ1}^jj?lK)X_#!`<)T_-3D)u9fD@>|bhf
zsYQ|l6j>8FbXW3?Pm?{-;EPl!%8gQemXsAJSA)R`Mr~76aVGSY9{v6t2$J;xY6&xB
zi)8DNkYXM?_wTxfv(Cd!1rVvb3H`(N>7rAk<=tY5ukUFIevN1}<OC*L3js5!at*0o
za{U3lhXmI)fyck#X(ptIO%t72s-K7^crY%^>Ck8WgQ}ZhLPCMY_i(JCHR};v4llMr
zZcF~}Xd65LQvn#UGF%jE|56zIW~^OixQe}iO*S{*RB3Y02+SEJLadGy6h^`akk^o^
zMMcd|*yVqDsa;m|X}3u~)|Om*<YlVI?)l(_vU085($bu{g1_~FoPmZFjQ6(D(ALcO
z7d}y%@QnPfIm~?2&Jlf9s)X(u+mquJFf$xvD3x#nLA7hWx&5aU#<D53w|HT|!kOb<
z8?_vU>C1i);lb!k_$5c1a?lA?D5K`vY)oda>5k~hR3~O)Yd}mk+=pK!s%S7bpQDO0
z8id1$YG=^(tA9vI3qLuC2GM}1s7a^Z(Zm?nZtUW$=d}Mc`z;u<wkb%{h-1elO0|wg
zsY`UTj9;t3)pA;+P1`N7aVCqtnR0Kzx7B!g*f=R>Nr<I%iAQVR9i$-e3Eiqy%U@i-
zmCwvSOa$T-aGhln`eSHh0d`!Wh)&~b0%C2hr<Nua;aBbG+DLhwx5iYLde(_mV|%0P
zBS??n9-Rn1)GMDTf82E~rwUV!f9v9pke*CrEHy?#D-bQC32jLlrgLKpF5P7F{^<TN
zuLjzv`7r-BK+h|Qb;{9#>16Za+M}p9b(IMcx`%O^u`)3})OQQ{f>(oj2%w=s4=DpB
zAYlQ+q%@dB*Xn47b_lI`^Ex+tv^A9V_+irNKV75}`$;_w;tg8BlOGi{kJ1P2MsE73
zARcLprH+u!0fyN|9AnmsJ%V7<CzVoDa4At?>r%U#9eHpW>%BVIs6H?*Ccn4??(r!Y
zMo2kl>w@A%Gj~uecN3Byvt7Dcf(AFkES{}t9?&<tQ%Zu9SVJ;ktBT?fRpA<~15Fmw
zy;)r_1t~`u9jI@5_?W%*O=n$!+eHw8$)$m?B&_~6FQa#AGi9=Rr&#+!RW04q!Pg9n
z1Wo#)mvi>+{<X+anLZo*MT2i^fdQxkBzak!LRICN?&0}xA3eDYU3XGPlqbXNPBlZ-
z{ywuNSE@Hl3Bf7mu!eI3X8b%sl%BMGl(bUs*;%f*Y<I;t&BN_q1}*@}Xk7}Vy#Frd
zkeM-tD0I=OAeOwI*x1VNmHmZJ5!N86iO1QipX&IYA&1~RGH5b1SR>dHCV|L=4d>Tk
zntWN()g+>JL)3}Y%8=~?h96?D>5vfsSEFHK)7@A4Hye)B{-`-B&JsO7d%-o;ndvs+
zS!PLdWWZDj-e4i4anqjldaE(B>_R$|?0`fqU-wo&D3}<ltSo4T>@ibD=lWJebvsPH
z-kZDC2mbZmyvYV4JvZN}P;BJQ%lYvu7g>$T9HUR%7lMu=g{^4@N8AK3s>Tc+9=717
z&ne|8K-{l>5Ny|AYY-o0+0XVszGusWdn7X`?dSiP_PtO_U<@NcH<-zi(%K?8L2$oT
zeb6KBkktply~V-+i8!GwJ#W1K_q%MT&R1(tiOIpU3kTVPssJ5^rh0vP^v(0W5b>s=
z0nlQVzHWSd`rHam1g4a_({OS*Z_n#In%%?yJ?NyTj7qpq##SC86Qo4)$w4(-%1Z7i
zsEIwWuG-yD{&B+HoS3j<-Mi5m>>#SXGI1%6&3dW}x-aW4YL7-y-zMDd#5%tuF=5lX
zAj~vkX~%4Ca(~kD3-R)D&jJRI$@JBoKMGJ{D;vJL%dTl`FaAh}LB&1vWSt+a!2I!E
znBau&>?9K2gN>Z6YR_$WVA}3xEtayfgxNO>6E!^Yto?g8;VJ16o!akIv)F4ERHy3(
zg&RLzP8B-MGUj{#Z4vz;r+Q|2s-J9=S)D}G)wH7u1VlH#JXDR=k`2RgQ_>SVVXtN&
z)qGt#KBg|+Tz+_L<;ij*Ds!uNM=LVvj+VFCg^n;g@q`<16k1G&baX&3{gX;1e-VnU
zbjDXWjj`0<%{iQNT!r(ESo;sK^U}e*v6-{}Lf1O9=zsqP2}8WgI+icp;VF7<u4Lh&
znlBw@9-a1`w8I<}UAR1(e#J&THvGPm?hwFE@02({Or$|7`d=#QPAer_Pi*8AJ#N#@
zFJjPx;<gSbGsCO7n>}hXHCs6{loEsIvBq9oLB0Na*IQXFvv#G6rlU+&TVJ9rfwD>B
zh?x!PqN8r#!=d37>$nz1Q$SS^xR_4o8}ZtO%>U|9c9(8eHB5QmycAh}ql~~MlhK;#
zT{=9RN>7^oKH?bD%+yQOS|E&QrU=H_WY?6wyNE<)Tf_j+eyu(cY0~yADl500YU0C%
z%Un&I9SU0#iC{BU1ZyuN*6m4{>srY-Vu^7dRJ&V5ksSh}V26}bs};ofcj*LGfw95T
zr_A!Ej#$X#YV0;E$PiOb3#>iOJMtt<#pQS7UgSzty?`x}TT@CCAmwefq~3hb25DR!
z&-Usp<_m<WY?)hr$?s4T!sCQ)ElKKCC|XIB5>cq-YE~#!B&o>%>o>B3jE)-`;2t4<
z^CXNT0VBT@63~FWh`G0|*FNR|Uc@e4Ph-v8pf_kiLK6b0Ok<?C+%sn$$?b!<y<Tu=
zcXIn+*@#b>8Efy?KtZk}O@n|#OF%>btK(MYvKA7?%PyqtKWEJi<xS}}p(ENrtc=<P
zkc=zHPcdOad}@e_Bis@-1}i~Di6hjoaHsYQBLE>s5~-a~DfLK-jI``W*=7X7tzcPY
zqeKROB1i5#U5jBOEJ(*6UZNCk(Xe}S24d+wGJ^3n$iM5N-!p@h1+@JddIU|~W)((Z
z-?YYf4$OIWDLL;ED8i6kfrT!-y!MvLO`(PtqyOp-4eg9FNhlbCiWbbk8%z#+ib_P#
zD6F0$BXl7ZldRn;XOyt_1S5EMmYN{M-j9(&GN=k(!$1?u&oP+ut}UiHe@&~HMz5^8
z#2U}LMyye6CcXdZckCfNrIa<U6wMWiicP#jOl`@fZM2W>AlC<^z*;g+I`4j!k(LWp
z^;XuL<O3!zCOTq^{(cu{>Stay0f3_C1pA5e0AxA!=Ex1)U;;A~O2<-8H0vbXKdLLB
zIT9R7SJpNW@^>v#AKJ^>_|W-qx@i1~mhp}FhGl#l4`1;_Y@B-d^~Ik9q0Nk<mZ)UB
z7+sWIBVr?&?nQS_IE>2*)StuR39JyoBE*BWV`;{mO)oLcvK*Aqu8N)6Xj^@nU$NUg
ztV>!6!WBV0{)%4MzrW&@-4@G;j}1EP5VsHZV*`>I+>A^qvM^h*9CDC2W2w6#Tb$+o
zk{?-2jS+NzHsX%u5)7u}KYoF+#5Sx$gAK9aB|*a00Hhk9C>g0!hZXsovtTVN^*>Eq
zM`F!{XES4xSUWp1v`u@{^58mjF~%aqpS=*<ecpFjhfwI^&?j9qYxZFf`XB4ug6VDo
zZ)EHYjsC#GZsY<@jBwer-wc^S1Zz&CN;F8Y(7ec#d6l!FPHNDBr5m)^+iSd<;1hP$
zx!05=x8tR-u6W$~L{DNouX6x3N&&lrPq+zO&dewcCYntlQ&^`Sr+vT<gaHwo*CcJ#
zp4v(ls5AziR5DE>J+(3psVy;PH=;1{ZNKBkRs?F&aD}oaR;)m7cqKkC&NKsgZCq`c
zqZ7K@ip7PPxLt(9^CoF~{Em@2z958KVXy&<5_@ox@3onOdOv!Q(!*Hg^UpCQEI5MO
z<Y)OBu6}6+F^vFGE3#F*qN3%fjDRKKsxNu16Uk>V-#}=TymULnU`UL+8o<GtL!X$q
zW*cMIf#5?-%={ta_A_o-HJ%xQ$BQGEM<D4J`FZ33$SC+b^{s6c%0^3TjdCKK;}g0i
z)Kp+P1oc2pryX}#WNiZ(HR*hrMI<CvZRD5P#k<`j3;bu%>`E`AS|A39mNPiqF}+Cn
z1D>(-_TBUCyv20CyP_vChQa2bz>ru%bGK)W=*=ACRzn>1?$;|+_3h2Wq(w~Kapwp9
z0_*{*5n4^jbW!vKeL~`fC5Qz$?u-g^95$B{>^~}y{hp*IEUg^(8hSM8;qUN>q&NET
z2r#(Uz+6!Y(mx8a?Kra}HnJ|>->^Iz?cK;;DsPJyvO+a#nVVB8+|2>{U;-2^#nx{a
zH8a>+U3DtbjJic(Gh7HBS~P<yDNn?Qg*3)ge3;ptneY>KX|E4AoMRl@1SxjSW{-ak
zwc9;@$|0!yG#&{qA%op?=+g{E&_JA|-`+$c3kEYL!TD$%XM>5RU=nv)@)!(cX1U84
z%1Hb2fVy-%B(pYN1fjf*nwck)-1U?(+@_S_-Hmk4&@<Ln22MLLkSQSY1&!9Y^X#C%
zGPie18T9W?D`$*&MDnb7D5=ND!Dj=}Pt?0V(In0Y?1r=R(Zv7O*vO@tN&OAo!O2>i
z%xpgwh}6sn=StjPFXA*!^Hc7u77{EXrc|sZ+(vZV<Z%G}_%B${w5@0~O#wo7PoYWL
zvs8Zp$80HnWZKAWDf$~$2M-E2W69%ho(FDN=GU#2*esY%BfmS(*o~f*Y00cu&<*oO
zB)?Gv{v%4F@qhD3GWEu*ZQ)@Q7Cw1(a#~|gd@4D9tG-aENAVvy>F;i$U1P_^vZ}Zz
z)#}!-gNgKaHI)?iikTa%A@R5{L2>3sLnB6Y#mom4ct8c*Wntya--dalmZ~t@>?^nv
z*uWHzGi+BEebOf-(K4Z)AH&#S2HN&WkR_MXKRPx;6EfUl<xd+(Toa9qnk{BcUc{Za
z4Dlj2>AuTaQL?}EYOy5VYbja{_n82Zb_<|QcBrmv5a0&`xb0%PquW4q9rHvR!*z-d
z*cb{6y-SPv%k?ykqY~a%;aBjeN`^)Q&9u1V?f>2zql6x4aA^s#qCsWsRz`Q4L()c)
z#@eJ(CEZWb+}@>AO!cI*cW3fakma@`=tRH1cFy5+X2n$@bF}k@V_xLdbkV_w354sK
zRMiw!1#Cv9>6wB#gF8jM_uChIq-|s`6QqJDnBuvN-5}GD-}UC-VPiB2jW7ssitlcx
zqy3}X4@JNlP5Z)ao>*VQ2~?u(BeSi*Nvb(649baIJ7`d0Bv_5Z3d=nt0b1^HAgN4k
zm~q2uvuxZa<)r#4%SnEMnFvXSsRb=e25ofMKuiTEvI@jyEUO-Z$!*~_&F-JfE-oYB
zj$7}VJ6Ix6E%}DJ(i6=Qs}bHai@$&04|q(AXIfh3i#KaVhg&>d4>83ty<2)HqLJ33
z${q73h08B<o&u^kwsPW-$}KVl(4w0d_I~B&`G3m@VBEQX1+0nl8CD&t3WMJhNsWCk
z<fVxC#rHC0Ia_do*T~4Wcm74D{q;uFi`{Cg33^G)<W|7}a^Ss6RE(|C)NV*<?-IdT
z<P;prLT1zM6>3+rkT{Kt4N1Fx{!8JK@kIpFaLEX`UzS@XVET5bk6|)qcE*y0go2<K
zw=Kr+UGNa4)UJ;Gc5T(pw1`!!A=n|uE?H5^!WI0MW+!l|DY*9ejJy#s4q)u?S{OAR
zTG`J>Hy#|lEkj1<LWYLIv~kN&*|E@;E|$&sA!|CnXNSK<x7qK?@Owh|eSY{mH~ife
z{toN3`S%Nd3&L{4!`~yq`1N7_-}Bq|vRb@2OgS$6{W2-RpTc5mZnf3^HvGLfEdKW}
z{U_n?t>N$Nu#&;y_nh$i^zipGeuGPdmy7tL=I4YpKNJ4G8U8-cZ}1j_%lnZ$7-Alp
z3Lk*hJ5yVw1#nkH;jC_F6MwO%8}p^HVBT@{=+y7pmV6`9T+z1nIilFTpIm~m*y9Cp
zIXWEh`j7u5itzLgck1$9|Ec!Us??n2z0BdNUL4_Db=ecnVc*WYSLJw<M!Yi08aX>|
zY8lx8><;~K1uZN@aC0uWH4OS2E@L_HCjEZ<s7Q|>Pi<E*cZJW7w?Yt5a7UP%;GSGC
z0%`;fvC%LnbKk^KMCskQHaN7GQWZTZ-JD=fy+huynHt<w1wkjBYSoXMYOr5z_RFzf
z9sKm94&kqWi}M@aH{qGt`>)`$+Bie1_iS-5ZOVC_%4u$?^=KY!7!6FG!Ax)J4pqj#
zUj0$Dy4;&uA4d12dKBtSJr_m*^VTrfoANWcRI*Emk(62Ndo#de9;Uo5p@*0~nOaP?
zOKi3b>by?%w%S{vZc3P@Kn9nd!3(|oJ!u>WjY}6(W2`f^j&FR_leIKNyPMiX97)~$
z7)9e19QM~CMwdF?DeGdZhPvyLuM{*Nd`~=<`Z2^bH@Rfc#VF092D3VCIzuGp4X#gj
zEvHh8R9eu7uvG7Uw8os!^``C#qs#?7gWWb`K4tRG6=%Gf#?i4Iglj5NJX3<Z|E?iG
z|CP0}W5@pTqctpGLRzMgY^(p+#Nh*)Xg-|kanDvjEN|f`yOZu(M(6#zwqbmSH@L;Q
zR<un2d#$YExH+~e*O4P^NA}}MGg9Uzy9{7x`e>oU5R88i?IhR>MzpZUQuUP3r;g?L
zyej-Gw4clL$-*k@pyZxG&Br@lrv}yRJpPMB8E>}VLBQFsvqZhxuTx{p$Znu>PI`rC
zlCG+dKj(Km_+zL!wz5;yi?!1z&>=i9-q(Ns(-U~Di*ap#wt0MI>Ze4<+V3(a>S^V{
z#G$wFrV{`(_rhnVCI?44?Pc;AQ=@yAM=^H<w62l5sdCa!4L+lD?N?J3SsyMt&}3!m
zuVf={3Lg{}PU*^qxqMOGkt(IAe>OUJ_|5r$HT(uV)~5|HUZ-ky(&=(_+cjeV8xq3n
z-KXo_^c<C5@tI63O_(j9snP3Hp32U*NslcZV#wGsF>i$k%k9*Zt#;p=@NC}wg4oIt
z2X~Ap*4az@lP&MNU1B9nXqC`}KAIK<FJPO7@0%`P1vZL?6{lfV&l%=&S`|Ek-Qet3
zM0f_5np^7*(z%cs7v3bJXuXTQ>Zl)?$Ku+lf$>gu7aFI5e<E+PV#&gHdGSm+Eq1`m
zcD_vAGZ>FGA~#Mv&_w~^Mv|NmLl1qjlV{l#16-|8(oJ3Jzh-gl<}G4_H+AhHVu^{^
zX!zpbHJID71f`d&BIct?E5_F8tuV;J4Goh&Ov+9EZFE(0h6FSDYmqhW>|ATcVugy>
z7vE+JE2dk^@ZP2e-|&u%r??MnU)h1=J^N;G4F!}?+&}zcZqp=US8ee+OZk?r)H5j@
zTdv;@xd`)|TBa)a^-o9+4{!Xu{!K$|@BUevtJH%OHH+Me)r2xwYLA0*rj}BfTB^yQ
z*KhiGr&zP{)_Yw_#$k^|WDkg~pS&W<XRLj>%7^^kF!?2Cn6)5cGLx3$>9~}~ULB-|
z6=vVSs#g)uG%oTh@+aGfIkf6Oux3|gjnLa9?P<oQt;?)evDB@_YJG4xNQ@z^%4JZF
zt**iCkAN`Di(qc-?xY)VH5C~hOS$4Zo>`xvR^<jAO2dh3U2F<_Fq7t&0*+nLaf`iT
zD-haMesW55(lRG}KH_J$;3daM5Nja6CGL)K9}IXvVu;(-M1EuRb?P^CX}`z3)+=w1
zPO__!G)Q<FU$mkxt21BUXtH`{t@8|VC)^=W;1gtVyM!>ES<g+lQwy1rTFVn1Q!yei
zYh;}}HA-+Zu>^|=3Vwnm{v%Y(jV&{`p|0&Vz7)NKXSf6VWb@c^BDQ7f*x1TZLpnxr
zcH3Rh{%p(p4Cfy5TQ*YHJGC4%NBFJKuX$1MSdQ(;C5j<Fu6TYO{hIU_&9POgSn2N6
z1^^TPCpd>-sSP#~6e7-aC;D|fFkD}Ge+8eIxpRh;G}z~CV=zPAO0=qW+&c|Da37R&
zk=l)eIXZlbx38Fp$ts5n?3UqqoedOl(vwmja$M+c<9$??(C9s%^shaeT6!$$_^aL=
z9tm$8bu}=inAbY7GuMN(t*gn_27Wedhf2BuSCdgqYwHc-uIP@9OFhW9|LlnU%+{ow
zS>V;Ic47~t=22HqN`^4(OuJ(pN3du}MPX}l*1c8au#a8$N}*HmjI-t|_TON!%j5&1
z*)<z>jy?aD^*hHp5SX+3Rma`p;M`~3yMvtM_D^+yx^8=+=07dK(^l&TnT{Xf$ShBM
zZx6o-`nlkaFzEl}LeU+n+0-7Qj0ny}g4>?wZQh<5!JCTE4SxaIGJ@r#g{0c*-BeTv
zb5|7Wr#H2UI`j{roKT@batYrBr0Jfi03$dy4EkfJR=4v}kiuUjNPCk?sNKr!<z%a4
ziC!+=i^Lc=-`tttJH%p*cVAgIpIXTu<d@;l@Yp(+nS3iMDAtpb;g;HV^eZsjPC<+G
z#@}!h&C_%DVc-z!__3$gm2hq)2eD|tQVyi#UvUBa%r!U$p4TV|%z5jtpp_EQ9JEaH
zCZg0_F-HaecD@*)2~!<B!Jl#Pr!W|e4m59^&35Vo(Mcny2bGuyYP98E&v<D=42ox-
zF3a4vXXa>7&!i<i>v3>h`o^d~d&RDP<DP+MJ^VE_jBoh3SIcJ4SXR`a+Sm+~$n_K!
zGOFdz`f2R+3?sgom>PHIv~=M+O2k!4*ni%SZZ}5Q#^EjfLoI3hH#pZns0sZ~UHXP7
z&Tf-E(S%!r5@qVAcqq9bn&_x0^rx<rgr~M~uVTBd54x_-)Vt&9`U=zaTk1Fl*{Weo
zcZojz$-m#(uQ=bviTeE6m|SpODdUBqOJviN60vaWIwkTmuBbkyNJr{0KEc{pF$M;e
zFSx0;aUF(2v`QW3rA{H<-X#4?|NBt0NJyw)EfWtSSFHUf287X<r3*Pcx!)|ay=E=8
z8L>22v0Qo0MIp`v=V(1mzK3`CxBO8QN^p(OORJoDnG2OH);66gqQ^NqO$TD_!)Zk#
zS+PX2mi+-%o5qgRp+J<8V4mtLPWq(?eTB(A7sYOVgtf)PC0ol|t`%`OUTFV4%%|EL
zrhRw&*>D$I)?ELs_6l#3ik=eh+Y&fC&x$N=r$!<phh2WISxxRXah9Hq=UL5=as~)q
zY3}}7iRFgtboDpgMg<{*U7<`8M*!b{`~#hY<w*yJS80|QoV0bRhmq#}lU+jo#j%?=
zOQ^&0=u6%VZtkLsPI7s7^5^esI1TohAolL=mfB&4A&dZL$gexZd@mAGI>mS<caG<8
ztX=Nr>%IHMmbe3r5J14)T+`89WM)BX4<!uYjG`JjP%8)4sBnR^Gk!G8><aEH8!4eR
zJ*oSpgP^YjwU|;8Wjj*MWHg`JId!C3GN0Nxb)**Z$?J~TL3~3GpRae)X5$QNvN#VH
zZDX#}r8Y&LGNhJ69xPWNA*lg=#8C@C3AF;MtxG^4WZW*Bnh@r6r^WoFuLGtIj@Tp^
zsUo7ym1(GL^#dv%Yrn~qGxag7anmk4reA=N9;4ilP-9O5_nX7I5GMf?xf`XJekLI$
zb<wM*Tm7_;13YQM@v~Bc9P(bb0wwx0)_<DydQBt}w?}wTMF&m!TjvZj8P&57WIF7n
z6kq4o=;BMP{bd_x&|y2L+A0#gHIO*j?PiWHD%#PXCJwWCrvta-d1rDd4JDP9h;a_9
z^M=4JZN7nLcU|S=o9?#c#j3Kg11nP|VoRyeq+Ck-b?NDjA$w74S~<*9vS!FW1Z5_F
zdV0eeXhA1II?XE$hxAXGbgzZ0V$2B@ACTiW<j^u#gE@hr4fT{O%hue7bHO|^WvDfZ
zyc|*I)kLSKTX>Q{oefLobp@F;M64l~9KsNtO+t>$;EEx^X;sYy=j4J-x!@gPP+Nue
z@eE-W;{c(=JRpcs>%d|Xkoz+Ai0^(($8YMYHc<tU=4$`Vs$n9df-D&=r?0)KOb-9%
zbL@HWwU%&{Dk3p$LQhv3U}_M@x$q>E2<kj&JX4b#V7*uG-mgS{)ZdV$rRNcLQ?if-
zyDX}4LZZY02x<r;ds2-G<wjcm4#Np($a@&zgfp?_+Yas^oyvJlH#TzbzXD4%NMWes
z8k)>iaeiJEppO1c-~pz0F%N5Uj&0zG%cu?g*wwpnw_(WdKTHV|?G$thy%`XSmT3-o
z=|*Y^*B3oT3;Qb-+a~99_oMo>VQf(KgUV(!x~|z#hBA(ueoR<SoAk3AShXb4H~6Pq
z4o_v>OFmJm>3tV%)p#wVGJK)Qtc2PJ)_E-zAl%>YR8xSZ={ijph9%biF6=4cT`<c1
zGd|E8$=OghxuuayL56KHiE!dYFIyajqhY#tsl%jfoId%|InBpq>v+iKWs1&`<M}s0
zrn`YM`<Z-2j~2xvZ3$OxBwTJm?Sn%1qLPqi{c{t;06wH9Hey+}9ol<q2lB>jnLKqh
zfD(UA>{Ep!8Ukipk$>nZX3M-o_%jhv8?ikbv3s(~u`C<$1`%GTcBwcqy2LX(rh4yg
z4I#G~r>9TJ`Xx7a-n=8_(hFxti{rM1Uz!RR!(Iiz9rnxcyCVO)d_CSIn!si1m3&OE
z{Iq3tb|c$9)EDiTZLNPH$-yp8ZMckQ^*^zWpDba!oZAr}dls;}X1f=RplI9L7pR-H
zs)jYJ+Pl3R!j$-v!j>!2wsxCMyge$KyuCwUkl67#iH>)(j)Syax}^>4p0>4*+sqH`
zN9?%GZEGLXcQZG&Z+=i2MR0mbRnpY6HtRd#=by}HyIvfyM;SpmLHvP9&DF?Nz+kn`
zvg99ZSFnxmO#d{RbI^UWp^ZcO8pV3|V<de4)}8M&Q*LyE&v)eEL;1(r{74fkG{|B8
zZ`%A7!LRf4bH4Z!TF&B=G8)xs=}|^9S3~0{m>GbVDj9&g^Wd|}x==}%Fy;+H?sV?H
z?4^REr5lNjS^H|fcF^uJxIN7=CXpcETz8rOtK%iNNJkSmn0#0bm(kx{PH7I^2UZ*W
zhp98tk(SgNe47!s=NxIH^<N|V6008fM<TR@-05xXt#aDt_FI7jR#F0T*Dzq20^5=B
z!vc?n1*|^0eV#2)ssgh63R`#}TcG_+as(+#h5Z#(bsAMma1}{ee4Aaazwm3CaFdqs
za6B7R#t>*E*oDenH(#rZ)GsFKzxt-MY(}$QUD+jW7+bmvL^2i+@=@(}t>y==yPVt;
zp0%uY8T#AeM8}AOLj~>*23F}AIUeRW1%&!LzsfjQ5HhRj_X&h7glG47b=x2P;rso;
zJR2<<)5Jc+UrVWw6j-qp4{kWexPuV#fK|TcPIl_jh2Jr5g^Y0MKl9SgepwB6Gm-Ew
zWA?<Ql=SDEscMbVnwf2yb1^?KCq!)N=8)$R3B$aCM64;2dKtn0SetjUiHfx!3w;F#
zF8+Wai5n-l(=BJwoJu?{JI3HeESKCDP+^x)r?g?A_T4p&_<uy14IZ|WXq(OG($R36
z5@6wYKomr-VVC}WCmH>>QZt#uh0yX-a;rMmsNsW~EJP~rpZM3E{c=~<47v0eRdpn2
zBAiu^r(Pj<FpDVoMm018y#9C#q9_0n+Vb16g2ByDg(xL>nLoDAVi-5yt&=6QL<C#0
z*VDHCZ}o<c3ONh~#iN9R&rG=j)~?{{S3_-1sPXrIqY~bvH5*1{6ggJ;P7C{_W0t*8
z_x{!G+NPP)iSVqzb}}T+N^?>XYu^kp(W6*OWM1R$5TkhsHX1C)ZZI>?!sD#=?w#Qo
zPcW6k`yA5lQ-Ku}U<y`KA8I4|BnD)rqWJGxjRNGSy}(>jdd+$#QcgUsWjlCrk0u6h
ztO<EfO*BNIIcd@T2oV;yz;A}~m|x`ZtILVu5^&rr6tTw}U_vB<;AINzde5+2g<(Mc
zx2Q40XsvqR(wi2K>sZzhY7!i-1)J$<*s@hn`uE?JYx#3-xj51{>R+4lhz&%lA;E3|
zzq)a*{TB>lVuvug+hMx@pv^H#ob|A01v+kM{QxJ~Xmd_6YleT%G=mX8#K=M6jPRF#
zMe%ma=^C|CwYx$Wae@!c{daQ^X;G|UZr=mIIot;e1;0IA${cH*NsU>=2wPB*hEs^~
zAY_Oncoa+X9-}0U1gBvsWLaH^CMhd84eZa~@z=eZzvIWFKk4Sy<o2&}Yw}LMGVb#i
zH0N$-n+^3pT+X(`d3&9}G&^o@h13D;WJSCMFfFdc;bVq?MGTU^GPtSn{0%m;(uM;O
z*+vi>Ht8ZY2QH#W0;?LSDkpT)kIwGu^u&!C)S!i8nay{s{Y-L%XwPiGQzz%*oMh{q
zNbLJpA{ErMzk}y!0`*>#*$ZGdosl%{zOm()%m8}EfJ55=+|M`6@ejH<Bm1`>O%0HK
zI3r^1=AAcVNg7PYGRw?6&WFa*!|KT^)X`YG_6wn|B*77vRhD4bk?5(0z=P+ZwLEoo
zy0FctrZZ}5bk_c$;4D}nt7EI7gMDc8bF`E(jK~>Pgq9X)8yhGd3^puaTR*#@!NCE1
zpi}GL%v=oaHH)6n&p_94wIx3B2MwiXHo;~SU2OFj1uTaK4>^qv97m<hKpm=q(n7aF
z#Nn^)6Xlt(0}Gy4F0v7tf^8&+gs}Us1T+2t;w@4l?=S~NprCr(2OO+$KcIH~l=La(
zAvY<h)x66Pp4kC4YWzic^9byV@)j{IGrHz_4@#R?qJ8yufujy5iJ@{2VeIgG#~l{w
zJ1!%yau0BAb^5Bc*z_H`Fp+5c?9hev)jTKySh#Q;9cw>`2B&+YHcV$H5lnbC;qF2t
zIRp*X!~^3M@3*YwYESz`f{qjBzSm3zUr4SijaNL~{C3}pWyv0b?>E2FcdzB&ihr)}
zPCo2@AfN8G$Xko0yWbHE@we(lBh}<IGR29<jTzzp<nsKGJfVINh#B#Wj_^A}_^`Yq
zz)s5WzxHS0<G~n1*`c9Qa26G0)RuN^{}v1w+uM#G!fwROf#7;@ExGo%BgcZuFWdQ%
zz7Ral0FR#>y72Tw+sB74oRY)i(B=ixz50!ufIZp#c8J7@LgI*#Af#n|T<>X$!5b|8
z4Wy}tMT0{`27M31d9|GrMc2xFGN%H;u75wsav=Q%SJUrMNVLb@b!nV}raL8QWF*pM
zJNEQ5&duLWnnT|LUPtqc79{bw#Bk?SnRLe5UqBAyG2cjGWMSMnPEIrQ6^Sf5QP4a>
zs*z_5eAVfB7X-f~%HOajJey`1$&4M}6HNDTOrtV3%qfn-0sSR>C>*PU5bU&3pI&+C
z9LwT@C8W+>#y(`8n5;K_lzA)SQ6t-2EDmOU&;QR=#*9vG=pVj18|=*mx8#B^5rnlX
z?}hUe#8UZBL4sgdSu&URyj<+`TyRP*ct$RGb`FL!O%tZxo5>J1@mQ|jpXZ7_oXc=u
zF2lB5aBD8_^SR*TWC*%wGB_+3xg`g}R8uVndVdN=T$AnEuw3v!f}lYeMiCs~|DN-S
zXz=C>p#J#Gl>K)@R$lX#G)c^ozX|E6b@<W0Jy*qq?hVV9<(-#pz^nfN|Gm91YG~1Y
z1_Rvm=s*1GpvVCD5Yh_=RaX=akxOR7vx-~#9Jg{pcd|BGuwmKiK?r~wa_#ZF3)$S-
z=!T3uIiUV4|9`H3|9@Wp;d$_<Yoj=bQXh&7HW)mb-e0}(ARS+fpu;1Ev>d8^QKnGy
z@3INaeYVpU{{!)tzW4tTf2Q5tPvp0IRQ`DVi}o4Gc*LtMHux?M@x3?xlOGo}AB$^_
z<^xz?4nQ9<xQ!0eufdCOL$#}w*JTztI^^Ndbppgfywmr_>Lj~An~&E7l5cZ&a|r?v
zFH6SbXz#qC+%(uUH@4u<Q9QcKl>f$_1PVPVe5y1tl24R`@FdRRVf)b7b=KKb#m%&5
zn=f<RoptW>kfI)CjVAD4KVsbP9CuTFWnW#a_NBVPBg)bfOE{_FW({p<XOc(6c|jbj
z6h%S<3a4^I%X<l)NEp#v>J+?GH}0jD<<kqAxgnZ-qWHWE66Yr_NL(1grN<TGjrJbe
z$}2G-e%iL8_m=gl)8=@`#F3VgC)bYPHMC@{Q?Oy~GJ_0mokjgYVd<YyTDQ+^7Sr`*
zx%qIm`(Zq`lJ%aBn_~Zo_!4G+0*@}c&+GeM{&;&+qwMy-k(gzk+^BOuoi*Vdp)DHj
z=dAqsCKkfJgXKnS)mQu<OJH2J08@)M{j>@5V!XG2&Dfj%4J@UJ$yY|__X1ed;=qjS
zhGn+Dv$_hI{y?dYWjo(7Ca>>f*7Ze`?-aDWA{=1t|3t}o7f?qiUzkqqy3k^B^%Ws5
z`hJ(GpOHS>aX&F#Sh=t;-uC(UMZ?>lU40zQ#%gv*$=Lyrv6U?tXKeGe_QzJW80DvS
zVT8F#vCV&&u-8(eUhsL|1wj=(wf5B6`Z1s>Y3sV1icxQ-`D^=Z`uq6sNNL1BfI>PO
z+U6G$V&N<?4eeItE54@^Bn9TnXyy5O(R|$&rs<U#Z-r5VlD5`-{WMJbjrm$0e%-}a
z2AK8*YHb#js`_10%$lu_?@3<pI@LCSt?plP+Vd~}=1%#UTyVUzx@*dHuRnj=+AWV$
zzF!6@t0PyxS4R=7o!&acDOkVSBp~2ceUL-VSQ^NT5BBCeA8(n*5Ql@{f1Bc1IT;PD
zyDdGhD7I>sKTBZn#)L!(e-COpZx-s(ma%J9zdtm^WjuG=?#=AIe`kt!n&KFDskhlN
zL9?z`WAdkJVrJqobjcCH5rR<MH!3$joOSO+6Uny=noso3X6Ef@X5M&1eO1xPRU=w3
z?BC}9=zL3GH+~!X3QM#+?O=Mutg~}F!*9%cH3|25-mA$q3ID2f9JjW?!47IQ=;8Uk
zsm1e$^EVnx%8J%La%3)$a&{sb@>($dDC|aLQ(tS+6X9HJY(4=+HR<Ld9DLVs->0yQ
z!^{&M?}iH9r3fc!9)EJY5llT6POlE}aOUtruDtXm3bte|01u)|>@%D3OTFOySn6+=
zv4QEhxbbnl3rp9l-38}YcU(HnKO5Zg@C-8TbHd0k_?)n7S4||!OFJ!N6g7b;MZ{9a
z03&w;itD`_qUO=EU(y4#Ut}6VCf;RHuz(=b3yYF%{;W?FZDz(ag0WS0_?2`rq9UhY
z_Nm}BW!OmzBN1*V+sHdaJl@1I<vxYdygA6DnhomJu*xdr%Xga43si9|w$1<jx!e!p
z+y@`J^pwGanOMf0xQL0W31W$ziz`w8Le&<=_%jS(7T&u7DunkZ1oPq53wJ705GjuM
zhf@aqtXiILpkz7G$EAD(Uxp62T7$^@0wiJiAtuffS?RykXz=z1*^sQ?;wP(5%Zz#~
zHH1<@oIk+L+f8JYMg2hfH)~#n<H<yDc0=CHj`Q`<>L=dSbDZ>uK~BLR9QSHx*N|w-
znY`)+sczG)!Ki-&+A;Yli`t`4ApZhQIPT?+<MFCW-ZMxtAp)I{q_|@Z<;<$-oioN*
z&T-AGxZ#YU(b&OLqg)Le)wZ}X(lRa9)9ssE;aJ&KmzAj5G%pPKQ`Ibu9r5+dXx;lQ
zarXQs4KuDVO98919y}^pQvwiukNC&DJv<Wf|HSM%w?A=?BmjeoIo?&#dhcp_*sLp-
zGt1(7688ZXA$dO#r(nwnN*T2)${f~P+JqCGUlwIX6b#Z)fCp`l*$R=tFV2`#R|#EL
zb5`nA@!-;}NZIveV~Nyjsl=DWiL0x8nxrR&y;VKz)sC5EhxkLFk=V)w+@SCGhYM9J
z7tBytDnYqwJH&Bc*7s@T^A?Oz@K0oW9Ju=R22;uW!JZb}e*dxj=u$;X35u1<J1qO}
z@cWwoW3p5iyu%V*PEvKj>;9WGQ=J}fw1W`aUB95$6L^TarVzuFL$HGGu6EyuRrl_G
z*<0L{e50(OhnMTbli)`M*f5zl!<en&M;oMQ!3z-lsH#ytu3$HC6i=%*iXmY?HllkV
z|JgIY&nejAWGs*e&;0;gV^1$_qW7ydTH!OcYNwwdMu+hI{#S*TRSV8i_*lZ;f|&|-
z6BIVa#*+I3g~bl>_bAKRjM{>+%JvbO0JE^@<89Q1n2zmKcspU0FO4m|fbs^hv85-6
z!LhNWhY+lGF~c;2F%mpF$w#xi$3%|NY-fUSc8$J>3g<#ksUE`sML9e>6fMAY2X1kr
zv8BIe@=W&@@w6Po)uqvVRGO#h?%$`6d%M2!^+c@dZLE$V=kL5n6_DHztW^5_EmZvY
zc#9f;98ErcT;w?6$$yL#i=^LXL-!CebV~+rUew<sz(vR5x6d~x;41!-3G$p6_N)Ze
z;81;Bnyu_SLgpZ+-+xd!0LwI7MLgMy416bLvyUfa(X|w`+fb`Qri}wgU2TY%`x2Et
zzJg*^JN-SR>mAWJ%7}xhzaD(Xfuhd4FdAF+p<hAzTrOgzHic~uot0q=Z(MAc_?$c@
z9?H=RcvZ9CzmuYQr0_0R1TBfTmodqM*BK9+KaYB2snduKzNIwg|AN-os^?YLZzvpm
znPO)D;@Jj%3atfO$(rHM;k;~D{E7kb=5*o;#otPNop%xr*H!P=RqvO;io3yx1|TN3
zw19T%E4RmzcL>f8DPTu=JonmzJ;a%;+`1)mvYGGc?z<CS)N_};<ju)9iJ8doYfC|#
z5l8&`6J@?-_#8SACtdW=-w)NI=eQ_ntBT2or3#Gg2A%9=T-M3zsJbl9bwE^wmz3cx
zVXxiSM)-FXc2%!657%>2dK5>MEJkF>R#NX?Tx{N&GOyR2H{r<(WZM!iO`M;vFED1T
z!LGw(bf{gI*|M>z<b5soq9|4j2T0&@x1JZuTlC-+F6r|QhvRbazr>h)6{Cz0Z;#3-
ziW|t$$Ati{Kl^u5ai#*Ze>M1FW$@PCqbz`1<adxsk2ba1&ujVA<Ec$zcfThWuqe6F
zS@*ZWnfJcn|2IT!{yMdhdGBj{SXX2AF|I$@Twe@pjkDdFAJ$l*8V9c5`=~!SG_U^O
z^C4g=_O5?Jm|%?4hG~8T4-%z-<Q!9`?>YE09SJUj`oei*pU1tCX{c4R&iyPgvpU__
zKdWxtYlA`4=_39-`Er^!{uoC~=;uP8*OkNK6oDDOAzS26<jbouC_I$9=`d*qg9H0p
z?@c^X_IXFvc{hgm{HR37rMnGf_<!ZYluY&^dVjJ9Dcp?NbHsZ!AQMNFc8JKe4}9*U
z{vYSpf4!|ght9D6W*cv?S>(^v7el<7ru;fSFf+pF8ndb7r+Z?lH<^zD>%a_K3MP@q
z&~qk+F=(T(`cl#N)7*Sj--2-r2dFkZ3qC$%NJLt*c4a5OiH-(;BO26E&w%k@mVd@R
zhj)DzVZOC^thUwu?w@g<n?|HgC(Zcq`Y-23NV49n3TN^UwW7sRAFFnqf?dY=Kn!7f
z=~;1jqj@oyr|DbblyNB2M(&n#P5v3=kF6T)u5Wv7ciYp^wi}A%)_tx!*sB@kR<ZS|
zVcTQgvnPlUo-~_Tucncp_O7v2HG}86NeLlV9v6MWJk0bv(#&JWoml3-f3Sw0*=%I}
z-l|p#Ahjji^vgd1V|Kd6&jB*4<Blrxe|4Nnjl%n_iJ>Pt-!bq9|4FIrI6Rsm-J^3&
z-Z-#HgFVw!uMvT=t!~kPTR$we)ky<ewP-gD3)y|eIsAI2U4P~?7;xM|HCcETxB90m
z^1q18(MQ7UFYD6}EY}Q`OdIMpvg5V5*dN-$-ML520LD^psgo;{8#GEQy><LJX(Plq
z-Vc|P=6DaO=ZRVU4=v*td61KyNTi|vA>A0L_PkB}_|4m~V8e*dP2RyLc5}F{e^mKJ
zq_}0n`2B}E`os!R4)#ng$Gg0>+IzH3xzaZ@`8ytna&2xopVhEyV%XcN3U|aZtYZ}K
zztj~~-eUg=@@khho~hu~6taV@tcfldY0_4cDL9A(=)|olB(B1L_?l>>?-l9Cp5SfJ
z%q(M1x3@k3ec-NeHz3UQHZVhqFR2e7k(JaRMKkDE(|*QY?m)W7c_UJgy0($dpD7kK
z6oXa=0_U<<GX}ynaD*y7IeA8L+hY7P%|csQHI_QGTyA#UH_%u9Mf%G1RA<zdu`PvV
zGDF<RL~Zb2MNc6qEt=g_$?H68ouBEA=7lOP>HA;5dfRYFH_otyZ{upBJKja=N}0L5
zuh-b=%5zToa^~NA{`_A@IiJdbTB_w5xC_}gSLs1D3wN`Do2mxFZDHn$6zbLxZYp&*
z_{aVu*oSEvvqYPXb+}F&WB~W~Ue?wuN6%(c7S#gZ)bCy$1-|_?gzB_mZLIGTMrnQj
z#7QrqAGHtq<9?AFn$X5l(25W<pKQOy9sFM($mGvdXV&{nd&Q=`;(usQ2JNfWV7h4J
zNYk#iujrbuSQi^90i)c%>=3;j1Z&M}&|6$O@YBd4dxLXiJ~(#0O`J39?EK!x%y3^w
z-!1<YJYy|9Hx=&<PwgH68tZR8*Z}meAQ&i$L2r93g3=>-UR(s0(Mu=JSzF4k$EbY$
zBgcY1ajgx0JDXx*(qUZ5j4e}e<+;4kJRtvj$7J)*%;Zm3MKc9vP{8u99OJ5hUMGh1
z%1(~S*|wyZ)#!Tw(YAObp>LYdfrNa9v~BT0gkC1Z{u|{<X2EyTC>Ua^j(cp&C@$w5
zH|Ynu|5sSHEMXMdyz35c!ghdL8^aI8ThOy-dS!bO(0(P)3~Z)0cpg`mijyDj-}3fc
zm_RY=Domgc)Pe1~cMDs1UMaUI=Fu<Nl5Z8@>~x)9h;FQTQY7ASVoRVUN>*EcxS!ig
zvRj+HnC;)yW?j!$V#HEM4hAsvCYecY)KJXp5blKFPER`RK)OYJH&CBJLHlP~a?+Dt
z<IOfDTtY%1&2eV^SobQ7vFLDUm}C~e;;0`dPvWLi%4W@EDM(!kFm>#@z;^rB39H3K
z<<t>8r9hi(PtvWp82Y%UaLCC$g{Kiw%|VHKBQDn?yq%WP1Mv3@;w3Tt7RFMafJEit
zVp739JZ3e-RCx|no<o%@O_ism=NGuuWg~hD4>{TWfWLw*;Vz7#9cQ){--nGD$q8>^
zv~KW8*iT^X`m67O!DEMT3pN`3HrKzz<f$W?4;7RR1%O!UZssqR=I2C%(c}_JM*fiQ
z(y6{bD>L{1!*2aUfuB+!gKud$K<oBmi`M-CDY%gxRVLjC3F%2aVfs72B7J6<Zn5`;
z{AQ~1;Ck6KlflSe48DXB@Q|?B5GsNPlx^~j0Q?h^<s>MO0hsQ-pkXjQY&Tidr?ocA
zKO&(*=r`TI|DR=<L>A#G_<_Y!Ad5mpY|TVGZ6h>f{st3yPE-RFOt1+!78>E-YZ62k
zd_gclovqg-ro&PuF&GiHxG2-Wb76~fGZE!sj#-%qUE=g-Z_VoS9CuG0o+5XL55wL|
z=gh;fBR2OPl@+S;<|n!*+@`LJwYQm^JnlQ3^J8yHaa}JFa#V5TLgbM7TuS^D22i+{
zIGtD1zJsw<XAVlfRap5<toEt7$<qq(MUwmo%a7aFRhMpR8R>2s_Y~T(A%)403m5%~
z^Ud_A&(tiu<={eZc*2c(XB8%RIxKS@###U|;FP@1eUhDFy$%D@6LGn=sqgTA-oG7^
z=XnTMGrQ&OL@y*LyiCbN6(#o+E~?g9yq<n<zlBuveR%6=>D#NrjyKX9l-#p_^GT=9
znuCu01Sh!;1is($2BnQ$eikErVhwugvvq&)SIIXDnt$m{Dd?ME_BZR^927R6uEi0=
zl;ZiWt#3b5A7=gxD3C?HLLM+LFb3+XcdbC~y9qaC1uzg!GVa>4V03a1&rVIHK%#Op
zm)4T&3X^^z(;@ls;Fgzz<4Eud`W_izU*OGVSF>m=XS}1`XH4yF*B{V-Ld(!l4vDS2
z*`=j=@Z8?rJR`R9Ycr;U=ccxg4v5|S04ZMWOsnhu)2lqU_ipj-^$ADp(j%?yqruG!
z@vHw)LCb?Ty&(_wH+_!NxCnzzAKJ))gw@@0o0DV>Ye@ry+jjlI{paVU+oT_mlr~8%
z-%)+EeLlTet)`sVU7KRJcFSYQJmNyQX>NyUE^eD+x#69Z4cN;Jw68!6tU${@!Yrvq
z7wvdoD|V6}6)qgEPAA$b3KkyCsXrSjsqaUbjIoq8PI{su(+}?)wpk~w1prurL`06s
z{Uw)uh$&)W+3wAW%6LJ`BXS(bO`&<5oIb@eSk!!!<L;<0Sl4%8mQ;=Iw{lbS(6)+5
z%Ljemanje9jX~31CS*zFE{`1%e-=xVc*Gc4SYJq^Xz7js>$7a|aDvka-o$I;{r#+1
zw|5Um=Z+u$;44J?Cp|Yjqc5s+|D^42^6k=HwFR6-Jw){kSe^Uvp-<lQN@RbKxUS`5
z;?{}|sQ0)0<vBlX9*t#Yy0*e_l!=@BV%krLfACuC@5sg+s~q0)Haop~mvg~UW!138
zQSygbq9-^}$a7BMUkg*yj#FKEiBfch#Y9I4diDmtI9fvzH+>}MGuX|rsY3r&?LI}F
z=LL`b7DPy{N0DFWO}43jd1NR>&I@k&jS|}k196j+u5HwQ{Y)^xg^ZT_kUyr(z~9>`
z`z`w4jQqG}81xBAtzYn?#3N>oec#Me-QX~DG10chAfkDDuK2<y14##hqaHdbNjxH0
z6T7AqM4SH@XdrUq3zKoY>vRlCH~uo=$@6fhs(n>a@XCWbjiZ-TF$MZ=qDVEB%%1M{
zTFsI@BK<?SgPkLn(09-??e*nem@UX-WoCy7l8d3~!jPt`%N*zz;ae}%cr&6#CH)9u
zl<wHs*PMQh%!r8Iq+DEf&D@@~i9aAQwsIE!E_gJSFvkHyc|bN*Ko#b!?md5{OsTy^
z=5|{9I%-a&&*8jp2e*u{RH{#xJx^Q&lUJ-(pu@fqS$rgef;z9Zu|_=n>1p1mQgOdS
znwwA68|BSc8dL$)QFL&8HH0(PC>#9ILr`BSO4HIRIoubF#*2(&l`-nSQY1|V&DD8J
z8WRw}vBXYGPb_uTy*k(__`JU0P5%$w@59%xZYrR%u~JB3h@5H?fq37F*Q8$KyvFoq
zW*Obtp6SlSy}Gl1ZhvO`Q&Ho-ns9$lf6D*8{?q{L|J9$7dHt!NKk=|X<=Ou1_CH%|
z`V$ZP^KQ03y2EFVRXq&ir+eQjPVC}vF?Bd3uCaB}SCqwZ83rZ2D=rf^<K+ha6~~}w
zUk{URl@UxF0^zAt3JI~CS6^PC+!e}QU%(Fe9VsGnH$|mq&ENH@2D-^B9Iw)llm`|5
zPbSH=I63PJE|&8T@{bS)HHNRSg-pB6dQ{XMg$AJ5#6s5DoqsI#eIQ^?&2cvm*cbq3
zl~d#0{XLTFyy?YtZtWbblyvOgT%2gTVOoK6XgAJ6Fq-NvsVn$>UBMH<4){@)J`-(A
zvU$!-Us75U$fP81ytnVh<IK?DLmkdD|JM}6xnLoV>_77~cl&WO`15+sT=@MjewXQd
z^^e*4%vl5W=Tb_cfSgqPb2eegx913h1Gah2bi2D6D`bxqvh_U0^-#VUHX>znZ&avf
zf~0!(cIYnaL4JDl;t%j|Z$~$di&ReU^oT^NT{AxUUU5Cyutq>x!*<2L5DVCPMm8#`
z=QjptQqz$7UXCi#lNSB#pb!EPMDt|YG&Q5{F{33#)Qch#QHw4e+QBrF5i4q}|5p=f
z_?yGY9-4u7n$eHVLd@I$yomhmpM^hu{M9^7CCMvGc!KE(Q_H|He@9I)=6NH&EYWsK
zS)}<$`cS@Kb=gGu0x-x}z_P=}ysE)J>_$0myS{8tr1>Dy;$*AV>y89TZ&XqN%iLF}
zoVYP=6{rTm2JZIhLbG>vNl(=f+5E)XPf-M;Gj0nzFbwo=99hS`cK0L>sth(%5}j8t
zihQCEM&z=WIYGjKk$RNAV23moHx9PG0FZrgvW$CT=})9c!HX-S!M*hz`s#Ml#(grW
z>m9eIn0Vp1`8dbJo^%BQ4;4?t<Im_xGq6fV$WG~sr{iL5^d7x?+3)%q@m`m9@G4m3
z|2{HA5#8B{M~U!m7?bQ*>i2&+Jo0!{XvVnU2c!h8P`~MihW2zm?9c`i!+212%6@PJ
zwpu2UApM^c$k@u1;|}?=!HIm?_07;-h6wvN8{#t?$jrVR*xi@=p9v(^`Zxa0PN~Ip
zc1r0NVK{HAf#FaE@`n?f%H^@{7Id3PXj(_j;mk&(Nb#-)7oQ;Za&vrVtX+3o(F>It
zYHd+xMb2k%?HPL+Es<5DsOey5^5t`4?e(PhR*foRmKz_g8QROpfrcpFRE_eRE4_=T
zqjx>fTU3?U>UudSMe<&Z4aZyc1-ty2r*cGV8oD2rHAkb(A>kF>PJu7{Ih9q73kpS_
zC<f1{pl}>5=`&6Nj~jooSz5*qV#VuYBdaRv#&NjxBicnZ)D?-u>CNJ?iJRW&?>{|K
zKW=Az<vSQ`zN5jP=~OPj*ynfySrwbQv*!`h7&E?H=toPTm?t~0NpxoOf=NPa*pXQ6
zjzHy*_iRic2Bh%?H?+;mnc=r=oP)vUqfH6tP3R8ohwQkhC&3KTR~yE8KZG%0e=>_c
z6laa$XwR!+@ZM#ixQY9FG43&M0qBbPT-H9j$*DYho}k7c2j5SX>*pWk8I-ck-sZoG
z)`6YN<8X|qQI;Bb^d<dwW<QB}ZIk29p4aysOP_o<%H~^ff%H*(>&J0Wg*EOFyM;8)
zV{W3GUae^6dRf!5|9;vq_~hG2DvMYUcePxGagl>$ROdFtVTHw!OlLMD*WSc+jMIhk
zSn_zNEx`i-y1H^S;W{rKCkKb$%CIh${4S9WFN9aFcVe~N?|CL@C59=Hp?ew9)q5Ak
z>npd;AI7cdBgncS4lfJ^aJY-ViM2~C`#6f4325Z*I&WSD?Kw0Kwqu6%P50)+RY{$@
z9!*Lyw7o82LAOBHk9(m8!MyT?>ev)s26(|4*Bfj90DJ(n6UN4-yihmTDK|zU$PnfU
z0R%I_GseGR6_>(k5U~!kBa)lVCSXjBdqCab2K*H8zp|lWK_MYdBA&otr5AN+@H~TS
z<~b10tE-GRwOqxHK_IqVN=KZ!$@7@JR{PUxXS!xGGu<$ty0l}aJGN9zc!LAp;nEO}
z(K%SLEiQsd^u}|OUjRs13%=<f_Min@>fCu1!5HWSgB{JjSV~MX;hD<*n7HY0B3hQj
zVnk<drGozYacqs)=U4>D9*<`4&W-~Bkf^~3cG5{MFBwI;<fA&TVV(uwn}-J%p46l|
z3wJEl2n=K{!S9F03F8|L^*a@MI5RI>CE3j3Orm#)a+(n@G9fn(uHy#R@do1OIGK2i
zxZ<#*Iz3ee3Yb42!A@YQRP)a(yxF6)=UM^kX32?#7#sIycb=^kPF&a=!_>y*S{(6j
zQ3KD9aK?IhV{;9R%Z}7Ijg;ZOzor^G4rhixXSuVHPecAJK`-RbYs931uS7ComOtAW
zh@Qp`oN?=%%BSa#cigYh<kgL_<Vw}=UfvK~2U-k0xtlGY5?Fn&&0WUMVuXLYjF`v<
zm5$&E)2dOib}8{pTkB10S@}`iSIidiW<isaT+FWi6vJsH-fAtddo1nSO@Co+N*S9?
znXDA|^2Xpq0wMnkxv-YG+8uol+jaHoh9E{3D}WXeGUqqB^Y1+zGjsmE7ymN5$?#4}
zk^eZE0Ar4o4IZ>#ar^b(_N&}}-DbZuK*$N-v0uh~rO0nJUz3$I<h<b9e4Pgp+re#U
z*6b~5wdKyV<(lkQ+<rCKuM_Q8*m{}$3R^$eeub?^?N`|P$Gg>sOzUs+h3!lBvJUhX
z^>6PR8bMXQ`TpTLGwtkV;Ij8$+&#zwrmAs<HqEs8rKyu?<9KF6GfYDrEK@9j4Pk6i
za3e7T^-G!an>zRJs7uF6)Yop`*co_Jx3Zc~-R{<IjjfvcS4eF8T(|bG7@zKN+}a)9
z)IDzP9{<}n%Awm#3G-EmHgMuS;E`pJ6FFzy>w{U-PRZ+^S5?8`EY9xUY5oFM7Ez1L
z*LM{~LXUUv`J4D~@ObAWKf@lRw<@lINg#;FD=)8(E&T>t16ip2K(X#S1DxD}g1%DG
z8|`OY)14iMppo+Al&-lf+I+r_H7bk)yfeL1%Kc&cBVxK6r+ZfyCy=aqYtXQ8h+Ts^
ztEN~%!TNxF*_>c<)}Y8)gz*>lpuPSTzj+^p+Lgt9-?!_r42vA0qtUIxb=4}|<<CW`
zH=(l#ouv#j-Kv=a0v3VjBs)u??R}c^s+w|Wo5XxTo@m?$zE<qa!`B^r<m0PJKnq_@
zm6u-;Tgo!?@8GK`i!X^<jRs#BQ-=6z%;D?L`~AE4>NhzD;OmqJ{}EsFgs)b&Y96R)
z1r^O-oDT4<b>4ktZNTnKHddsu)N*~u9CI51FxqY&Kfu(aLkSRiM%XoHZgxJCy<^O2
zoKuQW!u#`00?S+6n04Urt-lws+%0HyFTWyqi3I|@tK4g+4lGx0%T;8{onXsVxR+N4
zEoOyRy@q$}?;l7aCU~vDHqfdC(mfsar!)MQhYOXadyqma1l2b@l<QQFHn#8j!ydqD
zWPej)Lof@Nv|0ZqzoPTRtko9_8}3eSM!3&~^Y`r%ChDNxTBD3zD`lg<fTnQ4*@$j;
zW3_j2yf-o^lBlWfXez9pd~tQl*Aq8=O3#<XZa$itYuwjm*106H?j7ztZ%=SDC{ekw
zI#%mfrLX@IqWfpYJMNJJ-#Y_@bW0bNTB3ze8mdkL^=?%~HJCAk<Nsn9S$iYWni+U>
zv9dR`TMXUL`J2hZCc927tq!F@u>g0Ay;+0ZhQVSe4F#^9%=K>BdOFbr=vU-{{>@YV
zZO|_fJl+}5fCXLDVnEj+9iTS?`V|)RAo_oUJ~|I{26i9NHyP;7)DrYLat(s_i*iTN
z#ylAT1YH2Scxlf3VfX81vo!O#ZgKx;1*L~6WCW$)YYbG5zwV>_llSeTd~>$^Oolx;
zak3?=6T;tP_|5D~b>FVe{e!WroX`)2c~eVbE3X<f*RAADBX%ckSQo}pKVi)AI9r4W
zTGMd)V1!F~JNOiI$`jCXej_}BNv7nc0(X6K`|jjZTqfBi(=s_2O<?UOD?%(LSusw|
ztjFk@ST80TAAhVD85_bCJF@(5w|@s8S#!y!si+AM;%X3hrWxBrTkFKR*hkjDPyeC5
zOY`e<2G-YGV;O2s&3yH#`3f$C_tX>`pJ#wRivzM6GtuO~kFDE)dx7fdF5?|dMUt<6
zp2=)`Z;F6|2~Sef^g#v_!TW{<S^ky9UGp!c`MEaI{4;sV6~|i><qx>pPksd22**}(
zV_{`;*>&f!ScPB&FCwsO9YKR9hcMgxdtcy~jk^tQ%}jV`O(dwLx#afGgKzPR{*U*^
ztTKWTPq=@#28g;axU%-(jznQ>Rqd#`ZbEOB9)Jr@n&n~;Vge)R){N08nmz&7)NnWl
z-2eS2<N5l#dE>c>kAE?qR6RLc^*<TU&iwjX2iBKAp4`f58P8nI4x3pzsyXCYQUbXi
zrMZ<HHYg||VCDligE+W+A_}5+gXPR<CoT%+b8l#_@P{VHS|N8q?8fq@#G8t4WK<cD
zpFZIo9n&I?Z1&EIa%_0KIh;BLu~$PF@i1BWk68O8&6AH$$I&7IbiW+E_O|?O!aK__
z=UZ67pQ{G(=d=V8eraOz%(AkUb2Cm;+^=#u>Q9D!>zH9(-=J}uu@<b{5UbsqKII_E
zckA99>|cy|g?6!Z>>o?uEZPO#0sz{}r+!XgI&2vKr018FSvL6U;34*b7nUFYOO$pn
zF~=+hn(7tgu+yR=7UP?!s<;4Gj;v?g!$rLa-%9`pryQI-IqsPCe$x$j*6LVX9PhY%
zWOc`a1FJhOKPbl!6BjZDx&4XGLc|S`MEw5$5ho*LI3f6Fq44j0JHrWekY#WlSo_V5
z!P1lV*1ti{yq7cG>bP~8umA+>)tuFEEbLiP5MNO0;MX0UgM(Wt^OGvok5@Am|3S-a
zOofd>O_09B#>DxFt>luNn<_Ukcee7=kvfCFmvD3uo_5`^X>A3_@_#r845mjv_r#$v
z|M$At0Xr_rhF)`6t%Z7o(;F`rURfqZNP53bue3RCYPqRDCB2CMg)e=SafaT+1djOk
ze)pd_L*I-l$2db@znx0j$Sr5+jrx`HR_Z+5XwT!@-}r#pdZdoW!Rr8L=$DZyXXvfd
zbQWT3`B#q6m!3!sPI^?EvpVMt9aE-tZyAT^{PcZkpH7q3G=|=iGL5*Mf((31#fvkF
zJNOZLj9V$bmxtd3@5u!p41@lH0#WP+YST@NwG!+h*ehG{2#51|>!Qg&lS~<69zBCJ
zTRG3zPzG|?te@Ug2S57Pn_5Pwkg9r&M{zkx-%gCcBIt)fe>a+G4RVh(WV6TWjZFNk
zk;>6xDJa*0s_tYAO`r+O^w*oTc@aL`z1nheXpoen77|&phYu*^&IrYNQiJ%b)}s0~
zponWJMxJd#P~w@O+bQ6Ai;2JCVCzYwAE6bEb!?mn>)2|KL78%?4iVVN(!je0-R_;g
zpcpmZLxO77daC2~PDL1(>FiaC{Z+hM4fSe$q5~J8oJ_4I1M;8#>E_Sf*jglT=<9Yp
zs04Xddsc;b)q-!mc3|Q)UQ;oyp4Yuyr(=5QV9V5!eEkjY9Taqo8Vrjx?;WuIFiA}%
z=$D=JDJhK(9`>o#pGOOss`2+&%51~;XldT-2?=l3*yQ>G|2szx$7_!$%1N5eVop@x
zcA5zMVG%F)?wC8P-%h1LRLqPhw|hy=Tm2-Y577VHSBF9o#QJ;x*6cig?@zs%xBB7l
z{bA~ZE*fx6PDlu>+!|Z@2|n(*J#$UM{i|+rWUmS{9**JHxJfW$aqQ<*=WYNo+$nvs
z4$r|(dU4bp%mP+Z2o;?X?WijBTjt22yBf&s0z37gk<|}e8^?sxEC1f|^SU(066r2Y
zBLC{EwDm_Jo$lJC?^_lbKkl`y3Ge5UP;lP9m3W$}y{;qm7lM^{zRllQ@)5x2SVxn^
zDga)4qbTBTOK=4A)MsXtG)0tb-fj?|(rl{pR<%(turPN1j{ka}=2tBv1_*YL?!R=U
zf#Bxl#L>ED2(91z-+XqMnNsK7e2?<G_T2+~Co+QE=X1?a>R7SrATxPIF=Uj((B4#Y
z_>rT0CP7;mNl+6-nWg`-+}Z0?oO}Z`pjGcwUO?une8RK-F`M?VA;s`Kmb#8fLK#6p
zHZ^Klj=7Y&*-4xCYr^^CKk#W$1RlaWwksBl0<!K5dm78;6ZTZDADkBRBWMU_JYnJA
zITzWO3pRzp-qgHYq#S&O<=es_gkpSnQ>FZODYeJES{CsS11Q`Qei4W!0EBtXL_oSL
zHj@(!<X$NwxIHWlcML;BMi{!V!DtxlH7|~YktMnG(l9vJT``s*g?EJY%yo@RX=0pQ
z_J%OnwwNtS`!PdV|0WYSLV?AD*tLupCVY0a3jgWR-``jm@fNW1rZy8{T1O+~#nEeV
zCjEL$d2bi}U^<d6Y;(Nf{M_W>H6U$D*fnu1Wp_WbE;!P^YK>kA*qBIu#u4$K;dwgS
zBvsE;q<+mB1o6k(R}-jD-@V<yFzKl!oU((c8~|7&=sdm4WJp2Kw{6T?##;ixduN48
zduh`VWC^cR?NF#(KOz53n{|Y*CL;Zj+a<7cN<LvHj7RsCJEvnqVl%lb>P^93mR$w%
z01AtrmBxZRL!Y`kOI^E78T96c-}@MQX!@;M4#xPMeI0(Ynu`c6x)xAZlUY7RT<%K(
z?=qG3t~0vU6WCBpiKA%_kMB53#AH9;Jq*g}a0cDa12uTIv&9YPmo3SA{*=e5FTG-`
zX$A9ultLO(e|3*(P~WkYRYR)1Ge%W=Dbr22vw>JIt<EQAf<9rYf5meCvNmnzr=fpA
ziGLF3fHaTLTB=Fh1qgU~SPmt2`-8FLt4IkGvDD8<_@@ZCGem&n{@G9A>x|Y+C*Xkx
zcbiYaBKDZMci^pPRZM#H+!J(6PIR1u2`KZ2`-`+LY$fSGf1v4zWX{Q$lKxjo=~JIb
zeIeqXemyrWl2whE)13N{B2N3Ru3i|DWCZR3ew>Mmafuh%ueO0O*d=eW;fO64aJN}1
zqv6NlWWu}u9<rK!2gDqqbhX=8J<ewXlG%RXGw;~U{^M_`qEP~wnQ#n~kV77f8VI;|
zirY?i-&iYgHLS|N#Avw9@ESh4!9VbS<byjk9uRPqt%=UvG0jc=Blw^V!HB}UYAM+O
z@O7Kgc_GAp{gf}<m&n(AcxjD$G_lle$PMB0j%P^{>)bIo2IvX-J6DRFWW4kUb79Vh
zhZ~=YLICI#yRxg=0o#kHMLdmYaXAEon#|tS>?bjUJ5stZ5;%fs4b|aWwn-uRroAHh
z2p?hb?5=o|t^d~~*=Hijpj*rTr2dV2)xXfx|DLV?>$ZLs-@E=ZZPF$snS+#5ZG=_`
z8!?^;`^pv&G+GF%!XBD)pMCak*UNeR`!gS5;l0~`nk3IUf%Lj6Z0-BP-`@TEk*PoI
z-?g@W72mu5t8CKPY<Dg&5uJBvAd^OF#M6rTojipLA4lvVKC{BF&_t0D#ynQ|6=t4j
zg`ZbGVV7UiZC3b@nT8zK(E8I57FC#;?zI|jH_{v#hVOwO6|^*EDX)|!@C_`^0*X`!
zL4^;`Oh7kvpAs@m82Yq)_l3s{n5Gx_pEh7l*mZe4db~Wx6x5dbcdy+Ce8Gvpma%KW
zX(i=wq7%+Q$PrBiBIRB}i8R!!UWZ$HDV=R<ASs7C0yiaJL~uWIC$Pi5{+a>R!g<00
zqS#pK3Z{M73ksU~Z8Ka*#aggaUjy;DE>>5_xLrT_E7G4?09Pv#@9L)YR}(#n5duai
zYv^AQ=f`h&9(df1bIvsbVO(_bT#qScs_dCE0_;pF4Gu9nvo^ZJ>iseYOgj~{a6PD+
zzWkv`)^H=P=sWHZ_d=PBR%?G(6EX5PFFKX_zy5%H626DjOn9~~y)Y+xPnGO_wvoL*
zs+SL8vmDl;S@IHQvoRxz>An%XEALjDEq4cUvZ)309#gBmgNip(*a{K?&~bCn|Lc$5
zhd9KD>fO7<0^wPPb%j(brj_MYS|%@lu?Q6)9S+YO><EdhwWec05fW8~5%&d#wuD#s
zmFPFtj$3ljk+I6P>vH?iiX0$uFdPEbGL8@bVrG4gSH4Qb-n_Cd!z**=qlTZzcXU3#
z{3T_9*77sg)+~0r_k6$6w6WdJCNaE!!Y}u(e`<dH<81vZzIXjc*rXi4+}}pDDz9On
zpZ@vZ;g@^2-$SWv|NfT`O|yNp|1(p2Tq*yOU+!K1-2D3MZ2kM<m#5jJ9KSryG$?Y@
z*6C*SROY>kvYwp&z7P$eot(<@C9*i)YOT{2A$?obn{f8FhUe~Ea*<xVN#(u{YZ5Vp
zIgO`=*2cNZ>b+C&FVNroWsIo9#q-A$&LZpjTuqQ`V|Kv6fD8k!%q1gBsiE!Y0so;P
zuKb4f0sClgTz-2aauw>qm%ZEj?1lW^j<rDeCbCNm%z7Z`C1QHz8_g%n;yZW*Le92t
zRV`dy7B|xAP~WXOP~Gj{MVX)*e=K$$%Vvf%>fOF)D{rE5|7#r*nYuP<?$Z6NSUKR;
z@9%1XGOvF7d9QwF`fqs)%ZS}D2agz58D|JXAsGh&>Cru9$fpHpSVD<4PgI>|^sGiy
z-SHhEBPXh!ucY*;hb~4ky^Z_d8BsN=h#xM=iK_Xq=dqOKTg=4Bv6Neg*qfzfP9?JI
z+`i<mb10aVzbb9D`{F0Zn+E=GezLcGx9j=5`v1%aqp~l4^0ZCL@slnak>e-#5%K>n
ze=Vd`wtru@b?%FwoM~zwz)yHJ7$VE?W%M2U!r#I9^?&r7>EA$p5-g?`W8Yw9db?7y
zbF*6qzx_c@C2wJ8m{WU62_{|Tb??A!UW|3DIYP(tf8|*JbuG{S5Bf|y_b^?uC-iCB
zMt)M9d#5yM!P7We&TtVXXmE)pLze$E2CqTTPCB!DZdIz=IhG%}C*K%M*rA$yY7!_n
z0t$t<^NFAkT)<~fN-FY5aIRS=jbZ`GPG!YiZn68k&2|RH+5;m{Vo+5ayi8E~qHX<~
z`*=+>r!5bk4&ChVT%LJIv|v3mzc6^qSL1uPuvJxu%Wk-{vm5rl?`LX%KG9VW*DU~A
zOmr0y#06gi<s!HSr=wJ=FIIHpZ^vv8gXu~bu$%`c=b{o_dfy|IbAy9SuZ$v0YH!)t
za&m!Uw$~rOVjqI1k;i6(_?)Iq??gP0ZzTWNpAFYOF$fOFVe+;y=9qdfIR1kqq^#g(
zWm#lD$g-SeFeInU3N#S@w`^^}c`El%SjnjH_cjuPKPctRFlH$9re<DM<h9|)%<y+f
zSl8wJ3fvQwX(Wlk(P55ee&;T;=TG*G5L>I?aq?7xGKw=)&Xye6?dg#$G}sEJC#B~d
zg!USvNa8u0ayuV1@tsi)8#xNu&X>-c%ujlg(%jTM^V8MJ59dyW;ki@ICS4L7N)^RQ
z=e&R_G;dHXp@9oOxTPjrUg;Hy?Ix$P7)Mm~yoM>NKsOdf_c_vc#<A<{Qh9p=LH8=^
z3VNLaQ<_bba%&SMSh+f1@1PB+cTI`ObE2`N4!pu-9ff*@TRF$Z_3GVv8<@Qp#aPF}
zy@z%ihu)6zCA-@YqF4^y)OdzFx7#S^%l~76kxPuG&FfSKJ#S4X{y*B@1wP8+`v1>D
zfQ6z@RMenYW8K<NQ4@+bDX3YpfsF=@_q5*lTBWpVOC`}%L;|}jdHT4OR;^k~y|lGh
z+p1MA$}QXy)K>9QMXf@umuHO#RE3C2{_oGsvzrZw+P;2&UN5rG+|JCLbLPyMGc#w(
z+qN0*3^(rEvh-~t@~_#{^|jq$Ay0|g&<pC0(H2fzXXX=P86pMzpgw*F@#52lo`+p~
z+51@r9HY7TD?MiyK72|tDeM1;KmaWF$m<h4Y9Nrd(#OdG_RN4>s?klQXYEpH&-sr}
zsn5-??=oAT;OwEk@7NrHlHeqxh%>*2$jmp5n0qc$!f#d|fI?GDQ#prF*S8s!!yr#S
z66EnR`6mwR#l5*=O_I8l)vGSSyoc+Csq7q`fmBG<GxWV`?Q@m!MPhZ4o0@0@acZ)D
zw64Cn!F;7!fkDnHLjKXbOantU^DRF0&aEfZ5`?tR^tLgKnd*@Utp)<HQY~sodTN7z
z&6#qgl)6<ZX->eZrqo1I{gJhLG-tkA4$ubzpnNV0J~<QF?ER*ddf92<NotIV<Jji-
zBVVfelU`M~5o>`rn5vC$9)IT<TmW5|xKnMvc?wy8w9Y_E*e#1^RLl$94W-r-;#qpx
zC4~il`REVquA5);I&9Pd7->*E9Kgm|u>a=2bh>&tt;9d<Ts_&NTFhpaJ}~oH{0>{0
zeNY?5DDWp;mfb^6wFNI}_uf2iBbzp5BoWN!F*wvNrnwSga9B?RA(KX%f7Q?JZt{36
z;9ja((+00=m+{-4x|a<0b!}Y=u?BQO|IAJ0Nye!8S)0l~?qN(Pd1)z-d*oJ~>});K
zEstd-&y3*IWkhoVI&-2%yDX9Vm;b6y{sy&aFv3~w<{fYSq*Gn`=`lNt`gt}BHb6)h
zP-3@aKiQZSVUIY?aAjC^8*JXG*oogZu@Y_VDaodgg{h&ce|Fab(JhcAqzBNoTr;2S
z;tI~%dL9B}E0qoD)L5m#bymkSBN3|A6N}B=3`fR;=^h3lIEF++a}qTINmT7T|E@sK
zE)#5QqBrulJ@tR81eG!12l7qMHc1P)p0``1BFSjcBhMhCWEFNN`DJpFNm7G1AX&cs
z<#CM2-t^#P^__&+=L`#qk4cH8sQkFqrN^vM_l<o9KQSlDQPRP+TwLeALFG2&QebGU
zx6pVhcs!S4aI@Ui)%27V!Zjo<D+7p3CZz<j3p*$E9fNswRF&8P#zPyGsn>~e5?3(2
z(V*4`Q4AQB=`pV;oBukNVR+5RVVQrm7~S}oCWhZDj^{&EoZTgp9TcsHaw-YN=keLu
zVApwU=oYCfMgCt;)n;r{i9#iQV@!ixtzrsRS?1FDDrm;OiRYbilFebn%K6H|%e<<9
z<%AIpCN8_FU*^9i({J9UzO2?(;z$#21PiFZwJYB2t5s(|x>xHKMs$8i+i5=F)q0)3
zqlUD?#!SX~I_%FDXqm})ardeo8`=0mwx(fJP7?XgK`0$3;!wB&CL5WK6>)xvE4bR9
z9&P5#rr#K^Io2igQZrHYnvZ$4oK6SJ7iQ8Eci*4axTIO|8=lZ=(=)<;$2W8P^WFZ}
z*V5Rmx59NjW7nIjiKlYz`xJK)btrY<rS;u|doNPnu@-05kz1tr9cGcDIM)=<?&!x1
zHJSk%Z0WyXw)7hW!*1#CvY+3BuisUe7ur=#qQjnEP{$GYs>W{U@6b!2zkx5zY{&`>
zqWHI;Vx~P!f$*o1JB!ZIEM=xRZ?0xP<b}i!rd>^TJjqU=a<23%Coxs3qqkJz$8z-`
zdS`d`x4dF@_WunFD>?Vlxa1S9cmP<z&i(<jbkJ*lgKfmEYFA&{MI$sj!cSR!HIQ7i
zL^CBXz#C9zqNJ9%4Xrg`T3X;gXF;(Yp$y5?I&>46Z@rYwaq~Jd@)i?&JC!S;PRyzH
z&DQPgv$<J>hjl?%q(4!vZ$|NZkk}b=uDeTSi^NhDCUhgAB-1~S^=T*xa?7GSDZ}FG
z1JY_LH`h4hHpkpQ3%3URb*~WLk*W)H@Z}|B_NV?6B6B{hoy)i#RmB2e9_;3nSa2YW
z4i*D~pDq0OV^zRi6^u}GrYzlWjf!(lFFlQmOVt(r@rR4LLAecaw}E}-zQ(t!jpIU=
zsFt$~1+ivMBsZtyRDyLO;-t5WHal;|(`Qt%bc-%Q9L!+-a{fg5?II^-ILE_`QymZK
zOhC1SDQDWMIn!2M5>L-vD_Xf5m?GxrtHUhcl!woG!~~xYWIx@xa)ay-J6mR<Y=?MP
zt=Rweg<-IHXOI!qE%zm<BRHKu%GuLc5Zp?7)Y!yT=H!mT?aIUBQ7Xs-Y7g_{BoBuL
z$gHL)vz0<v!Ia4}A}L$4G9}95i-HnB5m2D~j-RHV=N=ZjsYnlty@%5V_D5sGx8!Y+
zej~d@+GdQ$X|<2($h<4|zDAc$*ndgQaZTGfl|_zBB`7!NPb9tZq*mvZFthRMBf-Rn
z-Hm7AEvClZ(RoZ@`N}(#l=sO^?er7~u?3GO|4DqyX*_}bsJCm}7u?5}ar~jczwe)2
z-Ff+=>G8<nj?qT1oQl^Xt5AAlR(2*OS}Dn^Fe`gyyW+)`kM`z@KY~bmt;uP8@I;t8
z^p@ZGe3xv=?j#}=J{XtQ?Nx<rSvOnHARPtD>aQBPtveGXlbr|MxuqaMGtp{E2+v3u
z*<^l85Ia+L)HgPkznp)5jGV%ko-pvntOrG%-}qeo#KF&6@bh@$TYK4;^}x}aQFl9T
zFqfg37Wmikf~D5EqvuM?zT#K9)g_G(zUZE>g*W?EWdxWBH}X@@o4aLdC$DUqEX^j(
zEcUzSPcZ>w5vWJ9#tHhzvXv!m!YE@LLnuQEtS6x^{bx-V(kztif-8){*DO95)`xki
zzmZzLjmgtrd5vW3(rj8k|NmAXKv*BEywOMMiIBciafw_W*d<5ZkvsHl><{^ZqL&GI
z>XC3MCS>^*G>_y&FFZf+djytXUv~pDv+-16PB8h~F4VpGl{$lqDBUs0xnTp09$Y!e
z%mQH;`n0HejWM4&iLTj&LqX;yY(!G>GG}5>3=YGIZIUv3yJlrrzRjJR6n3>g2fZbd
zgZUJ*LKWAKN0j-6Ccil*xBDr%;E-HBhCI(KFEyvKL@>IPW_{S+pdCGALgiaczsj_7
z@`bbZJB{hstRXpg*y+B6!p^j}W+P1#p0$M1gc|o2w1{uMJdLY99h60fS{%YK=l}E4
zo!uD^Y?+a=oTj&YG}uX|4q`F#(S=TO`@w8iRCkRDIkWF3F6drM^FXGXpDTBBnC;Wq
zd_BUAjKY?WF5-TkmO~Z~?DKh5Me*%h<-xUb9oM3}GQ6mvL6xLI<og1K$Uc~9v-xuZ
z?xZgu;5Hb`b6PUh3b>||5pGSB5NwLWVk^OxhWzHOKYJ}EEzUMuA6tGR4z^+UDgUlz
z{j%~l^RGRXS<<`A<+hB3c&DrR$=N5hh=8vA;rhHr{BI^Z^LA>lsd1_1pE~!?bI9(0
zFo|g>ZBE>p6K`4z8}ymgn@>)rv0@X+(Rfy8LArn5sVdm-gUg2UUQc_?yn^g%dMz~P
z0%BVa6nvks#JiZDDXznu<<gfkyygLa2yocq6>3mPDXSDdyRx4gg*8zed{ibBh18fF
zD4mnkKYs%DayS*|tV^d*QWj$a4W{kbC~g%z{|~2x3yg-HoXYCPS-46<ua)t6>U#J}
zwNtE3)o3ZU|6yXcr3(9>EHN@hUGd9-LOl}&aZNFLNzalz5Nv@oV|_^3p!J6O=~NYM
z$08}@Q`cnG<t-J~{a>vBEXN1=Hbr`n-7<Y1V`0Yura7XC|Cb5m4a!}la-N~8|4SP$
zCbXik#<p8iv5go-gcdrNeIWNWON|CLQQw~JI48%{CKlE-6rn)?eUxwi2Y18M=kgU#
zkKGo3lo_lWJrs8dE1g-len9l2_x;iS(*sTJx<`#reA;Jt#+|V%GjE!rOK&yg@&9&k
zK#Eio5s)r@r|M15tp_f_HqJ&_g3m4OK@ym2Cf)K7B!uP{tzgwLs3SE3@WPvjeK8<+
zSs(eM+xCQBBcT!$<uqO~&}$Q)3~;XdC3<k3>(_4Qm_&!uGMk|PwIlWZlOd7ekSmD9
z(|V{8)dyAKnn-u~V-wu>%=sbr`NWD)U5LxJ2ULF8v_)4%@r>n9V6Exg|BrZRUDoX7
zS$M21sM~CHFno;R#@~LjaXy{=CWwY3e|DVF&CQ8nXW{ypPtfL8$m%3zsDOg?!W4)5
z`4K7tHVoK}n+HL>sH>d8ENo|BLgHxB*4Z>MKpt!NVrKD(pLwKbOdLW>VL}!4AKYIL
z(5F?K@!N4Wgo2uC6$gg->(1TCUrfQuJ|R73HBDE85K3zm<Gw*Fd_|-u76)3*1g{Aj
z$vBqHC)By`u>d{?<tR^|<E@U4E*Y%LHH+?jrkZ0G)&%wHP_4@YAy*dpg%_EI3c7#m
zSGA}ZjRRjSE-coY9<7Bs9pj3GJUd+a(Z|}v8m@JMdWhXIF09`Pm7DQT54~)M(63GJ
zY`-{f33NchPwEfP*~>VqDmxF#&Np;f5%Gi{4$^`c)L(1o!D*On!^}n4aH^<PJ-e7d
z-RPw%+q9U~o9boCTxcd^yAnQ)ESY<V5FhHbj_v*h#o+>kG<zF3BDB0xN<l8a#@tKV
z;%?0%<DxR=#5U3lQHP`DB(1iVH%Y@=_m%iDEM|_D=a{L7-{^?pD@#qJOM_SlGr4{^
zItExmiVXN5HIZ-sK|=<U3q&e;xq9o(RcZi}nN`L8{h#cI(`2(qv^Jdd)X*fieiVv~
zTAj7?@N0?43RGeuxRKOebzDJv)i?QHp=(JcSb8>?71Vt72IH4GEH?(aG8)RLJ?0(T
z8PkdNP0TuE0hC$S1)sIcbGx0K*(WkHnc6ToY9L`LF5<U6fdW%tEyZ<=V`C{!tP`MR
z-?0Ds?qV~>!%<?gvf_ETcKch%(p|Ptc{iX<09<daemW99Kl)df{%sdO#B4EP%QJ1f
zUe%r`rD?227FY30hV^8iqum{ejeMcCDzZ$-vY!>fr++%edTVtB$@A!Bd*XDZaq6_5
zU)`||c)26d5EM#J3AHDFtN=ipgGfH-^nB{w0R4-(54G{x!R=ZbLAG^#s%_3b37vLx
z=L`3;{lrEa>w}ZLm}po^%|Yx4^)QMk#`#zRY(4VrpJS~CieJ87C9DmSL+8ZU5$Ugb
z0x4#BNo-}d6MD=MJ$%%x*0r}7?K0lcGS4=a7$d5keOg+H;pbL<{8!J&?n5xenz=W-
z9kE{7Tg>GUj`WHRn6S*5-=4c{`y|=~<ilpO`;hz-04x_3WW-VB-L+4@lQ~j-HgyYN
zTui2av3Q<+-@wm2N%`aTlC_h%@5?%{%+hrv!y`~2Iv+IG+~lWQm)r383(N79`K20;
z$(xD<xwpIp`AP^_B5QNU{J7FhMM#Lcvs)-6iGd{IYVGU?2r6F{;aYdLx=yNA`ATgg
zNbGuktWh2S8x@zHE#}r;C7@zQXIw<R*;|Oq8AF}q!vuS`uhui=_F#WM`k{RLdkLYe
z{XNZAPtN{6Y7KC6_V;gExoqt3mwzSC{=V+71{!T0hy5K#>^=7PH6-Qi@AC*`EwI-9
z9$4KwOn+1tGALR(`+e1#(5W;eZ|g~Yds*Nw!rETzEf-eI0c=^|F97lc_YaDzaTlt1
zo&{dB5i#QaHa<HWG%xhn-$(MSRgeAs{Sk7)ZQ2v;fy)RRb#D>IYrR`kg)zN*R!^uj
zFrDN(svu{9SCu^$_=&PS@6iH(1p|Gz)2izM;5Sq5(~R+^{kz%YM}__Em~4%Kx&JO_
zR(tHrF$mYo9v>L>cQwn$E6w_>>6Xkh3^{9-*J+&W{2l04uxFPLQ@O?-5d?JwkS)iW
zjo%FP7x+;bvsd`-{kgA|<m~g?{hvP2!yQfQq8$bhMVJV+RF78PQ3zxw@iIF^vd}Lo
z=xw1tiO$0pra3U7v4o5R<^*@4;-ao8&w%y=evq}kXT8k+Cba}gQ?SJ`s?7gg`{$x`
zE4>K%-D{KM7GVOGQSHHjU{#G<YHPW#O)u94VgFyp<t+C^6)S4zi8;$XXPS(~0ePSq
zEU?{2TW8DRKj_z#CEqLGwkCeiG)CDH7qI*Q9VXe};#>D;?fE72i6zE+$QvaijN3O(
ziaO8Ft`MwV2K|~J<P7?>t%`JiB+U&B`ncw06Kh5Z?hj_yt5$2yr*WDg84l~MtZN`7
zGidVv1mMTD*`?2Tg3*rg#iFv{_>;~Fl72QGDmx2b4s?90oA<06HNMK*FqQ^mdN);G
z$~$k_w2+T1lGJu$lqNSbY<fA5$gC!A^whZf9v+3;JEIz3=&mAG4Yy!xxUX3vTNSsG
zHqs%#sw^yL8GxbL9X0wvuB{5!R{qmTp3epnw)r}5-mQwZv#gyrL$XdBL&=81s)80E
zmid>&wZdsS2*(tap$XpQWwq()rT&iwg%L8F{d265Tn&kNlZ$lRD*0W+g^mjNg9h^C
zf&6<J`<Qcs9tkjmm1_*kPOx}v@<D5yi1YUfB3_7l{fb9(KRJtbcYM+EIkeP&bQPTL
z&9A32DFWu~5E~h*&KrvQX#1L8ey8aZTM0Lpl8;LhMQj$d{aKq8+@^4+R2i?7RTIf3
zkvBQ`ouc3Ns^$<1LJOa8p2bdm*(A3Crwa9Pj@3`B_xI;Cof&-ok!ns>{pdLs5l{C!
z%v865?U7p7Tvzq)zvq37iKZK7Irwxx(Lkr*5Ie2Z=iRJ1IpCl2$2et7QT3YEkNhQk
zP(QfN-BD+{W0ryV^KFK9;xqqg5G?_C?TFl>GcyC-0EwajBir?hSOcg^qe-^wMFgGH
zxzZmJhWT`kYO)YkX{<QhJmdL6;x-b;N<&=f?XT9DYYq8J&6_n75Wm}MR2`xN;3y?h
z=(8h*jo<w1NHyf*O0pT<o7IHQ{SqcIRB3*k#Pi&n<vImPl?F>w2Un(4#+mgxW6--<
zkl>3s`biIap0}A>eloN`PUlVY?NwIYFd4IsRZ5s_{&Eb^?RwgP8?UP>hM+1hEtYUi
zFAakk@VbcM$;qHL{dA<(@)LArUGT}ic~9h)p3kmadI11~LgAjzqMpx<LDu$Ei6Z@<
z9%D>Z#k4@>${#ZZzmgyb7K1MuRMqnt&!yM*L^kw%P7FRLx#`J#Qn)M^GhaI;#Iy!6
ze9j3zasRA~t>0!<9c?+0uT%L#ip`<X;Af&ic1qHQkZ&kpIH#pqmtUViNvrb?mt&b>
z1W#py$D1$OSDLL?=Y|v6YJomt3`jSRA9F96TW|@DyO!p!QcQl>(1GKouKC5P8Cz$7
zHUH$a%9`w~N=<5dk;ano_nq2EZT|OOGKMpKD>iNRSpBVE)_iumDr&F(Dy%;(?oY2a
za&BmQ^=U+$8)sv))Nk#FEdp!%l+z^cy8YIJRnQtymh`oQj+d~_!h5bvkIMWFAbDvm
zkLaK^S#IzOTRBrn277bdKNNs0h>5^EN~>(0@$at03xq(}H5@MouVgJaPbgp#Ai@9o
zSGTduXd`oo#@m6N(p>7z*I3i^WgJF&ONCbM=~75XGw1pQI|t(nfj7N*VF#P4y8<|s
z2lBuPM~;<wt{^}Om2}f8>AsZc3=O9Zqprgy-pBv-MVe?$n?0Msl<{V*R!i78{MtS^
z5U@iwbr;Qc7R*{mQnVr#IoNuDsq^j@&L?o%VhYb+;8_*Ekh?luoBUaI;_=^oqSjjy
zX(3x3x1T4tfA2g={#_<w(5Z7X?)qA19R5|8wvihjF)Q_+gqvPV$p6wCW`8er8$fju
z^vI=(hFr?)Bwx~v+0o}kCSP$sQ>SWM+>c3)bRob$<a(1=eC@9|-E3|N7e-oNB=En!
z2ct~`U%`fvwuLg!^2clv-LI?0?)uCqxYJJL+R_Dp7nq#P1g>>Uo~`Ks&EqhM8n8z@
z(+_IXOCk?|5C846cd`yx5)n`Mn^2R5sXGZsl?*o46=kN4yeQT~MgAut-dK=Zo*G;O
z4Xnj><v)HzxM10ONF=k>pMRe-TiJI2XqVcL8MP4uScm^>GJq_@&{#B6zv-m^`V;8S
z$WB>?{fCcZ%%qn#>pRT&$z;rF@?A}zNR2AMXGZaWf|EQLyk-`H%%1aEYE;)EL(*3D
zm`odR@>#_vw~xo+FSyHny8M~#Tcd7Arhp`~19g_}^=S|I-B&f_-|{bk`sL5KE6Bcm
zD@R-04!k6>mx~W&dbpM**e$JP<hNT|5Azi~Ui_B-rYRmzORf|K1%iz&_S|SlwLoTC
zD3is5wbSdW_*?Pq#?r`&$3K7SN3_Fi;*#KU`E5O$W2QTDF=A}+<5xy2J2(N-;jW~_
z?Mu7R5WDE&d#d6PszCf{!lx|-QS%NC5p6+4=62j~p@vusV2>?1yK%dl74TCHW|@&}
z6bNtA7wR~DyO4F=-LJs)IwHkpcISaQ7nRQ2sb<q~K63*~;v4M2QnvhM|Au8<-Ml2^
z+_H+1D8;&UKeSHMo9Om!>dq;^q^)6EkJx#DpStu?O)kh;W@(K>b4<HGuM~1I^kzHL
z+^nI(O-}ze_o+$A$n~HCu3RKAHj|P5CZC%c#`MI=?W7qJt!A3_hdj4a#{g1Ah{60K
zFEHH;x?c_Gpk+Ko<D?EZu+70BE{Ybb0l|><(zf|GtF_z(HG9`w-c*5LJN>xZMU;l`
zXp8yhnk+we7bjMvImYbnn0x9m@Aul>VZ4aa{(Nl5AWSXQ8BO@)yOYgz^~*Gsr_I&j
z+`N&!pRRlFJ@?bEv7z98x>SJRe!3q&ThryuswkR{ML2}g!l&N<z_drB3Phju#4qz{
z@ZkPlG3MwF=YSB)!iPWW<M*M_chSL3IC~_A-x6`I{|xDYibocM^E<8+7(;cxdV=ZC
zMnIu?X0~bP${LToxg|u#y?x<{m&|(yPV#6BqllYDw8O7G0vU%3q(F=N|3z<O6)@MR
zik!HmPIV}&zdeqb98Wl0$d#G`T9wG>|1%9Pwz~=!b8r4E9nQSykQ`)iv}e`LJ__Na
z+GNrWwgK4Z47#U_6L6nq%z*Aj0H&KcT+&?c-?Za>k**oaMDd_Dm@%c2j3zrcSmac=
ztBlZn&xi>p^)IQCp3R2-ll+?r&lLzDmGM(&kF=OO+b{Yn7(}|x=Wftd_9|=Z`89>4
zlRY<H`$btpv$#n|55g^vNKq<ia`3u@fDMl}3y3S;aBntRfou4#(nR7E4_Mgnvzpg@
zbwHNVX!~pf1<Qh&beo45{m=9-ee)D`6aO|@Jf)AF{4EZp=|CF$J|-Gg)UR`sRYw;+
zV8)kFi6vsA!KfJ{tz!@JPd->P`W@1cj7Hj7VKmac&`52>+iY#&ng@T{tZAoBgcGYH
z{u_fZ4%#(jdo}Mcc2pM|w)5(Xg7M}xK$ELk!rm-Jh(W6A{WQ=u)NLCqamR9ay>PuP
zKDIdf?O#E?9D4$@tkrSvI9nQD(0(i_D{QEObV7O&SaZb?@@d0B>K$GHXRlMd9`5Q-
zrd0&|&Mq;ISpskwLhVQ|EfGrDXywN<R%$m@%C~>wRXQAG;z=&0DhiTdP1!Jwc+G!t
zsP4O4i85gpkOGOaHJ&d~5~eGm%v|}9F^7g)$5VPz;_C2zj@g_@TwN4eOcM(dFL!57
zAT2OKB6n4f_-pA}RajxCinz&QT`mlP{<@YXALlH|oz(3{ep!KSCk6a8b@RAgW(&nM
z)$UtJ=g<gvAExo^^s>#?VRZ*8LvML$#cP~TZVNg0ua6&JK+~M+m!g#$vg!mn!v^;y
z|NC5l%RFWl?n}3b$fZXaUCbPWShD^7?#w4rBJ9;Cd3eMH!!C2Ky(qQIge#MYJ>B6S
z@jC-RXaEU|Ob>Q?b2JS*3tFUk+G&=RqGoLOW=+8q_Q~nr_BT8AzJWZVW;3PZSHS?$
zq;E2<{;jam?VmS?;wufy^r^tz%rXk`6j}0I0A>!@sR3%Jj&mTf9ui}h@kr6e2rrSF
z18cS3sm1<>_+laZY#0YEf%0o97|=G_dS>Kc)qC;1umzsI?xZjLo^v&?|H-q^czG65
z3!Md9f?@5K?oR(>8B}otc7Sy?WL?&Os-GdtAXghNMY}M_t4(6@1^~InW|Dboi|{yC
z4aiiR66Wp^4LdW!6CkE#0e@-{`kQ%bXhNNE7M!6z6ylL6uM74t|M&iA@Tdl>?+rhs
zKEt(dnCqmbQPN~Nze9sK{2?6Uq@2gEdgLC}-Qh?uT8Ze*FGlwlW7qckpnIF)10LMc
z{ud3jxJhjhTZG2Ji?RyX1KC=Xut2SAw_P?GC##Rs>%41pa-h4h5@Pz|>vi8SGGFI0
zf~Z=T_biqw!e13t;?jEh<ex(e1lGV}^%a$4&!)fB$_F&<3C<9#xD~^EM`6UoxEquj
z*0(?TOIR>#S(aoqu0X3>cO_JaQdxEh8CGTA*`I@>xJ2$=tShTRn*ZMW-JKha2n0LQ
zl`!dK&oiIdC#y#xnw4gz)nFqW!(xeTPCa@QbEuj1n*IpFB&z}5UNto2&!&RRC*o(j
zq?ONAb8BOw|F^;qG(<GXWM`H1Vl89*eb+Dxr5Cs8d)vL5k+Q6Gix%v=Gt+7J?17mK
z^uWNNVKKAgP65E})ZXwPJvG$E?bID`Po@A#7_^hit_c_#6BnXV=O2DJIBQK&JiWAh
zvIm)Zq0J*fDXud=^Cz31pvv7(M-78!z}-l$OYv6|)1$?K8k@bA$q97SSpSN0S$n3L
zz;4RxB`1bunG2e|5C)+yPi?jgUp$FhgLbW$dH;Fpvr;gSf9Bj}#v?C{o<lnV^2pSK
zao9}!;HnyHt~_$i7A|#$-30C>&|W<Z`*ij2%o@(7_B3LoX@usQpT1@4yc69MEfigp
zn%4_0_E;PGV~eWg+PVEP2(-HonN~z<&|cHfpwXF^S)lvf6M01bXX~_9&mL>atR$3M
zZ^~F%PNi*ltrhIxv~cbmlcu2D?uaqfx=VEqfIG(X_@T0O{A3>EwWeAw!~gsZ958a(
zd7O{Y2?W3JFNNDPTVAu_)BnwJ*5mc(d;C#}O?kg6@qrRQ=8pn}uM_wNe-!8rB1Z+`
zn}MzPYGt~CKdSip;P>A_rjayAnVt*^Pa&MSEr`4;_#GHzemlstD2Ts|RtxBS!utJN
z@cVA?d;FUQIM|;fF<`B$nIBmwyTrb?(ZblluNri%Et|PA`2At<J1O}6L-6||znOmp
zf!g4ASb)y?N_<CuzWSC0dsonviXa^2R|J?IAS)gGek(}-djPR4AlNs8_-yq9iSNDt
zulE4E?RE9DT;BFfyc3Uk-^0|@$W<)vUlsLw2#|Lr+he1@H@NBa+;aj^K*rpEFG38@
zFjpNm=3R9-JbTsQANR7s>hb8!3iFV_0W5KJ-7obOK5AVj>Rvc_d8s7fd1SQCds$Q8
zL7>k2>b#O6NVC2s8YZ)cP*~cA{cFh(H!tLw<_3<c@u|z{?e7+|SKVG+!fbO6$Kej_
zsOHH%iA6kAw|_+wB|;iWQ{*oq<X#%VRdq??lRox+NmH5sWi`OPI8w^J`MUJQk&<lP
z95#w^3-8rKxP@08#(95f-1`Rg*{Ax_V_N;g9~-DA@B79grDQD~9gB<z9;_v|oMtmM
zcNEUlL+b82KKR8oWico(^=BKf#TM+;qF!*HSSz^2z2P1qc^|;t6{sL;L-1`Xz)xip
z?^7RJck_Pq>n;CP*2=c0qi&Kx<IG5jcDhJ4R*g0O%%ONVxErp@?&sstzv)Qzl2?n5
zEHu6coYW#fb4elI<1Ib+-VP4Nuyj7Dbz^$)oJn&6|L1cNM8^O5O_F!U|M}Xce|O$9
zhxZNe0ifFD{N~-0H4av=$EoKMiv8crQ7ie%bg*e=_Fw76diDcoQEBEbfMxA}>0>Xx
z$#(L?2<pQD@Mkvvylno*$nXF0+(8AIIf0CL#r&?xyq@>l%fG$#|6c2UfVX|?1s*RC
z&*J65&Kr<cFDBQ=p!twI?+nR^=6qI-C^c1lVUUPL;`;C(uNE&-=FtUE5&7LlQU%TJ
zZs#pS{C%G|r~qgc?i#&ZnS75j#)ml99y<KJNUQ}}TC|*5zU@(QI2*#-P8h`TKeTI}
zs?e$dP0D|bxZ1?d?#2<dGk0!~U&rgj&ARV;EVnb%0-4!UMG`=9c1F#9vHzu`d8=r1
z%q#OldD%Eiv+oW4>}LHi?V{4@iT)kK=t}z7^&h}LCgOs_6rrSxHR95jMW)2$+Gw-?
z@XLfDv`IYBoIkrJGR4^WCC~kbe}<j^2EGD%`iY|k*hbP6)6QvND5F27otBG#XsqLV
zT{TPsBNmxxhpTvJGF&qx{c|0%O6=e=#Sn144YXi{{w60NU^qWYm9*@jQF+)%p2&KK
zbDTBh-Tq;u*CZi9e=3FF;^u^yE^0xVH$qP8O{NO%r<57wB|$EL$yk*>E9AcGom_}Z
z|7wkU?iOL@7`4T}mWf7?5^MTYuDRmb;PKMN<I@f1p$tTI+#7MIo+mAd>tKO7pmAH8
zLEvs)Ce_)$MgeG7l|3-k^mm(Us!6bXmp4>j$Ho$$xmw(sH(Gn_{r0}j5x>)kBEvXS
zI0*2ygE<J$E;r$^NOOXF)qS1WFMt>^aj|;I+JJ|d_NBdz-;al6Y6!L04)16@?@=zL
zAZfP2hm|j|Y4n2sCD@SNjGsL3KX|02=#(r)hlmhBnrP_z6cxCeh4|Kyc@#-CGH5di
z?U_pu#4C9?#YwG!@uA%X<ir9V&W<2up##vlokKw_m26*d=Z<lhJI^E8>aJ@Uvrj?O
z`|4f1lJz)GP^x!gS6(n5lKF(eki3+F2*@FZWno=^g*lI7xt8(J=lWpg^8LF-lfAYM
zwOlx*hYOo&&t!J#l4Yi=Y^c#c>hBzym9J48Ye*hOE1z<bgUB_rqI)MVQNN{##D{b<
z=6)E*DqLlnXNGoNdQ@6e=&YGEC$VF%#_@ExxiS{H#!22!0ikpXCr#ZUv)wHng|n5F
z>AhK1#YSHfnd~GUFxhAh-oXpUdP7EXN2}>!6+{Vm*MFge!3xkR;I&!BZI3#aiUBlj
zBmK#WmHy9~h<b4a2hJm<od;(7*Z8e`{y1uP{^%T?<&U2aA7B`3BK(mV8O(5D5xm$*
z9Y`30UtZRm;Hr&>8{whar{9h792oCo4HOn3;{(vtNghf;`Jy!+<<E2;x{E&K7Tyxa
zSXo>7JkzzI5?yo_7S=m!SNKIu8-$cnp0BF#_xUM0jU?s_vLPejNnX7-jA>;lOtHz$
zGR3p7M|OhUuq8Lamh8&}dpc@dcHR=PqGsbuqagVXiwOS@K<OD6nkGzLuac%{E4MF2
zmSptDbUy$ASxO<xA5EtLcOONxBt8p>ncoEE!~Su1QUUB=n$c^KLQiTRSR&dnz)(9D
znVcmu(2@rPeJu6&7MKA9bK|Le6SjhpJ@UlJKjUk1Gg8m@m;A~~JVagyk+(6ULm5WS
zA;U6J0*E$LmLYy0th{1mjk!#Ps_f16Iqs}9=LmA+@aon8St62=B(KqUAuKt^GEK$N
zdGaJV5|rsmv)ReZ96$(W34?|co!Kj2MgNfa;3QSZFS^4VS7D*dlsm!Q={r=V)H;{i
zLEkl*w<)fMO;P1QHTBCAaYldqS7$SYly}pZ#^d4M`;W?NNa}Viz4S)_O8vi*SL~JC
z4oqk!N%$M$DBQ&UVwUXO-R#aZVqWlPl4yHjnXzeZPp%V{ON)8Dsm*5`6!_J@>6d*9
zgSYXRSm;H!e>^baJc~ZDmN_3GaanHQ7>6I_ZJkGEM{?e!lDy9-QU>|O_-Sw4SK^nk
zGbD;rn>RBnVYljz!i8cb!JeF1m^WCQBsP$4f5~-l)E#_DN%#?mY-McxBe*l~!Wh)@
zB5-8lBjQZ|=rUBhW=p`#dU9bAXfwP2{<EinTV0_w?`lJ&%tQY)i>kbsU)Y$;d%^Ei
zelur@<}B&neucnv{wT0l5c#emH;^rhh3tDkJe!qxr#Z&Wn>ftCbzP<r)Q&NEIv}Hn
zvxrg<S`ZjK$XNbz=P1;r=USzwa=EyU0|NgH+b$OdqNl9As)z|;RY->>@TMgLM6FjC
z!SBW}4sEZm@g{_$i4WNx-ajZ2))gSOOdEe^IM-MpUPi6NTyDmA9B;LqCuQ58=(@^D
zeoqpm>vCMy^MMa{Cv_OW(qltWukgA=*HLUOn;awAvDe4SkmWNYrqa#J)A5o-_d(9s
z6^X7Zn*LlP_Xryi9{@mkw=iZnKfB8UZ|oOqy(V%}P4bz>epRiPMP%oz6Hlb0eWJW6
zJWIDf(ov3RjJnP{K?C3sBFvN>BcVCu4Otd<yI`sJ(&undW6V<VGv`#-f<PR3PFb;0
z*e}%*wuDOq*ckn@Z<kC^B=ZB_sjel`tZ;a~5k1G`YVfBlW@!Zs-3#TYP@?NFCwY(Q
zc$Jf?p%F0#JFllUM#}2kt>p-$Gb3^TZOp)sPc-s(CK!T-P_xc~8xy?W9x8u1GZP?z
ze5cz^N*gcv$N|ARnV+s-p4c(exo$n*QKRFV*N#A{lYE&tLo1zjcOMtElAMp}HXiqP
zK`5^<KR}Yvi_>HK7!_ls$dEaiXhgN}IJQr8IbDJ!Y*LviQ81>=Nor?f3~f4&UkyJ!
zR+S}^`*_ss$z)bBc9Gk_2_U57%M%|Cy{d1bt%Mdg9%ownA~lq6vYpA?MiEkX>00Wm
zsMGG_nKh(Nnv=`Cz`|#IJUYva4}S$#Wb-n#+9U@f;%~;sKB3IZ!Aw>rlGMl3jnL)v
zn-F>5rC0IvA=h8Gp9J-=D9doPyW~rZYQmFqigD9)*00TZ8u23ftYuf-t{uE`f6*hg
z%>q6gz@5Jb54P7%>Q&-9-&`cjcD5ldml%cGF4)>KXVYr&O8SsUX1@aeshJ47i|M}q
z)d@ygWxh$vdM3}juk3jB1|<BlMAyKpz7}^sEPrNBddM$A&xF=pQ5;XKD0EkPp&)t4
z%pJGgcH7V^H*o6a0B-<N=cYCu+j**UYj1rg-l3+#1y8d$P4E9nXum9{<_Yz@PnIx+
zePR`b{hRiem}lWxq~mLq<!y=a;n1o%i~4YyEAPEqOfh70$LHR+?Ok7*`g*Oed*C0E
z55Ft!hEzpqDDX32T6@Qd`xQ`NFbx{qzX=_>3Psd5s_}_jLSv`N+$W-{h#f-qA^n^3
z;itzVwzCzO@nMP_1AGDP-Tz^fAJ)H#C(UyGPmeFkd<Qz3Qr{o0Qu&3xK>6a#L6o=H
z>*c?qH@?m<_`>w*-9Kca=^r%e>EDGX{1^CJ`IXPYpZ{s_Hy{6n@wX*&ZWe#TOaBM_
zb!86zBKSL`d*3h0-@Wmd?O#zo{tl&oIX3$|{+o5!XW?&4fWKbw?;rDp@z>RZzswO|
z2!H$L@vqxu-i!|h?`QDeE1&$2_{;XMI3Ir-M*kQ18(Z>O_{$22Uhsbe{5_7}UHX4s
zmi_+t)!hnxf$<yuV*EGv<NpzV+5VN}<L?d*x_n{&>vQOy@#p4&xB7vVf56`({(8&5
za1Z}|A3^(H%fF&M;LjUhYUYp9K<@84pLpYoOnOl+z1W0{bKw#bE(yZB%y)b7&f0%7
z|A78H{M<0~zrg<$hwmBxJ@Zd5`Z~b>g80vye;zCTAMpPL=bu+T{2%!@D?fY9Kc~{t
zFU-FqKXd-c%9md7pE~dh<1bHsx~A0U&fmMpk72p#rx!o%!f$iC{zv>}``2rJaA@fl
z#@~Owko@cg|AqrT1An{pKPNv=+P%>KJNbG3_Wu!oSpnB;et2sC{{nx1{UY)c@Okp#
zRN#NX@tY?<2bxl!%YVJ)@1EsnZ~6D%%FkW+_mvO6F#i9atPd`yzFy-Ab}#JD`lHVt
z^!JMV`Em0h{|$Y~yyx{nQJ|mof`6g&h3Q+|Ge6$8uS)%w^er*-qnVZ6k^e*a(#*@O
zOilU9|D}9c=61?|%K9X+xy-yUp0!^mHkTSl;yvM#%-1N|6E4mi*ehI=8PF>n&TMCy
zJjaeBo}V@IcSUYK51VjyJ^A0x|GVoGWd>eZ0AKdJTDEr06W_VV(eaBpqX?tYV9X$4
zvtGtv>Tn_~p00}w)*(~kW7vEL$6UW<`rv}b3+v?PKfTxW4}`GS4d752I~Qx4rbNAS
zipWzN8qd>mjg{pu?;;;+8K5!uZ5_GRfp3gTanE?ytmhr@3yZGUfZ1X&halpi8XVYe
zYwTO&9!(U-Qdbw}nJ++IQtiahDp;6yd39nn`|ojYc_}M?9cGiyAU>8C<-$tuz24lk
z^;5>*XRZGYhjkp2Kkg3ewVnXmG8*(+p9gFuRO~9B;@+tYy{@Rc#hWrX?p0!_h`C&X
z5Jt<oH|E}BH}==CkcWHAn0pl$thQl*POJu-Tk;SS=Uy<^Qfu8$;_d)%e6h^2r(x@f
zr6*z%no*?7{`u`a$s6%C_FtW3C&=__>XpBk{Mw=QrpM#>x9%mMIIn)Ftm$8_^-je2
z&lb?zKhhbJZo6IkcLJtd*1>S#e|in^UQL;x|CNd?^io0Jg+H?JN7T|-TY*d2Ty56`
zwUq$HztGlJn%f&*VN0B2<BcoWetxY&>?b#<$Or;lr7P0QM7Zqg!k-$0(-tcsZJD<F
zbmzP;fy}Q-v*VObm3H1G{+b@ol%fj>nVlVTG>{B!iWzxAa?Jf+DQAEh4-m(4r^V7H
zcU}bgJb0z9iGPBXw%@zcc|D!C%h$%!^^;kzV&1)sJ6rI(VxMvL8KB=bQYOaT@g?5u
zB1l7?mCioni-gRhvZOLD6h0N7BcRu&#&UJqcC+$_1_frfJ-E+DhnJNJJ$sSHflB#f
z$RTx!E!M{-b&<_RY`xs%ZOKJ!G!fIM*yLwyNSk+X$!Z&_vY`cpyqXHO(q>pzD9bh-
zo4;xAp}OyAGrMF~1I>AW%PgF-T<e~+nJ!j5ndBS7AFn_!^ylOS@<5$4BoymG&$7-X
zJ%-5OsF-#;ip*#;6lJu%-Z%u1$hLr@(F>p{<<tHC)tIB_m#_I8dXC?iN6-P*ze+&Q
zExqaK3$33vK6az$_b=NsJ&z|1dKzHaAsNtfq)l3%Bi~^rV){gj(EV&EAYVTlDzj<Z
zIV%9-N^B@Yh{s*j{A&Sb30h>^&Ib2x^n8T;IePxug5oMmCo=w{uBL#VHz__neWNAl
zl?v^G{p`3j9&qyMS+r+*76l^|7ZQ7>=RQ+&^gQM2&!eZGN6+zL>)a(EXqPZDA~!&{
z<OrIt8fEd5H$HFs!Jg@PIcd<-z{+AQpyx$4X=9F_r<sW9lP#61ZK%P9j<q4}A2T?=
zW<$YqZbJ!qH6^|2S-fX@X1<?C&%Y6XH89urrsrzKr>Fatp7$uUCwi)L`SdK_Gd+s~
zdKP~cJ)=L)(ev8o&!gv-e0mmHFFux@+GEI*w?+<rq4D|H<UP}KE@{xy0Lx-5pyw}a
zk{P;&N;6GFR=iHNp<uLLVnbDyp6A$5Fj{K~c{QcI=~=R8dJZLjZhU_HJwwluUFrG0
z;?vW&Sb9FM(4Oe2&gIjyWY6?03Fuk!S@itzk8<?<3sb2Gw#WH%d{;g_i@n(r{=xV(
z?nZjXr*;Jcq~xvVKV^J=IBC!H{5xsT)4<w=o-1vV8M=m^51NSS&6Z}rwV`0N-fTm0
zn>O2qg3<aDLV+&TBX0v;>eJ+HE%|fw9AQEAs7!&pjVL}nz01<Gze0PWr#hEU&(dD>
z%+rUU=4AAtA3@DcS$)XgT_1As9bD^vEPd!rrqY0(b6O<G5^Zs)wL)>c=!#yHRfz%`
z7BQcjj0U3@ULwlmPRi5=!C;I;3F?MUgGK_!<up?%cfF;$T~B<<dBlN~lWI{!gZy_c
zwpG;U21IZk@!uo}I%ofIenD3HF6dS96>s$I(J#1#aZDUXO6TbErKRq@lq3{T_jVf!
zWO3StifzsrCN$axu28_;uxzrLbru0zTVfOQ=qFuGzqGmPNZ>@~vRjqw7!@&kQI-t6
zX95DO?|rjxW`J~Rv1swJn?7VHiaxX{s}BXBdi0@3evqT*0ZgTzN6+zg3JnO_g<c(u
zfuDcZ_Nl@4WL6Liur`&T@LeT*@7+Vq3Q;p3-@BbJt)yg*p2GsDJujUG^xQ9iZ`Lf!
zdg#eO`y6_{cu_t*pRl2To=a^gpy&N26wvc-1+w%^5fCXDr@iTUjS@Ii>|2VSuR>;^
z=97W*4=P-dDQBT#^&|tVbMc(s^h6&r^ps1jJ<>BXIY-ZNOr@VoPdkNLda{h2F~!nv
z<^S0(1*7qyAQ&i^zay9%K28rg89tEnGwJz#istB97l5tWb$nI_6|m@Vl6mxG<?%W6
z94Pp?@%hn26AI|L$%X=YZZM&Mp3f+drRRJCA_41`-t_#F5}@Z6OV6|l?TMaMyU??2
zH+rHE8G51*?U|lKzn7!ul}x3dOHVt62IG@=Q)V<<f^NOg_9+;yuLZ$ixIRlz1g+m?
zd|H#j(OLQODf0F<O6KT!O#n5%D?O(M@Xh$oqbKA4bLd$q_&ItWX+r@$53!+uo{k9x
z^z5TRmY#21VEc~P=uOXmDgk<SS$ZxdxJP=%ccEtm^vo_inVZ}T!%P%=t2hr)1ok`D
zn?Jc&`p*vRJF-ED7R-VJ%!xen-YF;Zj1?p9zTh7p)Gq*Yvi2uG)EL%@6|;U#yi;tR
z9cOYK?C(u>XoeG~)x|b{++8U9S<8&69J8H)7>s+jwCD%x-qg6)2NPiCzP`j(aa4V6
z)8sSa>Ej#v983e>(-PXW%Aeh(lkl`Fp168)LF0ZcS5GNu+AHpUrvjG&Wq$YwYVCL3
zhX)mKw*5#B@}-a89}qfX=%3dguK?EmR|F2`l(*4r<Qtvq-uP%ChjBXB<=eA_zY-25
z4l`GG;v6Hywt0tbF%IhXLb8~?Bu$hzTgJjVud1|;{)5YHjg#Wu4Pj$3>@Tirp})p}
zSo!4Cy=6~)Iun2T?Re#rSA1ZTE8C|YkT0Kbbg%UGD?Y&UGxn%w9-+#DxKs1Exno}!
zYLgzr#Vp;<(ygKWhg$rV;GCzanZ6GV34M)p{?zT@Einz0m9$I)Wn42STCIfi{ka&%
zd9Z0^{@RG}H?GUz??ibfIsP97JULw=zhWS-xaSxc^U3NGF++CzaYpl>h7Vlc?R8gm
zKDF53bcsLpYuv>=v;f<d`w=)T1*andoL&Y_xgeB2c0R8o`B!gwKe%JH?g|a8{a@th
zSDedVbX#<SiuBwq<dw5`{mc7v=vjT>Huuc8-q!)>uy-;-WmLr60s|l1E$jHjKmd)2
zC^b|~hqXwZb*`ZI>dgRpQ+n?CtNivO?D4X%KWvY)#`(4Lp0UokAKB|O$Cw5lRY3zy
z1lMk*)X_-1eq0(3S{(Sc@I%V&R+pHpT&N^Vsm<cQ`D2q*MpT83YOjuRaW-DiQC-KJ
z+bu1Z<7jI#+a6Mj)@0t~S9s3esq$u&*>2tU9V<ynZ1C3vB{ngqG+r7gsDUk|#WZ#I
z`!e6BNKRhX1>kxNDuF&zZ4#_6`9W%4rkt2LrlHVTlT%UWb4LD@^%_5=yz<+@Wq08T
zn=d;A7H5c@4zV`N1`hV-E=6?LmpKc$SIJQR#-zlKs>Vwuag-I#<#Z~1IK=Rfle$F(
zdH3hsRg3yDh;#ZTMFw2?O!}m4lM){ucjaRQ!}c_|5y_9l6PpW-q-wmt$c4e3_gFd$
zK3ut<>fV<(7v2sfb`)PVNWlYWK;wbB$UMnCBiwrOp!Vu7g))~yCHn0w<la;{ZaF^u
zt~35AXWa9hFZs<8v3{Wc=I)QWABc9(8DnoLju!fbeE8fO(CY#zK1iO#qe;Zz#eKus
zr_ZD3^4-p(Dek|7BZEh9B>xAEBOx2_@!88KJ);zxw8c&-BNa+T&yQXZz0k_NNr^F$
z{hiqxAB3G2GN#h|zr7#L_-^4Wo|0g{KqDkv3yK(GoBby{<d}fDA@k^Y0vWU{=Dv%?
ze%IzWsmrA<+6r#!so-Dv6$pIi9X<M(vrrK~%h6B1SHkAnTF?@W`^|n04dI4WD6=nB
z*d`W6I^Qs*<=VOPB~#FRKIL!!%AkT^e=Hckfm9z8NT6#(>+Nwik$5A5Bcm0^Fq8|0
z^!94}N#4YpoB<88DEDtX5Xp0yF3${(XusnkcsJ_4&0TVQIq`~~o@8KN!C_!i-}b(t
zTJ~`!@T5s{F+flD3RmDJ3^v-xZdKyMqn(uQ*J%<?_xtc`9FZNI<(K4RjjNpnQ`iGq
zS;*=&<Zc~3vhnRjM+^Ju{r{%CBQ3|~O&WQh&VrLD+d<itA$RR)hr2BlP4Yfh%jklp
ze!NNCSV$j3QQRiRD$gx+es($-RcmAJxrJ(R>J(8i+a6-W>GOlzcJ!~-8!=S(?GD9A
z$0RPnI-J)5&Ei&s8caYa%BfpVPDnkbyAx0OA(D0xz{5421R^9!J3*<A@-LBG$UMU4
zNe5mk`PccVfB0cmMBjHmqPd5E*pJlPY<5`^b>Gj<H*q_%?37c-jg5*4YzlH?twd~F
zBB1&xH6Lz<5rv+ax`&{6s$^24Yd<F`ePxp3f2Qp8ZrN&$H6|G(mR^hkf)Qphanc3_
ziv`d?YuZPUihvYu{E6T-o~x^IMgC6=klr_h|EUTRy>19wD#PogI5jTdmUc~HrrDAP
zI;b^e0P38d%U7Js*ZIpF{WRkjdwWBJ%e9xvTUp!>xQ;6ux*vdNEL{*t6`Jlbt@;y;
zIh`-=3p}A7n)kYNV*sQuhnbrIrT!#uAX;iu_|XDsIyB`UeQ@K!RpUd>WY=qdT4|1T
z+glK*2zUDzA8N_B&tL2et6$A$<!$ZbMgrpLN$$9^mKlemCGG?DTduyepy|6UGrmOl
z0b18G<G_NZzUXi9MN7wC{l-6TT8;zVQwPVl|BJT^ezduk4RO7ge4yUL`TjF4zq}QY
z<BFVx<A=nDKb`Q4FMaIdxO+-5WZ))985OjTE7wVgf*yEv-q?w?+c$m&yb@<&baL(R
zb-=5+wC&<LcU-9js0S12M#!``S+BO_HPiXbR`#cn;rvF11@p?Q+Q*fJGW~k!od@vL
z;?IOQj&_bO$p>khIs4l{!$Z(lbU$E%8W~y(mP(C_nCy5beGqPVX4<rH29GF)PQ)Le
za;vr5Y04F67V+&Yi2gwFpYUyTQ{Zh?eBS)G-HuLdbY}8nrxVj@<5}A1F$VDb{ft@<
zfzM;dk}<=PF=l<z&tG$zWJgxwEF`q7#4zn<|5r-N+DhA^j6owZqTYq!XeF=jItdvZ
z<>`L)eOqy*^(t4qKA>!YKM_N<-0q-XSxI&wplaO__SIfJ<;#ODV$wW$!)&-*HJ{`S
zEA^j}+1g!$8-wg9Vweo}!@y<yXdUF%kf8(L2i&`9+sNpt33KBg+3X+QYWx)RDkyll
zf~<Wy^kk46spU!+duJ4@^c%AW8Z|GB)|>YX@CcsYd)G;wBjP4{9e7|RxJfRxk5Cd9
zwwC_Uj>A>_=C6OU_qDiw6;HGmNt`~5ryS<b2C3r3&VsYQp&ML9iT{M01<#=A6$W!^
zED|qo^Xs?@Yxo45I}7&XHc#?tK5Lu>mqn^-l1!XeOJqQ$GSMLFX@NzkLLs@IypP<=
zML`McGJlD&H=7${t1OWoJyl3QFH%M+xfKpnag+N5a$C(D?-(;p(fxn=iqxz+-8t)P
zb!}v7MI2QQ+|eaIhpo`OR2KKnTh|3KE2{@P$$tYHAKm1UWEXTCM|_Lwa^5I_AXkDF
ze%DLy8^@y+tVHD6s7!@4ORy9fbDbqrh1Mb5=a-tS>Ejr4<;6ebP@${Qk$<dX%!Tc!
zyQXy?(?Xeh7$;T1II(j6Q|ul0o+5+<_T}ppu!f>w1I_5~VLw5F<Q<^nx%HeCwy;VA
zXKwOT#h&>!N4Ul{42Dd#8QRQ0G_&&|;K5VbH?Q}(1pff%MaHmzWEhm$_R6bNks%2u
zGm8DWvLL%_<bk9Y=l_HF9Os)MqjvzjZ{`>uRG(wUO=psEBLa$~ISP(gQCs<H(=Tw-
zm@21<T<aaf%<&r2Lgs${^z?_vjWb<&@+nJP|DpA)Cac34-E8$26x-SAsXy3J@>cNs
zj`>}axtm|xzwCH1lC6}}cMEmI!ZVM??7HOr1m_@J)`b6M)6%;W<p1-2_P41qF}=Aj
z7uiUbI>{2j*eSfeiHf7yZ!po@aOnyQMiZ+;(aP0M!ssP<9VM>DeG8ei0~X{3$;VVv
zY95doa!vc%QgSRtq2$kr=D9LEnl7u$DQ_G6Qwi`uwrb#7C_Fr0kcY2CV&av2RJ-vx
z@~r_|@%g4q0K{dUaszgjUO=BTNA(@1?oHG%w@qVQt?Y_{Tywcom-bth3QGk|-{`Fm
zI;pL?q-hrAxn+yRL(B9N3Y_G-l=9}9JverBp3w0xd!aEsW-jmwCe=FEuJ&7H)b{2}
z?7J_?Jq;tTBkmSP{J+e?Fo2pe4!`8K4{GY2yEL_BdVPr24&9V^<K@Jf3ynB9)Z8AG
zIB-YI%ohP!Ys7oc@5vfbsY-iUBOoWp^0%CXvZUifjH8%$#$frp=3LxpJW8DZ;(nL{
z)KMm+0hxYevUu?73&}M!v4b_lJ8-sHR^Y3YPs1;P!fXXy%sUsHW479)fv}W6bBt*9
zCmECUXn964D*Pl`Qs<8Ds2;2u1Fs=1eC9Y*%-Mw7N5gAzZ=`o+IJK>5sL`i1WCET2
z%4|CjTn%t{Q)A{BqI$+(0Kq&vKGHh{W_40gatKhei`p$9ZfIw|uJ(F0&GOKk>`xup
z(V}T2^$4l9Gq+*$=AFQIXe|$LU8o;-6)y%h9b?mfBAYla=17ng#&o!;RvrGm;yO|)
zseT(V<?p~wYYLLtKi-tx|4ANq(Av`Q(W|wxNf}o%{`oCPBQpjNBw`LTdV)^seIx%%
z)D*Bg=0h5t8O<MvY1cd6w86T<yN>F4i6BdIR-fue<~i<d26UgVR)X@NQ@=B&Wz#8o
zYddvkT*7tkMl$Z&sjsS2TB?xQpKQwR|6@9Z7d>UqO^uostpwoytsUG<k5A|5&OkOJ
zG1ZSwz!QZ|>Pgy|*~T9*;9vf%m7-4*w%Gqj7Gw`r3o!rDcwwHNT2>pRfiQl*K@wC>
z>UI1ZWd3fP9IVMac(*luEeL*}3w~eZ7hAN&pFNMdEjUIeQ)5RMZ$pwwan8nKT(N8Z
zI(JEAJ(0EU3mxOD_{d)F=Zs^=_##@--7&sI@$IH$X~%e@pxA-rr&h`fY+tiEdn1|R
zUVRtOot<8n9<i>j(r^5Ju038&S8ZYw<~JvK9v)HHPvIn5SepuFeBu-O7`^{>s8Ku(
zFJ{IGBX8OL;lB|u1+x1B!T$PcWvV=~=?*Smck#FlwHH<)lh=f4jlY1@<>CH(U4K64
zPRDVPTTrET_ERj+4`kcd-Us=*5|wN07Lpk-W4p|6<;telYs~HZFBvHvV?b!aUqh-?
zVDF5g(Ps>4I%}rn)eL9$wRdgpcK@*mw9RmbL{@C-!?H*oE1dCu`kMWz@ss$9xBB{@
zfCFy`8vRsc@Cr@O2ea730_~)R>w}l2-Ajkqfj5)9MmIo%&nX88?MH}5H_+&-Awx&4
zH!6~^7cdy55<hc|6lysGbI-sseg+keScw81su}&m@YJhnz5d>`;#0hc&v<i>qT%uo
zpZL~Mj(ISZ6)3it$_5=Bx15!y^yhs#3s^F9mDt#3c8;!eQeS8G;FfvQ8&t09-0EW0
zc*W1`{N2&kT>5?ZrNTdqHCMECJhr8_DM8fUHmZ=Q$wAad*ni{Rk!0-WEU1y?W-!0S
z(y8xd4vMx8z^Acjhl|)^6ES`eF$L!HoB@>UPyTpfONh^K%hEX{pbA~dPs`GI3N-FV
zegmt0yc4n+_ikC*X3~mCTfrC6t^JPKco5a3nh66;?P%tAua@Z(nTu!BZ`^{kj~~bi
zWZ_yucq|xL-iAlzHUd;eT?LJMd8t3~n~QDB#;&%pt4&@FO_NuK5cy;_v2#ppRh(x&
z`Qk;>sCA>0yn$p5poE@$N!@{*U^}GB?_SYu79SPxJUU_(fc|CxmB4ESjYH|nVSLf%
zkow))?+E80^{h|JQaKzd;E)M#I`Y+1Rq7;yElZ~Wrhpx8UN_?_?v*B{%bm{!CXh6e
zB~Pj59Y8sek`T&MstrHXu;8(C@*feAb?JUb)(vH#JrjLIBB*>*tyk6}O=mRY51$Tm
z((#aVm$fZp_AY4pPptB>YX>Jf@B{IYlQ^6#@Ef+f;>0IaO>6W>ZmXymlaufx*;#w)
zWOn*4Z7Yt4I1j&8FGw^EYMCx}NRrK1m3Uk@=DrG74~h+cvT~<0>s}DlUK1+lsF9As
z`o1|_)zXdEziAZV3l%kFzBY%N1}5HR*1n4pHI+{|$s05Yq^Fgzvvbclc6M6U%ESJf
zW{;`ynd~ml+c8ZDXRz9uT4LtYHU8+w@fz~zZ_ugdNX0a<qauFMCtDZ_qZs#`X~tSR
zIN~pjs_@`QW+jt^<YeX*yqmyy-vfp2En=I@Pnep73wHye3g@Efs|)2jWJHW<yCkL^
zJ-b<l+#)*c*W#x%hWWol&J#u?+hSUi#+(|``1_AKI0<<&B$By7dQQuXLh$!x>L`CK
z>fT^#EF#21d*U_e5gCs#gQYBUiZBBAf-u?s;N&v@>i2nMi$~fl%Z>m?TCY{vDg2cx
z_3ub|bRLkYGx%f`=pWFoTulZD`*kXlSXBj{Ppx4NXWl*bA4dDEsI0+#Lnl7NjTa83
z988M5J~WiKJyJsB*!X<!KDuPiF{~h>j_#Jlcq${hNTXyz=*3?40B1ocJ!M^D=fErX
zO;1^#cymKyXFq55hvZDO4~nMaA6rilPo>%$2gYZ1chl7?zXMl=+G3R}n%;`yt7}5#
z6OG@gO=Loy4^Hq#u;*~>GjX}B*zBLew2EX)-A+%V32|ofU%w7Uv(k@VW(IU>8tIu1
zQs9rx{jG{v`|Rs=10y>+Z!GU#)<Sdqt^XXz!m2UqFM3#AKK9g@!A%r3?tteMg9XAE
zYB&35UvItZfuF@_EO`Vt??ebd^mFj5T}Mkj(=!Qvl%&kwYROM&iCEugL1Vp9KTYhM
z;oP9*7J318n{}OolQ=QEMG;umodw~liYJ@ii4R}r))b-{xW*|_vy$y_Ir|=l%W3do
z=5N3cB9Evha*QGu5_wX3)KBr3(HD61Xl!E4Jq1ngvCb|!DP8z`5zdSnEVo*G7yHSx
z`mu<s(<08q@&1rm0?F53iGNQMbLCk@qt6=BbYXTz-*y`_`Z^HKjDBWh1aAfpf1b*4
zbv?d4J%)#`KQ=S^kpO0}j8HY~XgDdkR>L$G?6M9!K@3b1uRaf9!VcTH{rA{~g--Uj
zR{OpQFyJ(}1GSn79-F#Z%;^b50Qkrk&M7kV#%OQXJ&Uii*hoO9UU)o|I808EEcynI
z1ylR322*M2j$RY`mJuWV-@CSSXD*;mAnd0{IXBfHuY9?lw*}vbQt-u96g-oH{_-%c
zE{_8bvXDJ|D?;f*{wVN+AhJF9T^Ia@ZYR^*zsmD>bhf+g440MZJ6KurY-1I=_)~ag
z%b1RWCLC&GcFNn#Jj5`{Y98A;mt$~VT?bu_p~oUJN}?{7?#8uU{@n{LN0u<@H4c;X
z7$!qp*dMr9edbFeX}RG90{BpwQZux`pSBd^RLf5IfXG_+#hRgbTyBddUh5O{4vi*O
zqL%iyZ<ad?`s4Gaa#d3`{C4Or_D^R)U4IlHHl`jQJ$QCgN%EPdcWPH`#3|l+eZ&5j
z$3U1bgYMk=hVjn~wW6p71@pI-7cz!LME>-#3#&9n;mlS3ajQY)d*BuB8Ro7!UJsKv
zv&#V1`3L{21E9>uB<9&$X1-H_z|F&QGEzzeH{M{)1}Wf|{Z4`qQxk_tP)Ko%nYNGY
zm?{}N{)7cgQQq&&%RAb?n6Lynnv6)@U`5(^QlhI*V;TB-({Z-#N2%@UW5=0h<7KP{
z*c;4i1Vw(+Dmri<ybxsz6qiKvQOyN&;OKt%y1~CtB+)fv#wKUk77kc^i0c&phQ;sW
z5VQFuw|b&7Zu}NHzIS;+v}LJrkkdG<Ha%auR6M;{s!+UgXX8MB$3l5bznu42-y!2V
zl9`V(_{oj7EQ$CwczF<Pkzi;X%5;*9%;dX0ks-q9J_%_jDsrpxILRW4)YA1k31V42
zQ-JEcQlzpJolAH%Ep8;e;^S^I(!#HbHz=a<D^ZG`$EVO9Av3liJnA?L+Cpt)PAan+
zF&XI6yl75PzFyU9Ih2ev@Tn@nDqvCv717{iWESai3ThN2V>MkCA<F-SBqdt{kI4Nb
zUVN&{mL0D6tBHpJ>LHG-7k56u;9}boQzt!aS+tfQ9eRN`8Sx)mLX3{*6g2Jaojfsp
z+J}i9eVki}k9n6)bQZMA&t)`y)+eoK21>f_sR2YJKI!iyN6|dK201q+P6nove0*Qv
zUlSPt^!Iqhjn5K3rxF`aS69%J7U~Jbbh&}{6;peaFkPVrp?M%7Dkl^<$)T_fvRSt!
zD{4|0J>ol}mH%)O_mQne9$~MKwD4(6;EWpy^sr2@(IpI(?#=_Py`To}Fv?+jI5zt7
zqN)EUsd$n%<T!7vkefUnrMaf^ld0Sp9F(Z6a+1$#ohVz;SNMn~KJIQ@a*{XdP5Bn1
zt_=bPHUqkus_=yw_W#LC8>--nJFxOa%2d!vJ;eNI7#W4z@5f^s)y<Mki-bF(WY%h}
z{u114`p%k=N3LM?2I67$2dL7rx-&n^>YK?tS%`9yVUnYXrOh_9!<2z-Ny8QP+%@~5
zP2)iq1GLe%?XbNP<G1;$bAM+Bw_Vojo+#X@vE`p3!#M!~lB_HWvUsznP=(6PBL$Rf
z@#l3&5?^o1dHW=G9PcD2(F3&f&LZq{NXJ4GxdrB7oAsTTw|FCEW1|<p&QH@t(V5*l
z%_4dyc&c$fF{|h(Yv|bUF5x*^xhBRsx;lN$@z^WuLi*teG|%(2PO5eBk_VPEfRD?5
z*3Czqn^0QJy-#(REh@i^GTu$5zx1>&eYLhb!WeUxlBK}^Ka!2jooRugVm5o@-ovI_
zc74r6Tod+xayj$xO{V+1!8jxzhS?HFm;>WZD(Hbx>>n!_iH*c+D!)-5aqmX8xQ<nN
z-0OKEu%G|pvFd8i1A+bg4q~`3jC<yGR`Ux*dS}*Gz+tpyc^928XzV|Uqgb43!2aF<
z!&S9T-A|t1_9kNXw~3I<sos~+E%I{OddB`N8BF4X1Wn=)W!<R6>I1bSLvZ=Ol(;=q
z)jI6}1&a*iX+x`$Ty9pxK7wr0ixn)j=?CZ1hv(7{vVtM`S7Mxn)8dod#c$JYK8yI&
zs)5ga`Rvc9tO*0!6Z#A}3#Sg5<UXY9228cY>WkPj4w&TL*hjH#iq%&LY^<fl1&y^l
zwX}{ema!d{y^(ed8Z-bSYJ-LIAyRHo4~zWvzuJW}M*s^D#2OH8LMD2;HG2weZcS*=
zD%5I10}0`*xwthkNbxPp*Q56rG}028_0*Cr*$5q(R0Jy<E9hrqrYzunLxLn3iEk&F
zrv@v;d4**XI{1O}Uwu@^3by;>_)Sc!LgQY2quN}}_767SdREeCpbsc+kzko}%#C&F
z-`+`3<GGdJtlVPSaf9G2ehL1RA4JPW6?RfM%T=h$hIW9oK!`udr(OVg%daynddq+K
zkq^3CruC;#oy}HN(D>t)X#)xx5BCyU6dHqe`!BYVtFWMP@0Mx(3L4F{_E+M9S-!<q
z6r$g}f)R7Q_ib}ZOnmYgW`ZbBE)&8w)#pF^GJkI(N60Ij<0h2XtDczf`zAJi;@oWK
zT1b2*YxP-_)F;~R#a|LFw~#pwWu+kH87dYR6Fqaa^r$>Tg&3vqhfeB56y=U;-qa8=
z-twa(QSQzoPAZ{YR!F1w2gX<u-GJ{@6F+=yd_`9u-cDqeY3+knU6cNiQ9jEie0LLz
zn0x)(R<Pb4jp6}ZC$WL`yILlmi(#Zy?AVUjypQ=U$gCjM$Z;c{o-}$J^PSm<+WL;n
z1DgHZHaz!fQ6KhyT`p0<mvJ?VzY4xl1z;*;wM*X=X#uWQc&Fb*v)8kT&_o>K`Jw*p
zW+G>tImyjTg29koLjR4X;I)jAJkUl(o$%Y$C#T^g8laKom84^F-$1qlZxXYjBc`WK
zj(bzW{txN8V1+dAgY<#~$8w$IJTdU6=?F%@NNq3+mc&E~7)9n)!Wt*6H0dbn=p%j5
zq8Ei|gJ5R4UIS;-GP`Ifj;9|sL!r+7kKZs>C=UdzaE0x`NwxyjKOf)hX8D%+2|?aT
zK@-gM-6mU0Y74`b>Dk~9JI38@Qk^d^$P5REQs1^vIqKU4^scCfoL`sNG0>SE)_dH`
z@wKRbL+jl3^2hS+3%q*ZVy+53hJnhN_3{vyz&nL0w7pQSQPZbcAVXDk<x^9i&OAa6
z+OnRyXiJ%f25mXOwB?e543D*S!xHuJ^aJb6u$h)syvS~8?|+}Cv!onmKIWyLAhV=L
zHUreE@MGCbk1JF4L{WQoQmRqQ@<3X=ILErPUxS9H<Ww`s<=w2wM)1F0Ycnr#CxF`%
zRs0P}?V1ODbVpHc6s&!ir=dwa#T!wgYxdKzX*F9@&@)Gyoq)+UwAzO1ZD@fF1xBNJ
zHWVBP{*?`t*qqnfP;iXqS{p)b(80YagqEpAGPRtcq?}WOOHd_IqgXDjBi(&S-3S&<
z75;jbE%Ee{$VQU<CxU<^jK3@h6p-D2&;*hZ%_BkCV*l4cWJynCi9b7ttRNCSSyauI
zDDw|`NVO#+@tzV@em^3`xsY!Jd>|Au(>3s;vWWfj_$5QVdwt|$K8cxVf22hcd6^AO
z;m2>j9owYv;P0#!`*Ws)_R3Om^gP+>%#n?UZFh$SF(n#Mrq6?d7#5cgM@+}N{-8mJ
z$WhTMKNAE?6s-4OBB%*Ty;QC;MNf{l@*IQz?q6-mD#bPX8wm0|o9&q8rKq!yozu{x
zOp@u{jdvPgHwq6X$4&G`rjlTyk=SRd;)w#yZ^~tqgp@5-kZ5L&m;8H?#;>_nfdAg@
z{%IS9_{H@a*6uccmgwN+t7T;)g7qpoeJi<I6Hy>b(?0=FR8(cEP0mFXsPTR;K=|6_
zYHm|q#wE^d1MM^|^`?**^B!u}kNewe_=%>+g@RJGc;a^xN{f35<vhhL+)`8dmXjC@
z7{o!`B+>Mfyh3gOR`_3S>!XGwfBQ=<$KMIn1v5-d<;P6}Cuk(@K;~vE9Q}|gY)VIG
z?zD>e8YQ}09%U5FF!Ku5u-NebBru1qbH=Y6n;uhE8`#4R9&4WYh<gvIVP@*7bywg%
zpRzIcKQNL2aQ$5dDNJ$xx8BsW#h3D850h=XjzyfYN{9WIzb>RIDE`j;iw4obD$zH+
z_)gQ$GXDq$jFG+VJb+iL=hE-uIdK`ilUlJRu9c1YXG9@E<um!J!f0YeNi>nU2w&Ly
zI<u#e#Qwk?Z|+-g(szfr@zCSlui5D?b$}*v4q=zTkRwFPG9o^8a$+JIVJ0%MQ|4Q|
zD5sfJbLEJF%u`GX9Y*bdLP$XEUWd%2(lU+H@yW4FFC9jQQRzUh$&4UYqM5F)B|7f4
zgvBRF_)(8yq`R4k2oB2JOE!7&X6kFjS(BJ`^`ERI`B}YNmOl3GzBc;LHafWpf(EvP
zKAHPXo--zEz_wBi$_;7y3i)G3qZRB!J$7QaDVu@isV3JTUx6Rt{m0C!!3090ZwQpj
z?icEPNX?FaB2RXepE)p4HwrS>(}hI_aj)<|nf;ni9P(e?dW{*~FT3x36+KhgM2TtS
z%$ztI+jG~TrXzbMqWYh1RlX6*$FIhjex<Rq8v^+fT?3rtRHAW=>?HeQoZwJ0E_-NN
z<~ive=y4T(2wPh`{m^<!f&W%Y`zJhad%;-FDfnYaK%ZZlQ}8)4Zz95G?ZFZtrU<zA
zOgAAh>@2KiWs^9?ezM+4)Y(rKHi>%s$!aEXy8SHXQ(dOmL42OgC+m)sSidzfo{&)C
zqScb2KN)IlhMReDx}f#O+90&fgia!~ZFQ*egqFoB$)Gs?=T;-<^bFH?V)0tQqNyDK
z77~jQ8VU?Ffz>wfG3xp}79Jm?1}3IW9OR_fT_CSSCwUR(-I<0o>v&EwTP}}TbvtuC
zNfW$FM9!_aah3{w!M%n{lVgm=|8mT|y-PG2fQxhnxlnEdFw2(`zFFhI+T#9pP8cGC
z1>&PW?<$7xJpzeA%7bZZEy+9pI5QM8jZk<`W4ENB6*E43QX$M_uHHmeH&IL=v!YWn
z;N<>Ty{g#ANUf&tfq0lf%dMiD;zGoy1JA)6FWyhA6C$Ysj;Lr)JV&SiH{%UX;!@hl
zUWV0>A5u2N_eOI=0ts=R$1_JqVP29Pf0}A-*-&PbiY1mB{TT--@HbYBiz8t(h>Ss_
zzWgzMFN=)e?^<IZt4kk0`Rn+vb1wQD|JQK+=0z@~u6Kr?7pdyypUN&Myi^&jsq;py
z)pp4Q?+BT6k7{bJb6;a6Hsok|!pl1pkoURk-HoPL^0B73TNX=z!+vuxfyHrqA7)9!
z-{|O+x^aa|REdU6Nwm_$IH}W8cA1zt8JR&!J#9WSQe~`I(t6Nn+5m|vvsypNhy<oH
z{HDkQ{Q4<u&bl?n4C5Bnco&4xj($yogt0jhb}y<xjr-~ZwulPLLFbzs@Y`#~zvaEK
z*Li2RYeITRGU|;?k6WJT!ukGU3cCNPYS}r(N%rF#d<-xSy_0}e=h{LQSTWyc{MA)<
zHSwy6W<MF!xF=KRJ|A;`ZPs{NrOcs#|5Kw^*nnwp!Y%?~fkMGo`9#HGoN;5JZOwUq
zz);SfxwYu={@sJxM8M(~b6FB4BQ4-s20J6drkT8tnY_xxNmp$4R2O8rm0$mClc_D2
zX=2O;BF4ZV(>!G=CsR3NBpG>tAkQMW6}AObCEoLklwn&A$Yi%nncD&wYn5eFC0QOb
zmm}1eDYh-^f-LL#Wro?vPl3OZtnKtzQdN1I1<Vg}ZsFIzlN^fdB7o78%m!KNy5_2Q
zdP-rU8BHKLC=6>H+5#Y>RdE4?)?=CcPhEN<$D11?4cbIha-gSA^kcxTabK6B(hx+V
z6u#zP_U(Z%5XV@@05ewkaO8R_cV=A&xs5U_4bkHNwV2EFs&-aT231SQgo!~P6-kW^
z(@3MkE(s!r5D^>w(C^6Dbbd}5`^~H#Wo*xS*o_q+!+S{NM5j^{Q!%lRKF;Bz&h?ar
zaw+gu-FGMx!&<3UqVDU_l?K@u^$3ix;h#VTBT*W(O=;CRnK#wLoOzRR?4Q-3E<PNw
zRqP68`!{>Qu<O(VM@*Opr`X>sfHRMT-J5fNFE}MVa4c$d!@%sFmilYXvF%y(sc^p6
z3l76ZYO4Ar#?EU`g+D!jv-VTr9NG&`RS%rD-f-gnu>qX*p9<%N<MQ!SPh$j%_Gn<_
zwWq<~boM}F&D%%<oTg!5R!%Io8#wwG@~_W<QhA?rU1ppNzw3pR9EPT3PkHg&0Z+XT
z=`Xp3fprT&HFk3F#^k|UVn&+aF&6XTA#&grvz`aufF5vL?V?TMugq||Se}(zZWU)D
z#rEzVmvH`LUlwQE%I(5^VGyJ4*_hu4F+!M)xiN?lDQwKlAVx&CF+U1o#6C9W{2*pd
zF6QJQrX?3sX<}sgJBF{!QD%M6uMh6Kb-y6Je;1CZIqG1}MC>F{hQMw7#wxcv$zh1I
zs8^mo8^aE-<n2Y!ZF6r*N+ygRGSf+Z#1zE|C-#iPvC0k3tZ9@Crq9N&=fnr=Kn*oC
zBxj!%Y3_M)q(zHgJ-Akk=(~a0Gou@gf&5Ffmn1ZGJxLz-KbaHMcnix~X_)je#Juh#
zHJ#~Fb6|~$9U^NC3w4X9V}oE|k2xX;R@u}8gJ58h2?xOvoBH7}3o5Y5ylsN^Vs$_N
zpM(ON%v=6)0$C0+HjZ>X8rN0U{Q1`xwsa@%6X`-`LBzvOzhbc{UYqErzF~PLOEt$#
zeg3ro)Et3Gx6`C#v?O@uL=3IyZ6jdC-PaJuq8p;0nza~4H}Xg+y^FO~CWDeo(mchb
z7gq&I*OBBU;)FPm!*i%6fqSn_hqfo;YB6VLQ`AJ6s|tPpdG$oOS*NpPI^4pXLquSY
z$m+q%o-!th5~X00*nIb{y71hCtw|ztty$w4<As0gWxRrQ1`&Y{`v-B3%&q8KNbTvx
z%(*QzhN%!;!)VSq6*l>Hb{TKxNn?0!roCoj>{+}w_=lUC>mm)AU%*o`Q!<&Zj6eHY
zoC6%szKchP#^4M=#<0U#G~w9&@HuW~*H!*Ef6M8CcV}+xenj^6&Q*_;>Su{yxc?t*
zZvr1xb@uU3B!Qsd1O$zWHEOIuu_Ue7L{T#)ff*fY+^O1%)nZW8h)Jb_5}1kP_Bxe{
zb*oma+FH@Kwzhzv5CjsSY7y(c#g%&vN?gG;|L^adJ4=Fn-}nFdzyBz6?>+nSoM$`F
zdCtOOP0?Xpl=~fp{*kOBimXVn+Z|T$UBjK!1poPy;S9|d?~~iDq)|wTcCUpo3;B1D
z3P8zcRn$V-Pt#p^co{{q==CnYOPejd-iwR4N62~j7BV0XibrE+Tln(k+^plTb?ljE
zq(MzmUdytKF!&pNvokcXEpY>{ybW(lEY#c58VPwf^6Jmf1>n?N?!CV^0GYBZgV%C^
z4KDVcBiMf*FffzB&lszM_h))03<blbym`C7!_f-Nb7sy&h~@cq@O(FTdcpI(e$TDJ
z_XokVj;Fu-)wYm(ud>evg6G4*b9wMw9XvaE`lkdRd(E<$4hWv-1<#9v=i$Nghrx3<
zp8hYdv6<eSZJ$rk0)Jc(n0`JLME3mBCi+{_KJVx0|J?+x^WU0d1Ap9NpHqV8g~9XE
z;JI(`JTQ0;=of!^P)Xc`uk(Ka_-J6~5pMjyaGoAh8tWwmTlRwmr8;7RBJ1BeSu^{O
zEJ<ezW}jXjRsvD?u@(W4ixnp>mFwBJ8(*3}uh6rX#YS1r1<kuf6UM)Y++TR*Z`s)`
zqNizkZ5>a4b-FGXeooDhiT{|O8PiM4V$PFl#;5mUS@XV5T#u_Cr8Tz28xBs2rjSE$
zBXY(C#*Ij^!jHP!sFHP?G-oZ*Awr*{F4pEczIXMHXabO0Bq@Z8TLUY%BWbz0hIxy(
zFV<HvsPljB=HQ^4a$k{eT8i(Q#M;WVbA~nE#5Zk6Pfgg-K8xo9YsbN8Kg$_RIm4l~
zY$<rR{bQhMQlVRpBbWWdOFOVV2(`iIp43CJr1GQAOK1PYe;R7AU}ZryE^fAD&r4*z
zcjpXZdEY_QQF%t@p?flexZA#V5TCq1JBY*1&ko|Jcl|emSUKri2l2y^8boY0ws_Ay
zf}Tm&T5s|G$?JbVo{x}EL@Z}K!*sknJ)W4*d7pOK5j`5&LGXJ#PYb_iAh0ei-a8aI
zT|SfLyy^vbzsksIdflX-H?g@OvS9Q+IJXK<|M#g1^hiBLFCRry3)Tyy3xpXJ@&$7P
zcXv&}%+kH#L#`Rxz*D4zL-f;8HBA3!c=TzdC3qfGqO*w%k2bcB(>vsbSw*zdgoday
zvD}@%3<OD@PNGVrr(TTgq7$I*s)vX%-pq1U59#xu2WCw$Zymw-a2~Xn_Ib1Uh`EoM
zyy-*I|FnF_<u+=OiZ%N|QwWH-twQOlc_=l@TR7R<2$GG_)CC-%_@UvC)=;|UX%SDG
z{Qy(mqef$DL&7E`!$XCF&nY(c!#z|TG+32!{xj`QF>n<t28^P2_E+-=`7-BSZ|6gN
z8QZ(L=UofDg+WBHVv~GA7gvhU^e!}UwpWP{@Z<dre!LHaNwf`{Of=&llBcG94v%U)
z={z=5L-p<c<TU=lIP6XKO#8kXZpPo_Ot&x?{|{|cg9<g{-(>?PX9E6Z0`4eNKx*V)
zzuXQO48T=Z5w4!Xtw+<Y#KpRy`xX+=V6jDN@RK}kgNv0@4c^ILn%Y}wtDQzIYHw6S
z6Sr+J8T++2LKL-xf?B?SQMa}15I<#3@>gf(D`z|g2jv&3{H@r`08l1Nzw+O(QE8!O
zpdlDVBz{5VGeX&r_8_Fdd%$K|wo{Tc=Ud=8Hc3M!&rBOok_oub281#JXV`!q0ic<h
zIs)jsM}S6HXIO3DyOhNAy)V4x_Mf~Nc-UHG`fsxJ@4t=Oq!LY~n{0r=HhsGvB*_kl
zz}jZ|oz1i;6Ywh=AiIh_gLuaR6Y?^5K>}2%kw4pE+^|{L@)?T6;xc{#uhBeW?j0>b
z`VyP|_)l}vuQBN>mA>gGLdI!x5^Q8=VSG@q)hlKYI6#+~Mk0&^6m()`rHaQcV`JD1
zbpXt*Kj16{Fd%^Rn|MbAoGwH0%bH3{C^xwWxYk|KNX=1vZH0#&79Ms*AXzP-B;uwh
z&J5@r8&IDKxYPzzX99j=1JrQ}zjK%nc}<zk9Z{V8rQL#+mHJ3)S8gI@y03ni6twId
z)4mJTzKgN-E$A9<+GyJ0)D(q>o!t{2c91P}>+YtF*(SYg1F}upXamYKZG6NA6x%j_
zS!CLX!whZd-=R2c+r3XZ^FyX_K%RFcq5e^@15=H^)?)uf8QsWZo4*bV9s9PAghz$-
znLdVoriMO7I^IPH{O8Ec`wkl5N3gc#y^G27$1yzto$_x*2$CvU_mgl;d}3u&0q$0+
z8Mm#v3<S>@<4e8E5JSWeu571R@9CjPyNZH|A+23cSZ|yBg*o|g;#Hn0<FGzur23Yj
z`io5dqQ3ddGWomBmSegNlXlKuZ1NZP&0mtqzqn8Sp*!a<G5JgS=Fg77#eMQWIi$}R
zsQqOoe_7xBGI6(KcvzqOsh#teoBZW{^A~3FceB@-or6jJ^GD7EfcIw|M9vVSvR-VE
z<&|)=n8OI2uGp90RKJX-RxQ#}#(QJuL}4BAL<Q&UD=^LH;3gMTbWXfe;o)KPr$BTS
zU8m^IiGNWrNgn5YX$Y2pB#k7=<&j{Fr?0_F52!}}!8QGf)a|6|?U?wCO6ekwoD*B7
zhPSoz?D3vkAhvadu%x$<cSS@~i-l^#!xHU0v`mT~VklB8N`Pzc9_8pvXw~V@YT-K*
z!f^T{N-H#YjRvosW;;`XUjBhv*CU7CD!w^kXb(a(={i)`!baY_YFo$pAh&JQ3PbHX
z6E6gz)Z}GfwdV9ksOWI;D&!cv3T^6-ZY?9Nciq|@>eFN`uua#SK8fMbAHj=wrKrYq
zNT)HfFp-^!mTah&eGn?{FnGO%SGC9Myx9~iCNqdymVQmFEi&j)4(M<<;9q*>hrOuU
z{iQtpo?qyr(_do5@OA!R0#SJQzmYh;l}P^|{6ukoSV~NmiTSp-^!-Wh{C3*FL2aGZ
zWIG7G_9<n(Z>I4{$HYr?ihkFYImd*WkLL@O)AcRnh^OW+pffFVriGjj<Kf!&m^&=)
zo>Gp<@NmMxYl4=j^9`=dBH8lH72o(>O_$HD!z2~h$DAJF<lSLouzHh&)7~!5H@c6g
zHt6l<nCR!Am@;7821BO^b3f3;zYQnFxULP_j;m!wWIK!v{s`{(8nH|B!N?4p#Ig4a
zKcX6KO_9W0K`An<YE*gS=9_|4yiP=nBLApenmHq!$)D&f>RxW`(IjW4eq)MbJH%KQ
z{*~4^LrS3x?vPSrmcr;t<if`*O7~)aHfxWLDU<2yAl0q--Yz>HZNz9WhS5aZuFQC;
zKKGZ6)M*k0b=Ij)IUb~1xq>XqR82if*uS1^d1_U5yzuwhXRDU)1%2eFzV|up*Y>}@
zzb*Iv+syr-Tn}jFb~BH?e;BR-|KHuee8YT`IJkXzOl~7{=081YO|Brp+|(T0-#m}X
z%>8V^{mV>1W`0vT17+?vrh&_LK_vizZDAN${br@6@3-EMMg%cAmFB!sYjD4HZvRsg
zcYNFZ#=Up_zv=(A{~!BLWx4&|E2saN`QiG@bobNzMG?c~Ow8VoT4=sA_otmv=1$<~
zPjA!Vad(jObj%&H-ieG!?C2HW%oS((tDX9?Xy=475un6n>H8C%i6cnU{EBlXu1#|y
z-HD^BCKk__>6-YaX`+}ITFTY2yB9$IxH;jZi@Xx6OIQKD^@zuutQ8(*&hWzkT0;gr
zg2i~Omel@cnXpog?`Ex7IU+=K2QMF|bxF>O_P|Z*8u>r&1ONZi`uLyX`@zqv$^SL{
z{NLPvNPT_QcNRYXPs$(q|8w~dCjPJ652(9yrU)`P+NDeEEIx|5GtJf&XnQMaPT&e>
z+G`8fFu#8O6<Pf%cggk5U-F;w;~_Z6|H_PPexn(N=|(zs&MgZ3kC&jD3-F?ty>`h%
zINQ*}`NFW3Vhd4_QFV!${)?!4La}>1pniFE2UZ|a_pgP92;+ka$JMNe+Big0$C=Fb
ziHufdLKz7b0gH*RU>QVHk0`TOfvBRBw{-t1Qwyn}Fa+%6_IyGf+?&-zYtiN4zsMQt
zVHskH>7hKVOJI?wUG$Dq7pQ+-5*t$mKQ_|i7xC1U#smI(+ea{^JI6?C)9GZ9dpy(h
zKXnqFE=Od|+D37h?j-%-t6wMMlIQ3oMD;3DOCVljNVc*}IN@U0>TH7-Sox}-KX)aR
zfZ!cV;*3aU^rzpNz9gM~_y1k`hIIPZIJ(xi{AHm~5v&vBWP8lnQ1y7sZ7dE?c--No
zx<pP|M)!zUI(~gLeEcSSJmK;4qnK0AU5^`@21FeEk1%1dOq!(FfW{(YSqo^4FlM|_
zX9WIamiJ(qiF#H}9gL|h<2XVU?NpWqsxQ8jLqz#A*XeG%?GTl7S@|<Zg81OCjK205
zqN#s$(MfN=NqBD7rUF>m3t{PGoxH6i&V6hOq!*Pw@PpyPGibGqsR{7#53%dgAk*X3
zX}bj-iZ5Fr_OES(If0G2!iUDAt#Pii&ASUTc05henKHPK0dZ8$_^0ldUP|`Yac;(5
zMw$1QR^^yYHLSS;Z^}35HMH5mXY&}T*mX!f-)>nP#8^aiLj5NUaJ5aBIBsmX^$3WJ
zcQ9GIpY*QTAhr8C|HDfy+x}Vb+~+d;y^-(!>nZEHY3^33q}(}$>_(IZTRK>A5r#KP
zp^4`;Qdn_p?BeU1C%rpSC~NpL4&q_<2lOo;?yIP62)w}Kc^Kk-D1Eaz|9Te~A?}X5
z#N8uQ@p8`kHvUJ=4C;DOcDYadD?1xHKICk{S+qC)HVqjQ$}ksdn1_`1p+Eh{Tf<46
zIeSN6e3j2cZ)*=kO6-B?p!VD+>nUHDQ_?S5Cnls(FX3U7qn|SURO%<{N&hX8(mkS7
z7awTyfEx@IF;XIrH-55lFgb!YOg=c&6AB#@T0~LFUlFOXsA8En%@B9ZwpT}f-dJZ7
zzh-)88uV%)V*+iKv%SdC=ad$P=RI%i491tPU=TwVc1o23BYVwO7HH}?T&6kA*_ui7
zovfDX7PDzo*xe$in`sMr`AZcvz7(&)_nPv%@AeMqw7WTPPZt=i@w<cPkW0+2P9OYy
zrp7kr1P+M7*4jH;+X6@(5r9-v=}b9Qz{eUb)4)gd)WFxLU;0jkMw*MG`i#DJkhI$F
z$T1EAzWW29!wB}Ll{Q+l%Lec9Gt9{Ulu?cbBVVnNUrr@v5}FReOJmb_qL`M3n)YJP
z4oR)<=i1fp^?v&%huGJ2AG841X<p?!1JOD+jqvWgbzsOXPkggWb7flI!PzEbXGnX2
zcjp%xJElK70~dp<S`2YA9^f_SQH0M2FW4iLZ4|`n0s^Ap+D&XJR`lIcbY4`0lD0uN
zs6ERT%h5`>bvi5G_zJX}jL&*=*4cS-FV5^=Moy1e$M^F6i!0f=TW_KNImq(?yI<ry
ziI4lloXMORn@@uOy9F`}^*8gBoNwnzE5yu{Jq%_iYo<5ybWK+C$vJ>{3j01W9WtQD
zH{GWmH_wpEq$p>h11KM1APS$gv=~TN&#W#ud;b;VowM$6-{!m!XM;91GI2hb$5?bv
zV`ww=-eu_SbDU}>=aB9jyu~+b&Y70u`%cSFYi)GU0$T%nU2J}j9M?NMWNrZP2T+Th
zr?uYmYwSFQFWPDSaGkJDk^GUBo!;o@BuX9bS3~&c8PIfY%heoYy*#mFZ1e1u`E=N<
z(Fk^?V==bkyPy3qo`5>)@<Z{wj=0k~`bF%1QX~p_pZu+-*PT=}`bB3_QS<Lvq1?_a
zR!aqcm@T+_Re&!DZ}Kw9szZtO=vB|dBKgWSs{E+tM|l*EZT`nfEX6}B*q;e?Cnzt%
z#nOo#-)lN9vE#VrL8KWnw&}!JYGxrk!H~Fvd$|+NmDzlLDF}TCt1OXf+(kHJ^}D<H
zlAnV5P0r>H<D_qe`t2V`<kSTb9R4_)5?!w+cAVaP5w(pl?>}nZllNltUemlQxkrs{
zI-T~!QjK8fp6)$^asz(>9Ai!nq`<@%W928PM`vhRVr?IRX;X~_=?49mbohq9!Fu=a
z{+)cTp))0!&RqS|+|F=WvdIsVY&&!*pMB}$sjSF$y2FahH_$B0uw?{Pw71ORY-+3S
zFMuCwnR7WG|HX$pzYO5eF4!WzTIR^n?oH<H60qBKyhT%YN{8CAY6`!hrs*xKW}27t
z-J56g;x4^_U(1iVtCZ5a>34&n#)dRE9pf##aiIMY+*>zFePAC*!X>pWAT{!$uZD-b
zcV5*&6$*&7ESs##n!lTtTWohS7%|)`?HFsNom6M9iMR`N*d&@_JIRz7bC;<}&_3f{
zr^x%_o=n@C&x5lbrL|i0Sw{<pKPY1Ld(1znE3@b{oCL#w<6Bq_t+SZbgGN4h>pr%}
z&U4-`Z_5<ODF>o+RXwH+-jaoVM!==GJ|iGXt4YfAs(EVABl+r1jlA$nS%Gz)?LYa7
zCcKtG$H9oRK9>V{6IeJVR4tMudY*WboxZ1dX?f!kXQMjg*U`4Q8{6$@RQgBq>D|6+
zaLAw$a~FYqn{J>gNqZPb#LJF}V_;CXwRnF?e1f$Zt5$bK<;IU9zO&K0e&_ga-S2U}
zKxPWIJYe9Lnd_j~vMHxR@3xO~WeDpJ^cyji5iVPCK0P&#xe;bUbKeaWGGKj-h2r>F
znJE*v#^wtA1WiGk+S_yp4tL{K>%)l;)p74&<Poq^-rntrCkH3GzADJiXR{rL8L`C5
z_3Cjr*~M>g5&))<wV3Y}>}sga?sK6!tuHh99A}2pleEENL_F(M)=+aj4pZ`)Pe^>u
z0qo1EFXsNVnhZ?{6tBx`TaojWBp6$0^?AF5bni>^59Mn`9B95NFc*Geu4xrSpw@X)
z{>BF}6leC<7dvYvpJgD|vRO?ZSymxyL=$c`c9A)TNx`i#Eov#{>IrP^^8=%|PAjcn
zCe$c9cah3AHSVy7cUD^G@Ym8>TK)CmS^ZqhF^x{lw~A{yH+cY<s(9J|F)(M~S5=H#
zg<hOxZ6PVA(41Gw5A@s3+47^QiTE$OR?`*K;l~ZkR>S=J8+gr>8tH_@t4lBYuM)n%
zjD9S2lk(Dn{T><~(ggQz3I^ItfM&w17TqsKs`<AK59LnEx3(`=f1jF&{al~+J-}Y7
zk+V`0OZr9qhA3~uqZq=Q{nTyc{vbjEdoi<}Fo!G~ou?<ck>c3s9r3EwajZzg6Q0(k
zYe#A^L|T4X25u6)=5=(axiXe_GIr0KB|{I7RjuD!tG4ps0;?&m)x9=3aXH};_m^Yh
z0JK4#2uWxp%#ayLd;j{6z{-Gc9K2a##cjA~)n#-S5j3e3-0XH=m!8$wfL~GocRdLa
zBL13lu~Kso#>&Af<QMl#d{;dbS|+4#3Pa(c6v#oQNBCC<bo`(2(?{P4DRVZraEh&Y
zWHj$gG$b3Ec5#Lotw9T;A^cUQTk%veRpzJ-PB}@Pfy7wdk~^YQ{vt=j^6HBt4kkHL
zK-5YB!N`?m@tr8U=!A7#7IVJVEl^LuTYYNyVQqgTKF_P$yEig-ODObBC^8q+ASb<_
z=S|xCvj}L5z}Q?U$}UVe>#&Y<RUacPI3Gm9HP3T&9~H6lIGjsCwCb5Fc5z<9JgaG+
z2qKj38_=+MH~;7(I85FmPCn=8pN)=wrg@2FrZR5U1Aaue_VtygB3KN5mc2%)5mY=G
zG&(+zrVu{xsSHx#=rIc?>aef>e4Fm;<NmeF%Dk6v8WiHbq}Gqk;Le%?zVvv-UcUzY
zTTQi*St~x{ICXe5N4ONuv?B!Tvs$0!daL(7I@?Me-&ZZuK&I8lheOc;z*F?F8ej(T
zoc!L|-2H|P2JxukPOYbkDN%RUWP(t@UGXBbhgsggSM&V>*KyR;PYr+hl2S$q`6n?O
zsq)lvqE3u{90^}Dh&N6_>UH;)Ib%XiQ&Hosm#EFjebjQwA#=X^-eF7v&S)eH<g9mz
zV+|QH9c~qJVdNWw>lQNias|pHW3*{lXzi1`G4|g^KEm-Rs(IWDL$vDY;PNw<ZHLs*
z>4ys&@4}`UhCA!StvdVQ7F^Y)yZoBw*$WQ$XG$x2y_3&^>z~%HVKX?->d6=zQG~Go
ziZv+MXZ|2Lctj0_rS6$!4g`0v-x7qk)Mx#})A-mKVdkHpeF)0gZ_A8K@6+t$zGu)Z
z_(S(CZX)1C0=zSq4hBD(`g8pG8NJ%%9MNz(qAGed_sT+azA3zdI3Gd$zUQxJ4Ercu
za>pCr%+4;Td-C1LR}8^e2^8;9dvx^nXred&n%5FneKofE1s4uvHNH5TU+)X=IPVPD
z@ASsl>zM3#?{Ll@7uZ_Ny0<|-eefI2oAp(f9I0td=^hyPNU0J^m<KuyqY5M{pv(p|
zu^gkE>n0yDqiEp?^7K~5Iao0wC7k1vZ;%-N!n+TnX<Qu!wJ(>|{RwV9&q{9^XO3z3
zaQR=GRP{+XDW8wr`_lZ3xu!(gDKI7aK-QzB_*guDa+Ou}m0R-P{2t^VmE=(Mi^eHk
z35}^it8EMh)A;yX>@TZK-r&BGQTkBkzV?@e-X28Ie!)Mw(zF(FCa^y_Z7+pJ0($8$
z1SE9NPK!ne2eJ4^f4`~39E3N@rwuqdGjf;Qlsv$P8K`JtU16+hYx7e&$1n<jEjuxF
z#386E@Y7&UY20v65ARK-W&S&YxwrmqW!|&SwmPI5o(quQ&It66R{7XR3~Hl2Lg%Zb
z!UAuV7_F?m3zDnGxJo4AJmu{pg}QtAL07`+F{LF^NCx*jin$B7P6IY@<O6~{mp8*G
zdhek44i1W<JqF|RXYiLmrP_S)64i_M2x)B!lLPAsrL0#ylfBzBkzhHH>1jFz3)%;P
zDnSEhCob37iJ4M#X`jB=n|AgtFtBSS!TnTV%j`|DP;stjC$rvu*7K?9Q;KSUV?qEN
zxvb5%z{lPyC4C>wS6gh6)qUZk!239e2mtbJ^EsX2WAY97ZZ;wPG>YNY{WJ+yt61xF
zr9ml6Z#zQ=F=(PHB`bB3hMOj|`sirLJLw870xA*6*E-u+t*s&N^Pdws+LOr5u(1?Y
zXud(bEf)ryF2)S9&#0ylbFg#}FK)regpe#|8w##?+drPcU7(i<yrkC;wN=L53rb6>
zIF25kXFR<Eu;tLJ)aiKw6>snF0GWmo#!L5S@|NSAgMdo!q1W<)iE2F)5YCyXCGYl`
zs6X+UJ5k4Q>wvv+fVE=p8(=-9kC^?E)G~!et_gYP1SK&)!9~QueV?ZW5yAY_noouf
z2K$22{r%@?kmXO$?Gc|bw{r@^;62uiZ!d?VznJyE?)9EOKppT8GKpKL55VwkysSwm
zPSJx+wB_m@FYWr@Ta8Ltyv*=`wikM<-ch&3f@z_#5E#EPzC?w{qxrC^{wlG?pFd<*
z`kiOmm3}?X41bSYTIdgACoqTph`&Ki`L$VIhSN!GZRo?|aQydqtxOGB$SX6t?)@sR
z2(E!mFJBH#h#SGfc!`%!nqbl9lP6fTWyWi#x8=)xqqN5(HH^y_<`Bd-Wk&47A%S-Y
zjuV_U=p!%JoL90Mo6pf(V2HZxZ9DsLuiCcxv-w2Nm_f7Q*57NW6Kfl?ig%;_tv0K@
zQbLY2WG%;yjf8(&m+wubi0(Vgd<uDRekLjh+3&_uR~LGZG-=hOq339lG6hA)>=z0x
zYI^7x%2~w4g9UlZ$5P_TbNIn6nlj@26;le%VUEz{g*frJk($QO=Fs4Gg@#V~OMsBi
zu+uc7-}4B*r*fa{+^r8$CWv`dpr5+kxT54%+02aSrI<t^E`M!0W@_SSh_mEU%Li6q
z1Bk_h^<c>uS<WTgT3|7WO3&VBjE6(X{fG%|^NV@G6=aD!{}bMv`J?!CC(ab&yoA@p
z4t(KDm4$nf>XT#c%xbGZN-fw#k&(8RVZ?b~p1zA%u?x+mwz{1*e61`RgBxnY*PhRZ
zZmA8oO4ijZYg)s}6ZK_pt1a|8w!nY^_x?CSE#JoSnsUmgI$Z0FBoJ54cK!_Y7xwc`
zeoJy~&PG!?%@P@ysb>_A5G{J)Pwygj`qTRY`)YQa>^_rrKPKy^!8;VaI12S2H11(x
zm}7imIZC8ByhQ~#H<m8qX)ic?^cb@XqCK#gSq)h;G{t&(ups;{o;KBWus>Ztng#7W
zLy)h#yaGP4vqi&CPka6Aa_~iXsrW0%e>vACj%+%J>pC&~qyLC-r@?EDKUqf>d3$6e
zZJH|i6p~I9Zf0srhx<(w=yg6|LGggoEGQlpJipJ=FymSNmMJOoFU-o@lIGaja3|Ia
zEMA}v5lMGW)E)|;S7Y`UNh`^o5Ba={&Zg<(D}3nuO0++He1-_^R_Y44t0_~7%7Q|3
z`Q4!W?@@k{9n4!*e&#fa8`M@p)4WTA+R8Gut+IK39z+<FGFVjAKZPK@tT8orKd(;t
zve)e+PiOkiu4+?lntRNSm)TDZ?sMEX+p14r4|qB;sxR=7Y0y&<AheLi+RD)fQt(fM
zYRuRk_ig7b_Rp4mtBOmH?`%E{=}RBBF!$-$9yStZdZ>G;g-ZRO64H0SKk*G0h8_r}
zkRkL*J7Uh45$8k0G_tMr^!t(1xH#|hn$+~eL#M`5`K!B213p$q*X3{p@exg-SD1Kz
zmq_A$RIJjcOPYiPw@0e{8LzRQz5bo4;cM179>kxQc<EQ!@q<1_oDPWuC!|Ik;2u@$
zo|0c%wf>4Rlk#4v11U$UdS{$i$ND3*Hxj;~v##nn9&76gzv8yvs*h%TkL=M@{)gNc
zGVd~GueR#6(yzh^>7BX8E9#Wjr1Fo9RIQ$|A4I!*0T`P-n$`GAuyu6@c00&LKK`K~
z?(1Xj9(AdcWwxD<@3IlA<#S>He#P)R`T?EO?IWo%tGmY;JXMEKI`6LZK)9rP56SEO
zLUPwZ#_I}$++Q#>!o-ZmrgsRt1_}L|XUrvAt62Al5&?g(3AQ`Bx{DJlN8n3)V68iq
zo^QTlbUg2cTDPpOYTb-@t=pJiSM_fAhW5HDkHJ`1Tj*&pKABNLW^7BCsJg1v;du>a
zJl+Z?&M>2~XVfXGNu72$_t|Zp@g4ZX?%yon8Z2sJJk|x3X-CS)vpxQ3a-|ti$SXW(
zbttPS0V~a!(np%5zn==u&Q9+=8~Y<X3XMAh+s9rqSR%^>aD(8fP}&+9+}!RJnDH3y
zCqw6(zYmQsvNS$DPcE)TsY8~w9W{qz9#1(XY$dN-kyp)0(3SWf6te5|2h>|+*K-nd
zHhVrSv8~wuAsq|g7($3C4qjB6PGA1c>9>ts_K%~7?_aT@uh5)>kHSkoVn<}!XVah|
zc^`$B_N?~!s-M7DkMrE>cZ>2mBF+(o#u;nX=QB2$LCeW6{aeLn44c(2MIF&Y7?Mw7
zW(T$`IxW96t@tSvVlU26^yYmTjj~`I(080imO$Up{jB%aAEk3xz%I1T3}?BCbHJ)-
z9y%u$s@PSmbVlbL?}Doavps8!K5B}+U)b6&>RUU<nUEoHJWU?xW=&=Atk%=pJjW=a
z@=Mb(85NY(KRt);3;do{z?=402KF_y|E_4Z{R_Q=Z2PnDB~{s=KJZ0HJ`E2WNccn!
z8BIU|cG<)dUZ6b_(N&=!n^0cynfGVPMSsxTw=;*)8B)}RyuH&6ms+g4U#qRwj8LmJ
zt4wRnq%h;-xk*5ApH5-lU{8ZF)2ti%wP9kmUv1ur_iA1;@Ry?xn!9xw;~01U^biOD
zcHHu9aoCId2#<+xeh1-vy+#}V^)R9__ixe-#hkyj^N{PG<oMk{-7U-IVF;#hATFdP
zx%bP^A0<OLdAs@kLz}*lMvA0)7!*5tdTDXf8E6~g4$7|+UPGCgdbG5K5~9v~u{5t~
z_Cvg_J%ecCh*AlHQ8|HUXHF^QB?fwoRyKx^0$D``szVX6#PXoQA_Osad6ydO-mgAt
z-42PlH+XuldX~E&RsY6UZ4K0|X0(ybR2}P_r-b_RrUtDbvkFpUK4u?0ZIBal=BXN*
z6HdNMc+9z9S!3=z^_)@DaH%q^M2oyz7fQiCqBPSu6CD)o%}U26mRD-Agp(gK#1vJ|
z7tl~})y3SEn7W}y6*5*)HINRf*HNb)z(ktX*q=apskKbK(qglm;e%AO24Ytb7<QTF
zlM#$cwSmq9nSEU4WOkY;x?V-6ixB#3Dy_HKnfQxs2hF&WwIP;T9;HTGoA}s2e6}6#
zS?QsW;nshuED}x*+Cx1>=i7QFr|S{lSgwljHk58B+rfhvL5+oSg0vOW+D@U(7pcH0
z*#ghK#1=Rux4=qU;FO@iaPk3-oDPkQC|xep5=;H9oFGc3Oif{#Nf2mlGK4`MkQld|
z@A`h<(LUcvvy3vdB;4AFUr017T6Fk6%^_@}YXPi86EllgM@PZ{M^^408r0IgB;e28
z8|oPXDM**Vo|9aojd$lw-Fx@Z7bV&YrKnCWAQcC6TCU0up`X>vM^>ImfwVE)IvE0F
z_Wl;covw)4Wsa`)@?)t7@<WKz@v3*ii7-NZRvrSv+G)61XMd!1ekVUrDUGUxplIp=
zBi4jRTk!_qHV`R!V=@42pv_F38FR>HI)$;pH<Lpnr)UW6ksi&p1y6y)e+V~I@Ga@h
zRP+l6H9$1AqAnZ=((0Vo!aVCQmbwV^ZL!hp%LbuR5g3@O?9{GE=kbCFl3g{~n_U66
za<;)Xdgoo8N%|Sc5x=|Kh|G)fFkGrDp89z)+7<7+*;4;W3b)yGES|cgnzK>|#GPj{
z`V$;`NDX`N4-rUDM<3qwLCkr{oiqef+(Dgn0#}v+?ms|WZ_G}kMzg?X7z8~})wWau
zLsv0DlicN-_zuv6<_XVO&?**pgNoA26!RjCabKb4sXxX@FP#1uV~Ua*gu&`JYcMr#
z<uvhGtI8<S8*Vh$s7R%oNfqq&R<Ru!2a4VLzI>WYHlm1zwy8d+Ue;rXz=(UpS43r&
zW$WdFOvYA810dQ)+7i;jf+@ye1?U6`!QRVMGJk23(6l?NM)(SJtvJY5wUUIBg9h25
zp#MgISNpXhdw4`md%+3^k_b)2Jo#Wo;rl&F`er_&)QmIVvDiTnRHD58HT+mUwrWHv
zM1i$xE?|9?7rZ2mWqvkm{knrDxqs`T#JB^iWsn=sfEENRq+)|{O-i`8J1U2`Yf{*r
z<V`H6o$5_2Z(^mv`&R+nqNDEeMFeZzoEUR21HirLVKgs#3~PVDFWB@L1PV?KmkL&U
zTRq{{E?VRk{QeTFcEx0fa!?`m*$UDIa5Qxh?pWWCRyCCtUQyVp-Ief->(c94_(i5x
zv`f^_bPVUM6&py<&alwAb`$<?XZ0A;0i?g`BD|xzEU&h$VRW>!x`a=Sznv_sG|01n
zJR<rfG(5v2WP#%}+OE6MOJZ2uf@c_`aBF9QDaI1v8#GE$H(C;{+Sml^z+U2?6z}{>
z5t^OkAHkV!^_cCO@Sj@Lv>OxkJtk@{sl;t)()0Xzq^Wb>P0LG>wA~Pj>sma-_yah+
z4PK<Pn^YgeKX_8rA70?S>3p+n&wAD_TjT2#)0i}~p(OhAK1UfPXbzx2sOTV?AROKp
zbJE3fk&)@0;m9UArUrZjQL3rs2sh1S%u_o8rVPl}*o!x7y?}$stIDa+q`v_Dv#Hcs
z+gWYa0rOzMTiW5y>S8sGW!&_7F+-MLN{t#;Z`2b^pz{aKj(;d6rf1!4EK0sCdr#;r
zbHPM0!e&~UrpMf01yk}6*#PcZr#pb2&WHgC#FsJN0bN;OS9<?EL-=yJB~D$K;=Q_G
zsk>%j7`oGaZ6IG6^GSa(w9L{`B`-1hsoqVk?MA>+KJ?@r_WJ1l`lvMV$)Wp(NacJ>
zAjD^dIVdll%J1dOcv`-5=WPncIGTd_dxZ@_jkAB=e}<ED%#3{h84Ctdw#{T(cY>3r
z-?0fm@)}3M$+OS^$p<r;XidA}NJVi10GZ@`Wt__lBq-v}t7g#v*=T?;HUyf`B^Ms|
zi&5tAx8}PgUe$HQP|G*?htjF33#d$hI*D%Sp^opxOPzb$4l<b2x)JkR(Ysut>@o?p
z-Fs)~n@$)++6Kp~dcz3~OnB*fB-lx*A(hiM7@2l`c<Dw-xEmzXI%`(HRg||e@0r?)
zmz@`%_CH&b*YsHW7R<jV-WagDdqCtdArb6gBhD+4XWofCv$fXow?BQri>V*yIipG=
zpRFAfZk3DtTDP<`?tIQhM0E7$@v1k_a621f;hI<C;p5+kjsCP^!zA6~`g$;PIYM*J
zD-__Ip(vk6ab$3H9;GzDufELFDGh;6-|;b<4;`!2Kr^S8j**Sah|=w7S?1lxxUpO`
zj={S0+kp-Xr-p`_JR9G%E0c2{>6Mu(xc4zF!}}!@hy){6!r!Z8){$6c;hh`~pQH-)
z|AA{~TfR`JS>A?b$j!a~OT0-h5D6>P)qp%Xa!H;~fa|RM2wfGq(w|UhvX~Nmbii47
zH%MOf?`;-;hK(a<yUC|sr<ucVNwhvlq$}#L$*fz;r23Z-VCZTtKN<xx{b~GAg+^0<
z2ERXohr6`QYVonQ59ORA1CPNf2&OGq46XYa-YE;>M}T=E?%xFBlkz&VfNjSz2R#1A
zR}1ek)PUax?|B=Y)vMnq%6q!v!$@1ScT!bn^HctxX-rPf%$mEMF#jdSJ_{#*=t2`~
zSgl1b78^;i=PWkRN@%kXc81rIyj%nuC^88X*5FMeqd*4$1Hu1*%v|aVL~&&jblb8L
z?Ud3{HzW`Cw6m^IW6b2jj|#G*oppvffa48k++i3)m<qF(t37$`MPkQfDiOvQ&b*L6
z;P3qbeAYT|MOJSO7IP%=HY>Zp+^_1q#-e`agJ4Y?be=Z^SHT}fpLr`<_2m@@@|rX1
z!UK=0eOzA~tNLmNocdE3b8@dK@E)mp4J1()p71V~1AFfMa^kI?#G3tc#iyK-zWw!p
z*HS+km{z+Pgw>N)$r&ZwM^1;7aL?6NycVf?V#cOer}3N-d!{SSO%$M|r?`4=MwtbJ
zZvz3Ff1@d(`!_O(;~;29o_{O{4+ALm&tvu@EAy+_kv#`LFv0K|Dpbog5q4<(Dqg+#
zLX<%q>G{>sRvUR;@O(0O-V{7<37)HX<_<{uJYKQ)I8I8PL<?hUtl{uFY7ltTZ9q7C
zzv&F--odQNJL+eFeG}iOmw87wO1*Qj1T1fVqR@;Lch-~{5K7IO>>XBW1S)S2rAw?W
z<}CG3)@1QbU<cLxsDA-1!=B_!&K{+WO0c@0yY)UM8#P^8pJ}(ftO#=btL$*Qf0;>T
z!fTDB43@~%&sjD`D_~}3X&9ZA_-Bi4xUI3ZMY4pEiP9RBM&Y)A`o~#IxK=O%kTfUX
zJH;v>8ca=OL-zntZ9vAj8~SP%qxbnM+CR}+>wH!Vbz3_UpB7v!m5)*KjYf`+y0?ft
zYRysZwI@?9bxlbxJ|U{`uo@(}>~5l(DbA)u3XkkPGECH<h`Y3n(zHT@m_WvTP>f}^
zKU8(}1gf%n8g#GhO6GJ01rT%nS<_+Me>YQ9Mx0YDwaTa>*q&TKTJQe1w{z=&k)S^(
zjrvA$^(w1AT^98$Jlm?|gTqw^#@w3?HG{iPE$v~(+*3-j?ERfVNvbfn&lGeK1*z+O
zdtFYiDX5%+jI6kG*D=t}?YeB$>!qKpRbdhLW(l8^5TXS7kZp>*Nh=9)CF#;l0`ZVy
z!agQcy^WgQChXyiaPlkzN%NNx8>^b{@d(fR2DXH;>>;JKZ4f7RUXZ^?`6KT9TE1J`
znQ`n9lcg;LDs8zwG^yd=B6~_4Be1f&G2mXXs1GMkqIiQ0IKB(VzlGEcvuS~AniWk=
z!a(9PZ^^$AeCmo|OOBo|wuIX|Y|9?vBgU1P(YzW2P1AT@E8|$(6o->bO@XTxslfoz
zaah@~&L58+hR7D33z<dGJXC%cQsYYVC1{?4p!pFEVF=xk<IY9UL<)OAt)%ftdGk$u
zwr%~Wi?+X8Onvj)s4tFyVG!QFe1Ig&H1dN)jYL<FpmV!vBxvvHXP}vKBOyLb7XBzi
zS2P4|*M1K42xmPC(O)bWB03gC#yaN<mFUkX)N~PQ&f0;*8Ff^SWMI@*Ip0(Ir8iqi
zIq`jP3sy}tWuLQa%*}^!-J<59{l10jbF_-rFqUW)?<2IYR?+e%x@u^wY3(G3Q?(h%
zxvdUOxCKUrzC`WXlOZsydluFQsc>sxE{Jp9gZ|?nMne>Loi6HxRWJi?st6Xq7Puud
zH%Ss?h4OIg?HX(qC&W?N$0~w5>*F9ETegZcI85-ZrX5R&F@gw|vBHDOer(DNl#W%V
zN8FF4z}%?`)=gC%S^=4j1Q3(lTYS_m{G{c12F0ME#LN<q_KCo7z<K_JP8qr0Tu&Fk
zm)6e4Sv@eBW;soAmv))v2n7A#z^g9k-5j*@QFVp&;SZy>EPV?~mtmFRYn>M+xes(|
zfX$Mf3wif%;wRlcGp>InwHfvzU%FTe&rk#*S`_)?_A*1c%)qvW(!T}f!NP;de{wee
zgiL;;A*SAte+Xe#i0d<kB=CoroF=JZKfa=mp7$%uW4!$X%VT^NJck@%zrWx+-F~w_
zSm>S$2#j@J6H{;~@`aPUqeTOkSj(C3KJ>rOepRK?=;VN$H55Vg^8=Hmq%lC`hM>F<
zJ|A?z@@=W~oUdcf^DT2u2sQ8O>bPI)Q-m5TG;i&*eNKs6R7&RqqcY*6nNhdk!8lf@
z(AY(a;xCPb6s9GoKfOO>Uv){|vfwqX3HN?XRj^>nx{0_|&;cN!;1r7P04Wmu0wLb_
zN!Fp5p_RngRK$5o%`G&d5#H`W8fT5^h4SvOrR4_=Eo6xJ-xRAC@8y51_GD=hAC&#d
ziF7FS4>iOn7CL!hIkeuVXsRjZN#7f}5lU{k&}%k%#XrKH+ODv`0EK<G@c}#$q1A{T
zBt+)zrhT(^ke5G}u`Ax<oyJGT24y3|w7^tM)pw|eRkxSQvOb&`0rv&p)pi3g6LDVU
zrjYlQ&>Nv{z`Lj}NjWU;0xwLV<{}ybx%NgS$gmrS1DXBKsN32_uo*6ns26*)o-txl
z#GSx$8Q-eOpua=BhY7d-AtWuyvOKY-Fy<babEyS~bbnNsIyukl{J1cEjW4JA*)UaS
zqOLu+tZM;dRj)R;QnlC*M%ygJ)T3tlH5WqRZmXb~k3}YL>v$#Q^Bxl?n$O1rHZB^(
zJ!InQZJglDZPnpQ5(>L8Ws~`8vlkcfHN}3dHwk4(N5Uug@b;?F6^X4g38Hmo<<UCL
z1DU%_^4T`|+e+>oF9StZT$EITH}5$@B4V((D}gY<7G(?e(1%XUpUTG&KD^gX1aj_J
z02Mj<4tb_;{^{H=!J~7+^LxrQzppHV9M3`U+hz0%k;GbV=3dLq++C5>_)(aBMOSYb
z;O)Cv(&>ZpkQd|9TUhcc=FA|+2rqHR_{^+z?p67#G(z4jPn!h?j&H1W?<s8|%o!j;
z*i;L<KO{y)Z8iCT*1g1F|4s71Gl)}Di1n-{pYG1IQ_mrmBJbG`3(+6lV<)<^rdS!V
zJ1Ei9Z2Y`!Sgl}cA2lmlo=sUDi%5c%h4Dh-z#kE$IVSc9UNyr`&3J{X?SxkIs=0M)
z6sU=HYT~-kvYpqqntHuzO518C6R-JnYR>UK;XdlLdz0$|K&zR;O3Au6scC?IaXb+H
z+X!8vZti1IX<d}T(&{mVHd3f&J=^3a@8+Ds{~lnZnwfokrzBd)W6RI=pF*+1Lg~W1
zNjW85XK|O42-bAArHKU;mgZmjwwKlk%xc{SEUHS}qI#EFc&kN3VtUu*O?48t6V4Pr
z$OCx&S7vma#3Dj!+3eRW|J}fDdZH8eDY3te)or|VTcCHgX_5a{P#krCD?p4oqaLr=
z?Dag#&4K{1^@SmlQQ}RfCX2;qOc18k)+G^>rIjrb?V1vGixCbQme7l+^P0EfSe6Ku
znYFNc4T)ZuO|ST;#(<=dWF;ydkX*T%mSOT;(eCZjFjyF?gtN5aB<^o$6sjB)TOIP9
z5NwrV|GyMFV#-yK1>U-!K%$upLj?@(e1>?1XgynOx;h9E9<U*Q2|_kyLhewh7I~+!
zF|?pMAPdZY+8*<uti9kgm6Em>j0Z((&a?EuR#$D}0#7BQy$U|N4-DiP7JhQExH0Ed
zznEv5pP=7bCS{C64paP|O6T5fLURr==sb+`lJSGzX^yajXRvDk3(~m+TiCyeM_M4x
z6g)R>`T;s_vdx?Rd)2wt|AS%ws=2dkOANFmmmPDTRKIGt-sAjIn$edY8iMm9_lOd2
zSCV1gwiCfQp71omk>K75Ug|?|<P_qJ!o=fw-kI+Mku@a(!&6J5?x`s5#ymc$YD@EP
z{5D$cT{u?^*gF4Thl=4^=l?r+z7#y~Jj^m;D}(12^IYfeJI02eW}fT(r9t?WJbfql
zxFvXA96T4ALf801gUl(yv-CE@ubK0gU!tFRK_H4+q6pwG?8CFICk6#$a1bo9%HuoK
zR1$ap)Ww_3VkP3?3DbyXF_uFS2>`Jb%ZTqt^eDYjWQ8|H=#Mm}-ae5Ev5|=qUMn_B
z_ksY^S<|3kP=4W5=hViIni=4BbF;L9oyGT&xHBOT(;uE+7w~Epd14XRpfhm`zlxpe
zxVM{t`}ozL<*tlB)LF+MPrOT*&Jl%|nA7iZ_mDPoBc!o{PZ%rs#3)K~Ym61VvKuS-
zmAr7(%gOQ7!&-~Z2V67Wmaz8k-_>a&Zi8<=CyouqLqsp%FG$12U6wVqQlzgSkr(~-
z)|cC?dkcdq>r__r9AoJ{HL|Jz1*4Wn*+H`LhU(C=oJIC4&e5>QG^(}Ej(+wm9W|Ha
z`NKe7!TRkq{Sr3wf4~omC25+Va@CxUnrYZlnvqqN|2R-pLJJ?(;N#I{`B@~wCmoD`
zN#9-(YgE~t-_|p@1qgGxchaU7)4M{hK7@Cmv*Fe~h^IzVh<7a2nnb`tpK5Z;R%?!=
zH8EWu+L<0htJO%?WGnd>Wt&PmfCqK!wF9`)BO&Ne)$4hhgGpG035<UZpsVm7Q+Uwv
z)ODqc)bW(XxyD;%^H|1g0in!QDVI4a0mtBWa80@hnx+vQ43~COyf>Tu*=&txsK(TZ
z4dw`xplFM?_|G~71^k3ti@|ZxRN@v!+*WUoyq$QFxg?39^Ip3@leim6uw~YdLd`>4
zR*0&E!mTeD;c$gP?Q{pb7W4(5d4tchcZ@!w9FLmzu@n~b<+`FZEh}^)grH3tmkmv$
zfd0gee0Ed^3j8s9)=L0Ktbi^ON4ZRv2bo@Gj8_%&>fP0u-T=95HMS<YbZML6<$)s*
z?US+|C|ahf_-f~xQe#<N%OQs6zfmh}FOt6@0k<itWo%$H4{4coY^ZsBV%E(3rXvGj
ztqK_K<e8j+i@MjDK7pM(^XDE#HfIwrJVQtZf^GNVLTc6ge{Vd*KA|r%DJtqdEX+Y(
zEd))SxfW;Y77)HkmuHs;_^h4C@REg+$|gB))B?)L&>Xigsu4TwfQP8EieXAEQSJT<
zqv9gbq(&|}S!#peb_;G^M7c;IxW5i3cVjt37@tCa53|D-%C7!H_vd!6uOTx=KamX|
zuJCu#;c?eGyH1V#`4ag?`MmqUEK$hWN->7X(6p+^SIy^#m+ZnJtgRghVNH5IZllTD
z8|j>wuhUK)i93kM^9KFEUbb~5b8Uec$pa$To2vg3LcWVP@FLw9X0UN$v6k1s&X5X#
zo~It(!HA`o!~2hefW9zYwD>1oHw(wihxOTQQ91>LyrZji6*$1}KSy5|*!0ZSx1^_@
zkhdG@{UU0x`~bR$)+1<8%L+{#i{xRL7X#qH^;p(`0DS&dQUD43%BHrM;HnS9^A6#=
z>Zx$@U>Od&i7xVk{wg^i!P0f_HvQ6JI5C*mCa=L>H=Zh8A9Xp6g`81Grb_R37wI%J
z=0+L?L|S{U_m$=sr2z$8$Xe@s3LsTN_t-;!0v@`OO|uG2v@rhB$%yV@*{KZLft!~y
zDa#S})7P@hdoUyJZ}Wc6NBRWu6YfGSCO}v{ke<DSf0ep^vxLLMCvdFTaAT1MTvo+P
zOGX>4;1Aarn*Hc0WDAj{P)h8h=tql)Y3mE-4fjaNUocP>2i&nnJXy|0`HgIpYi|W!
zj(y4^mE?I>a?y)+Q@|pgnU$n~fg$bEAh9oF5^R$bl7I&ZbhKvgH0mx^E^T_T#cqlY
zjBBT8$)(k~rUG}dDbl@~k(N#~*ecbwj^$r~BsE0lcekPl3&eyn|2jSbFll{JVB+UV
zt@Sm~6HI|$FLbR*)cmn@ndRh5tm^(Kvh`ImX(Lx>mNPxpy$-VXfO3@Z8g#zmeV^U`
zUURpRsKXtL;fzDXM|9Cc+9z0e{=H02Br#{iQQ_9x>}xTuDzE1?vp(5aV10gV*5}lz
zx`9v&GvB|6L_+Va6*Mc2bzAqRR$Ou<p6>NW@S167>-l{7*RZ)CByAqdP;mb-I#C$P
z5&#x8ykJ(4D*oN9lM~!A<(i<JBT;YOpK~N?9Uu05|GUjk1dwULl)VcBo&rfg^M~I3
zKkoyUx-XNF;c5>bb0?ASTKDezfCo|Taez_OEu#?)gmfe(^9ytIZbxE@-Z~S~!srih
z<XV8>!?Kbse03yd+H_LC=&v);mXj!ln=^pdmzC2hzYPqT!-MP*PObwY3=eV@QKCU-
z?fog%dt4RmFUP`<pxZ6o0g`Dc4O574A)JkhoVZhw%}_m4<RL+kgD4Wlp`50QWiZ98
zUar&ORw$l$lDVa{bqMJ#PvJ`4wH&)()#)7)#0w2lPBbWI`4AhAqCw@9d%avVswU~`
z_?B6xfCGNLhf0)}lX&Ub%XI`1oCgR}0>`pYJ5-ag((721XE-ib6>zfik7qM=$mWgW
zPhR{?gtfNxY?Pg4T!!9SPBU5K6vidkIuEgcS3PgxDID}88iqAsVP4Cu8K9qo_yh=B
zW*x`Jo_rYPt#=*|4su>}q$EkJ2hvPa&V4Fcn0~&oj1Kl{-9dQRqfavkgxwerZf)QV
z$uge$d+8#wWH0W1g0EWV9iw^r=OA_3a)it;UM#xgSM}qwVKpp~!b;A2yH+|p%O=2k
zs0E;e0hYbo$*HR4Ap&j(7DUM{J8}D;i~>L-0pn2Rkw%f#7=TtE2#OB3E~Gthru&E!
zSwz&zUM9mkf(wc@b&H9W0<QMxd(3cJ%c(SVOxBSW)sBi3N<5O!mRa(QH-<Mmth?g9
z(5#qKs}bd;3znKgBkYljCGiOlW-#Q1PK9X+^jo_oOWz<Y-1;<Q3K#k&AAGIhOL%VG
zA2nCGx2-))2rW@Z6(JB%i*}_QsXEYQX(x0>8gD<V@t#8-O0y^be-;#}oZV}e1;P~I
z2){WJF@P5_X*6DBBb>Yq8!Rj7`q#@ykfl1Of;qGdp#NKJtPI^th8e=0aQx@k&;&T%
ze-(V)w=?hFo0&BxAvuGEFBb+uzvRk*4vkfB4$AiCuVl*f=0-j;>C>(ZHd>fyQ$k?0
zg`P@f#;V%xUGZa_F$;>5s7^!f3QZ~N5&i>b%o83BbRV#=4=++Srtcy1%<;!;d)^N?
zf#Eh1YIur_UfR|h@Y5EiRZ_ofQr;?G?SOj>a;tTMXVpEW*D3kD5j0bwN|jzI6i2}=
zitp#=nV~c7h2R%>^Y6*e$`5w{A&`U-Jg_oiVs-zo1>KWY7|?ayWd;v*R&2)GQ1U{7
zR6aV4#SanuwC8ldZ+;r8JG!K4Y<S+w%r@dd_p<>YSfY}*x~r(=i54dz{l9-Ol+^p#
zWl{p6!|-<8t-0cjdEogeoLEPpci>?LnAAPw7t`nDP>>bn+AiCUQWp-2kFsux-Nl8J
z55`goh^)9r>`?-(YRmGRSqza7C6<F;)#AFeQq>{|Z{bUY;C8#hyzlndF<wNmn#l=g
z_CZ!ZgojQ~L9nZ$iM_G3h4grw9@sVn7epwq@i;A@)Jz1!1F|x`G4rzR5B*p5s|rai
zE}^k$oYVR&6tZR3G;nugzM8|S#BJUuqd(Dg#`5A;PpIW;w0MQYiU~=qXk@lRO?#&K
z669dZ;wLX)R97_+>FxeVzGw*QKLY@@4u`N(1?#Vo@ljo98LSQW^VAi2N0JUwaa=h^
zyPUeHL2m_rHpxz}M{?_!j!jKx-DD|^<IduTG}iK%@~1+8tTSzpXTnhvO~Z0e!`DI+
z#$&QKX-YJ8b+m5pw*?->k-2Y6(1;|~M!aLo8277-+|wsZO)Q6OCEjfuA8c($4O(JO
zoT!aLQm8rKMf-gF$!MSJbf-r+Sq~cNsJRR(coBp5iD24Ye2dx!hKwHb4f>(*wUc23
z@M&`XsddS>!^wY<$c%OCIwha`b*P9$^Cz0%>7k|*(+pwq1K?iyrjf7d2pQZk4wt5M
zMdQN@REJxQB|l^EAPFOM0)_k>S|qp#C#MmpJOJ0X@aA#neN&)V^mGcNQ_SJt8RlhF
z1Np5miA_3$?MKb9TEut#B261?g#B#cQ|v(r;Gy2Ou3&mHoNQqAs44?NL-gb}Y&ZjZ
z$wI%458(Jd=8Yx#01r5RL0>?D!9|M*v`aMbBp$F6{^w$mQB{PKuaYA@jIC=i0`y;_
z-0+gc0#7-%s@7SDD<KjcHJ9i4m*!9lORL*X8jLca9U}f6@490Lg3aJo+VN(@R9>@N
zU3h7GWbS&}(Pj$zp7MkJ#r;*ZKT=ABwnEiVPBz!FX2yTK7zbhAFp8DhVmxiwi!O=H
z%et%xC*Pq5YEj(zuvX05>rD85f5iE0!+iSCNo=sj0~8n_zgZAQtCjH2?ABl=%<^!|
z)$N=!(~--YPB+}gjWriHjY4&brs0*r;>uq4zM^brofh?8Mw~L4D>herrfg$%J2Ar$
z<O$Ol<yoJ}^A?g>%dF`Px=bqk<M@fD7E193du=eu>)uhX+Zvj7vxceuGEy0^^8bss
z3KRv~+S9hS7MBIc!fx)z*_9V^)l=A5&mx}TVF7*QsoBu?3&GRl>Amsy^j6fC!|;U-
zC%Y|;6@;UUDMLH{!i8Ql`~%w@aKFhEdEJ`XM)7t!m`pRj2QzOJ(PIfPy18oBKGU&-
z#G36Ep1E^*z(B(L0fn>O!ogs!D+UD0b^?K>k?G~--8)|{+3ndI1)9c+ODYCgo5Ayj
z-(gqVG~`KxTeMOt-VX-(R6+w(KDso6%KrpfNUV??8Va`#mn_Y6{`il*z1{e5u#8BW
zM16b^dYn1NGI@*PS#EgP5)*Y5*3T~a)a?X150olU%)@m&{Uv~^1o_59B~H8F;>-Wa
z$cmPY^gH;7INSUXPiM8ig9IGTlFtSBLBk+^S9LK*3n-4#wU>#3pA~J>rVM4?Lw_?0
z&we{g<2{dXv$HflW6FRpxBjLKc5CUY&Bm0$vbk2$;ZEYbTJAScn2Z^s82c4A&ou(e
zK!ZsV!X!vbh3s1lO^;_%ahfYN`UH3S_8t8M@bi9`BY@ZP0RX5DNmAw_<aDK`rn__`
z;bHN_=^43ve`e%Eqcqrq`dM@Xw~^+}t!NIu9uS@{O+JIwLzK9-MLcm$)Nj9AD?qCw
zBLXBVMSC7K(g8p*f-jx2KH~5_xJEi@uo~aibVmWzR4pT2gYGu0x*hW94FaNFw}h-m
zyQTa#pF8(+unA@k-NQfZb=EH@(Hw1mt@d^qy%7Qh-J1A#YCH}r(2ro`aO7VZ4dUbO
z!^PxBsFB`KD!WODiLEd35_j%al(SeBtcubF@1ckCLyw>v1XMcBuI9Rr?`8Zo02xmE
z719`3fYVNI-Pcv3(9iC+*H!mpsoaFR0+n$V>LuzfRLxQL9OH1&8a*V1aPkSw&?<hs
z3oG%VUnX+aN=w7PegcvZUi$3ZjU;Wuh2^7si+*nM&ji*hHW*xlyGnz1?<CT%=ZB`Z
zk%5I%N%L{r+L^}^c!(fx&vY-aU$%UWR>v};`t&4i`O=3$bQ8;HJ^V}|ON%4kYa><v
z4ky<DERj?`Hy}MMuDh1_N?7mJ7?M9#d-Pu6<Pl(#@VpyIChi;0rNBTt6{dm0e;4GP
zft%#leC?D*fYg1c1th_ZzlK!KMuV5^4s_~N?Lcq$>TW^Lwl^^2?fb*vK7vE985~~v
z+1#h7vkj66F}(6lOMfP}h@u3DZVDr64sdsKzlC9J{VFKpV+GZm4yX}o*=Eq!Gyf%I
z!7Tw>yccfHXA9vI-C?51WX(uq_S+50-0lq?#X5VJ#avg>>z|`T1oMv!?!^cvFJt{-
z0e;L*jcfnCZQP1EYFsYPZarCf;EPs)@BFj)u<ZrcJ?}jcHIzBI7s1~CrXGslf2ZQ>
zg5uAi`0hJx0q?MlI+<Y=)w-2Fy9<pq)YEg{pgTQtKj(K5r#Rou4=1l8x}v?U=F;fV
zi`SE-=_u`}@FFxG_Bw77pWYsKSesxC$ifPxk|6LqX|ip2)G>MO*@7PsE(a#-oJR5V
zBif{AHfH=J+eBu=cV>2>(^_E;O{iekHI*yF;ulQ7LR(?9NQZBtCAe|`*0E~0ZX2wM
z0Jn8uSlKE2<JDg_1H^t-M^o1stjmU**F9e2FWL#O+zSVNkBKrA@<JxnT`0LF4(`>;
zs`w0h?Bq#=r}DoK{4*z?M_0d*A06N}m}DGYT|eWHN%H1%7%M_9bK`-m9j`(m{cjo{
z<0UbaSm*KXhaNefVwdmDPoPaq8QrJ%@NvDpk6fU*eRAVwlHa?TIDZ^?JYv)&{ynCj
z_M+Iu69#8Uc5*-AinBmDGRZgscx7Kl%hwyp86vv_@H;ft%u3Kd@gN3G;4cq}%X@zx
z1RjGB(hJ{tBa%9;l)Y!rZ|&$VgxlwENc0p=n%2?Ikhl0Gv$dpJtm(2dX1y%|SaD2I
zI&sWJSr(HBfoOpzIt#tO>?=9;QQHD>FNZPE-j8o&tskJNum~@MtIKJ67FV}WyRh6M
z^UT55Rv74qv*mxmrrhQ&yLCI4t%O^@1M;%mZpSxvasGam1&-zdgCEp3lSyrRN#pp~
zLfW>;^wnHd%h~oFiL0cQ{274;aXs(7z##hjf*4@@gt5~&S?2+dpiVicsvX$dJv3Uy
zq1popiJ~iPsT|w<!RQ`F&1fkgffF_<<xIXYXJXF0v1sK{SZHGt@iW5>HT+0Z!2F1*
zDxuO6fJT*yE7WaDso5hLswQlop{F7nr<IQP-u$x}&1bd2QesP$JL$&9yELi`XgBV3
zEC+&NyElMJs1-{*m6IA@Cc~Q#CaGq$R^B}~<cF61rfA776`NNIiec9ZqXR6*jnvzs
zplRz{Zn}krS&O>p_Rpeu>!D9mxml~-$at&YqaoF03V2DkEQdSVJ#`+B+0WIMHb{<c
z9welKnBKDDRC=dx@IhQY0L^i$!0wlE@bc&&j<VgMg(b2y`@88=np<*^hqKUQ6~5l}
zY(FzKrRT^{yuqmY{dz9iERnzWYVC4TO|X^BS!#iYkVNEcXPr68!2RdHu}t^Xw2j@P
za|*)qrxboDWhP|~{Z~C;c7Fa``rX?F7wO;0mZ`|wcW)L%Hl5Q^Gd<5A15>S{HG6Qi
zz+UTEf_#)dw9Yba2GU;lzH@ULnI(D*wOvGWVEmf-66^l^+l(mXvqeKaMy}&#4#oU^
zrnU-}iwcJ8HsR7NsL)i`&f@bcR0h3Ok&126QzNf!gF^3$S&~4S;(`Z8f*=$O-+5OX
z(ak^fn#TrI`rsT&HHjOE&D}$@Z?=ut_Dkxy4m4%y)$6Kek*d*pJ6O12(gN1ozPv5#
z<<Ebew4F7xSuv(b0#XsE0`FkbA(Z)7g8LrJr&B5_hz=)z4O;YeQBg_WD1fyZ>VAb6
zhB(yy_b3Md*9^3_USkK@=epqgsNnn9;Q6!Q`G?^7i{N=*@O&_M{wv7;aPU1Pcn%1j
z8-iy!;Gz1<g6FwGz9B*U6~VJP2%i^xHw4d93HKijK9&WEmIUAFN=6ZG_uDh}XL4*R
z=_1F^Y}$If*Dj(?z+L0xEtCG*J$UsfsRZCYW6o-w3#{%WQo9waM4^GY5V9xdLqx#q
z!b>i@h%-nfcr|DmI;m=@sCPJdlaOTUg3|h!yL1zI#BE)KmfEX3+`>yZS%L_f_89?h
ze^O7}c>~_=qu<JEqSu@K3qd6(iP940VZWCB#;RqMFHo3B$zmOVcCX}#?K*j))``9P
zGnJcM;nwFM#<W|RXjK`)ct?I|9*4xbj}Po<f_yqRCSWX(ydId@%{Sdu>(vuw%ocSC
zbua`EsReFyN~C4Z#Uc8C^!1Af;XE7B6)#V6uD^xPn0sb5=Y=>Qs9}zDOuQ)1yQE5*
zsI($CSvpq@TykCMJf4%RCo<=`>cYTZR1zWRpTtBMkRoX)_w>H{zTp>JlL}@Ai?nWH
zDdN48Klnt$p-yY0vWK?JFp$3W{pQBjm$B#>UkX9Pl!>+q^Hu6{OO)mR@>X6a0%TRl
zIhJl76OW~vz^R|ZU+()njF~N#dFnz^g_o`wN~$)#PkMp<=S5C;_w72Llibi$Yo6`6
zW@40*9DJ*0oi7j34CDm%=BGxWTO-ZM>@pM57(q1NE6;>f`rDBXrY;b#TW0eomER<+
zSHh7tVX-aD7UPFWYVCHyOU}JC=Ke*nlccd15Mk6zac4-Ww*<9#Z0<L`Xly$)vqN+M
zg3%o#OccI$JBhtNxZ36E3){aw4%nV{Xd1RD<=bHU>l-X=FS-I0w?85fcESPRwa(|W
z4~VtiAsMOLKcDWBPJq3P*GbM&!IXg_<Ete?AhTUUpm$}n!PVov*G8wCa#a7O#8THQ
zElch9L34)D99{PlZrx6m9Ov9&;_<iZb^KnWh+8LuL!PWmk<4=Ml7FW2NR*>Bm+2;(
zrMw603bkQ8xKqe0iRdCK_!j&Ug>RgAF*g~3-*ZsIN!WgShtg(~%HGD+z>t3nei-wq
z8AEgTi+ARX07;m994*okzLv7RuN|Q>s`RhqlkwXbJ|ZY?_B4<c^6w^*#hbumvWv;K
z>8EOGjl|Z^xC!tt&GxV2<t#GTNN(m%bIJBM219}l|5a#yj=c~|vs|Q^I}&>CwuXS$
z15N?{3F!Y^@?^{1$~>5|YTL$?Vv*t!o3<CFF8|b=Z`<Bwd1SGTwcyWMq65Jq_=_0|
zVGLIM2BPAnBYl~zq{nB9SwFUbGXG^DD`TIEcLAf0(z?NgQpM)(;y(V6;1adtQ1x_E
zK}%(*83w>?Mt=~c-z8?Y7|Al#>_u>UU^rMqe&9;WqE3FPchsFs8RTX%l0&KKw)26d
zJdZ#sh~hj-E%&oLuFYVsBoISV4{B*n96Q!bwGIFuVKiXU6@bR9<NIo_WEER(q9sCy
zmw0c?7jhdf?|<RsY&z-vix7W?x|=yKrS%qNe1rAobek3DKZ|&7@Q99o7oykq7Mjwq
zE0liNCkGhAyG8}Rq7Pe7^X<Vrs|CAayU*<X76Y2hT(?T+k-N72GUmmwOa5E%GU!DO
zOBS5e(ts9ug}+xvWSJ%2*&A$H!W-K;wU%8AsJOq4(pMBn6VgZrDmME%#c4}Fk5<~Z
z-%+Cl-2(~p_Bkbe1KS4Et2KVI7byT1W_Ivw3ZC}{&ntrGJ;C$8c&6bMf1-gUd}38Q
z(-Ues#$9@!K{O}fzVK!tH5}Pidx<%^O~hDvq8(7M^FesYsSRgCmhlpe+)&=zHFZJD
zsve?3O+Sgc^SgM%BD6?Fq+IbE;Uy1CHH(|c5<|^#gk@~nbO@I-(F|Ef%|*yt#>Q83
z(%-f|ZB!2j{Wr8VLXOKRSCUE7bkr@j^o43(u*KALOf+v{Ju6z2=^D~T6Nz#@*%iDD
zDyvmTw_13pH_iuV)AB*4Kh^3FnWH9iGY9SxmCD$?j&<430GUk{s`P$(O&-OVR+vr4
z)<&p547r<b%nAyrRw4e?#88gR((#OHWP-+DLx1F>*&p>yPd|Q<Jq3=Y&fO}77>5)_
zWqjekpbj`+dUvCf0IbGi8Z7!Pq|mCf=l)f!((L--VCOG~bH{8-jv+{2WQeSHI_hqT
zun>oBP}r#Zk42{3cxi*15?`UTQ(!}ewmc?nKO=V_ESYzBrEtcIhm?YK-zX|H#k+8;
zLfLoZY_Vpsz$-|iz)E6KR0`cgjBSXg9+PM;k^B+(61P>A7?<&J=Nkkh&8+wb@31y$
zQ#$lrMqW|98dHl+=l#wx@v3f$t?SkVb*cM<NY5U54UHW~Q88oIbGJq(oVdU+l!-Pz
zYPkXl{-lOYfiYc?MDHHq`MTXAnrdA{n<_RZ9#h)}gm1)XeKsptdw<|e@2<l*Sye=o
zx7Tfq9%026FH&bMbq=F!Uh8-r$SWlmTv;9rU(+GF^(S5jI{UTHEY)Hs8LfjWYkQfm
z9D8J2!IE1wJwsO&SqY%t)+4za91|~{oSu~Amoz5|MsMIrp_gz-fO*r0s%kwHSWqXJ
zrzYlU4r@~Fm|4pf$~obA&zM00ncKN^IwPQJ9a@|0H9cZ+b+DB@ZXOLnQm@Y_LGJds
z`9t`ht8UorIL{O%HMz)v%JC{Ff_2_trV7z@LM=8vIuD!c&xIpN*!iGgjk(9#>D)M1
z^k=&@T6&NVlRt)yPb~5Ej%MS}eVBI-5#756O#;`(skYGl$9?o%0{-bkAx^FO0>~#@
z=(jMA_FP1--q^MOdRZY8ZWAKn=W#GDn0?j-0N_1{&u`UV&%`!{nh%g(zNxNt^US?;
z8Qjb|wneW01z?w<&+5Z&-auMs`Iva>m>+M2Rnqtet4!^C=LoF0&6;$Z;q<q8|0V!=
z-E7l-A(hMPUgRQMcXn0%r6m{*J5q~+&tmT;-uxZVjRjtJ(&m~HEFzCFpyD<j-f@Aj
z@?$Nm^a2{{O(u7mK5&|=T6;ICtINE4eBa4l?Jn|4Ncsa$r=xmTtD|Tx6pwZ@l?KJ@
zb13Uhi1$sNa6ZY>7UdmnmAfWjK@iZ+(;sA#?O$t}xQGx9#RjbF(HyfWe$#xbx481c
zJ|huMej~zo*Bm<i32)ZlKn5Q;gfqiz>(_?sdZLM0)gd&UX5pKSBx5@u;WXS9|GWq1
ziR)@v%Y{EmmA+34Xu=lnNc8WVAka3GIoMzn>xSQmx%u0jrcd)_(NbL*UV=Xz9bD!7
zhzi_4sS<M6bITWFg-A#gUa~pw>F|>J-sI+H--#P5sJvL!r_B!->jI93ydTTk>dm^7
zzNXUFXSA#PL?fqBg~%8_zN?GU1FDY_eY8`lbd-e^!46<S#bEH?I_?X5C!AbQY|xvC
zTbEB4F!O7q@%0rgGru2dzB{?OX|pMq85+3}q?4{7Jo-jccK09BUBiPM6Eh6|^#ak?
zeh%@v6jmk!|K4uj7hd4dWNp>#(&^!Oi@|SNoKtGyM8O4YLvzqA!{4DcE{e1b*^?XG
zWIoj+uoTYWPF?si@3E_y<41W**KhX%!6qlxrlx>R-X0*PIa?lTNzK}i+%YBT^8l50
zwalQXl~D}^Fm^g0F|MwSCBE9x{LfAU7evviZC;Ex&fry>Z-j4A+#KOs-dqvBwXXU)
zI5F^n;Nj0P;)w+XEru&-|F<oMf^)-msM{$^d$=O2kAxU7yNz2tc5ui)lFSG**wfvC
zDlOAc|19_h+p$|`b8|?dcX0UHzpESuu-I!Q%pV5BO1(pO?5=9;sUUy7X&iD#4hV)@
z4<^)a;-?nLQWlX%pm;YZf;~E0&G#uX4)bd!a=L#wB$L7merF1|@apdaHt_s?(n7Cx
z!28LLpCj<Tmax!Masic=)5u!4u7p+Dw7dJ*eRP4@H<zdxqzMA`-W?wDR{>?*y#d;8
zWdcIpLKNVpuQbrRX_jqUu|JdH%1t&sNM>Y?u!we{*Fb6kB60(SK=ke${|hyvkJUrD
zSFXGyp~urpr;D-{QZt8m`oLQqBo6`C5N<p=6ncL~C%y9l+Y;{$!p(L{Nz5Do>C82O
z$R4i!;;)cRslzFCN;E;G>@zf#mUA-&ZE4`B?bF87ZF5q10X`|Y4{g`#pTatOd<TTI
z&b_qIPTJL1We&k?_onbcw;R~}P)TqIP3``x?8;f5FhcuGcU4_chd_zGG2=8P<Te&^
z`0Q{?$5PE4cG~Wh&o<2Nkp@nvkBvKk!W&FAew{cf4kU{1VRq8=PwZI)-pW^&_epQ}
za@9gH+q@SKhgRd>Kv7TbDNYi`lFm2C#*#7E$<!4LK{sYXt&P8;0`KNuT39F(<zku|
zHBEY%sTXg3l?V!_3%7e$&+6@!p@{OU*^NNmM8+eY8oy3yPjE+YHO%Iw(NXs(jUW)i
z&X0Gbsle<3J#QJ45kZxWvBWm8Nbip3zz4`~K}5iuel-(QT$J@Ng+F6)_=mH`teDrM
zwQ@|YjAYmN$A4r+x=Vwn6Fm0~o{8W&I(W_to^J)u`-A7&;CWB*JS=!V&@cRAzPb6e
zIuy9BGuv;vDx*5*L^P^rrobMDPJCY2#2I>ma!}z^P*pUswmP`n^e2&@t_kkbLPEj$
z?|*xxmW(ls4cBU3bePzl#8|kA&)_WaU*5|@gN$v~wRk2l8VqmxOu)5}dcEUOM8l1;
z(!4Y0Zii8+ISsSRF*+qy97)ub!REy|kJDCH9_eWPh(bfs*zRjKR=v9Yq_#B+x496D
zRXCmA-sLi96{-IhhNU%!$mp<c3~mjYj+*3*DHXVs7%2Z#P=3&rKzX-8g8SF%V2sX5
zs}yr>PL>|NJknyrrg42Rq2!tpaN!5nSX?;bT&)*Sx7D-XV3pt9zcR4W{j@jYcnc`s
z{ZN3?=^tgDYy1hpvzVvhgA&_H{6lC~`o6m}IG%S}+G}E2+zm6qV*+WCk%~G`PI5~(
z#1i96LroV|T~^e5xc2anZF1)MUv!OmE^{`SQ`JAs@rQ^)-CK{;%W*8}=*&1u*HvcR
zK};Yc?8a)RVN9Z?IM2DbsQWI<7e^h`yswi{&KsM5ZKw1ysk=3$9bR${7RK&1V<yoQ
zgj5hxBr!pAI;50ojC5RUW)zS_9D;#HZ#83IO=;Xk1;oS`YFa1cPAg}lfo4_PaImI!
zf~FR}4Zw)G1Lcj3a<*gNU``xRkJdj2>SW%aYNPHC+?t|E&Jnzgc*;4xtn+wNyeZ{g
zN{PDp9duN)SQPYDMFf@>F|ZoogGhWkvt#SX9p&ars46C?(D-9Z%y`?;?(KrbaV{I-
zKO(qu_W+*ci2wNT(#NfCe{=YxO{P`@oyU=iq8#Js*2S~)_Xx<qqjT{H!#a3tjvE{@
z+mYRCg@AV7W)aX~Jp0f$bN~Z8nMPJdJ6CrP3hvvH-^+i2Je=pa*7{=*2V*p`*u8Ru
z6pk36EHi8L8n7MHi*XCQDTi>ijNRjl-BYl0YEcTtY*VfC5r?E`GTp|?YHiWkx`<xA
zW?f~zGxbKC=XFK(Q^A$mUs5*&($*bRJIGf115RQUyQgxe_lKx^`_%YFrbZ2PAp>oy
zME{fd(#_bykK7hX7gY^}zE3raz~ILB=&s}{W^sW30R17V7HQHwF{hX7(Shl#$r$gw
zCm?q?CPhuO-g|6VFq?bzolVN4G-uNqJ4JV9=C6Nyirg!Qq(@t)eE&mxSVFXimZe8M
z+n%#>+jIE;vOSEA<!}4!Z?*v?pqKmry+C6#^h0-Phg;<wP>z(`ISo<g(-_;}ED+Wc
zuK!1V|F7JF?%Hz%Q%UEJyJsj48PV(9qOYsj*bs{`i;o=sD^-){##=>0xsl?dIGg+#
z4)O9f!*Bgl@Wu2SV~f>Y;&61`H<Zk~o*O2l87XJUp(UyIR_@KNJ})$NA<)S*)uOR#
zo3Hm;qgwv;EZ!}@G>q~MmqY<3JGTN4?G-vV<|Df5^&3omrRHoDPg5;5R*84ii&j}y
zt-cRw19QF5i2S`Izf`h<cF2_&H>P$&-CnEsb0$gAKOs62$Rr1cdP1RNLe)@Db52cm
z+oomV(Y5qt25M-UXE3Xpgz5%uO-4VYmj=-*@AGR7)|J7_?pJN+{KXhUJw->&ao!y2
zS>z4bQ&?6fF>-M$vLGb0s6=Nm3|ejd08sE=-yP^Sdy!wE^Xs!0X=q&zdepb!(F?o{
zmsxJk3{Vrm0Rrxx9_(kWU;r2(T|&w56?nIs#6VgOx%w5AA)yHx`)!X_hfMzNCo}5_
zt53GvnjiIl2hIS`X37_-Z@S4FPx;-~XXQ&Xz}6X|e;Zj=<X4AU{Hqv8O_)J?gVEdA
zeZ0L0HikBgWfajeFrG6VOB>)3RSle#aZMi@xtEccWFS-z+c{ZutOUE*TzoA1;kMHX
zz>C&jR{wE~xDOa>{K(M{a1Sf?I_J#&8vKvxZ=>JC_Qi6VG)HE??`fCFn*Em5VqRqI
zevd`Ain-UBen5q#LcCfnlJ#$jmr0mts*iQfqo(v#<(lSYD0|h8YCtIJ7;)S74!q2&
zA!ag1-U}VJdL&xDNOI&L(P>nL#Gup6Ib~N@+^@g6{<~D*ln5=<CPU1<(X@slN)*w6
zn*iR+QW5+HBux@$eH1g{beAC9tF?NH$sAB`=(r)^+}cVX@>kb7jbkE-WU2OM^CppY
z0X?jv+sYF$`cAG3J13l6YZ}0oY^p9V!UW=@0PP{1h#xr`v#sXIbHA|T{<6ooZ+b-I
z?u;na&_AuAUmu>hIyIiITZ`+pD6t{dF{Zp+e&yJXmycmH@(=z$<h^@fRMpk@KLZH_
zMJFH#w$`RL)?lrI1xo}p0|}ndp;86KdI5`4s5dGZq$(Pi8OiDCw6v9qtybPvTl#pT
z7ZkC9BtR1J7Vw7JO1yH85kawlH}ZbId!NY#+vk0s_xI;-l$>++{j&C2Yp=ET+PqAH
ztl}K!s?xDmLR_iz)XI<pDo_^mez~#BXe{_=P^n){ytUn<R0f4mgg#)Z{4uzyB7f=c
zi|7)F5SgfS{i73<I9vm!jyiEVn&eC{MXFg9bkvxds-vhLF?5Uib&?A+>$$><Zo+qT
zJa)~i$j`V)uJ8$cV_4R@hJhjt*aQ=^#@K)=wW}Vkkb9cG2UUNes(4l+cFjg&xRwKu
z!8ZX*FI*o<_X@VlS4V<Z5cK6i`K}%REhzif(<<>>6#$lCc)MC4O46>rz%f=-F`UWZ
z1STb4W~8f3v6KICiF}c=vz)*JbPccRHpH?I=F4vh%b%?BFAiP<K?ruVH87r0-4~e~
zvk0CG1>2L&^qA8dMgB8CFhHQe5(2n5*h{C8gbJ*&goOvi34k9Q2dgHA6a$gF$PvsE
z-8cT@+>zWLXQJU!bxM7oVR)}6m6=jy3*_<8B$tn&A{FT<-!H;^GP^@EVl(HN>rr6|
z1}7nGFDSKc5onpoZ(8S{)2(H_)iQZ=^)DRNFJhIReUaga+5Gs;-5tUCZ;9jF6wEQt
z4Z-B_IXiqt!{<#0#jg*)J19hj`8>Puv$^m4`^YrH{STlN%V^rqgT=Vz+wyNJRt|1e
z>?ZD?IkEQ?(dmaqGf7dvP7LS<LGXYZFrm&B-f)!#<Q6A4c{XU5TMw^l5M*P|$VkNo
z^wmc_F*5|<j;lKu&!mF&b1BhMslBs>As?I38Ss`3nA{ogoDHbx4A@`;$`p_*EWA?Y
z+!M-daeq`??#AK%fv@mFgQ36cT1k0Pa1&7*IM^@>(6;-*cO6)={vk_-agpP05$!Lg
z(?&)zR4-!Bs>h@cV4A*|&)6eT94e&7Bj6*YF4Sh{1%iOc4l*UhvgeB~q&GStU!H!i
zAbnuO^&DFo{KMnnfo2x`#fi3}QBCjfJAX}X@?P$|K6U;>@<WySljFsaPt{kiz}ogx
z1EJ4f)t3S4U)r9_+pQP}@o`j0R3pgu*4OYltCH2r`PA)un0vNQM%!QihFuUrmFcw7
zMZ6^v+pfhO176VN?2W|1ab59AZ%I9ITrDFbTD|pNvPO?NyN%K8nhpOdyZC2~|3akH
z=rp|3%h~t3dE^R?L?LKryy3kPy>O%NRU4cuw_eUTHP!nX+lt6hREu4UVKj#(hPBf0
z%F;o>?^%0hUt`-BUvnsRnz-U_?A&ej+@-#6n@SiO%q2@V_{J=VEQSa;j0G!|wR@{X
z*52TseK;`hFBo>V#PNg$3^NLYfw}0H2Z;3~(=2Rdb+6wwzzmqIOf<Sg!>q<@$o=R3
z*?ok6`?^Nh6v<R*NxiI<{pDG#aa};w)jq~`m4>nVxUN*d|9o6u&~ge#3>CtX6$h8Q
z{Qs@or?r5Cv&~F|aAIV7ZsVfY#ZoW&I8p)Vlu&xC@&)&W^wZImzu=7{?&~Z(A&uzQ
zs^jjOpH{GMSN|Pvi8zM!gZVQHBEZsAB3<}o_p?k4VMrl<@th{3e<>1NcL9wt>8|C)
zFB^{BKk^zlatwbC(r+Mc430OY)ldZj)?a|OBIiwVpG`Eh7eM4{Un4l~?vA^U<EF1T
zg3)5;VS)tRyOHjfH#)I1L#mwJ>clErbK}uC{p}Q$BecI~OVF={dtZWH_EBITMg3Z~
z_=o8V9=BmjFpkoqurTPsu+!`4I3sp@19zP`&$d4*F_;s5^&+SIX=-{u&iPF4g&gR_
z&e@WyjZ(?kxy*Tyg5eP-x+T8%CFiKEPINazADIDCE2sr+II)MCL%cF#uky!!dOCHa
zJEF1M>)Qtkukp^|3>ra5zZSd~mNd}e>f$ZCOs9jx%~G#mU&TN)I1O(PGIVdLyI&$0
zc`DSU#ubrh>xkC>KmTLSaOstmNYh-+9G@Cqy>2%`Mz(S-WM^mfcaynqy!X3ak@n#l
zH?OeIfupn&yi{Vpp-coE2HRG5yWOzfMu8Xtas_(zSB#;LDAzwjs+%nLtJih3ijf=&
z8Q_NKi%XA&m>6g4@r&bJxY8+KQ0dxZwZClTF&Ai?Yh+Ie_l5Y>1lO`lylL-U5l7S0
z54&&#LI^L~d}gT{X~k3SGuk6h)}I;rGgk`F8lv$rWNg^d`zvBgZUaite&tAMeUEu_
z>~hXcWLJNoeB8n&(!eA+4J|Fx3vC!F!?4ka6uG1V7m6LY-%q;xWmQ)+$=#Q5-<4Jk
z>$6vuqV?6ntV!fXa;ke@V%R?u<(rbRGks)|$!I%%f#pOG_uVffu?~POA390)GVSaU
zq+Y?p8h&~at)bnZmNGH$va#7jnecJ6<DFbVR;@zLQ7~mheM9}B>=g=nkN=dLFH-O8
zIA^Ao=y-XbSoZfy2Yo1J+fh9#5&Z|ZvFeh>GIL4e8S{^29646uuaKlh%u`EhmRI=M
zCk7Das(WQl`YQHLv1|eBj|L<)nrw~YrJ4lmv8a=YNL8{+7jZChP9uVo{46P@Q8K_9
z7W?86^}#e=M0|>MLtgbA?T?rpMf<8X1}y&Me{=#jN_WD``GR2M)xQ{1`%=TLn1M&`
zR8fn6@N{#D|Fw_%fFdz6N`1|MFB8rEDO@AqpZNDa=B<QiKUSpsfn-IX9o_<ju9sl4
zKBW8pR1QeAQCcu>ytXt>?&1eHi}OZbr}t2A0*1EL2t3C)2+1eB)<;%K%@c~K3r`Z2
zyPalOC<Z)V!gcFp_IVRSTUm-@+OHRwwx_T#*jU_6)4ahiqQjm2y&%-!NO?1q9-kQY
z_^Q$(ZkD6R<ZmwXM}Cy=@mEoIl-Le0oa~Q%O#NM0rtX$-?`XceQ;X>B6mzn@hx{So
zT@pz~->`jyD>Hrjep{bN*s-uv^fcASmPPjxi#BS%9v^dc5uI$VGDCn?rpENYXLkqE
zU3`0VzmM1-GE8@d8~TaV_x(^DTSjl~7-`uLO>lV2y#R#<J;tEukeXXc5RB;nd?Giy
zx08PB(`5Ok*y0Tua++<nm}9Ois-CFauu+iYbGQ!*&A(}$Bzmm&ch;$q{=cd%e`+>I
zfDQW~6K%>l*Kx0epWRvg9ml=Vtex+OYjmIXPak?P{nj#=()|+qar75KKgd@VQN0BU
z&ITN9M%NUWYDqFbGdO44zRr%r8gm)*U;R%}Q+0>OPH6BhDAQJFQL|5}O=p(Cz&|ot
zD=By73}06^BagzRyZ^;~##a4!??#3sH6Zp#t34(STXIe#2`(B@kI7=(==Q+-%@d{x
zb~xu)%ftU{O&?Gymzr(zUoSA1X+2^L&mh7PZyxiITF+^;dcL?^7#z6Ezi+SVOWp2q
z(@!o{fz<Yx?(Gltw5!)4IjkyX{k-Q*?GGq^UwLmaRm8Fv7>tlsu^2hq>!TUi+<9Yb
zZXC_*o?Rif#_{HX%qJAnR*iw*fN6l7*r#<B06y$>vq#voF8;0A`ebZhiZMXoGfX0O
z-Q>+vD`M;Rp65R6xGzI<hEfu{E4$|8cR|82iFB|bI`_!kSfd}!Pz}CaqHV4%mD3m_
z;ZDJEr;7aPXEJ)on3St)!5;}$RKdD;WGSdag2UE!{FQu-sm{}9C-;pwr5feSqIb<M
z(d*l7`QL8^Ryt^gNZrrlcJLo&J3A)gM8yqi#^BxhAo-%q<J{Jou}4HwAChF)mh9uV
zaAQ}-6xY?pIkZug+7axg4|Ha3F)L?X2}2GM?C+m7*!U~#j|iiwvVSpx8PKF@RO%>+
zQHuO&G^hPH7OvU4eowRO9zc#nw=@11(AIU$4;@CC^GTe=zUW<{F^1nF0SA$vhHXTB
z&FPWqv%>Y1@6Q0!pT=R0*{%PsKT`pgBKo8fk*i!3Y^>@7j;(-7v^q15cA(gF$?Unb
zmn-mpIA}MPE4<OO@lBNl#mwcrBLBza6cH_IU+!O8DoouSe&SQsl<=b$QzZs-+}-C%
zB1fh2O}>Ib<Kpv@Zj{TqrHi}I#fBA>idVt<i!Gi04A-9u{h1symY^fBDf~%k4TU7u
zKJ}#ib#hYOfVkVMgM<{JY=Z4AZw>GC=CJWEoakOhCu4^@>5pb2FNoI`lwbdRx&bxE
zl+w!*xq|Xq*=0yS7ke0r>T~9xF<N_8N20tTwX>;m>}5dxRi)G8Sl|M^{vVH!sAg9s
zx3_}YscFZsM$R^;>!&->w)Dr-o!G?v@)DaHeD#BQB~Yr$jON%%yF|ptb%EbEnW`0p
z2>igD(i6(i1cBJt=l689FYbaD011c(kk<NJj@A0Ppb9fr=?@L>=v=w?a@YlyEG%SG
zq(-y<?Ak(#b{gK}&M>>eyZDHE%vzn~KIwl`C^VNY`CkwQj?F*z%E*UbT>R=6Cpi1w
zaNHNx_OV3_^baLnB6n*(-9fQCB_YgoR8PQzMe0h(e}CbN?<4UQzA&I-!KFZ3^CI)!
ziA7>r?duFC89d?NV3Kgr=dp>!bzC|ixSkYy=-o+lUKTU-G<AXPG?VpRn)G?3bTO<T
zS~6RfI=scd=#pe~cVgd%@rzAfk%;(ogd>6c1?TybM8nPjBetHMs~i>40c5wS{a1Fr
zLcA7CWVQRJeuXt|!sFuaU*X^5;`7Z!J<6IyYTFSqc6n?!vFL+X@!%8R92jwtsd`6#
z;KWX7!FH#|+7UuXdiRvh(7KLQZB`;Y4S&0YE#|j}>#N~|*oFMVrXhB6V{FM3WI>dB
z+&|tJNQ+M17)$?}tREy}C;DU?>UftH(=aYq*tL^PPni43;FeX=8?$0%8>!@deY{8P
zCR_A{g}2+nDE=^8{9y}iNJA{GQ`Kak`0Ojym#Ndpw0M{z8_i}4V%DfKTPU+3AN4pN
zPpSeFkcge|wEa*g9#NUG;=_h?)^bHy%QkLnt)8gcYBDmQVD>|&s~AXuvH*ocEOMKI
z<k=uMvmN4iX}!^+zl<hT$3j;lfslK~DPBS8o_Oq9P71{y+AV2V3nT0EZ<~brdkOU?
zMcEP{b9q|Pn`XtHdqyvNlnow=h$hZO^+y}<T(dbKh3NDkaudsnWcMIBf;9k{ZeG06
z%uXV<_OmmBX@+8h4+w9t!)n6s&WCrcDHhuoSZreBa)bYcJ+LG-#Vk1qZp2S&=cY07
zpq0Y%<*lh7CcNv5{FP_O2N^+TY=Z5S-HB!M^=@-wYd<+7$mQ!z)G^%pRRn)yd32_C
zy23vpe5v!8O-8!!kQe$7A>>9?Q<bSSFfyWoV?<e?Pv@^;Xd*&ppK0g*oH^dJ=w0#K
z2~Qh>k>Q5mZz1Z!obweRYFolMtlM^7ild-EWNGi)V?Y7&a|p}SKM!u{^Jrjxf_th)
zY?Z_J*u$IP$;d`tw}J4X;d>MBpiaZ`6LgW|eh~6mLJl{g17O~I%)=oD+qng$ouiKt
z4*by>IC~4O7lIg!y_Urr;4FB65J!h7Tk?FNYvgT3{;!QSq>ND5H#uv%;pK~<Zv%y#
z#o!0mk<Q-ViX96^9%d<nW8CN07HCALOma6`yD58c+wso9u4UYm3kUXO`NRiTx=;Dn
z0Tm)yGBdn&9GgA7+GXD&5`MI3EeA2|ZR8YjBt`fWOmbqx?^`sI8&{y1Vfh%5p?u7H
z(};<6R<XnXDpeTzU@6}&aTA7<_;2|H|LCWY>jL!C{ek@@(}nAC8*>#GIq8oJ)=pPz
zV-q;{GPb~P9BWC6`qxEyhcmIF#d+4*tU}fsr*kaL!%bepdxQKzs9=JlHFe*`E~|?k
z=SNh`Bdpt41Dp=(WMOKlt6+EE^5;Lbr^B3z&fHI3u&AB(;_!2lQNp1PiljbBH}q;M
z7<3x+sHp(TDfa77nyswWS0Il6vYaL5Q-7HLxcALp{v2{)FPG<K;kWBF_rsodW<KAI
zjos;I4}qDlJkhdv@O%C}W8hi;I%}zc6_cs`X{|>?tT@<*VSI-_{R?m$J^4R&>17FQ
z=)GIY(8J^g-^t<AE?rb=nm6vjcMzvw0sT4y!qOa#VSXR*;$n?D?-O-b_TrV{M~OZp
zKyti^=#3Y*@EWhdK}zaWHbm?!^ZQCL+0nA)#Smx;7pj9#ct|149t&pm=<3@{>ZO!Z
zlGI&vv4<uOcf8XnY&hHKLW54uEkU@8rlEYZ6C1zf(Qi>%GFG=ak$(S-%3+T?&%X2M
z83gglS%-$#igLFd5_yl+{?OLkpkFk+Q@p5g7QilcI`&YbD4j?byH3%z`VSys5V#8)
z3_b%v?ax!XXDrz}xv=6N1M$uI7pf3(JB=?WG$d3IDqIgIi$#BKyc6eQ*MxUN*(C3*
zp^&cehakUW)9v34P)_@<={o%aqhwzM$0{W=(d(Z4OcV*#&v!ue>+v%f@yp_UfWhDa
z;bV#(iGa;LmHFNGvNLnDFz5ThNqidol*j*&!L=Wq5nu{p!yQJ>{3?R;3G2lFMu-)h
zOVO79>1d^<3989{3pR3tXZ>Dnt1t~4+}W_;XBFC{)TmrEZKi&)vPL;1c@X-#&Xa=|
zBb#&g_!rMKnxZRSMn`8Q9O2<!89EOYDu)RAd-qEFvqSfRwSUB`gdJXAcH_ew_v0S&
zpxoT`Ij1Cj;0v+w4H7K6<3H8amMJ#7N0)lN$#N=NWvz^En~rX;|2aQ(?>Yn(iMt))
z!s@ftY|(1?mqPy!=CiW2tP3&q1Aa%#5P5^|W1}R^@X;;Wc5Dd7@XYh0hQEZbG|Z%B
z``=v-aC>Kh2$5g+;2vuQ_3m@cXO?M*(dr_tPL1ON;pQ`oh@z5K$Yoz=9Ph}B8-Q+x
zZ=}?#!f!~#3#8u3Y$C#dbvt(Dn3QjZ5cTCkVw<g6*`{>Mmfjz&-iSc%oZN}?6Af<_
zAfGGpe}9>dIIzaS&Hw`S6rG)$a)Nnt{`2@c%~V25*~~RpY%{Orjj2Ez)G}88NS4b`
zl>=vsdM^Z~Zu291o^E+v$9LzpX??uy<g7OyEiEpRuqQxF1-!TEg`a=ZHI|K#Qcw#I
zB8|a`kZ>Cz`l#@#kdwwT`xyoaxFMi|#8;A(A7K<FddKYcy-E0&AMs|~OPM=KN=f}_
zF-6ErTE`yezPLB3KsQoI;KwPa{xB)IDLJ$}`}U65iXZ50`}V=ExUH44RNh-3O&w*{
zi`y7|Jif(GzaHJ<_d^|3AFY0O#MXH1A#IBb;`??-w<OD7Og$cby4#?1dv#m55|_3h
zbZqeZSa$u{*Ax8)H5<)JYCBf1))Ub0-nPDn*8X7+S5@3x6pg3<VGcCQDAJo+l-__}
zlcwS2&&C!H0YgCLI3rrDF~hVJ&-&H#s&t<U#)RkOs;}l^(YFhdy{k)$deRpwm>r4e
z5Q=O@63k!hZ`zDJjhDP|(@Ggl;Yi>L8UHFeykU5v{MFRoW$iTp<|CY#>9h~UTty;x
zZV7It3Q*9s56-VA*8Ff8QDn;1i$l;G?CgOb5?(Lav%xtXU4dMj%<X71Vwqyf=dO%N
z?(;p{U+G=6jeGcpb2gT9{oWY=u@=}6^dE1_Lvp42+9a2gfg>sFZSIV00$5%YlkVSh
zCZ;pI2(q+nI}t-HJD94(wGisIbmLo`hTu3>>PP^lLSmh=0Qcw^og<!Vc&A$ox^u=S
zJBG+S%!juTcLREqV_TMhq`Sj@&6R?E5U=i1WJ>H3Not{eeigKzV&JjT8~niQN1-Xe
z0BkJ0NTs{a0F|z#sCdI3eNMOIQQ8IQw3&OAeTtMZ(y29?tpYYr_0`S62cjuUb=A21
zP?f%Ep>OOxJ)tkNm|X`pOpnxeft$4|e>`?hi!OA?lv7X@Zs|BF;J$En?!<(g6U@a)
zKVJEm*@Nfr#-b{kb(Dd?xBVp3*AwUjW}49F5id@1KL}(=ASe-lu&H7XDk$0Dly8e=
zbluV<_c?EZfeE^0Kw@Q+K;mL-`~ixB(n&~^08ay&xw(P}|5sH7?9ftW@kIv~oIi44
zYNUg~LrJ6><9wMz<OUyis|YIphbBO;P*J6K*eS1R=mGx*!8~b4>yYl`5qpzf{^|;R
z7T;<78%y3OtfpiY7|MiSgtieXsoY!>TCX&Ot}vmQ(i)y7qBRUy%F{3SYY}4cSa!WI
z-W+UUE5^qn$=;YwCcl0Y&CoR{EPel~fYV_q9JGbp6X>DLa!f$~wAe6fu&8rWlbx^I
zTbh+t+||>%Uc;v{z=p6_BtF@>m9xq4T5x19(2tRFz+6KT!SM>7v?ijw+r_dm!hJ2T
z)<a~HB#}fWf1)faGLaNj4B38rr6HBQ>A3rm|0uVFEl;oq&5Jf(Rv<F7s-Z+|6bHz^
z!pm)82s1ua6X5sGvLWz$GPhIlt&TgjB%Ikx*pF8Am)mOmx*eKCyMPlVdWO}O+!RQU
z?SAwFChKBj?Trxp7dy2&C3GB`=@pqCpVkQscTm1J>TBEK!?78ZjBUi@!S4}>#2#tr
zS{uPv2!UCv1%4}gr?|B$RTg-Ba8~n$RYlC=e$8PpmgSS@3bAZh`|%k;CHS47jb@Ap
z>Nq3VN-B<y4x>zGJvHiA5&WG{M-DIas|fm&Pg>Lv!3{E-rxesw7{y|^F8tQf_NcK<
zen&=kN`a{}m?4&Zi2&pF$X|b$7^O|Y+3Uq9Z3-swJcyOhIS<ZTXkTm<?M6;5HwuP^
z>nZ#z2glp^kS+~lUwBBc-EI@0Q;fMEA=J6Qw3PtjCM)ayFe@sWzm@vtqY^P*rZfU#
zBheIi*OB4w@NcCHlptrX+VE!=8h?_R$rw)o%jB;o+U&d>cUvM>^$d`Tl)`DoR~Q2)
z#%{Kxj~Lyi=cy#1Tc&sV>0QDS{cvRvz5dX+ce*T`js^Ro%d(4$M7#5eVpW^?+#h~6
z(PD~(m~EofV-s^WsWd|8DwKppdh!z=GuO#YGaOrq)G)0Vz|`g(Fjkop-3D6-D$U<M
zx~NgbG%wx{1Sq%Dym&aXuh-_q(&H6k6Vbf5A`Eky$7>geRdc=C#i!-<n#Z>(xM}?U
zX!CfjBoJp~>eo&V2^;OwVK<NjS=iGWX3T$VOCS8E0w<Zv2<~wzMWBI)Vbihdp`wM#
zX(SZxpi=*buc7jnDAtY@V$4`(g=(BLZNEB`N9w(hg`m#}_cty^AvbPw7PTvh|5RmP
z@bGz)p?}p!H&2*sTAaIa2KPyW^FyVhb2snY>tuDf=6paUG8PcGr4P0Bq7QeP)}?;y
z%vmixo{E?50iFTV$^B~Z+%t^1Z6yuXB<TclnN~^#k=-WFUtsF~duauU{3m`3CuMsn
zpzOwH+{tE<Rj9QQ9+a~t4Ti3pZKC61H>=a(UGfaggv!-Sm>F2$2h?C@AbYcxzgJlC
zBuLu(#-DkNc!h=)lU~0N$PjSY4yY_ckpM)d$6|2JYFUsYxoL;`$8i_`wo7z#g?0aE
zE1M=Z$z$cp)Vxfl2&38j@U1{>2}C%(f>ON<m$LhC_%V|T+i?KD+hnL*(+;y&`*<8s
zzG#Di0El);ETh4eP<}U4V$M@wY2t5~(s`O@XaY4;g-X%RUcFOkN%#Iz!MH!?bh#O1
zny8ZVKrB=En?dUa(0Yhro^p|r0Nrs1epsOoA#<ID_#bo<p9?Ioo*fOoL=eE6Q4Qfy
zpguGn`^(r919jv^h-w9K-FslZ!@Dt@oONukrY<F&e*Q1VX+rJ{ooM0_Zw4wPrC4qg
zP#Uyq)QNTUQ&&+~TN>LvC6Ud;!2Ik!e9=C8u<}BQct9{XZ3yRt5;dCosdSB~etK`U
zulPTHmBX+yFwheIF8DY<qbv;ngm_=O0RC>8rg`UFS=V_(rCp&Ci8xdlJ{n`K+P&U<
zNf|e}m<1H9g`b|aR9sDwao7fPeP`)hKq8sD$Dq^@Uhg+>l8o-GbnDbw=?(gLDMUK=
z*7F$~kZlP=C-&##IX*Pg6DY~aEu1l8ukSyZUr?t5d5-l&M0m|_^5I`oxL5dM3-+^B
z(<lKXv`m%3mQ40mtAY`a%T(&myoK9NdcwBT%RNbuHlDxa>6z+BY_)sNO1Cu`?m-c3
zn!Ts7N;cciFIfEdf3g2elz*Js^gr8wI{gN12=||k`w~_xK+fy`1oYAGowj_BfsLC-
z#va*fZ9Tk6Me0Ebi~&bqMA@Rj5qv<8s@#u_;bb1(&7QEjD4$H*lmJaZTsq`MhV;qr
z$5_Unm8Pu@hXqjojM$mCZvn)$?%4+>b2Dei*~%Ty$s#0{y$nF}Cg7~+uUhs<TG(W=
z>fe??{oXslx)Y{>q2Kc+Od+l>hA5;WeuqE%bz4A*DL`~5d$fSowkJ`(Gvx}V#FZ*}
zaEWo<YsgqEGnkYhUzUfO<=_9Z@iLZ?=g{u9FyC$sqV#hq9sb!yx)!wXhxV<FLKE}L
z!yu%W(JKh-dzBlo4>n65!CH9PWn*cG70}=QB+TAisaU934fD^VRkAKZKw>7$8;LQQ
zU9*1Q7b#LSIXh3AP&g@r5J59-3_-pKj(GY{Q3{hR?5e0FNqwGvYMktsx>jud^jWvH
zTIf$6EiA@q5G_#&v9uZqQM<)NgCdFvF@f%eMC>8$3SN~m59R4q_1b(Wk^_{JBlci5
z@kZT5_SyL@i?$O_p(fox<ZkRAked{tO4Kf(zEl27;>Tg+#3AR^p2&ZjB>&aa8u>3@
zR{rZVS7N1GlCJHx*nLJr6k|6%;E3sDIf)-iPPPe^rI*7)Z!=3Cw%B*!TP~gM9X9G&
z7=HGCn~72VYA_8m44`SW8nZ!7OvWnPh&4N?`!)?UJEVWGdkJ;O3AKj}(Q=~fhUgTA
zMJ=q?Ku*&Ji0o1#*Q-qUC0c3sLoPEDUSorQf>80>)_rGmmMxW?QEyw%VZ&_*JEKP^
zr?Z|JlIHda&PC|m#c#NcK^czpc$~tcJFaH_Pc5+U92`R)-JsV-c`O-0*1U^sa;*~Y
z0>{Z+kFGtIeHS-$QcI4NId!EZEa07Zc}w+F?^gmAtSa<S(gu0apHr_-ud;8ld}2ZM
z7SrkAkHqA+NOXGb{xgCx5ZU||DGaJN7^Np*ce0~j$gg0-j{0xC(A8SADr@M8GiQ3p
zh<@Ufe^QMn!!E{i%4txw36nuEJ=o5L5;cTu=a$=e@5y$0R~Equ8KJ}x4-=bbI`4Jn
z%(GR&YMR^b3PwpHac9VALf&;_EelG#kbVxRvcf-H)$z8#znsc~MOy75L;6(&>p$xn
zrcl3d2tnOa6f#8JG!5^Pf34XBPGW@p)((z4v&|dw7rWg%DSQqJpLOB0F?@a+J`eEB
z<A0VGmX;jY|5n2ND6!@a`#Wkxy?12ptk(2L{bEaQp|PF(5%(6<U|1Bz#=r5pA>Pdr
z+F>x&nmb2{uOFHyub;==uUt{^A_DxO!QcPzq1l3Bix^aKOh`<58y9mp4ZBLJ$H!xj
z^x_E7;OfJ5JSp|4Ib{)d4;g_)__;-RQXS7dd>e;uz)`_{mELr6zf%3X9`eYrgd=PT
zN3AypI^ynWoHMW`TxUy=TycsxCosAHJ9A<mN(SP7N-gb-dWtBqohB~03ZOkm-zUrT
zxj?+Mc<g8k!X0g<bT)xHShYl4m(lC--WI->@GhJnt)Am9F<A8$lzLwga!}50+m0F_
zh;4@|xoE>u?*haDm!c+kKY_%>o5+Ud+a*cwQW|)qGxPefEX3N;Bz0zf4F1(&h}zTj
z8GDE;CJM@hlKA&H-y4MUo|u%~DiqZdGlTzH6}uU{g#F3Mg@33QW?o4_!ptl9vY7b*
zeX#fldf_=`@tOr_-7<YuqfE&MFJ!l5tSofq(pUv@9&dq(P81p4YF+`pryK?N;U)4-
zTu^GPA;bt$21*;@`-Hck4ALpNTbW|w#!hauc`Z?>lknohAyzjxPV$_gB5%{EM?Keh
z6G<hQRaA$Qabdw%B3CgN-C@Ncll|GRNNpI@u(*~==l8KTb8vLcjGo&_=)PAmo+EJP
zUSs3b5d4`y%ijsDspobSgxb(Z*<r|jL@MgTe*?bj)|Jp04Fwj=2<k(lWT5YmcXt6|
z+Hn$0rN#tV12D9ya?p%$97iF0&ReUPp+rM7#qoYv<bQH>w;>C;7Vva8I}>@f?zUb>
zxufO7;2G(N!;ubt-q{~xPiNwg`Y1t=BF;~JQY1}x1&XG3nTC&~-%hx@UG6R!{3x83
z)R<P*n)-%U_{0<D#K3tKnZ2pQd+MpNbJn@mO<=C}x8Sc3-Ec0#utikZ(P}I!4WESG
znz-u6Sny>K-f%x=4+T8X`EAYum?NLVz41kr-mD@teErQT)OgXz_qp+-vV2D@{TdTc
z>F${14H(v(J5vI&czW#OlVTacNu}F{-Q(i+p$Eyw66KAtjL0rlkOk?{C#Bv?4nrxp
zA024yr*{(`FW;yM9U6~K+-Ou~Toprqiq6W7y_c<P#NS*cuFGiVv5Z6pu*u(d1&CTR
zZ2VSiAKzSgFDW6LAR5+9rH)U!4SxM&($enom!G5(fctJ(p+ajYy%FrOEi{s}`&D{p
zZfTbH26aVcfn!q_m|JHI2w_RG84HkQY8@6O4Q*I*-MrC1mUfzTmvm=RJ!~R}{hO=2
z%UF6N@Cxn6Y4urZ>dj;f(0zzMcD#N_U6KF-0<Rbi4$dW_iyz_K%Ub!`(h#Y30H03!
zZ#}pNZrI>e!ZP({G-8?gz*=SbTWBN9P*%n!K85Lx&V(Y=8OsewjOPuN;dpA>BWFSz
z{XbqFjwibb+7WLqkXgyW!}-It)XDxJ@eNKj-Y=-Wd%p<ghTyXMts?nHJP(@xshBz#
zHL`JnGt}`;^&hSM5dI1=^i->i`?lj93Yv;`)SP}&D(;lOUwuOC;fWn%Pp&?8>`5tX
zYA13iuc3NW&CLf+2E)5e-R<Go!p^RpQX2EW`qw@9xZ+I&PV%MD?$v#|{gtI%<JsLm
zOp$--6NSvcWA*B6@tPxffd8?KPfx&43VRZ?G#I(<72-|f1t)%~yzbPH%zR@YFOOb5
z?U&Eb8y4hA8E}Wm^(__P^`9vt1K~dHo#iCltz3Ks731Qo6?lj~&WL9K(LrYQ#j@|%
zYDTM)&h=X9;;rGV*;U^7xsHp&2vDO1iG+K=zhzZui{RwuE%1N-bNNJJHJ4U@#lQ+$
zq{OiJj1l$i)t%+>u|!jrbalRCvxeiw1<K<YQ-UuUh!>GR@9Tg~^MnO7%7Qs4H{m^6
z&u4b489JvqUBj1tjA0@jw_~`}j-ezm);=MY83>3&&-{)P*aCtgd-3g`yVnBKrT^9a
zygL4K+<n#@A>lr04Uu87yy>G^2L)rMk4>GwNC)<D;PD+Y;<9`Vh20Ww*x75?wz!TC
zm2ax#xL7=Q)0Ys}S!WX0$F)=eEd>6raDP0wz}(w6Mo7V(G`!NidhGfY^uzzGqQD4L
z3QEHh#T#M+OaK@+HlU(d<P*UkuO;?%IIqL)YXz?r_H{C^+%dvwI>((b!{0}#h{Gal
zL`WvgPC%n)BXpe|+9J5;;R2NNuX~WJahm>`WNCpsM>OY$zuQ1#zJ-^FhS-sXhdzRA
zCcT_S)Bg^4Ds0YF8e@!q9QSBkRzTv9>vV}z{WT|DH90E%pcAc{p+(cB8tHysAzkHQ
zz1|~M@Z!F#bpbk-$A#<Pgaqpn7KlEm#y@_T`o~-FAX6ijx@DzhssF;W2fxXTz7_gN
za-TOgg<3xgDk05|cS*6ETJE@Y3+PeO&EXBLBc8jN9$)i}jPecgg<Opd$<@M^N^c=F
zVN$KUW-RrWBENRLNwqjDs9I|7G=O?kt#G^%ieKs1zp<<1(UTc5Gq<zGyZwjz7n?kT
zuXtGYKdBX<msR9hm7kfZYnYk+TbY^jhK@P!=vZc~xJ&QsVtJp$nO4<ux8UdAd1YhH
zJ29527dUxmmzX&8Unl;&k_}Pim@E6Iro{7pHBMthI7`Dp$($24uv<CI=lZsZ4dd}T
z<1Soo9M5bzU0pde;nthuL+7hj?Ztn<3za6_-tL6{rW^iQB*p2USGC5iT8eFo{GMd#
zB%oHc+`oxf#;<CrH+6aFW)lPXRkDn11IS*$?a3XNqC!2dNUfflaVIbjy>Y4uXTeZ_
z6AOLkc$V!1yrGONg#+AGh4voKVc|;E=T)tkkQ+PJaaYe47}9(uikfTvUbg0`OlY&Y
zB%x{*j**p$${X7>C2Ra|ye?)gRU6M;5QPIM@sCyj?5mf`B;1$cQ<I+YA@AfSk=p=<
z`+@)BA`SGyRdKg@+IMXm@A(>StXeu|!su9LxtWKBD{Rb<iJ_S--IxKL<#lpbY^!wl
zUz9%u5Ymslmztyh(B-9O>e7R~)Yxh2<sXAA-<!%P%qtOYVN-vT243>kAM?UYIqumd
z?t~KqpN*;3QNH}vd%Kli`}y*h0tUVOb(lPOQ)?-|I4oaWiz%OD?&>h*7rPUV4z3Ez
zXMOh4GIdi+{nj=!xTI+?o=+w%^%ovTf#;R6N|pwfG8G)_>U5_vi8@)_zc#rhaT2#4
z&NIm*`)86XNoBzzYJrqg(uU4@YW>-^p4!fOYW=~c9?1Ws+Mf1(=%pO*i1d|1qe<`b
z&HK|=;=|Bwk?H&~#s{DQxED)1y|nJ|*YW}5z@ZvoGbj}wGGuoV9LYVF33)htJ{Ugl
z2%n1Qycmo&tY^k&%0*U;SvW?w-sJsG?!;eUwb9p!ZqkXcOcP1yHIDHX`p%-AW*=$c
zpB4ao)662&g7}u2l%34Cie5y%+%&+r&QXenH+pxohvKNrmu>H$+(rJvU&{6Bj&(zs
zJ-_X%rd*RN-Hv_sC;L;+SfG90MvV@u>=aMdwNaV>NSUOUb**~8&%Q6^U0J(Qnq6bJ
zklbC`5+`%_&QQ|)iBBVd#lWa2S^frQaJjoA9wpH>!P$RE<kd+5(6hGso*~|(610y;
zHCL4o&RSbI+#mlpWI4Ho)BHOYBfFkD6pdy-hPv1fe$TgT-pqHze~Irz`PGqFR+jw<
z@74tp>f}b&VB^&HB8o5)q|k&ucnrO?;j7K)2X$oGFk)}}iy_};XpOs9=8e{VebKub
z@3@EF8QFoEWK=FQ#ATa(u0oe;*r9CD7Ng}u=|qTFquB~^lxBrVgYK_~6hjln1`a{i
zQgxi4-bJPL6Z7#dT2bAXHI!P5g)IG-5Ho|K;V|S@iiMt6RBph~+u&*4gSe9X^wan|
z8^rNl<L>Nzc`+)JL7+}ei{)1}{*rDbN*sW>AFJFdy1GhSqoj9E1No2p!$xCcoe_3P
zA`D)^liOvJxi9^s@u*1q@m>6MWv*g<WiGKkUbFwG`Qzg?A00LS@`RKf<sH?Dv%Qfx
z6S}!5QvEJM7p!MFPk<x8fjBikVsuMt1ABlobuz9!=;TLD3BA+xC8Hav-wX>%JrZ9Z
zt%%eFpP(5J=P}(-GP<R@vHh3%@0)e1{-t8I_nKl|t&x4c2z`Gj#Xws-J&KJ}Q8aez
z_xrJ3Wkbo9C{!mhB{lR=zq4}%56hkE0vYpYa_2I%Kmr()3Gv5$izSMULLzq!d<}+8
zn4CIzXBaJ?RAt6nz)&VM>5cm8gNS@&uYgdURzFgB;4MjgLKlRcCSMb1G0mJH1i+(2
z5BR$-Xi2Y75WnWMrku4JX-fZHZzS8#Q@>emx`LSIbR~b4ggC8t{dnEh_1f0;Dijzd
z&=Lq=g~jxPb*#6KHv5oRP5h*Nh^F$@VjsiF<bMV6I9JsOEgDXQon_Mf>kK~8`TD(W
z>})>Kc59s_-Fdr1z6v)OvGf*}sy6zg;Z&!|8-5wHXND)48`-1{e1(Ivuo{}<<W|;D
zv%(yhixRz*FpE-d5*}eal@VS>aIu>$fw1v5&CQnbrnEy5DAN3F8Q;8C^dC__X560}
z<di79Ieb8NBypNAscq^hGq!lRG|pgk6#^nPn?v+wiZlwLtYY|Jb67W7ud&Q|httn6
zjg$$WLzI6v*}LIROy34y@MnR_wO^Xf6BJy_!0>t83>*B7**s$drml<)xTH2V;ELt3
z0aveSzrxbtygv=F*<+e9N{(f&FHpnfCo<`p(Bz>DX&i1f3I4xn6gG)Pn7&qDE!n3o
zKy=^1=8r2thW*5}-(UUOUiMziQo)r_YLZelELb1ms$S#O)tW4qp~2EEWJELXu{gT5
zAeOzs#F@%czZ5VGPv2Z{OziH)*u#yr&&_hHTD*z<drvG%@Beb_PI-X>@3~b^%E)bU
zr25dNs>h?vRZj{8a139J>r*T<7Bvalz`~0*>7^W;8p}3`hL~Kj%o>c=wE3Q`3Ma3p
z2_1g*P49Q?!vhO9V{4V?*32cV-sdKx`wcE|a(TQA?8Ut^ebIb~J#_0^UHCEKo!Q0#
zcpP!<tUeN2#rbFN!wy65C7Rm#Mb=E7);}9>KGUb^5%eG;5%Kcr@1nB;jp-tslke2_
z_8)M?Zz+xcms8;Ly<6HOXEJQbpD8QhUfULTr@yO<AEZ;J$(Hn(%a%FpR_32TKFL_U
zK8f6XaNvzaZf~&i#Ddxh1rQjRD*yVQe2C!nOdldr#I7Xnp5rIHbExU)hD7<hsrxie
zC5hZEyZwc~L*kILSI}Zy>)&-BTO%xt8LTSzAz5D~7By?s<L;7a8gfQ(cEVk<ly@F2
zQs59YnRnf_mmC8T#9tr)FZG(%GH{l=zqE!POV2&-{ysA6IgyAc>%B}f&5xkbdL^hL
z4B~ZVSM2?IMe#ZvE@H0%d$!z$9;~^X7+uL$=3x6cnk$ew;nl=FcVPFDAVxkT{Vs9R
z`-_cbgE~KhG%agXCQh8LgFNgG?U&NK33GkS2{wG?D9$`Q{Cw=;jmg|&Z3KG-w>Gr(
z{$|0iRKjp5e7!fnn8#ko4bSg2u>~?1ef?}w`-_KbIyW{~F#pukTv1`3xxx!i9?Dqk
zNVpgqfgxuoc#`}5-F^hS_=Jal{!X@Ul6yR7u+=6=DXw);t|rU(r+$m~46v8EpjeFo
zht8d$mj%33gu~RUkVOO&VUaa1T#8W284M@`r<oN6EOxhzncBBaqWu=lV~NiC$W*hF
zo`(o0xDCTi?RP9C@3!W<I8=)=^0VEo7a$tHGQ5O%6@9Vb-Z&IE2G6YM3|U18z^A37
zh^0JPjHid|GTf(lCw^IL@ffof4=m9Enq8LtzAP+I`8wBR$bU~YaX=ZM+->7nEX=WJ
zqsXWBjv)`qnZK_7=aGMInMi`s)__3$kzcgtO!caa<(>JxIZtYh3qanTR3^{ByLXAY
z1dos`vFNjCv^S6}H8d6s>aZ*t)Nsq=WR3?mUB7+M(%fV^*qZPLJ(oVMzZKOZ&4#hJ
z<Ky3X%DxU9h+Tg|umyd0$V_$HujH!8zX>tX#`NgJVwsin6yOP%YjALM{*mBc@mK^$
zw)iZWqTuJ0lV`gG6GJ^2&#=Iz2e%SsE)`5PyoF3*m;WB3WcSX}J2ePUUUfh~(ye|8
zs6yN|w#>hV^agkJtwN=l!&^rleVti=m%s@{;4uGDCN&QRLSUSTw8mgE4K|aDI80VA
zzYo$t6~lBy_fevkZ!&szlq`d2wD9YgYbxLFKYB7wpnHybuoReQJ=ESK*yjTFBVyS*
zc=fI;mQ~bzw9COJzBL}Oik96BiPoTlNzX^A_q$_1u-=(}{Qr#gGDEa<VR$FgHyKlI
z_uv16Tpo#LXE?0MZJLiX=NF&4TFWto%Gfz<i)|)M2@DpEWpuSX1%ya9>hFKZxU4A=
zP%WT%P_M&-|0DjVKV+9jWpCE8sr#Ej$s=~+shm+cf?~vKgO}cGAHwmTkU)>Q(<F<f
zx!uChui-qCUJ189X`@sGdfRGb1G&)Nx#)H_h}beypSfe$Ak6j$ImBN(1v)b;y+HGk
z;5EIVI2v1W25-UZT;i=68`?EvhiS%cD28Wo>mf$LXQXp-mbAdw8tBA2rmWWR-`<20
zVB~Zla5%Pd_kbEh256X?ox5=wp{G}Oh8|%$Q+V6|LQFfMOie}fTjKq71#i}N?)SVU
zscsc1LmRqEZkAN2+bmPM$L`^s-rwM*&9Pr=Mu$u0mSnE~V~p~?_eVTl>D|7HWbwU?
z(bSQ%mb$Gvzx7VKExP5Mehmt(e%Ec~{FV-8niE_fM7Ow&$?|7pL-!v~Yt?t2)<Sgj
zGUV;Hvl$!awf_$}FC!qj`B(txMQbm|6$HU11`l>cTik0wQ$Y)VFnR)g1^-1<ULOgN
z-O>~+CuEZQFWrMx1Xvk3!yrkt9I?T10xZF8H}dZHzDME%3vmAV*P+B^p}dEvAb5&8
zyuu|9N{7mwkL(#OMa!IExJ|>(&4Ap&%bk@w5kBVP(rxO>hzG*SsvaCX2W(oomMe$N
zepQMC>i{1I%{r>vB};#j$?q2j(X}$#2E?Pd3JXDC8QH5KLE=xy5z9UTJmKZbY<tSz
zN_ncig4+hRDQ|88n|$pquRYaR-q~fArAqdx-3ocfV33Q&j@n&^)OB9EXBq93LEwH0
zMiu~TVy&m-(c+7SdQXv+eOk<mb~l)vumKwF6sl=*F`=`II~}^}7_3JX+5ojtoIj%x
zY`IB;x(?nza}|3Cj)GZHKlKY)vq<^?`|LLuZr$Tp#OAvss>>WR#wjjk54VVL<^{BG
zLvrSsI6snsfmbWoXIRuaSz=UDk1;@SUqlHTt38Hq?CM(96jPZKMUBp_PACUCZk=bx
zHj5o=HSCzoD^Y_aF>P>{>?VgUgI7k^nIT3;1Mh#rK2Jur#Z2W;BD*+<pBQ41Ck~hx
zY)PL6arlMW1__m{9t>heDfaC~*JxURv=Rt&Azimf_EV^K2o!&n`6!h{HFD+Er9)$B
z9U*WQG4&e#5GG&-83E0oQ5D{*h6h~m*AZWT0Vc=6UWn*_!#{Q7n=G%D$LYapQD2aJ
zcjO)%L!-RH@7`w@OBJkfKD}UIw13m6&i3zNU3G`Y%v@G&@J~YX>ky2WytZ=@XstV5
z;qUI$^^W(K*3gfTGVsQ7y}wk5T>z?e&VtA<{U|{z%_zsR=Ru*<;~xF5qgaobCRR~=
zeSt(lH&M7)1>G-w;RhC#|DX$%PZug5UmRS_)6PleaVn*fX~?lS28DPBxi};5<k+qd
zrH_(!E}0o4Mz};a73cx6fbjpcwDX9bF15shp4p`X6gC`Qs1U%c^5b4j4NYdThkpGK
zN^U4lr0WZk<;;0%n5KEM*$IJ4E61=goyTG4iv{(X@#w1w7c2x+aJ&PH15^h;WX_FZ
zwfzoOZ?>0kig3x5`+Lqq_PYeAsEU7w4_-Nik)Yd7?w6fwKK78o4|&{x4tO9);52wS
zXHjDw5sYC%QvSck1gHMfKt<37QWwX`+}ucO1;Inpc$|aVD+!KZwiHr~Xbd44-aOex
zJDT#GC2|__GG$@MS~My5vo)Hu)hig=gnM$oZMuWKzZiwBgs2^5om6qza)Lw>>nusM
zUb($&PqNs$?|oB0XFPL*)*!>Hw9c1}efc0u8U0SmsFTfxGRjgZf3_KIJJ#jRMm2vh
zdDKzFi1X|Yr{CDdyfL}p!(IWoAt}7_jNd+I4_M;n<2#L|MI2YM6m{~HV+W&t9VTof
zVf*v3tXN2M*15TO%*7m8%)YE)VF-iu+Cx3^eB9j?x**&MfA(>35ruW`H{$z%B6=`s
zW_@DcZZt4KD=WN*RaWq4LcmGEu|f!TISnyo?5YoX5vS#>rO9%B>b`?u?LAmo06z1H
zX-jush$^vFW|Zy=T$^Bu%`ba%i6NLiSmIeV@Hc*9bv2v$4#t^}O~JJ}8+lgveHzbT
zPWUmMNOr@)<>q@sFpix1zJh0WdysDWWW4=+XuMO(#?S||xywe<>a`L0LzK!zfG4v0
zu||39xC>jHT-|8G{9(uTjkxAgb&<MR@DFUq6a#97gz>#DEFwbSBzMP%SNylWAy}_d
zK+?NcMWa|s<{rWO*+KUqHfI$J<b?c%XTI07dO8|59C}u6WEl=;{C~}PAMuoliVoYr
zfo4RC%2$zknrlnXm{k5=YIVLo9Orr_k`o`c=8gWnhxd&v`sAh)Czb(Fko^($kH!S8
zxw?9gc5`+We+9m*q4nn}qB*-J4Dx@(tv`0hQ==G}S%156M2BlKIXRP%Hac#$hT-&o
zaIZa?dk7<pLRVqymC+wSgqyABTL9Az(j;>Qz-*-H*_FzC^;0(Un_?)kD-{`gC_95^
zQ+6~7PzGja^OVl6b~8mZXG<A|6?DckMK@>5_?G1ka$er3VwE0lb944YUd$S8&JL$@
zq#^t0u$vUTLM`~@zI`24k`wA&a|RYpBn6>s8=1}KvxIEi!VD%f)4|QKMgFPW*JJD-
zw)>CC$SfaKr(7n*Js--H#(u*x7WzjNaSJz2px|Sw6Jdt+<0#uCf9sRN2;w;S!0rB=
ze_!Ic2bb8uecs|kxn9wjxx^NONz7RPOKg*c3IFU%d)ZW)gnuYv4V6ZiEKR!45a^T9
zXwfj|vUAmg=4@*|qB*-id~M3E(OXk?u6@j~kL~ucO%F1z($ki>n^z5?<K<KjEm8<V
zNDd<G^<Q5k6SfCbpF{y~ERiH})T}SSElA$u?!kB|&Va=-KZWwC^~KD30+|_u)SRs$
zpMJ^Q1A1-BX86nb6pYloI)zZSW`o=Cs*mtf_Y2Nahjir&FEgYrZf2VQungeLYys8e
zlHk`&+r@o!dF*E_{5y>(-&BU*7qzis#)loXS@mC6Pko|J+d-!v^AE=ycm2g!oqDU)
zj4)=zR=S>aS4Rl)iy!C=_wOMoYut==b-(18)vXj;jW<>k<UfCiG`!1{&7d?Ea)pXm
z_$4`&jb&T4y1cBym`asmwA}x&!NLkmf^v@_{w|fxQZ>meA|z8Afw+By>1-cReZ3R4
z&>r287}iuh8<?qx*m0%viSnjIY$ArJjs8^{xorK9p7PI~C9}TvE3KT(U={zQdqPxV
zu*f;Bj=N0wAlSnnaU*EQ+s>eFE%D$hrj@2044Q4TZK`Y9k}NmF7R$5%59Z!CCc#~%
zg#N!SMCM~&88HLG%-(=7a(MxA!F;4T9fsHRGiq~#1}<NTP$x{&!!~41e_Dxch_0_Q
zZhqs_FWCT`*HEqCJcK_&YQqo~c>hH1W^^s@`8%HxAg(qo%8i=$<^X_upa1<^1>CXB
ztr`JV{Ovyn_H}4+nUI_EJ%5zMg9adRbYnqrOK&iUOi6V9evZL|KJ$xKi%fQLMg^9`
z=E>&1a})~w<z$4IXbs}!*gWIn?qZ8CC1)Tx3=rFTs8-%Se{)uitG-bUJFxWNhK>C<
z4I3RcEOR~UajiBfT@!QXb@_=2z6Vw}lWtMF=Ds99_s79@m?;ewiU#CHCBoK>wXONC
zS~It^H8a9tdT{9Hhv~n1g~KF0lb2J{^hamJmdxbS!rZfMR4a5BJY_5UR?K$&nT(m2
z>^E5IwBefP>~yWM!I{6H*;PCIpXEoTENsWu{!KfM&9_6__H><+mc*9)laHpXP-isI
zZNQqa(HCgKvRa-rOpDVvMF1TrNJ!P71!g^#If)Q+^fc&D@-Rs(b0lBwZ;z-Su{A`~
zVM#ocIltJB4Y7AP0JbHd^d3muUABrW$=vG66e^JTBk;<2Jkie%)3)D&W3$tUEYDud
z-&kf2Ds>wIno%xNue7NVzj6~+iQCFwI56e%Z>IoKcwu?9_VXv<=a2YYCvHVmUv;;P
zj`#W1KPC`BHGvm|fzuTzG@=ya6_~rXjS3{O*#qEE$2e2y4*xa^P1pHEvOWKeIKb}2
zc|P<IglJkG(#_r%$SU9PReoRdo;AZ^$qm!iB(BOe!@%Szju8JQs!i7!R8Y<7m|gyj
z5HiYH$%y(V8&)YbhpP0g=%3tWn)z6PC3_3a=V~3AQ0z4}_O38?x{d8EvPbM>8+%I_
z8@I7?o}t)N_ym<`Xm*&_9sYIzS=7IR!)U*A4ZwXvpYC0^!4<hViQ(L3ck*|fklXbY
z=8}tKE-Q6i+#89VA!psPyVaLH^8s4+DH!DG8)Kz{)ISzkh^0u5k|Ss69PxLwqPmZG
z0ZyR^sA1SFcH48Hx0%MXYc(Ku%}@j=(Y;G+z(0<b=a~~1TMXNV7@_KFU!Iza1<Hhh
zAdhf%G!cZT8bUmi;!uOBb%ph6({fhy!_1m@mlBuXr9x1Y&|t|f=ki>C41>h|^2R<H
zJs{Dt=A-#)8$kA2ABg=achW@n<$W9E?h389dff2NAx`c~mk=E$UN=Y?-DSeXe&jdg
z@XR}gkSeP8YTIv4NcbhO%uy->cRi0RR6<+Z*RwXst58j{_-9i{{$l3bxaUXU1EIb-
z+eVarP1!eji}=eP5HCKBS|Rj=u+@)c9>qV1Fvf^iKrzdSixjIqLm(J5wbAKqA_x?F
zfNzZI<Ez-myLT<sr#O#eC`7J#k-Ba7Px?%=Y9qq}yqrp|665ngEpKd67U<zUP((Wt
z?mw{PLKn2m6zD$TxT_W3{w0`It<pRjk~Q(eHsCCdV8f0ue@coWp4w8*dD)2@#FD&3
zU&WHtCEYjJjG5Y8QyZ1qChYJxe#a2W2n8^KCloS)Km7Hc4r@Z&jI$vJ^as?Ny~=7c
zU9a7!SupS6WcW|tL6$EFI&M=IjmK?jb$&dK`Ls7{K=TAdU{>1`<RipVlEBrjfnA@N
z05idc`+U^~sFnV)@XMqY$ofZ$cLvEFuCQEow@NU}!ZdV$jR}q9n{VdMf8B)E6%*>e
zpm)ze0*W-02246-utbC&YJ?oLQFHIA)Zd(=zsr*R9S3aJ%)d1LD5$sw#e+p8CT+J=
zHXmTcmd;H1j!KXVZ=eu=EgXRmN2P@fgE(G@>s0KbkJz5nq*khD&#@x)Od5Qu#zFkP
z0<0NIrfQj>67|sHXqmKrAX~DApdhuc3Eb^|LRfCxp*P|X0##D_wOE5+faO`N_K?(D
z<kC=qUIapZAI|*eaaHC9Jf0D+K}VqG|Jsc8F8_D8m@%s%n9Z<3@r)NNyJ=f?8oAh`
z(;}vNsQDObKmKGsYHhNGrf`FzM(lN03)xT#)u~(y1;IzcgggBA8K_R+8D<Jma*B_b
zLb?IY!(^e18J%U^YXW)@v{SI`B8}<qsrFq&%hs8)1t^l`aB?q}Lobsiw@Sm5i+4EV
z4*aaOckI@gFhL_8cg>D2_=B*S?9lOKnlGIEy_CQ4oL<)F5CcmYk?NF#E5NUQ7>V8b
zD(pho6jHw!CG~BjZpzk@FzU>CMUJ7IMW1vOjU#o9Qm^S~9<tJGTJd|9zK)=fm0V-8
zG_)NXvNSbyDuh8glqOAzc7%MdS2+K+qd<Ye23n@SpalQ!qrpIPwyQQH@GwirAUf{h
zZg{V+|K4qY{1F4Eyq`LvtGzeAGa%x>`R!g2e>(Y{uUpi()*{@FFU#sVS0P*(TinKy
z;e?sdMj-zR%LrY`b0{*W%KW0cN#&XM;2Gt}jk^C+%X<EEnU;ZZ@o?;~I2<++fvYI`
z;G6jPF+w}TZU=o)X8K#EVM}b;6OOO9Ar$uyGzyW8ibO2qw(CcRwZ}StyZ==dmI!Qa
znZzX8b6j@V=b7nC_Vu=Vj^mKS2k=m8-0BY7xD}?jSmtR%)9}|MB5jHkAgaj2|4osH
z<cs7K1>#;Mm5_J5zKlqxyeXC*$(NfQ%K~CFy~2~SP*68JlJC6@(bUu}K{%8K2;9x>
z1zX;U)=Rm`2^0h37$?LsL%>pCGI9xDS%^u0jGgFqm_|3J;+iuiUeWGqNr{3-88|xm
z>;c=!#}?SV+RsVBJmPJ2nVRgskv_PyU+Mq(@%z%=aQxn))Jof1?cp-d^PQN}WB}bR
zO6t6vI_ajCoS#nW#43*U43QK0+~;q<)6V|&#03LvJ8SmXcK$M)jAq(t47-@)Yt=??
zSsU%8^xrqDbPi`5F@pd4^(HbxB!U*VDRq5_0aJ(1N*i>9!Ouwyl${kPXSPzzs-5Bz
z@>!9a-*Tw+rc?bjX2nz{LFxYYmB65zA^++fZoq@r3B||6>bdkW-!v@0;T~S}cYoMB
zQdw)Ff^U*8&!BmAD@dJm-|-K3Y)!H3uZb7yH}-Nv$3q$#%f<)~^v7LRsp&N^1JOeA
z=kTq04vt`rc_sqmHo-$?H&JeLy1titTb;ngf?9JXrw`?cWnbmZmZl9yvw<4D8AW$(
zb{j1Wwwp#9(!h9svk5$L)BK*J9LvZ}a!>@efFaW87%s)~C6-xXQ@51Tpm(=XK8QhI
zPBfIE89J(wQ(&&3AMhf|8k`L>V8Aq;0+kODDd_pB5XG%v4W>qMw5t-_LN0@P4wK}8
zNi&75o=YDc*K#|1u2W18Zl{g?cTi%=vdrNaQ%LnF^l2Q=QZoz-v{}v0vp`?mBhnP|
zly{jlwr-KQ)1B^I*dJ+_-%cfp`X=iR4n<{#BVd<FJNL6SL~Cw36pGTv-CW*q-L7!S
z8>!q5|Ht$=<Zaenq?U9sMkmjcE+*zaW5%_U!na7S&<%3mlon&=2fZV~%e;}_pV&|P
zLp$bnyz^Zu=WzVQR=N7f^kYsb#&+>l|9cPY>IihlwQ0aIQ6>KXLSV|#J2PPBH5?jy
z>!c~?K~SwaV7hKVfu5n3S4Dn*mCC_RjS+f>&nAA@5sajjvU2KP;JQobqZ>kruF+nm
zcKP36RvCfX1GKBRsUlV@N2p^A|3}l5%8vIukvyMI%Nsh&o48$y)(VL1U=2fMGIEGm
z?o;pI6;9SLlOXslWsZ1U*ttT?<ZksPSNQzDgsXONgf|a=xt}u2W*eqCzkBwF9d-+8
zGG^*nPit6yX1@wBYDh?Dw@+?PrP^JrUqw0Y_J&=>=3XTKR3tPi@bnuv6#U2@y?!+e
z`Z_`RWwOIREDRlNLRFyB?xQq4JHV;lT^a+v+?N~P8S1{^zZ^!sPNYsj?pX9X6CWX_
zo|vGYa6oR<J0DuKe1A?w83KNpqWA6A@U5<~qbRiH|M|XMnv={jat5^qh1?Y`)y#e^
z)$RT)Q;IOJ|3#JZ15$x7uf3Z0H%x_JI{B#qk>FRnvk`9SWZ*x?l$#yByNzaV@kea)
z{$}`m|7+ie)!Y!(9{vq={CtK(&!_2Q@MECuu}HshOui(Ih&SUXX*N76;bUIh6vgn9
zIc;I6f*Zg@iA5b9sJ>#i8<wu7ZVeG2wCO|zM+;LmwD$@{mhj*v+XRBGGnVt;ApyMN
znLfr^KOV*s4jIQK*M%PgZor+!jp2uw#3gIXOtPBHF_B3}bztq<D>$EJVVqtD8Hz^j
z?->n|-QS8oxYY&B;^~fFsex8QQJ$-(ow4)}2?xdv?K-py{RwGencL}*XHwWTYYu5j
z;oobEAKHPi_g$$Hs*rTQiiZ@l{`{6J!7nUf&ulg{iGQes7tf7q*=wiwc73MnR+&M{
z-gSH=@>oRLw4BjfF|HcE_TEnPmGrm=U712;Wn}Bj*<ksHWr~+U{*I=seA;j{#Ow*_
zhQag%S$txbvOnZ^fRFK))$UWwm8&BlesrOx$L7L~{AEwv8sg8njWnG+N}qa=^xG4(
zm&op?;78R27^5%&CTK88P5#IpnI`mw#s9N1!PE;bZXM2=kyA8=ws$Nm(Qtmie{IU{
z94e2`*u%?4(?fQQnxAB@@Bt7B<F}V$p$@YN)TmDWja|O`u}RY!BiOrZ6<xFX$VIh9
zk#YnGZ5ox_s9P*D@()3XXpOug9{Je)yl=3S|2~qt^oHJRwCf0EVCgqL<z|@Nyib!>
zSHRwxnz`YHJAPRW*Mkf{;QqCScd**M?RjZbx%2_w>F!5#70*7=XJ3!DraKB!)=Lg2
zrW>_q#nW~{YOmR}avPU+ty8a}gLc=7C@8;eeZ#TR5hfZxAV}hb5dDPO`AKgCar%rc
zxx~<+?pi1R)bX0HJa2|JGK)GkKj6cNv=Ggi%5fb?USmr(l#1^wV}330)zodHY*z3*
zA}kJRaGrgGB37sg=l9tMzS!qxkLC-ottX?!@=FzcJQI?xYax&l>W?;y%OuH-`V98f
z|08$|m4gV5(lZC|D0s4&$1rI1aI*Wk2lpb=`m##O)Ylr$$Jk+|uyfBTSSO2fCat)i
zYaZC!QB!A<rwUC%j@`es0I10wcHJjKQ1$KwFR%}j1OrIYiZ@nqR@yOQtK?+M>JKp$
z&4Ps_S(JV1Sv=tZr<hNPpI7T*C1mRg#}8u-Pe`t~JRUj*K^?OR<jhg6eJr<+mG&Xi
z7vfs<$lzf%k{@uRy|1Y=^7+RAL@pkwGD@-bna1YcXuCNA&yiW&xN#-}PTKA&k3}VB
z4BK@sBO7SGO$3e`=_RXo6^}SDSvl+j%no*QT96CwIPg2?o?RX32b2hHk(pm3WA`un
zOlN$!6!u5i8pGu<nYXbxBoKt#{cH#$qBSQeVkjYOABA+Fnj0OS@sFSd*eQtcsj0}u
zJNynv2tNJs#adW>U`QlczB`tAgHB4xE9QRsHI@t=ucyts?li4N^3I$iPG-UBxw$C4
zc7*cDnR}Db1OCu!S;sR?XUF7fsc_x^x~rO9^Vw8@_vujL;;j}Ss=#A~r5PeVrJI{z
zR#9CmpZM#@59-w<ihJKK$ke+z^)-?Ewg%iltsUNw56pM_Xu5cCw~Gi1r!<!RGI#^x
zU^cRAbsu@N*-KD6e3(xapu5+1i%vWP)x`<bsCW2^%Y~3Z*977|%sPtmzx^u-rx59}
z)zr2g;CAb-;>B`ui1~yfw(N2Zt!eK|vU&n4%MG6&TfCmZ?c_Wo<g1jn+Q^kcar0FT
z`)QXb)r4HZsn)zBUjFpFBg-4+4fIwkf`%!pA6HT%q-FqS5Mpb$s3u<CG;h%uv)_-U
zQ|hc~n%!`ORfYwHHGfe5Z;J~?o6H)iU_OR$v4_oKrDy8uT5aCAOfmM*2ktV_3GNG!
zLj|@B%Hdya1lHyqGHaUsT?N^Wg+q*e+%Z6gViA^OJ3k1Sgds(aJF-DXZ!61pU-!>&
z8{)r&Pl&J;;Ft97=)P^~wwP-;p|C`MHEE0-AcAgzIlUT@N?ca6nb8WcQ|sSCDup_^
z!Job-idR^>h6i2`3E8a>*BE0E@s_?6VWs?>cC&m=`y?pgT)G;TX)dAiU+@&LdRn(|
z<Y5ti9pPyse~4PLT5hH~g%c^WgNxc(DmNdo^f!ml*1UMHn}qBV8sj&P>17mT0tutG
zo~Mbjdmr1sbtS5EGuOAVJT)EpHlp^xW@Y3O|2^8%o+h@H*sg^kVSjF^7K@enH;t&b
ztq`&f<Qt0-`S@Q3zjw>!W+zij`^lX+>6SM?zc{ZX44lMWBL|MO*oe7SKHV?QeQphH
zg*aZ1`WwJMVv#*P55i5&m;XoHbkh(1UvSf{vwGmBF^nW*br5daLZV7{wFtHF7!TpG
zn9}C4(ND3-J{TL_Kv*6dWyat!uyeR;D8i_OdJMNw<%H^*rZr%%NN^qrJBw&BX1`{}
zj8f*zZNX}S5M<Sxi5WHZUAr~<^A&qApAihIoop@z_e=R?J?#6N=s!ctLQ;xa!vf20
z7YikbB>Duk4j?b#QByaUzi`F#p`6IB?8hWNEL>T{(@9b<2EJ;H)`%>p@F9WJ8Ztc!
zYaOW^_I^#>Xj{aE=r9ep1Fz$)7IR}|C6&5l_htX?g=#_rBPzxL_Oy)@;OkS`2UvkJ
zJsHcp$je`s3WPfR$2dY}zIo>NMcK_VGO?vtr+y_gq$!)Ar_tuD6fa^z{kw0~I9e`U
zI!TH@E-b#F){NWEz}8kp>1)FzhlfdCTVk+dEp5agj=zepH4^c#ZvPmvc}CHbZ(8O@
z3<3501*SNkYB|jSv*lZYoLwnaBNkW3ZlD@_)m?7X#4v1@!kA#C`(+q*Znv;>7<M{g
z`I@s&Feo*33utJhx}QOopD_ygM$G$GzNuk|#U?jp|6SWghULFX%kym;_gCBA%?b<K
zHZV;0aJR4n;gJ50u+Fx<MW=hV?UJr3^j|#Hu-gI({|VkZvvC|q9S9e~&g}sCec!V-
zC!-XVE3ACqU@ZV!IH&zO7W8snLeVTDZEa0+quvf1mHLfj2dTr-b=#;6hU^fr6Bada
z!I8gkrY(IBbWoF%+iv*&xmt-v!*~+`UFdF=F&xaJJIdKj-JK|}6|^Rlx11+&D#Wm3
z5I(ihZ=G(!^`1qd+`Qn_Tt(Dbj*zIYvMpl0SB|M$K(={Y(q?pEiJ33LE-R?X+z)Ma
zS|O?ki*+wE7`9Dqw&FGLMfMFAg^rhJMuOl19r3TkS90#KJ-dd;vdAE5uQCdEwz`_6
zZuX`yL-sJn!gl_aSEZgUqu>G8V;ZQJfdDD8VY(nfZ^oXvn4w_^^_As0eZ?}36jSM$
z+=h9hZ3YX#nPFg5z5(Z6!Yt$WSGpgy_XPtNr-P_XY2vSYw{w4QGR9%>?5qbKIg?(l
zm3l(7ni|6Q40@126w=W<GQV$PQG<@yT@X^INp73r(mPg{kSi2bdUY*)bQoik4x>l-
zK}m-(`}03UUlq0(?_R^<>;12cv^+_+5Ex^^v_1Eei}rQc+nne|;@P*8<$Gd_r7Y|0
z?g36atE|;4sEcfDhSX4h`~x4UhTWRB+^Fb3f%WwOh;Y4T3wj{n@(NFx24=~PI%3NJ
z?VM(l-0UQ0@Zz6tcygn!Fm{tW{Qkp@l0~rBX&AQ#Ge>HQ5C)n^Rr<##k%~S>BRs<k
z0u}$<`QJc=7Dlx#L*)kB*|+;|oNYYw_-EJb6IFF+D|JjJ-onlVGI+}r9Q@%$)l|c)
z#CSht^3rwnd`0I!#g4jqwpE~{_xGM(XDLyLIaTldr&w}u56|Gc%<Z}pH2LgZ7hk*w
z4+IVVm+cNb=zzHm2c6+6z?9I=i+`cAUW);p<w@NZu50_KHx9&XW$iz2Hmo&s776yN
zkhB?<XmEn$6YK-kH7nHyo`>^gNx(YU28H^k%IL>x(=j!INQ;ucOe=1FLpXGw|H6n~
zOy0*f2j6>d=_FL@WHZrWwpd2MZ7ZOF|1uVl%(z(s{^^ttF*f4DP#BHmMLXuO=T+{3
zO7}oKy*G->f~WmsMD^^tqp;nt17l~KrW^=|I4neoDQFc1sXaR&GkTs(+Av{fi@s!A
z<o}f}0My!;Q;0U^lQ`Gkd$msbI=z>z(8FC_D|les&DXN!`s$t2)}B_`W*dpRwur>R
zzVxnBBSL-y#93ns$hHzli!irYX^P6OAlyGAZ0C~Uy&`D?U{TB6^p0h&W%7dFMj2B$
zeKz-M7`_N@L3mEw0#ho)7kp9EYiHTZ39+H0p*_XC#g=7XRX}KW9J?*6#B3i!a6rOT
zp?EK69_2Pu<^{n`x=vvc-ECp#?)8%)dRAg-WGV(}hTyXn;;2Rb2s0#jIsayrYQ)8o
zt=hHCFwanJfGwT3I}IzajNOI^MlG#1;>|9Y-K|kdfPRczg41GVH0x&5Z))DJ*jLO}
z#{ju*=%(+nsurO(#z2(H3LvL|k?4pr`hT)H6lo<rI)pHdm`<LtQGAGd*JM(J___M4
z3{orKPC2&|;C%ed4I#V9rVP^*L(So3w~^!!V{MttjjITTz<-qyG|9Uj-)M&UWi0#)
zXo2wLM9c4}Rb~Vg_r-;#r6M)VQ|_=2+Xk@P9E5bSJ{mu5N*@l0JuFr_y}wVYE!>it
z<B}M*Qx0xDiY4(1ZQTVdxF~^28r#VA-2lh`4&GUsD9JnQf-44Emp*i)NS#EZqmg!V
zW{As3NU9N}k`Njdd{zQwgwQich1C;-m6K%*b|a$4!twrjRjB^#)?P}(3_fja9sWx@
zdmDlBVQrVoY+(nha5t5@9E&uRfLwEJ?cy8!kB5DpBK+ZnQ0>kI*)+{CH1xb6;XYnd
zrvZ<o`op3;8o`lLGFJ7t+-n{W2_3N)cUT+SaKw?Ftid{;yn@O9167?I64kr^Y9LVr
zbzHOpJF3h=7%F;~eV8XgvUMjK#!wR~M|9j+E16ezvSGXO*Xh3WxH&o!QRgnvC_&mZ
zoQ7X}@_9q+%<!9l#|Y5DA6glnJPM7Pkbw9aCM)(e{PT;@fVkZ0dPn2;7qjwLs&~kP
zg1;B{8c5KsAB+oa6<UPtEqNxNanu4XT4|Z)WjA&)(jWfOhAkp2*zuuOjW#X_vb1s0
z%5O583<8GJO3}9fNjv!NUahgP)v!MR33b9}m@QZL{TAD=aLaY#T)M<?)!=!>92<zG
zt7uz1y-TWufvE;7#0`%^Au*MwLQ_w?{FzwhTNq8`x$(>ivY_as9vj4=9QJh)vOM)L
zMnNJJv*?<h2Tp+0?m@|Bv6GYYXb3_GL~vrqN+Q8-B11fpdO5$Z4C)CzXe4i^Iu&{L
z4P7I-Bn<l&VL_B3V#Le-fnINMkCqk@6w>}n)S#GBTIEvMZ;dHKYeD9YXT{<-mpHk?
zpY9lfE4}7e)+4raKYTx&Y>3A&{{uo}Rd)Ms(U!BQPMA(HAg!}00(^X|Ar-Y29pti(
zAdO|ON<)H;;W<1Bn2mMYiP;vii4tbJ!ERH!V>b9ktxW&41tLMO7*vE9SzyRRpzN<l
zhAg<X=*QS<VjT47jDcLVB{vgBA?4peDoF~w!|o;qaRv3O<VqnQi<vAs>V}{&K%K1`
z>MD9-rBO%+tWD?yQ))e>CMeaQC4-GBT@XxYNZbQ2eebx><E6v5hImO=@r>A-$emeK
zQ>U4Vbl9y15<D1vp}QYMK`IO&Y8^AGUT%LFYKWw_Omkv|oR+nZPnjI|`ttA00?rg0
z&fmZEXL*D)*&w9qA|a#SYXfA79R%crGT|hHjC28D_I9oG&bz&no4Sxus|Ke#GCE_+
zLCEMN0sujc_WuzXP5V#CXpWhK5E(tm$tLQw$f%<=VENOAP`b3u(pjS%fzD$6Yv^on
z7U+_+k1%{Sbp{v3vN!V)b{a%H>iEu1gMnq;m&d*rZ7hrg(@0DK-?4cNCVuvegE~Ln
zwyX;ik01bR0j&hvV9@K#+yq8qEEek<r1jV-1&v=zQ7nCnZQGye>fqBzn!mu59RJei
zX!?&Bt)4V}sPO3V;^(ysz7QPXKSWu<IsXnDXhtkH@JItTkj^FYmUJ%rW7!LAn+^AK
z-{LM*6>@D+nj=)TqFP<E2L&y!X6{hNp5yZz+r$5vU%Ml1fYLys#cQVGQ>d7&Nd+y9
z2CfWmLOsHTryn%(El(c=c8?Hn(8$L!Z$W%|j(%W9{}77n9Q~_pQ3kv=_aGf1)d)68
zoN2cwYf3caf0Ow_r=W7!(@>2+PQgr~><!_q$EC|*aYu|U2dk*1^ruTN7L>hB=MgU>
z)<^HXbB8IbNT}y`rP?HEaYxojqy`dRqgl%xR<eBvW{mnUocStVtcZevca&tN;VX^Q
zBjng~mC^mgjwUwta86l68O5?zWiTh8YW0S#$is#oMNi?BZ@KQU3=DGRW*9a_r_D}m
zK<u{0OrtEr4QWu1DBGeT+koErP2^<7S$@m0x&tgbA=hlAOpM(s3|Xk5!lZGTPiXL#
z3bvBkNxHzAqqYXw!S9(iT4W}Lfa!mYpw)t0xZn6e#Qrzg?!qlT>@Wg}j@4@C52BO(
zbAQ~43k7<!M1lT|?&5zv&xH2*s?dW`8M2QMbTH$ZC5)Y5!l`{OrTRa+!Sq(0$n&O%
zwe%G&*i8O<UX#(0+#GJTCt)Y8ipCnx#nL)AogVk%_l;S{zYHl}PQFMi>l-$4S$$Xa
zhU4!=3$bH29RF#_UNHQg=?e`1Yk5dT1xp9=A{op2`>THQ5i`1t!a*2cRGx5Smn*FM
z#}K{>a6Fb9t@hi!qxYR+FJ9m-(=H*@G<6DehCeX?zRn>g;_sMb^!MNM3a^-GggFz}
z3uElEjJjt)*PhPtuL4mqR=YJaI-In_KMgNtjIL(2Q=;=WN4*JCDx*5;%dq(0IZb%L
zDvEMB+3Lcv$Gt&I;^zSeb7_gybU{D`HZbKY)s?&uOw)J%h`o9F*B|rHFkH}ZpFyui
z4;V3a2xhVoRzC|g>@NWtayf0>VXCK@Le0SjR*7c2D#{HJOP4d`a*xTsSNONph~s2T
zp!<QAt{_$~H7hkU*{v+H7xWF7EM3(z=w*9TTA7|Nah;m3R4c5WX6_6syqITfiJT$n
zUZL~#l`iFrvQFGhSz4v=qf1+O<|}Wc0RGvlh`wkFc*8`WTsYVip!-?=H*N0%9#wVq
z|0ftADmp<yV?~X2szFf_1x*AsBNLctqVa;FqGDA_tFKbYC>D|6B%0IXv{)~-t+uq<
z)>>=v0-_)$+(NygR*T{Vt<`gk3Tj2X!T<AJ`^;oeTi^HhJpVi}`|SH|?X}ikd+oJV
z09s3S+7f}T&Pt0%Y{FM05G)?Vr(3``U8aGxv_fX=Ju#eUkRNM*pJCFx?({z&ZwdQo
z<AT7OQ3?kB%_dc41%3GzN%>+G6zkS^n2RMPY?yLM-z1oCOZp<;Cg{DCWIc}t$J98%
z+`Simyrt(!-Vf^AeCkfo>&9KL9p(B_{b(o+BV*uEYB)072cOc$znpeMs`|-r8Ev-t
z!ld+(;e33N)<~@F7mSUa$(SAx#~!)mAmIvv!Ra{N*7XWfhHL2^RD3XK`y3>ih3hnZ
zp%L(Z<<_VXa3j53Q(O&~-}iMJETaZD><P?8N3r3Z;zMe06;w~F$=Gr#4&wwqR7af)
z+2a(2-=%|W7yj`Y1uf>qzFaNVs`mx6IR&$}Kawe$Npf^ibugIfs@J*$tlI2!lDACH
zM1sD8gWWcz4fl|~&=k@nv+->r=-^RC-;@f(ZkMd${U_4{iy$cq%2n!pAQiC_IQG{)
zAPkK^l(8LRaR@>cyx0(2M?H*p_!ck(4iN~Vd0>tu=!rSAea<pdamx@6LNMEDan)<X
zNoyG&vzXLxX?{4+7<nW1z|o~VlD2cpKGkdWSX!)oBuOEI8sC(EdRe5+y;pB&Z{T(W
zMh!G7?G*LC|EwwE)!N0`SmqrK@Y6jAf75S74YDn5xc?gEj`Ud92gkz*hJSwy=(pWY
zc>Ci-bNK_FLMv!0hd1FRM3W_;ZBmIDqAWMKFo#4x4odA@=Hs9Y)-Qa+#cAnC()JEz
z$o=<m#4WNor(BA@+&aRXK7X)6Rh{RumNDL{>KuiQAuM4#ps*jUOFUxm^qGZ9vJ-Al
zCO7Eeu?WIt=H-+I8E5GZpNZVg$bAS`@oOXZ^T^%y7#IFd<Zq7L6Ql4$Blqyg9UQrH
zBlpb6T@txVBX`fpJw0;Ij@%<7Hyyc`NA9m8_m0S|i`>bPdsgJWMEk;<@PvPfLOSJX
zi#+$q(-nE1h}>M8pNjk|Q?Ab^Mef0oyJOV%T_bm&DEt6ijp-v%{--1NmMGn)k^kAq
zeF?V*PGy<3B>X*SN}kW6=yj3XsANy|Jki6=%Vl9OP7gR0+TTo^+T?Xd4<#5FBrvP<
zcdYDubW-Zv7xbE0F!V+3%De0}5x?&NC$Jmuh9b#|Q+;VY8>{xUJU!>9QR^BIPo2AL
ztM^}6yem`Zmds9Wa|wIX%QuKGzU)Uy?*ks8(v=%B9ait9OWD?zriLzU%8t0sc(9Ly
z4?e;4#oFnkwr+2V$Ed+JYy4(-nW|KFz>QYOP##eHICz9CW{~9EAvd?Lz5H1Ob(M`?
zP++%pPGYuH<1rWT7UN1YWaOW{l6&nd#j5~iLG26M6m_dqD#C7m3M*En!HA`zSbWh~
zMB=2=crYyCAwp@4?fn!udCqw689i{rc#PFc0mCBeLl>%?FH#bAmaI-?Pbu>|I;fyA
zTQ?=RTvO){iDRgi%|-BN8V)LVyW-(4S8aLTC~bN>^(v)aEekeZ%l$8&-#JosAC$AX
z_`m&<eKl`&s(4%qp)qRTC+WG2j}j;IIK4f@#05`YX8Fqam)e77JeyInM)y2ZJ~sHU
zJzg>D%(6??(YR7K-tK*_WnX#^GUZ*CT2^TP)!V@JppgmhY28%*s(o4rY=2I7Midpl
zU;Jptp#BnrcfE~Rbrq;LJFX5(UMXjhq@d7(&)5Rq+2|}LZ}S%NrLd0tPGS8HlDSgd
zhiTlhY)*GSfp&H0vN^8Q?&5>YpX!E1Eh<{}Wq-;QkZ=GKEsV^k2etI0471NYu1*h(
z4T5<)x)ez`5?Ozzls7QpQ48r+UEzC7-&|hJ|D`-Fw*$zK?OT48*p-qh4|TI0>d!Jy
zF;9llj9lkv??O@3g7$FUI%J^;L3i<Re!nrjKQ86DuD6k#jp3=KqfQ;ra(;q$)9e{S
z-T_JPlJaBdETx-M-uB)}1Av)wJ%Z-mnBfB3$t<}0OiI1ImKtI`6K6|J6GKixaJk;O
z;Y)g_zgmK9;3U*d-|x9+8SF&Q+gsru9s<$3Q<w_l<wo9tVQI1~heXSAqLw9?5uWYU
zpsSgMmmOKQj4ck{XHJy56?Zb;3U=KdBPSSjRPbjF+!+B6*uyp>;@r#O{Ui`bN09ia
zKPX~!T(QMGt7PK)&mU$1XGbnt>I$7np-$fT?BBJr2fuWzgpIt)w?0BS>bzL1l6Ww6
z3ROkbw*ALyAN}{&RNJm<X-EOy;9k}8%4lf@E6|k}(i&dxs8mzrUVuBN(B2xDA=N!D
zrKtpV&(TPJKEC?hlXAF5kDh^vhsc&ZBY|;6P(itNCcI`=p=`WQ(JGg}*uXJ${O7f_
zF_ZW|HG$RfvP%}LQLL3#CHXSGaBqj@Uh(1OFia>8&=?iG3wDJ}&OgOtnz6PYu$-*&
z%((Jmy?R=PaniElgg?G4mE}uz-%H}U&9zqT*$Z+}&oiDQf~M@`It)n;C`#|%;2$ZU
zX2sui%ZZf)%K+jBWFX4I%I#xB{2}eb8~y$X&>ul$N%*If*H^z0g^8*$Y$JOya)ZCC
zJ=uD6?14eQYsf4wo=j(y*ECt9Z1tnQS9-~Fs>5D)?QKO%b3<lq4c$4Vydk@!oX$q?
zzpf|_?q$D_81+A8v8yVL$;J?Wo@lt|sQ`fK1+>uY-%?(cm1hM}=xTZtOs1@!8$=(7
zugukF6pI`4DPluy1ECu!8=aP2qe16&r{ZxnHt^v!q=<qm6kO$kwUH0%ua4eJHGoRZ
z?!JR+$Db4&c*uvGSN6Ws-ZxmpeU%0b7OL`KM~mitXt%h2L!2z6)v(2HyM_dqf^UFk
zSJ|UX&c1JC5B{K(KQqepeRAQO;>tKfK1{^VRryD%GAkhWX2T;c)yOEK!g=?Ny!M7-
z-(Xj~XTZ?|$KeGBs|U29XNATu<*})rWi{^)@`<>KHy?D%la({w+Oe&0VEB}R`B;_<
z?i(&9sE}SIPHoV8iM$4x7>^-4d)`&gr(Imy1EsDjN@g!8uJ_(a*1p@azt_{iBM|;k
zjm7_Dw_^0#uL{1!ja6WBU+kQupY~oRW%_w4EnO%ASO6Z5{wc;ip_(`|aTb>Ezf8};
zayyGnu!YaFM9WKA%5|(`mmk*hWJ9~<DSt1qHG3Gk9K0Nxu+fXSvG!R2vR(#j8K~Y{
z8|+EUq~N>n_x~W-)gqLkcqjVGzQ;VZYtiIX>>@5FHcy!xyRb{1XV4c8m_e}0I{9D3
zFH@w-us0b}eYIE=^Ez43q6TY`c7x)#Re`Y!dHHc0CFq1-n1r8aYsXZOCYs|zkowY!
zPAYLQu#XFH!W~%v9Owe(=2H~8fI0bq^$)0w83qm9Aku>^zTRBtZXjv0Q&><lQan+%
zO)tLSJ+a|>Pi(K=*V6t(DFE9N;hx}HS7a)cc^5|Ki%sb#UF+Ihc#ZR2Dj!43Veq;o
zHH?HC<M24bqj~mT<#FNO(a+&`wW#N=-uAesI+;-;<{bS!vMJxaGOKfu=D}6FWx<!m
z>^&FIJ7zCi0G&2s`IPfTjqY;3N*8yZ`7S7Tk2`1=kR3eh$O0hx9o@?O4?r}UHru2{
zLyWgnW#ql13VoU7WjUZXel6SgliLJu59i?R#mE0Eyw!gN-tHm8*TY-A!P_rXput<c
zL1Y2I)dO(#5x^~-ufcn`Ge4U5xPaclo9hDR=2QIC1@r>kl@{O-Uk>2v4dBF`C9{)&
zxS1(ECX<`*<NRU!HSvB1@HR7=#aaqMUf|$uh$}JGz>;sse4dB5K`uO+x_<Z!&QjT#
z>w@5Zgn-`z?Ta7w)^qT7x{(HZSCIO978k&mF&HNWEw>dLCN}KYH<(Wm!m1M-F#I9%
zRyps_@rn+VYbiZS&muZdCOSZ+1^WTEWT2sUTPo;y)W6fnEec@kX>?RFm@Ims?+I7O
zAyFNo=ijyRd7amaulu_4ccaAMDG9SwGN2i}exJHPrd+{)SHUp>U-&$6ZXL=iI8@4>
zS0>L<r^~|2LCr4SF%+lS{w#X<B*MPYI`&7iM7Ff-=+veEhk|X(oU8OzZ9#Stnue)9
z<IHd(35-q=!j5tdSV<`q8`cp=Tej{W40Mu4G<csRGMoBdcCqZXw=EC|!qYD)F6FC2
z8>pUd8~tS~bY)rQ?cu4|ZO>2Z-(52MY$dfTHJ#J;@dwS$d^+*U7iWKZ5Sd!mMG=?0
zMQ7apA>p4;$_8-)Ew0qKP)pM5OkvO+WH$1~how{sUzf^WF*|U(gF8pUw*w5|CbkGX
zA!TpH>yFN+iDHfdPGu~6=Jl4JKvSp%hORi#ohW6ZU|5S>BdKxDBkGVnk{s+UnYPMo
z@M|^1yD6BP_mGlc@VzdMO7S*$Dr|rX>-p2x@E2{d4T0K5K(iODG<o>or;d^t6fQ5F
zR2uCk-8+dt)KgDxJOJIjc^$KM%z%~)c`%mk2V<(8nYWq`+#)i=)Kbo?&<^aDvw;Z4
z9-(V(v`o7e7<E1ETCj7uCg^YLN81)y$kI!G;Q(Zf!;CiWY<*fsvmY5#+H;LW4#ymB
zqNM0;-;<rh$cVxeiBx1?T|D|Q+i5joB78!V_eATJ{W$kp!&W-!U&1i`gQwLm!s78t
z_tr0OU(Ht+(9dH2f_WHXhd}d*kO)}~Fsae5!!ER?NCi*6)t^0WeUXV*JCgCe@btkg
z3tGs#lDUL|MoM%Aw$uHQQ;*z<V_Pa$DOGx!q$U`E%ChASjwT1QTcgMdMOKnuHiKUv
z2OG=kPIj71=)n<Ri4l3si>U3%j?w+RRVzz)0R>)^-dA$_EtZjZi_ss3x*(g_s<E*J
zqYqBBZrQG7cYY_f)Yq;|Kd7cv1p8qQhpd%7f0{$awoL$zfVYAvN<4BA#b8@;Vq{@)
zwH0|Xi67C@RQh$6-nEBTOmuDWR#{3~({p1leuZ7%t0+AfMUb}F$hKr6rE6RJ@BKfN
zA^q~AmLt>>mc&T4y29&fy<)p9!&~;lpy)8hf;=qVl_lE^_qzBkVz4R;_luNK#uSU6
zX+R{XqAx!HD~=UWJ=aoC-ZKl2S>so-6G_%OlV=aTS9jZ(d2_qq9E)Xq90I=gZlN+U
z_pH6X!ENTn@O{B1=M)V@X89Djqa007oE=_H$~-=?^@;FM2KYN&o0e4K1|JSBXv<1f
zjlLWf2zZ}VG2W}7n*$%@c;rsva$Wm1-{ClioZb3VOmGds>WcM4H5NAV9@R=CDYBrE
zEmUH7*Z^V|HW8YJ@FQgP4&E$$b9EH1r)(lPtfHV`Fg50fwUV;JZ__Hnmq4?|m}K3-
zzTY=f6zzS<9;%Ev1`jQ-ghhB9F#b|?05vxK=(>gjhzf3)?gR#x9qI%IlOp$0+`{>X
zU-y>nTIA#eaEa(0&6?z9?ESkO4R3bd*YOG`l>uuPMFhLlHf~#$7t!nC&}-x3`UZa@
zV~%>~cshveBql$Y8Px%ni^%s9)wZohI-E+RK9-57miD}<@zz%A(*|$#_>;U3F}Jg}
z!CTvuZCqLhS}yZvm8UXWN@LetBe;?l&RBh9OMV0_Tt7^QI8T8i9N{hCG5#-~u?4YI
zCg`JwVN>3tG8B+`J%-S8M|6I7=_u{s3HRF0^b7X7iq3u;GFQCFOQ>yk@!iP7UD?FA
zMIuo-`q0Yj4DEk35DSX2E1yPywLYR>-&>Ea67;Jv%eyNk)N2C6G-Mm<8jDvaRu&yd
zw-z73v43xI-`JJdf?C)9F53TTs%yP#|L7yt{<@AD>%h`9l49et&w`e;(z+syA%yz@
zqWRWkCKt9Y*Dx%WTzaypH-{6n%;s=FP}}HnP4K`E&KQX4{n!Fdr>Q%$v=3*F+{4AL
z8|D<~VCGH6v1MdY$I)BrIxgAVQ2S*1nZ(MH=|$mR0ch)fSmG8*K`#w(jUd>rwc^V%
z{Ex&<b=PaiHBP|*6VMMHTqDYj8JM>SGy!HrXb|K5X@V_U#7sltVwRqTj5K7E+iYpA
zIVe3O{D_iz@iT*2On9vA6@nXTm!;qH#|v4tO$GECvx6^u1f4FLuyC5<v%l1Cpyz<z
z{MjEqlAZoYUF+uEE=|_8ZrSb9aSfTJh|8aC8Q<Xdi7hB<^0(ui-uzhsvh@LFHC^d$
z>@$p#tqKB42KEFwc*=BDsF=&5CwpIxN=x4x%_Fj|o^8Q1iN&;!b9@YiHiD1({z+@}
zWRpJ*G8Q1#{+=jrW_d-@TW70K=R8ASOk(e^qnvr*J$is4b#nvuLW7aRg^gzxEo`Aw
z!14hu^QF8`G~WYjmd4r!Q(H273{Ml+J)$RtV^<$Sh#o19U41ZLz~aJlEb9)fWQ{F2
zxUL3DDH&ceJC<xIvMKQ(%ccVM;ft}hS%Nss0Z713r97S&yXGRLLYJI{(XO^89xTx}
z_~Y1Y<Mv<JWYEg{{xq<tr`GUtGJCWp!c{Vm>>9<`H8M!8$B&oB+GPV+{TU1JO2wk9
z*!q@U(Z=ILiN)eIfGCC}*mRHspybeXqv}hiArl{8#L?Tz65VbY5)c1nM8eS@rV%xS
zTzUP%$Ek%d_-9)r)KMJ1M_7J-msY5aZhn`xEDzNz&8H3OJ9siHD;T?$CE=@h=FoWg
z=7oCAmvp(M(BGN@@a)|BDbU+P>l?i_Jp*G45Rk($Sm<8~ZF?r&6IRk<8<49P^Oaeu
z0cn#&F}%zA0$!Gxl##3M8R#Hg!~A*Ak(1{XjO(TKZcKH47LDmeu2BW+`K#mmup3`Z
zVE8N2yLOCFA!<j<6Je#5;>NRa=$h2It68=kEo|mSA$X2ue!!PR&|s6Di^5g3xcZr%
zH(=FS3|inDi4U9k3C{YVqnhdAoX;6tz$ZVE@ZQ%!1Z+AdsdYJ2(&+PK=kdtV4r{1=
zES7nW_8rYy+_NEjMzK_?A0wc??QiKb6W%jT-U~fL9R06-Y}y4%mdc()vX+Y*(A4mr
z9lc%41*3OJzgFM&Ov_6t(wx~kde80B&nLY{8?vYMNe+Fn=L8P#`W)RlddH%cx?X&s
zw7WNEk1ZyBQA?_!_HUQ`qtSaT&p&xDD(~RD-&IGk1UDA*Y(jSs0<J0VOs)0Og+M+u
zcUhyi%2F=t`Fo?cmf?C<U0B6=DTgoGLo|6S^=7+0<)Vd%6vTVDiiz;%m+ALLaUtkq
zRp6j?S%cHjUd}HF+98;fH=cKKG*UG&P^14~Csm91!^yNOJ!)ynZ6>2q*{LZLz?DXi
zcgf80N-MC~Z3hlnWE%)c1Xr6B+wWU-Fi75?uR=_Sn0@$W73;On#fc3ylo1>Y8|zyL
zD*KA>wyP$zh5He8`1QqI0pXYSPS~YaI)vJ8Ey9n&x+&a|0v&y+J5Nw(w!KphDw#M!
zItB3U8hbSY=<ar{b)gORM^GWtsro%*$>qB##5nll>Q<0KV-v}e0^K&V!CMhLdxU{%
zN&qZ%yx4-eol^eJsqD0!(fGCoVC91>T;g1XgWa2XI9%N4H)x0D<Tk`#<UzAm$+>H&
zbcu~CK1=VA$d2O~QcQBa#JXcXlofmI{L-yToZ9(y{HD*F{jgmA&5B*~DXYf6RsM&-
zxwE`ALtpF)`hZMoSI5RJ&5qv2v&6FZ5wsyEPogwWV$QYfeXZZBs?5VFf<W7M$;TtB
z_)Nzo=p$jfhp64^PkLLD9T&hhiVuVS5UEQ;PetQ|EEs^~1>dP%>#951eU9ObOY$o)
z-k_3>LH&f|Ky4ea6t5=u^Hq`F2;#`!8?qA34!dsq?r&+P_ps75dF#U?aa}poqqz<S
zjMg-?PvKirVOMN|pV##*^2_Y4Fj#@)>Vo;t!}h{XK~1J^YO!&u!;xl5mgB&6OBrA;
zF*3yYtze28;oqu8RIlxBAB0O@?3G{-eOHDlynvsGzH@TMOMU5^^O+AIv+JZFCBw@+
zG<O3y5HOWW9x$wqsK9O;S@)Hzgv6Va*f&V0c}i?RjI?4y@UV%H=hqM@Mk>0*;2@u;
zfhb=94y0XK*TANxEYbBAqAG)(ptzQy^KW#;TM$=`z()^`b#D+Y0;;*uOBvOjJcm|)
zb1M6=h<SIr?klUA-t*XKT1efB?wI{%(FVe9+(f|a%|&&z2c7Lnq-{W|P)5=<E@}I8
z!sysMymYJ%Uu5fvSKZy9a4$t^{Pso{87L{2?OfmlIbM62^G$MbYFhBczT$(7=U_dl
zo&J0cC8?FHc77$l=`&_OESG<*n&%E+)mXS&H5-P0u+^&R=UHM~HOC=T$E<})1Zn7n
zr1m+o2O&tfg%50(J~Eww37$istInv4q-3>drNrRC3G5^=Hn5I2t}nKWu6$SMdz}lf
z()R}UU8ipi1!<b;n7Z763}I5ROf|6LUX3PQq3n^nSaQqO0VnD%D=#6@(9~Xf#q#Ud
z;ciE={NDEsnjsxpKxR5Bt`#nLa!``;-9mvb?2Ljd;UBO5li5UT<DR-8P89|9zZR6&
zDVr-XV`(|zb||^lKt5(hW<japItIz%gVxdUgJSKwq0YyBH8yHL;jlFE2%rZ`bw#|G
zxG!{kdKo`L<q^tq_(B3MS?KD2niL!ia|MfTMR-1j;;6cU_B61AL)>X5$m(HG%bg}v
zaPB@5@r^I)#S&4!b3M+Zh6^BdLJisZt(0e|K}-2$3wEZ>Ou~|&=G=IU<lC)!Z0x7V
z1}fD+v0G`%p0}c?XZr|W*tvj|nb-;Jo;!%?8+>#N2Lcrgf`k=o@HFvC>a$Qt6_P{J
zcGp;i2P;WI^EHWJL6b%YuaD63ZZ9ef`!(t8&BTE;K3W;Q_y@#LsnoI?;qG-i7*KCZ
zxsIywr$hmP6UF)^%NnyB$a2kyFzBW=W~j-~M;^RCFZ<F1UF>35>a1j=`P6f>rQaMp
zJeKv!BUyNrlJ~7j@h*(KLg?Frz?@Jy`+Fq|9z}F4^6;=&CF)dQ()-I|9BUPCo>;mQ
zNtfiRBjF@ZdcW7`NP_^W>F-rp&}t<K=g+Y+UI(6df8K^MDuvb5xlW5{TxoFKGqU%p
zw&^mRF<XcOyc-n)9#y4{-sq)_P_uo$?$<Fgs`WcUj7JC~#%}E56~X?y|68~I+V=v?
zVQrK=UnB<mO!FF5h_A~XJoYU;EA^$=Ha5KXG9Ipu_84PEuWBe4)PLO3u)#bpO<=;m
zv{cr%xt1p0IM#NnWtvOF>>byrTlKL8f8(BA1^H1i)};EzPx{7NCQjg1$`&g<X!_xn
zEvG{(Ps{C(+yGIIh67L>2gEmKhpo_n3x1A^&S&@OJ)hn7mj&mu@BG3Rk#aX=>o>t^
zp(MU3y-JK}-{2J&J4X$(fF}r$$<ca7UER$s-mgJd`-q{*qa_FFwMI^3?fXJvK}!xB
zT8l?4bNT@dnfFSY{C!2vhe!+-ov)3j-X+5H;ty)@U<ZWtnNveN)Y`e#yIJ1ORL{Fv
zNpDlZ!&!5fpKLh|KcdJc;SBq%(|iajCeIPFyo0aY_=+#_zG#4j({+I*e-%$=%O_d_
ztR6ueEpzx4jRvMrL2hyQ!%Bl1azT_5?7&dOYG+)yP9?+=TttjkfIJNzFV&$)hJZG|
z3fSL+GfNSB1evFDt3g`mq-ShZO=*5jG<xx_##*B+v39P?Z5ef=7HO<~JX^ilvIGtF
zU9k6tE#B$}iJirjQ^KN!2MHefv{=_wv2k75(P)o;VHEgrgwwuD=-WDHZA&(N7x;-u
zinYCMis5es_x&6?@G_npznEJNHr%aOj)BLO#trLFfCHM=fNuro{_!;ovNKfK=!HS+
zg^(s6P_yxLL)N>rd7iZ^xt)~`U(j&?rC~{cV-v8#+sO{IR@3MYS_P!Kg;ko=eRuD9
z-L)lg@bnKT-rk>YU%&`qQdPkXnTJ|!Hrw9^NL9T+MiW$kTf&EpN1R_puzy^IPGR<-
zh?IXRZ^=FZ?GclwcWVA(L+o}_t^;VW(zqfrvTYGx+B4Yjyfjru-Kyl6C;>#8{PSK0
z+BcglIOuzllw#5^w6Ep8Pv780%~CNCDb>cVMy16%ZeR`^R$wTyQ-u_M0NPg4dTX2d
zlFAN|T(5}pR70dGzvNpH`V&FJ++cK4{?d(xAJi^)0KG^7IpK9zjzXf2VC9Fs#6<hM
z_I+rKA--|K1`bn$rfn9(58*NLc;r9tecKjLNVu9G<T<3bL2s^-(D4aFymgi6S+DNd
zRpXfXQEBmIyRh3qm6kK4yDULj>yOHcTHc82inh_cs4Ld?yAA)VmYCfd(M$-Xtg;G`
z#M&=(nXOq9svO^;$HqIkyNwD_rT3yt(Pl@lcJzD~ChnLr4NChX{W-0o!Ljy#L7Aj?
z>+j?rQ;Myo@9@=_E&1^rf4j^l`}61!@tIGKinT3P!pzc=2A)a(CxSG(xjB6&SV*f$
zGa9Yu!o7_qTu}wMig{B8?f#@D9c|=&sAE-we`xULIAiN8NRsrUO|wxLe*yxas-v@`
z4~TX(jt3F59sKrALuS8Ekqc^ACr2lubl+~rfz_6;lWB|T#01NZTfZfd9gp$U&5TWX
za36l5*bA-~z}b>zxdQV@os0!)ojwq&8PVvs-PcbC8|yo5YevWBQKtIHTXoSFfnwyN
zj%z0qeTt{oXSA1!wnEW%2`5nV{*Hjyc6fWdSmCbQXXj5Pg1%_u6M+&dU3(s65p~|u
z4%;$jK0t=~Owe||Gc@4$)x;XvV<go!Bz{O8PuVFk`(I*H60^T3s-rQ<rQ%Tj1%Hq$
zJK724`C@6I!52TI$7W#|)tWqWe6GdWcF_^)_|I(JT9b`(@9YA!khKACU$u!vr5|{Q
zRu>4tfA>1eCWr}M<2$^K+uZ*R--K8h0E@dlA1}(d4Z@p^Y!Kk2f2|@;<&rf-p-p4X
z`x=I^!^7THxymM{^Fs;=53<I5iLHpWp9f+Mui;0edChujux4AmXbS;@pvE<NPA+f~
zr3K$s)u-?UIy*9_iQ<>+Wp+n8TlUUlxKHPZ9s1Z|x0mtc1|)~%{^myX85d=<ZzI~}
z0(ysdo(0@mrFLX&L25tNjCa(Ss#xZ?v^C|AsSIb)nTU0EL(lze5@~n<+K%WmIN^`I
z_dNDEc~4|}+4-tn+SiV+=V3h6rA20<Jl3R8646?N!Ro`MX<~MuuzPncLFw-$W=Grb
zD|grZl1&d$;4FxLa_FZy!4<0;C4<k5{6Fyr#v_LvvTCJmXLLk_f_$v~ZNsm&KD}F2
z1BsQ&x)&T}xtC!DjUaX|JP|R0FE#`ZtFyty7S9#FXhZNRT@gE^M2-hSkcGX1m12D~
zF2?KV1G1%R5M9Clo2=4J(t$ta(AKS}Mz;qgS`)%XAa)~S-cPGH!fXd0?Wi3=G}EqZ
zY}!LVftE4Gkd8JM8g;Xyq;3ZLoKweo^e2LsNFD1hc%o7ovg2T%y9?Rp-&m|MLKv%8
zE7%;c_Q&*cF|p*++Dz;OS~r%orL+y%hMq%YR1A{3ZIUD4&_L?bKczzS?@Cbvm=5<`
z8aD}8BMttZz=4LaX9o-|6gSnbkF_0d32k7x!*h&Zg4XZ!(%|l6jICJXL<tD~>d2-U
z?!Xv8QL@&A4OgBM!rK*`0Tzh&zVTB6%=uF&HDgQ*27D*sSy{4Y@hB5t#C|%8vR!Dc
z$>Y+G7fOqUd`mLcO7a+_ew~a}kwN@+_*C1ivxRA2o1Vs|UDXz)XGC0BI1Nx|u4)L4
z&}VSbByh`v|4TNc^*y01jgXVMgtI_Kj+sDxFt8a@l~6ogUwnO>2}u+Z+;lC-NG!Q;
z=Fy<OQwaw1wVlQ|cN;|ngY#^?RHY^-y;0#_*nNn2Wyd5pdat?tps3{e=ZH5wwI;{$
z`WLQdMvZF90=*ycy6*+=oSkQKU!ueY?6*+^ym+;-i2_Q;j9m%HVM5Prje}2|MS2N)
zzGeMze(tk8=F^pJ!C-DEqJ7jq8AFpA1i$*-HhEiJ!cN`oxA3dZ1yw{L(Kew&ejg-2
z4JH$lTll76#y05CUJSr}0^0-4S}H_vGdZGFZTP_XZ&YQ%2VB2T@fq!>WyYq)G8o+{
z+;0R$+*v+@9YEqt(V#P-)cL|yn5L(ge*HJ%@$ioeh{s$!G|U>3Cm!JvhCL@iinXma
zKG*~|tkqzq%VI$C+kGTJGDg~H+W{DD3MP_3gl{08T-hSuLnt-8%yFK|ee}wb8ge`Q
z>W|(Oeng;&^@44Yh-+V;+bnNuZT`zt5;S@}&S0PBCu}jSWBhf}pHN{s9gnd(tJjXQ
zm1Sn^RaxukayHD!wp3#k0m%F2$?@w@qlcg5jrxdc1iwPHj~!eE(HJjSh{M)TiBX(P
z`PC4cgF#oCu?8o!_3V%&IB6~*fxLA+6s(z8(1;Qlg_ycxT|{TZPIeFsVh?_p6i0aq
z9OZjZn3~`m{91^+c>=Eg|5(L8{l;jdF$Vs~KktGqL>rh1*4+7G5R-m$8D~D}LD3pb
z`l(V$vm?b+$MZOOXEc;KmQr1hSjy@%97|aT%5dbQS8S-EDIh9s`x!sD6)%<NBbQoS
zo{wxLYo3q%gT)o_kuP17CvXDF_WLo66Y3}Fw~OA_Yn4oP)I}vN5dw2ej9_ZAR~2;`
za-;la4%~sMpDGgz@dddIV6wJy90R{4!4O9B&C^DSjWH1>4+ZFqC3aO8g#$+#b8H}J
zh=H*=lvLfxD$&RzcrQ+LoXkn0JNeQpT{a_y?84@&S-xB03m7mJL(^fmvMRq2We|IF
z6#E0MRTUUX=I%Sw5bcDmP{`?dc49=tPQ(wBXsbXPH$zRx-Ih2DPqfM#vSVQ<Ru-}o
z&BPk}CG~WY8N?YYdZ^2%32=PScPzlIO(YAWCRD_(IxOO$H=2PacbxY!cM3U`zn9W#
zl-a>xaLQ@Sa@dOw==T(&H7b5xg|MaU0SGT${f;$7vBA1MwvvFeM!SPs+P5j{c|Q24
z*>Ib{Gzh==V2fFal6?<t9H*Ex-MV9VN|ML($Oqw$CRmeh&*nLdc9_ec?&dQb;xZ_#
z+aOcm7fz-RP7eW6X7?DogN8buFl%7{flMx3u_Jfo%VJJxaKAF=o`4(vF!Jmfxw**u
z6uBx2{DADbr}!BzvlU*h$nWcCK0gY1HgcDkyF7ebk^2thXIFmI1bO8CJ4!iHDQc9W
zjvtlY6uF<!PNh6O@}C>IKe5_ZgfsCoAYnUh_-N$0+T7)#r(#<o&r)0)7pLC<>ea;=
zyRaqIkLligWN%y0qvsfXDqjV6QqNq)l~k>IX$_(O-#@XK1Y6)KgOpd_VVm|?dmQ4B
zd02(;a#epvDO6B*eXCL@p%7+Sr^M)CeMc%gb6%>uelC;7CaC@nbGZ#R@i1&eWb5Zj
zA0_3_?C{68He$+$BBZa8ZJL+#-ef6ey32wSUV$^K?>L)e^AgcTj6E{2h4pt3G*?Se
zH%fGyr1yO8IDf=`P3;?7_S9`gTT5?WRY208z@yCh>m*OPL@NmQ(;eJCKDhyX_4-j4
zm&UHz0PL~rWfX%O5B-$IG@~rIWtmphjEdlT_fZx6$fD}!F<7mc88t=e(^?lva}u8H
zr^thNK8?}vw~}Qq)ajAN==?PWvTU2bhRl(W;>+1uMx~?=P=k`AE~uIIM|PW4bPy%`
zu}<W6MA0O!F+3I}ZF!D}2}$2?rS|G)sJGsGyk{SGPM9r$SRFf^A%8mXR*o8dPs>TM
zOfmH&kYv~XJ^e~@l&>v4mVgQLuU8q=H@zOi-Py)Cull^st3C^n?R4ngba4G>vBP7g
zGipbBBNk>d%D^McnYp<2{-qPEpQ-nj_YBRQ>s$T)%|xpH<fsw%#M<^@+GCkE7`3Po
zFC<50ZYN3l{KV`{j6MSH#eg|CFl@Jwq)WE9U0SfWg%`r4{9Ap3_u17XHLSi>gRKM+
zv-a1S1l!wg<fGBExTLp8)%e%X<u~PL)U5y1(K|<}qn2c>byRtZ!^t!c`DM~Ozct+6
zuu?1GG+<hJa@4dT$RLe~9$SWi)M9T;`O)1a_qdfZt&#-jw(so{RJa6{1qn(?Fd%)R
zvmL=0Oa~uejo!w<`u{;e|EstmZF~FoZxU>8-{5uHO3Z4JiXg)-((i4O-nj$ZHhww@
z8~yV;KxcMIBY%id-x}OS9GrW7YlGJhe6Nce`O}NB9A2P?rqhcR*aYSlJUWzE@9?;M
z?t_g-tPWo=scw>?J*j-uNsK~UGzz3-5U|0aG4M~S9CZ>S@G2MwpscXS%6w$$sFMby
z$LCHsX6(>=!ZE(}tLGY<t@HmzjGgqGT5|(HzuTD(8vvPHvH_SD4Zvk27A?lOnp%@8
z^|Hc1rn8tGoz*<1yr$ORHzq8fZ;8f7Bcg4MCC+VVINTgt8r(mh0XeobdqOc8xe|ja
z69e*SxPc7^I4-vhqk-Ck-Bc@>YNE(aYzj1jIf5})YEtT3!xL#qFFwn|!21ltH^D%k
z;N2Sp1Jf!{WH2CjS0l`cW&37*c*mj)d+xCC$Gz~HFaNs#Rry(0KDtS+{L^#gU*O6w
zqx>P^w!P)&X7S+v#Vqy-4x;#^hAY>FXVQadetLg39jHlq(}smlQo0Q(+uF3ovrjO#
zM&pSGEl$~sX6`<`LL<@C+Oyp7U#=Z@4)|th>J$6{p>@(fQ|)kFUEAA^GC-Sl3<-yR
zwH-?i`${`5$hX686k$?=W=CM~Q%k-T7>p*lfx$6wcey)AQ7<Qbwe%fGE|jC5hBB-7
zr7Q=2HOq@LEK8+j5l_gbJN%UGr(CItKp$I^-rKSb^XmuAJMW<dOs}paLD2!vEi3D9
zFAlCdpcJ*>xlsDKpd;9EEeozxXVW(a>F3-#A(#PU7Az+C?P~2DVGGzdwCzcS!SOUD
z9K=^*_9qV8Ke?Ttd{u<)ZB-h=d$a)IagWO({31l)XcM{BIBmMYB<o&nHJE?G!Q^zX
zy(n9_A2p@mJsPuVs5R4I3px0HsWWLcu;@dR#g6aDENT@FaMy~$XRSO6PV&*{{kemv
zq<5PhQ+D{Y647+hpLqwYT+*A_Dj{87Bs!6}2%nb3O&-$?pw7+XR8EA0>Gyy;GIJ;|
zm8tJ2mJsB6^ZD1SF3y1wiq?0GG7=lhj8S|1`ni<T5ph=CBvT;dc=Wtrp_p^nqi=Jx
zBQr%4=$M~gsIh+#8c4buHD<xoZ)+pANL3|AEmD7C?fVmvmnoN*YBv6pOgTq)E;li`
zucpGRYD3c|weteuQv~jFM>wn}Gb$%v&eZE-1U<PKS`+FK0MvSIUgq1BYGMD6WpVy!
zZQFbYgUHVoQ3=CxtBp(c(c*Fp%E7KSs2n%}9NW|pygFTrtEnUWh;sz^q`5R%7FL@&
zOchO+$ig#ovpvpc`!;c|N$=11<G9&A9Feq}?G;~{?Td(uX1ktTl7DYC+x4Y^|5r`+
zJc_f)j#^=JZh`*ws<F`<wlrDW)Dg=(p_E@g+s2b<!vB%ndcwcA`Gc>W@L7A?gsUDV
zTwRK_>rza9!WZ@X?-TBH2s%s*?yH@EyiNF{UpwJ{J-Bzm&%KNZzl&u4m>TUiM4cPq
zXF;*klm4$-@it`#bvF1lN$<t#za{<eP3Rdkc}})uyQc$WdSge$m$d9K?Fw&c?W5_p
z!vp(*#;*~`CjE;i0yn%E?%yUhPRGXZAGv(vMh#m`zN4aiD@xc=ahU8~qqI#Ny8a|W
zN$gQOFBMG9oNEXQ3-()ry9o&~6S{?)mpx1LGduV+!C<qAi_rvJA(RM{geSY8@W{w*
z#SMQRc|N6T<+~yB&x_pkxCQk7REf6oRu5*sBdZd+;8W3<Jug0$_h9vokX?9vtzZ*(
zOI%hK8a<3kw8a<FwNy73S8?qlmHU{Q`<U)N+TyMH;4jtPW+qQ^-*YU~g=?tvr!;fz
z%Y6#~^rvval>Suzs>oe~tGGZB{ONmx`?T*(1>Z$9Uw=wtx1ytOU1isw!pjT3D+<0V
zqwhxV+ISV;fgZ(1rPhrEdYvOMwPAkOvN2`mQS-33Vd9S;f*1Y!<LXiMT4{LcT`YIL
z@A@n;s2?dhI4v=ISyV>@Z|WZ7q~MZ!g;QGMspP1Zcw_q1JZE(o6P)xuTF641)%7kX
za~s&u)vkz*3y#iSF_Ou3tLk6`@r`Im)#Z3Ao$;8`#Tg=^%y}KRnj0Mwnvcxaw5hxm
zp04;Kb@_lGa1TmHG-49FQSx+2cU&5HvFGbC*TTB^vi@o^j#-mp;47u;Q`9{ST0?i-
zw)pO8tO&`QZn2?>UG**tSSnld=}pqVFrKP!e;4cf>=*@b&6=qO?1^CZ2=4@W!`u1k
zg>UPSu1=~$&ECZLMAxA=5bA35pyJDt-iWyFIYUI}tB7FNeAl#%v3uDhoto<!M~Wlw
z1glb`>&pc7rP&=OUcsU<Il$|eXm#hi_N=^_6{QWebYK@6<Zd?HMLSYb5Kj3!%q!9v
z?aA>;)lNB_6{S{B0T$q%s)BVd=8S7yN-jr(Im|^_dy*+)>~OIPpfHwgV|;p0wujJf
zOMHSLWMZscCgAc=a@#h7k`En}^ca*ZE9QCWacdB%ACf!2-GPb(By`Rg@HSyohD2Hy
z&>HP64nGj2%Oip?N#1~X(DOredq6z&zml?S>y%x&lye}(`SX1yd4eXneLZ6&V#$Th
zls_?EA$@=+-}!*rx$^mHaPG56NC+>NXF+fHv4q!q?^Um*kn}F$$81J(`cVzFuf*D#
z1Pi+OW^j=7huth+-7)^KAlR!zZ68_5W2U*$)xf$DHCTBsShRa?5`K$ln|TL<Ry1aR
zRO}6k=ee-wiE?X$Ws#%H1rP*X{_v0esf$bSe!^7nbeb_Rw;Uo6`ps0e2ROI3a+Vwf
z!z54lR&1pU$Q{h{3oB%1dbI$x5_39$v#ib*bgIW%ou^ReE>@@Xjb32FR9kuWBwQ*U
zv>M1;lkyKn*CALoOh>)3w%dy#D=bkBX8V1Xh0Dglzb~d;;HBo^nBW7rUhqm#h9o@Y
zw;8D@xW)b(&<oX!NX=d@V$*v`d|9kxD5WR8p2qBmTeT9!P5xM-Xr`dFx^v?)RGr2c
ziw{&7e(_3X3!xyS@8b=+j%VxA?<O)|pqH*|Ye|`6*M(p&9)CJ8g9weRmS%5hDtp@J
zES&2;_jk#ThO2lVj5IY-`$g<3pK7VC3`B=fgOuzf^z7Y>PZEAfd`x!qQ3*_7DEWo-
zAnASKZAxg9u&z%dCWVu=>!-mBTg9vt@b&28;I{3Hi`qM{+&+;VhYX{ebQu}bYt&kL
zGiWEaF+1ST*!R7au_*(t;8dtP;bAlCy%JOkcxH$7+el!IVz|f|k00%q9OCbIv^U@o
zuOHn;RQfdAIMkx(`i1ct>ue(PE*255xao5@USNj@8Nnh`$5!{s=q>%cf_|1yp5yvA
z;3%(8qV|c{Rlg^ty7!b`_e1DKvqvRs!)be^w!siW)c94~{kN{&No*=RNL~A#8eT^K
z=o|HUeGvYtb(!@g{x06BCDsW#dMX_iwy#ki!_CNe^7=oy!9k_j#wT102%27BRI(jk
zt24h%WdKa%i{}Fg;VJxxkX#7W49~=4H~^t#nO)&aWj>?c-z%k5GlTXT$8_!Zg^=5_
zaB$@AiW@dXo@?cKBJymA+`!xw;kKKJ9LA5bUl~QdtiZjaz<US`|AeQ|9)Rv=|2uDf
z%2}7}l}*hfwfCIiY@o9g>OORJj<{#97|c3xwEYx`tx4ddQ_{Dc#YCEL>Suf)oboP+
zWK(OAL?@UHB=su*0=pp=>_UF<7mH2;xv!z^`T6)VeK(O5Ru!B`3f%H&bTfV;*ZrOp
z!LS_{Ya=M$Pux0RIjI!Y1$SK_g2PuRAkf%#F-!&P@5}t^9TGc&WCFPY=ahd}e4Pc}
zA1^CWptQifwzybKrQBdCZ!iu+h-H!jH(6jKYzZmFwkc4C$s6&D5mdOCMunGJ__guX
zN=LXcp5Fa&F^MqAC3YcP5jRsRCyL!;t4Im+*Dp43EElWBR<zEXz+Py8Fkzxp3s9)_
zwf!g#KBiQOMYyY=V%2Xbs8T_V{t?+tm`CSn4rp4Nf@lsLRVuqUK38awu9h3>7TT@~
z&fZfJko#R6X)0)rnUoJcTH#)@oW~2;bZ80@-|4;d(DnwwDL*RIxS2se(7fDbMI>rp
zinWPAvaDauH3C?}h#}=P7GD^zWItKv*r2uF2YpBMqD`E0{wN&|TlHE2d_(K<-|U<7
z->uQNIQ>e#<<>-QDsm^_2Ir7cgKmxR7RM12*hxBNtK<5!VQ*Un%Ft02-Ds~hp6GKz
zkbB<@sBwG0SML3KP7IXDj^^<-C-?qjmLo_QXo|XzzR<1?+obn33TpH!)C(?#stx4X
zQUyE41@e3e|FPl}_7H<$VLi*4XzeG8!i|QlJ`R3DRUlby!4Mz0-Ba+wx7TlZq?73m
z_Og}`vn+^D+`J_-rluI2SB0^m^_}eDOJhH8iyugVu?5$f+XyTe412f4rx4z8>@;y$
zW2Ubh)56gC%@i6NnBlcXInoo*(bmzA2>OD15g2n~i*eo3i+0r=Ax>4i>7}XcqJW}O
zdYr1cEahd^;S2h{0u$idccVA8LMY#^$3C{F11z_~pl^0b8Kw7b9i7y`*Rx#c=p+hJ
zCcqyHNe3Qx<*r35+u{ci%6Ob7W-!_&W&7@P0p{l1E#?c~jt#xbhA@wxv|L-sWvmwW
z$V;)FR3%N>F?|)t;>p9KTR5w7aHbt#4sJA`HUAIr`n7QS;7m>U4om+%kWq8sx>5sp
ztwF2<(dT$UN2^*52ui!OjJ1;hTh_!Dj6cI}zE(38FE5jYK;Dw$;j6=W?g&zfz9SkM
z(TKu3F==a!e^iHrCG@B7I|{z%6?`u&_!gMy50$c8;;ZlkpGm$<vsdFm8e=6pW;x~e
zeeXm1MA7SVMUYU|uu=<E2ulr&4yslNsWwEZf<IEG&PRybM3`%>-*+yhCAxtLk`q;=
zvA80tz7!9GIFlr~+F_eCh-HeQbQu)UUlPp``KL#I(||Z%<10G4rI<ehfilu6T}9L?
zRmsz0QQM11rVy<SrK-V|ZEJnk<#O=d8hs0jQhdvu5V=!ugGI=oRZs^WI<WWyMvRG;
zH|j{Xo{1KhN2=+TDk%a6c*sMbTA0eZ9t!e1tvs5Kb+8GsU6@&YM-Aw3ZBqKVmLCQ`
zSn%%;;3V&NBrzA0g@9QK5DJOFJHg#poC1<`DJeVnoFRf+G_<&$-u}x{rayCKT~W&r
zEiuv7*6FFD^p2_Q^isPJ7gX;ashea-n<UXYl%Du_b%Hm6>m{g^*gz0X+5cj<m(taz
zZK;7f3Dj`ew(8}Tn}i!7YAx|8_1>mnBFILl;*f6x*is1EnMt7RJ1AQ;^g{K(zrpp@
zPcGe*I=5~D5gjK*5!OZjMA(FqrGC-I<rUadAgXod84%<(n$i49ODrs|)0-~2`fb&1
zyQMj@snB+_AVySAMH`iT@4FfzLWl{f|0?tkMGpGktuIF&UBVSg$g~R!2f=-tEV@;>
z{%l3S1W2L|PVEkUVIhv0DA-0FwlB5LUVaDQt~+YjeTppD8lNvTlBSamhoy=gO5M7(
zb%m|XSR2*a)Bf`1*6vEe2>ljoGhLvyo600%dxS_UQnd~zb5Dy?oz}$;UB}wLy%)o~
z*a#3qJQ!cfzt(sqC`27&2UP*d8}-3;<Y$+RW+mk%*eYZy`Hbz7f>;>7zNi`7whd*m
zU9L|lVql^oHjrbWXf%I$FQb`R9M@>V{m+94hri~hkp!JKzv+}zV2>XB;TDpuB8X(0
zDnwbf1fy4hYqN{AWRY<MXKFLc%vnaJxGdQI99ZLCe$+8?w}PY?>V@PIaGtt5UKmWg
zngLsPei98^)>Ylgx(gVuws<oWx8yu3uYTsi>&h1NNp-zen%d^tc#81U#~V}M|6A)#
zHy5RfS0P++tDN4~VL_`xzV|zte=xbbZpv=(Qx~p`t?Uetxz$a|O}Ia^PDr8D`r8)o
zq$Ti%H4@w@TvARAW}Rq<u$BgaKYe%PzDc)%uwYvx>9!fD;cUUM(i~+k6!rm}1PL_0
zv>&ialK!OTrYx7ko4hykB9i+MbxZk*S~^v;T7#qnh0COOd;Bid;7?5jkKfe4h*{E5
z7GJt+ZZsSHnuc@7X<d6K^%o*4xFvkLN!9PSQhCY2I449X!Bv!`GwQa(BFf*KksYe*
zMK!a~GpiBdK$M{-*n4LrJ=9wi^ry&&_U8+NH`yy=@`Nau%n4#@+SL9eys^drSeD@F
z$Z#2f>`Uvt5P?<w&`;9m2$6v6U`$Du^i~F~D6-}9CD~6;s7KX4^J6j^ZYC9?fn&3y
zj|~2>8+;@9;D<;KnudOytlcnuaw2;fmasP^YCpQ<mkBfa0vgbbs3an@sY5?#$d2yU
zSiCXG01HtCCsIZdbURh3SRu)w*IJXqb48b-1{wnGk=Kz@U|dPK{N-mktY$-Gc&?v?
zNZRxHnUT77@Ole-PAr>KNJPk@nt>@9&jPF&zs)8)UO-wQ0gZ$pARrEYvbqy{QG<$m
z&5gXzUAO<?<})JGyUCxKS<0h>ukhuT-MQ#BX?3n9dv19LcXH@dy%DqcRYlOgbwsf<
z+oTFeDS(#jQnsm)t%&Pvy9{{X;X_zW*^!%|WNJ^aH(e9J8Jf=_;{j1%rwYskemv0)
zkafof=wF18RclG*X?>A+ToN1Dl2`ZQ57eu$f4xx}oss_7on+15C(1@8tAGYfU^mDF
z_G6BQ%(ggyFyD@g2{EELnUiNn0UG_=ZS^;9bGtE<5jJfszTJ52#%(55%0}t(*e)4|
zOzXh1Zbyrriqv^3hqyj;uoPUyrBS1d${l-0j>_%LlXU8A2lGS1Slc>U5v)CfBdzE8
zf+bI?Bsgg;0z-;!zgiV6i2bLHYU2Znami6MZKiEgD8F~J+H!=|^^%UyE>>O7@TDAL
zNw%!E3Fh>bx#rZd1bQB8zY2diW|NZ}*>oLB#^8j-stSoRX<aihipef|H*4Irw#zqJ
z?klP65l2nNROYN(TvgT=^>|kb4Z_oD#ST_{9qWH{L)V)qD}5YD-koG$dWGhab4)#B
z?wGiqf%*N4=4+}!4eabA6@oIKOZdZTf`iHaVIp>MJu77?Xa3MY=SQGWC!92$Y#bTF
zDC(=h8??Ns_T%*3;UKiF{~I+b3Rf~cDW44nrmL5kc5ja50m0-VuIAlPcSU0pTXlst
z(~ID<(*&;Pfj61i=E%0Nz4#_>G`HLOuuL8K(n>8tJW;(Rw@4S;A`MSLfN2|m;5w?I
z23cC@d*fRJ-L@d%4L}~%W@J0Km=tV8{T(hPS}g*yU~1{TSEdbWgw+|5HG~C4B@W6~
z;}MMGq_QPfr)pQW?3$VW`S6y~$#cx*wSu68;Pm^l;Rmo9`3K)Or-mY~1u3$ql)LNG
zKEbD<ScC{oz@|2*$S{vsTY5@GJLE?*6BdDw;CseZxKJCFD3ve`B`FO_4QCm6{v7!R
z;R+BuzZuhDg1qr(u9*G#@L1blEQkS+FnP)V^e<fhWT^M5HwG&`gRg4HC+t?;38w8|
zU|A+Om`aiz7sji?>#Q&xJn`Z?R%24UqbYWoD_`Zo0c$^yEsVAf0K6f4nUg(HaHDru
zd@io2_Z_&wiBTsl5U5t5hN6?&VFbc)6yPTMj*FN^#&Czf{%atZxKpXrR<FkG1f%(r
zByJtSas$;cm3#t_jZrfA6@n8U5=+1Dxs;`XHYw#;Qd0i$QCJbE41RVX4r#89m-12l
zH?Neia)m*$hTv*@2=AephC^)smQ9W(0pXE~t|KD0z|k0<p9PTT5n0^{(YoC}ftaa+
z8g&Ugo!succvY<Z4YK9ed+W?TMQIFq)^DRheUe%w@iR^Vc!nc-FYx}RPMLt@1+`?s
zc<fx(Zv#uMTYtQ>Yd3#&gSU0&p6tMgD6@$6;|Z&8dn49<wIUZAF@y!zoiVq=j8<eS
zdqezek_1m;I9I}voj|b(Qv<%sx*xmh`;0}hgZ3j}YNm|eV!uI~w@GZ?N-<@U@?mQ0
z%53KrlhLf~<(q=x_b9?88iU}`C2||cmjsj~!n{i51GdW)h-zjWk-2TWqp6xw7jhjT
zfVHMxtDu$wq>rs^0t?g2o|Cih|Lxujm#2|0f8la;RIKHYjY8S@f7De_6~);)v4yuM
zA<Rb@KrtNsvN70dXfkiJxyVnso8z|cxG=^m9L{Giy(i&!S}V#y4lpCM+NQ@e$mp6D
zbkeUfE>)JO8=)2{++@e?@!_~l-sjwcElF{VUDb1n(bLRlKZ^ZCX)>S9y7C;3LXW+s
ztcW{unaz`~+?`)yM-$7}tSh(Y!bETY@w`);#QsT5J+>G#-6ai~<t0{U7K;N3j2jWz
z^3Tj?lV<(a$|-Z@{F~OPoLLL4w`!2cWmO)q+Wv^x(gsMv>*k&V;D1?C28;%p14Se1
zxSA9fkR1$~5q+@4L`=m5cXRsKBN#7au^qvBnQ5MC!dP$B&_~hB%SmH7PlI!qYFgMA
zAeaUTi1={Xzd~YIcD@ISB*DswMJJ|stT$|4SWn5UEGQLc;yT!s#@CD;C6XmmP<;|t
zO}aBZ73y^Cr~QHW@Hw(1GVfKGol!cfRRZ+ysyIEBnnT092N3U_<bwSn2a_d<Q78BR
zJl6ge0u6sqG1s`>7QGPm;I!=;V7dM0MA@M34E%>DQm|iFqKH?tJ5k?YP?KJ1_;WEB
zcibmB<`@$7r5t|buV)S{!psojg14{ViYY<QXu^qZDdiZm_Mda{G}O;lr99LZ?ueph
zQdDp|r6e9vNYA~j05D!sMBWVDC;eO8UPors=CS`0#hW8=$d24_D49=P!^S4IVCEV8
zq)#KScu{Qgu}50X`1zR%x(PpgysckODyOErm)-hJVGNGQWBef%ITKrvC6S+<fC--z
z*>&Kb#*@EO!2@T!{-aX-MWUTN&7JhFR~=f{kS;w$!vLa;uV_-Oky9Ag+2~~~kclZ(
z<Th@TT)jn`?R9>pmD0RLQ~71T{YGr4L-6$B^e^`Tpf8+%zkPZ^f4-$B#0<48WB+e9
z1Js>A;K_IA@mzP%(IhJ`_TH!3h4Z8(BtpB6VQ}@{Wn6)cUBq8!#Hgdr!1%Fk(pC(G
z*tv47-eakX0P*fF;BX7bJsvg8`6juzJ@NVV6{`Brh&Y6Jrg9XG(pq_;k*I?HGI7H-
zaae$fI{M=AREVv4IKZOdVR^`%-^*Ztk}_Rw^IRm7FWun!9lj+Zs4@}Ujwd%jZutqA
z)+rWOG}+Hc`T`aAHE2xCiC>)<+kdprv+?PLuc*F*RbRQ)hrRiN`q*#f;S0u-6f&P!
zuJ_+fHy4wCFnk1i*Q*H-#9eO`twS<3CZ(j6$&P6}+EZ7W?3i%`ffHf_7m4LCV)<i9
zqJcV<n`y0Kf{PJ??Q!1uvV(nFE1|Jn_Bab)Y$yYz%YXYd_$6pj4ZiLWo><P&+&@rE
zB6FANS|F16rB-EBYNP+>ITXXuj7pO=g5manMt1N~hZdA@x|Q&kO0|HCrA)WjmW*Zf
z7b$CF_P}?4qMr4~R5kr;tPNuACxg1GI~%j#`Cvy$vIl>LQveS<ZP_PLGol0@q=Ytr
z!MTxGmJT>=QpuTXtj8?LPJEj9m|Lz^w}rX7x32WjQfpmyaMmgvxo?@6y^PYMfmV2)
z4h9<1Cs{M3U#xw{!UnuW1C;!$4M<QmNVNtA&lmw=k8-Vmdtr)<hj+pG7UvNR`vMo}
zFRIk^B2v+;x)awi?4P2|_sY5*0M{at0H(cn%5v*>6EgrCQ=ysSvA&tnI{jH=gfMg`
zIgKZ`9@3BTdPfotyMv5L?>-frti28E*}SdZK%?uiv(-_&ZasQYlD~aKn~H)%&ecj>
zq{{MlAcs>bK&>zo&Q*Z+uAu*3(k7s4CEi%><NVPT!7mXGQ-VEko4b_{F%O<0+{A`c
z?PXm~5i-kBCpavxiY~pRQ|)%oTUSX(S?xBxWPPOk>(vbDB{$W+neH&oVda=30Wr73
zLr6Q9espL4O)|*wmX(?J`2q~a)CGTdMmk9Ogj$@z&n(O`1*hEWc7l#*U9Wg9)3=JQ
zW*1rN5v0J(e!Qw<%u#ULXE=e=9@HQ{{bfLj4JMm|BGnnYVd>t`-oJAz3EIOVxcc2M
z*xbL`=-m*(kSXodAtL8sqc3YSIFA%iYos;lbCOtQ$gw32-WoBq8z|K_0svo4LSj<h
z?_42uD!6F`j8cNj4qktEF@}FO6tdMFLet{CpZ&8j)!~6$R3$fs1+5ei?jb)lsO!OT
ze{|O-ju%@oFf4)ltdRhz?NyAUUb$m^>;a@Ef?;m<ArpyMj%Z*d3&|caV?G4`QXhum
zSp+X%GboZ}syo#i=^I@YLx+)(euzZq8;6s&+rih!5u=tC-6eX-F!Cs94MAI)>%<K$
z0hlK<=t?y>c1_bO>$k)nh?Z$~@Cn<41kNqFDpkCC%Q_L6@b}0yqU11b=fhToNil8N
z<IBPsXcZxE#J=%>l9~aahcbzUd-0RftRYQi({L=sEe{{Y3K8o^YpMNBmGlFcU055D
z<4Lqf?K_5d>%+a?QurI;waQSv5iyU+B9rK*z&^ofhKrG;fT~5cAf@*k+s`<#vJ{l`
zhFq<}4n(QgIGGzPSePG0wzq;Gb3kCSJq%kpflBZI8-8}5>&PAM(xZMA>^iZ^T2&Nl
z8%L!QHXD){byxga+MJ$*tsBQ~x4yJq>T<oR4{zs~ZPY<4bE*%Uk^5@rA`HNRt?6mj
zu@+3rwt<gEWUY#n6hJk&4gO_hQ{Czwyn2)Op6-}}ivB`CQE&&*GS%>;Oc>ftAguUc
zh&nem&M0na(0L_j!U<J{CvJ$ut2bDUy0sF17f~1Fn7u&*hHk09DSJM~QTrZrEII<Q
zi|;qx0MJocA~ta527b~JaveDiB!-~~vN-M|?gHxa0Xw^Zs(e5n7f`N%Y~N(Vu5_)w
z+~t0AEX8GKRs=^N_Ff`z)y#Dg8vc=`MpJHZO<^pj5=%=kDVyzk^)V`ivor!u<~Z9J
zp<k#l5~@Eg<eDg?x4G#kq_@52Mj@i-lze;2m0amcs8?(j$OwM5rB81Q_ar!6&StlD
z<`7^;R({3#`^JEBD@FXT?G)c-B|^=_+F~+;yVTF4s<&D&x~|ty=(_qm#d<4PhNp)I
zj1g`irV5htdBbO4TVI$Ap7ExT65E^%&+uRo4{z8PL8M?Ur4DGH8LnhSiR}{uCsq{o
zK#qCvD4FKLO!Z=uq>;@)MNZy)h>rDs4}wAgaY(W@&?(Zj@m2sYbu;fyu>w&+Ydl~?
z7g|baXTOwwT(#98l;^1E4c9JY;+zzcrJ<NZ3Zfcf4X7)im&K`tF)TS1mUln_qLFiH
zR$l1ZxO$U>p~#4&&Ro}#xIp{gkN-(8k5vuX>pRt)?8vkF4@71iUc?N*QO)fuj>@iP
zA=V@OIo7Zd!c-PL2WoieDDsIGprCu=XrWFM6WxoYA#J#0?LEXxM5V+cT-SnBwvt|4
zH3NEJ2rAr%T)BQy*`=%{SfT7-?_FNJ+G<m?6@NFN59l*JF^@Xm1-+Jsw^~!3NI4A}
zhH0V9J1LWuz}MM)ZCOow!%tWcEcybC@?i6Oq}me99RoDpX?U7uT+&DHoLFtK_Ft&@
z9I_6nu_8QxActw;-kQTd+xE6lqI3eqsec>t>*y###5e^8Vor<%f^RuAkxj+{wP8HV
zy<BYA+r4bq_T<S+lioYp6}gTAda#hAeaqWXm{vU@v9=kUh6jHqH2fi7(&Yk2GB2iE
zte?{Gz!wGCj$IV<S(&4cIj~y&s?kjGG(rPLJ1g95x81!CIQlCIP`xM)&OjcoUIx?v
ziVn`8Vqs<Z!;PWpx!q`LI1MVM-iyG7ljVs$5cwvU4=JX_>1rr<{pwh}u!XIFQtR}6
zK@VB=(1%Y!8VaYB%C^PNQV^cH9;8Y#BXD87IhNUuEP`7EGJt<xx>+^WkKcj)h2W2Y
zF+-wyKfxXdau$_S)UsH(f^x4lxl07>$hT|rkbbsHZep2qHlMtc><_^Su{PceYI~Dc
zx#WswahwhaYOQLflKyQ%ZW8ORBT~WYyZqt@lcR2HAv%3QVs@k}*!MXR%ykb^hO>Y7
znh2(>-$F1e+?COi;E7Y24aNh}gg=D>jD0X$raD@iq#X(4GL;*nDn8$cjMB0Vbd3=-
z7E7;3E%7pHCpDvOUXt3zQgRX$W})K+3~A>+^^(4<GrqO$Tvl5+jRm3w*YL8s?VvsE
z1G}Im*qNMxEGJ(3p&q0Z@=FWiAAb?M?EDVM`_^rvWBFA!kZq5>Lh(!ZaT25Ot(R0N
zi@$m!OMUORBOl-I0f0&0=t!f#NWC;|{j1;77<=m*vZrpS_da}jJ;zRT@3`!Mnx0B-
z&0Vs+9`>qh9Mw>I$yrU_`-*JHV0UHUfIgY^Y*#;`A=v>(>3pnVgK4f0ghIu3dYZ${
zD<AbXHF-~>AHjtq?@83xFJTiB>CdXH*Gf{wPdEBlx?4K!XKdJuReW~9p|OD_(t^LF
z&f8$wrahD3nHSftK261&bX;83<nP_&mp0YDcFFxswU1vCQ$q=?BPdZiZEp65#XY~G
z#omT+9H3I~@r2AK+Y#E4ea`@MFmV7jD@)eCJ*}1_$5idqvh<tiKOicfTAF@|w~aEN
z^hv*vy<|(Gc4LdKlQCKwQ(bSCz$la)mf-SI&my*d1{#i9_e?T%@2418wxuG}tlc&o
z$CABqGUxVyA2?!pupeS>Gav2mFzj)AAI%B8*n}x#1N}rvd!?$O5+ML_Tgg#YUo6uu
zvG1t+RCxNg`3pvWd0GqPn~X@@MLSp<t{S#O5Zxr>WVf!|^;(A0?ioF^={<l-KCbh&
z9|1a*RUdfPdTx0L9<rnR_w3bF`?P>%qJZVJ(o51nlOoZJG+<%mj^7|C;o<>TDh7@d
z6BtXF8pkA7P;949>~@5K4U@G{01o7E6eAGmx+L)>{ig!>*|w?n(O6~%jrs}<t;)er
z*R&@S-rpJkx#O}!wreW>q!B&_aQSwVzgtu7KQEcrRQr-($O0RHp<_#@-69zJIUNCp
zswiD2n<ul4m<g9;3NCJ(t~K_Wp(+Xf__2m63ShKO9nEN64<Yq7g<T-?;1B&vu@%@C
z>2A0$OjQas`-`7M4vu@xQ*u{?^CEYyxy!<HqWF!Ge~;BJ{eF@A6LVLDKaBkEM(IC@
z+=Fn#o1(~%qQD0tcX1T{t*G!9BY$V)z81N=15;|`za#(V$UP^@w*&Fvx1vPx$Q>HF
zqa$~Tb49Mir3pPFL2q-%?%?|lrabHywXB&M!qJSns{QU0uKJRwq`h#%m!p*1MS&wD
z_dAh$VC23Nweip>{q+>aeH-3}(!)?(`I!CALTdKULh0{{xE|&!$=@Tmg9vyr^us6d
zg_;%`q56;j{&fU!DJaBL_{ZwQB?oi*n?ctqZe>r5PZ>2aeqs8A*`ER4oU82pELTX@
zJVcK~wuZi#+vZ_IId^-c9O1fH=t<xP)lkks4O~#Hy@C%NtV}{=f1$%8w@5-f(JsMx
zY++FJ=eE<WYFqF$QTa=7-ivA%tWEwFC3oP~PqkZ=Q?#rnxvP{@xH8fu+F>%`ZG&5C
zDgR`SqUmz8bs4jzkI6DN0TUFUscXf>FOh+<BYc<X8<ztV(uhBC@->2{Dkw7ioQzMG
zFOWJOQ!IMlir+fNDe@lOphLwtun4|DF3b(VegvzL<=v!J@wwY2Opw^Sn-xfB5e<&m
z5CrWTx6pt}@i)4=0VNfTi8tK0KO-7#M-W96XM+9HefdaW+2}i+FO*BH&^E8s7>Ab2
znc=(ElouVB9rR|;e$ja(4+JK&r#+J3k-JNePPBf;OMm5p>dZ=BMSQ*m>-R^3F#NN5
zy=Jc@<W|og!bb00vnstzJA%)^a2NzH?)jICr-Vx}cT`c+)e=O7q!%%0mBnBSF#&Vb
zH{*1RP;XaAYd++?!<a3G)Fu$&=E%J5OZO`I?y2m|(jbM@38B6T+k-!o#m#rl<mEH2
z^xwI%;2Ak_)-e2$Y9!OwVMk<k3wu8VHuzUoxI7n;2Vb;to`f%F@B4nZK^h}1D;_m3
zlxMn@?Pe{z`ws;z8)$_cnKxE%@0s@vwj&t+dr1{F2k##0THl-##>U#QtQr~7TSugJ
z4~T8n2hZYRXn=M2B8KMhFAYrv602xj?@*yR3&DO=!=!vWq6gcrvIwW_U7!}c7@auk
zsYEqc=;X_K!I`d#8tmF{2QmoPK(`zH@0GID2e=2#>lolG`W7XgMhWxNrcviT2bcc~
zN{MA!;1#$CSi2(qGNljWsCGd5xag?1KNt;QA7)6!`|5j4SHy>z&7@Am%dF)AtTSCn
zD@NdEXk~jo8oZZv4m`jM5@G`<t|-dZ!)&0%c*P0^;}!89L*F(=z}ukh;kPAF8$i=1
zu*Vp{RvkFzYa*B~5@{U(g6)-P4b2O*kY}YL^VA1P;7zsCWD<gl(@Smq+lTRCT1}AW
ziI3P+-+L^r7pBXt`4y?|I##B`!dzU>t!r<zyCDBG865s&XV*%)6oM!EUT{agT>6f@
z@3f8fvU=Z1`!OMpBsW$Y3bk6>@`ZWz6_Hvi#cDAoz0Yzt)9WjPUtIuBg*^~c-<-%E
zk0CY0v?JDlmRH&E9kX7{0g+(ZH5`slKmt;@s`nr9<yBoy2pRILx;6q`yH_2(U+h-)
zMVNcfuk5D}`4205l_IFQjGFlcmZrq6I`>l!y&K~L*cY|+g+~!kB0f!_E$ME`Uv-R%
z8|il$gQ|P-b;tT<&p@;fV4!_E3kO%#F)HY9j@SrzpBJw~EEQ|J=TT_4bvrw<`@S;B
z1~v$gMQ~tQr93I+(aG8tkai1q>QKszi`9BHNS&yon=8;eTP74foJkkD;kJSfmX${`
zjpiygSD8(9v1^us)KyglR$E6k4@#evGY0ho+K_uZWl&t?_vzfGktb7fK=}*KY|yUu
z2cgD9A+l|%<zl8)1)KK^V_S@uD)lA|dPEX|U}xoWpy@~(m%@%$m_Kqtrwtj6<ZuM;
z0vl8Gu)-f(CYpN+J}!b|`B*(kdNazo;SinPMqOmJxv|a8C=HHzP-iPARiv_G>g=M~
z>}6^|svD|<lj%%BPEby)TgZQIQ`N2Ef52MVWbxe4=A0y=?|p;C)xy{%06X+bqgd8Z
z`(CVlTj8h8$c++QmkzInbyXfj0V9vA=DcC!1DF6^j^K#XlCE{`N@+<vI2+M8i%cgc
z-kAfU^E9C2k#eerWK;z2BD7^16Mnyj?4{gYn^Ed*14$fP(lMrlb;<AqhyM=kxq1|X
zmfIcq@r=cI@?aRcHXcv^HQWW@l(@?7<jDX+?K{Fp9|!MO!DV-=sk$qzi>@Q$!4M*0
z0)QQ?0%0i(3kiQComogYj7|z4VsKc@k;;0vM`f)Key_3umIMSVY|}V+FY)qA^}8Z|
zj8o7;N5D-NinE!d<6Prd8vPNK!M3?Rj-`Xqb3qKw(F8~Am<?D4TNF8)ax#;jGm?G!
z_r8uP8`9NK`%d~M0I}_-2otnonr%Lf^Tap7e6*%K`~iXn6Lj1TQdCOePhpS=L=O-t
zmwp-k0jNW3f!n%N+fC?t1&Mn}`mcr;lJqRT97+ETIJ%dlM|K|@{n2}I8qu;_Lv~ha
z@XD`cYHN$*G!j<QSLpfS1RF8e9PWW9g`RZ^J!_thfRyLDrVh2$8x{Pg+FM0Lp0_MZ
zW%UY*#3)3S33oO670}eZzDiGjP4{A%H&`vb^mG6?a9H}Jh@P(QUXPFj>ShEr(e+**
znQXL><j@Z|LL9f0`>6fcB{;e|1<^V{t<7_Le@51bs^lO42ckM6>?Nv6kR~=m&J$U!
zV`=MiV)~T4=<BnUwC`)L$x8H<Lu1b*BihPt(xBm5x@^StM)9X?A)GlDBd+5~{GW-d
z<aH6#>_x=2g$&<BTzl`Md^3HG=ga#B`a0^oZ=kPlzx5URDq05`(IIdxn}S%ojE@-*
zrQig?z1_k6!-NzH>G1EOkXGQuakp~_0le~b`0Kgrw|`YYgPW`nVcSCPn#bdG;9Eyz
z*uht<<Ej;!(toD1!(OI3W@mk{lf>nKbd`=cvO65|c)7NqD6pmc6KS$N3Cm5r73m(@
zlv~;D`+^<Am-xxsVFiEhLU*^u)bk}I&tqy0MFEmdS)`CO^uHHHPxhvj3TuO^gBx%8
zPe^){A!)POxHW41*_#fv9&-S_ew`M=MHOK2X%>xsq@vHF!L09S&yy!sG2-&%zAQY8
z6Dk>G%46^0Q5A3PPZ`g0)FSMClPE$jy8zOz?D=yJdDu;F)ud4mU!uTZyN&%Bnib)}
zT?iM><cFmlzV;>e21R~%sf#=$a(@@O51P9o?8MC{%0`jTMef~^yS+-9XPy<Ii;Qyq
zT`^;#Wcx3}bG&{A^P?uM?KJttDLG>mbx16RMG}h(fpqUVq5d)hCq6`ii!z(hRrl=U
z%$Acgn}?-Q_Zf$RA8gg(Eb_^7Qd#VZq|kak<d=Z4Ji%_i;0p+;DcI%w14Nw4EU&BX
zWP@|ovflk%>#TTD%R{ZRDvQ$nT4(K7)N;3s9~TLeZkY@;mrX`?R^D@SPX23TGuRh#
zcFG?-`~iti#B-6T(lJx5GY;gaU_NDtW2|VMQHeJ}TU%!g<?9x3S?i4b`TBu<9l%!&
zU;eZyLdP!)a~(TD!v0ItKeSVMNo*(Av8gx9q|W6f)L0I3s1%D+p)u30A~<+1e3qg#
zI&GT;0E!2cVr|dEIRvvSfwIT>5}r#e9IPfPJ$JP!BfOUwjVF!9?A;QyyNLdWdRCgu
zI&<>Dj`vH@-$)8TQ0COLBW4?qGXD>XkOh$gq-!>E(NT;{*QP#J!k{=6R0h{A{$PuS
z1Dp_#waHSKN&%tmD{97BqtHD4s^C&ecgfWiG{9TM2W}A(<w}*69XaX{jrkz>6N>X^
zfZPVf)x}$*@@lQD@dag(k5UdVEDoc7Q&nW}#UdEP@7kEOsUG3WN*e=#*u_kNtM&bZ
zqgo#)17};!DIdb(m;2L7gHP_IA!AAz7G~rSSY!bo?C$7};K;K;{$omuDKxCI@!hKY
zqf~x&<d3XyhMHboXys3vr1FEa@wCnu28eLrMYU9!9eF0HgL<|5Spv5zZ!cHgcU*Zv
zg%aIHB2Hrq(xoq;lrLb5>00plL!?Ptn$|D%Kg}L(<mxEh-<57mZ#p++Lsa2^nX;aT
zUAle0AzjGRh_o`vmfWWA&ot$~l^a>N&Zn1N$bU_LlTC3x{a?Q+{Q}Z!cy67?+zKRs
zvhZxWufUGNz?)p4P2R<Y5u@pnfJd`>N@2ufu561qqA=p{f*kR}h^~Sh+ZRUEkR#Z3
zL;s>VIsBA3#oL&9dm9<mPk}0hWQRmZ79|BN>3<c;Hu@zSGN0~zSrV#!<D2Ys&n>x*
zYs6dD2~Rjg*o!X{h8_(mI=rDo1?T$_K7J**?FJO$9uNY}Z0djMw%O*5lQW+ldf8rI
z#>{7HrDm3=z|0`#IixO4qvD0ER7CJ;*?J1PEBh7otaSS`xL9Y3t<htXa_iw@8cX7l
z-Ppmm-jlQM(BMz6O!!mbMnKKBq774{c@mUAA!`PlQ6*Y0|4va0$0sH6MC<gOirf*k
z<{PYpodQsy*Oj^A$Da>R@5u3wuvmA=Raz!nBj$hn%xs-?Xgz-wG5_M1g^2lv#f6Aj
zhG>Ie9}x30zF4OTzpkqK8Da3B5zyeLDqF88-ZDJao-r>wZEdM!+`WOT*u_hGcHdgn
z!jv3f`P;^jq_w7~<-O`>!f|}(_^a0GgNo9Z)7_ov?r~O5-Gn6~29uGAKuVzq;h}^_
z@?XE%UjB+(%IW0`MQe;O2D9ggaf}E~`!*y9f42x4Z}Zf^iROc@)W%$?>sTs;PkO|K
z8{t-MGQF0AU#os0Wkv0^Ne~|T!0?qVnsV-NL*&rZKLBC_m0`HNvE+GZIE`B}kss~N
zo<{Isw`qd6-sxXp;;|Q)3%+voclTosVO)Vk2XB#>!h70uTfX?MbX!_UQV8?~@Xr}~
z3Hrk&{nC5bR7iQbC&lr!S6tnh8CO=k%#~}UUEEn#M1}!mKqY23Eu~zhmdElDEj^a_
zyRaUU^`7t`k`LOt{OmY5>|6!b?uC62zb}KHZ{7YQ{@>cqQ*%-IrNzsvd~4EQX;QwK
z-_-u!q0#@J+MgdEig)9aYrj9P43U>Nt}F`Yi4gPuf3&>|c$C$(|DS;bf`StiF}Ac$
z+t>yb4K3J2P-kF5-q@g6#ikW&JSxR%6(s|xT%t3<jN^D{i`KSkX|*j{TWxC*Q6bzC
zz#HO?wkoOD_ce00Vn8MT&v);4E{WhdJ-_Fl=Ye_m{jx55?X}llyVwu6_v;TVa`1}p
z?>FmsbS?P#c?(c2Ev!g#!Zheo8Yd8#8cAwbVkd=>6fFBrL4W4y#0>n63y-|8lstW?
zK9ioR2_^gGg?r8KtH1hx!;jL;_|5!oef2+>-*KxCKEFBqpn)9xwzjLc;e1pEoYww5
zR+>RY@HbrpV=(wdc?+5hefGq!SMUBmjXzzp^Fa8u^_Bl*{Hs1|{0GF}t!<w%emr#f
zmk;vj7yQf&-^z=<;eXfvar~M7!65SB^Uwce{4kUMk-mEJpRMaYWBfhgpT}S91o-?h
zRa0u{vGgGH*_(cy)ckOEciT|vlUt7dNU!)*`odhgC_Vqa269d*GEU~`JIW3O64mNZ
z?IfRbc(PDS2Bs~I{hhw}OO=uwHRmkk0=fF=K0BlprkJhb5F;kV4o4U<gR$^MC-<8B
z`?ry>{PiF;-<ZVqmomR0w9puQ<nasouPqm?9VERcz5MZ)0^0v|{WzxMKfsU8e>*sS
z<oH7d|1$iy7k+>8i~mRb?y-Jcxb;8i|KXp}|Nr~?A^dStXZ6A%xGxw3s?@OSM8@E3
z2lU~=8NRu=oSqdj=<{s%q~7RLWYEWrz1bhm%6`MIzoaLQ=IW=S1Jz&pKh%FD^&|5m
zFIaqnEHZLMPx=_yDi5I_Pd;aAvgUZk)8Mq%R7!klt0^mJulbt&9Kokiy0_O%Gcj~L
zbyE|c?Kib3g1<J!)l6@%neB&CH6pXwzE0j>4{DK~!|XXAl7BXS+eux|!I-RE3rnRj
zxgOPxLVJ!fAwx+;u4_X^;4gCjVM6|8z^4hUP?vPB_K;G1Wqa)Q2$~N^T`@YHDgO9<
z+Zb+Y!+GRBC7Qg7rx3R_@<#jGVywUH0e5yi$7r&syy7Uf;Y9&{m?~Z1T+gM=Rl&g!
zaUM6CRHE02LXyp;lc(-lvrXyYpM{~D`;2GghCaX!&ma0nL(R|)li>Yp8}bbhwkpKc
z$0n+GR}-)eWQKf?oxDd$;7DhM!06toB0WZC@xYYqd}d+BS_rwxpAFtY+tyfeK2zbl
z0Ant~G9E1oon+==?}@$V0qM_Yd;S5RCc@ltyDc{nB|4c|c%bpCi&@ZrbYze5+fZiw
z3T4MnK%*$hf;=;RC7|i+vNP}tg88G#jlV?Wx7g2`0Ipu;<7yti6~4j%EWTp=lEK$=
z)s<|gC)kh=v`QQDJAE7>12LiKASGqtB@_)YLuMRiS@Ulz){<c8?fj9gKp}7a;C;ML
z&T%k81cTkvr4WFQaB{~H+*WhWI@i?W!@)^jPysIi{^wt?#;gC+j&8K82KP%DYVxX5
zKs`vw!g~W}@O<P6fI0b*Ab#=)?zsrxk##DC^A3`>#rv?3Ez?ZudPAzYpqYtG5QvEo
z-I5_1e73PBjXZ+B7u++wDW*3;LxJDV(jWc#_3_#M{En{m>Q8?eUG}0w0ArX%rUR+#
z4J<Oj^z}P!hvpx_p{FQ5*PiW9iRn+tf%`K!*Po%E?oSOz)rKAnJ!hIsUEgCydi5`T
zeV6Ufb`CQA4*Bwgz*PdP;$Sj)VF|E4j2SFRZaLrQXM)ll>QK69?{Ll2zFz#vOaw>r
z+_6QD;XK^PGb@B$(pAl&#Y~N&bHBY}(_Zm`+bg&2CDmT~J6(AVnt_|SK6s0V<h6*s
z;(4{nJ?3tnTCSv@tb{p@6wB-LZColw>s<0_%@o)8f{&1bqlPlHM@P=W>T2|LFCc<E
zveCJCAbu=%b^puK`?4bTyX29o=?qj&drzJ<N;6TOlkC3BJXA`_q<J8zv^F`kt#6=n
zi&;k%(YX!%)4t+ZTUP({xb#oxBnG<UhxU^abztXxc3r<XSHaKR1+SoBu<>$Ai5)iZ
z!26AterkJnPkFV6{8+kB)G9bFYQndXp=37gdHkuTJekXXNiKiS`c)r7xy%g^e_6iJ
z?l~!0XjHhtuV9!0fv)kY@8>F{FP|uXNhW`Je*Udr&g4IV{6^l0Oa>E=I_ju`$hnqK
z(+frC@DFFQA~wUkK4MU%?KL6d&AQT24kESJgcUYSroF~2+%OsyVLM(k$xmC&cfGzL
zvJ&4eC0bVO{_U$`$0JtUWh_%n0w!3Pr!+Xp%cr@wD>*rSx}U)H*UM)kuekF}e7uPY
z2^xcq6R^_!+TBtnnalW2yScHhCY|>2Ml#~pT+^k(3TCU+ml$-$_P~8Q%Ub6x%KPo9
ze~X;A@($`UT-bf^Sal2Y+BNQ4)Ki*z2hs)wv5xotO(oDrUjF&H{EIUA)8k7r1-4MY
zu4hj2gLB+fb9Q&HTuftb4dt*QuZE6d(`Zeez6fGvaQ!rlX=MLjjnB()NFNn^ROlnj
zM_3<|_?U$MXXbKzgL_I6b!9p>o5Hi*S66?)!|NIm8Jk=9O`2Do%)5;Ed{zu69ue`L
zT6E;Hd(nKY(Ja;Zvve}Q8U2YtkJNl$D%?IuV9iK{9X8~zvYTzlaGL?=dus?X)#pRK
z`T7d%p_4C*$?VTsMK7UGvhS*=Q<a?ZjJ<@rhGugoKU^Bi#N^uezV29Il+7AWX)Dl#
zzF7!<@CFDcNfY_Ro}^SN;`(TEFAka@{K}Dg#3%5X67TA6ER3Xv+`ys0%SK7i_Zkki
zSH<4Qp7oZl6ehV3eud$szp(SIq2T?FR(XJU`%&WsIEjGYJ~inK#LmeI-r-^?9)Sew
zFBiYzIc!lAWlgH*n-lhQTcg4YsIfNneUiX&bIMfot~-?B0{iyr5;F6BMcM53YEzwr
z2Y69Vc<8ZCGOCdA)$JtfOWZ!{EY+rqDyVU#C^Wy?OpWrs;=Y8&S}W6G$4XRGnME5J
zqmd-ilcq_UsBNzft2-ii!x+@xVs1}Vn|!dk)&|m6a|u?rSF1}jLvj~0Ez(|HuDMVw
zzKwv$RBThUIuxry81+~<CBbq9QHS5wO4Y;gW~nA7IcaNqt$^eGnk<4_ZG5i4d>5w;
znV!j&Id)k)^n3tpl7mP0PnG}Xgf-Z_o%XS>Eve&Hxa6S2;OAOe{VC>ZdaAGtvmwOr
zaPYRaz#eX<tDJSrWX-jE$WPLNW7Sa{a02F-khg`LDo!ARi92YDsbn;c`Z03z$URI;
zE9e0pl)E3l_d&NcBQ%GR^0%r{^GAn^IUcU;M#7_Hy>6ivr$*gTo0?FX+zsvyqj#7$
zZBk#g6gs%Dv{mUP<yxdNO_8407|Q}1)MYSJcQ8?h+^JGDp-M1S)ZpYy%t>*JTEESk
z8;@{OobQ@PnO-)csXm!B4ZOq`NW#8ALV`al$;l?e;h7oD4M?NFI&xmc$PFVm2Ok-|
z@>y}|YOSSHld%x4AlPox({q(Eq+@6R5)RQDvN>GI7_<ZMwS~(W8{}X-Pp=Oq`oKxe
zB`X7B+{I<!&h@eq((Jm8DSxJiIk{Jt8m7r2`w-O#s+iIE<{eqlZw?kVxiYGzNnOg1
zvaY)F>=AyW95`d<hXo<$i<$FxYtys5pn!YUs>n@-`V}zj$+}~>kO(NIf}J-$tvNS&
z>@f7#J>-Qf_63_y29Dl0`7cj@wnr4zJPacfZzBIe42J)hdOBA@$=9?Eg%f&*QOy0*
z^Rg{j<2`VX*1a{}pUiK&*XoCt_`kFHwezTj4`TY1l=oyCj$qOTWI&lw7=kX<2k4cN
z@<t+l9oqQ$srbD5QZMNZE77$TNX4LhX+iL|zMWfhBHs(X$T#yzBfhQ6if@l)#ka&j
zUwm8Q{(Z9%)~tT-VEz5yNu~e)_4kECv;7@Tf3xSi><?e`CF#?9OVS6JW5iIaAX?u4
zAXEMortHXBP|xUVH}n*&jeMA!<Rde3^$9)Y(;hPRETB}$Rug2f^J@U|k1RkoWdZX3
zA^rfL@a1OYX(u_E+cSaA`*Zke#PWA?VPQ&X=S$i8gG&`|a|@r7!VSBY$+gK(xE_Uo
zr2R(T(tioJq?0eSk1H0=IjPfoVPkHlWTmO)C4-!iWUD#IHm`L*P9kU2;l?wkiUiMu
zlSZ26US1IUs<@JN8-+&H2sWQal4gU)!F>tRtV4)dx;n{&T+<@3-{Q`8fBZD41T}Sd
zay7@z@vhQY1BLHHS-9?{U8xh)dlZnUMWU1*=uT;TA67lLV0k$Sa`GY)(_&STTy1&{
zqdq^9+?0bySO4IGNf5VxA|G5ZUJQa`cl)?W22{bs@x%*UwxRI@`f=ZwCcPt+KU1HH
zqVy4sBVetai`C{3!WZLiMfr?m7{P7dArUUy9~v+o@(|&usdPE7#=zNv(bZ&QXx^i+
z<A}jH?_3JICp~L0zn8p+u=kRLy}XBySUZiL5^#_8B|X>#Z&0-vC1!y$e3KNa?N)c`
zBySQQrOZS6X|I{i51LMihWc~bZ@SZd=~Fyff9*FdvmXWR=9l8FCVIUe%}VK~v=^2s
zE-SL|Qo)KEB7C<r#Rwt6M+(c@;=fcj&0a9^SI~v8BZG<i^d;nanS8iriK{aXHr(NB
z1Zx&^86v*p_^ntUcNyu3CX(w^cm}no5eTT*z~>NCd-E@ePuh3osdC%Z2dwg&YVlK5
zhWsk&T;mt0jdPUIFFeT;g25=Vh?9Oy)9Eh%vCJLbaes2)s%sBe^*UnJ+x)8koL_aT
zs=m;#`kPeEGS>LHrpL?-Vz)u^9y3uq%hf~xKN$9B#%$)wjp5xvvm!$we+pL!MtSp?
zKVD_MndGVQv1K?8`fonfJG@Ffu+|vJSf@eYv4vp(bT0P3tvwr!-7(!7AabaX<pxIT
zkFPB^+MnFZ3xaEMoja8holl8B7{E)?!fazQ^(EJJKCF0~?=<DR*AG8Ygv!G`UQs_5
z^Ff@`g^lTMscGNr&FcEjm@c2h!*@IO&E_WKnGJ?=zNkBO&g|O2OSM&PGtR0TzSGar
zW_EbE9*GO}y{{`Hqgs6x4K2xU=OM-1?p&PL^j(UIGcR>jJA?5L89-ZH7s3KwC*SV(
zpX^`Y{p^=mh5nxZBvJIc)BgUQu*PKx`(vMfOZJ1Nt(mAc2V5(E(fF`S6}pl+5!-;3
z(Z}Oi!s<vfzBhaUP2jFgULb)G&RFQ`5syB20nZSr*&T^Hq(^TBxVp}Rot?0Y#?8wl
z_;bs|W$R>nsZ*iT&BSNn9IG>p$1_R;?~iYTInuLaI_2*q5WAQak+)ITQNa+yw_=B~
zWMniB?nxV&u9KOW-1?{czi8Al)1*btK@PApq^(~i0z&G%3f%x&0{>W9LM!e}sih_2
z7R|W@11Yvs;wY?FbvPZWOXK~<!Ol2@X|nvNtiM$hyw#nwzfVD1bv?@VnaBro9rr;c
zq$gjn;#|s$tX6Py!)_^t(3UR71nQFSuFwi<C<{5APs2*IJ{4?odE%+1dWv8oPPIma
z_G^l2nG1!3iQn?A`z(`x^uBROA54rPM%h(wAypi(-fUg6`!sd2v)YwcvdEUq<{Och
zZvfMwHve^n<%P7A-^hw@Q&!Buj38S>C(JO@(u35d8h+*1;G{Dfr*b>QJyZeZ3^Vti
z+N;fa!(}x#xD815$9Q6YR(|Hu?P&qyIDt1<hXvz{NwLHCj0h(;4)i5NbY?32ewjVm
zU4})IE|wom2z_~`%yhMDa4>-oPN%yL4>mXQMVE2m!rO=L+n00iB`~+4t@^tF(DPlP
z>=B5M$4eV7!9oSN9}y>rS5MFD-;FkI?zDo&!nW$~1=_055A@PsqB_aaN3a<Wbdrjs
z2FvYw;1^D6LOHK=RHv>g*82ia%NvYw>Xq^Og;NFijQarEWwTvI-SkcC`wPT2iRJFI
zUx!|Xvn$HcO9pjh&Mc^=!r|=v<$$_LV2XX-VqxRA1k2}th{LJ4>N51Js8&TuDl+{A
zAs`N>YX_Uu3iloot<%3VDb#sW#y$qHn|#XD`MZUxXSV9O4Sq;HT9ji}3n4&UprmU|
zQbHg$Fyaub+#Ro!dQ!6e!Bj^H$0^}-Qv^PvO)ln+b4%PW<4_KzUZ}m=Acz%Byd&tG
zSwH-ImF~V2W^$*Q=uCMrfj1QW7S|r!`_|bD25WD(tojxI_uu@Yzl2pg$(Nku#&ha)
zXHCjqvjOCOmM@CYBmAkrMI*^oOmk5<u`OooKy%`9Y(7X)5lyZKE2N-j{XVzsi=rbq
z(^fduK=&{B$)og{AR}JOYn0)b6_c4Fv8vH{r66%6iN_$OaxXM?H+rv;dnP7#8jmT)
zj@7IWl_puM#<hTwE_qk;>#kX=4MaiYJIT#B<B6Qd4J{pRnhnL%Y$!%<V|;5E9J1zV
zPEt}>qaM9NiPJeEAKxYxaQP~dtmd$}?9c6bLm8r3$MXOuVD)~f&_6xoq-g5P+;N)y
zc5UjclG=;cvM#MkInm|~u_L3Y`bpLDqOe*+gDn;p#8yU9vEs;>*udE08}<Wf+%o*`
zHgv(sJ<F(lJ{>91t*_xb#W--`9}VKCBt7<IJ)goOtnREJ7lFt$(cDa2)x0Oh&AH97
zh!!t49TRzVA~q18VCtE78dc`TlSFW6ufts%iXKjQae#f@U%3~9R9V6m#X8wHv*U1&
z?dpT+YOL63WjcSKE6-twW8UZNJkrn+u4&{YAX4>YF!2^cK{T%8;gE?{>#uopA~qM_
zs7sab)_^3TTqSv*)p8IUtsK=i_BW|sYf-ztr^=f38nO3N{>$*uwdHvnCcA&O{xi55
z>ATSAG6=+WDsQKVgD+xhlTW$wQ6yg(4Tj2%2e(r9TD%k`SA%UhhQsNFan4hhj&;{s
z*v#aFAz^CBV|zme1I!!Ns<q^%{C?@?)D~&F*|^oi$!e23kO_oUikU7JWmXH_vM_X;
z9@SU-kibN%k*cj~*PIvE1}AXNusULW&o;+cDgkc2(0p${*a$qNp>}w?)0g_>RkA_L
zKkk9M8>{7oZ;ALM`fS}yHV-_}g#MiL!(~nU8qHg<`HNI*suJc*_pSm}GJKBvTInIj
zcMj_XI-?)2S{+PW%qojLa%{VbmPCwTg(tAK@bG{-FxPf~&Ah+%Hqa`~kG}lpRwh%I
z>Fwm)jId*e2TV6ofnsNy65wgbpM(+yE|xwWVPF&zfVQ?Fci$zF&i(4LN<8|Ma?HJ(
z&(TrS$JD|WYJ^TWN15K>q?a`jbg$>s#U#_W=k~A}NVO<_*~R<^{|GJ}T*+vQp!4)~
zc-jcB3^#S-W1|caA%f41;DS^5Vk@kBFf<xmiayvLbTNc_Dk*4jzUHnwR011_$14;Y
zZZwBpNLTBKso=MbUx*bD2ver{k}Q>;ZVH7&aEPozBE-7s5NieGk7UTnfSrWqGr7-3
z+_ZRMS-^NvIzj>g7daW|=wBBM)?(>CJ4<hOG@j2c2%lNI=$k=y!Rs*6liX}L;op65
zQV%oSs?Zm0$lJ%dVd+pVL+Z_%-v;5Y3Ivz-^R_^x8T|pRt?Fl6yNK5C<*E{rQ()z%
zBXp!_l}v;EE{(Nay3kBs(`;R?ng$l;Mw}h20rp)eAu^+Sue-#IYVS<@B8hw>$(ch*
zEz1n|yXQ@JpShMUv`r`v=wXx74ZT(2F(P>5{dC#ZBcP=?zS_WqKn+@N@fE*$B*_!P
zonJ}5+%$WzgrNz?1)An@yDM=@e|QP+sMS^N4JMXQ<Xfr2E}h7V`0!}Bx3=oJNbt5*
z)dMzmu32bt<Q10V`09`_N%sQ0rwH5ml&2M9|ESod#0rxF-k-DSW?n2^vAO8vWg3iF
ztK1pGu^aE(wC|9{6Pxx8ig|4L8q1pI^bH(h?9}^2o?ymtFz#OSGIFW+!z}!aN7`-P
zcZslis`Num%9#pJT8@UAk4kq7H_yBcCI{zZ-cH+@1lh7~a}s4u3h`&2jI*ESd!hgB
zZZ780Kvg(s%X}X1VWJE&hjj{ehY8$LwwPb{zHG(^^D{cixWv!+kTN#ejJZQ$p2{Jf
zGnBRbK;{MR1!SScsZ?ZSbE;TRy!ydAFPr!b@-F5UetG1fZ}6sQv94i1T-HjAmMJ^P
zy!8p{98wr*Ik$+l+qmf1E);7ZdMF4Dx+d;trh`jY<8vVH^2qIg;7zlrG*eYgy6oQS
zz?+f4+G{u#V?TwXgMie5HftSOxmW%3pa1;mnYcxG-1Js_5&!o)<(&O-GejG+(2rR{
zXKl<pKgP_bDRqS()0EBgJz@;1dqF@d{Dx<M^ieDuIJ0w-g=Nx&CU(;m2GNV(8{dPe
zu?yrNrJMJVxXYJuDj;4}E~%-)eY>BgoiAMVUilOxOT6#H*FW<_qPHhQ?!K?~C+{ef
zFOQe0m+ocN>Xy-S+L)He2@Efo7`6{N?w33I6nKa8W$9(PlqB8-oOIZ*VSfz4eV^O7
zW*HFoQt2x47|m%3G2ZcnG_<CD0~!x)+82r)ZOa3b^9)RgYuv5WZB6^8)Jo*T>vJ96
zwe|RleKdV{2B>-Xfv6nh?M56ZrJYUjy#r=$kGqk0$JTgP(abmMhVO9<n#pfCE%lq2
z{2<X9EA{SXuCwh|)Bd^ue7S$T<HNC`*n4b)xaY6=5nQ>W?9QCMyPKC(eoT;lEv+sf
z+W>u-qGQX0&8-k=Z90aQXD9mWKtba~e}2GPEz=)%j*T?!3pAF1C5VQ=KRLUiEj%J%
zzUAj+T4h_fEa2_H*+ky>sH}T<<6v_r9PW0icFx%5ol9HE)#{%xarkccWte#90IL^a
zD1Hwc-yb`mamUzGc>$CHrneL6AzdFtz*554kj=$ovw4l?eSYTrGT6-V9O^Fh@j16P
z{?>loSRZ52%{&j+_<60pVfU<UBB@4>HQ^ae^j&{F7?|$t{uVJKTWxYz=P2P#y!8<F
zXOTc8J!w;X-+-AxK32wG-x}XnG;4T#^&!T`AdhRtSM?dNsig+r@q^RjHo*>Nu1}9!
z=_AB)=Xi_ZPSyTk^NTmL|6&r?(+T4McaM83OWDN0cBZEvPEZAI7)%P*$s*ePDk!Yy
zf)Yc(CK!WwqIpemT3=D$Ee0A)f_d62kk7MrFkI!<9|Cu*fc3aKfvd$ZLrpC*X|?!U
zLSNK5hRI8A;wjgM$qZMZ@l4$qhD2LN1(=7Elbdjz%sM_nZn#x7)iqujY1%&}wlcW%
z%s|uLD}#vzlF{OAeVX=8X?y_I(s?iU8Bz{504%nT;&-4fRbM{7Y0ja#4|gA7okEAC
z_Y17fkQ%rfY)&i9EPR_{+uJ4_AMmbMX+-V0oqfy`N{LoDgwNKdIngoG>SEu|`ZllO
zpcnI4Z5ger)_1APxY5Y>ZT{sxm|}o9q75hIgpG6axRylS-oD+ejU@4$c{rMEs9QOW
zQM-2qbYBs#>I8i6JF;VH4;K?*9dR5*Nx5KNNCZ$@%#Y4b^kSa?jO-p36m?=U*wlwx
z3uAL_A9$-Jo;@8<%|4tUbx>x0Se|-<+DD8`weGj*VXnp{w5S?6I>V85UX2yL+;8hM
z&K=~CYA4mT=JnG3m~}Q+ot9sb7Hf5zs;%r%XV}QkJ>K)Ax=s1j{V}gP>;72PP~EB?
zHBHJNFaENiGwUx4D<->~n*}5laWFDL?3Q1nvmM^83)kVOwCB2dhSz&tt@L9wId)zB
zsvnbESBLm9O*RkbJ9xoy_q!}k_wl8>^8nF(6>sWhZz*=uL8{ORe0kW2D3WM2Wq{LL
zARpgg@E<6lb3!@0SLJ9cSv%b~@7dlxQ3`TToZTqKp5YRt*4(i16tsp68Z`3Mv+hjw
z;{r0Wis2xNsx602pBaE(;g)J2V#%dK;T4D)`a4?EPLzoB*rwzrC(!K#x`H=eN6FyQ
zvyEh*d^!GZg()cW5?(``@x1pv(k0LT1W95nEuE2R2|ivj_PEA@V<$HjkNtkIc_axf
z7Uw6Xuk2&kmbQr6N^6?)7!tA>ot@byEQVA?#TkYaZ|mC`X2s0oM&nHtmeT=aEhk|(
zlI2D|C!(@gfvM~b7-m>3X*qG#fw8cp6R3dIw$IopjZ4Il7HgwvtdopXNtAaSUC*p-
zl5WE8w9C0PZaJt~J-kks4KQRU$Q)qHMgFT1i|l&ne)mV(QTmMDH^M1w{H8E#u=~{8
z;6&c)W14k;_X)ASqy+RcOA@@7xp^v@{F+{w*g^;);HUfqyb?(_!UuKm2P$sXwY)mO
zxfZf|RV?V@!V%*F!V8H}`dtmTsC4p&+2IA365;)V%?QU;*E12CD_d?Rk(qL=6Yh*F
z*d*LcWkTXTZ-IYv3AlBC=9T4<+q@2C2hCr&QA);j-gn~m_Xhv>Cwaf#3O_K`|DE9f
zp6vgg=Kp$rWu5+SyC46Q|9h7I+vfj1Nj@}1`Kl-MMUR04klcs5O2P4ywZKe1t)rKE
zj$R6lmeX*xk*%qkdalJ^cx-#kC;<a2Yq^i)ytFFse#|6PqosH@YW$qsOByl!E&Mxi
zMOEbdp}U?y*8k2kk&IrT7BtYJpg%p;^%(S7ixS{iE?yL>{c=Jh41X=o^1s>?y2i=)
z5$D$UB)T;6pFPKy9*?7_x@Jn@4{AefXI*-FR$zBe|EQ0c_mjrEvb@$9jl7zwFdFwt
z_kzz$ILG^Nia`bw{b<2S{=;yJJfSS_Gd+D}+6l$?e=ay~6;g0va@@zMKIqckL6ugC
zrB!vRZ@lYAu`8(sTck6%0Nb;_!KL(%a$@MoU1Po;Y`&k3Tw+7)?WvLY+yXQ`Ul-d#
zCH#{&`q<mO#`Z0H!UnG~V#eC~JT+XrYih9Blj6rTd+D1c-1j@6{_)f8<GUxX{aB(F
zHE8NEi7aNmxAp8lQd4Tk0x%rC()&&tXNtbdHBn}X`}AH*nI-gt7m$)|?ng)WH_*NZ
zsE^#RFu6W`b|8`}Tu}AyHRq(AmGQl(lva`!@47CS_#&vfQs^4*Y78c{bi}(Zv5&gN
zyQT#buMr~*oB6t$k%K%LgFPo@g8rkc$(Ky|NPO(l5wW85*?mTK+g4`&7cInoA8E1n
zY02jznGHtOyTKbTHJZSvt-Um_b~dI12<rV|ctc4Y>J$u3rn2;mZ1o+lG|?%)*R7$>
zpWA(i+R-k`wqtl$=k4@Q@r$zY($FK^nZ^@*OH_Ki>~?-_xu5YB@XpUmU#5e2%uOsQ
zd9qQl`w*bU4%h5#*MmViozr?JPikg6+s1a5J=Qb;R@e-hgDOVwGhPg2J9;=OaHvRp
zHH3$8Hat8BO`cM>va~<SaeQp@up^GqzL$0HIA87^SI~v|Nwk*o@A#4=&7HxTHsjy%
z6XOQ;(GO9vkzPy9I38`)(eAyBg7atV+;JkUOp37hPqC-Hl@t(k(a^7RuP2~gHYYUI
z^zSuG#j86+6{S#db+LQLQR<&eNRwNAWA6G|k|*KubG3U$M?S8cC|uEhK0h<-k=5p6
zG`Nvf#=_5%b1-oY3v@myp~^c#K1LwW=PtH-I9V!3^i)#;kI|D5t@<DuobUm@;LWaf
zRNNdptog-uRCCd?uL1xNmnB7v(Qw&X)WD;n!_jcM=?^|&EhQa57{+?b);{ujowy#1
z^S04Fzu)n$|H8iyQ*SB$<xVjg;QeX(K7&l+FOlFQm@dmsD)9t;<?GO3;yHc6`I>L0
zYIW~ejldmBt6nipO7zkK4RMFuFhelt0T5Y>>i}EG?R-t@7QVdE%qr9KD=xjOj=%hu
zQNA9-x3`R0wDW4_+pI_|n(JwlWD2!V$ZetoLGAr+qJXzoOE;5LB6KwhKI!&q=@!-q
z9My0x=RUCe10$hrR9;#-Q!T+si`56zl8neZg*f+~`#4)Yd@iON>*v^|dB6E>_g?2W
zyWU_hR_e90+w$)>+4B~2*uv4Eq~7;tvuK{+FPhlb%JCPgScT3zLh5b>y`^<~+M<X`
z6TwF)^HFX-kZnucf3gMk&j~q*6%XA&3=>*8a+?5iD%j=Cgra@CWVaxVTv)cflYl^>
z5I>0{)7149(J|MLiq-S(JCNXv?P>;Ao&0#22sE<ly*|<5T@ifjMyl3wz}7K7J$5YD
zMGc7#MepsTzQr!7)tJ{xe{HsbukcZq9FMQ8i$|?g_uXH<Z>YJDZC_pbIz4J7Y$|Y{
zC!V#ou8b79Row^Lpvo~TF7#^-zjqvgJ1Nd+^2@0{$_>HB1xQm4%E-{TEm!J3qH^Oa
zw97e%v)OaXwabxRv+*>2*(-hIXHkI<-6;e(t_<KBxiT0(jqY2XGKyyG5wZ!>d*D$g
zqIHiZN!+Buri(noy!N?G!x96WgxN{a53%J=jpCsDlCm%*olIiA`#l6hS}PC6^`L_G
zKOt2y=?wWMJ(Waa02$CSaLWUk7X0Ia&EqJhT~NB{&wu2KduFHmzg@rOxW>?Td$l@M
z;Gd>=ozMyT2La+4L&7>vk<Zm@Z?`)sY>`^oOo@z(-LijLGA{N8QD07Upz|CUbMBNA
z1yAq64}E{gp`1JKzyE{z%((M@TmhBO3WUBp@4u2j<&}opAz;?}4fN8-LTbnGu&dN0
zbN$WgwfXf=@$2WNQzu?bKkAD4^`B!BqGi*vr<l4Tuy%Hy)a3s6Z;}2m;wrjU9AS<3
z7612x**1KZAI|&^ChU#ozuf%f@dy7sgPKx~Vl$=#5Bo~0{TWB@k}?kkD>G2$wnItw
z@!B^5U#fbN@?3-sl4c||*D(&<Gx;$l!{6(+#$z%DSw-$;e>Zz@BYwMe1WcjKbUb6%
zktp%0YT4K%J~=c~b-AkUDc@!4A3^=*q66{|MRTovw8gd-qOb021Zb^1JNd1)wU=zX
zxqDLNt|zpjp8Ps2{sVzpF8S#p@?f)Em!}5(ets#&!4pc!QXs)|sw7-^>NJ^lO)^V>
zl0=NyhDce&SIDe)R*{}ADw|sh>Fn5Gs9Pl_nG&fJ@W{-`v^xs5ItL}EP8A(<kTG(z
zPwgp=N2v`q?jKjrHU;yxteM@Z;-|9d)*gmrNpbp9@*Vcmd@uID-H7&?zN2DHez>?c
zRCm_IuIZlpo9*;S@>bE3OF1tpp;){4kr}4r#z}@tIVl|3q>7r!67eZp-K~`I-VjSz
z9Fd0I7cSE#oG%K5Bv~cC&8q2(8kcZn@mG_9Wn72Oh#xFA<kmq+g?kiRW;qRSK1F4?
zb5+dZ=?;EbQ&!Eft5q$_Qt^@Me!<(U>`APqAR|QwmtIh`r@8=VueCrgfdR<X#mGge
zD@!9|t{fISE90d;It!t()2vCWI{OTFc|oIUO|WK5dhGEszFGB7U$+Id^~BWFl3HGO
z!%6)B>M^|=tdHcpl1TFV!&VBP+{2{c)*LdSaM<an$BY=*H+cd+>DL8#d>A_f|JlWn
zWM-u)<gj;qsnI$~gqUWPf_Q`uxn~Vxoq3?FiK@9oS<a7s&3dkmEH;XAe=^#~JAS&w
zwB-0oz0E1)z^!&TWoIWjKFZf(A_1B_4m5Kx&a6x*HG=ASrL`&ik#p(LL4hJHvh;KN
zi%@H#tVt1I>umVrcRrgxo(LKG^!i;26Y{J2mO^mj5OujHnj~HL$*_l&w!vflglRT7
zR6%+1wZ|o6ii+lNY30WMMv$sbO)ZVYKMn*J$V+i;>dcbr<i8@%d3EWlyRd(9k^{?X
z(}itO2{*#j;-36PpehDWNn^|g*GrXcQo8W-2qrVW*xBIIbv227#-|HUCpvheoWSGw
zKiQ7cc_B${`h?S>RUI?F;Pf49+}3Y*BWq+sHSbWlPzQC$(WY}AOhR|K$C6f?9`YJ*
zBL3Eivxh@`1R#7d#AF}q`r1hiL~!Ydz;wDNrUs%K=NxEATU~Mh1MU+{Jj)a&U1KtZ
zag9b<Cp@F~T>kTqQqA~`d}~Iv48g6SGn88|YEwr!$&&F>bX2Vi-Y6j>n(WlD)@fK1
z(_>HLw0l@x;2qtz-0xnoIx{HFzLM)mr&}7a63;S;bmX<!zZWAcj&EZ$42`+3O@ZjC
zkxtx$m?Qkd#Jx7jF{A(!{{%Dhv$cBw%a+iG>>?R#K2lh2AJed&Ng|lEMK1L3^BeiU
zCksI&s&HSx%u*&7uWV-L@MvzI!WBg?1(VOr53hlFYB&>)g5ITPqzgZx69Al@24|Z$
zp?t<M|GB&+3#~ex$L8h_*QMHv8&MF!>>NjXyt=BfWsR3=EFvMpO3zHOo7#bzc%l&Q
z({ETzgrxpjClOWB&rlkyO))u$flQT9uiZU6EkiMq>oA7vTwvwz1CXu|DMP+Kk>>iF
zkzc-&qsT{}vlJ<g@7}3EhW0Z=xzYQ;%wQC8z;X{KHBmk&YUOGFE$QRJ{ys1>Xs!rj
z6ZfVb(6-j!Mef;D?d#;;aYw10jAM_Db;-S~T8rs`{+j<8JK6g-8z|`~_O$bM`Fk)a
zT~OfVoXG_(B}76ZokT7?BVBiDL3H>V!Niv+z|q*3;+=ts$#<evZv<~Vj3~6(i>Y(W
zqOyDWiCvyi7MwaAzW<`(`$ECuRonUu-;^9u2A75qYTWdkBbjxpF}Ud+*dNE*91#eh
zl2e7<QXITO*eDKm@KMJaqzuUiOk;NKPhS>r_ZY1+DZ(l4<lEyZe=a%F$2MZI(l|sk
zOgA}X71k{1pA1QyA|^P*p>yt_O#%;H@!ejvk7Er|!yqQfuc;j+C;QYTuPctkyNiQ2
z>K2fBLm@pIT-xr$-|2$n&q$qnYS$Ubb1S<Xwqfak{hi@$tGvGNJHPdo<k3fV!#%3Z
z-E^}Abzvog&+WOXlvfpIJnIYW;#%HrQw8|KYcf5kN!VSfUb2Zp+n>Cg)7^aiu=v$%
zv$Hdgn?HeK8?8%^$IT%~>AU@<)6hotS##-MGOwBs?k6=&4W{<FM;KIJrXVcee-nKc
z{BnA0hqO1PlrF`Zz<s``*B;Lj_9arceFw03H?k?8x=^<5Z;MZ8C-Y!ZF3#U^fA9=U
z=XKQgI&Zz#fHpejUW<SiX5IMz;>sNyEOjiWGJ7ogdfu^UC?k9vN{{uvuEmR0#*_cA
z0lDzQT)&ZFjX}CQb4celOXY1PN(pVf5RQGTr3we?P+9F?p`E!!2J2qtM8%M8>VjgS
z-l6X8Pxrw*M;qx{MA;0=xmVGOIXe@d<YC3V6FK%Qe*a$YHfk{L-7y8QQ?sZA+>wDR
z|AQ^nRA><8G=t%D%e`}8*zhFBIAKS_o-7#$hJHK_4E@-=`7w^Gil^?Ms)+rbUZ`;!
z?$CB=o%iq+R)O;4AF&-eo&Oa1M<TuHeo7m^%!BulAMQ&gg<ti<_5SZI{_mIkN`~;;
z6F;;2E8|zlZn1d73CruO7nVEC3Wm?2+NytFb738?3LbZWWo@z4>YsWeYN2(k^em3{
z;Nj8LT}`v+6g0L<sdha0sv9~NmUljs<L8FQxNoBpwi3Iz0h0od^k0Sh6e&IQ493qv
z*nPNnyipI;yLS?=lG9R?LkKPYrX+bm`IyO=TYo<Qt_*);Ws_+HsmUEieqAtFYZPh0
zp~xP1%RmNpzinz7&sjbzJ!oJ|9T8tk)kC+jPk(EZ<{oGBg)&*BZ)vx}u6riA#1ST$
z+Tj@$?nnPp2gkDuur=xlf%frXQ|U3;N?)|O9HbK4E@;?3-blvo-avnlxo!L$u}z)=
zw{k5)@)Utd0(1NLdew)t-au2+i8TZ^em3U+TInZ;;HQX*!&bX<HfsC%q1$MFceq#Z
zdjM$vh3X_Z7k>)m-YJyG!85ZwZTVroF1xh1E*m<-dYrw<duWpp5<r$1Rto5{u|LEf
zeI%2HsYG>YvbxMW<3RizV|%wdA%@OZj+vLb_iwO_ytMN%cmE=kl$X&JQPe{7yT;q-
zhp+K}&-CN(_rrC5_$T}>%v`LJhZS^{^z&p_+Sh727&4~=zY!s@J*Z1f#>9Wk$PE)&
zUP?RBrJM8ds(sh=s~dA(@ikvyoveDYaaeLArqO{-GBrx^Xn1O<Q}yzUEy*=iPsZMi
zf7Bh5f3D1puc-^Gaexlut^;um*1DIYN(OlH(*o~Wm*kNOS&s>6(_?l10d}#HE+QKX
z1s5e)PVo?+#ezBZ7Yg);)urx3-CVhzT%M_-NBMJml^1$zD{L1Ul`nUvQ=ScNMQU<b
zJ_rt2&%j>w2=A!}=VDs0R8QC~H~pA&!17O_4$mKlW6L|a@{?S5KjWyb*O5vn`FG7s
zL;89I_km?xyQpW6J!SYmu<NL9&?3iKPc?*6J)JI3PgTz*IGfY`Igys?Ikf<l<#yD1
zrlQNe=*I1OiIr(K(TD{Q+xn@&8GlEDJ%NuGRz=v;g#uHZ;Jnsa9vVPrsf#yO&59By
z2gegL@_FQjE^?quzG|9Q&sMW~Mw5kl%_};5b>0dJbglHZ;Z-BO>9_})HOrC1#={NJ
zKO@fMo`(8Un_ZUl;%;d*CqQLh8){3*q3jXM&_wj-ROYWlt<)lDt$f{SG~n01N_vo0
zoexTT_wf&`*6wZpca#6SoZsyJOzR0g=Fl|Q+w}vDB42yD@(2#6q&SI)Ky)c+*RmNx
z&-CcB%{pCaB9O6<{~P!n#n3H1d!@B_UQ2|vlwZRayB@#npuayy*`;3(SGENckC;*u
za;2uylr2?l8qJnkl2_{Iy-WQYLEM&V<I72Uep^S*GNnd_D|ZGHlGdZ?ytbqdvZYSu
z3&Awg!-1yM&`O-H7n0IrSf^$SjpfT6tv1c&rE<(^EWdy~JIPH=2=4_t556woZbXv|
ze<MQ{iSkt0_&X@#kaGx|5o6J`BUQBFQv2-ZyNt6gedO{>N(&~Yhpp~BUaDZ7w_m#w
zs}_!lmyp4Z;P-sh##eLg=J{aaFAAjkuq948C0M=`>c4@5dGK?!Y<ILCiQ{w{Q(wjC
zzzz!$WA!6@{_;G2jn%rEnAJBfL-ocj-bj;JpmGlhM&<$#{A+2zJC-EHFB6vJ#g8XG
z65m@9Oq@oE;7u=+PIws4P!i@V1S+UZdc<STmMCIKF!2Xlh|@XLREjGJCQ!gBQ~D{B
zsSpc8GHHFzT|C3rk21yOwZd%E>9@hPb0jn0uQLF{*W+zwTr)cia-6KhG>Ho_nrJ+c
z*68eynU-1lrlS|}%~z=LaQ+_>OVNuGy6P3F1L+ZedWP@4l;`_tzR460CiKXMcL7yH
zzv_maNBaQhbrj4%tXXdRdk^Dl{xH~++mU!bUfri)Awjo=4{fA4RpGpB5?a;Ei^p8f
zdz=}a;!&5dcxUY$d%S!Z)$5m9xW8c(<A-9BAXVP`nts_i7BSGe<TubZ478%%W9X+*
zC9*`f$sA2uM7Zl8$zR~^Ak8p$c4Pgr8pPZhHKEuY$ZaKFOfmWi6fsBCB}bv>lJubc
zWtf4xkFH|3q8AF7yepn&A|GOX&VcP<&Eaq&GW+}Vh)b2{7Ul6__`HGP&C1!G(Gv&{
zTQw*!-QH8_<Lx5R*q)w7W8P8xr#|;Q47y^Dm@@lInbjSmo^2<eYTICHGuPb=w*Q^l
zY%d#s;XRRQH`AxLOrPcnuYOHhmf!ZGr$2eiOi7{jX3*Mum>}PtzL)R~CRH?6&l<t+
zu*T0v;{VzjY;LxB8kHx(xBGGmF*QBndy1H03x$Kt-?!N=RICi<$#I6h&$c<h@CO+h
z6^9y!s(M~MwYj!GNiG@8Q(~LGkKx;U`69cVyufdcm9c)vUz@}%>+1A|_ezDisMpF_
zM8eW1<vUAGlogYV7Yr0j^4ZoOuft@)R%1$8u`Z{eeEEh1SY^x8!u2_vN^e-Jx-lfk
zJG9E;MbWMoadRdml1?Bhz+?TfwqNN6hhM?-&%+;Jtp{tXUJ^rID>eRf!nR1N=<5^n
zj}#JRvz2!cc{wH-N?J7aquH4|B~7GdwkEffwGdL99i~P5?fTzAuA5Ynu3yLh)%_`B
zUHo8wG8<w@TPteS@=&Ih^ymvOkm-O7H}C+1!!c{~UBKl#PQ$VVOZ?{bt3MX#^XA%u
zh`WA4lZXkE$&1jVj8W*ic;r8I=24!JZ}ie`xABKJ>P|KpVOiJ@T%C$=Qq~Au&gS`&
zKHVq9I0HSKy*Wl`GUbsEZJsU}2%ocN+N&GqH}O`<Zr-avbznM}9`s{wL1};s{eIS^
zdB4{0`yH9Sa|zIQ^wm6=a}&%D%IlK5%vE`}_3xjc&<-{qLc&xgLxqn--j>!%_27yv
zq`i=P0#`veN2#rPHP~#t-k3Q?{tB53A>3PTQ$0^>-Ouz7J;TYQ;u7TN57JLLm%v24
z`JzGCTwPTXh#g&*{=pV0S8o3OC*3Pr!9xYMJq~`PA2+s{%L|%#t%QFC?(beGk|Uhv
z0HtLfzJ*9mDT9f>ac|xF61@0%l^k^MZ5dyJh=!5n)|nuT62k`!4<~(=KS9Ucfpv^-
zKZmXVyfCeRSR3R(&u$r68ewF1gXyFbz8g%P?h$Auw-Q_QOV}*iqD5hrBgb{_nRkD{
z6+Sar_v@K?wdGXZQr1L~VB%*)>4?o>jB#2AT96|(ti_<t7DHMb{;sZr9faIgbm91e
zBh$HDa-<5?IB0n-beEc0p{^7NjOddjk(eid+_9H(jtA1LH`!T)Qxk-W4(CKZDxS)x
zMa5rpkXy^GCQy;f$qCy4VwI!&stFQ>liPdhQv`oeoC5`_jYo_5534G<T*~0d&BSr6
z_bXK>A~byoCTcR&OLltLs$~8$I#g6!Ed+&A$&YZ==g;GDROY1m8v7_t73J6|T6T$$
zr4VFchr%tYEEf|<^r!k4Gbj2B4!30EUM&?ihkeXj2Wc5T_CqJ<5hTGb19Yr0ITK|&
z2{7XhImF2_Ab=fc(z{5FrlyC)s+K4xjqbE<n(r?ETj|S4*YA3M&AX%cuct8Wk%?_}
zEGl^>lzKu_FmeyKBc(39SvUlysn)vmy_Wjf5itYPU7R6xqu^F6GKBjfdC~RN6Qs<Y
zhIN}dnY7^2a7l|*mAGR*-Vd>7f$|H9`AK`tLiQyNN?zTQo$e%GmHdn)I*JPOvLsl@
zM({)ba`ElrHXy@#wFefL8giC0$e@A%G=nUuI}JON37Q8aQxj#`8JLXh)Ob9{Gw{3W
zV)G{C8QcohHBnu|R}G=)n7Jj_bbu8lnp;|GRZFm)qiDokyXOPL+k$Gt&l6Z=XflG0
zk{2~%WEiGnnPK-PdX(710Ruw-wcPi=ru%O`v&}NIK~Ev_T4uIB*!)X+Y?+ypzHkc@
z=|1rrpP4BTTBgO$rw6L&XF9HnDz2H7$IS|-!<OvXEBUQGO5S;n_lWRvhqb?WN&)KZ
zPz~Ah91Xk3ZS~W%nquuU@)<ckO;|{q48QU-OjiaIlO~4#RQOX^&M*Br>(l-DIw~Eb
zJT7v-YihCQzy6Tay#~s<Bm5RrQMP-J(N-`q3;ntK1=77A@s;H#>ABM#f8lahUT2N%
zDpAE(C*RY87NVlsbhJ!Dax-IQL?SPc-pl}cGc+J*Dcrvr4fI6R7+l2ZW#rRif5`ow
zBo@Z-vAU{`*bb~77N}mM0C0aqEtc@b1&D@b-{Xf~6u1SZ3De>lcRT?U8&|TA?+fNb
z@v{DI>o7KHJpb(e*ES^e45$~G%0MmbbOO=jy%qzca6EJ=H?FXaNQ`GzGULjO94kM{
z*a3d|dW1`}b|gy4>irG*JRj}P7iUc0(u)~jbYdK{=J=_~7@`CLzV<(qQ9k`;?puii
zFj5%C!-jo}u&0fk9K3BcmsD<R{Sr@}PbiKgUl_Sra$>9aixV7bmqJuWv&&HuwFige
za=<umJqz8>4Rgxs1KcBR9H2`r&4(dFz@{$Igd2&B7SY8+@RdHp50k{aimz!X;(eg(
zsXoebPKo`}n~h(|om1ZTuvEJ5So*nzK&Dt0K{r}rXv(C~0`#*Bm%XB&g$f#KxzNwh
zk&T&144ql52s$INiOx*Q(NCs7-_TPHJ^__dDAPTkfYiSR3cK(9)%MQ_U>W*eZkzA$
z(^@rjI+P*4Jb>m!6=XZPMCH)Tg#+HzU=H(m@cBCc|G7-XGyJE{?}Mhj_xy!3X=)j3
z!wtRX?-)NrZvF-l^Xd8fZ2t52zi5gM%zyr9(kvjd-4p+TJ^tEH`%kCuGE<JF5Aky1
zFJ(W?EK8ha1&}XnP#z9c9OnVV38+_ONs`;o$vC9^k)i_ceQcnx1J`ZqkIbhW({^^S
z`O2=`>DlPIKqgJCzp6VhxO&n5bayjm_ewU)9WI^VJ^MvqA=u8=4$eC7G-n-LwJeqL
zj9@7}(fz}gA=&r3aUHy;r~j$IYr1;Bk9UNned7jj=Wwgh$zz&%pTVUl<lvo@XdKUl
z#vLM3bi@yvdx-8QjfR6aw@{a)4UIQDzU0=r<Qwki{>&0^qgeu?G&p>xe8tRO7I@CN
zcoj;nw!*$6lFvk|b_I>^tj=Gh#+PVmen<OfG#~is$GWL@3{&0wyoqC%;-qlofaUp3
zoOM7NWJeprU^Y5|ot=XnKx6b4Rp>~y(+DngPOm(q@f|UmzRb4w6I0PV#!+-}Qdrxs
z2YtcCc&)&gKV=DwWx&3#atdlY??`t3PU>$>s_cilzy{lzt_{r<F|;B~gyfwBO)~>t
zv&mq(o!KRHihHzD+F=igY!zvU60w+wwg|T~CG33x*~B}Y|F{koSt0E4e#H{t3(^5^
z6$h@|GJBYw;JNt`96s?gSBnZrQlAAvW*N;Qn7w6ZaqLR;<!t36=?UHOuET;0o&=21
z<gU6T__gDooLa8(3i;aXtom2Ky1>5>{o(4|)^80nzv!uS954+_o`xs+=H-dYHU<Yf
zn{50=uM=K9HFyzm4Xwm?um<duU--u&d)k7HID*|3|JTmsMh>RaV;6Dka70E(=z)Jj
z`Xz_lBos^!2}G-QU$afx4b7BQ;kOr>jf#8Ey1bQK+=`X_V}2M>fqOEEn(-wBbctvt
zVN`Cc<MsaWKf8{FCh<(}f4pT@a;-RkG&7S@!7cKap+$DpMHlCe`4d(9lS^*jPJg<4
z@r*1YBzB{0lYkf`ue{9EdzS-O-!2Wr0&r`=NW6S6oia3BIczY-R9fw&d#l<M^9<SB
z7fQDvDrv*MjLtb#PW>|Bb1({GgLRj9x)rV#F7f)P!VR9DfwoO{!G+vyv#o{lqO+_r
z>Sh1;asPLv`CaFI;Q#LPe@9NT`P=+_neewv{5r47&-ad>KHtxu`Td6<Kc3$n?{k>*
zc<aBGW0V`-t2cD4n^<gl<*s<Ff1vVsnL`o=OXh|0A$p-a*nBJOSg(`^n-}qA{PsL@
zgiv@V+ZO0XhP%Z~5EL#cl2Exq-j~1%pX-TGODXKMw?aXH2}9O|VWn=z=W(lA^+D|H
z>`nN$>HdLl!bj3`is+p^u{vsvSob<(WcmjU$ha-za*`PwN+a{ifV<e}q4CabnLOJT
zBbUouj3{w)bXPn(2o@x(i)9TOA})7Kc`iB*PBta1eVK%o>cic;sM2VZIVr2=pRPB7
z<-SUp)5egy{B@mLGB0N&Pw2=R=Qh&MS~f~`RhM81owyXVGIBBOMs?#6?QQL6)hYeC
zqfFn;=Gn;p=>Mwn_strKF-DPnYHg~2H2Jn{N03)rDP9M`JjAcG2AlXb+k2J;9*U<N
z6QNAZfzl*B8;=dQm?G%RFc=m9n_Jm*YjsqFW=86?rzt^mzQ;z}<^yFN#H#!H)t|my
z`w5^tln4>6O2Otw!30fo2Z`Kc!u7hYH8tN!v@~X>jGEJ&fGX}2N6SYh8VYYY<LuD}
zo+&lryq0K2ZLA_=wheQC>Ib$qb8+gV5@vTQ)%wGyL}C`qK!ZX@z;u{u)BnMsPN(|3
z29FFj_cMD5f3p&RD!f8sw2RV0R(wW!$XhhU2;1FXULu7)vaEadeJp&ZX7VL>KvE^{
z<E8JzU%)W<TNHFHagQULiGds&YwA#r7HfT}PQF;19=5jg5KDJPSW6wRs~De0xbrRh
zw=coOP$a6keU1RuH?bG0Ic6{vWG&ROGEh6KNwzIBQ{oMI+U|tac8i%rd-<0`MItCV
z>Br5zb@%g?x+J#4egCNJlshOXgw$S>^!v;8A}%>>t51;)qA?8z6Gy`_Jh?PvPzlXg
z0V+s|eDc9%_`4sj&xMPW{tPwy{2xWX+!X5Ic?duTXN=~|pyLX%A)|a}MV@9}n65vw
z;|dP9yu-bBg;<WE#|AQFlv#J-C@gaeAW=4r6!$ul)9UV>)adKU!4jXR%!2hkY_#{O
z`uZR`Dns9(u?SXwLTN2O`crx(wd&X5S9+aW_#L@zWUH>RKdL;&4n#UBU7wPsOf@C%
zEPI?EEu9Mbn{eI5AjZnP;H5j~2{SJ9zK&D^5MqHryuXrQI31X0t`u^xCX-uh7=igc
zc7!@3!4z=)t7bhnOD4QU%|*Gm8cjZ6mr-LbkFnL5Y4yQ)3Oy$XW%>p!R5+>gxM)@O
zZUn1Rd5P=JE(Z5}ON&AF>OnMj_aHMUtvcE9;46h235+RY8MsTjZ_rWw!L&{%8i^OR
zT!ZdX>NUzl2&=@SFS1rX40M%oS%AT{yY{y#%$H{ldV3=2*N*gw(wmCpA*4cCxP)eW
zhNMsZ)g|TS`RL27M?qgOl<wwwqi8(x7@Vd%aGF-~3hMgRpR@=B*V_=maH&!Dk3WpG
z_>K_f3M(2&bhq<J3!GKA?VBHGVtY)C7-}oI*hBS0bt@vgatMBRk)q$mJ9ZSkzd**k
zaMOwftD<T4R||s8n>Yf<;s_85o5>Qc?7U2yT|+oASfxED81ontl^#83?$CmWz3dFK
zV^CQ^)wEe*%*!w{qZSSf!UHk21WQ5a+`~hY+_qQQ2Es8GlahB#(fyb`rkJ7bgEUH(
z^w6YVG45j+vxrOMXv(ao1=MdgeqF?haKw+?zur@1%61T-EUb<h-btW@f2_hPMI#0y
z7cA5_4GEA<^U4Yuzm2=2`v?@o4r`h>yr8j|5=smZ{|6J#>ojHxkF$yQ`-y+-k$AjK
ze85lqlM)*b!_`}$aWFNSu#vLDs97aWIm*G4PQU#M2WEup74CVT59>d5yIyxEri1+L
zoQs^?taA|qsUuVqU1OuimYeHh^1p?NOX3Vb$TKsLajcM?c;5uL$dufn7WmV*ra^xq
zs|GE@sc@y)raxV*vOm)dZ~&JsY;sbkNY=3P<{vDi3vYrRaJKs4bE~{#+|9EMu14bf
z@a;I93JlhMQ<T8Y!ITtfj3OmV6Y0^zPSe19l1B1fIZgNXcc>!lxtQHC!`m}S&8-@D
zgA<HeLC1`u$3B#MW$rKE+~1AQsY`hvDBFw1&l`s@Z>TF$mGSORZZgRHLTwu1k42kn
zX;JwiUS$?9H89)VNQGd9fw5V}d`;ZHSS;a=T3$?UNmC!18%hrtu}|>v?KruGCXx?K
zsBlj(I`7e=Pcl9^MI)^SAl4ZXmTm@5O<cUK*qvCeYh^x1;q5{$s6zMVfWf`GY_}C9
zaOH;c?0zR1qfzyx)Lm!v%%h(<(KIu1TOESrCex6eJBUvm*UGg;(P^9kX&@{C+>$c9
zG?>s+4~Y4&*zP*a1<t1J;X5@c({lQojN}crs{&3R3*87W7uKf3VQx3eApfQ=79qju
zTbdG_p$?p<k7-<T#^vis=ec)rpji^Ja!zn*C0Ay&WrpPUIjeRQ#$OKxmyR8SqUMNj
zOH~Wbf~t1Lwg_4ne4-@4+o2uvkI&z3=EFR^76ORNfOmnpZ9T3dGW;pD$n(DD^koge
zRNLIgns_m1HP5<T-_u1CsxreL*H##k$BgDxNT_U!fV~-6<50<a#y=q{fTqU_O>Att
zk<_167eeY!sr%irf*B&0stc*&Ql{HXb6-3AW`)n&wC8;WmmXp^FpR&&(Y@mB(ZId7
zFbnpW2MpMPH#SSqff}Z(q1gi85(7qi@S*KOE8!>>b#Og>y7z43+zOH~SYY&hf4*Bw
zqUwNsa%|h~{)!leTOdFNo6l$Z#3a(Azln+;Ucpi9&S3L+7*K8MDjGfVsxwuCwqIe#
zENHXEoYJTMY+Px9dw3NLI$qtt$;7D(6fwAlhzwDJ01Zw6HkU`hxu#!)mq{b*puvF4
z1#f(d{lAR&U3w-Npu_y~dYSvtKMiYC#fmhf=)UxuqKvEy^s><_i5BWjGIY!U?p~0m
zuH^K6E%a;El_geP8N1NoB|k*UD`sZZUhpcmXTTRmVk=@2;n`LJc7RkaqZ?J2?b~s8
z`Et0y0x)A4{ZscJ;ulCvKsjEWe8ImOd;op(-aDD~jK2951^mKUh3>{`1QlQ$v@NbD
zkKfV9jR^|l8TD7Id^VC}F6&+SSsO(ExwIQHX&L50v)bR%=Zo_D9PW9)#h%yYosU(S
zE+1GwJ;<cldb7iM%nm1*_y<ZmJERYO=?}?kBhCTeHGASsVXqVQVRnDvQy%^WUm-&<
zF+yWPA0#qBLxoqtP}ZB5NYp#T*nW|R)juMC=fe9`;U-qu!IamMj(Ow6!)w!%OY71O
zO7GsZ7cO;Aes_PjH-fF-LL+lJ0Ul{;qGbNe<Pm+|XK*QYH}F3EI^v2F-sh~^UPy!I
z9$657JIF`l=z^BByTdJ4?{})&W1H%Rx3?wc7>e~=5lN4!*omt+ExsKzjVE<fh@h<m
z$I(amYsWG@Y(NaOCk|2&4MsPy1iGV!;%@75=Atf{&)c5<BG!MFndP{f5vk4M<4#0*
z%_ix*a@jALw%{*qYQZjWUOiehv(mb|U$G2nA+6d4TUy*HDCE4$jM7f4`O{>wi3m##
z>Y!IfVrmkP^UlEzWsk<2+x^`AJf(wX&{lYn0FM^3g@WCikf6MYD16;-4tU?+r+TrS
z>W?ohH}*}{kIK#<Y(`kZdAl_k2)n0KebiSb%I>B42gm@TKIIdo6uDD=jw5@sr)5$t
zu5Ku{LVBb_LOPS;^=Dp3N-bgfB*FJh!{4$33y$NA#=R$>@s1)gvfQY)zoK;J1Rl+t
z6z@`nwAj6=^N$+99mGc25tX9TgD6-j=Wv@Jy9CxFuJlJ+F2N^#>fW*@^7T0H(Ax?}
z>$O6}PdFt7d9=`6oPN<zj^9OJobYWH-ZoN|$@L()qW;Vo$@dRLFl8adBU=U%9D2Yr
zHZ+dLd_neFR!N47Ff_{tFk*Pz6ustU@|jtt0u7GE(9<hq7VTb=QaLqx>#@3uV>7aw
z_VG?+tu<pkzo~wj?FIC}C&&m6wW6tE_#0j)Q$U1Y&TssEa~2aMQrZ2b7>qm3w8rG<
zjOl40N@B*fnXd|y_hFaz+&RynJw(duP$ys&8iV`JdlvOgq(Pfwe<psm$Sm|mj-Dos
zQ$8){p;<6d0Mm1K-Hv`~50KAnA1#KjB*xM?6f&uMlSR2jqC2GCCfe7Zk4CRROj37a
zdbHY;k0XA$7-z5pWD#^U+iH9vzb303_)im7HGuN?PvcxAPkt5}=8MlM9#*hjc$SQQ
zvuBFR-#BH51)tecdbc9dxN|SE`u1;-raJ}y<^MifWy5Ry->3Ze`~BbD{_o#N_vZS6
zUG}%fG<v`C6aQjs>X~@6NnGb`@H5R&bzc~xw%2*1%<mfSbN=s1{CWe)*<=3}-%;Xy
z$IbaKIxqfiU)=<nrdPG|Zp}^6x#g3|T_WNVK|~*=<|8$5eSF`ycz-;7>WlRV-4_@B
z3~!m;9ai5MDULjbwSNJ-?<r#Dl*(H_rpCt<#E#=ciCTk$``Y)Ra5Lz?55*G<eQ7Gb
zcA9<29CF#}))&5yEzq?agO5-M1#W+Q2v6b-^nEAKTuHDv_NbVxQ8_+{x}wmX_4A?v
zJtG!nH+^k=LF3I12AeCw>XgyKs88NCQ0LTzsjDaHPKW%vIjL(MBa%-g9ew1XQY4a7
zJO5_c8+nCHrcakm*M67P_C!-G(hzynA2GtaDdP<x#mq<g+_H-FJT?o)hMK(_mzi!F
zED3xRF28Yn!y_i{SHG+Xa-<@LOWiG|6e&k?xdh%{&Q+Wff{9up#q)IK%~+KTEW`HY
zL`Id|<Qu`HuGa0Ra(BWps&8N!(^5`7PU>nEa;Pf=^H}CC*a+1tJ;GA}W#xKAf-QP;
ze>IE#Qqvg{+{L}!M-R!Hh(u>4*rs$5S7L;SqWGr}`d9ekJTY~3So3MmQ?IRDt{SFl
zRd=t+ucrCm(6V<Z=$oC-?=hdRiL0a{(^i`4WKHmAQ<r}1{;TQQ^U0@|0mwH!vdo`%
z`fBI>PEsr$1|rM-L|V6r^G#wCT|!lcSq>Lp@BD&sz{HTbC4ILUgGm=?O5E21!n|Pe
z9TE)Eyk>HMR~fK0Vz%=?fTYxb<gYZ80|~qNt4n%-<o)#-kdz7}-Y4`m)5#Bq<vQ8<
z-)`3wZULsh33a#fUr+nZ%v0h112FOT!cJ;_{^Ku~lvVOfsFN1=gtZ?UX`1&XW;6=u
z<*m~{_=xJ#C)lE?(nq=ZkZuCcbE1cLh!8!7M1b7qBWR90Hu53Ib%Hw;7M8W^LlT^O
zQ2|m7^H!|#g-9k!R-0+wa;8CZ#$&U)x3w_grlAFt=4F9l1+n?O)8<H<Sp22kC_ztC
zACq3To6C#TPS3vLH3Qqr&*gQrgm!fhbX??#qHsZz5rR71wr(7@A7k-G_%G%5HO$Ck
zejfL?WDxmO<{e6mk#H4X8_qrTwMOy+%2{^Qb!nbM%gm<#y3Cy*50qAVcCh)!eClb@
zVUg$DNP2pAgl*(N93&Vh3@Z}}E#^BCcl(Ghgd*{-e!&G2UXr_I9kOHds(1UMO)gZQ
z^Vw@o^Ksx<&ie~_cuWWV7jc-c1OCGCxIp4waJ*F}-mzE1d)oR36Qk99au+u&jN6v<
zz(`$sNZefON(iC{X*KxBkO=m9H)@l>6HS4t53j+0e`|6`ygeE(RJjN&xH!B2;riaa
z%tbaV_&OnE`;CTH3(T8Crw4D^H;OAfJEIWcz>N5#dfYj`<(xA$whSUHwz#8d9jK!d
zu=^<T3{;_F_u^ZzR8mM7SeqQiT}nd6x359U2uyZh<N3Al0mEP4X)nAX!&`4qzeVR5
zEuTwW?|^{bTXfJK#boi_TaMt&fyD;?o43&`WDTfI{-c^>`?ZWwLmP2453r~QowvIq
zziVZQQ4CG8L><2ixi+Gkx#s?1DDTatOLXJt1@{Xyz<a$Qb-$+Tzfuqj2`O2&k1sUG
z>ahzz$dLacFVBpH>Gc@V*HOzO3?aE)^XFDJTjU!^HD80ajw)zehO*(J?;MV4GQBjj
z?5;NIJMwq_5*9<Foj-Nw)tg7e@=z;t{~lf1<a3hmbK-C1v2hhWyqvYrI?vj+jSCmF
zkE<k*xh|3#7iu48xQm4zZ?3nE8%HL?Kx|xUTxt6_Ex_HlIPv|P<opd!;1&B5@NL4u
zW6ld%?3S!=lO1k7fvj(nXM`=a=`+U}cEk0KcI#Kn{c-}91G{K6?^~(E*=Y?nck~AV
zZdj|a^?2cQAv@j)<9Mw>?iSvOv`iT9o&u;1+gXOEZ&Yr~DDOSO!6Qs{8LRA<AOrS{
z6T;P8qiX&<@{THz5B$>=!8^pfq%_ZgDL0XGqIP7wW`@Hq`hdBA9Wbn{+Jd%$RC5NQ
zx64Y|t+-eHh6gQK3ej>BV<(S|g99%@m}3*EuSxnU*H@js5D3@;!#1y=Bk*bAW<`#R
zaG&AaswwzNOnjf_xX*2$F@TLt=ZP-57F<MwT(6WKv3xmsxGiA(eTr{Y@PL}n{3gSm
zMM5al_B0+!`AOgA#w2YTOG@$<`-R2Ar&EpL<+II)S$DK*EFpi8RcE?gb-FDx=Mg1M
zVtchRqY{Nv>wJ6HUM&+W<5YOAut#o*&P~3StzV7ic7_kr_eknI+>xC(EcTtuz5ll>
z;5*MRqqKb3mdYjBrkqQ%BQj@yA1sEukY1abiL9|o=VJ&(?73M;?%|_0d8TzsCQ;g*
zMQ-DGk@xm62Fc!Yrvmp6q-o#wthGz#xv=eUlvN#O3n#nejjjEdvzaC8tCOB*eKs~n
zw=>oWw2i}*tn)AsPA4ywV5Izr$&4;FY&AxBRpSTpP!E&lq`sjSY?50MAWxxd$@RV@
zsalfXVtVRUccrdI`>I3A9YeGV@|C(CNtMKrMuh2WWXiA8FO#UINR6b<EDgxsZ_36l
z2ghGr*8ZZnk=aka*y7Wt<ojg=)E@ndBqx-5Er#_c1WZOMA&@ea(rQ8@#bRd-28s>J
zAfVR!Du6c#gIQQ;2bYpFm>9{_tI+ASsgoZS3XI&mQa{>e$G+y>1~=`sfX2H{N{?eg
zR^x&?7=0FYa8$hOl$c8-3KeIgO`)_$u;pB_<1uHJ&p4bxhcJMQB+o2wFT7D5OGg5{
zxmCf$6+3re4Y$B;La8O3TgK8V4Z|SrU8K+Mj*ne<QgBhLm<MljVdT3X-HFeo!pl!5
zZ}K%aF<*YZcrJ@H_Ilst$DYGOQnQ6-iJQnMskK3Bl!mAjD(?Q$-JBdK$TUv#-lV%a
zf;I}HMv(2+arP)01;Hx+D7w_Gx=G3kWEgJ(fI#SylEs}-!<zTH(ctxL<9;-8d2QTG
z8_S9$T8Ri@CnfH*J-p)5yp5HLJIkjt{nRHu<376ps^NnHwNSHoI5$vsxQ`GI3yc)R
z4h4mIB`t9o$wCoL!3BH^$1p`%-KF(96;Sj9q93DjV7x*<oyTW|ioEp-_y(h|Wk7s`
z3T|NH1mia`c5wdD`G#RgAldZZ3`yR#U>?1A(l(0c@uaT;Tq6l@A|CEpk2k`o_-6Az
ziGW5!tT=fK9v~mjcCOnU_W?^p-a?T05S0kr{PY6zdZ`FyM~OHZ)HS}?8<&}9-J@&P
z`)%HvfQvD-jHMuc?}dE^^KNka9qEf5vgf$d^kYa_`dgsh%@_{9PK3Il|HAUN7~hBf
zBf|E**tz(h?S;P}y})~$I0INZYoPbzf16#2ptq4UT-2IH(5*s+34v_UJc{A7*p4@g
zt-ErLMdCpM&oZqBLfyvu)KmA{(&#?PILwTgu0VZ9WQD8TW<s3LFuT;0O<m$Eykzb3
zmATmHnu`LOt_A{;_?4vr?>LP|6P+DlDKXyB^uufeya5E=#b>dv8g#tXrkrAa*LYF?
z_d@^o`~2pX$N%+L#-7Mt3Pw=E#i_<VK-TEGbOodAb>wh?b{ECxU$7=$f5Y`)B<p02
z<NMo7)s&lXxgWOszjKZ4WjQibo(OqwSt${<$$x9}$CAzIlz8dD<po4@e;(8xC`j8S
z(L7~)3~Smz9w9o#!Q*@2-OfW6s&#e=jjc_(&+4QSrqZmW6#E=flG-&d-A>`H+eq62
z;ZLCRc{hA!e{+0)WP5E1{pecdBFoPY#5*`ZE$qW1QOgj03erv=qi}ovbylV??dJIY
z=*{uhAB(TPrsXI<A-O6WzcjvjR?Bw+enKYN#bCa@Z~XPY#aGX6`3|<wpTw4Y*rstd
z4oU8ecZB0zfumdF9Ubx38IhK7U(#6pZCY{9w0@+qirBP3F0GMr18#U5y?uA=kVsqj
zkOCubFRQ2!F@+C7t{QY<AN(~(lHtLeHV13ttpiNHRon3z;Py%GHYdkJ2DeP=o7~;{
zu02RruupAOYwYi9c&Q_d5Jckw&vU5C(nnrEjh}f`!^&6KFIrjH$Gm&UIZandtkX%d
z0tZI6#%r8_k0++Kpi{zu%F=;6I6JUk>}b=T;7g&#C$kBSohI|^$1s?M#10|*kbXVt
zPuCzJWEwE*k|}c4aq4Z44Jze_QGQsz*bxSmZ2!_VCEoWSMpLTRlsd@%@?hmlz0YOJ
zA3Z^>{)gp5-alYHrv1JDm-fr;D=~u6Wy8&^9&nfy-i%B$U;g~TvsHR^WLwsUWmJzv
z=dEApH;cV@jDXZ+5JURhmwSZqPv0XP@*e3CF88>xjr5QyU*Y|%N4V0vDHl%Flo<X}
zlI1t0CR~~ghfFw>4Of_OMK)Y%!j;)@*o4D=*f>fso~Yn#Sn+W*aFv6JSmRKbUn#cP
z*0lk%VC6xMhHJ0T(eNj@OfFjb3vP>ZQ*AxRBGaY@uUMtPW+%PSWp09l`zy#hD+^`H
zsQkB*-zn0euu{0ta0RbeNKzbJQ=;^lsxNrO8p0vvXaz?bh*;|+Yr;fUIH{F7DY8Or
z$vg>4Pjt|hjp&|hBDC_`i0w9_H5>7&jd&;<@sy3w#!^N6>nXT%V(q(L*U(aPr`e-+
zJO0dlv}25vVr1zgRj~QA_v5ZG^-(5s_ssY2eTj`{_oY+7^AzHUzLK%HRSNW)Y{oTr
zTIbrSynmjBPzku;L#RX$8bTpVReT7UXU)S%phfrnFbkidKmSbl)U59fplx>?6hK=9
zpchH^0p#`ukf7KFfCPIx%&X=Ycr3|AeBVZ7X1mCpXd_y(ImViZxyU7&rxR_cp$BLx
zB{T{e7CaTb{IA>li+S+zuFr$dQv{gXir(;9YvV(<-K7ep=dQN^x<jE)&9zSt)YbWT
zP7LV@uTmdgrJn__z0<Prn)<WPhS#Rv@H&+O2O+2q!RuI6XbEa(Z+LP3gN5J9o!Pl>
zz0QCuM;s5@h{f3)ciV`C*@(1_Xv#*+F%jT@J~4#_F>T5$#40U8sSuiyPr<8-Dzfx6
z%+`m|m;Zc#PftT^JgQ>hNk4_sb2nLdxz~Osyebb4uaFO~&}YG`_6J#bEtR(n_|!r8
zU(J@@@JdtQAn<Ypub6SaVHjXnZ+MkLUr4DdyO=gR?4SmkdSY2NV*hLtkt4WmHX=uG
zuh@tj!98grxI~^0FdexiZlGEVFkbk3qpv;xIRLzp)R2YO6}Gx?Z+Kl|<11{(&r>Kp
zcZ-Err9ua%ukgX)Rqn&9{IlTo^Gmbv>bK~#;nmR_Ua$W2pzzu$c&#Jd(wAB5TJzSc
z5a22STm{+ns$rIaPHPriXW57x!JTF!7H4yeun{?e8)hObf6OjclX}vZ^V#(E_nCR{
zdYl0K(CH1Yhi!bNh1c&CO3&@E@M=-$;P7$|4zCIyUOc&a@b$~PI18`ye)8GyGHX!2
zfH8ss2cfSn!Rts>X!&7rZ~7_+V4MrCl)btg_Jc74u=QDR+-)Or1edlEIf9#GBXR_H
zxs7P@>&U{aUND<StR=BY7G?+Hhr_8MOJ4&`b#o{6hF77D58ICKX*BS1ExfiUbZ~f0
zIyk&4eRx%V7QCwdD+{mRE&ObFnKdXMUUMmMV0iTxxTdN;3$Bvh;Hm&zA;6WfP%Lr_
zG|to$o3h~AF~dZ(W+Ps+5jlc;+D0tS=6KvjWcXtiTnz%(e6m?^)mw0d4+O7ksUi!n
zDW<-;^}XSBu8nsrye24=p1ae+t6ZUj!>j(_@Cy6z3V#;7k_}mS?YZ@{;bqpKe0V)g
zfdj*<rdR;`n<}&bEA0)iN&r?4z$E_LVV`x4fzOug?4M>Mas)TRM&t-?n2pF0+@Uri
z!y&T(o7R)Q@YQOb(mBBTwc+YKcs)P>e%R0(UiaGgNw(v+E0mtwW#Khjp@YM#p$EM1
zZ<=#XXY^3Im0M<x59@fUfg{cr+}{PH=>LYU>!*1(Bt2|_Q}tSGU}p*XpUy(Q8~eqt
z|M;ZXE;+&;zS~)~uaDcO4`sNZnw}eSZ^r;kZ(=ka&HsVeDRrq!E843ondjUqH7I`b
z-BikzHG`0w$|?Sf5>g$cCYGZq$JTFhh%<zA;f<Y#_pk@VmsR7#s8b5#l_&Ck;qXn)
zsxB;3F&&tFSKJG5JN?Myn&d>3@>Yu}s~^=1q6TU&URRecyAikAk<=)2=B^{Nk*)dq
zHV!x<sey}}<R)GZ-5pI|V~%SI$;V|i4$(Q8!B+!YNOw0%Yfz9+3<Wt6M9HqRH)+64
zj#9Ve_x+&POF0zd&5?K9T|0MmCt72Jr14&N6(%&&Ksf0}&O6d`E8H(Lhhr`%pTQbl
z9m3)Fxc2C>k2Qlj^3Ba0uIHFF>c~x;H;dYg;bCM2v&x9PvlzD9dWt=8{>xBVjb!!@
zHO0w2PU<Y0q2|J!IEW}qY;L^Ji3d0>n$LnX9V94<o+Z5G-d62&UHPBZG(S`j`+9tS
zdH<OwNRN4;j#S83S9N#+H(++6e=CWYgAU#G`2kK7$DP5!*20mkY~`aG1lPZgEokJ;
ztw;&p@~#eb{@CiDBE<@pcHU_6b>oG=<WG;@Re5+p=kGuDer;`XbHqGeE2XD7HxJjP
zj!7M!cmB-H^V;Myk<_8ho5R6HZJgXJY7G~+1)DEGxrRpR*!@*UamBG}V=$o^HjZrW
z;Um7cA$Y4^>5T8aE_mxI^D#eot0XGDi^g$XxCL<W0nCS$xmy<pbqZKqml{^4r-M17
zAWw2td|#%Xebgh1miRvE`68_+U(VH|I&@s*{)~F?lijPH#*0Vp=|oA_M0qM`m_G*9
zP<-!6v7$K6JSOxuPkGrA6dnr=X6T6)<@Z7qorkZ<>*i04zZ<IB7`v|rzE9>A>B66Y
z^FIaWBdL<)%h2C9&;g%>o?jSh;bDe!1z1Hz!CNmjAM=C%J%SJ3V4TiRGp8B1t(6t>
zx9JJo@V3=)9=5-&HL=>ip(L)#9h%e(t|?qxsw3_d#C(eWbTmazhAhOH`p#&eBYjyP
zXs;C$3;s=C-=PC>NXFhJl^HD7B`;yxby3_9<iIi=GytI2&9N6(YGt()e2L>~ciufZ
zvjk8)Q+N+%s_u^z0SSgMy>b_SybF%D)h)k*Lj}fA;N6iOKM%;>e-iId65&-c+6+DE
z=yvTBCiD54gbj^nG;?RGYhrR!ICxuId}m-l8!%%U2H@vP&vG|^l{(OgG39a1)+mC^
zyT`SzZaM1vA-_!N7x<wP?`eMBJtz0q0djnIAUfc6s#DbiUg~^EW}y2H&p)8h%}#06
z(YNodMdj>P#JdK}8e6-}K70Q2qn+gbksEUQ18zJeoxo;%23~ViY97xJw-us$PS<Qw
zvBPVt*3Wnq63*qXt=iSNovm9mHM4MJE1vG(NY7fCt}!nlk8h8=ysCTntf#r7^V14r
zDY^iUF5Ml1bKuc({zv0lwR^^&od1utcL9&8I`_CIkU-Gr4vHETHEOJhq6Q0XBB(Pk
z1ABDPsHmy6ZCa4hqgJYk;sp)PM6(^H(yFbko|d+@wXJ$MY7wu5TY?^~;Jses1=-th
zwG{$Y^Zov7?U@X={myy5=bPtA_TKA$dDnYe?|RpZ%+9)`w}(L)D_td!N<Q-Fq5SLn
zs||=$5->^uYr=p?H1eoU2=qM?u8WxWH}B)v{P!d6=<L4}!!Tp(Q3LFu#+H9nIiH~$
zaGa@Y$3C6P?RCUh>9b9JFZOn<#pkQDWZVcmNgv<3=Z>|}&adhM`@>gQ$IUwrZF?E;
ztCJ1($nN3N^;`Uz82dus;_l(t+`OXn!RQT^zR0&e!71*Va?y@=PaOeVjX&cfhnst)
z{ZGHkrborzo$e5C-SUshyMod}2>UBNZGXkFv8<%AUSb<A<(1a>XC0+uV7keZ5Sc7j
z;Ae$Xjc>G-(;}!q)ylz!=rg$WL)(}l{V^$>M}`3mSWrZ*dxi8aT;H|=vd&G{GnDCF
z<Lxn&^scWv9SaB{DLw|IKT)q-kv5LkPONbrxn^&<V=ecWe8@^+yU)MBMjOfmxkF29
z++~b6KhC>Gj&pVKc6L&^`xxc0X+mL#_qZKvu|oh2n&vL@w}DPZ;7F4c>0SG_?L*D`
zIvF_w$d9*a%gtY*wP@P2#~YZsk?RKrAj6^)&Lh_kiD%ENi07ulf%I2hb&B)Il+twn
zjH|}aN?$)L(sumV7YHx8@_@%U2^vWc3~k*D6}q=;*>FA`_f@Rh+s^WO_PoBl?KJH9
z^f@7WeL1%yj}!hhE$X<EUS+Q=4}OTE+}3NuzZr(_zdj#sd_0WpYFsB%4X@id^O?lh
zu9Wvou<simgEVY;ne*t6=~>5UN^m*i^=SQE)~q>Yvw|(8<mVxL6I9|Z|ERQWd(50q
z-0L43oZa>ZycJ3K9&<3qFJ-f4WUO;!TTp=4rKg@mRWYx`dE}I2?gvAHe|)e_?Qmyc
zNzySe_rR3*mtcblYiB^9<;zUO)f=eqICsZ8YCzxXblSo{$IpOHd`9=X%l+!s#lahZ
zg32SD@~+;qDBDu{#y0U^fbSb#?dve}WwQrurbat|DleF60;0HjGUW%;!*3?BoL$^l
zNksd1L(*Nx#yZ*4D!7t2_7e1OWPZP4N_nuDb)Rpqe52;34(p!E1;Du*K8HDZ>_gTh
zi<dR|A!~Bn*l6dRq24Pj%4pZ-(!sDHT9&V1vBSdZet%my?{0e6aOb93Kxq3Z+?h6w
zm%K?F><G&R_Tu{`lX9i^muoaZ=r=Yp+41bG(ss5F+AeFqerTladt5?9bXi-A1gEbv
z|5|c4T|jB+{%WUV9~GPaj7zr4c}wNWKDmDXNcM~hfzpcI_~8kAIGHaio3`;*RHpm)
zZ`)W*-*s_8ZhZd_SUBE4{I}uR+fo0w?a@AOXvETAqTe>r@1)Q!_>Yq$l{@+N^{_UR
z%Tqb7I-6|f_se39(;qlfoh3C#cUBDZ)^(Te9r4a7Z#<{M$<%0tVq7$-B#AQ&4sCSS
z?A=|uf5e-NQ~s^3*I@wnC6Q!68CV7NRvds)Qro@ITha6KP6&7;*fyX#Wg<d?n!a1G
zug#5jE~4?wLJ`BeKaI5O@F{y<jH{iW_2(ePWUs)z$Od=lm;HU-14kV@lm=*wui{`0
z{ko_;dkz3`Nk>Ir((;+vJ!x~klw^8UX?N+!<GdC8SKAX9(|qb5kS}<P3V!t6e8H@}
z#*M9`8GyD&#5kM^LZke?KMum@?hRkL(DWDNK1xYXr>~$*u)}f#vaARCd;A=@=W$eN
z_+$D%lkXb7)BR2Ob0($Pwp?)?9ud-?4a5BrLD`BSjj3T3+$YHgT0tmz|0q09<;M42
zM)oHZn%i%0z=(qgD}wv<y}Y-SYcnF{yV=2Khj61ycGOxodm>j8a?lV5u0c2F3+#Aj
zr((|CIw#M1m-n3-hRb#g9|f0$#$TIc{ACRs%KTTqQ?Sz5;y=a*v#j&1lgnEVYrnQK
z(z@K_<+>#*^AE&HU*CTf_A8A^L;;_<*;6GFmj`Kz0WP&`UW^Z|y@k2x=8S6WMs_>l
z!lw1#TukZW*~zv3ceV)H*xYHufejEhXw$%E+A7E%8(k|G;=rIWQPJvh;a-FVz$V%k
z?S#E^%d=NB_$xP=;<%R&23J>8n}f)?iJkt4pW(h_azhC#=_kzp7QaeK`TCQ8=y6s;
zyKscLl7#vHzqkL_oBw}ozv~Y*?bp46v_D$h{^Xr%zdP9e=8gIGe{+m&|C;iA`|~%W
zr#DtJ^ka;gLGA$<&reWuNJsO$7$+-9C!On8`F}vgobqNcIYaR`(2QwXk<~dAZCEEB
z^}ug<FWjapd|YJd4lEPJ<!jYl{h64NaWyO_7RJy$cf*hWlph-<CR>JzW+!K23(%MV
z3R=GhP#QbQ<wD$`1<m#b4&)wh59CsHJ=o6Qqp0f7B{A$)_5W7iv)_^?XMDBsZ2yiw
zjkago=BOJFnzGtv7rJ5jo89}*MzOK6j29b$9|^oNDz6DavQXM-KiK{qe=$^xP6a1G
zhW&?*(NwJtlEbaNQ)~E~%5&i$zOvdPjE3@nSijo}s&%~=HU7T^1l$>kTGTE#B;o(i
zCY0)+UJFLfAGC3}dSZ<o-#5Q0JwmYp1J8(}73o#=T)vmb=_}K7>!C;6%+N<`Q__m)
zG)%VMzvi#oU?Mohx4|C(<Yi`P3`7t1+bO$m6r*`K9&i-@4jLAd)s;qOhkq(r+vk-?
z>yR6tX~IsLz{g1B=AOKhswmd~lgi9JX%u|khyLAKRopF>V@nY;%qKS@tIcbPv_|o~
zVDK>)HIePK?C4%McWu<a#ALs=i5mTueBNs-m3KaQAt)vB2^Y0o-cx8d_g|xih&{m|
zM1mK=!}-qoO?}%2f{~i6VRd$0eNbkP3iO4~5ySrJ{LlF)VU9i>QgEKJiC}$gjh(Ay
zwktG?h)vhmGoe+4Ri>H*zEPiGz;En=Peqrt-+5Q>FP+vQ;qxdxi<a?yHJwW9eS*sM
z6_tu)z+&R-9sbbVT(a4zn~t;Ky1Q!@(LJZ`o|<;^yf5#7r4>K<*5e5!X`L}vEX2L@
zp_38$v`c$&m8?UL)yZGz)|DTKOAfCj*mHj|N0-*(<|SE55#g0~ZZ>W7?71syd(xU+
z{oJ0k%pdjRRg<h=Pg<%7{iFa?E7Dy&deUq3#V-ub;j4ma>Pg>2n3!2K3f+^dRg`fu
zM5qputFVG!i#H&Z#!BB`CrvTqQ;o~{mxIc%P%P-y2>x-S^%_qQ4;R(mZt5}WPMl~K
z(=+Ki<6qQwvg%}YBct7FH^*^r6)2nI8&#~n{8C^^)_Nw&Gy-$KdK${u&Wj|n-^JEu
zrVbk5!}$d>invjMsg1PHJ2WCI#YDB*K0BUmgQ04ziR<vRH#0Qqug>nBi#?F;uf3|-
zHFq}X-UeK*XaW!+ezU^)F~@PS<z?ke&Q2+nZhZNX_+BDeq;GVQe44k+y-7(%AnRL=
z#g!Ydgl#DlsdK*ApkVbpoym8WOg@_E$(a6cr&kkIDMsJ5yf^4wM!V&D;c39BsJ<jd
zEoWpaw$irRNZYXXc?U+?j!0&&X2p+xca|^&hS2_$w?HH^iPixP-M7Vf)EhVcscdE6
zXr?Gvdg3}Cr(ccZZo$7FDV!gc0MXux#*f?HHz(a=+hZj#@D~$0E&FZg--R{qG!NCt
zA#2+9FUYs>%+d|N{HAonPRA@#b9IL_u+NanZCu&*78do&8N@i$s!>`ByHAOr;tOk<
z<RlaF+N?y?DQ~^n@5a1UefwIzEXl$2X^rch40}A0)3WhRK;An-t216#jjivfn{YQ2
z1@l(Z46p2To<~}6b^|)eiEZbe436T$xB1{8-I&tw7z^QsxaY^~KH}0h;E;Plrmip!
zG%-S-$n8o){Fl*4<CR9Gb*$3(VWwXm;mQ%-wd+t$@z4yEpAe4*wDR-Oo!70%MKO*3
z5Z&H<%+`nazuZ^a1>jawf%}z)5}e`GbIvTm!GVez;ImTFMq<KMRnCn^2$g0pY7j_g
z?qJ@jvZ2Je`2vhw)$U3_W+JeWF)l|09%|j~UFASh@FqRxlpLpAlG!Jv@12%w1HqRi
zrfPrbGJ8F6(o0lx58pgg50^br(@qI|P1|bX7uv6RCdi<)GQanHomG3XizrJBpSJ;8
zB{twG8?dMlaK8;uX*R{(CSbSy_gFSzHsD(iqGP!hEX3!z$>kpmHT(j%_8yJj&elVd
zmQgPAFQ5cWxUIR^$+kE*i8*pI{b_&O^R}AtHay&ZKbkMI)g*ek2Oq&tF}BxC8P%%v
zs+ykYKAIjT*53}q1T{>+LbN`?PE6JF^7j|O3%4HXJ&=&&zeNz(cAMoldq!o%e-@Ih
zg)k3IOCAL6SqFfcUUEE=#XSfQUPX1#Z_F1nDp$v$CYJ>3Xn~g18JDW>@5u)M4*38i
z|L&2S@yNkx3J}KR{K^V`Mf$K6tw@_@5&1DO9@ONjJ)1}oq=0<<-|Ku03*z@BS`ae}
z3!*n(_ug&`Vq$4wJ*-BhobWyX$nnjrZm^I${)+6HUl?!ku7e!q!NF8wy+|x1lh#PR
zp|WwWJ~^XX5DrgTB3uWU8Wg9e!H0tIl41xqYhnG~I)_kNgD-LJv|(5{p%wFb)PgmD
zy_<X3tO$+Q_ivT+A`^ALq97o1v|_Utfi}{e)FXjdq#49EoCySdI+-=l4;{0FMszuy
z@1kcDx)!#6Vhn}Q)LL>1qf{~nuA8%^8q{Sx6)~fRiJX)zz1N%EtQ&LU6Iij%jYr{t
zk6u-k#I{c<f#C1ZkjZ=m5NE3jdopf^8oS+i+%(Ppfaa3G05an1aNFs@9t#;|uRzGy
z;^w$}S*gJYdg|v-<KUS5kSHJ=i02)!fpE&TrtUV1re_b+Fu=De!eKPRd7a2ew3{T5
zO|b(qBiFdABE2)fh*z#{Yuww(1%<l0`W?TY-8#+2*_6p$LUi*~%Hh6sT#%0@UoKH$
z%5VEpb~1=w$Lw+mr+s2cqz&#jv7ehecOMc=)<)b4u3B`K82$%2ZVsTExmHb`cL*&#
z6;!C!|L{k=giXGS>Ecx#S;%XweJ;gvN*o(0>_rqQhF}l3v8~#<@%wy3H1g5k;#2dE
zvxd_&L6Ex?L7dg#7#nbs%8h^X`};!(Rzr;J`s84i_CMFZY?pbZlBc^x?_O8R#_qPa
zG-d`$kwncgk71TMOnF=q5k^&N-PEdG;GbIm%CoJMQI8>+bsaWSA%^JKH0A!;VMukD
ztJ;s6Tu)fu%SeOA6Jo~wX#obVD?%^(|Bg$Y!BPM+zD8<0)B8R9*CI~!OjcejeF+{|
zoenvA3Mou3ULz9naLpn>E{Q7>W3t84&@j9hg_n0mUT2aNs7z~($P5=BDF-P<hbGqW
zkA-G2_!Vb~*w7hL*pP3BA%o=R%rIn8A<fBQ$RNQv)`VQAlR5?SWSw9(B<CnYa%O`o
zud9LPtRK4YjO@4*rm-J<m=5-vG5n}WICqDoH_!256Q?&pa6apA3+*Xag%Kge`7@t}
zlvoRgpXjr|*K?xz95(#MSMPF2qzm12$oU+xY=`WR<Tn^}_*0YUn!m%f=Z;3gO|goF
z#w55DG(1knloJ^x&i4|^W?fziWy{n}&ud`Tf2oyHgt!3lxd*q;J1Ek&pVotuxwBFL
zGOwD~VI%XtN^eCkjC*=!u>%|1W%aa0Mk-YpuuEF%PljiYc~%n#JY3SlyTOh;l^%PE
zDV2bVU|^VkiYXA%Wm#+RFxa!KYnGAH%GO*QTGJ$ZrdBC$ii@9EzAATltY>PzoZ$dz
zD^8U1%POgD{=wPR@GMqt{5lHT%i(FtYr*_8TAiFP+RB}!mx1lA%xaMT_xKc=wdmEX
z&pb^TEg1n6znG#-67C1LUuq)fDb<@QBK<{Pf!b_<gqU_H6Y$-_LguzOdIjhi1MCfQ
z3C)Z&sTA9iR3j%H4HHSYYf9&(QZLSryW%5yIlzb5PVH+6f~*d7T32Bz6Jcw<YO3lx
zPei0So*lwD`lGbv*fu_uJq^+5X(v;|+=}O+8cs0B2G)UJI3Nn5dyW{mnb%BhnPq%&
z+f`|*5mf4AUIBl{M4i}l2KyOQ-HS~N12g{G3k0%f1H_}a33L*I0ks?c1j&%n{HNC%
z+-Q8%$j7l7-}h@_%^PM8F(>w|e__a~|6KWIG#nzr)1fd_7pK*o@9kyAtx{w7##sAK
zSKVMf$KLGXIr6EP>Uu6=NzW^=H#VZ?DRxgI{=;F!lZA+*o{B2st}x=BLd2Jz`nn=+
z3?s6Ih$Ei*h9bTfMqI9l0$}9DW&_*?9Dc=VM=Lr1bcWW^DmPp9pRaS7Y)@$o<p3A<
zUN*pWDPW?`O*&H3gG*?Ejf{mxn7i(dRd8q{v^lg9B6;V&giCJDJz;JDN_qF#n}Cey
z?5}%6BJ<?@J@sM(7Ex}G>Sn)evMeaQO-G=$d7N_c`*YcU$yjY>eTX+iXhp!@0yZ(6
zB71?xuQr0Kfm<d8OO@x($kqI+?+{i7T(uE%VqR)L15eW$KjrKJD=L<C(mMxQ`vkf%
zj*Gnz%U{HO_m0gRqOlioBmC9Eg2o3g;>IUO1TM77NM)x=^$r)GWPgT&ssx_cTBut3
z*0GXBXjXTxUc8r$S%*c49sLLZF>~K@-~mLe2E0l*nfo=;MR>BofZ0LejVdz25ZoRx
zEH5ZLhfz>4N)GWt9_<*ol)2y!A(B+d=Xpl0ZH6xRg*O`AL%rfi+s<l#{O6hpCo`JW
zmC9a<q_?Sc4{3;~!yKr*)+lug?83!xm3f@^PppJ-8}LMp_L?o-I+3QyuUJDNq&f_#
zE`;nIhEx_pK23_i6}S>c6?z=<Aiczi2Wbj9jwb&v3ZV`m=^_lwxo{{Z?mL5{I7_R;
z)m4N1Qod|S^5TkJC%qU)CF04=9WqwV7n2+b-o>RE)?e2%z%YS#F<N2(XHnaBqX&Zz
z5wC)xcHTjW4D+`F&@$X#+fNwHwja@2?)tpNS(4RQFYjf$tl7;yw3rV!_qfkv#2O-h
z#*25`JvNDV+nf3DJ8j5_HC|d+3%%OidU)xV?AN{atCxp=BH|TAcPS|Mc)x-UGy2+t
zV1Ua&)~11<B5Q@L<u+cY;r$e@@}`;aisB>({JZ|ga+1=dhMeR=#fp;@nh*mJtYSdy
zIEfaC8P_kIw>*CiZvF+E>(=+P(lA4y7z|Q?PqhD0ICo8+qQq4wc02=as9$Ap46gu{
z22AUU4aAb*S2Rit_pP@Q85~I~%mCxdwvJM1is-F=W4l;H4f>D_7YS~`p&q0w_N4rW
zYYAnH9v!)c1=jR0sIL5A4I)?4LA07uP!EF|i-_*AHx`Jl@#!bxPrZXg_vYiQ>I8w{
zE>?Ol6Y*hie;~hZzp61Adc|C`ZfO%P8LEXt<TWo`y5C-DY0I?=LKe}!ZZlvh$ignl
zjLTJAdMOYsXMAEDF?KrcBP7uM7F_kr3D%t#I7?DBElzwnv|C`fls_)aS<^{q@IjyC
ze7sBs+XDmnXX9)TA0${@#%Yu*+FIq`Sz?V;489ZMb3uS)lO<kLAziJ}{Ee9c_X>_|
zGU>z_)H0h@!6qp{QaEBs)l78KCki?!2z(Q+^}i?NFmYy0!x_1Wzf}_jo6ld!a;F^#
zGH6Ls-Y(sAxd*M$jIJPuIA_9l_<!aD&_G|68A91bg~(H8t>2-Nm{Ju2uK<$?sQJqx
zvJkp7()Xp^mBz*TPWIXi5z!6jr_U&T3P!dsnLSth^gqrLCsGO*GPlY<XN}fTE6!D+
z7HZNFG)ead*6O2duzqXk+5-vmPo@68V?s(;RB6$x^mEf1|Bh&E>wl!E{u_$xf3e5b
zuW|c*T!V?<5ji!r8af8MD&Dwt-r?jw#L&*v3>unXD<)U^C>NgmH}{O~;hpHQrH+Qg
zETWG$<FSc+;{1X-{>7fsYv0{QXnPD$3I4=Cqc>A76Z|6WEMA#fmjoFqSFRVzo?K!p
z_#G8!baqVE?4Vu}I9$X0`0EwIgi7Z*PZiz5KN)gyvf&M<Lzq*PHgh$6f`H-Aq%Q!&
zy?huKm1>l{Z-z?BFVT1j#%qIK&_hU#%P3eVP8Xr)LDI<_OsLxN4T=i()&~$s^K^JE
zskZT1?VoDiiUr`~2%+F8SDeU^@oo?ue1%o1TOEYjr91V8(|U6k<^d9yD3ar$z3^c-
z>mnr~1z{wiID=jK21O9mwyR515VK|&RPc*fW7L{FQSHDRqXaU5Nf|~`0q=r=r`NO;
zt9ouV%<R9EL0ZM46tp}G)dG;Mp8EOUoy0)G-YLK^7f#2^w8G5)cNk=6N!x)m2`lRj
zZf=29-eeaTs-4Ovz$#Li7ZH;5_L8WxWV^p?s+kMS&76!ZgM<*@fudU^X>>gmr<f#)
zS#4<jwR3dM(yi};BrWs%^X4IWo-@1Ge?DKCzgopg2V#N^_rXR_6;=2b7bpLIadJa}
zNp9E|lGiHv#Ny<q7AJp=kx}UlB-1uhRLS=uxdIKFl-+A@GR#V{g^yU9UPuPZ9J60f
z8c+mVGwF7M5kS|d48(Y$dZ*3~B11-b<_9*vj#sIwM<W|w-&H)GsgizGT22B9H?7k`
zUDdaS(loSTij=6-{`j3L%*kwqvRW0_J-o^J4Z6qyr}Ir#ti(!_Skz@T(V-Fz3XR1(
zcbJHtN7@cUm{W_8@L^jzd2w;lttL2W4meZHbS52q2y)!uCt`(ZTtblwcZCUZSPF_q
zFym!b+Z(59wH33KPlq99UQC)t!jM6>^0$NxvX#Meh)$;2(1PyL;U&R?3V@TB5%vC6
zR!SDZ3x4^L8i1fV1HGJ<5;w4|V7ss0tkZM1h=sZerr$T(*SAvM-=HOZdlj~cYUwau
zkGbCv1fhMR30(#+a}ilz%KOA@4>^<)+djM;HjTG%ZgznSLzL9Q#<$I%8{c*aO8p(n
zEsxd@N)e8#PB+x!AE%m8g)_;O%{(0s4ol|9f(^SR+?{NjaH7+3J-dNiIPjrCLKtit
zvg%)ZuEx`tepoWN3FL317Vq4|vYr>|J7ADsu^rp!WWGab(7y*P{W)LsZ^voH^v|@h
z6*K=Gadejr{t>507szf{Jvo;}5Q+Q&glxkANylTAx&^Q$UN;jyJGa1Iy@y+#JbXFM
zO&-Ot0NNSgv%h`$;W{w_cGRbE3_h3?o91!&LD=jrX^1wQ<aA6YlSah&4dWcf2HYf#
zxWeg}NH}cq9w3^rO2VL)n@s~ahkIk$0}S8OL~{WW90{(D^$Zv36HWCh4O=_`X2!X7
zC%5fk;0Z#j3^wt;Ft1^j%EHMUfGIf(&dD#hK;E9T-xRD~Pv;Cs1d&Yu!8I{f*K$M6
zxB)fcZAc)$b4OIK7E<nzwq~6HyU*U2;Jut;*L*86Ty4t+sFsITsQ)~^qTvQRnkXmS
z1zn(wjjy%6mhe8+y<RF$4xgb9wzO2%78Rc`6VWL10*V-jka*2X4BUoTGQ?N2%nU1I
z*kdHTF_GX*z!idv_Fg>h5BV1s@QpH4z;1cb)ksH^n~QCHw~Fw~c5E_`48f}nhEi6T
zdv69z%_AIJ$M=RLb2pT7Ig$VJ_Dx)(aDwu(-);yOiTtM~08p?AgA(F>3V{;Fv$N3*
zS#_15Fmv5uj7bmuU;yYL>sJ?xDv3{kVk#8_3~4C!Q&@{$2oo*PPk_=astRsXI$Roq
zQ`vv*$j7!Y8A>f4t9g<)v0C`k&<5FGWJ}j%qfJ!WOA?4!=0To`9CiVH)w=hJE~|=4
zGFQbASiOqMgm#~^O4j&U+Z%=3x6XZEY75_NCL5K-N4xDLCvlXojpPNWqs@g{AUBoH
zSg`5AkX1(7xN}{hn%6#0I03U8)JZV!{%=3g{P1SD5*v2bNg7(h`g(MiM{@~1RX5C-
zl!U!zTr{3ck_a-V79#!#n(&z3p2CP7C^i}^sqFnTsb!XPWtYW!PMuxOdM;!g>$xa=
zE)Jhv;d5>H><yn=!)JuqP`=9WSsgy>!)G*nHigfY@HvO4hE`3#`AdMXIR@^Z(L|SX
zbIS!L=9qDML%-WYBKpzO-fv!bt?SQqszYPDmIp)s=KhIcH9FT14$|nbNe?77D6y0#
zc^Gt2peC_rplCr-Uot)c0mjL2;eeHd^1HRotcNDMdmn<6X$qlL-K7oK3yT%JF9gSX
zz@y>>nN)Th=Dz37=q~`E(PJ4X9Mzv4vVB!$+e&B2HL+-Bpf#PnylJ^VEZtk8&AFkB
zMk;$Y<QgF{h65~N!Bno|M;zY3Hf=;KJJxw*ggX?jgkG1tf<ENHn71|BId)3t-K7R4
z<EJsz_?|Vkz~|fxZu;u-lB-sF{e2(Ix7Z5!U=#SI_cjl}8fpX#D0^$_o&lWmu#87s
zbn=Qd(EOAxsG)1LOc*J@?9gr<Aee56v>jf6>6YM9DNF(D76CEr#e4o=J{DM$(9e7o
z+qV~$xGGx?r==y^z8<~wp>UPDQ(7oif!K04pQAlE)M;<w;XRrCs`P3z5r2egdr=jm
zxYo|o*GQIX?8o55;B_HZ6%ag*Hjhn`;33c)a!*Snxb#ix_~OQ69uR_Aq&Is$!AQ=d
z*tLpXGV)1K$v;fr?a=iwbfD@%4Deol)KFS#>zoA-2Dk-II$yTLi#$>{n$=cz*zz^Z
z(|gG58Ke+I5!ww?KNF55IG2C1`2)7{)$gkE{=v$36;(bwkA3#0Zo__<Nh{jA|EdHY
zW~>=Zak3G9LQK>gj6g~X8KIG;#<06%d;eW`xmmE<boG}h>AhEreudXQn@+x?U1fvv
zoR0T-Pv+)9RHRIZi56YGbyNPbQSG|ocQg?Rz7MOV`TZ_16#Ptp<b9OzdUdnz|3XN!
z*EC79bst13Hov!v1rpDm9ZzK^xy}-MA%vDylR4e?aY?FVT_?1$Z&Y-T)|zI<5VvRL
zjXh504+l!Y2K#wh`I))Vd!%qG+j9BqW>e)qh)QJ-N`;t%MY)&wn`GlUCvygIEXUH3
ziH6dBTm4ixpMAeIwi?n$G$FC2JZ_P;O8g=<s)E{S?-zoEZT#uug#1}_1&z%l6Jj@C
z{qbS+pz`*}Fr<YHPG+juYUJs?2n|j$Jodj3Jlhs7YhlIsH=`z&?9N=WuC8{p{1TC5
zPok1oJ)6R(A?DK3so6NRRZ}H~?!H^ciEPA#P^}GffHBxb=E}H5O3qKqqgPKgbr&zo
zT>kkHX{){EJ<%$@%ueJl&J-IKCeD@ZI4#_mghn*DJ+Y|LX;aemu7;LA?~KGwdrOxy
zGFCm%wDez&xGjs$LWd!DG)T=yD<7(@%e5kVDHbJDbx}7`dE%QJ|Fu^fbRZk1dEc#8
zwq)-7+5y}Z-cZe36gGXtn}uy(Yxse^KDU6~ZZr$U3W0!?mz+P3L5)UQPlQcvQiT<M
zGwM2&sf-%ta&JJ?qwH>cquH;Q?%qo@F(D?8NShg|_IbFU-!qoJz8d~|o|box9c223
ziQ{yQxw!tVJoVGNZ(kLEF7d_&C#r<}G%hW?8(i%|E0mbstz_M^h@7T4^vI|mQWNem
zg*xdwwBQHf8v{cE@UL547)%exv~Il?B3z=|;4DcTh@6e@MCYd~Myy4+KHt=ssZlFj
z_<?q~=;fCm!N|!7D8J3Zea(i(m|_t5!%S+SJJfbj&97Iu-AA9J*T()U5DBc140$tQ
zOtVQQvJOL`Y|Tn5WynpdF!OLvmM+^p@CA4NdqW~y2i*B9OhDaQv#*YdCsi}sZQSYH
z_`Fir?c^p%*O|I}+R%%d7$}V^$QBw!nO&F(-os7>gXX=P%#A8dHokQE;e8GNtco<p
zId#yxjS+Sp8LMH9kgt8>R|i@-gSx<!qH$Getd>;WyKYH19<GA0Zp=g>8ih1Wp-Nz`
zb&RhBp2&FwfvvPegnh83`%obW$30nGBPMKIPGOi)Z-ujD!6-2q@oddcrApEb*`l;Y
zZbxK4En8t)_8MW?v*K<e+{@*^GjyNx`0k`*OMkC!nAT-WIXmM*zQ;AXjSrh4cW%52
zQP1Tl@=*xz9El*UItN-EjjPDf!<~-vlz>sx(f(d{0_8iILy?>ejK-PLCiNWW3Umn;
zIxhflQ6&e%4ckqqy-pioxO}80e1e4+=f<ZINJFK-^8(~hVbgDVc)MK--j<NN(CX33
z($9bXcxaA=GldC;)(~zia%3E3@Y~l|kGhq*i3N_Qg)Lne#=s+DPEAs^b&j%T50IYf
zS&-RINLRH}_e4!K;oD29oy<DmOBq@B^{Q9uIq*R3*zFiyB&uS%x5yZiy&bN@c5>!*
zc(Puv4&!xfOdT*AHxwjlwMexSwwR}W(@+VcOteVQtl@CsHfiB1Vlk;ww0|x+jFFET
z>WrLI4J>IHN7_oIb(F$VqoJ-=5o}JVYx7&JlTIr3Wi*YUO<6dK8WJqcwnwTl4U=4y
zLk$j*=qM3FNz2si0^ZsmZzo}-bx${a?Ob5>v+{7z-(sYIb2X^MY9~KMK^zJY*}VoH
zE7DHRCXr^W63EuNs^aNCM{@jaD7>0)QwH1m-DE^1p-L4crIY__lN6<aRYB&H-er;w
zS^z|q_R6AGoP0GYIF_x9M(xI;13E)^5G<2Jkr6$!ljkrwc`YP&7Ts?2mUPl6{|tQm
z37&W`!$Y04lC|@jcGFsXj;t`Zx1OU^+0*A@t;{<5+)1BgvYj*6^<KqmXNl9flhGUd
zwC;N=SJjMr=Xn5cn<mz(8b@i(D)Mp;WXg);O2%Ytm*@}H@FG0OO;s2y<XazJkILFJ
zpn&#FNXK6?#w;Ao>`#R}%@82Us>@eUw2Iro0-|EgCHv9wBQ847>A0H2K%hlFR)xtx
z%_Wz=^4mgr#hT2K$BKn2)?^MGV?#8xBDH1yrZB_+feCpd46&fAqaV%^i#efELh8Z$
zMje9mZg|=)ez4vOIhFn|$s6pAezhPo-1qXoW1@GH8P1Cd?7IF*TsQ#1Fyy2&8&F#r
zgq-I?{d%g)Gn~O16U_mO$Alwb<7Q8&jP&hq)s)Mvn)2fbW1WssOcO`bJ`ARt&Bz^o
zP$zbyVCWI-^EMr@dnyxORh=-(s@O<$pMGFF+w4C`w%}oQKX)JXy9nNW)V(ldaMZ5~
zL&8yaGPfak`QKK7o<y+S<+)F}4a``faK}f`_LeFv7`=o`+Zwxc{!KkMcTUP&i348Q
z+31n6{XLv{v-n`6QC*+>$&&o}7A>5$1{Gi&RY<m4$uNEf>vyTp{Bq3M<0?G~0##Sp
zeH0|#&Mwx64W>gSs|;Eve#Oqu%$D0rPs)1WTE=j@?=O|%PVqL@tXfsK#s8+B#Fz#d
za7+;bhpIE5n4+tl5_Vo^Ui`5{1#5W|G8Inhdn2?4{E?0y!5r4Ak-;b7Br+t0W$2H4
zKM%AY9ZfN<Y`LYfb85$Kf~A%BAF0x}-Yc2AZEqLFSh8_b+XqidCyN&igc;jYH)ppa
z9M^YetWIV}p=Um=(mwzT_k5K9`V+S2Zth_-N`CN&?Y<c@ded<Lr3U&J+U|Ud1_!4i
zv$IPa_GsDr#XUMD-y@t*ppo~#``#ulvgr!mf;j{;8X^?D&pH&R){4G1Z!x|jk)2iT
z&%OWv$I(6LCvzcKhNHb!P>rQGLSc-VI~`lZX#1&M_9k`_E&s4aU3dG0QBC;|eo1px
zETJtjA(mg$cK1SkW0V_nZtn@sK)_XhbgV{-;jK)~G;d4N+mzzC62x^iE`Z$mC>&0W
zTzN#Q@qG|9btdcHOzP}C+U=V*lO>h=vrGfWz5zGUurv}uG|1H)3f8WBEu^J+)GN9#
z1bYQjo6KG%_M@QysU>gwFSLAONb5Ofw>8X#X6JiiRp(H(m=@GBTM=HRobgSAKQkh&
zH0A0*vJRs+I>ew$FenLp@PW*!an{s6_d59B%Y`7)+RB=3P(>8o9wZ{Tz$84gDT(9a
zq_+{bE<>kzSGm*b{+{&CY~a*puoWIQnag0#QUY$=jDXdYtm|gFleuw+x^*8VOE$YD
z`1!cqkQV>QUIDcI;3lHJCr-<ie%Y<_;b&zKdQ&YEo$rQvB*}c5wta0+OgDl$wXsC)
z``k=dR3?f{7ghyUTX^GN==J=amPMXv*sVBQ6wl<L0v358Y6rtEPimidH2uDXRC$is
zTZ6XO4OU`3Vpu{kX|Pb1%BAXh5&7ydvKMm)Yd5cmwHvAlVPeF(1#vW1h4ppJ{(R(D
zwzxfxi(7^`IE;D(qV+VT8j?Cp4Gy<Q#NGy@MXTfj2BZnbYNBup(s1=tvNcOj%Z|bz
zu2&?eimpg`PElXt_2;~5>@5?^4tTL#0MpHxbjxo?xbq2A)I@s9e%J_IW4rQAOb$%|
z`aJ_LXf4iR^o_0R_h~nzKa@3F_zI>IXP88b!u(OV9SZJ6!&fLgXds<wUF!k);)5vw
zQT7@{5<1ZOo>0AM1~Y8-#Pc1H*buCu3Ly-q<G)Enm*Ww~`!xl$KQ7BO#_tZ5W=zEH
z1!Ks!lJm%IcM=sEjO}K4mQ61r2EI;JcBfzDf5|NGHhnouZqxXAX*+u6oTrz)hoH{e
zUQk5#P5vXX_VVx_eNYH=H^Z~v5o8ufY*|?p+lTeVt=xiIp<q7u9v>mQ>||c%BV?I%
zeObsUM}l>NlaOb#B^ox(5PkodeHs1?6~I$w)!9S_L*pTUirvA!+5k;R0kyw-JOSdF
zz5)G{O0Qpifos!~GFq@(USmhMGi{3dplvd<eIdyi`$K?j<=T%Yp(>=LZ3J?h(=mh~
zi?`ca@&)Snhm-Nmo;F8aa@Usoe;6k${cy-}zT?;ZC$nZ}-q>ka`G?Uhr=f=K6l%|0
zCQ|fsN;5R!N4ylU*@e{8PC)xSPD5s{<gIUk5RN5d^jn)5@WQsuB+*QUP~<9Kp^GQ+
z73@Jx^fP1m%);nYGdN>kP`1yV1v5z#mT)MqgC+E9N$g2b-n<RL41<%04SEn#!PISz
z%-!Ocoi!Ok&~`y+=6229W-18>+2iKK*tg|7l9rtteUVj3p(h<*;Y)M!6`&wL@R~_(
zR0vKajD;CI4?yu5C8<4kj*u>$OgR%MZE5CdL^=d?f`d0%X_7fLbo$}VD=&2f3$@Tg
z;`|x!@y?m-fXz-0WyjbZ8j2>3D=u#}DtpVtAAK0?GaPDoIHM~3thTWu!cU`>Ec16A
z%3;BFY8Bh`79XmO>E>#uY8^v7ugYB9lOGYO_@q-wUqjF6G_46PQv30OvO@L&@|P7L
zJv|Qdfu_U=ELtHC63Gga;8em>x|c}sOXUz%&XHQEwkbGGK|<1mx6T3?THf0~o2Ciz
z$|UQf|6x!pOTLX)&AMh;R@p`3{bH&@eF8FT4vsWBUs%8p^}hhB3>^OX7X<Ptr_rRo
zKT1jL9|G^V$eIj1Yt+cH+x)jC13zmnm<;@vIXz@2lJ;pTg-X@K%xxx)_ET4-+5P=M
z8^Bmwxprf0o=M!?w~rATOQlb1cClBiYE7tpRqhP!s!`V5x7{oT5HR%F$o5qwt<NVK
zH#nItYD;+UlG4?-!elR=GyURTIc930?+>PvQVxAe!?@%S8Ap~jSW+yg*-DTY(q5j@
zXPa-xgT5(|i{5vMX7}?+sBc3j^16{%|NJ9Gzga;{1Wepk-Iex*Lj5nBG`3_RKk~(S
zsx4-RCiv4@<}|;(^ZV}q%l6I*cuvv)<IWo^{Rb$DZW#;s6}-z1yH+g<e63T6ZY4v6
zawptY58irLpwrf1t}{xX@Ckwg2TkAc%kNZpdNGNCDs(bqw|j=HF=ABUdfB@*)?<P7
z?7h5s4=vSya89~QFOLg{#l1-P<m!^1$;}%5ly~}^U<AJAEK~%aBi0$a#gN7SHc%W~
z$Oz;aCx6Dlh#~S$*VxlqZLAYok7ff%lZf}jQ5{sljLj_#>fRX`kYB>g#OEmE&u?oK
z!!0YvjN<>gL+6jR!^q+B5895VlUBrT!~RI@JOf<WcXQa##m`X5OK)J^thU%K`+Rc>
zg7}7)WyoWde<GS_2JDBQJ7`cu?^^`8vI)kLqlBC~q=UOH{=FtUZ^p(~A?KNFyah*V
zDveU5fI}|9h$*j578Z4xd;Nkv%$m0>R-OZLkA=?-?tpSydvb4Ga3bUfE^zl_m=ah;
zpo0;8(7gE@4c86JovM3(S_zhbub-A1ceEIF_+?GE|IkaD2H@87EO(HEB!!dR^*j}D
zVQ9@t&Mr5uz?hkjKk%Vv5Pn~($j((Z@Vzi{L-^bnKDUL>jxgOgGWP+qD}$k7F$a>O
z?*oNg5vI8!jJY^`UYW0h@8Bol$Nz+pe+s`J3!l%1&tHenKZehDmXrCpur(itfnN&?
zIbpT!#l|o^{~Qy>&m^;2n1B9PSkC_B3rfSxw~`3?a5v{{bF<&X%~Q7Ys9Hu`a5)>{
zn;X(lPJrsz_1)p-bjY0*-arc0$M{PgF((3`8^~Ol{gsf|sA6N;%gXiP>Vxf7%u`C;
z+yw|^@AxktuO(3{tS|iH=0Z8ml_}36Y#b2K4i#Mw6)tJ+;_ZnFVAyb2f!{7x4p)4F
z-Y=0X%L)pP1}wRcDLbkLli=2)Ig|N|Pn}0l>ZbdTb22Xxo9;i>$@HP(nkDY;MUx)O
z2kG}yZQsn_aQQbz)m!^0NJTeXRwD{xuTZxxjUR_KY`5ela_Ng~r#1}r9eP0l)e`Qa
z?2V|{2^4D#r{cWG5;iJFA}ON{qAWjqoXG6T5_1l6;(w|~eh*=|aIL6Gdc(ZeS+838
zxQ&rB<(TuzlyZOlG<-}klxDTVSmAt0lAR1UqA712r<ynWzq(mYsv&@~>GRXfg;YHM
z=pd8@U0Io!a9O#N{s$E%v%}BG*7%y7CN)4W&3cI;T;tR3iV|;h4Hkun{<N-+)+Mv!
zYT{VrN&f*UmnGlXG$}#)Dp_o2#IPrGqIQVRH0GsuKN|>sNnp6;#8lD#*+oZ8KM|~?
zSIr%~Fo)x%3jva$hD`MMCF_u|*>I9}3q7O%-}})cs9<&Q+re_V^?pyM<3q-J?7%GO
zd~<qC4dNwj%#P+d_&e2u;DEvO&@2OE6RF)}`}~rcsNoe@<c!hSH~J0@&%xkE^eUG!
zPV>ebi2+DSY66{WoqKvV{u#7~QRYzEXDZ#z)+QQvw7nWLS2JVsvYeHL9l@aK#K(di
z>jPvWu0}sMu=Ap{#a?NREPQ{A?TTE5!y8qsRj1$aSB-)^T?Y_`<EM#jp!2LAxD)ZZ
z+2I%_a^!|Rbguj}tLj!Vsqau_%Eq&AX^lQP-1dGcH=SW8XnnC1oj<^TIaBtI|56$-
z!3LqK%}kUnf$S{M<sZT;VOWdr+j4&*RZye>#3&5iB>CT8E?4du4F*hsy+4Mn>WQI?
ztDXBolk)d5y~&44ixwQZKWDk-7sCkg)J{g+z2P-0gH^l^+N-j3+b)JlU}qv#b9QVg
zS{BWGoY`wK^B??U_w>L=>oLl8>DcYF(0rZ!n6hYj1215QS(MWpbd$;O3rlT;SlR~(
zTj&DQP5y^BevIzw>V?$O+;@wWH^lyHB4A-GTg*%Z*BeNS0~IFU12*3RlkX<H7C%J1
z@4gL341T_UnZ?s*cA2OATr~v`6Bzu^h6Jbb3_Skf#m|m!Y&yy&e2;w+`u48$uletx
z)W*?1Z*w-{4fS{3iHELpswbRNGk9z7Op5ScR^Nov%9n4_t-Y&D8dp10{oHl?(VEW;
zP@aNHoIaJaZ-Z5Am++ZX5$u)1{%Ll-$yMIPHCDB~92Ia(_y%2~7KGf^`JWO9Die+X
zWw@Aiu!QBWZcbM(PNoy(8oVO-`+`5X?Br^pwsWf8Ea%s~F)OnBg3PBmkE~$xDAGxT
z&cFlls>;xnTa?oOB9vhe6RX32_F1Xrc%%7PXvnCw+`nq1xFX(y2@HX`w6pI~&A?d<
z_U=c6-0almo~cnP11nBtBF)oa$)2e#`V1*jcIxb&sdIJ<sPCC-$f8YQJwZ+_c!CV^
zig5zDq8}vGx}Wg#pT71vzGn=r*y2CM4n@KDW7~`LRQFwK$hh><z^8RPXYMHg1)Sn~
zNHt&(Yy85z2@d8J9rIKW3%uAwMnR12yeeh1wj%qjUZC{`5e83nECe^Er`Cc-Cs#9r
z)!E7Qd3WLrXN6yd2H(sv2MrRnhFo1yTbSYc>^b$w-~NeH<rXozTh6!9P#1C{^FipY
zXei{2X3vQ#Xa5xCY}zg7J;ga)o6{}iY|5U~q?}KYlU6tX&ABYJzDP9l-QtYw=wzyB
zZcBFZY%ejJz&U));W?M*-0)mRXGgn|WsNlAW{slE_3jWAA#jl%UdO%WafiOL>81Jz
zeXX0p`NvU%UF=wFlG00aLNwpp4rR*TrvGa62z58T=8FYASX@w-Vl`YwEmtT=nX<R(
zzY6L~sP{(WN85W%mOIw!k-hCT^VJas>MNVxs<7g=pITg{Z*r(gy%nldrtEF{uPUce
zWj2k*eD{L3*Axvxf1x0~6$(<O>}~q5f=W%>jf#vRmZl8g$E9uFUn7UQE(ITJ(e^)X
z(dHk*=Y!$1;t3o6K=}P|_<W4#ApSJ>eWY^7eSJUth)hrB60>Cpu_@_&YMlOUHK=v|
zM(y!(h-a_c>x?gn{q*Dpg^7kWmLG}PBuKK8-7~eCUPYGG(qybDp5yNorw$)9^7L2j
z-+iP;;xfLWQq~xQ;GSr$GSM4nB-ivcRVH&CcM>qmyLOB@rr>%ky`IVSCRNYmhVU5;
zpKkbU3ZKn-IwL2yh>LOktEg1Absj*TExY>Xp%p@`n{7k_=lbWF1l?*7ddYS&lkP0i
z#jJDuunl$%^_Y`Ps-edykoAU#zg|80@hSk(k5>VPe$L3WI>h5%`&eopYk2st9w8=R
zuil?=b~iiz2X|FQx*5SzqG(OOd1MVt75NeDNefBpm+~H};<YDT9R~Qn|KqU8WAOE$
z!mjK0z@%yq=hiRdmMA^Bw!{?c-Bv@|ly~iH$&>A*^v|IU)JikHMl-_7t+9!$Gt^xF
z1l!IA5}?N*FXk(RD;r7Fv2eR^7JJ;?lgD6)U@S%a-~D{sfIOP4gzo_$x-gq@{a@`A
zj!o2Zfk^uE!<?J9>R<|LoF<wk4i{sc%MQ8j7nLYQx)X;23)4o&M9F#*<zh<Qo<ub@
zGNj+AkP-KHhLJ5BY24<dai$;fKCXKv{Si33bZtBf=w22rjXRIHqnssk_Xo4%&M;99
zn>1~7v~%8}puB3@R3R50CsB@+j@~nH!)yCh-XR2WRSKGZaX6LMk_O3NE!9t2fadU>
zZ9bZTRxpZIR+>f*t>U}g?g;H`KT%aExk;L{R?{x5SQWquF(NOQ?3ld!kymsYTdB3w
z<D~Z`K<r|r|K+Q7*Ee-hcc*CuF}d5#J96l_dkaR8Pna+@<){0QM(pID^g_mk`Ha>;
zQlIARgT$@y^t!^7cV0g40=-a?z?q5;{w)<zls@&N{VJl_9*b9~a$lIweK9XuX4YJX
zd~?Ea(<ugxr=Bf5{S~N<^Ss4gtAA2tIW(7O0bIM1-Bq0I7sbgs!(<DUthG4VRrzGe
zWooj4CSdu_FvB7}Y1(3*`tiCnd{wX?z6<MZ4U_hVVSWYmNR*{GY1eHxvt?z}7~&E|
zNh$BYi-Os9(552X7-VG2Ud0`uYN{rge##>ADAfo*Y2xa`IREDq6V}*3SiZ*FD5I#x
zC{g}pg&JArmy-a6m&$gD)Ren9jCs@}*$J@_2^Ip4`rU0Pmn=w5XK4%WZ2DBq4Ue5i
z3;j~;<iivvk^(iTYamT}Ln9UdDv@prDr?mzegbvW%Hc^Gn6Ix3cyjx_wh!hDY^Io|
zuv85b_Bdin_tepxZ0nihpZ62F+OruYFyfI@84vr<PsO!Wnhe*FA(p<Z3X6iHS-)CF
z1)%FP_0s|dSr}M9#^JvFY}ybLT^Y_S>c4uu`p2NH*Pu1<#khl666JX~O*A_rt?{FR
ztE2=JkSe+8p$=*(floOK(?B>&;x#wW45>$ivO6<1n-tAdbm>X5h{<Y~n7+&T#u#s?
zbMxEfD%6e?dVyH({1PeLqa^TGOdKY($MIvP3f>r`p}MOSxBd5KKGQmQ{5HoRv_!wn
z=Cqwu>mNtQ%pVw>)k#DrB;6zs{43fnD5%b#UAh_N>}N)piXlnG>-u$)E7rI=jx;qn
zciqVhlNG17pkwB63~HS&W25;kHD9t+8!ywm(wYS45h~1$dHxlo%`1GN-TuDPZ)y_h
zCn8ZyavKIOH7SH5|97QI{Dd7b;GxXF-Gm5HUNG%*fZ_>@uZXjvfq^@N?{*LB)R-3s
z8Tu6b09s|_jr2|^)n9>d%w_i#nSe;F>BqT2@GePkCH{ZHZ6Bgv&cn=J!H@nOZd+EI
zY(;Uh-EiBTMajnBl~0y@imrSCx8XugumrgMuegm<l3~(*p8EOq)MMDF-EmtTHF6fg
zq%q(L+VD#YZTcc|+qLlDA-9MB8M!@qV4=!l<hFz|imNo(?MI|74C?KwB?pg^gZ!x@
ztQ(=ZJYMtP|FL%ULwu)%R+Sg^pCN()5-zZ8MiFfzyvy`co9`_Vr(--zHspD384iNZ
z-50Vi*l=y}Z@otxjs;8bhur>hgjJqkilNXD(!n6DjLd%GIMTAW{Y@D)(1|88`#(JG
zbM`nV9~Z+LX`M=5M2RY{%>PY^T>^^>AwLR3+QX0n;Aaf8UZi@w1yqT5JMs9td$;30
zjV$(;*Hm(5&dIz7Tjea7v?sf;r|rSNv-iOX8t1FZQzO<WY(&v}dC~juqW57%?`1{r
zrA6=iidF2Due0Rxcgv@ZSf{#14!+~A<$2ZTprfJgSM9?D?OpV~SJ8V#;r)@*MyYs)
z@tXZ%MPWxTTNP|!OUCLGlDVl{36k>*C|`>U#&IzPy1@okV=h%0%ib)EOz5fL%}lS5
z7*=Job4@U0=Jw-MZrsZZy6&66@%vY$kE}O(2QyPU2TDLz#hxlrI6hTRdjBs(g=Hku
zn^9bU-rx45OrvJoNq)-4`{9h1`S+WE8|K*PU)rx0`}HIH6}4Xg6Gh*^F1MhijjvdC
zYOOkOY`z0*!s{3ftzT_hAJ^G_+kS56FfA_gPa>-tT&V^hVoR+qwD$R;)>bMdB%|di
z5kG(1=OvM#tzU>VYT1<ha`A6Ml?`U;iP98-d)c`M*)vdDMSorMclO)vGb=CUT^bF3
zqMiOw|7Vw>j1~%u<Y%(iVQpx|h*4c+ihS7E&HD>3)}}xhX@=rIXjaw;Q~xAL#dC88
zlFL6FieC4$g5KH4<hV_)7voXKfK}QdJ%VyVC(7YUGjl5cG&?>csxY5}k{h>t6jd?a
z>QN`x=L<im;FGzV0?dG`v_BM=_B<}lLvc8F?VMTO6=U3-?P||tSA)rhupa)(j7H^(
zIq~epn4lXGHV)@-FL8qOawC9<msmsyRC_#lt%n;e*mCv1YV_!E5h+iu1ToO}TbD|&
zNaX3ci6_Kz=au;1F(EJr#%a3_v3E6d%cndT5BO!YIg!B<cstgP{;PKlWfLA(H6WFJ
zL7Oq>kshPZBqZ*f*&iH^8Kzy2;G?`s#$Rj{=j?v4F#U(v$=B*^5yNBmmI^#s;1~8=
zWg4LCr`V^_W&x^E|ItVOg-UcL#aWeT>kjHJ+!y6O2Cxl)7#R*9ueK|k^d;bCZDtGv
z_iYs*wi8KHEW57J7p2nPPjix%MinEbT_5mbu#w?MlmD#+qCpQE!lVqd{b>qeSfl!^
z_fO$7_*{%d9^Ml~!h*HJf}LB~VR`F;f49TJQPKK5_w|E)FlE**gtuI-@jEs^yMSS*
z<8Qnqy^3P)>l0~+3&e~W@0Kg7TiM_ad9W?J^I+pv_#aQkBJf!T-tb9GIx4E0VcP6G
z@^LyJFmL|OU7ERKW^IEB5wmtbg(&U|G*LnSo>{~G46Gt)0*`oa83YqCw`Avg;D3qk
zgn&Dt^b^qZaJ8=qVf$ZHrOg;7MO=dfE;Xf4(Ea#j$}`+TIBSXYYaiIgu-q^v)_wEG
zf(1E7RYZDVpmn7G(JzO=U$>RxV3kuB0|SpOp<wyd-ZHk!-}DEmC~Y}0Z|WG9i^V1{
z?F2!mKVyO10k{Zk%#e7AhTx|FsL*Pqf5P`Z9tbw(KNF1YA%vJ20<nuvaPDCD%Ww;Z
z;eML5*>ha+J&S3e{6WO=y!}Gke!)*@mF%No-6vd(&%m4bMjIS$pNQLJ_LnEu8%7S|
zAn}Agj`97&kXQ2@7pMTUw~$dmyxjL@7%-SFgM|?$n<>wK;5XYC{Amah34~4C?d<I)
zPNQmgoLwE;1|(=yNzfSGc40x#c;)y1XF=m8M}h__q`agdf@UO*H+Y$*PD|7nZMx)_
zlbTk%MifLSmAgiJ$>r?#K1oQ#ZzMY0!eRTyAQZH~R&8Uox9mwL%KfuW7zRycdof%Z
z_^C%(ltMnq&#;}^ojWZ2n~^ajXoCqs!_VO3Os76s60fP&EZlev`(y0K29^1B^)K*Q
z@Zi6|XSY+N#b<j1b8J<Ekc9<>0GBF*Hj??TJ)+sBdftNV;9UbZoZGK0F>n(+i<&v)
zNrEeZAF&9*!K^aB@+a)H0lZy|QXZZE2h)80ULf>W=RZSmXAG6FaLisZdKp}8PNvob
zm?gU}uK=&X8ycdJd>S|ozD)H*_HE-|QKZW1q=LS`{F_Lji!f43Mh4NKWUXu|X4u=|
zK4O-YPlH(|ptulMZzZ6Bt0nvBqsf2hCX1^9d4t?%`@d4iAg=x~pF(d3ZT}*AD>orp
zuzxva5WNMbGcjhcjbWi3>{@W7->@7&vWCS~e2;zMQ7H!89owu<w{flOOkNwDAZsH=
zYtJz0pTq+Vj&SQp5TcC|T6~n)FyRBndU9nj@EbN$ue!%>5{wL=OT*`m@OgdsJmj}F
z-5&U`)22gR`1}Pn;QIbS_<aV8RNvnVpWhFkEnztoVY*kTT<J!H-`@=5PYJ(|H_z3<
zS>gAsUwEEI`rzp>a9#Ku5mwd|Hg;I}{c`xsclIml`L;07K34}@OeXsrr2j?sK-_$!
zX<%y?1d45#cq83*RT`QHSv@RwGivdW4pSE(r$Q|Dp6K%3T%6lNyjRD*;d-Std3vtB
z*?R9aH#^eJRos{zncj80lbIoz&s(Fb%(G28I#z0ehf)f-dLuAbAp#J^2Da{P|G@Tb
z#_`^4StVv5r7V1$fW)%<b9f}Z>!h}Wg99nh(&0jRCpnp8!tx#$S+b~b+8&Z3_d0L>
z;PEWBO;R;;v1#e7Bz?T`{kSuQ8*6&qoC|vhCRIEp74HsVe_8L<{%})@L4LYPL+YDx
z$B598I@S~KU>GIdeu@T5Wg7jUG0fY7A&@_Uq~iP6eQY^AH=b?5sD{3Mm36==DXdvH
z?S5a)Mm!i2cRFXMWMwV?ln-(4M)%bi=Um1wm+sqPYAQK_{Q=KYAqX&}RfNX8w<Ti{
zSdE$GCYk?KsflAZ#Twss(qkFY!TG|gAl59pJSn?Bqw8co7J>G*_Kgz%UOc`cv6?SU
zuh_1S<8@mx6#Cxv7$j&&pKgt%sCP~*i-h51bm}3NJ*QMw2J2PjlC={raxym&oZfZ0
zlVLNGmv1{6wtkD+!yPn217-fNwrRW&x9sPS`P5-<yCs0MKgz%<_es-Z`Ld_nB1iUl
zKDKVFyS#shw}KXRP8R7X`PfOmZtk#-JxQy?Box^zq`Y_H*hl#_)TS}ifZg~iRErbc
zwJ1m~rifVf{PNg@^Wj+YHf4Wi^$yyU$p!Up24ybSw9B4s*>GciQJc&<q4kAqZVeq@
z&dW4!c+C4&#j<Kz74Mvh+tX9XfbtqR!^J_W=2Wx<@FldX!W+UJqN}820L0u8YaT7(
zr%x#ZmZwJ0>)vvAgwLbe-77+*BG!;;^(=1^yGFnU>VoCY$VsK0lh{E5L|kuD6+(15
z3nAv6i8c}^2cwo3O@RX~QObI#jZi`3O6SHsktddF9D{E&N(<AtM(Fq|Z*Gobp2^&`
zrT+Ia_GH503MF^5;L<F$svxJZx;2ASv=xe7^19=4+cQi{MbOK)nWo@7BsJh3H1h^X
zH)xrofll`y!!;GOAl-kY)A2kn*|t&%1i#=_IamW`fl%ib|MV?L?QhWN6p(=p)$)G~
z3D#1{*cSp!+AIOI;0=27b2o@4UQ#nhun?R=w%rX<YW)d+wA@PVpg~Hl|KVoKt<(m!
zrqkDfL{^k(F4>=0?e`EJyh5dF&|~@-Mb+7PrQEu_(eyFDq=O`VWUJxb9c(p_`2HUl
zEYM>T*;@d3Jv9;>PCB}<oa!v*JBR9IitMc(`v$hu!M;@IKkz763o3QguOS#`^G_d@
z;WNc^A@l*g`+2c*lithuyDaB#oGp|9bFs*v1~@C(-9&{g(F5U?o?w|CHz{PULKd5Z
z%(Xt2nvYCPJM*FMuJBv@j=tA~-(qp}y*A7|M<1_+A1(Um4L`6mEFx3QgwoR@WhPDs
zoXnFrbVy`dWR>l7e*Y-goNTSka=0@^R!i1pI&Y{{x>R#+{H+VjC=cl3fR39)g!3sY
z<!;ZUk^$?t&6eR6u4d$}mp}+!Hxd!vCPE=F_po&(!YM~XVkODpGl4{{rxp?oGKT7z
z`cS07yseG~&0nQ)2RRp^HQc>d($epiqcDC_3jjmU-Xsvp>fPf1@G|4oDzhJ5Z@+eL
zJQ~Edm(~n%GH0_}-hOQb2<&9@HX_oxS1emvvwc-HN?(FBdcBN-e#UHoZ{L2JxUEI+
z{YCF$ANA8Vr?zSIlpvsIOZc1<KHJ0R!tl8$d@c^3UEy<W`0NdzTf?XL+;(pBaWeCD
z@DLPGuBt6Ynq6*8i_vAIvd4XX4QJKABl;z;5xpde<)&~2`0Zv75Pc|(r7+D!C50o_
zsjsK!N|$hz_Vi38y3o>$B|8WA3FpDo$jG+bnx0OGVQ70k`%I>4V~%DP9ozMokgV}v
zHJa+Zdgoe^QB{OuC4yrWU$OQZbd>Wdwc$~j#%m^}zmyvXd*sKRA1Fef(l*ZGXkoo=
zsy>}Z?Dm~hUTV7OQng9P_*1Nz51#P}57%rYfz$CZsG*=?8OvIad!H<&+8fLs*Veqb
z;1sFKP=YN>nN6-C`0GaY%$>=B=vDA%ZhGf1=caq<yF78{qNTE~S<SW9L$T=oG2&QR
zGB<rxX+gg;cDwvEcFCgCn^S?C3Oo?WP;+ke*a5d}5iRR!zmQh&!rPquTQp+=qFO$Y
zp6Gq{(PbYm*@yZ~EADL}Q&0PB{_96TE03P`>&&MDW_R{P7uvYlclSiu#4w?Yd!p*U
z60GWpJ{!Ki))VawUpMwd5m(Uo#J%Y4{B!T+U(*x(YhFulKA;!<(x90G=h5w}hqtyS
zaWI&w+X*BsW3ZArph&}#o4#<=AP-)|Zv3yW$ax{?q`O98U>V)o6Gc`vjhg!@8^djH
z<y}b`CD?_)fKh_!(gU69=w*;lHVX!V9ni0kFN$Yx6CBCAcIIl)y<EmD1$O>oPpEvM
z^2)xE@?RdG@Q{JIbdw>F#x5r*9>`g86$Z$tB~HtZftccN;A(rY?{^dpj2{(gUB*%I
z^6W4$-=AY<wDER!SW&Oj{U;Qzz)U#tRU|wx-G5Ts212<`E$+B%-LJ@&azAF<26MmK
zf6zFV3T%3-&Q)nYqp>UIOzFz&Rn_up{~XlUl4cvkjaM6mDJ+A3-JzCmZ_u51Thw^s
zR`is1GCpRVSNcDjt4<jI_nZKQ0d4U2-vEu){R<0E&y8Aw>Ome2@W$z%{A*6?pb!4!
z!xB^mb}a@SBm|{vq2q&OG!G{;!C(vPZ3%tK*iAj9^H0*$tmQ>@$GH2EHLgq=TldaX
zuI9!>7A+=xbyZ<KarI*&3siZl84TSAjTnw5GjTaQxWz4^Cc-$mb4%=9lAZp|82p%y
zl-y@3@TbsRD?bV8FiPc*?Wg`1aM8cPLSvr>RSFh__@cAGO~OfTZb8kFCa{5BLHWig
z@mIYi`w1wX)3Fm|9S04IY{c>Lh4+C-TT9`P)erwusA#=_!=j?zJSv)$yY46upxtXv
z8-+F&D&$6eE27?U8}A0#b)HOz@f8WMs|L#jefAH{%RQ#ojG2yV;Cp>lNx_}+7>YH@
zFyKkbu=fNhOr%CIZ_0=+EHN58$OWbgxwAA+>WpL&)rcMQGYrKTvIH}BNjt?M_kwon
zphXr$UibhQI$tY`;)T}?W9=XO$CAjh2D18R(bk@*OAIB-abD94`x&owT@mZ1?ls+T
zjG0(UNsL7s9Q;c0_3wpu9rq-rD-P2ybK%xUx_#>wa_@Heu`+y2G0jR!37~Z-8+j^~
ze1?+uBwE7A)x6KvJMq=Z*@gJtLM}{#5>X=ODAMieSgI#K($$NB;5j!m%jKc|^0=3W
z|0p88AtoJNd|J!AY}rFUfTQUyt)cH7Yn1HACK=Lt$66(;<R3<i3rw<vhN$B;CA(O<
zcCVw?MDKMe(W>3z%<N=j_?%Camq-a@TY5U6so_3&hX7f>o(@4VGXv7Iepq`FuHxvT
z`k*=Hp{1#leK^;H>jnN(*=jla8=cHzHlb@J(Z8E}wZ%DvO23r%TlHP(x%=aseHdcH
zG;<VyR=1m|kTdo=I#tn<$@_OE&gC%*32ww%GF9eZD$I+QILlN|{)Nh)vz(hIr(Y3s
znH{!=Y<r0mDAW8!N~?V%@Vfu<4T3`(2NavG<;E?PBg)OC=~GT{G7k+WdE?f$&8b}I
zPQnAzu^s0B6(-ZoJ=sfn+7<f`P>&cXaUYgt^4}HewXBs5d4-U8_AU)Lr-^hOdEU96
z8QgZRmTWEUPMl{P2Wq<YYrl3Fi1RG4NA@8tkl0gY(MY>YBOBB<nq}bRndlB-+kSGW
zQcV^_<mB+&iklsCn3#T?wpmMh?tf78ye)RacTCt;Wh)$6dB(Q7I*jX8oc8v_4)}Wz
z8hnMf!45ecml^FZ`ZF!+W;txmm5toBpIL=#gda5t>h)SZ;jQ(ppJwfCyRHb;Jm}}_
z53Dkc|Krp#TQWDU_K%oD&Tz_LqcY5a<rLxlNW_29GAFUl1xMdYA*40)3btCTGV5$|
zafbEOBN1uJP|C!XQ}GmTZC;%_GBpyXQ61oTZTy3m!Nr!WNqWy(mf*YE4(cTy3JnLa
z4eYs&8nw#YT<MQzIp2ZrncfkJqG|wMdnQ$AWsTTM+O6G_DkFr!$DCF=VymEeD^?+8
z-Vo>ZNw6BLDpQR!>2Kx%I9G`$8qIPU$(FK5n=QRr-aIlBnSJMG?X#*2E>FrJ{P~}5
z9<Vkh+bfK&>rss+%qM5;zK_fboU4%&ZVwsaaWpHhz&ZJL6gaOK8WhK3O{PZ6H*<&v
z9R$asO2F<*32N+)ciO9vXF1m|sJVwAXG(W&91_{YC9osLi>={H{Fgon*$<S3Fd#0P
z8=I3sR#A+aEg+RUPi_EgoyqjBVJUB|bJMGAAG_X;l;?}T=8V=B`0I(w&?1$kO12d7
zPq5QH6i4c^Mf`_1y;Dpy!D3T0;q%V$d0+U1A2;zYg-^VxztPj)N=C|n2zA<r$SPk3
zI(nk3?AL4dA%>FmzgRvcdfG4HzkUS3Jq`3k+wIq!1wGN*!`DSU(R;(!hkK%i$xL~3
z*7QWzhM{lvL_Y{$i@4loxZHlHV_#yn!`KaPo#v)L>}Ql*6gatYOOm<PKMV5O-CX=8
zbe3^OVUX8`eMTf?c+%ZspQmi?nbNO1W_j0B?$)+<M2&k%AT8yW%19{9(G|RaNvmb1
zp-AA{Fwn-gF%osD)3J0bY^brJ4(fPiO&H*^oOWxiRI$eahI#oDLg92ggGKlkcyg`i
zd#M4-cF-b*2!DDL#iK1u0`2qK4b4rzpMnhCu()0~G;vMv0?S7TanB6-dUJ1W$4!)o
z<~F@+p!Jkw_OyD8#D}`signqua6TH@ip!y0kto2M*^?z=Y@rV1#Z707jcQ5J_(AP)
z($@{DpdsxIk+xsBGn&dfUYPr#&`&41l3AGKQLn0s_G@Y)t%t}T`SET#R$tP$e4$dO
zyr(-}xcb$;hfuY)UxQGvzp2vTm~<>!()V*WT~g9_y9s?vgOQFkl=Nk?=c6e_-GRwF
zhvEjBI8elHGHZT?(&z}J)!__oy@y0sWW0+s!TC6-5L2`HKPn@^<#LRX8^4!tRcYV(
zrgSB7Cw`w%Tm;XO*0kVR(*kSBT@w5QW?lm$h5+e*q+4S5cZ2s7k;U0Wtg^%{IjcHY
zR|r5&P;ypP&}9M&bkND1i{*p=%<IsP(|HrMQY%Gl_OZMD#X78I<%-K4a?%uT5b1bJ
zG^<J+XQ(L(wcnY0e~c>cVg6Zu-mL>!d_DvN7S_hX;8cKJt&ghp!3i{ISrx_l>$i#r
z>lrjqdh;VLT=Zl{z-6kHB#DIP1Z&lbVt&T%a);Xr)k-N%OoLuvT1w>CWhXe<1#80}
zW(t%JHFxVi*8SU~<unJC#0mS_1)@5{NgYzmNfpLzkd?Z}6c&nEVg!DJo=Z$gRJApu
zWRM?BR#Yzqg3|EsP~w3kO554yzq#+^_ERHm!`g4CjI^HQX3v6F>+Y|nT1>3#6B(|h
z>J~VA%ah&<vB%XyEQUs<8h1FE5+Q~eQ`y$I`tkM~N+PZ6`5KNVk+&pWQqVpr%8Iqm
zJu=ezjJx#7N!P4@`SxY6BzLs1X&&XM<*V*vk;}Fuk)JWZ+HyduWY@Is4YdE{&Pb}R
zKjAzwxBB9)nX&Yis#%7B-TZyh;YufZM5?4Kz!4>|f}9tJb*uJYpMj`nNxNj!>fpDS
zAQj}pbpKGN;{t>^Z;er#$Cj!iJJv4u4~u!rgKfZrsp6);F5EmYb`wKpQv|OPgXwbT
zl|1p(qs0k+m@W7LP8aj#{l$L@ElV(6VQ4kj(-N%|HIpn1jTAwYhaeQA2;PQ9E+WW3
z;5O;VC9Z21gJXTrK1G1QOcs$pQ;fGmB`S>4ltQJcAaeOXdKJuQX}BSnN=6AvMv0^_
zr8fkV5y4W8FF3dU8qDu3&}Kxkae2x~t>Nzl;{n469ezEUcQywbx$$1DYw8x%GR`jO
zUSfiTU_q+?dnjXGC^RgIUzROmdUI^SE7{_>wZ#)B979{iswwl|ctw>A0&|)FG$F==
z>eCCPVYdGL{FPs}nN7te=dVZ?x2!J<YnV~*3<oI~&q-)<md&Q;{=u6hH40Y%x~r`;
zl`DJsK`rM*WGS$N<}Oj`PbM9mP0g%Sgv;d7-K00I3A^LwCA4^8zk8JljW==sdhwgm
zMH97P{cRgdbX3Y*R2#2p0tr+PCA@uZQ%G3MpxW_T&j{-DKrI!;ah}Fq>fhj1z1L`s
z?aJ>*a$b0NtaFs{FN#;ut^QpvgQ-G!G?|-6!$0(Qd|d`g^RQe!w^>F>2g0T`_-7$6
zbab&E8)Tf6s8rXVT270Q%`i<my8|l(Mk3vh`NkQLX1}_1Xe8Y*(&^YbL``A;qWx;M
z{arp|aD8Y?rGj-bW<w$yo81$eLvbMGt7psgv3l?SgB=;&c+(VT-z0n0oaE4}X8S)m
z8@r%mr_RO%YEJNpAp;Wl1YG_FmwyqMmUe2x+YU~C6j`K0ue#{}Fh1Af`JxEEU^1vK
z(7!nLFgmiGM1w7T71*P}Pmx^i4XWiYup!Xhl=*ar7pJS)J>3<IrFt3FowJ7<dF^0O
zX6ydbygL>$64SigojhXQ9gBECCoO4{nGVda>jl~#ib@}q9Ukwzu%@2VSfP4oxIiL%
zQ46b=aJfN3uqIPN9Mf7XxmBB!=_uuG-ub*;&YMBk_p@)2%HE+Rn#$%RQAzy8!9bUj
z`JT~GH#MX@H`*ONfEHaSRUn!!&eB)<iQ}}|GFE7%%Gp=|yIzU^)?0rc@K)-I!aJx%
z(*E2?>+BHga8msndFo;iAhk8amM?@af}+f5Vyk;De)r{=z5*{^kG3-wk+uV}KXB)N
zXt=J=BT<|WJ8rr$f)6^HG`G8SUycBY$LeWYS~QP&qNgCOwjvU&R#h_&yI?y7Qq`fQ
z;75EXXIKl3&d-b&uqP~Ui6ED~WVkj+I@c2({Fr|t9U@+g$N0!Qx`E)Ha5UI}mkp|x
zDu_^8Eq~TBvGyC7F@Mh&EWCZ8QM!4fI=B=tF_wyc#wVG%sMG)18-HiDUOy(5o>GfS
z(z<X?Wq;F4w_@El852WmT6pVKdDFrvyPFnj{r-5q*6)-tTECfZ02lFWwn1|ak0GR~
zpYF@-NWguF?N$r_1y_+rumuIpJtjLlt^yBE>Rvy_|I)D^!y7ss<EX~pd6}$xar_Iz
zu@$)tW3X->kxoLe?%k>>`a+=!dW|H^nv-cX>)%+09nY)y(QmfstlH)vf$5TEID&=n
z*D-I?nYq^cBiLvUk?GZ~sGXC!X}fK`yanb`5eJ(haJn<N^MczuwhO`?7sS807?y}5
zf)g6tMkrfEyZ*n(dPq<0y9;{?nahm#SZR;XXkOgYdtTntdtTtvdtTzxdtT(zdqL*&
z=49Afxsx75@8h4_#lNPP_}A?7PrDxMx$Hy5>Gi`~Pfn)Sv*i+;o{QfP#O=Q4f|{M)
zY9W7N^TeC2QY8IZ0gv1042s<BUwn&<3Agx1K3|Z-0+;n-FwWiDv$wvGI{wJJl+T$i
zfF!963Dz@sWT?5=bUCq42`Xjz^V5htNP=a&mE7$V^<voSwH_4rK2+o}pZ<LSgcE-)
zhF&@`;iBl}A41z&h011k40J~;I5cxHrO6A=MnD_mp5R5k1)t|pwPmznu1C4q7)~1J
z3m*yx-g+(Mc-g(Q!QYPVxhGnwp@2z1H?{uvR<-<F*nVlBdLgk5iZ&#kkElMR9Om8C
zJI^LP*&0nm{7)zlZsPN=i<{_ZCp^zkaFdpJi8vMfzw#0V<^YS*kfDg6MG%oejcOI}
z+F7}4{<eW>x!>9<wD00SJ-vwcGMv&?&+SG7;kqs&B$hP_)mUT40-EGx&WDLlW^*cu
z9T;xEJl<Q&f6^tQG4BqwJDzKSKmR}nBx1C_;f(A!RJ_|;k4a{)4^NuxNy&T_x!|aL
zDoR$Z*LR*JF1?X+E}!<dErSP91i0fj!cz>O7Rvy^tqM*wUNqfFH^OUh{8WcaY4!sY
zkicIrXEe<Ef1k|>lvf+Yv4Kt5kXUUzMkU}S9+DCdxb+{snY;DIz5wn0HO1Nk@v{=%
z9gFz#FS$5>bl#krzlA)~k59`^bAdAM5;}K|W|R%4%gVZ#O}yQ7(LxjzD*PE5JzK9z
zQ>%Z?n5Y~Te1(%!R^CkG`l#Q@ETmk#a+aSAg1dno#d1D5rZDuxq_@WPwq5a>w=0=#
zU58r~kmxb<HxDS&Ql)|jFQfwQ@R;CMv|TiRrzzp)^`!CE7#~Y;4%M=#dPa50%~Eb6
z-d{d77FCzN$B28~tSyL{Eh&|45Eb}3vu*Z<jPYSU&a01mEu6@tM*m%--d$j-cMB}^
zDgZefD+fZnvjD`ADX(UQ0C}1>rUtH9Zb6IZej0SI9PDc7UqKKKK86<OPuLd-IM*lz
zBH4x%Ow=n!FwDsd_fhzHdn%)GxpU(Mq8N|;>5um3?qE}Dt+kb1=d<N&%w^>}HK7}Q
zV3RVRAy^8E&d7~hujvZjBEais$d}t8Z(ykDMLl4$R0AC2!V=7`c5F{Ic5z>d>hrcH
zo&V}Gn%+cxFq0rFU_91aBw(z{3mC1xlYmiL6ABn{7~6MA2u}FueB<tcm70X(bdyXU
zG6tNI6*4B1@n2HRkU>UUWC^lA_PZLahYMUurGG0|Nh@!)pv^3pc~7fOt7MQpw40=+
z77an@dd~HqIa9&{oOcXv$A}9D!IL)mM_d+)3r%e!)IK9Gh@Wze&;Z9#eYH3aVhqdi
z0{}{u8$MHb|2ZhO|LGdEIV+{4qZOUhn{6te&{WZONnW!&y}j5pu;GiQfq8df_q;<#
zsH<A?OTH{Oi>3{8I@K(gPMRjzdW80?<JeTVo;?TdkE95Ad6t7=`_JZ6$m1QH&gFeH
ztu)wUigxZtm3EF2=UE~tOR9f0o=F3icL#rt!W=*+4S?%k1FD~3ACzS&Z#_&?@O;1F
z4gE<ejk7_y!5xU;p>p)FH>8b*2Z0lLBY0o7+R({4aGlG)jNB~;%e7~q(U@GFlAT?+
zZ36;^kxt+`x28%w+`)tH#%}2;oE_WXU&=>e+vYE#nH&haXiiVGn%*F3w$wQ3X`ooG
zlFmQO+l;XDJ{<d7iuLQ?7V`LiXnPa*s;aB+{{|9_ir#2JqQx3*s-e;vEZRgsb4kDx
z4T^$79ci(YI-(|ubKvGmPEW7mfYr8CZPnUZTRVV=0tr*FRt4vwk5b2T2rAYA>Xi5U
zTl?Ib8?=3&zW>jkkLKL7&mPxa(_VY+wbxiF`Pe#?`nsxAMfimfRbyJE!k^(5fiKuh
zV;si>!>hwPFv!6`VMMF7DP|DgNE((1Hd93z2J^<Cg(Sts;!Fh}2<AR$Kri6gzi+~c
zI=!|uNLgU4<0>#raV)KJWmD~YEkAZ!UeRknE$7cl&+2lqdb!xL*R?E}S!TfHdrtc$
z)@m@{)PZ0&boEB~i>*4rX1nq_V(50*=Ab5+dHTxDtPRrq(YYB2fl0byBY<MAN}fz6
z!fAh&in=!X3Y%R-6Ok9hRy%<4?Ky6X`<*oq!+hpGN0NjYR|RhK7Ml=zp0I@Qer()b
zq>G?-Svm=+gVioa|FXUqfn$BCg3!apS)zI^BMX?pwD3<Ynx{f$FpK7uCqXG)Ua&R1
z=7aorPki6*LTvt$REQ5BXG!AVa5(8-$dB?Gd~PWw>t^&d!kL0Ywm5wiCL0mn3pEf+
zeF?3mT9@6fVYTeauiNx1nZewv^Fehe;dpE`MQBcvoo)JBxKmMJbT9ZRmomR#8H=}X
zYSgK9$@D_1k&1#5^Eod)yEM`Al;*6|e}RRCR^2Rp@mdRm*WbrFc-|pTo+vAq<EA4X
zUh#9}jhDUALUP!ibdB~L32M}4=lPPu$O+wqKfh=IizzD7nw-Y+@Fu)IRfM0clBcU$
zQ>N$?(o8A7hrtyp#nF98#HLzXtS7G>&r9;h$5@gr+>_U&c!|ErA1!VU2PbTgRr8Kw
zZMb;Ich-Z1FW%?oOKg}agl3a%m!hAC7toVv7QZlRRik!9zHw!(k8?5PuqB4UmCj$6
z&4kCp!&T<DAS{rq%IWV>11J$w-r+E}_~&3Xa?Uja645VbzYX*2jPBv%gi&VyNM`mF
z9*i<8NHR0fkfNvg?mi&c49PVH=bJ>%oJ--Tf|{HjwW1n;g~vQEj)XTF;#zc9^65e+
zW+hFLQ58y#ZF8|4%3-H~R3X{fH{BGL3URjF-Utk&LMkBI9HLD!x<c%(&I?+_DwI$q
z2BLbR`60c$^kU~Ie9T4e`CR<`EPmF<&p~m%J$Xh$<Cn_#`8$RxZ{t73ndijso8$Kf
z;`hJD?+5W7O^FlB;^&I^<6q+UKg91{@%tYyagAKx;+}_I>Ym;4_YdOdi1>LP<)iTw
zioT;ixd9x(=cq^Du8A`~7C(27E4(;vV4wIs89#@_&olTQZH#-fW8BN4_<2U0X*SQ^
zoysr#H9si1@{}Q%HCqOZ=pa^FVo5PR5UYCgBCPl~qNA%Hl-IKg`EulOzRTOHFTB?l
zzI$CzwG}8joad^7ccrHsTV9oCQ2*w8KHi$=IuMsjxwrI3hd1w<{^&c+JJM-~->p|2
zn~=NOyt`?IFyU<6!rEFdzpr1S`GuhQK0;>oG;iR$76VPe#Igxk+d3PG#}KTzjU@JH
z42yBzKEew|ZVfJ~YVx1$*~m>}<<Z3qeZFfan72f^{S8Y67}SXJ+O-5SpyK;@PmX;C
zez{&=wnhGWVlD#Tublj!;2V#h3h^+{4u15ABteJ^_%l|^;(iS^#RFRQmNG?bva*(L
zk3-%*ml>qzY2jC-d9%_lUzJQyU?2qs4rtla&d0}vnjgu3XzsSmza%s9j!_uMK4<{$
z<-PT1u{IPo(2EaN^w}S9LybGfP5GgeA3C7rOMS|7V-7&G+<RW3-2X-t{k!rN(O#5a
z(ofh}2#@XHweawKPYQrm@RRyu`1Kv%#&~??2Egsc_me9N;W)z0d_koJKXZd_zK50^
z;A8lXrILRS-!1>C{flShNA>UEv&}-08hjtP?0*Gcc9IM5CsGJ{2i`vTwjF%O;Lab<
zbitqte*Qc7hVl5MX%!Xl6YKG}!H7J#TK*s5`^x423BEZ3`NH;xd_O;`UifYYpV2w=
zJ?T<quKO?Xx70TF|F8J_Kcn(JDFAB0&wmHs9R5gy{TzIs1tb1H!*?!~6yom}@*mfH
zj{mHf{y9+f!nZGfaG`V!8~!z0rT$C!mi-&}2F4P>bl-lg3g(Hz?Oi{37e?5-e(<g#
z*t>qL3QEpB;Xm<f3!5BVRjO-LvV*^QqgDhvpxSi6{pBrx9z)7}h+lW@yjJRKKFag2
zoy`x=zkilJEIC|o9fu8diPVCXetnt0{^VSoQp_Y?XIR^Egm+fw8OV{XAI3GcEDi=g
zIhn3K(Q@>Nj<^u<hWx+wAa62CIa#%>r=|wlTe9kds#C6A`9T%uC^6#qGb;}V;WqVa
z^eND|bxSlA6gM$uLO;5Y*ZCgiMK8E&wzDF6>D8sHqRAI1%CTEe*thI1C;T8DxT4Li
zYuPO*`L_Dj(K5u;h&mR{n@fAvTY2k`(<`EVsj4r(39hR1vb&UguD&-XS$(^IzP`As
zx6W5psS~+|&Q6mt9S5P2E5P+9Cp7tMCaJ3gI@a_c+nJjSgOcl9t(P=nkT6XFpXWiX
zUVt}C@qFz)?vPx}1@9-YVEs_P6*z4V`F9TM8fPB7oJ_=8(@dzD8!K<qoTEmdGvHst
zZ7+3IY>AKP$Q`GWT<%$qj&NN*WxjR3`+uVG^xnzm0(ehz@E&X5VtBjxz#fZLFaBQp
z`R{JNxWr8JRsH$ztZgYDe?Oq$y93uG7i_vAwvH6=pT+=7LogiM#aoK?>_S6h|Hjz1
zTuTaVWq7>w8cAg9vgL&ay~<U5THK84N53kF_nz~g-KV$i9aSCvv$kT{yoeP`z-i!g
zH%5?;x3xT`wZ@LBJKD%MYeaR*To*k?%BuN=`hsi!^#5!76}k3v%b1)4?^)Y-z~arj
z4xIkE4ot8P6u{5R8iQFoZ$GG?du;J^`;EYs-V9-W6dY4pd+kWRTyOvyq!^I@qiX(o
z!J!-j@Nm}~zPUuYU3ztuqidPFWe<wOF3S-{ci9z(s~!<Wvfs)&x!86Zy<n+o6l4xi
zzH-GGMXzIe!aM(>+)8r`VA8CdKi73aeTrt82wc^dUbDtP*UsCE9A7*h?daNg#9;j&
zSs(J_Ii>r5F`j{y;roBh4QC+u#~>Mv>eFb3^^S(2!-|V5!>9gSI3UIX7n6-_uIq&Q
zlp9YU{P5B%TA7ao9)<qJ6I)lb>!oF1V}t1~FZ}yuY|{-s=~!dDFt?baC4!RiO6zFZ
z2?phe`ZdRx`ie4yLG!45BO|;3Tj`PB=i6zvcK&(H=i7NnX<yKe(@H17_HJ%x?CH&b
z=ydo1j+hpQy=AhO9rNjlL!c$R62c276qD&e8=nAL+PsJ7UpTe(K`n^nEs(uzV)*u@
z)RZ05MXB)klZzeZm7QFmzv0JVY@I}{w%<Ej3*fHkBc80;>Jo5WI*}dR@IB3k`r?W8
zR#EHus&#Xdx=}w3hC61O61q=PGX?UG`cGaJEvG`&C;tAS3Ek|NSsD!dF#NSua@ov8
z^MKaNW+j@x9+WJZU{I=-Q{I>(Rq^#ytl9FPJ2`b4#N+sBlYe0iL#+<`Gt};``44Kn
z+x<v>y_vrnAv>lh*IZ4$xuI&V#RLNQH4e}!v^}*gx&$;S`IhU%m#q^k(IdiLdOP9b
z@VoXl=GzlvdS5~L>Gs5_Lx7)8*#6CB;i{vH@kcokZ;ll1a^}RqJta(4aKbbls_Wz@
zL8Yf6%(?MuYxe;KOsC+d$0Z*akBgDg$+j$IYWHdBZpeNY<}$FdVc08NlXO=THftR=
zn}3!}SE9FZGt=iVMV<eUS2!abA~84G3l0<c4G|xK>Y&oo?$a#mO~w3Y?aYIH8EId}
z&9o2H5u7lKrZx_H!3?_l(^C4JS@djm83Ug(Wr#8I=%uN}vR$IT$Q7q$ulG{P^W3f*
z2TV$#;kDzY6h$AgbZKNeM40Q<TKeTrU-g=jZgxp!WWD0a?hf>$^gDIYPbd(t-%}@~
z?BF>NpXANiEOH<$d!>bXXyWwN?3Dkv^k@B(ZL9cVc4hy)@CP_<dcojXV=!^TJ}Y9|
zGGM4me_Ygj@`#6<vL#oxmL<|3b57tE8b_MUZt_>M1#g0Ps#(tjyq(3Y4)_DuBDp%b
za&|$Wi6NLyIFzkEIfVh%>tb3RYE@=#<BNG8oo4R@8!YAun!3{DVvl=ZupgBC>na>S
zk_{cvW$<p%j}0Nb3(Iw`)2mcv^H49y+)Z^y%lBJG;Oy}EY*ZJc+_W61-fItlzEeHN
zP2NaB^#050`&qxYzDGw`0~B4<s$Q`-R^bIFR>O5ydf5{zf_80+H)ZQ)hR<*M6!)_x
z;%cS;MFf+6*7xShij;}Cmm7pg<6bYJD(YwuA_1oz!+tbmZ*&Gnykc!OSa;~THHlX(
zt*wW{d`-?zV-j^3U~cSWFDS#^jpLq-8YI6oHLqTYx%Y=40r-$@t{mCmzeA(wDb-)4
zlVR0x_J;;mHf2eO#*z&d&PgjnFS_y&{_)xhdpmsR%eYD479lqqdZ7$*o3BuKn|;Wz
zbO0${fMpy&?Z+)cc<olIfc8)2nz~PPf>mF~M%p^vKr=8W$ix1t!7(|BQFMoUg>OSE
z1+{_E;}i)e&*q3FjP|)7h~ch@*4T4Z^!NDvE}l-Ge5W)TLUTEMKQZM$lbW1@$%u;@
zI^^&k-OKRaW7loA|7h5XwVE~z#W@N$=P-iW?7)Z&>6yJx`ZrJGZ&CA^+HdRNC)h4J
zAyy~Y-l<43XqjyKug>9n%OTq%xkxica)RO*o}X4AUs4a1z>vd|-@%<%GY={3b}pt%
z?g9-lzniSl-4#~`d=m+H!GlKo%-7jA9ZPZE1IomWlfJXyS2`}r>0jbD3vm}uuH46k
z`>Koa*x|)iv9>&7B)<+~kl-+54|2}8k=s?Kj!zL2<1^-mmsq|8X`zJ$h`^ayXDfs|
zbfYW0Z%^%SSttHZ8AF{&F=N7u*agw-j-27_$$Rm1^~1l)BDomn=2OcXSZ3w%LlP(W
zPcx_Qg*T5YX0MPqI|9wmXkDS)rjF?7PKy6^prx%$wxvn09Xh9li>Yx7^mL8PQFV&A
zHWT&-$(H<bF0)_T*)oCJ*P?TTDXK-dm2oI{lQ#Eun^TnVyEAWHIX!v*|B&f+GR=8}
zYTLv8Cn@WgYmcMYUi?PpO8IC0tf-WR4Y)maw7lSo&QQj8k1vkPv%Pi9|K!WGQl)B3
zsS|%AQ}-QGH4gi}gU$Xtd+l|`-`@m2v6Tw`J{e3$O9%+T+AlbW{i>jHJ>3X~ug70O
zL9nkV4NsWyE|lCdgpKMGDpQ9|uB>d{yY-`@Jv-7H`w`YvdPB^D<9ciVr+L$!9hRP6
zSH$2_PM(`7cB{vo4AF)K{S)&&j-#)T?{0MP!v5G#u>X!5V)liS!TPbS-^E3%Ca!=8
z65*D4{gL<S&4od+*c_3PdDX;3^N!GK>s3<|%?Ac0&o@ZDNoLkij_*ucRe|8(ShZB0
z>XTQ^CxST|COFHU+`1Xb3!mr5Q=PcK9a+Vv@$$pzn_TWBL>pZ~#AOfFE*?<INei}c
zJoqBZhRIq$bjh?Wf*Qm%?3NJ>A>MtB-td7C>n;h8yt@dm+Np_TW~`CGW#!?Gv)Bn6
z$y*Fh)0Lxd3HdL%P{_Y3I%m3@;2-nM>qmfx;|<$dSNH;%0ze&GIss?2n#KV5uo7BY
zO1gQ%fij11n_!dV$=3+A*91?usb~yFgm?T*3G}=%y`+^AiRST~oR}uJq+#F2$t*j2
zT4Pt;RDDTx)y>qCZRxicC*_({=dBe{)y?A5Y<+Uj2_OFk{Gnt_y{VqNXx>(r$NLd(
zN$|GWCq9gkk|<5-%@t=9vfXn3X*bzBX{M8Hdy6}AgA-DoE7^jYaPxKQ_jI-^aKm|=
zrgbfrjVj#m)Bd~-tXwJ{or6G%9)|~jiMqG*&2Zs+nwXI~J{%r*ihftS!Z%Xb!VuYn
z-E<d+#LK8gO@*_U87|BjDJN3G7`&N72GC0LkAxb09CgXR@Xc_iQ&lZ1bgQX}np8;)
z_>q<2*R7kmP7k$q>&rB@GRBs?e~tONiUr^)0g~nMx@CXhS>ebK4L;_F*{jNJtl`0@
zf>G<C{IKSHhd^!LbqMs!_}Rg;aQ#qyl&v4i!ynWYv#86Ym^a*Co@d-kgk2CwpdWTz
z7T?4Ukq$S|D2;2#S#Ink{Xf}uEt$O_Erm2cQT6jRQ5F{&=HGl|V^G>>V($KnP*bGi
z-yqO~x&SwP=%jah3|7oc*mJYKSRI1TmTUX7sCcQ)(CbiJRGiZYPh4V4xz*)vWs`%;
zWz`NYdz}JYPBThFk9O;gHF<i<Unj;zWhm!=$c=$xODv?mD>Kg#EGrTYOU|_pO~_*x
zN9+<yIaHMhS6{EL=JJgvU+aTM2#76Xf|3JWm$6eC!#uS>zI(N6T7K$fuc{vLVL0n#
z;n_XvLig1%U&w)#;lF!L|3vqn3i(C%ebVPkqi-|1ygW=5+-EnZYnsg!>!<18f;I==
ze#DT(+Vp4=i!{}ox3D#Bx>YG?6l!~hpB|%9K|R3_5SQfPpXu4Z;D=3l=0+vq9cc1Z
zt0BnvU^j8%wqe6h1P^|3@&;l0%%3;}m>u&EJ(A<LkvIGkvx$~s07sYnDrZdM!S>F-
z0)!f(?O_W|Snp*XZ0HYE6Mk>lyV_4<#T3idR=Pwt8P@s0qx)57_hmH-Xa}Dp(Aw}U
z$Fa(B2lCkQr3XM7r>_`1?=R3VruhF<c&-Wl8U(3UNp@G9j&;Il`z)1k$+)AkU43BT
z)yfl1v-yY*yNa973`(jFcLIweFtNa@$rE-ma}}wK#LE#kH+SaeKhadX?!x6%)51+m
zcDF^MW&hSUIknx%`Y6@K>DXcr=I1fq$61=W+nzJZ4D*P_Ih}f7M*m7<XY>`hso*fx
z#kB)a@SxT!Si$e=Wv__IrF*I%WsAr>Enoa&(0Q4#1`&1=t(pUlq-=^{ym-pB-Akel
z6(tnQE||<s-u^l)^Y3a&lO3I<gREoE#a0JH!#|6ASmmBo7VZr%F?SdkAfGIVqf@vo
zLsdBXxspV@jL1k;&hhmJ?*o&9(y+;}XqjozsH_!XFhzJ|dGmO5|BXU5t;mcgFS$)T
z`CgS-s+cgjIupAf_!v;Q6-tvQnIrm3D6QnBj4_}0cJ%4+aq^kamtXn8W8dvrT2YYY
z-GR~_0QH*iu09o3eNlxIRpFK7qb`Mccr~?Mb${)xZc3l(o`-*0|C$OKUrp}tpg#Hj
zNWP^9kS88{ZrBl7ZP<xE+2<NtHb8#ZRoy(Ep)CDMK?^Uag-5f3fMpVgKITXLasA^!
z_s*=igrk{L_|g640{xU+Rk>WR<Ao~(PJkcLbG)FRyULd0@SKPBn%}#*o@R~3bG=BM
zEnIlQ=V$w2Sn=A7VQVx=3r*QioPO1&HtgN}YL^P5M{wekTw%X62cVxq{}s^=WQ+N!
zlMmT3#V9psD-dnLBC*Q<AUv>EX0-xgh#d`(^c9AO`u!6~^o*_3(hnL>O}4cc<V>e;
z=B-F1H!`o3^q>%6qjcFb8w#?MZI@WUBr|vOAt+f}>p0BUMT%VHJm$Eu$i|<Kr+esm
zQjd#mb<0r>a=>kBbW?DS&&>H$hQH=@b3Pr)0;ahGW@$8)@7EK}Kkv)ozo*WL!{_km
zncr!eb}}g+{w2^?6Wwz@-8Hd8D@VlCf9xW}PjWhQ*(Ob%*|L%TVJC<93Y6yE7m5*C
z4S7O-8>J#n6S}?3f+3P4P62+w@2x}Oev?(co?HJWGRrzU$lKJe`e}M|8eB9PM(^;U
z^+Cxz*xOkowLW;by|mp$l9x`yFC-mJGNTbB+pZy#Czc=`F*p8$7=QQ>xZSG<98P~D
z&o$CUR`mh=SGSKQ6@D4lx|9fq`HHsQBS6B3&a=w?tohfz()uw4y3wmJzUVCwH^=wW
zLZ_nW1i)eSmM-0=pw6Zpq1Jt<FS=XZ$=^?~Ow%4cCITq>fm0hFpW@WUXLvgOLUGJ;
z`UUYSpG}=O!Cx!O;iI;X1g^b~ULjI>4;rZoha6hW3gRKVn~nRG!#A-TU}eKPk^%LS
z*WOA`6;ikDMC2YHijo;7J7MJLWxsL250g-3s`kc8j%Os2bM-AJpS8~@l>y1G)jex;
zco!#kL^!*p2pT)9h=rmS_+O{)#%x<<9a$9A*BNq3!>{iPn(1&4G5wKWZ5C-DMc}X|
zHPg1Uim@B2V(!>Vg*&z)bE;ZS5#Pn**@$nZ)s3S1#?@lML;@t80jD@3hZwbg4%5^T
z_tB(VS@;y%%LEQXS&gk%5RYf)RO=Nx(t+R7tz2CxMyrZgmb24{_azE*d00A%2>0^C
zyh)$pEP}?>Y945m`y0}iw|_!Zp=RYE0t-4YRbN8YTn<X~wS(xJzab98rV*)?XuNVc
zKPIMO`8h21(w}1cod?R8^dt40-}ITBwCJUgBU<PZml^yMEf=a!>!=I0@KkMoP7@?#
zTbb&-;q=qf2S=G)drV9m6)3v6n1}`Y*vSIsEWC0bo2%wslrmMQ^z$lENzrs?k#Q#_
zSBKtrwb`(Cq~m`&a${?Q<Hm^prNo|BS2=4+>eSR}rdv5-&Tt+C*CHK$jK`gu<-*x5
z&GgQ0;ne2lZ~G~hc|eTOc$-v%DHE7%HogwamFS~N?88-yCVyKEiw;$Z*J~klISgtU
zv<+UG>sOu?zDlBYLfj&wY6+uGL>G#-O}^!5>F(PYUlYmOjZb{&wz(`QxU^LA(IAPU
zy!jYbOKYI_93E(47C!T3oi%Wz620VvXpW!3(3hS<<I9Cp;m;4^#*r~5bz6CN>#gWq
zI$*3l{PBLO>Boj|IV{gX1>cS6REievSIbBXf60t8@r&7|neN;_LPCvStOu&XOOA!n
zXUBYxEdHwSo+E6+%b0N6k*l4Ad90V;#q}N1r@kK))K?Y`bM@`+>N|P6`UX<p{NDOf
zCz^Hb3rtpSA2r#gHIo;NFZKFki2AtEf5z)SzRZ8r^N-ZE%3olC@|*>#pBcRe?@T;p
z7RC<8ME_rGf4Z^G$x?x2R#W!ES>f3I`-sz33yO$5^H$5@t!~fLb~wFo;Ax_rAC0gz
z^<i*T5VzNq)^ZTEQ_ZSG8-_NY^77yI$-9V1t#lI2OS?OJ^{ejA@S$l=h?E}hgvbFr
z3+K~JKP;oNR~E_CH?z+QYARu8v>{O!uGyU?IQ|aP+62=Y@nVkuXD?%??&H?WN7p4<
z5H=jQf8icG1@eesQ!VpyUGD;eP!>Y&g85G_W)-y(gJwrjyVuk9aLe25SY3Ra|6KQ>
zmQ`p~4GU#c^vWXme;6FAO+cz%o3Qlk)FLkHs!^#glRUcixt2$y)l`RnEPuDBdqoVV
zVA(prgF$Yfb@C9`Ne+v%LDaz)^|m5+OvtWsM@K_$Z+~8enk&L7)J$7d9(L>s+gj>#
zppq`vu&}BMU#@mYP)$CWP5YBwn;?D0-{(9`u;@8;My+VjMKluLVzn$<&xbzsw34uW
z|Ln+GV37f>?5DrUA71nPRk_1!_n*fZG{656*eq7E`m%6;f-quTJ!oHTAlA#8$o|SL
zmTS^PcFPx^`hHJWy`5mw)oAVp&kZ!+RWE@_?y~_ztjmG%o`l75djh4)%DAA)PMwv7
z_tn_(_8q$F%hWPa;+A)+u-%;V=dlA4bVbffM>qOID-jvJE5w_wSO1t)w_u!SuN<k%
zE72`yLKri1LZ!f-6OI~zk*b`admLL|<xF`mCXaniwb_BETWn9LtoyoHZ<GIk2_W~5
z*;(iweGNYNU<tZe_nL6#sg9-w9_wgo@Ax?&eh#(gn&?2Dm?*YDUYr3Hc}-=}F9Yk)
zcwg%j#fEq?*|uDb^w>5|;{%WW&HZ!uk3$Vq)wuN^tl-^Y_mS6oMIRFUE8S5|G~(%a
z`lZ^7Yc75|-D%{uTVuAkrk$X)RzA5Hw<K*CtSo9jia0PGEpM%D7`+=PCOsd?_Q*Gx
zrE#UT;|5|~L&@!<WBDf_G#e_tUN|2GoF(`vdh)5!H588FruuYWgyg|bcFi$A8aOlG
zK+COaaIeAEVE6T5#VMRGoD6`>jstk6eGWV{^<J{=2e2H^f1W)(QAS-ahzdDb0Z|qF
z1Zs`&mj4XDvF*h><l(pPQQ6`hfFG0!tLh6sMX7je?AnInec3ubL+4H2(2(ZI&TcSF
zwmk{L#Bjti_ROs;9SAj3Toh}qKs206cGGxmMJFn}iUB6jzlI+D!?Bq0o=c_&shT;f
z_;v)<+;F<9h8#zRd#bqqyoc?`>+C)}*(PVG&%-8%&;Ngo-wpl8+MAAtUQsyo=E|X;
z8~Eu3nO_v;=kaZr)9GV;>!s^t#`2|CPcx$;_JBDY{lAs?hiS?$m7!wE(foQqTUr3>
z%+m}|w!?&7t(bc?hlb&SLPr!p*k>`jMSJylPloV%W{)#an|4M+`X+$3`L=2GU)Fx&
z27TDeRJA%yVmJ*U$XKJjEv=0f)rCY^V#x%4J)kq=(QK>8<*$zO54JRyU-gv7>9#rW
z<?mqTD9~THc;EwD!D=b@lqse;oA}H=#tum1QI9JsvSaT2H4EJ*iFV)xJ1-R=ax37|
z7V=>!AIy&Ta(L`G0peTEjCL^R9%W9)JM<h>@=tqO>UGj|A1`}0w`q;&z`=sO6?RtN
z45uVqIFLV3xA;Nf{A^Mhyw{mZornpa`IX6&m-mu9c@tqEiQ*UIg2OC?r6{cGs*pa{
z)qmVYSCd~bhC6@GhYv5+;J&48oN%X0?6(`lIjwrJ&7EZ17~mY9^<xxf?c2rpzg;_*
zsGVP1b$wywshw-$c9^7J%`RwW0L_?TBRqSG<Naqg#{OSZCistQ6X!EI`P%yXDbqkb
zS)I-L3`-=&1FJwU_<3ckz{N``b2&Pe0z}wm77wmwd34VH+W83%K>fpRzMs~<=_^^v
zu^7ElJ3Bhd+ZbFeq00(8*><uxBTI+xU!*0;?_D|z`FcywSxk?_o-JBi`i%mJZ`#Iy
z7aB0FgM=u0r7>8pD#DA9c1tll<=V>4(l>twd12+95f>|m4-p4HSL_IiO>n)CuQE=^
z+gWLMrhGVz!cD=LmE|BucJCKab&cp$;;UAozMz-Q>g87Ef^Bi^u`T^wgpRQJc5KF|
zb5*9efnMETHu^P{3>j9}KAaOy3U47zjLS~Le$1i2M*789xku;+qjzeSzF1Y;P&vHi
zVPW|kq?S^;A2fT-sBr$}D#14VVfx$;xuxf&gIqR&->oH3*3#RG@avEb;1D6<8|(&0
z2l5O1Y2M7efy8A}Aqu4y6JPsHCcf=pXBWhvnYRlbrCCm|_GA~-hJL(OZUsEZr5&;p
zSG0b#=SAnF!|#qRzc@fmJ8vQ<6&81R(~IYNMeBPu#^aa`R@2+eYRYMVcBx8k{h7To
zw$IJQcv65`nLC+G9d$nrZr977T0bgJ&Kt_eaEd>}ntOugt|M$h&&Keb_96_sv|@`v
ze?V__IOXMbc9#OxRO@oLPM#2y{G!tA1Z}#Xq5E6mJ*oq|PjoL0Z`E&ciSFNrH|RG2
zNp%0R0H#-vx~y0xvp-Wj*B%5h`9jvxzYI_1I|gL}tMr6_oa9LN#c}4m;`njl);A=(
zYabR{<M|&n`mZVWK$~`9QMU+2^Bd8Yzs~7v6}`%cl$WOLH*WbQlh78B$^4!EYyGXr
z^tXYPj(_#lKXUpTxS#z-H4V`_(?MPi`+p6ztS_ytADC=Az^H#`$iOlF0`+4O@vAG5
z0@*`;eS$>g%i&-38caY<)Zm5-=l=cRUO!iZ+m%eNdj*o~i+@UM{qOYG|MmF4Lto;-
z4`2+r!GENQ3jW>T|Nd2|IQV`!A!;}!0T^zZ?7*-}AEeW~9M0r?Kf7^diI$Y4T_H)n
zWmu5g7{vdPdARTv>j$dDt^Ls$eh9Ah(o3#acjS9T3(Ut(jyYkPF7qd0BpCeO0vO$6
zoRCHwS4bQ;r|Dh4xOZQpcYXWP@_n%eGo-%k*h6%mj`Gw0B|924q7NYn`Zwjr8X>9<
z$P#|ik1jq8Y3J-o<ZqAjD_P}d$L~#|n#(2*Nc6F<<oum+e98Nbr`R#~Oh|;I*yzEq
zKTV!1=M93zvu<SUtQ2SJk=!j_Ue?d*sxR<WX?+mxi2dSt_HIfO%}0CL2WOKY7liMa
zx&V*@OJdi<sS!ozORAwz#5TBt!_!S>7p6=gB`6tHVdj)Cv3|e<M();NucLpr-yG)O
zC;9(kMaEhLlVQKEv8C!W(k0!q<Hfr(OHUu2OmMh0$6$dLlXT7vB;pAfUL{kuCEWo|
zgtOeMg-Q&ctYA_wKLi(IdHPn^TtwCb`}?@kXvZ9Lj_VKAeTC{Y4I@-Mdq|I7$wSh~
z(cYvvIcLqhcRkJQsC+I1*_V<1<mdxhvwVs-ln_m44_QlQ)%!f(c>U?S$wc>E1>f(A
zzdzu<|5o3xcEbtO&h1Liw{wrRlg+i`@=aI1OZwzH+wy(CZ@y8=cU+%*Pi|4a$Mntj
zCFL8|C*Lks-{8Lay00T&QJ;LzQuO5LEezHUUW}hiHhvkgvxj_4h6uOI{P(-!?+>`|
zZ|FPTojrZdV_;wOKZuQ%t@{sQX7HG53PzeL*MzD^SjT6=yM`9Czt|#Vmh$Gja`t5!
z@VEQ@-X`xd+A1--crDe0y1Y>YUS1&o&(yr(Vq|6wS^OIQSB^jrYFU|RUf>!ZWS$zk
zVw8#H{7-8{pndm4_dh$QR}H<{H21G1%jBGDK~jy{Jf9#;I9C1Lh%t5nLhr^Le#tq|
z*bSmqJPgj;ev9xCJS+;f2p>92ud%}Z4$uvkwxTP&o}Y*RyhF&*jJl#o{vbL2<#r^O
zN@K`tsTn33Ew$rZwPoNS5X&q&7=C&v?C(49wH&>f|50?2I&$67aJrPgh2xQ&7u;c}
z@r)xHe2Y84Jmcs0FE6`7^)S!G9ePZw8FS~mDG71&g5?i`BBO)NL>pkI^HZ@yORl|q
z{lETlpZYl`bNUvq*FUJBg|McucIaLVBf8Ldc;a*QPce@&1BG;(Mh+Xw@`MVkrQ*=}
zNjb?lziLG@Vo*=p=6-lR(};fCm~E*FpE-o>4(+9e1KHEUFfmZ@6#{TsP~-HBq*<zV
z+|*>-?|?>AcFZml%TO_A4{QvMfpHdhHYuD?S3g^oYXSH=1ozu(ld7te5{Yo~my8J8
zjON}9$MKp9zCGeac4hV|)Q_|E_^%9{hw(D=aLYf<?i5bl325UqLqj+YewLjipO*IU
z_C+OPb5m)CRd&%StTf+drQJAv+*G9CS;yvjc%piUQ})bq=&cm}AB{=DYjhL@m5D0$
zaaC|Lkp_^zqR1AnKch;ra3V*ogg@pL?|&$n&9&WT%%{Kfm8*_3Iu!M;>+r87Q1cyr
zJJ;bYf3Xh#`kLMjk5TP`^M_2~AqIU>om=b9F?koS-ka^k=m>|_i>?sW7IKf4BSDj@
z&#xN_CMA2w*6xBCS-BhL^0dY@yOiz%nrM^A;!@A4%?}=i+Kj)b*16a-x27gHWxsaC
zErSy$jCe~JRwoagKCG}ttnlO?YVDR=i7uO!V>Exh!5Ga$JIO@QAX_B<Mo8N2?Bf=P
z+>f4oHI;d(`P&*I4yK!B1}tNTdFUwYJI$AA(O2dSm$6=@%EB!eptnAm+V>^h!;MO{
zbITubhG{ul-O(DNjCkIKovWa8mhP;~`(EyVTB!d$CNfB`uFC<IEv;q{(Z?<^Hepa>
zm9G?-K=gh1%#v!99Ior0!5Ay#sk|SHvI13E8y}sUid(iabe2?mf3ho1F9qKzD*J8v
zm1L^(?P7K#c55$d*(5mhg~8Xp7zQ%)R)lY|Ul9$UH`dWxdbVhK>FDUn?sef$$GiC*
zP;2uG|IiG70DChFlrui%852t)5V?WT6th$+jx880Do1pL^P$VwnX!)t&fO&<uD%lI
zFW<*ANsuB2yBw501+dYrwrFbQr&fqJ>zQo31JX==c=gYDsl#JOZ|TSDdh1KJg)pc5
z^73SuzFd1o4p5?VXVkiU6`6F|diIc$0+fZ3u+LPmcpbIkP;wu&7OhPmu1AwAq)tIq
zxYkkl4SqBR-*$BPFBoOs*XJ)(n+mQGL(Dupo0Cbo7MpRNBc|%x;hBV2%4f&t9)C}3
zM@X3(b#^6JDgN53hnWQ<!*RiK4VCfV!h`Ymv&EcATn3KITnGCFmKM88|B(J@#Ag|p
zow!q{Zy}Q#@w6W?;;~5Xalti9sFV@kt)Z?p$5M@0DuV?Nj`+clb*WQ4+?}W%Xe);-
zO&?F!#4W##YUtxndC<pWU=;Fz$b4Tvf~y5qqJ0rcocF@1a`vjY<M*L;sN=HY#&gjN
z{5Gjx27Ik%xr?`t3))RSBicAa)EjqmI+ZmBi#uppVN;9Qb%@sm)!~tRi)-F)veiIl
zKU&Jm=iq9a%Z{WkXQbXqntL*@oR>ITr<ZM#)%Di}6~IL>9_~DQJACU-1>I>G7LPgK
zgEgo<roRP)fBz)}KgK;=(Bw7KXMdOLdr5`C)Z`e9c}Fw|nsoGjfi?JrrjTo-@Fr0Y
z<Eas};UUaX4Bg{tQeAuk@a1OMO}{3(Z3txzyw_1k;N5{|PJ=qA9q`V9MDyS+rZ&KP
zADIN+JF(>F2N#|RhQufpw-jSm^heWD=zl>sGh;~{7u@s(m}u8A{({fB>T>n`C|6G^
zSpEexD|FYvxRjf{?Isz}`18R2Nax~u^+qWo!sub&#kgC;ceB^Te2Vnllzwb3J)NFU
zejEaObnxMb@V#lhWFgpp)#jqFPyJ*R(eSV{l+lr;7+(0W_HVXxq`MO-8E1+y>Akzn
zSjU0KqUMQsrHTH=ILEzeeo_-#8IoZqtyFdKZr(1o)j_foVW+i7g!T2=JItEO)ANCh
zBbottok7RTp5@jFQUuP!8f2WDOQ*!ebhsdMFu&x-$HKl2Y+zwOQ4h(l?fv=UvWa}z
z54rZm;TW~=M(xpSq&T=6O*LjOstTvtAWUB5ajXqV9X-q5Pk#OkqL#nP<rjqV`6rV<
z#>J>a2qjbWSLkOB#k-$oZhrASYJHKJbMC0;G1)P3Tg8v#CkOb1DEW#%{sBdPMX%%O
zvW$1RjD33WgfgDZ(8HP|oP=FJg8kw&=L3GSO-?n&4<uvV(MMFMvS2yOFHCFavXT0!
z>}I{L6Q$uCJgLk#+YY((Zw&rYIp1<WQ_mr)*nU8er#;#SmTA8iXNq@OgpNSuo!=%E
z^W|{)zqZit{@r`$^Jgzukv*!SuJyCMl4A+kj~B*7P9K&L6!mqjGd#DYj+(P38bkL@
z|I=~Jr`WU2t%GZZ*gCi@{KGEA9ErWhqgM^1?rGxD^4-*&Pl4}M$$5h)KF)vJwmZ>f
z`ZWv-?UD&D6-yqur9M0Qo4Hu9H)9I&f&hCo_RS7CCT0%dw}pT`njcMmTHhM{KdTA1
zP8mcQ3rD)f$3e<`JdPvDg(H;%Xrn(45Oi`IS}q*vxYE!2cLZs59#zu6K|k=iRZC6&
z@Rf{fDnA*QeD|7<q=OUrk>Wy9FMAmp5$of({j~Co_bY$%08jQSsDxG5kUd!8|8g(q
z2-P?KN*+8F)&D#2^b0R(7kK`x))^4sX*o$Dea`oM>k(j452Np)?-3u#-=y%5a<<e0
zr1O>jp+8(6G`#iR*j^frJYPQeQu=?vboJUVtvrRL)9MU<lNHvR-^n7tY7Mu}(otxG
zk5wG$z=y|?xvw8Y7{Cht<nhh$-Sa=QMd@~D%{&g9vB9z<`l+7#7RMIZH^Vphsia-)
zX(z{?<Y%<yo76w7PyMF9x|`eI;~=qwOmHr}y}WW7i-KnBaDnC;Uln*{4Qt_9Xtl%5
zpZEjG%<RZ}Da_<=4F}9)8-X*j|BSs>XNHpxe5(h<Y=4s;D93B~dTJe0F`|Q;kc$Xj
z0Wjl(_)CNftUrpH(YbLf@Qdeglc{{3`uT&d(}|<EaM+xM_5E7fCC4oB^9os$yr%5$
zERKNI>SYbtO9%?yl%4TO%71J_sC!K6e9p#BzUh-3{RcZ`N79jJ2_8G2R#UYfCg)zw
z54u+FuK@>GPZF)Pd+(T!a;82}pB;IGzk_AnWf#%ar>yQ2+V;(U6SBicH`IQ3VTIRU
z`&brSHLO{~)dSm#T6Rulk1XQk3Yps6y2*Vn=X+yz^zXFScB@tz45?a*PL0piADfC<
z&m=RGK#?Yf=_zn3$LbkMeNa3y73^5=4;-2Di`-R)ax(I=ZZIgb<Fxc-vB#x%*D>Zg
zW~ZsL`~kq0SSBbFJ6FSIw2TustnQ)taqdu`9eAkUFID?!a_#^wk>L7oc5W3KRl^+3
zFe5iiHZ_SM`&oG0>ijUrGt9MQDj4Qx;RwDrW(V0YZ__AbPhgz#{^}PDNTuImir+3y
z1-tnt7TbX2SbeleBiLEs0G{|#q4akOS!On6&n#}r&MxNntO>!4(salr7_Uz7KWW6T
zCfhI<Bxaqw-TGMb*QC|j%M*f;U5&wM<a#OG19^lR`ei(G#}lx+vSl}U_kJP>>3j!W
zz(;sZabtRQaZ@dbrK?xyO84#_*=CXpvpwkRezaA#>IeTA<8WO!((YdEq|u`&tjYG(
z!wD_T$cInxx8|bvZ%B(ITxl=sCPuf6XcQXoG~KeIC=6b9W<?Hv1-@x9GHt?5vzizZ
z6$QZ>hX3Z%*fO;r)#JE&GZk>8rzv|$kx+q)jhCr+;UqpA_s7CDj>-N=q$`oh#{v-$
zp7pB|-4v=JiS6HLzdRhKTS*b)_kxG4kkhCJp3N?4dUff9+BcFJomy+44=QX*^`F42
zWc!l`0u29A#ZM?BZbi&R-U&N&f}PRVI3A(s37p6|k)t(Y3pKq=w_yGM1-wFccBpfN
ztAJ(bI=lv-*b|VKwYY(e{Ilhp%`tj0i|=t9|MIyIi^{;JcYyn5i+9BCRhFEK`wFF3
z($hL>c$(i0a!KPlCokB`(9?gUdkAu}!9TP<TYQ8o)l;fcANyS?BmReE0FxuFYG8W?
zqfFU_hii(l7RY_G81!mb!zb<^Kfr0L)nXufiGhfFz(j<|5LuiNGQvMEJcitj*^xho
zli)26w1HEd-Au0UTsbuWeX2MeL04bpt0JgRH3Br)3a4k+2Lp!(d(``bhWon$G0r^f
z4;d(=L|H1E>KO-1ZS>#OP^V%nx!RaY0sK`*nZFJIc`4&CVmQF6*epLl$!4_N?NaZ7
z{jcF0iF$wN?^3m0$+_>ars7T;As$ohubGe?39N`~^rROIBG~J}4Yk`YJVJn~>jhLX
z+<^US^A-kpg40kb8LEN`+EB$(iqf=-PLMT*R3-ThN(!tZW>m-j-qG3O-w7TQ{nCKZ
zzY{a0B7Zy#X-DI*nY}0=|IIQDb!zv{qWl`63Wt_}N|{}hg(HAi^ziQLJU=b2H1-iR
zuVL|yVK_Kt4J$;Z{afKr*o)ShC<SV#FmsHn{q%yz80GMtVQmJ{WLpD^ep;GJ>$n;4
z-)m~PS`BwM_L4$VP{lpFs2;@{M`>fx(;#}eKfZJvR6WjbVH_uvru+#58%CW`IXpR6
z8ezjIq-ip}3C<L!Dn3n|`l4nZ*i<z5+k!!J(1tOGbHC;@v|etVNiH6D0Jjd6rqI7R
z1M;<m^RUysH`NLDj2TFEFtc>j4@)oH#S2EHNB{mXw%kipE&9^~s)I`q?4@?%z+|SD
zgxqZiR~^7@2v3_13?5DFe2Y7Fjpl$7a=ET{P4dVv+bs9o54_GdicQ60Z5Os(DW#8J
zhW#)+z@RCfsBq!Qt*G}!IyulL_!Zh0yXpq2L+Bc1x?|{l-TB&WeFJsauenM$l4P78
z3%zghtNfV*BVRh8+c%>P_{zp$_#8+Eqhs+~YQX_>?(g}T;@X}Zzf3JxV=1EsFBnMh
zV(OH@uFiplK~9Y}Qhkg^npqB5h`s~|ql2>WjeVt}#-lY%1`r}V<tYp2%@8oCn$8(J
zC<EXYaCUxf7QH3g=!t9^(aHSCgGOFit)wClnh5_zcRV^8sx}lZIuI1k_kvpWxoko(
zyaSemxwtf3%{d7pK`F^~nGW$=k7H6)rLxnIv@Os;9dY6Zg{feyR~YlBqpoI4^H=KH
zfb>nQMFp`!NJUCiEi-8xy2*SK+a;KH0GM~V`}x&G%Q(YF6<tD_zVFZXlPQX`9`V}~
zjkWz!$psy$bVo_lK(fuBctU1h-nxBzpTKRnctW>S6a?U0k+`mGu~aB7yqS^tkS(fY
zLo=$fVsZArv`UdV-DRChY03^A;+^%x84do+jl(uH`2@_`gl}v5GdSzvP+a;mgc6~V
z653gw#?zuzO@!LhpCyy?j^oFO4qJp<e~5$4qO<73^tK&Z-fQxoBl2f(MY+O?a(&CN
zCkf}k&tcCt)_$C9(^a&|xwxup*Ng5(cN#4V4-{aB4IjK;nkxmtDKeue#S6YHSKG`!
z6wv&EjeGj3fjQqiWP2+$v6avi$Clhqzv6i5KJt?MDlw<b(pM7hc!tDye1H1p=|V+U
zOFjl<e1G~z`^L0lv&Cpcgq_FY6j^ay%0o(lv(zw`&)9I>ilks0n3!WUAt%8(tF@fz
zH4R2rQhJGyJQcJIt^H?mZkFG*&m`x{rh!y0Pt`to!Q~CLFC^zaObS3wwk;CI95!LU
zWZOMLlJtFi=$`5=&t2N8i*UAnAM5pV%q+3gp7plk6|>DlzAw!oir4w}5N{aK24q}Z
zDw?<01FL!SbYJXos`;7|)d}<EGK`0vM!&-z!e-sQnm&oVn4s?>Je}wr@@Ki)r6bx;
z-cmvmtQNB>%Bv|+B-Dh5u{{sR&@8_Mz`{$vr?QS2Oci%DW^jcX;-#jGmf~%5Ey0qR
z`5$5lT*4p2zr5a#8>4zq6X}xsUim{6wtS&QQ?a62Ty)Tfa-7GLhm~}Z=sbeE;t!+`
z{7?E8)i*Jk10xdGxtnej%<5dhYWoRYMd+Ah#w-soAWmMmg^vyz{#C4xT4DRfoWij$
z>efusxQ3-%TBxn}z=KpeWKp4f^kX77>TWAaUd@p_pfnjNuZpE8y1K%TUr;rAHHqTX
zbSv4QkbLtnxuv+1DedPBsQwzS^K}H%JK>g#1^L0(;khAoBs-7;Gp&Mlq5kAgESB);
zs-wKnWL?W<n=PB^mzx5(?i=BUU)BXGZ-&2zVYs=hD~%>lBK&zS#b!1qMWSB-)FnET
z9`ys&(x2^_ocBK2v*Wj<w+%>Mt$XUCkc9c((mTgze}8dh|JS|cuj@`?%5cxqlV0av
zOTF4>8rh3Y)~}4RplYN4cMf{AsFzE7t~&hbm;Si0sHyga3#a$qUF;QM0eA-NuV^_*
zXIg&<mL=2Ys<kiC4|wu^(D98_<}Jy!JArF_yrl(gcX*xaXnSR2wvM*9MA|bEHgBN6
z(GY4hp1r3k-BDN!i`^c5T8>oUo9vi{voK=*hP#L)fMWz3WP5Ui%ZL3{G!$)PLm&UL
zF$X?|lTt@eoNf#Tb?B<HkSM#r_v-`f_8GUNFxx;>V#Lv=nPfJ$!`zm?HD);#!n!#-
zX6vIg|8+Hwt>>Fxai?JpkDpWG=bL-G^l!!Q>*M!z@w0<xFTG(_d_6UV3!`&qnkOp^
zqGN&MK;C8Rfs5xa3hj}(PY(gu&u-*rlb>DUK0L?c3^e3;gL2$D4luXQ9$=o-vv)|a
zx5ovk1UFDU>Di@4$$6bf)p5b^s~{9JIZj2R!|Qs-L~~s#edRPb$F1aO492s<aLos0
zUUsgi&YQFH4j$>6e#y+GWCGy{Xt}ZlLsgt}p?a4JF5*nY%i(jc$(r?YSjUs?oEmHK
zMf34i&uXZFhIR4oSNP=Yn>smcmwONX5u5f6KA^}<6P{%=v-FUGZ^2CamFb|ZuzxpJ
zwCqBc=aBE5DjIz`T=vcu7F1Vy;p9iQ^sK0$)8PvjvW~W*js9wG&7-iL$jgpiz-LM=
zxZCQZ1FWYr`tGiGVpX$9)d!X#zov#0hkM*8=DkQA(LvU-aM80{82<Q)EU{Dmi4z-x
z6JbA<D^uy^p&CiH9S^i81b1!Z#SX5D8`S;J77<4K=|~HEU#1)DIf2N#2GeoI$LKx}
z8-QkXW!6DI%9y>4A3W}MkNezXiF<VL2*1scb+{q3o;R&MI{a!5yj5=!kd|#E(aSE|
zriY(V7!2v_JznQVcvWVLOBQnpZ;b@wWu=gQc!PdBd_o%$&z;A~Gc=222B&qj<SVN%
z4P2wH2aANn2pky>11>sf&j`dC+Gmmq*~}IL+(k2OS{K=r_=c+CQ0@l=YQh;%r2+qx
zRQjq?em*XAb&Ztl%h`m*1`lEKf|c!=o2f9prKn<M`+^(!narF^cDgGv;mTBwdgw|V
zfXVnP7!Du-iQyZ|+IfSz43GS*!?3JFx$JDiw`{9>w7bWA_qf?TZnMXt=iFnXdxY+>
z#XYvUhr*XbFQx9G6N0>z+apuKqruP2q%TbDEccl09<4lxzIr#c@L1v=>)fNteXDT~
z&poE{2w!`1OHWs32|x93#1k`;7j=N@H<Q5QHkb2m9#CQl;PnwU0%jXWTC{EJXW9WB
z@JR?C9G!(nyu77n#EWY)(@4V&XyHV|m4#DzP|biu%kC@_2DE2xpeVDQ*=rB>&Fsx_
z8V(dNp(68arh~Q{`~@N*8WW!jjIdLq#!pM8FCw3Nhm>GQ%N!#dxzbCoEep5e`783%
zV6w}qX+E61i`Fm8EXjiI)PJWakzS@*g8Dww=;VxO{G!2MD7GluX(DZCSL6_TR7Uxe
z>Bq?)EKnYu1k5h0Qwy)KifIb&)bAiu!{6GB$KPbzFmmf;(O*Qve`ABB`?oPe{TFs5
zW3kE19Z0(9DT%vm<~E9TxpwjFXY>XHI!}Y)gTMMz9DiMbDs?S^HCzY1?DvVL93Pc9
z6$^>gA|p+p=xK_TH(qfD>&jAV$5#~TwI=#5%{6836lmySlYghRb0N&f%O3K#o;{5B
zOlE4+%hr(xa9y#B1i>|8RyaF|g8_sJz6A@EBL;nV-`~X&3Sj>D6sb3sGrVw#F|$lD
zb;W7U!uVS<#hfr2AP@)3B-0wRH>o|k)VUU^`xL=r9ZL`=TzvY+J<%J?O)uD@XL*gw
zQs~;5NyJiDY4{-Ha=A(XZa1M9&ntNo#y8^ORM+?_5yK3AjAmlijz1iW+%a{6(r{+1
zoE2UjJxK*q2vV8kPEPJ7xDE!_Rwr5NukYTO^LglsZPj{DhsEidZz2PSac*^6zwX^l
z-!}XIVMM~%LwRa9w7k7kZK6zNUt{)J3j#`GHrbJL!gF5}1Pv+C&eF?fI&>Y3nUyi^
zc?e@-^fy1h#mMP1yA3$wnCr6J1Uvub2LE0$*T7>%vq)@^#Raz+`dQ6#!zhzc$@IfE
zqvOi3Hg5^0R&!jKi!qi7!<&L>RoJJxzvS#8jXKOw`!Y^PNa>@4;!gmv5dw~|We7Qr
z7X3X=lFNo)HyBh&uPy4nu@7Pk_PvNLcF*MFlmYgHzd3<@@m=^OmMmVdtcqb9&oT1#
z7nEvh{RL(2QSKfUJYaxAKpxMzN9Z2gc!amVAdGezL9oc$1bCzHO$1>b$PHI5R7LpY
zea0}9PE1&bnn`*_{J3P>ml0z@M&0mN5_xS)A~ENqM4jaLC7gnEyl&T2>*0y!(z~zc
zhUg)ZO*x@e4@gFIKykAmJb(~CX7fhLibV5RF^WI0%qb|fXR+^1pzZNhIG-kWbH8hd
zdRZ1^REQ8~epWxcAnWQH)CsUfk24yR=l)G#^tv*$>1`2WQ_&OG1I_HRbq-?fJm`ky
zPoDi(epXSGhrz^Te-Zykm`Tnh{7j$=(3xdICz2%%ZF*XBKRWo49A+rSTo}`I5-L3V
zA5y@^dyt)d7T1l{N#BGQJWB`+4ypFF8C3<A=afD1#wLHEsw7c3oZKy|5rnV2Dq3;#
z8Z3KGbvRZU=L^5vPuyq0efDLUDzbCjj;*d9m**#e)2h?6>lBV|wrAn!X1lOb;VC;w
zYzX5Kif0gNG01GDrmgEc!+jh-YREC&tf5%oM3~cg7?nB}J~Ob$G^4!{WBJ<lu$Lv&
zhVJy8JtbnK!T}KVb;TLtenIp4ZA)aWf-X8Ya*`q=4EKJxuJxvy`I_0n+uHGG70u`x
zKXcE7w{<HA)7nowlg(-in#q~z3jKJV=$WgMYdbji@yz&XIakBXPBa?pQ04rjw?Ywz
z`(HXf&%0ehKN5tfN8ztT&Z>OQ=s2!MHBHRFh?NwKYL1;semOj7;}-adEnyJy2uopD
zlW&qV6`Wq)&HW2m!B*EM>M&AJyiOOhhKrvNXJLH$*uuFR*rbDYt%>Rjx(rQI{`e|M
z+EVrFd%fLwM+chzja-c`r%Ld~*rj8=;l()SGbH0{Sz`@h8+c2SI_!qupX&2@4ms+3
z$fVZSxAa8k(3Y*Aj^2alrVb4Mqf&je-UaV|W-NP^zWke>^#V27_AIg?oR7;x^eDgN
z!~sn^#whe=)<x0A+kE3oMvsm`W*mdeRM6IcWRUAk<S%r!Ng?dYOr?zeAxLPaM!oej
zb@o{3h%e*u7JmP?+NfF#BSbJ6E`-N3+5DbwnO_ROlme#k+ea3B+7mqpka~r1G#t}W
z&K@2tlD?)1{Lap}7@#Gt0f}O6spPLa#pIq9I(7DD*v-V~`Q9srTaLQpI(ouopXjSy
z8~;n=4>@fl**0qTw|l}d#MX&M@C#t8T{pJ}keW8;QWRY++;O-Ned}LZ8E96gC0h20
zPJ)}ZE|W4_)UtP@^969~shnn<6bO-m%`e!hIcsen6^z_wO6u{O3zbwc?(h#BPNOYN
zfa}OFh<@Z{7gaL@BRU?aG!C%9@%XLp-Ggm19R68}agx8-w}nfD%-KV>5ig;u|86!L
zT(I2rl&0b`b}trLJ3slyr#(S`X)b?47CAz?a@XYj9cTfG_E@b7mRUolEbn3cF!XB5
zE}Li*)Dv#OKVHs|Rp)-9ZYT2advk)i?ex4CZ-6~8@9$mDvkya#`fW4N#?2(#9uOwo
zL)qvL{9-Z2TBpp~%9itJHHiS*J(jhbR%+P_wdiN7c*JV-IcU@z-G9Q*j3&{~Xt8Ic
za5q2v1snMr1xyY-QO$trb@8UG8>?Gq#B|h@y|<by@p!{D3UG4q0tqGVOnU`#wtnX&
zjjA&zC?`D}EpAuGd9eKv9cwdxV}d2q9HsfDv&cRpW6KV3IU84yRiC-rfmJeHGNf>e
zj<{Avt_}uS4YDbFRGFWxu`&IqooP%>$;}k<gA6RkM6d`ziC2!>*lhMJl052JB)s9c
z%#@x*?fQ!4)xpO>WMcUGsVZvi;TAVBMiFcb<PNM^-?|}s{gvSBj2~cy>JKks;QTg-
z8A7eWk1d_ibg;D2!_mzfD3vx{>Tx{Z&3pEdgP2FxV~n>kxuUiLjAu}{Te!}J{m_b8
zZk{-x4QFFr$Q#QRh9+3HFSwpIVlbGU!3e(ZjCtAfv2hs^0&Ve@@MobTTPtiM3TM7(
zvO%?iAyzGe+`Zi-fB3>tSh5z|@ANVa6%1bLvI?0}U)>|pMnq$F`9`DHMHRe-uWhh8
z^&3`@Y#S(J<+W55^)qv)X)T~{>p=*fH`gP0&f<RJ2gR!`6!}*$q=+q^LXnhzS`~Xh
z?P*Hdx-a5lT2XB8d>leH5Kq%7OTV8n%rf$U?Soa}q#Lb>p{7k?KPzGj?{M)A&{ag?
zal!a$kcZ&~c9jnsYS&(Ptg{&o+Jd!EnCWGIbO#T&p1@|veNkpF>}>fbSEfERS1vJ$
zmO&=uv1Yey9?`KQ(Scb*{E=HZy5Fm710I*WW8D#U#d8?$_AiDU7>Jog%?3kh^6%{+
z4~TH&Zv2^2hSs#>df~;c`Cq%+FHj03;mi2`?U_5`pL?`tWP%A7JtO;_%$LM_ASMX*
z#Wkk(sF|1=3@V%1yl`rY*lT}Ox-rG9b&_qHk=uY=gvPXaC&6{J93B2RQ@5UProcp-
z-sSVKzj~b?^@~D&=Xr6jBK9L%prRNvIQ(=837YE88<DJCh|-3@mVCfMWW))$2Za_*
zfi3@pO_^8db#A#EoxNEL_X1V3DYzUG%W(h<tH#p8^RJU)b_7DCPHaY3iB!4%iRw2B
z;evZbBf&yt0QlkI6!BluufP0e8{;<0>m|1E+|3_Tkud->LbrViz;K0#FwW#m8nGS6
ze_8HHnO5QA{W3`{&h%rF+A}wj!b`$l7PuF2M1PeGie1L+7qpXZthA?n;ZIb>9jGI{
zo!`OCj@g^|;$=<1y3FCJ=sLaGHd2|psQb=SnFP6@#H+Xdf%VKc3Np;)0yyDujvK9}
zfXv6DFc{HnwWPz(ewX9vW<EAgRa1b`%Lz;N_!TlEXVm$ac{TXcS$Nf#bGZ$Petkt?
z<M-<;gN$UPV6;F#;PYjA_(NCXH>|zZ$HR%^rI@cSY8Yi!s$}{G*sU|Ke~s>qAh#_j
z8JJAMxIG|ysHx=fr@&UXkii1{W2-l#*u`rz0$Cz_V@V;H#v_CS6KW20>23X!SL^Hn
zJD(X=&WUg_9=cAY6g<NF$K|<?)Bk%r;%C)Pq;(BO3)@ZT9tSYQNFAN!Ma^y;=)xIv
zfmj!`RTd^b_*nLcWODIBrL}Ql<X!5CO?oljxdumhr5F4rdXle@mQ9Yxq>Zg*-o-$|
zNt-~`oK!azDEbVtg{W*`%ZxGl?}Z0)u$`-2_Q>nA3-o1eaX;w2qp0?|3*L%OhDLM3
z?Yj-Zog%&NI{I@PKT<>tgl3=ef}!iVw}+c1dYW;wf!GL2^j4F97F+tG?7gBFF+Tt?
z$7Nn?c@RxTm8^A}0pYISqK77!fs#N?&-TRkYOR;Plqdtb7<291UmBjObL%d672+H5
zVuOEYNak(=4#fyt{G11YCYph9O}K5w``7}NgA3l=B)G14=~akx5nt`93syBat(lXn
z0G{jf0Hw)=Y(0p!id$bgwN@kM4i4+#9gDa0*zIKEWIw6LNcwQR)g&I~1?aAqm4%-@
zDeJ*Svw5iq-?f*;PNZ<h+dtg993uH%7jAIxcf0qAVJGjf_p9YYz*?olrQ>#b+06F(
zY2gKbRo#o%yX4v7_ju2%od2*bjOFEwB9UzKBIYS?&pC{@we{18+p)Ne?-CCCQ&!Kn
ze}j|uzI?}sCoEzXw&;OAyy`;}@FoxZ7Z3^433U;EdXO^N3LtNFx@D{}{5s~<tqR&n
zh^HvWr5$2IHsZg1b(p9UHQQgPS!r-4J(eUbYn_!oUcaD{w80CU271qk4`BuDtI;4R
z=lRC(K@65Yd3|Y-$5-EpGxm|Fyn8SmR~gsIS5tXrBMM2TN4p&ttp~^X8%<Syi4rOb
zQxSBI3I=wdW^LqWc;i(PuWnP*8Tx}%p-)j8d+#8WsmfzpG1oTFappp)k5&v)Fq?!^
zvoRNzictS+tKnH|of^pvvQFc7%eeGEi;|0<2=D#5tk})<KyG*8xBBkFNPFoAT0s_J
z3%KKqg|Sc6ZKyX8QmTr}@ytNk_Jm_J)?aCRf1<15?W`iByZP1NzZZ*iWO*#r3#IuW
z7Rb>MnOb_$>x}npIUK7SFa3c~IoYd9!)1(yAM6*u6kZ3rV*;kpLaJ*A7J{*V&oJ6$
z`o%}w8l6w=pq8d6`T=^EZhEtsc80qc-2OH@H`8qQbhmzVP|KEB!S8<4@$H6D_o_R|
zwkD))gC7y+=Wz!y`A9bS(~AAlXoX|JYAf9M8dm);q1MhZW@CC(W+B>2)NO;!*y!?O
z#&^6tJo`P!N-78Oj-JSm&!OZ*VlL717$zV6K32hgvj!FHV(G?tlK#Q#j-*L(B%j$w
zh#lY{@1{R2Ry$eSVp3a&09UG(Hb`5^wjS&M;Y=VhNMD}QBfCh`8P5FF%xpv1Px#Yo
z`r4}iWo{=yh-@yQM9nuGmJ&<NP5v_BFb^4ac$B+G1&{w|*!lG;_0C$MMx#;N62b*C
z9Q98P#1g~DyOb}tu+<!lcq07kE$q^dAk5O8?IeKgNAyAFI*|Drpo{6FZq@g|Ucx1}
z{(tXIFh>QuGWRhA{fm*u&B;S!Y)<l+|Jzpq(6331ZsQkOC5*$HlyHHW3%D)Kw8&)U
z5xzu=_>(_FbZp{nh$UP~BUg2XoUqy?skT0O<jPd`@{&Z%t~%fBA09H9W*thKvF;vd
zbi~7U8g?~5Au^3V?rC(qA!VL*m%dv_TR%7^rmgP+<s5AtvObS{(3Z?9Zn%$*-j25T
zl&7toL2cWst1<QE9~`Jhy`>*fgijXt7lLWbL|Aj`Cq0q0%lcsQn|LB=3sU$Io_;B<
zZf`C!ob+RJ(Wl)q7quK3WITY>>!T^(O~cVRPPZX;c<Zh<Iac=#Z%G%;VK~c<ehdW<
zXq=ljC+A+^=2ci8MhT74ZHn%4$|pKyD~oJTxPFukzKki$n=oR5<rJz*S@B5fW4VyD
zqm2B!wWE9I3!mkLadQLMW`oL6zE&v4FwVofBkp7P<k$M=`iq`!YqN>8FJH*>KqN<F
zFWO#nOk)dFDSHc!#uhpnTj*$P;s2G!>N`Y7xsIv(nCSg{*V=B9prCWYbZH>EcPL&C
z#ohbkVGi2B5R)aV=sRx~I6q>i9^w^fF^S1~zpBB%tzF{J?`rbfTltmTt(7BaiSVV}
z^Ana=A5NlLbi-t332J9fLS#!0oHCe|R!2<wwmX1_0chKk+`}464zuosd%Z1ezt_|c
z#~aK-uxO(?x2%#w)-1E|Uj*8@tqy(CqVM!;&7LWS<2L=>Jglqb`Z=?kA{`+_&68oy
z<2%b(v0BT?ovpKm1{6xReV6y}S_(!}_=WTUL;`Pi(4z*-*gA9X`<oe~S!#qmaq1Mx
z#i`N0bcXhp&_$H44~TVd>+m~P<hF&2SguDu+ESQn2kscKTvw8-`#I+V<rEkBuxQ&M
zT=l%O=y$z=DzqqUC>}tQscN{D)-K7+-p0LBIKH_p%FIBQP)345J@c`fAJrQJ1nxT&
zknkoDhKa9oqV{QW6`0OX*krklr)$Y_E9e#djz8htdo^!n*<+wXkK*zKA`)h=EDe_|
zN2N(0z6TdLb#_-cC+=9&ZTZriW$KM&ZOaZhPmaJOtstJAit6xkc;X{sZ;m0xvg1AT
zw{o(B93w4<lQl+sPkvixB=1z^hK*l0ySi1}5LA%V{B5OQv%B_BlJ~!sn)5d%wms^{
zyY>2?Mqr1$O0ZXZ-~DOCHoJB`?n=_=d5iwGDw?+y-+BD;?z3lC6!650J^HgfyP{XO
zx$hsx&%OTT-Vcw<?G(SC89(oE&sZbM=|NA#U)Ox3+Pk8I?722-jGrg-R4*Q)m1t(1
zsAqId{N*l7?22Ac;!g3)A!Ju|AI0w_AG>PG;^%(xGZjB4#m^JmV7BYzP&%ohKm1|e
zA$M3SYqwj@?i>T?dRJGp8+EHM)%GNJY%({)F>ts~RNlu(9xaF)s``&b9J3F|tLk5I
zLybEVb&?#-iJNxM?K^sIT=GZpGactXho@kEQ~bOlem)X^pA*m7JeR&5uqH8l-M6&4
zhKS-ii&G`WlKyPq#a~T-R&vpy>9+@@KO1oIH@)oOtwgCI2Hu}6$Y^ZG{A^mX?N$nG
z=RXgN9q~l+{-PO3-2>UT!+*JA2A<6O^SgoPe*A5!B-rJ79KcBK#sQ_(HAFf~%)nRu
zqQ|qdKAe&M?9hwW@><%`0YkByC-3(#Ajy%r+)lhv=Rnm}8lJ1mpKxZzADZ(UI5ZEG
z+i+?3)%o)u!Tlkfv|j0ef(}W0!HSKfnOC*yi|hK+J;)tut-@D7+4dJ^$?8(g1MN~z
zHB=VKHI4pC=R!W&0IQbbh?1~?JDeq%XA5-Iu?4ooZP2#N@9Q_Qw1NW3hG+a|(vKD4
zG12f$=SIa~-f_L%X4v|-R&^x$3l-$;DnD`ca?OlcV3y>3^P7UB%Dnz#OT8a%u}$$M
zt3IeY<=T}WRB^gP2RL+`Lyv4R2hrBX+v0EAw)kUgi+Ad9N0P1a)DpJ9vDtAiTvck=
zhNX49MF(3C8YHrM+n0*q6}Hc5;j!ia5A8og`z!5g@ceugwsRl6vrjwKv{Uu}(9TQR
z{*S)IjDhdEUyO=#@fh6wArqOmyBRPp#KU73;<I%yl8D=-{uWV38DH&`Y`Oi&7PkV?
zIjuE`=H1gD9qQu1r$0K0_&w;;t%RX$ZccwRfcuP)_vw$g#0OP{A4eqHd@4wPv_mqJ
zAZKc+7NQUZuKFS+FUt`;7v(do_$8(_>=7@A18$dMf$x8T7u;Q1Lu+qJ(Sq~$gIH6)
zwibpaGsm#<46a2#P1L^IGKjMV{zIe`#+z!L-4A2PatgHSj^7F^uejgV)w}p1;_UU;
z4(fCzJ8BHT^n&|am2*>nFE|E=+JT+vkESQ*>HJ$$w&bO4yCxc^7te1h>gd^+pI_>4
z2@2}-rh5bFS9`P7H%}YtD@yre>w@BSGdP-B#%0Db!|isrBT%k!Kw)|kB#f4ehnb%l
zdD6O>`xG@E%)6N?CWr=`cyHu7`M{%t^KMhk9L2#9NDH`r&8qUGTA^0~_7s;wuZez4
z#l7RLy}ughCELyr&QJG>)mOADO3!OmWp?TNAiOqyYOgZ=)sofSyuqZFhD)(R>m)`g
zNHm%mhw*f-RmlrxD>wHmlCovQ6WvM8e|$Ge?UT(V;8qKJNV)|BE>%tO8cHX^?>w-@
z9f_95f3;3w*Muj~2=N;q04J#JW%02Jj%pmUjD2wxB2i(nv9(r&&p$^zu;$7t9Rz$!
zpD;*PI8F5{2hmscszsy+;_X60G?SOyQN#2{2PZRKBm{2W9^z-~>@sjjQGTL(Ei3#Y
z2e&5d-wnakV#P1=_p!|V$vjw@TltgzXmBzkdQ2@56HVEP50eySCMn9JO{jvs^Wg>8
zZd0F`hqgM3EqBOLJA=bTWx@HSVfUSdSaL6gqqpCGE8qVaoV_Yb5U#=8)L&Xi3^#$I
z<C0=PR&JmWv8&ebwmwxoErd&dpsE<3S?BI!w<}QrdSu4Y4$^8`YKd;6b^T8+UQdYV
zfz@zz)$KI#>2q{*E1227yA`>qo!1B4Ac|McV4`#AzF(i#F%7XRU;}BTM5323dcpbd
zMT~2)Q&gV+d;UNB^8ekw&@D>*pZk4~02+8*V$Z}3jsfpsf}q?R_KYAqD8lu=fEUvy
zJU<1`caB*9MVlMM^Sgi4r~k+=1pR+s*Ta%ub`F&3ct9LF^<WHt$oUIJ?gp-Ad)P$o
z21M?T>z$}AkJ_}ik@7}7(Q6}UhOO<ET5g6ysHdD+1;?V3TuzhuQg6z7OC)dXARPPF
z=cMqIM<bMRj&^sOvZ<Mlkh3RN_?_VtC@Mxof((O@;R!#}32KLgB4{C^DBdCBkY5$x
zblb>(qW0;#EfgQYM<<+dAY|Ifuhy$3!>sP-SCBeoxxqr6w*K61sTh@e(e@gW3~e8X
z!3O%_bg9VZpiU_x!x;HWPco5+arjhMN6OR`0K)LC?s2MU`W&%c;r5|c?@f0LQE^c)
z^~qorv-0u3EErIxl-$vU?~1aJLK?t_tQCXQ)D><30LU8IsML8Qjr-nOVUPP;)r9fL
zY;heDc~ww{2SagdFnLa~!b#BldJm`<gp_!m=vRHA|12iIe-HgzZZGI;+t27{p^(1p
zrxMM%*_c2V!{>%E8}<Ae@kFFJTHyg7lq90Jw@6!G6K#v1L#QZvikH6ehAp1!GYaLJ
zvOrNTq>X40-cVX_#L1o0!lL0c7Xp0(ip0^`L3c>FWrxpiy+VSkKfJ}`4!7Vcc98}z
zoT&-N=ccYgCpa^o0>z+Y=QVq1+A^mjK7w(@n!%?8*C1%sWBPh8XatgjHU!7(;$?)i
zbN@{xZ(P%QMSogR*cP|5`Upm64i>SCx<QxK6MckF^nj!P-t=*$)a`R5fJ&_$|3;g}
z%VwLd&2H7xxIsQZ8jZ6BSWUnQ77{y-YvUxw!zAau9h<8pRku5<#tBi4)}6BCynpY>
z+1_~D(@!X6lZSwO?PE>l2yU~+cGU2&L7iD?1In;3g&uL)YyvN}lELo~l1)>jjEcs9
z%MFeK9w!RB@V{aGu^ozCbjGJ{^`Il6({Q!7f%WvjMT9HU7?u;b_Z}c)6?P1{ylIq~
z1NhN;*|ETMH^z&!(pk0LNp#>HijAFHG(H$RIMG#CYJl>IcrqYTY-Q+&2v#;AdOMNb
zPA?d_vdKS#-|4lb;UDgoiG;UE2mVct^{h7#Co^(Ei+Yf#PM?a$?M9s&X<s_JZaQ9d
zXIIYD6_xW8-oXaTerEQBqOkZhnNI~WS+jJjPT09WWFae~^c?3_a13^C=i0gVq@F?G
z%>ewp<>~GD<?--%tB6V{mFrhp^AWT_-E}BN&4Ot0mZsotB@4~)hy{$lgBn%{KH(;r
zpk<hZC$r!9KKRdsCGW4Fto~M|Q&mMX{5jw>{T)A5vx(k6XPw@sUmXi;f3OWti^J)y
zF_ZH*pv)x~*B@{7X`=cCClt5Od5@9^f}QG{+A)VY^x;~fYA@TsG`Nn`gm(ydlctTD
zbVjnRii*78=&1z0@aw0c<`43VuL~y48a1i8<>Xu>iC?|-R*%2_0TAITsdAY6hi$Mu
z?BtQ1+0kVnCIP#!^dHS|(Kf57a3%r26nT=1q)lPU+{F*AkDL7ZnSOn<!>GSvC1#=+
zIbW!z3d<k!XHX*;4v7|4hYC4J?D>S1m}U3n)sg=B_!DE3i;IVGzt-1@H&nzGq3;Cs
zvsAKFo*I+*IccWn52Rirn)<rnlHpDM?OLG#bZK^mpKIs*lb=N4?`a+!{_wA6!za)-
zGuTx(91!#@T}%l@=z5blv@@R)u2G?%8g6H4QCbt+UP$zggB2piXl^3Ayd737wRT)J
zr(H7EM0g;DQ~o$t@Ix96|Fsg|1(AMs@bUq`hLMY5))>Rw3SJ3sY|Fym6rRG3Gby_?
zuJy8GPy~O^_w=Xb$u=#tL;w>Vp|Ad`_|@g$mgr%u**xXr5Ph4U(5<6~!?9gEdf27@
zlR+#u>#76?h{E$rHN+|-j^Mc2F?BTgGb=oQVi}afMb+_ky$;rR*)bdbx(D&Rmup)f
ztuI<Gz^KMNK>FI^@}e;DH|(qTlUZ{2vJ>h3KLohTj!!f*=4P!RE{A4*v-|r<$Ckm|
z5!*^<U`GQPTh1;Kx7xfvHJ?t+!8yg@PnPvInjO<<?Nt?p^B++%lW1^Jmj#PMB_Z$J
z58g1GUw)W(nwi5oiwQ=UgjehHLLfCiM-K0A`rnX4zi>2_IC8iU4DS><D5|POLD9-c
z`0e>ePxb51h%Psc{00ru3$DN09-OeV9%q+q<UKs+PZ(i!J$VlG;kT`p@%naq^yXi$
z{9}}Vl}&LQ?<lA%WNMC5Qjipj>=j~?z?+!a@E?DdEuUY#ar&ylAMXng=s{Ifuig=o
z&+@~#!arJmele~%G+$MC3i;tHR!_7KloHQVYDJ0KeHg98&1!nr_j`;RyDvKGI6=!W
z|DEJD7ER>-xA>i!^EjPuj}GROp}oJ!B!-=L-J3)Uwy978vl@b5A(KUvba$o#7nC;m
z|EPVexvnV)q^<dnX9teh5c%uS&*})IMlhp(jkO&Y3~l1iz@|~hmnPeGB;N%)XU{M4
z|JA)(a-#OJmac|TzZy<D_ZrXP@T_7>9u~gEp2)_fjPEL7S8bc0uPB~NRc;4#Y<6^o
zq_uZePkDGK#(1pl21p=W&6zMbvpSW`pba~8c!D2vy`ss#$GV$Vqx9Bgq?rnJ+!`Uu
z*BWvsg0zM_j1dj0%ceNWh7PJJ&5mB%RP=WE_zRlRv}&W(K^DxjD!GR^a8c-cWh7z)
zjccLfsoK@P)yVlsW}D6o@&oC+ep*(D=vorP7dDl!)PDsupi4EZ-Z<zc@q#F<3Kv?7
z{L)Z$4JpQ51=1m^2CxYa-v{i_8(*uUB;b?%c*vX1j(iZ$Xj1$#JAPgqKR<fIWf~X1
z=km43@2mJO{Uc4h({Hnf5!=^TuZxhdp`nyF1-k5~HSkKeZs?5miIU1kp+b95c5qao
za7f!cA2n-5f^mz39)O{`+(cA(38&;uE@AzGpUp0fx}NRjM|!`X_gwqgl3S?HZt(D7
z<M|3p!V#*6P@Z8s*)eu3mp9YN(M}}y+8b~jFY)$Ohd!3+l$oA56UVk1y*!~1u8PO>
z>|x4alJe}%<Ze4SBWt>2n%27B|Do;O<D)LF|Njjn5G=5<f<}ZA>uN(q4JtJes9D*_
zMx#an#cSh@Vzre@R#T}G*sNx|tff{hTD90}s}-%afXFp~BzTW^yj1YYtN{UUL_qR;
zzGmKg3EKAi`Qx__$h_x%=FFKhXU@!=iI1a`#}!ex_AK3WuyBalu(U1{aGwjP%>?}3
z1yp7NX1M?n956jOR8@{eS>46n^kl_FpJe4Tz3jZyVvJs-`IF#pwg~+%@E`DhhX0Gf
zd%^#K3&_I%vJ1$<zuE<O@aK1f|F4PzcJuYCv`!77JKAaKd8z3{<<N)Pv)JbSFYOsu
z(XBtmt>3#tI_VHYhlDfO4LIn^GXeYMfNOEw!v)xx)CO!n$l}0KXtLm#@2Sq7u0LK=
zl<SYe^HQZWD%~FwfxlBplUJ=D|1A{7N)196QOzp<KR4nh4x(%$PICbk=N9HME+E^8
z;V!^y#4m>AG-6*xX?#p!F=)pcMv!c$T#)*3P@a#GTj{fQU5gVpsm|n-uJ}Lnf&C;5
ze?D0()wG^o3R#lPvl!Z?w*B?Ef%aZzb~vHPaYIVO=>KU5T@47`hR{VWAWMR^E+9*S
zC%6EQ1ZNIbW79+E5XFfEuX`D2J@PYOA80$$wM6ap-WxAU+$0>@7VCo+4^)SH%J?k*
zpu786q}p~r@}vLJ?r|IUBGukd>NY4f+p6mXQetVgRhPSfGQe=uH^~K*WCF&yfI<Z%
z3*raacC)i4)^WJvbk=kh^B*4@Z5Nw-1?My<O~2Xpt9aXfef-z<TRgk=kNjWlH+!{z
z9K<lL69i1kwB}bJ90X*??i3eLo=I`G3&@iFNiLvBDd2~LECM{6=|5Cla(c0ui4ubk
z;}FnO!C3@+v;8XFwqGCrwfz>~uKmaUul8@-yZuEB2AW@&Y20-O*yd*m;&K;InMpCp
z1!M_goC}~uYJU7c+kE>PHvO+S9WS1Rz{<xqum2UCZGM)Z|NGY*P27nYTIJOLFgs<p
z?k|`nY9|`X71xKdi&OtlFdy72aKQzsy9ip7!|(N8^rx1|l=0R~!0ydSp@ERhj_`-!
z_{P2D2gE2;m-&$|wa1d|x9s-*-S)er6nF2dVAUx<{l3bGw;D$WeD&W?zvt69I^P%h
zoGs~V57nU0frr;<0@jWWN59R6K0STWU4@a46)Fo^7qa=Mc9v%L=^|=rnG{iLOv$?}
zHNE#%zLv>q?t*LkJ#kY5J%eg5yY+}n{{@!D+HPtjMn9`2rb%Y$y$FWrk*bq1<+5T2
zb{z+%Uc#sS{55%_Sm*iKNFo+kidc~skDkIimJ~C3n!o8PR&S$!5qUMp9S+jSD6`aZ
zv9It1SN0`U$A#VAq{(Ui|NN}xt_S6y%4p5s_lWpv{<6Hb70Dhc1`H88<Ew)eu_ls5
z+GP@_b1vs|61NGMj+Neeg?E>Msp$w(dvJ0RP*6Srd^u2rF-3cFV!(T$#C641&0Lj-
z{j%3X{u6g%^`T?JUfq|I^V>hO@XJ{JH`-8Dv8O(e1^-2@r3%e)ISp9h<~yAf42`;s
z$6kKMl0{89Q%xCVn_WLWT}>@j<Y7+HK3t0`&LSZt9iWGY>cj;Y-&k(D8cVBRcS$$l
zy$My<ThxYj+;Q@Y_H%<QOML#=1>h6{%za+Of!y>5;oSC1>ME)`HMvlAcmVpFJ^;<t
z2^)sJ1<cX4=JzUT&F@cVCe=~FQAu^6ze(#uFQN7>)s+4u+@FN5F&J=8*Mt_~(%{N|
zqOj4qo6tF3kw(maq@RN*F53a^)k%vRv*7kD4J}Qh`P6i2-;U;A(r(dTgU#!3A#+3u
zyVQo+rqcM-AcE6XRcDiT++$ApH_9g#QEhLc$>+VS2{N!U`Ch*yBZRrOaYZy24Nh;n
zC2Zz1TZ9uwEc}z->C1JwN$T?W6(t(oNkt=**u>ILV9L-3o+ro0R-#h>@jO4#SFqR{
z8)_R{qiA!k%TjBz5IITZRJp*qbl?;Pmbt*GR_{m31_d5OARzbqmo3^VSG`ORNu%Ll
z2)9M&sWN{4eG_wV%=>7r!||vVceXs+h=;V8R;g=U>|({{^CujCs0GKBX8z`4*SQGh
z9p$k+QkZ=34YyJ9PtWy%S#6x8-8|3V<;8#Px$AJ}IR0wi1Aw){Q}ey!95Ce(EsZPV
zAQP(ng1^<A?~BToR?{W{;<zv`VP%;vP!ZgySbJz-6w*l3Ytp7_(+-n-I-UH(yI{yD
zA9=5?U&lpm++P|fo_3aHzS4)5i2E+36mj2L$9-St=^Blr>f}9+jSmipyZxIWPA`7+
z10DKXp%^oWbB&o&ul~DCzE>w~luR#g-j%};PVd>1Y!URkJIwFx7M#Z%`k0WPTe(bS
ziGuGv<ZbrQ4(%RIu(Q<wizdwUt99KOhLztjE?R{0tZA?v2sa8cX0LdDz-xzq|BxnP
zn3hR?G*4TNULQ<cTV$T$SXFi6+Cm=9QhPC7+w*4S_V^n!aIfY8dK)2+H%PVzF@zE9
zX)$BDc`$CjgNYf%JX(OI(-S`p9)2xHrMlu@#J-#{vg7Q%7(8a0R66sI%;&<tOVV?Y
zEhtp+wd3D6+UW=W%}Z_#w}^M#F7Pt*kLJ<fs0)hx(I3LUvyE&z2m}O2+3fXf1-aUC
z`AaZvOG@c|Yg_z*ws>28$MarRf77$n_Fu9GN8RrDs|eOh2Y=1Z7U^o9haXlaZHMgD
z9r@(6SC|H_Jd9VIovF^CGuzNOx`!|F8OoD9Gbo^ej5*Jdb4eCXRu-`OVQtq$Z~A=q
zg)7=3JFy(zcg8ir#bVtarbawfHLSDa7)u=8`1c}<|JuChDxmFU=eAx<1{Nv7igh;}
z6>kq#*v3U(5`NH5c_;9;%~3yCL@}VeqkNAjO(?#{%z99<-HB-O9O$QK4*gW+txz}8
z0&`|xbjCkNW0vl%vj2kal#UaHlQY62zBHGwLDe>hjJEgA%L3K0B0VNg$_BDso;qKd
zsq(07a7qX0-77<PP?QP0u4!Uz>cUqYGdm4eq^o1rsRK4=^i^#9#$SbfA^+L=V`keF
zwI{l{&>Z~7ZQ3G?T#BZ@QGHWCrg3RAu?Vg_#nk<MW!W(9i#R`(vt(w|om}l(Dt7Ke
z9!*XUo7-6ACJOfZn^=L)X)@#s-EL`Sy}ncxo7q?MO61L1q2D&Cqdl|r!|Q=;R3nPN
z?%v7OQ_98W##SjlNB-%t{e2b2AN>OrgQvI|)*g)Rmc3{K_`-aqHrSHkuIN`oudU}O
zyfc$+1#DI-Kb@}WPKxAVo5Fc*rt3>FyOCjvwI`~;xs5g-5fO~;8G0?kG|9<2Tv-z%
zhmdsG$J~Y)P@)1>r~nomwy8QZXDQ`@y+cEsSxQdT-II>H(&HxnB+G{2i<?8kHU{IZ
zK{oTS+d9;LQv>`UrAI!T+?SbuG99?tPIHOl!aP@$vxK=XpvjSkmCP`zx09s#ZHa~=
z+X49jCi~z0!S8GBO#thrL{(9=vtY)=;L2X)Lb44GYa7ub_!IUKQzxuuBuQ{kRk7oS
z?~md{Y<*uWwXIK&XT7S^oa6u)NeFKdjcXpck0)^Kw^a)4j~-q+=48R_BUmgZxEMRS
z-83o<N63n}D6Q4bobz=m{unzMnoDc}o@Cm(TctJGCT5pH-(_cB$Z&)fypXr<OkeHY
zG3j6Zk{b_+lX&OT-*lUB<2`4q=SJh7X$W)_&#~(-F3r=8YxB&7)HCXeqG{(q|Ak95
z6xcArzQ57ie81GFj7~4fi}c1R_SF|HVeTab_lh=|@h-O1S3loAChP@|Cb;9yEWPIp
z49n`EnQrUB;90DAv!^wpn`?D=hJJQyIX%r0W<-aRSF(K&|HR+)XFxEw--O}F7Pcr$
zeDy=St+m)DMTTyKUg6K7iub0?2qw=DbU}_-FI@4(ur*Z`pD$KJ!+KQ~`uCsM9^UbK
zxUB^e?84U>-tksAZ>#ys>djO^YQomjMT3VzQs4WBMoyVo^qKl6lyjamGMJXurh8_M
zd9sO(t8-Ljd~3&AbJ<G;PT%L*>Q#%KfID-uc5UrOJe+($2x>(#+WV-AQJQavQXQTs
z1!mr<0YhbsxNst>38XD5KCYj{$<|x!qPH}hw2>Mhta%5e^c-dGdJDaPKN=%YjVsB>
zUJ^Scd+nx3R=zJMY~if8t;}^Zp>`2WQ?YqbXo@**Rh{?|r(cMHH}*^jB3I8|@`~yy
zlyrs-*gRXRUZ5!T&zdgOL6qTy_lSL&34SW1YfH+GvBwG+?2HkiCNoC-v3|nI%qNA^
zbZ;<DvivqNjwe)M+S5~gsDkm(Td#<=vfHCAZym(EgRHuZl(%YgmpfU=dMSYltOWz#
zC$54A$6Fh|U!ANO2=nLqYW#)x>J=qqGFP?0w&Sa+FKN|!RO~?G=nfs$VzdQEUBz<t
z_Y4q+KQhl86_u1yKZc`1-n5^UP~yKA{!-@xW_CQGY#3lIitI3FOu~N0c#9{5u+N%d
zN*041kA;&DsWex(zv-WR|K|!u{azq&WHp<ro1o-@p(7|>zq`^Uv7+<kBxQ;B1Bqi8
zS3JTZo@@V%v^b6Q6TABz=fG0f9HC!B>|ry^IqPdHMf%6QaB^8dOPT7$&pqpYX`Y)S
z9{tbHFdL329;$b2)Yqzyd)6fT-g0W*Q#HfZMO(_k(XTGywnlUQao4^UUB!`-34tH8
zv36W@O<+u#K6wn!AWyH(Yd#tC>ur%Ot)XLo%n`);z!<FyI#z6Efr~L@tlq4)0^P9o
z@Z9h)OeE~=TkRkBrFn23?VOL$;&tvX{xj}VE5${@%}5xUhh5~Mh!;9E6PglV_2jEQ
zJVKNzpnMAx1A-0AFU|NyYL#+G#eH;Ry10&6CiR?~BCday_1*Zz$3v>DtgG2lgxj*h
z>+7xX?7^KEb@s9d7V7%vIXYwn6-{8zcWJs`9Hzd#D=hvo`MKkL5C7rhvA2Ztc#~pV
z7XQKK{Nt~E)$4%$*wQ?n4siBP{flz(UyV_4@IQJ#==VI9Wo?>jD?Sk)@TSe-&SRgO
zG{3cTXg9XZz9(!sJO0IJ3-vx&ec-!h=nS3bf&+ETGi#oOL+ib6$Cjg;%Ro(cg<?3m
zvJrgv>ierFRzSKw^J}D##--k>cncv+m0A+Nr%!A6eS<9EO9(TS9p1rq^O033N6M_U
zRg>h@DA%quXo{Xtsmx2kR^10Ic<yG-04{c63>veXRjH_Op-=o}e4+Qu=FzT#-+nI4
zP*pnETyH}rmV{;VJ-Rcm{wh}Dk*ip&{QJ9-4L6t$J0K@A7Dlc=&;`jBDtbZoMqi5j
zL`*pInCFqUIE;+I)^4%a54-7V&jHzG_Pxf;eF`o7=jli+1}nT8f8~lVNnK;9bpugn
z5oIoN;pO-zc}Y(rD0LmlOyC(u#O5ifiL(6A%8Qyx9W4*`X!(2{LSrk?swXs|Spg9<
z`SItf87z~nK7HU-Nxv_Vm?|Cw?n{KkQl?AJ#>eg>k2<CVXx`mdrUPH7iT4ed`7x19
z-#~Tp>_Uz^u9eX_n85~fh&>sSgR34^M#xN8J-b93-ooR6aCGdXyzWbi6PaZb1ub_v
z?Sf7%IPF51$!&nAT|n0)`P<1ElK<w!pGH>b+uZ>DfPje&lve5&L?s5GS+}S6ptgT$
zO~L`RRU7T`^m23eNYF|TH#Y3!i(KJf)KCcdaOOb*G<@7#@F(W3M1CMq+c&zitNxcW
zcc#8(0Q|~BO-*2^<@agqJc6!8Q#1!8`UaS${Y|gHw=Cj%?tyEq#^<<4V?!Tb<hM)C
z2hA&v63N>$$kb~Fp&nF~sbA3VbF5I>p~DDnJ#8yq;zJO%Icnn1+tMe_hx^SUgIh8_
zNj+x!I!7`ex4DxSFXN(LWaDGvc%%Rb^Gxpzn;d$ore?-Hn>$;uGp46?tgul<tF-`e
zzT@z%C>PZ5+ChqncEGlFbw*nBZeSrXP94Yl*S4Z7y=qlo;)L+3_j{(>LtR5v*Adye
z-q@X6*E905ajfdhBY3K{;>gq|fci+#N&T5PeXtpHf(0`*hmbXUoe!~#;>3(et|7lr
z;fd*$&R6GrIv3Bz=9$jtNn0WL;v3FO9j;#4Yy3H3Hp)XK<0`{(q$n*xidbc^zo*H*
zh!;?}4A4-{4%AUPg8Z|fxUN#Y+lN$>5Ep3_XhH5D%K6j!p}cB@(ok?by~~PY_7<Rd
z7*96@Jns_SZxd}=Q7kMq<8jq$TP(VTuKBt%5_Ku3rz1K3Dgdq)0Nugl@Xy|0j`*Ko
z9%3QzUODQ8=i9*Cvr}#Hz<d`^8qCtY!F(khnW!ugm~TK-l1o-?<iMMRD~nca-Rgtk
zc5LrcbwBgE-cm4~RH-cWWT9o%i5tot{s$k$-K6@<8SaWMCOVX?qk~3OulfLjYy@|{
z(-Omfpbq$6wgajy&|b@iTewD5vzn}q?(U4d;IMkAg4y)9_%Fm`YfYoR$tCg;4saIj
z&jY9ft~3|8D?Q+*5uF2EmfpSvz6WK;Fa5sMY&>ewUhu^foQ7`-9^lL3e5Ql1j&R_!
z_&yW>z&FW|R2|MOs(C3W0IIR+Z6A;T`4-ntpjNQSd3LHMIeM*7Y1g|aCk8Vb->R?o
z8rJL*0%H0MT=)IglM}<~CGZbF@CLwBor2xN|9pAWzAfM%s`l`IzfI%ezZs9LWR+JZ
z$8~aLIvnln^vA5p4LhP5h}QtL9dSq&^3pWqIs9;M_*)7b9sVES?_*(0zyG!4TjBpu
z!Rh{4hez<2{s;IM6EFB}N1fvUQu<6!<vb0l;ek?XcyEyEZ`#1(Fi~ZD?CpHZctA6w
zBg>D`yTgFG>VGY({ZiP^CtdVo2;l@ejDtwbpSkh}d#Ci*OPsGu94{)u%)dmvfwq}^
zq1bbr>od+qQ%I)cS{==8CK$^TZs5Ft#{%TBcYo~Xa9fvf4RMJo+hxaOKxgc{-?JM$
z-+=!~n*4u<f1-sX7ye@i`4;$x6P$tHZ*yJGz;e@JF8n=-OH|n|`<Xz3muYtO##Tvo
zK9nGq7)*b0jq)?ZmBd)vU+*&I+f38xFE=20J_~dqfii0_Cb!f#1ifu<76ooNUXKu$
z9*vFaJo=0A_>vB2=l0iSY-l;vXS%<}5+WX09o@=E>*|cGb^S1kaB-Vr3Nzoc*?=f|
zWuTO42AXB0aYxAOwEn~=#@bFhH3L7L_P^lo^?!x`{?GS@KT62A!9Shw4Ez_`Y}4tm
zZ-@Uh;uB+Sr%6fR@L!xoX{F|i6NLH$r7_vcl0apLg_|C(?BWapUvUWB$pw$Jp~3>Q
zSw057&GLecf+_%~#G<nVbf&Z}u#9V^i}$3kf7+~GZMWiaJb=9AHg7q3zuuM38}$-+
znd|XtCbspSZR6nd<Sn*&i^<z>XFBgV7w=`QuvvGwtb_4n=VJ1g+5BbXzgQ~*3wQ6F
zL@I<EhF}OmKAcrirQYK{1$Ze>t)jgdc~@PSIuUV}v6s@DawI8E$=(|urKyR0*m=gL
zJC~eFcduFvV@s`aAH}I<HpBI$sjF-eqf#+7E-@;l1*M%UQXB1t=cv>(b|Et=r3H<}
zXlkjg9@<X*TDiJ`y+$)+N_TrTqo)34Gu=?0+Q)v34y1ZQ6B30|<E;(08Re;Z`yr_?
z(NLP|=Pe`UD^5L2LEY~2S^3%DG=%}7rJlAGf)n*(wzoyinP%PGNt}?CUyg$w{Y_6p
zudst!i8=?9Thatb3QN}MHop!3f#%ywJkFtQMJuH<`@&o2r1>fG5PU=O=<(Yf$14(%
z55WVbvkL%kJ|3v>G?(byW`|-pBb5Bcm9&j;K(y>l+BXlxawm?t^$zktH~2V2`#<2j
zlTyWzEqvGG`8N0>3Qxl~2@j|#-y6PK!hz4SuV-nkmDAzwnsc)J+O1y>q%^bjGsq(|
z{#~i1>B%6H9{*cyZQjCav-5eP&O7+TKqd*dtMF)O(Yt{530!y&qv{}0G97Ugbm;b>
zu-*{-N$M}8w(|kwr5Fb6(SsVFnxZ`2l0&u(hAT*?hNt?vk8tV|rA)7%YAJH>^^;rA
zUHCuOb3-lGEy46rJJPt`{E1qhvx2h=7`KAkNL=?7-1CI2`Q~`2|9@Lgdgq$r6q1Ez
zx_m%WA{1YUryDdaLal@5OyasjQ%T6T;=|vxhSD5P5bDR<HSUKjDJrSht~&fpjii8O
zH8|4$0#zBlDbBaa`D&f-4d<(LzGs}zTa+$$z7iMr59jmRd9U@2a#6R+!@TkU)tYPZ
zxMsSwpg(q*H$}Uq{*?IcO`S-H-Kx@g%=iwJLOcZTUv$kr*kFt7mpC0e7LmR@P#o#)
z?e{jlRDZ1h@zV<@V?23O@(eCW@65aA#L3aGde+xOQ$<Sv!{-k_jg1;@c>kzwdwRcf
zaS<_konUpUgisQAMkrRNikyGMQyuSS#+%|<i~2gSJ)?8snf+2d`#6_~aC|@j(N$NX
ziqK%@dkV3pK(p%6ea5C0HrXy6kxU*jmX{7W<<K$CD=*QDW1ICq!+sD}DM=XZ?CWo$
z{d{1AWv%6^*Bl#6+%TN`eRc2j_nC@!8ATix35}XwIPJ1<qUUKmS)p}avKI3cL$96h
zwxbgx+kekya$60XYuBu2zuDFlxg8Vm$4aYHR+YGBxZ8)hUJvx02-C&{Pbl6RitkYQ
zrhOxp+^FR0Ke96&r7)-Uy<>y4p00s88$nCS&qk1NlAUGO*a~cQjn^MeEz5EmL~Z6u
z>PQ`#<saV$U9m512<duG(!3?@_|))<w02w+WA`==1OVGdIn&Mm{3LfZM`ye@gxSB~
znOOAaPw^_4)t`5<fARX*=KMkE&)e(<#)wmr`GYE(QMzfoeT)A5#MaQ@5muR5mU;;O
zW?^z0<`?Ekjok024chES9gPyMgua#}%pQPMiPq?ToDOMTJV{Jc$9&I$h?67#u(&@<
zA#cBR^!}XpwI?Ivudx6cYzAoS0(I)*;U$#UbAp6=&iJxQE1Vqf(Msn+KKJCKe+_YU
z1R37+pnOYKWGmqq$$RgJ6+8W@zv+*NHfCiC9pdjK9vzvUf6zRJlaUf$2ZG=Wjo!f3
zlfs3mAJ~@Cl<Ohy|IkPEzj8#M(<}c!<Nt7gxA;eK83MtB9oV-|mR1?Cb&Y?py%T7T
zUf|T1lm3N`o=khW|I%+xJLbgVUrXm5<`(@_hIv-+jq>(0^O5Af==3SPI%5~WIm6;r
z#)A{#9DhqrL*d@<evA#t{^VBk5LtQg4|UzxGXJpr0N-ORE#O0Dlea`)C5_W7eX=w@
zwmh7dA7ES+<~2^o1X6#3!eP3!h_GV9F7eeLz&7CFzR1x;O|o>A7+Xi{p{$Rn{NkNn
z<wQ?W&N6c-P^5wkL+}wuj6c7k{pvLptFL|mZ%JbOB)kjoVl8Cs#pR*E52r2axX<MM
ztH8(p4aX9L6KfJjT>V?l(4y^qWg-%VJ5BP8`8m6!yiX5f*?~Rq9?S}-`j(*T@!8!R
zuHbfk1xI`QRmhX|XKW!cODj+0wLfrUR-h{3jjYeCKK<n-CHTzf4WiP50xDa1q@p<;
zQ2164GCW~e=7xC{e8+a~5cBMJnWE!urVm-91U)l+#o9}GzkSE&&fdeSoA>wG6BcP$
z8h{1+S*8?lR-onp>P@cJRy#HdeoKy(hkCW%@@9_=qg%5#yw&knUC!Aq=S1a9!#jzb
z)t9doydz$+u+m5iF3_Gw20?q@O5eL*6s*vnaN8<+#?djmeALC8^A&5a9vgmfOLfKD
z)6NUO*b(`t#{ZA^t)lE;(#AVU<^RW8*Vt5lg51!1ajSA1Ne%>$XJw<)miJk8#gkVr
z4_ACL?H#YsUL@)G-JI$dH+LlXL+X3tdpg?f(U!!>NRqqSCA_X~5eQ4Wlz=oIPyd)c
zeV^X8rf<hoD{Tn=bRNBtI*+Z=obm4t&3vBT1T0VdC}$FdVwpivvz`ZQcksjif{DJj
zvSEru@F^EpZ$mkQB>%HKwqMq{t(LI=hPCFiUFtuc0^#V-mC_5@V@hW5U`9EcC5e5b
zJNK#oCC%rMP7XW?`y6<_BCFYs+olo2Zd1WM+9dH#3(aLV)nNlC`P}(|s1Q(d27Mc|
z9E09F#=gdTVlvj!@Mxxx@wSj-R!#?ebCT!LK_OFt2dyV3RXH`nYD)WM)$E_<*TlIp
z{BFn4TzJFr?eQK7?VsoK7*0N$EJLE5{URp%tNeW;?}ekQ3Ky%;jyFB|yk;2I^>+4%
zzZidsec)Tg#O-nDHWE?ya_N;516zN|L{TrS!B$+9^lZiIi@%c&`HAB%Me%jj$<a-T
z1B9)5*FW&{jsw0OpXUpo!DS-l_@`l!-d1x#J$U7XdQkl5yK+!G^7S6N0Nqe2D1t~U
zdBdKsKSo%|sWWm5R>-_}FT=x-0y=xdSA*m~=Dp~z{xleWw&M?TgzxLsviDz8r@8aR
zya38<Wj4OY^mZ6u!R4UXZCQ?JN&SmCqb9y_#8atvlxol;ZeCdT@D@N_llmuac7EVI
zp*!}4)XE{qSI5VnVVdCR=CJ_|RUK=k!5a3!ORM6oX6y6ffPDk@09SgnOxnU|S=ipg
z$NLwte**_BQr5zH0Mm%Kl4J7{6Jm^{HDK>k&HmmS9Zv7r4;4Cu|BR<g`@{|aOY3wT
zx5k}SEOXd_1w4%TW#kMDyC4y8N+$lM**=R&&>b$jhT9dHlWJzM*zsNz9Rn~Zx(wc)
zmhMvX-bEf}rrF0=|2MhpF#bs*O;L86(JcEF7J1`Ye0483GD2lS0C3t&v3jQnVsh(o
zD>vCq$q{d*blJiDX1?o>OXkZSs7`afvP8^UM^G(JSq`BU-o@nd_s>A>xi3IUO&@SJ
z@Z<Ny-#N%I=KOd0@>g}53!YO`zq8~Z3P^Xzb;=bW7a|&n-(V)OL%KwZfOLx6w%dt<
zPBFXb(#)8i@rs)g)@0kO`O#WOVjI*BG<)oH=H@vRmm^2qWtR)#_%mh{nr!wo2Wtv*
zBX4qa6l;Sh<Y4*fuLG5KMH2s5qZ505*XY43E!%~9Z4XzHU+PlQLj~sYs}T(ekv)wf
zmQz=1e}v<m-;m(%R24Iy6lgR%(;rW4u*}!>$G2p=B%3XrCwu<G$-R?NMq4>|;FUkm
zTqHs65D}M~uvKFZJcB6LVwpQ2rZoEX6#tDM0}gxscDwB!fhM8Z3N>csFC@mHyF`R7
z*GlUV;_clw26~xke8vqo+iiBt(e<emy?c_nU9S*qGSgARNukQ1*lM1Chw_yd*6#Mw
z%~FC=Ps0d2{+5{LA=<J=57Fk(sqBaUfmDL7Y=!0HGpB=hEUzF9_0-<}!RN!^4yV=R
zENA(tL%4Ii0r<u5$zMwVWO_N4g={fM@WwoJDKUdZ_`iElguga*$Ae--7=HBJ8J;`W
zbC-MWGS6Lrn;B1x5(HUyJT-Ave&Y>!zWPzor%PC1y!i=K4HBNHLkt{W0>3$e6EBU^
zIeA~uILa3Z5mIfn>yb$eTh3pvnLLNECvD>TmpLC(tmQJ~pmHeji+_XbH_>5sEJ}~(
zFURIrMixb%t|a=GUWH**D6M_{1C)UR>q#b_trT^hD=Rs&Y(szF1*tid<SBx<VVb=z
zS`60=Le4s^p$W4c0Icq8S)fF;`EB~M5iC?ZJ;obvtJBlFf6vH=zNVBy%p-WJ6J9at
zGXTrny#Hq}u1Hl_#nT)wgtJ0k$PHe|Hlf6(xzY>Sm<c&oAyCZ})A;^Qu0~+m$nZ32
z*LnI3>!d-$7OBk~6dkj=?_cKVBchv2(U!qfhI={)l<V+BVPrYA)g(r4y_{=0@!ccd
z%JL_jzp#8s7huc^bm9_ad1ah=*9}H%$enW{7bCb?X=tlCn;Rlo0qBmmXq@DFv8*(U
zJb5Eszu_qjKzI-(CXStJPA`@1Id}E6=kHWTnNum8WVvlxq6(`(d!OZe?$*ybN5ewp
z7v+?{U9;v4$`|V^&WK)-{h=O~IhjccO=XI4XeRvC%^HvV)y?A1dhW-#-Q+2-IO0o?
zINC#^wmD%FAB1Jpsr~?WMo1M7unF`I-jk(k!k6a<v~CIagb{bVZ9cr87tpM}$l2@F
z;kJCQL_|eO5rerygkmSFB`4Fi_!sb}Q%><aB$|8Ixv8auC=+0wSy9QCCZxa7q9u}h
z)7W0-CM5F<o8>$9DpERb{bn#VkqFcBYoYuYt%)vc#b0u(eV4pRhm;z}{O10F=uet%
z!LxF_s(i5llrcBv&U}BRFgNY=q(pm`&pR!*0rR!h{?l8q*=%|PpJV(<%2+Z$U?;xg
z0E)HH$jeoX|MYg|#wC_lF2ow3cd%;^ncY-o)gXxr1vEm73I5PoE@X}y8F@``DD>r9
zb#;R;X12>szc*}ERv<_tU_T*X0u=~#ZzGS$eFe9&iG4J+@NHm7r#=Wn{N^yFhOlyF
z`qgR$(h76jg`D~Mjy0&6&h?iL>evQSoruY)$)0P|9`&@gC{q_&LjKMYEo;*m$13CF
zHsg1!n3Ikeiil$FAtH5=rWNWFqSCSZDO)44jbmQ=3;o9Vh2)s~{|-_}NDsP%=0fFn
zFT0I-o)Oux(VX%ZHxN#`&)UCn{G&SloEYopPJ)$5k8om9CFOLJVardAw`v7&C*|Ae
z_)}7_vbRRb&8!B=ko}hg(zOH8BjZ8l8(>1~|BFZ<_Z%fmE(?^~++Ugs<UM8d=VZK0
zOUQX-3?>!?1c)*|>J?Co8+*$dI*)umigX_t9KF8C7ui3hrIOGc!nF``#TZT8r8?rj
z$;@FYO`KY!<A#^ApiE3GL2dEYrDz-8Vj4R#)dB!AL{%g)8~)RlKT|l5xATGP(+X(R
z1ts47AWnE@8K(>rd+Q{)c8SzutZz`B=t4!QIc%mC1xf|Q@fTZhtdxon$*@|c+ANby
zj&3%;?x#UV5u!erNil`kt(!h(#B0EeuL9|ii;obKio4<>TU>EU<{>%%7V*(VF&@9R
zX<`1c0N;)*?F{rW8mYxJpD?7R3?uW$7ARf!&Bo~QsBHfQ{Y9_SN&N@;>KMT5WGjh?
zEKy)&!BVpMqSu!YFDs3~#C$vJYEO_;x2_xhKoa%fh1WP5*$;o3lz(IB>V<0@jf^3I
z5{^_tXr!1DblQ5L-8SuSjgO}@UZ#w{CZm=QJIpO)={D}KBVOv9b4U{1l2_l4I}$6W
zQL}knyo)R^M7DKV_LY+9d)UfJe=4#OlX+i6eZ$1nX3oK5_hhZ)X?}AsYzQg4MA+Xl
z#c`(+H@n~bioo4udJ&xZwaQHBcIzfnaJkw=`kxXJWr11M^i=%`K}^(%xP6ghC4zEP
z?@P&{JIww7W>samQ(o8mw0Abf{v@dmAVqwAs+>AZ!=K!c{?j}+xBb;~pZ46Bantgb
zJ-N#Po!&W%kMpG%e8#Tm!_r(Js|O3=mZ@*rk;lYoe6{~^rgYA99K)*zy|3w$4D$%W
zS3kNov^U4RkCGs$@_0L<qNjf#%Rv84X9}`pzpL)1hc3yV8O~d0O|FMnXy_q@MIu*A
z_4BdMmCv~AYmQmpQ-<;ScHCj-RXgp6<2`NnHIFUqnC0Yi4G@AmHhJ|4RvUore$B`J
zMV`Oa`FU`0l{xMn&DM=-x%i<jTC<vGF%KgISH0q&zz3Z`P{X8yEf197QrWZ6QV(VA
z?040&yIg;?|8Zj3k`i`KcG&r`hMVRSPi{Cvn9*FqsbcM;qT_%`?X<ManD1*=^Vkxt
z>D%#`y}}jUSr}QC!OLS7FG_aM>)=Jn{$!@!Ejn16`q7`V{hcEpy8Wt9f~Oad?m)_f
zz3lV49V>R+IE4j+2q!~<P}nnwi`XcB#;E}W94XMcNqfhCsG-Kc!Rw^oFdwbd<Tt)l
zr?oeE=joFppZ)*>eg@Gtd`VQaK}F5C<Bl3T$=`Gc(xZkPJn<}Q$zNTQm|7f6{74f{
zSw3QEi|s$B|GWLa>i_g4M2Y!ylh0=@*fCI119E8Gp31HTLsly?$rKfWFGg~$oiQ~$
zAK~>pgh$ib4ltLXJ5N4j_xO?npT$A~swJKUv~2qf3t~7?s}+y5VIz-*+o*^RgmtIT
zFmpZ?1K>()&!vS7D^_0q*!lWM96sWyCBtbs8FaM&CK!S^^#YMn;*Z)xwd(N4ZQ?46
z7g*8OuG&dTmLwix3fXDv#MFa$GwVCSS4(8rgJHNWI>OlWOnYMAWoy3q@D(h<Sj#J+
zX;;?J(Ul@V=@(eILDjXCNwriBo!55N)<M<xWy-)<7Ne3i!95g{&;jmSt^OiI-B>9U
z0exdP5PL78A1<G<S2=1xpuR%nVi~$+-G~fZP|}#cE*Jf%cC;C`;bBpw3>>Bl2uJe+
zc@_Bq|E$YtB5J#9?fhreYq<i}xhn50%FEWIbqY0Yc!QYHs)<_aIF$0Me(a#s9TDE~
zZ-rd6m;$+xwAO#KRp&w$zdcQCne_{Ee4RO%9nY-NEDB>zeIIu0_=<%iS8{$s^4#-S
zS+y~_OQo{~#{yzJjl_ZI5;8YHhO5|4TIlg7n_Fws^ei|{^6E9VTrB-qVY+h_dB%_j
zT*Hq1P3!DTgsPWu70~7!G>@%#nI2-GB`VKnWV5{-;&K*WB^{CM`cQPnsKn^)_HU2|
zbTUbF!lWRwd{}4|>5)D}dX0v!c`{EE+83jp>>k!U=}7S6m(nCy>5obatJOq_mA^7%
z7*_FVG7NXs)~Yp^t6MCIOXZ_S8N$iyc8eVS6iEwHR}$7;r@H|e)AA2`@s5+3gGZ`D
zOihyO9AG0?$3y0*xdn8>n$+Ms-9#Gn+zW9%{CoP7mzf!g8?PIN&?9L$abgY3VVd|V
z+M%n<%*d$Zf{3?c{?itbGx$%8uMrj#LD<K!?X0w;t;ME-Yf9O)qiouA&LiYYPSY4L
zL2=ILlf}C5!<5k^+)%84$xz%hIXoGL9Dd5KOvik0p7bx#zEe8BUh(4;KRay?4^`>R
zHalK*Yya?&AYVF9<JZcIOP=8?xwMf0(_fKEYs<}CEpU=c4TYOU3+(rLeLwxSnzM8r
z->!gPxdIj|Ao<Wdr8!J#XwuDZ*nD#o_SjfkaU<U@Ur_lnXI74}rA)64C$A_sAHC)B
zpQikY=_Sfgc<y-@r23I+66nd;gK+ctm-hZI4A@HS<KybSDc$DuNkJaqUimI8IdR0g
zN$4n<ax&UT%-tZ3OO!7&e<Y2(<?>dd)a3Drk`TuM0?}P)E71Tuk@xpPU=q>FTh{J(
zE)rn!(4W1^Oc~$6wv^e<$~HYhZ-cY(sKrnp`hF-dXbpN{?}9_+tf!AdYJ`7RhI`^?
zt~peNB**2G-r2jzJ3ml~;iXX*^o>lMxeL<9=Iq;l*n)N3x5dR~1XpeDF>HO1d%u`$
z4f)4y3?@ep)|4&_+)r&(tACDWs8xHgj{%BK^u;tQ*2E)RtiP=9%5u<QPA4VMX`F^I
z%U%}mDRByG7ncV5>QZs@*!+`|qwgoF&rBn&HN@Q)<3C6oZMvTiXDDTh!rJ5J{q*1Z
z3S`Q=5}ArCRh&5aaW)f4%gKqDvWi!$(s@euy3fohLUzbQaOB!N|Gr~O;}hX=69JNE
z)hW5$QPK{GQQlJLHP#FBV!m=p8Gq~#G?u|NC9T1>Qd!8`6f%EB1uiyNrk+PkL$gND
zS4lR}dr2eS>Nwov50-y<>&H-YAkUe~vU#<93{`wKZMdee(qR1Gp+sPAFuHrjjPDU(
zmvuZLMwb_v+iTpSuH#WXy<1iB1$r5fsy0Yz>2LDW$EJjKSX1-RLHtcL$r5oe=WE7A
zb!T>~>0(Km((^u9er`$1>8Ib-a+vv*OZn)h%gxLx2H@e+O<QpQ(oLNLBX#o`dg&L9
z(@P@}AG_Y{$6VO)h8jkrVE9*ad&|m)=LdM0o?>}cZK%%2^et-cyPq!1H9ZyCo~nQx
zIbURZyVldT)6d=$o2LPAm;pr<l%--q9gms0w}>sTO&xKY*z(%c0oKI^18(XP&vOl~
zy-y0HXFoN7qX_9eWr(l0j9kq;3;kT%xMC2ARj6@=PDAw!%3};%y~69>mN`IkCC<QA
zDP3&lD>^>5Y>AJ4wmE8&(>%>6=MXNKNSW~~$|uLiBXNzbX&XC1#hZxBHp%87L7mE~
zbAeORfm0QDiVJM;Du1Yv><T}IaM`(f#?}yRCfLjOkl3ZCY-qCvt?<jv)m$923w1Jf
zt{&yv7U}F<iTSG3f4kTg#frmW=L#b7N;4~6Y`bEM_(KkzpL=M%Qnp36;pjIx9__?w
zjj~xxnQ@m(2qLW{T@SdZXQKsm8I$VH-@8e*$E~gxulC$?Ja>xcernTUdB*bxJ@;T-
z_WP_oLfg4ma_B{siKakVZ&i&7J)Bq;2wTsBz&v0J$D6D&f;6=@cv)a0!GsD|gif-d
zw+32VsG6k$>um7sfN-NS9`M4a5FWy>-q1-R786YYp<0=y+Dy)fi2Mzne~uU5==r77
z@Goi#l;dx13hW_T-b&}y8Nf@!8D()(z|cq@4VcDBns6JSF|X)H&aZL8$)<p&W^Z*<
zsU%apB<4?NXu56+%*iGwGsjoEKs&>`HBpI)*p%}FQVeNg9_S@fZH>zU!VBS{z*K*1
zs4J`{Ii}=;0oY?}mGsT5dCM7o->J#R=aCYmv?vuwP=Sz9W_=P$+-Knnjk+&zC2^6T
zWQ?T0K*xvT@7oD$RR^y_Z)Am1vBp1cJ+{#g(T=WWtApND!3!)Nm>W1G;E!FU%B1#k
zn3!!N<9FE#+{|?wdSP#btugDRBxX{wBY^Qy6TiYc<Y1P&sNygNRsov^2$>|1mM(s)
z^=Y*uyl9dMCVIDy%}1ucwlLn)bcH$F67*j+u81VUfTpC${-3q5<Kn-e1r7Dcj<aCa
zIp-t7iP;uM6i;h&j8V7(f}?&?JnfKpdqq>=Ny>|~t8*Gof^j<(XY7Arh-|P|Da*o^
zNKMDjt=b^V`Ex4G`TR!xM|j2^GxZPtM*W>k6nodtfzgsvEB1Kj#o^wy_FV|5k&_Mf
zhY=tVCx=_?FEOc5-i@AD-zMjKTh4c9&UcYkPW+U<IOn@0=esoLyUhFc4{Hke`1bG1
zz{6#I9r>B&)2Zg1CnZF>ftDi?6pSDhhD{iLq4>7F<pO8XJ{)H;s2TUw>Dq<B<2`MF
z4rEpf`B~kjuFwjFEr*L<Cm{YNXmF#h!Tf_<parux*nD8J<GIjffxFZ?Mv&cC#MQ2*
z{Nk@}{oG*nBpB)|g9+SB@+MYa&lRdV@Qxmab28f)wc=7NQ0`zEs?Kl>AH21T^Yar5
zb#j8A&{>l6U7GV<=6wrw>&YtDcy6cXqDf&t0tGdLhVw%=p31bCTo$M$+Af%Zznmmt
zhES!FUN#LT#3)t*t9?;w!DV(0(n`@~jeB>%j$7&Tv03A9>Q7VXDM8I!UwX~15_p=9
zEmf_qVajW(%5x|a>e|&pmI&W9TUH2(IrPulN{%mpfZ80onUwQgm-9U(=X<L6&AVdr
z0}Xi04d~WYVIv;qJX>;`@C$eazpRn`0XI$;LBeJwT&x7hMNkP7lR`)}&r4-~Xv^e4
z1k(^<4%$S)A(YlurJT0LM~O0BsGrl-jqE`J+vSoXV(Jh|Sgg{M1wU#*l#4G2w8%@a
zFt1A0t@`=*oo&0?JWPp_&PcP3xOC-zWs|ZMW3B{?0?dt>ikD~PBn}16Aequ2<_iI3
zLO^_WK*TaRKHqkuqB)W$S`6UmXUZwf($UBtQ-CL@Fc4G<K#LyDfOMLEgL2b2BAe}q
zY}?CTIYYigN#bCqy09(hu0XBId6qO8l)a#2LIEfnc&3FG5y7jrPA*_J;Ogh!m+3%7
z#3{nVQ6v5|j%HDqhofdCyEvz&ewU?dQv2r+ExgQCvQa86F(jni>B2}e&!)L6@Bl7`
zEP<niFa0Jn(XHdVwJE^ELzM8<OF2#2T@B8YN36XBLs}YQq)?UCg<DJ!Lf0!WG4Kh}
z_!m|7(73cR4PEr8O@C`(F)qxe*rxR4Az&!Nub+RBVpYA_bqXWfs?PHGS-w+53PIcs
zwdp4S){F8i;rmFYkc|o<mBHnhy#3ym&OvxthBhHO!o`LP36onaBFxKacfWkvt+SuB
zxtvH<U|qO`Y8ARGz3@`GgwOLp6PWV1cz#tT|2og_BfSJRu~%9xxFlrRF@%VO(%7*Q
z$xC6=fwl==JeS12`Un>(j=wm4k)rky_Vj6~Z^^#=VZ00_3dLmGb0`G=@_;lyu2_4B
zl{3}fDExU;g%r8zqI8j8KP*kt$k#Ffn-!1-D0!=cGP%I^g`I~cxR<oT=3-u@$I@1q
zJt^C*^@9Oh9qx<p=;JcW4=l8%bE;eW#?A&ap~PK*yKsXxPS2(`ud@gpa|S?|EAJCP
zLoVQ3D(xoZEBxL;+S4tx-ob$6n6>NryTjq;uYXgnF+U)eG$os^QZoyR@pjvG_;9(l
z9SY60E_r7iC(xsNu-7=EM78+4ZJ9@(1*@mplt(<Tlr#7A_w{b{H_bqQ##^*%V=a)I
z2MaU<xw%Q=);XLqOV3D7f$%p-2zZ()C8MZ~vSlJFnPVI1QC-xR=W;}B4sZM=3l?!E
zLL_Nv#%kFnD1nD%^S58Bd`|zEEq~SFzGaSY+k}UEC21~jWgqB;G-g7269Onx6hP)W
zT=e%R>z?J__t(?*P!7qSfO?9{vb5V>Xq+#PS4QS$;nS|-dBjo8B(IuUSIwAoHJ<*_
z-B%nUOrGGw0HaEV=*^j4$;y@~x!sj~l8uuv6AiHk%zgoz-o^e|d$`K#El23(zkurW
z&~hdiqn&xzvN-_-Q$wEr#+mAj<PmKbLVeV~;cPox7RxK7B3GL8{zAVIx5maH4~8{5
z6qEP7X5_8rK^wEc31Z1H%}+x|U$jeRT;PPX<e2Lf_O2IZ7sAOgzf{<BHq23l1mI|S
zUdSI>V1>NYO#o^6B2em=x{ABG>3ztVd-5xNQ0Hh8fn-UAqV1r+sujYKH#K)RN}y4P
zvk|;jdhw%&*p-)}Zt(jbU)zt5W-l#VW%UIN$K_|Cg-jgrJm2=#t`H<m(OSZ_;ha_z
zAHOy|6c1tmqghH1j@do3gF_idUja(lByXYs;Z!5Y_2I0Ad?m(QLRA{Whg_)yLnh#r
zFg!u&acgY8^st$o9X@uZA!$Cwci5+hYasb!?;%U4^e3zTw)(Pw6B@VC9CP^*s!2OE
zC!D*>0%bYB9X(qX2q+z~8+*HYP-Co*sFJS+^8&G{O<bzYu9`v|XApr`={$orE4BI)
z$%c6OjrO|XzQ7(-;OZD!#~z`?98DEf?2zY&qrLJ%iRO9M|5W6=jf=Hiz*&UG#dG=a
zrBgKCXH&E^csUlU7kOwi(x-9p9qEL<De6&%wiJ)b*jvZ`3&RypN8;hATQKA?9yBi@
z6jy#PXLQ8s1`BjIF|p+AB+1E%km+om9cX~qHMf+CBTbcuom~9oO`Jmi^bq;AOgegz
z5aw3&3Mpq!)*4qoJ7yqME4B63Hb_xdEp|j(wJ&rX3P^@zJMn<^H=7)2$%^o;it0Kl
zGx`Crs~B75h^NdLqe`=6<+hG~u(&6KVJ$Zx=i6eZO|$@opi_Vn3F=qFv^R%JrIM`+
zGxu5A)HAKDksN!s5Y{K8J7{`Y%e3STyUkON^UUB{`4S+dCQ(;puho2yqI6nPi!U7~
z>Z(PDYa4h6X|oOdlBzZ1c5C2CX?o3VpFQ1b&fWBFO$-4<ZWH~{dni{eRBN<voYPVZ
zme)Ww<GQylnHpl37F*56Gc_<qK5<SC`#b+0$Nruq4%i$o_vDvEsJ#=ZQuOid1R^O&
zWb7?NZ6~Cc{gb?25NXt?7l3z4I*jjzobNd~-}7?5A5DMrpk+>T^<9^a;(Kb&_uQQC
z2fS~s{TuoABPlM%&GwwO1=D@yt;*}nuO{x|G2HnXsOv<y{A>%nZ_5tuD{(!o1ete(
zStuzj1aOL4&5&A;KSST4#G$9w?9T{BZS^lZCMU3UgW`Y@RcdZ#0~w+kb2frWq<>~C
z$LdL`-G<l!0$60(*l;LI``g*?wO+bO)%hA5xG#!zQ<iV|D0j&Tf=0vDy!f}TRk(&^
zJ140rU0L#MJyJq4ILp9}2TZv=rWj7n4m?W#n_IJ)e=nmHP~j9xP#nT=o`2CfdH$;P
z&36To1n4Hqhww-eNJr_5obOde6>k*@p7R5B=|-axF(<ip3$&58bf>4)pcUI-W8A!a
z;jS+998F1AuE$Mgh!ZC`I82G<_F|zRwxb@xXc0>IVUAsMjgMVJ4*@T5o=hp{k;0yq
z^^*Mi%}kQ{UJ}(rEXCQgMijTCFMmW076^SOdQ!eZ9`$O}_xkiVielIyZ$n$$pG>*_
z$6aPlJ5};}_yH<{d2F%}a0z_dtR1pl9pup4w27mU;_xkW4_o%LZNvPFZgnJ<WGPF8
zNUj;TiHm=sHU33+1?B<(J@Q*1Y<dezNiaQ&nY^-AtpEBKEeJe7ipu5%f!!qGc6~kD
z(kRXe4ChTPYOO5RbfOOR)t59j==%270Rolvq0+>smhdU8#HW_>=t^1RPDf4BVbj&`
z5yR?08dQn?y34M!C54I|@fOw`@3Xum^`25^_Osm_B<i4lCXuHGcY<}{ODZGL0GzP#
z5)Y$2I@wbK5=ClioQ_sD+WBK%4(g?A^ym1SdNEGm&?+U*AA1vg!|Rm12AL<iv(kU#
zGLqKBpXzpiaBd3{+(Ccr;nM`9ieY7Sq%&v#P>htzK}m#b1?+!E4-N4U^*1rFm(d{m
zu#s!LKl-!+m^<r0g$~*)RZ|e!txEi)L~Ev|1;nVxYF>^oZF6<-m1}ia0QeUXRsKa+
z<=fY`|IJ)lmALBIZq%1UYn&4EHyNk^<G7eiqXrJ4`C~tFgGQ7<C$6Ulg3%NDKzXFJ
zusqjW)k~B*<sgYt-uVMH!aVpVjFx*Xne`*hCFy8$Gf`2_;V><ZYO)N|KWmU>QMX!-
zYvl#%fQ+nE5-H}(&H|R}%p(dq`RqU{=LBvcTujpjqF#&j%#nv2(s2U!JH@sn%{W|p
zra!gr^!ejo5w77OO{tQr3|~D5$($?@MibZ$7Abu_j#5|<T#7mpE5$~aLON)rm~P7$
z&etwNsQgO-Nr{?l#MQSEjJE+VzD|6KZS+d>IfSbL9wZu?s;7_`ASuF8Jr)HHlDS@r
zVwa-COYtvTh9EhH5Fpv#gX96Fr|wdMsrpg8_{#9HC4QIFa>uvw?Pk5n{#Vv$1}rCm
zS%_9ba+MXB%fFu%nERi;x4^uN(`6!zN#?r=^}Gb;^`GzVN?pL=HnuXf^Pxr3u|Lsk
z7nWpWdY4yHQl*lYm{bKCkn6c5xKHEtedz8AMvQ;a^@R*UbR3ip%fU4lS(qlU$xhx9
z6?!@+BrJLUgOyH}>Wc5?eA8V7QNJc4-f9_F2Dj+Dkwt?pX#`Om$6r`c0=hW+XTq0m
z?m9Wyx3ra~uM-E@#CfnG4X@a}UdiDkQx4h9DYsGhkD+omo^6*~C}HAu%3^OC-jn9$
zzh<>Sp=pL5-N~rZ@<6P-NrgKWua$$2wle<_S>rJhHMB@)BzKt4f4s*vHKAT*fGKe0
zt<ouIR4zPVdspf*ih~R+L-scvk8g1$<@z5-KL_bgruW;$rbG;K@vp~~lqMbfs*Oc`
zICDg(eR>U5{A*rnrBdofrDkeUe0&ww$D*CZ{+kX&>8?<vwlh?r4OkF(g@6$+O^)ul
z#DCIj{*zV-fM&uZk#G!Zfi183*1&HF<KpQnHOcw;!ZGBZASh4k$G%H+78;)Un||u7
zt!CH7+DV~P#pY^~$L7`WBFC%~(2zMyJhcCIyH`?}x)VuZjvA{83%qC&gS@^E|9N5{
zpXv6~J(E%Q2{ox%@J~-K0gReLHN~a@YvMfF;WW+ybkBEz8V!5s$Rm$jd?e)so2$5j
zy_M(K3%E~W!K7<sKLPuLK$YqPK-pQQ-h#{$gbJ#7r3q1)Fa2s5c$(N+b@8ieb9l_=
zuAV;sO)tWhC&QP~Y%BsxYA#ega^+*pLTl~eD3+U+6eB)!-z|{oZzW2&bIb5gPK7{Q
z5)V{(n#OeeC^>rHZkrxC`ya?|HOV1|osA-m2XHu#)}uP!65Z&pUS;y>v;3YxJmd7y
zd{S4a`J_GJiWeeJBWq01#77IPMc^G~fZ*w3BKF|PNRgE^STniMZ%(^ABZ8i~%@VVM
z=`_8-y!S-%;^(aOAG1xY6yeqH!wA~XAN#u<vYfQb>Aqt{S9Z+lL_8ctB(3h`(Ewlc
z`6An+4<dRl4pARH$qUc%?a_@;c;106(RWLt8{dw$oJmApd|ULR9?^~YC|eGEDf-?=
z(bd@VBvG(=BEfG(TgFGf$|GS<@@?D_Z3(8{hu>x87gx7>uf+8Kk+@=SM4brdk`OoP
zKJ5C`7e~#HqMgI8EeYGruOjuT|1Ybj73K2DCz1NnJW|$6c9;{`c(wfSOG_WQtTJ#8
zhZ>L1;@=yCv+aPhtChF=Q;Do<e{30}Ir=B|@q`mw^M|>iRg-rmlzhs5Q1S^VqSE{i
z@`e}D<F+WvCP1MXPxk8gs*pw}_YY_mk1f2$;CUe5AM1kl>9E0KJ)#rw_(pOy_X>Ww
zidS?_-w(p+IopN>Vau9|6mP!1(B0<phSiGi0?cD5{W9w(i`Sg{<>!y0-H+sq1Ngxl
z`abm)Y=HS8I}Em^WZm5E&Y0Jp$k`%!qb$8S<P9CQaVll7?W^sP20j&J08sk|0yJ0t
zGR>5Rrt5c<<F=Blae2pl!|dp8qySg%g)Ze!b5e3BouX|OOvg&e1mH8rx|Cx`$sm)`
z$yV>-QF%JOJU+`3G)dIuZ?{XNdnf@kXlRW=CpZtI%k=#iRxR`D2ZWjE)HpcH%?sfy
zS3sh69#VuR0CRaSIINe7`oz((Z)awqR-;sT!IMRbpuwx-Zp64!xx=)0eZK2aC3QIv
zd~6P@gqw0N<g&~L_#%D)DFP5xv0<c>O4gGRb4By+(OJo_I<Py+sLf$oIiGMXG-0dr
zDuTNsC;1okXljXYca3Q^)0{g|=ht|UdeCs1LYVe99m){XJ+atrc2&wIhiWFVI>c0-
zzu6wk|09@Ve%S{^ljkFiJ*?|5a4;VZ%qd=*@#KHrkjt;;yxuGwLt?CnUdzJ6KCQ{y
zW9p9IBMfR90D`-4{7r+t<0=$m2anko$e5m$kn##`dHugxUJ>O5{g039@jy}i4Tv>;
zp^8Re+`EpmfZq#K+uR%iSl#NQNj+$iSFM>a#_EGqTusHt(+1U`?&RSOUHIu=oy<RA
za<se$yE&|@90d9PrkSJ#ilYAj#RgjX{{qEME(N8bcz(2{IR}NA_Wc^}Bn?}|t0KLx
z*}pokO|vCX3<Qca|J}Ro?QkS<UJt*vJM8htZbxl|Y4aki1oY@zClq@+Oqrhzc0_5>
zHmsA@DMjiU%WIK;xOyO)o9TI&1+Ro^Ra7ax#WTpT>4{2gZlfZ-`H=YNr!2%@GBNg;
zQbTn61UaDv;^Uvs>IYK;m?*RQXqqCSIaHDI&st=s``lUJd*huXUu2s4!8seaLX_T5
zNQ@g^HS9TNGJn%pIC8WT#9bj$_E>Kyu9p?kOu4nU@3Z@=;#)BHl@X)!&e_~`8e(+n
zWaOMQzU{<%8c3F?grsz2s$J|lV?WE$e{$r<^s4DPo>q<oS$2pC5z#%p{Wt!O2C0u4
z3GqK3%m>9{cF`7e+pYdtR}(!s`m0_neSWH@W9=r{FMrtpdp7au%*>F(6mmX8qiE+I
z;L|2TbTzM%9T@3Ib2n)Ip-21E+f5kLa$N5G5!<?uPp5z)YI5PseQp**q@ASMEIDxC
z5M_fBO^@iieh#_r(;V(YKyZ~QY)R#3!f3&^$ZL{?H4Tc#?JBb*Ep7-C_%)8dX&*O0
z6;_2sD9Bk!g%a^phA9_Nk0&tR9*Pf`$>2~*v;7C!%UNL40I9<0OJS}$dF+kmmO(@h
z+h(oexLA0uVyW=^q-DYGYVVO-`%~#!-F_}j{o&yLK3?+zgc9<`w}s+;XL_?@#}!nl
zdXW*6*XD)d`A={iD$a%A{3nok@_TscMlJBF`l!(I0A(4`MWG~|i6AyQU0{fm0?{9B
z<Zrbe7K-lKmqXT;OFHhxD_Nm3_82(oyfr_%$*+ozukdP!$;7B|2a?LEC8P~{TpabV
z8FQEhh{LNURhvdqiW13Hs?=c=qP+=P*NNZlXFbNwjY2dvxR7~X$ofpk&4gGz%{2-l
zvHDLNS4}r?EzDd+bgG^&*yQl4_$R?(&)Wgn6WZVi7-KRrvMRoVH!t;8-?hV5mVgD0
z>-fLJAr97rp70SG)}_Y*@4XStlqZfPa=3t(Dj5AF&-6PTiE-E-y*22+={-cEOa^JM
z3Ks3-_l1U~cyG{e-y1xQB2!DP0!J&*t!9h@-q)2j2(3}jKxrc7QzaYq3So^YF`-u{
zcM18EJPTC-uN=MC$y8B2tR<AUF1oQ(g5fMbOo8taPsN|dBo($n%fj)|M^~)6dTZ))
zM1O1E0ljBt|8WZ@>dd^GsQgw8M5dX@{dW+$1c4>B5bm1}{jEapQ|MM3DpWAwEb3{(
zJ{(l<))la^F7p9eq}1trasP|2=iXC!6Sy`<JLeH%_IsAq#{pEHm>QrXbvc^jjkCHw
z?&_-8;h)uyOFIelpXg}4m=C>}&v2!Em1JK&>4*O4djzD~_*12;KTgmM#dmsqmE%w(
z6upY@tA>4T?ikPMefr6UgYHJc!#y2OY=zNAzbc$|EOIn*_TvZzRaihBpczKp(p=;O
z><xTZ=W#lgdmPfJr*3C4C4$fN9jEJ`u1?hKPv6xP(RX3`j+M^4^xf0d!`ef6Pt%X6
z6R%#3%k#B+qHTqzCI*z%#0QM1c>U_F9rI{T@WrkESSh0=wGa`!8v>=jnXxvbO^*n{
z1f5@QkHd7*Cir<2NmT<aIb?XDUoxR|#lA>I>eLT4#US-TUV5x7h#}0L^#wsBJ8Yq{
zRZ^|z6pxxM1EuqAE`Rhu@>ueujMEYUW1n2$o}p}_E_OqSF*K|#oVUST7Uc%iU)U9&
z|6_K=|8|^6WXNK^?ID#bu&}BPgMZlY%=wf<|C-(u?-i3`X3R}w(BAeq7PI7Uz`F!V
zJ43}=AJqAj@0iz{w8^%?{6yv9o{gL8rAp{t%RQKZL`NCr%j&3AzFb>88Kg+@;*0cC
zq*N}^&P%Sz=hi8&(IWLvhH@4Y3WpQLF?Z=gex8XU_TovBH81r~_83o2F0-p-_>LvL
z;IP)3_^0OZGrSd-UH-8eEaQF{c~hfOP&hN86*3r3auMT;C_S9Fz#d1Hj_VGZQNy8b
z9Wn{WhX-l^ibp#Z*mL*Q$-$hi{;(!-X`ms!o^-0M1#j&}wr=Pfs_49?cX)2FH9w#E
zc`fs0N8~LIr36xy7C(rorujfSWm>VT-O{l_ug(b_1bcywQb!^11XmPP`WjPPHVC~W
zw9_fdq<piDxgEfqfQL~gPr!?RmtHyCDQeQv-9ngBqB1{Q01=I#(#%&GZVY=xWy%SD
zOF0`na7(gF*7Oq6+&f%U;~02qKcqad{uj5VzGf(m_)^?=<uIN8ah&*HjcHxrgFWe;
zbJ!TSCv-ZHE=ImR*DXfwDYY%!MjuJmcwwkToV?W2pq>M0O<;R3*$SS?mvF9>-cl{K
zkBp1MF&Y`8qSM8=sfkn@T#+vXJIj{p33CAC{70Ky-Z$j^E)CBSvxfZ50r)jCOZVm3
zt{oQSW@;A5gB{57=79WdtIRW>{x7Rcf72=Gr_G*QfH|mZ*sC_?XTV9+=b_T*GE)I2
zH5Jm~=-qwCGj@?OGGq5A40iLqnM|?&c~_icDQv}BbpbpleQYB2>^m75q>Oe*1`#he
zEkj&~PsJn5+Q^L1@qq<o<Us(USz<9IniV&Qacnh*9iyDy;iOtR!d&_wO!upgEbOLY
zFWCQbKd@g6!34z_thH-q9=cLvG&%A_MUVZ5^14%xL}@F9n!<@n_SQ02Q}20{TJE*A
zIKhV{f*E$IZkO#ykBB>e2TO7z0?G0f=s5Kle<)gWO<HcSvO*A9VK<_}?o^jVie%p&
zV)@j}TenK+cnrs{2nolYk{nK3^RU#1{!n3gT<s7UJ`byB{$lA_v;UsSOkjIb{TVgX
zIh@jHj$V<eX!p;01=uTA`)7TOORU{0VcWrrUF5|+i>rQkjPUZNz|oZ9k3LRd>Q<NU
zb2@`k>%DxRQ@u*v$Hi`QvDz6@ov(SZn{id@b*|K%r1D2!Cor{uKNKhY#5E5GnTL1N
ziruL&5{yXmwu2ze6hlhe0OfOpN2i=fU8qH3a^#4M+<=-NAmMnp6{1)g*PvxWFVMoD
z)a{5kcKsrnqsz25O<nK-W8>m3bd!!(u6oneI#ji8r&ch3GYNgEVUV&ZK2PQ`niSwv
z<8?@gm0z|NapxPc#wy2C5AdaHUJqaBu6dRJ#9j0Hm37yop7h+gp8IDn{vzDeW-st^
z&wbV_q`>pP;kjM7T-dSc<-YC0)j(~!XgG#bF`Id9>T@sC{&fzbBRuyjFTBF@PqOaX
zRF&ty)N>o0tHRsqLKWWqY;S5`56s;cxEe0=a=z;MS9$&gp1;oXPxIXCJh#bnXL;#<
zjbBgjg?v72_3gsgU0B`c&VSM|T)QqOz?}Yww(FLbW+MB$$YMnvt;po`N^{OQawMk9
zreS@7=|Cb#UzzT8Ug~YUJlC0BuO|zJ%^%>ZjrXSJIhn%$X>+>gfo)OqT)>n}ir*?A
zIlb__R24Fzy<cwOkG2(?zdS5hdCHQk)O)F`cMkXIKh&MRa5C18UcV+eGJ(((oXBh*
zoKSPgCYjkUWz~3T*5>vF>tw$$9@AI}M!!a(ae^R#ug&Q1v+s?Y!;Zot^p_*L%n&}p
ziRDVlrgF7E#H*jJJkez?)nuKx&DI%bn4&nWACV^V9Q{FZ>dIueq_T0(Af6(YqOtiz
zmpbxcHRJT(T*cDuo8yPM>FfHVRP1sUtHUZGf*soHXG?Nln+L$`Ito4JUYEBCO!!(0
zzB6ecQrq?a1kkqFHsIB0qm@SLlB5kGqB9#&$tTB%W?YRR`sFd6^<^`g0(8(cv0U-y
zf_%YKwJzsg(>=!tS(mNXrKaHdL2H5Lf;FJ;l|S|O*@tV)AC4p!Ncsn^T6ZDfwiaA|
z_CPqoIeg2AoI|P^yf4#tay{*38B*zC6jqcB_2_CWKPoaf_1gZZZ?g1-U`x2aX(hp7
zo}2vyg+WaDTl3Xb3vE{=$9#S?a`_C~Nfw(9i$^9nwwTO+AH2+?dD8DE4i7e74`*#U
zQ3WP!IL~sYyOO1CAdj2w*ry$X5Y3|1rqKQ4G*;s=i>lT40%y?wiw^)og_Ba<$c-*;
zpFg=#m(X9cfOgwTV~=b?fv<T0!fQ)j(@T-9-Zc|jg!u(!wy7h5tluw-on7--nO$Ie
zEp<NK2uqeLJRX~(j{E%BZJcR&Sp6Lu_3&<-$OXZfU$eQz)&3>$2hN`^p(|#rGTfB>
zn97-Y#;xY2B-V-Cz5ea<pvlBS(GnDImx3R1e8=j$KjEV$zFcvk`28y0ZBYE2JX9-4
z;IE<h!*i4yy5(N~!)k~5BPqDoAF~nhd@lcEhn9DO7phh6o_<gUcnZxwTaYO&#UgFS
zZ&OpC4^>$c4{%U+xy6I!Bxl8ip`4DcQb2S~VR+QtwxeSMXt~#6(dBj&fGPDGucXsU
z_EMdh@#?lNFV^4mp@QkOtu3V7Xg!Q3^(doBj&L5^DAnyS+ta3`|F*8S7^i{lPdA@q
zg*wU*j}<wm*f}N6DV39qm0O?6T2EQ#@ckJ($yjYBv=AWKAGV=$31xJm>zUjZYs5n<
z<83wZg>`)6OmWUs=QLPnd9!oo;801sDrp_4VO_9ke?QCT543`Ai)|zxeJ<U4{{vo9
zIW*S#sOA1g`NCQ3oEGP-v(CfoaVW*$=toWKR8!x67I2@?ZxPm_(34dEVx@DJe6A`O
zaDdF{@$v&1wFSGF2=6M?s*TvdxVwZvoKok={x&Hq<+R1ZIQGg<{O(#CarY$W)H!F0
zbEe|ZS4B8xz&+9&umm15XkdE#E*@(jDikjY$M0@bqOEr;5h~3gUkuPSsO57BrP^kj
z428$tbCj$B6+4j+==)0dy;$FM?z^4u*4R4!vOoD9n{=b1x7+X7HohHd77I0RxfHt3
zXNI~0iuApo`!3P<<D?m(u9=DtjcGW(yo@iLa_3Y!C+wVB=S*@=opms$5u0Ma>_{{V
zSU}3i!Lxc(I#Cb<DI=a@R3w+zN;4Bbwb8$CRkIrnRdZWo?=S*bzAUUHmJZ;reqgtZ
zPqV*kM4i6RrDTeks_)b6w@t%PwyZj_P@~WxV4D!|=9pc~kg->&ATe=HbHSNM=vrCq
zRs78bBk|~2?13X%qC0y;dWVw*g9r-83y#4_OuUs)8~JgbjqK+lzo*EmxiU?ATPfAC
zw|p>4qpic0^=^eocgi#21<%@`n1ZNO47@q^13a3>3ehk&F4tV+<2kFum=>jl{~W^W
zClmfo8Os}Jq_2KIxS5(ulDkP_Cb4aio|zKMZ6iMn@9IieRuS#wUTM5wDhcBS=i0xI
z9!`rNw<vCl<x@G5Kc{mFs)@xp8Yg=FUB3FhiK;mjRdadnhi%BEwIpJgkUSh+F8F=*
zJaT#46uw5l$X4t(0q*<ti84b=;YY)5{Z(t?F=bd;N?!9%siSpQGghZUk_GE#>y}YZ
z(bop<yE81t7L)Zw5YRSOD^j2tTLJ<fCB1p?L9Rh0@1|iHwn;8;db+!qB>sJ4nix!&
zIiEt4BQIi8hqB>iQwdk?u}ORg0_RM@(fnR-UBVk&cq5K^QA{LR@UwbbZwXq;Hd|Y;
z%$B6QL?5JR>InOPK|Ag)%Ymb%NG5d_Hma-GVd~O~Xa`)hT+O)zAemBxK28{G-TLl*
zy63UnCbzTB##vO9Sgx9#c=3V)qRUk?+`<Ce8v7-_JpXOBiI6$GI}~582GN{O5&VPO
zwtBPYQFpLRyiJXR$=fNZCSI02nS)MK3*$+JhZ9MMg8UcFy+0O&US~BFnTu4;B=zJb
zl+)_TgvAFZ_$=P(%0#S|La-`OSi|m#6J?m07m|tlO4P0{4#jz00XVm4nx3cjBUO<t
zYedKF|AeMybrPlx;LcZA174{j;Ui`d-!?X^Lc?uiMVBhK9MVxYLo<~L+oSQZp+ror
zf+Ax#apVJO!;+puJ5N#-GxG=IXBAh=rXS`K%$Ru^H)TvRRf);P@t6<r5Mm?63?@FK
zoxS`wt~+-NANwF8@<BIjbWM=JL2s!7%`&SY1{)K<+bD)f8pkY~y@wHh7@v~Ad!4<7
zu6T=ir=1X-_0FlqiC*7~)F>Mi;Y3wqIB~ZE!-@R$p+p^1Lu@Ku9n){xbRa^U<+8#A
zc-8&eSR>K$?`36y4pv5<p-JqEf@7B689CD5beT4=cx$96^S%gy>-%s@=B3Ey5cgEm
zl=}3rcg*6xmM|n9g%Y=E$N|ng3l1lm!gen#DLf?3Dc0HHM=7T!@k`#u!aA$B->V0_
zsw+15n|@E^DT(|&5P^!&tB<C4p5*%aw?gq<+%fVu*OMkxVP!pk(@XLo)UA4to4~f2
zTDQap7X_2&2M}|Ys~DIUAnVKAIYSt<=o02a74Q3JeaW0?mu9gO*v#~b2_+T^{n*A$
zJlxJlC{YrMf7UV7u5*+5`@Lu|=P`<fp}*-dAvSpydE;v;UXHvMw^Cqe)WWyPCzBz2
zr~pB@|3nGG+p>c2r#XUfnU>D0HuW&(Hue!D0dvq}7-d@PR!6JwyH%bC*QxQZk%$FY
z!q&!9LcwA0@bJpr+B-fuIlzvx>g2Cu*e9%z(mZBc5f99b#?&wl!7OjYHO)8B=4h<e
zg;{r0RkMHAt&qJVetQzMFI=DV6x>|YdGxz|B#(CVjPB~;zkQVk!mX<dUkt{d<1`>W
zVx`d{ak_Y{*f~Du6yh{4e@(L*b~`DGQ79piIa}##lFMDf<#VV&eDH}KTjfg4^a!7-
z@TPIl_{w&s1arl$)@<g$Oa83MgLPrSSB(Q?NOQ<Vgoq8ZSyVfvCV5FIf&D@X^k4b9
zB6fz8_U4;zCl$cL6!C(M@DICfDz!T%o-DX(-+?~=u%wWsAVVd)iv}ur8~^{Uux*4b
zCJc#0ROa9JAc64Fy#i`%38~)k?|WX6>9@$uR#&<5{a4vSTcf%)$>sB_Z02}W+7gr|
zl{l>&uoQLeyPtpGQ;J}vC8o58CZeUagqth(vEOz2u5;g0^*uq~iGm~Ow5TnP<)c%)
zBo-C|ASRdAkq((7OfNS_wZm?<GLQ**gT8?;l&ZOH(J{nW6c<zmkQ4SV2+G+vstH;0
zS@YPb2uI7+$p~nW9>h^~S2%vklz3FHr6#OMK?W(sy;}E;N=-x9Jm)+r=MT|?anPe8
zXjn0UrFVR6J+1f$+rCl~B<)lOGt;c?)(&<V2aRdMz^o6GDIYkMjtgn}A-!e}{md4h
z(6ZdlgCqLT+Q(yBUBGO#dVuvJqpKU*73iu9#cyjS`(!6tBw|a5Lb7l()KzvF6Sv|G
z1I#T^?w;c+7buCCTd&+b7Y_>v#Ux{10udBNsWoP-IyJFS%M}m6?&-{#$hd&3ffHS>
z8HuO=7Cs<gZjB`<0RROj{r4tGnq$AotxC&1)n;awO3M~2v13u8qH}Xtp{S^!Yt8_z
zKkU-l(tb@mS%$O$QA_ABr=vPY{I~HsGnnXiD%+r;I5ZxcDybx%Y*4x%kdDYQB1IuA
z9jKj%IF{3r&3s5Qb57VflW-7ZXpN7nSZGEhjVzo5Y+$vJ;BfM`c6_JCJK454Bb+>?
zu*=F#psa}Su7zqxO)`vL-cGq)HuLy1pyN5j1SfPYlxSu8_Wzo0&=95IM}>vxla(GC
z?2CBy0~)7K^+`6LUgpdPJb`?NgiBgq{UtStLxTtFGV%xYK^Y7k&8d~FrB)Q=jN36E
z+{}i>Egb$)ib13RN?}~yrJk;;C&7uN09ma4Ka9Lrt#W`-#cL(D3V+i-;d9FMDw~Jl
z=u!=#ylXDDMpc;)GMhh@Nh&;;3d4ziDUGtsQoSg}?j)<t&@U&$AZ6G#*=A_=GMwRM
zxZKsH5ekQ{1Ol5KPMxVQHJj}JblH_o^?ldN{zI32uFW3n_kC?BJ**`S@N2l!!K)7j
zP0^(q_4tA$!S{gkeHR}ztPG*#v5N3YIuk(fEq2L5_`IpzANz=MYEY#K#fgU>z!Ahe
z@WADhL4a?Su2-fT(mSUijcSOw%=Q!p3C*bj9;97XEPO8)Q32u4(pfoql)=Gu%K9)_
z>D*?obNdU|y3EmL4xt2V5<NH1c;)$(%QM&J*=pWYRb=>-ZAhvV&GR6lFuGA8D5?mN
zH~0$??Q(g|+NXBw+YV#9HhA(Hu;b0=oj2KpmfoNJ3Eynt2m0-%kS??Plda0AF=4jx
zohn9%*1eQr>(cL$`I`@7YcKE3kiYu9R1u#N8JCKEGMGfL(TX4XWBbq#;W#Jj3(gB`
zRrP|?|N9qBMdsphHztDk_EAT3dkvgnN|9&jto-H4Z9D*xuyY@JK_{=xwDMYNqOH(3
z(}L)vCSUCqhKfL50uVFe>xMmz7BMY3B}eDQZDK1s%|~yIG$`(bK!_4CG6bZG_4y*4
z1zD)C)GO>iWzIj^AUc4hx^Qonlu1^y-yTBKF?A8)*v51$NauI0BBd~6#*kzs>VLSv
zkkN5EdvJr$#NDom(rG(e>i(u7r?ZJPi9d5jyp+0yRsu32j-ZfruHyhf8);kXQD7Hv
za))I}>OP%2N=vhU>_|F%uheirr<Qt$;}5K)GFCNvnC(Y7tC|n0lvT<-tX)W3=Z}U+
zoEpg=x87G7sl&I?vz)TLv4xe9UC%sjKl=D%HxE^V3Of4?#96NCiY2rrK()=T`Iw|v
z_e7HukJS)tZu|-=bJM4J8sQ!E*eUnN7i*H$+h+B*AQ_?HVyZ&JSL>Wf&Z%?G6z5EJ
zPJ?qAozv``IXE5!=3>=@R*WFii~0d^G2a~4PcCm!;Py^{N~<dTSrH?)43J4AAUK@2
zP~y*sw-Db7PCv*BJhgJ1TxW*=UfV)eU-SR*_Ac;IRag7)3`rm$aH0~3iZ$AxAgDx8
z6B0B-CU8a)jY0%3C`Bb$t02snScOC<BRM@Cjkdm8TPtt9VQnj|<sx!PLP$Un0wRKP
zi8nmQ00B{mD9QIcYoECU@qO+0eg8i{GUuFqU3=}d*Is+=wbzb_YfkwXsZ`Dy&k=3_
zwFsqxk!@$G)r*(mt2*>1J|bF)>yJUKRl+U@<^)2A#Vn`@G6*CQ&YXqDQ=EA57_1(g
zjq%0F6OTOg;2estV)fuuim$2ic<veXSfCyY)nk!*EK`qK^;oAK&FZlo4>Y0$4*)zv
zJ<8Ri8js4A=t}a&O*ra}?iFTp7497)(|zwO;o)acI9c*k8mDjbxh%A-t|hr=GlFg>
zGcoo=KJUP%yh9PgDwc$PfspFZ9r&<*(@DgH$@a{}qCyO>6o~-mus7}(HdqN(>P+gw
z442+Vv6BN5&{Pdd#bJU(%&|Cw2Ed?tIWwp>qdT#j0PMn1Us&=z5D(AzD+i-iuMtjX
z<tvZ0Ar$@4;Y1WdU5p4k@)#eMUh8xI8PLp`qU?cCmW93sA;~V2;tLRJea5;%&6||S
zlz@EX9|Qw95o{Ts5<hCyBjD3tQ3Ry}5o!Cm_Ny%n4_k|YO25Z6wyB@b(U(6M<H>8x
z8423qz+9b<6xW!!>DKj#M^cz>;%r-P2s^?qg(IsPF%eyh&*%=W<1?>_ZiS4+@x)2V
z*g3Qoypl)*`Lq+V`?_Qw3q?tjFW3Mh$+DDKA-D=*QW^`n8HJenwB0u*4CfsSg~rJG
zqU_JL(ADT;I~QKLf6%lq9+jr)qPv<ivGtPJew>+K?94*Y7{Dt(N<{#j+4e@M$F-`#
zbn|VBE==T9Sk`4(V^LrcZ1JckAzA26zy|7Q$|J9aG<U@RG8yi@tXNHQbOQ)`Gnp9N
z)=L+1QjpoN(6}$z4v>J&vo9V%jVx3eyG38J2Yq2(2rVCPHDbvT_cT|7;H-zIKvuw1
z+*1;W9xYhTyTV_hDS)F`Lq>c>GoFDtgf=d?GQ9<}m&`HQD92MdFAwYY5odrp_Xoe&
z6>Q44{yD81?l(5O%e}o`?FDO2Z#|sU@<?A7OptR2BefVI{sze)5%mvjrC+ObRA!YS
z2mr8jFRaLTqef^IO$Z_hZipp73v}Fc;WcNZTWvpwNk;H^k1{N9qvzpOnVi$DbC3=3
z$pJfBQg10qv5Q6D3Cm-(XoXom9R6c6>`O2k#roR;i;#PBW(?PYDTv0j?!VL&C1Z9d
zmwdMBMZsZsI6goW5##UZO-M>BrJCprEueKU1`5nB%aW}UOc)#~=1LA;3<nf~s#zSU
zf0^~vi!v0F-BKyC$knp9feN6#AnyZLxpK59bglK6h?s%|bsYSGLnu;incUSBS8%Q>
zI4wa626I7;IZm6t5M5tfn}(pXVz)a<o9vGuJy1v_q{bd+FVrf*5out)ciH(r(D%jl
zPsLQ}pFVN@^D6{7I5%}KubwIwD1<mL9!=b70Ht07Ai=y%nG6VE4?6M?^>d+b(MLXW
zEXMDC3_o00kL%7{{&@}ox28khv=UGed$lMBr}%IsbcEDeZ$r3Aw>2Y#Y{TRBcwo%i
ze(U`kK+Q$_`nX_5&y1kyENdlFbCiaYMj!@xf}h}YLvD)oA|j;d*)KT&Qo~q~Gp|^C
zWU_Rd0MGIGfT%Cyc6ZC~j*dq#HqhNvxbnJLX7xSRcu9RqmrKF@FyyfQa-$mF7a~D$
z^qjs}#NzZcsWtPnLY%+q4cpuBMZOS>7O*@PPVhLA`hpe7Y9t50_$b&^V10Qj5pz`}
zY-g~^Yi&cAr?LX-Ob&SufC_%`VX$eewGt6g)GcC8aA7toV<O4I8Q)K<RN|}QtVs&Y
zAk+!ooIxA<K(+~v1eoAiUZX|s#}>AQIi|?WZM5E=99KmV0Wr(c>9sDDElkj<V+3OC
zOC+T0jd8(wKu!pS*tQ4)YV6<fO&fG0q;|W2m~|wGqF8V@N!=CEm$0mC0Z8$2V~;t@
zYmGx&gp=`h^}m8WiX(VXD-eEkZeKMGj!ld(#`Zbg^Kq~6Xkw03VU;0^FW8wF*x`^q
zFbF<qG#a8tuRCy-^_l3?oVJc*6?-uMBOUZo))f-jmF52q^;(ZP$nK8>!O>Us5}KHa
z*&HH8_@dDiL&AYYYEJ5cdC-i*tipYI_5|gaxplP69?b$H-CBDKJEH=O=7{Cr+Xklv
zi(LMT)hrd^$DXj4_9P9J4<#*f1r8Z%0oR^TcD7nSL<%EKSu<H+@cTsJ2V`FdCdO5F
z9b%RHggw^U>*B~O3lT)6S&?F`U=GqBlxsohBe!ZuPLc=h&>l$zi2!GnD|eyWF+w(A
zEYQN>h??E>;OOm|py_1}5{E2a?w#baP7Oo60W)&xLzR`0vBuifJqd|K;(}BK)yp|R
zJ4|5EV(ZjO!YG^(*O05|WcEsX1r{(+@{wmoV~#x37edj@b<?#uJCfmhq7DkMd5zWv
zq=i(7vT?~vc=UFpvX&tXd##y()5?YBEUJg-JqjB@Fbm;)Ad=k0rP78J1X#1*fUFu`
zxrpya793_m*|e2}Nh+c2)$Z6MQmM{_eg236vgbpouMR9lX{09M904%ax&i_#RCJX{
zX+H{6a!4e9LL!k!-tNJw6U>qYdbrP$GOo5nTj-z^ia0f8$QZQV2YXXwh;pHKh3`1z
zk9N|T=rnb&V>s#ADwJieOhctnUA;3=h8%@Irv>YJa3HnFg22x;6<1VA0FM?`YFAsU
z%8+Th&t7mLbk$(ws}^mm5&A7UhdM~$esLw<ea1#;(bs9GDzhVKiO<!|p3Bog4-qM=
zoEOfW1p*}LzR;Zp25q&D?h+5Ko$#RCPL%-4bonzYS5j%}3Jiu)RG<&9q_P;(`6qr-
zk}v?Loz|vS=^3tMoa8YKNSk+mg#@ag$kNUXQ#^onYB+O&R3-DuS>SGk#<#LBD0Nu%
z2Tr<{X}tse7y<Xp2)MY{OL{=j!vL(oqC|KL6yp*6hU69jl@xR2o=4DiYQb(DJ{xQP
zMKB2F&Um<)P&rF^?9mfbOG8|^L95Kw6_#Y|!s^f?_&^J(cfP(;R8vZ^T8uy)ft|9u
zP>l3Dk)BU3fFYtQEiOFu1#43n{D~92jfha%9juu|y$u~pibB>@Jc>P&&{(3)di~Fl
zbzY(Ql8|q(VQQqUa?K~ye*|83%--q_%!SYX^(l@nbqXa~uqFdGh9aFqMLh+P5%L*T
z4)WP~o$xQ7lJO)#kcVRKMx<}`p`_tRZ1<NF5@Pz*nAH6e7(rsF!|&iWz<1T{z^R2d
z33`V?!x&VDH}T2$A;{gciagAo2}5T{CPEcq$DZn_HG1%IkcH^3xpeKcFz%*h?*|J~
z;{wB$b0(G|94l&+AdJLJbH6-1?e4&6<;qhb7rOj?U|z--t*VD$BWVRT$AC^&i}83-
z(R|q}yNpkcHtdxp9XcvoWNq3I*<od{g`xM2HbkvIe1BA9ITO<v`jvoSS7<1{FuGiX
zF1n0YG$Yyrwb6w2E;e#cftnLQ;wbi0*hEnKQQ?*8$O=sf{V`d0VjzJVJ6pg>(|KR8
z8ktb*6e9(@GBgn{fQpo0o&E)f-pW~gpVTJr#ESLKwIp$rB|1WK1f-%q2>B<g2lY+(
za`ZOTH{q*XJ*aQOSG9Uj-$eV6Wq1OR6?kBWF0_hIZHS1F(3U)dPdpalVQqkp729FT
z&_r#8DY#FniE3bj6sCZQl_&t%>g8Zd`+aQ;S!_YIRBUA*YGbDUTnIor$I6#H7h$-+
zO-8r$PYUxfMCRja!Jl<Iup@X;f>d}Vb=cU(L3XE8tDma{IB5JbJlJYs1Yn><>x-XL
zF~X5649$FMyKLcxshPpHG?m)`mczIZ{7^u9ju{cRK;oQT8Zt-4N384Ik<m>fU*L!J
zy8Nd)<5M`cH4NJj7`KaiP$m+t02?3{?2*&wj=BYNbyVZ>B$FD)pf6$Vbf{+y*uvp5
z^QjtCj=?}&V#ik)ip<7kw<%6>$!3Y?V6oP~#?5Y38PfO&C)Lc2vC|jRDCi%tpTUU5
zE`@BK_<O{5KGY_LxRWL)2z>+ffD@}2LTm>l4Mm_oBRe2=GK&nK{jcueJ{PiP@UXR_
z6iZryFxZLnR_Np|*Ny*d4tQBg5yUy+HqnXvR`e1MM~brAt~o-Cd|{Qdu*l9z)gN&7
zPBwhtPbkV8z4xNL+Cs{CZ*T{O+0Nx&D)?hIvfH;Kmo%(DkD&}fr=kOA0a~!0Is|oD
zFZCjHvr!s~Q8U>41Oa93?`Tt%!{JJ_@=xIo#LAb-)ixh0f6>XXB9a04k7j6OhSOAr
z8c-Xdo#SLMk-@%%5Wz|zn&V#NfKHF|jkRMun<<t-%s9%)cs(<|g_AI77<n)n_7@}v
z59bJ=$WikN8WGvAIcgo+%F}QnUxCOtc(6QyM$UT1r$iJNN{qyC4w=B(zq<vKgAZ@$
z^3{pxUi9_{$J;u^H#jK&HH1ZGtmp4TJ1-=-yrJ!Y^*9Rz7GFVnnQwk6Q^9u7H=qpy
z0{c6bY_41;qxG_87Vs^=wm(*blEV>#A~`nh|4`c8BsFt<G8-NY;`W9y?GU%%Dr}lH
zVh-eZ+P9ASQh0R>3xxSE9%A6SorzZ2(qbY^apJ|a6(!3=ELo;{EMwYB&yDQVQXNIt
zfIwyqg*PKqiv$r3bX7V89#|lZe(@+2y@;HQ(zQ??LRY&gq21c?4o|x%yERU#A5#u+
z1TnR~z`(_%yA1iPf#V}gh_ym@iBY{DcIA|@m32{0Xfnm4;2ajCWIe3bfOhCZYLN<6
zk*`==tTx$Bpq{*-3J!beLrheX;8;v(ErObwreTc+?v@Fk{qX%{C(yP^Ec<;^GnwoW
z*z9wf6!BC6Y}7j&_ZMMyBcM3<hc*d61iaS$&q0~ZI?;ac$(M+5$P9!la|?_`@g!+)
zLNYHezWfB#143r+2M<BBA}-$QZc=3rV%cFq52^gjR}@+FRaFX9!ZkfNAswJT;{z`J
zh%mRkUO0b<s1+oMaZ&4K=2PkDK`N4NBd1V<&4FK5qEBHC#o_^pbhqU8x!1yVN8l`^
zEk<ETOJJ=q{LQodb)vvnDfm~VEoa|DvXwIE0WS@Fa=u#Q*ta0L*L;aEf~bnopM~MS
zOUkfps-TwPh=U5G(D*yC<#fu`W@3w3jV(s3+w*2vZBL2FUL#2lSc?>OOF4p(OKxPZ
zNcm0y*O<dve30f*0!CyiDFW67F6*V4RMt1V$<1PJH+%sB^zdtXIO$KBB#J#goLsPK
zH<CGqDv`!#mXsG{ew2Bn2)ECr!N`l3JWtF>@!`-{y0!Gl!=3gTjD1?1hZnCC_)z3i
ze6xH7hXrTXqIQ%+2pNvUEm|-KVS0iLAqU0uqJzy;HLR?aFABb^cuzeN#G2}zOrygE
zC?^p+Er^QI#Slc1F5EcnfQYGtA$1CFV{xSVZ{Z-#4uB&sV^;e{kj!ct7g;s;GGi0h
z@-O}3Fy}<tk^?g+%~S2g(cOQ%OZ94jJ}B;T9UP&hQ7c>Ih}T$Xv(6`^w}hy8B!8F(
zrv|@5V$>mI8SLbZJ2xLsgvD~8r>6;b%%VDiT#W3?mjEQ*ePrF(Bgy3fo`+#G)ju-I
zhG?3Pv<^zNs<Gg@)<u)R&2#a_jYV2{+Lti+@(nUmD9V!A#HhFKyCR0ups+Z#w0N31
zKDz-0h4F?)snM(kz^_VBCI$g^awEvMpN@X=!U&tE2O#Z;1r7k@xWQ+fq5}(u$qW>Q
z$47rrJzR@H5m)B5(K4lz8gU|1goOBMx7*#AP5$T=A%T`2WHH}!iw#p!KRoT^-A*nj
zc%qZo;$I@yohlclB<5;#a_z?Uo4s<E;#QmS5tEXxLsDlcwcSauNF`8aB~`B?R6vY3
zl(~nMwdV_nOvlP@bSk@#mCZq}OpKfL*!9DNM4=dl3zd9?S6X=B9K$+1pmyQZh6g7$
zJX-KL`9!u}!~)s>%set(yT7(6lm_GqZ5fN(kq`6?Er$z%C?OdS>(19PR<I?FcRFP{
zf2<glTf3jdP!Xyz&tCpLcH_DC6d1z!ZIAU&=uWxu1jS7hx#!)1_9jbvPgx$1^_II3
z(Kbdz2dfM@?Tb;2;Hytuex1qIF`4-W4RnaFAw)B})Wcj4fG(_8&Pk$<)!}jW((?(>
z8hbgO_Agni(P(QIsAn3UjQq%Xe&#&)JI|!SD!#AtOn06`@MJloo$m`!IKQ)<%C2(4
zb>~^)gnOKHk2(3DcH$Q~&o`a$9uAxzI^q2Vt846YoaZ+Pw?A+qhdF_LoJ#%+-}YSm
z5TbET-~lJm`%bv)LWu{KxL&c3JJEv>OoT)le7^I&V2~=#tFqZwJI@E4XIP#Mb`R&-
z8&BILl=*mLiA>4olg@LV^K5sXZ{cZQJX9sR&H?9q=lfqyQ>Q!MMR>Ax4+AU~YB=EC
z<$Pb~6ncx3zQ%c$InPy2x{dg@KX6b|g{M7g7=8{o$=-L0S>ZfiaGuvY@fRU6t1ocE
z^PKMsoTtZmp6^umg_Dkza4W2G^|v5zSKtagSdr)Q53j7yU4aX6p@RQ1-R#~tza5b<
zV;zTUYq$7M!|fQlG5;XKBKmYQ>B{}7oFFdGti`3)E|miVaSL1(MpLtZ)~&2hHzm6S
zFulxiap#xKqyzh;yzZ*J6XSI_sN)K6(gg9;LKE@u=xi`r+z6e5RUhxJNLFj8bFad(
z!o*2N99zZ}5ViiHg;;EihaOZn^HZW1|NMrmHrSAYYq{4<uaR24oOm>GpdVRUd`?EW
z=}LH=sjrE@e~$Nv7n;{X&}c7$4mQhY_T){b$;;yxY_B78p@BOEA436!FvXL~eP*WB
z2bBwqzHs>rC|Uo&YRb2@LB9Z)($>_-`RnlL%f3!^S&P0Tr1?`}x;#3A0k5~?m^8qy
ziR};bEcOHdH5>=769)}OPx0J4HoFCFYI{M@^qr56Wk+9(3Z;!c;{)-ZVSPE8-0eYJ
zk#WTO8B~7Mho<IC?29f3Uc%*|hW5(bQLez(u$kDzgSfDAsB3|`4XCzqr;BYgu^zrG
z3AtE3O(OJgUZSK)lX4>Tqwc@fA+Vvs4y$Mt*N8WxC+V8k9AQ0_Luj1)ruGQqWsHcE
zE!VK0(7Nd9=m4&vZWs=fcy7f7(AGI;VmAbX<8BNqXFoQ2kvLW>JSBe^xXQv!;==@2
zycrsT<NH?NP8OXyZzmgojSke=s8ETvz@w3s(Fj0;4-R)}p<iGgz-tx+*z@s9hez2H
zGX`o^$+99S%t#53fn&&1dl~ikMX_^uLo?PjY)CluqZwQuCcVuEwh`g{zu7u}g_Mo~
z`3ph+%>%g^Blw4(eq&u_ZZF{9*eGS-dV=28)-Rz~L(R*Er30D-h`!T}Zop0NM&K-g
z)tR`3KAc)EwV`H$V6A$K=vEGDP8&r`7rA2lZXgfu^`OV?(g$!j#!j)m%x1dC1^0y>
zez7IeB}GNVTYQ&jp<#lbhAedj=Nf09E%+c>7mOim4N28J5n1AhfP4dG$_?9E)!Wg8
zFiDV(Np$y8m!6`Ha2=L3y%ZiOfeSRZ6t7XNHZK>fvZJ2IG%c8QpVikDKc2%sf?q$@
zG6eR`IQ;gC$FH4%B5}VbA+r7p3st7JFN9Ph{ied_MZ!Nn-X(lG!_h+f=SXkO7@)|u
z1rw*|h6u%SRHuVdGaO321M3{)Yoh%;GAo#^Mx~s;PDihuC;d4W_n}?ReagfPaZF1w
zo|ZTuxwC7(N_9@RTcK&he(Ga8NbfK<0Q!<a@U5x50Ts3%-s+LgRp^Y-%^d4=bUbv2
zJU%&;N3}jhnYq3E=b#z9?5lSGR=;0Z;Z4%8<kqFm_%l<lN3C>mg>$6P@vOwl!^iC7
zT>jPKT{reprdlkr8}0=Wsycc#B4Fb(AVzmv!AW%!t$XLPZoIFg>N#dMNAEiXzIX*#
zn6ZZIVEEHu=r)FK1{q_b8bta`i?NJyu#9wLd*p&xhd$|iEE%b{yhZuG^_>X6GE<*K
zS(zUZ_)tE2OB_HuWD5Q$Mpb5R#+#Hnp-8YkIt-~W6A9nqr7*3Jyp_a7T{-)?GFA0+
z2Il5S`JRdBR5;Z*K0#YDKg^M1yr(yTk-%setFX$|j}di&$ym5hr|My60Y`pwfNpeP
z(k(r~zQr61)8ocOwB#FoNQYk6(ap-Pqr95HS=0+wImL5J-2AJDm$F=)d)Jj9Qe@oK
z7$P8Uu{3XeRE=Nkwl2||5(w8auBuv>+C~QKcLj9CR&hUYcg9z)W_A~J6>()}sIomy
z*-mrV6u5g=O&KZU{)g~CP#cARpiGm=H&1~mQN_BjB5mE>1+G1I0^y3pV>B7x#O{_)
zGiS~KVNDHByvLP2=^^bA(PfyWvvj!G<~SiSu1kQio8xxd7tS4KEk%IDA{6FOgRPgD
zLfueMIOJo97g@&ma!jJLXn^tN$Zm8h85oH0sZIGa2qq_!U_+Y25@~OaJi3`>eSaxL
zjBT;`{NZC@D_3dri+{eq)A#^`4>KGrG~U0Jee~cgFqz&c3n~GkuBY|xIGKQY7aF(E
zGA2A^Uj{lmL0+i<-yI@i-p|2Nl2M!^FMX_dVz41OjvgQnb;<9Uh#Qc`f12tlnc#G<
zT!r)!+N2xbKpd-FeT)tCkJZh$T%;tx^=ngu&;aqMe~oi~62~S%kL@(E_s~zpUh9Qb
z?9~FKuk~N=kR|aVVrh56>&G33Z?&+Z@Ea`IYQbs{^tn}CWbbYbGkv(iY0hbAPV2im
z+}iS=BGOlDM4oK@?<hS?;K7>jEb?QNzK*2>;3TVREZ)qwmPG^RsDOphfN3hAG8%B5
z1fb8QfPD2eRefEizKYe?1?p?C`Z_~>rSU7}X1f<YWBq?Kh2%JYHk9u?B|g%y&)AAi
zfB*~;6iy&BlD(MIG1^yG10-Cq0#p<$Nw^1ESAe-SIdea}O==+>*t5^X;N^YP`Dvcu
z#&n|nR#2-*rq=zK<LP>G3(|nh1hhP!OAcS=zX5a04e+MmF_#iMh2|XE{)K`llXjzL
z_{_^yA(<j5<U{hvvIY&u7%-PEKn73c>SytQ;KT(qzMhe<s%QCiWd5J<m8XS%%dg<Z
zJirIh0`p4<;ZgXuWhwZsQ}BuKQL5nESpxW$G!ee1*`0td1&Y<s3l4mFQTU!fA(aoF
z3qX#tGIRcmNDiNdIEnF~l$eTbGHxRzukGkm2`{EZ2U|N2jr8CQ4EZ>-!Wzj!>j*m9
z^9MXoDD*}+e+<k#ETyj|vbd}94Z?|aX_X}(4%S_&RaMLh!y*Xn52jgvge7Klt+M+H
zS~$hyy-KuMF?ykQm@1y2@R@zPXg*dz7PtC>yTsa$!hGh^MSzQX>`UV-3LuU>Yr}(~
ztP`arGx6auA17KtMpdHBj`Yvxh>P~m<;czp7wON#X-SH;8MdF%mh_XB#P?9utw>xW
z@c%)w_3g4Fl}Pxn$&7=4v&c0|YaRG!#}~gCaqM}!CyG+*PK9wX;;`?-fQZ<8fxbYX
zRTsg8tsTLRoZ`j&pGZQ0@o(UI3{7>YS#1qi(`R8<gqL=Po=5GZ(P+bRP_u0yv}^ep
zEWa*RJ_kGGsH?0~5aE!6e*(8H<JDDju0x}5#MqHRNZG<_MK>{hw8FO`05RGD?JSsL
zOL=J2>%*`<+|P-|up;se)<sd;x(b@UXgQCd99x4%HQHh6@zJ+4n*04H@FT1?g#`_U
zXgbmnP5l&2aapRviM%mRG#7eRKsN&l*Q9?oL)dJ}p9);Ln(}Ayf#bZzje^kfreGyQ
z@UKaJvBFAm`KPMe6}CZ*3~_bOMvALY<R4)sib9l5t!j9GQHw}kEH}c+5)?aY$UkB>
zjxH!4laGj)S(C?7y9kH9fV{!7o?K&XK1GRZ@0=AUPe9)JCdz~(4elRpFehxQ8k>up
zs3Q$uw&_1=I7e7ha0a*t|B+Fb;EuTPXzL~v1C2*G^&P%x1;>QjFFy^btPHR!k}t*P
z5jvRI8`SDzW$pC$2<yoaafk@<19ZZP7c)*C@}8joxDk}N35aZ6eu6v@nS-W6<Dgd2
zI#$t>DGfyM5jPb*ggtiYO08->n78WA9#H1%=J=^JQ1!y?{!o*x70rR~&38Abe?k|j
z`!=x4aW>CNmxZ`iH4VjdrOCMI@_&70SrDjvM_~|&QoqC@;*n44?j!n;gTdP2xT)ZF
z-Pr7@PRuHMKUjyw<;0A0aeYEobzugqwju9pOCUj6JmTlBzPi(wT^rcn=*>MBY8gG;
z=SCpy1bLix^hR@K?x|eAZ&T}c(n!CL&^_VHE<g@YU~jCbv3$KDRZqZjl0`)1SLjQ&
z1&+Bvq$vO8F?~@{7k_3yR{p;~R4dYDqtb!d6Z8WtF0-~0H{Q7XXLZG;Q{F@U(p`bW
zRA~bqh#9@D+gTtXm4!CYp$ZkG#9>`qlBq5xs(0sA&+fz}g@JukN1%+f951ybysSzs
z{CRywWGOHByLhr%$j6oUW9{3zL-6-KE<%dKpY|j8<2q8B!j@axU&Fl~c)_w2@LYIO
zcrcLDD(CjbDwP~xpnD#5)%+MdUckdnBrxdLIlQ2WeW`~h^*W(HKL{KXAIDLE%zKip
zMCJz{g-h22+=gPk_$G%h)FU{UO57Rs3VVM8G+oq7j0B^JjC0t3iwi~0a;zTfks*UQ
z@cAKv>a#h-KYU}xmc+Bc3Z_P7@JdtxY~fBfW0N%yaM<U>&10hPczLxDLz=xtrdx~)
zX^iz)B>b$d;rBC~gu@ouxm*m-q2)4kb${p&?i!P4lyKV~WhEecN2(=zNVbO2IWVBd
zTw06<ZSmv6Wy+55w=HYKw1~dRyi_=!^+zy9Cx-o?)~j3xVZ|%cJm+p~0aJ+PIu`7<
zr=Hye|AeFqSTZ3TRIox)U7^YxC(L#(I`<7mgCmD2h1TGtDs&Vn;CEQP6zJhOI-*QQ
z1tL*YE~Y-gplK3R5bL-@oVKtUb9k~^-=eHySK!}xOm+qSj>lA2;AK2!xB}1Pfs^{r
z;8E@hJONlM0gNj!A8%?&@Pz0cls*dQ$Qg^fC4qgUSfIWJtFMLX>rC}U5fLeSt1k+&
z_@WCJ<f~O*;zcbe3n;{WqT-q*uIhVy*_(s{fSb9+I3W<g;aZ}`{wspx^>06-zs{@;
z9SLCl*HyDPT)HHt@CECFFyb)|dW>y81G;HP02#ndfhgfv5EOB)i!>8_FwNzEmBWSo
zjO~pquA!2x`+wdI_7HfJ`ALOMyOwm3dUqo@3>5rcN9Yjt2X(8=R@T}7?tldp*E|?s
zJ`*RbS=`bLN6X*kEZY~kIEi5<TMwM?#0oJXlXY|`M<_+Q4(mJGZkiJ!^4_IN#Ccy*
zK-h7n^GmHY5~5aHOV5jqaCj#JimiWRGhI0c?UkSg+AXK=hrUv+Cq*F=+*fYS)FH;@
zI%3>I88hG`mFvKNVBLdbTQj&2yIQ@c!+yn+J)fkZRZUNf$h$ssT(PHV++_AVW^Blk
zI0&gh1q%T>kE<uHPX_Si?z%fNx4bn7>GY#mgV$mHrB6M7MsaM;=QOWXr9dR^GReiw
z2S1p<3&V*|7P)H+ht$UA@9M-W%eFbwccvaryb{y*a3!C2oxgEkjm+PfuxI&I270f}
z8v0c$9529GS8eqziNoQnsL=}-`?!!JL7RULnvHXvlYQaaij8JZ_PAScCl6@SXI@*3
ziNS;WPh!^;d5lSuku5RszMM(N{`7mWW~%zke=3%q94W{@S*!XExbcNobB)EF?%b8M
zak&=siFNxqg8H&_bj4(@EMG@m9`oAaMd6u)p<U_a$r<O>9{B?VB9t`)_va#>rd*v?
z68v?eYp^|4QOr4D5GVu(s5}^}&n8JtzHr4<YvT&mHZJ9`N1NHh7cPS(&1$j&pD}*{
zA=FNtUxTOhGSh`+Ny`Ot(^{IHOd|VD^cXV>IZkIprxPu-npFfF%H!4`5qSnwWUrIy
z#NltD^?|c8JB2QsJ~&{#@-Iv}Tzo=bQD^si3!4lsdjoRe8yo$DF((lvc9rm$O2nes
zoPpA<eSe|(iWb5?8-~=xjKO#P3ZYaREZcN+!ly6&u_0ZgzN4Suk?4LO=Z9u+vBx9W
zC=+Z!tAdM^PUB0@&`E`K8h(z7iKqV%P0VfX1J!`wi-F{+7`LsoDysTBV6w{yyYO8_
zBn2QGhe*(XI2yrGGSZ2aw3!`IhEv1WPR^|LC0twVtV^{e{kq4z)gA(f>7ImflRXBS
ze+W?g_$ayw;5mi-Ul>2^57pL(fo!L(ityu_%clMndmr}s0A26{g#<~TbZRX-;GmG$
zwbas+Nb#9Ml-4sUUflekzTsd;waBZ5%3x1`goBZgla+OalkhePAD80G7IM}?*QkJG
z&k7*Ng<#H!TIdQ1?tyPoyB4|t-}VK70{g?AR`!BK*IgEA$lk~>fg4SObky-W+5)p}
z1}b_cYp_od*eg*M2PT+AHK@_S3CC_x_!UN?422sgo$&(YKG1V_J#1IavMii%#udD$
z;K4h1Q&9jET-C@0j4?BeBIhMryS8vB+|b(>9tRaRL_yhP(U3Z_$?`M2b9RCt1)-hi
zI);4AJZ0tVGWS6M=+%NffsX>9v^CcunMn4Di0GRA%a$Kz{}%u%Fb?wIbk%Ek$IV)@
zdr-im`UmRl1hmi#@cL=qb+|-{%1i4JY)fELby|f4n-2_~n9&bQm1Iue*1y(^M9lSW
zk8YYM=4Y-Gc9m6GF1Hhx6Eh}pp)jK@DTh4(CSV6e)@qC@5f;tj-m-ynKDtV6;85;?
zjw^6F*xxKnVC5)=6BrRg9^;2)9Y|_cY(Pflj}ymZd2~FMK|dY4Hv}zGBI{j%TA;9T
zA}peB;-wmC%U$Rkq_dXn1|7k!v=jVfTo(0HpPdQyO9={e`oq{{@4^>B8}e_5{rweW
z+ND0LqY33~1(7nHJCg2RkfUn#VJB+u8%`0W2oNY><48a*A|QJZXuWqV5gVm75qptq
zm116(jf63>kpShd4>lt(?MSO!-A?@B(o{?d@Inu(5qMp|PJ{JZ>OxX`y#pJMErBc%
z#FMGwHj|FLEp{J2Q+6NBxG_@9+SV13@uciQlolU$4>g_}pnu@Ts2*qTfW>S?_KPTv
z$0q9u01Z|T+w=tbXc#vYemTdcooM+tu2@WxEq?*&Jaz60T5do*`NGjcQNctvwlF_E
z6-zWd{2<6<ueFxD7ufbwOR8}fW7kWq6aqbwq}X~2Y7aB%bk)SO03KIAm?8U#s1?8x
zp&=c!<E?8{%UY~EzQye*SPp&CQ`z^pdMSGyJ=m6P_W<2E_X|YY>AxH%9y6N8&2s3r
zay40(D{zi<O|YrhI*lNt)~pxI!+$TA7HewEq<IXf4fF!uRpomXj-C06`wbH#I-YcM
z9QAw|j(~WFY(aC7({figXF^PY);C!`=94+;*=vCTq@aQcIFY59R&@iJQ24Tc(o+)r
zidm0>{tCl$hGP>fJ3m*ex?h;o_~8(uVzULsbYlWW1Fk}V2s7=BZpwVzT9+?<wHX#c
zVhnqdzPj@R^bZVW!w=>a;?GKjSQYE9r-!kCySv=pn*b2#M+0UPyzJZxf&tL&2~D8C
zvI5|lT~^uN^vGtyrD%QJ`qc~)50RFKI4g)y@f}|rP3S9c0S`_2QxWu2G@+`<#vqXi
zli1ooZhU=U`f;My1oj1pOReU`EXG;?(T)g<9@vmvHe{Ui!wjqApHK*=01C@LhTx^n
zee=h0dMeD6qV)e(JU+(_jnY4yg@IUQ3_O90N$gvM<>kSRqd;#LI^VJe1E2dIGn<Xw
zn+Tty90yUL0N0O2aad2Th3*n!Ta1r*c_wO^@-NJEV$T9#qLvYZUd2i~8I%*VB=`-|
z*)vg!Gmjs&w*Lb&O@5aBYXrvgQ~2A&WNhz6u+{L58lTT}SL1Vu^W5P)kK*a*7nFWD
zJo>(kFi?f2!Lk}qe`HPGUpMZa+?83(piUz^+Jp4ghAm9%C;`Y2-b2B0`jM#qIXwE*
zNcq()A9~-6XeDRrW&zkqesR}|I&ntYOq#n^7{J*$dJ!JI;ayZZ$*Gi95sv;unL+F(
z1a}gG2tUU9(fGh~1JwO-T%s$B@E98~S(K|C$vm|q8EBC%#QXq$VWER?G@H~29eI}3
zemeW-Zm47;Rz`aVatob)vgUh9s-thp!b2-)XA)~NXvWK-`Gxg&C>C)45jFzatY2X6
zitb3gh!SE0{^h}uqbI1ws=i8S{fQ+%&g%zZtw#QVV$a+YPwKazB*N;f!vW1GsVM^a
zF!{<yTe7TlX;=LC4D@jr|1HX3?cT$Rs`_KSMpTb<p4a24_;HExzHB#yN1wMr$O&7&
zl#YI1&-URBLoEf@G=6DK;~-kP3&?86Z2Ry#Kyo#(ea$YbycubO*c4*-vYH_%-kDEi
zK9vm}%t=ap0tdzHpzzEYU=^1R1LA>&t$!yL#E0psevF2qQgj{T8yEqB&YUw#Pna_U
z3$}Dj!ZIa5ZDO7B3ggGmpdK@SmQkOb@7JmxMYPgl4pK&Ph(hVJgn3!;*U$)3F2|QE
za1HJ-K7PLrPz+pyMNsZSja}*b0w{RQq?hVb;kONbISwKph8wcu8u&qpc{q;&drz5e
zVXt-BZ9`Q#=L+OORugSfoz+h@%fIGi&058lQyXNBd>QdW^NFGZ9w`q^ur?wWZa_V*
z%_pBj+=Z8@x)w`u(!gk4N$4*ZG#*Zk-6RRbjVL0&O!t?o+8SSq)>av-Z7Ooup9=5f
znzyPy>Xf<Mrshu3j{rOA1tgR;X^ni3<M)+JgY|Tqwf$A_zX|Ao@iXk{QXK5>*vNC3
zu8QfR_rZ9L`9v%aMc3&~^DEg$_y<J+JJ0?*cx9LUBHcIy(E~yl^cAO3c~fU)2QJm`
zu7@&6KYB>dmLmLxy0MfUp&O425f~C|--_Z?JM?91z8QSW<MrPRrqji`FT3ej!Q=8$
zy!njg%q_m72c5D4|2C7JtrZprSNclES@T2wwGnp~8Ea`(@jZsj+I6sS@fvF})@UJ`
zW{rfW4c-h}bqb*JnY6kBhF_MCi5ca3b~EK1*cs5njSst6=^{45iy|b&SN@9b;?ab8
zh@@rNU=Q{hhCwwa`LPazpi@MRQ%u@n9Ue%VSj0k)L4oJK6mEXwm=E+q&`i;iFN?TV
zk||ABldXFoNEK9JYniI6Jo6xyj>9r=!H!xw&gBB>mjc7Y4CsRV8N;z`gmCk+kbXbx
zmV$#Y>r>mg+=0y?4~ww!JD{_}9XuJQ!gIJZAN;JiF93osBe3?FxEd~_A7u9H2-Ylu
zMNnrb*!Vh`5mOn#RTXmebC)IM!7S<=p4OU7YvW4L9nj?O!;l%&e*GDW9}li>uVlVJ
zFNWt?J}An~q^4EuQZ4irVr1qztqC*NbMM4hTjX*i+0Vq~lGlN7v7SoIh+^~{EQ|%C
zf~BtbWFG?4SUuX*W=G~b0Ral^fA4@W!%J<P^%&<C>v=E%>0bK+iSatzAtppvzgmtV
zG&hz{=2d$%KqDjmcjrD77;o<bny#!!cLmD8Jo5H|KVXvV<u#LG$AkIrpa%@@{v6DU
zADsin67Ewr8kcXuYbC6R*DZsF0;e@=v&Rj_73Ci7cePl7rP#eVhN9yao=7uj;&25r
z5Bj=~OP1-a>oLfb{z6t`Y)81yi<om&^j~B75#DxTB>YM6kKjJtXMAfMg$&ToStgLy
zj4i>Ap4$B500|5Dy>L#2!Fqe*Bf7h}vxR#5aMCL%rv~tPvL67zn+uI?gxME<0IRh+
zYXTOnTs37yS4~>z080xt=yCRHtJ!E2_Ri1xx?2AQc*053M&R`or=OI=oN&_q%Ml28
zBi}C^>f>sC1m8~n1!?e0H51(u$#;h;_h(Sr+mqtLWq^c}2J-T)tKz~j$_U5iull&`
z3u58RW@2zq%Y7b{9s>(8z+v}}*>XB4E!|r692OazJPXm%6!B$>uYtIYD<j>eeV$d=
z%4K*A|3Vz2f)#^%+&>c4o&6<A<cL4n>?;J)h@NM!d!*ygS?dOH0&27qp(~(#ivI1w
zpT*wTcwd>JI+Dh+H6m%GSeL*y+<Yw^P0M*L1HXY=BR5)U$M?aLz=36GXoaWlK(`@q
zV%zBUWH)-XaR)u&+>3pX&+5KNum)a^=9^|3a{G*0$Ri=ySEF`&62c0NAfvp-8!TTf
zMgDLZnI`5R-B`<`72L14wjvPc4=_CGm{1G{jXL^om{r??V+IAuPQRU?FExXN9^BUW
z9ba_wcdQQg-qxG1aW^UFHM;)t!%en17%$-hTyYLhv=IFE7(piR8pB={&kA}lI2qq=
z>lhuNgh&4l(uVajSn5)?ScVu^MB6R=CxWO`zyC>y>Si4tN$}nv6d-^2?JYsS2JY4k
z0SpKtp!Ur|Ss0%NZt>d4V-_SPahlt0N2?OVfM>WPRy$FDKN~m(H%=BWyBK%OhfEY4
z;UCy~cRMrjiyJaWr8KJ?nG||Nu#-(ha;uE*_I284;wNrBA}nSpXMHtKEBkd1Ocf)B
zGU3rP>KuC7vy|IxuN9*u-kjH{S`7RmdP&;8WBYKUZj7Y7U1%ylj;7X)AgW9q`O#Ln
zDD5)5%a+M_ynv_}2b{4AMO0qoG3O@3Idznz9!8KNDXuDfv_*}P6z)VLO~Kxyi@whc
z5_q8}zJQ)sQz7UH?V5^LwCfH${Nn&1>BR$*qKNJ_Ag&xRf=n~k$WSz8{X?z%#z9=M
zw#X_`&LzP_n=U}8CySz|{o9|0o^IBwmlCiySUVa-7tlA6l<os5F$`!Sgf`FRPp{$4
zAtw;ho7+x8NOznSA*4TpEyehe<c}k$ha~d}1a$#2JNQu)bsy>`MRh}??DqD3G5z_;
z=x6Y1hkl-4Ec7FtoAX*BS`kM-J5kI}qo3+bBFM}`{vV?s#sN{RLeWnm@|-|F9t8d8
z^h4l<e)t0VVNDMGNblsl#>4qSKcp~+ez5(l=!a=y^m8w_)x)EEKsK_T<cbiy$kF_q
zNI%xmpN5`p)?LGeeuTbHpdW?-ErjsL>F0s1C!wE=GkzNV<Vxlf=;w<xp&y}W&X#tB
ze!e;a`myj6m0u>5n7G^!{#K9a<~BXpd5-qT-vI5=dd~Cy0osyFwI$p2&iXnldBoun
z-o-Axb5rZbBf4StaMb7e&=1VQ0ll@Qw+u-3;;!NWy|g8V>spgX{C2Smo(Uj3AM(`M
z_<YWl>~b+Q(d8O5q7YZ$AWNcT=^o26uxl1Hf?2S79y8*%VOI)PO-l}%+v{4>7z~vp
z%T0H=>ei(oqRx`w3<if>&^nmj0cotJpH$P|sivwcWH=T>$Pg-!c@<<SlI65mmUzgJ
zg^(eOK!)p01+qit4nl@tLWV?yY&{@5RA);tAwy#7LxS~bTCg5`0kc7x9{e&5IM$YI
zsIyc<l1*<&iU1CoB?ciq<<CwUkvIT``w1T)cY;3j7<K9=@2G%1CI0SP$}_r&n<=;H
z<|f>yRJS*2x>uWdE)3Ap`7$h%znQ@UDfXX01ETMP{=XOgu1~?wP3icVHXJ{{%)`&@
zV*LDiD)Wq)#oymlf@b*gWR3Ik>;k-)9k_P1?Op!7&!1iV`J6xd`ST5bj!!Sp+Sc;t
zUH-h!pIs<EF?+g}wHv+%vUWG~XFGpd_yZSXS-TJNryW&h?XH#Ib@JORzuU1FkP=vq
z;<NT_l;3UgyIX$u%I^XBJtDsys5EO&qx^1^-)-{C^lcm9f95p&-IRi#X+T8VFNfo2
zHW1PF>tfW`HinpJyPBA2d$Lj?pzYZRCjLT9OxG%a%nBm2g2=2OGAoG83L>*YkXa$f
ztcW19B7)2cL8kt2{UVeEo61wP;B7)ewWpxRT62M|ZVJ_Fi4|`)YRTH2m<=qX2XI$f
z)^1OVw6l@zX#kir&qJNvKvPg<S?)Qj5LEGt7R;iRr~$yze)9x+fpV$8_DCb-m$eTl
z!fBW`_oiW){3YR-9SKKxrEx9jM>lus!B1NnKAC${V)okO6^Rc@hqR%x{*gLr%#O8B
zwe`Z^_38MzDGxu>rsC(XgaOZgEl|(pwS1<wJ<_6{zj2`kd_S44p3ib#SbKbCVot*+
zf!*sGKDlRibHgWh?%v+;$&}rIp=7t!@JZ3`gAJb)>~3$EHhOn$!?eqgZrVjiH*L^v
z5=(kuRYQGX&&G!Od-iN=sK0a1?uPm)d-gWem+U#vP+zp?NJD+Wo{okwqxUp6jJXWy
z#$1GSV+JAJ?Pq75=WeJAv~5_szwP>zwV$`$G<@x@wrRy{-*5ZnthMj9{fmUKc5T~o
z_TJjjZI3kbd0E?U4)S?X+mk7Te^A@A!})w*=3h8<tnH}ig+HLCqXMYur~qm@Dimru
zDimruDimtwRVdWVt5B$!SD{cduR>4*x|xa+1^2=Eif;OEKA=C`P>bN3*S4403(>2%
zldmg(&}PDR7wkcsc`E*H1WnES1;6eB<<7hhlsof*Vm)D_esnjE(M@gD5ztEq8ES2B
z;}2I0XYGWBJZonIe@K`+8~KBKu(Ec_;NA&B1tU`=x(jEe<0$f9`0{2}Mkw-s<6oIk
zK-AI@^n7od-GKH*7CTTK6lhz?duDEkzHN=Z?To&C7Jb_nefv84_Pu&5&}KG7-<<Lg
z=9GuGox}tN8@W##nNOSW60)8)a-KFao;LEGHnJV0!w;Db(mA|uCwbq_X8w@(?QG!>
zdEd^1{1M)_Q+OXzf)64oe?iVo<bCKqB-_P8cCnCMEMyl8*~LP3v5;L-$Sx@aDUlsX
z`HQq|;8&n${E%O@kzciuU$v26wF$p!6Moee;a6=De$^)Y3O)G$E6dAuSe_oVK{k!#
zdyyW6&nv;UklGJvYo}lWJWy-v)`iN1@7<BvEbGt{=wI=>|H8;1hm)C7Se>XI);@4=
zTZ8Ah?>=wvoVs;?Lw;)3em6)EY>>mj?9j;z!?$F#fFZWX;8Wbt4Q80og)O45ge^iJ
zV|Fxn&ffZYL*3bJ8>4UAqHnvSZ+oL}2cmCBqHj(qp0nE;RT$o!^6=)Ahqv7kp1G4e
zb0>M`PV&s1<e59kGk20_?j+CLNuG&x(=I}~X@i8wz%x+-S`*mC0(P;0T`XW13)sa1
zcCmn6EMON4K)PucA>Fh=ySA_W2D~2(Go1`Gj|_7v7^Y%y;F$}^8^JSc`2^2w;S)U5
z1!R(Ert=A&naAh<Azpd6!z&x|=VpKA);D*6WwJAcWj+NhQJiv(db;2-=#X`6j>CLn
z0G2!BKyb6RoJGaUSr}C_`}}f8pLl+Rpn43`?MQw;xIvcdW4zrfGquac>;35xdI+!c
zhRf@>)3pxJ_{_JpQ5%|FTGqOEwXF4@BcL7un;8HW+qM^h2ehoWzlcwXOPAW(5OEX{
z`{Hw;ytc0q@jW8GiO=yaB960sM1ZTSI@~{22O~~e2O~~e2P6KoI=cN>9gH|>9gH|>
z9gH|Bu70$RgdeMe5l$U3JTVaEtDfQqaHBBDk2UDcj%F~iJS+jQ4M+3D7_A)EDnLH-
z#-*G<U*RO*2e`RF$Se(uG|<HW{M|+}t0$Sgho6}r!U1pdbnTw)LUKKjBO-A*^!5(&
z{B(Mo=_1W(S?|0@I_`@XR4_9Sb#|<c3*7)JQ8Ab-IvV3+K#CHBiGP&Vn26{WE$dwp
zXWnppG{vU{bxK-v<|wU+X)UBBz2;%+=>o?F5UiwyXfaA_VA_L7OA^j2#>YvaLzj%w
z)-r87(vqt4rsCtL!aECTe<Hk<mEc%N9*?^J0pv;wiAeqvp{`t@lK(`&D=B*Z2e8+w
z<UbX53bZG{E<N)@Y*)6Zr15Y|(n<=$CqRe@4ikj#hz*s?)lfMJy>r;$?=}n@XZ^CN
z(A?(3wd>j=Loi$>lt6VKJeF8C(LBSvFVS3+vs=r@|APoj&>lHXtELB%{b!nY^){Pw
zj%)e&Z<&ob-)Q;xZy5+)le0(5$NzQ&AJy{lzukBs*@ij^cLsgvt84A%>wMb>IeN2I
zWY+s|^_=f$J!TAeco<`je8L>~u-TDwSj)%%J!6cKPZ$Fq);rhva%%4%V-Bn{{dI{^
zaWxN%sAfPoX19L&7Blx@B+dCw*YcZ@!AWc6K7p)(51c$KVhqa|V-9=RXV#7n_jCDj
z*322=#H+%BTU<G<bFN2m=D^LSe{&+mo`fw(ID2<A1>p*hJk6K$RoQt+oq?oEIzouQ
z59^3en$xOlW9ki5inXK`^h0CmHQip*hs#%v_0%581_m%c0<0&-8i`L7m~{@aip)=Z
zb^8*5GbBznZ|uDch=gAF9j`X#9rMN%^S*xCm>biyG4~A&He+i@+M@-ZM<QQN!<=zZ
zWK|->m9yJvkv8U*&B@vr|7JLZ*y1vCpU7#`g0CQjk^8V-*V0`}D|Ex-1bXQc6f?W&
zf66##HZwVC*UY)#e@r_znl>Ii|L-t)ELjWTj<n7=ta(m~CtxPruYd^f<ZLNB14MvJ
zaU(s1_LFd0RsVQE=z)KjHzu3+_4XP*Xi7b#X=fN1XBhV-dTycKNXE~E65VVnG<O%8
zxYl|-x^jT_$akp5cXW+t2+x3$Z-lRN4K!FI4#QX>**7Bb5c;xpw{Jwkwc&}U?=Kqq
zp)Xh;*>B1>d!LzaK6GYczUe;`dn$X=wIw@zBUbF7QcYX3tIkgGjrjKtrBmAh<)Oqu
z1Lhksa=o@>r?#Y7H(?cFr$bwYl$%|X8HfDE%-^gn*^dGNhZMA8vrA_*3e1vZb*?=5
zwq3)Se6y-xGqrL)vueF79ZTd9jrs`OP`0MG7Q6;j><fOGT$J!3nuBJXUNrQ*B5dRT
zShE9PbkVp?uQ{y!4A({{J=NUDCF=|MZmQK=XJ8Jm#m;RHdp%kgwYOkAwt_y#J~1Na
zwwGFOQ}=JqZ5M|s>usKYiQ7+-@|K}Ph%uhl`y5M-B1jec;PuNKC_Bu$F~y>r9HU^n
zZo=C5G&uceW)?hK`0OkmZWe6M+;X&eVRyI)GYgu<{8@(+9J9cRT1&!Q*__gDG_PM%
zYJK)@B8GDw#E+jH!vT!!W_X(qdn?^tq!s9ooc317wRZ=!sXwK?Y|wi9lpnSi?me0n
ziqdf^5kTFatY;tfXJ&4xyy`-~2Pbu}ys)|i_Z-(28U+V+qsY?Tjh(4?y$grbpkf4>
zMHcq-acQbsHMGf-!rGcV$=zA0!L?u&-W2>kY{lcQFICS$oK8S^W!8oM+ntU|XGdjr
zqSid^_f1C8XSy54b|t_$d^{H%>`ZOj&=0$cMeVFRRExVkEwkt||G?n431!#%Ol)Ut
zEW{=w?iX9nz5YtpyM7sGj5Re(1Dkv7Om#SEm_+uaWqhh+vHhj>*szX$Df)|o31k)K
z6r}jC*3J8XvJU@XB5b4}jF19jM#=YrtXzO>mVB=u4&eHb0-UyU8O6y>dDK+7SP$Xw
zIVDYENn@lW6roVxf|3OL##|ub%Xg$i*k=qS{z1|QQF@C5iWa&bbl&>3p8Y^_;4iI@
zNAS;zjpE*!wd+xxLr-=ST<Fv&{zUq+m!9wq-|~_DRiVFd(iAv|i;cf<QlQIsQ*Fw=
z*m%rN`Z4-+(xJDVv0G~4q9M%D(a||YYK~fuIOD&mHY=|D9f?0)zNCvU|8GbfSN?HK
z263Z*I{isu#KRylJo?bfvh9~#YQ6FYdh*gjf7r!a2vc3JAR_$WL7o|?C^W|(ygEEm
z!#VlcvvqR}=-?|{DTppD3@2@45f~W*?S%+X`ZhheFpN}2Jx$Wip-Ecy!P%hg<^axv
zj!7;|z`)2u{1{jo08||E?VX}$Z^C(A1Q#0PF#z-1g@VhITTjuA3GKQu`W{vk9(^Sq
zrB?DQ3fzM`3GS5k^>Gwj=zd!_Qd-}O&_iKDFP5ju9eqCXw=M-NaJv;ldh`wQMjU=N
zzZAjG{AW~!Ayyd9KS!Ly>A{wRdhk08^|LoIrIue0OPmJ2hCT{pv|b%oL+n)#PeA)`
zhN139{=s^7!t4XO32Wk0V1*ByY}ALqGP6S~8?GB@I<D`5!;CdR(P%HqEw%c-tN`go
zKn!qaHeSiC;ob>4#7dTCWP%g7#^_(QDg1mT`Ur*>;PvS9H@?SqCI(j)_OSIZGB$CT
z0?AJ>8ILo3(XKan$|Z2fw?VrS$BYi^uK{_gS{{MfNM#4|({}IKkM?!8E|&3QCarxD
zXfRV7`3N>u>h5|y`-3@2dUpHlK6be~fefAXxa_+rnn!y;=D(8Fvk(J9Ew%bMPy!#o
z?yrHO%>YgLZ&MJCnZaUoKv*{`3gMJBQiOG}zz0eMd@jQGmIL1)1>gC6#KG3n-suw9
zT=si%#!Sse=D2oXvyv4tf0RZ9k#A$dDGcW?(%*Ewzjeimzy5QXo`AlCS{zOP)?Id)
z`QUaj(jL+gzSfPikorbr{Py54lih{cwK&XU<Tn=@-C(cZUK8J+9FO09$QzasCo~@A
zXRN=}g6komIE%Y^m$15JvFgVaLl5aL8-dd$@V_(=0=EAuI2MHAF$y%s4HhGGHDAHU
zcwoP7UW+-YSL<icCq{7FR6NCg{R(%4Z(>4AM^6^(Mz<;U)3NXfK1wYvS*BnJ1MsKF
z>s9%&_`f*uaf21(jq!0IO8#l8ZI0)E<dN~^K|Wg66fYlzla|JR6F)I|=vics<A|;B
zhaJZeBk;x2|GI1Xw|<!ZM0mT__hHxk5B`75pYy-xx4#fBAEl2I;j?kkM*RFnc&Fo^
zobe)2PtlXs0cvzwl)ir~o_ReJWd?yc6Ap^uFk0O4ggY&GQPYjUb_kCxIK0+boC4#Y
z?Yxr-Gc!UktoeXjn35J{_hszqEKWxPu&$C8pFyM963USM)KRXUu(?RT87mA3k<YJ5
zj5`Vx;~KHI8lUl%&%m8-+wv+qi~aB-9Bk2Ydu#Jod_dNndTu#9$SkRKEG4h(1SoJW
zgu`r@>iQYq20xxv`E80%EBH!xf0b9&S)T4QP6b->z!%5#0LRAxi4@G`uybOtmm}~r
zzC*ZB^sX&sdEHw7;qVJ7KC$)rNW6YK;}csSbK-SvwPdhKcECUEQ!}?@uE$%PQDWRH
z{QRc@0C$nG-4kr7@V(a(tm{$Ov%a9}qw-J1J)xt=Q01tPpPE1TEj%M00<n04pXO;*
zBr9K2Edc98J*dR~5Fs&S6E8q>r+--Ri&=OX?$0jM@JtV!0b4iwpM$|Y@R^5+AD`Fr
zv!?7E5d@j9*#EVC$u=735|2nRiz)1Z2#VDa_a^Ct{vgmF7mG?BRU8b_d0qV41+@2$
ze)K&(;kGoKFFumFKHk1lTXH&PRQe18_H@CX-m|f4OZi^$r0{o)2AXgW27I0V*(9GH
zx!wFXYL5mH17*Tuju-vthq(!XTYP39#g|ZmlfOmHRuJ<T*i17BdmT>!bN-+o*9U<;
zQ1tc~MT0pv3<gDerc7A_d)j`Nqqx>L9D2yy(z=j%%}vxo1K%gj_WQ=El0vQv17)9`
zfQU%?+SdOrwH~d-z=+`ITOJ6YkoO+2Bd!K<CMwW^MTb>tZGcN<j7ZQuL~0{JTXH4b
zBDvXGEmXs%8TrZD5}51Ec4u~0=MT>9^bg5gAL|8eNq?x-PQYK2;Li>7#s^`V(w!w{
z@=Ce<AwQr$7zoj~6UaOc|4ndXRQ|c{{(!=T@nCxVJV@iYk`};jJs}t_X))(odU!lU
zfkvw@jhKyk`)VLrRTbgq5kDL>E@(%)jKw3_5k@!<k3!sojEC^Q!P4l0brdT?a6{Kg
zY&V5|<-7$up=qZYC~kgrH*<Q`agQMqY5x`CS?6F!cPwJgllSUS8Y8L}Fq?TJ<Y*jK
zm@U(Fh}Gk6YwYyq0so;Cd=}mQ4Q(u|mn1^Y=cQu^!xe>0Db6NJt+EU^7JXld6anuO
zrPg!=$f*Uqe~9;GJy2CE?J31b9rT6~;c!qbG!2VX>_QO@LUueG6*-57TjixbV^68I
zKuQ&ufLsxp#F<pMpa#NTW5F`iSq~imWqs-b7Rl2HwSX%K{bP@yU?E1&GQb8Gs@iGW
z^Qu>lKs%=Uw0V1sl{_|s`<&?81~$dd(OIMQ7PiFn@M7YdvZ)br$y>pKQmf_XZd^Ob
z7}ykShb`gSLU@JG{$2}yOaQ`x%EIvCazq!Jb8ECEQ{L1Kx$g-v)p(uE7-O-H2M#<%
z#>)|it>ajy8D<Q;{IS+XYYpaEToStna9i|GfcWD0_!r{hd#HF-fs>!NUy<mMUr}Nl
z(~WxtbLp4CTc5jfAdaBV;3Y{~<8Jq5ubp$}kq}AN?T2TK&diT+?Gi2qBgMJ3N2h?8
zmQnR!^BP8#5URi4o53(5iRO1S<I7x0Ix4m9e~%vp)#%m0&zB`LD{scE(Gv<PQQPcK
zi?YAg9@&l3TIb7rmr(EwEJz_;YE_G&xkElbtO90+#W9f?V&8d98C2*>g{tsFS(rKY
z0+7EkM+A^ZNt3>&x@REMiTVUiUoefmlm@`O#$uMF%<1ba_%R4GIC#*lhLUbP$I*3e
zb9IQlHNB?L_zsu=M~Y|aariw6fA{rVOa6q(t?cwd*lxeqq95H}*wYGrl2@n|U=)6c
zJFrlq@XwR*CtuG-;ZHI<-T^5#xEGV-&3K8Hh9tZav<mJIL9y(%ZvJTud7MW0l`9Fm
zD{y0>@g+$_Ke|Ovc#72J5M>wmf1E$EFMfye#HZ)ic)2E=JHq}F_(R7$#g4%hMjUR1
z1`ITxA~Vy?#l$DbfP=KUV3~Gm$wF&sdj#e1f&EXg0OHsoH?4}6M94?F0Y#ES>Bd+K
zuPo4O+`F^Tn1|V9Y`bpUde9DliX5ip)Q%YtE1AX22xf&ktx}8)^!Po?aNygE(@;%t
zTHw5{z-y#3W9&iu`(wmP9@@Cyf4YN8E%Z+SZ{s{)XN~eKVt*TJY%Z|!5$IWFYUM~w
zdo)+tAUM7{+?%sHmWXfXCTO9r@M;Pt!U&(t#+i%Ba;*Aq_&ygSq|-kffyA40%!59b
z#0DxXNVSfB9f{%$e-B{6P#_(jfXdL-n4jncqi<|5^hE=O-Fx5NN7irmLV(k%VN!%Z
zJwEKc2q4$n#R8&)*<QSRt7YIgHQ^AiR&^0;$vhJ6KwfWWr*Ue;VBc$VlB76cZ6FJ9
zaFV!R;iTSfL!}s<)sfL@PeFQ!8C&h8l0gwdcx?KS?rwjgZjN14XzG{{gdA{3hxSyx
zeIc@xTDW{9x_*ewzc|1YFP*J}@~PBXe2~b>hemIXRe1aDI}6Rb5mB%JEQ&K%qLTe#
z8TMdpsYM+`sr8qos&u;mU}3N-c{?)ScYa`B354>~9)_3rc=*a@r}opE>Z{Ma%caln
z7L(WYrrOE}C%Rfcb%r7fK$xU6p-+vKUuu1diX}c)UinGN%fH<7gYqO@e0f}NLbfQ&
zJQ%!pfjcl5cwMH4=cSX+LSqHLuFYJuuD4%1&}F^49u{}=)|Fa`AO((-2z;_4gFd2Z
zT%~lZQHCy>^h~MsAnC`*$8>tGdRqudX6VrT{E}<NA-qKoC(Te1kgD=49bH3IArmQ|
zKC;y*rbtaSrPd~#cLz^X=Xrv8$?j51=JD|4sZF%GfxG~*;@h(+tl*^<O)15Z!g%>U
zQa&YlXr<<&L?|^_mP|c=Mq+(=RI>p;U^*0h!DH_G)9Ez?nz7r8rR=IfP9-;^61$Yy
z%mGJl8?3`|PvytB1*D+9rgd{vzdCh)On>_T<*s;o>AIee?x#@WkN&W`^oP(xQ|+?2
z@`n6J<=y<l@=8QWFETuk0z3eE909@6av<?LOX=;ptDY*gMtuf6Q^8gK_P)-}=GGl?
z!n#_|+pnO5<MiLo9)Qeu4*ZMSWB51&1^yI#qzgX&X#D^mAeBRa9zB{~XpT#R66}8X
zn4;=GEm+r0ZA+xf)<qt~$l7Yu?K9z8$eab`@=<>lw+1$;t%0J?AXQ@lU=<og2eCbX
zU5ED0)J<=2f208WBSo?Ok-(pP<^yTiu)<Z0>mfj>^|{l&ly770`vdM+{VDBBllHxZ
z&4H8Xi+GO4@f!a<X%{mFcb4wMNke#_F{h+OTB23GigF@bCfxQiN_I+1iXbKzp>cE9
zb*3Kw7dJb=1`C?Ovqu#g3C4tE3J}$6kh{ojW!4sDHzG6l%nZ0!3@R^;a*heIe002m
zX{^KAt`?|SR+N3ve-#hs;z%Ua%uqE>!KMts%gbT`&SGFnXG<(U@&q>ca<Hk=*m@P#
z6OsLz5zbc4PQZY^Xa?x(RDaZVrd}0+z6j8x_H}4SZ6IV!=xt8`>5)(Qg2y|wPyxQ0
z@?}HF&c?eMk2v2-wM}-j|5S7#fW>(OY&+)Vb+*(*&`NaPO~Tk!BFkH%92;l?4Ynzb
zBDHx$LMb^206`_M{xh<RR^m_zKx+YL+XFq<i}Z~9sk&Ae+fR$cNB9$6a&)lE-=*SV
zE12M6=%YU6Od0sO&zuLSZLB4*@Bvl<KF^m;K^um1`^_6&c*S>Bbo|A2pUgMhl8fg@
zCw_P3Ps@QvP8F*Ze>#QK9qUh_|F})hOVE$NVmh#>&?kFtpLeD{xTv3N3fRc+)jl0Y
zPbDZ%9Z-$~&>2t7apTDcUot;sJaMJH-oE>@AHXL%ok?(wNhHH>fTP+``U{NsTKWmB
z;w1+K=FEPDh6Q_!M4!8fGUAOSt~mLb-WC^j<E}=%UUw`x*y64(*n|`C!S9drz6)$n
z_e+5@yky<|A&In*x6|$wrjZwHPpC-u;S7i`xZfREqL?t;dc?1pxy;;zv6I$wdt5Na
zNj#l$mlR?&`Xvs@ovCNM-VeKMLRkJ+<O&;kZ~bGew_^LR9)*u0qmlR^hnWG{C<Tg~
zg+|E&(0dJt9IM=dXSxbk;5<k2`=$810}n=izap~~TeyK|lpi;gfB`itxiEXL{{l~C
zZU(^oBhV^f!aW%}ALP)PI`bcdR0~xg&Ma6^XpDeX2$>gho~iy8TbM=Rez;JsFuUZL
z#)21J$QR*D@$#D%3Sf<@Eh%_W58wF%d|@rBK+&q6Mu`fX&_LNAEvPBXo|^0r(!RN1
zVWD}?GX-X8Ki`nG0ALw_ausU2B{xtH<4QAJu!vwZhUNk1cvRql1$IHDvn`47M_&?E
zuTuw;eGHyF_!8<2Bv!5W2fXm&j=t9(n+lO-q1)dJ2<)bXuE$qF=p!Kmujbtj4*__r
z^BU{CncF2j?h!!0&t2rfrn~kS?YR)S*#gaB`thE-&MX0k&mm-B=3Zlbis%E8%*^i{
zY){mxxP9ge?sIEZC8(^>_}H8SA+?~EE!68iPK@YS%#sCgtDwPcJ#;YmX9OB>u+mr8
zo=k9k=9R&>-Pf3jJ&N21IVSoQWv|WCo@~k+wUU_7s<2(-TG)-Nkhu#xw5nzl5&Yyh
zW(Ez@6{yH80-gg4ISc}ooq=aMi?h6#L)bQ>4#0Yiw@)cp5&YykBfmEc3p|rOH_<?@
zs#6efdgWY@K-IHcywGEZdO@{ZK}C@J_zQ@}H~~hr$9OX^FHU*<bp(2X-z8{|zJ-4D
z99aWYz%d`*#-*SO9tWUaV>_@(d_VfG`YbSZM35{u(+VFA?#0@UegOoZp+!;~`W@He
z5(jzdi|65iWjmIuq$NcpSZ02Pt5%TM9)k$Lhd%2$A=#c1$**Y2ZI?(u9{L-j0B7$x
z5TyUz?Rs{>Gg@dOiWgYB6W00N*q%43qCuf?{HfsF9YQXTA5nDR+^ytHil7y@{V^bk
z@_$7`pdXN{U&G?y6ygSGssRqGi(a(fP;e_6>_B~<BX#b;WOP~ZD>qEH?tjiKAQ_VW
zFp5cy_6=CBc{1x%o-zO)<3MOa9Dcp$ZnyIZPE@{ddgguU3a1L~(aWXrQQEh=sU~pT
z1v@}-^qd1~f_Agu8Lts8mroL&BD&%{uPK2ZV~x<oZAc(P>{MWBAvCam6-1)EIC5Bp
zF7X;Sr`Xh9MCMB=GIXSTzAC%u8EoX}*_*YhHzG9m8)So4{R)PL=sCo`0a4NX7$Pnu
zb?FHu3w3Zft?Ktk5Jjjqzdz7t=L<oAJ;ouI{c#M-dDOi~A*yOLFcGh+a)u!Nvl1a*
z<2gZw@fA^nfe4&H^a(8NBu*sGW7OI6p>PCAp#3MZ>V}16)&9wGtQ|K50tP#ufT#hl
zR5=m!7rm(JiQ%3hU}MG_Z{|9p{qd2g&%TbJgZ*RB+iUSI^{Wy?^b!{l<X)Aw6k&2$
zUp@+$g{cUT7CH~X3Oh*1fdJ~W=Q6Fj<_w|eT$hmiT4*eslJ~Ml_5#DIy`Hz2l|=Da
z3S(}O$^wgQ)%)vIeDI)*x<~)ao}ru2QftmDi5z-S`3>_a{Hjrc!`2b!)5(}iYvQ*q
z*ZGVMrPez;WZx!~k3RR{Fm&%Dbtzit8&Z!M=qIYT?fBrFV-)=flT0<0(#Fvu;{X)Y
zt-~F;$!B6CGpA&c7Fxs9oPEy43lQSzNhce@HjLrN5mID)YoZ)So9+YGcbNQm^On9T
zM$wAsgaAg^(hU_Z3?v0VcKcUkZXvTD0R1H;9q>*+ENb9n0TNE3`^)j>Lw%Fk(U21s
zfTF<Ru`(JC#ZC~Iu1yK_34ZDZ_g|oewgbZe3_U*&{?kDJf$qVU<3_<U`tpHSKu7`?
z$%rkeg`%-wkq^FAQsBE94wdNog89-GVmerWay&=If;)u<%8&%TDk-Y#enb<}L57+f
zCqYH|9kwoNvAdFj>vDs~QefF&!sr8X0_1<KihWM$^^7iZRozP>tyC>QtX#)PvWncR
zH{SFD4Ui%2GXc`{8ZeV8>N^N0K%RnE>5Gsbxj`?|BDDCaT6-+wYCL99iro!yzNW+s
zl<SJtU{jw`YMt^@{GN1FUlftr(jcBGZ5Dvo4!B3Z`EV-OO=t(oYE1eYKA<(Zd@E@L
zYxw67s+*H>M*%h!w^rs{*i^6;)zCH(+rme5w^9O}zs2QRJ{)O%O${>!-xaxWb}bBr
z4u8`Ji?-ewrPh70=rK#S(w_@<w=Wm%!Q8cOiG|~tm=nj>UhV_^+88D;*vj61dpVB%
zufPxW?QNyjIOJ+wr^bI%Eh}7pQC$9Is1g_Flv<tezh%!uKCJ2`)!A{WE<i1kY6nu4
zS_4*yYbIGwgp;m7B$gaXpM~6c$71XCZ-IfIvcBM^2JAn#li^0^E2sQJFLf=yGOqjw
zcKs*izxKh&%76ZZ@@wPDKjS|te|*>SV=eig-y-uDOkH9B5bP+{=5Gc*f*m6@al#$!
z7;^v5!(+Dv+mp5VwBCa;L?y2|Qa+<#38DC{j8~{{mb;F0y4pb{+%5?<2PzQaa&<te
z0iiYr`r~}?&yro;@b15fcR`o%w&r4U(%_s)!{+Mx?e*N`t!qir6JR&gl$VHnE@RSQ
zV|byFhqbaExkn^?%{z)kyw~z-k5il6f&Q<yU+n4?crDm*t$&f&3RE&L>InRIYg<it
z>_39-y~_>){LgW>PYisA?;4vO7_R(L80gO_J+yw_zzAIAM`)HYD<uY()C~Tmo0G7m
z-7WWCe;{1kT#1tj;)k~&bA9IeRlG{6b!eBZsBk|c+`AaoQm_i()kMsl=T=$E&I?+@
zmt!<nXsc?6)a%;o+u&dC=h<)1UH>Krxv_3djj`@1R~lNuI(&g2>2Twy!vnOoWK5)#
zQ#@igV^g!6xgNg7;^hmjrP02$V8;x9zI7#%5SGfU+x!=0*3#ZUzFdA>J?Mb93Qiqo
z_y+{r@2AqO^&>?Gv@v15)_352P7#5X44uMY=`(>3<!MV&Dvw?7?_GK9TH3Q6WVm^)
z?pc-&w0gt71Ze$`VEH-x)Vy3q)vNNqVp*B%y~ee=7f!UU!sLF!dOiYu4^<=VR~@*~
z&dPH4ZT|k&jernlZlfhdbYDAIi@6f;=cw3og6%!$?TR$y)JXGM-*)JR$YIrD1;T|O
z+F=$aL(^O_>EYEQ5#Rz1SBwW)!>HLz2_D11;`%svEV*n{@K_K3op|$4<*A@YdmuT^
z3~8Y>zRdp>e%<ENEac&1^v<C@7D7&`FMRb;+1A(JgHNnO`l`-~&eArFGCg!Cu;FMO
zlBH>(r=^~efp@tc&Xb!CL${%8p}z`W{Z8=PA=>;Gkwn?1zxRp$X6IFPGwJ(W54|0D
z6o!ee?kOCB{7gPtk1}2Uc_=BR_1`68jG;_|VJ%_^l$da#X(+I)1Je22Bi)0rG>iMg
zL2>EjR_bTKQ=AeUm853;;QU+IRGV9W4qmw+qyv96wh|Dq(dxMdZx~;g=&%kSh>t2p
zLoTSmwREr_uSg>WV$qWnylS}LisWnUujmtjffNwBCMgdvWuO&<7CnrkTrpnh$bYb;
zh1nXe0(Q(|QpA$kydE0}-r;UNyMFfNxMc=BCWD5!ROBV(z#O+Tb>E-*fd?cMx?A)F
zte&t+ci#?=X>fN+leFnIa$9HM0PV+eg?`*ySX#SiB&o<mF(p>1)o%yX_AqRNMAm|t
z-ain=H?VC^X{}c6kqH@sPq(s_t!P9}sdfD}T&%PO$7ySu@<~Ua$kTD3Uvlfi@#9@v
zG9Wx=aqb28_pLnU^`EO$g}|%6yaPL{6~Mf%y-*Lof3SK34zV7d<j$-OetB)>u_0ys
zbQv=+$A$Uw3(eY-lBx?o(arhX$<asCF2;YZ8huYQD6e{CkG$%o$#{*^4@Pv8jq{lS
zO@5lN8-cG^@mn^wo~Hg63yyZP=<Cc{MYO^Bc?bl@k)o@6_o#lH1#`D+emau_Wx2X}
z4f-uF84gM@3b5KZAHjjt)-<$>_InJ)$ylaM3T6%WD|*OFVY{2=4`&5{q1BGZpXeUt
zPH;sW-@y>AGj;kO(d(4QxN{6AQp{Ks9+}uWCPrCtL>Bi717$sYom*LWNIq}%uv5I%
zudz9>vGCtope-4ep+9_#_y{yJVPjBm<zNUSO`Pa;{!Z`|3@Xet1qlQj;H@4SEpM;C
zuaqY<LThMxjU!W&nN=b!T7kW5@*^}9+*a&j&2GW=w6auqFWiRf=rM&pth?7i0wDbc
zt--<eD`0>AraRe{R_dxGWz@}1!=#G~r_JlZe6|Eu#jv0bTI2yqv%xY-4zh=>`6N4Z
z&1azagY0Q$Y+WnkBi5f#lV9DnKQC7O`I_p_fpPu$jMJa3Pej@U?j=3MSrCz0l^-ve
zwe~%Dbm?z|-6&y#4-Sy{{#P@?#K6qx#KQR+h|0aqe>-OVYpr7#M`T5}uPYxzX`ph{
zZ2>sRp$*%lG)LGN@}t5=lM4z>(7m3b=9kDk6Ok`4fxi(C53bXOY}4l^$ivIw(#y4q
zf;yR(L!;Pi3Qt)?evA!}6V?``)}NoIzw14nsV_a_5bz3Q_nE)XAmtQ>M<%q6iE!FD
zqK$iX=$AH<K0{?Is2<k4p!#naq~OBr!~S2vlw)XwfT0XWN>spME))zsvZt{sLrB`w
z`TGn~F^YiEQ&onLvhV*P?oHsMs?Ns$Ob8GVyg@+Y9&5DVN-Ai;h#5#=Mka`|`D#(y
zsA%hgG9$R4LubZtJC5R7Yg@Io{naj3-};KU#Ux+?78St-R}dBNbx^?t0xJ1`pL6b=
zxs$|%$p8KQ_-N+dbI<ae=RD^*&-0w;Jf|hDz#*Lvy58XE_re6;T5_}&ZLVR!965yT
znyf>Bg!j&DTj3CV3;kuVJ@BjftnPGnyp&^`%Te-=aYCnFw!&||7Ta}>5tsW2V!OCI
z<^bS`?K<0t_ai0CCPJwTA1G_6HZ3&_bc#_~{^x;uKxSJb?=HY#`*GXQlYir2`gZE^
zvWj!)fL_x);C1`h4gc7r?^Dd-A*=S3hZynKWhjI%Y4l&4oiBbBz%`UQ;>CMJeN#-R
z#`kgh6fe<wdL{cVh^(6bsoYhIMh>o8^qA&<-x_f-1k)BlM%9`UdGQB<e}cElDQ=Z&
zF;RlCi+k*19*2^Xp`UWE*<rC?1+1liU;T!_vIl19E|dPIr1v6ywpDUhfjS>#eay`Z
zW)pYlt-0ai02e56exeW#5ExFp?Z)db4ftS#6N|Ca7KD38%S*$jaiaN#QGuoBO$?nr
z&L282FuG6VNMp%_!kATBaq_$aVYUT~Kwe&<Fx$C%aVOE_@UcohvW})LYO56XA?v!Z
zA}XiG8~>Gle=!pK`@&bbS}WGD@9@<yBy(awl(3HkqSUBEf#0Kxp@Vf)ds-@su}S2m
ze<SjxaJZ=iM)fEj7>#E0t^{hM-cdx3pEngjvlpnZ11#ggSLTi{TT^kK5r313kfHrl
zV0Cl{N>iA`)POaq(4y6&U%6_aX1ka{t|y%s#dy-`{v~G?#WvzW7$-fp31iK5JZL3s
zpV%kkqdR@Z-A%@l7tsH1+cp^W=--RTkRFs7?^shgC)C3KD9?|48A_fuj59D*$%)5^
zdRksJy1__YPX4OonIi(V+(?U#x(OY19y;m-H3a6wVJ&@R=RaglCaCC);($4?5`8Rj
zw1VTbLS#nY%z&z?oTN}K_u~12Xu2UZ-Jq-KP8{ZMkrT=|tp<wx<`hUow6JkTVjoCp
zdMG)w5~dF8a>vtp5ZxzaHq}q25J#%46Y!8?lgB9+ej{YgtV9Vm;-ZIhiP6auD~!~?
zBy(~meOUn%A+z9xS?0uYjZDpZQi129JNCy0z&L6Aue7h@IfJjP8pw+0H(#(%<7;+(
z=LX-{MxQN4b1kp0Jo)r;BNpTx&_;xk1uLYv%y`Eded%|lU&+&olV_ILtI1fl&0gY`
zXRK#Q0e)@mF(-JL8My(&tjH(n5|{6v?v9W-WGkK0h?vQJ1wiayI$fa&TAlBkA{$!`
z`TnKcdJO8&`DS7U4kq_Or4&rscmxGah*!>m5y@HM?)v*=CBA5}5`bqdQ$HdnX4Vg7
zBd(O$%_^HY7rjo7PI9?>;w#ZPBcqM_J{8l9TV)5KqSCnKJ$_@Bzhbaaw^rySHFRCD
z-GLKFe!+Vw6=`6tw#FPGQ0p^lFRAey57Eii;reL#1S9?lY1V~M4Z;+Om|P$NvEU>N
zWA>qP!fap6yAVnM0Svt@Nl&Y(xj)9;1|j?FxqId0@f8cgTzi?JlmRc8<IB?*B&UX2
z#)kkE5Z2SEwfR6Qp1u_0MzxbTmAeC)tUq(%p{`e9aTv~fj9VTDJW~M}(j;E0jrbFk
z$z6{zl)!?sOSqAEw;zqgmRE+%6~c+NFM7saXZ><7J_CV0NO<w$RNx=c9Y+{-Ld}8a
z^0qwJGM1-|rkmJlBv#`54viX#`8-5-ltj+aCluBP%(=zZBz6Pn&2ZJ5CX0iUZa*|X
z70dign$k!zQj-*>Cpp9?I1C5@a(&H6zQ7-II#c9y2J9&{-tCb+@_4~SB|VkH5*m~T
znBstPqymMcCTnsQ8v82MUk(S6AKc#H%hLvLQW(+kSXn0cV%CI;5k}o#W%i|puHu@Z
zoWo2q@1Uq*#87v}%GQSXTsVp~96!#&(JXi6DynJH{=}K_@WQ`=X$Abyt286<-{L9v
zZ-8R`@bvdlo&WG`{&PL~f7Ky>ROc_v=0DDp|4f~q{sowPT&BS+5jt;*jt&}$k$g>F
zHw72z#P#eLsYw#0pYE`RdFJjZhP73#phI>sq{b3oYR(g74VBSdK2~vfm+F^Hvq{C)
z`>ct2&NbG{+90U?!zWopHB#l`Kx(oge;FNF{C?kCIKYSsmb?ZYgC=HkuY6i#HU<@|
z9$(B+0G;*fPuN_f_TezVm#i_W&zc|9gAua%VeO67p7<B<?ZG_l8|m5frS)<zlY+m|
z+J;l1JDvvsW|p6O$EQe23O5mcsY>Fj{SEWQJ<@xsq)XL=s8!v+&r@%cE@ZtWDB(g~
zzuABQzmGq<^XEo<E`8@|es~~%0sL#4sxDiT96wAnr<2DYW2Bz^6Ng)CSCp*;9aW2_
zKf=}*Yv`mBZZuw{w4R_DEI{Z!{kPn0K)F=!=r@BwsGkVT{ubYPfOJu{=`XHcbjAVf
zaiJ4UEq;m!xB$9f>1^wcU!w{o7c6ZX`rD-P10zFIa(p0|3>NkB7e*I6;)|_o^Q|_=
z2kf(f4$u@>lXwO!fTB@>iH5hO2IdK9!4|&|0((HhF%>NS7C$!|aGGLYPaSeTq<tL^
zcU_0nYp((KE*ww)QK1JoT*SDoYh<k5F<9Ubrz*ioY<!@=zTH#)x^Bv!(4l-k`%F*y
zlY3mgzrByA{5KDD1Al9K`1{#wcCf#9Lq5|ej!DYJ#FL~3YFC2^q0z>T$ZJ!P*T$)#
z02wX$RUko@OlvaEsA|gILwo_2LRq7rzIjrEQ(mpC<BP4qtvYM{ajG!vtkHUI6KM_`
z{D3kp1jl#Nm)RZq(%0_eDgXKXUE^Y6hw_DXv%m+(`6cEDm~M>=Ws|kP2g*}Ct(e`k
za#)8}2HEG+irdRzH{~0*w;!=WyM*$NUXoqs))94Iu9#Bj53<dzVYeRGCL-?E`X6Qc
zQiHdmi}5R|YjMo_87te2FA?qUQTs=})yb*DPM!+G_}hJgMZCY8eejSDvtsHnnFq<r
zLT6U^#s@?Iuor;9EdMK8V?Pa*YHENCzBNSD|H5VPLIqFap$PbPP^5xMUiqkIskLe!
z2va<Fo6Jce#XJw7ez~Gt*ttDT>NeL`CFi1bTvtxl9u1`Y5N^%Vs$?wy(WFU}n1Po<
zsPH5gP2r)k=v0{$G_T{@^xA-ZJ~b=PfhRzmyO8~ZXBNNgLWXHui6>`43T&Jk2~%=_
zA;wjBqT*_o{XtP+*)}gfA##)EB@@x46!OLg9OT6s411%(Q**Bz90*G3jJ14FJ3J(A
zVLh-1()Mg?dqT`IQHD7qPY2~{uRM^Kr~Esg@#RHjCnQhISq<2-iZRkuI7XTUcw(@H
zT;0HTj90S3REVSA1u^@$=#J8P#jf-hN^Fdr9!h)>?t>Ok9j=m#xhq6AkToqyS!7Q%
zDkL$6xXpSWKUJ~1qXb+TNS%dCx>IxH|77U{`L027oF0hHXP2aeK@$6ca~S;;1lQsm
z`+?s77#4X06K7HE+JpK<UQC`@=pQ~afSN5Hxp{KeY9;#|>HnE+y%+D)UWKj!ET|UI
z^3%ez*wq*<Gyh67e@+t$H0oUrLCMQ8%FlQ`q<T*MQ8d6tgx#CI>3L|b=L&Euq4P#w
zJ%`0oHYzguo??R&i_?G5de*jy`xHcu;#Ta1J7hfOA=u9>hGMz@8fS$u6T*j>r=R7q
z?`!+Ogm7PFz^r6^m7PG@l|}c8UhDfW;y%TikXdII>#Z#@2@g?XHI`tr*;;|yw63Q*
zykA*^0-;}W-dU;1Z8RnUO)8O_wSiTv8(#TItAW#S+N0;9tU)_O!Jp!b?&RJ((T8sg
zMR#5vz9PDFP6RJ^*#(Sj5y+Hf`dJr@q$D;iokan$XdmO^r=^c9?J6pg!e?~nHIc1S
zjT|>&-}7wsbtUZK_6;KMx^`TrCHkjY+G0JXPO?NedDK8d;lCn_Y*~5^rOQ@I>1mYK
z{ZtTU%bhF`CEapH{FfTyExO~?M&fKqa7J<IPswe|nHv{=rN1f<YGo<rq_Ub?8T;ot
z4lOXX#04}j-4A)43Bg?8fB@D^>pq8UI6gRiwd`q)$kBHqivG#Sg7jZhpk~4>d(rxA
z`?>kWUd!ddI^Qzre_;pu4~jy~{-YdKXA&SnaxWb7cP;h1d%Yx1@#!yX!pD-Th)bpV
zqper7!^oidQ{z@6cHi_T3TEeXeUMk8c%=sBZyKC;(PDG!@K?+gjn<*Q6|b~%kh^vT
z@rQ!JR0V3PQC02>?|b7k3=E^ch`h$uWH!D|Rrwjd$cKK`B0r1Kf)5;nKN)0|3icYG
z@pAB+Q-`(WarX@($^0T>6Dc|}o6~G-RATE|V~hWh^%!D4#yV!P80+r%-VFq~btir$
zCHzMH8rO6e`(#8*9v2!BV5^9|g<|_m$q;R=H4=NNr=5Zno{}>|WerI=BelRn)8+8V
z#3@!W*EvFtmST^|c~f9GgX_6RD$lBa7sDpGRln;;Nzy+^N~bgYL(`W!`QjV|D@XEz
zMJ7io?#*mlhh<}hbvRZR#fPz~%VhU+9vnXk3>v>>uyBZgO^G|jO%fL-HRb;3POMZn
z(IO^^iYsu`m2zT}Xt36y!Qd7aG?$qeBcxK%4`Ssf7>PL)W}B!eIY}5X;YCu@2K6<k
z2BPJc8VR|pmzCiXBN0?j`Pdszl>#u=k!UR;^R4=FT9ie9`8&dFm)VE%UB;=Riikn9
zlA7|Y*c@*ffkIOeGU7M$y<)nN_#df<RbR87OMw@ORd`V1UcN-j$-=F;ih@JQSu12A
z1{6NazJsRVsT8iv7o}08kBZBU_^bR1aCP9E8E!0kUA02dF-Wm1<wdc@sl~2L^f+mu
z+P4DtD2eC;6sU91QpQscv>_7F_#y-ce@m~^NWchWq++^C<cAeB5i$=_hM=Qe{-N2q
zER3$diBWg1a0S51L;C|q$Sx}+wikz~->RRf@VDNIzwLYzk$apGCzJqQn;%9_6(7ZY
zL*|>D6LeOC_0~)`bB--V+(N}ZAL1TW9UTMKPa80sGn`fq(FN0g&(LEaHojQ&0;?9$
zUw~tQJkV+efzV0f45mQt`cYl>wj6L*W5<A8j&lXnCEOc37_ET+@x`_T^U(8F39<8i
z<Bj;QWZ;rhD}^l%O7;f<y<<CyBYiM*`X&VsQKCD>hv!FkR7DOqmIQn;dqi|c?|J)S
zg15LE&sefDP&?q3fN$&AHd)eu!+s3BhN#iIm7+O2i#vkiVve2(jwdUy8m*GIyf_ZO
z8ZxI=+P|R^>NDyCzUU5w?Q$X7D__Q>Q84db=@)=VZCc7-P#3CQ$G8U@+tCWLqFBPj
z&gjw)RD(e+&yVAH5c0JPXz596XOLvga;r2_BPi5$wR`7QD}rC9TDj8nNoE&!3O*@x
zn||O)2q7>1TeTO(oq~EDmKoI|gs2SGYBn*&AD0vXClw*=(0aTjDXPZM`a)Ejnpeek
zf2-tzm((;MkT10^mXqGXM&!y?Q5VI?C%r#K=7u?rg=lVZbS!J_4Ar2v$QetnCQiz(
z^TI#jFOzkQt`zRqV7>mPny_Z0vFLDBCnj7tmQp_Vkp#6~XEC;mK7TL9z<YpBfOB>Z
zCKcN^BUpRry&)glxu8G2KjR(*T(vFm4<TcvaaD(pqO&!a=T1kvV)jf^C~2}bydm_1
zO?XWN342+(MdpD6nSG>~a~#|n^;7awr@b8AQDD?fm3m_hy;7&GrdDYeG+M7IMSE%`
zn6v*x4y^e<!{~veV?RfKXIo!!s#d_US5j|{1VH(W@9+U3{AD~k`hk`MLq?(&+`Gc0
zv$7zv2_rfU!iGs+ONQu<v%{BJXQ`>K#PmsoCoGPY4`W-APNIVK^FJj9;^+=WXp4Hl
zEG;}Qh)|m@UMw8|N~WvyJi3FgTgk??ogWEWS@_tUP>Xh)WT}XzWiLB}8{7jbChB`@
zG5yDTQ8$jcaG<h7WYDNXRs}rbsv{4(*v-_tSS?ml4uXgD!M$ww)Bxw(Hb@w^)TsNf
z!^%YPQR08jR~9RaGXWbC4bm$kQOXoj;QkF@vYk}vp8Z$prvIr^1z>tg(IETyjrP|J
zike5RyjnH<1;U65*e|>;<I+@xvl8pzGp{KcaXMk2NUN$G>w-&n#*#B}=R2DPj*s?-
zs%BbSZ#AIUW)WcT<Vz5nDzO)f?LYBCY@?*ecnUkA@C7%rqZed#o%eH%C$y3|(Vb^S
zh#{<~GNV)=#k5RRyA<a1uaq2LEo+6i5KaHeoEdVIiO7#!twD4MJ%0A@pib!AJ{+qF
zzarUt`K^*?X6O?E=spuW?DnXAjk^V(j?_%Zf=ZkNR;Pa=a)MSd#T8pHaKo#DJ$0F}
zsE$*ML#gxWZhl2|_{54c!atEbf)=<><aq?39BG*_7g7zup+e>cSpm<*Uo(`va5W`Q
zlb(glxs@VFq*r9++bo57)>3wFsfEVyQeAUSy+Eg`v)@}QlUXz?X0k{Tu64tlzRKDP
zB`2q^(lS<fFw}seS%0q6wFjjrJ&KNjFZzX_o6GHs_$40a)gskve7o`?hb-vdRCU`k
z#}aD5LK%D$sY>><cw(s<MuR*}i(IRYVU_VJcO_q<M6u=ScpsqyumIE)M@KVJ2lE0a
zNvxoTOm)9=s*5}>hH=UV&6;BC2#sVT{tlm&zN~HdQvaK46!7W$Wc+Bq#)xmyl}t4f
z%Xw0AisbwpB@Jew)`~m$ki=d;ozPFlP51MrfWDpw0gyAnE=UROf~4^w#{1ZY^%c`1
zmytg*MXJ3A{a3Je0NC><tIPc-S63`JF_@f=P$qlQA+z)gzgb;w??(oQPpZbGfB@~8
z??Obe<#;SAiXozylOL7G+$4=n!XP4zJq$(^zi)&g)D+tnJMW0*LZFDY|IM5djwZiq
z7;&R<IdR3@@GNc&i^~x_y`_KkzDVf_Ik$+)e|ZE2POJRtm;z+JR{1Sx+)Y%oRU|`3
z{TCufp%w<r)#vElKk1Uln-y0X@#R!lF~^91RiJ0oJE+mZQ)Ia&G^Y$f>j_4@nryMw
zkw(0Nv{>sXBk_R}&$PieK1`Q}x304UX)w}tik_Psfq%W-hy36J;O9i{7Vf4On{oMq
zf{Q3Gg856-E`s?@WVW`xf^yUdkr|7wR*flNFe7n^yr@Yvvv?s!INZDA(@8@tNlqGe
z@+3@`6C_LRD~RcAF}1f~Pr`!DmK6+ST#<7(c4c10CE>yf)P-Xx35<w3$`=<TtJQyM
zF(2di17>tg9`vh+fv0zPa<^_(_m7qxO5)Ge|3o#xyl=GolgXizAZk-6**`h1C}!nj
zGG)c!u;pB0kCNRVy+%|PSx0#k_30yBiK_V(nH^HI)}d6*kMcdUUI<2$6Q{}0g+L@j
zoL@28xTRc%%o<;Dl2JE`$G}s*{DKD1CQc+xM(i-sTE<T!0mlJhn154(g<~hJj$l)e
zod6bD<v)yBX1#S0R3Z~q$v^A{{vM|9$nPpMuuX>mkf{gkbbtnR!m>e!5Tm9<yZ$A&
zT=L8z>WJ$ALDj8<-NnPyh<`{ST*4#Q$eJA8ahVa{ESTQ`!G6F)*&2nqLUIf0rWlFu
zNOe&61&=fc>Q)1cCGo;Q9+Zh()hLypE0UJ^Lj4#Ij*kT(hj{I=d}n_ZgUXt7m^^y!
z*iU0|mG$ieggbsKBJeN~<s5>vCcP~asM#7!dt&IW%=BA%HThAVg`>q^q!1^$!uPQ>
z-CMR&Tv1NaS?#wKtBCVPXN)C-q;Iu&<}gsvoiGJ)UW&C|U?f(NA|KJX8}*~m%n}|Q
zt{|O9#93!OjtPRjb=7^K(^QA`BITeCdKZ1mLEStabBKBd^F^bj35Pj_G5V&lyUuD|
z<&5!Y)qzI)0M&u0zz<$}DQ6EcPuf3Km}>BOD_3OlH42G~_h#rXBY*qLgLoPYrb5|)
zj*dnzFO(OV*vL835&LT;a%g;cM*KENPllUOmr2-<VzOV})Jw#9fO(mA<XsuJtXgvC
z?EBc$sJ7yG<JR>8G(>;KyYky?@8CTHpPWBPyg|-b>y<`A<Q5qah(he)4mzWP2SthN
ztZyL;o`piTx{oc^CLtE#nPR+bg#S@t$lO_fil^l5|B<vW>MK-QqxCD^6+2KCOgi{y
z;6mPBZ$0#me3{A`*<jbuN#Xa<ON71RYkX%#_R?U*FJZ<D{$!nbiOB-vO$?-A()_-P
zdGN!Z8HsPHv|jdp-40BG_?!+@(vCnKG+VMlxDl7Y#8`uk_^;Ii#Q6l3p!`E*5A)>K
zv=xQX9diR%6n{~4{XFdntnfndzH-p`h(H0yQR3`u6dc~8JLg9FQ#C8uUwO@v{W_}&
zUk_b<mQTrn7tPKTUl7t0PGw!BVv)gG>74YAL9l*AAR@}cEt>4UluMm<OO(hu15&5`
zfnTHU%1l@E6#EGi-!sMRd-xt}oujcH&R~5EJ#{hgIU7z6h-&n7x~^`m{<d1Ggj(#N
z#vv<(NGa)Oym@~t#<lG1whzvLw$9p%Z}zW&A1pBx$3PEYAiu*5oXebdM`NLbCK0w#
zDX-!+BX3F|SEk-aPQVN|dPvCpKupRNK8%yNXBO|jhKL79XtAb4Dty)ZZ$scERN;62
zSo6X1{;5Cq5iidll)g@{8_0z-jQD+^pQlOic^TYm#3$zk8IqJgKd6*bD09A+AI+xN
z#`V#iryGf@pfi7LVxS-M_e^qEoF2Z|g;(UVHfzQTLAu(Cx*-U3nBdvOAZ+`~*3oc$
zSuy{kn?YEcSPTePA!o?^kZP;U&u|-mT+yeKK>Wh=pJiV8(Uts;vP4Vf^ySw6tPsiR
z%b_8^=t}VSGqd_b+1pwc(<Zm9JSO$_Nk&$ctyKG<8U7;agXq`kfM*}CW=WJswM~br
z6nR9*S@l`~w+E^mRe5>as#o|TchZpw;UA@M&bA+GJurN7tabkg+qMOz2T4sFt_h9)
zz=+pUwkBE1A>)G5SnC0iS0%^6<Ve4hEiY;4-5gJ?m}ex8b5PVrki1Z~nVjJCL-`>4
zeWJ}J3VBgrPL<{a%!`B<D||ZoAa3|y`=^PTCp!}umOCnju0B{<J|a?P3%3{iXSW=g
z5Z2|*viNF!aJcA#!Y``IhlM%ZKiAd0Bx3|AoxNW*I?sq5!W%I7JcdZl8>yH=&VGXC
z8n6pELV9%;AD;BA(_Q3XseyL1J}4WaPHpz8=S72?aIq(Tu-c3nhDCpXW6`g%IL(*x
z4>2bOGV1%Za7}dQ#K;_N7EykfdEuY)rdBU)6`x_;I*M5w-C219H`d_@G<04i4n12B
z6LaXAK<$v*2<A4nZKL2Vr=A0{^;F{X=C2ra^^Y_5qG~I19sn@|3#AxWGWUJpJYcK(
z8v>b=t!i8lB^Ru-{-E+NSO<co8ojM+B(8O<Q5(jC!Ou$j-^*ovj?PDfiGM~nfQb`Z
z($oCQG2Hhu;u7AYVj}C(G(;cCAuT+uL<3q7aWn_kp_xYNC#e>u(1M7#l<Muk6~sqr
z;;@q^qBGnk46qCDVkT9dHH+a3+!N$XZM()E0yb@RLW^HhzprX={W4*kQJ(1yF`%96
ze5`qxErjRXuVA0PK^a4DS1&m|nCeu@{69-ocncNkd84*6FpK?D7H%}CKlAJKZU4Ol
zl+G~HD_h@ws=l$A`l37Gcm^O?*McQNQ;3jyi`Y$t1o1q@ZpTXqizS}XBp`@wAi*C?
z`|vqMX2_4zqZdgE)~-coswj09Z>4EYHR2mtTSdovL4NrtX3VEb1vU8mG6<p6jC?f^
zE6EU0yCqbfPh1`xkhm|w@dYz+8262*n0ZE#K!V4u5uZVk5Tg7z(ydFHgb6glc(E|k
zh=jno^&H_rx%Bb1v?H{P@clx)Um@gJ$|}Bu>@?n3QlL6jNJb!z=kXg%RdRfBb!5F?
zFj3n?@H7!1zNQ>b=13EbH9it~lIF#qu<Gbp>+Bgcuj*CQ*H_kOJwmperbUl%#%`9<
z9@W^{#|rEidT-~q{%Yyjtqhk`J6n|(!yfa2XsihQLIZ0>@YnP`G+R%*Ubm4+_u2_y
zHl~s4FP7>@IMo;CR)3pQy_v0k2|Eg%lh^~<>ak8Tt=~q~RGr=jGmt8i%L=Z@6krC|
z4^(CTN|~~4)&n3_x;r14h1c7h*Goi%fhe8c@9%&&C=1?x-wU2E(^@?aHGo&4no<C6
z6_z5Sk_+HVDp|-x0F-kZEA2j%iZvQijHA@nNmwd6DS2m3Nk)W{tDcjR5^+?O{BCup
zCC|<&*<Y2sostU9m7SM4GN;Vms?51=nY-LF<}&NI01sLh9i~)sncU3fA@ZVhcOgD}
z`fHsM$REAiVFYI)c<-A+MS>F84ITTk-U08|>{@n$j5;Z#W}B2LQ)QlW%WQkO(=xK5
zoGl~1rYr3vWgH@x(`}u!BsR=!sUfP=bho9OJ8#J*SGJ6}O|7&KqYU?3th6O$x+_ms
zp$*9VaNnOgj=c70a%jH%lq~l4@XWig0$bugvv8eXF)jR42lg-uuY$eZvK9Hc2BTg!
zM_1Z^c-Fz{tEdA`eii*!QNnYc#IQ_SS=#=dO-%n;rQDNEu{V=#w$*%|SN`CvBOX!s
zg~;U&FfnhCo^^inE3sEj*M0;yo>ws$RSOJPV7!%m8upj4mth<e`+;;0e|XVM9W(Av
z$(l9euBCu%P9?;isCWIa9&HztwUQ$C6!tkD;yvIw4kbKp0JRH`D^RUiql9-$6WDQf
zNOt5rC2NY_;2x2XZQ<ySxkg;<q0t=|81b<#jN(IK<-wF8Z8p~%;M+z#N;Y8K@LjAm
zU?i^LEj9+R!={jPEOfm!;2G7o^x+x1F9-;k?@7O>yeIX|Wf5qKjtz#Z*pCk%0*K+W
zwKL&@Gqoe3ItQf>Il!E=Vj~_D!k*Mt0=8PUApvaR107$)o1dU_B3yaw(d_X&t>i7D
z)mSgTtAV@8BcD2WWQ+pHRf6_ZL|-3hjd1)%X=14!x%(8kHMx!h3QPC0D;_la2q3p>
zY^@2aI|%uTa_qYOBInN$d<qW{XC_e`zu6@dB?{CGkk^H>Y^6F4&?jaED}0>Ca}O~v
z7IKE<4fau0Q)c!gz#UJizS(jX13D3WHz34=YkM0Dq&pv>8)aG6Qr&_R^sX;LgY3ZL
zT7LDN;#z)Q#%Y7iUja`XH~gIYmls^SdquC!M`V!|82_PzRg-baC$vTVlURJTD~arq
zip5&O83B{RSozcN_y(V!OAr?QRMN3rNq3a>YLX;iy;2C5?CR`8L}srhMI?{#-dQqK
zQLG$a`Sk*Tl8m%eg!8^D6^%zK3i7$iyb|X!f06B1ND=#6zOZma$it*G>`1(`BCD-&
zPYT3Mwg`P5dP$CBfA=UO(Vz0JOQroC;A#HG_|kvXPi44UMPFr&mh&Fk<w3f!pj?9~
z?ylOUzv^6$v&v}$2Vm{d9{^I<p?|Tou^9cgPH>@`U|QC!ur8qq<paYGKTRb>`e9TW
z`5_9sEinyU%#T%Br>~G~;=Dk%d&xH2dhKl4GOKbnTBgC&%C<QyugGeZwGZ;13+iRg
zUbl^qxsgcV$y32tUfv3n{G!yj59OTxP<3FmrUol+Ch_Vtmg~r9Ec*z3;xCse$H9N=
zASrf`D#p37GjZ)u*&-ike9G>EDBz|z?WuS%V&IZ%XDl``Kg297(E|$DQwNf(uXO6$
zKih_?xu4Wb;}MBjr7Vq>wGTVXjIVU;UV4RX$BOj#$IA1K_#4!vIp!I}B~hyCE2>!2
zIrTCF#KZOQC)7M6LPq2t)Lxu^K+CVXq419dtipLCVy%7VCAshnbz$CM$tO^JkfkTZ
zN|Xnl?k^tEttVC*cj1u<w-9?Qr%{r%oOu(AoFz1sIUqNEgZ1KvqNmq}1bXSoiBQ)D
zn002G^!g>rghs(8`zO?>XtzWdk>d_*59S3r5Q_wS!`*1p@xt_7HQob<Ovi8Nf)QT^
z9+F83Vj&(a&+*2VV{)I^&ht1ACiqK@S}}O<JTB0wEx3sj$i#C{;oCyVr)8ft&=Qj$
z`6qDC52VyxB7x*%B_vBYqcsFL4w=Z1JF4K(Efb3*Z&k7o>8r3hb;gGrge~SSV0LZN
zl{EgeON=$fgKLf08>ESE1C_H0HG`K}ONn17B{6yeZ)Q@Ozi4qwOu8VDu+*&ZX!6%j
zC#l0FHTX*?xC73;Fe!CCOvwC;vf-HeTQVknXi-;HP%(|E3wVObX{AL<tY$FHR4en(
zx(vOwD*12`$WN*ixr!ma6B{=7Td4I{*C|TeIb;f%3P1MgYP6WI0SBGx3IM!LFd^l{
zlOS>q_dUQ~=M*MStV&Jz7#!r!E0Q}iZ<#2?1^tmX1Lm{RntgP(-W+Va2nH4W4oc{O
z>WO0o;{G1{Pcx-y2S1XRbzW!6phx#e<1ElMvaG38mwZ+bBiD@dS6%gD#108xCSEq-
z#H*6Aaxk9kTTNf~;sjS~ZzFy%M^wHvZcsxKYehYMd%W~l;m<$1fP`-$gjnkloL*&%
zAkf)RddE;*z`@-z3JCjnS{Jz@XHc#CgwRr>?mG)+&H{WqYjO=S8=+Iq1jY|n2+zUm
z6<I2yfauwxc6qQGqDI|LRcVnp79~Edly2Z+T6qvFDE!5!YXv(@B10xvadL!&Sh;wL
z<Wd0-bX)_t8a|iWtfk_>xRlsj&}&$8tPuPSQ=PHi6qs_0UYc8!BExl&;r>`f>8VD1
zG#UJ{U4=$`J*#ZHsWbqGFHI17KDl(^>E?yBsqG3fNo1KA=)z|O`4)^_Us{~!oD57p
zCKEQWaMyR>%BbsCE&Up`-%O44r<TIpk}66~E)^!9R>jPOnt5LW6mv|T1EW=LBeCNf
zRaCNtMz<OXTi)4+hE^rbev@}cUQ@hGF_#NrJaE?xxc5@AU<GsiR6YshM36e>Nl}E_
zq4hQFZk`cYG@#d_qzptm{JqJf?goEHsNUp|)_a)x)qsBgl)dpX)C~zYt_XtrbH{)~
zVow~!PkOjxk7*x2Xi>plixj!kj9!ifX9T^)5R{1^^wJ`YQynyjp>7{eL&p)~ZXQ8B
zZ8pzf++rP~3N7m8Y2_@p73G6z{{pU1Lj;rz+`pm@;J%8VbXgAn>lnWz7yf(ENB0c=
zKDz<GoW54AWZ_ps1I&+4r~6JElT=k{VHJUk2o0M)%8@6LP+0yv@k<sB7_6zJX7mQ`
zL>#GV9^ghVd3ljqMx2;UU7%lO1O2B+`<<YFFHa-CavM=6o$OzNeg%F_@&dSg&Sd@l
z86BwH6yB{oIkS969~pv=T&MZSbyjW1f(IR&Q;^&XbnXTA=~xUD2$^YjxGJAB1AcXS
zxAW#x*kleR{d=0Cq+9t(W8-ILcTN8vY1Hfi{a4adX9JL-e@6L6x0NjY<Usw+nF{Ln
z`RNJ$Q}f8OJ*EE}X|zlD;Sw)(Hh(>Q=f@iUK|P26Z*I+Q0H_}GpMRXuJ^bU{R=x-S
zGpU2Qd?G(R#Q(Ey%|96ax2JRu|4g?PFZ>?-Ur!yte*r%|g#Q5Cxb}>H=IsXj|Kn1r
z7k&@_f97-r{{#H=5dL9D?<xG1G};~gHy!1);)UOX|4ow>{4ev<L-<FyBm0Bt=NB~E
z9sDnJT)%So&rl8jw>3S6e=0nF&*<m3G};~fpB~dS{>M=V^nY9r;fJ$bhgi2~@HdCL
zfgdhC)NSQ^=;sRR0RAcb^n`wZ|L4Q^6#g$Kbr1iy!#csgXa3$z9l&45PY>b$_a4vR
z19k)cklV`l;Q#Z}6#Vb<(-Zg^*||sVDgNiuXqWU)D+AqDvhcT4MP}kO>k-nBwQkU|
z7IArVgsS^dnnm&|{(iOM9`xKCwPLkK&m)4KGjqgqkEOoz$1deB!C&c~;_rmr!Jpeo
z7JoVX@AIG<|26#daQrv?XiwpvOQYS5|Fv!_S@@mtuSSF~axDa>;-Kmwf~rNOy{Z;H
zC>p8#9^QgE0yhK9jJ=P>t%pPb&*)-z2ojFT>^F2JKQn%RIBZY*e|UHOhs&Mhwvz3C
z&iD<SsK)Q}2|XUa;fL-i{I}6)cjLDVm$J_E$Bg!Kgy>kgHk)xL<qRe>+H2-1&J_Jb
znZ<G}MSo$r@z4Q9U2~89`X{K~wV0XIA-@&!rYOkKV0{}p(0|wZ>rK=^&$9Y!$W-@n
zw+lY3wOWrU!L=f2H8!crU{e+|4gX~jy2z`>9^kg6)z}M^6~QBgt*Ta3@CZL?4j@OV
zr)&KW`n~GFJstlUG}q<$L%##uR<iV~Y<;ov3hdd+p@2}+<)`4k%8MM68l+%fZ+&~A
zm<El+A??z?`h`yKL%OOem<+=R)S>lCJfpXTlJhx;frp@Zm$H#1Clq01D-mFm<!wXX
zsgyY6>XTGIZ7h4hZkuP-inq}hnfKyzvLEr<w#xZVT`kv87go}Ke-W!&&LZ<{B{{UQ
zP+JOAT^@Vk*FVqL3!%kW`4}Vd6FG&ctcM&P!LE%zZ!M8znFU^aY`#GEdv9`k(?7gK
zr*D(pT+FE0S~=G9l`_P$i;x<1c$L%hji(NA7C^Rous8Qpo8SpA0%ii81|>D>*GVY{
zM5ekCTaH$m&k9D{hTcO>+=Q*stG>!+#UawBgY?v>e~urR*EaNWl{16wD^HR7>9~tx
z#*O%JKhvoS^u)1rM9jpo`Eviwq57>bT0WMLpXwzC;jaO{XF*3O^ctb-{*-I?RCXV^
za{v^5fNB%lIm(EOjP139{)mVi?S}O`;O=r*51|V=lEW!<pJiqkKk2jFHKlV&q4U)4
z<cItA-_!Yf?>Gjy69bypepBwYlAXWpP;-MC(k{g+KVwuQq$#X7;rnq1^llK!$(Y!o
z+57ziy~FsxAKR_rV0IH(tdC_}JT}Pmu^1oY&;ZHZ*dLqOfXw0FJ+(hx1^}I*&&#-f
z<~EYGKju)$$<#q#j^Rg6!Fv5ax*UJee-7T$@vpD!yaSo>r<HFH>U{kU)sEv<T_*jF
zAHa^1KXM0wWpp>~zY{2!ga7}<_4BQbPFvrze!etT4Z{+Cc6<F?w8!{Ai{?5bATR!Z
z<hGKXf9-_XkD;HJE0_y!bKET}%r=sgKChimQRked^VII>Z|Ht|N`Hp{Vwe3#N_k}8
z&gsuxKdg^L^3RnYf8N3RUa2+0%66>lYRU>WyU+-4B1_JUJ?<1mD*gFMSL&UPAAmo4
z_AEk&l8k?_{p-Qqz~4-_l`Q?_=ntc)0|F`)YU#oL6Yzgkw5RYtd2%=75C6HvZ6ynT
zwX7uiQUTA60#_mBC||zW)<%2?)r|u7iO!7zZ@t&nHaS&L;t)!D;%=z&-K`%tQRn{^
z{sk5eaNElAuTWC?fzYE8)P_(hA+9kY^Do2HkMbP|nav7ocyW}gR052rBwI^j1b=0b
z#K%7JQ~O>_;ft$~psR85sg^r<>+XBEt?f(Wiaahq)d#JO;qjqTmPDjV^MBM!Fg23r
z$HXB;zDun*=kUgqRNgUrBi|L`Tl2~Ocv4->z4A;pcj^L++DO%ElbPC#Xld<xBAw9=
zB~?iUW=K1{;2?qg2UJOwF{BkIf_57>Ejomw^nP3!-xJa%h*(wXXKlgMLAm}UoSQ6E
zO^3|wfmpi4`Xx>IW8ZRO*G~n0ZVyhstz}>K1?PfT=~fn4<tXEItN4DO5XWuC3XT#)
zsC-;ODjp$@?}!{+NL0Urdwz-F3RU90-*iwVVkbyxHOd}U!V!}^8pYso?O0SpLe1&l
z@spml8<hS7_!l&Jh|8IOF#jqB!0!0}(xDEQ$<BYJ<OFIT6UQ0l5Ip)N<CfQ1Ct3Vt
zE^t63d1j&b&53+6^l&~v*2VUJ-oouB>%S%+Td^*QYa4EEl4rC1SMr3Ck4Z2z$K5Mr
zJ}7UDk;m~Xy98SoGD^{>#nM#4xmYFI=2#>qN>aN$WGcflQK1*53N<OLgERGv<vdEq
zdY;7)>ZynFV|DqlAyfIK;b0|z+Mm5CE(RXs!1_^&9G3Buo}3YnJ(%eHvCH)z{{ODa
znSb#3PXMAW#~&)2=eCj^|D5$}^GMaXRs8gH{n~3!*RMG=+9mv8=@z$@Ec}komttst
zDHaJt>=*EWd+)-Zahr0@Ns-=8c9W}_5--3nh^JbVXT+bAN4ckqaKR|^8)~E)zq#Gj
zf2zz_g^+R9oKfXC5dC|Exb7)07C%m!)i?~rm%ahvr;fP!Cv?fxr$VLqd&EDwu%E3m
z;y;BQ=B%H9w}mC3XZEwyz_-h?qfj$?6&;gWJQg+Al7_!OA5@ci8Jz_LIWuM635u95
z;U`_%CH+I0mk!xe`YEKH?&#+YMp;RTS^CKuF?+q<(TI7BJO16tFU@!n=ivW;OaB5_
zXS;1><(C}9|Cup_`flZCxAm{P-I?`+`Ok44%JI^RSN|H}wvxraGe6v|hXR?0Sq5KY
zz7KCcNAu=$JghaCJR{>n>xe$qFf<iM+Ho|unq*KPeB9ihPpKomIc^~L<yA2gr{<am
zJT-Uz*d_hKnIzV&qO1)5fU2_zs2D{j25i?2?rcDG$r#Tr`qO>_ItXRG)f2G5xgASb
z0DU}Sgoo+iNR}QZtgk!z?L!!?9Qy64{btGWS-8E!@3r6jk)w^O5ly(_Kh|#eM<F|U
zhQGS3&9k(-Mz6?d`$<kND!)XD2jkeA{jnC#+$ua;2Olk@pq@E{pf@QJl&R+8&Q&1k
zi(@=U63#rno29%<{JpPl`OCrI51Rj}f#(QdjujF9>j>tZAe8Vnn&bwQX8CVcl41pf
zC(zU5p(kr^jI&u|#*rlb|GoeEQ13nE-;0mU_T1ZFFaH?lwvy!^N`4L1R%-j%;rY^0
zkBuSdYaq&4_v_EcEbi^+Z>I}r*Ymf-a_Np`){PZrajn~!?nW&GnKN<>+Yac!nu)ta
zMt-O&?e)JUKLAo6&U@z2Z%^m{BoE<whc7e#S-Ad443T#8Kgh*u_I!+&?Tkq;BcKP9
zGm5fyY&Fe2irScthVM_0=&n$23e}ijahD61C}uCRtTvuw7ljxQ*CIsBwmvT<NGMs_
zhJJm7WAk_;PYPyTRjPVFAVw2xABqiizG!$-yIw!S^K)pASS<fbv==s1Lz?b{|JIn_
za_Qj(r3X~UKSWb{u>(i`7aQ9ij_maXSfk=u<?J6FUn(Oovx{MiF-GmidU3afCaZy+
zpzKs?)EKIlkvEiy3gc82(FV#IW?Ls7?%1kMDP?m`VxB7PQJL0XkP*b7KD`@G?-?}D
zW0(AYLwJsN?yUWu;Zp{hPL}?hy=#Z}FWO7F)yE9QmRufx4I`!r&XJcAAF5~p>SEq@
z*Y)P!)2r49f+Q?e`E$l>A!<8QtqZg5%V_<~8l_shtF85vm;!Q5#edm5hgMj+XKBf8
zmi>QT=rF~1sdl@fm6@vDZ__u?j%eeGvN+&!q@3pw<HSV)<8lJ!yXS#al5uIHF<hl&
zKs5x^*wa!4s@{PL6mJ>3up@L&9@ZUJo>b<J98^~5LS2x5Touwb4H0wIU86)eLH!As
z$}iqyi?HXc?0~iYdbGM|;xK7K-{Z_d8P4bj)Y)d$W^=*d%#aN3Soy8p!oQpx?WXTk
zME0)dyi;w)R#{_iXNmjs;Vf}sRiAtA<ZhDEBRiX*-SE#VbNOda&z>AYyY5QuUA(fg
zM-Jn>ifPym2{*tdyGFvV6`E#bv=)to`X7OWEBKTZ&mJKueSAB6MVI|w9^S+LSI}ga
z{ol}C|IbEnr~h3rkzXqeW%~~W+$<Dul`Jr>k)*1$PrAJG@$bU^f&4Ooh*n-6+~e~v
zeZGeTGV%+JyiZgk)rePr$z=c<4PDI6m}oe;UM|I0Tf3HZCU-3KRJVop@1zj>&s|gL
zhsyGs)2ExdZRwGYg~HvobZy5%1*)a4R)lJD)FfvYs_D+1TowBpH?8SMT5U5ChuX$R
zuP<mT2^m!clW#EMWy>?-jI8{7wtw3-{WULZM}K=F19aoRcDCD=CPVRGYe!Kp;wRQM
zMSV+-c7<;4wopsQLRY9lT@Bgo9SdD@KzHEHqL9}uYaryL_p$6W;f;vCf-ja@!b3S{
zuDv@-IR|ywkT4Q;6tx%dN1aa=X(5=LTqOEHiweGncz`KaZH2U`lf;scd&HY9Cn>j-
z|Jevx8SWPw{a;vLS!GRCBD3&*H-HS;h1Zou&>>iZhY?Q~{x{>0fq7a$8fN_xoVdGN
zrUD_9>U|O!oQ1(@I6Wh~=i(7hyM63({n)Ul>&LAJ_jvvA6PZdhC|8`%JF=rVKYKq%
zoWH!dgE;>UK}}>*pSHXDR~Pda)%2fKm$QEC$^6Zg;pL`!&#Dn&y5?y6)(GWllEZVC
z;trBkeR1Kk56W@jdiOdef!?X|$952^f}I97UAY(|zLBRKNgV<f6Qa9ck<Vrbgr<_T
zg)CNHz*W_mI0Hi8)v5E_f{h>cuJL`P90b^22_LUDkIqT0X7r};Ws-GEFt)iw&fkC9
zPC2-cy(f<%DIn?{WW9e^q9;O$^&{X*KN>Q>L^aKB*t+w_x&tGxeOA5f&Z~_&JH#^x
zYB&HA<mfyk#n6dq)LMG2<oeiA^c`~`n&Vw8^^S8x@1YKb4cOOF^#9Jp_BuBl>F8Ts
z`oD$ed1+^l^uI27zmmdSWl&7c?O1pl`@31Psb4@}JQkA`^9iCrOaK#t%-Jy5wV&EB
z_=2BqEM*8m4{LJXgOjee(oWaXrVd4=7Wu5DPlDK#JxA!0oimKY`wiUA!@S9}ALR)i
zSq#<gmIi#h3PRU|{KRlq?B1Twx~n~-`x9;4d_DHr&msejC0F`lpIs0s;340itSBYS
zM!#5FFAlq+4aeHX7;y{Aj}d_R90K(cw(DjlsE%6yE1raA%}v&3#wK94SaH~cL<aH%
z0o_M*!;Cwp+3Xq7i=glfeY#U5;KUU98#5)K7fry8?VKH{1c14bG17QsWINKiU~r}t
zkAH-xtry5ZFO0;SV4aExI{mVGl341`^Hh(uQo3WEf3?iJtnc|^sXABW{Y2E#OrO*(
z=$@tyrGokrU0X<dNn3l7<~W*%l0PrB`)|u_Buyjs`%g=zjA`JFAS@(xR~{4PBID8~
z6l`%q@yZA)Ad6!zuxp<Z;v%|t4VxkKaK4ckubw2->LFBOkK|S3n|OB;;;vQ&hg$D+
zU9+8^sUcL)U_*}z-awW~pPl>O*IN~2vOmHY!{7_f{wak-W}QooY)(fGOg<(X&WUaF
z2MJyLey;O<D&IrN2Zc$y10GBcVSiP5Yhb3b4x=6XEF_10Jh_9o?0Z+*yAdj2i;4rf
zhO_SshYuDEa`@oaOLLvPXrYT06uz*W0$wio@}8`qU2;JqewN!-RsxQ-_Qj)#@mCJ<
z$wG-n)QeZHOU3VfhZ<UZ-nZ}|?(h;6bA%B;jHy{s22HEvoFzC<)~gJOvcilRlCuP#
z9flUN_t8r%q$h|4mHbI;*Q|)4T>WJ{AC$Ba?Z|&tPTl4U9@<|!PXNq;q(4SLB{5{d
zQA6)3bu1Oa+7s35A*(So*<5gf%tePW=Gp=s3kUNn&;Ab`7c1I!rV4YUIp7-8l=SR4
zSY>C7J5|bQVt1IXVw^;kTJY)a<#)}L3tGsZ8Z~*4Ueq1mHr96Q1B@@uCa=d|vFSi(
zN%trH#V%0~8|V=A@q5d?Rm#k&=9s(2*KpI6wmhUux+L%A|IZfq8gnanm{#P)gSGz3
z3=Y`gF0vm{qoLT|4^?Qgy3FF<ut=rLz(Df!1Uuo&o(*4Fn*4gu94c}BP@E+?mmnP~
zaTY6k<rh6`Z8b!{JH+S`*ZuGJEdM06s_eeRaQlj$)qfYZtDeAr70X6X^6&R%b~&|{
zT@Hu%Y+cW4NRi)NkgbJM!v&IZj$WdzD@e&vIjle6=+Tag&61=HKdqldSq}p{hAQe2
zSd;*9sI>6-<2{4%;vVMz?ti3yIW9*?u3r_vV$HSHW)oM)N(jtJsft4gGUrbPKaA}l
zw%ir@fL4Dh07{@kf(gE4#N;YiBF~|7)&IBXSB)1LSM&{-yM&*vM?eS-e=jin6+buL
z$ffWS;BlNWykKu~O)Ludc1R>TC;lAiReKj*6f`b>9wxku&~{eK#4Xa6F=%3|tXIOf
z60%`upGjM|q0&aP{MnEdaF#nlfWxHaFj#ENx!lmSReE|AUU74{Ts+K1rzx?8a2~eT
z@+p}-O9YLT#w{oGl~KE63a^3MMtpw@0>0JhLCSw5)>K41ZzFC<o|DH!J|l!$Kr)(J
z0*Jgv+Gn5_c-F(w&Eejm(eHD8e6q4oaorJQ2oSe#^p42;U`eE&CFn3nH|q1Xj{-_x
zuo!E_HSe^4^X5oE#-jN&YW?;X*~}A3Naoq4<YFaH1=N)zd&R8U3T_-3!u)e(BkMtS
zL!7%{)?3YBu>FC#B5MndAu!nq0~C|B76MfJOvToJBvbCXJWWuMrRa8t<<6$9oK5sD
zS)jw4j3sK7vcGstB*V|D&DHjiTj)&%q#(<=nJR<^TnT@>V8mJ1l71cIP;GOX9|g^q
z#qZ(gUOBu_b;09L8~%kyA!pyo)xrJAk)<NV^iyYg<t?d=Tju)Ils0R`71~h_x0(;b
zGxaC-vdlZmg^n7+NsxJ4KaI?hV8KSD=@G-CTl9WMjk&pgY^LK%rSF~Xu>+DmZyvzW
z3+GFF-sYaQbj9Z)@}tx|!<vK0&(&D}=80&dq9lb6wExVT(7(8Ls^gAw;az+=P)Tez
z2=z%Gl@E#{;(zcKE3b*HCeWhtLLEZ?xuP9=NOAf=i6bTMrr|+~@id96DYx~Oj|f|S
zCffa(iGJlbVC|BJr7z<O@t_u2UQZdv3}{_{2_K!AGalyUS8J&KG*MigCDvIXT&l}m
zaoGv}@dl|rN6-wg^k)gWDo54)Mok@@Vq;^Gr;mkiNXW(F*r`WhZr@}dL_%yQ5dd3d
zmS>%^tUIXFpPH~sLT=VQ@K4%I4Lzw5;>cWs(GG~S=uH*~NU8eJ9Jzbr#U0>2rG1g`
z(K$sP=~(1q0W&*yFJ;_3tI>V4JG8MrrvPA`!k(F@$fS;KEXV<?K9bwU7->UG+rr0N
zg!^wUV^F=pLs<=;H&ygY=M;o1fIsmMN~2xM5^R0WeV2-3Ns97@lXJlP)4W<{Nwrpy
z#omMgBX^ztnqJ8@UphMGvvTAFT{pojvcLMf;9yEo>{>ZEyh~Z#&n%3NL5bSROGewj
z%4xjFev4$Kr?|`)nANO3{RohqYt)!6=+x)N0nZtU_FB!ySp8>P{(SMq8TDu%#ZjCi
z(bn5E>sA1WdEo=xR;>-Cbi4$_NXOS+D7<86=3_4!R&#iW>R%51%UyX6D4p9tZjzcE
zcS9=(bZR%@<fKGzH&RRg21u-%dcLZYKCGa<VzQo^YLO+1FL7(<x3Xdy@p}Zq+B+`h
zYgO`&OQmgsWHfFpNFU2_r1N<XCC@FS8Z#+*g1%P>Qq69~e{riO2Qp3!nJcI#Jk3A)
zg&SY8PnO0Vlj!mCtOHbs`+FnXo|)Nwww^v5=+EO$3-O$ffA^4JN%0wbE6+GyhRkw%
zdaE2!(y>$Bkg1yOy$1G#Y&j<+dSi>d3<i)9;Lc@FN)e>J6;3wWx*@NCft;`YUZwtC
zs{UT2{+_S?o~`~)Q-3F`zXA1kocdd#{+_7*j!=J(Qh!U;-$T^jV)b_)^>={!+eiJ)
zQ-61IqX+jttG}PAzn1#DQT=^K{e4~iU9JAUp#CoBZw`ZsOv$nhsPfQ)94=5z$7fr&
zs-mX)iz$$17pTAU)ZZ)B-(RY~7plMKslWfF{!UeYYt-L~>aSn@Jz4!7rT!kT{tj1v
z4_AK=R)6<Xe+Q|*d#S&@)!(*Vz1p9DkoeBrV=#i4&IQhOO4Zy}#5P$toE%p`nCcrZ
zUHIHc=nmxN-FQCBpF{Z5H<;rJ0?9fN{$h2KgKN%+I-TOaXj7%?fcIRn@Pvx!AUB2Z
zT?M<>rG8Q1i#?)Bif|dFjl7n+5mFORWNyvGUykIjTsGS}wR8C0yBH*Vc&}LN6r(OC
z<x>OGPYpzxmx$8~1HKhRoR;{&Q?j(*#_mA7-HBsFJIVT;BMiBrPUN16mCNX`K<E1F
z9NWKrc2{;%;myVHGOJY~Y^8l0tt}3udOw;E155r!stKhk`=zIJzLU~<YJh97Q!{)L
z2Hf!zS~TDU9hx&Znh87u&MlXRYrh}l53cWamwrbQSX5)>YTw-AZ7iv=*k?RMKy!Aj
zq=`j)dA(p%EZUH?BAZ6EqJxzqCW|pNF2e`zdcWn%?cWIReb(K<f48pr2f}}`G~G4)
z3QHrpg1<Be{yym*!T&mO{eL+AAIaN2_~+<WI>Uc1eWsL3gMV4Zr|d|*zjmZ1XQ9WL
z(x^+1fj-@xzwUzmxD(``eOLiK^hc2Tb?xX+Nb>t>aNtXA12SW%E?87_7#!WGsoX=5
zM*KZAuM8cE|HI;T^YeMY$(_#b{7i>*JmXw^eb*uXQ5s)I+268)iNC;^MRqCDwHpse
zBMvm~2i(l({5`-QGwW_z@#1e$P5bF9Ot$^}wV1yfn7?=J%Hr;O=C7uI-AZTllj?nj
zRN~SD{AqXTUvY-lckT)N>+zQ8X8x*H=IB;BhyQm{Ne2GCdItZ#dj$W{y9xiJI~0~W
zfj|0OA?pHR-5*3g%~`C@L<WP*R(>nJa~vfrd-eSM#`n%&h1q>IWEuY3Gx|GTfZGlJ
z`zU?M%-i<sNBSGj_yzj+VEk4X@q={D8TdQlKXj>!IW+KUY2N8Wcl_sH+dciz{3q2r
zz0(7K<)Gb$U(L+Bb&VPLd$xWrl%{tB|0BF`x5xh}UibsMKmTFT@PA|gFaPQU|K0Ha
zmL1tXWbq#wy`nSz&s@pSk;DI$VCCSCcp6G38OH*s<hJI5{YskaWQvv8>mZfILG}gn
zjQFAKB4^4x#AmKpBFz6|BBY6*mR<z75MfHO{p{CXc_(-M_=^<H5g*<4#y*}!gZ0Cl
zZt3+f`I};?ysk~erncV{sYZ3!d%A7mtwKtk{U=%zdr?kyRYPtWcT-~@nZSp-^*Y5o
z`I~!{C=-!OCic6~g2!IFyY0Ls6HVaS{r!-K@U7}e{)s^5jL(e}E!(Cs@-u|DjJyeb
zIrtP=+Y3vsp-Z83jb^x|RM6vbI7&oD?|nEy^ELmppt;J?K8SnIoh+ZhwFBk~)MoSy
zVjqlEkvjUv?EPaq2G1L&IuKa9aeGtWpBLgT@g5@_-E@$Vh_HoFwkEct(73b7-|r0_
z=OgkoCcj}&f!w&cQOqOROLCM>VcjCl<(|DbMCd4o0$t+e%%hPIZ7Z0Z-Y!c2Hk9^u
z^^BK|j%+=&4h+f(M|2|9yq*-ptwNx{XdsYsIZ|=f7`E)9#m165WVSh#M|YMOiT$N!
z=e&bl!|G{8byU|)cuJ@DH0?}3Pyekuq!!2M>mG9WT-7F%-96-xQQmZWiH$P!Ib`Ar
zr@7?f&ZZ@5)T;!@-sgTT0^a=Id+0y>z3Xpqbc+!`UmEnt&x>kWTnHVwVV^77%YQ47
z|5`kfu{*i74CtzdRNos6Wf&%|B($Z*M{X(qt^%=RszQ)wZ@@_CE7`nL%Y~?OoQZOk
znV&sD_HAf2nlR-4C$G{{5-?Y58Yr<F$(7|-T^YHXdkxQJbsuKsc4rP4iB{6I&3tbv
zUfgwk?O5kHN-)*!>DhX7@5_p94tNbKE0kdc{}86VxFnft{pL%-=iJ>yV!SO*1@u1S
zGm^!4@a4H9VLBdDKp=TwAn`Wm1e14`ilqb|b7^wC#GU*|Lh&T?t1$&WB{%4`a48#=
z)Fl5|TEaunyjlImT8|>43JI~+qq#s{J>-Yys7Z%6koAwxWQH7AW9niw7P%v*{Txf_
zPGLZ?<pJ-Ucl4?*Ajpp_u1Wq+sbU!DQ*PVAmbgj->O89!Pmvl^X9}f8o%8ts_*T4B
z7UW=Ra(?>UEDd<T>-I6@-qFm>^}4$1MHNG;7d=xdd@4xPo49P=a2Rr|rp3rAe{;N4
zt<s9_K~j+DAVCH|7I1&touz8+P7QqWGhmFxODjqCNoNFD{>!6<Qn!WB=&j*^)UFpZ
zw$MQLUM>o(-?MzXxVLXrlQH}8et2Hy<5hgr<juH;l2;Y`ll#VYa*bvnbDv($C45Fr
z@@g*O+gB%EopwW*$e?dads^LJT1_4N)~Co}sYwIH6I6M81!BuO#aUqVf5Mkm8B0!f
z@U^-FzEsJM_)5@1xA>CU_m<i<zJzD_lM^_jJ1gTd{^Irl+K-o&!u9zXX=AT7*S8Hl
z`IEssG`h5-R_Wg{CIR1@yVbL+yglQ7#d};LkWOWK+JPF9HTUdB*WUDY?JBya2Q+o?
zFE=aX_u4HGe-QEq&_Yik6y!TpWZw<%n{7R8^~#M0Ha*C0g#7oB2uH6v!cmF16>))7
zWnMB+By!T@G6G3XPT(Idi+(0}gY`5Dcso%fz#M9~9yp6ZMr2oeDA`jMi0p2x5bZFB
zIeUnjW6*?EXm@DhVSy)S$#IWI!re;XZnKtYe^2pZh?O60BnAT%aC1+nyAR}3kSopH
zg)6~k;BLtqp0&F<6XwJP-AMRd(y(Xpr2H^?AjJGwm2vE|U6fl|!Y-mKI$UJ-S_-?7
ziy4K7$)iU4Ia#p&4yUl6=TDXwBPX4hhIU;GMIe8-^<PvxBYr*Yc;%l?^v6XtAAg_z
zPSnnUPkz#w{@9uQFuYGj6q0dL>sIcN9*2_Sbj2Cc@PUCGGIIq?`*h|*SHjLy!%Mu#
z9sHDF)DBQ8Czf1n%n4!5@a>;%QufSoMMSkwF@EFgDdKF{lqh!^ZRH}iMGxW+c;ru|
zDlZyv(xO{s?Zf^Pp6|i^tKfcvSAi6)FRIz@sH|L--Rh{IYFlSPD?;dY^sEhPb0Su!
zmcc-a(z~fXZ;_$f!OjuJ@7CEpz{N}Ss+G?CS|-HpS;e(H6*SwpbbGp7yS;F8A(#u8
zkFOJin|H0|r=5%yJ@q`cDA=xg3hOu1deq--BzKbt+xLAiSfZcD2l25b@gYUY!0n<R
zwj`<`V}Y{D+|an;(8kt7V+|9{ghiI5%E+~UW@0n1x$>B*_6@4VKYa^dSu2C7g1#+@
zJn9q9kQ%U$dDk(#1lR;81NjPhGgAlgw<S@`UxA?|G0b`544O#LlE`Cu=6hx4Dd0RU
z+>u8Ijk>oG!i44GK>mRQY7~Evg&*hPFBBNQD=_*ie6JR6R&LC(n@d}9BF-Z*l0Kr1
z$H4IA;(XF45DOKwf~%_1zJXe<T75nc+t5lyK@(Ttg4a|bb7PQ&wDHqk!G-Tj?V;f>
z1V+EwS?#Y<`<6`YM&fQYWX~1>c)<Ki2|uxC1^Yya+zL3cX9cl%Y^~&_CN+C6Im|~U
zfAq$^&Wr5D&w#TTG%As`;~jnxTH1!5zj1KhX)OhxGMMV0#-<D+V|>fwWE;m<=VRVv
zv-DHEqw~g@1)p-X2vzQ38L;HzGR6o)vJ8E0{q$6M`Iv5VhKBlUQUeNz;H022miXet
zcdro#>xZd5_N)*MO7#L>GzCdx0rMUEBkJS|TWP=wPQi=;8j}gB1vj<ylYU4v(m=m_
zXGfk4rY7b)z(6BTOB3_u7Wen*jNIb>CcnydAs}9IlT+X0y1qW!6tRKJbAhJfI3uAp
z0rh^Wv1EcTHRb;3&i$`8D$Wbz8aJY%pHX)`B*Q1#ospj&;+b!F?#u0hO;RWoSWP+O
z?xyIDe#YI6g)c<jr;2xT_*KPm5x**<DxNn=p7SZ6pPEA9e)HD1o6ny5<@?p2R~#39
zuF53R$>$;SF6q$lFRVAlsu8K5qOjR$wVa}QOxb+t-aK-J%-8J_x(o6Kc0}GlL0*c|
zg1iL3W!nUE$0sP5RHVg#*gopfbZ?)>KvDg~!kATBak5djo(+<~Q$9^ug;`dC!)KG<
zxP7^blF~vZDb%l`%5U7cydo&Zo5EL(_`l>s^v3?Mp<^Kp_>28Jk_3c`c{w25K)aHB
z1jz!@j{%AEO-_##Sm=zoE;GWW0;vnvd2}vu-FYYdhR~Cd=tEN)Vwnok_#vd=zL5}K
z2^k9K44K=Y&nbd|mIMT<_>D102`m>GpEooo&XPnv&UZcrTB;XQALN}lpCn#I=psk;
zL(cC~`89@DN39vBwzVx>5O0(1xmyYZ-rDK^OjbXm>_<U74qB=kROUyT5^Dm+WNy=b
zUp!vS>Sttwc;P0^ytW2Luj-7wtcs);Zq(fCRdt|OwB<yDsy$$CG$uDnefKEGRVLnU
zRM#0VG^an{sAXTcs4_2n)Oz7PLE__rvyizN*CQq4X<RnPM+r*v+U^n*C8tNr8aNMf
zXM;V9)RyYF^x57bNY5|>`)>>mR5+wH&mK*oiePvjJ$g)0HG1cx66zFaDbGHG*V)#{
zceN{rBMwxu1P*ZgH)`P9uOvC>^^<vL1nS32oA_=(xv$UlC(kH|?eyKak9HHxI(FPJ
z?|U3CjKmWR-%6Hc1w4XXu6=zol?PH+VRCyy#6;}t!?b;Um~P6r^>%V(8!~SF74P^}
zI{T+^8b^Sx*<hZ5Kgn-I+RyltOvj%@E-+WA9F|4_!=+)tx+=4Jm34kh5GigYWJ}hp
zPFAmSa>g#nc$TmfB#r{FfusU3U8LoBPj?sY65==Fzg1nqx589iY%VxyxbDhuTS8pA
z^1m|M3mi%j%nC#6TwzE6s#)FK*Mo>aM`=igp~!=mTPz`wjQ5MSR9^<*?b=<Sx6^a?
z4M2jnSZ;G$vQMPwY-`}#?esH!^~fvA!!%hG9dnV9FhO|6Y&8vjkx|+>LleR?K7<de
zUv86$-v<R&C7+f9X)P)aDvhwBjq_DpYQ%5jqjBqazEy<6g%xMw6AKBq)8#_2RF9(N
zOfZh*N$g(NQf(cnI8^q=m`$>Ckm|j8y+^ZP?{kL6jc57l_OUzvlTtwT$iS-?IpYj~
zj&zR{yso|dbseJbYWCkJ3xK<^|0ZYdG7@mk{##iCQ>_XVUS%Y%C09H2y(mdpJ@tFg
z_pw@RvgrHkmkNFV{hk+n1?id29PAcpo($dLubJWZ;ty=;iIPR&qM8o)TMho!fxp25
z;cnpXeBFwkBsuu2;ff+6Jr>#1At6L{sOIr^J>3ozq|a9f_VlSIk6rY?Q~j0xuTYG_
z+yB*~)wZW0vEf5Q1N#fOyS4w^x&E3Nc4@@=r`p+>zRqE?>#hH=eB=;SIOHKHkH1@$
zsph%ZKa^EU#Eo<P=grde=~@rzmKC54Hiy!`6MT1JUvPWnY_6n}<QE{FGA^2O5#zyx
zyCvGD%<XzT`XS|`Ob>TGOXioYWa}f=I@(Cc%A**eQZ!?mixsnkm_o^6{^)|d3-H%x
zf6H8<Brickr37?{_)-%dswkQFLBRYb@SG1*3H8W&+cFpT|8dk3&^Kr4jk?O{u1k#g
zhmytF1S`p%)QrJ7OR>b{=?l+U^)iDu`E@06R{JW>BJL;6R9q4so->+8d`yShTvL`m
zSx~C`8X2UID#(E%ZpJFVAbexHT9#9}hb|mOBb$(bcZ#+Ionqa<4y~X>NnYoeD<F|s
z8ZYJwO($+2U(KzLN{(B49DTI+lNIDpct)i!W}Q`0V$_Kp6xlnA$0j3oE@_Zh1`*Y-
zwY8-adVa5e(=)#-d#5Y9S{1sOzhak|<KbPe_KbJU5-_^uUE#emd_PQ|@JF3insrFM
z{8cfqUQk*LSylV&Ll6mEKQpstx8@0=$2xbO{8NehyT5U#)brh+zxKUS{||sm%pmUk
z`_edMXGZvN=3V&(q2w`2m<^eitq7Vg2H3fd?}S={1Rq2{V2i7t$o=t6q=~kIkoW+0
zo<~LkP)qd#q~^6$YjtE$^+VPZ>eTV92gLOACEt?OOR;%e?`N_?<=h&fD$ktgfymp2
z_F6MIFL-hvBX+OkG2fHPpsWtpz9Jh6>qF)Tv#rT{<#UMO({Q1`rJ8JH%soi+h$O|9
zbH$riThsR2>PLgvY1m$?lN$C5a9cuTw$uYzWcN?Y-cJ8R@=KmC<tw;rBk^vBE&yq^
z)zTj@%(3>Bd~?z<QgHEtXd#aLXs(}a-7op5=<iYyv_(bsY5b5DN$@<D=h@bqtC1PK
z;{*D`hYHdUkdd-3+1%DP3&-&N8)6%FG0UUU@udP6`~5PW_DQs}Shwqr?`&(_00u{y
z{KG}tDyR6uedR4?&EZFQhUVvzKVY^7>UxiPcu3wdRbL?4`&fAqJgD!<8)2$f7snd&
z1IfN^=a*#7&pLlgL*6$RQ+ESLulm}f4`rTt>z7{O^UlWwt+TBc030o%wZ4RIth9ew
zK<;dX4*Vz`AGsDtxV#ij-pJvL860DLBYceCd=c#(>WrRxRCr|Bw&<9na4=a{Y24Wy
z@V(wPwEksiCOLf_+a3Et4@H>;b(a5J%`XEj4aHl4IXQ<KUk@Ka4Fqk3J~@Flmdf5h
ziwyWMO3kGz(P>T=hMFAA0@E5u&M&0=J*{r}?by-z3@}D~Qnro->!cEM`f63tQ3|F7
zz+}WHOJyw$0l}JrfErF~Ur<{A`X%XzQn^-3!6V2NWLZI<01SbBd-yO1<msw8DfOHx
zCEYg?;vnYV_B__AKk<~jjxEVhX_2{$#lu_?+jM?x!})%5tN*Yq{_U^$6OG$f`;F=q
zhix%;ZGZi+t^HO+uBb9?Iz1xx{;t@^K0dw}SlC)QWqO{GSWSh2<aPRNE5w0}0(}5l
ziQwEZm&|J0pyyu(b?x9c;<KO#!Cm469x$zV3NLf9G<tqv_~=YY-i-K>DtCId5-)=-
zcoMU`?X6gNrGiU{bxLu(A-oUUs~>O=WY9ds{!}qT*4l$tIw^0Hl9_+>K}QC$%c)+^
zFJL&|L*M<#zdQ6j40u-BNnc0$4w|h&;tQx*Q4&Z_<bNnCIe}k2q~$`_AvLZDT&<8%
z$gJ5SK2(sBS@R+Hf3Cs=&WVjsvSv%7K{WDY&4-cwgUR^}$Cb`hm7!Rv@xKy9Cp*is
zPcq+{dr$w{ki5d?-lyxIp#B-Je@@XqC+VLu{d2VbIYR#&s(<#^KZEtpK>gEK|M>LJ
zHxH?XzLp=wU)aCg5#%Vd<`CO%Y5{4L;eOHj^)j51z3@jX$5v3ICPyeW^q-VWADx9?
z4$kcDk5=Rt8i{u|rdc0<qPIg@2XXBhRS=|w&FGOBf1mNKlRAyW<K*KtPrXK-h0|6V
zcd<0AG45)tjK3VN4~+gI{3Ig5fP6f}<{q=HvA{??MNu|Y|AZ$&<)Sg$8uP=yF`fwT
zz3U<~+<%vd)|#INl4Di-=9ob8`n|CXUEjYokh-=o5c{|_FnlLx$%en)X!rUu@RvXg
z5EDZC-t!t|4gPHlH4^&!qfcrq^bN+YDbEXYCMTGzEcb7VW-=_*8H%E({PwS)lz=Ml
zgM(yV@aTnNJPh`V$|PO6EIHO3lML_uEx>+jzs($po^r7i2qvSF&q(}H%0X(G$_xF?
zQB^qyjG)%aa{GFUEf!ur6@FZZSdEY{hhne~R*;|=i{9|Z-k;--?jXWTj1ikx#&Zer
z|7aqVyhrSo6q^z`HjtVKpP1FEHa(I>V5~4`?!%tcVhU77enDoDCM0ust@%Z4qY>RX
zz^Ka?AX5X+S~L*(bq&XiZqvt%lpeGnm2%*HO?WVM6md9qeaQD#WqjK;y#mR7s9hhx
zFzTM&kjCWucKT0>Z;*FNc#HiIiR#^WLh8v+FLC8S<2jx17iV3smDhrdJdo6{b(!%u
zTg%pzt<3NfV@a{lL(p93k8QXyxOPLVv2UnfQ~d4uAH{Z@YSc|){9_+f8u4*F1X~*T
z+eR+3*rRw{3}&T1df2(v+(rHN=L{H_d=yOD|LyQaCHpxWd&5L?F;g4hXRISeOd^mF
zjDhL+G=s;6&CsjsBtY4~1Nm|AVJxA;^L){r`^~#Px-;Ln>2GX_#Xjj3-8salyL>%Z
zT(Ty}z=WLhU!mj`KEL@6F&Fx2e8;|}*Qb&(Si9Vx`e`Xb-anrg5JIC{uKJ_MhCkwC
zYJ3~^<YZiZ;ozTu>S%#_9Pkp^7~OfryepzRPdDmj6tMd49A?xF1@P$3Vk5pEV5Ls`
zSo?RZ-M|K$f8j@CuM<+g29wj@8Y#i8%zc^EG}+2;EbR-_E(^q-QEkF=t|Uvqcy6LE
zkh;EaFZ-tq$3=^yJMT8?>Zl?1$(-oUBaOOi-*fwXd&sw1&b+C9mbEcxOAtP|*GQcG
zZVafQ5A<t^ubIC|hW@6l)WUsjbGW^2kWqIG_0-gUczW`f5B%F=dV=pYKKjhznoI4A
zVdc>WhvbcmR+KQ!cfCvQ<YgRA{Z6oJZnqy)1FU-UJ|Cqwr2bW<RtZv$H{!?91>+_T
z*b`^)(o$rs?G&~zAy0;0W8e6UTOObS83C@CyN8?d;?K(tMr!=7z&#fk%?&<dkRBI1
zsA`WwD|w+>cbt3Mvd8MqhpNo@_qIg@4jIq68GG5EQ>{Z+G77_Wv${ipdqPP~81@R4
zEiTRE0hY03rVrv6-DIS;zXL-UzFJDeTJkdmev_?N^=CEN0KY@US7h^58Bb*4nwd=x
z8TD>@zI|#o9s0|r|2Uf-`zGJG<$T><YN|#d8@z$!&5Ep2<G*8LDE^w7bN3kgIs|Us
ztWq+F-GaqM(-C7(U53j}&L*IT707(#{uM8c1^YcOG)8X~hxs*i#WuoW7V>~70}Zr6
zjO4PfAjRc#PCJTtcej4~xD1>!ewVzRZmUYwN~f9J?(D^wWB1AAQ{z#oGwy;&W1k!#
zd28Qx2M<iWE7(yC<zO-fQl}(i4#OY9zQoS4Z5y-ee{|<oBT>RkHI~d{qRz|@q*8jn
z4UI9;Kt<poWd1>D$T}5UTqyal`kqut@VMKF21txb$r><Q;C9E7U{6yvE9_0N%~SLQ
zO}^D}f*P3#Y9zvf-c;|s9>`46|B@0+QcZWZk17{u2O!X|m0<}O)vfk6)mT*Mo5Ad5
zZ<Rw)TF-NMA1+=F`vbXUE6cXI^Q)8b5A<u6@ekBC$94@eZe9B(IIP`PlRW0j3}Z16
ze@<|up^?l=Vna+N6uuUt{zL%>Y`aE$taOVWqVPO^fBS4~l&!=cy%YLe?(o2QL$c@y
z_1geCLI&<E4&VoL0yw@24&afY0Da$mF3_K@(?HkwJ_6nLU5vDl<m)6Wl7uo8P3mdL
zCbF-B_(AWmTo`pN{3U)({4x2>Hxe88g&zz@p0Ptz6zumRII#Wl=u?j;%H!IPB=u+>
zL#9Qn5xC{{t(;P@izUf;#FozkB<E-;<Trl*JbtL3+B<M^a+B`TNt;Nb5~<?1f$a#y
z&)aJy*KpO^3VB@nsZ{r@di+iv|1FPYD#Ksp(P`vPUE`geq(A7Sg_3lbDsZ*u>;3v`
zttaU|oiv3cLE>$1q?wL~8+EtvAlOuxyi+l>=#KtI-PNQsP0OP)O;;k9-5T(<vJ?ik
z3swXry{Rg&{VnHhyO=RKCoULU7chdWCCf&Y2yy4II%CO6n!jzytf6o&#Jc$(1%0pC
z4^s$MtcL23JXaJ(jtV8!>+SMMKi2VRzw&yz&0ZycTI5fY{CQUX{F^_S^)DcDzWl3H
zlG04a6N>0m+8JsXw84_tmv|r>m^eI6EaF-AnB}>|i4!8vBX}-?*~)Vz&n3?D6rM*o
z&*$@8={(QjS$4U}Ul#=eUe9-4m5e?-F~@m*Kz*%_N=}jP@BzROb46VP&jg3Kp@D=4
zBw;lPfy0`3eN<jI$g6qRQh+51FQn*#=kf?a9DBBynh|*<R8%mj>Iupozx=BV9!7wx
z#G@3#O=tx_nBSV~lx`4gnOH7)(3KKmUXWRIJK}}Rq7qftvkfGdZG#hdn1<)E6aL`x
zuhd<F;ec;f*-ERLQ&|CXSs<mb9yIS4jKE>=RR3%N$EjiU(y2r9V8}<vx86pbs2k&r
zC2{qROnOtuw<RN=O-f$>k%B8T@*bc(k6pl*yi3{yzJU3r^=GwXI%?p(iu)f~cy)<=
z(W~jU#gmd%A7N}5_0?~Q@9A5I_;zF=Qa_)@H^+Z0EZ8^6EWpEkIbJ~D?t`6)k-%F)
z(Cv>tE7nuS<rb(eU_51=8Z_15$f`h+V`9;pL~+TQHz_%d_G+7=*Y{qEfcpoM)Iuzf
z#-5eY%M0J)Hl3G_W$@7R@yYGKY<W5jAj#2*^l!!Pqx<h$m;E-7Z}zqPQKCj{Crebt
zTKGp2hN7Vq`pgR-D_kZu@acPm#rr_ozU0CIystu9&>YfYH<Qs_CsPA&b8{v(uaWxp
zp@Q^s=X)@jSPCvg=f3qt`HXh)``iZmDx5`zu&zu{Rf$dEkE*HzgT4MB6V1L3DM7)_
zXlyyvz6=1OryN3VH0e5_J0o$0lrR(PynQKXu6_<G(21rBerw-}ykG~&oWt)F*TL;l
z89he?S{4cw%Ri-|#duJbBO>f_=<RL9m%i5x^s0sdXZ9u^T_J@Uty2TN>h4kHo99k6
zmh=jwruvBW_I?A3cKER9j%avVbVoz@q>AH>x`tOoEi3qyR%G<}Y&bRG+Y&URsycIR
zX!L)s`duJ(;TC8QAMM4l4X0KNnzzYV(!kK<2?p}g>zIe6D*?b*asbhDkWb%>Z9)gy
zg!&uo_Z8~zCW<{0-2RTIB;oo#>{VlyHl*(knu{B#s_gBumDnMKwd8vyrRULDg1txT
z&#n)Fe#_MQ5b&+FYoIfj)1zCcA&?^GhFOCtZ5CIESF`*OD&-ggkzq$$Ek;(b`Q$ai
zOo%#CZH1C#OV%_veYf+4WS5L56v(ptEK2OO(BKm)xtAyTRg#k`wYMj=p41vyQoljr
z44La{lK&rf?*boHbuIqSBpH}M@C=eze4tT7g{qaPsiY9ezzm#$iK2*)`a)6AYwL>{
z!3QvLGRV27W7At`ZL3~tYm2oiZ3TlBnea%0MF`j`z93+Qa|jiDB>|QEziXeFWD?N!
zw!i=9e}Dh*Va|R()>?b*wfA0o?Vk&NKlbxRxo*6s4OC97<PNO#Nnm9$u43gHfop_v
zRpP2tuF1G2E7vq!)0FE@Tz85q7NcZsp!z7kBF}+pzeo9(IPvmP{$-9|J|S~qijQun
z4-k-6s`VQiM&hQiOepYuT1+#2IB2mnSX{;88X>L`;;Ix^rMM=GYqGeeiEEm;?iAOZ
zxKvB=I4#C64HmzAC4NcTFJJLXOC?^uy3^v2)8eq9Hk(4mT6+>BR><f}`P-M$PsmW4
zP)OTv3n$AWx-92c&>#6#%eZyskg(f+nK3VuVfXr_YkX|$l5b@GV|--f=k)mLjt}Lp
zlXzXE`-g6&L`L2Sfl+4s9I&TIJ#<>`gMMlM^!R53XAdCrV9A^dN8KiQdTup+Rer|T
z-&wgxhk9n}0iPq<|4;Uh#cS{N!F$g7Kz001YVPiM`#TepdGFH=*kd03muCH={{Or9
z?bSd%e_MRFtmn4r?Qdr=jxP7R(kjLaqe#fXevu`WYMbJ(Ujg5*D*q_u-YDfBfr@{Z
zzVazG1Li!~bq_G_V{zkD89?ytCh9Ebzh1xEyqFEs?YTyDXu!UX2t}>`EPZ?aCHfv9
zJv?Gi^yuH0k1ylDn;q2K4J>~gK*b2j2Gzd~AN!N^AWus;S&hnaeg%EW_}3m9M$<Ap
zz-6Bx4V8h@y}$6K{Y#G@NIOIA_I4IpDtniG_OGbFn?KsWPUkzaD_@b{Y5y%`&9uL-
z{hdq${)zV6pD`N?R-B!-ETCmM|8@L0{CNY0E;8dM2ifL;{Q@Dn(V~~HJDRHXx@aqx
zM-<&~c|?RR<d#5*#!1Nm`!Dpa*HrY?@}f!hUh?8k?mD`>xKQfqAura?x;P^*HpF+Q
zIE<-`6!RO4+{kY#5)hH`M~&Gcqml<h+H<iMDa?&7Nw(bhqi(sei#{CraeI~&=#mrN
ze@=e<O_lcC5?KypWp^t9GI=xsva8Y_`2AA)7WpywkL1UFf9oMXmf!iM^5Y?>P2|Te
z@F+Pl10r=OCvs#~H1cFu^h@MMp3I6xuI!3^oLD7S=6e4xlq+Ss_y0P%^31ec*~KZd
zh$_qZ75wYpl|Q=qXBYqd@&9r8(ocz*QI_FjZsY*P%ET_4Gdq68{Qu?S>;HiK`Q-m+
z^5-yWJ_0ZbD#xUS&wnJ}{k!=8Qu#1L4ls*HggbT<iXH71K5K{(&iSSIk@8>a7QVXW
z+ty!q&zk@4{J0YVt2Y?)6c`)3giEKTS%WIe`LEaize2uzKP_*4#ro+>@uPRkmyiFy
zAzv1zIoy##Sr7PsdHa-n>FOb0e)K<(&(h-~TfSV8$=)@Ue+B*8dEG4fU*%8QLzPt7
zEnl9SX~6#$`SKS>$d^C(*X7HN^scvjx$+pegxq(0-!F$Ddh%u2Ey(C*#`lf<SbsXy
zs7@M$pWs{~U;aYoPt?YvC=PRbuIpd{o#NyRY7<FzCzB84paWYrR@l@Uu10f=oTt*(
zQAAa8BDaC3qPbh6WZ}^Cv3a54^`Ycd`RwG?DaGMeo)k^Es=BZ_bs3^^uG=5GH~(gy
z7U3KMr#F`aJ``KH<tf_~F=<&3`W@luYoTPs{^TyTKl!@aKNM>?Eu{X+^LLJnwG~Gx
z;;&M~t~86rK07l1YrDevd)Xr3jB~G8l@Zn~jgm%kZgMH@JzD!lI_*2u)jmC+_H}ap
zMf)t(KG}OMk&E33n1f=6?&GmQP6uj$doDfKlXIKIcnbTSOIp8`t|E5mQmtk`sbYsF
zYc+?JV~UoTEI^|$Id^bVnB=S38Yzw)3P(3;E6~)U9Q2v|3m2&hwG~r3YqmyP)U&@n
z$!wy~Gqo;k?8NwcnEUL>h&wM7|Dq$>FBCsaH?IJ@)_6_}z*ikxvo$3LsB1L3WODmA
z-qM$|qnh22i?%?F9j*3BY_685r0}r&4bFc{J|c)ik$M_^bfosc?-A$E>GLI3w*XB~
zo^%2ACw@<PP*hJ=>^D(smA=rC96IunLR&{v6K4y#<;072TC;etLg}uK%sQ13eYSi1
z-J&IC!HRU#2jTVyeBO|;sHB6;_SJ+dIe}H^m+YS$g}9m(eF~lg6yRx!8=Dk@@3|}l
z1V?sXS#7XuDa46Bo4r|8Bz|z{;7{P5*41&+nN>?1t$PmorY>cG@fv8b&dT2=ZJ)|!
zc#uIxpgDD^bf8)Ci!O!KBU<-$5L?ePsY(WQN@zowbWmx4Rd$*#EC>ZC`%A_lHtN}+
zhn5crDOtuF4zV!QMBSewuq9ISjr36LJN8cg9g<5rp)b&xNq!#5Ir2|fb*-JN2TK9Z
z(sb^FsMC?yNL@>elu`O(V@ixKXdb<MGVd>x5SBjL(al<^SWhmi<s;C4g0C_>CA^9q
zeaL4^=*%BTG-{rHEK-Tn&7W8UTPDFteHd>Og^cq{C}$xdAtPK;N$?1AsF+BJm#9b5
zQ94m0yQ6$W#nMreiK^_5!bH=ZcS>nj60UcL7r!hQmn32u5tC>5VH=Amg38Eoi$vT)
z#FgDSh7mqT!nrCi;LICY(b5^Z`(tvco=D@!GEMg=Ha@&L-S82@r(;BxrX>3u$+QHo
zf|0N)AO9s#u@`$Y%ZJqk1lgzKa&}=>d&NHpe+^TCSjV%!^+MM9d~BpwOZ*Yc#pbv<
zY<mh9^qgZ4L9n$}tHt=#I{R0M;MVW)@!pE;kVA#`jfBmpom!e&$@}bJiu(m2qs>26
zPcD~pM`d18ox4@<6Z>LJYfuk_<i)z7>aZYL{wfJb@wHkIZG^UezJe3KWZCbx(w1b!
zq5BJYc;KdaZmtcW$Xsy{zbkS_tfCzUjsG60!<bW{&WxU4--dWv)z&#7bXr994Z#Ot
z+v7&c<$pzAX`2An)E$fo<7w5d>UGlIG}p=4O=|E|OLYyN`<+kJ`P|`rZgoD>ozJz-
z=L+X@iSwD{e1gtrjPogXKIb`~vz^Zw&gWG5*hP$&?4y>97Dc-wG5BACjl0rd9!#@Q
zN03A5*5lIi67qv|O8(?b9ON_;4L7jvMmRyFND(9E#nfr5UcYw?`hR-)I8;7`%&}LZ
z-bn>-OVmS~O#5PQ<xH+_RB_G4cvIa$>TH&0D{I;*E8YQ4evJb|ep=%7=LMBrb$;-!
z;w5#lmpr11L6&Rys6*u6Ny<miE^qX=J=944%7`c@sncnf93l^J-<LkQPQ)awC?Pun
zQG67$*U1#5?o<iHLh;opig0NQ`{FB2eXMII^T-Gzpq<`N997t&)%+dTj9SM=RP{Q6
zUG_wikw+67qVGuORc0^szAX15{4X=Nx@;*d4QJg{$^bkX&3t`E>ob}BS@;SWhcN-P
z>Qu>p*_1yC;@FxLy@N2%z=zF?2d8yO!VV5G+ad}Pt%GDf$ikzN8M<NmTU0r)w76bV
zcCJF^aWaHNZx{T8jSpYug$I{H5-&$ed7X+tBvG@p!0B7$3^Ml4kjCnMk}0e%k@Vda
zpZZR3WL`n(3YqW!;U6LM{5ct9u9UQ0$PC3V1ewQEkV2;D`*b5yj*PRB`4QdGM-^_<
zYQ*?}n)fsK?4{1pwX2lw;|X--Xh4asR+BD|k%`iTuC#uSZ+)&?l#u%!N)6B}&7R)I
zvm@;pdhHi`>4I$(tjM+K(%I6(a~Tcq{$6^Reg8`hwyyhNs=PIlXnNa`WetJ!`%sqD
z6dPSic|Vb)hEL_!jl%Y|S)z`#51j=W^IhfRPvO_=JI2IY+(w@x;*A%2r(e=5e_ghJ
zsvh4D8<jg~#d<Q@GSg}(qj;{(Xu;rt4QsRcRk}SgS7*0J=D99Ea|kzh)HD)8mXfIi
z+k2l((UYrOf`#OAQ3qqJ9Du529!ZBwqvWp=&D2LEg`>4(J%Z>c^eyqRx&MXy`z$U!
zskF+(I8t&^$@40tU_Bq^^7?QxA;c9LzF}gr;C%_yhi`V|y@j>-7WRuB<i;O2;|}IT
z^SJ*~FH)awJpV?FiBdEsus#+=EjhRpedOR0?YM;SSx(afB|b!i8b?|&gWHtn4^ja-
z5g{XhbW*)eIu<rs932ov$LYY*loQsqJ{Ne_X5Bmzzr$nvmxBu)NG^LbQt0w?59kZv
z)WT#9v$>SVe)d^#9OO=~r8Cd+cw<5$QHm3*I^q>2X}q#~EM6C1ykY`MygtV(2oZ0w
z<MpMzBOGsW+FR*(N2I-z9dBjYJI(P<PJ8ckywlR&nB%=O?X7jZv9x!I<E>45mpR@g
zX>ZE$F2id-28?Ia3LP{#(5{t<>nsfCas@+mI&9d=0z=mn*2l5`u9)4ABvW#EilTsH
zGX+~C97%X-=~m`1(Jbs6IbX3m-?I!z6rdKZmvn83pOC3C0z2?5#f3&77pnR&aII&A
z5gZGfzeN?>qx4<!gkOh8ON1zy%Qf4==FKf(^Lr@HL=S|y;3-CITy-Mvx5}l68XWWx
zTnHXfaT5TB8iOJeDmG11u<j#}!a`FoJj+Di3)eF5CzT3b$OsPpzZmn@Hg;@~M<V^y
zWMB(5$h0N!a7KjndXvCrxx#|EN&tu5yV8{PIFQW93K5=|QCg5II{|2Gf5M-&^|Qs}
z7zLR9cL_qt80$}wBJLXooAhLO01j@b9tD3os_VM3@v6?9z4&!z{31Tf5SFp~SJ93|
zXN~sKY&Cp4;1O#08mLApv=b9HX0e1>>}crU#*#&eTC(b9T+=N{cYt()>$KO!SFoG*
z`W&wdqEqAA@yfg_-Vu(sIPI-;yd%=y$&R-&?G-puvWyJLd#B?SK~KCf$9remTdTam
zm_#jc++4Z7Ln&&Cx~;fVPWUowMH-{W9SyELYL)J`11+ng0l=6EW!DPqQXw3^6g{;D
zYZctO3&A%s%?sr8>VtySd#d!+)iLK!Pgc9g=a}?p-xJ#vixvsCKhUdfMFHt7C#b+o
zjBNX)3!A-L0_}-H5EmH%p$f?3A5unbZ+_mz$Z4nlvT*XrW?<s*^Dcsz!+a;;5>nx^
zEu%e6692y<f>3;}&!r{yf+?$w9?Oa&@#s=n{OwMU6YKE0FU9;?COuH1mI0V&?}_>8
zUy1oMGx*KM{D`bUoaIzWGwJ_*dazz%XU`r8DW=yM+4P|diYnePSf=*)e4i_NqP3TG
z-Ioj#CV$;nRVO45pUD8N{DAmZ31O`qE!>UeGD$vuk~NK!)?q3Ro6(Ksa`%UOjxyO=
zC(%BIiNU{-xy^}Vp`q$f%!`!jve1odkAfQ+lfzYmRU$#q2C=pLzi?<e`zZo{ZkWqU
z(2+qrW$VZe-Se>$YP0E~OFmOKAJQ<-S_dMSdDDU!pjGS$+*rTDjJ^FZ*yvhcrsEV$
z{he=!U?cJV_+bwQ@g2Mg4l`(da1(B}7?rdlOt5d{+e%uAJeiSJ1kG&;xzp%KE3)Qs
z*4m5zBeOgkFR7KxGDj7jrUlgu>zjMvt*kx$MuYa?Rn*~sS>zLhSLsv05UplEHX=l$
zJ{x`)!45C=*1;~(!+zy%_6D~cpHiTk8lJvEosG!;Mvz;k$_n?m<Td&1lkXeGo_mvS
zL{owCwGWiF-pzinv3*kVq>Ul&4Vy%n=XFj^B~tfZsRD9!V-Q)t#U@){fBC!f##T+=
z#GTYYa+Vw0in&$E(Rso059a=<DtTER3g;I{5dov>dD$inna5I8czV_I6!%l)uR6J-
zEc>#<vO1;qOU=GZ-Ppx2SQBh;AJDbmYf-t3AES5JV@g&G1DMWo$%n}SOm_U_YPU?~
z9lDuA&Xclo_KSY7fgEkO7P{=}TiveOr8(RuQ6=X{$^D|6qzHD$ULy%9zt3l;b<gQt
z1-3rZL;pQwe8daxSPiO-bxw}3%!;>YqYJc$qQ3;K$)X__%N3&(SBxIyiFCPQWO6fh
zyt?;YXdLABId{K9TJR&?{gE7!6o-s~3Qu}+Y~LQY%_TShI%Oq4P>}7&r`iirUQX+?
zX?UpO^IHEq6R%H~_`KGKGjy)4RvFSa8i3n@9{0bwoTM&*SM|C89z=!rJ*8gc&{=mr
z8kIF3zcRl%!p6Qtr(azmm+hTUk1OPR3F&#Bq4<IEMq<OfZ|l=B3Zd8U%yn9jRcV$}
zHw(F`e<^&p5SzukqFY`cZOvNGAqzH#*n>A-St<0B9tw=<6kJjmemFVJH>HZjclEwo
z*xL=8x>rsUS1lx7?XfOjiYv&z)u^iSeUTEzqNEELuka2#i{GoUQ<~c~Dm#bXW?&J;
zNs~p_%mFD;$T0S>;a7zPqhz89KRZ)PC_S7U3neFN#c4b_hYzf)PWcisK0)J?(zmOm
zx>b*exAgD4GU7lbXdI|h9WzxFGlrBB9B%o`Qvq#4D!{G1WFZF=tE3_%aOq9JNIb7T
z^_|TOSlxI`8W%8CXyj^EIZ}BknRj;Y)MNoY%c=IDzvESl_wD*?A5>~9+Tu0K1-fp%
z{4;<24Tks{Z=gJN_h0<R#(+^Dbg$=X%d1jju>4c)!EZw!JVjJxd>Ta7GF6AePH(iD
z<CKt|5M<Cb)vB#M#v_Y`cq%V<^5=&BxnAB7-7kPz*WK!%vG+v>J}P$_4*ub9r9t5@
z-wK$v8gGS?g>M9mEdgV(fTpuKU@C{PJ%ITLCT;@#?ziB25r6i6jE+H>c%xT;jVBjV
z=AwjjJb*>`fKj8|-20HXLGm!1o%feO`Rmb5Jn<4RUJI7*)gHWF4UGmbb53RCBx;d<
zDmpDqv9SiVK!J8Uvr3g=L!;O#o<j;-PU{Fsd#j8u>>CJ4^9$OO%7c}Bu0PZlZr8`*
zBf>Wi+@$#COl#)lu(xEz68tl*``D_*^BSIO?Q3s>M`rhrd>1pg9Q#OSxtM;MDQ8-W
zM}NS%MJV3nJ`mP^-#6M4pI?v@{btylz{YEbgt?=|@iuqk1jdUDy=EZ}V|D>{G`jX*
zjOZtr4C}B0fC5`(9VUKNP4uTmv}3iH&YNkyfb};s%I^3Yy-^v{lTs^HsjA333n*Nc
z^OcUhJ~hYbW*^=7xU|izEJ&op@{%RXEGfgx<#tA;kCCno9P1Nzu`yBH#p327%h(a(
z;2z7^N^x+FW$a{eaEoQ^G;wf=W$c|eVnSNlzz5|cUfJ5hD<APLalG;o?=r_LAMvIf
zuYAPY?0DrP-WJCzAMqY=yz<c-D}D5Yu1p?`+bgp^)Wx$bgPhH+Z2Yn78||M3@9woR
zo9E%=9X_=%{uo){N@M}f#rK1bh0KYy)?G;WRp!^j#?2g&{!OddfG7gPv#uhXbe25N
z<i}iH0SXj}_lQI~s)aFylaXAA(V4IO@drx0npX2GTFK^1id!Ro#AeK(To6hIeRx}k
ze-(fC%OMMfyZjiIN30oq_XkyC{4FTO84QB`RzI4-#jLz4_r5CgyCuG=@=s@ZtBeRP
z<I^fJo=2ml6P9p5zZsyx99&EXf~s--w3<s)&p4lByMkS!RFHDK!NlLS8abB;B{4`<
zy0x{0b~>HP;(v0tD_%c1z;Lcvf{X^P+^ij&W@xkC^v=-!Qm^j2>g8)^{nc;0PO@2-
zOiJe66B>2RI$z{J0){<&OVW?zP?!LVY?3w`ulSQyogz-@$$}6Om+Hw#laG`#(MVX>
z&HC(tCSTZ%&HI-g6a!q*S}D{YUyo!)!675EZZM$>#ZeqI=nZn#l`>m(%~bYQ81Rf*
zAZW|2uT0kzbUz2W48|1lTb<g`GyU*@s->8u6C2uLGvM`wjo>nCJ7th?DM#<ixD?L0
ztk1mH>o*P>hx}XY!0=a$$=-m`6zTP7RTlh=H8OR?8+>B!8{h@{`Lu!K50p1X-}eKU
zfD!UKRbJ-xh05R39+acmpn0*ks{ErWZS3nz%vz1Q%A1^^sOglR@<fJyg5^84n)g6Z
zxZHL3-XJRL?qK;wEq)BBXD+9a2&s<*hGWr^2M*@Izk|ODB)<b9cIWB!d-A0Fq4u|t
zW|v7zL-p_Fh27i3ZjAUG4kO|eomV{wQ^>>uj({2b703IJ&;z;iMCz8ji;c@h`z|)V
zJ94n!nBb)=cVFfVwq=$sTi#?fFY#jBP)5^E2$7*-9}jJ(=Xts;eN7ZXw^ha!5ceI!
z{IFIT{aNtTjm=gEnu*RJ<7|VHTA%Ocw?X3rdn2W?30fyc@Y}5uq;@07k-@r<(Z@cG
z41#w|D6;()O<BJs9&x?N-b*$$GW_u``e})GdL;}st{1Lk-Iq=eO(+7AS|F7_(kO>a
z>it*~3nlOJ`He$Hhkwi7!0=`){`(ETH!@Xtcvg4*p%dFRG6Eaes>@TC4g)D6APak@
zsbbw2-%<WX^z9&I7&86PM_bUG=?y0*%R2$SVB&Al5q28@{PJ4;Vju_p6D<EktJy}<
zaQQHypW7jy-CA5icp(H`l%;{;q7Jewki4?fSfj#%b!lRPa56-bp{Jh2(>71(h%t_)
zF7pd*0;#$Xq!+4xUnu87C?{OeML7e)VEI_susxmuh!&Gv8@1dLP)2|%!H-HoOfXj3
zX1`6KFkZDlR6q93MEO?<@hE@mfBBQ+F@&_f)exe!$4j&{#J&fdW?@0iAL;wQjrmL)
zzRn_x)@v&!c}2U8a~%}gUZ>pH{rUGr;G1wBpV6#lCbiy6xnpxWU31zTx|aDE4xoZQ
z=1j<0dUw-nS7auACUF~DMg2Is?T4mVw4_x}uXj)ci+Ey(#zq&2)=@?sj5Lw2qe&KR
z(N>JqvD}FYkHyJ5nn>|I^Q|-3{!*H0mqy=G3P{R2pwWEo+FI6SIbCgdu=PJ*lszk@
z<WT}(93_tvaFHg*&d1S<l)C3zR5@hv{W;>IPb`!TwtU!0#_UN6<~Gp|Kz~AJ)z8>H
z3MC&X@zFjtjMen|A(#q*57=-pl|8@v&1=29|93(tIn`I1YVEJM=^9`8+DPAU`MGx=
zFxDE|6a#g0?lA|!48<dq6&6#AA9>Av{MPucocJ1#zx)cX7QY7unRuIdoR^nGKM@N-
z$w?f`y)NW?k$KZM2Kz@<d1nn~RhB1HzxN{Zf#HKy-Ulxi=4$LQqD@kfbsjZvLs{lq
zuOH^+HzOqlfn=T+HHMlCN$ZbyV4CB1;xgxY<DDEUiY`ED8{1VkWTvAm$~(H#Xy>wc
z$}OWbIeNZKkA67=lncXwPPz6Q*yszH4|KB7eqdv<f7EO*@Apxk>K1GNCK-?ynSpQm
zxB<R4NBInV<)3NsS7?q7qvv!M?Ybep*1|NAWi`d9XVU5;@KBI%@QtO);XXBg8FR4%
zJE4FcGMfrB<Z~^2cEVs0jz>j56iiIw^g-}GjxQp<-wZ18MBb$Jn^6U=4kd(Ci44N*
z7U;q6)AC38>srkgk{w<A2$eU?dcFK3E&eP?j5lDF^Q+1u>wVZ?kfP0N))%v6DL<ga
zcX&v!CjJ4?EW8xK=dZ5T(~j(PcK;jcH?{iN{w$m?qL9G+uRa|)0FeK+xcor$ZNCxq
zN*}LRMi>xHdYQkaOGLAdu_|PHwj)~}G3O2gOkvEpTP>LFwV#GF!AGDTO?zks!=j6N
zTA0d38aOp8dsa)2?#!YendOD975$8be#R(dp6XLn^SZsBnrnH}8dJB_YSbt1?eq`d
zfSd!tPR|~bN3ZGVp?+q-WI_4G%w9sgACIHnMn$)qeHWX7#^Nd?u(=ot6#0>-q~`mA
z!;x0DD7oh<u=h`olrO8lDP9ksY#c02P}Q$v0-az{`MTn;F`=WpDf(8>V66MurVY3;
z%R0d;nz9K|Dhins(AN~P5P3+}4#B30M&L}J6%iZo<<TbXK`~e(gnlC-_6Z7m;9KB0
z8#o$`$-6p-Z{D&WAf9)WzW9v;$$|?+fD+uO_Kj3%DfdC8vs%DI6;ru?_`!g&K~@H%
zpn|Nf8k^`IS`f&WyYoI4tbSdfTX}$Py%$6Y(Cc^4r)%(xv~)Ys3>5q9Gt;abjwW>Z
zB;3rNhQ#AHHdH0A@EMK%;q{<?JPb{%S<Mj7s`G#16h@W9E@GoRvZRC<89(cMRpxhC
z|6jANH~=eQb7DR#fTlqChTftyM4=du;IHsf1)n$4_`B>4@OMQA8)D#3abfT`yvZIV
ztR>xz2B#ar<Vo&G>Cx6VPW#$r6C=I`AnwT%26u)pP`*9-o<JgCZ1R^g>O`aaDEKq7
zvnu$H5%`ZiQ2t@`Jw;8lEI9mPuPxi*YT_$>+xiw~_iBMs3sK?!y7<>1#Tbpu+BAaG
zf)f=hRE++7HDJo1MAi}I?a{rV<ZPamjGQd?aqsA(W(a4Eu~RjFILpaY^lw2U2!m!l
zcm#(IlqeQ`I*I};c$ac^(9Os(*LegJUm&Loegt0(X%_$pQLPLb4dG<LJ*90SwlI4x
zO0o!~NBfzm&X<X*tXL%4aQUWai_;UWW-|16RQzQ15AtF913j<8e&=EF^nq84rK4}#
z$C4W!V&94o&akm>qp6A}6yy&px=yJlJQeq|_o<LIb{^lJO_%*ynC!#9qLWkEp;a5I
z>L@0hJpUCrUBwWUdgv1ytgUC%-g8~-(1_?IA#=75^$<Nd#f#2;e4W?&qXoL->siNr
z5*ZsZPb$%;kIU1O_vh)u8?7IsgQp%th@1j_@4}L0adbIlcw1lWlJh1<OK4hYTkCH`
z<U-2yb}w$b_siGX@0+OScI`K1<S}*DhZHt4U|uK>q1P;f2-pEx#-0)C0-~0gwiu5Y
z8=On&uge|?ZXLN*=;8oVHYYXdR~v4m02z%fck*aK%|00p3m)fp^au`?_#y(ZIOKr^
zbk>!`_g@4C7GkKLrI-K)nUo#ZcI&4c0<o=5gt5jS-__SIc1&x;zPGkuJ->Az6WdFN
zxO5=pvu0qk@V!uCP2^@h9$e~Hh5v=-QW#}6$pUQZlK39Y8biq>r^cyGAu|Z~uJVT6
zTSXT$@h39KW4OvOBc$EFhMkMsUzwqOw;qxTX3ov1DQI*|OkR_l7cfTwxd>D+PR64Z
zPEP0Y%et!acTmw|FlYA*HTuKYwOL}l#3Pn|R2Q&bvm}T;Zexv>_!|A`S!ncWptTg7
zW?xoF?{5Z|g-7|c_$)Go4WE4*U+5rIzGfEp@}_eBwMC0xPGHEG>Q(l2R6c+P{^UH*
z!Qbe~T4J+wIgMojTH<!q>fkc%1$G42v~Qi!z6Q0In`YEoxq>KmcmoJYHIvfGVtR3&
zeIXv|Ph(f)^E!Ko3X4%ZH+&A|MQ=*qQnV)%;nW}G){1RkY$(-n=0gC4wp(=BjG=uy
zq%QV)@|$NE<BRQgnKHZSS4ff0b*lT=U39sLa_t-nv%gq~QLiliGF3f?fLzJqL)k^v
z2KK?aV6kpqKbW(!X-jh=0mdu`eX=ycrvK2M<2`Kbh16Lnd98Yw0qIB-wY!E}<{VN2
zbiwC#H43k_f8?+ZHe1tCgtHvxJrH}2imDOt$bRi%cAwW*sjX>eUDU*KOpF{sR0u`U
z7TsvH&Zp17r$rwXwW7zijVpFX&qs`e7dv`fl<^D7u)a@TiH+<MX}!`FtGIz+RABc$
z)Y{qlYOUCVpK1O2DfYZGxqF-^bn62srq&I%7bX-79T<(HJ0t(026^PRdu|v#B6?NG
zyq?Ks-dMOHoCBq!aI)l;)<F)Q{n`uji+La1JEMMou8cW0tf5;hQg0XT$6C~DEqxEs
zzx@5^Yh6%vPIyO8jvj*{=wC`dsKnd)Q~MkA;%M#d5I(Hdmw!<(lv<@mPANMhw;5c{
z5*`}4^`7g69bXzYZ}HKP9eR=n3z9rDWPD)ku!?C1zHOl-(w@9%@qsl!f_S|Qj<HQ`
z6m%ai)7ZfduGx5(Yg*BPd^wwHeUdLVcv~N}V+)SnUK*<uD(B^;RZ|T*zi+TUeZ0f}
zneWqV_2&>tW)5)PiPjc8M40sBzK|J36q6pPHe1*2qPbb~$VHiQBD1^8s3!M4GZh>p
zzx3Fdm#kAH`#;fJ#;f!<KtI`CxgXL5*$zERcxl%7V}5$v!C%yCUqZ_C{6)=PyIKbF
z^aR89I(`(Na^@#Rd+PRw+MXBKjMUN;C>N2&GuJRhSn0_|41{V6&gNGpn;~jaxY!pk
zPv>1dHo3IKM!Kvvx@yD8DKP0ZRahsk*+6L6ctcL-tr8>{riMBNb@qXr_a6Ml+H@6X
zsVZ(ySMfUED)VBd^i6=TNx&B{_6HVT`<z^Rlx;BUwH7H5X3f<{ntJVX0pl$uGc}h9
z<JA`2Kp|=_Q&ZV=eER9ZrpR$TRTAMnA`Z>js0kUDvyQx`!N-(yI#bT+^e1voddg|_
zw@oPK&eR#ek?s2Ex1l~ge!tfh{Zm%*C`W`nCKBQORa6%&-C)0=Sal_E=;{fq_zT&x
zl&)9>bi>a+nsg&*v`UY#Do=gg-AR<<b>^2*xSVkhbiB6Af@yqbz*O3{T6T~W%$My@
zAgYsg3?Zk`3D*|9_So)xRYo(>>MY_El5`gXyrqGGh2I0_z<atXOs<&*mnnGLCZ*JJ
z`Egoi_IZo|rlZJy`_l(A^A3gkS4oTPS7n~5h3A~vqY^3r5>QBvsvxM4xlEdTCdJuL
zQ<D8_`T2#EsqF8oi@2h1lF_^TxHtX2?$GanG;zIvS6eU%lnDKbqyreT>GwTpV2JP@
z^xL8U>Co>@tv%?sf#*a>-c7$X__PI^_?0SVP+>RyrX2ch??JzVwhNBa0u;g%l8V*&
z?h!PN*)w$`^lPeodF}2+(9|h6Lbu>i`#y>02xm~dQo@e<@OlK4yF*?4B8yHVxAh`x
z9|dviCwiN1j#CO!-&Unek$r5Zpjjy)?Vj5yLfx-XwV-GvD01jg)k8jK1VtB1KBWww
zQ71~%sWT1~L>!qdJr45dI^dvU#(NqZ2j0oZaxykPcE*M*oC8K0ED3oi6M%p{xmyCi
zRO2F{+%eGSqBvDq_PBV2a-|x=<f@}UK0y%WtD&;N>6F87Gvk9z#n%b%E{?`BJ{0K&
z7Dk`5#!*6Ve4djoRc?(sV@7CN@nLTFB^FBMjcWv-wp`DY@i{s#vd?~LzHsXp(aw0i
zl%bRM%Xm^+u69LcJdNqqsHqIv=rZdMZy(v9#|e{eN@LU*`#FW!Ra9r|@-t3VoW0ke
z^ktC3`<Q)sOvt@f<_|QTKNhh{CRAgJS3R$%8<SXhyr~=avr4SEJb<{>m@7Tg8^;yP
z^8(h^odQ0Qwsu$ztiP1BW%8m6x#TH~WJM*pHt54YvVTL;bbpViUses9(^Yo0gd&m^
zJI7HeZQ^*;Q}zvRZKiA12Ih*8Dk}|b;5eTZ%4$f(Q5*6CC8>s-tQyiA9tsp)dJhOj
zT%<g_dIZ>-Lj6AUAAaU$8Fz>0x#8HFVyUx9UO#TERB#Z%)2LS+z<8vRo|6?{r$VQF
zl|Jh!ri2Wj9%BiZ4Jgh!=;_x;el>vNF(><eQfJ8n8TnG-NFnI*41z8KLCA&kIMnas
zU}k*rAu!`e$iEzmbo<S$s!!`xwS%KaNv1%POH#(0s!!pB!h4`4jftm+2_~GHSQ~U>
zVm!?e(fk`y@$wzreSS)IaYYpGK^&)ND*jKBcCS}5{XGH)?>*w+;7sbz#(~r0qu}5P
ze-;jgX0_+|UhQ#k@FS9EaL~T}2zu3oNFw?617wzQoq1<9L(iG`YmO4%o4%|INOUc$
z6#JsbP@g%Pe2#Gnxlfc7$-!Aua2cU`Uk5aas#h_gy6I`DWPr$8ysyk02qf}G+oXGP
z*-g?CYY9U)p;oD4h&;y~m=bnjpC%km%~73*z<Hxj)Dj<aMKLrzP?D#+c}REh2ufGt
zu}YT1`lY}hd!QtDlveW}%!9hQTvC8|G$mJ6N>hxtvK|4aeOF3gqq6p$N6p&sq$IO^
z9kR+^C+oBeIWy1Gr&lWJeVbZGBuA1))mz%e0&eZ=(#OY~uBxl-szzfRyOsS>m=jPq
zSGKxmB;;(s^5&RA7fV&vsAVtX)Xkzs`II+Dcd-`bon{4@KK{0pJIX?(=&5uprj;vQ
z=0ycal44`dJT63*=S25oCOJ^(yFWRHfqc1~n+@xMw5;)}n;bH-@mc=nEKWO7RVeSk
z0-kI~qnT==fMfRIok%TlnS$HvN&{6(jF+yP1F29;d|TWc#@@|$My;IcA0ug#mk%!G
zE~;)$><F9v!tM<^mWwf?w`MSV!Qtek9XvO)D`fJbUB9q75&d3izLwZ0lU(^)?ZICP
z>A0K39sddLDmnTP1!fMqi`j*!UCLQ%AMlG!|GSF)Z4G$O5n74wMq(}jk3sE)TZ?D-
z+t-WYe~^?R^WMQs@JOKD<5w@=G;0(GM#tz|I6%Cqk;60=hkE&I+Jjr9vRt04RK6f5
zN9cb5piOsg&dTr5ynQwknFvLD(AuI?*iAv<Q7A+RzGk=dimm$Hr1&l=_2~me-OasA
z72PDU?9Q{pSRa~xTsk=ZO^PCS^c%K2AEI>TV}1GqTiDaugYKdBpjewzkCB%*Xz_QH
zr*MS6WiJJ72~EGyNj8f|!kb&)$>cZcZ7<ErtmmrCTL%L?HsCH+5Q@60jE%Ad@-_QZ
zl3|}A>QxJQp+rskW4tAMgP#a@W?<~7GIok)g?SYyR3`QX0afO`a94yv-ib>*102)1
zsQ-H|3Y)S3sTQG$ZHw>oo0gJAxV&e6*f=Z_tUS(><|oe5clv8oXetx@nPJA*vY+_e
z;cr}i9wx1WpO04e|G(*mov1LX^A`)XFe@?yGwE_vy71_(boL*>4C~p2Rl-~3G#Z1e
z+a@MQyR6+iWNY4@Kn*ke=}xd{!mbWL3mAKy?FX&q23oBxXd;m1x0Wb_W_S$_P%IZ&
zS0087oAbO%2Wc&pq4XrMSeOvaVT9NCPR&qH0dOQ^Bn3@?z~NX)m*W!#OCKynP|M{c
zk^2(T^YqcFp6h@}hL9MOsY*sl+*Rct%(@=nN%D)6fiifEDlfFff;&pnOjRwX-6<4r
z)`gN+c&(4N2*6d@<|=6mLkCIqZ56B@O%ScGA3(<xfA=raN$nE0-r4-I$50n)9Ew~}
z>{aDhFSC1<#tOs(-Drt5z`<St7K7#u#s2zz{bd43+%HXsG?zk{C*g(+84Hl$Xo{^e
zHnnm(5`%OkLeXc)4WB0dcVM7&tLXiFWYLg#M`sjUc^~RY&(Df^fUwc8grJb&A8da}
z%~j?lJfD3xC?W3%T0u(%N-VU|T^7ioJUm#yd%CmE=z?#f_TWJ33MX#^yq{|EDG(PR
zmMmN__@=&vwe$nqe4*(R@~V<E;RcO*`wrb$C3ut_M@|81-xaD-I}(xEY7j)`+;cly
zZu8T)(s_tJO#y-uW0fG<x~f_5CC>B!QHX&I1WB?DK9U5Kpa{o7tX|%z#r;Hwz>L^r
z?^>Th?~lnm(p{ss_4}hINA}pOX32V&X;Hc)pteT?Fdmu^Vs(nGGCl{JiWVJ0QIvg}
zOq+@ysEOa<1t*7%d0zDnQ5LJnViWd`&tRaKLb@L$*nX)yy&vw315;taZa~G6VZ>If
zB3t_@QVY5_D`j<u$PTgvpCK~vFH~0ZIZgL7aRiKA^}G5H?L_R%=h-TMaj2RSc#e6&
z{oqf9OK6&28T;@1==n^m=m%YFLJ@AGR`UlMEb6HOn(l=A9`2d2A;MFoP9nvJGDI!=
zO>(tZSuHpfLRzR^B|tr15L;#J3mNZ*jX&4I4t0#^$ca)t@6clJqC`|)nX6Pn&>_?r
zGTsauts(OY6z~4R%3MZ|P_&Z2l4WPS-`Tk|FM7P5Ec@IR7S=AqfH86VX8NE74k!Sk
zu7SlU2Zm1)!62GxUGt-^{xI<l=3<P@zg5P)EWLuY=teILvgaJEWkeO*|IOG3@`@{&
z3i(JpibxVd_Ja9rYWM}o8JqTW8PlSHdp!ZR-1}sgk@vE|nSH@svJ|a^Z?jJimJes(
z<g}9u(iDqoj{}D^+U+*V2q%Z$vDfK0&gXmd``3RaUJJA^Ga8E(z|j;&0^qdE&-vk;
zO2kTmD}!ICA4G6@K+>TsuUfJjq*yUZk>s;>0e>zPs2rxs5lG%GTN~QLjkJVPBrl~*
zGQ;gi7+3hX*5EvI8Zs{Sm2Q}1T-NTR;1H!*!zq@$^S7!}RaONQM*9eg(N=Vnwpo{L
zlycYDURglO^#3ko7-D-FMyO<CIciqY>Nno(<}$Nnmss{FBR6UbeoBryG5^E<Wb}b}
z=ZS3fPcO_1P45$S^UmoSkxk-fp`?|bZ)NGED|t58K2xeqDiPRe&pH|{_l`^@^w@nE
zr*&dUr1dv-GD5h0kSDt;&U8lm7fE_^vGAzYB%5~ZSl-dvStp}SJ?pGoVo~cRQrM-$
z&9ox?c1vCke{j}cNl#$pu`W3y;1DP|WP*5xuhr{6%VlROIjy5Rm%p=+x9VEm(Khz>
zueF2j0xtb$$-`6YWCc*F&V4VNqCFu1J4LH$Au##Eg|r2QmO%0+a_2sNI46+&K|sQ^
zAFqXx7PB7p#}DS*GZA$HRgUptR|$_(LcQf-I}QCBzqV*y{E$293D*2Ax-riAXW~KP
z@kQqP<A?HQznqcJ>Yo1XZ-47g){5w%YtJ=v5&zU=-lge~;cJX-k(27J<Er25WGgAY
z*PYZ+ZQ|VvEl@8VTx+~VEGi<^yHtXdyS}vmohs79bF}By@EVEsTs@A~W|j#XDOaWm
zS~S}e@5qV7;vI;rXA{JQDGm^E*r)K*HGdd~OFOF%ucz@^&0G9Vt>Y&qn>5-JsAyK4
zgzujDE2+#?eYl?A`GZ%&o$$OYp8lm9st^AOm-cvl-4N1Bt_>pU|B%4s!_sZ%T;{cw
zr%FT&PAnqA*kQcoPlnv}`;T)v#*>($DQ2{5&mGd9JNVRpfkmu~z&ksxzIJW(;nidk
zOD(Y%(Rqt$Rcp{2xO<mWw#BJ`UU~Hgt4I_-+*f;OyUgXuqRJs`9Zb*rL;9wh(Q&kb
zT3?Je<QiLAQ^vNT0%B3FZe18a@<|q*LIL&r3xx2e=e_6@qpdh-&!AU)d0+T_F6jk2
z?5PAWJrLrr-s$2JgbE!)Xua(tynbg6;h*Qa9I=_$gGxO2x7SN*$6$%STK2hO+C#Do
zQb5z5sNO}Ne7rnKkntvkRqu4<ZaG95m(0sIHVk#SI_9fq&yZ2#73V%w=sHeYuok|h
z5Ta10JyCBR<8)8fh}v@<_7fy9HkYRA_xGvZ<NCZaH`5nGMKIOeaFXi1x<aT=FI>Qt
zK%NeiZG;&lDebhc=i}HLn<}ninrh40v$8p8`^6QLunWXBO<ZS-t5RI2i))0qj>ly*
zm2TzbvwEw~P-#m0hg9MwTzXi#l@+4XOTUV+m{;oUV~owx?p()&o-iqBkA#dB`#rMK
zK6$@&s&hdVdamxQr@HwAlv%6lP9fiUmnaa)C|6rg#-`*Cgkt?1y}q`qeT@)obQCua
zt6S9QYj86d{XkGgDGz{a&!x2I8rs*SskI(bEp4mrl<`ohJ>Jmzi*&|NveMnUOUXlO
z|0X`h73o(!pm_l&zYu!1Js;U0W#eTDMIda>p)q=LZmqFAA};KR@Ug6`MUfIcmsC{0
z2{S=MT?|jA^KHu0!SKY>q9=p3H|a(?)+|~Rlf8-MQi8ckitAh~#k2L{y_xORDJ^76
zPF+~qS$7PT`(G5c4;9QB#Enr;uym_}kh*Q5su51#7#qfLls`RLC(gQ8aAW$f!gZjt
zbN0yx;%AS#YLLqv&4)K}n>GMv?yQqL=bESW(|GE*cuRZaE!KQ}epTSI{PQ_K$>u*5
zB#hm2htVK|0qh!{Cu#~^#*iiQJK%BoEqavS>chem?ipXFh7Za9q>`;v$zD*&maAkE
zA2}sWD~9KJmFy2H*)o;vS$;uc_I#rDtJ%Q5G9(u@H>Ag<QS@G%>etlo^%_H(aq`5n
zG2qV<=2<1bUz4~z2|Z3+1=YJ4=bZQWWJ1#X#=!U(ZXJo)u6V`$Way(k+&}{90<)L&
z^~Z!NuQA|9I9HOCzSl_MMGN@Vo`_fY`4$+S{;DJSsv~_>M?Cz_n^QM{JSw9kE+p|F
z!!u7x81jJp4!BQ#i{|h<Z&Dq^sH%=v?0vA%HQ4ZcqEddOQXWt#KaiBC)*au~$lt3Z
z&#5HOs3cGGtH&#TL=mp&uz1DeI11*S*5+A;!y7qXwMlxIjOQsz_1sDXK-U{RS4$@7
zuJu5@RfslAJf(4w+jP16*m8IxawKPVpNX7+E!{U9lX%K<l<{Y?>=JT^&2!8FXW^*c
zO&fipHS_RNTvcX4i3rsDamTp<@bDATg;Zm3qs(lp<;Ms%b0Cunm>#RTkaKg^^9{i_
zIN*KLsA_7Rm|m|M_4T$VzOyf4f>yIx(04F5`i;uAM!aw0h0ku;8{hNAP??`8Qr<2`
z#(pEgX2Wl!@+`>$9btF$*`=pMe~W0z8BeP9IF6QYV&y=klso?hX#nleR+QaNo7h5|
zH;@!uuV`XP?7VbYADjDzD|&(wR=-69IBcuJOxaIE?T49PL+*F0j5Di@f)c-RfzpO>
zR5z%AYFgg|03g9Jjn)`!7OtR#Z)gB^(I?$5ZBZ~qV{^@_CT&rwCdhuGm`jTDcICrj
ziNK6*l=>HAQYU^mmn5gMHbXb;m7Mt8W|#KxEvjAHTea$gE~?XN)=KV1cU^zJ#zCgJ
zoi3&|gc|&jk!VJqPf9Xz8?|i>J3s3P_iL**`Cpb6!s3wtQ9V2Ce{HwF{dNDT+k>pB
zp5<7HW}vbGka?0Uk($>BUJVk=Xmfn-MufB%p(1H%!k|EmdjUEvA<wx3HTzY*wP4a6
z83GpLdk!lcvZPRZA<FQBT|pYrrgf<UHyW1{`4(+arPn-0xVEaQxh~zv*IL?}Pu)iS
zH1!MnDnk7)s=RLHq<<(qP@tc^!+=4nPE?-5kkUY0vAHQgC5C8C&kgfoG1dj~4qnXu
zl=)AG8|(a2u-CO;uJLQ*xJN@w=?3IlZBhNHTLQ_#e1AUrYt<BC?~<~!LD&U5`&ycl
zkymBSb3QF&oV~JAWLM(=5_32?<h<h$rsS-O<AGK1TWlJJjK3s*k``>YOcBX8Uh&6y
za3*ch+IYn?xcUT=1(#}z)|~p9wxW4-Wpuv3AqT`A%#RF{f#i*xs;$@}FV+vMw|qu@
z<X9)!cZ_;TNP_5&u0!B!)&1G(Lyr6-^v6x*u(6|#S%sE0=vzKO#lJo9?Q<iS&Z@*7
z01N%-9;2z=@<v`%<wmNFdMAJ6iuj>WbhWf3y0YeNf3ot6fEG*zwcx9*PdWP*qHUeL
z&&#4x-m-UTEAGxU4g|_KIctg0eWFhy05s&4AQE_^OOyo28BKci(Y0zg15lz0&w61k
zmG$AvusE2{cRk+%Sx2z&IIDYo6Rc^AoI_M@<dSSwkzU4ZqpR7AkOmeZ5m|r8N@RQV
zWJG>(ZH*Q(TE+GEXuo(zUi5icnLOvOwpLO=aClSXO5r_`3!P<$EI9B(c0UwKdFlq<
ziR?~#y-IqrN|3mnIBmt)9D61y>syZ_r+p1h!rZo4n>DtfMpG}V6j{|ci<UKRh9OH7
z<1GSUi%9y;n#Go@5a!rCB?Ib?<pp~HVcqbES6ur*Atss^q-gn6$J(Q?e~0(`jnC!C
zbXY@h6Z4@l^(DXY>S%Z5R8F)}mzla*opf8nWWe;a<1r$YNrFKduf#(vZ+C@pseX_3
zAv;SF%qyBsX#wK{34b#k{yQ`JQg_rINB@xYi~QC5R?}LZz4pw0NLvxy#4Ei@3oG5l
z-ttAJH`0~KW<>%+umN-E6MW1ezf+z8Kjb5~R*l2VPcb}jOs2}}UAd=i%jsWqBOyWK
zmHb!Kv{z|*#O$oUdRM8t@`U`?*)$9EFS<^0?eghv*HB;e!ms6fN(l%Usr=W>qDyfa
z%Vm>e=-}M%pK6p1B%r@XEYk*zq7sQ6a+>@uE+I|zt{dFNuKq=5Nl4Mx`Slxbm_?Gu
zEL+QOz$}}?M=f5w0rTwHc=C(f5??fq-}r7{e%Wtv1dIk+%#4qE2B~3=`9<fd@V)sB
z{_6J@viu~xl1=*lL&}KgUo?tefBQPg6flN}(OfNfAl=5YdoUR*i%&6S+n6|sw&Eb2
zRVoVzugg#;9Qn=86QYLa1JY}5yl0WLy?H4H0mV*hd{r@iSLEh+#g2OmU8m2xrmlo?
z9J%Z;c~~oAl^LLXil@J)Q-TKkU4DyN`E65G=S2Dm#q;zgdzFUgt*(f?NI~^`BKhYJ
zSx=yuuKg*Os}BsnKMiP0e3J%vBggow-*>r+U4i_w$C0vnK$Pb2muFVIfXi=Sz~a5H
z0h^WhSo`r?092mlJ3s1gtM^6v#s}Pl&ue=6QNU7nq&VJ^*WWV$k1SPPG0Gk=PI5Q7
z4Nn`6HqQ^R)tZAfUL==5zUMT;Oiv!arCZyZpK?{lFyq@wBaEW2Q3?ZVa+YAxCEm#^
zo%hj+>a}wE7k`iUulD4?9fo{FNxI>A&-s*`4hCv2Az`E1d8(xMj@XJr#&mEY3!sH+
z6&Fq}9!*03OCPw7K^*wyC)$Ibg5T1VF(J?F>(3qgIV{s}a38V}OY>{;;)e^P+swre
zkjH4w4Q|wGMBT?s%Hqc(t@6kJoD*+J0kM1O^6)LjS`I9YA+@K0$P{fHLmTbolBehs
zEV9OT$&n?QP0xpTjr#U2)jQp%J%S8zKoSi&ky6^~NwgDhd-IF%I@eP!A0`_Tn<YWn
z>tt(xy}e-=%|?@*u-MLGwxV&!$jxnjQ51@l)UO4b?Vk~jQ6+!%-(0TB+(7=&$H@=n
z6}$31XHXY}JygV`e9usPb_0B@y^#WZkqD>F#aiNXJQTn}+2<<mug)BtVIeIW>I3`L
zn<af9f16P;MEc~}%rE7}TSoL(ThoSTg9>RH3Uxv(P;wywrn2llR1L%Y4#QKd!qUU2
zMN6!NNyd{h0`vUsDH$wU&69+|aOl8k@AUV)a!;X)^$DZMvl=JYhlY;5Qu?x7`Ov*9
z&iD9L-7P~4+%Xqz^gKqKeJ$lE8d2MG8QjNqGJ$;t2;!+RAk`K#h}8qWO98@H;+u+%
zvMVIFoKSbqFW910%L!*bnZnZh5de}l6J9;wY{^dk#^55pd?Xfq6i*Woc{pXI_EMCg
z`Pqb<Z;xt;C4^NUyghRBcb%QC>O;5QeshSm0b2>xpXv9`yhBWVR3D5IjG$augC=0D
z<T-RZ1!##H++nV@GqF4pMqfP{T_hU->b{z_gH^Tl3U_2o&m(kYhIV^!k+EimHg7Ex
zYv&i8Mo~4v@y~L#1=Co>$3N>E&5zOXqW>Uxr8L)m36NKR=8r~h(Goufq16Yc`>O(4
z;y=ZG=;qraw`w(h((r2QRvw4wRQG-L<h6CuDC;7rdupv2d_*^{U8w3e%iMH-rH8`J
zicOfJg#sZ-VLTrbQ3>tE@Uq>p6E99zdxIb(O2}qHgbz~CE5?Ak$UH;4vB~hv#>L%%
zB~TAXG|q*B8QSXut{^-vcd+kanJmk=njZjGwG{hLHml<Y^R$|ktSQJ7bMmI-lfL;M
zYFy{|);e+Z&PScMIuS~hF4U+ZLXC~-c-bY9zmOxK=#5T(b8ZX`qb0D3I=Z0*KiwGc
z0B+q>dNjIGah>ux+c?I6h2k?RZdHL5|EYXx4+g6>VZ(F01hAW^bG0OFR2+*pYz!DA
zp<I0o8%2Y~iPhz#o*OoXoS>42U|7v^f;LqAVdLx*CAhuaEIMr#j{1W+dU=zsjjc~Z
zy>I+bE*q=$p;b<&I<;`Q71qXEdc~MZSdZXCyuyw!YU3FJ$hDd_Xs2x*4CU`QI8u~N
zBtc@Gi##hUnTy*zZtCL<q)jcRr3%E-kQP|a4SPeu*jlzJmj(LVlq3RgtY_sA=d;qS
z){lt+m?{QBlv6bzp<vVId6t56*!xnOVUD^Z<^B~LFfp=Tt+HM#S@o4KuU5U%Rtq`m
z$seu8k3MTi8~ZLvN2vO5?v)f$;&@|GNjhy<8+)^qo2wFkPZEdApOFr$t<JDE?wLFB
zkYeYnxy-pQ-X*Q0?OM$W0gka)qS<^~rkhm@rK_qf2Bv|6YGKHCS!JbwG1x@aE;0SW
zeqGGEp)nUQrtXHZXo)dW76njpObP+S_#NGVtb!P6R2fWV3bRh4knDWI=(B6an^p7N
zl-1fG8I~*HQlCPMRN9pZ>w5xQTAiKO`lHI%)j%Cct3ORrs{UcFXSG6Rx}&g+l=VQb
zZ00HfZC7PoN#`zGEr<yl-%D9~b`uo{N&#?@|8J0!QSn<4pc`dR^O1HkU#Wm0PpE*Q
zzf_;If8_)|$;TSDkuE2T?&5S&KnoqatU|&}&k1*mi27ZA5ys@PiLVhE-(?M@jh`7s
zQ;5Law@2e!x)s-eYY!K2>b$>mbA0Gx0ykF=ZNGywhsS(ALwmcvdZ>rMP7d64qv#`?
z@Cu?~WuA?E;}vuHbu*is##fr5)re*^Z7bR@eQR3{6}YT9e^%}NVLD8X<*b_|EMD;_
zg_7R$*Ho@6QphHo6r?4JDU8rD^&~PpJ_2>qQ%zcZsEe-5E9B^rh|Qxh&a(yMb49O;
z%k<1RBFUp&Nq*)enIuUJ&-ag4Wd<GJJ&tdT<D2HB^gF(Zj_*vz7a(Pu=WXe?Oc7_{
zb)#J;(`uF!S^e2KrXnpNW2gGy4bkt;;?WXuAG#rWx2`3wV;*9NsYyw?!YrxoEGc2J
z)|vojtv_&LY(0j;ikh(Ma)XP^vdeD=2f;=0LkRjOF*M?bkY(S7NS&!H_=q|!vCpIU
z^nPF4x}3<_8IA{T>RiRlqWS0!aBFv$oa(?Z^S5Y;a}X=+9mpK%#4#f3L_D(J;Z)r8
zy!}0gsC<!9MO%>*<dYXU9X!1{wm@K-0xCAsIQCiEx2lB$Oyv_=huG~%jJt?5JrRl$
zN!*u0h?Iwk+B{1LD%NU58He%~P+se^GAlUT$NCnwv2-!<;BaF53DJE>diKMs)uxfd
zUSO!!OKT*h4F9fq5mob=v&di<^RxOTT5Zih5Lvwj7uv|yRpOD21sKs1v^DrFwE_|-
z2O(5h3CSsY8>?5TfX8$KLL5AtB8lW6hAc5_p!j6rOqR)#MGg^Gr<?%c64rjMORcVV
z0<M&R?Gmuo2@nouy($6g2*BEtl@iZ-C-zQ>eU1PoXT@=n(WUGVJc@9&g!-mQ^b#n>
zEIaqRLfK9tjI0w8HXoDP!scRW7CH*jek=h>zwA#qDL<OPwssFCioI0pc)AfVi*{2k
zq^Kw@V7yUH6cSs-W`fyaQzSVU5|1A`mIVRhK7MErr{`cFY0E5o^fnnc-{sdAIW~a&
zC)wgn<pIN!#M$Qg9#P)tiEW-QB#lT{cM&es%FGWLiUfAOgy3%T1XMu;g(ZlYUPL@~
zQXqnzeJ)x97_f-s$2*SK5<8H$P0!a!8Q;C5dgzCkH>KzMjk3O!68qa1v5hPp`x0$0
zC#6FnkrrGT3YjUM-V}1F1g0rO0BZRqAWb0xXrYj^C9I1=P7z<4LKOawk${wgVMQTd
z>>wabA=9MLeG-sOA#Y1ShC(*s$>6#tK`46p0XQ<tP8D;mX@YP>KnOw#haeofz+RIg
z2<e9X9;y`z2F7C5t)EF7GmuD%Cj$xSPE|8U0@IL?k}L(UG$f=3fy5L^)CGy4_yiI>
z`e%(4PZ|o-B>x!_AW#S~JWs&G1TQsZ0|E^!ff%PJR>uyaG9YOcPxhdBivaRVVxS=9
zGXk7`t6?f?dx?2&8MeHCCR*XqrDoZ_TOfyRD4AA&R$M&g7H83O!>z@|nMKcjI5X`0
z_L;Y6HKn3Aw4DHlc61gqT@V{39)Xx>(_}H2(<M9&G}Y;2B|v~C(DI0<3tH_v@nxX3
zS3GHGNvEtgB_IQ>jpE6smp@5B1~|{+G0S}PEkh6v3SkD)hRhab3;Om);|b59cy65_
zKOS_!OwVf+WUR@o-PYr4^Zaxs!`C^WP^=<8x3);DIg<%}CI8hp?OuVIWi=$X<A5%{
zN~rBP?V$&lh;+B0VTpYw?s&)5j?pUZAu-Y%?>G^40>){)W0aQ2W2UPfdJ2V*dA}Oo
z-=-OzG6|Ipld^Yp(9)t(oH8T1*`O<vVCnAA&M)9#o&jXAAOBF4O6H}^vX5rKCtAK>
z{~X4pB__yJ)987GMACly0>{5F?KeG}C=Mnvzzbty4wS-gr%v(|P?89c_UHI1ygs)o
zMVZOFJ~XNpRUh6&l=jfIP+mAW;Q7xBM3cOr)E_$t-;}$XvnSw2ccPkfxQ^uwL_(_v
zOr==if@awST-Cex!@-TRQMgGpZ1(*ecKrIY0@tMJ1!ma&=7pU*2`<tSxn$<Oj(c7<
z%QVtr<EDCpYz-I#3TU&!l|2ZkRBs+hO64~yJ|v|rYH?=STQ|$%bqqSkw5NJ^r>b>5
zf%Nn~N}xsQQVK~=;LSY(H3H+C^U~%1RLbp3Q1#~W?%LuK`XMNlErH~eCGkV2Xb*{5
zAcd)TQ$NEqO_GSBbiCs>t!ADGEiPK(pzZ=`Vj6Ehpcs1`@n%^u!PHxC-%prXHW079
zMNw9Pw%~Uv$rm@JlgPo9=o~FL0Z=F%7Y<Ld&eI)zujvh0n=Tw9aocFET)o1;MGD)I
zYtTgxvX<oLu2Io%8X)3K|4fXyi9PN{Y(>uRa7910rilz}R@m1g(+AjWv(EW|q4hKD
zX|Q;2&Z$IQc>NMjrK_rZ|J^6Fo~h1ts>}=gomcom7!<;qAThHBVQ0)cG=j~_iWlOj
zA-s4U0!|UM%Et9K>6Y4p^)WI}!V}XHF92_K-}NC7W<B}_ZMd!IyVDC@Be?+bJ-&|F
zI=B!DGkW<)(NkNe$;ovV5VD+l`RkEym=k$mbnnROgHzs*+!WpSGN5B+(rNu*X09uE
z`g7MHsRoR*ZwBuEw)HuYfl3QwwR<uW=HoO%^KjYLTGJ%Z@Wj6%lDvxpj(Eif-yGy}
zDIJhuB#ZQ!X`QY87B23&P9>`Js<;uv0dILPEm9!6KB)Lue;boN6}Enh=~Qm5#IKX}
z)o#=#jrVg|{g5nKap5)qzLKPz7muedEy0jrIF?QI9m}WUBKeqSPatnq`Qga0s^N!2
z^@rKLh&IWwHc)Z2F^wJLIt$w|L*NdNiZ<QN1&FfqoDvH7ShG*wivfcFL4LJ!^@|E=
zxNJA<GPYa4e21of@K*^cYrFwS*8jZ_#QhQHNPqm*oD9BR=Y>IN*nWf`>pGU0wrJ0F
z>B~9vD|Z;NAETQ?9<3bYvVQY>ioLC9rj!MAZ{e%-FPrZ^-ZlY9HooJjkz5U$H9J1C
zZ}cN>==iVzR9TGSl@WUGAU2<0^C^z7gioa)#)!{B7}S%V{~{!2UJfn9bmK?UB+&3o
zEnw>jf`p00YYB3ko{0pDQyUn+h0s=CSNmyRDUmFoSr_84e*S9)&hDiGmm%%_soSh*
zk&k<aHI2OlZU#XY&Ivq_TTfK!Rt&F=pnxX5y^ZbD;k<+SX#bQbnkMh}s!N>PY0k)e
z8o-|(-_xNFKUiH~NkF}ws~+_7{6*?8uJ*0Y@k!%7%kW<)sf}@7Mbx@+qUPZ=?PTkx
z%V?ajLlM2)^xR<2ema+HY-&8ecs7~T65atrvh1{20V87de8TJY@Pn$+OWpguN2dR1
ze(&^(ji=XtN?)rn)dCINr01ec#b1`W;_iZv=7L{|K9~OrtPVQ|=YkafWpZqZ)gHz0
zqD?*YS3~j6K5GA;ov{v15Lu|okP4Q6uGKW-fDoQKdywlQ^ZX9EBysjhdqG4!p;yz5
zvD%8fkvg_-a&-5f;Zc#HYFwKm!sTs|<4KQ*mf~uJb@)WGp>UE&$w@TK5bIf;1ELQq
zzGg@@!Vi*V*FPW&Q(lubi{;W#BiUdQR}*vI`2~#KJ=XJ5QnKh<k`VQfM2c;>l$Q9^
zDFY^yHo}p96GC*&o22pfg+NsJIsULY!ahfNE2V#X@0Uu0saBL|1@SYjE3OxFC_&0@
zRK%zt!VQmP#k-yX!fx95IP}0%$zAZX1b&fV5VQD`Dfh0k2Dv7hCt2gP73ZJBohWzM
z-PT!j;&Aw-vAw}nA)23^Mg8$p$biV%4K6O0p$z&v;ZxF1$=q7+)T01o4sQKJnob%J
zQ~J{fJ$V(XfwcLT*U@HxRV*M-gMxckyRW7T-6oF5d;>a`1BhVC785y&UXmVN&3NfU
zZe^n&Jbe#u0PGf?LnB&b(vTkgw+FMV$%?^DjT7UeTU-&IQt<R6aFS8DXQG+cA`Qst
zZ07m__fR}Pybr0y9L?Rc#>l{#mLHQAgx)WqM&2Gh@piPJbyT`PVdFjB<gF=DHwu-1
z8o_=>yLHM>^I+%Gxl}l6rj;YvrKbmPbhDL<9yC48wsED#XNF&PpK(v$!6A!mXDBs7
znV9H*6HthM#yb@oSpu^rQFnn_NW>(wQe);xmYvI-Wql9pWn9@oHrO-CJpTi$?0BI_
zttRRuU0hl~?j3Aiv;a<uhP5Q*ev3G*$!H!5MDk-JnW-LxllmELoWH2do=ft8rtzdm
zwkTC@(+%e_St<T<TE!a3xhb<s%GQ%=DHJdcS@+(XM;FxdTZ%d-k(lcpQcir%u+B)|
z#>!#1SrMGA-CMv!xKGS2?6K~eD*$vB4pPY=sU*2v@&%au#hje%rbyIo;r8)W+oUIv
zA?yQ-p(t#sZwG%T<jRCkdmUW!G=Y>5GGE#rqtl`C&d8u}`F@%FCnFVC8BREC{)a;8
z<)256O-Gj!%{jt-1jjw`V`O74SuvWgbwNHYHC4Z7TKy!M)4kS#wIn%Sk`$8UVzcA}
z85cL{XXXtR#Ih?UeX3q3=<a=awuS`KVb4{=fV=stZ85y9tJCzSCm)kDRT$?=*#|~h
z4Hd0)T-J2@51oQx?6i0Ts9bZTfc6cyR}BVbidPL_c{^SnMe%};iN^^m?ZSDY77<XY
zO%Azgc7e;EoY3jum~7lfWiQs{S6lm4)Ayudlco@8Vp1~vzRQ|6I}e8Q()-epiAK%)
zin0WqW60ctH1zTvk<pXPMY{zCx}lzy6|1&}dY{j_SeoWMI7{}#aG_UIMNKposp7>%
zT;fV0GQ(1v?hvv=Bft$|d#yDK*_~yo1S*m`NeXd#B=XuBgD}X!eX&rI+sMF->E}S#
zJOq-?cPk##;fkC*(X9DGk(e<)M$FG#!dCM-()4$cS@K!Pyif@1m^5K+gB4a8U(ZZ4
z=(JI{*qmzpA@)+#_|%h&WmLWVZPkD5Mc4Djr;xjK;w*UxI(i1c75_?=B3ZPqok@cC
z-z3T4yCsRUs)Zg6L<y^=kK1J@smJPfpW7wS7c5B66$rZIp@6C21lSabp{4ctfXKO3
z)7MprdBlo}uMdJr9PSe-nrM#xSo%{iY1HU;8BIC#N+edI2Vlax^lwysj8vUZ)m@|I
z9oDCKr0FxQ&3Np$SbKL13ydU%60;(Qs<MaU6C`Fhwhooy_(?y8W9wr=r{BI;u?;Cv
zA+n#s`ZG=VL3&DpjmPTv1Pt}Y7lQ4}6^h0?tr>%4wjOW}1WjJZLaPy-QMyk1tA>AZ
z<N#AN5MmyMAX-GeI5kv`@ukHS$gG0c@Hw5Q=Y=%T(mYw6-E|EH6u5ur$WD!}<H#bn
z%in^pb@w0sEd3{rooHG2I_xV=Ige8YDTLZoirXZwqn}s4gF`ZM+HMxJS>+`?8@>?H
zgzILVwD<gCNc0Utbaz8%QNwBQO8S3Kfe?(k`i{)%2HlDcOf+6vFJxj}cr0*&pPt0D
z9!3VRMR7C@Prn$d><bckf5uc04x0}2O$Yj>f_}WCPvn%U@|#^O_{oe0T)bm|R`Xlo
z>KIldI=ZuJ)Xi9DmFEoz@`+x$t99c{%X?ZbOI?RQX68?4y%DeYWiiXF$SHtz<l&#N
zOR&cE*e#C!GSexPHo|(5<veS@ey2*plSsG(=#j96grx|vPO3#ts(rnSi#<Vc%r-JR
ztKx2R5}w$VFy$1N`V|SGovwsqorI@#CCoJN*Cd3Ob|pOCNmzeMubvc3)yx-N2@lAU
zB3{wdJ7MLMB$Qbp)5b<8;q^x(lr{=fGYKDe5<cEL;j~9d$nvBsVbn=@ZSRCjq-r^U
z%aj;)5=MF_O#Om{{j(CD?j(%&PUw<^a*Hoh;vu=3XI6X+{+N5-y%W-9b{H_z`r%bF
z@Q1u55o#H<WPYBy2cp&(DC~ZLO8jLnO6!#MmSpq|1jb=Eh0PK*8*|XSEo5vg-GElP
z%Q_vNz(EgpM$Rl$(a}>`NT_#wTExIcvTXP)VX+k#4=X^$%9=7s?$Lhllw4Q$U_)Nb
z&}X-NrwoTY0%fqn?1fh7mm>{0VxDRaYd#(-7<xgULRaJjb+P1t_WPn@ypCK3-#ZbH
z=^4mxz?|a6(wb3}hX+M(EwNonH%B#&lk%bMaZ(-}4ITTJh+_4hvex#^<y>Vw7l^f*
z$0dDInGs=Y<En#f+9mSHDLjDLfwCMa%uqM%xpaPxwg90PcC{gBSZd!@HIk_mjTqxt
zSr)I8yXn|bWvs~VOI{zUGxJI+wjZ0fIMTmjao(}pwZyj|=SEc(rMXr&@iWshE@k3i
zQl|ErJi-x2<i6rKpQ%#%jq%<f*A-|~hj0dL-;j-MsDo0pwzxiIjOS^Jiw28PXcS(~
zr3kI5LR1~Khom>k@V)km-?)63dj3Xx#n_5X3M|!)5Wlb6KT`aKD(RJeZYpq(ae-(o
zOYmTS<M>-}yCiuiSx^`<E}Aw&+AMpkQg?}XF2kc?b9=pnoFuNb;wlzbqb)Z)()=1|
zMF(bPgZM}q-i#C^pxclqNAG9ksl7*VDwP_Zui=LSpVLdAY(TF`&WlNubza;}l58cs
zn=40JF4sez&A8BWp7$rncr9-0<fq}V&&YaC!E5$K(o>$n*}p-cg{|XxSX&O#{z4Ry
z>c#BOM$9Tf1mmxiw{kEvJAQ;xgnsA~DgZUpq#}@U3y_ISDrJsuor>B_hPrB=0RTuY
zf=HRWFT~`4x|Y3OQhCm!O&RKC-_`CUS$YZv`jt|)T-udtbt=140<hPdd^v`LfH@Li
zUG<r&L&ies2IQ&1GA5Emi`1d=4(q-jvOH0=Dt0Yce}<AjPD%dc3eonl-a4JFaL>{l
z1%6vj57c@$S@A=Hth1hCV*VbpU8Y?b(jY5EWRb;0s+H$gO4KI8Xyv=6<fNeaKnYL$
zyoG%O5m8<icFg;3GU;R6F<>M`kO>%%i6n=~23cawwAy6eHxe=zt6}m>Nn<)`OqC|U
zgRUx2l@ydmAyoNVjabVLqpFXpwDFh}hs}h5@r)|py*q^ATG2>Sxl1wYyB;Zs^E|1l
z^^zI2T9c8|HiX?RqDFiLR2H}0vC&@m(nO*372epv$&s<KgCQQlp(o*_=i-|ST=LFF
zSPM2*8F_=`Ik`|dH=l)rn1SQ+%!1?6gE#sM3KsLDm9Ul+nJ$gK8k>_7iZ*I1^xTC>
z0ZQDyGIp?d_VUnbx9`DXig5AZ=H^*Xk|Hm5a3sco;5e~^rCQBhFc&H2;CZO;N#GpM
zxmx0003Vx!B5~plT->Wyg<3a_Mr#w%=gLpn?OGuZKvrX&hX)|(!E@mPm+hC-*hMw=
z%(TwH7>0eB$W_<_O4(mmQ8hG$4rhqDeWsPdNM&Y)dLAT#q>0KRyBspA<GHyaV`>lQ
zNX&559A`1!x!vCSwxTbwZo5jL9u|Yv4KuAjz!vQn6{Q7w44V97gg^9kIRq+i#n8@>
zIj`7$nA9u_;n5TVeF(M#rb0F3AoM}WGQ?qofs(T_EVM@KD+pWDnnKC*(S=#QjHGOI
znv2B&aV+E$#B4+I{5%v^k*AjufNAM)<{d0!d5jSBWOcDmsvcd(=n|XA2ZB7FXe1ty
za@<@fTfRh!!mgq5k(y1oLGT$b0r;yAD{h|n9WWJAi-75%IjqY4u0KB4%VO>|A|^K0
zyjl$K1@IwmRfI&<F>yMr4`Rlg^`WVZALzM@C6!!z3Sli<X+Nj(#1fQ&@^64wW>xFo
z0VdKh%mGMuz@)Sd6eYe3W{zMuY4psrj=u!N%vE5oq^+#YSV(UUn8W?rt3l)MnI=a|
zj@n$M+f9#K*E@2%p|)m_ck@^bV6LK$HW-Vgg}_m0HSCO9-B|^*3``N&IwsA3(r9!4
z1&$WErF@$fhouXP6;cuuj%H#NIe<`0>$_J8+fW_vO)+T&^U{Eiz7TT%rS(rUY6Ipu
znGR@)>w#kLPS_Von@rVCrsNiUrqf(gHTNRpR|-dhANYtxJdkTrnN-si(rV;hw4JL$
zpLEh>BcTh{&s+?wm$Os{!Rgup&cYXE0|lL<RbhK6IE$3+5sY16Za<;Eyj=3RHT{bm
z0MJ*-C-4qra7RX|nSqnF(oCzAx=qi2f6jW7xo8$=u5c9i$QgqA-hAYy50B&{<4%T;
z9Aps}JNT{Wcru^Q^WEZA?5G9T5yjkflwt-*F@KQM@X6T0u$DNDNrU2oTH@zUaegiF
zL*?o_MN2%ST;9vH#9Ya=LeE!xauq8C#V7Am4w&Sb;+WG9CV3eN6$kE5|0bwh-F#Ae
zsEt!+c;&F(jf3ydjBoMCSth^mSviJ1qGOf4^TKCKhS0G$K`zsg&;U}?xMbjLX1b)1
zl~`@NC^?$F%~eZ<Py{E}>S`jCAt3uWB60mcyuAx}RMpk+p9vWm6nerX5L;+tMNNuU
zP^pQMnjr}}BQp}K2yI1ap~kjashJTf0t1tj9FL>1N~L{k<@HkWwN<=P)QSlp38*yS
zEnW$Tdd5M;OG5-p{=c>NnM(qFd-;Fg$McZc=bU|6d+oK?UVH7e*1nDLLIf;=`2?-c
ziTNVsU^ENJ!>TA12g~r-8-0|V-58baOemRTIP`J(8bwri<yWwY-C@Sh$Tv%RBvf2k
z2S&mhg4T|ZrxP-cN`ocv^2Sw?@^ruh<z1kxjeH!-ZiSgN%cuAmLkZhJI3%;|6<T}6
zlxxP`#a}!WCk~sfdM4(YqcM`z3%X{nX=eNwoR55KsBE%5c&M?(+G2V>j{QQI;O8uB
zmG<D_es#Fh=hF&`N#D8aP8gvo?<&Qn*e4G?FP?YWgdLhg1w4QA+o2q{xZ<yoK(&1(
zB~72o!VD?Jl}<a~)YvBz_HKpXOqZ9sl>C2$io$;e_45QXaI^sUwI7qg3t6+#n5zZd
zT9E@=v7Wku*DN)&`C&w6s-G3L>Zj3E-x}NbNi@N^s^L^f&_=s(=MwlmLMKe^I#OU!
zvQ=9x=h|nmG;yZ$SQjsxujh*Xk~l)BBh?#a<EgZ3b<Rr&o`JHrIOrft0AEo$=t!gS
zNv9EG!z}4E%LrvLc{3+<a7NKkFl5|2Q=PL^={WRiHJ6?UYzaxYNM|0&xVd8%4sgd(
zUh>$K{=#BCnuHH<!=u8cW34{>e0Z?h%7k-`t+4~d_o8#4{uAk@yUA%3uh-1LyLCtI
z{-*=(jt~XhW%LrkmAyy}wI1Z~H?jtp{OQpZ8c7ulKbw#nuGGQUhP+_eij_RUD&VIm
zQPrH#i>aJd=;^}9FCbHy()F>8El&2@9)?0@36!XN7CF^#<#84>ndKRg=opCDt{N(L
zI^}aGE_M&xg4H00XLjDu<cshd*+*p+cuhW0KwhVdyo}+eTcpFnt`{2MGK=?+vV|~E
zBFjkEIopjR(?FG8)&3DFc({*iv@db3?z%};L2DO`rbANLmGNUM;tq^6eK8du4X1gg
zz9w~SCsjs8>Mrpb4I<E|2ir!BQx2tkZs7yGMj+;TVZ=I)E0rpCHa8?r8tYt9$o9eh
z{>%wGI7r+7DKQ!1L?*FXtL&rkvkeEU;};yVdM50svflFV|0I4b{$K}64po=DmK`K0
z>(n4VqHJ<JZ)n-aa6hY+>w>AS%FeAu<-EtPES8fq?iuu=<$cCu<yMvbsT0TyWw&Q5
z1$D^U#|8s-XHA(6C1}9EU=v^A_J*D1<?w5h$90q?S({jeGN{feLa<F!bQ&AuS#A@f
z!M2Fr4}uz2j&Dz6<+wvxm3iAnk-kNzpOo}+o&LE=dSO=jDxJReTfCp6(;>+-BP%^s
zr!SH`=jil*SCBrPG^@DL_ze<jr97I&e2lzZAZzAuQrT;su{;-6&6@eU_xs5OEVxwj
zHWq5S<g29mmUMK<wMQsPOZOd?zeDGL?XdixPYKsXKM&!h0xMymMoRdpYWJv_M&l1u
zY9KYvIIPBpgs;YjywSf#z1~yJSX~Xm#+P+92pjpT8j}qno3e3CWF>4kOhmOK`;8<P
z3_{p=57Rh}LK=UKhwSdpznq5u+`nOl{F4z3!ym~_dbgxk>GWPn->TDZO1ep>w@Las
zonAeR^gNy3K85sLoqj~}%p@(~$mj-110+K`S*4B!!ctP%5E{#6=L?iS>JKF)sl%5p
zd1zn%lI<XYl1q+Il9sj|mOrZV-_<`qIQVQhu>Xz{q~DQrvrfM(=?0x%GnDiKoqkx}
zU!l`?N_w_V|4Pyq>hv;6n>u~Hq$lb0wUQpM(>GU>9;?&!^1e`~=Sq68PEVJ#SgQlu
z6iI)Ep*iUyfydG5fYkGbPLGp39XdT)(wlU8h@{u)^dT9;Kk9U6KIv6D?U8zJ)#<k-
zPZMdB5=P?^Ni6U}nh}*c>O0WCN(t5ffK=aM?a;$|eWKrt1@J4S;!`O>dX}V**XbWi
zdX!FA3Q))B^c7X4d$GPF|9O(<Q=Kl6^m{setfXJp=|PhIt4<G<^hTW?Ea^Y%^xp+}
z_v`d42I)I=I!D^NMW;_Zm-KR-enIjt)al10eU(oCkEG}5^q)^9JwvDO6s^ZpoxWD`
zoTJmrBz?M0FOl>~Iz3O)U(xA{ByH&Q9I11FPM;@r?*BmH;Y7)k)ah?ZdZ$i*Rnjl$
zbb+MXblNNFCv|$Dq#xAj9>McnI-QX8Z92X2OQda`-ixj;u|%i0NuGMrS@suk?~C(w
zd_6fPaBo^N?WaWnDApieN5r!UuLoj_7UV=uNPahcKFXDEi19IQ>G3*UPodJ`O4`8L
zvli5Ui|Cj0%y{1SxlL$;EX{S!z6$g~<VU`#k<hJwpWj;Nyw1zy<5~4Bnpfv+Ryh|H
z)j5A5g_OzSzDU%)MZ|;6cSe1YOGBG{T&|~-yt5K3$kr_T!8+%9sc=_HzEt*EglC#2
zhaen#926TFn;3n#?O=x*{u;7nWDvJ1`JC+{vtk^g&Q7Xyg^1Hj3Y|YIX?9`0^8ktD
z4rzyABf^aI`NrdIr2LO7Zl;4z1mm}hRL{xz_g}y`V0y^f>Aw(##sxv^b@3r)r-=e%
z9(!nxKlJ$uhEbSQt!UvL@_!RQZH+7WE3LFO{*DyVfk<o3B;}%}c%D(!bi4|tox@ZO
zEd4zHB=lAd3vka3dA6*Rr$AY2(3r*+FCL}T)cAE<2G%*nXR&FNt>Ss)43->JF-Y4a
z(yfH3Y<*`yZ^4hma>!PNL`0>me6m`IEEI~L|0U{Mz&orY1_rH0sXAx`FeBRCGc`Ub
zx3}O#DSq}-(h0<2_1#t_a7PHAP7x{12G)fOg_tx^=WP47*pBG0x^>hVs=x6-Z_u-m
zJ|hAXG5j7*#6+(~scG>mzQI+KZJf*xG8*pYl&;cPpLZg$?s~9^`yJSeJ*BW`G@OJU
z%YIBA#3#WI(llZP#S?bKdP<Gu5+yrZ6g20s2b%b;_uzr+&-ixP%aQZUxVMhSps{{z
zsa#HU<9!s#43Mn`4XTQDDBTjeKH5XLyPThZRh^S~n|9Omjw1fM)Ha3MzOJr1dP@N;
zWd=kF?G*}Gl*N0}z$z+;7u@x(oW4zbgP-I?p~x(uH7gn59K7LP3Y*6IN(L;6lJEmI
zwd?ba0zcs{b?#g`ztdb9os>)bdFj?s0J3;<3S_o=nh-%A>RdYTb*f9vFLRCp5l9{e
z5@Y>{k!UDly`{!4HvlNTTgdBl?;3t2ki@+Yyn`LqoX>!1(s;FXN6CPsyOLYapJ6Zi
z#gO@zawHRd8=HM=&v|q5?hSZ)zU@aDje(yPp9ylHoY{g`^cws$tq>Y>43UO8Mv>EZ
z>Q*l?9Ao1pC2&rW5;&*GQ#|h_8Fsn!wd92$>Itre1+uX~7K~rz13}{f;qGH(@jE@{
z<eMw$+`tNB{UOhR*nv`%<#W)Fl#eEV#aU;J!Y7N`=x>8m01}BZvC)&5A&|riuHj`G
z35^HAOzf$ZKtb%y2|Q$t7rGUhHBW*kEWvh$2PrkrTJ99;chL1s&T-|S3r^DSHsUBn
zp?O_@LmNAV#B==7=WPD{ZzLAdWP1GK-rwxe5a%Z(>Z!}uK-xTot&ypmSwLnbjkTv$
z5R%9w`W^dIPet@lQ8>xpLE(3*jP-9-#V<m&eY;RGHwj*CEFX>PEXc9-F6EA~W7?b%
zw}d>eF}Axke5rP=k?OkI5DJEn{iA&$VOO<2@d@8!G}MrQ4r;0O=^{D{G02!g3^Kwl
zd(kve=bSYW+_}Wy@)npM?Wnw(8XyX(%xL%kbjq>bCi&BDD!T*;xgnRQm{utl@A?w0
zAhQo#m&pr(YZi%r8Lm4CqxCPtH9!V11y_fLOTsV$7aMvFS4n@kwn2Ofu4hQFh%(3i
zC7fA}CdjCBa{e6%e?S}dQ&KPuXJ?yo=>f)#)`C2RyG8-Y{*fNW*`h|(LzfyxHAA!K
zbe(hU=@~q^Q<?GWJDZJ$5mJ}3H-Q^N5VJ8fFHMZ3xqse5;lI?vR`%Uy8<lh5xn9!$
z6!I31-cuv|k0HNW>UvtLl{pX8BI=mjtdN+=7p`3FNla4--pa{^*hj%7WOfFug}%gT
zJg3Rgp5Db&!Om;7kn^oA3_r`{Djx8#<Mgd@jU;_NXec-x3}GzMP)FjQ^@TcQeo$Uh
z#=8^#m7WcuW@ele5#Lx<!R&lf1%MEX4Eh?hDzJ5}^(C%ANuKV7O!lGjLMD}u#D74%
zm02ME(`kP<O80)m>!gYInH2H1ldBJmSIP^4aW0Af0LDAUXVCahVaz!k#(ilRH>Y46
z+aJa)pk2Y(LgGJw@!+Zd28<WeMn61urD5EZf-x$Tpx3zxuO~(Vah83CUU#%S<q>JY
z8mWUK-p#p&7T$=YyucItaC}v~ro)`m?T_{hnqMTV4~zQR`1}rI?O9B_?sMa3Opz?|
z{hBTohs$Z#U0-zl7-FjW#SSY`Mg8tq+RVr`uf3_|n#A#B@R!cx&Y~G2h}%khck^*W
zJD0*te1N<`YoLfhiO<BKOZO&d9hLYMW?So-5O68}$mXEeJpL&GNyCC^WR5v#e;NYy
zNjfj~T8Vq9%#T4pIYO)`qjclC<Z)7|HA*61=Oh-BQQ1(a+>t?ncx~=_sp20rD_)Dz
ztfkv?J4J0QvFJFYHnDrtwLPh76Ko~dXlNRP$P&`|C&Wa}T+bi3YYN*Mz+BbF%TKVj
z0%-Oy2x6WS#Gtanm6W>Ht4v2mkr+cA5mtdP(IE8*4w5Y@8d%~Ms%v&R+mXb@#CA&j
z6N&OElvg5AKE|&rIZnu|JxZ=jarnf2Qk^Tl$s&}P1oqgNC|NFX1`k>!3C8bfk{RIc
zp}3w(=u$7usJ7J-7{6V3Hu^<&rd$i3^f{*sBxP?$K4j%vAO-L-=LhlDm2IFLRgo5D
z5?=utH8AY)auPoT7uXl?&+TKKSLN<s#Ro}UzWbS&k(z8tM=O&*eEo5ActI^Yk5CO1
zep?RP4r|eB=k)gyz_4gF?`+;lJcS}&smr^UOI~5(i%A%3YX@;z^fiPf8iak<ItZTz
z#wWRLm-dad=X*Hz@sQ&}W9^3SswtkL$osMP$43tgnm?HXNi!Z<r{(~DMys76kQshN
ztIe{|IznSu12~D|q6=~2BM{70sMt`<A0whN-VbAw!<!N5Kfi1k;N^|w!ax}oK8jJJ
zwmBqkY?G;#2pj912fDKnl;KK8Or`ZF#@bO6TIj$W^Km+7$khJdh2|{zSq^8h$ndBm
zR9w9Qa9{Xn^SE}xr52hK;ANu-*ZC^yh6X<M@hwZY&mF!ILX4-MMb&|l0S$&2jShB)
zGSm~F){BGj{EN-lq2BOC@tQ7nsn?vR_Fqg(b+Qs)F&pTyg;Y;3beWbqO*D`9KJo_s
zwYRol8`Ro08aaS$&N%=iqO`J({Kc`j5%#m^X1oO(*pc>R>_~IBfa$8g<pOX;+CCJz
z8xOE)OVA!vM6sT8=FfM*yb7O#@Ru1osmL9>d0P^<1A*$d84vA4g95p7B~b{tBaX95
zaZ29V5$*Kg{EX}nZI@N;I1lsHu6FvuHfGC4cOTNnE?tPWH~C_n6aOrmK$xFO>6AU5
zZ7s52Fud9Np#YnsBM%9Nov0!jE@G(g^W@548*daf2F6fzd?arR83h>+`<G2p^-y(Y
zD<8OekPtDlHyWyJLFHX3#y8tj!xr~m0pNTU<3IUo@<k5jcva}Wnn}9YO<zvB)J-pN
zseo59*gD|53agh2;BG7zes666fbgQmmIc3{g~kQsbtwY7#0nqps+$59Xm7k+s^MLs
zyj$tFqS77S&vV}w%lp*<E85I^$yh2c)=A2g6bIfzD`rZnQ&N{p%8}H9zI5^JEmlWL
zKj&goaMV~vJK~s}7*8U#&&BYar~RFCt=uO_^d=vvbMED=Icxl|8D07s#_0SLb4#Pd
zJB3Gnrs<!V{G{4b`bO(OIz0Y`k76CIL*|3Fc==%RCI;>hs*Os8{qv9Qm;a4d$$uNF
zimd!;Rc5^WDL#uv(|HtoFx{wFFTSNcUS)?!tD?|6qE9OHEA2<i-+7bn5zPuRL;=h`
z@f|A758B2AmZ@#(YQ8t5E?JMJ_>y1E@I$ydhAF$eX6(8z<rC0d?zw~YM=&xtifcJV
zieSCi&#Q0{3zdxjR;;HejA_9Jbci@aLiw$`!Ow*w^UXGq7bt{6!8@A%d9s0*J3Ue7
zeo5+9*|`5O`P}+^1c;zjy-)1`2@KFv=j@Q(m$Hcok0y9Jw-i?IliL!5mQTphEuU;A
zkRfetG~+{>IXQSjv55G@*3XY&xhsFQ0FVE59kR|c!u{4uSu6|H;`n<2CQJe9<$(3K
z2`$PPL@d@X>l~gFxfq`0+{&aAB>ZTudHU!R#*;s2T@Ea>ncUn~nFIVp<J*9(Os#K1
z%X06@l!QGmF~spPeNjF9HC{fHPfnPnHTkxB_V5hP>vUEvlIaxcOy0QMyZ04c{zT2X
zuy7vo@n7g(iL?`+xVuMn&*8^;^{>M5%b%cxGe)X?E{mTj`iu{G>f>RYU@<-9S@{!4
zgk|fHhz){<Vi<0_HT_W~I;g!}*_iuYAC7}b7B-rBVKm+)T-h39^APh!`OErWKKjF9
zc%%3lwit~U@ja{1@qlGC&f=x!^U5E%R9!^YAy~Ij+li=gt8`3=&mQBvjHi^S^IE&S
zK~Ilqn}|>n4e}M0N1{NEfp&P88+n?qh1|ndgu6P-xV3#K1C*x*X!($PsYv2U-t=p-
z<KWuM9Xjc;y`GOo<5N<l?TzqYVr|%XF*r)W)F{k1U=L*d!6ND?8U7-r&U+6ddRP{Y
z&8j1fXOhpI-xFFkduPBSJj=Z$(mIweH(_@Nu;nd#1xH6m7d=Y5CuoSANnBSV>nH&N
z3J-(-y_a10*8*i9;GgG<(NIadjC>0Z&YXpaiKp=*rH3=Q%dnz|%gtms8L`9B)1<3k
zf<nKI`1I0%ntxD!`4y@Gk?3jQQfVMp8j!Fc?s{Dw;4O1@9ey7z&fR=vhOPrGEy)M7
z`Ahk6<WqT~<dN@*2^oA*yGMPG=z1<zd3ca~0a~kb$}Xc}S@i0h^Pan}H*tq(>Eh*E
zUj(RA1gKRS%E#r!#n<xUHl3r3iG@SFWAYAX_{0=mEBb#N<mV_tU@F}S>B2Cb-RPP!
zaHr(8KJz8(a4l$0^nV4vW&4D4`C)?|{;@yG{0;vQjkI&k8wr#<ZAou41}2<+jpkCg
z*TZKUYX|sCt8*gwt`U^)Ey?+p*ApW0c215?I=eiwT~5W$jaQxR$#Q;h=Z$y!muatT
zU!*}YrNid?FXcXyZ>GR)PQlBZW=cdH#BZmM5UB*Mw(5OC6wWs*Ify%4xT{O{SwC&>
zhq=QM6eC9`K1hv!Ha|s5Y+^()I>7nImk3ZZM5yImfhY5Q!WNa|Bywb}hwgX3l4RX1
z!cWukW%UI7FX8g(xbSiiXo>feiEVY`YM4u`*Tba<vEH%9Z7sgma4~g?TrgMrB@)bp
zZ31@&WT92hlaT#`%h`bqSJ9_B{M}U-dWynX>tn!Je?CVpt*mkG*T~)~i{PJ@5bUhg
z4Y01SaI!M#6r&*@I0EtWJ(I?@Rm*uR=Ll6>QFaWK%SIc11<|4ZYy2|5$`w%gnSrzr
zp|l$dsY9+)JDNI#i{|o6WR>afL7XdL{x2qxL%6eK4|_YpK@4f&85%r+@4-17{O57@
zx237NJvmPIE8;D!Zom56fbrmdaR>0=BiznT4wr9J_G)IZ?A35(d~(O6LDw9sgsZ!N
zm+oKW$qSFentp{`N5QQMWd|0GHp@P(e~|KialVrMpj%7iiOZUUWf-^5<UJF1op8tj
zrscDzKPvY#?C+E?uhskHT&zJ3E!;sd+cq;aGB#hQzQhmslBSnf@6p<!GG22C+%WQq
zce1}XO>dddlC{1WYe#ter6Y19BSjDimbFAaVE%Y|6S9p%-r-I7Lu2jq7Tq^OXYxKV
zg+Cfk``fT^U{v-131jWY#`~16cZP9hePJUZ`eqspU!!x;MQeoJl9Ca;g|S&DnhNE6
z7&|bTIK{kDRNC^yc<Gav(W!Y0B?!`lg4Bhk0sDMk(EgqYSqxyco3zMSehc4&_IE0{
zTr7H)&`c-)I}+c3TQR0)Y|%Q}K1)~{5n0Anujb_4v-l*4_Iw0&@96+*=QYQA09C@M
z#d;=3SYv><@qc(!!(z``&27JlZaAEL37;J6&5fLt>h8yT=x*$~M#76Uv;iz;X~Lid
z^?#s*8j;1k2Q!<=ss@Jn==Ssy0HZVK=c;R^^pMfpTzyHHoN4GDG+r%;uctymVJ-D#
zP?%^1UD010B93~HTnc9Va-gKdWD4L%B(b7`)~uCH(^mxvK;jg<l0a8O{3y1s79MlV
zLbWYg%XeEyBxuiCnKY2EL_95PH5wkG3E&(JwT#XUJ48)3Vz={7Cf#0zsPfLYRWzer
z^1~Ij`NDsUwHG1ZY?e85ww^8@aM#taG`;Hj+rzI=^--$o52(7ny}N1#Gl>`k*R9B@
zSp0ZUj5dkaiG6mp>Vb5~F%(uM{7UsI#SMt(C*TLm*eb0Zs<;GPE%CM-5eS#~1b`Wa
zbAV8NOpih*In)4XwEsLcC=*)LSU{cPN+d&in;bt_+Y&z!ve)|uuD#;pge{4iP}NJP
zv*wrZZ@#B^v(octmYd7|&GqKSnj@|^`}g!&Z-l8gkkbvW<G(0iZPWTK2_*I@Y=0&y
zEJU(boFOj>9T3aLdQH5OO1Ko0^R(BDWxt}wA%c9G+|Nuns+CGlSiLGFma|tjWqQEY
zK2)+VP}Xzx0#tpNWw5d&hi84q8=N!vt7mA>C&a(rg4xUhRzp~EHT8ao%}KE25c83H
zzdz>s@o*(ZriNMeF?QImnAUbou7hPC*RNn>7A)I<U4BP$aGHKF%V24uKOI?1lkhEj
zI(1*UI%r|uv8Xv{U)cmnT+N(V)Xsse(I8xdeB6ToH@={kBiqHs@@66Av!}Nk%fvs1
z^=S>)Xjz}iltH<&j(8pc^fJoBU)*X0Wy+yTb<2XP=+>KbYZXGlI(qb}P@@oK$pM@Q
zf@d$H=7*(bxe9(I2?Y}{3P`RVVC`vXcz!9G0fFc0@xT$ZUPulKfX`6b-@{+aYB*mv
zyeDA2mVCgK3jkoXQYgF6O!hSlbh7{@-_QavZDy?si9P$Lp|WR<*rPHzxN=o4IF!$1
zYgYb_tVJ6G)^=6gEt=e#C4V&Hoy*p8NNt-k$rvO*M)k+B11v>?$Jl}V@R_j#zVOvJ
z(ZX)}*q4YgvI(;a?B5sU7U#7iM&g3mG_?L*xb;T(kJak7lr^ccl46`s=~$Oxwtkey
zI(}4>C-S~3tL46bwfsQJ4>-Jh;PL05)BhACS}5z=z9<Y-2X>*e9DvE!uS`!%poD#E
z?;z%w1cd;o`OJ*=je5QZtWUIxp~$p8bRHLcmpS!k$ZnmhSa#qdlBRD$HjeZ+4IU=P
zJIu|<N0<P8V+%Q4Jss|59Y>O1Q>I>y-IfbghL24Nbg|Nc$d{RN&hE{*Ir}@0ZPDtH
zl)S08%gJ>6!oSvihe1p!z2<vS1XQ3u$moq!85bTUud+g^#a?ZcFLFW2@2>Gg!&jMh
ztW#z{e8|$j$i`uVS+dn!df?PSG_ian3?0~dYi9%5j_yiNG;*?O+oC6nmRGO`&$0b^
z;f2hyg=U*yD_888d~V}EWidw=PH>4_h80zB?5B0<Tq%ttKZ0vL$jG)i>=k+I8n9|K
zH1cjji`v()dozs2yHzGtwWuT#)r#HY-`5fzf!tyF(OPG<1wK;XJSpuhms@a+8)XA*
zO?RBlR|5HTCvh>)ptcHl2hvsgI>VQEpYc!QJ64nDNhlk74S(Wbt>RN`03GL2^qp`Q
zM`h6Uz?K~6-Yeui^^1?OUU4=j{<8ml{8Qyg4Fk84aTk>0{`t<xzjAnCZBPiFV%iGi
zX!*{MG>QhNQDiiV+DonfSm1!6^#U~*I@4(Uo{W`7zKNfZ9c$qeBQvW_rGNx3;*Ryi
z6;H@mx0)p%n@c~}V|_qs270`q)Q}VQuiA->)k3mB79J}ouClt|?CJ3ox5m}}zew#0
zdYm?I(F1&(KyOdZ3kLxrXtquE(Lf5q40-gc4-(*BIciG{$TXk3z1CBm@g6PXjYCQn
zFq!o&(@yrdi(<jq{!;{5(YeZe=|8UYyi1L#&2b`Q*QLf)-M!-SE%_dDoM(R`-$SCO
z?@HVNsp#?DlsK!q&-jWy3RRT#tjX1f#)Df~<;N>Q;61Q_-z^Lr-J!x+C_UmId~n#L
z7$g{JP)=tuF>o|z*!^1TQ)N6f3cv2`fv?RBd^l_1<K=g)W5o6N2kl4N0U~HGEG9Zy
zk(%=d(sN$uNQW}T|86Jp9ZN*0v$wX?#>*^(vmN(NBB^pT6a^D9{^KOZMT{DgmB{VA
z;hPn;Oho+?+cX|7E0Vw^vac680DY+)Q_YvWOF%nuD_SOZ8*w4xHol8_+#{NRx<tQZ
zUz8V_D)q~LF0H`TGi3QF@qxQ(H~^>TD{~`qskF;hgWz@TnWkO(*@6Bur3coe3PTpy
zwZE^T3t0hD{Hg?B!`4Wi8Ta>!b;>2sk1UXz#<M`CIwmuT#YEB7`yT6}yhKEiSzo>~
zhgzG#Ec@(83wTAy3xV6}PG=O%7M!9a;)6(kHXk?^OoS<-`O4wtrgu8$T&`%fQ}XL_
zQa-dU@d5HOCHl6qUFEJ$=O$-M;yGGKaj2I+eP5;Rf!#IXsL`+rv~+KZ8jUhOFfDXE
zN)L}AwjQBxC;Ky~uqM}EQvkGuf8K{fb;w(LnUqx=>S(#_FppciqVGf_r$oy?dY|ed
z*O>OhlEpqRuW?J{oXlW7A#ax(C_tCY-;!ESbOo~5>G75EOWu>=2M7Yzd3lmuf6uTL
zyHE2E^l5cVrqy3btC~c%Y_zI-oa^g=t(p^z6kpiKIQBS?pw)vX>|-o?5+fOYJ#K>A
ze;J=2CjS59lN;Yt_`E}^`?v8a75wM;Of~<n<MS*KcLaRS`O!bbCxS~+_)B)pJkIzA
zx^hlRoNCKqF6C$mNakaDy%n)Xwp#h!Q-rof4z><-PhnX@2&pVK)_!81T{+%}9WUHe
z-IqPJxG7)p=QGl4TF3#TtZCSFQ(l%TwI2VYwN3PMO7y9KG}a3tMaz$tDrhpZsJnA!
z1D|EiEb237o|CtkRXtJbu3wyc6;~K*_iLcld?V(NX<blU(Nro+quVxX@1!HIiQlIt
zIhB55E?tT^iK#-f&5HjeVG1t)%dEBO&O`x;3B1#ZmVv{~DdDI8{7T#-{7yh2uizn3
zEBUAIQOjt<9O+lcv8V4zjHcxj4_fmPt7uyNtK}uljRZeO5MVE1^n73;--zX_p;K7!
z8EbP=W9N#iH@_=mcRph$8$DT46hBJKiArqI6J3B-BgcLx#p}K!#rw*un%60<RN01b
zq>sG%N5N5Q+>lo<N{<`oKxfwg?J~)s#%zW_>(VjHAmi0nc2&#Vjde0!2%SfRIgvTV
z=*u0i&$Gsh_2+yg8>tR7%Q&@z_r!-PPqv)9QN|~6KOb3lmE8K#4+LoB*2!5Ta@~j7
zBa)s^$Tz{bipb&T7~yaJ3q#gt5+r!(-UTuY*l$riwXR{f*Rk5M7KPfupSG1?*;~m{
zAD5`<$_?4X<w6R?t5>x(Hj&B~^tgdZxZ8y{yvS)LX8xj_>IOD6A`%h0l1PZjuVpAk
zBH*q+ft=3wHYU&`=cDL4CVJq6$h%mp)knJg(cTk`h7%Qt8$#Ac!4lj^p20LeWPO|H
zi1|dFBEG;1X)ks#KO*)z$DTAeN7+mf*>5%Pr)bF3DUF6qy_uuq#AvT-bT<0Pdjy#c
zPNVT{*h4@Szv4{lqD6uX*xqMQy<o>B%?0COUmiN<$G=XIz;T<o49D5Vo)GXv%Hq<=
z58fvd!+3g_hmpbpikPi$=b4_3+57i^1c(aQXN(n3;NF5oJE$K$P}v)icQ(u5u8?8j
zphjxnw>1}e>?3n|`MZyEq$Rt=5B9#_YoF;%VICxQk#6P?$W!lL2dTz|U}N)3xZbzL
zM;MotRA#ByLHjIBpK?*WIDrjnGn2SiAjDlpe&UmT?g%GelAAUgsXMWSFD^YD;Na?#
zL&u2t7cc+lH4cM0!D>c|k?))}-rB+J3wt(B=kxXx#N_K8r&T6EnpL>`3R>JAjC&vZ
zll1!?x$_wtGUa6@`(18Vux0exlxB(Y=`E49L6mK&eeWSP#0bAz*$ws9E-?Q5WK_Ls
zl`ZO^%S7e-FfX`LtFlz@v@SEQYUiS?%3=w?WelC_<9{JndM}nd74l`g=7k~-izux5
zB^%#-)5cu1Y@g9^l>+D{wI8SHEP&!P#sqTAlFdr=XIl5(EFg)HjmUjBao3wA4=k1L
zul*y(<Hu23^JV)7<PwADI?@TzSfj3@tFpy|m3-tEk_b8IlrOVlQeEO3<dJog#=2A<
zIp?6(F0~(Wcu32md}lxOeHmW6z6ds)uk(eR#QD^s^D$sUih+i~kjpC9(S~U+mmb0k
z(pG(r3{hXz!wWJ+<B!RDC!KAU-ubN-S#uqd+Ir`NoP9Yt<vCI2SmO@f(wV5*WIZDf
zmb&<eumV+7;{5P0qN`n4%5*cO(v?-V`oJzMfczf6(9>(~f7u*RUlG{<DhEu#<F*Em
z+a>`Hmem1EFg_R^=*z}3wNJJcwoUs2_}A15bKC`x_rgN6q{AHtQOCzy1PD)?IQJ`)
zC3V@%LZ7{G9)<GpKg8q<AQUuo-mavgN{O~_G{|v!?3kkD1sdY|3bW*pvu0y%PKww*
zY9SC?Aq`-ERf)evr4L%047VEafFK*C@hyss>|0imN2|L{Ygrc$GLmVdHKP%>z^hq3
z1diIW5q?*&<$h|2FY5t><T`PlAcXi8m~>V8lADPBt&}oukDNu%WV!$y!fK2L@!C-X
zVO5rbHJ=+Q+@*KdRB!ATl1cSFQ2+_0=L6vzN?uM?zkWk%%tBEYQ!)-p3##eM#dqQ)
z8m)5{KQD^+Y<<7b-|GAR1Nu{j$o=RKVQN@^!VAwzX<8N&e%;%kXuTi$kBoR60u<t9
zCjr6>&i|hb-k(n6!;V1F-QnLNOvn^qzr5%unevgQD!XzXO9~OEsYoCHJGZxhFtu7-
zrbZzWov;IXgZB!R)j5mS2tp%Kaf6TyWt+njIZAM*xALAV8K{WYy@_J}xceKG(Ft>u
zk{T~Lz~o3^Jkk3^LkgSJdAd%M4&5S^r0OSL3JTJE`<51YX;l_-6K0FtnE(++10Is9
zO}^we?pSPqz@$(gT5pM93sUyT*lA)^3rd~y+h?;)9#is&%jA7ajlpAqBE#UF>r2?b
zRf^`G4k*jB?Dg`Wmp}JkDZkHpS;7^u;8a_iG7C;Pml+{E5B_u~f1O1S63erd^Pnc#
z4cG&?>fFEoMQiH3rMm~`bH(weoZb%V-~#15o~!|pGlTYBY97Z6cK<<+@w$Y^l#9l0
z{@e-OR%owsMqm*9y|<2yQm0xDj^%}ObFn;$_}%F)IaPugZATC*9TR@dUbNSFmS7T+
zOBrCy+UT79h(MV5t|EX6>`nGMV%}|s_9kzFP6c1FCG%MSq(3sd&IK;j^HjI(f!6$a
zStAhZ`ZU&FVGT?*U1b-!OF$o%KmXzh-H#8T()0pXYpTvjOkidEP$hBD|Cjz?K#}f8
zYW}3`I@DVBARZIK{gNwS9-1HZAOAY%+%v!ut2|brEbbsL#r@!bh5Rp0Dd+{;?*20F
zy;ZOfAJVv5AtObNrlpoTy1R<Jrq$HNPo4AL>AH!p|Fb44WIm~)@gc9N79JP2Y+ANv
z?z4JK>j|kdtq+m@a2su8pz3&q+A+zl7fHOw*@?|RTHT&4#tJc<-rwn-f5`B;hI55g
z_Eq!zvA-h={+5<77Q-?HJ8-$}YUu&F^ojiwA0%jI)1PR$dy^;f4g0nhlI*E&d``e~
zyK9>`NBfM}FZq_jw@c65EimkEMbE(!uJY9y=zWwW7Vef50r-0_9BaxUjACfl^OY@~
zCyY6L<xEye6JaP-oz<09PgLr`ye2azkQ$mKDhR=Oc#YMGvk95KyE0r9`DSK@Mepi6
z!;IzUQO2!D=BwY@lxFs4!H`$+&WtTEu@saE7roKz-a{=<JAUZ}6Dp6g(jCf5U6Id!
zqUY*ci*`B>oT5#5$uH|`io%?=@Gz`Q+6D|B`=^60^Qtzg_hzwZXuXh-YNCRig~e0~
zzxGWn0M)o<@rmhCm{-WPJw-%EGg}YjI$ycXD{+PspQ%L`2$4PQ8O3~dTI7_SPp@XL
z$0DDW)%c8MlX;tXQhmzs5fC~TR^m5SJmcU0X5tP$r`F{N`bqB7W3}l_{4D+68OOVX
zY@>8O=PUAjRQfqJAN#~-);=KVont$v%bEvWM_<|FVbCkiybbTcKB5Qa8x5Now<ve7
zp6_2LjMT4J$cj7><7$aB_Y5w-pZrN&spnx0(IRfb3zmfW`vc>~Z{#9+efUEjM$Z2M
zDwgiRoHHH?dfxhW@4K>2_p!rL_Dg*(kaz$P7#g$h?Gc%6ihpSrciYRR&adJ$2j%2h
zw8d3}SU(Q=F_5u#KE4+Co&WxvW!91lHNv+A;)^&IpSb&Z>|+CuvcKYGV=#WXcm2si
zgY2fo_^ysG%mWG59A7X1|C%0Ii9;*NZ8Urt$dKyMKocg9Lw-EWt5^0Ge18)}F9-j2
zsChG}LKPu4V6TFOpk1({Ri*?RhE{G{2-;)hIq+1^(*VqcaLKPX`(y9=!p9Iv`VsM(
zY4Wq>o(xJic%%|JQ{#YpUwpxf)yALCxVj?Rd;0w6i4Xht`sbx!q;1lvk!@U1k&B@i
zc{h7bmHRHFrsSVBeK3G@Fg1Vxl{iaiCB5y7ZjFM=#ACcv@`_y_ZhhC+ddL^s#-4_U
z5A!RU>aR(Ny|e6V_`Y;&4ty+?t0FsBhEB8U$<59o{$)~+G+IF#G8u<HL8neO8YW6g
z>={lbk@zZq+<wGsh{@IKS#p9}uuC>r9r3F@kX{&zYGOmQcsA#iom#f<>QBvhaHt0Y
z#-S}YCo<NwhZMC8V`HrA!N}=CkJlb?v%hHsgw}!~Pb4W~827@WWm)Ome>|Id##1&*
za@2%$SLYn{g;3?9)#58CV}cD9$*)S%<zjZN57XM26o8u8k=7P+%nE1FJg%)`w)&zU
z1NIGLS4qZr?d9w<R!Wka<=d411a(paAL8fFWEZf;Y>P&DrC+OE9LwM;-n2zqQt#WM
z>qsKgP_nsQe(Y$MdQ#_={<em(Ej&sci5u8BFc1B%y%4N4Q7n52byT&||I|n_IVUo8
zFqv3c=L|l`WNX``<cDhO<gtkWnIY$Osxr~L)Hx=?ubYQz=2qJ$k9GDS^CX`~SU_i$
z^6z<x1^(h2F<RGABPL$H2R%i+{Ks3Flw<!}TFlOUFS)-dx#!XpbN4Kr`vl3|y(&c)
zX?d#QR{$>hO<Aq&<t;q1qnn-L;?|-btit<n^7C(&1!hrC_rQwCIP!H;gf^e}oroY=
z$N2N7Vr0|P+bk=X<llnFN%eSHl7)|__`fv38t@k-A}#7k-lyq}yvLH4hX#t1-&(W}
z#?j+Qgd%F=yra4&`TO*D>5n~db-vL^{MMY+c}C-IepzAAdd|o<mR$!jlonUX8%i-#
z$o+_1aMbV{KHVpFqDI3u1!}<^ZP)@5r1+)oO;IANsh8>$C|bTz6hi6P{9-;}G>Tjj
zDBGl6Qu}CQrzjZo$&+1RQmuI8+quE`3HE;t%Q>Nm@8wa|^iQe8-(8KR!vz6*h2Sh&
zevve$)c$e4%FK%Jn^LO>>_*Af#(#FqV>I5ft1KilEgeTo(3f-Ual%^fSHor3mx{%d
zRqqRy?B<7A$0b%){doQt^S>yqk`iN0^bHl%z&QDP31$R+l)C#Z(^H90!GT^}^*plq
zYz7ojjKj@EP;jLL=8ds7m+fW+z^6BR_Hb)^Y->?$3%6$}cgS8mwyfcO%Mo|T6h{|s
z?7Cn+p;N=YI%my(*}_Ek9I`Ny-RYc<+SMMQN3ikR!u|%bN~F$F1#6e`QXjwttva8!
zWwMtEB0x{>Zv{QA!IE9BNy7a4^|H)hveR2zm=L`s@ayx4gxE$Y`ejRwRHSVS0`^lf
z5U#Dq&17-joC?cWt}<)-b?#3J-PV^T9^|d7KmQcLCk3aR$1YcS3W}ZqB6SR#)en67
zoVIfXyVE-pt0}0*JJw#5+2Ld#LMegV+L&1R%KHMpdK4cK&H(C<&glJ9Ghe2v)3#U5
ztsXjO2x+U#r;vHe#>_n5u~P7rJ<khpx+vPx+a=>0GxC+HnG&fP`_TJYGnQDLQE=t%
zU(%td3Y}-wymswGhFp1ABVUq6ga~CX-P@)1RWnr0_%7<#X)xd~iXRx=txV64p<wCe
z1?n6QR#sEg{fsXhQqqZHlE|U4gX}z30hn1fqrzyw(F~r3L}AqwH+>n#f-dtnypwD0
z2gMFz&?fp^V=Z{mTYFWR_>Bq6>3)V)?kx2%ze1FE4N5O4BCR!ly#41Esoes<R!yPR
z9(|4klCU*{p~MUFCeaxz-K9B_3LtCE7%%YY%QqC`q)}#L;+Mo$)O3*Mr|{Bwyp^qs
za>7xgk(jP13B05^{COD;@AT*JSJ__dpL@gfZV?}66esqj=$<F`rZebBhkF;H%bx`-
zi`=xo4;O8UM_QB1()?MzIrknX_)%4s+Qwz3@iTbFj6%K9t??x`saB$3hiubmL+Zm^
zCDi2%9+N66D&ZOMs}6Hq4NA*))2L~+4YOoJ;>N7`=E}>lEk%}rfxN8o3KK9PRlm@O
zA_}dfhbkBW=|kDe^{1qeWZc-OKv}*@{q$W1&%NFYOO|8qdY?J2UXE-%kp-eND@S~B
z7sY#4^qVZka#?RvJI&tasMIXDzD(Gr+-{P^A;l;~$cy<acwM<q+`7Xz$~;q@Np@x7
z7atY5W$=YB3!-?C>c&x>XLCZ1@KSsxOAoUmE8ZNoA$m>?cu!_459lir7gA8uR|;QZ
zTO^!;71ZW>U~5yL<i+5Cdlld3FtV1z4o`%L(n{I<Zk^NcJ7k=)O_6g%<-n*Z?k_^6
z*6g|pB8gY`Wd%3@k3(BmvMKqb;<M~$lADD89#f>d{Cq!n#NJ7*=~~I3t=(@2N-=@X
zk-d>!S?tFu*}kAig(4=JK-t1VjKXngDce9$n9av+^IQAH2ymH<38U$YTx-S_iiEI)
z6&l?H!Iy;|NWl&6l7VyWn&K0mx<!q1kj-xDEa$g*WYCxCFfjTcK^CKj;R{*|nth7!
zJKhEd+%p@5Crue|7PiZeRf~SZHN1qL`P-Y=N<OuYa_j-7d|(PF6#8Y#Hw5`k7=NP)
zyt`@#r-OR1Zjwy)0Oj;PfsPgCgufw56z)E~fGNG*95)qW`8ZJa+;!Y^_^xqN31~~x
z7ZLnk{naofSbeN|P8kjkLdcDT6)zzkc1Q5IcLODV3zj+S$bkPv5E@kTAYcSPW5viu
zPKdgds>GcE9E5<ICb3^pkrVz#H&U~xZ^=1oFe~QCT8aq6g?<qn3z1Jiy%iVzv0%GH
zY_o4V2^?_jqF#DhrJu3mKSGHmm{8m&;CTtTC20MWyKSy$!HNMriB`4=-Ti=Zpx?W0
z9+uNA<Kdh5kAS*_hN|Q$HD$t>nbcoXiZ<1#8lx21r&?h#7dc-CJ~SHN5qOtw68tI2
zDP_F|-{w3<Tx`PyX1o$Ps7-FxTm2!rvEwBiqCj`<X!l&Oe<KM$(t=CL_fWMx9P2xn
z-P9s%>GBz=vRy_@>`BDV>_vVvnyGi2`)j7euWCZ~k(9r<FG)M8^T0X9!Etkn7}dz2
z5PnNd?+Af=x@4FwuZ&V3g@y{`EOd?2%!PEQ*(GXGbjVVIjk*?G;|1SQFtISW`e<Xh
z(z|u1c&fj5MU+k`<()o%Y*A-EY5?f#)syJH58x17Wsww(b8=P4+N<v)S1%ie00UD?
zze@CG<TSD0sFJQwKDj=l4<I;-qNrFGarFKwLx6DVIUoZKS&4?NSRx!W-Az@QzWnkg
z!Ebh7wgbAWLsZ>J)T_4P2P!y$Gj|uLvsF5Az53*?zt&?#iuQH3a+OWLa&yPQLI&Pc
zeIv5!I}ewZ%zi7LUEc>?(yV^v);FK}oR@f?*b5xavy!?-XfZvoEZI4UN-A|8P{kDo
zN_-VC>zp8Gkb#ot5@Jpu<DR{~un`ru{VK)%%9&gi6)k_M%LhJ}53w&$-Ut(hoht$x
zk;O9NLr%W&u!VOQnJ3^olr=|Pwj=rq;bxi>D)wMnZNyFbI%CJ_>MOyr_e>+SSxsbj
zl}6>Sb!~E{j@)~|6K1~~aq67&i6I~>umZ7hmW+zj%@HdhV8<t>@dAH8Td$cS6OLm&
zr8?;C`&22X^kV<R%W-@Zk3*^TAX`DTt`AUXq)Jxb&)g*-aX_I__=Lsz`Z+tLP1f%r
z(s+72L`8wVfp@)$N&NX=&ZA%t?!LZ!_YHzcOtwEy?T?5z!+I7Kq+tnnnmgrFqKc+R
zYx)~$kz&nToa6B9N)^c#cQM1kKCMqv@_NlYOs;aRw#cBw7c1mMwStJmzg0)8>id#;
zi8F4^l~^NMzUTST>vg^q{iIJo>?JHv^(+gAoPBq5a!0@lWD@2fuaT(|Q*YyCzxJhm
zUiYC#SGqvnkz<CqpwQ|j#sS)a<cXQ`&g;MCJPUMuD^T)`=~0%(0ncU@v&9!GS%}4<
z8^wQa_$8<1H!ABdUdn18`G&EV!vuYhNoxzT_SEijkg?y;nUmXbqI*6CFXE!G@TI`0
zRUOJc3RqpF6teo;ON#e*bZ=q<qwNW>4k>G^|E}C_Vr{^CEl~C%>bwp#wE<%afgGlH
z_7<#>qkXoW+-HD>uLB{qSQgHb?Ez1F<TxNPOWOPF+M&agoGpSyN*bPc+x70G%t%SX
zOA+up*9%n&U7-NP+FQvo64*kG;kbHC3lA+Ze)$KXIXv)p1aRTp-yJAHiTx)<hwzIV
zNlcB0QBKK`=uWBCxd)oZ*RzwAM;$Gu<rxtf&W-1tXqFrZmhG+w`MVVIWOlk|6cyR@
zA@W4*4Q83dR*04!P5ddw3Oy)jGt})=)S%5Bl%p-yAQ7d?06l3f2zUW-rPmg3Hy{Mj
z?E9a7T^0pxAuWPZS<BVa%#zl`2>|2D?SkdD4GKvh8&50lXm%A0QTi=7WMHVPlDfcP
zhf*Ni3BX!jc1Ow6k@ybpTtE$y{q{rp{6i5=ifSMNhF7V|<a~pQ+mVW%ZIWnG`kwjs
z1pu}|EUa*`&q8Hi7_rT~6TaNIn}qC*jK&_7ZEC5ql-a1uFhREk%Jv(}lJcwuS@dl|
z<qo#LTU{G=KnBS@kG7_=o=){icd%s%VkK`)E#`j_|Hr2e^!}=95ERQ%o+zx08&&;!
zZUu;P+fQdj9F6cv=`MJlaeJ}sEHF-x0S-BO3%-kmK+v<0US8RroRJ=v1Buxx6Q*su
zLnZI^7A#fy<`7-w8P)FwAK!tc&N*`k3*rkhCQ6<xCPI=DK_sY=)EX-JyUZgbf-Lb*
zj~|23;?%t=V~by_a+XZ@?WVCbAWR^OpNNomWxKVVD$_bPrCv+k?&@E)UM*XmoVh1k
zo;)xVU^Rt6w~D_8a4Dfm<{k&PDSxgaw#`1-42lF^wzb}`wt&;<FsDA9&}A1i?l?bv
zP0={~Ez~7pOG5++`Lm`0N?(vFT^BnBb>NQ3r9pyhE4EUk3`%kN1qF^<Wk+wpSHx;X
z=zJX3X=*O<Q{6?pn`1OFs!GKy&8~()eIhLap0R8W$O8Xm+odjXXEkbI7qWXsvtVuQ
zEoc?f57|Kvi10$FI>ddjEy~k3i+{LV{D~VHhvkGy+PQp%sVg|p8$bdhixuBCVC$`|
z2zvIZXiI8&UiFHg0&raOw&Y7${#h6jzLae~Sm->YW^_uUZ~@J!hEm>g^GBois?c=f
z?m#rd5rrIC;R&bGpzs44N-wyXl%fY2U(@y$tRNoB+Jd(pAEwU)m^o@a>8?OAz0kDR
zh@uk@3Gw!Rh@{AAkMpbD9kS`q`_`>0*2RTHje3Ek{A=^Jx+z)6qVg)^@UTwlP{qx{
zxJf<%#tgu4^KsntN85Y7sxv$c9z4tPUdL0W9`BWI-OIg~l8WKn{~Jz8E+9QC5&D*F
zo1tUwzPUjIn_MGPCeyw;MbgUj#J8al=UB=lWbZBc)PjnxAt14S+;tTT&)DA5plGA)
zOJ|2lUL-h)(J+i1lB_0HpR07tIg|5Edl-iHCUNM6!aoSu*USvri%srJ43s>JYgVYF
zCsfvXbycXOlko8ag-tf)!Eu$#`u!vV*5X<hA5|snU+k~YV&pT{{n)0`ESABz2jZ1;
znJ}xN>NUu+crLGl$XDU}-vUXr*E!=}2l+C*3lvWmui#lN!FUB{8)OytUTI$Rpj?=D
zG^EP9B}cckm6*#7SkU%sb<RD1kW;@<3-coopE93o&j`^@8RphHY;u|TEyPdm;sx$O
zp>aPe4A_^<W=6KK-wIjhnZW@eX3lvtxfQ5Zu-7Q8EHREh;6vn%aWy8V?7}a%nx1Xc
z$GXoQsiBtM0_z@DAp08F<@+cV3F)w?B`{#I$rS7@_!HlxIhtyhCPM?Jfakr*+tT|R
zJF-emP*6jkq)vj7c((NxY@jI9AMkgBxZZ*vN;C9Lpr#jVq>qiGfv`XP?omMl-4_JV
zFo*+7i7UwrlborxDbhi-z_p1fFnz6@l`{)0n!F3xQ3+>7#TMIJk*&#sIUSVfjtc*6
z)$P)P^XddSBRXxZ97tvSS-n5GnQ&9uMPQWZ6U2M(5M!J<m>O~pS-1gJzFGxm@ql1x
zjX9P?_ok@PC<mTq${BRWV}0wF1Fv%=gVcK>Rb=YLUA9{4wA1dgSWw@I`4E>^Bi4#q
zgKf*@rj-lfg|YBymRI%wYeRJR5^FdU{xTX<ApBb8RUQ<0`U<x>hBhJB#yQe<+EGEb
z)aLzev&&&9N0r_m@GQjr7*BF^<E`a|V9@z=yg*T%ZHfAzR2kb;!3@gqrC7Pcz=J07
zNf^5X;I=$E4AVH++1{IUW48AIDLB&#v>d<TL(=`Q-1{ae;XpTt-8gCIIR-1Skg8IA
zPx`WsfloPx;Q+ji$25Jmd2e@XYxCM}Dk0*CmItJBQ94Jfv)r%JPk)~6{SnVndmfn+
zVvZ^NE9MRH+LIWj+NgjPe@mXF2CLvql8GL6@tH+|dcC}rf2n$h@GSNIkt&o2v*w?D
zeMZFJdCB*{)_*;MDfnN>s^L}sJ>nji>VLfa@f#Tu_>!~lR2h=#>k>c9`Ys<{Nqx9a
zU{n0ti7|f3JL;Tc?mTS&);%y9N%>_Z?q@P(tw*W-Av3F%*^;*D>EUcAidQ_R$>{@k
zoJvtLirT#*XK>VvBV<^MS~zBldtd62DT*i}+n`Xp*;d^tC~`vIlm*NChlhoCl)o1r
zE>rRh*MB<H-q1q-FyL3d4y{6NWrvK0ViH-Q!tSG#(P*n#Iq`0JSnHiG6<P(0dFr0*
zi882^$*NkNN(a#uG%zr~=UY&&%R5y~OD*K@!&!Hr4jgCNt`FoqpM4sY_dGN#XX(2+
zQNe!s!8?&|<3m1^AM1KGSFLL=7nS2N!T99MgVu8Wu3!f_<k}GNKMLv^{q}-90BEQI
z0C7<eyY)a@g-=kEYP8M!*bVNqDcDF#ue730`)|qB=6%5Z+~)nAn@TRq&|}OS=dCC4
zkxRd(Juv_vOs~oEV?CjvyBdhQvDAwLy0zYgxJYuec_+Hn+69%Q8d@UDScOmG!x`>}
z<pn2_Qog+sS4YAXK7*N4VkguW!@sHE7(OQ*MTc$PZaX!9ChjN6D0T9qN9ht~-H}Eq
zB=hIHbRjkC=Q9#|2$Uu)(_ipj1!zmDQvTsS;U{dkUC_jfM3tJ<QTafgS^e|Ol{~Wb
z6FDF~4BCzL%-A91tLrHV0qlQ}IV!Q~^m%j|l)m$HDAmb4l~orRqTQ(gDKcLX3ZUyq
zdm;#e`sDa({~SvtN4$LV^->iPd!AAmLhXs$XkERzpErOs7m!5QNXSLNb<PRD7j+DB
zo0d<}huJe`E<H)>yxDT7lfaspXv+{2X7Im;?O}~i+n1_Mi7j8JnM)0|s#!C5lG8(K
zvZnE?%DDMO#uF<TYAeR}u&Dl9X)V~0H+~^hmVN3y3#QPso{{K9XTdfujJu{7%hVLx
zqq;YHBB#)7scNK*BlkRMGWsq7#%p}mDE^M;f6)Y7A2eShbFE}fzV1G!PS5L~1wko$
zmmBz~<qN@wO+7TY#H6|KnCQEQL<8MsjI1D(ZG|soO|^htay4bGvYseT_Yqr~I_I*N
zWhAS6L_3x;!=kJyQ1yMIm|;JDnmQ(p9No6O1&R_>WH9zW3;JX1nBLiiDfnGDiY&}1
zQeAD@D&?ztY~HCJR}^y6ukoS!t6GsMw4T;7ZAx7!Wd)m01QZoNL=He@V~M5XvcFNl
z9>8%|xD>k)&OT<M*`3L1Zez}CUr;ER+aiCU@Jcz5Zsog)wh&8VV)d-0I43BxbHX!F
z5<ogTog_Cq3MjJsNo%-<Jf^M>%OVqF`JF05w(WvikL9pV!b2z#a3lVz3u|-2Yehr1
z&=few0H-^im5gVlPXWtVat?$bo;d}&lOr2FT9q?tO8jz6H!2nLMhtP>Gvugzb%qNw
zlXDMIX6Yl<xAZ>IaRzQt1K=bidKfSN!Fd03{A&xpe-r<$(p`Mn(zs{n!2J_ItvomS
z;$Lp86#Tc!=ahzV$i!><5uLGI)+u(##iAq-Ot^L`|HttE^%wp({4?=T5pn?3e;n+C
z?l`=7_&6+SbH_m#eTM$oclKx&Rm7|>_1kRVdc%3EJ>la5R&52&k?o$??n8}R0@l1z
zqk4ni%Gl>yp*?VD2mZ~rN~Zo#cgXV1Wa9&_xA5_ORG3`r%4dq-iqbEv<NSz0{(;rG
z;iJ=r-dD0^nfOdt@GV>ukd#H0Ix5IScez20-gMx`n(A^0FY-;AgKJ$|YI9S>!@|wX
z`1LXQaXWJc-7u|lOHJ$Q3X34=ivOGOKkKYFNmi9Zxa)lUI}~fuoeS-wgLLl3?K0-l
zE8f_V9y>SrKPkRSs06Vi{0gxX$--wYmigWh>0M9FEc|2T_+q{4aEjfe*j=BML7k7(
z7Rj1`85OhOa2fz<=)`V&MvrrHn~u-JMxO0o+M+?CDvRz_l=`>Q>wvYNJG?Pjn+6cv
zPnfL9$O~%oEb%e|C2xfgf#wA4+dBoRR%fuJ%k|v(30Br;iZ1g4wP2kcQ1>=}=;5ZF
z;($Giqkx_D@UDZwvQGm>&0A*d;D~Gfpl-!`E#TSNTX65MrQPb{<ZqjUC6RVem(ly{
zvuco~*C*%6O&qJ<lzyJjlKPUxRI-vlHez7Yh=EF_UbZpvk?Gk<n*nQ4aiWCL(d)lD
zlfuvRysKptu-R)(ok<Pson0Y(HMOpQxGrb`f_Lpk#{rLwHDlfdNkAH6Lt0Vc@&l<~
z%KB#zVJ)rZNonGUEUvYjhz(_%>yJ*J#11wxCs49e6vtD7)_&*vnEuL$bKm1NzJNVN
zWqem|c`xe$nW#=Sa<n|+8vLu@Ly+h#_#UP~0na6<i8m$JHfz-{dhKl0FDy8|px0`h
z(9#Tgj>7aB4|^4d5&XofzU>Lc=T7o)Q?f7db8vL{d0u?T*q<wU6`fV8GpG`TvfKl{
zY|1s3uTUf-fwyFhX!t#k5`Jf4DdGKy%^To6D_j-p`g_Rp4(kzp_r`X6!qbA*oKjhX
zn3ot+RPf2_lr@Y0+I1=07Botw%wUXQ?-yDL#_y6Tt*cv0b&-eaoadjH^*VWPntqrs
zolYGGAdF#W>L{m5_D{(>W!(GH$2aHorw>EUp(@M?JB0mHE=4CQE<_fY<k1ANAvC3=
zsRXU}gdHM_q}8V>dJ#tObWRZy4V-d+Jlh&kZp>8vv*0$~Bp+GUUFP<+Sl1!egHmh2
zIuE_()S{x#`mE_T#DVYD=TtdGt|2GcrumR$R(uH&t^au21>adR9E`|FY_7Q`XDQ~)
ze>!Nk)m%<XSa(=w8Y>7-X$-CLwRR1>%u;IB%dDC(v>?h?J}_D}#r!YjKjIIvGo3Nq
z>%Nc>)s_yIbMK^!24_iNc-^&28~ihdE?>pZ5#_~#hZq09g70_J{{#5E!+?*8U2EC}
zNi4eBynkQhZt@y;gwN6=kj1pJlJ?|qYnQLJ$2T~7nMK;kZ<>s0;CI-M?uhKx`w_d~
zVXFJTKR)1I%?CaHnf9zR?TO=oAWae7jIa-yz?+v;p%6vYk*MOIQiOF|3uDfaH9N4I
zWcal}>aQh<I$>!SKgLjxG1QNNmA{Dp<N03!*{qfv{L7*sy`HxzGJ>o1COh5!;98jG
z2ifzFsRw)JykGcH_W)1$JFL31g>sKg=TFhDDMC|A1lGUMl>DQzB<Y!31dd8m;OQO^
zjeI3FGvOE9pU79~7Cfyq`TLYKnW)4D*@e$FYf$j_gAaC#Jx5thVf{e0I}D$bky)4i
zRG3xPo?-r3>d<JsEGGl);j!HxVHK~0_zeH4D4o|Ec~S-XXGd9KtlgY^MfjjaI8_lX
zCOrioBW>e#`cMkK6b!?VNZ55t{FjQ}*hwG3N)YCT^!!Av6`(W!NUOvAuVn3b$IE6{
z031Mh@!wCavm5^+Jlgfo*p|k>;?Hw9XluvD5XF0P6hLLo9}@*j^sJ-dHDxbf{fVas
zBt~T%ureS5T9&^k_891K*JPCBX;oe);!~VB&a~fFEvg@|TD``37`xJF`7w8BHTGy%
zC+DraHmxRKg}O{`(``5hwO`iF28CoX8t3xTw8jkQfjbpm#9~Vw^BjbIW1WUWY3q;C
zqC84-f`5i}m9%WnD>BRG6&lO9Q!&TBU><V={eW^zt;cCbpXP~W<NIlY(S(2@r-id!
zcZe#Zx{DL!Xk;?l^CoJImRJ3rZrGCvCR9nivi}*!Z^{vYdL^4yt@Xn%`mbMTU6N^k
zAFjknl_^E7F~{*<H8VA>^ndeqjjgO8nfgRQc_4}Ae=qIy(fkh==rfxCD($dZ4Tv{M
z^bTeuI+e<zt53A2&Xbd+<C)pKL`*_VSSGPA6ZyPKNr^{B(JvLmJJ$<aK<k2G4J4?R
z!z!by3)N$j#FeujX#u*%?!|Xd%PNwIWxUngTa?+8^D^=G;RR_w4!8TRAIDb8I0X<-
zLXPK^{`w>ZV3ZnV==-d{(enH7e}Y^@ma)CN<||!!gV<ZD^M?*z2;DmMg@UK7tGA3s
z2_z`z4>}~Jf0o4VN+}3A7LbVB%&##wOBME*@5F~m>uuf$&y-Z;*eH>zv*iKXdx-|2
zaS=eHC7i~i{A=@;yQzdkB~9bI&3lUbe!2H+q|oCVH=ZkH<K+g=&e6w$iZWFMe#q2X
z?Ysi&>C0+$^5x>!`_46@r`?YFUCjs1ARR;XnLxy^1EtQV%HNhM@8v!1+)Ghs_bA%2
zDPHHCq>Q_w0(Od@imkWcQI5#Wxmk*QJ^Lq$Ib-(he{`fwn<2PBiP}6p`>ScmJtW&L
z*q7P=V<<Rl_J5fyM&pfYQjRI$0o=cAyR$z;A*TN3A2IdCUZpubb?(HSDEmB)__BKH
z{6w|G)REg9`%ImjzEj5@aDtCF<?=dwrJ9)&(hQ(ds#gp^bhuFOHAkHM&5U?;q~CmB
zNeOk*cPd}xn5{wL_h%Z5Y(4U<lM~|g<YdW!I~68=Oj6II<jNHN{Ns5f(SMxh8HU8=
zq*D3Sd>W=+L;;I2`tfhF=FfkJ`^}$bUa0wVdI7`Lcm5otJoCrYW)G|!&}Y{Ck@G5<
zKj%vo_LyN9p|yESd7xW*@|;EvA=a$*$o76!gOHj(29NR&nXq1``p=&a-1p19J4t2F
zpTF|#Yz6Sl{E2y=;-x2XFO;92C-04rzA;Ze>^o1cdd!_?%Dy&UzC`MKg3O5@kg?9`
z{iSHh`@o-?FEURMj>eo!k<H#yq)m8#xCnY(LvQMwIW5xWe~BChj=W^xd!)<kCvT+c
zOL<%91M2Lx*ZFRbOyWg&-s;uYk3~$}d)J#nH>|_o0Bh0m*lqo0;*(dWXW}}U2S-?k
zo5_-1hix9{PZ0AnwTR(%EHiP^51ENe=tN3x5dVpg7kXcv8~Kus10#n`Co|}o__R!d
z$i(#AdJpx6o?CLyku0u@`Td9U>z$wXpI?&O8nd1E{npdC)C~VQY&}iK*A>5wK1^Y%
zAS1J$YW;A{f1n>;hO!)~b|$z<$*+XcZsCb#_(o;Y=*lb-QNn24z+@1t8I7WujFx{s
zk8VbeU+syAH-q<W9+moS%&Vk~k(F#^jiE6`KSva6ek(oWwmHQ-W~Sm;Ecuc>AW^U8
zT@+BV;#Ul-l2J>{P~X(z$$A}EPt5Co%x8W=76*QulbB6P@s~DLO4T1NAB4Vz?&<Z}
z59|zZW_=#d3&mev$QQi#S)X10!uqTt@AhAx<=z$HFCSl}DD&Y);V+#$&~eRQE_Nq*
zAO5nQ971D@V1jV#2YHl#ocp_}{`@8GzF+QLLMofTT*b5Vlc9b2%Pd~@TZfmczQJGa
z0-&sQ*m%h0FXDQ^I{Y=M?|Wo+*Wo*s9g)A-UqS)vLobXwWrVY`DZc1Co=AZ?Zc3pg
z)=pDqi>Zfo(QL72A2%hx-^*-0OupVfa6A_2apvt2a3Z3r+eaI2y<-lqR~?=;D6}13
zKbw*)e5?J3c!S%MXUop;RANQUPL2QxZh1CfYHNsxO<9lZ51Gojnf<2P)b*<m+kJYa
z*Bf0wdpzpKqpH@2#hfQH)EtMDT9aRrxrcFFZN7e?#8wLH_Eq_^#hhLJivE~$rsUhB
zuqLnIT(D4%_lh~*V-K0n*&!#OoE^@TJnZ4Xvz%d0<G-A1ZZ|!s3wicwxG0}5r;!eG
zSDlj<Mz^6|pElDPC6NP-ky4PuQ!3;5WpS%96u--K6`B2}hBou8;EgTeM2z?iHM3<5
zuo316YcVGUK$LxiwZRx!GgDLzm{8bqKr4Wv8k@$E<ks*+R~08D(8Do7ozuaY8dLB{
zr;=&?n^rK?D6U4;CcTXc5UF2*Z@S<5L?4;BhI-RPi(6=q3YKlFKM}0x`|kp5FauVF
zue#}cx!DFf&_0){K9%cfDyCBcVP};!y+f=#E!N2R=wayV95`E@^ZFy?5tbsx4^S>|
zUxkRfSo_-9#425M*{f!JlF!6-)tLOOS<(rj>zp6rUC2R9rzoWf2#6V8dzC%CBM`3u
zJ)6TNnCx|60!O=8t5$bmS%-4)PwQCq>{%V;l*s5^7^XQPYi41<^EyBIA<L{yjD@je
z=vxiWFXSR5&dP)Kw3*NWy)N`y`2o8YUlJ1oIg{Vond&A27oQ-+-&-Z20hb99R4sDP
z9hR*?1T^Rxx?a|%y#Uh%fBtcReXifm5839-06N#?3bvwxwx<Q7l;~6ir5k^ESh^8%
zM9C>e!PTA8_3(uCl2c+KT5^_Ei`{V|q+~_zX-S}BCOE&Cu`8lX1W5_D)(gK)Zqa;A
z(WmyAge0_n*rj2`caHSEzkaEI{*C?Szeya`CBw9;Q|jwq9!y`JO^=+`^O%|M(eemh
zN)U^8?T?kgkQNX0eH7p1+&X-0MkE+=J$WMIO{>5nu`%Xd#E&OkUz_(bc^0%;1$B}`
z;{jz!c`c9nkPZqa99Q&cX;jYS3d;GU{EG#C?muO3$?o-d-iF68lw(+!M)Dy4+Pryg
zibh$v!h_YucK_wlmh3k^ASM5he@U@EEq;&2Um%^>MvHy*5gPyAhukt0f51&rdlmY5
zCQ0A3u;QS7RVlNuLUblX$BYl5x7`Ch;StFG#Y&r=WdaM|D+=06z}NJ3_(@sS&zWLE
zxfr9^5GJXotdZli7U9;dK@3Mj*5`7x!6HWXcyR1o9jb^cgVr#CDe#wt%u?&4I_LDq
z6v<*Pi`i&fWvTRdYW%_?N^Dl)p5O-B`jy)pr|g!M>;l+MCE!=L*rDfuUU~V{SBOb$
z5bsk@3%(-Q6-<RIN>)r3EV7p*h)!4}*>PPZG6z{XEs#9<A$)YXNNG1#!oCUJ!4izt
zpSu=$7(Dd3&k&T0o2OI<1mNNVpRTqL5OlTqG_Tz!D#ugpqWjPT=9@&1*+suN;QeyL
zG5nN|=EqsbF=;mas`D~^sg!FG&CMdHyXU~JoF{+6)s69sB{CVN(4bSUkN+0ib518Y
z<qBC>j4cWn)tkAajl;&OH|0g4{NX^XYHV@9x_IpPkQE-AA0P@(mtdKH?f}n1-{|?o
zRkxxrgq?z$jmca4u1}3S)C`_(m>uSv9YRh=0QNEg_De?s*1~D={|K;Ze|IE!Z|)24
zbOo-!nX)hkpKRaQx9A>#+Zh7xr9XCYo5t*fEzWB@@#~2V9_v%6&7f0K#qwvo;It1q
zAsC;#X+9!8SM`H0YexDdzA;B$XtOsUv{W+}xlP^LE}ryDcjXMmljQT9JZ61^(tFs`
z($g1RHG2WfwQC^EgEE;tFH02SWgPj*d^Q?qQW;UHhs_O0+}m?`Vise5zQ4|i{88qu
z_BxU{rc7F<Y<qZY(E3<U**a$^@vGESZF-23?i7_=L2f^ZPa4Hm1m9si8m$d=&R8<5
zX{(O8cTSCuIMZo<OJ*&OyY|%LptX=W=*YD3^aMShi+K>=Sj71zlL#)#6N=3A6A~Hj
zo>t{}96)=+=b3Ro0#{{mRnu{N5GAOx2CI}CZ5RL@BPZqQ%^namawMa^?C+E)d#P_x
znE__mR8@Q`-piW``^|RvW^^0CO!Fx*5k4}lSk(N9C`+VX4-|<dmn(Y%)+hJ^VolkG
zddxdG+qO2?hP7?~%a|lGg5hE0;MAg{{x}I3qxf?49b|MQISd=7!BD0ZCwHp%?pm3a
z&lG=0UZsAzECSC4M!Yb+UdeZ;e4ihQRoRb>=N9vtA`u?v7a7CaMHt=62DS0O=(N=e
zNhx9y{d4yw2<`@<3L%dR)IPa}7|=5cHUH)2I_`!Gmf$4#LN!%1M9CYp-tyyGBC!JI
z`+_Ae%S~nbJMpwLZaPkCQ1BySEKw)+EyfMU@HXh#94PzLxZx@)Ae`)JArEc>H5}5<
z$WMkfKIOP#kU-S%K7d|kT-hQq6^;WM49)gyp_lxHuy}@FH4Q)9$Mu9WYWrmf?*!e1
z|G+Q>`pfP`cPq1E0&ioxa>FgEPn&2h)h9-Lez7@@;3e6;2uR;#US@UmTY?F<Q@e$l
zh=s$2baV<j*~fM&J$?$er_iLrwuq8~;EeuCJ!vzsC>7<Xpn`7qjfTHNZ;4|m1d<x$
zGZU5Y4&v{{GN}UUy7HxZe~0^iE+yRe%A3DRJCAi@yo40&AVUKxaf)`j!NL%k_lejz
z%fX6COOK(h$Qc?oKw$k7UwXIHeSJz94Pr!^hR;QNLPA9ezgDD_I9X?5UiI~&PId_W
zb`Rw4Fs3W_`NpvZ%$^6@o=40xQzoUU<H;OPcsPfVN^TIPNZXdg__rBvWt8<Y>`it)
z$v35brQT*2t~EzJLZ-5HiZ}Z>lCq=n7v)yL_8x9dVfG^0OgcewiF{_Y#&-Rk3%ZUD
zcO^gNxlese%0hCFP`Ufm$8Hf1sZmrroEo;|N)3^}#k$I3Jw6G8p9YEWdgG6BO+MpI
z8Gz_7c4)hCIvk4pdKBe{Mn0s}q!T0x3-MqUdzGqE;IVNQ$PFK}4v-0+g(!AbGuIQV
z*b-_3ux=|K46j+9L*Sch@Cp7~_yxJpV4DcF2R9*@SnoKeuTtYopAXZ2+5`R8zJ5)d
z(_Ce3PPL*MsEBq)(~Z0=jck`jo|8s??KZOQjuii-ohVQ#d`dM;sGRjn`Qrkc{hgYZ
zrt+jdXJ%L?mD-=ojZQitAEdHqiY2`^N6IK%3)`xng9+x$-JGYh;f4Fbtl=C6eUKc=
zB?z9t(#>*a5QzP~C_HEGdG@3a^1U+idc(T{@k@~lJ_{^ulcR;?S2gp>+RvD=jrnqQ
zL$K^%_z}}STh7LlW*cKhg?8209@ed%$g2T6k1M!a!X3RG$>-AWViI)abFio%GJi7^
z5??2mF+(W%suq>>0g(JNWAF8p^u(J4zzHp_i2<LQ_p7@uQv3p|pjG6Xd#*j{9hm|G
z&+t0uF%Dbip4*nE-tn4>HWIh<U{PdS8ZG@6RYrvQEA*z;A`Cgk_0c%kXVp2EP_4{6
z(_T<q=hX5fmf12cDx9%fe!5aRq-~8w@iAUtFoq6<(PP<AQ{;p%#<zbZ>pd&qte%X0
zx3n+KrVR&ygL?<NMQ<jdLAYMdv`g!p7g40DH~J7aWwwAyM=Ru0_(3A-5}krmS+BxS
zb*Vzit_?TVvU#itrQzf1oDug^pAwkDTKq_5u}V#gTo#%PoZc4wY*<e6x9eE+b7Z@&
z_sh5ngbhF(9;@>mQi!O?iB0o)NH(wIK!<%_dc8>X4{}xRYrbat($Q9Dt202~dDQy$
zKvX|+b!&WDp|SS$)dP%1Aw`(QR?j}au!+4Py9k+Re+QhW%M;s0;Mv+dKUdb;gPUPW
z69Vz;qDA{W22)DSCRX&eyk;4IC!o6}GTTz~*jTRODG}t{t|$zljU(y@mSyJl56#xy
zxvfraAU-%h;Mp+X=lNA-FGo(3Y*s6<?D|4r85H>>wtGPAK(4-T34(I(iO<|88L&Z~
zXP@Ye0yY@l%<ZmbteZE+L*pad&bgo{usvzU&lpu*@<Nq0a!P!}?E<Q_6zdvLMX+`F
z(DDgY6ZQ!z-sDr2)j7bQZ($<SAok|_JV&+ph4fV!Ycp7RS3x%c=ynZ=eV!Y>Hu~vO
z>#bxt{GAhF9#Y%}Z)xi-m*r^oX)HfLP1Oy1j0RcNtI&)AqF}@HyduQ}g?&r>GLLt$
zmXWcp{YFC%D<KTA@oDyfEx(lty7Uc=3>7^|E_3-J@AVrUYdK9H{@B*sYKy}|3GoEH
zy57hiQ+j^uE#bq-V^Z|(x4ADw4?=j9q`sg6O(*Yxu!asa*s-oJfSkU@+H<W9eSp8_
zX<_6~2qS+?xy!iyXe_1q#NT9DPlJ}`56yPX=wQ5Nw4#J9dD5CM@(B_4J6hizDBBhR
z5sHosPFA4b;<Ym%{4E7STi@1qN$YP&>#xW%GHtzHtCs&p`W}@r6<tvl1d2at>!LI-
z5l^O3_EDI34{EC!Eej0~x#7Inw9&cThtapZ8EYH8u7}R;Gg=2i;IW<o;bXG0q}C#G
z^d07FUel-v?+{4uc}he2=1MS>tv?sNEi>0@V=UhLf@Qrd@~JyKc`(YHRQ&=bj#GWn
z@s``f%hJSTw~1?|i8Kn>3t$$+4&86P?7z@&J*OFE8$nw4`q+!fBw0n>G!MVv{>ca%
zKf<4twbqYC<5Fe4>wK5K$yDW0Hnm**b<)p8*oaaL6P&_owtumfyw>+~C)<N#riU0|
zt@S6tS)N9xNClLeZ1KU}6jOd6HM-^5&F18EMP72-`aq^bpSBJjP;^Z_LM4Z-uW4c)
znI>lGgd?<kI?ZTWKAe!}A7u|rZooeag8G{f6c;R)_ddxiJnOb>{H6IX_7UzH!xF$X
z4p;d&L14Geju`gmkL{tWyB#@Cv+E0|#;?1lD8)3?n8`S%xaj<^lZA559ZWV1=48w1
z>I)LT`v&VC>qKf~f$GNs)!n}qH0brCuK<JkZRuVyPr}3e<P(ZXa4&Z|ilb)#dXWJ4
z1&!7-{eSV1<e-gcIq(r6wi?4SuH4qe56+COb)!*vSs(dZ_Y8D?&C1NpTzmXhn;fN`
z3H8}3e=vSwtjKTYD&<?*3MqT_Fsrp>I}z$H#Q06-_OQrXdeoh#u{M!@ww1^MBW70!
z0@dwV{-8%uF@f0x`YNj@OU;<xKLq2Us2QKW%4(cRTN14zK2bu)a%cLgpcS93Uak-e
z2-BLinx3zzvVOGAnRux;C&=YkyqD<w_G41Inm|Bu&G!m<aDF&j!Yw}~HE{7pqhxiy
zNika`V?93$=f`@cQi<d?8ii)<6$)ou3C2T}#3I<~7F<D3tL&$wl0@JAkIw9tlnJ%V
zxm+@<dEwlSw@TtY`cvop>M|T}Q~R4NZv{QLrnN#KRZ^ggG5eZ!gqNk)`g*tg_H1MM
ztzeR?9{xYt-UL3X>TLX<feeHt-mpZXVu=+iacPNyl0q~C6S$)@iX!f~R1~$=1!uqw
z3Cs-Pdc7JKTD#cV)>>?}QtJ{>APGnktQt@O_lVoQ1SO(EKqde0bIzSCXy5n$dw=hb
z&xg#t=bq&`&w0*sp65BwdCqX+C`kA!xNUV<N&GVW!=BTlPiT%!bYGwpF#sZPx)Xs>
zS12U#2{MIy|3v8UnYVlbnA}MK;SHbqcnzmMg5)2UpsI1_nnh4W1rqJq*flg+py(*F
zi2GzQJ&=6cdRJWfmolZrYPsyl|3DVsN(aA}EUL5gK;Q+&U#Q`HuxZU8tiY0~fC5d(
zc<Et*NFa&Jm$^ThA!DtmCCtGMYlpo=;I^Muqkis1iV~z;Cnb!e#CIq`8o;egN_M9N
z>kWG46T+SJElUUokTJYk1Ul~!DJk-@*_|Gw*c<M76w!#edk@qgAz{(yX6misPX5z*
zdc~jY-CVR3A>8Z}!izLVKu$SrTc!5btgj)6?z~`iCo9;gSiv?cBlHY~2~Jq&ZiN#d
zP|A4<M-YVnvhhr_wd6LQ-CN70e#I8Vp2)>@q{gulYGhVedn>q&&bda|L<QZ&@?NSc
zo;}1`SG)=D!3(<)M1{54ep>2fD!J9|nl2tVB1;#oeKh{|V;cwjN45cd%<%bzKyIr*
zg)vU3Ib)AgR2P3JVl9#It3IK`tOsRYSrs*!e?TmI&WCqcpR2nFcW_IUfag=nkFmS&
z&olOty^B(YDW0KdFk-8QjLa9ZC^)JbH8ncf2E-sJch8~YS)!2@kaa)eqebVSgsqB3
ztk2zI$!&?>hkFsG7w<hqFw=ep`{-QuJNajJt>A!@Z~gXHv76+^QI?De{*p1TG0t>C
zUz)DvPcy|CwP<)<pWwPwA<8pa!*fOac6ss*OGLRTO0ehCi94U$j<_jGCE1E}T7TrP
z^Mqi}#r5S-MvjH$N0G&UmP$o#&Zy|l&V8eJSBjvMYG&QS+o={(hS5!DKvxQ$u*x%z
z+o-}Qu3%>@BZ&c{j66OCS1e{5>H)SwACl1|*E09Tb9%97#+e)0{|~S08>G!dak%m%
ztO3X0wyh&-SB$csQ!R?>VdvM#3^GE>I5PJF1$VMo^u%r<MU$7XWZ(3C>y@rJmx}Fw
zO`u1*>Kaj}Oy|CFr1(|Od2IKV*1ypUeHRi(1PLHjF8YQFKQ_x<cu6nymS%Xn23C!y
z4rF55f2gLunElrW`02hfxOUZ0lGrLt%;)lo#2NP8(m_l%+D`|EoLcVUs(xxfV3jN;
z;@B{+#;yH94%9szRw^=^`^R%px$SNdJ=8_qI+{n%^eJGYT$iHSo39!m8%i_0OH>6_
z4*?3dS`vm)V0l5q;)C!r@~%1@5IkWcvs~w5Sp>V;PrCCzxo~i)Ad<^S$=$ujc&S#d
z7K#caaOzeoxH2J`PK_p75p9jkJwjOevt2!0Pz0My6A2L%;GXPqgnu(HyF!oNKO}%P
z{85$vL1~SFdO&`h`)VkMl`r3YXhZLS+8h^bUB)oY+?8|0K#Ve#L@DQo4d`E-H#jh}
zp*)9=NO}scRfW<8r>2FvYX%81hkW{W@1`N?uuKE)M)V69gJ4e1;*m5<96{^ls$i;}
zC>Kj9j~jUM0@G0wA-qEPddbGsqzimG$}(u$3i_G@RHOfDBaacP#sRLJ>Tp&x`Kf$P
z#ql=McK}UCv-yB3EoMmK%xt}ot!s&jJG<=B4)<{)*}IK@lcK6Kl{JINhWl5m!jwvD
zODVf$epu}tN36Q4#WJ_U)+=qPWB-mP87TjdmVD5%aC3iZ4OkNCiJ6`fNKHoptbjK{
zP^t4=PCq1C9eSg&tI2hhLDDgx_=D)EPkP)Kn@`x}NIfT0qL-W?Q&5`rVwpCkT_ckS
z4py$(U1{>;_BlmJUp?bcgYD!^3FOFL=V8s}_>AN<QWxE{tpgiCIlZsa0g+X`yOjO7
z+{io+UbrC!Jw#~4@2qmyb5HyRNu$<Me6F<&az0lY4Xdd8>e)L7&7h-MIr91NHdG1{
z=~tFi=Z_YCQPNQ}K?Wey`juP;ODQyl&CArytCu|~v)+wziK2G`6<SMVBf$MN?W9)9
zBc{bcq_?i{+sMM6&Hyp$OUXuMFGfu1sdqMu*7TxiP3vF;Te=DKzml#xWzYNrmF07b
zUUs-gU5Dh|-J-j{8fz>X3lLi2Nj~9?;>FH8=Ip_Nnj(5;+GV47F0C^rHkRy~Y4*nA
z%|C0s7XCX5j=ErQAiQGQ=+HFTlW1VlwNKZRjvjW@oCZYp)3PM_jMrFnBj_jF20xpg
zn?1VGEDbwl&ptsnj-ngTf}qy@?3_@*E1>|wq$Jp(ho=k)3|KIgp<#c@NbixVQ_HX9
zJ&-uv{lPTye?*!)(qpB*imsW?vOsM|$BG<sxObh#(5#VEYvojFpv;xJ)w5SbddWts
zS|+~tq-4^R+faEfDbPDqTX_kO^rZkWe3(pYfi&M{8vo4OHyKybv|LBkN>H)U=l4?f
zkgQD5DG)5!u0n!ZE0s0MT9QuzW<)MO-I*+MW@XvIKZhR>FQ>0;-Br-p_HXCh5_A4C
zn#>~9KS%IIOU3bmH;rDG5y>~$`m?P4sX=`bnYePLd<rB6!u_PM`%h2=Id#_$^Qg>L
zB~S+h#-2+q^0aOsKnybXjLGaz+hhN9qM#!0@BDzhH4#qwp5nydE>>f7_bzJ-PGgb7
z*gtXtG^!yrGRG#jb;RupM;57=aPKiVx>>b|uyz!DnGs*<%LmAMd+3pi<hUXJI3$X{
z=-n5Q9^Mrhnai4S1JBXj??x}%9Y5>~P9;#Y82a;fzhz$bR?L~uCwka>F>9rW`7vvc
zL_J$53SivY%Qk4(xEB|&C33O{F{#5?DCce%cY)P((tQHL6@!iDVOydSQU4!&?dHm~
zgD@~grXK)661^n6j5GFY(zwREv@JQodxb&s<uP;oeTw}V6W{Ywx-Gih9>rg?v@J2t
zuD+5L4M&O3OuKpukFnB?v$wL0l|z`(QclueP37X^{ukxq`L(pT9{(jd5Oofp2nxG|
zQ4g5oQ_?W^&ym=W65^(BbndxYVOFs-kg%PxmrFn!Kj|t-vQ;UwICO~g2i*7OSK)qE
ze_62G2_XdXBfR)|V+2l>g|s0hyJ)KE1|%T=(aPx4Qz_y84JnZYR2D1KA{cK-sVPj-
zx|A#}WRaCe{_(BQf5bmKm&a)8_BN*3Djuul=s!VL&AOJHsC`?X+*$7V$bOt#Z)2oq
zzmMrXh;cYa^z7Xo1=qsa)RHjEJ^Xc9a{i@+rSVUzdqEZ&&>@2_FQD_rgSijDPRTMR
z{*Z6doFE{5KYhjvRb`7>@2W8M#VJ*hlM*Q-W<RIbxC_J=RYI|BF^^Ux)sQOkJ05c?
z%c)Qb)1qbohs2B9+4K@@v~}Xm7aTIe9E|%@!iQL`O{xh)<(y1UZ6Pm3Tz*=}lxq0{
zOhmij*>{L|lzRV?evM4gsZ$C3mXeg2_6<2!U1d`x0kF(Q%a$}%9SUlywwIL}Mg92I
zE)+&<6sP3Jv==JoXQkxFUMSMGl~OYI!g1<Z{&wSElSZkR(K3d3k<27mnaQ&?$y7~=
zXZ}ebJXO|rhLTYRY3vJ6j9H_r+ft#=kcEQ2yaL6J-F)D{fD%q(&f}x#>blI2_zO>x
z18wM#+l-J*ec6V>&l7x9Dn$TVNeYhaay&znpd&kez998m`Qj{*inK%xlZZKv)ad?%
z*eqFb39lTkuT;XGFCTHiBvOa8vQmLzWF%hM%!ZsJMB;>b2E4`Sz*i_cgwL(gXJUYo
zJLU^x5QY7;<}-IGHX}h|;uIi^NbN3h1)bbs9@fbEC4>?yeb-3MxE>Lx7{BOPF`C)U
zY}`pJI1&+^^+mH`!8kI?KiQQe&iR5mDXBLlqs}7PzKmMG6w-`Zi`15?^?TtB;f6&@
zR-@#u&<IOS?7=X;aKq$6X@IFimMrI(<&N6O)DaYqr@vkLX+ewP*`EtvvI}~{vuRYA
z3?ugypQ6??B0>U!O0*_o;SRmc2VpM{`>g%08d=euvio^=FUHNz`zr}u`k1M2B0=<U
zLd`I$)rU!c8`ORXPf%J$7B`OWKuv{i{35CC>2W0Kfi!E#B#t!VQPEEoTP<(?n63-`
z?K0L|@1AzC3Phmu&`(d+=NtYB`WP|A9PE|CwN_j~LHDODgJQI;;(LSQ7NiEeHyLQ`
z3QTUH)U1GQtY{nI&4q<$*XK?x-#@Lnl5g%T=CSuLp0232Lr<QB#G_{5(n=$J2B|`)
zS&GGx>ph=b^=t^bH)9omRAqp+$msfd3IyDpdi_<Xa;2I(i8Hc9oIdIo5LwptpgFZ5
zNW*t`6TKwhh46>g0{R!OspO;Be8up5?I~Q2Y9~3fn*12$<Hu-Y_>8^hPL7eD`etC_
z(1`Vy;o!r&R-9OTT|6~zAonU>yRAbDD=eo0?=-%Pyp6>}=7>9THT~A>vbR~GHcd7h
zM=mkaD|la8ZlvD@HeoF}nk`w4a&5BWcWU+(8JRyo6mY{-Q+a9+1s6y`l5gf0-ADKr
z^8MXZYlKpYDHeG%RAbQ9*WRNLh0tpILVqb7&#u2+P{NTdJ2a$BB_{Jwn^H>J2pAR3
zL?pll%+;UPgUwJ(xQ4!TEdOCZJo}bxA;mp9B2tukj@c@c+}r^f3xyeJb<0lPk2%pU
z9$+T}KefxJfRX;k&lxFAiaueU;-rTu-f<W%=U>RiTd5todBTuvYeJ{LVKg=6R!-_{
zT0RsD`ZOyL%tE=+PTcyX<`J3~z&X^~rdP>sY=IB51a|Tn#b9=Yn$wD%d@5w4dki<3
z<$i>Y<o8-}5(%H*jg$OxffB6fZPZ!ivyghy+?PxoaT$UnFR~clRmzyaE-sgkqu+tB
zMv*|g!STKmd5;NOvQbY^p=WnCy_Y#sqDHk-@H|8{{RhRiw1`yfw;A-?y!!@Wdtwj7
zenLOMy_Rj%xVWcKZ<excUo^Lu2+>RYqsFVZp$y6!G=J5X0NhvRd8Z+<lfx+F+Xb&(
zj6bw9VKhE+ZtcWQq{(>wgKqfaB^^?c2F->wA_L4!ji>rewB^$WMCksL;xma-tK@ri
z_|@I_762Rzg9U{P2@K#KD+zZ176~_y0No11b6+PN@|0&U#b;S&i_|)%hA%3H^kex`
zO}RG+-qJbN4+;&ro8FY-St6GtZ#}iF$QQUTVX-r<cPaUkKZzdg=CY6GJ@S<T;!Y}a
z&k?8=lfYz6i;<oCaz|PznXfX*i}WPtvE>rpQteFbN8lf+_sfmUgFG;)@1c|t^5qr9
z6FQlLx94k`($o&Rq>n3Rk=+b7xHHNXk=$RKhEg^$QeH2hh41+tgrY(PrQb(u?%;6u
z(MroX4@SXzol306-Oa+dg1`pUfSHy}U+;PVk*=khF3~cX?xXjHV8|(}B&v&hDyZ~s
zrxFsblZ0E|AYrN`^yq?J@N2{>>4TN+gLfj0bP>b~lsy?>VN6+W^ox@_f%dtPOc4vX
zl${_ZTQ9q4x$Ge|QWqiqc(2n7lC~0&#r<>(IrovEvn^8DvXze}w@(G$4#Bxo_Be(1
zqm`@a4{ZyPWHUdYq@uD)X~C8jKBjc%g7x&QZ5@@*6+#RFBYg`m4XJZ^L4bj4|5nMY
zc4($(sg}|**rEI9*t2*~e&W6}k%j5|7fA02uugnAOjBLcQ|%YpRkHk<&adPL6(>1(
zIqWTf+S)(amh~^fZ(#`ckm$S0y|K(tB~SbZe<RM^_=hf3<W8!}+sRS=<R}&Ma%`Wu
z^gPHhV5?rZ-)26+{pSC$$!hk`$A~{E_*}^s_sY#O%+uRtzn!#4Nt5F;gTNfAs!S)p
z5%XuNW5nDk=uoNJ649fu`QVr**u&w7a}bHcEru#@;t8VXk2dQ*$uUdElqN%*|5}4R
zy<8Bj{8NFYdO=4AxR~2!wb!{Jk^f&1K@%pCc*okC+B!m%F<cf}|Ln^j(tcPOE(KFw
z9#wT=n|apF9xd_ADy(&4MR`eX7Ep%@3UMB5tYCI#woz2hz7)ze(MHu8UZV@<`MY!+
zc0pHkem7DHE(dir;l3D_J0h=5;2C;qVvKz}Yvu(rW2GY%1`?xF`+6sC)k03p^4Oz-
z?N_9CB^%s@x?r*)YX5HJXegm|lE_1LdZg&TzN=|%&Ed4%dK5~4mRGWwxk9=zK<ser
zFQ$bu@QK^2LY6iHX!dZWmsdqI-7GO87rE2WtGt0s=&rs<y5I|UbVTlZ#~@kbqrKC_
zeE<t~VkAeOi((GmUQB@goNwju0>d4%B7JZRvkc`YD0hc*q%@y+bODy%WPOc@V_oM*
zrG9^mj}fvcIGSb@O$6~v?2m_cVkj)F4rgp>go>#)f_yC|C>5VaoMYt31t*P&EIo>3
zwvFAeg{^Tsextl||2%)A)*fGEcc!;sPIAU>$@SGgu}#OF1!5u4>o#5x+?d=*sc_|T
zWj{!qhUitYF<h0e;vmbJ4AB{qEnPCOuASY0?t3o&Wge-uMG>n}-PqylZ}vaMxXV^o
zvz6T9zHnf#fSu$J<xZ=iMkvoWcH+F<JSP*j>cYF<Xsv`EYF4O^)*AO-ib(!<J4@(n
zYU4|^l0d|m+~{4)kgD|syOe*e&I7LsE93>+ufMYmAPsnxZ*eEQCR>^DE&g?6D+yfx
z{rfriB7HN>ednZJ0buE)VA<LY7ONft+x=!2Ff)uP^^BK{w>Je|+-<%(lUv|Ea|U`p
z=}PZ0zW&~M%$b!hBQ17-;cBGWC4}6+o{1?yu*ohk$2P3yRLlHS`|(EAW{{9-{|OuE
zu*+2Y5ToiZ<VtP5UhlrdoJn##E$0Zaj?n2Edq{Xe6J;tTBEpl*I;&asDh62fA|L&c
zgax<e0^@umodXwYm?TlhwTYsIDokS7#jJ7yrUQ>k;Gmj%QQR-&Cl#tT<z=Rca-TKL
z*cCO_q+A@>V6|dH&0c<ZlB^A!VCykqIsaddE1OZ(0t6hg39n|D8MveEc{QcCa_V9x
z)yw>iSZ<v=#Hx7SomdhGlvX@%+$nOooqRrGVGln>Y*9(4!g9k4S^|M~Hm2(%R;~CH
z8vh)UxT?Zx2&Y~Nwhqej8$PNpr{nJ<4^XD{0;f=<XlY$?YPhsE@mAO#Gm<R>Sex2+
zkaIJYAS&xWH3$F0uM$to{=+hF3D7{F_^b(z5AQ;&*9xYqBlf)Km7F1+v|hkzrFW_Y
zPtcvz7jrHvk_(RryP$Tw1e11eFd+9soh(;whz@P-U9g_al_d&rBRvO<m26xt0Qo}q
zs0p$VrnbJ9+RJVa6it|l-sSqv&^9iT?C4l+swIV|`Iw$q(Xs=qM*NchcEqEpe+L=$
zk%}sMj`}2ZTy)aFnuP%51=I|HzopzF8Q(=A+EjDF`v{TD9zyRHaCnmL?KRSC0d>JE
z(m94=yhv8Hl#g)Rlpk0kyx_x1KI61B%bkdJ+11NGfCb%4ae3R%Z2ux?V}-un;Jo8g
zWQ12962k!!`RZ5fs5BlX(^s!Q`0UEIbh-{uM1jiK0_LO~bWS6^LlSF)V9Yy$<j%=+
z0_opBdH!!u>8(KV*j-P5%ab#$W<><!D{6Guf8vY{wl-MJdVYhh0m(D0^|D7MidT>A
zF{5e+b=X6^T_QfG=xh2GaI^}nGd()o<;4utm88Hix>uOEz^eD^DU)hHocLq(G5ow>
zKb-nBsBXz!<bg|>l-=y}__S$}&UEIjZKzmF{(w8TG!$t4h-#88t#x|6_%8|Yf6Q_e
z@hRz_8EL2sxtNvu2+)2s@vNeQvftec0c`$7C;w&`1>~wBYFXUQV-NDKNs;0mr4Y&O
zz-fn9ePi$wJmIV0UCf}#&B2MJPM27{r0Y2=97fneG1TLING*PIYHyQqTZL^fd&0y&
z4pW(Gzt>35Wvo)|Zy1YC;K5wM!k!DOgBX8g8h>Wv<s6c|gZa}F+QZ4?-G+9cv?f_a
z1}EN0wGYBB3j{s#dc#Oj+pECg9`O?O^`br{-gu>=V07OK<BljNuV^6i=`VUdy=bcW
z^zD71^QIr{pF2+Oodd}IH=X-Io%>(>xTkz4_Xu*YmE2RHIp*qhI`?lS_i%F0a(9)n
zj4QcG)?e1hYFQ+2OP0!3A}ebCOnabOK~r1jCy%M28g=j}8Rlf3+-dO|U=Un@#Yu%0
zfj@bdVdj8uGwjLpOHU`xi9JP6`a2Y!Ie3*r4BBQZ{-r$^Gx@xBy#~0q61U%ue@Q6B
z_SQdMQQg(ng+w8db+?MP8m6d~wbh0rCok20km4469p^5E&0Q~}>g4U{Pp9vtJvx2M
z6ot@7_;HUsw39xYw7mHpFuq*h1;!#d(U1|9ijEi=Ii%O5<m@%Z>M27bPAt&hSRHyM
z!aj9rU4(0@4D_0<MJ8tz<W{b`z61i?J(TFE)(PcQ5`Iq57{OWY3(i(GS7bKcesEZ#
z0{8o(8c&r>?d=1;sFufGncDeZIXNe!_T?L~Hk$)q$zl;ZMkIe25df^_NO3Kvv%)o^
z8T~rEyFIw>3Ty6Ab>|00{m5ap!M0$1q;&ml_jIB&vDS*WS=0AJ{=O!mw0Z3|AL4DT
z4}rtK_XCILY8;+0S>f<!{J0++qELLNe7;tH9;QD}lFw`TtUBDvRX%xFNUmS%T%T8{
zO8#{ZxqeSBh@>086Z)Gj$2qN!mKG&0Uz(qsxU@1kVkR3*N`gBlH`RVvqF?8ILlUoO
z#u}QKRzwpCP2hLwCR}M^yoPg(e7@1AfBpF$`8-^IE|AZ&_2;Sj^H1gTxA1`O3Xjrv
zOuMfYYM4j_3oWnmZd##UxEo~e&)|FOS)JdfuO2R4mqSb_1Wczw1OzR<;r-^K)I0*c
z&T`wDu;e)fk1FCtbNB(JX1Q<b)IVoaN2t`blG<I7NcPbuoo2bkKUI@iufKv%&S&I<
z$bt4b18YRmWS5td5wZt}dAZwJhpay5Px{d)OgX;7RM9R0VVLS^Iah4=;naauzhEoR
zqm7Jg+Q?39w4uC+lt9=RB>&6v)nOFG5hGwcN;)FbJbu)vWD2UI0f=g1Dod@;SFc6M
z+w0l~rq-7qL7{+N59(Tmge?@^U>N|PJa<Oenwqc0VC1S!F?bq45V|M}gTTY$T`RC~
zJ<mVg{u-p7jVFq9tBE^Q-E$tUu3TT)`g`G9>qpDueW~?DUYd5Z@{FCgseEuCwTDGt
z;I{J`c$I))Vo<X~%X#xo?UsLm93RS0j<Q3uFPD9t#L;%>O7&z|jWCj$i}|juIMn>t
z$J66{YW<+0LRbehG4D&YqOGdp&6h>g<kD-}+|gFSQ0i=bnER2{<%|_A(3MrO-Tk%*
zF&K3XRj!5DI(Ef&FA8+5f#Tou#+)CSva7AuKF5@`@8uhZq}t!CAy0=9X>NT4`a4lk
zn&4VfLz3fJWl!C~?AUR6&)EUr@A5qfpY^|>k8zu^*2f;;p@%+Z4=LFt%RwWus1mgL
zeJ)a)R>l5BVy86uG7`x5OOyX&xu~KhHEAGn>-VT*e-ZQ3{_0qHr#{vUnSP%>7NdVX
z^|2=rHk3X#UV5nYv5T1eu>U)|^f44LR4&oMWJwsGn1zCdcGjBj>(Bq|`q*%=*`<$J
zUAXl=hGzexJ|?W<zt_iRgB_)ZjW^P^JonJU9{O>24do&*rZtpH$@%|U57X*bK3&xF
zG^>9VFj2Jr^(FG&e)`uuK+I}hn<)ApG_S^EyZ7q_dZYXGXNvTY5{=9hXo1D<gkCIH
zzUKAlNoqYkUMA#eLp$N~^{x?sp!6;YU6<9no|QzccTFH!#A_q%(ykV<WxokMQV)cP
z*GT~BoKBm`_x;o9|4KPq+NGRb)m=Gzk><WfIlJ&bDrbT}dx+e0RO!9-byh<=moBUl
zt|l7VFxF#F?vWIm$_BAc1S<Qr^{d020}Dw^Lr?o7C6%7m4`l4Gr->VcKfk_LKihnC
zmwx8Q)%xGk&%7%bu%1fQ7l7YG_0USyOx1T3r@?wu)xtfm#``%H^vn*U33y}4{@-g)
zzmk>XURgPYeUH{O2mJ0wuv+LV%Sarg+Kam@PFPyVu9T<Y3`Gx+yfXn(shkpGR;irD
zJhc9)TI)~Z=hCTLHLXUs`kK!@nof$=b3n&{POWFbcr{P{!jJo-K_YJjO4Q0G#<Z@L
zE$_{Jl<~E&xGpny5oLBFF!gL<B`rKAxqU5cgwB1ew6K=kS$V2UpStS%^r;I`fVA?H
z;2eTBFpDyCO@x3n60{^!3=N`QrKSuFDisU<TUmBP7{`&s%Mp7RszY*}4&2-NqEDCJ
zjh*@zZte`Q=wQcXb+An&2m??$*b@RL3Xmva?l&u$6<YoBZex5pVM|t2mhD5j2_z;&
z?7rfdK1Mg$Q-1fAGzkRjD{0<Ds)1>yX;Zj+X9p9nW*e>QYP5BgsC4C>nUbgZD&03S
zz)s$U--2&nrF)`Ojp(cVxMvv}-@ZPlG`14~LTPNjrR?`;Y&j?XCyi|vkba-WMuq=R
zH8zpS_tV%)YL&JKV>&TWZ%uFej;4Cb^Fo*CY-rNc+qhxD$vg2IkmT!ZcZ^d=`UgMm
zPdKs0=R*1H>uf*QpYN8>`FvK0Z@q(DJHIBEud`L?TpcNLZOiK}^of2kGvZqZ&@+^2
zeUef2Jc0qImJ7xe4rFHqcU+VoEc51NISbj2J4tSnsRWq;rOuw;HQc8Qk(Z#(o}Sxk
zik#6`+36xUtEC&M(`pns#}Fl7W}Oz7Ga`ocU?83JrWBrRWXcHbP04=_BzM@uA~GY+
z^ir&-v?B-fDq7g$aINXv-Ce|-hQb@{_;!(;wf!2G^hQ7ELO#0zZYhBejP$jXKSIpg
z0^wb}Sk2T#0EZzGg@@=n)*7kt!-Hsh`gVJsTe^nAEwZ;V?+%QIiM&+;kDH=N;Lx&!
zXb@V?ko}4csrSXAttJ3*hkBT^HF~f+80ph#oHbj}lQ`bjBgFGqs}5otU=zpJ9u#kt
zNd4hm<(RTFdnp@UaFf4zQOTQ9QDqZ?5RtUGmD_hFiXD5XvQZQ6vWS=Adf(Q$Ph})b
zK__sM&|^fxsd5?E3X2$*9GH=r<jn*CpAI-ApKm(zsgz(mVyF+>prbrHz+aKQix6f}
znx0k=XF$pO>5uvB_xLMTj;@}}Bc}u+ATSqee5BvYa)5bs^3ks4m`D^o?e(U0lk`*X
z(C}6I>F-ag9U77f6_nrUqLvZw27oS;fl!%|miSRZ=|<)nzIIYO*UR$SMe$jVDffc<
zctI4Ipot+(54sQ1pLpwpQ?{1==YXRo%jonNn?~d@nSVhwqX!%5ditPNYq=DnqzM!Z
z^arY3410--l>LxZB@9MOYP~8dxT0FdTEQ(8TB$(pwx^{fl^NvB?i0w+DtYy3-G10s
zwI}~tqulh4Bb6j&<og>~f=^w&8$R`SiecpY;CRLC>iBUd_LKHk$>hQSJCc=4If2mE
zD%HYW5@25m5ljm={VYPnC8YRx*ZYgvXeR3boQqc2)+2{M$Bgug0OM2Le55B?sjEo>
zrcJwmsX)VYx`ydT0@FY6s`m8<6(=Qey{c8*{5u&Nu|1lprDP-XR@tus50giZnz<z#
zvzuhbq9-Y(jM<N>hwm53)b5Q_7P^(z%g?4-w!N(}YT%R!(`!MLY6~wYqGR25v3ksk
zs52D~AOtq`|If_O9Kw5_PT)^^PCo2EyX89f`qb7-6307ci<$%Gt6O*1=LPZt++WX>
zPqmj|Us4Z;;ZF_v^e6})fbtSI8dXoLuldQ3VGm+}0_u}zj@P!qq}n0;J2{k*Rr>*?
z+9w)m*~~JkmdhZvV}#NV;p87@GO@*~SUM#)`C{t290vG7GKo<vE3epnv!+LcF~xx-
zrtdl_v_AQ(aO%pOVDgocCSj5wR`1pl7Z_i)a+sm!n)0skm#<I$!2&Ul72^64q6T4$
z&?MYpaUbgK!8H;0vi+E3WIkn}nNY&Yae4I%g9+K#*K3sGiOC&MMBhN-n6Q0)K2)S|
zo#p*n((E3t!l?QY&0>RoWfkb`sOw;7i{pfvPP?JV$UH2BCTPmM!4uvN)>O>@op6-r
ztLe0q#Y&Vg0Fyp#;&EoFMl|Lc-bywK7bX`{ct`77if{C2X9BhFCLlv!2t!;>yrW6*
z*TcU154(}c<Esb+A%0okOExaePvk9_FDDq-i65vyDaQh8q-9;z>shxgVZtu^!}UHS
z9&VR+JzVO1i5e<TKovUtetHlwsdPPuZ(&J_CUEQEv1DWGJw884xr2qREsBt=Haq=v
zS*jGAs=#u3FyDKEJlSDW!e4gmy5|07vgi|aupyo$K+IutVSYq*JMT<|EWKVV*rRK|
zh#wic<j57O4Y@c-`jh?sW2sQhfSbsv__FfP5faiQqk{VRr}(P9m&gwhRVm@(yYQVT
z)yYPis#iAJ&ZpY%Q5g>)qjwVDe0-?=C(PBiB`?qFN-RLhOB$y5RG%#CQb`W3Ec^Kw
zQAq|h$VOkF+x`=7YedNl-Y&N!x4V!0lg4F7>7CSd1B0zAyVhs#0ysD89C?$&vQxeE
zoZRFyf{nyt_NX3{jrR1df<S!l4$W?bDJCN_<ejOLq0<Za-Xt3ld)wgszVQ9?W7T@p
za1-43Nw)v=et{ZOPcCuM@6arU;Unm;$jP$Z#;t6*CXo$0c&cb`C>N_e)@|TagR<X#
ziSE2m3{}owwSc@mHmv9N@8V~E+?mgWVA>LzU`9<96li+E*-e1ZE>lz40T}4-0K{Ev
z{!D2iDIE?_Zl}_0Wco0}FnLZ@?o0kS+68x<hSQ*qQI?-<Dy>h(h{$9DWp>T&0ppy9
z#pmM>;`8yF{i^>f{Q=sEK<mysT|kZK{RZO3EW<Y5h|T*Uj%R!hNh1UNjh}{!4+UeO
za2dil2i_}|5^ex6i8)uXmjAE0Uld9NnfOEDjty+_Q;R$3ppYDj-4BTf>Py270XU?H
z&s{T6jt%)UFe7ZmkMi<Zkv@YNC0ys2leVej-gaM*)<<!2WgmCt^7fKi*~8NNNf`hL
z-LiFn+C|Am$1{ycn+}gBk*$jCKHPn7pN(XN)q6>;HD$OgQ=Rc-{HPCw?DZ7R9Pe}6
z^Z|4^HGg!k#3;2lNbHZ^sajbk7mEPC6h?j<{VLhWf$<qE((IquCldNm*$$Kcw%R06
z*9-WNwWZeQpn($MBQc=$UA-QknrO0*FW<E;C-IU!Z8)x{>~m)}hJlTJm!>d5Mch}w
zG3My@Ym?2bzw1V{-5$l`gotrKVgU(nJ0(ihkR&0{Z^fCf3e*{CnOpWGqL!$!;g&aX
z*eN%bNI*&nG1e{ilCkK=WX`h2AMy<8^qmdqOpMEXTX8r=wI8FRBWJ2|Q!+B5DXma4
z<_?~4<`V$e=o4!?CW*v|iZt@w2EIk?0pZ;n2$D&Ro$Tl2`}V2BiT>FK;D_NL$|yCh
zLW_a~=eb#&L>9+CQFwWFn4EZ==YkolKG7df(1`I&{F7w0-J3aLIHtffz(`+CYptIW
z?z2(FCEJC=>X{^UaW8-T{W*KqG#P#SoZ%&J35~2F&QBL9{2gHIz7gt<SWTSKN>nIW
zfrC5AZDHIflktj@_vunjVx;wMb{atOg4`Z6)u>uaRTm($Tu40eh_#+cP6fRP|FoX+
zU$_2M=p*Xfl&d(Tj9}v7t}6A|bsMocRsN!Kn|BMt<@1k*DTTDcmcgunj73G&z>)Tp
z(WvCJMDVL)*uCDylKK+pMMbyEPi})&lUD%%^l~xv^oZ*B$^KFO7EK^amP$tR43)fp
z9aJ)$xvbXtDLJNdP7ZweF18Gt07ZPL`X_$hx?RzY^iPv#!u~HhXDqt9v!Uc~y&1f8
zjh?il_PcRC%^FC$&)>w=&>uzyi6@J|M07=k(YSNoz+Lsdl6Y8#d0<K3T`#M=kr~0H
z7AK}ulL`&l&#F&;7;Xs5!D>!oXr=&ZQm#<Vcs7T!{u*KJIP6x~XN<<4h^HMKucRs4
z)@V_pQ!gtxN~pF~<-vI$7T>FKPw=2x^n+AwZ~v|`;+#kwJ7_p;-!MGPDG=uQx8e+P
ztwh)xxI*TJbZSU)hD;WY%f6@Pi<&FybXR<f%oTlE#thd@4HbSp!<EZ2m^ZSiiG|Kc
zj}sW$Pt{&rVSA7cKx_&=WSt<z8?Ro{w5XyUL^;XWO}>8=2?X4I&Bw5P#&BqC0Ovu}
z#?6Vz7TIJZhVmBSHsXlITGIl{QPbLLv%XMSBa5eRcDD}ElN!i0fHMTZ?ChStIeCBB
z4nx8Tw#CCaQRfVZi?Cw~MZ!n6!UN^r=x~*U5dORuQ%Q|Fl_ck+w)V=-OBqbC^*!_Q
z8mTMQvfm7T<$H1}`(}-p0KG5hKI>3Ln(^AgbA>%fyimLkU^FZc%9SQ;oiQ-GuJ`2@
z>%<=KaaF9GF-(PXg5E~;s_@;}H!DaL&N8q&pQ&@4k#Wf+<I$ut>+zucRg`~*Bo>XT
z0oFRXeOFC3O32c$W^|nIdYb*m?k^H2u<VpRlxL>&0oO34qf?l4S^382H6M85#Un(T
z-ie;7M<mLzZQOCnXrj`HYy#*($sPJF^KX@FP>s+nB=1%7?$`Az70^cp^JMxOwxR>Q
zql8N<`jh!>;l%&B9C|nt*~%GvRY;D8)T@&T_Rs@Y9Y~d7W*4qMM}PNB1aTJoWkd85
zkFCMPfF?eP;|PY%xT(^<gZ!sbeOZ609zT1mR>X0xWkGqJ3w<_(>%35OLES?%riIKR
zVg%>Bq&$xy$|F15;LwCLqt8vyj&86?HCN8bilzhsC*$raDY?3cKb-YoR<uQ|if?AQ
zzdMimsqbK>LEFqzEWZVHS514wuK1?)m#b8?+<$c82P>9;e0*WIqYOmN=47%Ym<<c%
zyaUMXuvHE^p!vyv2$p>gZo=L4iRt3rExmSs&nBmOu|fkz3=X)fc(+11JkIdXwJ3fZ
z)-tdP3Avv;`4;O71@1BcLORyRHtf8*9}LDr{Mcvs;RK73miy^aU*jZ_=ArZr<8Ft3
zgiGHs?o7*r*vkgv4{h8X=Cz{q1>??fJXl=g)4#aUe85gD%ppL!k><ExAhj-N@g6CC
z(YR|R9Z{vRF0U(o*}QC5>Y69TZgDxq<IZCvi-0Q|F#`4)M>7%ETkBvsC^C>ta-?l8
zK*<5tSNN55b+E1CwbCtyGf*<mcr9!{HBye+hwbM_iiHGG`!%=ilc3V*w@^&^)>Ku9
z-elaZ{0jFA6eERjgRq*FUwWs%mI8ie58#v2D@q%aQzNBo=A9ZQvYMc)gt4}^2r5h`
zvM{Ih@E(T@y2+2JR*sLjIi+vR?_-a~7O_Lnlo4Aw!qS!0;?sd@ce_IQ%Yd&?E=CFv
z?jM2B{78BB3=_Pd%NuFAD+d>OXnU>F+KL;kxB_ZIM)c8H?qg>QWz|FSMtU=u?RX>C
zVp+W~1`Rzzhy<En>wOM8()6B1Xw-R1p`A^FM)$8D1<4n0%+zK_DKWxqs8=T|?ZHdS
z6GzKxYSSq%&L5E*p#SwnVe5W9rsYOvjQYU1WLvPNuT_=b;#Y1@UkllVt+X0g>}!gY
z?o<_&i_cRf30)^i^Swi;v064>?v!gaz5cvjQLSbV=xB7$q+Wk6tv-agG@ExTRKug4
z_auLr4u4fY6^)+QHFW>Ai2X_@J~~gX=6i*V7XC{+xU<B4{g2G`>5bkaWK?{Vbb7NE
zf4N4t{UH&;d667HBnJxPmQH<CZTv2IA0?cj5u@<8hbkrf{Hs|DjwM##EVnP0F83^h
zOH<yZQf8Vi)1=F6B7B*<2Wna&Jj*MjEy&bx?uGk9v>X8-#Y^*+U0)RcfYlI97Cxc(
zM{ITeQy;<n9rX~ST~AZJ5x_JZI?~8&<crRU<Krj>{Ve;pGBL$C$PrDMXMZ4zwS@^K
z(@E2-AKFeICU-CTKxU|}C8<1timdz8tS?V;n|Xv5R46?6ax&_}snA67>gPaxhq`Y}
zx7pbUY$CbUFH_RJOyb}Az<RkV>WRO!KTe;xg^Z7PmP$cV`NTE<z&mFG$Pw^Mc}40~
z%fI+fR-0C6!$EjV3jX}}<=x)RGESfe<^(waXoYeQCSy1L?&sel`Q_%7sKt@A&)H4N
zjXMk5u?#7hFlL{d8%=${TJ>%>{z3jiv$P@c<L*J}dVJ?hBDP$0Ol@nsx^t%?=@B-X
zkpB(I+Gy~Ga`UpLXfR4V^M#{f3en!-aa@KHwZh}FDM5lOhGqjEL4CLl!n`chj~5lI
z#W*lDi08O<o*8Wjk79tuPcbYPzEsMK#>X%g74AWICJy6d-H5rzEidAeI=t6@>fGU^
zoji8{q64uHLT?qa1PQcO-WDFS^~k+Fb#4y4lEZoLw@HyXwZ_W2RP71o1Fg?6IW;|H
z@!t@-meMdZ=JX}q>goD^n*W_PcMqeXuJv5T!wQ{1fPzkc*y@JR54!Td^4<Imp?xGu
zd(`)A*LRF!dzr((JX}RQbIMYM+GaHpp<ei)9r_dD1`s$zTwsO&H+0o~C^?U4kNvx3
z*_G^#y#!&HtD83+0QwcZP8WiqAWG`>rVV;qh+&-fZV_XJ5WpxaBR+wyCGIuXA00+W
z+UxO7-WlsxZyvUuZA*ft>@oYTPaZ)4iW2DqoVyJu%;NesGgxpuNi)!+y+8GqqjCsn
zC0D>yMoJDR?-w`1b8;{{(8mi7QhaI#KW^qTR)3kV8s8^#jYD#1L+Hr^2P;cdmp#wq
z@M+>;i2>2ki|zKu$$;SqIdFEnmyhp~Lduc3oWcv;%s1G`oPo$Xo#%1g3;Om7%mC+?
z@fG|abLB0?T(aUawd#-kQ1I=PJ$SiB`=@L{^jM0e{&2V0wE@IJliRfTv;ABIq^|Iz
zQ8~U@_B-l}Ilrjo+9>xSOf^i5^91IGObuZ~7=Fe-vxP@eYO^T~nMVJyA@f>S;<B#C
zrCpB?`H!~B8nZf-iUw{@q-iuO++Nfd4*p*}K-Phk(p)#c6eIKF9Kf(2l=PUBY2hcV
zR)5*Ok?83$=hWORJ88X86H+&x@qh9dZIC_(;=Rx18j;$fXsV7&DBq5kx<*>I7Nd5Q
zo5#wPEkrgVI3L}VcrjMmlvo#5s|Tt;Lj$zbQSw&j9R5FP-?YzwzeTyb^i{KTvuRA(
ztM7%|8M8J<Q}scbO1{NzKR0A<igH6{)EdXll5$KNXGEIym1}6^(0hh5j-?7~M&<}1
zpN7n0e=sm8RS=~ti)%l)i^SsOPP<s}FEZ3|>!VokX&GtLc~GvdiCSw37w`ZH9NDkt
zr}g0P;F^0(iejZ7B*rr?g-BtE&mcT{G$1?hQ)3Jmqu={7;UF<vE&y9o<j!PnTpT`^
zqRAIHBS?HXVgRV7Y}HiMdV%-`?E;KwcH+<E0}+=f<6N4C)S>z+?fGER%ut%q1ZStl
zu^Pl|TNVW~m=S7?1)Umxrb2rkFelH2`Y#wVIB>qYy<4R6nC%G4h&&_xr4c#q=?GlZ
zJuX|f`v`@5!W#=dD03hdTq5)@m$Er!7Zt!s#ve^tTTdzOy&23H*_DL?l0VP5LM|g4
z&J2!#NI(#&NO~o0tLh?l-nkS6Dj6pLl0iBXh%N%6vsHJwR<WbwY3W?Y*mCl^y#dke
ze#FVh=ne79iRIeutg4CgOyC=}+YN<$XMAH!j971REU6E&4nugg_@7%#1WVpyBKrYo
zc7~sGDa^&{m<oh4X=S*bHXZ=n<;T4aUU%L_M0rri)#L3Qfoz%`N~a+5GgSp%SI{OM
zP@@;M8r|b5OXN9!Fcpe|8Ns!8x2iyK5qHKfNvQi;YE%h6&G_`;?&I@*&3^;xxt|Yg
zW!IzAS&tgkLd0g!_?*7lEW|pMZ;rpIFqxEFsLb)V<R^d5hI}DzIdXVjq9Du}#it^s
zCfdXJTSg`4aM#=@bNtOk$!pBiO+|7qops76(>kN5OMYb1Cyp0Mq+b5uta?oyY^I1>
zr7|*4RGDQB7&`=Vx<<Jbazs%A&8bjy<dy?CWqStmInHOEPXLQ<nCEI!`M+!em#h@c
zvY4wKuA+&%BEj5XVyc<CG<P4;oq&I%Y2Q*9b0+4-N~aVW8QG>6j%y5>3_SHQYcf=@
z9>L~zxR9*DbLl+s=&hVSvNfjV7uoJ304X~^u3TUyPF?O&H9#cvu4s`s6>|NVZgQ?;
z)zx`9&TajI=4AjrVQ<Wt(q`Hx3k1ni!&Z~#vf;Wtq429)<Cir}?sxwkxy&9<?7GOa
zggxvf`kw+!fSD^7NS6z~E`=K13A?qN!u!qgehly3<rB4jo*nj04cx|e#8zaJs1q4U
z@L8JZT@$E;Ef`Z;%;3IQ>BqAf?0q06$EXswcex9|E_>p5w%VG0C^5jTmk<?<^j5N9
zHxJiP1)8vUL+7}o_Xgp~p?Tz%f2Q2LBgb$hScM!q;;N7bc|6sLjDZ<{scf`t>O^<H
z9X$+A{IUB46$m#xhnBC18rQCc1xy$u6Gj3`>%fE+&91pGNR+*P^dp!&Ha7l<T%Kl+
zH0@9ovXIV8oJ1JwtN49T)e5`~0`AZD1R3t@BnH8aMaH00^Q*BRFv_Cu$YqW~v*iKR
z6T-l{(||>VTqyCQTtzHTKIXbnD$*UB&%5b7AYC&Te89^$a`C4lTOm1!XUS7y*0DDp
zH$+#8hG`aWa=)gux2IEI4L`3kFA&ir$5<qDoptOxfPu_S5}cOXn%(8nKG!j~E)~0K
zb`Sv19|vOQKGIGWjsC<kjrw#(+N=hTs*5FWxi?Tx>-|~1+?jAN7cWMgF~iNn8qDH-
z-a3_E=m!><Z`uWq4urQe`HwNxp`)C+C)jxpN?P_JziMHZ?1C%$XQ@1p{XWWFC3&2Q
zKE2H;AnDx#;#M{_c^6Sav*ePd)@KF(><=sDO3z~AM^7w)nvAqyH`-9UMaWIN_|A;l
zxtLH3jv|AR`I2#_;sRboc1S-=e$!r9q!yykzR@J7R*d3}ynhPutzn_OQHuOc3DdL}
z$h$1Y=|9SMjz|&-SJEUx%?nh3Y&-vGTmY6!A=#`kG7w^5X4J|jEQ#DCAK}<)-ftx9
zp5X1TGbQih85YrIO1zp&?-BH1%(N@oq_dS&6R0Y<TJp0&dAHb&=)zIFL(8rG6}FSy
zD_<~dfO<C4lO>B)&{wkH*~Mj)MykI^LUuvxPyC+C-epOxvYY_qPmRp4DAb8MC1?7m
z8@q!tMrJm=QE+fbcN{#JLt+;W0BD73pf*v8D)A4VTZd>qv`pcc@<nP{sqv9aEO@|L
ztUj_izuB}7FjE@mg3tstD4WBJfL|>*WVE!{5Gs<EWVaalMuPdZV8ROZSE=<%v+vR`
z;Ku}qDLaCX!i%vS!=AZ*ZOq-W5>~WeCU#@^Et__{-Fpji%hG#kXnDWE0VDMkWG?1q
zE(B?J_w5WKg~$-axxmu6Ycaspwe&VGYX$-5kssvW@nbH|zMWEPyoqPjIl#4dsWxeA
zdb<jj0AP2LyR-U>6;Qf*ZxB_O_Pwgl;|q=<AK_<7i<WLM(uXr9JxDG6Q^_uk#Wgie
zQ;qQ=jUCEIJ&#~~DpXCu-*f3*<`YF6V^{GKbyieD&8nY2LMV`aLhf9V#!YZSSI*g^
zO=t2r(>l;}?vhcI@m1?Esz07(*RWC|fY-_SyikrH18YN0>a;N^hId^rlgHZ4r4Zbd
zy69Zqs4|fH#6Y%*7BeP`t|Sc=B%k$zw@c*BAXpI4VurO&8z-*4xJTv6l?F1+6$NAC
z%Ei=~UsBsJd9=(INV;s)v4X2of!Pk-moKBT$fQ1T5hzIUUKI+FMUmGGa&@`5kNx%-
zDSD(7-Jjx>i)R<b3z5D;ZdJ=TRZG{zPY)1*)`F-Znx;GTyjJlV81i3J3Yu^`hw4g4
z(FJtq57$6plup_8I%5kN5hkEfh}XT9+OmYp*lNNR4^~#z0TfUhDt74KeFg_~xVbNs
zG&uGx5?0FqyV1Qp1~+p!#L;G^j(va}L9EuNO9A4W9WAqr<H3relI?C#_rqnX&}y>X
z`@N8yQ`V$2YVh8+Ny~y&qcc3vJ%hmCnL%86si8_|Xm>BlqUs6tA@ACMV+nXmXw(_|
zX0EaX%qRS``|&&bD3^CPV%`ebUf}a{`twBj+`wn|No3=weUHo^Z-d~+4m}%!7VHA|
zC}!x}U;+NY`UT)>39ByISTzhzJAXW4MFeDsY&xQgpXZGxEqRjS<xHlukXwK^oc0>L
zne2coey8NWWSe`RLIkW`+`eS9N#}<s+?qS2*9GqbO)FMWCQ%o^nr?0AT(S|V#Ja)m
z+3QLck`t{nPc+Qk@0N5-iyp?+U>}S2;cjW`TFvKIWIi?0i-1hT0jJ<9&?2JKn6HA`
zE!DJoi*(nfw0Gtd(&Hr7$-07FIrNzG_WYph*x^`d{q6l_0sV-S<PNT_C&X1<!3Vs>
zf?G{He2LsJJwW1K6>O3$+fi)u5ls+6wakQ_r#e-(fN#NMF>+WXPqT{{hmO4c<gn!7
zS_XTU9eaR&s&7`Nb8lne#+iFE6CUxnrwGz2@xSfRAF0-~&0Oq?*qy@fVNSh~J2MLg
zNjj{B(@De~E4YJ3O)gqEjLi~Klsi;8=a>c+BS0kErb`5Op@Slb9)1*Wa~}e)*f;!H
zDI%R|$bg1^A~h2wy>wloZ<F?`sw`_7CH35{W_{8%cfY464h-O2>ZvSyRK7#`h(Bun
zxXCl6Nq<_8kuhWqQd2`(lKVa_u?xcwaY=(pi`x_T5}^D|S?r7J0Ap!yo>EP4MN|8_
zG_5J=Xnpy=u#cs-kAq|C!)7L%C~(9D%rsc}qLlDFClsSjv6M-4qNyZtCo>n&z7}2Z
zAtd!pv~&VH1$yZYS-of;?=~T)(PCMSc@hajuQMuOCbzO5r-Xz|y^$HflBELG$AT>)
zm}HKTgw#txRX)yj=W*+5E(YYwNz$<ON!*?}603G>WWMQ~#})87!&5DWS-d6|{J>1z
znv1`}AtIU_jbL&kM7I-DDF*U-WJ!a;I?1RS130OVgE41zesV~x_wg#kbQv8cFco1A
z12yz12Ta$*t*>O2u}?3GvEDeb1By&`R~AYP7}0y9#Z{trSDQ|iDp49*`J*9$#I0Jb
ziGCIYWpD19BoK*%e(dNW>K?f1%iPB?Be9S!^S0Bf;tyi(6+40$ddG*#f+AyVq1LS2
z(bHt{xG=ZW+Hu_s7XCWk5E=^%^3Rj|7qa{%Zi7SXn`r8z_SpDi-wiP19>c`NC>(av
zpQWo1?Tx>YNTx+>68Q7MdNolMw-Y1j=%#3D-%pIYq)NMBKE*NoU!_m*o$5>&qpp=8
zcqvjsjXQd~l7_$@MXRI5??j9LAb65Nm9g}GBD1z<hu#)4v&-Vt+_PVv9IdeP(grcx
z^ZH1`P292TlzlNx>}Fs(7m}D>W5pkH8(Va{nOYnotqN+iL$7rV64fv*8$n7f6KJ*i
zx%@bgl!f`RR$W#rXm>Fx0)3%3j&g!Kub!m+U>+qfJ9%eZ$ZGRL84zb|yq8*xZa<UN
z=Df`;Mm>AEOImdDMo0-|i6lUkE^(WbIP$wC*6I?UUO)*UTiWn~s*TxF;wz4C@7Kn?
zy2Nu*LIPG%;#pl{v6NV|e~IKwAaW$PoXIA)rE}kL2Dz6=ZYSBGRt509jCt)o1fDsE
zE%b{ZXvZJBy<bUF<-CUDjQi`<Sma%_Z&1MX-q9%a=773c?oqphlXbghL*&7{wcN<P
z;<Z7l;hh21v3F?S9ZtjFu}ApUh(fhDf_+fks~fexHHq=;3_LJuy|!yg4t{nrKVx<{
zH@vGB7lb<AqN(=$Ik!fcT=DT4p~V}owZ|TFxNN@|nPp^<S(-e~w1=3*uZk&M%|nh<
zWS$dr5?h>rhtVMWyu=!8+pa{dX87_JML)6#x_|o=0!ghUhUJb65RSz-FvDA-q=|@h
zudGQBy7nV~zB^@S$oo^-cZo5o_*65ZvazsCrifD(mps+v;rUW|PW$;4JkD7o;Y!@&
z2~-^gzy6YtBE(%3u)Jd^ulNe~9Vr*1-2V8~Cm(gBWCZZsnf4*LiXKr}_75bGKqBE*
z3C;V#$t|!xqg`~XN-#pW?`_{Ovo<Dvfb{O3CJ^qI(dS2{p#@~T@eM+PaE;L14GOW&
zP;eT$k`Ja;a0Wlstu;D7vwLw^xfAMxM}3n=psKm<HzNAtnkv4Hh}O5?<DRk*!}}ds
z{>FmISR`9i=Id}glFTfcTi|Ui?kc}@Yi%~avTv#VA?Qb4vHAsT{5bA$xkZFQi72C1
zzVT)CUk`#6&t$HztEdIRw_>%Q#_}Wkxoe}T58F?7h8`I$-JI+f=OTpk7i#tTW`wb5
zQ9tF%oW7l3Sz)5G+TEaDDvD&4jh3!8QcFl+ecetg%GwSeVwz0Hd3=v4XJ-Q6#EQ3y
zY2vOD^(9;sV_PKVM0$0I-Q}>_c(5_Lpq-4E-VRV%ZiWUM*#$Nh&XIM{E*POIZ#EV_
z!h4JxsS%ID`DSlrHI9iIrR~SPsknHLhz?QCxtjK={MTPf)uzFX_!p`Niu)^71<PTP
zwCa=<(@M$4Q=BoyX6e_abz?4$u(4tnk1e)#8-uZa+q5;3jU8(;NCbkOE11x$9lB%h
zpg?J;lD~#?hhn;8XYqoH*%4#=Y2hvOLHr$Y&D`OBMD%Q7*~zEWg)a|-21Y69O{bvN
zv+c2a_6!35^QJOOYTTJJOJzZrrce{FA-FH|r%+@i(=kVz!TW?gm>e%LE&A`A-K?RW
zIxfm|YhjKu<tDQE73r(|SIyMk5k{3-kF~iqio_DNa{77_(-5Lg0}~bcv!fv(9veum
z0X0EsD0Ck1o#LD|3Yut+6}Rk~gyq(VFpWdA_#(h&CgX3x`+Fi;IcKSnM_!FuugbMS
zcVD8q5*noHiAX&awd5}GOQ$P^uiMF5)2g$}4kuNwf97t2Si{1dvqpDt4IjJ4kX&iK
zX-vYi_lL4rcKD{&b=0`jwLVn*e3=q>tvVw;ih7Auf%ofD!RT@YhBU)obV2Sn{UNm(
z%Va?S^R@1JeA?_#t^j4nYgs&`;4)D(GEG*ft)1~sKO&e)l|8~s;4~-aAS3-Hm2$5~
zEO_W%*8XtnW5dWeU<2@?Lb!R)kyoaGP#9K#Sa9qHGODR~GP6F4;Lap%^W$wsttq*u
zHbjohrGbDv6v{(1CG$03vLn_ibzSdNolWJ!mED)%<2~eO)6NU?(R&N&MCg_~sRZwh
z-e{FT*Vp;TgT#vWnZZ}k)|bMym$^ak2nuRsVC9@GJbRhUN7Q^WgbTe>s3KK%>Fz<?
zSeJ?O5@jJ;7~z3YeT&{vxk9qosyDEH<@mO0sh(yuzW=sWhKmH65{!Gjsi2D<t>(^t
zii!NX&?!%{`lcE~Z0AOXLBUgU-OVVk!UepqQ2jN3whOlIVwqv;UH!S9dPJb3V(%*c
zpf^{}t7RO2peT-l&r{H!hZVIkYv=MGf^J21yWiAQh?L(4SA}MUt*EsI**hP9lr=G9
z;ub}N_{Bg+HEw^^A1>S#v4bfOHFKX0b1YSM0w95^`GU;xhnDbWES${?=z0wKj~cq8
z>(`K!QY#@#5Uxqoz4d)HDoceZg*d$uD(KR`E6ak1AXXch<6(BVISW}+w${B*gQW->
zkWB9L1G;aGs{Uk5mHqZBKuewhSij+Ewh2fFeHWykbOVVIlv{<T*Saop79$5Zs@JvM
z*KgE6?!o9IG?6NsL)Bnitd4N|4d2q`;G3+h4Ln8V{2u}5nIvyRw0DwKqPoVdS-IX1
zlyp+bkO1lDhz}s~r&I~F+j%n<sw)xTLx^+xA+eDfzl+2Zd<k5T2;@t>?b-1!X;J~c
zI_a;IgCCALMuyYKd<M07>%h9!hYI=uy=mqB21vNJN_A)#q5>W<XTuRRE0D{Lpb{?l
zG}6*mW!d=$sbRWMFaz6RQ{!`hidwa*k+hmc!mY+j2Bt+t$u27Jo}e&HBk_Y6X4Hiu
z3CkO6Kw}K=nqV{H%FRk#S)bZ!X#Yzc!hx^On4svc7G77*(B5Wnebk8^*uh<FW^r@$
zu$QC3b;e>gR?ziV7AoLY(-_x(5bwLjou*J0uMr44X-91Fsj`c|5ZWn=jURgvPqW8B
zJMRF4TKcfzOhuwVK<!7(Y9yHX&<^tXvUk<YXQsqu6l%SVUE_?PUUs5Dkt`7_gOm{d
z47II)FH3Ebzy*ubYiaPqox%Z80*s26JC~l|dL}H2G1Jw%MH#plD0sTn;_X!nZ@CQI
z`xN!AVLU6#UKl3*PG84IuU@fIWEbo<{Y|cHQrkwc;5u&{Xz|n8Pa5FwC!N7S*`a1C
zQ+p7c%JBBc+}0H!ZXD!id`?Dm_m)$f3B68r#`N)1-=|IVjM!=D8D}b4YwR6g_7{2O
z*Afr%sV4fStLoOKa^7_EhDo7wb)o6H&_IdPIbRAnW##hx#T%;r?QyBUKNHXydz8)^
zmCt9Xta&fV=M(kk0s3>lulfhvv3%D25s7ng1B{%FEd1E_MV;_4G4ge~Fr~JeP%z8X
zanL40beq~wT_IaeYM0tr6qNNB8KiDoAG7Ra#0+E6yOLKW^&?j?NmUZ5+ByFM0+9Du
z&!XI@urX#&E{Zu9<wona<wR54dd0>UjQpJOHzq>=(`(|mn5Lyl|BB?2x41Q!L*!a<
zN$t%y7JUT_G5a4%+b@0HSojg|ac4|^)IN<|dkkaI*Q7*CUosZ%ln47Hbw^j}W+StL
zRXu9oRLB;0K1LwGjF+Cv(+_##92kasJSP3^@qW?LuZ?t@bl$qXC}v%pFP5Y96I972
zqiot6iw+i<2~&IBjy|L*d{j*a!4W5M@}<t{qvMzDiq?JHI~v>t6mjQTF3S7XNDr5G
z?K!z|`*zgFh8!c)D5J(UdW^``sUxIP@jocNrHHivh-9OqLH?{49|iG+0-lNdpEAl?
zul6FMskOmZKdIXrVk&Z%Yrp4znTv!Ox2`XYTUX*$Rl)D%d|~GoGnHZBjXS`(Y(}2W
zd#rS;k&^v8WuU7@YK%Iw2b*@REq7NP!q6}wPisA+KF~aVkZGOOmV3p-R1VkuallGA
zyI02_u@>sE;tdtTx(OXNioZ2Q{D}s?jB|}mZq&JOWLr$ecn9-~ab+kbG5{MuNz5rY
z1*oE_SRfbW;H;6z@aN-cx+xKgrp(+NS^02SFjHPHb9~;8&(QeB1Mq|+1Yo4Wyp0GK
zjB@%pDvKD;4nO^hip*PyVPbH~Z5@EUmj3D}a;2{(agD4VBG;yw`AR>RVNI<yVaDIF
zcRA;ehLpWBwQNN23az)+)NSis*P0V?eir0YwC=;+-a$a2<(Jf&;DWD>BLji?c|z?%
z(wR~U!|enDIRR_WXmo}ilATpA0<d!mj<N$^Hto`w69z@tK%XMnBtC<&@Ne>DUp%T6
zi{S;M<l=ek5TX~N-p$@_mY$c(RionGRf^(cMBczpOW70ROQXfLEE;OPHxb$4-Hq=3
zZ!3YY5laao#SA33<T8vGBSbhPDzr=i`|QHl`15f@>CN~G<<*PN!&^Yu8xmZDmoCfJ
zX@&UI6rva^4;B?LfDc6s#llaauF_2?XT~!dm2%b(6-V~aa3GXrQg5f7X5}1ihx!d3
z0!KSFUslYU!Oa-f3?$k0*1C>@;t#3Fs`D--y&87dG!cIHA@?w-^?N^kCu=vz=6gPy
zPwdoA!Kd3HE(;#fMNv+{mRANq^`%1<5gF+mCa;hLSBBKEnB1Y~geI|x#<N4uxkBd5
zjWTEKV~-ic7TmU=f4Z89R>*BB(Yj9uo_73Wn;(GcW$v9~-Kn0hm}m_>$J-7Wbjl~1
zYYv18FeVvQacXtWzg9?17E|a|ah86<ZG^2Z`ZpPL+CWKDg_bhWBF<AMze97*>DT%U
z$Gd}Nu3F7JIWHyGTQs`A5GjZ`BzXQKRoP?j&R52%bZ?*%dw@6yle?qf$*mgg+gR?p
z<WumvAq@U!az}>XKW1NzS5mB3E_{ngYNk%f&52vrjKoKDc7B-CDN$<%8pp9YG!wI~
zh6Q~k*ohtg*eik^lJaBLQ|kGOh&B9lFGh37_d;s5aqBbL)>X{TJCN=WPi5@8h6ead
zfeZY|`97qa^&JHPAL4PUiZs;=uIg6{A5x5C+hCZ7VV3TVIN`bYdTvhD-^OZ@6XEWS
zh$vMTA!O+J8!Md*OX|ZI#GEUOqO!(Z16}l329|=d@Ty#rmzPTu{)$jFNQptZeQSgG
zSDn=l|0=FS8M-NE9|dOGJX7T<SL609g`Lwc$d21a4TLU_$as}>yi>n-$_^?Q`rnYn
z|8=Y%FXSXfc`pEn2EN;V9+4D^Vz$m>WGcuKE8RBRGt#XBF)K{xy0Q^e*DF-(MMpLl
zWOac-kHU5(i%r~47RF1jC6I^(jF7?=0?K)S(jC6{PbM+q!$&5M0G;lb?7O08LvS^}
zS77c9Lbp3q|L1o0zg=h)sWrY7cC`$N4>bi#0~ZguFDWLNY((L#Wv%#uH%QhipZzNZ
zR4JlMy#V;7?To-u(=5F1x_lK$ipjHF5k%dN!Di_zP{AI7VUL30wk!;%b;1CJRXl+3
z`VcTEEl%Wbw*oj|mDRA%2hidk0v@H&iTT45v76IOsrufgbK9mi4kLuE_2Ig0p@_9H
zVyD%ztPI_+Zmo7sk$XXA4{be351qK&2VpNr>w!q7KCuIq&jF41jEs0-S(r8D`|b_l
z!x|&jhKQBEOBVUony{=LEYHrJI^jUyej2ekA6Azm@d|HaTQzKL<S_pn&lEXHT%W}h
zT>49qql|@@2ybz2Dq@1nzAWa1YCnMkI1`xJm;r9jl_S7-jZs~Gx$(>{Wv;6GxR=>)
zogIn}gny@A280{hO$<}QU;YUWz2kj4uiM&39D<w)n^e!0mrRx^ZP_LRu9?zpf_OWL
z#RX?F)~N}v$a}m|#nX@3mvMwet$4=5XMy&=UgMU%{-4*lIcImRZ^NjmbA9{3U*Cw5
z(Y3z$;vnM3Y5D$IXDljY4tN9fL|9S=olSjNXf9-ZjGZkNJ3JTvCwx~%NRHI0xj9~e
z&b!7#ARnpn<{isgwxU|j3~>H|7~PQUZ{>4l<-U%%Sg(um``j(ekl(Y5gd5@xnlA~Q
zfl#b*A|8=S6rIygMOQKgO)NqY=?xTS>B}+eWn)R5@l2Ch_dY|_s24U_dgG{7>;vMI
z%1Ruy<aSszfmhu1FZme%oRcEJGf}#hlticO-3dHjrJnO<vka`*VJOfa`b2@=L=W8c
z&x_KMH%&gjr9UswpYN8>f7hSK$mc)nj{i)5epD*IQ-3ay&#k)jB>njsDg6sR_s}Pl
zef=yy`bU0c*#$@)SWhHg9;VPO$YUJB;MQ|2<_k#69&_-|oc&lRUhF=fxF2x$uv!*x
zk!)OKHFTu%dOJk2*i+kyIACP%<Xegh)ttPC5lRvVpd7cE3$~K_4VQ7nO5acXf^UoA
ziYwklF=9{`eXKC!NZ*z{w~zQ^?()sFB&MPU4EyfSb-PJ{F)^~b8d&(~e)vxJOq0nZ
zeaQTYrUc5&RrHMAa~v@dRn_5Ly<Uhrh*Q=F=-ffN<^)?43jE{-Ku`Qz!R+LH@B#GU
zgI?M{@icHZ!z@=cYPetiNWuM!@xa|q$fWH0BdEHGbEV!3NMo$i3fv0U9SJ}%L)Vkr
z4Sn<xFz&9?fis&Ykj?W`60`fwPUzBgB7PA&Ov&)6vQa>W+$CLA-kqXRJi*JV0P?vz
z{&PW0Jq5J9rWBal1uf1kknjeO(jfd@JSZiOqI%5U&)iOezMq++)zy6BUh&X!#D*)3
z+iQ0k*EjMY_lGxMVO&~!g>ijtKwQdFwWCqDTKL~4?q%DrFgB^e;$PAwZ-##TLbra*
zShHFhb1xLJiXetD)#Y;4BfTHSMi`1Vy6izvm_)#^SF0TXQU6p#AvPN^kEA|^L2oiL
zUjVIK;ax<nF(>EvILG<o)|*incvOmrdssB}HT8*H$IPD{gAl%bANX<2Eq*y#x(5c{
zkZS1*^X}jVIk-VP78f=ZmQuCZuims!DNwTTSD2PBn{YAh<5<aObmTB`9M7ieNxLHX
zcp9Xilv2(OoCLw!e0np>V+%}W3(L0a{t_`0O&>~4JcG3fv}sRAEQFMb+7sImHJjn<
zThulkJ`-3E7s}q3K3<eF#5-9bj26n4eaOWBvQf)BX1{$gXXpU4A3MOW=oRNwZAp(>
zv(YQ?AD{<O`%Ja8x${1NRP`REo*&WRMzK^boJjSYO7kIZVS#tuO4b?{b63GY6bpfm
z-2t2_HhRkxxt9aqG+M#Uk!;S5$gX6QH8iy?x1->?&0w1h><NO4ca`B=ne}&V)iry6
zQPo5Qb7gtbui<{bqQRXY6G3w)yJuuVR|&U>RdoXj6oVEmUXL0T6*qg?=R%e0#~LXo
zdvXSF)DoDcB63g5_a>>rc@HyjS76bkp|QQTs=1v0fcB1gR&nQyd@f`6mCql%uRfnS
zj;Wr<=N|l3)`xy=#^O5}o9P@v8Kx8p<rWsTUguiK)JJXVYDlP+i#=qQDrQV}qfTOM
zk$X3rU{QZzzf2A8R6L}vXJcy;lLA@h{dNL-pbZOAWa<((#+}GPBh1}znZeJahhex2
zmAwZJoO9ctu4a7K&EhxA;+-hGGH%9_TH~2oM2ZZ>q4IV?iCW9b8IRaOLI&Y>a0j6a
z3+mSlqT1bqTVyQan)-wdua6b8W4L$3+{^T~x>o+h-JWrZ+BdhwaJ2#^0J1nAVYa0{
zL8jUY9Y%V!VTBcCwzw@;yv}3{WlpW{6}4DVMY>vBC@0!3h*^zlpMDJjBhx;}r1=EW
z*#dB}ey(g&iW@;J_?dVPxQ#5Zif68KSH7u$-6A!?=%t<+0@-)=`8xR!8L=~WwJ1tj
zH+?{@m;QMR>uZLLHS<VB1sLw<U=dAi<2#ssog>!pgS-z%fC1?xvbI%tnU>S;&kiSn
zJ6dps7|MHP**hOeP3nAvT5?Y#wcGjai{V{JozTDyZOGv%co57zBmOORs825uA-A?8
zsSb*ka+;tyYE0e~E&U3UFfz(En0qrvczZKcryErw{i)-K&eVNapb#Wzcu>$7lml6{
zhm1w<tAsG-iAFY>HnjOmr9Mf~O`qLQNSL4?Rx+wYpOJ&<za}YeqtZf;kH6i871>r#
zi`iHFn~tElZ_M81h3rH}OV_ch)TWk5>FTcf91K!q5C`N1pGeNw_#=(X<y4Gc9&0r?
zlK}1tXA--i^ThkHWT6MGo%$7L69VYJn2;3zRR=M$)+$+#D$CB3`jQ`sH~|x?*ix-X
z>0S3;q+tdUnFGng{nAs-35(-ODS-`My-XwpH9;9=H9p=2K%?v|PUxR+2|rqEWF9Ab
zW!dL?nLd;Z-bwt?`ityx>~c3D-O33<Q3F=90@A3Cfq*vkri_GGBwq22Y%@BJn7mPz
zV3}_yO1|WEmz*$CurpWbhg)|E9Z(aOYdPa;c_<h8!*wqPg!2`kS{}i7=6;=di?@n&
zWShhZFua>MXamFB`L<$szm|x!!=LQw|0Cy(E6e6}z#5Z>$YgO3ZeYKHjiW@4;8%yO
zD~GBze~|pseW_A$Me*^#DOMa;i>M`eHgjq2o3fkoLFXWLn~z=Yy#tc?5&l-(h2>D@
zCtxX8AxNM5!Ib9)=x3{cM3D8PZXd@Cw_ils@4Dz&!Q%r$%iq2+C@_tt1*EP_J=(A0
zg2LeZBfGWTD!%2HQM-KjK@UJ6#`oND0>>+QyyPpej3u{*);pN5T}`R;+j@>QgbpE>
z{6l3|2YCmW4eA67L=Hm>efh2a%n(%oH$JD`cOtt1-R-eKRft%|@eaG-8EP;aDo24t
z`NwA3!;)fE7m;H6=RQl@l1&Yv`F>-<OuN;m@V83J*N7J=T{}h9AOS5vViBNs-CU*E
z1R)Vq?Z`$P&5%wE^XtVEcAD^MC)up5^X|^y%D&f(=Hq9uuqB(VEh@RLF}GxmX&w6E
zH^5o<L6Q5S%2v^Qd<DzRdscnj`rHzhU?i2YTFK*7b#!!aVvt$&?c6`kat~p*C*|g+
z+KcAi=W9HWduR*zbMBGg4@k<4P&l_+C%Zq&ImRC6Cz{pyiGPbIBd`~0JU*}93yxha
zE_PEc>cz)`d|p(Zq2!t6mgv-@vZ*qdz^7B!uJZF9q*6mV^{#9xEQ`E5W~h4I=l#5S
zD)kMWx;2|Br{!k3Yjo<{EB(9&s?^7I>bh)Rg36QkS30#hn>tLTF3_pJ$-*mZ2=|Xm
zsvWv;6aAOd7G)i{>&_V|x=mMzmC2BO5%kW%PaA(E?!1yv?yGf=-#EKhAYGe0h*}P$
z7D7K9&X1yTEA;m3g97V9hf*Zi`uADxyq7ri*PY7s{B=T+<!ofIFQ=Dk6=_NB$sqbT
z<xrbQvoPbte1=zRP7?h{Osbqj?@N2F5xw7s6fP2%^`73j$&XsoA=7d-LvRFUZO5Xs
zwS8$0y9YRV>vhZ?SJLE$(VnArh0-@wdrJ*g2&ZiMkKvm$!Mm&roy}*pZPO+?ygw`1
zd6|^exP>3?l_Nh73ygM3=BQd9mdm?3*P_xAzYy;8)gHxtjJsuN%B~YKRimjF*g#5;
z6y+*P+^Ed?jE}f=w<B_jmtt9eF#Ml8bq&h5H<dD3{nHLDpe<(LE$SyFoWi@A3{-U;
zN$wrzQQ}k*E+AzFDgJRxuY{(VYIppGm8DX)j-0X2Y*H)B)GbKb^?w&pTJgV3$4%G;
zrpQsb$ZJAZ?IW;1$=)g_7_eQ)UMhQ9+wfo8d-B|~;4uUJ4K3M$i+nDpz7t0;Wf$&2
zK^AID-41r)#+lY_pXXkY$~l8gI6b0ksG(?XfA6Euq=&4hgkWB##z`XC3I!P}n^W~C
zV2zI2Pi;{2Le!{N;!aw<5T^jsATlgR88Ay;gd2MD$*3*i@seYf8p$GMNB3x)-KX3u
z!adrSc8H%*w)iMTyRO8>i6KeUk-wyo(pyELJwDg0`;3IoTUSO=8tenOK3$(Oj@Gpf
z6!(u3lvRRQ-3YYaas25%KceDh-+`7(2qO^Lf%<v|Q!A|05+&R!KAj&&L|VKAY(<@0
zh-yN<MWT+e3*2UoFI$DYapNtbGDu7q=iGf}>g$ua*H-Fu2EMSEa$Qr-zW;5Fr;Ujz
zvEchi*KwkBb<z*ItoYKGw$C1rJTjJflWSt7A(U>Lvn?CKS__me19}OX?z-gq%CdhU
z5-=G!6~k=Qb}D9$axT<I!n6oVfJh^AEnuO8DsQa!&^%kvhFte&n0GKcyJ)N}Y9d`q
zT^u3OH_fW>CBEI~aBZ^se8YE5R;D0Y?p}kTX-iVJUp3%B{#DX5W1+-zgMzV;wHxVL
zUNpi%Y>}Z(?q=;n@nCHfRJ427!w_Ztvx5YVP27~-IxcAzGFC$&w2-f9VW(*g5@Ncr
zlaRjyPpT{z_=}81;_kRy24r;+e@focAz`!aBVv1tzmcYeLt-+awNnLnHOZjc{MP$Q
zcAe_nmS5C~$x&;W$bv<E=7odFZb+<5Xd)*vB3UFSj;B9J(_-gf7&a-J!G!gy?ElB!
zyTC_PU5oz-B!p*9qLNVSW3Y-ztrmPCK5&9TCK^Cn9%>OG)nHpo+Au?^1rkgmOw(xk
z&}(mBTD{iWhqboFYSB)B0Ko?!RWSGnppr3FKq>?(<o{i3pEGl2GLs41`@8r4@9&q-
zC$rBv`?=O$d+oK?UTbf31_3@ZORw%|-79&wTlFVOy`rpJK$8U^J@~=Mb9R3=Uh$<(
zsOlcjEFpheMALW&S?D&a?#q%_)QpX%jwWeDWp}bw=hLWR|9%b(=yW66=D(s0XhtC{
zy6BgPwh$NV-R@i0rO5=TQfrOih0}e)FA1KWTi194>_E14-xREdbt6y>&kUV?hm))v
z6odna9gOhDMp6FUr+H>x5n?=RI?tm1TdoO)4VN~JF>R{dtZh0&+Vop=8%m?18*G>M
z+XcKsEn2_}e00etHvcpZ*4_i_=+0JJS=unEYjSXvXumKX+4Hh!39e~hP~~g5=wJ84
z&c{_TM+yluj1AwDcvez6;LULnRTmVon_I+guK)AC;33(b;Pe9FRwWmFw^?xE3*sKS
zQXk8Uf+rOr|CflO;H#_zANl<dCLl}$|1Jp|tI!1Ov+kCmFGrAqqq}KT{G2M9r1v+u
z<zo_FN}q)<Tp={;jht5%-a@g^TaoqLDm|kr($?DPFl)Pc?|yM|!%y^i%yvw4{a2MV
zT&v6*>#|C`1F8nrZTDYZ(l8n}jN`h(CI%d1UiOVSR62%5_E^}sK#sakLF5Q`az*8L
z5MwaH@*8Aa()mjGby`*$#J*tL<c3fG1%MG;!P%G>N-i5{)!zlRNfDhvK&ztb!#Dm(
z7l&p%PKSLW*EBK58L{P>hPw5NYo@qsN*glIc}c9hJI`|X5NDIkR5LNODI9^Kd~`3<
z2^voS$r!Bq&qXYGow}|$8~S?bkAg<#J=8AgCAEi21NU>DxC%Qrho3aWyHAMsQ4*4A
zqGWndGuiE<ak86$(VDn6-pn#tNK{-B!rvgj(4$yRiBj6jr0<*;@3Nn|M6LQS5QzXP
z#deM6%fV~4@1g1%3cjW^+<JOfQSCd}8XZwwwuy>Me4)m*S$DU=jd3V}(B<IC$=K^G
zUq&Vl%w>B<bY`eB4xj$4NAPZ4y+JCgzlQ{@_N*5%Tg<TP-zKi+it7+Hm||q3*Ac>O
zjmA9MR?0$L)jH^*LNK-U9dm(I%(L{oJw`m6tdm150j>Kay-cWeFViB?-r~Md&H~`)
zFGzj<VI_?dB9dcH$+*AyOOT7s2er@s77-q~sOBYQ0cQ*5fAtIGqR9DMlN-O>HF?~N
z*4+mf_qex|7H$AM%Ubpx?~HKR<|XK%Z4t2O7TxNgfAR4&vTDs0w{HPXHhHYN;m}?L
zu8!|@C_ExN%@j$OM*p5hzrP_#qkl-F7t_LLe_<N^!i(DI%Cl(n#}7O9a}j>ZJ_#nF
zuY^Sajl#pdC+I`h$;rV*bP8*L6R2;pocr=NY#clBoky`6Jh8NJYiZ-c9NE-nUKgu~
zK}UTfUn?E?5vQ2o4S=aKN34CsBm&B@+RwGbvk(Kqk?85CGsnJa)!}8#9+1ixrNIyB
z!#^7<W3e`#{!qvFaBra-)%;x)7-HJP6opNZkWNG9H(Sw4uy+l$izI!wPRi`7%jV)b
z)q5ABck9SOr`k`pN7uujL%wq+u4m&B^^n*Kq^V2pbrdA6Ysj1;PZ6(NFK>ac_|%8b
zr>SN=0#kq(I?nvP;de4$Z~KQloAK8%<S<g7T(n~A7aB6JM_3E91=THdQY(ijqxuJ0
zsP^Xd9X}?s*=pcCSBb-{N_OFOGRF6%@r!%Ahrjk$+J)vKn_2;RefZx<sqK;ZoF3TN
z@kLiT%d{Mv|7Aj_4CE*}Nvf2klF{|oQY6?72|JSwL`fvE9fM!6>nNfWiWf!ilhQfp
ztWA?IL3u@IU~kPw#+WoYe1{4x3`<E*M+$hH_4%SnODBq*7A^Oibnvcc&VVrA_?^LH
z?G-;-XY8s$l)}&6^WEp_OQwb7B*f>d-x|obZFupY-20Re2qx$QBpI}ozSWohma%8;
z+-C4E{4TsqJE#V-G3W6aK`?M4T+p8#{tB@X)m8#|BS!zM<(<tYzs=wEJwNtc_Anc+
zxCv<|JWR@V%m0#IPEl&O;!=@@q$TN_DzhaEcF-f&hPUqrmY6|`&=Vb>CO^z}w^j3?
z3{VC{ld80rZ<S%ucpa;>%%82LY`Cm-kL*{`t*q2I%0vzd5+3YWAl4qbl542=7?CoZ
z*_y?bnWDwPOLixnIXh;7g$4NMqzzo9baP3=C2|J2+U1nm!s?i<M&cQ(4L#($AYW!$
z-<S<0!5nONy2cz3p}9zQBf6YvPO0;(k5^(=FY_P+U)F<}@IrmZ5<sU8T5RUu(#Db#
zu5IwIXN`HlzZDe#KF(Hsi$Z$PtTV@78(c)ZTJH3h8hsdYaPH%}t94@at;1MVYC1H?
zS|;bas$PEG)wWK)_-F@FnG3JLaA5?h_`GeM=STZP01VtDJ*tMK`OZ11b{BG8m+@qx
zVJ!c>$gRCC8R631VM`dY!%t*A+VyF(9)0pRoX36*3hpHXed~&|yG*NhqXOCID?HR#
zI=IX14R?M&+CHHd%E<iV8sQ)@cG3m-06qzS2(6naR02!I4Ircf5!&BRS@pAE-K7mz
zd=H7H#2is>Evu$0CkDHUWZlV-E&-2|8!J9P=0M58w{^)^5`3|=@f!o3_G5$K|8()V
zRg3eGeoAWB=I|k~C)&P}hS`|U?zigxKnvK22u^>oB={y8-(naShgfkBOXr!|^Dd#<
z^*FiV>zH)C>z{|F2MMd4&E&NU-e-Mu5faDr(WN7C#ovmT3(dwajT8QPs}+}L*$ZRe
zj45K=>IKh~j_k5sv)6X~=!tapOTIor&FCpR@TjZ4hUqVIA~Y@gcyjQ)lHeOawe)Ze
zZTAln==5e1w(uKIy=pZGA9phw2&;*0n7ne(KDPHjad6^FG(_ntnCMDdW~IhqCrWzf
zWIw*(KVSb<$f054N@R!vmjE$2*j3WpF`%e6G@5QP2JEt0HQxvE{Y%naYHlglCY$d=
z`95F1V~Swi<K=s4uuCn;N`-hkFfDu^)57(Qm10@gTpPl&@NkATX>U<*uYH!z;wOWF
z7dtjQN23BSh6_bdZX7mf-QcumpF?wqm~`VBl{g;a@a2x$AL&Nz`)i5*i;2F}L>Ec)
ztrFd^IMmU}(G=kam}>Oxr<_R{exJrU^rQR^HjRFN5`=Daef<KkkK%mxM$-cW%sz&%
zaYC2q*MwQd^V{h<pdI2bZ9Mmv&G`0BV_%^YA^CP#Nz5syR$=`&fXynLSi^r4{}1v1
zq?u0~NmLaZ_tCSy#y?4FnVr4A6nVz%N6d@tM|1{Wz->&6MB>Qed14I@lQ{9GVq%j#
zdF1IKc^WNGPs)>*(X~FRu)PQxxSbAjk%4KC)O$N9?7T1f{@_HAcq@&X*YPI%j6Lz8
zYXpH@PPi@*Ah_ogG0NAtxT#|U*r)Qxr775vR7`HN)`mK)wXGe&t1!@>_~g2)lx+sD
zq7x?mdEHebC?G9()k)G~OiP9YuR4X`Di7~2mGdBxc-1o+{X4C4&7Z3FVgXXxc+s#B
zJtOYxa!A|XzlFlFKXM8^bf$fc)on=iXZ@US#SJ(4i<);0ENcGez+w*G5B^jjM${_~
z{@d+5l?NyIn>%urPgux@JNVF<CHxn=cA*Bl8<TXk?40It8KkfY)4dq6b<F)YLCh7E
z&*!EEUzagHeEI6Z=CII?SN|xY$Zv%bo`-8fhNSe7l2l(O6{p8_{9e=C_INbG*(Skl
znqWsq6A6mbe=Du$2HkXRb<wf`$|?Rqp_3a{$o87AG4nk#!sx8}b4lytyyNF`)1H-G
z4CPr&8Rt;sypFfG9qn#tl=7l={(+=4YTGJ=*wd-7p;3?%jsJm(-z@Rne;|I?SyUE{
zUtr?jmiV`cr}hys3BF(wY?TDhYl6%x`BdDX9fXne4fI=QPVw>^IN#Du<71%lZ@CCu
zxxOHN`Bl(!w=xB$h=Uz}#`q;HdZl?CM}VLweFqQQ%L)h`GRk2(8zyjb)gWEkRC~Cq
za%>|8gN?%%Kg87Py3?4K18jJlPhwIsE-u=RB;w-#qTIioSnZTwlB89g@L@eh{;xl<
z<P9l<oXzCy+-TD|-`CjRAC~XV`E*Uei(cBnIYwN%R6}X9+wv#krSjlKzm$}XMh?<;
z{i_{C>0jhgZ$7Zcy~f`ajXy`?r_i-_eB%|r=S#=s;7(gCClnxG1s8t;xjaBrkRz&Q
z7YT3gYMA~>m~$my!bV<3zCf~I6OL6Ki;8`<JF>7<30x*3*Tph=)qWA<0G58Db;wt(
z!>T{a5)=D2%<6+D%7}2Ci(qaBHTw&kjg546F#HV$nEgGnzBckp?G?4ZXOT=z{sHqk
z3ckxcUVBAIKFRyHzW+Gdjw}A`yf4S0hj;H&5}$o@`1W^M$k_O0{T(S=_<<>3HmXVx
z!Gl}nw5XRb3kv=Nn6?P<bcBD=p}N$Q0KsUPo#QOQUumNkGoA5fd9|&i|AlAH>v)jO
zi;~~~S-3A`-NV<6Gds_85s~Y0IYJBPzQdO4Uh$uAJwGJ4p?F+4fDOig1sBwOt2@nq
z?ph}76(>fM1zvaMpPZg?X86l=vkhMfJ5ilaD(1EKBk+lWCwQO;eUF0oH|;X%tid*T
zXO*nWI8#V);uu7R#lpgzE&QU{qPQ^QvGH5@k2CUifmGc0&y+PLfG%ck?)2D=aJ6sw
zU{!kwd?5qh`r>i>IGbtQ)&*D9+y#7BtYyQJcuB{$;~Nm2EB|CMu=zUh&FlC*X4Xy{
zRcoR0bnTw>&W8-Vr6d!08;0Hc4m#Av%(qWTOFOuE=?)LW$)5=TUcL@1B=SJfd0zjA
z4Z&%|9BAq1-_?+L6Q2)m`gafz@{c0(-R!*{$SmgTz`&ZCcZFNrM|s5DE~IEpT*axm
znTyyDc9E3smo*GO`CYC5mhlv^w#o0hzp-K1N4uz}S<dhCfA+vy59f9?W?p?B7s9sQ
zxvl11IRw7oVy)))7unTFyAQ1G7r5X+=8wqS&p)(wr-xjjQowrD<f*$_^L!wIRlF+7
zk6OQV=7E-hfw2eH4h;O&r1hPyX*ZwdD&NG+r@<6_@CrKydmL@i1Eci&=@JOw(J`d>
z9{yQ_?+WtufVW=)cxRmJhW8Qyv@x^!Lc4Sqy#Kz_1@ES7qwxN4qUJdwK`MA}5I`F<
zcbw`f-@vs*0By|7iih_xwvqY%c?lB1dnqsxKlSni@SZ@Ed-U(;-0+SNK!NuHyL1=4
z&oCE6`uCx0T=2qc$n%l}so=dt00my5R%yMIZ{VFxgNezKK;g3c_Z|j5-#;%w0(ggA
z15CvKwG4P$asu-jhJTKR9$Y0<9GG=rmB&9exJd?2dKwF!CmBPKn^jlM1KCE*LY@0w
zzrbiYr-i}ZIDEyI?24L*zVkK{og0bH;)~tB11+Aw&qbq{S$Q*q`86(rr;fn8d{{ci
z<a<4m&*Dp5`-S#@OyX%bn#8|}B>w0IJF%Hxu@3_}X=X5z<VwE8m1p?NdF|YiGyFnu
zaG;sXUKpJI&ji;y+~Wf3E54n=-W?b?kLPWG13vs`)b50fWR}dQ)W+do__`FXL)G-{
z+^@n)wEWDM-<I<KMlF=-5$=_*d!U(<zpZ%}F18!iBvrrDkoi+GIMts?9q%rr%FJba
z9T*tO`~7}xLf{#Qp@v?OZb`q>sc+b967ps0J%(QvNR1JGdFU<Smv?yL_~mC^RSLg6
z;clt&B(2ism)-SRQ5STeXe8Cpx&-_(^DU}q82*kaQQ`gkfy^iPn8OZKW9HT;r1k0k
zYYYNM{6>l$-i+C;jX*Ea{roRBWZq96Hy%Ftt~9EeuLci`vBwZj_^=BP<GxRm9QjS~
zZ?@sZD!Ai=e`W4(yn&syx94^2eG6fmxh~Had|eKr4!*}0)jF(b!Vml^J*~;UQZvdM
zW!y=5=z^9rHL=<n9UcnqqbcnBKap!32X+xW)UI`eqXaB&DCl@#YKH8@`mYy7ZE$VJ
z)hG8)6PI?x;R9k2$!Vhq{2kV*{rR$6HgV4+MWlpa0aN)17GN>bbq)DtX?5XQqUkDW
zcs^&47!X~vOH>29J9d7`u7idBXP?%E{bDK+g>uJZr%-ysVmxrxbv#Qtxs!4mCoz>Y
zY9Vw^7CCg$(DCeJa_IPyypo2WNd@6@P!YvI$+~;wtNcl&Uw2j7x?(WuvNhq;B!jzu
z8iqabhSIAXwJq~|EWMTxnSfsJ;<G~<La(d-BBXIEU!(Io<q=cxY?NM4c`gyXo@dHZ
zN<EhxSF_uBAoIv}A=ob-$o%x1m`8zx&-0ns<!oUo{Uh2m3_B{#L*!WBkhz--?k07&
zNHLrFYN+++e>F_xr>^^A@XvbDMX$(ndy7<OhYD_8GpI7+y^<6MQQ8JrzNLS^fu*B+
z!H*!nMKyMvUl2ld$y~?sXtoEnoXLeRV9lS04r#&XIb33hwc_%8?<JS_uiS3cE$#<}
z1@~z>9~a`8Cfms?H**HOMw#X7x>XS{Ixmj&eBxHg)=6-k<|`@0Lp5Wp)IYYg@yrXj
zllOD|Ct54cJZa)3f3JLP;wA5L9trJ0^JnU*U6*dEwX;>WmNtGBC1rEEY!@|89`};C
zsQDV}LkH2KSrfMKAI4xX<Z6mli0~TnScT#wvX%=A8t3A1d&&?7+myzkpJ}pI<lw^Q
zE5s27F+cdnSEa1daoYm#l?Lk{=b3{!aL{-k2IC7hJ}HsG`~OVPJ$&3_vO}XUT!<l2
z^&xJ;kW5y6J1pAQxRmLXadQ}(<;k+wQ{P0SF7GCDElXj?#4#W6v4)SB4#)v5!TROA
zbe<l;>g4(l{6k8|ZQ|?-jp7g%GEHtAnmu{k#sy`*hCfM>bmyfs??E1E_Cp%nFAXU*
zZT6WqcPzZWgPkF5D_4&Q7$xcJfI*WsXhw>a8&Qa|?*0d(euA~4crZGQx)#9<OwOto
zg~jA?T<a17Ip>#HSGAOmYp*=5^J@+haN%FjDt3fZp|$}+ZT=5Pyue%9|4#yT<b1zU
zwx;Wj3es3+gr}iz1O?2yczs)Suj}`<>EV@;@6>Ox!!254FDFS{I6(a)Uh5nYH&)nr
z^q(Z=e^A@3(dosPoYLQqR*^>4w%~ZmIc&eA5L82g_sQw6g+;|LYvJjl-7}`R_~l6h
zmadT@>SEFK+2mlDZls(NYeEaXY<IEU^Snu4Xot%Qa>07jLztG}n-`L%PHy}hJ-KJW
z)%2vK<yg;4=t)=K(V@~&9nbzi`c9wiE~M}1DoIKS*4=W3@Ky9yfxEZ-*-(sA$&St+
z;mCe%W5(#o<91XI>%0vAc2WDYqkcC1lSBWUDE+f@!3g?C+RCj&VeAv5{9Wt?>fQoJ
z9PGmXN#K1$Y5J<pQ{774nEvlbue{h=u_z~9dmn#e9R!mb{R7g&M=8jceo%*d_-)*p
zx&KWWP52AENJGPwB!SYxrG#7ta=sqZFt6j$Ux<p*r5}hGNG$#PCG-~EeIDF2!&aZ_
zQNSRQLMGO6fV3Q13hQ~76E}-FJv#gQ9W0jD3U$|U+9&Jzt61w=b$`?61^x6~CeHm#
ztNC{SG^_3$<x+2VRFDmYmza;hEGS#%dhXXHx?_kIxej8t?v^7SuszU?+=HAW@C$R6
z>q0)4Ed3-+Dp@vO%7lAR$}=9uov-mZu|z8=TvysShaT0oPfkC$-}h^dc}rh-tx}Z>
z(}^D^G+y`tr3pSh*B>os;XZcgme&oFvhA@M*v@4-QZG$}w^%DmFFOhuU4|3ij{cmE
zgcFpt;=7rWqj>qF8u}V10d>7Nt@$vhfV=Rd<8|`5gO!V2O_`kjUXit8VK+Ymd>m7Q
zCzF;}XUf3@E|V+^wv`mF6($k_w(Nz2xjFZoYsY1r7Z~M2TkAuDHf)d@Cw7(89^nv@
z3EBc2L7-M?fs}Nwjl}2E7_23YmuGb>ZK8A2*AZ#eil#z_savsW)gKgmFI^*aQySds
z8sXSu1&?-artx{G$<`J%zmromXw8^VR6c5MXa3m7)>8VQO_Hn#UN?yIw|DapxWBaV
zo86t?=X*A%?Jp}1?j(8h&JlxFd94*|o7)Et!WyQN?FHd<E~L30$#?1?3<wTL6;cqn
zxK5%2<Bp@@i-1PXlm0AW=La!B1x5*Lkp2-t_^42+0Wb<(cn$-6UdK&8M@1Xaxrsb{
zAoI``L>vU9pJ5E(Ys{SV5%`g%P&A#x>Q#QmCfK_B6$rTHXhn9*$9}8j$kyg=W(wpr
z82Vwab<ZUxc7~_r1OH49@v9>7W`B-zpG=b3-j;X$w|GgiT9P0IO0ng0THf@}o5R-^
zyPKI_wZ{&dq0?cKl;+ita9Z9&oQjZN<7@QuE^W~Yk5)M4M$7tOd${Gz?fY9^+J1y`
zH+DA%{4HHo@%vLNq5h!*tQ8qqh3h3cR{yo%lK9dA9!5--$E0wxLMNUMFV6DzjOW%N
z>IPYX`w2lx;J1W89%vzJE4i#Wl%GAv&dS+kz*dMs@$PnC?H+-6=y(Ma(8t@@Jz6nq
zyp6@96}OJJQP&gPyQKs)eU;Dn3b)pF&si{+;%4P}YrDM*u9lMXD0#3VRZ9MXhn~5~
z%loZ)QfAqlmbfxe&`R%|4L#bZGC2%H;;-V)d}Qky;4G4q5qXFB(!3DWmga{*gdpZ}
z{noDE+U;*XQ@j`Idfy{B#!5rF0bF@)RGCpFaV9DxJrFWzjM8y5zFp$m<Kx*5U-<1{
z*Py*;bz5m^SG4m}eGU!E10VS`h8|n9^Y)K7alb6G$(WF|%iaH+CbnQn?csq7X2@>s
z-M@uYtxNW1@t@5l;vQJ6hv!B4pYZF?`$YUZ2VpI+K9C2Y!4)b`V$54Bpgr^csSqBh
ztD|<dJ}FIpvL(|Fd1B*Lg3`P$`SkMYmcz6*OluEqUB!MB4X7VQTlqXK53}Dz`TY3v
z_QoX<GhK#)^>mi?bhfqLYTewiIm|qs-)*h%=XDS28nll#8UKU-J>$Rg)HwN3=p#D*
zt@PId8Pdfqp9mwMe@uLI{CCFb$DMeuJ^nja#`2G282_D1$@>4B@vjFplsENZ{D-mG
zj@T3Qb^M3FshN_D|L_+z*6yF!@gE*bT!i2B9RJ~bcl@!A|M2UwM2Yg3|K;O93TUDy
z=+%)AsxJOBlR~%f%23NczrU$$NA<5N^2+vq{fzNeM$12c(2OJ~_Xo!eH{Q#394)BG
zF54gQMAKn<AR@(F<OPkMkxn_D@l(_7f~@)jMm(qyZhOzCoOHAMmF>Tcbp0af-Xeh(
zQQp67|II}8m#9|OIQ2g^MHmTVt&^@a?-NZwE$>KF$|&3Mv1gA}w&MfOo|)+yO-(!A
z_3XKYfaX*9u7KyPdHvrid*n9HSv!xGJ$18Z)QhI3Ko<7f*hTU&;2G7-$B?YC{{az}
zJ@s|Zs8!}mU{u*tw|Pdbw%-ckWCNH{9c={MSaD>v{qC?Iw!~uP2W{Zc@eT;IcG`Gg
zh=MX}d<-nNj_(Z^j*_I49jW3GBULQ^npQF^uOD*7;wg%mn+#@#=4r))HNmtzQ}GuJ
z4sXpfHI*eqn^nIS46Sa`9=*ot(ZHv)q*Ag9#ayG^DWsK&<J$WkkP#~<kY75eH1DXU
zFU>#d(Bep24{yhJ+wt8_{E33uSjH0l;)oK^uTB3s)-tr%+;cau>RbeY%G(>DBuu0}
z5dlC1frg74u9TUd`5%|KabhN=^9%lKT=y;C&f=_0rgX8ZlGi+y0n!445DpL#n2Xi4
z%4fCuto2O%Mo?(#-mv5inZTLGTdnn*!<#$4Gc->$e}lTnQr`583IsU=tQ@P{@?#&g
zwHcvdoM5Z!Dl4ZrFUQI$&Bqoh5|=J;+Gxy?SuIBjilIM8T$b^i!#Q_3Q(XmE_3Oa|
zL)f#hjNdudGI=MRhjgrk{Ohfp8KbS7TQIirx0PGlU#C&4#oTT*>oZ3F!gEOMC9&5|
zd>x6ei%lGuWcQzylaXiT49z!5rwKT-6r4!OfSXSHx3)H~&l$7c?$sy+*4E7|+8T><
z(uoogGcuI4f9#JDM2Kk45DTdzVEWM}1J@LRMeNA@Q-N#-jh`(Io+%JW)3<~8?d}%c
z&N*ye6tP~;N~`)y;o;g<UJ<hH5qqLOpsFrY(&?(QNBcd}XCC^@iI+~_+`KafCje}(
zwr)^7sBk(6wPPGVNyO$8eRJqR=^sDH^i7>Z9DR-WMXJbnA05wxKS25UveW2ZThu>V
zoz-%*x-`FCWUU_dLz18J&WV+zT$8Tr(W#&MDnApg>)%YxrFret<EjhWqnrhd(18oC
zW|%I>WBOl|^POz}VC!jr-qG@)KmX`*YqbvEi-V>4p9IH>cs+psQY7fZ6m^(p?~RTJ
zd(d8tCzOv2U8`xsG^v$!R>-b<s)vVZ0DH807ONfsIkF!2T{e7k6P8iS_JbV`Vw3r(
z>K3w3@$gmy7z=;P+YB#1v*+-0s}_ET6kg%adx+mfvMyF2wW66`-fo%0&#hYJ9aMR=
z+MoXrzpR_3dU47s+~<=M#M#PAqYXEI9oOn*8>zgsF(bER49C%ST**Ex%c0_QoYcN!
z@Og(;?#~NJ3AGzf*V-RySyEA)$D;LRU-vpDI>twCjYA)#$mSotfUeMGaqg@Au%_im
zHA;kP(G*mRE}(iIpJlCjxauX^`BiCtrI(+(JS|JA`|*%&NJXwS{Ft)lOMwf$oL87%
z%~;@N$sBD*yDpx0wENOu7J4LN3WeDSluV--c2a-I9Dc5sx^MLGGm>)&sefao)GriM
zLE`EvFF)0kTwQ#r5~~?h(f*V2J(wHdsu;MfB-qO3TX{^7FJF00<D%?z!E*Q7{g19`
zUQ(SVKR%Cw5zX)Fijly9TP3~m*RP$BwqPPVu!QOUpVS@-S<99%9cpC?-?}SH8i(Rp
zvl~u*6yx(ARXF%BZ8&u)rHK0d?vWJ1Wg2o;*0Rq##Q~o{JJmzgoE~%~225Ub?WO1?
z(^nnbToQZ*=pX~mzk@nTns;SLS+#y%mhS96T|T`(EDDe6Hmwo&3gr@nOrTQMh<m+c
zk~sD|CC&tCSo84aB>=tw3L`&JihqoY79{Ekj|o?JP5AsALPJcuvs#YqhWd}}hWd}}
zhWd}}{-tI+vio<M?a1z@HQSNhe>K_m)N~^SegT~OmadbezNKp=DCy=Nf{XcVJ<(+k
z!0FOvH$3;5xBEhTOweX&Q|+o6h>B)`S$?Eh3`(JKQ)tz%$;hbTw^T>*G#$~iWPnu{
zGfag&KEy9`4ZpJ(%E~Ii`IU<EY$HD;#&->XL@`|BF>fZQ8ExJO611I9z2ciOc261w
z5#H-D;R9Y1{%np3A4`*>m(X7(T;Vn0^K%G~v%gvv?_Q?WF5Z2gR=arjzi73KcmG_g
zT}*#VHH+zQ6F#lgE~dY=TGQXJ$Pl2v<rDo)p#8mq&;KL)J2Fp1M_Ba9J>Mpre}A54
z`q<3B=cVgg%$(Ty)gJl~@sB#b`S${$CsUVrIw@(lL%jC<8>d_`>zV)l`B*LWBl0cW
zw<sv{@h-6C%*S&8<^R-t9DY|wGCCpu8qCp%7jKgZSvJlRPsl-o;A5GPYsey<@}D#x
zhd)QdIS>E8Z$1wHO4OXL37BiPQ%}HQzi4or`O$^>F_HQA%3IC+dmdrB|ED_t%FXqL
z3`9BK>--x&fg0@f3G;6{rRe-CPOQ%SD-J+foIO7N-~9VOef|w!&X#r4|C@jRZ<&9?
zrHANmU0=#V>4F+DNHF?NGe3ShGXF~aiLvpGL-R@-hvv%+f_l<gCWrDcHFEHf6`fcr
zE6VmQ^5qQB-zn)D%;=}V?EV_e{X~PW9MRyLM>V*!TY}sy{hg}Wa%XC`+*|sWZ6=Cr
z5|B*-vPp1f_v)I%HI-wvjF>vFH|5?KSFU6tN`f0DueY)gmKBlEuMhEdqcg!z^~n0>
z`jGtI*iLFs<w<tx5=|o!CGE~~x<psgYntz>F4;@sft8l8;bLDy2|k7#DN@qKw~Wf6
zXw6DkgBJx$KH)>Z%AE3si_05ISg4QXw2_jdd`z#*_)a!!_R@yT2bW^7C4SZ;GR)jf
zU@e;fzO4~?)(F%xBOZ`RkRW6Nvo3kStV<rC2Q^NE@1?<^tr6c7Momy-f{+Q)WPL!K
z2G`eEBd!ni#A<9$mS<>+`I#ClH27bVRrXB?pr}iOl0zC?e^`SX|EU38DM{!`3Ft}*
zdZ&PWbl5ztF1JFf%dOJta;vk-t|yM_B%nG8s7?Z^lYr_ZpgIYtP68;$hjqoW*<hw*
zX;>&)n{gcNKIWb{PQ1!&A_MPOJ6@_wHnJot30`GQL3O3$Hd=RI163&6()G8*1lRY|
zw;TIwFgHVkuViZQ%>f$R$yR|WN3nagA&w~n^le6_2D39XV9Vi~(82tE8Z1oLV7$;F
z|InjNn%}bt)h1h;h`lxu6DW3zOi*ID!1adL+-Nw@+<$74uN>Ckn};;Gv&(0w;5aJW
z3=*kO0xFb%3MHUI38+v4DwKc<CAhQ8COb|cx0d0f+${j-PBOt%9Td4Ub%^BNq5~#(
zo(`Yf3LQ+jRXVhCtGf&#W5JuIkc`sb`JA@=Pf@+p?yjK+YKSc<>=G?V`YM=(A*2Vq
zN>2~em>^^VIa8h_a+Hs77ZZdC%Jv=gRWR)M70yl|{D43>`(od2xHrGTy$OVS6Wr3@
zxAcACNkY9EtTTaa2%~P%Pjo3tKBK>1OAkNBG^J3?HU0M$yvNp;)b6O6T!_hOb7|o!
zt{sIU(&XR|2*U(5CJ31zO$1irOi*Kj5P`P12vVToB@hOIOcn%87Mp1@aS{+Gfy@>J
zH?qdI;Rp)=(s>Gw4aa=pn>HMC3=!Pk9e$HjJfe%+6i<%)?&yDeu7ADO-M^D=-a%vK
zW;N+mYuSyoLqDOWlMt3Dzoq%z&VK*#u7ACiSH;!U?o{8iu7>P}3-f|j@WOnmb(@Bv
z$6mlzK+b|uqNL`?*!MFQaOKL8sFu2)XsP=#<Ebh#p>~>f6hM1s>r22aP%sM=%pMwR
zZS^#R4z$)s<=sXL<S8%H@(r$L<sYTi7+ZCgs=0T`dig5GgDve;-K9lNNw?R}3xBHb
z&_9I<{Y!AGUEv+3LUh?j^!p;+fsJbb<3rkkbR)s7c608?H*NLjYgV+|pSV@qn?XO#
zyL*PLr2j#`CtgWMh~y5tMQj8Z_4bu^gN~HVrNPBm??hGHKg<=@s{7YI_OAsZwy7nM
zy<viK#`1@frfkO%Up2eO{L1bzfovNS%p=7fNg-PArzKPMR}Fxb2Hd;SrQ&My!nU03
z_vm_CE0}MpTZqTvck{(NTfZ*pZ#NdhP1dP9&=0??5mOA>olY>BM+u{G+E_vgn#DvV
z!HuS^BYjJoO&d2>nl_pNQ=tV^SDD6DYpv+WWfaBGhpigNO(Mz4ysQ}zqy9gx^>{7~
zGy3q~O=CTN(SgjL5vKcpqwDb!AWotRj}!^MME^}LU4QG{?6&@Uu#K?ltlsqAX!WhS
zR^ecd-g_l4F1>e?qkk3tCR%J0)R-V-0yBTyYvzx8&HQn%nLqAzX}?9wY;@rv6QrGB
z$}~ZZ2|@(gp)$U8Zjqqet8ep*M88_L10GB_@hbzEU>?x~6+|07sK_WHYvh=@hCub8
z=kZzfpbE}C_X^7#aj(84hV4ERcb``wy|2auA%dQ5bV$z`7)w`0NRP%sa?)4=8SDfy
z8S3ybn_||oN+nc)Wh83pr8di$X0wo4HcMyQUE<+(hA&LB`NS-ke6sbsfg?%(neLDs
zik^Km()5uDYD^F^LE0D-XM!3Nga~@#CenX8dR4=&PxpE~B%ce=s#VvgCq%KGqMys=
z(%q^t*QfhTF?>@kxqkbdDaO!)T!$<4ASJu>;^GMKzndN+>-#T$BW8V%Irv0-6FP>U
zMbdw!NBZG%v=`>_L;ORysV`gXZu{?l6pNfi7Dm?o?CvA`AN|C&^{f0mx%`63wdn7m
z73OlIRX-)&em4Szdsa^%4;}OV`33H}9&zgKS(i(A(f#z1BC1@hqRKmoMU{k7ikZ)h
z(MxpyT-#uzkpf#9ao|*Gq`;O&3fL1n%6%x84gcOZMgF+JmOns|${z)Y-L}-X@Yh<X
z@}B}De-zmAM?r;=KMHL5qk!FXwE(jPCc8?NKMIWeQDDm-1=U9WC}3}0_)I~({2@kV
zG_T*3-sO)+9Yh=XLt0|XAE#@x7s2J`LIbh#hi<VmziASYKMIWe0emtgi&2_k5l0GC
z_$V;K2QUbCEfC?u-fw?Sk{ijRpjsu5f@+mK3RLnas7_xkLdRh(RfUd%3L|t>8-`p^
zp+bkW&=xw(=6el*nf9sdK?6<8W{c=hVD{m)Eh=~v7{Q~!2p$E|{dm(pkva;hD>SQ-
zItr>)>L^gDLra{JZc7`pdy_T_s?!h<3aWh~QQ?djF@?wj93yXBS!(P53Df<LsJwBb
z5g3%L67K+LsjjjWe$oF^N;3IFic`o8d{bG7rr3oSU(<**@&qqYX+%UXM;?*NnXE!4
zh@0J*?j_CyE(t`jXx0s;S&=Ri;jzH%4C|Bb#p{#q#_LmLKOR}5K;@4DBYzag`c}S)
z{7#@d^ZKNF^ZKN_^ZFFCKQG6(Cy-O5tD^h0x5=#RhS$A6uT4t~lME2{>6HdW0x2*O
z2t&n;5hRf4e*KTNAR~H+MWGIPOnqbtB8*DJZ)j0P4_Rm#mS98=;Z^qfGMW4l)BZRM
zi5idTFB8--M@#P!^a7hk=}x{rCG9U|EsnfVVD|L&o9^oClkV&5lOux^n7w`drn~$4
z6xrX`ZUmupweU}ZWA1+>l!A!-QegJ{^_%Yc>yz&L>ysnX6qvn#{ieJB`V_PO|NX>r
z&O%4dk#1P{|0jA%E<fa0ci#szR*nb{9xf-)7tGi=1kcJ9Beux?h1t)z%#k5n=5;9_
zo%&H(RDQ;;tLiRnN?rBD`pXPla86%M?}R_c%Li5tUM(1T=5e1Qa7@jya;N136BaVc
z&o3Lk^eZ9{=w*Pmt<5!7&J>KLFfDDyIukq8*;r}bD#fsWZsqv%Hd#4~@<NdUXL_vM
zTe!3FRw?+7d}{LNZ?bY1<%it*h3|n-=JzwMmihf8IB_EVf`5TjLQVd>cB56Wq^?cH
zVtX5MDHNvVs=u(6lT8zIXd=xl9}SBNS%sEWI5Wp8yahM+d3@Rv5{<#DR_<46V<m09
zE2r4X?Z@?H$U{ukhpe3Wl(5i)F<Sm#t(+yJwYI%RBfvrPFGrPYU}m(96S9bH9QBoq
zwhFJOvKy&X?Bb|zV<q*0?}{8Nw~8vODKoeD(!EiHRMvrv%!$mLINxtZ@KyOv=0Cpa
z{P%_oK70Kw$8$@sMEb+&OoRJgrokEuqOQBpJq?~6GY!VrlRo1WvL7+U8=WJ(X5Ld9
zDKU(8H6lkjrj_$Vj-<(1;nCpv(FD>H<<@S_kK8TR&bwz~?YmoSn9X!X_&do&__X9A
z{Hw{fCnSbucP5_5ZZ;E{kmkjvl~cWpB6p*t;@Va8N|sd!wHJb*!dsLI$W^sL=}5-g
zCK(w}^DL+>w>Uo}V;rKz?o<Ycnyex(_LzTM_^}b=^$5o9mE~bvQ><R_1BvN0LU?Zu
zB@jN~G2zcfn^30@zCV#e(S$2JCVYN0;c?=(yx21Hggo3Q70biFNX_!_bE#S$bdHdR
z-$~{2@U+w}4}Ue)n||7tc!GG<Oc4Ji{nV??S9IhW`#*>OqW}I6^Y47^?nO8aGGSER
zrsEy&!PVl>a5if^xl9Oe1wUR2LCc30x@&b4YeC!^(PaBkzQV7&H$*knoB`_3?-ot9
zjxnK5XOt^dO4-VlIeNpE!Ye027sYw){6f*SJGe4pAN-12Z1-9P*<^>u{N8&)TGdQ$
z&oox}&(e*s-eHvl%{vB^rnh$Q5H9#A{1f&vUkqD?^Wg}|g|A%Sla5|gid#6ET$c~V
z=U|8BWNezqD9R1-J1h6elEOpWpIUi;^N!5o#*7l-rVnWejl(lDs55<4_fD$-_EEr`
zQox+z9-nd+I=4@DRlPaU%Jt>&<MnW`?6*e8+Phl?_)j?b3wD)Tms)L>{BF|UX3Hvg
z(JGu29ruxPTRI;D--+^L8cKfsZO%@f-yB<*p#EW+Uw@m2^^*TH!n_jXAFBEFw|QtU
z`FF{nN|1ku=GWimA-&{(BuW0knqPmL2ltX+jxbGBKlh-6KmBbU)Jy))B*{Ne^XqT(
zz+Uq2l6|%W@H59yzy3C7^^*UQB>4wue*JA8&`bU=C&{0w`SrIsvzPpzNs>Q9^XqSO
zMlbny$>w7M`1@;q{cY~wOa4ca<nO2X^|!fSFZsWmBtKp<;9q~6(|gJP8O`q+{{`h<
zt6=_h);Y}6=P*y7gAjSnJg;?5#dVkr^1t>v-?&3nFSw*?R<Q_DH;Mpvy@#I?k*kWl
zR_>kGseB%bAG`d5kEMlwR}QgDf8%+^%hoyYj9%LC%g%b0&w49gImj;kZHwb6sml+a
z0e8SZET(^B+pipEm;ScJ@ti)Czlzb<d-=+NcIj_h98c;)`DH1~R}QsHf7{}CRv*gm
zm$H22V7v6UEsm%4q5NMkI(x^Da=2ak+ZM<3`cVFal;tZ2+@-&5aXhgP<?m#4_1=Ev
zkh}D^EskgQq5Qj3maiOim;ScJ@zg$)e@4pkmBa4R-?liO+lTU3VUF56ev||6(%-f?
zp4^A>%TkuF9D0}jw#D)6K9t`tW%<g%cj<3i98d2<`M=;Ipx*JL9DbMnw#D)MK9oPf
zE`JKL9}D(^(-8kyn#n@_bk^vs&^{b3R~f#E)VC;yBkeg^-^!hn!_Vy=czYf4Dl4pl
zNPgkz`;?n+(BCaA`&nwMP{|dPrbMe?zZAN@^WTm9AD>_O^alOilHE&wJqA+c$JqLn
z4{y-lEyH@tKT3o@kw0VeE1%t<zgvd(mR}VBJ@YFc-Jri)hV+)-94gVHe&v%J^mohP
z-tw1=@Yb__<%1jacgvvO@{dZKU-{ey{oOLKxBTyk@YJ(@<zpN4cMA*tr2QX$EOCD2
zQycVm%YfeUmnY7zd}xFIZprK|zZ@}>p#92cHt6q`jNbCUC&E)t_?3@r(BCcnd&~b=
z;{3`dHt6q`e!b-{Pn=)*zy|%@lHObXQ6|5xzngdVYdJKZL*lyD?7Z`akm_6So`h0r
z&CbO)ggVc1$$OICPHU2V+9dmy<nmVCi91NKy6t9(zn@!k>MF$b*rU7`U@BB=m*=58
zaleu>)qjxZN!V>yPqN=xPnS%~O{=Q16HfBTEnc?c<12jhdgW&h@@tJ_&UKEjv8je?
zxHhUCx5j?_PY@@^3F729fu!$?BX8w9qF;^_%flooYSJ8Sh{OM=|Mk)646AUv2Z5V8
z9CZJ$e8EkUNb-ZwZ-r1UbAQp{fs5H`&RG08oVKgSF6!@HK6Z7J?UP-s>TL8|Er(vq
z;-5nl$gb~8cwfT4jCm)McX?I1cR88~zG(Z*nHjh<<G+mKXcqsIfM+-D<p+4oAzJSs
zs{?>IBLgl!0?q^jPG5C4k#r9H|L5o@{5QJDMJb6N`%XV$nXsAw*`}Y)D(N5kZ_pS1
zYw0J(kC6I*bY24b>Eu)i>Hq)v^rJ_l(pW*SoHvF2srZwuo*c19X*skf1kZTc*LY#R
z@|bU?h2R!!@H|Wo8I{;Rlzp_=H)4~utl9nqTdBN6?1FRi^%vVid0{6`19dOSouNkF
zxii${J9mZ}5a-S?ej=yz%<N9!t;}{M&^(?>&XTLn=YNLydBAuMS6^+sI|ke1@@fu9
zIJBf$oI3`fG@N4GItG>pt@7X$<IW+btz2sJ!c^|b5l{8aHb5B|c6`HCWkP^v8n=g;
z#_eIIaeJ6)JY{BdY3><n!=5`sE!uNusC|1<M2HP1nAD6p>Tb`u9r9MFSS>V-C^T3t
zoQcVrvDn58=ylDMXX-S_#{fc*Kchct&xobDe#+6`>#$h)P&;!Urdrg%uhbxcu@IkW
zjK>8``3RU20Hy?4QoESJQ2TQ*D=jl|157&%vhXa>RvBc?$a0w|xwOp@&K3O@**|3d
zE8Dr)w@79{nZ_!|b)IbdKMFld++C5lQ|;NsS|&cM>`wcboz!@>I%{>)(%o_n-%?J7
zL^fXbPw9Jes`i?l9Ur%@+40Zsw{o;p2^OPfeD^H>IlKI-Gqr3ntk4=(+YiQOm@0LC
zk@;^j{A-ab@uZ01@{3|yn}(#Pv0kxX@l|{Kqr_Qwo=}6>{~qyGPs%VsrU|e%kdJhS
zZQi@Fa+~HXA{_-3kxl}&;H)mf>*KQFe=CHERmMz$-$(K8S$w)oeub1ca7nXFf#=B-
zc)m=57cT0ze4s!j7A<Ogkkc)%1NC)abuq8pgT&Q7r8!-zg98aLKMM|AUP^?+Z?q*@
zzQ!NstCer<#w(cw*|T>HNGHh#zHj#=G2kF@Y%;~T?R6nB0mPtXf*7*+swdcQ{mpzE
z;b;4O5q>6D66G-08)(gZ&pu*Tp9wEYg2q43&|iT=f1aN7SK!c}r}9*xP;1$D4e^P|
zhB4j9QhIRcuU+X+4vysnC3CJ>E9aUC@f8~4i}Gve+g1K^D#)D;G90@#p*4LiRzp;+
zlFDi*T;|W#Yh?a(rC0is*o9&<osWSEMJe$S*mhfo78XK)?LvQA4ZqS=63_t>*a<gQ
zzM=W0cM7VD>_9q+HyF`n!*4tr(z_*w^n#n9y`05oM9Gf*pNz$9+^1Kct7PY*pFYu>
z)(4%*>10OIGUHdxLyWD6l3IZwH3GZ+TPxo%bmo|&DV-G<IwRmvxdg1Kuiql{Q*O;)
zTW)<Lgh80FFy_`X;QO6t2>nVNpUbT|>;TW@Uy^B>qtb(FU9p%a*>+{`HHLw@8j|p_
z_ws*cmtV!jr)<8fl$$$=ZL~?welGnN^g%zjXo5*OBE8El<u=)G;vY4{x{%Eg7k-xO
zX}xkAZL}#?A*-Yb=qx6nX_!Fj_u1?}T-jk4C$}TYy@*05W6pw3*q(OD>EB<?N&QRK
z3SUA#&sco25XdP;G&lXL=OW2YVQ{Q&5#qV&$lf&o2hNlzLJ)-o=V@Z!oW<{Mxt$Rq
zTz+Vi7(8rcJ@G`BnmN$iT$-CZVYE4)w554ZchGf!tF<hfSx}u%Tl{-lj%<CI?Z9$Y
z6k}eoR&M69f&6klTvXTUFFMei<v#^>G*F}xq>v_zHe*&@n4cUWE-UCeqWnQmg4$;b
zH@<yHDy4acM7Z$<eTUfEL-@(^6&~aSpwl_{yyXb?eJw5ieWnpsy$7P=<BXA{n<_CM
zIWeCxF|&(^nK_b}{Z34wi7Dss-s)S5i1`OGuW_AvJ@;hD0%qP^sj+)4l~z;u)#+00
zNU5fXpV@O;K5lDodAIGOmY3T8LG}ZZoyKvBb&1OJ>CzbNJUEt#x}^cP%<XeIERMk6
zpDEYIbl^$~nB;;waIKb43LDtKO<Iq&lJzB)bQ5?h&7a_FEWUJZi!A$Aw#xVHo$}q<
z$@g)3_><YMup?y^R%+q<Qao;?W^(jtcKjI{e}=>tNxa<ATf3v3MvMXcm)GpP_F(Jg
z9ai0IqQ+R+y8ls*Jl8XgT|-0G4>CS`($~-g^u@BopUJtgo&BjVhSJV~(#8s<odBj}
zH7b-QgvR>wKbgMtjJ1UHb=LnH`nrOyjiIl}e3&XjCN+I^o|K5XVpfz+0yl+qzUj<&
zPOO{0I{%uCy0*EgtMftnTj(j4SN%j5Z_LIx>^-%_Gm6twf3RNoRSXH83<(to30(;Z
z4Pw$9xMVG?REWrMBuW^l3oeHz>C|nwl3R-;^rqRBqnYzpZI1OGX4?lvb`YE7rxu#S
zN@<E!|1Z#vMi>ijF_V32zB#%yHeP-E)PDA<a&wsJCgD>jI{9&e7r6sF;HPGLMy)ZR
zTJ=>LPsF?o;bcocoP)@Pkp_|vtr2nB*hv#e3kay_;ee;Dz3k!JJZ&FoX@4twYKmvn
zduw(adT?jpHmAR|zKpRNl#Vsh&$O{d{FyZt8AIHqj;|8`Bhd~McG?>Ff>x6SSQ~h|
zRo`N96{ygUGy9R|Z!kc4tEkH>f{|-PUA{cRwesh{9pFFE8xxk*-K;5#vu!hDi?h3(
zcvD6;IJC=<6DFh#%d?vEb`e>nj_i@qczKj~uRDHjG+rKkjdfNH;p(!7ThjJ$LXq;%
zvV9Xh{&eZLH9Nm;IH)=eI~-K+PqS|*4IcJ?`rzxe%>%zPpf0q$pH-*lf-+5Yuj+0M
zykGL??xW_<O`pC7%vIM8ED1JG=G?(r5vxkZG*2GXT*C4FmA+s<E;Jb!lW4)LXoBk#
zCb%q`V06L+Cr1-t*Q8a17nuEx<^8xf^8}i_{EWJH{DXMluI`*p?t0mz@_>wIgPSY4
zrJfT!Em?qLU&L&~F3ujL#XYT@0?Lle*3G^x@3Z!?>L-zgZ&xGaY~7?^0({wTRSeDE
zZ&h0{_$b`S0yqaWa251Wta+wo=a6P7W&2lY_S)tgE#j4QsHI?*MxP|nPza?v(SOkB
zTQ&L=iCz;E{X>l|)#x)Nx;Z8~pwUU|p3!^VV~M8Gr-0m##1kq91Y!I75$6Y61$kBh
zR#fxZL7VMicgreRGP>MqdzJsU`RCA7|2CSk1sDU@BFrMcuJuybybxKz$xfatHc0`J
zOA6sbRXZgSR`0coi!aLmC%a$3g8wA}mH$@7<6s(#{g_ohk_Td07Wg;Dq>y_=I5>4P
z6`U=#ONUf>XcwaDI*iIrUH91`X(eAC`UB2r95TLphmZlCOW#(^pp`aif#<8dtRge`
zRyqh=?@&%SL${Z_X}<K0V*duKpxlbsa#jBtiTpx*q>NrjaV^+hmt&W3Zfqj%2cl#(
zuv?YGO)u0jBsPVe@8iN)h$2fa;uQ~0J(SQIo0dt>rFxd~B6uScXj|tY(+^`a!QASk
z`Dx3?`Wj;vR1JCM!F+@@+aJ2TAsb<8c@>i2q<+ZX4S5<X+J_p+-;lk$Dg$f9#z`4E
zUP<0CgAe7wnHhXEmn^#4hdtwr{%9sq<uy(kfc~T*&!;7ddH{Zm1?2K7R4P*9K<eY2
z0_6iGa;3_oL9zCI#5c@f8m2@RI+F%#BV6@qyks}Iha`yiHO$}wXU5LVOiCEqqkQ5A
znD_z24@(p;4Isa?AUif5njAoXNQ|5)z%VuM%d2wulmkDn7*O6YMMylWJUCT8=B{?N
zU*a34SP~taDo8n@XZdz^ll#Qp;+I#QL=h*smh@7-uVIStMSz%^P4w{i`ia*D5HBsr
zOAxQ^Ctlj0-&_3hsu3g^0V)jrnfe*F4O2##Hq6Wc50dCp4!-DsoQ5g+PIPdp(C5j-
zLN88!S9X*8)6sa+%orxQ`JXwAyr;<I9<5*E6#)`27&x_Oydps21p}w`j8_CmykOvT
zcf8q;40h=SD7tglvTsl86-EK}CajLd7&oE#+qj_Rm6i`Wx3hj)%@Ou>OBr5ry@L1B
z3$p@QzVt3xXPFyPT#G2q67OE8N#3!OkcB}%Qon7A`BtRgRyyB|{3D6yYQ!UUM9ln%
zGKsb7OxC>dEezC31nc1V2xE;ek*tq<M#?EG63H64XXG6snR3i=?Z#^DUlLYPcSSYz
z?0Jp<w^?Ps($dlfnkuR&zoMFQ_Podc9%9}h<^x@ezuNW*&qqNjm2Jf`nRRrl|4BtM
z*UoUJ{e?W+$mWimkNxkEZjGKNKWP1a_$Y|kbEP8Yf(XXsegN>bR6n0$f0j-n?JfE-
zwxiGwAJ&7Mfp<qdylZxT^`Kl<Q1@ddBPnD|D@F7Rtidr_`r6U|%YJqe`q`M2e*A$5
z?Vz;kidlkjY1ST_e@oMC`U#V)bE^T+P!A^7U7aoFi=mws`SJ(z#SqOO<jcd6@#FxT
z9uF)C{{g*~h+YB>5<y?alS80RBIw`v2;1Mo&`FFx3K{+@=;exD>E$AD68;XIihY!e
zUQUzG3+%p*5X?aNdNW_ggu*ij`b055vP*GMO!!lLb1?=pKa2cq^yfAO*^K8=2uBw#
zR@uWxJbO0la_^PMvJ<lO7t?kn=?q#Zw<FNx5bGW9rGCp3*kcwz@{Q#R^4CfUTi5LT
z*2k>@E-K}=F5%yzMAro%>$F4_vAzx9KF$hpYQM7IFZTGGb!p5_)S(C02mZ~(uoz9y
zMqL`qU799QMvv@P{cPbT2tcwOXx4L1TB(ukJqd0x3*dQKWq$~Gu3Vp?m3^eY|1A5%
z%_FaD=hN3cZQy94r)_)L!;?L2uarG}v!`vB{_f;Dk~4L&&1!(-9#;APmAgnrn!8B2
zf9sCOJtXVpa<6CUrpR3+>wV2TJ>AW|K^sJH1GD+w08&PAzE=<~_#49>5RLRzm;GU}
z=gQWMXwhqSPB<81Bd_j3N_6Hkp||ud@1>);lz|eOr2o;czijtDI`-BpWbY3}JIkhT
zw5D12eFair3PdfuXFCFayOE&%yUMLjS;Gh^e2QX48Oo|PBg=cqX#2KbGyjS%xks+`
zlqmXT69HEh!8}r=M2_aeHn}E2>hld+PjyV2TfxYV(Y)$SsoaY#heEpKAsTr=b_VHH
zFQtE;e*^}r;ueb86Xsza<?h+cKL!eIMDJmF&?ZURBuU%*{7aIyPX7N+)gMx43m`sW
zm)62J%8_MBX9wYH{J+Kjd!&<v4C~YO9Ne0=N@M?4Li<Yxg`~aBJ88CF_|OAWuJ$v!
zY11og5`?IbMPS9r{DT-j?e*`Z(l_kFD{d0FVq>({ikkq$L}*)F*<K*xCZO|gDQVt8
zD*x(IE<YSZRh_b!b#NOzRKQxfLs5J!LnJH|WX6X>FL(?It$^yi(q4J4eVH^uCQuDW
z;`6-C*H}#>Wx?fd+aegErmb5>?j89N?EVr~V6>$I*;i6ku*@_mopgg%`P(HuX@@%W
z>k~fHSiP5Jd|eKNiFV+Q<;^uatiVOfU#)r93cU4rj#d8}F$Y%V1U5hJvFhb^+XJgS
zfi;hNt@=0g#T$4UF^qLh)8pyfx2xaM1CKo3&#M2LzVr(`@OXw*KVM%m0zp#ClE#}>
zhx*`Kpk(<Dsq^~fA5*7QFL!z$SVP4xNrtsNOw%va{(^qtVS;|4338s%fwer0<_iT|
zZh82?8X6>~Yuxv4)n{uSS~XF>@bC#eabOKiyGp<C@IGHCMOH41H}Fv^F#V8`A>jN(
zLQ*{{;Xtci?wb${{ZT?%wNgUbvW8GmB0#$6QQPx0kq6dL+VlEAaa`2R7s`{9{1kGo
z`sRTW+w_4VckrO##mI}SCS%`ONxJGI1Ix(hG{rkRj4|&SaqpRN?*roAStiEhXN4H^
zJ~-}uNZdOszL@l^@M7Ls(M6Wy(I=PvMKAJMBfXedzV}a;DHC2TlAfzrmB;MQus%tH
zFz=+Z<%y!W_qmbx-sG=GlF48HnoR!sUK05$u-ul>oBoUBtxJ;0TMpn3|1kJk>U?JY
z69n$L#s1JYdHgR7Inz5ThevxS`sCCn{PI86|1pxe_OIOX($%?J$9uH@J71HbYu=^*
zJJ&|vrT;ru$ov0={T~*I%IS}2|A)nW(cS-HJ)EL1>oHgVt7IPS_C7y3?MW<uS6!Pz
z_P#{mK<aL?W$vi3y=KS96IJ4t6e?whFN4WA_4P&G{+$tm6Uf`YFfqNz+p<14i4w`%
zUy>Q`zgym(6)SH)4;dtpw~e6P7ZLm4l*E{S?S6@@cO7}D7x}t`?nxnE57N%eVCodf
zScD}6BNdjA|5OV9zgeD^MF-MP4e|!&L;u6%XCe8pTofLapVt(nV=%*=$Ib00T|t|>
ztYv3$Vli?6rtkjjmU{oDmJi-;Mcvfe-R!@anTC6+Gc2yj<r+c}2h11t7v<(^u9`E-
zAcfzF!c3?%+Z&sFj(nTrB(D>6Nu^?I@1Np{tv2vuiNOHhKgAmt^Am}gBQbO0Vjh?{
zhHWLeJG%xi|3B9NdZDokii`(Y0n4UuZK%eo-6IV+B2ZVzO=K1GsIQ_*iq7Wx=h+_a
zz@G1IdCAY!Vjpi`-}3JEww717|GlMU`%zSQucN*@!v8;MgsAYgvNQiM&x$v+1{d)x
z>bn<sF5&qDo?qfw@c9aN^yLdW@<2!Nm{4(H$ly>EsxD-^qYS<r{5q(Qrf~Y#Tq^G1
zKR&*;tH!Du2x4lx9$IpS0Y1LVt@?$UAXGiQskWmAbQfo}gOt(%?Z6SCjiP5s)xBmy
z$-!3+ZVs->tYO(+JaV&D_wP`fv@?A(U|Q|c>+NnZll8e(f11>5*BH_oL+%>c0=^|#
zYlyqr)rHZXb9zjAE7DU|{a0zELkyW|G(G$g#u`nvp>}P0bK<5q{d-#4-gK*O6W%|;
zuHZgZnlIfUHp^pP8P{yxw+NCtS1@7S^BdAYkhL9itos`IZ1lxPD>6iz&eiKKRMPl@
z+Et#~kY~|bg{uHDVH&IMbeia3))|n|9v1m(Y1mZ$d1>H!Iaeci&=-8UNN?vI^NKX)
zURgiZcI8w}!*m35B)Weoy&5(nzMQuF<XPEpE?i~RJwY*~qB)18$+79IdQp|j!5U3+
z!+2BpJEX4d8c}sq%VE534lgkUA7V(@g&%FU>MtkHvm>;8l2G#DC3eYi2~V^OUoM3&
z51&in<xRC+r&N6jftGg9?@@ehn6<E+GW6^zru;+mrRDQ`mai$F5)z>Gby7iH_(dF2
zn_wS$;p))w+#BjaBmXH@5(n3D&s|#JJ<^SZd#tMoKSWwI0S5Q3<&o;M{zLpVM%<SB
zWzBeY#(U@6&KGBdcfRC&nPc<U&c8&(z+_`B@R-EF?|SmrpGk}`!T(kKRmE)wpRr>n
zyc|M^te0c)ZF)FtyhV|(99%otx8twY5{N%G{yO77oxg@x!XlD&x>bLw4E<gi>})b8
zWcToeiO0fVzapc{o^1_--AB`U;jiIz;{T`e*YK^dAM_pnkH7x6^4BP1i;P$7DPu(0
zljZUaF?q`>dup*~)FynR&R~jT?+0Pl8zWw!e~n|WVtgz!zcaj@cZapAA4dhA3elo5
z@Yb>ef7DuWzi`EgogeiE9yf8=Jw}=|rN15blcZ9s?61VjtGc+wVM6wYFlQu~XG|ii
z`j?Gl7bsLVlKr0-%hE6Mw5>1u{zaZq7yz<6#Tmg|`YvbhzUkS+y)klQ{X)5VeY)qY
z{aj8zW#p)}G-wmsLk-%>^=x#RO(M310+V#nx}of;@{xK;z5Pw@xi5Qa#>i1E<mH=e
z7ulOdBH{`f^H>Gg^Q7tvdx*CVjy*Dcc_N98JR8eTZQ!FwwEH#icx_jxdK%@!+!WQt
zSuCm}xGo*gZQOXuN)B!ow8sjpvOJ>W6UnP|I4Dlo;po5(H?=DSiLMHd+PynJadYh0
zFUI$v_MP2pc1O`c(owD+vg+^d!Cc>gc?$fYc7Y^;_-gd?Hh<j?H%lPDR#(}w>tBd>
zWLMiwuK+2~1tBt(A?<T*!S#*8RSIgtR94-|rhPJh3Z7$U;MERWy-M2Ei`a_%mxKI=
z+={>JKpotJ&EOWf^%oJjRb+3KTV2Uai%DnJH!it#IjL=aBH}CM8}ZeZ8RxGbw2Jt8
zSt9W@QNj~q#n&^b1Bo$4evQwjQfV7q+e3a$nDR*>f~fo|2g1b4ub)PKZ4mQ`1M5x?
zbVQ}s2T5rUNzo4l_leKbjw^j!|6F@$bk()BU8Ae6F1Jp=F7X6xEc2#vo<-gae#D$r
z)jk`_tuA&%w{Bkges?!ZoBF?<i0;F-HH_I`QB&C6ds!={r3pptuxi__an1fwRar&B
zP2ck^J6PK2vq}nEOB;t<{f4AX{qoT7Ol>@A@c1GQ*JEoHyGd8Qw1|4y-E7_Re$ke2
zaUqvAkC&>AjckcyD!YfnRBMpgCI3(gs8EYo*$3>=^21!HAy%@fQ*N?TcK#|l4Vku8
z<ePR1ZWbJ-k$!e~yEaKfH$)qHKlw>_y5zANT=WdeH%>2{nO?%loGcqlxHyT$S43Y?
zQoAb0y6=HFNGjNfU9dgfuB>xQvR*kY3fmh}QuTFiDEnH<w%iDY-UxpUvUcr1QL}6`
zZ#uZ@C><OCi+e&g3}Lxs#IA3_Hfikk^zb6ea??j5{Lx<t@i(2kJ@AL&wBWDbap13?
z;E&3Z<L@oH!lsR+_)A^NgRWAN<L{H+@h8=6?-#zDvQpuX(|Z!)Z@3ax9Q`3J3I6&Y
z2mbmC{-`WD{(c5Ur@~+AQf_dSk{o|sz2i@++1@|=30L~0!XKv>CB)yW<n2L!83unD
z$ALdi$ysoi%97)6HZ`WgU+PjuxJpTmzrDTVPpa9T5neegHU2ogDIxyuCvOk@Wg7ft
z9tZw7rD(xnDoc*P)2J~O{!*8+ZD_QV<oIjv9e+~I_RR1i%1T9lgOlKII(d8GZ-Bwy
zfaAd50Kp%XCCA@eL!yu;n?F*Q@}R4f<oFBqjz6hp`+)G}l$8p9gOcEHIC*>EFU#OB
z>p1X-snLSNRF)inKjU=aRP>j+lp9>7B*$M(@A#8ywr7Pu8I&4-2zm*}@2lkPfxm$U
ze*=#Lf7G+!Fh9xhH=7z$;V*S5BV45<$6s3S_>*e34-Bsa-c<AlsuSYxe)9IfA8nKQ
zchGU*57Jw3n97pl?=)&mg}>CLY-5Z#rSyV74nycg{*!994+<}$tW@}8s3*kVbn^DV
zA7exCH~2X42kTpKn97pl?=85i19>w3m%5Y(U8VGbzfXF_pH#DbaQJe{N`*hBnuPcp
zPTn5)gC`39h8zd}n0gl+rn2Pt`x&!)D*UA`<px(Nz2L8_SNuse+lPcdL0(IRKSZ5`
z_<NPSJ@ChzEchFG9QZ@@TX2}llH+eSHKxK}>QeMNbhE<kW&M`6w^#g0HQR@VSF&D6
zg+D~?g!sFkygl%TgeLeKb{zO)>9OE2l_kgDY1Ehsf2m8^rY^mzA?OW%?Y-hps@Xm)
zyoj<=;g6+WLi|l9Zx8$-+YA1(j{|=!eHR?2vgG)C3++TI{G~4CL02igjNeeN_>*e3
zXNNDRtW@|z)sPT>!^ztNf2=J9f7Wr}4?WL<!&H_Wf9CuiLpjOjk5r`uW;s0&u0Ww8
zoBRp&FKIQs;cvTCvkljB%m0F-yF2(wc~ePa@u0oF#>+8+zc70ueg@fS<Xq*8+Xsd}
zd1!3&3)kCDAFg<7MK=58#Ki2!jKLs(Pxm1EOr8)pw(j#oy;zUosE9|YY7yI-N!4ne
zw}!Cx_vcdGCaKC=aZ+C4CiZ7YU6sSnZ2771koYYgX7JD^UJtMHBJL7?{KdC!;pJ*x
z#Cco@KwaGNhuDc$s%;JLY)`baJ+X<j=$JRyE)jw6_!?(=pHa2jL>eT%55B^~a!!yh
z{UcxSwWaTgX3kf*&(|Er)Ar@g6QcS*Uv0?Ckpx~}{Q+O&!fvbXFVGY1=*Ryx)LS9{
zH}E5l-W6XJ0Kk8nyi|_nftQNw1R8KraRXoc@AJQ(4}@(Jw(!4}Z|kJhD0CZn-Xk>-
zZZs9hNdRs9`w!abT1E3n#;slA*&<FLJRc|>gdfWxU-Nr7g6sp+vJ*29Ob-Urj(z6j
zF|U*aH*<abm6HoMluxiKGER`+(i3v_6P%>KvvL$3`F_U<5s2i~e}cj!NvGv_B$$<x
z049M&+V0<D+PpPcd)N5}Z8YsYSjq*`>(*Wgc70p+`0By*1ET)6R&I1bQQmaP`oJml
zN4gw>W!32o9ZF6^^Xfu@ont~!YP9pvFDKG}UnctRi$Sr_D*Er_TJQ0yUoal_X1~ff
z@W<=Br3`f5=SOtj^qZ=Tqq^@eb`DMx-8UF%?xFuyojW7Ahwl4vQBB0?zM<<_{>Zis
zCyReMBkyEi;}>!ko<`NNUxs$JxlmGjrxe*(I(RR5#pds%Y#E192Lo6h4N1sfKW*zL
zQs}m6VYEEuiq|-8vN+)khN`W#?s-!62CH&3&8Wm_zH6uHTw(AZ(VtgPl(0N4E_7+_
zq3o(3g|8*GY$`<S7Z%Rck`NwAO|7R#;DLk5ToI>hP5}?&)P|>B*YSzqiKba;r%4Kr
zCKY&w0nfKd-4h-}jfC(>>KJ$u>wbYpF<$J(IAWF!#mR0c82yHtr01e(4(N(|RZi!M
z9{r(-r2Rvyejfe{>3X&wQ8QutC3Q^uk&dN5;&iVm`U8R6hU7ZCl|AVzn&xv6NRrT(
zCKY&w&>x+ww|m0F(jy@}k~#*S#JbQF@UQ^0;i=Kpej@scrkQ1@NlIUuRNxs5JfBVo
z&)_8RNa`4PSZ_-I#OWqez=LpL!}Fx-9TLG4P4itlO;UI?slYQx#y_ch_7AFwg#9C_
zW8mRk;EB@}rho?pjSWw`>H!kL6HT+yPLmWKO)BsVl<`mMp75ZmN(hgnj)8~%5_sZt
zcPZeZbQ_+Wr0_)3{9V`X!U>X$A5ALoWC72wN!=43Ku!pcq>h1yu`2My>C#fbL+{)0
zc<r|K<Ok6-r=)^MlL|ZofM+`#swX^<WI}i(bqqXkT7f4{x0M1OMyCzWHz*HTD8c+0
zO;c*8N!mY}RN%=3o*@b0fn_9wM^eYY!+a|6#Oaz+zytTR;dw|`^NHYzrdedCNeYi9
z6?ig$=Q2|F>>pTqLU<%~3_OW-KPlj0cC+ExgglYBf1+uAW2Z?9k0up(`UB6`NZk`2
zrrd<^Na`4P66<18z=O15!=q=9C#1J%8u5P?n3KYzNd=yM!1H5L_k;%#C?PzOItHG^
zx{(y{APw5^jJDg_lOIIW3{3@(CKY(nf#(GVKu>rOQ4_)=sbk<ttgA=?57N5Av+&jk
zt$mhKbqyd=TO__%`{nuA_Vtk8G`YZ&R`nyhWcPYw!4<yr4c9a-vSj(7%Xm>Lq<^19
zgj>rn5G{lHL-bj{;1by*ixHZt>o@Kr#mRL~NWC%a14J&MW3XYj@VaTH1v4=`vwdv5
zZuwt67jErdXZtyey*=-EG@B2R_oBG>x%Rv9XZ3TIuhtXz9d&XRsd;%yUN|>KS`he?
zyl_^GzWmwcpG@A5+vMDt3QqTZw{70smN(npC$TyViTx*w{%yRAV^K3l=26x-USHu=
zjtRPgXFVn;{%9clGh6hOo_KgEv)YbS_;`={AM1Ha{;4~pvd95IC!=_B5E$(UQAH)i
zzd6r17XRVT(J8U?6~%v8j;)N~8~lgaP@;U(AK*Xyq3a#|hu`A;zX$(?F8rU{3;sLD
zOZ#nncaBkdjre<aj^y2Ge=NQ~YvViC86-mY(JlaAV*kuxFln*me<sMp^4Y_A!<>G@
z0LY^uYVRB>+}K!`RRiu&`rxm4NL_LzDTnH6TC097v6_357%-FFs{cXclh`fmrzazy
zGR&vI!+_c@?so`#b;OD#Hs-TaIrf#)T3zSaaB3^(+2|p%=I~ZB*2tMUoBS`C19m7;
zM$PB#lE-3sY)+JYMZOq2<4t;gA<DXqKIc3iK{v0sCL4Lveka-kxL)y(1^(i!Id;4o
zenr)m4y*1%G)sam?Jqf>#yQ4Q4jS3BU5<zcZN}}(xAf3P_;OV_x*`vZyd6#3-*5%Y
zuvV_(M51<-5Pn|{KceOHi-vFOX3@^A;^76+O^Sw2G;_^6)N-1F$25~K<lAzX^C<mG
z;E=1Nu?C+KLpf<ZOQoU&CHn?_)Jx%_Z(S909tQBW@~?2Js@baWdeJU=ualoS^79Sq
zra@ad+Bd+7mmM|CCbXx`n<GCS`5Em>l8ZZ1lwd_)YVdiyFrbj;{4rmlT<~Q054yhe
zB{LIvT|I)phC53SuU0v-e_=lE0N)gT<1$DWetB^7nw__Q+#Gn<9A#IDckH?~(8G!>
zbls>AB?mKQJD1Zed_#N%9J_VN+$7y7hqJXx^mA@k0*RLM;gk5gKF-nm-h~YkpU^Ao
zR}z!ZE9<+e>%3<&JVQJQxMIN@b%I5a?e>Fh@-2P8hGA*la~jEI&_$eKKjJfU(0_(A
z?BcB(Co*aM02fEc8+HoMjyLRh1@(NsI6kpc_D=+5MYZAfQqVSHg5r%|bs;vE%7Q-A
zBQYrcyU|jLXL2;1b`f_6-7{O{VV65cG>J2w)W0ATT!=sHsRsUdf7rnH#Jk`w$8V|~
zhToejtZ&?^g_jfso1+e~;+-#TDrzhp)Sjrp(eZ%;t)y%$9oRl@L)8`oaWbN@>i3Ec
zTvXlnG|+uc3q#t%c-L7!#S|xU<i&FSOVa3T0pD?fPVPTzI@hWnt5q8UQvWW8w3e;F
z)Zab_(($Jicw|I$B!WK95n<w(R`H~L9Dr<ZgiElUcf1i~e`U?XODZy~H4iWL4~_Fy
z56ms9ZT1Kem5Vd&Yej|4$r2Ye7I_5fbA9QD@d>C~PbJ1busGet65J$HoR-$zEZsv2
zps9Mjyve}nxG&s?VSNwx1>mU_x7(|sGWB2hS~9=eM~j}pL^n;E@70#yrC{DEV8*-N
z1}F_!b4m+0EId)J+!LXjAAfdDc(Cy`5dJ9s3>A()gBB9!WqYpjfx`nAzFhQ-c;%XU
zmk4_AT4L85m*p@$Pt^mZ>IdVh77U1wLshRnx_>rgo3ZekqG!ZaS1Y}9zEpbW{GOGn
zUqqd$H6szgpQ2WrD@2}g`|lRQgwF7FZ}6WQb>iI-af6VShu`KFSC=EN%2PU@lqZ-^
z{?^-ka+VO$Vt^3>iIRD&2-oDyE^VA~$pwjNl?Sb5>sKe4UbefZm(D*)f5tGszqol@
z=lv3&j8z1FsZ2L0@m|=&6mOjWdCK`k4q`io`Q;R)E7$zePZwnWr{<S0x#ky+31=#m
z^B0`?Wme4m^65nLOZbb>myGA|HS*xh4>9=O8SPfX7Q&~IR{9%mVBNDI;cOE=3_FaJ
zr}NFn<m%=8g}}YcH`aYip`||i2MZ^=AZF5OQh20s38$U#m!(-vvGWa78NOD&N0u7N
z=*g<zN%?)9dbrj!>C`jl*r%RTwCY4t&yRKL2`>{~uKESr-`JUdcJ=7NStLz70sR{M
z+Y?Y0iJS@OIX*}6lWca8In|kpX7_a}I@_L#eoA%rG}EKKzk$`oOhRwcXaB-SXAb%j
z&q?PX5fa6P?)GF;&|}9i1yxa4vMFe{;mFK)DdwN^l}|ALZ0_^?(@pm~^Usgt=AR1c
zO+EiSXK44B=AWRcHR1eo$jl<gG5`EEcK(TsyC{YA{v_*vov&uZdO`n@sY=~3dw4;U
z+Ou#3i=X*2U&PE+tWTWzX}3<NUY(yFT;-adgxMup{W$AsS;iWMxNxO=dg{${`q#>^
z8@0WO{ilCp;u88#+v}hI==>z>AKSlJbQb^l&eh-k!TKVR5$=TI6L?tPn83rjND+hX
zBi_$ij!!Ka)H)eVi?ldA(Tt|&>&pD)^v9lfW<r0*tbfk1;g9+;JO0%xWd#&~zWeN7
zEnNNlm<j3U3?SN@a5h48Gy09#`DhzdsBKE(fPI=_9xQ*v(k|Mzgs#|DeYJKmM+5Zm
z4o9aXZu+-Mt7mA9F0cAjKG}B1)=yQgl4x3bRHr48PmO=JGaYsI=#j)z(T`}jJr$kp
znu>lW@H`AW8J6vt{d>+jKz=sR%ycH8o16(KSz>1`^ci~sTA6$TS{*a_?4X03iKnr*
ziDx=JW!57(RprV2w_TIZm67$2?fU%t#e;3g)Pq~jFiJM}459V3OQxQ0I7^>+2WoNU
zzR*z5z=f|QoO%*vNjKH%(&r~}Q_l~9pYe1`)wi9sPkafwj*;{J;K9k}o`iYitahMH
zIQN`tW?I|+GG_gAChMPfWc~BD;{?7dcJ;G^*~dt-&}I$Pr22fh2B&T;i$R%Kth#YL
zl?1oMdx=jMD><}+$Koaaay~`XcIH_3Y~$%a>@R-H8e=op!(J|8vBz#z51YC3sCr6c
z>8JKi9`}NE_f*~{bKOtf)$$O0A=a8sRh91jEp(kJ{K+@uIWYc%C);*6MV<#Dc|vxc
z&IgSAYILQ2^Dm!HUfC~<0$0fw1@0^I5PU&Oi&(R<9+TbpIL~t#q%M7}?0s7IJw{SD
z<bCxVe}1@wiw>R~J7(QaopC(n&5xA#psT#_Ol2-LG?G@v_@jGDYX501<OuVqSGtUP
zmrP~)Gvc5A$w{g0%ahp)zDnL${C~t3#eY~H;_%OEQScvUO?V9WXCFL;|N3~UHRJ7e
zo>JjIb$K6h)PgB*gsZ&7_*Z{+!GCt2@Gq6)-@b?%V#k||<yiVpX5ToSys`MN<cpzy
zd5FV560+bw&hz~k@ZVqXPh*nX|3A<93kF{u@h34Pp#Rk6&5xA#psT#Z_*Z{;!T+#6
z;a@5j|M)(f&ydVM^HuwNhA98}h%biz<slCL83zAx)|<zGf9!Np_|K20TATiPN=5&v
z%li=ZtWE!}@)F};{pkh&L;Hk(sT}|MMbwar{xM-nXfHCIym9o;7eoK@5Ql#(*@XV%
zJnxSI|JZ${@V|eaol%?qc}j)<)aA{Ol=q;kyu|o#7k^&C|Byc6Un<8xzc1%QU=o)Q
z|IYakF8ap;$<V(%#NmH{!GD}}>@naUJHizH`{SwBrhlGN;XieGA7UY9)4!{{#P|<6
z_#fOS{7dEd_b;M`RP>LDWkUQ<CvP16^Tp7=JjCHYu{G~8;2*ox6#oCuV<BkMzj#&H
zKA6empVZ~ekCgYItGvYcuW|4{s89Hp%H@23A*u17%)a<l^2Xx-Bfc2=mxnm~C$>I5
z2K>{G6z2zwr&^o-c}j)<)a8AMMXpW%uJRJ&Kh44az&_z$D(8HGMbwar{*&25PbY6I
z{ww)n=wBY<@SoUP`WW!fI81T=!1L5$)4%#rxI7^f$Umven;$9fL05T6@Q?YJ^8c(p
z;a@7}e1cD)%2fDIX21O^d1LYa5nl}b%R?Og=@OZL<E*=n0sqWHDb6n#PqjAv^OTDI
zQ<wK4JkzFsS9wYBFXtI}n12WK3I9?#=Nt6pe28TB=Fa&L(fPNM_8R(^hdBH*f(8F^
z*67E8f8?+f=N~-J9B<P<PpR;qy1e<3@?y@ENVxt@lk*S+|CxQlzf>;gBOn!~qW@&}
z@vo9Mj{f;#=wBY<@Xrh;_>Vg|;TZ7GIwZyU3FE2OrhlGN;XieGAF^h#>EBge68hh3
z<3FQM_?OB#Uttk7q{2T-wZ!rdd1LWk$rnTa@(_oAL?Xd|+{p{afPa?0Db8Pbo;9{j
z|2(C_f9mq)N6LH9RbCSOx7+yd-zWS_<($v(30j#{_(xTd5dW`|Hx~aN@x{=;JjCH2
z30m+UcXGoq;2%9yit`)BQ>{(^Jf*^a>heBBXK2&EtGp!m583$d*C+f-<(%)Zh#FGi
zKbgP8bn?dHzmhM8{^cPK|EwSd|8XZj90UGQE~hyE;d!dC>7S=m_)k?{pwg7}6IWT`
zFNr$St<QAypJ_EV{?q${|NqGO5G93M77mF$BqCz(lIVO0-CuZG7x1#b@Qf_#d+skx
zl>G&7U%c?;d`N?tGA;B!#UKBw-yDxW{&NiKsQ9skHzmIf@({nbAbvYd&}*zW{&@zH
z2g%VR?gSIJh`7$RW`Dq{ozGiI;S1J1xA73~xKH`X{q=K99j^U?Gx(wn{**jK8l3Eu
zS|HH1>`hKfWBvD=m|;wdH}DkkKKfkZ)Mb&>Ke1DH{-V68hyRi7&tE$3b*pwH3B|F$
zCY;Zc+WQE+$@KFc5>dAc-t+mQ@D|F03tqUJ@P;_ud_s7c4Qzk0ha#)<HeH?Do{BN>
zMpIWtQvb$Ioe*Bl5V}<19YaEK{I3b0%~J$krmlqZ(P$FI!aIR43hy|1aKX!LD)7eX
z!V|)a^kKs*=QEi8eP36@iQtW<zB`h7rJXt<yqdv=w}^ytP(V$1EKd=55tS0c>m^Yv
zykFpp!doH_{~vkp9v?-K^$*V^83;)1fCSM688s*oRHEQAB+(3Hpa*&Yl?YzANPvJh
z5M}_C%Y>N$+O~yt1<_TPUEN)E*Ok==jI7`!T#_JSh{{zZph!1^5<wvZWZv(o>Y3>Y
z!OQ!8et$f_S3hK`t4>v&bL!NoQ@2wldSMO`z0KC1Tcj7(u0d}YGd50d6GAP^a{~IA
zIP^9Hx<z_f27}()0Z5Jn{Q6*o;`Cl<y>|qFlIfj*7)I~i6fn^XYnAA2w$|Gsy_j7Y
z^w!2_+ig)?%k(Co{~Cw>oXyQ~$FrsW%Q6`B-VZ=>G~m}qArz<gLhGyJ0hCPd48$;c
zr&7Q~Z_8_|Ez*nGyg_e$e71Z!ifftP1oYc+=%Z{dd;xk{27}&50Z5Jr{CX)uae6Pb
zo;e*r$@DHn45Rlk3Yh3^c`dU=da-(B(AyB7&0mM&TBbJvT^WZyix5G#*uE@-L2nrV
z$x(q{pN&wQ-V3cC`T>+o?=y&D^vV=4(F=S@p3nDOaQ=9N+6;OvD1`Ul{s^^9Zvwh5
zKG$w%K(|OQ%V5y^2V@~f27Y}pLUDR8v|hIiK*{v}6)}w7=P6*K7xGB-p6}V<e0m{G
z2EF8;fzvw#p_b`QKp%|HmAe?wEz-*}81()HS;*0WUw;mvIK2@07WMNg043A=HewjP
zuT#K8FZ2!3+iY#DMR|s{FzB_T5Kiws2(?Ua0{S?{01n;DfNqgqmcgL+KgdFk5d8W-
z5Q@`#q4lWM07|B}5;2V4_b6bZ7sC_L+iWeWMS3wB81(i=A)JB-5Nes;1awLqI^Te9
zkzSU;ptk~M0Xa(W>+d2Ir}skZKVbkR(_4oaMsE!TO!UJ1AbOjv{j^9gMtg(aLKMR3
zeH@{d=}ka)h(k*Tbc^(|3<kYBVD^zC1;1W}P@LWit+$Z>hGcpVB8JhshXN*gVO|ow
z&DL64q!-qlLGK6@!s&eyp_b`QKwlMyzR!SekzSU;p!Wb~#pGzgukS)APVa@*H|hbD
zOz&};R@31rodPC$F?}F<o2_lMNH45)gWmBdgwy*1LM_vqfW9dX{g46OBE2kwLGSm#
ziX1Wc^}`6o>Alc;0v7O^(Mxw&7`>;FWTqGMPNKKjT0)ETG6xFq#x~2#Y5g~{#%aaH
z*%mxA4B?PL1JeBd$a(W4Ry?D3rj4951Y_*w=lf<3z+7?GuXECn3MUOXJ6!i$=l8<e
zR>80kB)6Z!+PkbloF-fY)F%s%RO4SAu1_;Z4U>iOHDbXBU>!oZaD0Ca{^56e4I-x3
zS%k$=2r?D`y5acNxA-kZLrsHAMDHH_JBSE+iP-xiE*yW3gs%`Wu00|&{M(CDIp5&7
z0*M<D-b`1nH{sGUZjRSyy4!@klihSR+}h~xXYt+&G*g0g-oE`ur1%PQ>mpa1)-M|L
z(NECXRpLHtDQkZzGsOpwm{O<IV2$rvI%ge+cdLa__myGaU*hK}r;W46@V~M-{%G!G
z{BtjeKhP)dl|)Av4jp?F4MR;dTxZa5CDD)r8U!ZakgS&QMH}G6XA%0Ff$ti3)kX_W
znY!iEz!nEo4~LEZF>M?z!py!6xP#1N;Ow#QfyJ~@Bf!@albzg|<+$O9W7o#_P~!0M
zNPu5Kq*hSER*D=v9dBnAqD9DsXK6P|3{zqyiabE@2dF8LHtj~l=oEvt-1`M@L*@XJ
z{0;=C(2|$1_xJc$3f}IWMr<V4m&ee+J6TO67>7~PU;&@-gy|Hf?MC7@L_;LJd+As_
zQoL2fN))jhkCx#(ve6Cipw5Jt2*ESN6yg19(R$kNun56_LaKAa2D7vK-){BwigZk@
zzu|tnwf{(~mE>b&tJGkf?^{uIM&sw(-PVoZy_8ceId;$O5aa&K`m?BpmL5eps;9R$
z$(!5=UWECz|7o2;()cJ*h^Ck}g{VA0WQ2((#QX$Oh=Jpw1-y-nAjE=!)24t?faPF6
z5{c-G92VUxa)yI>8weB(Va4vM;_%+hF;KJ%nj9s9ZM<?S5FFk~5J=qU#shGkHnr|H
z)g(x}YIEpGI0$R4n;a`VhjZ{InVldys=NgTFMISKVfFQf;C3>v{~Gek_-XVvxE!!1
z_-V-R>v|sDTU&MlDdzL5)HmaoYLLY4%c!<PIIAXxYDA%^TC55$fj~`^6pK#7mKnT|
z!5542A?GOPUCv_X$UDWdqf2PKk=KtV$x!-<@|qC{O%#<r-FuLRkbQ72yHk`^_CA*~
z&R!Lw2j-9ot~x`jVnHPp9&d$U1UgPq>~7`0>>lnwezwJ%Ay$0Yexi7Dm+rkOixQ&Z
z#Q>`hpgkn{O+R9Upr7ziLWGAa7iu*`SN`C(b~S=4SujL^_?p7MSh^e<PhX*vzU%a@
zL@(>-9>;gSDNg^qsKt9f%4FGd;61i6MU=OAhe`4=?Xu?%M<1}_8k{5__NZQ)^#Rnr
zh6<BZbq@W=-;2s}sw?`*SV>`6ipqMbRjzQ34m75DR|Xned;e(AB*{I<l}1lSfm^P0
zS2U%Zs=#sfsBgS7>MYz#Tu%rH!A@k*D52FTNU@MJ5;9keLc}W2Kz73stEjlDCyG7O
zSThKre-V&6X}2WT-s`;2ImS8GIc^NZ!%y(4vnkMM6&8sAf=Tb)*evrjmO106i`rV&
z{Sok@+PCVRHux#H98p^LML(gtLVprt#1)6B0T@pVG$r-TFt8OBh(l-zg;f3{Gb%*Y
z75){C1bLO@<<!1lEoVF$pS2?Av%&ZWKssxP2Q1M~&;$e_DJ&xxf3I_#DA!6k8Zpyt
ztt4_^Gx%IsqzpL=Uk&hE%+NJ4&^Jv~Gk(I#&$@dJ`rl^suS1m9J!H^t@NqHSsKeA(
z2+pQ*s>1bXMRyf0j-h8%Sw^A+eGF2Tp|_BLXhGJ3slb~)^(I`|DAnG2m73LzLj*WH
zMmQ)Ohk+c2V*F@-3H}5Io1xbOdMH6Z$)U42bQgl2323ALD;eMILibl~$GTZ8r*@Pb
z=mBKBHi$+cVl!kUo^(EB_kO3yBaw1)bBgyX#kLO7r)pnE$zks`$V_LuPugBZY`Slg
z|4_Q9X8jrEA*GsjAp{rPzo@n@m&4CaLZu`^ar@wkreeBQEg!m5R6V=Jz|kI1C0z_v
zGDZ{SPeir2Ui)gQ6{7FEO;milL3O<tIA@)Gr6}JlD#aS4z9Y-wyINGnG}a{S5mBzv
zL>S1pZoZS~!|(P|ZO|*Reoy)^S-$}R5lRdCuoo**k{_;i%RfQ#YvuM9O<8mf$|w&{
z{*isR!47_WfPke`JMi^6m=BwnRy%<xr{d}5R@S_RMAEbyS_z>Qh$ho;6*{zY9j0Y4
znlqG|HuN%}C?A(Aa@ing+Rq~W?>~K`@GM@mtP!nn_S_aWmoDbOG4}ztI<mv1Zn+M=
z+bs<c`J5f1W1BY%Dw>>mi-D)I8_6(7q%Tr-uz{K-=Tq8!3Vj4bB=w<eK~l2*^XE*c
zk3$WTe8gxJQ~gdQZJ{Xdz*QBvl&-Wc8332l8(`kzG4MbX`lAa9+LFTXS3TuuDQL&<
zz^k3_LFR6pLTx65wh<DFuUu5-VI)6i6&8~{?3TUR>25hcn|ZTdjTquWyp&^5Im@UN
zy_A=-{k&4%HA?C1mgi<?vSQvwlq6pb46a&&*6JESYnl6q5JG7X(n-6MbRuh&jmYa<
z$Cn~9yj5*1&T?93(<h*Z#_V714CK&Vm6nYJa1GU3d`mGPlxol5;YtYn(Ds?od8zv2
z==tbxTT*TWUfzD9dV7lg2`k7?S+#dqIYr2i|J(}Wf_JT30Z+8&kQRA^=~wKTrfwNv
zy%AF>4-J>3+T4m2#ifg~RWD;DLJx}psbix>?}2YohO3cHEs4P<Uj+Tj4%qC@mUTDY
z$i;6<8!ieY1CyO{F>GQ_O5}xKDkhVPNw<{qVjxOJei!l=r|5@aj+AO&{23k1Y|j||
ztqJ`dsANJ@t|Apl0|iV8Ww>1gad6jF3M<aS9)}d#lP~$gOc<T*2V^z~|H&8)<Ha{w
zRBp<}Roq)G-ge5MOqiYWpiE&|g{a&C%=%lr7b^o;>;S}u+f?L+7u&iaBSyUiL(qlp
zt>OAkE^ZKIPos7M<F2T98lg@afP+4lw;u#a{}jqnE^gGqy-1jf8zaGl8bf*w(wCrw
z`>#I-FG-%p$X^ioX&Oce;Um(yg=Tw<(a-fA8B`GWYIK@fGOXk?$oKME3^HgVsGn>@
z{Y={JmVeN`n#lB@7yYOj{iv4dzxzdbCgdQGMC^XvdsuN0Nc5gNP?q*jo^NDQJ}2^Z
z7Ud_X&v>1nX?H?{7K(vQcB6BQ*{EHF{vuY9s<M=$=U5^;m|SWnCR6-CCcdHqER;NL
zKjI>LO0~l;(dvSq^6>Unv-(_2-2ys3a1@~9(9Ef#qt=^CZQV;$rgs*VIhoqaR47uE
z=>Y1dEoGm1rP?jKz<G{DGyQIqZ|m|QH4-yZ-SRoIRKc{ku^OrYKl2TK&VxGNWmvu>
zd@Y-&+<c7-CdZh1;N{F<os#KR#=u~mhmkYcV09}Uvpu1cLU0Gjm*jIIDwCO2=&_!P
zW~IIeMi|zMd`yzpFk?kt&ka`orK)7NqCH{QsM5kTNj}Ie8<l{^%9Su^s->KUQ}pC*
z)SIUcX~MFOu;^YiP@u^sgf3wQV=-BSd|VVl(_2z|g%<x~QH$?W$??4qTul(l^3|w9
z=|F?Tqlk#9I+}Du{sn(?oD>k{%KchW*N~ML&AQ@G38K`w3)2iM5Wr*?|0XMt>}gRA
zv3$)9cd`VV^(TXY;FTnwhA}EBDl36=m>GtY%VZcjM?3Gvh$iKH@3w9WG}^rHzs^kV
zEdS$R#T|GMBs;2qz-oeC4QQ>%PF`Gr#x%@2!=A$zNRP6aYeFAr|2#zmr|NsS{(FIV
zYPQkHqU&Z&Se5HvV^(D)ezcDtZ^@$j-U8@3RKMDHDTgj5=)ar?y%c3{B<R^3`hE_*
z1X0?|=FmcD4A4i8KTr-o&v7HqaZ42CJCP$nSW6+po=n(JWGBg|jJ_8*Iy#z__IxHf
z!7)stM0sPOf4e`LWkr<e*exua4k>k0!d^-K20+oQL3k=QgqGBN0<_R*(-18N&ZG#7
z2Bl%~;iQu(qIHl?G)WaT0@qAK&Np97mQ2e*w;Tp;tSmR?dum!Ipf>YHQEhjrQ)%~<
z)6p(Ccb^d4Nqs{;#p{GE#8EK7XY2q@EQyy>Rgu8ymiWrph3c=2)$hsKiUMz9^$$_o
zwRI_7f-Xmwr>K4yQef5hiTZhngU`TwB^5Bws;rV+ymE+|wj7+XxE-g3g;pqTN%mAr
zIH{ucfg(8^%{s6GO`>?J$ue7tawWOitv-e+))7~3R6Mm?l;<sT<$jCRwiHS2QZCA_
zC88Se6Srm8DpB4o_H?cESii!TpD`Y*IS9YT#swgr=XPwLdGio8|83L^o6omOlE;9{
z#enjxM*BZU%A&YhQpSYc)-6(=Z#B><pE1$n_=s>325u(t2*{`r#jT5EvyxlpAFVfu
zj*Z@NN}n>PqfgNL9r5pWDRtg!puuge(jP!$B!rj5DmQErEXh$R1lyCogn6r<L9cZ?
zuwY9o`z&TE(*zdaCIkjCwK{JZ?1Uw5HSIP?Ng2)Htve!ivyo#$)$Q2qg?lp1s?04*
zb2{b*(!56rXLn$;RdQ&;LY-PbdDst(SL$>(ejvn7k|(Y7$Vc4rZnUNfK47u^BjPc*
z@07Q(<ufp9Kn1lJ+Q+Rrt@vG)Xs2>h%PbqJcIoGKd^z*Fp{!9b_l7YJS*ea@d6$zg
zP-D2LF#shj+zl*-s%bZZ#D$_dI;|+r?wtZ~bj${~{3RwtSYg@dk`H<0O>RitaJ5~&
z<oIwV=3cR)$*Rd;8O_Q<@gkP|^2SsP3u#bu2ezcS@*X+sL$}}Uk?T=+*d-qY2Ubh+
z3DO2i@hWPQ0Gq?gyCE7YA#krnu1GYZiNDlF0G~NdnY-+)(~<uN@3-_h0_<Gow(io&
zVSyyOs8@uDk67Q;BbaQ9Rj!rbJS^X#(Q;@Ni~bp6CF@SsvGkb)68rcD<AYmuMLnT!
zy~Bp69s3bZZnfhxV$b5&B9|oDx75@#auke#K&H$KQ_{7>qt0z@)oEb>Sgg~pLUE9D
z{WN3^Y+k3gM?`FXLH3N2F|3-+&u_ze8qLq`z%(&G*Q;oLenVli`T6C@W1gQMwA1`N
z4YBe0`LSyu)R>>c<y>rj{(g4S{G9uLt2mev?SAl&nK0c6pB6m9-37e@pH^^|ISU>L
zXVq^0c0coU3AZ})$a9m@QOFJFb-dV{F1#2%wL4I4CI6Ldyg=ee!H(3C7u%aB(|RLI
zFJ$S37fc_|(#M~lZusk(HO!ujmTwWI!1LQI^898-*!L8rjHi_G%~GCmmZQgG(tM75
z`ij<bW>=zo-7v|8=rI7d=t2}s`gYb>`{plZJyN*&qgnIEZ~k##_2xtS_HO=c-_gyR
z_nq5xa8ll$O$S|hKhd8vz$3c(r(L_?|Mq2sV@^c-ARKcdItbyId$)VQwK_$*l(-^w
zig5*wEr{tYG>4Hwrj)_&<n}l}J-Izh>CAslIy#xjpIdX05JKdwggofnZ}#Uli#ZWZ
zG=*~=prV@wxKGuc+96ja+=sr7o<n$AcR+ILS<BZOEpK3wPz@Jqe<9R?aM1h!C~6%>
zYfG)dV4+EJeI+cdo~6|{OB-VL4H|F7c<Z6zkilp(fv+$d&SjZzQ2h`(JMr7_$7Zd#
z5Ghz-Yrvu4KSKdE^M#XJ=crh)z;J`J0O?#h$+zZG8Y9>!2@=vS1qJOoH6x%$pwdom
zaK6l`ybz2K>;NncPA7NZ7@wELoZUpBvy!~50iS4Y9dq=_TRU_1NbY0};!p-Y>s&*?
zdyVhKbu?|v!NB_$WCIjXK20bm!(q~bLPd4%rOV*9rPDHf9-zsq%{?)%HY~$w^bezO
z@@kWhJnP`H1?2+_B{$7CN^S;tiBUML8*is2x*dg2UZ%8GE_PJ=+K_RShM0}Qi<PJL
z%C%qsTQ9hPJ}kYUJ`{pv$F$H1p%asRW3u*Zu|EQod@Rs<yOEyUA1VEvr1bI4^<(6Z
zJRNO6*iO36-b_CJZ_tl$dHLJ)qyD&|TAGblXl;EQlDI$I^TsPmE<|!-JWFm5O1Ja$
zU#B0*CEEWf{iv@%r$*xkA%<+wZn6FUSLjFmL-a^PK|YOOOA2znp&%bYx=BGk1=>mf
zUP$-({y*zS{RY$+*N?~kf2bc5qwuc|G5a#vbK@IOr3ufC*Vf`4hO01yz@=N69z`p9
zz0AH`3Jurs>4X7DTRzZ_%zRvGC-wKV-IN-Wf1b{|>(hl7OlRuz>6jq}^=kIsXrMHV
zUW+hr@+~p>Zj7bV(-F<mng7OEI=v$iPyabf(>%3IvN!3)ke_qec-6!9yzqppJodb8
z6H@xx^QtF2)7O4&4YJseT|D8yxAtRWtrHG>VL$dr%7m|c_U^M%znt(&vAz2V_zxU*
z<+WRYU~SnE#`MMHVDH*$yiIZCwH1i3=8fSSPF@?Y-HO*KuDo`mDSj0BY`k{cgtzay
z^4iUb_=<z+ZMHIF^*L$-X+^9JV&m)iZA&Q$d1|SBd0wvHn7-AZd&wTX+F%Z$ex4lp
zo+XVtKH)TxIi)n<q*hUGj>_K$4s@%~Q#MsTdTMKtuyzM%sYy0ZX$%2cs`O<2`NN3W
zePgWQO@bqYdXnnb{7im|S~JIuaU9N3Wd@^X84%5|G(n7N=C_fzyV2rCBcpMtk(;%y
z5E=#=Vxq+jR&v>h@h#@BaY;+GA>Gi%LtECy!qP?Pu_n)rCXM_oQYJ5BRHZ$~q>DFE
zyA>vyas!p=WVP<D&{A?Le;!x}t_Kz|^EF97kc7l6*Hu5GnIA!8peCHun0;5wNh52G
zwp;_jfuZl^b!otyjMrhPj*Qpm$Y-Ge#<6FP4rg%t@;NeIS1i-712p*?Z8dvL%zQQF
zt0AHTda4l0L$-A|fo|BZ&yoGQqD9E|Mg?TRu2`bifH2T$wqVIwve|;=^Le>JZlXg~
zOExdr5vac{aPT(&0YL~lG1m<=WeN*zP%Chf3*UgCG|<#rSl9_V*?$Ny8Lbi12$+rp
z(+HS*38oP+R{;k0^TiH92o1vdW;#?c48O{-G{^8XA#{@w*Pq3uJBFtVp(~8IYgk-6
z$MAMSsI3v#0l(Pz8=i?jcj2(rEF4^$wKev3H`EgJk`VeFC*=vsPEa`G)iP8kZ0ZtJ
zZ-T<{u9l(b{uDO43+a@eelwWMNWLdVGP}J(Bx~3eW+dO%h8q>8^(cdWl*H)AZ=8N3
zu0M-2=r`i7VQ~iiMqCH{63)LsKTsg3U!WgcQik<*4DT(3-awdedz;1eaSZQ+a|uS=
z%Pg*+V|YIyw9trqlEvjahUW{RM~t{x_>FU_4LB9IFB!`QLll^ljAg<Bmf2!bvJFY*
z@eFOzTEPVodfHnEjRj}(a89BX)j2pVZxH0B2^1=W)AI&FUcO`Dc6oy!CkHv@Of+zU
za@HuwNMkKZs*A}+7^P8zlUOha1d<`n84x5A3<7~<2>$-9Arr$vX|w$&M(?|fI`oPg
zn5=-_Ni2X~@gnY4nCa#6aSd>%Hn@T4G5SXbBaZG~DZ{vY5Pk&Lip6pHIAX++Zxv-&
zrek=f5ZY<PeaYfFI)--?LX}3`Ru<RUF}$-7`nM6cmc?~(4DTX@UNGYRir-(Bq-`LK
zpnkq5odnd+$Oqk~VDj-YxWlx_nwWg_g62D)UsN9P;T(Qr{5ojF9bs{tU)znioh**?
zYn>5C_qPc1pYKmkp?+nU-7(xQgy=pN)w+b0mhBjxErcF2;=C-bhhumTAvD^E8_(i;
zIfnNVLPbWLgx_E0*A~>;GQV)x6lYnPzQRd<_;SS~S26kagL_CH2f?2O^LN%*1RCj>
z?<X;c4IF|V=9+~=tg{}W9)L5&yFQCSkiQd@F`Rk;DcE7u1CnaF&Wzi`)Yr}J1KK(v
z8+9H$v!2{{>d~m63db?3GWAO^{IU7+h2iPG5X$?R9!>s7P@)|r+I2c9x$NiaAODNx
zy=*`be_GZMpYs}fqsHF)aMakW|083og#LONf=&8s5V#uCU;SB_>#rMFnCq{r5GKi>
z)?=Kf)=T2Ng=06IuwxL^dPxws8W0z5y@xpdg=|b~L4N^*3(A)r)Fj%E={~~vg76J6
zAby^r8+eIE`@!a<_PbztbV}~$%lp!RxG;yh@EVQwBTF5N0H*Pp>c>Bl;TG+SE~p{S
zgKpT{|Bd<Sy;qb!j<n8XYHI4JI4PdoPuT(Am|VYi(lnm_5`N?_<d@4|%b|Y3N@xHS
zXyv@R8CdZC`m_9jlPlgvK;pty+AX|f-tMOxe*=Bo*N34)j-CFE{P&HIw_O0Wf*$If
zuK^o6$wLQTVx!5k6bD`ZB8%gr37s!z`k%$|(S+_=(S$U%o{$^Hy_xI$2L*4I(wYh%
z3INl5HKqmnP&DfIe<OH*7c*zN8IdM=R0ebHkY*&A%O9MXha+ww9V|ytLHv-G>6kYN
zqy48mGFE=)yg?Z5KQJPb%I}gl2&4Y1Mp9Dw_PjwD_GF$ED?dALP_}OlD)b|sm4A^k
zxJTZg9=;O1pP&rxl{cuDZ*(j@sl48KgL?Z4lHONT2KUJu)W_E&22cDzdHwPR_48fA
z%FE9il<!NArL%491u3U?8|yn_(rN&o&)|kd3cczfEc_0=6)SufZ~k!>d-yhrRs40p
z8mV|AVI)tz%Z|;sQCI}uRT)n&Ya;4|MO`__*uu?+W{oQZ$VLL8bEYVE@_20Em5xX3
zHoRjI`kV?bYqFrFgvCE_5UCSwFpcblo%p$z`e|dq&v0QCo|_gcH&NEN`}ECU>^rgf
zqkTW2+>fz2GJP{P?c(x<>1<eO*E+W@uU#wQ&y{LXhv@m~QfoT^q*itlMEv|6@=L7?
zS$g65>Dbgny%o{0Z#jO!5Z{~l1=YUIY^$M27>}$)7mqh(HIM)F+@havkk-=z0;q3y
zD<c_fxYgkFxoP*^YH;-2w28MGY&?&2%r7v=uw@9xt{H3a)Ndd<e&)j{^1e=mfoS2(
zJE-(dD7`IXGL?RZ9W8ZFA-*SeqH-sU-`uQR995&%qTL?iTr>U6b90LCME^7w^wX|Q
z;DeKL#oGhvQl~IbkS+~_QN*}>7FW;W>Ww%tRu$ezuu~i2$xcNiR!XgsSV?I}l3IsZ
zTG+(q*nSUBuV?A?&C~Iag0QFx!bgj!iT9ruTnnT+fj`&_q*kRTJ!@hAV^N3i3di&Z
zCj2vpVu?Y(zfPO=SvxkL-c^Y=@n~-C2Q<ksjzxJpHC_PdUI3Z&9o9pr80_c8i*Wz~
z(IY!GP+|Dv?bOf=q!SfFJ$u=V(~1B}FZO<KP--eWu?m<7(SF?jW&Ix~UCi{I*Z-4t
z4Vivu-v1*oFpTlRNH1j4Q)uus@_s!1xAy-?89IpxzyDSJU$0;Wpc(&P(f@UY<>KSv
zukHW(UA(HF>Hqr80J%W_*Dqz+3t?Ls`XRah>!;9TNR|D+>HqpVme~)jK?{EW`}=>O
zDSfu1911>4dM>>A%rmtU4$OaJTBivo9=@uZK(BMtTiU76FKjqnjNZ_0QB1+GRppB(
zobcHbpty&GmC!|xz#L%7cUe)Cz1wiBQI-%o0p>BIW6=#Ups^_vPD}z&N*w4b0I~d&
zQzx7lgQQeSs)11%TFLVl3XAu|fTR^?8SuyzxNS7|IWiwsU}NA%`!RuS*3gq&c<cz(
z95`e@HV!}dLdmpsQ%YMmlkD9OVh4dXUU)UW*0^oE3w?aT+deznw+Yk1hEotOwr^7j
zFvR$BCcHh#&h~HUt2b@36fGSOE)_i;8?6lci})ukwv#$pWRG!>M=~9=D5hg#_L@2p
zgs=lt%syZ^x4Sh)6$lu4E6BoDltJBnw<eJ{@z$TCPYBsf7Q-vtVwm?JtK_~;DX<yl
z4P(r@hcl~PCsuJ=1~9S{ulNqm)`^{XO%qz=q!4-sOxw7OweXNw3;Ql(CE;Q&6Q3ch
zc}di4c>4T^9elxw-i6Hve!iI~tvJUrNza{&31}B%KSWv)HIkySq|O^r7#RwS!;JS~
z6Yp7cJ&Uf7N5}R56;1Eaa1L2boBe2X>-_6a2=iOvA5FVyF`*)-+ULM`(TcP9D?NAC
z6#wW(U#2l0r^iaBVLCBBQPU@zr|4wn^vqU5rn#!^KqP&(C}b9`Xb>``=Ne4a*)}c<
zRHmXxHEkJ8q6Q+VRYR=eM5RgPV@j0C7EughgpkI&R_3e;tb;CwBVdb=iK$H{TS}=G
zGVkgwWR9an6I>eK2X6|yHae<tY73TppsDk$o&YWca3P@v;1K{GkqqoBHSBAmqn_xf
z=fES0s{0sK@v_0-_<RO+)l^hx=2pk4WDVEK)No1b6M)}=yXI<9rj=OT+>$4$Kx8K4
zRA!u0306_pLl<0y1B?yO1IsucXq9i)U|Kc7jzH#JAa*PfIEpAHQul$E`^@-Hq4guo
zr3*zz)9nA|GzBWhR~$)UI+9*P{uSH})&UNp(VQMTL){)non6ca%?C5pk?pMj-^$oU
zz8}OkwQ$El^fu2Fzu}JcB-n$>ZMaOCds6R)gRaf&{aCu1mGWGB+$GS@{0<ACE#=<;
zX|U*@BiSs^iTsr-+FLkGIbdS;7LJ4CI>afl<Tx&Li*lu>WRF;am)#Ghin!hFDG9sr
zrWjpRDlXgG9UO6vbOsKj-YLoZoN}F5aVEuyn>=OvSW?B2Zc@%}accNspyE=qJLK&3
zlx%ZWobBeBTGK5QxgG91#FBZL?uye_i#d(1oC8kzb7#fTZmygiF11&eBKbp4NsXuE
zGiSw5$WljH0Gon)=2yFNj<|9T7Ug{6DXF7-=Q(?ECLZ~mV~VU>#gaPASD?BIMYZD=
zvBcF`%&EkWU3{=EUqm{-5W;EZ6tSeZ#~3lEHa1@;{uH}$l`VD`>m=R9qKjB_K!jK_
zJX0ze+zuCmmVkI%Y80o|{PT@BuERYmer+A6*sGP+V#Vnz`5k_&pU9zlz+%lr4!zF;
zb~!}uBIMeN#%?(kYMNXASl*Fahx-aS74DLO9p&v6-*wAD8{i0cRpH61RNwE#@|^pY
zR{q%IzNO;2@+-iH@+)la_l&3%QFyBg1oJx;71b$jyuThu!TPL>OR+D}v32KrgGi~U
zW0v7CbA3B2j<>hF1I&3+T&bvp9^+Tmuu*L-!n<h$l;wmej)IFgc;3gt{RueB^Qa7Y
z4c)LRa)gV7Vd31cD};cE6Z!mpJi9R84}+Q#qQ9qhbFT&?9<b2=MRF)imC5USBT-ul
zI}Q#8C|soQ6x`i&%N3#=ss)@|-i%N+<xoQ-096$##|IYlEmffx5kde6v6@ikD#W0M
z*9cyIiAt4Zbqc<4;vaV&)(}EQb<XHc+}sm_hfshL8p#k?Pc?YtqjIPR0`SX#zj7#>
zg&$&J3ky$V;Y=1L$Rb6h59cV*Ky`D5au%Xi;?@X-m4nI&M|@F9BebR1Q=r?543!tK
z(knUsM%4N;5FiF%9|p!*;7y_$hid8Sud;kP@_N)>X}Musa$6pj87IJh${@)spTRXf
z6`+_Z6@g1tTk7#KF>vcpA#^>;!F3tjQwkikiaQ$Vjyha&1hXjK5fOsz5OB+%qphjA
zBst>z0GV;4?_2#};25S*&6swmC8phnEHbljl+bt<#tm~Y*37^uES_#`C?PYGiAXu5
zAs&>?!3RicU|%jjf{h4*0=mot^mjCgRw%38QX4H$Z<W;S6p!Pmcdpy<xpy|MqO{!h
zAqSPp#cpDt-%#J>lKd6jTK0oN(_Oit_;T}WT1hwIgwRR!Fp)W^Xf$2O;rxaixkAx7
zTNEZtMKTjEnMoR#1)0g0!q_8+h*e66*aP<-EKDLLGgc`fVh`>TvUrjlnXyV??2-8)
zV})}^=DboEgP@E2`e-&+vM6haqoI>?x+p61RkOSjR{W9-G_<h1qTdc7NXIOt65e|h
z)_YuXlSe)*DNKXlVj^`Vv4nXkk>n;tT}h1qRRV2l^nN+h>DcPM9VNe9nHzQnn(~Eb
z!{U{2UV-~l(7+W?Gm^DY@V`Vw89h>VEpy9NqP!ovin=KJChBCJmAa@OpxEJK{T~hB
zcM9!O>6_T(mIwC6_rOewAOh*bu8%~PSUZ+qwCk1W1#Ne|BA&vH{Ivd}jP;hL+u%#1
z71TaXeAlOnbVKslN_{(C(-hX$<t-=GB0LpB@6?a5q6)!3;+n!L;e0VVv%#{^Ns%+n
zU>6)7;36RBnNxUnv$NkvLXd7{wrLQSyo=v*U`vXS+Sd90bnMf^w^jqx7YRYp64vFH
zsCEEJ@_G_?s5H_xU=k@AXf{$MlZBnEi$<<8=q*zIM%~0&wuy>#mYuZ^U!4K(AW$O%
z)wFDve6UDn5L~l4PwjQdyPWHg4DSVByG!<qsV`A&PGQ-mM=vi*T~GQC4QciMjb9Or
z?B@DJ4T(r8l9!X9qA3YCph%JMS%EIv8zD4hk-{OUDc?dZifc8*8Z{{E>2D|s3F*&z
zfj2D_eN0tc%MyjI1_by_Jc4p1&T!>ALUBFI6)Zw4@$X+FiWJYQ+O2eXl@w}{vZo7N
z9J6G6LXSiGW0zu~0igGQvo4_B6YEQ6z4;^dPjTCmX`Lo$8fYCMSWl6Ty+Uvo0+@lY
zaSX?k_Icz((4px1q?n;%i#Wxgj&wY9D`__&=OyaVLQaVI7`Yb`UJhaQpi7Y3r{Yyb
z$~@dw<M)YiJx$1AgAHP)v)s!mH`C?yaZM=US{l=YqS_?|`rM1lbDw)}j<t@_R(#y$
z1EFsTdN83wickn;fD)h{`3H3?!V5%DV-?A028KOoA*v<|^Jzl9<a6{K($g$z+M9%v
zJP#M*B0`P}SFT;SMQPys@G5+U^(d5$8$G^+H7dFe6K#cyw!%akHH|<y`jbEg2Nzj~
z5Y{qDkrdt|c($S(%@7XsJ?a}%!{iwqosW7*Ocdn(=vySr=s-+XSE37%jN*=^gd3xr
z5kfE(q!?AB1Oh;*47(DRU2g(FskUhhH_e&72xE~sgOKMnY7z2MqRhjZbJj|QZo&1P
z`a?8YqrdVaTABN=qWi`SUa?IYjr)agA<!9@RvV+WVgdO<nROX7(q1aW*SWj~eMYeH
zgxPJ#>4P6J5ZlUn;C5>FL^;K{$xUfkZ{z-8So!b~HBMA)=|&~laBbCKR8&$+TR&7;
zE+(0KeU~$w6<<U7c$6Nia8^fB+uR$_sl5~BOs2Kqo+duwz{!uui;2%f$iTB0KBc%R
z&FpBnGl644)Zm!iLkI>C$PJgBdmD#L<`=-tnz~|GBbsb#m`r_jR&;6|O&u!ErQp7%
zSfO33K6_I~YSW5H_nf_IQHmh01hD^ht3?@=4kaZ7X&*Gulp+MbLI579E*9P$l_^fG
zBN(!AOGb5;hxdTyN2nu3$b)0fBFMYcvRFACp%HV#D9N|Zm0JVDrw9eLlhm#~rM8y;
z!sLHL-tH3Kt@K!{2Mg~?1J8NnYRqb=8jqT7b*cl}z$z!CuU5Mh(r3k2DLK0*LzSim
zzO+0TzFaKX=>&85w8mL+x?3O&Dfk3)sP4F=T9or)(Sv6u$|p8_v~Alq6t$%&=L{=t
zW@>1kT9j%P#4j<BU0am16|*kuZfj+c+)$KLZ4F~ME~!L8Q^SAEc0W^brW>-^t(a_}
zeznVH@Z6HKQLe?uh}MEwNes%VR0kkjE4(}SVj2t={RAL)$&Z*^(Ii0aGD}qZyo}qW
zPT}1?GmCPz6sc*I&YW<hO%Yu`{ut1x6XiLM&;8bD5y@Jwt4txVbM2@_-bqfrFgJ@g
z$K=4dJYi8OpiWlc=;&AkrtYAbPFdv$%y8tL728wF&SBPryYu83N3;=x^;-aE$QR3Z
zPqTa#TT{xKDA(*MV#y9P6mElaK3ALrH=3@^IX?CHG6;ygHRm{u&JZ2XWtin2$k0i?
z(2qcliH^-sSKO`xhcel`$Vk=S;P#dCJ#rE2T#rI6dM%6dBWS7EnpV~X>jPV?v>m1Q
zN2fK<$GPtTH=GXKW%&Id7bEZ{()IDh&>kV&o&O7pajvHuXYQOIBk<o${DiG4Dg)Cc
zN8^mkC94K|Op;H*@=b*+f@s#Qcat9i?`TQ6+7tTP2iIoP+QUIXsrE2hgwHmpxWKoW
zl6*i?$Kz*Cy5Wh96?Kw4uwW{S%j_SOYNtk%I(1bK+)~sJ*R5q(Oq)7mlrdSok~$eR
zz>UyFsDb8fsNUfw4>|H4k326OrJ}5D9(7WtyUK;ii3F;pRC^w!qvQfA`TF3Z_Lj&h
zm?DusF*@D2p03;`e=n@PRIUxw?+<9s{L5zN!iqE6W9<Ou*eRAY>pSw@N9(ocQfA+S
zwLU{m{7w13@39DEb-s6K0R%~I64pYi?4<kG`Hls@%fD_uM7^h5c%@=yjX7!lq5OLm
z+@D{#;A51Uf2;3bRPwC9vv#}7BX7AAUUM0l#hP{_WQROOfcC*+$%nWKuEFGV!$-xM
z5E`?hK24PSSlN*Px7-O#%)Hk*mR#Bu!cWKj`In(9Ks@w8_!D1`0TA8yXJBY|R&TLX
z@*O#;I7_n94{Hx`cVoLnrJJxJ)fM_y2w5SE<gAMpF4Pg9l^vu`EpVeJuo1o5^C?{S
zpmWsaU+<Q?WV_`WNp;ntKfrc(<?gF;(V+~>WZ6|W7>>Fy2Y10qA%@Z7_c5wPCc<JZ
zlE>8EJ|Z`)^@YB?r${M&KNP-Oc={Ao^scLR9W59PRi%e58#*Hdr=4kzT469$PVx2!
z!}*Tm!r+}72xe*>jo4P`pW-?eORG0o{$P8HQ+TUVE^6But2dvDR(KLh%Vzvb^7(@u
z0V-adq%nycV;Y|lga_f36Et`}%_Yw?2605wWO-gKXeVBPAke7xy%@w1FF-CM?=Co`
zao+8`2e!`AGE}A5&Ia0BY=pFIyAo*XG=Zab1m}GRs%(3ZO#k5`-5p3t42uD+cc8J&
z?8D4c*r&O52_}PLSDn!YljUMUV{r-jRw>>dL*wHPDVDp(hQjk-=9fG4=OA#UTEAkj
z+gL9zX0GUBzAghtdrQi-@Ez30@Ezm>2hTbE`Psc-cDt>coWk0)?EE1@P=b&M8)^eb
zdIy@?2#enY?qbQ8l6w7_g=EB}-AmHztSYkMl&!_G4(FQ@>#Icv*4~>6uP-nY6!5F8
zi3aT1Zpl&aEy5ZTvK>fs2Igj@TYWZoZu6375*7(hT_ZCxg|(UFUidi_=Wn`E2$G2U
zn|cYsClMfif*iAVCn3}W12bAWrhCxVOiut=vdmBI4IJ#9?-7Fc0S$P03lr*~qAyVa
z3ZN>h3e#z}!yYl(0w@rb)$Sskf`L?^{R^QB>p5DXsc1T&<$VAvWkC8MF(9j>9jmhD
z2r>?#@>(&u)IIoM;|DQsLs@%h*-hwcCI+HTi1miFY%UAJqJN_mbvoaHe6V!KTV27g
zg<uLIa_gM_v)5O-YLSHmavSwcNNV4Q@$?4v*fOo`g8yXMvppAb?Ai+XCOO&;0oul8
zdMgPqjJ|U151A>JvFKr2b5D*F-krCNwL}RTE!9;{)f5WLw>%ilrxxS=QT5&uwKf5C
zJN~`}Yh`3cN1f0Do)S0$0>AKM5jqShfZy0Ow<={_>`{xdGCkHK5-@>(zpQq^b_ZVm
za8?aqe1{*7a;+6m2{dBF?+Vi4LZcjZ#ejAgS0@J=FA^5FMl8i#%wy7o#Xr&j><m1P
z-I&EX!cYfTNT}D}XCp22B8)U=m8)H<C55z-n8|E}QmyM9P+;cqHpxCFdwuAD!<Zw?
zYpj9d)*pfO3F1uqGYmdA{2nedV6~l0Su6&tT@NjQJTbLD4=TRkOMIRX|0$}r`E#gY
z5Q&uuQMRo|g4Pem{veBeL?!D@%BKwNog2<QDfeAWU$Siu`^oyl1k45GjA!VF4Gs6f
z9z~rfO|xOr5e$2C(8)A-y!I6;17Ra%jYUorG?00{*&)hz_7+!0{z3f)>A5Ez14U|7
z0QNQNg?F5lkwqYpt^Bj1UjWT0`jJG;O5jUl7luJ3w9W73yWNkevTvx8LFFh}(fLG0
z-%M6$!5(~R-j1XdZ$S(OzpF&0;2p%4Y6VY{<1^b|@j?ITS2O8Bdl__jFu4P3aunM?
z0RoI|pWxR(+K-^9WW0_a!dw3kVv)eI1F}Y{l#D@04%K+u1P;UeC;b7ZbOm$9q8Yfm
zw$4?yZUCWPr~SKx98_gpN(Ey^0d*ey1o6UJ8Yn}n5JcPFM0ugAen;kkykC?tvR_|F
zQc|o@j$tSYG<`Xb(?lE8RW=KXr2k5_Au>po_iM*rJ%|2FGJ_&)uL4@5`$&qdJt2(h
zTA>_29B~HO8BzGB9YZ+p*D7v19Hn|fgbp&3Lr~qz1ijFb-(Lug0~19W!O6)Py&bBv
zW9>{2#_S!SRFH(=IOD5SdwmHIR0~F<I?WS9QY{c!^|mu}f#~0{7OiAWK^9D*?#EEv
zABn6FAmjId$PGi>CyT-(Sa!`y2ONHOAbzs&P#9HrKn(Drrr(8F3Rc;cBSilpa-k6v
za%_JZ2XSXUPZ|EP{>l6`%R8Oeiy_ygK4f5Sx!iJ;`QTFqbyQc<Wd`|6ZRPjGkE-4X
zstCG5C%w0$mH&V|5TASS<92)oKQ3;^M}@*mTjZ)Xr><-e9Xo{KRUqwhARw#_i%Q2z
zr(Be6hpsN9p~78K)EbUCM`rhSBf1B=WV*@Tjg7a4e&Aa#@*%i)%*sK9zT22nRc#EK
zO|f-D3^vs}VRgv%&nMbjgif|k=_kkb(%4M!a<T14d}89Yz#bpZ)Pe(u)7tI(DGJ{R
z@%c7*QG@s~`a4KKKaTSY(+BSRhp`OXa^yac95I@9rgrCs3Be^)cW3~_&lUO_94LPr
z-^;_f@Eo<XP<XcL$|~(|SOZgRr2s^CegdNkMvLNF4`!Im(-~YHX$w1$d9&EoA3!u`
zTuSFa*o0*j0w~!#6MhwYh&_EUqu?R!n6|oI8VP>Tk95Vg%?dw>E^^!$bNF0=c(B=y
z^)-XjV>U{(5sJ*Y`?N<{cAp2XkJxxv<=Tb}7JW9P3r0YYKG1({&)n0-QZ>*{U)1}c
zhpPtmpf7zoAdUGz?mm4!zOdGKkj+Ej$?$}>fJT;PrC-MKpxlDn!6q$#?@v*^Q=%Ni
zJ1Bl4{N?FyLP4Q_4aJxf!zb20OlUEyd-X90WoVzbn}G-G;LtQ(6(p2u86ldV?el5S
zppUYcGeN|lf1uaghY0%5y#5j^-#LoSA!D1B{m{5YO837bM>9vjpTUPYt@KerRkkvt
zNchp@?INsg4M(0(`_~sKw%Hhpu)hcQaRAPTdA5k{c=UY$=CL-TKU5+mu18|-J`hr>
z4P(d_EMS;B>7&Z_NURF88$np?xDqCoZ6ZWX-D(;1?+2sdPZ;8Jsi>}@^*7Rqf9uVU
zyuS$zN-R_Rz7MEU?I$>h<C@%i4Y^8IXF$R8Z20;(8<v*52_ih5q4(BLDbNTn5&62r
z+cp12xHDG^CZIHJ8G0+`YNtE5MH7X+tufHT%@n+C?iSVclxYJq9H9*XjY*GvFp%NJ
z;dH(b8jK?K9{`7biS~PJ4s;gFQmXZ3etg-QI9PHoQs_U73tj|8zE_H`vFyvWr0gP#
zpC!8}LS@^9Sn{QHaAP?f(`u%3HuOR{+Bdg?4b%xk9f3pHdeXQf@0mIoK41{S24!dV
z!%`KtslYd(oI;ILsAik&VP$z20C^l0l3XR!V6uK18~;MJxKd#I>2k(@W@GF(*7<Eu
z;R8B<4E;D7aZixQ-Y%BFT_{@_c9NUq5RD@eT$`g{G=RkSa<T48glJ{?sca2EVV{!1
zH+pln2up@DIx`BXaK&~d{iq#b_U0Gj-{WE`Ur~3Q6Bg1r1E~6)v!LVG74!eH$N}EM
ziztN-kK}g{t^A0sW2dn22kPQEJ0-_<+=E3}%GoXi_fw>LSCss=Ev#d)Tg1S3IOnkD
zH54NRHz2Mm^gjsG^hdP9A0gX`23oDrdbAV{s%WoNl+|kb!pVkIzL!RO?R}sE*Ra-;
zPnBxg6X+PS?QS5=I?#BkUNO=!kK!dLtUR!#oQky`7Z%<@T}EEsi0=)A$2x|Ly1s!b
zOyVtMg(9`F#i<6AlJT|==RIf@3Bt@0os@|F1RiIsr$ke6K<{xxX<Z2hU6f${Loh7N
z3joY~f;l}h4x<t$n!!9kFrNVi%jv{|SVPOUen`O@>w3mlA!wzUoos9Jw#OSi=uZDZ
zU3fNuaJ2}*Jd8-#d?Z*jcz0w)7cfK#ovj@r3?9Ic#{!gAmxn%~WSv2ABHA_71bY#H
z`{-NV!;sYe&0q?4F_<dcLnW9Hz%u@YsAPnN;B}<^6x;Izt@ddh$)tYH{5LiT!I{7o
z(?-#;bw)&g8s!-CQpF~-(%B&eA#@wV!Zwe`k$Qs*1s-=di*qdzLYK1$rgC6s&g8~x
zsn#(6TvT6!nE=(R_I>V7=&Wb^lCkLRvhEVrvVHSALU}=9e%*%|k)aZR1Gb#m!~3=M
zh$fi}4Mn`Zf|cb*PK$p%X$tW9T1W&IwJ|xA$r5rhMoHERd^kyvxinbO&-ZIL-kiz?
z^eMnse*uL}UIs6=TrZKJ#2O?fqP*YN+(ELydb`14x9qa$?a{LE&#S1^<q~DYr1g*I
z<<dW9{l?ZF3<A21T#(X)U=su>HvWnVu5X6ZMJO?OM574TSl_a@Huf;d=foL@Qq*~v
z$nw4?FDFUWmO7YPO%p=v*_3Etx|laG6E8DxIX3z!+wc<t6G(j35l|X;rei`u+IaCI
zmMvq{jP~#Z+VL}D^pc|Xa4*bD5&~Y9Nkpchlu0b979Fe;2@8i%-qft$Auk>Yv`Tqd
zoe^9zz(%`()pClk@D{Wfv@7*F2=<Xj6M`Mr2FGK{c2mFR9nkIAB7_cM@&^~3fr39G
zHzxJ)Z_l@+g&?~gL|yEN!6lQ9p(?dUQ6$`hV%~&845pyN4M0g~R{}9wnbrm*YhAp3
z*gZXRwTaOMyH^;=NDC!uSx$;HP68`QOG9NC;m{N}p*H5HGi&#Bs)<310X8^VX}n6V
ze284s0nWJj*qLYh7xD-TX&*56BwhmZP13#8ag*l!rs@AL1`{ow3DxijN~c3PMGdWR
z*wE@Gx6~a;jTsF-1LMH{WXg<zLHp$IG&N;|fI$Fk3WI@irSGqLf9!3O|LXnPYXEIg
z2=&F(Bh=xh^+u)R5@Y=CSS<#0>&)-;v!qFBQo6jH^O>_dN%CD6szOv)F8z-9h{#3|
z8fB~4ct<j>??oHoc^)CO40W+1C`@QEho@n=R9jR?Jjob54I+z?I535}fnvLnzSWUn
zp6ab`MaK|xb`|;$r+eGsi3Y6Hr;Co`-b^0O+%ljMnUDJ#JY<BrU}@x@jNCzMAHUdW
zCV=Gj`}ZTU_G``Cuff|t-gckzwqxCmkLKDHe={{2GXv0QXs!RzpTc%8D4c`>LE+3S
zP<K0pAr)JS8ln{GJC1&L5h5*K2gW&4d(gk%GFHU&LtS&F(pCuGk2spx^sRju1<Lz#
z_myg&9VZ4A{D>Hf_Xbq<HA2GLxw~y*Y5~D%sozqQfKz9%9nDq`^14<bVFq4oI~K;w
zqz)e#DJ~j;>2P~n8h&V=G6iM5Mk#@aRan~*i%vF~0jAXoYsEA%kiXsH+bOJ_Llu=$
zip)B!VdJSsi480UWxq8Xh01B$*-B|o-X&L}h%FWv;empsNCpQkqYe`&koi|5<O!Ab
zLD5+GRQg_ofSj@8A=E_U7_AeFC6E={UW$@!`{+lpeTttVxqEl|BA3v%OAylkLFx|u
z9vNxy(C-J&*=dy)x`JVEYmZB0M`XOi%H?qU&=|TYnR<q9(I?=-F<x<k-A|BMxdgg$
zmV}Q8oPldr_80_ISk!wb7}*-8<4*tMX%^pC!5VMdD%+U{`7ke*bU?N&%GMWj%pFE7
zv(3Yg{v)fcz=|}jPlPbHjiLCD5np9nXB2>G-#ZBA)?jKI>4f#0OXIauy?EAaXBt@N
zI~2rqVLH?-X9WQ7lt0xs;R{EKN3n6$I0;tp01{&c6M743<%8plo4^+bYecw}U|DRp
z5-cCVw-lvA%1PkvMjED4LTCiBd;md0iGB4KOqhGIY$o^eLTEqPK59n0SK3(CJw=kB
z_Wf)K7RJ<qUHH)+>he?4{%K<VOB<*-tc&#`TKxEwCfxmG&->=}k7`WX?(KCLW6LQ~
z9c|TyBaC&8FbbDZxTMap;<#&`_79wkP_m{zz?4CdUL}A$K95iAj6cZKxhKrlG_cwD
zvB;c)Z_1<XOKifTV^&48CgBrawpZhL^ZV|SPbDR5CbCP4O~MamfNuPt8-uYKHzDZ3
zpb=ckzVV)xO+Xahc)*&rD7#ie=&wNpt>TY)O;WmEi4Repw@T_+@ZD6136>HH@eV>O
z3s#s@$E?Oy9xiW$t=LKUSi%z(Hw$aqwQ{TNs)e<Wr4=s8Z{>fiwZ->^Tj{b94@dd7
zNY*n18q0<(zK^ir@ER7yS79GewmVOKj?J3FG{yD4r{rtrlF=FXN_TE4YzMO?>p`F(
z$_4k~2ivzF4J9`8-Ohfx|9J`{_9>*%f1vxZL~wE}XkHia{SFI2{Y(o2uzyhq{TJDZ
z^@aY;$Ld7;V`Y%Gz1;F=v{1N>+P{Z{Eo^$qB9$rCzQ<4$X*=k*Y+#5t)P&$hmXxuL
zP<1$jrSH(UIu_l!;~rcV5T35U04J9JcmB6CX1C8M5_2$@Jdz@wI*6Z+7=MI?Imm&I
zug<VWx^tsHX?#h$T->2aj{FMYX?m5GRx2D|&NwWoGf{_4LcIgfFMA{08)4||+BA7y
zn0`s6c0`;u_%QW}zSD;Q=e({tgsM`|fqt;<R^kdvO2!YR^wn|8jNe7(n)f>lP5&d3
zXO>{IuN!v!qzXfCAH>Jp3aaK!mfce>d&1hDZ%`W?+M~vEZW7~ye;^fgEMq`1^$q*Y
z(A|GB)2n3EP$mri!9s8jv~~GCbln%!go^Dl6d~J|P9_R$y{SB=oM%x4W!cR8nu;Ru
z3{RK#Lhw(B5!Mcb%{&j2lB|aqMjb10Y)4r81fhPM^3qCuaadc_gDumCNx}D`cB4!s
zsiHipHxByr04cBXs{h6^RmP4Y@V!0$C=%TWZHQbNTc1-!EDQ9X-wpSnGVy8&X-+&s
zw5f+lMydaa$_%^(<-_sm{=Rx<`t+p64xOA|=frDEAi@%<rg@v(fWt?UIz2kXk^jB$
zbX%mj1LxYz>NLbL_xsiJ1t_K;bL;dsp&6-Maw?CNh+zzP8zM~+3l17LA&ZF8tkaW-
zs~Jb|le<q+`#MExhdSS7`c|M4qlfkl9G?h*&A`Y%cTXAyT=FpB4$M!t_zplG_7GEF
zLLpl1*CYrT&$Du~UcirA9+Vz=pV2E<>TQ_zw(S{=dNBUtN52Cj2;Ywl6ih(|tO13H
z4@$vMDg}FgcvB&)&0;0vLm@?KdycZ&kQL)g8}zA}ZAC}^4&mw7U_F9fvpnNy6p1wY
z)1LV!^#7763u=NI$&Ddpc+LQ-j;Po*k<}U2TA@A&@W=EGhyBpzJy9iL-Gw2K`}KSg
zrtkj{2(FU_Xt2Tq0(&A@diR4t7qBW>|Dp*d9v%o{Y>N8lq*=VWVG!LFLm>1OLtq#~
zAmbl{7{^|tAE2XuO=JYL6m~+y;ccBRsL!LQnBa(NQR~deb)2ut92_kig*F_KE`(+h
zQ~=_I+?eO;*a72o%xU02ncnUCFaV(e{#ruqhh6d$e6bhftab&^0tVHz#2(c$f8^8o
zS3xaaSg2-`a7rj;8o@RlC7_`D*-ysf^aK5a$sH}QVLK)C2BV{38d6exk78`p)Pqz(
z*I^9S_Lht2-mmS-rg3*}s#SZKr59Yx)1RYsoL9t`J{DzBe^D~ZSgwp2_|e}4*4R|r
zr(aIeqIB&FP|~FOf7m)lM%Prl1;bw3R{Op@fSC>J@PqRyY-#sg3X+eIK&pKg@Z>ir
zxf4&`Ps!i&<ncVY=mjL7x`g&xm=wgun>)cq`JDO$+U;n%)(IR7h0F2RA{1@p+gW@l
zAb60Z-T=z5PLoOJccQhl8I&8wUeB`fuPKiW5nY-80Q0%da?DbrbUX<C8wWzYm|`Uk
zeX_)jvD3>{mTOQ><Osh%hDWiwQblajLFrbit$pZRG`5rY<mDirAL+zPK!iCjDuJ)k
znhsS2kwU(4jQ0g$Q{lLg{9$46r0?<EFkhent1Q}MC=d#F$zSjxD);s)xA+loY!rn7
zyTK9=PT|2=M1P`psTP@x#ZPczmMD)-$2+!<Y!a&qX;~6T71Ajo`nA(<RbdbM!4Y@b
zAu#wLDtG@v1yAw{e19&&*_4kiLjh*}f%g;NHh*(Al^vzFGn<MUZr4QTJcPZ35oiQ?
zJ#80g3*gdGVZl&%&QK*Z1(Dq?4Hip*rO;yW^%Pau$0VR^Ekk4L!Pqp8zhdRHbI~BV
zj<*0d&hZ{6@C0f*O0@@blT;1y-;X!qx)rapq|>egnpHatj*pS6^xIHbOs~hwqc%yL
zdt>=;qx>5Z`CA+LqfA@-k->z|`T4=4(~>$E7miq~8-mrN!72PF(>GsKoSiXWxAqqE
zoS8Fk6yCinlbx$YtTHHFl%00m1X;{>H)pVoEV;q_zNK<|y5bPkM|;Co+a2SIf|IbG
zdK_2Qw4Ntv`b8UJhzP;daqXTz1f}9s9DKrKJ!D=zHY|`?)9TmLY}`{17)_tVc!Tj1
zcM(twE#dQGu$zuSIJQsjy&_g;pkIo&J!U_{kkPc?%K4gma-!Us`P57##rLa?yH$}i
zwCfM$hr!MG`RN8apxr8>C-tZDYZ(YT_ebqh{z&q-SaB@X+gno8&S7azX+^!IQ!XA?
zXZN@uVf0wim9@SftRG`J0Y^Z$`1asA@LaeP-^lvETW;6@A{La>{;1p0;1&io#4wtD
z4b4EWFBVtQ35@&{2^u^HoA`&KSryPxq?C9)=cyWAKf{-1Dpa5q^Q4)$Tv1g~kNSvI
z3`EstcPb2@@<04W_-B42{2zZK{D%fSoqwNgyc_#-^e+4L<&!>%oxUqOx*8c{@|FA`
z;#tf&hv&DkOe|7*XqRGAj8+zc-w`}X>_+XKu7`1`YzrN*dksNRK8UBjhN#}&7Y$L1
zdS5Q$l4RKdB0$X9Dmp%G>AB2LeUa|`(Ny-RYv?sr`uA9W?1$zO=_Mq*!ip2PzrUWg
z=~(Q#TgCx}4L6P$ey4l%xVuETx2Vo(i$lee<q_#_EN@4%<X%we>Y74U#$l~3b{@p4
zjU)l$%85mCPh73K4Pt;djm^(8qK_vZ+T-Jk)7X;gnw!@K?{}jRL(T(I8r}n?({!cU
zC~R^z8-Ky$k$2*nE*@z!tL@!tfOcU6jTZ}x4uIUUGYbALc&zLUc?H8eBhYSvGpSgW
zWr3@3PXO^aWgWU15jfGf>H{n!TC^WAF0uhV1?v_o$+%QJtLVBf&Hc(wTP*3=8Xj1=
z&SDvl;SJZihvDpFJX)WO9Gs4_Gl+$aU4)pjGfgZ!g@x&nGa-1Eh2Ns^)3hQ`79p7l
zoEai4rggr+nL)zh(G0b$L%+k;PD$De(5|;e>tlL9`3S|rG@yzn!sPulKN&kl&;K|T
ztSjWCU4){w%Nc1nUkK0*j1aY8hl6csA45}OzZ@C@BbD(y;GYOJ8n2k?F)`2|OYpx3
z((Ae*0SsGB!|X{6Vr*$^H@-wXSEY@_=@1cjvmn;<Z<N$Yt7At-S8XY>t%h1YtlfTq
z9?LAoYgq@q?S!=*;D|2Q-_+LID{$s|VQ~rSz<jS=7c<ecKV*A;3=B`|Ef0zs^rK10
z;Pe-*NAz>*VP9chG?l?)fhB|Bjo0OHQZ<UxL+dPdWDtf`M%ME7ig6@^bL0z<!8roQ
z&JZk^33wv($;2QKI5U62P->;8|4Yq<so|MhgvH#3%xay4JkzVht$tY0&@V-4;A{ER
z%v4-xzz45i9a_d#N5ypu&qQDO60gpSpJ3dB@2dyN;$1gB&C>2l;(VyqxAFC^7Rv~4
zzS*8(ne}e~%gZC%Zh^iN-w<;7ulPl!=J|TuZXiogZv}vIu*9OjLLrEVMSmV4NP{0G
zu?rpLI6rUEai9Tr7!lMTqYyfTMW05Y5=xy!d6Gr*Fl*2P?f0<C<1M6bBfC8rkc=m2
z#}5G*!D*E+%JZ{p8T>Wlwp7XcV76{KzmkQNH&Oa`Fm%f4EouEzOoG4*gtqb!hzYY0
zp}Q6#?Z9QoyOLe#fRx>QuOVfxyR_&!OCi#zpG%dx3}8YF4AJLN5oE#XG!-jHO%@%;
zp_`KwLA(jAcTtme6R$3h@}YE#o=YK%9ieMk2+Y^JBBZ5L?^>z1r|{>bZCC0xgqyK#
zadI8+e4A>~uHZR$VJ=m!p=;<LQOM#)Xk%=C<yxh`i!gP%r+1@Rb!Z(o^FBFvs&eHA
z-Jk#)FzY&1Sqfc;jbnh6TY%fCN=u<1^ZUn<Szp6q!F>Hee3oi|!*nEWAC*r8YB2+3
z7IwxOk9*-HjT8o+v8`lw5ay&X#S|Pq!hwpxFdOkt8H^Pd{8I+Q9K^q>@NvkX>2N<p
znb{+^8Rh?4dt}6Kgulmx|F5wZ?)z=!7sJy7yJQy5t>Gs|>3U%L1F71@T~m`zdvSk}
z<v52B=jX4$$0=_ur^BX#ja@ICeG!`;1W^cN>3q8<e%6r24dO4eX-4tIRV=QPGmIW6
zPL$WAqdm;SFBaHoQ8m;F@<FQ%As+(TO6a={)C&vfkKkz#OR!3AoFu||nBAi>B{WVJ
zg~Hf($waY2a4;33tf!Ci;U<cO#fQKE3;<7KYy-p^g7Dvp<7scO0~#U13Kw8eLgE|3
zhQ*P3ilCw6i$qS;r;#F&*EBGF!fHpUEK)6aGKW?Xy1)!#r?<8YjDm1H{>bk2YZ*{`
zC~t|K*VG#|$0$(?Tm{I=eHFxyc(MDd8u|C8Y&s)xIWxx`%k7jKiy1inT!jp*FbBKI
zk1P6x=^qy^S$`NP3c+uvHogVvu3~;2*gKkrZw+HFi`~L?u744Q7UBFP-6vV!gAMZ{
zkao(O2?005n>B@8rTrPb7_p&Fh{X{cFRnsFwKtCO$Zr^~%rSsL4T=@zm-v1tJI<lK
zd>BUpV85b};97#uW0%RXzwkGP`SMU_pkp4dCOWIgod*npsJ4vG@lw{s(C+>@m)wAM
zLI}4Za6gtGTN54WxB}63IThpGh;1G$mtKNBX}W{)9-Z-KIDM&+e#Dx}Ulevr-84sE
z3fvp1ogIw7Lg)$PL>%M2gPFiWsFcOAZ7wWVi9PuZc9}Jhc6kR{V`gEuya|JXu#n6*
z?BJ5zK||(nSs?krH5eG`c<6K+&Wu46s1{-20pg6z&g2>L%_NE)>?+k>7(>0mNM&*0
z32c8M_&VjY?!ZI1Xc)#x%;2CVx%}cvt6Uk)irBFOqwv(&i9uE`vQS5fi90`x#U=p<
zrJMs;tczy7g}e}7-l911Q%KNs)@6$`dZXxIo(6m!0a493xQ5OT2*E2^Ut+u832A2#
zoM1Lc#@3TWnRRHCLEK_GqB9L3M=`{ZzTpSG45^;zRPcIrHV!2LB+z)34`V^1cb`SQ
zc+%8|+Xk%6Qtjir&qX7b81vU~Jt{C(xNtUsXeU9#s7cR?$Icud;>a`3lx-rlmb9>M
z0SZ^p^x$h`B|(Hgk*Kx{x#)NQcSHhOhU|UZS!6OBqVZo?JE9|9Y@+eo-*kfz8cBgU
zSrCsQ2(j^-;TZ$`0TeR8i{pT41o%1Pi7%4E`ZJCOPoyq`Zb2B3&1uonvB?fb;Nsq<
z#Cf@|kTTIJUlEtfAbHJWH;cZb)>GKQx>D^=P`>)-h~f64Q4dk~A8awxWfDJ1iYa2O
zPXYb|(&MF?{Z2@#AyveM6;y5&J9)^mRPlqxfYtv7GcVDoSFm}VAp=sI@4P;sF9}6&
zQZq<0`_WN&EDKf^oN_DudoaYnkD5h4#_6C;rP?Q>K*vQ0!b~t){wiRBf`!me$Oy?{
zjm%F*>Sq&q#gc|nEgN@;acWSXi4yRhFO_dpMHV}qduDcUauVstdScZgyyg;t*Amu7
zl$RY~BsU*=3I4!N0Tft8YRZ7p?m!-JEwq(!mk&1vjx^jD<Dn6wsC+oWrn-o8Tfrri
zDd$97eeBgfX$Q4r=pbJgC|=4iqbH(>Y{*?IiPH&)6F9*}IxH*QWHg`t4aH+~KzWHX
zX@9BK0i6lL4GRt4GZ^pmFrcK1So2`lh|2pnVzvx|a=;#y{vax14Koc%B&Ap`W&Na7
zN9o2%PVWt|6n!!k$9V?!P&BpJf9a3b2U(aM9Pix6i_gUi)q4`Y=AP{9hC>5~12{DB
z1hGc#8$cMdh*$BW{T@f2O11X5x5w9`?gB{69{m;e6PtJZ3_K(bl;fcy!(M{(HZ~Sv
zgW!V~k)Y4U(Gb)6Mfsh-t$x^FjaXKKO*jHOX!S6-I<o7W_^8gUD?GWS&`18_YEIRa
z9mL3P!I>qPkMJ+Rjmjx>5tv4psw%=pd#?kns1}nJ<mLFTCD#!_AVr*;ms#anjXsOD
z23mrhhkf9A7+U6qBd?cgA7Mh3nEV>{H`#|AIS<ylm4qX--0;cDLSMdI3*2g7XQ)9^
z2(>yhY9&#v`*}EBMK~1#9~a?68v}|*!_orKp?kTmaAZxXc55?qV)kmnp5~~fKVZ=+
z+mkKL<_mYDwBOL4<s*L{9`j0?mc-{ftTEz^|2WQDC0NGlAN||PD<8+;<MLHL>bK=5
z`@b_}AWm}I#Qx6t_J8vF0O9-F@+WAG^#}9(Ce|KS?ItXI80~>EIDy=+SdZoKaef%`
zH{R$RX8AM3hl#UEcCg{@?OraLs~wcwC5Djr6;XdEevK_r8qj<Obs0Pk$#_>cFz>Y#
z%wQuw!_UY+O10-M1%1i;hv){G=DyO1gYZDgo{W?eNHr$<sjFrq@M&lfpC33r4GbT+
zzl`<g=JUJAze=^%=i!s2UnE1n;Hqx5Q$7yokA=S9%g5vDrKfzH={4w-a?&kvxw<Kt
zhqu&h#C;x5OrO9#0Q3o+E5RLQoC1iHL)6ZbzsP?}wNk7_ozE{QzZUgNAGsDsx?>9F
znq-uIpNvu-+j?T{8rLhpD_OCuZxOGxurITcwI9l%{*fDwb0F>~)l66O@qw+;#j~6*
z@6F+hH(WQem!B;z@$OS-9s(L65(xylkv;k>jt_;CMd#9(Je%YJJ7{}LwI-|)CHgGU
z<Hlf8C!Z_70d1QbjU$?d9&vtqB`wEr{afxacdYa2J5OIKw$Na#wgsY@UKjpePS-bW
zPf`?4@8bl^wUK^Fo4DrnOJxKd@Fy_uC8A@O?>kW`#PSipjgR}&<N<`*8)uKGz*s`8
ze-OQ_;zwA;(*f5$QSl9t+u}XRRH-Q_wphPeAH=ND6fh;RFN=EqFsQu+X9a9!^lQdP
zv3=ueZ&^1H8PJ$mAWJk4vtNoo!14h|p+VOUQQ*!Uu+0fk@YQP$7=E;OK|Ry$s!x`K
zl$wp`|5!vc^)KM?Z8m0pFbJ(1aeF#r|KqTuU@bxW^?e0l*il2SqP2`e+R@`@O{3Z5
zWu$xAU0oc!`-s+t;CP4*-YE`Axk;Y)KClXJAa4;K`7C*;!GSza&JU7&P<tZ<1}m!U
zOUEuHInS-QaC!<?$#Q|X<iM308ndu!ic@?Irb(GGPs#Izy){zaylNlrh@O-bUl@g=
zhG^F7?K3S@81;N*-usfZLF}1IS4<@NX1C&l-F#egk^KnfF8Lpz=1z547>*1`fupoa
zEMiDGxIA%6OXX+^p<)d3*afP_nX)h)1j_-paZ?yu((3qBNpRP@E6%34t!LR}8rsce
z$X#(5NO<H)sQw%6BTRGo0?C{L58)zLvYM%;=dFjM&MmFldQ#_sTl1(re0HMHyG~MW
z_9*i#`e$fbPQME~)%Ey7ivC~xqSgNM7+S5Ax7zgxqt*UthxP0D9!(aLFB}7)y{lNG
zIY(k|CVVHZZ<ZbHmzI140*iTYC;A#N#?NZ}XdmNB3T+Numt=Yip)*t|?sB4l_|;wV
zrUiZBk?TcOrQC8A)|^CjITeWQ!!Q*{_v&a71uYSL8-+|>W^5C!DMvDG65ZFG_U)I`
zC$)*=Ab*eE-~W1VKF)!`DHishl@L{cTV69VvHqj&#!U(RZZsF_7uL3Q%b)sB_wp9_
zPq+20ihOCvk2=8$ET~*oCDqlC9j}Y_q_WAm(kqeYSvyLAcRM!C{Ijrjh&A#*aen6R
zi#&z%H3D#Fa0Y+Xg1m05!|=ZG%WNhBz-Gcno6^YG>~%4QG1};UZHRGBVGIOYX{Ae5
zDMO5#)45Q4ZT@~G-W!M$+cEJ-YAfGO7icH{9P4!7HvgOypKpt>p)i&CCTSb^#1c_U
zwO#OYW9SQJYn2_P1pqP7E*pQ2X0o;2+$cM4&}?K{-hkCZI^MJZ=MIkWfvKWiNY+W6
z&F4XIlCz{y`|(RmsP~j=V^DLF>L-0o4j$&t;`)eAkVA>2$L`J3-AY>dJEoD}9p=|^
zjG;tX`^56!XXHN$o+ahai{<a|Gx@n2kiaHC$jvwAV&n*9{d8o~%CVxUjM*(Ila^^O
z(*9OSZQzV`RyG{%S!Z1Vp)`#jJ0jwaBS`gPTcpYAYmj%lg}1Pb14vviEVLjM$A?+k
z58#^VEKwV<-VePv1`7QaI3MHk$Lafd{5r?+TdAF;TW0^q@mqnFfMooDJnT6(nf(>^
zI<tKQn_S7wZ#XM7E#mpEsFCCTyUljjIy6Q!@=2+7DXKS(cjYv+ky-OA_lumTDx&D%
zzMI)#hl6l9T#lm$Sp0FqpDI>}%W*L`VFf?L8pWs&wp`LWBwr~=4Crz#PH|v8K2V?5
zrrNvuq^(<FdrO-4A1D|-ipq5cwid>0uvxE~&)P)Fu)l4x=M1}1p9`{M`kv&WoW|eZ
zKyNvn6Zj4AV9RN4jbME?t7#x@oYr}ZaSGboW&Sl-qi%~;>lr=J+>P4V9c=NT5eMkH
z;~Z9^-7uo!D7d3?rX#^JT0g1*h18B579-cZ#@wj32F0L=gQ)LGs!#DWMwU`dk>?Y<
zP0T-W=vv+(DzmYyHp(uh&hBy1r5xe(=xp5Q9Ntf2dyG}MAM(VPY|G8eKgHJecbRm6
z&6f*O;b!Of2AaX61nmp_(ujzonY^6?{jTwLV+Jk_f9SvQ_Q#H>aniENw)S$Gkz%+t
z&TVdwk0-qU@=P>Jvl|WAbi*J9p*w-&LcO&qU<Xy2VF<&-fa4l(C$YuzH8_w12cJjN
z-Ab_?zW!kU^mblU4BYqUhTW;Y9?qyQ)1!F$c@$S?Z2`8$?zuauASORpsf4u@_4c54
zz1l5Tm%l^CB^-K%=XQk6nENe`*+t<TuBtpAR3YKK6Jch4vM~hxAI4w<6sWoX2Tr%1
zEx{4j$%<CKY+84~COH#Dc2w&QGU*c2;n8e<$>wo(fZ^C5n%T5K^Z}c%w9x+|@5cGv
zLjQ?8U#cB~g>4!yxW862u8oTAbZ6#d@kSDibT+4pbjN(x_d{;o2UwTF0(m$1HB($a
zkR4ZL+X8U<4_l;3llo3HGlMIRzat%7weXT~r|*8?!0mk!1o-#B{T5ttGED4r?S8Zh
z9CdVoe+rKbTeT_o<OfdAU3Zqhgi-_>##?WDn9uN9GnR}ou79g+w;Fhulj2*xe0{Wp
z74WO|WBED;Z<?kg`XG~MI%-&O)iiDpVU7T|bY@=uKg_)ed{ou>_&t+kARu^yfW`%l
zH7ao>Ry3oDW?%w$aE4+nid(e>307?>%m6COz|07@*K4s#wbfdxwWW&|tI~ihNq|gn
zBjARjf*aoHxS-guDCGS<=iZr2tiPr2`+wih%jZMp-gD3Toaa2}InQ|(bZzY@d;&Nf
z{f?1d#VH%+HP&G?Ja0d^8&j+~_%hpIZ^42QZ<ce<;J}MS5lgLaWsihUQKsrxNMnv-
z_0z>fw4b)NsJ3tHy=?Jfu^DWTUDLs`SU-k64EEjKI1eJ&|9AdE_4m&|{_py`fvX?s
z@4QtanpC|_qqX-j!{Dm<sF{t%4iud_SZEFH_EBPcnV8dlRBRk4D*r1~j7-(u_OD&)
zphgAJT0VGkAJ#b^1RJ6!@ge=PTjCGuL-e$6_%?|wtS4hIP=@I4K_2BFF8g+)J&=)t
zXAXT4d=k>)I+5f)AJ$zr6g!N4pD?3^6C~IA&NZ!AFp*Qd#T-NT&~z4sC}wy1Aa%9;
z7$XfBZ9qm#zD&-r^_VdF-Thr9sv}|JlOPA4anG_Bh{ZhIj&_G&ZOFRD$C2UF?BE=|
zzzy8!GF&u={5!bsjn5l+R`jEgHE*DMP8dFjcI~};1dy?pFlQP)#2VKTKhS4pTgaMu
zJnr2EKL-6m>~3{!Z8Oi~v=yVetXUoP@vc5Ic4EHJH{^dgb{~fb#Y>y&uo5=VTHX`V
zR&Qw8c?`@|iO29tmm^|!S;&0gaRoTQR0{+Fdf-}TwJ8)DF;IZQQO#b$6`czUW4++b
zm0{zvRcLn!EU<_eFQ8yUyRa?k6MzAi;YUzf+$Qy5bYf`12+wm5i=W#4BoW57Z@9`H
zi&m&N`#9A+4yDcwBrP-LQR>Xviu%JXy(7NA&y14VikLV()oLrE8o;^4>i2sA46b8!
zaeK--a&x{-j*pEUp_cdi+Lw3N3uIV?TCx*9SxA`z*ViDGd7Y1qwiEvtejOpAve5c~
zQ)UO9;__SeFm9xUU&ckjEQgd;;4VC_RYewSRpXaxRo5=ps%~i3s&47fs$x5}syT(b
zg}T_sjozk)6sipk#13lVh*U#Gy0v7O`bmxB#|xK{s^=lCF8pP+rc>wgK8z>Z61!=0
ziOzfXzM^C#;y*gSUaY!*3{cd-7M7$Nn;m@|_Ok=b*JES>B39jwzE0lwnFnzQ|Nrap
zUyDc4|6=?MG&la-{NY0*H--Nv<_=Y%==a&|-5GQysDgF_+Hafllc{{L>z10#2Ct+$
zvzeR2K%%|GPH_|dZ{s)`ak;7Rq?`Wx?9&u(vRWBl?!L&XD=l;8><qqseSXEZX~7<K
z-TCRRg0H#q>ibLb{q6ty`;+p0?l*r=H{TBej)&yd0AW+ZEVoy>Hv}8E<|W8Kd#6X2
z2;uD<jT_Y=dU|weGp~~q^MamewX!w2HZ$;_#WG*$%%O4nzGHxL-D^-4r*f%V6^L!N
zhf)=MkF=@s@$G`i#^~U+nHMv~1=yV%-+1NAPUij_<&8%_r)c8NZ#URRYs<5x)g3(<
z9N#AGAI%(6?*_CEKa(>fake03SoF2)5Z6=PCud_3n<^6uYYu*$7Z^}2xm5aZ4r$>%
zTa!CynZ74@M~;TF76fL<Ba+)-;~R5<XekK!Bt(Oh#Qs!rs%ym8S+`g6CYSu5@iA-;
zpT;Y?Ceg<tpyyQaa5qJzc<15Ij;qI>3dh`Pii{FR&WiL4(;p`Z`1*!WOm@3<@~6@M
zyjuF<8%V0#oz(fvfB?Bb9*}cCm%YQ`*B~dEv#`b7U}7%s9PFI>QQDUDkA6n_4j{|O
z8|@d*qmBHDLueKK_zn5wU-l9F%YlX6=$%{NE`RwN?q)9!Te15c#^8CjC^>TgqN4t+
zj`<(mPc4R$aj^Uyn%RSUhYl}d0E?wHWyX*aGH-7?r0fb))8SQIemh{WEq<(c43#;p
zqT#4VZwG-If|O&W%f0|VB6K`#C^upmari*L#lv+{12IIeFST46G{?hz&siEV_KU|h
z^XUny)H}B5xH;->LM0q`Rx3s6jOkp&Wx-1}F<=t=iejZ`?4+JkAFS&s%pG<0)&|aw
z<{B9Xa5!)n+{UkzA3`mq<kU`ZBJrZm9$>s}D(G~Lzh5yyhtT_xf~F!~#MZ#xKupo;
zeDncgYcwpC6;-{-DT@eF8&Fay>C3eN!OAjw9(h5o3Q#w70b^C`Ms?kB%jCM77fP7p
zmjH(q_LQI`ml;CxV$?1K4xZ>J0^H-b{i6!5-+)tWsoNaMBg<5C&`-%~_bF&~1JH0=
z5d}W+?}WX`sb>o+t0@z%<WWk>6a|_D<0hqx6yiCQ7rjHHEPHkSycIN^xphi3uv|^m
zL1uX>RWS83=Z$vBxreZ9J%ka7LNtm=It@uKEoI6q8ReXAi<m_@6FU68mO4*}1womD
zMsoo>=Jt?a8M3rb%Y{i&O>;j>B-^hw<Zw^fhu!Wq+S9x9xQ_AzP2ZvyYEil=c!!{O
zoY9Gbx9?k8N=|5jMAxC{%Yi1PUN2UJ?z(mW;8rhiFqSwY?_1E2snXoqvw!Fwg<DQq
zNeZf>|8!1%3=M|u7EzSJ9htlG+%Ne~CZ&@ZQB`WRKi$`pIs~2jO*yak@GpsH4U=Gc
z=Cx&_7lNF#ockB#JF(@)D3W#{>1pS(cA5Q&y$iN?3g+6kG;0gqRg;F2(Y5%`BX-x0
zuEBNtG!#Zp0IP6r(QdCLznlm-2Mk8v{#pt>Mxk)=EtJ>=Gu$=!FiJ#>pOi+-i$uvP
zc{=kADaqkKG0j4WjowQVwV!x!uw#{MEK{wr)QmLo57^(8j6imSqg2uNv!_E(^x_Cj
z;MEK@$YpyqkgEm6Y8qqotH6PG>37W9Q$*XVUbMZ+rI!X<2S*q0OVZ8h&D;t#;hzE;
zudsquTj<52o8;niUB|RKgiiqa1*X;>k9JRDXYc4?n39+3Row8CM3f|adC=!s<x>B&
zr2x1I3dgGL>>Avg4k~*8_ArKH;Vj7C&^+x9sW@z$fy&>UWuEBa@~U(BWyY3q?TIIP
zQEOd?tdY&=hST$K;Mz3ZuvC&cWCKa%%3iHxWtQ@_{Ymk&A)$4kM1(sXb&8ZDy)IXM
zN@ZUl8EFdm>&vv%ak3nV1*Dtjb2S(;YwUM-ffMHV<wDdBNvq}+pwGm8+!wOrqQp%J
zZq#%73*uidQQPW?{R@BJOdT~fEJrh8S=c&bqx72Ken5rT7I(whsa^i3)IbZ%IJyuH
zBg4dVH5f9dl{eaF%7w`3*MhTDQ1u=ShK%)L>n3g+MTkMY_cKG!NWHYREPD!g(X5=h
zfESDZCCC~)ZeIv#AwKoXWyXX{xJ|C_iey~0Cg|&Z1&nW>-U?PM!#}@}OGuK!i~^!0
zpcRU|C!qbLNOplkLjUD$M2;elXVT}i+cV^5M?B+FOOFa<ocD*7x0Y+c!G`5ytlHB-
zuJsIn5h%nuJY>Z{ESw_#3*7oPxt4~E+scuj4AuRy_GxD@YM?5(g+<`C&0T~4_yr4q
zYtBY{&RK`lWJxzOvX_O$&1)m6nbUZa{osb>nH!-V4#r$9iFs*Kj=%U{^Lt}YDd6|~
zycF_#C-Pp%?+xI+o8K#z+`{i&C2OK5zxV0Mh5X*1cq`!dw(=^QLN~wHu2TMEes2!N
z3i!REq0$fEbW;B_elJ7``{nun#_v^2`d9Hne(!A|XJ6;{4pw&adqeho(|oAKE5gJV
z#a|9sG5m~TJoGEc+yrCJUv&$uKV$sT>aB=q7r~|VbMLsg{kCx5k#-zKq>hor?OZ?@
zEqP`R!mkX#VaKop%m$SlRhSYmuc?sV>dW4UQHHS4iq(?38&Gw$hX1Arev?kvXBLag
z=vWBZ?)?smV!rx`Ip?ok<C_CUI<fDNa32keg|~{W5;()t<+eDpZ({$q5F^VDeEdq;
zfU|>4Iwy=G*`)Q@cf!WdNk(7ZyP1gC4Xm{ZN=BFy=j8bpDXgl3&5;@l+RLtzeZ*lL
zX8a`^cRnez$sRq@lETBtwedU*9tu~ByWirT<a;MEhd6w&d?R@(kgV!AbxkETRV<qN
zB^(!hr;&k_V^uzNzA|Q(XQK3NvAh1Lub<S%y?wg5<LoO%eur9bT`7t9SNfLgc+9BV
z%Of@Jl%GUh2S2inSiW^Ux$<NErcP<!=d_O`)%Rz~ZTTKhc~tua-R&OTH$4fw%!P|N
z7KE))6=7>^IU5xz_sc=S5a$7N%k=c93dRCpM~Uo)xHA9PEexu;aHss-)LEl@+jRf#
z>A~tv*~-Q94}9-~=p^oA%%c*UiuB@fWg(+1vA;NaGFn14lJ7XPZ2p09lIbOt$?Ieq
zK&IIC_|Gq=?fP#09oEP0kg;F+3?=phVUF-WZ+w}@hp_RQc;^h610pz?P0XQ(5$npK
zVWT5#yspMqt@~fa6^8uZCw{r~M9a{SAOCAGC+ql+jG|0v{s84pUpunC6qZ~sL$Rnr
z8=$^i%5K0o%ut1H=oKO3(h9;{diftJix6E2ornc7Fp7;q{H3=```O3bbEtdQQjg!T
zOTA^DKxaY*Sc=~(dKxwdmyn3}vDi_v)(6jcML3_1g8O*rJ!7xlnk5FhqenHbT&{w)
zhWuYfKiB>9hQ>b9RxHH5FISkwwchAO@pV`5;)xBfEsAmH=6kjR{6JF41y#RaD9+G|
zwpZB2>=`U3oKm)WvwzCNlLDES=>!D^Bb#&!oZD`Td`0pLv@<hgn{oQ1g3#=+pW-vJ
z;(G))LT19jjjiBDt61nHI_Z&a*4;(b3@3X;cY6veI;J-!YP|4^!cjgbb7&UJIjlo<
zfh^K0oAYK#+{tNaGxH;{^rD+9baU#qFeqr8yIC)us?y-cI;Ib%#^@>s>pG?_&B+Cb
zOTcBa+Sg14g1VKwb4(I*xqC^;L?t=VJe4+!q@w4kNK0MDki*8S=;rB`UK7IG7-FaC
z$0cUb$`;8kS^G<yZ;~fdNp^m-KbPSa*ekpI+aB2hE*G|~9*F<;B?WOUd5c<EgBQxX
z|FvoOVoGZZ#8jS4-<8A*YqZ3T!d_W}KR+I4YK!rz^g0iq9q}+jW{DD0pO8Hz&%c>E
zT+7r7-M@J{tcRM|K1yj0q<fcYAD}exs$(mlx%Ex-8a!6Pu98dx4O=C@K%&!@J*7ZM
zQt*gdF7$YQN<=?e-iisS(INU0R=+s^UksZl?d+TOhT4FoJ^$NL45oT9E}|Nkqjt&w
z6M{_`FbtIsD3+5B<!M0COAa$4@fihO!a0dKiUlYNb-rCgRHv~lQB&BkQ}Ci0q$MEj
zP>DfXN<0OHKqz8{jAA^XkO;rHp<aznH6cxZDdh>%n55FXbCoU=Eclo|LO(97%WTm+
zT7p0-;Q!#4d69(_#-X1K_%ykY-U8QoF7BGo-5oZ2F<>nrIP8FC6rg#QoH2Z!w@3Sl
zMy3BXEm<X7w>b^~yrv~!=Kz2`6vBh-mEQAEU*>e#tcT)^<mR_IRvSvo%7#17oCC;&
zUbQQtMbwWLZNR8fM(n#<dOHA!nZE0#uLd1pF>jzOO-fn0Ilz@drcQyqZvI#3RuH*G
zt?wa!<&8^Dk*G`TyALJx!h2+km{!Gu><rT@Tp|`bIUk{=$$lgu0~+5%KRNka4UyU&
z+nD*Iluz6~%oDpDnMX5cPWxw~@nRNE*(jN^Q9Y-O^O7W%XLJSkaV%*7rOdA7=!ii{
zSLOviWsWJey9)48))x`tyfb=bT4-poQUdte_wi7o4POduB$`m?LWd%!LcnLTHiHWf
zU#||$V+TZa$Y6W$?bs}nUK`h2J}hpu|3uIv_T5$zmG0d3*i}GSOI{*Vn)W?Ty8N@f
zQr;Z$uoT9V>nXS<fZIAuatWjVp<N-6u!0YK88U+#KzZLhvZ`IAd$Vp5+iKUD6KnAS
zy0Ni>q(=K&(hX@>44A~LV&0FFF@g2s+j<PVytuaHvPjA2(!PPYu1!{RFr>HJwbP_)
z(MfK%45Sb}x@ErzO6AUj_*bQ3bU9G_CB(oTB2u}U=r0xQei?}#n%ftKw@}P}P;>#G
zV4__5%TOz2sQ2<Q`}fI<bMHysGal;V2FLInDNW#Ube!Di5dZLMkvYa0XZQVS{@h!k
zHjP0brYHp&`y_T@!Tw^_gNn^u<NE7|#t37$SY{g?<?`l#_LAu9iO)GMzD$<bTMAUq
zL2Wt2eISiB+G~!@MN`z0mzT)$$sXC`zS>3g=&8E@YU+1ZMt#f<8P{y28P<WY9IS;M
z4qQTsue{M8My&5uc0~*u|3b(-h>937@gwx1mUxKHh0MEUy)hK%Psj{QJ%&p0Z-I%C
z|GTADj9X(nLssx#d@l<dr6Jtlg>bSS@*hCrVES6h<<!;xS$+u4#ij60nki`sBzAcN
ziB430)5>%6jkMK`Z)##WQdi=?jwo5kFE0Q_ugiwWZ!0I(-S}TLF9ztbmm(88$5_Xm
zc!_!LXJU4q+#@@cv71n6`6DRI9i&LMo!A!=r8%K|a4L%ax?Z(K=R!#$UO>FH5$#AY
zIN+2R$gVoLDc)G2*2?&8gm`MS&%x!K!gr^J@!P`IxOpOD2_@c*!)Jtyb95D~m3Xbs
z>!gK@5vAd(t)cV?5kY}ZBX;V0ci}<C7c#zEu3tDF%VB?s&G{M+o>u>dj~d|ljxp%7
zh<R0c*uOojjUs~dRb{{^Iy8iqxr^6afTTv#uZYRgYL51oPr^;4&XGjIrktk;=flNz
z7vVR(5uu`=@+pJ^=S$4lAFwU(U=4a8WJR}D*t5S-N)<7-2&`O9N=b=SvlKUr1apZC
zTCWE147D)TzRZy<4w(+a_co78_A>r>fP;V{ul}3UH*pH}{33FXh<QW^i43k5b#2t1
zkTI<+Y<<7$5~~&p)9;|bD`d?+P@$HD91tVM+k}^^gfN_ozS1=>fSA$U6(RqVf|%L@
zajg$3!>uxx+hmB$VSB{bgCwfMzK>HdQc8C8@f|>WTLC=|v3)8QqD1`h$ktjGO3ZE_
z#*QTSRSK4u7dcQ#iff?=2KsP?D+rTUOc(pAE~;Skh)-xxj=t8pa5HqFWhYtA{XAku
zJr!Z&d`4%4tlE8ozQ#oiz(Z)MXy0M-R3lF{P$N%0BBs9enSqLC5k0ftijXzKD>c(%
zc4^pnHf%I!?qmZJKJP`@;EdN5nN}V|Tsj4OzlKPe17u~z5II&BOy*f?z>#7d?eK%K
zr@D$#`<LnS4Hg18_;7w$wwyGDuaod|KNomsj{+H8{_H}%VmkVmvcjTy#xBFQ=YCH#
zR{#&;S9a%v)EB_t0Y0u-t6;tr|MsfB<r8+975qmg*gNEJ7yeDY#@>Zd6#fksW=nL4
z!@g{pevhy&l8A?@9Imo!%9g!FOH30kgVp~wT?%&7Z()6@X~-Fa7%02raXJ26u8xk?
z%~_?5b{yi%H=#E}`boaDZ~s6?wjxE2R`R=o{NwWZ)4pxFjD&9DIF+YI1y8C!az2v-
zr8v8nxWD47u4&7zuK0!Ur+B?XqG2@HQC&EfGSaKJGM2MJWE*F`18e<rzb_GS{WFi#
zS2EC%{4dstVXOV3IqCSL)HUH?i65nob&GZDc0yowxE1X}ang>@KFm8Owq3U_Es~5%
zD>Fa8wZod!x=<f9$RaA6h5j29-CYP}7>|n0(d-#IF|AQ)-7RQ|ZtMsDt$VWhyBz;y
zUx+FI8qnc$_o1<m>$_m37E0{gjk8Hj`QOG(U3O@`Qw8`_zvvuAi>%wc_)(X*z{ZO>
zruWvz51k!*H@^R@=(QmZM%&`Ib)6l<<&2Q6*OHrXS?}!UaLb^ru`fQa>+ERnw%)`i
z9qkQQHKW8;I^&0W)7i1<)6Ty6#vg|KP=r4M3Z<U63BKoEu`Hsuvx?9pIxBh+e{n$~
zjCXyKQ{<C8NXr*U%kDj((|YC#W+}HmHYt;!da0*aYKWdn>FBp8Ijya&2y0n7%-Gz(
ziS>%9k6&<h)F(MUm%I_j4}Wv9@}8EncY=M5&nl&1;g3|XD`)?Z68P9|E)pOqyMOlK
zObMBs??5MGD_Y>JUpJmC+G23!%67yFF{WIv)rgSLi2T)FkyhGpTC$lP7`a@xOj3{s
zO;bmEY*jtPgMFu0X%KVxs#be#yP!#Hh=W&Z>)d|OPU5Hn`ip10EPu7TEHF!7HLoE&
zst8NNkpJ>hEhUch(e%1pBFCnlmlt#F08}PQ1Loy}pdsPF{JEu4L`z*N-HFfbSEMD!
z3vYnvyUpY6^!<s|$(dU8ujq+Ab0gizi&4qw39JJmUD-<(!_5T}bC2`JE+_ox++!|s
z;wK|%7+Y>#dT6p}t}R?dHS+bM8Z9L*>xm0Lxjtl$9U8gmeNO6w`f)U$Hda@clKXmy
z@0m|)@H?Xrc4B*P%~{@PKlpjECqCz|Xg$b%gmmtW4G`$9oL<D!8vav1Eru5bior^B
zm|0<M^LKf6&+`ZY{olC(+)u?g?5xzd6_I&J?AmR=@(3O+{5xSX8MX@wy7uRfOT|NB
zg&W=&`q};MF83R<zbKCqN>B@SsFR_bTjieM;v=~ysG-Jgs+XV4Vl|mbE<3w2mnejb
z(=VAVjkvI4!xleKtld!|-?^;H@$a3!j|a%yC4;2FqE7;NsE;;8xQXTRjikXX4R{j#
ziz=ev`?|b8kb8Ih3X1y&SAJ9%q4!i#BvpLE9@**pnbX8x*;}o;OPufThWY+JNuUI+
zJo-_oC(}SR^tit_syV421Zj)w9!WhspSn<baI~a?wwjD<Ni*K=2BN*|mU}{KllEN1
zj+T>aW=VI3>5}19GK8$T16K7`Q#kzo7yEd+24A{eW6epFJGZhkB(KD!r<()h`5~Tj
z`&;4=#7V?q>Q-08|E?0K+7Hjmj_Gl{D4?|8{HXLx#i}k5C`BUG3LD*_dj|+TzlpO0
zXD#z`ZcsOtO3-OftRukrs|15TadjOqW>=Pk%-NM?NO+*jw{xUB;GG$4I!g`j3h!~S
zINz%*Thv=lX=LJNP2SreBD9zusRY6_6<Y%D=|tzu@twLkgQL$saaVcT8=Um={0I;A
zh59zm-FEI4bN)yBXgZ8ASM-dY7TSV6qdEA<e(e5Y$@aZ-SadJx^WRe&Toncj8@|c&
z=7v~y{=3fB#?cNkWtLE_VGWhlWnELLMU0I><2T32YvMg*hEK~X(Tz33_(?10J@kXc
zro7$AW7zRNgyy6iQVZ6T<GRS~|JvcO;$}_a9q8IjNEp|u6(Msb90k|xr@Rh|B<2le
z-TX!BH652zrW;?8fE6X=(5r|JzM<1+QWdrM89s~#$0y|<N`g`Bus`DD&RH&CjvmS$
zn3CIh)HFb;?edf!E#bKxJ(bSX3G@_ikv|YHsyuh|O(~G<>L<tA24NbtWFG|^C>g%V
z>B(u^n6Ht!{SnHSNL5e~h@^h|DBn+dLIR42|6(*y1tN(x<@}}BKVgdrtmPR%ixx<s
z=_qswjbIdpmb9u4DGe5Oj0bbX-{dB6(9GtQB^6w+z(!45K<rhAP9)}(d7{|kH-Lxz
zd;Jq=-BdqpDx9&mGcHGZZ?sZfb7r4(@(V$)`(Z|rmOtu{4iQ2iFFpNHHPt!)sXIor
zm7L_UH?9#gGzXrJ8jj*KRthw6>am-@2R!whbnb1{f-TyLtpQ{7&`f|)y6f8P|Li9k
zagg0(i&H%s%ZBn@Wp8`}HG1_3``EuTbtNU)O2tiMr|$u<8^{sko((5gVj?iifhFyc
zemLbb&&xRS{A~4B)zQq&sw;A?8(kW{P@%1soFz2K^ldAZ)q{q|qh;g*F<Ix$S_sEj
z4x<>Z+N}G(`lfaCRSyrgibKRJY<06?DGxSQ-K!s#A_RM1ccLN^^k5S=hbX6&(vUrD
zv>>nwcZo+VNdocr(S6;7+H5wRN(2S(SBR+`c%jpPQ!`b)@g=^9gc%ALFSspa!#O(2
z^$e2#a?rVJa9XZS%z=s9hI*sNqud37V)9R=Z)mNAw1z{X1pcvIulj?whA4VKu6u<q
zoK+fqIs((|^eb$tF5rbn+Q&7HG%m-YtKt`UVk|^oe*}Ya)UkXo?81x})o1qHFuq-^
zy4Oh%i(O~zFOL#B<_=oH-Tjhz5A||5?Lm0g{Sl8&;U{_&zOTD*wnecfb;n&S`>cyi
zuQlYc;W?(*43vUZm}LyU>lwPosVgZ?A$k9C?)^vdp7t^YUCOgRbWAM+)8A+xeK^M~
zQ@v-O5hZ*38FJN7g7vECv$~i@$^n^i6u-U<8DB{F#d?4NJb~p2N>ci55o^xhpsWGV
zR#j@5jvbbKxSkKPiRjiWPAcQ=M*I7v(lqWLsKGA>E#`}_<z0h+FSi}a<BV5N2Sgvl
zlMXm?976TwtIn+W94mIKzxe^c=LT)pI?;V=w3qBEhD(EAQui%uD@o)m6!;!o!ew^-
zdinvx!eL{l61NJ!WDQ?H9YSI=jvG82ty#lox@oUCY0=&&BcXJ(-mP(m{Y9&)EBcfK
zG@`(HZh_ysm2A#F+G9gk{gJLX@q!5&9T*R83J>rF=g^m&L+BiW1@+1vLB9fvdWEo^
zfGz0_GxCEFvclTR821gspMPJ_yUV^nT0&b25PsM61)+>W$ljC@bE!_<y19H21X8y~
zfp_~3&bYY^t>nZ8cBY=XEOCn9W9?%tmE-|Scu#iQVjB99+t3zurj&+aA(F3glUL=F
zqa#Q@&`VSYoTg?jK|ck}x(GTg_poxp#dDhRshv3sG|aE#;eYBa;U-j4y);`X1J3j%
zK`H+1(5v3I2Qx?s5kFZFxRyV{e{;7)%uuNe@DO(rSs6i+Q$t9Qp?AjRR<zh1KHk|j
zW`y_v)B;vY;WuY1G|%<||2@FJ!cGg_WSB<)rV3C(?u;@IpK{2F|0j5A-`lbaO1f47
zRuEWRQUaPT;wmI?jW`AT-bu!7Dsv;5ktQJ7AW@Lotov&(XtIAF>{^;hDVc#?lwG20
ze``eoM)<v3y^VH&h%EF%OU9WFrzcz+0M1s`pTE<|$@tgEJ|XKc#HE=E^0nbp7KA}t
zssl(feqAG&AdS*EmL4JF4yV`TNpu~YxrSZ8yFkRYS2jy;-2(L5aTW(8s?q4=YOn`B
zJN%o9eXUy!?doufu{>_U(K>6V6U&+YI6^@%A#y*^XzB@nz_MI)_v}Y9MeHOS)qp=1
zjwL>a?beBcY0kMHtrL43v*%=qQghlaqoXiPGE+k{f1yl{X(^cBk@49l%lSXbXOYK>
z{5|$hbk;bZ&++g<MHe%DPZh}?*|1EtzYu_fr`f)f7e~zVM8j-W#6P(r_IU`dR=K%A
z5%MZ7PiXmVE-a8y4a)dv0efH(82Gn2EPlj)ZaVfcw>Mm*$s8(`u0KQbGCpwB;ZsbX
zUz$!gG?RnNarRQD7pdFGvlv9i#<*dre57wtq-<&XsCCSc5@s|kWu}(OVmOm>i;&qN
zH!Cd`?ygM@WsQ`xW}#z-a}L6#32nWfyOyy3<QC5W4?AVVm|QWvci1@j3Eo9)0a%!o
z#hj76==gAbXg0(p@Q|D-Zea|Iz@(*NFP=WSUXUv=ZfVViWkemD>XisLy&}fBJ0vVm
zrXK?s*%mz6bGA@TfqCW^Y5_u*mDKvTy#a-YMbVhsp+@Msj?NizHD{MX+?#6H`?g|T
z>CpC-J28^TO||HUxa4%RoFY{CF(uFwX`bmjqgdGTAIcu3rNsOoz$%Fyt*49W96;Pq
zE?Av68v{$zcGI`I;diT`)d~-^Cn;XnQOU2~S}1?3y#PTJDkWa=_~UKWR(O-mv41iT
zugGTAXwUY#i+BK~p%M`zgYO8U^s+nOik*^L(3mJb#dgbcqix~>T&S1gu#+#y^cls9
z$4iear4B{93woU6KL?L_AAIDfb1dV69uBJ1R^YXVEz#ItU-Me@^z6-fpcSkS<X&`r
zEO$HLEp)fOW^?Qk<Z~Y?A)5F*K`M5EmV8c4Ts^QTmAHi~c$FgY{TGP-Ne#JU_hy!=
zOmRBtF}65-J5@cOeR7=uBlC$A5-s3ALfMqtay8;#37xb0Z#}QaEWd;uIH~WGnzg(6
zU33JLM$jgxW><8A6V#D)(c5TOM@wAW>1Ob?dRZ&zJ6thE0)tg=buM`;qU;7op(Rop
zHa6+rSCLkV^sNaD%;6JumVy}7o80>H`?bj5)Ja{9MTxH)?T5PXSYr5k{~cyUDD?yI
z=`cd;#xY#v*XnDr`f{Iqu?C<1R;hbeJ5up9NVYF{OY_Jr{<D03^#Tz^`A$7lMy{J%
zBzdcZ<LN_v+~vwGFX^prWFBn*8onzMvdg7?3!iYVoe`41|5cesN{B)blD91xb_6q_
zTt-VL<vK?<FUvtjDI`^JKMz=R>zUn(Rp|fMH(`bZLT}i=0yWX}BVGRK>BJNs1xRw+
z)!UIPRM2dHdLYT1`)ol_wN=2DXCH;+EB<d4WDAj*HC529TsBNsQtgD$n2w2y<JjcR
zO0>+m=g2_+5=~C4(lJ%NjNxCB_VqEy><)B?A$<gWKHi=m##Wf^bYiMIjLgN<MZbCk
z==ht|YR#_HxbF~7H1Xl?uEED_Quq8W5s)m<QiXT2?<VXEYO&hf!onCK7o@WMvn>A?
zWO~uxMXiDf?fjdIAd6M;4@1W5*xf-)nDcScMWfCB`#wNt);%X#6GRLep7yQhS^gD3
zv;h2>*=iB0I31(ZXrQauTNSaK(!P0=6>w#noW(blX8^ML+dWp<E!)*9yPVXlE#p!5
zPl?-xaX6I-5Mgt~&`@GuKkbh3Lch%3Yn5$D@d)-I0@t)<C*~GT0ZsW&9?dbtLTnzW
zCw8KD8Z0I3FApe<StaL${mok9ZH8}RG*S|KC2?D+FSdF9ZT&`%9q);?nIlRP`+944
ztR{!il6a@LmU=>9m1yO7c5adD|B0X=anEusi6;Q2=)S9%{?687Eh$;&?=OmbnrF_X
z1FBs_#mt1n2ZXrv*6tF-Guq9*{+4N1(OTFVQ5qpj*#GLZG5AIZ%zw9Q9<+A;0oHbN
zY>9O8RP(!~RLgsGE*ECkp_(U6E-Q|eCw6{CP?kmNeSJPXYGaOE68n^LoHK7W?wdq*
zx1))7ze+q?v`BSYU0SFFubXfY6Y5rD+;=^tR0BnB1M8{nc;min{)^iBsKR-0r1pbK
zJ!+Seui!&YKBo>UNX<}~2^!Cdw<_>KgfWgkY2#^8csm(@Rp^dqZ6mc>sz~0{OXg%w
zg-1(m_~64XbB$yaLZ($IgJAp5XA86C_@FveB1oo0Nsab=$R{qDM6QG&PC7*OB9jxp
zTk=TrxNR{~N|>BFg0<4=`_7kTo_Z}ci5G$!Rs_j|QGoFVLNpP6xRu+Fp4Q#y0P?~<
zS8#1Gw>)GdD{bbF8-`K!a)&_Z)nuj8c)e*`4QP2-$lnWnPeujTb$F@n_%kN^y-qIU
z9po&{^iaQPEBQx2OY%1apXvVRze&vUd=D`T`UL_rc)H#gN2mp1q?F{+aU2|K$rk7I
zDy1K&06zYz=4ngGdM7e<_4YO;cL0*g(Qw3gc5={IBWIt8btB@<3i9;^exbc@AQRn2
zdf0IzkBwhDZ<(EZboq+Jes&O1J4@{Er6uR82V_-GlY>iIe7A_Rzy0B=mT)SgrGBis
zGpj<s={YXc4~4C((eAaR?~xN<4SBot;#sKXR)5C|*Rj%Wg+ZG&EOO$OuyHF_%4iRS
zP+%d{*}Sf>HuA+#sw<=gKZ~5$5jFx)AzV215Bq=GfiwP6C37_Ol6CbzymY#L({|*p
zy<6TXdZ`P>%3LE2Cf?DE@Cn1h#`YfP71lah$Q{#1o2B?V(UP^YK<+q_0`vD@ic&Iu
z(3t)C`@bs+%3DPfxI&6d){fA(p^$cG<x)XW?vvIz{0%{<6#z};hd=DPW*4Q8H^`{{
zLpi(W5S|Z1peB+_c^AH7EG0pnM90<tR%~}d%@a2;0l~@yvU!h|Y=P*;bMEb*;w6;$
z7^MIu79MNXzQtsCLN{%!8EX!Dt3u68uvdAwY9Gj1DzF#(Y2*T)5quxU_mxHLPRI_%
zn*H7y$~)G5vMQ-jvV#mVBzyh}o=x>E%$BSSQ9gk1Ye~_S1HB|Wmxkdgd{!naML95J
z462N;QJ5G#FLKkzHRO^Zk1@|3I>s!4{SolBX$vNEk<SLgR#{ZN)qaJx*w+`GiodZy
z{LV_Hl7|3JiiQ%aD|a#}0Kx{QIN~c0nUS)vfB*DpXuMYH=J3ZwTI5Akwij0w`raK}
zU{`mAPTUvqrz1vdL>u*57-iiH8_dYCKxYdW{d?jHg$)Eo%Dq0$B8<&Q_@&$2mv;?5
zuZ0tmslJ6xl^hYzhz*Ac=r`8rH?6PHi`BS7{*CA~$-vDRPJZwj=-;a)LR1tm#}C7^
z51JK+Rvy8yT_A^wYb)(jo~9vSswo+L*gEq!XL3VT-5-#ABc;m>fO&Dxi+WkexKjZn
zbGBk!<ABDKTMOOmKo)?Ky=F=a`P;;-3IMs0A{-J{D?sa})EVZ6$JB==KHQ<VWJ(}=
zcUIz@fxSpC>Bw-ck@(Ep@{X_1=D;GSROSizLin>;LzQ6g5#A_2OnBC`{MmvO144gu
zE6XNXIhC1%Sd@iNBs#?=U27oV^_`V*SxjgsN5G!zd6u*({L-~ME0s?BJH_$++?ptV
zk%_v7hd4+O|BALUSM2x@`G-U5yqQXpWWRFu7u}J++hc$2pjD?p)>MuQ;JDhAUaZ<i
zNYrK0-54Y{HB?L`P8@m|OJu*{tL!!Kxv`TocX9LLF4_VHCt^;jEGL7O{IT53bS4!<
zOJW~}{K-lVsuJnje{ZENPcJ#0vlsnAs&;p|2lgFAkTkoJg`##S`)A_ogR2uqIGHnm
z$+20wHS(LTolp9A*4d#?NSY;%+v9Yu2dkUFCz)(9nhP*?Nc26F7)xy$_Q({Rp$IZg
zq$n7A!e+VD6nB6M4@o)t^gbTuUu|~o$R2-`<!Y{W=mZ*qKb03HZ4#kauSWYZ?pW1m
zgIFpya7LRaAR7;K%3{}WM&SHQjy!PY@?x%${hdvmt0)IV_<QV7B7h(`Wu56gjkObH
z7G?fJ=2MCevFhyQe+NxOiUOZ69T6hZXrD%%*?V*FY_yNzT^Tf}afM7SINd?X&0+FO
zS@Y((mAdzHb@{0!Go<Kdk*LGTF*9~*ri0bwqK1Cv8(m#LArd&|t1!vJjLLcCadNQW
zPoD8X*jmK%;t=L8Gqwg+(z~C8s#<u}W`6IPDvxKXn4lWlva9hJhTb9K7m0AvoAobB
z5A}I6bJHe_D_&)oLihYHY75>!0N!}_!M%o9O)}QZ7LtNiKTiY9>Xrk6#QuHS!a0y4
znmw3n_AqVXhYTpNvi6Wl!jizz3>SsY7a{XGoUYJP;)g=6g0E*xQKAk{h2jM(C-ium
z(&KGv!5d3lc8%_$_g3x`u)wKO7va0jdn-%nc8`Q@Jrlx}vn1P2RSr4C1hudOBHoGi
z7DFWCr#y=*VonR32p-=~6i0T^S)S;?keRF$*z1W|rR7Kj<r7J{PO0xxq=$Ux_%q!7
zKFsYjLa}kB0ps4v3J6qZYf%(lC0W@_g`KS>&dY9I67N#>GT1Ard%06qOP(al4PHr@
z$>S(*v@Rpt@nq}tJ-A!3tPilS2Ph+-QB2lSS>Z9+`{dy6iS`Snla+EJk$*<3L>lmv
zE~}4@Wh+c=x^=X(0!0Ay2^HCu535zX<P_G1T>j+ny&HPue2s;bd5b^Y@)clrqPav^
zcaASdvAVXO+{Y!VcE|6?K7`6-Xo6rsT}!@zs3BBbQkla#(^vMq=GohElHxO$aRF^G
zcm-)jCKJ^!mt9CcSncrFA@f01Y0y+>3H_$#ny__TF{-#ocV7htYJJvSCXCtPVdIS;
zUWd6<x`dkn@}TfVmVh}Db>M7`Ixh<1%HgXxwj+cILTPMU#JmhX@&KpVE7htVR2f(a
zu;~6}W!0S_F|}$ARl$yKPpd<PfI984)jVa-&jGQ3{+qWIo?m<C&aY#vlD=Uvd>X<e
ze)IWN?Q!Zn+5)>L_ce)kzDjKJ1{U3^x=qcAF3z{De5vnDgUm`0VvQ+tB4xp^2zP`T
zw%>{Kll4RA0`vEI)PeU7it$p!30GTqq)e83%9RTStn~FNM2vFEJpkNr)(|wk0e|zf
zE6hL%_B^G4zE{Nm*0j+L#`?hg_nd?7msHandr+Wzwizmw>PgU&KVu%@lcYP2k^qLS
zP13S*kxcgJVIgCC*!WV#r>CT&MUlBt3aA629sR9y0WVj54i5~Mb|b(O#E}CTs_T_u
zZ?j;TymtC-_*g9)lLCSVi8DxSC@YOklr_`L=snR1vKzF60wF6|DSg%by`m$f#!?b>
zYc6uY3VChjHNg5R<5yOjD4!#a>9P<0L9Tg{ZY9tsDQA=kYRNi<Cc4p=gip||A-5=D
zk+bu|JqQz_dMw3+xzH1{i!0#2{_dkw^i$X(PxLr&A?fftV#CK0b_X>VZXH>Cg$(e!
z$I1W)a=3jPn+oLc74~;TZ_ZecF@r3`ML<iGE0Sx)=HkFBAIiSxZl&BSG}^;<%Wf*1
zzU_O6EWae5siLm+n7qvC@QbeMfs-9F5XJxaB-7&@w(YjxP&}dpR^uz&U70KJc_+yw
zwOw;6d(T|11#@SX<io(8O3vqd=2=>eRJ|tbF;>TcCb|Qg_!D0%F0)sj130k5$Ewq1
z$B`1$s|-qDFpfu3u6KS!q$M89?AQK8hlQO^{t1d|w?C#X3zL_MZao`RsmsH=Tp?=v
zIL8C<0l6?sKFbpa2ilXfuWqRDTO17JFknCSsN99A^9($qIu`w!B=^*}>O0b1Q)QJ~
zG$(Wytw~J{)|KAS#Fo&+=kO^fW2n$4rj<4>cB&QhGw~?`L))9`ns;jEX5PDrZ~=Xh
z9AwmzW#kCNXM0ei&9V-(6{3Eb^vN(1Uyjv&{-vO>6)K{U0M`*=L&ZW0Rc(@mo{JLq
z9P$+DTf{n}n&54m_m`=+a{;;=Ztdyiq-5&?+S)Ie(PPu49=q)K00EEoCo<Zg*08f-
z(WD_LS+1CLyjL}S8BMFeR$~Osx%mlL!OESr-=DE6uv*GwU*vXa<cDRR%u8$@O@67S
zsw4ASr_7pSPpAD$HkEtTei>qml|`8G2t(bLteilt-ptEjn=B>uX(=z@)5QqJMU<pY
z7;-kv+(Jc$B@APxA1sskwA#twWRhyZImhW6z;8<biPAX?O`S_YcxxtGovK6Tpi0?+
zbTizmT+XfZ87z5GPOKOhc%PMC%6V5?;hY+sSd7v^=?6wdYDvp6mc6{?-QvW~y?r_Y
zi=5+ud$7$s#oiS#{$)NbxMnVqZaZ|+*xjciC=nE&kogtjAR9%%c&bvwgAK-CD_wz~
z@FODQOSBhB<&rD&iCUNHD36`V5i7r?hzZ_-XhaV8GQr3&Ln2~zkzO0o>UaP!;Gk3_
zIXfYT6bI#<rFFS%w5C(q!SKRkEpRKP`Z3n*vaXz%0r^r+!Vo@@1^pXAJ^M5&rXG2g
zin#^QlE<nwh^l=XL{nB7a3(SrSilwDmh~L&o$3+J59<;?#pcs0SFsZ-k3j4kE30t#
zBn+z@A{8=REzUq4wc<P-E82jnZ1wxyr0mQ4!IcFVs0dA03IkA5FfX&ML(Z2ujx2-U
z7qt^C7eo*WQU`M_rv>g&kb#+FxMj+-%2CuRK_D;wUpgQRtX^Txt>GW6XF2`gccLGo
zrIhP$b>cK86<1_F7IbH;k$ojoB5PyfbGhhTrn5M6LMF9_fq|MyQ?22)WPhPC;3zj2
z!1|Cq0-~513kX2<w~vGHZe{Vo`8#Yr2adi(ww7_P<OD2d5aIksN`m%}@7Ie=4b6u}
z`x#Vj)p%c){nOblxD{el-2ZaNAkrFjeiPhRr;aaKO3JSt<?WBwA|%M10qzKaG%TSv
zE)Mdh5TXx<M)Z%=7YDyMe#@5(rxc2*T$Je$yl}{r{mSoE8Oa4MsV@$UGKZYSeXxaF
z6<4J^w{2x)ks}ZW_>0~EQADd-g;8JkEhe?m-hB}ZX^nu9Em&@N*ksG?Rhx?4ZBJ%h
zRiXA!z`FMs+>x#NB|YuU02P0V<^u;A&X7RyP9+fztSqB;6*CBex?xBk&!sBmM`eMo
zrxe6~R5q@<`A214Y6aN`PM~27l{2TXQ3eTleqv5E#bp5dl8iZMSPnFl@X@~S5l76C
z5iD~9OFCjJBwO6AiBqMCkIO0=&P6tggihhTNXl3^_5_N%TO^yAf_#7Rm@9{gr#@$N
zZ}CT@*hlW|+N&k607sOc%|&39eF@zSK)ThbrXw>#A&^V3oGXt!VH(eV4AlA@3o>qS
z5YuW#s^FJyC+eo$381u8iEuBy`Gc8NbysE}%L24>rg)9ofwytC$)rD0IWl{ocJ_Ho
zRLy4}P0h2ZIltV;lVX?i)nVwxV@O7kg^6i4(aZ`8)1!1b<;0RJ?@v?=gPBUD^R{Tw
z3tXUHSa;<*u>=3Lyf{uk;v}H9rJKjqhzdv`Bl-pKTm{?r|M=+Ik8*V^WmnuIONl#O
z**GvzMJv8f$1-p1b=NfaA>=Pe942%oBws}gAw$9?NYSTJhlCD|gdUA6#e=tduX~Y5
z3A}C5U&2G8=40FMKB(05@K$v@+Zzc-Z-Y}aRfXUkH#(vg)~&}~oK^9d_##0t+;4gP
z(>*F4gy^#cE|0kWY*4c^HYgp8`5!gW&!Abi@|`k|v19@i$gp&wL!D_D*`M=q?b!?*
zZIHH9Bk3Odkp~pBp(Xpu0u({I+*d2zl^yojH$Vm>HHDnHFt>k@uhwtkB<a=?sYBh(
zBHhLw5UMeb6nn+<g20MHd;l&PEtkC;D98218mS8sBH55iZVQ^0^b!w-=xA`tl=V#S
z0+)9UKl%?)yYJcme4m`67xr~uP;qLMk=V05+`#teW$G%3irZ$isCqk6M;eh$;Cpl@
zzD5mQOZJv+(CU9+jib!?Np)AF{oI;j!6~V?LO_GkMIiAZcLpixvX**=3KW<mev6)X
zMo9~}*AVC>>So`~EwGks6WVPl2<KpBJ}u>g#=GP2VG_0!OljmY+Se%r<m&luU(-Ry
zuLeN!1^`h#zfMcepuSGudpq!$uBER028aqMGs}fK%YKACVck8fM9v1saf&I_pJ9LZ
zuZA)isbMrA(t&bqg;LyGlu}J99fnj2Okp^WEmp&kxYN0DIHM{U1Or$o*@nM^@~b-x
z2#7mcf#aghjOj{uObqBML5$QHOi`v8usL+x^!-kif4YKxAsPr<Pse!*8;^-*tf*Bw
zT@D(LN<Wp!c~Fk2>&oe!_^O*nPj11L*(z>cID!6Siu4+VP5)cUZ~QCngqTaDJgoRo
zej>(a<J``=a}u(CE(I^+6e11V&%H?JCj_okef~tMyl{<x&TSZNq(GmIG#{IfDreAC
zo#R?cMgcb=RcNXAWM56FVi4RSCNtAPlE_b$EdRG^@B0qtrqRRVVt6-}1Q&gE%QxjH
z(Ode2sbyXhyr2Y4{5-p!U;$rW&M)8REa%h((gA>f_5BVKy9nIr`^{T|Macji$Ro>S
zDy70t%jwxr>8#L!*XacMsQm}50;WR*+pQ;e0{~$&KG^Q)htA>M=_qoiZ7e5q_`7cq
zCV-gey%?r+;0?|nIpXoT3{>iVoQKZD5DFlc6T6c<dMT13&f(~t&=Z*~dvbf8p8P>d
z`nJ8vAi_qDnn)%sRZnN~q(-fXhd7hCa(V3Ye<wRKIyb)gL^xHqBEj~|5*Ce|+a2D8
z;Vw8*G&X?uB(tW`UcFMtLH)nM`Q~4`aK4=;WSDy-;p@cW$MlO8mu@Otaa!_Wm8@3a
zzc0S%$e!y}p$+}|1)Wx?9k$jvsC~%(KJ;1Cbj1;XGYx?A7MY_&-Dh{IwX2N80D0<W
zI+{6803~|b`AM5a(I9$zua{xcMpdReZ70=qPn+1+FbogF=!`p)mb?VG6`G48FRLL5
zm-S+Wd8Q&okkd1E2s_J+e_QG>w&lvFUJ_JD)LrQGa-+OC+er=+91;R(zYD>HZUO?0
z%;WO3(?N~X@y6WgYX|APSLI2}m0D`V*O5V4<m`dFaW|pNe4f$Qqmv8YKA77rIMR@u
zd5%8{PCZw&(MA(OH{7M2X@r$h`2+=a@8_}wt{X5W(XNH>ldTOB(|{=zL|^nl)Ap~C
z->NLKNlc!<NX|f|^^ES|Wulmb??!G%7wM#?<7e;}$dH_ps_eBKEjh8tbLJy>DfA6<
zTd~?~dXQyP7VBm163X1DddiA)_lN1qSHJxg(GW9dsL{r0i1h=Fd7llDa<XR{ijdo{
zkS)KooSBgY1~ep7=1)wwv(7qwbzl<oWiH)QmEA{W_7cjw1Px5&Q|3ngV0RDAKg{>H
zSIa!H!2-g^hUc*^g{SAP#i5(prgDXtdRo?Qi8yFLF3X2Zvyds%-Nle~!aNWkOi_;<
zO!EC)FDT^VjqJcVvhpcp#a%X6UYAFn*eQZ4sXL{Yq9&^5*Q~pW#V0<i&XU##vzXM5
zFqvF#H~xJoYso0(IU%UMHl3Qvn*doi?{>5Uktlsv<p{t<P8BY4zHp*SZxT(8Y4Ddz
zR9P%8o&q}vxFy-WZFcl!N9HzA70-cz!2yPz<9El+bgc&pq6Fw};g{-`CDrAi@eW4K
zc_2)<O8G5vxE@eq3mYpt#0%Wxy9?7{Q8M?d8dyXlwjac97bI6|!{GB1IMHsjZ-0ub
z!){Sq0sm^eCPvoC9yeo>A(~E3ps78ufGB-O+U=d3ZBQy|XVRlb!2*`|P{U0MBq1Ri
z%JKgjG~Njs2Nc)7w>wwnMNU8v_it|h@_-nF6dHsM6$|TMQ>%Ey5(Qn1Hp5;!xG1(f
zjJ0yQ;VEen#p)&<4=VY)BGhxGC+6^Z3xxyfvKJyJ4p~oC$^uk7r<?_>{_THfCHzHA
zT<i*wT_{o-ZEQ$(M#}<bL%z+B7gNE+hN0afLD$w9Z+a9Y0IPgC<GL|Q+|Yl{cagwL
zv(gO@-N-i+`xPC0@eZehyEec<Es}i=?-(+)?7-Z8s`-HMQ;=+;YFkgrMnlh!q~~hy
zk-b0jlFLt->a(=;OX}0}C1Y)J1&B)#C67ntHvI&vS2h7TPP!VjuCi<!DIx!xT5=5!
z-3>naL_veIRD)Xb*OH~X(GzJja|dbN*!AB($#@n1L6<l|$^456in8+OK7T17wclJw
z8%_kSRP(I^2y`OJc!6+DF_2(f594a29e3dNHMhdlLy<`%oC)s6VvBX-+hU_T+^r@k
zau~<ccvngWpq|}|sg=6b;m?`Bpz%49L1hP7E#ASUV!QDd`9{zN%0Bi@_>4i*SIVHq
zoKb53_%1nfDlK+ArkPi(^K$>}X_L_(xS9*w?bwf*%6KfOa>i_xx8NLlHPoI%sq$|L
z{r%0|Vr4XDQFc-e5exe8pFA>JB_MCpTkMPVmP1A2v3U!+s3r5wVd$hyJ6sf9{m;f;
zHH$!c8r4g(pLWlyOFvlZA1K=w?6jCdg1m?es-T?Z9kpPBxqMOEC%U`#Of4y@lXTu&
zdwO8C+D*0K7Gl3RabL8B64JSLSo8)){0ujzp1>+(*B*V{ubh8J*Loup*Ebx!iOZA3
zJ9s*8Ilo}Q+KO|;^~Ss_1gOQjF;HSHAu&ZhFIEn4>h0H(lwZHnzr@ZRwG;B%vqjRb
zEa!l;!qze4@=wd&!T9U7wQT_uVo#O8KK{+qE+p!ce}4>j7_HOJCUhc~ibR6)wq&MD
z5$+=sU*d)OC%go$AOAKGKj@ozbHctt+!12y<90FKA`LLx^ek|#id&ldR=ue(xgIjq
z>P3F5tYBsRC_D+U8AyM*A^}cP7ynMkyu?~ed=da2K5gMg@?xK#5g$U`)91v)kjWE#
zWncN|uNr49V~@T5M=**vy~JkU|Nh6+W{**QbM!iCv;f|M9gd5!*cYN7QV}+OSdQ>?
zD*S1Ml(Xu7MU{!*(WMyAqY+R-7a`?>+9-w}<XdLStb>5cS#M#ZazJ)ncL%%orx5#+
zGH}6RKtw_y66V*jvD#~lZw?v_tL?6z?Q$fqV*O(^y-r(=_RrpAAn1__7x<iDo-uN0
z$hsV3#ds4L6c?B%RdhAcEWNXyk%JT2YPtpw`Lzr^(jL@S+|ry*bnro8tf8_J+E-gK
zAc+xd18&7W0NrrB=olm*`r{lLT=W-VCp&#BH!CLW`xFiv6NllL1Hk$&X7n_-lq_N6
z8Aa!fXWFGJ>4aR#(wc|MmkQPQtEBJNa&?VsJSk;3<#KgEvXVAC>n&{T>pp_V(63)4
z1?2oE{<(BR(=9?x$Wx+&D&!8$*(~R@FB-qPfzXDl46!N$e)R}h*j0@U@j0u{jvbW|
z3m$B-ns<UhDwag*1X3_6i?iiKjDuJVG}_m^(#>=4r~6_?AhC=)ad7Fi&x%5D!J?Iv
z=o&oiSI7^o+TQWJ?;ET;F|KNcYPWX{{_K8@_P{T$0OK`hgJ1qM>$kN{L2HqKi9Oj7
z$>r3<7N-+~+&RkJ1IAN+n+pR`5=tH-t+QcuY4m*Ecybw4WHO|%POCcwnki@3GX+AK
z&8obqKrOzN;|xcpOBMUODpn61vFEw(`P`tRSaqb8%Mqf8Ir}-R*gv-LJq<g@1}Qf4
z-RPZPe|h~iH>Pc1l~{tPF!xQ$Wui5_>(875tdw|uz#WkUwVnF|xqjn4e&Fip`1k=1
zdSax7HGoYtIt08~^nh%yb!ivjb#V@~nE@DE68pU|dmSTWalD27v@+aear};yCXq%?
zHkkQ#2@A;h%;B#;k23<%hKln|{6wLDfsEO{dm$%m^m=*5!VZJY#Znowdo_EiO69gh
zKFWrxvaz1-ll5ddWiAzm9n+4?9#cq9r0f3HXs`GzoDqG-T&u2t+(}wj;W!nsbZB_J
zhpS#}?`b8BBDyp-aX<0Jr6UuaKG2`%a=py=r)%)Nzsz@pHgGM`PT+(7cVWD{>NFXq
zHT)`N$Xj>+pI{Pa-~iuQUpad8wfU-m57|lc_M6uhLx{T&d8xVM1mw7)YE!eQ`Kq_p
z9pdB6quDpCHS&$yarwdDW>)5+wWt59IF>NS>f#E~8Nbj@vEbWF{BPNh@we1NzdL8I
z;CM;GOo7v_v1TdPX_)Y9$-&4f18510Bi|Rqe`V@bHrMLy_WL)$n~D<`ZPAO8vWWqy
z=*<)NIq|8jH5;hJe*W)Y!5^ll4??|qZ3U2GCDZAy!Np57PZQ=_U{6X4CceB_`?-(i
z^oc-ri4>Nb@pZBYgpb$LN#8aSMgK@Q?)7!>%uR2v+LN8T0K_QCd-&FnVroCv?rq5q
z5`4_@6Bs-9t34Tm=f1Izu(7jMb2I6=xMbzx5Q5Y4PKj<j)n6JB)6K)eyhtl_gOZbL
z`)bKuG$588@ryjM1^Pr3R0UEDUGg<?M)qhvI70y<8&;0UsJ0H1wkEzr{5~1VU}=Ty
zp4yXRPte~yzDj><hiS<#SeL@{1Xfm%E0k^%IMkk|C1ZS8rC!cLEt{9xo3-Q}Qqyf5
z+U0k;mfS?T_H!XTA>&yfl)4=v2VfbBIup6@%fXb~cmbd0c<plVHspU*ONthm-0|P9
zCLrNVfH!`d7t9dK7^Vz<l(f{vyku-S?`tap-mrD4S9&o@_2MchhfLBO8Nehhb%4e=
zETMXHwzg0{8m;1pvv_=2Ks>CN7icRk^~MiiS#TvEgP26b56n_H6%x!SiR;!=sScze
z>I{WDiRw+brdb9&xt(7w(?MKFeu9gv-}7USS^kwo=7Din$z0q?rl6^cfQn9FBz@v`
zz3NrH<vnoV-XSub;KC4@rJ%80g{8^&`8@{EqtD@q=g`1F?dPA+VF7@eA2D*RJxfbn
z18m~AdYQUYfd@n*^FxS+*l9sDW<M%Yfx6%EV+W>vCGZ<j#Jm>;Rt_Ua2FqkN*Js_f
zXU>LH3#=k8to)#^gSV>{s@eyUYlv3BM0oHvJXN+O4v6dgHko)Msc<`U1a)@fLT)V;
z;)3%1ggz~@))8oJHk4+LX7Vs1AR(X<vIz{oU~&|QMTHg<g}a)lSiJ6ZC{DhBNEbZH
z{=%Jma8W7#)IhR%pNM(v%Rr{BzUxfg8rPNiDb?hG9p+09U<2PG6GsCrMVTTHt~Q1+
zT7G9~sig%4@Aw0Wg+nMntdw|J7R34*LWwNj_(&#Z?~dwC3gy5oK_W0q5Ud-s1cmI~
zk9{4pBomk=MTqnR%-H?}N)B4Ks+%^wir}D!w4c9BZ!^8gqo7qAgElb+n9tncXEyX0
zxGanT;DRiT)CWjyoDsZ)?j0V-pIRbILiJfjVe@_O4iylm5D3{-g>UM@NfpU7k)LA%
zjy0E24M-Zi9wZGpNc!5t3Q3>n0!bhI$yao^9tnG<%gK3+<h;$v`IwWlg&%twIayvA
z5tg&=lczA$%t2n%cxmFD>nM1gQ!wfjyj2SNrJ&WnRX%^$`8?kFe3g7YhR@v$QNjM&
zA$biIMvVizobvVmyKy^p0(4^RY}U<LDjc`t`^5?5=xAy<;T_Yd8d{OFR6145lPp<y
z2lPX_>_-qR67Tu{<^H|(+kfjHjRU^aIDY=S{uTch{rf)wxX-IQou*+)1t6j#l7nKd
zXJ3ccbTk<L--TCh8i_mY_DS^fncn{qR-$<)>}{~yA1nOa|7m>thW@di{BQbq{{JWa
zLq6+tu^WE>%l_Sm9?`majK!XFb>V3SepJ?nZZ6zLO>z`Kj9y>rIv<E#W|kTEodFYL
z>ZL&|&=p9v$L5(+OM=G2VWftw`ZBY=U)We!!<(`2T>e@meL_~hxELj)9ryEkl3*F`
z){TWakFdUaaqsLh+SSd`*Gq$E6*P$ar?@xHs@P)P0+e0sbb$n^Z2fpB)4l@;H!IcD
z3@>>|(Z;7qLMmd<!FHgVI2AnQ`0<|nHi7Br2(8Uo1{ZMs1DeN(trp<}al`DNUI~A1
zUcDQ8)w`yYVMhI&wm{u9ryG{iIEu8xCzH+@yl{Ut8<xstdkQ7bdpAZdJWER)0hW)o
zDu-qkOCh4Kq!s|}un8oAj(Lw5kcGtL@k~h;)0mMm8-xPWt2n&XsCWd?zMSfj2#Xy!
z!u@9CxMGcf!x~QBGY!PjCV|IJkF-}~Wq<}1r`+m*#Nz6|wXqBjp{qU7-tk97X=a|7
zaE5SjLg%L68u7oQE%>9V)D|u?WM0z?2lU&cuVX6H3oBRO7|Lr4lnl_kXR+!ln!`^n
z;wems8c~J5FDz~#I#5to?5$ob0Vz4{qnEbuFlZ0G2vbWz!_yXqy|*k4Ul>_B?aT-g
zSA5psM4TO&={2ro<7pKTSi^@usHXQKe(c{(fj?uKRw9Pr{3DYik==k#kJx#;6TXL5
zA-zHB+BKO*tw0$7Yga6^e>|r3cQRU_yIlCR#HVGA_Jj>Nae$WW#boK$Wku@VgtLO2
zyb>*k?@pW<l1dRf7+R?6bzF0wAL76QtQ+li*l&bR%R<&@G<5p^fK~;8bR$rj*$h9y
zn4X@%nC@}L^n(Y~m~Pw0m|j4WMom`9>h3-)P#vTK=?BL(ryIDTz`H}OT#+E)%1l-?
zz5g{*@k36<rB21SO2tvB*y>*=pO-qHGrv~t{z5*FcRn94pMT?ge%ASXtb9ICeXjfM
zUb(a)ekWY5D^F4TDT;`W_*l1MxPbg>-AVLV1bjryyBeJ}+(K^?WyRRGb(MT+v`0x|
z;!8*RiNt7|u8rO%qMpQV2@5do?6CJe-5C7gq%w~cJhsa!X$BRoWSOiOPCth46~4$-
zl{(d3%ld2;L6uc^(CuLgUMRmm#OowGVCw%Wzp~<E<)8t4uWzH&V=NRjcKo~{_WYHq
zyBY6XE!u*=D%cOUNW-`$f=;|{o>REKjTVf@b^mA6>)-`LGBt_WN0bvURZjXL|N7}~
z0rp*&16Og#3kpyBl>)m-PwlsF$jK#i94Lt4*U%91d-I&^A9M05bqb!{w_HyL`!WbM
z42|AM?-C-6f_N76C&XC~`Ae){n{Vet@@ED*cri(O@PgBW-S?{=R7(%8p$CQf5i+0g
zx<{pGY@luq{yk4D<-EKddD486m`#r4yX5}kB5r@s78+L2iGoKFPRS4wvkx!FT;L6*
z(?Qgn7_P%-FyhYGn(S{2^5^(75f!7us9bTC(df$}?-3!^dKM%xiNy3`bv@&8{bXS8
za{{-e-q$1EZQ-g6@}SUObVs*f$W#S(=r|2yj&%&Z{mqc6t^7x<gqwHVyo!G;-CV24
zFC)o@%@wnRnwgKs`H2`Ep}lW~tg#qmzYy_%5z$8Mid3~rT%ezgwXV^)q>Xs@M5?l3
zV;gOTs$PnCvk^i?ESMss&Ui>QOgnO0EWT!Y$a~bXcyrwlMiN+4!QV!^Y9Kr8_%}g@
zQ}Ks4SM#irblvQ~^XW1VHd!ND8K`x$m%43z?`NT^R|+a=wErnr$_;O#W_i03@Hhes
z{}&-`Bo-0Z945}7S!sJe)2m(zd$aO3{H`C!EVBZK+$m2es1tu>4iGneH%WpO?!_%R
zm)-5Uf~r2hr5>4zZuFldpB+buB3|i^Uv2iUrn{`lkpFqS#1UX)Q*?3Wc7?D(2CF77
za}W~W10D|l;p?wD)SLGATrXYg1p>x_f^*;KQX55K!seMf$pV#cdP=A~alLs(kN@=2
zMtkiFb_KaOQ2rjQa5;zf4b@v6Wo8-79+0<cOUQb#e=|HA&h6RzU&pzYG=&hqhC!;w
z#D^HB?srDrk}2M!|0QfZA|Rmo`Lq|Z=CE<>Sg)Fk;xBCD;jDi)nkl>GQlZl~>mOyF
zQv41Y+t@k|S3NBxU#NbF@$lGZ)GoFy`$mpGA@|NFWus{>Aa}wqDgUs+B}$86A^OeP
z-{<Ka;zn7KmE-HR6|mM4cAeAHoPD+iPtPVP0R?jP1J@q+LHYHE{xEguVe{nQT_-c}
zr2<+A??Mc;v(*{sdGHPHK(AK=<vzQ*)BdBt(p9x}=gl4|n>h;(ynMsG43(zy?QwhD
zDcS=EC8Uurv_il&En?nKDtF(zJ<*e@w@ZF8&k;;jtjX*W=J=RZ?35Q?Q@MNEd%ER2
zj?RW~s(hIAba$iu)yjii=mW$wSN@mN3%)vJu95k3q=MIGUM8Q!I|O8}%60Z3Hj|pq
zA&{q|8LzCfyXD7vVx4Rlp6JcQtQ>T*oHtpW=X@V95sgq$jv~TNKtDxJDq1$EwnQ&h
zpw=%Ov3vTt5VQ*=JH*kv2set;j>^r4qKZ{G0U>$+^v{HLhA#|OmrZ|CdFFTd^Zo~~
zEz515)e^^O=F!=qYW_PH$c0r=>=@a82zC=4Ak<HUoaXliK<c)}-ePT^H(B%09oC^*
zZ;5q6`#jOB@Lm#MCmJ)JSz~3N1am5M^FC)xzC|>e9ny2Z5vh^bkHETf1KAuhu~BTD
zo+0o;Y|tikx#_f%iz^^qi5TIsa+bD-`qVCI1k1{ti_o|st;gkXm!uZ}mLA_^#NLNx
zvte#`hmD4Pto7%YvnJMwVn(C=I-Vp$Mk_02g`|c-a99f1^oVW7-j|+*h@W|pRA$X8
zTRB@E()CL1gPo0~93k)rR9;=JvRUsR%U1ah0K#Uy@ou$Me$J0w{e8tkeRsELH@iwX
z!{6acqrGc!&YoZ4b9M77b&`cCLap2p<*R@PrMtB!2H!|8wbXXH!Qy(57u*gn;fK8i
zuEF8|!{%RPO7wKPUKqyHpK&%3#p8#)A42oH2Hy>VCJwfo{^0H}8-55K+R935iLIjI
zZ#xyA;Z_{U@e}|1`m1}?zlVV8`TDDy7y2IlTbY<^&N~yr<oHexd_QnqZhf(Q=99s`
zvoGEW1}Ul^XT-8sAhfKzfp6Us`OGPY9W1z?VHv0RE>1X_dA?DewVRu@0lps>B#-D$
z9-T{evz^Mj8*kL1FV^r%lJW@M|481{+7*sUw-z)D%WM2h{aCAp%B_d-_jZ+tZNA~#
z^*GDz4f1L}V?l@Fk5`GU&{`CHrF<EPI7v53PA=nCL3t3FlrA}W5cQBrbza`3UU}D6
z_=Zs7q(vns4<M;YxmHXs5VK&po7Dy^kmI-9HNi4}rFerzdmt9yX2Vxu^v!1|$DJon
z3Z&~xpsHPI-!UY~KNi)uc~o7wpQ<;lH~SZn&{V-kmd;Mx1;RIu;8ZwCFRndV${5cY
zk&mdKND3^Soq<)C4f9<lTtT`?)TUJ{G}2|_DA89ZS6wqx*<a??r@$9|gZK2r`@50B
z)YEa`P^sgN1;B|f3L{!suH&h{B5VXJ@tzc}9Hu=U#Px(Z9mekVQoCwPG1nsNwa4*C
z5ys{JurM~SLv?(LKzpRH<I+MZ#D-co-o#*~Qg*{Y*LzBy=eFOhpMLV0YMTG2_M1NO
z$Qnk}Ug>oB-b!6{{NBoO?(YQm_j>ntiu*g&{hh_H_V}cNVf?T|4a2Qld;I4Ad^C{O
z0(i=Jt_4s2XLuHj=RfLyy0HHbW0k-({6Fb`fqW%zVDsOnE&fmMN73jH!H^r9(1Oqw
z{sH`jzK_w(^N`!r;4iaYSw}xaIswjzZ5e^>EDo7{9Jaq1=i(eSpAGw4V26p>Hgbz{
z<|Os#{?Dh6Sg%iXYJ&TY>LziWuc)Uzsikkk<ZRj+*2Z#|)1qr(jsWet7NI7>8u{C1
z-%Oz1d24lJ<^<iKFUA%1ZKJ1n^K|GZz2sFJFnR);8~fU(=t!M@5sOPi<GJ-D4a&Fk
z2|WsX;5OLp?}f5)IxD-k`elex#Sm3RQ0^ByD3<v_?tQ%27l&X7)n;Cgx%uwIykW($
zQ*}e)&yGh^EVjFPlPH>|?cYL8)IMCW{~B|s5U~^9maUj<!R@&7wWSMo^XtM+Mz#^-
zzFqf6Y{*AP^zcn`rJbLC-DudIeW3eY@EZ|^<y(I($BP@g7EzJ5B3Lse4=4BgBi-M1
zFA;|5T8>{d2Oocz<16+N_Q>%okEIUb+0<@}oy%0j6SC<diNHbYWsoH$oI>@Q5A64a
z=UwIc=yK?s_-9bKBd)=?$VNJ~p|rM6OAezAZmV}Fz&K1`!FiRO;&ib^_!vU6tc)M1
zi)DFO9<rjP-iS30S0BymM$<z$i)V~dW&BW3-nE0jmPYGq4q#8kgJRv3OI|-dIAU+g
zSvP(GUAc^pU*p$-<drvyIZMkZbI>B*Zn{SEL~h(Fa2;cPuk1z?^Kj`|j?fAr-~K+a
z7c+gpjXeLat?=XfHoCLECLP<JyPTJ+QVP8n_t(WRsNNfyh&sWL0n}`VxiAWOF`sR{
z#3~7eje9o=w7HwzI7|KByD`qMKsEJerp)wBzf%NM3iPo4*M+UeM8jR2@5kvPP;M)a
z_&<q`3Yo`?nDNv2?NdClOvIc_n7+AeAv=`k=R@|l;e+VYW~KOlAjr9rl5i3y5hcOy
z{E#;NpAf-){sx)rZq_2VPJkifB;FI9f?3RgR5^LXaF|QM!&m-9`hz~drF8T`9dM;V
zu0wyO;I8@`z+-UKA2izWzQ%K1?8xltG9@|C)z(GNsJ$RMl&*e6?;<KLf_*vt%iPTf
zoPq`OFTuI+!JL%1PfFK-X<j5aVC=8GAT}g3+nsW`##T4jb<t&#zmas>u)~(`)~h5a
z^>#3^jNlVt<E7-**zuVOs-P!O^GfU(K3&1=qnyR*3FN$h;hv6pRqUM*38DGTf-N{G
zJUO-sOs_9oALN8aJ*y&oIpZ8CD4xbL|LTZQf*MMDsA^xxnEfg&bnw+O`t&^UCq(oi
z(|H-jAyawAzGIdoSx-+9G)brAheko%E_>E1f<b~%XX}3T#ZhL;P4y=%ZmaGBA`{sC
zcZo>l(FszCb!~gLk6=OAzb9HBF;4;OqMt_0A1ln^JPmU!hUEK^1=6io!p1vc1I+ov
z#heTQ0PNKtP@#WMtT}9|S~FRy7W!=LSK(Y`9+(ob`f0j={$@;`uxfUq5KH*3)XfYG
z|Ha7M0XaU#s6doo{=#qdrpy=o6wpJ5AB9wLzP5&}oxtL-9$ALOCkx4hev3WE{ZwOK
zQg2>X!?2g8N<HTE3HJ2&8S?z~GE-syd(j920Gt99#}4B<U;_Fd2|g$|{fGi~1G&wS
z!`LLFXU_Nwo`xrw)32wt8~I2srylzRa#30AN!E)<ZfIYpVX{lhe&9o1X}t42mh60)
z|AO!P-^+i0mG3G9g2?0FPfEJoDrsYY&A-Wag#Pzme?^}DbF1Sw#|=vyC?edD$@aIE
zAdO1oQ}0nf(l0CM*K>&l>nFdTOsBq(@mcuBv_ty(dCZ><OB^biS*M$!35fX43>kgg
z4JSUkW{M{|NE$+)a(2yxu6J|$Z;oCBj6T^d;K3Lx?3s|=(7l0mKjqKQ+FFTiQLU{#
zJZRN-SeJGL;`{o{I5U2rk9Nm8rlqDGJ9K`vwWC>qvI^UTyl&Rk_S(D6-S;H(LYa7N
z?G;{hlf%|nZz3~HvIngZs>YcRnj|?mP;_@fGN6NF1xIvfYmdrhondQhFZWv0I?x^N
z6E<F)IjqMd^eErvwfY%Wcnsx_>@M$b*OHY?URC@0CVslstL<<7;zY))E&48qK0bgO
zUD<NE?~*gFYjN@g%=nk0+ADV~qSOn=&|DDDxWT%rtHJ-}?2#j_k_%xT@X+5HX!+*}
z0dFfV-XasRrrM1f_C_=6EeZN}O(&G*9K2AxZHqQ2tlkN?u4#Z|QpKD#oB@XR@P5yH
zp&2Y9uI2{rX|%t+62_lLNw%sRUIFubsrERx+DO%>w#15KYw8m~!?hvRIq%KTM9k8N
z^g%ap$LYk02{307@23s^J+l`z_+OoSV!)g!9dx6=yPf<55-%(Ghd?Ya|Kehfg|Usq
zx+)F&cTQiOn6tV(Mg*35SZDoBI<I@h96hI&rc?nHeLxHYXq9*q`>#h3YG|oPfI059
zzxpi)0yIjJ>%jvF)uAOXP+x{`l`p36CHX<#1kEDd)QJK!Zdjm69aLfQY8fnIxK7`$
zhgG!_R{}zff}7NbHOlSRidHDrf&Yb*^TBz|$vYh<=R^(sn)_c{szUrGZpcMWsoap?
zb2ICm4je0@Lx~3J(i^L8dz|ZAx<Q%Y{pr1kdhFl7ApMlsB3;o-5tn`O5FaF{N8->h
z?T)u4cT*#AH7A~l5boQ(^;Kt0|H)Yse=u>1{_QJD^*$Y1@`p0Arkf}6;mqo@bU)5=
zWii@U!5iaW{BKk!h%FS(=}nxk9&>a*-MXSI(B$YfV%$|y&;OJX6nN8BZT11!7a*8f
z2_(7ya2x>jrzVGf8gp#M(VH<TYOL{KfB2^CfDt=$p_Fm*u{kCkA?_Sp8VbE6Q|2}@
zINuY8%CtMaL$#Un`IG0@=FjVW*7;`*(^BV>8fyB>pPhfYHEOr{oqnOcJBbfnjJ=1p
zz`6J-LF8PQ{tY<6AdX^yj;HcLIC^Uy#ueM|<&(c{T4f<Pi}aP<;2Z-uAqICy*|cve
z`DxkVW>|0Y=at=1eO9%Wx?2#dyFV&WHJ;c;95SyMq+CEwm7%Q|eH^6nG-a$5J;{FY
zIyC`l-_dThv~Xmug-H}xOz*wYMWe2WpUkl=u=%&SP2NI3;F+jVON#E9YXY^G2~y(1
zwC~vmo!(OIKio(AD%xZrJ;}R5C>B%dNtsit|8*B4`4e4DX3&_cB!Bo=^ZZ}Ly$O6&
z)!F!;kc3U}1|=-5O0-Z(aRG$Nut<hva7Jg4iYSVRR#{vSg&D;Km@qSv>vd{s)nZ%Q
zylrjMx3;AlMy;5D64X`^cWo6>VXo1NOCbW1-}iaWoh5*M`~H9b|L4z#Pv$P?p5-~u
zdCs$+%;{%|lT{oDc>32#F}@C_&%~O=fka0X?C&$d)u6n@`C!*2ot<-Nx|VzS2gd97
z=zqq7=e6jJ`9bHs4<bma3_|%6+e?(FCU%rSRL`5?7Y-x2nvVkrh0D0@hPwc_>}=61
z;U+ncZd)-YrnavzcqJh<(dlS}qh}{}9*9m&93VO0DJU!Alj1j{BqARwH|jL?c(>^&
zpF~s^Uvw+g!N8repRg_x+rF^N?&abNR9Zm_2$fRhUW3&9vGnBwm>^O^`R!MvD;&tW
zIkBx<uMKReTm8<XMNmGWQX<!c9H*$19)Bc(FOq|!gA{(Bk1}|UnCmwO9hJwz0VgiW
zp!|u=`)iNiK+?eC*x&$3IqVMqsF!(4<_OMyx6tnrE6eL{U0)MRw4<B6mLy-|*O+j7
zLO)_ZBoBrFGS&-cWGnR=c%@*vS{$g8PcuI0>L9R5-Y2*7K-z|0Xvw`Lv8&>frrZSd
zqL(Fhc8m5>puR>i&ta)=>{gJ)StY~7&ERjh$Q}Q$!#wfK%_Yce+JYQ9qAmP}3vyuK
zFPv?lSA5dj%V;3>8_;mu>$%!SftD4^wZ76<O@%j8VSYa|PJ&;h?`HlJJHN1!k!(Y?
z+4_GKpHwIHM;ke@RVfMsVTb3v`x;9JN}KN6N;^0yo<?Q0X!OWKK}XyrQg=?Cm;DL5
z(D0d$mu0aBghe&bfu}Y5^FR)HE1M0%d;DaUpV}ShD2~1(T2R3!P*Aj>r&7*t-Sd3n
z?ULx=JzJXkkoVMhRzF^nt=%eXmeTFNGUJo>t%vU1#k2Wf;VkQ+=V3{LBTf%Gk8k6l
zX04apvgz7^n>lZDU;_z+3iuEFT_t~dbVy=cag5#R<KT#3d2m8-_|o?bhvTjDti3|_
zV=)JLX0*hl3t6*8QS>Jm)XtbKv?SIc+Y}N^^kiWvhd*Tu=5e}RG^$f~5`bfGAXoUv
z>>Vch7eokE=IRlUo|67YPT;p$Y>rkLDw&{aTk#r31GA-o#^h%sm+xoqsFsJv@SSv%
z$V(w%_N4kXLZlwMlu1UCCFL)2R|7Xi41mjBT&|>Lrp+wW+$Ph7KkPW|M#3=J1?)SX
zl&T8y0>|Da7DQ^a9=b<r6Wby-;caM~c_9l5-T6197fwnf!ufVZv%b?*n|9v|Zq<Sk
z#Y#c{_qE_S{j6g4Tnyjh!Ov__XYCK<WqO+w#RC3Fr4F`lTE9t;<Quze5TDRewN}vg
zD)UO5KcxyjqMC?#D9)G!xzuaJeMg#y8PkoM@6~QB<Ie7TzuaIilM;5tiSh%hIBI@k
zQgh9Y&T&@iswC-@(q%F3f+c0&ksr>}p`7(l*&1{AF?Bq(@eu*_!vcC&2vC-l_wcL0
zP?Y!}nE3@s7)a)D3SUa|Z$W!t?be#kRGGUUa5vvB8^N8GBr6v>0MH4r6yqxm0>~yd
z@^&bRy(e?SX4QJ=Ok>ofvav7RBg33pX+3m4iI{hhFa0iAR3UqnETj40@vR(x3;oe!
zAj0M2+J}hzr~8rB19H9>hU%#Vqff|*1g+7CQ_k)bdz17{<s?^JC5AkC7qZVq&p&;a
zpD<0B6Uoeemr2Y%{jXczXA2?OVC(j>+Fl#{^>^t<zSh_uL(Zx-QUS3pBgTtG1w9l=
z`p1(YI#hCQxjfk{HDmE<C4J&53~+#9uMAsKTc1@eV@>@Y8wkX=5T9iS7)bv^&RyH2
zGy_G1)?~|HVKkw{&E#4>istL(tx2`~^Hq{+dDW$|te|o7cA;FGM9UADx7j?)CrSP)
z##qT_AZeC41Y=bTbxD?Gx!%RKCRz3|5!B@6SdQ}Db$s^+O+>b<diSQD<b0vX?y?D>
zQ?-@4jhiMUf!Cz>iAOY15_aykRWj-FPZQ_OT$361vap*o*HAe&2}GiEhx_BVi(R;<
zzim}Ez77+pVu@WYo#1mB+9@IDT=n_PCIr-JB!5B(AAd~;NQ=(7Xt%qC>?u8IQTz*O
zGfHf{v<bWO;S!?>3ELI(zbB@<k6I)oKAfJ{6t-VR1C5j3_E7qE=^HqkJvt6e)~U}Q
z3D!=!HP*9eQ{YdPVcamUD!QsD^GZEISr>t{1E^03sS{}O&sJ<c24KujEbIQUmHb>H
zdL-rfF1et;CDS2V5RbBRX0v|8dFXm6E&ZWpIzj8wonZPq(ib}L+bwjUEzly+q$54O
zj%X*&r4w`M!(Dgf`!GxU&;*uweK?s*?ZZ&HDD1;Vv~=2sHDV(CH+}d<*FLO?8enK2
zo?Q(f2+teaH{Xd1wGU(ReYh_RhlYdUaC){6Lkju;5CBD2IQ-(dE^w$U?88~ohYRV0
z{oOnuF49gsF4daJD9v_apYTM5fcWnVJwQCbn|}w0<GXg^S4#^3@#Jl0GRg}2U?$`2
zd>_<;E(o#U;65Ce?ZZj`Lm%#cwhJJ9g?;eT2OJHWF1$o%{B2NZe&S}q#GPC!KsW=A
zB1OTHDPUq*BicTv?AtLh-$qA;)5G5SRxjeb{xWm}3(?~{P+Mj)7=-!ltauI^NF;ql
zX>r82e+f+1q^Fl4jZ|Ha9|AS>lJvj#w8+7I=}FDJvCF!%J~F*{&vApO?8p9;ry_Lk
z{;uqIWp_3(W9dmh(x+uNahLf!8B17E%KHc{Bxi~Q8geFJdQx2Ld<0a>{Mi&kq|KMP
zN6IYJGS^C(?|x}j&ZHCt?6Ru`YvCUIWA(FA-x7AMt!zFIb-i6ZcGI2ZMHunQ+V~wM
zp-Uvh_w8Cz)xJ2#n$+#plWqEjorU<;UN_uu;JO9vS~|ihuiGo9;KW|#JdsEBY#m;C
zXNv68aG%6Gmel!@SUs@KjQ!bC@uE2SZhn$aMZ4R_9(65djwf$mZWEJEhHw<gxeqD0
z;2;U}81d7*&ueYm5qBwnFS{O9#!5oA5T4<o33ti<wFHW<7urvEOGlPZ|B`bS=8!oE
zW|DIj2o(n^=ob!f&cb^5mBo^~H*vtavH$uiJ!XL&ahK#aj0^PAV~7j=)c^dx#DR_*
zdV4vFUv2;KdO0b<e0hX*n*<Q9?<9k&dD8pFRqNr8^v>SpUP~+f-G<`hph90m&Xh|9
z)i~c^8EHYM$P&xlEG)dq9+V)(avP=h*<BrUP!Navn|Xg%Pnr3G`&YZ(pT!vo-sX()
zrA~HQj)<1lI3j^q<eRuAvCLFD=+5Ae@Fm1Q^+C_yka_ehWx@J@-0rWCY_jXhsd$b2
zoDuo(Dgkm^+1Qy(uJo*}?1cQKmA~A7Uao-aU5;vTPeWIb=fHVzoIJ?#bM)gLH2#J6
z#RuJALq7}Oze;y<_Z~w4pCHx*x4#ar7MXa{s#)MuvHKxDe6Tdx0*~r#b<uhhd)axE
zP`g}zTHJlqk*lBnE-q}3`*#kypVg&*E$&~rSAf5STc5j+KiN#G*V4FZxz1>l1Xr*D
zUp!^l0Kc<J^8kk_p&Lx!jWfs;@gwDY3;8kOe}#X(S{>4iKVX5Vqy8O1=XBjU@4IPd
zC-$iB0a5sDWah#SIsVcW7vr!+(1q&F!oKIM#4mX#p~xp$$qxXU6n~drIW$uuQ9chA
zf80LMl(*J#p0}~x-WuO~QuM|kj(hLp=t>%;VAU=hgRzB*k{zA?$<dn-AIn&u6*rz9
zy1aB%xOmGMo!ca0x!Hfi;w!J1J8g0BwC=%2uAO_{yhYb7UJ^X*{GO_dgqpC`seQ$M
zHai3jbIQuc8rspS=)IYCW0-QU*LK@Y^d=3XO(W|?qGRBVkA&05J|5{+L?062;#aeM
zn0ndL=-iptUZ#Dx=E?=v&bwl6IM;_IvLiPiu1rm~OzILSK-~(fX7P15L7%yC%ARwe
z+#BHC6HiwP46MKgyX+Ajx}$inW7j(QM%%q<?v%?ezxqZxVaA^7O|kiPE6SG;CMiM6
zPT8$qm0yq$I9KHYsq#(U=c_z--gO*!U};9*VDoizXGE7=dF_IrZz{R*{-iaH_G&ti
zcv>e&J9n(qba%F<=}YF#pSNUgKx#_<P#A$`@6l9!^k;o!rf<f1`sgf$)QoEu-#B;1
z4E-<_pt`yhJpyCqj?U)g0~D#};V0{cHQkPukpk`z{&@5z*sR}AnW3$uI3l()(RURE
zOWn^|o^>mV{pZgbZ6ziBA~#baA#|u|`jQwn-7YWM<Gw&Cz(z4EDZBIhy74u$tmHO|
za5*(%B_{|oTQ@#<9%<Hv`>Putnqnn~BPDQo?s-<KfhyuRcZ(o8NRz`ptEZnVNcTo=
zbN!?rV@HjysRgcRq)rfO+iadqA<YfXQjdeZb;H)l*TjvvKB;WH6hZAO-5-C>j9D`{
zNkX3ATr$Ide!xog*B0lSZ}zxl+G4E~o_@~s8p73CqIKf|?-<l<Qonb7HY2GUKZ{DN
z)D|JEbvKs=YB+n5Yp3jdK$94DHMM>LKUK{gKXs#-@1OHt?UQJ9#Kgwxalgm2V6(Rt
zLCC4Sf{$D?H!^S0(s@zPv!5)@)YV$COO^J9VV&%jbtnY8krv!T_2+owPNh&{*h8z!
zi{5f25h!!cHPHCT9U-?jmjJ@4R_bFxlVNx0JB|ppc*g{go9GOEaY6Q@-LfSxvT4lH
zZhbXTU#;wP-{4iSIdWNa;ra6}pQ}sC!`ErKCH0V&Sv=QF6O%-WqMz|>ci8}{VHWS@
zrmk-}T`#I;7g;U0XUquBpgGB}8DCL)ww1b`E2m=TZRKXLDI3&^Z(nIwyvQSW25)mq
zg{C2ExdyXK`&7#8F8e9P1#`Hm>-!@*P*h2qN9*_WaITOC{a$F3kfq!>K9ZfKS;^Gm
z%dTJ?7HkL4c9)$-o#mY0#7$k_pwtPA;6AS9J#b9dIwPTJGpEd*58d_1%@4JVdAJ1l
zP3;|gWT_GkAyDTZrIUVxHnJ6~PAR9faFgh}Lt1p_6t<8Z_4yYC&OK*lt_4Z=4LzGa
zJ#a2rceSP@HPPK6@}}>7)P#Rwkt<2_p{8NRW~J)5amwm=C)9LL;_03_6uX9px(f@1
zIXA*m68{FL>^v<TfA^#Kv*o$Mlcn%FwrmPdopCOU`wT67qE~oj{MmS}@KI9Orf_yi
z*M7?^^H!E$_F3Ruv&<`XnLn3Q#NOkct8EBnf=sQF<+`G{CUOqza)1{6juc!8HK`K*
z0c4&F1ski2W3kq;r_(*s^z*!PW=yeCzfuUS1XQ}x_UTG1&9Ah1ym9{yv%-==vo?TX
z)eRdiRk1?cjl8HEHY$7jC%rvE8^Xi*0d5PiwOep~9$QKK*lQOvpr7oMPu`-!C2~7n
z7ez7#cGZm!UsN-VtawV&7%0S4@_7hlnh_xDnU*n>>6?5ThcGe!TIq^}0&SmrEVpK#
z&+amyDV@oqsn?m$pu@rDJep4F9bBJB(<PuOJ${ZtiD6-S{E@p+Kgg2;9bpzTy-I&V
z8LVRlGw+g{VSQw{T)7GTK2KNpK3|#l{ah`R1DtOPbmeTV=1Cdg<5V+Ii{zIz)#R78
zSIr<TlV8?TSk{siziybqiLJo>7hELM3_S`6iVX9wQUHGB{+$;>$DOh>cr+{y-u2po
zZkQWaLUe#SA6*PaB!->M!?)c3Hcy$0bCr^QQYTeCj)jsJikEEJztUD-(N`aFT%LY|
zttj=V&fj`@LHZwe4lj0>{fS$a^K@?N`aVr7%8UEC&90g0Z0l2tV+-nr{Y2~R+~=Mk
zrB@Wo0*;+tH*B>$m!bCNIlVs3O0DO%ZrHim7atRa%?l`Tos_#?sYUVBh<{A%l)7P8
zYrSkDPg5-0?D=7B_C(f&X?CUiYhKeVC^|Y8tQ*!5S3vG_zo(z&nGo5?SMn?|Y(Jmw
zbC+^$X5d+!nz!^rU~`eFFf?}DH)DMg!=9z|<8Huv_|0+Og#VG7VSnHS%b)enZBD*W
zeqKVT#r5bc{+2|K;cxHQQNc&9o3~`ql}ndi$uZnPUwQOAv4?U!zi!;(`LR#p%eu|S
z#e7}aU;yr&1zpycYl>B8%Uv6Lni6|x+MLZ$U)Iibfxs}oZduP8=EZ&<@B2J2N;dw#
z&>ve{`!un+XMNdnY3-2yEXbB9tuLD`CGzrNzCV6m^wIuEWQ{m?3?~HPm|??(6x(w$
z_P)&G^_UbPt|)0@Tk4P9A`X|o{wByQTPk)3yrX7rX)da!fNulN%cNG5bTWYsq5__&
zf*Er9zQ_-jBWLVvbVoQZab_`bZuZ#ZGUB54ApATpP8sRsk+MS(d4yer17}~yT-Loa
zcs$C|fGAAoQ#w;uPFlZp`!e>2luS&zFC@B<AwegQxgt1%Xa@Qj8>Y?^ZueU>dJ6uo
z>+9~uw_-u&B^<$&F3v<=#A`^Rz0?Rj18<?a4;rW|bNy(r6L*h3IC07Y%@CT;SJx}H
z(_aVM*sbW{63B9M5B_k59@%to(wKDNWj&FJ$$D27;7VYE3alkF2V<shV{9;vhnIq@
z__yrCs|ig)Z;$`|to;iowTxH8igpzhO#;qEoKNM8)yLk`s4un8(9>>6m~=cdk)q5}
zH)HzEoSeI5cPN^pe%SfR2fy`uK9oo*d(yot+5DD&5X|~s+hcF#36`ZN1>n2zMP!CM
zuqf_wmVfY+``odGre1|#wmuV9goiU8mWz7^({s^=alT*C?wa!A=m{E3Se*Exb2izp
z{TxjCkp^eFXAm3e$)U~!(Zms;{rW0SRjVP(!p4zJ#nH#xL2sEyZrlH0?2GDMKiR#~
zx1%$cKSjN(LE@EzFuSZ~>^QD-z(zyx>U|4?#jiMLmXqGDGMFI!*;jDQuMW0u?uVmJ
z>9CQMjrQo=Vh$=5_ful`1}!1W_txmBpmQ@l3eqDvm~)UOC%U?2VW^~*KoVzJCHc?w
zodzKu&n4sAiSMFY!8PG~)!L2rKjx>vtThvS6?9fs%Am_Kc##6>TSm&=37J>9YyWD2
zk*MHOoLI@<_7;gB2uV3}kR&o}UyykKlFh5wdj`St?d9eN?{nh|C!q<GGbfGHQ%eSg
zh-e{><rayUn&S@OshJPC6?!P&qXAvM+@mwzeXQ`l>zF3XAjT!GE-%KZ->EqW(&(Mv
z>f91^CS*=n!z8r{bpc3u|Et6;)kRSbxaj-SK{&tsL*AyxR$RgwN>3WhPiFjyg()<o
z?QBq6$bM0r>zm{oJGKTLP0&_v-=LkA)fP6XcQ~V678u0N5DjPy6loU=SMmy~DK>?k
z?>JTv)?4`yp9hiegX!gsSYy^|m)inr=HlZ<O6gbjJ=Id!4m7dsXWuFd37u$a91k<m
zqfy|BVVhM=wfs+uCD>CNLr8VehwZAcJyMcQB=4de$<Y@^((}nReR0_u)<k-Gu{{Gs
zj?I@D6FASwym7aTwnXc0BfTw(-$6lp2FNkJ66e+7!L}MfamwICYu8lku;odx_33`W
zQ5&L1$&5guYeweQL$I}lFwL5g<l;oZ)4nj2z~3l!3;iY19i%A4M<=j3M}AR_NDt6U
z*GfX=oF`$>-WDVV_Ast`PsG}xMAdk$4IM|<4YY9@Pe+GZp~Q||A)B)`HDyy~$ymWn
zf=Ak>mdk)bHc7ngZ5Ugp4*HL3PoFo`VtED=+lksd0YA`&%yHBSg=>&{gV+y)=_vqg
ziq>!Sn=)v=-@0~cf1b$Z0ti!L*bmv~4|m(-K0EI-8x=Lu72iSJ2zEh(^KLe1a0uEM
zw3yQmw7|PjjKe$Nx^P}R9GLKEEC3Uy0h)nqV<43h#O&pfK4%O^DcTPR%9;_?Frpek
z0UZ&)h2yaL)eMqiZGn0|ScyygEPmSp4RR+g@%+lL#n4{l1nT|1K>4l5MVv*$BdHIq
z<XMR40-r$t`PPb7U!>vIccZV7bLQNeM6JC$`f|vbBL!BpwI7|QM<i1b{Ejw<phIkb
zKR-?AP_*YwJ9tys{%*wnOe$?_zuC|sLN%_VAHl@(H4yeU=}y>TX`82nL}V`43UF_S
zlCV*&k!R<4&wfX7-<$^P&H?PrvHniv4qv3+x>M}TS$(veH_muCZ~SXCW5yE^nn;X7
z_eAF8SQ!^ni{-`4@=qB}cqlghZ*Q1y9cZ0zUH9tS{Mq&%5WsJG#k@P_TQARv%QCN(
zPUn01*k~Q*@!mKV=v&j-pXw{lIF|Msz$t;dIc6d@z`X)0B>PCjSxGnX2AjcykaM~W
zbD@42d)M!q+uyqL1Sy#;<*yETBV)Hx$5NLQsdoZ*5N0{8)eh9Vs{hRSPZ19xvktJ6
ze2}ZUujy1W%_FaALYM!;Wt_fP@N-Wv@ecTTTIS(Vf|Zv;l|V-)5D(i|gS71MobEu=
zd8{0y$Z8gudpQJG@$L?LPJ{GYq$$o1WUMQ{Vx`2Bj8XZ0XO>&vIbF-frT-Co0mM`(
zM#NrR**-{s*M(l)Fr1AcdMUmpgIIQKHO~2!pIR%b>CY5>GTLBX!AAv`<VBIv_-IjD
zkbpX3?}G#_V8Y8&d93xv8oh~By8L}sHi_e%<@N0Z)@wgwWxmg?X~fk-q3OjLLbj=Q
z3KdM32F?P@v`$5{j9?h8tN`a;t}gd|vix!R(tZwAKkaX@V-5E5diPY?@#@dP<|CeU
z>3<+DFcRQ|>@&+X0T6KhkLOm2D03@BbacpmCG+~JJIL0&U=X$G^k!@J03e6>C_<k(
z+`T;CKUu}DRd}z(6vdaZlta#$3YZ~&=bZk&V1MflIovG9F$(9D`-0_RD@+Po_(ICT
zL$ToGBjNX)YQ}|+H)$Dw%r4>o$nUdMLh?zFPQkepq;J9k1Z^f9UvoSN*lS;27$Idj
z^iS}JU-%PAj5YBa?IZH^O9FUa9W0CDilLRE#77Im_NTgEUk*_T;jynboA^>V#!7a2
z;F8_mgT6sl@+%Y!UcGT4@5=;emC9QB+s-WK1({sWyp$h$xNJ~-@~N>qGkeJgr5*nc
zkHycZ#Tr0BU_X+PEaUr??DWfMr+PS_j+9S%hLh8og**Lo?DTDT@kfUc-{kLn9{=7P
z9}o}|<b3J<X=jd<ou6+<y2k(>!@oWz+ezlLyI?Twz#6iB$|A8+RRTXpIjK;3Dz3C!
zgA<CaRg<U)_MZ4{l=?wu`I-fpUgoM{L8kKtd8VLOhX5OF*KCMEyQlkOzMS6>awZPV
ztTv4`2z0bD@lb33uIZ0ql$>$ir!*Y4fq{0jR&0KulVwwXY&snbr!Ote_~br4tC$QN
zrN=MGjKBU1a&Y1qlxjghBV0kWLumn_ie&hn1Z^_4Z=8r*2yuckOq=*Zj_16TM-ltl
za-nUUGR7O_L7YDehZnI|49XnYvjjJ4t=meyjiQC33o<<!wmfy8<B12eaC+$h57^a^
zJ<dZcwi0Imf(Sexv0nx~HwNri&Phkhz%rH`vPojo!i@bH4No{`=n|sIKB~2s-$6b%
zf?gJ68e>_I-)pV_`5k(tFry21ka$A=Wx;Olz<}u2vhf4ngyhO;N4#>{j$fVm+}oKF
zb}9E3SRQHooyFND7CYISW799cdXpZuVOPvpUSY2Q194B_smKqoy+a9c{&eYa<hNgV
zPWp;rzybbE;PAx4Ox>rz*Z1j?cCSa*qxS&;?f@#(LgNcE--%`+k~CL9<YvA4_YiR(
zgfcD2{BFEi1O@anFHd=aMb%e?ouR6H2;1{A2w9mcD*$kM=3ilNNH>((TPIO;v9CJ;
z0ug75uA;vdw^H}WOeCJD_GGQN&P<y4=5$2`Szf4*%dx$$6Ap5Db7oWz@$XsQ4B|$o
zs|XQ926!rD)&7+)-q|H+JofL4rF5hj4bGNKXLtF68@~9uezA-%B;oHq&R)(8|Hh6^
zSBNw8pJ2rHhjkx#tNon?nLqpFDfBfr-V1W)CA{Rx+V-dLq~jR=7;pHo%>jE;<|>?I
zy@Vr@U1S0svQibWB>|f)gJYbqW^?e{&P*MEk*N99s|trngD43Hqo)+(pU0Ri8IwJS
z%dw?8uH{Xc5jrMv52jiObH)QhWGMiVu6SG0wWr6veyu{F3Gl7Wd{L$lkkTRip`~<K
z+#&JXw^H@euKjw%{ybu5a0Qf3JqX}OZCzcFq!#flz4K8D0X{_8nIh<9=k6+&Dswlk
zK*~{gjcN%cmNSgITiX97^h)X)XX;w<7ev^TxJE$CJh5p%{7aMMnvBx|{ScTibB*{d
zG-cAmm0ui+3u6;A*odD<^gO&9DVDjOciHD4)+9-O^3o!@%UShz3M`wM(oXkm{=iR?
zkC1oL<hM+d?kVyj%kP0eR&tLlL;G1eK;w;cqAAnIbl_(+)JO-K#8D+FCm3is`r&o-
z-4hEtW2GLXh<g<+c;k}JjWeBFIYPa<Tsi6>-#$`3uQQ)vP<3C=^8@s|Sf2mr$^D(}
zq>~wXx=ik*53k`_J<r^M+J?c;g8Vje;*@vj(+okszwiM`>4Az0Eh#QSS3ikVJx`?S
z?rYlphTHp}^%YB2GfPHaQ79Kj$D+(&QN;-V6V-*pDeUZ#S6y5bQPssI{A5-R$i?k&
zOb9eR^N)lqmepkybW@Volxr%gZ00i7A7lRfYQ}sw@F{p#2*20l{hu}hlfep;F8pqG
z{bt_bB(cn!t<>mDdWbJXd(emIhRTaBD9XItOP0x`?|aY7GBZB}+|HzXy$AhRS9fth
z@ErF+N(x?+S0^V!6kIhF>SIKw+?75c9?qsp;gM2tm@cxFP0)Mf$!|j<Al;eUhp}DD
zDIdfqz?9p8W~6e$8`^?(J0;r-=aL7>OmrA!!e<A?{oO*18uuq>vJmtK6>aIPcz=v+
z>=o@zM7ixA)w!u?e9*?{#;MrG6E1sZUbP^;&O9iF;TX@5dhlA@HB@>QSS$WH{5GwZ
z0Bj)|ll6r;66Wg^_N#YYdv~R$8%fnC>C)1-6zc~;-!m|%I7<49+cIVHC5!k~fBJ$>
ze|jY;$KMKG&H*sLW8Gg)YR#SasJ#^|f$A5(vLLf!A^RCE^NE$*CnP8xXc4+WruggW
zeOuYCD^=8|zl0YAnlm3ny1@``(hpvj4<I_SgA%7B$?U`FiO6LIa~ZZLaC*V1(Mnw|
zLgggGr!#XcFzl@O?P*rgrlM2B9M6Fwmp7diM~t?L^lXhDyfBd25FBxI&{uIKT|w*A
zb7_yDU2!otaK+TbbdG)QI)D#%wu}g>Cr~kMEYH;BJDR!?JeH0|E`K-F`fll2ZKah!
zy6CL7+RC1CA@4wypk3CNY8PaFd5vuIT@+ErC~)Q##<MDY{-5L=RK($-gMceK7G!`X
zs)5dL+r{--X_|a}L8t7uzYt&tn#CWFeFjV+#g9|=V;+a>+Mzw%x1nTSDCW&_nXSpI
z#ck!`sI8Am?T=UT#~mP~wQvZrIS`WdB@mL|>QKgx2`M2tpP$S(kCN11Wgq=ZFgDQS
zwjc8K5WbGf*D?YizB{O2A0c0N^xF?}vlV}-t}V9nO<2Cs%`H84gZXANKba@^M%I0P
zeVf#HEb&2MXVRPn>@l&ws`&Pq0L3|xbOLAcw7o*%j+{0!l%9)*yCr&j*qNXzjGdVW
zj@Nyz>ZZ3ukfVU``!V>Y5p1p|o2m))%kEbZCx*x7jXi~UE;JvHE6fi;6~jG+Mf72>
zk!md$dpG;tNOS)pfzaiu)EX4+19wKxZU?K{zsB?aJnz5!eH1>6ML;`qB)E>~GZMKg
zP<cr2+^=)E6<h7G=g-G1JQ?iG(PyG5Nr=-?prsb7xD5StV~{v~wps)+!&IP=+zc7|
z>B*eJT05n<(n|gW5-C70;6Fpw`fAu;AwaEKD)ymd1WCy(J7aI)+pxW{{ZuGV!AAv`
zPU&s3{Ogf8to0@0iFg*DYE5ii*7_Pw=eW9fQwi0$&^+_v*gS=&h)MjBeHr^OVt*i>
z#>cy2mDc(twaXL5{`%UX(h9i+@OK0$OlAM@Zz>&%8~Lq6i?fqj&_BwHpCLYu_Acw8
zF-zv}*~Gc*F5o9a!DRPIs_{6Bf{zL=<<okCi3yinrwz-QFI1YZEc*9NJ&N>HgK+vr
z9J69;gZ6X8=f=rL)&O6#CR6_&N2o9sAR1Xi5}}4v3z4~TO|%qQYX!ET6099sjHp4M
zrga5%mlb8D2J05og$x;fgFcvAq!VocNw<PuXtZVGscKdLy-`3g{Y4?p0t;6`^&c}L
zVIWSFeTj9a=o?75N}43;cetv>7#pqw`7)iy>J}<pC)yshS`cu)@}KOVb=!AA(}Gnm
zs)MaLkc7bbFbCr*bg=O5+_kB+2SoP|*cwrL!<<(vcvmjRUV6C@d@_@--rEfdK;xn)
zcputC5(N}KKsY7hhVG8^n3P1_#|1ABtii8-L1r`pq;69Z$c{jcfPasS1|eKNqGDzT
z!TcNGI1|%=pf3A5d_fiBxxZ&;MY;EeXQ;pM%N}I=%h@Vye}6cR*b-rEsZ`*I8mF^j
z+eySfAgsgQlGQPYRh6OJ&t(ST>En`qPUIpE@2gv}pXhT5Z6Nj@6^NVCS4m1s`BoKy
zA@=<{iri;;<y7pdCHP@_XZvs1?&2t=8>QvWitA`k8l!)%jEwxM9FpD@e`b;rScwIy
zHL<DYk1tJMRE|Um@#wiAbHk+ytLXKzwI|xkJ)GH#4IXx5MLBY3r0PBTwjgr^O)y1I
zY?q(0k6kAD3^=c;JLjH?_98QTPd8C7Ma#kyMn=(3KOv+wFV(nblgPZGVEt1d|90ac
z{9aHg8)_KHnvn~6u$h+sPI%dZ%(3qj>&B^|%LX<HGb1K+7!e0wEF8w{qnmK``K9t*
zudzhoo|ZT3n$5ItCm6+vHG2m!*UQk?e~mwMJG1U9g7~77wUUw^Q8|u^>BC9ILUNNV
zG3&BlSnH>XTBTTD#&(5$A4g|P;fTG5)qQOHLF=1WXHvcm+7j(yD*S*m^1@ZS@G2>@
zlA6sk(a}9Nz+ZR9qQzHm{LJqdT5dnsU4kReiGqQQfi9CD8LcQ2yCC!SKY&dk3t**w
zBTz{^5iEeXNBwHzx1Q12+bH;JHr1ZdS>zr?tqrt_Pvd2=@B4A8TpDYjzt-;Bvx+OD
z-ac%tKS%qo4`aJz^U&qxO!A#5o5z9nv4%nw5Y>W9r}R!q7gIkKSB&mL*hkPR^mVgo
zWE+VeiZ^u^ihG0b$Sm29ch@eV`N5`EUT7i@UYZxN4}nAjM{W&qC79Of^N=u+G9&)_
zX*AN4D3~Mo%B$urd?6ahpG;A|wBuB4zXYm-c#MK$wD77TK2IAgY=xEl4#il5P0LUa
zo(u1>HTF8ov4Ny4@UNYjJJDUaS5c+_ztQivubt1LFTG}-m6FJHr|<8i2`GhB&uS)B
zyIuA}o@I{fpn@vO1V-(4PvMvIkcU%UzP_ydm9<fefm&pAmPdj0**gTW))|?3bdjoy
zPR}};)Y>BtLW+OMvZ#APYB>}yGPispLoWMl4qZ;CD`j@<bWi!=<O&hue;_#3mKww(
z5fy6fKbLaJIRb`1c4lE!y}w*ONZ(Qp{kS-**CX|uF4EWa1atJEjUWvA6O{yD#z|gY
z_P`H?BQ4?Tzx1l6d**ehDZ$6>$M-7QR3jMn(R{n6Z{{@ojD?w&X?l)+cz7-1)GS^}
zb@EE`-COHwj%wNyE#+)B@avYNGYbZ?%vo+XJdb!+awOEHG7OJ8i^p(}e?j>x0}iKa
zjutK^U2)Oao<-|{T2W?_dfP0!FMi8Ws09|wc$~)+Na;V1<eN;NzQ*ZifYF0`UN~_&
zk@V+FFUX960!v>X{8z58sq>^!o&`T8b*bpUEg{oh;JH(F*~Lr=F{_DId}Bs3D>4Nt
z3a<upY8{;iqVQguB-_OOGK5I_!J&<GyuDwRRf4e^7x8@%^@SWnj&#Kbf0v0G``&Eo
zW_PetGMG&FPnD?0o~JvbcFQ-J8nniI7;9s~rQv2A+X*opcJ(p63R%TS`kGSK#z&nM
z+lMh(&e#Msi~j*-ZxQ20^eb3yWt8t%DC<6WS=h7b#&(d-O!XQ&Gh^{@jNejR6rIeP
z!K~6*@ja?*|1az__b6@|sDnD0M=0t_;t9n+wF0lnuOGl7y>&lisV>MIhev$Z{ZiH!
z<G+X3s7iX%S@*(HP2OwvXMOKXdha4x4rS{zpr@~mB-En)a2H=9dz-e4uM3mhRo_V-
zsgNWA52sIlV2D*D$HabMP5|hcqvs)K%updEfA6o*80l%J5hM5YiIKIa?^kz|O(;Ok
zvIkC7A*_M(4l+wiMWDh9<DD`(7NP!6t;MB-LdE~^w@sZTUGZD%1B3VzAzxm<sl&xo
z&)v+g%H6p6*0oP@(Vbs;8i2fByA{Lq)BL{5FXm_sM4uXzExmwF<UxD5EA^+Uw$^PT
zVfG`yz0(SA*jTt<8hVyKb79C!w^hiesAyB`%q#D*`8)Ut+9_dpLg@f_pIXQz5^-Dy
zxjTTP(AR<_D(99R1NL?$$<X?BanO?IdXV5)SYonblEV_U_me>f|D^!*D$p!0Gh(df
z5W31*ryu?&iETZiD=2HF615U8KQOq)Pt1F4QrP$UlH=OHSwN%<E+H$Wc!-hGOSd6=
zvbFB0`typ3Hy<e9ZR353b=wdT%+~plGd7mi*X-xAdwtCp{FK$#9N>qCor&W+YHhXS
zL`28D&;IkRj9b}gPYV!nz9xxWdxRX>D%V2hn<Mrsk*b}+s#n9lj*xW@UT7_F?<GMi
z!~rp%lOd%RA~dSyAfd3J|9+=`(t6tNpAZF*h>0XGXeY^eH_l8rx-^uo?az@hCI0oL
zz=~v^BsfX?OM|{Zb71gpwBiTIE5@jnH$WX-iue<O{v^a<j;z#nnIPXYOK%3|kZ~C2
z^vo6xAqm@a8tH$Flac{WzY5}|96K@<?6&8C6{+u>8NUcIstEvxojHvtme*VuWnW(2
z0#97e0oGRPK3b3o8wtr1?-6$^WWlUY4p1zMw$~cNn4_SK*l$Jb7obSJc}emIF(4ka
zRraQ$pt>XNDp&#nJ<a8~&6O-6y8cC63E4f{*HdfAj$p;}rtSsPSo`-mR)fg`5&8uu
z$T2<QMM4e;q>r#~FLU(@yK6ALMCR%fIr!X4CS|S;@|W^EeeSlNvip3GM7esjx9??{
zpSPKx=n<s^SN9<u{nsMC?a^U`*D*7%kQ>go2fuV_&bN<%6uRtBEb3qEKF^iDOZ!QC
z(S>tN&gPMu<c~+!bRjfx&*W8lwl<yD*tD)+s;=A?*Iu1D=2y<ooLBBms`&D<MuBM_
zpq<-@VGLCr;a1Zj;e>9`E^hCr#Z|u8zrF|4>VBJNvWPe<p=yh)GHbP6O}7y}MzO|Z
z-PV7r)QH_^!lQ#x-pE61-IxK@_0fJD*}_5Sq@Uf%v9g>}SQ)X0INcK4Xk?q+t^Gdc
zEk9>|dy|<q_aCBtv)^=oN%IRbZyv{1GM8p^^jqm!$lj_lS5Dx<w)YH-+8R3U1O~BY
z*VH;I%4?lixvfavm3xC4!cbib@>3q1NX-%gm!2xLZaSBKNgP#`BXP#bO{rY}gQ%Ro
zBIlo#5~C@QmNnMwp*v?!04<?=VFwxjHi`;Tn<UPV71$sjwu2`T2MQKw;dP_FHhzz6
z{LAPK%e5(DZ}cdSFIc?1k%rKxz7|ejSBh-PakFA{9ngM0`;(1^WC~9|4*E7OnIc3b
zeLaDnH}4PmK3g)@nX=#7oNBr0HA6Cza=<C01@}b>NVN^YM3Je1lZRSmzq4N<Yl{DI
zp+BHA-iOd14#)@$2B~*Ke%gfm;OmuomJ)^J=UE08;*7I|7^6KB6bC&IB0cv6b&ODy
ztnofATMy_gvl6yVDp=!b*ttb0QoT~7nehvwSHa}Bz_7^&VJ~Scsq0dr4;8v}x|x*b
z2(&5SEH9_&#*ovEpC(rfUyM%&C#;pfE+Xu8wde7LFS#tyHF!F-52c(x(ODM#BixNl
ziJ_dV1SnZ2l<Z9*TV2+3s#=;>O4gBIc$`-!E5R9U?_#&Z`HMby(0lj{*4E{m-ToEw
zn~}VwG&VKldt=Gh+b3r^$%0Lz;8Ip*^sAxt+1~!w8!gol_2F(M)Fc(4fRGLFtMrgq
zk+`)w4QxnyM;ghNQh$9ld*PJs{IVHNDdU&jaEd(dbVgG{Vn>HPS|H~lRR}zqJqQTN
z4HXx=pD+SBI$a6vs9;H~IXEHKXeIm83R^`J-~~6WRg&>j>IvI#whtD1ZXZcfEG#Wh
zOpd`D&+Cx=Y%sk7k~(#N(6`rGHJfLCXWD-2snk<9L4jnCOTHiv1z}U4GFcJ3TW;EX
zpIE7*CLKaow@rku_TsrmSF`0=KK{pL-rY$uGK0e1DR&6Hz2Kmk71tYs0JV0kT<L8V
zbq&sr+A2ObSx@AH3Gefvs^0Eg+7!=;Hhx(~4CgLEg{n5wrx3YKL;10}jTH0x4^Ua7
zJ&N5HK0p$O4!jw$M+=aX9a4va^l2-hCI$|DPW^>JhJA0M*n{Ub8__ndfL)l#hQGTT
z_=<V<KQ3gy*Dkx8JBsGKc_uTUdnC7#zNcU(xOl?9-w8&4*-o%Y@IPdK#oGy_H4LHT
zIyH+AmJJ6VI^>>73()^TTu$WjVET{T(iTcjSy-?Q;O4+KAU+Og>mwlQoWrrTvV4Q-
z8X@&UHAb~az(eeK(k2K$OZFys*`pzwx?_ywk#W1;62R{)HBc5c{uqc&&WxV8WxNn}
z#tRV_oDe?%k6Es@=hWLVG@8p%K}3X6T#Fq<6lsmrsOmfQgHT^|mW-0~PXAw&$*bDU
z(dwiaK@S%XTIZn1-OV<FURXF4*1`7upvM4=8%3QJ&khvPlN#*S(1e)uJY6l^VN+o6
zyZ*$xkmo0|<Qd_vC{feDSjKCmmU9>KJ-76_pi|<pg-VwLcfb!qW7h)02GH6g#R9d?
zdqfWK+by#$@(a-!CMH){!3GZK!oQOW1447(h0<Uz@=ijAZtgFOev}ton3j4cc8B2t
z_d^4xA4)sd$|I$n+X`u?$M@A#2As-TdwXI#UyCHpj996ce6n;S9E!fxzx#>O*fiDG
zajaedW@v5uabKRlcyDR+*l_wX=;wywh&>PD*vnrZE{Ac9ux>tH@(%>0wFF8*Mek&g
z(AVjl(boo%ykNiFKs7J;LM|Yq7aWj_9$c`}Dm(NDb;A#{ZrMvLw;wPR`scwRXdj_G
zZ4SSg&9&^2zz3yF_uzy8#8m7w06HGFw}A|`U=0`|x-B_B;vCVQ9v(Z^R;d1(NkaW9
z=rNjdY~C*}t>V*Khq_Z@O$zzi%#rVjtKm|=2}twvML{d|i*bk0)t7nX-p`*bU6M)o
zo|c;dzsd|^Ka!<&K6`YbBhCxFFzl)zmB+5m5q4E^jcFgXH9zZ}+r0Y2Rd0u?B1P^R
zC56=_{(9Gal54QM!{6)0fL-bTi}I~&m0HadfHh0BTH<rzTu&Ez^;C2;oGS^*E9=kC
za;~2ji-Lr;>C|Ld*K&__eLl8Ba#XYF1)UiXtw51SwO)mP{jN8G0s9Gc<Ha7*A6j)Q
z4Rt{^BY#WGOIN}BAbz#6)|qPf)j-4Hm{nPN0@A}Vt1VraRTb6`&#cNTWmexad{Lt^
ztFZ<-B@HApoa&&%ajI*C$cb$%f>>@i)h4eyK`Mn)75{loRTrkZfKzRXq?d4}>1$$7
zf<^tRJBgNc9owTspaLC(z89996(r4C`djd+%ivRATvF{^w?DP}rZ+rZOr&@J?iRSz
z?z$3KN%A4PARjM<sVd}$urJB^E|W#}O3J|;Fv7;o)#F^P#O>eQN!Y~QWdhH{^2Q=7
z^$eGVyz5q774WVbc_F-OmTwI-sJwhA(;A8AIab|cOk4mU5wy-Tt`|lZ8K#xx?A$LU
z!=Bkp7}x7*SBU6ZGeI8X8sI>Jfy%W0K-Q+hj}bD2gBVwak{nBw;B2EXu9fo}63g!{
zi~fn-TqX$qUYJ&%K{`J?l<>}{StoF}(BAwKH1T{irpxOYdLZ<Rd)ckrN4<OHYscFi
z%GbWk8uTC=9=nrcztH875w|opI)qN<s6zkjEdP3z$G=(-(B6iB9Vmr8{`F)!8^5^+
z{Od0Ok?^RTJOK$7U5@arqRbIKR<t=&puaVp&Ul*T*hPDMzzLMQQ>9CWe-%h%`ByP^
z9>TviS;;C|iP)%+;9W=4Hclf=QV+P?K0x_bA2JqJk5VmCLvazbBI)z@6A{BvK-MZz
z0Qj91`%|4aZS@d&mpl?gPL-MZvwV*v+)kY{<`62ol1J`T{^a%t)Hl8t=$TkIYpYA`
zz}@aRA%j^4%6`p53-|c^B=n|+L-^YB0EZA}W7e=zSJEXA<bPmlmArJp578#T)LL#0
z4bnJRQRMzi`b0u!D|HhP&h{?bwG?l&`-bd`!q2XyoEHn_@y;Q;hx-msWgZ-IKl)yP
z|CdrSDNl33VN6y^1nRKwHIw1Ru(yxEQ8M$irYvm-Oy<$FC@RGQ9`@YP|DK2aQf-FE
z!)CP^!o&WF7MTifnYnj!3#Mo$<m}j$wLO+zy9;P|L8jzLE-&U1;j(~!dHM}b+-A#&
z*w1C-bcqFpu|+kjNGNjYOc0W=R=C72+S_3IM$v8vWs#W(+N#^bbUzfHSNB*jusBAx
z(1(l$S0!4b#05U6!k(5u+x{A88?@E>E+pw=LoQUo5pgai2vv8CCoql3jv)%-ylx}Q
z=-NhiBK)m0Tok91MST(Ry<{aVXbt*hY!{#U9~M&5K1|jX>=XR;rsP(u{$n26M;jNl
zXF@Eg<PcCam_A$fiB41tOSk$TRw7RQxEh#6mih{X6f(7TB&oi_Z}}6oLs5&8>D)>!
z<#h;gC?T1Oj8R6lqH=DlC`AKtqY)Ld4f75Ytbs0Y_h={-tcI937%fEog;sL2z*#gA
zU}#EwFa%y}47?!WV}@#XsJ)RTCy-!=w31u-3N<rx?7j<Hc<aGmN5C3ys!?mmW-46E
zY@r#^nZZPHvHxKq`Ksy`f%hZ*un>Q=1@Sxfz>$=cLIwE6dvIrv96A)IrXo|J1{3JM
zl31R^Dqcg&W}m5bBFTdY#WRf1u;-h*>=IgE#P`0X2M~Ef8>~I7W~9$i4N_So8M2QV
z8Y=G5-ZbhdPjS$T6Tna$L>i+@MQISWPgN9|Lqh>jtvr;DfG2y}ht6-X)?E*NJcGHz
zs{aT5w~4H46DJ}z3u1uzBAh-GH_0m@6C0L359>>HoZi6ESl6AplZQZU4t??`t^p-9
zNR4xhrBzNx7YXZyVC&v)!K#6-1gUu_brWAoym^+f_3vikflGJNfrHrF-}1;=9=F-E
z?azg4$jVTPI&x5&y<Bv)hohsI@p7xdJy9rV9vL*&MZ|*c{@ok9#VXA_50`-@pFD+K
z;x7I`N=TOHhPCJ2ixsch0!bAs?N8l*L6#!+OYIx|IKiAqA%W?-1({`>=#|wn<@wbD
z%A?GxFnkan2u}mfP1RsXKn_+ka<tL9BB4aq*r_P*4o8z@%v2&YX*!o#nly`REInOl
zl7dIMSZLC&gSD>m*1%Qx((gk907o2dw$VvT;}On&>_VS(9&_TiYF{;uiFKHoVisxx
zM_{ouwWP!y1lEL0&?GNf8@7?2eE+bLkI+t-6N2oFT4NwWFt7WpRdW1hnCQU7bS@-`
z^-62?OfG}zo3IltZ?5l0ZEIB?LFWb;SPM%UYccB!^Z}fl@Vh)-L<kblQK%AyCluT-
zC+E$n58H2KN!WJKZZka&`JP>Rk&rLJv9xF&0!@xWUdfk6Q(>|e5`s9t1~e2f8ySAC
ze-^~c$dw#agV9IJp%1W9cR-d=`shIiqGF@#$OmJF67t_@dgj5%N=j!#Hb66;ZV2}7
zlOR=gTr%XD4Qfot4KO)`KImN8J^3kQKR#uz7OG+wT7D$HHn4WR5P4%;YG{4GN8R3{
zW8eXk&jSX(Y=ObVV?pZW(I`qb^|Vscc-5DWs{MHPmP;KV7|h7EOv`%J`X%Y9>^Gv<
zwUPt)Tu)ZOn}Gh!sjsyUxHnR`A&UWF-=cae>9Uj#8uI(f%ODtCJham9lqmoE8=iSH
z>WmPkE=E0~=NZ82Su3!=^S|VII`#x%PbhloYw%DUfu!V4sV_Z+YB&JAn5sg)CzlY$
zyCqzef#!p5h%*0Vh9bTLR$>|#DErkGX{`&Adi+VQ@h@vBo>Ct^d1EN?MQOAw=zDX?
zKY&2JAf6L=BGCbQo+{&zY>*C#BJG*Y{(3U4Fkw0T++`(Wlp&L(-#OamfCVz{v|8!O
zCz;U%t2QULlQo7hm2~G+Ej;i2_R(S{R2*^FL20sh@MoEuT+NB@#byFJC<47wy$Iq;
z$nG-~pbPAS#XSrrvyCQ2ln`rS>Td#5F;EcPM+i}s<gP)oU;Pc?;y98{PF!@toDxf!
zdVi@&NK8bKi1*|4jkRuKkLvnci;*0~&blGC!w6?mtD)}pAeHcsP}Lx8-Gw^0aS%z@
zf%x)ajj0c&BWr67XB19Hn&pgo_)4d|(+rh^!5ML8!xYeyJlBzC+{^qJF3<^Xsx|J6
z_;8uwti?=fr9Kb`#!vVIzT0?c+8yp|;)Mf#GDB;y;Te6<fMChY#-MC;1Hny2D<(FJ
zqJG&b+3X^|C#~cdW)H)V+HHs)Wd}v^v)Nj83Lj$sv=Sn+_>pWCA5>0GBZHwht?#C&
zfa8BSy%3aKv^L_)#MVn|W@T&%+Q$WbGn=f`-2h+KPwGN0LZWPLrQ6=tx{gb45xiU_
z`=^B0wh1hefn@)T-AY4+Bw!Z^ZDw9bma2w4y2XYmJBDi39Wy)ZL`KB!Dy<@o$Z8`;
zYr4Pq7l0`P+!1u8fO5O5NtK1!^JeLxtN<Um()uwWhR|Hj<GQE#6zTypCZStlXVF?g
z6CzhbK76vSWI*n{`~f7Q-;E(Q0hS{bEJ-nnxXXA8ez#_NOfuw3bP9ejG)JzYKiJ(0
zt(wg9F3l}k%MNd)ddp1FcKdDEL#6Rx)yv^x9B2oT#Tm>WIb2}=uchBq8jxrev({Qp
z>#V7Vk_6Fw9;@?64iX_cED!v<j{x^^)%HCbd&gLLZv+xbD0NZ#v((a^hm#KwGj>0B
zC3pFO{5KuTlUzxo1aV~`M{@-j4Bbs^@20g`$xmbwyeL&QE(SL19yo#=0Y3rM>I=}o
zx3ZV-q$LG(mXxq1y9+zyp>EjFxKcIS2wn!MPE9Ea9Tul7OjaXnb0XLxYxCe$iAS?+
ziJ4)Oi;7sAGi7atjj6_NyM)y#A6m&9g*jr*#YHsr1(eF0Vr3=4{G>#}yZ4+3?LogE
zvj673N+G|b{w%5v$g$Oi$PJR=NXK-U?(hglwsROar8CpgrNg_B4mv5De<pqgpq+gY
zzT95;J0v=Bfd1-dUT32tg@h!>C_PyYE_YbTU(x+wRfk*6>;}^Y-pvq%BKH)Y_~Y9_
zFI%U@L;n6ec0;t;5D}NKPc+hB_776t4%^wuhNP>?e&24zf-k#4)ziV^0l~|+gyHwo
zA<Ag!)&01t?Uezt^?thq$Cq{eyK%Oxzy7?EQXa|<Q!H9p-{vLnx;N411)04h^<|kK
zyi1_^X2TV~QTKVu{crhGsZM1F153l7LMqi(oO22&^mtaWc_E(x7-3OmYPzzh8~>Lq
zYOR?zHH)m1-BfmAVNxHvmAW-+Nlu6!2OF1A501Q<$ndE`_(ZvWE<BA{8p936U)~({
zwVO1)#2(1>>f~iqIf^K%8Nee5JPDCW9Yg6);*tYBgeI`-E2)RbH0SnbIMc_w=u^es
zXp0f49{yDHqzYBonRvwJOf4f=zXMmgf&N8&dzPMCz?DKm3}Y$-HjJr&HEc}whh<8I
zim+EUMbPr3zC)cjbKrU;Ne{|-B@l>^bHMb%0Th5ixO4%<6SC<Mx8QyN+GP0;;X{`<
z03lHZ<%W{glY$cEt_;hQhbbrACe5tX^IOvmMZ?(+_IC2Mb=!~W4_rz8z5GrxkAB0Z
zHA#@hx@{EAb2)@dIrMqdQ``{x@%>haZdoYZzc*Xtk{>@(#M2k{`s+CmCDJTjUv6=0
zrh8)h<iyi)e|`Vnm@JC%n(5umoy{=3eqo?ym23WM1x6B|RoP$it_YMst1GG$I$yZ0
z{)reo^-MWPs~cyW@U4ioeqnp~_<k0eH`9Z^CY;`Kc058EMRDfwtuLIw^BmtA7ryly
zdA_yVzu{ZgE8n`uN}Th*;#=c|eCuV5E|k8&!(Nfn@;vK=K-@~6$K?63RgVb7J+5`L
z^_>mUXJKDFu9Xqxxz?i;liXiHzYV|T**pV{5gW0mxVw9wL8hdD3)n7i2#{|GMoUCP
zLB3NJ_pYR6_8w)pA{;n}(^EQNIQFsNZN&E~Bj+N=bFJVeWOip(qGBApYmVunQbLq5
zuh!bzLiT4w^aSm}VNAP7H;hNcmSd^HJ&~Ep+v~Cdkx&f;qBj7T2t+$6d9XkPlac%{
zo_oxdkN~h>^-Ch7ic<DN;gHPI|Ml^Q<Kf7Etu=H(xEks(c&R)b2|v25cf2FA`<W&I
zL09r6tensR*@k8ChWipnhU8er?}q4)$`5QR%t-;128JgHlr}OUA@Rg}ltFkr=~^xy
zX6+Wai<s}OYx^6ZrL64}bV2KKzfmuBZA<jCx3;h5@{qONGb9vOELFMnU4HoW-7~ws
zi(JX-{xF}AxL!KOTot)5a+M?J2iza9Gkde*UT3Z;Rpbt$|7?+QE7g}p>rpMYn>-a(
z5uO7lgt)RmFh$5G;HEM|f*8!W?2nlt-&7V;m>{UE|3d$4teUK%zY84@W<!WhDgzVa
zekPpEVfoPWE5DQv{l=H^p}q5bC|wuA?4HTEwd-BwyT^}X?H0;+GTB|_JC1ko<hwE5
z@jUDz-w7WjwH_qj$z$ZZ7YslJ?rfbH2i(34GhMGF|8qm%&-O@uO`hZn0RtC=<c~L(
zLh@_4JOnK)k&0G{!ZC*y0}qcDRu(OKxRME-PRBiVRwl95zJCmT#+*2gAK@6McbZ%`
zW-4JBt9g-$jFB1DYwU_rmWf3{DwEmS{lZ#DtHHnJ5-T~65t(h}k22qiOf5jfY$ShV
zU30~z{~MWlV3^%<-Q{H9an3J?U-78S7nD^I;AcS6Fv0fu2u_PoyKL$fTdM2W-sGOH
z=y{k0D`YKs4sYEh$I7y<E;6h1XFM{?;y$?o!bPqG0TK4(z7Ld?q<PCDFT4cl9~4D8
zcc{GZb4DnmQMNq0H0~GR>0%KnzF>)<n^}|T7>%$Xw3&5s3Ea077MRA?Ac)I{SxF(N
zbr%pL*&KuzC704!_ugZ`<s8r+Vle1(A<pHXN3H#;q0jMmjNn9UpYY3G%EGKyrVwVG
zsDVsMmM-+^$n(dBX>Xt<Hg&UscV*fKW|{W!lrc<u^sCCWkJ{=-5eeQ|>q^<)VA^Ys
zf@znn08iekR*aM|?P0+0uM>_5K?j9{dxL<P4JuEo4F>o{403A$iJvi9DZ<x1B%4it
zHR{?-=u0xSN|c|GE2V<1TrJ4Fg(U4>O7HUfTcLg$k3s)TNp6F2%ya&g(1n?eVc{9Y
zSR0AshIKeq^fEfb5QNVcmOsnqU&^&#c6SoAk#a_?WIr)hGBwrbtYoi$nU(BWHXT4F
zR<gCYIdxS;<65B#5fssDwebQ5AK6#*nS9$Q1|r`-t>mX{qvRnFc#wn#9dHEW^GO~*
zh@c-%UxZcUHM@<lzWNt+Fi+bY|NE)Xoa9E?m(xqp`s`V{m1^i1L{8jU8iVBVGD}-R
zXw|bmt6%mE8<()s#4$7RAq6}mS+i)GiQFJm7fv1xP2BSl6QFq(jZQTeUUZ?Vm+#|S
ziZzEPL>f5KoGQgG7KhqPCqm9KWXmxl?Lp_1aY46=TeRDq8ohCzyn%ivI*zqgi@grM
z>Jh<|$K_9A+mLX&bUae@b(A+j%Ep&F;@f1c`YmN3h4M}<TLnh2f=k>DI5hDYf8w1M
ze|%p&c4q6g?uoZ26EG@4`@J^%eS2d7XK%M?c}+Te*M4+q{ukbt3|uD^?h`lk4?5{t
zH06rw0KTM_K!D8!_8XINRy3Lt=ej%40Q0qlt6=e7QDZPc!g#3;Z7MY&yd=3dppt3J
zPMMy~ThM<+Htcz`Ja~x*#;%Fmtkgn=FW?fI`MCT^Y_r_InyPDsv^OD7EH#}isE^q-
zE+S3H10jRWg~EiZ!bDS7rCUKh5^o@M+5IlN3LCGe{lqv?WVa=DQt4pXYz+F{KUf*_
zMtcK?(6#RE8Fr3@s**@$tAk^3dhDk?dSVcc4meO<AKOsS$%4xuhm4}jUE0@vHnC%J
z;@LPHK*feuw>#?L;v3(Nq-#nexVNpE3<!EgHgJSfdqo%d7JV3AeoMb%t-~WpLvW~}
z43UkP;O%1ap$8;v{8%lHOQ^+fpXPrITof#3R0vLCU&cxo4T79j5#l6*!^TMQ-!#iz
zps9_L9(D_Ap8#R=^ty4%!kP6^Aw%pDh`dXV5hG{8_&`LP^QNAcKK3R>LSkFX#CX)j
z{9~m=Tm#<1J_)>!r)t0l^+N>={n!lUP-2Fdf+P0p(6siU;QLIHIV^{Ad~Uyz+`4R@
z-#!WjR>=NDKl+<2c$~IEw1-)g+SDLRjrdwzK2TUad@W9+DUYQd&ZQt-$3&E<?*bn|
zI-yxA2>~7V0!q}qzkx@Iy{zNgWgYMJKPpSutmExNBI(*m5INO<9I}u*D41Kwac&Cj
z-DdqhhZ8mHw-a_aMfI)Q3)k?|e&4>>EB?g3Zqfd%;UBVwxA<Skh*~CjDW%i57xH`4
zc#>VqZ!;+#s(xC*&<|q*euM6?QOgoBSwXDSCXmLNa|dFLia$yzO|C-p*K-DWq>`Oo
zHleNysdF3iDZqm$yK=4!3Kfno94#1AfD{FniXY)(SMcKqYhAy@_LlhGcr>F3vWl7_
z_T~tlcCxS7P}|L%bIMTMHT;oU?Y(3MjqlwSJ6YyL=!78_+bwqiqo+GODstt(A+BXP
zDB~rcb;S2F<u}k>`7}S}+k3bt@oBB^Eh}*w7X?(%uvRE~lk*t6p@Opo3YdjL#b2mK
z(1U<Pwb*aCVPQTAXC+?dexa}FAD_Wrj4+9P;L<}fS#7Er7IgC4|7uf$uQ!SJh7gu3
zf({Cc4dL{8$8OLBK4ITIQj@jn4}5JTQ%M=ju{sJnEA^gK)%srd#J0(#UXk#5f3GKf
zuf<+7yNR4k(Jvj2@2|BpFJuIZTI7RtO3=vD3W*y)z#c)4W@+Dj9`MN&gfL83Mi`kR
z`HK5Rs-CX32c~aVhH?vPAM3WANAE0LEPtjR_Bp?rv(^_eF8Hj*Q2JZNA?$6wPnHhB
zU5+hFSTvrnbM@NH<Cq(&dj6brZO`JGbf4<lUN09vWuN}SHv7y{R}LJ49J@#JJ3)6&
zD?yO8_y!gz2s|z|+FR!+6$Vnwi)>MDJ2N5+e*eS{EA>NqBnw^;Lr!m{vnB5Q4oUz`
z!7EPtpa^@9znR~n^+lkVJC6297G51cz<crX@a9m^&u{<D%%R>S-m}yZ11t`)B*sGV
z!s)=q@C1$7vJ&DWgm$34e|jlOp-&0QBMZ_5wRJB&l7sRF_!HY946KMZgFbyslnAX0
zdFQxix+Gb<M7=Plkwj(T;%9^QX(&97z42z4%ZCNvN{<pd1eXMDLcUj*9#0=YsM(!N
zVz9V%M|a^B1oqFO=Hc|es#nr|R#IhCZLiIMO$c=HQ!nhWOYEhk?yrH4$JYDpe?+hx
zvj0nT!Gi$Sy_W?eTbTkUHdH$SBn+Y4VJWvw=Q%G+d~{sl6{L6vu-p~%YjIYhS;ISe
zxMxzR;JpWDS*tlX>rLXl9`18O$*F5Ub#>U!#wI6rlmG%|RY|$K&udHH$HsVd$)xA%
z(woG4C2oScV4(RNoKeJZ|Kfdqfa>>SRpC3Y3PGz}6?&6+uh^}Y?tn!?W@6{Dk@%Yh
zCDs?wVRyH@ga+-8?*$9*;<?ZuY2IMr_7b<r!_xy3_s1p*j!MmHJHijl-9YkDsohlY
zGhTtYel?P;mm#YU--67X9S1s%DLLJz8=-c-kFCVl$qH+&>(edqc1!$ocANo{C06Vj
z!ZN&K2HTBi(!T@oz58RcrEmGxw->v8l&S?bj(S4~Oct4MVo=t)axfNzC5nw(sW-8&
zEcU8<F?V#_-z<Y%FJN^)hN@@)W+)x5D6(JC-hD>|E^8eRvi-Z2Cn~}v_I8iGX!^I1
zXYK}TXXn51H>~@ho~8=?4aG;@PF)O2VNS6FB3KpV#7JvY<ucy#6&qMe1goHlsuU(%
z-3|+)Dy5_ms1Av$lvmDU(vTQF1~cIhPZL@xGS&a!d}vI3VokhL);C;Q*7HZ?4H60D
z{Sfh0>kT~dy27i+xFHfy3DCQRd>fW56<<RMVO%v88f85+{XqH;MZ;k~>JAX~cbnvw
zz(3K(H*o_gb7)5sevVU)A$nHM{viH#ye;ISKb9fk>{4rYb)l=qA5W--cG`2{i~S|*
z&4{bUYj~BZBnUr~_i3EVIAz069N^n7K8@ngDB>EX7MX(rhem|AxF@c`p@=slo{YcH
zwk4(#=}vr-hf%XgZO589_%d%s0qLk<aSYeakBCF#BlKwqbK>0i6V`oRem5SQ?pNuI
zN@a!2feMns90<>>e$vUuq(d+Vo|~dX$r-ppqmf^()M^S@BODCtX<Nk@(yUS5pZFa2
zkz2SjQ$#>?QO<qjn!bms7n}Zb^`fAt)T*2zmL$)8L>{AF>>;hI!=^ieOXIgMJfvrC
zxhyXUjXzQ(A#uf;tnNYk=@(Q!m_D;uRU_8Ai%Nr5piKmJlJ(R+3(i@qESdN8)KUY~
zka!1uk2-IkoOTSJqQkUq^HIur=ncPp9NDLwZkTZ2?$N}ts4w=R&8p{M-NWg{qALP_
zPqjq@)SPozb^p3wI$kaF$z-auV%#|Eap83DVOVB94soJyw34EeP=t7&UVCnByCZfx
zO1W<GeARn07-Bv(-g7TEe(Rygf!cJP_TFFDA>Egl4~-V(lUQrm-sk?Fk~#U<NRs0j
z%b^}7h)B{x*R>a;KG4Hk5m_%yb;wlrOtDVr1gcp=snntV?mAcY)4|sF@o0WJ_&jL^
z2D&c*E5Qa1=wP`(Rqz!Y?#|#TOIBV8ArL?2T}QxyKg^%`cpX0FzNOrufPY9(oM?W+
zo3Ic1wTe$YG3!RT%)5iC;Y5<6JRpv3(VwWb=8YVVqx#x{1Au0)k;wgrdh1l<!?pA%
z0`x6J+^h<IbL^jn=D2cbq*B6H3?+1L;6bh3(uFOQHOh(R_)>R^9p@qU5Xylc;#Hc|
z!R~fvYFE6-dAu~l<9|WMdh389Q-S=_Ri8)l7LDSRV15xiy84^eqI51a=f{n^>8*6B
z>sCbm#zdQV!OIpzHS9*lAu_#UB$vXHXB|$Pje5`c<0h67{fVu!<8ThAwa#w@83LT8
zk{ZbN%Y>q#pGoA_1JVOy$;VY=c*x<Po3=osX;|eERs5}C;Y!@UvaXsPWhE<<YK-e?
zrP(*~uBY>`do9Ao|BjU$O?&uR8WK)&#cj%w<qZ9+Wr*qP*|heUP;1AtPplT^x;7mb
z$wZeE3+Fb`%gwi8m$A*`v?S4^D4H?+|IRP@va<I6coBP8gO2hLXU)I%k_Kh}DvWM7
zdJTLnHI%rprdYEd-a%YhYwdlKm^?AHe{mB|1OJe%!uQ2ePFLtIZmdYmC?*c_8OXZT
zO$W@L&kS4E8klIA-_9+U%vF7($O6K2d;T#Y<j>Uou#BY3&F??LXuqZf#gE_=k*2~<
zrS?uKNm4Z1;^&5<&%Iu$cAO_NO^i!;FINwq$<m*^Ta?%hO+A{qpvX$TN^vp1HZn+W
z5y^ogS!YzSy?Qa|TXJ;NUpK9sMyjzB%wlXsq!>`o)w?Nd`T!~v>85J@_4lz2o=QnM
z7en&Y`N=9p_uU`z0eVQus&3F|9_}=k(4*|&BxU}5U~mbeH*TxfoBb$WWToEhq5DyT
zd|GJ!|4g2%`5(7b<F@)W%>QrWw)%B-TYbW~tv=zot!@*mvbwEa4M_~8mv;;L6pgJ_
zzXV=g-B-yhj3frfi~H&@+*kJ>#(i~?ENE->PpPe|`Sx9&%=Z(d8B~WSZ2Z_tOh`2y
z6ILHR-F7P-^F|h`dQo;hhZR<GV%R<rcO^lF05ry30u}T0sc36t9&{L<RotWv5L<=X
zpH21<mXJOdVUA_xKB%v&fwsheb8bwak(mjxk!3wxg=mQK;J+xTX(UqL=Zb>(+jMbp
z{cU$(j>37Iy0}iOl!euWMH#FX&}o%W_O1rdoyJL3>I`ve4%?5%pa>y@LHW9NG7drs
zZmCJEz`s>Uz1YOmc)VMU#|jG1zjgaS(07*S-wNpJaY&O->^47~WQE`osIKmz;^wEm
ze&XK>tpPrF@W{}M<?7$sDe=w&#lKYprNm81#);Jp4;_QT0aCg!Q4!xZD=8Z+smshp
z<+n+qSvwR~y~SEJNWM%@1JB^wMVUv2rJ-_ovY^c++@~K=bzi43?|z>r^KHWEpCD1b
zxW5Y8&_s+}pin}%Ni1^&ZU=p_Cb&qZ0)7&s_|Lcsqh(F~n1T2c*Y+>AH|h|f;<A7y
zmI*^LwKC`NI#mKjerzCJC<@du65}i(G)*;zuqLuafqFvmJf~NkvM=?Nkj{px-m*8I
zo$fzbc#-~eOH%^B>iKXk0tBkdm1uS*J8W0Vc9DFYj=DeNkKyAaD}^NjBZnV}FJWpQ
z#LFXmdqiqgqokNPfyzLIO7b(PmwPEyupSEh^N*J=ooU#bvILPc^@`NzH4fCXKCja-
z6wkv@EJ;1i;<<Fvy@-JyObV^!M0u*|YD{_-vox77rqA#q$_Gsn=A*z@VMoqq_R|tk
zV1ITvpV_Z{nXkeTd0z#yvAG|0c$Q~Fz5TYK>TYk~6R|&1Rj50doBZZ5ih&itfji?f
z`*p6m`pix(k4|J~la&@u&)Y1>FEk}QVqU#_8k3qUEv@D^3H)uX)J0OSAx~%1N3R;v
z2_hlLwvnyO{i<1=y5iN#z_=KUlSWB5Ax3cN02o-UkBrmouA_^JF2W{I;4}-*Cr$<O
zAwH<UUFK4~W}B6mDWb4w4WbCmbWdjv^82wYH)hWz<scL8`OiXvHH_JFU3JF_LV9kr
z`R?9hJR(SIukGU$QF+*I`{=g#-|HZVZSl_*!UV|`Pg?0YgiET5`b{uMu>wcYKY9yX
zv~=%bqp&fa%Vu_DR@@)*JS6AF{L}rVi~!f#7$jalj%{=o3nqG*jMA5~QOacYC=O4M
z&G=kdHbePiRzh}h`t51u?nP1=xrJg^%Qk2wuPOGtaK$5UdlxTUW6)=3dyq0(di8Z&
zk!Fjv`X6}VN}$<-Oq9r44f;7sv{^zQyv-2q$o)3TGH*ZZqAxNbVw!a&r!0cNBgh0`
zi!b@VQWoKC`~O5)bPVK_?l;0rHe-MfJC{o!7!vbFFHrTMBwUIVqAR)_YQ=|epy04X
zXhusSB|Z&jd_^}K3H%D#EuM17TD3}OIWgbR6BFz$3ZnU~8+ytH!=_Tl4rARmktJz8
zwAJnhyDfSmT>3aC!QP?_eAtF4kboc>hWI9_&+Gdk{Pyo<R1zH3mEEpIp_x?|W$TJP
z#>sNE&g^nY_JUcPT}Mp8svi1C8z>=`l|18K)a#)dA{c8U4t3EGt%1kJQ@DY>T}39%
zyd_#9?1DpRK(s_}2usKK!p>=6Gr^v-q3vB@nbLDvDbiI&mVM6bKZeDYB*o?)5@$qC
z_+W{OkQ{w=XDf?r2wf3H*>{XSXr;L+;P+XIo-Rn7;#pC!<GLtCTZdT;RS>pb$q{m2
zryT9^l(JcpBLvo?seWoUkcd1XWVjnCnLs=?tD6@`)Ee7qr!S^q8F|n-yHfN(aKRl%
z7&St%dnyg)=eMS^))`l8e~uQ$O5QHC#^j**wX`qcs?I6WpF0<Ek4Xrgxma`I5*b}e
za``WeEhuEw?g~koti1pvl)j-<0jIdwLY;(?-hTQa$T)y`0vY}G0J=b`RMU&#<<E=h
z>CUGQNCz+#SG|NewL`QtD1>V5aoM?acR-c$e6h@n?zcl}Fh4##L?D0m5t1GZMd@Mn
zL&|xG=~UO3SmkOtE|;x`?bB$7-e2O&X@*{+plXKZx3>1IP2cBfhxW<(l1i+Hp7In#
z@5jgo`HG?-+EY=rBp8%?#}_+t{Wic3@<dX;c<h;Gsv(<P7bUGM-Mpg6<IIenXsi0L
z%A_0T)nx*T!)b|dX6ULV8lYMtn5?e=OM!M+Qk4*toY~L8Omgu@UT7ko|CSO3=r4IA
z;tbbAf4720!(>8~N~+!u7Gp0RXoBL#NnM<`Qnd$t($anyD^9Nuj|5*g;Vbb;>?0)_
z?iytgKX$L;H`k5{FCOE0c<B<WwP%;RS5t^wU~9G4M*AcV!ldP=rQNRBd0|@(N)UP6
zq?^i+zx`W%PtJMkOX7?F|JL_tW&}-`b8;7b&u?y(>CUA;5WVAnqVPd)B=HPj*}si7
zR&Vk^p~8oq=Y3D%vji@c>=*Zf2H~_HEh?@pmkFMBn`9)MYq;qu7)!X;{MMG9sC;nh
zV{1mli6Mi1Lb?Kxasmya_EG;LR6ZAoP*y-cc^@a0%t0;=8~=^|XJ$_SBa$pUD)Nx%
ze<TpMKmjDy3()|*07wXDT{_>hTl`<Cfc^<w5U{f<ps?g${Q;YjO%fZkzjoFCkPBKB
zK*K$^c|ElFDN~7RfG$<i%|0t~&wrx-G2zI<Jfi@5$5Q}(pD`9_QKc$X>imSM@%VK)
zh(hJzJWH=dek4WmdSB^;Du90MmB%=Ec>Rwkj8y+4?(-a7pz+Ir0{xG84~hQgVu}AS
z3LwuQ5l4Pq`MGWeaGMghoR9ywN1o^6KmIpy%U8m~uu&nHt0~G_C8xNG1`>r2G#{;r
zgf9j=yTmTPN(N_%n&KU?%N~x4fYlYp_wqz>+;5{slz=zUYQp3{#tVedtp0~swI{rR
zvCFCc2hfz9%08FV|A^P>w;^*L|B+?(H<-9X)n5qbzn&t6`X82*JpQ>pu9j79^gc6<
z-Ulx)Rs57^19q%r6Ge^U=f_;hLd3p@?3K$}c0mWQh9e=inS8rZ{OCmU(<OD8YJTvr
z^Rn(1q%O0~QLhpbEme~R*&c*3{Rs8YwEMZ=$oBu=>wQenfZ($y3})U3hrV3zGX$)X
zwW2cM57;zZ`BNzG#n!qjd6eTL4y*qe3HHipjsC}=Z~*5Scm#5TJZU8(Osu^rqJ~?g
zjrjfqHM`vwYn8+{lM>bFfJ7+H>BARslU}O|AZ)m-klQ4ml!rPcnj>9QK&qocofLZz
zj?B{nWr*($`{tkp>b?igOv0X@+s#qR5~ubf24oC1Xo2qI#?u1Xlswcd6}yEQDbxW)
z8O;9&I-qhoq7itndpaQTC=&&bM1j%;6g(TOlvry$$~J)KS+$HtKEqky+b;N{&SP&8
z8uBmrsWQf$n?GR1MBxjCK1kt{bfHb|+Y}UiP%i%YC~3!we^&Y!y<2rbw=n?)jnbH>
z43cyjA{3Kcz`aQjFsDcQxh!hc1N}g0bxsAVOVCgAh3cPt$n-7r>Hi{R+Ef4R>JT;0
z9;4<t4F!ObcC$eUZT3qPwfhC7a)jH+_KViKzo&0`ko=kvW=9o`7>&?p)R5EhWTU7H
zR6>h3qmx%!6CSas-mO$*>uM_y#x<u)ft-0;#yEQ9DI*S5XG=h{%yTv@LKMH*kRh2Z
zZ}k&rB0OH^J(`e|1_i1hyA9Fs41s-C?fWPsrWS_YeiDnCEM^InV*w>M^TKWUbcg0U
zn7LL%I=)oD!zmS6{SIN$hw00OGF<dhLUg+OXXh0?2dQ@=LX(mlHX%I}+>c(5A3(@{
z$$i6UaiAt{xxDuDPM-cuk?Ic=$v$@<;3li;(VAlG-0$niJ-yvksCv9fnjm>YZsw(?
z<q>)x{hBITe$_?M!ZaZ&yRK?lY9U`5eEk+MV)rt@`;s^gn=&SjBf`~x9DIE$16`0=
z-g=;bIOoZ9P9KrC&qmOkaln<tTl_T}Zy^yDK{@%|OI7X^UlDdr@{Sh<Q=LWdd_X8M
z`7kF$)Cb#I8bKy(x2*G?e&_d<kO=Yr_yxZqGTBOEQq2P$a_WZj%#NWt*%xuXTg^?x
z`MsPw07J{Zsc@&1I2*PF<PaKOsP85AUSl?Wpjyz_WO&Csju$5G5DiY?K}gJ~H)_)p
z$9ePZf1Xpi4>+Z3u^g-dd1YC&f5W49_-jo`_a8y>O5WZj=kxT|MchInKq5T9pkZHm
z^fh5K-{V?lE_nIIV7hd*zJHQu^1V~!_m$pdtrGuEjs$O_55DCOTB{aG9}QU8`Wi@*
z@41k&{$v;iRyq^~S=}rKEUFhxP3zPJ&23WL!a~k>CAn@W9VF?{OmY}KN6r`?kgg5I
zzR4fhZmG)~529twMwQgXmsu^;T?AVWDv@)h{dlI>fd^gjLY$KBLpre}L*cnI@pjx2
z1|2l;lteDK-!JxLjf4QYq4b#BP^~&gN-{LbO3w0XVSZGGOpBC~67%js@`xWpPjP{K
zLO6!~gm94QKKDBPI56s;OjjH$7N(S^P;@nV<Ulk%%F1dMV?@<u0%;Pyd4RpD=&GVl
z)TOh~aWz6mplt+1nluU8X12R$h)dcHeC$>-B)^lLf#eEqiRT4rU$IvGf}2#!iW4Ik
zpF)m(DPRW&s{I^!l`gF-=)cns3H>Un@n$ade@J^5_^7I@;X9LLARusp8XK*bsHns%
zX`v>NXa*8EgA+voMJx3ZB<NEWVFvL61ZGBZJRVJ3sr2bXrM6nys>N1;qCf(e30?zu
ziC`sO&~pe1Y6~g1`TlF4Gm{C@=X>Ap%TJke_TFb-)?Rz<wbov1?cV}KfF#|UuPZ&5
zy7|YcrA7}IxNcr>8HHT<WJS})kO%!^EOQXnywGJ}U2{iv(3d+%?zpbb@^ya5eq44>
z?u>!P-r}~BE&K1u6Z{n;KOEHig$VEy7yNVX;vaW1un;(UKAiuNak{7_Xa$2rRR2v_
z#L_&fZx66FO}f=@foNep$cj@CCbwt09oOO^9#prace#Udoe?TweJ<!}05s{bbC)7g
z?U;^ckfw`MxF)F4eZQ#~jzo744w)CVenZ@2@mojEMQ>D{Tdl3UjW9*kO?Lm5gIGtd
ztjR0cQe_T%f`UfN{;#e3ju?B5t$<{|Djz6r!JfKvIPlU|wp5kvomoU^djan%?))SO
zi&682{ol{-Oqw-sVEd25OsQ|H@sZJ9{1&H<qgsp&MthA_9;@-~p}tF}a+x8wq-`9$
ziXkR@#LN@D)^%cgwOmfqDAFUBb*9Fr?iD=jdAdb+7eNJ1RYVqnx?MN6+P&xtcRWGR
z?1O*a30{8^vbc8Cs_F&(ZPw?1oVAxJC1yw2JIA_+`JJOKViwm#=qj8BIwjbrFOmgQ
zULF8iGI+V^nY+Yt<(*rl`t=2SXu`;G&15B9p>76P|5u}28<j^*<c}Im8oR{!Ql2ZZ
zhDnSXqH+?WZdSjUK_|J+$JmiXuQh&1cOc5<^$0NIhtP%gw5vtrG<0sM5aE;EIJMp-
zzLx>$I{V4h$J9UR+<V5gnS4;`-bbz*J7q_c_?3XR+ym_#B5732+S)tI-v8!7VCt{r
zBVCBCO~H~aYw;*zRagA`60V0D`nw}ZV?(ryV=y_y(k<ocU?l9<A3q|;{0$O!Qq~H=
zdo=B#+jwKu1dR5-^W@%MT0$Gca%scv{k&XK=FgJ$RFx|zW9+c!{Z>MyRM>m8tofG@
z%JCINDjCaWUcn+XL+fV_(N<p7OU%5^BPDMtRs*LK2<d0s!!o0Ql)h4?A7%OxQ>v_W
z=6Q{#|6xAo7PiZDbJ#*2?fa$ignu5-^0!)W7Mf~jgo<q;9dWkHXxju3>!ld?6Mu6k
znedl-pLM>HlAjAoNFtD^I?^_{6#I7W24i$*Nis`kvTmxpl1-h3vOg5~B*TZh>E@YN
zGrR*|@e1l%L-XXqG)wBS7oq>aOGniSgv9)|VlxHn>?`O7-EZPW{(xE#g}*val=)8h
ze@TwO-1#$vjQjsqL0r12OPb$NhG@_e5F%~l+%9%p71N~Za4l}9C_-9wF=%?%4#S5t
zm?3I??6Bu7+leJkHG6GOj2)U@<0*W#B5iUz+fenr(3tAh3%IeCZ#&m3deOP2&VFwt
zomBg7x_{TD4&Mk1n@JCV#A%5y1+*9htze+q%28Y)bwnqWpe5IEzJvW$wejjyoIuFx
z%kNTq1%e+qa0)!fDoMP;no!BT0J)8NnSTbA%^af8R63V|2G8Y!2GNbPk1}Ge7r4__
z6X7MHB8%-w)NV9W|7teZCa?Z$QuQBC{WI96s~6XBTM##@>_jU#iK?}g7}r6omtA4y
zUZeZA1%2FjbKwHH87cN9O^{p(R**n!7*Tgkjn2(Q>vlB=Lg3bQZPE?=w_#G3%H<4o
z_8zXlNL^GYZUn5y#X%!?P{=xM>RY{GLTi@FeFh0(glN8(wsLN-kn!W91cB^Hq4&!|
zKIs43(65_G5Xx4ltsI>PztKoe{pDE%z|>-wQd*37Ajjp5U42L0@g^)hU@Y*4y@L{R
zyOIjuHxaJ3w~Qk8Yf!Rtn&7GH5N-1A&b!JM-_ogp=p4KvWB<i7jj2((BdlhG{WC^*
zI{Gy=I?kmSVeHM+2p4-J4Aycp^2%!2gXUz*<zN4`WtulWADtgrB)Ld3HxwpDx&Yud
z#KcH7a)zqK<|z<xLj@=_9+^lk=52~R7?hKNHnwiHe~#`uRcPiTl=UV^LiBsXh>vF&
z&XcNaJtY9!N9sx=cgpP38U=il8x`P4V+Nd!E>L1pobvBc-u~BPs`bto+#5u106Pfy
zZ4ZE-Ve~wbP-kEA)gkGlBf+w?l@Ije*7)8@J;(pVE}@{Dh;5h}Pew*M6Tl!B>=~5d
z*pDodc{SFJqq2e32)=eB0%$7}QQN2EvH;Jgt*ja){sfV&NK4AT3QtT}r!-<pwEF)_
zPOG!8vJa(^1=0xVSPY6bx|2A$LGHAU>0pkw@^m6W2#XjrnsEA|(xo-l_-sO$QZG1)
zzpxv|#^s?qFAo_Qp2|cmw*N$Q1X*psl4$U9jRAOHuf-P$G{sB}5eI*!X~F1v766XS
z?Q<iH0VZW4s+dXKaJce*4h9kY7@XX6qOI(=fW(oxEDSkX4kRiSwgjzH`ven}H_J4E
zR(x9|SfdPLRX7{D345_U{88yoO}*QbiK6mb?960rRmRuO!;nP+S;$afEnPvbW-&3!
zm%+DBBUPPcb2)pRea&tbHx8>zuvk*b@LYV0H!|JM2x_Xct-l^g{+-W~&Jf<+_ygzi
z#B96xB=i*;AG3wV_jL|;9!fUKdQ9zel5hI2C7T`RCVoKpv&9hmB=*lSygS4Hkjbs4
zzH|O2HBD9bHR|S%u=97We`;q^y%XFqFM1>=oWoTH!tcSx=If?r2J-O12%lz+%f|ow
z-s8Y1Baj#EIvhSlwq3Ws2pJbj#>hNLtE5-=acyie{10r|y6oQ!%ps+wOHTwul*rnI
zB-;Pv7&lx##Ty>hPrcTgpNePrv48fngKmH1mOOKws-`I2A7f&deU++iPS+-9Cv--^
zh5NyrcK4-TT5$I#tKdYLF>6@$7XV7QD|S*?ayY6vwp}<kTk%nDJa4m5ZB;qowK*ye
zt}j2@bwsoNCLI*YE+_uFIYQ3B>+L1|8IUoGzBPIN^VYC@83Q!ng#jv$>d1RsJ~to8
zrw{u!F}TMi(|!M%cj_pz>s8wLLSESBQz6e?P7?-pJbZS~L`le1fzjb?=@yp*HNlp`
z-Aeq=$z7W^G>V~S|B@|qL0^wpYA~Wyp4z{`nv%~2Cfn#)62!E3MYFTI`43saUR_@K
zh%H;U5ox!JmI`ZM-9hBxk~;gW&r+LN_%+sM2e{u(&Ja}s@dXt{oxSESTy1O0Cj|>=
zj5hzalgqUY*!u+QG>^0-Yg8eJo%Mh_FYz!G7MY}@WP6=`5Srx3N&|C}^TC{ZWZc%U
zX{`!#=I~=*_t?RdK3J_E!Jmq;G(<TuHFJ8&7&G`6v*JQG*OE>dJ8eG&Cd0N3Bw7B_
z`0e781j7&29td0;vWEQ`y}hf3IwWW{4bU{`=E*%2PdKzA8ZE9L!6qefBgCi;PVkH0
z>=a%+cAcP<HSDUDf(Se8HZQqSl6hanJED|cA-)6JLOBmqQAq&e9(V&WQl`}U^*)8g
z@jsFuj2_7jKQODHe#FIEtQ0Nq$odC=c=!@6){kezsI`|+NWL0M-GZR;sGNRb92_*}
za6{^6T70<b=T}um(kASIyFl(zg?eaYu7x?#dun84-P3U732yMcIDDFlkdbb1!xGhC
z_!lnxQ7&~bnNt#3C()ylrp~2ax>fOM3sc#T2(DnzV)_`qqP{dMJeoaWF%Md7jtl{{
z2y<}W5qJp~roW(m8PBue4Ew!q`TzLG0k{iAvc{UZUCw1RCjAT6CIH`n1_|g;&gGf@
zvw75g3H#Sg-3|I_C-NBd=qBmP{O%kre!s#%|MQ0h{?$N@IoP1A=iL6+*$ar4sd{d3
z6E(c=e9^f8@m>F;1Y+G%_n5QT|8M2tFy7Un+%AUp;2=$TO?)F<O7x4p_=hrVu}DPG
zK}-yyC0I30!oQ%us<Z1yqYpD$lmsW9Yc;id7<k`>d8qt2)Bk)l(J=>;Qb-Dz4DFkU
zR~0ul`p^AD%NlEyv+`AJ?K`pp*RavmCnL*}k)|X^mPDOpS+nascsZktZXCjPSI?XQ
z6b=?)ZMhp3Hu@{@$Gjp>G;CXW44E_Y<pS&2=j!FQRf2f29HpG{AOB2V*4WzIWi{qc
zTS{y2a*2tTB4#A^vR}Ipj5Z;e|9^!ZKB?S7D<BM+!{#m<z>@i5uUtrfr?g`Fe@qhh
zQCF923I4rn9kZR>pX@xVG5SSb__%<X`>1%ZHjEV4)@pTJET78xx!h%MO@9Xlq+G|d
z_=oqt8PtCF^~^W;Fp?<0B=VL7Z_#4Er)W#|B>^Ff{NK6KlUwUYut>vl9`OnP$o-6S
z5F&q6?%@)v;3DP~jw5N`Lr2xpy@QfC_%sOBbQi=q1@Pp`$tji2P2E1y<W^jvM9vHd
zovZ`GQ26GZFFe*Nz@AlA+-@|3nM5H8YbBeEw|QvE9exS-j^WHcA=}rI4OF`1%m2WC
zYHRc51RZVkFB`@sV_PC$hK#1}{RHrQH~$FK-~I$OpDf(h=!YOiFnSq_{6awnw9)Vo
zT1=G6tlCM>pzDEGc$-Ce>aS$EV>*=|>7A$)GyN=c+~DYe!`i~}@KJ!)7&q9_U6!g!
z@bG{d@A}ku+x`#6%YEcDgBFXC{r^Kbk?pDmX+eVG2*P|ze?w;fJx>d+t%qF>u1@3H
zd1`+;2EL(i#)R4@->c)TZiEXegnI*o`)20rf^aP$+?x_<M2n4L!7GH52ofON3YSjF
zzHsDXO$F7H=OoV`B04#>2#U~8A>mqlEh+U6WM87iUzEHtDz6?`GdH91ore{zRqqlr
z9U}KCHqOpzf|uOSTxXB|m`yu}SM(_l6sfuVl#fGJZBgf0YMjd2COSJmD{_$prO0E1
z7|Jr|f2Evx9h%|DhtzHVl!`mIWZ)BwQ^=f-T5*H3npqakO!hYW;4hgmY!2#YA7Mp3
zLz2tCMECgW=Or(R>=S=P1mYhPPa$aZa-L8NB2D*Pig*VR>D`MDt~my+YaGt_p>>`J
zA1|c+k|t++m;4AvC;Lx&f0N}!?izBL>wpUV;Vc9uP?><7k7PNw(+A~I>qt0~I{R+a
z_C0hQT=i`AFTM}1=S;N}hP{sI9Q)H|e(YNw^7!TGU4wm*(b2hu+2Jx>?Q>H<6!{>R
zP!!Yi!zX3N^U=*pd_bq?NA|&e(FZ#0a$n9<1qjHE8KIOi_$A?gQu?0xyT!%DSR=8V
z)}1aj7%z$c*ilNL)9tIddI?&41AT$$M^5dm1wKU16MXr{B3Z`afi>oj$O{K+%(+Cc
z+!5*E=s_wA)jlothm6uI%&O0kMtbld8-)@c&4a{bG+ApeRz2EbZ+{$opozZwDt+s;
zc&^ZuXvO1n1}Y;~O?2&Uw`*FgMW9Q!E~8sQVq>q8fNz1Y$-Z`X<s6&-5&k65+}uZ&
zSirXl^=9PDDq~Z%?0EB~4t$29$!zVRDXPK)y3ty)CAud&xc{4gISbw#v6Q0_egA$g
z)%=le#G7Q))*Zg9tQ+sly3!i7L<WVXQPM@>6tc?acb?q69%_7cjqeLIS6bBdceyuL
zHrRjhRdtyb=?M9R^W@mPU4e5^2R~JYW%FZC0z_4&dPc^ToOlz*RZ=qYhk!XIPayGU
zYBCG1-VQ>IDEMfbFz;Ag>#~7cYxYt!XqER8ugL@Mdb7qt@4I?o@xIv&C7@L`o1sLm
z8BSn3n_E&{);!~eknd~RG<2h{IDw8OBxzTFE#_Bqv_8LcH7v+hno4Q77tVq~G5qZ$
zl{DGGM~<M|+(_q)9|2X6Dr0I`ac{G#m@*e1l&~F8|0-{YkTu)4wvsV%f2IA!&*j(x
zUV9_QtTn}l;EC$&)gwf0)grj_S9~25!Y1s;DT=6l+^G8Ub3vfrs~Yy({eK}fU}CV*
z&Q_1=es|73##;T(LcQaI-}_h?_W7T?M<Cpb{l>A5K;Gza1k%m&g@on%i20Kl)1x2n
z)w#&Xcs*G#{wdi*=pOUSc}NwnD6*xLIx->Y<KIe&{dM-L?NH++lm}4N6t_9*dJt>a
z$L*XxCG0;vc!Z-oD6d2Z4w)4PNakpu+UO{8!y+nL1sLqTxZ4Y4RB0hdW@SDORz+y|
zIa$Q%7=>-Xymk<Jyq}6!dRd#Uh1Qc&7|6NyMDJCdsf!0}6<X(uvEL0D!@i)&Dx+dI
zKTd>xuA5DMo!vxaMt3H(nE0u9v_UsZ?L`D&2^ushDEc&|b<_X#`x@gNwu>J&R->1~
zM^yIFgT2CmAbSco#M`^+cF?H$NF?}h0bYrDiONDD)rrc%!t^PNQQ0yN_78uLYgY5!
z3L@*|`DIbec0Q{dtW7I}PU(hE(J4oG5I_ak?Y{yo8ROW7BeF}BsT^kG{B4Kiy_k3G
zAC?}A;@>+HiZ8eg*OR?kQT+0gIOMszUgX>!tXNt;_09|OIDfR?6N>v~_<EUdV|U5+
z8uLy#L3Y_X``Hgf4b)9P1Ul})yH?eXk>7^^W?#5BwD9LpN?pRk0E$REX9Vm|d`!iW
zKcVBl0x%;m&!#Q;L*xlx%d$OHlJVu9XwK}%-b{(pNs&MMx12=jxMWDt^m%>I_)yY<
zgjAPUasBKED5V<9rZI{}{=t@;r;a5ji}q;53}BNll)@VJIX!1L{E{DgJVt%p!%DAz
zr4NW6z*7IOOy0y*-^=$GA@HX*Gh?eLyUdfK$(-;&qwDWQz55gmD;Stl1S?Y2Eaqvs
zG7Yk+_W%0Hye#wDTz$le&DsJv007??$sVeU<;90Qa3m8j4s-DQZYgiV&8T9=+jaIo
zw}`f6y~5XZ@=apoV1C#j!h=w8-^x~SLq3T`l4#5rB1HUGJi;TEG*uIR)9PRHt2~N_
zVtGNM74Om+Qv%V${j`N~B>XFC%YTOU^Rna@fTQf@ysT*XLTruJ^`W60$g2@rPgocT
zE;o%t=RvzO>p8V2K6LqJt?mXS`n5Xy-uLNznz2!WJ6B3>gb8c&&Wq(Vsb0E{+7B(z
zeT8*)wv5>1O{Bv0;Wr5)I91!zlpd=wwkV|*)CT%`z{4BAEwgOikRN!tkeZ!;3JLhm
zXkMUD#%Qz!V_C%+{f~BO+QJ{n%C;&lS?odvbMX3(9Q=kP*}Ol`?5Dvx`V^G#NsShf
zPMxoKkk%ILQ^Yr!uf=u?fwhM1e1f@%maoMK^Lx?(Rh=RT=16w4rtE;(FV6@azzJlp
zw%|tUbMh3<R{YrO16I?bN%_urJ_g@<j7My@dW<J`)+*<=W5VL;qrVk-q38anS3C(U
zJ$h<Y9A+GXE0MptL+CH{9s?o+NbdoW&)8)3`AN63_jv&*%e#S+Ej>{{d0Fy~1(fju
zly3!Ptcrc0wu`dA^B)T+Z&0iUP;R4EkH7Eo&syV5Ouv5zpp8d=TTEH@u#2>XXULOP
zvDj-pvYxOapoM59j|GH2r1t>A4)!WNiU<{x7{Wl{N?D=`En*8<mb#3aGb^JCM8IH4
zAwwBOYeYdL*MzEQ9xq5Wt9;&H$h@^k_OGfzeMo~R7kkcuDSk#bU)d(!%UmI^t<^A@
ziG3sZ*HSeo4|Zx|yZyk!u&`Ju5Iy<SK1vbwTPZNSYS0OUO`+TgDXQK#@>l0aH0{Fi
zJ8+xiE`k)f(H2O!FW`2(w(tvivMTET+e01?Zf%l$4CImMgFWE(2USz@1a5rb3Ap`;
zn!M%IDww7)XTIbe3v;Fl=KS47?e8uic2sGtyWg_&(r-xRCGuodOnba%zeSEaR=-as
zy+^<IAO|zwu&O(GqTi=elh^P3biX%A-hb@3&+E5Uai-S|WOXL=y91F`)ngzMf1iQ$
znzi1!jYp5)uIQ7l=iX!1^Vre#40h|urJmC=>UrT8sYUpQW7ad~=z2QP4bY!#>Uoz(
zh0A@}Tu7U!JtTLqV^8rNyvj;d!yY!XLwPVmqCnR{C%7`Q1n5og-$!jbO{slGS^Lz_
z^Fhjvr@V6jM0Qv2Sn1U<u<#1fd(7sUs{1(c#Uz+Hv)TCb^lXll>J%0p6#4yFvv~^>
z=|~`2H4kpvZ&CPIZNE)=kG7wdf?~rT`?b_>4Xf&I8xt|F?Rk=SthO(bwpUWF(QWry
zsqPqKzK--B?Or4WVRp3G*;2PP?3JIT$9!eF-QJRStac9zs4q{K+o1y8e|P`vAiYPk
zE2JO}?^^6xIsLVU`MVd+`=Fo;>PE>sR<k~eIIZb&)1<azjP`cYdo+8w6jV?iCRJO*
zK59&l_U3eTCrjS3nvDPk=W5D9GlqJLEPTaxF<M<}l|gZ$2f+$wz1UY<{X6U6SKm_G
z+^`=%ulUtl__2S7#g04dUnxUu1;q?LZN_uXdxEhF31=O%h!(w<bVeNGpq6MO<D?Yp
zQHzb{2|X7~(|zeWen8qWhq*(Bc?ac0v`EVnqVF;GDG5A%+Lbm@OIswhqWDUTQO9>2
zDcjE@OCpgqh<L19FAafE8wq2BJ^C&;{Yv^|s&KjIWbNe=i>ylFMZ~1QTj#D#8kT6T
zFQ>9XQS#>$JcjMN7m5J-Dq~EBry`>4fj1ICrxeLo%yyA{tB}0%{s|mJFuV#9q`uY@
zbO^qBT%qi%`GJINmn8I1wrTN)DSwn+DMf#xrRQSg%qQ5ux=rn=v(HEfQy&+0QN+oa
zoKDc4d8atPp>jxA6(T|LtJso}sy%ARFvVD6m$D-hanoJ{z|ii<Gd0ZHOl|7fTqBj%
z*@p>Pfro~qWkpU%b;dnBQ}qJ{2R)l30ZC;3c>jR+pj??M$F?u2W~MISM6vcQ3?>1r
zY5-Bh@-N)ko8z!t<O3wDs{GTi<_OO35Jg3(IH8vvI+mj1(0@==`2YITJXAs`yOA03
z_(dDwUq_OtzENLDqjFO+c6Ej&V@nqN>}LbAq6ZOJy&<dQMAjwauOE*mmA|Dj_a-eW
zn6z(0F86QpfZ&)<ob<|u>3-#m|2k<3L#Y|X&=AnU*dX|)v;`^rvs<xMBGp(d)a!L`
z|8>O~W5*O6%<X4p%QPq)0zlF|!K0?HJv@4s4@<T<EBNscQ;wxJ6W!5SO`5=6C;p@{
z-7isJ9xOr8{NN9|5Gnd|O4p?qqZDFh-?I9h(Cp-Vt3T~XSX{G&@@Cb^hm5LI4!QP$
zE2~aEGL_dO&bbt*vu|oVrv0ecM5v$_oY`S&F#!c*_;PbpAt*SBpp6mKr8D{efjs+S
zx=02zA>0RPyv}}ZlVI!)Wh~$<<pm>(dY}km?zihFWM_4*bn#Z+v%Wc;?EHiGPIYzm
zU3@`(ozJKDXC+@J);G{!9WNVeSZCt^F=Fkjl=-&^%16o4s!$tMjDB>0ShyP5VNFl0
zFFo=E1afvE3B$?!yJUusBV#F*NhuPaRf!p;F@aE}J1r?K8BNl(H9ODC$Ugdud@tjL
z^cP;k*j%WpT93{s^)l{0I-}CdSbKDa?qyg<XN>bQUOYNul9#dd=!~0HhB<p0LtEtn
zVmOb>WR&LY>2B`0*^q+eZf-tzZSuwoV6JZNp}=?PIX0~mA45HuNT_MDhK-Rob0jiJ
zgP5Z7I8HaOsnm`BizLUNC3JB9di7)Y4M{T!9_D9?UUq3X7aoktTD;y3&=bvGR|a|=
zrIXp7pN5McO>Wto+;ariGUMTS`ECXOIbVi9MgPzFf->~OZN_9o{5PHP{Zht9cenz3
zcBR)*-FiYs=B8GTO95An+U<GT!r!%*3K*MJ^aV)3bNwLf>1^QOt;K_=kqYr*W}!Ve
z?+O;;c`QWE(PU-GLVTD0m28qt>G5V+d?@~1dnt2NE=T%&;HVEQ^}!W+o!h*18STmu
zcg+W&(GlCmR1GY^B8S4Ry?eBc25#Jtr`nFh(j}*)N*c{Hff6KK9qk$rW}dN0GHPsF
z9B0h&G~N>3l@mSC_uc}yoLLr%cC*ITYjdB_eO;F&JLt3+7SUg3o&8MwflpM%xQ@gu
z!rq9Jj`LMx59HflL0sKoE^2m^2^ImX7d2}uHmN&RP%Ub)m<&;lLG=BouA7}N`9|0N
z@|L<S9$W@OQvN+j=Is~iO{7AujrHCzt5<J7S9#BRCEYg+v+*?eS_LxKeP26|$~!8}
zOS;?KEIVd$ol@NyH604FgV4q?@(zKnGnw)9%=TwwcfORNKTY#XxTRqaL<sok+@h@T
zB;A@-8pPV5G#Gtw5DAytyY5#f2<PkO4@KK)Z*$*I5n?UM*?hazO~Dfl_T++5qV!Db
z)ucpe=juk?oK@QSOg9Rq+xO1ru&+)z$LWTOlTl?}1@b7zMZ+4$$k>f_ejw7BY@8ff
zJvu-Zz8k12WKP3Y<4Y|j@f)hm$lzdf&do4uBX|{q@e}AQzrs4;0cQ{W1?;RDnN+f+
z+N_=?aUO1Ks5bt&f1fq?h|wD0QXsSD=4zuQV7xDGE)u=1da)du8CwFyTLZ=4IQ8I#
z*gsScp@u@;DsMM?t2;8pzfx-*QQbJ>DsxP3(2VfL6}!_IgVDsrWYc-jec0nDk8{ja
zID>AmAGi<q7<pEyVrZ%g5^GC7)M7uR)=^gO_X5_??^P43b0l3$5KokN8|JC=jdrb7
zt8N!H&7bI3w9{8b9MlCrkv7}KY^tib1NWxfU{1BJk0_n_lGh=q4j13KT}t=I`7deF
z-Dj(ey;zSDfP?K)nGqeO&zBoaM+gwEuui=!V9qJjH+Py<?YVIQw$Y-!C2@ChB3bsY
zXA3&bzD|o7>MZU7pWM~)YIVtHM=`Y<Ma{@zDN$Q{IQPgp%*q0++5*w63S0rN^Ayj}
zwV?5lBY?FZn07Gf*l;;6AHY3_)#8GKh1Q74i)W6btEJ3)VU2kkt(@3yj?6WWmt}q#
zz0z8ZChfJLZ=-ul{9;q#Uwl)f0wfb0WW_Bex`(>@*W)t)?*-hRrAm4b9v3oi#yAP8
zQN0-Qvw@E%$;ZOtFH#s=2~EQdQxak%1g&^IW8+|q<OaKaDu+ep#Mv0a)Q60xXRC%M
z<J`DAXuL0;mC&^yb^_ulKb_MyVi?ZD(!Wh?aqJ)7D{#j8jCu*)9(fO6Y9f5^ge=zM
z2q%@vQDS%+rqldhh;a_6KAUf+;{mGLa`6FYRH9zx2I+xdAYQBtkL$AB$iRjK^S!aR
z&GkDjoi#@w%@Eox7~RbgOlP6}r&(@CBpf|<Q=E%PXcRX_BSMKgDusD;OIkn;jV&su
zex~SDjg~t5^7V3RmS7lKEW-TM7;~nB%#HSFP6!b_R2?$dNrF;2IP;l`gkVm#tYlM=
zYj{o90op3~<+HuBf{8JCw3D>&MI#`<MlK@?pR^{G$RQsL;r~2|v|AnV4%RoS#Mwv(
z!yX|6o7_gbNHXPmNPJaAF42iQUWugEEsV72W&b>uF!Il13L{Di(TyXn=pk0#jdk{T
zSYe1e1XNjbw@BZrm%Av^XfN80=_&08t$Xv7#Mn~Z<g@SI>83I{_St)~iN;jVz~aN0
z0miPRUi<`SV>AN6nE{q{hO218!TKd>78tK!osCn)Vi~gOpTVob(&(JVEIdp^m`J1@
zkQK*Lzf55**E9_$w|m_<8>mnkAv~4f9q8wwo_**xrZhS)55O;@P|zI1`5M6QFY7|h
z$07(Fq+ZTp!ec^KdL=otrBY7MmM}kyo;WC&A!YiAv1MGH#hd;$FKf6gz0AMVqPp*t
zGvf+Gd$kt|BtLa?oPQZF@S4Bk2lBrZ{A1(6^?~EJS?2+5LhF1<0*EevXT4h0OZjc+
z{Au@owho^&j(%TV2|~&^Bq}=wj?1X`dg}FVzEalzSUuuqLnf8fG;nac8uNDw>$K{>
zQ2G*W%7>>ND33-#w)&wv80fQf76;9Fd3sLuQm|!U7Y2=BMoqoopBZVetG~$3l9;^*
z@ttSnDw;?&4>B&%bH*kBg@8njG5yV}>DTS=O2<=c2n)<wTo?D%*>4c1MWA|m(7LwE
zxrwh7vQ$rD+7cUi#V=npOs?6HZuX|{)2Wd2vsd^s;lGL(`4dHpf4KLu&|k$9OyFEh
zB`QjJwttro`aOG0Lg3s8Hl?SmFQv7(9QK1Z`B@wV@mSKd(Es({Rh8OfRgwoHIdXQx
z3bD_d!2)%!3I@&`2%fuwzF{rO$Ydh5*cb(yBhbc1?7ks{b@uxCa*$i`0JSFk_wg@9
zvYcBOtTYz$8hcdKvWy|jyS+ohP+>R;-T2_nmcNGVkTvKZ0tpF}Tiil)Hn`|gW|2A0
z-N8JZNg2I(uUK0UStt6rfU>`&VQgabKaQt`1@ewXp!V2{R3u}>NVrJFm1CTB_LVOw
z0_kjXm3})`(W!?A(5cgb1S)~G!ZQYP=2X_%e}k6F#Lf#EK<bFQmY$anu9pww6oO$b
zk%T-M)}Kk>1U7u5JO8%|0F|j(on6RDPzlTLkQ3<Qnk#>Zj|5m^ROTPSi?bC1TW61}
zhlE)bL8<daX=DWGBZNqyQJHMw9z}L0^MTq&j^+=AIc!%zbZ=+11d%<C5W67Z507FD
z31cse0N+5?+1STI--+Ev7-CLTsv$Exq1YWE1jkjX1mz68;?}8J))a2ti(kms_Jo@l
zuvKx<O8Tzz?7HE@U`l|ekXCik-+qOZnW$bW?VvN1u*-MW+y8K&z{n+h#@Z^RCc!tm
zm#U5Z$trl@p91J%RZ{WgAyryerQu7JX3qZLW|^t&;p25P$LxO`-73=y;p?E{n7eFU
zA;uEPNTKr}n_i>VAb0H5n3t<f@^+rt5(-7#bN=0mfBy)qfxsxY^!idPByXUMUK<z4
z(Vb_n$GTcuF(_Mh7R$eeSLnE1AmcDL)R&Hm^wU;U`eIGtQ_C+VOo3HlEQbCT{2VKE
zu&Fo17bzZQZIAuJT^@%WA0iNZidVQ<dBzgl=dZJu{*{5b9#(v-#hU0z%0K$|4-Uv$
zcL}g$zmrd3CZ-w)#It?Lg2K5X(C<iOU3}-=S@u||mvr!p`mkh@ew>p!Z`4-gln-}J
zY%oBLKSzygNAVA*l4uy+pb&NTwL-34hp0L`$cwVzsFYOf5nf_yy!o%0;?2K@DyAja
zF~!I;<AR8^JP>_gsf;nYMmR)YB&WvM3%zd5aQu8-Sd94_1&=W{&fsb}Z$kU1)N3BU
zjfs@^lp(ZbJWBZnG)?P$jFef)Egv4~H2cqad;sR!S#X;tDf3d1c#NL{DB1tT$SP1@
zK4=tlPkLevi^s(u;S0Ohoi2~|sjPli(f}+sGY(>~Gc|U9PKAT)F*02^Qv)8wba8Qy
z@^wD~)1!oI-0LO@5WH)ZPx^)$OgD+Re{j{YE1(eW20x2>Si!1%>W&7b%B-{3LeJ9k
z@&YevUY1E}RB4!50j}oUWvSWMWEq=k;g|(GZe`iAgvS+nTvNyxR}?ZT2kXYTA>Wz7
zMQR4|m=Zi>-UELVJ|Hfvs6BDALWL`-&<^s<Bulz;HhougN(3Uy|Iw9V=%?0}Bkau7
z#*%#{@R!#@_{6P(ac`GNcSTgR2arf>&2)j3Rq%VGcb1A&YA+OZuCW6n!8-fp7Y}hV
z`I*-66dy7&RoH8ynkGE#2%7g7DQ5XNwdXAn#x`VZg;^K4dJ!*R=<|7ljS(y6dMZ?$
zZd~H)NeH>I=7XJXEx#kB#^~_o5?0`dea&8a2}c%rgW9B0XARAxSW=ryYQ1G#8iFY2
z{I}|171na5OR3Gu!AR<n5y1E37rNp5uOBP;esweOb>!Kl#OdXgg0}?s)XhmlFau^H
z)f~Xn%R)oOLJjfCpj8aYKKD!Zk`b{%O}u!Ya_%zo;TmIO$hV=!XqlSouTl|AVYFaY
zkn4Jr1>5e!{l=P->kF2BIHQBb>x`4?#TQ#mEU2weV$1D9&(;)@saunL_ImZM=v&B|
z;u{|HeW<W?^>czQ>YLQO%MwVynK4y}N2SV{ZFVXAmbVPJ5JJ~Rs`G?8`v#Of9^Hfp
zDt!h1F;jd98CTQYmuEu^&6lJbG?y%Rop*P0@)`{qXV9)pSdCGa58R#Q@O#FXJk!7K
zCiV{Fx+30KA!;Sp7-I&*5#WdKok+R(U%>Tgpy*q`6>{+eHHfgNRjK`IF|YK?9&!VP
z;@drddn+^CCsZ~<i#^K3r2)v3f=8YG4{S$z0>^=~%;2ADYX9M(8&m`CQ1JIkbHer_
zXOjqRri<t<LVDRw9^6k5yQ>stxOn189J=|kLXn(KJ|7Y7i6L4vSM`(oXE%Z+=n=q=
za3yQe#f`Q10&MHX9Im|mbjD|b8}BI2W)`010c}OqAT~xe8#usnybyjzKb*z9a07(%
zX9}{SoE#=SgMO#^8=|k6r}g>^kYuY5gsgLZJ~mJ64@{z0iT2dL>v@1)_C>f?o&5*G
z$ciGg&R!x<;+p-qN;>UT3Q>WI=Wr(HQ_!ScyAe~%67t>MQYg_<bi;L^OvPr(+HZ_y
z3eD5j$ae|<YJTKT`f!>n$ID^M_jTj6Uz1g5UnDh9zwPPvdY-pVbUCM1ib}8*G<l*=
z+^yqVI8+4%fmy;}{4KlJwL;4G*pE(S4RH#@v1!SsJA~+Nl#alv1G2yb@Li(c+(E<d
zh$)~|aVOa#=i$X*H(w{#oCuB$^f+MNn-||Vce;`Z!bCprvEeHFc%?(?834Qz9(tZo
zyzpB=>!za4LIrQ-*0Dx`J-R`>I>O7*LB==D6KiGr{A&*;JKIzALoM2*T_A~3IaiR$
zxKvbDqGEy{C=&tXncIX%87CG_$QKA8PybQo&D{}%ydaFwbOdD*Dj)n#t0TfHdwy|D
zf#(_*QhssMm?XGJB^{q2A6pd@pJOhkPjaDJDy;!kWI}-;gree3@}&cT3CHjYnT=GS
z{6egX{*(j0_H9fMunnIPP`)g4XS;AMAui+MEY9L&lxIGFNUoseDov%MR*p0MNpt3@
zO);i0DFxq_8mq3T^Az->xr1~C;1@IfX2Q=XbNzW80^!yP0P{UaH2a1J-<L>oW;510
zyKgwtKfLGqdFWXe{rh$PFwH-Gs*Vg8i{I9MdJt+;3$5cQ@mA=v8priKh(hWeh11=l
zTU!2b{mmhNk4+zt<=jxaGlM?K`AMd4Nf&Gl0*HH;G1J|u*S;qv^w!98{_oA`2_p-W
z55W;5`XhSuQ-s4E@V_&K<QJUjh&9Hrne#;rwL=WQ&4Lpo%^1g8|K0iGCnOpXE!HTt
zB;tda7nu||qV@G})d!64Ez2jA2ASQ1#t&j`qp)VynjsXopPi<>bi+5V?aP;5s%|Y&
znU~(WlM6Q&$urcMJ$n^1#OR0UM%%usYkfswZc7`F`VT8?FD3F7Oln^F*;@Q5>LV6O
z_<_K_-udB$O6Gp+99qL%Ksp*eLpO)L`6njStayu`)uOM$Amt9}R>4_3_gv#I3)jY3
zJlRLtK!}Puv-|eETUa1?L&T3B?b<pu+Q??7j*-ZB+KN%EpYhQ3$RKA6e8N%sZf(U#
z#<yP4{pG-IU)5-a?ZA6WPRP0yzTAVw;55^bLI2q`Cb<4_X$b9>J>(OHk=jwhl|hR_
zooA$oPR94$?T5L7y>(yJl{CMryf0Ty(%Ds6%-U2=qRsx%KMExMVfn#=L7;^7WmNhM
z_OLbQ30x1~?8<D4RxQexq+KMzKFc%JOpx!<1K<UCHIMA|@*Srg1L1oMc??;nqGt6E
zQthmfuOx8ag5NNCnD+Z68TMR~jd+(ZKvp^A1P_rVSyB;a5+TEqI)lDflLh~{TTtDt
zMl`I8q=_KGee|3)QV9Ns5^U|NM$@e$s*r##x(!4(vYS*BW9GCcmI>c-&TM|1`Lqqa
zCVHCjjx$M`Hmtp*!D>kx>m<GnUF?t~YiM8kCx-}n8SY<;q~9=TaD=L-A>-|kbs~{&
z7ReAo#(Q=4qCd+%$vmDz(U9pDGcW2T9WYff#v;{(%35hr8YbGNv_P+=P1jh5ZNKvm
zLXkO-D%i}Evrc*n>fX4v5>YI$W{SYog*@xz8H%8fNi{Aa2vszaO0{ZsjEiPSHGQZC
z9CbdWDFCn!q$RKjFV5}409h9jnxVrF#p-;@iwGu{88Q<BXC-Ic0`P^RHGh#CDt;^E
z+cQ<y?!q|etEt*gH+`$!jnj8a{#5OqW^Lf;y?WXHNT+i#pQvU21<p4a^vL-EZPwW(
z7+I-!9urHNl(w%2X*J}CI!|=AA3q}sKnc={fyJ+R$<kuq=PhKO^Bdm8CtKZHiEIU+
z9H_{>^2LgiVq4@~b2PMQfBk{skyB(TGX$;-7K|n-jG}EnrOwqcc6Rq4$z+t|lkS(#
zzGN`kf=7WnRjNa5oQ9V{)zH@s>rYGK@vzW8f+sl=f9&@{wxW248toa9KHhu(ep<`w
z{C-M)<CvtzisT13@0J0?E(caM98X#Wr`*93fC1gSr^YxOY~Gn$<NKE!cG;V66k$Dl
z$~**`L!BIP4||Lni;vjTU^$&ED!_X>&$*ii*uc(*WM}aIlp@X+nMCZydA9%S06Xj7
z+=PXaaLPdvuHd8e{x=cKnnD)yQD<N9447?Jl=D8>Ih~ir?#<)>{>h#1)I@Xr_QV?F
zO*ayut{Zcfi^-LWMLx0BsM*L#$TA}5G}_lPbUgHl%eArE;1aHfl;&uUeHrN@jLFte
zU9#^=Yf4czanHGIlMqYc{-`eV?NcZd!eyNFkndB3RBnZaS5vu#_Msn3?#*uQw@Av-
zjywV%s@x*`Bb7T%4on8~amd$czfO`kd0FK-b@p3NrZiAm>~shSUUWa?z=I_&@zfd0
zwmSO`tht20F5(oVvv0^}w`2_uS<|>&V2?eQ%Jkw5oR|3`oX`=7oeNDcde2Q>0-elF
z7Ff3r$Wqa7s~9oCdQfP_QO#v>4$1j<TrOlMM3{tqIgSD?S(i`&ArfX2%kWx+#YY8~
z2ruj&MlMwp>Pia2C;%>54?**CVR#Ef+0%7{s|}h>t+V^p7)NT%d4+I=k!_ss3UQlA
z1{`543sAh^O=d{$12k?Ucqm9Rxz%W$|MA3$qDt7kx$B&XSdsWzjrHgJ@P}Dh%?GmQ
zfAYg`Nm*~SHFxFu+Ro90uWfGrcb>0Vt*fmap<4T>{Z@(T37<WIz5yvEs4H-NE*dKH
zw#7m1FK;p#Zw_YJ)!7w<hEH)pa<UpSic}ZP+geln<sM;A>|E*#7H_Pve(J|teYY?2
zIeufXwkj4hT50G@`pis)fRNJ^9O*db8&g<g%!Q|%+!|t<zti9S;{0y^{(7&!;a+ka
zO8q5G=H!jsH|5hFZz|rvx!XoUHyG~*_P-b3e&2D<FNDBwFApd8@oytt%wwyVfy`w3
zR(VR!I!@v@hOD6o>*y|C_1Tw8BTz{>4KhBsgB_6LBDQiSGYJ|HB{LZ*LRFlM<lAz?
zyfFP&7*%@;Yq-;mDMx+q;WSVCLDGyrOl_2Y(FZL$3yOg0XE0Iqei2=R6O$wPp5jy$
zI{)p?JZes}I;^tPQRDu$WjTyhThS!i2LWRIWuZI7;SeASUg9sUXc6d>=HKz#Tge@d
zosTMd)RJ{Epg@fwir{%u(RC=ykM&~ja`VthOJ1$ysihG6mkia66iG%)R%Nna40+BD
z>81!>9KlKYP04~wBps5LT<2m>^4BTs36BMH5|yset><wrj^C#W3dlTqSl|q0L@Xs|
zn`*Oqsh5`;Tmjj@xz7G<DQZ1J$-hKGrvI9fXMzS1Qp7}3nPsU{3-P}u%12}h+>X`n
zQbJ5A$9sWOOr|5#hd6^h{C|DK{~N=iz`k5PFMNE|9>T@HzGzn;?Uyo7XR`6FM-R3+
z(k`>Llx85m9a08TY}eTzq2B|^Y!I#kVj`PqtXWE#1zT%n+uGLoga5sQ_?fMidvzMF
z1RK|*S9vX5tgRTX8~+aMtD5c0jeJz8tw=`q42dTD+>0wEK}-fnc?w3}Z|Ma!ldw_U
z8xMVhft*O+MykF|wCPuPNFwX@nRkP;({l&}7)}7m3+UgKShOnbUibIvE`-iC1onA4
zWB*eQmuP6XXh-yQ;u^vVNC;7YD#*Y5s5jlXOk2@gIQXYXEWb&MNr?R*ewxOC&NHVr
za%ggf;@PdSN@kGBlTr`z%T-6^mDoj;y&s;YtsolR7PLsQWm2Lt0$PuhXeL1;hw%2%
z*1UQScB{1NHqj6<#Qs&r7S4M)f2q={wgj;@Nhcom5?StCoTXeIe=^y#Z={jVHKMmD
zdprCs9f=Dk1(>r@ndrs|+KPa0*}6zU=l8tzn36Y^t>dWS;>g~>YPPv7(RPW3QMc}w
zK2{m;1r4rS9qEg{m5mktvUOhcBjev<HbRV+eZF;(e@dITLz}><Ht?xkFMf|me65^@
zV-_{>72-{@h(N8jpy89z%m&rkg&U)6&_rKa-DXdiz<zC3w-My9RpP4fsX6hL@M*5>
z6o|fth01FV0g#i`vZxNI8wB{0oplcMYjPW{wb$7bmk3ugv7Kt#DCmAoy{+mBuE1)>
zmQ=M!Z8uX}3ae$k>fAeS*y-42Zcwu^2po0!A>;1Cka2HO$e71AJYi7YQ6bT;8-i)W
zpvI%WEiGyKR@Y7k6k{eiXuiZ4-(BX?9>FN`jC(6fnk3#`$v)k>4qnNPdS}e(;=G|w
zkcqH$CHvw{mD=MiB~8XXm9D*JN?$VG<)`cHA9Lf8iW$lI*=dJhC?ohit2L$YAM4T%
z#y-W!7TG@8`Dyo3>9IcSv#E!Vd#B>E_WTZXOIw|GKY@2C{fV5&iuy1xAs~7~;*y!e
zhW?rp*pL@bIAqMh4DW3@!Ic$(mf_TML?aL~e^Cg8xcmWoRpH82Z2HZ5v=u%-Dp@M@
zr+X~~3cQJ{LI#1&_eEdxRT2C5zeOV4lPrkcC}JexxGThcKzm5SZDK&t^)D?Z_IuuW
z#Qtql4CYj|NRoocWgeVVTYQDmHiPO`$C8opRVvN_?X0?tx-`Gn$ikbTBVe5z4Y~>=
zEv_#0IXW~*m5fR?+S%r<L)qr3mN*9`o2E&v9K<MH*&h2>lYCh>T;KVO+b`mZ2Uh3N
zEmTE`v+}Z(;U3KB`c)X9(-%+H62YqRS0Y$t3!7vX{DK#um2-p9U1BBj0PhH)5At)R
z*{^M{9_=?snO)pKiV}4GC~$%UD%rA5=%cFNZCdklA0+pAvu<iwKPd3h>nE^pBlEU|
z6mNviYdm+Oi0MC{`b9rXfr-n_{wMHi77XOyfWk-^dwTcfJ+j*fWmsnSnILgnxK;%P
zDIrO<m@T8nYQ~(iv}6mlES7km?0UKt){tQ_`PkpCv)7TbUm^u^biV_^>-GCYVya$l
zm!clv`{jC0|M+6WptAlC@dK$?N;8YK1#bQD5!`V+W29LyTMC(x<%n1nJbE*hffN~!
z-2RYvrEzK-(L#Me-_~H+H#2q%v!EOOPnK#7e_wuFXfrE^pFn&Q4H)%HH|>55wg<kI
zZ0bRuy!E@kofYf^MX}(W`&kvgr7lSCa(nQXq86=L?zryO^?(a(shCf`9omgF_+`d-
zrvDz&Qxj6}P67Z$b?w^Unf{wmlS1rTlfd=wXGvveu16IL$lqIyu#sigadj);TMYQ>
zWtKPy^^C9${|VIY4i|01Y*v_vBNs9c^-S{s)n)8<tf8+;FQr|(4>53=o_cC)kXiu^
zO})(wet)(cYm+L)X2>Bdyr$l4vnTjB{Ia_p2?pnVo74X(G8}PGB>ws2|LDKM`olNE
zOj{s#l{8hxlHoygvTPE=XS*sa*&?UELC?1VZGN&%(odupU1@88$n8RyG0j`PPOR+>
z|7Emqzl%=Q)q$|7X;-c{3(g~%fM&`4?Ps<TRr=6f11LLy#2KfW)h`<U<RaEZ^(w>v
z4G*3FliDv5{$0GwUuOgI>5Vd=OkPp#U*<xglW6yTNm(YuH|vLDCl9Ax@Q9?0C|JbL
z%rkUr2Et1RDzIT;NjGvg>k0L(G_YYJ+Sx+{b6<V7Py+l>x3GY$iWlU^*lFKWo{Ene
zT_^4NX59+)KTzUY40t;jbf|wGbw_>zBsFQo{Hxcwe?Klw4s8}?jGkB^sq*I`i{by6
ze9^pY;+HYZ>jz)h2yE-6)FwKzoD65gE{Q=xMRU4HT0)XN&B1uZoY>X*i0dzr@Gl@)
z{x&H61WRfnDwXtpr%uJ4ktDh0F~ee7&tWiKseM>%^Ni}QWWLO`CoiaZrazUL@R$7$
zTpH2?mrw-@z3iX|a<gdsdkUWVAud|Y(;oVgWaxMF6I}g2mgi<CJ7k4=?ZpzXH_&KC
z-T7Luc^5&NwgsC%$^BpH&$j{X?%aI&x8J~kHZWKI>6foZcjbr5wnRSO*PO%Ri++4a
z-~R!|zYTiS&NWZ$ZT9PBoY>3g*E{mnQRC@>+gki2dM@K;2g@LO8IM$$$8iZN<9@w#
z>eQvuU7d*0F2AEkom?|lGfx~~<PI=S)WFL~XXmfd{1Dh$q&>6%FoZ092e&fT5R$6d
z_H%2CPjCL%kMZ39K7Q@)<Iz@Xu)Iac4n;hV*{cn_u7ihbco^Hk3%?`xYQ;5eT5)v;
zarGmcg8SQp(T_WVC`rd!;Q>Wst*R`MfV9{_*}l5>FUIF1Ol5C83VSu2*sFoj?RMT*
z)Fp5|q?`GN1yx5#LE}AGpv_-#?peHdyz&!8)-d5M<#vn6GBg_>DKhH&mT;-QFbw85
z_A5|GZZGm_5B*$VfQXNfuJq|idntK{=xA+<bQ656S*4qLKEE)(dZAe<NlmhK$3&T-
z9B+5>AftF#Rd(C5M%G1>s_u&<XIU^v<UYzN2^fgZ9{sy1)GlW-I*EkpM@*s-$!U4#
zMnMhmVL6S5%-Kc%TL)gEJ=Foxx6nj<BfrWvV+arEb(VFW?ea6`3FvDGx5tndHAy=J
zHX_c+bzNv+f6$}1;*T1X`(seP3cytPuQJL<+NL&!itk*iR1p%Q!|klx$wB}}?Jw+D
z=5(-PV`;bIHhIq2>jq?;m#IDqv*=p(s-B)9^jx}`o6${9+vsU7y?o^8UT!7$r1X;F
z>0Wle4T>wi5Ag^v52Dpj&TTH3DHRj_P%!$H&$&SmF3nuipUBzL3z;h=TP4Ap_mTy_
zxE9^U_rVCSUIkLoe|!g?s-t-#!tS7I&)rA*3<dzxH;)0+&eu}wRdgTA_$>7<@QMFb
z4i@A@4SlK#zS!MgC65HLkjp$qRbuwwkl?Msl@8X>cNr`gH*tB;CxPZrf1m{8aw`Jm
z3lq>qfWk~BsK@$i0?o&DasPonqI%VgJ$lZ)tOnr@F{6D*>;Y|MNS>%}l|}$vQ)f|k
z|MX}zf&|PF<~({?O{*4-OIMH#Ys?E1HDx=A6wb9aXgWm6R&dco5hEh4=y*DN3;wf=
zx%V7ru?wo3;Lr8_-v*6xm`sY}9nq33I5=TI))i(hXGwcPWgU^XuQD#&4+kSPCJR0y
zQ{CN{LGR`)he@vim>_26bvM{(IcJmHbALbP{=&&f^gxlea2`Vm8py8`+g1r<7VNVn
zz_t<|F2Xp99^_;j4v{_Oh;J50&<M~+bZbtVJz5<GWpXi7Ju0shx73~+epyw?V;-Ea
z(G~6J4Lf*p6A@~NnViN~X$Fgj?z*v|Z4+@NQQa<5M5+t+R&c1(th0}U;mw%elsubx
z2H%h?$YRZ=lN^mr=O=S_6_<Y*&qxfGgIszks+s))k9&X2nm<5LAUXQG_a~f~$*1mA
zF`pdMsTwVdxXMYJ`)Y)p6xq#X0=4*5V2D|#G~Z1yJUxq?lj*+qz1n9z<q4Ei%zR9t
zsISicIk7b{6XRKq6I}Z@q)nx4{tJ*GNep)+29<6tB9a=~mSJ-wLWH$uF>i_Zi~LJL
z#vYgKknvK3N^j&})=8E&F#b4?{QRCD`-QPSa8(VmM#2~hN~Q*hE$DgxF3JT}x&0!A
zj~ed1%#Sx*tmC>z?BqSdsSxg3LY?(K?Pz^teJPuWPoY`CGggGY*`}M5q&q$M(GVUw
zBwl5OeuP8Vn=|X2=lP%;U$~DmD7U;WlDVnT{_-|+_Ii!);~HydKaOJsd?ATZus^v-
zW-H!w-#w-!?IKM`rW)oxJ5DeO+PGZWm~oXHZIn4PN7PtzQ5t~yJG`nOorzRiJ|U$4
z<{GoAknan(b`Ex>PTbfq@_ifsHBDVvuScJgF~BOXkzdYo#T{M-t^I`)i}KtI{Pj8~
zz$fb77xr#0Fci3Hu_p!on*xg2>^v?-PZ_^-H5jt)@wy78ODlA)#p`tqF*98N{ihx?
z&GL=g@wb9yZ-sv%Pz98!(c;j`iBmrys~ZY%)GeO?+%#m*PeJx253;~m%Gl>Ih|~;f
z(V!YUVFcRY5uD?Ab1^|sl0%kUf|4=RZtNf}Pm8yc1`cJA4MX9NvyO~9J9pfXq>^2T
zqkF*uxhgeAb?*HMVw3tA{piM;V?L$%d7+Vk>+q!uT+2m25-mg&P^IiWP+>WETyF2Y
zoRbw}gEBYk11@K1P5!$<v?ec-h&BG4xgt}~Y2v6>mA!~T)|lt1BV8%d=;EKubT(C@
zFgp%Q>{Bb)&sE7fIF$rvBcI`?hcv;ap*MGN)6Y0eIEEEU<)(iiKXN7z?_j)G&=4nt
zZ-aPla$CK&KvG$$O(8BRj1HsCpgE*uOAn<~2L2I@5_t*+3PM<Z5?pW|-_79Ayrzi`
zxQe6V){u1z*lfd5+c`C5oJ!}uDl{4!i1h???Ims-yfT~WEKp8KgjNKN-XY_nJLb4z
z*^Gsrp6DL3g$8G`Rfq`g{HfskL=5C;q%W8Pe^S$=j~JlE#n8<g<IKk}Q20@>?A;mH
zvpp<TPAzPob@q<OJgbX{^Z?b(x<Yz|J>CMP-9^f;UaFY%5c$}F=VP@LGN!>Gz!m%d
z{vhJvdd0g`B27#?zVo;E^K$j37Mo5gjI6-Agnl^E8JCZe&EHN`$hn)ugRNfXd<=ee
z;~Q|`2=2i`+!J1yPcKCCEY<81a2eawsiC?EAXyNofs^Kv7`6MWBdH3`<3c1_1$Rmd
z*06IQ5)pWZebOmdZ6b5#>FV~6$WQ48>a2p%Zn0z>sdfg8xPuuXOQVXmtctHCwR}7J
zoVhBso-RoG2a-Nz8|fqHx+g8wn5E#ba~35LDw@1$ab{6M+N!h9en>_$xz#zIBFd(5
zASoh$8`KA`%=^C5&p9WMU&SX?3oGs>CxD~s+?_Ogt2Fx@&33+@fsg6^T&+QT0h8f!
zZoLV^@_oCuLIG`#jf&WQc?1wKxe<jmbPC9nUnPNRKPuV6Ml{(uhm!+$+}=j&hMbXd
zs#j7-iQ?(@)YYuxm1&DatyA|ib<v(`6vebXRvHx1<P%asH+wS)N=L(fUD6~9)W>2%
z3SN+2ny1aUUzX|i$Z&y4gdC+Lm2;kwl*`BD4Q!Jb*MBAS;G5x!9`q(c@6d`cml<wA
zYC2m;!FF{SoVz~Qo_Z{06affx60#92?yH*xo%hi!%0%5L=#WR`<?SkXy7xWy-%$WR
z^aJL5CTQ%<Hxsg1(r;`h{W8*19Eb}zcPgt@`5yWU1;1{49f5*DJ&`)y^iP-e&4OE0
zH?}Z^BeEkukW1<^=G%*Gr1~G__6qz%{e#sIWI6dylgEVrEPmuqKzTmZi+ZP^qzU-Z
z?~|q9zkeS@GLdJjiazo_fpJKI)co4xWlX03o!J7Drtr|zxXsc!`#KK8b+clX<cR~S
z;eU=t{Ebz*f2sRTWNWwW^pXX%(TItiT)OfIFY*UMDSK!@*FbA*L!4gZIoFew=HI11
z-T5V(REbL|;q@mYKcIMNugHl~Nt$c!ep2HL8V5PYGv3b>qPPf$Jxq*3g0NiCq?j2*
zlY_J;*5|chAKhbFe1{r$*I#4aGA*dBJ+21!z<7-_*%0=Hr+4R*7eu6PX0p88$nGjA
zuWX*EU6;jhAhzj1{eg?P*G+aKD~PGp1&M0$V9dgEZWD)X1M3eA(PCnYh&^|_NT@fV
z3*tq&*sxT$`qzo=Dc}sg{44kGWU2Ny)P|HA|0Tbe7T!@UqSvtT@?&f&*@tCMs5aSo
zu_y1AeH8JRR=3U=3s1D4vuzb|p;cRfQ8ua~jJqc4WgmpcStHxZ`^-97w$*qWtuo?k
zeYs&`1XL}8s$GgTXW4-{#lf;~XFe+j=daLL48c;hL{=ZA4-1u{$lEUiLOCmlhweE~
z{CVOdNknri4c#sI$iQss#tb2+>Df7p+I6+~K&W}nL^9p+M3a5BnCOwLs}RYCy`<*}
zfb`l;+KN*LknkA^A@kI?8YZ`5lJRExyM~EPB~2OY58ae6P<mo^guNfD&a$S+m*}#5
zT<5_j;4>-Vue22tn_NI>@o!02;ho%m>`&|wq7WDR1aRSMY)&rf7&QQU{0YG8z$7gu
znw)wOT4Q^8lKGY2=z)=1>>3b*`R%P@l>}d=BKbR`WIIDyJ%ph<7pPvae}ON2g~p@V
z=e(}ADUY7HpwiU|Eg#S0W*!B!+UgfQ76Y*}FgfrOy`(L0Q#u}rzM9(PuU-Jp`A^w5
zT6CWnZS;h_(dKlJnqI#_^J+HT8+5$w*yGCQXbYE8Nr>n}B~5|);jlzi?I3lV^Dtk5
zhp<Ge7&^8HY?7@obhwk__B@z-MXnZl^x{a&RC2N92U2^fDcUtMa-0H}((S_kfHvmj
zWx7%5Or#RY3SUaZtjG^i;J$|{0?`K-WdTtM43q}sJYef{o(F`W0A_wkg*3mX6>AJg
zQ&2xzaO9#Az8BnC4C-W){7031>UuQ;F8=(UmRY7(XHz4Wfiz>Az+zOh#pJJ(b6A?F
zlR>KS#$~5)o~B9h&p4SL$cL(2_h-(Dq}ShfWC&_vimQ=E9SBLD^Iv=^d*@kv=BJB~
z22>YSkGhF~)1L;F>tRi612<J06PxVvp<)k!hLdv>qZ$5Ai-~_B7`&7-9&o?&l%D&K
zux(|nS`2wYhFH#OD9;Ytk`^r|O(=~J0``ZlN}(_p`REK{P-ng@b#2A9aK<e{K+0X(
z@g;2>pT-x(7M8V!-^ZzTXs_zhq1oZxa&v5AU)6Qcl{__Zm2;t$oJ<lK{{!J@WhCfb
zTJ4K}qE6;orRxF;L=fR&6+P^R12)7$Lm}|aXSf`tCQ8V1kBOS6&SjaXwUm+(JnWud
z1iA2`q={3Gzo=7=@9gj7r}iS}5jpkf-iNyFH{HW~B8V#wZPu!8EUJ`gb#I(S5#zei
zS(8Xa3wo|rtla6eVrx1nTJgkst(dDli*H-172mmBD~>d2#dF#+G&d^Do`?o?RW0|m
zS@ksIIx1jJyo%XkqS&|hFXuqV@)w;xAd7?JEhrlDXhPH*Zs9t6SVBrv=l>leY9{k@
ziYUuwOBtB!mU3B6RZa9is!k{aYC-ix{8ZkD@MK?ftzgEY!Bn3<#E%RR-(Db~R3ei%
zz+VL9*sY!q(*9Dou`8@XWudy}-Rh`<{Q#XJP8xtm4e*!<JSGE=+knTNZNQ}ixa`e@
zi%t!!Uxp*g*m7O0jd&@^j6}emP~#C{C=nmZyY!tQ%lz2Gi6q1jq>}C-WN)I|ODi)y
zZ8By(WBy&)Sz>K+cp-xG{N0!zQ2Cmrz(_Y<5@oPqHSlkh5s&ec(er9_ad0S4#vda+
zP%kGDyXjf|8hM9m?vQSFPpnXC<E7=~Vc^<uKBP{seGNXRc9B#MqAlh}uC9aUy~0_*
z$5R_uOC$o_QeOcY!4U*UX0}P5w9)U{!=E|~)so0B*GN&e=o59{hG6llVGLp7(i&;p
zKkl_syp1agG3GJjGC*@&k%UM&SHA4-Xy=&j^=~eba%+oZC`fJ}{w#-U8jINVV_%ch
znDG^no3w^pY6{k3ix8K=kc5k)JaKq|I!S;DT=w#%=;v*z)KZA=eZZTPQGrV0jXZT;
z?e5czfq42--t=aMKs7H35Ndpf?PnI{xPeA#aCRRqve6c;4;5p5m}*g!-a-lI@auxq
zRM5u7Qd;rgsh4flwb5JcFP0uwR<}Sk@{k9qL}d}*(tHn<sagZ`HwwyhD-eZ`R=lsC
z*Z@{0ooxPLNJ4Kt+z79%Un9tr6@K2Em{9R9CT8xF-uM*2?YkOtvN|7;?>sO;3|w3g
zGni%%X!fP_H$A^Nw{Ibah>XgcW4%aDV@J}7jM?(~mIhIra3M+OGz!((brtFLo}pV3
z`=)=1U*sDp%T8#0Yjtc>_y)PB^oC%fMNaHGFO>dH37VXR;&z(g^dT>xtsRq$+P$@v
zO}ZIwF14R#U^N6dJxA$15|8G94`Gyd7zu-93uV|?^}#n$b0h#GRM-Q&z{4wgBSoqG
zQtrjd(?^WTC(fLloElf;RW=Nf)}@tos+C(*E0I?-i$~Dh@32=sMtfUSdue*$5ra}r
z>6!CFVsn&>uG&~*qk3hBM#_q}@kr(nR&^7P#-cYQ54xmE#=CgyK`ofXrIMA1FXksJ
zm#P!-W$+5>(TERmzmqu36lD{jz4%^f#E37Iw?tfGFDpEZ&Kb;-KMV&Ns4rtp{rvmX
zX2qwIA2QcSO&n#(ZK84AtxmoSydp+Zq>YneMr(~2G$u0TS?)O6hf-aAqfSU`tP7h_
zx4Iu#lhk*+>|q}ZnUlt{w0I%dUt`WG60#$vtte-uEv16EQS!?E8TkWCtdUgv&trUQ
z?SCpAS@qbbrH{&g`u?W{Bz!7`^yXc?#H~rWe$+zU9z4>-5c6<LMX8IHKmkq9ae-2M
zX~_4Mx>@6~Gi5VeBb`T|P3!=f2=JAYguyE9D_pGIkt`{ac8o=N{B(|F#0tJ<JfC;s
zk6j!rejnN(b5moTn01xa?~*I5^0Th8hMphtwdl3Iud>PqgnV6kS&J6kUBpoEq~}xn
zjnOi^$nz<EAbk~tNmGwCs+|#QWLCwc`G01L=&nGck5JPlsSl~t9+YM>V`E<ye9Tx1
zjku0Yqg@$p*{3zery*_Bc0etygp7|?%a)1jm&^yKt9p2V9^$JdNwKDe`0I28PY4#S
z2ZWH(KGr&M2_MRr0!wjf15^Sy0S4$JP$KXgxN$t_F0jQ#1^+Rrl(lBG81ZMRck@^K
zKS~xjrKkW6OjF%#Q`H&j)4|CQP0Ghwtdov<GZzwN0KVxGuR!XnF;FEhkzzC~v(|YY
z^wk_cRIeR1Bw$R4^IYjZpZJjYDxi7NW!2w8;)Rg#a3A7L%LV`dYex+}D#e^xirgB;
zQXG?nKkBvPhlFZ>j24@Eu%a{lpWcH~g&OtdPqKqnzmr0~T_ckxw$ni5$r_YjgeFj(
zB=(Z(B#TeMjQAd;gSGETyF@gQ0ho&fBN-kmSw2&JvQB%yB9D*_AwT;)9yd=*YS0Sz
z&oVEICVS5-CxEZ^$R1WYZ`wi;I`!IqFYCS!E=zulxYxwoL1t)#|0*kik`NweCnzwr
zaeh*cn29UGSK6aTj?2p8d=Sn<i~pPyIX_n&G5fNxFxI(5Teyu}<E>~j!MSGSi%O2m
z)RCD4uBvE$P1%Rq0*N)E*Di5sqC%!n*|%C$Zu<o>Sa9w1!6Stz-SJUsh`&Y>s`u@n
z4X09ydIBw39yPGGeo?c~`Bl<+fs9N4O-n!q^mEOj1C5siwu;YSBmrYqZm@Q=n$a^^
zL~g;3T*X|QxxHZ-f^9C|1`O`!_G{CX@(huRrVu~h)y<)pv|*Ban<Ug;J0xgciQafG
zCJR*!OLD!2^&B;ARSk<uNvUeE^7yewZpy(_eT91ASLJbYHIM2;EyiWpVhYmmZzdvW
z&MM@xt0F3fMCy9+H}*G=<bYTTq->FE1YUaC8o>%J`VOCP0i0s9TIE?=F}h#1c~_pX
z-e~6LW}~@jm%qu$2^i}MvI6Uh7}r1gv9GdePwxgx5YK217#jjjPOh=FiTJW)HK^qu
z{lwQ`b<kD-<oev#ut;W*OT_X6O}l!vbpnG618utlO`X{RK62?MXX?H{^fO=dQy<Y1
zrMx^@LIkQBp3C7UdH}V^)i4lTLze6AIL@uScH`IBTtTq;|Ne_i?81k@Nx`vvg=1rL
zztQr0eWMNR?L4kjBeL&*2QP<v-*|Xw4lp!FuAy=HL$j|!-osR%fxO_ZTTj5~m*rea
zY2BQWr(0K|Y#y8E6sgwg`9|Wq2*pwt2P&4kC!e=N?XDGH{fSsn_ua}(R~htOrVPrE
zwXeDqTek-aaH6g*&2#x<^ZwlVNq5X|Yjo{MG~tf<{@khB-2=4ZJ`TP?84{^`dauO}
z0loc+ERLn{Oc1?<Iqdd31$)I|u1nq(=E!Nfn7!fFPa)`HkMSL*lC+*UW8A_vA1mEG
zZBg)mt;sYE*l`L|V)Z}L3+u>#3g2Q4TT-K}BmeeCKyvK~3M6XYxN^sujy>AvdkGN-
zmvn#L_KUZdsmns?U%;yFD8E5_==Z=}biWeKD>z~dH#?ntl2j{^Gp@^P$vQ`&{IWbP
zUVDNP78-to3VB(j7N5nt`2ByH&u@_yKZo}~bZ$NhSSb?NH@ZJxy(g(4BMUHIr%GG~
zibj|NxhYSC32_uwx6+Ncj@Cc_p0qxe*00KI$aX>snv6$Vq4u0=ZN+EWitYT!9cW`p
z36o@1bUf9c@M=O6=xnplf<m4V*4>o#MqDTeHONY7h)X8C=c`e>NOV=XzT}{UfIxwv
zcJvUn&E}+-$LW-IG3s;azASKRl9h`XD4CFwvlK~<ezJ!Rx=$NNF@c8B{n-&3+#O+v
z3^m%ZBia?v;`I<r`^fs7EJrL4()cTlBcdtNX)S7?UbZIrkwpP<RlPEYa)dj1xv<KI
zwn<oqjjq6X2IZ>E=X8G1A@FaY_*I0D_=WvZcVjs9m_;Q-0CR2a?5qY_{|4Pndc<DC
z!e5xD;s!*x-`kIus|nkqdwqfW!{fEs)l9R<ia~y(iu%AVz)`RVzBG;|rBmyQ#D{gG
z*A+T3`(f^MAXAPHa=gyO<g}>D*tNDubt-8O<O+7@CnQRDB+_ww59`8ZPs}y)IgW$z
z?E&q{jrfcfRL4FG=j*jw)8B7ikmEwAd*{Irv>Tycmrf##D3r?Q-UsOrd(B={P*kSH
zzThFV!g?xnwvZ?tB3`m!7IKGRPqiE;Kx0_nFNxFvx4l~SOZydkC!k$Y2IU$UBK({>
zd|1O^@Fgk=)!tTwUL~QhP#r`tMaI9NrY=(w-2b8MQh6-D7KNildTsk^Dd;NAoC6f?
zfiLDuLMmaJ&NVHOctpCK4V2BeyrCY}V)s!Sq0_aP$%8^87f9$()TBw61oJ|U*U{h1
zN28#aOF^CAfTn^5Ces~gsOCT$Vs}h@$rZOTEOUS|L3kNI7=X66;cR*Wl!T2y&qg(1
z;1~9Zp@Yfv@Rq1PxZEVNjTF@{P}}Azif8G?ucM4nn<UB@O>YkvACxHxNPE<zxt6%>
zd9xKzWsZOkdMTL#X{{wLTWab&jA@j4SM%3|vJOR+y!zg(D&D26D&F<W=A*cWY5_n}
z0O>LneVUK66a|UBNg?!}hu97T7H(tkY3UV;EF?=<usBviMnaJu3c%{Sv!5rO;t!@x
zMh}b|ijb%9TcEfr_jvG$cJ(#Zql_(51Hpu+{_rH^CV>)=Bs@HmxLmz(+l%!gPxgwj
z2f?+tJd2jHSoA-_h0q^lV;7SDqJVs+#an5yevJ#I*c66_z%rfE)GI)=Tj#(Txl{~}
zS<McYf{+83TWUX?AoqeLQmHxvp<4NhdD>Q{kSk!k%7kf;y#}}yh%X<QnjgVx)`&En
zUXSsCq-IWwb0;gO8_Y7N&f`6j#8^Z*)+xkH?_jsHyJYNOPH(!{U5~WwguHrElr?kS
z#3ThCzI&lcfF+K{n>#Pp_ixj+;Cg~ef#i-v8cp#Z`;|0hT7p&4)*?25egWgkT!Q70
zAc*N~`{z;o1*uvrmsIBul=1igQ?0rmF&W*c!;aRGP`erRuoB^x8U>*7hbR_ZBT#3j
zy;;qsOb^wL=fz{~b!+h#P^gxA`4<(5lDLJxik~MdG@<q~>0!xs*Y>!i$wNRF0s>@j
zEv1QhYy&MTQvEVah`C5shb)>$nCdF?X~A)IHpvZ~S;jV28UEi-3uvl~cZ*sq#{QSJ
zb_g{?c^VY9*nPn^aAF*#oZpd6_XXv=zQ|eLmtJT2Oav4eYMLH;cnazY@>dy-a%=Vw
z8hj;Q!vkr2Rn)~>Cqh@eMIhK3AIK2A;UW!msmd%_FJ9I5S*PqwYJZ8xXdQyDa@-Xc
z@V)BMeRj7Iijr!N#MtB&@(Zu$%~e2qd}GyFPYcO{!GyzccR4xIe2;;r*FZw?G~HB9
zW&(1BAKlS}DPD~_qFxCWMOw^Ze+u|EBLE3%;8=@dUi;lPE&3#r)y--lP_s;2R;wi&
zk&Byw6%STS1|JJ?P31S7;@rx|?g09xiITU56*kF|5(eRyw65$urwfGKea4=1Uj`{r
zdxFpqtaa^C8xY^z9WahV|ErquEfu)bS~lBHWU|dAf(jmBxLCtQTEPPkJ-m*1*bR`n
zSFZ~zQwf7reVY5cZm10%YjSWn4YOUmRQX;*^Lx%wcsb+#G+t($cgsj+9}#X-$Qb$u
z!4<T^GHkFqwV#=b1W)bqU7+<`xk#z_TZMiYLAyJevssBlYJ@3x_84OKP`u%lY@aIY
zKcFp2p^;jOa+3qwoUBE)&1Hj2>}c*{WO2U71PZ?se^wP#1Vt@QwObJ^6MR;SG(g-6
zZ=uG|fDh=#jN3#D+l?~lim&=V1;7Z$r3sJThhJ>4_MJ5Qc08!zOd-+JGb~cPwY$*>
zUvdp}q4QODb5R!~CKQd3WzlnobUuJZQDkQ$)UTU-BAI7U&lrX5yC5*mUMvn!0d?nf
zkJFYdAU)2DqKdWlIcq`j?%D7r%lRz;Kjy|=vfbUfol4a)7~4yLpQ(5Wp}(KVo0=b?
zohJb4Zi?%YTH-=cxwb;l_|!r^phd;Ovb(p#`LesW84LLv_PSICcq$9Jp|3lbZ07)I
z=dBH;&4Eg%7fDs|SFDq7yp<BWMZr_(l`OfE?NFff!nqNwg4iewd`)4TVtLeiyHK+=
zG6c-;PV4UQ#2#o=B<B<{miiUYN+BhW-9>xmOVXb3=|AfsAo^gIQe%Q@IcR8EYu^=i
zok5@!)7#zZR%-43@&a#Cp-|F6=M$-iU0x~M?SHW7MRI!dbt08^-r93_F_s9`_gErD
z$6Rc+?_H~Cne0H_XyR=WkT&Pf$Q0dT*nM6bu{zqw6o|4=i#gYj*p0(g+R988U>%0h
zMw7%ZbIzw6Qi$EzDyuyufH?PmOS0l6wlhIki8MJEFwAbL=m7=Cl$d{Uu=cW$b=xa&
z>cSs!l5O8n$<a1;0%aXDhB;TM^;s{|pFspO9=ioB^xs<S49cUe<tmXed4%pGi0+vD
z$aZZlMv6(hjXO6w#X8=8?|3CJI<G+((-`#%q<Ext;sEDvL{!L&+9*Zu<rIJ*?xrXm
zff1hx4)>Vj!9B2}$Xp}T(3@#PVWRVIYGu7WHd(PST=r8U%^0s8MfM*Er^&t}0nNH0
zM~rLmC<VD9r66$*d?gsMrirOf?RozmD3+xv2~CX8z8&)|Z>KYqgyxJVoOQQsq==g*
zG1<E>JIGLl84^P0aXZfYeBc4mq<_x;!`qv{M^#;c|CxXg6#7z^imlqHSc#|&E|nC}
z3?w+g1W{D1tyaYftyL)`fExs72J$)%P%YIi)GlhREiGC>tO5a*AZ~yQhzsD>xyA)I
z45;MyJ?Gvx^JWsP{rx|`zn_-8dGD_0o_qFt?ze&4@&Ob8tmpuJDc-CSXE25zQ3|Y(
z50I<={Ba{NpM&q%fxzMddi&~B8h#dbmD@RgXCLQw&avi<ydC+pAXt`I4lo1xno{Lv
zDIhMYeAuhUSaZmG-|dN&MrNc2h2$fUUj`#%vSPE{dR7I^yuF1zIf_xRRC8`)-DBf6
z1T2G@O08z~js-J)e3H&oJ}}c5e}b7_Ozo^I4l(j|b;y|u-=tCWwB&#OLsxITA>gPI
zxkog2BX=G{GD~S^xd>1>w2M7M^5pk1%6{@feB18GT5}cUox~_HB`tRAi@K5%;GC*z
zcFD1ftfI0`As1lMv1ZxZ;jfS6eLceB*)@4ZrsWkGV2fNu5!uVJaqXe){98^<yY2if
zGle27{+{>mITYCA{w)R6ZDdXfEQVVZJ%VY}n%-0n8C>^;?s9HR46egU{cE~oWG=$U
z9GUs84%nC}2mDt4)8Gj)h{!b~bKmAcqI6ydcaH8?Qe^Ic(kXkFEfE#kcU(sBVjVAI
z-ij7N=2n>z?2z2Z?#dh4Q5HU@lCe2g<mfyQR+wtOMw>3{y*t`E;zV|Oktq>aSTz`A
z6XK3L*J{dos0MTt2~ZUdt3j#0arc#qkn$;{WI1^i+_ZX1TDTlp5OSQ~OowzA5ToBu
z%n_s644~lijL_$CVA%3wvm`+_f>W@*M=5B5ykUpPMl`b!OhSca^SHvt*uwHAD7-^D
zKGL?F>CJbu6`3ykX4h4``5l`Io;~Lz8qRSq*%mM6<SbJmyjFQO7a(DnHU<K_6luCB
z`jGs~iof`so<-(gtOX!1VGtqsoWnS{c0tx(dV@af3&e80xh<?_A*o7(MP`|h5UWPG
zB`DM<RWF989GFj2V>y`gWrhwI4vwaVuLX-SjCBt{whHY&H*ywT*pZR@nU^2OsDv3l
zOmQ<EaOLZ}k{IK~ke=f>0HUCfC)=iQYTQYJVLo^2z;Z(rGBoasaw7`HotCvMvqQ*|
zQ$dN$2^MYp^Bl}#iC{^s8}EKH-lN%g0pH0)cw=|g$86;QoicA-LBTe8bA+q9i8r?3
zeZ2OTi+eBguoU~z>l8c66}u-}Y(B+u;7cu*)$|uD4139#%3O^Z*&36z;l(29T9zpD
z2=Jd$%s)J{?W|9*eEDEFrgP!jLxnTF`EL3a_7=<a*7nm*yRA&NrZalbTd45z&V{dF
zIaMN1fh;EqIAicTY>j&VV**D=^6z}zoOzVV5sFZye{5`p)i9i&3J-pXeDhT+t;ZV|
zBW%Nex^`S$AJ9>`F$bdu)}{K~a29SZVlOF9!WHmO#vAQ8`>__HL*&_c(Ov8SVFjY-
z;(eD6%$RLbAmqDhJPJ?Eg>!LIt>n~i{-@r2nk=90<kR@f#J=`SUMS{C(>h65p#Ldn
zG6@cB7qaayE@E3N1@hAe^9bR!hiGF&L_xE+s#oEvV(#DJwCYkyKuweq48tRq6qj!1
zt)4{s>d`3`|C8;AgIM?Ka1Cz+vs07HL<zYORFk_-u&vGH5hwP@GX*}$GHFi42q{4#
z*~58V<Rv#8roV>Buh!&8w8>|lVicDrwswY>@?YZ&STP>0hJKM~dW3rAR#QSOmNkhT
zjTgIl5Ri@yzo>P18UHeX5Nye|)}L4T>7M>euM9wjE^Vcf0=v|F8D$+|fczi{rjQDr
z5J&~cNb94?(aclFVyV}$ScX43mQHTv*XWML0=CSE&6Fe=q~08=`g|=nVMl7jdWYD>
zt!K#z6o&|`=Aa4A%jCf&oQ5ciJ|KWtogB@_vesl3e{_<!wk9uf&p7IOP~oE+`v66<
zxI1|MASjyJpTko`b7a3%yQdB=zNu1Z3Pe-OWUid*@RqM0o<93nG>zU1q%St)Jib)z
zXpO*fZsoBx`8(HySF@UX*!j_GmA_byKKEMd-Jg~YR&ML2&(iJ6ZQb=*hD62?eU^c)
z+}5Ml+G>CO%56RMoy>0Kwtaf7y=>;I9VM6f^Q9XC7i9AO{6FxopwnOxa=3_c=sy{p
zH~S?5bI8@wQd-+>Y$<s!MT#m$iqaF>tU?pjqWBnDCxASSUruDfOR2xo^JRK$kcz1K
zA;;jO%}lwoo4Ay!VMVEhvNF1t;)<n&eLt$nWFPA;8w8=3mN9*^Gv3N9yBtz(x5Ff{
zBWNUQQXKo{68^FA;Gozd+7#$UQ$6GD1hw43vrMDJPNQe)_`38R>twX)`BGL~M28_s
zS-)l}P2o%w$fxEDSfkdjxdPw5`ZZ5E6twqOY2fviOn(MtP5_bEPx1fY`9Bq)HKi9&
zv6TA<y3gEYVfiFM1f)J(1uRbkmSZIZpoI8wfuWH=UFwVS6H5={K<jBG=3H&FNhTsV
z6intKeAVH})TItrQ}0%s^b(rkC08@hXwz=orw_?fd?yCqdl^*ixc6nIbGwQ9`)IXA
zu4wt{X-A~eGEcD%{e<047;OUw5<gg8M%SV+zd?WuiCNr)PyPuL9>#zzyw&O#=O=bN
zftlLz#7=nIqdSt)Y^1SQO@cfcV*x-giG3JscoHeD2eToZUSc8L24S4drLGN*F|aJs
zPNJ2Ez?3JWJB`s9Nz&o+87-DA!i}(l^iLYspBi-5F*D3U{K}k!Efhi{U&Q&w9}o<3
zq3#U{vaTDqPztstrHBYTvhMzDq{P}!UKV3f^CO3g71-l*q<-8s>o8Tu>BxymQdrLy
zK*|KiF)2)e(w@7uY1jGQ?D^0w=+X1Ap!NeLoS@Gyn)`r%t0VEZ%HS|k!x9`eB;0ZX
zC!G!?)6n`HT|vor?M}_LJ2cnsA8fmov}*~Jv?Q$ujoFL>v>8jELAaYH1CZv~mx6D(
zagXAV*||96cOK1+kU%jSH*Dvfy}VfuN??plBLLHu;UGaW(`ZC48xAIW7X~OMyN+4z
z!=QpO^!{oreZX&$eTq8zk$|O%(YbzgVBV6c5pT(X=~3&d)05Uk<>Fo?hSKls*JTH$
z#}-S#_s>pCpSWZ>du2vVWJmc^)s;KE8~X`2TylJr$WS{hnxP4;d($DzVCL>8o_M0S
zH|H-fOmE4^2s6@;18g7&2Z_$4_g=y4{dsMf0{uWWj}NuidXO|hYB92hhF)(eV~AuT
zZClU27I^MZeplSkAAwwWp4z`_*a!BfI?i99k~+@YcnJ2&Ezr#HUIFL1<XE;^UF!JE
z&Wn*2mdP(UtaQ4R#YES`{E;p!{>7Im&-W6qv39vt4Pj$X#9D`qKREzw1P!BlHdvM_
z-Dd}D<Zv>JJc5aCzbWl-*r;cmyd{fAGam3@YJ|N~{efUYRkOZS?7u~1I>r8zcI~g&
zf3tKU$$JI+En+H~61Qh@J^^;*;YZU9a@;2#WWL^#vDB-G?*cJK&@$a}rJS;S4iN2#
zzgrRC&8PFfnZs4i;idP#DY{g!Cc+ii+oP51yc<VBBO@PpO9lp2d{AZPE{iF%s4j?2
zmSM>-Jo_bd8M2iXdrPvf9+Oublhe0V?)8*c%ssrf{Lbzx-DyDQXMyB3dln@C2zl6t
zn*B<OqDo0zq!8J~(tAyA0zRqz*+Nmas?Kd-OUJ9WJ-1)Rf`U^6NX*)%Ay5a#cYWKN
zbp=s1wQ>=8`b<eSRg$XYa&pC(s}K5Qi=$ZfRjVc0z`9HN@-oVV!;~rp>aZfaqYq?9
zuem{ox;DU%F58)(ZRe!+eJ%Zq7h-^w$a3^Aiwji+^eKeNL$mD;{ex|{Qrpd^tHL01
z?S2`$`UYB<!`PU#3#vM>*)8&nOxhxD2!i=2?C7dxD&kdTgA4Q2oMS4d9D++Fywh_c
zXI<)O_)|{MR37wu=0ILj%ta|>RBlA@Bj=)0{uE1dP>C>(-RBXTP5cIlMj;>j%Lc`E
ztAFN~@&~jMPMFE`7e#5AJacb~{ZPRl7^aktmA9gy3*$RnCFUdt)Rs|&@7k!pvsvGJ
z$rYHv#9=uVzl;AAwySwk%3omnRPLL3@%teUt#V=rl=LPJj?98PkUIw4A+5V$53OA1
z#a^w{8T%`1xM6bcLRhq>GMfP{&M|Gam<}a(_A8~>ji8%2oI&w@p`b!E{zk-f07j*k
z!K$ny)<;*R8@ngGDzQ{?t`F`-kX&~w-#Zn_fPrP?G&@AkABPw*&#sF-W^HrfgjdE~
zOqndd&9&)9kdzBm#Ppbu*bp7c6U0u0hmu1O=5llnJ<Ll~b$ll$Sgk@D6c<9wA0siA
zW;#fnqf54btfoa~oYv06SB--?J^VgkPh|yT0#$V_4g#4KO`n5CV;KesT|Cx%2$JC5
zXaW85X>^!r_?E<HRq>*TYYf0dK>>s`F;-D@8;3ar3F^k(A(dK_!3M7Px7C(^<nZ23
zKnBV>Y{d{K3ZVaLwDNs#PB-QSJW`8Q&LxVr81amIENQKLO?CM?P4sq<?4<eU@h-JY
zRH*7+n|p2amq``kdHHC!whRl!k^|ID%VaoZUgA>b8jY+{QMgH4k@^@3livl;2-cNf
zoQuq@MUC*{>{{TAY|>`MQ7%W$B^Ye(KcuAqW0Rx#RU`Z9z3wW#3be3-l<_B)=E!h*
z@jQ9t!ddyl{hK%oGK1HmT>J{_v`_&DC&rGa-|lt?YIG)nuM8pod~slaUQnvt=oVI!
zGwUZLL~PEMiexIz>&A^u{O5M8B^R<3P0Ms;As|Y1Qreho+~n^-Y`5-^9GMCMkNk`D
zu0^xNVh}Gghko+9#K7FnGcHH|wN@!ac-O8{mQ-2_M^^f4syPLHqudo_@ey(qUnT-Q
z2hx7|X!YT`_c?|r&1IpynU%~@aEl=pv4mnPuCVYHOTdqP=ATV<!j!3&#fH0~9AE>E
z9O-STi-h4s_O}>I4h3G$+m02v55Ee1sBW$>@3HN2`!t`Qs^w<(2>gIne(3YpeG26V
z#Dcv}AVSm152pq4gPu{$llN7QfRKdriFfdRIKDTUhK288P{~PYmb9r<*!ycR|Hr2W
z%s)%lx|BHQXWJdxzBdD2ChRy*jF@Rhyq0i%M(mW6ki6r@>E>^nLw-8xuhLwe{Dc8#
zuM_OJke{;i&&f|={mizv1Luo{=g{wUYER^`*QNyUlna>(<gsvjPT#x3Hu$`V)=1Rd
zbB$)zJqtw9iDoqhKvc3cmHqAz*GujV-P&R4ALsw@bgr&xt<ccXH^4e}IalGlt_~sy
zpxf30TetTatB{8rM!VgY-2jP!^rmzSw*yM@Lcwp*ev@-7*%4AEWIb8Vh9HM~b!2^x
zzdEx?w477S#M^OEmW{U)m8Ds!ZRXeKV4;RFUnK27&XRjk2&yIY$MJqq>Nk83rC##y
zDjs$Iey@CA#<F8#mi?}lz72L>qOgZ3n)D_F$jv=`-Vyi`&lJ!Co%XeG3a-PZyx7Bj
zr$AU>Crz-3+>NQmjM)@}pvead1c8a3+X!Gl8axMw<j1I^x$RA&tPtt1P?|1zcWF+B
z`Cn=J_($xD%vlan)sA~EYo<AcV_xR3yo6XJfB`~(`DZFPkz*8@Nm!!)s(Ay=(D57Y
zPYG1qfh?!^(@g|VR8T*}AyaC3l!X^Fh+~s-v8A%f=Y8d@+@wUWd2G@=i*gyXr-*dF
z;Io+JeodEqkY)<RUDF%6zR*7Q3gU~KM`pk2O#L5tCoG-J0egr<n`Zg!vF107CWo)N
za>Mh=RhXNk+&lt8N&~W<<m9BB=$iX?hAlg8&Xqc|us@qyOw`p9!uP*&VlTjVbDY+w
z>Ow{}7o)jCT5~d7ZfrvdO$^N;uBOR|+QP0DiEPQ@FrV4(#YKM0RewdWFAIVYpGk#2
zz-Mf`#YQgub8yYmE5f2H+s*tL|7TEczHI06wRS`J>yW6bd%dtv+A_x-G#EfJaTz;E
zfH#o&7Q*WKGefYFAc))~ew+t`0cHalvzYd?R>KZBaBh~wS;>ens_Wi0F&B4|wc1XC
z3<);Qxf*YB5C$cLXXj`z=~7;b{XXk}59>=1BcV9e{v9e5h4htoZdLDFU%uujk<*Ki
zQlz-Q((KE`G)9GMl1KOLSro10^ibUzwb&-lBlskTpO}h7`Xo-s+Fny>nN_A{8B$#f
z-cZXHBr?`2V^;N2cCZfs5^3>%c!UPV&eMh#jFtv29hFnN(sJs4vCN3TSXH~erPI)o
z$rdg*@QVR{O66dQ7XCT(!x9F(DS5KD5Z)}c&54xdYp@a84$>9$V{Xx%TP@OkU{ro}
zjI0MPFN1e8Y<vFk8LY>%;__rY*nV@QGT|2i)k9PiZ2<NnGjoQq%n8&2;`#;hub)zC
zGc#kgb4MS;_VzOEq=`A?+u?r;pdFqI*_t&R`V}_Rhn2AV^VM{7wnnh!6*n(RIF*(6
z!_Am)hu@zjN%1&Gw{<&6O{T}OB`@}Waaof<FG2i4u<z8Kjp)CX5B5mVU-y=HFN>kp
z#Eos+d{Yq`2%}%fX;&r03m{}lh%aT~!h|?BuGky|8<?l%j}6LSO8F?J#Ssj^(%HQ6
zUkdqk<MP*&inF%c8TdI4G;`q6d0TZFI#F(`mRWA=HmuF6Yi_lqRooT*+g=xUg{fnC
zthi}rDx|<4Ct_=iYL4r~o_UKitDkI+zq&iJ&WsMNw{rNCm`{$w-^ru`1<gxd$Ix=Z
zk==c6NMf?*93GbyOeuEe##u!)6-}v;ZT3(kg7CbnQ@#Ez)?!XWPhfR$we~<psP<xO
z%@)Nd#_wcfX*RH6CSH|prgU=_%x-}#^0%x}R8=qYoh+a8mQ0UCIaaC{jCr$HgSvq^
zKEAS>m^haQCeGc_%IB|}5!vM}sSMTlB{i&tbNZN^b#v-bd6vzoedUw9vc}ITZv^~2
z=OjLzhMbewJdYRN@nK1L*2oYXUSy4>Qy-<dh+Op1M8*95v7MkekseQBnh?c)Uh+hq
z%oDU~eOadfX`YDII*}*Q^WTA#UbmaroujDBr7`YMJWeJ4cTJ3Au~qmIAaiA`gk*wg
zgO@k$n!!!QJPh2>bPB<$HDn;1FQ#&{k@d+#?Moopc`w?*X^G}4+@$6xVoIXTJ<Q>+
zL7hd&IT!kyx3|3I#pWTZhhLhdj4N!RHOqyChjn(+MulWr_^%UZO%(hNyTb;Jgkb)X
zVF<Cjk8sBveG-F+gr1*AZvu96AG4KWXR_JzirI}8Dk((YG1J`sFy{dm^dt<hI9HsV
zy_^Z>kg$6fcJ_95joR5mwLXNX2B!92Y{`6#^Jd>9Ldg<zr!%wW_8I!h;iNZP!e!n4
zZULTdGvAk&#GBf<2c7dSsF#iUT81EtW$MT`O2M3W*mtbIY}L3L$FcbwLTwT|^&>~|
z7ItvRrS;q^<SsmSE2>=OXB>nUL$A8C9>3hVvl7x5v&fG2@6-^SH;*fW<Ccppj)hsh
zXl4wSoKiW;`B|T?V<9&aO!8l1D$KpobZS`<Ll5}hhi|+dywWJ(agPgEPzLC$_sPtX
z&{I5L&YTeS*PsdDQ|qRFu>AqeY3bhn3Lzggk;lrPuC9Fgx{1*U85;MtWwqQ^7CSm~
zr*)C+OQrl3AfE(-;x<6hECSC7$;)IZgP(%>`Kvu;oB6Z6{3fksm-iREk<74d_c)=<
zDY>sB065NHB}J^6Ij~WQ)FC#i%uO{a5J*W;k~?e0XkSv;#a3F$A+<o7l$eo1wb_hd
z2V0{iR&{6BeA8Jo@BHeXt(pJHSu=w@78o;8*6h~mWWq%1niCZoID}p`SVAP#juGI;
zzghc2G5SqDWL1s@5?FXFxJVUia|K|kwl%A4nORC{GW;-6#0LF<z$8+qxmiL&T~#Ux
z)d;lsxOCyHU{0Ag65(1nl<$X!A_P6O@GEc&>yGG$aPGXjCe1TpmOae2mmLA!1ceUM
zN`h{S&9#LT`VQ!m#s+pVO&z$uK<1QL3m$ZutrkdW0rRj-dVqyj!KCL14!PO7$(xbL
z>%_*(dR)b4QxBoY$?t{W_+53b1@jiPS@_(8LPUkiB=6zLyuMjb-_j2!1Vqe_8GDZI
zvXf<@%x>hMkQ^LdpjSgZ1!Mia1kRQfpn|KUz*$J8EO7KgfC}fKO*l(S){4AAm{3m2
z&)XxS30Ui_H84fYZ<J$(!dq@ZrO)H3N9+#I(aL1LT4GEKWt|a_;508GxBSI-l{Q@B
z&545^>5*IG+qN{E%{3S^M)2NCp7H`PRik3g{P>-0K*E9YRsGL>uG!HuXLl6iTd#3S
z!Q;ECykz?(%Bd|;jiqh>B7wsWmbw5hrVQ`A83u!(+11bAJEwI~oSZj|NE`2RlkP{I
z?8@YA(h(AXE8(48Aigf@reS-k`T+>&VpuFK3Wc#)Z<Ser7~{C2DOV0={p#jm`C%QN
z<_Uy#E=u8O_eN%+IfYG<#T=hG7}K>7ZL>)BdN_En@l|}?kN$}0%l?NH24=SMX|sIl
zBcFt4-p|I+c1m>&ycr5#lv`jDlFZVZThG5bgx#=gGYzhlwLj-_x@iJC&0a?&r$TIg
zhI*;lE&S+oRVUWJJ9yu!Uum!-)lCwTRDycyPl)lbV|YW8mskP{a!9hBwum>_@d&RT
z*5+S<8<kQsb154O<}STeOYE$q^3)Hh=a`s#zKudVhDVwjY6ZuW+og&8>oqgd(ac9=
z?4c}R@JT(x@B?~UDg$j>lcgW2R5OK}hOXL;eJgclcQ3J?-%y=oRN88dB5FxDH%l>l
zF>u?=9Q}gTuA6uv%G$E+44oY=e==XY=F<)tXydS0>OtH7CDJ}1?5DSy%C(S<V>rWQ
zZwkm=H*p~8YqY<(RIBqZDsd{!I@%RE&35D`1yY&aSAUA3K^~3dZI<ukvb?KRa#~S&
zd`a6%r#~b&G&bZWqhp$lRu=K*+(SjzTnEE;&HYxJt76r%OSF=0(&Z9mp2;oIXB0By
zwQ>_<fO16qGrQ}#e#N)=Y272HoF#DM$~?{#OdnoYeTXyqez%;`gtA#=YH2R_3b$a9
z`3|qR52Ee!5G%<oO73Z1jQbrL&Qc858vvq`z?NX;)K$cK%qXo(ot&uzTR1U$5|*;k
zSZYk)`tpxs5e^)VDH)kQyFbp0{YEtR3vOZx?o}p-WfKF@>w3KMZf#rLZ}Gnb`>8Iy
zY!OT-$eSwZ`5*{QveEs;OZCtEzWnjiZ$lpt!nz;XpC(<5bTcsF9Y2%JN*h>E&0ELK
zb;Z1_;w5pWC9rkQY?Q)h?xM3Iv;;o(<*nVdC@;ye^qkwJa48wXj-u|wCl8@`e3=ZU
z$V)`d<yXpew?GQjr5CT`4|&tbiam{k;mg_?DvwnITgYF?p57#%y_!}D|0Wh)ez`3{
z{zrag_MQq-4JN^zzf5S{%>NVtxW=<$sik&f)P5=(Be?EYHbz4)3EWQnt%T8VN-Z&i
zhrAuK;Yb~)LNe7P&BXlk7+_L?+L~;qA6_CHYk0-<{!Bl4wtERrM$2nWHn`sat|Iq1
zA@^98do0O4mbyob7I*PTY`?;ZrQsLXnqX0E9t+`fqw$uM)?rz0+I1w!yM>@w@On$u
z0@DdQs$-EdFWD2dAR6c1%EY^b(Q)NG2mVKtdhwgoq$?S6MwK8|^_6^`YH&J~3e}aH
zsR`^jG$8X9S;IoWPCGdX1Y&r0ly-O+w-Usry3YPsPvz7d%~a+Hj!dKN>w(p&Hg$GC
zE-B|2(3&09Be@gc=)jOX=_L{69;yEn?VS;~ohKu%>o)<5<BsYxBV~=xqcBNh-jeN^
zCy|j%JK)ICTf0ap4XFOmn{E?JcAGEA%N%2o%VOS@8!q#Hx~iJA)M#Afk)9{JNVTc8
zfRJqbXiKr;^fl{<7VaR@?EWK=aE7fDb?o0vTGg>t)s<_#8?R?Okk>pCjjXIgG0s(a
zA7gk{EgO$4iQY`4T5YjvdGs~4zvzB->9Zoi8*lbi2yMJ2c5YR++>}jq{(2iHU+bd=
ztsR0gd^QDJlM?}gpdo_P-W(Khzc6tr58@j4HMQLNo<8$FHjb=d)2`#Z*^+1<C+$V=
z^rWi|v2pwVDi-<R6!AhgNn5~HilW6X;!oz-jjF}UD<ZYq<&VEQvoWQ*tdtPj#m_`Z
zSM-`IesfaB@BtrvUHYfRkhf<7gqwW4Xu`Gr6h$^N;8#~}BHsBsGN9p++R8`0#9T2<
z`VR*+Cdo})nWY>MCz~GV(6}}q;Sj@Ro2gOp14eIm9ZS?<UelieP~_-}6vQLDLTEnA
zR@BxHe%7?J)=P*hv1#W~jeV;9RZVM~xNN%Gt08)TP`y>@pS@7kwEJ*x_G#1+c#={B
zO0>$0{~SaoBDe9OXnajc+xmEVB0WS{3`woADuFX{30-Lw3xC~OZS<UuE*mnyo4u9C
z*uUX4yLXFp<^6e;cf%9%E`7lDZ_Dzu#Kv{MAr@J8O2^jxdFL1qTT=EyYLKt%=BQu)
zSZbb-t)`);?_dWLB9$73<ndMJDU|OPM$Y>9!@3K251ORmW`AH4)KzLy)Y*rAh6zR>
z%LXJ~SV;H;eieDihvZjSjP#OM&ldZwlrA`lV*NMv{`XX|pPWaLORb1w(dAi&NV?Ie
z|0L-~xxSQ;7Qrb;GoU-S@~dr_<=mk|tD#4sCt{md@|CLYH=%aiGqLowksZ~eBV}Hq
z8A1j-4vu|JB1v0EW<qTipGZyn0d@!Jl}p@6A9HD{m=jIXZ!Oxo67{wdRI&(l8hUi}
zR*7wu1R_m>7t%<)y?f(psC@#K{IyfxPz|ddLRJws>@1@**9dYNHLc-qQ5twRJTX-I
zI!XuhPGVTaB$u`R&5~OapcIy5KrhVWyr6Mtkb+xxr_&Jzz{Z7vOMHu?s<GB#EU_%|
z3c;Y+oZmo*dzJ#3s-Hn@*YYHCpye~Q;~w{)srR4FGMmOa^Dt8mx(h+7>&F=P&^d~5
z5RC~3vP>&+B}+#-P*~Nd(n%1(Pcn;63)am`{1F(0VBhvI2=EvOcw`S|qvL09WCm==
zNwOiU(<9dT?{f$Sg1(7)^HT`=0|7x_8Re>#xkCWHR8WF`Rz&M)6)|sQ3Hp?a08n}u
z1pTaHJPsQAJhh)(<08yB`{qz(CGnPQnJF(ZkhY$|IHm6nGnSTBZ2hfJfh_oE3;0|4
zKiD8QcUYl2=Krw7OroG&U-L&{T|#m!`RPXcW~O}yXL&yU<|k0EF%7+%c1`A<7@FCU
z6k)K~OJ2f{nM$)nZlE5wXmXi_IYZDTo1ve!hed`E=Y1h8CmmZSTyoaQ#|mQ)bN&MH
z`LbYCO*?<;CHA4J>#0n8GFt?gGHU()G~XTdl;N++eVo9}C)tnP<)bXa4qau=`P{>|
z2LxL!Iazn9U`!y~d=Qg066$cSQU~x`B@uFT(*{zR{1NEF9k&CL+HnuZQezRBhCw)z
zk59wqwZ_sTK}sx*i^!u3g%a8zDb5I4t!`c@G>!9^HU29c(Ul+7{`Lo@)vBgX<P;U6
z>w+>Z^G1#T5!VB@^;K#T8d;gNU+r(jWG~~eN3NP{7HRx{CY8`rQM<k5f`fC@o3uhU
z#BCTZ$#Nr%@j<r&`O9)?Yth+^#XK)#j_>SHBZ>$HSrAIBWK@W{gJJU8Tqj<9>{$gc
zw7|pht`w4SXMwkpCn2Luq~8Asc!VGvBp_D!koaGUH8(CoQfWM4NAhR<JWS-jr0^I?
z50z4hnM?YT0?Co-?%$48CIyOK;)*k6e<~}9E|ag-{)hGcn<qx<yqbklr0u{w_#)Ld
zU$96Z?7*u~jinnGu{fFIuw8NF4B&46MsD7dI9T>cX4vpgJFL*L{0m`w4QrO$FHnUD
zR3S?PyjgFu7tCI4wv>(<h6AVJ?pVim9JirI7!C*}Fl1|d2=}{)M-Xlre=hY=$>v-9
zS|IStJcEFY^Hqw+&5=zz$9S_pC-xfA?)}$Ac6bcgND3m3Ni`&iIrJ!P(WA5+i)=@(
zuw(?8GWmBbeDpS&Pa=aNnHHNz#pvj7jtx+zQRgpQ%GXip>%JQ?+p*HZs7s|K(u47*
z$V-gn&%hUJ<3sutHI(Z*)TXLmLhI#{wBx__8P-PmMSd7}ZCmZ&gZoW-sXldSKfSZ^
z5%V<~02EAq5l_w9ZDwgyrfP?f(hp!f0wI}$7=$ql+`<+>04Rk;tgpi2q&E~6GJ88;
z6cLMMgSnsN0CK;R&5-|0e@Lpg1XlK{>83LaQ#bP~HNL9Wp=*;z`!X?tf6QbB)mn1_
z&Ol3!icZg=lox+An!lBBnkKortafE}`l60#diZnkt)F|zK1WlE$$&E~+^zDbauo;i
zP=bVF2oCVBy1B2&l8KKdhkJO6Um>#67lJl$1LamH`vc2JZTg4B^!IFa`V!i<v@kVx
zVhRZp6rt64`<0w`hP21qe@v3IZ%d2<oivY7+Q2PK(|L+j>Zr(Ae}(jhIE-9JWlba(
zklyb4Ek}A8NgXm-ey`H_oMLVK?MS?RnwRX(5AE{U>uK9TVX&Ubh2hVzv&(^itB09a
zzZp$WlmvWVRNQeC%yEHZT(y7;2qh5E0~Of|6W!ba%p<FlvR{g1Jv4Um2c)g!gssTM
z)&6U%ljq4-38V0nvVUs)m)b6l4R+v&oR$ZU>gL1cT*(;T+Gfd!6hJ37$j-zKsf??z
zlsxGoQ0umq@`rT*FO~v%&QY&J0GTqsX_*cHUp%O7sU|Eis-_BE&DwE~#8OjXU?U<V
zRPHYyg3(=kN#W?+sAQ1SFO~)VjJTrn5Jwyd!i6t~=%fBi1Zptb=z}7w2pO`-q67Rc
z10=<i;ulaEL^-=CM;2jO7%GCSm(Vo4{<_!ztBDWRVqW4O7v^S>oXU@;WeR?X2tTqT
zZ<v}l^3~j18rK+jT7Hn|IoltYCClWmn)zxIyZNqSFY)Oq(!R(#n2eXuiv7Xi+#C5q
zz|I;*8>qRzx~rJ)f=*)PkuOYB7e1wWu$O28rC;Wjw{>3P5*{&zn0E>J&S$sgO58yO
zufESKVZDt#tU=#0+kpQj=P^Kz?Mm0tnXeZeCJ-y_$GjGd<`v76><<o+%K>3UPLj<o
z=BFHDCJnn<;kZIW#2K~YS;}S!oUH8CjYS*?U=^V2i=+qQ+<fH<QE$}Bx^Y`aria`i
z<ZpcD?0w`qR%Nm=45XqZ&K?b%NN`6*PJdMJ$FZz{vq+)T2~tSu4ve(SOI)Kblp%=4
z$meX=d>xm6c5A6|=MF~}*J9$ZGGU|)^7|A%6e#Pkth0FmM4cCBb*oPg>$U;`wWuCl
ze5A^sv(Nu2TO3&x!8_f(=>ZUPMx>>DJ%<hE_TG=khIP~|wdE0k<+$pc8t~Ej$jezi
zzE^QiN|?q6&hX>un6@F6OVE++Ny9_!V5&G8-x5SNY%wMFZFnwnvx6zNa~WA2h~!Mw
zyo0C5?xB>*+%vb?wXTr0R@;r}Ve>)F&|2>YLHx37z28r=%e-P9@Nx@1K66d4PAj|R
z%IwN^v82NamvmrmNi_sUP~lQmq;PSk2<v+Yn&4!~j^SZS{8uHXIi?^yub#sI@I4hv
z8_x|$3lbumIaaxz2qd9mIWAM({Phsuj3G}1M75tgu@TUDm@ADJbL|z(7~XY$AA1z;
zEdFW}klASY%3K4f{?b!!c!FOv($LRwE$~6~1L2p#tP<bmOj^AC5-)K)D=1tmc_vM}
zDUg^&rchV8%S#MB(N00wy$afFGvSzaXu>$TEbFj!uBHTxt`*n@jAt7Lv>KnA{T$PI
zxt>f6{s-}$r43Wj!=vdMVGrKyBYFz6s9_V#xE9Qo?rVG_mx3gk_mTF72drAA51AjJ
z5a1#ZawrZShBf#VEjE#2lSE<aFL#bm(o1Zvl8G%)8DVE><Bbj?wc{Sm@|(sRo&B)h
z--;op#@|`vw?+LYM0gYrdnuY4KoOE!Te;Co{7fv*{<^yIcBlsV%6mY{t<*G@lC>D8
zfHyMmCyqjsqDHtw=H+2xt5Qx0X;K*TM@f?sYL%8sj+Xg`M3WHDn2kv;wP2#uu#_;%
z30|d-MZ6Dq$qO^LHL(yo9<K5duQS}t#du8Q(l5s#DwUski65Q>BD}_3%U1odQg>sm
zrSMGc`Xj<S{O05HcKD?7J?`+5xZ2b>?Zag}t)>Zgc0R?jj2V`kS}ay3LU)tz65kOr
z6m8+B(_J`EN16NvF7*eQe-k}n=~9*@i53;GB(g7(C;vFe3BGUMgT!9)Vl1{HD)kzY
zVwY5^j`p8{zlGa}|4t?zCfj~UCneP*tl9|7txkx;2nu35mVSpoxkLS~zkCn<vR4W@
zp-<U>6AHRmPB>4V;Dopq5G!@@{f*-@vF=JSOZXb_!oJnA1(X+peo_*EIJ}cqV3@Q}
z!4oPfgU(}#KhPJ-5(`MCMfra+uN)!Ti(mPK$T?-MJ%;J4kWxSHF?@B>J$6%+@o6%G
z)B@=qskGjI>PTTOb!4{TO@P%&nNQnbw@<5^%ebOmj=!r3|4P~pjHF&XRVG8QHzz;|
zFi^aUEhEFZnnlt@@|}hjc8S2a)_*ycIyIK={Y@?<ZM-|09tF|+kZXivUftu|kVMFc
z>YDyj<1;Jw2CT%-Q%&WIn^EOmGcmtsEJ9|`$IYcMbIUiYq7Oj|iZpP+y)m~_mzm47
zEF|PEo=3>}Vxb|)Lb)v&IxJE0F9{|+a+sIsS0#WOO(o&6Q%}vqqBHr~CH8iKMa>iP
zc`RzGfF4RBlNz7#iaW8|L#W~q$FW+}Z>>ZuAe9snzl=&Du|yz1&6Xdc>!rHF80SqC
z_PbgM4tZv-iCoyYZ!P9X`$p*eQfb;=L#76g<znM=<3t#g0c3u*S+{j)FnU@++%YLD
ztEWlR*Gf;kX>DrP2Oi`9X^)k+r<<k8fh{Z1mt%jUhIEO{G~@zKJYY;2!hPNU<gc`O
zfl899z-s{E*Fghe1*^M9A`+TNe2Nt7j)6<6PsENf<k-f|WcjE{>}c441@nT2CooFv
zt{U{zq=%~pz3;_$TjA8UQes<K85y*4(pzndq7Na46`84GB~@|6OySY_|99?<znY<1
za@XV~M)Cu?7~>DzZn+4PXoH`?e|ki5NhOa43#%>8)%fp4{f{m9+AeZ-rYv8rZXPVx
z??nk^=GJOPAR+#Vle-B#10MUNz)~+r94S0@kn|#aHp*GG>dJPPP0aGz*x&`i;2M9Y
z_p&_EUD~nhLbee`n<ZJ6HEzJz?P!w#^Iv)8#rr9P<Kl)}rD~)VSG%+xOJCO)gt3_c
znuqk&(I@4uN(--Q|6OY}s_{Q}GC(!g<<Uml+3Mf%C1zX5LguR#%A4g`?K7=j@(|jg
z1<a+64Y|6uN!K1p+N`5R+Y`M-Lc;Aps@R=~E~1)<_`w2Azc?)2Z1)mXdr`z!=_Cp@
zY`&bkY(;Dl`K~n@{~SsnX>cvKL^eS}K|FE#t(8)8YONVXQP)9TC9Ut*Bip((-S!Wp
zmV8yVq0bK8h)|wmgtIXefpB{0fv@*Ku}YC60)<K636n?`@s%UwAcCd-i?FfgsQ=Xk
z7FTN;SS*!Rz=mZHi;+0<2+ab&LA*yMPtPwy3G`QkAOfaffYxFdtK5V%d9A$n(^3w1
zpq#&EEP_UvzfRH-O0$7z#rn}vM&9`I<%5?<SZXcd8LJa}Noz$J?*Z`+YXMAzvKOJ^
zOjaw3s{GO@c7bG``izI5afy9uLmkQ&MjV1*u}0P+0Ecz3PC-|VWrKhU7?B->W+7KL
zJXBY?Og64}!#l`)PQX;Ddv8cUSiqDk5Ud;$Sg?{Wpuag987!LhI66Tv(}aIgw$hYp
z9lUOwU<amUM>(0Vu3T;l(iM)Z#9gb@8%KdcTxHeO%xD_jaUYxDw;be!yt_>-6|Gx=
z1r;DxH><XuDWZRfg#NJ7MxsTaArnsACTJgwMlZ^&Eq^7(-I%`0{v*>373}N9f(|2^
zdsmqMV1bVL8(l|k%U*a)cFWohbmKzwisVQG*&hQd(8G4uAkpL7bSq*vtvQ&Y=s%6u
zSgDPmpLbD3RNE2$?bMvGj$;nQ!kQ(O$>%^xJz+2VUoKR05gFzmYS>T!I)zGghx5P1
z%){b6sjxoVyP-*BQ&sm+t#S&Lxmye{4?>6_`QmCQ^%8#pIk3re_hv27r%(HP$(sdX
ztW&ctHEm*UN1lLaBr6(dmKZam@gcLXMBzJd4^{rsugfYw_L7J0smd7D5<B(sQ?|<2
z!t`N>=;EQ#KtsyCWGiKY?Pb*>RfL9U;gBL!kzWWMx4U^v;NyQ{E*BT?!WVXdC7pDf
z-&BZDJ`v~@=s8~U0@gCC>#W=#*($JHCHChNAni*vvU~F{k!6yPQ~htLD#^sz#1a$2
z=Osp=2oWeejo+7f(_040(VeLt2?N#kLy^XJ+YXm_!o<B&GQPSr{#J1#$qBVeRe~L{
zkLXg`xarQL<zIFFhFW~!tuHaTmNT)__uCBaWz7b|JA?B`FM0L=F*p53jC{RbEF@IM
ze<e#dppLQ|-M+PZ%NbBJ!`AJ2_a=w28^frcGqEBO^o(Z)+=Vls4MS2sk+dA6L<V4E
zpeX%eX3YuA>%*4|3!AOHqCkPGHZW?{a@<CY9A;nQ!b2=mqvBQbwp8f5{pD^ceGc3%
z(ax67X|O&j)%b7L`)}7GD~MX3Jm7GVycY?G;%ZyuKEN+>`Nh%)C!rZ&cy|;E=khy`
z7(!=qB+zGipZG$d#9+b;HL^2mh!Cj3d~teqDbEqn3RHJiakygEt(!TYDp=diC}xkJ
z(hl<zHedcQF+iXz%=yC)rHAT%bWz=pJ~pxs?Cv|epY0^RP-cf=kTwq^RGak@hGb4u
zi8DvbCh$A@iR8XV9yto4EYxaF<F|zn8Rl}%Wq~|!D(`X#`pl1l9s@77(nDD|C);jd
z`K->bkmHJK`gf0|?$JC48sjz<zBy<Zd*uvq6>@cru=XW#T}1O4nCGJYCOy-h<f|~g
z+m4h{Iw8HKb=^?R^hmeKRvuhP6$my^r1Yz;+=F%|0I`xXs_7tp)awn<BEoQh%L#o>
zxb+f?Jegofh#tT>&7bxIqFA32?=(JL<8MdywEPt|Agv<-NV~vV8kH*o&)8%Ja;nSP
zf<(*P0#(bJ5hg>AQC>&O2qclliX-w=z>C4sFRKD>LOpWU^c9x^<w6y(_eXG4k`2>U
zU^_TX{5{rouqPF;p--UxB_j+xMle9-BMk?T@3^Rx%JCcfwF4%cZ;v##@v;p0SYGz!
zZ;^FqJ7p1Xkv+2P)HWXtj$7Rr&A=9Ox80-8mgZ)WIlo_ae<RPx)(W=yQfxy`0)XpV
zcCVJs7*ct_?GuL}Aqy!BWT^DeLtp3tT&!8nIv(KYLiG6~1Yh{O{qqO=XAytKXD+^3
zMA~IljKIN3tt#qWawDrw-2zn&<mqVonhx%R7b%sr{Ir1{qrz&k2AiC0u!LNwW{Ku8
zJRt^){L9P*Z|eLHB}@U$f*)Mjz`wK&A&`$N*r+o|jw|2Lxfi*Q_~`5Whm$S1!Ua-Z
zZM(m08V}j{D!fzurL33S1zcEmnGUm(2I^9`w{M~c-b!UMyva+y45em_oW9~$)c>4l
z26db)IFH}NLSp0%g-$_ZqwI{1112x)!=2R)Juu9iP*eFvBXsv8_LfwVyt2|3CnEbr
zE1&X`Z!;9<`}gmVPxOH(*LE24s5A3G1t|X&@y$#6*vge&@-S*is_`_3OPj8bpwu1+
z3<Uua(|HKYMUx(qn7aKB*LdB=f0I%>$}YD#xH)Q9j}e-*v~-%)^Hf2eeJD*-e&pRC
zZRO%8IB(u@z%38;5lj#u!8ZhSc(1FwBhU6E{}D%i6`XsE3d=Y0p%4s45*nVlp^t#V
zdjC-ZO$o)XTrAk(-FOxo1!5$lAW*#Ce~+jUVnJ)I#>CrEseUcYfB$}!&tM*4L;<+S
zRey(cQt!V(*oM;#YQ^mIMB5P(2d5FOQ@QL$;MWLq!2%!vT<s-WQ2p!tw)*rHk)~?}
zev<M~;kO%MGar7>mO1!gG3W9fzg?A|5F7(tBc;R1!jhE{m*L@uuvV3CdpGP&pW*yE
zZo~@Kst3vS?)aS5;T5VQ{qC*8Pijdog3tjhp|1j}I)8h;|9MpQ2qNzz7%1*gaHi!*
zN4?*kHK9Dryx1$k_~Ofo__yc***;#a8k&Gh4JkGNNCm8oyw9TJME$3MtSl}5jJ6-<
z_K#S;f+&XyNk#2uSfscI>+*D8xm3mRV?>qGI%AX}YiHJ?@*V@;4zH3Dg&`G<x2RiU
zZ=5*J7UlLReNSUhXv(tcnd?_e0evM5@jHN-wp7!_d&oS{d!?W#UV-AL`d4la=44=z
zogdg~cc*TR?T(>wbeKkJ{7>baX+$kXs>lOW(IRWolPhY7imA+aiFrEVX*rush0r<4
z8I_K5NrEhpuM~`oA~LWbJxhG8G^?hk(-l&d&dI_HzwALbP+dEW4{KTTbg~6nS>r!h
z<8NV&pp$|VkQi$y7!0W>8K3#V2k^T}HDxxwg~N$CpekmAhkwP2TRX1PJj^?K;ST$v
zUC!Y;Z1gunBLt3M{eysueZ1POd+h5Lv*X93pTs}yXc%A}L$&euAbm<mfwdq~rUgmW
zF$#K<SGASTPCm(f#*YSF@Rpna35{{HaOM{judRHk@$ECx`wyubpcU%<3>S6P`y0I_
zUpFnPGTZH_%k_yHC8KjAcPYZFh@adf^YK4*Kty1b0dSic{|YObTdo^xvAlK5>aa2z
zUoESv@$c7Z2v>~N)vWa71hRCE15_-mIgU20UZcQsyL1OMR?|#$C}lmCHiWXqg{?;8
zyE_^VWmoKgO5+jGHI&)kj1Y<lC%@|}pO}0kUW0o7$$6Cg4kg9npP5LJ`pP#O+v*~(
zk>|0lybaN8p!punX7O1ky~9y>2tPwHQ&>ReX7R*vzJBdyFS;W0LsCxC*7+@V8$d?j
z!<O1YR?P>%T<w5%$7VOc)a(Yh<|`JD9e!s4WpUr^1DX(fpZpiSu_yr@|I~~V*v*r(
zB@@0OVUw#7bG+me3?|F0c7nQD${NrNc1L0vHUNu{$@kC=Q}bn?V8@#C6zn`$&GbZe
z3r7Rg=2BPrF1MleWvJG2X%V5ic_M-s*g%ZWN-KrP0+GrM#o38k)=*jF%O-TlgniQd
z6u@wDkrA3p1im7OC~M68`s<4Jf><iKL1@babF;P^*9z@r#W-^aB`gG6m0F18V;%rR
z+1bSGY!nacDvg(D7u+nIjTypVEa=shak3aVtmA?4O=C>phR{pQQv9&uVCGvZg~Qqn
zBCiuI>?bMgC3XuW0usASNNj!i8##OR$n<q`WKQkXBbtZwHwziFTPinCK*Us?u}^5*
z1k}4gj%}4pO5t-N`_n@<^vH<tZS_Vrf`n5|B&=5kR`uN>v%I9(O0uCzSL4bJ*`b_z
z)m)77sls6pPu9HfJQ^^+*ev)*vxJPVA*!W#U<YZ{B{BA_3KaGDPMn{A*&rlvl?#?e
zNTB%M=AI{oHme0i4-cFV7Yg}7PvqyG)R!`PMqH9Vh@=NSE6Wj%dNB{twzcD{dq$-b
zIWT91<}*$gIVFg(I9Df}vr)k!RO+^&QlWTXutYXLmNK9xs|@rA$?74lrF6|Agi6tu
zRm#;>ul7k3`&3&!@|5J0?-PakNGhs1CsQM*;s1f9v)cDL$Xk7(@ydvEy$q6Gz5!2{
z=5r>4#=BkYuNasZjcQCp1+&rum`wk%E($oY06`|ORAjZsCV6RtlV!-+_~cl6|D<di
zj1>n4#)_nD2MSlvE_~-A`IA2JQ7JY))AEj5TlJ+-l`~+Dj6wAE*m@1HQa>oZXtjJ8
zIqGYJH#tT0Ly3rZ*bIAKMBUL;5zPK79<vZ8wBc|2a+vV=x=xsI@8e1z?fI_&w!m?9
z_u>dPDfZk_dNs$8*G7%l=csi`{di15CIx$uWzWQxS@Xg5I={eWWu+x6J?z2#bWC5<
z(aAAj4q{+pirWTd7s;+R{+Z{^dV^oF{DVl_&yvOHvoqea=-++!k>`_s&n4us^w7Kc
zlNmT~SI0bt+Qd+S<%jt@A#+0+R<wm{18XM7rJe$u;e98bnh>;a-4nDg^GnRBuP|u2
zE8~O`Hq%nDVg>?a@*h~v%v{zGlXY>!*KAB8T|M}sNC^ZH^(GC0nub0Hjjd_uQjAV^
zJGKgHXSd@n0dL3@>?ACa=$r@iep-!*c-RW<36?ZVoaX@tRN-6slNFIvU`Lae<;*la
zDEO&z5u{bhDV>&jY$(}D>@g|nC2lxYiY~T-u^tpA+!{Q#K9DuBa-1S(_sB{12lp^1
z$e65}h|{MRJH+&5rSn(C>`w@b=$H5H7aVo)l2>dgEM||N$&Pq?O<)ZJ<Q?W^ep)pJ
zAW!#XJ(tPm(YU4x%R2h<`-|+;L>eIRV1jNq3hWUJwa+a^kHvR?dunBTb&1O=j)nRi
zf3cM0D3+w1dPU69a^+2|+kCNlSkpAA%QZE)nzE0o0%}~4=uFw#c1_~3#{1ir1qZ0Y
zj*lZ~F~o2PhEsBV53h4rF-HqoB8^fip)EnM_Zbu8Lw<3wmu!TpJ7i(aRKWoC=3FSs
zP2~q(;#&Dmx*#WnHW!OR>m|<2V+Pl2p&T=S*t?Dh^~Oasmd<X#Nis}3vu;U{2yQEb
zo^y=E>k+V-sCVsvg5s+pwA~HOcKYEnZ2Bz9pL&#xEY~U90@qD9-iiVHbyB-+b+Ule
zjs>yfgIqP&$LgZ~jIo;n@4jz^fp<lyeK?H2iJO(;8P1FyG^H#(d}F-*JKpS{OPPO9
zF9LZwR=87}-w#HhUT5S6JKv!HlSBZ?DYnge&{`cg(`Y1^um7Uii`iQF9wo(TH-Vk*
z-qJnU>CW6JJ1KY0Qk)5<N?r!R`iIK)%(=`0%=rkhHV54G{0e~E73Q#*zm*~uW!$KB
zF-2gARX*<}%C(73m~%>AKYc^}AS=l^h0d6BnU@@;G({n)y&NpR1CYM$8rcKdJhVQH
zHh(VYu^RQ(ZHjT?9S~H-Ik%#p%r4jA5mGJaa8RcXErPZU2*a@aII1`V6&TuHyd`UF
zFFyx{A2JO+mytV+p_reQD<$Dm-u6>OozL6cT8+~(xm_Og!)DiA&TNhi`e9eR8sM1j
ziutk&k>_<rp~cdEp5|??pB@F&q_Cd`FS)M2n@^~p>|Ac+W8PdW&>DH2>*TMYP6Qzw
z)I{EKi*vP?{FxLg*jKl>ik*;v?cLKXeVY84YUa6Vi!cn0J~exDtbuk)p~x&0*75oB
zXnc5b&f1i`38xAwSe`~<mg3LU#4|$~zSViG#l-B*7dfe65Apn&{B~Ig3{nVWeX!Mf
zFeLddVt0-ITD3jzrDCNbfw}!DE00@|L9T2{Efz0LwDMUm`4#bm*)xYV{-gGYe$4-{
z?dY8SG(bM!SmrI+PXu8bTSTt^2Sjtmz}qw!i{XbO#1@Hw@^jt>YcUDK_9vNG?||1f
zKIG^MX<BOhjJ0Wqej_qKR+&_*gI624h?|f%BnhOyoj4R3JK5U;CsNCd!_4NGI%g9i
z6f+)zlKc-aqlxv9^A*!eS$^x68ggLOpi>%NmO~fGq$bPjQB6jh<kdXO-A&CCc?du#
z@KDJFc$DQsp<50L)P5C1VipR|@k62T1P}R87`D$Ip&<PT6c&Y{U|vNso+qaYOQ@+Q
z2RTs#V&oL@djH)l(DbIWeE>z>;APUDmsn6E;)z<cWOm70!4WXEjE}7ftGe_>-JMp_
zFa$%KC=QaTknAVry9L}U+l!%B6})aZ7$HuEH$F3RoA3?&frj4D4Y!nwEXDvUjib0p
zOVWkuN1s;KJaK3aAYS}+FfRnuK=%r1c&dB-hGI4_(?zA$r?0|Fho5B&a$O0%)c8+m
zaH_Q?w*80+O6MAzmeZ^v?X}p86Q5wRgeXnh+ft2P!g-xNb8<{9?=gR}*fIx!Um|+e
zj^kz=t8fk)(!)z!M19%R)|HU#XuQ`Noobp-N$zM&NT+SLiACt#Ub5D$m`@t-3oqAu
zWMPp}yO5)>1tq&|HzGFKi~$nZ^uoV&(WH`?j$sACiVb%wCYP$(6&t)*m+EMiDkOxD
z&)m8t8<pdf*n)*q&3V4`5nj6srR)DUp2Go82wE8KlzXD_DD&|HLZjUN4M}5mn~A9S
z3?;I==_R2lAN3RnYYvZ1=2Sw4IKzPXQ7|7mD6W-mP7~2E<~rZhmalhUulJu0fEdL*
zCHNBapQ=q=UnF>6`AWlpECki2G(L0gD*{3N5rQBG$ZLum?jze4!tYQ9oz)foiK@kB
z94+IM&De@1BBc90Id~76_GQ%sy+4b-_y1@m8dwQyw=;*yi2y+RYi#%S6u6gM)G9ck
zqM##;0G&g8kR2xixTvimC`MxUv2vzRip-g`<ILJ>M<g@Sp-4oeAu*@CNVA=pW?!rb
z82s5mxYXQM5zX4sp4_g<97#e>M}*8OHBRasz4^*sa9X|pgW8*Hj=J=T3~|T!OyVV0
zl!Zu?pg732z1D6*15ym5tNqinHnQ401}O*_);zujq}o&=2dMYpJxd&+$C;Fh)k+@C
z1SElaIq~wh7ihsM%FIRDVDk!vDUiu8{JUU@;+b<iBwCoJR3M~DEt%Fvm2x_<*mgwv
z!u=5|-;{M3DeqrhRAG*%<8WNi)0hKPgxM;l<gP|!&lDAmYxUpuJg(#fbdGQzk8G0Z
zeYr5Lzo>7jAWUoDyf7^@Z8O@kL~50EXUsvQmN}Exb{iKr4h~0S+=|IKw6!Mjvr8iu
zRuu#GgH@w}uL!HjkN3-~`ZPbgtlC^+{z26OuY>p-Zh&c9r?DA^*rwv0FY;T~Od_N?
zYr|f|kIaO-=~W#$R{T?|h!nFjAqQ1hwJ?PHvQxX*KEJ{2YyAS|F-oZaZjdyi7J2M8
z$x|4eZPf00>oU+3*MdO<Y(BJdlF2Cs)uvBFgwmIj&lgOiF&ucfZ(+wWbo_WB2iUwm
z?5WBHF+MbA*iiDoFr^kYbewsBT56G#I0C8?=2}<YUK?4*ehQRyb0`KgRsF6xOb|4r
zO++68&pJ$ZOy&~85Q^*k7O_{3NV&ts8n7RV!d~+j{N@3zUyLN4PbN&s{W{LR4DE~T
zHe#_EC59??wZ;_gkeI?lK~~L8tTBbwDAP6orQ7l|Mcn&kv&B~ib{TDf7^lYd(u^8+
z{z-{0jXOYH_>)=lB7+MeA(L^Om?0GZ1W!trcuH;MO7Ug#r-;aP)PaK8@4bZSWb?BS
zx|KY2l`M0hOhE0;g}lj*^|uIiU5?e<0+?CwX8H=&BQ3@Q$>wvZzxNIj8Z~}me!ZAC
z+3g?*;kHBOhks#O>NB=ztQ$cJkff76WZI$hL0&N|W#M4W3t8O2A~s)E2=j!5D#@d{
zh>wmUbsaKl88bn84fU`!x4<j8X>{kerydet=@vLc(5RmllU&=;+4YsvhP5I{au0Mo
zqamc)fUGZR;ij*o4R3ao669rDDW|N}c&E*nqW~Bjv)Z|_zS*%0a-`(nam?hA%NhSx
zl*tfdZQs2Mkg2mSV5}Dr{UVI@-e+Xyd1ukz+ADMxec2ja4z-~>{>er3gBX4#$1A3+
z?1UX}|4Tq#<)U@FHU6of^}nASYF&9#&}{POj0ua8^hg#ze#F&O3KqU3B5qobpbK!8
z@G}5TU!aR9B@3A1QqZr;$$i_xpD=~wjxd^*e@c-(8Q=Fp05=tk9W4{qEgX9u<FIOr
zxt+kZu0Du2xtVX^ii>3AqzS1u(JEAFwp<?CCv7302yv~I<TM3Qhz%pYC<2k=x7(fO
zo3brgY$q0#d_WJ|B**4n79PJy111a0^6id+G8fTn=EU2rPh_U}z)}T15h)=q&h*)O
z7DohxtVsi($Q803#8x_IAeD1=L~Nyw$ZjT54-!@_qR}TV4B6r6wV!2iG!)`b?v%Ho
zBl)Byr77Q#U2!gTkaE-41E}WL_t5>9k`Efr=tOS6*%i4xCP%-N-fj|WRu}YkU6zKe
zqePc9ETFgVw-nAMbPjgoA|w($b{`xn{1H2cITc!gT7@%xxv8GrX{!CYn(9E=jG_2F
zo$sv#oOU(e$FuXDCn2d_IS-hx=<MbwJJP}ll!|xmOHIH_^pa70sgV2AddYaZ2)SPk
z)3;Pyxnd>dzHrpnN;2!L&*y7uaR9q47VEM4z5Xpe&uL7NO>D(t6-XjxLhcJun9jLw
z&f;x878~=AF4uM(pmFl2mqdaS!F@FSXq@PEau(>n!|e-PL4&`*74#09zDu|u(tZtA
ztw^y#C_@*{pv7$uTA!6DCf@%#&eNc|!XL9PtJ3^&wjHXS-+5%0oi~)^xwL#rbvX~@
z>ruL+tUEYM`b3mO(-x5+bNp?BZW=8op>%a8%TGrLgHSptxaUy1G7)wbLZ9-4odPr&
z_W(^;4LA@k385|u3740z$O@M~M}gIF5y@EK8nQ<MO%0_~^V*2wkgs_;Q!*r4=7;K~
z^E>PJP~RZB(oHj~3!WgR*I>5x>{$7(*d9-dRk*QGMVNsZqsohTgtV)_>?jl{k{@+;
zoo@S^3@%$~Qm0CZ1^A^z3b{!tbJ5co6bS;O4##?q?ZA3g^LJRXh4iR|yJ_xKbB*mL
zv#(Yb3y+sv%y`Y2cNcC=w=QNFu+<|wlMu7w?WGN6-ke!D;?kqH#$Vmiu&<nhp7UD-
zhIo6Gm%K?HlzMl=xKLvLM7sc{ko4^oqsxEa!ifDO6%?a<p=KbbjdGfSJ8jfkMa534
z09lG?B1HOjGyE>MM!=vhmEnnZ^^!uji{s&cgrXCl=EQL%a1p-=XOY<k&b__Ok1(Be
zG5HKwkG3`ue3UdoL=F)ZP25VBawNClD+#F}$MCaD6-4Y;``;<}@LuNBk8=31P_}^`
zhoFV->99Rp)YUf;DNL>Da)fuopug<$9LV6l-17WF7P7PC;3b~TU!EEAa}WG<0zfkd
zFuYt`jmN5ofMsNH_mFc*E$G<@s|lUN5Oe-rw7hsUok)g`k@?HeZ;#8+JV;_*etvs+
zSO+5ig@*M$fgyVuRtfzP_$7Zpg<mc!+=}MmzlfqhT-+BJ;%=jijsIZfDx}3qB|z!(
z$tU<?%&W(O^)T^G3m~w>H*H<xY;=8e{cK>9ul8I5o9ZG+_EvZq42KS>QJdb+il~7a
zb@Rf)0q;RL{R~w7pG>XdjIxOpvS(%dQhSCb@3742m@jO@UcwjL@9Hd$xr#4Vs3=pp
z*{fEWIiFrSIr>b7%6$R(dT>Gv2|*a0FzT=#ylRI)LF4Mp70-!?pF2=i@+f89su1xb
zht=b8mVwy`LhI3nQ%wts0jv!kM`SgejWfMAD^GB6I(`}B?#h;=C+8D)V|{Vics{l(
z7G`;8e5wnluPo;?S9dbkIPiGM%Pr}W(J@FtCxU2fjvG1s#0}HDT3tP;qsV;gjzFL3
zg4P}Lw$8jSrN7Ahla<xH#HpWXmw9r~e))2c*^e?R3jLOtx~v>#wzC8|M=%bcx=LLS
zFa9F31Gi@eo=YN}Y;3H!&l-*iQW#+y$662u+Shj#0<Av%BeJI45o1D=>)fe`I{!7Y
zKIPl%w(jI`Zq8n(c0M)K?ZhCnh}x3Bw>I)fU3sRy{O#IE3*p)a_cO<<l|JxgGX?Wr
z=Qz;S*wpf|*8K6$v}jLE)sg*{D|aLYy~ck|CMvz9lSP8C)?DdaFo-DA_{J;-=^s6b
z#GNdxW0llNE$+{sXnK0Z$kgw)Z&HNS)<*gVZ_m7YfgS-9eOS&A^%S}i^LK$R(psit
zAfLGmQW_FDBe9b2C<9PRiKuvI`XPjh+2c`XH_P#;>v~4yY?P^^jq=TmL96=nw=xkj
zUld2iXTJZCxQgr>@h?28U2^1w3>ir&*Kt5*wj4*AuXU~J&)1Fv*7F*HPs)g^&j!4Y
z^1E*rzhZ5CH-~9@P~91b5Cv~#+*FvRe-togECwZRH!CRP&leyS6g`HbUzXIo`NzV3
zbJ}o0v-@knfegP;pz^KNx-UcdlKadPZ+C&dQMk`u!yc^r>}g>Vfxct*p(>h~^=4#`
z@vl5=jd|<dFF)^h|Ii7GU*whKUu<Z!zP*yh(Ka;PB(0vPd@UQJd+;jdVGS2MIw}#l
zmRM<mBIREM{GJMONJTU5;lduR)*&JLwG;?CebIL6E_K@5b}a-imY&>Q^W*+$rQ@D|
z5Dau-!Ex;cKex?~WZCC?sEh@B_2b)^r9BwqoNt+XKZaUZ7228j%$<LyA|Au>Z;4!I
zMfC?ZF@`|CEN~J|p**UO#N{nVfGWy-<=0HPg&O(YXG#1|5IMmlotGo=a^Gc+%0n0A
zqyK}YpP49QmeIUmb_L-QsZLFsZ%C<BUd(z4uL65+!KZhAFFqV7!>i8=Duyj_jzFQc
z38~Edd7fARbWdV2Je^V7;8m-f4bUh86f~~r86<&_A)DNY=7R^B8*KZ99QzPnhq?6k
z`7Lw&II~L*XEc0+h#qsfyv(1{NsPPT)#1F7rt)70xiOx^?vdNm=Hmqd66}8n!<f+n
zj|JI{{sXl4Bwy6=F;ACP-gR;gk%Y|4L95J<J`5w1yf(Z3DwZ07B?tXC^1~sU*(T4D
z^zS^xN5puAYo1AfrI029%Rt|`f;Fl#JB67QnUY<RFJ~O+YmA734*AlP?53(;uGIY^
z>5br*fnDvZY`lFFDsOo4Zl%F|=w}hVxf7xj5ey*@W4fk2t@i6c^>css1@cVyH?w5I
zOKcKtIuAE;^yCK!bL6uy!@&P4Z}}%~Yi6d+XE|m)nLqev*}LJ%+=*rabiOn-Z>Vv$
zL4PI5IPj}@U{)v@hqW8Aa-du%%OG|mb(r8Kz~we&PnuVW;E_iVmlZ9AF=ifrL&YO`
z4wQjkGPQh|*z<)bHlP0{ZyUVJPm!?A&pKqbg^s1R=KN;Na>{$lw+Ddy_AeRF`5Oy+
zGq+GocJa3vo5&r>k2>$*$<ov}i?ZV3L#w4uXYtT{We5CJoo41RRDQ`_<0W6Av_&rB
z)YtRF{8iS=(%x$S&CD-vMt{WowHV3Rtdb#i3K0Iq>sd7l9)D{HfUknsf$nZyt%czr
zV}&#1p`H2DuRFb(E3bgVQS=n>k25-hVgkjuO7X+&@HM(3v;HO#N^GRX+0+UFehHt<
zx@T<bkG&SOF66SsY?1f*W9!j*Y#-j*snk|^#c-$5pb*~*A-?@Px3-jWq48$=%V=KQ
z(5bz7ox8Z6S1v@j;kYhcGh68|-1y_apz)OjFPHGLP47B-;#HkIcUvi<okKx$L3>^k
z0fV1Or2w8Cj5Zj@F<p-1-OlrAxh1dNOofbsfK$uAB}>1=Nt3$2=L1$K;tD&b)QdK6
zmM#?da@Sp$JI5dVj2IE(k1wHha{>S4e>WE*aMDiGPU*bUDV)#V-i336S}0vvBa^vJ
zv`QO_N4ya#j2z*&X~4|nO`W><&#!3Pe-ZPPnco>bALDBX_r5!iaYj00#h)l9*z?_O
zZqwh=8G_TLOy2a(<@v3@G?&%~cdl9OT7PM)YkmFtPED0{YTa#OlL2^=HL=QDvf8Xi
zm<-M5C(`4LS30$}0WQJXS}8v!LV`S+8fZ|!7t|ku$Gyb+s*-Qw07?;b#R2ZLX%lHU
zG2jcWWKfWEFdg5XI)khX?i`Ha98683rEwewSzrU2m&0!tHgKiC5({grTUs6JP9}+%
z)@_}JdXx;+d7_iQ_*19vJ>`4Okka-`LK7R_6+RTzRMPGQvPwa*bd<SjTtVBsg0)%!
zy(hm~f1nv(SxhGT$6}KBViMX@LCN`)EO>PTuK<OL7B*s;jj89~ihlCCY)pBU(7{g^
zNiUi`Yv5xonV!vhmfOd0W?^6tOY*A)I5Sjfk)~dvdMr-5%0zD)bXCOr^wkwCoT!|c
zRiji_mR=CD<Q08NCBOSz5ydFYZD*J7{A#S5p3V!JlobB<Y_@GEbz*bo&cmgxa3i8$
z$GGJzF&JBNY}`uZ%1G?;7VhV*-fP|JMCo?M3g_RskCz;6d97#(D)#kbzQJV$iSKt8
z7lZ1&nt12{eiOR2lsYpA45m|=u3W!>n_gyE?|)Y7KW$+$u*F&$>dUz;WueSeb8y@t
zlWi-tWKPpQ^pzNQrX?Th)BSotSO^v0)EL!t92%cKhIweD_bwIPZ2pKz4@&g!c`pYH
zr}6&4I~nApwAnnrM&<g-PrMt}P&uyl3N-xIuW}UuL+(v_apptDFesCao-X~Tqi)#@
z)+$CHiW=a=<bZO&!|u(K!QFTB8{~h-LH$=Uzf7@LAAMZbTBGALH;>QeUZg3p%&=so
z-s}acTB^My$jNAfAxP3YsG19jD%X+(!u#c_UK>d^Lu&&64{tZ;P*2F+=`RJq@RBni
z@HySkMUGyXdzlkWzsF0s+(&^V^~TQ`?yV>#ZZ?9)$zr-lkpA%L&vhCxItD2Pf|*Az
z(=DS~fllLZT1Hb(NzRJ&vY&un4D)9DUNB_^jubH)>TbC2^hgn=HoF5HDknjoTftMz
z35T`%pPDxbM{>IVk-K>mLtUxxAdsMzlQEeYZ|-6hKW^*8%SM{slDUF6wcu8L<$H~9
zVJ5|*_RYHT?W59{mPO2mjD<yq5y^1umIDJo?;7unH{!c`d2=6AU0#nA#aC5i4-@(F
znt8cfIGBX&p5{^sYD|dau46kh2%(;QxZrv=0im3omNRs-Wj>7COy@z?Ztmt_?HV_C
zTDR*(nGZWg#Y8cIm)?>Oa*~>^#!<egb|OK_DQbD8IS1mq*zMn92LuUElLzTuS|GtU
zHU7(ON4nL{9)5XP=NSqLl!F&s{0M(|*6EHIrOjUKo@j6d4x!sZ{6*pR62H<0LZ@f+
z$Yb&~me2ehRVjONUr!g?(@88IK{#iGPVUbnOeox{9ags0?8$u|WYW!QCTv#S*8G^R
zLfo}?Gd+KY@yZ#pKs>iN{Qhhu!3wSuq}CE`A-+A5P>Sy*wlawLE_T938BIzfF9mLg
zfv`$G2dkZ-;RkY~pNjx$j^tpr$&N`twgKD=>43pLx`HvdS-6$Uo6PU16`IVcly3Wj
z+6^S~#GL#J!zwT!{P^WBFd$scN8}I~Y!E}|C6;cYf)gK<?Si{O0V9S<dqCtatOh;a
z@92;ly<>ZE!udgf>U5yP$hiv7%Q-K5^x#)60PQY*b{T*M_ng221}800m=gEUwu{%(
zgl#}d)>xp+AMC$(BHQLCY#XioR<ow%8)gN)rLNeCuM@r~7oR|#G;jCi`og-F?3KTl
z3iA3Mi>rh3>sm`KcQ{X&;K0{|?M=dUUPw#9MZB=GW;)_R#O%e2Uh)|>n}wa8sCk)O
zi*6S6>G5zscfRIncfMv34Yd7)mb7y@W|cc%V?%>uk@lDzvpJZCC9^WeY~I5;{&U^b
zmO)OA#?q2&=vp~u!>yt&rQ)Np)C?{fIxSL0>Jo};vObQ~JYc;*)y>C|=P`jm7HPW^
zGD_g5z&!IFsa_eUJR@EZtJk<N0I3!3Q7R?xrd*WwO7^6b(7I&mR#{e!jum73|JAvg
zs=uo-NC3m;P%Owl5Cu3(_!vG^(~B)azZJZ$OYcv3o#uk7^PeA|dH-*6Uc#n}5{&4f
zXk!l|xYG&tN&vOqt~S4hCIAWPK_}T}=P3*b;tgKPz%rk5HzK2xXH(3Mps1@varNN6
zV&2l0wto2>fdh9uz$$^Sg`Q8O$#90iA<&21eG4~ICA;gUUa_Ygry$F^n!ipH1(Nc4
zu#+$Axj2ThnvbNDrqcEc)}b$8u>;&wVDLm3zNiD?v-&M^R)2^%{8T;QbKY6~sYAQe
zOdM4(WvoJcXQW|(dMiwE;|Juz5W}yiIZNA?v%jqwIHzbJF1MDn>7}KgZg2{Hi|+m8
zhc^j==?NV?S6L)qD(COaX8Gt0?l||0G7Dyc27i{fG-zH};U3Q4%tI&hmYKwBE0g7~
z0Gxgg?(=1!x4TfmNk+H-US$ckf^3i=()lE2;b<ZKW;ZZlq~z2sSnsx*vqZ;vFWey=
zF(o_%qgML)sl`VnPL?FNZNhED1r3@5g{ytDi5j5r|9}G=xyuH>DGq4xTMh@>zAo!J
zyo+_s3w)b;)SmD|MsMcukFIx17nrb-0T-&=W2hi$mh?~9c9JzO54Rjhn$KC3hpn#e
z-$9}S$K*_8mL%lhm<_fI>t<>qoq~i5xg4}lJkkl0PbTH_|6m11q+2Z59aw=+%(DWA
zt-Rmu(#mVv)-VS-4Rnw2xXz~H#s}M0c1Gp4NAfY)>@NeCl=2^e1THYWacYh_o!2FG
zdT~$?j-LEkXZuP^q7!@;@+#h5!qsU@SlPZ1qt5FGOZ#7tuoEE~xo1LjdY6c1PJ#lx
zyr}>p#WK`Ak)^xa7IlG)|FUEWai!s#-rU;|)O4=t#qv<<CHo`X+DN<Z{`=;;adG~T
zAbLLZC-Aowiie}&D|_@WeNGRB70Ne!fjl{Yk5<I7$&KS%clL=8zDW;k1@q6F(G&Cz
zEpt1MIYIKz`yfE-2N5T4-$B`XKhE<EJbQyI<({mLvo>LMyoVyni0$<#!=CKqi0IMD
z*&8?_5_3Q=bCq;r1FH6L-%{ICU;N!1{vUDMAdBC*QAd+`@QFaDv)1tP8#^IwJ4~Vg
zIo{xvHJ@Tf#SZF(jNoX16*cB<%!(TJXn;9c7AzoGx#S4@zM!v_`F=qnch&<+A;+!?
zsm9<vQjMWqQVmF4nJoC91x0r$>$N^6Sg(>JqDL+3?d0Nt^{$5Xepz|rp{4?PBRA{g
zAfM8h-iX}=RGxkwY|ObiGVfo_h%bLiDusQp4TQu9Tsjjua~*5^We2*S4wQ3r;6}ON
zM!wnkqZ$7nmuSy~{X1PQk$L91FIbxuZKw#H)@F@en}VTNGW6{EyDs2-v>IAFg{N!;
z`~e~Uze39YdBzjyagW&eg)?>vX>Ga@w=_2oFS*S+R8AxrgTzH<!#ph7e*<Qh4<sis
zn%hvg^S^|G0JdMxM}NIJ^IC8^=hgh)RPgc^goOVITG0Z=U*P`zx&Q*nsnfR1cl{pK
zCGG?g%=s$VvR#p!Iw8wOON&)0TGE;oKUHx=?tFu~X2-uoL3$GloCs66d{kHbA;w3$
ztqyCb3Ty$X#X?d3ORkJVf1f?3F5v=_D+4Eo6T#TWD(~%>Mmt|f<;_nSSN<}YG1ql^
zRn_^`vAhZ`-R~Qj<n;SG)$AcPG5Gy{b(T2{7FX#t6b+H2K&Ko_Gl5R|dy0hP0!kn2
z)cRfEkJCa1?g-l0FVx1>$O&=)F)<zPpFJhG9my;do%|P(47v)M{y<L&YBnA(xw*Ad
z_vLh-qX+qiBcGhMr{jx>QS_H}8vTF~7A(MqYiL&D>#emi<Bs%U*3cV@9%CTbi{>1Q
zyeb(V67#U<<c{|ZMc6KAa3&2FZmB(c&fto8&Qw#BvpDKGLo1yu!k{YWavoVdXTz=M
zESF1e>K;Vve_;kF7}GoOpb-0MyRVCl^@woj&6IN9vbH3%usTYP`JF8$hTt&h!y%b_
zY)<AL)TPYrm1oa@CO><$(+E$O5eEHb-H>gZ$jn#l_6$js`||_h<b05AUkN)P8_MxX
zPI*VH0HcLMS*^eAjRIJ$WFLzPU(v}^*|olB4o3_Z4(4Q#w$?60?2TS>?eEyM(>~B?
z3a*LeOi}DIpn<E01KNUUEt|9PQ#Jl0W<KJ)qbm9146<VEE5nt0$b}+G@>G+eh4Gp1
zUhsJ#7W@Z_U!X6484l?shU2yh>CBqrurPr0K+32>_v7~j94>pI87fu9ND+mgbjCXK
z6<$A30wTGHNGt~sG4n3_${o#=DLsj%?~+%p;xQi*#$#St+{xkU-cRf6|6j$^5*ESy
z7GZCX0)bkFI&n28o<h7~C&IJ>3(GTjf1QP;AbO|QZ<wAtd85}Ec1q^*Yp7j_rc0dA
zEHNDY1|C@e!Y3f(doU51e>6}Wt`cJ?L3qy-h@GzUtgXsCn0uLX0p7{WE_lz2SLS%n
zNQ&f+{;J>ML+{XCWW?^6c3^BA5iCO!2lp(RyiY8>SGNtlG4^zCe>hyBiX-NS?wZ+=
z1dpcni;dez!GB-cv&g%@`{-mx!(NxcwEM);2dw^4&muBbJbc-_fh~CrX#I0yTsvLs
zzaR78h>ne(8$Bm__879m$Kr4IZyi>_Chxdx<|Vy*zS=shw2Y2oe$ARFMrUuy)Cd<Z
zzgwX>n|~|j{`5)r{kUh|eGBoo%9?hSPwnq5*$^AI|F2?^4^HWLmAJ5`)BBXDT@!^`
z8sviV#D>Q8^L7mHUDnXEb-4D_I{X;vy>&RI66vqBY1h$SVy7_Kw<;u#7MJ3zefils
zyuTLgCjT}KI?hYnF5EA5z=E5;QZ#d1@Al96CF!W@@sy~G!mp>xLFuvgHSIcXYJUd)
zX9k`(NPB*~>Ga;+v91@#{53IueN3yB#^OWA&@kOrNr(Ozl<b@FtE7jmh_wzMMAt>B
z$y}9wvN!ua1xugEPgsC)-Dk!kYfkCd%KVw37&Ogi@D+gr{gj#a^hXo#<#(0YlJ~pG
zJe~Ku#H`5sU26WB`)%D6*E7k9k@N_ACH5;=(O9nZ{x>aU)H5O*%C}dp^5z-=6&Mgf
znUsZ?8mUfSxDM+qw`l)^Dl>Q4i{d})CFRBfigPG+TJ~!Cm0DlChf;e|#A3wMui*%D
zWrI87x&C&YP__E-I3;UYBNazSbahXcLB3U?OM4)|Yvnin`rFO1)Z%`Yp!_t3c@@L_
z92^)$p=$s1V<=WjU`F&ISpsR+yo&i<;9HmeVKEuD{0r8=e#REpq%WcBXUwpQLlsdv
z1S-odRI1CL=Un34n`ojwJuXrm*-+>IXbqn3F<cL9GnCKn$7)-+O#e}BdW_B!o5JMc
zXs{!uPOM9xPp-EM6ehXX2j#$WeD>{>XX^aT(WYJfxVeP!SV)eIn7@4{giPX?>;2cv
zIgF3aBK7`DvIf#0m%6weIAxyHZ+wI+O!^gbXM=6ytYR}>+Q{Zd(cCq50VD3_vstGC
zShq6&qOkTScr1WVZfG1CBdv6d<RX{FyenHS^M2ameRX)>Sp1Rxb^g}xM}H8#AbMf+
zhZk@$599Qf4DTJ^8W|EfsHLK1ub!-fKm0^V>7Q666H8scX8Do2HrMveOsgSe!yjJO
z_OIOdr2bvpnHXV3?<yvjEq`|m??WE*n|M-Fb=yMr4|o931#e=->8Qo;BqexeB_DA3
zy|QwxH}}_IQDjvtJ;Gt=C=lmNRv+Rq`y8qS`2CL3hI1Xxj&Mjjb%0G2E4V!}5;qm`
zoz(jyM)}-A2KdcMpmk=JeDc?@feF)yMa&w03l(Xa7WpX&$+TiiaoZM)@t2WQj4=cl
z|Fjr|^AZ9G;SrQxT@*3bOH<P#6S(S4$;#+r8fLsgn#@JoZ@WLHyKFH|G$`If2Pkm8
zVEqKJ{sQLBzMeIQKG`sOr+v(CmrWz3%wt-Ob*zKtRr`c^oFi2)qH04w>XMy*_Ik!B
z$vp+oD;%I(D|gLkh^*q$Wd$;u<q|f_b^X@GJE$?18Ud7Nuyf>YX2DM|_^e_#_1Qx}
zJt!^pg}jW81n>LF`*@31fCbpsQ=T)u1+V7?JxWuq%9IDpc3@%mO)S;to*Ta+oO8Xp
zS>&>gI={XpmOi~ImL7w_VT+z|?pT)^!(EQ`EnN0^Yw|JBa*)@2429#@RuJI)u?#}A
zptpGda1|UYGh2D)0Cp@sWNnd`xC7xOmcE{~c%{y-St^}mmS>7N5>?Ncg_@;YcFR8U
zlGkfF5aXXbK+n!~GaixMk11%Dxrcw2%E4vxAl>L)?dBeyT8E#=%ObrcW1$QH;ugxM
zp<^Q{y!nMK3$$(7nfz|sM(rYmPOW{Fym^{8LM-*o1@dMYZ&)w;=5%@UH{O6R_D!X{
z`E^zwl?H=Phw{l>3r0YO{r$}K$ofjtlE<(dasYyx)gWNQi_?=RQnSXNToFqR<Pdnw
z8}@w6|0=6%9{5C{80&_7z&+S4#m1)<Ua<Vau}5do<#{@jf*OKvKThlxa5@P~t0QKF
z-+9zv{dF@0qd}JABdhBCb?H&-bUTv-2&5bt36OMyY%e;b;4rr=QwIiE%P_eTG(gWq
zbj3IbdJq(qF@Dvd=reMpKY5&tQ+DV|a|DmBdnojJOMa)mASm2+CmW9JIh*A>JiA+U
zdWzd_9%HfdaQvx!b>#;$CgnC8gPa6OyOQ$o!r2QMP%sZcmD==K3`{3IEX%Wt6nX*A
z4(901&agsV&^5D8SMDrD)eumoJZP5i#jf%Q@R=jsiBtIN6GC-bH?yB`78Y+HAP~?@
zEUr$U%Q!`D`+<I&h)oILydU3H(r{RO7fzQAyce=&=Hj*xFzrIRB2G}CC|F@u*s&Lz
zgXk#wf7p8$_^7ID@qZ?75I9j@(P9}YU?N&ceGwI%Kq6;wqWB2-sEUAzw^gBJ2D~Z|
zm_#_9PED(|_V%T<x7WUIt*u^sPXZwUtOk5huo7t1GmMo0ngj&$|E_(`JQBhifB(<@
zeSUr<bI#d&uf6tKYp=cb+H3D!y?3Nm>q1CGz&eqh@Psa7;@P_C=E_$Dt3}v`MihZV
z#-i&!x6fLr{UIQucTkxcw`@4eDX)Se|0rT;7W!ts6WU&A+<$glNJ9}EU<p{Y4y>9N
zr3>uI4V<ZcZ!+>9p4=MRvRMQwFgUb_vm3t3N7WQBcYsqb?aP$p=<k3ah>Js<Yu#x|
z1y8C8M3<yCA&&o<l;GM=t!8|p$ay>!hs)nAo4Lujj$$YKir(^T6L4unGNhQ_I5pb#
z8C{QyU$;R#pV1J#gfhCZD*8H<6HEk66}cMCqXNmX3<ZQvR6}l*<EY5q6n%xnl)-wq
zGk;*>z?5O}Cr>~JbJCnyeskm~*&v7EWciG}D9&Y1@#-^wI#O+M4G(_1fIXzf2Du1f
z{J9vG+S0zNBRw}ok?P~FN9rh08@cx$0(ST`%7r^^yvyTq1s>4NTb6M^RhK?~|8V9#
zesp-H_0(e9g?tUykmS)a<wKG~Jo^4+PnT+hZkAiK^f7}JW~_<<UthfP34SnQZdqZE
z7cWT_3gERiz~CR3Q+-#gK0cn*-pebYz<Ryq(d)P6fLT}9;;mhp%hjjloMnIub!N|J
zmGhQm#f$rm6cwI=>@T8MQ9Mb)V)KEKbF5zvbko-0+UN)pl{{K2?qdn=6U4L9y3^04
z?aq08GT$qgiJCo0`+`YYPKkLYSE&l(98E_3@>0!9%|GR({*%n&&_CV99q;?i-`Ujf
zKQ*7Nx@^WNSfelAW0QX%c(N_o*j(IIo?BvuB9s-s-}mlw!$<RXkMmv_Q3nIGX@460
ztHlGTElczZ=gwLeWbEgF+XdsSvw0|tEX}MTJ;d2^53i*-v(kTF4Zp*KU%7^#q7~Ys
z5uKX_A8p8K2@WRpqcZh5&__`|uNGE@R_2sA<|VvI*ss>jzY)K{8SysO+Hn&v3Eiv5
z-~G-09Bm`gm&?0uPC|7&#FMXRrB*WnOp+}as?|;x)Xb0+^&8V6qk`%YGCs>Us*e+I
zl+Y6jLXX<#;fZdVc7=Oyrb6?YjKCxe<w<%|aSjFJK%3;*6|JQ}V!RY1qV{gM+$6R!
z^;Sx~u?OS)<r4Sn@kbihWT;sZ=Of%d1x~&wl@fnj_6MXwu6T;)k2Ahzkdq^}Sez9r
z&2)uxRMe50XD3ioq*|IS%=z9n`ndJ)ve?_oljI9c${@z|jOb2Phu39YLbOBlAEY|+
zA0GdkMFU(`i4+>CGF3|}xm4!+^8GH>P@_==OntX*mJg4SQ6$%gV{hmKAEwB^e8m85
zpA>KhzTTdl6DTl$6ailC`h_Erm(sIDO)&3XrX<%~_5^9V@%>hQm~eQhw|@b`tcSnf
z2|Z))Ci=&;V&lEysXlJsEa&>=*EWzUI*RU6Y0bxwR@U7AC}`|Fs1|^Q>*)Yt6GcN6
zN-Q9`&v@S-&b*sCDy{ARL%d!%^Ul$N)MoMsQdZFdB+}R|2RIvCz`fb(TtYTHFITot
zRIN&vR;dnE8(DZ20A?%Y*Pt7Z*sXfx3038iR{25jdzn`W-08mtuIRcBR1?Ec>@B&k
zba26$(*7l?{lAy?t4^voSW%ZkkGNxJtvGf{%px)PnL<U3^1l>!G%1Zy`=RO*FWAC8
z{Kf-&)1}hmr8hk#`XZqZ=uL8oe7D|oNpX9VN2?9V_t1i7r1*RGV}wWbRn05M@%Esq
zwlt!L<n3PG{N}eY$E$M73O+59o3EbaTWKLKJV>PYZj#$9YrZ->@**E|6QVh(y+|)=
zt18mn5wXB|*0qUkKI8LBtDM+&F~VUB!<bf+uaFgsfV0v|$)2w&6uaHcNG+V~8vM)^
zXi0Y!2L6KO=!EYGlCa^0-`ZQ0YD9k|@H9RKRWtY(Rd~Dg{)PW!6pe871f#IKj2m*b
z(l%WUCG^Ne92_erlstR^FV1|=*Tnidw+J-3xB-T(*q0QC-t?3hmlQAlSa=g;wd4_-
zFH5J1(wUIKjZEYeg|dcUy=lUM%BQzkI>6`)!kd~|^h>AS*xPE{5o)}4uL9?iAI{6a
zkIn+6b;GUtjC7B9tMLLl40`xBKnZnzf_|2*dNrF;@{uWe85xjQLH8x}LsI`m*C};T
zLw;#ZU?i>vV?st$d~2*v!6ef)VO54lXcGMtD7HR}w>DLu^{0sSo43$7;t7oFv*;Wu
zaGI%<r?rakz3A0^J%IK@z#&Qd=pw3fUL62%M8&}KH4gG7GD$xZ?e?SjsoKryf8sdd
z_zaG3ybJOBP_)pvS-NRkBG~4ZZmcP8k7NXI)Wf%sW0h7=8Yy8W+Em&?JA|%0imq@q
zm9`>vu;m|P_zrPkfsnoCu{7jA#lQ(xV1ab5MoCsnxmDr-W`{K3o9Y!zZNlzuH7W4u
zgciV2i%j?`tp!dk`X!|;!AGf2ET{}+K?O6d?Zx{rPgYOdmmJ@ezESNhT%BlccmX|I
zHQ6qTQECyl7jIqnrb*i?t&DiZl%<K*uYTCGeOY$<DlK1X{n$phF%y1lj89zIyQFr%
z`9Dw4CX9mVW#-gef5Cd6vCdb&J55P-1`5G%u;rAge}n1?DU<4yM}6jfxw?6ZUbI`+
zu6`4ra`0be=B-nF=0dOESc5@TW^C|rDl}J5_=;NQPVp7ATopdMmWoj&+vW1HWxE9n
zaYoCgd7rURPraYGU=H9(js!o4LZOx8x;faq;8^ywKYZyA>qHsFe~mKS4drMt?(k!#
zS7|*qkE>icF^0}o<CUCd*>a?#*&lvd3i{3R2&iyURag+ymWdwmyWf>F&eq~o@R>Cu
zpWu^j-s`QjjQas*KB~U>%#xAQ{l;8xnR~xJ=B8X8r^v3@`u)skzoo0*U4(c=FXvC0
z@%OSZ_du7;kd>Qcg(yh6FMPg<evarJ8)a5#`92XN(y38yzC|C8kzOyP@Ot%vos+|t
zR_pb9(yXs5<Wf*kIHZ5e>);TbPqnrl>-d|V9(;xt$&8v>t(`GxQ2Eok8RWgm+RA(M
zlz4uSdMNgbiaKGYFlU+FfLrxwklwBIcJywipX=t26m{f6mkHoFZMwQ?1k-I$oj!B2
zEg#LuN4=7d6{-A{{-K*orTpSEy8x)0EZmtoRGcz}XIjD{u&L+j2LDgtpYC0eB7dpn
zHJ4(o<d?E@q%6NuRu%&xABBO_vpfb-Cw+uY;c-xb(PMQMjIxW{y@8y-HvljW0Aq_y
zZ=k+4r@k|XxRvId(AEwFxU`|7*x<XBTfEFWPc%#kUfwch#iGc9ZSc0U(z@>7)ri|^
zl7L=<>TN!=TG}0ZvPXN$i=m{bMXpYuqdMd@FVfAvesglJuV{6Zrvv{dbHC|qU)`%4
zxF(DDmKc$^iu1bcbgfom^!3nvI%dSlLLK8x-JIan&B;?1zabDrHPsvE>E_%VTRp)*
zCByf5wUg6gPpCP=tM_)5NI1uEfnWn$DR7N9(2XT1FYAZQhfC0gGMe>~T&A+&OaNaj
zl}V+sFn(&kc`fspQttdHYb`5SgD_fGhA%y((%MB_x9XoVcGDq+Laj1epB(N-w_?qq
zyhX4_?CB+zb>46HA}gUM1P}Ax+)8Wbd^Ijxlx=aU_nWsg``l|ljQVb(VSW9^wMfEb
zJ-QN6lkpH-T3(YmsS#ump^O^KtxBuHMkYXzQ@Q02FH@6Nb3rSRTFfB8(25i2$djk=
zPmjud=kfJ)25X$9InjI6H<#U0#ICUC3u-(_G8a*``;K{^61Xf(<eUI23=^kAjKIlt
zdXv|&Vw4hWWB#MN0;lNaeQ2UC)EWyDIy8V8n-%w?lYg=&Wj;}9ZInzlJJcHR$rHxX
zvE%b48=r9h>rWLMJ}z?{-@jDGKbh7i=EU<ap^mO89;}&w$AKtSa%CYttqioZ(Kj)^
zN`h*;(;sArv%0<|`+G{Q*z?`%S3{I^KXYk>T4{KG9D(o!FXjnm^?Jb$eerIYo3jF8
zdh?8TS9i5m)X~3`znX!XPPT9~hG2Oc%PO66MWXb>@=r*jJC$}?)l_ftZkB>G-{Meu
z>Z5Xrp-&8%Vx8bXkr4vNR4e!~iSilm`NN}zgBp{m*rmz&xX=8VO}GvIg4VbzNA_+Q
zGMaQ<m#1vOA#@S89%sm=-!e`X5}@Y29-ryW*9$t~{K8X3h5Cy+ecB`}r4?);8?@*=
z5`yzMz9?{Gu~{3TP_a3LPbL~&5rG;it@}m^4Vt5KQRNkNaute!Yqzx7SFqXI|Dp7)
zQmz+1|K~o#>j75qFBPfnhd46K=5-rpp(A6X8ng=|bmA0!RcsE*G6rQU*IH3qu#K~?
zexaZjFjMq;ly^t^87Nw=e-rxSe%sD%YBnWm+vypp_4^C3jljVfxs*RGu9QRfj&%jH
zZ2gK|!#r8(?DlNd#U6zkx~ZnEA_`qo?u5|6E9k%QddU+i6`dY_MjS$V*q%N^$*lGX
zbhrXWhOsF4apnX^zoXqN3|_3<WfRcp33;`ZdKm&06nU$Xz9qVfFJ>@aRqUB${%$qK
zew5n(UvqiD1?j4^KEE44$o(AYap)UKNGP`y%>a^9_@|FEC&m$N?Wiz#0nv%`mLpdb
zOtEvpw^j6IrL|skS{x=H%`z+Yr@Ef~G>#u=<;Ll5PVwkPQ}U|t;Ux(CD$>=}HATcZ
zfQDZ{)72o((Caa^_C|N`97bSJWz;R2lEWEhjKS3(a{YNOPx<`IWB0z6qA%v?k~y}i
zyL`p*aR$R2b7-QXd%f+e+`-Y6R_AvTEfWo=bW)Rd3Z!spCwsk8hpYOd{mKg0hIpqK
z1Hm#!q6}>t1B~t!th~DMUhJ8J)eoQIt{82ZIMEoMwVI#u&_2<f6TBxuTj+)fQnY4n
zl{pX$wc2LM9J+rxWAJ~<qdA8$XtQ-YE@*o11PUsZ5$^xyKv8umDpy<jx+;KLaMU|G
z&$j0PFonJ&QciqcLfPu!$r*|OMvj@bdPSYm3zgO#Bg75s4!#rjyJ)pnz&}TI;zB7Q
zL-ag8CC0IP#b%h!7r|AGzUXzlKu7SmNeI34DMD3(^YmPKSc45wFIE<GhXgydC3h(R
zxrw+AH4b#lvc~}xF?V$I7J3|n-rAC1lc;DOywjogJ1O+uLC9Tqdf#@+0rY;^rnjdz
zddvD|PkQ%Ck2m7<z@;@MH%Sv*y*stg?T~~aQ}xm~e;RSz3xEDI$)6!)OY-MeWN;?&
z)u1TyB!1AbioBbxcR($AhI(O~{n1Q^zTe<W@ANI6=Hn<#Twp%qo#N}c^ny(w${Uz4
zNWOv1mZKN6p_Ue19P1aC3n+L$9;m=fj?%QQvL(=#YhT=yNh!JTZ}vFW#yGZ0x5u%C
z9IC;H^s%qt1MBY1G$lOfXVN6x1wKcKxO1r@_%qx0XQhlqbtPeMm(e7nP>qyvnf)Ft
zHu|xZn6Rm$&S2Z*aE2PE0A3cJl|ighNfx>%Evnn3C@c6p_H@el)kDAJCA5pEt=y{2
zqPcqmmn3`WIk`O~X8zZal&&cRH+2QlLuYKa*_yNm^w2h{&o$a&f4A+CAoBuP^x5r<
zg*=Nj^hytWy5lgngm|?6f6=638Sg|bA84ChE~B2Kl*fubwh=mWd))pCPiCHwV@}vB
z34KCmZnwu#{#FYe6Gqa_AZA-frJb?gDu1ayb3KQHJch%Dd1GuycYA^Mg)Z(J(75Dj
z?oM}S0$#y79bW=>RuN>^qkZN8-I$LG+|%Be6XXV_SDz3B%<Sq9-NE7dm`S-JGltA0
zub2+&bYtptz}oyKIj5K8#CR)fL5fJq=wrAEc3SzYi`t{Jn1-r0P&j0L$#JRI`Xt%L
zN90H5NHTbHdZ6;hV+orlx36>uPcdoBm}_Xyp0t7%%6M4~lrJ<veNh(jf%D;_g*jU7
zFNG*GugEnyAVAF#So}Lx23FQ`C+A{kErvD{zNqBNPiG}DaJes>QEexv@6{iouP5Zl
zDFe*Hj0sbCW2~FZ#AC8oCNWY4@3|61gq^obTWII0{;S*2Dzw>{YZInuLneDGd~7X>
zm(Wh0oD+K#)nd0GDesCNp+(bOfgHVQ(sbH@s#-L~6}Te78M}{5v!-~ZJ;a<~J{a#+
zTIX_zi&*FOC|>=96z(>VSJcJji+0I?)1bz4K<V~)o|x~`CYkH6iTyH(o6ujdNLee)
z^PB(mIMuL5cDA!Zd-sN7gR`tZw!U*Z)tgm$#nt=Vfpf9RnRi?V-Asj7!A^Z<n{<gE
z>m867mWDHy=tgl)>_({v!E13W0)M!a$0;{37EE_O>E@LHx-O4sB)s}KD8h4Ym`0sl
zbH-U`4Rg6}x-rz57C4U)A@E|nLQ}SnyP2Ap<r@;qw!u^N@Ex{-lz=nVt4{JLmc%wx
zTHbT_DL<@gb0Uy6^vMnQT8F9D>V)HomqBJWTZP(YNT}gAiG-3v7T!ZwJ?<~Ma;#Q!
z2BxJRE`5S8b^Jcf@3QDpGRNhw%A<U7W+`)ytyhNoy{wxr38lJ%%ckhz`8S|c9=8^7
z(V3c(Z02-_8*ZX4Px}jYR$7Bu=0`DUHSLt(E7fqHT&whSUqKTg2!Vk_b6`u!`0p>;
zs@1IEL8d}qw~>9DDKq?T@H1Tv?a{QQ-$vj2!)4EaYoyG0BYK;y|K)gh<upLhy<<hb
zE3|jL9>(a^+R4Zec1%ZlT3X;t`J9h1HYXjtv!L|`qa|fH5`XqW@3<HjgT?ieS>^E+
z?a*pk7#hU`irpp+JpT^Wz`&`3Zd7(=*mU!CY(8~;R95s~<X=}TTxl8S^z<K#%=X}4
z!g1VeW<O1o$ZTPc@r8s6uFez^I@WluehH@Tk_D1%J}k_|KZhWdJ+5CeEf@PNL-qMd
z;~Y{<%CkvvHSQp2qtoZ*1L{qyX(O*gJ*YErtakF19$hA7TFvRysR*aloJCcBbJU;D
z@6Yr!V<hKOw6CltaFNeG^W~AtK%sj4+v8cXq0^n8SeRz5Tk4RbUew*bSMktoJ?%D0
z!7VBPfPWqE{l=Uesly+>;L)7^u2IX<h>57?k5*HHzrMJAlAD^Jpa8asUGdFQv05v-
zi5%jtlHd4R5%z~<YvLb%xo@H0{C!%@fm-cfg?>$;Iz9`VLThr3fvTS&t0E!sAc~zr
zBBUf$MwDJP(_}%(+YQGjz!cQ~mMufO98zw*5thL>RX!!SRAw=`{PQ^dt}a%RkT+JI
za{cE0dA@?reR2TVULkX6A06OpKqvn08R8nsj8D1-?_}v19ez&}`~>Jk6pspjAe}Cl
zh<g|#EoGq*^+bOX;UxfKj_~GtZAdMCA0dM7o=DX9o~}S&olsK4{$@Lw7+6qslcxg&
zIjhQ37g>KOW#W_1D*?XXar_V{k}0D9a;}wC3Ur{-f86g$`qMYvs2lqwxX1x(0M48|
zRxg^&;P?)WLq%#emx8V=-PcZrjZ#&OI{YMD`iwXT3L1i!`9gbhwVFZX6FNnA(+Kz)
zTH`SWs{9v7s}dom*Mn&EYbsAQk1k)q+o176E|0p=gl4O>`lPvCvEMj$lQrfBmd@5v
z!0yj4O3tgoca3_+U$7NVhYGry)WS4;S=Zp#Sm*Yq-?2=ZFD@;cAgP29B3!G7%byWS
zcvyTZzENmVe3L>oCa4<wCA!MxFZfi~^qqQo73Y2=@fB_woJqe@f&k2kx#*{fd91q1
zU@7Zu4N<q?nus6i-f~8d=qQ!}lj+jq#M(qo3p17Nn<^~NLe*ELL&(@QB`^9A(-4~u
z(wA=#-q>rG!_<;yi4aj%9H!jBpvVv+1LD#r0MB_`2*orJhOsgz3LX3g3;%lVG@+J|
z<7963#f*De2scqgi+{vj+e9p;$LXe{?H-ni+HR!dtDuG;1N#1PNOITUKM)%rBpIhP
zo1TsokC}+7dv_vwPwBgRHbAAdsJ5Ia7co%!epYe10z~CZoX?)dKvt!-?Dj9Z7N4OO
zE0`Le_3$1>SpjJeCIU$Y69BvkfVh3l(viUF$NF5i;$Qg}Gq-v&+H}*+G}9I3%qizR
z)a>DG_k?)j{&YoIyGLT}^<JO(nrJL1e&sn*tQVd`A~|~~v7|gdC;BcGNGMB`Lkke0
z(mJcET<(Y()$d%9lhV4VbOY;EV#A_8k}TZ@zTr$j{;?;^^`e9fu{Y$h$yxl2pTLjx
zMb;kHJl`2@n;N>YBARv+OTO{(Fgd>>$imD{wLC0myebl)aoyl>@Q1X?Z$4s=R~TKF
zT$igUwW$1A_Lx(z<VJ~7Yj@j9lvl5!<Tu_ENoqPpYAmG`a%9(h<E@VL%so9xZBYgZ
zgDTt6<7j+Y^o?u$M-&#e#|`;rnPLNKllAC3g}&t*WV-dL;1h46IOJ3VYA;vPY0JeR
zDOhQpb6Z@rq%45sv(>RpIHKAwpQBk6bmU6pBRz?+k`F)0mDU70ax&h<nG@l&+z4WV
z)amrAq}R@N?3rE<UUeC#Ry$J@;h#CQy#bwj4SW()@;bGCOviip3Dx%Ey!KV``HFOV
z?m2_Hg?_VmoL`O)TSqxgV`7ek30tA9k_}G$UksNfd3EDE9{%O|jpBUWm^9XCseV0Y
z@zyl-yEb%EzL8DeBx>#CNqGV0(cj5O_PJY2NsJV1)-U<aILB%XPbJ3`kMULfkM(K6
zyQ@D;3uK1A=o^?xT&3d^Rf{P29~M~FFQY<K9)29NADE|jupH!gGli~=s@+O)JAP-Z
zGzlb_TVVMY@{|)TRIFfL_i%(}*RCd>$()miu2Ji=3vuy@S^H>24&n(aekWXYN}e3n
z$#683P#58!P5Ff0nD0R`vMjLEYP-ock{^wTm$HVe5}UC!!jFnfR0FeFoTrxj7g&sb
z1T-i-+IQJaOyE+>Rz6zq=-xS==&N*p;d_bQ5U$!-co$8E%hymp;_Wmk`a3`|exmWN
z9w#(G>k$h2F6vtmMT`qYm^=j#L2&Sg<kE(-X@gMR#zdXNZqp&2&#5b#PDbictZFjs
zLaNe4g;G^iqNaQL7u0-bs^c+6%A8i>#TM2Sy<1fpUuRnAiF4|0<s1x*#O0K$7;tm(
zt;AW@CGZFLIc%1|{q=slCo|mGo?fk{8XoXj=_`Zv0JW0XM96_PhB#O;o@_lq(ir+b
zGe=p+)c&}WLNdIfVAt<sL!;5n`TIvwRPY*#psP;RAw8ExRa+N=fUIn*(U6fWX`f0f
z3L~lsaXE5^kkGi(wc4RDKi1;V-Bv3`2cz<Izv=Riku#l{t=e^{7zOi6S}L>EIX74)
z`~1|)<M@Qq^f3&s29w$F`Dszx85wM4e6g&7R}0U0!NV23hzjlTEj}J3=QE2xQ3SBL
zq^1P<G~3T!CZDmN<@K5u#6UOoykdh%9!!)|fw2&Z?#=aTkFFw=zGxi}O(Qyr4SAl+
zqWu-_oWM}os(Q}H;`8NLeC%?c`QQ^kc4jPc-Y+}eICx6-`|*?(oJkJB#UDPWbgyED
zzhGO!FlPLNP0vXqf!tLmy-h&h2OzUn+>1_3b~UQ2b{1dt^q-0U92+)iPYF`_AVpOI
zfCW63_BdwN7h0I-3iOfnf|@*#4Q<T;jaR?u2dq3``OK-~I1kdR8*CbUS1(v4k>Vph
zkX6y5=H)<g>6*XUX#kJA)Lb};eTHCfg!90skhOI12TjPTzF^(!Mr|%>+Om6u+CujA
zHpvuoWL}+wwTzh<i>GsZ<~-El8jgkxW`mzZrZ`nd1ub#l$TVt*gR>vr4s04Rj%3~V
zq2R&|Dn8?iJUQ1AaT=@q-F(3NaD|6|V;!E6E|#oJ*t<=LtaCoK`TMzQi~?C48ogal
z|Dm+TXFR5KqOl=b29rg<m6`wjIC-(mt?!>C*gW=xyqam!M;9qcyEaFE+>h?GduWSZ
z@D`2B^^KW|H=IYsH^sF3x!n%tM)Q@bv-PpWB8Z*WztXyW+8125I9lvP;d)vvM+MXP
zZp~9|zaockxlU7iYo?OZ+8eN;qn8SkXa~aa<nDehd@UVT^G^k`65SqLf1U=F7+cjA
ztT@X>+$M-P388$3Y7R#S!-J{dK|_tHkbf%Vp9=XEdBACcL;5uB<O$40CwO{Hd^1EQ
zx=(y<{o?osq_>IF^#+gMoK9E%Yw_X_UAZuz=>4i|#J}T@w;<fVx$^)`I2U0oY=03b
zur8$~TFt9`a#}$J4iV8~s0!8_=}o6e@8M*)B@Ze_6F^0D5S#0BL_o|3ZE2`g!e}U|
zVV>tRnyk5u#bBo`5&cjb@tIdK(N_7i@BLf}ik<s$-<Yd%lJe4^cd(12SvOVyTuGk{
zbv6G42scD&h6J7@?KKIn<PB81qQ6yw@@A!#UyhOEjPGhJiatz|tv^A7KKF)i%)DH=
z2)Ag1_Pup79VptReOGo?vWJAuf;rW}(hX1fgmAl?d64du<B*5fvAxNe^#O*a=(L|B
zYCiLMrJ<xd5plfic_vk5=C74L2oE0F(GO0vrtDYQ0iBg<Deii7WHs%I)=)w>);hb7
z6&cC^tQV}XKSeKBvqH)1D%=!(oklX=PMGc|ii{3whsRC0A&xW*Ky2+%C^HA<m{;ZL
zj6#Fd$=8mk>L$Tjb7|<*T!~zv8yCD4odhDzI4Cjg(R(3Od|b4zFc4vgehNCY@CnfI
znf{R;pLzXAjH$JN5bdDir|Q2*qfYIQ8|cdUBDeSW#$4e+5k&h7kLr>XN^9>)p+;l?
zA?B|Lahyz|O0-(pZxG#?qzC#~MACYFk_@BjIr<HnL2WR8Mf4Xct5<Zo;2zKZGnL)`
z<dnKr=9bC%J_pRI{9#d$@nRLKn4MzUDNgBT)=os<#B*Mng3qU&0%3Dpm2+VPAS<nc
zGV$UoU5qP&QNUKktP9tA$e=<d;{&OCEv57M>JQh-4|&GQ57!FvGvzwJJ!Dy>^#7au
z_Gncbxsk(;MYhbJNiM(froUiqrL}{jMx708UKseG&Bv+q1>o7^_88Uc8M~(2!lf#+
zmMhPqQt={C46MvzFH^#6GhxydNhT0Y)n#4ChiD-Tx6bCt=_%3u6sfe<3}xPxpto8N
zArf+u9c0MPjSq`4O+%j$OUSUJrcfO%KJ(u_?JK#;;T0u&OofV?<_^P(8|yck#Egs1
z+GO*A1s_|l7Ic;tZc_enoXpZ^W$y;L36;b8Y$-8rAxy2*V*c1_ok?NhJz7f4Ti(~l
zl(yn=vKV>UHW#>9n47Xb=for`LrYo9I|D-**8wb1Bx*A88_XAp9uf4If!T&~TwnQQ
zibM#Lgtm&(RqN^DL65}-I{poNy-=(9Gw8~i;iuA!BBDblAs`KOhC%bMED6tH&rU;O
zq@vCo_MkCrsVwjMiW-7Dt_lx&j)Jbq;gX>llf!`_8EoS78O0u70RhDO;E3!6ti2Gi
zh<=kljE}@K5mn3DgrW)SGFa!Ot=6sx^_#qy<%IP?Ea*e4nxRbuYxc3&uN9raF8UvU
zjkgb46u%@rSeXaxRE<6${k|K&W&Qz&z4j~vmq#M7y%VQoZTr1nV-}IY0yhig<((<M
zgf`$h>$T+As&v1x1Vml2cM|$)$rHTe*hNaqn+d$TljhLGhh!jA^N}X+4Ls6gnHlKl
zFWsY?4?Q7Ynu@3M<Fcj&iJc5B*uW+cK+s^V_BWCqT41?@0g)7@Xsu1v;#pE{ZK|%0
zKN?i%fHRgq!PlnhNIWh4of~xH88zrNRWIkOOlSGhEI;PrR`s?-Mi3RKq)tw*w0=Bj
zAM#Wxgm5D1V@!u`ei(n#HBusc!RHq#e^blp_?yhncK68r3c1gb+*9n_O?K|@O72_8
zeZcy&njf-XklRz8Nn$?dl{1?y&F!`h=r`|%eB}^&qK>a3-)~&$#qBs<4_)r!7@7L!
zlV|DYWsDk2wci3wGKQ<X9NqOTth2IaF@Vcke8!-WOqaYqqg<`(Wd_DC8WU>$Li=Ha
z1KHdW@}#Wh<zqs{SM%)t!rn<cD?NZ^raDEq*y>7a=0Mp5$vix{|FK(pE<aRra-HVn
z(4723H7BR{=3pqsn{(Nsvk%&wf|TYs^4qOF>*DQcuCyLGCD9(;9BNLufgW&*IoV${
zS=UPHQF=9yIqn?k(cgUat!cinSM%W-#y{m-yhZk)(gpK-_#5BSjjggmXxy?vFM1oN
z?g5uJza5N?YGcZ-7pz392B-VYp+0x3&bCCq!P31kKi_9g;FySudy@cy8p7op;v{Po
zZ)1yDx}jhLTu%B7gM^<Y{DpeRpV8@xJzi=3;N(<)oeUBx{M#doSiv&g_VZSc|BtW9
z%9(EV>$!3!anmx(s`)+-g^^+<DQzX%pR%>uRgz}!>_i{r$c&nPx!L;pAK67B_Q#_l
zjU5|^tg4py0%tep*QGAm%~`;{j)LTFPPOl<NsMtyuk@t)85rt@+50t9Qc9T5;(U%R
z#h=n+-{nxw$6ENJI1JK$K|~DEFm@b*y&Xz7uFkPH2*>$vloO^cE(SutbAK+wG6NBA
z2DAMA=xHc?=?^~kaqpV=p|V?2`-h6;^_$tcc^d}%3VrbxsP0AcSvQ!(tY@FUAR;5s
zx^4dOtXxeGPlC<=<oul1b9_aSz*N8S5u;$Gb($aZ20<g><KJ}mTAxwIR*@|};}$wa
z8H-|0?5uPCOVZT85^6O~@;F4Z18i?u!T7X+#S`M+Cju6jgK5nM-C!#SR|sFGqJHXQ
zKZ2h|sVDX%>&;GoCv?jnwk<Z|3yQCorM*?xDfiprPjb=PsIrkxNW&e>35fowRSS6G
zS6XE}E2xzpt}^K4N04f&bwNK&A+|X^Mp&+HXS6Q9UC!)Kxs4UXpp<hoxkZ_>f=13O
z<>s5Vz)gxU?ki=JO~y!vI1jK#tpKSj75(NY_8Dw27u<~a0;y1`T51<CeH56pbig!a
zjFhjj2otppf~V0@X|+snDu7JHVmv1avTIu?HE4h=PSwXAVtr+Rj3=s<mDc-{zUX?1
zc6B-N&_ch$)zRlDs>XMDN8ca<%<fxs_ax>Qlk#P?OxC?4EZ+t4L_XvpW0jXXt-?#6
z1~YusOoOvmNO{S<itvviM7-n)+NvZOV7GJ<@)2PXNMDuZQu$S7mrTm7I)#22-FRD?
zE2+=)qU@?qq@HMle7E^66?EG#xA+qoT~jR!jG8rgP%eV6URukvV2b=S)!x95;M7z*
zohLzu*&MjA|IJt>d+NfkNP$Z0m!H9N+mXdRL{hryEbw#Et@A*qyBhn76YFN%qeZIT
zsusaLwx-fr(J!IT%fB@I3)!>fp#P6u2cSPD1^vLSJ<%T)*TU689^JwJO@%+>YkCU)
z3@QnIoU8Qll?i>^_jFqy59+Cpzk!@1HTV|+Ul>v6FK|+Trqzy<l(;sYl2f=^O$pUu
z16IG^rr9B^0YX^Caj=Kd$>RqWPOAQ>TI@zgLw|ReqoI53x9_H*arlfwFXg7{X(Etr
z(8pY<<Ejvd8)Lt>?G5DAAJ^Z67B|QBSBaU!nm{m{H40G?0?zSUbhrQ2BI8*IPuyPZ
zMc-@RyORvcOWgm*qQdbIPgO;{uDITxmJ|IaeH7fZngOImt5gPrw%oFYJ}#xot*D$m
zAU#kt{%x1B?5O$+NB8-)KdvbQUq<a_6&J<ytBs{|*+Hasxp2T3fkK}!IV`i#!ORD$
zn8@K=Eh@DF{g?!_7OwYo;6Y)r`Ib(gICi<zCi}0&8VT*ky%gf1JoKsig}yx4gRY1R
z_3cX>8<=Bq4%*64>t=!(XL7O+Xl&*T3Xe75Y2h|{i?A-RJ*BwM+a<;s5I08!kleDO
zuD!v7soAuumFCY1U3OCN{o++6@Z4`$=D^sSa(<!ef2u!suCVn5iXp=m$8cQ^W4&1|
ze?g05dRDuib_cT%#J<5D$$U-KW3%kg7CpQyS%h6~Tla<5oLtlrkRm4sKc&c}qg+6%
zRO|6}eayiC4mrhs9;Rw8HcbIjJ$@S-i(J7e?e*^9m7y)U!7GZd@r6S+K06rea*L;w
z8SB`p+3DkmMPfFLCbo=Pg9g$@C|_(oB6(S!4R!7foScly#8}rdSFZ?dE#g3&;K!D|
z!8u_MgG^3WFxQevAdw{F#UPwdK)iESWyc2YJaGh=-5rVPn`)14T%;S*aujts(U|D^
zyji+&=_q-D+^O?rd;C!887dv+ihW0j6?O*pAB(Bg2!<3>zmmV_{=?Mz#r0nMUlhPD
znm@OGYfd?5N4>kaUFKol>NgDNTvE7-6KR7N7!AcQ&^p!^A~0aN*ne6k!P-+po!cIm
z6rM8V1$Ryf%K}fWtD3mFV}mUxLKlpjneBGjJEar=tn=wfH{BSEEEkVt3PPdI9|Rgg
zozDfBWsTo_BU7r=E=b*9riY4LnsGH~EWbxeO8dC<GkQK>#I+#r_W8x?EElJLu7^tF
zjW@j2?O_=izfri}K|j>FF>tojnHQdNMrh9&^GE3~xIM1LY9c8u8LS%Obye?p(0C)(
zRA=K$g!K3cAP04<`_50rPw~eX|MzhNP`UOnZxGgQpuI9z@=^Zl$q&xo&_m5EQD^>I
z70a^2mEot{g>)GuABvZ><)3PcrxGFaFrV$<QWd6s`cmHgcxG#!q!zz96AN))?DTH)
zQSpYMr2bJ>^jTmb5%6Z{PQ;y=2X}X!ex_6(Hof@zbku}e=Zhns?V!LwvVjtML8hB8
z?U~yz9^lFe>N1+(N?uSSw$Ptd4)diJGFlh!*{giK;i3<_{Fj`w_970hS)!Jv)exbM
zFBG%Po^R<htC;m*T8!VgD2rhX!<%@7pg=9#5c_ew{hZON1~^9zpey>%5Wux7X}KPL
zD5APi|EYY_%_Yt9W<G0wyaJkzg{BvhCjXh4XVZkxi-S-|gz!AYr}mXOT5SUlvfv*c
zpD$2s24%{l@uCedQ&VqCY`E;fG5YVjko2a^jr_=ex;g&-uS&p6=G&5xzT|N#fzPYt
zjUBE_!eo-;dj69Sgq1B~^N{1Wk{IRi_%PqC$G@+JpH8*m!s*wb7@R3YCyY5Kw681n
zf?W;+W&8~kik|TUdp&#Rvn|s4@c4#>4m}x{$~&#60*a<>jBB0ILG&KGy!8`t4F6l=
zT~CyM)+tZfN>!F}_p4rapnkd_yhU2w|1o}ufDQZQ0J3Jiqa8||GMFTy^}{u8m$zHr
zkN4j;?ZrQe63(2<87ZAuKF<i%SmgSK<LRO^Rm(T|k71o4lRGXIAMk?C)zMALQJv6#
zsP|~I`ee&j9D-7|`A+%5h&gE_6N1x}Ydm`4hh0sjL{hMArt~vJYyQX}HhHSUXh33I
zFiJm*HB?%qX<~hrAWcgJ^QXOmaWa;@M(H2Phv3Kh;--<HY}*^9h3l0K_Ud9Va8!{q
zW;pu|Ly;k&){ekV(KH*bw>3@fSTPwoL$3*-uE5#FP1W)w{}tOq?$f!!d#HDfx2;(F
zlNySHA3AzCtV$^tpB!e?1!hA717j~a@>CpJF0l3oe=E32hF7bB+YPsQ8$+F+2i}o^
zu|<W1(%z@N!JqrWs%*Sb4q6N#t^?brJt#Z0oYv(^>-Jn{x9%I~?&-4aiBQ*wK(^Bl
zgkNeNZOXQRpk=JEeCzghafDUv7Ag>rYG`539vt-QE%Tp6^elC90lL$il4mkTu^McS
zUrR#A2WniFxr|G@qRrZlU?>A4mk+l5&%${s3^UeoSHKqG-@`}8zv~h4+o-E8bf?E1
z^zwEMZ*kfvf)H@%=}y>F9fEM3@%U}mGU$!^y7XS?Yfl>N<lvUrFJ*jTzp#=X83qzz
z+RAy8559wM{DvsPU(@UT<~iTxg^{9`pQec(X*hcRH8gkA#E~$fOU>G)`DI0)2ZqUc
zp09}d_Z968WLgjNRA$~SX~B>D=J<0JuygYH;R4#gFiaC)__bvI+f@F`<#O7O{oyM;
zq?egP%GiWfV<8SrrQ)4;#m-PIOIZX+c`P$eA%EZoUwDZPcV*y{;`Rx;H}D}#3(c6%
z5leq_uY|fazc>PDM$__b{1lsWvCkBH<-pJR|I-$l=wYw(DWTGr@fqw4{<qEFGP4}q
zw*`mCf=Mf^XZ_m_U4Qc%M_vE6c>U&e9t@Bo<U#c>){?qQ!e;4W^s~KzcaVh-rXUNa
zattcS+xp8aeOVS?{*xXGL;icLaH1pdwM2S1e$4(t_y<2a;D>p^9CF7_v+3XqznbJ5
zJ`3_)SXT5YdP>D&-%sbcF3(KYGMPx&#_Ye@6ULWV-jfk)*SYqHbsn>a{P;<6_Cdr#
zV~5v}nlpDnR<&EJ%|PU0Kc!`Vp}4ik+|w0%jkjOR+n*j{k;{h&(O>Q8q2iZCL_0p1
zWsHr5Y`m5HC(h59PT(Bp&|EQ=Ufj>wVN%w~ah7t34QZk?O51p8kr$6{&dcYem6LBQ
zkwo!KoI-KgO%*Jyezi_M2Imp+#R`X6+E%!}m}q!;#joxi%ZoQx-dg1eXsJWO{MCk>
z@2(SIV=Q<^B2eVi9b>_AESRUQ#_!4yzJNn$jfUW**fLKu<$H#BwtT17z(XoOw?i;H
zr1*m6)?&esGLlouX*DyUhEcxU>VR%$`SR#}ymS7~7kiWPq3qAlqI_2%Q}$}rl{;HH
z<D1kvUwa&|l~&Do88F$bZcNA*H(<tUvd1Uirdk!MCZn>ag-nZVMeKxPN<8Bas2s9M
zytoB*(<N$9f;D)as3JDx!NZra@-UVMuRM5pm?95Tco6<goX*1>d6=_miEzNJoxDWq
zwpE`qKH<YscxJDvR$PkDL#4f;E{?2E88776xp!sI$W0C!gVxHR5!B-YM({Fa0f^?a
zht5#zC85r~f#EFVDt}ve@OctqQq(YS5NEvY&QQ<ubF7oNBN)Aw;@{}Do~h(htkT7w
zJOk{WX2y^58Dw#8V^4HjiIbRQu_>@d&pMA0%-BsYuX#<d`@W1ndiVu3D!m(eBM0?3
z-e_rWa0kyq-Cv~DiY(94i);^lVEn5d-m%6lFVWSpL3Y29oQP1Zgs&7vW;JDu63-#E
zx>jZWPhY0Y(Qm=ein`F&w7_P)X>ojdZZ1~!cAu9I4Sw2P_!p>A)Sjk)3$i6ut8Tm^
z9zi{vc`aI?aQ$l@s?@{JiE~gll#h_k2z9aPYQ;@MvdelbV^3F8<}k(?!H^|=ff3yS
z1f#)FG<a82j${=BSZS^5R9%4aQs`e-VqQJ0#AvR!(zP1dUm|Pa#r0dV_3)xRj>hIN
z74ffexK7^F>00fN$stCQ8yXD_{>x|P7|k6m#ww0cFE+2Q&JBI!Hg=)3*^V`+R?urJ
z4wdA3+{K~0s&mQ0*&wTMbbPc|XdK)X+LEsJ0?54x#nn3&`@#?8dg9}MiSb4^eXlJw
z$#ygDcA`J+xQ8_Y(Z`;BpRqQy)$Lms)9bgU)mv$0;Xx9EQ<{ELZb{Jx!CO?#^<ch5
zYSyTEYkFu;TJTS$h3!&tyiQdi6>FKciK#6;lR8Ul+5<~*`vW_ABh+>JS-fABnK$J4
z-T3jn#I_(!D|`lrg6wj$vHDMW!R=sGYy@&W#Ra=2gwOw(P({!QwWjxJGgd4eUbx}u
z^x%1=?wfLr=D=5=BoPjcu&=II=_9pPuB-q%Nuru<ISsvm>uOG3Y^8$_cr$CSCea@M
z#HyB728PJf-q4yf#Wf2?)=Z#+Q0rdW9coT98oCjBewLXXYe2pkUO$)NwT)qCk&of^
z#gVD=cgND&8od)>^hf7?y^0p%UF0jFInb{u{ay4@kNz&2bFlsb3DuAsLC(@^n}eKd
z)5ZW%{9+E@mdi{L8?~WhV~TM)siB*K2+mE+3&jN^r{dv<Wat~wj01j-{U(E*de+10
zhmo$DOjme#0MFT1jOF18dGPY^j66)?AtDdcd1#S`IXtvRZv|qdHHTBzrF~{L2ZL(0
zCx3!nh?yzKvr&_?+8WA?HGbt#Abg2|>zgBUw9FJ|jzcdQI>b<ATV&i@fq%<!8S*ep
zIkNob(=t2ur$1fCPw1mu{93h}g10Jxk+8#cx49+$P|j0sDmFf=wCZl!O)Sh*!sI!v
ztbUEGjt^3+<Lp0@_|c-4s#gG^)h-g+vrr}>%8Ba|Y<Vj)7fum)>c)ynYrKFg+8lUD
z4vwU%IyocRycu<UZ%$XPzvzp=SGm$H80E9%C@O8P`a7;Vy9KeIRMaJ2$QCfwF>FfC
zoq8&*O*iiD0*+QA8%Aa6iWAogq6*!0Rff7_;=uUw@c6)NdzRGiYkPW$KM!ZVt)T58
zc;O+011vH|-3u90$c)OL!x#Ba#;5Rdd8@Q;zHN7xwdN$Xg~rjJ<wPgw<gtDM(4;C?
z?TE{}tOm}`RUT(KGz<dCW~yv|cqI0_6&U9$dV4NMHV_{4QKdEQTv@_w5<6p&Zd{^P
ziv7mS9N~%Mc#ijP)+S+b3oeQcmDbf~Cdw7jAK*l=#cyn>wAyzPP+~O2o~?_UEKRO{
zG)yh%-N<qGeq#&=Rpq!CSPCPtA0->%H`8N(OTNbYFL6>xHKRhJMLBv0i>xcPx`^Iq
zhh87`1TyK(!Abt2nK@Nw$-RByiLBxh5~=oR{d0^|%DU=LMuRgAy;bKbMZ1mm8Q#)R
zrR1xH1uTC{u0QGK<^J$YB<o|@>GgA<I4$zymv>sg8i+IwXPD!t2aMl1k9Q|S?4yK!
z6#n?x>&`_iTq_ZN;N&hj=5NG%v<8)<)e+>RyZ3X^j`o8{Xs0?+l+7XyM6VaUIrkLY
zExw{TIdl8?jIp-gps?N7WS<BoUf;3G-%5YpflcJTJInQIGl)UB>-6v|9uYx1x;|A6
za?+&rE;r*~F-S~;vohPyDPUbPT=sKi?$~S3cN6l(c_Htq^MkKbGus?%#$)VRR%=1f
z%_F2xM)vsSeX}?~Ty8*#Zl1|SC$`_4j!?QkQ~X|!lWsMVQcRyU_DiIytU?aHfMig+
zL{I~m-)OU;9H_s{!2?EOlZ7+S9W0K4j&+N-cu?nobo9U3e?MvMjcI|MMoUM_Zy-k`
za29#1u&Js)$_Z|&{*Wk*!JiF+PT|Z~ShdkP!4Klv;~81_oP`}qrbV((Oj45qdZbTr
zcyV3pEC{iyp16*;U`sxO4U>JF{GvsDIOMpmS$psw*q4Q?ZKt{IS7>U2mG+_SvC?kt
z<CK|l?~f`Zre1;Z73^k_`ec7mr0QHE+_(_({2|_P=cmu*@ch3+KTK4+I=NoO_U78z
z=dLSkSMN5MRBSFvp+~QeN~5k)1^uf2AyWT^{_voI+@mrqeUkS4po>e#ZJhgV>A1JF
zn!CZnXLLAtta8WEkWzEk_(DzGE73$KV3$vuu$nXdyCm!(qSo8PwGp|bAY2|v)z@;{
zU?{?n>uqEF3AU9HT6k5sAGa)QC_`?)!sQi{!{?tT8!F@o8RIYS2o!%&a}fVV?K2AE
z`6u~hU1~Fn>T)4M*Wj*y5!!3osiyi?R<Kgs0Fy!ACS73{J++{@tblW{RgTzjrLV<p
znoYbT_|x&(z2YnSOj{B|Onu?&FK|uJp3h))x293Gh3VXzv{kf#HnE8VlINZpL$jp%
zcLi$_0#^$)(@Mq-OAma)d)4K7`g4M8>_6;r)mOAmt9d}U9BOb!KVw#Jf9ISkXFr{M
zm)%tMcYjfr7P?2c5uQYF?y#|C1z(i8W3jv*@uD2M6Bs0yAzh(8@6U6WjO&*kh$&JE
zuZlXgC2G&88|$P=ni?7m0nvH5i&6p~`wL==S4y8qu?WfvI+d|eR@7OhO=v1y?Jw9L
z8`7iw?sdMR*XRDh7iLuy>J1vJn~y3Uval4~0^{(u%>7#I{8XVx=_*1Ff6>mWLE7_|
z=6c6nIxz4rdCk<_J7Q1y!qd7qV?wJb18Gi|?dvb-;?!E^aES#&&i8R^OU@x32KX-)
z0t^gnn;iDL-BEE5=<auwFh|{x-0!xR`lA6Ng_UT_5#B|laNI>yf@=ImXS9LeN-Go-
z4Xo_j9y&xWmdJ--sY<;WlFFu?=Y)`=QHiU5SE-Yl|B_EdZ)!{IzSZR`c(aU?ch#Ke
z6-D>mGON>;o+=*7@ONnFD-lq5!Glol(toEtf3Y$Ul5I{Q-(era{q_Nd;q}riV^6^v
z2D)W6g9W@JxN|?yp1=O941gtHrSUstzkev!hgncM;W!M++VhWQO7@ave^I}(QelL}
zgN0X9Tk>OpZI3X$qf+MnocmeIxq0yUQet+KU~6n}bg@hzRlVmcXp|228((PufO#if
zX_ky~O)kn99prqc=ay5QeU5q8;Ph?%Se^@9jlhlMo~XSz=2SXYt1u^9=}-TIgIrb3
z0b;%tY(>l=cZ!%Ry}){YY#l?g^a^`S&}t<_nwxo?60D80DI!@eYW(dVT({I$uH^BB
z8r{-NSN)dUKK0VpuKL#8J}pJ{f$`G1(_>#hi2Re|D^k);eu2`bMe;|9Bdi^d`1-=7
zT~Udq?uJ@$SOO=;?^K-nvt6LlYO+Ljt3hAMubFx4Fr57@zfq&~IWoSU%c5T9Ieg6x
zT-Tm?<>@#U7;m?K9r}bbH~9In2W6Mp|LY{mc;0Mg4z<AmHWC<3#zm(I7&l*Yf*3HF
zw=rxpya#_K&L?|3=c_T2Rjv5Dnm_e_<0}JP=HRy}*k11m<hQR%3!EWN2HRXXk3w%(
z*r2}7^Rih~vnnU>wa`{E4t{f&U^)2NZwr<sVmg#4w71;ptbey>UI+YK^6WQM%KyxD
zvL@%JGVvlPPrPC|)-T@s2O5BD7w&aeTHC&28>}N%W#pl)F{{E?GB9xy(nmLAW6Ol;
zmT2wAd%Nmxa^_E|_kq~$`}8zrA9daDa*1^$0vE^xQ7?%1H%M$RzRMH%)HJRqMTq+k
zGxJ40$0;DhoiR^{`zyZY1XtQd(;tCH%AHlx9Lyq~zxnUomJF5sZuY;&sUP>uf%W(4
zz5a`P)Srg@v}ca&RzL8lQ(us*|EEh1tY7I%?zS+8GusS&RmDDTwl=;4k=+}r$GHNh
ztpb2-DNxah5{sCKLySirVjrl_3HukH6$j-xLAiM{jL)jR#1*(!*#*H3);|ExY%9IE
z`qGgu;;o3{Wd32z;<GP2EJN~UuS%!d6;ykRFqYV(R@I$T`9~-KIxzNrTwZnawAATR
zQVFN@FA1TzzH#?Gt5$AZaBsxu93^+}jBn+Swp8w?Xxtaj8uz`&)v|j$^9G>2Zqi=H
z_~>lxoX`B><p{q;4GT}<%ZfTl>1uKkaXv{pCf5k(3;b2@#Xa6{kG~hL#>xx5IXwIq
zZ880ns;_pdx(jw{4?fHn6z)&t>j?SE%g^Pd*m-$UUT$|@ex)zoh77p02Rrx+R)#=c
z6xy;#cdv=l$EhGN4S0dufD@>^z42eMXye~wyBhx*`xmhON@SI;hqhNc@aC^|3cXif
zQ3nR!3^jPQheg?j8axa0BoScm)k{-xH(#65{E9jUH=W-G%1+^Tg<ikKqxWgvr7PNO
zf6bwVGe3Vh653V`oW7}aZG`lR^kjnQ2chrw&2f5y&BHb!g@4<tsq^=O@Ao7?6Z;^6
zEeR{+1rm_czSCgkR_pWCBbtL}aqH~7VUl{gN@eyuqB(Gq!^=4DlK6xYZNT3G(N_<r
ztZ$1d8~%=4FWA3w>x7PooM!o;++88Q@pQ&W!QB?Cg#MNOBl0=-AoBUmp7Qxs<nulo
zkmi0jm?4yE+$+=)SztVQIl}iqCf{P|BqF&(s5G7~C6)Zfh^bTlKqaptzp+0mdrG~F
z{KkHfd>0zT9_Ic3KKW&cQQcSF^l_x}8?6?0GF}M1ZTUUPrfal<l)^~#HkCo8I|*fc
zNtNH|rF=ke{!hqnv;{GY<4Zr0J{Wyj8P<o9-`^b|zfoeQfMwecarr%e#?}S-_pR!#
zT(>iN&e*Yl)vm@b9*ICI=9oL@^+AFev@<SRfdq2?=*64$(8uhQ?NnJOxyjo?G~?y-
zOPQezKYRGX4R%5r3C#dmJ+66PBjq$N@~gePeq77kEMA9t1RlwD5()N4fb2>EfU?_U
zzorX3Dq1vuA|FSeJ$>##J0T-kQB_tPW{oEOYehyxAu!jHTBgf*pz52x0uW9$syMIB
z`r_?s+2|aZKg=zM<TSKe8v3Vw`LiQRpQsuceFD=w{JG7`pUUYocHNObYU_UV$?Kr9
zPIs>h-mVn%If6sgTDo<d{-M@I3Ir#NZ}*V7<<iTw2W1a6&7NvEN9fkV>p1&WHCv)6
zWf9}-=~^h8Us_3yZ&2fUeoy1~Eh<rp+r0+8t!OFqma5~F6?uxkXAHIVHTt1mFSJ?d
zT|~{1m0KrvL_%AJGn1Y-NHk#|u#;{BJyuA3t~{gvKbQC9_<fkCc>DjakiW?%K>i&4
z52R0QKF7tdzPlJ+l@vqa-;7-gJeO-3Gq&vWY@g;<KeweR0Jo*jc=C=XH*TEqY=vj^
zTPwHhetcu_<`gMxRPuW$`J35Y{w5w;{*aaWu1N5r8PDG18NG(Lbx5L!^m_iSJwOzl
z_9lhV7O3NtKV_d+X!pEf?5@zJbF3o=fA+!OC@-Ncmse<WR=YyG$Ic(e+7m}F1vuL0
zy@+_We#JPAuOnA`aHD!^$_;JN=<aRUVtn^%56W3^u_?}1qB0W2-|9pm4wVj3(4al|
z6Df|SaNBYDI``6q>SeFK_F%OG*@ia*c=$R~00|zS$X9LlG~zx2>p%`8OsoCa{&<^*
zkALGM+my80t@g)C4z37nVGQ(=pqz9+CPD9Lx*S!*dHV|YcAk6Iw4}G1<Qz>hcCYDP
z=cCl5s+ZaXg>$7QF`zz1L0k@{h(}TNJ(#FZwM4<2tuTe)(k_7$*ixZ=z-e?JY~|lS
z1bZ89;3cF~TB8`VNrAHIu-OJ1$1ZR+7}>;l$IewRTnLwB%VL5(zKO|ubI+zPwc&Ip
z@{;brZMc8nqe#W~R;pCHM$CGx_9;G~{D9vbdhiw{MUOi9;iH-cOp|el{%RvQt}WG`
z6TKP7*GbP!O%Ioh^Q68PG;l7BG6`*Xyyr`+x%fxTZ+K^yS4p-f`ObJPRH+bsoz%?A
zKE!@)iY#Lc!QYmv`VVLHwO7wUSUGm`W#+&B@adoL%W|zOc5m-$TrhiZ&bBNUzo&cb
z-%;cEH9GsW)wd2BPqRC<rK7W$8ttE*&A$OFix=!|SXmt0yJlta_*pAf7GE%HEl-<Q
z^0fK&mGukuwydlV?p@vZd0<UrZJ?#`Uz=Amey#3etLH+%iN%1|Sks>GH-N)XL&au4
zv!I!AOVQI#Ezvx9CkJ>Ap6-=&@4?fjOZxN!(`msZ4}Y%m97j89W%rLj@(LvH@jyD;
zfiztpO+Ow;X+UCU1d|<Q)wuUBujWfZo0?rG<WUV6p--zrk!mgUXZm~NKG?c%wwOD!
zE4}=gFQ^;=mp8<@yq5g8Le9HIEbcg%SlqqWT3LU`-oG_|82CE{?tyBzNP+T$6}V+@
z=gRu>z0t;Z0^2FD5aN_cfzpE%Ae9<Q_wMFTU|-|so0=Ox+_bUrolT!KHg4MA_~FLC
zH8yVC$G<O-O6>gi-jl&ZZs_G*Nho8rm*-8St>yW8p5ycJZy}fKarzDwxf+rpS0#m!
zk^=EaIPqh>OLsEY!Q}hE96cpGnIqI$&4Ixn9_oBz;WdhZN5rv%_DglQMyNBQJshTk
zhOBDnU6S3(Uw>BXvC3rei-=#>$_c)X^&RVshRkaGJ0&An)p>~Nijcv*4uWc}(otKJ
z9W~iZWzT@a3Fxm63bCAKMO3pQ$J#8^SnbD9=|qr7VEtTRrFOk9y=TOGg!G1FPpD-V
zGK(B|ozM=ME|?YFLRfDo(yDk>e`sDM^a~#8Hg*}liC^95G<GQEvv`X*_zKs{k!tVL
z+;c<}v<H7j9u!u{nyx+kFFwcloiP;J_8W5S3<_S)D9$441J4#T0P48mX*K^v&~jX4
zdyZVG0_$}xj@pfTqZ0x&i!mjuTW=JrjS~cx(b(_h(Jw-sx!Tfag!g;Uzk5XC{<~<m
z?}&CQl3}$_hSee&RtsfV{dXBwzr(P)gJE?s!)nwXRx3n^WLm3Ea>in<*#ljHNVE4S
zG9Cxq9N_BV2Zq+^99>fv{Vk9~oq3wtQQo*`A&4&=AjljZc}5Ex`L%Jx_k;J-^vf3|
zkQ7GkStuAU>^J0i08Rs-AiPWvUKZUA7ebxGw57ilO7FfWn}5fQa45=N=yrO^i^FV;
zci#iXyYD%6j1|ORNxuW-8bP@xdIcymhHKAfV<25->%~E4K}*n6yE<?xuB(ow;Zz^|
zfb191S(~b(11W+XXbWODb5Q(YhqecQKU>*@AMQ%A2Rk?0_F!(S`W=<eZ+Cm}!Y|z(
z?B+{7*q|BvoA~drCh<M>um@wWqLNDD)+Vl@9`<1D=XN^!;RK8?H`7l9l9xaKi|xVJ
z{+~T~2z#(R#U8v1xjTeC7#&ZiPLaRf$BZZ^uc={01lS`2>gj0*ML#3*;$SjvclapV
z*(3<YnIDU7IL@&RuRRgA;l*mS!Zwt1dg|g<)R$!(E^tV4DC01?8N<Z!H=UUNJOBUL
zhsl}KLF_|0EwH<NC<l2SfqfWd+i7Bb!m$ruI|BRgC;xlwL%D)LdZ|e5LHha_T7!Qk
zZXdqNnEn5geYg!wz8w4TKY;wd%07(#@3RjtJbL>u{UG*X(s7u4I-I@uz#Yn7d@h>h
znsGa;W}{-+Irh^z?i}aof}uQhHyFoZFwWSrKYw=ijAs{kMz^Tv0W;hSJe_aPa0fk|
z@6UMT9M5I{a?f~Vl;^U~-7}u-KWcA;zoYlAp7E#P*8<HfI^aSKu-es&_b}Dps?5Qj
zqba^cdwe{Ix!5zkr@6R7Aw0>Qg8fzQqeow>{U)QS4J$1bR@$+^8k>NXo(e1dSYXM<
z+Jk!!lkyQC0hIqx>_wKSgsbvbtyksGu1r&J^V4UHxZATaGGj!UXXEQL+!uH@HqZFM
z1)kBXkBa#sG`B+PyOpHe(YvIqSCX<x0lo)X-l8&>_n!HmD)YZo=7kWeOl2<ZJ#)Lt
z+%@CL&pq3lXFU0#XZyw(Prl>X{>hA|f}T+wAIx~F+%sy|{u$3+HDdHCWVEG=8Tfmc
z6N)3vGoGC{Vst&<o4e|R*UfnLZkEzmz#B1oh4byU8PDG08U6Z<XQz%B-DrO!>XYys
zwaSZOIMj<_IK<o2Fifr=^wJ%inV`Ks(QAK*&lTCvmSQhn=P>iQx~Ntw+c1?k@nI}R
z3`Rxil5CqKcGvf3bsdeAz5v9ol{0)D>mbqU?(W3<#ne8uH!)>StXg;i`th%9i_vKs
z{7+~#f7bq^X__=hTsXU+)$tQ54((|LjXs&u8C5q-cEB&GpV)naPC?&D?G&|~|JuWT
zthen)VcsF!iz^(H@fD1VUR{cRqpglh@yFzeyA<VAhl)By(u|=g{OLF3=-Csz!SN_Q
zQ_yf?Aad*}HlvE4JA~D^qAqSPzIHVB;*6aOau{QG?9Z7kV{DEZV{_CP>$1mKmyEGH
z`e!o6?&zPz7`r3b*B)b)Ke2-DmhdN95LMZWDPR>5j~=d^jF;k1d>qKiUX%mG;{HUZ
zmZL;lyonOXet<Xe*umWnxD;Pv%(kMGJMq_ouj5WUwhEN%uZu2mfHUzp;Qdj$SkjeP
zbTCtKxNN-;>j8J7x4mgNR|F-Ti5V1189xqZ58ib%TiSNW0b~RWgj$Knn0?Nj3$i5W
z;DR~!@A!N9l^~6(Q0LhB_f%-7a8K_kLn^c(a%ty~sW}xT+U!R8^H=`tt(QM*_%myj
z{CR^vo15g%n-#^{-e&njz`^zi0S6L%z!mPD%`D2VTg+V$EF#qI!8@yS4hF8#T!~-!
zs7=B?UX(;p4O_HOtHv&Z(ety5jh650OFR5wUGo*J_J;@Gwl>Rk^~`<`T^%0O_p;)y
zt<2YG$ADyQvxkDnQRC|1SfahR`mJrnZ$(Q89;qECXg1Ze1Hk38f25i^>gz{^vj=I%
zR8y}MY5s~(q@K`)6A$|?2X=HK;-u&$oPkb?Zo;9eJ;&A*nB3U{5#C#qBw9MP0eQHP
z$|0V;ea#=9=JqY#D(g(X#oOef7RNv23pM0w4?FQPams452~nxq<hGI1VsD)|T7Q!*
z9uBSFm%0}%OriRhSnoeiP1YNg2tud*^bjUT@3nNWON&(lWMF&5p-@zA9(Ay*+91T(
z#Ev@PblZBPdRljW4mc)q^~TThsO<oL5~xCm%Cxkj=4YDllg@J@`T1Q|rw+%@FQeW;
zDfRZw&%KA{ry#W{E&5$<r#&1$`=2m=&ZM>j_(`~)@H73W`I#>K?0;hU`7-B)9*&=1
zM!h8|_4dxs&O`H4klK_UeVHxfhvR3z6UNU+sO<oLX4w49IBI@o2tWIsSblyY`{M1f
z?V$Sh%cwVyQg844Y&$eR1*uIL(N6{*o}VY3Fn+F}wgdQ?Y4bDlsQH;G{5<Kz@^cs%
z9*&=1M!mn1qZ1rC>YbmhhvugswJ9??3^<4DpM6glKX;wn3qNtSioVS{YJO%3Kl`3o
ze)_>MPS=CkLtjR{Z({<+>+PMNkwf!SklK_L^#kW{{OohW_<07k9ne3sZGL7SH9v`H
zuiDe+#Pah2EbKU455~_gquz{^dVA+*^`ZGGNNviFKEQEVhvVllO-LmQ{($+)b<}nM
zKRGl)`e)8j^OM<f)gJzwNc;Bp95Zt`etsGCo}W^0@BDNfnxBHyrkv>SIoarN{LDUK
z{WC;u2k^6x&CfnZ%}=^!)gI*XMDp|flMc_%FQeXBDfJ$NpZgCv{}iM)^@+aE0Y``9
zXVwYh=bx$V0DkgK`e)yx<|jjE)gH!;6UonhU~{<s`DN7mC{i7-_aOY-dq{o?Qk(il
z`vK>0{LDOI{QL*H^#Fb%nZnPLj+&pCwpDwu>rNy;F9pLmT@N;Xei`+y#EOX5dk}th
z9+IDe)TWc7mjdT-{LDCE{2WMa2k;XeEd1<u)cj=XS+$3G*NNokU0B<3x*m+5Uq-#3
zF>8z0dk}uM9g?4d)TVyXyMS{zex{!=eomye1Nez0ApGoq)cnLXRJ8}c$cg0VPw{TV
z>3T4Jei`+SOsV%E{A@iWKLx2x{i8p{+jcm9rkyZ;R;jJHJ^b<5yu!}`N6k-Mw^e)a
zTb@XMzOMG@s<n@U`iH)ZdaqBZ_aOX?9Fm`c)TRN^*9oyX96#MBjGs?Y+X4NPnV0ZW
zJ8FKi%vZICb%hhjPmGSk_RlY)UWp!y>xF~xv-(i{+$2bC(CT_&)mpwCe63S9R<Dh(
zadxcd7`HwgJ$)%>k)J=Hl#S{GSiwv=N>0v(VB^RT;!uZjpjZEfESK5uAv0r1L9-mk
zQKvmWfUPB@?5a;mNyc{_ZoT&bb_DlW?;UmTZEC&uoND{`f@S>5dhbkG@4c0s`5OON
z@14C@TEDVF+q;{Gy$u!GtbNk<#tLooejYZjB1x_Cwj`Ha4_x5=Hx?P<3%mze-<9I5
z@qQz*#!KaDNiw<C`{zH{YrV3Je876ItXrxAM}u*%%e=o5zkj!7UT&vK;TQE}2xk4d
z(Wg`B0}j2=r^#Lg*Djt}f0`b?Hg{gx@q_3amHV{Reg!QwS}+d#`?lGk%!3AS1ly|D
z5SEO^=AiEv$R!os@R#-7qhoEau9EwmrG~>S>k9Q!>z6TFd-!>Jr$dH|wUVK2D4k=Y
zsP^Dm<=AiFa6uMtZ$Cjm=Q%*5axiCi{O#3h>H%$05ukqY%*e%|-2=3x1>}x?AwK)W
z`JJLt85)kNEA>k6lRybL!xQxGecAQM=*^&gtn|KFIsAL0_i+Hta)2HIy{W~fcYlZ8
zCLa9m^v1M0etQ2zz^2l>_hnJ&ZHx4udx$i4?y-`%Q~BT>65k3O(KxD~90$;+9H2Id
z6Y}ZA7Ep;J&s1U4x1Y9D4m*gBku{4%evxOUBF9hPO9X5xeS2S~JTiG^l6b7dHr2vI
zZ}NN`KreKF9)Ubli%sv79C>~T`>i{@naUqOz1IrZRC@QmjCf@9#>sN5^!|!k80d}O
z#{qN|a~Muq&OHKpQ;SXSz7D;w6rX=L`NkD?{Pe!rSxQLg>)x07j*Q+oDUX%jzf+F;
z-spWCK&LuDkAU9PV$-{iL+?%ElkY}vT*=2z@0jE2Ptd#fWw;}wH%|UzrS~P^A)<Jo
zJ#rjCKT_WMBa&}wvFV-T(EHnz?M`o&Vve8Q_Y2rmebW0f*^$v(FghlS8v9Q<+<T+<
zaR8m?06hZvrWTvt*$%zGz=PhM-op5!nwa#qG<gyzb)$Fh%UDN7Z|QNzNbj4~LPKx#
zJ`SK+4$vc@H?`RG&T{B&${Ip9eIknOxas{9XK5m#PoTfJReCHl9T~l4L^(!!$J9bV
zZ}dJ6ppQ8~kAU9PV$(a*q4!tB$KQ?KGH@R^y~haHRDII>GSHFHTP&tyr1$-5fuJ{f
z9|ur5kL?KU6Kb*Po#D{?cjANZMsG1pkDJ~vIj;SLeD}Ugb7b_E8No5q`y}w_eY`vl
zpwBDs{1J_p)MC>+-J$m-l<iJ$nROjEy{{Cosq)?XGRl$BTV}Y&NbjF8kL{h_#{u*T
z2j~&#6Kb*Po#xPcEsl)t^cF|LanpN~fK8=$@5>xVMsM-p93#EQsD*{z^vQ7meHXv~
z5$Y3avFYu0=zX)S8FbSp;(a@AdVkwlib&{_-j^YIr}wXWI8Vewd5rXa2~Y|7z6Ll6
z=gBbxo%bz8>ud0a)E(e20jf=3E<-31Z{e|GKD-*tT~#-6jO*m^1Dd#VhjQQ05Lq;E
z{{W}%j^E(a9rS(tx;S-HmlRH7Ng=*pzQ=mPD^jM{^@OKVQ<Cx^>j{nZ+q(?=97^Yw
z2RVqGTcS9;C9AP9(8hs_Z*aQROpZ}3T(7;nu7Z~fYgPv)w%2C|PUkfKK8?E<)>jx>
zMct~5p{^Av{%6xaWFLvyhJWZj_C(8ZYW^WR8uu*XY_diEp*vRS<k;P~``v7vEW20e
z1s!_mjp4exgR^n2ayRZ@<N|{oHU?Vl=^#eJ)Da|b5kzBPXFO$yopNh2DO}#r7}yn0
z(d?9p+ezU@hsMBXq`b@FlC>|w06tdUF12=XW7ivt0DgsAsvaTL6!YiS+Z#XM*vk2o
zI~)JH@iU6IOK}k7xMg1*#W{f;WJbujd^}7O1a7<ih~aRe9|T+uT!+lTOKq5mRtGOr
z@X6scmQygL9#)cIkblSo-uy!+G|Cy5a=yBJ9I#bBYFp)F{8O6xl$QGGYwFY2<dfX_
z7uwQFErpG+d*#+EJ65mTqSbtEZ{J25cKu57B}K<MKdCqQ>Fiy8x?Qx8kfgJbq#}`|
zfe?Zd;FKgOIYM6kkIBy&2bG`G{<q7|m2jCWNRsj+9}bY8*g)qzf>inGcFbF9x+6@n
z58~40h*IpY2NR@EQUodXUvd2<`lq|@xsL%<?cvTs=4L#*&@(zB=Pro;Nr=o>5Sg<?
zWW1t$W^7rIvv5^~agh=lTf+b$r@M~fWPzN8j+RLZvB;MyZ)>PJrGGwZrF*NB2slK9
z11=W1I48nmpA#WB0W3u#RPt1g(jfV2&K=<p_68eIt#)xd{nm7qK8>?PI22yal;C0k
zt#)8My@G?}DbLaI&)(`8y)s^2hHRBknIZTr{#0Fy5c;TERhpH+jPnBo1AeIJ$)IOr
zD@V|KHttl=-e!BhXY@yM5dGHR9dUXquo)MrAOA&m>#o1ZZpJq+N*5(|td#_wN^(oo
zBe&$JYUDDDHF93Bdh1TB;En3zG`Vx(Z4{ck&8`_zjAB*^HACf5R9IKNN-G(lj%Qg^
zqIEHxcsbwOKCYx@05o&Th{9K8Y-j^UBva&3pgAeGCsX7R{W;^wM%Q*O&r-^8#*R`?
zK<?LQUb*#tTOH1jE!;*YAa?yq#xu1ZZ|n$h`M9ws@Rg3gh3a!2%BqPhOVeta0V%^u
zS3}q8;5Og#uKo6Zsq3S1Wprp2cY)WJamYew0Y!X;^<{nPeH=(KS2xlyMYs|!B~#Tm
zlNqk*HNz#z3}buEa9T10H_56hqE*;3v}ajbO(bv%C@=e3%|8Quc+l&u+?Yk16}_GI
z@@nrW-|f*J?59j#*~h&F>qzz&Z(q%_J(lQu>-4v_$)y0bCCWSxT)_s{_gd7KxqKn+
zpx=O9+9HZM=l|#hZ#ovG7*+$c{ObqglA#|t0u8FHobE3W*Spz7oc~Rg%x-LFAFafI
zsAM@iTg#uNl7~t1%5J3}RmpypJW`VDyCnxz@<HpKdg!_@A{nHILEN3}+#it3E_V+8
z-l-S7r{xdP^0#XF_vC8%w|cbvU0VLau@&0JclfuNe;YxCGy30qi$(;mlmq$^4==zf
zBNT-uTX~+{A^@b60O7;@Rv_`asLcV_6I9?ihbd4Y@K<Rn|I~F2wS7TW?s}}1i#17I
z#lJVZ<rpV9F#D+BOsQQMGT#GUW5I7Mr`1pTZkEe8v)?1WaKDo->)IkR0B2$B?5SYs
zke2p*i<brpLvJMn!E5a8|68<Z278^QKkM!{b@v-$)dF|B*$u9p9#34~GqIY!!&JaN
zS-^qthwhm;Zve<r0Umqqh@cL$dk&{uu>05KctN_NL%bd!_`2t%6Q$U{0xv-~3PH9e
z4}}JGFO-n~Wf%2`-!O+%7(-Vi(ksjX*xAeGr^%-hm&+U?sY(3I0n6rR7#e-GM#$kJ
zyE&B)6~?p-(O2dGb85Pw8Pn2vqr7eo(Np2;0w6~Rf(@T{0LTX*<gBRU-JFW9146dI
zQ}2>2srI{WPR-<lZcNKm`FUq3m-npry8z%ldj;pi&d!290;^i^jlVCOFIO^n)q90`
zm55w+g>kk0F{Qnd-@J+drbXGt)tU{@$u7AS{N($x`GW+>9_4lODp5ipb@c#M>4E90
z0@8)B-d@Tp{7CN=Kj0_Qm(9;xk*fa%e+ZOI8}n=&xFy55I*)o1^pJG(s-f{@<LVT7
zh?h?(E~OLlV$*Z>)c#VMf7AMRm#=ubB7me1=sjH#K++M6p7;Y}s%oI5%cU48^h-*n
zEl)CjRA1)OY9^voWZdM;X3OC_dSg8ru35AM8iMOcf_<wO=5l7pg_3zsXsgEQ*<|MO
z@9URk$qdz4$Dt-|ATUV0E2yt=E{a|}vpG#$(uYE?vM|qAnXz+0V{XB_MLV=5t?JwC
zJo&zsj1fD}jJ0WA?a@`7=hYs&q<bS$TQU0v)OjRV=8g)oT}t~wgA_!`1#8>owv~%#
zZn{{Xxte=vxWFpO4=!#O^(a__FpEh_J4WPA8?B}TC1`Lz)&=vHa-#Ddnw3Gb#<`lM
z<+c48p=oloSa}_s{vG{dCbzZ@cTvo)$&nj<X1x;C=vv~oBwen@p}(u~8w@Y>8EuT=
z#-7IA+aswLJbs&DnM<{t3m*4-=ADi|;@>ztQ(dA!h+_Btqier|{C1+<Utf+ajxL5a
zZgppfq=lll+b<Ng--~;^k4U`BU5|SB;UxgzYF-ezn(G1I(3ZTy2j->q$iz?OE7NoJ
z@(X!knyy}cDKAXD)yseCq5X^IE#e5BlzSfEz?iNE)ZA|~LC1mc`9`_uaW-y&4>xkr
z<KH)K1BAL%LJrbn&haMia`{9(V>flr;dMQ)a#v%3XSs`_=Y5S_%%iTtwDl`s$Y)<#
z*|Ew?-NA2%K3YWilF+A~xz|aeYK%~(Xw}>aR1}KH{eq3mw*No!-UU3W>gpSx2@@DD
z@q`*QS}#F^62+P*v_vjua0br78No^fwJ0hQ?;_3sUXX#A0nU3m7OS+ppS99Ez1U(~
zAfmt|giOGy;id>G0Ts_-6z~=TBJ=%zd!M-^V%zufe9!ZL{yvg9XJ6M|d#$zCUTf`r
z7Bdx~%<b}iOa41*^+ByPzYxYseqGF!=pX&~vt8h29Qx*a24%NI4o;cz8dC(`Y#`PO
zAovkO0Yn}@3wZMSvfpzMe@#AO{twmw#3IoqKa`jU<6_P?d*8beIBwc^_YrbE0w+1`
zTU2uEL1^6B5efQHtDBWk&1@ydmzni0L*K)`iN1}K(6<teVO}^CYYDPJ<XQQdp>OLk
zWZ3kZp>OL>k=A8Bu<6~p8kzF@n-L52ZVk(O2fbSti^^eioWGuY6aBx6Vnh)?g)|!i
zAb(Dc{0V&`JC{J@ljH$q!9rB-!Uq|A{XgOdYXpQbNrP-f2%Q|vN%&zxc3?IsUX|qs
z>nMgH=uPs2W#!(<57t}uyG?9@AFL)Mf_$u(@r(KUSNt%J{6MDf#1HGT{E)(z1oP+1
zrhm~_>L&Yps~HYXjTQVW>A!cD{!^C&pcG8<kjE#b|BFsS|D7x`Il3493w}twlS@76
zQz!X9__kks<v4_o``RCoI-xAwizyPHoa2VQ1q&5)S9~M3qij|$$#EO>!~Fi_$TnQq
z)yB^<@>7*#oG4N=>k8E2M-xvSR5mm3`;$ltZh{J2(HM7~rd-v$0r!&1YK5c()SM}9
z<wQ+Yrf0ss_+52G7*jUu8kx+mFt$b#2^3s`E)<!{Z}zd*X91biFQ8$wyJmEkW8ysd
zmDd{T1v@u$n>s>#x_$w_ABB<jSOy?D+Au~d+ZV=>aWLD!+A^_FyxjtW46H77xH^|c
zAYpv@2S-QKOH1f%^%60Vjlk%J#aZ~gr`2#N)%1k0E%D;a&3+(U1HxzGsy4F>Sx9Wj
zCSGJG$`1^7DvvMcWy)`2dD<^38nn2}tyW_if%go*H<%^j3vzqg#L#objUziFZRcXY
ziv5jR-KZ=)mAXi)TKxt@ZJwO9<!i{LLQ1O66Po_17TK53^v|f);2(DW)Zz~9rilP6
zul%@-I`8P~a1hO!E)}03G^e1-z2W#W{Fzh<br1T`n_Cc9|0Z=me7|sCF}`6~toHoW
z-?Kq}5qUG)t7`D;@2V9r*0&|pBh3lSRB(>EjUNS8qWoA7sJ1aT^(=-S{&)K;lKlnG
z6MbQc_|#75D-t^Czj+vu@-I=NRW}ANl<MlP8X#d;4Un*_21t;1fq^jZOuZrLO{?Az
z93fHr-yDQr`Qt8tg<WqeHPJ5X^Z%&nPR&Mvd#PXI=EW0w2R|O3rgoW=Fhj89!Me=P
zw`M##Q3I7=nie`%)4u7SZNZnMyDMumx{PhLZnm>Rmm-06o1vAmnBSTCxR>ldQy$qn
zI8?R-Ms`wL;5+i^7|OI4eBCb4UlssA!mtIE<OFU@2AEm*Qjlxzi3e`!k3`$E6#AR0
z<6Ca{7&5-cnBgxdlNaLO17+yw^NqE;nl}1^J2pO_I@siy6HIIzk$SbMVGcjN%`Z9z
zxA29g?b(27Bi5!$RNIYz)G_h-?Kd%NxUX1z=BJ^pj8iD#?QRbUIzjM#l-n*jM6}n4
z_cv4)@7db4@9<|^RG{>CcEuhNU0HuHhJazcvGMV_+r;|N8U7u+{*i$n9c|he>I^=i
z+yv;?;Fr*!C%$Jc;g<bpz_k@p;Q!x*cXcOt1)}%20n$^@fS?_ICKr7xQGRe47_$io
z-_AV=73J1L%CB#v&+q=%=(E$3Z11}O327!nU-%&F*XT8s%oG9zv}Fi1^@7BI7y8_u
zq0iKlBLC#{8CukpHdp7-X1+Y?Jiq@-^jXT~vI~7$@ACFSd>{P3N}twmSTVy-|F7uN
zx)i-)J^pv$&C#bt59vQ6&_DbO0=52*0yzr(=TD?xxW&ZB!}GT7KUxOT6;2H$>#8~&
zYgeLwf_TLR{bl0vU~I6|&)(>NI3r+Ts=4ij`?7gL_=fJw6}M%q>O7p)A8vbLa_90&
zRHJGy#q5*~x4m#j=loz1@^C8BL3O7Fuw?o}<4fSLmYHS93<FfybohD9HZc_3SD$sO
zf$nLe=J_m<hmS62TxyV?p+zFGF3*o9Oxo9wFd?0DI29V(1N?sTzz1d(-u5?q&3T6l
zKj&TfuIsj6;0o@qZu_h6{0m-({+6KrwrR$zxBYc=*#)md-@*r$gL9d<`=Qd?UV!fV
zJ`(W>;NVz$6!^Y5E{ZRc7sU%P^w77P_TBl}R#BRYZi43D{;eS>Y~u6djZOPzf7%dy
z!Ny+=@P~GHqa?pM9DR*MnM0pf;0K!fzz4p%tv~)Y%lorA9{9~pI-U=3f&KXxP#>i>
z$xk%kGJ7~1#h21Cpg+q2U2xlz=vXM6%Gyn#z5<RUYP8@LUcoY~qNiYby9}>1z4>2_
z?YG&n@jK^)Q=OZmQHt?)66%#;f*j?EkDzy@R?-jYAK#m9hIVOxICTp2yIb*ZdcrZ{
zFmz01;ZW|Zi{WITBFe*cZ^HekM1KMD!aK~1Z#KlQO;_b<8aaJ2QvkDi0Dwci=wi=Q
zf~{zvG1EXse}LIj$Y<0S`KbSQd*H~*(I4{Z-r3N#ewkfg$oCK7#^J}35A8;Ac!b2~
zPGibIeu(+d`$&5aY5xG(zW{P7wpm8@uMDh%SLuODW#AXkDL?Wm1OI{YZTN>aPvETg
z=hJ*t)V)e@BTlNmNo+uuPL?@af*Y`u-%`;Mx)`M~2m$D30t?S%^gWPbLtAlA&;xWc
z3IxHg0H_`91V3Rr(ARs?k49J9n^53;w$^3F`6p4W17Rj7l!4oofqU%w|5JGX0(ifT
z?gX6w1NdIf!AGBzG7yH>EctBJkHS#B?U)k%4Mnw0L)$vyV>?q3)(_Gr=1{{1tolf>
zN;Sq#uiBdWR&G6uG&*ad>EIb2#CsLv&)~kQo<xk-#jY2E`!;m`UUWX$*!EtwU#sdL
zsPjH5gWSb8q+J6B3c2a)s7ffS;Cfb~KSECUai;@zEj(c$(1Dj6rYxz5**^|QM!Xfv
zpECKwE60&oBY(!rpDFTZy7=*hl?vZt{9A^9EATIYf35h}mYL60r@+hQY<Bf>MmL2%
zQC2BciSWxs>=kzW*8r)qYMiqkU^#Nht7URQJs3AHd6`V^R?nlDxzak`xVen99k+Qd
z4^RK<QCX$BV7_;Gf&N~2DZmWy*NKEaeCURUl3u=^4W6E#di5<{_om=0*f;qQadI&#
zI{g)ie0@qaYCEQ?7ng`h2vu#$@CAx?Q!5UqvUI-gu&S>$fd+H$)$gU%i(`CFCF;xr
zHyzJg{W-t$4!wvWM$$NuNwXg=16c3?ydAf@)?foLG7VJM!0%Sr_sJp$!siNKSd8DS
zzGM{szRUYBy1f5qm-i>Tyz5=w=XH61xXb&4UEc5N@_uWl_hbTu#Mq78ei2)Dggc)3
zbP@LMK5X(og^;L9Tci=#&m_HjCS0fLpQ-WCpVY`l)72Qio}Q(AQ-!5M@t(k%4`jXd
z6dUqxPWoEdgqrjv#IGJe;K6PsT7fr}tLsLA+=(t#pR+>KkE?oZy_#%X2Jq1Mw^ZW_
z)fiW%8hwRn;rp!R+^Oo5m-*w9SEzb}GXHmMz_`M1OdP02u5<*8w1&-nr}{518BmFw
zyPdRD#A{JLu=H+TZtqENz2WBH<Et9!VBh%oW07OdnO8<S3YFNm(73<)juk<-$0#Ys
zsytLRe9P2|oggnWOI}K>lt9GqIDC`m2a|z9=mU|C9-(3Qpgf2vo!SEbw&80vVC7U|
zp8|xcL~5<%5d>AB1eBpK(@IRmQ%2uPCfe{eHR+hZ!N}Q3Ey~I(G1g>)NSUT$-JPZ>
z_rEetxwnD*4>V!?fHi}rAk>7y)Z9XBqd!-5j6jFMP<2}T;EoMP{OnhdF9d)r6jt@X
zBJ<ZPzf7w}U=iRC1Lf9}sDWn=UQTleZlR(-Z!dJLxsiazhg|VkA$~@@w6@S;HV-|T
zt}~ZSI^LyD3UwY~ooTX8cUfojG}QSq>d;<m)7SN$32NNe3Ocxs18u=TmV&|5_~ZoN
zu{__4UHeC~^_7nik04pa+d9>63>KX4*F!rs{k5cTIcA6?w@m!%wJSiXN^~0MO=1yv
zTb#w)M37g3pv4I+VazU8jWISYsSPcCr>d8`1TA@u7`sJmuo9#EyW0s?SPa4ngRJg$
zR&A=<nr^-M7C~D|?5Bjm@Zqb#<DH=D#m#)JMQq!yK<xeC`5KIR^IhyvUqZ32>hJpX
z57Yh1CiX!&nPm8OW>K%iwg~jyK|TZNd2S~0N&Zy<0u~nm96oNZ*DliN!K}pxenX4z
zcHZqsx88Vz1S?9vg-!NDN%qk?cAno;=pIa%by0W6nwv$BLvDFQO!6Bzy<+bD?$PvO
zV3G6+KE>Y**~()Gf*+CsPpIs$43N-bdx)m@Z=^4KYz2b6>dXhO7X*_VX((krIsxK1
zw~CNHY~Hb2vH0`dD128havW*>Jy+o1+3kgY$EzEX=SMvD6EAGRQ8G|RBaq}Uiq`!{
zk)wTML2##0_&Zq*z$Jngpy2CR@7fEWWbIHNyst-2_yc$7c`Ab${1$F<F=j1KUK)ir
zckX|%-Tz$pdeMx^+ZD3?kIeOdVVC~L;Y><<Vc%T;Jx|&{eCVC}hi$gN+U6C0XMrEQ
zrw3eC+ei4jxIaCKUzt}IZTxDc@GDdJK83N;dC_3Xh~(_}UQWQhm~?hzGiti}Ti{+v
z_RlMDvV70K$iMX)@})m!ru0vd+wK9G0q%^$S&2PjCwO4yp*uRx+*|FJWpJ~hiMiSN
zgS};(vuR&wnC)k7+IPpWx?7v}O&$hM^UQot^A5b{d78hASK8O;X&#H`Z}K!FJkLg8
z7#Pj>k7aT?g)-RwGy2O;nx7f}UJl6i$0|{Ni6U>Za_o_Nvey&R!+&-DEeg$S{k-|N
zsK|neI`Jd(GxKlVj{;vCAM@q>Ti1M3zMOySJ6-cL<9Esl{r|@Nrw~||$3NKXGhTr6
zn;K7Lu?zl?pPBzuWtaTS_`h-fI~hH5)Bo>2N&1k^$2|Mh!g5RmJyJ92d`w{Xd>Ui}
zw%+(#@p?nL05*Kuh_GZG74{((#lZ_vR*7MOleNdteTeExjPgY^IEJo6k+dS4M86@D
zLcahignuuKzl?uxU#M(Y&cC<sj<R9WzjvYV?_IbZ6@`DVH3<9A%(4qNp+!oAO1tIn
z(L8k_BfhsX1tQZ8bG(Q@Ofbe3L!w^-@nVSYu-}~>xc@8nifn|`<;KsLuukI_sM0q#
z94LtF>(R9D9>z{6(Y@eR)Uxdf#5Yt^CHff<9GUCF(<kD|ji*E6sSln$7EcJZil)R<
z37)8cN9LB|=|k~!7M?!9liW{^DHFB_5yvzWX^bd61WQq(n8CTVqTEcxH^HZejdUiR
zVF1&VnXqlVDV>CN`2jK=Az6rgwbS~_G|_e@?JG<n>Wg+WX_ibAZD!JT$h1!FHORD1
z?LB{z_WtuE?J+(C{pPh73emN=SQ+S02CBu%!0|A<Os|B^1qP5^aNg|#K4xy?H~|xn
zDImgk=A?uiV6qZEzQIU9pcn_7JdF2p7HG>$I28%+=H7!(asDd=Uq`nFyCWzpSiE80
zJ_n3mK^PPhhzUhJO~NVY1p80^ihwQb6NJKze6hvmFZa~^g>oT&3+-R1FybA@v-wN<
z;e>N?Ig$8xa?kEGM5~nnU=CnAhU<nKmJ(<K&~zB-^!CoAw|A!S_I};d+ttlW^xAIK
zN9a}+jbVKB=aS&MwunytJ^yiD!@^%H8qUbi{Ba7=s60?pgBZMFHRHwKDdO*RbPoo5
zld%Vv!1o@ugAa$%or|(%;%{YMsotrTLO&%jppV3Ve+*eyu7EpF?uzy~Un=7JMtoEJ
z)0faWp-u=r4ADVu#`opopKN79P)!&V;Aq%ikO_gxDjHqalX!H|Tqs4~obO%qoSiA+
zVdCCJ>$|+~$-Hy@LHr;24FO;cM+*R}9Rj!uX||fBGqu0{f_T80*?6|+_;RbA^Ggiy
zTxG#hHkKC#h*l8-4v`POplN%?<Nv;vhR~oqElr92Pym(D)RfrI<omzU*0Spj*Aas3
z1fmJG42e==Poo_fCU_qpROUY>+wBx8cuzJoilnfS@o)maXfw0^%fxS9|4*8a_$dU(
z%Xq>}%XS3bVk~ipC(I%L77<UF!~X+}pMu_MPXd)jG{@-4NP_W%nf5aLCiKxRedXKN
z?0gwtn5o=lJTktjZ#KRvQ_P0BlYV$I{U#f4*kBcikVAg5)~;-8y(bGf%wxT*J6*_2
z^54k+Hvd_L5X~|K5%k%a|11mK+i5(6FUNn@rjzDN{<HpsOi^C)pY^lcJNeK0A>RLg
zz<<`Sp;%<-@0<AV*IoE;&Pn+1-cI~y1<-6){<DTMu?xMT&y4<U(W2Ki9}Gic7BPjS
zW$QC^4tlgw`0b*v|6BZsh>Xts_}5PSXi-<r+kfTvoq7aHL|6F9%>6Svj2pg2kCGo1
z(FfywIfm3_7(nV0JKlF@=Xl>tyki&s>$KI#gAdI~e*Bjqk6FIV%G=EP_`R>kKW@TQ
zWVaxB@sI9VMRxonP{9yL`W`-P6Pj2DwfIUA35o3pA|Z=s)j;2;UeGUMx@Y1ezuc(U
zL5;x%==Zr;NKR!W(I$)7@sPzc>4Rncnod<i-w~0RgJq%}4N0x>&x71D8gk~COf=*(
z01{^kvvH7lbx>ite9aWTnc<tt0>(F~@rlbon{60fSgkmwHXOq`iSL2K(Ts@4f3YLV
zi+KDtqY-B%?RZBU4)19^8w10zh<Cg&Ki<(T;vI1YQn;V(ct`h4#yc`m?4-5<E1CF6
z4A{;>;y1)Qc8+tLDdHSKH<31MlyH=j(T+IplZ|#9h)vT;q8+9F3wbW%9U1J{aBQR!
z+y6PRMbZ3U4uE{XR)-z`0|oYL0gy_R>Om$5lKYpe!u-FWFMqAOVBh@sM{@Uuyco!$
zY~NCU&g~ocPW?A8{t>$JH)+gwq!5wj$cumcZz}zr;~xdIdGhRkQy1s>C|}^8g$wHg
z&jdOX;I*o1Hv^UM`RR@RiZ-<YGDCO|HV7|HPK(It@AVTau6=D;i?5WPUe83&^`2Vc
z|JtS=IYjBx&~YW069+09)w>$Q*E+#fi0w?`&^62>ioT2MxPDBFm`=5R^;msIci(p!
z)gxQgBm2~b1I6mR2G)7Fe`KFCsEAT_3hwW~YXJ&4epTR@{h3-n?}3{G!!JIwC$4c(
z*A38qT+aWsmn(koqsA`={@_R2OCMhTTEV>|-y4L6U9$adfT<Xl?`UwI>Q}oFhpg7?
zi{yXmk-aEbsNT~!T+_FD_3K>Pn%-~zYWj#?Z~jUIEZ3lsgIc`CrT2dEuh@c$q3Um_
zTTU?KH$MCe&^9&(N3{5K9F0E_AKgPy59<$=T30}L6aQFcv?D3}wUN{vNa9<3crW#?
zt@ojnTG0w3xDxo%U`vY6D$pX9GoZh!DcUCi{WY!Ot1JEb0kz>o0YDvz80x-}Hn?)_
zO3i+~MLTl9?}VQcNypsir@O!6fWN}@-*sRy+V|hnF*Q(eLTfm9rN81Zz(x(^%03%8
zeHAUL^9}W`gn-70VR>)_+j7!zqG%18{<_w1^h!X4rVF%&k4KJ;msCXdbwe+J2!O*$
zg<x`mfxBZmfw9?N(c-^rvjpStRDZ>$0PYWHu&&e^4xu6gsQncPP5?|Mfn!K;vsQ69
zfIZ-%2FO5Ff32QiMfP_KO;qda&xxh3tv?6HIX7$T?Kv;dl)r2TJ`3t;d{rA>FVL#f
zGcHo=S7Zu18`b(Z<fI~hvrDaRRh~j@LP9NM+gf!(iBCXh@p(_<W9Dl7N&e_pm8eTu
zGAiU()-8E8CcG*^uhV4D&7NB(Z&2r@=Yo8dCvJw8uFkUr{ln^!PwJ#H(D_kWa0m*L
z*3Zu`oyjakW}ZAi5z@W}Yl>Ze?nl<=$Fu%YuYT28@H#FT1cyA9h0E0X3@^ZnbEdi`
zi!tRd4Mgvn4A$VzgVxgc&?sf~#MA0~V^mso>tkhFMXP>Qv9Qi~FbFi?CvU8<&#)v`
zJEyX`WQ@PM@$uJEpQ!a&o;hNvaaS*LXTvebgbuJ<D=3QuK*oz4b*g71B5gQO^;nPn
zqAhlhp64t`{W?!xeQ+Ioo49A-mNK}=gIB1@F=gl%-oRmXrWHH}*V&_`b><%VR90v1
z;FG>bH70j#vRd%6*w)WPN|*BjLW;qEA79Ck5=5>nL(}kqo+VtT@Ti;mm*!Lbj;CXZ
z*&!o#CkhR49CkQHIBIZOuC^+%j>al|k2&|e<LO98IynCK4o8_Ibe-M^wtyEsc&i$Z
zvu(YxsvYH4_n==d&vPF7zB;doy$X>l)}btc;huF6SPDnpg*_mf4qq74S9eXv_4`bJ
zuFkBy;<)e!)}!aSm|ImD(^~%)vXw#{BsrW;&vI^nqmus0BRi+!o&`JhAt&-}|8rGh
z4JHgS8*7F?UgyH1@#SHU@<K^@=zGSns;yW+-ai{|N!X3xV@+OFhQf~IRgC*_C>2)~
zdltINBOT7UXWGNVz7Y;xvnF{oomwy9zX=Hl8n8Y>+SmHW*8@cFpn)>Xi*#wLdZ+_V
z+&1%ua?VVsA3U{fz-nH&OYcn>UjoBRr}o#G{i~0s#r{{*H`n8~?;IL><@q!J9ek|2
zXu_ayJ=~5&34p2rP%^>>4rTyVn*fF(vYt+KhNo~7gv^FI^QS|PXW|>U9@q1#L)6d<
zUwaT9{pyYxJ+u33z|Z+X`~wSdCewM;YtIj$5d0BK&mPGrl-nV+W}Z^DNv*$h`iuu|
zzx1Iy*6_AaRUiGSTK~`;_fETX+SE(&)?u!_{%9J`2~|fV2UrEs5JeaDfqVNb7LO14
zkDG*h`)T}`1*M&4CbxCTK9Oz(FF_kX?1W_5$XvH`=B*$YkG`X--ILx9R&}e9v~$*A
zFsN5Qu#Ti9({VFKI#jDhn%qc7u3vAvX&saW2c_#|1{OIy@mg$SK0M*q_nV73v1=s#
z2o_W$bBi6Jr`Q0iW@~}oSdVpnz&g+7DD0cz)lLR4R^F4s%N6;g@Jd(@u<Iw;^-H!K
z`d9FxLDrefIzP{o|58>7?CM{t#$18QnLXK!DFP3SM+Fv7hiD{H^*!V{YvTh#1XBOl
zZ<2~qdnDe_9@g7!*f~HGKS2(^{yO~?)ff+9t0Hvs4MZEB@IX#0(M_ZY2CCNc0b)&A
z@Mk==d)&yRJ)(UypZ<@?-HgBvv=O=0jd<y4?h_e%MgXSwM>Rw*MfROgjYr%y?MY|w
z?tpP>K;NQ8_MSih)N{T=h$HbR&n3J=eTS6jJkj9mXz&rY3gsiBxt);@K?PIXEWYRk
z=Ib+x{XJi2pPF&48>^|>bF-#jiwd)gHRDu~0KKH!O)@wH72bp?32n}HV@yHpZUv+q
z)D1w7fY};{Cwsm;Yyn8tdTtHqrxFwaM{M`(vsGghx@m~Cp}^h~{+=zGt^sqS+^HWk
z-f2{^8fk&@<N-~NEw&yNZ94p{)bmXbYSFQvkCl+>4;K4%)op2_6zJC0*YmXO$VUUQ
zvMbRW!8fXLj;6OGXv#UW4|$kVNVGr<tw7+7uj=Eft%x40_f@^08X(sX<Emmcel=j~
zaL&9-HO}xs)6)0(^sfT?=ZFwuTgn261kCVzC%n3^Nj2uwqrDc@xIA6E!lNf?kJnK^
zGe&w1Uz4wDlUKJO=vqiye}cN=i=`j_scKw>kQ3<F=xEkY5ku9oz7&<}%wu(2nm353
zqMxuIBY+^^2MT|A1hU3(5{*3(#^!`LuUGn_5xtvM{aWx$)u{HoNLc}hz0ec&eSW>&
z9FG3L?*lP<!S7NB%kj6}X)N1mZ~*Q@VSksQKiQe4<BE%HXQ>sGV^zCT%k%XQxx=9j
z0^{k80`EH*lLvIoIxnSxnW6v<qlsUKA#W&-B~(S-r5dm`U~(#mOssIgp(niqixsA-
z2_us*PtKF*Os|3mE0fc8{%yHBlre#--j*NW1-g4ft!@hTg9hWk;-p4?Sl+=~FOe8Z
zA#pq@28k-MsK$R#4l~7j(5>GOJ{mBFmunEpGauAI<VoMlT)RO&e!U~rk9g3GF~xy+
z9j=kz=)}|oHPxsDWvuX|-|*;&0a2oKe_RtE{xN<W-s<~a4o<j6FCQiw{_un^w)Nqc
z(1;t2fOXIaX%(1Q?W=+=<ZH=`=DG~NJ~e*FPIR6>r-FVXzL!hX+XFAFI`)ctyJ2r~
zx~ey;^Y&Ap;T1;J+fRmo?V;2F2H&d{O@toTRry^V=;X0-#jDpY7ZGO1z~6`K%rmQw
zr@aQ#Hdt4H4W*pa5clZQ4^mWODm4(d7I~EZ=!;!MY6qA`$5Y_;je+=e#n;3KZ6qF2
zlZd-K@%=9!HRB4P?P3pNlqqfyZYMZMSwI_TK;I73xpC{a+glxaIkfeE9~=G*Hn994
zid104U3on12S)q`<4QMJlZ0@x>D`zGS@(%{`x~k;VOs~|QYqPoJyNVh$3rcqa1>m2
zm=cl0(W<`${*BW${nX{o;NUI@0{-thmbMOnt);w*Y=Z36+@8omtS#rTMZJL%yO&sZ
zV*8*T1a5!h8pFG-Ljy_TR5%HX>lfg_9$&5AtVBl(Svl6--rx)l^BXrp{Ovsv+3yr+
zrtIzchF^b+GpnM%fc};WA*>mYUizqFO~)Nlql&N5UE8p>V0GOZe7Jp-+ZlXFHKx1K
z3b!%JLgEAA^loUEY+Z|B35>OCB4QXl7^*w6*Qxd%3v{V?rNDoUDOg|qJvV8P{BjjQ
zhlVK11q^^foLl>`8<lh@`dYwuRA*he=<Z;Gga-ZN#PbOcK~$o5W3D(RfZ|ttTLN4X
z*`#J@c-V{aa^16m>xm6G7Es*-5GWhPTIR6sMB`ccMy&uVY<r_KIEpCFVi67Z1VpME
zlKWaTvIQ$9S9G-}3>;J?kSH>MO|FHTh)}8#Gw-q03=SoDvmd~y#)HKkA_rU8se+)4
z8E6tZ%4=wI--$qMlcsoK#G1jPXl#5j=b<<Jg8G9%ERYNYvjMrbTE7=V@N$NLXNd4R
z(b=u+j2(%$pTOoLs0LFfdhlWKwDBbr0uBtY3RPe~2d3)Ni7J*7MBbw54yzipn_CY^
z2FSLC35ph?V&-iWS(rO8jt?Uofd>89toHm=(@V;iJC#^FHuOxPwsio{VwS8nK0(m|
z2jOm5yjU;Ea@HLD)|oYfj;A$fg?dA(Q8OMYPCb{g52vBvprZnu-`Hy10ON2LKCUm&
zy0iIKin+P<Gn3!Ln*Rkd7UwNhf<I+`dvF{s+9F$yfkFv2jJqPtMd<LlOUV{`pu@cT
z+b}U20f>lNe1LE|<`zq&?=@8~YV$F!w*dQ}ck#p{3N;Mq45Oydf3OESKr#lHBZ0QV
zh(6b^fsf-LdKd{s&aXEHV8b#dl)LMPqK?>nJ$7o)xuNRgNw=h1ae$?MxJ*wrWOln?
zyp}ZYuc19uhCU1JS1k0{&p|`0)Qq1mM!oPbM{uI1e?=|ooQxeo-=jsEoaugFUIgId
zKj`LUsVcFM95PSASh2S4@)!$R(7;VNU+C)2?TBW0o89^G$u}YDUYL&TczMDD6C5b?
zBI6YO*tP@1u6I3jZltl$DESElPe0=t_qId&(etlCJZ_&SjFP_anDow@6usg6YoOru
zd7_)EFZ~&EeA3v99T^N6YbHA!j9<f=73>R@Ewe?y_r>74<!&LbIU7G2D=&~h<5Hl|
zL3?lHqe(zi)=JVM4nPdKd}txGydc87FvCjJfaulqCc~jOhF=SNK;VczUyi;Qg}#En
z%Zrs5<Es$fz9JA0o(*zgXt-}VewX4G+NW<(>N0yBMr`<kTTnVs{gpER6;$^-Q)&gS
zBgDyxF-Z5cyUNkvc6MNdpnuO<>eu&*{jYhbO#<}<zxRjSMaW&ghWmKaHS#EUCrLd}
z9p+mu<A2roY%uSf`tZ<8l-PU}6J=p^NSND490e~nqI?47>w|TIr1elDJhUuyW1#wk
zvS0>iR;%8jMD8N-#;1e8kv-cvBXkAcy2-bKOG1M<l*sukr0>KPh35*h>=wVX!(aWW
zs*J+!V1soQvdI@5=aLP|s@>2g>&%0@F(8bg&V2t?8o~0^sE`M$<fKkov8XTY2`|xN
zHPtAN94mm8B66%qdAhM@E36Y08&dTw2mSY1w0~j#*&n70ey`r5%>Qh_@w9dS>F?!P
zYcl!vo?8FH_Ao$eHr9WRxq*G+OmnPqJnf16y1WAk$34ktIdd?&w8!w4LvMb3Sk-PV
z^77lI-1rC2_ZTn#%#Ftg52ctztelLB6xQ)YKMtJ*ecS1&{y};1+$7%zQHK_a<KzvC
zHAA*kXEshbme!I{*)Ez+wFrC&Tfv92xV7#)NRKZ5<a3UR9lv!Ry35&H%%`9sLvAcZ
zDwtp>)MGGwPjYb>jXOjg^B|YyY$24daWgZY!*Zfl$kW<2EI~<Bs}X_zcwOmrf=j;y
zzq!pH;>-{%D8;x1^(@tZ{>u{-r~36l2<y&{TKJ`o2fNpquikPDvi^a>+5?5y`rlrx
z^u-mr`Q^l1Wj#3P0msWO@I~KOqOS`$KGXCQ`Tl=T_;^|9j2zG?emg`dCIA`1Pw=;A
zFttY5>*7Nm)3Bw3y|b<##Ual9p-DNu_>ej~?`k{m8RpTZ$;<QXyh~+XjOUmH2UoSL
z@ke`_7ry;fdJO{tVU8cy=+PIn;W>2*=TiW13IPIS=X=_l_Jls-aAH?sqOwDmyF`}H
zHQU{6-Hm3kNys+)KAT-F<|S9oZ7yfIbMnf)&2m2y<si<($1m~6FZtWh?hddPcQ?)r
zsWUVBlP8jd2D7ou6G``0qST~u#<KP_zkZO28d)OO4ej>VJ;qOVqFEf5xC<>|uT!WR
zUU#X!rDwyD*8Z*RMe#LY>?~y|Xh`(08WW+{9mAQPt*mYIfXjk==ZRPpN*Wn`sp>t{
zBzX%{)4HJ+9;VVP&0P;8_${S!?Ve+r=Qfkr0%kO!8V^IIat6;qE1)#C;>@%XX~H^;
zb2m731FxPxJ~+uO)*xG7)dOujsixPOb>@|mDWqymwAsdcgK^L&^sZ<cdxBG-C7{f=
zMVWv}s(tQ5($5XWxL3QcGxZbB7xWh&#@b1L5j2eT2#Z@Bs~CGfAJ~MFg@wo5b%wAu
z>l@6)Fr_Q2Ho#dSRymr%(y7nC&hPm=AzY;MKAHrCsrt&LP~yPtF55BSYpF_@V*>@G
z+2K`yH9q23qq+Lc+y%L8+c>TOQLFLTVWAa1P_%o0A$;o(^m|YI9!jWsY&o*<WAY~+
zqpM#{#(0=VOj0uDMv9!T*fLqPOqQWy&J3k*d?zxLiY3KJQToOv;RpMACAtHhYlf>F
z&Ho8$P(RAuutovU-T)L`BQY8KJN`llLq5go?QYGdhG2ms)Bb@OdeXdX7UZYS?Xwas
z2ZO7|S^`#Q-gOgabxA2+{Q7U0MgqhEA|pm{cw1BSS-6R$tP&uiIEUcZ%Nu#lxLmjw
zqKVKz%L9Np&r#f#w9EyzCtN7wEeG2)IeB{c926PeONsX7Z&}bayk}^Or`c5w+DPpn
zzfl!f2?*!)c7!qa@!t@aS-ou+{5%{b7EtrG2SMN%&=Ye|+;6O8L3GxA_^{v`!_N<H
z%?PpsUW(5n=Ff|TAd69dK)KP~hnFeQ{-BNFJ(cJg_!VLT)R43*+$So8`mt~?7G{ha
z3;&vhg{Y4Y`Hfw;MixFDg|BgkadUO_T`be#qbR-u4{I3mjJD_6#rxX8@GHM;zXy=v
zM%%GcBxv!OJvhR%j$xb70}1x{Gb1|JZsZ?|91+E1W<*anqLrr;Zp<6Mxay1INM;kJ
zON%sjXBo^yvlE?tHoRx>5N71*222OaHz=`ZQEZ*~GMRp4(UQeLr+FKCP*#a&a%Q(?
zvSTLm9k}M;?iED!Iyd(jqAIz8L=}@nwNemOQjimH04A2r(bsm4sCyo00mW^;AlZ>_
z{CXwe?XGVj*%TlVKwr|C-!TMU)<00+k{uZf?*Qb(%R+lS&D|YUn^Ny(<&A2@2@|&A
zX`H*xP<Vq9Jrk3u;w-7E#|70JaY^BW8&bbQmja1%(W(}IynEjMN?FCQtR&I-Ibb==
z&L^>R5cqha@1=)w7<wK=lf}@d6aNW@V3Eq8=01igoD4M}r8A(bldj(_!rqLG{SG#g
zm>_Ehe#Lr%sqWQj{qH*eXl2{?WGhQ$D`JX?cjzeJ9^Na6@5ry@6*BB-EpC}aKe5lT
zdaoNGrs#-SgL;Ug%20<#+`oGrAb>PXh>Gp&B~8T^;gxE)9uu^6|8UXV6BnTHdit#D
z%xA96;cE_v0J2s#V#vx#2bvm^tf4U)g0ser*n(gQu*wD@qDm3E;WU3UltO(irK<V+
z4rCBHGXXS6%Bsf+>CAd=3qHBzjzdP4Ccr(jAyrN;^{jHyMvWs7AMKWAZIAw%CwyYq
ztSh|wCkV+<x3#G+Iw1k^AB@f|O3cI7Uvz*5gshIW1QnmMYC5<v0qyI=u$j$JHMyu^
zKg<m*(k{jR3tYuq9K1nIJYAqfXCciOZJ&LHrmTCd-K#pwLZ?7ongL2|bRr|v)Xd@A
zvxY!9$;pl@3LFwvPT`Aa&Toi$u+Bt-_IlsRUkM8`Fxv_&)|sPfNw4;rF+{w?h+l|Z
zvGQRWE)K-Yn>+I-oD3jAcb(Y{H3HT9LkI2h{$VS*ZU%dTtm@1UCI~(E>^Xa|3LA1o
zHP#AoAQx7p@3ZVo9k!NBC{^RX$|?hHlvTvaYOKAJ%&iMSqE!5boLpxv5+$)zCu7X!
zjM!@|gAvZul1;+%rtg{RGX|H}nUioW&Qza1xV+PbOo=@V`hlOHx&-1|#FitYh&tN4
zl_{}Tg=7&_=fL?U%EQQ7!r%y<y^j5YBolaT_N{lATL%l;k6wi4u%16S5<c2@FA<A2
zPTRx<)}aEKXEGKrvbGJwhF16k*#%`7-mZ~vQ{-EXd|Qf=j?kSzqtr;&PG`Cvo6R3X
z%o*Oo@~uqfEs}3S@_{$yn~lq*@@<kVxePz%Px{a(u+iGXDKXZvM_5kG^_LYmpasON
zCM0yGC)gu92F@x`*K{wd6bzs$ziL$G|EeA9Q`N`TkI|}-S0^RhG2hE0+^7Xa8gU_!
zB>Czso;Ad-(h^HNd<Lab0trYNfyXd8%HdUftzh*j90Qe`K|q8U5S5$lVg|SoTO!ho
zC1T`pSECL`_IQ_XQKi*i2-F&ffG;M+As7qy1j(gL7t+am7FWEXAIhQ}r}Y89dly}X
zAUdl}hz&1h+$el-7qw%d*VQ)w1nUAILnuO?^^_3SXLtv<h{l?`53?LcusDAQIW`%Y
z$sV@Yf0+{iV}}{IFQ?>PNeP@`*eJxRE$i}>JS94xH8aZ~aB+DK7lIgaik>wQMU5pK
z`g)pN<iK&i$kjQ4{SORJjy_2_Hw4JDLeO9Yk2?W^^#_&^lLw5b@khALn<2!X65WYW
zLwYGsyp9K37UHfO$im{(w{88Wlf(=bqxj>!AqAV;y`!9EL9F*g?Mf~)dOVE3etV^H
z;ciH;gx(f<nfWn9IVJWEN?R}B53tLj(>wVcIHfEZM3zajwW1Q_*lLUw#=M{s<&!!5
zQ>X~~MzP+k!^qdq1*)Vm;S+F&z??^Ksx$vK78Al%iAM>&`V^PMn5O$2Rx?+M3>5p#
z<%a;p-zWw$Y3=6INXzuU6LgZz+HXG0;&;g6r01%3p{N2AM2H?Ia=iAE@YQPW5QWqP
zc5-AJO&FpaaK%bNHN!8$ULn{-@00ZE6Ot~AI!9jj#}1<Vi!lN%>BG=K$E%JKCmq%;
z0;^)hsWU&jMp`x=eG6QW6U=f}>?yLPwDl-@K>QCPxN`PP#;j&6RIs+rGJ0SE!sWJw
zL2p$%HRn%10a)C_?G8SIcgm+9aTlZS@j$A2v9yDDg17i$ABV<f0|2x3AI}kQxeFst
zhh7kyE=*PMRN<N$kpN|fp0VlC+)XL3Z%F-A$~*HJKsn8$d&|A4-(xAH^hu|Ffy}5t
z2BOU}u~^)uA68!I_lrQ0BQypAVHqCS55k_Z<=0I@H6ae_%;M_>$pkA@y)cNfjMsum
zip+=wO&H#}l3a@{^Vh#XY}Oz3#)bVx;Wcu=`S>4@^<DO$`#MbDFR{=VK12+0vzDjN
z!k$pHVli$snTbZB8}5g0h>9QcNB_WF`&kE!XnEz8)jg`VP8-%8mwH7y3WAmR+Y48z
z(CulAD^@Qb?N%>`LAz&5sF$*ObiuUhF$KZ%VYkTO!x-(V9^(pqoXLb8GsQR|V{~ct
zm{PuN?bKhbXAKZeSaNa8k&jAMV|1~4`@~{@b*o<)-Ad1QHI4~~iJ8?ur7W5j+v-u4
zY-IA1Mo-xe_@#6h$Bq->GyL&!C5X4c`H`!Qmz!w0oEEvVSIEmCh_S}tgxL?X2z9uU
zx|)Vh00pXB9~$maRy(Jm`YRlI2oXD1!ISm6DE|RS9V;OLfzhhe+eKZVKi*re3jW^%
z7`6D*<zf87*b{mk?UZ4Xgg!mlSJjR!acW2gU&t(lNxKET95(9;=#rV!0?Xxpn%~C@
zH+I*=9~<iQ4+|xNWmg-IeU47jp-o!kM0afQ5F#*C`DvpYQLwjRM5=LJ<%`tJq3uV@
z7g6d~Z&sDjn-ivs;k4D*5sqLvcrGTP@Iaubzoc{H2aPUI_0O6Z2`YE2!m3o=^3bKm
zS&hv3A##E{t*?LyHS%Z~N_~n)PxxgqQgr$BMyrh}Yf%t87Cd6!VY}(T<bpTKRO3pu
z`ou%`!5K{B*QYQ;iD;ufV2^CfnrbL?TLl>43_BS<`(mi2_$JbKv6>@pb$Tf&oa?O~
zGJ({?4Df?}hr-uDih&e_9Hus9@M{`>bvjJ?@8mdh{uh|m=7cesVXQ~l2u2euGJP;K
zxAzB9^--c+>&??C5h;3*@Fk};GP}$Hog+SdAR941ypV;1-v&y{fLkSIpb#u$&*CRz
z=ZJ?^z!ajdoDKY&7ktbH8%e7>VLb+FL^?fcXV6B-j*f_qO!$lwe1erwN9%-HUm_ZL
z5WPYL;4?bE9~&#&u-5mgfqY2dVJIJ3@c>~jFAb^}P10CcphOvXT9sH>_^Aqcf?&`Q
zKwjSUNjR?l5xV02J^AKw*mT~ch(T28Ky;i={Yv5$GUfMZC<EKdXDN>aZ2Wc~%Ihnq
zqqv=4XEv#vF_|XI371Np*&7~(&XA<c?{WR?1l^kuYcIS9u|`ug=1jR<h_%!3V_FA0
zx|IGsN=I1w_p<a}M6>{46F=rlD4i$&gg*t-Fb;%!tSTV_oFx5Hwij(21KB=I;xjmf
zan^`#(F=&jKOjrskrayYzKQtfF~`!W_XNEnEsV~QJ_iA*Bj%v6+4>BT1Zw?Dj{b2M
z(ugU@v>y7|(X=@d8V4Hd0-vyliW462544Yglm2qrS|7x+Y!lV_YW=O@zo<7KTYiCh
zd888ZPaRe;<9veI%?5Lt6lIWba_3|FJ5}TR#eSn4Ap&jipod;%oJ|1y3yCqFyHR??
z7Z$D?EysGP^jDhS1)LC%f8jd428^HjWrqJSoF`G({58g!`XSyTeESLC7~J~mUd+ly
zIV)F7i|zOEV-EPZL+&54{0g54TpyXRFV%0%Ee7M}TYdw)IqMCM)tH5tEvlGU3M0pQ
zDKXmDg*=OFILlw%K?8hAv$FbI$SnxHZRcRI=?LxDjL~HfEQ`sTmjsMyrN9#obu=Mu
zDW*abfmuy%^KZxZr33MM3n7~CSQ;|v^%OT~g_e(vdx!Sax{a>Hp@$9TJ%4e+<T)GM
zTU(D<t`4m_sl~^sHOf=Xklw46pCoFc%}TU{5F#{Yes4bLffasz&QdX=Es#L|>N(4m
z7_URu_-!bU^1$e!LJ8E8Jt%G0Ny{a#r5lG!BKwXRYIZvlN}6#^nJ6amH64q1oMkqm
zSed!^4Cs<uk%|RqgBHPulR|#$7idlJYkW5RcpdL43*9yEr=y5_aNt+1o>Q;PZ@&^x
zh<C#c4&9-r;AeCnSZ?}gx_1ZA3?dnJeK9^%Yy?&Sn@}7Ew<0bKj;^-jYITe9RKv8$
z$b!(b*x(?XrsI&Z@JDEnT`Xk7qKi45yXe&NjNf8hm10P1XpfO&8dqr+V?fNpkOp!q
zhjpY%Gakn(CnzDuWO@7qLcq4K1mPbLi`6ZmLw@5vglfKzMH(o9l=pY$KMV-UNvIyn
z^op@YNt^lQ^U$~v=tm=%53^>1Rj@eKBU~9FG0CyI>pdFE1H-13&1ek7K31YXBg~y#
z!#Ch{DV8F&lMNz_a*(sWrTk63TD9An0tL2n&2zy+cfAW9nhP?39PIHOA=#Q^;Gw-%
z2ej;$dJ1`(i|0e=VZ3Mv>-<#K*>;Jja|l1?^QhCghqWl(gQdkL4#sg=`f2ts7p1$P
zHlJTJ%nAn<zu+|!lLZ!r8`W&)ZpL0vub{$hOb1qhM_;0*y%_;F{GKB9FWOC&=%?g~
zVOZ3n(?#Jx0(sCOuEk15Uuz2#5;w|iCWAzL4y>6spfifQl2JlZDL*<DHHGp{E!z|R
zt&Sc}cwVOR>1kdNCXO|I0e#;d!#7+@E(qh1|9SN8NT~r=Eoft|KH7!%p-{1Ey`JP~
zp{;8=tcJ>}1ys3k%?fTX>DgMf)w4(>VE6D7YOI>!gNSK^KHFBc8}#MZ?`VOP3EgRl
z`%LBfKz&<@eH&m^C4>c)dykt->dfng+xyFB&=e(rtDL-t2XDE}ebIBM>B86QzA71A
zM<+d3XbskE|FAhN4^037Zpijh=((<Pq2oR&8-kNm>5E=cFD+KL9OU8U$QKxiL~;o<
zDuhZvO@&qxdlu<_{UQcSh)eN6$AS2|F!1E(kpgJ#^ES{Ps?7f_VbOPK#$@P3@BsZ0
zsf^g^FV@4W_27P$jG<M(twau@z7{#&U5UQWCnHqq*VES+E(F6M5U|nw$sZs@Njh|8
zhBhF4r`)Y25xRrYj@*Ocs}zQ59NB=@i>RGM@Jh|76#^iC5zXU&V=(;He{ZI8YXqSJ
z<5?Vr65^m^Mq6f98$NWwCmd;0dUnA0Vb82N@-wb`O7tJ7uCB>0xdsTdYKx{nAy!`O
z7rxHdVhG~XY;|V+m2&G`vl)z-yvpAHbtC!KUTKr>K=#ndmMirxobTz}KEu^+!V(O&
zt%N~p&Gnpy_>hAYg2@Z#gKb+rAlpWXJE}pSjKqrUdirSEdRyqZNps@woQ`_p)}nO~
zJ8ZFtRJEHwM}~}cP@-O{bDbg{tPtvB%?g%j#yXN>o%s$l7%X!Ip&}%eiKNX)GB+|h
zm}na2o>9($-U}cYwfn@yY&JgP2L$SYr;etp5*Ai60D;J~r1?A$o_ZZ)8w@kU8bPG-
zA>Wc?dvG4c_R;$gVDS-Wvw9_}TS<wFa+V(>aj|cpz=ee$^JSD@M}h^xnU|glQ-?|+
z8!y_n6BVQ_cgPE}LJd1GL<dFNnSGyZ@5eIxKiS^B$j;wS3w_ckTrxtK0z&-eWte!U
z4o43;v~0Jz8WtXPU6y<<|C`j<DrfXplR|rA4Pt3DnxT$~O#)8`2|Y7uE`^OMh3lfk
zz6co{KMHQLF8%S*Z<5c97Q@PX_VM8aY<KWFu?@-XKZ28ma;u8ygsaL304E;$`3Mp#
z4Hc45Rbxaw+CU&noq32dDp~kzyvqs%Qo>bdZe^x%wt>vlpUkPWcZq#O!o>8}LYITI
z_#iyH)Pb)EM{0_l!TyL}h!>q22BLq-?&CuyT_`5*HvE{~-s40UeU8gv*DROW)iQe`
zv)|t*m!>>CV}-erhK%LTU<Ee<1w5jL(*aOz`xs+~QZ<RrVM{=vIA96b7jtF7R<|!G
zqz2}tON`SI;MYCbqYwp+F)m1>9?3B-&;ht}j5~pcX_2{JtaclaRD&-(nrC9Khl7fz
z;Q)|1QmlJdxl=GV+5CsjsuG+^`EHCFUfn}}vdtJ(15=6;yBGLTRxK23OPexmlvjz}
zAUFaMA(zl7X3T-ok$?sgd_k?g$_+h=z>O=8ZF>A$!c>WM)ighSi$xjiF-+(ywWc|)
zLyE6nY!1i3%oCs_QAWScZG8^TS*(ZNhpK0qPZv;)m}45D_owM&yjFi!i5K1RIM9DT
zM;{-uW`LNT!}u}p*h}<#kq)L^j#jPTqBYQKRzJY~xun5Tcxy-iQ?<zOaz_vfp_G<4
zPqy}g5qW>>Qe>|mh(16gh-|6dS!a$O0$PI7YI~}QI)J@XMSQmYrnwXSHD6WgM066P
zPM}4ARxyE&sWSB9s<Nq?epb2Jh7PcEE@7X3{V;_zVrFbUlCqXN`l*PO#O=1+`3NMv
zB@B^!>P*KKBzF<P%1dc=CyYC(zjoFa{|n>&1k&>x#(VwXe>Pr|0NF#d=UWV$IOsCu
zkI@H)+_&?PDM!9}ycT7(j`0>(pJcqarYwJH&5oCs8HicC4(BT`7vOU}{*GTS<1TS<
z9?WuzgdC7l44kWaDZmH$@ZgP@6v-b#o<dC3AxOB9gae@=?mGB#s#<*oJ`jz-KlW1>
z#!ZC5UKC=gKBhQSnOQu&Mj7-Pc2FQ@vv+26mks6U<mpbYUM9O;Oc8YFHW2v-lE`<Q
zCy4y)^Fid{cZCSjn7v<SuaenC%)S-bIs0~gOrMtAC~4l944O>(P!|LYDO{~3o9VlR
z<8q{=Lrs5MHEtroPKI9eSh?H05t0)atTX3*?-<>hBT-SFU&_-mP&tP$VK0y;K=m)z
z3t2^ToL<|CjV3NL?qvSL0bVyuh#->T*a);?k=_Z`Y83*eTX2ZI;qM0tPeGBrYaFsP
z(j<{4_+F^mskiIQVPEkg<$TMM*neyV&W1{yecoT7^ca53OWuJsCTk4Lmls+1d$QI)
zg<nOHe*r)49{xAsfAsjt;9s&O2mfFR{}qJ)zPG!;FK|E6v!3UhZ3_m15r5mayF<!9
zcdAt2ON&oT`{VbVqHZ~$>2Ferx*(t*hpMS<`AECx?Nex9fXBo4(LO9D!Txh!59lAF
zRA?8_?iR?-n|<<gywHPAn5$N7P`7+}*M`;i?Ov5vNYa<!*Y!JzQ~iTF^W#g&slqUc
zTjIt3;YETDH8cK5<!9<2o9DlbS0^=q<b2u_`CoE=Li|GQ?>oN*kFXos_9T1!@a`a1
zT^>W$x8dv?eS@I95<7CQw#E1<Tf<sB1aXynDpkF^Sc5@i+`7tgO6(}sUAXL7J8vjr
zys;Xg=?&R=E&}P64CD*83o>-T?02d(=l&ejZ-|gSExwXK+XlXsEDr<UDM}0`M39Dv
zRe;8C_WqWr8Iz9GmD5EhBYKr!vRA<SiyQm(m2@v^k;lHMbOfhDBY^rF6Ig&@lf`Mx
z{SOyf<!u$u;K75qKJ?8c$@bO4eXy|-_E3VM=`O0o-Gw^LPdoz}rkhh1L7(MOBQ|&$
z8<Z6?g@5!S)8cD6Z7^MyvUyzucwluN<Suk@{(LVp+VF4ZFf8(x7jj{dJQpy}?Fds7
z{*8mZCS#TOK_gfkVnZ{JI^*^DhK`tTo;j8VkVd21@-iiMI$GiRfxi(FSi+xpOn@m$
zs>x;&s;aCz9W#&c($;qGwQ%xYDk(8<Q<nFL(i25MR;GC9V=OGNHI`WqqOrxpuLz!v
zJz8Ek;*GKoyYW3*^>H{#ut|&YJJ=}dDo5=;sY_(90up7NEFE$UzamtUYtGZ`El)#~
zgx)d-W8nna7ahltbvq0WGWZ?Z;K7jRske)OOI45Vs6;>3c9f%ji-~=w(mId$G6WXt
z%uQ9;6XnOK3_^^`-~T9LR0d(@EjM={_DUq<EDm&zvv>$xKW7D$%$GpUcwCOhW#Vz|
zcyx}pxqLI0xX~}BvlKr8{g8%x`{RYZin_xfdC94#bcewM7qd)Wl)A8s5hoA-*rJQ$
zq5kUkg7<^Q%PSqB6fop-Xt%q<_}o$E`y%lXn@%N7y>dYTnlJn{ZY=;}V7M!<46U(;
zJJkavua6R|26O?QnN|R;h$UG0hZ7*#sh*^(9Fo~#6$0Hrn1sLGZ`ecl${bW&fRihz
z9Q^L0m?TrNWTTa-hFcfGfOY0HG-qQ_#s^N--SDonJOf#mis@KcCVoUGX89>(^H6V)
zx{!JREX!TO!3*JVni9Jc^zAVO_tF|dQy#o5q6$nXKJikFx_rS!RS(3<?3XgWkTRHq
zi(Vgy)z~jJeBrb)XFOk~*e_G~GTnZeju&4TWny93sc$h~7TYh&__EA?S;3bTc*&P8
z*0aKkB1MuBqaf4tC6rT|9&5#q^*o*YhIm%1MS<Wu)_B&6kC<_0p~E_d2*ci-&)<^I
z)A-z7B2oycFXux@y$pW<`sNTJfjKzqeiF4IzD2F-zU9_<@$L)bWra0Vyhthc2tqln
z?+RFD!tdGQLUe)iFQ1FWm@9%ytQ^9ac_-{9YnE}i@gX0dA(V-uCtMD*ZTrcLnK!cZ
znV3hEUN1{0@nilKr9o(drZTL0&UX;vvKX}Zb$!bAzm(#{_aFg^U%wBZ^!UQ;)d8Bm
zz0HSk??t?i0UPA!F5xCS9lTAAhg!Y*K65|HU@yE-r0)*i?bi?0nNOY%S)wDZ3G!ri
zGLl;%e63@3?|YS4gR#fSE{36-sKkp^Fi$_m^i-i$e&7S+I|u!kZxylKWNJRS+|DQ@
z0PzvsQPg}<<ZrNMVVV}#<4-#ElR7i<8NU1?_iG;9du5E+HAoJk$g6L*2B5ysTWZ<Q
zh;_)r^(MJvhUoj3h@$c8f#c>4Xx|UVtWkR$MUsBK+1ii1JpDsfEK`ksA<@a!;4S)5
zsvK()K%m&tfc?IQdsmGKn}LUgJ!k|Ogw_~%5Jnk?9{30f?P2UyJIvYPqiF;0JlJT=
z5zb&Bpti$2cb@HV+X$`xTP>i2cO@OHK3z~v5<li2w&tsFazA5?c>7|Eo*Gi`LC4aQ
zVdO|6f&bA6lP535{=_JHp2hLOwc_T5)R%JK!+<^nx1t(<F@aQjvnIUb93afANQFPe
z3719R0z7zdLTFSmAIk7h#)nEgRPvz)4>f!kkB9Mmn1Y8Xe3*`h>3EnIMtji7_`_F9
z3%v4&ugl~sfA~s?fn5Gb3>R$Lu*o_wH~*d);1PcJfJC%{EbaoZNf4M8_RN#vqwv{_
ziX7qf0u>Oy=s+k%%kY4Xdq^kJ7>u=sV;xh5hcZ53tTi0#m>N9P@Bw43;aJB^!NU|j
zV5~J9>%uTvQ~HMa!&f=huszm=%VaKpn9D&X!wLN5f2hU;+Izr!SOf~q3VV7PK$F}E
zQt8emH9q8r{RFA}j6VpVd8{>`T5{*nJUF15ro#UQy&&>_m{+9Dtp`7WL|-NGU_Ns(
zxwD(V#}i1v(#E)!%>E7Op_??LM|+LCj}nvjbHHuJ>N-lpZG{U;_G@|%^ZVI`LKorK
zU2r36(Wu4&A@&WNXI?6cr2dfGVsV3zjh5ndX&FCt5}YBRp$WZfL;GPE1<>L`7Rkq|
zQB$lQ*?C5S4c>$!E%FqtxPZ;*W?cZOBIJeSC+yjQns#mqb`U%NpefYH)73xZpo|{j
z+3s2;%3~c}R1@*dBZ$&#<;XFtZssIFL#3HRRjRh$q_<{{@J?F{kDEN0CvYAtp-Mk6
zS3cAV6E<-h{OuY_K8RD)#?5gVJCFw#yLloVu37y7)m8C64%}q0?SQ^T=me3y-6FVZ
zAja<!r4~UB&b$W#<l(c9rbV_jLyQ_u=p4SKe7KUUK_Bb6ih@jhNao&s1i`_6TlgmS
z7rft(I~Z{><mbQ;_f5snr*Rt(4IM?x%-#-97-lmy-ftL;o>04<Lp{IZ!v=0Q5_<p~
z)u>Vx-!@S3k#7|`#!m#4g;3ORq8Xq3L16pdszjZ+>Q>ybfxhA^4`bn7<Dk;6$4xw&
zk3!@18{!#Nw_i}`NJYDhhsImifDSh+AyR<fDl*8&a1O)9a!s)<=6DIfc(;zjwzG@P
zsgpR**T4k*UDGYl6eYcZH+lY>-(@SD0eAspi@<;fS7V}^vt&0gm0&(#$J|_J_7bWt
zjC}D&Wlu2Pn1yT}N+RNYKQxyMRb@y7!%iLQLQffbybic6<zk?(?O<_zr73=vwBaXj
zeByhEg8lvj(5mrR9{`W75cRyO_Ro~ZW2|m}5lnn8QGWbPJi_QC@nrr6L7VIvGdTx(
zE<3?V7IvB50=@k(+rSnZ6-wlY4bg61bRe|>=>rH8Z&TIeLe2pHqgw&N;-XE_G>+UG
zakh!}43<hYWaWz?MwErj5Ch^7nf&<x4a)ty8lMB59^Yzvjr0iD97Nhcb2XaABhFqk
z+!enqYBfKN<|@})m8W^abznwM$+PW*2`j|wh(&i6(!jvg^^#i<ZTU6-NxbkK6j7^_
z!D7oO$IV$eeuBLE8h=Tf1I#G4!Ns;TlOCq4`VqtlnqTbN2Xo7vxaJ{kTH<+%^XmBU
zL3L*899lpcNXFk6cN*bV2r!|qCEYK4pf@(hxL6E({$#pef4pMl1AXFRknWm(J#NH6
zXk<nylSc_;G@KegyRa{)Z!yUFcrk_&@7Eh6N+lO(=#SBl_F_S^_-xSOY*JPxY${Oi
zhjZMIYnw0(d{+eyVhqK+1h9)!PVq_b(Z=r-#ONzd`WBT6LJ$Y{mjV2x*t3ameey#A
ze*M$bS+?B9$y{s$?LBXNLOG7~K_89Z<{UmCv`<+z$~k<t5~c4!`O$Rz9eyvI@cey9
zi5&*#8NNl4j!Tt=g8>k(S4_CoZnaBsKLCRJ%*Ai*!|^IKi4(W71MIMHi)6k$grHIu
zttJc8!hHYPj6J85SBd@-iR2^Dx!5(>WAZz{1V<&X=!4^Z#TXip>dPBqXi(~r9DVq4
zH%F8g+<F%E2<TtX8P46SGY}7Pq~kHlw~;U!3HLiOsAz97)ZYM0!v`oa1a~0#22K2w
zO|YV;xyJxjW=j~(`Y!Y*3g3;wT6``pUWsu=Pz4tqeW_M&P-5edg^eY5bugNw`@Q`k
zi6}1T8itOh*`4iL!yi#%#D4gZ0?fl6Jkh^z`N45wJ;m(AmIK(#Jd~hB{yZ30@PenR
zP2#2mXbR@Vg-6p2fhxhpuInlVF-S;m10*miTJNCg9R4!x^8SYWcKybAG~+-2Cg@M!
z<;U&cIC(K2$2UP-Y!6+f`;9}Bm`>|I1hio^;TZl%Xo@HNc){$@4Vk8&?9wzy2QU}s
z!92_L4KV+CKVXjEUtsaLq{PR)!DSFBp{W!pu+QAcn;pHxc`fLK7sL4$TOa1&>6Ct<
zXhp!;DV>-0Wb`8Ni}f0Ig!Vfme&N8|Fo*HNYV;`uza&`k1;|`D_t)n3>-{8Y^@waJ
z2KyCQcX8WEf$>V8LI({!G{cdcfMalrFbr4-mQ0)V*ll-}*BRe3t|Wxh_WE->J8gOG
zfLJ|*{85b|@guz*wLH)YZ^>ckaa_pzC(WC8eF>{qs8^)uCKPbt{s!BsG8s-WA$o=U
zs@l5#JOPxvW+omwUT1Cy9#0#-;}D~R7)ahD6Sr%O_+(FShZ)5{kcaDNM`*XpxvIJW
z=K<OaKWRr#!B%8++$J+hk&&aw+!I;Pqi+UVYA(dIc)H`G%Ua}NeyPd_Bq5X=mOsQj
zd-^BpmqM4>)`5^lPfyrws*x>LiR*n((4l~C$DIyT&r7xHPl9K945!-7hp;%xesjxq
z+T0OD$RQfOGSvu&A?<ii+k-+<bs)p2E%qX;W<2hW9*~}kg7K0XyKot0b-bjN_i4DR
zN4b?4{j;EQ4X4w*x(}B^*6uX#K`$V>ow&je32y=GxM-;fFtku0Wc5*GacO!V{o#h+
z@l^@^jd}aop(nCmTpf}qsBV62BckJHW4G+9#0I$1aNv}Oema_j9`73n*BXw{{!+?+
z0@VjOI2TwD9_k2vFb&$}!yBtMS&w6erY#O1MNrOPDH0+bpD0nPQoIW_yNm-KYl2`8
zsV~&xsH8{7O;CC9{PR9qgaKpyTIx6MKy+zfC~htT7;{!&<cqPJT<$ey<J{*aL_`%U
zPy3en4M?JmKE1;W=&ff^8NkZ+jh6-iozR{ih8J&o($|DcFov&1{Nl!~sziI_dK4++
zrDok!T$gQJcc<Eocbz>olry2@Mj2S9qx{~jS8p{8E?o^~_wyr_%r;z&UVST7d`K~M
z+W{{gwwY>wTpbKeUqqZle8o<GwXax-G`m>ChdZad8}Tq{puc)|aF3@wSrF{m9+`ml
zx&>P$Jg%UE5e6GQ?ehqpD_GxN*myd=<f%jl0)HYB!MM6Ie1#*3_~OtC(Escyq<^gW
zLvi=pK-`PB2so@akA9!mzeyzGV!TDLt<+oZ3z1d>APV)jxug_Ba%i8qpaqLB&!+w;
z=Nr&27CRko4e5`-wFd}QSC8P@?|snLBPxJ1T(~?%i6R;X*4g{Q@Ik_`<&TG&&_A|0
zlUs1yh%1%^YfdFWOr0U*tY$>ZYtY0f!&T2V7+}Y3FYc+tsFs5qS9q?!I$kpOx<K5I
zXi=lK)H5L+svi%!uQUQ>=EXt=HdT_!|B9huc=v^&koooZaH2`{3gRJQ5C@BuRh~ku
zOKsiY=;h_ky!emdPvK+TLcPLsmO&O&fZ0*Zg+ma-5%*4IfTy|t50ZytN-sfaU}dSQ
zV{w=SrQ(jA!t>O59R{UTZ3U8y2uEkQ7ISc)3bW-?M44ZIo@=^SpHu0>4OsEP^P!bA
zAxsX~+X0%x)CnzyC==)^k@JBQ9xhMheZT>Og2QKA;MLo_RUKQ*&<6-fAm-F~pd}qz
z#4F)}z-xKQJA!rQtN_yV#_<p=-v{(z8-4zGAL#nErRMvzz(yn*pYh=u5F2U4q+Fi-
zhJct@v{nHJwmfK`C&*TbZ9*C;8Ad5kIi3(zxl-b4ISxQj$}*;7S_G%6mDn>P2hlVj
zT}iVb;7f0Ys;dj-#-`vfDaiaCDA-nd@(4N1*|vh{3@ReH8~4%;8Sx2dSr04*@h|h=
z(+2h3hb96;ua0{!7#MJ3BSIG+F>hY>=cDO>@q=<uQtdM6<=FZo>aYn|4H&`lNn!$h
zaCkrg(2lf|4>Ag~{wyu-TKsW{`!^&n=qo2N2~@A|^y5^c9~jiX3}Exnu&)q$x?i_o
z$K|}zL66H|kPARao+uR15BlSSoT)QuPlBa}M>zt{{Q>7!TJ^h1WIQNPGv>HG!)hJ8
zZzZ$>qciV*ZC@IYLl$pu_f>*WKL;kbq2!vcoF=>if=-RK94~BU=D3$&8NV7tn3Kmw
z;j~kWc%(l%P#V|~S3DH+GY0D)m6Hbk!Dj~VZA1fB6;q{t1hPMw9Vo+rCuhINoF-6i
zinPX!5DYl6d%(ZeTS&3ny=P8%x<^Nt`MV%N2#<buAL{M6I_{bY0^rDOYE%s|2~drR
zc<7<3@z@npNF8d!hqwqosYK=hZALXvP#?e@$qj9VsxwJU1?Ny_!MoqNllQ@O+7J4j
zC*Y*=SGOyX&$&{Na6<>kNnQpE;kIF18HoE3OVxXP;py0l3(Y(}r0Jj_ym~d_?LNh6
ze()kKoe&a6pk7D`-ED0J^86LBKxI2W+g1wm>?7I!AHpX<+4sS0zr2HSQmL{^tP_x6
z5Kgg~7<~Api4Z85Gu~6y?kjUEu@y*YFMO(RkpuBy8}ZT{VHu}28b!qXVQ&*)fb1SX
z30d=ApyDf!zTKJtA^?mQ?!O`YD{ynqDnz`&(8g<_l~pz31{aDn5V1>jHn0$q3*az~
zR(vhF8<W5FwPY8Qzr^%F^sJB#wJ58`7UCk00XPp(h{<vBTmak0O$rTW>43wWj4G7s
z72OotGl0VY=V9NSS%}D<ZtI?-I8RRLC52~3WaSnB>tR9WT?Egx8%{2GzH<$iPTwMk
z2uK@9V$zq~eYHoX5~E6V3%XQ|hakx?mUz)CXsQaXr`r+62e||(fsZaM5tOSxE0!a!
ziF#m}IdAy!^!hT4i?{OV&A9LXEbeCI+2QNR^9Wl$;WtDr5E9fJLL%CNBw0au4=RQM
zm|z9s!@D7DfM`PFV5TS@DL1h1#nM<Ow#FU<Yqw_1Mo9N*u)pGhr6ZrC6@3e(7<346
zVCN03VLvXj2j0mdX6oDd_7&BMi|r2ktM@7q?!#>U&?~_jrQBm{kwjUbIvH9h0KO*#
z9*GzJE=5BK)sj8bN(i9lZ1$wDzZ2VovKuD?sDO_1Fo9*%PXhY1NeGa?6Qs2`px-}U
zj1D&IBcC(H7P+An6tmV@kRFUl_Z3^klue8M6?-kZ5xD@YI~NcN45P;tb!O|C#IHP-
z_Ze{mXY+Vt&N7cEXoJGu5FuVZiIp||7@)!l7;pKVYJJ~P?*7qYXog2V<S9jb31f??
z#s}j&E(cvUSF07kruddj{g_Dy?}~o#^U?gKPQ$To_$JNS_$G`W+k9&pKm~%cYLqns
zL>Yc*5(o-x{7dAv7rs#h<_%ri9AT={in9uiYm(Av`+``Bk9ck(%*SVHTpR=SRw*^1
zu0<YWkt3=sl6t`wSf+0!<Wqb^?N=_b?cIMhc1%Jp<lC2Qb9+E<61&5BA1x((t9npN
zvDZScT&=l&+(v%Zk9yV@_RG`1l~va|sXg~WuJ5k22WylQM!<#w5SO#n<4h{6oLItk
z)?>~90^)>uZmPn!jN7GN?Y?3Nxwm@bn2$7#_zfKKn1gQy$GV|GkPSr>j$S%&PXc)i
z_Qqx6F1A)xw?#9KMd@E)^MI8XvUdrW?i9YWYx76I2rym&IHk5d#1K|A%{V0;0>cYM
zVWJT#hOsFfDg}oxy55UJWfR7mUIdm?Ujl2r3<E4%Wj7I_LGqvs+JM{)_M*ahq;+|>
zV67jE2rgU4_HzMMCMm(AaN;6D;E56-hGTKzwY~7I-a>MR(GF;SnXr<I3$;bisr{iE
zF<%h@FvQSW%#Do%fkqtM0vcBYj8g=T{(&C75+%@uF`%^q5vK-VQ|ARO0+l@e6mZ;)
zcBJ;8@44G4ZBH0IERGYPI@T^SRYv{Fu_x@nlKap+l+3U=jTOBGZ#X;xa+tGR<EGfR
zOrGnv(pXmn++Jq~FbP59jSsK1PDtGY)qTr@SYiXqP-i(17PjkgJreaKd0DTbf_T>q
zC)miSRI5X!O0-?H6DZB;H)0v7?$a7-x86b~?vn&qn6%zlw4{a~ENU;jyH^oK`8dLD
zhgTvt*IFc3!7vVqx#4YsGBWa*3+f?`>KW6aXct!F72cA@aJ2)sBVy_V4vdMF;tHf&
znE;Jk!!i{gad$0uXV;l``;Mn4-6(E%djtizsYmXmXbG3meT+=2C%W|{7my@C01oRT
z01i$7fZOoouMUOrF$X+(!t3mn|0TR(TN!C{>tg1Dry$Q3C(j`dL=;wy6>hW$3o$h&
zzfn)G4Fd<yqrVO)IkRf3zxuEeW#mPC6bw7KgxDnx&|oJKV<nW5w{&<7I+cQF!>I<3
z2}W1a;;*j6?IG-oM&0Vh&_T^uutIbw0y+eEE~$Gfv7XF`7oPG#Z%}2-&$e}3ClMFD
zQ00Fb7Zi96@$NN5fdH%o97eoo5^BLUR0)v^4a~)xh(jfo3S2>dHfqGdqbN-_xD6n5
zPyl_g;3NTvHf%n@lCfu=@EU=_(DaC42!sG5NnkECncXR?!erJ(LZ7geE^&)F@{BOO
zYaV=VDpD)vJ{0!qjqm`%kh_4m_UjW`p%;i}uMWO;x{Dk&N{sh8*pd?jv&dZi7Y<fP
z8;p52umSACXb+h`HR&2~7Ki{f9M*Ou*eWB1iS;`n@rShh1NexKFx~?(8sC+kx+9jn
z*`?nfnQ8O_?cT$DP_g3OEc857*_{$pH|r`;-BV~BcOY0kLG*yCzkn)E1(&YY82!hX
zMG8WFPe5;jQjERT0UKglJs)qbfj)HeEeN%@G_hu3%0MbJ$T5QG|AuA)MxSzcA3taZ
zH&N=*iwl+s-U~20kO(op0+u3LWP5)I+KBi2Ql#=sJkCG8*BLL8y2CA$L3)hKfG{zM
z-ezKA?A~UHCWid!i0G83?+c%Jg~);Jpgk0WuU^~da##<eK48;O+8-}^9Hp&WWzr1R
z)Elht<5l*ly8T8?CAdF?dj|?@L~B%+=>x}w=f?Lb2t;0awkI4W#(A4-DGY2HFeiF|
ze_<Sm581fa<w(5)Du0;|u!+P=9QC}T0enL4fVA;TebTNCO9}2?ix1xjKb@n_yvcQp
zj6)*w+qz;b0pem^C_mVQ10&#BQdn#y$cpqD&?mg&_USP4Qcl#9cD;H%soSqF6;gxS
zQhuwWbKmCk7oudR-mKG5s=e^^La~B<fDUZV!X1P;viCI4mm8AfAYlaZEtFKwdo=p{
zs<sMu__}!*kZ`3I;{jgav+6hF0k?z43wN{$!J%>{gy4`O1cKwHpNpLrDDx8lCX$UX
zMICU!;=JA;^f(>os)P5??1d2G+i?y<iC+(qhp!-%v@&VDTD>KNkf1q>fM&9Q-&jMj
zVfOyh(N0Y1uNE<s=u7Ofqm>;Xzq^SkL{xtv3FgNXivqP_iA*qeC76TDmYme+qreRv
zb@$*Gf-XM1HB}@fX%g3bA(6gt!gRo5^Z@9b>o<@B`9h&s@+we68nH(##m|!QD1-rU
z@@<Vxjbr7KmWOn|Ctd{_rFaFgh{96lV%H(smwRrDR~u#IV({z?;Wf{fy6I31#h&EQ
zTLg#1-<eSOg#yhOMOLv5<1m)SM_dyi8<-PE@{=9;G;1XV6>TXX6-C$JB_p4)vPt=@
z#DW+Vd5qnmF<mqU;3xsmJz2m!K0-7tlI(jU?&V<qFMIC-A7ypz{bxvmpx^@vh*!X3
zB`N|HlyH#@CUpj9lvb&?(pvF=T3ZnkFSSBoW`yZDKy9&lPHjE^YSp&3+7^r`n1GUi
zw}6NNszkiaLsUSH5b%=s``i1OTLNDC>3Prl{y#4t&CEQ{zVEfyUVH8JTPwcPMgL<M
z-tYPJv++gnLBTXF*I<=vNfp(%bl2+8%P2Ntykri{_O`C-9pn5=fiaU~Ukd5?xRRbE
zsm@z=UWeRIq42Cck}qHDD#3*C3?%IpA2+$vQiHaB+$QgQ#?xXApCQPQ3ya5fff`KA
zYvv>H!#yLVtX8|F%MK)Z?|V&`Tc;gIj1!FSneXN5b#U*NmZP%u(|nL?Wcme}h*Po8
zCn}%VBb;#5m%@qt1BK><86MCS8nBr=Zf-hz^$eBnnE6b&bi>T2%M;U!{Cie+s`>#p
z2t}30VJ|)7lyK?xnS?d?WJdpx@6C|$=3ccJ13#`O?R|tNva&xDro-11Dsc%+NUlKg
zI49_gZ)$nL+t<j18g6l&Z%s=bUA>Pbr{%gN=+n=K#F2arA=*}&a_+1R4|pyN9{5h<
z`@ErLp|z(9M4p~cLO9loX7Co?tZb#-M?TyQobfXAtoRIm1QOkc^ARekBNpR0P$16j
zzcz1wRjqmx^QP-#j$6j7kgpMcI5TGZ<GZnDK;|sL_uJ0k-d!BzLL3E4Hgfi>h;EVf
zQ12BFQF!Uf8Q&r%X2`cb;Nya$_rp9yw-ksMKd#sDd1@s1qd|L&h|#6$$m)fY*u$!A
z@VF=~vA0gCvqGQ1BxP%5A?Z2yDQSAj+~0Y9uj~o@b_ZKIvJn>>CN`Xu6v^(#oX475
zuYI)k9~_=BDxsqqSdH^ZH2$$I+7uU>p)Yg-dp8Hs1^60*0~!MZ8VRnM7q4Jas3h&s
zit#WI)et&Xq~6rGR_HSD=5+08z?f;o;>Xm8s}duprAE<;EPdMkB#V2!p(TYGiT@%$
z_9Ih1yby~2x-3;B8bsa`@x#CBCHZuJ@R8yI|C~?S7_Xa#p=U)w?yN4u<cuB@H+C4&
zIUQ$dub%UJjOSxOAQ^si{zT3V(^AW~XsvI<>Zd&ZPDQ+#u%2~00Ql8*uKS>`kooUA
z{<_q0%Iqv1QyO`Pa)uA9+t#J)e*O87@`n4&xA?^U6jZmpTe_}^MBn0fm(1@rBS*B;
zH>T&$+H=TXN&E%bpUinrt2$BK_^C+6i0tvj;_Z><{@97)A^mA16JlcCM|;}?dZ&v4
zZR^|nickE;=*(D6v1g8w5OjMhCCXcB09)hAbMQ=Y3DR;G|DN0J{a0bIkhy}xvHkT9
z7WN6o?;0eskWbb4T|@agHR$|!wbQ3~$9@(P${vogOO-d6xa$hGsBq$Je|(oe@<xA(
zaH7vq9qwVeR7BTINOl_~xs!yKn7xchaK4uUrTd(SEGO80aj;&^Hx@`M+JP=1-$=7j
zmF}Ba6-fAi;JzbeOZ>yClUgpanu;8yY0g)rimU{)TXnSeHQ#=OlKv6$jpAKpHzjQO
zz?P;;19Mils&%FNW+c*G%l0Xl_|DBbS#zphBn5>|*Zf~=`dWqcr}`@I)$1$AsK0cZ
zqv5(>Vu3n_m-H@D!EvTqP)jBHz8AInY85Amk$s$qKGKXuRy32Lpz_;6Hcd)7KUq{t
z7@`Kwof9dYaa<Q>-nhEK?x7cXCM^mR(II*dNC;VxM_UiG<=1Jxc9!Ed!m9|G`re_?
zNhnE{_$TG@M<fwVMSs>Qn3zBap8gey%lgu^S!~YT2#R)n0}Ps3J0CQ`%uQXUIveVy
zIvdSdD3I`Xp_~2bBeEnnCnrM)6@)$;ZS<8+<a_K=?81_YxH{5ij9}MtMtYtTqr<*;
zao2H3)pZ;c4WWs2{{gEF`%cEHp>L?P#fkjMkjr^p;ti2~CsnP{9Zl>)(h#SO1l!ri
zplutrX^TnYM2GP@2<!-ZvrHwGX@7mxIM9jB!jnAoKb_FU{iQybo?Qi<gNZ&0pPVe}
z%94>&3~8a0!*M6DM4iwAI)TW$!NRgG&f^8%<$bp@I-!gEP_n228A2(gbHY7zQG9h-
z?FUFPex}7)dO@+QKwTd@uXFq9JPM9pQO4Q=gJXJPDxqyxqX7u;oc<TEEq6&^F^0-Q
zJs;Cajp$whc@QIzYjCH$He@fQIE6`k2_$v*iyK6<m0KOkwFTF9O&$N9q!`@+8~M&C
zg*|x%Erot=hgO~i4|4lN>bmrMqVCw!8gO|~VOE01D^T%p;wNB5tT~!1pR^f$TKpBt
z)1)(1m6OAzug$n56enP|5y!&u*IN4I+3TTu(?riW%^$g~%Slx`!-?CN8E(i6J3}9P
zVi!<Sr>ahEjY?=MoVkG-G{C{g%KqG%vL~%{V)xTrE8%lBBqC>sf{Y_ernZvVxl4-*
z>4KGGRl<><bU6gq=S+XH+Y9D|p}ib6{KK4}aP4w4vq@ejIu>r~uU;TE0K5_UJHDr8
z;opQbP6v(7=o1sf1&i$ax{$>CxQKbc%;}6CI)O)4_6_;onGhd7AW*t_#>Q~sH=-_c
z>-bHPtm3L#4PBZgV^7ARF0-P#(JMjg_@FN`?<q@vwZ~pYc@R%Pa7lPK`ms>rhaBwQ
z^G7~C$%*dZaueb-OOmjWo{V3Y>K`gRHkeo{`gI=fb}mUIIkE)GLdh`zFwmVwKEd#y
zA5Js*_H`%Pn{VcP9fCgLl~8$oS?vy}{8sAV!NtY8UEl6AVMeFvQZ-HHmoZTka)dLl
zSxF6`(!W;@KH92|@*BCA*Tt2Gp)2LfAvg-GoAZWDRx08Pv?BbtWk?nU!*R22Sa7Sg
zT(ooHmnOTJB{~OuuX5$5wbIRR-p1B@OJ$<Em$y{R>S#;Z)nS%}w;tB(?lZj}{FnJJ
zXV{b-W+ql&g2`i%^Z10$A-F&8UZzI&VfJ#SI$YRu%%N3Xr%H9A-}L1qXWl1#L(}ll
z#^QnrQ;L2c@a;5!xPnmOg*^yNx=2ebJ>hf58CA@^n&piC+s<&p%&@32YGREg9uZXp
zOJ8&5zQcLLJK%9c6pp_GRfrt8WokLxly8z<Y8dM|T_UX~>3-85KST<cNvE~ocMP;7
zG5njB7LJ1!CUX*5dSOw#Q9dH0lc58CpHu8vRLGnnDB2kP>w%W5Z8@9{s~z@%KQY>{
zOa%_oWEw&?gjR%ruWJ@>9-{-TR8oWza$w#}itA;Vo*`5_lh6xRgx4~>ljg(fz9Gd?
zA}m&?L}pI4qv^{VOzQJY>Ky~c<u18Q8}P|oRWOr&W-=(D%^EOW!^U2{-^?SsQ>i)w
zBMcT64b0(9nzZxcMQ3SXBM&lZFenYVm=hBqJ|!L%{VoUPaN_F>m=T-Yxvd#}9>-={
zI<bf7poXmE9osst7@9v4Ev6HBi$kj=^L7%OKXFum8<j-yO2V&8mz69&+bH^EufLNc
z>9xeebRQtQ;Rm+$ozsoyD%((VTcbzTgxGa&Hi@HlZs={Oq)DfrDUE(KM6v;rCurJt
zH|;ap2xEW2y`Hv+LIqqbbcdTV%4iX{o#LWj<3TX-^ZAT-AUOfcRqcPTh?DAuk^@vB
z!%D`FA>VX)k|J9~&bD9_>4okV``)MxU*dZ(F=r8F>Qya2iP$ExG7RSS-@;${#)iKT
z25(u7EPi5tVj?7qk}{lFAR0i5qMht@#Nf;I@0e--<uJz%?GLtZzhDK$U10iZ4`Da4
z<-Pq<a{AnU{GeZ0w9Pk+^GJRN3F{-GXBMy!*~*DgA>P}1?|l+G*u+Hxd3kORMtsK6
zvX+g=d3brE__1Bxq<wdyjr?XBzI8U!Am1c9T7(sRV844Uuk3tBmWzGRzk9_YFuYNw
zxZx@8LX)c6tU<+)-W*I`X2q^P2qppIXIhaec0L}aq2i&O*qz9QgjhmcwC^gP56M_V
z(v~|&eyGjrKvpR<#v+R>6CWrh?#k;UjSHS?4im7HiEQX@PjY3?e^^?@){`zRPk4mt
z#Fq0gT>2um<usQSWXz5p>QePn<Z_tCx3dx)=a@eJgu}*gC<pvMF40(irwh22hqxer
z1wxR9JXzegxri6Y+{v+9$8y*-s|8-!mtkU6^fw<#vHH}>ryH$~d6Tej66Q^QI)B@G
zR*}hQUkABD5!b){(2RY{u=V8_`^5LAj>Mq}^bn43Cp7g=C$?WA0Q;U3y`DXvZ+P`-
zh56)A?Vi>Q)uzcc`fKLhBVkt#Jwv5zH*H)_1_?jMRjS(+7edsdZ7P7COj{M(6vC`w
zie|UEl*!I)RVPqqhR(SKG8S_CP(X{9+J)%XdiCVM<0MHli|3hY%E)?Vzz1Z)2pO(F
zgWC+1V0c9+zht+gbViANmnP=M=QeaB*E`ALO-HK8LU$M4U8ExnW`vvED-BW53Qv&S
z<ql?Q77fECrMrd;N$*^dD-@+qA{&T&8L&4`9=l_jN1FM4K%<ar-;gISUC(AM4~?G4
zWH%DbQ6w+f9Whrry2ftuNJro2n_1+iXQU(V4A7l75O1Dzv`<_pEgk)r*o={ma5n2r
z{ufC{=CqI)=ZQz2TqKQaJ9&uCn_bEG68AhD57;WRG7ypyo93rmwS*_l&y|2Svsr@2
zuqOgf0#Z4jD*;8-sT>JNzs*{hw;#sGnoGQBB%lWazE&h4Py9hYm@EHWZ?;miK_UN4
z*Ni3X#3jtc8QFOcl*9qEjJKRNkbiVDpEjP{8H#VQB9JCpBG9R6&XS`v$oXoHI4WjP
zo_xfdBO~2xS}@uZhE}&1hKAb7%@c->6Deebp++O;Bjq3lWhA0pNywYDJmH6FQ`b?L
zAl|@FJ5C$ZnL6in&72W;lsZq`*~bjNlo59><4|`napz)qPgdLsdFQ^*6L*@dxTE1^
zpxvuw8*l(w=Crf2vP@sHe7-ER=PzklX2xb+TBc>0-wZ;Q(LKIsRNHm*dGo`_9Y#D*
zBn%@P{EaU;vcdi7OgS=&!X0Gx_lQZ~PCofi$FF?(<Z_eg07B7ty}(~Fvc7wQ=F9Gc
zxssMvjghqUMJ(=c@>u;-p4@VLMs7Kr2ITAjM;M{ufO5-?T2^UcOS~h)#M8poF5nt@
zoiW_@azt7+B|`p;uyO-GGLnjbB@#r8M3R<N8gZD3q!Rwy0VS0)$%3SEi0erzitohO
zJUD`}Q5>)Ae(%XEPvyuf+HxhYXhmZzYULF@bh#JF@cFEqv4*Fa^LMViA)98&6H${b
zYUJ6BJaIh_jXV+0mnUv(FHbnJIXdKI1d7WZ$rC7|A`v4{)W4b$C>GGsj6l(!rn80z
znUAEVKDCkHtFSWjCSl(s%$xjlR-iB$?P~-Icc}!SwAAnkO@pl>HFRcn`G(Y>BW4cG
zypB}h$+{V-;Yj8nEj8eukytfQ9G)UEw)*+bj>)GXtGIWumrFx;1XZGamU6kkiS5;4
z&#IPj){4*Jl*_&5g(y5^5ji>)`n@gzocYHX;=3H%434Z%6C$K#vyo3T`}+;d2b>2V
zDR7X?EL}qJu(DaT!O~|cD?MWjq`qrJj8|K+FUu?odkyp_4)X-Rzy8sZCe1LC-->im
zX12z*oS~p+76A#@MeaCcBdo@rna&)j`7tm30@&IUpL+yN3uhEuZa+*s32$r8vD}Zx
zdNWMH#2o{5tiUL7R@9s>(do{2|ASYiAECl7hC7%W?)Zz61iNxj&6%$r_-pHUHgWIZ
zF?WCq>>c1;_71Raq%Q4rGsW@X66U=;{(v^AVQhN!a?@jpK6iinA$cP8T%Vve!$?}z
z82-pOU)4K)+*3Z(3Hx&F)Jr$urhd+Q1rnAccMNPr;zupM0q-f1_l5={p@D<oBqQe6
zap9;F3K!OUH*@V1OjZtU3l`oqC@|pFzyNfpp@9zfyd|Fn3km%F#?HF!fKG3KPd~2^
z?D0~x^uzpd&N-2_ol+;>Zz)A0QZWAAfqkX3gDf#lPWRhAo4!TX7PYM9!bAOZzizEV
zS~nC)_01%{_==gt#$e*cF0#GAXs`I8hts>s)wP-31a`ERT<n~iIGVXHyyJ0fD}zqb
zMh#c|5kyZ+4^MJJY}7sn*{JeV^;_bS-nF$6tyt4a;IUqJ4MMRP(4Y9sko0f)VHnSy
z8v4vZ#s;Wv&wMI%nDHc!#Ni%gH$9ZcfjU8MmIGD1oZ&#-hGjXB5uiLRP`d3G4G@Lf
zH&$7Z?uk_h<R@=4-NM#yJ_p$JJ-s-YR|Mz}$@5LD{fvI!D1n3V*Mjja?oM8q#r<c-
zGcyu@W_JI{#r?{I`HTCFbWwJ3AC4$SPbCOR4u&pHS)W<lm-aV{TQ74L_duHFkF1dP
z01d&+)B#uF`{wbmfX^JC+>_y>xg4Os&dCSn0P}Us6(<u1*hfBgDzVc6Eeu>Yv)`si
z%&nsq?{z1=ejnZl9k@5a%Dv}ZprQkCiK}_+rH~xl@()YAgEUofyZ5Yp!%(ee&kAa0
z|4EbVmJGq?=DF*0^K7PTFn_GHCNjz{7qQ-&G5cHGo}n+aMQ9)Qs@2<cwR>TuwyC*!
z`h9Mm2)jrQ-`oRpc3n+Kb~D??v-W%6zl&1aTJ-|OB3dVRtS&`}4<gUOA4=>`jwrT%
z@lW6*wdQB7FjV)+Z8=%?G0x883&o5BiC>9LX#m7qGyHh&bT(GEnTlXRCq0l}vO}TJ
z%Io1i`v=SRWm@Xm6EMzBc7O9!7OcG^7w_^e$B$obnsyg2Tiyr)EhO{kP#i_4%x4}v
z%@%R8iip3emnUO_ZD0P(dwHlSe?-Ykn3K(?YyI`*DZU(~FO3JdkKQxS+;vnI;@?K7
zSC~FL9!E(RFdvviwXSiW-Kv#d?)l%~rbz%Dc^;870yh71r-u>?b>AFF^pi$6n7Dz{
z=$?5-r^}TgZc@7)!^P%mU6B$g>gu4cHcUEQf`$|Q!|`=NuIA254(}TD?V6D6wHDDO
z<&W$~yxIQRn{9i>7Z(zBh`B<cfVJg9-K1~|(!u6bnZ*>|fTp8!=5h`ThxFwfH)hmR
zVXp$J$A0_-$`9jkq^f7Gt>p@Kp@IYe$AvO0G)m>vcQEb8`oz*4W@o9F8ewZ=YgELg
z1VH^>rJr+2O3heb*>7s(C!KdyPSf?nmB9pec;j&?_w6Dy%W%TVixa)qyw(l>l~qN-
zc+qiOC&{#X@~V7WI3i1Yfh}B1(w-lP%yh4&vaPY@0euduHT7$#@xO9<S`x_kk1)QJ
ztH*wV(zu}N6nu+az8OOUuI#1?1siD{cGF1#6AkyUK>Vkxm^%;ujlISj#A3lMiWMzV
zx0*?oKcY(DOo$6|po<|PnWm)<C#}lE2<06El5D9->uGQj{q)^TAop!slnAd-@=0C%
z@}_PDmE8kzXrbO*ezrtX=u;u2+fvwTG*kJK_WjAmR7;1D=z@E!-is*8iQ#UNO{;hn
zKSIfqp5g-+Y~4;mv?&OeHWLAnFWCZv$?7r=Wx>+A%B%c|Mc?H+lX+<{S);F}4~D%^
zzEjz)rOY2OFFIA7si}er3rui>w58(Mf}L$`H*Su!epLBNr1cX6QxBr>Nk#D<XY{o|
zmrI+0YbJ_&+7=$l2ahUmGwUnAJ=LZ?wg0mASZCqsK2$!B|0AzG@*Y32shja0Phb~(
zH0iQa9@fW}@;Fs~22jEW;I?|l!+|`sNnDp#ne&*nFDlFUu}}Xt9{Ct8d}w8eQ{!Rn
zVe0EB8J3oIc@IaqxCc>s@W|daqGSUzndrVAf-O%JzsyH!^&TH5MnX<t=yb_tx$(i^
zU;8Wz8_Kj7d7k$wT7$rzl9S#IB&&9U1~-S9KoY;@W1cW3Q&_g&wzHtBCv-{tNza{Z
z)d_1>849Sr?cIXPx1h+K@rr+>;$%rw{G;XNX{lMruq=WcdE53Ud2wH4kl0$JRO9yU
z!Vot@aLPe}#93Il9%q^rh)+(*z^VRRE}TX1v+3^w%YI-$^7K~|dud8n=vlv-Xm_&`
zrUK7vtj_7dJyxFMWY6+yTI${3sae%ZoM{gY5yQ+3G0QDo?^&vv3(-!2<bp=HU+UfG
zYz3L&&CXeFd0t_m<T?H6+W`t>XSD_1)xN+C4X8Z#)g8XHpDVBY?z;c7^ElC%1P`Jw
z3<AFJ=`;7{w_%4l>FGF*t?@X-tTvbtj#o6NvHqzmA2&05g2ss1Z78TZGJkdl$bWzJ
zZBG|e9SS#n)ACg&xgqr+S$WhrEp;#8tUUV#+di{L4sG8s)2OlgP0Q7=s>alh#7}B#
zG!s?W+R+mD=5fMA?@~<KaI<ce*Hpqkd&=kohlTlVRO~y$7cixH9sWvl4n%KXx;={B
z`7dnGtpEI+_LOxPpDOU2-(c<_!%5Bc74I3!Mu;I?%sTc;pM0-I7%FG!N-k%?*}Vhg
zbZ2yZ)h!wR!l*LcW2+d~IHTz;<&^xvru$XGI5%mW`<rogq79;*L>Pen=Z&=!dysVL
z@h)?gu5P&#{j{K|zDAl;7+qgEC;PKVjs3B>RwhNU9$l_Sk-B0#Z8@Cbz+X-7NFC7E
zM){Md+unE1HgTuGFzW0{*Izf-SGR~_%|5^09miMVYu{&vKD}Q4&Hx;k@3kI~@0I`E
ztPbF};(JHuQ{C6I@g}nT4?puB|0ApT-*fQ4-?BV1YdOo$bG>^+-V0za(j%0(9`dfj
zA;b53h7#jo&ci+CT!llBjq@uW^jF_jFvN-df!_1g$JgK5ubtS{f2lF4uf31HLsm>D
z|2_JU9?D@?)kCRs7RuAm8$xbtAd_VThpZ3Gc~={9pk!a5^!Wp+IG(R+IcX=_jzGyX
zP>d71jU7Fdylx<VV&3L1VMkl<KmO*hf+vOyL1u_|k&UT3nKPCC>Txvm_okt<)n<7k
z@mJ$t*)hI%Kex>b7yK*QEQ^|uR4+kPE@3GzUTW+8U-uqXu*^2Qhi$f%->`*c{Y<K<
zh||5#=wa&6t2j(}QN-dE_!l5rpm4W|uyJ{j8;Hz_ZJ@41#eIQ%YbaO}UN~ycOJ4LN
zaN^sLaM1<*q{p<>3c%8EZ3-gV8aLSgL3RqS2`10y4*c{Wa~E-Y1d_A(g~{|cyBJOx
zaK<+b+cPayjYnb=5$!r=J)FF0q>r#z?<+j&)C@mBYh5ecG!h)zt%V{8%J;{=ml}V~
zMT0JC?#F{E0LLdm6+~PdOoPB0i#^a9r7o;^NUplTL=x=v*{gZ^Xt?xUCn7g};rNZM
z)wexZP<f9E<-EJ#p2G?_N!{}IqJjyDpAPDq3g3aBIGPY&8E=X-bm4}gyeZS1xi`>m
zjpKRAqS=w>d|K=A@A~??zozW8TpS4%wHCNz%oEO6DBJW~CK-YHRm~#z^28Z}?G2_4
zl+<fB&aYrP+lrvm9?ikXdp>+cpbCC}=(N;=SLhy^{i+m;^={TDzgZEr{HjUSG0|6*
z$Iqy*xQ|Vq)np^bxrb9X@u@Ks$f>af8`AW7FA$-*(HYF0PKWYbisw9mg|S>t;~B8f
zHrFun@P#K#Q0LY`s68Jrc<EhEv#&T6A#hHi#P<iu(u8pd#xE-B5ssG^^$kSEaUclR
zJ=gQ9&>6>_G*nIHoH8q<Vc1i7qoIfvo(3bg$&9jDU!ed<=tmD>a0tCMgyNGP1%O`L
zf^k0fG#^%;Vd@M_xgY?bJy`nEj1!?zfUgo3Hv<8$)g@b10}_(I?Ul<e#i3{AvmpTf
zko7|?7n*a<exKom6y1Q{6CGwF$3!v=TQiYRZf!4rkMs?(+V3kGGU5GLkOPOU=YDgg
zFFg`<z<)N*d|xg{`<ljA_6!vg^^v(eFL6;X%wZ-$U3qqfi)y%TC{U1*DR|^x_Dz03
zf1{+<OpYDIqtvlKF+oPk_4*Y1`dIt=I6hLJ+>+;iHiuVRen5O`&8hKLjVy{7NBACM
zr#({x>6vwXs+h#v@oj|QA+}}OFFrBYL&fMZrnA1+?kT^(*T1Sq^}ZpPeN^v1jWEt#
z)&Yz_=H?{0!N0nKW@pb7VxhRs=furf(OKGqjr9!{HcqEb>9A{7?;n!9!RM5}7;?%}
z&eDk(DAXb+RQ95ps%>~r$UdujFS5@!>sK1yJ6WsS7Mr#D^6$a*(SzU3mzOR8_UCl*
z@%9<}_Nb@r+n9YjZ1p)^@!&^u-9p=clHOyJZd+lKUS^V3KHl<#`oa5K?E4Mg`%(7&
zl9tC0v>&ow*s(xw>}IS-vI~y!cEQ^kSXQaq-WPx3rnxOOgRju?qx2EFccNjoCd0PM
z^~K=ctL{sQaqt5|<;M_lk;hqV@vSB#d5_d!8UtvI*jr~jkB>ZJSE79wm=3M@|FKwA
z)ghTw-AN_y2W-^}@_~OGlAyFUt|5)H!$k3}U*g>%(S5%@;=3>b4=!tcn$c?8+tzZt
zKk{yu%ESDLqQ|&d_su_t$W(sjtWM4p&mmaD&g9J-DxAm1OfRc$JL9HxLFae-XRcGG
zs^`WGsao%keB7z>Jf&Y<IK)p0Dg~DTcv4(x_z?+wvro~R8it{uyrd~!mz?e+1Fn77
z#9va*qR~T2cg@%xNPf4FV$}Q!eD~wZiVQS-m}!6SQKtPa&3`h}{1X=W!Bm^}|5Yn@
z{`iBmzvzZc`#)Cuo4xj{`9ahCPD4!VS9+~~#^d*D{-AX0Y5XcRepPPcM|q9EsFQCs
zj?v?9ng9rYe~Ian7x+K&g`FVB#r<fO)<_!&DQ%woB(qk~@*jTl>8=-z#J3LHGA;EZ
zau2H&4YWK&2;BRL|G5|uE-S;O&o>!-QDWS*)LEuZ%$0>Ja!dHND6J1tdSsmWOn+dC
zCz?fDtEnFJ68l-YJiAlGcTY=6KO?VlWvs?tu`M1`eHX=5e0AzaWE6J|;4)D2oBH)P
zK5c8+)Ukcp^7fPLpyhqqzP!)@$_pjV9U4kpK=&>l8LVs2zEfoOonYM>{pe;lp}Ms_
zuL_*e%lsHtyF1{Vz>>uh^MXqPB@LC~APxc(mx5+_vo%oq98SU`ZkJ%`+N$j>J$F04
zYg+lU-DJYNQXUlRQs~`keNW1^J5bt$(9^{0Keq%*nr_;G_|-3zm?o*YZzyq7f5I6L
zlEj8-)C-H+wsjnjK>VG_?vN3_9Mx84{QrsmeWm)n`A07A;$FwSZ?1h+4t=2FR*DIv
z$hO}<r?r4BuCkwz{ALe`H+0?AwQ<0@0j)B5EU$x#su`eyuInOuees3?tpdg6(5sP1
z@QiCBKjYEJ<E;JRtTrYP`*jl-;7zw}gfniOdQw5Rsbl3-?}w0=Gf(sZ2g4O4PSscW
z>)t#xFy~`J*|j-IGcR*Keu29f=Z*>_COJN+uN9*UyxfdhXK!OD)(CVF6Thx&!p`qj
zh7)~&Ci>%R{9V^kjL8`tO-_FJRA%%pDm6F32CT7{@COY9h*Nzuv$kYYd3^HosZ!3N
z1TRyL^2Frl5i4rT@t#$(nX72@<S)PP-}5XtR&ui>aai`|d+0{CZED$oMsVl#D<wdF
z==3P=eo=A3RrQ@tB;AM3rL_opD!%1Aix`Y<z!p}&+2((;06<Z?`*--%&p98rQH!&1
zE^C(B837y~s0ER?eWv0^vK7k@VzaFpCnRhh@ZDD`;!TVYV~f*7Aa^f1OV>o+@ud_H
z1deP@b@A6LI5)>uX(poYJ2BxkVQ>m$Vbym|%xry;XZi!MgBf}-jLB{-=RbO#?qkV?
z>SIB>KDIlr(KN4J28du=r6$dkM&WgTd?g#zs36-&&{_7zh;aPy85gCeFZL~si6PVi
zuF8k)3C8NmoW-l>e4tTsNAPx$2K&Bm7c<J26hF$RJB+80ETapVyT73pvo5u-nHE?|
zFho&4f70`*(GS1@on@yFFDHQT^Hg0>#0<nXiig|2dVS>nyJ{HKb@x-vRA*2f6I<7A
z;N<O>-9d5JtkZhazAmPHJ-X|&WsMcN%HtcED~3a3F%8<#hWRa8YZ}>(W<{)qR2ST@
z9aZ!>`FYW3P<}+5Wz8d;h|cbi4Az=2QA*~#)}arTBQ#|HhJOV0MW5~&X2`638mz~R
zgGDo(Kc204wH_$(ND`~#ZYPt$JkOzrqj}wt9$cyWr=^}*@UbjOAEu{y`n}8v2bmtW
z@}dBmAKA?YtQ!tsF|w`2F;|b4Z`yfG7X1f;LLgaL(1=W2G%y)xtlro4#y+|S>gpfG
z0p$&v8}>bK-YTLo5WAuN$osf=>Bsa$_8&?7BQR)O4RI*xM~8U|U9aY{$;Jt2`F)mO
z2A*J3j2C^a{%7X+4&MlK+NtP~nsOI(lQ=x+W8WZ-wA}5*SI;bC7a~|l%aFWI=I~F>
zMfK?OFUHCDMSNjHQbW1|eI~GHWHrAKJ+G%FLGU$^)=|zvc`OLVht~%qoqg^kGxF^7
zEUJJ#AmP+)K(@X9k==@%*r%diA?ux`-3oB%<_3MwbQ}-kX};Zh<>Xo$NH`oHXB}RH
zp>RP-W8iLDH|tCt>yyP}lEjfpbi@9`j9^912;v<#6mRxO--fOzGs=KuacAYKXCq>u
zeQN{GUyf_Y7E<}79okfn#TwEx8Pb^}1Cb8^5X;1d&gPHbtBl_Tj9-W^A_d^OjNgYE
zKaD2qNO}M@FtUHtY_uH{NPIXl*sJa(yx?qiJy98!t!7*~+a0mQob4u{Vn~g<&YbNg
z>h%KqdN<EG`kkuR{dt{{uka7AQyjK70u#$5DG*=Y#O5X7rY<3t2tL3LY}Ib)%+Rr5
zJuQ%d#z9z!-UjY+3Bsg}=MdkTdhb@b9kxGpUl(i8ei$7#i1HILm2WMx>SL{5K_To#
zvh%N~+|G(~jXQJ>Hhap)b5h(sX0Q#~ULSkL%QfayPV#ioS!#R;j_-k6jMWS{p|Cm{
zHRX)IMjTA`kp$nxk0u59M-D%#()B05(^$Q~t26I3J*xf;Uq#zsB!S3s(_bfc5lX-M
zm?BtU>W)>@cLz=n%ZKMisQ|ppw=X1fWVsUcaH3c9Bb)z|qxpqSqie8quQT_3czY1b
z`M}X@#5d1ko2TtZ8ohzqS9GKv_vi7*qCS-^;rJ?<GS7c&pa`sdAkK(PCF2ug9>pa!
zM~mt4{bkNC>&yDrm(4e`=tRd;2YbT#K7aK-hVPGbhi?p983$>9(%(3S?oOr()M>tI
zlZkz!f|sx&Fg$da20O8JRH`TQ8~9R##3(5ORKFV{DRN)&(en<Id)`OKT;oI=5DCWo
z*ojVJtuWsPfdXR#Xklq9KGHZJ%RP@cvC$OVPLGk9#jvyDCSNEytCI;3hW|ci#f=aL
z3k7E54g8JAKr$QsiC({mZ2v*^{$gid6#mhIYu3;5)4Sj1IYpN<06_MSifkWhCSC5u
z?4-Y6L{l=8{(a#qm|Qd6N_qQB_*&A`)bpuIp#i@+kz{FulE?hQ(Bi-YkYXPF9meH4
z^mjz1TcJWPqfqAZ-<+tdk=-+SyU0>JgI<sw3B~hE7ab^Eq7{a59sWc_6j<&%E6xm*
z>}@F(YYZo@8#vt#&qa$1(&O`Iufw3qiH?R*V}lu2!@$LM>2oM~+}U*b#wLGcUysTf
zLw{GD=+WP5vyuzsE#Xm*7At#K@2BNIqvTw99_2;2v}xw>>RD|=t0to1Y0s~*2dKWe
zZD{45pl?;MWOtaL26L|$LBv<<du#xrlCk6O%NLBx#5SZkod1f!oMcF>Fc2RpdX4@8
z(sP!c;Viw?*HXL)RFcm>@*7oqSs>B2%5Rv-YR{B&_=A6BuTE8K#fj+~S2*|wOBfy|
z4;Q|bnRW6OP7GDu{KFX&lBih$iK6;fEyP{vT4(O60lX|}2$no2o149xh2V;>3jv36
zLJgr35`pNtpb@4Ya02T<&77YchzX=EEna6<Td1U&{mWVSpT|(voPAG0!p<Fa$7)o-
z$=q~=H#{5r@j5xDTwG_Y{yOtk@yK623SM@!Uat7#AM8If1~dz=K-FLsjtK01C;lRV
zVw2;~96Ou^;M{(#>Pjx}fwYsHqepnVV|x&N0rLZHQ;zIc(u^}ry2<`ZABI`uhmdbu
zu=M4SbHQfk{Q7uo5jjX3N*+Ju_ReTun&piu_7G3~C3~$8=;;O{XIQIIKgdujZl^UF
z+X*@G%j_HI?zlIIFMgEV!NfUT{KK}IAqcWgf->v9g1xc$)_H`ZjPJlAvxan-2EDBr
zLEdWU@<bEEGA(s<>|-=r<~8=1Dy>4^tFEIM-<BZw5`S!K)vuC8$NFRSPV7kdVBMRY
zcs`WpPV82;;FfJ-tew(Kw67Woi%Jtm^hqqc3={o{<@$Irh7fS&&mn%S6Z;-NYGk`&
z87Wf`gSOcLEFG*2EPLU3`;V@x7lFOoxaliI1?`R}8~dxCqSZVEqrFxo$g*0k1Fe_X
z4kj;gul7rsRL5wN1n2Jt5SV|;5AU2D#Fw@Bg9N(Wkui4>6y!8EjvRJof_h|m;$^&r
z>!tY*TxkaUm_^2>S-C5-6>gIO9SqXr4v8^$ai;Uf8<RKvwygRySo9(6M>@x~v5VN+
z*uo3kKafu>B5!~nR~K^zICiptCpEufDe!N02oHO6?-xf-R%_SwV&r&ZSCbyh;NE79
zVkkLdAa_Du|NRknD1BHHW?MG$HFqyh2e{zDU#_1<IO$3L2w8_jvtAU(bfTNI!L>VI
zz3)Wd<S{OIHR_m<Ik8I^Ee-o}wAUOx8g%B$6Ro-GWGk!pMN&h@biHv`b|RhVMuvjP
zbYJ8%vmYY;mCoj>P6UJWH|q~lGPk9UpJ8K4%qOkt`w{g8lix4oX0dP(ej)pcYI1pH
zUo50;D{%;dTu2QU7mxcU#PNOo$msp&o3-a2WhkcHlwv3{OQM!GA>um&iN)p}K8#9M
zhTwn6zc54YbNu0z1Sy)z0@m^m#ba7|h?&Zgs`|A;Yntyk7u6e<rqW5TEcaU1u#yNf
zgL^s|paL?UJB}wpO-IhuA`@3_43(@4ByZs4@Y&(c?K_VzD0s4we@Gl#_#dwF(p2Zi
zyPrIie}TxmJNeOKIL?IR@S~<W)AtysEBG>>{yuYc-FhO9;nC#!XW0yTOm#kaajMgV
zca!U%pXyXTWB<R3ORwu&r#e>vpt@S`UYc6&Twkw0yt&~GXR33}K7Rc`@4P1!&h?FY
zv<9~-Gq&|3MV%b1G)%2<u3gEW>o@W9%C&m?W<Qlg`?r{%B=$QWH|SX{-%RQ&SK4Rf
zt5XTj@#o4_O0tzdTl7}NR5%~k>ETQK-e5|o&r59*(i6(3D<9LP4UE->O&a>xe=&cw
zAH$NFO$^9}CNLSZngXRSRrYa~j!a&_`Ss8sw_E1;0vLHa%%YL0!&hdS=Hgt{A;Kc#
z2zZ<)AK0xkEj7n5dlTO{LicZ1n;6X(`+8J;BSZhZ`?ldX>35ayxAe-{zj;62ydN{P
za(B72qCpEB5e8XzCi_@;iXy?CHLJ5E*7<7C2>8YmBea^PG?ml^U&bQ9uv9o}7dWWd
z<Cp53v%)YN*iE41#X!mHf#i4aLC%5K32wxHbEgobICnhzCg#i>H76u1=YA6Ky%>zN
zaB%+>f}~MNh*O5~?7Rj<Vgo}_va;nwBaI{{d>YwaghtHhPl8=*4G`uM@?jrOr;rL(
z?I}N(u{b2`+s=byoE5878jK^-+V#f6%();@bay0map3M?^76LG{!X(Wj;?vaaEf?+
z809F-<K-PP0Pb4Hkxku8P8cgKT)ZyGMS~N)6KNvkdl?@rY5uM%f~A|Cs00lO6P52<
z`&P^35E4|3zh)dGnELH@mU}-;pE0V(h@+Gk^ws-sbLM@hQ%2(Evg&aH(7cGzDK;2O
z#1P!&yR2sKIdWx)-~r)iO7~l=4@U=$6kYB$DmkN(-2*v%Etc-tT_Z>Izx^8WX1EQg
zc`+Q-lse*WSd2%RobI4A_z7G_FP-QqlIIeJZUexTSMeHF`{FHGR@?Of%WD66on^Jh
zV<(P7Wl_5BnNJhDUB+g{!4Aa;X#HgOg=B|Gzl`sh)U764&?(;<jGs`Rc*HVawhR~f
zM=X2o*)U%jq_gWRX`)o7NW77a)fYaRrc0p^jJ*3P<rih<hpV=V=$^`<!9-}_)d=ya
z@q5azfl9_GJuh2Y^7Y?@Ci{$6omd$x4A#YsM>s3aZv)3~e%-WH`Nj-&V!wjVhJE{j
z$mgPA!tk(xBfpI6kE06A8d&Zh_}trA6yfB>opd<q6vo6nb9P#Y@+CV%xV1Ki>Xnr0
zzRI68ePsm=BZ(m3Yd&<Wf_|h2l~^%>AeKn)L=Zq2<Dgv9?hui){ws*x-qXi%%0vqA
zRg5e;qOt|i#=X*1%4W$JuJkcdGknA>S`<!}AK}9VUpT(9h1fhFx+w^<+{#Tlsv6f-
z7efu2qJDB{F@YbPwe0+H-uM|)&dcuG#u$}ku|C~iBqHX~Rv-w{cT6u&bejt&y4bx{
z6Kf=h_a*n%tcAJqZ+4)x!I^sxuG)~{y)*XbiGic(jVhh&RjN<-xAtN275tE};V$4o
zpk}wNqMs3y-e6iLAaH&IW@zOkHwyecLr)0OICNtIn&Fc}ekx^|Srnc;ZRBWzm8343
zrPElh5RLE}OkCI{oV=<RShx3dT8pP-ZUU>*B0-kbhh**8FAa|{GJml2StoiT3^uXE
z?Dxb=hoLa0a(B95l9nY#25p90u&z@oDVbCnXhn=6lr+bs5Vzsi!+(r54KALP!mBcn
zh(4=>gnu%QTwwX=!U$@*oW^}Lt|G=2!oxfW#+$-Z;1`QqDHEF*xZx`ZZ+s(kN=eRH
z(`qs}&mqEyRs)G&o6=P=uFPY1t4)bNnP=z|(UjmFj9^9P^pyJbtr|Cz5#NVBCe%lt
z)hSE;l~yBM`i!&S2DpA$Avac4NSpcrMDLG$HllKj|7o*PS)S|Z*zeUCRFuF_vCcB(
zmdE#{Vx}7N&Z~`6SY2~xzi&17WV3>P?NSLd0r*ag%g5D6Y6Esc#JJ*Qct>}$`<1K<
za^CZ84wQTdiIkH74>IxL*e0j&Hrs%4wCxw?tk)PV?l{_dUvm>-WEqS$I`_85T?Jc3
zpt|8Kyb?)YqvZ=sS*+GiNZj$Z27$pd49^Ut=djq^d^U5aS$>}xYkLMw(t>1pV{5?o
z8U6v-OCHioD^iN;WYuHulY{m3T3^A^7o6B@>Yyj1CJc*}J&!jre@n73N~5MBm0$Os
zlDdhKiE7L6riR`^ei2ZTy)YQr;Y*7*i95_BT1CNxxa|$YTmlQXB(m7He#xV@6KZZ-
z@10d_50>GfSWT0G<~;T+O=WqB7O~}WVz2NUHeALs)U#0BY`Zy~i++s~)9t~9abn5c
zrYcKb42{|m-1|`wBS&uD_P*KT*!kopIkFig1p?i=8AnNL5ffxTP#XP6Epj5_Q0i>R
z=gwT`8ubI`Go6#;tK1)9EosVO)brQ5`yj8TVjuC@9w+&tx?|hykE||pr&6Y+r=YVO
zZ=gHJp;ic%5CGP6FVcFbvv4Q;F;Y7MhcH&Uh}ZeGlwzXGy_>uqg{RaKQ!Nl*tfz#!
z;*#s;)4j<HPk9Tne7B`<uDmJuNn|@-t=fp^79lv=2YVZ>C=*Q1WL)>vrTURyqvem+
zC9DFYD;B49sXEY2t{=Reb{}tY%(^_^lY)#GnO>HnoAMGo#=#Rzaj9K5v5u4H6Fj@M
zBKgfji2_F<N~TV9HT`l+HH)^7w%1-i-Tu7rFE3*pX`LxM?h;N`WO)zedR;D$yV$4c
zVN?%As{^SZ5Rbm5$;9&B=l0P9yY#<E-{QW>{zY?Hgz(9bQ-RBv<*np*2MH3FWz}+y
ziZ*J&?_pJ;<Px)(;o9(IW>l>W5&u{p9?Qmf)ADf3*F6@V`ilX~ni{_6v2bsQFq~i=
zeBW7ctMngMFGQKzP^>sgY%gD>G(U?M@eKLF5V|?M(uBKB6CRk)N6R4<KK#b5?i-%s
zhGVZ(Ie9-Tx8ZoAOIRL~#}2DPV--(ot%irmL!lP0v`k!WW!9nD0ofJnvEBH`?8$*R
zM|dj}vV&qO$l1Jvsh}G*%5C*chz}|iU&wNw6Nqd<v#`A~B*O4<GB6u%So3IhOf}Y>
zY?gOY9cHI8frQ&qFWo3@gDuOJ?A6n9KVM9z6J|U@3Dft`XhS+xrF2Fm8HE@(E*|xG
zbA?(^oDxmh4nX%bSxLQl2(U=lP7P}aILp}wJ|y;dZH)*M&-3xkb=x|Zpy$~*XTQ0J
zUf6;}9N7=kACG24zL;Y(*(dzSj^3gv$LP;4kh<1>b*W?g$zGi!+s2iw^t6;1zQF!{
z^^yI<G4^L4enMBf46^8n15JE$>h4O>`j**;L6PDEyf5(9^prgwj>RtNVQW$!zXti<
z3M`!6Qi(lfjX}F`?Pd4Y)GJCgN#OCg;!B~l`?`!B5=J^mU+GKFi!o}dlM&utl}wy0
zVjF=~mpq3G1h&*lBi+*wDLtNoY(K=4am(X7hONhfp{j?wjUn;$QMw-}8#$(r6MOM(
zXxmx()1E#=->P?!SS$N5Xg}?fzV>i#Kb8ij4^7clX{6$xwcO{a2i;~^RgOx!WV4Q`
z?nN{PPHmPbLA=?XbrI#no?>XVOGf_27s57R=ec)RF#ZhT2HBA+XPd1%Dy?M)ZkNyI
z4xO21bIl%`^OzfRrs06wF(+7EV&ze%Lxgvdv@^t3TYgw_5$RIj`UhjTj!_W5g~+P9
z1tZ(bXcgZp|BI$UfVDJ_OE_-_!O1pT$LurAwz2KYZX528SX;}=m^K_^iX=31rm0-*
z$?@8DGZL>*qq|32qvg+Dck<cviDsF`G^`AAtND1qj`h7J{!-iuy&CcbxUPYu%mW>r
z;;(zxDyz+Ajob@wh~rYx2ua{a1Cdt+-e$RIMSA;Z=|?vHE3QMGNJ7)Yf;!boc5*qd
zXmve-$8I!o#eRC}sj21v)+sk<YrhE~5df#Ae*`6~e@0&dT`?p!iv&4F1LJK*YC~*G
zFnJU7xwy{QqG!$zNW8dvFoMQ2Uf-xYxc99zeV1;WaRj&BxFMk_W{3JrU*c#aUN)zN
zlDg2*&#~-`)40tc-v=|F!;(T=VkLYTW5ljoxVs1)4SQ6ds)m_M07Z8}N-48L$Z_=n
zNnA{s9ZaA5vcwqMFUcgg_3)BN9wAu^<G<S*8L8FHCRA;2e=84X^%?=riZG0eRzuar
z-sr%wMcDb2@Tw@qPA+Ui6P6y;y-kLUf=Jy23(>}oE{k8o)_@}Kqo0-uWyOj71@`du
z?H8EWfE+pEQfdza4y#|OiFA);(MzEc-NuHl>tehOOPYC^pV<>QyQX^zkCDj;E(l|v
zvNl-qQUs?f3onDYL{=h<y_@dk?)W-?N#ov4Mgo&k$;4dBSBcwGvM%M0<~XSH>T*Es
zI!W8lOY7WS)aPqJP+4#bI|V)0V#(e%xk=VP^yVgw0{}CQOhyyKX*Mrz3DZ|R(^6$W
z%xqWgpT%>{Ir}WC4%8^H6#x1eR{djBRZ+5#1;`zYI~V63PV5w(8Yw184s(DBPTAmX
zjrRD$O_vNY*^iQy96pjo_*VIh?NZV?h9UKBy^p^Zkv=QS=bnJvt|*Mu_f4m9R^Nve
zTK-@WXT$0g5ZZd7Fw=0&BB`?I(|w*UBqux<Z>VeSjJO<mV;s@tjb`nsS2SwnNxu;#
zQSp^-oYkAtBx3U2I{X?2gqp7_vcEYv=m-!oL(P@{6b+E2RIZ>1U%?inAfJ`H(POe@
z`;#}ONz(7!S;slS<JeR7IKQn8B<^@Y<@>wV;o04n`j3sGH+mN?eb0$}mt`r&6Wzua
zyM>HXliO1`mwtIf4%5^Ao?3n#`6VnT?o}lax*kJw?oE6yE77<om*}h?OwKM!{aH2}
z38O(ki{YytS%SWCv+Fb4{k>X*p5Ty{ah}kjmC8g=UZbX^TCX-2gi0=nC3347WP2%_
zTx4!o=j^vvtXJ?#{af(3IB%>LX-P#nu>y#x=1dA7wx_&gr@I>G5YR;p@1))FufRRF
zA-x&Uw`TZHP@mD+$UQGXV!5HRwALA>+e$XKob!}Y&Pb<xij;5+#ZzM6cUxaq?{Hwr
zV{C@9>`0v3?GEwes^i={CBbK|ga}hf(4;`Thr5PPjB4D;NI+hTwM_ggrg|-|MM%eP
zFD-ZkoC<qIv;yS|*5|?cm9;E1-QrpsAN_KB(?}$kGc)&tSJB$E=n~tGgAnw)xh5R9
zAF1xd_qrwMu*_n#OVIs|>7Ln@sEukorHDP@TJGdtMs*&evKtuUs|K;61Z9EQT^V0d
z(HbL~<ygn#Qd={LzYUaV%YI-O#fU#IG)7d7AE3wG^3B$^WulriC6(gp?3_leC{Jz<
zl+;a2{hb(&QsFP0iFVDM!XK;$|Dv|%+rEsmwN<IMKWHH)N0iyxPJEBrenf5Ua&)&j
z&QXpFZ2JzkIZ{}!q(*nlu|=&-cJHYiKeKiGV}a?>;l%e!b?unrVVh&?XmZ?W>-dAs
zaUmb6S1a1Js_ItCe@v<WpcR-L@l%_6qEbKHA$6G45vBf(ZO!>Mb?bIg-`XK{KT=Op
z>g#Ok{x<a~N*yNkwA9J}#$e};D~_m=-3KVo7TfywlBU0Z;3IW(hZ>fXdiN+&|JBy8
z!lrIk4K3yE`?`?S&nmTasPuJ_O+7<nxx9U9CpH=SC&w?8V~EZ1J)2{v%1@Bvi898!
zWSu|$qB}+^+uW`=vEyt3-&O%v*aD8X1<X^G6FOG8oyAU-{gq>bosgD0%mA$CBh|NK
zjvAYz4>Y&zHbY<|p0GJaE5|$Mv>OB`cDv2-R4H|=u){Xb=6J&;$KN~VxX9-CnQ~li
zr)84Ou`NN4x#aM#&`9`8R=dZr-?tlwUN-*(<-gc$A|ra+{NGdl@#M!C&%IiVEPn(y
zBZo5{J(TlK+tw{);fx<nk+Vz3wmxKYygrf~pV=G_+Z;Vq*T(T3#^Xkt<4?*FwzG7T
z&9UQW<hY+4I>#7%gW~DBGuS9?JR*>hyA?@R^7lFXkG2!X7I=TiwZ2TnH*(RrC^_-z
z>iwlR^$9q?TSrJGwrb9ZoyL^TerL>(**nWd?yMZFP2xubi)A%cS%}Yg1|yYY93N+d
zt+N($uCg`^_V|k$xT-mn?EdQa1l5|1q0gkIs}g-v@7_pvk<dMRhd2<ENll^BNzKGO
zZme1uSV55mZEc4Xa9CcZ?*#>|vjYQO40Qc4(3KPN_WpC&{~U9_UfUH7;}7ViiNQB5
z^}`?JLc)#z8R`)}$e=&&K=91f-*v=?TuX|qy}}oKTl7DMADIHh9uPkg`FL&yJaR4F
zcJ2s3a9<TXVsb{$7O6%)p5sJ+O?B<8@Ij8urTiS^NShQV^(*J_^z)D-vb;+pN6e`$
zgKBAq9N7)!jdP09$dTO^IiliQzT=($EPmwLUuN(l>b?b!L_VJVImnT}K~xY1Wwo)@
zere=LH<$*tm9c*(yN4X9<EufA2${j+$VHAQthN9U?T{m@QM7sYA9f9>r;`p>PYr$~
zr>9y}IrouY3P17<;YWau`1h)9zN!gk4o#@OVSCKO>H+~rA|K2)8e;B6)qoA%i}<{x
zxQR~>1d+y#{2p#(_4^0IjTEA$3C`i(ty;EL202nq<p)EKoJED*e@I2(C+KZ^;K;Gs
zGjf3=>HA%^bEs)&kM5`O*|O4(;{ov_=h5oV#gCjnL#ot#{D@=~F6(~FhsBR5^le5T
zk>*);o;coBj!=^pchk`I=>Bs)-P53{bbHhIk)tTi{Rnx@qgy4uio}ACd;(3S(|hHs
z%nDw2qz88t&6$=`YzLVB?<g_P{_Fo*{K(g?f_@T*|2N}Dy8fSrANl06e+ECYTDiUu
zKhk)mhV);GAL)8P{K$}Ph<P4<Wc^$t2p!5ts;!iL9yv*`7g#CqZ}xS|99}o``XKlb
zso&5oq$HxH@gvRr$dzC$eq<+4SzGP#BXXaC(M;-3L4zMLKV!8V)^r)^MEeX9tB$Gs
zG=8KDt5yYlHT=j1uloOO_z~0JG=4<gLcRX^_z@+_;zzvv`S_8yIe`8X_>naOMPLR$
zVk$WZeng|}L`P8vJHwa7k0{dt@gqyA)Zj-R;Y-cQ^u8T_WYa|l#gB-D(5e{xh@q_m
z;z#;Z@c&u(5pU8u;zypw+E7rB$N7}TLxxV~q6=LKeHCpW&;OJ7kqH#q5kDe|XLTMN
zKhi`3iyu)F{yXs_!4p0DTWwZy8b4xa@n4A_xkv<Y5d4VPMlOCNO=7Z}H~5i%=REN*
z#*b)()A$i@on-JMy9XG~re>wjP6ZkK$U}PhPvA#PY2Zh++S2%upC3b6k$o>acl`ZW
ztw_KlKf#X0U~5+N<6Y7}m@B8j&b&wYWpN{&_54fVMvfl)D{69XzfyH1m-nYL$vJvt
zHTjxgG}d1MH*z02EN<k~i?X<p8lGlwBR5;zh|12fV=&X1G_gR~JT%z&L&=fH(e>8q
zVIqqkQQXBWeq{8dG=8Lkbm_|liyxUtkEW$IecPyq^%`}rN;CM8tNsP}5lb9d{K&O3
zZRh?ZHW5O|;788kM@@e-x&q>H5Aiwp5j8UhKXSH@60ySIsfQmiw1P#N(!pxA4s!4#
z;vQ-Ih=knJ`fwBRW$+`K7sJld_z{mMer5cK3hMDi_z{zc5&0tgh#lbA*SazaHRf(C
zjUS1NBPYwodf<^Pz5%_nh9(2SL35l#PkH!}qZr(O34TPQZtx?M*n~CgE*=B0=+w!p
zy*+Px{D?P^2gi@>3uTR(&nEP>Y*bzwm&K2$zBu*e;73+j{74Rs2tQ(5>ETC!kMsa{
z>|TN8D@~kl)}Grh2RCAdF*~k#xDoR%iyL{I{+k<Hu1-Za){MKxe2ZztaY3&vsj=5e
z5of+*=cqR<Nu^8UM!v%eGPn_WmN&SO(|BTVBVW_v>WCY8?fCzP8~Go@jflc5Zp6@9
z7B@0Ow`#HjNyNmkBFoK+cVcfrZU|EC@FL^$7fH@~CGEceKN8B~M~;DSJi+qF#gC|k
z;79suPZvh?OXEjQX8$}Wenct>DSXrTktW9Ke-b~U?zO{@%tfF$2!3Q5uk!IDVjl<#
zD#qT`eMS6;7(+Y!h({Fd@go{3CcXoH#3W}_4}c%BT*t$Y=tpY(zrkvNH}Jh67eAtx
zPSoiQ1z^I&j~x8Sf^)O1cFhdSYG;hf!;dJ(!SEv&kev&rUyw63+GNY(M=bLNKe7oq
zNG$vHeT7;4NXoRsZ1exO;YT!{93(3ND%eAjaG{@rAJHUA&`9G)l>cD(k)!{&;YTz*
zdH4}c(T;9xkRE=-&L5^R^JqISyC2$GXy&mqpYD;cwJ*SrylU_xO{^aNS^UT>gCFsq
z%mF(OJYsg&i~!?~Vk=aQi}u<Y@8Hw@Py4WV9zTQ~`MEA4Yc|{BEp}urQzGohVlA2F
z$T|h?d@i<)o;eRUvX>CQ-eSO})YP5?e=Xd|aUnQF!aVbYXN1li+=${EW^p5SIT_j1
z;6{FJaU+^?gBv-<;6`frDWe<ON}CLBWW1K6!HtL<WVfl0WKwCczii?cM#q*<znZ!!
z2REV=vJo)ZqR&p}XBs#1R1s~<#f?11gA8s&g<0H)kPsF(G7Q3G$FhYP?U==l*hc-@
zlpgeOBM+%f;6_wq9&SWUPhAz%xEYT(Y21iTS?X^FH=<a?Ik=In7B|vYxDm5KSzenl
zP^Z`oZbS_dZX|4~xz~)3tt}5X@+}WHVn*{IxDoO5Kn`vse=9x!enf@k;zvp<a_}P>
z4Rz8g0<j?K>nuDs2S1{g3O}O3VA@1$vKGNAYs|AuLqXbLE57_uUO|+m=^gMRHF_Dh
z0^}FrM+`k<e@qsOA5oF1nU`Dqh#F$>Bc>t%OD37YkL>&=?U7CX4E90~KVnJaj%Sq(
z|2QNTenh`K{D?=tw)IPDNkAvm+_v72o@4MMCPjTrc{EbS&huHmu*^i0?eQa)=*_l!
z0Q`t)kHL>TWU7jqmN7J{<tySx)S|D3AF;KY^^(PpY|7wAjHvJh_z`t4(t5J9P_d&U
zwYYR@haXWP20x-68S6#iNAxrYKcdO|3iuH*^E~{B$~O3s`}k6RVEl+$DuS*Qenj;f
zF*3b8MK>9fI2D(AtOB;1Jb#eIkDP4rBTA-Dbd9NmG=4<i(}tR6=JN3)rtA!U<WkD@
z7Dg67Qm%)h)#DJn1K>wAnFc>{xE_Gors6NsyBrWdqHd@0BVx9q*))D6VeuoXOWfPy
zN7P!d9;z_Sx($9rncJ3VXgpS)#*e55;YXB!MWFoc@grg@lqq`4;798G20x-1%iu?B
z-S<AEO5zXP&BvF=kL((6@FO)U&)`RDRZ0dwqE=>i$2|Oqnk59L#gDk<W-T`;x79a+
z`B13`#gEwh!jI@%E`G%P&frHDQgXU1Te7z`8~ljrbYk&+re4!`@FN-!gC9{zPe>tV
z@grt-;%2PVc5u^De;H>Ca+TDZhcte~%<$*qN2)2?St$Fh$bOjqH&DwO{Kyp8x`!XJ
zi&pp%Q9<1o;75+aCl~wi6FNtsGf;~ye&mwzqIHWOQIWg{KVsH&4t_*cw8M`mu}z4H
zvT^P0t>gpXM-H?25zYF6@gq+i2tQ&L%W=j?(e%;7kEks<_>p>sByC^+)$t=52=1Gj
z8Q?U2M6~w#_z^RK2@^rj;z$0Ip*8rCyZLfp{77FXjUUm#Ww~8Gn_F9!W^=-ih|PJ-
zjXBeB!0j0AJp72J3Jzvifx(Z6X8&3I$jQQwux+%%kEqE9-Zt{^BT8oQBWmhF@gqv*
zbtj)qpJ-kf^)>jBoB0KF%Z{}P!^e`=beSPvuom&t<HTwFh?Zx;YQyr8f7AGpCS{4&
zX7M9hk=70)So%@btp+<XTbf~m9Z?PF&)Q>0K44i?8wP+BT)td|g4yt!O9q*)<-<ly
z7d;(_l^)u`Mk>^XMeXn+w(9?_co7Ym@FI`$Y49Q<BcJ=GerE6@n+#q=N%HX`X1onv
zMDty3NU*@*MU)oCWQM`uMfw`Nh<;<muGIN6|GLuKZI$DSCg`i+MO5s;7St_c+b<}u
z0XcHR71Wo57dbVJ7x^%Q7x~s3ums^jvp1E(i;UuNd%Ot3*99<>$Vyhx=io&)U>K8c
zo|8ywB?~WdB*#D<Q9nxABkC^m30}m9A)&>K{Ft4=yKBncGP#RAyvV&4FQRdTGiaL3
zW|fB*=~0^5p4_DwyvS*?p{v=-fb!4cMW&dlijomlfbb%B8oWq9o*KN!Tyo^#MMT5)
zxbnq#k@wFscoD5|$}SLIM52klyGMf;k=DRR-`%c^bN*m~7tv_R?RB&}W@{R*74O>N
zTE?fvi;Pdj>kLw)D@g#32qY4i(yFOX{PI)7S-?-1ewK$9v5%VrT?Jt@6dW;kdZ=YC
z*XUR>9k!mM-2w0-AVN&R!i`wK$g6gf3|PR3r}FdgB7YQK<kV)!Pk51wU_u5j@+x1<
zX)ijQhIbH<bMYctuUzYC*i*?-<kzl|xL2JJFp9_Y)}4jen#PMrFwDh^=yxt&q^HG;
zSmH5)LRzLt<3&VJUZbX^8qPEqf=X`iBGc7ktEZ+^E>-t)sd_mN4N~N<;<E-RqC%Y5
z$8hl)t|C07$OZ@;Wkv(<PUfLsw$+B{qENQT;hndwg64fp$=U-&#8%u3ciMzYyoAq?
z5S++*FcHFu^w`R0A~uMm!?HX`v+VY!(p;UJ`-laJn1K+Ty(imhKq7DPDUis`uVosm
zwc%fZ2EsJ<)eJ~P<KIId5%t#HbO4Zu8eOaEhtk44kjU)Ub2R<MD5PXEk*lmdodg1j
zl=IF5i8QGixoHk0&5<Y#5-}POyAfH&>t0879uM}C+5@u%iHNE^kjPs`{yGpy<n=?b
z_Vz#`@yW)J>W^rNQcLmwk_L%r00IXFi7XuMfkYMvBr?l_M3$-T`S$A`NMyQd^FSiU
z+S)#Sg4zPq)-Hz!5;<ErJdlX{UDLi*Pm-fg#~dC=q?>YhAd$yy4!4FJZ=sQFSBDHQ
zu@>9hl^h;OBxZA*&PVF6?Q<BA$e)zj1BqO0Q=h8T(GIBv5}BpczY)txjwrFIUsh|r
z(;;;~QcqOs>ul<eFE_m{R_Z~do|fu##(_X0$0?5o5~;U&Vtl0j>xg#!trAG&gD#}@
zKqB|p)K990)g4j`BvPx?9!TVeHg#C@b$9#J8IZ^V<?uivr8dWNDt{_DazG;IN;jKN
zBFC|Ss4}bqJdjB1Wo8JjRFx-ntkMIC9IG52NMyCm@dzKO-96h4fD@|`B`3S@qQEpr
z<d-%_ALXd)n8O2!Jbnmuh><akSK1s;Jx-2=9dle{>xe0b2ND@-b1c7<9FxhB1&NF}
zC`hD2`8|-xPBH@ZC{_OB$uE$|tzu;PBj|xd4pUAKB(l`z9JG|2Z}#Xg9v(<!Q)hB~
zW_uU4Ia)3u$73CHcp#Anl_M<aJvrjrHpg1!m`#p$_TvWcVDKVy|GV%a+Enh@T6kc*
zNY(e#Sdl2pofcdBcXQYUEo$*151y8f7kOL&qxyO_^|q_x{qn#fcb?SNHm-neqINd^
z7i(L7HZ66{5D*|~dur3)9Q?<x5hOn!|M3%2d;#hs<INI(H2=c*A@Nrf&)P(0Qt;T%
zj~}v%{r`aY58{Wg`(+>?E1%}a9g`uauL=P%Iiu&9oZ+VwghJ&;|3Jk#ND#q46hnk}
zgk)$a*_7HhUemf#sX>7>So`|$Q;Hw5LGeT0^Y3{k6F=mwgU1i)yJhg{AF|YJ6cI0a
zNK?aW1fpG~!douURe*^fa{ZMV{D;^5O#F~>()uXo54AG_CVt3!{>WQ4e#pI+1R<;g
zqChs}#t+%iF@DHY$`uL(+qZit$pjKvq$2ZCAYq0KG{eyH`1aiRAv?<p3bqWMuuFY3
zQA9jz|C~M&A6fB2)D8n=KuJR@6eA<TX~#qhaZG$s5AiW$2yx8Ed2{7YK4zw@V)v%h
zmciS078Sf+_ga(teL9<29|ws8(vUjCkN$-?AmfDQXiyxGGDb3XIGOWXYdoIC==7Gs
zzom*TgYQvAYuXKgG3aIpGLb+${gM}#<eT)y-1}`x#b4ht_{?-${|5WE_kkAC;><md
z1{|=DZWU=4Z5ezhdEFaHW%8wQAq?B(T8-Ozh(p21enj0p%!S|i<ukbmkx32y0nen)
zqN_|Ql-mFW6I~?yloMS*7ri62q6->hFZXZhc6S()%E4O(e}9L@;~M_HzQ%2#c~cjq
z@gR_8f!jh`ym8nvcs$8k)@>O)iqHJga_GSwPlc~Ff&Vz=|7Y<-zV;1<_rDqcG4?W;
znX~XZR&6GN$c2VdWF`GS5<ldVLH`u~L%F^f|1nfU`Y*(P%-OF2%!hzX5<^IKKkd;h
z1mxL?MnF1*kJKlJuyrT9ch~C$j5`v_@9pc<1-yQZ*LnCQ?bjB=WaEh_m<X|sV4vLv
z;;#On-!B1{EVT__5wv8@Ygpv*7fjfZCcd|WjmVSsNUr)ri7QO35mKO8N>v|aV~y~W
z12wAAM!q@G<4+PpkC`$PldhH<0-m#efr<pOoHWNMEaz(|{vwA=KR!>1=oGK-5P#%(
zuPEV1Qj8CDSTs-;{a4Uw6ZK(;$02eG&G{<-PUIQh%LE|l%tk{1h@O=xfAV4*fMm1^
zt!^9YM0YVnisTqu#H|><8>ku8I@poP(?i6LV;@uK5u5Gy`^kns1=66(7lPa5Y?6ti
zjXJW+nR^IUuQ{j@Kb7N5^@P0n^x9X{OMU7`3I!n9j(5~BlQ4hh*F>Qeia(;7z>m}%
zApVF(-idyjONku($f<~FHvWi0jHJD)XXB436Z_Q!URp=dblR9ce{iCGGXHJ9;6g*`
z_*YYbH44_xE>W9u<Uit(#7{JMk{ZP$S;no4;*pFM3ZDCQGD9i`PofI3b>2jPhrFZx
zDEinAO@iElgWFq(Lvns6_fYK%8Ho~o#Vm*=9goD!hKWb=YL1>_-u2|k#3RY3cgLzM
zv+qF@y?UnOk?fGHU})fd4hd!^??7bMWNY?KB$9F19cqrwlHIbi0!Mq#rI93QN})^-
zNpftC{E$n3M{?&>Hgfopl_?W|<Yj;XWhMZL;*Pmz^R_-Fiie(ZMxb5%5v@8e{s`X;
ze&lS$A2~}$8MRl<%N>o!yzb>iADM;E8N6vTlIkYWesiLaEHlJ6bATm2JUUU20gu#p
zgjm_v1RqIKaJ%!9i9gc#<>HU543>NtmK*PcNI>|Jl}>Cp98}duPvr~u&*CKpKayfG
z=8#kdKe9}O&I%vMpPvr&we)PazE<Ji?TmChk`oR1Cx<_b>{VDr+%OaRsuwZiP5cp!
zu)MPRR^gFKeRpC@W#A;+(jEOxGt{h(_>uedQuvXz`SC~Ae^LAql?Hyqt}z>bWR$QS
zbM`%qO3=BZFO*^+BqK3pvBSgc;Jf%@R%KwU{yOve@~C<=oa}nM-Fz7siGS?4GBVzN
zpV$_zpw<dTqDPkd74Xm7EDV}t9j*$xov2Ip#?J{xvYtRB#3NZxFcNxY)0!wG_wh4>
zCi$90lW26UX`39_U=XB%z}+P3On!-dU`ddB9u2aARSer<eUPzUf{CuW;twQ?Kcr>G
zfFW5!wtOH-6Jt3owWz=J#^yDp8W71$im33t&+gN=BDSOIKhH^)4=ylqNWLa(uDZ7g
zL{c|YuWoO7Q`|KZgycwQKVV{HSPF?Q#q{2A(vfx(aAE`dLBU)D8h?gI@gs+uYR~>c
zEQuM7v>oBgt^{#Bpqr<*8|jcF8nrC9wU83_@P8mbmnW8sqnO@S)5J|5Y-)CI;fv*i
z!9<n##kaEING7w7WOqOR(+EkHCC=joTrc0g41RnoTx69`{8RBry#4WoR;CU<<S~qn
zc#;Bk2*o35WjnFeF(L)-V)7Zg^JMqBV?ATuQ2ZsVyTxUZjz0M&V$p97w>G`^NP|rr
zCSC=TmlA#B7DeBPqI=#{eCCUV?f6CCgki3mYBx2<YB#TWZIgQg`RzF5&Fxt-xyhN^
z*kg1(Q1erkBL8L^$KJh<hxn4!5v{)r$ihxA)5N;5w49kebld7z7QeF9iT;Iz2g9!n
zLH-JtZcWEOxdkqV7kiPmclhC4>79q2Xr+1kfSqU#+b#UwGFZ4`&U^fQeN9^5(=q;u
z78!fA6TOO|XM=XX%V%c)ns1oDTLi(FeG@V>^q1+f2h;%+rFbOfT^3i;kKuAh^CuMl
z(9B}&QPoBe5<ZwyB~Q6$Nz-Q^5sSnmAPC87C;C1U85nIUbfS+)30vCa%$0FvfKXMD
zrTT(%ig;6?WK%W}$w@4Be}_mUenOG>v$06{*<!;l<1M_OjYbl5e*FKUk(g*C1UGRu
z)GPK#KoLoFH}h2^l8CG<vcwRWkR`~pkQq(`bL2Vbsg;yzQ9AaFh|pPaWH51CHXO-0
z?Szb+{hPEG8vcV%$35l5E@>B^g!ku|_Z{PtOp~l<;*%V8Ocq~q7St233r%U-yU7bq
zLh~TiE^LlQ0JwsM8CU^L>)&jGlY|ZuoFqa??ZGA6@thGtv|Kh$JOZ}qflD5c$N{+I
z_zrPN3|{mIvdBTPvx1;h>9{1AqrrWT^%IyxC1nGXR7@w>iVaK>PF`jLlROmtyuc*d
z_p^aX_S42CY|la8mX_`+IaEqOtKabi;iB?`bT|?*8-xapi@nuLP2A3EKcQndlD!;j
zLW${R{_3+$JQA!~_PF<P$%i~0d)@{jp|BnV!5|z*sPs7}w!lOcS*}r`)4fJ#0+FnP
zV`sOE94Ytq%as>H#rW%Xzfj&(@(g%OWVs<mC%RL_HQGD2{(CQG0N0kPf(RrVct=Lg
z;=$gTeJ8!?+*Zb>Q_^Kydb5F!V_rNG<rkjh3~fN<K1{jU)8I^7*{;r2&K-wjaw1N2
z!2sVW-$YmvyB}#$tY&mK6({O3BY4e*Br$>~CX<Gv5}AZ**kXxHg0yNQle|e}l2t|R
zmWGK>(pEV!m<TI8$xgzP+(3Ae$;xzq@FY1a>A+vVbo`Pju;;LElZ{`py<Pm0qY<-A
z{F2G683s!6OK#~DjBhe$t>wtH**O*TM8|OfBHTam$Lu@yz0Tv3SP=EkwxWm;J4U7B
zmCR&qa>PD5dtOw0l0Mn^B;_NEj<oSfzHLfomNpv_cUJtw*Ya2Fqmt!E`T{;2iLX+8
zlKpNIbXuNRB5L3CfiabM0!l%K`YRuad-Yt=-*j8EW$=p4+Hq_6i$e3~Bmh(LI5s@N
z#H4IUlKGM@jH}cYh&+LsWu91JT%~T;IU_ko2Z8ot1vPXOE8P3($CkmpsnX>(i?65X
z>rISvpl0U|@u)V7Cb<N#N>)A*u4HT(0@qxFD3KhE?S!#{O%^|Rl);mT^x%AEN49tp
zf_^O)C8nN5#zpYbt6<_=HVBD?h}b8b+TiI*B;#4VCnSj{4H-;H(qc-Q^@;;u^j&yc
zV#$5{L~~RCH&H+3;`3LKg{+cgo~5_(t<<Ph?f;Iv*^^R!?D?HK8O9@62V%s%dY%@(
z6o-V9g#UXs4#~g4@bmB_m+?T}-KQ*(1Sy+mJ}jnW5fY!pl*~tqla_icyReuN+ePAz
z7}E<Ii$tw6@kw}=hbd79Qa!MQ1yiDoX-tWZT<UKIQ!*0;iWO+X@pr-{t7V)O;wXYI
z7P3WJ%PLRzKV3!+kM(*tO{P$P3I1k36RczpbM4iHzjxx0_)K<%B01lKl$aqs2&Ba9
zbsnVTLxm#AuBQXwNmLTYt&bQn6OUxm5jl7gjSkPjlc?Kvn=f+~I#9mFjZ85F6;5(=
zH*rZceOW9Cj-f?kiu=TeaRnS-ez(4Y{nJMWWXXMcO2|t-a^M!Rof<NH_M5Crn)t9-
z5*3m<xx|Y_LgfZaVv5GKtVw3DB=>8#5T~A_ozcc3spU23XZ~V>^{l4S#3JD{w%)`d
zvE;DWws(n|M6=bvw%%9uG*}X)uv05Q6*)ClT1OlBtSRFUaFWWtSp2=ZLcioDx@2Qu
z%1YupkX120$mDf2P-2#Ytb(J)#LAP^1uwxVF$ozM)%YcGC31jFh?b9((}}F$S2iw*
z%q_L`=;Z8=KkHtF5tM%CuYGSJx{G*g&solbWpo3O0L=);KZ|@^=0u-V$E+k_j4ljK
zBheF@I{s<u6h<BhMtoCw@|-qnovc1%W0r#-(S&^k{D`=AD87rhrGy^=H{wa50qm;@
zLBdN9LNZH6m?8Z7XU;<rvyjTXfp_nbYRv>=3nd>>v)pOSZZ>d;ipl^#t`JkVbejc!
zoTrB(teM&t6gY%Z4DbUdtI&%%e|@2f#62BWPZ%u`BZFlEh-?XY0YrG_PGghF;jd``
z$QdwSgZ!}CAMsc`L7PIX0Ae{VpdOFcW_WMvui|m|+$Zt(K^qu;4E&0p!~&AJ_$AH)
z1?cwFIgFUzrO_W_S2+g#p|uf?Z^vm!Abzh#J`~6KywUu?kF{1X6`s$BhXbi6j>xWX
zY@-)PB>huyM9w9S$ZiZz+#Uu8@~BE4Mu;1;LM;viNAvfp!F*`(wvQvC2BvW!J5q13
z|Ijfdl#>HKz;3A2JRHbI#SuwWD2~V@HotHn`bONiOdJvO+rxqENX?_<bXm4!ub!6s
zi9QIkGyP5&#-UIm6vobGMrZURP5d&55Pf+<nypa$1L65tMSL|Y%cHVsse8K{lUpSf
zB7_gYrc6W;$m{?SMasR9B9;n>DpIB!!9OF=W_b6vP%eZ^HxR?mD1;1`<ow=D;pt`=
zvrTVFPfPX9HbVI#(+xDk@Tx#^k<nnz*>6>tlQP>M8{dKlwe^Y{o`C#V<EMYa_MB?Q
z*8L%iGDJiXdXZSH<(z{E(ZkfL*P!~JV_2GrC^AAqD9BV29~cqxjx@}fh$3sfh$19+
zuSEz%lI&9+e^oI=)>n0N*U@=nkDHDkQiPGRRM34g@k99P#Sih6Vn3ug>631BA;SoZ
zYx!foO3yt_D^*NV|Efb?7?D5F0!YCyal(j5<^XO$+&4NEEPdXIyvY|7M4Do-6egMo
z>o6GKfS#!G7PNqR<Bzn#Zy%)K4*a&fWS_@ypU?r9c+>HH70Gk+IWB{2M;rZX(3l$&
zQY5|!KB^!hRFDe&gW)=cp$JAk$ixnzAvSi%hGk`{Tk)sj_iCDeZrp82Em*QT-EJC9
z4mTi9n#)^Ts<AIt*CFLr^Rd{D$CADjWicB4CDKI%FlZ$-1ubGp><dI1+q_#0g|;vX
zCAdo?uY;w#o!Cn>il`<b-|J4~da<ndPJ#-Xp)A3HImis%2J~cMBVZ8(gWHLDB=d|M
z?EVdzE(q~3Evm#@iEg3#g;p?vrFWNL&<YRn2GzQTAkY;+)vEOBid|~U5S8Y2J~Q+t
z6o@Rn7uSX4O(iq*>ozm=zhzvs4-=i&#0A08F@f{w1Q?HPqSs73kiTmtwDD}@3uu)f
zwnvfez982ZM>C_f;rR2R_*%wf=5s=lfK*XHkhh1`hP%Fi<{EQ&GeAd!=Cq^2I^Bg-
zpxcSq*EEWeM>N7^w1AyQJ*FbSG8z@1oerP-Q*x+%-dVw#jj(;WvO9>>mchQ26L-y)
zskW@9skFz?$WHfaQrV+n8D)Fb@Jtz6eu+*<3t*TsxMO+BK~9Y}Qbw)-4dqjjI2aNK
z@Tk-hRufELPs-!FuyB{W!PIJ6G_(dJrP*_@l30WW(ldCe(>g_i5xs#8nY+E|PIRS&
zh%5P-J;QQ#b^mCQ9L$dCVJ4)`Vhx&ECnYQG(r|~+bPK`|#+rtU>}_cpQtyt&y_jXE
zo?gL;Gv7kSo?jIg;)m#BwhZq4yw0gT_{%w!K&hC;cZVGrbj4Mypd56ChQJE%UyQC;
z*x8^f)H=1xMB{)S_1!((9Q(|YNZ-wv&5L`#X{kM(KW=mPGIaJ_yqrc7LWCjXpM`{+
zK&!IXC*snDWt931UC!?+`>NRvbZ`=sVawos;I_65E_}{(b~d9PCcbXuYrL~NqTFpg
zz^^<W8P_?sy-b?rk&D@x40i<eN^dKMtrzCu67E|z71u36i*pq9q~Q+|je^Nric&)9
zAkmp4YEHO}@31Y{)szg>=7k%HX&EI5H$n+Ql2C~v3bzk8!drQ0?#eo}ECr=F;YN5|
zKomv|rWGTHtzXm;KeEBD39qwW#1Ru^g#4D<6Ltjk5fMi~l$f9+Qw1U!-Yg=lfj%_B
z{wLp8W9tobmHNUxlx}Sq{Kqw@BNibh+rcKZErBr&ax~eiFdKL*RN@7Cd8$~;Dzbl^
z6CF%}PmH5%PrC4gn-ZAb=G2i|36^UX*hpmRF8^$k15<Xh6pY!d*R#}Puh8h(TeX09
zavNhk6_{`zbir-rhyojMA0xq*!LKyX>Uvr|Y>)d0Dn}FOg9`Ekeel5j1?%4~McrR%
z^<gBPJ1kRW3So!EknC=7CCrDopkcq4vqFUNxR6iehoXUQ1ENcS!;U8^2+W~X=$>z6
zo{ho!)mV3m<|tMSNx$4fXr+NbWJEwCk!6t(Y1zz#%ZL?XobQdEvv3W4aG&508pE?Q
zS9o==XQh=`C)7;s><Vt5P6DAp&g5M?qmF5!g=F{hH(}P~;Wb`5)mS}!EbsiC-`tzV
zkBENUdX74Fx5GxsJ4pcx(V9BSsC8fVjL?lZK+n^st#_njTkoF9Otovl+oGFf_vf2v
zfrn@a+ZOod(}L)>y^LV3J4O;>zCp?#ZO%KD)59JdX>*QK&I#nq%TaY3^@QkF+DQNH
zQ%p~9;3IWhhtwC4`b?GWnae+JQy;3-AH31N>;a_iqSV(JhBP8>Q{Q_#scT6sTgSV7
z2SQq`f0bOGN&kg5*Y*-}{j5VBLR#Ff)E;)?B%8XYdi&iDsfDz-QK^T(lF@MQrBF^?
zznDkr)7z)cAT7$3!^6@%YjZrNK77*LuE$R7RLGe+j!+H{81M_5!%>d49dqo1bji`Y
zksKbh;s-XzxA{oj-7!bK&GBdD@bEfAY>p$<>!}@cEVem*svI7k=F>r@=Uezl4eyv^
zip?=WIXv*eb2dj<IXZRBG0f)Zs~jGD;~tyi(-=7#w{{q-HW7ZZ`#Z0Y!$Z|fvpI&S
zj^A|5@q*3qcjdUk&fo}}<6({Nbscm3hs`lpIXu`!q0LcwGC4+d%yEs)F;O`@Y|}cD
zLM7d!<oI9gy?cCA)z$c&fkXxbPtc%vtI<MB>ZM7Qr$n%1Fp)Dj1GIuzD;A3qd$AzQ
z2(?0jlaU;c2WS;bFSgWbi*2dcM<}3R!X*i)7*GL4B;f5F<0almxaR$?z0X_%+NbaP
z{NB&!{p02HAv1H%zO23W+H0-7_F8KPPpt7xUE@nq!;fwHgRb!%>0`(1?Y{je6QA+%
z{}`WPX1g{1=l6NMl6QF77er@p4T~@bdt%4t4ceaND<A9%OX|>)op@8k>C@wIFBI^J
z%klkRCHHxpA>mV^1#2&Mb)Uy7?(@L+f8z4^f>-kHr9(N%=6brhC=Q*&ch7FND_$B%
zXLZ*2=AKPf#Y;V#jhdTyxBIqc@B4hp%K!b*Ls@63qW24aqWFZ_r$_9wuy1VT+O%<7
z_;c3_ZQK^p{z{^yd(1Ec^@)ydcby(PGrY}h9m5}jk)sxe=;7SfOXS%N>1VAYqJ23I
znGm#^`qpiT*yUTfM>n#?RZqvgz>jfT+amT2TiT+1n<7^E3;ZbG+972+{4)F~*c!3V
z*`iA1zVOB})zN>mA5rtkw&Q2#v|g4rvSr(wc{lwm)6U&#+P!yhL=t=7EUiDYF45AB
ztA#f#EUDX&F;1u2bMD&7h+{iCtY(HA|B}MSjUD1D_h@s(zN*c1s`_&+ajqvG7+_+?
zpoo2ndfmk1ZqrYV*w+H|jTF3tma6hwXLA@Fv5XDzZ$-F`)*h`JtD|)H>8DUyN=mcA
z){#-;QSi`1RT$I3wb<GBQ$%c_xk}gGMLSZ@6;P&!)HxTG!SU%4>pazrePc(&8ri}3
zZ31`18q>!2SE=YSB~)x^q0<&=V8%vO*RMz=4M1BKelnO!qgweBhb{JZZ-pjAtw!-G
z=8n(MxUlspu{MV>4$3mh9XLn`->PWhLdZnNc~zC1<;O2Di2&fL8y$&54ml;GZrSAr
zF@(N9af8XZQsQ91nD+)60VlAcjA9)pQa!qgAm5j1RUH~Ua)>2kM^_<|B~gAFzEMtj
zHxxDkqxYfoH*#NkE>J8soe^i?I-Ae#!JPYcj_7XO{apH7tY6v(`n~}joSU%WeJ<Y0
zbvS%Ci(aB{Be?`1B2H|8A^ThFZH%7b#M|KZAV9HZ<4dAeTh#i1epW?`j=2ZnlB1o1
zqXH@*E+^q)H1JZiwB1;6KsvB1R+(}$biFxupN3?MS^CoFLGn_(bzqwUWFxAdT!<aX
z?SL&t1eEAfGqI0Nc68Nf=c2w5>$c@wudy&<S1bX`OBHl)oA&Hg?hl1)+vDl<b!D$T
z7zwnxxoka5fRh-pp9jtESe|YV8ovZ@-5E3XTcc)!=wx=qa;)6J)-U^B)20m+jX?;B
z|9I6xH=>m$?~}r;z4+^(AR2g2hC6>MYzGW1#bB!rZWrj`bLU}>_YoW%QkQvkXHr=v
zbCi|aD#jRN{)@bgI5UEyoO2FGou6g;UnN+Lm0WG*en8%wAU4xr1d~k7!&C^{hS1I(
zyGd`tJQ0rKUi_m#POHShliN;R$}B-DZV%MQ)~D6_;Xd1leajNu%9%tlTf>6IcfCLW
zkXiC^=DvtW69Fu%u67CvMmcw#2F|*f&UC>UV4r5J+z#I2L&Aw;fPV%9M}PhdZIiPb
zx4l=6m&-Tc_<a1un=pR`;`=?7WdfR;KY;#A>P~c358DMBO{)M8j=BIT_TnG105*vl
zkcbp?<apz$rv0uGxMj?rrWAyNmo*%d1dfS3s&p5%AJXMyJzo=r3Yb@J)o$M>24!wd
zPHfLfywN@Ojl|(@vF}!m2zNdkClH{A*8=)SIkDH7nY;FOgxhyhw`6zNsvl+Nz8<!k
zTYoUhx$Jd$*`{A&exc#k?@FZ(dG7KY0~QymwoZ_TZSt^16|R$(){nBwU+<4~sr3f%
zHQFlJ8xH8!`!<J^of9ZWTamrNFpgt=UzFlO^{9MrJ}$W7zT4$dK95FOH|*^nQY6Fq
zd^n(+j#~BMzT0G|xI@hPz28Hm?|Ri}B)}SI{@&+uLEusRPcgr+^+M>{uyw%ae?If$
z^tl%^uNS{F0H!0%>_M<*)GXmI$8&S8EjiHH?~TuT<-i-Q+yVF#1Vc}=1e77N>fF|E
z(T}F{a5%9s0C~YyHw2@l@5H`*wH<kjg$9-HQPg^XCGC!6`_%eUxG{GCjqrA3FpHyV
zy+iQ>adwgN1c`LEKH}5=Ay=+J_NHt4#9Rl2PXa-fP|f-Z{WWChuQC3i_f0Bh1Vsiv
zY2k2GMPWXRWVp_>;!UOmII`*!Z{RmHTi|uR3;7;C&zS$XGClCxmSV5CkJEI-o{e@Q
zzh4bIckRLPp!Z&4&D?8<6;ux-zm@QNu?OUat#Nr$<aMgBjz5kBK5>hrq*cC05OZA?
zV)Qx@ZfwVyh>dbu9Nu;WHoh?G#PT5XVX`R%zJhOQh-NPV_@#2EtQB9*X+I#pCwvcn
zO94ayBEQ{Ly9<HXp3S5E(7UjbeQ?Rz*YyB-C8a-fFX05Cv0}061t6#a<KFL{p*G0T
zB~b_8FV$*vxm2&p;D>TAxF2FwO2iiv-vB5JO7&X}#s`u$d<+vSp3n0i)UUt@5VnP#
zVFi)_(uo}fc4T5flbCsMp^UdhopDEXm%=F{7NTH$t-AxK513yqxLImfEEX&9Z`HtO
zFGq;btnkgnm_ytf<Os%&FQxQivj|e*E3Y(!dj*?Z4<*=Cpme%_S8^!bj5P5>I!iYZ
zXfTpZbj2{{^n)tHcJ5w(GB>~gUlafP@k=y5_eBDSurIiSqyd5PWO!Xz1Qxu~I>|^J
z1|K4RQM^$GGenzB--+_ALC#5<r6@5*D39@0Z#}<K>qyP<XGjq54B@Vjsa$#MjiU(g
zA%7Rj5cTk6pwU2wE0@L!j6Sji$b{H8yH_Yg88t**cZLJqjKn$e1pyE9Z%qfWWW#6Q
zwLWM%6By7qzK94G6=jcr0;nx2D?4yx^`@t$-R-L^s!*6rO#s{9?4{l$>ZR6!z?~tU
zsFT~ny#%<u4SMi3LZvc&LhDT7?B(uM?2}%VyiS8EZOEvFy2tVw>K4xCovYAOhLhko
zjKtUJRo$dLg+41*L65nf#NPsUnt!BOD=J*~(6|V^^cvGXMX8v=Qtzi#qvj$0a&|oD
zdSR&x+dhw_9t~7o&`QE_4Zr5AA)l|dYQFkb?1HQ9-ft_miZ>w2gJP>~H^Ek4PO;Uj
zNZWGM711YB{PbVgoLc|x^V4_TrLb2o&O|aE;ivD<c`B`+cIBVQZ*LR@Gx$r7e}V{?
zts-1B|9nw2>lFWlcgC<HUGMYFzo_M{c%=Ij%?ZB*VS7LhI{2$sJHsv-;|%)>!$L)J
z&tzD9m8T~#PD8O<mUG~+`_ZHf-!wmmZ$bl6Zh_C@o6BKXS$xx)y(;1iE7gor^m*lI
zi5JCwc(y38u0%hJf~YBm$1qABYa5>8m>V_cf}W`Hp?fq}X^K>+V2MSSL;@{Q=Y~y?
zWd&Sl;!^yA;Qxvp{(zdQD_CK>`v~L(4`Blh{YRG=^Ao^RQl}Snm-SUpAGQh_70)Q$
zSoI;cW0XS$IV*qSV(HawkPU<#1q7hNQyn%?vD8)O5ykre%$_LxPe2hKXv`l^e^l`o
z2SbIqMi)l{pkv|^H&52DYLM1wv(ud{T`2xAk;bBnV*|s1?#A5`d4B@XUEmirObNRT
zf7E<mnx)UCNZ?~PkJf3mNwLXu=sawz*sib@FcNYnBP3KuShje9c2NbwiSlj2A6@V%
zv51k<kKvD!n<K>^iM>eAuka6<U+-+1)O-e0e1G98*Xi~Cx#+FrB<FbaE_VaURS?0+
z{Q2k=)TU`i5V}OnDDJ;t$X&77Pg>O2RP}Mc4RoJzNs7}JX06Y=Hl+9~Uo?M>=Lv6p
zQ$*>4-!c+!DSz~MAv|~{0~RU^JH1bGFV|xh5SMztQKN)kXeberAG#u^6;i~A<*)Z<
zR7w_jK3iwKIY!awFmc3^u!dT-j5(q?bl#lroAvw9a$1m0`E0|(dJ7pXYKoL@JaG%j
zLpHPf^k()si8PfxWbY2Pv*iN}6$`OGoM>rtD-OWHP8PXgt#|t?0bJ3MzLYjTZ8K(x
zYQ;_ji0jdiWrK~v1%`m5E<CqIwz82TuAl#+P4z$x#tB<l*~YrLOj+x_Qx>|1IhSai
zTj_rCuIx~hJkVB|3$#@xC}x*sVwK6q6v9+hxnj-m9tFB=%gi!#8s9P##4;m=`Crx6
zIwSldtQ*VBW!f^M8?2+Ww#-P${*>%!{Z`ai2IIjpLxnLxP*BFii9JTw5qpf3E))RL
z_LybZV=xAZU4_~dw{SEvmWe$kNHh6-7kf-T_84qR4TW^28W4L7b^Ur&(%t4~?L>Th
z{2#a1oe7IO(OxG{yV~o{1RGuLb-GN(UMD3^u-9EP-gM3~+4YGf><mncJKONX+`$ga
zSo22C^Z^m4zo|BH&ewQ`NbY7>_c5Ijhh>xddc^6~YVtH-SYl1hJf(0})z%7`AD%^v
z*863meV=6rdj-6`v|=V+*6&|URSWlZBWy4+N$!P`z7|ew%aQJ9t=7$``V%^&9)L%2
zt&#HV>9+HGLNH86g122}-{y(mgFIO0vYt)5$CSAZo!#sApEvhyZe3<k)z`mWz(&}&
z*BUuJxAxp&*1uhdGshH@JUdjbk>!=DpJ=F}cA2sAK>gcipd41^^la$4gN!^4UC2S(
zZ^uh-!|V4OQ|PXWhOM`zSaEzLda#;R^K!+reAzO^_({FdQ0GoDc2u<OzO8Lym*!IN
zXXW=f2Yo&}o>GlZzc1Miw+ecPI9Sc-FaPWOJz<z0wndbmW1;b(E-8Gl==x^G=&p!W
z|H|wg#=k0dOc|Kdo2)fKGUUQojd|B2AuCFDPf6C{^0FaR|3)v8t>_d!H;4?Ld-xa6
zAdK!)M|Ii@BW(PMPMbN)-ss<4oNP80)fp@6@as%fsCh!<Ph*2L6>hAPOfa~3y=fM`
z9_B21?%@s6s?(c71X}~1S>JgQnH{5c!LbmQbTMlsZ_K5M7x!CHEFIQIX8U%WqJjtx
zlBukUoWDJM^69>R_V^}Xr*_W`?jdb>B6CUwPBar&g&VH|<BZYT7wY+n&cc&U0>rrh
zgV#xb`pRgJzY4n8Pya)BR-Z|K%_TN>Vjap$6Tj>Ilt7j48Iw6);E+?2wWN{*eb?7I
zRDPgwXPuBA=n+IBSRi>6{(rJL1Tw}gkfo9XEeC2JAjzF{!X43HlpRR&cuDBb12SsK
z4YX5zVcWA+TI`w|=od0eIyaC+_Oz$ecJJ=Xpwor^nTibmrpMIq{h_OSqAT5Ve$XAq
zj)_hFu)jE8ki_$<d_l1YKFxtJ+?^Yujk{X~Bx6lW$@H5+hsqa}9EqBna?uOq;8G^!
zwP9|nAj|t2FEi^$0Bc&Bi;g!nuZ_=2_iGVx5229aFMfWXqO@KCUsMTq(C8WM8kRs#
zdF}WncLSRc@(ukoSll(?&{Hx`UD6}r@E13wziGPPKDVlVPrXSILH6z2gK1rGo5JY^
z@TvCJR|P%E5-F-8?ewR9>q<>8P-)aYU0gv@`L6DSHmr{npc>|KEBYjR)Kx-?5lGPu
z0y_I>MSfy(C122!p5R;bljA{;MWxH+UlhvvIDA&R6DEPOGQsP@aN=9Q^kH4pzBU+I
zRSb5-5iVr(J*lGSKGyGMK=b~E%9b*<(wIpjtxst90d7^)o)XO9czm4?yR2I5wx}t|
zgS6{@8>@}%D}{Ujo1m>VZ<YW%D|REW;IKfc9OLfy=#9oTzt5t_ZGRSe%;17?kzR}3
z7y54OO1Jv^%!tm_1vBW1o?odUpr2TnW1+u~hl^cc(T1KIgfg*ycpK5MrYzL?n<Q`7
zezG@_{>mK%f05O7Dj=#+cAXmb4&3L>NZs4f5mRI1^ioFV&8AWJI$rpLO{XVYHKQ*K
zKs+XnQl!!yu<wxapNQ})Tb}6LG-2_R^*6jB>oYk`I&ux;NW9k{il~Da@>{Rc`v)iY
zw`@B&t;=b~za)2nV>VYG?0LuOoG-<ChAzh@un#Op1J9|qG9RXMPH`ylKGw$bAicz)
z)8cEw_UU4+zaVU#M*=CHg4c#-5TMv^>z_00(Ok{UTDf0tyjSnb)CS6`$agom4Eq1=
z{7RB$?*Ci)m43H3502Zr*~ef-76ua=nXHyBhJrF~UE_c$Z;I6VAM-0s!?))DaDF90
z;OFL7dTt7y0}aeP9x1o<P`(C#ISJ2!->t)E!s)Y2UeDLBuhOq;<@Ib{cgYu$ZLdLJ
zA>ZH^=TyqhyHtypms|s-^DBu{Q`mY=<yTtH_iRT5uH_aB-?idpZC^LUv>b786*GR}
z)_rVq_0J?yJh_AyM$OENq@;4ROWnm?#|vRT5vL4Br#VlS(ID$<#A;ySlwnd9o9T)9
zl~QiGl3%F}{E%f>vfMn3Gn>k;RGj8)S&e3W6`KLcS58yum3kmgNUxM1^HNS^^M=u;
zj^{iJ#Tna~kzCCQXw<%8z%(MlL#rjE6W?q6zEXAWSt@lB2lL6~z&BNA4Pg$l-R&7B
z9{ujoD6w)dXPyb()(Wx(W<S5uxn1T{!<T!S6et8dNw3sOoQQ-~*Z!)AcI19;>Fo=W
zD=k)Yum}~+SUD$vNAJZ(jrei$4V2xQM~wH#=3zaJdCETJTotHR@o70m@+Z8LW73+>
z<j6On;N<ahU)7ImH}It~S?f=wpZlfFn?bcKer4wsz0xa(fNqsv=^f%DB)<}u<_b*+
zZDI0J`IQ6>q;C-6D7s#Hvu`9{A4FlN%dvcVRtdzNMV_Urx_RBi2C@(jK*^URnSmNq
zW+0LuotR(gR?2qCucXU+rP7AhYsjyZpUSWFf#_B$sJEZO2}JNDfk!goiV#$SrO_m<
zky*NmPw_NNQ%7hWR3IsS{NzgKX3Lu{^mi#<+tA;sF|VQqyuW#_nx<Pg+yDS?0&f>;
zM|5d0GxFo|E6J)u^};1xP%7q$bt=Eo5ZRALg<Jsdg^=C5HsRe=eK60MSIKOsK;$4c
z9inQ=n-v-bg`!V|oG~O=I_Fy=*LDf1#a5H&T^d(Z*cUobRM?OdV$+G1RIyW4mZchi
zPtO;A_|ekW$*(l4vp7DM{h$EVWj($dsJ@d_EC<4Y7sEvxq8z5*{l-@y033WI)?or1
zROJ*H%@?`DRe`}_l*HI%krYW}iqk|}^BEMMx}-Zl8~<`aW@yMazA(R1Xh=b~I3d<`
zaEXHMetspvFd<5cVgntV<EGcl&k0;LlbuHGl7R{ufi6`t9TQ`6q+5E(xcgQaR#8W|
z=&+dX+g~+HIW`pMV4ZF0WBF~2X=Z_#hPllwYUTv+8-DmlD%%qEVIhKdOoGOO!DRO$
z>C$hA!7=WufPO%MniM1X0YO^|aZ?BI*qJ*;0{5<vzs9^9c%*Oe9)1B&|AQO6r(ZFx
zjGFg6a<(+4V(px{@<`vUpipCLxKbB+11T{&rCadBXH+G-RVphpa41~*BKekHHAZi+
zl9L#SzQ=p=uDqP0j*zv{N>1ZpsOVFbR<`Cv;#YlX;$J5P*HAH!rju+|zQ}$K7DbIj
zCsb2i-{1Y3y4&m(2u0oBJqyX2_w!fs;NK4k8)KpbSE=K2bh@VC>NYrcrQ2^O8AWYX
zim(c4QDO~hdce*CyE(V-A4<L!zu(C{JCxjLBp-)i*1tjOr47YAH<B~a<XZQ`f4lj-
z_JG)AVOlA=sd)gUSMl0CA}G?lcJcWlT-tO7CYv8w{8ndR!gBTRZu4F!!y<=|^3Ch+
zt$=Y5=ck_9D`d=NHJuXRqn6Qet4D|>xf)1`B@!{K;)W&ysBCa@e~W|pIDYv16m^>>
zd}S<B`jf=42WJ^I6OcJtKBkf|!8aud6Pz*458z^V!mn9`UGpzJrnZaZfrH(ok}vIW
zX8xh9`WOtW8w^X5FCBs%hgOT@x;KjovL7S=#r9q~YhVsw4!eg^LQtw|j&{#+zp`l`
zq3cF+E=FB=#}Y;rcCI7u(k#ilG#cEi{o-%XzcRuJPQvZg4`~z-YjGo$ky3d9ih1AW
zhp@1$$vu-TMfT(-FGt*)tFC5E@{jCGXaFT&h6bH`o|HA1PDP|AS9p7hqSG@cmxwF5
zl=!figd&7}y<pTdQ&Q3|iEhNf)<{Im5TC&Ipq)`>4vsU5O`(R>!2<2Iiq7?(HQAZY
zzqCo-sQ_=uA32FR5<E07mK$i5;>OQD_57@K?QeG%wkr!<#!a7EIU{|`u%5UOrtxOf
z43>SfmE&EkrpDi2YQf<RV{<C?Yt<_Co>yorXXHA5IfIn0`I!{u;$~B%IH+?BdF`DE
zR@EVCW4YzX(qzr6VOlGsI3ti%?T+|BypQ!GTNNPGMv5bZBuh|DzOb^Ps<2V>ec)5q
zfA5DV)b-!5$jTJ<+#D&|mdV!iK1}w6WKHC1%A{%{Q<LIUI3k^)6E$J^{Qna*sYFdL
zy+D$tS5%UwPnGU96~E*eyMmIsX-e3b^SW93LhN**>oIJrdxaA_;Ewnhlr~R)7t&tN
z^ywr`@{K4Ir5U3-g;|4of37tIVIxLTlC#01j=TK3La(eWB_!)B#sBmBzm0XxsEmn2
zXw!1lD`^f)r{9|9JS=#*cdLtc>XFZ@OJs%n0fUp<$~mLL^r&OT#Yj?nw&>fd6}M0s
znh^aTnNEnaE&M->FqYhoZi<VnM%4_lg)$f8xVHR=8Q2jfKFO$AP3LRGwj_*|$ZO$q
zA!SP`*B5}7<)rg8MS8Z4vTELMriiXQ71qh9yP;tmC?84gogU%9t32pstgDyyGI^TN
zB<<YVggYTR*)tc9wx3k3Bo1|}`r~ThzwFoW>UohP>w}S=ACX%^z1NwVBrSZ+Bd8<{
zT>4I|A10xHKV#IUZJNf)QfESE^`Y6uJZxt$oLkAhG@H^!`PPV0{((1_U^}$!<X>?j
z(UUt9r-x{1vyuEMUl8Srxp%q5TW++;&bU-TK`lKL``95#Ni7uy3<nXO;Y$y<$Gfl&
zpW4Xk1{J|4q<wS&DF?eCH41%dD(vBHQJk+4Vf6H~X<?L-L~RF<M88|NFC~FQAhiJs
z;h9n&H6V7mNF{2|k=n?(6dPujjVSwXY2bUh0pY{&|Dejrv`ca_DM2MMfu#r+VdFo$
zA360H9T+Pef!4H?<d0ZN52!vE2wBfZ*@@zUR6<+tkd~>Dv`m^`8!PiGYTl2Ph3&|I
zTai2;>wHX6Db2gq_tKI)YtdwVHCB#2M%ix0x-AK>IKd9$RAZglY5Biq?v;kB4;359
zo8h?lCdm=M5F$R)WyT^Lrr#Z2R=Crs`9#!v%6dP7M54}ENx?L$o1Q+d_hWZ}+4v%o
zFDZ3E@7C_8N$)ZKWcH&<Pw}-9W94k6i)8Nylo~QBWF1B^GHR|twICl;(Q%uUtnp#8
zy`dlZnRdqp%2uvo$T_F#{7m1VTl5j^pR#D!Pm!PL;VF3X-Ee9k64*{QG@YMmF@y{O
zvue8|`F%|*6Zt1=!<|XUo%ass*+?u=L-a-AETB2inN0B=zhH`Q=ZAjJ+Da~kYUI_0
zyvh>d=kT-AZ3w4@xOX|#Sb4=N&C@uRbiv(;cPDtm;h-3Egud`Y0vET6uF^HxQx6e|
zS{KL&?2L+P=BYGLzILA0WxTJ;i~!oCg+TpV|HlmZAwkmw1<IfSKgW9?nP9GZ6K4tj
zkp>FQDUZxe8AXXSP%C~~M#-b_0hy)rz2byD<o)4!F%GU>NOLI_UvzqgCF{VgdqEam
zwo=blOW!Si*BMyRxmaC>r`C*aMJ3Mhw_AExvJFTc{6ui2_k*Qs55eXg4a{CKP0+{f
zT>gM0Ez||VD&(?S+YuJxZ_^`=Qo%zUO*>MWOt9`WPt;RV7;yi&l+=oh<ie4CPUyPO
zcYzoC8r;51TBx7!AZ+alPsZI*GaaqpD_8cK-^lhS(b>(Y*^Hi-8Q*f%D<{Z$GiCoy
z^+Nx6mnLtOms~b39TV<O{5&V-jsBS3_UGiSs+UR()j|cCLeWj5rH#h?tH4LpIvg#+
zrC^uJLw2R?<jC!0cGo~AI&L=>+^@HHLIGKX00g^u(&cXP3O^B)qR=l$1SOTS?-m#T
zzGBn547J$BzqBcizN)58f=j`M&i~ZZ3#mG?lko4OGF};mMhX|q0b+oK09pd(<V8YR
zWPLg+qXouVKB)OQmx(Jn@G0bkluxsC?P@;cDtl{>xTEVc8p(x}{1^Zr6KNd<R?pME
z6z(tF3kan(3Ivt=N#R3hibC*;1MAW)R1``nB{`c)XO<%B`!)&WdghSNsuBMl@g=Ia
zMH=uG0vkOFq@De4ZR`a+ntB^mXs@71<}~>}Usjdz2j8Svfn4;c179WY6Y5Z?2qF7u
zGp+dJBjr<_G~K9kT~JYFe-b~u6lGdue_A2*CxkEH`b4dgKoNU@=lmP3r>5i;8CK22
zt2rh|;HBH9pMkl-P`9+3<bjgPM&h6F6hT5H;LX_P$uY6w8|>l9+3`HACZ#tnR(&e&
zL6-|v&uVdd;#%bIdm)JuWBx7xSHw~CG~cj?$PicG&UbwPivA{E;fLLGnF{XY#wSfK
ztKF*eFi2rSh0CoD63opS?$2y=vREQIMfg<HP_~gQOa34c@%9NOIy%Lb>hhe}2kp&T
zh~V*yx{%HfrO>SMLrtPPKR?u$ARcf2yTXord9S0GP3Iv2%KIVnfExbOjdF{rak^s6
zMv?mPt{0=|+A<&m;N{Y$xS-<je9ZkOzx+|~5RXrJc!4|=D!fS~3yGp+I#i;lYm}%_
zTgv~$q~py+RO#g)nK#;Z5g$aRC@hN{7LcY%M(X{FSo0JGW%#ev008rs2#=A(e9l7(
z28(3)56K8f>LRNr#hHOyGvm;BpFO*KxCe|RF49Hld*rieQpHteB1JGSg>E$F--RIe
zjZr9)W2J~Q`2J0K@ITPwTc;XB&*+`LpEYXPBq?V-bR8d(D+(HIAXgNb!e5qLQJJ6b
zO0Fn5+;2q{T-zYlE450=6=gctVd*-FRs=vks`<c-)j&+r8&x-%xOnIdFwy}hK@5k&
zQ`}Wef-ChMaVT}rYp3xM4!kCp0*4c?kud4y80OjzAff0&UP?Y!y)4v);gi&oRob&o
zL6vI#dRq6}^IP}(YF&aUN{!l9qo$DH${ebwNu`LAexM!J!CSHfe46rS%Qwy4xj{^G
ziWSrTask^JH^9%4Vn6wEi?m^^ZBPkHk_X5fW|ZUpbW%}6$T~3hSPm3yEI5imNilax
zP!bvXkgR>2?lIiR)#2sV$MuKKtAF>bkdu3QqGfndbE2bIC&Ep1eBGG;FlInJYXioD
zWgH7|0=$Zo8lYXFs0nY(q85Kena<OjnrYj8a;J=Jy|RJIYwH2^Tv~~pohA8%kDi>x
z9`)J|r|ub-6S}?bgxyelqofk?l`)mE{ao2b`YEl|Q9m$Mo5WJpyWQBo2yDjPZ>mCC
zb#ZdnQX~g^wAfcHmHpCt4qk_mXLe3mt=4Q-s*jTGD9G`F-ZIX={@wmrl;W}>!%jDn
zM@45Lzf`|}lV6G<sLfo>6=E_YxzsPZS}VQp$g<81rU=t$M>p?7U_?n$%89*fm*^<=
zqiWuDDoUMN>9@==2om%|xH5dAd;;LFK`lv9ne>g<I0k@LHB6*Yd|LMYK;kF@o{@M^
z);R7&T1<<$$-V#^#cP|AhtCTg=xiFS5C1AcLQ{2@0bb1l4#B!+2lN;F9l`-u+mw8x
z<!#~iH+?A}QtebF)g(w!@zb9vQ0Q`}5^Ln4I`ajXAsK{Bah&&NJWH|=Jia9T(Tjw5
z^<;Y6B4@ICeK6x+6HnsgZ$;frEL#FVW#UGkNdn?UMGok5F(vQ%sV>_pWRLVU`L0z1
zkhY83)oKCjYpta<9@oi-um4y&EpktM^*4#oj89=!q(B$h!xX8yI++|Z!u}5AYx)<T
z877XTU6Z6?mZ*EpF4n*Xxu%h6)Z6mZ<dBU?g(QBlSiXnbzP?B-`@s3|cs~Xe#0r8u
z?@`&ENQ$QIB?n46J@Lf$7odns6dj>4CY!1<%ift3@Nr|*98sl}mBPo5=kX{_xGRL3
zg>bpTtS(&osqxFYP$AOuY)SH_vl^-dG22V1qnc419eH>Fyei@=U}j`je5z=bi4RF<
zCa-uB`ygtpeLkG{Xn1&XeYl9w8>xoDhsAe_u|T+hQsN}}6voj;rTz<%mKQZuP)fus
zdg}AkkSp<Op5qlGS4x`Y$O5aV*^HUSADz<ew0d;El>Fj(IEE9Wo(J~?^@!2x$%k0O
z&P+dn7}`aO4BW9~RPgG^KM-11O+OeoG(;T?qM~RkkZTNRo$V!xFhK8eS(hp=i_fE5
z7iB^3mCJl%kBEJZNZYeo`yXctkj;I#bbG9~9G`K2gtD?}IQ?<@ZCmy3@|S_H5cpV!
zseD@>p>T@Ts^({;-Qi4rno;wQy%hTqKhr13-fww?GQH8KsZ6ddSt4u77)jCkkhQ~m
zSgBTy3|mN$aT6Ehy^W@(({BwB;?bvdnR7aoxu>fiTlR?$zL(07u)SKlw7tqF_tTZ)
z(l)LIg4L!nn6;9}EOHUSsWY@nclT3DJTK;<_nzX@SvG~9>{O3Sl(kcHX<0g1mIOKE
zVwm3PSVD~CTa=Mp%=33sU$$!D$)s0MLd;jx7whau*wA9lSORjJB}mc_*C*Djv)?0Y
z*u!KtFWGxN?>uZ}VxK5xq~0`8e>`&5E(JPuBgu3Gy%b$krIGUxpOtRq5RmgtDyA}M
zHBmn7%*u6_iCnXlJ-~Fv2C9b?VbOfmo6oS+edcnLq}m*R1*|JNU4Wa9RFPE$|5MY-
zRWlhQ3EX8D@3PtT01TbZ9Sg{u+;I|@w}-8c#M{G-ns)d>xigx*h9~FG^M}%h^{itC
zBK{UOGI^V&wsqD=MW2i&Z&!=J{h}us5>@8VsC7_fWguCo&Yj(JGj9}VrQ7G6pQ!6b
z4vxj?joOPX)<<Ih?TK=(fQ+D5NFaF4GRBETRocg;BrEB*x+Fepe}lC@$PzOXLvmuD
z;Jg(nRl1qn884OP&iJV1rmu~ciAi4@FL2>bsWN_DwjKI=WRIfPg;Gc>XDQ8684Z2C
z(qFfgZsF=fEd3*(N2!&*l3CST^1?~mEV~>Z9wTukW?H7HPTF=Bs>AiUhxF<CF=kLE
zb^d-CH9L^xSPHM2PW6%l<wb4YcGi(lQPpe+ZZRjW8OmSnXC)JuRaUZ(5ph!XQYmY(
zvY~Xjdq@l^+RWp<&i;t?=$*uHvFru0uzfPZnCkDI$^9H!JDk2#8@ZU4TgwG<*`M_x
zpPnT2%9Ff$T-yE}w98epmjzTUlr;ktB|vlao25g|)wNl`ciB{?H6ZbAO73}2iGcGB
zZfZweZa=z&e!UB5A#2cn&M_IZTJ}c)CG3nKqnJEW*TV~g@GP7jGi!q-Am~Sipux!!
zk*4Jrh*8CR;}|O5FlkS%V+>879t<SLh(nI-d&lls&RfY3HiLKi5Ji%-AH(<+Am@7B
zDBm8zu8MSun!vrUG9$<tM=3(S^Sl}`&hw_DQg)`W(RYntLmL({%h|_|x1U)N)}|Sn
zH}<eViutMLtDxOScE-ZMcuD&Rs>R5#inAjTpXkmlU_i2vtzhJ<<wPj6De<LUQN7x%
zs4a@WH<?9!y`7mahRqCYMshk2yjlF|A~7q9S^z-$8G<-F&U>p6F2hmAm+!-a(NCpT
z^E!^h&K1kAz=QFrMeULSZ2(lS09k{{Jq4u?qQFKhyrhD2p3ZA#NTzWm0bkovt5>Cj
zo4!J?R%8AsrrdiGCQiCf4QGZNgpU1Yy(K!XEZfy=hOAKXgV_K(P*$`vc;_Ak>|1=e
zrvNO1)BCaLnO&XKRJ6O(XPDIVvwl6KYo2*I!+hz16LMdPw;_G?k{Z8PNE-ZOUE@5d
z@$iW?URG1zXV<;d@N;;T>KbPVbkk0(@h4s5&r-wBuhm1>c;Pi_eCxy-x9b`)so`gj
zdzqq4S3scZePWH_y2c2p;pYkalddsP`goO7nB#EON7u-g8h-Y&+jWicL+NAbi8Xes
zY3uW6UZ=9u4c9fE-Ax~NoLJ*AUE}W-HT*1ceRPdSq(=GiHR3;)^EN5%=Y`u#F-HCK
zQXo40gwjz;kCoDXzP2ZH>4&9l_m{_wIDQ_bFObqd(es?prGNEJ+FnEHO80?(;&_)$
zQE|*WeLkqAj-Rt^jILAnDm~nDLJyJyuTDz)`O41Mr6)=c*PT#Wa^U?^O8Xh}KA};@
zx_1brzjl1-bPl{pQp3+~R<CQs1ey-6I_Uy?ItSh*Qe&MS^8#Jt6M?AV#2S7Myd(3d
zF-cS&XYfQ_W1B$rz=<{d9C%x#hM$@5LS5qw>Ej0{*6?%SEtVR7_QHd&sF6qbaEqy-
z;>oOSaHM~tF-%#g{HbwilHD|HvGYp);}G=LH5d?wWV=QG=lR)0dasD*iZfoUd(=7&
z)VXPI*Z8fb%FdRu$NH+L%FZUak>V}nXRE~OLSS(dp%BfIpKazQCZMqqEu!;g>pWsT
znn}*qLcniR{Fi>5PjzP%VO22A@w@21qFF*(3zr|#@xG~ey|A*Z&`M`2a<Bevj!WJm
z6SHa042rGY?h!e^9_Lc4qRs4i(0oP;=j6Z*G1C*8AYYlg^S4Ub^ADOmkx9`G>5<Sr
z**Yow+P|u$Wc3wW>)4OjBXVQslZ@+pvvGtR!NC0I$?Hb>o<pT-`NT=MH@0qTM6Ql&
z%oKh`3eW4oPI=Co-r6g;Z#bR&f%8{?KGF8sJ#<bv+U0Gzj&GFXR6-fIlHaKBNL){*
z)wd9j*dq-ub04yv<&5@@+Y`rfQ7?%C{n&V5z2sPO#+}M}Vx&1}ti&@SFl_eBXt}jl
zrmL>?Ec!QAemfB246LZV`p}%2-{!(Yt}?0*80$*7wjt0~dTjb09796Zi2RUsIWc|}
z*7bx_j|x^;BMJb3%>}S=+1s<+-D~t6;X@ZPc69UcKx3_IGebsWDB0eAz<9hZ6yQXm
ziF;N5kZr#beApv%LFX0r8G=y0Z;uz5gpUp#nLj-r?-*s1Bz2Z`hKi?p7ZcfpVC&o3
z{=@T<I^J+j*=HKb5Z6ovv8>g7JJdS*Kt8Ou+_#)|eU760E2O_mr4RGMGsL#mY<3^n
zf7VyUjpqWc=HxSeQgU;=+lEv;9G+=c)9@-GuMKKX-MUlRpVI9aHNT;N3fIxGnJVjB
zxv}nT(sGc-?jjAZS#%hSZ=|#}Y>ebw?bXhHhyLD+Q{p*6Gq5*o%^_%ZPi$0J0<udF
z$MNoJcdeoTj@+@qQb@np8(+n6|CnI7U)ICzuZR1U!7!SG_o?KLHN45mNr$5O`4!Xf
z#s(``$AxrWI`_-Emwu*wWzZaYW&VuQWkYCM*96OJ3u#4`3-q~xj!o$p=QP3d%9j<M
zU%rfvtLZr1el|WN@I&(7abH<%j%k0Nc&lTrm#Ov$50!Lc7yl0T6O}qnyx$}j)yB?#
z&3^+k-EXAyjlod$umL%-P}n9)z4Ud-pVID58>A3(5l8_s^5T>D<G|N+H}Dl|_%6}#
z^%3}5?Do#j!v};g$h1ccGKY>RX4r(5oA!6$GlU0EAiP||>5MEkonI}NR;2)MD6m2E
z<A^g)zu<UN(i9Y%T%I8Vx$q1#Koq+@AwMElGgT>=W|o+xAIs5b6+KSC(`2-$AJ#}<
z;4<-{p?srerRpZI8Tx}1JB*bxX_DgbF5<n~+$pD!0Mm|kaLnfCh_b&uh$t|QkM%H&
zyML|v3NegO(38l})Hrlg5vSir_h53sVhx=3yj_$aOIZ{LsksNgj#a>zH&+1>ZJ|e(
zL=x<o$G3Hk9b%SBH*tc-d2B~pVgnjOg%r(^90-tvba^|-q1#ecOUh0RfGOZ+oF#7~
z_K4z$6`~~L1UOBv)CF^Gt#763SrW@!fdP6vK+rRQxFdIofaitH3!4{e<UgZ>c!w9J
zQ;6UVj3sNX1uTd(^r9ltv1k|WZj05C;ZH)ZrZXlpw=)MxAUM|C3Hbzr*O`qY`^(^r
zzCBF)szHq-3v;E-p;r~pDA1I0E#uXcBJxBTw#P7pEc&oV3cndB>kZ;yz_UBtjj~g=
zXLoG&e#A~H1CQn~ncx3rJ-u`d-g&V(B)}odn&L4RPFV<lk*LwqH{dU?!C%6G*E{>o
zTPiGOwq`N2VKJ}8MuzQ)ip7w+<wN%?1Jz3Uh7{5-_QqF$#C4dDQY@xmyF%iIVvzV?
zZ7P3k)_O{dxeWA~Z>jmUdw_~wiK^TwMokWMuNkJF94<d%k6{vJ#Z=|XCDk>{Kz6uv
z+Z;2bVpCOg6T8at+KLa|o0fCNYpksJ5Gz5fz_hQS+SU2w9E5Al=x<uNWCYomUvAZX
zFLa}DuWH(2en>QNWg#aKrv3Bck^}D9X9bY(*D#6PT6AT9^TI0!nO1L>#FZ>4oDO+J
z^Rp<O-`X4e$^kbIV^hq;U5y=_Z%fBW)MAxHmiO-lQcx0Dxiey4>aKcR^pWmtfr|yA
z?*WpA2!0Bq&_m<0IK-M92aDOABECFrys|%N!mv?yTxGpp6#mGCq+{!>!-Utt6&dD=
zT{L4YlB-57M|@e?<_B3C=!m&l$w$Rsx=&+r7;gkUjmb&=H*0-jKaOyLGY=%*KALFA
z<$^34SqgLNN&Bb(Q~RPuZ83@#6;gw*>nq*!iXjoPCw&S7;Zah*+MV~{kF`1S5<W5W
z<Wr;4{pjm{>1JurnA#^_m-1i#vP8e0{{*j%K@Uk=7*%Bq#@G$U$_c#_EkR2`ZZ_7-
zx-lou405u4&kNmi7-diK3?#U<Pd*nHWBmU}v_)0D&dW>eBMiARH}O$GEKJWR1izPy
z^Hj+A!=^dG8XVTPqx_|Wp;7Y_<XuW2HsoCFiC=|U@3z7!ZiT%MtPjM>Lc5E0yT-lt
zx!gZl_sYKA7a#s%Zq6&4_j-GF8TWjZCSQ4LZ_A!t19RAH`@n0Ube_P4ABT+mz!c+>
zI^*82(Z&>GP}3A+T%TKhBnZ5uPemmNyyq{t$4@cFlC(F_x<>Q$1M9~cHQi`GlsIl2
zy?A(FeVLJzdxjGGaXTKulQnFD(AiZUuf=d6tX6{A17*DnV`qzp<>}$cFRd%2kR0fq
zuAJgT{vWrmS|c~3pAZU1xrlSyk`x7)&Z1jsdmTfjup_i4OlR9UfgIv#kUydNH%|iY
zX|^NfOwj`t&ElKY)V|9w>l1auF&roAaxvvPxts7;1E@xG?mId=>@l<S(-Tws@Q^L5
z)iC#Mogwy96F*kT?sHiOg07A%E0W;nZ9g%OnRuryBI)?nP7?_J?>2~8e}EyalJ_>%
zq7`3A`_kwaw)VNnYbEheV?`~4#3J3&hR~}{9PDPyAB&&d2<Ni%lLwruh8y7qP*QfF
zVYrd}p&Xf8J3tQSj<ZNoJ*<(q*3WoW&@PW=;ANrEDREvJu`JR#U$z{7NvR<_1)HQx
z$rE?$!@amOQC_l|{`3ewi<ZCo#@CkYjyivCf)j++;$%Q{RcGt>v(~|ZvOW;lNX|pT
zBosjO{#{ik!69h|NmPfIUPEWU_CJcl7FqU66<k$!8Z{f$G2-~zXzAO8hS0L61&K=!
zk>43F-2P5^|IX5;sy&F!g(CUxlkjppPw3?;>BWg`4Wa>5OAxOc`!hB}0iiot8D)(h
z7V8<z8AT%1@0?orxy>}$v#WVrD*$%(yIuoV3#C_+c8B8{V=d`PJ{nFl>J-wbsJFJ&
z?>ou)brmSWp{Qts+M>MJ66)C~@F&aE^R<eYZH+qo=;xOSW2Uc&ZA6?Kc6Nw_OP(c+
z#l{gz2>%$yJT_{V3P!V(l&r7hP9i8$68km;)y+Up$n3MB8<iMVk`rqQanX={n!Ks`
zo_IJKYw`E}czA`}Tg9`Lc--mxF3GG`QM6MD*%xsjjM#lkHh&T|p5FXP*m!zNsC0A4
z7|j{?_K;D&S%nJROx5UQx4iVA;miW)5Rx$BT(+r04fbGkati?^-;5OPcW+%G{6wuJ
zF1?Br-3BhzM5hXjR0Wc<#QmX*Ni}g-eMe5b7o135M2gV&)VHqj$C_JmT)C7&>>SO>
zV}kZ@D=C*N!u3x@0khVMfUyhiwH67bs-VxOkw~^PiRaa8<ss_FLD}r9qRKAL`CY}%
zXQ131BYenK9Lrj}k)oo9^kMNO4&@pP?&3>h@;x3?kXuBhfTbjsIa&P>)2@cGF?loH
zO`#a`lXqZbZ?wW>Gvz5M01D$X%3rb;<;agx^~$)LRQJ$>`VnzvbyGR%)~=$K+qX>2
z4)H$Wxt$VgXUsc*W=c_cNwzV2k&KS6&Jah6{~(F?=WrhmENBceWi<&OQv4^`A{}t!
zjeKyV#wa@YD&+JJBuQee8YaQzFoeWfK@FLFZow_ubd)xs?z2*=fO||?xYtTc8i~?X
z?Z|Gn!YEWC4U2|FmU03`l(ZJa#q&9s5j3eAmF{N_jFoGZQsc}D=-j|%wL=<{xfG#A
z;#-!f(i~@5A5@fnaM#)8LstmS4W~e?+=;b9VkCh6OfAW^h5X_q6VI~7fcss54AqY8
z99A6fsiG>E!a8&(y0zK=Y<)JR&t^1))&d!^-ZD4jT<HCVg(3GJ-?ron<lpW1Lv)dU
zmwAV!j^1ywQP6djyi~Gt_pkweQzAasr>kH0U0;9>_tww=lC-<8$r$qscz`xj)0<D>
zDp^upUxMjg&JhV$HHlPK_X*4K9J3u1Y@yY7bt3!Ix_xH6KkG8yLhrAXGX^~>sPt#f
z7`su_G*QcrSJe<KiH%*=v}ZSonpW|VH;%KR^nTE1@VERP1}}Nl6@rfwCrf`T;)J}i
z+C(RkC6N^7Tju@dpbT5|7Lwfw>-TEa6InNk<#LWo*e07X0w*dv%ZEHFR29#YU&k1R
zjK)%w<Bs5z$yQ&76<hTZ3o>jl2C}lk#`q{&n<e9xD+FsUhSivf*|ju$5A1}aY3Zr8
zz=y+y%7)eR@`t=cro`XNwuim4wv58YzmyEgr0!ZlSz}%!f63cr)cjYj(72)u0+(W^
zRv)~~Sb&KmN1{ZM7xKkc%qLWOpz5sF^RncJxDQIy0B`2>2vt`R+5R49!STZE)pi=E
z-g<q7hE#Q8SqvBLOkg#w`IlN-YE_F&NCxp-4b}EYtephV0l7uuSfcJ?7EeGkPzgPo
zKc3}-gG@KIEpmFZ-DgAB9$NMMbI(1eaFPYy|M=C~jImDg09Y@CjmMjQP0F}0w;yD4
zRC^VE<1*>LZa-)#?w#not*Y6<$l%Ng)Si?@($#BaSCkVA;ww}e?IR3*92JFe;M1d4
zg52J51TG>{C34}TiY>JiA|h(8gnx)uQc?64*@22)uoR8d)Wy&6d$7y$@y3h=DZF45
zEHSfU{tnm9aEObuAWG~njGyiQPRz<Lj-O(yZ52Fr!QBXWTLCCDzYZWZx0GLEb&^~3
z1j@-R(ZHu^@9dDV?!Qt!$F4DPs!&NNtgC}%wZ$kYG4A|Uq*m$v41a6vi_fQuGtF!c
zAOOLV)HGGCA=ypFm$5C77Tv$$0ZDuD<(hA$IQiNPC+|T6N@C#I1y(unRq%?x?_T#D
zbwHchd-T_9jvVW!80)6xi_hR*_g6reSgS;nQFEu90dwmwz*V}=wvJBkR-UBzvAsfM
zfW0<{zX>H~1LP24E=D(4N<0KQl2{GKxZZvk0iwOOnnhI}*q1ms+*oj$XhPNp?n%F;
z4>1VnWv!TwR-ti3re(1Z;DzQBjaMnG&$llqeNyQ@?zG<sq~jMeQ`Q3r74K~R_~q1o
zjqCkBpO((-N=v<jmX67udZF6MjbwfftY<5(tw`EnYt;O=sDfz;#EQ-^aY@*r)|zmN
z`Fqvj{hRQr=lG`ld&&`n*aF7j$Sxc(>{Kzxjv?EOnrmsb`e13SmnZk8^DTaALk{MW
z24kfO$8!Tiw!}T;W>LGnNN``Oa9?IT&?t#{;FAsKA1nI!a%F?y(hO0g>I1bwdxcC<
zV8;;uMS~*jn|TInG8TwazE{hi6kaFqv>bVh121~iBGIG3ipm&ot9jNEx=|@%l&i`p
z7*<lc^8SomS;(3e4aHYYL|L<xYC@7XE|oy{5+?-;aI>Y9!<Dg+x*7Q=sfUN)3wLF0
z`9KmXYz$PCzFqaMH&jsoa)t;1pLLdOE*mln<_Q%kVl|7{MTlxMCV;oIEP)wc^5!#>
zUG!T)t(4+op1kTIrLhnFvc}!w_g0+~(2U)?;1Gyv7}>2D&e~lwTQ6VGwQhx4wyc`I
zE`$D5p|C7RIrn?NhvxM<WqhI!Wpq@bg4%`XbG~*eT5kx8fv@oizSZ4){(O|~oD;KG
zi1zD@2v|yeD{9b^()(D&zSS_HBBd5-&4TO*x6-?xpdg2gl)a%Xd2-R_{TX@R)wQkh
z%0g+xy9X|z;m*t|L7YsVrR1E}!!e=BP40_iV1S)gxAi)}v=Pkc+umXYWEOY656aA}
zo(r>Ak0hD!#~rfT%*CPl4o=XAHHPZlvqq597?y!M4T00{^AEy&v=zhOb6X9ez;kl{
z=kSmb-Y5=mB$v<Z!-)-_+9vdPCtOl#rI3qeF_-Q1#>p#dzuvff@g+D|l?$<K4CpT|
zgfdg?{20qP(ct&D(Kf2jBB5%!5W<thPfDIIrd;-lk#zz)<eA`5zR}<+Y9P6Is5mg+
zybC~{Y#>WILr<5<gC~g^B`1Z{sz~mhb6#4*UT_UXQS8-_hzBx~BX~e0wqCBDDJ^LY
zDV!+HVV}+__15wy16OKg|A){qb23(A<qF|snqYu2r=hGHy1=a5#4=&rfwJ0Zm?Qih
zisAv@QwWmucIKb57Iah8EU{I|_FX7BO@V;o{dy_Jdu5EKw%Y#Ki)39u7~d@2X3U?(
zSc<lplMjZ9wuXz4R{Sn^$^udBk?h;OD05sc_fCA^E_guUN>oW7C)|$-T{!ZDt5B%W
z5r~}&RO$g6<~9&I48m2oOMZiI8W`DEX?3W5*U-G(zs$qfD5Ey+6HStJ6Iv(cn}~Dq
z-*}g$b%pKm7*Q~=IDJ0iO{yz9E*iAtIWQct|6=g^h;zBRh_%`6xkyYcQcc0BEGmI5
z0xFSjm<S>}<md<s5LYpvv#g<CxxHGPhC>#<-aAdSsDl_(xRG^usHm=DXhpuU;9ACF
zD-(({rn}V<Ds9qsT4zi*`95DKHRCd&ntI@&;rX-B%m|zhC*H>%&-JRM6$Nw3@KK}4
zpGCUiX&P~U)Lc5^%{f0*0nW8N%~YV-ih`;ajx)XZ^WeQH6vh5YS%9<!#S4K@tWJW6
zW^&-OpLdVm5A}Yi%4+`S*AH1+y+87JAvcB(GZs{!60aTxB32=BSYs8U$mPg&xG%Oa
zKx}@i)F3zTG+Y{(UJ&bHb$ETGKe=$Kw0uX~j1S6-8kOCN3zaQ}C^0~73>8u4B*Ao2
zGOU=+RYC0puK6b!iPf~dAPh3<gqf4gv3G$={Bad&Z2lyI6=?Nv4G@MP!>OR5a?uE!
z*fA~<#Wus~iPmxM`jdibafED2+FYZ_PTicLjcel<r@#baTyPbvK#KUbzRi%-iJeTK
z>@HHKN=Q&2qY$%988`Nz^yBMbVp+wC$GJ>ztVTOJPBZ4+!fMq$OR@=?;a)kl!-G~v
zlg1y-{l^UN6VrIQlUy~<jr>q^Ns@)4Cac~(?H8&8#i!8xXgeQVV{o3v0*o)#XF~ke
zgQVN_9i-JLKq(6)o+BdbQCVKzL{x(e^ISzI$Wtv3oLG>FC6Dq7;m~H{*b!siDab#(
ziBk+t*arWqtVN=G*h-LT^N{x%4eLFDu@0N?UN^B<B#p>cu_FFTDa9Fm?`1SixhhWH
zeHX<+S@8Y_y<@@SC@ByrdKZHo);ag7KT64rvF?_x#=3Xi->3pw5!Q@aOmoUuN82P3
z@_7U%JZ}^~ZAU3s_M%-fOufml)!~sle2*#}1ZdkC$6sY&xEIgJ<9Aa=vL_?*K0`W)
zBJ!9tMHJHK<?!brhW@k!)VTEJAVk3mz><{_CfPQvj4`WGsfaRNnc4G2pRCX<(I+ZY
zMy4=!5vbl+riXwC71W1KNBEqChG|Bj%&Hi7Lq$ZWE21p7@K`UF%o<{K#o)TNTnw&b
zxM2A}2=ZL8Ty~jHGhguP_q}m+p=R(H8zJ0U#ciES|1OL;y-~8e=#Si=f{PP|f4Pl_
z{h1Uk-EkMTRDSFA<JacM`?7kuLamFbnfnzu1t~yj)oV@B3QaWMh1ZpO<jH=~SQ*rI
z)Jh}y4JIiiHIoDR0XfMOi{Z|wDNqkqDD5NBfYWT7k<8JB<XLr9H#{Id6v6v$z<Y;J
z&8OB~EK>)aUk%N8qlrgIORR%-o=7k+h*oAgvzM<fqbO%hd1J?LS`Ff;cMM)yt~Gn3
zsA9Q0*n#8}<0-e5tam1K6QR;<%%6aU>`dq`-;;l1a#Ku;)z9@T2rutWI?`)zU9k^U
z-fKWL1<5T8WwW>26%+^u$TgC!_>QNMqkP{rk%+VplX~FpE9EFcKdT;6Vk86n_IL5f
zP~i@16ytCPfBC<=Bca+W-GLTql(j+=c1Cv#)!so<FBpm6v9>W<=6UC$A<I;1-J?`7
z5ToWyut86v!6lTAj!0&6;hUj-lP)IIhOz((j@n*n4bl4s8=CYSH0~C(WVlO|&emP%
zqvEf;^p=SOGFZ3vxm#>0taVsTL_Fo4`-HrZl`#ZtrRXc8-=q&ga<_S>QzG3#__*F*
z0Ke-B{oXH<-oGxr+be?L-#-@hk5(t&5%lh59qL0@pDx87nRWi^{g49Y<QL4MEwZTo
zE3J85cI<QRzmfI9{Wq)+1P~J{wOAaiFSR&);WruVAz0iSf2T$&Ld9DLZAFls1gjMt
z@}BM>7NXPJ3<;&jGU-(*ok8>4FcmGC<yIRdk%ipqpzYH7svz387pEB?*<{5GxY2tv
zs-uMyg9tD&;P@J3LA?*)dX&(TIwnEZ;PR4tmDzKO)y?l-_DW*>W_Kbg2wOs*r%UmM
z@^0OVE1cL#0l&01w(?7zQ}~UVlg%KTxm66EV;Pp@S|#=@W#Z55;*5XgnwU8QQ&1Ph
zepr~m<xo+g_c&Z4YF{d82$M@>t;_LPr}vh8)m>G(Q4HRYv*Ip7TF<f%(aajKSqzf|
z^JU~sX1^=aRp}Zfn`tJWUzP5%<mb6LzjFhOL>&z{gNHq?++NC0!R_S_w;bnK92Ym|
z)lzz<tTbovDZ2EvQu=mPT1$KXl%}-JG)BN**Nfj(qV6O}hX?#34aFfzb0p;CL{37z
zQbsb<nRAljIhF2YAoacpsb<8tH%!fbm)x{P3>cUO3QR{eOn3f6jo@;DX%AVApo;7e
zgLV)>jZeNujWcu&Q`d;{;r{K!8ajBjPrcMwplh72YuwX^K7Mv$jr(;U3#3L;*LZW8
zf+|P)7<poin{<tdQUja{ZvUxk9Oc99cVZ2>G>vgwC^cwQYE<hQtE9#otV!ShR{6}3
zLSgFI(734eUg~Db$k3_5={I@5f^ahS9`ZY0!u~-PfqjiB$IcU+tH@70b8MNhZmSbI
zNERt}^piJpRJ?u&euIU^%5l9=yy{|?;4@T)oy;A=x)xJWWa#AJjG>rOFB?F!7sdaC
z#dVOe@|sdg$GKsY(&9IW-)qbiON2_!j#Cg8Td6vI6Xnb7vO?M(60v^FIk10`CAXBM
z?4J}VrpY1Roe%=!bx+>G*~8rQd*7mxRaKmNGvgJ1vy@L!_T`;(-&-X(u+|QuUA(S-
z(C6leJxn<gMXcFPa@psBjqJ1}#urDqLem~QmUP@EeDOLVN$Vk5iq%7N$b~0G*!5Y;
z#O>ZWeILtwcy02BQsC!-oVYOzUZP$a_Z(5Z?sdmesy2BmMQ}V$ycsl-2jq<tuO<eN
zh`ZI7sDi$lniMF-kFR0PMLZWrKJj&N))w;|z0Tx==YXM4ft-puzLxQ{F*%mMqBr8F
zB&FToFnhLo$}CNS<xP`fWreDK*QN9qX>#sH!IbY8Cs#J>b02Y3u*a6A@S!r5E1Y<3
z5N>*Yd>CE1F0pmV6!wd624f`I-Rpkm_7n#2rSQ4|gvfhvO}mozTsQV78k6V7x|4C8
z*0_ON3O>Mq`}`~Lz^nLC>Hf2tyUw-$DvpVgQe<kGxal5|P=cT=27~N|49Kp+PqP(=
zWjRMn$a0V+A{my42$`SiT-(e!&&*z;-Az7V$J$s1J{hB9j?KjvGAOx^xo>Ug4FiHR
zh8gQFO+fxnhV0mYLFm97nCtTKX7?^}hmfN7T?2|$`RUEs=VRKJvM6f(WWeXrzqEOg
z_j5)FN`W`jSU#W-aA`EXSTx?Mid+Ag89zrP6-$I->hPcwvzW1RL?59W$Xxr&i5n~%
z{iP7O%rjS16^bLgwHR^^*}quG2TuFjrx-ur7NH%{S~(y8Jq1g)FAc`Jn{t7CPdaIl
zt*cM1vllAzWX@%Aq==Cm4E&-dmqS*wzZ6Q8_ip|!D6yg%GW;$)d|`$Lv%)o^I$R?|
zPxy-f)~M_FbNyI=dsYGGO`$=JhiilOcg9-d?^DUnu=^-j+=9b7IjxUWy7$dF)a5>k
zG=EUJ{H;&GmI*^Ya8)1X`54H$$ma>Sk^JvvT3Z4k$G+`8au!pd??oa6TvG7pSLg=C
z?o7qHRZ;gTDQJ(EYgP13Z}D=Ll=PvNlwx(vt9#{3vXbj+8OMnY{?}n%>JHpHDcHKK
z(p^7W=sm^TQg;z(uC_uL0-)%b#{9yy>_Pxcc5(y8RC_w3J8WOhJsj++Ba?p+wAKn+
zvsR4buQ)~Ks_CEF7k@~ZE4Cw0!PNEmEy~YwV{B_E@m8?XJ#rFa4^1U`Av{JL<aFuX
zc{4_67s-?P^jS}(yERq%eT*8E?(=>~l~SCk(w!RAjm_W6Yff)CYu6eV$LnW3+FiUL
zb4DB}pCoROc~k$)Uc#tovzqax5U^3U<kTa1Cc;vVm1^qPhlu;2<gqMZ+soEd{2vyO
zwT>xCoieS#FqdT~_W&_VUK%UEBaV<p&80lvUGz%bZbeU`fQLx0G50NTeB6tNWHC0S
z-OFV3;wAZVS=vi--VmPYH*AWe07(=RM?w+jmO4&TR6HhoBBBL$&#rcV@@o_tHi0G^
ztHihExV5Om-=(eZ?DzYh_sVHd*9&3!jXq)gYkVzN*H^Kmk~8REsg{3bi8U&O%94vr
z{y3qg7OGP2LUFufWvb;Rq7o>Uln`Xzt|EBUE$WUiSNDy@gkq8s#8yAU9FNr$3O+eg
z>%EHU!I&w{*oy@9(V|ZS9p!<RqV*W2=GRir8FAE7hrEe>h4ITniK_hK*rlms-#JAD
zrK~HY5d;BnsSfXcUa9)>JxhM8dBP1^&8);SDzcF2P5zo+%K!6LNKZmM@FQTKnVHLC
z%8m>=(>TdaP4*t@qza&hgxJ#;#``Jo<cwOzB4^b91r9Tns;R_gRo&|3A4gJ`lQ%(t
z0JcE<7o@FV%s|tX#mB(hI!5G!z~dAMcXkEAR#PRq{yr#djhG4aJ~dszQWa#^b9Jyb
zUtK<_++3e%rg<4a?Dmj7Ge2>xICg6q!#9FqG&)sq5a|P3xi(4354|30Vvw!xRFeU1
zsvt6b;Civ|PJ58*x}Tmn(i%w*IFHl0A7XWVo}y5e^Ra>ZFYLno*yvkP4bSkMfdgPH
z<qUk?x3n|xkfE@Oc|DKF?j~L{#h6o9vRN$;>MAUSxbKcjCBs~#7w*}RwTKkmw!2?{
zP!>=0zv)z!CuKiENS54;ucLv<msC^!nvz{|XTOoNdI_Mqj;?^{oWuQnZt=i2mX{d+
zmBaoyC~ZOqTts)zlzKOJpj`K7sfxHsGEr&?ioYleNBZ;TFdSKD<k;gUs*C0TIt+Ui
zkN8LF^D%<z{(E+G9T?Bm`uGm9(F_jGP*12vQB!&Z7K|Y|ldF(nD^<aeZW)(3TWN=|
z821ca^$`MMq&5z9>(jN>_^B=L^k!NvOOSyJU&$IcnPQ9e;8QGzjG`1!x)^G(9B%tO
zX3eqTDISCv$?^I?G5&d@&x7aBLyVs2yESJs82bsY((+y{aGb=2k*B=Cgr85MkWgdI
zgsu&_Luo=5UGJr^h|8EA?G`37?IMb1i2WqqWr)4dJ4IR)`7sn|6P-Pb1)ngV;$@nA
zmoLI7&B=$LNHL&hG0HW>E@!wTU61K)H6>cc4hyWJp`64nBHG{gwzA6?{bY@pnUpEW
zI}6IdS2x8jz@6|D_g)6TQz4V^<d=m(+Uf=BN4V&tXwmbL(k)?Q%r^H4)+Nb?jQQg4
z&bg02rF-2WO<*y>L+I{6JzI;Zbnc8erWvyLBYvgv%fY-+vp^;?v+e~)-rp3!$1n6J
zg~93_0ka2i>k1i9W^>>@-KfW@+PzJ2uCxoGYWEu5E_lk8?!PBMzl(Gq{E$fZ@;2|>
z4mA$^02Ket$ct`_(#N|uO%JIYhcV6bQbJ`9;G_x}6k3?#i5q$0v10&7)r=q~g}hY7
zN3trez|xi8kHXh$rEW}*WA33q8N|Kd9Qdi0x<c`*y7926SyGk>LwKN0G^E=ZiN8Ri
z*1qc5&lJadb6=gu)eJwwZSAuNIm9kh+{%~OT!lcZoVN&F$n_)6xA?8)E?d?`BYBKt
zQ6HbF@MxToBAp87`e(Qi=M;A5ABU<BbEm@y>Lxz;X1VkIXNcn5sUP;?VaU02b4a-i
zzp{1?P2#L49~oyoxy{~~_YctsMNTzRM;1zr$8)t%wx}m8lzP5=;X?Vv!gg7iV|r&+
zi&7-Ke=28_8t}&G6cfBcV)BgzkMm$nCtojIBwN=EeifJf7g{z=DK6VD<*zdLknkR3
z{%cgtXhCz|m8%yq5T>}*19jdHsXk?)F9W^zlq*wNT3>vU`YB%3#8UEPk+Gf>UAqi3
zvt9}nUH@D`kkzNNFaUl$IT55@HZ0xB;EDTTHzF6bR<=f{C^J59w|WabXP&7%1>Sn~
zqActADjAy4ns*LerN&bLxXLFb`S71{M@jp;q7QmOjHM}hwv;j`Pd^3&Qx+yZys50Z
z6LMJr0-%h?G-Y`E{C-1;cW)|pZhS29L2;=1P+rKm>J#rV^-j+pNqa?!I(|7lx*@X;
z|3vp`{*$)JU%C-w-3t=6o|1Z=T8{<17CfgGv!t34ewwzbe?kx5DCz@rb11RD2e*Yn
zu^f-c>ZyRcMJI3PqKT04yY+a(ZubnJ7V6dUX+3vvJ)%*w2coc7NR8xyIqW@^wAK$e
zcQZOUhc^>mH!ci_I0dE5pRuwS+gE9<lKcQmsYVL-tuV6TiD3(FnezkR`-zJ#;ybF>
z%6cs|YPNz|BE0<4N}ZraPu$8A!{**%EU4!_{%7QalnUM`q0{vIh3qjwW~(;niQftH
z#gW+Lk5NZGIkrk+BZals*LTI*4$4F@pc^Z>7(}(cniDF;!$o0zoZ{X|U{=daZzm_2
zsh6oH?c<tE&?KvRq=HJfxs*0-M^-Fn@%_u4=|`}<&pBUjTuP#o4|w;;`Plkg|A|mv
zj3=RWxeVQZm{~9+HI_QxkrIkcdE+4NE*hvx0CN6SSV}{JTxW0vxy4QAiZzR|l&&5v
z2|(`uY5IO~ZDX1?#CxVq6H(TFBV!N1el+BG`_Y5ax^F)s`vB_`Ho(0R8&J;0D5MQS
zLzO}3l6amn2&IidFS%1?ThY}R^pX&9R{z=_bmkY^gZ`cUXMMK)XYPBoKnrE1jQ}p@
znx#bRF2R&AO=#5*%WAAxC_0U{7C90eEs;W3VP_#;*clw0(Oq`%Qo}AAYgH_E=W$+!
z!3M((ysu)(=NfJZV4c{pneck;SMdl`+`6aI?R^_oi!?Q-^M4!)<2{7cPDOr_`A{xa
zRK^$y{=^D1z_-HO(iF8ek}p5knD<wi3pq^p_!4ne)X_uKYUePdE(@P>Hc`JnHxk&w
zDOaNtVxsCJrS9~1xKj|=<e<ehT~X)`q0{+KI?42_URfL5r+8VTj(s|f@?Fu=_E=AR
zCM(@H9+i;wE+-EU3q*4_3dq*3j825Xw2Y0eI!s!}4vX*P4_&mJt}EU5mUW2tm>3>!
zAOV`3Y{KH?oj)Y+Lhzo!7)GfS*uQv(rZk+Uvq*-|2(m%XQJ@>i@wD(1|2w^_`BUlE
z{#cfR=GQ{+Du#IwA;hicXy%)RKeC75p(^<-242w#?00;y>U0@G<N6lby4mWsN*d1C
z>+Qi0KXP)8GrBEtu!nKa*`Q*)N-x3W`sWh;+l(jr%%zZ#d_h`DTv5pnHW0s%Uqz%%
zB>>*JGr!U;`-7mEU)&mCp?GLB=E-LLp>APkR&Udpk!#v{U!%6zG9mOPyUzfAg{>SW
z+RE$Ccjc;sBau}WbSLdNNPBq)|3n3X{f(8Uad~}n$Sw<(Y@gTf10It*uj<-Vf|zRH
zVXnrzYSNyO(O0^|{+@=(wDSHz9l`^_fI>s-zpyu6@hA_an%mqihg0KSuRjHNaUU-L
z)ScDQ&hl|vA6#_~ZF(}<X?dvmkDWJ8HG&yiv!ICG115_H&oHj5!}n)D6_H|i!CRk|
z?5-%;&JE~f)ii1xf!UeaI}DenMt$p9dP<Q%<BXM%KhDZH$6tppMXr51sY!@UZ3>h3
zj~fR{o9FZ@x4$3cnrqW~79mDg@y8Sfae|DUJf))N#8XIcYn?M7WxHI+0n$3ZWNqt9
zQx@7+39bCCwN*ci)!SowlX>J^_EA;uN#i^ZJJ;c+)fszKv-8&1{IZMe3B7@6lfdrX
z0?xjt`VQR?nwXAvPvPgXhXu)9@MCAt^NOIyHp%po!H%$s1!?Sz&BbS>wO}E46x?8s
z(lov~c9TNONieo|OcKvd-Xdrr12S4)7HVGf2mJSchZ=uh0Wwzj#qVi-A%&lZ)A)H>
z;U`9@zhFDIOrv0b7_p)*>k+)YB)?Q&-mK%WqRu-^`-*{o1Rc~LqwK-sa3{G&&-*C*
zoUfWp-g!Peh<VdKoBNsn2puPP$3LX9yM#59*cc4YJ<`FZIQ}fNJJIV#iG>>k-*c6<
z(3sZ-_QrE$K%R5!P)VJ-c9S^}UnSP`;Ch-N%dw!?9{dPDBtjXxOWqRs&eoZvzP-s+
znA=fOH!tsg9%5Cgx^}bGydlHiWF@c5r;TSMn*s?!+N|+MD&0*>0oTgAR<&9en{7JF
zb6}-@&JJuRgD>TkJ^o1RgL>R7w-TOE+3oom%T3-0AGT&6;nnH9Qapq9-J(xr11}6D
z+D19=Ti`go9x*^GM%S1lY)>=0H5B0NT8b(BdplXdK7KWQS_ez&l&Yf9lMj0O{qqlk
z9?4t+%ljQaa$?upc{f-0%DF;@YSc)E6WN5@gR6LJ^$YV#lJ{7V9d*K>Zs(~msNSR(
zNlQ=$^Ia)j(czxYIP3~!u9i2^4$ZeZXqJ4ke-XYF?SPkp$1hPOez)dXk7zxHBp$TY
zhZk=DPlRtpJJbnEif+<)5T4b#F<X9^B(35Y7j{#|J-YF6?6XRD%oul^W|JjUvc4MY
zPH}$L%$B3)%mH%rETK@7aUEM33HA&$kys|aM~|oIW8?Al8&qDT>xQA|4HQH=gC*hs
zxR1yOd6AwkCy_@QIq2syA6ln6E<e!yuuvFb*Ze@7ijW`3DwGAF&p9POP*D2g98dat
z&{6%Zcn`&L5}oP!cKXE1m@NO;u{f<ZvaE&Uk?BTfq=^)@n)Qcqo5V$8i#hj@B&L~J
z&gl`}(kd0rhS-;~Px$($_-uMe;lK?8`lqzR)N96x&bG_#B*B^-G}2wguGXb80Ro@t
zkn6|K`{FBk^NQKRlKh3gm|;=#tdaSqHFFSYVMt1qH9r~rb<OvZ3-y~S-^;r#G?9i+
zuaL}djh~ceCx{`<OX9sj1Zu~6gc>1y_WZx9<FA}A7V(?((?(4NU$}aGIf<3f1Iw+7
zr>$rceyeq@A-%q%rSI61HR;2sG4cq?o4flv`%t9npzrvPqeVx=ZYC<-2c7-C`vbDM
z1rA38bBHj1Gd4JC|1=o2=j2C=xcs5BYK5d;dbzQ^Q||bfU0Q)X>^{JeT<^8rMO&v*
z{8`C*eqjX$gpGsLoP=(aqwpyU(cSEdr^D83kqd9BqebrLIa%)HfwhGbd(p@$08-!p
zpw50<ZvqsQMsAh-YSiMSyK8eSy5*^kz|Sum1Hx%q@1+M49DK=G2@aeq1GOi6qKr4r
z6SPSQPa?pLn(O$gkkalB-rnBnnfxxPQy*!5Ci6k2Z|`QsvNU~gqnt7CWH2tmL%2D8
zkF-_m4Cj{EP^fnaU73klW=`y4c#u&e_7N-krs!%GxBN&7peF_$?X;tBs{BQA@z3lI
zp-Z3eoj%{WLX6Dds3|<RLlOR!rd?)k?rc%~Dp55yC$^2YV?Q~r-OU?>9l@ULIQ-eA
zi`K`|<FTSG*7!H+--iP}cyK;^Fxq1C*yb^{SPmVnzf^qgz{mh+p!YA@-|1ZedKSv>
z*nIYA`R0Wj+7~sn&ei-d&F{3jTSsBk+>C$0wZ1xANDI|*Oa&@WUiB5%-_Bl29kPoQ
zlg(dDyl0G>E&L3Z^2Oo{P9I7wZYwvQFpOk_Dw?R}BZ8(Xd-2Ik5Pagmm9&15Y1{Iy
z`idjdXx$Fw#=Z)jf7NUZAq1rtRkcyRGfNu_QC?J%pegLpVi(~eY02$|S<ln!H8C<b
z(7GVAUNcQTB|YlAe}7l%Z2kLMoo#)Hd2Q?gy#VaUpf?)KWX;DeYdndX$fJlPcb|VR
zC0pZ6$ZO=d@(L&}RLGH{m;XSvZ7RjD)Sh**SeoS~4T*x9dx(30bJoZoQq$tT+hN?#
zfp(pruS^)P&KN}1a|U+6)kNp{v1&-B0X7n`mr9e7?n@WSN6`l)aBJ<iFkJf54CwIZ
z!Oqi6`+MX@+8w)$80}&?(XVgnd$W0I?!aOhY0<mlCSJOJ`tvuNmhQu61R^PNN_Mxt
zlY$=|iQoaQl<fEVJKb~EHBlW1@yJlIcX$}=;)#N7ka|_&mejd_I_C&fo}H<Z4UVed
z2FXKL>24=#D@}iDv&<e@+{DG%1Zs#rr3fx@sQb+6!bIBlO}h^77fC&3vTMBq&#g*#
z?XN|TQrpd;Ve75|`AV$}TlldEePraGh^TGvn$8XR1j+20{*R0vByl!UwxrH4UCjfY
z915Ce?oPY`oo&cf4lBN1K}1ZP#Tng&h-#^HfBcIy1glw_Z0>N%yd9c=`RyVEy7vGH
zDq#Iqx;cy(V0|?tvtQLZt|Z{Yi2)R_RqRKr1QZPb5wI)LgkdEJte@T&KshmO$sX71
zGJe^fo&V#bbP5B@Dud$8eT17c>men-R9ARQB;M;U#H|`w7}=*Au;syC**A)J>SnL9
z6@5;hD@c7iZ{32EbK099D`d^YE;gOKDHq_Pkmv9;KX%Q5yuU3xIR}@9eq(sd+v_U$
zFe=syUD<u+^YXx^Zm}jiZ>DYrbk~t@&&hiRCGtStO*{?8p_aU<ys3UG7=I|UALpqD
z2cxMB{to1wCOy;PB|lId&iuY~SiaupZwK-|nXlj9sNc_<)a5<2P|Jit!9joj5japi
ztsAS;NZxl7YsERYVlG!ai=deQH(=Tr3VhhPY4+59qi@U2;q%-n`g7nMKCO<PZS^e$
zS5U6QnD-oubJMY@J@|jh#?b5|>o<ntN49JXU2*e<jiJFeKg+kh8~L{PxsCO+k2G(r
zk005*>9g3DP03jEruX-5-gI>5W;!ms<13x@+F$7t9NLYQxrVW__bDMeHxaUX+eJ;A
zI%a~CvYhs98~5M(S$+JKk~(>`5aOHusWC5p_fh=Qdl)OTs;KhP8U_(UH@4jIoUyXp
zC`45~rLb$mX8pcG<w!53{w$@+q*PhgQfhrL&XI-u8D04QbhL~!Dc(=Svy~b54Cb4(
zStf0k{cqYF>bEpWTAK8~X-VBOnK%S=ze1>yyOmJRGs?^&E-rnC3zLqSMTb^Z(_2y7
zKu-6&#t)lw->rr+jC*bnd6@XHnha3YiMncoFe51CD3o$^>V!i6RF?5)ra=225YDa?
z;XF(E8^Qf;LTR^r5vARB#NAkb%aK<$y%pO-g`a}hiBe(w7gd;eq+??}d&x~N$3CRO
z9Pk&F3Kd^afw%NfapWL>Vn;W9w!3N5Tf1M~^z!caHf`E{Y|~q>zOrf4t4I0&f3f#2
z;87G=-}p=}FoA>)k^rtKg94HjG+99zAd-O@=)oSq3+k(~Vo;*12n#cSm%u>JK-#t?
zUQpg|*Im?Aao1g06^IvL5+IWxY5)}!RuT~CW>5lXZd~&Jo$8*+Bu0V(zvum)|I71`
z>8`4-I(2S!>YTcq1fxTgc7Db#`27Y*K?37?cv)`4^KMAM$9Nt?{4i%2QocjVCrG*P
zgcHnb7qv=6kmp!OF}}p#W{l~`!g72j3c5fvW91`1m7}Kex?RrX1D66Wz9IosYlZWh
zK4APW*7<OeIl3X%t(bo^qvtshuyx5NSs-&ntP65WUkBe5imDIzcXX`8U!g-~d)e5|
z=KPyRxoWr9Zi5vt=XxA3oah6$I{M&D0S{tH)N{KcBvqabNrfm*1r@<kY1=aQa~;Wm
z?E)x)o0x=<nDG#eNXLV$<H7cJoG@x3NxJ|@q`EeMD8L`L_-}Y<Cbhr1P(_4^1Sv*{
z0y_|<jcArc6G$4-IZIwboJprp)V>vil@a=pa<4iYv1xpf>ZD^#t1YY|-G-?b;`mFG
zfzd(4J=|griwmF<MRf|dv^SDBy*z(L0!M$7&q0s<ycjG4e(hqh6|&APegQ9H(E7wH
z_Ke~S(STjCTS*GCcyj}&>d(Yt2ttd)+{#cJEAghrVxt_eH+RRhLLI#eH60mob#zD~
zPuHsA2=q_w%$oq55q6%Y8#@Zcx>TGSM7+}g)!#t6{!vn_e<a0fBO@V;j077Q30Y($
zJW58wA7LaMgORWhMuMgr3DbxhX&P<U@1_AUA7<EjjG_NAhW_)YI-RN(i&KS+Epxg-
z7yHI3PjL9->EhF9n`{;xh?)ZzXwOK0=A%FJyAX_R_X*>d-lvZv{W*i~(2i^}#OJ(X
zf4?WupQ!!Vd}61^<|m(5)niaKx?@3ixWzf>TZ=9Y2j%qs^fLNW|47Hp^^df>QBlLZ
zxB_|=9ZHxp%l<z39a)DSeS|vn=p*g#5UZPXHhPrM8iA%`9RVW{0#av~9hiIr8E;P5
zj<}=En*k5W<$U87oL$fustxr9Xx?4eO@2MhlMwzN_G!P>tI(Oh$sVWqz}f6);WlPJ
zC(eo3&u^pdsQug}SGS-0>%aYO!0)eQKVL<1P3!$hUVp0PIP;g@1hSYnpPIWdVnieU
zgVP@2joC7*mRn+9*oqBJwMFdb9j)2V;n$j(9B;Q~L&WU=!MJn*hR!DYc?4LS>de8P
z^Ru6AMom+wCfI-No6C@v3P%U_zu>8z_A~P*{jdFeR{Qym82g!L_Ve(cwV(T(&3@MY
z1DgV_*DuMmh@A|Ee=143hS2_jqL}Y9`DojI)}CO+Y5cg*_VYyWEwi8h4dMTvWIwax
zvwmVfYqMaaHTi2Uj6UF_5_f@3X^Qj##PgnykXm5Ji~P?rrOSxl4JFgulzx_((%NQN
zJ}pdW?Po<|ISRLKKhp(Q|39;zwI^X=O)LDV{jAZt;)nrl#`Dh_&{g2-|FxgloZx@$
z=l{p-=V-vHN!2s|QCs%(sd3DnUXA+(bbs_K7}av`Jw0GXzbfogV^4!>BTqw8u-U4)
zLH!Rnq;spz44Ba|_nmxe{|ffpCD)v9t@}LJ?6ubI$$f5+^@i`vxzF{p-teP2_vMs+
zr-Jy~|5SPIzrB}x$~K>TPIpOPMke(_wBM>l9krsXF!LZ28s6}$eXW?#F&6X}ty$0;
z$>N}6T*yK3Zfo}QM%Ib3=9nIhH~-Qu(GbMqHq7r#v1Yy2xY%0b+EXh{FZH_OW9y1<
zPhGSb9fXHd?Dcc8oeLwrpT%qsZ%cbQw+f8Yk^Q~h%zpCX*w5Vf+&<H-Uk7vhxUFAr
z%{33PeqEOP>=0}J@?XR+#Am+;C8jgxy1#Yi+Rm73H>>y&Ab2t>JgN1<-?GBrvBL9#
zK{qSxY`t&|E8Lj-@{iV|Ww|dOupa$7_vJ6FM~~#b>b3T({U-O-N!ETR&g8x`zEA(s
z&5u7<W+#p=2VxnW%5vYC)2Dwi_`R&L*!y7aJJYTGx8%Mvtxx}rM%qoxs2-X7&SY!<
zt-0^q)~EkwJ;w!>btRS4dHv*^zVvLy^+w1?)E^hi>xX{Ml89L^)!be-=y@K3jgI=5
zwfq{%b#HRJGF&@4>NwH$h0vk#moV@95P-%_xvtu6q&swn^L5P}&a>gX0ItsJZ)X0b
zpV-Tgeem!Fko`qb$+`{JSW~~j9#K6hbU5=%`c1thwL%W(^T%SOwsoKkb2<NuR6q4T
zMrfJ1HVNvlBu}~wL3kiT&4ecq{#lE;kXg(dVJ(Bu6fYok{{7FgxDjt|-Cj;=vX?Vq
zRLA<8b6<weN#G2k(M$3#9^Hs$KkIM45Dm2SH;-uB-%KjPf#p#@@i%Xb*vkFSW-A{6
zckBL4_?t_>IOK26J)UoY1#s+)Wd`BM!Ylv_vj9xG1z;iz;8;o`EP!Jv9bf?*^LElL
zfL8p?4@LdWM#cX|#SHtuyyouE7(eH3z62zP&Sb7;iod|k%v{YztG}=#<Y->0%f4mK
z%2plC?XP$ODvr9D$);%GW}XO|iFI%>Z=!w}F6Q<%$DF`>BM#=7tvZ;`qvpU_+{?7h
zjk%X|e#XDt7yjjM$iMs*{L48tq26AcFB0or=21h$wH!5#iC^2YhmVYeGNh%J?_G`u
zwv_LEJh`MDSkzs|(=F;^<wzXOG3e&g@pMGTkURC?>|Fec^_g??aT~zgdDFOyIQ;KE
zjq5%E8-=>#R2By}V>A8v1b<Ey)1NK)b6+X_`4oTlhUm{{IArEj8U5L&-wW$0p2m4_
zxJX^uG;ZfM?9^<;KpOa=4}cQGsodhu4A9b4c-B+tzPf|ebh#Dcu@p@UidCFg$=QlM
z{pWVHOBK)XOKP#fjdNv`<3`9sGZRe{rY1i*K}qX$gS~Md#%J`XOH;cudH|$f47CBR
zgWFlY<FI{)=0Hp&FaQ9LSA>hJ-L{XpMYrLN-9_Z42W+MY6|;3{`VRqM=xe}}41i{&
zaqWVnRopGNMsW8Tp0MKsH$PtZR(=<4<w2tr?HULyF=5R5VI9}NGs8R4dUiwmx(arw
zs{oRAZfQdLyS-`o@{Hb1i2n~#7~(&t2MMPG9Ss`D*H>H$%I#(sPB1|5)wS?2T|Crm
zy|YWiJp@a;n_0aP%5XFG0q)&q9e6Ih<HFJE$Yl{)T>*d%TJ6!HC^Y@wf?`?}ikI*d
zfx<ZWIj1>2Js4ScR@9c9X++S=>Jm?KbFjzgXwbl>M#mC1P0|g{o4t#Wx7)0JbSa$5
zZSY5zcA>X5{&)_pHRq3YNMZc(9zC?+k2oM4{1Mkq{)i*~fG}T3{@9AJr>+O%0dRye
zXXB4w1Bx+GDDv?Xf#U4^aVo+eUCxO=2<+W)+Mlt{qAmVNxnTS;8?80xkC%|b_~Utc
zXu%&iiGcVczMcFLPyB&H*e)c0yoKY%bpF^+2aV~v{;c}r*MOpb6pG0)P@J7V>LUD+
za!&j~VDFCCp1?h9ZShC)1>=uf&{}i;$VUp}4-Y-G;Ex2IKN8x>AGkw!c0=-o<&USZ
z4n*gVjd(g2{`fVZ=n#b>I|hog^G9`rKa$UhKM3sI3EJH~+UAeW7mPoyMQhFZV=_`0
zf80tBE%+l*=a0m8@<$@^N9PO69}i=3xXvH1;^|!Y<JW-VAnxMSp|~^#inH@aWrROE
zpA&x&*t-+85ooC`{n6=y@kckb)|@}Gk;3?6Fg>*34}=<MeCg0m{^&sb(dokShk#oV
zb;^i%Iv4)<HJ~WPJ!U!-r|}el;_UnpjPOUNbK(yIdv^z|7wT_|KawsOf1J3eC4XFs
z_8EVq(L)RVz~*e?kB;r+kB-D2Nf(ws2BHT#Wv1dOLYcGKr@saiujAfE9g6?pDFVgW
z`NJ3CkEC<r4+494N9`0QjBW8pyIdij*5)reXnNXgetQ}zj6Z&$hZg){(fI=#`P((W
zg&${j1O8k{`!pF~>XaFcrwC=v#vi{16pLxL&%8<N@DzdK?EGPh@Q3A`_=CXSZPE60
zX`4SfUNHUfE?R5OAOArL<B!kjp#^_nw>jyLq;~QLRLATF$iao=k0U7&%3J|}Ba}HC
zfBYIyOp8MC5}qPZw80-|4F5;RbK(yIdv}ud5w=gZr9V1cF#dQBtu^Nly5*kn$9we9
zf<LggnE0bpJNW~q$Lt1-qZg7twqlE;F1hglI6|4T@yD+L#h54*`FM&z(FT8<GWesz
zIq?U9y}Oh4XV9Q6{z$xF{4pD?HRlgH$(QlR^YqYyKhSsLkIwDn4@_NVH^2_Rko@r$
zbehf|`|%W^%-Q(k*MOpb6pG0)P_)4xbq0SVo)do%*t<JxPhgC1i$4-B7=PS?)|&H2
zK2jKec<7-8e?UTsKa$(YA8>ulZooYLLh{E`u$guK*odcd;g4Sf3OZ|8hax)$iZ=M8
z+Tf3bbK(yIdv~&SH|CIS@kjgx<Bx06T66xGj1<Nnx6(rk{=nEu{E^a5{($Rrb_4u?
z7m`07hEGPP%&T}h7ykG)pg0K6p$^5RF;KL@AC(4w#Gey?5ZJp@G#q8rCV#|TF#hO<
z)|&H2Hc}XW45o(``~eG)_@hfZ`2(Ss*$s#zTuA;9;PclhBjV{?_~X}rq7;!S9SU{_
zmf_`ZgFk`>f5e>=e-PNayJ&QdbzAy_4)p)!LG#w;w<q*CYfSw1Qnb(bBaI$f@CW8@
z#2;Kc`2!0UW;Y-Xc_H~@AbOxvW-6Y}g+G1`C|(C*bSVCVrw9~n@Q2Uf5A(V3$8G|9
z7gyK{=|4u=&#&_M3adLlj;!ve-R@ExN!7S(yd!Sw?1DQ$JzcP3BPJe<b<5jb89V0m
z#Bm+nvDmE#PARE_(vp*(loJ+Zl+ohPSpLKb9oV0VLOWs$HN~IXS`V{_;+eD_#=!zt
zbhMR=f>}RV57Ted*K9q^pmF-|kel&K>tUwTdYA`Ja5Fgk$9k9<rwB)zrg5k0@o=hS
z8h77m!qDbv+}<;I*jtJ$whE>~UmVf;0+{CzU(!kXcRb--JhlMlXV$+^MOXv#yXYDi
zfWekrG_8fXWW2r>2IMII$$A(9fqn2xU~hF9OgZ8^O{+1E;*Cl3L3(Jp3<itb3(;-@
zL7LnQb9IC{z|;!nLi+k4ZrIe~-|))KsdFalSn{KV^RFybuk3nMrrnFxEQOqS6`oxg
zA9IT@#{(`i>{P9<!A$FdqX8!m18XKMl+&Kcs9@`DNyR`^ei0M2>iYBjB((HOB((J3
zdT6PQWi7xi);sAlp;BlC13AMuM~`YK!S-RCTl`@(V000{z*b(MtR!_o-UX`u?r8Pz
zvPe)#s%8TnqU*gQYj(I9=mx1IbY<Ao;4s1V6(=4*Ohv5k!YxU~C)!TDfxp<2jPs{Q
zHEKg2V}`1W03c)TBzlN4xBY#LTr^CzSVnR-dcbIDFFmdTTsqS(!c*(?IFIVLM&mzM
z7}d8y5407f$0U3#)~6Ws7>hSX5169oPmd|6tvNjwA%)T7QF@4>N9)TrKo4Cw%3BBr
zW*F@y#$OP$(TVXRo}$F~18O8K$7Jt3svjAx{sp6YMvU0;@F((t=A!i2j1Y}jpUf>u
zA^BK~H%1Rk9nYU06{xK_J&q%V(L<w$7<$0+C;4cxOyX?v0jEHFNzxgO>m<p=Q<Nml
z^woJ(|5h~e6mL}DhJ2u{C_RSYW3j%oAs<)bjnM<Hp7W<i4r*&ok6ffMdi)nX#L%Pl
zWeI1a2b_5ArN`sZfY5dp5Nd7wIFIUkMXR4}RNn?Y&{mWluVI2A)^{@K@gm+BJ>Z%>
ze|oG!ZO!Si9Vv_+<@69k4|q;UK3XgTI2%3SbZ;*`!kBdH@-Yfvv@Rd#QT<cV>i4tw
zPMhO7+KSR69iNExNd`SS;*HS*p_KEdhZVIor^hIyFnZYNA%-4s*%3Wjgx$|Z4+P2D
zOOLyvp{RFQD5^F2IFIU2!AGl;`xc}6Hsk|sMd=a1$6~$3pvPRiF?t~MdH(b$L~YIK
z@eWcLJ>H~;7<$0-O!R0G<~|!e2*P&FFu27ZM?*iC1B}+?<2<T=I9mNi7FlXjKG0T_
z9zP;RL-%ax_U<9PF?tYt{Gy3mYpxj+z-dm8%aOw9aWOr_&;ub4qDPCc^4aJ?65LLD
z3`Z|@27VS#t<&Q?s^1fh<Xmf1--djkttdV2$H!uQ2ZJ8B<BidS)aQBAV<u{APLF4i
z!ssE<Lkv9tIMJg;824=Spb@T}^!Nv)QKv^7z-XNw=TW^7t^QR!QT1)m18qg=@dY%u
zSdYuh*nBXAH%1RKFV34Dm8h*bJ>mc$qenfmV(9^KA$qh3o1TpxWC6C59+#kTogTCB
z)H*%Rqxz3voaoheGpcWc9%w5{4<|lmcQ-M5T#q+K4>G^cn;sKUTXTBMLJFhDgY*z1
zAJF4Oj}~Fdv(bZQNbRJD91Sq-W1*ea#`E*2eqgkE(Wt%+dZ4W+Jyv5TCf3Ir^6>`V
z7(Hl)dfxO1qPFJr*oPEGkFV$<h90el1<ytg@*uR69w(y#otpth>+*3P)&DtK{RtK?
zYExgKttdVE;S;eQmoYH;=z%vz4|3m}H$5^@TXTBcj1)!>7d^z#1LiNuM~g7r+311b
zQG4m}5WHo&LMg#h>-0E}>XW0@Pc^D<Lq5<}lpf0v(h=*;20fPGjnRX=r{_(N6{xK_
zJ?KDdMi06fB9<PQmk~W$guTv25Ar~_Q$BX1F`XX20~oE-<2<T=B3k_pJW=&+&;xB5
z^q8F_*5iI~x<8`5-J4c8`yTl6=iJGgx6pa4<jU{Ctx4-nktp-CaOgjEIUM?F&%mb-
zhkk6FssrLw@Ta#HpSpv-X)8W;ZET_D@hRU8CeHsH&><bec4p3BNSKkT5!AuCL6!KO
z0Z#FhVcTW#jyeE3TPjDuE0?3QKM`|EhRHM3glNf(UDyiE1@iHE)L)KNhQY7mxJ4^i
z#;{yGKVO0?P{Wtee(F$a5z_I+u&KRS#<M}>;X(-y?sltW+teL&3Mkt*y&d&YL~jcL
zgEAd_^HWXUJEc0b?0F7QZS8`CmZUSdOdK1v@lhJtevql5CVVn%>Q`~IE@c;#(@XiV
zj1t?nS%2o0`KiVw4<_nb0=F>=zb2EMM7OxJ`vw@kP6B2fUx5NV#=r+mMB(d1@Nt2I
zRJcLh2ju=AJmOM>zJL?gbV%D=z%V}UWkFnN22JEJ85(NZLGYDa#7`||rvqnf!!_B9
zp2Vjh%617wSPRE?oWT`mPe`%n(fmB!a9254mpYjEdJ1UQfM%1?B4|gD1*RjHm+Gix
z(?zo`($BBp#bBzQGW!R7iYu`)>JVtc1v2;xy10~_)bQ3O1Zn>uAe-Y0{d7skT+(*B
z2jn_LJ3U#v?3#&-F1W%Rf1{@##L(=rZTIxTy;}*X_%paGF3ErlT$S)|kADAFq&<qK
z()}C8)f*OdzgpRdo88R2==uxaP*b^nkwg@NCRkc~V)Uf?a4SkGC>?t%3a*Lc)^xyS
z@BZ77<C|}WluRdXpe^0XGCJ7_*OD4PCLj-QG;rd_s{dr_KXjfH5+~|EQ}myi?8oWj
zGMt6@zXJbP;eQbSEAYS4*q@I}X6R0`(u6oO1ICLJSUUPXN~C51&pKcmS6Z9dH7dT3
zQjFx4dU9M5#vD^q@-upJJi8b^lI)oeqC?J4MR`6Z9Ny+5?to0-*39exK1sj@;5lae
z;o}iJ?*uCTZVYr=9RBp`Wbd=Z-sgnVzr*_pILPVW?!6Su6pq7X4DzJ9`}nKU*bS@R
zYv}qo@D*-5&WsE1FC5m<i`#q}3M2Q25UUJ}^Wc7)3e*!W$y0~b*2nDkCjOAqKm9Fk
z{8JJ+%zUJ6wc8d}v71lgaleS1vi>UlK9l281+GK^MuMK-qHH%9A-;na?`~XR0zL9M
z&AyeyY~&kPq4@F0iXgd^Y+WUNBuxqFqLkKHOP3!O{|Cq4hQmTiH|@*6BPi9e^VqX1
zF|2Y+?goW6pPs|vjs&PI9G%?-3ic1&M?v0PN5>oEJl0_GzBoMEO6GS(;zr7A3>n!>
zEMoV^Q+eprK1M$Ho4wmxyx$vn&nnNT=f%%@EAMd&(Y@j`ae!umnSp~V?-oCWMCjQk
zDYXx!;^j~DVmDs?LNE6kFE8V`6f3uw?q&jvI7VIkY=Ky{ptwE`10JKRQTv?RQQ4e(
zP|2LUdpCa<);9kqd}8w_;mBPPxF3|R+Bj^T`>FB8&SLgGZ~+J&6iafrr9r?ZmRRTa
zq#~$qC!Mtu#If-A#9*Msc@PGmJbp`1(M0^}=hY>Z(Typ<-O&vOZdiL%BaYKXrJZ82
zz8R#6<~L=~{Yb2iy%GEZw55btY8S9mx6tgH1pm{d7owmebtAn1CE$cmG4dKW?Nfg&
z?^EXeEf6uM7v<i|a*H)<pE6HpgSHV`Ho?=>2izwEB9!;Wx2`Jot@1}R&J-{HK5o;#
zQMEx_aL6rQj-z7ehOlaOs8@vZn)C0hpW)w!Tk`K^;NQmx3Ff+HXLLvJBVzoFEKeei
z?heOqW}Mv(#evWq98G9&ceoh59l<B#=kVJYcZ@z0KZpO?^iDVkFQswm-1vEUEZ+ae
z^YavgpS8c!n1e%Pn)D6P6s*%0KWj7DmvlZ)gr7U>Y^&Xd92^x*Cm%)d$<&LMjg(k^
z)&?R0c>BM>&svap5&U4t6Un6Z7Sh_s&)OgHX%o_#p4j+L7RmLw`|<}oQQBNNH$so)
z9?Q4R>4>x3pc)!1b1x!*pbfC(D`5%vlN9hrK`$;_8@mVR0##yAVi)$BaZDFJ9Bamx
z6}(u-%^i!Yh5HQbIR6tpBMup5IA&=*Dl8vbHfIe+yrns)Z2QoPSsn25qLtQ~Av2nx
zC!(4Y&8qP3)?eePMl{uX?ik#*^V@+vXZ6rC5{#xSdQ-DIMC$b~^+7dlOsHlc%)+(T
zj-^u~O-|W}T8x&A8ocHF!lPur@S>VCYYeHDL%xi9rryhP|BaLFg1IO1t-ZMfunAp?
zH0Pci{K=b=d*c2#`|UG>S-0ZA!uxdPu3BergY=7)y&0Gtk!mGujo`S&6<{@VG^?qj
z6?nZYrlYt{IWQWa4D88?bk_y?1Szose>$2_Q}LOg_Zqah9iL*1*tr9(vGW?uTWA`E
zay@c3BF%WVLIIiBYmgC_=~GN3vg%l~ISWu_uvm)|t2%DlH@h}i`xTz(P`or!o+rU!
zj9G~<01VV%y}>JB4&s&8OwzOSp9#uU#|<_8{|^6+yD<Dm@{gL1>Qs;L;O1B!oY<TP
zrxhCfhhrA4N7)gn)}!~tu?p^q&wb_omxq6i13|4<?$}gSzx-?OT~SU98RJu{+=#P=
zh#RNsfRN-8H;&d{nb;9G($#0gjU9DvG#K#u+;<+aUbzKt+wcuB_;&pN7<_1fO=R%l
zixB+YB#RjT4F08okl5y&8L*)(1~lx0%NnL}k9-Qe(W=vYSiLxNZ5lVT9G<4kxjC2<
zB78RobJ(3huytS$SP*tt0=Jmlb&#-BxCrO~GzbF0FCNAbX@{UE!(LXuk&Ah3v>N6!
zxDx%5N?~^JWL0*cy3BQ$0kA<oW<29-zoO;CR6E`D@*mcG2y0KNodsy8g*_MB5W#y2
zMUZwoCarTYO(r9c3)Jd~_gIk#@4-$8Cl@%bC+1}$u?ii_LB=M^coP|XZD=G>!%zMq
zz417`e6(9s^l3e<d25oM*t|8rkw~pE5U53}VmLC`pmqpn$&J*p8jBCs@x_2b?<woq
z461tugB*mSeo~!ts-|(@?85(j_`jceqqpJt5L`~ZV+1At8lD+m_UhF}Ae}P-(CNte
zLN8U!xX{rt6J*loKVpex{#`ARzC^F5IT{u<uUxP96C@HhJ)OYtp|=PFh6|884r&wi
zH?Q40nQ`CethPB5Kv!n)<k1*r*o%r|XmykPkmcFrztKA|G&MFK<w@83P$k)$5w@H&
zo4#zpU$ObPLDkVQ6@z{ZePZ*krF`qp=Xaz0%;x#%M$^E+>@VEUBX@*H16Lp8O4u%Z
zpnP6ux?eQ~Pw<=Jwt51Qx0QK+;ALFlY#VFw9>x=HSsj~-i$LWuJ@M4j`z4;Nc(Qu8
z;%NY$2H^AXhUWGon=g;)+0RsM!aeXgxF0k-+XT#DU3`cX8SWfra*Zl*Cv8Xk;CA4#
zuq0-TzXN~9Jiv9Gkjix(i*D=XD9YL5zE9m>v+xLcCE#G`#b)}vG#R(Do}`Pml-1-K
zQHwvR$27#_j$HLBr{Z|Uh5>W?@I@W0nRNFqCfl!8aL)#DZ+bExf(|j6nB#+PQEhS|
z+)17w+)>ZqkpmB)?wIa{^zL!^p1K!aAL*adhyFNM@=`o62kt-?*L8F%B^B|~XbWDf
z;b-&Itq1EHW9i@IkNTPZ!9n*BI;o!Mg4>Jro=PEgNHO)5IX*qTnt{&+7NA>t7eK0?
zz<;$4|Mdp^tpDM4=!7nxv1kdu4*#l-rtnUK-*Lrn+x`4|p8D;9dc*$K{cZN!?YFt4
zFX;mHt@>TGpEZ7oD}Cw0+oY^uHP8L~T5s}Qa2wn2*6$|g<#=39PWhE?AfdA$9kMrm
zDM)9+UjZL^>gB!b8pG8Q{OR{6(|y6px``NWZ-GOu5EPH)7u?``LhZbPFvkU|2usSk
zXHeEIZC3qXRAO#`u_H+L1@qjPGAtCDbuTY3qY^IV3A$kT5d4s7ed&7N_tGUwmON>7
zE?m~Gtfo>9bCr;Buvm*f!N11aHqM$2WbFc9CFriHe17330?8q%(VLeGYl;)RSHX<`
zj9bH6vKOTFttpQ4Y>>*iwa=$4MYYrH(yhs7!vECyk(H9l?Epl6K1D%3WuFQ^ZSZ0A
z-tWHXpnV<jsOG_+JoTn;!FmS1^b6|X1;thNvN;w>5UL&h8iSDLGd_s%bf2x!b0@dH
zqo`(zbxCvQen6`;c*R?Z!%MSpNNGw#Ws*rvudku2ge!f+Ox|0Gti|73y*Enn%sm$)
zTexSO$yU^s<<{8E@V(=T?-Ay?%W)6-F7>}X#J~BwK=~!%k0N{*?H3lSn~JDg;lJgn
z`TJv?cZU9hH@|Vg-1Oqgo(m76oGGcABRc`zF_{)pf@yAQab+sEw#LYDm`pj`nlFnh
zElFpRDyRs2qhm|)RUzpf;$8bBJG-u$$L-0G@kuLUJ-uZSmE({z?+Z~gCSWY&+(b_X
z;->M6bCXLt{UOzktE88MxwFclrxkCJARSd_*8+oJnj3(|BA#2{$ya~1_g-FcmkPG}
zSp%{GwP|i2dqGET{V20b44DPx4`#jYIcuAS03bZHu@X((=a8;NRb@?j?EzdA%^RF&
zzlU!9M!)^#-s=V1VNb{nC$5t6&o|;t!d1@YqihKaXT6L2tykiHYfne6tg~~I)B*gw
zf|v9=x5F>adyWs45+#6&>uMb1%~tPf?Fqc+sRye-7FK^mJ~8%9sw8e}!D}bb|2^sp
zU}KQGON52`;I4HEqgSk2?i$f)KEf*QX~PZM^U=;v$0O#C$F<sMO7{wbUg+GUYV~Tg
zgIZ(!#c|~u^VI8EHLTtUya3hulkWlR5%n<aWT;;BvypQ;kF-*qT1im(2~7AO4E+bi
z_xUaQcm>etPH{DL8*~m`A<i!FuEGu6QVHGkt<~Z~gI}Y45sYz9kS0S5?I?BrfHAz5
z6DeK-2fRx<P6CM`!uvybL=!)7Yr5N|ZA#j+O4?0<M(+a)8;Fq>%(Fw$6?C_YbqNa|
z-T<WpBQ=N^N{QzhZhfjUt^&(e=WG-kuEvm`<8ScrRMInw3YCsAo6rt|3MlT~hK%_6
z8M5;SyA-bvCYO<Y;q;e#x*3giF6bU!Vf3e^zn<ZL?OsBd4^Zg%0xQz}nN09VMGd`A
zkaZ<0NX}g@sZ6Yk<NWsmY_YDBXK+ONLZ*9B1EUP6LYh}6KNonEO#?O!y-Ocjh-Fw1
zW^i{wnM5HII5N+0{t2kjH*y%~ryBtncKhN(m(-ZGJ8L_x@#NNH>Jl<Ll>e%b%Iv<A
zN!(%qB^}Bgf5lrOxA;1|iK=}BmTVmXD57?~i`EPIYw%LMFCl3QFarE@OAa8xB^G0>
zIpckk1<gOjr!Hk&9MnVwj5BUg35rZBhB<4OF5;zc_`q(?|17~}6!5={0({0-KuHmw
zQHF3jVqQg9G>*hF7WG3lJU6PCSA@9gJayKZ(~Vg*bkDm~!e@NlnBMi9B$FUJi(oH1
zgN$@`uB%BarXeS)pPLO~Tp*JG5H}6Q?#J!|aqI7)NwnJ`5@P)@F7QvZj^21(3|b%F
z;29*>VUvA<BfC9^eGAOPyx$TowPnZ!Jw)wxjhr^3mZ_DoBwc=hAkT+x<xYkd!M1DG
zzd!^+3&;V&5OT7%JCvIkK^l_g^ma>MvwHLNdQnD@c4*JDH|RUmA1Uz=HCKN%$BZ?g
zJ|TkHMPnh`g0x+rZ=I`n$z7y+=$-@FT?B-!!eGVuAH>(_+;ix<3#bQCAP$`WZ9Vx3
zBn#3uZ8To<)SY``N2w;{qTj~&LRRdMf5yj~$VxgxLyffK1MnV1doKha6#~$gSrLMC
z|1P_<wK4tV*GVQ=_18F(`pxT3(W=pLEtvjw`W&i-R6dc3+5I1o)r+=LPsCB(jp^^|
z_4KgUevUfg9ew&`pt|t8hCF_NNEMauH7y=L*(ZODGpPe6oP?gquW(6UIZ0GY1nF2-
za6N&m3SW_V^{54?p?Gj1V5-39vn=sY8d*WL*JM;D=U3#Zx#@L;K*DvNx_UQh0MI9j
z4;>N4sM`~&c!Xj0=Y!REa%(Q~!~L+8*ij#Z1f^eQdS|ltI$&B5zQTat*D#P<R_trI
zf?HPN-{!$$iCfIPxY6w2?&*wCc1w+eH(PN`Jp?S{j4*Xj0_w1fr{lS$JJB7x;xtQ%
z)oGng>eLgb8jYrIlpIH___!My>w-XHjpHWNF`$XAG4neV(;JMG^L{sCpa<5}FxWe@
z^jzg}b0pVud5ifYO56^BL(vl6?=XAGA901}QEp8S^dgD+7DxmZDGVDs;B$fXL_2X)
z&zM0UG!K_Xh`QiDM%4a4fT*{)8Bv3vD98z-+TTyW=MlPkb~3u!Fz)`J$mjF)&kuo>
z)U=kLGj;&MhqDjog#cO*jPM{_H;fUw-NhIon5X_%H^vAQ%>w1JYCy?p-8!4JN0{vV
z2@Dm3Pd1+F$~*fz$V)TxY~c~Q?hsVb2MbtPWr)FNB=$gc__69g8T!xf@WY1^ug4Gl
zQ@0<10j8u&RH-uLr9+U9KoHT{3SL@P2vERvdFm&H-~uVIoZc~u@IMBoUuZG;&=(~T
zL~1DTH~ggvQH-vcXh~0b8T(jXN15wsQmU4Hib|=r-l&b2Ut&3AW{a#ckbbZFL|J8H
zDRM*1@&H#Xqt>7nFsrVx*Enu7TRHy*eBZLY82;0Xd5_SN1ey|zxPtRPj9+dIW?Fll
zS>O7D-pj+kV{$kGVpD<w%YyzA&&60$F_syfZ05|ZH(K<3<(5vlGWH0{pwCkiO@g#f
zkiKVHW%8FyJ9Q<?HUppwwo1<LN0(gU=2TuuJb>aZ+h({Hl<YT-#hD^3rR2r~ALED>
z*A=0IP%#dfVS$$woeCup&Z_#H&EyK+L^;gUs5sd_LpmgY#e(WPcMvjJEqUsXsdbH-
zk1B*HxnP_F7h_<sR-<Rm&Lg1Dmx2-_;<&(FC}fx2$?|F<q#(hYvW^;7Z^qE=k~X;m
z-*W!zs1Vkg^d(eg-~|C!!xBykUlu#RM=3{Npl*|yik`u+0NUvq!@Hjd5T+z0`<3b@
zB;0W?kg(AeMS@$Z(rVBMkrvPp|KzDxJPD>zvKve&+v6};7xweT`misRtVd@^UGJgX
z|Hkzxc>WJPf2T!CV(9@`G+J^4<<8JcmeBJ?qhwl4p*JbxPT&F6t)}O{7=<p2DfDM#
zgc6Hr?F9a*SD|<)@fo}_m}Do-NObx14#$j`BsNw*>FlrF0kr5OFz^pbs4x?W1ll}?
zfrVcf^I6dR04^H>P>-P*t^B>(CVL}lf8R!i<iuFrpk@VY5{Kgpizf*lRB=ISoW}}#
zho-AKfLx$Ab6Rhj2t!97KZU7@-lIt-thbx*5#*bCy5--v1G_zCyqsu8Rc>h;ugpuh
zQAx;gOSn;c@DjUhfnshxNr};Ca8hl#Vj@h$SBV~CFqyYidk?#1y9MT<#f=euy+$6W
z$b7=Ebum#c%i0b}u$V~bP4{8usb=1f<tpTxF1QX~WCcGUj8}92PQRxMRGsWD;{q8d
z?2r@R`CjkBh^*j}L_6h5?w|weQmiv`OD{$tsGOJoRo^H~b)swTpq9#D$Uz4$c1v;E
z7odQIJ6*82M#-<l*JbKO3(*0%09agrR-W=xomhH<$*eLWM{)-F;zMzH>Oe~!*->Sr
zTcyNLQ>f_>=l>YxWoHnuKOH1QU=EDw3~an`W~ApaNQ-&IdY%EeaL4Shx%Y5S(+W4&
z)S#fG<&0N)EyJ5>n)q01oOjo#Py%UJlRPSI{Us7wklZUrNsitL(%vle-2EPUk9qiH
zKsBjM!2Di)wzM9QW?w}hVpt6X1$lDN0ejgYyWc|>R?ZVqnIKPEL31gWxG@>^y=c+?
z08BZvb_0Ausvvzsc+FGexw=Mt&9JF=ep@m|B{nsn5-^G?>4QAgl?)Ua?hc2P3Gncl
zLrOe-B+0ZS@i}}&6k(M5GkQb@y-qy!=vz$`1BY_{t06_&B>ZWzzndx!CBA_g>EDv{
zY}5+Ne8EuA{Y})O{Xq7vlHCvKYS}$-J%VOhiLR?sDRK6c+D7e5B;=`e+kh!0yS_7$
z??!U?19V=y5_mxBexy?W)KSPGz^OOP>T4!yUa(2Zf;Zz$AJ9w$5<Tk_24E$7E`HRt
z|E_@m_z2XfJjeKCdJ0qf324R{_;&uyBpJMNX<q{7?c&PD@yg)+E@^Xwiv;;`E9`pp
zd1MJTbvC&92z-jJj7>uP{UH1y^$*B_F1-v^qD8Qsz<RUh7L@MSu$LzEZE0JPekS<j
z#Pyvzn;^PzhW`k2|5LZ{@<{at;KU_6;7gQ;@_|OrfDcIx$Bq~3B~3*}^duNi&a07I
zAjZ+(WNQ8t9}AC^p-xQd604WRw={-erLbG6q(Dz1j}%~57sf-ZFU&*=4O0J2Ixp(k
z=^h@W_c%uAVjeM?jb-*JeR&VQtZ|IOxT<26A*HyHBFIB-_#_DucQV|yaKv369E~$t
zx53E`-(*aD%iB(J{!6HJW{s;sa3?^t5~Re<+hLHxR-t;AL6)0f>=GW(ET|F#UsGG0
ze+qpR9eodsxQh$8k%Se855b%ExY_Cd&U<P2s%BL=xivGG<%3L5s+(K?#VBU(dk-S#
znowW>fXe~LM)(WPUAymeA8%5O$;A0zCp4h{X}FI(d*$ArML`uW?GiGunzF7V=Z9GY
z4y&_pfjq*Al2Z6_lIa6BZYx6;)W@O5M%A;v5)R-^Ku_QqlsC|G9eof(!i=9Ce`4{2
zft&DCR^u245*`?l%>};GQ8t=cFO~EHJcTc5;=g9}r=h4h{r`y+Ou@swBKXn!|FZ^V
zrGQBcLqG@4&r^GZ0RQXyQz93j^^QPAU<*)TOif>?gNk@~9Z4-07=e5?aUQJ*eG}M1
z)g6_!6+{!xKaxh7)kLx#`}&kh)kzf+BOqu6ZuMN-gt9K-Zibx4Siaqwm`5Ekne)Gk
zwulR~ju;IM{nW$}FiD3J=ZX!D9vd$+@uF)S{R5~A@@mG`%0x3?T$#Yf>w+jPBO&Ca
zOdU#TCTxejXq99s@BmaY=F@tuMt!K9^ABbfu4AH14ctfX%1pgxX*H`dl)&O@AxB4I
zAd}j6J^`VBGkhH>1Bf1JUL7NO>c&JGs2O@R3SArhbI7j|{vO;u32F8nN9^La@qJ3{
zJHE9ieeRH0p7u|M4zl(Mj+C#;n%H(*jn1~~KGeyjposk=lyB7RG)xtu{F_vspv5Rq
zV3b!--u@Aqgj(hN-Pt&l;)^MmXB51TRqP#V{|I$9YDa)GHlIPgH&O8pdc8NJxH^=T
z^>||SFE6emsx^A%7g3;r50zBn?LJ9gXiT<i#HToju(fa#Dce~4RY}o8P5nJa{*sCh
zsI%U`Wo_4{0dfWpv(1>}tT`1t9r9E@p{}urHu;5p;1i~(m32f#w(~%JA9FV2BQUKi
z!deklGGnT(>&yr@b=1iyjkRe1MEfq~9<%m)LZLx_sZ={cuR0$P1f}te_|!BFBx9e(
zoLC<#jB!G{kA44B;CeL!?ji#?Z90nQsh^d@P-tppO7m8#6wKS;pwva7#XuE`G&~A5
zHL0J%NrssVKY+2Mzb9F|`SG1i-l=lDSb5shjf~ufkpPov!Tov^fmd#UXiZWvsYe(R
zaRy$IEf5>X7uML8SnlJmP3VW1v57AZVlTm{I^MR;yPpq<REYkC;)xl<e}jqA6;(5T
z{)*ek!ttu%CDaIVYU4Va$~D*RG4qj0VCtL$<a>(=E5UC;A}g(1fzHLc`pN|5jh@IN
zyX0^Y6B+-V#COV&e5hth-eDwP!IA?-s6mjb1SRo#xMkQ>85muORM^=tNtN^k<gR&b
zvp#p;fKGr7=qoDgQ&06hLwrFAE~zw6{m5L`i0~`cr%_4xIH)G&(thSd;)vy}*k(b=
z4~B2l<xF0!gHVf^K0>A&yQyFGi>cCCm#02}I$g38QJ5GcyCi3w+jg4sH|QV{$XP)b
z#zUzJQ13c!^hQ0riFu-45D*lff8`kzBJ(^(Fc<2ANhpmGOhbR6Z-itZ@S=H8gX{3D
zM=d_k^?g(R@yC$=67s{}VDyZcP4zLuZV%KmFcqqdRUmgI&o=(Vc{*XCmL+6H`}izt
z`;zpdIE;X<s(kup2o(5YFWw6nQPhExYT<uj&)Q(*#<cT3N^yZ#SUUk~M<x#TJPMxn
z-VApL>xaB7h#X#d6d|RXU{=y}%g#d8y!4C-Akb(^5$n}NE2ThBD%FG3g7gmYbBOdi
zKwXkJh5*GB@M#q)8Gv4gcU8I-mi|s85XO`HpJ@!kQ=EMXW&P_GWRYtE37sh6B}#Ck
zA9?CNuo$hsM*OQuMk$brASf*Z_<<(msU)lwjh)cZLx2IM;>UQQc>lG6bOLzil@E0R
zAlH&Qel^piok#gTx`L8Tp2vClPpQ<+z;5pjm-2jHn!G}?cQJR}`g%yDv=P>$2N;{Q
zOOMU6WfSD7((A^R=~NfbjfNw8A1@W>sbc^;FI_qku#778>rKT7zaYI!Z4$=PP=xdf
zR+w!933eGAHyL~Hvg^)tGO0HLBdz4^p}ZM416vkSve9@8n?H0UI;UrCN0`gofi2iE
zX&d3;06y5b!IJdxwYmN8l77^~)IE(TFwKVG8@NJdRbE9EUW&-@6*Q;G3N{lDy*~9W
zw1Z*gYbs^mkV8aK`dxQA!4&R6^Bb3Pd!wLC?Z$6A?2>l6F^BoBTRH<bpKIIq@Osp^
zlwM;5^L|+Hs_i`@mS@m{kKIx&N@7KklJe1?FvTO=0TRd^WmCL#{HUM5N>jWXBqx@i
z!WO)YjeOB1TOJzl_RAkF=DD}AJBy~sj$IbMxU6fF;%GiK1AbcY8?o0PPj@nT$HGA~
z6A#1+SH#Q@<WvZ2hY*Pc6roRNrJxtSp(Tk!QJ!df38r2V`xRvEgJku+iJ0g9gY1>;
zu6UoUO}z<%Y_w0x9U&a~(le*1#ogXM;p+|kBgn6^Hl)3I>XcKp(5>HkE)k^t;&3y@
z7x_byN17S#RA0Fql2!o^^=ec?|3Ix~b3mqVAx+iTujqo`DFf?iAnON6tXwjdbA8Dz
zA{U5Dh8YQo8Yo~7&6;wAw5kQkU8m9(5qNwb6l8ZD!dgfybH$s&DXd;U7Ni!|R$(m2
zmR58!Wo<`Tk5}fJ;SfJAWR!(3iRe>>Z^T;E1ef@PrKiaYF;EfIES+_zoGq|3jZ+*J
zh*IL+sD$as$o?$EkNM(*^j)UK<mriaj{OzLqT5ZSv`kmXfn@ySZHayGDd(RJXiF25
z@od%=_8JDK!T${{#?u0PDleIc2@T+p*aH_B1>ACLmflLKRq;M-R1aK(Bsu$@lbuX~
zMlR3;Z-P84Q}TkYL+;&?WO6-JI@2v3$51yB?F-7l4#cD}{9~7$FeIv6(!o$-8mb{p
zN^u9$I!eN3+WO2Fs|n1=$Fi7(2Tj$`mKn!*+g49H)+o^huDtkE-#S*(w$&SEySw;|
zO~k3#7AGXs0V|Ha9Wj1mmmLEAA&i}<^k_Vr6i)<mz=4rf-lRifz-#kSD(H(@HKO?z
zIMIA7CIL4mcxenGNjW`HzjrTg0}lM928@7B4p;G0-(kh&gwyC4W_Ag+(khlBrLmOI
zB6_2LSv6rS1b|E}u}}jvH>*T4$Zq?F69c3Hrk1+o5uutT)TqUKfLpVKk)|>pet3U3
zln~@4CVcE$N+ps*OQ>#;0YVe>yzY{7z}7*}OD-{J36C-Ok&e;q{$mx!)B^g5mRJ2o
zEKew4Z!Xy+`=}Byt*x3He~jv&&lx6fLd`Nmhgjd}`8H7g=sViSKcFg#ONJ7!tMA0L
zL`~v9e&}S%;R0U*^Sp9@MCDV275f7%SY_#_+sp+exh#Ag!IOtd;ACL^wATa^yxr_#
zS%U4DqkttTk2Z4SYvKE~xNOCo|7#jf<#`r)DM1<mWv$i+wV?i`#MHE0d@suRHr$Rk
z44&KBM@yFD3x;Z1ajqjafeWn0i;nk21$b=c-vC)@yS_>K2HpgOeBk<Ag-8%~P^-`M
zCeHG%fQxgLAk~MQY}~Z3Ckm80Uo@3EgC=S6N<o^wJUk(yAAJpws^cfB8hsxcpdG-=
z%2Y1!2Q(vAT7B|u06AfV8K0ZQ$wiG$+xJdx?2i;85p4IDasDI}94Ggxa!LmT+bx+~
zz>gZZH6k&GR3h$+uMvr~37+TBm={9vVIAZaDx#XPj97+Dc#c^N#4Qh{F=_$a3L8kD
zz%k1!&mkCX3S-CxT?Jd=P#8vBU@{sJi|9D)Mo&+doG{e>A)X-_A;x9hF?IKDr*vBR
zVx)QxI|?SRa{703flVk26$zORVUWcO{)I&HsL(%N7JK56*fmWoVr-1?bBHBUeoGt#
zPJvDgKBsg{299O#3YYYmAWvWJ%MXIy-vKr;`}G>IBo}xGliDn-R`@}C1cSF>$4c&1
zJbCDc{2gJ#EZA<7;9CCIXQv~Wge!IxC>zusAeM;QAG{*2AV?*r&t=0@dn-X7au$HG
zAnw>Aa|Xw)tfdzv#{wBgyxNC1*7r_=g!M6{W*}dHe-jK%xWCe+j5s0K8a$os;s%Ca
z?{>-)q>)rukmuEraqyKZlyHJ-5~M#71%=_*+Z^~05)h$VRp5LP7C-?ni9zIPZxPHo
z{bZR`1TCQnJc$QEX7rCCJ{M>Nfwe~&Mu`$s11~9ekc>*prr-w=-UsMM8L?T1ATX0<
zD)U&Tvmj6P9Ib5>WR@VvEE~jxGlsqcUIbaMNM_Y?fp5?ntew9ej00sh&|ID<fww&M
zgHKM!;9G!Jm)t%QJGJ7XGiYPdDv-tpeffOQ>U>e7$UgL_AnimMgaO>E)Sj3|8#6n6
z>|BYEnCd_pzAY=n3;?<&@p<?P5vW*&O&WnB@S_tW{T06a7r{H2{{an&Umww}p%h*m
zid5PuLHb(Beh{Ccts=BlramFTd{wfSAx)i$XVh7Sc8ctz*xrH%P8r?kkhYXUIXE)P
z+)7`7>0QB_VYoO~5i(uM-H@P=b2+`ZsTb4B!Z<A3SRV(mhnIan=YIqo?Uo1kwbv|W
z((OF}uiWCO%rm`m_t7c@aM#ZyX2i}1{P^+<@q~~)Ag)z6WDqAnnBS&?@@-ZYiz;R>
zV|t2%UO+DpO&>)gn<s&nCR*t$*O&DuyxxjRus-{EExi;FkBD#sb;wiS*OO=%%TwRN
zOHJaN-?I_mFDT`b=UejBWk`0*j|>f`wXhG|f$uyQ!#sA&(=GDYRE((K<*9j8I`EzM
z5LzPc%~L1oZ4l$Tl*LQ}Z6RuW1TqYiK!=ibh;JT<f$kFh%j%dU3z7uekY~bVH(BWu
zLNcwH{{9%{?B@c{GXBh7UrtNFrh}qT^O!2AFD<KW^yL>JaZ;Hl6I^ol3*ZvOw>Uom
z3PbKjO28s07-m!O=<SS`<w(DU(v|FiR3jKwy#+PF4YHCgIa6OlFpaUNOUx(Q<v>xP
z_EMB4i&3yuaDjnH6QuNakfvGj%;ei8dsBg7sV;m?lah+DYIwOjS)g+AmYRiZVB!34
zpvR~asNN@yv4HWpK!0d}C`;Q?NzD3vt#u*^Vcg7u`eqb@g6~TMsGs6rBmjbR&@Szv
zZ?Sls<b&*6TH^o2Mv(n4)znEc#JmS1bvdN{+8TWA5+Ahy|1Sd?X0Yn|3SK&xfl`G_
z9I?&hJ*M0i#~1I5H?$TEbcu}_y!0FmBKqjX`Bx(DEhsW2F}c?UQ6OAiUx|b~^<n^_
z9R%>0<dc<(Db(w5bqdPEnFDD3#rpvQlBQ2N6RB^3zd(E_W7Tu`a1%hqBx4G&LI1Q0
zRD`95fxjQAB9xUe5&8#&vxV))tcE57kjSi?fUqN)tUxwhRmb9_buqi{C`Kz{0?t1k
z@P`t=MFRc9$koD*qG%&8-*g9Soa{0nDUmmqgrTg0R^~+?PO0KN%pHyhwwXP>2l-GA
zn=$Bfd|rHTiaERuN+8oE&#{0rFS4^`A$Rp}Xw=41r{y7QpCc7m<GC!TCIFp<;P9;N
zQn6TNR{wTf4~AWgp1b75H2!gGyg?rH%PByxlH56q=QA$$E=L{Q^Tn9<V707eTY<X>
z{DXdB9lYzRHKeWJ9$XI3;3^cv1Pb(buF~xI7z+x`#kS8l|1H3}UD}8R;XyE2GyWd2
zrDh4^Y;PA^nWrOyJ>#Si`yi6o=Y}P?AA9#0T<-r3D$#~xy#=EU7E&QTv=yhG6VA0y
zYtdyTd+TOHKHq(Y1~g<4E|_DPaVgvB%*(R~W7d)JFu1Uk=E{D+S=S#~1t*Z06~y|J
z0S!Q5;=?$_64IZKAMJBeD%4A<#C6pRtlzfdo*}%Pavhbj9rFlSl8W`ZRK`{chs&hp
z_ycs{7bw9%A1rVdX;;z;lbH7&c&9vGO8@SeP9`dnKt*IA)hMP{G2~Mt8=FrI`yk>U
zVa{PCI|bdx{Me%YZ4nfmZlZeAWRV%wK~EoDTfK3NYG*FoJ)4r?!d+a*T(}NUQpqky
zlIlSUFVD7QZKpLyDINCG(7tzb?9d*gucGEvQ<`Bn5q!KnA%~Z5A1cp<#$C`;TUkLv
zv7gDtBmurpG>G{v+pHnT6EfwcCTM&2Lto8=$K^M?JTX<inN2&$g@(g&V&{S`*+*)F
zmj{;_!|6(^_ZqRxTENCus$lp;Y&xx1X|A7>s@!SjWwbW9q9$<@PGpVqvgNYHX8Z60
zYIWAXTo0Acl)e<q+j!ZYD!Y1N3YAf6JH{<~5mmU6X)epC7%e$E^}11ZbV?;WN)s)S
z{Zu>zl7~QM1>uLN05<Qs0Xq()$-7_$Rl+Tysvlh50LFAyV7bLEbbj|nbY4cD>{hiu
zLg;lpD)YUhig00MKTC`=9c%2d&7gGbAfnYvC7@N2542*o@b5bk1@l+ssejvan#3U=
z`F8B5dhKbFhS^qL9^I4N-35Om`6VkskY{F+mGCO|4H0*Q$lCf6FNM5_fszZ*flR)~
z2bsKSaH<Vx=28Q{IOM4oSl{wPJ#`3@AtQNef3$92_$_%0ywhtE?>q=|!V|R13h|*!
zo|FmDp3Npf!}tepZfw2UfA?u1B<TFX6gru*IyC-Sc#Mr_u?;4x91<EmhUFWDr1#0S
z9+q@GA|8?QhduDa$=62=Rp~&Un!XVe1)3jWJudbN#h_O_(i5|CfGNm%nLyBRUVf2r
zm@)#YLa(%${`wuaX3ecAFCMh!_|BNc3J72cwjJ*D?sq-(!%VCltSg32GJhXGrk6CP
z7q_Sk2o>Zxsq&nj5^!=G_BmHj1Y#kP1UgoHk{*;^CM>YBZR7%ES-RyLunNnAU?~k*
z#fRc)O-!D;em_YmQn2m>m;&`Y)7=k!JCnv-mwa7g`ssfqnS9yPXr;ku>F$0#T~Y^+
zgPfz#olT_F)~L0(N`>&jD|c8}yWYOeEDV(1r>JyO(a1g{bq9jN;nlqS=unjw>_zCM
z>mxDyV|{T0`3XJa;VJw9@3eajy%-rwKVkT*g(P-;@UR>YvwPNvG#XgEm%}unm7#~n
zHc)gCyJhZzUAx=+38uKr4-Fr*_;{uX{A0Xo*B&5mMl=6aL_bFMII)!~`Vtb%iYNe>
zQ&Sp`<!PiuaK@sNy=4Q5%#Th9TZTSW@6HE?#gm90lXs1$Rp@Vmy<mgi$<&TBRghk@
zBEcd3lLE)Q^imFcTgMz~(rU)LQh-gv#FJ+{-PiXe`XjRSUoT;M4B29|L=bTq0)|&s
z)6@*}u^_F^V)1L5hhb{SITPOoXmHhKQbDm18#>Ogst&3L8_Ay^7)lx7**kf$h<MiI
znP{)w%%t!d`@#d{i{k>F(3<EYK{TVcd)7mNEP0aHh<&aV;xi1<H9q2LtGBELKCy0<
z0OXZr)M-rm$e*644ndR#Be%M46pfk;Y<PL+rSlJkX38*Nsc3pN+LDC0UWh@@LkeJd
z0gb5{AJ#X*8%LJgGy9>XmF%$u)Nz`b=|KH74Bez3<awFA#2VC&gAdnV!%%WaJ^3dC
zyRXow9b!mB7F-3|mKc8Z73ppq{}q5p`xZI6i2K$F1R|8)Lya?GaSjGZd<Yw(sSfl|
zM|Gp86Pt;vlMYi4v!7lEz-<7W)DoklLpqeF-oBo+jgNhb`6m@hV}-!t8(0`#NqKi@
zJVw}jR+7nK$~L5s+e0ssr{0S^xWb{(-rLEh-SlOiIu6NA!)_D5V_6EKQBqB0XCGY9
zb1fK#GjTkh7cYrbuhGZ@Rh;<pM^KPtx;d&Tgqpns^{W^4YJd&Cgr;naOZTHS*Hnse
z{J06BS!K|b6%^*h6hi4s+u@=1MpR%z@CqKA;GxBbHK@`_Rc^Q>TID!7!75L*!09?M
zYj-n!3YZdh@$l&roY)kXXfxmp)VMguj|{*#)JD4;)RZP5sm9@VSZ1xmO2aY?ESMA8
z;eSyN$22OAu!8HDF9d~1v&9C9wB9Jn>VN%9K-(2>Ku$;W7G_vkcq@s5j$b9E??)tx
zG2;dsmU-aVD#%wl<QWzou5~&OP@HEq$vM5aWn%|QV+Uk4s!|cn6(7eq46Q=faFUFg
z$m2Q){sz15)>nA5U1Gjam$-q+G8b5Z(VfaNF^<P%z$vM;#WJhLzOWLn1yJhnZK}K8
zLzX^>VU?tJqSgx{AA{px@(6HfFeLA#-L{Dnp8}-d3W5j-ht)E306Z2}6ft>s5GZ6z
zEP=BhlZsVHBz5#5xqDsmm<M3W!7##fpESIc3rt8r0rO7Y9P+#fRr2r`!215>ECjj)
z^-!Z~xF^F20RaGJi7oUIs<*r3wKRFh%vH`#_zz9f6H3E4*OHBAq6(%@tyx6sEY+JT
z)z@wdJUIm~i2qRYwo>nInn;Ykp#hGMf8%p_95;e0Sm`Ebzl8UGz@7yQeBs3FjKqHE
z6}`IT4b&>F;;qqF<M1->5TZt75X{Rr55SBoXx1UHcstw0Q&5$q4$e`9jcRh*PD}#5
zVED(aYVS3q#+_wO+Yg+04RMBY8wQr?MQ-UdTW`BfPzD>acG&F5s6yb;A!F8-u_Ype
zE;&F@jgv<V<>j#hbTw}AUP}Hkb0IIUC3(&&cSy(8drw1Wvq_OlJZf><PI*h*(ou&z
zy~qxPq8NC|r7R^<2Wq_IwAaC%ExQ-f)7Bqb@(;11!9U~W!Icpom{{3u#6{$PUc>Ya
z_BheNI14TE%59djv`Q1MKN*W!@QwFq3;w`djodrXO{FI9aad+?Zux~EIw#n+bBlft
z9q(42Ucuf!<@^^@gCS=S7{n0$nM-VdH#mV3v7DNWDo246u>yBdWBRMmN^nHNQG}(^
zWH!r-8R#}=kxN=nkDiN>j1O1gqat+&u#KXt=$j%8=s}mXnBdST9@3;QsoU9T9^V9E
z*MPUMu966WRpgAHW#)d*ssV+oU8LWBg9*PqX_I64yF{~Dh;!6Y8>oLTf^;<O1La)c
z3S_z-8k>p1Y)IZ(f_?3fH~)&ci9E0aIq|O6S=a7ccLz$EJn1!wuYS$Efb6^$r?i>|
zO1Sx;x4!f4vg?yHXV!O4sT6U6k;eFD(3Zi6MY2Z33&hp!+nU4)s5H*|09MbKox|T|
zAb;$Xsv&~ZW%Z+v>M54w48pDDe*}nd`oHA@bI=8Fu*Y2Jdwd|qm^t9d($RxJ))qUy
z!CM`)H(`=Q>`^sbhsnS*=$s$DBEy@FXo!?C4*LyZMVV+Z_}u733@g)CRsRIANeqvL
zvudLC;XnuS^26O#P5h;#{Yb5V<>L6^ONhRlc=2vHYeNY^$}rmDjd4{<PSvz#^w(Vz
zDW@|r_LI$Y?^>F8Ps83;ojx>qqB#@BRpJorSVT#6T3UmSHSHGEMj`-xk}AkITG<d`
zUr2L~RJLvu_Jn$<hV;y6%m(QE2`=zB+zEE^077a1z~`FlYcivCeA(p}iALZ+r?eTP
z_23rrWzd^hL14*Brn8q^(a`7|{)WzvfPj}1fAB#sLl8MXo%jup%6=pm%7J+PGBnH@
zDGgs7J3pZMjH+heVl*~h9#{!JB{#b1(QjPhI&#IBJfGWruTk0pngib27gAxA;R^2f
ziX7|Fnr5wu(hsbsy#j+i(%%RlehU`~<3lY3|51~C@(+!+k_h#EkBp}$I#{!6)aBTt
z&Q<`D-JCdmCzG1-U|EM0Ubvr$pWg=v?KMmsten3GG9w1L|9UiElX#u}*+Z05x`brS
z94#M6LlNS2K-V-C(}LfFY^6&`Ud<Yuq(ER$%Yo+zh}7Z%w(cU+;MmfxCK4M{0RLv>
z!Ts?i12jmG87*r6AZHmsFlk?)9yU18psrm501%>qHd~I_X99Td4a`JWLKVUrMh84l
z^eyuXSnN7W`9DP+aK8oN#KN9pl#(Z{gfr$M!s#2(gXGx?YOj%-3-;#Ky3g%xurZCr
zdDSt%(()^95B|7dySm7RRkCjzL?5U#y25YwBC_n!K=JP&sxbvmZiS^BRL7uTq>r@E
zd=oT;_ENJCm*6eD*(Hx13JdpBs^5rf$(cCs;T`g(q^$ZlHr!Q;_0f6i$H;18kESO>
zm0<l!1yB1;Y1xXEmtUaK+4nT@X&eTA&lSA<J95!pQUn9eq{oIvdotk9!a7X~+}B{Y
z6vnj)IP?h4**ae8!Am@j?=kAfCUp>{64+E};S1J7)u{zcT_I6MA{M^DAg<%(XQ<`y
z>&ADyywF&;;Cam<TkNG^H&HXsTke_)$CszV5&?yy<XH=i@?rR}Sc8ZiG&R`6Xb>TS
zXoF#Wykhn;P-#W)bR?wmiuV-!t5=h)E#{vxV-Kd3=-<}K1Rq+gzf0N~oxiYIyLe=t
zLmqS&3QF#`oPqDSz@MQ?xHW)hzdfVWfrCrz;u*ND>3Ci6Sp$q5EM4Kv+s7$`LB3HO
zSarquuT~*1*&!EB>tRZ-G5yV#lCZaHB{+Qr={o5pnqR;el`v_CC5m}D&6o|mkLK1U
zjD>Lz+N_v1T1p-}P8kst<lesgw=hWmiy)WpFL2rp%)SOYW$8oN`xY<5`>}}VM<$Mt
z<FDZYok>xMM=%72Ehz5Y?XY=QdMt>iYs(1NG6RE`uz{`F5{?%7TaXdNF891e%;tu(
z{U`zEl=h(>crAU-jKhKypxOF3C5>60z-5`_ehLx~Uz>Zm`uJ1WXasqNe8Z#ZgUlCF
zA16364$D;R5`>fKdt1rutC$WLF(IqQDgEfkI1b7*ra$y&Y}Lc5NEk#lTJmAw=|*M5
z*c+9!izIj9jmqE&;O*sVDw>krg<$FBgt|P94kL*2^CE+vIsXA9gQuxWg-%+oLXLZ<
za#JIAFODDHtHOKOC5sVkUZr(n)QL6PW5<6~BG|TYe%d3eBg-3Rt3~zk*ggEN0bGD~
z-rB_v*}?}dFbr?nbo`Ny+a;_vx_^ZrUqjZTT@0JKg2zBPr-VtzE|;9Vi2`oEmq{O-
z#<>FD>1<kc{#**yOA{3528Wctl3d(Sw^>2rG9HVW1<rwax%Vwv;wXJn>f8X|+<rmY
z7*27Chs{m|)eEu!<&E;-&viX83M=2JlKkcBZ=pM(QI>;If-c)e?<a2Q1U9c?9`cq$
z&PTAm#FxJTHX4Tt^ghA@Z`Mb_ypP<N)L0me?dA$7nuNx_jx^Sp{3i(4uE+Qw48On3
z`-Kzd;172XAK2G3gpE%KF~XQPyN5sgd7byT1FM}x8ggKOZN?AmEF5S>rp_Lz5@a9P
zmzVEfp&i5Mc0m!WV-CH6DQ2tm^u`z=&%y%G0}PZQhf3i(P_mEWN8Ryg4aT-F;rMGz
z&--tLfPV|NL;1U?Je~FjqhhUI{xd57D#{~!1Z7i@4%y4~>=MfMBfDv^Y4wTC7fAnN
zBKQEacE@5$ISDH%WBnHTv1~Lm*TZmDE<g)71^JETL_qoNmH5HRNr{$na{g1ubIAgB
z_{DP}r;l(wO|+T0KnK(fs$vPtNq9ub2P#PaBrln?nmlPzfO%aW8ch?B^n-uL1Vp|!
z!6kiyZHWbfJR*+P$n?+#kVdC@jvIj@<{;@tz|acZLuyU~t&I14D@YnP%~O4}2{iC1
z=4Yr3ZeV31YnFK^!HYhZd8?gU>*$Lh$7qXFez-6Gr1hO91s*{;_!ddM3h~p?{>%Y(
z+>OB8Vq0);n}F$olKAACaaeA_goV5pf_#T1;=Ay~yW=mbNnH3zCli(}gcwp56Q&rR
z^YBg>W#L^Lyf&`*?$g9!z)}k2918Ug2Io<y^o1a;Cf6{Ij>Ca}J}i`VN~hd7tYG*f
z*cP@F*tO&2LNbtP4T#HJI?XQLVD?mE@wgzfFH4=Tnz*&YF{r+pRn87CQ_J3~fekc=
zIna9Ya(dk}WUKxTcrRKBhGdRDOjRbYLP}cyc#y3aj&=%qevc!hk@y00d3}=w$L^ou
z?Pl|d_#T=HBM{&u^Ahvl+U3C=1oIg+YY83m#FB^{H=;XE8X)%|H0Gnl@C!%u9o6Nu
z$#WGWMu&cl3(zfF$ia=OvtzSpGIcM3P-xzy2~eA?J!MEgKtZPbw#CdNRN|A#hm#O~
zpYj<G$ZTqY;md`2s7v}Z+@+A_m5$;6pp4nqVlfnXFTgwF<iV<Hs$={ExQygu<K+=5
zTTnwsXY2E8>~DGmBFEN+DMO}gWD-0LKWf)GHI0P^&(n<g5t@g&;;-k{j!8gIS+@|c
z8NE?*`lMn;HqRxzxs>wt%wld-8B6!7lG`U^6%<x=Z2{Lnv^>3C;sPEkh2ig;f+U<U
zY1seRJii6qffIZsl4Bi~v>ucBsmYT_2MtB24s#(fu8^pn336iqB+~%|7eHwxU4<_I
zZcbXFefsaG8?{ah=YCX9vVEHc^F|oj<1=yCoo6K5N02?8eS%TgCrB?5!#bp8G^(pd
z5-FOgC&?@c!?REO9-7whS0p~VlmLO*muP#P*l#=h%oX7`^zjqt0BJUce7$`PS3d0h
zAVHSx;0)ZpVJ_ClUf0Wmvkb-ugMqnVU63#ltJN^E#?o3Buq89CLw(Oj?Xh?{{B#Un
z2(Kgv2m&hUnN4^(0JhhTqZ5M6lo+Nj1#qYcGSh6JJ{LHHdeK#4-cbyJKEfYTNDHoq
z*V3fS!%~`)dFo1<7oh^^2A8zNN^R1a098zDETJ_|cImGJC>gP45Z&;Ot^yaJybl>n
z_1??MU+<><)h=_jjt@IN5zN7Gr-&V7F5}kn9qiH;I}TA?xQ}FQntfqa;{v<w>)BaO
zZf*I(Dic6;$f*;QWY;K3_$*oGEn}oxKSLmL+c+utGrP<uut(vuRGCl4c~@_u86w6b
zE;RKN$sb$&?f~TaD%>2-|0u?4jRz)ljbw|}NY||*jWm}u66dc3YILL%GwugI3}&2(
zz%9<s*^bQ>m>;}$n%0nc9&^QeE#cv@K7knXtj$NrU(J{}vv;68KA8m3fdg9Q<StAe
zVIt+ApAN}^6?{^12=Sc|eCr@0sa)?S2q=oUusS`|GqPV6D`RndEU4!qTS6RZ^1@_G
zUs(jkmU@J%T=5+l4xn`xJw<#*T6YwJi-y+K=ulNmGBKD;iISQIlPg{FJ*mc0t6o|v
zDmUaq9*sQ*8&lc1QctEAc5HYxxOXg(t<oH}B@5<5YS)EKPkv$`nj)r&r{yMQ-yOlb
zl3og=Gx>MF4nC(v(-Hp%v9@0a@_KC{G9sdbfh6&5qc$aR#w(F7RU7g{ag+4RBK5vT
z^}Yk2Lj)N5d}j3X%od+3>B*5VKLp*`f>P}S1Pm6?IOKeAJA-}5wsmM$$v%i5b<s>R
zkcJ$1IZj_rhv%>8`C?KB%8*Z3I#WZjraiNVuxd9Cf&T*tjnRf8J5DZypwhaTa8F|H
z7_Ks+&K|42C_BeX=l?jQeGcr_T2X_RjHq-a+%s^>G4D+5E|yl$FUB?&c>{&Ld3n`x
z`pGz>z3QhE!u0r(y(sY6)Fkx%)zvsP=MSR?{1qL_qP|CWfm+l>Z{tJKJ``p-!Oc&6
zUjeN#J6949VI{;go_nNX8uxGs4hZRRjPr|xK}6r@6O+Y{LQo`~FQHgT%EkB&-=`$K
zoMhs<`sM*3u6xQYlu2uZq=^s6>E2?jwd~6Gq;fY+$8-0TVfc|I=Aa%GnY>g`Ks}Kr
zPC?42ta!l+Xe?eTOhrayeGEKQ^BI9sUcs*a4~FP;y`KV*O7<V|qyGJoSj(2^bqf}8
z{D!aHjib*5xd*R2u@g);_)EUFiu+){X;xoB0e3mRfn(^mNQ1P*aT3L;1O+`v_(o7V
zg?Wk=a?;{vsVE%tY1ql^j@l}>xy1O=-SuNZx^*vh52fuzExh;z4n9Zz*OAX$UEu^l
zo_y<GYTYGnqp)P$y!TnL688P=IPTyJSd=~R9Z%(Z@Zxs7<9=*3B;8KSExJ}rz6%~5
z=u_q|p#%4H8{LJ&@{BX$=8>a~m%hY_i}0fM1y1pV(QXm5A27@PBOWj*gEOw&O%`4L
zazU|U^792RIadf$1x}1%bE64z-(no0I6?MYTqj^vi%S^|DziyCJaoNzxhFmd(lT0c
zC|ZFV8ZH61aw|@>%Gg5lL#|*75mrf{)5<|$ihtmkMx0gcEObkU+|uXdI)Ir=_BD(}
zved~_7`_qv$>0Nkrv#RW20>D%zly!H2$^_#urLZO4#(LT(q5PNoms7Znl{!tmyeeQ
zR?=*fm$8}Uh#4!f02cOAtl*Zq@q{d_RSJWn6R<3X1y_7@-x)gL3T;N)jV{|~p2e&N
zwo{Z07q$q@S>URz#o;MDu9>SnNISz&E&Takn}m#N?1-M#4cAw2`iUa8gljqR2C598
z3Fi9QUuc<l<8Xg2i_0jEE!8d=J1cm$9_j&rlSvy2q{*vXwof?GLns4v#w$;xo+g{K
zAWf$idYr$)4Qm;S9RVAc6y(JnaN(BY)0N>njd9&2-`%$kp(%3YgYZW%U`+;%H1F?u
z^QYJr$%)5_7FS{AVW<Rf0q?cIbCB<xUv{IEc1AFl3SB>g!Gu^JFi1C@3AX&A`EMXH
z(U<DPsu~2o=qb_)YWKV%NQWuJQ40@dDZpRl0z1`WT~6e@Y?tlytWJXMsCOFHD$TwZ
zSCR4J_hum@C|taSZnTqjy3C)<#`%NC2^yI55rFuNQsLsA5rD)Q1hPzs*zcAevbb=#
zuefO*HvBdDyCEPs;I`u~sUiGMWV|An@ZCxrZNYk7yGwfz4<L%4`T~2_GETmAdmXqK
zq!g==<fhfhYTUd*Lj0tn35xJ#b&S48P`ebl2<T`Q^x7rSK~;5)-a|w?sN4Bgw=%xY
ztt8-L0iruCG*I=DIdGsA)A-O`qv@~9wrAFL@RkbFr|@Y*O5iV}-9&l-QQi0yt<u&H
z+{7FcE6E`Ng<OF`MyIp|pRif4lYND+Au%|nQ~4_s36ysi>Bri#Z7%e2PZ-{X+C(x-
zGPbZh?IM5yD$Yvcu_tZOd>T)IE+RrkDSt6>gI<mfJBZkiOwNF2^cH~?RA8EiIHtP*
zf?LQdkAv^NX-uD1KxPFJLy$iN3!aa$SD3hKH!zz*UoU~7Xnqiyiw39S!y~1x`omyY
zr<fZrJlu#%r0)C&Xbk^26W<5r)JzyuZ&t&6^<F{|^8O(>7>uRnF((D_+y{pTvp5Bc
zV?M-l>$Vid5fa2>BSoz<4vyUc|4a|511p64;;>(vUARbY5IG+s2Nnh7*C8x{b%5UL
zpxO~v3QA^ftrPdqq4hzHBLQ6;F}76gk}{`}O$|o@9P?M%Ll9vDCOSS1{6OhPr{Ngf
z1>P#wVkDjWpn4?u$I~AWVo}Jkk^GKImt-o63pO@pl-VV7w6u@v<csJp{`sg7HG{^e
zY^-r%*bA;A9dm3oBd~k`2mZq8?}S#5BD`4W6Xc7vOlgZgCji!|U)@30YPzrhD5@={
z{^H(2V0!>S_1<Nm9Gc67X7&DY9}s26T43=~DwVrd;MSG6#OjfDv98Pf`|S#U3`nOf
zyHdxZZ5uFIggTHWSU>~)Bhs_nx*$sEU#Xl!Dz5#?wL`-%@IqfF6*JTTuAhDlJim`6
zCMMQIg(IUFU!v74d>WRUd|{+7CLz>XiK4uG`v72uA3o7C>oQ*Ev3+>ktXVWaw#~JA
z$MM4_WP1C-da=;X_LTnjz&5#zK0~Ar5m?wJJJJzn?J|uy<vLP!A3Zx!&%V1mvX9=+
zven-s+p1?DT*JOjr0fbkyPUFn>)9ba`(IS~zmeS(|A1AB69lA_>M#(O){Nj<DEY%m
zd?t^z0_puJAS8{p!nybVv3KtAQB~LCpS&O-c!Gk))@rO+iLV9~O%yN#iJZ}iqKKfa
zj|wH&CxscHRWvXe$?0*F_DajGwWU>W=~Y|$;2{cxha_045qwZzM6Gg$K|$0ILCNpC
z);=?tgwX5#-S&6?`SH=rIs5F#+H0@9_S$Q&y%vKvdI-No{FZ%1i9xPXoAHulLSTpy
zW{>%?z}N_n&5W;ULu<WwOi|=Yxe;I^rBpSPByW@HY3$g%Nzf#U6ak2J*&SPAJC_5D
z4KSAjOr-(?CH+zz#%1_%&|34Mw-av*$#bYI>%2$(hZ`xJqIeINO|{=+<|uO0o8C>Y
z2>0{bB-c0^M9b!kqd|<sD}iBLnIASHWL2YESMR{tQ%2`MB68K#J^>MtpW)0@ejAnh
zU|DW`3(*O)RUA013DgAw{?4FCVvgEP^Bd@|{Hyi$?L$trzFXaD4Tx<gMX%N{AR+e}
zw4=Zz4}t~6sc~ie$}q8)^Fi|QDDbrPE{XKk4Ykm#^R_nze(bXY`K|+Q)r&_C`7Czw
zg|YUdtog665_8Ex<?AG-??HP~{ya>HM|QL_ziPepw=C{(N0)Tl&%l9(VgwFN5VNEH
zw^S)YzBVRjiY)$(tqcra{$b65rZFY_)ht6B^?R-NG_InlH?>UZtJeDlgDLM1`|m%T
zZoV({-!C$7q~iYju0xtXDVE$*7SwvXa?qoUE=k_vzkiMZ((-;a@7@D-zTaff!@T_6
zSC~4N3Pg!vW0&g8day53XXY(37HRoe@g;`a6AJA!k4KPNcL4s~V&{!1o_(fW(K7u@
z_M{emqkU0r^z!FPrr(!Sz0RQxdd(!YEt{dJd~WLhI`Uei5=|lwwjY0^Lq>*yVZb?o
zz3U4?yK~x2&e1wIWfG3qteDPTznGs*m7ge<GazK4KCNdFcLN~cuh(}X;L6`C0)E{G
z1Vq0k?j_)h0!DBG=Q^C7>c&CD^8H-IxAVc8vuqJ61SfGHf3sbMVlT<PQGj4SdCwdC
zde?l9W4*+~jiPaAim&8H56lv)m+~0K`4&okeMC51=Z&=DPf#lC>{~-K0q=r)K2cYD
z7$UOMdCX))<(ya|^(7Pvs+Bi#P;QSmdV9N=#fhxN$eCs;cFGmO6IO}(EZeW@RCJ-z
zpDJf>7x9q(yV^H)5FAN~N0lv@Nc+`Md$?j}^migWf{Gnp-H#4Rlc`^Kp?evBa|t}<
z)Ow%Xd8BwYsxV-k#Nln#7go>j6KETqQx~m*WeJa{8}UB+*8t9r@=p_;k}%ZhbiH!C
zj#sQ8mAdv;S$`n3^cu|(lY(J~YySXu9_-IquXUbfyRND80jbjs=0_@70V?gLU?C-_
zTT3>{v(8ngC1W2T>$B4&C*ssRrZDx8&v)Ph0}*p&@;kwNDd4Z~nL4!_^Tn^q9gjHU
zJ@1zO`#W$XmHLI!S!_&xPVyS2s9&E`^SrHIX`-!&xSkj3M{d$^N(1+9MK<-4pCh~B
zzf6_6yITa>^abUF*(91H8AtCSWA9Z0*R8Wkk&8>mFSbf=SZbAiz0oTDc8gUSZM910
z?9C!#-KL2asv1?Z`k9k0l(C6VsCx@z1TLe|6c=AaWePxCgmn+MP!QQdo9B$HrKkpP
zI4~#MxqTXb@qaRRcdO}wXshk?jcYaa4?Ef+x^OCvy+n+r7xZL2J-LCNe4U<ro1R4J
z$(+{gUX+v9?}d`qh+E>K)`<_1HWCVKle#}ss&WoC#Rv1n?~3e5+r~hKm!e=YB=Zf_
z-9m<gGh}GR*8+A3Yu@^!p^HwBOviIRMS@RGVdv&TZudk$W{JQAGIs>m{k<@_?vuhQ
zr#04`JH;6tS?3isjGpPmnaNYCoJo=3y4^)p4U=a2q+6CD-8a!PDe2w-Mc&XO>FWN@
z)e*~bQT$`U@!XAqYNtgd70m~y(wu49t}RSn0hrKrKj<2oPW@T)^+eA<GdDlHd;3D9
zdI=;o-=|}xYjY>PjuwSw7E`VFP#<AJ`kX`x;biPhtmcgTA~x8`KRqBPm%2Wnpotuh
zZsu{RAd<_+pYYM2U(R#Hb$>4-5Bc<jRsV>g%|b<Qd%_rQ*uVV*3E*b*LH?pIQ3CS)
zC;`<TEA?I=BTcTw;QdpEPH(Cd>mbfRXUy?Oh?lzC3IbMKPLbU_5Of>fyk(L19ZZhs
zg}2ekPL5aho?PC*ah$k3PV}Gp=UgOgCRD*@bg8VkdB4pKa3%!5W4-XEKSXuM+D%O=
zFF40<8ePDh<nQBv4(S3$k(owT{BMFtIL+n_3({@=_&!v9Yv1kC;C>9MOoJ0mgIA(J
z>})WH22CTg@5iktE;b^k49|`B6;sDr?}I<-D$%-WbUusy=%VCodMNs)+lssk@BOqR
z^``Qz$+piX69r%5FjS=sp_6pFUvUW)_hI3z_3oE?<*4k(JfOWig=%&E*zdL8L$z<!
zdfUG*LQ1`ic6z+nOR9^c*zPhsRp~g%N-%^R!X9yI#FRW$j{VLFA=_K^Px1v({F=e}
zb=<tIuaQy1)kyuTq~k1Tu*`O$FFP^*B~DftA0kQZNQh1G_*QP-Kn7gXCS=4x^4W4_
zJofRYGrtc{ZeA;AQNaJ0AV@Aeqcc8_`X_VG8+~r|c9DOduAB1`>uJfR$^t0$TkEWa
zmHF0y%0iV_x((-EX(G0<%%6;PybAt|D&Q*yKN9!8j(Kn;Ziu4)jyj>4O8^X0_>T%j
zt1RfLxl_<?px5JOe#pIjFrUxnGiya7%7x}kx04cR&!3-Ci`3>#^7}3oB_*_|Kfj=F
zBIV953PjFlv_@&kD&S4GAq{$8(!z2#UUY;$c9V-`4RD&$U8(hc`3D{HPj$ZUoAoiS
z16~S5`%4Du?NECqG+f?GcS8utjQoiVhO)p&gYG4<9~2_0F9%01TK7c%Rm+gpC*{xO
zZU~|}cVpp^qv#V?NM(HWxx91zcBdB&-MTp$!HEMm^!Pr#NDW{%C%-01SoEvj-Tgt)
z=H!*Nt(|zH&a_1EQ@!cn6fyr;T4HPEH6WtO)wIhZmu}a+w^g*1PNB78{$8H&B(Zrz
z(<otptUdjYept*Ohqj4b!1Io87eMGKuSx8Q2|JZ~%<Nw^euW~SESqJu)3`II1y=VW
z7<IVxkYN2AQ2lCC^=_ddh_%&w0^JS5f>f8`AZ8){-c0(NUVn8Hq~~vhT$@nh&Y~v=
zVO1wR0IPEE<P5ui&ZB(;bHymAuF5U=<Ppv&bU{TOzq_zw*m)1*^=q^DYLkpPdo<Y7
z#OpVUj6Lch(@njZ#r~ur+rTrs{c>opkPdbRY?P~sa~kR3c)^$xZKj8f4iRFU>Q?U!
z*2p**Ao^ZaHBwO)i;VU%?6KCnJ9;E}lQ2<7Zcj|!y0`be&(hwBwAZ=8>D-SiemSw-
zziID#9c!a_VV%G}_8?Ba4N5`vpYG?}(e3}U{}ewH1^4sQ1;JY%R0Q9KURF20K7#!P
zVAy+d1eh4{!+Tf<R_w$UR0#`Hlv;20e4(u_{8Tr+<vrs%1g?EliwNq;L39SsEl0rf
z;E3>Sqn}J~s{af8X4<IU?hX1ZZ8XmKI3w?-4;aB?k-3O>iC2VFkfyz~{N07VdhTzj
z3WP#b(Pr<-QSejz*XRt5HhQ;n=E{2kdBA~Hb;EY=w_}CnR?C8HRv=l~pg&oUYrW3{
zWS0KBOZ!Krw}<ORD22Yc<nEOl7zU(aXm3{-=8`83!)gBzhM!KC!Kf1+(AmE3uL|Lh
z#o0J}mFwu>ti*udm0piPA0NjA)|%}G-tjG7Lr`({qcps>f%iG`8F*X0=#~EnXFI>w
z1HAumenu4r!Iv_F?Owitp??~NjmCXNO%@FAU-6G%n4~Z$zB(nra%Lb-C}KGFIcGec
zz3~C`He%BC!*e4eYrU5Lq{6h+Xx0YN5-Q%irIT#tU*@}eC(H9a*)_Q3sYh6U?kw_N
ziX(@lD<=8APL3kuDY_TVe@YK<1T%dkvJbA~Dg@GUW}cjM8ofz$FK0}ga<q30x^$Y@
z;2F1#ICO007{%Y8qOKG7TPBHhOX_zE4#8{oxBRvQsU~tZtm!8>sA((sE2%}1acu>u
zhj3hoqU=tR`8xG^eyr;CvhKP4pW$QMQ@N35w_t^-1~L>qeWJknwN&#fQVXN~c;EBW
zPde(}E{r~q?Ju+7ghxN=$l%Ms^PO(+^dewMTfvAlJYVtQ*@N6dwe1u6$-pzR6Q0w%
z!E@8eQq6!2JQk|5!{KqTEbRi%%2Ik{71$$k5JYF>Z1BbZ{o4`x?N~D*j5Gc_x~#8u
z7ybkH_eS1?sb8$!nmL5wR=K|^a4eOxuy<L`!e)AcU+?}QIn1irugSSCmdEOe#i@R>
zW6-K^V>UnM$u;LWGNZ)}OW+nRg3o!<+2CDpEtYz(%wB?<jMT%m-mLE&Hs3@+OUwyk
z4p=I8p^yCy)Gd}Wn8rX{(RXF96W#e0tp8ANC%5r=fzK~|`9ypI0Mp|13A^++v%g}C
z!$Ig`Iu~fFULrr}B9?k5_NKR+5uqENf!Nj@L%LMqiD{ywo`%?jx2dJ-Q(7Xj5Dw%a
z?y^F(3Mae_=(a{Cz}Qd*e{9XF7SGZFPFE}5pB}8L7}YO&ihEOW#r1{J6RZ`}^QYjE
zE>g<hqDt$&O_kR2wqVZt_;`!8eqxud!)K6GGPBUlWmslC&V1yQsUx~5nD{>aM|bAe
zdO!OWc;Q$@#QyICGj1KS_<hK|5qQ`>ZlEW4_$ms;KDB0@oD|KStdFLpQ0Y^4&Ib8p
z-6j4&*!MXtu>-t`okghP1#4bRlIJ{Baa+IWUxK){sF+b0U2m<JVLC8XIuQM%gwsn*
zZ*|8F3=tI|l*73fNH~-?^CCNOTZu-w;L7F9v!=xE%*82#R32NOH}}m?I&v_Qc~R~P
zOKvQ=j_3a3)8UF|W;_#=D2pO*DSm6*3k3D56baG)%M$q&z8KtO{3pq9u^cS&t^yf4
zcI6llv*B38a@X9sNZ!E~$F`m3EDa;ZU-_ZL_dcPxY+M$3=hS~9+Z9UIEC9hFba#=X
zT<rV-NnBKl!24{_33%0V_L`Y8x6-enn^gn8RyKCT@A_qCkmBNAI<>XdoBPcyc{g~i
z1Xqpiu4LbMzQ2!*vX5-@F5-SN6Ks;xBxkmS`&?7Rj2hbL+|c6v?naqWE17TJTUYZ~
z{UkZh(m5!SDRkK}=-h9xJa(DA=g{*?jR?j5*#|mSer)6@g5$m5uNNE;$ayR&$Ph1m
zqucy6h5S7*hHbcLE)nCSV-~QLw%yOydQ}h6VZ3?lNjJdWGo#$eqR+HEAUf@iwSf|L
z$-ZLSk0+iLI1+05u-5y}UkECV(T31GN(=alYUP4*R@M|3Rio4-Uti<vsvIUSN}M(w
z4E*{Hq-SWezW(Pa&iLg`)v`AafZR>hje#jn&ALt18#pJ4%K?Ubnc^(_0gqE0JuXij
zXXbeZZ``W<5{(4iONMR^KHiT4tEB#L!kEV-qD#HrgCTD;-w|aj?a*a7@t7!A(ZJs<
zRd+IIjOwS6(xm1(QW*g=>tIw36auK~1^meGBKh_CSC@Du*>K%SA%SZvDtW2Zy8<u!
zxW!jkUf>H0viC!ro2knnQ7{>6TM!o)f5q@Nf<v{ISn(>pVYVyk)3Cz^F%&yw&ALK0
za%Nv1bSLCjT-7f+n1{lOs|ur^X98c9&y32!r2Rl%<YM_j;qhH+O0&03*#0u%VKZ_E
zzsemz77I(Jp!L&r;ffc7*1xT<E_p8cARG@nC^}qa^u3|P9VJx_iA#V6{`YgCG=_RH
z8PZ$g#OxBHKyqFIWmJ;Qc9#k4#P6Ca&KVX;8ur*la*s^w;le?=q&cGsg^FsN=|w@d
z$5#EnQ7Z<WIMgYsaV8WK7uc$wz|;p6Q}Jq3@i^Epl}K9Ztj_TiBpcHe?-cxb*sh;_
zFxi7E$t<FK7FW8{Hv_M7jIE)GeA-zb>rC=png^Dm<Ts_b8QQh*xPW)hd9qPoC}SNI
z%d?hb0LBz+KXn$0y!3)DIg>KH_`mYwgNUe*o4koM_QO-McZ@3UT(Xi0goKg4zenV@
zyg(td&ewsJbQdIaqIm?&>Tp=3XU`bA)kO9q-kQ_Iq<d$TkTzueIzKY!UiCgWS=rnr
zE>|5mQy^zk^>)eS^+D{TlGEJkR%dj6cTt2mR~yru1wD{^u@9@_HnpwR`&^g)jL(t{
zf;cC8OisXzvVS{T6S%L5(<<I1;YdtJIoyI9EZ|3gZHmhgn>>-2J~!hGV6kRHdf-E1
zwdD3%7$;`~^Bx0#=-U@2%(r|pU~Mj?{46&}7UL{Nv&6Ka9PeeeqFr-}a!)PBdkv6T
zvrta^@CrbfMcfHU<hHCGf5;`Og6Iw9ihalp6^Wgfh$W@T$)qeGFIF7`kv*Dn4yNa2
zTI{gy8bKcSBFwa69n8`%^JZ6kY|Z-;4^<Uc_ly3u+P$v0N`#pWZKHZ|Ri+*!GV@2}
zOSLTVa`GvUMbU+JY)=VWm%N!*ak-#DU`~uGN%?*W!WBEFpG(HsxkQdShf0D72H3ZY
zWDqWWsRoCvQq;o0y@>x`ChLK`S)1v-)T9gYNXVD@HJf*A{+{?qsrktVMB%7-4mE9R
zC2exGJ5m(0$15L4daQ8=53cq8jf^Bm-<w?Rj8qyTZYEVBSEo-a_sD7GH_6v!%Hk=C
zHJ)iJ^pgpokd9Z3QBjTCN8S5=Pr1hGdWEkk?*VzR>ZdZboLAO@(13mGD`FMI4b1a6
zmXLm-PkmTdJL!}%xks>zq0>?pG85WdMYF6D+&o)2jaTny(?n*`XYsLcD+T->aK%%u
zjt16%1qep7*v{&Sl<F9?;T91S;@XhAP^npLEaNvzOKx1CQ97D^w9o(!gCCIA(2h36
z>v)iQ@rAg-E|o%+q?mOfEX-86vqbm8`5*G<$52v?w;E>)R}#aHSA)Ud>Au`CCHC<^
ztA0C3Vf<rn5}oyVJ7*g@bPCxNs&dc7WRVERyq8NQ6}zo@>IHw9OoNIU{i2)PSt^~b
zu~uA;bowz=cr-bADvB<yaub3(xi)$a&ZIls83S3@1O*a?`_hh7iNBt4<FNim@E^H_
zh^NZ@P{lT@{sAd5G<K*Xy2HM8pA1$NTP)lvQ=TCk%MW|sp~(L@lHQeL-?~-ugq?l^
z+;ONmG(!!iFG1%j_AyGja(TRBAE;xaoUo-Hoa;M@a-Kp^ymi;aLaE{5AzJr0ONdxo
z<2=i-l}UoD<HMbu5`9}HhzI}0^5!fo;z!J$tEBfG96S61GUF*1`?lDD!PZ^kWQfg4
zmiz$=I8Ejp0R=-jPl0zJSdApe)vjvpp*2sDS$)?dq=YKASo3~uKF!GuC8ES1zv>fe
z2j8#L&dj@c?j8M|Pdqiwm@+ZG#gmFPisP_;aFu2?!)+(XdlRCnUHWV&(XYtPX{Y}}
zT=<sOP|oqGywrN%yZK{+)&d3>gd~N|ORl8o2Yo(pWg>FkC&~9n)#;x#<CDjtcOLpm
zYPU~ka0r|^o86QZzgEO|pUB;1GMaLwHfOJWvEtX77lIPpg+k~)Ghv8>Zd^!-1BnYm
zw{DYxPE%5&owF}Cd~Qc{P+}VOKA_}rYnx_q24eY2yiMG(b5Tv_+t61+PVeLm)P+1Q
z<1&9HtRe%?YM}+Jt)<Vwm9YH4lxhbz1{L6mb0{;7t<fC7#K)4wJ~M91Pfjy<#Sr{i
zJ*EV!p~RiI2K1_+wPx<$++;)rshi7|Qg_3I(eCJhL1)ZxYsKhe2u(kxGL#ro9&*MM
zE8dekKvP<u6ieo@jtsEoKTTpNvGyS)bRCh9b7x`4pg-OyIv!2f<kL^`7czfz0?Pcm
zl9i45Cll`qy1Q(mfbG1W`T`_bEujRy+$TN%HsyyaUbgDLK#3~17wbt!^tJG<>&*;2
znzDjoE=?Ua^YV{#m&qvQEtA2+w!7G#^rARI=dBtmwy>GTS0;uJ<*KI86Syskx80FF
zfoq)M17gbNup9mq`tJ|VrEd*n7jcUpW@wrGBxV#dH)X^^6$F^aL^3giml|;H&(h5F
z#B4YrcxU75&(%-`7N~o})@ZFcj5WUVVOTB^=)f{>S{QDdBFO<vFn?alZGlS-f5TL%
zm0_q!+*FQmTO5F4@rpb<@q?iC-7)2aqGF`#NTbRC^#q;yi+S@&EocpxFCR6tO~`Ap
zFEt~`kPe~!=OHcuIV|=!i9)G?GO{NTkLlK^^>*oVs|M?9vmv{fS1$B6v<?5AUlq|?
z+hqWxF!u8`&P@_evq-3|TplEL#_vJz@V>BZezDGmQ4L41(*8n-y*hc+Q{0#}BXSiO
zkZ;zC7Q><{Nl?Ybh33l@xfpimBXYo^WJ!?d2(UIL8t?hhM|{M9w;_SZH++mpBr=03
zzq?(L(ut5Gb^mO^XBq)}ztSB6!VST!j{rq}8V8T~ILJ@qU_N$qX{KNXavpVy^?5}r
zL$k4Su>3*lgbDR3?7$4j*;2}|fD+&loF&C8kUy`(PAkQgkK`#I@d@c$>>6qkztrw%
zr^KX*CH$r#4ErW)`8XNDW93(mwZ{Q<-2sO1feiS@-c!XIg(Q@?EmyrLk77|kd%Rwk
z!BH>TrF-cVzzfva@f%np*ZZ(aFa-Dm%Pain0Q_h5kMRAI=09SMZ`jXy*Y^p)canc0
zKVx_^<c1iebJWpg5=K5mNZHl3lL0T*H(fN{W0Uv=l>#!8$tmUF?nf*Dmc&{5F6phD
zq>04+OAutO=sQI`RLCw8IvZfsJ3NIFSAI3*Tv;Mtu_K9adHiE=6#~a#@yf5#{2}h1
zg%T5PUQ;3^CDB@b`2gG$k9o#<X5D*vk+Wil3c0{T5geSNgGlj&pPBxfa>e5*oZx8^
zxT;|%t~ocyc_#Kw@5q41S?&X+@2?SQZQDDQ4d>F(LK<2ti%N#%b%xWVG729B>1D>O
zIiG2<S$nrsdba-673U8V4_|S9>XJzpo%!`V`Rk5a;f4}AA6R{cnAPWNj0oI-O~!s5
z4Z|dbrQKQinWll!i=`(*%&Rn{bpmj4?VUT^je)?3Lv@@nd_GurM?OAa@1Y^AHZCoQ
zwOTNyxHwEVOXOIcIMaDI@*;pS2sd^IZ1`sb46=cPW?1HM16bVzpXQIETGR7SSpYKw
zCCt2mlAo;&QAB3iI9tk@Rz4@K^xXY>X)U|^cglh-62kmN6juyPBT4kge*e3JCxiOg
z!0Up7v!$E??>3GKw549uZCc@)KS=1pN%H?8C($huyd>XLIV4@>pX36oQq;rUs${L!
z1xhZ&h^O}>@hC%5azjW-{F(6vmoOD6-UCGqr=e_=p2fSObhOA=y^<xo3qFCi+^|>{
zb6F&X%_i>?{2Gbn@Lfl8(FgKXw;aAi6i(zHmprJ~ShHr!MW1OzvKNh*caiDfyVv-m
zF}oeORkAYT8*-d(pHA`Dk)Z6K?vhc|z0-46{nt30lFgLAf0B*Utxp@NS*15S=lyQd
z8+W$3zj9S!2vwGGC1&KjY{7gfO@y2aeMx`lE3&&!R?rm8bMl%xz9z-VOjoq9`#3K3
za8M2^zk$LymxZ<CvZktB`XmJLb~{eJYD&Fe4sMHD+mSX4t$BZ-7I{MfSM6{pv99p)
zrmA59DS@myJ(XNQ27hz#grp|#-a}<Z=b#A+nk05nA4J1;qJP_2n0=qXrWY%`GyblI
z6PNSj-Em$U8=r~eK)SPc$|yi&rB31yQr->RlE~JEWQ*il?@Tgh?dQ_^^^AQ2rpN8O
zMJM=C<b(7fd$;__`FG1%n#x=0@^Y5OX@npBa-6e`vx*^Vb~*$cqohVT|GfAWO7V)0
zE-`-Tnqye&I1cawZ~5_byaUzZrNe6YH5uh{-=w{w9=MM;uFhdpzp~c*Dc<Z=+o5*T
z=GbHD&_=&PZ>3+uV#?T$|8<M`XHTLy*MryXDiHJdidUoKLX%!XnIm;_pZLdw>&vV4
zE~ai`wX)n*XQ^FpM~j&4`<~7V3qn`2m_IA!Px1zkya4otn6nu>Yw!M}asti<y5RKU
zd(d2|;@ISVgFn-u3tY6l6|Y8GDc+ajnQR&npw^pt6@%6V-xwd)A)#iUSc-X7ylwVr
zMq~apzS0LVqB3WiR@^2jZD-=Ed(jRrmAzzQp@f{8>=rt!#hZImTwd$wm6H(1SKh;T
z4R`gEs|hkdoB50?FCi5KMR_ta_VH1XlkWU#?BhO2$i6<=DNIJ`cp6`r`81*&7R5+{
z8<5;Zkorxl-kp8Aw(?t)$aQFBBxB@va<URg1ee6xkDv7`Y~UJL0UlgG<0oNb?HzR5
z*ECbHL|(u|a?r2e5ce?)r90j`M;~PF>2nvHMA`DZ<k@%NnyKeX&d#djSDlrl9>@Oo
zO2idsnSk%3&qrn!@)Tp<RJsK_mYjYwsH@943=r4=0AHRy8UcF-Eowi~u%FS{Z1NH?
z*;&r-E`<(Zx0lX;pns;XNsIiQX9HRGP6r;Z1XW^sF?YAPdlLTv>;6`F7(FFc??pbQ
zWAgKX{fLcMBnaA0{D4ae@td{p1r3A>w_`io#f}t<w}L`c^<qOR?^yd4OhiF%4Ty`I
z2}#;6jeV8I`1Am}YDsGqPX*)=jL7F|K9jV8q$PgRMJ8z@NzKx(I9;L(P4ncuOdm@R
zBz_nml?}6r|J!w})tdh-Li2QD#J2~Km?Dk7TQM<4DUq<M=QiNxK<7-@9dtG?H6pa%
zPD`9XiPb@!HtJ&a))<*;Up%cax-XpIVxd@FZ{ZuHzL@}!T(!Ers3^ipr8!4xPMoIO
zMXA@OEC{-{7Zs9$lcYaT#?N$uT`{dNg2MwT5`8d>|Kbjrt2foHxRcAr2cL&g6Wb#k
zbB-tQ^zY{i?~*&2#w&#F@)1Kywo*l0KE{s$1!B93Y-d^_=T)+}iWJ2q(RZ*Ek{jA=
z=`p}Ny+$^oH?YjD3p-yJIv+zm!o{A#FSkMNJXy?dGIl`(>0#BTlh0W3qaim9p4@g<
zU$8_B*0Wz>YGKHuMX-(J_<zLT_$Xj|V_)XFBp`Bv-mY#uSvyl)8_U)=rq>r^@9BQw
zAt}sBGJZPh6ny_Y`9lc;WzLfeZYPg^Qxmt&(N5DpbT<eswb0qSFG7Y*W2R~LCKX%d
zF-^&9zG$9>ir1gbvrpBWKNb9VB>Ry8y``4lQ;SkD$xl?7A|B7rUZzFX%eTF}U(!d4
zj46^bF~1BLDfnrB#=#jgo5v>+!-eo|9RC0aDSfdq;Y|hdM8R;jV!SOd-(Ckk-WHp;
zn@`i~OQia<q+`zfCFaY2oT~Xm7^3ox)Ornh`L6O+qM&WCmMoK!2VT&Uji%(5Q#7A2
zR!Tla$sa1P^IOdKC-LAxmnx-XvnjdVd|7|KmTWa8H&HTRQatm0-#J=xtd#tTDY@5t
z*=|~BHzk`WIrAdTdovIRWL@L_=EYijp?O<gp>IXzt#E|C!F43(&&(TUNb(kD)TpJ*
zydAni-^$Hf%a!_8Y2HSeZ?b4o?!M9bZK8R*i$SKAo6XzyQTjI3yj_2(zD+Z4yUp8d
z^Y)Cb-|EcU%^`hjFmJhI^=*N9`+F~aTWsDgJxbq}n764AFRd>%ZwF4+x0UAYTj%Oq
zqj|gMbbV_!Z#S3gTZ?)7qru>I^ES9fzqOjT7lZodnYW46`nK1+y*!4uruoIZ$v+;)
zc0MjjKRWZ<dEBsId<dCX4uX*nGj>*LB#paPxE5N^n#Fe0s6wfWy%z3U#aUSuvK|3J
zYn-R9NJMfvd=U{|)`)FYa8oaq%?@wc$WLH*5=hvp52DQo){SIOzL4VLtD$Lw9Pz@N
zPYhXWECi*zwkkWPB+{SC1j^JObRU%%b{pQrrMl#W8Zji2w@KxyqbQa?xUDKknKQaF
zr7V6-rmDeceK+Q4PW7KkpUT<8<qwwgH97qsevwr#2meHwl{T}A|Cf(74j1V+*CZwn
zmQ$vjhM?>YN9EKvR$2=;QSZX_mGv)1|0XSIOirX$yMmj&&#^>q%0VUfwOrdp%6Sv>
zOI3HyMEHW~E@7F9e1R2Y5reSO8!vq)>?JG2BG4J%PH}<(R9nlZ=Z2iWg-VHQd9Wt&
zgWSm>cL06f)K)bLybN5x^BB6{L{w{&7JauG_q6rTf#G1?p|h-dk<rl_{+B)NIRn=?
zIf{`6<W!`pVOj?;T}Ts=UQ&H@2incZjf@zJP%g=AkbZ}&m9SOK_0OHFV7Rgnt@J(|
zrfzCi3az|EVkl9a8!m0N@%?UdayRd$T&W^eSd;jAt^{WnJjN;ubNtqb!O8ex=G914
zutNLdV38HOS&B%C-jKhl&{|%OL*ot<b(8qQh{V6buOQ5x)TH=Ag-1$oQ`L!5*Z4*W
zO1x9Sd-!5Gl&x6_E#s8ks^1TV2J3DoAE9@7rd!X?VBaSvUi4<9-y5<kxeAoYuQ6ug
z_q2~@d2kj7<LMeVS@l1s7Ii8@@mW8ULvL*j1Ma0({hiWWo1D*&mrlhFG7T>xttRoU
z6QSCD3TSXsb$}Pj@4u)kv@c5Wx;X)W&F2wdPtOAON9P;Vr-20{Lm}ecx}UMFH7#vb
z*XER1@dp`};SkJk`4xH=>lFw$y>mDceISJ66G`Y}eNMwDnI65lc9}o?EaJ__nsV#$
z-&xIJ%kz;*cH+|9P0&VW*r#77Lmo~{=`!S|2CF^=J_XiJ5bI@&$7e(F>g7cM6-z&X
z0AQtT$ay}smVMpQTJJ`*#GG6b{}h!ZG_|-X@I`vJk^<;Dy2LKfA^b5?c5o98d2pkY
z{1MxB%m)?YFDy|xY9$9-kjH(E$@|EOw@@s-qhldLh;;+kp5AI#@^r2<{^I27WY|50
zu<jhA?<5PyZeJPQhhd$Z544lo!xgFM+sX}--v%TuOidBU@YLf?Vi`|83>?5OAk=z4
zYLktHxNh2sFJPet2&%1P(EC9S@}!f~Zf6$@83b@4OEvW9{J}zINx9Rbq(pV8->Val
zq+F_ktBQOFz2tw7J2&`*n88lrF!_%UgCg>QRafOfjfL{IC>#h!G^lx6Zb0-79}$N|
ztb*;toE8xmyI37<C%Bh)B`&g9Vxr|i?tB$PseuIyO3TnTSX>R-9w#Y`(k=HcMa#y`
z{>U2)V~bP0#fwg7XIj05NxQxCRuaKF)wC#hL-58MFoSFfn)@DVj`nkEmy0E`@YOh*
z1i-%vc;agA1EAv=a1NWL5q*K)Yop)Hdzm3uG>uls7=-2;=lvST<1hz&%L?^-6i@=z
zTU>zSz1BPQ;X&?XGx!^e^=_;{qH)?Y2HpNPe3ek#<XHJpk!`DZ>PT%#@6Ve8VpAkb
zWwsr7M!%7kztgL?8le_tD|WVX2+0Tz`!4<XkFw4s6kDUTp=k?NpWYwGBkjw9VKu%N
zwp;a|1OL|YLOU@rr|#p6B1d637w;w9!_kEse@*Lc>(cc$zH|W4n!k&`qZ_Ku#~+i#
z+c;DZUEHPqtEGNdu2&GLl(XPf<PSA9O3#?V=Q5Ma+p1;>qglci^`ZV#9_+avoBDsq
zi=rXq3><7%th22#&B2E7;Qo|`i$toap)hq~w*{P!qm=c?Rc|9K?1slk-ZXzR-;H>%
zS0`InGMd2f75P@infn-Mi2i2elTkTF^V2i`6O2lrNft-xrS>qoEBPgQUF%(PiP+_K
z5jfH$nU=*wN0+fDhTz2b3+BI0Fk>`0;-U-V3ujx%*)rKh3HN6^QQb(RE8#mUWx~kn
zu*W-wDI&xv_q)$jf<45r>$G~qTL!xlwn9c{y*G<_2&rElYd<csD%SqRpwo*W0Qg;!
z<2>lObBbLCZnE`mX?tY1=FgKI{4J(h()&OItVvfSr<S2b%W&J&Z-`GZ(x0D+VZZuT
zZa{6Sl23dG4MgW2QRv-#_%)WOzJ9>xH<%#rSD*jFc`#9#)1ng^7IZb$^~`c!{g$#E
zT!VLE9TjQTq0<$XC(|P2Y}W&2B$qbfLSvb<X$JJ+x0L~<;KR3$P-S2}L*(;ApUuDy
zeKwQDV-Qb9{OOw_;c{vA9{OY?=IC*$Ym~mQrxbR7&Dr8S6p0YQNBJO@u_B##ay}Y#
znqZreZM@fdKitbw2E(c9=9|sH;}cDAZJOcel&Z3-+fz?Vdl`OWe3am{Sy{KwxJUE>
zQbA;~g1dvUfgK22oL~S0HCXM64^Hn~0CUz0J3l^1RO?_xbz$^n&PZ_gJ%tx+57}Li
zk^9+udghYae?vDJ{;1$uTswKr%({Qwe0h`39dW)qJWW)F>G?8-tp5x1C2(<OzRbCm
z`GRN|NV?xVe7@+1=}>wP^F_WLHeb%6x}N9DqqqKZ=F7%!Wadl7MLo_JIRs!HLw{-F
zTQpUmGOM%F-%WIh-G|U$t<PsV$<SweuVl#Z6okM0!7=a5C7(vN+wOVH7H9lM@0c@)
zS}}ejTycYLclXqKW8OUyL8h7R;q<uG&|~NP3F1^RG2-v|npZ(6BVgb)EIogI$yoXG
zrz`yXbc$<u)z4?(A6#9*9sKBP;>gNcPB=a3$g|znkMx|X-`#T;{P}-4{4aF!*sP}o
z-RIX-#G;jG2Nz_YY{*@#*vF?>cg<jLZzqDS;lwQ^;)&8B?23QRfENs1mT*ewR4;ZO
zxSbV{L0p9FTE{}Q82-D2fDm%t;?;r|v8u+D=<jTYWy4zuox+0~IH_7%leoPA!_iM>
z9K#TH3@R-rbZw$4A2(>6ASH%fK1I0cPVe#4JB1y#!PO<Q7r2}HLQU(1jnp{rAO;+h
zD*Z?6Hw7<6n%TsTUgU>SY^ryo-w*-f7(spJyMBxA<;n%BT!ON^Be4(aHzP2)bBes^
zwW8{<?s<*(l|@Xs*qowV^~L0lFS4pOagw*d89k6)Z;>;OiwfT^3N=+1lMnhB4YNIu
zc6tf?2dTh^Ux7ah;0<TbS|qa`Gw^*z_!)+!?9|w+you%$9|brF#hv!NdjUoI%N#md
zu29?y8~|`GLe09is!Ku32`W!z+SA17UYfm(H6b<l2oAz2A5_f=8GD<Gc8Aba&&#6$
zYdLC*XXFd25*Y+LF{VhsiOG=_<gm!>*YtQ+*s)NL^Rl;Ms(+?eFPb%^7_0u@nMUx2
zMPc{bb!Y(&ei4Bt=oBN+1e@44Yjs(IjTKi7U2Nmjtm|dUV7>q3;*SjF@4<*hY+DJ@
z2a*?={SxEa*NTg5i|<Og_VRVAHUwdcf7356x5$ESHTRm<Nb3wYWl-V<otna+Q{9h;
zXy4S=!_I~5lF?n{B;QwYqwDbK*nA)#IAdrsw-@9XWS8cxULaO-kkHt|<ZGn(aESKZ
zduyEO##5wgSPCV}<P7j6v}x%HV|IZ*`UUQzK+qi@pcy?fq7(TtLvPpgYEka8b5z>_
zN&dPd&z*z)ZGiY1a`Q$Iey4;)Tf+;JFxkxZQ^v(-6|V9I$tA!~c8b~d-bB_epGj6J
zGFh!Pc5d5o!zuVoo=tkK_Zk;!0I(kz4J5B1sVhI5ySp8|B!mQ=uP);J-FB9h=udoz
z{J7O@0}}xru^%imAIkaZ!u+^t*}7ktRs40-S#~1cKn`acvO4Yu3l6r6S}0y8b(q^K
zycJ4SiMW`f@m6AfJT|r12AS5(wH0?-vACxqH$O#^t@F-`?H+9tTH{*XWFh+p*NTod
zHNbE)%vxtt47EogW_BH1m&OoOTCHfY>K~C#t5$5GrePV)r?4}4{T1$Dxm+PLNdb|_
zuwl11Hvl5zYn-OwlhQ`^RHhxVyUVnpKvt~BAfU4iO>-AYH^a_w+8BO13R$idbRa<G
zEi-s+50&Bsd9O8Z8cl!{TY$wcnEYT6Z{8GIqDh;?y&#MWK4MOk;ewpwt`vCOg-iMQ
z2I`fB3>bE+GN9wItI?`l9c}L<ie7(RtesHZ2U%bcR;~CDr3lloyShZ1k|1FMruWxV
zL=3m$AL(+Gm?~9IdTg>}a)+Xj4JU|mBllY$22V**w)t{NFxG+g?nOB@;F6gXOH9iP
z#oqZOL`3;{%gN1_d5<;!QF%&S%6Xk)z?yeI3A8Rn^v?26c-Lvk)zGzNa_2(_Ix_%@
zA{l@;X}qUFK7W14J%6wafT)-!#|}ccH!@>@5DU29^a$Z}qMjW3BytRpVX0*xi-{@<
zE0aCANmKCXnBds3WL^aCO+IT)OymWPgY6CoCvKG+O_6E3USM&fqsjd~a>%m%^fsJ`
zVkXUNnz-=#;A6n5dMDG<45=;c>}eNL8%$5fgV(2|J?<~1N!m~x8@S_3%xH=>SAw3?
zB%Euj5I}6TkTq``&6@xju;Oxo1c!;nf=#>o1WcvpKKnir_14ixQ{~pt>N@Gv#j6YX
zk-JDcOsdZRi&xA1m(<Ognq}R>{RRPoIC0&sCsmQ^u9j&4T}!1Ja>6U-aKUd(MIPy$
zKl?i;eb_m_DY=jCr1^!8SFD^ai~hy$r1s7@Qa9(h+})6&47nHRIl6kob{{SwDK$vt
zA>tabQtKqB|E@50hV-W=Y2=HylAB3Lx3^6BU1GHinSuM}7KK~TA#ktJIcC_Nfm^b|
zrJ9oB4KQ7gjzX;bi`W7%61KTi<^6f1QSl=NgA2{$cd02LYf<uxGP?LVc9$9YTPX7z
zG#WD8?~N8D9)S#3QUOO8RUF<M@Zhjk{Wig~u-6L&@J@)KV#E5*U!VL52+tyb*QW?s
z=yD)y#ZB*L)(W5P8-L+uaOs*%ZiB1ypY1ZnL4zxu{MlnXxQXfm+OuiJ$&*YM4@3OU
zXSyI>7S?pnI=cbu?yPKfVR9Iifju1)Gb1q2&ygD=X&~3gVgb~GVAf9|k`SR4vE~+B
zdviIZFfmeG{g$1bU6J=SzN<0>?+5onIBfF}D^ym{3eX)eUUgK(#ki+*NE{{NjzRx%
zrruo<4#c;Q%(tDFHRW%RM@q?nbPT$aY(9Q2Z_58rzc~|&RcI3TipdMLHJ$F9pJ5Zi
zWig-02@&xkO{AHeS*5sdKw46Tvd&5U;ba|YLA{K0bdQd-fZ?y~$+1eQhtG=3{@P`5
zq@%PeXwRZCoy`@J*4gCTu1)54Hc5GbF)dTD#wTmryAWozDJwihz}@s-hA=zJDzPD<
zB%9RKz6-;8SfEVwKPex($gTQ3?Cpuvkr;98b?Bj|^p)ch!$vy+Zkf~tM_19P@xm$#
zhY^#~$cn-Mkj}C!0571q-{;ZXUrlo}O>^`4@%HzT=DL$=vW!Y<y;Y?c)1c7vg$yp{
z(P^)$93M2?Dc~7aDoM%O?%j+M%ccLt(&k*#X0B;-@e{Neqs`9qlZ*MXmaS(XnY!+9
z{fvItdVNMeqxwQoX3B@dlrwuK96>pwI+3F$8U+mkU-ntZWh@`9vX|+8{(xSSGa&9t
zZ_n0kek1UWTrVINzk0yZJn?$(7yt+3qNtreq?<npIY!}DBZm-TVw#TF^A{8y<>(98
zl#jRwpcTGH=%&tOIs8I-gQs0wk8oXkCC6rj@LJcJ=TvXRbFe56h@V!yk&dA9B*Nex
z04-({S0pEDD}&c~H(`wHY?ydG=b_P)t1D&=jJC*Ce^Dg>_fovacMSUAbnzM$UE$n7
zCFpj(`3i~=&f{b?&GsGARZso6tm<+e<LeunQ_q<7M)f<WJGvYky&xK@E#pG_UlkW@
zi4ir|Lb<WO_pT{LTG>6MredQL-N+pu@t%b8q-H67YxaHxLKPEBg?fk+!3h)YP)-pw
z2Hi$>b>8C?i7)s;tRY&sX!OS~9qUbfucPC-8*wVB^6D=Hk8Ttpaff%#@v0?0vqmD{
z=@K11Hua}&>vH7Rk~L4WMt81)*%KA}PdDR>DSC5*pqfch{jw;L=ad8@Wp#6!1CcXA
zY*lH!1b>8jzt7){1)l^@22p~sDyynhFpK}$tbMcA_`%-};*7H+T7<3*?Urcg=varu
zre<#9x#yOB$e_-~iPz&yKgYUneR3KVX8aw2$3loQ5WI@mIUxtdF<0~UiHH#JrqXoU
zZZ@rdOXsIS&+g%S#s@dYC*nT95n`Q<Vrvo0(`;I1!4d%2=^2Lt{&C>+Yna<RCopn}
zn#G%{=Y#h6RPwP+yjgx^jgs55X{`+R`Z1suiAuI2Qlq_pJBy?=!8#;mVy(SlF;Yn=
zF|aqr4Juw>_Cc_WQQM`{gzxcYVDv3p6?Q1^>iS%>SZBo7m)P94A^?atbdcDH)HDbP
z1!NI1Uxl<nUeKF0;8;M!ehI|L6-}cxO78{a2EJx~MIhz4=&gY&v+W2I?l_nj!>av0
zrrx2%@DFXGs$nj<NY1nts5=6#!^Upk*dB<!k81A2Lh19F#QY)H;=C;i>v)2d{D2Eq
z@szx(`NksOl=2RatQYxiKO_Jy7`3W#H#$;m%Lz(>_JbSV=Q?9Pu_ulHbH|{+oXYvQ
z`z1Lc9xPaGD`>v~(zWV$E8t&W#GvFP;|#gkUpPAnk1kh?&HN3!a~33P^=q9J7g+ai
zmm%QHGq#=-0WWs&bnC8V@<JfpFc+F*sUhLS>>)Pyd?i|HMybh`@u<ipa+ibDRs7%K
zh=?HL+!V;y3bGa{<KtIZk9bN>p9WJvivty<FeQ@(-c%v<oqEDq4+k44xQQIyR!}JY
zja;k~SL}lf?Qs78qNscqrS9%p-xss%69`jJcUd{{`5-wG{jVZ+>?*Ts99GVKOc+_)
zpP}~0bJcmjp_eX2qcs%!oD}<mjB8?8jwv>gA8#JTy5>Ha+`HLluM*J7y=|;EGDdP=
zL+)DdoG)fu{|ev2!O2Qs#)Ac#!a`;v*Uq1AtGW_}BMu<=ZmmHmlhai{nRtKBruwa%
zpM74wTg$KIGwR!|k)z1#7flY`iVl~EvUp%zzad+nk>(%S_HYxK`wd-GJ`n090jr+S
z27;xB=m)E{*D@}B9AVY}jgf<R8q&8X_-zEu_*)ymEF};Z3l%EzF=e(ntX-Ve6ToL<
ztwpSTR{T{R7vcI*<~nhnnkcx)+x)#lX|uWpxrs@9t_5>0M1w5L0|paOH0(RP2a9z6
zp3D%yN7f9?gJuPj^drz#H8!WjivNsZz(YXJ9Y5^U_yhCGQFXVU-qAN&Ex(7p8XduM
zD$2eeNn3!TbHdr>1v}xmr&`8Hm{a}5@|3A0@`PKxL=+|-g+<-z_pM%>qD!_~@8#>n
z28WgTxororaG~cR_s$aHV~`&516)uEk3*;f<@cB}`Av$Bbqeuhzgxzcv_TM))q7-G
z8asE)Sox{+kjOGM?yM3VsuRPpEM(QN{_M9Ck)phiGiyk#m;8!YWsfOQ-W{Ywxby>V
zT^6Hzo=_G_Tr)UlQ+{y?K$X$X%8o&yli@%)wPk`jEB+T|ZI-@W`XoaeY#LKeRnWzl
zvRbcgqTk1Nw;nW+Ll~;gV{|LNm#iGxPR!y8#CjVnY*b*!ieO~`ijodscOmdw;g(R|
zgdxBPS0bp;_$9U8$@GMZm(UaKkkb^205eP);qEP#O!3!{(`3^>G2R%}j2Qs8ZOdS9
zIpVBNB#cC)ET`6c3e8w32W&|n>rZE}Sj411NjXpRy$-3F)a2MjM_Kh}lS8PhBY7%+
z)Y>SQKARD4pWyd?&vW!%a~%iPuz#QxnWS0xOV2-6WDWR;|4L|KIW^c#qe}q51Y6=o
zsexamhKxT$DIaz%aoAE{48}0)At2c{UtW`y9>XJlDsWaYfay?XJI2H<a+*I0v*01m
zRjh6p(fgUA?-G$6W)pG_4j+Qq9uSd-<#BU;WAvodcf0k6sh2t57@axa*c=%XY|0gU
ziqU9|b6Mf0U<b5vl<KsDO{2=Cr`>E2>Le{(ff>%}l+5sptFdZidfwNV)7YheS?_R%
z2k7soKA+9xviis2%99)}sQj}o2cx|A^w4FCz%~4=$Pm8&JUb=&UTR==Ridbw&5&vx
z&uXdC=&o?-vv$P+Yu>+0FVwXwR-!@{7_>HW(*Yr~rln(0$LH0JC>sz--5)Of3s{j}
z)|76+3iG6nfcFU-W`vHD#Ie`tO;ukaDM`}hiQ!)&sfeVJB)v!y7b0+>QG>bDsN&=w
zbcL^i=NL3AigN<Ve@~|qt|gdd?3Y}pAB_D2i;YN_2_}Y0nJg&DheT7BvD)f<O4Dm_
z0-+lFW=?vIO!)!CR?M!a(XM!DdY^Dbhc!=p;Dp67Z(`Vk7@LZuHQ=bubIP!DCe&1|
z_LYaoitjO>X&;w5jS)4AaMt)qZs_wV&L_FmLJ4z5>8bf2#C>!(dL;jN&EHmaRZa=#
za~u{CUO+Au9bMz>PI3RU%Y5X#&$pk35=KMKOce@7cB&a9rMUEU7*Ji|^UIq9(miXq
zR-oNJ&_}y%)$2(cv6%IX_f|UjT!`GxByS-ZWGRpSGGDw0pXc)1=z;2;tBi!E(M5EF
zIm33vs$WD3M@r3Lrng=Q<zSWKdR+D!vSm=IHUWaWW28AFY|tw?*YugfxrZ}_uKi<y
zK&-~T94p!A9s~_8jlYpP&dfh+d1m^H{NdM`ROdSj0L09#%n|3t&Ld8Vw**IS^!4dj
z^eF4hS|K_HopXX7eHSo)@v={NX2Fryuq}<6$O-DVEfw`5q&;3pg9c~ONn#?@HCDMV
zFQ1-1Z=5Uum@~y1i8}m!-owOxl#<G)vOrNfmL}xP+B6Y)U|Xv{C?uG1iOW{4rsBit
z1svZqBbW%u@g(Uv{@02-&+(fzKp_N~+#(aNbH1g|@6=?|u=8@5$x_D5T%#0Bs5t^w
zasb4bs^7fBtmGc`1uulAY%96lml>;{+McZBEYU({tbVQ{E9YW2sFfVGEX`QTnIp)a
z?B%`+^2)RDhPcLNKl*5so^__T6;2tJbDMNL{3LhIqm!L-#d_*7DdRIQqk7bZIJL0W
zd+#_|P`j_E@EYq<^iTPqBl*oShwGp8!`1fT`X~8tnEq))^*_=-xz#=DpYU8{Y;ixE
z{>d8%RUkcJ+}rFey3}Z%9;@~G)4?g(>rW^D6$@C5jCC_FN|+M?6aI^IBxYtcEHDy!
zw`QqVN=MP=!b&3FM+dP~6f3G~At0;V9~j^4iJIQ%SE3iDbt_v7RJU?^jXMY3%7tu}
zqgHCI#Lw14R?gD?D025Bnk_13+1UR!t1aG;uKEyRvHrLQpQN9iiYDyvT2s&T+&`|{
z_?F6|U&D$>?{F78bGR-x;>%UCmee$RVTRW?iTbLv<7<vsaK$vww~1N-9UIfUW2^C`
z*Q=^xQc?5;bWRnc2dY^f)4A3Q0zAl&>E6Y7Ih!sIw<BuloU77)=lCE1m?1)22Jo^r
zGIOg}b}?`bC(iHdFP8hQc`fi{cmVV}Yn1e_!+Sd~d#${f)l4oETo&^8HX*kt^|>ze
zK@M{pfNY)iJH5qrrAXk*eE02lY~1duIfS(K%OP!MQ!kUAqa93+*Au!XT)}zqY+&=7
zg|8n+eTBL*T5%Sp0LyCpT7f?PcP@*NzzV@a^mnd$63qlpj~x3>pTktOmaAD$Kk`xq
zzLsQ(n7{)2IkSF{U^cLtD(iJ*gvfJje(R`~^4-@LDV&t+p7WOIch-iq35{%oLx~_J
zG@EAJCDOhx0YQRHwk{iz4V3N1tGJ$VxT&+~e?-7B_RYr`sbZIOJKjgui;DNA7lbR?
zrjHX|zF&xa(D#qg8xFm5lBe?S_ao#CMaot?7g4Z;nm~w;z8j<-XOanZqcP1e2oduc
zsAq`;&vT+nI|iLftqhaQ<|X08<X$;RhuUksR|dc_I%zV!e*E+8tN&PKR*oL+t3T?p
zavV=qxX=G<`|6gWjJ;@o?CI3yZ1OAYc(d>$^VNJ9H7c_nWZPGB5`FlRu;!8@ED7H2
zmzd??WaumFYQ}%tzWTn(jJ;?dx{;CJI{8a?{(lBAb?5)y*>uY1{d0ux3&&6Me)#_D
zoqYe2G~eIXu|q7cznsPQk56U%_h<9}-wFTUpxM*>fBip?{~LSKYesgpC-pgLF>|5W
zyOOc=&ByzvYLrh`Roqq-Igzfi0*F<qZ#6FTs4GC^bv1g$Zv1Ls?TOv{eCSAa*w1#(
zE#asCy7_fAojamE_CjQ_PRVQq#PYu|zozxi%&#YhGrusU2_z5Vg17tp(hqNr>~Vg{
zx5GrPZ&RIWE)a7w(Tujsm8lbl|8wTo`GCm<D!IS#+kQRHufy%JU%FVJ%Cg6PmM;B|
z?Xl;5vZK2__KLMVlP2q@FGn3NhaABk`&3}g?9%nZ7m`%k9@_%`e~~@*hiiK7!V%$r
z!OXi({?>#1G~~aKpTt<$$WIqm82Rbp13To5N-w2`os9fM#1UW3FyOPwPgrvGBtMC-
zdbt+S;oWlb;lk6Db&bR>YfQ^fn0bo;H2lj}{rx<$4UbRc*LHBisrJs1vDuK7^q^`W
z-=#*u-zndTdA5RAMP2FdzI>+w*$p((O(1JkJ3N(`y6m5P`Rr|GWv6xkXIg17?NmWR
z*8Jv6cX=%&^4jUyLVZ^LBg=2o&sUvVSJ|ynWH(Dq@4CrvDIlT0AqSl;NM4?k+R!oR
z=ssyttDTjNZE;s2Z=Uq3>jkb*6KN`VMV4fQt`t5Vko`K<U!9LC{2>D(|JBXz_;O^A
zZrn3sACCBUCx3(>CPEsrTF0Q<3Vk_EWi)Y=TkBm|n6W4L*R3DNT>OvLk1q1rtc(6v
z){nB@nf0Rq8#1-$O+Inq;p>O!agx6-?{WQ*Z-=cP6;#*r`tj<pf6n^x;RTuX<JMk1
zt{(yv#vxn_N#EyraF~ILEqd1W{D<^QlsKyDdw||_+0P-#VAmlUoA)4Q2zpMl*9>jT
zb&;It)tJaeib9y)W6|T4w~6Ey-6E2lm>~|)_sH2<lH8!w?+l;KmgDZ1%m+Wx!aJpf
zT5s6nMv&`ffLWPdf7DJg%U)!A`hHp`|2Fd5@6R{u57(M-o}oM8ZAMBJO9(dbF5_)v
zxX2{dx5Fg2SJIMObg;;F(bo}sa7)k@8AM>EV!6;11afnsY5kN1Y3VM4RkV@rhIHA?
z|5xkJzivLxqoYTZ=N?9^>6GVoLR|j~^4#LQ%zW&19`jM0RV2?m|M2;!AC6%r^>DvV
zz8y9nSDbsK`4~p+4JH4N@1ssWFEbzimfPceJY1eTMWM=)=Q`-?|5%>;<GwUGX71PR
zT$U!r?wY0ad{R>iolh(f9adFK%9rQ<b@aH8&K{8-hq3wSq{j(l{a>KRqMQsp#>${a
zxyO^df9T=#s2}D*Nj=b`d^?OD&!@Vc*M}!LZ24!<<MW)+`1^}c;4{+WFNh1#Wq<Kq
zy7WJ$$1m<Zj2<Wa>HnG@JNbJL@_G4xA)j~ZH-CDzk<SbE^eCVIi}agok3C#OPs`^2
zU%$yjK|KEN>o@=X(?ap!@=w-pj;2;P&|&(`gP*kjztL}QRZegO{}EmFn-`Mxe}O;l
zJ=m`Cd^s=p?wRmMxel4U?X1K3qkg#M>>l}}d^?OkmQY>K{PE{!{B!u@pU=$j$5OiS
z8T6ZXpV5PUvxZLnH}#vxr2bp_&9`<LxmeG)PWs(HTfe!yw5xumEB|LK|F89%(;w@Z
z$^ZBCo1Oe#^v&s=%%RhTKIZOj=D^fhc8%P_Fo8ZW3ohdgn_{`^DVJdQ>3ZVjVxjyK
zMql?k+#FC1R3hFel{9Ji6~l)#z5&+8OXY)W?v4^>kT?DA1~$dV$V>JWQSQS??t}>o
z<wsE<u%RTHfHZuoGj9|5A%0C_*<yX)fj^c8fWbyt-Z3)O<d?n6Lfl8eq^|)_5PZ(Q
zZizD)@=HbJmqxrf(4(4Y+zpWN#yb|f3m1@n@j}5-<i}xr7V{9&ps10Uvv4eLse$Z!
zFt_v1Rk>MJtA{=Bc-)wi4c%LG-zFoCm+|9jDKRI$I7i~PYV0M0j2vg+ToN?1+KA>P
zKQHnmdPD!7*xmOSXJ$|qX`OvP-+_1RLHP8~r>Lbwnv8G0<C}IxGcnFg?==z2s|up^
zT!~>iSEMxN1VO-7%edf=<veWH{DBbD?DeElo6v(nhOH*U(i8j=X1W$go-4gh3=gCp
z1>WG3v=?a0D~f*6-?CK?{X6b{{C>vTx#HX_Xf50rjP1rAQtuve7pRz8<xXL=OpNh#
zOlrNU@*<8`Zu(ELxU5^PbfdQWoD*amQb(^ND4I}o*VAh=U+~={H=xY<wGTvUeizWX
z!jyW@bRl^Y-6Fnd8)5ZOoymN{A6I0;_*IY2`$@0h%J{RB`d}v<IuY*XygiQHNMhK3
zo~Ep>7&~0gI|F}MY|1@o5VOe08B=1jd%Z9FrQX)^gLd91LXs0Xy`$B@$w5sWaN;00
z)k?LGJ&XDAX}nYG6sa{a;^(Jge*D4<9{~>fv&{TPQK3d$+&gG1s5rB4fNQecT8A(f
z7BLjTx`!pCFa}9mBNv3+c!`ojWud*!%Zr>Ac5f-H$@@A=#@&UX#EBa_^<^E$ic7l?
z-pxOvCeb%a4JYXJ3V|K_d^Hcbp`+EDvu6_M3Gfl07&FvaxK;x6HG=`YFYyu8EnH_K
zpY;j4O7|B&>)Tsi;$994XB1btqx)IQ=Swe%`&Pzj(VKZo@>U8NvLEyE@Kc`^=sm5P
z)%t?Yb82>ZFqjDD+KK#1Mv|YWj;E{`R)eJc;CP!5!@+A1u;85U=v||^yCnvn?cfY^
zpN&VrL9o<75h<~|2e(^-tBU8Nsna@mv`f{mX#7Qd(PG0D6ELw|9ZcA#clO3wFToFU
zvGL`O`?FYcW!NE(vU6=wutBp*{J8po_-PF$uFFw>QqBXF%#{V)bf|I9Fjk16*m}yK
z`=kT0_4qHz-!vs;edj6lJ}j<=tpTI<(s*1Nr%jp(Ht0*m!RT`AcSB+K4jicE%k^=?
zu=EE%04=lyqi*I$t_g69y-`yt=`9^e`%DQq@qwDIHcZ6ym4Ae)l4(sDVLn8<5Y{1)
zRrzre!}*KCIpnTrXDw;Uk@3=t9rM`v;Ylxcr_DW#{v?NDYfH$&o2(!NF^jEL6FMut
zCtc=V9-Qro+drSjLUyy%+?2nGv;d*2NzyQG_;31>Fc*D+v1v9jKz_=q|0)=+N=(88
z!9>bR%r4|UrYO_tMR~`dL+=*`5~FiF)84~D=2L-=L2vV+#`(SACRlgxwcxjis;5dv
z-5fltL~(@m{lesNhM8yS)7=V~2@3>)GUJ=0?{mFeapfwm@Lx@24_z}9Psw|z-|z`+
zwx`-I^Vg5l);3=n#T#wNJ=xYkiqbgTS$;6d#+p#WOOk&vDQ;Zw?r6wQE`{pz&-oj2
zd+ECV4$KlH3?XUgD<DphWFl}e3A5l=Bl`GH7#HqGYFl~VDHQ9v8DGF6+jpib#t~KS
zphc+CtHm<^choL<E_q`IEv{{lxgdV$2rAC%`8RSCe3PeN%99C3#?M56@%mAO3(8}8
z2EmeKyTh*h5>C7;_DaYS;K`raPhzixtlwj4)Grqs-{WnfOgT^6bKlfyTZ+TLjXh1)
zjnUNHH}>jm-NJB0dfBmXzjo&7HG>Hgte4wjZ|?Pm&^7L2SoM~HZ;3#WP(guZdYZls
z8^=$r_wBq-xo4m;LZRE=fF_1yDWB?A$|SsG)^~(^9FcXPX)OVU!Nn9?ZBs0!p)MuJ
zl5mbU_u7~lo5_#QV>1^C)N3toQ2t_My4V|+#5Pwpm?U33LjT&wc{#QLO3!~W<X&3D
z9eDNe89!4FKhi>!Momlp3KedeUlKkuDTXrXcT8JuqXa}*FSCT}O{)j@4dg@~5rubR
z#M^W6!`bK^M<~VAB0Ya2KBwR=zJ}?I(5VCIEYz`WB~DIeP|X)^poQ>NE(8)g^y#c0
z>75e4kdD50@bw+t3MF@;Ur)nh$67zNN04x*6(0!POfW;GQ=rnF-d{f_R4N|1tooT8
zWmmcV_Z0}0VzvHbAe21+P78-qX)y;EhDvA3Q&%dTqCj<{(%+uiGnL{5{eMEGR=h<3
zFf{rOCz(PQUOgRCJU@T|Ola;%#X$X3w7YEup9c_bNfa<{;=w90;*vTYrD->^GVf93
zF`Kg)Q4q)d*^CH=)+_ip=mhnv8==c^#h%DHj*bWnUbqGEI0VtePlwx@nMxJ<#W2Rq
zqEUur;y_my4mRO^akSk^#gm=9kQ)<*n#L_3Pf9PHvDQ2Z+;;^-#<C<tB*cfO5}vw%
zk+?mO<AWk=0QOZS5;t36^WkCe4Seb;IR!FZU0Z`|q=SjkIYH<C02CNXoZmE*b>dI5
zP^BuegqHutW0m8D+-n9G3V}_ON-MV6&cIDoiK#gVw0rA*t!$yjos88Ter;N6+<z+s
z2O2A4EJIl>md&+7sbU*LfQbBOx|}!3g)_teUl1~je1j2+hyeOVu<k)^An4`_$=^do
zHHlG$Rn9V50}#<!Ruh#>jnzYVuW??)i4OP|*25|w*sXFNlcfWkmhr=2%hZ)EkeUCm
zl;FiDS+Qprj-d0}<!=5SR?Bx~bbOXKQ^Jrc<8~GbIk<I2GRTSHPl0*%9~Yf0*PBFI
ziu|z(>|;}pe5YBtRgK&rWYsZf#;!sxXpJO#iM$6Z+O60$smJ7mjR?$KPrfKI;ZW(z
z;hbHB<ay5do9&J*tXpMx?@>W#GuK8gcdprjAlr!J?!D0+qY_oUJ4&}Z8-h;1!G3S%
z$=0UI)sDj(6%A%DSLG_=pd{%L+ruIJ=oq~SFgiwinci|4+u+A`i=-)koY{uq-@M{I
zEA|`Bp0X1IUlUwaOVE!p=tC}+C;B}lX;_SJ3OT)pHW~>aYZ1<RwB3QdLe4e4{SK{*
zz8B;uysE;RaX~OK{!kTyYN8*}5s;JCBa^RtGtbU>F`RRt6TacSY-c#Drr@JFx+moJ
zwiEs12MYm3RzQDx+us~pHZ47|DyjyQ;5mNiW^4IY?}wKmMl|K`5Rm;D7OZnsB!Z&-
zsaNAXAyYf@xsdyW(zo-V{CJ;Mewv=0a28!0kdKb_8}eT7{H!eci_8eQo|<K$?(d)4
z=8Xq?l^ANUcm-pR$OO*mHoL6)U&#!V>6pp>EwZPwY{U>U1yB~O=>+%=S7<~>yrl7h
zZ_xSsU<FfTCS5~<wSuuyc4*v$7!K%t|09%6hU3V^jUUq{MAQhOBu}Cgw2p+lgx9u$
zxnB^@93LuK(gMY>J`!fl$Q8BTi3joXfXI-MDc%v8;<E`5LYw~5{(<#fhBYig1OiVf
zcYwzf*-j9lRizVii-Hg$;uj}Ul#vv=3NO}tv4WvSsW>f}I9DKkERYEnd-Iam)0GYS
z%(Uaa;?@W=c^cc|>Bag>-NcExwnT!i+3xfb;>hs-DBk%sA1@`R)^ArVvju)<Eag=&
zwc?}2!-a`roxG4|L{pzUAyl7cxc~T0VVV$q>Pw!^B4=h1EH8OmmV6V6Jt6EpKu}oj
zXhHdxH?jk7mVPFN6(6TN@a^Ac8#`{3?7#!g->RGq$rgbu7S3-EBu~aI0K&Nua>Q|e
zHzDUBv2gyekW+fNkaOINJGvE0K0<#Hz8+E(C~9h)9Zg0&1pZ_ta3J%law?lYRE#Q&
zd{u5>x>qCcZH>N%zZ8aFacm9fg}-+Q;nJeyP9bRYIGF|G7?IqcHAuMt-+-$IO6L;8
z@&+kVdhz3peCi|MR3^w>c&JH*R@=Q6|6m8SMXL%g&b$geIOeO=`!)lT^!Ov=(Tw*J
zBY7uJqkBQ;spLoPVAYpm;x|j5(-Y#AL!WdcFOqrWPAIIqC_t!jx8T|xa`;eWCkl>h
z6HVn-?oGECS?4daRMx2{a$<5313&bY<hu8Tb?ZKh0e^EQ8Mdw!ZBfXbQCRC$>}Sd)
z`tQ?p#M+?<HK&=hb8zUe>hI(P4+oD`JpAPf@NmIK@Q~<#p|rJ?cBRO^HVJZIS}{Ts
z`mPcPCo&MCoytS4cgGjFdFtwmv`rOZtwNz89urlNHr0njtG(Z(J+vA~bU%_9_B{hh
zP#}49!$*(_;nXOo;ii!?nhBxkJX`A(QPgkd?CfT2(lhHp#hpVUeK%y*uk?Ag?`Rp@
z7<0Enl`+25v7|6sxFpYt?*=hT@FMq9e$y%sdKGIfGD?lQkxVm}k8K4F#j3FSjiAzv
zEtVhF|6^o_iyg3?mj~XfaGu&?yKbROMs{bT$yuxnh?pDecICld%81Hh=LHL6yAT^D
z5{Y5>wp1TqFSS8x@~eTww}(-BBs2Oe-_Oi~C3%rlTfxW23pn-PW7&tA3SSdyDubGu
zKM-nagPP#<Bffl$l2QelrR1fOHPL?rL$m5s0Y5RU7oW*>Aj&YDw!XW*4u93$FX@Ix
z3_ET2mskVS-h8h8@H67TK#5RAD2!hzR$hq|fSPD1=+2il4J>^*F|os5_g0?vGek1$
zmAbXwRVDsuhZl<m&pS`{b+Lo((bwp6an^z<5|NL-N7@QHj-%(%YeTMO=Ur~_c%7((
zkW%rbQ?NjSK6K)70G>YViW{1vUh-QY0Dd9aye1|x=6=m~Q$ab<%fI9(zKhWkgRWEb
zPp_nrI%8ipQr|<TgJ6Okkk?9-La_i$en;!BlX}wh=No1Pabv?Knbl*=H0j9D#<U^?
zPS)GbSzqmJx;)WurkyzPX@W)P$KGVcyR9$~nf3T0W}NllbJORbqMXWLh$_}S7CE%Y
z`+bY*?I(fEI&eJ7T9H5Pv<|eXh-Z}~mXKIgF}bBMS_yt(Ebn=@YZ2oK#j4&ebOnuN
zq1l&9ro?VT`#Z1hKreGaap)_lZP})lY5k`7d(rzxa%7_>zeBJ(Yqs5c%cXH#4lxC+
z`Z=J)X$d+nNN~9QE6(B@lvBx%o4)|sxWaZ<*pldAbd@;qt_4-@c~#E7s-e4{+Z8>{
zt=TB}RbNW)gwK>~WgVe)?YZ7hgjhr!(-=jUvLQbhdnYHdap-2c1sGl25G_BB(Sn87
zi+?1xXWX6@DQ7!x5>t*L(8OFxY|bRMka*4DJZ=ZwC~DPou6)V$>u$LU$aQ)MU1@=4
z6}P$se@9=mZddW#H}^{Jp)J<(<8Y$!`e{Nb+4vl~HE7Vnun8iZt?r2ni0gKOItj!d
zgO9Bf7sYYgb|S@nqy)tWfo!KeN2pnm5qU0o0L)m+*Qb6%%)SS+_I+u7nLU2^1IH7X
zP-@z6TfHqkz6Z+ZqMtYRF^OQYqt-kA%d{X;qy*KG6MWd7C~X_9<L+7j&;-5DAFLWD
zypb@#mrlcM882vUcNwK0w0@kO^OEh}vjA*_-Jfh%xud<x{T^OR8Jj88>)s{QA+3~a
zCHDxGFwa(2vqUBO%}uF&G}^NK5O?<L*HV+40|~twc7Gw56Kg*)d<-S>W2sxx{Z&6X
zkx&&uq@a>kD_GawD{@iTy$m<3y=ror!xbB*pQ$0qf2{26GSPDq=$aQkS@l2SA$z>o
zcjUKKev%VCn-LC|zHF~Mkn3QhJ@9J&f5}>LSuZM!I0P_%Kl;OT=Eyd^7lVJMH2Co#
zBMEJ<1X)uBoj7le;6LL+ZU#s4Yn<_BN6qC!VpOkZH_TtQO@oOlANxVC_pSOrDzv>q
zFolp)HMlsqh6G{f2j49uF3IDJ9CLx)S(hnZ$>3aZv(8Mt%j<>;-EiN0wp<~0>d%HN
znx>zb6dx#X$}FKQ>ya)MhbtPb*l3~T<+Jmhj~kQuu_Q4~a%R10Ew>9|Z{+bxRE?S2
zVmqzMx{h9vr>zyX;Khn31W4CLY~LLDv+a(wb8u{MaQbhp`v2fd*tLtonqtipzpSYr
zEnpBLNMo0gPMDLwSTWJ&K{JuQH5Hc;@cmo7R#luEwnlADN_bB2=sS@xxGc;#g2u5b
zbjoePByKS?@`DVNRWIQ~6s$Bv*1Tg$5_rV(MO+R{fzygh6d!Fpq^-ZFt(VbyOY%*g
z+wPK$1)@bek{c`YcO=fA%NcwA;N;sP%rz!2(;D8j;*+Se+c^_h*ZGNFUC!z<M@SdC
zqgi)xOu`{9lc-s!-5p)@jlfv%?pzeOPM)06O}u_H@#nPQ+}(>nALrr&Pa7h5C2%GO
zNchZY;7wQSdh8ihKNyMP4=XXg!FCSOY;df4YPh#WC)7*c*;@VjiPy1QHoyWRr<voy
za@j1MXS>JPd1F!LROU-Scp`y`gBUz}K-pd<sEHMSPl=UN#0?9EZcS|wJ*(~e_i_ld
zworU^p*T@*Ue3bVyw!RSo*@|27j!7*(<Wlts&g>6;6C(VBI$5GLiR`{x{*kg#Pq~(
zxBKH_z?aR#``1d>dg#~qoKHJ$yoo8S{#8US5XKW0I4@oxEX|t7MLT&}Brh=x<%IF2
z9sq9Ro=o5tsDRr5ysuPrFvi!JtDmS7Nvt4=Ca7-2)+9;|*=7s46~S0D5}<-6(R<yc
zGNyQAQ}oNd;!WNk1D|#TCkC$*An$-^%zhC0WhsRV>;&UMP-#}$W@NdiWDQ8nS-?oI
z6edWv?US4GPdky}26WU`vD7E*R2qjiPM&X)vCWL00&i8nS8L{yN$>oNk{*@Ti7TJx
z!75-R@n1h@QNXJI*hoz>u*Nk&^aQ<~vY^Uos`V!A5}`cMu{GI2zFO~3FSRp%)mgbw
z9`*n0H)Y2$v`sb~b17l`(Gl@aPBb}8u$K2#D1>V1L%T{^txeUtr4!1xL>?y`xwZUi
zd{9~Sj|!B_Wep#jYp;8QmAaYb_*S!M%PKxr7V+z{-t&16WxdPtUBMlX0wagB+Vj%W
z5>91Btl_We8lGNXxXKyk<R($m>QsA7Fj?*c-b|hT<0TlinSs%Mo6UK%wR~ObFSXvn
z7v;FV%AAh}SF+&YxITFa#X8sQ%y*g7oZPmMiOssuyHACf!3YUr1|uZMjqDPuw7SkJ
ztyy4|j$dq*-mugv{d%KS`t260G}>yF&e@xVTy^gYe(~gCn_$qwb>ihxJ$}OZX^NNe
zR|ujhem+lS3P8M)M{n{bQ5r3@dG73_MjT%C0_IkoS6e>gQyQNc`B`H7h&lh<-4k{0
ztzOI=u$^T~_;C^q{AK3V^OMyj@l*l3{$>1L(pl*_M36mR-D-J<f<@;i<~;JIec4Ne
zOL;>EX~6s|U{89Q<HSh|rFw9@h#!O_=q`GBavmk7ELc@31rvT0@q|=Gm`PEq$&+>I
z3*I-*g7DQw=V}2Qo;lFY*$^syD$-BXQ&KZx>xy(Mh!F9ucf#7^(m~V?A`g8@N_GO8
z8k5=I+U^6AZ%v7S!S&cj$0G)fE)nkaK1sxj%5+b3v<>1iJv2!U%%w9VQGq-Wt^pmL
zAQQX@(TZg2Nu>#`z%Rg?<f$Ht7r6KWo>Eu&d`Map84MkY85x|nE)yiw<b3LF0xIPz
zG&s9YsA31&*KjF&@N|oDX_1b~{=lHrRcxc^kyd<s5~-4qXxqHw&unKLngpxSyL?PF
zRhCee=CdqpIBJrlxf_LKx(GgLFIO9&*N$W^f9R5|Lq2UpR@AK)VhTil=MPM{bQc42
z$1nZ<DZ;&x*C3SKt?QRTlQ2M~g`v>PIv;6X?HQ1OPerBcsm8juN_ypwv0Va@*2{)7
zYqU6464){*iqEA)@(U!@dbL}HThvK^&HV89Uh1AhJf-@+D_9J+RM&5g{J^ewI`V^1
z)277~Pn{?5;tT;Pyv)suHRf?+(2Z;=CzDnGq#!IYDj)x5h0eLMm%^4NGEyB@G~!P{
zv{oVa$|9J{lUm?U6maKk$&|r=;QG|BI_b0G>FB6#J9x!cMN4Foma}Q=%0eu&oM!ht
zoIpgrY$wK&HlfhLahhp=jkaHD+NW(%SVo`J?9u0B&$A4<FZCSjjl3-3B`E?m?{0L9
zBrPOK3ITqR9PFmk=V-d=Qqlv%8Ge&yHk?30Q$+hp3{=(S>gF~P1Zz;qEL+N>v+zkt
zz`L=2j_>8I3kzb(ER|19@g@9-vO`9h&Ak6;OR8YqiMLahpT&~hw@`HAEhcd(C0KZe
zAkHp9HmG(7h-pH7Z&q~ZNJ_GI8~RF(vjy`PsgsJzO+{nP8&+w+`PdMCf~zqcL8z~!
zY(jEjOoNAJ33!I@RLz(ej=#EuWX83LHy%Q-TP+oFvLI}s#;q+8HpcF@ns`YXjE5@-
zgbn&A`Uuli`rzI4>Ooc^tA2%a4`L@R4b{qf-zvXH{<HT#yhPI1?cyBh1z#;Aa24eA
z5k(Tkw_`JGPeLj>zXcJGZ8`6uN!ONz+$+j8zFtRF!@?bcCfUH}Ei9qFs)j@>DOC**
zc>H*Su0{!AE!P)*^&4R+c+`SceS|t`%NfoIO_%+h8<zpkaF?{<pNxta{@q@vhJV_%
zi&x7qNa_?#?ZSy}IF(MoiJ+$}PPBk?Ya4LG6>s6xidgi20e3po&NHiul`0Z49O#|{
z{CKb7U72B#r258&_!G2e)lU>Y;hQ8n&7nT8vh|dW6$%Yh6<EPY1LFGDi3>8^>hhYz
zS;tVNAS%|Hi{v^)vJjh)g<+vo{@i;`{2}u0f4yVS=D%Vq6mLV;mRz(h_2G{H1ldSD
zEH5?A{u<}`8i`A%6vLV#L<LJt5jna}Kyk;NZ%-Os7IX&Q<&LZLAM3@j8gtyPsrWQ<
z6NzWR(IbVyru@643<*QJCb%=$XtYJxHXq7~JZeuGS4JM}SgFO?5qA5(*b9=OJ_sQ<
zl;}4woU<?3F>oE#M}Jl0eB=`}F{NvWUl?00um`OAEz*`x_E;J!<N*J7<QbjRi7#Am
zR6gg<;ex;d>`osR*s!A-7I1sV+I!zQTo(7cZ)9TgX3gKq?6fE4$FOP|+0lyCKqJEg
zN1%y-TRG9GE>pSA$IFP`Od6~HuN1QG`6aV*L;$(Nisw_En~NL1|3llGz*kjWegC=S
z0zm^ORuHUHw5X(Y0P8>$G*=S1(FAZ{sCC8$Uwx_;5^z8hxVezy@gl9Ij~!^Oefm~w
zeYI9_L=&b9)GA_Cs`g=U;2dKGv}IKCet&zPJ4I~YzVH9<M{>{EXAf(ywf5R;uf6u#
z!xOttb>@AC@9rw?aTZT2b8$dr)022ND~ODi=E(9(&KxZtkwSt#K4p=WRf|N*y2?+T
z#3*!d=+1_(5nt}&c8H5BWnxpLE%_|Zm`vXe$wrKzoc%mTtWAwU)_uD9cXX+{%<YJ2
zx4EPJL)P{<8!RJ|llx{{Y6I1fWny18Kw@6MSbJx2VrwLZIlz6b{lj8+sep3RmPKOT
z*s{cyNNn9lZ41jtXFQ)2YyYs<y3VThZM|ddf9nxTyc>zB0cA_P7csBzN4PGC>=ZAl
zYBL0MjQ}$@M4VbGLM}EqKooeVALcF=1*Q0Wjc+k`MznUyXv0*;GGc7TO;K|i&WrY@
zqqXboV2HVg;b=_R*+x1$^KV4{YB6qRk#oin5cwtsKxV2+7ab2%7z903;v}!a6BEJL
zb}>Wvp(-a?!Mk=A?&;5OIpzR-Y-5SL%7)@IMwZyl(S0d3j$E}<#zv(L{3q4brGEVY
z5U`xv**97gfALQ*+5d<&no*DQEHMXuWLDJ*KG7MC@7gM}IfVW}JknlUfxfq=4*?j@
z_o8#%;+bzCf~F5P6E5?lH~q6()5*7hIMYdYD0!y66HDlt`6Y({H<yus+hi%-3HiC!
zn=z=?n^?}I%iIu`qbU|Kf8~W#lQ1)jHt)oJY><jQ31SIr1rM@^ruoP_KPsjl`566o
z=HA5MV51d-{^%09j(y^k_4>p)q<6q_-L9AN#z+O3^TvqRi(t}!VFhK@O<oT(j^x-;
zkY|(|9UlC_<Z9ttL2JRnT)MYZ;!wt<PfV@?**^OyA!+0-M8xs;?KJzW7p6`hzO!aH
zo8v+bPuxi_wc5KqI=jnsZr*+eSavghvE-Mzw@2C7EO9FO1;=aEmm%;-X$em207m!D
z71S}0?FseybSoFiR7cv#h1-o>K*;wB-qlutmAm=a3;I&afzn?^@d?v~8~{SdoF5HR
zx%6&&^}SL%Qhn$Dl<lLxOQlJjaWbK;LBc2k==dM}<{ugRgeRx#c6Ko~u?2N2TGQ<%
zZx4C<+~7O|BQ8)HWC_1KvHLRi=jl3wXdnO9a((t1{=Mfe)kN+rd7H%7oh4=-goUJM
zxhc(O$N@9?r$#>3GpboWDY+g`&G#i#mqbB{nX-U)?8PNTU4uI`j?Gw}GJ2?)Ba5xv
z#3_!FmTW@?nDIQZFZD^X#ZxJLgs+b?0yD8?8?$R4Hd8){wT<qJoNu#oerU`aU6R<e
zF|j-5Bo`2E+%NeS`sllcmyA8nTO^_68HJL_z)5=cixsRX`_!}&*6WBeNdW-kM1=Z5
zE8gjmoY)zzF_G1fy@ish(gf$wfGTLcjfeP@*USn<y6=z2u$^@siP<iDi&S$g@sEh<
zy?11BT)PR|zrqw|gx)2Mz=BQkCrn6*r9;RJ<3G+ze9B_IG23<xI2;EkoI&t2Qg>n%
zE1kBR5VGE40}*23%)X)j*Cdjwb!nqrr~18tD06Xgm;bQfTM>#^dXn4#+l4qXb4CtF
zT}=b%A_m~R?mavD3;1%DjEMMOnWdqg#anVUwF(_~Ukx=@@*;G2i;R}&n#l_TLJ>Uy
z70GAqOd=-p?ks;+oaFByel`vnVg~Gb%1JC6*zHkiVM1V1m;P3JSCrRH`EGd)32leK
zMAcSrlD6LVCht!2FGvIv@$+1&wFsZQDk&Z=k16Ul=9T+-(UX(xK+ZC{F6|u+_4P&K
zZX!(?v36jgpO+ecIx}m;-B;{1usLrUh*z+RHq(F?eSukE9r~#1Pn-T}E3~%aojSac
z*=0k0d<d}2^dI~gEyeJY7FA}ZI2rEA@THv&gKc<UD3h%XzP5}lt<;V<@$Fk^+;!d%
zPFxB1Oqx4La9Y3CtBAul1}Sw@*2PmjFYd)0m^!1ApAcu-*0zL5>_#+hri3)G`DX)n
z+NiohA=ci+ZcNc93XxujJwGE~S*;2y+Gpj^gxCK^?x9Vc1xPSp9}o#z^dy(lDhOI-
zgajJ*?jE%j1QX{!RN^`(zNyCDQhm-Mb<VlxbqH=L5Bd^Dl$FGsAFixE?olJ;TF1~@
zc1S0GP{Ny8SXM_~O(&Iw!B5}Be0(daSe@{37hP7}XYIiYB@3P8bVg~55s2kZ>#sFQ
zN0zbRQ3)>6L_|BkTJ0qEv)o}BZ`Q-{%2%D%oo1eonRS0UGL*VmigQO8$##X9A+1{y
zbWk`)R>5H|49g{nZ-PU@A!cM*0m+k>vIz2uByx^s{vxDLyP`t5%kb&}%y>uVdGTFu
z#hp02ri(NZSQtu$8;(42k_#n<g!$89xR66ITh|PGd)S&B+oHb9NM-4*wKvrORo>7_
z8-`O_{(8^Qw4BjzsdEr<zmH2wL2WYxc3NGAu=_HrG|dKB1@58ZYIo5C{IHH%z>n2X
z{Rcq+jKQ)=iPhNY_z{12h8Rc^7460>)s==*;2G!M|Af|JmgJ{QBDtO+dxR4lkO2TZ
zwEm3oV!%F`2hZ@m(9;VlnPWI(VLEV;m4vPTWkia#v80R2!9c=@@CY!8iGmww*$i$o
z4VlTpP83ll3R>I_e(*xi4cXHnX#QY5qoz1Yo9$^cyWdI+IqnT+hEtL45(A+qct4c>
z-eRL=?QA^3OUbMvO}JdllGGb<61e;gj!f(>CZIGAdGjQq-CZbMLXg&ZCq?`nBfyeL
z(xmb_<5V2C1K4A2+*W!qK3EM4n5?7Lb`xyDZ*jpcJ2#tULt=F~Q#%L$W<=8l+Zueq
zb7cD`)WDZXRO6^%W>g#6{175|ONCvz#(dY1OdE*|5;N1jg%VYbq=>v~X!dKG%1o?@
zzeQpd7@g_F6%3ag9Us;t6>0+MB8}OWrJ9|Po-27l@Nrx6Q0^cAHz7NRt9Oi)VqZj0
zNA=fIVsHNsoj?M&%|H9^T8+J)RUa-pk4_&?qM2|;YWv7(y#^OFe0^r@BG{BVbR$Dk
zS5=N;=YM!Gg|DGL=}95;H8~!EhVL#T9xmp_xKp!E)}G#^S^KdajY4qD7>a{~%z^-k
zy--8f*rvMty9CQbw2`cSYzD}3WKbwgo#a^YeJhl%;elnn=J0gOd*I(lwbcE3G&Cs#
zf4O0F6od<<_%njT$dvair6uD+A)-%~PzE0vB3S~pYB%}?wIfZV{9K^@AEe0MXiN!^
zw_>fk&Hzm;Jai>-M77&d-Dgdom)*r?5=g!TcVtEQ?-~5(r=nj8E+Lik!`T_k;w?LW
z^=AGmE}Xw$fZQ~A;CWnlXdTHkZT79qG~Z1kA&NrXw%T1Ni4}@I<6nUMlT<@-GBVCe
zYiu25R-y7=DBX{L%20%#L>7|Eib7K;33r+btxDyzj+b~}Vr*K)DelK(d-9J~>ITp4
zmcWym2?j#}Sh2d=`?U}zmP%d<u?r`{`x#MLEOsy@RY%qZ{Ydn0JqHc&5_lA;2##_C
z>VF|>as%pQ$QTO7U@|f*hf4~<9fnInsTVTN0l9@MaYMk(L|yT+m9p;kKCimQ5Q)DF
zENLYqZNho)F|B7||2c$b5;rUx<r!>>YouT%C-9EIXdII3#Q%h0a-ArrzJmEpON@_z
zNBZc!TP1Zo1B4Mf{eUA^(^;^6t|oDH@HYmD0pzDbsGV%g`|G@`isa9-la&Sym1~-E
zmMqR!K(;%HG9<o<35G#FUik(_UL(v#TLq+-8LCo1=4y<ZHAw~%ceo`=kKiRlL~a>z
z?K!}ACpXr`z1uMu;0lhxAoy^*A#<)%H`B#TRq3K{0Aonw8n+|(9yR7hn6Zy%^uvf5
zTN-Y!`dpD4nfZRGB^Hdb+?@7L#@nBmc>)iPiXUKc9Q=bW<a%|_*}^MlXnw_|bgZGW
zVtIKb-JMUO+g_{7w-Y>KVGN#tHCVFvpI)KWiqRAyf~Ey@te~FBD~F3S3;6vMa1olE
zYNzx=)o$5W+}-NbLY^=21j<`<<URgd_9rLt+rI&)HhuDKP{u1gyW%xAs9-i3>7JO&
zOKE)B8N#l${8gL5@b^@g7OGb-F$>k;VupNnRK1P(jisWe5j5clcUe|u|Htsc@sgcU
zr;{I2{~I&vHSYn$M;}RWNK6TH@)kc9!t3{Ne(hWbst4>X=HmhNrQFOIjD&jmOWzmI
zf(O>=l18ifum?axT?1}jEH@+b!YQI8gS^NuzUQ-08*+^@6=+(`vBGZ(#(Fs=j4?A9
zi&~IXvfs9XFDD4Yu_AHEOeq;p!OTpl$KZD;4lihwNk22%CDVwg#+)H#-`_W$DZ+lR
z3m>Se55af9kLJ6A`ClFWF(Bmtm!nK>JWFN=gODw(7w)}_j!VqVKZ`lI+FhR|^1L(2
z6(yHu>DvJy==#vUd{-~iFfQgA_&y>w*MPbbJcXD5O!YTd#ni+kI{ylZjw$Oh<1^b!
z!<?DU_M>5DJ=1^7wwd1Q>fkJ%*9WDrYEH?_DJi>XO(q91R0u&V@qQ$@ACZEtvzuf?
z46_#)?zIIEzn|f>aN%tIvT}?C1O9MVaZ&IKSV;j~lOKOT&m4*^2$zn}YU!Bc<M?YI
zVwK<ZR$|M3Ce=Ft7NCADJ4kRo%0v!%!_c}j$a9AV{~hFi?2-2|U1UhN)z8mx;ulbF
znev%}T+<73eGLNHTz3@Yda@u_t;o2543^ongVXvUBRsLYr*rRS9)`8U((%+$tMSDN
z4o8xBW?}X;wG`n8TECocSM$wsaqu3)ywH+UH^pq1Ij!eOFsIJ==1vfNF3(uFt#x}I
zM?Kh*SdPK9uJ|$;TtA69WyRRHd(A$v3ziLzfDG^y3QpX4QNCl#g4dYOa_B87=+ueX
zuD5N4BDi>nATPqrMn&4o+#S<YF`0fB5P#R-f$c$w%hVa(KZ+rAW+(^ukeX|6SwVY7
zBdDUOSW83c{#bhS=_p}E!79d5cBma$&w$c+$)+5nluM9gFC0&9jlkV?q%5bN7sLak
zFnEk?*vN;_d=}{JRJOz_m6#89G9|i+7PAZKKR~W-qQ!g&P5>`Y!+eBS(O*dU`Zh3d
z8iEC^8J*HyZe$%2S-KXP5YN~c-ZM&H-cleOvpK~tco~T&q4QJ9<(EcAil>4%C3n2b
zh+8tsswll6wIs+ym?KvpGoUOO!7nA#$aE6Foe$}9&{^qr7Gm>sd@D8LG*02jr=YHQ
zk=Z?-(z`CQx)w%F)FTAhrWHPM%&&9J?igFOgg+Qc8YgEpdvdvO#!Buk6aqS{aRe|`
zStaknRR2@z-95DxuVQ;wOZBP#+|n1YS##XD)ahTZi>!)I={+trqMxqwR19T#DKH61
z@AD@<FGql;-vy6u$_%;MU4NxNZ3)HzD-iN_A3p1xq>?Q!k_$4OG4>P4v`73EPAM5q
zS&SQPhEonl7Ut+7weG8sq`|QM705IQS=bhbE~zq@#DtUO((7RE;QI`=TusPZ@j~!8
z^@q1?b@?M`I9Nrpoys!;HhCd~EjNq+{k|O<S0aP@5}dA1l=GCw?%Rp{l<CB!nm5Dm
z*7YRQ)wSfZT6HF`q)G-M{v&+0^6$QPrFfh5RJe?4Gz@Mg+g!JTcNyZ{pl{7WA0qzs
z?FG=!K#sp4Nvq*onQgHTEf%6SBL$NW!ZHQ;NKj*Nis}gmy}u(4DnHm_C*t??@)-5K
zAW^Mm)+^<&e9oZ7Zzsie^&uro{3+wZ+2q+IbKu#qc~+?0&F2i}b}@P~B+uaY2EH4K
z$I2v=Z#&e=R&+pFb2_CCC~L+^(n(SR+5t=M9g}PCfHnLbAPZ3EBdqdRDL`@_fTx$k
z&IN<#_mXkXOU#Dg_{}sOG@~oy8^Pe#`4PK&j-P;}0xKLbY{qEh8ObotEgjBKuQL)u
zq5?^S>&1=lbJw7|utfRoq*yzp`V739-pKk!8ONMh*QFipT-9tVHc3bt+nOzH*Q3GF
z8@s{3<Ku#Ee}eeWC}EoFr~2a`F)qfda}LS47>_*dI5s4|^A{cT%-ghWVoPD<)?@i}
z0iSaIsWN+JeCjw4qr)(ny9V8jIG@@8O6Cx~nT_1kcsRSz;mbxB;>dCj0*E<>m?%V<
z07d7s1Df1Gk*R)U3NlSTSKG9zbdy6#Rct|fh{XTFNz6}Pjq$#C6aI;Ly%3nzStT*@
z-FI2L5oZYRfp}u%O8eF|(7bK5Z##HPCpBSE8rpoC7tJo6)JabLmrmA&IYN8Z^e89r
zH)%U|?mWr~A?9>{IV%Lugs$)ws?xfY=~$h+hxO&HBrq`ySGv1xyk{!qM@OK$7OSoC
zc(iTOZ`WdV)W2^7B@!#x=FFptlU&3oj(0yHU#+x}uWl`7eL5w|j5ut)+1E{tyz}f5
zt(%6uZ6o=W190p)b&CO!PF_w!q%aMYrqjvR@GYI3m3?Z<KHZajY6+jZHe<I__YDfX
z#=%*{%-hP84MgVw5l%Q*hck6MOK`JF_59!rEx=0G8B=CKJvK<du=Z5x5#FL(Xepg!
zZZuF<?Mz3UYEu>NOYA8;&Ic@PPx9lgBIJdp-G<pO7e(Dg?L79`(T9UHDS_Lux!63b
z6F9w_XLYS(b5HZE4tH$s)n{$B`)bGL-X=}R>DYX5pS2B$$<hY=7)gM`l9kAO+<r1z
z>U!9S;AHJ(T!&j0bH_w+!svmLYT`0M)CVZW=J@^m7*;khnnIHyj^yeD!(*std>%9V
z;&-xl<8QA-@`1jD37;4VwL7lL*?N`umBVayWGt_%*kZg$nk!(zLs70;SE1B~gCkkX
zbFi2{ve$@K#2iCftN&(eeHHOq*v@7{`k*7!Gn}^YsJainP`65Kw|aZ05hISR%o;p<
zdNBRjRm%jNP`#9?imixoVk|0Z9nC{-A->H&a|l!VFcKFewz3m>A}DJ~Ed_wGm^Udp
zd+%d3=FD66RhnFvSOzA?fXPXr$45#S44#0c;5Yf###1`PHKruEo*FY7m3cOmf9Ele
zcgJo@?7_$48_Wx^XaY01<y|p{rg>*cDNXnMI%Yq3ceU8o;<Lu`eptSf>|`62Eib0a
zEC1n{-OFcCzFJ#n9R}s&=zs6HcewF8I1@)Ih?-nb26+<uFTv`^6S7@+uXfi|yKh-J
z>3{qRm|6p=v-W@WPi3Q^PjnAUS;AwP3@LvwsLz1$aLCXZ$~#NW_TT?Dpy4bKazJuF
zZNPs16;;fT`wVZjf+8ypy+s;x=nGey9}}A=`8ESqQow2bAKEiDp#uDyE|3w<q$4D+
zSN1U8i@O|GaanMS4J+Bm0<H-H%6>|l4@zX<Z3~W(n6E2`A?18@@^O;sYFEG@`M}p?
zZkUI$a}p3om*bI4R-U_y1r@Sct;bW`;hXg%1LDafhC4L}=Bl{6oogiy<UdB}vi<mv
zy@CJO@8v%hPffrgZ(5_vs@RG}Z3b&j;}n>6BB<h%+hOCQ1t+nh%<$PxGrRO)^KY>x
z7)&^=9nj4)bC}uu+i<Lw=xqKy$wP*oeZY4<TS2!vZ<xE#a!*q1>Azo&0+$`fj~z-0
z%%;79JNanvWaNhUyp|{<(Zv3*JFS(lYvSXf^wOEz3>;<{u+5BveJm9YhX2MM!(cdb
zGw5D&I>V=L=P<b#?Z^z<-1x&wI+mKTt~wQ8rz+<?%LJ~*N@O-~o6B2l_8uJkN}YQr
z@iHb=>OKu`G}lDdRBW#%B<ej?Bv*UGVv!wypp&DjkGf{8%IPog!(gJj09F>pvn`B2
z*p!8F%xNKvc6?{qzBNrZGlDPl;rKRd_i!G>=ao4y!Jh`FbvihVdDVlX>dzif)Q_@H
z<Jp4wFU=~CfLOg_>6&s9ih_ZFVE3zpk8tEz_F$xok`n5Qj%Z}_%^3ajWpkYKt~QR6
z854(-&uN`@a6Zr1Pr)M7^Av;<G)VKKfq}(jwPz+&;~-K6D;fupscfU>YXM>r!D;+N
zo-}Tq+{<YrHF1=}LjGmrgK>cW$OqPc<n-UW-)!oH-NSL7>to3O*dysm{t!R}0GH-B
z<2AA>snESewH51d9%-*(%c#<h(tB27UBPKt<CyOMPRLrSv0Y+(6k2$4TL0RY@nWYw
z=DXh*6zPlPbG5tHf}@R@inY}h>j^vI8DVm;86^iB#mGs<@efFtxPawO>j#XkSOk5`
zw3TroA$rwi5UJLifC~v{A#`-4-S`CR=tvDQ{<Ox3S9Un9o=KLs!35%V4GoT?T#jG!
z_yI1+!6%u%9l5K`rPgB%;h40SK)8IyaF*mVhP#ylv8UD7*mL?D1SEV3-$^V5iGuGT
z8{US4iDAQt#6+HopyREQV*YuM@M^HCw_O`>RFV2Fx)}DXKyEn68~BTSHrw`-7(;0j
zLySf_*k{DBjeVnpoItnz7igH6457_u>51h$F%D(VPQC*tSlV0v6sd9qM&+;5`UkpX
z{8OZOvGgkA2dDl){Gdw?F+Yn`z)gvH{CyvP-enk1-tHu@7*i2MxH5SrlbDnFONB$e
z#G^?P9`<zZJzPe?kT0#yE!^k2;v~nwhjum>HTTdz%XYjazlO;04CCqTMw3(HQEyj3
z32o{|Ud_(;v5GY{bWh^q0@@9ivfKP8kJfIl89LaF1d+E;qbyV$YM4fY%Sg6z-l~Aw
za4w{8598kQM`ThyL4N}uu*1x#5J8D&gCvc;aI5L0*no$;**9$hejE1V8kWrLs&+wA
zIVlinCwyF}RV`Hbqg2noy=ApBYmW&vvincYXjJyT5oXyo>Ul;(jHQ{W$f-$*OI-6e
zEBeo~wf<*VYgk`ATVMXp@PXx<;0__Ri^6%GSo>M~j0)?tbXIr6wa<q`x~+Yz;&kBZ
z|7B`k`x7@M_M*SuXxi_&{4W+$^r<YK8qj#6X?1P5;>z+%UipmvYs)9X@>X69dpn%I
zPqNVO=-Ql<8-<kW#3%@*Mup{#pa~0a%P*YM7lY?$GSspJPr>|$80Qkpg89+3XD8d#
zSUb7)g;isolh|{rGj|wcL|f<a)L51Y<4UT%ey9+)4a_Nkv0Z;j8|7JK$uh%f7Vx__
zfH?QF5abbGH+WNjb3!@q@r(HDWRpn!S2bqsD>-55Z`KbV+8V!f{qTq_Uz{!9Qds`C
z|Dybjw*2xpGwqA-%jsyY%ORg%ovkU?H7}C7MLN?=A_07lKo?`9-kDa(n^|omgrZ>?
z4R7?i#O^*bk02&Vv@Ugx*8V2pAQZ2X&bQQcMX7R<cVhy})&KN`qURo^8NKpA0ukA&
z@vF(goJY<GPtM>TXM~3hXN&%u9Eqg&7S1BK<o-BzD<~}SsKUwfPzX6@lEgQd6^D|o
zwA4!BHRha})c3k#6-HVn-)6;~Q}nh=#F;Ji2_+fVF)KV<ms8L)rjvMz044Gs+ZIkX
zEUxNkL`PitG2UaxuI40=KVzjJ+Ud+cS=&=n-grUu(E8~pl&N44i5Y#k+Ff0-8j)VH
zKHKZ0uIcfXs*^Ul^}#81rOzwwQn7}UY%#k7hRoI>ggyI#***Jh{?i!2GWCaZK;wD;
zZWsQrf~Dn6@Rp@p;q=i<-MEO43$)6~(+n3V`i;^5tpAnO|8lw|nqb=KR^Wp<<v>dy
z&FHP4n>~xnWRg_|b6Q|%P+>wZ0Vm-h!O#b5VHrtG?skq}q-omvV2Pss*=R-HQqj#z
zDFFsj4(4;^PijS~^340H*=g+yqZFrB@N894PF!iK4;lfH{rIc``UH|ICvun>gFD!>
zK*=<!CDn^~#wBQwnD_vC=62Xwu5B4zGdWm0VYnsz77f8{+@E5NB6;#Cw~fEeZ%1_q
z-hp}0i!>annBS$i%{_~8k#9)JE+2yDvBsNm=}#ZP%Kk34J}kZSvj_K>TrHwmEU^!q
z^wYq@*OwmEPWjY0l^pRyB8=k0t0Y<H)>L%ddaSp!jdwXjJ_*m_m*u!?vt!{9z*TTK
zWAgR?AmI12ZEV}OW&sWI^=6f~NW;Ml@(a)v?BG_tCo*tzTC!EDT*G0uo-gX@It*m>
z^d|K5Pn^~&<NjNyr>}Ba>+?hcdU`Ao^ay@KSzE8wYJ`zt?JOHIBx^0DpDYiM3}Rjx
zT<)|(S-`%jfxTEL;?U;t28eSeU|-uR7w*&rED7paDU?$wjoA58;%ouv7y0jXAiw1!
zIReXZCMUs`v5Y8`U_p_|z>35)(r7Yd8abIpIv;FUkXbS%qwv^HtExGzxUm+cYgSl=
z3L4C$Y*t}S{v7@dmt|<~E6f(Ku`i28)C)n>NBd;Nlu0vdGoDc8tN5%bvVqtrt1W&i
zR_6;lBN1~FZ$2H*pg7r&!X{df>?EEsYe;1LfZnpbr%}c!&R{iu7mS0P!T(=a`-7qE
znGhaYD>#F%s|~)UL6jzl@(rN%mWrk@Lc}$bOR&JS(ZVN&SEk%P)R7!9RW6XfO{nh_
z%F8dBnzHgU;z@SuRsMDR@vr-GDQX9RG^YcYl#D!mlqn~8#4Niqq{%_t6Vk_1nVyO>
z)W_fnlrRG3gag!$cE1$e-;Q#z;8^x6^G5V}h|1t>(sJ`Zl$pOx7S<{2GXo!WPfXEf
zG&28S${=!;0`(*=f)_=}kpH#bP5zPjTmtQS05vO72ig>@RHl3-_#R4S!-6nkX=?E%
zYO?2)YJVZ4qcu)ujE=?xDF?v0Yypdp3gq3_VTF)1Mt+`6`}rB1r!vdz;12ehZTWF1
zpfPKw{wCX_Vfp-G!6Pg`4wPPF6oM8IPct}bX3qzXFH_tH&Ic}iK#2J{o0VaCT!l%I
zd|W8W3UdAjW0pI4f@jH;!@mx-Wa0Y6bk?-vzKq&dTRaoHvt#t@U?sCvKL3ACeL1cu
z2R1uU^Z6gOE`%qX4a`(fG(UeT2(~jyvhvJWBZ9SXqLrgelS}Q3m3R18NlqBMN>0Yc
zU-KE$yEY^??T;)ACL5gF{4%-WI)d5I>aoteHs%oTHi8tbC{1h|n&`r`cmeEU8dk<=
z>hvYC=VeKZ?2J`>7OVWbbI%e89NF(xqUdJI{19H7z2Dd$=N~Qc7mFtRp{T&lyc1|a
zTCW$$r1V#cyV@iY>&xVuu_^dGhwl*1S-=_E2PbQ$uuGVE=P-8jDdP2e0RZ9Jvsjrh
z&}w(Y+)sla!Bz$Qba9SP*`Jan6%`x+Juwmi7fUlX)5x0Yiq(~?XI<m<s^&S&IJ3bT
zSnoQULm!#0TnHP)6RS$RUYV3iQpljhuxIb)&OeYE?Yuw7Z@FSUY(>$|#gY``VEx4I
z!A^2C55Wo?5iI?=Z#|3$&?oNke=P3ZHrZKH;u;MNt3x^5(7L9|`QfUTJ<XiYs4Cgf
zRHDiBC9QkxzAfElC!cq#o!k#LdBSsTK2P#8+KEe3zaQYaCO3NHvqr-2zt7cgm7G|t
z+Yp?pZTjpX%58oV>&sv>4y*Z6CRhQ#7Z6}CbU)CD4NjAbVOy`@<nC2;&>bVfmZO~I
zSI()guLO@$pRwHb?f**7rjnaNHUFryc{Y`63{&J*zd<_&ue@oQ-mecQ>ztmHHw6ce
z$j>dW>$k(~!6x9B=pFzE=jI(VhVm!(3_QV6jA7-U03LJs<-nVnZgNIFBM@@1*jY84
zQKup+;=4=$Wn(-18H%RU`Y{RzXt8@cddcb8n4fA17GZ0bN)db&KL|!cMjZ46&&YzZ
z+)$|4uFV4uWHJ1rgCjdKIo~EF+;NzHE;eCf&8KL{_0GJZ%rGia%UvDW@p1%-9HtLN
zLtnj}&sbTO8!LN|?m78KhcK4uFD!Ty-nzj$21@pOzPXmZ^`&pN+oPZe375Y_iL-dl
z%mY~&v;euUO_1O_FbUWScEEc%taq#UN$SaQk+t3h1CS><yDUo>c^2fzDKqVX2pVz|
zUCJX&a4n2kK&O~MpQQm|bT)k9h65=MhGLPf0c+>U@?z4mPTE&qDJN|y1t`?Y=9;~)
zU=Ov(5P?*bNG}zY!p$FN-pycVOzOy=J}ntv6M0*^MH^<_WOj-^MZ#w@jwWMl_C71)
zM?n%~yhM10m{mv=k1&K6Wr=-?QnJJ@*IPGYmy%}m(kxx}GFyo*olknrQTJtm%96p(
zOmlC9-xGU?b+KNsnDJHPozBKsXq=n>S5dv^2P=y+`)NPzZ}zHkbYKP@hFmH@^&4w5
zLqbFeddqL@c%Ec}_{niB^cHT+x;<_4+ms@}L)Wuytg5dUvW@W+bxnGGo6)S9=0y#E
z0!3IME0<?;S*uK_fU^)(w%|#*21=o%Vd_y@o1vrMp9)aQltLMiHaH~b8Me*;`?0`u
z9xzc%%Was^x|*`!AgRS9<?&_?A32uKlX5xi<OEOfG}UW7XXrg%zP;G7f`KTYMo5bw
zg+ltpuLLDhu%u~?|L<<o!EmHt=y=$zyT{X=u%BVCgX5S8GnqlSguI&)ro--8{W#RC
z{P)TY!j;Rjxjch}P-hNT-odvr>-p?Pz$5T=a40>~EPM~*+04QT9)fe<7TaW&Wmda$
z%^D~8hkz@$gzL@?!hIodV=Qn5+@M_DfO}rt5LQ~q4ZWzK8+wW*Y|VhMdskKp9>Rp4
zN8nW7x->%NMD|w;=H-t-LqWnQR$%#EHL}E**n)$ADm%F>f$}+CLEe6}s$e87W!!{j
zpkO+q>WdI2VHpddW+Q6&Ej0v5%2m5N83qR;b!Jp`9erRTXNJ?QFs$N-JxtY!{bh}(
zI`ePlQNm*L#>Qh4`^%dTB_00<d>HMH9~b6!CH7Z2$?uV5F(A0?nbPm`(Lx0|gcAQw
zAb>&5cyuKZWCE~**L=T%@5bi9CTAw!36d^hzJJ!cW3y$O%8(sjVC76N??PZQ+zr87
zzrrH4fFS!2g*p5NCou*K7~*Zd2Zv=-Ln5qHYLQ8mG@(=4yRy?;Mv3{tE~G{VtAPAT
zEk$1w`*CR+&rlDJg72pK!E6PzWa9l5TxTBcLaG}<GEd`ee>omdWOweJ4i~C)auN?g
zU(yP^{hI#3KGJ==BSrqI$GW>`-p{AFK0U&xJo}&aBXTkN2zY30pb891tn%3(-O6}j
zxAS^*LZTgy2%{a}iIJN7Bd#WfQ-U+($w}n$iWR7dYvFA`hAVk6Rk5O*>Ytg(sqZ^S
zHMVg64$Q{gMYmEj`t{CH5z-z5S(x*%#x5Y)A9@rw_Y#qq=W2P=a-p34@SE2)tJ&uZ
z$)wVaXBd~XcT@#2?Xy8so#eY}Y4!?rB`;E3sQ+-EL>om~M*iUYsBGRvQK$7)-nB4}
zsa!fnvZ}mK+3Zz&oeOj873|3CZn=_iy7U&nWWAvu|AW$<1}H)`de7PVPgDKiaPaZi
z1*wmKi<i_^uHcvqufy8SfZFc-exQ>)T<v-Z6{~ZvF0qlvgZCgg_NcHSCRnxeGVL&n
z@)-0+ThVtch7Y9`1dYN|OFBEkeiE#?G1nOb)4YL+y%A@=Lbrs~z0x;Z-D9S?s(f<%
z@`x`X$Dlvw$niXx%#DCyyVy3}i=rlUxUmx_#zZ4Qg@LsN7>kGrKy>Z!{?K$0HUo@$
zdHg9QtSk6B(Af2!e<NKE{>po<5SHJf&Nrs|58P$%Qx8L|{e)!0+T60SKYL%q-!D;=
z@6KTv`d94JEg2pAdel{R);eSU$_9;p^GzF(QiRA#jkv$oy{n|Q;;)UPYrQM6_wH-@
z6E}(bHJ|NAk~R*j<-%0^VPn&i2<wrPbN7E#|HcGxy0{lk(Z^pI-v1GD;1$ai60SP*
zf3qRsew&5YUex{POU$<X-6Z2QEw3>FKHQdzSL~}J#lZb8aK8iG^{LZ;?%x;?KruC9
z5v7W1i|@ps#J`Gn1pgHV{*_YVlKV37^VNLV*z`N#U&K&;_G=X7gvGo6)4>0Op7Qs;
z;*0PfDDrS7-t^vD_f?`Q>+;<2{sRQcrwEimj6yRChR{fz`<>PG?g}F2M4fr+zKK8`
z=u2wxI=GrZh{)LXJbsXCH=*e2B5P~i{^?YVK!qK3mHxD?buJ!rOSfxO_{&uFUOZmI
zl&;sp2Y0#u?d96zGi>ElZ>X=_)!2uV1XKOuC4}@Z^qqcC5Y1j8kh@*wp>eTvHEq4X
zpyrvwJ`1&Op6Zvru#^3ZG{dm*azd3T56=1e7IrE41`M4iKM0%{f;|kd!)N?_)qQ%9
z5BdXSkUf6_H9Tj=#fAKx>OXXc!q>I}iRCAJ?1^yxzP(-MQV>t~C$Td5Xo&OFsM7SP
zp(>jmRaQ>^hU0s0;Sz`qEiXkI+)<@0d}FK72r@os*q8`uhY5h`<EUqgix!y3Vihxq
z7!~D$n%zWXwES2@ly3rq)o<X=shy)r%Nu)#4Wvh%WSe7kjDRI<9Ik+KK`B}@$G2n<
zn=2(GJ!*)_SFFE@vrlnahmk4n^*#H^K1H*ql<xjqrNtmgpCx%J&TyL+P3$>k<}tul
z0c`OprT4}od(Jif;Vl=IMzyv|5$rB8vL|)Wk){pqsFL)kDmBq~@JLPL&ir@jV`}`1
z@${(SlA7N1p^3d`IrDzSGXvrtQ*r<A$0KXc?b_0?pyk58CHeBnF8QL?zeKj?w-HUj
zr&)Og7NpvAz8T6J;41H2o1;JPRh`ckytj1zw&1;_^Ct!GWu15D-UT-G7pdtt1hS{g
zXZ)zSK7?>NT>ISa9K!Vm+*TpkbLAB_PP#V@++093)A|jmyVe;iXD1XQtt1s~c@_jU
zN7^g)RxWey2|$ZCj8kat+Dz85EDA>2b?<i>0YXA{l{<5=?8RJ{<Sw(`7Bdg^ZsGfQ
zIIz9MCe7F+p3~_)T|%n$uCruRDJI$xk;B`Ew)fQh<&HW%fmYwzg}o;3-MPUmK;!Nm
zgSanc7)kD^a&?M67W7LrxBW7l_L1c@!)CXL&7igluMK|50K?vYK{OSUBZ4z`hxjeA
zEL!bec#^&Qy_VY{1!!=U@)~(vjX!x!>M{(a`!JM#15T_<O)9}S^rAr-cG8WNdz^cd
zG!i2=VRhs$wXkV*>Z-5=flost(Os9uxFw}Fb$dy5>LR}G?K5+#HxA#3tH>TE^q2KL
zk<R9r!ReNbi9MJ>8(3&CsyXpEVFS8EFp+n&kKle1UYBI$0d3%ddwUe|Se^Qo0b<6F
zO$~!h4HKzhSLZWy&gREn;jYarXr*RC%xIu}W7~f&Q7U~}Ays!Si*kc0>4_~kTGA^g
zsjD}jW8ZZ$wg)3rW`PMdc>#^oZwP&V=hcBUXjGcVXP=1AE~3`Rc5j#fux`Th4kK&G
zXD5dCmH!Jq3zndWBS}ggC%VoQLb63)t!KQn_5uUkYQxDTg6XC%tU^__+HV(mNS?Be
zn_+dR^pfFD+h3?7amP>$$KMy?P!L<&cz{`k)<*su%u=HJ3BwtK&$Ou5BS@;i?a}KA
z?nB4;&_luqnG~Q5ck!N+PZ;}l|A&**mC>C`jnulG6r6&M2d^~^&V5(xX%!_I&AD7%
zdXG2yGX!=d7)V)TH)8yT{Ja--mmv`lhp?I;v~9@EztLhMLvOKPhB<GSxVI7@7K(tH
zinn5w%Vu3&jcQyS*&xrI9Q*$RkV5j@3<sETUt5w0hMHZ3$3Y1rKXkd8r(2}GTeLZq
z5dvF+6ls>P#AaS?)RvvGI+)HE^+)a?BX$%ytp{thqqV`E+{;w6T6FU_9xRP?!Uj<*
z$sxF!)yxoJ-)Su&cd&tFQ~^KhZezpGI_?6SxuZDz^j<KVeCbiAgDzIZ5O_YgG;{@N
z!E9dmNcZf=?}<p8NulpH<tnATLW)F-si0mdOG$x!ZOS=Hd4!ZA#HGnop_Csdx){qp
zVT~&5$`AOhO<fED0d4|w6%o06;q%MA=5(yq?HAla4q}{Srsv;^!tVY+w<j_&sqdwH
z4i2J2)!xOWvDEEWw9gUm*db?*b0OPf75mt{m^HcD`&Ja$j`LP5b%)K(0ly4cA2tOM
z=Q*-IOk;Uu{fT)kB<ozEw}7B8n;;MfIl8NxE7jd!@rwv64N4K65)i?EATofv#O>hP
zti*>yB@~@`+_?wvSmg7B?3<OZ%$ic|4Z@W*?xt%}mly%+%-ajXGdB45DCaTjq;8E;
zm#OL%8W00|oEl7L5}ze8%%^WQdB!`zgG$fO_<dVC+KFvJ9noc&k|Sw;Q{%hbOHQig
z9<IuD&}$j<VF|n?I_g}+(ezamiKlKa&Gqb;Kx-sUa3m-&yl_WY=X8D(!7!$xTCX1$
z@lt08gSk|dwZjF%ms=dXgXNa>6Vusxo~m?~N^@soPg&#eyJ}JwZHlLEAsFMv#;+&#
zls6xaskm`CADyHww2@3A!j0;{Pav_U%1Qndt|Xc3Z*Gb5se@0(y!<1RT^u$u>h%sD
zCY>1&9H@YBa38-02SiTF$3X@G-=u`{N%mRnUBi><Atmy9$c}ZdU^K&5M+}lj({ATn
zgs?R@&6g06sbn(vB*1%cF_l2HXs}T%=k5r;s$b>!IS4eJ-&5`+75$;w-4N`+R+rPA
zBww=j4|~lXMvuftWjn`2TAD75doQ*@pq7y{XESK=0PCM!x;OSg!FO7(5@#}XnfpXS
z12b!Q$4SbH7p~#Cv9@H`8UsK3h+HXhTR)CAAL_n3d$VG{HP**Xw2ZIuT<zW0PK(A>
z>kmBWUMma;_w(p~llVi)_S?#+^#R_w(`>RXCgaM&VQV_SmYu(CWzqzzy+k`dssks8
z=BHXdXlXhsv}3f4{8fwew)3NnN3&A7o$y$M%RrqfGne~ak&9Q3Ie~a(=aX4&TDt+>
z-jTc3yY;^RbNuYQdcSjJu6^&q$?<PoNTBM~0;O@B+6Thf8GC@%|9^uVne}(JZe#FB
zs~u*oEFjjD5yy)mc#2ZoztWD;tm_&6bzN8OnZrKGWA&0QlC<>>4G!fk2ah|!_s{xF
z=CBFA2_7ek6J|Hq`|C~UC;vzEZ~hYcoBLKp|CedGfc`xT>0is93=0W*2K_7b&Cq-o
zDIu9eqA3UrnX;Nr%981`yFxOZ2q8|)5uzKis*Ms1*%m;}OLNrBrf1jc8FqT_GQ&=(
zke$pW*l_CP;8w7Q9m&{fYRq#BP@;JpfCpOrMf?8I72IyJS^Y7OUb09nVEp_3Q+q@F
z2aqtF??aQ1C1F$VkbK6mqAS=*z6_ln|1ap2g+D_tU1sIYYX>r%S1*fu^Bxe8iCg1E
zjYrTVYrXAp_s-pZ>FN8rpnTlp-Me!)88?uzF4gl7akdMw9aMD0XYV<c<>AZ`j42ko
z!`81ci(1>Cc%pfHQRC|TDl1-5Z&X*)cB<}t#ONs#ko8TpdnfJI?Dntw2_u6vuSWT3
zpY*)yztEr9L}PKKS4Q~MXNAw+S(f=qy9=MS>aY$3xjbO*HhUf0tDWEXc9JaNbK-~F
z0O7jjpp+$9hQC6q=g(9-%eTgmzcSX&LjEep)Ark1IvV~uN&Kaq&K0@zY=6Wzo%iPG
z)!pW3WXJCeS6s8laz*DN`PmthC6`8*1Y_Zw?D%yjVA*Qg#B}HTx9nDddJ%JzH{qS&
zt7NoXvMTT&++_4cy(i${)(aVB*7|2GPm=1RWp|cbb@v-I<czZmxe~Te!Z*z@g8i=s
zw`S+i3U+H>Ht3OHuX2_cnZEd~e^`U>(5yi@raIA@8!wkJS=^MvMV>KPvd-extS@E1
zO=gfWsigDg897Nd8ruaal{=`WLGc}S-IH?l=Ipw6{l=~F{r$V(!Wtg~LPp=W_SkHr
z3(Pn_(+uDiKrC{bq_g;bl#&veUekL<KYN-iUCT4r-tbGtWY&IZ&}{Daarf1wZY*PL
zmdL;z_s*+J4d$NDZH)&_^&fmt1~zUNsa!Fwf{Ss8FR_Re1XhKa9JyuDCHngmRLK=3
z#!M=H%UOAGE5WMg$DY?>lWPuN$+qte82ht6sE9qU!nJqjvhv25*EhbXPtnemJsQt+
z*X>&OFh$!Nu}k#)oU$z+lr$aF@;=tx0jE%a)D!t0cWRcYy;RR1BMg@3I5_u|(HG)f
zYn^)(`Eq5)wk~)3@m<t1aua`?c?8TaTDkw`UMp8NZeRKNn=i-R-2^v0#+loQ^k2EZ
zxwq_BmrALQd=jtN6;Hf;OuTDVJhF?69aesRb3e-MFy#_^tENv$>@A-*fI#-AkvyZE
z;*R;&vAO)yxbys)%C$2}NSrlrv%8i?>kiw@Tiw9TD|gRa&S(3nVy$ZVZ&P@G^9V;D
z^X#cg7fd@CE&wo5txPJXJ-~VMWqo<jez~%W#7|B8iM`D;XC^+pdfI8gc9CGano?I)
z>EoyQaK%EnVtlR}7*o@UW#t7~jt#RMYqA`xEE&*a6>DdyM^sEFohp4>VBQ6mjCBCq
zpr)r@4G@1<^ZF8qnwXzM41e5$fH$VTxj&Q)OnlHnxnBGmTdp1h_RUvbz49M#ZCd&M
zTc51_(_4S1vYjjMd{bnR1NP;0sS8kFTB+93kQT?4#}gm7@GwchU3GOlv8|=Ha)&eb
zbei}-te(0X9~a$W3z{_i0zz*v)stWtfrP=fnJh_~Y?DN})qYPRT@_D!SjF9p<>HBW
z#ai9@3eBB4zqIf+N2mZMA+c)u3BqEgkn)qc0`6(f&o%8WQ=&u3$5MOqjOut~uij$%
za}9sa=HKn*@!8v&kqhz4y)%xBC$?^CSg`W*=JWX13~HO3L2Yxh!3{ZPzNe-s#u#WE
zngx}_#NM)LV^;2^;9lU|v3%uTczFjez4=!+a7X3ZnXjp=#$ViPJZ#U(J#S!ZZXCFW
z5pb04afUtwr{7yLtupR9akp;Zp5=}6#cs4P{bAEm$@Ha(y~WdpQ_bfq_uSQ+T0W<i
zLv1Z8T|Dhz*P-m^rai7<EpBj~w$g#tZn~o5w!7L%?AuW7_69JAxMI=6s@tLi3Any{
z`GSUY^+1@7m+kSyrcID>=t}r<#g+?qaqK*?=@_P!X-B-e*=c>9rAvqfclW3NwW@bf
zP-E1d=h^W9q=B{Wo*1WlxcqXK6LDYt^tXfv;yhC70!(xipov%Ux8;!!>EN52_T{Nb
zIiZz%%F0V4zm7hj{5tB(<X6-Gi~KqVH2fR#%Za?v6cxc&ewLF4o2?*w9R_mvH^S-M
zAb!xR2L0dvP5E`3<kvSDU6%;9tEmPt^DpFAFa=)!7XmCek35i-3TF+J1lwe*HWDm2
zj*sSDAfNT65^O62_rMbD2me<R>@rC(J73d!Z~p!ND8IgIs{d#5OG4zTtN*q9`qcsC
zS4HsOW`%F1Uc&;7paY7qH)&+nz&sIl{=XDq<q~24On?Q~(l+%<f}I_X-N-AjYhzDX
zwX@hrn6haj5L^F5maPenP#3xjvH>{}R5C4|6JYmd1lW_^8Y-FooTSyrZlY{ZrXDli
z|G$!F8TtCJ<(k6ubdzf*|3ApJpZ+ypu9@|^kzd-ay7reVi@IxI?<jrq{vkK_y7q~?
z%1>xtx$nN!RtsZBJU9Gk^|0Q^w0P>$!!{XB?1N2K4ZC*p=R<BD8@cw08RaK*n9_;8
z=h^*0X;MccGcLGxM@@O-=pJgPd0fO~V*WMyVW^n(HQ$~e$QUnj*BXFY57UcDZ#C)6
zC`Di@FQ=7pub7l^5%YuWU!K^~Y@zCz4;6|HT8Ds}E5T&PcUV;N<=d#4rr1Oa=%gOk
zK5<j|3CjeozH1l9e7~~z+9w*yPgovyw%M5{i<1Q8`E>TXwzE-F^Hs&l6l!ppK3<dG
zN4=P=tpoL#r|@O6$MUo5CCsizDSzhmc~cts`Fhx{`I+SuFAv|<gYQMc9yD0!rbe%Q
z;>z+9R%Ci8gvV#^waTB&N1;wQ`{S!Ym^4At|6Ufk;2X*dS^R*LUpAG$wdvYley9Ac
zPfWFczV?Z+<tKc==F6rPoA=zmrRnCn)ZN!mk%6fCEK9Gtvn;kRJ*(KHUw#%V<&Uj$
z_*2HcseQC<YpiW+B01G$^vjww%{AVSu9#^GR?V?DM4DzkjO#(q*YY~VyiS6yIf6Hh
zHi=h7$wRc8ZS9zo`DcDNWrdm59AC&#<vdg7`GGk9fv>&i%{&R^F)XSws3zse8<VSB
z-l}PT4hwf=aMT<z%H%jCvH8?&QPpfQb+$>nojluGq)`r$I2LA_shPjc25HSIq_^TQ
z-^_O`OGqf6mF<Ug%28BUqQd-rejxs!U92CBZfTNo+T}~jjWnj-lDo2sWq+ede?gzT
zFC&f@qi9Y~OTL~X34HD5J1HEhll?O?c)`Dtzt?t9EMKAQms2PuPqO-C*RrM?rD28w
z*bK@dF?ykDc@*QK^)t-mV4|x-U}Tg_9Hz0Bm{sH9sFqla{?C=miEkl<v-%^~!<+rn
z?OHv{)r2+f=JW94DR<_kw6;xrfbzT9(FG>_Thrh)_G@t7e3dBIwdrM?mMyBSSX<9+
z1am(|9-D|Rzor=3MwgLqT`eKq%;(24pWom!@gGb3ed;tj1^!|2idSkQtK)~SsqM3x
zvq18#<KDm0e$J3f`<0Qq6et>(saAFc%4*r!cIFPrR6CASI?j;GO~(Gph}}DzvCNs<
zr3pgTo5Of;hFoVd9;u8g3NyZu$@o_Qb%xZLjDwZ2qcG#6nT)#c>q}vz>DElfN3eVR
zGZ?>}$vDm6sQE}1KA*%>jr}mge9*4@A}ijkPqmh{fEj1VVa|{(&XAkRoFP}1J3~Ho
zhTJu@!FlU-{%z#nTL8QPfL{YoRnFXU&_nl|CfN1jsw(g~wVg`9@D`qLUZ<*5Ue%E>
za}#y)+q^xj_yCpuk^WF=<0BzwfXT)`2}%50W02iPQd{D^oCm(H;@>L;IZjj#=lNG@
z>O{dILeCTc%|mNB`^YJO1k=D_!7n&UD<*_>;GCN$0;?rRZDRK!&fK4YG4*c}$;&7W
zy~KRGk9FoYg`b9IcsaNa*{$_<<Yii3Uza-S;{POI#+1_gxEJ?e<8veo!~3g1Ja@<@
z{IW1(MfZ&P7d|MD>V)MPtW>-2M+MdDJD{CNzs?K$6$#P@LCa%od--S})2U&mLxKm%
zggq-PPaPqe$aGAY>Db^-lPS+0M84CVV6>9M@!our6P%g<KG+FP$bUc52@cDDFLeU0
z4GzoGql&^FfyBJ_fTm0ee27*S$A6;842oPhr8E)ZHZOmeF@rDiFCzcw!u+|~oH=(O
z_Q^50TMp5XotrtA+s{1<Kj#+Bh9f7DDF-OEy}_Z`FM&_uLivG#jE{E9xWLq>M(y|1
z7ryKMQh3PlkLtSE0(f1wj2V5r?JRQQa?*?&_Tw0wjnN_xUk%=24emhluyxzqgBx>|
zr{H@(nKx$kAPaZdHWzac*jCdjb}sS`Go{%@Z;o;olqp@{|JJW<X4G{k&7N^{Pbc{e
zlO?+!;Pq?pCX%6n@SJ4oMW$ZdrDmI`rv853#A56%lZyFDsMlt8FMK?{=!fNRc9RVR
zm}{Ha5PnJD^5Bnq0Kf)^Am~GuK2GvsTin9WcK}cZAmC<e{~$6QggxG7!kz>G%=tjT
z{m=fvd_5TND*F}q%y$*HrP;t|N=c5+{~q@y_9O#)ls&1TFFE=;$-%k$`OfXq`reE0
zTm;kH&q+oLz6$`p3j&AlY#_ha%iy30vDJ$)sV`-GVds9WzA!j#|1#g(W{PDFA<H4e
zsSC3JzrHtcH?-<#aK|arSIG1gCpkx%SWn&D%Ny(HvpY^mJe048I?3zu+7FA{(*60~
z-$_;<@O#_L{!}r5ECZb6vC5+Q<K9?J+;nnWKRzGE=fj+&ZmY2E^W6ZzcR?_a@3_Hl
zVLLbb-N4Ux!9R%agPf%9PWa;YwwZ&-ayVHIcapzQmO^=B;bA85#tyPDO)3K~D)dzf
zeU(6SDpY`92w3Kg9hk}Pj?;KLg4{<qN!@Rs&ySh<^QyPCA4&crxxM%R`6)B8uWIMt
zq`uUB6nT$wlAEFi{HlC;srr@QAXNE<(WA+KG~@rD<TnUbeqs0+@*hJSpnsCzAYA!{
z@pAIxMKS&W`Mb-TyANv{n2!%De{%S2@cP|7v4=#?q#h!T<V${jeMVfgO^WihTJj+$
zKTQ6tys+QnMn2@~XT08RhI`wj66G%(|H~KTkN5Dq6%UN>@I7xloBVm>H}jquua^Hn
zQ*X)|c_sSXZHHUixH9`afBcc}3-rv5Kbt={-m>p^PwcN&7yxaP`sd?I?d6ZJ1J$2D
zzP{vpc6=T9`^2)lbHk-=+@Ku3ZTnvwPt=pe#}~)X7t0rpm%{Jj_uTkklP*vGt9^aX
zjfVq&&+-3(zvuY<OTOPdRtlyWqGfI4$}|1zjxTY4K735RYzpM`33n2U(ERsq`Q3qH
z{k;4GHFM_h!7S00Pk$!Ig8FzD=V#>?@0$1kvz6JL`OF>2JX7#ppY!u;BFoROi7WdK
z4#ogLc78X!pVuGWSxM!-OaDZ5a?tTI>T4l>P|xGT$l|l;QQQetC<Pk7Ms#ln(_C$2
zJD;nj9o4`m{*6J6Zyr;wKd9&FDt(;(E{&AWIysw#59O+K*4au@g=k}s-BX~pNu`_h
z)x7Wbe(^h{ZYxYJoKLiVxUe=AuVTRqnC(NId)DJ*MlVp=>C>DQ_U&fLQC=6@*O>-5
zXU_k$ugyb2aEqbOFfEtO^3v2c{|<5(rE!iq=HG~`)tl>7eYl<lZId%u#@Q?^m`s+N
z(Im~9mprFu@*H9Fq{BQjk?pe_R0}N_GfMFo^3d_^cNd_`$YYrx^7%K<ALkZa<Vwv6
zLA*6~r|wmMX76cct>(;2^6bhnqwy|xccQC#=0KbacIO?^JC$r}7&`3tKY+$dRfz84
zcoCGxy%KXQ=o6}ldzB<X_4A4v`^Gy~A97v%o6+NSz#^Wwtt8SkOzs4DPt~hx3yYKd
zGoRNuOFrq^1nG<)L+6|vzo%+;#Zyg>$I~@F`AiFL&ExS@&F^%C;$?G=f;T^1vjGrU
z)%-^X4nCUzV+dswYOknm!Y-$xru_g=-N05Ii}8B=Yn$3{!0o91X^xF{t^3xM?Bi8^
zh9BLGz6K&``X6GT@oIh-Y~eQxpF81)G<Uz>`d=LD@@nq)c=t-o0h6izV`Fyb?fGTx
zGu}X`RQX0zKkzBXR{SF?KWU7@sXL4Zhd1EpJNn4);nXgUDdI0N)ayHFmi3o7KDqwZ
zZ}91d|Jd0jM+tPfp7Bq4HvSU(_v5i)93?XHq~(1WXut`3Nl*3s#b^3ljUPpxe6Z(B
z@d+7^W63568x47+X0@Wf)|91d9ydoK-I}L)T}OA@xlg<C_{9Db8q582PSqtOc?UY1
zD&UiB{qi*-0PvKZ@hM$5#O>uy{+M(3bzSzY&ec=>)aXJCAzqH&`!vT#ikzPDkr5(m
zOph$bZX}<=T^p`*F+Q%&7jFwp{%`(!`6mop|3VKOy<Ze_a1hH+zp)?R&0CAFSiT_h
z3Hw5k|CmX?&CevVYA*7BViRABr<Vz;>(aVCp~$#oq7T{eHf25CwVkE&?)$>R4X66!
zM(*oc6Td$XJqG>>@hM=4;KJFgC;5YwH7{d^o|*B?3E;Zacd(;ev8kRLYw=5CWQtWG
zVE>SSa<kjZVZK3xjRu$(1^$SkO@}&5&X2@ww1vd7$cwD?6i<Hh#+E&ko67W&%q-v|
zFN*9skA5tO!goC~Y>o2*0o~8XnVV3dmnXVPntCVv;Ugk5hB%MClBzoh=J>=}(o1FT
zqbv*Mup#T=F{6Ef8BKCr%9AYzt9rcEa4OR2rxr>UCA!L*N{N}XF1EA!l1N$8i8Yvy
zm(^CjHGOG3HL+{NDNgb&vSEtkjMOJF_kz!Y!|1)_(?k4nDTqXr7hS;DR9)oZ;5(#B
z-%QnPs>QI7n9h6XcQS7(&oNxi%A2mnzn`ch2Zc9qxa%1Bt@V6PozDQOOa2+NEOCDa
zcWh#<x+2<VU0vnoroWjpg8=BX9!1t{6J@*%TVpD2{7q*5a9%hcCSHc%Sw+{>=0^r6
z_=Y#mF|uW<KXVjg%6Vb5+`hw1>CV4o<%jX-GAB264t(}UZ6E^2#`|%^YvG{dt%8Br
z9{g}z|9bON-v&C44EcgP5mHw?9(S*J$p35XGr4#<ty5uQyl#R0p}N!=HzYZ(=hiF`
z-^QF5`{B{YLE8;C6vdt)Ji3i8fQuOK?w@Wbx}m76X@TE^b8b*^D7DR>D~P=MhZ<(z
z7A@iu^B);ft-{99^H8d;tK8o7Ur=f{u*H`0r;Ce&$lrz==0l9}%8iY^ruv7>+DQkt
z`nQb&Mz7%39NkzL=hmER*EgPMu`6R&U9p_YoW@gE+*_pWBSbXgQ8iMZ(|RXKQ~jlP
zAOY!kcm}Jgh@0h77nN2!Pu<ol9%1Hq69lSsoS@qT0_Dl?lQPHm+H{zcbM6ft9VO0F
zJBaZ3D-OS#y!Ug>oLa8o2)t_==Rzr!jk*7br!Mai?YulQe&gibACGK^S8#A<f1kT9
zcAhG0=vY?L5UYHn@tTIj-kwe8HO%HLe5C0t=c(}}%AIIGi0sPcJhh(7gJ-e+JhCjt
zJ?R{zp%vx9gY=qv1m|swLd1q>$l^EnsW#ZW`WAx{g}L2N&>h1p7GeG-^gAjTK?O##
zC5B(dVOCShuu*I&&t2)F<3wFcJ=}sx>Uvs#g0pQ_F&=HS#Fkq5Iy{q?0}BI{B|IeM
zEfsHO;nV#nHEp)Opp<-5{hO=uXNTORa-gShd`);(;!LM&Ic58g*rj!;se>-jNn>+z
zpv14+@;SiWQO4o$BjX+xwegI^L+jj=(s^!;$cfs@&%}eN+jhc8H}@P6?SXUSlrrZK
zwzabEkL1gZ#d`Nob~rv16#(X*EN2OK1=s*L48>d7d2ch(bn=DtY9y4D>6D57>vx`H
zWv)3+=9!>8&XUQ!oF(IXcf4B?d97(=9I8=MTBj3mEH0RQo#b-uH_TokAo7MrR$qac
zN@3dtRKO9NxD5ovme#b-_;dT`{^h5t`Np5dIzC|JFG;U5S6UU-q(-oeHSvHrC;fma
zZK8a}Q^|IYf>DveY;+z9AE%wxB|w(wggvi7tmqtk*twU(&T-_v$ayOH03{o^g0yK3
zH^euVdCC7GA$Cqp5qENNaVPh%sZzjwNa;^&pO}kX6jO*mQZ4-WODpWyTr7cLW3q;Q
zYB3i&6gjPpVn;Xa&pE{+_Bz9!DOK5Kf|Nk3D(VU}z87=@1pBn9+1w_hzye2}Y->4M
ztefbfi#L$rS<RHZVnFK22X3j-;W~G9<*Rr;nNhJ+VM*fNKs<f06>i>L%cuJ~Y7=|j
zbbhp~{MEM9d3<+TucWft)I~$$m6J-GIpfu~JFs3e%cG_m6XU-&O*&sRH)#(h+tovr
zzW_n;lsVgOaaU&pKGEN}a5sAhw6W2hklF4|s$69dBGL%{Ve26dCsR%K+SG0RorTM&
zUYJYue;pDc{x2$Xo?6#6AUQ(8y$sJ&rK*p6kytu5Sb)~KB?SLb2kYEEZHA$Ymyk>?
zS!RZ9t@0mygPoi#znWVtXVLd?d~-1`@s1?QtbA`VHwi)J4}dCLnOZge_Q8LXTpI=n
zG1D}8L<(&?IfoPl6KRZ_-P$dY1o*QNut=we8hBSRZWYPKUw*v7mQul1+j>*LR0V%3
zM~Ejahjfh6To-6c)^hd<+^E$IZj$YBH}bTgjJp?+-v|ZW-csw<mIO1Xd#XR}9E9Hj
zD_?5eE*q%f^_V>eHT$C>K#6X5x|!4K+@{q;Y4Lyl4RL4F*N45`ZNglnre?2Dp@L8e
z3&bEa7k0YKW&c_e-_xY|>!2QL@e}plh{3ho6$GFQ^+A_THsa=0>t0H1P6FeiLFgD!
zy;IF(wYRHr4k3he@T&1}zOr_WM~Hk3PDd;YH2Oq$W*^15sAnfU(9}8ApToU9nf}sQ
z!bKRl7@HvB0hO$9y&tv%K82-WE-QmNaXm6s+mu0Ka+{*CD`4oP5JTVP*2eFa``(Fm
z0RKuAAw|gKEE!Xr*yN1ho~0Tyf)<(@yv3%KM7q=$MWoc8U_K{Rs4lfoh_kZ!7AzRZ
zRW~`FFA~$AI<4zLITu7;O-kpHS$=M)uH5dlo=H7MK0YeCAW+E^cGLfD2%we~4T+^X
z<rryNFKNk>k(SS8gcJ#d(o)qREtQ^?mL|>g)4$gc)M@+87kf#RMl$*-lRK&Bur~rT
z`7J19#~Z`PAUrXgF*o0$Lx@h(k#Nj)p2WN;5KFiZ$s|+A<{`gEyl9n{d(#)EuU1t#
zdxglHKYeA_lV8&H#X>w76e9gwLk#`|JQ&H`K&+_<A!jw|q#h@gC9=DgvpLC`ydcsn
zJF)c>V|w588Rt2jIX@Pxm7@{E_v*=A#V|GbP*6i8cpTl~PK3teWDU_#pZ`TpZYDMu
zO5GZ%^)BSN<T-Ko^bU%su=CW~kU++Ia!ZN-$5lEbovj&h5TK$kMp~)MV9TN|Cm+`u
zm`!yYSWH(*;Q^7s<q+w>Xjj<+v}+W11+z^>O9id3(5KE*3x%9;JbrR!!FaUl6yX)M
z;uyqI5(zUzLy$--oco~<R}8B2n#viGn|NgyZcr*$z?z@rI(|@l@{J3Ly*-@Pb0BzP
zFFSrZ8k|o4oorm7RP?klIi&5)THaYPL=A&|TZ|)>{oTc@$z`r2_M<0kv<sNmG@e<m
z)TNfTo5QCcdnr|hf>J`?xc6B<jCcVXd!`6(xS^=t-EGdcXbp2i(RlydGgXOM!?@21
zX`v?U5te$8bMH9XNbEk$x%V(0khi*;EjdaJhijP^gjaN8l89uXzo1<RNEaQ<i`Ji>
zfupXntMTZm{wX)_?CLyB@-VG<r34P8d{;VhjVW2M<T;a#DZAv^o;NTSSd4+gBE#Ro
z8X&Oq>Ozr$<_sAkd!0FZX#rkWvQ*k9_7Xk_grT1f5@u4VGV`-g_XlUdOg*Zb(c|u7
zeXC2Q%Jpr^cFL$)Ce9Y~d7-Y>_7)1?b?&1JOj=3}ITa=cKPt%~x~|1Shd%(hPa7%*
zzRP1AZ&skPAE@7nrEOGzGBlKK@ur(|c{@&TD8zg-I=&6<<1IDaWQy@;pTDo*ivd<=
za0k(na`{)0!yL+`R&|J&7#|r-8ybc1#0(MbDkohmdc@B$NYr}Z&hN5*^p>iJ9Gl{P
zLeM?cpGs;V|1D!5-Axfo$Z&NO)?#_dTO{Va&K(r&VB8U}=cdH&9yNzEkj-+Kg|J&p
zO4GWaL*Hpk3`=meXCk5>vyQZp#V7DgNCl_H4|<U=JHLed7BW&%Dc!Tp2b!&b&tkCF
zn<ca?Hl#}RUrDy2t^qG{PhP!uxxN@Y*QTS(^(C=Xl#Mh_BVBY<X_SG*hJ2J(kGlrU
zrgW`WZPWzAC+X^SyHz|aW$X;$v};OwizF1{UUho6)CY4n<^rJPq*>6$Z>S%t|8a?0
zsljr}k9*%5YBGP9W-X*LI$XuuvqNc*t7FAvVpq}0TdW!?IlK0#Vac&PZNki3?|w$$
zB!WS?hH*R3Gwq!d8;aSVT58-6i2_>5Veh6g-02z*#t;(QU%9)+8MhA8zruC&sID{u
ziy&<jc=jG(BO0~)dfxtuLQSn{dbr*@jMdZ=ZRDtG|2S%nC01^q{?nNE<gx`M)_DED
zLX1WMI?n6AJodHIDh<?5YZJYSr*4tWs3czbY2zt47<N9KNAK?qA)M~2YVR;_2BC3G
z6`jvzztamQqTn>u;w3FA3FgxxNZS3Vvt)z8<kvuV@O%E$xx2Y;OX#b2x7K+EW7vhv
zB?G!7)HAG5UHK+q|9P#Q@<~nVg0A{h^wYZ351WK<gj`<#x&NU)HF<ZPyFT8rskpXc
zd7ayCHHo}T`H#*`=kITDR&I#!XLV6S<sa`n?i1&h_RR!MVzT|PM}u=$4>lAr^sj1<
zpuyKwZfII-42^_OfiBqPmi4II<=i`mE(aF^<5d5|q1e+{Vp}obCb!c)M3@Gm{|L5d
z&!!L#jFe!5kxhBRw+WMD-zf(Xc};p7k=G(uo5*W@`SClQFNxP!@1|{pFJ?~Ec8m~z
zMBEO-P`BD`TH#MQ#aP}NtGk-Yy$LI1dvnuWO@p|Xyx!ej=LXo^R(Ca(UE<%y@RE?k
z7UnMZZyZWFOkV|Rd~Tj1*o0S8_8fg@&e7k_^#%KRS^M#%T37ddyF0`9Zv>*xfT;K_
z{`6y{{5Ktgd7&)bgMORYCvWPpRP=v(GVs`dYNOae@#={f=W|K+4GhCi6d;W*Xv@HV
zLbBewvt3<L0}q}`?B^Oxk>A;nS8Mm4<lC3-pgY~*C+eQy=gM;8)Memjduz4-2QJ7H
z{ORHY!JgG8{kKob!e5<%A9mfrv-|P0n!+!MU1~b81Ln@}z-B1;&pHr8rWwOnD1dJT
z{LtQ?iM(fQMz!vr&DrwVAKj0*7WtTOCo9&do4TGKG^(r3TXH-<-E=7bk4Kq)o+Vvd
zJ&i#Npu)UvRV^p^V>55aSh_n8(cya9f1CS}bqhNZw6&I;My--L@wZ2Aw3<~P)JN=@
z0)?%Hy40d}Q8I0=t)W5iw5W}5#1ZGO64J?*>{Dy_R3F*u%o!j^>@-;C{`vtvp_V<w
z50N6uiKWAGDbCx@s)LEZx|W)xpVYe>P}fj$i7s?Qk=eE|Ivds)bUU>iYHz@CJ#YSP
zC#m3yp(x^dC(55H)uMfisziHX1wsnqK&5Mjf#~G@O3)2t#q_ownSTVig!b5rNJYld
zag-H~c|l&NThy2wAc0`(sk2t=Z+}Nt>s|hG_$ru2SvyX;_XN;Y$1_D2Rem+oo$(|J
zbNUr7^{cyq^eafmXL|UbEb|Z8L)WY)^Oe@-(MDk<MkER=F<Xk8&J8sU+p$ntRnNrh
zVW+LS8pw1N@<~Qdk@Z&7J$i~vGiWM}f6R>8YPUS-Fh#1w6hc0@Q4gm2)z^U*OOW7?
zCQmEP<&&ds%CFUV%+@LqA~l~f50kw<`JRkW+=sHTo&J<BYg?#hU|s4o79aFjL(9}c
z@t4qUtiKzLR9YmuV}#K_g4vW~ykAKm`zx<fd@7Rwl*+}WmCPM2hV6^0otoXj2fQyZ
zA+8oaP6nfoiP9B}K!#7;so4<x8FQ1}cTmH&AzBWBV!Js63!55M$TZB4{}fm1gssOW
zhgf19$G!z4a`Q0l(&H*;;VRSp_NrE{uhME#21u5Zs)Hq@YINpl>CQ+`Y>%K*e-No^
zTPy^b4QZp_ge#R7#mAw3nqlkUn>l)0#DxRM;H!Hd=$60V?_wi2hd4C_;K6e;##uH5
zu&b478$`RsENDkjpxfD|`gae}2C{*Y84kXwB0J(i-SPXLwNGqglI%DRo}*N510Xja
znE6(bSuY`;=IoC)u;7XtS-LciyM(*An!mN_RodBrtA_B#XQty+xgOo*P=3B(F1oJ9
zJE5K<gmZ4h8}b>A5WByST6#6v%@Rc7nP()~_5Aqz&e*5g2JviU>Mqu8{)`hOWEFMP
zX_a4PVjm0M!;u|{r2-4D(NZHwk^(i3ZKbL2>{}6eV#CY2efbJwRN2sor4XN@&*@~D
zssX%o(p0FCWwXVR*I?|K9?0IhRL@zF9thHn=*GG|48_tZ)YsU(T{R|xlDQ1+5TjUP
zi-Y1CEz+)MS=*Q%Ppckm9c=^S&M5ZFmgxwKHeoB55dv#noNz6Pv`$pP>UD>FwrWh*
zDRq^vG(BX>=?ZY^PX|pxe^T7EF}MKy_JrNc9aX@u{psLU{s2;9AGQI9wuGwI|5T%%
zAsWWVbkQ}oe<GPx5d2F|{LJn`b=wYkRV52mjM=wpRfOe!CF~wg7-W`OypcJBO!Me1
zHUzOKeAaY5)%Tkdf!^H+rp7x<Mn}dEYiH|ZY!Cj7F2=8*sA#JH#^BvulP|NqGGbNh
z?9^gSoX@CnYkxqjPo@X8?)Gp7fN>Tp#ZG7#BzParJ3`0*)mMcA^I4)_)7e8*O%O!P
zUbm3R|2;Qt$w>Jvl3Da94XTaq#h;12*|3hR<GySaNhKdg&#g_Y!drUL0#kpogdZax
zOn7fo-?4|<`ub1?L*x%A6KUFrA#wpvGDJ4^;%{lwOV%d0@P{PF&Y55~ZzfP;cTcBv
zA>66`AM}YWrn<(TBe3o#Cw;k95L!EBDkYE*`ljWr99&Wd?=_`&`Dr$t)ie1j8A~;|
zd|cXCYN?9(Cvv}@@|$>HY-XxUNEH2~7MhH-zbq{?{8Hgp(%Oz%YlA1yFx*wHFT_$e
zKZ98G3-wy`w_Twrz02QDNX{@HB1zfU|K-P>T;?s(uyZHleSLmtLR{y}c?ozmL@JZ2
z)S2_V-n~VGRMfVQbS%>w=2w$=Xa;VC9SQ!UPhcGkv$`8H(4|Kin;%vTl`0}Kp{=;w
z)S+Oq?U;3ljOiJvmS>v{{%R&D=4WqliE>+FWUa*_Nk|2BVE;;sSXWbDsK?kULqw*F
zjA_xL%4vPYF#oqMx9IBl8XC~`VSAz4K<|grgt2m5SL2=#KgTdQ@!H&7Q~hJYlJh7z
zto^!J;@q3L>wVXTfWaNMZxPKdyU>={SM1E2#J6B0BF@aa-3_2>tq@o%My!o4kI29J
zwuSm&+P3D=C#Z9Q=)U_nI`RwNkh3Bry=0v~Y<(~k0n!a1$C<|tNLMgc*)vTYM}aIY
zH1T#Wx-LfONNy&jIxX2kI_X=$1OmII>)e-_TEv5XZ+4xyQ9;kaOycHE^(P#wkkZu|
zf1}XD2tSNLthfBFXlVJ)L%Hd40gI)zwY%PmCAQ!rP5kfL)SMQWN4raQgXLD<m<Fw{
zNS%8HyCzqZ)mFAUb6TYtSFEdbUv{3lifEKAEp)$jwy*N>DXVKMS1amUvs2U2kbJvo
z^v*Foq9N6t)+Dna+6FnlX!3938zz4>{KfSNo*6f5T_D4BL&x%xx+&}%Ez%B0Z3GL?
z)KcfEx3NHLZ-mitKR;NWWke$W$D^WS%w3u94{7$Dw)$t>XeGv-l83lt?5Rzi9*tM*
zz?@&~%$GAved@Ysl+BN(KRHh=QblMv0s@y44H}bR;1E>fQqjZUGC_gTr{<lfKCN@l
zCz2{UhxnzazVb6Cu>ut866MzCc&JT1F4VD~F4G)$ckov^aVAlFa$j&?c9ZHW^MDLu
z@PldCU37~{Tq=O*_O0ey>Uw^H{nVf-efBv;r5IF28_#U#0iUwhxog2ec0*XO`ZJk%
z-Q@{bs`YkLV4=aMw^VSj4E9$cZ^Dk5T-v5a2XCtr{JQfbr2_tWR&KYRVJcZ<VD-$W
zcxqHx{G6mZ;Uqpco%{v`>mx7uZ}r>Ql`x%;U{$NI{bg2T!-U+mk=N5z3bV_!rBJ^H
z0eSYK7@CGNM_aZA!Lm1Y@9&mufBpF=An_?1%pJFXQr0Q9xol4*tzEOz=CAJ!t%Q;m
zT32U(X29O&{}??>irhVVkGzY;EMBpJfPsDPI*s`4Y(QLikfPgHtZnFMFM)qI)m3hp
zHLzj!9XRzktyAa}-3~@ER-jWjLKqv8q{dtjyn{p|U79MouSgB<McnJ~$Z2{zmW~`p
z-k3Ejh(uk%!xTY62;*?45XTyozk+j|h~yE<+A?CTcX;B?K^WUF5S8dys6ra=!Fu;4
z20xy&#*2=};jow3CbJ*qEFqpHTOTcZhjIZiH4sobf;V2P!t-*K(w2=adnY@V0}{*e
z{?kmQx%(-8@o6g_*3~(fepgqnosNUaV|!Aw&Ltr03!~5%FNxrJa_)#z8qbZpuQ@Ml
zPfc7$RM;7R=F-D5y1lcyCQ{b;8aF!4>)6VHw@V_aS-l@NW!dvyZRe*Er!<Y1i`{Em
z<B8=xVtw`lQy8FmwjfBI@e7z1eI(rDt}EThg-b%BQ1vodxF9U{j8svbmrmA#-C9iI
za`(dm%{`oZ$(y5^I5QBwF$b5(8F_g_t#cDT;{Va%9MXdYhI@X0>xs|{vCe(G9VOJ;
z_&edRRpZ{a6>R2F`WNWz0S4|d&_5%MKG1$dmL04Buv`&RI*&PUKOuAQ7SnaOZm)Km
zu;$x+y_@JuxZV#GUv{eB?+8sJ`S#k}daBml6`NR(1EQH25+A_{xYD^3p2ocPc!4(|
zmQDYMhoc(_h5g_IW6azXuUyeMfR$Jgy@)678N3_mfZD&JsguMq>E$GrNYA$Fu+fZ-
zCXDG5FU0>C%vrmdcDoYYTAO$utLS&J+WT4c*q?8dVq;Sr>aN09Ve$<T!c0HT_^Wq!
zaFa;=)4qZ&%WUT^pM04@-J#Gub&2Nst^P4bNTJI!mNk9%3#Qc&kMZ<!jmPV}Vr~Wt
ztGOktX2VxM(}&df2XtY}j}W9%Tly?_mb|^|?arTvv@;fyUUtwvM^#;&t@xK6u1(fF
zd6vU}Zc4shxMFgXN@4G3V<M3IlcqX;y02Qx68kwx8bP3hO~+iLaV2&8nExTSpT+U>
z5V4lQzBOF7*;>zobY(JNJa|S#ah7aP1Z+Ee7<H$Wb@(MsA8V%i-@LsGU{uw$@IRA8
zNB})iK~ZT9iY=)xBDN9%$>0Re=#1h6AFWthG}zbG3o}Y>fxyg2PLBiJR;;b1*L&4o
zY_+8i9-?3-XcF)hpdw<02o}y^P!Mbg0m=Wj_CE6nSljQr-@mkG&e>-_*IsMwwbx#2
zZ8F3U!Nw$>lQB=$f%qXBJCBEzazLdvKxjqS6hT%}ot=DvA2jI0Lw>eK&z~;3`2PiR
zgj074Vk8$+tKM1&hJ@npgC0*wV#I3CW5{<;WMK9xNtbPtAc@hiOAwJoTxwvs=0`NY
z3ZyI^4ZH^?IufwiD~SvtxU)-e=Lgqypm+HM5HK8JB+lCdkHI2t^p;P@*{2G99|xo?
zbh^h2bQYb~sc+B8@>@G8a{}~M@qL1w{1a~zdV*GgT-B@KKE=6(N^ZT~eFRpJjnAm>
zltaxr;!cYQkIJ_3_Y=excAIks{STzZKh6nkz<A_kluClWfwGrtjb$GM4!-N24YKC@
zBRvp^)2Hdur=Feh3~M=_x#xsCxU1g78FR&*Q!o0))O)|-<0x2=h*kDAe$*kTz@;|P
z9XkP3jD4PkUnVAKP4Dk6Qe3f+KLyfzOC|5y-b3`m%<CSOGg*on&@uJS>X@{3sXK{!
zrZ^SA#iK6{9QTJsXcI$G1Ycv>7$E~?aK~XA$5qeYDU9ibO8$nPd%4^<mWPtS^REGm
zc=s4%z8I~Csy9T-#Z6s_G|fd9DZ_66!OU<LqXY%WVmy&H;?43TNHb5IU7Cw-BV$p+
zRm|%+tesn;Kg7JmSawpxdO1}2W-73C)aCc_o{l?%<DHX?2j}YINTv&UvRZWoC4r9j
z>(WlYVCwE+#_!ey8@~Ms=GcMCml06|9Xt5c7k{UQu}7^|?=@9Y&!r)0X*Hf6Chb?Z
z#1f31^Rptkb64V@g&EY<3~Jg1>}CDUMZREVTV{A}Jd9%IDGhyOr0!^i81?ii%V}6%
zzRH`DW0WvIX-$Nx-U|R6OzZubU*-2AJ@zm9CL-B_RCi4s%j}reCVDdMGSn(()>`k%
zZLtYiNX3wsiU=xF#o9>+5R^Y=#OF2Au8|NSZB%1aBpBh>I)~RQ&LRso7+PMCHZ~H4
zgXrUo2pj&OVXi}Ca^ny`DwFekV|+f0{5id>+=8iib=!<z#aoKPledMdx6FKu=&8jJ
z$sl!Otl#Tp@*diyM(S$zqd7L$Wgg5AI)G5b5ol!c4kB>N{bDHzAP}+sOq)#ppTpJd
zMrsU6!G_A9A3fbS{1Rw=j$l*RJ`;zrGL93&)~%gk`?ewp?9v&rZY$x>j!@+*k;-=i
ze(urT!TVkUz?V)PBQH1xwAEI907!$}LS=0XiIm$KwA?`a<<f|KsS&m=Ee%w^IdzZN
z+}SY(+!nF62wf84fh$jj6uJHB6QaW6lGqRq!yTEHV8gBc#YNG-7|X*&M>#7GmmHO-
zul01*XZHzM{f5}#q9c-iB(oe?XrB`|1~KO7L+H^|gm{^0$<^pxeedg6KeNOa>s3GV
z1b_7Gyqk?67I_9%H5T~AU>`~Onb_VnL(A|b4$mGKh?vsp{Kq8n<Hcqo`yv`#$oyg3
zSUh&1w!JT&c@}ySeG!k6(DYS2W6Rg#gK`W$V`Xh!HINwFB9Mt6T<-i(@e{q95?+FJ
z<`EUoxaGl8kX8Pf_RaL?ZPO+Uf<4CRi{K?|kj<x%9mZPX(NHlqD%w!RT4z=^0fe&q
z{*9dj=4#W6=wu)J-Y#CvqdHS%nlO{f9pH8Ak0mryXZ=LB)>fDDB(Q!W$F)I={Re&p
z)=$cLQ;q}ce|Uyz#id_rydnRMLk2<+;&a1l^@CDVU%ta&TjEkk{t@G;le^4P_CONS
zZt(&0H(7Z`lX_L7SB2(x0uN&ux`ji?@^=}_PUGIG?~G`QO$p<LgEZ01e`$Xne#Wws
zQKXJ&ik@dI>x%FGMt#?r!PNM6V_93k7~2_lzJa?@`=~Q{X{+vv4VJ=ENvL{l>?LCv
z8;00p^;h^<uf#<*DB6XB$;mg9!#87@fk8&}ZgX`n;Sb#?>*FncuBFN_rIa^~CpJyJ
zTrj^tC@XkWxvSrpcDAwXbgM1izAf$qMxAk=6W@Jdeb*)THPXJSN4FFEZw2XsE(v_<
z@s8|OKg)k%w9NgkBC8tdcMpE3tn2`J;c>51)d*;T>s26qW^lpi@{i)aCA^tj+<QBC
z)TH}9P%Z*_f2&v!Q@u`bShcrOR1T<9+aXHlMMw-vdA)v>y!xVL^{ZrGa$)oZG_5L!
zcz_to8Z*yMaW<SJqN~Dxp}g69Dvs%HXSTZ-Kz3zL(e3@c{^fm5WA_%)7pG49Xj6An
znI=2DIs<f1L4l-vMrxB}20g%7w(uh!>$@(D{%Vvzc0zsEmvBY3-f)UYm9GDovFzvB
z5&J7im_5bmC1dFU|IZrF)iR!Q3Xr1U@t+vqP5;FBzI>~i3C6cj#;33dN?PU(6rbRe
z{enhMIASd?qj+qJQ*&ZYzLEJ55-voa+<g2m`#+>-|Ci?G$C-7D&v&pb?VO!?ZHn`U
ze!w)xC$sWH7GLt~eRhM`ZwOjIZ?h=R@jXLLHtE~g-xQjSns)DwnletzCNn&4mg_g#
z&wlf7ShG0oXA=`$wl${u^yR0|l%0Od6ld3(E~JE))VB-x)?E7{MHe+vci7s#+E+nM
z2*Tw>a04l?Xu?>XlnkP~*ef*Bk`}2ZWNoE8CufEhZrTdwKZM&JW=PEtpw@YG1jqU-
zqE4W>7n(BM!?rmtbBnAUOTb8_O6n`k@h5gPRB@B4q9b@6?tvdL@Bc2|fOyZ{R0PAT
z6jt?j`BT=v5L)Qn5e(4w9?ZA|jEHj7jzT+>nuxjHm->|Yu51oo+)XOM-k(_A1u!}@
zCu=%TY4b@t#=$6dintK~umVYHiqqVu2mPo!j1cifzpOnM!l`FP>K8Me4{yK_3R{;F
zV2XYuY~NMR{m8PN744q<*tHcr-l88tf~1J`qz>b80*}Yy1BQKSlhl%2!B?^D)i(;W
zr{yUsX)=M@*Gb)lh9ZBumrP-kN71nIV=a_Rf!Rpj!4D=yf%-d#6z`jTSj;qxgg6XO
zVB;t`@sSN+nR1hzk`h${SLf@uv1PDcwvx|~bjw$3lOGuK{wO<Z?K#y^(`P|+q_-`$
zJ`9U}6w8mgk=qwoA>m<yMo?`-ork~9damlBLU3~4cc=$rKI?5}Q#u^Bc7$!!&G?}~
zM&bo_`&b7=`-G|oaqZ6%bn1FT8?xRGS{s=7?xg}dw&Ma2X&9q(p1PL`bi0=dxVx7=
z%HP0^6P%?N(`(r;t1gJ@m=B)X<NISfsAi#zQOp7xo(3vnn2;!^4<UQd5Ux69R8o~M
zinE!TzW9i~v%aIWjaQ1gU+fw#=K*z>xLy#ahf3<=Kj`I)eGV3?(}n_&y7&XVd`4n4
zkBUEo28FgwO{AM@qs;{vw*@9?M^KSx^e&RCjQW~3krS@jB3InhAQmkOO2@gjRHkf#
zp1y!$uz{Prxpf|4c?oi|L(XJlZW_KGxW$-f)6s(YG?JH-5Ssk5S*&*IR4lO7&VC4`
zw!+E43bAR|ZFy}3E1d~9;j(i+O<8JAbUU}+F0=hqPpr{*5-|O0*7f}B$#;9pvUaww
zV{Ea(y`8jz8_V2)bTW0~nouziZsab|*`~i$?gAD2-@6%AOZ`5w2!X(aI+^*bUho&H
zx*7}<?j;*qVzGy^6&8Ft_R-t<53mLWtR`1(1oh;9J#Wbf)s5ov*r&#{ixOk(u^n1)
z3^jOEpeM<h4?P_}4ThCcovf$#xqc>o!+6+%DP@S93)B0RobuzZf9hey#4lr%nlF%(
zz0^|4Qfp;^$O@j^ljV$Yfx<x}xsVa53xQTJeCAvE|EW9ox~)e9bZko$*sLP=Tjb60
zZ)GvKLI9gtEBKZpgmT(hKsykEG5>aoKqc-c(x$>|=u%i9q{?1F*mNo-1O_f)(<}VO
zx&B50hI*E@#gIdS_^RoAf<C?~Z#_vvIr*ecd}W*8w{nvVBK74x9L%s}e#DP6{I4Gi
z-e~xPlTwj}K5g1dg-JNZ*Lvcn%=P^;+Wfkn!;^~uN)AtsLsKa^i7MSUDK2mkT-J=N
z2SzGr=P**kKFfPpm#JZjb7*vq|F|EJqTnY;Rx?^5*+=7!!Fn|hlTY}7bZ~H|{3vRW
zbZ@?&q8<-rf6k-wGSm(gK22Y%1!>$T^i&74d@1=oDOV^8DE+nKCT=sCv-nh-um5r$
zUGY;=sOpO2(iA6IEJjcTtPLf3>O^BJbN9BMyI~x#Fn2Hfl)1Zq$H&Ly77OL~-X-^8
zox4cqK8+tIMD84Z=KYnGd$iuJioMh=!bw?qt<;lrFvuYoKREQTcUAPkx1s2pg{zYy
zv_p!l$cxn@JHCVHp+|Ynb~89Oo-u;23Uv?e--=+BJ!!JGkuId*Y?Jh?GcszaV3FS(
zE$g>2cZkrKc6KncI&Y*W&vE&!?g1My3H6k<UKP#0i?pG9+AnwFX$LNw&Bt`V^+wnZ
zj>N1tcm<(erekfePj775+ph6r#<W#!ZJ$E5BC5@x@+@S5#sXf6BphPW-@wh?OJ%h7
zLIF{?Vj$g1g?R*Sa*D+$mK76?gDg-w28WS+T+K%h6K9359qE$TG&Z6sW7)`>hUxx}
zbWwD+wboc3?0dA%3Z8V-6*qeLHJA2Dh-^r~c<>IA6w>DD59$#RYkqz_^@x0l5r!&P
zPgi{QNNX(sv4ee&(8>|F51-io_<P82o+jht8vsTHH#~8<6E@-PK`XMyvHeF_{UZpK
z1li&K)riAYPtnT+Y@8}6Tg#TL`u*EJXOEcm2w1Fb0qZ5_SxU2B@5^3%#_IDZJqWzO
zACc>PdLZ(aUzp@A!;xB{y+h#U+MIoTK-t%85C4Hy>{X|?Z0pfdjh9~86JJ&5Q5X-i
z8K_m}^<tdv>Rvimc|Bydtu;<R-NEC`>!p{^OGiGllP~A?!_vPuvPU?mEQ!*QC9s7L
zF<~P1;*Sb-DU^aD1jB^LG`5qFr7;eBggKKUs0LWnK~$mZZ`i(!^;`Z0S{{_uNtjh0
ze)6U?F`V;&A|OA0FNI92fS=cQU1U6r1`6MbWg7zi4aTza#D<uQ36o&HF(=B>rkp`U
zE<k7bpg58s!Ep(#5g$)l$iAkOi=B+bCB3t9xO9wj78yi~3KJl3#7LZX`NS$FL&X{I
zK*V~zC3%~d-jcl2domU#@8_|qgS9ZhL&(}v^-jnhD~`uT!Y=~l$XhCm_&M@q*Kpw3
zAGa1n%#)Rf$$@GN4|J^<!Foh^&nQ0!gkkHg_(IhUmR}(wP0e;nW{5>!hMXmH#Q-=e
z2;7V{%A<U6elLC^pth`SZvX`hL?oRfdubpxsD71n+84#9OU-4_26E)BBrh%=BCVH4
zY<vV{z9Q9J4OiPK=1V7&UuN1KAu9Rb2-<ja9v^WJu@x9oz{b8;c9FpOn`FRE-$<+n
z`r<{Gc!P&9T3-8VIGF-i#M+8ul6W$)f9!WK4b&0sd|0Atv7@i@aW|45Dgdg}GO;zG
z6VAvFwlXBWF_TEPqZKQf`?TbQx-`U~DhOO3ooRsC3d_57s0a;7IcRbILYVg~(0)!g
zjN}8VO^xj`of6;E9)>CYygPWRYRudxEU$igHz9xKuvjYWyHgcX9d&-ThgGDYYwP9P
zF<oN>(;1D|H+96P`=<LTUGwJKx!mjFF^s$lV98FS$2OzJ+i5B^)}u7_qNTm{*zNb-
z%YYeIa;y+choToG^_Q4FTR~mM{3LT2wuifwbW!s;@8l7LSF^A*vsLz7@?1F7)s$;i
zYpEKso&Y@=Udi0RR|rO_N%=d7?F9Dar$#Phtyjls%#diylAPzN=5dVh=v5)AP_8ZJ
zF!Qe`SC;2+1g8jHZ3_><G9q@rA>omV1sDm3gusgm>)9bEJ`f(DQJx!v<)9}iH*yOj
zk-1LF9mgH%dL8g7mr>m;nh>j*PvaONdj_YeZ*Z$E1%z}%7@f;M%_hBC^o!nrLuxP3
zkiAftj_{7JP_;K6kE;S~F=CS+H$+|~SL(B6r~mGrNce3^qnx~#%3!wKx89(p$(3+A
zxsg?SBTL9besAKo!&$t2R9rDZ@gx_n8oL9!hL}CFF0hLX*_U(BV8ZpHXQQ&IUSlMR
zX<Hb%Y2VnQKJ>y!saI?VtVbNo3hIHGxLe6B`)1CkF#6Eq?$7f50AfNw#<H5?2E_~{
zU;+pK50e;IEZgti4EDk{?j}j#51$l92*VY$o#F&8Ic_$<PRR}Dl$<^01~w|ibeh|x
zdJ;U2u$y!EEr?jagJjP0wC&vWfyQkYLwuT3hzNy9tGcU7u;u){D%VF~tUh~)Ba=qK
ze4jiV0!4Knjl|7xCt3QERZOybJ#Tdjytdp^c*|jvV%|)-V3Yi4Db1!c_;Y8MKW}9D
zRWQGHy0-uh)e<(%-5&l%pY!71w4^(kh=8Re0Yc_w9w*Sz-xCm7aEwHk+CAz;M>!R^
zB)BX1Q-G9%6s%a>A;km=#DcZl8zhMCo=4lZ8iVk)bIFz)wdzm7s9gz_)AK7tBQTL4
zJz9Bkm(lXy&F6}L)@KYb$7GXY50S5x&I)%*ev`_T0lPP!64)Xs22@IrN!P~)=F14M
zk`GY8m8-_{u*r`<pVvK$4Z#%WnZF%m6PTCRbNX)`$K`nW`uvW=|0nYGLp|l|2&Mo3
zm#_cl!2f}Ky&J1#S@E@e{mkD~2mkl-bq;=<^=`HzY))$553^Bmc7H6!(h(<U*S@bd
zDDAA|o7tgQYj6h=x6Yli6WFH3{|U}+Z`mVBb|`&y2mfz&D6$^p=J#gpk7T`$Y@zli
zLDb%!|1an9jm|gsYaouJH}*sV=!gTbJjd{$JydJ$%WYC_aK?Fk)G)l85sD~stPAiz
zxkt$(BmCZ2-n(vOuc(Q;Mv?4_4Z^J=hjMhc{Mw?r>T8Ok5^K1|2lvB|{bT#4en^oY
z%$~_XI5O`0_V|+Oas4@dMa`)4Nj=8$n~IcUMRago_02`G)%vp8o6F7N<4VopH<g=Z
zZC;TDD#IdsTuJr#5-+WXJ|!FfNcK|JCS|K58@<_kN?{Fbm&&b$gCJJ)6(z!9t)!!P
z8RrUCs#K>8l^+RKf-{XyDc32Yz1XL-i>jhsKi2R#OlL58+)OHaJ{@O?iEAasiE|n&
zQ6vcm7(zy2X=JS7QIEiQI60UXoWS@SwDxgkB&NW1R`MJY0`_V#o=bL5ABZ^E$s?lp
zy9gDckUr=<zn00hRc(YF^`qr5mXC1Gn{!k+x+;kAz>Nr_p_Z3qBd7x0JSXa9tL4r>
zOUV$P0L)V9PF?(pBBOS_(|e?{SZ)YYED)ck+gz@DBSH^yPO^dg@<=ab<uX(H2SY=7
z!}&md(A&t*<fMXm>TXab`6wxo$sYiY=-2I(%mS`(OZW-Az@Vh+#k@$>R;vew8%dx6
z^~1(j-X^1jNv_~26)3_Y!vAvS6t&;ant#MEFNqEEKo_*Ob7C$1az3f1g*f-vzZI%}
znOhwY{acb@zR(=n(x+qwT2#a$NqA0rp_H@F>!GG(sGLnn6fiA!drc73OzB}ibbfO=
zEnqJrja<)~Ht%r|4<{%oS=r`6t4<cX|H!sr68^RN75w8~F;k=ZNZ^6Wt!6d%(v1BG
zQwl8FP5*(+Bc7b^ZS5q&Oi46=MoZAu!szF2BPo6e@l}Fj?CQSCi$;-0TMm1u2lDvb
z-{{UKc+U0Ay%f|Cx}~RTaNr+fvK4ILN5Qi8#ngEc71Xa1WM$D4BYGxU<NhK|7)v!#
z^tH<EUR((EkU<`dt+K<8clI?N{E|w0%114xeOAQ!I3n>VQ=Je_t+f|5W2Q3Ca?Ht1
zrhm<+!f!D3(8qxN!Vtl8lyXy?(SIhavelGqoYjm3Ao%V<NFcFG+=%>+)eObNS4qEp
zQNtU7mdWZC9CLhWB(D{|G5aN99|c=ECPTxIipmu@5-rjPdy%|BPKvGIuczL!;7Ez3
zfjM$fDXCoiL4hpw*eXq99?9Yj*VmZ4Nr@^+nPJa(Mv;8$%lQEqiL2Bg)iij*?+7)Q
zx_|hEQCd!tZ4bhqM681mYbVGqGawtLKhUC{X>?#W)ryoOQ4EdcexfsSf6L#P86AYn
z-A0cTooURvqDM~}b$11@UQd2YipE<iqX#4SR96imeUbWALqC&QuX<k^3K$Q+<XXI|
zeNt-SZDfXS?~v+}@*+&jd5n-t*qjhIT(K;UZX|<qCsy0^{+xilOfkI<qhTjPZ=Pe0
z5;1HoNxJ8Wmkwi=`zv8>M>Fd@Tme7aU(*35RnQq6{}$h~v#I9@7i`)SXRN-cu;!0s
zgzlN7uv!QPt8MBOr<TYjl#>)>3X`jy6aA>F1%@g%2E`zOv|uE+Ne)}B8rt2-eT|f$
z^^`Cr_Xl)ZfoTTKXhuaXK6f(d^`W97A+7U!c}PUC8*+uL*D`14>E}}@hx^%O7vXU(
zAlyh(bx`a0Cdi5NlC~@jH4#=sMHkD%C&zHydu7l)XiSk;mLo73y)+iA03EyCrx+Ga
zY$Zc7FL3_9TcV$Ph%FATuB>z{y7{x(*xMXY+>Qt5N;x9qFzV5>)PcsiBssrYr;aFs
zXh9}7MN$p*R58{L&&OAyJK9ejr+D^CN*=h0upibY6*L0@8rAe>B)@hM{$`8<_0d+_
zk#>w6v7kduy&2-`6TMGKCW#}e=0C+t>4aK3Q8YEYL1MsIemOO@S&_}w#P+Z?(Qy{A
zY}yms?Z{>c4p7@>G>CK6So;N4+O%Vi^Xza|6`4X7fQEsBTydhCU}k!|Sk*C}j<`jt
zKW0k|@ls-ri)RV7V`7=__4o&lipWY!&PpK))!gQ=J+aMd9%}{dQp1`gTtUx{vFs;O
zC$rNq(TR6{qsDl+Illd9+5QHVo;gX;TW(#!U%{=Tw5D6tiK-1RGW_GZ(fEDc4QW{5
zMt8jS-SuFiw;n4l47iCsXKfP{sdb!QX@cm~I%bP<ufNmk#bBh}4=JYGRk@w5jfaVd
z?Y^aItEUSE@pDxa7cqNt1dPgaKh;V`2vK~WFj_-`OHNRaxYcN<H+zx@agXc75lDfz
zsS?S1bxI9VV2w^Ob&7~|BlP109vk%IEd=VV2-*`XNE%8~4-1p3M!R=Q@-HMyhc~vf
z<DXgbvxBqBla1=MPvSw@wWWxsPy2i|zSyY&d!g{5gH7^kBt-w!oSa2@e{=F{@)NL&
z(Td!`BWAkzvJT`aXdSSULwJy0*h^(d9K<?%ATumLM6a7%0`9=dTKR<M+KdWoQ3a34
zoVYqlz+^e<w^j|4lBwnO^wml}%!@ghpq|<_ER}4R1WU&|O(h2kRv~vu;fIqm<(sX%
z5vw?F{-e-z>QNF=MM$}T@(U66$qW9KsX-K%+Z`<xRMDJ$)VJ>EBSWbge@pTivIw}s
zMx@b9J?Q(&T`%F+SWc>GMD|^22bY&(k<3bg!l<59gk>tTRfmPTm0zA1&?NgPbWpB{
zN+4#<*oAe9NL+hqfH*W>Q}AVvKpHL<`q118hWUAF#%}pWk$C#_m9<fN*H<+mY17GF
zze+~W3h^D)oWc>*Qi307qD+2(laC)aN`^c?=HNg&PETW}XXnO9KEjks=M&H3{$@^I
zq_EOnDl_*SIDrU7=;bZWUdCZoZ#I%YC%@uy+If@(KtPLiwx3PcJ%#!MbHzKCE_-Xv
z*0ZieLoD;AG<Bhadx&ZFEj0~}2sr7^F=o2!6pV@e>zoxAX>bk0`%#07AppQExGbS=
zd<#pA<b!JTSroYT_kse8WPZ%^7YPc0tV`sFsD}J-o<x45VFG`N>2A#L-~j<JRQZxy
zBj3;VK@t_vz$bj@K?6SbAehbhCI$rLBuf`rsCNQyS+B>`LZLbj@O%^ao0H2q4h6T2
z`TKxcM2?kr@em%lNHv+*!i&91CIz$os>ao4VK)J_?PEbgBiYH1Gxx27w4t79O1>b0
z$T5xAKw#u4M(W2>sV=940I%>Ar<!nyJxhx_l~-80GoF%ye5`fyCuE&P=LCg}q`-@;
zLwV8SLAKoFa<__a3qsY+#(V*B#QH=eo4wAj33vjO8c35%RXC_pg{hy2KJWKfV~ym0
zF~vx?!b0^CYu+TvlW!+4nojxpRl<*e`UQe5n78nzFcY){Ih~0Yk}OK(I)LNh3A|pN
zGyR1m5oZ${d2nw8(9AQ&Y-apf>9`-H3#a~DSb;lI=2)#8>D>b~^Ye+-G}>@!-#x%g
z>hFxuR6SC+Br-}54`faWwX5)8a(T!;%fp7Oysl?jF4@?M$qYIPawjX)<QGnPOHw{5
zf%B^uFt5i<e!wa+<~?1a=H?Ds)N>QCPr-c5n75e^VyO1qrNA7$H#Xw<^vHcT+HNe~
z)z3(XKM+Q76h=YvEr?S<YAi3V8`;}PoW{Nseez<G)RD$KFa+M(%6r{NfAnVd$UMrF
z<~gSu1$baPz%9@p0s&WI{^!Q8N)qVoK42#G8Oul3RgW-|Uy;%pDMR+Dtc-&B=H#WC
z6{$tUoLp-9xr|`Fv*|MFpUNV9wM&VqjYjecutRN{-CO9f$Q8s*bO#*QKBj9l?KV*^
zXaDts61b_lGe>=--ei@W%xPC<1sQnnBEeKUr6I$evcg^Skl~g=>J4;^?~B3j*_2kD
z>A?@Z^^kZ_9SRiwXes7V$tUS=7Ri(MQ>oZY-NSEwC9i4}PsWEEb>|iP#rjfuqE{d6
zwRo0(?*>iXd)Sd^`#DmTXD-aJlV`RpH9!QxTYf~kWk=wdrK>3sl$8vVv(kx7AUvb0
zQM@TqDr<gONKR0d=^`!3TX>_}RLON5Ewzuzv$L~Oj(Rz1h=7{fQNCJT<zOUtl2Scs
zg;puy5l08r5)oJ>9jmjJ4x&Qwb^8P3amyK*qEC&1Qh5Oe?k5ZOcY1O-mV1LL@{^+>
z_Hf!*wid4pJxPfM+AEx&Q2fPusntkK<wrPLx0Mn$>uf-+Z>vY4t;I%ch-d%Vab;0S
z>~!YK`iS-f=?d_lW=bn!eaOS;&tR;|8&&Mv@*}WQf{penMT{`rSzxh;3(>F1k!cnT
z^{Yf2^F_yb{gMLC<<hSnGMGfQ(se2^Y?ES{$zfy;*onEalhD$OrP_60g3w@U3EJ@x
z)<fWZlz_^l6)^-z)Cfgte$MV)Se&=b{-T<ddMR&v2q}fs@vui<$M9sc)8olwcqoLw
z8ktkKG{1%z$rUp5jr@VN(Ej79;jhwIX8i($6<Hq&mjq8(8T&;hpCuvr0VQ+d(l|~z
za&%VB%L=H}=U&Q_!Yfqj-Vo&wJQ1O+H^{L(DtZ!Z&@4(;Vpx>!fMTF5z?yGmIn@Ph
zxLC6#5m4%-TkEkjq~L_IkhfB&vAl0xHGu?w!UU;3ngaTKnVr1+rapM{Gl5U)-Tf7e
zOs`9}68y0iEvH7A{&{=B<NPeD<8WyW41bd^9uqPWt-NFblXy#JQc3F`$`M_TBxEb0
z7ht5LRJs>2dr(0iIOnN!#$Cgo?6~kM1}%DyEr|=S#~u@Zklr&?pW6WI&zB;2O}-QX
zRS8+00`%@S{vc#5X07-Mv*n)Lzn%GzAtn}33$ta3fkqERi<Zg4pPWNF(z`1+>Cqus
zG3`aNckx8L!0h>*3|~Y);v7E>`FQy4MrbKpA|)jhe&+Jm_^eXrIRfu+bS?rygW4~-
z?tU4NpoPcf5|1!gjoLQ3sZro47?#`)MBE+9cU$eNR4$tDM+OaL=ayrNd`Ce2M_okM
z^G>v+YJ+tu6XQNcItV9YB;tmQDl3c`NuqZXkVh3P)O4JUrsKQ+hV(ZLUW2CNw`^fB
z-K-|bdEvQ_ITd{5ZKW^CWBz9?&eg+uEY4N*R$=mFki~63hTik%Pg&!$*?SgCrzI4{
z#D~})j)4DTea61Iww_eByi4zu6$dLb`Qe}>Xw^2T<;JcZfnw!RKFP{<OqhX-Ywa23
zDtN#iS=QmhruE7hjq&!6<BbEWYs-y?c99;jW2FJLO%8N4LyUg{f~Z=OqOl5E6Q60R
zeNqsmrFQYZ@uT$U@9`kF$RwrTIHnU_xVC>Jl^RHqNa`0aSMZzTuY~p=fz~%<R}nJF
zx#+L5U`MA)Fb-k?mq)7Kj=d{U5{(CcA`KsG_SMK*B-<Qy4zSNipAb5w%qQDGqTE5)
z6Q5b{P@>pKyv4gjG%4m4^Qs%Af_OK}&f9!IhQ;8$hBVD51kLthQ6Q$4&cWXu?ye<n
zF3tdTwJdjZ7_kolP#Iz-N-2fxATLBxskPoJ@E1Q2FzyL{u0LV@m8)q>%|L+QBhGOE
zjfnUa1=t|OA0h3^mc&w7d#Htt%>gsLqXc05@N@lr(T!KziN6WBporMBFN)a9{Th8c
zy05nK=?hm#$z!aXZf9u6SUKtO&7Sd)3?pFtXVdH%4f1IGCouw=aDU$5o)2+&>r$=N
zMF2>gfz=Gl?8D?_q-qxCqUeIj6!71w4YhV{iQx0RyQoxf%1qThiWfyHwiv{dq9l~_
zcn6OJr@*jyfh;AJWVaUHMxqvy1Wv?{<=sk!`Ae`6tS_Dw%(a(FHfw)%^VCvX6{&2p
z7Rt_rX^Bmv{wD(yImB0uS#NW4+`s}TR3Y|$CJlBk72@cQ)f0=g_L&LS+Y=uO+|<2P
zy5v-A+mZ=%s$ntX<4#7|1zs=sVqZE01!H0y&w^Sa{3o8Hqf#f>qC`D$=}}EfyBw%e
zx7WIrl!4eu>8TujiUD%AAGzkYYzIQ|mujT>N}31Fq}td-)eDKx6yW|AF(tfD@XoGX
z5Z6MbT~l7Io{acwbO|dSiuvtT@&ozBH&B_iO4@cK{Ly%T%_?g|znPaI2aX^WUpS(y
zz(}sg7?W_6a%v)qFJDQlKi}%VS-h>se2dj%-#~oSkbcJe&y!cKk5OA9VXgH$(Q<v;
zW9@qpc%5f)f}qFlL=v_Bv7rCzdbVu0Ysv+{T*5KuB>FAg<fw!W+6oy&K&_6H81tL5
zwZnWCIM+z^k!+9*`k$1UvL`+%$0+iM66qcW<F+07l=idmoAw{sPAEK61WGg3QU$w{
zz3!+%&%_O6sfOEW9b@~JM5_b<1@zFtC2xsODB|wrPtVLo@^zJ#5*+Y=>pm|@T#))A
zz4bYZ{!<o~+9ktlS6EHyb){8p{ziD%IzRCytN~v?vCQY5fox+nJ@=bm|N7Ua@w@eA
zdiUT|zw0YoVQ2r&D62LE4jy!;@T8}a5J;-giI2)$x})U9(=BU59rsUEm`^%Q!1Z4w
z*%KGvX_dQ=@CX!zySqQ)d5ZJ14F~h`ao!(6Vn1LXag6HK<XHK8;Z%eG=|@yVv`r!F
zjUa~FR}PjvU2K>bbnFs?iK@nL`>NKepyMBE+m0KY4?F3aXM0lnl5_D!!6pRK0u%jM
z^)dX8p*#wF>BrwSMqk1A?#zlQ&g<(BiV$5ef7$hyp|G;X90Cy#F9~as+9S?{4Px3;
zdjx{nr{WUC985mey0VGP?iaG<#oPhY5fwT<U}1@G9d?Gbv8<@r@Nxo9piZmBJHnjg
z{z=v0*`K_)1ZbPqUx_bt0_Rp%nsp#L%1kYg^lVE7oi2DZwRDc%V0lYTC)ttt+pzz(
zTIE2)t3P0UMD60j8_FHS3^nZ&diO1pB_}$T-~(oQJ2ATY!OeeIURtF!<)+nlpYi+C
zjbyXbYoBVyFZV@fsC^`}G?Y^lxyDh`xfN-v+JIgsHTw5`%6wLAGlJCFfSq%bR_DIm
zp8&~-IwGM#4l7z?Ho=n7j}@GI6h-LE08+q$e5_-&V6FgM-I*V;|IqodybwDg36SI5
z%EBThLjpIeNXGM}Y^_0Sgyw~K;3fn(KIaFM{?_ddqc+VSy(5s7B<L`bcgC;iduPzP
z!n8+n>k#1sO6MA~XPqaW7n}h(T~xqfiz{)(v_HLMs%o6u8(Ex->vg^EMzVowdHg_2
zegl>;67j+wkSY_%Z-`>FfXY)?fyou9+&$T+6o?Ox-D3K=c<6GWrWwvaXjF-0G{RjY
z{#joI`sEfLl<L%~UdAPm|MKtPVobm=DtC%q!lzn<-X`M0N(H@j>YPcuc_Qrq&vEX(
z4gYISegK}6ndiZSNNao=AcG|J5e;a^`B=J0iiWU}lsE_;lojkyNB32eWCYth9i!@(
zjNi0RTvRIKT^qe)qSaN^sCb`7xai5Hpr%kC<Gvy`0qvGtO3k=G2RSNQB>oo~WFbP1
z@H$Odu^4aT++G5T@oN=2f`od0^;>?wh?|p)RcKo3bAI?W88Zo9b@_20bSi*H=6CtB
zIr;&#C;o-;TYnXnS31QRm!v}=TFvZIAHxLkIb7q2V2$(40NIL7NB$v1t%PmJ?*FZA
zQ=Gl^6w5K=&&e<dhUsP0@E3Ry#s_85{Z-&cIZCfCe{67WeEH(SxL3#@zSa0#k(ar8
z?Zn^w4;z`YNT$>KK9Qf%kAFkXy#MO#dxlfn93|x2%i3%aKTg?fafB@wao%}aw|8Vq
zfLgA8dhl_n6%+Y}Mus7JXVDIYh$<gwE*Zl8giQ)4M&e=e1?oo)L4^5@6wz+;xXGVR
zWJmZkGv20r<)i%<;3$8SiV%`b!+*Xp`m<5zMi+*v4|3<H%wMe4x$^~aJ&U!{B3Ru$
zAn{6XZ~!`xh$wlbIgR;+l=EOZhaRkuKbZ|3#pSVZ)<DTFig%t9Tg`RQIY4HXgzOk-
z+A;m4D%?7^Iok+<%mu4|@M??qtzc!8X<H$GGPCooz=HG!#r+no7w~6=|I|31ORP1b
zgBmkBodi`QRCa<ZY#y50DW!UOr&Z*|v(ahNP~52Sl4}^>vFQcDN_tGLriUE=@$L^n
zDkc7sH?KGd)~@KeO-x<T$E<#9YMI=YG)EL97zeGEGjQP1J>U!LdaDJam<1tZ;kdr6
zm^J<M%n*=Cw})<!>0Bf6OpH;N$M#8BgJv8!Nva=-nq&}FhOj~~migk&`HMf%=Y^pb
zt|6ik{GozF)J7^IV)*YQbG(@gICpl2Qsc@c*aBu_b6zH=M^~x`M&gg;1T?bHgJ6BY
zDve=AVm4pY3RN&E1&`#sL3KEffAw7#V7*1L1j4`U3c&TuS%sURg7Tv-z=X+KpY>J(
z8XuU|8>jU(t<M|F0)p9K`$h!?0=cKYO4!VCgy((Ph>sOCwQE=Ct17gJQoA5z5xY`@
zwLJ5=x&@yB&z@jx113N?cIj~zR3f(P<vK?w-2*;u?M<w=XtCe@Jd49hHN&Y`qhS5h
z?|$6<9Gw$B*~ry;gndu5yi{-D!ppQ==*FGnMWZe^5>L=11D?kKWxA5rQB%13upm#y
zm?K;O<Z;D9XVe8oav8rsQe9FZzkii?F~}jCOt!425i2@mpkm?fWptoNw@#s3YN;V~
zy)m{)bp-g)!_7vbH@R_rtM9rzdIr;$Jg6F5<1UpIQ9_^HBICiiB7<lIBLA%=JN#de
zV~Vr1MFhiOK0dR$peCF;;ROV1sO5mO=4|2f9Kss4TLkrCJKP~(;6E6+DV(~rkBESO
z6B_$-mUoH(<dM`tW6odT6x`I5C#j9ig(NkJgDWAa{)7us{rQafm)Sl=Ztl#{Qeq6X
zhpb5+0vVY>pM^iBk~@g@SrSUk;zCRUN2SJd{~>qXHXCyuXI_wBJo;MAn@ss1`293G
zi+<_v(8s6Hmyi>uWLbWp-TX#fe*edu(=|`~P{^lG$QlTep%UV7C_0izC_*};E{|4Y
ztpNF;Qkkp}w6@i|-kOC#kx-A-fcXSBGuUyj@q5v9MY7-yF|-!(F}`SD&a+zxVm8JX
z!-IcTX%9f4efTBA#~xJ9qF&JO__V=uUI>X5FolB0PZ_`BFCtF~f7v4d{eRD2n80n2
zfS$eNc!8BBHO5caTs{E<mUW;;*Lzx4?rp^RN~y5|#>us%7z!K79h3-H@0e<as}D@O
zQjyRfUJ?@eAsmDoF?0K&?g2l~rJoLI3FQxx=ArnndcSgUGc@4NqnuiwLe_fLM$wqa
ztx!-KQr1ABnGm7oSdUt!)r4AJmNk-S*leU&vP#aQ+rEh3aUOs|kp!dP<Mz8Dl8BWX
zx7lVT18;v4Nqx7BPDI!xP{YwcbFEklyn$bOQ*VTo8O#FvlaOp7TB1MBFYF>YC@{%`
zLN2|p5*7fbO}-Nag*+hyevp%{viO}_f7vZ7>A!-`5AnS2?{Zj+6)Wf-@CyA9k+SE~
zIw(`wbHDlz_`ykqi$e691*^#^nX^Ss{EYI2MUCV%@IpAuHEKO^3S8tr((6fu;()o8
zTP|p>0&~3e8`KHvAbCR-hGkZ2eunC!U9)xBh{QHKBj3uhb+r>=-&jq2>G4g7OVw|)
z;%G)s=s00NQ)pUFi$(EQUyWk;>pXbXy&<#f?Ai2j_i7TEYwo_r<-K}8wQXYk8d<xU
z>ekE6r2X|$q0gaYxfn=+5Gxx@N8G1RlaSY0{=|jztQ!P%lGP=)mxta+KawUTD!f(a
z0wLxTsYZZYK>yqW@0B+aAA;{vM@I5Wpf;}__f4L&`-EfRa~1>A%bvieVCk!V+epYM
z2cSVP-VAe`D4>xDE<GT!<;`pbxx#4rfD8aJ60-Vx&`^G(GA{Qc5+!n<`>6LI@#B8X
zZ72onoscT);~;2Ut&dN@F+OX3yh-#$iUNifQUD~ErGT|Bei{XwnfYSj(()PjE7&@r
z5Q$@Bdtj$R$#MyFdoWILOF__zI^(`Z^)yVf)(GNgbglO0qkw|`kvt~tS14-PTtF@Q
zo?B6t+$P)gtVq))lGd0%XQ#%Fw0U?hSl`kl9U=ZD=r2fyz@^aNQ0Pwt#cE&lk=!Jw
zVpPTrdLM1f)ixtn+sGNM$5jWG_ZDi}3`-M~5w$D9>5Rk}9tt`*qt#iIuX9qq&Pm7D
z2^|zmoin{U<tj3`sI18>fv5J^^?km8K0alAMEto*W@7|p(bC+fn2MSjHB&>~uL{n3
z^eJenI6<65*HQSo#-B+@+(-9|J;$@nd3{3;M4t)pp&r1+epn#%1?p9;e2#|#2no+=
zb*ATQ{cIo&^ME93J*oB$hzG1O5)yi*pxSNDdHE_ov!f$aN2A}7+Ga~_!W8Aiv7k2H
z$&Kr?j1g;Lg5wEr&1xLT#y6WICnDqr(}HR>^_NqF*v-3A4T~FWK(^E(L%G+ghqOQQ
zQ_iPe=)n&r5)4`GEyaJvdg}&sSq4m)%ck~}vH|QK@a^XzZ>vS^a)neb_CmB1*^6*z
zJ9BG#$iLaaLqx6VXJp;L3D?dtTbf&dk)iKm|1YN#?-zWK`{?bta+Gh{KgE=f2LEb~
zoKQM-2p7_po7L;5PB-mgX7zH>l*S_F$oX=%7dy|iCX`NEgZAXYC()jKo{wlx)*+jr
zJ^4A-lFrh{h~Set@g(^?SbzSF{yg$JK0l&A?|p*L75ei-`tx6;^!@sCn|x*)A(ekm
zf1V+qZ{c$mpY!s9g!*CMaXugq;bJ3$;vS6HeO2$+<15hWeVNFLAuBONh9VAo@~nnz
zix8g}A|v~nl8JT5SiPQ+6F7`7jb8Il6gQTwQHwkxh;j)WIler46A^AoOzY-SECr^~
zH;+#`@exPqXF~N86^}ikB4lxgfa;t{=N|GphxqPwj-$L^Dw$B0Om58j4-Sp8BXwm(
zmh?h+WVcjkP%z~`MQGiAUQc$6fH&Kn?vaud*Gc61iEe%ZTW}R{*R&^;+cg!u32>5)
zE9e~&zd2!uzf`V9>h0%J^V|8t@^;rRQ8S6+Mxpj<Up?20$|}|}w}A}uZ;E3LMWtwM
zQ@g1t&SOsyyV5Qha=@5*WkuL}LUqQ9OHcG=%T`=wNuF7YHeEST!WesDevOl_6cjI%
zBW3&@y(^-<RlwOAWq<F8V6B#^No#WOxyf5y%R9#V>tk1&_KVWP`q6z**+^K?{^yBa
zMW&I<o8&xpoxCCvC_lKWMrBBY4wl${ttw+&$_rsUhy9eN;@sx+!)e|wmSgretW!H)
zs*hb@+CR}PJ-(Kf?6D=$^TE#Z3BFuPIa*W|WsfNY&MbpDeGwAxAYy@7W4VLQ`=<82
z@$n`8Oj7jy*=nAbR+N%`=89}y_j}_+%O1oap*KLKyEm7*at52LUn#oh)@r4%`vpD;
z#JE7!-L!98p*)j?Uxk8SBnQ8BC`tr={XQLj=`8#LYC;GK^LsqD5bUx8H!V{`P!{~x
zL2>a+)PAQ2H+NjgTmeB_L-2NK%f7B8S_y4bnk@kjf(pPb?Cq%)f0aVLKRV(;@!fvw
zI)PvI3-D0zn=A0kR-)l|I_l(^E5!%o5`bdYI+<sC!0*~p_nJcZ5lsqeYiFHvoSL9I
zFF<!5YbS`5du9PNckbO*K(CWGU`oLWA7Zys?w5YMw^Q`nE-ty!_=>~jWQpn6BTIj0
z+q06Ta1*8JpCEh3XaAD3<hbmbU#z$kKp7{Pqy783yQlfru-eJq@!)2HE12=t?t&IP
zdY`<O2C`kf(79Pvtl;AHSHA21W^-NOR2|nmaL?v1=(1Ph?%`mlbL5$xLzMioE}h^O
zJ$A5LH1SRdM~)o+s`?_6;SiiXD3A0~rxi>{HqJbue&j{sKj{UBP6&GVMAuq)?x6dl
z3d`BkK$OqiZaTwpPF0mm?+XfW8<Hxb7K_Y*<KS;{V^a0O*r3cMbqngd#@v6t$$4UB
z+N@qTtHSgn7B)v^<D|Dqv3JeNPNELcm-~y>WY6o+n~TAsYM}u9dOu;T?j0tie27|8
zH~ED(-3F-4)V1ue_R9tsxDpXsUEHvdS{jNdVWy_4tnZK@S&4)n@4PMg^?2t+F&K7R
zxUvntvKYDOadL2}ff4^H4*?1<yWd}vK;!sl-ler!{MOVTy(s#9V>S9&U9SkTG#X+e
z5rK5=vHxB`4p`QN)V*zH>ihoq(K2K1o#2+SI^a)DZ>y>AF1vrYvHJT(!PM8=0`-T>
z?mzE49e1V@_2pzrm5fUTN3<!}%sP?s#WJKh7xF2uaL9v+rlDWXkG+w^w#d~CZ!!XU
z&@WuwJZ&vOiY2;wxbk(Jc?9IMma$Ig&rQ>QEqXJQpImJvA?f7vPZgJ1BZVK5!q%ot
z)A93dpN<xgo%1xTg@|H&m1y(Nuv%vCYNU?nAV%33`w||~(ewCN6tXz|%%5}Zmm5Z_
zn|@ekruuVP#{Q|#f7;-VlXtk#j&mn7m1<*Mm%XAF5W665+Ge@kNZmi_#1@I+*z|yk
z$@?J|-BOC<x7Qw1>6L77WfNAS6fK0IpZ!ufD3uGqAUYgPFV6$~?hIa+f5dktdtR$9
zXMy4ZEDE#t41)_Jo$81JVMGs3a?R9IyfnL=MJUdtAH26Cvu1B~F|DPo@_DBId=7RY
z@-F?9<hlQ~RqWJN6oyP6h2M%Y<X|$lb&U0+*V49P_fwox=wQMAo5Oq^U4c-L42=%v
zuK)~LheLL;T+1Cj0cVH%zjWN0fYRagjE)7%5jw-OR*u|~OGLaP9xiu0q(7|CK4&<L
z(NygB*aQB7&voZ@8g+e@H(G2F%!%94u>+gDu9n*ltdtx&o2i?*vo!Srk5{EGHT2|3
zR7w)C3o$Ka?~Y-Wm~mn|T+fg5Gc|`sgVI_O#ELYw!tus_`l<zPRZ$e9ZRJgWi)>w!
zvKA4de-PGGsxIvXWh9GKdJ#D~si%HcF&0arhd~eZJkufeU$iSl=!G;TH=Oh19AFEC
z&6GSVUr4UImd~6%^FLGHS%}QpJ>aU}^~P3Am1Q}j$O5u`+sCD?{1VL>*Al7z+i)os
zX)Z$LrE2ZBeU(jO^%A(=IrOGLr~kPu;KRHw5x0R{P^X!?lB+V5O}X4CMWQ32V-c{h
z-_XgrY2B;`p_zT_xste7{dB)STCOPGJ%Y%H{mX9;cGpiY^2K)7PcQbz-fyn)53-Bv
zT9PtZ(1+?Xm*SP+(IyruRXAIya~mS!sSXtr_lpPXN}`L*6vJ(S57+5&F^60)p80XW
ziuf`Q<ylI0{bB7XM~cz}iLq*@wXdc2W3b7GiDvY=cz2)JrDiJf@yatuT8+B|;V}X#
zqN{U=Ga@LX;KqSbazv`>H_uzXK^eV*ZIJy6b?Nd|9ahUqya;{H5-Q3po#M1UE2OT=
zOaDgRUp}o$F1_7nrrS&E;y>)&-xuS4$izX<CNo-=Z!f)*Neo`re~lcr-`>EE?o8@t
zNB5_#@-uq1{IH70Qz~As8b5cplr;)JDIi+4HL=uf0T4tdU<5pxgiUVoWJN9?EpuYb
zJ%g26*#^qBid+SVhf^;}(zkzvP-b)UoAsJ^$*j85P8nF#V#=RdDhm&HIQjT-F8;nU
zW0s`h$$|WZP>p-kH)VSk<VF&!7!_L)*GQ+g6V-ceSzE)EMImvwuPJ?+f#P#0KKaJ-
z8;Z=d(~Fubs3+d;ubaL7=)N)nY+PBSjErv}momgn-pUi!%$Q-zDE-0Iy&sF&aYwxI
zq(Eh}(NN8Ih-9B&QfgYiFn7p>CWHAYsX0uX7x`eR3nSpGY9Jk0D#JjPe>c2U(zsYz
zF34FS9LiYsNzi)F^lu{I<(uj4rDa__98nK^;y1wkJ!MCN))&I5x)MBNuf(FYJ9-zr
zkS@v@(XDjNbEAc%9a7Oz&@JZ&Uej@z^+%uc!QrbqUX)fbqV2~~TK^J>3PAjhma!$|
zVHf$$K6TdEqB?6TA!UBh2R}a%xC%|$0&sf42c_P~8dYihtiQUrLLHQN`|KbQez`-l
z+_2Wtr@93i<Cjcv4*XiJUm`&&yF3}h2*5sp3uZ;=bEd)pOnZi7aj#zduz%)B9C%=g
z)Z18oa-B6H=rsN2aCg=gMX!n<W!FPNT~=f<k+UaN1ns+qTCqQ~v+5DY=^V;S94FM&
zLF=x87|y-VC^>JLMEfl^1=I%Rwn^$Nwvhg`{mHTMmz1<>Poko`Dy$i=vI}W+UVj>k
zJSwN+Mr;VBZaelW6%WMD?rSptx6zho4&n+%3H_Oqo6X5<Lz4e3kz3=3`Vbdh=Fi_&
z)lp{+YpyA(49xBnzpa@!@gR}?XH5zcHDcMD4HJr$U0b}dZ?K`}5TNP`+1!D1eV^u<
zPjE~!kAnI2zJ>`$jO91?sqB<Xe2}^HT|PJW$;w464a(CD`y#c@61p3tRdK5`zW~l^
z9<%4k>c!(1SnOrjd5NzNAxPvrc!iEw%q+AboSKzgaut&??^VILO1T%8mlt_4mW@Y3
z`vf(6ynXtpp+;f@iCFYcDyeF$3yi!Sf_{_~t^mduSRS|@*G#E9-y*3QviPi^J#OvI
zTr2t*iS@%($L(Q+{CH>a%v-7I<|6*|=Kg62Mmh%>Nf`wK6~|_Sv3#HNWA?U4rWb{{
zZ=QR4qm!U3$tHKNT061E52!omoj$mqV080{0>Xlxgfa|55h(N^lzMv2h?b2j(j!#<
z<7(B*q^CIV{10MN?pUtiyk6axiFJ6R2%evae&<zoSQ|k*IiSc%dj$95rmET%P|FI|
zd+}Sv$@k?gY7xF9q^-F)-Ndws9sZr+;u3W-8MfXFbZ;{4SR>i3CT9o*;+>~Osi%<g
z4RBW-4R|*pOmWUXzQ0@nz2Ym3QMR<cecj#n_sQ!|Q0}*bNV2yr@^C0O*dF>bG5ySq
z^y3?xQ-6v<m9+-Bsz{yp|A+=m?r0@c4F<a111A4UPGjDQ4hyA%gSs;VJ^n*n*W03B
zQX7j5n`r{fT21vME{c88gr~&bL-7G}JP#rHGJ_Pp#19um&#Rw)^tPz7KMbWx28k+}
z;NMk^*o_U!&gG;vG&H2>c~LfH-peoRx&2UPQ;+dzI|~-LHmF=p-0VF=X%_-%RNPwm
zlois+W_2l%^CRNLBC?MISzE~n7D|4Z!0bN4nIf=&cjaaAvjy>}T_IkfeonzWvtf!e
z?WsaM%VXSUKWTgnqYuICf^%>5<pp9wnE6pg`T!+tSBFypIgO7_Hsjwf1<p;%exV8b
zh0C#D;Ov^adI5Spz4xVlc$t5;$Pd0*r$kcWDu1#gIvgUYiXR;_bNi=&w+Bhppzq84
zR?VL^@o_Wt0|Fg)Uz_T8YD?|IGPhxCYrt6eGW>T5Ys;hR_VY;%A!{S{Cgs+8@tW8{
zw%Wu8Mq-QPuij?F2OzXGOl%Va6RV3&MzG;~Z@|4mb|1Qxy1l#p@D;|~^;A!|mBotc
z)`ekf>|Doy`}3FZCCG6Hy9?z`mE;}n*J!40MNdG?aJsWDXsw_9UL!3Ui6*|+A7Xo7
z$%99ygbiuqd;+6ZYWm(ALW%*cnK0usmiVGotZ$E-BPTsN?TaD8u2y!2SQTh}mMmuv
zOS8$F7)8PPRlJM4C8v<ay=MesT^E|XIaIknT)okle;ug-E(4r)b)cgWHY-7LsUmtZ
zZI=fdP9qiPq{*b>k&8@OitZtLl3!dIMCJ}#TSC<z8FNk~gSGGc+6MPlNwv|RH;1j$
z0K--GZRMR;S+||m8BX1Vj{86;zP&SCxiR3U4_gEA_D*Sj>VLt$+T^Y3oq+Y1_?ptI
z?UFBCZIzr8tX?zq19r-7?hjxgdR=1CW78kxHpTZ!XTRrT?7^~hBsIh!wS;>UZyS=G
z0JTL~fbAO!h#F&Ahw1-_c?_n;bqDG@uP`1Qt$Hgnxi1uNDveZcG3Jz$CUc;muO^~}
zIq)V&rh>8h+<PULC!g1jnCOfBoL%>dK+5z-QWLpJ^0fl^gVKG1sc*a(Oa&?e@grw)
z@mwpl7uTlleX%xm2WdyotTo2I6sT^EO`{+1ECS|M?~WneQ75NeF)s65FQ;(H;UY#V
z?BH8tuAlU<76Y}0w-KPi78a;m!uF&FvvMB`pnv8A1Plx|+~-esmd0Bf8+xV26$L9d
zyU(&q6Z(->3ghS0R-s31bgxyPgCM5$mx%SI`%8vwTEppF_EtYA4OoETlOA_}O3NNy
z)4CYsBrccjsa6TQ7pck;lAWDsd9BqLv`!mm-{?Cs&bqPJ5qA;ANgQV^ztMNJPSTFL
zma4Mge5GJ(GD682Dp<F%{MHg{p?HkINpqXGRzwGp7ha@6kr&v2gsj&w2=D}laOzwA
zkQhAKAu~btV~>XYPB?XUNu+wu)Z2~arFH2v5$@Ios}IG_H<s5FiNtIyZyc#^%#}N^
zb)0=IN;r3Ys1F1yMRMS9!;>7iUkAzIpeH%B?N*Y*!&-dmvCa;Hf6K56xSYm!;+4NS
z#aV_Mj(!(;G2T7vzI$MikAn{ko28)Kp3}%!kpbx<@tK=OSe<sCjSeigapYAc(?-S9
zC)k(%2p)TheHGy73~Y3uq;s!A`_b=5cE2i2-v?TqY3GD<$Kqj8GRH0{HJ<1+ehilB
zIGi*m-R9zF8Z?%dOpmvhB0DO5@@Mpi*q#5P{+#Cnd~4Kt^%?z<Dg0N#hp>eI5I$x9
z!u}L}T7Q(mdm#oDs~!cLMpSLEOE-Qv^4^kZBU9IaJq=(_m2DPak15#Gpt0w4t1G?x
zgmWhd_AH>Nhd)hL8?6RG&Ar12Ti#t}JR(VXq2nLmv;SWPpYw#b|3my?H~KHapYwe6
z|3rU!{R{h3^H21r&%dlc@%EBW!{=l8;R*k;{+#ElD1^_H9{d@OxuDS}Li>$v|4&)7
zoL}|i%jb!zC%^yt2lQ3)FN6>0`<lKy&{$o1vP$jQt-uDuKGm6EdIXGT_s9t)(*~!m
z@)*zQFdnOG<8EvHxdmJ&R%Ug2{%qFKbMF=2v!r-bX~ylzU)Y1nQfVEv(9znb@PA|Z
zkEBVaW8DbW$qz?PEtz(<;&QS^4q%PkxYs&VxID&sX+CB(pF5Ry`v0N0M06)={WDii
z^!~|7<a);(+-6p`m@9^R|G3`OOz$l+2RE66TTDNDi#BwVC2};m((wLCnU#L;AAYn=
z<QS3Fw-oNV*#D0(Dr=V*m66Ad-%ffJmDyrs<Q1V87$X1Jp5U*GQ~Tp+4cPp$mkC*G
zLg^32ga^0doJ-vF=8*dN-V$<z2jlFDC+zxAIx{AMLf?3%d9>sXT5lt}z7sN@IWl_o
z_U>6C>g@~YCpO@L+3!hOuyR9S_D*@?{N!ao>boX2<P-Ug;A4^43NEr=m{-TIa-vAW
zWJ9wLNdY4<0DX77E6N>kJebDHy~E{d3)!$N<5(&1d=1sG8^aVkP`Q!*gf_O*&y9pd
z;PL%PS!dN+46KZW=}=iK7TO#4hAW%RGdiiMeYg=%u_-lIYM`Jh0KROG5*MHzHH}qm
zW_<sc`0jqxhgN-K`$1}SctH(LK;ex$LpXlVuc3w@hlSR@)B}FvcN{V|I?qX`DtX$8
zAC|F@2&m0w8Gjo|Aw$_F@^JnZDr;6QCzDVrS#Q@?y~E*r{5`*^L_e9Np!IraaC4o&
zF55|RBD_yp5*oZI-ENfaLt%x!f0#LVy;+vVz+r{*Yrh#W2c>xJ5;QX-3dBWE{^q_L
z1#4W-)x9<B(8~@OiMs^U`;p6^;iMtNS*)6X(@zA<O6@1pFs~8V;I6GyQ`!9u7>x|8
z?l#IO@V2?XU@w3$ng9@bb~iJrYP7$jX)b7ul<nfGhB8{*O&E-;n9JOhuab$)xA+SR
zRB=rpKVIC6u)o<nIXi_C0h!Pn{#@~ksFcI~_)byl0Gu)AdY9?mKin+)$SgzAh$;*>
zUuZD?9%e3&P~MdA2>j!Ax4~)mmpmzXB-_mdbF8}Ax3HV1_3Y-|Y(}!(RGXbVe~F~7
z^9K$#9Tj*cTbLWd#LDqz+5Sk`j)+76=mPY(5*vx@P{m7l!Q|aMXdqOr?WldN)JWbA
znt&mJ__}hXP}xbZ>>00ysGPCu%FkgiWEeVom+uato=brG>~3F;JfEbWE97~<5L0@`
zm{3czAb%F+j?Oa6xK1sGLS)hk_hbraIAn>jffPlIKT;G@K#Wxaj8(LgBgQw;Wao*I
z$4?_hw+cL25UNZIaTqK24X@fz)6q=ux-vaD#!{ij!YEYF2QorEqUasT?$}*2)9;~y
zJX8|BwO|_K&DavP$#jY;LUd$qi$=+yba4%MaUvYTc=Et#R1wxD=q{B0uw2oaJ74WZ
zYxIGY*tr%|tSh`<D!h+B3O+_+H@%XHOw5+q&5}+~(7Wp)<Dqwe&OuzyRysNERU-4N
z7)8ix6g6(;`k=Ko53sfH3dOw?3(0aXM^HLPZ9)cZ?#J|2@B7pN+XR`<JU)x>ULFuH
zf~4+hwQU9tl0W%3Zxdahj}XitNQ}9Hq4N*!lgEmn_0|;UtO_(7kBNF*jUQh5x*7jy
zOzOHzg)`54rHhTO+s~ZbC0r8KN%bLP{$<Q4j1n#x?<UX1z$SH7+T8eIyt^iPnso?O
z;K8@ejoal8wS`SYc!5vCB;B{E%;Q^G5>LJZxXrR=K1YWOEv0u~5{Pg22jctvSw`7?
zwwh(9IF#NoIy@M9YYvrd6hnm?s0dbzz3#qn8Quf)WXg<{A6~p#7+#hXNE_Vj;v&uY
z6q$3By-Ffjp{)xXT%$>D8#Ez{XW0Qo$rVr*$C;6`ohnLb8lqK;+AwA*?BAK^TVEG8
zB`B|{JfLhB74j#GnUX?(0jlQ+KFwG>d=+f<XfpYl#MK(cr04lf4grfHQ-y$EqLarU
z;CQ~}5D>jv0RoyEGvK1kUD;-=-((FdL_oKnnvxp0EXep#xbi*oj4p<<eYi14c!r2B
zWvxac#*E9e^*R7_|GTqb9=)|?GN9M!9JVs7AKpBh%5zgzK*hlsHzbPV%ai*@hX%jS
zx`)biNwAECkO)Mw_`L#xDwfq7VCW__R6YFUY$?_6D+o4Ykjln(q<ck?eO^7Dxl9Ho
zS$26D&oG#Cv7d_Xg28l`L{FEqw|E-P@)kYo%B^o%aw{kGEpsp?A&1Pgdnu}15K{BA
zQNRM`?GA-#7Qp*OM#%`i?+Tagig(q7joMx4)DTtBNjFxpJZ^Tc$IM34m$g5HIHA@s
zwR*XPq9~Z}Li}t8%)(L1_URkm)PjDNAZ3;-P3pOB{Tn^XF6ge@V5RZhTjJdc>eF}|
zntfPH1ap9lUSMfB0%jV|U|fbsTlTuf-z&incX7ddSAJ}s!GT*w&$VE~!vrwP!7q!;
zi4-;G`Z-&X4&3`SQq`JxB0UeSRy?WR3$Lfce7QnhdHmONuY2vjsh~)HIxYO}Y{j<j
z8E`)~??&asCGMA0g6JPqd<t1xlUu+ejxt0lTZ?qNrdX&?s1BRk+jQ5-@3m986M@qG
zHF4>(_^Vixk%$VLLeRX#m}4>j9zzPKJDv;pR3U?M>*x*qN%10huv<)PS@<M(Fig$&
zh|^C-Ir~ayF5zlQ*T-vC-m+_7rKqgq=lSmN`9}LHSjd&3mJ)|J2z0m7+Z_BgEey3f
zRdypG{_UfEH6ke73+CwZ$tMA1Z2}1H1(aUe0@Bo~Ggls38bz20JSU7XOB0Axplp5>
za%=MQ!PY|P;DgVk1IIm4g5Bj;w82D{!JG41R^LEJQ-zUum+!8G;LDC5`01%}2P*!}
zO%<WCqeenZb<|epFk3B5L?TOM<&Xsej-6%v-Dk^E5+2OC!+w9LY>oS8a6ugg=HSJ0
z(CAKOF1-1c4MIA!(Uozun`Qf;XFROA@U#)$spxq_q^#A&hm8{8O?E!jHJUkmmpeAK
z=qG%0g@BTOEMtcQ*l*Hdy^?Y8bX2-Enr>y+MMYom&m1rHhJPBz(Ck0eO0)}>0SO|g
zlgs_D!uda*kH<yQ3#n=aG)m$S7G1W}tNBW5&cQ?YPnKWY?qNi77ogYt5&=Z<OZU&&
zbwl*-Excs5dhk%|f$&#vBjFxmbh-Mo^B07r6at1#tD4E|EHY{IR;CXC$@IAcDIxI(
zB1`m|@Af8v^B&nb7we&fp4WixK07iPYT7RHAd-UnZXQpC&53vaHwg);VqbZ1&-Uwf
znJ{DJF6ca@SF{{{6;w`F+Xc}y{mT?SKokEY?(_z|m9$v3q4JRX8;*Y=+8n{k#g87r
zN-({^%At7@{eYQLB>FxN3JM)c)NqebB_I}j^nYxg+>*l|Z;F4xXk|~5Y!qDZR*&Q~
zrcL2fmu7AZI)1NY$c<DGCcSI406jAJFj94KsO+%&^8)%*SUy0AF;@sCp|IR3R<p2E
z&%y!sW{P?8MDkqbPO~=M!_Q=JH-g~Iq&LT99qxZ%bdViI;!OaixP7SXh><vf{+p|_
zXdwR6B5S4JL)zE};bL?X;;L@8`%}*j4_1RS%Z`StTiHAUXO7cC#G#)f#s^~DYi(e~
zXdazMRPGoK4Q^C`fYn5p_}O&MLzqLft$L!if9DHO|EZoV?9r20Kd%?@2N;HcUf!*J
z?ss@q;EoBnvm$`p0$&LGPB2_hmih9KRM7Js_?0SqovH*(Abt=sqeuZ&jfy3jD@oyB
z2{=asKKC|II!hKYP{kXi?2kNR^_IUCIdH4xFU!@Y(5AxHM=7kDa4!JaJqq?Pb1a!u
zbMT8Sr3u*c*rX{<(2sGPDs}2*SYqPpdC%hWy|6_!$Rz7YA?Vk5_^7!qdkwh40k<Vb
zM4HIlWkO!o;c(dw9XnL<3fS97kk!3MKB|`E;@FslfAT?j;ZpFj_q^K=tR@Xs)JRm|
zo~DQ;3o#jd9-H#3Ko+;xxK*^1tNfQNOfsUxMSxg2beZX$mzc?e>e&cxa(_<qdSc?g
z1|VwqM?|#9Pl|O^p~Noe@UXB|Ma8Uz@B}?@B}+*pYt2&7ODLw}{)!ylw0Ql?%}P(~
znvrEM{S+{AJfpA^g-zc|evM;q0osVQ1FjOgj9%tMrOkV!>BAZmWkM2rK^-+vRnVAo
zI)ik}WTcu~_XR?_&WEVe1Ihb`$@Bq#a_f)i$F+T5)?WQM{i@hjO<WRsPGdDh47wnw
zq#drr_;6UjYE+s9BN2e{5VE08(9cM`BIIs7`4;DC9TJt5n@Ljr-(*T;IoUhhoc*B~
zZm?CgBa1n&e?0VJw*IiS7EATW;5S4K%VuL(n0d0kw<Kb@b)t1O5(lZfPBw`~;vpV6
zrZ!W5I?0cShLK$#WBym*0b%3GcZ#n`UGT2gWM(*K2eq<R2DrN0ScZ9ASJ6xz{6Lha
z?N1LwNHLNbq{63bsDSv;3}|r!xUUA*7CQJ>ENEb%VK#mTcd$9fFadl}>2E?rJXdw|
zCF0*wWBj;<rc8f2VEmZC^rrt1hso^8O@9+xA^(2fs@QzEl962cq}eR%WJ`u#oSQaS
zu1{q5(K0+-whpBMa=>s=9HienF<gfJU>#6w#|UPFG3Q%!&rCfc;1mVJyl=2fVtk1J
ziLy!h&cYIizgkfsFemO}tlp~nQ}!ZaICDEmj7;uhkZUQD!vTaVb*pt$OlQhqlVKoJ
z)xDD4iqAvN_XEOmeeQ4wrfvZdu+7=c!bT%y?;44}GCg6ojPZ4BGu(?~C3FN651FKI
zQc6vUwLW6K8&HO2OpVfoG95BS06(Gp#=k&by`EFQs`y4KR)!YuFxrr@>WzTa8i?;3
z6H49kQ84wLVx^(m_1tKBR{3_=dPnX1(bVk-mmQ|LaAh++DFO@k3fQDW^W+{5I@B79
zALSbOqcq7Aaf_7}Bz_dfgh8a$TCI3QH$t44?BrB3GRlcdP_nZT3R;cq<0IB)mRGdy
z?BY?Y6J-ef_4`KhYQf#VufNuCj^3g)ZWqf;8mrz8#1AmAX&<GoDMsuJZG2CU>myYD
zlC*JqxJ)@hwKSg$4G;pjsw1H8p$u1UbsvK#<oA!v9hG7d9Z)P2vUDXtOO78fQ{MbY
zkO?(EP>fow3h2g|{}P2jGWP>=X*;y_W_)dtvfZ68=25C>wg_mM_%#DZZ6LJ)MxQ%J
znq3gKUZD@*vBD;Hd>60m$JfAW5D%kKZoGR(*j3JE63`8}`%1z?fJd^$4O+XVI8!L%
z{*S^xY&;{@Zm#rpzpUTmU3kn&{GU*D_te4RYPMGmvKtX|r&$W+d+4K}VI>4)_ptOC
z)#k;_tSiP*$k&)^ZTE|D^Li&-#(Z~~>-UDz+sA|m-fXo(h`t(nF1R7YD66u#fGKKB
z{!$~5`U;!AbXq@ZKZs+6DugMW(!0&uMRy_ELV}gMKRtpi<538<55Fsg(!fP{im;|8
za1Y1~)%YhUS;nzima!^S1VuGAx@j2?@%kdx7CJ6{a*qnkJbLHK+*VH>@{rv<2@1*W
z4-U!r6iH}KbIGT3n)CA=|EbsU&+%KpX%Z*$4%~(5#hbKlJMExiYUZ3H-r?^N?>O*0
z^s4W6LQTa<7#FWY0LZnX*y9vyyIHnH&c)EQreTxvfjcw1V205vKZOy>^&TEvUsm0V
z5!W)y1fwTQheGiU!h906E38Izf$=bT0dxghr=)B-LY&0_CB8Z=R}+^Axw~@lqEdVb
z&N1`Z`JF$37Y~k%n{ATuOc(sI{Y16Cv9gxCPk{A8SFkq1V|_Fxo~{W`P78O#kav_Z
zZy?`OS973&y7vQf;|`_jVLu!;R&5EvE&}m2HId2h2-h&<M=8)K1+GDr_!j*{H|M@C
zbOpaY<n~o<>G6FEh|-MD1JTSp{t5<;V1R`aDHm~K!>5#p?peIx9~tjT84tY<<kZg0
ztXvO`#Jie|)Ew|dVo_}T(9@Bif9y)5EPP9Jg-l-~>W0NEVO2D0PgG0T?CrigP-Axa
zDga>ONj~sgBhT;iEckdXzwCkWkD)fA%!?bX3>XI}nMXB!d^h595(~V%NV<|GFW{uN
z4`Xu6&B3j?#CmxtYs;ML%^RVV%DT|sF|Ztg)$2mC25{yhXuu-Cw2q-wRwj?^t`fNC
z_!$r=MCtU0mujSUKM(lS0(S=B&tlHJvGiKjcJGX`hBc6r87?XBUa2%wT1^$ok-Ym?
zHMcdu0HBgJ$-6GCwen*6DLM@IyDDQA(7>Z7tS_V&Sy)SKG=X(7j3qaCZ<nN}zYT)e
zT`WvfML7eHRpYl%zzxw*e*9{g&`iiB`YJ<S8@pf7A`b}>YIF3b`!2O5SCXA!i5fFI
zi2or;^Dni{wUD*sfH79a#$%9L571M~-7fMOa+M5jF(0H^E60QMu~H!qauf7gwR#e{
zKV{IWNOsVo!j{a5_jt&x=P^1@BO$ja6d>W8nS594FjT|=$cE9v1cd%YB_mtYK*vjH
z0Y~t}2)^o7o4kT|1O<@#nEEb~_I|7Sc>^7Wd#McWIIs7K(L7`v4Mew|7j0#r`Vgpm
z#a%1_%ps>|-y!=0%r1sucF~U6MH^-p#N3t`y@c#~k-qQ`9M$o`z<y+&-NQnIJH^@~
z?F>6l)+lW_5gQgRBO-%1dgFplGUwzV77>TRYv{JNeTwsQSSvNRiw|K960O9lK*O2*
zvE;zmoKi8QxO8-DDD7Mvt5v>q?n1t*{9cZ0RYRh~@Ft65cymu%uiK5CM4bfMsO~c2
zQq+r548NkiQ{`K|>XIvw%v8OqyRjPiG?I<^#j#g2N#LV9t{XLymy=sHT*ZTQFZx|Y
zsqSD^O^}AXI3c<l>J-vQp3GMnW1>_ZsGMsPd8+D;zv0iUR_n3){Aa;EK1U5ztL~vh
z_ft=q^)HIhlu6|$Fz=6i{QMDWkJtiPwE)lo=4`|`(?XWS-a_<<Y`^vnlZ}p=P|?Af
zgI`CGA5%D|VK#l?vKAvDqsdNdP`H+?5l=C*Z2jdpGMV66bv49+-5HI<dcclB=KNQZ
zNzJ*M?{L{x$Xjaj0GpUdb!+pb^7dW19Dgim{2<Sv>UG`~-1zX%?<B=|Xce`Dt6w+f
zxV%D8KjuBV4rBO#ZnpEMOKXU-ey@`S_L|bQ#6+2<<XZ1gK%;<B%l?LRuRfia#fyG?
zhzRD(23RKbjI2CCz(j?>;W8q<fTLcNVhO&g=AHJ`tj2b!0j(xIM2HYwy#}Ex9>2Nz
z$WQNmvE`CK@d}S34C!5!7q^VK>Cl#5@8viytpoOn1CKX<(YyanA)oX|>Nk=%FeZ0X
zwx7zTMKw8>ue9g^N3Z$>uVTSSNOUgMbN7U7xh!g&Ky5JO>UFU-;#Ki*W2Ab`w9iRg
zgZ!*#o`=(S<tBxEQ_CXNo2T_BTY0`o0tPi@xTrkyP(Dp*LL^+9`$HPabyf`mjF|fK
zjFnHkLS`#B0;$d&N0OS4tiGhCqlKICB&gy6<Mu}0ilY7Aj<wgtBkvczeOLQqq?AMn
zAhdVw0i*ncUsXutk=xUxmge%6dilz8Ddmz9-&GMUmqP!p3!U(NehXci^5o5Y5$mBl
zdO>{Gy*vzyR^M;%TM;`0_Z>Iz)`9K?yw=1{k=N~;cwKP+*@^*4xe3va-3x!cO^-`*
z_@sb)CQ11wi0~2OyxiKP3Sf<feqdBTWA4$Xx8V&u;KD!Qy1xvgv64BcEw1QpH|^8R
z)Hv=g*%0k-9g4qqZ~dWiAh_T3@2^R8Pp=4BCu_c*8cRsq_D*c~)iS1%;g1+6N|xMu
zZ!DMkip1He-p4;xeM#m&v-oRHmhUB*d09F(UQ`9#2h@xS>tT1a7DyEsffPI<f8hDt
z$cAn+JD^z@sl?O0Ax2IEr|)pTOeLN?q3h8v|7`jAp)tl>*+&QBJ8HOAl_z{@sI!}P
zXvE#3$e^%mS^O$=MQ>o-EwzeXxq2x!D892Oc9}Qc6{3mBoRovt3RwbhrjRlP)^WM-
z_-o%m`zZ5q3d0vqOlt72`11kOi#W42Mt_S33@1VaFtH9!ah~Nv$Z83vCi{(LXAyfr
zL^$LIE=JfKZ@+icFs+O;=5B^5jH)n_NBPCSRN9#0yr`<BrR`=ave;O5*m)KKC4?V}
zUAx${l2Vy?75Y^)`sj(mf0zq=7=6<_m>B#~{AdSc`f3V+Q~-Z$G$*2`d6|WTUE3@a
zN6cTS?4`tp>F;~}i1_yqO(HSHd3@u6?)Z!Z`i;%#pPM7qe>LI~`T{4@224Ha&~!S)
z8@v4Ez54M{9<>bM@yiavM9oDa#m7Z*hppWbD7D$yNE)FGw&CaI$Zaotmnw4K|5)&S
zy#6lr=Dz=gG|I|Q2zLtr{sxd5!hRj?d4P1YnDFBSJ?<|ZpEHfZ?oq(0QIgD$%6gl~
zki->H0$LLfjKn*<hxLS*`X(cFgWDA6k_`voxSsUMWSzsiDc-X@Kf?10^nyP3_Y@yh
z6XSX!Z%!Xm*_z!iN{_OM&0eC!d^6_md1@P=P&|Irgy`Sgzwl07|5yKRkZYPIqMN=M
z54<7uu#9@s-ecPBrZv?3|JeH$__(S%|1<ZdZJHKR-UU%_p=pz*lVm1onx;+ZWHM=n
z&P;~Pqzx@~n9L&?IxptVB$I+zsO%CWyItK?c6Ak3T~T+HT_3Q@Dg_19^?|yIpn{7E
zwIC1qD<C@m@9&&@@7y~{+JgS~zn}l#X;1Dwuitt9&hK^3oh{ejzavg?aSz(i(A=ZG
zx!7v2{KC*|e#hK3h|bSl<C`rP=dKCPmdkV3glEgw`sUPTzx;x4Hb3c`y|U+RyClA!
zedmeFH)qRZZ(H#>vLBy=sr8|ww%MWJ+jiN$^F-^*v*qx>+&6u5`&Rj8$2x}Qu2BHJ
zd2ZLh?9deha|d<|%(=&04}yNWren_CGk0K{>vOQUWSx(=R(!p9x>tV1zx4&6!QVH2
zHd2}MtsQe+{Pm+hS+eWqE_@8_#rnn@NZN?E({Xn`Y*LRk!h%kWtEcmB*WB-pK2a|}
z>bm#`L-KRT9lZI%ectQuJ%l`vXUdPb=3Z`n`RFrC<nJeE-^DNluF98j;(Hez`wrFh
zp?hrV%A-H4cfGCs=wtQX%KdXV>9nHplSf-$ocmv`Pd2*mN5X5CHoCw6#Wx~xWB)I4
zO7CSZr91pcrS+wwl_l~^xIN(-0=V)$@*|6byvGdk+I>=^`<pt<Iedz(|78OBG68%U
z0Jq`9>m6sG5TK=w9H3FjDnO%#9N?d7c%pGWg+4sB0k)3o^^edJHxI3E?uxY?HFN!@
zH+U=e`L<rWcBt`i)9E0_w-(p#XgquYUK{WD>(goOo?vcmeX{X}r+_9~Uu=DH?*2JC
zaMg+nQSRdT8t>SxoH*~{Rj~awua(^jRuKco>%tcnU3WnkOcyVlbz&$te3ja1sex;D
ztM~A|t6X;hS5{5|0`1N7AzXj&v%ow;(oTz4tp7jy0-5{j;ot5k+~&ILY1HEQgsDGV
zvuF8a9D2ajG5E9V1c<}3$_a58i`;@ZjCIZt#~*i{zm_@bdfgA_O;8}+)j+?Xn!ZTm
zfB3gc8vB2X(L8kYiDf?d(Sf<gsW1M7Nf+2YEVJPM2Ckp`+H08whab7bJPQs#E^|zE
z_@(uYH~a<m?8C>J4u6dgxODXKCH|Xt)g9lc5!<y7@GB2KIrlqkp+nC!dVgH`O0h$J
z<Ysjh#~_V|9|Jlt_uFw?e02zuOqV$jRg2lR`~(Qcyq)rehRvBHURr1n?l1K<y1!9v
z&NcWX$I&{#JY#W~mK}Ab4!gb;=GAo^rnaZfUiTt>{Pk5-bEY2npax{Uxtg=rJ?n4%
zn(M)1t`$Exm1<7ldW**XN6jF0n#4W3ZP#3JZ64c9aW1^JJa_HdD{ce|9{Al>Txjtr
zP_UJI@xh+FYwm~ma!qm8x3-MW3tWpuzs_|hHXZiGv+-vD6cCQWt=-{m{T|F1kZWk`
zcN*Q_@y*58_5gI=JNJ8^{QQ9Yi`It$E$(f7WvKNf6}R;J);15xFAcSRb7<>>jeq_K
znIg-tG=BDtL-NZ*zj@eO`G$4>8>-w>e4TX;xNf@e+{VvdcpjokzjB%P$0ewTwm;Gl
znp4{!!BJxi(g?<juUH#Cb&8Q1>O(J0x^6DN;5z)|QldwxYy7P*_*$P+m-yu3+UA{&
zpIzDIx{D4AyN>=u^31*9x%fGE;~j7Bln}J*=D+4oPv_4)@>fnexSmG$&pmU`p$wgv
z;QI$Hk;9MtP9NmiUeCoZ?7{_nUio{VKlcK-{K#tqKaXUb-RArg@L&GF+$|^CBC4oR
zpMRn!G-6gqf!mx5(6T<@ok`1r4TFf#7OWSqr?_C-VJ|s=wHKx(cWf0b!88P+(SIi1
z4g@mH{Ww+vMgqdh0~2|#Kh9uM=Q{j=1h%gR-?YB0E*X-qUE2&X$%WgFy%!1}EBZNN
zr9)@0Q)tz@?!;MT_PKKfZoG%6WU|`3V|UNuOZuLzPpSnIH95PxhxY(#e8NnPH=K`c
zvZfj!>5=c)B>q_ITkET#qi3({p}x$6^(YPi+ZR#i;0cRY&$HAyNV~<cXJK<#Q={vG
z1h|aoGGI=g80KmV%t@+A{@8mK06K|^UQ5x}@^Z^aVr}7(!^hS%{@MAk7za)AoyWa5
zzjvR6M6Q1WvgP_N@GHK#N4)Y0cG4=HcInOARtz<|AJu0&VOt>5D*dpv@|Ds*^U3aN
z{Q)Kxit@HT^5F4f@5Z(=H1`|t929@F>HX$mOsLI6mHTM_!rnEs^|{j1wDGmRd~6A7
zOWWk}LD%(PqK#r;Hoi7a4Lr#n%z2;VXIAbl-G|SM#LomfghjEsb0K*HRiob5T3p-X
zo4vZ(H#^fY>*|?JZF4<{i(On}1GA|eAO_;IGgsh|pPd=Pqc}U`!=pSq6U5`%*_rU%
zy+d<r*SaFO({VrU_1||dde!<f$)DzMea;w^R*&C3H23%rzQxhwpF1`%TesFX_Z8pV
zJ#)BC?wdn%V?#q|>T2IyFz5rVq0Ehq`Q{*w%3q1ruk^JZb^YccSLN=x9X;OGy9r9i
z@qX)=Yd*35z4#CwewBMF_qy))yh883t!aD+>G0F&S^w7Oh3SK9ZaY52ST|HT3ISr>
z+%H<6@!!1d2V1{aIBV<g)z5d{jVjf*f`qzHe(3nBtuGgEYdrih<fq`dANl9LMH~Mr
z|IO2NzS;EJW~f~Ja}VPq3507pP{+CjYsmGYzj@R<_q>1W!`{aJUx5~K&DH$?H&Jc&
z-hAN?dg>gFZ~Z)KTsYq~+dg-o&Uf=Qb)cM%pJRYyuGzM^R^QyO5DbL6vf^7?S6nT>
zy!DyJ!^=@YV87pO{hoUH+>dU2y7W$$_(qyb?~@^Xq@me6_oJcKhmIbXX2)L9y5`#?
z!b8&tN3Ze$Q7V;tsjF_J4>=wCG-CBWK7#J~C?)N@TkD=<8-R|g^}`e|UPBE+V@iq<
zeuxHww;%EQwD{ulg;mvt`sRLoeB}|neLhT&)|Y%+f8KcbY!u*|`?*(s)-_vVbNBz|
zTezAR)+t}EKlT#IPc1xxZ|*0))+hWoU$GXSb#Totn{(qL-=!Yh<?ET<&oj;Mglenr
zp{7+Z$uVQ7d-;6%G^*~~`gG&rkK@I&bzS3){M77cm-WEJ@l%jt(5!%6wTucw`ndIn
zG?u=bxBYeq^T#K@=#}-ujF8vUtn=bSC-j-VS()y~@@@USzj5Ft%vM_asHUe5RfQeG
zmsetXq6Wn?QE2HjbXsGNt+WJHDg2wa6^B5N%kp<x!<dn@P_{m;p3cW?4Qg~;_IKhY
zG?3%e+R52f-nlPZS1svHpyP%a#+T~nuVU2WPrpC)z@K{HPd)JeSr6ENgwLlo0~fEx
z0|G95QI@eCIHE6phYsN$PFAVB1>4eFV1a_``q|y|Bv(Po9d$_f?4d)4kf73m-#PH(
z^Vp~KQ@-?QB?xyV+#$GI?|roL09?KJt)L$PS}uNupTcaCT(@Lt9m!?cGVyDmANf!9
z7rS=)n&%JXzT9D(X#M^7KR)%<8@}@9moMM>>_30^A3pis4;Ajd<9F{|*L}%v{-f)|
zKYQ-#haBhB-GA}DtKYTc@0Oi;=)aDy|JTy;!y7MnU3TxSBU``ssg}pv-x_+5J*~X*
zFZ-_g+84H5>Kps!x1RafZ{7aR8$B;cZwYRD|819jaK~T1<L`U^*Il1|c+INHufF~D
zm1jK_dH2A1U;4;(eewP0t5;q>{KJbj9Jy)mmv^51<2S8%<S}P&gLmoLEAIKuKaKy@
z-~4pui3c`kZvM}}N7K7s_(kI2C+a^}Zfd*mA3uHHlRqlHao4}ky)D1}Gsz+O*QZA}
z?fJJqJNo+f{p7`4&Pe^>FaG*HZ}{_L-xzIv^z9#*J?)D>@1J!2t-bN~@aNAx68cFc
z2)7#U?vbBVZh_kYmkj)*^7j2dsr+v9!Lhxj&Xgq^Tefsb-HL|g^^K>Ww$jFAX-VC(
zrOWGAG@Q1wkz{7C>UT@~+xq`%VDr`A{O#SJ`S2s3IkxYf-CLeJ<GIT}bi*a@_|G?8
z`0-mlw(KF>zQbpJ;YP>Wd*8frw7CBZh2Q_nj}Luh=?~vieC|C*kEY)9(?8q!g=g;j
z`=gEj@qv|Va~ol^^48*|Km6$JS3G>vOH(74ZNDXRpX0U%*2}lw|CY<Y_^TC<-M90v
zKJuTJ#lE_9qNU~R8yoIe-?Qd*ZLefD`p-J8Clpp25}$9lYO3uk_gsJD#=<*3@Z=Z&
zVOR2k+wya}?)l(l>HE)r@*NMZUHZ4*yK&R$FXV5%YSp<%KXiV5dh;86(?jb&bJy)%
zpIUk0mP<eOP+<70@7?#ST-)R?Z}`h%F81N_+2se`S})!I_LnPPIC4B4{LpVc_|g}i
zFJFD%kG5U%#xGv}tDz6X@7n83UUp?|=Q%pvp~<LoQ}<9*olF#%!$E$B=3~sc+3U__
z@`Z$|h7v`0E}kd^3%PuvP)sFM0Nd;}l5)_F4!64ytA+)70((-~cy3yCbO%B++1O+u
zmrWgv7E`&bW0O0S$VBs#xk4hcXV5?FfmK|$yC3Njh2c^$R4gQ-8EcIlTfCvf)ulwX
zn2M&o*?CC-Q{=CS>+z0e4`g%GSq&W8Ihu{-@-xx#bi!1Gv%>^`kvf=?vlF%tZHcOh
zp=dUq)*Fca_RnZl@n-VO(cwK|DJO)FwgSFq3cX?UU#A=J{E3X#Gn{)PI#~O4IGmkb
zo4PmmY;pCw2RwtR#`7*dy5nu@5naa=#w`B3Eq<ABxG7#HO9lOhr1TpUkLq6;qT@Os
z@FhzWwiKAO9&S0@3b@k{w+ikoxO3sohr1B&jc^yit%X|$*9^A-ZX;Y9TnAiT-72;O
zaF+t^G7eK=4S23ZTqE3>aCE=fYB;*0;|*|Y;4X%1f?E&Q0@n&>hiiwct5e`Q0CyE&
zDyS>LR8UuiosRf3;Le6S5AFiE*Td1BG@IeN;Woi_!O_VzC!7P0p-xNdM4KD&ehwU6
z9kUE!EAc!N?mW09aP<f~9nZ7jB)Da$2ldk#aOc9&PE?Pu)9^eC&IY#>eroqBxC`N4
z2X_J7`EaY@Fsg8?kXGU45)2v#(PvEb8T`~ff<g5m*i=s{lVF^Wyabc_k=jh-!|D`f
z18k~i9pb6}qR$8>^_e!lc&GZGg(tP^Ts*10=hu;21-J?ya~dCpzPBMvLYNFE=8PDJ
z<?z!utc0WSJp<1(;m(FT2ktz$)o?VvG<RsMX>5QmYVnu9h@$i#*1IXb25BIXv&V=Z
zNkrqL*^-)w4;FG6Z??ab#8`J4@jDYmJwH%n3>Y&J52X$!^rHCF(PgCP$kY-EPhd+x
zuTOWNe{U-9>~RkyVuW`+wQ0$3O1~x0KT}MErlWZvVg0ph!CX~HC(G|VNq%RwfA<tp
z#YF86VS>Lo&|ipR1L$#kfO)kBbz1sgYiV_daaL<8-WG&s>YxSUyWPA}q9Kk=M*k0{
z(naie)}JYVSD-(3)n<`-(QYuM-$d!14kt&-rYczqa8}F5erlk8W1cu2M*R@4&!>6a
zV8HCG&ZouZpCz-?X@)<T%BIvwKL$ewIIlf5({Elp%{6R7dKX*Q8<vRCGEsu5|9KWm
z<&b0^e9LUXdhT+M9R!8Z-BqPA2r{~TtUOs8%Gd$vThd$DPi!BQJ7l|jjCD)DVLy<+
zD}9~aXN$<kZ9kKqXP=S3$9^R3lZS0zk}}eE$;<vidRThM_CedHZRgsawZ-Ibv%j?6
zCOu~BWLfz^TdVw0mXJRv#iW0eVzNVell)2Px3<^W{>yefTQ3hwKaz6NyVx(;R(6f;
zpQMa@we(STSW2;vv4~VJeMtVk^h4Wcq>tJ@!Tua&9c06{Go{bjM&&!Cm)O7CWa(yk
zjr2w7-SSoP!?uF_f^9^KOV>+l<R7wsV4d<qvR|@E&)D85e}G*feL+4)`Vl)~y8*Qv
zlTMefvxTMi**?zdq-op7q@UUTQa;-@&RV1ovT@trNgtMPvyIx$k&^P`>|yB<+vnIa
z+n-D4OP`R&q{rBQ+6I^;zgzwSE7{iBy5(m18|+T@N%?j1A=_JQU$_0W?bp&yd0PIO
z<Yre%XWRaRy-QBX%jGMi4(Sg0R@N_lTN-9-<ty3W+P)(Fll*q+ALXygU$kwvMQ!`!
zTctcZL%vap$QR3Rvdyvms8Nh{$#0jVQl0#F>`dE$bSE2T1!+q9xpcF1f$e4V<89Jq
z?EP{<I!Aspdyj3o^f7s(ZIc{edu*R%huF*L)1~r%$Y<G}kl%tn39u_|*RjjxyX2(p
zfHWXo%YGt_NdJ!h`+JoBXY8}m0o!A8i~NLi8~cWQyF6`sO6p=`(sAhq>9g!j@?~ty
z)+GN>eq5^9{!(g_1GbmIe_StrUcN>8PkC0l8o9n^d$asg_AfS%+#;>Cy-$9YB{5&V
zhPm+x>3M0L{G#-<?VYyw+ummTq;!|`uk!n(Bht9^U(!vs7o|6%_imQHExT+xq?A;U
zer>x>{)qG|oF~0a%E|YzZPFp>yVCpQ9`+yXF6mzB-Rvv2qqf(}_p<ZkHtAoGw#BxU
z?O{FgSEP4K@5L<IZF`gSXDrRON@?4)^j-D|%(M=C17VLX%06LxMtaWHYx}-Dh0(lK
zemnaH^J2umD?cWs<saKVVRP6%#w6tYwA3e$us!m>$sdw_&91h6RbFTNrL<n&D!+@J
zD=W75$ZO?;w(qlTa!@+own=K0?vqB?A^8&dVrhwOrSuJ3lkGv<uWdc-Z=_A~x8z6V
zcSs3&R{phgOgajJXPtB<=H5Zu8vx@w@@o00+{bR0&X?aRJuJV|b`{IoX7OIMZI-@m
z`&ZkI(zn@-wslwmf6i9QOXO>$8*TSWam<V_$RB1e+HR3=XGhsrq|4>ywy!ZKd#{vc
zH%dRoEcr6~y)9u&+D7EPa@uyAe4S*XSL;}lg?_DLjv9YUjel*8e@Tu1q8k6jHU1qn
z{*D@dSB-yjjUQCGrT*(`{F`e0Bw(reJ$BFImAm0~-1~S%fn#vDYGJqFX~MVNfq_K2
z7_}nY`SIPLN07`T3Ys5p-7rk?J%FD~M~ex1;RL`Iw|m&H?;JH1*Ssgp4<=3r(7gzu
zvv7Wm0Qp1nTPTZHQ-7`eKeYV|ly7P;vEpEGt^EuBIy9pe6B$oAmdFzqZmqXt3-OQG
zx04_^7f9mhadXOdk!bV&ZP2eKa?e_r=Cj!(NtWyCmMmGiblI}{`sK?T8dj`Wx$?Br
zPUrHTlg0xMvA8gL;Oq{_elBOEiyTPSNXtTj!}4Q0;I4!_1a~(a@vw)8kA2Mm2nfL7
zC*ddKSBKvc{6qv7A}*_MSb6%YvsYiJG<Wpu2ws^#bnD%ZLAYuB7Rpa`*MyJ@=BMaY
zXPn9Emn~n~uw+HuO8GSDbXy|@&-*O|-<)Wn_>+~->o0_)i`H*h?x&SX_NSFele-LI
zUbraS<!}_|(w<xJbZGAz@O<D};qHF(Pb;^;>Hfu@d8A=lx-mRW>!C9+cF>BP&;d2^
zgb{KX6Y*|}?+FC+nK)Q7GlpC^z6!t;zlrBJXSSBF$5%7g#`_LtYS6Q}{+j|K-jd(S
zUvXSe<*tVFW>%O_2UC5!IXv*6=Jjjkmmz2Jr7|fKl!fwJD#S~v{xPNR2|ys01}|dl
z4<`I3&_n&I)k-z5{zl99bhhl!k{wveaC`8s$65BzH`eTz&A<g`{jAcgxw7^=g6ExZ
zFTy!CyItwjL^cukr{V%F>Y(}4(Os3_32w>~&8+;K!S5M~O#SK2rixlubACqfr+mna
z<nvwvn*;8`Oum?NbObOpA@$2;Crq>4i0=;UIp|8L*3rcL*Yj)fHSFBHcoS$|7b8Cy
zGk|xG$IP<@?STB4*RMM3ENw9IZ{gW7`c^rI5pTe^&L$(iGq8F7>W2IV{4OtlB%u;N
zoht55#ELnC?XSsitvqUKiPz+<<_0(*AL8)Atp}s3I-M)T&GDA}wVg}wtMZ;rfxT)m
zUem#*c!9raYG|3?hic~c+iUzs%r!f;cd;+<-FaF4@`e>FPdmMl?+c4$H_|U%Jh{GJ
z=}GH#5l}q%_RP;JLAbp3JcQ>F?fptTb$6@jT@Rxt<t5ktiJw(&`RAWiPP-jz`;$Mb
z#Nb{JKZU&-cNy|GA@8fn^M|Be`QKR9A5zcSyicIN?}2+W+)lW~#@M+9Iv`!2W1vS8
z8o6_&Y!UKX_rMH^T9L|#1~3w{m6E!AtP0(PZ-H?pNN?rMCUZstpb=j#7ESAsMuheP
z`gk~*1gbC>W=aJ3LbHPP4wO<Xq+%8#8u}-HDP2r0lAYvN;b<zoSTyjJoA0QJxH}q~
zOvGzj=-jNwFVJnMC+e@|ugxhM;WXl_`OPU&KhzCdPeM~5nc7aTkY9@kNE->I*F>Xy
zYrI+`;Dh|nlAm;l=ARk9S#-F?Yp!KA2lQ#)tf{&dd{}3}e=;!xrg)h_IcD<LL6l(i
zcU$~2tAz(k08@UM!KT6Dhp~gj55~mem!aEo|GW}}yS@MaygOtnqg+$wt?+O3{Jiq%
zfvWo{{1*;Z{S@b`@tf1Xw<a!bf@MzkYTmyDnAOq7{G*BBD#RvJQwdDLd6N|SQY{wh
z=6pI;>~RbIt43A;Z}9c0XRM~z$!AM)((h{UIs-dFU|3^OpUt#h1hhS=;-q`TZLTiE
zdYiw{ObKbei<M-k)Omh~gXl`FXcI)NA1!b=pU48V76(1D(J!XtrusvjaS+6OO#^_h
z21=RCjL`_Teptr3(0``+x|EpbOV3?af3E#fd0G9+^T-Cr5`P%+kWpEFXPpI0n-%Ar
zbJmU>JGgZX0#<P2n{(>%@0|Lx5Q*p&E8sZ`LG|^Nh2AM6et4XNAWDUw2&CsZ=TOv&
z9cS_1GO{eHsSnndrGB^8_@g!cD+z-2H}?F`E32NH?+%&5k1P<sP@dNscGIt_<#(9M
zC3yAlr=LB!d+HR@oC=)9(!2q6G{;S%ZVx^4+MTjU{vlKN7}|8IWjtldcdB_lV#@Pk
zO<CW9pJqzH;e^5#T#G+dP86`d_%jsN#G|$G-6CF(T`a$U@%)-N4}yx_sX{S42@@GJ
z!!fTuqH+d2$nT7$?vAEo<~^3$1Nve<zA`1O;zONXu_BaeJh3ZVusI9dSZy(tQvFra
zqh=7jWO7-5qBxn06LFz>O!y0!mSb*9v?*S&M@DTfU3ac-BWU3_P&DT|YMyoAL(aW)
zU2l7}YW&TDKRRk6;r&(f6O~uiS>1~@VL#LS_tu1)^F4*Q`Oq;xO#9E~gP;zpql0nu
z7X!IsDmk-Q@6OBLW6d8<Wb#6&0ny8XI&N$EpvL_qqu>LflhBJ7js{ut6ZM*l9e`bg
zLG$Yqq`G7*-EhkJt4rnt`LWxH^7T^Z)!kYis0D}{PSnsNA9$joXs-T)c!%qOI|BDD
zxaJQ%Q8@&sr+N0)>N|x!q{XohBQ2bsPJiB{g$?0(`>H1^Z$0hAE`Iun;}^@nL(A8+
zNd5+dKYfz27lZw3!+TK9*WhR%w|Mp57sCp9jz<5C=Ht*M0X3z^qp<_}pd;SQ4@4G-
z7xEeqkKsglp3KGxdmb*&sfpLw7|83i@{wR9m*Y%OEfb?x2G351p59X~7NW7DULij?
z)96G(hpT6CcI)Y_?IRY4(x83|wqJ*1vM(X>xHK-%uYu-)K^DxfmtXs=Sr41sgSj+z
zyG7T}N%D7V`HelOb^+Fu=b+un!07-E`rp+5(P_R-m<qM#H<7#cb5A4E)P&EM)bN8#
z*+rK4r3~Dy@BAk#9W^dp<4<b-D{I2d`Gyb||C=W(-}&n&E7!v{yz|M*gYY-OeeE4j
zR{G&a|4O(Y<2eII%>u>+f({l7z?ep-E!tkBHn;#odso}Vrrh)Ja}TUy)lxp6D->bo
zmWUQhg@g&v=7V>Aa{Yy70G9qd!yF^t|M9G2m3!fitPsxpu7{oIN%<-Mc09?QDDA6>
zd#4GOUdF4*zgSvo-&dQDRnmV1cj1QD24~Mkk<WoTz+Qb`U2a?;?7a(wQ5zmuB>Ys{
z_sU7~Z?GS$d>G|Cgy$`qd$H|UMQIoQ9om!PCQa{p+J&Bn7D#s`^3#m0;)kw)J34Mc
z5cB7*H9aX9fIS!79Ts0=)$%AmN&h&-ZYVKo;&uF}<JSdgGILF9@^5yJB=Xn}1=i=*
z;pWuy-{<8Q_}xG?C#!%pzq3m#U#~w&I%w|!B|m)by7fVaylmz2b6+>V9{;C8&VVHV
z!~hV@okQY2wiHj26r2fR1|8%%8&9$mI15iY2y_nK=xEYvyuBXJ2Kb4OfF(9U7>nXb
z8uoEOq5BD9h&@qrR-N;U%D2vb?QRnJk7zLN{sUp1tRDIEeo?s{?quoo_&nNG9sjOC
zI9iyup3L!BZxBz{Ot8h54tjUqdUbYUgG!Y1(BUQGo^0H-H}T}GdcGk#9*ZZE_E5WJ
zzmlPsTG_B-)A<*~;@x}OFH9swK7YtPDBi4p@A~&&R20p%eCZdJEZk4;6=Bcb^NY&)
zcz?*0Mo)XP=Wmhc-!(X2y{lTr$?}~n{-Q4|4D0=<_xn-bljZ;KjQ`Oo)aS>j_XTkM
z=&Qej+lan8@_FI*!=FIh$KfdK%A>!i%)$+s(&%YV_B?<*cGQQ`^=j}>mgiLB-?2zt
zmZ8p#sOzb~`0q;NKZW`{fj++<?q89%0sUp@x4|lt{=Znz1XS8GGOvH&2Rd$+j}}x-
zyX0XdwHPh1jt>4*6zk%H@7Ctyl^u(?p_b#7GMpZNi}rrEDXiX<_aRfbp2z$=w4n;i
z9Db_rJ*~$pN8s*+TPV+}jmIk;a0|uhVOK5?e=EZ3yN*{La0++prsI_tx4<E+qxX1a
zHT*qrV{m$!hfL`ytOx1!xI4R#SBl7|`;Dh5zaDlg((3Q4O)x0zrW(JVj-IPKtNF~~
zs}?F(YnM6QALD%z_4^iJA8`mbi9UH(&+*FLsM{gLJ%%Skm;$G#xfNmhJ3SfF>;6ON
zAN}3(H09UBCrxP|+icAjG{Mx<>(9ruy6XP_8_y2ZPhW`U^-HIboK^8L(RRUTJh;mp
z+HCCNHR*vB$SBPqcP;cc;2~b$&uKTe?)Ti(&dmIyQU<>1B6BC4&PnBQY}F{fCcf6%
zX&!v7epREIv6c(lhc6DU*W0hr3(FfXJnP){^VS5{>Ji$rw!Izh-MO?$<Xs!T$<6ip
z27O(vxd3QwUyU&kl9=p)HU~nJg;e&y{6wZYZXQKtQrQVT$mwuvlBZy_IBAeidNj!!
z{5a+-PW)O$Z$=vP3);8n`Cey-+f^#&xaF1Qkg5qlZT~<)LLxP8xWQE^wH;*2ORu&0
zp(L>8KM4c#jpI*Mj{p6S{~&kkQ%_Znz#W1kSPGu|;BLeFAL6bDj48OZ25SUQ*79`a
z>&;fzSQGZV7Jo-gI&;345J&w7eKIMMb*bd2mjX>c*pCW=U6Z=iNHKM>qmcvla5YKh
zfi%+63(gOo2tMmH<h>)LGEnJgbFMHmiW6rwl3xL~Dj$XTb0DQ2AORs%>oZ!Z)%cof
z>hT?JbAPyVSv6-qAPxqkCZjb8;ur2I4Zd0bMhKKnv1w8K5!e)<pm}_hIgR-p{il^D
z>;XvRs|5t2nFQ<)%<;fYrHrNLs`6}ev#TYLJ(OvF(2;fi6Xzmh^CaIUd7zCcHS$!e
zeauq!)|&WWjenIe%a>3h>FntK5A%;ILg5roJU+~G*v#!uSMGwl1@2RD1-N&@J^6#D
zD}jfeuH262O^=B89y}j=7=E}8EuPZ+Pj#zMM-b3B{b+0-4D+c!fkU;KXyJe^bU`;5
zKS-Q3`(>f$Ga|GXk}vD|t5B<{F#cwJ3MP<<>+xcJ(c03I_PDKn9Rjqrp<*16O*UG3
z96c@b#cD5wi$H*%y1cx83$J#r58&}ZY;uNf#Z&<HJ4^m>j;AzIp#40+lE{dq@<o0!
zB19cxrYQcZ_rJbpS&R*lV)(^hR-XR$kN+U|@^61xc?#}PID++UJnJubrgGc)!aa%i
zq1QcAxgAaqdo|B8@@?VwcvM>m`vSs4{Uy4)g2CK}gkAVq#tY}?{;Bnu$}O6!-&lRu
z!(Pqv0l;}kb9Z(F)*tA4Ha}BohFc9suo#|$+fc?<;l@qxdf2OZ29f^>z#=zv+cTB1
zk5pX`-pQH69;oq~<LLd#lf?IYv<fee_ghSU%71r_zZU-g6u*ML60-^VQD^Ob8VTnj
z<}F80DW0$(Fzt6bR)`3jT_mZ}gPQ|E5;W9^Bu(>o>Ad}E3HFg?E6=`gZNMnhk{-r(
zH-Gb)N@tCGSB?Kp&Hs^_aC5#X#69-lGnEg0`<cpj;qHQ?ce8uzcdGul>D`<rjPL=t
zF1VF&F93#7dAvX$E)>Z?Q1MdCviDOu=O*`p@%ly&{15zX-U7_fE%;z5yMeKhp-|6&
zD;@}|KKHQKvwLc+EjZfdZ{xpyoWaY-I^&zhH`}+Q`&HaOGkN>7m2*D%>f9BkJlARO
zLG8KH6i0C12Y(&hzkK4=xfhXF&vSv6|0yl(Hd7p>=|z0^r=P9d4)+k;i*Tzy^K4}Y
z+$7u)xI5u)qVT%sDjl-s@O~3q{gUS@dAN&LK354Z74GE~&sDw!NB%iHx4}Kz@Lc6u
zI6cj&K0A@8@w8W;?^NN}ru&Vl9kp@)qy6ZkccSi}f_r88b9^0D`P)qaB4N4$1E~TX
zYQo7{^6UHlVr*(xhdWZ6Hd4$*v{k7iuu-qZNv(=KSNWmz=pW=5U_3kiT;(x1g7pBN
zckFnyvc>gi<rkOWK0Lf%05=Q&Kg0iexbMSHD|@rcDlb4&t%fKy>>T*L+IS032!W9`
z-pVeKyg}oqLa}JJCKC05yu(vY@r%bcc|6%trlzA&KMaT$2bxvAFD(cPG6+3f15QfO
zY7+3jMCa&fYFY>U*um)_J$_yVUp(u1oF9C?l7~A4cLeTMxZB|#fLnF;^OeW&)Jv=j
z?!r;V;4a)N7~HjV>C)h?W%YOo?&|0W?&3o5=FhbM?u~Qx{d+lINO$1TU3hdS9^H*s
zdq3X)@Auo`#9VLhcr+e?G$0paJAK}M_t;n@JQ{HI`#d3*8^0=|(j`pv65~gTCeo?#
zSh?Jmn2h9e;Ac39gmKp0fLIN}H9?tF7S?7;48<hkN+A&|6;vESNY6B|^$ko>rYEDt
z=9XSX5#V@@3WexQB%7Fyq!ZbR;$$@@7FCN?UvVa%NX6OOa2Sq(_Gpe~bJ>|puB0ki
z@bD@W`iT}6g(!{16R|X<Zzf+$)tfD))A?ed1yD)ar{Lg2q7Y59ebMn$FWacFYoH5_
z;$V^zElga@-rU>E;q@|H07N(Gp@#}eGFMPCpc2vvh3yW9xu3-#0Vx(r{FIY2Rix|k
zM1(z+wKHCKutp-t@KLpEf|6MgfTr1}V7Xk1rj_DkDSJRE<`k4N6)mKq*&@0YHb+@g
z)K$@`sNzoJY^4A&QHmDg3Qum-CF~0+)Dk6G%8Hs&TNnjT7ovFxfNEk230z<RzBi!&
zbHLguT9{ETW|OISJdst<9Z{_?sx8d+vMMb1a94s7OXsp$%W{AkrIV!ki^8@yvsjv4
zU1At?g(ahDU>fvYg7G%sELyHqK#|6<Db1`nnNry`P>E$OW)tb$IC{nC@mxVw4kTtU
z->8eU*f<?J!*Ez5uSrKU<MAkKxtLv3%2M|u6XwaqOxY*u%=RS<sYEuupN|=(VAOQF
zkAtCE=w61tzq*t{H5GcLnG`EBWh#d>WPK<q#uQV3MAT>!5!swrD~QAOj?--2I;LRP
z1N1~0Z{AFF0?Vf`!+Lu+z#p07M{q^s6&Bg)8}4`cBCHuiB7<vT3jS&<iLYzk&)ULN
zQ?ZDc<zfk$-&63=m6797N~QaF#+)Te_wlHd?$fgA-e`cW>toRni$)pd#6&iiR9JKx
zlQj~Zj$*d4=s|d}J|cWY$1-dq{Omdw-_6?lSbU7_LqqoCEs;(X6Z`gK=wmECgWgB=
zc%FEQ#nW0mVpZ0*fyIj~KE>i?mKbJl>SKu<dlT#HV@V%Nj<95!B@1k#$kHLUZCf8p
zr;G`B(M1Y^SjNljeJtZ+8}K*9G8vkV`}VUneJndo?<`wpxe<14AIs&~wb!z|kG1x(
ze45#}Z(#X6Yi-3FEBIMcA1j2|_U(8iAYMrna1W@~)<Ooi>1^N5)F31DnoH8yse3Ub
zm@Hb`w)G*NM`A1wvf?ymJEn)i#tH4xpF}jv#&KyK!?K!C;<*xC#+gj#qD2;o@TbGs
z!%A6|pTJjQlh73#KGewY7%vJzs`?@kq_V(JaocE-P33@brwLx93WVns0DxyxnP|Gx
zNo$qfy1Vo@f;JgVCmH4LL3VmNy0w>1Ctf0hya{5$ie^xJTU)z2qs9|?wY}Wa-5yWd
zV|2zd1^n4I$#VSIsnXY{I9WN7%SQ5(DHNnmC(>!=8+Hd>;UN|r4td9b3b2FqDp<3S
zY_my9H<^Pg!Ik00;Ns|0mM*b$nWe|rE3Z^Az$I)6m;~ZQ?PIZWG=lXH`l>C)2z4rJ
z`jo(^&!?A=j25wpY>dT_I2kLdZN=PlEP@G-Hc(9+dT3_c5{k8k(;EP)HEMgGLT1C+
zILl)S;KWKKhQGxGQfyF*IUwjb)^rq&QM9&|_(h8f0%6;&2Wpu`Xs^;#!m`A!4?sK}
zHKLG6(3DfQDSX$@=cW^dT+*pD=V5G3L6M9@X;mE9DJj`@B^tj9e(V&Hu)9AJ^6vGp
zM4^z)QS&^3VZX=EGKq}QG5NTCyS2v7wysVZ+HAg<Zr7WaDWO{<sM`TlDnYqDp%M3x
za_zOsnnG?IgdXEb?As#|n6XFOA`#q8i){*}b{L%`pcD%;8Xzn5QdSEt=JO~8lN5fu
z#AsIq@{43}w=Q}XZ3p#$-7bpAZ6cX6l>q&c%l2L5xM+I=+cueq=9O%r@1mwS{M)E+
zR0?mW2)x8{g+eJ0n=9U}%9Prs02fRN(yAIMR<Jz{tt67Bfq;#%)5_)b06I}Yi`chE
zix^*=a*l{u!RHj3zgUDm4+JbmbwkoZ1e6bTTy%=p6PpWd)tGY~T3=+MsceLotTd0u
z4%oMkA81)1Dmfi*VdKE-7_JVjKZ&NRwhvQP%qz@Z>TQZmWv8$?#A$+yxHa<!0C5<D
z1v0^wttfIu7ijc$RD));xtM&8W8!(?e7Y}Cf}Y+*6F_N-_ckyfA#D8$AzoFXU!T(C
z=qNRS7*ue*=>ieq9PohBoXW=1Z3<1R7J$h_%lsX*!UQ@TgQtNpBJ>h?L>dKTKvQIx
zcKxw}bw*TLliC!whOx}JS|C)TM$(wGVzywdc3@XP6sPo>wPiyaP6D0l3WU6ovCg(G
zyJJgtPkVcK1R*|e7+9WQAsZm+ORZEKFD3Wc9s6n8tiPgTJ!_gQHD!BEf0-YiHqA9<
zQ9+RV1r_KpyqC2nim`T#e-tPEK}d~;-E5~njF<uM2-?%$q%shCtava9!U^RT52`R(
zBtC$*BA-)J<pStzm4Ty;5TVAWzSHV;u=bK#Xa}-ypFn}RY?AHtgx$k|!3dSpp2sb-
zw4<~iNEEV(bbFzQebSEJ2OBgp+#F9wz_lQVBS)GaE!xbshKj&>(6SSSTqzGM0(d&&
z;gATb$m8_|vEL034q~4)-ut~fjq-J*s};N<mRGj*DH{q2z4915?G;FtHbOR3nt%nf
zz}3CX+`LSteNvBP#+#jCC_&6CISdc>+G!;YQj5$(*@g`plqOZdqZeep#=^xh|7lZE
z)C~B3;+2f_=;VpQL@FKueU&KYr%U`5+jJ5)l1IQm0xSlTW_q8Jwr@{k&#R&`Z6}Ho
z;?Wi(;T@Df@}6iM5tzUQTzGB?<Om;IA4-g<i3!jv@kH4n_5qqbp#5`-AX*?G$>xYd
zipCWlMbjCJR^T6xZ%_e7#NiwSp}ASCSiZs-m>95kIVF!uP=hgiiAW0Dagk9b4$9T<
z)%OI%bBNW*;gCY{dN`pB!UZ7kLF^F|MqoG((L%g1VzGa!rPw5gjj&!U2<$v47;|=_
z5Y237ikgVx7(Xgi#MjK0FK@<3C2_B^s7{lLTs)9N#1=>ur<(RPso0K0Pw2ZpXOqz{
zK-6)N({@l_aSRlgnqr=2Dko`%N4z_|0T%SR!h^#jeg;W_jtNawVSHR^MN-Ce5qmhg
zG|omw1DpUG;eUI#>Qw-91&k?1Bca9$DO|-=&?5;qVeGK;V0+-xM~?vtRcK5wwbE(y
z0p>gA6?PF!2cJLU9f<V1LLPR-m1{w`V`|tnrU6VhCl-kSY*TY>-K=2WULe{D!U^OZ
z2}fK50|FG^06EZY%1$4lgKSo9VbgR&RCUC9>DBFXg+f@w8WKpPlkJHzsB-M%m<szk
z1fFbPPo0}5O>2_YK`J)|IxFBE-tBjdvFTL2I0?UZ&>!Yx)Eea?eQtsq&rnwY38s>%
zMByR=giBUR`3NZ7NdN-@MWrIRm?lh3v_p05K$?LoCxnZ2-K%tzo6==$SMjn~C-F3R
z@T?I2R7F2cDmE$n!43l&2-pP_V|=3md`2&rS50jjFqZ@_k5g}Qa@?4i+{dRIr%CPU
zY8pqIgK@9j(YCp*gIdE=qvHH&Ogc=|^+hF~Qn}p3+aIP0U<wHhg~GddXNW^r0KmJ&
zJ{3oOCRu*czCF)32m%=lM?k1z6QtM(re5qo1e1gBL0X{Z%_ZZ}89iZ5d@NtmV+;`3
zV)ZaUfWRZ3%P`+SWRGhkKu;`|5!cA&5kC9j@An1<B7xyO6sNt1>3!hxfXnZ7NA`GJ
zyRgCnqhk>#CMhNnC^c{ecxl7K=pXl34;%Em*bszYBVjDcz3xDm`G<G+dsrwG@^pgZ
z2~rT=yCM!Y7IN+OxS4DB*d~W_kPU};01I+?PQ)|f59#lNA*^v1@p+L@csSJ0Lf9K3
z9E_6<0y9K#QYI1-#&O(FV){rwwuWg4m_(9MAW_bGav8o3I*^O(-s>3|9t{RPBUG0N
z&tFaK1I}Q6AU51J7SZa4Orq9Wr2^pa!b0|xj=-o1!>+>*`q6Ry5iA-_&;ct8<RxZ`
zLFkl8sU&)2?eWA^dlG^_@kSy*HUTPODiR;3c?7bE*b8u75%6xbQUq(qlMpq5L>g(O
z$3aX{Wp!fHabujgNQ`+y!*)kUcUO1&s5{iv&icH8uxBLT^4YhSVrm!bqrdj;dMHCG
zdza7CJ})J>e4aL)Fr_v@4-fWO^AwXk$br8Lr+0^(NRQH;rg&@ZobxC|))!S{sno(b
zcoZ8Ac-_MT9*{KD27(W!2UMWB+BL;!2^jE+HX7q4Tr{7`qPKzMQq=qH>H!i6<tQx2
zX;C2XLUo8l7>yX-u!n1a)D%h7kY@ve!Sm$7xORc6phRG;4e04yju=90uEfZcV;#!6
zb&BD0u)807_QhA&P7sp2#e&vm4bj@zrtI6foE#(-=RY7b2hTgnKVo8?L|V0o9M@i{
z8a{W#1qp)B71+s$aN=Y#)mpqj2oDivf-_lsKDMLYh>OOF9KgIrN_x|HSM<R;qH5sf
zi41786->Yqkg9|t-QmlF9_$+9F*ZCJ4vvN+?jhGm$OD9n{TJo+F=crJuhpn)r$<oM
zd}|hTJfxVK<e`fH=7o^p0X!3H&Zg2WY$_?XLhQ+c+(ONpX%)6G5PYd@o@CKTr2^$A
z&52?Vb8l1p{Sluh5TUIzREp8(A{fjbAW|mgmFPUa)Qd#O229kH0+uNbAuUOOXN(wP
z1qgzds-ko1g3Tk91;X>CVmnQnQc<G{b)di^DF~$j7UUuDfy!Kk30MiDlC%kP`jZRQ
zJmo};MDVne3&OJBAVjOA55Qs=!3%3uLU*}qs5OxKRQI5U%FtZUqA9eK;OUj<r`-(^
zymFdgI?e`+%A%%1nhs&g3>zd$8G<aeNPWP`S0z@+sj6LrK%|V(TOtfzs6$Mh=~b;>
z4Gw5?-W@CqN<0(I&L~7}aGFmgT3WEv3&k?JVL%Xv)mjogpC)>rSBG>vN;;7&D!d!0
zwag10(*&q@HIX>LMlkv9xomnyz^N^a+NHAoLhb;nluzXW6_thL9{Dxoj!{=2xyGiB
zGDq}oivuq2;wbHr=zQLVTyeu|NMclsB_%<(OySNt{-vZrUBN;#l;b0sDaZ~jteBI0
z?qXwu$u06jeMQ$CPzA8;kw)kxn3vcOP79)%8Srj#<_3-d8>@gN9tZNVRNDu%n^v40
zwrYGu3YkPirviyA)k628>DW(w=$r+?1q(TRH7l1^;sxUBIapm5MYVQ^yjbg`X2JP)
zQ|t9=Xr<{h4cZUX9lfgu(0qkVlA5fu1RgC76j4}@C?lE$BAl0lu%i*ErgKHUD3Up>
zM$Tl2^{1}`8iXj-l$0KTNerQ>x?u<>3Ro6->UTCQ=7C79((K?1NCl;W6$`ai3i?I>
z#6&DkCX{TVh|5e5uplTR8bLnb5d8w35HQZpP!<|KNbq@IgP2#w6PSrAZIejmisM;K
zfkhG+BUFG|6KxSby6>ly#a!h$kB3p|Ds3ai5Q(Jx#+gZo-!M!xxd3})Fr;%7F%v@4
zW*iHU4w5R35-=JBSZ@-a>eaEKMGS?l!0uQf)E*rV0h!Ur#u+F@bh66Vm{yvB4<Ixv
zs2CF!+q`IthQ-i1T%!hRP+JGa+A`Y5$Iw_`mSE#11{T6H#Gc9dQp!+`vF;hwa05^h
z$|hhBYc7{S^<b(<nlM8>fJU%@7;_p{e6lTT_Ls6qiOwJmjXQ^hDx|D@p+RDZ-3o#S
zOhHW=!<E*isc6bV><IYbQqc-0i3-Ho5R`A#;&TdQP#6s8KPM4k+8|98&uhm;OtJXT
z8#T#@31QZ1Tsnr6ELt&~+Um|G5^)vM3+SRCV?YyVNsV~|-Z3s#5crBOK5CwbQ1#E&
znNcI(J_v!DvuLx)+diyK8ak7pTwQ`d6$>+lve9V3MXpo{!VjXh*dETJYe6*Trlx_I
zh=F*-^w*{qsfhXLR+02BgwRsdSHAA&OA`btHj6l;z-c5ZBuK7>N@EZ)kNFNX%ykiQ
z+LO_B7yz0*BwxX5<}+ZLkdaXF5KRP21(0D8PTR$%iV^6u$*O>*a!H5<h@{JmbAc}2
zrej<ji?<}?{<#Q2qFzIQX-RV7g-IL%`VSJ4c&@1SGMYe`7BFEDxBx+%i6@Mfo@yi3
zh7@Kl-@vfn1(6SU*=Q=ugp`L-S=3HUR~4#2uB6EEFCnOG#1o1P2gBasK!^!wXcA|X
z=t0~R7)?$cbJ~~!so|i-P06A8Au%B=L?Cj9k^`Dd$hDADHHTRN70X0*3uv4w)^Zc{
zSh39D=9NA+HU>#o?m&r%{SDca!K_h_VgW-qiLW~;a8UU1chOB*+)|w?#vpY;fe;m`
zTmuE&Hw^(4yu4|g&Nd)!<0~ne5rQ_Tm*`81+qrOs1T2u?YyTRUCIL{u{O|INDE*^5
z*Q{B?FkD0e2+FSk1}W%%(myE-kTr2_mPkwJ!byIowF-+N0UiRAQ=Q3-=hAvn5ZsX$
z)CncjR+h4_N!<_mV{<xsaHfSd6cW@3zO|qbB9F1Y1%w7FrGSkHGYO66Rzs2Ch<CRO
z7v*to2%#yAAFn1!ICUxFMnkXA?%f#}9`Ue^+7s++yVv7Z99`X;oJz{klT`)>+-?$c
zVXc864yACp9riW`<}bb@exOvEXp0|UtzDaxPKVQJ@7@GOBKLJVHwhnLG6&>KjxAd@
z+Z|536CcQ9Z`wC=`F{M(2KKY2d{eP$0xkoWWUWmxr3qS|G+2r(^W)<lVOXE+!7>g*
zIXqZMu@D6Ah$HC`qUnJYDm{@ZE8dW{z=M#1Vvwg)pqERbt{+T{gJ38ySH6HJ!cfqq
zr8IMuCRiwuXT#um0=X&dhA~PHV;xZEiSYt|LB`l5Wlg0iV}f$dP*zfiA~&{nkbVRs
zM^C^J0RSdmTz(dWT>_dot~4c-rlH;@e{WMrX}X*>W!jtK?M*XG4`fYVJvNV{By~6^
zv_Qtaly?Kfq+Dt24?>Lu6|koDH#9a7yE5W)XMjGkES{Q(WOF3w2kVD7QW~n9*`_FB
z?}&32ar8?3H*hgbhY*Do-2p2MC_R(74=jQVl$kPs@a5G&3I}D$f=i5>LqRih%|dKO
z6b8;2HU^|00#R4Y#ksajhq6r>@q|Z50+8K-)#R<>8XYWx2)7Oc14*+S7z!jD5F|<1
zsTyN~t&NDC9Jo9laUfxBaH$wuBwXd;Rwx>xpATo6z8Z+&fGfbffkEH{^jk8LB%}r%
zLxB`VT#K)gB$RrQ<=d#|_K64YF}ng)-ZsV2f!!rf<1&q1sQ>{oH2q9_*QMBw^{k@}
zUy*hId@^U>4s2bBic#T~O=J-jj|e6t!iCzX$@-4<TyvGDaoNDNSnIc}7x<JY6M;*y
zeGL0{M}~$&5I;ao$Fu<ds4wi*JtLmskpajJwK$0DBjFLRKO#1(kRCp~+cPra9q?Eq
zv57<`32#&HB#Fx8^Nw#Bp;5Qn6AD3S<=XA?`dDBXijL9101J;??%GKkp_mX1RSQGH
z=wW`(2t*;6KeP$(U4x|HPCcYag|`WUVTx{||9rO)CW5E{?W7PdLOElgM-qgSMg*~I
zNNZI}$0OqjsQ1AQ=<<4)Ekudxfmsa%l%zzX-X}!`E6xuBy+g!@uoqF(7<g|kmjDLm
zB^h8iZ45wFosC`qSt=Mcw5Ve^T|?YF?FaNky|n@{Ex?9A1jKFfc)6G`Lb8A!5JrGP
z@z4y_zC{It4i0&7p(W(jLhS=B0(Pf#iMA)vgr-t2!@fzjb0P%Fae}%|83{v<9vJow
zy9S_QFC3s{sb`1Dj}m}D(&q_#8lZt7ON&z34r?NNcb6DD!akVwSPgpfd4XJwtA}vx
z13e3bRIqm72np>cY6#k6Znsm&=OQF_qe#4?BG3fu0pwvRl#u0b$g1t;G$%MkYxFj@
z?}%mtM6yVxZ~K;wTWr73Fh&N#kr9t?geD+YZ?Omnw0J}eLZpym+)ETEnfIacC=sN9
zQCtm<N`meo<&uT^0M$bOKnP^WPE5b-P5~YTJ^+==S$AWsIk`wu8Y6^{6DVBFehAyx
z#ZYgOVMHmO(CAPuEC;p6iBeo<OUxmE=lGYeA->q!`CmKX4^nv*GkGEsVHiWGw{220
z8>S)XI#HyfyNZWY(uQ+0gFcNDqe*Pn-ib&Bcz`C%5h2odpRj=tl32280FNxH$!n}}
z%v$}4RwJ>A?xpXY#6{s6=b$$fs|*aJ7G-)b<YUk?(eOr~{!P#DL8Qe;QcBF`@tB>5
zLtM%Sw}HZG1%L`n5$&ceBTm4PB^~+=lMrB_HK!TL$$7x5%};*H-_XDen7|9BU`_~U
z)ppR$d`JKpbUnf2R!&OuI&EBAXoGRECRm5)|6vMEJ=zv6<e`wycZ(NnGx&!@mS`<(
ze(=K3Xftv7ysi+8*$Mk&b{1w(H~w_e<ltl1JZWf4TWF7h->EMPvOH2@T#zNDI5iWK
zS506PvI%X%A$;1pUq{7;fC$P9nK;liZz3R|pJ@pKd1rxJ=qnwN(PVRd%oB0-508YE
zUZpCPh>ioT0NZ;agV>Z1HJa7cz;TUm4~2I|JP~hTH`+NcI2v#h1ID;c8sYqjy^L>a
zE*SL#6ue%4kf0H}ZWcqfV->YC`peqr&lQ(kas~ebuvah-i6w;~jqDCUq~c44LVX6?
zNUrqkcVEhaK{xZdVDjlA9pVTqdqP1MF7}6|3(Jo)oB~dcvrLj@Fh$64I#Wb1(djw{
z`UK20bPfraEn;~Sf&kM)vXv;bcLEi%gOlUXboyPrtZm{TbNRhHU2Hd0m#{G^<E7n=
zcNYkl6dMW-hDbgKnka{h0`}TNT&U07!FE3j4+lfU5(L6X6!M4KFB=#}Mp!{)+3rCX
z^r*W-tUrOUFxr;LKwaA2)zLwZF-TicMLX(`slY4aWL)G<;=T}wVc{Fi0`&<$NMdYI
z@m?~!gOLf}F1cX3R{%jwJVll`#Pr6+XHh`>+r0xSBDl0jczZ#a*vH0((7(dUGXnCN
z5pxE0AWUFLpsccKXq`wN0A_H)4kbx14>4ZQqasveM(rSquwfVNoIoZys2xNiIDMub
zNaYuJ=LzjaGHip@U^TBu%B`p@!6GFl1FAjZ4Y_xNJK=rE@W}_5PT((MLPIX+rf#<R
zV38Gp(erGk%z7~aFs1whyqgi{!cxXGbBb>7Wd$_}tKAs>V@eg1>}r+GOtG0H>km6w
zXpbu>{=x!z1{jh}!_E<=3gf5%I4FMz_u#P0N;o@Fg35mH7_e!Y<zi)Qj4Im)B64`d
z?i&v5w3F_BKO2Q^)y_j19c~~m+Y3t+NZ$)A#0Mb+$wh7gWH9qUcLnKF7_2fky}(o~
zW0KND=wq&s+v_Fe4(u6-cA}F4&^^H3Vi-oVI|HLE=o*W7!|()0JcF=X_Ccu-z@ShB
zgg0QmA=se5A@`8icX?Y9p9h^#c{c4#fT(CJk0}N#G%}lG6WJ2x4MCaUe_^G?V6+96
zZ7LJJ3dT3|l7cV+lI!vipR4UVj91py-qyZ@D&ixJ5F+r+4yeW=`B;P%aGx`a6=I#x
zCWpA*pO3JLjva>uX@=L8-tv5w(Hnn3<$zOxPv`|`^?>2w(U#Wraa;o19x|=)LPzTN
zgolO)V7q{U;!PI<Z|XY}dBU+ZkJjzn(3{vCnVSf3JTVI}|A1UMx{bI8n4dZ!;vx1%
zgWl=1W2sdw<sc#ziy1lqGAh76E5;Crl>mynPDxgZ{?a^lH`$!~_70*6y@?zbduuul
zt(4v=hWnK05^dmDL;vAQlU#sHcrb}l8T2VxP4GVuoU?=AWSKwM$u7+&CfJ_n6d@v7
zHY9?~fqM{_9YO3#h}NM!o!YZgdv-A#T&8abqG<lDS^bH=3GNbcXeR4N>zr%=3vtBl
zjIvI=*&W?I+Ka=<@&~X=A#&-_-?r#sw7!vv@FS$4K+56i9Dk0uyCC3Wg=rWCqF+2?
z9=6vTWUk;Yh<+v%q0sDdGJ664J7}m3+LLT^p{;;L9rTMpq%?A*PE&-Wj_Ve=4WJ${
z8fK$oY_!ZuF%}wN__QCI;zFg#Tm_)HfKE%?J1=`LG)!dFTrB}CwpvW4$|5bPdyUK?
zNCY+cnSwoxD5e>xLDd78BbX<A-qL(Aw+DIx(z#=2xVliDIXDgRlhHZ_yI~PpB3*X_
z+8|nrLui^FPfc2(=-pukZC8O#QBP}FJ~=NW)2l0<$qE7I-nexEmtaD}UG*p$!w2!V
z&{|p{XAhctOIseata};kQS3didjt1~@g|?68>$8IGM-@e$wWGjvq)?_&c=&ue4LHL
zC<Hf@;+cTUvuKV*RVYH#Vwpu#tiz7C3<T8~oJs^9Vk(Yt@b+SRWGaBExN%2~Ap)yO
z#TgVets-eUQ(`K>fgFcRz#&DH1l~-|1703bfX3B4GGuWMF`Gs}78$dEn$7V)kdJ2%
z!U293lJP7cfUv`96*?dZG-F}IF}!5n4+N@(W3Ux|fWaI<><#Jb3aN1@aaj8$m$d8A
z8atolm&xma+A82`e8NSPUyl<fs7Px>77W&WHF2g~d|T4<n8Hc3PD-V5SgvPDFwKi<
zZ@;7+WMaE%brfKWjF}92m#bLyg;f)b8ALXH{E(LbRb5}yOA6l)1o3I^HC?E|h1sc?
zrAK+y$%sTKe%Xl2kM+iXmoONQK!&bdOd;1QY*#-E4~+~!2M^kl_c~2brH^Y$GAbV6
zl0Z{MlXPt0YW}AW+P6#|eNw>M1zX;WtH9cvZ4SlR;q2~kc5GqFPPbcOp^(SPz(Ha+
zok)cEyq}x~RRHk?e>!_v8OYTUR@}i+Wf0(%X8+K^7R1{ji+2MZms>!ujzS|<h{LoF
z+B|*)2wEGZT_L(jY`LIRwR?<=1ZXWT2t~PA-1K1mdzin!9a58P84w;}XL<lNyQU^U
zn8K8l_W=|OAT<?1lS3PqLlddBU}b2N!=3<4YxqJ?T|%AKKFUTwlOWoIR}U!J7~7Si
z()`|Fh+2SB&`mfCfj>jRUQWLCmL1x&Q+sae%@p-8ddD^+wjxSuyl$$#Zq{GByL!u;
z#MVS<`5t8o5x}(2&77j7WJFm~s?c;a-vv<MXnMi9ctY5y-2Luehv^+1WrTMM!nGIZ
zh*Pk=f{5*O_F_2w0{}SWav(Q<fCA-|t?&bKFAsqcrU;=I9@1&2{juNY+U0Soc|;no
z*fI6cPS(42z!i2e92sH7auG-n=myeneYKl0HXA76J8ndN8aSMm)56%DuVdP5AXLtf
z9@%W)16+k=sx3O2EMU%pJA;gDIa%1Xli^fFh_4^ojUy26;5$UUtami93#P6C7R$tq
zKnOUfq4aQe(E~kTH@}L=&K^CI(x7uhV$n-HL`%_W2LMXr;4pb=`ol8uO>8_JJ&<rh
zw!@#;Mub1l%H>H67Iq5!-KsD<{rWvHb63zVB?QfsXF%~oC`=}ALufG;0(~t-g=zdG
z4JofRB*r1wvVwE>Kv-PB_DtWM1d9(#5AXzbhn;nl!MEU=-VVk;s>g6(nx(LrmEuV@
zevoJ>;6Reoa<s)qfgd^Gc!=!qHNw)8EHpT#oi~S_2uOB_TKI`-mF*<!888BLdT*2)
zSGZza(lE>|<Z$+xg}4g0>JO6Mpz0+%-cr8mhp{i8M3hy;X)+255K4Lws|RqvOO&Ts
zLbxGnPfb8JKx)J)G(zvF@WdbpQ?<yutRGgMV2e>{977>G7ixNF*ixWf1w>Q0FE=5=
z!s1j)S~SK7<1Z)(g$IN+^#|WN<L+U<$RLPtoS?wr&{(xTo+)qvfI7n29V{a<x=Hdy
zL(l+s03gtZK!AW7O_%bzZ3lV-x?pU15LM72cNiACz!>uD2gnGgJOgSTaS#uwfP#Jp
z*@0_4Cs86VATDY)f{vgA<M?nXk>A#qX+3Nz1eGQ2Bu>8%7bakNagg^g^Aa$xHzb%F
zP1wO19jzUDwRP_R*X^rp0+SG=ScVlq@JxYhDr1IbV6Xz&b!nW@<s#g?gI*Y?S+Nvg
zcR^ECB~m~maZz!y;+fEK4N`Fq3O!>9MBit1G7@P90fv%dBb~vKek29%89o42>o`Y6
zs^X!;Zgd#ol1s3EZ)5yy95z*8GQO#U;RH=7Ui~>pQeb?6)X>yVa&s)Is5l^_QL;GP
za0yPJlZc65O(94W)j}AHZ>4GWBqXZhpQjc~u~sDpvlUvn8dPK#GA!uaNpwthdl04|
z*f1{<0RspXjiT*C8H9l#c2SL~Mcv#ce1OR!$fEs5F@&Relh98&>PtQ*p<W#V-X_(o
z3HMWC&LqKT0Ou(V^fE#pItXfkAy#Bi?>Pw50NY!35_6$s_r%3l#@x`Pkwzlj#7HwM
z1%C=kQb%AKv1halrBNNolF=A0OQ&&#Bz0%Cqaj~PrV3;)v_NF-C{(jm*+#KLSw=i5
zzS+aagikppu2)t06oqZ?y!kROM4VpR2h>Lbwf#&9Lqr2&lBT@EdX<GnR*6C~FZLh4
z35h?9%tv8)1>0+qGvQH!*iL&58&u$MP}o6(ASBy9E=r+GOI#s89~?!SRUxbg{gvMZ
zLZc5dQlE5|n(?K@hWVj-$UjqQFyWAD(z@i+T}((HaIAG<(`2L&lvQm>1KShwAp|xH
zT#$)ZALx2KkPfFchDS8n$A|}l;*bZTP%MvL9YLsUHy4emL_ESUR~t)J^t8JTJpxA3
z%y()jxWOMrkZi8eP{OP+Ja>fxgZ`bv!G4c#Xv`gJjkac53$1Lr6whiRW^^^3HCOni
zk6o#kH4xFukN@$N)?m~PjTqi#R0%$euP)KUsA@GqxJxk2s={%SfzPbLd!hyEK0<VS
zz8J~0X^8MaK5BqxOvR9}t)wz)!}zEnqKX~SD4mw)7;^JL%+xj#p;nnL?9L=eA%-de
z;~P313jqbT7T{Of)c8KQQ>b<c8c&Q7#Ysj&)4i-8=mAGWAxy#ag#=2N(u;kAH8k*z
z3{fIEZjR9zL$T!iP`igC!C@SPVMCb21F$UeL_A~A2$SX?L7<hf$?fs_nLD(b4M2WB
z==I?&4UPi@K&y=~?12%t%RS_w$Pq}Y21ZGg6dVhMp_2%R44w#1GrB!P!#)B#Fz9D{
zh6mXmx0g~v{^TYjEan@Fgf92<SJz+!M_M3=#gQfN;4nSiLnHL)_wB-zQGnGGc;H8i
z9!dyUwpDwZwn8#N!Oks)6N`+#<|vjHCFbM`=nr%sDSZURffs#8gCQ%<%JVJ<Zb5`5
zDWpE8uQe<E2@p>Z_HmCZiOtQ-(eWkh0^uR-M4{QB$)sp>0u3<RNvD>D@&fduirbA)
zTiRxoAWZH^zalKpv?a;7VX+YF@HGwc5J(F)^&IPk$@sFni^Qg^ABU^4CE}JMrthG<
zJ|sB@<piU9;1bAZ=)0_RyOB%S*s>7aIHCkdV$J&{S5RDeL5)(~LXg5Ch=W2mq3yaj
zfKZHvF?cMPYqT{_x@b2v+bB`w@<qoXrQuYPC<Zfp3TBrupb9GhUxJAZtgLF57Kpeq
zv5Qb*!#oV2i65|Yevk8Td@3uv1H>YRP*$vM{be3V^Y)^xX;DMHOL#McPDw-vd>EXZ
z!F@gGG9E8*rQ#)(E)h_?3ZfHfsbbz>{=ig%1QIpWi@=wp&QKMO^FiFW(h$_rOoM3|
zu6M#@ErKZHB@K}ni}!LWz<ZwKA;miYdR3<mh9Q6vV~68`A~7%?O*<ayRf(-)Ahd9R
z2^0|~12-4v$OeG;bR>ua;^c~-t0;62S5v^F7{Lmc+B3er@jXPWM*VL!0_O+fT$l+|
zi=T+lXh3tEK*Lom9^$t#SBV~?VE8Er5L6&yu)~r;mIC4mSQkpAlwA|Hncg8u;t}YC
z>YElA)u)+VCrBGS#6Lg=Cdg07a_GyQ)?Jq`3~LbICLqJ1Ge&eSoQOVs58@jq>Zfh1
zcoP#@9Dv}-wH5>WC-VGm4n91P_URE=o;VPI>jG%lzyRps#0*ZMDpj%q;<i*jpAr--
z*1ixU(E5d*78;c(w#{);Vko%lp~yBUZ3t)OgG#Y{kfrenjGk`(0HdN1uc8$3Qp_Jz
zqWJ?zEz<K$BIo!)r@|R)rAV*%V@*{R<Z!_cm%ZRRX6Q<`;3$K38y@@tM+eNZ%VpdH
zH|20_#yhxim7gev(L^$*U#A#}K(9s#dwa=@J1gvuW3UncGK?f>SL9b1E}Bl<Mq{MJ
zh=W0<-303zTPRcqGzlR3%Ryic_A0C37K$Qq$wU+z-`kj%kBAM>-IPJFr`&9w+iTPJ
z+lXK!i#<#)%^*iRY0p;>gY25$4_Li4Y#Zq&HiF_tIK4(7bASOR58keYqsC-8oGXY>
zWxE9qvE?`laza3qh5t<DL&Nf#^6A%;ol=3Edx5mQtR!JIfE|^@pmd`i4FL{$n7BI{
zQ>dI^o{x?+v3=ZbS{yaOa={p3S5u(tgh-WAir*ksO<Ej~6nvAx7igWApgWb6ahg7q
zslH)Z!-^G4>z6gGJpBy#aXE|Wx)ugC;5>M+(P~l^+zWwAb}(m2qygS9$r(*<%0o4Y
z@Cz2{3aez6{0qP_h&9dd2u1<?NE)BiZHjS<M?dGMQY!@<o}^c6rhZR|n7hIf5W}0o
z*%aX7bb|Mder8m^stOEGf%-58W}&IXAo1WBjWc{$2fa$zJJ8pZ#=Qi%<DgHw*kIvy
zKo4;>26KYuAI8M!3tleWkO0bw7_5SwIK(vM2clq2;;G-8Kyw_`5oN&xt_T&t<vjdH
zgGR6l2|&^?Zwz7-h$gC)LrT3o!k`@90{1fzKp}0_?stM;pB-c`3H`2iH`aj1HQ?Jt
z97{9o9r>~IAT$~Xjrd2yo-x5)ff{!2iUfjW-?VVD5s!OxBt*n^AlO31LlaAvZE?uZ
zHDS<TVL8Y_LZS<Ld%)`%Xb~omJiTs3dV=D4x@K`V7q7-TT+CpuEDjP3!<=czGvW<X
zMaT}TgXd!GMEORB`$u6p3~tho>kug;H_beGc_7?IJaiF5*vNu$i9lq>uQ9Vbc>9eY
zn6D*M$sFC|Bhrwqxt<>8)*_N@8UR3aBh0cvzu-pFTA<eOg&<o~ECL=vIx;4W@T;>H
zy6y@Zw=@V}>};eZT;#4S^pv9T%gZ>)fZNOtmM+5HZoB};XzyH_EZ*C3zZvB#X|@xu
zIxh{-wsu-bxHD~Ak+b+TkNPem>F`Csv9OWT%H_+A*9*mNgNY95DMVuJ$j?P$NiLiQ
zmzUJU^Vxy&qvFJ!0LAN2lhB$1>Mwro=7fpV(m3ox@@h>Y-rhe>dF)knm$_@fv*)W_
z8?UM2AERfj9roJ0v|U_RN3#t0(6~r%{#|)=Z4$(olw4bNj6q+^uYarNGo~qDEBXg`
zjC6GQpE#CIaIkG-`e`=;@bY;)rYerDkP!!64oGOGxdV!1m}%_>;u;NkjPeOD(45te
zu^9esIA;Yjkrt)d3F;LxFgjt<0{ibp(_`)mb1AAvb2Hk(O{^dz<Y1bK8dEm3D0FH=
z2LoGHn6mPF{`e(HR1+NbXfg0y^CH=(Nk$X_08jykTGOK6bcD;(rZVkhQbi)8R1x|;
zem4OuI_NG^paQVmoJ`_<NSkgmbVRs$dGUBqt0#<KLl{x-V13;5qXou=fHWD%T1rc3
z3?j!4)(aSM`7}vEK(*uiBTj4)Z$*7fzh>-uIAxiqF(%U;=zh4jIXcDdgejVjFKsm~
ze4m&%GI|<r_^gdI?ZMOzFcBaW6ulT>dt3{F0FW{PW4XX6@)p)+;Q;wi!P<CUWOf|G
zY0Nol=Qzl!19X`u*Ip7o$A?ZVJ*WmqXhOev^Nz0~Cx#tYLlzFue8c98)1$b=1nN`B
z<3hWP$%gy_Anj0moznW!rUGP*`lXkqC09+ak1+3TY7sZo)91nbbf%eLN?c8cYk(jX
zrjz><ST1E8<KpA7FnCkFbzrZy-lj6NG1nnc8>;o<cUzpSUog8-Wj?+%Dz70wUEyiT
z2b)lFSCdlY1S?MN0~Nw5M>}3hsm<k7SCrlkkwakAc~efzMG!diVzT3?Nwxip!o|J5
zjIDt(7G|Wh(0KhU_q1XbIz_FUMKa(yBwR<Q^R)X*u}nDy#BYbv(k_tgHI-w!NtKAK
zlNG`HbAE3mrccsUJl`5xaVP5pq!B$3og(~oqK5ONfGoyd<2NGeWC>ck=`5|+Q=1=a
z@+YlT{#B0(a_~mu&#A*dwb9T)>-z}ZF9B`Fj5e2z=?~<utqV~TJ$<!TtjndEo=;nY
z4l(b0`qHXROC@CJOz8>e`8C+#Pu|s(NSguGTYgV4H${3X-`M+kvjlzzrPGQ#WHu=7
zA(-?;h6Y9=p}qWksfIad_ovMG8TpBD;5c<VL`>RcaMfh`VI~rC<ziUiV5-PS2<U(e
zap6zlgfR9diYB<448jNj2Ov-fMdHWPn?lgX;J(G;r+7MvLt_VfaEKWVcp?YNH}g@H
zo@gG3xL_C|eqg(e+Zx0TU{L;H9nKH;_=DlgK@H+At%VbKeLl}lFsdg?5`fuBkWMR}
zDAgct9FK@wyRbiNx3Uu@NTOM~8Jk~`)}r6n>*E*pYVF|{0`sdSa91$G7Lfn&^ZfdU
zE%-%&{KF5ND}!)Gx2G2Z5KEE7xK|OJPM^l9<0BE{USVDn$Yf%fJPwH+#G#A`87ipz
z#Q9>}Qn`Pl5{VQKQs_Q9HdV|3?E}pIDrG_ONl<Y#SK@%!R=q18_t%u^9^5J11dP+3
z{O))W4T_Hr0@LpV>5-KZ;=l`T0zRM~#I=&Alz!f&zm$<zA)<jiF&s=)Tp_5{50W&T
zbVYx9a4+*t56vi?RMbzX@d-w>y&)-qoSA2*w$bkd?L$JHs?-WYdY)eoK52fmhZX>x
zCe(iX;$fU5f$5Y=?_ks0adBolZsH=HvbdOdfq2-_t8^u<4u{Abadtz5)Ldu`Ngj^F
z(Z*Jc=vNxIPg1=jc~~0~;yLwv*t1bG&7K9<0kk{Z@*&NI+X?M54$Y7Pr>(?MWxnVd
zm~k;MSC3%92-^Vy0HJabC$%(HsHk2wJy<Dzu}3_Y5SA94NLBRvOz6lG{rHV$o-kb)
z3VCW=!7C}Op)J5&OgP~!j)*e@?t0w3L?&k(6;mxpZ)MoXRQt)Ow_XqEL2)AbB()*=
z&q8+^lK~lqo8LhU%u(V;WWZZc^|%2E4t8(kRe`A{%#C&3gVxn(2z{D><fz~w$8p+p
zLJ5s}2Z*Dj`qN<?%^n2?^c(>-r(5`$ctRE0wY#{UoYn^}^yjCaiO;}kZr~c?4YiVl
zm=(PTNi8qTe5En<w>6!1n{hk8%^2KDUjICDO*#`4P+$0*ksi<YGg7-?tD{R8seO<r
z(bdk{ks>M-KdoHt`eJ085uHb8xk!d>hqyNZlN&xtxN|sG;-47O^NA^qfz~5*VKZ!J
zEIm%gwsFguE)F5n*#*Z#Ke4YZ6TKX*|E#&H*Aa<%$VZ*z1T<mkFf0@a?b_*fnv%3^
z?HY|BT5q%;dk56QdT(j6H#Fa<uTX0c-%3NPoq_}p3&p3UQaW61vC@{ouX+M<rRos^
z&~tOxi}ioCM+L+M;Avw9aNOoeq@x0j+YGiU%0vQRt>6*|etLmw&*yQHK7K?(f{RF_
zK)s_$AAr%~L@*M*g<c6?sNi<F=!=V}1llwA;TnLTFN~W2_S?6|aSE<29wEs+SO9TB
zfUBAgiCnm6VO~PQ2+%7wd(z20%_E6)R3pK4_;k&{spKnY`5Fu(vr*HzEjq7=Pf?{y
ziDtEh^qA0*l&N*7=b+EEGlZK^1YN=P3bg%ccn%A?deb->hC~0BAyE{q`?=nwV?(;E
z;Ep;~s9}Vclciep!Eys(Frd1^j44NcGLGXNsFcW&pTxB$WG>LOp@f6*^lPXcQ0)Q-
zoQ8t(O}n#Vp>(w?8lzg9hv0MjOPpGzFKn6SjX*5GhoTn7Iw9*j>xAcM7W+A_FBg|a
z5bhIxno-<X5HsEQQUVo<-wEgi+zyZ{;MN_w?1RH4np%V~md73JVDkBuJ^CC%SftoO
zj6xS{2F@nAX(UUgv?__TYC<gHNe&;lUAySqXy-!sQyh!Id1tbOp>4Mpx9-CzpLY?F
z`=A`@Mo2z|am~m6HY`4>mAKrU?(@)BV=k*RoaijtPbd=iR)`Dcg&4h60Sw43jCiiA
z<@+l-z!c6GE<WLvFp(pynG#a3m=bEJ(3;zTD#k_F33FUUyCD>h3QqrFA4KiwgBTk{
z5KajhX0Ch%0oT&k>nyD$fpWYE5oEkfoE@1zFfAQcRJB(YN=N!jT!AWRA=HGg5-hT2
zEih7yjrZ|e;zhl!`zPTvP8fmg7uN{th}=LE{CfE6*J1uQd*=b4Rdw+Ho52u~;R5$#
z6(P!A;zB|aASNUs2}{K6kU#>FgpES$uA{iBwc1i`wY64p)M~YrT35BTYTd0$9j&%n
zAxHt&^Z)+Nz2|vOZf+R9ZQu9vFDLmvXU}`?x#ymHhQG&&J(e(5-mkeomK-U@Q%V`!
zMSrHP!8beC_csq+f9JaP;hB%M!LIj49c+AW)bwYNmy=sQ0h*jIUz)UEz7+d~HQKhC
zFUW14qh{tOyV%={LxU4^Id|aR>~Y`ThhMJjPfi=9ufYpj2Gi+H^zpcY!Toove<jtH
zacYyfm$d(V;GcG(V$o7wo0*}9aPE6^Gt^g^GX)st;K|rL$gJkmdrYFeFmH#vSM!Rr
zcu-IY2}j%L_-9DzDMBUBV6mEQ5YW;&Gq;%Lu!LTy-Pc)#Q|3>7q3T-ysyf=vPk#MP
z+Rb(4RhO4vjV3bwVC>|`yr<I69B*168$`m|_{`wB$@KX4F|~E(M8L|zmWA3FhC_h#
zA~rS_6{DWB8o1}dbxh!L7F#fs73AbFBh`PWpRMEu?gsJfQ@Bx~opZc0=7(q9Ic3s8
zO50wiA#E;Ga9)FnpK%WD5k6RZ-%xde$y}y{2M0U27<a+s4|}_M!S3IK>9$qK(5XM+
z_ii2&{vIKEZp>N8w)&>|Fj1Zya|~D=$#;Gx)^LO!`x$WUm=VAx9c7$5QkpwqraK`(
zXVlm)1N{n)*8Gj+m>rh(`Do6v(VQs`w5<0};j~+2bm*RLW>qa)n`##>(*-k6S3l5V
zyAQM`Q0e?j?GejelGupWl$OVwYI<lK=C-h2z5V(HRV@vs-SJ<2J!iLRJAFoLbk!9K
zcHIoZNzAfos9`5()_l|kTRH~IUhM^$rp^@I;9!sJATD|l^e;?{tBw?5X7Qe=US)+@
z(-f=V6Nt7_we3~V<6xeVvDc%fBKcLOohz<8K5S1{rCc#s*+`7#YbG=WWo9kv{f~Dr
zxk`+-2F;`&Z9T6cq)*9HpN^Q@STAELqn6&Y^P$R@8<@v3?@#qwRK^DXdaL4DSFamR
z=GsA(;oM-7apJl#Q?C6+@5E%THgBFh3Du|uFFL^n!qk9Z?hs!xwf{%6*;v@qq<FKn
z6V*$L|4nyQFLl;Fn9R)dtM<DItK+9v8f^^~B+urbd0RZ>NQ>E2i|Z4-HrZudOg%NH
z|54J3Erm%LX=m3=iIN4iEoRYhRfU<5<hV0C3)%Qe%|MDKTGL*cGtcy9ZI|!_z9@@m
zce+$bHwrVje%dt2PF-vtgZ;dK`$YXt3@|b;x5}>s?7ymQ-Hl*TL~sEVryVVdRhvp5
zE1ocD9tQ&9a<czktyfC(e#hna7f+ihY4lr}Vr2H#^@BC@v4XdM_7@)*>f3ZM$qc`3
z`axVDhO61Y-=FXm<;%|d;$pO$XO`$sX<bH?XX2Z{vR_ux_~*sybGnLw8H$=0I-kZa
zV*J)NkG8XhC!Sd5$S)cZx}h<q`Pg<+<H2S)I4BqO3)rVh<FRJJs2Mk(RnPlkGatD8
z%FOeEg%P<0Ii;h$BTX!J?@Ja5<A_&Y4iGxVk2L652V2r<=w#5?#DKitkI@5&=@cu2
z%>#LYM>#sibXci%>?^$M>Eq5|k7KhdF)u=V{$-SH0ESHiRe@`R)X{%IQ^sl`KEv=*
zsPB`@*oV>fl8n9fDQ38tD@j=;&K&T&Gqi2YtYo6F#xK=BHPtSdXrO@xwWw`cH8py=
zzGfb$aeX4^8tB|>wb7aZB`*q>9$Vt_2j_t5QzN-aT>rqoz4E@TJSRLdexQS{?PU*b
z@n_Rvj`XneQ<Lx4!5~sF^rkD$0s%j$i24`Y#XA^^YVo_5rkM){q5KVsdE;e_B-reb
z<hOa*HWAXcX}y#VnPho^vt@C`96tIob5V`7?99lHT3MbPdd~S9AnQFs<s!Llc>Xhn
z5EBPon>DV1_ry8bZUDT?EsOaRDS}fYW3<~mo?1BNJP>|82%0PQcw*ONmhTnwrD#~P
zSI9d0oGcA==yag6On+NaKY$(WXlYwPI$k_3f-D9x+u>YpE$w%wyX(jSwtJPGUzT53
zm^ZbE-6PGGw*@)Vb4p5eGwe!y$uctIZTi}72Qw4-{u1G|89&(-|G`+Q)6S{w;RFg&
zu?yogY6r~FzM54#s9Low!;JJWA;a9WX28&<Ov8;<Z8leQYE^K(gUTPIDKUac38}+Q
z=PfbI+xHN-Z)C#)I}Vxbv8qFnOr!A-xL0R|SK)*gRrKJwYdm<`u+v`{W$HSQDB3N$
zk<<%w=pzX#E}JoCblK>UWg~_=u>@Cecl;M+wGScepC<#|xL~_G|0$$0ao?6ri_EUJ
zd}CZ#W6s2N8Z3pEtGy2Go!nn{a-t@hAyQ*RBgH1FrvFO>{#TF0V7LaN{h@36I-1?z
z%r$AQtv8KDRsF)MMa;%=>Vg?cG3BoKi)&0j)-(a;&EBYVk=mq8riuH&c|T&;SxQ^4
z*TH8Jy;t-7h4I!hoyNq}Ky&SMK%vI0%*W2eMbf}+DKoW$dZzRQFAl+NK;87~M6$+E
zJ{kq$ph(iFb0FKs7ZDxFVG0+!%N695oi@3stR%m%)WoQ#5UT-MD(DOU8*}1&Bm>tv
zWXt(P8Mx!SB9GR^>?Gc=pkFOiLnSoF`qh~&$rqx@8q{xjtY0ars(uB=r`;X?w9>3$
zLrSuS4<9mp;_#uofYaeJ3;4NdX=#IP5a@pnSrBWpYy7}i$-I`qvC|fCau7QvXR@d!
zHfCTfJC9ALhK-8lv0?iBx{Af~W7AB0!4~DbU=LVC6dD3!u#UG-y}m<`9Z%B}_;wI-
zHz4WIpJ+#0UPNM9oysS>+=&_t8EJyx*o^8jv(<;`^iXcmAvysXuStJ9h*}Xc_uoW4
z!jCgL^!Djx*;6RVevXsz?rM6&{&t$)MARHI?j_@sKaJq4cQ|Zx?9>h}j7pY8<<VCy
zV~63ne)u%Xr&b2B21N#yTVRS)5$&EY+rjMMIwYb!nI14%bS^t%P1@*QXRq5lwy{lk
z4LS5<v|H}m>P1CMc%Wp>czwcv5ojidmL)F40IDnz4=1P~-S*;h`n=gEo&m1>vH|S!
zZu3X?Qiqc?HknmL%r9L;H{I-2Z%!M>y<@^lqP?FSQw@Zj9Cl{x%~>0MV0ynKF~+!-
zp?JO5C2R<kt^QSC)ZZBpweS6Kb2O{Teqil?H69vd#P@IBMw+xCF1zOQYu=iIP4n46
z7BN&!K-1tv5mLU6?&R1AGvPOBe;j=Wrq|VTaM{T*7M_%p(F-i2h1F>Tgl9aPcYjmV
zB%hMkMWiJ%IZ~tuJx{cTiau^*<AV8|_<}oa|6f<LRO4(B{c-aln&7nKGjD$84U(~4
zc5&e&tN)qWzIh~H4E21`%neR{)!V0b>7^H4zF>ZT4Y8E->7xHY9xI%Tk?cz=eQo>&
zofUth5jH_okHtjVk4?syV-<{f=|!lGKYhI6Dcn%c40Cz|dgWzNt$FLv*oiw**2bUt
zKA_ho1|C_<hhk2}!b%MZB%aA_-0Ki4`+Yia(M_A=%V+TFaZ)h&RHm^&^ICRFKfOE;
zIJTk5%skMcy7mKD8$)fbZD(b8-rV53kL%nuYwMc(E^u!KmZ%bmUHVn8j<mKq5={eO
zWx-BF5&d31%CjA*IS$(NUI<tH0Chu?U%w~?UN|Z0CG3>cR8xIqELKEIOykQsA`KF$
z_h$AcWlcC$DRy#QOG{Jpi9?2P7zYR4v43|}9l<YJI+*9}kc4gs^T;_2jq(gsOb#;d
zm_r5)VFOimtr{D2v9y4}Y(~!Q!G_{vd6~A`*!%nOn;td!V?Zos`{3%2y9W-CF|0`;
z_hw`unm9pXw4Hk}fU3*tTyFmhZuCW0v3WfEO*J+n5Sk@VN79Y~`-86yjS7=94ves`
z<TRU%hx-fA<xPcH?Kstjf4L=@+=x23k4~&=yJo#`iw1KwOq*#gv_F5q9&8Zw?wpU$
z#2kJP3C0oayS0XfP5O4T9<Wza^I&;gq&4Y$;pA1jMn$Rqq4I44mA&)T-@c1-*%-#2
zrtL+zMmipAVd6Q!z)Tg31G(>LUaSY*lPajTFJZPg)D*O_(FNlASl{YHYm`K<cgbr+
zr`JDXPTpB78zgv#>E(sOCU=RJP1qPr`ux^O4PjK!yXrK2y{x~)8&1rh=i^W4C^mb_
zsQ=&YEC}cAMOiarUd%t#@lVpLz|6_gtjHdme0Z9VP+G|-Ta95k4{v$fkw0#>_WtZ6
zzJvH|$F99c*>oIV@c3`<&Bo`vZ-u`{1?Ru`a~9E<W4ui7gd8O1FCT+V^DLSp(^{I9
zRl0X((;rIsQFp+UN}F}y{!kB(HjUEOa8R0AO<^~5=0U2a&RI9UQ}?j}_O1;EUirRm
z-$<QsY+M@E)PY&%TaiD^YtoXOmPHy&BSzZ4tpBJqDa;CUuv;)Jtln1}gVEjqotzLH
z#bbw|Ch5!{Gw+90%bfV*e&-9{56STv_5B#53(7ycq}22e^mt%UQmut%3=S!o$h1L5
zMKr@s?Nbn*nUco$Z+ZvX@zmVFl{IE?M8&30R`f5H(YiBK;}4ngkkMJOtnFmGnwCXs
zPRQ^sy7WR3CXcsCe&Pw5F~&X#cL(`4GuVS}fj=KeCWHNRNz_L)2U`T?5)LOAsR|}2
znxKqJGpQ;VF`)Rka66o4Mfw^VoMCaV*qpw@$fdr-n&Q_E3FeZtpYcSDOyA|XW|r64
zamfKXP*>B}k98~)hQ68naZ(kp5!M$5P08atnCHOv<?1=UyjbT<u>9XlBv!@KR2VvG
zEbLZ4y`2^JznKg}`uvtfpAh*r!QArQY9x2T{|+0=o%r8rqq!6RJ8eAipEy?}vv?wJ
zyM?>~@IW?Q9{a&sdz`8NVm`#;#fTg&NGO~zIcIWV@k~5snN875r%fNi6AxW~uuAb1
zXuGeR;t82qIk+!i^lA}juJbm-2&FnmiTO+>{9J$7C)h!Z&t;mo>yP&8o=<%48=!rk
zNiqGYjDfMj5~+h`z=RV!etC>tX0*c$-&xESxnyT9d&g+c7$mcI%<vfJMero8WbYZX
z^GsbutU)ZV1HNZ77pRGj0P_Gi?ujX<OvqZ!H+XGSGZ!<?<l(GP%B{IRHewEk@Gh>W
z3>U{5*{h!)Q4?FzxHwi(p(&kYrJ+KwrF8{%BVvssC6A;{V!_3nIYd@PWU+;fv4!*W
zd7SoW3A^yH6VH;x1cbzrujVDSeD`KT@zQ!|j?JmBjm=ezbBS>-cT1CAjTnSwY9wnf
zIF=&T)Xc%-%_MLMac}@CRL$YNY$;y~7c*6JVPgZqt6^j#M)JV>67Njaa*b1+q}ohm
zdPg0><UV$|)y5~W`3uQmbu9<Y;I6u!t_vHdG_kn?Co9Jm*H*{aa5T1f5j0k@G<Pv_
zH7gHUT|IxXW<)QhmheN`_~D$4MqXAIH@2`r@qGHm^Q&U@)ocn_MUt8;Vs){)rY7>c
zG*(3<O)>W5i8aO=8)I{*QcLv0y|9XlvbZ8v#o?_?i|1X2J1Mrfl0$6Ct|n+uuGI~5
zxZvz;e*Ez<eoq(*qlkcu8*4tRfjrKyujO4z{VO!{@VtZ&satbni>r*(+(4h6!mMt_
zM%xAv58uftG~%n{s>PO4oJ+~p(q_ptN_9);K~=1d%mJqMH`Z9kBtN68Ygs}<xJb=S
zWRhU3=G4dLV$f`?E0(bH9&K+OwP9{E|MWkaINk_G=x3yUM(IZpH1XdU<J(!&G7j&m
zWRY7#jA5q5m5c|_?_>WZV5ETdl?ZtV^7h9jDinJ?FWyyx@~vVYD1C@-sg2b&G{u%u
zkV_jDLJKURa`3I53eZf}nwRqRjY`tIlrNx5wfl*ltmw%VyZ6TyR5Sgh1*+#DLpA$P
zaTMVKDip`pB6FQ9DS=w9Em>_~9o&+pYG7wY;#sn=R$okTgS*<sSS9W`|2x(=rxyRU
zu_o$CQ!O{m{90}p=Gow`vAU8M#M&4`C$S}{`LBgJz*kS|LPJd1TwJ*{#zu*Ja-eV;
zD!EH2e`c8T6lZXx(jS0l$_II^BpzBX<oQ)taF&NJhK+7}gos{m{Ie3(-_X;>Y(Ajr
zSlSGk{cdOsFx4in!Ndo@pD2%dY|E0MlY2M%J9p1dSPt%%rFSVa1BO{4%<l-+qUhtt
zAPz(bPO31kaZWf(n7&x04c^R<gTBA1lV!I1W0DQmpP@f?pYlH@_~&e#sD5Okoesja
zM`OeWae%{)?3JTII;25jN8#v<2g*ec9W9Zevhzv7Ur%CQsLea0RynfmYEwl$+fnW$
zJe}td2%b}Vfur+61!AgzPS0+tXsI*r_a<Py^4d`%%00G(F)-CS?fPbBSgBltM+~cO
z?1VXuO*AV-emBC#H;7i$FFZdp>|c>M)kFo-Ha3mFYEBiSZ!!Ok+j<U$t-Q!x!)?$(
zr&w__XsFjk&9dXxX0Kwt+R~^=8*~+!0!5%S-)06>+k9fdVtMwIvXjc#{*6|`Y+2?{
zVJe)@d^kqX?My<28dH$;p)_)6zLy2p$fjNCO4j4#UBQ<b9%EEMZ3XS$1i@%cVxEyd
z>=lg7*#$LzA2*mF=f_NEU9p7ynLA9y-JzG#V45GxZ}c8#Jeb<Y4W*X^KU9zXVuO=C
z%=NZAQ5ru>c*q1ZmJ{&@>t^gELMQYfz@R<`?o70%=qeUbpHwN^y3-9F%o<U4xWtJA
zFnovET1UecpA0A|AB*eh_E6!un|y;diNs6Dy>12i7RijXO<xe7KX-!5V8?}$t(V_f
z)GZcK&+Qh1#GB~fF(-~@PGdH7B!W7xK`#t6$IWjC)B$B{VV#_+cMh9pw(TuiSTmiW
z?gdMlhqL>B7WI|^Af__=^BS2q?pta@c9t;spAUUIe<M`2zdQ!b*6u`^Y=wg!EYEb#
zCaP%Ec&S~Uq&_F-cNh_yIG)~YsJlz^qCse9*nq=A<j%ge2A^<!XJ**j4^8XrrqVR|
zhxn{e0B7?QrAF|uQ3J!}?>G$8d?hnu8vI}@_sRZrIVVDMl{H;R(?SO)HjZ3m4z$z2
zoN9s2hGTe`kf;Z=f*tkmkMyRSX_d<sETWn*wSlw-J5tfYsf2lw*<n{UKW99BW(JRz
zA+Z4k84Dz3W;86R;IWIcB!gHL6`ITei!w}Drm^?U229CVRNunh?h?uR(Y%1h*KeSM
ztrUrumXF7-lF(GK%)FZiBca(0hz7e8Q}1YibRHL#OLySl*mN_=)9%Q5D)A)ua92Iu
zxqH>Cpt`Gd)=;V6Ci;s&qBd?P+`tEQD{+6ACc)%Bd8Z68hE!MW`N?M)^&gVHP1U41
zHUpJZ|K!H++O<^A02Y#%!sEw0{3#+Qt>)(C1CZHb-@5b5nVj(6!ge+KbYOShH;GFI
z;rmGJVX9`zOxN}I5VjHN<-v>^xQA2XH4#tpa+(z~boKPTLRZqcsL2K;H?dOG-XByO
z9;P~W*2bw?$tPAF(2%I_rtHk;KL1{5=IioAKG03_J7`f=B#1Psme};Gy^5}iHpN<v
zwj*K7z1#7FPUmhIP>~TEKAL^|V*@x%D1)XXi#czs(&D9IKvhO;*a;_`z)_dON5^vK
zP~b%siyL_TJkcChG-&8>4r<d)hcM>^oyc2pMeO9@xjZ&D>tw%)(dU`LgE=WYNTpe)
zFKd;Ozi8igFl(Icn$GUl?POYAE%{_~w;0ufRatzpkq>ijL=Y5Kl~^UtFhXCAK0A3P
z6dg^i=1jV;!9K@tnuFk62eARFfa>G;tBw=TB>$UB1`*T|KvqSACi&2JV@6V)zZTK&
z(wY?FsvcMDp1g$GLS41r4=NRMn@1Qn%{XtsdA`0^(kIpa|J>V&y9euq^RX}X`=)*w
zByUWtTd>s$8bsDoGe`SQxAndVdvojfZv~+eT#9YY4D+xGO2piRwajQXomfuqJ-GxU
z&3e_v7&HhEoDRsFV_<6ff{BZVCl;eKOBAOS^|Kbv8nklg?Afy#k%uEMnKfwk>=g;u
zE046V3}+K89Xa>jQqc^mSh{;*)XazoW5J4wmCY+#RxVO3df*lEZN%?>tNUu=Q6baz
znQ2^ZU8PiN8mi@_vU1kYK_g}dK?MC4j!N}ExEU9!e>M=)pVv2X+Do0<vS6Wc(!659
z%9@o;XRjE#a@fk@HbFsXen;OtbbXT{=FN>y^o&9)EP7xjxs|%=EIe4EmrWLMt8c>|
zM|xGzbTn;>uGqfh1yC(h6Kuk0Tv25A`E9nz<u*5+c}43VctUK%*Vx!HtH72}vNx_T
zlm1dmg(!DRlg`|*%%{r}Wj`!7fR89z%AXOV0g=%OOsi?2rs_T%v|vTHS<yj{(I%?U
z@3|)KS~+VX@%|pz)|J)E)~}tEWHDuE&YW9RX}vSK+FS?oDDua=<)yiTx>U0=Q4*Q%
zv4*xXaa`aEbHK#P>A3|fIU(3at|cX^e|my(v-7g3r!0NXA^znyF;q1No)yHf(fK(m
zeZ}}38{Enj_0?xbg{dagzm5Hn7FNwN2aT=dcl5}WY+A|*T9SsXG^YWtJa%?aolR4g
zn4+xou{^P6APrv7q?@{+vk6tj-6qz5iaJ-(M9q1MvuO5pyU|?;ZYX^(HE)f^N$t{E
zD^$8?%UPCr$uqr)WOL2_DUK6u)8an@{Wbc`VVQ3NV)V$rt@HJT+-y?MOLTB!Yltkk
zRhWof$4R;@^>y22<+UL;Kn-w)&8!J_z8ZUfKBUHmb?>pwBVAad@SUhMf@!qwi(A;4
z9tgg(0v2+rvZ<MNQsIZzOzY^loKQlSl`e{V){t?y07uT~0eukv-P~9*u9a+rZ1c)+
zW3X?Xva9>sf2R39^jI`gWlT)f!QpSZxp@%jgkIZ0ljq=VpiNOV)y^8Olxqw`kB((A
zGl^XXD*2J=CD5-y%~e4rxecfr+LD6vd#W^1Byq`5oARQ|9^78$WtPXvK)#^T;nL86
zJut=e>XI*TCPxfxQU<*3lJsC7h<sX;nE#p<Gv`c@wdMtj7BYbEKUDo49sLM{2N*2}
z;n=E8drK!Q=!ckS822TedVva(sV0~fn2~W)Mb))zWDjy)TsUTo)o040=>wZM{V*C=
zOsZKrnf2{w2Z1G9OM0kGLsnJs_YGx&7Gr!>Ox<Y+MgUD)$Wf*%N?D_)0O)eM&rmZG
zr+8WtE=ovmsEaNKi?}SanvR-1>nvCZOJNx-2W=ge>F2S4J64xE=u-HLq0OaTyrM)e
zm$NEY&Rf~Ia*iAYceUS7H;$IfTA{jN?)hM)+Vlks)7WNr+2B}?`GRVO4H|3A7&7BT
z{)$Pvj*nJfY5tOZgEo)1Wh9e?aEf+pCQUwdUay2KhFHiG!1Qp<84c4j&C$^%rs?)8
zjK;wH7Z(N%5W!g;{)Z)7Bcfi^<QNf*gP8ZY<lA51G2&Igb+4Lb?qZswz=ucmq;*#<
z<%mH^oO39N0}um4orRcC`cBRHh{mx_An_G}KXX2!Oor*l4^b+HzDKdkJj)G+GnC<<
zk7)Ib<Li7xM$S0VTfb7zqjdElz|XelzkaxHlgf?x=F40q#zm<Q!HGvf*8KTG_CPuF
z#%9jXFc-tR2}Vy?zgW|f<v&}qS{61;;xcijqWRLtx-AZ9<eQ<Hva>UHd|8|<hrxIU
z#lOSh3a`zPDnSdy@TJ|d&r>(UKj$K7ar`Hz|3;~i4BByfEmc%h%w)X}ENDP<P=>lh
zp6)g^(8;#X46yj^9fxS@OXBjO!}LXQsrjU+PiN*+37<vGHyFOTEaiip4$Ny}P_K#I
zT$`Gf2A8Qrso;dfi4?;}c64$@PKVw-*Z=6Y{@oKT5+QKDMq&+`LM>?-HbMt(v@vv|
zYkU62s4}f|(>CUd=5q{2bx!Df4l;v%4Wq2d0CT(#F5DDfdC{i$$&e4yUtRV_8y>~H
z0nP~QZ4%nXPY!G73AaD~!#Zy#xA8xG1nFaD7_IJnwo-S4DaxDU70vPZ$y>m=OCCRY
z^Sz?^9zS{6HC_=&%FC`sUF}KA%dSOT>q*MX#v$-;1O^jEk6enGk^En5WIkfJF_+|P
z0&~s-F7tikE_;H}29oi|(jY&)GW<!C2+x?07%p@D2Ij*?8*@nn!*9a8(u6;{(wL*k
zBWE?9vPZV6J>`u&aoRG9WnR%TkDojez0~6;uhA=N^!UkZ@QNBde)8seMRPrV^6I^!
zdXJyH7O$wq<0p>;MVmc-^6I#!J$~{kIL^xBC$GvYs`B{B%f<&t%FD(rNXpAzgnAKU
zaj2JgMN2$>@<=Wx$f8*66)pA_D^oiVZLa??>SwSr(7pCM@ZPq559chJ=K9DZXt=M`
z4=@Xb-0<4OKYUnO+2Y3N00K`XEyIVJ18}rknK>K8|D0gMENK}dYr1&;7ftS8<6e<-
zFq!wv4>rYr1CPStxA?Nm!~pcNyDcCc{SQ!!wIIEay;Vz=UENPM#hXH0hhFAW1H$&Z
zqgOcTKi?Gp_-C8qN8i6GUJ6oQjeL8cmfq#w!2LVe@Be^rmmSD0$aiD^!hO3>^Ox}R
zs|Wpf&PIOhp-u7gAqNzHC*&o+Y@d$f1GC<a-E+U#6j%ILAa{bir#8jk{LQ9#Hu3=E
zQ;<i)hBr6GC%w@zYj$EUzkLHY_XpvuMn3GFP4SJdQ+99rvef4U>hrOi0uKgmWY-a+
z-XhI`zi!Acpzp|SlzDxG`<MQ_dtumcm*B5^YHPgjN8}l@KiCu>wr^|vx!$eu3%j(&
zr@(WcZ;JPZDW6gHpKgjj_X&EKvK{?4^jp!xlz*b%vMK&D;XSusYy4xv>C+AMfvxfD
zKHQX`E9xC_-9K;(*3Fc?TH_n>GpJW<{N*04@d4PqLOLbaZS;8;yIvoYhRvJeuWs_~
zuV~#AzZrGc&cvVIYW!T0=F9TGn*53@Qd;BJ_Gyh@h5zT`uup5eH;nJz8vi3^hm(G}
zpG!Esu^;*ce)cC{<V|Tz_gdpmQcj8V_9ZREE1ugMci0yl+#3JxL4H2gbZw2#IIK1P
zokLpVR~*_Jzwy-8_zBP%{xG&RJ{P$<7rUH)J>MtH^Cq;$vnRI3U3Ge4YdoDe&&0kO
zMxsui)EaL=&OQxwUi-8>8kjwr-`?)uk@g*hdEVq?8nO#WKWVqmg^uJl&mWzi)}&dB
z?Vo<}K!n3-<A1pO{A6)i4M!5P%*;Ob)XBVmNo#z~Qql!OLHe6#ywQennD>HMV1MYc
z*7yqCi1f34^~Wn(<9~ujVIUj|>5_3P9$ncQKLfHcyL5SL{08I(_$})0n6Jmp|0V~W
z(;Dwjel7{*tW~}~i}XE+dK%P2Z#Wt*nT}i7i2F}L>du(Az$*B9;N}|SAHw7CDhvgM
zy$O!TPnfqcf6=k)yqf#(YpwCy&!rq8A8tpV4Hf6pmR-;quY_f=2EKD?YkV{O^0L-=
zm&>Vha0}+u7q-R^x~Mfi5%UY+Y5exMxHY~6dVIY#ejB7-(i&d`8=(_v`*)x;PbYo1
zkd{|T+qK_ljlTscYp7o^_M5bMP<m}^{8o4Y#$x^%+;v53{IA#@gIPX)etIQkcolhp
zIaiYh*!LRB0rIB3@ozzC-b(lrh+FqwN+9h0_-6c1NB!b^@x*<eCO2?_93whGD#%Ru
zqSxv`_WW=@3WED+m2bZBRA1g^^;S0SWT&vC>Eb(d!uHK&pB~uRG)WFjdv*=%;>amM
z;!+a{l+RuPau^HZ^Bq`c%Gdj!`|Q1U_wM`b)1yb%u6ym(jg$D~%jP&9Pw~opgW&hs
zEMKu9kT;H7N0h$|Y!$noR?jO${iHEZAq^?s#&xan)pxbV$3YQDKc)1IHr$VS6O;$`
zL9j*&3R>AVqIV!Gw-WYzy}^~ui8)lhjsJUUNPH_K^u@;&wyfMRqz<RU=GVIGY!$w|
z+R?gdYrHz8t?6nTuZ`!6Ajb*)D(lsiL!nUK*1a!((N-J(A{0veR5vtlbv$J6wN0fL
zwhsj#kFN?$!r`p7@dWmylQOl2$hLl4BYS;^4)*`*=MU0iAv4Fvx*@&s7#cA&0EtrY
z@8R$@lKDYB_Uh89Q+j%OT3T8v!nO|y`KX*Z7ytNoAARwspI^7Qba<~hf7xs9`FG5D
zaN*|pC!e^b@CU1kdrY~suG6=F{OY+!9Q3;lvlO2%{1gugbXImt$XMxSi4ZUSbp22M
z(f@Ddg@1pc|0#Fe{fKqak@>Pw`!6rJ;K_<`9<4vgvQxSC8eS@GLU1fZJ7MdewV>vl
zYSq4M6K-YG;9zC1l$EW0SnsV)hNqTD?sV5Eg&NB44n08r_J#f7KrbyVJ-t(>&Yin-
z@mngjeyOQRQylqXwJ)jtc117^Bw;izq4E{I_uX&*0}kxd_n?ChIrOl@kBE&JIcoIr
zV@^2nq?1n>d+NB%@mbk96DCf|JuNSPazSCyl;RaD&pv0>>aTw7-1E-A;KGY8{<`Xo
z3CUETWZ<?ACQW?RxVPz}!0Yf&I0(*!t#7r)k3}v+wrmgdlD&6Y<C6Ce<Zj3(!*Cb?
zhr^k07j7&M1Zv6aLGlZM{1ozM&<gLt8_*g5AEs}PUm4;V^cJsEQZ2Jr0)CC`auIsV
zGStHAzpSkIl(ul0y868`jM%GNMn?AxkB6Mm?&EnG89g%g>Ct^3qo)>SWc1AF)w^de
zqwm$LcSc4^Mrz8w$cO`a56H+!%}7hxH_hlX4n*q1Um#K?r(+bD^zVwkUq;`)`yK4N
z=z2^>#xWUP`|Rgy_uv1ZjEuuF4m<M5PR8JfE{9}f@PGI*{2-1v!bq`<j6;p$DD#_<
z5qheS(az~H)8KWLJkIm>lDwKbC^eSmq3oWHjQKw4<BZ&+GjciS40RnxVCmjh(#P$k
zd+w;Nl6!gmj2!baj6BX8*cJDLH?%8(AfJ#ff2rPyoh7GvC#CxOlZ|=0cZxCZ?2R@0
zuHLD}KHbYqj~RdCjhyaf8M&*MZRB2Fj*(;D1e2a|-b54sYHw0^g+J8G?In4fcUpI)
zv)s$;C3&@%Z}jWE$wu#`6!ew5a<5$JCdswRcZ~g5gZ$S?CLc>p{(E`LjGXE%56WYO
zk-K^;1N*a$9P?J0e023z2lij<s{EvT=Nh@Icb<`ZdFLBB=3Nlv|H2@gXM=Kn&d9yI
z=ZzfmUJA<n<)GYO3CjIXCSNh{bt8}S-Z1iN?=6$hnD@4k$9eAr<?y$@Dv$Nv-;Eqg
z`M}7lQ#8-2fn!ryAyK9s$-R&`<dDxkJ0zw5XZw71h%Y`n@blvaAN<8<hxkWsmoegM
zzUs4$GRtKAO_ZH5w4_>l8R+{S-zJ<D@xG&)`Rp*o*5G_>U&umM_A6Li&-*dook<Wo
zX3nW`0z=6Qv_JXA?)*2r%q~?l4wLr&0lQim;h#aSPx-F@kbMwM*gqSh&EuPe*;7+a
z%Ay<uek1MKP+wtKCt>fwM<Qik+o?PGYiZK)S1JK>X09e#5D5D*vS%4bI4x*wbB<FY
zd@hG?;qTb!9NlD`u)n1yfL8e@LfLc9v;iekvT%_&M@SO|So~qbwX)eyneV0xYli5g
zBF*}+Rz^1G<|M9>e;L^%JmDrd`G;YA|1hD1MWCqgr#UzJ^&rN=b7r^APCk_b`&og5
z*{m$bLDGJf?_f5Q3`|W5+xz==Q78PB$7TME`eYpn+p}T*5;u*qXCg*@t^aYr55;l7
z<XN3OR2D4uZTCGw{#mnZqxY|)bJx*nH4{m-c~HB+iHEIc_y(K^-d~c9W0qu_R49Db
zX)c;mwz%5g3&%+uO4%z8?Y<M71<=NUu~!A*ZZ^CAC%61egzryvNS+Dc1|a{MN6r@#
z8kOM41;;_K)uk2_vk58lVksfF(FpcOW0A7iZv}TXO^$c!r`bQvl(A-2xOP&z_S%7-
zS@j%W#>9)jVWPEKRMk9O$!nr2&YzQ*@NJ9}jw0+^YR4p-y!Q49uZ!ex2lh-MsIPDD
zfcQt!QYL~?2yPy$7bJ^@9cC(BJE?8{nQFuFPwic>sSItg-zHX&>%{)(y5#6(AAFuK
zV~KyVVF)6Uy}7==d%q!aKJ<se3${lelyD*ce&z^9F`8W`lDTl&mmoz+JE_Q@-9}vt
z*}2m+Ni^9^1^YkQ<AEyt)mX_e_yAbj%yf;~L=h+LO!(SA%RH?3PVMgv*~Wpk*k^y>
z#>$TTm(`k^OF?KpU>nb9g7(JT_dJ_w!}ev$Rbq$U3RW~%wW;GF``}JZhT{5GJJjak
zh_kl-<svv)D+t21Hyix&5J-kD|Jv1e4lAgdRC(tuYHIs-=-Zo>A$sn%bKu)+?!Ora
zXSTvT)idS<vy_sXG-R&?>Wm9jIg<><p77051y%ym-qltxnYO*X@2^c6`0bOD6>I`i
z)^>`B+V5aHO5JD`=0~&o66K>~7pMW`E~*O9Kk)5qcVf?x#!&$z{cHL`dl%Gyl|4;X
znZFot!9uggvb{$1FZ><Q{9Qpf-ln>3{=@c*TB=+J?ffrlY2J~2ZNsAGIz3HP;Ymc;
zznR%-6X)93HrY+G+f>nnf3t&I;G~Uz)0%6=0uRbX<^u@3QzRY)+@GNWXq!RZUjDW#
zsOazV{Y2wL_VEzZKV~+v2FN^Q>@?ya4MG1a@$6K6GVAWtdp0YCoy4LHp0&Yt-~Qe2
zx(M0>ov)J!)3qmfb((|F%PMQwJj}IM{H8tUL=(;Z33nP~ualzH>EO<(O=L6(#H8Q!
z{?#i9c3E;9(H^wuh;Or5FBRT>Rx60a^$O~nHau5XU(a^A4cnXg;$)!R^$Izl0SNXf
zin`kfUk!p{)Zs;}cWG{^)NVC3Bg<H<jc8*yqRgzca-ui=As$0K)aom%%Gjr(VOg78
zs(hUO8k-$Bg+oB?(jU6v+S!M0h@r!V2SZ2|l~pukZrY>{rJqNJTIHlG(_U*kchgvF
zre|U)u5o1B<IwIei2!{6#6m&pMo3r$ioIjUdHav>PMuUVtFBE)IIz#pD$6R&XDi+u
zPfG3EE5+nOcEisso+)*~)X6!;xmi+{=1%slb4p4wC+3vMtSFP6AC0?A-!d~hyBK@p
zJ|{n?XcA#bGdU--WNLBFWR6{vHa8nZ?u6VdwgE0IP;#z1aC7{p-P&?tgqhr|=)in|
zW4_>!&G9!6-W>l?kGA|F!c1<S=)n9z$9x1~N`C|HUG9u9ll{#dm|yFdD?JY$K>Q)@
z4C$@?%^jG}am;6-ZYJE{kp`DJ5oWTV)q#1TW1fY&<e<&*vJewPdTW1D2j<5Uj&*Y!
z>LWn1%YGrfwd>M>`KQEX-F$@lZIJA8Vc)iTYqz2U^KR57>*fo}^N~J`g@(8<q__6B
zbzuG-$NWmv-yz)FLR=ZrTl)(-FkkMN&qw_{>3$=`;~~AZ|9J=IcR1!Zp&kw6L%c;?
zVKeDp>cIRd$NZP5rI%Y5nY((czPkhSTO9N2QIFtSo*JTmNN?>A>A<|FW1faOXeuM6
zR}N)N94<a`bNm)qb@=9ZpCdNM?}U4g+8l5A%I0`4<dPWm2M)%~YUtc=b9~Iv{~k(0
zVIP40<sh#6kj2@@Y>qDmlZHSZj64myT|r?e4=dr%@D#}G-<79-cer0R?J8GOF;Y`H
z@rhAi8B<d9A+A^NeUl=x>KMZmuTy%Lu6&a3ws-e^di3m-mfk5Y{Xr;tO3}IdUftq*
z$M@-BZDh!Q5M-CVx_6boUcq-Qg7Kt37)5U>QV#0bi}C!lbZa9+{=H6&Z%cG%E<kEG
z^AT0reZ2Heor%L!CJ_2)x+Bq9mYq_2^b9-dE(7z;HEh$dexEj0>1}lXJDQYKm3J^*
z!Y`3_zxwtkzKjU>ALrE7&z;xMIDbLYSqqz67A;<~blLJ9g`4!>{@Z0q>C|b{XUsf(
zNB-&G2jlUf@pN9R<}L~*N$(&4`q#D0WMioYue7`a)y&b_0RLn>jq4-^!Za|qP-DH?
z#<1P6U57E)@i6n&$oo-a;x(eo39&=(p5rL#^M4e7REQnNzmxRy{^5^@CiAE86G@G-
zcSkTI?2{#q!yVb15zLNL?%T9apFi+vW7&QG<j)-;-AMrL<F_&E`V-J@`<J&Jm2aEy
zy<lY+^_vBgykMC_%USUl>~O=lmrhjD>QsLLm4>Vsd&j_*UuZld^nyL9baQ+FtSRO>
z639|Vv7sc|Jj(5}xK#>P`^iYm+K}FDtE6Ynik+sWPpZcLqI499aUl0=0{v>#F|cB_
z6oH+Tn%&`s9}DTn1$sMM#M;ZBL<~};2*fyKg=g)p9wQ^h@hkhf;As{^E&oM<ejIAq
zTmAZwUIEL#S0{cDF_3<Y6Q1-ZhxA>8$K$xby}n9I#6a$!4KiWNqjzAxI<Q}l{X2i%
z9Dnq0o8ywj$M5YPAH2Ug?y|f7)A8@}pY~r$eqAV<cH-HxkK^xwSN?H)9da+^0Wb;H
z$b663Qv(0RC9wJ>?gLm0>tH=R3md_EnfnD|Fb>LLHLQj8umLuL_X=)c9F)UqSPSc6
z19-1u596R5R>N9YFZm1H#IaA=5-(5P5?`CPCB7kjOFY&YeHZjy(eH(RZ}i>K?}NSv
z`d(Y&9)61sKz-nr_(oXQXG?r_-!1W?gD^W7GgyDfmiU@O@q5^o_|U`gbHtYTv#>UX
z-Tt^g8MCp-ry^$}k4Mf%&Ox4tJPG+U<UHib$OXtn$Ww^#B;?X9@usPSKaF^&Z;6ka
zK|C{w|MV^KUbAp}2I+tevx)ai;w-~oIq_GZFTvhB!aK=3opqhpdO!7E@HTtBQ--D#
zq%`snIKn&Go5j-4>%9BC7rl?YeN%>|6sF8idEzgG2`9t(?`(;0`l~NXZE3*n{|7#J
zcS~G^^Q^qtyt;Dz+gsv$Qyy{bS5Y3Dk#7W<#|TF}i}{y9VTh{;Zz$nNokd&<YY=i(
zU}o)P|2@pE1<5DirU<`9sO47Xmj&{V3FD_Q4EsAUyX&nj@xJJzxC#5-xcdls1}w#0
zfAj^Y6-FJ%zhq&<aLr_%jr*sO9|nan2K`}#qqMw>`j7A;YU@Vo-(z+iTn-BFJmlr@
zCUy$LWi$Fiv2&Z(Rh+2D2uH$59Y<zcQrA826j%kH!sj^ooIcW49DLrBJ|+%6Kh^U-
z#KESx`kX1=r|~r8F5c(yp59g*e9jc)O-woeoXO&^;^5PGJPo<a6Y+RY%#L`SIm+}^
zS7A;FzEC$y@%I3t@w8sR&L-}Q`XJbmn8=w8)A)u_I?0=uQ)&)y;Pg_@KZc}qYC-1s
zd_HqbDlFmH;@r#<ee%dI%bc2>%QuYdvhleE*=+pos;A35J7@gVi3x?ak}sNS9A(ce
z$ef&;RW>~*Gf(#Ux#NrZ%;F~iePOY-gh*(MI3=+#Gg~e>XLUkuJ|9vNN+;NoNrlr%
z)r@Jfo|aQQzOcl&)J7p*eqmN-es<yH%v_^3d7Ye@k8xRMaZW*|IS#OmK`Do)dV$I0
z$(coRQP#$wbP}I<CKVE!HP#`pQ;WwZ^reMGWFu)`TFl1y)^TZZ?&LBjjDlRw57RX$
z$S*N6p%>;)D^t1ieX3xBhe26kk-ij_c%_qzbd5?+*DvC+`~DfvzuRZzy-D?h_axP_
zKMVc#!0q9vZ^7)NpC#R#fch-#zk>N?sE;J9PjUCP2mTrV81;j29(;V4PdRp0E%`w7
zg>sAf*MyM=!+xH0b3f{{;0f&iggd2uYF5d}AwxWlha5C)=;)E7hZqAH59-i-d`^Uq
ztdb6bN(S9N8WZK9VJEV^;)sYa+gSSvONQp_3ri-jFYPe?qLQ1m9TgFL(sp!&?ewfk
znH(f48=b3AkeTnX_1KuUE@dF&K~d&PYi{wNVd1<PPl|jL$tLj;K|0wqfx8#Tk29-e
zcw2umFxM^0Jek#@5x$bPp|qGVleSSIXBL#?mdzM3SjC@EljqU4L?{6jZ#z5JU`(V7
z3V{P&M-R>|o~9b2w7H&444EZaxw%mmc*gIbsU=aCQ%eSQ=rP(y?)b?gMjsy)R#s6*
z79}0VVT*L=a9xgenVMRVn^l;dlb>5!n&0kTvsbxe8*_gKVT{k6NDQ2FSk3A<{)e`m
zu4JBD8hX%hk)B&xM`VXn^la0xfmX`MOix`s<6JSXacg`-{nmIdD4e%7-e>OCcwfw9
zUJlPTY>jt;XY01chtAm=_mExx3iHdLwC%{B^3;+2uEsBS3de>eeN>n-??@<}9f>b%
z7Zu))!rGDhaDH^Xt(mK~WxyhU4#k(XiwbZ@VeQDh#=D}>_bO|yp)=)2vWv~P9W&eA
zGTq%Y|GUE{dx>kQ`!`&dU3;5%d!I}1mQ9p;M{aC*QT}$t%%;`K>gQXv!nVR*Q|YCa
zu(Gf7e^r--EeC~R{n~IP+jQ?tmRsw8XY$U%vi5E|cBT%;Y11QF;aUGE|3|`x7mm*j
zG;C+n;+iW>QNlkh+`l%m|8C%Dzd#-w$O_XHszVa?!-3wxB&<7oZ`pDFFBWc%zYDXQ
zx5lT!WH=Ru!BKDkbb*&~<A>z`rf?UerF7}sDV-1NJpFq1>e;hrC+OR=PtTr5^z7X;
z{6utpn{OMuEyh<(4TLm^Q%3~iHeVcj<<Yt3-?xq*an_+vnEzn;_(9L*^qJklPY}!j
zckOqQ`S*S0?%O*MfqxR{i!qnKt^XdQu70`b%&cYm{MHxUhj#z9`G4=GO9ub^y_@zv
z@a{F|53D|N?;t(hnojBV^3D9ba`BD&->cuf*FJmZ_!WBv$=s{!)2Cdv?oWT{dXX=>
z_8Q;y$n*FK;_tHYS6z-+$<Kwp=u*^Wk@*j@)n#Z<Om_0_@IXHzkVgjcs6ZYa$j1lr
zm_R-ukWUTd668e?eE#w#qh8?XO9T5FWQpk@b+t4I+1G)>keC1qp<Wt<!mj{3h0={r
zVaU$TpmgI7+qvO}?M@5Av3ZbNrLhtu6t3b?x+F3|i#)8}+S_y}Jhx1&-mYzsf7#Cg
z3FS%gDNKn%r~;ek0@Nx~yLVeQYPpvi2^+uCBQuq!gqu#4r;XpHNBLDa64p#^Y(Cs{
zD!t8M(<D2^D^UbiJpi@Bwee-3mKY53TLHG*&Oj|Bj`AfhhAg*|qr{lUw#G#rtbHVj
zhhC)Uk<&wuo-Ry+*~{zH)rugrgAYH*+i$=9yu<u{Hl_#2W?wU^gyP`C_wR{)x1NW3
zd-v_r`@rtr0f+SRj*xv_-)-^F_xsnfatC3abdVp{KY}<9NB>30y_+WMPHBA9aVPWV
z@w*23l*5upzpLCpcwx6=j!v3ge{53ix>I})4crzl9<VLG5;x)aFOTro+J9So(8z7^
zugCs#TzjY=*Ns7((pz>X9Y6SX`!x3<|2B-jWhB+sOtRv78oxJ@_aiHlaocn~6cO%t
z+`j*fZSkkThV^lv9zYn@O!5B-|NW2n&v8vZKd#?3`Lgtu-ATuSMeWmU!&W$dzqq}<
z%xzrx$0XI(%-V<3@j*lyXPuW!zjd#0)MiABRQjnsX;cnjjJ%(BoHxQd!F$)6M5{i{
zn@xK=kM?gV<K`E7mwPvO*LXL3w|RGa_j?a}k9)uM{@}gpz2S}X4oa;~otJt_>V9;r
zzL)yd)K5}V(z>PfPV1X?L|Xr}!D*w?PD;y6o0L|VHa(414QY3zUXl8E>JL+E(;Cyx
zNc~o7OWLxu)oBl>UYL48+OpK2re2<QZQ6IzZb`c%?Y^{MrahjvFm+Sv@6#qSwEs#<
zx0L--4o^8Y<;0ZJQl_R<rYuNVo^nyj6)88S+?sN4%EKv7r2IbR-IR|~K1=DGdQ9rj
z)NS4e-qh4r(l(^Mm$or&Yg$2SO8VaEzfJ9vet7z^>7&zMO8s+cR(f7~RQU|`au_+D
z?Bx^`YF$81NpaRBFNYDoVtxxTo}u6245Jt)Gjg)Lobj326TF<PNxAviUQTvSW_Es_
zEIF&y%gM~jVvIg#LM8_=%dm93EXPkRnd#-^%*bV2J7-3A&NNvCQmICfb8<_3sbCu8
zj5(9dP<u{6AQhID;=Oc6>39V*AxKO~5oswY%4Nkw4ukW=IypbLfY^K^M%*#aESQLO
z=0pv?lPyN^Cz{0(Ihpyzq@3VLV@Y8a-X@n!EXh3`*ElLIG%GQ%G#W;}1LK0ilBq>S
zg~ci=e3d%-!XgEQElwvm=9z6YEY8R+n9An?V$UwdN9MH5T(Zo1kL<$fBof8c0@9}I
zfST0i5E+B;d<!Ao9Lijpz`USv{8VK<w?u{}H@+g9ZwQK^IA;n;oisHFy|j=I5d|}g
zbL2_ONwWDkVndujx(GhMu#i0Pp(F>_`Go~sdVL7+lP6U&eTAhtlZ$k5@L5cV*;A(S
zHAYeMsU(NRCOA-{@>Rf;$xJ0RzeH)G7E$78vsL}ff!&i#yoK4BrJ2T)xtdfgIm0v6
zgkROnLcXy~$S<58TogYi<RY^mixn?qfs)KAR@Iaj$}mel^est=B6YfcS(A#Dwfx})
zB{K`CO8Fxusm|t)C{``aFEF-zfhsjuqA;r@SB{Mv(oRVHl9m}0rsnJV6=oK2r^sxI
ze~*+XwDA)Pbz2o^J&&ZKJfh6Z<_0J!o-CWJ!pUSmyO82F4k+AQzjP*$cuFv9k`kFa
zo;%CP#9-u-EG{?Zd>b-yj=47}9>4le&C1Wo^eY5clBk1vmRn-9{-rT@I5%!~?o?d^
zBio9fm&0Y{Cuc@cZn4S~b#czL!n}m~w45wc9g8RA<*EoKO)n~B*ttOM%=&A$#V`7%
z&pJmfv$Y}pnn1tWF>i9zHk^O8+(cS#xqe&x9OT_aes|Z8+^6u|mu&st7ZJakChJaq
zo^ssE{GIEz#gG2hws_7B+v2yQmfj-$u5xSO-*vBWU44|=#(xd|<=)0ES?;64I5%*6
zmJ{a#f!cL1wdzr5JGpk+(DriewC-MWQR)q&w#U~UzdgSCgzfR7leWiWr)-aJ9J@Wf
ze%$u>n(^D?<=NZgLnmyHdy}@upUvGKUz@i*-ZXi8d|V;^M&hOfyQ!E>!+tvEGciA%
zaL&MPHg;v$m2Z!4s380*!mTE}TEdw_*u~f{+8*x(F&GNtpa{yL30A`zSPSc5Jv<8=
zU?X^o@ee~`927wltbuj#ENp~cOK<~4&;)B>9e63JENsw%1J)<7G$9zju#&fC4dGrv
z{K)HIJv<8=U?X_g^@11-g^Oh72<GRy+Y1CXybg}@l{MA#o9$Rg(px8#y^Pl1Tw;(8
zz^rL*K{i|9=oN8XguOB1rw7E0X8r>9*{CiHE$q}69WzYm&0jDG`$0RhcUI4vAo<x#
z3VMQ!8#LDpT5MnZWne_-#29SLLMHLEm7cZnWsMB_pP7ii0@2pmAJsFCv_VN#%OG>|
zSJIJ5zbT+eo43csur0oP3UWV)VJ7z#4fX7otC0c;R`{Azp?#fM3GXZU_4g#uwlx(D
z49sDV8csb8Y_%@fhM_Zr>syR#V>G|U*Z5A+nIk)VoxhJk5QrD-Y7j)BsoM)UbJ7o&
zb0-?=t2hAOI9}M~7AbrCEUssJ13#QL3G;lNmP?yt<0OTV%FZ5LV2y?HyAv_wlX%~Z
zPvYy2`y}q6HVpbCekf)e2PVy8uDx}KJP9`gU}FdNi7*{Mu32CFz2f*?M_8-T*A4z8
zzG~Pfym$L*>GvJ=N&H;QIw4ChN=GEs)=ctmF~1YGbztwhjZ)|1?;XeQW2B=P!lk)r
zK0E3#1D~Ui%+!1TG@<ZUR>xIQe(8=}hQrrQz!*~Eeo_K7ujo*akezNsUb+(BHfUYU
z9VEZHQ@epy5b3Vj2h=)f)LJ)?ov*YX>it12%Yo1b?EIyJQ6B<|lVK|Fa5w^Da3p*M
zj)J419~=YyVE|~n?N~St2EriFc-jz9yQlHr;V=S5!YI&Kuf};b#(M(jFq@O$WY8S1
zv2ZGkgG?9?S&$7mFaajQB*+DgCFVgsXk1VoG>vH%!4xQl5-5eKFby;=JOgHe7BI~M
zjSbF*GocL1p#mzQ3e?EeKrLu2wGQfGF3f`lXoUHo@zW+a3pD<yo113GjKgYNRV~j_
zP<yZ(R=`R)8_t1Muo}J!UxRbuJUAaNfD7RwxEQ_;m%ycP8C(wEfHiOhTnSgf)o=}b
z6Rw5p;9GD#d>d|n8{s?fU04g>gPY)H_&)pqZh>3jhwvk~4So!_!%yH2xD(dFU2r$t
z1NXvD;Xe2o+z$`H&*4FM2z~*-goj~0{0bg{U&EvD7(5P7z?1MBcnY3|-@@<U8TdUs
z3(vvx@CSGSUWAw6Wq1W%h1cMZ@F#d3-hek@1N<4@g16xvco+Txe}(tpefS&v9X@~$
z;UDl3Y=lkF3Y+0$*aH8At*{NY!zb`5d<LJx7Z3*{Lj4z(eYV|T^vJIqb#%XD`VYuB
z_PBwA1`kQD*XwZ0QM+t!))}+UEGzf7m55pv7~Y!nl1neU{2Oboxbmv2uleS+*L~~y
zZ{Kj^cfPy!dpF(u{U6+N>kof)+mCPm$sKpDyX)?I?)~X~KfC{dpFjA}FMj#(`d>Zr
z>qj4Z{D~)j^VHM7{oOOafA+cO|M0?#FTMQAtFQg>Pp`l6=7vAN_4YgO{^hUlz5lnr
zfAHZyKH9jcb@Rtt{<(GA_D??j?DH?;i#R`fp~og`{8ltH)m3=a^>f%bWT`JTH&s;C
zcxFcz9`F@SbslGQ&7bG7SKh(~uZc6yTkys{Fx-7?i=(hw7Wkq0#oGlb1=2z4p3oP@
zfW)K-a%EwAkb#`o?>A7`>u1C7gqJip0u;U#1FQl$_8-EDa;M6jrC$NqJZzvW{uAsp
z(d`_>)7XEwiwIlU{8<ZKBVC_E6AnA}Yn`yS_Gi?gZLrjuS$SvS@5ryhQ1!B5A+L7S
zM!BQ#cjngwkm}d}aJW|A8HMf-$r4g0%4a8jjR$_5UBg#dGb`^X{c^J-zcvizGZ4ES
zzV(RQ&aVl7?Ej#AcH-BjpR1g94jK^_J1d_Z`Avq!MEDNG4zI8A)3IMS$erC^HXd7l
z<TnN#`ICKE$ZgonmQP3F%YBr;a5x>g*;)7<`Lp4#M)6hn8k`H~!TE3jTnHDz#jvLj
z_y1uZjz)z`YuZej%KzGTxC-)K2~|)HHBbw4pbqL`F3f`lptJU+-l1mU?+lm?XF?g2
z!+$FN6~wg?&IYyRdZ4U^J@@~A?>pR{>;GT;4!@`U_r}rwWx{yKf^5iv2`~{Rf!?Q2
zgFMKG$xr}=Py|z;7)qcNrouFs4l`gToDLne|Np7@_q6|e#_-yY;i>1hGty$X39}3S
zb{4MeQ_30LTL0zg`U+nsc7Ywm(UoD>NFKxdUr0x3=*p09B#&eMFC-j)D&@aN>?wi&
z-V#Wq?Q8p&7E85%A)B`Dd|gU;`uZLHb$zA%Ut9NGUv&N+>$*#SZU|jpa{eCgx=Vl7
z|DO9l=2U%sCr}?S!!bJ<wXkB4RUpf~`hBkZMUMSIM?Ds`up)+H7z}}t5Cbb>D6HLZ
z)Y4lKLoouP{HY(QzN-~Wtpd3@z#3JcsIeMk+sCy=^(ZvvVMTuw^Q{J1eP1`O1?b)I
z6rUC9Gpqk>h4gON4I#by)~<W$UH3|dt5=_0{c9_vUv4$X)gis|Vui+GtZ>cCts%0;
zX{<QWDv&jXVujultf;dJWW5szE5g^|C~JW%b-AP0`-2rrtO8lr#tOHbJ5rx&9V5Ht
zTJD&;YSkkvPO=JQ_j;?oSmCNwFRajej}@-D>)wq^?@U(c-OCDHPb=IsxYyhbQ}1Bz
z^>FR<4rhhxp%r?kvqJUF3cbHs;pRc_eO9Oqu)@98N{1D0S?Jx;3bi+GS{1Gvh8w4w
z4>vsB%T~DeV7)a&cGb%qbJy=;$9#^X*8O9J8@_vwx#73q*u4i_JB^`Qq5Iwnjj39p
z``Ze)4O?Ihk((U#LPy=vJ)ksM;pV^A8X{MLn{LJ7hUdob=E)7ub<>ggF;1M7jyha!
zGqEdo?02Sj^Wv6|8=uB1tT@XmkVki*?x+nq0rx{4KOO0#+_+|{>u&v5dArwOf)j_E
zKi$W!Kh-POpKIrut1WTcK-F#cS)z8wwby;%+UuUq1uJyT+`8b_?~dwaI6OD4?)~Me
zcUDfax58DcJgsok<GSfct@`G+KjE@dS(V$sk>x(e(W`wfcl2(#$*rq*%UtcU>rd^m
ztJgJ9n%#0!eQ@1q49?Xn?XG+GxicO+E56J#$PKrnXOf#grPYdEc?P-HpvZbe-j(N$
z%E1cvUUHvnSvYXhExntka9LZu>qg~S4p!*;mRn6otvce`$*r4C>D}w&KBL_B^2<E0
z>ImD4j-Frc{psG%yYjqp+y5pT5wd&lH9O{NKdf-y9o)9geFj$H*iE<eZk`l&l-@Nf
z$BnRJ8H#eN38~cvxps2vrc-+N`bh7VLAZTYds+@w$i3UnDR1T064`BA<<`}^*Gbo=
z9IQ|uqTFhbRnFnE(X}lHE0nKtt3g)U-Ez}?SPoVwpXFAAtov({qt`Wb{m%^9D?hG%
z_`V32eYm|1m!<68_+{^gzcYKa0rFoCR_J;tjB;y$9BymF<+wBZaC;uUR<c)Gt&qL)
zVujkka;rhsedg+ScAc_9?!$ULU)=CicU-;OR=M{=xa`8^rf?OP%GnBqT?Hy<D{T8(
zZVixa-F3|rRya<D6^?gT-MRPHuGWQJ4LkgNP@CcAWoPy~yEk^`e^>J(cW%0LU0nUn
z?A51n-K$Jp{m$y<&g@n9-0;F}*3Rs+@V_f{Ms1ZFkJ>6%-ygjdU$F}0*uPnAgLlW_
zc2(VxJ2x+`dZ3LA*)@0b>#F76_2b$d=Y*x_h82UY0$J)Py=xY8+?R*cQF_<R9mjOX
zB99~-VZ{)uK-SoiJANd!>sD&lK8Ai*h3eudj$`#_)y`R=dtUX~?dR(LDhQcXpjVo!
zzzS>ThNt+fkX!k2uZ1<!J!Qolt3cL$V?{@5wY^p-tyZ||d~1l@;HZ@^E2MVQ=JxyD
zcX+pKI#TPoqq2149e`fulOY4FQ2S;@AqwTE(HbDT_TwFMw`|pKvBFg=4OY1CB1(f5
zZl3F{A+p}ztWdwq3O9V$z1ug8;n<F+k3cQG6)_aUVF*OoS%0IjkAW326xLsqox)O>
zQFbGDU}xjgcuWkeh@nte3Ny;i`Wu6N46KNuuxW|1vtdTr9gknd7iDMT!`cY9eoGyt
z51YB~+F`ZpR(9bqT{G9M)H6(q{GYJebt}7Yxb8jT)@ir?x%IW)iA(Azeb{WV<0q_k
z-O4T;rfcT9m3pZYZdmQQm0dVow;fVDXoY*Px$S_SC4;P^K<z$LtbN$bZSSRyvUkng
zI8+y{IKwKCk9E{59rcNh`W#2Cw7Ka}e6C*h!V1~DX|ncFZd`Y2!>58<r%KQlg8TfC
znc8C2M=R7;Mw!X4%&m|+#WTekAZLQ=uHM6}P+KjxZdzofxUEo{+_2@=ZKtP&>}BWL
zD^B+rWb=x#5z^-dYDv1M6o=Afh0GL=+7~OVnc7<`tl0=_fNaf1I%X;xm4{mvN{9Nl
zva`aLclenmzhQUo{jaceja`2VOXkXl6)Gp0SuqiXt5><XdWGrgrFQ!O%4_&~mSJXv
z((GPqJ?~Yf8P)-^%v7dfvk?(yD$}q#Jv+i?qa)1p90|J{6Jd5jgqhMjv;*^~{KzaS
zPco0nm&~K`CiAHL$vi5LGLOoq%%k!u^QinP?H%PeT!vBkjLKtF{-W|0m9MBgMdc?d
zFUn&_d68W>KQfETlgy*?CG)7f$vi55GLOom%%k!t^QgSaJSx9Y*G_H+gB5b)>Xk27
zul%@r<-^r0{jOf=cJ)fHt5-T*z0#v=5;hB`Q~GdPWfo4a%))7wSvcJ?3#VOX;q=Qa
zoCleO^I^-{&4=2v3JBM$$_TTn2(#)4vziFA+6XhfCx+v#i!iH?Fw?tA*zdduvxW#W
z^~u71=SP?=h%jr4Fgq*4Y+;01bA(w-gxR79v&9i+OCrpcMwl&&Fk2pBrssCJT=a|%
zo9P)HHq)~;Y^G;z*i6s#u$i9gVY5jQX1Nh&r$v~l-x3Z_&-JjG`Xphqf(SG9AH(j7
zBFv^lm=#Bul|-18Mwm^FFq;-(Ha)^@MugeS2s4dMg!8tiJ@Du4h0Eo?tvv|$L)`bu
zmDC$6j<X8nf45rKzzV&q3imx!>L|Ty7Q>AduDR{o>)9E;_Ih@TD04mEqs;Y;k22SD
zKFVCr`Y3Zf@1xB1%#SkHb3bgZG={II@+<SG{K`BkzcLq5;Ya0HZlm%m^QipFJSx93
zkIJviqw=e?MCDiJQTdg5RDNZyIKugrxrj24%CFo;<yYoW`IUK8eq|n&U&R^DuliC&
zp!VDf_19dzp7~R)C9?W`vR~+!>7LVb$BHHt>I+&Sy~43VeJNMJD5O{a%e7a(&DHDq
z?T!uTIqmAzUvTwGO9iN}XNAIyGFMvN@fW4l)hn%Gz51zEDDAFZ@wj^RThzC*LiS-Z
z<tJ>WJcZ3lBg~XOH=jz6tJn2)^@`us*P@pnE0lj%ukc;H)UIA->gpA~tGDjY#9a52
z71m$aT<*hWHq5ZO8@BFAE8MVMa~rm6=7#N>%k2<owt*tMX5qAi?<<8HHk%w_rt2Jb
zr+ZEHSJ%!8*DRc_D7$d_RL|YK=sLT4U1wLXyt;b%ckg-mclGk`>gC_nt2|u2%EHwv
zeDzzcQ24H1;k$Z;@9Gu4t5^80UgbF$<WI5{YB$cZ8f4WSVTIK0b;v@m@>hKBeJ*pg
zi*DHR=eA3_*2}<(IuuHm6}sP57p$m9p>nVy4~4KoYUR@krK!bgkaeFczg9@^h9|w!
z?B+veOTh~Hue2Iu>6I?IvqEMH$2C(vlpiZ}eN{Gc>z0w+iOFDv^u<<#ta_+AZbb=-
z#a4r?>+GgcZJMw`YNgo<>D{zi_hC0-cS?s_zQ@@B{}0ISxOGSBflfNzYv8U=QUBQr
zcTU2Q))0Asqt0;DS{rZ0*;avkl%qbzQM=!q+_D_xxCwtBvQ}<C{S0e}e6*wP=cvay
zYO8ef^c8D}?54M)@Z5a#cl>r#HXY^Fy(VtH-Rq<F#)_d<fvkS36~nCpd4!`@|Imt2
zR)IX)Q6KN9)yK3#{Yop`dg0a=_xiZkWUTdw?AD`kj(Mh|cH2p{rB-BH1+vDEte9XG
z$ZA)uaNC?*Yly6IAuH5wT9I!R$Zi`{;FuRWYPC&POtA`Nx4lyPWQF={R!p@DWcS(U
zKBs0lZe}{_(;f9JNA1@A*^arM|5mu|LAf<VcAq_N`&s3<(KE~njpJIOw$Tdr`B7&L
zk=^!mu4As}lof6}+-MDv=R0aWTdZiZ3S{@W?LHsWPFvx&*Xl!9;XXf>SVLs@+2=m1
z-9EhA&aHI(x^3P$j`^N??ia@H*7H5}(=WH(t)F}9+y9;V_Wx@exTlW&->GB&4bNP+
zzID_;bo+rF_4jtSU-$3s%kAzn&h2;Y?se~|fAxQ%Pvu_UJ?{d3+p;U~0=rv(_VnTX
zvhAq8?e6<#NA1kN>b>&c(f;hIGkzWTSM{rRx6b@e#wFabh&^?~zm9vJUw%3KtJ<9Z
z<XG08w&-8m7IoA&-ZOUUm-C+bwx_=BY2W-h@PB!Xy`%p5p7zbZb{%~i+S9)6Y2Ws=
zZ+qIe|H(V%?v9b}sc--H>)TL2iRSk|Id5c7ynewCcglZ+qyAUT&-vdfXPcEY6kVY^
z^o0GP4;&1KLq8Y@%KP!4`9zu{q_KX@<<U5*+8wnenj543jpnncKcg{geMi;z3(fh^
zJPysx(0q&4a4uW`7sI9S4Y(4nf$QJ~SPM79t#BLs1lGYla34GX55dFm2s{Q)!qe~!
zJO?kp%kUb!4jbTY_zS!bAHYY@3R_@1d<JnyP4T==&=vNE9?%>1hdyvH90oBs8V0~|
zFc^lxNH`u&gi~M~WWfZ;g?uQ4Vwegu;S4B)N~nQ4m<RLWENFoxupG{Y)o?Cc2$#U+
za0Ofq*TVI1Bdmp+;a2!D+zI!<eeeK01P{X_@EAM^Ps20tJiG*dgbnZxya#`We?Tkz
z6Sjj6T;=!xFCDr<cjyKCLmxO84ucpR4gKL*7!1Q<6pVqBU@T-pHcW&(D1;K24zu7)
zsDv7*helWki(xsO17C&n;6nI1Tn204YPc4zhZ|un+zhwCkKlH=6Yhqe!u{|d{1Scz
zkHK%?ckn#C1h2vC@Mm}z-iHt1BWQ&!unj(iIHYnDc7m?3H}rtsus`&HgW)iU!BKDw
zWWYce3L{|*oC2AU1Ct;hil7u`z!^{u)ldiXU;!+I#jqS!!MSiDTms*KtKeGrHhdRu
zhFjssa3|aYKZ6J1VfZyX3BQBq;6->9UWY%!yYN1I2%BIFY=_SwC7rT>y<i{c1^YoC
zI0RzQ4~~T)FcMCHv5*B5AP<UQDx3~yLM7C~T$m3FVKFR+Rd60$1ed}ZxEij58(=Mb
zAASh8!#cPZ?uUoqSMWGI1<$~9@B+LHufglE0p5nc!29q4`~x<@$FLPXfiEDX6ZZ~u
zfo`x5^n(4M4;&1KK@5(9{xA@Rz;GB1C&5_AgdCUz`A`I<Fdb&XESL>tPz7_K0nUQO
zumaA3bKxSm1TKdw;A*%Qu7?|8E!+&Zz-{moSO@pOeeeMM5*~#o;J5I5cphGaSKyEE
z2K*V`fxp7v;6vC5o8h0Z9dz(<7w7>8z@cyy91Fu>44euRU@{cLRG0~8LM7BdJ<Nv|
zSPCm(6`Thb!q?$4SOZtVwQvKhg`444xE=0>```ii1v~<e!ISVbJOj_eOYlc{6W)gR
z;P3Dc*aRQLR`>)yhm<bd6R;QT1N%ZBI24YAW8gR#3ZvjeI2E#BBIH3Kl)!YD1!YhT
z^)MfrVJVyqUxN$bQdk4m!1eGQxCw57+u#nk2kwKP!^7|>{05$ZKfo*SI=lscg%4pf
zYzLhf+=<S|-q0KRz+rF{WWZn;0b}447!MO6AEv-GI0Gu74(3A(EQi%_0bB}K!gX*1
ztcCBx58-xL2lvAL@DTh89*3vlS$Gj%gE!$Fcpv@&n_(M#4yk)l51~8sh6CXch(SL%
z7KXq`I042&7EFT4Pz=-I45)xwm<LU;2$sVtI1es{%i$`x4sL{-;8wUD?t=T^L0Auu
z!Bg;icmZC8H{fk}4?cue*b1LPN;hsR*c*Dm0dO!J0Y^gy42BUf22O$TFcI=$3QU7p
zP!2UP7ZyMZEQ534t8gA%2w#WGU=3Ua--K_$4e(vK32ucS!#cPJ?t_Qm5qJ`wffwL4
z*Z_Zl51<vc!55IeH|;6(f&<}D_zDbw!7vg|gmEwd@}U@Jz?o1Db728A!xC5ttKmGj
z2rh*+a5Y>9H^5r>KKuyognQs;@E|-4zlJB^X?PZ1gxBCrcpLr-e}|7?Gi-%VAr5JD
z+`GU&upjh=!{KN+7KXqmI1w@-2Tp@RD216&4)xFoXTc&^24}-p;e5ClE`uxJ8u%96
z2;YMrz>nZgxCed)55lkDad--zf#=~Rcn#iwx8N`EH~0r^hOO`^c>B;cz+TW3_J_W3
zD8%4s7ytudD2##=VJu`q7UaN0$b~$Z423WSN?<BXhnX-7W<wcNKsC&PxzGqr&<u-V
z8LWg=@HIFeE`m$oa<~GnhHK$^xDnRE&2S6+2yTZv;4Ziqeg;2>U%-0!H9QW#f#1UK
z;dyuwUV%Tt8}Mg%2mT6wgAZXNY=(crcK8h9klKSXg|4tS^nl*5KlFiv;V_87QE&`o
zz(5!R!(kMRfs<e?WI{GfgwtR$6hR40gPCv!ltCrbKpo73`EVArz!F#vXTxeZ7cPK{
z;ZpbpTnX2}b?|NY4tx*354XZ?@Do@E_rQJd06YW_!z1t*JPA+3Gw>X|058L9@H%XO
zx8X1FK70TlK`U&5ZSX040V%vRr$ZO$2KzuS*bfebgWym&0=@$MU;rEkgJBqqgyZ2v
zI0eQ*7EFL#$cI8GhN&<EX2F?I0o5=E=0YPhK{G6dWv~)f!Pnq?xCkzR%i#*R8m@)w
z;YL^sH^VLPBe)&zguCIVa6dc<zl2}GqwoYg1;2x5;ScZ<yb6DUH{mUK7v6)v!#`jX
zd<<LR6ZjmwUbJh_8TNwi&=dBB1E4P)0*Awqa5VIXV_^^sg%L0sPJol)R2UCAFbVRY
z0H#1GOo!89Hk3mZ)IvQpzyeqZi(o0NfOFuha2{L;Ux&+J4O|7^gm1wO@LjkGegHp&
zAHyAR7u*X!gP+4MU_JaA9*5t+Z{hdwJiG|6z#ria_%pl%e}%unhp-Vg!#`m=d<Jny
z?aloUU14wN0li^==mQ7CVGx6(;26k&fiMJy!zdU7C&5_Aglw1yr@>?>f)bbpGvN#<
zgG#7@I+zFZ;Vfu@C9oXMhShK`TmTotrSJ{760U*k;M?#W_#S*8ZiU<6C$J9gf&1VA
zcnBVbN8mAd5}t-<;5m2!UWV7;b=UxJ!(ZTi_y9hFR@egD;8XYlQugKkhc3_!_JLlo
z9~=k=!J%*jd<FW!05}c?!!Q^L$HR$m3XFp+m;kwu4~0++Q(*?of-|84s$mYyg+^$C
zW>^f%U?r@Aufh3n5nKY7!xeBfTnpF3jj$GOhFjoAa68-ycf(KNes~am3BQ6z;R$#O
zeh1IOAK)c;75)To!dvhzya#`Wf50aA7`DPE@Hu$<asNYS*bBNtPuLd@fWB}D91cgq
z(a;}`g+VYBM!;w|0ZxWfVLar(B*=pTm;$9R9ZrYYP!3g43-!<d3t%BEf~Bwm&VjGO
zd2k_o9WH}4a20$Lz6CeHci|@Z0sIht40pg?a4-A}eh$BY_3&$W9DW18h2O*T@FKhd
ze}p&S&+rcX75)Yv!baE(|Ag)E8N?x#!QD>K750W6&>QxLK5#G`1~E7aj)4pq2t!~v
zjDj(65{!jR$cBk<8cc>FD1m7(6V8A#sDv7*gLyC?&Vm+L0?XlSSPkdG1#mH33g3V$
z;TpIOz75}j@4@%sR=5p*0_)%&xDOtHhu~p&1RjGY;c0jVo`V<QWq1u<hYj#H`~}{J
z58xwcg)OiRK7}tJ<pAz~=mOnfALs@9!GUlP912IkSD+sZfa72=41<wyJe&xpz&OZ)
z36Kl<@c-Dm_oy28zun`dkkG*)BuPY0Ns<sHNhL{A$sv-Y5;{ppl8_`xNK#Qql2lGf
zk|ZHXk|d|3NRlLEU-w#<-+0C|p2OJt+5haZ*JrHPdf)TVtnN8k*8K7{2P|Md*uX+q
z0?WVwR)RCEhPB`U-mn2S!4?RB?XVMeLn!Qn2sj8)a1>(UI3&VpNQQHe1{rV(u0l54
zfIPSjg>Vmw;SrR<Q>cU&@Cx2SE!0B;e1>ND25s;QMC9<}A38x7=myfz1A0SW=nsl8
z2!_Bg7y+X}9matcOavX!1$~$SMlcJ^U@lmKHQ2&pSPIL*5mtdKtO0lM0w352ey|k+
zVFv`m9teZ|5DAAN8je9cB)};+11WGG(%~XpfoqThHz6PHKoLBE5_k;d@C>TpCA@)m
zPzN8O5xzhRe21U#A5AQ;Jk6eA&$20O278IU$_nc)!d&}1BH3&{E3CN)^WyLPwca8e
zY6$BCm~pJI4kC=O1|rNnb_;u(71kq!xx*H+!WxAzMeJu*Sd$Ru3!8=a+J(ty3)s7?
z@E*P}#cU<J7Vk?7vyK(sFBisx^<=$R;k|TW*0aL<>cVVfH?f;pKUR3}U6??2I~&9b
z@5u|ZlikGzvmtCKE4+6vOc=Y54QGY-^@WLG53rG}@SeXghuFhx6f3L;2oud7Wn)-j
ztw5MqHjWk64}>|vCa{UDu(lw~DfTp*#0u*U!X&e2*%Ve-lMp7AJ<q1G!g_@;>1+m@
z$qH*3!dzl6vsYMQokN%`_8Obb3Tq(3<gho`Tvk{g5hjnl#pbiOSz!%Dm^*ACdzUR@
zg>@ET?z0crV)h|h!aib4*~e@d`-ClLg|!=DD%fXiCHtJMVqdV;tgz-I%q#Xa`-T<P
zgM_JJ-?6o<uvR2Y9b3<SV1;!gVH(&^Y$N-bZDPN$&FojUh5g31vclSwFm3D)_9y#`
zZD)V8!djLv9au3|oE6r&gz3a~W+hl*4NMqGwkz9>m13n?VXaIUS+)l&te*+fi|x(I
zvBKJ#Fn!s6tUN2My9uMf4qz48fvgfch*f3>vqM;6{Z5#n>@Zf99nK1Ce8P-mN3o+>
zHC9*$6h@sL%WAOWSWR|3tHn-WwOL_3QJ6{WWLAfr!U}7S!sxPk>@-%N71kw%F<@t~
zhU`q%h&5(SSYbU=7*lpOYsSuD=du>;Jl2vG)<cD{Vy#&lb^&Y4E@T(6!aAxjcC0h&
z!U}7u!g#QrtQQ-??qP*>R$=zB;p~1kf<3@SvIp5H_6Qrp9%JL#<E*fTD@+2L$ev_{
z^<803vq|h3Hkm!krm*MOH1-0U&StPz*sH9tb}Y;_Hk-Z9=CH#0vM{;qUABlVW*@R8
z>?5{}eZrQrPuWUVSf>`IihaRWvoF~<>|3^meaF_a@7YH7Guy;|VVl{nY%BYn71n%(
zX=Xbp{dG}9j1^})vYl87whJrCc4cK)S+)n;lkLU!X8W@JSb4TTtH2Im71@ET606J(
zVO7|n>=<@DtHn-WC$f`R9oB%I$r`c7tR1_QUB=q8%h@>g6r0RmX8-&pXrhBe{+bSK
zN466y$#!MCvE5lIR)&>jd$2v(-mDzkkCkWpvkL40b`Yz~4q=C~s_ZCsG^@srVb$5O
z>^N4Foyg8$4cVEj5o^rOV=dYFtQBj`+OP{)TXrG4h+WJsVeQzZ>@wD#UCuhND_BQ%
zCF{hlVx3tR)|Fk&y0L56wd^|9o%LWnSufU`UC;Wk8(3d<BfE*+%=)og*f2JnjbMw}
z61J4>q5Svjxi>4v_F)IJTC5K1z^-7OSr@jPeaeaq`TO&TvK?44R-Em~c49lT5^NV%
zlI_ZNW4p6btTZdb%CbG!o@_6+H!H{XVf(WESb4TTtH2Im71@ET5<7?;%no6fvddU|
zb~)?7u3#P6m8=uHigjjPSXXv6>&C8O*Rtzach-aTWW88#c0KFEZeV@cjqE0NGwa80
zVg1>yYyi8B4P>{oLF^88C%cOcW_Pn8>>f6h-OGlt``B=HKO4awU?bUs>>>6r8^s=B
zquHZu410`?W#ia*_BeZjO<)t*lk6$>G@HbpVUyXjYzljhO=ZusY3v0yoy}k~*^BHY
z_A+~gy~<{>*Vt_KI-A4ZU~}1<Y#w`y&1Y}31?(NRkiE+mvG>^f>;tx#eaM!ukJwW7
zF<ZtyVawU4Yz6y_tz@6GRqPA4ntjQ>Vqddw*tcvA`;M(;-?Me>U%#0hKlOG{`TOVJ
zZmbO3i|xxQutV5UtR}0&*07!<{(f99)|>rnLwDR1tN!=xb2a|11v`(mWaqP1tTk)H
zE?{lhh3q1BF}sAdW6!f`>;*QR&0sUxi|i%#GJA!+%4V_G*lhMXyKday->*CC!FsY@
ztT*e=Ze;`5ZEPUBoeg4lushjZY%sf<4Pp1Nq3m8ZjNQkEv-{Zy_5d5n9%K)(huJ9h
z2pi2FWn<W5Y%Ckc#<R!S6Kn#T$ev_Rv8UN2_6(cMo@G<mb8ISmo=syfu<2|Do5@~e
zFR_=|E9_M^i@nBXv)9>N_9mOh-eU9F+iU@Qhb?69vPJAY_CEW7EoL9GCF~=%lzq&W
zu}|1?_9<JzK4UA{=d8$&zkfW4vK?44R-Em`4rfK$`EhIqR*V&AJF=bF&a4F6g_UHx
zvfbG3tQ0HF&SuTnIjlKr!CJEOSu56>UBKG13)w}i9lMlW#@e&XSqF9n>&QB>t5|2&
zh5gNn3V*-{(}5LZ#o3N*C$=*y!FFLK*{*CiwmU1uO0zPoEZc+a$@XG<vvO=7wlCX{
zm1q023hV$@ksZh?v4dD;b}&1HRbhv+!&p^zI6HzJ$&O-2vuf-ZR-GNoYOv#2O?Eu1
z#ZF+g*@^5Vb~3BOPGP6Ax~v{Mjn!wTvj*%8){vda8nMQ#2|J55WoNTy>>Spdoy%IV
z^H@uEK5NBVvo`Dk)|Oq!E@Bt6OIVRo(Z62rqHG6Nj1^})vYpt@tOVPIm1MiJ-PrD|
z6f4cju(E6qwkO+*?aj)ueb~NiKUSXY&nmD3SVeXqtHcgsmD$1U5LSg9$_`^y+2QO6
zb|gEB9nGq-V_0=|EUUqeV>Q|FtQI?g)n+HMli10u4m*XN%IdOu>@-%Noz5DtGgw1*
zCTqkRvnK2;)|8#inz3_Ob9OFk!OmkXSu56>wP6>qw(LT75xbaO!rHM**=4LfyPS1k
zSFn!kO4f;8#X7SttSh^kbz|4CYuR<IJL|!EvR<q=yPox7H?Y3!Ms^dsne}70u>R~;
zHh|s62D01PAa)14likGzv%A?4b`KlM?q$Q+eQY?ppN(J-u#xOR_7HoRjbe|m(QFKR
zjE!d#*hKa;o5Y@Bli3vZ9Gl9XXVcgVY&x64X0jLAOYCL#DtnF1X0Nk3Y%Y6~y~XCU
zx7h;r4qM3HWsBH*?0xnDTg*OWOV~$jDf^f$W1q0)>{GUaea2R@&)F*W1zXL&WM8qb
z**EN4wuXJj*0S%}I<}tuz<y*K*iURD`<ZQGzp%~hSGI-y#<sHG**5kE`;+~}wzI!k
zk;nY+GTVU_W5wByY-d)2?ZQg3-B~GCnw4Q?*&b|9wiheM_F?<7{aAUnKdZnhvIAKq
zb`Yz~4rYh2D(p~p7^}(-XGgFj*-`9hR*fCQs<UHR4R#!>$&P2W*a@sQJCU8t>abJT
zsjMD5jn!wTvj(goYr@WAP1)J389RqHXD!%ytR*|2wPLMV8+HL}%PwRWv5VOytR1_Q
zUB=q8%UK6@1?$MJWS!VmtTXGvy0WWTH+BuXmR-lXvmUG`>&1Gr>scRm1MACfWH+&!
zSwD6Q>(6dw1K4eBAiJFnVt24R*<EZfyPFMR_pqVtUN(%~$A+`}*$DOk8_6DI53z^Y
zDE0^&%^qcA*kf!g8^^}8$JrBX0-MO5WKXfD*(CN1o6MeNQ`mECDtn$yV=u7jYzCXj
zUSuz^m)R@qRW^&g#%8nE*&Ox;o6Fv0^VnN#K6{%jVDGSn>|M5qy~o~XAF##jL$-u{
z#Fny;*)sMCTh2aZE7)gjCHtJMVqdV;>`V3)`<i{jzGZ9JcWf>Do~>i+*$?bTwt@Y`
zHnN}DCiV;4%zkBC*l%nr`<-oLf3QE<Uu--3oBeC!6a1gEsIUPFrUNU+inATrPHbmZ
zg6+aevR&D3Y<E_Qm1bpFS+)n;lkLU!X64vEY+tq?E6?_471#l+B0G>(Vh6Fx>|k~X
ztHKUthq0>caCQVck{!j4X4Tj+tU5cE)nLc5n(TO1i=Dt~vlH1#>||Dlox)CKby+=j
z8mrGvXARgHtRXv-HDZlf6LuDB%FbrZ*g32@JD0U!=dqUTeAbG!W^LF7tS!5cUBoVC
zm#}v1Qg#_@&n{;j*cGfJyOMQcSFz5l3+u|RX5H8|>{@mm>&|+xo~#$^&8}yC*bS^N
zyOG_*Zf5=1Ev!Ggl?`CGv4QM%Hi+H9?qqkd!R&4}gx$l2vU}Mub{`wg?q?&|18gLF
zkUhj6W~106Y&3h6jbV?mv1}Y0&mL#*Kl%IT#RqIL`;aYRAF-wEW44Ta!j`j7*$Va<
zTgg6WtJoK8HT#l%#lB|Wuy5HK_8nWxzGv&$diDeRk!@f<v5o9!wu$}1HnU&Z7WNz4
z%6@0t*dOdq_7~gE{$~IBj}-sa0Tl;qBlFijZ<466y#oH|y70%WMS1}K7@P1%u0;BR
zu<x4!D1s6Qzhy~SJ|7CIAS`K*0yPkpvxOyIP0#{u5cY@DfvKPe`d|QtU<4*$3T9vq
z7GMchU<0<W2$sN7um=Zl1SfC?S8#*1;0~VP4L;xto4^nJApim)2zEj+gg_{SK{!M}
zBpiY$h=v%5g?KmtiEs*%AQ@6171AIbGT{<jfh@>|9LR+{$cF+bgd(^P#ZUsJPzL2t
z0hLe%)$j`5Kn>JF9ejWWXoMzch8AdrHuwqcAc7y3!v1yQ&<P|!61ssD$UqP11#-|A
z<Us)xK?#&$2n+>P7y+X|4b(vcG(iirVG`)TRL}!`FaSd^0uwL=GcX4Wummfx0b5uE
zOJFJ3g9A8%6F7q_xWQU*2T$+@AMk}u;0OK?0D%w$J0TcCAQZwN93mhR4nY(|Lkz@1
zJe+_;I0Z?N3@MNbX^;+?a0#wJ7Gy&X<U$_gLje>*5!{DjD1lNagL0^VN~nTrcm;2u
z25O-WK0pIBLK8GY3$#KT{DgK8>41Mg96Eup7oQ{u`|(MEuqR&+5ccJhgT5f_&8Gm0
zpajY=1crht2>bMn0%5N{b<hA!&;o6k1UfJk^gtgBzz~eU1WdsU%)tUI!3u1^78b!0
zSPJ&w0FK}U&fp4euom3G6THC(d|?y#fj<O5AOyiq2!;>{g)j(*2#AD35Czc?1F;Yf
zCm<0{K@ucG3Zz0Bq(dfLf-8^(*^mRdkO%ot0EJKl_n{a{pcKlW94ep^s-PNP!5gT7
zTBw5$&;X6l1kKO_t<VNPp&dlT@ce@~bOH&Ggl-@OGSCBhfgJP&c~AgFPy%Hb0z*L+
zM!+ag19i{<P0#{um;^d774$$K48RbKzywUe49vj-EWrwFz!nz45?BiM-~f)`1kT_J
zZm<^I!4tf}2Yg`@_<=tJKp+IcP6&n&2!${RhX{y-Ll6bg5CgFg4<{fIPC*hRLkgrq
z8l*!eT!Jf*1=)}TxsV6>PymHc1oxpBN}v?Vpd2co5~`pYUcnovfm*1856}RO&;-rU
z0<F*nKcO8&#PR%tICKIDkc4g^1v1bBdVw7D1$j^aMNk4|7y?5<6-K})Py=<)08P*W
zZI}c)FctJb9}K_{jKBm;!3@m70xZD_Y`_*4!4g;s_TT`H-~`U#3U06#+`$vP!3TU{
z6ZnBY1VA7J!A=N<5D0}Z2!{xWghLPo(GUZ%5DzCH5l%r8Btr_MLK>t)CR~CmkOkS0
z1G$g~`A`6bPz3j(7)qcN%Ag!7pc1N}8eYL0sDWCjgAdREjnD+m&;qT{20x)4L^|U6
z2VpPCP9Oooev;il3WPl+dq6LcgT5f_EvW#CpajY=1crhtjDS&~2I?T}H>n9)pbe8i
z2d07^=z{?mg0Kgr37CQzn1cmaf)&_+Ei8g1uoUdU0UW^zoWT{`U@f?VCwPMo_`)Xe
z1AhpBKnQ}J5DXy@3Skfq5fBN7APS-(24W!|PCz1@f+R?W6i9_MNQX?g1XmynvLOd@
zArJDQ01BZ9?n5z@Kq-_#IaEL;R6#Yof;UhDwNM8ipaB}837Vk=TA>YoLOY0b!t)Q}
z&<P|!61st~XQmAFfL<U6eL)_CeKZw836x<73<XsX_SPH)YM>4ppb1(a?6)}ybYLpz
zfj$_3um`6Rn1CsmfjL-!C0KzC*uo+Z_UBv*_TT`H-~`U#3U06#+`$vPLD;*~7dC+(
z_(K2$LJ;hPU<iRw2!n8lfJit5Q4kF=5DW2e0utdABtbHyKq{m`I%L8nxB^*_4LOht
zd5{kUPzXhEABv#_N}&wOp#mzQ3aa51yn!01g*x~E4bTWp&<rim3T^Nc+Cc>SYjyx}
z=mZiV3Ee;nWI)(Uv=_)hUyui3Ur|L+0%aHi!XBflFakz_8VLK1YJetafi?(xkLtiw
z&;xxi07EbW6EFocFb4~;1S_xsTUZ23U@6#x12}>cID;#=!CG(!Pw)mG@P$p_2mTNM
zfe-{cAs9j+6v7}JA|MhDK@>zo48%e_oPb0)1xb($DUb?jkPew}39djEWJ3<*LLTHp
z0Te<J+=pT)fl?@ga;ShxsDf&E1#h4RYM~B3Km#;F6Es5$v_c#Fgmw`Ahra`eLnn{`
zN$3VrAOk(17sx?hkOu`&1SL?0AutqFVFZi<VQ*G-&;U))0&SQCIxrRVKpzai5RAYC
zOu-Dy!2&En*vr)hY+(^Bfu&#%4&Vq*;0&(d25Z3`Ji!}$z!x@wANWH61VRw(gkT7P
zPzZx?h=52q1W^zTF%S#!Z~_wH6eK}1q(Ca9K{{l@CAb1vkPSJI3we+a1yBe@a36}H
z1WKU{%Ao=(p$e+u6}*8OsD(QC01eOxP0$Q2&<btv6WT$f3!Z-vhfW{?k|69;D+Myp
z1A2k5XKi1Q2L(_BVgFiX7y?5<6@<NPM}Zosg9Zru+G>F|OadJc_PEspeJ}t+5caz@
z0aGvoa}f5vwFE1$0b3CE!CeAN!5$ny*b~<YoWT{`K-eGG9X!Dsd_dSMcN6%5KLkJ^
z1i?-Sh7bsaFbIbTh=fBB1<?=#u@Da@AQ4VM5+p+kq(T~`Lnd5;E06`*kOR4p2l-F{
zg-`_dp%_Y_6w06+Dxeaopc-Dm8>oR=sDlsC0FBTD&Cmj^&;~!D9YiGY{DU|Md-_U%
zBy<BQ5cc=&0lh#D`hu|6uL3B75-5YP@9$7hg%L0cggt=OK?5{F3xxfECxH%31wGIQ
z126<5FacqoU^6fW3$O$$umM|G1WRBk*n<N&f)hA{E4aa0a0gHD1|RT+P2dOq5CDM?
z1Un%ZLLd~vARHnf5)MHWL_-Y3LOh&+L^uUWkPIo13TcoInQ#fNKo(>}4&*`}<U;`z
zLJ{1DVkm)9D1&mSfJ&%>YIp^2payE84n9BwG(r<JLkqM*8~lWJ5W)Vy9YEOkxD!Z#
zu>Wy4kOE;J<Q~uqg#D2Ff;<TOA}fLt2>T-sfuSJmlRN@Ofv{h)I%t5fZ?YC>gRp<H
z4on3-&<6t$_ER<j6A<=QHUo1I_E)w9D-iZswuMC??6<rW?7;yX!3l)@mtDaP)`B~D
zf;aepFKhxo@P_~hgdo@n!4LwW5C-880g-SBq97V#AQs}`1SG;KNP=WYfmBF?bjXBD
za0Rj;8*(5Q@*p1ypb(1SJ`_U<ltLMlLj_bq6;#73cmp+13w7`T8lVxHpcz`A724n@
zw1e<Qe+LkUP9Oo2&<&(O26{j*kON`wXn9ZoVGn5~PzGTy>7k$sBVZJ$fjVe_CTM{+
z2>VRyz*Nu!eJ}t+Fai@W1v4-Q3lR39wgMZlg+;IgmV!MvfFn48Gq{2qtOa-Q1aI&G
zU)ThG;12;12tlwDf*}M#Aq>JH0wUoML_svfKrF<=2}p!fkOaw)0;!M&>5vJR;0k0x
zHsnAq<Uu|ZKp_;teJF+!D1|a8hYF~KDyW86@CIt27V6*wG(aOXK{E)mYOJ=~q_Gnx
zPW(SO`ak%P|NT$*_m}zCdXE>5SAYjNz%mg2ZXjW-LAXu0-i^oq(furOn-d6+<qrSR
zeQ>qNJP;n=6aL)y-+xZrBw_->{e;gc+)p?b9{11JWr$<p>$2zd|IvML(_f!YxZhe3
zKBsWJ8ibD%j)lh*W)3U|;XZ5N-`{S=>%Gzc>@jeYhyiaG9_zolp9*dlz9%IRj)l+n
z=UDi-KgUKmo&>^uX8)UG;XEpVaQy=KGs0!z`x^tov2bqx9RE3YxazOl{;S6p?jwxw
z7{>75eGS6-6-K!KGEn02|K$6!{Wp*E=X;!w>x9>Y3oATV>v^n%t^naV6$rQed4B)9
zj}sn4__~Gr3y;5wU5N^_5QOJ;2AHzKYhJi4T)!BE^ZaLo`%eeqYY-mq&uj0`v2cH3
zgkKs6kMZxnX5oAbxBc4@#f1(eyrukaiR1Er1viWQzy9&U_weVOI0zRo!u#;T$PD|t
zvBKgaMo(Y*ulh#{E6JFbUpxNQ!l=oA^-Whx;arN;dK>i-Dw9xJD>T;KtgrCvbv<91
zFTxAZKmUZ^9^sSRSkn|V7!6+RGh;bEiNnbYnbqC#0K3Eo-wwtNf6ZTyi6h~;5a!S2
zKNa2z`13sd+uNmZLHOQ;w~B=MbN~K0?h6vam6$)*YvEV}{+th<hQEGX2(MXuVSmlv
z-!%3r#ibJH@%PpLdOTqbRaj4z=k<S|HT=AZ2Q-J_yk3D#z!xaI4=224g_-boL`?7r
zg}>in6EC~65qRJ*`0L!_I$>>Hm|^4bYZ(yMW`#M!nmOa=eptnC$dWx$ieD4Je>Z>5
z$DjNCd7b>Z{O5J@=kmW^7yr8A&-47RD@3+_O5VP3+Un85`~3fYL<c%wclfC7_VM7!
zistXS@5SZ_&(?oFqEip3bvgV(?3Z?L=`n9S2Y>kb;E_b7cwR;7y{vv)#wCgk9r)ht
z&y)P0Kg_>w5#6MAXyJ}W+3v@lmhTwTyGOoxmCIT;lLyk}2OhhvOB<T%n16PNR__6}
zkMwn<EPpT0@t9xK=hOEUO{!V*zum6%ul(rNeE(CW-M4vvUMc^2=>O4yXshebmF`XJ
zD-93qU2`yU@xkCpm!8Ti-t5^i&v2%7O~eiFT?HF5ybLCLw5nc@8;~^U(bTnd4^$MD
z$H=Ft{g|7zc+Shn<d4U%r&vd8%v<;K-GNR&Zw~2qdi#>)cHgT*!_wZIJ+ps=hhxu0
z>y0C%7G|$XJ~!QCYu4dZ!vQB}7#&;{FXoXN(sN+f;Df<uLY``u+$im>x%|&-_<!_`
z{a^ZE(Z+tm-A69`x^U1Yx1eLWiaX2{4)2t|)qDIc$zJk`n@#(bk1CQfcqrAN>A35M
z>&wjpTc#^+-gf_3^vD5&Z_l4P_{q}B6}tz`ZPt9aNFiv!@;k?_jtn0gQG2rUh-1fW
zS7qDh>C1$A`YsfIJs?{?LAg9wHc#_P$BbU(7piox%gNu`n-zKK{D+3sUw^s$7&~i4
zbEce@yv&aSUM}r3<tumjKlM*YxaJ?AsublYT|YK#;NG7y<D3urZFGJWtmX9LQtWG;
z`}X>w@pF%R-N{UK-R8BxKzBvP*x=VzHxtjajgS2iCTj69?^u81teqyZdUDhJ7m6$y
z{H590aF1fAs#99V^KN;JxK?wr+rh*e5o`O-{AB#BWTCEWcxe~=6yu50N9P}J){I!J
zUfNN<?5PTW{QqA%?f=g|jA-?^o-3TXyw;t)IqkuoSH^>8s(rA0y`v$}t5fFH;N4pL
z;@&3AU;S9kV|~Cc{fFjtX?rftjTxnRD67J};B%Q<P>)fX{dO2{2+v*BT4JKM&vEas
z+v`RLp0uvFm_NAa<CY)Q3PE39Mk{F>r}sRlDSAV*%F;C?TJ_Y)>5f-Ne{s0`TJ*Q4
z|9iDvuOqhHkO^P&`Ba&r>ZuD?eIxaH^|t-^!{V@kVtUV;U24wBoydwG7$EyO-J!=1
z&pTK4ohiFrHvYF!==5v-3|3er=E=-o;-qCdf84<!<1_7pu5}+^+^*wzV)UVtrge8W
zc9V?>cDc1-X6!9HHL3DIgXYunI!e+WXU<zYCw{YdVqbZ3$L|?4B9@9f>Ww*ZWBuX@
z$#*_Iajb1TVCcC$M1O0f%g?xtoAy2Fr_;D`TK%|%`@Z$Iwo7r{`%9wpv(RLf^A~Ft
z`7GR;Z}qIsa7{yYgIW3fdHr;%4B~Tkc^tha?>(<y@!<!va$~9{-uLdl^?df)h7a@A
zHY{y@JnQJ{uRnrz{@7;wspqZfd-YE28mBvb!=tuE%|$kbt)p9~Zdo*~Z*A}4&5Ne&
z9%g6Y?3?kdb*;$W!VhBQ!J3<D(`JP46>|-Ko?Tsa=eE`6WT{?lk4ET8R8?<U>Gkcg
z<h9R=%Gu$U2e$1vA%67!=`}Y?hOAwqYky8PwPC(bSefzE^2%FnW@qGkzjFz>w|?_v
zFUfR??~;SH4uuR;mwvl$m~uqfD~SO$s_(xgE^27fxxB3Z$jEwGg*2ncxVt0oTdw=2
zsh*v^vET8bZ<B|=4k__8sd_xGGUI~qM&>{B&l%tu5Y1URVvm`7={w){&@jcQ);`lD
zK3UGKww!zQe9z&vF6Qp%hyO6MKK#~jSw-U`DOdmOx6YULFX=raS7AYp<|akIior&k
z?wbxAP#d@Vh}VnjWir{*Ui+lH$W2@6A}YUSu=Kq%*;71KoX<U}xlrgYrPgcMz5~l-
zjRubrJt(px;QOq*fzfiUA!9o3EUkI&w5(6htd3o}{+<?n#&SqnPj54I1^JC~?UQGY
zRxpUJbDgtwS)<RTV=L;XrQBAR>h2fuq_95D>cHlwv(429-R-hXzVqYcrV+P8btg>-
z_?4x9>VU><Y1N$IWnaYS$Zt(gxVgH&Z{(vx1($m7)o!nhO*5O(<+ApU$oF|NvPDlv
zcDr{_L;Zu@it{R+Q);EUG&l6yEcS6t$V8W>sLAFhBJND@qnVL*FwyJAW%K0lg?Dv2
z+E@Qxc2MJ#zD3=OXNBA9znwk$ZdHSlP9G;pMc>PV*0y=7dwQRA?b8zcV}1RRxDQpI
zuY~uwxcuDig7H-$d+SfUe>~x3tV6n9?Y)OPu1yZt|82kb-j}eUYI2oJy7WI*uwe18
zQv;`XY0n)#QgUM7F}?j&o|ccES|0e_Q*DRuxq&e^MqAGQSe)_wgIAq>#0yECTbgkx
z-6odCPY70PEAZ3UI%wFXjc!U3Lq=E2WSd_q-EVVw<k&OHgGUZj(d}wb<!66=*X;`T
z1D7N+NBH^pG+w9*I^)~0rrBfv)s0_24D-t<|8~qd{%1+8_>{XnU)*sHa38yAPt3jQ
z@}H*;M%+w$I?Y@C#>6`c5Ar02Ucdb?)6ZFBN=?6W4R)`3hK^KU-f(br`)Hd12UYTP
z2E5s1?=KmZvFA*|gu0mZKP2Bj=vNpvYW(XM^MamQ0cAez=5Bj^#JhA_c;aFIi<%i9
zbi2(Mb-`Nurc%X&_lftLCwADe&e-U{v#7Y>kKyU35|a-+b-g#+d~p8<BhJ_U2wA^U
zzGzat_O|1rZ=QGV@#B=9Zmi+gg&&8^y#M}}r-^B~dYs2-smP}{%If3m*PMyiG<onE
z|D`>QJ)$;-?h6Z<b@=<Ck_@fd@xQB9pB{TeHZtpJcb7f7MfpD*RaD;vTymd$%)4xg
zrf1?2^PeKS)?csGbsk#wYg%MVf6HBFoiz{0ignkUXZxgk=!|h0Z_oDIE0eWrw~XbT
z6VsNDoLs$S%EsxTACnKRbu7D^D=~l6sw}A$jcRiiU2mBa_9A}!;h5)Vk4-EoU!q}S
zqjFi{?d#Id&C*e$bF9Q$%|dzx$KEIq{nc}wcS%jNX70%%Z_%SoQ=Sy>YTG^gp3EG}
zwCX-1H!qUBXxtw3Yntwa7grA$4EkkV8~C{ABa!T%k>Un3ubc?DQ&{U3lbfQw_QQ^T
z2_kDJk84O7^~UkHip#Iy$t~$(mHReayZ!W%t(jA)nyb90QTK>W=Zu$Ej=ASIC3VeV
z&-dR~`Xmq9@xj96=<_U*(a%FWRauX3U2uEa<x;DOO<gQc#+B>zI3q2S`D)O{sgv#Z
zsKp;W5We2-cvgZ~Hzn)zpX1-;XZBaUZ1&Bv>*6Vc1{CdBBko|Vr=QZ-E6u4qGQDJX
z^YZx$U&}Rf*S>dZ{XMYv_xLv(QyRv}4pV+AeO1F)MJ4B$WTL~pSu!(3hpXHF^Rx9o
zXW*YR@Xr~*84&e<;4sue^Vr+v#t!q$_iP-V)Mz}WV8&&iX6fmdTqf_A9NlVHDtgPo
z^Yc}Y3omcPh}Hg>ysMMw`_S$azxnU^q^r_%z!w(-k5S>ig<m(k?x&F5Bsnbl=;*IT
zA4k@|biY0+_jjI&#P|n(0a2pLw!RCrbv8O@yZxRUH6gGh{%E#jx4Qh8O}}>>x_!7{
zu1&F$!}P6>>ppF<%y7>rIe)md+_&?>>(3W`>^Ob$ZTX<rzrO4ooju)UN|KVs#EwI>
z-yTpZQ;6&qx9sJ^*d2=#4iwgmyW{jKpgQL2F8}rKWAvw$mS_IxZa)0hI?D$`hi6}Q
z(mQ{r%yxNpXN$hQ0|N$GXN(u~*p@CbxPI*DvCoe@FY6ecu*XPcw$B7TwNVvq;d`8w
zo>)64PwRR>BgnVWzH$CN=i)-OcQ20Dr0%|>xp%X7^!Y&@GasHC;gv17xmNYb%cI?P
z2ftO<7R~Q>BYuq4zBxJtdPnB&{b^&~f344%nbEh-S|)V3wMO-Vv}xl^N4L)DM+**|
zSaQD2GkUjlW4ey-rd|2z;l+AlQ&mq5{Gw4Lak1gml+2a8bvDi!nKSa!>+8KLat!w8
zWpB?)imA!VObouSCMOfOeD;+G{hq#YcGvHEN4oPn=LVD1F#TI+qGn5V9{J;5C*v=Y
zv%U`Oa<I_i<#qk8YkN<Z^H!HWbalmi7ZcNvdT*VY=ykW>T%KndKc&sF!x~2&sf-PC
zUVBH*x+*&Lfzjb1aoN&6&SnQynzh9#gegA!zVY%+F)5FAp$Xk4^gejr=+#Pxod-P!
zKO5rbu2WJZH^}YD%FqWX9^W5*yr%iVzie#BGy18qky7jX=q&o_*>}yE`({d)6245g
z`Pj{M+8EjAvfD&`4wTQjeZFUql;7kT`H?a|kDZ+B-8)UPqU`5MP3LXNMa5IJY~99w
zG+t_)mZdDV`E*>BZBo;{d3&rUjy)|u;LeJUVju4wdN@qdOe1*erNx>m(^YE+Uk}UC
zJijQjLh|`s^B9qeWoKKTBx?CtFS#9<RP+0q+PudZQcin%CO;3n7UyYa@=)Y=QCrBo
z`60U_Qf2)ujMQ3Zynf;<9`k$cJGaK{^>wSXZb+|GksFgdG$P2=saGe5X5C2vAD8RT
zJYsXf*H+2;>=4~SE_rKG%%)aP(d{|%=@A>-u_n33{qOeI_RzjDO-?1^&c+H!r>v-~
z2MK|P)FRh*kCbfbvFE4hr@kMZ3X+%hT3i>Ur7qjkuVCiw)P%#MFC5XDWTWLGGJbBb
zY)zu>o3M2e=}U5^#9f-=@nr3~Yuz8N{BiT$6F*tw5l>#lytm8Id!`+^Fn--rr_zb~
z3l8*_*HM<-9_}G~qx@Nka*o|btNQd?;l3hsa}J9X$tqco|IvMG=T*zL22O0&+`gnK
z=HW8OyjnG#RLNlPbDFum5~6mDkM}%iUGa9o1;@N2w$~<pS>54`!OCA5S39^L9NBbd
zyOv1hTd|n&mTOZVOtg>~7<a_pYjEq1AeHFnG8xDBUcYVepjh$3hUys_k6MrYzOCJG
z#eV+g&zCQB__lnzY0=_gg?Ar5?O2`stWT|Ecz#Fo*Z1vn>IO((Hm>gHd2GP~Ip6p+
z+X4F;yEoq7?D$+vYp(MA3F9YhJy@X}YbO^G*ge-e`&0PaSoO&8W!5u`=G~cY?jd`2
z==f9BvkY={3|lj_=Khu&>nJ&5l=Xzh3J38=NqerJ|JK)fi(kxC>30uKyd5%hP3{}p
zBO%+HYhSz$Xlv=x+a$lvBrRDfZHRi#h}7rL+wVR1yro%wGssl?aJBf;bqPk#?PASm
zcrLoIew|(I*435uN#|3KNL%LIE8YI0+4o$Kb>I%|w{Hvgjd&p&kkFEMe3w=4q?V9L
zhdQ3L7<2ttWBa>N_9nGPE9Ol$nJKT@>Mjvn+EO_<aB6gTqp`V(c>m5H-fI<A_37X3
zwNg*jpEI2M>5uz<@tom=*P@OS4ZPGJM)-g3F>Uvwhux<w({kBRUOs#C)2><XXYQNp
z?_cpMu=fq^H}^gdS$rUFL8RV!^Dh1EmUpquZa=@`vb*In$(+R&E2|}zm%iGiccSCF
z(k|gYrw`qIL!&KWrolYfVdp9f`)HLk=FJYeptkChT%2>(z6C3~R!-}5@PMJEL*)GY
zTIpy{`R<jo6ty3nTsC6(txCI0vs}}e`X1-=n;P!C=yy1-pX6(```LTe@6O+pB$m_|
z^sFGe#4@E?bj0Po&9AFY=L}wIp_<Y%*?U}k%-v}xo<BF#xR}0s(#_*-1_e!_>T=r^
zerc)%mAtE0nY?DrIQtpS<GR(13hlb?^UB($xCYq|?h`G<j9)knvB@#NX!>dHsixU?
zd%tYc9aAWuVYmF@)O>~CWyf-CCCi?MR;{@`Me=!h?&7KehbN>ZFZ|xq?W})8M|HWx
z+pVSk4^=cIq`gnf7Wr+rLw@8D@9lN(9J>}TvIv~{p?mpa)rmu7mEtalPA@pN<9A5r
z-L^|D&gTMOY&rk=sYI^#0i)*ki4i+S1r?n&eY;KS#CEy;{<lQWOdhVM*cSMtaLbDU
z0|S?CcS%!zcYpW(i3;gvDxS^tMYp3?=U%@2Lc(Rp{i$jn=Jz@zBi{02q?v!#?&E8!
zyIE>xSm?ZU|CIKkgKbViT0(pWbM0|s5B{FFX~F#F0cG+--)i1cOP+Y9TUP!=uie@?
zV?1=lZ`X-D9rPny@!+l;v4r30dv(A2X3l%<KDhtbQ|InD1{6lV8IUUX?AhF|ZDpSl
z_8s1(ZgovMJ4EhvoMo38;Tz`-K3F_&^stqxmqX?U4Q<@kRc3KP+uY$+tp}bhRxEJR
zIvc*R#Hi+?`klkU8U0>+Rvqti`rhe=@osnB9?tfC{NCSGw{zg^QwvXf<~;ZvUB5lB
z#C`dO-uK@3v3_yt<9ailnP*<ExO{fOs<XcrSmiAA*DiA#)?vtxuG@Ply?Ac-Fnq?7
zUz@*ZX9TE)PFge3qgU(4gqA__Z*=6x=XG-kF!S<Qaycoof57eK&10IA+Vpc*B;&8G
z9_lCYb^pUYs$$vQ?<_Y7jFf)({rSG6?H`7HzH+r9Q!=4u`~5j3U*+YTGv4*Hb-j1&
z$wO<^kv|tVmdyST=g{8Qd64^_^-9Wi5+<MBWsjtmpV4ldY%uUa{-(u4^WLSNuNbvw
zqM=jegUydRzRRq6c+O;->?p0yvTMsP9!hTUn=N~GNQ6V#+ziRQH~9~rON(j56$F;t
z8R0naS;H#5fLUSI)6QNnEGXO>_^40F5Xpht3=8V*JZn#>{PWAnf6l-^XW*YR@Xs0e
z=M4OF2L69P1EM0wx@>mJnC901*WKj}ULkb~{brqww0I&}9x?bxMTX)>@z}mk+czvy
zNPRuwQryaqy-q&$d8{cvqWhNYy>jCRxYSMG^meONz{y&T0R=DR-aQiO8f3F#%G1Py
z(Y?2g8QfEJm2!`=*qehqzJxnxKRRt%nBe{D;qtj}bIN)zNWJ0XyYWP~6zN$nj@z&K
za7IG5yI9ZQafYQ$1(i!5KkR7N^8KYsL)R1HJ=cY7$?<F68TIv;%`&YJ^*AT<y1n>a
z48J$mcAEBXLGQ{lrKNAet3@}3$u-pYY_z?5X41Rri!Qx(sZKb1Yr4yv0Y8m@?fN=g
zdS1B4BP(0ayxgD3uWsL6^yHpg@yF`rw#ko*0zSDJTU^MyUNKTse9FQt{Zd7BR=+<x
zMdj)6E7!97^>?}Dp|Wv_isF`$1N~+=CukKMw)ZJoz9`?bFn)jg_C<C5ts9o9gqjzB
z&KP~V=GXbd8!w%nAbELCXX&Bee%-S9ebBGL%CPP7mHXdo^gY&W^;ucs-Cy-~+OO!j
zjx+W=?~`J8y5(}*xW@{0-Q`v$&zjfkdu#d60bxyFBnR$ZJGs;FoiF07BjQHv*gJmz
zRV}GeD>J%0+*R&8Dc{fCQGLI4Y34+yGZO<ksi=J#=-WMeeCAwz<@qfg=U;1-+UKMy
z=8&mBD)~q6L$YN9XGTvj+j>;9d~?OZ_!Fj=f({*heOWaA<tE!ZcgLn^Y$*;pxA)UF
z?}aXzFQjMMcpP~gxohXLx!=0!Rpv{F{#>iI>YP<*Y?qqN9{XMfw0P=<i%G4%6}+YN
zfrw|+n~tG6b@iqWvS!*LQ{JR4sg}%mI<>3x;AJ8wCamk}pxH0VOk|o~$D023Pv^%E
z-+$Flb5Z~LyIwAufi?3Rqyy(2biUG}rQN)7q4`puaFcP1XRiLWZ06;~NnRd9m%fy_
zv3&KM4l<5+)cTnoIo*7x_vNr(A>#~BsWo<ye|!1--td&2175ccx;RCC=yR{YqeiQ&
zJLi@9HoiBOEbw}zxovUhDJHVZ2lRG0?LPDUAs4%@<^!}Ur5|rMSM250!)u48cHp}h
ze;?%ri$&*4>U<+QY<$*kaPi>WQ%9;D5{r#@ZcoY{-1G7W*_CB}(ndyy7T1kke(Zf%
zfXzdP+3|1Rckvsiv_Rv9Xo6Vc+T3B<-=<t$Yr9EDXIt2`=I^sMA1Qz9AF=G`$>o`!
z+KflOwZC^Z^U+VkNdHOSMh%?vamB?SvlQnwb-Wjz_^`*hFX|1-o-!5MS7$nWl(2G_
zf27=W&T@^8uT|8^tR8!$Hr`rlsPLmq)9skN(VFNxN81CQ?QD&WF)DA%Ne|o_UzM|M
zyYImrwdyG!vJ^t@8W|0k@UU9yXR2(m@vn@C(#?BjzH3@J<*fag<PkOLl3zFf958Q&
zT8Wob*Bzp%7mZh6_vrs?i+_&^osU&o*i2nx-t;QRM6G7OZ9?Si?JtXOJR2IfZR5VK
z{iYXR|FlZ(#qH;rDtqtL*()XXah>VYwDj&aF+-Ke_uHkiJBCzf2CrPBX|J?u`1>PY
zqcUgq>mPSrN_pF_u<P${^!{-EaG9=VV_Jt|(X~l+-VZW@*XNx2=rQ+|MC!%-HzH=U
zbr+k<Yd$~R!|bSn&#E7D4lFU9`8+Y&P5XPlit5DYuR_OG9<p3AqeAP_N?nD%Zw5I;
z`JJBM(ns;Cgs;V*${u~rx(|1<D$y7Dd^Wo%a-(r!^<l-J?Fqr%&0A6%DsJAa^!w&)
z?sTwzarV-qn=bl1eSg63!i0#fXV-ge@zl@L&+gn_Vz>JA;t<o#xqG`yKOQ4Jc<F;~
zx*e?+UK5p_+{yTn)v&_$9P_vi-Y53#%(Kjnnl`S}L#vNU%We;zc7Bgnja8=iUPVu{
z%Lhvat;vo&I^AAtSd8A0+15iHM|}T1zGJ}r>l24muezx1lx_M;#G%kZIySiXtbr*O
zN-;JGMdC3vOMaL-RM-r3Yl;+&I3Mit@@2Nf_uU^)bWt61=1kYeHQ%h=hVPPe8S60q
z+fP%Ij6BH!QFqIZt!e$?vTaqf{^a3<9_@DNFROQc@32ktpU$|j^WnhXIuA!Zik<Y~
zTllwK6HaVdd*=Fy4YTV*;xB~G&V5>0p}B5q{i{yib8?=@mT$O_B{g~ExStUrXXfpW
z7hUX{Gh({P)53jqTO?A|S4-FhIvCGevthH-n_ny2ceYx&idU~6WRxO%_t1UAZVLiM
z4C)6SiSO?wD>vqM^i<t%A%zRZ_FWLDY51|xN~7Dui=xhPPxr+v)EhFjK_~Ie#2x98
z7e=h}>96~1@wP6<jC?~(E{6Bsy6Hv73A%fvJeme3Do3U{O?VWok{I}V`un{Pwr(qT
zv&!G1Z=@P=d;EeQB@cFo_?<3Kk@Ol|_*~<Y#MY$mzkfs~O)QSv`Sspw5x;jcpXs{X
z^N$+w&SH>7)HeIrk1|$$KE*v)o0wN~Y+S>aAEPIKeUdxO>_m9#o0&yfJ>p;7**2%l
z%hK=g^?p4w4!`|<Ec15mz;_+3K0RMGXq#DfW_!Va@aqG9TwA*5n3sF(C&Td{>!mt4
zOgU579<TJQrEiZb&qrpaHGUEu+qS4`Z_n_tY9+k}CFq`Q*zx?l#0!0I?Sx{@HJ%1W
zu21@i<(b~u)$(TD(kB<=)2r=zZ%}ZXr(1e^-R2)tJ3Zag$<FTN__gatujp(j?d7^6
z&LQ+cuGVg^*@O0fGTQI6tK*w57d<1pcD0t-d!_B#lcSCI2M!&1I&+Xh=Yf~%@49{*
z)?5~%Z17;s+Z9Xmw9G#p-FJ3(;IE=Yn}^GeR}S-9ApXVF%Y3_emtWmaCVkZ#|IF8V
zyxEj18FO4c#vgO~aW9~)_ETZ^GY7wnxi&Yt{p5Prz|Ld0?p`+K#KDtUb0e4h%-UQ1
zYT$<2Z#fEM)*oG?ziH>1#}a35`im@2Z0MfvR$6n>tZ?(u0ZuMmJvvo1RX3VAHSZQ%
z?%Bnn!=rwMQCGWUollvcG|u4Tlq=dBnpXJCn)=RVxN5KE-~Ec_5AdDo()EQ!-<S8U
zB|N`>K}xc5w|t?yd&V@2qF)_SFC5zW+kWScJokCE7ls$kx<2F6K)+pM%bU&(vy|=_
z^Fn8P?G>-&PK#PZPOghiUefD$+Lh&1*B7dI*KFMCR{Y4>bo}8nDy>aR-rIJ$CtKw+
z=doXkXzbmi0T-_Iy=EH|UEf#y*738h^IyMC+F<#}E_vVF<UxIvA3c3oFgIk<*aF=U
z35R&Y8z0YDp1-xwD|~-WjHdM!lkcuOA5Tjwx0RfA`iz#%%1JwqDW5$Z)yZM;m_CLb
z<tiM-PK5g36dTf~>-hM_wT^CE+lF1bKd0`2UE*V_jdE$nMz-H`x!Hcl)by0JM&!M~
z?LDSmI`y%OO2UVI8(-e`tIVE})vTd+<K(WIBRO5u)P5?y_-(iCQ?CWCk@@9&*58{f
zU2oTWed*wW9ka^J6O^qFjooR#Ti$kTO`lK)-=luBRHvL68CY1j@{rg-&jq56Zl_<$
zO`V}rH6_JrYQiVU`rA{#Ow{!l;N{c0dh3jDYggLuDd}^!c}Gmx73Wj?Rlii;cx9?6
zuU~wieAV-o%U|n6uI})@ne205Y2n1~#tThXUutdi^JrRqY}&+}jYC(7nOL~zElqXX
zubA`f{CJt+ma`9S+kV!gMJX$!y0>xKz(g@4n<rTdUuHbtsi&`!TPiQ!chp1oo(buz
zuB7Rz9#)RbmA&_+tWst03(Mps3CD*FaC^Ca;k0`fa<(76eEZWz<JXq5?|0u@;gKXV
zH>3V=ja1^WE<dY0FMN_YT^Kw?Dt%ig5#5Siv0>Z2`rpr2`rTsr<y-u(7Mn9At0#LG
z_f|RQI@-RUinZRln|qfpKQ!m6NZo9cx-P5VAFZ)#7j;QkCK~xcBgW#r<j~eSzvH6o
zJFZ)`W?igp#d+Pk741v)!!GI`_ZlPWo&7dvNJ<y!o|S{Qsd?WGUDRXm-9C%#`s-CM
zm$Z|#dO0)bq;+NK`koDM{X&&5N5o5N-bzdv)1Ep%c<ktK_lpvrTb?ic+~Hv63$x(q
z_Z*+S42yeXYIC<G)at0++f`S*kFV}>BXLp0tJ^c)Us!*qo9n^{hYeN@NZFAtn>=yb
z1Gl0JS=FkS%-6}dh<E=eW^K4&*(e#g?(W6UBu<aZ9_jhYJ4e~kInwCFr)~p|ZLJz`
z-J<8xiQOh#HYwVk5V2)@eJA%Zwl*#)x&x)}8Bh7~*2lYaSO0}I?>!er1bp1)V0Q6o
z-n8LGz7l?weHU51ZR#RF<(}#F_3y<W4Op(65ISM-vLiBmX4tB}x!5V;^Q>Gk8~axG
zu}+pAW(Be%gLQX}e7Jd^xc<kkyH|xA{4wv)#`R+(@4P&i*>P_NJDIIwbLThC4|_fT
zm3rol;#Z0qVV55^|2k!GWA<+=b$N^G!@GJpD#)I)aJq9^;;Z%62$PAkKF_X<-LLi`
z!m7>LZT+^~z2a?SzOCsyKJVhrUf<Vj5!<8q;qa+p>%EM6WQtDPJmJA5C$ofvRUNI<
zV`FcP_!T{+lc%ZqCexh>pXc{GB6)pZ*F9r`THY?3_j|+MM~|d_jQy2=d+f_&M){Yw
zr#IE_b*Wt+Ds^h);h@9%R#7{QoD!agEOnFVK2=J6mX~)&C6$H!9-n)fG-2_?E(2?&
zCQ4RI#y3=DH@1JBFZ(#d<KZy32lehTKJUFRUis#DS-XQp7l}Yu_gnQd$Hl*`TrpwW
z?WuZC!b93$KiAp+p->}bgII}dZU1ThE4-#%>)+;nL1oZs@iBRU?QhMVj|x|rG|$N(
zvU>7a<JDUJs_pWD3jM;WKfkmK`?28c+!J?-Pfw0kduG+tZ^((*cZ1$1=tSvw9S=Rb
zulV+Tz021Q@BQjG^Y%F7;61w+q<uTO;;VvU@&ltC$Htv8iG8J;s{C@onyeY>_3d|J
zlf0tM`smzPY!fS$e$}SZ_FCkmfL<y}v)B3R)E{(O<udt_Yo|AxkK4HzPj+7XZbHDL
z?%FzY<)!Yl4Xtq4HlwL7KcmOYnEM;9|NJ~K$Zb>hm6M4JdVgKJXI?Mw2$eVDE@{7=
zcBnKbD0B{t(G8S!m~6FjuU$gId3&WnSyoOJZy)w;Yw9z4$^DQ{(OGflrH6-}`#gGA
z!6liqedbS1@8Y?jc<;^523xy#Fv+}gy1ndOb@}(Cw8wf!mQ<O1G^m(%y=+FTPSTE_
zJx1pjBumU3sy0aG_plz_^{wmM%~fI-zjJadd->LCz=z(s8lSo<rugj^-=h3J$EIIU
z-H2p)6&n@tmshnC+T&J64p7@%Kdz+fqUjG->a0qw>-%(B<DIEt$+dZ9JNx{QTDZ4M
zs!w^BK1(k2(7E{1RoC+Og}AGm_Xa!fSvp~=Rjr3!$8pDvJ6AhgF1%j<J!#P%zfA>`
zBd(==9Np5Ye6z}`Mp?t@)=;@_E4Rc*M2xYVpsyEEGE@C+-WWxLeu2q*RCj-$5x(Vp
z`ni+cSM(14Ry9JR-zV|0RrWgKx2F7-9N+1l-)_m;cW0%SRu^pzon75rzg7D6j<4TF
zOxPG3vUl_vg_l(dv+N%Y%{$xrvHob`oGRr-KHoI8T>8FlJCM<uY<Ked6S+q^A}u=Y
zSIzGZPK}!{bL-cG<s$2&g7%jxSI?EHzyHH;#*VpnJ{^@Q57%D#>X*(-ca5Y{&8^Wn
z3(xMl-oNiKvD=DsyJ%z%N(vhE?n%b>zHg#+*BR~_HpO`8t)QNZMwC3xd-3bOg6e_?
ziBk`Tw@lAAJDY#2Zu72Y*Vq8_rz5QH2V8sqR`pq9x$0K8#^;Wr8`p~Hrfhch`ufA)
z&{nL&G}$@hW?gyrqCISGgqO37an|RzE6=`8ay%LLWZioy@m}#t`#dl7Zm!!=si>2l
z)MxYZv-vk{Y<Auj6MNeAV(E3M`exmoQ6`$|b&BPNmf;6JG*;QZ`<ij)X8Bd6`=fGi
z*y~5s41Sh;Ymi<C|MB@6%3Hf#h%oZTZ-j`l@|jo{8L664He0X%RD}!kY^pYB{V&?y
z2d>Vt{{KJR=bl3k9#JvLD33};iA708iFVl7U>i<!xRIhBl_@IQaI!?j#F&$mIZP}}
zR5VPieF{I4VNSz_x^fv66*>MKiuzDeQPC${^tpe}_jTXrocq4d&0O{U-H*ow_jz6K
z>wW!uU+?RE{k?PV9(nRxo4?%i!ul`HcJ8`lQ_nyD=hZu^fA-{8%P;Nw?g@9S`||mh
z4sRI9_C0;R?@?dZSXb6%^~WsR{X)U>KRV&7!?T(G@4j>UpFSB3-FnVz=f0=*9b+GQ
zU*)4eI(YWV*Z($<^U=qyI_uY;{(b8YLS5G%JNC76E`I);l22Xuo8Mn_d;NP(JoU(b
zgnm}N{gJxbcRld>Qf=^`AKmn3>b8SD4-9@H>&Lwt&-w5jv!5;AaQb_mee$m<r~Une
ztB!pB<tM+gVokUIsg@5d_uci*)OTL}uC;HzaP_Uv-*7?proVlzXgu)3=Z~%(pSvq^
z_tAg9<j%XkysG~3)T6e(y86WM7l(I`{j#^U^qKRDZ~MgmT~dGR(5<iC_RibZKfL+4
z)aQQv=l@%N-)=4X+@`lKKQ`smqyBf__pi8wLB^3!7O#H##?HsmzI1cp_TN7L)UR7#
z`qX8A)b+H7|90MIzW2T0gN5H2T7Arm(@Sove(*P!e(d3w+TNdb-tJ#M^_w%FY<hO=
zH@_;oMyuU)$@ktmBH9pn;f~RTZxtO}_KOEk+rNL{zwUb_cjV$z_V(WR``+Ii`@~nH
z56<=8@~d@^hl_uC%6qq!6n|{<ms3A}?APC&ch9b`ER);9I0M#p(CGidL1U!-pfUf&
zgGT0q2aSS<4jPpYA2b>sJ!o`1hW}Uae**s}@&6kByYc_VK_h3^L8J5;{Q3?WHP7Pz
z?Sn?kbI?40(CFC%-HQi}ecy%lrGv)w_uw~p&`5m+p05)2`_MmqF!uGfr0KyeTdOz9
z8P3>KzxCQp*1I~{wrN{!{k0~brSpI5#&`%#&h~BGTzy6DwO8D@akHEhRS(d{`kIYf
zozOM*-_Su-v*pHm8<9YpH#!gta)gDdZtIr%Ew+#X-DLZ1vfo;Fl>>w7#*JG)W5)!#
z#tx`--B{;@uGv_x@_6OVo3Gfk@p37y7zCmEZ9-RFv3bkpIE|u;m4uB-<tFyq40z4f
zYp$(!LojkeQeIcyd_{Hj){iI;5|MyR(l{ika8U_#mNTG0`N@!jmo1BuZHcjd%Vv|r
zOg)umCd&e$Qjl<WKz3Hb3o1up2vomCVz9GUwe2kX7_@EEl^eH0OTd^+#6k+R?aJC~
zueyF??EJVuA|^2sGxc>hkxn<X&0QS`lPw9VYE3AXgc#)DPmDKiylU&ldPgEe3hm4k
zl|Xe{wpxj^AUiXGL{^<iz44l))GP6IQPnxAuHAesCBJ1`-Hn%5-z-PFIqXf@i_B~z
zbqe4v1WWFT)ItP`Nwf`ev`=uTq!Ml61R@4IVnL3uP{r!e#@^kwp>nrvAa~mq$knz5
za<%P8-x@XM&i#jx_o;svkKn?%a$E$Lj;q5p;o5K`(EVjK{<sKE-s^BpxHjvzU_H12
z+z2i*Z@L!#7yd2b^7t(dC989hIwzBtYCivwz9p%#$0~r6-t$i1@y8$Ud$+oZMZgo}
z&vCJn(kHzq;~4ypIws2($UO1bccl4Fcvrgb<d}aBv{J#_aB{X;T<mOgb;*LUu)=f|
zws*mbUBC0K-`O@i!}cEI^Z)w))XD{;a`l4oC(`t<x~YF7jKp!B6<;j;c8~b&X^PQF
z*hg%%f{&2?rqTuDt~CorI`8s3=H&O`x@}f?JH7C=|Mq&1#a~Hyp^wEa|ApR*#|swi
z*KKh=XuaF%<vs8E1*05Shik+2;)Zauxb#~5apkx=TpO+zH-wwTrEkI?SB|U0wc&bk
zL%3O7`eyub5nLN?05^*ZZ6OS<373ZpTfZaxufqx6hU>!h;s$U-xF~KG=c|J^E`-a&
zg>mJ$I$RU34cChs!p-8+Z-5S0j;q79;d*gHxLI8KR(M)Zm*qEL`A01pA2dQ2!sX$@
zxN=+sSBGoDwc)yODeCJ9F^=y4hEet0f^pNg7mVHFcrU|!8`sJ2?biEp{+IH*MV$5i
zN&bs}J(%#2_dM8t821s}S-5=MM{#mbgWQo&fcpfl2)7Kk99N8!dlXjUN^qsPRk+o-
zH8{Cv<UHJ3-1)e2+y%G`adQ7l1@0o;dfWzFB~I>1k!vg5&*7%;3IfXcnyYYfcfv;8
z)i}9Rq6Q~6EY~xrdnQB&ijgaNQSLdZ!`*<Be(y${^md{zKZCmo*MJin;uc(V%|DI0
zvVR(RxG+wB|KM+<4%ZJJ!IfM71Y7hedYk8@w|PQu^JG{tr`&R(FQp+p<y~n@Q{|fl
z>ELp&z`zM(#_2*+yfj@fDeqA*HE7{oZiSHgo`1)f@ihN^#lf&va#S#NML>P?BLdWU
z;+WAXepd(cw5njL@R2gh&KxtA3eF=~D=q{UyQ@R6E?kz4E|=eZxJ<AD(&;M+rnhRP
z!OR{0(qO1r_aBpTR4}tBn7%BSTEhKgAxNfhIqw`ZZs)%buN_)(FtgdOH3ZX(f(%l^
zz^U-s4$WueT>i3P`Yvr*F!NsjvS4VZzATv2x}+$Wx8sPSU_tXz|CRn=UQsXyKWLyO
zD%CE^;4zRjW{9jvx^@bWR)29Yv_mfr<}@$SHUvXOu^`L$zOw&^DsK69MC!Z8jIqOr
z`}-bohlx(U`_LU4GnyrC(sZxHy;IWPs*~0olK$o+ii73awMVJc7uix@6j1e=rg7gF
zJU%ZxR5`7ba#}^L)tZG$aV-l_c*|AEN&SQgQ+CRj@lFZDBbZ!3QwjDPg_u|kSpKPF
z#tSyA5iAN;XT#dS3Qrp|q)o~r{N&pR9bjKoh>6K}5c0Ffj3;cEeDh!k>^n9r3fB1E
z1eT4Te9Iu`^f5!egW;<QrZ;QaKatoq0j)Ebx|h5)Yo`2DAJO-X8LtW*kEA6Jtn>Y2
zhOQ73D+cQTv&(WNSUZ^LFnJ_wt?&c8Od%%L1eW`OF++5RJVMtl{J`!~h>7)pWt=f)
zoNJ{;bf|m-Ae=j9$X&f|nO)(O*^*#Wia&V7QNaS_z$LrIa*dy~<1{iAJ!{N(ly};3
zp7uFPWpzO5=N$a1^T&+f5%?+jS|Rea!YN<=RkXewyJ#&7_;<Lm<wPiYrxBi^PmUR)
z+kNYUp_^z&k`B2mzXp6%@cLj#Yatz^GM}Hl_~o8GW;`i=q$8<~iL~CM(hzTHQl@gR
zeK+CiB^*x#CwJJV7mgY7-3yZ!d9t_HmBDiVV^-?p+=>Gint6;Pr2*}Eppsx{RjhHZ
zij`>uMcH}on9)QO(x#BL&x+0wJ=Tby?^9#Op!kuORt=UrL|-)PYstow!4PfD)MXJ!
z<WBf5=;b>eLhr4kibY3>7OwZK?V`ZVo;dnC1lx4#H*49LF~B=AfUaDvbY-ulD@E?|
zq3MU_r^ug~4)kx5u3RbUC<zYf{`>u&F`{)$*_ON0OIMB=?+|_#CikRQtQs@YOi0O#
z+=*TeCVjQ9ngS{gre^ahcc1rwHwmuFcx5oO^(d9%m4U`!`to3EDPD4?xo`ED@tm|F
zSNW;-vPN|La!L2PV8s8q6tC7o&>UO=ZLWUJnDJ%aO<hUdHT#hP?P7FgMKFD(XcX0+
ztD&8S_IRP?5qWF?n*&1>)FW6c*sKi;fpvk+fQjv7=B+Fk`iz-3DZpZ2x%)e_Y|N-Y
zo+V#ao1hu)5ZzC|^Zlc29Zylff1PFmt5oMj)vGk6k(j)4`ap?`N757m>jV>fM;^iQ
z!BQ`9(v^bMyRa&-D3~g5D{LKD>pFC~O{dD;**O=D8COUIJQ7C-*mkf=g_t&%+=)E|
z_NjRN(Ldemr?PkID@EU-v#dT^<o~Bg-O40wR}@&~DUB-v7Y7TLCy|Rj%080xtRFK<
zBrRqeULkEb#LqB(`|(?>eoCRKhGrg`y;48^B`MO<(KI{!)KIgojjH|>Bcd3Kpi-b6
z{#MODokC~y%Kk_UFzsf!54!P^F+*JkM_u15oRa!^|A}s$TNJ2rY38CpgyhIYYkR83
z4EYv_*(TtZ)RvXqQ%oPC4N`a%v#Se1q$;&wOUlY%TgsMTM@o6HE9DZ%&3>htIQG3c
zYLIjW2%-a3@hM&3B=O@X{efAw=Sk5jKe;1$0KZe?ev!DJ+=D!fpXgCD+;z%NY*xAJ
zcpASm;(ldxAVq=oP>BALyNr7xw7o;>QI%)(m*zi(!aP*JDII9dm1D*!BA4rxj(-U2
zbFah|!LRYEG2?2{^-AZQC*@1OY1x$}ahY8m>{{y2&^_b27&c1p$bG<_HDku>{FZ$0
zkUpcCJ|j=NH*TZRXJ_Lrcl?I0wcEYRV>)V+>Q^x5q^;>F*$(ImgeQ++nP7upe^iJm
zd%0j;*U?TzPp=T!qkFP!fD*AW$xHJQ+EWPHa+`IzETBb!Xr^&<xi}zk$sM`_o5qZ@
zq}<lT`#;qxVC4@`?jf>AHfbFz0;^SnFx#EngFCpHHYMp(Z4%YH8NEoKu#$Wi1Irz^
zbz8=aPY8dPzE?JVnUuZir?g+1R<YftuaGjAvdHHCznZ!+<GsAgQ-&)5+YWZa+slx&
z8-MX3WT*;$E%58xI%Yf`?^6%i4wX^mA(JHmZ9DC-h<13h`Y&xz_)o)M|4gEf*d=;n
z@pkTi(L25H-{r}_GzkA&#tium(qZTk|LcqK_n$0^#F2qUSoXj_|FdJp2jb;}FfEq;
za{rUw?27{06Q1o0k2@CeKu(E2he7F76ZL&~@qc^K_#ap#8twCoc#v<&zr^1>X57uY
zly9rFJ*x-V9L%BpU#yJYD@`S!M!(X=qJ%5lK4$#4M>uW$A_1Y5uvrNI0AYXN71kc<
z)$vHhv{zv(30raJnDKkBuy@(wO@u{jnR7+$giYN+T|3)tLT4t%;w21df9qLrC}rt;
zqwt!6*XlU0Mdcn|e!q9Ul>{>3m3u7q*<EAC_a#qC=V-4=rz7!{;@90WX1o@Uhp~WN
z&zHvaJcDq5t#>@j0>Y~uUO9J<8JopkReDRM*_D4~=a&TQ{I6lmd8mRS#VZQ0vNmkb
zx0l<JU_^V#lNDttIxqJ)bnpF)&Et7gc7GyWcKfR>#ec4MCY9YU`D}z=xP8p{p_5-?
z&PDN4_V@+CI_;01X<HUhW2t@c8hl{P*aBa(eU!x8hqf**pQR#WdAND#^)HSY)k3fO
zQ8m}W*h^-wq|2dmES9;BmFiX6U@iuHm@p?wdQ}+J_g+BXI}{JICSb)zc<g`Cz14)v
z`O=v2n1m~jkJ}REmXK$WjiVWNBpafoGF|lgk4l5(%}aM2(Yj=(ey@L*rtG9a_&0Qn
z8DD`tW44fX8|Ds^Um<=*@k@J<xd|)H&6*5ReosfqpvW4Z=onw~(Cic%9_c$X!Rj9x
zGtRO4x1{+bENhuhqMB2vW-$ou!+z<4mAw*yPwm5FMyBvqdW&{pjd8^kwmNr}k5*_S
zk62^-Vru+hWwxnr{r2EDho34#_#};SR8s0lill>jfd(b0>N`Z#(}b_?8Z-VLF9#y<
z?}uJ2hN6JTLD~t_@8e^}@CVJb?(&=iwA$T(=6~7SR$CG9|L>{DD$?sRlNo4L!n&S#
z`iI7hqpbFAx8a#5+_8i?jOHUsf?@yDH0`|Q&Y~?1__I7p+-jpk@UH#&nDGF5&(s}>
zeljs9WaXht^PeipBRQq2jTXWp^bYLv-;NnsR=MrasJ~|BS{Vy$p`%`g1gyZ~FT&zq
z2Y5-mA(R9ngpUxu^MA&S%j0&E(u=B%tMsTgZlwo1={U0Hsm!z%VmqJM&Lg&E#I{zA
zFQ``EAaV5nZp;Yt?yCrfu16_L_D8{^;7x+_NV}f}EBpPJ@lPu~t+a<&KT1-xHcZa=
zqzk1WdN2D#+QT2ljHBauNR+8-Znz{ktNVYsSRUXda#jz&kw1<ZCm&KLt1>BO9%AQW
z`dvGJk+LEVm4D)C`?EEd0~W%~f))N{%$Vcdca0jWbkoXK1TGAwuH9>vQ3jn|=3ki~
z6`Dj_Q}fv7e8OwCCT7m1l@ex<FxTs5m|Zd_znFa%(eCz4ITLAnOmU<c*iG?bB}==B
zW9aW=#=VQxgOVj{tQzq@vsg7~eO@AFmRULz*$Z!t8C{Zh9+9tXu$F_2BLrajrP`9O
zLhxSjhXm)5GA{=!{KuHFRv{)<4b}k0uv0xb{A~cM2UBywsxLw6)cnykv>+A_=ssfe
zGTqSjK>JZEyriigY#8if!D@q{O{7WM>kxR>!kF<z!Ku3>y-m-;7>zkVY{pQ0Ko+;#
z(odpaCj6)sey4W6%!#tLvO_PGxun(1tbEQK;l;Hq{fOkLjIg19jv0@{<5vCSnqY|N
zEJZIJgS4pzXxpLvmJ|x<v~;bS%W<`-Vj8=Djkm5<^Q>W5?1P`4I&N&R+SI)we@XKq
zGA;BdDi!gv_g1uXsk^jyk^aEAaS`wGNIFAcwP1I~WzJ<kCS-1PFq+~IdpB0Jv&pXx
ze!GtzH%@ZqJ7M!AY=M$so9=(>NY9p{^s}UI0Dg@pjvJqh+lq(KO#^=aJH6Kc6hA40
z^epoG?s4M|-sKT28*Ca(`Yw5-t_#5O-!mSc|7_OI3x-%FGUZmQR4>q#;;NzTf%anQ
zLlSkZ?4Lv*5O25dkanAF0F?wJExqvCbMm+$U9>#8xIwTHuxACJElFC!+D&F+R%64J
zo*yh<6D%zXhE*Rh2YpRw+-$e@wwHH9y!T>2SQ#?|^I)69{+eOJ+$nL8hgNNk^c&=%
zS!dc<`!xLqvnz0uiM)VXGp-^`-YMh8@92|l`Sz~sUd`XH1^ek<2ega%UlauSfVVW2
z1pI$r3QaMztN6bHTB1Nb`i6*e_s7P~F`Ft2ZBWK2A}cfaMLs@m$hYVvJsvhx*k45H
zJ4~pe!1W*~fOvBky%dH;;d`i$f^p-xc$=dywYNFihS-Q<|9i=Y+e9o<b3je-Xgzz}
z_zV1OX-f1p(kZ`^lq8j(J%lYU95<eF<|h#r6H2=%9u`BMx}jpf8HXqYAk>%H{!b=9
z=Zu?cOC%?Z3xSoLJ8sDLBqV)F`jqx+=255M@=%d>#j;9`!K&fW|EY1~jCkKjIW5{Z
z`d<<GC)+OLvB;Evcy%rxH@+?D;St#!1S?%JZrm(@l4mu~M>%Ng5omJ&v&Ok@J5QK)
z!UQBuJYtumg|HV^jT_g;=PF&gB%$lXc)r+MC9{l*Md6VF5gWCqpq_X-){dLwXy&Uz
zG*vn~>~Pb+9sknv$BpNp_h~Eu+WbYI^x;2^e?RLUZ`-b-n)bh*Dzqek8u0l}VSa4G
zxN(!bo9*Q?HR@opSlUbo|2_Es`Ec}WRP(1w<slQU%2Rn4{Z$9Q+RKnJtNseWwu7Zc
ztol1&=5*CqbS?d6toByyeT5d->{nYC%++_&M%V$umJwFgOwGDye!1E2->#b)Sn@Ch
z&A#e!<423ttG&;eP4WNLTkEJkq7i=ir&2%HjT;<DODg}w7(<QQ)!gST-h#3!u#vK2
zqSsYcYXYoqd6c0V%SoN}5r1Xf;_@?$f9eh1@>5LsIsAL@|EwiH-fbFFUNZ+^q|e@{
zRXSSWQ+OKViw5+2d>lu6vFksj8!!tre^8Wz%j#g9c#ps?_Q2oppgupK)p_wC9XYst
zq^0=wapOxV{7^c;vM0mZbMa0MYblKP9JKvS<HnTGs=f?bYfMgc$OK3TWe*qCmuY?c
zX4Gc>CifCwK{h($bK}OY<oKSA$45UX@l`{+ulYZVuLmCWca9s+!_Um0wU$w?^~B>t
zLPb7?p-tT}ZhTMDMhBVh|4>RWm5CRAivJw`{dbKUOJe@otu*=Kz?CQ<=|eM^=<jJ6
zHy-0%;$qFdJ*J!T@GJcMxS?tIVWu~0{;yG6skfutLO|vC=iW1J+{nAk#jqs7dc=AB
zU8DGm?OqQ}3p7^<O>Hopp_e)T0UiaPHSw_a48h2gl(*bt*4H|2Tq1s|&aiK-I+G!}
zSvjU2ABJ`s+SOLSe2B4_><iJxJ)0YAdLJWai!?;hTZN}%Z|oX3J}%{`(uCB+Ry7yQ
zT4AMcbzr&qjx@#RcpC^i+%|4R;%Qv8uPMWTSVXNB1?q@;5MI;wj~oBPT&LL|xaLb$
zzm=G`sYwa$!)6-Nv<rAC!ie&BF5yiU`_}Vc%qstLVkjqDp-eX_87g=mdVBi;b4&-l
zeNwKJWK`l`{KUBNhb3m3c4`;OI0`*tt;x&CJ_|+bu(gT<+ElP+8B<>u%fASG2;L2^
z>936&y2u>sZo6bmmSjJu{FTu!%Y2+i%2%@!qG6fT_eH^mq96q)WhcVbxtl)U(uKQZ
zUBS-V-sktG_|KBQA=x-VY5h7S*w4hwKuRtDv0hXB<$|mP(Zb5B7da7GuIEq3Gvh{;
z#GlYV(!uGn-6ST<(iXd*-4E?`LTk3g8flBU{M>_Is1N&3{1SX9WB4>6bL?M1=G0td
zF(fn44?+JfOI|(f-*O7Rl7in5tdyk%G_Iq5Rw^4T|NXSbZ;hL4*6>Zom4fwwg?X1J
zgsTFJf^8Cjv|DSn+O^i;NWwKillv^=H=*GX{nQRt36?GCED3g{tL1#r1g4GOhkwnt
z$IZ1B{8P0tr6@x958+qXKW?N;SXEvZ2D>uF1WIQ{p-9<0bI{~GXSG|!{{y1J6n|8s
zFXIE`=R4!Z0p87Y)1J(|Ew8ECfs>@Y5IW!U$feNn2v!cZK-kL^Vq(?854uqs)&Q2V
zXWSUEVXa_Mu<I>M%AyOb@P%>XCBcw8O{}w(GB`8m_y+Kw!GFCKM$#}0R`B9@e7;4n
zX|Q~-8*Fq7U|nEm+OYI9kSj1dzihD7?>hMvfazej+QOEB)w$>*V6|ZP*y!rPrd@O`
zU{hdB*Q-a;+zB=d#*|$g>jhf?lj@a6=mx>&UDycN9N3GB%A}hC>l$!k(vZqta^@`q
ztki|&fE9ynw(%<j>jD$=M;=K_IantcO;kNnhw`M{QeLKZ7%zS3g<ZPuU9o+};x97S
zKp0Wq`gi}RnR0u+G;_tX8=m4H<0<j<gVnp@-Vas>_6_{y5xOW?+V`A!o&)O#J4#WR
zbg2kIp9{+Z>jewh=<>k!fIVWvior_vj+^^iz$M;FuwpQK+0=rC!R&R?1UBQs+QB*o
zo$2cVYj<ILz}mp*?$sml4uS0kv!`zgtl(v5`sTs%!D8vFCu|y%DtTaExB6teU98q6
zls)TzH_F0c5MwFGii88BL&$SutVp`3iUMWCyPbGz_F<1n|ArplrLA@LLH6;<P^$lO
z7<-r{N`Hl5A?r6eKNz>|*J90UeM|$IW9E5iDxjHy-raY|w80nb^Ep^8bRE9j4^g+T
zjT;Y07^Pbsb6)FWb6&-GS3<iT+9#x;k|+Bb&+7PInbp!w-bi-bg8-Em;nM}5nf>F2
z-zpnB9|jKbeckYp<yJQznc7hDI1Qh^*T;<>e#;ZWEr6B(2s>E-4f_~F_X^Z&Nr1hJ
zKw^7@@}PqzU1Z{l_&lxG9G3qNDM@3wB6HPJ?Xj_~TGBRP*9h<4pNt!K9nB9_?=BlK
zQSbgy#*mUZB8CWJI(8|fLV^y$XMSSb_^od8N$S^E2M3n;*Rc!L(V4SCO8dd-AErN_
z8aIAn*=oCF{GDV2Df_CF1t=*a5Aj<S@ZXZc+SFA{SFcnnVr?nc^1oEAjL8aFTZ(_1
z268FLh5VPbGnN?5AY~RndeU(nq-pMV<K~(Jza^i$!9u^sZi>s4*LYKV+11F@+;b`6
zX9ypDbKEGh!h5f8TJx}Be+Kg8k<Vh)W(z(-9nN6i!q-`M_VWgmlw;o)b3=Ck*>{Iw
zok<_i0>3Hvy(avsn7N7|h?v8rRzKf^fBPTCjT6M5CmXj1tPAWK0hE0e-{1D>n4KbY
zQ_xLAcULkU6D$P8o)NmVvuF>0WDK25_xTu|jNkI1+XvklLdSZe>?;iOS_U2kzfW-0
z<`d%~OqUDnDurpta{F%?7)c$s!K3g`<A%uPVeq)tHtVe9W{B{ugtzx?Q(!GNO!6=f
zwjIo#2f@?x>A%5I4JvOJlQ+S0!27^IW#QLZco=*Xe7S{hw(v^ujM-%RI`BepH+>6u
zJ@|RTM`kXmcxeY+;Jd+(6`V(~KCphUBNbv|`@s5KbfaJcF1lH;Jz&bVCA{c${iBr6
zpT}+IUYOgLJ(Xe2z9691GV-9EfwoTKrjB>YK00e$#~#RL*#qewH53ObR5OTApj+`a
z!YlnR<3^gaM<u^%-cR=7ylIY@5lm(dMGyBtI|uC#c{k%_oYpGq4?A?`+?r+YGqV`d
z+Tzh*CL?nWowtfvR%w258qo{-$LN3mif!lA3*P%v7(d?SsTa(#Q8~O?=d7}XH^uF%
z221_hczo}kb<RPJ(~4zr&xfXwBvA&ab)~PQd^-u}o2S2xk4;_u19`Ugd()9F@o(@4
z`<IlW>(}z15$F>Ck)pz&a&;USCyz5WU9ue7ODtNV5?dtw<Mi{!xUnT(C)U`fD@D64
z*pnhXb_t`|5{9)U!F_1@A@)CvfJfD?=gZ?2XRdEV;8*6GFiNblwf9X_g{n8raMco%
z3{o$hgpH(37{BFR>O5)BCbDMbe<d=*h}T11BR^6H)9})@38U5GwNoaItg|kZj+u@d
zoWde)EmT1JesR=16U6UcTs~MSyp{@qSGp4Yw#;(;cnJwh-iXguQrYsDJjJp+;D4Xg
z8(duV#=6%H^x_^q)aY9hCOI1BD<zrJq`CXp31c1a@(8v7HVYQhEmBVDp8y9_dWgJP
zvZ~hkwwZN{h?WN8(rWQ4C0xdF30~5lRDp%Sl+IM`TglRD7D{8?iPEjxp(}vy9KuL{
zBD>r(c<ls_xNy-|ec&zNEkeIpY)hrD*kQ=YB&!igf0BuJ6xtbR_X+I=#?Pew{9vA$
zfBd?Rryj+RCyYyHBBB#a*@TX|ZIv^OJ4DaOdRJ3QBL<mkYZ9_1aaO=1Cu72B=UwJ6
zl*YhX6TdqA*57czVEM_KKc)99+N)%=6~8vZT_k?4vcH9#nbSGWvd@EbkZ}Ek>ydDn
zvG<yL;$@>7lWwL`S-$smwSXdfN2Cnr36p=qgdt~LB`zxrxzqj{FGO}l2><M}vB%yq
zVVo(n7slHms<v63(^_F_FSt;+Slo4xRT8HC#0g_cH~A;EU3(ir1%5dN<#H*?Wu=-u
z8$g-tODRUV6ro%$M7f+Vic-zKCASM~D3O=_#F?HoVTf$gho-MVjw*Sb0#5~>A@62;
zrS048+eBLEd)PZ2thp*!R~D=(LaQM39&J>OPox~f7%iQ0XCv>nIy2|;7{;+yMWL8u
zu3Bh^psg2Ls-+pZjg8Az1g<a#Xe$Gk#l}%pkaZCz>*NV@KZ24+S09i_yY$!Wz4X)$
z81Ko7M%t*4Mpp*^E9G6KiA@YtB8RwA*V4*Kx*DtGK-Ui4qeADEjznK1!^bACWaJYx
z9c42EAF)OCUyP}_j`$gl5Z$$unCkYmD`W3cpFPBX?&bsWvoHl<d%*HS6Gk8JK9)JG
zbIl^drrg74jVv7I$--gW)K#)FPuO($$&klq5~y?Vy`--bp1)<hr=Lywyz-hTbM~mD
zXlNaeLPw2<ycZH>LN-LSS;zT&U)XfOIEi=t7o(aFX7+h>(HCK87EYTmP7#`KLsJ$^
zUrnuuUlo4o*%RvQvHmE2l!5q_;x}?G`WU}s;xdo!T}<Zd7TdD7O3jyMqri32X_i%;
zJ&CF;i}CM&ue04r{ZxVXg5Sxzl%q9vr!TR_NQfkRv95Oxh{zM<9TMm16OQrDZm@JP
zx^l~2wAT1S8<lbtX%(3shA!uA=%no~Ko^GY4AE<`_IPQm8OkoN^a@$Bk-X%DX$S9{
zFs|a=w>sW0VyQFNUKH1uMFDdY49h-pzTM1AHDSMh{ek$oeu=vQtQvmO#wG4}8_3hv
zn%u|@T88HD>xQ-i+Rq3rb!<QTpshY?FFO7e)XaV{mgD`h9HxU@(moYN9tc0hyVQf-
zW{=xGFJXgGGjYS1zAQ`Vd2Dl+MVwiV&s|E|q`Yf$CXAygL;d78RC}>(Jj%ve>k*B>
zDy+j2CvU>P8n@><s}20&m$ZR!^O7BUE4x0`8b?<V?d1Iv<{4?yZslE-yEJs>L*iMM
zavg%c4EhM~l2=DrT@>pL&GxqdZ4<OV7h3vE6tb}VEcMP_j8$r!A6mwE?E@3WY2?o=
zJM^zL-m&c0uq;2wZbDnxF}8IeYOY1vY#scv&X_QMB5@MiZRlC?6u(ydqWJyA^3%e2
zG8$0&55K`&>}c`h5&At~zB4C`ZwVkN|2p)PtI&_&_t|SLeaUaZX29B@U&*^Xg2{y?
z`@vWWP>+lOGQg(6)LHw4yd>&VdYVn-&_38I4P5Q2VKt7CII7_{^1%sn%*$`V8o)9>
zG+|uLyF7xmg4KaV1mF>@3v3VAdWD!+A6RPMgt@K+E;7CktQu^q(2-{Q+$}P`V~N_Y
zuU)EykSc^k^~)lIdNE_~ngdG5N?&lqjwP-7PQRE+$}Y>szXjemSiG(Fqsl|cKqci7
zc2>C5PZi;Y2zQEvQ{r{G>Q7bs$8QS1&s%<0-zD1*WCJYJ(s`NZ7`ve@{jgOAN>^BV
zkF5$ZQi*RrbWPB`Dm*m~_i4AN_{27v#xMUPmR}=YcL!4?j9gSR1Adgqw^mI?zNo^8
zUlxARvycO!Be#t0)SRRE72v1mPnc&WU49k#<#_nz5v~ruGW>Q4Pt`tYH9Pza$(wb_
zJX>NC4H_d};_4>M|6ZM_A9X$$T=F%5Un~4><lRT}4KV>Dax(%x2d->sev9of0~Y@1
zgn18&lIuiUR(eqGPPo>orX>Ds8cc^R{+NCeo?-lI;n~i+TR+5gYjZNs2EtwK!LtB1
z?fCV>^Dz&eO5Q}Da=U>;pJG%LLO(><+>cEdw^?EDm2vJ)IV0Yxuab6vSTu9yGt9h=
zdqa-oH5~<0OZaRFuVnVhxXk9_*M#2=%g^ewq}r~E%Pe&!I;0ZXDQNR8z3Dw~ul>o)
zMZ7_BXu^e{&qDC)f#2}QCybY^xSPor+TT>wjB$l#zof4qkv=)=lZQZwHWwW$@;3|3
z3^a?$AA3C$@`naf^<T;yK()90h4IV%#DwunNmo6^+8j(3ol*%t2d>tk%fV$nm;L=M
zl&0`(z<=tK69&yvwJnmV(x~bmzs$2I%sWvMa+=ULqU$;P;HZB~R}2xhim;fsmR%9E
zk*<&1ND{|9boJ2n3!RDs`_Q>RBTu{26^AvKkiUxXgpIW=$wO``*(jVa#;9-o%%3Pb
zz<!^{YR)su)kOBf6&X(aHrM9s;d9?rmOU`{W9)%E^F9FLkoxN-?mg#NZ3A0aja#if
zH>h~+b2g4E_rCJF=z=N26r4L@H1RHv=#6=>Zm=r^s1Al2sh1jF=ZJp+e6OE;G!j2$
zleA7i`N!{B!2V}!?qUBk*N@HPG5aP{6G~nqNBVr<z4CzZS$^vUl2@nwFKO>u?em>P
zd7R3-v`4ACKCql+6Y;aKNqrsT6YT0+lz_yW7W$m9vxJ=?&LzUn)z{?!rLRGL;Jr!w
z$-CX&(k@TfPnmcZLfZu`EV<Au7~+Nnb!J0!M<ss4_+etZ<dCEHjLl=VdJ}Xr(5d-$
z)wi*)OYOC&igj(O-g}^%gHGvrMMuA(&i${6tDY6IEyC(LrR+uta|C&fm0d2F+>MaC
ze8L#uT_5_9s^5Ff{ib5o$X+^gngzWhdDH{Q&lLyMe3;$?J@%<s2Er?ZUl+VYC+QtY
zy#CA0s~q~@#CX*ucu71tA^Mr(3F95YD}o=XxB!`yIxEI6C+1g*pVG?=P4JU^4x(_y
zU&%7RC2b8M);GZL^68monE3cOY;6uQhZxF+?}5G>`gx(BdEJU*H4`8V3`Bv__NCqA
zF)`S<V#0u2^j7*Mq(a_H!MB5}d0v%1**1v<BYT(GcPZ(tg{F5U?J$KOJd*Dwu&h#R
zena${xnWSzcjDKE-&=~>%xf=L<EjZ`g&1c%rMN+`{xuWken!<^6Jy=Pe%ux2eLNA_
z?C3F1ivE<cPG9Tu-5W9Wk1rT;jCDoN<>6mdHeoy^@!uTZt4xpVzb-}YXNZV^?9jC3
zaj`@Z+$cZxBK5CG3z2ecfKQls%yy`PsCuhEn)RNw6UO<_=rupI<WtEyJ+~~!#KlvU
zUpMssy!?O~C+o$~)22l}^9etIUoX6*{PaANmt7~z4lmA|h3FxuG0b5)NhyPQ!o3Jj
zmdJd1n(!=->tHGGd=giA{zUwI+#%-nBns?VPxYwcYJ%6D#C1A+B_8|P-X@^!LHc##
z`h)1>7H&98)bC>JGmPH~C@ZWl`(ioE)4!ts@zBSs0*kC@GXz$$oq7zn&yvOn>CxX!
z8kqgHCsf*7E;JeI%(*>%iJ8v$JZxB<Lx@+L$bA*`$HVgj!gKPqxL%QZYrwA*UUFtx
z{~>-#4=X!atr^Jz*`U4N=uxEJdI|Tt%MKVH5uQ&8&q%!9B#o`2m@6iX?c#qQ{s}!w
z_bh8=mhwdRiQbS#7=iv6NyjEL9rnI(weyZOIk7z8S;7=#2zKT0Yb1R#f1~F~`kZq~
z<>2+uED+~Pi8I5DGig3SV)_}j2^JBhLg^s8D*_cRYelBnRJrVfXCd)2MD*!nKTz?;
zZ1_U3Y5YenGIf{!GX8M1;-tLe`&H|-U%TS8$~}iU!w~$X?(|2T{6%NT-3a^EPpEy(
z`VN!7)n_N>!c?Cv8KXtI4Rfpf+Tb&DsTI$9Gama`Rm!gqnz9YdAxQas(u~VqXGv!Z
zn^OF_(k_yxhvRli>T%fL#4CNdu1ma5`4@REWnpQ!a>CfiJ9pX06<unqSisL}{Bk}$
zVcaS@vjR!m6HH}&JCBJjX4e>TrC!6LvFuRKyAo(+fE}(8)@UM-cM-Ps68c5*BlU8x
zwpzwBs@&9ijA`p|o>r`3){miK@{NlmOoX1ml#i8xm1gb54I+9p)_rl)<S(ac!srkk
zlly&3$3W*jUn+|~a@mlFQd=GHZ_qrOK$)dWDvtO09;!N^#%KCp_9d02wBz;)?A6OB
zj5WNQef_nnSY$5(qU!6zzXtyX@#m?=?S}6#*hxo_hp)nyTpyy|xi>@mo0(8b(XJ<{
zkbRzcTNwxuPeum1pY%&T>$gezoo!gkvx0#^%|_PTq`ogdWIBpvRi{phELr|m1y*^L
zv9+ZN){VFU;@W@Bgt5&T*J6ExY@hY0H+G}22JMjswh(+z-MYlp6U$v<ukMA+K7shJ
zoiLbv_vzbSwU@hB8q__MXG?yOTUQUI<_JYaH^B4aOAe?##Cjn--4R10a<GR<v2ZQz
zig$Sg8v@%6hMB7#!KT1^z|OQ`^I(Huh>LoJE^Pzl33iVS3xO4Ga`MXuD*$8oq8<rb
z3YHHhZAu=&s=)HV?Dkt7Sk`9K&WzD*2TR@Jr0W2i1GDF2H`uHT8vvVeVZ&h4V6TbJ
z;E}XUgLU8FO!ER*mkUd;Wc|m5WrKCNumZ4l7gh$==E5Ritzh<i)PuFSuokfGF02!*
z$%XZTHM+1tum%@40#@(BX29ye>~$^|OV_%v46qt7d;R8sRlBf4un5@Is+7%gE(hD=
z;#UpU?+V)h*5|@n!FpX-7uaqWzdo=Yuryn|`@p1r?bs-o)bB$Uo!G9kV7Xfv-&*}i
z(s>WsWqfQO(WX3GD*IDJrV1~{rnzy#_^>S<<zS6AOzbZGgQOQsYz_UUy-G*e$JLu-
z_BZ}QpAUV1jDF3b>2sj3hJGLPX9@q4p|{(0p(|s{sA}E64cbv?m96sk@40BNiqlH|
zvM!;#ptb9RJh0k&r#u&f)qus?zNAU^7gvMHyMBKx9{O%IwqF;sG*vlnx5C@w=>VH@
z#j_hM3icK}<&iWFfbHMr)F;DW{hx8tO@npc<V^PhSeFY+ucH0Cuxzjnuy3eX&3FsI
z@*5@`d)dptqG0y69swJ5VfA1mHcZMWCy)LcO!U8g%}Z9jSo`5Z&hqNB!pGXDgs-uO
zKjYBh=dAFkKlMmCre4bY!_7|JkOdY3v&S<;JXv5Wov#iYGM!ac_|t9i)PWTe-i~bt
zs|35%M%Mv02xc$K-CzS?b~zakez!R3hQSKJFz3`G`I`pI2NSzk9>EsCLXC<136_2t
z`Ey~}V3{tg04&3Wm4T(Zun1V13#$i9bzv=FI+#7bonSr})(f_9tCMaJY~F>9fX%tE
z8L(Lw=DVE!(}iV#P1`U`K3@*l6xjQD_njXM$(c>T!{Cx0r31k?Sa>CPHfeX`b>L+l
zcnf&F2i^tV>4Eoy4|?E3;4>~<)jxQ~ZO%5l0M-lkdz(z8N9eC_pD@ojkU!Cr*<hJX
z?1?kSFN{GFXHWf~Oo?f47W~y7E0(A3)uc^U5iaj@6UN!XKcSPE<?^4zkSi0288~y_
zXbZH(%}!bD1Pi;cUa&&2_rX#g$=hIr_G7~`!A8L9!FKcRTdj^ZJVw<h`Z@ekw>#rX
zy#o0IW9mme!Z!=dXTw7L9HKxL;Jb=<{k1)+{Wo)VBJ>$^PFHB=pvfVeqWO9<O%^nn
zA7z{XO`h<%Cq^T?r->I=fPZz&e~Z&!($-Jf>hZVt1^dAwcRKrmC|KE!1f9t299Y3!
z6Gl1jGKa}FtW?3%uEah9mp)kVYb;sL25$lXxP@=E@Ivrj54-|=1YGhaeB?eZ;a>|r
z>w#|vPi;x2?*tEd;C<i)9{7Inau0k8yv74x0B`cZGp?e)^T2b#dp+=C@O|KG&HRQ~
znp5Rj1@8O2wReNL8jUGyDTjLSQgAnYD|nL!eYfxjmp(_zQ&!Q1&mQoo2R;lw4}ONw
zTjvvmeg-`K?qpoAMqa^xC-iGr1sF5anFa2<$6AMz^lvlqeDE4@H~%v5CJ($Cyu$-;
z1n&j^ki<(mV`mN8!S{LKyTPL#d<MbiJ?KZl(_53%IR~EO!b2n>jX`}F{LhjenTy}R
zw8M(PMf_!U+_X*epvl@fVSF?N;5^YQGIhveq^L4xQhOOK%Z57*Z_z^$=yUI7UV?XX
zE<;YPnr%Gm6X-|$q`m9A_@V_0v6%zN;$MjCB&_&9668l>J|i(FC!5gye?^r#RzjJ*
zB!9S3!nbuYCXlo`^sn}RarJA>b@q^!`iI#g3aP%7v=E=i9AH=`8ST@KWck0H2(k^2
zN(Mz4k4%{7fW3Liff&bGgcX5JP5?f_s~cW9@T%e6oC9NS%C%OToGx`iZ74oJYVn$d
zSK0pqUJNCDqn|`y!b^0p{)=Z-nR%~8vb075lczPc7m`4D3GaflDZfW2jDy1a_J51_
zi;MAYhj%}`4dMO1e~b6t#dy!cyQ<4d_m95y@07`+=`NE-@t9TKH~m|@7cK7|cz45F
zmG{a27H`jVOFOK-7CC-=!g!c>vmILFn%<CB8E=TCYM*5rw0odEQrfI{y9vvv+|h8D
zsV;zgKVjRx@~?*#J(YSL>Fk~`@41qd;0dMsln%?rZ~lp7KdFu|eyvZk|69__-9`5O
zhBuQp^U^Jr09loit<7qsLc2lDDN4Legx}p`&GkwjQ$)Ph+H)s<Q4hZ|!u8{q@zjLz
zb*r2XG1sf^Ao_^R@h8tYsx=bf*K;oV?`!O1T1uNZ?HMJvhv3QOKu2hQ@SHL&3WVS{
z55KvU2Tc2J>c5%8oIS$6W|j?2)~6VMKW*(_ehnI>qn96jM9Bx!OON71Tvj>A{^AjM
zok$q{8R*iEV85)X8wajuhy;&&bUalbky!gptaYfftDF(?w@We5wYjEVSE+j~(rOuB
zek)-Yi|!49?Ey=T^FPG804F_IBJ$vG-fLY8ucqfFjIguLT=T>#t+H<VnkOsDMA^Ua
zs{c+Rts+bN!Ro-?!Ml`Yvlv{wir=(FFJ)-@T@>$UyTi;M67JoUsebv>md;Z9Fs^4^
z`)bNe#wv&|pEBTtf%QYJ4~bn>ya}DX$J*zJ3`-9$Wmg4W2cEiwAF6H+QFamki1#wU
zO0^HS2VVIv(Fe)^Me#z1Soe!3-J!@~@c-t#v`0lKdC!H#Jp3wNpD^#*fS-LnPBye%
zWZOq1<(;z``@J}^m!udhbSCu)kJFJ2J&!90;gi(=sk@Bjy0|AOMt2WbtlCNqd_Dqi
zx>KJnR~fRVVqe!29oj?u#XrFo;@xZ~s(v`xouX8WdC6T-K*luv@au>69zXnE`KHyD
z)t!5sOW7&sCGFpHTODlE{6F?ylTi1fhTti8BkWs#K-sGLeefiZy*-PJm2F{s__GP)
zW4!xHMgFkVSM62fxzy#PiSQx3^iLCB$>(KC2Ft*5@E<1ZjZ&89#L~Q|ys(bq*SJ;6
zL#36fGL`+sHN^LMi7zPWZSvdGn-9J~dZWLz_ViPCJ7qhqeQ&o20*6{LIOArN)J1+B
zZR!pCxPG<FYp#{LU|mpjKF08}fY3&u%{?$--u<cc8~ZVv{i@#hDvLBFH3uN|R>wdf
zGCE;ADD`&TH>`S7a?T1}(s%f{t|`SIka|m2Xz_X*gy-*;S^Jkh22TRn%R%Z*zk%`X
z#Dsy0kTYq$DH^v}qkP3Lgx@HB?-xJDUL225>$>7sh~F%JVl&_u)*ir<RV?wV#BVst
z{v#O(+!oBcQ7!L6CVqMJx4)h+O3{P**Z#}W`|&-^-=SEDiDFq15c9x%UmmE5zgzu6
z7kn-zZ=&z?I{3)m7di$h_YvZsBaY)m*Q#>2_z$FNd*kI^qW0qGY#N`Qvi48a%jraO
zk7gEl_&3xYEaXhS?0=R$A?f@qz;8Q#SBW2w)L-6*kteX{MTVz$TlMFXVPwi$Uy!py
z{xiJmj~r6=xb5(4Ejpmarusp6y7mZ)4Kheta(+KyJkGmK2hp#z>Z{{-WT+kcuA2v#
z+aky`adZ&=4&L=gi9@wb*<?(S%RTv4d8dB_St2c>KlNrwOIVHb!u&41k@-P*<Vtxb
zzGXvi!1<Utv*zePR?01$uxE*$-I@E<F**6#lPc3zcnrO1&4a*3<fsd52CRa2WGr+Y
zbs%?;Nx!oPzq}c1-kAOFviDoU41;%oH(Fs>^Ce=l-e&Q;kUX3&ek3HsKfRtZfL@)2
zwDO*Z@n*J6Gp-zH!i1B05jhjF&ccPk3;#G_6bWvH4b`h1b1IDy{4)qAU7(M`h=pqa
zuOQq?dpP!!$t9o}U>*4XD(nnb3f>D|OSo&1G0#2~U65G6@*gYWm3%0;MA_O4@M`-D
z`*@|!l>VbnvF^H7`^-7LEc@{s3XsB=d>3qE{qC>U*#MPq+3_Lgk5X0ptHgg8|0|(&
zw7<|*2m^<hRP(lE9NNq|_D)IRC|=hyMJl_sgv#6(+yhPh|Dqd(Up0F9(?qu>P)2l0
zPHI-s-tj*LZ~af~&a<79n<8xL-!1!usFhu`e6QN$G?h<1;wNWa^ydjjIaqeDvddh3
zrF@@4KFj3M@0fOP{zs9?Pg(nyZ-Jj{Pg^zVtAu8nIIoj9FLT7H^t_6b?fE;7D3v{n
ztFQ&xC+`s@t;rLojzYvUKs+y=Yo+DL<g|#+nu2Ek{DgtU@6-R#W946+kEOMFd{>VB
zLd!*{lJ{%G`<wy{fC%y40)PEG@O158kp8|3nv8!;7_UfQ_joK`FWcR^kEPBZlxUNO
zFeR$L-wnU3iL*lD{H(<3+?OJHa^@!b*#9&4zsWher1>4$K<+yKp>~@PR?155Mi?M`
z*HOfAYAnqO{hlN%*r69J@l3Qj8x?|QH9R%aEoZCslO)}}j{aHtn(hW<{K%+dZKxkC
z!-ee!OLt*Wur#py;Ukamn*-|ryFno)mU=Vs9~Cv;ZDFG0v%u29a;<i`L+m5I8~hdx
zlj}(~1gtxy<Pv(}TPE~r(fE3yU=gr1uoz##>cKL>>dCV_g0+BcKiV0#6RgRF^@26J
zutBf}7d8S`4@Om~N8*?Pt8-!U(dt?kmH}4d!g9c>U05Ml1Pl?5$59SeWy8c4(bv-E
z!59+z^mSi#+B=~wF(XjvP1#>8=~1+2EKVyrxC&Y+pEHE7AKKNT+gO1sF>UTf{M%yw
z|MP^yU(&TeTD$PSf_GC#W9G{Gym<!IJcv!-FSI$gqAL!AR?4{o+MJ-X>}$ZXU05Sn
z2+Y1urwwfM7^fU`gN?Ybez0K|wjXTBg+;;kyRbR1eJ(7u5jzUZE-zVN11>BNY>x{o
z2J3fWm0*1?tQM@-g*AcgwqY5RUprV2n6kNTYpuJ%B|VsHY7I8F);b72?SYSir>7^=
z&w&?s;AyuZ&mMR-c#8|C+w>KJ_kyQNJ684sy3iUwaWjUx3rKr2HdV*Ptr&o+{R_Wi
zqmI2gEnwSSSSMH$*gDBCkA&?7+wZ~#!7`7F8Xbztq#FV220PNiM21^0K;FTY^R6Fw
z+|>^29qq6m+CgZ;Li>!H_J%lZ7XDMvjzF6ywD*{_&01nDQ@@b<!JlEdPu~*rmsLSC
zt=m7#d<6c3{FX=Z*#XvfeAK+#z`}NeMKYp}JtqTTX(u?bVX%HMyDU!&KNq$D*6RwJ
zemi>Q9Zr7PV5uiM`4xcaHcZA5Wnexq^}R{#xLAMjvT4YP*{<?d4_#(v)Hp#I#U|DQ
zmi_LidC#py*9q1HwwK@XsQL#hd{5M|?mGyUb8=LjU5U|+fMtZ7bTeSSQ=IwmHK7Ng
zvzJu{*t`qN0h<G3IISK@OJNgfg5PB(q|#RoRt0v1g=O-;8mtlwb*#oP8dh6uOx1*6
ztB0TP@5FBazi;p^kIH`&{7-e(&mdUpY0f;1faxx52FwR$&x7v{`gyST;3bd5kpY(D
z!g9d!!G5Qxpy7WZSbDbE|Jc`AD<nL)ipRFDSqmQaz_)`}dhqE4uXE9h-jV&qE#P9)
z=%+nuwPV$HG5T@bA;Q)=vm29et%RE;T$hCV(<92(P2789g+oUz4{&zQnyi;_gM_Pm
zZ&aPf)t^6PxLfVv76>;)I2GSrhYaV4FMmDy`E)D3b%zWWk1s?zYYEp&xOU$4lL@EB
zQe2V8xo#Or2~8U`x$m=h>vo!JgXyf>i$2R}Mt?vv&b#jdu_@NUqhIk5|9t!#a-v4m
z;s2d@9CMQX_gm?B>S51xWNttoLGu_q^n2|zW;#OPh0ugQVDY)pPLs$_1e!h2C_a^T
z8k3K-zbVpNdPdZCZz&&fMfqmn=i5$yg5M?bj;wMNP?bR@ct&p2ymvyC0bi!(t|=Mc
z%J`)K{|fwX5ZhRd84odbVV>tM88jx3nbbHy%CrT3IcFU(@6~h7@kly*@UQ-0)I68T
zyuM7bOIsZPj}Y#?yfeR`=GTV7dZ3*V44W|NtO@B*-`CS#Q7a+LZ_;s-31r{gU2o29
zWZmiWeIU*|?3k05GAP79??X}JOK)EWYTx_Ey$8-}Z$TCOTH)99;ixeo8CGSwTITpy
z%Q%#2Sm&H|^ceq<{^0a6Yl5@KtmS`E5agV6&(Rh(Y&9%r;O|=*Rd@TC{JA%5u`?cZ
z{?*>&O-`BKu~;nhfkaWUgZf+*HP-8~e5f&^Yn{g$*D{{ISRzW64H;Icxt4DD?fdWn
z^BcCVv2-Cc)fdwq&!gN@XiJxWS?RT;v8|j?lrO?L7EaB%m2SeH^pOJwP06P(C%o+r
z7HL1(chMiNjhf%OSi=lRbBeNEq?*F`)s{!q8D{4F@-#L_NtjCTVelYnl07wk%?u-c
z_4w_(AlXm&wc)qt!l-$+oEZqVmZ?2MJ>dGfs1boi<^eSho|f`D0A2=uY>*#HX4E=|
z_k4NNQjPg*k2!?pYK<wah4IK0QR7+ZycMs+*gmnAsOpWKC&&6P^?Nc?=ZY#|Q3b!Y
zYof*rQU)%5iMayxofui~8};PI9kAyIE18MAAXr%xESEg@!FRqUYHV2=<IAL~CCA+H
zU~eZEQd{LmcrrHcp7wnn8LOjQ<FcxFt@2nWQtJ&NSyxM*gi-U=Qn%&s%dL+ZA;~jc
zFW(1wr__9ypSAeqZHpQ=S^C1hR;JE!DZNy|yz`SRm9a!?S4@<uwBcTO)ZP>|P8NgB
zRi=qLvc8!c@qgSqxyu6n&Emu2oNFamDo^xr=G{KuWgj|VoW{HR9I)iG0Dt|CsJeU0
z>}O>(MmSsreyR9{csI+SO8E)jI{eb`Q+E)nE2q^rm({w0l7IXQKNmIiIdU#{Ar=s>
z2fPCOgI3ukwQts6{23?`$7F3$Adj$9ge~13HSd2?cDZFMIqzHhuH9D3yodbVY1w;}
zv;Ce0E;q`A4ZQ`spI(l=V;2xtIpOvY?)SV){VW>pl|(qvnX<pQen-?eh4R-AJYb)P
zRc+ZN*CleR;?6}xF$BK`_<irp1L`}F`ZwW60Qb6ACp7sVJYXCLz5aD*m=i3ayrqq0
zw$lIK7d6y}23&HMXuH;0eVtmXPi__T?m6(PhS$C?pr3g+WrgqaaRfj8ykP2i0j-)h
ztd5ld(dBs&=C|&Ts&91Y?=s85x~r5nxkK)7k-JJG+D~1ooVX->9pS6mqiWBw{_A$D
zFJL~m)o%}9r_H*;TW7!1cM|@AsP*l!NHDZbja6j3x03BV{1@;)NL=XQye(?hANk^E
z8Gg|(VwcBt@uK=u7R0~lZ4Q`s&UL`+Yq<x^@9w(hazzhRUP1jl5jAqqGrHf*=PsF_
zT&zD2%OQLZ&BdK8b)FvPdB*|bITtxPlQ{Kf?pJ-I{fxTUV8!=hFO!xdd6!4(VV-b(
zV0pAxeHY=7p`?4)<hDsMiah${f-4zslK)S_OTR|qjl}Oo6aJO>Z+|kX?#b3KH~HJ|
z*HikG`r#gsdZ!{a$9VIkd6@9qtbwZNt+ZYA=ii7LCsC%<ZMi?4v@uW>za0FEze#>f
zzdY?JyqNJ<`NyxaH<5qAD#0pTSS?t&3u^)^vtbffJ6I{$iLrDXZKgx?M6b|4jecCh
z4_BG4H0PYKsP3j`b|^wNU~xN%12Xd^7vR5ghI!Y4Pi!meV0aenWq)z{v*z5jZrmq#
za)i)*GIUpChf(}rw8H9t$3GZSea9U5{I{%de@zaTfdGFe7Vb?moRnEBX_+P5H1F~V
z)&;hoG`yt{6YB%(|F#p`2iD#1oC6pI>vCbUV4W^ZzmNGQ7nTXu4)zXPyt!b)&yIz`
zc7w%aKOOoCupSpy119Oqwef2N8vuL14Qm4%1uK_+jz{=)gJnMNjH4ec!-ee!OLt*W
zurwDo2bSu>Qoleub75IvJ{Oh;w(uQiT8hEuU05a99N1Bk2_DHuE!eCJYXX~bVeMek
zF02P^%7yI#i@LBOuu&H_1vcWs=D~(tSQ-;5LoO@?wjaz=6DlA1VEbHHDcGP3s{$Kv
zVRc}8!0hu)+bw=}tOHEaceE-!v;200N&4*A0GOoDUe3c7KRY%J=1$)Nm^*#x?PmJy
zVY9*di9^h7d8AJtxd#0XCc0QZn+sQzU1jYt;S226w3DLMYs~Wcn9v^Yrrj8)6`hj@
zt<>LHLi^@U&D>+po_K2?RXP45e`kpQkML)FA6xSg85<(4BJb+kS^O4k3M^+2JVl@K
z2sRH^@j}$RpUuM39$@_aq7w^&?f$N_eDlG2Tv#bsw+pKR>vCarV4Yyak`NwA%XY94
zunL8kSO-}4K-6(wZ#P)__nd8S04&Xg4TGh+uxT*eg)M;jTv+-SDc_fzab$zdyRZVV
zIWW7Nl!48<un5?U3#$j4c3~}GQ!cC%Eb78~!A4!!AlQft8vz>zv$xwBupt-b`x5QP
zg=K*4b747PgJ4y*Iw}N{`uMaBD+jA`m1#9tr3-5Ss{pf?Un^L-4U={jzMlRbOtrIL
z-+jn-Rts$;M*IBYw9?Kxpsj~iwX^%7RcBce?W`aF_L%=oPJfZvf)3h0{_1{1ehXFx
z7TxP?XA!Wpmz{L=U<I!@u@<oESDoe22^Mi-y<k-?Y!Ix{g^hq!fR&Igc_e)^U~OO<
z6k=k&2azW*`x<NpSjYFBZ6F7%-Gvo`wYjizuvQmV4c6kq8o;)@uvV}pFuP22fi=3Y
zKClKCwhye{g^hyMxv*KVS{J5&ne~1bmI+o3_90tY<$_82>{uAA6D-X}R{<vFXUA&5
zr2LMv(KUi~*)Wm!yv^uaurTkszr`i*iFHSzt%7zSMtk6{MQKIeTc90=R>}J_(7NPZ
z_7~5^{J-S%7um^q2z%=XiS-}B3c+T<=6RP#uyU}`*POO#HQ2uW&U$SC8+2i<U;{3!
z3v3VAQz{1L=lI_TR{6uI@wD`3YK?<|jyA$Dn%Q|)86_Pf(9FH=l;Ih$S+H;5FOSgq
zI+52OIoH!NzzT+(SPs|}m|Zpt!J;m#9BkBuRfCOy-74|%NW2YT#Xojptzf-i_Bgu0
zcDt}XupThG&Akt-+l7sSb%EJsZr0*w$MlD>Z=kc6OD0&wPn>0t3+DT&6AOdw2D7KR
z0<6b{)qr)outu;hFnd1Qz&c%6H&}-&Y(H4L3)>IY23BpebE04~!_GM7z@}YT>Lb*z
z3(EqFy0AR3Q80Uci@`=*SS8r73#$bia$!wi`)ybTMcfXy59|!y?dz($!6iLP|Jc@5
z2f^oEcosoN!P9>hHC6~8wT8tfL9RE~u*81>|1kb5?f!g^nO3C6v00CzKM&zwh=122
z{`taxEBVD=r#|!&w!Yfu9-Zs76EPz=Ot}0Tk)NMOjRoHI;|b@QM>H3CL*`BUvSt;~
zerEp;nDA(TNA)kF#y^C|Pd|4!JcivoWPfpJ#7f8ghs7f)9lm<%0UjzH>kf-YQaXy^
z(ecZup-DL&e^@*YxbxBikLov~MvCzG=^ckt9&fmL?1x9*0dv2Pe*a<dn6&fAr!LaB
zAs6uYjnvCJcq}dx19q7xC0yUAIX9x8d{}Y6WRE*ce68?^jG29yKGAeIW$-;Wk0E%Z
zja%t>^ssm&r6c1r=v#RFPRii&!{U*Yj!Jk`PsGaOuy`b;qZ1zK(O7xh{x6q@=#cPN
z=%3-C`nLF9fs2$95&sDOS(8z7FMiyAecZnZ|3>_8gEq0(U_;!$3;$947vn#Gf8nnd
z=O4wt6aU5d`?`@w{Aud8_%V)9f|C9a{#Czbp48#bK~MY(!J;>jfBct8yL$AqstoOG
zGio0_J1YGr$UJY6?Ih8PfQ*5g;J<$=YJ9}c52fdrGvDcF&BOj3$<@IwzyB0C<hfSG
z<T#4jn_Sa?J@r3PV=|R=yvt0-F20Ttn-5oO7AVdge7lN0<*ViF&@%7!OLY%j2)=vZ
zx$?vV#u)GV#BI!PI?oQ3gUkNn!r7>Cx5WEXXvl+gAFOM=o6G!~m!2=5mOtHly<4pz
zO1$|uV^a`si^Tho#5>?PYgPqb2~EX3d-<3r)OVTj+Sd~)r}(#Fz0aQezaiyG{ZJ{C
z6X{l63A|;VxgY+;2N^#J|7Ed!CCW3g)@ZHcmvg|~;~<t~O8BMT0>6c*@p0j|<Ui+E
z3BUaRv-s_6w95V8PhSuGvVD_g`tJG9`OU*GL$mm;{m=Q8q5yQ=;&<$S&aVT0b4x6K
z!`w`&<o4e$ziIeQEw%W4=|AUJ(1`tb<fQRQk(Z1AGkziDZ@LHl5STPJpr>Tr&N|=D
z<>@Rz0?C*pO$J#<PsZ)>YJP^m7Sbk-JH_DjDkHm2p>0=q>y*-f{~NO4p1jM2gITB$
zUk(a7`@~7(V#)7qx7hWFTK`RIZ>;}5&nM$9kmHJ%@v=--gdg!-$z$<{&3ztm(>NvH
z`qyZm?@Z)711u9v2iw8B+84%=eZlj<8^J|4DV&3if|r8Nf!`Iw*#{$d1ibbnCw(S(
z1Nap99-)^n^~v!mYdx(Uzm|6;(j)XeVB5hi6nfeJ!u__fJ*0#9?ep*pK^ny`Eo;)e
z>&O}_hhzh)bYSFPX!Nf$-aQ0O9yB@7R73N7-if~{g-^V-@a4}oYM_OW^fje$RuEA_
z3##=oNplrpLhqh5-YYV<hP6($6U1CQYrrr6J(J3&#jjlZ-(YGOvNrJClP8Vu@NU|M
z>YOt>i>_qXfw`BHOIf+gH~u5B;gg+YQlG={=z&LUTq*i@8mt>^9{Dom7{2zkVkO7c
z-X8kK#}Cm*NgM^css2+FafHCiz{<huB)`hm;TB{6IVq~FfrO?Gn$FWEjjeH-E1)^o
zLDLS+eD<VqgM-G&r(fbfeQ`cv;u?jf_kELUja>5F%1$D_wL^c`%(pE0aK#jth{s1!
zrBZi^pU6fIJVO6PdUGbd?$D8Qx=0jqL>rbeDTB7@{fRQ!4i*7x1luI#ez9{eqFSS7
z*92?SPn*V3ydUPGf#;k(bE*20x?C+3KN`>8m}F4SF1xz)ETWz!9o1({n%|&`wSz{p
zW=io-W%8pP|CgoA53T38JK3Lw?ck|UvI$-Rugo(i%{30<N_;1$Ay#5)zeFQ+Vd$=n
z%Vc5?scVmk?3cJt;!NITvQmAcZy&s>KQw91;i&v^gMoIxI#60pnp!@Ge!}0c)80?t
zX7BG@=Ny%NDB|INR@y*vglb=+@EnC_?^%<^RoJfj&pExBC^whwXYG?=W&T<3Oemfr
zZ*AYi9{$**ZLcoMjutM*kojWn4eA9t(XD%+4S#&n{FV>%A@aE^!H2>7!P|IOI{H=<
zp8?M+NT%0&(HG!u`YiC!CnnWcRrWAyzYM09!7?9w9=y)7*>~COY*#-e`;`3e^)5%X
zPcQ_(?eNPyXVUmK?>_BDS<qw8>lP)P%lDdna}P9q&>SnW!XxR}12*ufNn^d0j-7n}
zihVv5Sp2(t1Db3rbbP3dj|i`!5*%ZZ^UeEDo@TygS)%=hh$95HA57+O(ED}TeiVFZ
z0A;MUtf_Wi3{C&?M7VTFE5Z7}I(e5zuv)Ni@uYFKLd-lgfz^UtFAG%(`SI%W*?*{;
zAF4!GySD8q`H?t=;Mcl(GX8z@Jg_OS$~BY5KdiRx{Qh=Wdl<dPjyPHkBLGG}!YA{;
zu}98J<S8F47c2z!pw(X0c*A}Vm%o6T78OcHU?m%yg;zD<TF#%0uf>R*SKWX;26hkc
z`Xe`}wsWs`o}9nC97$Ur`_6~-qb<;82M(w+l=>~uTHl}%KHd1Gm7Dg3eq9nDE{^5;
z1kxfpa0uGBj<WcyOz^==r8Dgr`X_j$3BV(14}sOXuzau@u%i@}NmmM1?ZT?SB4ARr
z@(8~=uqqd}9jp>8w!SWO9bgqMY&Tdrn9Q5VBXk2`xfjr{E5yWx!7?wLbnKa#2GiF$
z)4TxYb7ARy*t>+a=Pes-9?ZUORsdE^SUXk*)&}-YtBp$fB4C{tCFDr3daw=`)&kb<
z!a9YY3+n}Ibzy^GEiP;XY`Y7a0c&z$zHiY#gW2<&0oLHca=_|cSRq)Q3o8e!bz#+D
zH7=|HtlEXOf<;_d7g&`G>jSF<i`jQlru)DuT-YdBIoKKa%OiBNV3IyNrax<zpQurJ
zgf0_I%FmAFf=T(=+ea8o%Fm8ffVs=B2FzZ5(sr}%Hp{P&cYQAwlCl-N_mGrAE9p_R
z4=qkB?YtgZk*~9a?~Ty9*81A<?~nO!aQaK$Gw6s$@c+2zOCG^;!1N81#yT5T2v%M>
zX;j#-a<I-%JHu9k?Yr11V+~+~V8UA-`QHjQ;KI7V_PE0Kf%StesE}sZePG>}Osaje
zF@B?9y;V-SS+LGaooUhgDK9X4S~9`fU39r%ZD4l&69%ij%&C7Wz$!0y>Yp00;)pZe
zMzF98YXd8^VHsqm8>|5A{gN@;dEh<Z<=`K-@Ys3aVekeQE_s^)?*dnM>+xIV_c_Yr
z3a9*LfOUW!Eqr-|E(fd~OvT0TOx$QI^#!(ycm4S5HD7Ho^l8?P#0H+nZw^0MThjk=
zo#tCBW=%wm4%zIy2D3)dg?7>ouC(ZW;Y}y;_Yi+EbRz%q2(|~T&V>zub%I@~s7$&k
zuz9eHZP>i<yDC8^?PfP==>prtyM8`txha^=#^+0eL?-d&GANzJ-`<~v!DhguAD2hy
zD!^*0Cmrj(HDJSFM=2_kt`Tg=hDlwwf$ax#*L4s06u7;vC9VPRw2jXAhrwFFn37VD
z&`pEQf!X6<0GqX85`X&h<Oj?he-5~Qb#nY+@Lcd0&8W=$gN=Y4X<@niuK^nd8x*Wk
z#(`^PEXu{v+z)h3Fq7-Tuu?AI3T;!iI-sw=X43e&&{v4;Xty)JuvhZZhhJ)qHP+#`
zVEe$j!R+Z61uMVSnde!sG8d-rVgAO2Wr7uh32%Aie=b<qMHdDubYT@>1um=xEZ>DS
zg5|leHn3b5)(w{9!ur9oUD$rGkPC}~Wx239uuK=0`T~02g=K-IyRba4G#6G3mTJR9
zjw-=)un$V%ad(z{%TUU&4&0rd?O^uwgrO_A&rHt{eT)9;)s}sXl^&nJkOgG>bcO$^
z6x(m%A^VHFuA4M|B0TOoEFNEX^B90fVeO>xbKy~PSUkSz=AnOq_ONNv7!e*z4~xgs
zZXTuZsNXVajH>e3csS+pEjN!=c%<JjX^gA#I4mCDcJq+^#k;ponr9754vR;>n@7g|
zw6}UI9ZL_3M^ZW};W4#s()g7skLtrIkLTU#=!8exO_RoyDv!hB@q(L26dr{)Ge;mi
zN)C(1i*6pWzj*o<D;-M@i$_vAYT(h{Xr<%Ts}83;lG3po9^uc%%HyzjB&A~(9y7O3
z8q=yg4vWW2_VUP}-L}7k{c*>nQO~=Yzu_85!FPlEKF7Rh4Ch##;Dg{b;9Fz(rNPu*
z-WwmFe+8dqV5xuiN>wJi<a^lmd0*zY;`i}2`Tg&cRf^;}uaW?l$a&zbYxuNa3v;S%
z+?&(E+)Ed(hu^)d;r8PO{FlmIl{+9>4pH$Th{B{f?~CZyyC>Bh8u|%lnw|3%NqX-%
zd-;{YL-rS^-oyN()WI89ShB#}s(r44^MWW)$H}7=0srwSPDsr&$^PQh)=6W9@VozC
z;+NsYPxcq5?zGZZ_Al}COrPv8PQBMk-;#fcpJ)2|gx@YJeJ@7-<MPux;MZoQ@1}o=
zpJ)0igx`Hu`ttrIexBvmE&RS<rSEr_|10@TN}u%c6)(f@{)GJ}V}%+p9qe7a%Q&~0
z8+KE975eQS^c{=P3$H$l-pwl?zajk6h$kCaHOJGd%{#5a+I{ggBaW?ZjQ=Q6bDycN
zkiParnuXV%2l)fGgZUi&jmtEj_GK|#)c~F2ago@RVbR{#IcKdtyQ|K?&JnKii<4^4
zi~d!@sd2sMncEGqWh{wL_7`^%j-iuJ-%2>95f{0i<Z2ZTi#Y=AAZec`+`Y{0+vZSR
zbMWzV=G^EgnvB&KW?ADaE+qkODEHKGs*ZAA#ol}<Q9h+aRR|UW`w8#1c)jOt>$Lkl
z`CI#STj13PuQcJsQz-5s#_wQn@vdKesU~Y`t)jno$oD@PH+<V%fua~n0!8t6b*F}e
zZzOzOC-ZTlw?0I8&iA%z7f5(63nlzeJWNvfJi_lGeEGwZ#wikhzA8EV&j`=-Drbh(
zUD)M>nI%lwBaDe9%nu1e9oqK;F>fvBck@_lbALzTA1+AcLwFW<VlO>9X<Q&YZ!>v%
z?{(pW9m3UCsoFnX5Hsb%vjd(LT^7$X|KISOfoJ3~EAL~MB=ktqekSR8?CGTE(PT}+
zjuor((6Ya{>T%>w^1c(Est(KI<AArT!zRM#euZ@t3BTSWyhk1O5hk<S>VwZP^KqDU
z_@<c&+Pb*}5U)eoU#vedsm}fD2iWDH+BOxHR5l)U$VK~(qOt0*3ZA~NTIsy!P&|{%
zTl<TPCn*iVt{0v&@KkdkXTww7QJ|GDaii8)WNv2|nt~@M&2PY-9HY4fl9kd7WeG*`
zlKsU^&?#QVr#*Rv*h9QO#_QKH8YeHY@p@ikJlHd7e1>-)--t<PqDgen0C*$#<APJB
zhgge4Wy>L8&t+SsZ)TYnjl!#6WaV<wl4!g3H8s8uMA;QNw(_a{(s}pze9!**4fU-X
z{Y=8!?op{Fd1+nP*I%>x*%R>Ro@DDxxZ)q%D|jL7xu`iVM67#0=8ADu;Cd&`3Rwx4
z)p6_mvc%U&e4(#f@jX@f|7(1?#5Y5HzTM^=jQ%O&Q!-9>xkJ_@oAtz}14`AJb=G6_
zce8Jp-*q?{dLfdJr@=<}72;nP;}>{)eznkF6XW;h1_wW78?;it@Owb&_ZRq+zE)Xt
z+u>g+QOgw?*Pw<%B-vaHH1EerWnS=f_{yB3{$Ij39RIGm@Xf(L=Nps8H-+zm-hA)y
z;2R-aUX1S+Ctt~b6aG!#oHYI>@m^x`y_XBBSR<6%){#PMagV(kVi)y7zYKoo3H@0n
zKPgS&wI9FyUW?ahZ_jH1`sFcR|5&f`EWD)e7^bmJ!z&GYLw^&$w`+IoCHM>Z_h@-a
zKZf9$^A%*3_`<yF&q#c2j{7>KKi~Z$%A*hah;laDCS~Cq(-6}|#N=q5YCo&!tr@}(
zeQVMv;N7&zthJWBYvcPeLU?5ikw54*T6E3qn+a8$Tc%`9w+*}in*3*(j}G!f<$ra2
zT<O|t%euAZf6E^n;Vz>n;x?icfoM;77Rbtgzd?hf7*g$eURDV0GF~=-R9b=kw=c1f
zD=Z|PWb7wR(Y=#~=u3I>a8a-suzRgCYc;=Jc%H~R>cW2=gGUsNDelmV9A*5NI{xDu
z@w?7xlibj5`sLx5`|_kwBMW1zkU~DfAl8rQ;xhc2_L=(LtRMEX*zXf(A2iphJ9Z;1
z<3f0cvV)K0r2}5w@QTf~=YZ`7>jHaP5|gm0&m$YRQ|XckHY1fPdwvAk{MRNO_YKT|
zm4ivS$WtbNFkWlHrk3!o>Jgc;zAM6g60KsZS$n37*=p!NU*tG>en9QzkTNKTU)ql+
zjR@~1KeeYv>38lhlRHtvd`BRM3W)1>xfI_~C<K)<=!91YUXnC<qz&|fWq~n7Ro`E;
ze{YDJWcE@DuP~LqUzx<QdM&1NfL!Xf?W?q}KfGZa!@GX@I?cz&D&)=^DU-CHV!y##
z^qizUG4`O_v_xceAn~<gNn@BWorH<a^_PPcd_n4O()c1Wq8k?`>4!4s9aXA*tdnv@
zAief=gy1Q2msK-wnBN|F9-cG{_kBLKPht-YPpWTY>W@N$ZGI(rlYF<}Hyrc3E8!>U
z?Z$5!zqF;KcS~}5llJuVF7>bVzEn%;8cFXwJV)MqL(NI)Crf&Jm)g@SW!E@NdpR(v
zt{CE{s`ECmMjIw_-woCP_I)AZ8r>Zz1^R$>!Pyk8J1+M{0ihj&Hfz)xlc_esb`-hO
zxlPkvfY#hWY0@r0J9HSdlGdD`F|Ty$s1f2_9>EI1nrv7VSUFhL81sKZbfMT|>P{Z7
zJ!V=n`|oLE&QWM(k_?zv5~91MAM1tx4E&!F{u~prhU4;?0$D&>5n#2B{|w1Z8#D@i
z<G8h-jPEiuYg?e=6NS80BOB5e=s%~vpke4{%}p>olr6)ePKpAUE%I50RdU(Bc~KK`
z#TusC9~mZW)dch5R@lT|Ke06}m4xLibyEv%dUVp*5~sDM67n==7cE+A-(?5170_N2
zr$t>zzpuW0@c+^FHt=y()%yQr=CnjoLxd<%q6`=%KrB%!Mu|FY(>6^*86{%DB0&N~
zh!`+Pfhg718X+yYQng&FM$OeK6{A*(QZY)@UaV3jVk}WYUYZ1|R;XH~-1GlFd!L!}
zGSi|z{m<u9IC=KkYrn0%_S$Q|`Lt?>A!xTi+b12*PuK|9f^olJ3fm7>9l>J1p<W|c
zDOhC$s|2e63$7p5f+ZtZ8mv5mwSbjHur*+%5v&`m1Z=4a!B2Va1#67Z?EtF>yV+1#
zx?Ny9B6Oo*{a_aa=njA#4$zeo)^|7U5B5A1t#k8AbI(tFv7PZK4;3Tmhv{%#)__e$
zutu=42-XZX8o@fiMj}`j*l+~f3brSL^@Ht>U_)TLBG?GnPz2i#HW<NTzs1iH!Aijf
zB3LEZjtEu@)*r#rVA~^D3)nWW%vi2ET?5t^q3Z_g4bZ92q`t=Z0;aLgnP@!f9+@_1
zl^;WU-;rt6=3Agu{k&Fu?|?S4M`nO<wXX@kAsnuJ)$AqS%;WamKi?Kn|J)nw%hFlS
zJ<!iS?yk}N;H*r(vi-R$tCqce)SKbm^@J~PO0OOs>%mOf{<Pw#_0R$BmJIDrk4&q2
z=!JGWw5FV&gEmqRgM{zSgs%&Ss~uC1qE`riKHvHYYXX~zV69-25v&tzEQ0lbjYhCO
zu#pHh05%-Kc7yGSU}Ip)e=vUs!FENk!cpWQf|Y{}MzCtIoe``KY#@TI0^1S6+Q9lF
z*jg~vKduAwQ~hlQt9&x7Yqx<_fc-2$w-anELbnHO6fDSZ5^UA}Fuy}!O<+NO^L|JB
z{UJ=31e*sIq+0;CD?nF9p6bDdz&0y?>IJu;KRKN!*=-@L{*RBl+Z1N{N_O01I^d0E
z%mh{T9%y$%TPs?A;@t;!C=*}2x5AroQuKp_b^pnyS9-%>17MM{Q}0^fcFmeVCVuSq
zj0e!JCZ2xcSqfHv;Bi-J>nE%dtO<<nV1B}C!481kAHdRJTmKxc!xpeD5o`_EX0Two
z-C$#2!SSjWtm>&Sza3ze0Ze7y1y%vpuDtmANM-h)SoP}cAhfN}z95kALJXJ=u$u!|
zIoMbr9o0uQ*eIB>MdgL)rY)HLs6HAA>v{Td_r3s+X0Y0W;rw@i)qn+Mv<qxUgl;QX
ze}t|dtm-deenViDU_pK(V0{s~{b0Rd8QD_3#m0~~unYAat~dXTkyme3(8m7iw@)d5
zrobA(&g5Hb)fZqF3SR}@62X<8_7``8zmsq0^-GN&U&n0UKjXlrGtN4Qwiep{4DE48
zr)`CHGDADP<fwc%LtFMYFAqOBI_)5|jTzccADMOm`8E5Cp}kaPd!MEC>|t9#uj?%-
z>df>)qaP~1O@Ga#an6y`D1~qT<D>&^u)bASt?+OTd1ZR0?ug}AJ~u;K18p<k&cl{A
ze?IN?`pg2X4~=-u#Jg7UK9?^IygO<<!qfaa41GWJxRu$53q5n{puab>78FlKJXQ@w
z%pF2LEF=(no`3!0lpmfS<y&+24R$$_ey-_;o!#LtPU&bA&sk;PL!2RA-QOR#_i7Vw
zou()F>(A4sJM*_@G}!L^E1keTgLaA1V6MY6Pf%WLl&-=T5WejQ;qtRJ5k5lrBE_dq
ztuyaQ))nzed|_jeO{a#SPUvF)U_Y(qEvD}^*tx3z=Bznf7RO=Y&v>jp9w6?HXM7t;
zcGhmNey}fj{LC?$#C3QUG?81R64)6Xw9;3Hp|5_{=b^lpOrl@Fj+XZ%bT!a5K{qGP
z9~?YN#(zZV>WY^0UpWC%z^kE2xsSVl<XdeY+{dA(#_q(`ob|meSN8lr#X~Zr{l)v?
z@m0Q^*Df+L6ujpZ8QLHp6=&$Qa1?ysaaoZN)+tyqC3T)$<b0`kZiZ)lY}}r&pIDf~
z6K|Avc3!g}amX$xE-6}R5n9UfL^354^;6iV@O%^Bk{R8TTIb1(`fV%WeT2V7;poY$
zkhax)t_9x>u6s#TN5S<Q-;e68U8nSPXHBm6tpNvGP43ZRwecAII}66M{we8-gJ5gG
zPRhz1J_<Xx{#I7fXaMCqxsQ2!eB9pua4n5S_fCP=fDeO@@ompF(vln4;)7pRFJ~eL
z{^rCwxek&z77=os6Y?R8cPBjB6XW*o{Ep)44^b!T7n{LHz;}wbksI>o?R$*Bha6JB
zuvw;4SY`HECF6He+;;Z#u6D-FIbEkH<;@c^a}9hNSsfhL`Aw@ZSc9)4?snpq%o#WD
zMmQsH@#Mmk3mMS*NObQ}{Jvl@l?m}V2%murpF964K0AYam<Aa>wHOl3bG`gr^iT20
zo1gXYDLlsGbJ9P>CnrBfzrd#-KHsN|&gh%HF=l0P@;a+nmTC)yys0#B88nBXUpnIX
zTE7jw=WCT7Uo(TfRyc0$W!l&~OJ@AU*>T}RVb{2LrV)yGhUeuzPldG+_SfHd>75%6
z>muxlOxWxEunOX7e{l_Y(b-q$rGy!seOYlbaYuo96b70`{#DJ=pPo1FzRc^Z=DeD>
zwkNav3K}u1&lrRnf`2y@-53Zp`nMB){l|{G>)@@Q%FqK=RW$B?SpZD65{!5n`t5`b
z67~v(@slp=+lD;~7IVn^Rc|sf8`L4WzT0@BGm&@c#f-5@cpif1&mY-qY(nSF@Z?SI
zpzl`gH-Zqf95-(7@Hy3{>#eOI5bK;q>Z3nceos%9+#icQ2=5oe!})tHysNWoiE4|U
zCy*QXzKw6&4p&kG^*Lkb0CWpV#@#)lLw@qyEuNNhSo;QO6DZIa=zrDmLE<)(hc_xN
z8<)H#<5-eEOP)jz!1o4)897kPUY#8|rMDJ9b5S;a^*RlK<@{>|KS10DzGDq$$&9w+
zl6(GCowX63e8IR~yD)l<d0<Abacn!Q9xuy$V%HO|k9b|gyNPe*$+y+wJO}Js2Fk-8
zXh)&FRJ7<u&J8ePF%!jutMCJaR~<iY&aBvQF5;(R^zN?0OZKBb2{&ah@ohMxrwOkn
zyqoZMNBKjb@g`09DB&yANBGt9&lyCvOUK>4`hNa7Mn;4CNf_tW%~{Hz!RQleFHdIb
zh+pyRz2?ng=aDxeGpTHwiGK^>Tj2kB@xPyNBM%MHwb68(qU7V>NBk#-_nLd<oR5jW
zFB6iNia+4bf&VFdYyVB={al5O4I-~zm~%dHy?1vt4jd+|<b~t*?z3}jzWlp^y!(xK
zf@2+b5~Z}6tD08>!`4PD37@(j#$q>;KlOVjru=zt5p7D`9tTsu*+m}vNbB`{TN&}z
zc9WNz@lrOt+UEdtJE1dn2!9K6Fwkbe&g5G^$y^zj^P+Kkw%qgsF6oeZhtcvPw!>%z
z!0S(S(6&N*d;t;FU9?*U--mcN6V`U(xcgsx>!<cw^)+-1*ssXEQ}YI|z06vvd85JX
z1JQ~9^_Z@q23ukFO~`k->0xgzY##A>A0g9+Yv4ajnrmL-*(OF7u;09M;oiH9DecA!
z%`nKX+Oy<Oyn6!gIeZ7@Om$L4SnMQE=lK0lK89Pf{gAOwI${;H<yk&<9-{ha2k(Z*
zyZF{m*m|%Lu<shg>XI#B>&wU8Kd6D1N#+tA)P}0n#2Fy`N59(Zo~k(HCC&f(@4;R^
z8F`}}oWrm8#sahcnr}~{ZZSy=Y2A@Fi>y1!1TnJbd>uQDbWoWwXD2-MMnK>Jh-&ak
zXm%yX-EWBID>mJ3t<ia7WBk9fy3LF+(le`xQ%wE5P;ovYz6=`PI(rpZC*ccD8F&At
z@T&+n^=)K&X>t16Y;|jFRJ(15ewchJuCq-1*pSM`Rn^P-A><ogm#JP}YxB2B`zSYR
zA7wXoUB=!|#5{@18vF~3(ESn=iem>6`_A<UJbOq_<#(PwoAd$~bATz`!_bVKI_@5$
zbSI$kWf6wn9R<{Vp1qJPRfYsVyT3C1WBh9`A9r1)dxzzje=lU7J#S3W#5G$ue2(gm
zeekTW7<UgO;JG-!Gq|^88Ad?-G8kauX9rZfk7<(lJAS#>jKxm1>H>SgbjVHdM&<J-
z$oFaE?uXUiPqqB>+bG`M8{DqL{2`B6E-y;LuL*vo)cqpy{=@4?FD#Slt0PY_&YwQ+
zp2xS99kUKh={s^{$9WnVIwM!V*NOi(>Gy<HDeoUAE!xnmxq7l==AX>Sq{F#U2IkQ#
z)#^>28{zW>>gXKtyg+$oe^2%%7b`DSKSe*EiGGp1oC6Je4};@m#x8!pmB?%>aHB<a
zfxQbRumjHOk+tx=f^<(*y3Z^ya+=YVC1A0G*e$Q}=Z6(QrC{}7vRMNCjsf8EjJ09p
zdlcTy(A}Z@-VJY4H%M2`o=&r^EHtz=Xs2Xox^DYb^)CAI{BifKB<)-YPp%rg5WQDl
z#6xI|t<tSc(0p}|SEln-rV?YHw}I~=?)eUJm)ZOrRnFQIUyJ9Jvn8g@cEax>(m73e
zIZo+>-&9xMPyL1Q^flvVkG0Al^l@k?+#j@o@e@l|mHsd93c~j|@qOU6*?Ez|stN0U
zt(8URZo)i!LVB%{uwKG0Q@lF}GwB%{61iqS_uGBDQM@{#AA?@s&ec9IwecbHJxSQn
z>;>uR<X_Qa(ADrQSy;!p)#R1N3@~;=itzFU<M!<WlOMA;+3Y98%SjCEZlb36*9L7G
z+B^9^vaHA!x|wc-v<Gb=Mh@}lhsSn!Tu*<rJW$LzeNi5WU*z)eY?6cUm^s^*d6lh@
zfo2kHGvDHyr{ASyZHH_IMoGzI9dYYl@97#&^y=kfGsc0h1^<9}-l)2x3$X`7wwUx{
zC*fm+*CMY<GbpS6{YU0buI0K%=S7;g<@5d!UHo>#Z_hd7cHPJDqi)PzE^mxOAlJ=(
zyDda^5U9^MTeFC44CR04&(KHkdyD$hS+CZ<fVA1C&W1OYdzA3&e(vq}J%RAzw6RT^
z4k2G}@#|M(VdK518n7<$dXiV6{PJS+ZFKzdnlWIhY?DseCb@1cEG%oA=x&60q>rj+
z&m=q}<ABl~5=|X*=DE;(Ih3xkiTrfEdn~Ev1y0^{jgKh_Pu-2MfpkZ+>4x7{s|Bxx
zW@x!LFaNwvH;<2_U8izFLn<S^($L)q|3@18mBtrTHqXX2yMwI_xbyGG*SX`NJt=#@
zI>CbPGE9PPTR9$n{{(FKyfEFoe~{Q)!&nlm>TTgP7JyYouzIkH2(}t58Nu4Y%E6vT
zQu=8OS`StRcD6w*wgs#%f^7$DkHj4WYXiI0i(AS6JAOg`2D_1O=ly2|ZAaZS*qU+s
ziMAKo+Vefy6-TC3f7lIe5420g_vMzB`L(9brW}pW;GZEpShi-coe``9Yyj*w_~@rP
z=mJ~NG#*-i+zQqUcC4YYbp2pkBiInw7BJ;YKk*v@8;;QJ2ipVo6yvpiqKh3Se;160
z-peTk8+k`qUMj(y3&XNe3s!wm7)yh#erGt(Enur6*cz~=2-Xdjj$plDjbOn#-2qk)
z7L=D=U>yOhoT7E^q5i;b;@i35Rq+_!UfSyenf5wNoY?B|(0djo&mx}@tOBeC>@$$-
zr+TXa8v<j>Wq!gM!J01~53PqcgUx$axIQ|-3L{t-m;)9p=T@*7Sg@S^U{wKZ0VG3U
ztH2&oyP{XaHVBIJ)hJRK?RGR~)^5vin0N;+8F&Aizx7iYO8$>}YaX}v7Vx+F$j~p5
zFR%~t?YtIC*q@83KeYw>(*bDrXK0I#Osn=O{}pz@rPkNvOq^->(mwT>_Ss5a+6iZv
zF+b(6AFS%#;rbi`s|340KsN$59KrU3t-UN9H^xM&GlG?ZtpN+xdnH(308_n;lK(wm
z@8sJ#Et7vtF{WPjzCOE_E!(Z|VQ5;$-8Rv>XLw}|(o$}3?NszN(APnKjp!fFOW%;8
zS6*77Uk|;>%a`-f+q_6#HbXlA?RDaPi>38_ie%njBjIp}T_RDu-NcJsKJI=*@m3HI
zS@ZWud-05$HNM)!<6G_A5-W(kY}a1<maMTMadzU#kR6mJykeO0!k1}X%=z2thHoDG
zE8jesT{fY4ve}0&o@?N_1D@03`Q?9!=jV>Zb2mKGS9m<%VR`=3bMG%%u300CoT{CZ
zzox&y^CHcmj)AA&w={k5SAMZI%b@RPp|HFa8CG8x#RsWMZ>?@OVI}VwcefK1<Bjxc
z?tN7KuP2Rd;Gb0*U#^rLmx_PX##4A7;gwg9n>$XO+q`hj+=;K!tcVxH%G&%jiTGN=
zJl}!#7jGv_Z>u@y6Bn7tX*<2{JRY%g*b}U@laFw==qKJ>?lj^De6OX1_mXz^dp&<N
z-37Ojx$|HEd?<p~K)(n4F!&GTz%%kmjR*Z0yd7&^91a=sOU&N!d5MD9+V^|DO4AO!
zkFLGrsX#k;<sKp52cd0|&*bLQymB)a^V0HsnCZked6byQWM}J(jSsWzH>{2Qc(2`e
zcs}t1<(8h?LSCF3{PAD`SR-*_V3=;`VVh>~{DYd6xw60Rip-eyCtfjWov3)nDXmo2
z*H#DCNBB1Qo~^Px^GdH@Q*Sx*_=e)OC&a&#>*H8b)C!;d@aes2-2Kuq@VVFW3C?LE
zYf<v>#^&Um((owlXY<<NS-<3}5w_P4?KOLuoEu0hGB;O#I-wc-@VNWUdF1D^=gg1Z
z_m2N2Z?bhoiHq~+REI*7q%}iY|M$RNSLr&-l%Mch0cyXtIR&vr<hhY=J5HOqJHoNf
zVQIn}o~0N4d2=<ST|?;Wjdsn&abIEDCpgAyq0x(x^{?(E&Z(qTMttWt#0mIUYrqbX
zmtlBr;yap`cw3gAanpFbk$m(t|H|<9Rc;!$ceAg{<j0&NG;4ovFCHvNd|NgL<)a@l
z49HDuWKnk`e1UqBj&|Oud<_<4gfRuyLHN9$ahIJQ_#!Rujk+tVI|1(v&I+v+t<dWY
z-%`gyBV;?4(fyM50eEc6q;Z1Mpe;P7m(tb#;zR$1-6x&(Ohta3MQ6(6mz|BIY2<Mg
zJZIoJ{0aOi;(52_nSX4sjH6z{B}H-0PDjy(BJr+!lrr7n@jm}Q%exoeTQ_^WpLzLF
z`u@L`Z`Jc*c(45=W0mIoU$nfv^)G)tf-!8v+$Hu+j-Gg;BEOHr$X*FN`wI(VwRie@
zQR%ddB9~ySLdTr9<fdch_$D1Q$8V5$K8W<x<oZ&~9AD{_ap1n<u5dcLNhb+*z1sNE
zQ~w3INxU*Dtm>$%Nk{vO8@J*+63^Q#&wovB63>HoRB%jviT_&o*M7#cFV6aZ;y*7B
zf2lo_|1t6ZtjGW1Q~n?1CvjXJ{-$4*kw!0uPVMK$-GzM1Hd?1^@c2~N>ff{9;|F`q
z`)<xVN!xqBUSZl_+(f)n_;wZ(=J`<-wwbU!nRsW0<Mk8v6T(hcyb}m(u~v2sf0sPS
zd>5YImYlgsQ`T;sNA}k6mr1Z{@hJOxPp&kh_Zo@&Y52B@?*wrpdasS}&7Ws)jd=ge
z^4_SkV?o<RBUEA$354{Xna`EOw;vv#%cSvTrQz$nTEe>@V~i&JS>@q&!kIyA(0N$d
zIMwl=q4k$PfP3;MGS2O8ElhNdpFyuNYd7)xzc}t*aRTu#v3Weo_-<B=ex7$cwQtLp
zkKtb*-0QwqvVWKI8{TK4e%L#&Ah!KGem_+EH4$$cm}%P^i08Gf^4Lz;PQtD__Mgn-
zV8QiA$YLxBzd`s_{BW<^%eV7B<&p6!u>Pq$);+%<HZbVtQEhQ(jQI!H&1%nO#MA8y
z|Kr>0WshSIz_(p|6^`$;g70eZ!#`qwhFOaPH!{DhxLHpG$a753P#vs-ZY%NMulTQ5
z{N{Be6_fqZL0I8W#@*k{BkZ+=VFw?zoqFRsOrK}HjeAM1FU+ebGj`7yX?2m0^~#5P
zGWqBY?G;k}v=kS_R{d(+tatFI@iVLeYXa*i5Mr@zu)&A@dNl11wljk502_#4yTEot
zuu-snFhs%p#P0yu_6X)2SHOFXVY)J~z6e$Y)*Hc6U|Ye0ew!w+Enpe{fpkYJ*bvwq
z%86-HO=h%@f;L_3pRr`Kj&@eCW73|nRG#~YTR9x|gA9O8f(6UA8*B_reO*7r9Rr*9
z>u~-Kf)#?z8Y)XySOPz=LjkNDY|kThz9Crrs=;>tCY){^*gynZ1-2uCwSo161?y@p
z*mkf?T`7&tU?X6Qlqf%8+rUak!v4{nU~9pGb+8Al6YPEy)5e_ytNd*kI|Mci7K}TO
zOLF!^uq4=Suy+OcEdVRqJ07|lwH~Y#Y-NCMHCQ@8r}=C<SR>f0MaL5r+^=iSo_B$F
zfPX<a{WUnRlX7kedhl2ykgnKCoCCyplj0y#8|>W}kmHi$Z~0e5w|)wJ@F;zaZ|CZA
zPp7a%C$922VT`Db=dppO8M;jSw1XwVR)hVSZ{1sa6g{Hp=S9Ue?Cg$gCRuD=DS4=#
zX=gxl#vAi3?wIx`%^A`xR+{`w`-4qJu$^FIV5my-6Wt!L(Ez48p9C8LyGT^(c3izy
z&F5k8<mk9NAjN5X1+15Odse8#M5%`I>||_dQ59r+_TlgNz2^&k`AMD);LqdY*JY+W
z_$iefKElJ$-^#c1x0iVKk$LBUonP8A>dla71L^e+=y&e)_QecC&yt<)9nt);5ocEF
zv2k~;cnuO}+MEn(@3x$dzTfVhnQz5gPrNST-L81unLK#$GVhRDza1BW;P2yG@pck#
zjCehYx9X_zuFAx#g!UluYQ{WYWQEOVzB4|mpX3bVAhc~t<M4|;*|f#6KGd*ZG!6ZB
z=#5`=PhR?lj9*lGa4q!vq1V}Prw@An{w%XbZLUl4n&8~XC2EqV<O`AialcPUo)&<u
z0y~9o$<r$Ona2D^@OJRah10iLXyBTQ#;m>CM))A%Cn?;F0rn0+#jQjc4-xhZ-_D#&
zx#E9U<Vvu5!uuwyesN~YytYT~WV<Clm}zc9+X3w^Xx}DYKMc{X2-2!7u@~VlgBG(F
zpJBK08LI8ez=tNs%^IhbGcT>+dAbJku$ZT6mK156OB1hcYTSKN{33cRetuTk7Z+u&
z2SC<jOEf~>jxRB}Z`{2PN0sw@@@?!EvxXg+FM97(^_-v$_%*rHxVoYw{08B-;k%w~
zvj0T-QqKuN4J6&z`vmg$?6~_HzMY4mG3`Q?veiinRP!|T%U#gj4==J7bM6zbq_MYF
z^LO2e1+i9m{Mq3TlV^Nq-W{uv^<`_pGvUdTY3@=@a`g=_xs4UPo&R%74*Cg}eef@g
zPq=^L+vZQI_LDY)%rGQBtyK6hG@s|&IgR|;y}x%!e$rrFgtsIn+*cn%coE@8&nJ$)
zIcC`?Pd>9gxKViiXuzwJpS_4WSvx0KzmnV7e)Qn66L!t?ThJJtm66-)LvmXMZ5rAJ
zmEpD!EpqGAsywTp?SS?cbhmREwE1KO!SL?3HG3UT%3tqhZ=L%3JT6M?oi~vk|I`l#
zNoOnAtkQ8`Xwvcaxf{P7ZiU33;hW5k6Lm$3cZhgR$4$6@SG=DcB_7)lsS<iYqw%3u
zvp=`|_zCwBWXaiT<9T=XB9t4Q93N_P;^X;UCcOH0Ft40Rq|KOmnDX|#$S<$-LCH(-
zw}S<Bo8-R|ybnC8yA(D_o`3ZnZyx^V((F9Ek+9ewnRgNot0U(8mavH2<&@_+-Vsg1
zZ*|#(J74@Z{`>rT;aB?-kKe+7pWgxam6v<`{&K><UEUO({_smZeqZ_b`SrkW^yCTm
zGpfIf{~3N9qRXQMBt%s-?-=~5PNjc~-wBqVw<aieh+e$#<a=?EWToT)zRVqa&6yX+
zJszFGd>R8s{ja;cAXZ)B%cJBc1$`A*&m8za27RQTNA&Ab))Zc&{*b$E$c_m;@Y_lH
zC&SzMy3!Bt=~F&RUs@2WKi$tq3Tzkg>c9@FUw$l;52NSN1O9ts1&LqEKNH*}YxIkB
z^gN8{X3~~kbT0AAj$c~a_*=oM2p@aZg!^-JwsT%64S)O#>NM`-+NixsxdR}be;Wa4
zr-&`C%~MIz+Co}~zqQx+)tnQRm;R7nBMr??Xp(17xL3*-k;vo+-JSpbaPwx~Fs08^
z`NlV|bW5JXzec*R<J)=Y1*F>(N>?<SU&j3E4HM=q-dOye;u0<T#V7c`Zt6n!^KSr}
z1?Nn-ER&ggz&xL++0TtkY?!k|d)?w+<3_Mb99l_k1S?zga}@0_iVIhoy{9xA&4)Ol
zd+Uox!OT)>V0Q?g<_x@lEtx)tJVF#)Z^5xukZ9H9fV!~C+l+~7;{_N}CsDq4^6k7>
z<)dC5yRluon+R`vv&XyO2)x@u6OXJ9v4^-X$?$%xB*a@|PTSM?H&PRBfn@Zjg!{VI
zj8)6n9~b{F*=8%WEq9%<*_>oSY**cc`%8G(vO<tKm$ZZq%(*=(X^D>adF3^Ja??MF
z+qPuFtg|bw_XeNeClJB-yCWXU<wd;qTFH1u{n?C|F-bC~yAkFsWt@@B9TO@;{ywm_
zAn~E2jO$5w?t<r=zq!}$oBjTA)Z5yS%&A=pPr+YNKjBtOo+9NiYq^>b&LyGHTJ9pF
z)9Q%32>!<sRr57(smYA7&4hI?pD_AH!O|}sU|S+s7g!(ID@DXlbX&m&1DNV3{TK8%
z*p1Jpe%#_<8|SN^2JSsG3j}#oLDr7zgJ<_Q_PSS4cIUOKpPrBpPwl)5n#l_$+-uY)
zL_-}N)fdoHz&7<fnh9x6!msSFvDk;GvwFUrgh?~hCZ_zSGQVHt>tW?1O}tUCPRYk(
z&slyPr-^5dBp%8~FZ?7MA5uQP3P1d)0VjoNhl-cuk9en_5B2jA;!T46uj1WAJmj1L
zo4Jhas6&Lez?Wf*eO=;PZS3@tzp*a8dcy6{c(%gCYmWbvh}4VXRTKUi;u*j0GLs+U
z!>I=!x^%+*uG&brnWtzTu*J>;SYa(Aemitm5dY0e_bkOvnR!Yre|Hm>x@^K7V+?Rk
zBg}8ZV1I2-Tp&3Q4q^73hxQlO!}}%T{p9oEZT6&^Q)n8$_7gsM&4hcb_&-Fr&p)4R
zF5~{b#3$4^xr6n>B0UJ5M|?DpBuQ)4p;+t@WcG{7%YDkrfsp*DE=RcpKXs$uZa`+9
zxtX~2;Hntsj@*3a*c55Anw=+`)~1+*-yg|KmGW}F@{-Pxq1IOv#9D5iu<uGiC;9FK
zTN}Z8z_x-Z|N4op4{Tcm8vxq@_CiBt>2`w+2Cz!P#=v%iy<2p_xmUH$g-V;-Nv_hF
z_e%B;b<%#K<tHo&HZOoxgDn6n1Y3wKs*SrDmowu95}BA^5SR{md|HW9@xh6ZZ@LpK
z4R#we`YF90u-#z6JoJI>0z1x7S-JtRA+V(ZY&Tf!L*ck%V27c*IY4(1tTjSccpB{k
z7R*aI*jRwB1|HR5qhQ;`kFw|7XQJIg8zaL6qnpasM%?r*;k>K`+X)sd?`E(8uwY)c
zfh|}YrrQZt4Hl%^1GYUtC;hq}r_wesEI9hgvF0A^P1$w7i?W0I@}k7o3X01bSOb)q
zbe?rRX0L59cM|M@SLa72%)K9MS}}dx-vg-28LUCX%F%YZb{Wn%V_#*bx#UN3S#}tE
zdi{j8limOyPoG8iPKve;+BF&47aX0o9op>~+S%tFmG4$)$1=1(JTk4?UHgmAzGtuX
zsoe>!k$dbH&rb49qwxNnTH>~xj{li-QeJ;Cb?=>7;Z9udt`U3o5JjA|N@WyDZu%7e
zqrM)KZWsU?2HV4TEdF&p(PwD)fOl{3X%~R6XTi4%Y&GA`RH5gC$>%q|A?uG(yq(1B
z&&2!2KNnB()^rB>CEmk)tDgKb&pG}J?F{_t5k>&BF47CHwvSDiJM_iN$eQ>5MFXZK
zUT@#^LWNb6<S=oz5$C_W^gY`hPp$5JPHANE_s9{a4Z6ZJS-<I;FgB3R-Fdc+xwqB#
zQF!MQQ<~Q18Jy~hmgdFT&UT+Szj%nW)K+Vh-pBoRDg)~VD*+qi8+#%Z|2TF5tNZE$
z+X&l1*p&)1dYpb~*6lm#W%%q-<Jx2;S?zGKKcMaB+j(}bC#$r#C#&ph%Jx!RzTUU>
z6ZR9g?bZo*O7_)HZQP)p7a1Fu>0DBa=6tzxP>HV@tDP8YUUz$QzB}Maq~HLlJXb>V
zE@+I;`j$+dpSyo0i91w9dvBa@&nM4Tk6c5=VM4IyR(Er&5AJ>vd#z`}y`4VjoM!o(
zdxXOKE869j4w?8^$>qeKx1V++e`bvT>zs`3(~avQmLgof%hFFwxED#s{+@6nt90ey
zeo#%o630i4tL)sd9UdcJ_0sr?(qNuqCKH?Ds-x|%LOwPl*Q6o--acF8dV|g|>s^)h
zcxxp82!-TrhPd0{eFoq9sZ58#?gumLVn+YQd3wQa%vL`tpI;C=M0lGb7@4Cz*73Gi
zGULfd=vXw#m=TiU0|ksp)RV?)=MPTyY@_taJoe@u_~e9(mni1^nlQ=`oL5Wa*@xiw
zP0zPoN4zJ=ht@frZxAoAf3*>;h46t-PndV$ojWbx;2vae{+3F-8$k^<E*<ll;`$ZE
z>7~W>3yV|mQoZaDKho2f?7Y>cmzmQke3<ZU|IK)+@N)<^b+^LEoa*2p;U6KszMV4_
zpKVL$+cn4bv(V4PRo}Gb_hp<ZCL81Z;;RFRM;~z-;HSBS=9iv3!Pv6RI6(HpZ?pRA
zLkUx-UVp96>o0DP|1ht<Wk#QbeLwsrzp~e@<J<W!_(l9<Y4Bla%07#()Ewr<P?`}t
z-_w^p1&I&J&d+s68Q+G|t#sHMK)Q5g<~K?=>=#lyH$qeLMSRIh_smSXW_>8XZya~W
z4~|e+rMVS;t<<aJ-+4Mtnqj{{Gx#7hJHO1l3t?~`g$9`o>chy`VAglG%O{sx*2P7M
z{SNCoOIY7&GV467?^KXR#hilJ8_CDJRrYU^hE{%p3KAOi;q9-c|9rzAGc?u?g6#*3
z<MXk3V_eAb&zW|>GELOx_l?^5-MrT@Cee4ToP`$aP5M=Y_k25?ehRD`?A_A6`Rayx
z$i5$tPP{b#P_e}9iSLHje^U>}7S1z=+OG5m{PZP@&2vc~>>jnx9R*(dMAi%=KGSa=
zlec}cKFS^NEGHlDfWLDQJR`nQwM7jF9)^At&Pz4E%|WoIC7<&%c`-g>(=Yt7(`yg<
z#Xj|m-1)EZuO&%mJv?XV7hTFrq4E;$7pjAnWAIn+ns8r>a&ivD^49^%#cKy-G?Dm}
z>L54W?3g_O&qJj9a_Q=~DcwDZph!wT)N;tQWOBm&m^U6BY2PZ|()qNzT+u=E){J}V
z*X!Z4YTtyp(?T*7^yLyKa~I!ktGu)3af2=!3~?m)YMWvBRZdTY&NR+|)y+^x^fCQJ
zcNnaFb|Q3Ew&Zopzn=(W6=1ub49~r4z=k4NBiLXBYX;jH!8*VOz-}`+v3cnNTd?0x
zBT3j+uxhX?L}$hr)LgvY`g@QNm0=K?PH65C4L?(Uu(Cf)g!VwqfDM6}zU9#!1{;iE
zC1;agunP@0%dY~g@Q-1v2CNB8HlBV;w-GE2cD6w*)(qAOX6#mvt^;fY?0EsYF0f%R
z@zGEJ-wL)Tg7t&#1`GNEhQM}3uo18!FjIFPzx`mzKlzx())*W1JHZ~*cf5o8#o^7t
zC(W_S39CLZ;kGD@{Tv;vKFE$4W>0b#_@#V1=l@@UwT<%4r~G?f)6mW<qP~fDulm%<
z#6#ADb_%jC8!pA1CggqNYyj6tgrMwMjAnRNJw0LX$$98m!_%81(bv{F+(YTv_dNRe
zaOT_2!M76k0C7L7ap%*-O*9n9RJnl)urEX)YuM4Mr(Mv_+vctHuY*>E;3`+8{DOa(
zaMu^Y=lwPh`Nzm*+ULKVH(?Xc<{t>MI#_oj?D+Ct_dW1;UZ?a1L;6SUu$sNW&CgD_
z+vY;^;!L{iXWk?mRrfWv$M3fDLuwi~1o}bt+h*eZ2;So1OdW=I`#Q4-$KTRxI|v_0
zOuFA!z5FlXzD`1qd-rxRrmUMQXHOTJEpl&{XG<N1&nD7&h0?iA>3H{cZPcuRai4!{
z-$1?2nY8{XV`F>sx}<+jT{^O!J;p829aNr{**pc$Qut$ww>PHQ*m=2D2n&F!gF~cS
zM&3^4+v*nlK-Tm(Hs=889h^I9ZP-V-Q7W*1eweWT`;xcb{{UfuefI|xFB5jRA67#$
z^VoYk2+t4F@tr#eGv!_U{JHhFCpI}7=XB3qv5uEzocYZh?wKEpcOE<M7@adzJ=GKU
z9{AGrkX6N<H@AcVDc(JI<D5;-?J_?ki|x>j9yjTJ$bs&5=xDp3Eaub`^H=Tj%VV!)
z@0l2aXDxLlo#ZsYGctc|0-u3q@`OqEJIdb~Hr?>trW)s1($19-#T7+~l??sKtY2)Y
zMl(NLoBCzn^`1l3zi`rhCw!x2@oi7<?uusJMxJLTP93Vv_rq&Fb!hFo@H&TNY&-jc
zQ!koy8`PiP_Ybe`$l<0$LwGLX-ACJ;cr<@Ew)Zq0hTls_&&&nq!!NS7k|NC{`*6$4
zC+!_V$J;dXkN=5w>MJzd%YaZF4b{@0|7WkgtIqGMW-T~iKfEszU5>gCKh?oO{F_xT
zope8=`P7ELdv(yDI*9m!ynfc6_@hj?eD04V{N%g*4tYCXa&Z~_BJ(MwS;0QuRmn+r
zrDXQpOq#yknA6VBu}7vu{3<5x`*a2WKEEOOl~qo<<;vf;59Rc!e>H!lRL0Di9>4ee
zd;C(=-!}Y|17}UT&nkZ}wfxNeZrus?Uv6-CV@dCh4HhKUFf&t=(+%y2VCJ8uZ@?o-
zJAF#+^ryekPJ>zBi}cDa^4zpw(tZ0`gpUv&(JPTUXy6z`Vv~-H=GxfiEMyX%<tM;~
z{_#G|7w#qBk+Tz$jTAJsmrc4~P@jA<Q&&fv-)R0Be<W|R_I|A%_`R7qp6oH_VWk<K
zYD&kIrtojPXEJ1;Rf6?_olLlXqN@e#2U}?ni>1N#gGndqC%P7}nyV(Qjm6&@ch`Wu
zjC{P6Z`EaRzdJ|TJ)0%$OHV@DPrRM*8dAKhP0W2!a)6@eG|mh|(|Yx!d4pKIgMKp4
z#;T6%lz&hXP$s3sEn!isvu)D7RQx|soV)~^uaeJ7@L}+u3OD1H@rCJBkGI8%^pU0{
z!3RqVVr$+z>GsLaTZgQed?r4FuFUQyEqftz59XLBLhrm!@@DO+TK?WlS~KsPbT=Z4
z%D;Etxo>+gs;`@ycuiCvYVuY^lwso6Ts!HG@vS$bb?;O)JIzZLKA;8aI3vAk%gDaU
z>?~r9jJcl5DgTme6WM&_;CtZHCY(FV*%E8kx7DUKgdHHx844>-n(?I(tmL{$b3UE7
z&&*3*q!M3G9V$*6;rp_2s*PWEE!Ze=FqJ$x;H<Cr9;xn#XP2vbD>Y~aO-kbbsXPu6
zf2Yqg>l;%&juO`M{z>;-@xD&yBg`Fu+IPRfu%r?i9{5Q+Mdqr=W_jq-_M1LHl=8&|
zv0DSYb)Tf<YXNvy$7FWCx>0LsVLxvw{%z!o9p+h0gCAOBRXcGTub*^Tg7n67)0dG%
z&xgy3h|V1cMU&0ae+nbEeRjgDl>FItOUqSk*5Z}Uh{8TF>HeJW=g?J>;Z1pmF!C(j
zSW$=UWBc2-4zF#e2(Kf24QX}pZTm8%_RdkTd(dmVWknpc^S-%rEb~be)oB+zhTyS9
zJa{+H^UeFdZCxmRF;)5ib@~(3_inpL*#h|xaVu|_boWVckFJ-sM-63BlW(|AXxmku
z<16N@tK^|-3Ht6vY!$v^Hx-v$ja&<_1FyMh(wwgmz8u`>ZioHE;1|%=&ZnOajv2l!
zVf<sB{g#e@Dw{VbvYrldkR+WR_<aC7^c=pOE8rLLk*O|rK+}Emq;>{jtA^5y_-4H{
z+tCL3tK+o%c8%ThP>#>?mE^_vPK%Y7@IK0B@}m94B_Eu0f1>g~^^_^UvF(CuF3fi^
zj6?FyeU`F~D=|8=-DgF{*^@<<n|DqJm*S^l43(V5&=S%!!(cJ;mci6NX26<0G->9^
zqVwJjLB8VmSg}MIFmF?PmM%jlW$omoxkt7Fyb8SJmPxxl7vxbL-;vQLir)m?7l?0s
zEuKPA9@@Zrh<`rcwx1Z^zgd^mb-7l_*}lC6+SWiGf<FHpgl&V5Y=Y;Mcjh+_<li8k
zwSAoWf>@li%sNnHZlk_gLHNu^C*2FFR=YOJeh+Vstr@TuEwatRvfBun^cN4=ax@b+
zmMuprJI}6$RVQHwHcYxP@ijJpuQ#Oo8E?ebRtsZ$8D#y$`8IZ%ox}KRAxXk^6W05&
zNxLVMSZ3UlYSU;(A5z;KfaWIRXWB+8Lvah2bN;T&)0gzg_;v=ndc9l0#(ZvglU!9n
zQ}4$$^Ubkx=I<Y$bnj%6<D7WF>*GeJn?7#lo2HK&pKk-^R^rM0>jS1el$QlBEr>nQ
zx7WOJ<NWPU^sQVQZGgNi*y7u0lCRxh)nIIQ4BIHxOr<jd>ea&`Xy^H5$=;QGun_+m
zJT|kj$hm{G^XXGxXPNzlcjs3WSzmJf^9o{Lr92BAcz#yp3GXkgBfD+T9Q@j(i;IrC
z9BsNmyN5MA&kw9E1Ha7mCSz46;j;riYZ<Fn^X=TIw9>(Ac1@d&K(p(fNw-ydC@&3_
z(bvmn&A{{1(`Fs{#|GoWR=QO<CR#}MLFIpy(hav+Jv41A@PFJl>5fA49QCSwi{CHE
zr<jQ<y*2=^`x*PK9Ea!fN^6Ah1>c`^fA`O&b^p=Qs%Yd4+!4}RKw6V0qmS;NbYE}`
zWxwr@o?mC#^XD$QJ+a((?CeP3*!e|VP91wEa(R+!g6}%j*;T}gxO7tRPC?W5W5#wA
zuyaX<chF~4htH_Gz;aD2e*XND_^;>363bq|$Kv_1Bs|u`;|y%=-)f$97HtzrM`QK=
zBIIv&(*2U={a*~p1dri*`&N9pSNm+r@B3&dQku0Gv^`(n>uTI^u9Q54+eo^s6T`In
z50mc0Y9kJ%rrG0Om@ZCB*K8rIgZNg@rH$M+p2B{#KTf*8#>jV03gt21*v>ZfL}Kq;
zhWFe#sIh61q|*z}<4NZpm3u<@><{@_m6wW@=)IGsvhzWW2_wX-13O=O?=j+;@sM_@
zlP_;s#+g@bnwv-6&z(biY?yC+d8Maf1GA6xLD?wBqcbDz0ekEJC*9^Vrb25B{a~xX
z%$&rd8v+{u3$B5TfHj>t6<Pz?4;HJM3ax>}&SUNao#{vLlO8PvI|OFdKuoz9h3p*}
z?C&YFn{B+crWCYQ@Km4EPxaLV)*8TQu2?HrAJ~UQ<d1cj`P|#wmNksCbFwYaJFl8D
zZ>_~R*IjaPabc3E{orljL*irRcA6rw%Z2N)7d~LqABLuE{#584#Tl>`uuM6X&%<EN
zU`xe|pRkfN>t7MN3a~8^x*D+I2wfxC9<UzCGrwB?HG?%)Qx0Jbvg`3DZcH#U3i{Et
z?L#JD*5Wl|hw{@){O(szh1SY;fEB(bT$Wv64p?yQX%wtFfT<mNDv%#A$&d57KX`L<
zOfVK*@|`yxgnldZ*NFc8dFd$?XXpu+E<6DJDD>^3UuNl#aJM3t%UMxUyvkQFUwiG8
z-G_d{QR7{hiKlU3@U4`Gc#HT}A2jEzxocWEY6Myf-)_P;Q~%Bn_U9kZ%~<En2XyOI
z9%r~3M17<BZIo}pl=}|}QmAhvzKfYDV+~`gu1IMgChh*WOu4^NKVKF~8`C~`=krpn
z3$a|o3^9+gQrb!QHNLVS_WOSCKK42Ai_AG>-|ZoP<%_25TRB`YkbJMb191j?J@{_P
zVM}pJs~wB<Kpcjl`flO*jF)v&?#C5wY#!goma}HiEbA~&C9!%XUQO^?vt-JBB+JY9
z<@)xZsc&8E^1pct?fJ4&r=cE~O}R~~!xum4&7sVlJ&Z<)^D(`$1~OZ}yywuCo4X1+
ziCevV%B@q}eNRN=wkj@5H#k<#Gxr~Ehd#Yx%Gl%151=>gi%ws%E)m}{zd3%MMp?Ta
zI0EfWj2o|^yw10vl@7;2BAIMzqJK6{nZ3PMCbej-*_GXY-$8gi;rEa))wSpEH~uZ(
z&P!az_!?3QEApJ%QlH*-0`|wsDf@oUIhk^rbu>D*c01Y!<0MBKcSoQ<z+PVMop(-z
z9wn?5Iq^D3SU0??6_&`y%RV@l;Z=dJ@4FdZkIiOzsZXzdJ3c;m=`4rUeVK9Of^4fX
zU827{@C&-2$wL~_1*bEf5zpLVbO$^m@@Ra`L0e=ky9#BD<c{;%HLNapzLI>N27hOz
z@)_RiBwafXM@9dtDfc^k>zCqR5^VK_Q!cM|M{L%h{??_M$C88U$coA$a~8S<9<A@3
za$lKkZ|0A>vmzaTdsbw5FYO?Ipb^bNt@`p-;@$bRtPN!9NA0%*y#C@T`)(%npyvYQ
zSXG<tA*}q8Dff%&d+g(tKCIS5V7gUjVG&(Ks*zg%CbbTU(sABV5IZ}Yj`e@49dtLs
z+GcDB`QA^R@!H`6&3*IPTju=ZW14H{wu8B&D+$Xccs{g!ulqFL&f#g=p(nJ}s}+1R
z`Pp^Flv^X?PuE{~3z)`HfWIU$OwUasOUMP4g@;wX%U?WnuJ%RB1DN=ZA$S0aUqJGZ
zp}E!2@XS_r4z9Y4ttyDUCR=ttOk?-XGb#VoQ|>t`|0U#=^m5)=tHWWSi>*Q)oP}mT
z*J0w1Qr0ebIp?XYz1e#h)j!Isus^Ov=Q@P1u>3a#?o%@_s{A<U1ZXgPn}|1$Jg*hs
zbG$mlL83)<jXNELZ@GTT{pfjwzn1Wf9%DYTWRtUG<D8}4bD1@~eU9`QClwkh>|`M^
zb?p4+tC&5^J7IoF=X_WhdsX|3%Smsu<~QF&4vt{2HsT=Z9}3%3&0zb%f_7I2*bG>q
z65!X&zb>#zuqED@5uE!5)-ZWOR{KD*b`ouWrLB90E1Cx(UtDyqMQ|>GaIjU1SN(fG
zY3%v&l-r^-_z8<$g#G$c-?kT43RW4xD#0ouSS?sGf~CRA!Gh&&0V|7OYrsk)ST|Tn
z1nUKx7r}Ob6@mr#5A6bTz(V#PSak$D0Ja)T{a!zfR}PEodzg=$Dgaqorxg<90>y0o
z--Q2)@O9a6qj3y@<hYLTvpJXhudHRIh*y3V<Iqp0-1pHQ&b|A*@tKCqxp&w4LxTpg
zHp;AqM>9OicTKsULiU{-GCYuv93ChRhQjDYkw|}&6gT5;kiCXC!+#L|s~`0EpY)&S
zpRC5d-tF=K!IW1A|GE6Hh5zU;JpPycXZg!s7=wTLFQ?qQ)P~1c{@vJ}nX?v&4F#D&
z&DhT+ug1Rk)s&keuJh=mr<=@LB1>D>W(;UUTMKP3v~{BWR*07SP<&eDV>^DxA!sia
z?QPJ~^^GnycSC7Yn`b7{veNsb&_9eVZET<`q4#Vc>CYXcI|47vZT7cWUfvMo`!soJ
zDtos|I{ptvy?kpbW=`b127Bh=DSO}iF`050TgXnlH0smYP-fZt<~9D-5-&D9<-Q?7
zJ|3R%#vf!OvVMSAhc3kA9NYVm=@5oFZS>uNchTptTh;H?*JZCemr&kErra`;v$huP
z;f?XW?eF;ln|1$np0c83#WM}B?eK5nJL>ak25Kj~`!`cAH=Rf9so;Dl``+^nq?LQ2
zT8nvGwq`}n?GAQ)943uU@^BJKXwO;jJhQPcUdwvbZ>QXys@Ge_O}z&9NJaKC$hhmr
zpvY5b&QGi&027Nb3Y#c9E@kb`*aGx7d3gm{aZV+zh#yS;vGvW^hoe*Omy};KR%c`*
zephC$E4gfh*8%A6kRR`{$8++XJGV+K&Tkf5AKg~?eF~e{tigW~ev!PXJ(HKR1`Lhl
z(T)vfE|b;$6-oR@k59Sll&7n0o`U<n8ZmN_PyeO}JUrsNns^_9?;H4bmMQIYcI{ea
z?Ie7`^pxAIHag4l_3i;WPjhF^4R+7*=j}MfkF*!d?)%sczedtqu0DOTO)n@HDbk$x
z?t)nIi7A)U_&M{k`k?<kaS!4Uwe{<YYKgYs6zrWRr(CWCiaCR0!9Gi0_tv;oDeP1W
znT&YSRWG_5;g96=OvT?weCmaD?e4_JxLyAtkDdFc+!?}|$5+SM)rI1SCHZqVVd+0u
zUCjBpq<7z{26N-5uY~3RG`s&eW#2zNH@hbQ>MJw4*Ialj`=I<X_HU9Gnc+r1vi>hQ
z7(QG3ji=o2R+Go4AM@nU_ZLL^4}MrDafUij?z|woeo*;(Y%bEmO~E~Z@FY^O<0{=o
zXi84r=kB00IZr-kx~$DOiFZ9eZ@OlDPr|boo^kr;W0JFVs_&jqx{}2qXjawjbN_--
z=iF}FG`RQFFR#&&=N6A8a24d!7q;J())d69!JevAS-+w*$3i~m8q%zRW^&~|bMK~e
zhfUMlBSc%RbG(N!nEuoiT^<<Rj0_Q1_L%9{SBgIoythSVuWcrL2HuN`N&kGy+q~)M
zosZOIVew%)E!#y<N2Fojo!w2mzmo5lz{5FNe3?Ug^Ntd*#>>%9tM|G0@vWb*X0WXn
z?+e+(9bj9)RJZzxt_y4!tid1_+X`0lt}xaQ)(EyTKsN-|1@<uy)A&9D=3KJRb*N)=
zmh_|a0>&tX9VF}!Vdi|S`iYK9B8kdJ$rbdk=6!ZArT*q$1=t}lxzF_zRs*)+-TUmG
z4-abu>j(Rki1?{3n!!f78=*yjv8{E&(i+!li{u-zpDx?yHuLQ~^n1@9%IJTbvRT{U
z=FF$@u?@htj(Gk!YW98SpO-fq`y_AgQyVx}()TXk=e8H}2X@o#@rLa9AMv%Ye(NOu
zu0bVt%rku|4U2=6ss6qD+$qg#wE|~&9#KCm)pbID$j{UG4OHLT$m8U-`?7N$>9U<*
zV_^64tu%}bTfa(6wo7<zJ_BvXb^F}a8F~1Om4_rzomT9#_aiIl0NX}#&2Vx+Mj3m6
z)OMB7^nHM|^4KkY|Mz^z&E|!bJoW+>-e6vRB=gM9-A`jYU9->Kpt<%>St&JjXZ9Q9
zYujb=KJ3iPa#2wdo<r~(M87TO+t~s?`5*!VpW1&0nzFU~%v!0_nMo5{Cdbd?onL6T
zPZQ=dc$H=iitTpNtWuh9RGQ(vF_Qb$(5(OPK9_A0G3RBWG|ie2EpT1X$)ow6`qO6O
zU6SGb^rP^`ZZNyP?Ed#1gdY}P>GMYkH}w}O3$mNF-FpfWhw>YD+5HHG_zq7bO|$Rl
zn@Tg+XH^AF(?|EYg<22%)DhD4?Ujb&vAK!s^Y4Rb&^=Q%?9z+al-aW(TS)6ijFoq*
z?!Kb@jN#7NFt>ZoMpG5)8zWbtPw&|0PV#O0hIz|Jg8hMP-$3W7jb`AtW%EAkKfcuF
z-Jd&Qy+!=TWoHz`{y_R>?(`<5@B5Dz5Y`E=YWO;*=i?RjAGbjNoeZxzKCe3BuO+M*
zUc(wE|GYP-N0^6&{jZEz41>{WyuD|C7ksWH4bum{2Oo`F=IvoCII6G0HtOq>``iJ(
ztqsl`*6I@PX&N&@GkvrSzh3L7_PJNf=WtypUw$7oGG^v6#zQ!I1eKX2xmNfcOaA1$
zabBbRh5M-Tw~hR@Y@sgrw)yk?`)S>hpkdnTD(T+=_?6wc&+fl{;<rH^;_vS;`K!0<
zPVAA2sSo7p^sL`@9zMXW_yE;+oiD*Nl1J(2#`j`>-nGxY)Eg%yTXn?SzIC5{Gvour
zGxM9bscx5Jvo9xEFY|U?MZU{c()qg5Nh_VS*_$IhwH^LrpV{a3ioenK^y{3rZxhY%
z3^{XFX7<iyr)LX`Bwt$>;vf6mK9`$zu{lRfJq6cdjNg$u(c9K(EmB8Ke$Vcngii~3
zmhIv^3?K3wc-q?73$52Me)am}m)c4Di^sq|tMfo#x9R7%E6upFTzjW#^844bc62*D
zPtD}zcI73!4@c>aybAx}SNFM>V<0*=XVPWg@umcRmEavEMt+wUuRSL5iTvX;qboKH
z|ElJ*e*|CmmFlZol<wMNf;uS$&Ai0~{*Zq2Drjzj#>fKeYw67Sr*+4~d*qYmy{XS9
z@JaszU-Z|GnO~B)IgU44>7?Otkn-_#7VkbF9}!=)<Zu{=V&NbCx~>K5BAx^GVg?cC
zMB-)SC+tf>jr=ypbE0&25r04aqEGVeoF%zLhnR_(yzbT}Y;4Dm`n>7TK8$9twqvJ5
z`!G7d%8J5R7uXOOQw;M{IktigMzDUcoe^vZYyj*Xfw&`J&b%<TA1n=abAT>(E&RZO
z>6U^Gfc-r{R|(el{OQp92(@56#bLTMSm$wJel1{YBG?+RjtJHb)(#f*Yxjb+fd&2A
zJHWO?=yri^j?j&Q4T2R0%5eZ}C)oV~%()JoQxe9?z)D{b#;U*u!Gd*_0^1qEn!pAk
zSS#2LFt*&8pW3$*tUrSFfNclU-5UCduFvBa#0J2IpbPF@*$oyu-p`-rI%8mmp*xNs
zGY{&=?#0@aZr-|-`5N@s^X<I<5z`;T_teMPVPp4ph<-QpsS~End*05ny!7l`xAdjZ
zuYN!B0sWbL>-@w8tS4wJ)BfUZ;AZc1!t(L=h{Vs!Omsw>f_4<zck=B#`s>L2D4q_|
zYJYJ_sYm-QOB*ha{~oFK7uP|1hIIdJKCPYuP!U*;z1V)$oBa`$9nimM+P#{5Sew$E
z3uN}_`E<@JPI3QX$fdJ{jk6(us2V>@>ybBjT}7KXCy+L}DCjd|$k8=6zR!%^YO4Pp
z{Fc2ZPTRdWk6{%V{b_vXZ1jk80gDVZ>;TWlJqZ0T(8<P5yAOKVY2F!*LzHI-UcZ5_
z)rHK@y0tIKJ1?dokL@9${3ACh$cL5xvT2uF5%BrJH=|2)$Ks!BEDkQ%X~0Osqii|z
z=a)>or)%sx)A9)VU?YBKv$nif_Hy1?tQ{NL;CYZURS&}7VUaj$r`LlYxE?)z>a<&~
z{y@HicXLJ3Y~c9x4@oh1n!~uSep&kg^uf!g?K(Vv*YGb5w)GX$?mzgp?MnN2eid!o
zm9b;itQTg#&D<{qc~t}U?klI=?`v$k@?lf28?|4oJJFza!5+~$K4!~jV+Dj-#*D+7
zAGO2dd(^@4lC8JELw9$WacX0HHQ_yk?>v3lUF#5DY17Dm-c$?iPt$z4Mo(f1#y}KC
z=47KCfdA;Lrri_8|ChfqWeB!w&RqE@`>n(;wE}(k>S^~h@%!jM!S6ZFhW5a(`*j|_
zH~f42Bu}X|j8AWvcAwxoDo>HJHWaTt#Z3Qm1<Kl^RgLJcH%_~Es{KFzOHVKO@`GMT
zoI;BvaSvHBs@H{U{-0QZs<Q$7m91}@cBj-o-);Hiv;oY#Ik0@^x|A!Apxb@Qg*A-d
z>>vIUyq!AuVc!O(o3VEA8S*~)mT7yJ!s#|mZw=qf)y%%8tSx;b@)Nl;U`Y|0Hy6xH
zNqR~Ctv(lfi+sJ5Z|A#vOunLa_t=f}_mpo_NcU_e-VE6A3yAk|;u$><@e%lQb$l%G
z#Gxb2)!~=q-wZt8O<s2L?R-Ib=?&c>Ed4zX2V(kd)9$V4K<8sN-K@{5J^uNuMqn?$
z#_n3^AB5-M#Pe?PY&Uy=YWaH=VVf_WcAsLPb-tA;L*`scKv%@SXf-f0Lorc3i;I%P
z-$MK=&=Ze~_sMEgt0z2Hib;PbG^y*R-4~1I<<PKMu7NRJy07MD#zVp=iunm^1QUG_
zYX++Y`*?t^18e}SH-L4C-}|St=VsNnwu1G586R%GHZn5o&9T$*hmRn_CciWAYU-G_
zd$8cG{2m5t|G>2SGA|#}-zA;cuV7c9KP4CW?k7n!(OW|5cVSTr<c-AbzhT;)@Z#q0
zbKW{?I^Lc)za0L0i8^Dh|Hqu0R=w;Xothh`T`UJr=R{=JuNNH_`9$7y&=pCd$3Dn<
z&`s0Uhl)~>y_7PhkM(zmrUIJQo2TtN^d3!8TR>%Nczo)iDeauLK7Eg-I-asLj195}
z+n^cdyu(#|XU^Fs`CJcPN!-hXo47in%2j-xEu*;Gpo!BLf^k#egW#))dpqB1ublZi
z{aE*uj1|W5C*}@X8Z(^_p?BfkE*?+@C+{hs3c|Zc<4%P~(g^CcRQ%f9B(N1^^R>cb
z5*|y`W|YyhcR83Gza?w8EiS^zP`1pJ8>>L_*h{>_ADng{;oGKd>@;I{qCw4lIXQP8
zdi!ukiMx&ZKAer4&tDS9H6>xrI!Cm&8v@eA-}N?~A7q@9y>`;iJ)LQM`u?5>BX^#B
zW2KZI#b==Y*Le%`kB|AfSvs=%eDpQgOQ|R4-re39i1PBz(=t+J20zn>2jMZ=HSK;+
zW#pIS-!NF$$ES^Mv+|^yaJXK?lcy9khoEV?b=sYaU7>otJ&u3W_`8FCMe||+EBw)M
zX{nhL)UGXvB{wlQ&GLx!!{8Xwo_M{wb*}kp-^=NOSLr9F?U{WeA7+oJ<U?mJK<I0n
zUH?M%k2>>SPTyPDzjnv8d!N?dH~%a+mPLGh-kyrVg2ZQ(kz6B$_m_Sw?^5o53(wD0
zlA_Ky<8=X5<}{F&?uZB&0veanAErNUnRfpqIj3HO_Zny;#Z9E`8!XF;t}Sj|UfkYP
z+`6#1S++~{+i~gq_q2P9%JcMt!SeXN)nL8$#5Ka@DUMzLSPQ?uau!xH>^uO!$k{u|
zTpu)LpF<Xm%-J-vcRDvSt5fxxk<;#<9)|uYcrFpoFN$Y#cJFffBgiAX?)1vPi4*&o
zy=X>P7=0vp{8g@4v7O|y;x#L9ExomP&B9{oBjvjb|6=9m=@Z(Adfw6M#Pq!eo{>!~
zo0GRv%o<%1o}=*WpbYXEIWJHd!f($ugO{(vzWUO%`xUP&-gp*~tL%8jx<a02SZY=?
za%Bq7vf4ZO4%R=nO}j5r**^Kd&(+>_m?`G)L2f^4D5`*8JN$J2QY+uiP4HVN!zLi4
z;3@uXfo|w))9y`$(7nshp_3b)Kex&EMJBE-!1c%x1G7suem%~}**IRwHqRG13XcQc
zxnU;_kBBc)ZKwUkqu-u(?>d8YUjLlsV~*e?ilsMm`=^;FCSlnG&tH-5?`7YA5uQW}
z7E$%O1{!B<+CBI6(EKzvU4O1?e9J3}56sm;sys^o-Wm%0Y8gw+yCk2Myc`IvIccog
z56#$%X52(2Y2FTv(PP20irjC--coajBJu1C=O+^d8NY7jg{-k-j}Du;FS;dCm$Cu2
ze-wN0%`;j5AdndYhQJ5FUoL=O3I9gGhQTDd`U%?)wg)WeGmC8?skh98e0rr|g<wIt
zO0c>JT`gD&Ea*>7gKdvsEnsD-a2jjCN+Vb|SP7W)sD3JQFIX+u8wIdK@;cA{9su9U
znh{%Jv^U4d^lq>;v|klw>=edlZy#(>_oU)%tBaaKco1X@m3*uqc2$;d_`Wvfr<(As
zq#@nM{-Y#2?@is-gRjcQOB!CQ!3LpKzqI2pZjAGbOE^w$&c<~TzK8JlD4e-P@GSw)
zwyDM(4O!Yt^hy!rh*)eV@nZ{T0_POXni#r9CxJ3Urme>rXn)VTfvqpjn&1aB`RYRd
zz(e~+t-Kn48Z|A&ZQW_rN)Ngw=*lEeMy@k-I>KSoVs(FCCXRToCQfS6j6K6>;^50M
z?^VV*L}7Vr{8<m(7U+y^YsO5H_TOQ}37gE$_%$!w0ewxNESbGM^@QyqY$v=vf^M*O
zjc=3qeLkbJ6L;k|1?tQ>gYu6vcH%!=3#;gyUp8$m;bV0(cAdbKk8IjC)2pczTR`5(
z^e+fnYVMWnAl}Q!zs^nt*Y~=?dzQ?&e|5l(O=j%NeB-|H2R<TeC09>oePN^Un<4*t
z3nuCdl>8hfJlQZ~_g$KLr+vJ7kKbxM%k_w=k?+b|S^t3cSn=Yg_@fu&j|DTn>4~2h
zeV5PQEZx{j{9(oS#?qi&6o1@`P(HulYU1`0ciV~?_tT2Yp1q*IjyCn)`qFci571d6
zk9{@dIW%@5M`7qjzkr?eqH`Pd)Hvhf4lzHKtqklS7~c7yyz?eT;Jy$>q$Yyvpxw4|
z#(lL{w&1*Xd32v<ic5&<mlmg&7q41c+?-~z*_Y2MPQiC8e0$EDad-0_)n{gH*4R=j
zV6ipVmh$FLWAG?X&$v509(m61q|9E-;B!AnkmP&kCA2Sbujbo1=EvT6=E->Yy<rrO
z-NP*%dXRYcFrPGgTOS_s<bqp82@~JaX2vV{-YUNL+HimU12<T9&sY5N%(rByk$5F<
z_2R7~p3(8-$MY|T?mE39W3^&}5VwoCP2_1iZRD)T#5MCl`d7E^&-d<^kl*(j)IxNC
zSW<Lh4u;Pf-j(?N3dz@5D$k(@ynGp5%se%B|HvxnI~eQDy2LQ_f&C*Lgzcwpq;s9Y
ze7wT@NBW?DQ-;@8pI1HcM>jIQ!0QcJed6oFh;Mco?<N-J*M&>WJv)_~uos(V+~2}i
zKlPhhu%5Tigzi*MgYCRv#++{xo%D4J*tU1f*fjyFx059}ZRU|ItR<{_)r|Y!UO!vM
z-n(i&2~vWmZFv!EI=W7&u_(ToFHSd|OT0AkR<V!w;Ds}GpVRgqd3Lj}FLQJ~`<z}R
zeVJ=GXYI=E@SKZ`n0CAdo{@b{N_P)5jTg_jZ<C$&wj-o#?%FnX<w{uSc8Yv@I(rXb
z#bpJt?_*n<bdS%U?zY=mFKV7~X<^Q6g>|5>3-qQ_$aTS-Rvz=v5|r61A^AEC&;Cn2
z`@@W1MrJkkb6(dQ)VTvE(+Ab&)jh~3aWdn8usX0Au#EmxJ*@&e2v$lx#hR60#&nJS
zsrXeoh^WWlIj|QWBcZwnm|pVW5JM#nB&EwpP*)T`Y&8LYEG$aFW;;9wTd+4(2i!-y
zLB~bbv1g;&46#-L)fcr(yK_86HjWG-It;!8_Ax522jFq|azC%qSI&RYf3KJ^b0%x2
ziJ#r0s_+WJR}uaJzP)hmm^EhrN`dMKA0YfC3TM>UtKN#Y8hj9ZvG8<pl6#VfB<qjt
z^G|mp93b4B!#H&?|J=_%XTviUiEree8rl0+`{CEeoYu(EQ$Ij{!|N2aq&W;t?NyA~
znmauL4LWoqeU3FY<5Tn2*iwl;i4ATs)GH*k!AfHjmA<tg_CC^(-gCaEG*X%6HPbKC
zpMZbcOxFJqTm#`A&dgg!CwtscNR~V6&CH*5WG4%m{eG)Srw^VZ@11eqtagVyxJStJ
zbKmbK=k4$F_O_)(&BZlTCIv*{XA@C7%uuF*Yi3-M;hwVl^S6UZ!@H*-op>er&trPo
z{p~gQ3U6S3DtU0e1HVW+)Pa{>i9hsxGwz2Va_)l0^grf`{+&51Iigy5?EGZ>txUWx
zpToqvfsdyg%^$P(w=~1&6{PiPwdaYnM`YfZBCYk%9Qyc-`vnX^Lz78sd0?*phLZW!
z@o$MYO>rd&&41balIxi1$6`tT?ShAVU!OvFot?;PBpvm6`7Tqtn1@O?elH`>zE1YX
z9B<8HZ9(FVM-pf+-SzOij(tb{{Ox=Kp4xX5aAzppmR8F5;EY>{QgUv|r0b7$oL%YW
zUiHj+pSgqUp8V-%&n*qW^Q)x0O!fLXrJK8tEZM~PH$3B>&-m(W&rR1aueUE6pYRXz
z+w57tl<r2jkuwILQ+ZpJZrFVz9k%0>_;*KU?42L{Eo>Lq5SV<E`Ux8aEBS3$S04bI
z2UelJ#7}h2r|_@soe8~zPzKiYXn1U|0$V#8rb~fs|6Les0vq{#INesT;Rx0VwkLx1
zfbEW8ePFvH*Z|lNSg;(s!Nwj7=Xnfl-s9o?9R#Zx4`YQ)E?OqSc`gTQj$qYbt0Pz)
z*s2J&3akk%*dA?Qy%D;#U|YfZ0`0LGtY*sh^Qeusfh~w&JHe_W*dDN|2sQ~;8Nm*L
zRYb6PTbK`m1;_RzSa}3n09F>k>cL7Q*lMtn2-XfZFM_QHD-2-L$u({G@4$X1`E2`s
zP$%c}ziPM6{~SRj8yTM=jm_{2?ms&W))T=>a9nqT1$|l-V28kh^-=?N5G->avh3|f
zu-LvC_j77XGfw$BC`T6@W#30y<$o{oGd*MP&TQZ5jnnW8@7ENU&^cGmzP?vuD+6hE
z<i_+dXSuuKxo5`XnY29fuNN|m!Z^B{oU`I)Vq{%X*&)>U8#GSuhkxn`kN?npCeQy#
z{*BjQuRiJVZ~f2n-wyxeA3Xl^{<Hig(`|PlZ-1O|f9lCczP0r{?RkB)JvDLAoOUPt
zN)9jw^7#FWb$tVTqfKn)2I5_|mGdco{{M$}2fPnG^`GZmNxs|L*^hM4^GP*+_lQ0z
z+3knPM=!Kz@*UitxdR>p;C;Z(Ja}BIeE}<(7U6tiDzW$hu9fGO><YripsoGOjJadl
znH|WcSDlcFtDThgE~duSj4ywkG3&I>k1btx4LlXU)6RQfjwPTub0_qAZ_unYei?er
zm+;wE6Sjr05qNbge|Hdut_kj+jCWXWX5s{m<|4a^^CI}YQgPbF&p#7c16KH1^!MM;
zU3^=9O#3qX_SR<kEtNMdJ41t1yz7WN#=QCEii>TzPB+5Z=}{~R)I#_wco#}eO}NZ-
zT%@W@%4_-tzQnpiGwzMhI3xFZ`rfx4eLLT?rJ8l|NuJrfw;y9C{N6{N){~^u4Zq0Q
zZuuU@ph^FI#_S_;*4Q+I^{5Baw$O^wq-2}wTyEw-W$(gY4R86<o#o=qy*b|bQZsfD
zKJpLdbt=oNGi71^8$3_u+oNWY{YaMzBuS$Se&=TV5`X><>4j}z*$2BAbSe(dxFf1#
ze#*xn@eVv|Z42jz#EZ<G%$VfogE2Jm9*Uc1USrRYmt4Y_ho3_I%-NuPgy)wUw-!KC
z<<7WgXbx~yCe6q==+9|6qg;^qof0J<k*QhM7Vm;*AL;5IEoYh1?Fr2RRMzd#Ocu<#
zH_U<N%p;_WzchR9t=XKt$y3&4MM?M__R_pcX`Y}o!}oWptjT8TckZm)g<;_Q?b}}c
znzH&fil636?W6ms_R;0~?2X=4x*hQR6lLA5d53uB*+;hpn!*>%y8I9QWXrnA-ffRd
znQcDupL(5Nx?~rG#jFEd!?*K<c>3%0lZ2HYKkMF1=XLgm%8+l}fj8ToME&#fmLWTb
zsksyzkMxExww%AH?hb_3XVv#sLsRj(S$B={^iZhpVY=w;rd0ewx?c7OHr%CaHWRPo
zyWaf(UkvxXTEce_-U#1W@x9IR^~PD_-!N~1un{BvU5uol&)egFkoYP1YrWCAO#GX(
z{td}}^%q&shW|3YrOUi~#O(tM-qs~GW*xyPe1);IXWeJ`c22f=@%$ma&zaRaov&(+
z4>1}?_JoqBByqdovv0u5)1Ry?2KRZkL(_T#_AP0(>D=tY8JS=`XJdl<BD$TG^1X0}
z{<^s>>_RDFcZ9lIaN84iqCE=Af<+KzP46f9Xf=M;GHK~~)2yrU!@LiHXG?e!_yD-t
zL->^*-UdFF2VW0f_~u;tt>D#p@Ezc*^5DC{*G6!)!}>M&pTTcapBl`_ICW#rdv!bK
zt8Pp?tVH9_#WRpwHyZ1A!)MFAd);qIw|!In$Xg%IY#N0|y140ow7(Wz#J7G){uMH?
zH7%TVOVnp?A#QxAIC&K}3lt~iE;KY%(4-d4+Vd!_(6nH3EMh2auuenq?uYkQXvl*3
z2^#|262V5mHiP{=K(`-k?c&+c8K&5mu$Ss)Lvx!_u+|7x3DyFZ_V}qU)PnVbtrKSM
zqFr8`ywncsbw$@3>nC$3Z7a0Sl5oB|!D11t2kbCBgXQZ3I~2hNzz%{1=hwTzQt%7T
z)5gGR!Ge1k4uY+T&=r0ey%M1-2kVc}RfBDh(A9y>1n8uv4&B6f1g5^>-2JVB*yUzL
z1Mje1k1xBKvZH5CRQTrzCqVJ4!S`q4-H{tFP52nPz{LBQjaNmyR`7$w`<3|J4DQ)k
zf%81~WX>i@|89Z4Z|ST(e|{eH*aq1>UwVPi8$)<|<SUtP_3i3y)aSC<kj*T-9=s_J
z-VELr!8InW0bdV(2j4O7%VL|K@r$c0Ypz5e)X%z$)K~8Prso^Q2-EsObNnx4&aSPq
zFHgM8-3au{3;A~b2YQWf*vj?%Jp`|L%V*t%>ihpim?<Y?bk6-~4SFC-H!DW9aQ57J
zNozsu*QB#j>0F_7*#8$$#H!Z?(ClxRHTTFm4K}^onLD6sP^;^>w}%T0p0xuTSz(m6
zdkxx%w+r4XzjKOs_j0$0RV?ar-Go;(&bpshojlL-4el2)etQ)mzL$Y5=(lH81(QIJ
zX>db^O_F+(tc}5QEoqwdf(O50%QMGbwj;e+{#E>6=gzw0q-ob%m=kD!Lv{QLI}5;m
zuPdU*%RJ^A2f_0SwECijX|;e|A8mn8;d!%ey#OPZ=9#L$W+njfJ$$V+OEjiE7kmhR
z)mvxn+k<Z;U$i#QXPdAzVO5#1Q~fZ>;BL~XChRSIYurJ-ntAei;;aJSFBy2MKfj%3
z>|k$?XnXvb;x&t~vX`1|i1{ZP^=4f(bvNyO{%m$nmgKPsYzFKE)!P-tDaOCcic_}V
zw~M}M)~+?RP?O9M8zJiguY3Ef`whNhE40Sp+syvlC$n!Qesew}vfgZJc*w~8np-$;
z3BL<f=6JNs;XS^+1&O73<lfk%lD)#Kk<E9^x*rs;AACJnfB9`hZ2Acp=CO0LYo4p&
zx!~L0ng5&N8L{crceTHG&xNz@w8q;@Y`Xb<9OiMiuc-_X-&A&;MEi^Xv16}$I((g%
zE4^^vMJ;ouDD%OK{kBveNrLSs-mCexviqLw+*a*YfuFL9IG<I&eCVEF-IzH*LwNs3
zow`2;Ri26K5;O1UfZsi&*9>pxv+$E12&{L=4r%%@^8Bt@_rq$Bb<lWyiq8Ko+ozVB
zH(NWQ`w_eriPz2IMVX1CvL2#bea(JZrMu=qG7SACeCPN8bh?ssP*_^`^givGzdGWz
z!b^AB=EQp_7%%&6<_fYQ))KesQsy%G;=bKar<U;T&^AM>d7$>oh4v6Nu=%Hq%|9i)
z3>C~Gw|VV`T=KM^_`Srhq7G~y<Bkh&PVTP}nKiz|Ukh^PqvG^)y=$ZTt3ia0p{`El
zTlKH{+y4>H(_A)d?oW13qJq)3VSj=>*P5Nv;5n6yRjgxg9`{wrm+U;Vop$oywNYAq
zq%{KH=kcwdumP}PuuBbM_gU-)t8SUKd->33A4F2+oK-!~5Y|E1_eD>Bv-@q*@w)>0
z+xVACQ5S`m&$_=BZB7}|nKyN<G@vEYkj+qr9mJ{NkhZgoG7vAQ!y^7~=8*-7>$Mg}
zJ|pvfMki|z*RE&Y!&=x@{&vn*y&MSjg(~o7XxeU=bvKFTWN7@d>Fj{k|Lwj2yb03H
zJ<!jmu1^uYi_-N*DwSb7Vg2wL&>ZS%!b}-_A5^3a%ZtYf5_7fBJhu$SC!U07?4#Ig
zl%b7J=Ru`67Ak}K^LmD{Lm!$ozPUjDnXkSxlY3Lgjqr-yGV6W`L2x!?^5>5ek^E7|
z@kDiD-uz|ta4$T!lfOCi3FjW=??C9>UNiaA{^FXhS@$NKht8LemaZ8;&AoGD(*L>j
zf`#zaQ;N4Rz3+9J`Tt_Bn~Nn$L;H)*pg);>d|7QBzK2fj({nBIeGmSYLh|wHe?rFg
z6eP~mI`2{T{7k}gfN{w9d2Us@;dNf=jUn<@|D9R0N6C4gP1oz!co5b(>}QfeifZHl
z!;frl;@V~YxYYh(tUT*0)&AmdlAf{O7b`s&c)mlGvEw?<-`zXwUOkU8o^^yWQm@&w
ztN4`eJSJ~loAEmd&t34mfHcbyALmA;89tjSTW=fr>Udz*ypP~qV$;nTYdv2@JO1UU
zkt~I-v<|>$?sxVY8_ao&(rOQy$VPW{>_DFl`T9)d*8bvQumzIC6Eo>!ZwA-9IL*h^
zP$9Ps?<il4sD&(EDG=$^PI!Kga;tpK?<CvaU6Nc`B5W(+y+4_?`w)LjIQy!+y(RQL
z+3MBt2DyJ3Suz)?FJmg6%&x3iKkFoXX5e$R()nnne;B<1arRxuY8?j*WwZ`vA;6BO
z3)q)i_|sW)pP%z4%g;L}OP08n!JC`mu_1fjP|SIf8q#kk?&?h3IsbfIwZV4c_7iu5
z`qx7k)6b>DnJ}40kaGK1R)@!K<(&xn_34tmXW%ItBw){!knVciRl6SY<)Ip^hIm6@
zhxv9MC0>KK2BTXk%(6lJ>ue2tfCHE`Rot|98*zH}%(_34z4$HSXjK?`4T72<bQ4~N
zJQzRn*9k998{EM)S2^sb52@i-4xR)*i@fsyIqMqnJKz>q;gs)M!mEEhYwuFvZ`FSq
ztoD&v_b$Fwe?i})nWO1wC#M`kLd*hfBjj49=q2unvQJFi8y}UiBmMo1X8nT$odt<|
zrDJn_$;P%y!D1AC?IW}Hu2lHt^k+@e@I9vDKg+e8;Ue9aWT~k9x7MHf9P*&r-j!Dq
z!K)HpZSWd|SE=gLjMHX5sXc)YS~;d+nQf~swm`dM@2vY)(H=4HlK;@&M%<OZu$_!y
zk!Wb%73OV|8Tbu7I_us7JDWEBb6uj5V_)(!s}qs<;v%(SDNBB3qqFW`MGKQ)8)7G}
zo5K#Gc>MZEXI^3K_cU=wiTh2(h3Pu3Xd#KWA+>D$TW;RN=zwO;@5qZ+wr<^Vu^~|}
zopT=jBT+@eO34tP0vJ8s47=^b8~nW;hiqFI9b@Ff-)C;-h!-h`Kh7&2ONy`yYfvPJ
zBT2F>W$P(z-s~y)9{#t-u#x3}Bf#@ru;3ZI7b_!!@x(v!%b?j)n}S6%{6@!T-6#3B
z?MQ;&Jt-)^4Rg>PI-fikkFT>rh{_DKo%DDgJh~=k?VYFW=3Ey)zc~30<1#R^GDP?Q
z;a7O|>FIDh9vhv8JbS;2^XJ*rv*fh&KE|iXS@+M%vyoHdd&0XCkKZ1Ul`4W$&~Bfa
zbx&8HWn5O@Muzc^@Vrp`hs8A)6sK00UTSqlyXdE9?OVD;5s%iJ(0^cM<li|9=cGv!
znXqR`4v?g^Vd+P*VYfg(#NM=3d^<0Io^egymNop{emnl*nOXM~*@(~nkEg@g*Be}W
zq~C9#-}B}Yj+jJZpX~5l9lo$A@ux)b2=CsHB`)Isi=aJ%Oxd%h`$>B}`MO*A+Dh6)
z2<m#}y`%?!9QVN<Cz=mK!_#KV@Y6K&cNJkJf1Y&<iwS#AChxxe9npcb$DBlY{=D<z
z+_lFP@0xR7@t!%&{C^>|u_S5qkj7o)5%*`zS*$z`&I#sG_IN4Vjkf$Bbtrj49L;j}
za&;S4tK$pJ|1{sLg|62{w$=8gud|e!&^?UOB{cuvi@Or>i;8==R;Ua2-&*>V<hg@*
ztKv`C`+AWX%qc{M?XNic#dl37@<8}oWeaWVGi?~2N2cWjO`<)mhQP}qzWu~|BX!%r
zw{siukc*6MDY@QHx_g`_%)6pi#=Je*)mlsUWQ<;*@we=L{4;Z&aNowa?YEw;PIBRP
zHd!#c)M(_m`h(2RiL+F7dxFh()~B3~H)bO;-bogkp&zC#)CZiWSXh%BW1F?`cPC*j
zbDuD8BRan)%;+Lt7W}nqBgb01)~ysZxx=A(IXDk){VkKE(@7pwKhFQh+WElMS(g8w
zopZLKuth~lwd!QE_~ufom3)hDv5jqPV;d?eDkdfw78>blWUH{PMTttejFgg+bQKlV
z(q*$KX{|z~qFj^uk*!(-#sOE&qMqOTbKTGLoaY>veP6x4&+E1EoX>UL*Zu#xulu_H
zJRfsuh?plfrsv{6+`I6ocWnZmYvHl}$zI(xZvX7+_63#f)qQ1*ExH$K2kn}?YtBMm
zl7AJ1tw8=KCBK2NS^H+yhnL<)editZo>IA;3(ux-tVXv-eRc5%?2Oa8tTRrPc~$<2
zCL7Ur&TmiLOhHy7yA|0@i;jB3OgIw%`h3);vvDI`j=oNBogZI$Dg`-v?xt;ImZxE4
z&L>Ylm!0);m04>>A5xx9z%#t`sJD`Z(!?_(WmXyNIcD!beBA>7FzokVc2>#xY&u@K
z@GMpWc-fFRt2(xlm!I&$f#diS^Uf;aZxY!xyXNIw#2mgx@i)<jv&vNV!#)Pro_8Fz
zJF63Qvvo;&T=4Z^ee8R4=9-zZ;>>Sl4$Qnp`XTXr>5a_&0BXY}@U%7^wQtWQV(_?j
z;`DfVOjnk>bqn;k`fEM>xyXElWd2tD)$Q@&r?tDT@8df_-W38iXPysb?A)$3%j+^H
z5NqV4l5KjBu!Ywgb$8eETi7^Q0oc2F*CQ<F2ef}M>0>>@3c*^yqW-30uq|K~#^);o
zYtF)|!J5FL>un8SyR)zsu)|=lQ=~kS+YVN6?NR3k@v&~OWnj5t;*oyb16B-Xen930
zzK+49xiC~QQq($Uq7EUQQbxF;8%ZzWUNevKeh+QZY&&#HJL^ip{bI6WIe3yWE%WQE
z;6r?~fw|0$$V$|x-KW1zp!%<R2><arkGk`&tcUvkN%IltsESk8^3uC`<2Lxa;eVX;
zIQ^FP<z$U@I`<!c)7%Qq>=wm8h`f?_9rZ?dm%Mh}=@IPV+UHsy_N2|t)c$7RABEq}
zGIKtqju9w0pCWlV+i64Ow}#h5)93wh2%R6C5yh-<d2-`g)c}12{+B8&gy=r7I-n-#
z{lus8i|F&Y<~N#@tfD{C!n3@Cnt;z?tY|!G>SR9-@}I|hV(@d}eNCdZLF-3nnBB1l
zTEy<?fp(B^`_(SGpiy=<SBm-`ND-d@jArq_{Z4%a@#lV;ap3x+-h~>|S485NwGOH2
z5SF|09o>k5MXk2q_d|3B`Pjg_t7EGVTU+E*yI&s}E_%}?M+mp{-ABFW`)w`5cRm&d
zv`;MhLd=F&oJ%Q~-1qqHnt8Cl=Y_2cx*J5NxA40&w;?6ex=f#k_9qEfN4RRjy;^a~
zHs&U2o$J!!DLEk3CmTL2|LsvvXWA35?2h(H^5oy+rRCw<Dg3DGh197H_Yi&+{!2Sc
z`S-i%lO^GPokr;LU5+3>p|Sf3=w?Tx`&rs&>W>56^WrzkXE=NO+msjk*qj6{G9`(t
zWG81Au)kLEp7@N?(w*V!P<{*U#6R=Cqh7CgZiFX$9fK&+l^DLGfsoI?z8?_>;bXEn
zt({`S`F;F6?#HV}M<m0kW2M=X2T0fM_aF5xQ5ihfm4QF!w01+&whxJ>4NCX@z8rjc
zZz4ZuDy`$6wecxxPnI3PUv%S9Z?Wo^n&0Wp_{n1aJt?P$(H2N~CFI;L_M?0VU6(}G
zZe$rhHk5rYdb7S4jXkjSR4yDTw+lyB=DnX${}Fx9`%k=F73bw)fBZ+*&#^z=sQi4I
z{A7*)rNq|)PvY*Q-hJAG)(uY(ALpyq>YL>26=Cd~NKHADE&jpaE{;8f?L&{9qQ3h5
z+48HAzXYFOL*G$vhvr#7bY*(0zFjzLo)y?t@%S|hXg;$IRI6KxC8rsgE3gMj6z?yQ
z$&4X7H&I{Q1<$r`AN8I~nFsAT+Lsvw<%CH$0e|coB;0e^H)3bf_DXhojY;|0{TcMr
z14q3_Xk=Di)=!=$KcfrdIoby}yPw#2r2Nbvb07N)YE(}@qi-)B&A1a=@g`{sT}O|4
z-z|XWQFu<;KmBrK-DvZ_+e3-W&hH%Z4yhcA(Y0CYMk>cncn<&lsCSX}i<SiXn2zK3
zC2cfeUY6c}$oi4=%@E<9`(3{rXOyS<;1e)52TDO7_ZWj@n~u8tgx?aVk9~!H;bu%I
zK#faDs$%p(|6ch$PM+))iX*4%r_f?!8FpA7*a%qk{^kL&ws<CX5Nvs3EMqU!I9N#*
zmNSTb1s1jS3c-rOqPAHvSPj?$(xpe~D+8+r3v4rC)nHXwSOZukSadI13)u4cV;OtV
z+QE_wGWoi}@)u_2V-Hwv7IpwEk%f(b<$!5y(4+LFe0fnU@i6{A_^2{_R4+wfg<w|;
zkw(LV7n~tp4y_T|bB)`{tpwYWh1G$zf_*i@*9^8KH?yvGfE@rkHNw{kHW0y-re3gq
zFx|IdX=0mJa9-d5w8Sa1Y0C3qXqC{S@=t(OfCYIjhA;mS_RoPGb@BuI)y9a}Z-QaT
zoxeXwmr0yDX7_3*;xu~tt?wsIkK5>mnyg`)E8I{|86&x^l~xnyGEB^VWO}?OzKQZc
z=G;DOGA<FJpAfe%v$qTgsj^{Pk=c|tW_O$<u5>b^`ZD(EphG%eTp#@7@RutM=fH2{
z29}N8Tchg<0o<@={dW}png{&#ywl*vi7Q{6bj%F2QDl8ovK9ui%$G>w{XKTbBJ~Y{
z`$c2d^1HF4^T*tGbAQ2LWaW_7O&RxG5Rw#O*1I`lGhy2aYjNKBZ^FJc9ad%4OW0Au
zHYvSV5*ERk_qpg}#B5lCF8&etlZ(dOzVdVC<Y#u~_|?9ehVT!;Z|%$S6#6)C3@sgI
zCu*~u@Gf0E<~^HtJ%#-11uFr2sel^i{}ny}UYUhUS8roVT@P;d%bgfr%)YO1UB={T
ze{o;1m+~g){vJ%*UmS${;Oub2gu68e_f8j1^)?QE3wS;6i7Ua$V@6v`d%!XbblHVX
z9q1e4e3r)bvt3yK?rW|;^6w<~S4uJ_A^!N@OZe-E`wNOYp){q><*Tj+p${YfY|$s~
z@Y@vQyL`-Z+)*+E|BsMocJ+_pSG#6hlB}YS;}1htiDZ3iE?Jp(lvKjs5y<*@T9(2$
zK<h%*UdejDljWBg>Dr!%-4V77vy)V>orJj%d1?oVOP##HE>+tZ{yF2r8IQZYIs8_b
zBVfmgXC?2hT{Bz4>q_^ty%oFfp}jq0%=?(^foHgMMDIpV&l7w*WOQEq%d$ge`_03>
z6*I{EIrdK#Q6?st0A}s|NP@Tig7w0}G4Ed9gZ^eGAABVvo*sA(JPnWf)&Y2Go-^jw
zBGWoc-i-AA9z1wzr^n%~eD0X{GuiF5(deB({=H-MT8+uj()3H^qwqHL<7s2w2m?pr
zO!7o{f1l6X{>1wD7f-eYBZ<5Q<oz9+_YvL`V@$-e{A$(U6}$15zku;pedBR>EX^o?
z|IP|O&E<BcgV6^~2?r{1ecm<XB8sHj5HhQ&8{3C*x8hCr7sWY4x)Mvqyjx|v-sa+b
zntbY$f$=>j%P8`a{Hw-q`6PLLC+~?X6=!S4{80U&<CoY6$uXM`E1%}u+R3+q=nLx?
zSJP<IvouZ6D+x0|n7xE~%&*T|H4nQbzFzBJX+M&`x0U*sH`go#IqD|`znYixUD8N5
z;Lfm2AE)Yn=!@8kr;m9r(LS$xKNYQi+Y6eG&+jKJelp*mvzsK5mt+~fhWI|Dy8S)!
zvhLxu`iJMpYsS2nYhTtcf;fZwYW+N7YwTQLd9=IH_Aw8By17;-GT%)7H;@L)N7nw+
z0`MgiX!q;Wwz1Mucsu$E?73<e+k>>s<xjBua~J8n_=8%bdYXBk?nZbWY0;j6#9OQk
zGTMdWZHK4gjbq+<n$K?dxAEHkx<So1XX~eMZ<_8#xP*9Lud;7cyqWv!8kHX4Wg8eb
z)ZcZfLAt+Z?fv!rC#iYb<}yciSLVh4G<T(JrX44Vs~PbL^!ojZR~Id0rAOtUyAcLA
zj(MjkJw+}((e-)ri_3e+idII?UzHdC9?@rD{+#XzVk(HYLh&A@P_lGEE?u>yn)wiu
zpTy6hr^_I1>oQ@CKa2v%hyX8iKM*5XsFRo-tDos^ghJvxUvchIoOaI4HvFrfm41aZ
zT{z}FseZOSh%;;bi#C;B$4%(NnsZFY-8T%{kavQ*Mg?&Xu;LraIFqNc?S*Hkam?GL
zwW6;Daa!9>>voIN@7o>o;~O;w&h`O>V_?o#$tUMrN;MbHQ=N8XtQ8dy?~X&H?Stul
zwoLga+;K45%QNQE5`HV7bzZOzkCLyjz0QsBAI1*fN!Y|=${)HFgGF_EfMKd-`<VAV
zwHeV&uTqw?zSqLN#PKU=CE2^%+&2RXFbfvoS1_INMa7Z1x2=S@svoC)?i}+z&%5G@
z?i0j(%h2C)#H+3wkz4tZG4C(Ar0-&vK7Xu9_c7CNR_^)^nl3G$qie6UJAn5h?+28{
zUC2&UDV>>n8kMxA{F@=IIUQs6O*`2h;aSF{n;6J8QvEC)VSWr>bpBWhRv5u#S5$!&
zfOYd8mT}aF&TfMOIe{}aKdrEH6m5jvLfA7&k{-p|1=jKLG3V>_u|BZ&+tO`Cd;?%@
zS=d3a9a-2oSZfxR^BeqWSy&-hOBPlPwj~QI18WA0mP<8QQx?_$)|iF0fHh=c?O^p;
zST|T*1gj>$HDAXb0%O+AzJ7W%?QD*@_gr^_Tq+e9RY$TR>X5k`nLWFhCrjp;PUhTm
zZ<H&O`s{-iZ0xO5$8j4P!-=__zmWXgZ_uAV>C1l<<I4IVe6!X+{xkWF$glX6FaP@g
zd-(^DzpK-if7<`O{Nit-zdr5D|IR1=&&#I``OEM0<zN1PFaHSgcXavk<NvqvWrwum
zCmsF_zDA8B_c8&b{mjyl(ebc3cJrKO2o3e+G}Jl9EL#^%64wdhIvtzz4Biu)i7V^-
zz0x_Qzr$|5Ys{V3;<v_`65O{r-Pnd2XI>nnG59WZbRUPV+gvoqI8%|AL{1BG4zN$v
z;{PKP@nD?s&lxNJy~Mxg^J8|-ou6h?41#ssJ?1@AIyBb4IH~ItaS(E}E++{zE_%<H
zx1RLnaK0=V<09PnJuyuw7<zJA`B(4+KKpyeykAq!ITxI)jBOm!o|{Wll<bc#VFj?5
zlQ+qg52yD^Z^(=F%vlF3xr>ief;vr8#~ONczm4*?i!>B{Y0TZH$nRqQ?FL&4*225?
z;)ZvpB;`9}@RCpNq5U>)48z+3Z*U)_><KLg?*My%_rx7+R7;O{jI1(Qi`?D}-!DG{
z|JzvuI#c{x;nzL_{CbjA^m*)+K-QK2UREXi>jPQkX<70SHb86o@|eeI@0`RkXla`P
z+fsYb-EFk#Szo2yLDEII(~()J^c6{FdAQe0ZE+v;;a=<z$<1+cqx#(TUXpWn_rN8y
zH8(Tmq-5jcixJNTz5n(W;;GNr&tDCG_<ri^t7F~^SHtrIc&u;Q-evoqDt8aG&p%(b
zs-3N3_w2&>Kl117gEl``yrp~R<@}0u?w2KyS))EMG;8gs4xavLd?!p+6W7CYQk~$p
zSLR|{=ANU6_G%w8cVH*KR^@iC;_b_ri>c0v@bjJc8*?%7tZ?y0eO6k7<8Z5Nep;E^
zaUq+(ns9H%=C?Jt(<D2+2B$XO{s#m;HRisv6XR2o=|;XaXye@fZf&sk+t?%Uo+DlJ
z3+gxBo{2vG1lja^MWxxtZSc>KFSCz-ruO36v+A!0TH_3Qi;WYB2VGl<>Q>uZyixVH
z&g~iPn;$=%H)s8Y-%CD$%x96;SE+73WaXG)_bcA|FJLb|XWV<S=2hEVIY#51<#QXF
zXH%>>CYRwE?LEl+>ApkWHONm~sCYANU&XuY0sJM;ANQJH3D28?c++#MEFZ@D#ohDc
zEpv|<VS7D-%zonSQ-1H#n9-e)-vZ)o`V;f3wc{D<My+5YVA1_oyTA^DMc3qZgAHe4
z`+Rwltw(={zy{%yUrUd$!@j&Ib^`1$e63>Q5nuihd}5WE@g~8lz$hwv#J3!*5iDc<
z3v3J6Qkt+H@zsHKtQ+^vk6_JUBkRY#nh3T7thg!@>y*5W;~D$Sdcm5ruzs+nENmF8
zF$+5a)&LfyS^aIsm-qjaVEPZ|J1#P(FkVBB0&L`eyMsu5_rN~JpH1WLO!~8FGmI9S
zY;<*N6Gxyo_xt|DxZ0h&&mreQ)-MUS3K@yN(YKoH8f$JZcHxrHtAlWVQonTJO2HMM
z?(R=K9){!FST0;G^s|F-KXu`%;cW(AM!0<n_dRfQqJQTM-$?cEIXAr@yTLgtLR-Be
zZ*3NWR!kyi0GWrr=jZK%ii=?**klS_<#Pm{EkXIb4W6v>$^9<pngbaZx%4Vr61*-5
zw_$d;a_Bb);oguAR|{Sdggbk7xEAP5LAV#E!*zhGe2R!W@$A{*`k-$J!o^)UwUy#A
z=DUQe=iQCbtO*8t>$1)%*T7o|ukBCF-rw_Y&MB88e);#9&k}wM?}?ijPqSrgc>1%>
zD%XRgVE`Eq@t$+(;u3akvn@Hs-Po?aPC(zX`Q-GXaoS(?xZD4I>EZ$`MRqi5r@jkc
z3cUgPC6a$-CS5kt3G&bb{U+WMkKXLBC1MW5_?(!GHQSc$7CBTG#r^Ygj<OHprQ*LI
zevBWPpiB8z0qqE~<SR*hIgsVnZ`SyIP%@g}`w23n=MuL`23?wWrKb(rab&zrwC&KW
zUr>kJ<6P{Ahq}mZ%g}^X{CnYFey-1dk&Dy!kLV)63KxKUFl#7*zjA`|g#XRbYsmKP
z0W$2)5gx@JU?$+~0kjI;IA<GSy3b4N+cL0{@8e$v8__)H_wAO>==zNLH}wr%U5KCI
zYg}b^VKd=>%Q&<WS&3f|UiQm;cc+KqOcCdj3o_&EAxse%Ll}NP7pLir=$+u373Ymv
z-h&Mm=V8M466ebm=SQM(-V#%s4acy@FU*Xy?kkiR*aF3QrHj+wuj=;8`Zpq)gAaY|
zmz<6BYTsRiuP4r=;(WE@q@ewCw2Jc}aW1_m9cLxjI9L*_iFeh}96pnhS!XmW^VVBA
z(^LpTa@^QfI*I;4R&?C10xJjO_=-JBM?F{>SW?J^iwo4AYrl$q06R^2|G-Ut-;mR~
zGB`S7dkb_oLKptVTEZln;lsvPdshByA0mIX<KFi~tAmD9N4tx3)=~C<3-kf#t%_qc
zbZhVC^JL<eITx*tpRKuQ)`nAe51u|j(M%d{R6H+H8mcpNzxv8ycn)4X?k!YY^Mknj
zzGd6d{Lba?$tWDa{<_3Z`>#Ld+pbv4?%P0b4^3CUpY)_CuS?T)DI2^N85LmXD9+C!
zBi-k0-FOo=I6l&}4Nl8ZeWZ|8RhO1k1=fSCO0Z+Hr5l{ATlw%(u$M1w584{X8eGeq
z^O$Rm!`%r}GljmoJROJ1DEEihTVS60bs{6rn^>bA4D|`=lrAfU{|0=xrMxGOaxhnC
zW0-#`4||Z``IfYN<)IP&U0@BGFZ}?1$|JgdZF%5J3E{c%`uMK7r$QCZhm5>ESB<-G
z{B1>^*+-~8YDZf-WcVtbqwt+dI!$k1sdT3G_6)TCK*mKUm!bW|e`bxqWUNZdP(ABz
zgh6D;u1uT*&Dt?-#UFdMz@1&s>L2?Ew-=e#cZwv_&O)(+firvj>m<&ew=tfp&f`vQ
zR3EH$-xlp)^^Ri7a9D>n;RrH%i9=&xVyulgIznAr3|99f`u*+nebVmcXY1X5i)LK`
z<6jntH084m-d*n)_vVwH?6z!+%P$}q>DFxXER7fSKf=zrcHHY#`D`T(l#l;C2iA<k
z?;v-~(>H=L#tXN{x0~=Q$-|k*O03V!Lp4}G^nLFf_wH9Yz1qp2)vnTO6PDEVb2qGT
zj#hYpHGk%YHcsoqWLfLrYR{d=Sqr>=+&jZBk7(VXsPrB9=J+dAHPPjLZY$$!vc;U{
z2-n*fpVj}`i1YBf$Gyjt&lcjec4RtA)AjqD&OyDiN1`5{qQ6id?-}==tp;OlpW@Wv
zPMIw0@^F~wJn#Cv^Lg2zmst4rzj?7bU-DyY|CVv@|EccAcShT`je*=os1K2(_n@+N
zs6JOixD)RkcWqlA!mGoAVPHx^Ylc>KgHP*$cCm~gu7JFplyh2MWxETW7I@w)UDW2{
zz17_}wLU!O8?Dp&_+QM=H|sElTU$JgycPHstPO2MUe>+=jYqjZ!Cu@p?)_GIeU*#T
z_eXIExjn(TYX2;-z70A)dpPp_QPs%FAuiQv;$I&ouFN$!<!=i-2j5TM)_#E};4xij
z>zKBlmcHx9{6d>(NpG8biQawtaR7OH@dsO+BQDNtpJnCW7;kr^b+Y<&`F-d=u&*ht
z`gkMhi0%hd!}~b(ODlACA$gSUY9ZVf;<LS1H!8lgpGald3BBmUjD4!VtDW4reS5mk
zQlBcxUe9!X=27Ix&t0PQy-x9De(!LpaD02?JICF3Qcn-^kUn#O)naL02A}Tzc(1}N
zaIyk>tP!jVdg3GF-hDV_6Mx+?t4^|fJ?mNek3T9O;p}}Ac<_HPcXRaH$X?=l694&2
z)Yc9VSJplPjj5f3*!P{|-Ut2*o`>L}26o2W_g7Zmk_ZkYygE3bxGw*!>JM_LGfCKC
z!tNojyX3dJpSGNJ{y=qj0-l=hk9(7<qhG)y^R5;9j0Lws=-OYLV6K9@$jP7_HMVy=
zg}8ytc2ogxF4%T#&%~`k--(Wa&9MifdIC+WG;AZ>J=n-EQaNlV9DRj4u`y7(y$gEz
z;JEi73z&)9oLpZIq}Th?dcgLSyhbGtmUSx2*7=giOd+$Hd>!RI@gv2V%J82mk6ZrE
z{PtJrJPK<A+X40x-u0-Ay1=@@)(N;wpU!l50PX=l2yXk+?Ou+n!+Gftv>9l76~^>-
zJ$n1*#RXi*qcTZB?|N+9`(XzCcKgbh=mr14K0G*gc=d-8=;P3T>WAOS-Ids_d>Srx
z`{E)d>I@Gh&}!k^_3LqOJmfR`mXgE8By$)(KD6__;JpmKcEVI28u$LDFg89#>sSHP
zLjh|m{gIz`mTHjj1&@!rJ@x-S{P(lN=g;7uB>aC8zv{4x@NcBOv1P>`m1jLz8Q4pO
zSbe1Lh8MjR`nC~gXX+bSb##&745I1KA#5z@L+~bUb$TPJLuLPchk~J`LLFKKZwuin
zelza<Ms~}kv-M5drnfO*4P!uq%$C{e#@&5>0C_r7vP|iCiF8VH#=4d2yksByiATrn
zUXR55Agy+{hppw<G%KA<>!S^XX+rMDBzK|YrsuKBNBPh2m;Mg>E&+XV`@hqh+Q9Pq
zxs{_E%Q}#^llWA&i60^_D<7)I!hbQo{4w1>r7w%Y3c>E>U2SugPeK!}E3(Wn=6lt!
zCw@+UC+w-xLl?U|*m&iiyS4qB+S~lOtnd|iRauCgEt1SyWLErX+$)pJQ=YC|Y|h4a
zrDL|@I%fqVFUh}NWPX;p3~HV+;X{;7YsOt@<={i`<R2OLJ|~`g;o*}IzHQ39b0-&?
znQdAU+nQ;a+QDqXX#6hx1@;#*#w6n%$gsYeo}1g+91T%xb4)e&&1DR!4C;`R{4?!M
zZR6!mj&GZroil4p<-6z?%-uM`v;BR@JivV5Y^CkV8!3a#@1jcw4#QJCG48!kW&apF
z)~`1&u8;k}*~dsz`<hYuj*Z*5jS}C4FH0wJomc!E(v#L|Zf$e<F!m2=I74Z;MQKRS
z-Bf-x&|4<Qy|Xp8zQ@V+$E_^ihLs<#Hw{;G!O+$1?knj+&Z~*%4T`5q@vvvi9NTW8
zU30kPJkE|!joTRqr9Y~B_*lK)o84K~DtKGry^(OUe73bu@3WO%-%j`;!mn0%E7K3!
zxYoeW-Ov)#tfeqkD;??l&bpV!=3uYV*}U1xjH4#I=Ok!8-;C%24wlaRgFH~SYTJH1
zT(Wg@g1htExk)APA!z;opVpjCvi@J0$K_jdBw|J0rNQ#Qjaxg2v*=&{nZI1)<^bVq
z3ICszyTT{pv7Ft6AK_hj_UqXENU`3hueSn%R1m(>8~5%|cpml56Tf1;4(yK_e@=Yh
z-|1~#h#W7RyKky$a+3V3dd%(3w!ZmIWM-{xs=abWPfk^Q!h11&Q*CIc?f}pkkNWqz
zDXw!_=afV4LSA`d!owwo9&%~)*NT|z`fEi@QnoLM9d>#+>_C<#_3=?;T#PNep7+F=
z$gntVUQLI44{^F}6~TcQqPKCc=pZ)q{0Zk@`p5fy9kR{ZyXvGA`eEqzsgM62I&D6x
zXMG<)eQ@0u<3AkC-$~gL!nY7Uk956W>3WdxZhvii{N|YLck6^+kvrj$V(tug@}qMo
z{69PO&A{#KS*VZw8WobYvyGm_B0vdzQN^+;sH+pm|6#C)r`E+ET{Dv%vE<j3|0xsR
z?Mh>rOM`zd+xGj%K9JTgb?{Wd-v|FkR3?Q%n$zP3>-6dSwC3sDM|Pq&<#9o9wlWNL
ze=qW1N17E^;&0n1v;K_x%}c;b7Q}M)<xP0~yhrL9j|+|$X+tU)FU&>e-rBf0SNUup
zOlAIr7gL+e)}gd4ofN0$Z2y&Pp5=!aUlvVx6{?%9q~qV|yZZP-b)DJM5_iXs_7^|E
z9+n%Comi)QWu9x0?#*3@eqB7_?o~h#SEiefvk=-+X#XI5l6R+<Nh7Z#$W0RFGpdiL
z-ZyJ}lY;z-#<z%Zs<v79IC~V3r?N@>l5mmnO}b+_^u~e-?}&8AgHCQ#-<$198vVWB
z@<*TS9=1?-v>|glabBi4?@^qLbrC0q(vsTG`M+mRc+XS0e+(Y$%Ou|2L*_4%QNg~C
zI*D(v9hoa7^Uad!eAH$9E`zqGaKbwv+9qh}I<&i1{4+cC+O(eG!t?KS*hcv4kZo&9
z`dEVNzcw(djA}<%|9H-Xw~h&PA}2%sT(*zt*X!ms@WVYTy~sR+ICm(`gEtUo=H3yN
z(GWZ{&zrFMU!o75w7!!&heb($a>tBV{iU8u1iGF-VSdL*d1?(2yUy=05#^}7wcx9)
ze8Ge_q57{Qj&#|j=jApI+kTuiTr&}W&fIx3dpU{BL1aF{eyXqXo+ww|x-;rub(Vss
z|3wqdM_26Py+wBuX71rGiNB9Vol$Admt2A$u!!>0IG8v?ark#};BipC@_&oIOHO!y
zX5yY$l##Ew>#T2aydg1X#}4yVkIXj`=c`p#m#LlfEsnNp^|!;P#&Y&vIN@EzyXt^_
z9;iX|4NX~nKam&9$-T($`{qyhK<H0MLMwyzqA)BgKQ5^4-5(`>(f46QCML*}wFmr2
z8+6arx|`>7IoJknwz%9bwctv<bDnip`So0A@v-NeRUdnTmzmgE1#i`qBPYqf5}d)^
zj9Zt>*Hed%&+;vq{R>a+_#y9>1Uw%M#sTVS)?Vrjnm^oz%BQ<Uhbgz`euli2e`3P+
zgem?4{mVzcgGKkr3=rP|u<g(jHxb`@l_7U9zTcLDRz0MfE75@}%M`rJZkw<><P&d$
zSL>3OxN>enb~7~D^{yVSv~rd%Egr@H1I={LIWAAW&LiRa9#nPgA8x8ZZ%B{x^@JP3
z-(<RU5#gju{e7}()2+~}c1?JF($RlG_Y>N;Bapi@!I-JFg!=eZ*=>5Qt!?)czAKRb
z6T(OA2-U@?=(nS*r8B?b<VWoY>=fUQ&}dLgB-wT0)>(^x$9gvLoQcfD2NX|r#yYEX
zNfkWF&Iz~Xd!>sj!&Yr{8impc*Qi<vvmCkd$s|@uZrZ<~GV6xkj?7Pq{u<~}eU^-I
z<&m$W&}XXOA^895`*;%1cJj0?sj}Ao;!$KhDOn3$`l5aU-)1Y1=@Ms3KeX9=oxkh}
zw~qjoo|70-UrwLN)HvL`nEBPGC%o72uI~-i(0Y`I0r1`6KN3#;wsTB9SRYhRR}Lr>
z9d)oirv1g0cTCtBokTP7IGxZz$KEWRPzB#!c!uHmkowpKv&Wb87;OF{O=Xi(RkM%V
zt;kavbAONj<gN+xttHkudEvcf<@#ugzedi8t#U4f{~r7_)*fE&$|5*_T?6d^vaFn+
z?b08f-6@GZ<YbW%EUHpu?SQ|td&0Xwc}Y3Fn|Yrk2E?PRfJ7(agp=;<C+vFCp*$ph
zES-+s;5+t{V588xdM2FB_;u*?cU_dZHc#GKx0fby7=JB1c(-yApA2-Q%@L#>?g-OM
z8<Q?r4u9!A6W+Drzs{vMOBb*Zr^Gr{po&#mn+W$4{5O`?^Oe@LF3|YX4!!!`3GbEC
zt#8PXJJ<MQcdlJN_qb~QZpB&tO!kC-ZNj^mcikU;!{S_SCaBf5)b>q?3jBs$(8nPs
z9)Ir~He$IdOnt$%Qh)xkjc~6ZFBdA@cL?Y9cbo5CdU`MMF7KNN_lPPjgJ30KT94NE
zrr5K^t$}XOmUNZ&7dJyM(^&aVmlnTVv-~D%&flIxS2-WzFmev#H|a%Y;;l-Xud95$
ztMV_y&sgzI+MIaS!IRc2*go8y?3+n4P}Sa>;4dS;>gS1<NT$0-L$cbS)go)FXp6FC
z*&XPCL)~QUg+CF<`a?@7OJ&gUNAw-C-mbRwGiWrS^m_LHW?zi+2OmVv9?IZGrRgh*
zV|E#o<16ggGvU5V^>KKt3~096b5?T0tTJeZ{|RJT8C)%yZjZKf|85qddyw@q#xbSY
zKNoIeqYTgg7i~lA+f*AFAx!su6VCU}Z(%90ePAEqT~8JNdj3RzyMMy_gvQ9Hwq})y
zf4<uGj`(MMtK)q%jyZIln{ORQ-dRCD29QVDM5Y>+j+R31dHwc8csGvPKs#8@0~1~Y
zb%P$Mw&N@Q9-!UOYQ8gJ`)HwBy7z&N{^^kSsEie>M>}&cS6|iz)A27pheXfziP;=U
zZ6k%hvYa?xt8yrG<=~Iy*xkNAgz(!JXkGOc>L0kosDjWf;__dLUvVY-8&q$J-@S+Y
zXRfQN9$KCg<DTJk|5g0Wgew5Eb=_|h&gvQAzFn6-v+?xnx_gl`%^JDIzjJo{ifaU(
z!{7Dey6!)ZYbkdR+!w_4rrB{RuMN+|zxS&NFQ0ckmVdB9Fx9&r>92OMB-qOYaD|Ai
z$JTP6E<cm}>xEtdeH-t(57p@FwsXa@yG2%Vhu~?4Cph~f>@ZkoR$M2*dQK9T(o)1F
z{Cl7`^6t{IX3>J!C6<^Hpi=0G$0oczqQBWsOKj7r`{7uZw}SuI?r+9+=Lm;|SqfVd
zVLAx&Q-ulg7duypXDRUQ#;3l&3%=5W6XCg1u?z17FPQ@$058tMmG2SoBzUykQ(#N7
zutX8{0~W1|BCw@k%N2Q$)~hUuR)3|?E3(2=fmNR*jOlpj`W{DVD6?`AOX#Mv+o1hw
z4w}lXVjTU1+*72p$F2|b=%NKHsQV!m-v&G5(gfd6kfHo0egvQ9P8g?>(FU#X*Z#cy
zYgsbBA{lE;Mjw2i2xQ!pmZ3JW?0K=A4?(l`iT&x?A3-bkTl=hn-bx(J@P=ikG*(Og
ziaga}GdvB*P`-oosjk|<_Yn5A!g&;57uYCRy#T8N%Ik)-tbNd56p@7)Zgn#Zo_h#8
zN8xzXUXOt7c<PWxv-f3fTC`wea2GQZ)c5!kR0ZHseJy!@EN6hZ^<4E;3T<=_n$leZ
zZDtOd<SMUQpm&n5;CzeK57;iS8^jc}H<jJRu5Qky1XX^0@Et^UwET*}4}cF7UhAk~
z_zx)T`n)>*smiP3f9prb;k_dwL*=G)=f8mdLb)mLp^UW(<><?N`m^VtD_>PUUGo<`
z!s@}61TuYW3s^B&v|qM?EsbDS|GqqHZ$X*(`cU+J&`St27hQ3WKre?Lq(@;=U}aAe
zreF!{2U%g3f>l0Em<s5%kuZw87OVzL%T;=WHGx%U@wI{}zJO0@+y$oiUZ{XUzBi@o
zVb9ah)s}{R`i%<jY_3HMR<*~uP3n5rdt7>E;Oi%zx1d+_sNM@+NI&5|SxZk4RyhBb
zLCYDL2){Wi{&KK4&%v)YSqH5g{^v`6AZsO;PO#l=`+T-7kR=^Fl$<trlgJ6%_57VN
z-Qu2v)&s5RHxu69d3SQq1L_<7lCUPP1h{dE^9}H{E=2b|#>^=wx9UhAf2Q^E@cx%B
z!hD1KU0+Z5#QlWH@-?X}`{7yghY5FX;_isti0(+jcLcs}WaX0A#7(nhsb2G^v9FM&
z{3f<XWbs?rGUyGIf%eoVu6Hs5owoZ$^bf+aUCSQT$38I06TcqG7y>&R8K(&d%D|_M
zLrcQ1uu+<R=e`(wBuoAhu#znKC18IfpV{(NR#ngn;IE3xZ&V#s=dJJ?UJ}|C_)6i^
z+%8Oq>eDoovvoS**^<rU+D^rGI<)e-51u}Fu8qoBy*)14L1-6{&agenNyDSO9*1^>
zaN^UG<X>(wmUA3zE?puXg<A$s&L1<wm4oGjoh)3Ea1HPj!Ly2YmtWd1>AcJ@6Q!dK
zo-cE!Z;5#Paa*s_`908z2_NVP;Y!aw@MHuRHUzc=EXbSM-C;lcTxnFjC0;^(5auS{
zUHY)~E_Zz^c9GLNmVfxVvt*Zp^@7bMTY0I6z7P5)>42a;R@@S2R@FYgl9knMif2RK
z7X7Kpv-3{72y^gH6W(W)p6g|2tj6{%7e{5@W?7ij1*CoORUet~&J|xEd*v<h)h4`R
z`+~PR*_DJ)`p4mKg+CY%gyozb%h?8o+OS7hAy`WUQyCV6Z2_ArpGoMI(04#z!@Kqz
z?~GwzXzX0SUx?LL6FhzJMC+y%Y~M-b%J%GrJ_tP#EkEvXW{>7tT^e1%CC;}go2&9_
z^hdrRmCZrI_569l+o+6%Wn<y0+-1|T9|!!Zr`(rf>!c>Ux2l&!_|tbq$8R$2X{)8K
z&y4()L_LX}#h=8ZSEqIEx|`$eiS6@~h|2lfyqx$~57~NY;vslesB!zs9kR-M2XP-k
zPShUg1Un2CEvsIz6xdvKAUT83bB<@q83mikl5-p^7rv9pDO^f_&5~0LRtOeNPZ?P9
zY2?&FuZR8=Y15-LHiK3D#b0aju^nJ-V0Vj&M}4vrZ0TPo>>PJEcG^6T@9M0gqT!Le
ze)yW;vp&G@B>#rN_JTF>E<Z7QAQmmSK()O#?|S|h&k1-Ef1B{$p>`FU5)+*sCHx*3
zxW8Vqmz+WWI*~c%lz=sXodI2s(pmx51~x3f+76;ta(E7dqsp~S*Z$!ve`><+{1U7B
zRV!FKSgU|{DH*IC#Wq+5m4<HU<IrnF=TUrnz)Jr<;r&`bU{|b>PHCS{uaEtN(Bd0`
zF9qMTl}FZWEQ_2|fUJE${Bd^)Bwj}Q`v?A6$uqvqq~Scrr?OtXzmisK1BmRJ<?vU|
zOt^dfE&hx67ETyH-vC$873TM@hqvyZ%wg28g0!xS*d)oAn8P*L4*1(W)*zLZfIs#g
z@z|Q5`t}~hpL5J>mP{6Il(V&@xCW-p`(quJ)(U=9?6>kd41ZhfnDfzw<#3IQcMW_i
z_S+mO|K*eyeCFH@;<k0X_W9cvXoUz~Hs1b7e_>Mnl@sRoUvhqW8@Co<x6QvLaVtJn
zrL`XV_@ZNWuWOheyYqgN)DTO9tOFxX1)#F+fPZB1F*gqi(qOjh2gSBN&pt4;J}(LH
zK6p!>am@QX?>T(##4m;oV$^1e65vsI_Q6x6Ho$j<T>CO1>+&wpSaQA<*EQz3*kE;5
zSj>7#fiE{mLxpr2rUw`65olxHrTVkNY|je#i=TPSyH{}-Kkc9Koo_b4vnKDo`h$n#
z8!m|DvxP7{&!Vgs1YxxI{^s}^Db9GkH45qSQpi2<9w<6y`;=TBsBPIxtrE!5n@#$Q
zUTEddL)KR9tenbol(5^Lf6TS*tNbFm0lsznt1aWsJ!5s1&qv%w;jIkwL7LXxV!E7z
z8ZM5F`n%e`DOjeDzAZWCeI?2t+Gz22S$koxL>1|1gm=dak9m8gxN7}+Sgn3QkzVO!
z##>{jKD6?Ym5;7az0lC^<qwzIJo2cLszD>&uJ$7D_!-B%^<lrlrea)Nr*9kBuo!=X
z#ZN;}J2(P=VezrZ9D=+BcE~!E#!X5Cm9*BSWiMftyn^x|%neF&&<<3uUl$Lj$=CT|
ztSz8Yn)JIWFSc5LNx%O$zQ9sKMg3U>7)_C{&U>f-^D6iEUGC4jGyY`p_&@zWehB+T
zdThS$>gFJ6?<qOvjU}RKcXb)R-O^)zU-i+%nX#P4*B<l!nNg4J@ipl0Pbe`otv3Co
zE>FO-9RAXCj(I=3I3hbb&pOrQbK&Ll?1k^dY_=CJKmV=dtj~+T&Vbc<eh%XQv=-0N
zmg-Yn_Tz81qbIO77%RnU_A)F*epoXd`Tg#MALO&aOV1*QH2Z}2`yqngH~7EZe3%OP
zbOt|*rmmi9GvIhm5bPhm+*qbuU;NYkiB~*bkoXJYzT}diJRUZF8q*bin*7ER?>3Ij
zc^sOy#0Dj~FDL|V<1|A2C;m%phXby4f2_5x&ddB2f03WQSi2v3i67e87A3D_esSwD
zckfrwCt~-A*V>c%S`9pV;khP1(mtfG-tO4Ug~t~P`F1YBR+`RjBh2wTk9p6Fw%7Fc
z<uG&O&$pB@P)M)sh5ztf$Gj(_{E<1i`>M%WJIi}m>FGJ<y@oN#_2YG+ePTv19s!MI
z`Dd~J_}*jQJoSUO1Y^Z8X<WNs{bU*R{@usCC9<i5yrXl@bvlP6E}kD0L=u)d`1`(g
z%#&Ff@;hZ`Lu>_bD?IzYe$30&q$JRbmT$9V*lI-dTov}nqcTC*65)@o@jI;W%qA!!
z=mF&HxbK+PqCAGaS!aj)tvUW|$>IW~!G}#&XoRagbJ<Kj@a<#Xr<C`={*RWYb==jq
zCuBLirQbPb=LEua2-y+U`)$5j1HBS@biS(cZ32Jd^KQR+7{|)(O0kuHJM<*sl%9}&
zIdb_aTd)^;3G~3<A*>&48JL=y9$~{^#b7!=s7Kflu;pM;`+Wwi9Bi(6fXZ|UAEK#-
zev9fauxr;kJC70LT-7z|=k3-m*W_&t>K<;3vySlH4`#;M4Au)aSDeas2lRc=w@HY_
zNn4FINc0+8RuRslJne%w`CXrv-wHnj)(-ZyP?r-vzSNSqB9cV;6=vYQ`EzL>$xiYq
z8HKNkaev7%Z(k^bu~Orn%`n;BYQ6#I&o75}b3}#=j}m0mf^Yf$G4C`vxr4q^<=Ueg
zKN%HHn5r_pp?Ya2%qhsSy7WhU`2f}Tc0;T9$uaMG_4f^a-weKGw9!7Eber`E-!44}
z|Bt&PvKG>F7Tj!>=~6_TQ2HJ@=DkFXG)SNGk(x4-J*qS%UriYyM`oJYw+ZCXVkM&t
zTK&Oe-np}7d{q^uO-Pc_0N>_0WT=g`LfiJlG4GMk4qR_`%mtxNaYF*7?hiVC;S*MU
zs-N&r-4#h+B%i9wQRw4Gj=42u%ctbu60hPogRJ`450p~3*DL=uv7B#4Wtq0QneAlG
zmR|<F;OH@LceGukZLYN_Kt8{PID7<3TOIsYN99G*raIjQy?N}IeRnRb1LWb`Sbg*S
zbylg@_yQ%b7ycKYM4tM?AoSGuF;C^HM`b?>Huc%L{n<0nawal$N5OLZ1;|)!5}b^s
zVE3OyMme-4Su$$Ciold+JxW_6*wQS%ZD7ePtRqXFWc2v*)aIN{!2XZ;<p!V^XURDT
z7L8ABVH`~Hy)4x6=h`@UF?QalYX%#sJxgy9n*f#`JLcLwVaxfq3@i!uEotmvjIi&S
zvd{BERo9KVt*68vv?{C6edGJ{W4WsqEnIO*L2R+JADWTz?$4y#YwIaD=CU~=?3;>b
z7d$Of==o6Z%2wB0fq2#^p7SlD=lWVLHjo*Q>i-}zDxSoih{{;+=G|583(ob^dT1W=
zzDOFwdk~9W7t8rY*U8hVILhG3`3v)dusliUdFi>m5_yHnm2I!3bCkt4!oT}z;!wNk
zhG)rN(NnzZQ9bSfD+SYe!mu9bH=Cq0s#QL*->DvxkVoM?EfPnxtRY)nC(c3NBQI#L
zilYcD@i)d1F`3?APMcwm#X5sHD&TE{_crlfA>E9QX|xITMpU3{|B`p&nB5sEHucSI
zU^m`5ci-%Uw*0AM;dfLuru2d}gN><9ElsrF%|Ur@-oDUW1Z(naU}jWNenttiZ04BV
zZSVZDr0r78FP#q0DaAhny%%05Q=Sx?<YIF>KU5M@F?@&Ni>u5nZtB|iah*U~DR31$
zL;pl~NS6mTn6+Ef*;-R)<9xq(<>1PP!&$Btqtvh42;0NH(s%QomVa}6o%{i@E5h{l
z!8Zfns*n%gxJ!r40yUUQw;qIVSA5ca!#hZ?jc+!+<SUdmL|J<mf9`+7pP2N1K)HnR
zTiVUdT!n65Xmb-R&T?2v;a|RJ(z}m$of$LVn$z8DY|}SigpR$JWUqJk+?v}r($7^l
z+mLb7r_+5b+BTJ@F6bS^aX74R$~<C|@+A-TF0+9pZxH?!Cy}T2GY-9^VAAX4J*;cr
zSMByFtj(*I#LB$$Rp6?Z<m)-VK$z`en2lx&*=(yKPo5OBc`M=jX=fxa*g?ueJ@`1`
z?^gIgX9j)Mx@x#2YwfiI{*OlGM9NJ4vJZOIGo$k8m*$(&lB)UiY@e_C*9g3;qOyF8
zUvf@B+k>1JWatoUZ*p>dIVf1kS^9=p&b&F~D1YV9+MhM)eK%T1t{qgmbq3!i@cUyk
z{NMRhq?{u8(|Sh-^qIm*?=2c*f_95MTZb^+AHUXD`{oqIC1K@ufN)ozM6TM#5$J{N
ziL~`os|WPJ#i~6wF6EXn|2%Ed?(YcuuI8+D`yUcl624{dR2NNpAL8Bd&=$mVspC<(
zR>QLoo==86(i6ADH!{Y)?V;6=m}?7Kl7HLaEqUIg^YI65!{SV*s~ete@VrOzjHlYg
z8QB*$0M9{qJ{t0*<Gcn@8b^-6Q}KN2TRc3%X27Z=n98Z(f6#|uFBMau!`3)`sroK~
z-UPilpC3V*qrRWh(|s}tOFjILeRA&lhHT}q1D?*8O-9y7sT<Q(O;!-<hr8h!fam3E
zuhuRCp4j)@5bONCL+}m0e9{|Ld$jcXdj&q`xMHgj`Oy9fO)s=0oP;g$M(mAOOuF??
zlkJDG^+R`7q!^yV@C0*8^@}pF6qvr(7q(Sill-fNHhku!_hH^0&6jB!!|D8O@RTo`
z^xDHbQE$}0@A0yEk;=RWzTK~!^lHOCq4kvvUuTKmCvwW+ABO*6$)u<GoX%nIjIlmp
zzRt?_`J1*c2wh2CRu)`CzAE%B$l6ysD0)*Y=Zsx^W0v={U*F9I)K5#HCtfq@{Ze%E
ztCPR*+x94bbAs{x7p*6`A;89^X2SIn?mhB%1pPaz)4yx8xG?YC@XwT@5454t_!;k_
z?d^jLgX(wlU--+`PkQ$&@76vkt1w--k%0B6P0heNR5j`SS>+$JW#+l@tyY?>M!WU*
zrRB8GP3gJ^wtf0#;QipZm(qC&bXBEWn?0`7@$H>_zgtL0Y$4p<>dD9*DzxRaZKXAl
zFA~bis~g_Bb0@vh=sIq6{b)fj>vipJ2>zzpNiP}ZpEjjDEsjZ~<@-21jh9Ti`&om0
z<G0@^TSJ-SQM+5Rg8adEr#5>8e9^eMOdO%%S(_^O&;Eq}?JTvZh;Em>Cg=s%O?n4;
zck;+L@vb);$A%n#b=lduU5X!mxtZO%oa-M~pKAJcU7mCx_kn9{KLGD>c)!j(!^vj-
z-PW#bok{+~dh<4Dz~E7OW(d=I<D^@g3i20@rGE?CmH6c^S+){;<U^D0`}P8Pgjax{
z0C$oNwsNimPl5Le3gpK=lOb2_a0h%X+b6wmM)_=XW68i@W01bqGw+7;&d-_GQZNri
z-okI`p}ZZF&e!&g#MbV43kq^$TZ;=$iES+@I5oDlv>-3OwV!is@vR4P3Kqq;4&@Xq
zj&D7fQ}B%V*3q1T`SGnsatadht*M-X1@WyXatdhwt@8@z#kozdASb@HV_rclzO{2+
z0iUPto>x#1->Uh)(p|O+{}$=~cG!RDYw>qjOAjhi>283p^uv=GdzV_kYO=6)u;vIR
zJ=6`>4)))?hh>P4d?!_}y!S)zzx9xvArI-`s^1Z4-Gn_;>9gzPNgtoZur}+~f!E~8
zzqsG!C%*#zos-@lU=L*l_Mv&pSJ@uc<?uCrWHP*)TkI;2D)4&n9O>zxzRiaAw_E@#
zPg~$C{n(^CQ)zrPwhtJR>6Km3E1`cuKp@B05AL(w=15<YS4Y~#!y~zagzG2VIsrkr
z$bQ*z=qc!d4InnvPhvIg7u@!A`B)KH;-*ROd1B(R_77G7rnrJf`m6%H2>dcB4~rL{
zV?<BHR;tL?+INnc;jQYJ4ELu??hde8Fuezl;^+de2cIiHRnYfA?|^=_bX~Bvo1U|1
zYs_KAj4Ptbccb&g4IBC+n#skea>!qUzy1@G-q~s|JW2fn8@z4O&hfas(T3h9sq4)h
zt9q}1CwJGRx0d&?+-ak>vSOZoSAI?KmB9B3@%c|Ve;emh-{7|pZ{mAv=7o7#b&K|F
z+SaH_zLD$l5_4Mb5%b~Wjl3nEL`E+%Hr;&4do%BeTah9CYg7Q9QvMCW)BMRvcfR?0
zc!D<K&to4@1Vm&DN|kvwQIv8|5;lJU^%lslO3RloR8JZIbT>lk_DQdw`bd;S<ge8n
z-S!ah(HE-_4vO=a^+4N}LL@53X2P!t;>hvi2v<B5i;HK^TFUFwliqsO6KBrczK%8}
z-e1(d$Vq>{{;c2<CH~kf(S<)w_}V-Ev+!!8%PZ;scTU<lJEciaIsZx)GM<3%Q9V|!
zPM5E%#}*}nwMKuPz|A--^KAZScRwVNu>~33?S4JJ2pL)RSOZTdJO{h5?-WlAp5QEq
zi^q0c;xDcyIu_6CLkYn?fqF+sHy~uHzon4-p&;&oij25bKg-rpzn_`(s@30uwqyOx
zo%5D;B{?<lbt1=Xi7Y!n^exa&+=Y$8yOVQasQ*OY<<nm*dbRIQ(mRjRu?Ko?_oVkR
z)xX(<%)|UPY<uD8bK)C;ulaM6-gQc^@nLUNVhi1AtuXZUCD=r8;O<H9SD`$|=k`2Q
z*qT={JUhNH>CWB;d8dzGO<5|<mC$=mLf2T-2z>zh1n(}-vVGhhsZYB089Mft!_ukv
z?wNFFdaZupck2_TR@UUn0lW^&I;h5Wv)hLVx8&Zr$4iw-3VIpz^jr}i8u{Qd7v!zZ
zYxMI|w1ND<cec_S%mdGZ$WQ6~Qs{f2e=OP-{IN3rt+WXs-UfJ!zBK6_P4FWqyXg2Z
zpt#-Mn+|wKz8cLpHec*5=1i>0Q_J<cIHJ@SdQN42{IyB%h3KI~(aL!`_i1~4R=c&P
z_&cTfE3y|oZ8T?GNCxA=#cHR%e?;{;gWO+#lzRwxPaIm|`hrhaeU?_?AOD75j<(;E
zblN_a6?rbTYx2x=V<w|=Z-jpb{Fm|`mI38%N_J(Qc_LKr9q{dg?|CX$Yx~aTb>~3n
z)z>-WcT--xz@^>k=L3Z6*~8ePHXM|(>h*4wt-I5D9G<>!QD?A(Jg!Zd+e=DFc`MvV
zecd<d4Tj@6X^76ber|TZX;kr7z`yr9lirqS+-vQ;L9c67&Y`L`wIuvo;Lm+9>eFy}
z{D7G0yBdo-;c0-!&Oq>6ST9&J*dpHb2<r!H0?RkV>9Jw3MzGfki<HIN5U()Dp|?fC
zsEy`sqJF@7qhZo(y|(>DLwPy$<?!Zymp&G)qj29-Oil~C?#_Cq-)7=&PfS>5Eyzgp
zV~a)mk8k5SH`j-)69xX^-S8j({-pc9g5{|SePH&%J5+3%Fe@KJ@GX02(#|V{c~7U!
zHc<!lJOghlyh~JX=llJ}?M<r8GrLjuB_SMRUiG|eGvz-pnYowI^gsUX)$OR(g>JtP
z9!RzMI{3TyQxBov0v%@U!ar@rTuk+`1HQdKPS3B^|2n}2z`hf;r7fqc&5qm)z2RYB
zKfy0KgJ7)@ED1IW)&+Ji?_qgxu$EleIS|E_U_dK=#Glu_*Dr@FRjB)IJX;FA4f@+9
z!|gMq!8VvvtOTe6`a$T|sT?o!!>jLo(dMZaO10o?;x21sl4pf!A<WXDNw;?NG+}Ho
zCydhBOPJ=LVej(p@`5dDF5gPq=Q0SrANsWD4N3>)9n&OX&3;({J85ewr{nN-{@kB4
z@;k}D+;j2&gGt{x*@Ptzw#SP4RNGnx&k#IG<<r_AzL<#bCiXSgSd`XUcn5wlY4;-J
zT<w?1wP`<M3-rYBq&EO>STD|RoNi2J8dca{!`<-rz&{@HlfHDjHr1i2z2Y8*xAB*g
z?!KFM`EfU=*L;pc-wS<vD9hKew)d|x@9mVB%4x}Y_y>PA>3v*$Ji<!Adb6+!u+qo;
zvh(?B!FGUMqkudL+XOZW_OKxiYX$2%I2oQlP`}v))(LjA_#*nt`R&%2+e7m9!I$&v
zwC+oS4S~(f71oSk_q~$i@H7%`EBxVlot5=U>sy8AV-G=pljuCE`(m);U{6K+<K|#5
zO#GmY2q+=()+qdMSbK`{ZuG}vE^1PPq^hj0THzfWopkGbL0<7!wZJ4<-Oy*C&r9$l
zpl=A{oeAPqxedZQdU(?7;XQ|Yo17tFij0fu5eTeuI}TstA11vO;^PsPTSNN-Q@ZpB
zTLRV%rn!?IVI^RLVD}i}@=yWR_{T~AyLEip$_$XJh;YOHBzz6fk3j!>*l(C0lSjYn
zn%p*c29BibQgL;G^@C}9i5_8nVEeN82Eg`$Ei^92cMxn(R@iZ{J}|S(eR(+-(4Mp8
z6@u-~l2;7Y19nOzjxw-rFqNww^}TAaE--7mG3)qrRJYKg^fyD#|1<tv1>h;<-wv=w
zu&7@`co#Sa6vH#Y;xFOf9`IWDJ5`>6PdK87%(!FCJ>gF_HFg~#%)rsfOg~ZdtWeDM
zRfg-KMHjNZIp){1RVj5go8RVbYNwU(?}7hz-d#JzAMW&%7Uq1*(9OfQz*{^%={*{@
z2lP+qqh=JvU7=1=k!Sl)EBV?2zt&ja>?7>HiOKK`rpj~xEce)CxVKH|IS5t=rn$IF
z59yB`b7EsQ<1oLi!Y3}GzEi$Gir-286@l#mE9c#XXRNUS%(854u?(Iecs7cMNB+2K
zu>2|3Gz7%>T-(lAgC=)s8%@w!q1joL4~Rt5(BUlnZ=$zD?}u*w-WXS!7=zZ}-FHoU
zq32AeeNsw$zv2T^+<Ig~4}%qhU8?fsHX7@Wk@gXPtt@9Ymg@to3dE!M^J`fTdven5
z!wr2fZ-I5SvjdhvZ-%b(qOMHbK71K`(mz$uJD~T5bT_V;8^U*ps$Fk^uju%s+XE<G
z9))iQF9H90SZ9O}_TN9Is&n@P?}6{YUw!{Qmy5Y_(&0(B|8f|5@!$Nps!4ZsGY(!2
ze!eii@8iNbTJFV+|IqAArmHt9$Cc+&Xa}LaF6?i#1@#4YAY!FbRu!D!^Nk$kr;c!=
zC;YY$=x%>r#*~gw>uhY_0bk`)&M)Q4RrwC~bzoHfQoQSJpKu?%Gk-@<M$0HVH<@o;
zM^g>c6{GNv%=l|GK^mg`&q?#ESfncoFF{}bYcg|RT43io<NSOJMV+eMRKTCV?U1`G
zBg@|*c@5ATb5h>#d3XAX{JHs&c@kITnQPBFmgMb%zj$8CtB%gUs#G4^=c}FXfu0~f
zwRQ6kF~`u!2*ou7t!zQc`=K_;2Kn{p6}C;%?fWp>HwjD5rR-05-yx5yp`5HN&#2n#
zQh4@0Cl&6+Q83kS8F&gjy*7;>#s;-@dGDac#Ha8L@KruH<<`~(@(AAs-Un{?2^i|y
z+b+cie!9{W<RRNOwEf5{`2GwLQF4+uD0!!)>{}haIKvNvp8&VDOrN0i&wwY3Qr?we
zyH>r}oXYlqs*sZKEv=*ep67=T(__9HTcDO6s)T0;Ji+*=^wfd1g1w0M;87iI0dE6e
zuL0Y}FX9dL|2i7Hr(D@SjuKdU;NP80IX_n56Sx+Rwf?y@E{^Bd8h4mtjrFO6ggJhC
z%I(RrG}CA807Ye<9ZRtlR%a_DE+c<0O=Wzytq80EOwCA-^0*AFKEjs-D+j9sGh5Q)
zVcd({Nn`a7&t7;=hd+2!{@cKZz+V;Z%Y2H6yx2G_UX@o5d`HemdHE+TuYdWi!1;HF
z;Xkk}<^4)>gYt^4aAj&PB+bm3kWIN_vo>TFscV0QZ>BuXrrywhZa(Ms{KTxca&VzI
zK@uO@zs8@~!DV`&ig4AhO?m&70EjoneFdwV8}_Rno1oYKcgmgZ3(Umpl!mqDcMEEB
zjUehrW!_Dg{MV=JM*3k7ST5MBc+W98)UB@Osn~C0@G$gZ=#`?|eAZOC+2+G9q`sh4
z)8-SWveIGgkMP#+Eisx#S$=X}gbnas|9<$1void_N=Mn{<mU}3=c5UHgc{GGS^M|t
z+5K({cpKr4NBg(t%hoVm)vJAUDg6JWyl;ejq|^DUY<Gb;#Ww)oi8rRaL*aY_KJ4qr
zG~f8f;p<zOa`#chcB*=Ce)<)F96iccVLknARm#~RHaEXC!#}+o`Vr{1juW(be=Sb7
zR}J(N&`Z@0g1#5{M&0=zD`T~ZR(SI(Q{J*LkLUuI$2v6wmPqWcDFgV`CiV~}cU>x6
ze-w5AERltcfaQP%Yk1;IDZVVe#1&57kD==kUlG^<d~Y+v@Bd)Q^_lX@!IptNKf+f7
zRtgr?9gSeiv-q}wl}9j*Z5?1$V5$e#Hr?8QXuZ&?p{Z@Tc28OHYWas&6Ook!9|5Ze
zyOVb(OM5#5kCtmYId8!}fXD8T2z@)YgLFgQ8rPN;cQJfRH>ASvxa^EwW^qeDRX{6+
zwn5`{pwBN(+b{8#Cj1`l^w}2pYpYY9*`CJFUIo4jYt?P0K!x+Wp#x0+!G8k&LbVY)
z`ygB1v=+^ynPB^CefN&pJj3uGIhXND`Y%XNdd|GWY!?=yb}2^RSC@Mw<Hh+YcV;{Y
zV^imqe8m7hW(#WDCGeHiq`ZwPc;i!AzT(mz&RbmB*1=nUNy_dBbiDLSo1ATQ_knD7
zGIzjt06sK~FH`%{ZC}U*%$@F#a2a%pzYpHQOR*Wm8?(dAIHAmW!2!sfVzrTNIph&|
z`|DC(kNRPdr|3MO-%5f*pFdMLv%jQI3LB`;D^hm<dKfO)2k=F)u6O5O;j4d3%6)Gr
zkdNN6jkuM0SBO(KgzB&n-sM-Oyqh$c4|p^Dz1#h2!Iprf6aHP-q`Zgn`C-{)42q_G
zQQV1-cLqxsk36bY5Z!b`Q03<^vWjj<xqTWz+)l@sp`odX(wP5N^yB+d&d0|0@@(D|
zyOUh3@`ont7goMW_{-pL-j?$2j<z%D-Fua^$~@(x9-f&Gq`dE|zHFZ`erxKMea+fu
z`g3toahvp)W2Sa$T@y3QitjtuLS`w!dy&=JN<WaE5Au=r(f?gC*tGqy{<2cCM}M`6
zOJ#6`unpT&cAsoGw=<vEsyuhZ-|-b(#d-pKI|<`-H)Cf|_ZuW}war6H;Tz82Ll=d6
zhbqNbk#`0EBS!kE5&q>nQr_n!mq%&Z1~vqCy~@wV3HE_F|M)Wkzg7vP9{7qslJXu=
z85$pH3iIusE@nr!ZE>U(OLrb5%s`vphTZ)R1k&cm{W%TLPe4EZ(UkWGm1S^$pNqRx
z4XTn#h^3bngWFfMJP5_kW7|n6clij)#HR$S&Ds~BI;(#h>vK1!ydNp;eBnc_irXkO
z+WU>ktwyi*ZK(!}z}ekhge|x=71^(i{&3qN!nsmEJnir#5g)b*q+h5!0FC-|TYEGc
z1sTzPbeXRM;s?_G$g-C?5mFs4Yt;UYw2d#U9Bdhw*<$<_Rs&X>#n%W{lZ9;qs|E|^
zKMLCcRtNSv-u0+1d%)VjUZ!>upRzIxDpUP-0D9-`DQ|Dsj-W>Kc%S9b`mN$P4uA2d
zQ*JGr-;$AgHR%Jh^9|O<7%MaO96hKu9nKp|;a`47Dzc7D`&Zw$1<e)KN9y3|hG$in
zF7*+Oi~fG7c+8r)Oz&dS&<=lp7h_A<&e0Xl>Afj0_9ew{R(cZNz3?9XOv?7V==<xY
ztEhLa$J2Jr{v3fP`Po!>mpj3%-yH`p20u@L<&_p`LkQy%;RUNqmb@MP4&SH%<0Jj}
zJt~9yg>1#%O&r8u1%JU^DK8b}5BvtKkFh_(>{f-44YLjYA^6`de*Y1^3%s;D<^3@L
z`769v@;^5l9{@ix2R;Jc|M`@CV>}QgImf~G-ktL51CYPM^WQ;5^`zYWjXq8IQt(>v
z>~xla_k*|jy!xYZr~xniLdshyAS^eVFTc%IqHkD1mi!%(55L}nM{>Hr>%nc$cOWO6
zCu@6`8B1nME9{{7@0p#>!{7(Nv(q^PUVd-Ns|)S6OQ_%IdG4>+AghkE9Qn(d81H)V
zgM{-8+C$WrwAz|8L(k*Nrs*i9tATKBU(56Z2;T<Y4em*v{|MhD{%_94d%-*IPkH}R
zfASyk4}iBkkn)Bixcd1Bc>ROSn|)qkDX==Q*F><yHN=<2R|M7r_FLI`JPNxEtYaWk
zUO8AhScd)s+ndGL2sRA%|043Xfpz~hm9d`R0oDZ;O>+-eXBOXHuw7tp@)tdnzCp0m
z&ojf0f{lZ{L7CtY-*K>_Uu5#-UW+~h>yOA=0ycUmGkqmsBVf-oX--}R*pV#0TCl@l
z(Q;`5D|kFJ-d3=DFpZUZl)hbHrCEHt!D_(16G`7bu$<p#${PZkd4l<*NptcJgB4}*
zodBx<JI`MXQoQ-^#Qr;yDK7~&0`@=tWKMj`!E#Te!aJaZRe~)AJIjw(?XnK69!&ex
zf=9et6#nm-;oB4*>};P=;ky(b>?2v>_kbV#M`pbo02>C|;`af?GotYS%ABvJz?#4=
ziNup=roDpQnHA3x@ba9gjP_XqRt6T`mr?=N0v4TT*MjW;yC@P*6W9>g_N;hzD12<n
z*)Z@c?VSn_W_wupt@7wqc(6A`!dw3bKM|kuSk?|7;UnPX3#Pn{S@?1AmfR_KM#c{z
z{`_~rpEu>~{|LSmyeNOlyWj7-B8k5Yy#HBKURjp>8t@~9Q}%sAUySiLfft-M<#}1@
z-vNH2Xv%v<mYgo}zhKIHPL_V$177^1Dd)5HBT#w<#h;w=xSl_JgdYYkI(^D}EDN6j
zAARYRcWPF=h1b!(&Y1Ep@cV{@NzO9x<e9Va3h<VaDX%<>zYe_nwNu_Y1@<4kZjt<T
zQ*PcA!P~)`tERj!E(*9^yglGWmrS|+B@zC8;H{TVxjWn<_%Qg9x+(9nto)9Hm%Mq(
z>&n6tOhEQtKILu7s^2BxskcsfAIQR&gSR!2uPnR@y#Kl>@8Y7&^f!R#-ZbU?I&cU<
zRyk|~AG%}8yDgE)zYDzft|{;IG;DT7FL*Qf!zUYm_nMs>+5;o-7u-FSVYeiac^teA
z{07N4yMj4^eAX*9Y`b-)A{5DCc&?1b6}71+EiQA*NoFPdOYfcXrlK-qt)U$t`?g8S
zY4?=(=O|COhr%t&%GO9i?}T>%Ueh0zMp^tyqcc#Y-}g!07pJ_-!!*KU_NJZL)n}L7
z5qT_;<?xTgU)?+9RjQo^_LOhqb6iQ=xBM-O@!DYisd`%aZv5e2&n!pbW#B{LI&u>{
z!fU_}fahoRhbHj;`=-1lS@;g{6W^KguFb-`z^lJM<qZVJ0J0^24|wh)Q{EF<dSMVe
z^|RUdVeo^$obrmY_-DXJ527z3{a?Db@ICa0$EPyJ_+qdDu;)P6Bfc`QAuy#$kFaX6
z5wM^OXrA8yb_DDxG1;;!OX8dTyHLKHuFrP(`bVa`W%3aP?b7Nq_#C@)Bx(|-dEq|s
z|8dIQa~{;Erqj?A?+ElE=$G*x*0=3Kugue3fr7=C*h+c+$*<o)j=OEk_6Uei?ROb`
z&G4oDFSy>K>$G>Nxv#XjUoE^1N2lER;=otq*6@P+NBhJb*w$_E*NjbhdD2a>Px})(
zCR-JpfY79jdy5`1r;r_LSg+(OP5p#hHcok~4#RkYJEr5$vR>-@F2~_b9-H!>t#)9%
zq(AhF23KIXvMp+1|HPE9gMu>g_dl!5N}(@>-mUZ+UHdU@&+FS=Dfs>m_`0U2yq}8C
z_9FQGcpx~$=KLS#YSAXaZzyN3yt@cna(v3$&F`@Og85{XyFBrOuq!<W;N1i7`$Jyh
z2@c-)Z9+OD1z-MOrZVq&qL|l*7xI2Ls20;h$@k*F`Ri2XUCq)%{yL9jR=~3tp5x)!
zJI#|L^QhQ2gCa3Kz6Jia`O_ZPUC+*!+eaGzzE#``YfC-w*Djp)uGV-H)CKbGOt{bg
zR#RB+eyU;kI~Pqy)@Mi$z5x}3(t8~GZs_miJ>1*A4&o|*Z@KDu&3;j>e=NO${tLhD
z`!HWD@+gDN`|W7B@ks|%!I!gmI^2g9gl_;pLHJ<-Vfx+Pf7@S)Lm&yM9lk!oe^Puw
zTjsn%%r=3#a|nI#EPKYZI}c}Rp`O>cy^WGF1ik7cbcwb6!_x@QGsE)7-%ft~V@=M5
z<M({!Yw7za|AJ}z7Nun95ncw~44!X@`%iccc;g&+6L>v%u&+=dq{nuEw}G2Y-l(om
zdQ>0Of#mf-KLGs<1@Ir?`@l!%z=y$4%z=-C7d&&eoWwTlNpM@wi^yLBUY^A-owFRg
z7W`tBUr<k*!aa$6#+bC@RIi3y4{!UkroAs~YzyjswSNzzJ1fr`&R-OQQ^I#yP`s)3
z)d&85LInPrr%4V4mDe6*UQ~C;>)<`u|Iu!@G`V^ihJN6*>F}Oiv8lYq!3&D!$p8Dv
z{~Y)d@N)3%a#;>uo5inmRe?8yOCPzsp0{X$wk7dX@i#$lokQLZ@J{eoE1dtRopyou
zgFh+(LD@z3vc!L93u`jMB!3Y8`j^a3?_uy3aLEiF@y~#FfCuw7(S#R%fb?X^QJ$88
z_krIgMoW+U(f%^6Fdp&Mz*l_wwD%zaLArx`hlTN|ytcvD0bf#p@v#mVDX%V{o}KPJ
z;JXQzT`z;+{ov1)JpWOC4uc<<gMS8m6g<2C7Jd+WDT`mW%`)&5cu-Hm%E6YrG>s`=
zHDHxsN#5tm*A}0io&I+4dcsB1BN;v5wcuY2<)MGw{mh|1_y9bI;rVEk$3JN&NcA!f
zPxaDiw@){$KU+r)_nU~Xu$A(H@8b#>)}Mb6TNsbZwG6)UGiJA|8t~dIT;<XP-VA<~
z1ejdb^voVxW9N$7q4z@%%2#ZPrw9B9c(lA!_WQtdUN-Huh>=Iw5Lgpfn;|azVTA_^
zY*&$#o*D2I_&NcW9`^3|{(I4v+=#vO@@cov%+61{HE*%2O_o6~hkkEV4@TECo$ub(
z48-3Ae}6H0KID(y8L^t_$AwaNHm4GQ7yPOJnvUG_&Ar^A|5yB<3i*@p55nL5ifMPR
zL7<miJF(rD;z_|X1CNd6mS@J#^%AqzY+~^geu(+@nJ4E_8!3fnIXrjp9<~v;r*DU(
z$*$E{Q4e45zu}Vz$!v!=xoq0)lMCCOEsa|G#i#bL2fh~gqT}Im@Imkn@V#OT&O^I1
zhF6dzE$Ky<=fq|565Gk|D>LOOo+aQVS-8@<9J~_z6B1zQL=W0FnhkENGGBpL`>BJk
zAHH)!KJFpWJ|%uj&Nk?y&~1;2?bAa4T?T#i{+eJvgW5q4e8p!?yYVilGrP}(Z%A<A
zyBXZ;^JEHJ9~g$e4gO$1x%$Nsuup@T-*#bv<$DI~_5g!NkJ44R1N{&FWdUJ5*siQl
zPb49g!IwOH+WTMzUwXSv33xp`+u(U?l*i43SpT+59$do{ok!)qi!gf$6Rlt2z2HOO
z`C{}RrFQ`QAo$(FEWOM{vf85f#^I|knf87&o6pwD)$vr`g&(FpylUFrFCXMT?00f2
zxc%vB<C0qef9-3gy$3_N+7q%n=mtWqJv70Wf=_vI>7?)Jok#7Z-KQr7SiI?T!HTEX
zr$1dh;v0sqZTYk}63Wp!qU}*plI>A^Gw_wacJB08``_v4&+^0QkMQN-m4wU2tH7(X
zaHXdKycXR0i|yBAZPoN_W#0Q;cX0WKZwS84ipcVhezftS!sbD}&~sil?fl09-T&@@
zKBe+QmAHAoTs@A!Uw;m5J`u=c+;sCMyPHcFcJB8bJ*xNokC6U1OndW)#>MaW?Os8<
zzV4M~pK5Bb9F{WpOa5ot-EVB^K@T85&F`)yTAgRJoKUZCAzbmB{`dLlfxoSs@i?5X
zkgi}Je6A%dw7J#Shv7f5VmjRKYyBT=>B{NQm#=!90ZW3}-Y<UZ5nkAaeg&Uzi2F}6
zmVtMGf6B*Ix8-0<R!w`~7G`4(Z4I5f8n?xreh*MvYlLqPd<#^z!PsOv)A<|Qp!ckv
z_AZcbA}C9@7x|MC!zAICL5GrWX)pZ0uRi3xn0K24_;)>6{-N!y^mQF%)$I|m0kHI4
zE%ZI-ueeQe**9YyM0HyNf6+(r$E>FhMcYp3D~UhX-+g4pQ!p>7BFwd<X&d1!O_BR!
zm98e}qnoC^$3^E!@~;)Fck^^)4>@%!|AO|DKv&v(;3=w}cHf!|%1%2-Y+k%7&komY
zbl<mAyBvmpH~a_HUTlucxD)%8UyLjCmpxx{VEEgb{CM&|M*BZ++WT?TKV<D}qkom1
z+q|j#s*K9uPhCKNQ9R+D#DVWAHsB(1*L4g&?DEn~n86FDz0as|1$l|CAs@6Z7WS2H
z_{-|1z3;#t@|$iq#lY0iY$nrdY8ONBU$r^2T?F?Pk3;K2)^^DX^oO$#Y%flz|8Jta
zFJt}^?Qd?(a%VHO^lr|AO85N>_*>pQ?Y&0)L7wm_t=*om!H~lKs9)&UsaBQF7Q*~y
zQ)W7Ydxm#GYrK5g!(A7V7u743fqUBY&;a~<ubB4!7{>4PQ2Ne5D=W5_naj~Mq}t;Q
z;hL|Uc6%QAtvco7={bX7;~6^8&bn;m!yGTM+F_>dK4`GQzL{A;n38B-Y~R`~am7&&
zt?4SpY{}zMd)@-p*f{MSQ$Ymf73ec}zGTZn*II2{=z)K7;~{4UXKnG5jX3~4_r~eS
zy}tAzH~!n6xV3o~SZ7jnDR{S$);IDV=nb_G)BiWqo{{sdQ=wV=i0E0jf5n|3qXez}
z!{6FI?Oi8X0l#Y}j4v*LZTMK1C#%lFG!tf!FvHQd73AId^4!N5{Cjh({}ZP3mTB*Y
zVLbS4ooo0S6%!jStP{vcR(TA=UwZ3w<SaA!@bB7K<r<=GKvDhV+(P}pyHoEx(jSFj
zN5H-nrjhm(oLlOV06s?HZ=MYlpvHnK!Zm+<I&uck#k+yAz{;V<?dRPh`SATRqm5<y
zGYhPRugp_=df@NeHSK*VOb>Fyjd!-^mCJ~fF1`k_R)3wZaD;FLxBK>WP(QItp}V=_
z4D@>FFC`8=Dr-Ilp0f??J{e{~+l=a`py5N-xK<8-{%5AWyLb=VK<svlL-cy+?N38*
zRrt?Nd$(qU-x-GQR(hb{nL+<VNbiR}a}v7R`>4X-6}62iJ8-3K23kS)wD$|ij(uH@
z$8dtHvRKl=cm@5x!|{Ny(KWy!(*~w{)$Xd`Pu(3&EA6yW>pZ9qcfQnk6?Y4~4L$hE
zRHwn+3m2&F-2Dcf(6@YHI$XPy{9dI8?8#_5Nbdvvx}}D`sdjx3-aYrGeOt=UI9NYe
z#+|Rh-qwc{_X_t(8U_NTammLSFLqD6JuJ3&7rRxyalUD%^prs#g5Jb?SohARu#+7A
zHM-XC8{sYdB5gRzOCRQ2eeNE5f27!~WcYW0bP=Y5Ft(;aIOVGkYzAzD<nSmR17M|J
zns)a=UFt6#X*RgQAK!f?B%PIlx9-c#?ZYy}4vMZ}{aFcEo2PqIC0}ta{RH~D7x@Bs
zlKd+L>jA5c%5fhZu{xF=sfYXe+;x4(>zKE=C<&&rJ@A!q-k98;ShXk~Yg)9h;-QMg
z#44V0{w@9Lw7V;Sudh3v2SOg{n+E<3!Q;<|e4a0bJdiE@he>Pa*V6r5c{%~M2h8rq
z<G1AH-$s4*`MS{hK4oM3_1C#us<_QtVVA>K`t|9IGar>;6=2Gno>KnRfmMUum*9uB
zapak<-ynNx6Vs2s`fWD;eqB$gjo+NeRa!a;JNzx$I`3I+>sHl}9DhnnKYYFSO^0Xs
zRqn%JN5IUlpzu869annppY|pVacRui#d^x#X?L%R*@_X{!5{PN7zF#PA0Xb~)UdUG
z!d8D9f1>n*=~s;t*rkVD3WJX(B_TJ$JFsus`ya)9h1w`(k=_Pr?YJGDQF!jtxM1al
z|J?4Zw=XqVzU6>W+<W2O^1W%dhrzBoz?Y~+-8E^OR#B-u4#Rr@-ggM_AC>V8c(Q*w
zavu=sH)qNQcd<1*N&YSUB<%;jy<uA?uE<BE6h|dIZ&{PJ=QLH7&Z!4q@&nfTqBccT
zhkkjX3d?LVwVe+5{~I~mcsKhbvJG2x*av-ZFzo|T+yh_-z_RCSBjEku_flqh%>Dtp
z0QolNSsQmMU$XOWXTE>X_cQTZSQ2bs1XG@tgO&bz+WQCZVcS%_A5c~{xDRof7I6Kl
z0sh=W(_WwWEly{@tlOTj!$@LP-rM2pfY0`3T6?06T#iU+qW41YgT8|IFy1X``XKbK
z)rZ_1HyH25%VYW<dOzW9z8lcf-z~J;b^K*N%lnc~QHhUFhv&G|W=g<jka3TM1~Pox
zs!iF)2unh$g>MI8uM(f-nXyxIHh(QzZFn0zL-1Ii$dqO4T^sUr9K_YbZg>yFn=g4h
zs+)aaqY*3#HUu^TmOhj0$7}Y{8uOzZho^L8+Pgx+g0yA$w{8vxcIA0#C-a*l)7}{G
zVV>PMw=rnED&H#j%KyyVPW?B`Pui|y+Qg+@3gNz4y$$}pvFJK1^&K4(Z7F_D@X15#
z_kD!v8u!;qgE*Ygw=UegPV`F82)v{4j-1SX`KTG0wuZ7C{`^nV{!*;-s-Fktl5qyW
zX4<$S%q3yr6i)@=+NP$x(-T2B{D09t{&&l?tpk+6vPJxVna=#S1oMVqJzvvHTe_*v
zv#*{jj@^Vw{FOC~ljY@di^KGY+SWn%kDr+K&I@%j?I2>u2DdM&9VPC-A2l<bdH*Tc
za<Kn`u19HD238IBI{`u2hx1~-SEGb~&-F*it%E=LPv5`DZ<TQ~*fOvmsjN(f>fFz}
zUG5tHoYe{+mU3R!m3IH&Zo)mh;*j&*X3YU5_W<;sc~5$OlM*z!=<?`VO#B`b%hdIs
zR#FTk(kVH2#&XVEd2+c)=v51!^zIJRi|)^m`?z1ZaknE5+f8z73HR93$Zdh%llP=|
zx{UEiS*GXg@h|(WGyZ&gapllQxVlw*BVBFu|MT`XU{zJ=+xXghoy9qDKv6-_)J}ed
zWky9w4K-?{h&EYKp@WW=&Ci*!#%BD@*km)PXjG__W|WwkSeB$zmQ-4lq*i2PRBBe5
zRDM+&Uk5Yydq2<Gd$SMPjPt+V_rI?T&ffRB*Y~rY^{kJ*_G!wY2JSOD)LYZt^y>cH
z{w^dPuA;x3mKl^+*abo94V0LoQ-)_v-P7+-`6k1?G_l?)_V#10&Y+fkw^P0;K5F82
z`A&epkq9@5bi!%Un+NwJXV+Uz)JHkx5D{*w)H+5kv5SGrw*vlx=*NC3+?{Y=bbh@x
zn)Z@9;j-=J?hX7q2Rt$;ui_hBzVT3A?+xG0?}wi*y(w@nOslu<a_cRkd}(n&e-91v
z`=lq_$?&&1bGJUT^EBm90QdD*)mzVa%YoDDd`4me*A{*5QF+R@68;)T{Bk+$g?nsP
zy>*c{y&iktK8X%5^%vWz)qQQ!6Q+1+<S(Z;4ekxs)msa_>5ZtjtxkIHcG4R{RZNAy
zZ%3Uzy>Mndvk08b-_~0Nt_(wWK}Xm!Ol4eeH#+85fnV{vdOfe|=xvYw)nD_-2-4CU
z>9GdzCr_xiaH?gio_E&Mu#h12nJBE^Nsske27NuT-tBw)080aw4@`OcIyzfbPx-SR
zCf)?_rrcH^xlZbgIeC|hKChwxygKl1arGDS?9Ic2x)o4*)`Oe$hkAG424UNP^#R87
zT6iXG53td|+T)%s%KK4Zqk!>zgL7uVZ4~y1p#6F$+a8Wh7Fv$+1^Aa!01p2Kz27PY
z&|tV%!@Y&dlG~ZyOJ(lYLOPayh6UNGcE&8z;HUUc_3rp71g{0aN`X<|<%Z)KA5hxM
zz$pi38EhiAP3!)L2UMio3|s0FK-mL+Xj;AdZE!$rLo@)N4E!N)S$q3N9%<;ac|t2-
zPu*Q_#ku)Iy*Tx^hcc%P-N6WZ6u342sJ8}Co8U8Rv3}J$Kas^rgWeq-1#djo;|-ne
zDgouO2w`lTgS2`3ZPo+4Z4|O^9&us~fnN#!fcxvM`*81;3E7!LiFGaStEdB~7@UVG
z5B5dna{_qi!FoN0vT>4|geM{Iz@7aPge3!8)CNljw!95C8dw>yY&$%PXA-b5uue8c
zKUB{%fQ!O<tI^vIk#=4c#?1cHlm+ys)Q(nzTRX2l(yq1b?i+}Q7Dwe*1Kxo7_10OZ
z?Wag}=<m5ASmukB7@rl_TOWI6$|DQ%W4l{J*dhF-fM315-kEdI?_FwJ_<5v)!^{R}
z@(QHYs~c>a0ozu|N?J-urgap`TR!*|D{VP-`YL-KiNd6d>Yxm~qu@FFn<&4Pz)k?W
zj%3-<ectphup0!Nsmzap-~E|->p@qZVSjo01M>q)*$}q5x|d>p``LOuR^)Vn%ND6F
zyL7l$!rkX>M=YyYCegOsI_^}^@F|~Dz+b-38#nq+)VJ)<Y2=|7@fLv>c)niu?M`{v
zdj`#FO5bpn>y6-v7waSDImni&1)c*u9rs#i!5*g_Ab6zk8{j@2?nB7k2_Na;qr2Ej
z*SzklkY4cE26lK^6#uXwy^~MgsSYy0s{n6>4-ZZqIOU+{^ksmvI4l?fWg7Tt74_Cz
zxOd|>`DJ`w_o8unF*tSL{Fyi=Pd@TMo#I<h{$HuLo**~YGq6d`>yaYooPr^IUNnxE
zV7aLSe>M0{KR~h+2387;R25y+PGg@!et~)4XQ1-z1H2eGzsuL=yqyr-GvHnUcYd$Q
z$-mxCo=f3VnkR#^=r!1R)FzmNy5}<D?~|ZiKFTFD8XkyW4F06o>-G2Yxa`6A$SKaS
z(}D_a2!Gos{5Q~!aqrfFo^$4YJQZ-w?dT6H>#YFl$=CPW*0T4s7k8!Zu&(D2`~`jw
z8y2=^7Vdop{I#*)s5~>D#`vtN)kdH^<N^x;o8#5xy1#N>0H4CSfHI=CSqOgK*80f#
zWM0SO(O_0kFI_OV0^BNaFLK*4`X#roG5<`dr@1nc_d0NQZmYMJ<6g@f+Ob3N%&)|*
zM)|x`ANf5lv-RxC0dQXq_bwC;F3R^{U}eCZJ)|T@*}y7*k?c5E3T~zVuK|9QYm4H&
zb5EV}E(zG<HLP+o`Mk&F@U!QGdiPxv3V%JY1HkCsxv0FWfgc6l-&-d749byMyVOn4
zGcR?5_%-!<Udn0T`YbV<rDd_tGm!rekw>aWN4{Bho%d3%<P<yW$JyW))Yj|y5{K`M
zaqT(Pd#QrZ0Z_X0!O#4--r~w~_#T<GM{HD`%wG?FQcJz{9w{a#-CC}k!NPe?>!9%K
zz^~}lV7+;o{)m@b%^FG#>mHi7PIwmmSKkJG&N3fi3E66$C!;Mp!`Xb{mo{AUh1WSo
z!*2=vzFFi+8<*9M_8x-5C_C#QXuXpUKWQ&FSiKn0|EO+DfR6^w^MSS-<!3$c>4eAP
zf%6~Phsle11j_B6<sbZlw;HU;Ub)EPcU3k}T1e${-}nc}=jH}$3(CoN&i>Z2b=E!)
z5PKx+a5@`dCdT*Ukpy2ma7icdy7xSi5^fv0Ymoje4c2G^a8cT)0xJY2ylK&Ohfec4
z{vzT!iUz5t_O%@R+^r3+PNsHLjJR`vO+!q+$G>V#r>8ARizR@^AtCswhMx<a^v-~v
zHad(rv1QOd?>1P_aCVs3Z%XsJynd9)`Az|6)O!t{^X{-`k=`B5rbG|n`NeE-R)aGE
z<>=~q@7PdJ6qEVGdCUiY=lczMpRJ7*1M_WfaNqx>vM2+V;=w||DuLw!n}d5T3+N~G
zd?439aq7U?2F`A`%)vo_&sr6!AWq;pjOS_^PPL<RC|}p{c}D}lISS6-!FS~j;W&rG
z*rowD;~a1^K5Ve^T`uOldA}1DQtWpaN#^pvD+6zyn>O&g<G!D?FoeJ@12_Jo2CIg`
z<ZmueUb%93e=Ny*4LBRYiC8bDH1eoUpY0t2FAQF4ZG$xn_pT1n8;V?+>An{F9-N5%
z4G4?3zCc@$EDi?e1UR?4>4&Z$nVC)L&J5n7#lk+{NbfP320v+^G<f><)B5=*c_pPs
z?PfLnO!~CJQr>txI+X@SY*fQT2>hMkXYBOK1>&G`U^8nZpBH}uoN{n@EPRu_CiPcD
zI&8}XG>^F?z9e^j)<NIyYS7<jq-Xr40m}xq4fn#FXfL|zuZSSm2t@mx0Nx4kGKhzZ
z!kY#xZFhtIb}XJr4hn$P0pmTA-ZfmuqyvX8ihDh{IiEG?b5@-G!qHJXsMN0EcDM(;
z(4GcsgSX5)vL!QFN4RIj9=#Lg@j3YDpM4X)Xq5}EpECBtR&t2a^Ji0Bdev?om-()R
zpVR1-N#!WNx(4f?-gJ<Rd`@ZAHgN$s)4p!d??yR&nmubkuRl`xm4Q<P4w?P#xt3I?
z6%-B~07b!V=E~y_4&1NbF~qKrar$ngUjINi;cpwP$Gz#fn$JDuQ8V__R8ol45J>j=
zJdghHV1xAy>eOv3-u`)qGs?l908p~QPyP{n3ZK_hG5+AajDOrbRDS{WdMYN~vS`ky
zsNDVSWHT*-|DE*>)<SRkcoA056|IMRPGf_!Hm=8@eD)R{DfSqJ$Mr*UwHMqIzsN0i
zvdMB8`vTf~Q-jqH{^$zPAFz$UwiCehLhtCH%z1OCUdKtk3+2<?V2wh0eb?`4EhAl~
zyst7d$fI;uC+EV?U(@aW^CI|h3xp!l<z9lgCxjdHIf0H$ICC$5prqsTb@T&kjq+Lz
zzG!K%uJV=}&+Con1>~pf+)^71gPU-?!5#k)7W*RfE3m=1r;D%<uykN4jA$$sSPrm(
zHWtEfCa`J1?7ax66M9zz<ur#P9nSh@3WfjEX*l_I!VnI{GyN~<Kfzl|<=Nx2w&nS@
zX6rNKNN_0rGWePKE4w^@-hE1Wl3X1@{Nm>Z{S6-OKd@I9?T407NzP-}n_@8Bc`wt=
zq|)>`gu@DP@bbSX)}j0bBC`ExjG7L9IruzA<@y=Jdy7a%<-pB%68#$PwcJo&b-Pab
zaQYd-_Cy|dQ^32_<v~x|odzxEQyr9oQvgmc;@~2z0$3?9XMKvWYG9SXXgY!}!uA5&
z=)owT4ZtdZRpMTM7ZLgVU!62sp0(eC<y#7)&r7h+tp<1gm#{Qo8Ni$|HI?ruV1t4E
z9{0k$#qLn(L8oO3+>7AeS3{h>JYZ$OF0?U{<3+%>0ka5m<R0syqv!EQ<jhT!RE!xZ
z&Ps5<z1;Jyu~u`O`-;7ApCKCc+#iQUa|JxfGdy@V1#}&cvjQ(;KHq3`-@T%+y8{cE
zjaCk&!#NLeyq^0F0ZNDa1i1f}+?{^N=>h?f4L<>#QAi)DPHN-SsgmqW2c8eV69_kX
zVi`ufUVB&sw{39ylHESA%Tb@*7Xr2(?gg?@e}~1HlcxUUgqEumaCTDozDDaf;?rf=
zW{mJ4582#t9?5L%2H5NVMyrdfKS*YaC{VUlLE$n@1urwusNWmo_%Y8rk!V*3>9l@_
zmkZuh@YojPe!#XtXcsUY(uOO9zkKixfH#u>CqJm~OzfMy6;$G^1}8hZQGYMTk%?&(
zClA|rZM7Pl@|Z?z9OaqYFZR!99c*X9%!3CUB)|hV?tZ9_d==<#VjJBt1|ZI7ci=U^
z_Y&a5>3OG(VDg^<UO`;rDdV(U;N`$m-SR~Kc`WE0fiROYz<m|TL?QT<?HW&cKZe{^
z!>tN#GzX*8@>h2sV-?)OaN~EIIGxz1M?75A-s^1lw+V3afq8-9q}R-0lm?m(=8O0V
zuVB32zEOXBj``@no%zRcM9&PeI)wCa{=rX+w`JK5huTjr@I2t$J~$lI$91!Ld`R)k
zfO{p}XOkZ{T?^zj^XY6*?%+l_8<8lUGVntk8uc7F`N2iuQ~|F5ex(l&PCK;coAq>q
zOlAuO=}iZv0sL)=jTU}d<F)yGM!wW*cf*1_V8KlM0?IVE0ZK>etC0VsM)w^{KwJ)^
zfL8*aK!AM_e-iLO*Tz%Mfu8|99{A0~b@K0=A<9wX8*+%4oH_sC4+j5#39v81tAMX=
zgHyTeq42vk>hZS|KF_Q3w&~2^b#~z35<m7ej4#1&9ZN!9At&7bxnJr85f{aq4*qiR
zAEk1%FT%5dC--R7=TUm_DZp#aZnUmz!_Nnv*6UQf1o+fGjaF}#7#$GxJ?nuNoZA?A
z{xz_CU_VB;^7fGbiz0bPflUEs#<cQ$8!?~qt4LlFuxY?fc)}Y1Y{E5>yurY7fql}W
zHN0$K$+t!FCIjmO>@sT1xTu_F02_TzqdxzhQH?JGKK<TCE3HjAl>uM=uSRQA8@vj5
z=B&n3&h6R*JTx2S=O_a^-Ui~|-)P-Kdda>hJ+TP5{DDSmdz<k40G~b&Wzhyt2cB1i
zJhj2Ifv<kJQLkTk!k<FnFKV<Fx8dglPkXe{DsF?90N?xAsqwA{zOAHD@3ZoRUk!Zp
zvPO5DN>0?T)d4RC&foWR+5yf@)|yNQ!1;e2{#P_w2Q<Y03GV|u`N>B8u9fXZ;idym
z0Y0A6?S#wiOSb30VeKcwX%cvoOB=03FE5kMfEbNw*)B{a1x&JC1a9tAt+GS$mjcTH
zHXZlQMfgVGm8ZdLfhRxR=)UVleu#ercnG+6eS>h{8yKGgZ+mW9ci`fgM(g`Fa*_%>
zu%^-aV;g)F@Cjv&`rL7f6c>d*33$QUMtxQeqqh7550y7s6Fu#l_=|}DVx#rvHh3BE
z_zjI#pEhz*1w8qcMr(ivr~26geDG^%Ulb?T59}GeW@^v+>pfY%N|Y~nQ>g#o^(5#$
z?_6S(-Fuk4D8lmvT>tP_^hO)~4Lgk2Z?6rK!N&483A}CK?RC?E@UQ3jS02?;$3poo
z1TU`=_5$(ji}Z3S@YTSl5yts|Er)#I9YbC+(BFd99;n}~1wRb_buJ(F8TThcc-^o8
z?#XXP#zX#MF+n~W_z2e@Y-R2$GT7e$xaYO;N9B+Kd^PYpU4O_Q*`q_Kg=rI$@-YRx
z__rGM-chHYcKSQh-hFWw`5Dgh6eZvnfxn8v{SSOfM>U1N*|w1!zOL^n6e^7siPr#L
z8hCu(BlAW(cH&;*IqMkR--5oXYP4o}?KkgSP>7o@uiH{P9|gYH(rD%3-qi=rc%A2m
zM{<`-WicJxY;arGf>37e95Efmc1#xpxTF_WgFmSnwmI(UB5WhDsldGZ6l#FY0LHc;
zI8?87zzTqk!Mz^up&i_VjN-di6pn8*<P+|W+!2-p>_=d9FYNc_2LSut6E-<fUNV3m
z0RA8Wj(oPR#Z9D)j0k4ozn1f9;Ag(y=zcehyiquX!1I7djD>am{Z<!--Vf~XH-cXT
zzDe!g(Z9AGr(X-!lXXt}Is*RG4;mxh+opJZRp{S<zeNE%;plZU`gR*nlMl7u2%+*w
z1wW~#RgZ>%Wdch8HXQeE7(92L861zCQ#@0^84b=I#9_HZyL97W5zPqF0qAfhc`5<F
z2>ka*{v3Js$e($LN=46gZUZ-UN26Z5xQm92nA_m7&%Hz%66BE-hCT?2+CUim2JnaC
z-c2v}UA%P4jh50JdK>#CKEhbkyN}S7Q`%25CO{ETo1rw12ETf5qqV^suCuocXEo?%
zp2_P8Gr*m&uTh_~!uf+<<C@M2+ND7sx8U*eYH(}8?M>k_w{_os72FQM?KX15Md{cH
zEaR(2>vOm4BKIVlWxDLBEPPn-3h!^!??G_bXdk>Ye<Z%;j1-_BC*A<?Ce*d*$48PL
zm--|pXo3{*vcb#w26GO$cfZ|W>rvV_VZWg<(f+74hg|?aRq%6|{5Ue`=#CLO5mX=L
z;1zz`Xsw{W(cyW=lyWZ*>}l?n+WubfYm;~D{cAMG*k)g=*oyt9hZ-aIuy|xl2D$Ic
z4C?Qbuv}32roms;5B8Xy=hC3RFqg*T!i-?<7W-&4Dz{1CCLe9o-vo5hO#Q<o$`=oR
zIjx1@6@ixvKO&Q47~@!8IT^z8QU>=Lxbs?((;g7#bP5KO*1Qq~LyF32C%CCUHd<d%
zSWcYwxAg37hwkTrh#%O7_V6G0&U8Zv{50^_*Ef33=S2RYtME>TN#BzoImiX)C^+kI
zujK&pt@kz2=LxRHJmL_0+LvCzWw|YapD7KEo;5av>!}aZvyW#ZxRv0(NZ~tq)cR5v
ztu428;N>*_dmg1X_8p`bJU-LLDPOEHWzP3uZT2_3Hp}n3+F!OH`5FvAxlP_NK6ILS
zEwZO|`UJR_z<n!?L7Xrn#^(Av5TrjyR*Jw+|GCln4)<=JoOZx-$yvNNs{%aV$wqx<
z+(eQU%*#*Eb90ogop8^9`(kf6JjbcOfg6T<72JEd?x>sLoNTU#q<7J7;BJ!s;PCNn
z4*e;bA$Zr8BBJd@EVmipR#=Tz9ff7SMTv3WBc(od65I<!Q{;P>dd-_RW7CE>dv4z3
zHB_`Rs*e)*n`$(9&Xgq?<98<Y!8dwLezl&*9M1EYHSm*eA}&e`E-H&UV41*L?Wh}B
zRx@V%ShxD#!~7TAGsy$X5&90>ZwPL&vdNn0y3w3CpIs<Izy`xT7w$<^PL2%Hyubab
zJ-2^wa(qo5dzA9Q-+&oDTj>{=XjohbUJ-b_Pm*Otrz0M2tKqf?Zs*{hE^4zIft3T}
z_T|K_%hj1+<0eZ=i|XMB_$dnc^x?tbN9ax;>&}dz)Tb~&iBkFXsYdxlH|aTQ#~<|0
z?GOUWUk2QB;GT|q{aq@^BHMdIgZ43*9L^N*rh+$_cpQ$?-wg|r-$J<8z`cOV@*WZ+
zyT0|ea+Ygt$sc@z>ex<ew0g@04o;x_Rl|QM*knCGg30BFKF_;O_o|b<qi!ET<>-4K
z_D|;~>t^!j<S(L)%7tv{LZ481q=NrSuhw_{ynPCVmksxVbDBKgsz*Ltn}MYLpw`&n
zQh52`SM+Mq-@7nBv@=d6m$4-T_fiV4cavV1a?*$LXTuVeOPp=sl!7xC_x3m1Q3)Wi
z4W`#xj(`*2r^)mF4$7a$AJ`rRZ<O|UOn&SEXJ$`4IB~IzKn3c_!PSaVkHJI;l)>Pq
zU)`j?E9A^w+xx@e%sOonIGNzAqI%^pX+4zf2K@>O@<8QK2wvVfo^r(uHFpelIAw4z
z&uH?TgMe~HKgvTU-W{d$PzzqpHBFu~UXf2*hss;HCWi!RVjba9+wy$?`+r!I`|V1?
zl7MXj=Im>u^bG)318f-XUHL^3|1W|H0U8B&F}z9dmtgs$^@B_*Eoy>XUQ@xz1?PS|
z>oA~CX#dP@nnv*~0%sdI*SH*vLlMti2#DO*!#xc5)1`ybUJLi+%+~ybfE@tV2iQW~
zyJ^?og5&W#abjyQzXr}MmxJ;(c^=wb?@s|IcErEuWP>vuoIBk5rf^=N47%Y=2d65_
z8xHD7mle;&lPs2ilQOc&de>{~d29jsCD$b{fMkGQ4SvmUnye~{*O|xg>=B{2l*SrJ
z#ZX$o-2MT7ztUq5QnpE-C47kas?kkWE``JOh&?&Z{))+z4L#;a2XFcHkZV-CE>mwi
zr_-gzv!0>Kr+S+Leki-i^Ns`fs8`xynE>}fxTnC~>AL{2zf$07z+3AZ{_H-8!mWb)
z<X>>7a;$@UG2CCK0L@|?OCIeHL`OwO#~ZUnhuD91h`YB#yBQtY-veg~FJTAd=cXpl
zdJ5vRhn^H(s_oA6_S64uaNNEofuDo$D35fJj7|qO30P-FG*$>~DzJ-fjCA^PU?sq=
zrap`7g7S{Db!aUV<0*NFWdN^54dfeA1C)oI@ONX6)31xBz&#B2MPr(*a;iHwTz(G`
ziq2j&(cj18bq~t-fRCU*bDOLg{qf-FMpv)XSWqu2(mV_0H5dE|bDARN8%e&V0nY*6
zx|a#|2#p7L%*D}h8I^!Hcy465l>-|E%v)|%z@`K9mfKEXrNDl%-0HZvu-o=rzM)1(
z<rZHH8SVbd<(2~Xk_Y~~a+?G{N%LSsong5x0zc>FQ_HOk_-NptBAvSY?Q-Lnj96`O
zxz&Of*brH62Y@92^OoBQV1t2q%Psz6j6Z<2EjQ<!4p-jHFew7wD@Wy)34h;p`{i<*
z4EIT|HCZqI7xGpDKSwt;S;v!|{6hApdA_T;+O}ulO!8I@e&si(mRlY03gB$Zv)tO{
zmg}ly_8<ER^x3yf)^iBUxhUK|z|#((OdJrugr@_a3Y@=1X}eK7$p&6<u*rJQ)!Q`h
z9Ql6pP>R~__w&I|{tkVu-CxW$WhbLuU^4|t;gwSS-=prl{fV}7(N^^i=11+U5Wkkf
z`=Lp%hdS-liC@$C%r}^G9KP>UgkRreHBp2vpT`*^3e`23wBdml(V3qLexRYrI_l<+
z^dr@ao16zJIpl%b`y}wUH8)v3-1L)Ou#_k)KNKyMXCZi%;U@hJIs$PKUJAUT<<xrF
z2z>PMCOv1uY|XC)p8Qjj`%NV$oFl{s-pl6F56P}?C;AWILkQsfW1X5lB!@@R)qUVz
z40lQkU4*3pD+T6lPosd91M{}03BdLMt0M!`v5E8;j?cZ3`kP_HgYsI|Lu8Clnu_7?
z$u7U#o+{uz&1n9w+S3vE5x!<?@CAs#sb_C{dY0Q0sc$a#?z^DxFKRwTf2RTu0N)GV
zFX<u5LoRrg;7xIP6HxENxL~O)XHfVTH@ow8L?e6=@X5fPIc&nI%*%jJ1x{hpMOY=U
z8NjL-(PdW)EbWqJecp-5hoiXTaSFcy?gelkY5SocYB#aFkzU}>65xC{+#PRIJIF`c
z^$9SkprnI8IJMcDKz!$W-r6pqp&@o+M$YdLjpCUGf0N-aBA(Xw3(N=ISacps!9M{0
zuPFdr6h;NGgiD(}XOz*trcu<UaLyf1Ze|2|Au5aK1rC5;dRenR6Ak{U3{L<%3hXl6
zyXm*bE)+-i&rm;u&Mckj6a@I?;Ac`hcg8|`|II|**v$uYx#+PgZ@|%8g*i`!@L!qM
zY+cYB{vDgdyAGGn^2s(drGF#%vlBdR#AC}+`uD(n`EQ%8j;`Jz+llux&_>a>C{0;G
z8dcc!zX$UVxy^dL(`g@$Ueja0RBohDY$*so9sJSbo2`?$ciWQ=pVkf5>hO7B!$wUA
zw5jmZ{ddj!+%G4N>tXxwrnW5JC%Fim<O$8z>)vo3`<rJphV!{_8^Nmt?}GLqI_2dZ
z@88GofxtHWfhTbt8>fNN-Rbn@Mr|tLbLhK2x3)jZYcjA>U=e9*%`5L!&k8!H;c2~}
z3qL7So2^oBK4@;p**pZC>M0+*3h<`8^@Q=UJ^!G)t9Pg<xeUn^SPy>SFU|V9a3+8J
z6O)b@NNBmoTs0jxxOoeOy%*dme{FXARz7#h-7CD9!o|$7K5Ufu@n2wkI;~lsFTwTW
z%n^{tJVbniPb)flzIHJ9>Hll%07vGv4w$idX!Q_1BdPN_1>C9N_H^3^`WgN5#I-@Q
z2w}FKdrf+(1pEnqYj(%wfVe+h4?G9>0RlLU)b_dTM><tN?PCvkp}#llF|T>oDf5yi
z;JzI06DXWB)L$eEsb8W$hrbf?=af;aEbxXh`xGP|o03dThM&~w&F&sKO5Y4%6M&sg
z|B!wyfqNd@`TKuPTXDx5v_|^2U4N|ic#eU}trq@v-rel(R|Ul7b_940aQ@D?b3Qs&
z0jQ4f4Qj3c@}IC5d-~&B+s9mVo0RYPWoU2zXy*4ed@I(rwt21Np45rqL;QG6I0Qc#
z@bi6pdtdTQ_^~Ja>8w+_D878ex9y&0cMmM#B#R}$_W~~@z{!8>x+>3Ra{<Gd%Cj2$
z!84lmH*uMNQ^bC|BXG}yd)N&Rc9=dVbTp-XSda(zY?D#^-S<IH+}rH=UIFP(p8K7m
z`8;6ba;Nx5fnNmv<!<=kqgnn5VN*V*z`Y#q1>|mDoPXfS|3tfRK>QM30z9P+PO`Kf
zcp7lJr;C2K0ZRpTE*USl2-^c}^!<^%qrgT1^YVOOVf?r#l9vQ*8ZbV$%nok=unEf|
zd4qxF0&B93N{TldSms-iyve{afX(d&0xrtm3}BUenytR15A2KZMZkA{ekxuD{OA{v
zb_<nz74YOQktYhnkrR7fh3xM-xaYuqi>qHzFY*DWD<fZ=p4j~m^nJ|{`zt9ueSl8~
z{wkcEi|};dp}J-Z)9UU;csB3@-!xl)Y=ch$KKdZ+vNm`=@YRQ*r|dRCfl)b@08ja$
z*}9bgT!fVaD+HFqh@Mld0=5%aEn!ansh_c@?m~bMfV1dmv*%2BlmT&Ab!6~<lh`_>
z@0hI*op5yj&vPxjT*=a|+h;oXdEj5@Emzx)y8+hX6VyoTd0DE5Da8M=S)Vt`;iI3U
zc@N&3!zzR8VG(#~_04*{1pervey<GpRN#DerPJSg<^xUcCiVM7JHgFwu*=TL3+7q5
z>$TT4PJmMbPDFd<caH4y559)H!99}_;Do_@=7+GIk`DJ!V;lckKl~m!Cto6jze(Vw
zfp?GqC*9^3R61OmDS!*W@ijGDFwO0_(518Ohi;eGfUzp055#iqfQ|4|8E)3!jB~=p
zICs>1`%F>W93fqH0Nm1+X1xc`!^K`>=UsIDHW*Sw{G@LnFF(N!@Hy$ha)Q^k+Q=pq
zr=R396Z~mbv%5cs>N^)$9xy&n+$leP4~n;KaXu)neDIQG*wddvHof)A+ID#GMidx@
zyB_>v@N;qR+S$6?O?p?1U<!8+czeNXjKYHxzc&wm=amf31BDy=E%b9t*m@fGx}ISB
zK#$lWVUixFa8toc3x=)lsjj#z!SjYYj#UfyBUHDOzz@fTJ?B%CO-0|!!ZId(xL~Ii
z1>X9B)KGaA!%suIu%0W%Glf$IEWUj>@+=zLPUPb@c<Ty|r`xCtf%3E$evZJ;y|~w9
zfVlPhu~|VnnjLTme}Mzg&+%bv0`A?i(rfkf8V=hJ1HdT)=O^NDzR7;OPj`hk=pWX9
z;N=8b*Ky{eoKoRs3h>b#!dAC-P8{fez2){79^c@IwrirD#zFeM6#mXdc>G>Qn>`$q
z$11odogKFB!o8bz)Ei5gRx4blN5CrrkJei03emrVn9l@uHt8^@E=ecZ%N3NLKH$8L
z_^%>9#gFe4QhlTY&kKb;XX!$2J>xZfmIN#-E}P%*S?N>Zr|_Jxp5y2Eu&$1<D7-?r
z6~T?ikL-r>@wNlr5;ro)=afLYNER#Mr>s|4zdOP*jx!Z>z411WAwhcs3AmK+qu{4_
z>V{rIbk9FO1bv6F&}>@E(X}^ee)}~RY?>gUdPxUgdc$fn{>+7YQD3xEDqE-h>3KUx
z=jij~p$SMn3c;`J7q${<Z#wfKtDf?d`P^Qi2oJNMkOHA}RKefl{@waJpKatL1ot|)
z7pHjT7X6M^s@z5?jKE>&uZzO^ojxaSJ<Q>{Nrrnq+y~G+R%Bjy4+EV&HIz$-PB4K!
z#9uD_EWa#lnbCOQ??+)B$t&+Kvkry4PdCxV^r95Mn&T-*cumINYJ@fE*J1r_C+A%v
zj5)5+YvZ)xWF!SZ@>&aS1-SN>d?2>{54;k1lv^LUdf2#uS{qL*aQ~Zd1op__aKyYK
z$=U$mc|*chwGR(m29Qs-51i^0oFS?gN=GjEp<!YD-6A~GMfE%lcrozJ1aLT1A8d#W
zb6yj*Ephv6N!ni-{G|*J>-h{`-$VTR;DO=6>$JwO_bAzK%WC<kgTJKAu;;u@^kuhc
zKIO~z9r6qJ@7?sE9qazY-d}7RQg9F9FBSaBBf_T}7nn4iL!2CN)`N3D?sXn-<uGY~
z6m5PYnVSJlC@XA*h~tc%?H9<>0F~J8=TUt*^Kqn`cy9$ZnNb$-+Vgb$Y~FIUt(kN?
z-wD6_eY-7c%8t&WTdJ1^xP=k#jRe>i$yh8pw8108`hB&r_BMpu5cudVlM(n_y`TAN
zo=-~yca9T2{8BlN0=69fvnjo-zo;A+$gKH3efEdmu*vi26yFT+Yet2w!LB@l54~+J
zql{$+ol*~hyBgfOYr}dC(`kSDgfO@Nt_COXH({%tSAX$2AM!44nh;FRKX{WzqaQ`M
z&P90a4;bG7=W&GXK=srI_;ldho;YsIH|S|xmWK@6eYH0qR8MbGK8Et%y~*JCZh#JQ
zIgnjF_GCkl6%pbZjlV_U?z}PVdH)k!-sF%G<lO|B!Qm7#_7v04upl>`QTm+Rq5Amc
zjG(Rl5nc#?2M}g{cG&Yx2<$D?ZH~*2II%~eAHew=?p+;6`QZLb?;%M6r~6G|Yf@Vd
zkD#?(oDI(8f5RcKA^gn%uN=Gr0-QRf_}FgM@hzwLZnkYbFNX_4$5#bT4mcCqhQsB;
z+2elV2zW){o#*92-snZ&5U|)|kYBj-`(@s^CQ>om`3L6&ICp!)pfumEIV3OH;N;xm
z?Mt*=)7EB+XBylm!~K`SAWktjRp7MRZ3u(n;YOkJy%C&HPFU~p<1-^rr_^U<ZlS$V
zWOi}B>%c1pZycWWd%Tb*;$5r1FYEge@&<RV2jbwO_Rt;p=rO0_slc}Z@5@a6FNB{_
z!1n@wj37_>*?VHS&ZmNtJ2tFsDTkwV?H`dM)+39+nGVi6w;dy2*L&7I&*tvmZTD5+
zhjYV`-^bK*QarMxH6=>l5%BWHg+1$BurJtFx|5>jxZ~?#Pl2<T#^P@J7RZ|&9VQj`
zab#A;gEAQW?h~PNa8DQ6quIccfW1rrhk<x>ThG@GR>w61ymIiq?g$?1OXSnG=k@;m
zQ4w}d8Tg&7UHbj@Hg*olT{YZCPYZj_>(g@Q>@PV2_X%((^UArn|7(D}0_XRcoIE@8
z{(1uXOG>w6_oaeg{J&xAVz+(}508t7^SC%0?iGIzTRsD^aCopu&F^#ru_I>v58m?W
z;mCK>Wp7s1BlTPyPw$1`XEnG9{|H+{$-k3Ev<JO=Qp;;KID^6QzBfhrs{>wqFZ4GV
z+D<up>}uJmbsR`_n$U>#vDvUQa8DOu$-ou?W8)6b6mB}OB4EpLuhWEfh4r#g^L)b#
z)hG<?c+)$}X*wuVz!&*peMW>c|LT;p-g08zN~JV1NL8loK?)lel~)<X2mf!n<%)85
z=R@U0E;w`~#N7#Q>fEqCXUge|J$cq&I~&S<xvvT93HQP7rigG+ev^PD0CVJ;!W;lB
z9@wKq;yR%Ga{rEX^6O^nGZge(QVzKJ;Fh^uq}9o*mZ_<fRa%ot0jB_bUqQId_fhy=
zXuTijI!t%7%|_OxE{~1ylLtS7%Hu!e@c_8l_ebXO1h5Ifym^dohJFHeCV5N;w+7r-
zDM5}*>hX<p$h7`U7^IlwWeWHc9ypbc`5K)^n$qXDZHDOgzrYs{hOHX1w@;HldAwB*
zQux*2FJBP0?w|(l@FT_>J}Ppyzo?E+fWP;#$TEo!W4-{Gw@mr~I{@q%`0?fwcAc(w
zZu|OdozdV<c|2?#YQx1mle^cO7Y6O|YaaLmmY~hLGL12kBPVDRw2MxE+)&TSl~ed7
zZTfKgodD8-HE^E+cb;Z;>V%HQgd54(QQQ5=Hu~Lj?)r?@Qq^stPYe2&Wwy<OFsQ84
zfMqYooP#$UPy3S7T0^09O$NVoWjOL%53oJxxT#FI7r?y=?&+jcc`Sf2(Mam^_~@D!
zsp4FVSSHafM(Bs_AF$QWXMW80EkIhR->yYi6|2JTJ^?`d-v1HcHNbE8rWx`&taamx
zoM0#0yq01du9wiE!6?rIjw5l;gsooQ_QrMPY&U<EJn@V#$yYA%pN*8SslZ}^dF3k~
zSOC~cN~lw3UcKUxuX1n;!L9XjBi2fJ@W4uf>U%Hv>1)E)3tqmbjnZyxet(8rg|6F#
zpJ3m>&m5`?PkKBu@*?Y6lnd#_4DgfJo|zt+3hoJTy}C9ZSYTabnG^%_0Xq{tR0ZyI
zaL=Sns2&@@Pc9EzPqrx&t%tO7<~b%z2~hs}oWS@P{4>$Bqrsi=d}RJ60V@FJt@G)?
z@`0U6{z}0OgL|fWwwB_1;Z*)F=~>^;u-9G;TbLUArTWfsS~HbLD)>8JI<xYa0B+gK
zk>xQBSOqX|c@zL!5A00JV?DUZ8^YFcZ~b|6CUuoBQ%giEp!%)@KMa1`^7GdBKZ$S4
zbHYiKU&Wc_Z!oyIuSDiA8`xxE-uz7lHVN37<ZltUJHc(6UZ)SCv;OX(^rBy-`lzD#
zUOlt)9tAi3waE1PFiVmN%$wdMU>U&9B)u8nR)BjZ>81LZM)7StbNx~Z{_5AyEPplN
z&Uhm-e|5kLfO+$WSxJ!(>`e04M@SI{_e}LmHu$S6&rH8idE|qi{ASo1<?WZ;dFLBo
z0es2Lk7g)|zaIR|s<3|Fn&(2X&X2xy`WAZWa<n@S2C9~SN)Pz25#Z|cc`}R7|KV)}
z!=0%V>Z=nBDJH)ij(nFH;nTsl6n`q*i{YL`8}v9l%;EphGd`UcB<bWS9pX;{zu=Rw
zHIn*GXP(c~Ua1e-N<J`9CH^AtSAQC|E_ZDr*v`7oYPA#Dde(Mg75Ei9?fP--KD$qZ
z2}M@r3MWAnegpWEcZIFz+JxWwjTrrPPa3$Sg5SqP{qGLz^=Y^KJhnN#Sn&n-h}t-Z
zA1cRO_?z%W*mI^M#tSG%I{qpI_Ze`{gFBD&opjTh^uv_ep+Vv-2Pbx)J$KJ>BMg&=
zqugUBfKvs|0dTzgC21VK2l!Fot>bW%qi4<#6fSR{MEQLcKI8M9Q^8;Tby$BR#z{Bo
z$NT*z-rZ~K-$~$a`zCBP(S(V^_uA!SS-jb9;`#@_IJU)lq(Atc^7hyt_i$;W1c+Y+
ze&DhetH#@Z+4Vn?-&*DJa^<ms(x286x&PAL=SeTA&q4X?eV!D4A0OK1<t<vjIrGq-
z{hCW$wl2?X@V9|~Ci~e)zVg9O`c;e7i$-=%9V0z_?viZJg@aYJ9V8XDnZ~yK^352J
z4r{SaLXLeGJm4uS-lJn5_?;DW_S=OJd@cOcez!}X+Z+c!q%Az}nUT#H2B%_pi}e(R
zd+h$U;hJygw(4$lqHqUPnPRsS?hg2A6E4Z)6eUIch!$%L?%jID(WJ;0K0nUOtemgu
z2&)1-K2LMLCw@Jr^<<mqMF_!_ksl}iJ6q#-_F0Vrrv{wztQMZ<@!bH9GY6r=T}9yz
z4^E144k;ZGWUF9kkhTZn=mdUWiZ`w5_DyFaJn6*QAu>+NZ*G(n<s(}xdauaMud|Pn
z=ZmlAb5-)e3yf-U_p}h5+I0!=3BZ@q_}9J&Ur+q&TdbGb;MEl0O)b_xXpPRkh+hXh
z>9;MGj|L_7MRI)tc>JGQteIXtXkMd>SHJJiZHBy1I0O7rOr6rA*J}vGMR*4A>A-)_
zi2ld<2VMhwHbG81)&nbhRa*Pc2QTf8mWcUO3bzFK=r%ZoyB_#t;A7ozan>j=1q=<|
zjjAG;^zR<<mOK7Ae!OcqN)yQa1l-Hv&il^T9q$|4?i5e=fE1N*Z(Xy1{?u#BA5$Sw
z;ZQkdfLHwI77NqNt@-roH_6(Hx)bJ41Ha%eEoXEN2!&q?{x<N(Q++%7)7EdiEm@yW
z$NTn)UkiTtZ!LN~&*6LYGue+rC<D;A#P>x*|Np(k;<n=Oxqr^J&#XVj8K6odek%A$
z_n^M~r=|z}EiIJivj;o;NyMMk;(7Pd+n?+4mb3RG6+tcnzX1G7+`Dq)?f=o=+FN2w
zd)brw>1z0kpWR};@o)U`x+=7dy<DU7AA|aXzhU0B?N<AN%oARHa_T!3{E7m|1<j{A
za*g!4>wK~&>ujoUlCw$R7c6MedmbD<eMcE?WWVQA{BZB+&d*|f?Uq)1$~jA%%Dx=j
z!be)Hzk1uOE*obOqS28}9{+>CXK{-)!E0N3Wpgvvlxw$890@__m&d(&0qL>z7G5Bw
z;8~VI<?_RZ1TlF@i`DE+lV{(8K2}|?uT#6427cPo7W;in7C73#%=?Bj^rzxE+!F9=
zzzewHVou23=TuIq$O!&Rm!j4q)!>&uVe1=894=CMbrj#S7I$AGVPRmUz|JBPt`PoW
zW8ojzS^}JUB72ON5{I)rmI6-t@)qk|FUO<PLcp`ZIRH*&1jp{@fQ9fk9i03XXmh{7
zp?W9*M?Bf$Ikz9}=Jr;(kWaPN1@WuFFJIYWJxcA8(@*7P+hzLw1wFlmaU<(L@CSdp
zOP}G}W<7<%>mG;r*R)vONUu41A);N#KXVFTlu*5n0{>`POXRoSP+xS8E3ef<YAD=k
z;7xw6CGwl`Zu{2yfM02}`K93R1V14Lo}GG$Xm6jo`z|OQwcu~t@SoFh0=&T$XO<2M
zcR)LoFZd<6Z%v2J-*~%KQ2w&POMa#0l=(c2-`yAF96rfnKKQG_=XcZbOkorQOMSJ)
zI^@-{x{RD}oZQH>+0gowwr$`yyxC$Mq_#4#_3VgYDElWUZMLm^6uga_TdWN4J0sq{
zM2_agAm?3?P<tuP|N8W6Zj{c!aNoG2#d_MS3%&Z~a#n@h_(|7I1wVaPi}e=nU77OC
z8=HB$AW1$;z}*Wj?FDhmn>Hchk>cJ6cd@%gpS$78h39+}_mn@ahmU|C4}Pv29-URA
zKj=kii;ai90r&B)zQI_F`$2m5gL@h_zp2jBz|H@x#oc4X@(-*CSc@Az^>g!O2I_#f
z5TFAg-Zbzg?`hF<vOFHf_<aWQ^&9)-ZE%QJ0-pFB_Np5m)={zM$9-RBkZ1j=oT|Xf
z1aAWI{u%L_2bWVF+>7CUlbbJZ|BD`b7<#zpv_hqL6FQ*%e9@xc%j5Y4tV!Ii-DwXh
zj*a7R)4>aU*<ziKWV-bO8MVjJG%7ynXebJI3h}>c@$509bQH>wvwikXOq45li@-|;
zZ?HF9u7_dntLgu;6_5SBN$!uxZw>qo_`1b&UO(00Je;-ZsYB<i!JD)!!5f!%Y)AAr
z<kxG*X?w3$OQq(ef;auZzt0EBQ!aRU;C<oEhkcH+G@X*M*Z;sxJ<_H>(EHo6Abe~d
zWdvIjO!dAIev06yf-=DR8TPHcKZ4rF9=NA`*J8y+)H{z2%@LHL5kY&qnBD(%Li_l>
z#dDs$t{;+LXOBn<IJw}=r8v3G>9d4rUl$!ILg~r|XB#*n;yCj?_P#E%?{aoveF5%Q
zAzi+G7#%rnSC7NiP|~uTjc~u$PZVwu{FUyt$F7^;&mLpWNBO3}y&Uf4KiK2ORi}i@
z65jSZ40Z6c)(LY?WS9t&`^i2D(9cKh{BT;af6g<G$gtgelLvN>9A`{|dj<UWa@}#>
zr0t)^Ir(tk26yj%63TB0@V&s#a{Zw{_r$x=c0b2;$2iF2z6b6{;lH2jj&#{)K2!K7
z;4Y4}=soMsc_GBbMeVgaeQX=<mlMGG((_l`H)rXijfj^4UJ`hhxID-W=DBWl8VzvD
z=M?Z#z{@6{eR2MQPX|7m<kW+g06+R;i#{*O#!0T%1JA5)@qAkW@$r80Y+fw9Mawq(
zp!C&&zZ(1}2;qD{?`QG%PVC-B>$BL-&`%AR_wcrVPhX}7O|5opI{3?*TC8F>T%<$y
z6Z$X);8f0&z)Naw(fg11TqpN+WY(kkaL<AJ9d5ixpC?}X1K1p92;r><zqqAEpP%X2
zW#|`pvnDhladv`J1x^m`b)Jzny$6R+G9mqR0vvJN?l-txz;W#`-ce6ezIy*h7w9K&
z**1n>s)ux7HNaZ?6{MT>wDVm!{k3~%+%yGzaiT?^L*|KZB<(FiH$($1r$R_BO2E$p
z-+7-N5XZY7_-f$Q1i0aN`h7it%6$T*vkv^spD~XT!Jj9u<@xVBNm|_b2;wIs!F~sS
zhR+Ef?aDiz;rFWbkcs#i;HR0#tr(JDCq16}Gxt#xT5ia8m<E25Jg(&z&x92KTLf$Y
z?&%_|1X#Q;l2;C_unkrPETE2SooxHv2`nF&H@qXjL{uau@KL`RZLkDjVPNwpA-E_l
z$-t)hBmJfWI|}SRW@+ANU{eB-yh*?g0Q<d%Hyv0;^l{xLfKz=J0xJSG-saH{m2WBV
zoxpFQMPsLYJvO84#5N|08S`tw51f76>J<A6{J-*Wf%&PR__`s#=N-4!d+X2qD^(iK
z{<n8xxB2cv2K=SNU*3S@)<_hqn=WU5od-PGL6eo`%|UZL1(&OLrQTvs$&S+FuzZA5
zaN+UD{g8ajn=aE*N*~;BMl^IK;jaQ%_U>JJFPozSfKy%7!Yw)Fxc(-Y%|8Ha;A!}z
z2YhG29=+(ewbRu<&;uU%<ylaSGf0=EfO~Y;E-MQ6-2X;y)fe;;RQu0I`pol8_c0^-
z3-N%Vu(beBKGBUC!D1sth_4LwvGl@yo;K(xtF<!yDZj|`sTcj?E1!A|_fh?TR79yY
ze&Pq>hoy_VF?mBlUZ#HoomEI&{mU3}y?=oOa0jX397eqM7f&A*o@1zEhIqzM7+F#H
z{k2=-|MaGJXVhN5_>#W=TM~8K0Xs2+5=FKq1$yCkxSGNqLmG?E#qa%wLiB45g((vX
zG}-2-;di>eZ+|X+|ETUW#Y!d<?E>x8wJ&}LtJh8OXSEiesW;TirZ{Y9M~9U78$2&F
z)ElOF+fW-!(c}=$)5L_K_`O#hFerk(hWMn7d$)7oo~pi*VwBn;#fyeIB*jZo?bda4
zsSah}YvireR0Vz%$0f7<V!c%LQDU`EVS4OG-vxvyRpb|oqO^~|K>TKRyMi+QtHmZA
z!u_64Jsc~J_|yZjP+DqMtSE{?1KS^^jt9jq|4Wdg${6)yQ0$3Ohk~LZMtv3JauXxC
z(z|S>L>w_xtrD|MRjovYR8@*8XR-A{xBs{Q;`W)3Mi;gh>)T2Er~2uKRN%6f#2LPz
zN-#*D@N={woO{bqO;VRcuRi#_PCXG2-xyae4u}P^Bktez%{TDycoaEMs41F#R<V(e
ze!^5J(c=`tPT#L^`?OuGJ`xH$mp%Taz6gkyjmz=HwiiwHeL!r8QlA7wz5h4(4^nI=
z^)ErfHdTA-{(Jl`GSvNkvENWFQQ{p_J>(Z3`P57nYG1nM#gI^bX{buwd^>3L)?{d;
zJN~dA5g73+qeY>qmPCu=ro#OksTM|y6_W0slj=br3cfZd^<uQxtkjxlu_{Wz>&7Tm
z9}u(r>Tm!P{B*zDuVzP!^#S!0r&$dyMHwRT0cuIZ)ZJV-)WYms2Olufg!q_S10YAa
zwExRMAt0rA3HotUvmK`%le<5m#1ccTRAPmB6Yd|7YK;;Hq{2N#m3a2$;uh^G`FRpD
z6c1F-JX5{y7pqM5vS0ix%aE=LrPlhzvZ%jsa(p72e={F4a^@zAcTfn4;;X33<|m3Z
zepQ@Exx)RX;0WNa#$I$RLClI%O$lOVd<u|P;?=<fu|Hm&Oc2{TkYA*wYX+jfLye&3
z`jsI*r_|hsYT~MJ%HY5GRSPHxgse)OoBxD>zT_Muc#}eo)}gs!Gq^DCHF%Rg?0bAr
za033UC0z|)XN2u>91T2!-Oe%M9+ax2voSBO&Um!5CxiiT4>6~Q5$LZ5sxkQUgb@oj
zLGHRO`^M?y`);M*C5cAVMnhq}+!S_#svo1YbTEXApq>~@G}PT{l~1t)r+&GOb8Bmb
zMFHUyAHqkQPHYVw>-VP#f3g!!8}8`SaMPWz|L^N2r;JYhMLztq<>9zJ9o(#x7VG?}
z3-5f|a8cM}jCVEs$JN{ZIUPKu1;t_e@m-?Qybd{pTSoh%*kb{OhJTF`b^}4j2wFx^
zivzW?4muFC*rN;m|He9ECqjK~YiOtVd{=8x3kWE$BwOs-Vh;KL)o+v)wH}3sqEvgS
zDCy>ab92zS`TvA?ldN_*+Mva`nQQA!FO8!==rA1P!prd4iqn^67g(F;nCmYTVza5r
zBaA){f!cGNp+=}z47(GxmU#Nmf9D1p^K!&jW~g}_E*pY5ItA>q#ZXV5;&NtYBlKDv
z3jMx-T<lvX@dJHi>ps#mzIfHm136_8Yf<qP`_`EAb!Xa3r^a!oU*Cl=Q}Fx$@=rbD
z)Yf9>=27S7RAip*)HX$`(rz1lP{e|)M%cY8wIOV(qki$ZTw;d(;w3*lP}T<N><0e~
z$r6ZhALr6X1~-ZDg@4?kf$lbNUVp6@y%tUM#c;f>W4&gcrJ3>cGV-&AdRK|1O1-7+
zJ-cw@hhx@kC)rx!RZ|_~3Xh9dmy7e%RU{l7cXTKGUNrR?9ja~hN0Y@kN&TQf4i0r2
zm9pIU!gMS;lFtrCAfS>AviTqeZ0EJsU;p8N=NoFXpCbFnFKP|-nV+n;{eJO?e8o77
zAEn;o5^C2);b<0;+Q;pLb-4`lHj9lbj`?6xsTQ9oGxJP5P;rvkhTjfje}kDI^xZzu
zY&>F=YR8M<$Z3n(Z>smCH@%+rV;Rx6_Q24_yj`c8?A5c?D2E-{))I}lHx0|TJz&fU
zsCNQ3DT33QZ(mo8?~pq0U(!NTH3h_LCK+;Hnkp|^e2vio8+8fY`k?f0QMHEn8{K_i
z7eFoz=RU<aF;@Ic&|{{W7b|Mz#d)z}sZSjUibADuzgnrILGex$x$cWn;h>o3SC7Ps
zXZ&hutoS@YoaNC7U`Y(!ZU|C{NMAcD?OV^DX^5xn7_a;lkO@>he^Fcf;sC)guTW_l
zOjYj}J4~v^S-vZ``^7gth5GwQU4Z*1qSQ}Zi_u-x>xQ^~@+tZEmc@U6PqJ5P+_N@9
z_B?e-{kdg6XzYoC>M`%#Tcm}N?H&S9!_^)vYJ<_a!BMI#E1s~Z-j?(?dVFZ8C)&%+
zKDD^LZ1N?~Z!dQ%HMhMij=@OGtMlS`Tw|+1_`TNn)gn{P>?*gKm$oFy*QI*4t9&s^
zE$XU1iBk7>Rbjtc)>VBOi*UlRbbF!${omA)JW<G$;O?IEa&!O#4hEzAEOmppLXD-e
z^id1OZ~R#N!g_tyN2BT&bYmE1yU~dIAx6s$^=gFMe_tPnGo(A;?$oQGjjvMTIYT|C
z#J7f8s?e&`BU%;Ny-s&ZTM;v0Gryz+dQJF&aDh#EaC)azBy-=>KWf7ThVi$F<`exS
z1{;g}8EZ{7zn^?psh9i72cy&%{p8D0|M;Yzd@e@q>nq=gQM>xe^|5MuKlyB&+R{(H
z-`;$^pZuJMXdUIue#S$cR7+oZsMD{H^_2$`emA$De5H#z*jIknMLpF|S?8#={p6;;
zW^G?;;rE(Y3MrW%AxjJvI2g;yIOE2DnR624E~y?#Fdp}*w-RK9?>Da|$k~21FG0==
zm|rEx{Q<Q*L9UK&zav3zidOF?$eL)iG(pbnNWPx$s9s2ryF0396Xc0b<|-aGvq+H*
z;1M^JNe`nVrWcxg@=K|X`D9qCBfi!i*Y1N8TM;V9u14%~Q&mMlCe<6%NSrPkZi$#X
zQmL}98XJjUYV=2`FC#g={^_prQ>iv|l`DK|T~|3LN^R{bUx>Qvjjqz_`0v|8s~(J|
z8J=-!Rzy$pOTwq>O|T&u-oNt;O^o)%r_pldh2mheTyvo~9xaz#C<<fbix-OLgU?_P
z{&Sx?weUg~s+(DikVokDUh0C=>UOTf4u=1g;FD%qJBI>4ZFE9pN>m|Dcp-V}Isd8Y
z^ro5R80EhgV{)Hd=u@wIYK!XTH1&(IXhG089HsJt@??PS-5NWUkFXb*>PWP#F;!i3
zWF58*`y%7q9fo?lgM8d<zo`R0+N56UAYbuye6E9h6B_}=s%TW^Ti71qirlI3^)NcY
zeEc9vK5wcoqhyQugYjvrNS(sBjLzqvgnl&DCM6z~>TM<F`PBQm)nBR0?msiAM58K9
z99ltlB(S0{Pik39@(ttfx!oS`CVw*3!`<Y!Qa#yCVm57KH+jsbs=LYUN>z1}VWpn!
zCLfGZ8@kEb7<CYw;03s!7nioDn|!++;qS$(W8LJN9WQ+WNP@!u%Fcv;)>&abd43nQ
zubce13vs?kBHXPNs>gGT#2eJVBt{Nz8WLlHpA7k?380lkZMVbk)HgokWmted`M&u-
z`0sUR`#G}hT1J;O#>XJ7lV(Gd_(GaTqC~atb}k5C{3QNmfkPT#o5RHTAx1X&x8tCV
zh_HXDowt>dU$o&7{!K<^uK97IEGOw-2xEFyXIU53WfKrAz9brz0rg{|EQnL@C(5O9
z>g_~1r@cCqDCfnG`Z`gbh*zH{%5@!fNj$V>8{s0(vFgte7$)denZ1AViN&y!bbn==
zwW`IozSU9tCZfGTK75&4u3Vhz2Xc!k+Ry#QR<r&4emPq%H9z*dQJzL_olt^kGCb*c
zpB|*y$p})HdeB&C?ubYo#TkE*IopTnxd(mXDXD(a-pEj=wEfQ*{VQlE7t#gY6s6)E
z#lz3kp`(1*9d_Dcqed=(#ibrH@T28FQP`8uJ!cy@Mow%s%<VBWzx_#!_*R;)$B25L
z+7iPtj?^(HEH<7pAC18%Of85JN7O8d2OZi-B$iV(sK%V}WTI&F%{0~}iVDA4pD6NU
z)gy^wS)BQJqNr_WKAk8w#$O5KyH13^nn3>%OxNr1Erb72e-jTI3Ui|vle}*T=m-wC
z%X0Hh96;iGhs=h+l}{y#1+gXC35^*?CF%R~{(#^6WTE^bC{9MH?}IqgNqrL(oBV2f
zP`nh_VFG$Ks6OGT?*L8j->v>hu|IFDGu88hAT4i49ULUeg7Tq3;@Mb5|Kq<606N&!
zT%0D}?`EzTB(|Sr&QB9tyPI><#Lgb-86anyy9S9(AqD2PkUBX?<oA}}4-%jCmO%FR
zR`(AQ-}aIF28pIVvT2am+V_C@M4I@je`oxE;XDfB==oRR{&0$VXOMXBqS0>-65n5}
z@c;2kI^+MGRJAfqyqjviGDy5|nR;vxrMmMy$U(EAmiR=msZL6964S;$yWWYQ|IkMV
zAHbv(Mos2ptpl1ieN@Le#=GED`qYVd@mkbUZK3%(4d)tgLW`;}I=-YO(jG!OE_Pg3
z8W&-{{QZuy8Lg$GL~vhslnYgh@m)u`%dbA}XnY+|jUA2R*bDLhnGOT-zqK(_JBzO}
zlp$*jHOrI-jV^}U$dEDQDR|86h_TSeQM%3vQjgm$Iry3J4B(ZqIClZKPhg9lT@3xl
zsYm=c^Y7+7zj)0@>nkr~_=8c3QgbjHjp2`9lw%+gMIK^A7>yS8i|gG9hJHI@1om~b
z$d~H7Xh@Z6j3!j2ZqnV$T62!sh|*i;A6cI(wgl9^abi}qIyjDoQOCxKjWG)N6S1|%
z_qk$CJciezCQ;Uo6Q6f8tH+7w&oaNs73;dIJ>$eD-DSx*QQS*`Y4zTW@IOeV`?B-s
z9Egnr)xz;&c1mdTcwwc;*T#!Em#C-4iPe|f^mDFQa;bb6_m`@g@#3M&rmP(&Dh8<+
z$BTV~)EY3;)B{LLnwm3ClwPjpju)R^u3E;4%5;Tr9=htdd~dvXYp7Z|UK|^$mW&sV
zT&*4)FLu%ldhIoP5c|s`R5({G%91O_iIrLMErgb(D#nS2M^>7fkm&2wi{r$THz-7W
z;s$kcoLGD_-9Isg{+}FcZXG8U{nmVR9F^VmmmpYJ^Rx`s1MdJFq1!T_+8HIPsIS-u
zWn_w<>Glalx38*OF{1So;dwtTAvBR4bs%sPUe}JEy2jRxmm23kBGuz@vc#tziIW)b
z&Wn?4P~mZMOVl?eAejDmSPB&t=ZYEkC!N$d7a+NVo>iUXGG!~;Hf`suD-?FT{fknz
z!N9D^5ne%=k0lPh%G0w43sN#^oVkXo!z!Smj-VMCszH)*(;~%Esb=~FriSj<9fGZ(
z6>y6GBBO6PmMYFR4uf&FeA%z^&z8>zUW#k(DIe*qPV|%;x+vUx+Y<WhPAW;>rS9>-
zRNlY65`%Q{aX{U7zE~RliFy1yu{E|g3ODX~17{n(-(D>^U(89U#uD{`ZnY8*Kb@_9
zJWo6oQiskHwV`|i(4k&fDSxGR{O9M1(mpGocHTUXydn5YJE<$g`B-aTWW=mA#35sl
z5U-nWN!%Alog>7DQRm?H0jjd6{k^WhqS_UBhQ}D{<%WD}JkP}zi0_svZlK&-#_-8k
zA_7D0>LxyrSdbM(fm*e{n^+$Is`*7X@pDId*w(4vJKe<bPU_8W;_(FaVK=cUvEM7*
zL?NxD<aeW61a*EVXclok?7tPfYKx&d%zn&CVoM##U7dO53Mt-}1c2TNAkO&;`)ZBC
zc4CKL-Pexc_UdBMTR~;MO`i6dc%*tNGL0tV75^i#dq&6~6V$R1a#o^xe1u$_s8(gl
zXA{-(O!<1ET9PSuB&x-k@|#5UP^LVds0uUX{LbpWO!;JIH7ir*B^@^27$FySQ_p7l
zS9e$MWcnZMp<c=K@9lY2Ri^*@Q2M?R{)%1`aKF2^0&__pRhMZL^`rYe7tAu?yfvkV
zmFfTBl9B61_`ga`Djnh9c&WmD!DTaz+D!l9G_@<!zv*&yFw?*I3Ub(fg=)z3zx6A+
zum06m1HPXgq85zs9~z?aNBC=ps`VrMk6x`1_Rgz`v^AriA}SrO5FUx1<mm@d_Af(}
z<Bu+D$s)s;@jLakPeSS+@*9|xTI}~@wf&^@qox1g^J9tg9iJbPe%$BZCVK&akyfhw
zX#DWCOc4jOp_BaY`+LFbNq>)5qWv$zT8x(81%~5(UJM1fD&_*v565(UHRvx667oTi
zf@w`y0@9S^qzjhTh3`ZA!lHS?FIuoJK^5y0eJIVvrcr3ZC<xyoe}LY|k+WhhEy$6F
zFbS3;ABV!ok%!wUAV0^eqqoS?PIUi#7j*#lNowI3`FYntbvbfPH#K*Re6O3DKSq|G
zwaoyuqKEoEM;`5=mW+|LXMbw~dZ>?jdyK5>I|TPz`>Ew)<gv?C#TZ#UNIjh+KN<9S
z)RQ^#!>d$nj$Aa@Ts=m9I7IEqk&CZZxIdAh_TD1j9;TM&$fDtdJe^6weVeJObL1l<
z)Vdt`#RzpUN3I;H5W&WgswzkB8L2krNNc3pkRwlwQYUld(rZ;yj(qD{RXIj}blp-D
z!M%191-JZW@<xSd*C%vQ7xjiAH=62AQ_l6NgFd;&_kgj}l+}u$gX$RrnCpeg^-sLq
z`iR-_vmQ|23jdcxsrP!q)>12biXVcPyx0>;NG<Fs=EtecJ;gh5YE4h^bDVmuC${pd
zB|XK`_Nu;zSQ)Q=>LIE+s0VwB`#Y-HaP6cH_YhBZQu}*|HAxgQqEoO!xIXEj?O)98
zaC^wO<O4m9?4g+o<4g9UW@?=aTcjrjVg~d?lOaE(^`X`*K}Im{ph*cYhS6m#pf2iM
ziWAEj9H5OQd$HgfN`93f8UmW)vlDUN9j^yoi4$K%tNY``{2296oOm%tJr*Y*c`JYf
z)iXeX>iIYdEczPwo-uhjl7RGFV1!@|J|8QeGM5`=v2s=vJ$&U~=6g9-E{IitylJKJ
zUc9<i-l`Ji-_=~Np=B-UYjph@eN;e}nBVx01>{P<ni(yB^sAQ0H5(omUM2r_%DT<F
za;9M}T}m5&%t!EZ*f?a&!!PFS_m>!=EKY^-(;TPv0j!I!FbeSdK}WUp2?KSxfFD;S
zse^cYH%T1@_hgc!r|n(Mji5f%O;zFN*|St0e)ja~{Vv>IzaV87epU`tZ@|Oxfr_3U
zP2s1K%hWP}g@Z<}0{FtOR5hMT(*ITq@7o5ew*amkstyDE;A&M3@X3t(4SFmcrpU*k
zVVszi!_^)*KAQDo)H?jmyWw4P6@DKYqv&z(*p!FirSW&yQF69SRP<DME4v-O?Fx$P
zvD<gCk7p*UDmZSLtjPaYf4KTHJU#O#ep)?MZNQT?RZ%ece^LAJ^V(n3I)I=5MLmt5
zyuYfvWrhg<RXqZ?PyfbI?6_M!i@@HWp)CBY{-;`xpS|~C`xE^>h%H$7eRw_wv5zB&
zs)vnN%`kj#$GR2)m5U8U&p$t^pO;}{2PFWKmeWZU;Y<xO!R9ITuoBy&XlF|?RtfxK
zCxpW<-U_JvXz@fe5#NtiUq*|gF{%+G#-Q2}E#3$c=c6DG%VOz%T|3&+LV^FMKW;xM
z>L%hjZOZE>xQ&K4Un#ks2e>{OnsEE{KVu${^LYZy)?E?va`7~`H2j|W7%abS4*aCY
zyB7jOJn5K5D~ckUV_Ot&*oh(|p(2X5td&P$m`TRxlTy`0iI1dO9VL!QwHzFuD&{eS
zs<IVOH0^iGnesK~(nm2;+HNwkzBX0qL}QgyWfLXlB1$I8ol$bpM7cUB3n$8bai#wC
z6J>elj`<Vih8_z4>-$Lh|Le2yfA7_V6yCVjz>nLiX+AcHi6%pyFfPS^$H7{1z%V{A
zRvPBE5pt8E3P(zqEj1(L_og~LLPGKF$&znib5WK&Av=GXB_9f?jamMe19ImG|2qNs
ze3t(}KrYGhHwWZXS$@><V<Y{0gC~6TBmBEM-3kw1C#ceqa$o0!g;{b(PX*+&v(?rt
zxjdxykC5Ml)CXB|%{i)Uq&(VN<z@MQOeRiae-$1fpFB?;K?vumhAcVve3d^^K7PJB
zktG*mfP-XR)E=>Xa*?Xb^6$8Kzr@3e%NP4MkKo*CgJaa+4UvpLUA7k(T{`{x2KkP$
z%$(!%=lN8nPi~DGhI=Xx^3fgK@ZW5{W&9o+f`oV%OACpxR@JIR@qnqGOB8t$Q%+*J
zR7KcnBx%>tM&H-w@<j2IU*#o=4=}k3=V<kHqWB?NeU~Uc3}V(wEQ`eqmiRtaeVi!v
zwlg;+iYGg$Z~{qHOc#YcvVWM3sClmDtV_nU&fP@FrdPh{zQ<%F5rc<s+KJsh^?f_>
zs8UVs#0hMsI>{EPj}~|-ilO+$$5HK_puIF2O<M>4k+M}wp$(q<4}dQl*KGBRht0d+
zpp|EZdn^y)9xIF(g!$<fq55cD6u<XiC4kPwP<iOOrK;$G-COEF5Ami_HRyh$m%+8X
zeT7kuUY=G?_I60d?UNnV>K@|zj@@y;qSGaNdx)136z)$XsGU7Tb)pLQ5G9?}(H;WE
z)3zRBez(4G#UNOSUENh>53$(p9^G9AXV}Ze(PXm}i_QCuclERdEn6ZVvFoJTkA+`3
z@-sc&vM1PLe?UuA;ssykB5fSldp)C|JTZR^pY1xU!Qvu?T{;U%YEX~o7+uC+TjVni
z7#(N(<g=#2{bOiMtrig53WL=-Zi8fhu%j^Fd$Oak!fgM2NBM=>x2dCC>r?YP$xow4
z%<Uw<j>$I{ck*~5nQ3Eh-0=hEWCYDKyfjc83aGaSiuuv%{ej|zX!ZF(@kzA$c%YaQ
zqc#l`^J1|}P*isAg8NNLNc+Ad_1r-8t7_Fiv81b7I#5(}RgVl5A9q#r28!9;7MgPg
ziu}+aXz9-e6dQOz{#6$Yb2<HC!}!j?D0lA|32STT7zwec86yux-S1m5Ms5tM{bS|g
zShaMlY>rjMV`X)Fl{Z!%Yp=p%<QwscN5{yQI+)vFDt9o8#>zPz&4RJAGO6Bpag1Et
z6UjT=Q>_{+*PgAO8!PksDulVIuL38(U;B^7%EEKifiZIPxyOvp#>(3M>b<e@=l*28
zmY%0x8zWyo{|)1%vGTit2jx>^<fo|=RMntaCa}h<=;5Vbn<Zo9J3}Pye;RfNNNY3A
zwPTE*vLxcG8EGyWBcGrV`^xJn0c&YTGU*SUcj(!-seychc}CN%A)e!&^tqXzCilz7
zOly#QHA)qx$^5`e^sqm+kenJ4=0xMEqUWC$;UV-AJ*>T$c$+U)fWEq9fe(-q8J9KN
zS&4F@`g;Wa@B7XGwZI$I@2T2a`%SD*cPjL446NvAd>JS4e`Y)NSVv61vM#+l@E1eW
z-i63H-gAuTi_~TQ@oJ#~?Wq|UBg4Ji;aElzZ2RZ@v~K&7Uo`m0BzRb<RjfGFN7PD4
zZXTfW!j1P&m75SIfCI0EBW-0;q6lh5iC3knRARqW+pxdXr)sdL6ca*<0^Z9lQ=PjF
ziL}G>(Y7+&|Dk|l`_xF^*jpTwaizU6`P;dww|FtGb9HZVUpup;x5$fEz)y4}<U}XB
ze=t$4?=21`78!V0+C`Q17O!{tK;mI$&xM3NezscFTRe64F?#s;oFx25WLS0JGP>Tl
z22<zzJIg$5-{~w@o9gGzSnGVt0Q93$bGpcx0dk%ns}AFTyCp`rvn-82L{Cq2R(N=^
zb5Gp2RygUD1ih~MKN6a!$e@*>{jD83$Gh4vmKd~R)L$Mm)pz~nc1ia|*xk`zmiX!Z
z3rv0YmnZ#dOMlrCAY?^Me&D12@{xp@27F-3VP}6itINH6`^yDgKO?BF`)&mSx@ow4
zf-NO@SbQ!$Y&w@B*>P@9APbTeysS+oq&k^g_woJx{Rv;wpMvn_r?1g19^;HzhPq9{
zy8P0R&l_sDA)%iyZzbBbNrfAYS0FJ#M*l3MXN|D{a&knfr-EXQFZJc1_&Q3h#ngVF
zPRmb#dcW({D9~xGW}Qzp#~9l&9sXmCT!uaGt*cqQX5C5kkmRE^iSXCe2#!`WO=B50
z3{g>=_g3Et0+)4HBY^#=26aRBo{)0K4Ku=T`mkxINtI$+TVSMA#5-g#`IhOtKyeXf
zH)qDudd}QfQRh2q;9+;*EIbrNcf$Rr(d6({jG7-SmIvt`xeoL}Y~#@|aepzUWOu}i
z&!g0#c=5AeeHAbAqZ5H_j8;F!izTrsxPKw;0Rs;|x7%*)jwfHfRD{6k-)I=m7>B6^
zzNgg5Y%wQVExbu=k9pphf0HbTRco{57qJTWtK!uw*?0-~kI!U_%^g)!w)muz+LtYk
zCeFni-@|9AgW3M7v(%f}YC+$+sJS<Z@{5)l%d*A1OVsz-Vpb}4eTk)m)UIst(jfI=
zw%9T#?wxEgJ6(ZVNW<0QVG8u8hN(xh#romXalb2*91oA6K=<89uK39Ky~aJpy)*7G
z#B}^wORh04>7-T~VkWikC$Qh#pdI#)Ns0aDErz(Ca`qIaiwvx8lH&?>2^^hpQV~W9
zhf`vr$7+Egf2VxQoM%+tDOaiS<#)<M?Iix!c2FnpkoR?zO?SxU9p(Hx<*tru?w#`e
zPU?dxvZ<5&<_`Hlg8cptIXltZIz=w(tiHHI=5<kDPLVshs86TJ$Ge$}@09i3%;)cr
zHD{S`Op*8XkWb$spXed)yF<Qv5ykRxYPs>|9rC$B<_}Y3NxED&MJ~KbZofk={I&Ui
z*n1Nwr>d-Nc;DRYs-lXj3PlxD0j7XL5QQ*<C<FyWnF3CLZ4=bCv4J)!AR=}LkXa<m
zGX@X@We5r~OJp7d!#oHQ=0VXYGKdKOK6md^R;9b%w%`Bz{<Z$K%v#BF_dd_wXSnCy
zd+wRCs;4>jA)M6HJn#t4`MWu)<p4!p_$bc*ySeQ#+xZ^m=+?G_J<XHtaVDkxalAt@
zKaSVQ(Gy6_O;7#vy`JWfXK+hTbNe&j8Vh=wOS;UmQOMxuaCA>|-}A#w64w3Iw(alc
zoF29nJ*c8f&yKowXg&bl%f{Hu{dVe&D;P$7n|BNvpF7kJX<p!|b~rx~FSo;O$+)&1
z4oSh!Nt3FMZ>Ql8ZSd1{ywwJ;&_ll+ex2bW{i)*kMLQf&3TF|s6i#f1cS_+WZE;DN
z#w*(4%`*5^8{AeF>G*0{JlBR=h^6T`<iw$E@mD8qZi63Gw0+hVZ&tJ|Y=_}WIHN6|
z&;8Igwk-~*dc|Db24gO~(GKY`dbKTHsfCx?;@o;F{v-8pe_PzxK&9@BhPb^get$on
zXp1WwsnAP}l>Yq(FwzFEKcJ4UG?{3ls4q|tTU)%=+#J~s2R)(^_S?kv5N&p@`drEt
z$GLRJx8qR6HHg%Y7)*GYGy&==#(aFg;un1SX&I>l)Vk08-p-?pxdzSog*$fDTwjIv
zNgF+vy*M7R?VtrHhHXOv+?I!~o(fvFDNU55$&g5|${(w+V|HAa2v=w+gOvh1(3E0I
zrc?E7^>=Nt!%hQt+Gz@(Iv!%;K09pCsfFZZxLe|!Z`7mK5IyBhHJ4R<(c&~Jqp(3!
z7OV#|jq1&)12pMqeI50d@o^p1T3AsBmL@cqT*n&Fsjc3vqO~Db1W7ZI+O4(Wi{wcL
z32RevLv7fThG%QTiek2Fbznrs8DoDP`UhK_TL(60{^eL57*?{*w{>89NnBnV&XiLI
z`^zshNVVCCfjV&6iC@%#u{rod9oU$IXX-$>0#fJ)HPr9X8Y<E`HEoOP7z1kAw$}OW
z-7Lo_Q5?70V7I#eP_H!|{zP{kQ$0cWLxpz69BV8$CcUW$qu+#G2}sAI6Y*$&HJx&A
ze;7r5*8Sm&r1VSu;fEwV)gNxs_~08bw<zxD4{M6zrG79d70305p$?qWAC5S1;9GFs
zfm7dtRmGI%Trs@aAI4|k*tcLs28R2?o#Ky@{(L5G?hnDN83qY-Z5{0gM@r#HqLwxX
z^@k5jo4>pXTS}W(-lW#OIln)AR2Hwj0pW5ZO=VpHL;Yb=MZEY1tf`1UyaAUh;)u84
zoyuzsV$H0IE8c{ob#Td>Fr+Si@FuLOk30Io&-HQp8?dY)zV{{^ZisvP!SE)ynPP5&
z>-xd@CODLsZl$^6#ykDs{ib-mA8c)kKlX!J4?jctsm*ZD8*sGQGJ}MZj~-O8uq}S`
zCeY2~z?%?jk1Ht;9kQqO2YNIt?+1}*R54tBc9B8C)-HJD4LH{YNA`moU2sr8*yzPy
z-hhG6DHj8t$Mux#zu@G4aQa1@+Yd(m)fVgr;lDPb<6|%3B1+ib8k3)aJ(Sb4J^p%%
zeExm9ja0XMKN;it!RTIeO8dckeU!s(ud5W$i7sCpH<&P7T?gwD{l=;U_^^o5%qY6b
zcF}rvS9y`vOi>rov;?63mT?Ji)u8_jUuWBF3`u~Qb{v@i8?i1Olebg{U2}iIEHxly
zT{yn>c(ORWf{Tj7belR{WV`FT;;`R_=ZdR=LelTDEB#r-^`uFBbx<bENm9o@6~QCL
zRX6dK;_zir{G~V?NLBjvX^MX_tvZGNl8$?dt7TEd8C4v~mJ)GaS-fDvqexrg(Naxo
zu<fJ)G&gLHomPESpg(_!+K~PRYnQ1gWKfiPt^fwuXP7&!iO5M6@O5a}!ODONFYJrc
z3~sV1LRt<D(YM8q4d{#?S|;|KYL<&s^@e{x_J=3&Z3*DQvEsI-aN*O?fmYv=8*GWY
z3d~9<x|{BBrn+A(WWC%Pi%m0HfSM6L-BdTh@f@i35F;=5HK7<r8?{FysJ@`t3AFOh
zO~<R%ZSre7PECMow9GOAXfhb7$-wTSQAENz<5W>BH#?q4hUG|;@nLpio$r%@THoiB
z;d)XX(tlC}4<)M}eL4;%b5`utY0!}DJ)>=5GCF1A!AzKzLc5S|O2J<;VQDJy)~Dj>
zOgO6!ucU6Z4a$PB1FvMlAqUd&j$%~ev5ZDvXTm2m4w4DOGaFkz>lUZ__AHH)TQ^>s
zUP}$=g9e>aIAkJCI(l2>>V3NVqN+<bXqvqJe#<bq69ufIdD}b)n}aXVxv@en+0^SW
z&9MKb1q`rJrH8{wc&<4NDzeBp*&KEx<9E$f)!Wk?E~kG;&!-L4a%>LUGcQrB8%yAk
z<}keE9nuG~aba_qk&W*+R~`6ko5T8ST-F@+XXB>k@Iy9EZw^Ds;`rvUuWb5g@>Ujy
zHitW9@lG=sQx2~;gE{5!`)2TQIXvGCJ}-wSn!)jMc%=n=TaKRAaH%|!)z9Vec60hW
zJas&{!c`ja_TPj1TEJA*r8BR(QtzpOW1GR-F5KG;LN46V3=X((Lo>MP!qv@ST21`8
z8GKd~KWqjUYvSx?FtQd-Z3gFS;a4qSa-D|nwt&lZ@N^4URu?~M0k`VnM=fAeJ)F~m
zh8b{L3)o*DH@1NH8sM51@O=Z^*#hP@MzR{w#7Se$O;i%zapRB{@QGU;A8v}{TENkV
z?zW2iXCoWO(we^*mEJB|gPNiigi_<0`kYPJV$!<%IW&>Qt{S|vkzOir5W>0y9Ge7}
z5_Xf#!6c+VzP_Udm}XEfP!ZTt<aw%D$@p;!Tu%Oo80(7S>{K{cG)Twu)9|Y_db-jw
z@|o#)C>6G(<LAYJnr}2$kEY(0Qq_*G13D}QLyM``uG_^`#M3ize<nSB)iI5De~|^#
zvYw&qs01!62`kmm`@s_UZb`UPg0y!^;)+uAe4@h@rEyLfh?Z7%<I50jOBo!W4d0h(
zW#vBUE>hitKI=Nmp<}vEGAk1{EJl^My;=!FGs5Z6x(+408e!vNw8rHr{Dy{_42LXt
zad9{vQ#TbdsJGcb`VTr9`lmAchK5Dd5)idYgjOmXv%^<3o5~K<AAXXWKWd(|x={98
zcRf5P_vj*Jd(qr=>AgrQLB;VRed(k6`jXVXT2;*21{Eyp^7ZZhr|{oyon^|E0BD3C
z(x2<#Y+8IvbMI~N1<k{^E=_x5&P=%n2!k~6X9t=czkm`>bJ^^)PGpv`iu*Rz^cu=_
zit0ihZtOD#@NKUGtBd(nmgX4)sM8XLnXJ_9MP;YI)DGl3chM_GkIQyAZ^NqvJ5OiR
z%RwTnr}ulS??)MCtH_^5+F_^{4xt@7jG+c?pgx;s<Z~jb(rt>$jOL|>jeq`ZH^*4>
z(y8q84<P?bzo#1KxZk$eFvl6Rho35D>6c55?;maQvsrR{CAetEcPhcW6iUoTMN3X6
zMNy>RNtvV=QNs3iC7O8El<u%)tI*+*yYN;;80*BJDyl3LQMWx_&86l6(a@}3{$cgu
zs|!q@=R3yT_mcQ#@%ibn!N5?uTDTodhhs_3$>|VEwbAb<Y3i5!+MgpTVPDlZPwYJz
zYGK2X3^ns?W^oAH@L~oGGWQxkXQ<AviPQo}IHQD9wD!3;e2|Poio@F})PoGWQ}Blj
z*jyAp&wy#ENSq}!vYG+W)Oy=9;En_7cWN<Ql>wg@!=)K;q!=zBJ<TDc<=8aQh2|j9
zd>Cua%P*=1Smz{aGY;6Eo}YBKm9eY{u4`@1NXE^r&6%l4nn)@xYHj+{@Nz5jwj*dP
zZ*9&kok71N%HXb6=CEv>+uEFzjq7MssH{5vqP#L5=EPmZbmEV#&2OAIp|v@^!hVB<
zxs|duw=y?X!mF*!t+}m8v%E5%YHcpMd%EptYjfYd%EyxX8q)EY>i?kNPix?e*5=rn
zxpcg(rV2e$6Gyc+H`h`zd{YaLw=xIS#sjTPYPeG9@_LO9v^GcA$HA@50}aM0r;{7u
zrPe0RcOe)42VNj|kq0Lk6yR^7RFmB~l%H$v^j}+<Gn?Y_R^~eoAsw%INX0zp;k#zE
zGEYCOm}{FU&G6>9sFg|M#B*Dj(;vYJt;`86m3~)CmByius^jC2)*-9k>MN~HT0=dZ
zW}Zr&l!w(dGseJ}LtRS|2hE;ZW+!19&3JRbhe<;X63!ICD5+8uYicU`i>c<q4F?=a
z9c{aiulGk?TbZrt!tMXi1k;$V?pU;XoDOxJEx1-;ic#fZtB2*IQfhJBSEayj%cbL~
zCbiTC+i_YcdSz_?Nh#Qp&}L&PIG3n2*AsD0DHxH2<LEJwwACQ~_+;Ey3I?kSZc%C}
zQVcDIYf8a4#gLBYXCQf?(f-q=U}SM5Kh#v%SqhF8$6rdq%}nL<qpa3fO2X|d99atX
zm2eCyrAh`H(>gbGzo7XE(~VNgOk<USw0k+t8C`4Ay!na7!hA(ZynneLl$dVNCO9h$
zr1gFmjb|6yVWS#6Cf|0oD}ur|ME(<_(pho7WxPta;A;+Jmr?7sgJyu^L5Et$u*G4X
zvyN%d=QD>%ug9w#Cbg57I?V6QoZSvHj5e|wn^2vOcO^EW(2tYwYlpctxh@?~qA_uY
zc{@c}?Jk;e&S8#E?MlZh(vbMNs!(3Cj3N%~W3D&a_W4b1mCE<(4sNB9`ftus|9K*9
z*N5wVo1kum$ryqMpUh{j?9<e<wz(R&_uw#owp5^PgD9lrO6m;Cpsr0CA%K%=eaCRe
zPn0AILjAU)g!}1{c{m#mC1NC-=3%Piu~a{^VQw<|%ff|Zypavdsjg<j5H%?Ac5%Fr
z4X3iW#A%T-@AgpA^7$2YY1^rLZxKcGp`E6NsTl0pxmL6({mEv8F~*R&mGTgCJVEbJ
zv_y2H3Dmo{vp~DP`ZHugOWV|59yG;03Fg^c+mqmXo7&^!qN((o?6^A#cHv)0Pm!gj
zm##&t7_9-<T2^MG@?3m_9&zv0pg%ys4{E??v_hl?98JKrHE6phTv7uLC7Cy?!?_}*
zH`RcH$w<H3Qy&~#1Kv-=fi+-vS{5BIDAs&L4H%kLlbEAQQY7nWP`C!1Dv6V7z=l%F
z<-Y6-)Y-bG!YUgvmsFl+C!l1}=<#_2{zhwYmGm)M3n|Xp@l#q-7PI3r0_t)aO+b^I
z2NP_dscQsB5Puy-?WF`<NfLEMtR}dVh-!J-#H32^6TDNzrKERLkD3b!_h(p~(-|Kc
zlSrh;<W+L8E%N~-1+vB%mr1-(0?!hJOJ*zWw<U2ANk5guStAWtUMg(NC2?XI97E#j
zvJHk494Uv2dbS)Mps>s3a2LTKdN2@7DUa(2=9b5$#GG~4I%B!gRw$+{w$lr!O7!kr
zhf2t~T+7e=$``HFUbzQnkoI^rRB0btJypfLxOy!WWw=JFf&s4j$4Pm>)n*Dwi);U2
zsH7jL>rm9?^-#qXX|U2%kt}^+i?M)M6B^?xf{z>jRcUuN8DjsO#QhKB_ID`N&G2)A
zUz?*+o@jwT6O4ESkC5`nBe;iPaZ5Z&@OeudPB8G%h;2J@F0{5RVy*EaN$<76DHOP~
z-GoHt=k!y!io~f;;{bvWI+q$laHVs$3fuJz&LZi=Gx!5ZOP>8SNojYyh)WgcMO;9z
z;jeg+;D^7WpE7i-TPr1<`&-mX`LUOA0%-^Oa1_B|AO1pt!(YKG1fyQvYgl5hhm}dV
z&nlbpzUqzhc9rP&{)u}Cmi`k@5`5q{HrkHR!PddXFe_6FhZ{J66gvr3QJxU_%5bBq
zI>#T4Fe<5Vs<w{aROKUfJZe{+lXI<$J6T=DW9d%H@0@BduQX|hZH?<R#aGp_zCo9{
z=Pvr2Tl~mIYe(s!L_5>WvC$G1oW{4Voc5Mw(NywKs$6||j6Eq2>MJv<Stz3JK)qXS
zwnFp}X+?Fvph2ozswtcPZ6f_W2>z4^vsDiTEj$=tkf4$yQwgX;gJVcmQ-?ZivG29+
zA@&^BuC)DwuGh)5HJ2Nx|8rkcHDmZ#6V=k*-IU(raA{N6YOhbn6A?da3ZoNnK~ox6
zwvp!DBs}kinaQ}z4ZkK=Kk5b=s#(>P_A16LO<_Q~?Sxy+Et%+s-Sk{_!+?zYK5@g&
z3|#4kO~t=7NElTLzjwpNQn=0y$4lX6H{2;5RRK54n`HO4T8eu$2WK^f4=do5rf|I?
z&T+$vN-s?#N);U56xLM50Zrj{)rWs>0>|#bTW&a5P3fu6^g8*hfy5l(GRIH`YF4M?
zP%S6v&(^{-P2j8AinF1v@)@qDV!2Tde`o@;8{iN(jA;0)ak~l3e*iBwfvXQ99iOK6
zV>gU%qK>JI?=FLr>}p3MdSs|OFx`gF(iYN)-=f;}=)(kBW<k$6MeX#Sf!~!;JvRfg
z;h=3VvDYWz;%vBHgnC)NNXD7ja65(G;^2}4=Ven%ga!*&XW+zaxRQZmvSD;_JXeM~
zlTX`7__YKM&!(GMFFGdYm8vz|On-|+KIx^Cjv|IzEmly6H1w)AWl=A;cMR_)Tfb8o
z@UvO##|&6y$CVjy9cdwq+PmujHMnWRwG7(8D1A-_d_^s%449duLRS{)6waWX>2Y%g
ztfsS_0SA)tIyK@`kn~$p@KOfMN=5oVQHtZfhbh9IxSejU^tM0)@ishfQ(axhZ7|cs
zTPDyrFs&lEPVcW)y-sdUFZF{Be3!2e*)q;=QU}<&F0h4GTX%t}wDPzM3`C{5Oj|*8
zfp-#cQ5Tq$fHS(l&k4J2bGyKtWZcmO{3*D&E9_6fnO)&d3eM{a;Z)q}h0STh6Sj1P
z6PcN#y1<XL^wA63O5)xwFpIjQyTGMVc&ZEhR0=P3ft{uC)2=Wj8$as`o3rr)FC4f_
zx&HnxT<?X&P8<38(Wx}=<lqu7tj@ukl!_c2;f1d&*hqi9g5nISh~IkQQbqj93-46I
zpS`fA5)SAJV{-AwF0d&V2YO*nWxV=lSa3HU|1<2n8<%&1kyNd_!tyFOkz%PjCt<c1
zX4Ps%h46muA5+G3g#}G;su$+EAED!$P4V)dVg5sS_Rp~Ep>OS^+V=>K^}_kKHacF~
z&PD-i+7+eaU<W+#XW0Mv34??)Pa&1UPfy|CE)aS;jiT7v8A-ptGyeK#`0^QbOy{!v
zG*x>B)6xjqQ6)_8s0i;PuBCs`M!ahEG0rzS<0np<YgBWM6OPi`fK$yqyy~P){qV4p
zCP?f|j8Z@fZgav1v>`waETDOnq)Ee%oG>RH!%i6MXf!nkjyZ6mleUJgK*!57kgUGQ
zz_U)8mW7v{K#SW4=fDc}KD;**N94f8OdOj-H;!$_LeiJP_j6!qHZIM9Ddm*ywQ~4r
z4vZ^L19R|cd7SA~*{MR;AoU5`D$osim+dk7chI$}oAHPpX_Me<_WMH!5kyiGx4>7m
zPxGs&-EJ?N(WsDjl!9DkXYsM}zvcf=VRRRNiV{e17wdyJRhJQtu&K=m23l!E>Q=Er
zfA7FtS~5M5y5f8T{*ECli*_}WNv+?hM56&eCL3pr^qa}%0$VOkNw{jmQ_1EfyE!n$
z9GcjGevSNNv8nNW8Aa(0eSad{GVu%RmPgaK>p(7TJ_a3nQVFVfN*j)9caO0d);QG}
z!=yv<$zfEc1^X(Tbt!Gn<MkxyKa7qR(1M^Mu!p)0lT;g?j;UPi+0B(-+DqZhaRyGQ
zWG**tV=B?YzV1I%G>0Tiw_U7g?n_1zrlcSpZ%D!6mCSEaaBW33;bmDxwTO2>C38bM
z{#?;KTWn_Hri$k7(s;6>87zZ)Dw^My!6OyT&$4kl8I+^xIA*vU&A>5FJ8^nNb8OBx
z1{oA67kXzNVQVq^w`o_DK6)R#MJ@9*<2!rUoRnq`EK+Y&ni(#FW7F~(Tl4T7Sa7d`
zJ4Ov}$pJ}l)^LqU0-C)uJV}jpTug+mv?eP_b<6*p2(#??L!xT&pR|g;$m95|dPTQt
zN6!z`vuUcmlD~|aB0aW@YKE^a1GKlwjxw-`Zl`5nUqTHE{V)*+Q)rsf>`%iRrD=<P
zS}6{j({U7OG8P*|nv;dG(y%*=mZHO1T0K+-XqM22WgtSYM-)sa#ZjE*&Zs^=S{iTE
zr9;xWsqWG`Z<_0ksxdUlnzc-SDnLUxKO!u!;dO*PHXNFurnSD8pyr~CPJlh?`W%gl
zLOzm8Vp-_h#L85K;sdGF=|!3Bu3KKIUy-cu(AZ`IJt<zaSaxV;Va7?@89QxBl6c>O
zqOg{pyF7!1=KRo@lGML<4C9|4Q<p+6{nZ=pqdhciwqGilvrXHYT$8pU9hqz1N?2wL
z$~8|U;WxSFO<E{f$$UQrH|Cn#i{fb_W#C7-=Ix9MpX8eJX*x)*IVDqR_GQ+m&?#jV
z=gYg)FU=O%nQLyVP+?lGd9?zL%QX*IRGI?yDDL{2w$LzU8vBiVN7pcE_~=e`a|O*2
zz0dR)!Ef%PcXb?E!~B6B%hgSq;QM2Bb7fIHRo%Rqs*Z=I+jdo_9RSME@!VoG3DZ27
zWgA!B+*o3OF|E4!T}hl@-JDknf4R?`ojuLCa-TW3B3`O)-mZjnJTn)GG^4WebgMEB
zq8O^!=2SN(+=HR&=Addyv#A=6tX?qv)?DvlHj^Iow|?vOu-5U@gaUf|KVa@RsVm^O
zOk49i9C#1y*YTX$pT55Zsnf4I18JlNaY-W3swbM~m(XN|Ro(55=GJL$GREd7n;{9c
zBgG&>ZJJ{6Exq#>gOAjZ){GRqTnsL#KA!<a@hpX<sj#_f3}LL}0U9_^b&S>|LSw2m
z^da#-eI2>0sMleEiGDkrQI{FnSQGpSQ>fKKQ&VZiEDy)2dH<xgX59C6ea!dYoc}@T
ztVMw@;v$n?_UD>#lBO}5a9O<~z+&5TbgUw)&JHT5!3VnH$C_$fm!>(aHL~dVr1AHu
zCj3IXM=)E48cxz;w<whqElr*<f?lAh<7_xJ*l2MCNi)*$6O!hoThdqQ7$IqQ2Kp&%
zWAXX6kB8AKoZ4FaN@?n=dM6uiQ26m|j1ep?o3V+4FPAq*5qx`><zk1*<o+DoMuZ&|
z@WN19U{eX#kTk4v^^pXts+Lkt&sRfbJh(a)>GT>F;arWuhDy_w+N4`n4~Nn5lKOXl
zNHl)~oK3K#0Zt|Ox&e+QxORUz<uLXjZXoH~#<-ebnj3$mI8QVmX2b|*w8X0fi&~+Q
zPPRdn)Z=aOHUUilQquUxE$PJL8H1Jm6Elo22-iG?3ch$2zav=eZE=lYW>@@(V%**p
z#}QoZigO4CztC|I!GsqrZ+E)k1(N2ygi(U;U&6x#gZ_qLf-~K%FdE`NNX`cJv|^ap
z%cdgwxKAk+!>PVm${D@n?k8!}0O~3tyg>Lh;o5-)7v&(sp^OGmQ(9$#>P8cFzuaJ`
z8|6mYs==<_Pv}WX?VYmlgS`$N(i$wfXVMn4Lz7@+q6(z>fkcea>>%qkv3fJx)D-AL
zo3+4NTf+${>OJR1GVGvwlLE8tw0#R4qUFmes)K2^wQ+&Nfs<*Cw7OJ>&@>~fp^}_K
z8zfNUi`Jv6Dhp+-3*nwY)_t2MAS_8x_i%a|1g(2Nb$ZeBfu{b@oqR4@cXhJ*J6H7a
zwwLMP481SZQd4?|)KW>BUK57d@h6vBmi?^@P9)mit_f3$;CL6%Lv~qBI9~+Uy5P%X
z++Gvt&V9@UpQqr$n(!?x!K|q!xSVmpouansE?Am|@3`P<`h4T(nlQf@-Xb9bFV=+V
z#c{ujE&zPr1s`SNJ2l}@CXTNOGqdmu7wpKw&uhYstnzDX!m$##&;^63o#2AK<?x4^
z@O?SFT@x<c)s&9Ea^fcPkb~s^R)zNrGN7yBNKH7Ks|;efxThxklG}!kPgbsQvL>vp
zqFh|Ag3DYmrYgSef&*1+->Ct#Fy(p;m|wjzIig}M)0fJHdVt>o+K`L-9g5&Pw0khM
zeXNGkJ=8O3Z9YX?FfX&IEtvP(qc##2C*!1|@N+VbE~@U0q#<8)7wiCS$bi}|A=8*^
z(p%j1POvEfH+F_GNo#33I}A))WnAbClZ!PX;rn8^qZ5tvr&IW;OkC3$hG*eNogtKk
zpLB*bB|^rW&M=#no_2<%^uE<ey<JV~3|q_NtxhmC_l)slC*vGV<LwM1s+f_^Fr$k3
zVJ8?|wZyxfVOBMycxK$IsNdX&mpj7v>Nu*C8YCaw3D#7{v7O+Cr3ux*sh!|(4V>Kx
zZq`WnwId95RT<tH4!Q!iZ5@H8+zsdqdu!vaj&QR!UhN3C>mo%kp#f6p)&@AgBkXN}
z!H#gNL4{C9_^M%v$sOUHMk?a{jVloIKobmign4dU*%7w56E1aveeU}xf<RL|)d^-d
z#RJ5D_<fU9V_G5^uWpIa&Tyioi;ky1imN-po=2N(=mggvYe`XVZ-sk1!K&6s{41?j
z85F~sws^cF9B-%6HO+&RiZdSNXl#4@xDzaBk7ql=uJ+|f6M0;5f=?p3`}L_8=$Ni^
z>vLyXd*c!7U5BQUtTNS_u%*@#emV}=aTKcEyGcXc%9|7DDT<?PuqH8Qe-XHtSd|)+
zXOkWz<~PY0Ov&ey+UF@|@!#6(MXdI}iqLw$x!2bCe+X;%@589A95iez^nj)1E6(r#
z6zBixFuKe9sievejb*f<eF<K(4YHEPON*_1ssa&_^Zl^xk$;;v-FBckm=)^aS~Pmm
z@?-NVjRc{w!sgzDCcS);W-{V_{H>+)FJnS#EV&wfXd17)XZtvRJ1VYyNbQY&c-w%L
zhV2?REu_6sf)-d>EoB-=-E2*?Ij<DzMl8c9dHX{<|3LvGXva^R8j7$s|GZ&S?T(lY
zj;O8xWh5P#>KJMAzokr5>vd=_Mr|6zlZI4q1`WGV^ZXL6qDNR|s$=CqS}dxZX^nCP
zeDJs2D_vZ^eh=r4k)@^uQAVfRV2Xj`ZPYc|kdv$OXw|E#M)~%%9@02!<b)H<Wws^8
zwgi)g3~5>8QG4x`zispNuW6vojsHacsr0N3!r$k%R1Qg$pM(WwWonVqk(E2=)0Wmc
zmcCuR*;29Q^!ojQG2eF3PQ7pG^s9<P+!Sj`?mnUcAd@!3Tx<}izzQ5ki$;XjX`^=}
z>akEQ&8?~l{F%Dd&r718Q>uwOEQRLveU^fU)8L(={ec#ikn){0`dO}i@_8(B56M08
z15UJq1B*T1khWI*(As8kk*zatvshI1cdOQAHA3=0GwEpROT`ZAnD&|PK^vPkhUeJ9
z{ZHbx3P8)XE2<4N=2fI8G0vp5E{Qm?A`DBy+ZAA15nNmm4i&?9E5c>fjlMkl^F%r(
zZ`s9FANE{T%G8x~!hm0_6FSL8P4YX_7TS$j_S5RL(w-NQ4)C?D)Zq@aXAXusz(E>R
z?4TwYMLWPk#Bc|-U;DNW5W_kbI>7lPyw+YVMVQ|~O)whU0S+bOxwfz>1;1_!w4)dK
znUsoyJg_qrziS5{q%|hZC<l@)?OQmQ{AA$%b}&p$5Qkxz=@Z+*i7Z^>fmJ1z8b>^E
ztn?y-STvttNIO`Qtt`%ED~n&ssyMfo%UswFX3=W>b`UCG@mf1LQXZGJgNt{mwA{K2
zH?*g1OR}bUU~<JrH?@O_xirZe4&)*oZ?BA#+C%Veb^OWQc&;4`t%4&xu&jzo@9KNH
zlK=VDa6||AzM6{b(0$n#Jut5Zp7g+>8hFP8*If8+J6K+Gnn9{?ZQRiwrqmg2kk=XY
zmK&6S3-$4{w#M!HxTUQz^nTpqfj}cX*$x&r!Xxcq>jNqyUq4Xnc3W6an>@6G9gXo5
z5Bz8yf6zo_;ZvGR+a69g=|c&Kx$(R9aLZk0bbC1Wkn%I<VP&=Y;bPyl1)7RL{%NJf
z!M3oWxjLTM0(ZAH*0va6P$CXJf**MddUVq9x|TSHjvrOWUp$J}+8Vd4<Li&LpdugL
zS|#pu>&_IqwGEE*7*pD2(eZE3zz2<558@))^G3aeokkjUrvDYes7>|EZ%<IY?{sOT
zsQs0~Dfndy94|_DE^V%=BY$Z<+Fd8@NF(YW(~?$)xdqjDI4zvI=rDgOI*4YM<lVlk
zJq{c=z@Qh{w&wlnV6{=1eq)B(z+eQe2+7wgM3<x5->+ZTpiRbTI}dYkmbsbQ)mg@I
z(>^N8e2?1ISq8O&=VqBPyN!-Nq|I<MP3r$9=AHx<`ZaBdn`xe>W$syKIH{gL%N$yS
zmIj++lV=+w{F<UjBhqN)u=!;gEebYgrq?Cv>|!fbuzr+TYmQ1{FZ1QU^vYAJdnT7b
zhMP)ioNbG7Adz~G!nCuT3emTwT55E@vHBa5S5(*O5Cds4E{!=+r+<hpVw>7&_YmoA
z_@zyaNo?hJfRsO3{wusf)-=&=dJ)<?d9j^fO=89Oi>TH5Gz^zilN2g0b+eMxB&+#k
za|~R@ekyT@{jvM=7-iKE9`zMa$Kj9WdOLyT?QD|LC~vvHc}uU+$eK<<6K<&w%5tG!
z-^-}($Ct~$M`Qi!jx>?>3$?>2^B*7ZZM!D3Q`V{Kb<zHpuent6`L;J@id~f-#ap5y
z;XL|(350iPsTjg-)3KNziSk;WuAaa2l(}Z3TOSvYPL2I}cG5&q>6P!gUCqg&&UqSM
zv8y!=-`mx?=M#4I4t2;5=S;j~hnpsTN&EEKm4^E7=~(5z8M`X48u%}%?)+Y=G-)4e
z>lwb#n*YW{A<udToljbts|sjG-tM;*NFr|yDKWGdR{hXeO@vyHG}j_gjXQ0lD~o1>
zCc->=aKMCw96F@uRWy-CDa+HbN{W=CI;Oqy%0L5lnm_}zVSY5p(rVf>nBE~5+3@pZ
zh}qP$o#wG51MMKXls87G(#A?oQT3$iK;M4ssg9cP=E1YHH@C6fptx^X30q_(Y%@JD
zXeV=237(qpFdeHoOjgP$HGhW}nsXLanYU9@0;zV>gPBU>QyS(oa0~sfADvH=CL!T&
z6K2|QF?GDq##+|4Su^<&p3=i|@}3&dTHYN#r(wD7Gy;h0y2Cje9_>#5eAMVbci2c9
zhjv#JxfgYZ=`^jKR5W|)RCjB9tvf_h@W<{z`%d2M4nL&gz#cF?4M+5V@6vE=515dS
zAM}9J>A0kaTAQ)H2W{PkD|*0}4&2%U#ulUXVQPiOp&qp2omPXv><m2L1A@i>`F#)d
ziZ-Svj4GjikCdoEzcfjLeovKBzdx43DLvs*S(TDI<?&K?7=0Jc?G7vNQpev_#05QJ
zPcCjJeig+(UUi5$t0zpV-<f`|J&5$XsOig}_k_*O)bY6HxU?s%YmO&-!g;#?_k?LJ
zS|8~NKexbDJ>l3Rs|*s>JQ}nUmzGbF9W8gF;}f1UCWS11N~s2P%qG>+j>^@Aj@xY%
z?f7R^a;|h4V^GM9=Q4>q?)gkQ{_OdZbbR7@oY5V2zJSX6U)1l=7nR#>FWy7H=U#e~
zG*ktPzDsok)YO}wth>u<e4WnxXGYe#K5$dj@Gt2U_JQfD`9*U;)gkq#_k!W5j*rt&
zYHu|pdA2vrx@kDI7lab=Rv#EyM1|6p$Zx++b8j%*8<r>Iw%+g_-JScWX-6~qz>1<6
z>J2mjcx7+3#O88u7@dk&d#l-!$NIqHR6NrMR;S{(<R=w>>I278ac&>DK(ieCz)z{T
z@O9XlhRa@872%!NVOBbhe;pR3<Mh{IPx@`!`>(_B;x!_@Y4@=f2YSQdO#Gl1T*|~H
zy<kJu)1=u^0(bO*FKGb24~#2wz;>t){8+x?;6Ct~6Mv-?<>073Fggd{>jl$taNVo$
zK@Ki|6^`YcH`cudJ1XMx*WhrafyVLI;8rdkcn#jKjK97H>+fz5dKJP|kbZC8tA5|B
zfqVPF+*&xZH!Q7%XJ3VNG!^nym_kz_Uxm5!YW^y$u8o^th3$1RNA!Z}^*Yae4Mx?+
z%df!~^^uOhtB>b;!MhC_e@*4y5U=%u1r71LUa+wtPV5Z>@5gt0!<qYW2$gapyxj|q
zH^Mo+;hn}R#+}yh!6pZc`MqIli?a0lb{nM9IoL)8FKCOD<y-A4&v*@vcyPjNFupy~
zG3^jY`mdi*85sDKVxD`d{w~Vo)42IH8b8H@y<ka4+}#VtcIvmj7aZ;U!U`%Vud@Bn
zivxSX-mc2(QdgCM$<N{0*I?aqc=a{7_#7^JP1Vl%ufl>CaLTJxN4J=xUV~}faPVtz
zu-oHweETK*^;P)hZ%D`2{)Sgyg;CvW(Q&l<KS@8jr!tQARE|FOsR*w6@Uk@{#r>{<
zHxtwi8DJ2q!zI)ZPlwaAFftid(=Y~Yl#`_X-+_i>zbpy^RZsZ(bVb>hj>qX`h3;I_
z-Y^>WrJ?%b^Z>MO@ncN*)rL_MzEYO~O_I4pGvpI-Ee%2?A_bDi0Y%`eBpgzNwt+43
zR?=IEZza5iZ`rNAP4s^W`D+=_gT7w+Hlwdc@J3Ao?xo|7^i>ZCd3M?#r?^N?Zc|@f
zkn*ocx(!lH-Si*XY0O9X#e7eJGL;9E<3$RbY&=gXrpFQes<0f=QQoNkfnH%(7wCV8
z8;7L#QM?<+YKqm@p&BRBQY2^e=ME$*ufRxq+46x~EpQ&Jgt@BluBabtUtj8irP&?o
zu{b4xeg><}2K~xwQ2l(Ne!fvZ<TSZ@YifN_tBT7*C7iTHDiY3@Xo}UK4%Mx;3HDt{
zFgU3${i?)B_UVrw*y0)b`_^kJ1r(U2S`+l5Y?b9X8w6<W7PqIw%5l^73e76Fk4mAr
z-|1Z~qs*s?-w)3i>M?liw|`d9YohM|3x!k5jA{ur=n~Xlhb&A`?IwWBCRHXH4tbvj
z_Gl&`tzc3GFhmu=74@Uin?vub3TtB<3sq%Q@&ovCe%V=%^i;8}zD^pq->44H(Sl!^
z>q2YxITzAyu~)_R`E5(SfFr2N8*S)!q<Js>uCSM(Ulol+SFB5ekey!AalV~4`27<d
zQ(*in@b7w0{#_*H{kN~GkNb>?ROV8<s07sffb@jB^^1)qcS!j2Z!(RkSLwgVfV~DS
zc{*<-(4nrI$~MWC{u?)c-&&S|FKi^HwPsjd>X2E3(n9mG)9O~3V8ELRhB-<t3(O<@
zRNYFeqq#ZIgb6mc+G(d89jfB1S<yOM#pWC4UXzys1<hPK%okYnFs<QOhA>s1axp3~
zOVttTEShhs$=@`)jkc^RU|C{}Vr;bGO>3bas3oj)n9p~K*|tY%`Wvm#NPu^dI`KAP
zE*&aHElyert;?q!LyeM~*f6=8m10L<(yq4EqUm(w%yTrVrA!=kEX;cDA-W{(xEiUq
zyaR0=MC0aMTO{Qfdu?-U7wCTwRgNYkARXpQQ@P8uCq7LQrp^3QVMH>$i^AceW#~Al
zx@8pcVNRN(r`lDTW(HFakWC%tbK-azXPea7L1E)fb(lY_o0^kowM-W4>52MGI9_e^
zqe)9T$?lAabePYs*sCK98W#M_3bfG%#rXpr-Bb!Jr~i_el=B9a+E$vH9G^y7^mALK
zpWg83Fkf7S=1tW&`fpPD(oU`F&IymSeG+VbdQqWceF5ljC981tQ9AYg<MT%e{80jb
zl)xV)@J9*!Q38LIz#k>>M+y8<0)Ldi|5O6uoR_R%Z_(#147U55g<2nMA^O&WPcm*3
zJ4gSf7C+jRG1OP&evFYf8Qsr_ypl02=pM#$@X?1YKmNxUL#-LTM>*X2BctakBb;XR
zpJjAiWDHzpbgEa?fAjIL<M8M^jKL9%{*i*Trb~Tdk}mh>BKKu~kvAA!{TKs+@lgdo
z?#6ze<b3#^mV6Co42T>a!E#j4*OBG0gx|QsAMG#n6o>mIJSP6UVyDw_LE`s6&ivRD
zj85S@BwYcCH>A@cdY7P%U;A^3ACPdb_=||F<M)2T`FFJEcmo|6!^0R|k}kKPSI{RI
z626XK`-_ObpoGW7pHu8~{PQLLn1|yF3NIqE=7n`SHBZnX{O};Q*L=q^&X>QP=!Nea
z%Cc`@L4HK|An6W?-%wmSE(kByhV4CV8G{=bV;dR0qK^s&<T?rog4EyOD6Y2-sn;&4
z@35ZrQCbqHK7NryCg;l~7_zaf^F4Vv%iaf@S*l1AMvt4(IiAt+D5Fa-An1Ec!do$h
zUSsqRWb{aQ_#Kv`?=tH1uj3C(yl#mX9%7zT;)%)iqWK}=yM!NZ%6zZzFU0YK!gmVa
zFMPM8FB-=W2;U)mxA4QlcT0W`$JzPC4s<?rx_Wc^B5{15@MD5uv2zS%{<b*2S9noD
zzwo`1E`46zpYnMPJ-~k4a(=x}vFs5!DCb4n^%Xm(*aZb$ad!SVyKQ0@sVn(xAn`sa
z^8JiaK}RE&eSH~qeaQ1upY<{E6BIu_vD5V-k6%yx3*RUFu=v;cYp_D<e?y61(i0KB
zU;GCI!-6_}+CC)qez6BBpP2A<e13_~RhQ!n3pymefY=AMA2E!Gou`iEOXCwP$3zD4
zmlxkk$=`j<bJdV|yD>VYUIkq&M`|&8MfMANYD>6a;1!l#BN=sh_$5B4#1jyVz0ACj
z_|xZ0^BuzTYyRJv?~wTP^{e?HJfG(GWWG=Q2L$zXtnFgendjAZJy;G%JPs*GeI0AN
zsMvY5U3az%zRIYtW6h5U->vz7W1cVWI_b8G&rhVP__>!c^b(_2?we8Z6BG;!>T=KX
zQ;qFn;>R!Xdg97GkADyIqr!IxKP3Jmg1SCMB)twvZ&1+vxTIU;SVxw_B7;V8l(d@j
z?XDs`L5KK>h#YvD!z1EP`|%~Q{kB9#PZ7qL#$=ZL$mmL73<&D{_#_=Jv$>^mB`^k(
z8NDL=eWDi`5?R*epXUcz?-5>1{KT{@_wPKuo%wDF4-4NT{&hMpNIHX}cNAeeX9}ZB
z<e;R}E3!_Xw)Z57orHVD-Y>F_&%K7rEBYOmzvBl+zs6~j?w?ri6?9&e^CjrL#&THD
zF<Ig-&KMTd>D2Lp#N!i;{m6bi5|6%rXnrgv=@5QM_+jDe`-kR7h40bvXuhOd-#0Wr
zB7C>-UBY)tz5;@W<@{>9u-LhDJ_G~TrJUmUA>liP7ZP+&;qubwr{n+S^Ajn?@%b_s
z_4(29{@(MW`M>x4X#Vd#KbrsFo*!-Zd(V&N|K9WClk*e%na{KD7e+@GmuKK3IiGV2
zman!8-DJLB?0jP95WcPlhb11*4XIBOpTog^eG*Uf{etmmJBRS2f-$j+317$KTKj+Z
zeh^OM^m)?@rc=lJd+VF#|K9qh`M<ZmY5sp(-?ZKDt#6wDd+XaaIX{t0Tn_@@O8t@h
zyYFo-SGX*C!Kg;zhvj~+uXpX&FX0hEhnz3B*oOr5eOcT2v|mAADyPFE@#y=q=6i(~
z(so6e9}`*Mmo?ub`k<gw_!051>#utq*I%E!r@?tH2VXDt?|z-pcY*aDL0t}c_H8)a
zDfXT|Y!{Sr*ZI%mw`RUW_}<>k4++0PaZcCdVvOz#MwiIj94r^sj;WH);Ss@MsbZhT
zSW0AHQI<PqGDgpKwTdPzsLQF;XB-|p$m#SPmi)D9VNqf~Glsh{Mg`#|mYssS+_XQp
z_z4Kc+Au#N_PX3O-z7Z1pjY@Y;p=*%`A*^a1S754zeCca>y73+v|mBD@Lj^!<q?$f
z@bBev@b6=Ef6M4<$?^D~W7PT9b|CzKU|8(@FEC%nb3x*9M%b@M;tOA5+1ZTwLG4FS
z$EWQBdzkOj_TR7^622~H&5uZYUg5ii9~Hh%pL;#m3;z!Bzl+g*krA45`aHWOyjsEX
z(DuGBI6R>3C4UY{hfZG}e<$<(!VgP)5%I6nH(Ao>+`@d%Hpb8?#%N<H??#Ny?W}hT
zhK27J86=+pvD4+O<8f>Mf}RWP&+!2J*ZI(Vm+*pu-t)|NNqo9KYra!>0YTq6=6i*&
z>$B!Ngy+|Imib}fyCpw|b^no+7ij;2fir9u6FCyck8PE7NO<rx%OSUvubdE9nCpux
z%;B!hjM3W6i!@|(bz%(O!{`&9E^qB8wo&4ha8Co~yE`-L^49#&2IhN&AF0PYuhbh|
z-kR_GocV6;zb^B`BIngJ$rr3)zHgo2QO0NowgZ=>>oe9n)-%S0?-0F9^dZ5B*tsNJ
zm&0U<*DLl>!Qe^u8`kmZ^Cf(b@FIeNDDy$$)8(N3yM-4P^q*k9Q}}uHPM=@lg*5+b
z@h|Cj3g*>2v2zMPsO^rkoloM43Fg&5v2zGNpzV&aT|na57MFj}JdIy5KO*%|pVy9`
zbA5F#=WxerMsF29kCA(&K0L|j64@g>eV(+R$V#?%OSnVow^Qo7uCJOOSiyXk@cmUe
z9>2t+&y(hRK4rdB_%TUmP-LC2!;-Ji66Oa!X7rfs-<!?o`-Jr&!HA$s&?6WtE%{$2
ze8E^Q>tn)mh+dbAPKRIOcM305lI;T8znnkK_X*!2;l3>9heg)qqWNCogM_<^Ge0V_
zuD_b^5q?aggZXaZdj)m<)pl;-M+HM^Z0FPEA*k!GwsQ$TBIqm1b{;toy8dduQ+Q!P
zSF-Tse23%8%OSjwU@VdOAn92d#|PmBH6rt!!q@dExIx;5MdZ9MW^^54jQqeD(|W0I
z9zk6Xw4cx-=0}C^Jj${|`1<<D<1dtWgddT3-NM)PK=Z>NF+VJPzwrIS50>Hlw9ICl
zFW8_I%MroJC0V{vf-xZIDaUeBdB$#nhXvgec-#$&^7wJzvdr67n$e%dsLQu7^loIH
z+xdt^369|N6CBAHoy_{!bBx~S8GZMNUN9J7*<YCv?q&?MVvJT{bW6Bb&{s`(f+4|(
zU`)_)FY{c29zlKHbv|6;Hz4Wv&y)K30^95JuK7;k`-LBPpZOulr#|nR@6hQMesH$%
zr5s$6UVR_Xb|7|Mu?q#+&N+_LrLTX@kL9x7BmD48=7+_PTgq2o|Jp7pc5bnYOlP}b
zYxbwFf6b2w-zEI$ROWjnKl=LD{IKwy!iOo$_vmsF)b{~x7ZN*%*f}S$onOi;B=-%?
z4+<ZI@17v}5Pn#2ew<xE>|#=nz2n#}D*Rv^-!J^A@cm<$4^qD-$MJo_kLc@UH1nOp
z55)1k!Ve2SJc{{l;SY=BdxReneoXT36~4ZXCvTGLdpP^^Y5wOd>+#lr=v^iF{OjvQ
z+lR#7FFfA{ws(|dzK$;{@%aXExc_a&prDQqzF~drE5^WKM)x5`9l!PmVjmEU2)d6m
zU&rs>%=!IK@w?;V4@taENr#SK`}@7|ca-?yO-@(rEk@@*B%OXnw_rffH9+_Sg)bOc
z$8uCqr%T5Z>(Aj1@gES3ieI1hEA=POPSOX$_Xv9Byy^0c{vXPZU-A=_e1ziiqvQE+
z^OI-yJM(ix@)LTU%PrE6(YKG$dzLZwPsYI4jP5;*p1q6_DKC9KwBN`Z93B(Da8T?{
zFm{vkp!uP`td9ymv|nV2U!RATTex1kUgdC~q(8co<-*b(*v{dh9gM-PjFHrW*Lj}*
zKEf0Ku`gNn#HC;JBfU60ApF2?mi^lpy^>$e_q`_J!guXr8PW>gM;u!@zs{Z<9)6iI
zx|A`P#Qcbl<(Q!36_%Z!F?vMr6ZF{F&LzB%AZ%p5KA$@Nki_fO_G_6J6<N0vG(RYO
zmxRL_=7Yp@LCQn(1HyL-KeUSZPT}kJf#&;#?-0IsCG$P&84t(#_X!__?^wY+ugF0`
z-9FIqc*QOz7+%hHK1o+ha9dn_9^pp?eaqO+FXgV=2|6CP@FIfFPnaK&dTPoAFtfvR
z){$N0r6Qxq%SBEQd6meCB7Y`wlE@oGE+X<)kwt`UQvcj9ae7=m7=7~@V+$A^cNo1A
zuIrDscXj7*kG2;(zu4*elgIxX^WDOaNqk|E9XWhmBvoMa2_6<~P?7aP!K6wo!@Z3D
zX*{pbUzKIoJ&XatZNm3&XT4MNwy}KpZpM(vNg@ZTu)aZMMm^6qT9f08)Ms=chwF0I
z7?b#1_w)4`7IZXW+0lqm^Q-J&Kd}a^_cvtpv=VGvkna_~Q}|JB*O+;cHi8nbjwd8`
z;d&hIuFvQYJCDeke?j=6y22B?(1R>HMRo}W1+{&Hot&?5ZRWegkN*vpqr(_IS}$_=
zZPx4hr~UZqu-+~FKtGlPLl}!o#2p^t>r2b-M+?gKCkx7VJ;O5XKx=)Xar`}UJ!yaY
z<K#P?3;H`G;Ys4}XdM4|oE(jl-|tw^-&qN#wcOU{>!%BbZ|hnx{TGC<^YeY2{DkCJ
z=jWP)>-64=<C~8c^q(xUwoi+bvqYBUf?w)^uZEmI7o$h&QKXjWrJe)@wf#!54^(HK
zSN!<odJ45>eL(zZyO`L;?&EO3*vB4VIa-rZ^Q(Np_0=K#s9-?&F-dnY&dw`#KK;HT
zb}q5=h@FmSvhdw^ar|Myh~y{oDC>Pq869#T(Dp5NaXN!#IXqBa_#Q^*lZ;U}V?_Lf
zA7VM&jL|cN(I<L+y=nh`@f#6zJ;8jZ@b&#(^L@e#3%Va?en{fe?FG&E3NIw+=^*K8
z!Km8{n(q-_P|(|+d4U;>ezA+xl=Jw%e7^Lp&i1;z<MFVRziSJ}8`{bk*(n%lX_+{m
zW`q`u-ZPB;Rf7A3zf@5B5!tbg^`5Vpug{N;KPK^q#V-5>^TSc*>vTJJce4&Xn>pMm
zb|C5XC(?EY^ob-fS_1ua6g&5NwhM(BW7`Fzj39o!AG7S+%jj&#>4-#Fj);9!Fe3SM
zelC7CG3tEk_+t`(SnPZ|nCBP1PVXCX->E2ARq#H+T7nG)n+P@&Y%BP*;GYCv5PV7S
zRl&Z3ZwU?%93nVMaJ-;SXHd!&R&qXKYZ(JYxV&N~SPrja)a4qf%i+;)SnsLLvP*bw
zL0ztXk$uOQ@62Mp`!kVEmUVgSbcNPPxY&nNC0<FFzV0>Ox0?A5;d_fRKTw6yC-Ld)
zU)#A>u^ot=BZc{{L`Gd+Nndue4ui{?9}^5nJq(s9Sa03J_bp?-U-%)po}#6h@0EJ5
z^RMkd`xkUdJU-#;bX|~m0t-2wfYfK#ZI)g889~ya&!bbW2iF-6cYMjH&s$XA5A^jR
z*A;vsJSkU?_;pKp>3ryPc|yz&i=U{$<?0td`aEjBV+r#^!Vd!T-BQoI5}!Vg+Agw)
z?Sf+Gy~DC!>a#8{PlV5-PujnJDL0RtmskRymsmaKHK@brsm)l}_(J^roWkbybga*Q
z0(BYnb3)Gx((`uod>)<dcpN7AaCur<K><N{mSx8?jFCSH%KbR}ILrRxoX@DpF8#b{
z%zB5EgFc@+zOeZ7Nj%;s*q=w9D-rP*&XjT#*(3g=Em`jt|2kh$$xl%75!3l;&;Da#
z=V-(BKCzETJl;~Gmv{mmmP7h{2G~z@0;A5CjyEED$3zYXiN`N~0^%o_#eO4l{RSmI
z_cNl8%U8=i-8hRQ*>7wVqq7F{b^iUr3$*2MhlkPCS?r`7Tpd`}>DP9icC2@bT~O>o
z!q@R^)9I0T{DP5AZ10wMG#~bMvku*lak#6EU`NJ)pE3GRMty&AcVRgcV)T8>7=M59
zia(!VWT^0mG3tEkbhuix-Xnasq}wTceLu<Lw_?6q_#sJmYy|6dK08W29gng;D(INS
za_kL3(QCW^77Z~NT94mn{=e>zNtXD(e1hZG?{f!4&XMqWaqR`2&##1cT2SjXUMxhf
z!{hP$|B|omSL*X6?b^sAe12SV{f6Xx1@wJNo?oF$%nN-a{IiVl?Lucu2^S3fS?uO8
zI_5EYZV1YAN!M4MzObarA%3DWnI9E@y1r_DNcbT9&~)a5#HXKonjaK?Owd1-`9aB_
zet*&YfbgP%p2^JjntVTU$#uT6Q8%lo^>fdu<%X;eXUp?d){ncF^SHS4ez9xJSXjT<
zje9s;&yx-AXW1<nzwSr(x9Rhrbb$G;R8DtT&?(QgaLI!ASGVv3MOp6@z9U=g1-1Xa
z!Uy5|1sx@r?}_st5`HL|!`&(3H$(U$YyTI7?-YJe&?|hO#H0DngPh-R5%%X0en_52
zn%7Zy4&em_LHvfaeGdEkZ~Hyt&x@`XdFNf~hfYuM5Xa-&*WOb3_b_@6GP-BeK6La6
zOlNe@V2o9G+|qmMF-C+Jn!w@F^^760^H*b@Z!YV-v~|1sghz0BImIqCp7lY|$L?ag
zsOVuPhr0z`AF>SZGwSPG=gWUU@*(+goDx~m?U8io>s;Ff#Lgvl-YDBSB|d$fYkpAp
zPT_~XW`0oTNAedIIU=a9f9)qEegbkH;5hq<N_m6$IV|H4+Ab`14vF9Mm84h7DH6wz
z2p@zWJi>gh@VCYBqr#7AJj8sE`k==-bb8z$@%iw|`L<3r{d7Fc_02z&&wFebqi>YR
zOBfx)8TI+pb}r$Agu4P_FS3p&DDn7)a5zYOAn|zK7rhuH9pQAj2e95HcFv6~dtQIc
zVmdMzBNCr?8i)JlF*=ht-2FA9M^Lw;qGG4(eN^hXeoxc&K2TrcnI(SWo?kk>v9~#1
zucSBlCCd@*cO=UJkwf~rlJl$mga$FsBYyllS#~|b@$34o`M!Z1?iRjpE6btX%!hQw
zZq2w{Z!~30dRWfCpnkuC=B(Gx8HYS)3cGJ@lk*jjaS*4BV?-PCbI;X|QP&5J@$I=}
z2`H?+WixFSqp6Gs*hPLsWYaJ$mwJ3ITjWv_jy4Y0<8_9eWj$VJAj^8Z&PZfgkJn)m
z%X+-7uyWM-`;)}mRq(HZFAHj3m7`qVzVmXvE-;2JX}Og}4Gm=s4q|lHV05owj8<XP
z{Ywt<qh*iCI$p2D3uibUkDyoL4I=x~{K>+P-4VWx!-MvMypZsMr<oTMj9z5fahp;5
zP5O%S?-E`>&?kKVt%7`y@WXOFyP_N(ko<W>4hib}mbUYqV7^<zLE?dv1><>5&eN*e
z-2Q)E<Zgds`Aw0Xk8=8T`)r%6XVTZ3&gW!FHw@<T3Jqb5PGSs~qV1mP6CB5KK+d;o
zqv(4vI!iNxggXTFea$1Xdjk9My~_M(L&neq#$XjjT|PQ}K}lCk5XP_{zxdP7XUz}j
zd<c5qmGnz`_5Dio{lbd~hDS0#(pb_d_e0J1X`Y~SIP;xSE-}f6E@#IvJ|AwmP6C2n
zDd*^Hwm%$q-s1bEw7-tx??26}^2$7j!sb<lWImKLS?-52Pehl$j_1Ffhm>dcJLe(!
zBtQPUxxC#{eo?jEIDOnT7(JqQZR7IP<L-f0|GvKGJwJ583C@@J!WY@E;}WCuvY^P?
zEGqoiISzM;oiir<+l*e(`vrA5YJ1-W=6NJM{4L8qk##-R{Lpz0cT2ce_(73%`ZWIk
zW&Glrj6dt=?QM}0BqN(dP7ygM_q8;Ui^%x4&bP)?(Ps*l70eN=Dp+06_6pxOYl&Q6
zu!-OyNr(2|O!SWlwioOq*j4Z)!B+&e{Tm_=5F8m7J}FL4m3(Xa|F>wo$R1`$JT{SM
ziEN5IPvjyZFA+IS<dq_)i@ZT(hsa-uZ2K$6cTi-f$VWxa5&5*p24BYTjmSE`4UThw
z<1}9n4!I6}$@D)v^ojk%`sj~>5*~Pv!<{=Ap%$ZC!abTN7!>pwZ7sjy4$Kcf$EdI8
zy!4#q_*`Na&S0LuD%(fIUSHRFc4yemspC&$yHF2CD{}fdtn)p%g{5*1VRQ@X`NRI9
ztPg2@7T?dKBU!K0t^EbXpG){Yjp9egACvgKCpf)<lZ<}3Plmo{*;k&^9hPt%pSF)g
znHQ4q&^IhQoNTAdNAn%R4+`HUeCH{)yU|`MN*hMKextDQ9luBF&;PRDB(EJM^TG1Q
zmvY%}UrCQ%hoZ}`<JTPSmvqx##92Wuecykg;Q0;+KYWkWziN!WhZqA-Ge$)p>ddlN
z^t#-&AGh!#g7C2T6TVL8VTsrAAL^NBSiyScmU<S6uV>=#ch@uF!+u^L<dSvnL0JbL
zzR7y8=>38^zcI1*9bleE!a>#-`9#jEXTlFjd~OMkNPGd2SIYU-^8j^wL(lVzKF;Si
zuYO27+xrCTC*Q^Ba593_*Fx)Qmheh2>h(?ksUNnRq(h(2|AZY+NV;SnMW3Ks_EC)P
zc({Ozfbe5-Uvu2g^(cNH#reYXO8pH9I)(3U%68g$RQMn~k03~W_qhx5_4vz6@?1_9
zM|yrms>oxy^K+g4dBghX_QaD<u>5o<4u7&E%bm5{m*r<g?k)24p3Lw4JcoOAxR2#Y
z&vUqJlLgO9xG{ypUlh6S5te(1tj}9~J9S%>&yQdF0sST?Je14mOBGqrulrdAITnDZ
z_<@Ps-{zUd=(?Z#O`UUC4hTB8vm9K-=v~6-*vIHz${0Js=%ar-RiD78jM4Wbd_SY(
zGYS7#<oePdEU2$vold{-JSUm&lK29Wo=}kW`a0Hju_>(gOa7b>ay*^`tk>^*nje_V
zdY|S$z<jTySNFSWzH1Wmy_(;M`F_dwVR=8){NH=tf(<0zhK%~Wbvw!D-y4<t^(jWj
zBke4T<2uV>!QgwW_qSpU?H26L2(1~zr^W6V%YinGo>v(CT^aRx$xDaC9}x_+WM1%P
zMtwds-y^)Rphx%)iBF#o&36kgB<K)+MAECzhvvJ47Zi+0xdgtJbV)q=yl6Y8@B<pf
zF8UhVMdUnczC(C^L67i#FEC%9FF3{LD|Uj**CXf6e~sm+*lT_R;fIfMcu4Hr-?JQi
zmix~G4=_3=dMs1Fi)H5o!D@`UpCvefd3qc_DzffRhWPOD%y-TgKQhi5d6{Kh4|IBc
z^bf`A6P5IaequQ+emvqoB63Wll&kjRI?i?x@e}<~{H*7A!?hW8J<)ctuY@OdjvrWt
z*O_l6j(#pk`MURWxKGO2MgOy`KK>4T{=$O6Z{>WRW(;{4BZ45;1@vXTE*Bk->j?V|
zNj$#G5^s$8fo~Y~b)xNJhnN=>yWlr0J0(7yf6Wik9~G-lK=_f1EQcjs`a02k-vJKy
z3m+~BU-A{z`LnzNcu#XZj_hNeOUf^BhUH^2PyOPrY;a0sF^6*^>*w?(kwdaj<%-Bl
z^}-cxDEP#){2Yx_!;{kA8Lz(;7rzd-$^3LJYs5nINrmWBL~qj$1k*%s%0EM8h+Lu&
zeVIb^ueAL4`MoalOX8x1@^OB0M7~mm{m`GI6)>qR;WquJYZ5xWt?=XYdL2W&pS_i}
z{{rrzTAqJffdIXpz-AQG-%|*GmCPfF=kJzv7zLb@@a#SRKK(yQyD&b#nbO|U{Z02t
zI$SzEaS`bL^n$4es8a~Pq1G2HerT-qap&csJbl54TNa|f*?{v~kPXnP5PrKt^p6*!
ze_HhM{-4R?7tB}}(HGPLyikb#r9%AoEJXiGA^P5h_<uw6`g-gyvR^R%JiaaZ`1}qN
zeSE&&Da22p5dQc=_)`ku&k%ildS(^EpI3<fBhkm_cS#}qPedOd?}|e7YYOqRz7YPV
zLi9uAz89a)(4YAE<9UX0<<pG5PK;GLGwSqCmgiNtJwIO^@;r||!E*2~jG7-2eoUTw
z9<d7v-~D7keyKAYpI7q)-ST|)$F&2!!VgLNGt^G}J<b@7GWt%6EU4QPdG>8NJS_H6
zvG<)~z0OZq;)_Z<*(=ZKsI)tMB5VE);YaS`{y~?M5oDc_|1p-U{Dt$a%U|1T^ql2z
zR|2;m9l4A;yqkoFWu8YwFe>v?G%p@ANs&R{Zgc^TAyl&Z9Q!lh|CC&Uz8$IJ<PSe1
z;VKoS=(~y97x}}#{SV<cBwY0;IOt1%{t8v-n?_&tv3L0`eih!A(w9FxUBb2f{S<%x
z@G|+ri;?}jIQ!gu;pr6Kmhz{1vbZ-3pjN*4i<7<vJ;?eIs;~Mq%4h%Y!kfi~pDI$&
zzJ0!MRsKK9gYqBJPV1a6T$TUp2`W~A%8886NjN3j`lxoUI?(vHxN!X(*3Cd)T)6h5
zQO}>yvc5lS)ble63)k~wb$^knBkH5EZ(RII9Gv&mep|wId^-HL<TD`QR(&PXn#5B%
z%Ek12e*GkC{oH(dcRu}M(Oc;xKYNT-O(_`kyj-MXH+|b}zw|Hxl+x`cI<7?L)V^SH
zZKYq4&yUjQ1o~L#V@<wzFOYw&-;j_0Ema_Mb@4ZppY8ehNmRI6zgP4sJ^rHfU$CDn
zKCk#+<>L<{zSf_~$L~fLQ0nJ9b}Rnne0+7`*=Cd)tn}CN>#34xz2SXM1p~RZezd-*
z=#^T10&@Rx%JaY{=#cw+<i&#bQMRJ-7V&dJ@SNZeg0}=sSudL`SX{8IV6I?w!P<fi
z1RoS^D%f1Gjo_1le-_M@`_l^|Z+ME!L8tqI<TpCWW2wU97+v!I?VZeWVe^9~ckE`_
z>HED`WbGf$ak%sT_LeHph|%>BWBmKFPx>wVaTpRi{k+qDBjPtG;X(215PO}DmXeNG
zU5+=_fYI+}^fqMl2|Amx9M!U*jz7;|edakNJlK?FkJy8xPrtwC+0|nnh@C_1+#>6A
z2PNGR>DTZ``uz{Gy<5^BXu@(-!Xwfj;(LVk5z+g!y`Y{S7}k18x6Y@IKTwDLc!d{e
z%yLNh?w)*}hxK3tLERqH;~Y9)|69DF%i}D^ul+0^{!4?>Z*SQ7rydo1J`Jz`J#2en
zs0v#u_1<Y+_yBi5$Mru)<VU6dy@JT~B)p=?4~kq#<d!1mirh)$$|Aoc^4%i$6}gJY
z!$hts@_3Q&5!wCub5@qBi9A=r?-hBa$oGkSP~_?&|0r?|k&`8VE|I<Bzoy9LCA^l%
zjYMuJayyY96!}Gw8;jgW<P_I)R=UTDJXLVE;C#VSFEFp8;4;yFCb&s(kKjSUi-I=<
z6UDx~;PdU+Zw-+f2sRUJFX$Dt5=%dh^ITt}<+=UplJ;#x)(LvttluH^NYDE?B=Tv&
zZsND2%)96*@+*S91>X?V@oU^5c6%j%ZwYUZ;2H@p>^`ioKYiWl>oD)V=vmHZVe89h
z|AotMyx`=`EdTl<W0}7)))$OOczcmw5IiFGeMQ#!>nP<Ml5r6IywKsl7gvfO4?ba;
zMDJmAS7UV88S}<b%CPLL%^0cA=(<nz;>S@|!iDEZ5n0e(SM1Um!xB%pxahT<DdAa+
z!Mhoql8$f<mSci$36Dy;+?6?8-+y&}o%gfeC4608F<pNb@i-GK6cmE{0-txsDb|N%
zoXRPDM}+kOIWPWMEJp=(Ifk1(Zh7=S%IMShB+KE)8Fjkik=pG+rMoKgO{r-XR<a@E
zt<)a$D;Y(m*91$>6gg4k(jq5`Tux+as#^RUk*OVQ$+;rad@xI{Dl#=agFv4lB2yF6
zk{gJeA^e9#E-vyTB4<ka+x#Z`mA|J%ru|PWxwFXh?qkW_MW*p(OMY2odY`c5*F?@1
z`E`-YN%{tfTv5W`6}ghg6GhJbf7<&N@VLrq?VV8Cpj=YmKoy0pv=GF`>4g%mPAP4J
zv}G)<Eudu5WatFaWXJ_t<T4%+BY6BrAC-!zqdy$0zv!r_RS`$UV-@j4<<fH$96_Mm
z!=+dR@&CTP-gjru>g?>9w&~CD?|z=-owdGiy=#5zyX<f8**k&!dB{gWz8SKk4wDb>
z_*#W>({{(?*E?=UdA*U$Wq|i%`pz-^;~ndJWSy|(tYf)Ne|g8x0`|djUe{&teL1Ro
z9QIm^=a&z>OZcb1L-4Y+Ankqw{>?zf^C!qp0AB>Y3Y^p}JdMCZfG+TDz~h1QfN#P6
z`p1yZ240DEa3$m<up4+W@KWFs<n0Q`*8u+&>*%$>Pe6YI@Qc8!kcV3!e;YWdOWO4V
z$aetm1pX57PlNw^q5m<i6CQ&6Jn&Z3+Y9})Kk%)<X5cK~<%oMO<VC<0z)s+Wz(L@Z
zz-xh@1%3heW#HF<-va&s_;ZE7hI|k3QQ-Z+XMhvYzJq{A0A~T?z*gXUfJxxm-%Gv+
zAYX%ixfb%t@bfvyUk2U+{2uTpz+VCH29|)20=EI3Uh%sR@DSjU!0ABFD~*rfdyeB#
zF9GZV@_fzfz2swZUfG88OQKKYjnHfUmiT^7oms>h-y(5#VPDg5x5%u|btH%9&5FRn
zit^{(Sf3c*cVFk}z3b|xga2<C;e8OudgeUfEk&iyMV_iLCFslrvZ6w3)L?#Xm?*rD
zgO~d~RoxlJ`vqDbCO4S;Ofo0EB>q1$_nSo8*)`W5g$8-<zXTL*_-|{s{{(YC5c%Qr
z%uk~oe^q&MmbHeHRVcCi`<nRO-?e+C+$X;p!XGaRzx%W5{X8D<`&;b0FTwsaP~?5g
zuc)5a8rb;x%(#{J#`E1os|y~*d*r%+y5XOd%hVI+nh(5(Xm$I7pU8T|jN*?)@Ygx}
zI?tGs=p6JfuSX`s&op2?#((|*$xre?<mtO($8YmfZ}?9DKd*aQz<VZ;@#kL>zS7Hr
z8U7s^R#2FHXo06m{zdQubt7gpInFuYwf^l-*wI)LyTYFZ>n1(x*&m4OrYQUD60yt7
zgZ%{Aku(JC!+cx)NVC{AreR+v_IwV1tk|u6ak|)LR|~$yD$T*a#}H+od*^(w{s>UK
zJLa`!S+647f2!EKHw!k@nZ?2!eD5I2f94di%Y8|3AK3GKg(&-xlf{ncIXAyH;dzEA
z`{YSt-`FQuUoY|Vy@)9L!qU?{mqfmw*`dZ?3H6A4Z<F6sSU(kg!7c&hTEp)bLhX=<
z#JeTFJdkS%zrTpG&zuE&;CAniBJN?7I|-@3-Fu~|7ejfH_4NCusFy=|k@eJjsEm6A
z<u2N%-%n*dq+>f6St9Yq5WjwZHp)JO2XK?igh#(`J7GJI<%%NwvmU>9X+X6M$|suz
z*dF};h2`$nd7hsA%D<1|dRntDctOhRVBdvtX|6-PBYrK)A@lFFFrESE--h>NxISnZ
z)qH5jr<0G8b%ft*YI!cod7UV=&2uKuPX>>c6DYUWi1z3gaNY+!=Sj9t7-e;I9BtPH
zyDr7I33fA3ehJF?ymv43S1UWGU;NST<I1iRc3)8X7TC>1`7J1C-k{zNZbQ8v1M5u<
z`}0%Czr=Nv9miJxbLh8DlQ>zQ&wsrLJ;yzthYISg&Bqst{U-3)@n~&+3;AxK?N_UR
z0J5&nzw7#El-qG^`A4P-|6djfTAlrQ67`+|vR%(Yej%W@WiLX02}qt-ApZk6(bTnL
zyBqDFc(nLs{Ed(g0@`tBxwdvly_wKkpZ3Rvtn+^)^hW_Fp?)*u89>H48}d64C);~G
z^wUlh|J0ud{a%Xa6v%O<p9gsXkUXEjbCIp8{+W=cBOaSG`?DlO|LzKU+qPvP`uE|w
z^bV9W4>NFI;rb(`y;g5yU4eQVfsFru;l9J%S)=u>&AF)eKA?@=>JP#5Zs$X9b@rzn
zawpKPE7r%|XRR{79VesezYgo<p}3F3c=}QA5><a4<ja-*D#)*(AILKY&o>3fn~n2d
zQUB%D5|`Ckn}gmi@`q5qx6#=)XK_FEI_PbE`}3c;?h5*~JU7k|p1l_cTAls*80<d|
z<aqcL<cBezxIV0h{<A>({XFC^D*ZvYkFWywo2*Z3a}(-)S=Ik4<nI7kzYq5fZh@Zt
z{!PfY0xh?-xp%R&Gst80PoO>D3)HtZ&ttvf^Tf8U_3;DL`;n?&g#0rg<2eca`wQsJ
z{bjGcn<4)J$aeL2NSyaWZ)34PCCCo}xsE**qCXnX8H}LZj&sZN6}0yi=o#nX80Sut
z_~$y-09orFIbG^K13o(r?eTil-ydk#VcWK9j|H&f`CiNaf^zO>-U!*oYkwB2^0zAa
z?T~F;_6W*$OdpMM`VY#sd=|>t-k@yDPe3{MZ$a6XpN?|wJG6Wr%5A^cBPiQEE=4)_
zNo|lVx9#7k<6_ij{(`dgnMOI|3(D5!s(?T1OUsv_ocla2TbuDbJ`VrvA1x1|ock~>
zN5ytM?3uryZ0F>SD7RzL9(p|9f^u8e9>M(Em~TS4`QFJpg0da6!Sl4Opylr=el7n*
zm23G<lym%Q`CgQ>{XyA|!9Sp!?bq@{D7SU(q2(u4xt7mAQq~=gFD-9{J?D2&wmx4$
zxqU{`9zmIN$Q%26cX;Kc34)$reieRqp7$}c{5@2aVRmAdC;Mxjl3zJa;(u}Q>wEci
z0t}Zwb*?AvE<E)G@z)Pb0*?hw0bcdA)SECOIQWd<&Cd$PfS*FSgYpl;F04J@d`|3H
ze&9Zm-(8J`H&*5?9U}Th;1Do#u;|@G1(UB6jPED7VPC-(l&2d-9!B}_>qYK_U08b>
zU>{aK-ui#`_BR|R{ScPNYTF-XPd)pea<w?#{hvhp6K|3{a2`02t8M?zj{gGU$Q)SS
zA8dbNa=E_R{Dsw<a)9vtPi_Ck{SiN~5$n;$gG3)kzDihkipXmY?S8GdKZ$ne{-1V|
zoFAtH=L6e-y}%CxZvfs3yc2jo@LAyc>xFm1$%2Ogrvpy_o&{VD><9iE@J8U*fIkHO
z8u&P{2!F3a-tQFg`zGLQ;9TGe;03@E?E4_+fL{gv2sjLU4A`(<{BTS0cj%{_D*9uA
z3xP>sFYpTBr-9!F{swqI@M+*a?-brcfiCbkAmca<@(SQZz$<{)0dE5S6u24q81Ns!
z1LETM&A=0Yt-$kuJ-`_9av9`L0lx)YiSjIP18@^?8_@lX_+1J7CG7tQ9D@D{$PII)
z{s!pZ067L+2y6$g18ze7>mhH0{B_8;1E<^|{Bhtt&_4}KL!Sd~1a1K~oQ6CCW582@
zOMu<LYk=#4-vr(Td;;jq6W+<dX~5%v3xVeX2Z0{~-T?eA@F&2=&kAn~aOpykInLVg
zeF)_+w0};(mhn1w^G(7-z9=MbR6UkY84&(j<Fn7)y%vtr$#NZ3Y!PI8bZk-W8_uUa
z6Ptf~{llxM{4(LqzpMOuD}TC@6Xmk@Pq}o8)O*{hf^i_Pxfp+bk(B2b2)2Sip0XXi
zcNO;B;lpo}eqDh3$KP)gc>=z#UJ3aaJb(B7_enY9Sbrq^12+H*z>UBna1(GCxEWXi
z?&>&W$Opgw;`dpzpq~vq4mbyRJg^0L0`UE~FwfR?dYb%QX#cl?D+HOJEoc|aLm|m=
z0?f}7o;a{{n#ft83oOnReG=#Z^KsY%lkXHck8#96N;w(NlnpZUfNJz()cjygu21%U
zu{|Egefox*W&E@NCu03O82DCT49NB8R3%eSJPqXwfSJRje>hJh3iJI*jq7VY4Bri2
z%|~8ht^B;tcQ*LX0kU00`mL3}8G(_fR{Y2@(qB7@{NAQkdmU%3_B&gD@MuZgk8j`V
zb&-}gJScf#zZ2O{lr`4cf4mRb7BVh$o+yXKQLBI6hvfIY<R@}`v7KRlSzfFEy<m6@
zR;AxT4)aqhKj&XhM1JY7R{k#_-nHPr9GC@O4IBb~6qo~k68Kr*mw;ad-U|E?@DAWz
zz~2Jz0sa^8e&C;h4+9?qJ_URhxE1&k@bAFATV)>X4?Gx1{x?EC0yq_TEbutsDZmB5
zvw%y1%YhdH`+=7OIUcJ;jz`uX;dy$hoF^NBE-(g+0~5d`@N(dkH_3UY1(*b`NBI!s
zTOr>8yc_rz;0wSB(<GjQfm4CAfu{qP0Xu;O_!$NcK>tx7`EP=}5%_E1HrTmumiEMf
zY2X&}0CUs>8xKbwfQycjc0}P2`t!uwV&06u7BbJjA5}8@?_<!X;g9omyvONy=Xt#6
z@pzBJ*tVoM)soK&mYx%ICbfHd=Ycj4^A8Ia_mT490|X0G1)VoTMtvvb__yU!Z+GF1
z?-hTypD*}-fa`%jLHY7?r2NTq1s4I=B}IN5c;0y;52OA$z_9k*2RoL3;1aRl)tJ4y
zGH>!q(WgHk*a|FVMIJ`^rb|V3-!E9aOfd05!7Y~y=1?A6C-Sdh7uKHP4@teS^6}RH
zv$sDUk>6_DAJq@+|EPMpe7yTVi}pJ}&VwT4YTLiF<3EdeaJ8BbZ2u7Ena<CS%IPa)
zUj0vPe-`UY9O!&l+Ectnuo3IorVoldg8nR`-LLibXVDJb|D~7Yeop@Pa(=a&sJ+Zj
z>$gQ;Z$8^2M!7-c4Y#5kH*CmL*hwB2@f5++3P04Bl%9S^c9CD_ZplLye#sw$-nQQ6
zB+d3qIvhVA$PeR9z>e)8Uq<n5V}3*U);}Tn9)ca^^^obW5aO>C@MrsYCE|xWhkT9q
zNc+j>LS}oZk3+BXl!4yz+B|KnGEdpf;+J`%pL~eE7@{wQ=o|m5oWF!|7K7gA#6F{z
z{SL;p`D~B$M#$*bG|MsW6O^Y&{T9lu$S&=hME3g`H=146Z;^6;9K}UuoJquKwO(Go
zS01Nthd61MuhEWqFNNgG`ESXi&DR9;vr)yN*NMV+5hwEH$BBH=p9^00KjTjX{MmI$
z`*Z0Z?e_WAx|9Krp{Oc<j4KxsS78VFO0aACzT|~|8vjr}KB<p|=#wG(oYFIo1?V}>
z6Y$UVU61nw$1U>M!ulNNEO%{29Vcp>`~8A(-az}fXYQ{*!-$jZA5rb0zVVOc`C>a`
z(A##}dv&^<dVKor3K^g5r+Qc7q@M)*Sgp;WK41FnRr4`jqn&siJ^xY;L&lf?v*d?)
z(DO#;A!?p({(+2F=S||7=Zhlz&~GW=x6=9$HD7%{2a6vU>$LNrv?q33`MilMJ>$qi
zZ`*I<(CfNxzu#XN2b+E<e(Eva{q};Few>F!^SmqkkT)LSwL?h9ujlKoJ}>$Cz<gy~
znLu0<E5zlW|7_6a@XvS1s~<P=>c{PR)kpVHO(N6pNWgD3dG^n%A@iF3nFFtQ8_hH2
zFmy343$S1RBN;E$4=X+WWgn68!gl2$+i_~YyQ#IG{dOXs#h*wVT(A6oL_QmCM|n(I
z#yE<BIP7^=#}PGO$WsdNRO%<c{~N@=-~S=~L|*67+U8l*dPZJ1z-vR&?bhp+A3w)4
z_ixC*KmJ{5U#;gw#uX35WzS<eF5Mrxy>X5M#O03z#6>^JfS*eH-<sRceFFUW`M~(|
z^MUc_uMaJfFF($>$S&qt7IC(!>#{;1{_)5Y{SSxu9|`!k?@;M}+THncIUbQee?4fG
zeERuKh|F=|ZW*0lmGW3?JA6N`_~H6jgdgU$1eyIxz4MsFqxG)RGyWFn?K*1TCEBhZ
zxZlLO)B3Zt7g#;!u|G~RU;J_Ddexj5>th_Jd0mTfJcZ>L$Ns)DF82BVfWKCeGe3un
ze(>k>N-6i}b5dk~K8u+XBVR_!{r*`ivY-E~$PJ8dNMz<M8OU3u>nlI*2E~iKvA?q5
z*>;BnNdEjT;x8(G`Yk~}gnUx(JYGJ27>^6R9Vhnur1!;szo5N-zo5N-UNKJSFAiSD
zL4V1BKkvGo{U+&j{C-<63i4$`;?D>8y#7*r{<s03KTh((@6SW<&|fLUpYw#|F)UwE
z<0HrTkT2%N4e;7`@3xz->bgGayzAeGaiyL9{A+^DbulKge;#TP*`M!mk^O#d6`66z
z194Z{-}vJN<Hw)3A>&8b%|03PCiB4so+^8_U>?Z-Tg&<*e~@y@ME?C$@;R{20f&L{
z`^)V)ZlnG`dORz3VgDbUacE>*^i%8qNB8Zj{Qu}1G46C6l#>rjJ4UWTdmbpy2kSBJ
zD89s>#Gd2CeOl&?<+1bLKVN{@A72<Jw2SYc-AZK_yDRN^;{6@%&&9qf1G`qWugWRD
z^}iaMkMS3jUA6arheP5Rf!?k^-g?LLF7oK!iMWtQznz$GjH~gP^8Sd5i*_+(7nN7q
zC6rxS#qGz5xM`PBcGddJDLa2Xix_VOWfzqf7vp9ab{sd<kA&zOM<oBcek?@a3O(Dw
z{3M~b<6)xt(fOIeagV$@lrbK*{2Jp0=c8fDt|ZFumnM<fuEcZY@iU$b^fn$lK8ODk
z{9^7D=^yd<{AzsWz+=tqoYn2}?Z89-`3V0T8Bc`&Vt~i)|8+YwPoBJJ#}H-Y)sNRT
zWaePJCDqP!mGi=RUh>a8b6jwJ)BW!IM||u@7d)--OMOd-J`ti%D?Qtnh2F+Fo_Wl}
zkIii@=a<rpl1FQ2$1C%|JPr?I{Oa+NvlfnjpWgYa@UY!3WLsxvc;n#VK6Rz?lL`2-
zF*p4d@s3!}j?+R}M1S1nV8`*J$DM!urrVA2!*&*we?1QUaR(mS4F~+&ePh)8^5+x$
z`@Cu&J)+`?S~r+icboK|i}gGXIrlrsC*w{+Z}VpFPe#S<uXl*sZwKP`*A3T@nZs{a
zlgN4auaAk$-yD~eiOFTH{J2xdaT7(t_@nCSa^^wn!(`?$tX%84K5KoL%zg|j-_?4K
zr}#@U?ks;T>sEFL?TX5-+I_6^xAHivo#*i#w96{H)+*171!Wi2KK3j5DQooCg;yjG
ztWSLc`i=L>dck!i13l~ILhK76`r#10^Y_Ye#6t85=!X#><H@M{C9Hor=<7@(?EQ$$
zebO$T7gthlkW9rXW1Sn>jQUvTnpo~i{YJ`7B5y-nT<83LYmxFTERT!quam7JGwxy_
zZhPL<<8+9A5x38SxXI(ZT0Y*>5#x{fjKPlUHuVYUId14D1HH|&-M@1kVxIjxB3`bW
zyid#Zm*30!?Qsp6IX1H&kY~}FzsCtZ<yw*P$Ny1Vo;WX(uw#Dm<oWNk7Yg}v^{f2Q
zY)*83{PrS0v@0q*e|&*W+c6GjFY(9oANgG9t+_X@5NAF7>T%}t$Hk%FZt##dAHkar
z8+YI(PYFDB9PP}wFYPVu4;zm>ud>}dFLONl<Fm^B4dZtvmiKdLyOD3^GY&f!>sDzW
z;o<!;pZ|5`{89Tt+7<UJw~LC4b|bK}d8~9_)W3g=_Eh`5Z)|^whrD_|`0D|9{r<rE
z=8sGC593V)c<uPn-vdP5*LIQr40v+)rwz;Kb#5-eUnw88-X~`NH-eY#C_%Qq>&;K-
zyhMIz=NvGaSFinQ-bLM4WBX&^(d|zJ_$#%)*73mhXTi&M6d<$x{(00Y%;EPx+RwO4
zup36Z$>%nfkN+q>+9hkWV;nie(fTJDKWt}yvc$o9MaZp)m-R+eJ@-Jd<Gzgcap-AJ
zeI`Vo3*jk1A1jrQ_hIPmJhj(}X_VL7PB6zx%IJqUWz19me1&<MWx4B_JDVssiR|}l
zi}g4<??wV~SXTwwd9@tJ-?t$S-!J0u`x|li`#x6)){_r$_;JRhd^9eROIRlw4=Nv5
zX*J(`JH$o180>5-E8S1xzJ})~e?3Hd{Phs+@%^|GAICuwep(S1_1O@8Ug;TcF%Yk}
zzk4w4IpR3jNEz+SQw|vi9LM#D*N-3hr{B%+Yn@qNYzO`Nb}GM#f7!8qNh-Ujb(ixs
z3p>W05AfJ^I2|!A8u0(<x&I(f5j=LBSRQ@8ulD}vX7Dh7<lhpA)8=#o<1nA?5td))
zklOOgJjG#0ISJXte9A(O@&8sspNBpUJ?)FovpprqHg=mYf8JY#Idprn;A7s&yWvo2
zALH5xc{A$MpZi9s$NtgllJ6hm)Ax^gL7qf_$GeZn`6FRFdVcBk&F5A7p-h0+=0oqZ
z{C#goe9TAou=0H5A#Zsk?M29T6rs1udh=85{3#w@&hH!{ax4BHDB~zXPk$xI^p`<>
z>)Rd;_<wF(M``D{!f)%?x>;p6g?8vC7vs={9eEj75_-y6$h6BVJH}Cjo^dqMuT_}C
zj|2Tf{z9PLwjR${_H#7{$4@nNZ5^K1tF6y{LACW+kNXSCy9(LAyNd6%!o%knqT0uC
zwY%cZJSFQwT+M?F{_axpNhxPMF}w#i{O)C*Y6MsWavo)2pT>NoeFpZ$rD9(K7JEe|
zX3rMcMR_CS_%hMwp{Ktj{+}b`r9Q9pjH84&lFNlJ3ycF<ZyV!<z64AFInRgThki@S
zFY7t?$a+TEg-m~pzi_U^<(wy2qKt|e^h*)?80w9vdPA!J=ttxFh<a>S7V+wSZN)fp
zFOqoUK=voGF(c)}=x_2CLwNJx&44dgC2w(?jN2{Xm8%r<{p8c4XZe#V|194Gzt5nY
z^`BLILyB*!;$u1awkf{9DZb5$?^VUea`M&PE8~gr?FE_bZF;7>y$vX5|FfKY`zpQz
z6yI9Kcd+7PIr*k2zQYvXCdKC}K9-Yjs^U9Z@l6>iZ|~a`AIr%XQ+zFoFRl3EijU>w
zTd4RFif^OhTdDY1PQEt9msWfY&z84$t>R-j`Lc>{Nb#*yd^yF(a`IiT`0|QxgW}tu
z_*hQ9Zz#Tvif^0ZD=I#glkXRbZ&>lQK3AT<&5DoZ<olE2dsy+USA35tK9-a3NyYcH
z;@hJ5o>P1*C*M}Z_gBT&@_c!FUsil9C*P}z&$&<58?G-yif;nSxxTQRe3MYl^=co*
zw^{M+r}$V-zDC7&pyF$Kp}f6^C_a{x?+uFYFvYi4@g1S~SWdpTD!!?TZ<FF{QhY2Y
z-?55sy5gI%wY<GE6d%jUH(T+|QG98|ccS8BIr&aeeD73z8x`L?#m92;El_-|im&0t
z^7bxLd@Lv5S&Hx7if^UjTdw$6PQI0j?_9;VLGhih_*hQ9cE#7B__is&wBlnq`MMQf
zui|U{YkB?#6d%jUw^s4JU-7M1d|AcEa`IiR_&%)owkW>q6d%jU_c6tnQ+zGh7jpgi
zq~c>a`L0)dpHX~6itlrZkLBdcquk&3Lf-N>=?AWx>%klAmi=-9=mNQ)E+m$FCfrYF
zS&!FUn`OP`br<=!fxmH$@W+7UCF<+21orJo)GzdiJ+Eh);E#TIolt;XNnPjBPuO)q
zJS6^&XkQZ76Imenh&ukpbrNs!V!;CJ*dH1A<8?0E(S-gfUM_YeU;#+`9PD`=NBcDF
z-7CaC4r~O{J|AMg0rpwc&jT~czW9LjH}g*a9A8O{mn@KZBI@xJM?J>p{7Lx9NB-8A
zW&Fm^mhqSbl9#CYbEroijmb}(t5v&Iu7@|`ZgpP4S>rA87wk)47A$-P@{r)j*97Aq
z5iDLS82hSV_M?Ki>jaZI!4c>SUlO?p%mG<14|y0^0#*pMqAK~2{685MX8s~_;)!y7
zSe(O;NWEPZXQ2)G=oHK*1xv_hE)V_1g2jHpOd5LREw)1B!UaJ5-?n&0<Y8bESOjKR
z9+6KSXTC#t!{RIrN_o6Tkon9Y&eCep^Z(0*#hKm7IAh3bSe)@oC5~cm<v7PXpV^l&
z?w%Lq_#7#TTx@u+H&og0!~YOH^T~dXy$T)-?67?9XumVg;!8UgC;PqHICr$)8D|`M
ztu>#u#<`>U%vC$zv3_#B(*3T-C+me_wd<#z?~&^g;@sJFiE&rEF0uZuIv<hmwSGQg
zoV)sbMBb4b<nJp})>!)N*yXzZc*%)W`<T?p3&t)V(|8;T&Hp*M%F_0=$Ue5KS+McY
zvG<wwyMFs)?|bpym-$%pLI3p2IC2My|Kcm>ROF;z#!<1-Yf!nmyK7ZPb4O;dIelqI
zd!|1sMEmT+cpRf~WV#31`cjwnbq%CyaI~xT|A9FAQWvE9+SasZ+GfpM)iuzTTAS*K
zjHv3dx9Ie?#M1c-<}YnqJU3xHoOZ^tw)rdP&x422IM%kzY3pnsXm9Ii??|WG`nxWx
zlo#E8`~QOM5gBkqh4MJMRt-edAOG=T^RXtirav{%*3;Y5HjrAA>FsOpZW~DVrTWvo
z-JM>9yC)xG1b{s4o;dnanYJ~(m-MevSs3js#=-F^qhnW(4;x4SK<|#k(J&gT_esmD
zSc~Q3v_IY6m+BmA#xNh`8J~Rgr~3ykqKk?+zVl`En%<t~HSKHL`#K_5b_tLF&&}k+
zI}bY!9^CSy*Ro$w@q_e>#L?BW<8d%9I?*!qVJLB|Y47gt?PxZGqo>`h>}$hn%d>2@
zwC4G;c<!P_XU%JyyLA4Nxn^l!sa#ZuV<6QZzN&JZ?pz$p=Hu}kKbo>Q%z33_>|yHL
z@k7<)7WtUhI)C1o6}H4>aij-Vrv|!L(MKg@K3KME=Pky^8hg?ob9m6bkE8R&S5^Li
zd@QzSeKS0CO3L!##Zi7<)1*6`k6;|jT9?j0yY(!yCGqLY<5+t^`xs-?8trf#zQ@WR
z%HqhR`UVF3#vC7-<sVuRCL<q-`Ae5AUwYbTB2d39jse+<b@UGQgw5RDk`Kf&)=1r*
zaSZnK_x25#^KN(7nl6=?-4jP|rY+Mh8^Dl$4v#~ZC>i5p*;$FU#N5C{sW?9Ry4Hm5
z#Kb_cJ5{e^jAQ8;i`&BIZE8((XR5>Oiw9En3Z}}FzX^@!nUM5Vt;T#YaSXJtUftER
zx@t?QSoOS(;FUNsb`fpwY+f@skXqZ;pXusp8*B0gIJpbbgG$Q*lZqe9<LK*8U0ktR
zsFM9cWJN7gABN>|^bfRmTr}1;d5m>EtA?<a!y*uUr8ufM{rjYBH<1NeralZMj=q8J
z&gRZ_J?(3{I@;_a7FONY(+`tCWCbl#ABKTA%-(cWx4F<ybqw}Zy40^o!FVbb)}Rc=
zVeWT$1EdCXf4t~;v>e45h@+>cisg&>rXOCVOi+%rtctf2199|b2D*BC%$)|4lmRnN
z2D&T6#W+ahuj{%%%QUDFH=o#5qeXf3`;TAcDN5?T<^*%tf~Qbks4Kt!%JNCLPg|H&
zx%>?%Pwrc}{3P1HMVHsv*CU-XSw3CLdH=O;qQrL*%AJ$S?d$8M{QW4;&MhyWFrnV-
zfg4e-@9);tiTy1o*Y}?%OsMmQ+MOtmEiUJ${|8Z?IlH`^{!5>e=Q4^n2|E7{gg*Nv
zkzJt8i9O;si#`s!<c%Wdp)Y<BJVY_u?)UEUpI_eL`OYr@E)wMb{~d4KuHjUCO}6@_
zn*>K7yI;p8z|DerloyC!5q<8ff{82M=P_ol6l}Z-a#k=iOTIVAza-yR(>*blSiz4K
zk;_HtGx9yWuH=3L@#+FCqkUB8Zj<MMir*I;nN#`u4b~4s#;400&mOy7M>WPhlV;!?
z;Hkg`z$L)<0M7?r0PF!?0=yD<4e(>YPXj*>{CD8jf!_t*4*U<`Z-Dm#9{}q1X4jwQ
zsbqC<oaDzu=KsGK!T-V740Qfm=4m6a^^YRAJ|H*+@6)fv`;0E$cjDheNaK0a4R{Wd
z&&BaM;+D&9`^M4upEO=z?aMrvH)pPgd=4)Ae$hJ(p4z<d3H0y(L6L<%F8Ke;`jKzA
z&}(qvo9##d+W*$E&%f8Wx4c|tFit{os>H#0=<hq|Z$F7&>x)N@9Y4)AHohw3Q|tfP
z<OXN#{9L`8`Zs@+#KHZo?#ITE{>@JtJN~f#+S9+1nW5d(zq%iE|GFXln>~6@|LWWY
zWzOFc)@iPj!TDtG<>-8q!|Ls4&O7Qykt=RF`lnA+jQ+kP+{36Zv+sv685gp=&JEVt
z^LbAO_GDmB2KHoNPX_j6U{3}rWgvM>`Mxo1_wg8>za`pw_J{i-%^k+0>xIeVWpDrH
z;#Fo7#$6h3YtSE2$5ohFe%%$HRh~D>v~QVHUatAZOJ2Hg)tJ<b)34O>|0Yh~|DF$f
zGO!aF*mivRyli=o+~3*>%5gD`S`YYrWC`m=RQ+m#<XTis-Q8V>v2i`p>lVw2eE;Gu
zd=F{$=G=1?zqbsFpY>@^JAR)TX2<$}SN`}tXP6!9)1LnL{b!gR>mQ5n32DdgMZ@e^
zpZ2sn6Fgyd=b>ENT@+!*`n0D%e!m*#@466w{N6Rpj{ay*fBZf+%<lFOe|J{dKHAeC
zzrPLhm;1DwcWr$+vfdVh<C<vi2iZN-!g=#fbek3~S$>Q=<GALT%`@DYv6*vXGh-*n
zS1u=+diGwCdBz~q-#Osic8+{6b4RDWOEr3!*LL~`Iy=^`bvoJyI?_%{d|F@oTDK)W
zy(QK(t#8%ZV}x&xF$wZrcwrQuc~q+RQjf2*%kWL>>$fYdjlV^49frU479Lw)YLv~3
zZdzaGT90eC;<|cBzJIL1wYsCj8SJ^VtEW>%Wn(%~@htedd_P)&r^D&)?rt;Be_zyg
zX}fu!C)3w;iFrN_q=v`x%~X6}shY2xXO`lb{H-zK>get1Y+KdW+uqq>pR=_|?=(rb
z@yt*>cibAq(`g<j@9SOXvk1>|il_HGQ9NBe<{3^2#r21Q7n9~XX=4<Z&3AQNC;nj9
zaV@-U$GH}%d@cX!7+iR~&^{Ps9v!pET4kr=j5#sPMG;ysF>SxvSs0v`AGxy%{tojH
zBL*yH(~Mb$diu=So}bJyB6xl>$5b3Yf4Hv-KNt3P^*FW}GwgKmcurUGW;a*KW8USH
zl+2jvPM;m0mO|vKWF64+B=*NKc;)fU_Ku4OyUgo7UWA6mi!Y|)yZ*sQo>b33pFd4(
zpXgZbismSbg>zP~A)Svz#<Ja{wed8oHXZ+HB#%F7?OI)_O+S7tlB29mVflUZnMj_<
z{KiHiIm%*Te)XDo#NQ%$`cmDg_I_FGZE7mcjgRagkM8fqf3GPX+pLQ5Bpi8mrsBD*
zuhTn|l_eQG`aFG26+B3^nXTsed0D}{m~`8g)Q=U@rCv;fJr+Ec(6%*B7=!21zN*`{
zwhA7$P2MTCjXS|>n_lB59WX{r=9SalzIEnddh-TZW}t2K6*9}`t!cAn9=j&fX4d#F
zti6j(e+1X~Lu=;uUJdgd%$yx?fWA&BAF(QY3=GN>#$~Uu_+DnrYzerrYlwX!EZB~P
zwfj)7hKxF!H7DQ<ZPMq)QyQcDMYYMi64SP7ok^dJLho!mGZt`V+hw233%2X}D*Ukj
z{a3_zPBVCXU;x;2T}#j*+IGJ3`Mnx^4wS!E;wRA`brqc2b}m&u@2kNlU%3i26Dlvi
z811rt>2dOC4Sojj>W<&2z#y#9EN}j{t9DJA96e6T`fv2rI^XS#z<3PvtFO@xJ1p97
zI%Qrd>`BRmmA5;T-IeX1xvCwBH%Ify`qP&h>`%2_(3eV?cdmHlV0J{(AEzkZn-8yv
zcXaC51rwZSD9#@qQ4^<k<rO6Ev{N&{f3o8LmRl`9lMBWfF>j2Vs`y@iWVL)|--_*F
zzg!3V=Q5qwFHVc*>|fP)QCoMa9}7~KJKZ+hTnwATj)A!O39dzNKRTMz8&kIPC80LT
z8FS2x?Cg@gzs}_uO;vLGahg554Rgk9FUBP*#@@F_^Krg;W7NE1Gx}PbWCB+MULtHB
z^xS%2dbAHO59aJFdFYT4Wi~;UPv;;%E1J*iE6q1!hR3J(R*mzc`Mex-*b5;HC|vt!
zu2qYpxjMWz*th4>YvF@Sqq*2O>NVq<*21_N6NQyk_)QtlU8{Qnt(Xz>23m`kV|}gp
z*Ylz|v6t!W9klOGl}`%p_w-tjO-A#Y{jmL$0fA6YK%|w&*S9Z<=0x5d@0@CuD-X?G
zHalMR{^0l3^R-pjA9zbw)c!#4gAeVlx(#X{?755F2fw3cet#eAIjFP`)_a_I4L-{D
zIL3qNkI+4i-ZLg@@Ke5L6i3zU8TH)0s8*ll`y4Na)$DWhe(t&&{08@Pp2I5kbNXIx
zXU0b0I2Esd?Vo6n`)%e-I%}rAwdURbviIJMjh#!HZ~l+u9juCc=I;qzxF+LxXJu~)
zOiOuj+lxE!>3d9f9Q|HX5)z+xPq*K!a_!w9^<vWJw-q0?BPxWWySHa`NKp2KY1??3
z`3deD`m5k;Gq)+tAKEBuYt(u8zAAXj2$8(7IG?YAubMdZIkfQtc@L^$9}o7FjT*DD
zk<*U3&1rL~`{o<zNUo0FHJR>|xhLyw=Rn7MX8JsKS??HpHZsLF+x0eIb`LglwjJQ+
zOC1}hzFt_oZVX;?=gXYF)J$3H-6=lKZWhg~F_a$fnFfPn>43{4d4mzlBrK<v7T7Ng
zn(g00>KkZZ<uv#74y2k__Y5|#8tm%soZi*xG@B^fo6TQ-bDF(7n9b%jee>D=p1SDV
z#dA-eKkux>GGDRaj3uXg@&%^0G48d0AI*4>@64K4**krrY&LH&&zk8pr_yFm(7q<+
zG@Eae%wKZrNSS*$CYWxc@x#gV_1blR9aM8qJ7c=};|0d6&=0IKyLT@>bJpu?H`T0r
zeztXNGfXtbNw10C{E{Y#xo2(iwZ`1Cg9ij`^S`sl>kWZ@#>xBg(cp&qxcP0-181s$
z|9gV}Nj@BI!0POJVvphaxCMhA_-Lg=%#R(1_Lw5zG#RWjKi*5bR@WG}zx_WSb(l#0
zZ|(m`QxddyVedAINzu2I5A;v9y;mNzcP7WBXtKc2|9*>n!0&jO<T&>G$e?}k)^@K(
z@m8_xJ+Ry$UM@QGjU2R(|3d8JzYzPI?ZgTk@xW*M(SG|GwBPb8vETA5vENVC*ZDgS
z_UwOWSnQo)vA^S!eu>AFReT-Fp6llwom0J<b*jFW?Vq!-I;N?F@2g9&PbzyCGVw|y
zTYE+sH{b8rBc2lfiNnehsQZ7&)D7C_vho*4a@nIjo_7s+;Q!M3yTOzM=TGScu`j(K
z_O5R!AGH5ll)bZ6?47NZ?X~|O8hac6UMNV^r9DT9x+V|f-tW<0+W${Yk=4;Y2m2iC
z?f4EJ+J2KM+~52#%i7)z8k^6wC*Eyz2bdq)7vR4D|Cq);3+;#{Q{uHBHHxq=!oKOv
zwsiD}kACz%J!O6e?YA6mzg2OZEr)xjH!1Wq@{4|{dd_?(vp)j%M~MAqRs_<X__DGu
zx?*2+#Xk1NasszpbnN@WmW%mwP7?c(6UBb`h_Ty0(G=Snc8?l7Xs_2_vJnq3A0`D2
g@p<2q#Qz^v{CfOa9zXT~&z9w4ue#5RHBim@zl#AV2><{9

diff --git a/app/src/main/assets/data/license.yaml b/app/src/main/assets/data/license.yaml
index 8a51a06a1..00517d89d 100644
--- a/app/src/main/assets/data/license.yaml
+++ b/app/src/main/assets/data/license.yaml
@@ -80,11 +80,11 @@ license:
     urls:
       - https://www.ivarch.com/programs/pv.shtml
 
-  - name: 7-zip
-    description: Assets extractor
-    license: LGPL-2.1
+  - name: XZ for Java
+    description: Prebuilt archive (tar.xz) decompressor
+    license: 0BSD
     urls:
-      - https://www.7-zip.org/
+      - https://tukaani.org/xz/java.html
 
   - name: udisasm
     description: Disassembler for libsimpledump.so
diff --git a/app/src/main/assets/prebuilts b/app/src/main/assets/prebuilts
index b5515e428..ce07fc76c 160000
--- a/app/src/main/assets/prebuilts
+++ b/app/src/main/assets/prebuilts
@@ -1 +1 @@
-Subproject commit b5515e428d12cabe0dfee1fb3e9d0f3d5c4aa24b
+Subproject commit ce07fc76c96315d26539bac3eedb021c1b0da285
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/Constants.java b/app/src/main/java/cn/classfun/droidvm/lib/Constants.java
index 3e8d08d65..8642176af 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/Constants.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/Constants.java
@@ -20,9 +20,10 @@ public final class Constants {
     public static final String PATH_EDK2_QEMU_FIRMWARE = pathJoin(DATA_DIR, "/usr/share/droidvm/edk2-qemu.fd");
     public static final String GITHUB_WIKI_URL = "https://github.com/Droid-VM/DroidVM/wiki";
     public static final String GITHUB_ISSUE_URL = "https://github.com/Droid-VM/DroidVM/issues";
-    public static final String[] BINARIES_PREBUILT = {"7za"};
+    // droidvm + daemon are CMake-built and shipped as APK assets. The
+    // third-party daemons (gvswitch/pbridge/bridgedhcp/netbox) and lbx now
+    // arrive via the prebuilt tar.xz, extracted to DATA/bin/<name>.
     public static final String[] BINARIES_BUILT = {"droidvm", "daemon"};
-    public static final String[] BINARIES_THIRDPARTY = {"gvswitch", "pbridge", "bridgedhcp", "lbx", "netbox"};
     public static final String[] LIBRARIES_BUILT = {"libsimpledump.so", "libunixhelper.so"};
     /**
      * IFA_RT_PRIORITY magic that pbridge tags its ND/ARP-offload proxy
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/utils/AssetUtils.java b/app/src/main/java/cn/classfun/droidvm/lib/utils/AssetUtils.java
index 4a79b5738..b25e09dd2 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/utils/AssetUtils.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/utils/AssetUtils.java
@@ -3,11 +3,9 @@
 import static android.os.Build.SUPPORTED_ABIS;
 import static cn.classfun.droidvm.lib.Constants.*;
 import static cn.classfun.droidvm.lib.utils.FileUtils.*;
-import static cn.classfun.droidvm.lib.utils.StringUtils.basename;
 import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
 import static cn.classfun.droidvm.lib.utils.StringUtils.pathJoin;
 
-import android.annotation.SuppressLint;
 import android.content.Context;
 import android.util.Log;
 
@@ -16,11 +14,15 @@
 
 import org.json.JSONException;
 import org.json.JSONObject;
+import org.tukaani.xz.XZInputStream;
 import org.yaml.snakeyaml.Yaml;
 
+import java.io.BufferedInputStream;
 import java.io.File;
 import java.io.FileOutputStream;
 import java.io.IOException;
+import java.io.InputStream;
+import java.nio.charset.StandardCharsets;
 import java.util.ArrayList;
 
 import cn.classfun.droidvm.lib.crypt.HashFile;
@@ -37,7 +39,7 @@ private AssetUtils() {
     private static String getPrebuiltAsset(@NonNull Context context) {
         if (prebuiltAsset != null) return prebuiltAsset;
         for (var abi : SUPPORTED_ABIS) {
-            var name = fmt("prebuilts/prebuilt-%s.7z", abi);
+            var name = fmt("prebuilts/prebuilt-%s.tar.xz", abi);
             if (checkAssetsExists(context, name)) {
                 prebuiltAsset = name;
                 return name;
@@ -195,9 +197,10 @@ public static void extractAsset(
     }
 
     public static void extractBinaries(@NonNull Context context) {
+        // Only the CMake-built binaries (droidvm, daemon) ship as APK assets.
+        // The third-party daemons and lbx now arrive via the prebuilt tar.xz
+        // (extracted to DATA/bin/<name>), and 7za has been removed entirely.
         extractAsset(context, "bin", BINARIES_BUILT, false);
-        extractAsset(context, "bin", BINARIES_PREBUILT, true);
-        extractAsset(context, "bin", BINARIES_THIRDPARTY, false);
     }
 
     public static void extractLibraries(@NonNull Context context) {
@@ -263,7 +266,6 @@ public static void cleanupPrebuilt(@NonNull Context context) {
         }
     }
 
-    @SuppressLint("DefaultLocale")
     public static void extractPrebuilt(
         @NonNull Context context
     ) throws IOException, JSONException {
@@ -275,36 +277,17 @@ public static void extractPrebuilt(
         var hash = getPrebuiltHash(context);
         cleanupPrebuilt(context);
         var prebuiltHash = new HashFile(loadJSONFromAssets(context, hash));
-        var p7za = getAssetBinaryPath("7za");
-        if (!new File(p7za).exists())
-            throw new IOException(fmt("7za binary not found: %s", p7za));
-        var tmpFile = new File(context.getCacheDir(), basename(asset));
-        Log.i(TAG, fmt("Copying %s to %s", asset, tmpFile.getAbsolutePath()));
-        try (var in = context.getAssets().open(asset);
-            var out = new FileOutputStream(tmpFile)) {
-            copyStream(in, out);
+        var dataDir = context.getDataDir();
+        Log.i(TAG, fmt("Extracting %s to %s", asset, dataDir.getAbsolutePath()));
+        // Decompress the runtime payload in-process: XZ (org.tukaani:xz) + a
+        // minimal USTAR reader -- no 7za binary, no temp copy. Files are written
+        // by this (app-uid) process so they need no chown; bin/ and usr/bin/
+        // entries are made executable for the root daemon to run.
+        try (var in = context.getAssets().open(asset)) {
+            extractTarXz(in, dataDir);
         }
-        var dataDir = context.getDataDir().getAbsolutePath();
-        Log.i(TAG, fmt("Extracting %s to %s", asset, dataDir));
-        var result = RunUtils.runList(
-            p7za, "x", "-y",
-            fmt("-o%s", dataDir),
-            tmpFile.getAbsolutePath()
-        );
-        result.printLog("7za");
-        if (!tmpFile.delete())
-            Log.w(TAG, fmt("Failed to delete temp file: %s", tmpFile));
-        if (!result.isSuccess())
-            throw new IOException(fmt("7za extraction failed (exit %d)", result.getCode()));
         Log.i(TAG, "Prebuilt extraction completed successfully");
-        var info = context.getApplicationInfo();
-        var usrDir = pathJoin(context.getDataDir(), "usr");
-        RunUtils.runList("chown", "-R", String.valueOf(info.uid), usrDir);
-        RunUtils.runList("chgrp", "-R", String.valueOf(info.uid), usrDir);
-        var usrBinDir = pathJoin(context.getDataDir(), "usr", "bin");
-        if (new File(usrBinDir).isDirectory())
-            RunUtils.runList("chmod", "-R", "0755", usrBinDir);
-        var localHashFile = new File(context.getDataDir(), "hash.json");
+        var localHashFile = new File(dataDir, "hash.json");
         var localHash = HashFile.loadOrCreate(localHashFile);
         try {
             for (var item : prebuiltHash.values())
@@ -317,6 +300,120 @@ public static void extractPrebuilt(
         }
     }
 
+    // ---- minimal tar.xz extraction (USTAR; no PAX/GNU records, no symlinks) ----
+    // The packer (auto-build.py) forces USTAR_FORMAT over a short-path,
+    // symlink-free tree, so this reader stays small; corruption is still caught
+    // by the per-file sha256 manifest check in needsExtractPrebuilt().
+
+    private static void extractTarXz(@NonNull InputStream rawIn, @NonNull File destRoot)
+        throws IOException {
+        try (var xz = new XZInputStream(new BufferedInputStream(rawIn))) {
+            var header = new byte[512];
+            while (readBlock(xz, header)) {
+                if (isZeroBlock(header)) break;
+                var name = cString(header, 0, 100);
+                var prefix = cString(header, 345, 155);
+                var path = prefix.isEmpty() ? name : prefix + "/" + name;
+                var size = parseOctal(header, 124, 12);
+                var mode = (int) parseOctal(header, 100, 8);
+                var type = (char) (header[156] & 0xff);
+                var outFile = new File(destRoot, path);
+                if (type == '5') {                       // directory
+                    if (!outFile.isDirectory() && !outFile.mkdirs())
+                        throw new IOException(fmt("Failed to mkdir %s", outFile));
+                    continue;
+                }
+                if (type != '0' && type != '\0') {       // unexpected (symlink/etc.)
+                    Log.w(TAG, fmt("Skipping unsupported tar entry %s (type %c)", path, type));
+                    skip(xz, size + padding(size));
+                    continue;
+                }
+                var parent = outFile.getParentFile();
+                if (parent != null && !parent.isDirectory() && !parent.mkdirs())
+                    throw new IOException(fmt("Failed to mkdir %s", parent));
+                // Unlink any existing file first. Opening it in place would fail
+                // with ETXTBSY if it's a currently-running executable (e.g. the
+                // gvswitch daemon); unlinking is safe -- a running process keeps
+                // the old inode while the name is rebound to the new file.
+                if (outFile.exists() && !outFile.delete())
+                    Log.w(TAG, fmt("Could not unlink existing %s before extract", outFile));
+                try (var os = new FileOutputStream(outFile)) {
+                    copyN(xz, os, size);
+                }
+                skip(xz, padding(size));
+                outFile.setReadable(true, false);
+                if ((mode & 0111) != 0 || path.startsWith("bin/") || path.startsWith("usr/bin/"))
+                    outFile.setExecutable(true, false);
+            }
+        }
+    }
+
+    private static long padding(long size) {
+        var rem = size % 512;
+        return rem == 0 ? 0 : 512 - rem;
+    }
+
+    /** Read exactly one 512-byte block; false on a clean EOF between blocks. */
+    private static boolean readBlock(@NonNull InputStream in, @NonNull byte[] buf)
+        throws IOException {
+        var off = 0;
+        while (off < buf.length) {
+            var n = in.read(buf, off, buf.length - off);
+            if (n < 0) {
+                if (off == 0) return false;
+                throw new IOException("Truncated tar stream");
+            }
+            off += n;
+        }
+        return true;
+    }
+
+    private static boolean isZeroBlock(@NonNull byte[] buf) {
+        for (var b : buf) if (b != 0) return false;
+        return true;
+    }
+
+    private static String cString(@NonNull byte[] buf, int off, int len) {
+        var end = off;
+        var max = off + len;
+        while (end < max && buf[end] != 0) end++;
+        return new String(buf, off, end - off, StandardCharsets.UTF_8);
+    }
+
+    private static long parseOctal(@NonNull byte[] buf, int off, int len) {
+        long value = 0;
+        var i = off;
+        var max = off + len;
+        while (i < max && (buf[i] == ' ' || buf[i] == 0)) i++;
+        while (i < max && buf[i] >= '0' && buf[i] <= '7') {
+            value = (value << 3) + (buf[i] - '0');
+            i++;
+        }
+        return value;
+    }
+
+    private static void copyN(@NonNull InputStream in, @NonNull FileOutputStream out, long n)
+        throws IOException {
+        var buf = new byte[8192];
+        var remaining = n;
+        while (remaining > 0) {
+            var got = in.read(buf, 0, (int) Math.min(buf.length, remaining));
+            if (got < 0) throw new IOException("Truncated tar entry");
+            out.write(buf, 0, got);
+            remaining -= got;
+        }
+    }
+
+    private static void skip(@NonNull InputStream in, long n) throws IOException {
+        var remaining = n;
+        var buf = new byte[8192];
+        while (remaining > 0) {
+            var got = in.read(buf, 0, (int) Math.min(buf.length, remaining));
+            if (got < 0) throw new IOException("Truncated tar stream");
+            remaining -= got;
+        }
+    }
+
     public static boolean isAssetFileExists(@NonNull Context context, @NonNull String assetName) {
         try {
             context.getAssets().open(assetName).close();
diff --git a/app/src/main/rust/netbox/.gitignore b/app/src/main/rust/netbox/.gitignore
deleted file mode 100644
index 4f96631da..000000000
--- a/app/src/main/rust/netbox/.gitignore
+++ /dev/null
@@ -1,2 +0,0 @@
-/target
-/dist
diff --git a/app/src/main/rust/netbox/Cargo.lock b/app/src/main/rust/netbox/Cargo.lock
deleted file mode 100644
index 64a5bf628..000000000
--- a/app/src/main/rust/netbox/Cargo.lock
+++ /dev/null
@@ -1,574 +0,0 @@
-# This file is automatically @generated by Cargo.
-# It is not intended for manual editing.
-version = 4
-
-[[package]]
-name = "anstream"
-version = "1.0.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "824a212faf96e9acacdbd09febd34438f8f711fb84e09a8916013cd7815ca28d"
-dependencies = [
- "anstyle",
- "anstyle-parse",
- "anstyle-query",
- "anstyle-wincon",
- "colorchoice",
- "is_terminal_polyfill",
- "utf8parse",
-]
-
-[[package]]
-name = "anstyle"
-version = "1.0.14"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "940b3a0ca603d1eade50a4846a2afffd5ef57a9feac2c0e2ec2e14f9ead76000"
-
-[[package]]
-name = "anstyle-parse"
-version = "1.0.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "52ce7f38b242319f7cabaa6813055467063ecdc9d355bbb4ce0c68908cd8130e"
-dependencies = [
- "utf8parse",
-]
-
-[[package]]
-name = "anstyle-query"
-version = "1.1.5"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "40c48f72fd53cd289104fc64099abca73db4166ad86ea0b4341abe65af83dadc"
-dependencies = [
- "windows-sys",
-]
-
-[[package]]
-name = "anstyle-wincon"
-version = "3.0.11"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "291e6a250ff86cd4a820112fb8898808a366d8f9f58ce16d1f538353ad55747d"
-dependencies = [
- "anstyle",
- "once_cell_polyfill",
- "windows-sys",
-]
-
-[[package]]
-name = "anyhow"
-version = "1.0.102"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "7f202df86484c868dbad7eaa557ef785d5c66295e41b460ef922eca0723b842c"
-
-[[package]]
-name = "bitflags"
-version = "2.13.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "b4388bee8683e3d04af747c73422af53102d2bd24d9eadb6cbc100baef4b43f8"
-
-[[package]]
-name = "bytes"
-version = "1.11.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "1e748733b7cbc798e1434b6ac524f0c1ff2ab456fe201501e6497c8417a4fc33"
-
-[[package]]
-name = "cfg-if"
-version = "1.0.4"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "9330f8b2ff13f34540b44e946ef35111825727b38d33286ef986142615121801"
-
-[[package]]
-name = "cfg_aliases"
-version = "0.2.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "613afe47fcd5fac7ccf1db93babcb082c5994d996f20b8b159f2ad1658eb5724"
-
-[[package]]
-name = "clap"
-version = "4.6.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "1ddb117e43bbf7dacf0a4190fef4d345b9bad68dfc649cb349e7d17d28428e51"
-dependencies = [
- "clap_builder",
- "clap_derive",
-]
-
-[[package]]
-name = "clap_builder"
-version = "4.6.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "714a53001bf66416adb0e2ef5ac857140e7dc3a0c48fb28b2f10762fc4b5069f"
-dependencies = [
- "anstream",
- "anstyle",
- "clap_lex",
- "strsim",
-]
-
-[[package]]
-name = "clap_derive"
-version = "4.6.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "f2ce8604710f6733aa641a2b3731eaa1e8b3d9973d5e3565da11800813f997a9"
-dependencies = [
- "heck",
- "proc-macro2",
- "quote",
- "syn",
-]
-
-[[package]]
-name = "clap_lex"
-version = "1.1.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "c8d4a3bb8b1e0c1050499d1815f5ab16d04f0959b233085fb31653fbfc9d98f9"
-
-[[package]]
-name = "colorchoice"
-version = "1.0.5"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "1d07550c9036bf2ae0c684c4297d503f838287c83c53686d05370d0e139ae570"
-
-[[package]]
-name = "futures"
-version = "0.3.32"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "8b147ee9d1f6d097cef9ce628cd2ee62288d963e16fb287bd9286455b241382d"
-dependencies = [
- "futures-channel",
- "futures-core",
- "futures-executor",
- "futures-io",
- "futures-sink",
- "futures-task",
- "futures-util",
-]
-
-[[package]]
-name = "futures-channel"
-version = "0.3.32"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "07bbe89c50d7a535e539b8c17bc0b49bdb77747034daa8087407d655f3f7cc1d"
-dependencies = [
- "futures-core",
- "futures-sink",
-]
-
-[[package]]
-name = "futures-core"
-version = "0.3.32"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "7e3450815272ef58cec6d564423f6e755e25379b217b0bc688e295ba24df6b1d"
-
-[[package]]
-name = "futures-executor"
-version = "0.3.32"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "baf29c38818342a3b26b5b923639e7b1f4a61fc5e76102d4b1981c6dc7a7579d"
-dependencies = [
- "futures-core",
- "futures-task",
- "futures-util",
-]
-
-[[package]]
-name = "futures-io"
-version = "0.3.32"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "cecba35d7ad927e23624b22ad55235f2239cfa44fd10428eecbeba6d6a717718"
-
-[[package]]
-name = "futures-macro"
-version = "0.3.32"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "e835b70203e41293343137df5c0664546da5745f82ec9b84d40be8336958447b"
-dependencies = [
- "proc-macro2",
- "quote",
- "syn",
-]
-
-[[package]]
-name = "futures-sink"
-version = "0.3.32"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "c39754e157331b013978ec91992bde1ac089843443c49cbc7f46150b0fad0893"
-
-[[package]]
-name = "futures-task"
-version = "0.3.32"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "037711b3d59c33004d3856fbdc83b99d4ff37a24768fa1be9ce3538a1cde4393"
-
-[[package]]
-name = "futures-util"
-version = "0.3.32"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "389ca41296e6190b48053de0321d02a77f32f8a5d2461dd38762c0593805c6d6"
-dependencies = [
- "futures-channel",
- "futures-core",
- "futures-io",
- "futures-macro",
- "futures-sink",
- "futures-task",
- "memchr",
- "pin-project-lite",
- "slab",
-]
-
-[[package]]
-name = "heck"
-version = "0.5.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "2304e00983f87ffb38b55b444b5e3b60a884b5d30c0fca7d82fe33449bbe55ea"
-
-[[package]]
-name = "is_terminal_polyfill"
-version = "1.70.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "a6cb138bb79a146c1bd460005623e142ef0181e3d0219cb493e02f7d08a35695"
-
-[[package]]
-name = "itoa"
-version = "1.0.18"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "8f42a60cbdf9a97f5d2305f08a87dc4e09308d1276d28c869c684d7777685682"
-
-[[package]]
-name = "libc"
-version = "0.2.186"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "68ab91017fe16c622486840e4c83c9a37afeff978bd239b5293d61ece587de66"
-
-[[package]]
-name = "log"
-version = "0.4.32"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "953f07c43838f8e6f9758cab68bf5bed85465e7587ebe0b823f1bcd81978ad3a"
-
-[[package]]
-name = "memchr"
-version = "2.8.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "88904434abc2901f197fe8cc55f0445e7ded921dba5911dad2e2b39b48e663c4"
-
-[[package]]
-name = "mio"
-version = "1.2.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "02bd0af71c67b473010cbbc60715ee815645a4dc942899111f494b4b737d6fda"
-dependencies = [
- "libc",
- "wasi",
- "windows-sys",
-]
-
-[[package]]
-name = "netbox"
-version = "0.1.0"
-dependencies = [
- "anyhow",
- "clap",
- "futures",
- "libc",
- "netlink-packet-route",
- "netlink-sys",
- "rtnetlink",
- "serde",
- "serde_json",
- "tokio",
-]
-
-[[package]]
-name = "netlink-packet-core"
-version = "0.8.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "3463cbb78394cb0141e2c926b93fc2197e473394b761986eca3b9da2c63ae0f4"
-dependencies = [
- "paste",
-]
-
-[[package]]
-name = "netlink-packet-route"
-version = "0.30.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "be8919612f6028ab4eacbbfe1234a9a43e3722c6e0915e7ff519066991905092"
-dependencies = [
- "bitflags",
- "libc",
- "log",
- "netlink-packet-core",
-]
-
-[[package]]
-name = "netlink-proto"
-version = "0.12.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "b65d130ee111430e47eed7896ea43ca693c387f097dd97376bffafbf25812128"
-dependencies = [
- "bytes",
- "futures",
- "log",
- "netlink-packet-core",
- "netlink-sys",
- "thiserror 2.0.18",
-]
-
-[[package]]
-name = "netlink-sys"
-version = "0.8.8"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "cd6c30ed10fa69cc491d491b85cc971f6bdeb8e7367b7cde2ee6cc878d583fae"
-dependencies = [
- "bytes",
- "futures-util",
- "libc",
- "log",
- "tokio",
-]
-
-[[package]]
-name = "nix"
-version = "0.30.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "74523f3a35e05aba87a1d978330aef40f67b0304ac79c1c00b294c9830543db6"
-dependencies = [
- "bitflags",
- "cfg-if",
- "cfg_aliases",
- "libc",
-]
-
-[[package]]
-name = "once_cell_polyfill"
-version = "1.70.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "384b8ab6d37215f3c5301a95a4accb5d64aa607f1fcb26a11b5303878451b4fe"
-
-[[package]]
-name = "paste"
-version = "1.0.15"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "57c0d7b74b563b49d38dae00a0c37d4d6de9b432382b2892f0574ddcae73fd0a"
-
-[[package]]
-name = "pin-project-lite"
-version = "0.2.17"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "a89322df9ebe1c1578d689c92318e070967d1042b512afbe49518723f4e6d5cd"
-
-[[package]]
-name = "proc-macro2"
-version = "1.0.106"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "8fd00f0bb2e90d81d1044c2b32617f68fcb9fa3bb7640c23e9c748e53fb30934"
-dependencies = [
- "unicode-ident",
-]
-
-[[package]]
-name = "quote"
-version = "1.0.45"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "41f2619966050689382d2b44f664f4bc593e129785a36d6ee376ddf37259b924"
-dependencies = [
- "proc-macro2",
-]
-
-[[package]]
-name = "rtnetlink"
-version = "0.21.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "dc19f84f710fa2f337617f9bc0400260a94224bde7bae28fd8879f3771ca5784"
-dependencies = [
- "futures-channel",
- "futures-util",
- "log",
- "netlink-packet-core",
- "netlink-packet-route",
- "netlink-proto",
- "netlink-sys",
- "nix",
- "thiserror 1.0.69",
- "tokio",
-]
-
-[[package]]
-name = "serde"
-version = "1.0.228"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "9a8e94ea7f378bd32cbbd37198a4a91436180c5bb472411e48b5ec2e2124ae9e"
-dependencies = [
- "serde_core",
- "serde_derive",
-]
-
-[[package]]
-name = "serde_core"
-version = "1.0.228"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "41d385c7d4ca58e59fc732af25c3983b67ac852c1a25000afe1175de458b67ad"
-dependencies = [
- "serde_derive",
-]
-
-[[package]]
-name = "serde_derive"
-version = "1.0.228"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "d540f220d3187173da220f885ab66608367b6574e925011a9353e4badda91d79"
-dependencies = [
- "proc-macro2",
- "quote",
- "syn",
-]
-
-[[package]]
-name = "serde_json"
-version = "1.0.150"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "e8014e44b4736ed0538adeecded0fce2a272f22dc9578a7eb6b2d9993c74cfb9"
-dependencies = [
- "itoa",
- "memchr",
- "serde",
- "serde_core",
- "zmij",
-]
-
-[[package]]
-name = "slab"
-version = "0.4.12"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "0c790de23124f9ab44544d7ac05d60440adc586479ce501c1d6d7da3cd8c9cf5"
-
-[[package]]
-name = "socket2"
-version = "0.6.4"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "52d1cfed4120b4d927bf7c0f86d2087a4a7d6027c906d9f9d525a80573b9be51"
-dependencies = [
- "libc",
- "windows-sys",
-]
-
-[[package]]
-name = "strsim"
-version = "0.11.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "7da8b5736845d9f2fcb837ea5d9e2628564b3b043a70948a3f0b778838c5fb4f"
-
-[[package]]
-name = "syn"
-version = "2.0.117"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "e665b8803e7b1d2a727f4023456bbbbe74da67099c585258af0ad9c5013b9b99"
-dependencies = [
- "proc-macro2",
- "quote",
- "unicode-ident",
-]
-
-[[package]]
-name = "thiserror"
-version = "1.0.69"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "b6aaf5339b578ea85b50e080feb250a3e8ae8cfcdff9a461c9ec2904bc923f52"
-dependencies = [
- "thiserror-impl 1.0.69",
-]
-
-[[package]]
-name = "thiserror"
-version = "2.0.18"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "4288b5bcbc7920c07a1149a35cf9590a2aa808e0bc1eafaade0b80947865fbc4"
-dependencies = [
- "thiserror-impl 2.0.18",
-]
-
-[[package]]
-name = "thiserror-impl"
-version = "1.0.69"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "4fee6c4efc90059e10f81e6d42c60a18f76588c3d74cb83a0b242a2b6c7504c1"
-dependencies = [
- "proc-macro2",
- "quote",
- "syn",
-]
-
-[[package]]
-name = "thiserror-impl"
-version = "2.0.18"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "ebc4ee7f67670e9b64d05fa4253e753e016c6c95ff35b89b7941d6b856dec1d5"
-dependencies = [
- "proc-macro2",
- "quote",
- "syn",
-]
-
-[[package]]
-name = "tokio"
-version = "1.52.3"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "8fc7f01b389ac15039e4dc9531aa973a135d7a4135281b12d7c1bc79fd57fffe"
-dependencies = [
- "libc",
- "mio",
- "pin-project-lite",
- "socket2",
- "tokio-macros",
- "windows-sys",
-]
-
-[[package]]
-name = "tokio-macros"
-version = "2.7.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "385a6cb71ab9ab790c5fe8d67f1645e6c450a7ce006a33de03daa956cf70a496"
-dependencies = [
- "proc-macro2",
- "quote",
- "syn",
-]
-
-[[package]]
-name = "unicode-ident"
-version = "1.0.24"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "e6e4313cd5fcd3dad5cafa179702e2b244f760991f45397d14d4ebf38247da75"
-
-[[package]]
-name = "utf8parse"
-version = "0.2.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "06abde3611657adf66d383f00b093d7faecc7fa57071cce2578660c9f1010821"
-
-[[package]]
-name = "wasi"
-version = "0.11.1+wasi-snapshot-preview1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "ccf3ec651a847eb01de73ccad15eb7d99f80485de043efb2f370cd654f4ea44b"
-
-[[package]]
-name = "windows-link"
-version = "0.2.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "f0805222e57f7521d6a62e36fa9163bc891acd422f971defe97d64e70d0a4fe5"
-
-[[package]]
-name = "windows-sys"
-version = "0.61.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "ae137229bcbd6cdf0f7b80a31df61766145077ddf49416a728b02cb3921ff3fc"
-dependencies = [
- "windows-link",
-]
-
-[[package]]
-name = "zmij"
-version = "1.0.21"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "b8848ee67ecc8aedbaf3e4122217aff892639231befc6a1b58d29fff4c2cabaa"
diff --git a/app/src/main/rust/netbox/Cargo.toml b/app/src/main/rust/netbox/Cargo.toml
deleted file mode 100644
index b744c6691..000000000
--- a/app/src/main/rust/netbox/Cargo.toml
+++ /dev/null
@@ -1,27 +0,0 @@
-[package]
-name = "netbox"
-version = "0.1.0"
-edition = "2021"
-rust-version = "1.91"
-description = "netbox: a minimal netlink CLI toolbox for DroidVM -- replaces the iproute2/bridge subset the daemon shells out to, so the APK doesn't depend on each OEM's system ip/bridge (versions vary; some don't even emit IFA_RT_PRIORITY in -j JSON)"
-
-[[bin]]
-name = "netbox"
-path = "src/main.rs"
-
-[dependencies]
-clap = { version = "4", features = ["derive"] }
-libc = "0.2"
-anyhow = "1"
-serde = { version = "1", features = ["derive"] }
-serde_json = "1"
-tokio = { version = "1", features = ["rt", "macros", "time"] }
-futures = "0.3"
-rtnetlink = "0.21"
-netlink-packet-route = "0.30"
-netlink-sys = "0.8"
-
-[profile.release]
-opt-level = 2
-lto = "thin"
-strip = true
diff --git a/app/src/main/rust/netbox/build.sh b/app/src/main/rust/netbox/build.sh
deleted file mode 100755
index 267f015c9..000000000
--- a/app/src/main/rust/netbox/build.sh
+++ /dev/null
@@ -1,40 +0,0 @@
-#!/usr/bin/env bash
-# Build netbox, the daemon's netlink CLI toolbox.
-#
-#   ./build.sh            # both targets (default)
-#   ./build.sh x64        # x86_64-unknown-linux-musl  -> dist/netbox-linux-x64
-#   ./build.sh arm64      # aarch64-unknown-linux-musl -> dist/netbox-android-arm64
-#   ./build.sh host       # quick host debug build (./target/debug/netbox)
-#
-# Both release targets are fully static (musl), so they run under any libc --
-# glibc, musl, or Android bionic. The aarch64 target links with the bundled
-# rust-lld, so no external cross toolchain is needed.
-set -euo pipefail
-cd "$(dirname "$0")"
-
-X64=x86_64-unknown-linux-musl
-ARM=aarch64-unknown-linux-musl
-
-need() { command -v "$1" >/dev/null 2>&1 || { echo "missing: $1" >&2; exit 1; }; }
-need cargo
-add_target() { command -v rustup >/dev/null 2>&1 && rustup target add "$1" >/dev/null 2>&1 || true; }
-
-build_x64() {
-    add_target "$X64"
-    cargo build --release --target "$X64"
-    install -Dm755 "target/$X64/release/netbox" dist/netbox-linux-x64
-}
-
-build_arm() {
-    add_target "$ARM"
-    RUSTFLAGS="-C linker=rust-lld" cargo build --release --target "$ARM"
-    install -Dm755 "target/$ARM/release/netbox" dist/netbox-android-arm64
-}
-
-case "${1:-all}" in
-    x64)            build_x64 ;;
-    arm64|aarch64)  build_arm ;;
-    host)           cargo build ;;
-    all)            build_x64; build_arm ;;
-    *) echo "usage: $0 [x64|arm64|host|all]" >&2; exit 1 ;;
-esac
diff --git a/app/src/main/rust/netbox/src/main.rs b/app/src/main/rust/netbox/src/main.rs
deleted file mode 100644
index 7e7b818d9..000000000
--- a/app/src/main/rust/netbox/src/main.rs
+++ /dev/null
@@ -1,263 +0,0 @@
-//! netbox -- minimal netlink CLI for the DroidVM daemon.
-//!
-//! The daemon used to shell out to the system `ip`/`bridge` (iproute2). Those
-//! vary per OEM and some are too old to emit `IFA_RT_PRIORITY` in `-j` JSON --
-//! exactly the field pbridge tags its offload-proxy addresses with. netbox does
-//! the same operations straight over rtnetlink, with our own JSON schema, so
-//! behaviour is identical on every device. Most invocations do one op and
-//! exit (mutations report via exit code, queries print JSON to stdout); the
-//! lone exception is `monitor-addr`, which streams a JSON line per change
-//! until killed.
-
-use anyhow::Result;
-use clap::{Parser, Subcommand};
-use std::net::IpAddr;
-
-mod nl;
-mod tap;
-
-#[derive(Parser)]
-#[command(name = "netbox", version, about, disable_help_subcommand = true)]
-struct Cli {
-    #[command(subcommand)]
-    cmd: Cmd,
-}
-
-#[derive(Subcommand)]
-enum Cmd {
-    /// Create a bridge device.
-    LinkAddBridge { name: String },
-    /// Create an 802.1q VLAN subinterface on a parent device.
-    LinkAddVlan {
-        #[arg(long)]
-        link: String,
-        #[arg(long)]
-        name: String,
-        #[arg(long)]
-        id: u16,
-    },
-    /// Create a persistent TAP (mode tap, vnet_hdr).
-    LinkAddTap { name: String },
-    /// Delete a link by name (idempotent).
-    LinkDel { name: String },
-    /// Bring a link up or down.
-    LinkSetState {
-        name: String,
-        #[arg(value_parser = ["up", "down"])]
-        state: String,
-    },
-    /// Enslave a link into a bridge.
-    LinkSetMaster { iface: String, master: String },
-    /// Detach a link from its bridge.
-    LinkSetNomaster { iface: String },
-    /// Set a link's MAC address.
-    LinkSetMac { dev: String, mac: String },
-    /// Toggle STP on a bridge.
-    LinkSetStp {
-        bridge: String,
-        #[arg(value_parser = on_off)]
-        on: bool,
-    },
-    /// Toggle bridge-port isolation.
-    LinkSetIsolated {
-        dev: String,
-        #[arg(value_parser = on_off)]
-        on: bool,
-    },
-    /// Toggle bridge-port MAC locking.
-    LinkSetLocked {
-        dev: String,
-        #[arg(value_parser = on_off)]
-        on: bool,
-    },
-    /// Add an address to a device (CIDR).
-    AddrAdd { dev: String, cidr: String },
-    /// Remove an address from a device (CIDR; idempotent).
-    AddrDel { dev: String, cidr: String },
-    /// List addresses as JSON; optional device and IFA_RT_PRIORITY filters.
-    AddrList {
-        #[arg(long)]
-        dev: Option<String>,
-        #[arg(long)]
-        metric: Option<u32>,
-    },
-    /// Add an onlink subnet route in a table.
-    RouteAdd {
-        #[arg(long)]
-        dev: String,
-        #[arg(long)]
-        dst: String,
-        #[arg(long)]
-        table: u32,
-        #[arg(long = "v6")]
-        v6: bool,
-    },
-    /// Add `from all iif <iif> lookup <table>` (idempotent).
-    RuleAdd {
-        #[arg(long)]
-        iif: String,
-        #[arg(long)]
-        table: u32,
-        #[arg(long = "v6")]
-        v6: bool,
-    },
-    /// Remove `from all iif <iif> lookup <table>` (idempotent).
-    RuleDel {
-        #[arg(long)]
-        iif: String,
-        #[arg(long)]
-        table: u32,
-        #[arg(long = "v6")]
-        v6: bool,
-    },
-    /// Add a static fdb entry on a bridge master.
-    FdbAdd { mac: String, dev: String },
-    /// List links as JSON; optional master / bridge-only filters.
-    LinkList {
-        #[arg(long)]
-        master: Option<String>,
-        #[arg(long = "type-bridge")]
-        type_bridge: bool,
-    },
-    /// List a device's neighbours as JSON.
-    NeighList { dev: String },
-    /// List policy routing rules as JSON.
-    RuleList {
-        #[arg(long = "v6")]
-        v6: bool,
-    },
-    /// Print the phone's own reachable IPv4 addresses once as `{"v4":[...]}`.
-    HostIps {
-        /// Interface-name prefix to include (repeatable): wlan, rmnet_data, ...
-        #[arg(long)]
-        iface: Vec<String>,
-        /// Drop addresses tagged with this IFA_RT_PRIORITY (pbridge offload).
-        #[arg(long)]
-        exclude_metric: Option<u32>,
-    },
-    /// Stream `{"v4":[...]}` whenever the reachable IPv4 set changes. Subscribes
-    /// to RTNLGRP_IPV4_IFADDR and re-emits only on an actual change; runs until
-    /// killed.
-    MonitorAddr {
-        #[arg(long)]
-        iface: Vec<String>,
-        #[arg(long)]
-        exclude_metric: Option<u32>,
-    },
-}
-
-fn on_off(s: &str) -> Result<bool, String> {
-    match s {
-        "on" => Ok(true),
-        "off" => Ok(false),
-        _ => Err(format!("expected on|off, got {s:?}")),
-    }
-}
-
-/// Split "addr/plen" into its address and prefix length.
-fn parse_cidr(cidr: &str) -> Result<(IpAddr, u8)> {
-    let (a, p) = cidr
-        .split_once('/')
-        .ok_or_else(|| anyhow::anyhow!("not a CIDR: {cidr}"))?;
-    Ok((a.parse()?, p.parse()?))
-}
-
-fn main() {
-    std::process::exit(match run() {
-        Ok(()) => 0,
-        Err(e) => {
-            eprintln!("netbox: {e:#}");
-            1
-        }
-    });
-}
-
-fn run() -> Result<()> {
-    let cli = Cli::parse();
-    // tuntap is a plain ioctl -- no netlink runtime needed.
-    if let Cmd::LinkAddTap { name } = &cli.cmd {
-        return tap::add_tap(name);
-    }
-    let rt = tokio::runtime::Builder::new_current_thread()
-        .enable_all()
-        .build()?;
-    rt.block_on(async {
-        match cli.cmd {
-            // long-running: its own connection joins a multicast group
-            Cmd::MonitorAddr {
-                iface,
-                exclude_metric,
-            } => nl::monitor_host_ipv4(&iface, exclude_metric, print_host_ips).await,
-            // everything else is one op against a fresh connection, then exit
-            cmd => {
-                let net = nl::Net::connect()?;
-                run_oneshot(&net, cmd).await
-            }
-        }
-    })
-}
-
-async fn run_oneshot(net: &nl::Net, cmd: Cmd) -> Result<()> {
-    match cmd {
-        Cmd::LinkAddBridge { name } => net.link_add_bridge(&name).await,
-        Cmd::LinkAddVlan { link, name, id } => net.link_add_vlan(&link, &name, id).await,
-        Cmd::LinkAddTap { .. } => unreachable!("handled before runtime"),
-        Cmd::LinkDel { name } => net.link_del(&name).await,
-        Cmd::LinkSetState { name, state } => net.link_set_state(&name, state == "up").await,
-        Cmd::LinkSetMaster { iface, master } => net.link_set_master(&iface, Some(&master)).await,
-        Cmd::LinkSetNomaster { iface } => net.link_set_master(&iface, None).await,
-        Cmd::LinkSetMac { dev, mac } => net.link_set_mac(&dev, &mac).await,
-        Cmd::LinkSetStp { bridge, on } => net.link_set_stp(&bridge, on).await,
-        Cmd::LinkSetIsolated { dev, on } => net.link_set_isolated(&dev, on).await,
-        Cmd::LinkSetLocked { dev, on } => net.link_set_locked(&dev, on).await,
-        Cmd::AddrAdd { dev, cidr } => {
-            let (ip, plen) = parse_cidr(&cidr)?;
-            net.addr_add(&dev, ip, plen).await
-        }
-        Cmd::AddrDel { dev, cidr } => {
-            let (ip, plen) = parse_cidr(&cidr)?;
-            net.addr_del(&dev, ip, plen).await
-        }
-        Cmd::AddrList { dev, metric } => print_json(&net.addr_list(dev.as_deref(), metric).await?),
-        Cmd::RouteAdd {
-            dev,
-            dst,
-            table,
-            v6: _,
-        } => {
-            let (ip, plen) = parse_cidr(&dst)?;
-            net.route_add(&dev, ip, plen, table).await
-        }
-        Cmd::RuleAdd { iif, table, v6 } => net.rule_add(v6, &iif, table).await,
-        Cmd::RuleDel { iif, table, v6 } => net.rule_del(v6, &iif, table).await,
-        Cmd::FdbAdd { mac, dev } => net.fdb_add(&mac, &dev).await,
-        Cmd::LinkList {
-            master,
-            type_bridge,
-        } => print_json(&net.link_list(master.as_deref(), type_bridge).await?),
-        Cmd::NeighList { dev } => print_json(&net.neigh_list(&dev).await?),
-        Cmd::RuleList { v6 } => print_json(&net.rule_list(v6).await?),
-        Cmd::HostIps {
-            iface,
-            exclude_metric,
-        } => print_host_ips(&net.host_ipv4(&iface, exclude_metric).await?),
-        Cmd::MonitorAddr { .. } => unreachable!("handled in run()"),
-    }
-}
-
-fn print_json<T: serde::Serialize>(rows: &T) -> Result<()> {
-    println!("{}", serde_json::to_string(rows)?);
-    Ok(())
-}
-
-/// One JSON line `{"v4":[...]}` flushed immediately -- the daemon reads these
-/// from the monitor's stdout, so the flush is what makes a change visible
-/// without waiting on stdio block-buffering.
-fn print_host_ips(v4: &[String]) -> Result<()> {
-    use std::io::Write;
-    let line = serde_json::to_string(&serde_json::json!({ "v4": v4 }))?;
-    let mut out = std::io::stdout().lock();
-    writeln!(out, "{line}")?;
-    out.flush()?;
-    Ok(())
-}
diff --git a/app/src/main/rust/netbox/src/nl.rs b/app/src/main/rust/netbox/src/nl.rs
deleted file mode 100644
index 6e2ecc8ce..000000000
--- a/app/src/main/rust/netbox/src/nl.rs
+++ /dev/null
@@ -1,762 +0,0 @@
-//! rtnetlink helpers. Idioms (connection, link/addr parsing, rt_priority,
-//! route/rule) are lifted from pbridge's netlink.rs so behaviour matches the
-//! proven daemon. Mutations return `Result<()>` (exit code); queries return
-//! serializable rows that `main` prints as JSON.
-
-use anyhow::{bail, Context, Result};
-use futures::stream::TryStreamExt;
-use netlink_packet_route::address::{AddressAttribute, AddressScope};
-use netlink_packet_route::link::{
-    BridgeStpState, InfoBridge, InfoBridgePort, InfoData, InfoKind, InfoPortData, InfoPortKind,
-    InfoVlan, LinkAttribute, LinkInfo, LinkMessage, State,
-};
-use netlink_packet_route::neighbour::{
-    NeighbourAddress, NeighbourAttribute, NeighbourFlags, NeighbourState,
-};
-use netlink_packet_route::route::{RouteProtocol, RouteScope};
-use netlink_packet_route::rule::{RuleAction, RuleAttribute, RuleFlags};
-use netlink_packet_route::AddressFamily;
-use rtnetlink::{Handle, LinkBridge, LinkUnspec, RouteMessageBuilder};
-use serde::Serialize;
-use std::collections::HashMap;
-use std::net::{IpAddr, Ipv4Addr, Ipv6Addr};
-
-pub struct Net {
-    handle: Handle,
-}
-
-/// The only rtnetlink multicast group we ever join: RTM_NEWADDR/RTM_DELADDR
-/// for IPv4. The host-IP set is *defined* as v4 addresses, so only address
-/// events can change it; staying off the link/route/neigh/v6-addr groups
-/// (all noisy and irrelevant) keeps daemon wakeups -- and power -- to a minimum.
-const RTNLGRP_IPV4_IFADDR: u32 = 5;
-
-// ----------------------------------------------------------------- query rows
-
-/// `metric` is IFA_RT_PRIORITY -- the field the system `ip -j` may not emit but
-/// pbridge tags its proxy addresses with; netlink always carries it.
-#[derive(Serialize)]
-pub struct AddrRow {
-    pub ifname: String,
-    pub family: u8,
-    pub local: String,
-    pub prefixlen: u8,
-    pub scope: String,
-    pub metric: u32,
-    pub noprefixroute: bool,
-}
-
-#[derive(Serialize)]
-pub struct LinkRow {
-    pub ifname: String,
-    pub address: String,
-    pub operstate: String,
-    pub master: String,
-    pub mtu: u32,
-    pub kind: String,
-}
-
-#[derive(Serialize)]
-pub struct NeighRow {
-    pub dst: String,
-    pub lladdr: String,
-    pub dev: String,
-    pub state: Vec<String>,
-}
-
-#[derive(Serialize)]
-pub struct RuleRow {
-    pub priority: u32,
-    pub iif: Option<String>,
-    pub table: u32,
-    pub fwmark: Option<u32>,
-    pub fwmask: Option<u32>,
-    pub detached: bool,
-    /// action is "lookup <table>" (vs blackhole/unreachable/...); only these
-    /// carry a meaningful routing table.
-    pub lookup: bool,
-}
-
-// ------------------------------------------------------------------- helpers
-
-fn mac_to_string(b: &[u8]) -> String {
-    b.iter()
-        .map(|x| format!("{x:02x}"))
-        .collect::<Vec<_>>()
-        .join(":")
-}
-
-fn parse_mac(s: &str) -> Result<Vec<u8>> {
-    let bytes: Result<Vec<u8>> = s
-        .split(':')
-        .map(|p| u8::from_str_radix(p, 16).with_context(|| format!("bad MAC: {s}")))
-        .collect();
-    let v = bytes?;
-    if v.len() != 6 {
-        bail!("MAC must be 6 octets: {s}");
-    }
-    Ok(v)
-}
-
-fn oper_to_string(s: &State) -> String {
-    match s {
-        State::Up => "UP",
-        State::Down => "DOWN",
-        State::LowerLayerDown => "LOWERLAYERDOWN",
-        State::Testing => "TESTING",
-        State::Dormant => "DORMANT",
-        State::NotPresent => "NOTPRESENT",
-        _ => "UNKNOWN",
-    }
-    .to_string()
-}
-
-fn neigh_states(s: &NeighbourState) -> Vec<String> {
-    let name = match s {
-        NeighbourState::Incomplete => "INCOMPLETE",
-        NeighbourState::Reachable => "REACHABLE",
-        NeighbourState::Stale => "STALE",
-        NeighbourState::Delay => "DELAY",
-        NeighbourState::Probe => "PROBE",
-        NeighbourState::Failed => "FAILED",
-        NeighbourState::Noarp => "NOARP",
-        NeighbourState::Permanent => "PERMANENT",
-        _ => "NONE",
-    };
-    vec![name.to_string()]
-}
-
-impl Net {
-    pub fn connect() -> Result<Net> {
-        let (conn, handle, _m) = rtnetlink::new_connection().context("netlink connect")?;
-        tokio::spawn(conn);
-        Ok(Net { handle })
-    }
-
-    async fn index_of(&self, name: &str) -> Result<u32> {
-        let mut s = self
-            .handle
-            .link()
-            .get()
-            .match_name(name.to_string())
-            .execute();
-        match s.try_next().await {
-            Ok(Some(m)) => Ok(m.header.index),
-            Ok(None) => bail!("device not found: {name}"),
-            Err(e) => Err(e).with_context(|| format!("get_link {name}")),
-        }
-    }
-
-    /// index -> ifname for every link (addresses/neighbours carry only ifindex).
-    async fn link_names(&self) -> Result<HashMap<u32, String>> {
-        let mut map = HashMap::new();
-        let mut s = self.handle.link().get().execute();
-        while let Some(m) = s.try_next().await.context("link dump")? {
-            map.insert(m.header.index, link_name(&m));
-        }
-        Ok(map)
-    }
-
-    // ---------------------------------------------------------- link mutations
-
-    pub async fn link_add_bridge(&self, name: &str) -> Result<()> {
-        self.handle
-            .link()
-            .add(LinkBridge::new(name).build())
-            .execute()
-            .await
-            .context("link_add_bridge")
-    }
-
-    /// `ip link add link <parent> name <name> type vlan id <vid>`.
-    pub async fn link_add_vlan(&self, parent: &str, name: &str, vid: u16) -> Result<()> {
-        let pidx = self.index_of(parent).await?;
-        let mut msg = LinkMessage::default();
-        msg.attributes.push(LinkAttribute::IfName(name.to_string()));
-        msg.attributes.push(LinkAttribute::Link(pidx));
-        msg.attributes.push(LinkAttribute::LinkInfo(vec![
-            LinkInfo::Kind(InfoKind::Vlan),
-            LinkInfo::Data(InfoData::Vlan(vec![InfoVlan::Id(vid)])),
-        ]));
-        self.handle
-            .link()
-            .add(msg)
-            .execute()
-            .await
-            .context("link_add_vlan")
-    }
-
-    pub async fn link_del(&self, name: &str) -> Result<()> {
-        let idx = match self.index_of(name).await {
-            Ok(i) => i,
-            // already gone: idempotent
-            Err(_) => return Ok(()),
-        };
-        self.handle
-            .link()
-            .del(idx)
-            .execute()
-            .await
-            .context("link_del")
-    }
-
-    pub async fn link_set_state(&self, name: &str, up: bool) -> Result<()> {
-        let idx = self.index_of(name).await?;
-        let b = LinkUnspec::new_with_index(idx);
-        let msg = if up { b.up().build() } else { b.down().build() };
-        self.handle
-            .link()
-            .set(msg)
-            .execute()
-            .await
-            .context("link_set_state")
-    }
-
-    pub async fn link_set_master(&self, iface: &str, master: Option<&str>) -> Result<()> {
-        let idx = self.index_of(iface).await?;
-        let midx = match master {
-            Some(m) => self.index_of(m).await?,
-            None => 0, // nomaster
-        };
-        let msg = LinkUnspec::new_with_index(idx).controller(midx).build();
-        self.handle
-            .link()
-            .set(msg)
-            .execute()
-            .await
-            .context("link_set_master")
-    }
-
-    pub async fn link_set_mac(&self, dev: &str, mac: &str) -> Result<()> {
-        let idx = self.index_of(dev).await?;
-        let msg = LinkUnspec::new_with_index(idx)
-            .address(parse_mac(mac)?)
-            .build();
-        self.handle
-            .link()
-            .set(msg)
-            .execute()
-            .await
-            .context("link_set_mac")
-    }
-
-    pub async fn link_set_stp(&self, bridge: &str, on: bool) -> Result<()> {
-        let idx = self.index_of(bridge).await?;
-        let mut msg = LinkMessage::default();
-        msg.header.index = idx;
-        let stp = if on {
-            BridgeStpState::KernelStp
-        } else {
-            BridgeStpState::Disabled
-        };
-        msg.attributes.push(LinkAttribute::LinkInfo(vec![
-            LinkInfo::Kind(InfoKind::Bridge),
-            LinkInfo::Data(InfoData::Bridge(vec![InfoBridge::StpState(stp)])),
-        ]));
-        self.handle
-            .link()
-            .set(msg)
-            .execute()
-            .await
-            .context("link_set_stp")
-    }
-
-    async fn set_port_flag(&self, dev: &str, port: InfoBridgePort) -> Result<()> {
-        let idx = self.index_of(dev).await?;
-        let mut msg = LinkMessage::default();
-        msg.header.index = idx;
-        msg.attributes.push(LinkAttribute::LinkInfo(vec![
-            LinkInfo::PortKind(InfoPortKind::Bridge),
-            LinkInfo::PortData(InfoPortData::BridgePort(vec![port])),
-        ]));
-        self.handle
-            .link()
-            .set(msg)
-            .execute()
-            .await
-            .context("set_port_flag")
-    }
-
-    pub async fn link_set_isolated(&self, dev: &str, on: bool) -> Result<()> {
-        self.set_port_flag(dev, InfoBridgePort::Isolated(on)).await
-    }
-
-    pub async fn link_set_locked(&self, dev: &str, on: bool) -> Result<()> {
-        self.set_port_flag(dev, InfoBridgePort::Locked(on)).await
-    }
-
-    // ---------------------------------------------------------- addr mutations
-
-    pub async fn addr_add(&self, dev: &str, ip: IpAddr, plen: u8) -> Result<()> {
-        let idx = self.index_of(dev).await?;
-        let mut req = self.handle.address().add(idx, ip, plen);
-        // match `ip addr add`: a real IPv4 subnet broadcast (else directed
-        // broadcast is lost); IPv6 has no broadcast.
-        if let IpAddr::V4(v4) = ip {
-            if plen < 31 {
-                let host = u32::MAX >> plen;
-                let brd = Ipv4Addr::from(u32::from(v4) | host);
-                req.message_mut()
-                    .attributes
-                    .push(AddressAttribute::Broadcast(brd));
-            }
-        }
-        req.execute().await.context("addr_add")
-    }
-
-    pub async fn addr_del(&self, dev: &str, ip: IpAddr, plen: u8) -> Result<()> {
-        let idx = self.index_of(dev).await?;
-        let msg = self
-            .handle
-            .address()
-            .add(idx, ip, plen)
-            .message_mut()
-            .clone();
-        match self.handle.address().del(msg).execute().await {
-            Ok(()) => Ok(()),
-            Err(rtnetlink::Error::NetlinkError(e))
-                if e.raw_code() == -libc::EADDRNOTAVAIL || e.raw_code() == -libc::ENOENT =>
-            {
-                Ok(())
-            }
-            Err(e) => Err(e).context("addr_del"),
-        }
-    }
-
-    // --------------------------------------------------------- route mutations
-
-    /// `ip [-6] route add <dst>/<plen> dev <dev> table <table>` (onlink subnet).
-    pub async fn route_add(&self, dev: &str, dst: IpAddr, plen: u8, table: u32) -> Result<()> {
-        let oif = self.index_of(dev).await?;
-        let msg = match dst {
-            IpAddr::V4(d) => RouteMessageBuilder::<Ipv4Addr>::new()
-                .destination_prefix(d, plen)
-                .output_interface(oif)
-                .table_id(table)
-                .scope(RouteScope::Link)
-                .protocol(RouteProtocol::Boot)
-                .build(),
-            IpAddr::V6(d) => RouteMessageBuilder::<Ipv6Addr>::new()
-                .destination_prefix(d, plen)
-                .output_interface(oif)
-                .table_id(table)
-                .scope(RouteScope::Link)
-                .protocol(RouteProtocol::Boot)
-                .build(),
-        };
-        match self.handle.route().add(msg).execute().await {
-            Ok(()) => Ok(()),
-            Err(rtnetlink::Error::NetlinkError(e)) if e.raw_code() == -libc::EEXIST => Ok(()),
-            Err(e) => Err(e).context("route_add"),
-        }
-    }
-
-    // ---------------------------------------------------------- rule mutations
-
-    /// `ip [-4|-6] rule add from all iif <iif> lookup <table>` (idempotent).
-    /// `.v4()`/`.v6()` yield distinct typed builders, so the family branch
-    /// can't be factored out (it returns different types) -- inline like pbridge.
-    pub async fn rule_add(&self, v6: bool, iif: &str, table: u32) -> Result<()> {
-        let req = self
-            .handle
-            .rule()
-            .add()
-            .input_interface(iif.to_string())
-            .table_id(table)
-            .action(RuleAction::ToTable);
-        let res = if v6 {
-            req.v6().execute().await
-        } else {
-            req.v4().execute().await
-        };
-        match res {
-            Ok(()) => Ok(()),
-            Err(rtnetlink::Error::NetlinkError(e)) if e.raw_code() == -libc::EEXIST => Ok(()),
-            Err(e) => Err(e).context("rule_add"),
-        }
-    }
-
-    /// `ip [-4|-6] rule del from all iif <iif> lookup <table>` (idempotent).
-    pub async fn rule_del(&self, v6: bool, iif: &str, table: u32) -> Result<()> {
-        let base = self
-            .handle
-            .rule()
-            .add()
-            .input_interface(iif.to_string())
-            .table_id(table)
-            .action(RuleAction::ToTable);
-        let msg = if v6 {
-            base.v6().message_mut().clone()
-        } else {
-            base.v4().message_mut().clone()
-        };
-        match self.handle.rule().del(msg).execute().await {
-            Ok(()) => Ok(()),
-            Err(rtnetlink::Error::NetlinkError(e))
-                if e.raw_code() == -libc::ENOENT || e.raw_code() == -libc::ESRCH =>
-            {
-                Ok(())
-            }
-            Err(e) => Err(e).context("rule_del"),
-        }
-    }
-
-    // ------------------------------------------------------------ fdb mutation
-
-    /// `bridge fdb add <mac> dev <dev> master static`: a permanent forwarding
-    /// entry managed by the bridge master (used for MAC security on locked
-    /// ports). Idempotent.
-    pub async fn fdb_add(&self, mac: &str, dev: &str) -> Result<()> {
-        let idx = self.index_of(dev).await?;
-        // add_bridge presets family=AF_BRIDGE; "master static" = NTF_MASTER
-        // (Controller) + NUD_NOARP.
-        let res = self
-            .handle
-            .neighbours()
-            .add_bridge(idx, &parse_mac(mac)?)
-            .state(NeighbourState::Noarp)
-            .flags(NeighbourFlags::Controller)
-            .execute()
-            .await;
-        match res {
-            Ok(()) => Ok(()),
-            Err(rtnetlink::Error::NetlinkError(e)) if e.raw_code() == -libc::EEXIST => Ok(()),
-            Err(e) => Err(e).context("fdb_add"),
-        }
-    }
-
-    // -------------------------------------------------------------- queries
-
-    pub async fn addr_list(&self, dev: Option<&str>, metric: Option<u32>) -> Result<Vec<AddrRow>> {
-        let names = self.link_names().await?;
-        let mut req = self.handle.address().get();
-        if let Some(d) = dev {
-            req = req.set_link_index_filter(self.index_of(d).await?);
-        }
-        let mut s = req.execute();
-        let mut out = Vec::new();
-        while let Some(m) = s.try_next().await.context("addr dump")? {
-            let family = match m.header.family {
-                AddressFamily::Inet => 4u8,
-                AddressFamily::Inet6 => 6u8,
-                _ => continue,
-            };
-            let scope = match m.header.scope {
-                AddressScope::Universe => "global",
-                AddressScope::Link => "link",
-                AddressScope::Host => "host",
-                _ => "other",
-            }
-            .to_string();
-            let mut local: Option<IpAddr> = None;
-            let mut rt = 0u32;
-            let mut npr = false;
-            for a in &m.attributes {
-                match a {
-                    AddressAttribute::Local(x) => local = Some(*x),
-                    AddressAttribute::Address(x) => {
-                        if local.is_none() {
-                            local = Some(*x);
-                        }
-                    }
-                    AddressAttribute::RoutePriority(p) => rt = *p,
-                    AddressAttribute::Flags(f) => {
-                        use netlink_packet_route::address::AddressFlags;
-                        npr = f.contains(AddressFlags::Noprefixroute);
-                    }
-                    _ => {}
-                }
-            }
-            if let Some(want) = metric {
-                if rt != want {
-                    continue;
-                }
-            }
-            let local = match local {
-                Some(x) => x,
-                None => continue,
-            };
-            out.push(AddrRow {
-                ifname: names.get(&m.header.index).cloned().unwrap_or_default(),
-                family,
-                local: local.to_string(),
-                prefixlen: m.header.prefix_len,
-                scope,
-                metric: rt,
-                noprefixroute: npr,
-            });
-        }
-        Ok(out)
-    }
-
-    /// The phone's own reachable IPv4 addresses, sorted and de-duplicated:
-    /// scope-global v4 on interfaces whose name starts with one of `prefixes`
-    /// (the daemon's Wi-Fi/cellular/VPN/ethernet/tethering allowlist), with
-    /// bridge devices and `exclude_metric`-tagged addresses (pbridge offload)
-    /// dropped. This is the single definition of the host-IP set, shared by
-    /// the one-shot `host-ips` and the streaming `monitor-addr`.
-    pub async fn host_ipv4(
-        &self,
-        prefixes: &[String],
-        exclude_metric: Option<u32>,
-    ) -> Result<Vec<String>> {
-        // one link dump -> ifindex's name and whether it's a bridge
-        let mut names: HashMap<u32, String> = HashMap::new();
-        let mut is_bridge: HashMap<u32, bool> = HashMap::new();
-        let mut ls = self.handle.link().get().execute();
-        while let Some(m) = ls.try_next().await.context("link dump")? {
-            let mut bridge = false;
-            for a in &m.attributes {
-                if let LinkAttribute::LinkInfo(infos) = a {
-                    for li in infos {
-                        if let LinkInfo::Kind(InfoKind::Bridge) = li {
-                            bridge = true;
-                        }
-                    }
-                }
-            }
-            names.insert(m.header.index, link_name(&m));
-            is_bridge.insert(m.header.index, bridge);
-        }
-        let mut out = std::collections::BTreeSet::new();
-        let mut s = self.handle.address().get().execute();
-        while let Some(m) = s.try_next().await.context("addr dump")? {
-            if !matches!(m.header.family, AddressFamily::Inet) {
-                continue;
-            }
-            // global scope only: link-local (169.254) / host (127) aren't
-            // addresses a forward could land on
-            if !matches!(m.header.scope, AddressScope::Universe) {
-                continue;
-            }
-            let idx = m.header.index;
-            if *is_bridge.get(&idx).unwrap_or(&false) {
-                continue;
-            }
-            let ifname = names.get(&idx).cloned().unwrap_or_default();
-            if !prefixes.iter().any(|p| ifname.starts_with(p.as_str())) {
-                continue;
-            }
-            let mut local: Option<IpAddr> = None;
-            let mut rt = 0u32;
-            for a in &m.attributes {
-                match a {
-                    AddressAttribute::Local(x) => local = Some(*x),
-                    AddressAttribute::Address(x) => {
-                        if local.is_none() {
-                            local = Some(*x);
-                        }
-                    }
-                    AddressAttribute::RoutePriority(p) => rt = *p,
-                    _ => {}
-                }
-            }
-            if let Some(want) = exclude_metric {
-                if rt == want {
-                    continue;
-                }
-            }
-            if let Some(IpAddr::V4(v4)) = local {
-                out.insert(v4.to_string());
-            }
-        }
-        Ok(out.into_iter().collect())
-    }
-
-    /// `ip -j link show [master <br>] [type bridge]`.
-    pub async fn link_list(&self, master: Option<&str>, bridge_only: bool) -> Result<Vec<LinkRow>> {
-        let names = self.link_names().await?;
-        let want_master = match master {
-            Some(m) => Some(self.index_of(m).await?),
-            None => None,
-        };
-        let mut s = self.handle.link().get().execute();
-        let mut out = Vec::new();
-        while let Some(m) = s.try_next().await.context("link dump")? {
-            let mut address = String::new();
-            let mut operstate = "UNKNOWN".to_string();
-            let mut master_idx: Option<u32> = None;
-            let mut mtu = 0u32;
-            let mut kind = String::new();
-            for a in &m.attributes {
-                match a {
-                    LinkAttribute::Address(b) => address = mac_to_string(b),
-                    LinkAttribute::OperState(s) => operstate = oper_to_string(s),
-                    LinkAttribute::Controller(i) => master_idx = Some(*i),
-                    LinkAttribute::Mtu(v) => mtu = *v,
-                    LinkAttribute::LinkInfo(infos) => {
-                        for li in infos {
-                            if let LinkInfo::Kind(k) = li {
-                                kind = format!("{k:?}").to_lowercase();
-                            }
-                        }
-                    }
-                    _ => {}
-                }
-            }
-            if let Some(wm) = want_master {
-                if master_idx != Some(wm) {
-                    continue;
-                }
-            }
-            if bridge_only && kind != "bridge" {
-                continue;
-            }
-            out.push(LinkRow {
-                ifname: link_name(&m),
-                address,
-                operstate,
-                master: master_idx
-                    .and_then(|i| names.get(&i).cloned())
-                    .unwrap_or_default(),
-                mtu,
-                kind,
-            });
-        }
-        Ok(out)
-    }
-
-    /// `ip neigh show dev <dev>` (both families).
-    pub async fn neigh_list(&self, dev: &str) -> Result<Vec<NeighRow>> {
-        let idx = self.index_of(dev).await?;
-        let mut out = Vec::new();
-        for v6 in [false, true] {
-            let mut s = self
-                .handle
-                .neighbours()
-                .get()
-                .set_family(if v6 {
-                    rtnetlink::IpVersion::V6
-                } else {
-                    rtnetlink::IpVersion::V4
-                })
-                .execute();
-            while let Some(m) = s.try_next().await.context("neigh dump")? {
-                if m.header.ifindex != idx {
-                    continue;
-                }
-                let mut dst = String::new();
-                let mut lladdr = String::new();
-                for a in &m.attributes {
-                    match a {
-                        NeighbourAttribute::Destination(NeighbourAddress::Inet(d)) => {
-                            dst = d.to_string()
-                        }
-                        NeighbourAttribute::Destination(NeighbourAddress::Inet6(d)) => {
-                            dst = d.to_string()
-                        }
-                        NeighbourAttribute::LinkLayerAddress(b) => lladdr = mac_to_string(b),
-                        _ => {}
-                    }
-                }
-                if dst.is_empty() {
-                    continue;
-                }
-                out.push(NeighRow {
-                    dst,
-                    lladdr,
-                    dev: dev.to_string(),
-                    state: neigh_states(&m.header.state),
-                });
-            }
-        }
-        Ok(out)
-    }
-
-    /// `ip [-6] rule show`.
-    pub async fn rule_list(&self, v6: bool) -> Result<Vec<RuleRow>> {
-        let mut s = self
-            .handle
-            .rule()
-            .get(if v6 {
-                rtnetlink::IpVersion::V6
-            } else {
-                rtnetlink::IpVersion::V4
-            })
-            .execute();
-        let mut out = Vec::new();
-        while let Some(m) = s.try_next().await.context("rule dump")? {
-            let mut priority = 0u32;
-            let mut iif = None;
-            let mut table = m.header.table as u32;
-            let mut fwmark = None;
-            let mut fwmask = None;
-            for a in &m.attributes {
-                match a {
-                    RuleAttribute::Priority(p) => priority = *p,
-                    RuleAttribute::Iifname(n) => iif = Some(n.clone()),
-                    RuleAttribute::Table(t) => table = *t,
-                    RuleAttribute::FwMark(v) => fwmark = Some(*v),
-                    RuleAttribute::FwMask(v) => fwmask = Some(*v),
-                    _ => {}
-                }
-            }
-            // iproute2 prints [detached] when the iif/oif device is gone.
-            let detached = m
-                .header
-                .flags
-                .intersects(RuleFlags::IifDetached | RuleFlags::OifDetached);
-            out.push(RuleRow {
-                priority,
-                iif,
-                table,
-                fwmark,
-                fwmask,
-                detached,
-                lookup: m.header.action == RuleAction::ToTable,
-            });
-        }
-        Ok(out)
-    }
-}
-
-/// Streams the host-IPv4 set: emits the initial set, then re-evaluates and
-/// re-emits only when it actually changes, driven by RTNLGRP_IPV4_IFADDR
-/// notifications. `emit` is called with each new set (e.g. printing a JSON
-/// line); the connection's own diff means the caller is woken only on real
-/// changes. Runs until the netlink connection closes.
-pub async fn monitor_host_ipv4(
-    prefixes: &[String],
-    exclude_metric: Option<u32>,
-    mut emit: impl FnMut(&[String]) -> Result<()>,
-) -> Result<()> {
-    use futures::StreamExt;
-    use netlink_sys::AsyncSocket;
-
-    let (mut conn, handle, mut messages) =
-        rtnetlink::new_connection().context("netlink connect")?;
-    conn.socket_mut()
-        .socket_mut()
-        .add_membership(RTNLGRP_IPV4_IFADDR)
-        .context("join RTNLGRP_IPV4_IFADDR")?;
-    tokio::spawn(conn);
-    let net = Net { handle };
-
-    let mut last = net.host_ipv4(prefixes, exclude_metric).await?;
-    emit(&last)?;
-    // every message arrives on RTNLGRP_IPV4_IFADDR, so any of them is a v4
-    // address add/del -- no need to inspect it, just re-evaluate the set.
-    while messages.next().await.is_some() {
-        // coalesce a burst (a DHCP renew is a del+add, etc.) into one recompute
-        let _ = tokio::time::timeout(std::time::Duration::from_millis(200), async {
-            while messages.next().await.is_some() {}
-        })
-        .await;
-        let cur = net.host_ipv4(prefixes, exclude_metric).await?;
-        if cur != last {
-            emit(&cur)?;
-            last = cur;
-        }
-    }
-    Ok(())
-}
-
-fn link_name(m: &LinkMessage) -> String {
-    m.attributes
-        .iter()
-        .find_map(|a| match a {
-            LinkAttribute::IfName(n) => Some(n.clone()),
-            _ => None,
-        })
-        .unwrap_or_default()
-}
diff --git a/app/src/main/rust/netbox/src/tap.rs b/app/src/main/rust/netbox/src/tap.rs
deleted file mode 100644
index 5f0348642..000000000
--- a/app/src/main/rust/netbox/src/tap.rs
+++ /dev/null
@@ -1,48 +0,0 @@
-//! TAP creation. `ip tuntap add` is not a netlink op -- it is a TUNSETIFF ioctl
-//! on /dev/net/tun -- so it lives apart from the rtnetlink helpers.
-
-use anyhow::{bail, Context, Result};
-use std::ffi::CString;
-use std::os::fd::AsRawFd;
-
-const IFNAMSIZ: usize = 16;
-// <linux/if_tun.h> -- _IOW('T', 202/203, int). The ioctl request arg is
-// c_ulong on glibc but c_int on musl/bionic, so cast with `as _` at the call.
-const TUNSETIFF: u32 = 0x4004_54ca;
-const TUNSETPERSIST: u32 = 0x4004_54cb;
-const IFF_TAP: libc::c_short = 0x0002;
-const IFF_NO_PI: libc::c_short = 0x1000;
-const IFF_VNET_HDR: libc::c_short = 0x4000;
-
-#[repr(C)]
-struct Ifreq {
-    name: [libc::c_char; IFNAMSIZ],
-    flags: libc::c_short,
-    _pad: [u8; 22],
-}
-
-/// `ip tuntap add dev <name> mode tap vnet_hdr`: a persistent TAP with the
-/// virtio net header, exactly what the daemon's VM taps require.
-pub fn add_tap(name: &str) -> Result<()> {
-    if name.len() >= IFNAMSIZ {
-        bail!("tap name too long: {name}");
-    }
-    let f = std::fs::OpenOptions::new()
-        .read(true)
-        .write(true)
-        .open("/dev/net/tun")
-        .context("open /dev/net/tun")?;
-    let fd = f.as_raw_fd();
-    let mut ifr: Ifreq = unsafe { std::mem::zeroed() };
-    for (i, b) in CString::new(name)?.as_bytes().iter().enumerate() {
-        ifr.name[i] = *b as libc::c_char;
-    }
-    ifr.flags = IFF_TAP | IFF_NO_PI | IFF_VNET_HDR;
-    if unsafe { libc::ioctl(fd, TUNSETIFF as _, &mut ifr as *mut Ifreq) } < 0 {
-        return Err(std::io::Error::last_os_error()).context("TUNSETIFF");
-    }
-    if unsafe { libc::ioctl(fd, TUNSETPERSIST as _, 1 as libc::c_int) } < 0 {
-        return Err(std::io::Error::last_os_error()).context("TUNSETPERSIST");
-    }
-    Ok(())
-}
diff --git a/build.sh b/build.sh
index 4fbd496ea..21648066e 100755
--- a/build.sh
+++ b/build.sh
@@ -1,198 +1,80 @@
 #!/usr/bin/env bash
-# One-shot build: submodules + third-party network daemons + APK.
+# One-shot build: submodules + APK.
 #
 #   ./build.sh             # debug APK (default)
 #   ./build.sh release     # release APK (needs signing config)
-#   SKIP_THIRDPARTY=1 ./build.sh   # reuse already-built binaries in app/src/main/assets/bin
 #
-# Third-party toolchains (Go for gvswitch/bridgedhcp, rustup+clang for
-# pbridge, rustup for lbx) are only required when rebuilding those daemons;
-# if a toolchain is missing but a previously built binary exists in
-# app/src/main/assets/bin, the build continues with a warning. Those binaries
-# are git-ignored (only the 7za prebuilt is committed); a clean checkout must
-# build them at least once.
+# Most of the work is handled by Gradle so that CI (which calls ./gradlew
+# directly) and local builds behave identically:
+#   * native prebuilts (VM runtime + daemons + lbx) come from the DroidVM-Prebuilts
+#     submodule, or are regenerated by DroidVM-Prebuilt-Root/auto-build.py when it
+#     is checked out at the repo root (see that repo's README);
+#   * the terminal font is fetched by a Gradle task (best-effort; the app falls
+#     back to the system monospace if it can't be downloaded).
 set -euo pipefail
 cd "$(dirname "$0")"
 
 VARIANT="${1:-debug}"
 case "$VARIANT" in
-    debug)   GRADLE_TASK=assembleDebug;   APK=app/build/outputs/apk/debug/app-debug.apk ;;
-    release) GRADLE_TASK=assembleRelease; APK=app/build/outputs/apk/release/app-release.apk ;;
+    debug)   GRADLE_TASK=assembleDebug;   APK_DIR=app/build/outputs/apk/debug ;;
+    release) GRADLE_TASK=assembleRelease; APK_DIR=app/build/outputs/apk/release ;;
     *) echo "usage: $0 [debug|release]" >&2; exit 2 ;;
 esac
 
 log()  { printf '\033[1;34m==>\033[0m %s\n' "$*"; }
-warn() { printf '\033[1;33mWARN:\033[0m %s\n' "$*" >&2; }
 die()  { printf '\033[1;31mERROR:\033[0m %s\n' "$*" >&2; exit 1; }
+have() { command -v "$1" >/dev/null 2>&1; }
 
 # ----------------------------------------------------- environment preflight
-# Required to build from a clean checkout:
-#   Android SDK  -> ANDROID_HOME / ANDROID_SDK_ROOT, or local.properties (sdk.dir=...)
-#   Go (golang)  -> gvswitch, bridgedhcp                https://go.dev/dl/
-#   Rust (cargo) -> pbridge, lbx, netbox  (+ clang for pbridge)   https://rustup.rs
-# Go/Rust/clang are only needed when (re)building those daemons; if a toolchain
-# is missing but a prebuilt binary already exists in app/src/main/assets/bin the
-# build continues with a warning. A missing Android SDK is always fatal.
-have() { command -v "$1" >/dev/null 2>&1; }
+# The Android SDK (with NDK, for the CMake native code) is always required.
 if [ -f local.properties ]; then SDK_STATUS="local.properties"; else SDK_STATUS="${ANDROID_HOME:-${ANDROID_SDK_ROOT:-MISSING}}"; fi
 log "Environment preflight:"
-printf '    %-14s %s\n' "Android SDK"  "$SDK_STATUS"
-printf '    %-14s %s\n' "Go (golang)"  "$(have go    && go version | awk '{print $3}'     || echo 'MISSING -> https://go.dev/dl/')"
-printf '    %-14s %s\n' "Rust (cargo)" "$(have cargo && cargo --version | awk '{print $2}' || echo 'MISSING -> https://rustup.rs')"
-printf '    %-14s %s\n' "clang"        "$(have clang && echo present                       || echo 'MISSING -> needed for pbridge')"
+printf '    %-14s %s\n' "Android SDK" "$SDK_STATUS"
 
 if [ ! -f local.properties ] && [ -z "${ANDROID_HOME:-}" ] && [ -z "${ANDROID_SDK_ROOT:-}" ]; then
     die "Android SDK not configured: set ANDROID_HOME (or ANDROID_SDK_ROOT), or create local.properties (sdk.dir=...)"
 fi
 
-# ---------------------------------------------------------------- submodules
-log "Initializing git submodules"
-git submodule update --init --recursive
-
-# ----------------------------------------------------- third-party repos
-# These network daemons live in their own git repos (not submodules while
-# under active development). Clone them on first build if the dir is missing;
-# an existing checkout is left untouched so local work is never overwritten.
-clone_if_missing() {
-    local path="$1" url="$2"
-    [ -d "$path/.git" ] && return 0
-    if [ -e "$path" ]; then
-        warn "$path exists but is not a git checkout; leaving it untouched"
-        return 0
-    fi
-    log "Cloning $path"
-    git clone "$url" "$path"
+# When DroidVM-Prebuilt-Root is checked out with native-util source under
+# auto-build/, the Gradle build regenerates the prebuilts via auto-build.py,
+# which needs the Go/Rust/clang/Python toolchains. Report and require them up
+# front so the build fails fast with a clear message instead of mid-Gradle.
+PREBUILT_ROOT="DroidVM-Prebuilt-Root"
+prebuilt_root_active() {
+    [ -f "$PREBUILT_ROOT/auto-build.py" ] && [ -d "$PREBUILT_ROOT/auto-build" ] || return 1
+    # non-empty auto-build/ (ignoring a lone .gitignore) == native-util dev
+    find "$PREBUILT_ROOT/auto-build" -mindepth 1 ! -name .gitignore -print -quit 2>/dev/null | grep -q .
 }
 
-clone_if_missing app/src/thirdparty/gvisor-vswitch       https://github.com/HuJK/gvisor-vswitch.git
-clone_if_missing app/src/thirdparty/pseudo-bridge-rs     https://github.com/KusakabeShi/pseudo-bridge-rs.git
-clone_if_missing app/src/thirdparty/bridgedhcp           https://github.com/HuJK/bridgedhcp.git
-clone_if_missing app/src/thirdparty/linux-boot-extractor https://github.com/HuJK/linux-boot-extractor.git
-
-# ------------------------------------------------------- third-party daemons
-mkdir -p app/src/main/assets/bin/arm64-v8a app/src/main/assets/bin/x86_64
-
-build_gvswitch() {
-    if ! command -v go >/dev/null 2>&1; then
-        if [ -x app/src/main/assets/bin/arm64-v8a/gvswitch ]; then
-            warn "Go not found; reusing the previously-built gvswitch binaries"
-            return 0
-        fi
-        die "Go is required to build gvswitch (https://go.dev/dl/)"
-    fi
-    log "Building gvswitch (android-arm64 + linux-amd64)"
-    make -C app/src/thirdparty/gvisor-vswitch build-android build-linux-amd64
-    install -m755 app/src/thirdparty/gvisor-vswitch/build/gvswitch-android-arm64 app/src/main/assets/bin/arm64-v8a/gvswitch
-    install -m755 app/src/thirdparty/gvisor-vswitch/build/gvswitch-linux-amd64   app/src/main/assets/bin/x86_64/gvswitch
-}
-
-build_pbridge() {
-    if ! command -v cargo >/dev/null 2>&1 || ! command -v clang >/dev/null 2>&1; then
-        if [ -x app/src/main/assets/bin/arm64-v8a/pbridge ]; then
-            warn "cargo/clang not found; reusing the previously-built pbridge binaries"
-            return 0
-        fi
-        die "rustup (cargo) and clang are required to build pbridge"
-    fi
-    log "Building pbridge (android-arm64 + linux-x64)"
-    (cd app/src/thirdparty/pseudo-bridge-rs && ./build.sh all)
-    install -m755 app/src/thirdparty/pseudo-bridge-rs/dist/pbridge-android-arm64 app/src/main/assets/bin/arm64-v8a/pbridge
-    install -m755 app/src/thirdparty/pseudo-bridge-rs/dist/pbridge-linux-x64     app/src/main/assets/bin/x86_64/pbridge
-}
-
-build_bridgedhcp() {
-    if ! command -v go >/dev/null 2>&1; then
-        if [ -x app/src/main/assets/bin/arm64-v8a/bridgedhcp ]; then
-            warn "Go not found; reusing the previously-built bridgedhcp binaries"
-            return 0
-        fi
-        die "Go is required to build bridgedhcp (https://go.dev/dl/)"
-    fi
-    log "Building bridgedhcp (android-arm64 + linux-amd64)"
-    (cd app/src/thirdparty/bridgedhcp && ./build.sh)
-    install -m755 app/src/thirdparty/bridgedhcp/build/bridgedhcp-android-arm64 app/src/main/assets/bin/arm64-v8a/bridgedhcp
-    install -m755 app/src/thirdparty/bridgedhcp/build/bridgedhcp-linux-amd64   app/src/main/assets/bin/x86_64/bridgedhcp
-}
-
-build_lbx() {
-    if ! command -v cargo >/dev/null 2>&1; then
-        if [ -x app/src/main/assets/bin/arm64-v8a/lbx ]; then
-            warn "cargo not found; reusing the previously-built lbx binaries"
-            return 0
-        fi
-        die "rustup (cargo) is required to build lbx"
-    fi
-    log "Building lbx (android-arm64 + linux-x64)"
-    (cd app/src/thirdparty/linux-boot-extractor && ./build.sh all)
-    install -m755 app/src/thirdparty/linux-boot-extractor/dist/lbx-android-arm64 app/src/main/assets/bin/arm64-v8a/lbx
-    install -m755 app/src/thirdparty/linux-boot-extractor/dist/lbx-linux-x64      app/src/main/assets/bin/x86_64/lbx
-}
-
-build_netbox() {
-    if ! command -v cargo >/dev/null 2>&1; then
-        if [ -x app/src/main/assets/bin/arm64-v8a/netbox ]; then
-            warn "cargo not found; reusing the previously-built netbox binaries"
-            return 0
-        fi
-        die "rustup (cargo) is required to build netbox"
-    fi
-    log "Building netbox (android-arm64 + linux-x64)"
-    (cd app/src/main/rust/netbox && ./build.sh all)
-    install -m755 app/src/main/rust/netbox/dist/netbox-android-arm64 app/src/main/assets/bin/arm64-v8a/netbox
-    install -m755 app/src/main/rust/netbox/dist/netbox-linux-x64     app/src/main/assets/bin/x86_64/netbox
-}
-
-# ------------------------------------------------------------- terminal font
-# Maple Mono NL NF (no-ligature Nerd Font) is the default terminal typeface,
-# applied at runtime via TerminalView.setTypeface (see TerminalFonts.java). The
-# ~2.3MB TTF is git-ignored and fetched here on first build; only the OFL
-# license text is committed. Users can still override it with
-# $HOME/.termux/font.ttf, and the app falls back to the system monospace when
-# the font is absent -- so a download failure is a warning, not fatal.
-FONT_VER="v7.9"
-FONT_DIR="app/src/main/assets/fonts"
-FONT_TTF="$FONT_DIR/MapleMonoNL-NF-Regular.ttf"
-FONT_SHA="aa3b096bc92df8503d77482b285a0567bafa6e83230d969700f455e610b1f655"
-FONT_URL="https://github.com/subframe7536/maple-font/releases/download/$FONT_VER/MapleMonoNL-NF.zip"
-
-font_ok() { [ -f "$FONT_TTF" ] && echo "$FONT_SHA  $FONT_TTF" | sha256sum -c - >/dev/null 2>&1; }
-
-fetch_font() {
-    if font_ok; then return 0; fi
-    if ! have curl || ! have unzip; then
-        warn "curl/unzip missing; cannot fetch terminal font (app uses system monospace)"
-        return 0
-    fi
-    log "Fetching terminal font Maple Mono NL NF ($FONT_VER)"
-    mkdir -p "$FONT_DIR"
-    local tmp; tmp="$(mktemp -d)"
-    if curl -fsSL --max-time 180 -o "$tmp/nf.zip" "$FONT_URL" \
-        && unzip -o -j "$tmp/nf.zip" '*NL-NF-Regular.ttf' -d "$FONT_DIR" >/dev/null; then
-        font_ok || warn "terminal font sha256 mismatch (upstream re-released?); keeping it anyway"
-    else
-        warn "failed to fetch terminal font (app uses system monospace)"
-    fi
-    rm -rf "$tmp"
-}
-
-if [ "${SKIP_THIRDPARTY:-0}" = "1" ]; then
-    log "Skipping third-party builds (SKIP_THIRDPARTY=1)"
-    for bin in gvswitch pbridge bridgedhcp lbx netbox; do
-        [ -x "app/src/main/assets/bin/arm64-v8a/$bin" ] || die "app/src/main/assets/bin is missing $bin (run without SKIP_THIRDPARTY once)"
-    done
-else
-    build_gvswitch
-    build_pbridge
-    build_bridgedhcp
-    build_lbx
-    build_netbox
+if prebuilt_root_active; then
+    log "$PREBUILT_ROOT detected; Gradle will regenerate prebuilts via auto-build.py"
+    printf '    %-14s %s\n' "Go (golang)"  "$(have go      && go version | awk '{print $3}'      || echo 'MISSING -> https://go.dev/dl/')"
+    printf '    %-14s %s\n' "Rust (cargo)" "$(have cargo    && cargo --version | awk '{print $2}'  || echo 'MISSING -> https://rustup.rs')"
+    printf '    %-14s %s\n' "clang"        "$(have clang    && echo present                        || echo 'MISSING -> needed for pbridge BPF')"
+    printf '    %-14s %s\n' "python3"      "$(have python3  && python3 --version | awk '{print $2}' || echo 'MISSING')"
+    printf '    %-14s %s\n' "tomllib"      "$(have python3 && python3 -c 'import tomllib' 2>/dev/null && echo 'present (py3.11+)' || echo 'MISSING -> need Python 3.11+')"
+
+    miss=""
+    have go    || miss="$miss go"
+    have cargo || miss="$miss cargo"
+    have clang || miss="$miss clang"
+    have python3 || miss="$miss python3"
+    have python3 && ! python3 -c 'import tomllib' >/dev/null 2>&1 && miss="$miss python3.11+"
+    [ -n "$miss" ] && die "auto-build.py needs:$miss. Install them, or remove ./$PREBUILT_ROOT to build against the published DroidVM-Prebuilts instead."
 fi
 
-fetch_font
+# ---------------------------------------------------------------- submodules
+# Includes the DroidVM-Prebuilts submodule (prebuilt artifacts) and the CMake
+# submodules (libvncserver, jsoncpp, udisasm).
+log "Initializing git submodules"
+git submodule update --init --recursive
 
 # --------------------------------------------------------------------- APK
 log "Building APK ($GRADLE_TASK)"
 ./gradlew "$GRADLE_TASK"
 
-[ -f "$APK" ] || die "expected APK not found: $APK"
+# release has no signingConfig -> app-release-unsigned.apk; debug -> app-debug.apk.
+# Just take whatever assemble produced.
+APK="$(find "$APK_DIR" -maxdepth 1 -name '*.apk' 2>/dev/null | head -1)"
+[ -n "$APK" ] && [ -f "$APK" ] || die "expected APK not found in $APK_DIR"
 log "Done: $APK ($(du -h "$APK" | cut -f1))"
diff --git a/gradle/libs.versions.toml b/gradle/libs.versions.toml
index 4fd3dcb80..16b5feb4b 100644
--- a/gradle/libs.versions.toml
+++ b/gradle/libs.versions.toml
@@ -13,6 +13,7 @@ material = "1.13.0"
 okhttp3 = "5.3.2"
 snakeyaml = "2.6"
 termux = "v0.118.3"
+xz = "1.10"
 
 [libraries]
 activity = { group = "androidx.activity", name = "activity", version.ref = "activity" }
@@ -30,6 +31,7 @@ libsu-service = { group = "com.github.topjohnwu.libsu", name = "service", versio
 material = { group = "com.google.android.material", name = "material", version.ref = "material" }
 okhttp3 = { group = "com.squareup.okhttp3", name = "okhttp", version.ref = "okhttp3" }
 snakeyaml = { group = "org.yaml", name = "snakeyaml", version.ref = "snakeyaml" }
+xz = { group = "org.tukaani", name = "xz", version.ref = "xz" }
 #noinspection Aligned16KB
 termux-emulator = { group = "com.github.termux.termux-app", name = "terminal-emulator", version.ref = "termux" }
 termux-view = { group = "com.github.termux.termux-app", name = "terminal-view", version.ref = "termux" }

From 28fb9b09076a8398c7c78d2723b316e3d56ccd22 Mon Sep 17 00:00:00 2001
From: HuJK <gh@hujk.org>
Date: Sun, 21 Jun 2026 17:27:59 +0800
Subject: [PATCH 018/182] (fix) bridge name detection; boot wati default to 2
 sec; service process watchdog

---
 .../daemon/network/NetworkInstance.java       |  16 +++
 .../daemon/network/NetworkInstanceStore.java  |   7 ++
 .../daemon/network/NetworkWatchdog.java       |  59 +++++++++++
 .../daemon/network/backend/BridgeBackend.java |   7 ++
 .../daemon/network/backend/BridgeDhcp.java    |  20 +++-
 .../network/backend/DefaultRouterWatcher.java |  17 ++-
 .../network/backend/LinuxBridgeBackend.java   |  14 +++
 .../network/backend/ManagedProcess.java       |   7 ++
 .../daemon/network/backend/Pbridge.java       |  30 ++----
 .../backend/gvisor/GvisorBridgeBackend.java   | 100 ++++++++++++++----
 .../backend/gvisor/GvswitchConfigBuilder.java |  15 ++-
 .../store/network/NetworkConfigValidator.java |   7 +-
 .../lib/store/network/NetworkStore.java       |  11 ++
 .../droidvm/lib/store/vm/BootConfig.java      |   2 +-
 .../ui/network/edit/NetworkEditActivity.java  |  36 ++++++-
 .../ui/widgets/row/TextInputRowWidget.java    |   6 ++
 .../main/res/layout/activity_network_edit.xml |   8 ++
 17 files changed, 305 insertions(+), 57 deletions(-)
 create mode 100644 app/src/main/java/cn/classfun/droidvm/daemon/network/NetworkWatchdog.java

diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/network/NetworkInstance.java b/app/src/main/java/cn/classfun/droidvm/daemon/network/NetworkInstance.java
index 9c1834ab0..223a04227 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/network/NetworkInstance.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/network/NetworkInstance.java
@@ -85,6 +85,7 @@ public boolean start() {
             backend = createBackend();
             backend.start();
             state = NetworkState.RUNNING;
+            store.ensureWatchdog();
             Log.i(TAG, fmt(
                 "Network %s started on bridge %s", getName(), getBridgeName()
             ));
@@ -133,6 +134,21 @@ public boolean stop(boolean force) {
         return true;
     }
 
+    /**
+     * Watchdog entry point: while the network is RUNNING, ask the backend to
+     * restart and re-initialise any helper that has died. No-op otherwise, so a
+     * stopping/stopped network is never resurrected.
+     */
+    public void reconcile() {
+        var b = backend;
+        if (state != NetworkState.RUNNING || b == null) return;
+        try {
+            b.reconcile();
+        } catch (Exception e) {
+            Log.w(TAG, fmt("Reconcile failed for network %s", getName()), e);
+        }
+    }
+
     /** Name of a non-stopped VM with a NIC on this network, or null. */
     @Nullable
     public String findRunningVMUsing() {
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/network/NetworkInstanceStore.java b/app/src/main/java/cn/classfun/droidvm/daemon/network/NetworkInstanceStore.java
index 1479bc7e6..1a9343b7f 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/network/NetworkInstanceStore.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/network/NetworkInstanceStore.java
@@ -32,6 +32,7 @@ public final class NetworkInstanceStore extends DataStore<NetworkInstance> {
     public final FirewallHelper firewall = new IptablesBackend();
     public final LinuxNetwork backend = new LinuxNetwork();
     public final ServerContext context;
+    private final NetworkWatchdog watchdog = new NetworkWatchdog(this);
 
     public NetworkInstanceStore(@NonNull ServerContext context) {
         super();
@@ -39,6 +40,11 @@ public NetworkInstanceStore(@NonNull ServerContext context) {
         Log.i(TAG, "Network instance store initialized");
     }
 
+    /** Starts the helper-process watchdog (idempotent); called when a network comes up. */
+    public void ensureWatchdog() {
+        watchdog.start();
+    }
+
     @Override
     protected boolean load(@NonNull DataStore<NetworkInstance> store, @NonNull JSONObject obj) {
         try {
@@ -146,6 +152,7 @@ public JSONArray listNetworks() {
 
     public void stopAll() {
         Log.i(TAG, "Stopping all networks...");
+        watchdog.stop();
         var toStop = new ArrayList<NetworkInstance>();
         forEach((id, inst) -> {
             var s = inst.getState();
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/network/NetworkWatchdog.java b/app/src/main/java/cn/classfun/droidvm/daemon/network/NetworkWatchdog.java
new file mode 100644
index 000000000..40c08c566
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/network/NetworkWatchdog.java
@@ -0,0 +1,59 @@
+package cn.classfun.droidvm.daemon.network;
+
+import android.util.Log;
+
+import androidx.annotation.NonNull;
+
+import java.util.concurrent.Executors;
+import java.util.concurrent.ScheduledExecutorService;
+import java.util.concurrent.TimeUnit;
+
+/**
+ * Periodically reconciles every running network's helper processes (gvswitch /
+ * pbridge / bridgedhcp): if a network is meant to be RUNNING but a helper has
+ * died, the backend restarts it and re-initialises its state. Runs as a single
+ * daemon thread polling every {@value #INTERVAL_MS}ms, the same way
+ * DefaultRouterWatcher polls.
+ */
+final class NetworkWatchdog {
+    private static final String TAG = "NetworkWatchdog";
+    private static final long INTERVAL_MS = 5000;
+
+    private final NetworkInstanceStore store;
+    private ScheduledExecutorService exec = null;
+
+    NetworkWatchdog(@NonNull NetworkInstanceStore store) {
+        this.store = store;
+    }
+
+    synchronized void start() {
+        if (exec != null) return;
+        exec = Executors.newSingleThreadScheduledExecutor(r -> {
+            var t = new Thread(r, "net-watchdog");
+            t.setDaemon(true);
+            return t;
+        });
+        exec.scheduleWithFixedDelay(
+            this::tick, INTERVAL_MS, INTERVAL_MS, TimeUnit.MILLISECONDS);
+        Log.i(TAG, "Network watchdog started");
+    }
+
+    synchronized void stop() {
+        if (exec == null) return;
+        exec.shutdownNow();
+        exec = null;
+        Log.i(TAG, "Network watchdog stopped");
+    }
+
+    private void tick() {
+        store.forEach((id, inst) -> safeReconcile(inst));
+    }
+
+    private void safeReconcile(@NonNull NetworkInstance inst) {
+        try {
+            inst.reconcile();
+        } catch (Exception e) {
+            Log.w(TAG, "Reconcile failed", e);
+        }
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/BridgeBackend.java b/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/BridgeBackend.java
index e203b54d8..522ec52d7 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/BridgeBackend.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/BridgeBackend.java
@@ -33,6 +33,13 @@ protected BridgeBackend(@NonNull NetworkInstance inst) {
     /** Tears everything down; must be safe to call after a failed start. */
     public abstract void stop();
 
+    /**
+     * Watchdog tick (every 5s while the network is RUNNING): restart any helper
+     * process that has died and re-initialise its state. Must be idempotent and
+     * a no-op when everything is healthy. Default: nothing to supervise.
+     */
+    public void reconcile() {}
+
     /**
      * Creates the tap device for one VM NIC and applies the per-port
      * settings (VLAN, isolation, MAC security), static DHCP leases and
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/BridgeDhcp.java b/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/BridgeDhcp.java
index 6aa66ecfe..d539a9628 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/BridgeDhcp.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/BridgeDhcp.java
@@ -54,6 +54,7 @@ public interface PdListener {
     private final ManagedProcess process;
     private final PdListener pdListener;
     private final String apiKey;
+    private volatile boolean active = false;
     private GvswitchClient client = null;
 
     public BridgeDhcp(@NonNull NetworkInstance inst, @Nullable PdListener pdListener) {
@@ -80,6 +81,7 @@ public static boolean isNeeded(@NonNull List<VlanConfig> vlans) {
     }
 
     public boolean start() {
+        active = true;
         try {
             writeKeyFile();
             writeConf();
@@ -97,17 +99,33 @@ public boolean start() {
     }
 
     public void stop() {
+        active = false;
         process.stop();
         client = null;
     }
 
+    /**
+     * Restarts bridgedhcp if it died. The helper reloads its persisted state
+     * file on start, so active DHCP leases and PD delegations survive the
+     * restart; config and static leases are rebuilt deterministically. Called
+     * on the watchdog's 5s tick while the network is running. Returns true when
+     * healthy.
+     */
+    public synchronized boolean reconcile() {
+        if (!active || process.isRunning()) return true;
+        Log.w(TAG, fmt(
+            "bridgedhcp for %s is down (exit=%d), restarting", br, process.getExitCode()
+        ));
+        return restart();
+    }
+
     /**
      * Rewrites the config (re-resolving PD uplinks) and restarts the helper.
      * Used when a PD uplink that was unavailable at start later appears, so
      * the now-resolvable interface gets a PD client. Persisted leases and PD
      * delegations survive via the state file.
      */
-    public boolean restart() {
+    public synchronized boolean restart() {
         stop();
         return start();
     }
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/DefaultRouterWatcher.java b/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/DefaultRouterWatcher.java
index 955f1fb0f..ace17b87c 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/DefaultRouterWatcher.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/DefaultRouterWatcher.java
@@ -18,6 +18,9 @@
 import cn.classfun.droidvm.daemon.network.NetworkInstance;
 import cn.classfun.droidvm.daemon.server.ServerContext;
 import cn.classfun.droidvm.lib.Constants;
+import cn.classfun.droidvm.lib.store.network.BridgeType;
+import cn.classfun.droidvm.lib.store.network.NetworkState;
+import cn.classfun.droidvm.lib.store.network.UplinkMode;
 
 public final class DefaultRouterWatcher {
     private static final String TAG = "DefaultRouterWatcher";
@@ -96,7 +99,19 @@ private void reconcileRules(boolean ipv6, @Nullable String table) {
         context.getNetworks().forEach((uuid, inst) -> {
             var br = inst.getBridgeName();
             if (br != null && !br.isEmpty()) bridges.add(br);
-            if (table != null) desired.addAll(inst.getL3Devices());
+            // Only a running Linux-bridge L3 network has a real kernel bridge
+            // that forwarded guest traffic needs an "iif <bridge> lookup
+            // <table>" rule for. gvisor is a userspace data path (gvswitch +
+            // AF_XDP) with no kernel device for its bridge name, so a rule on
+            // it would sit [detached] and flap every tick; a stopped network
+            // has no bridge either. Whitelist the one case that needs rules --
+            // any other backend is excluded by default. Both still go into
+            // `bridges` above so their leftover rules are swept here.
+            if (table != null
+                && inst.getState() == NetworkState.RUNNING
+                && inst.getBridgeType() == BridgeType.LINUX
+                && inst.getUplinkMode() == UplinkMode.L3)
+                desired.addAll(inst.getL3Devices());
         });
 
         var satisfied = new LinkedHashSet<String>();
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/LinuxBridgeBackend.java b/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/LinuxBridgeBackend.java
index c9d08dcf2..53cd67071 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/LinuxBridgeBackend.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/LinuxBridgeBackend.java
@@ -307,6 +307,20 @@ public void stop() {
         forwardFailures.clear();
     }
 
+    /**
+     * Restarts pbridge / bridgedhcp if they died. The kernel bridge is the data
+     * path, so these are auxiliary: pbridge (Wi-Fi uplink offload) is stateless,
+     * and bridgedhcp recovers its leases/PD from its state file. The tap ports
+     * stay enslaved to the bridge throughout, so nothing here touches them.
+     */
+    @Override
+    public void reconcile() {
+        var p = pbridge;
+        if (p != null) p.reconcile();
+        var d = dhcp;
+        if (d != null) d.reconcile();
+    }
+
     @Override
     public void attachNic(@NonNull VMNicConfig nic, @NonNull String tapName) throws Exception {
         if (net.isInterfaceExists(tapName)) net.deleteTap(tapName);
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/ManagedProcess.java b/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/ManagedProcess.java
index 9aae3542c..1ae0da1b0 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/ManagedProcess.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/ManagedProcess.java
@@ -122,6 +122,13 @@ private void monitorThread() {
     }
 
     public synchronized void stop() {
+        // Diagnostic: a live helper being stopped is either a legitimate
+        // teardown or the still-unexplained SIGTERM source -- log who asked so
+        // the caller is identifiable in logcat. Restarts go through start()
+        // only after the process already died, so this stays quiet for those.
+        if (running)
+            Log.w(logTag, fmt("stop() on live process; caller:\n%s",
+                Log.getStackTraceString(new Throwable())));
         running = false;
         if (monitor != null) {
             monitor.interrupt();
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/Pbridge.java b/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/Pbridge.java
index bd64792fd..93cbf3275 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/Pbridge.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/Pbridge.java
@@ -16,18 +16,15 @@
  */
 public final class Pbridge {
     private static final String TAG = "Pbridge";
-    private static final int MAX_RESTARTS = 3;
     private final ManagedProcess process;
     private final String uplink;
     private final String bridge;
-    private int restarts = 0;
     private volatile boolean active = false;
 
     public Pbridge(@NonNull String uplink, @NonNull String bridge) {
         this.uplink = uplink;
         this.bridge = bridge;
         this.process = new ManagedProcess("pbridge", bridge);
-        this.process.setOnUnexpectedExit(this::onUnexpectedExit);
     }
 
     @NonNull
@@ -49,7 +46,6 @@ private List<String> buildArgs() {
 
     public boolean start() {
         active = true;
-        restarts = 0;
         return process.start(buildArgs());
     }
 
@@ -58,25 +54,17 @@ public void stop() {
         process.stop();
     }
 
-    private void onUnexpectedExit() {
-        if (!active) return;
-        if (restarts >= MAX_RESTARTS) {
-            Log.e(TAG, fmt(
-                "pbridge for %s died %d times, giving up", bridge, restarts
-            ));
-            return;
-        }
-        restarts++;
+    /**
+     * Restarts pbridge if it died (stateless eBPF forwarder; a fresh process
+     * re-establishes the data path). Called on the watchdog's 5s tick while the
+     * network is running. Returns true when healthy.
+     */
+    public synchronized boolean reconcile() {
+        if (!active || process.isRunning()) return true;
         Log.w(TAG, fmt(
-            "Restarting pbridge for %s (attempt %d/%d)", bridge, restarts, MAX_RESTARTS
+            "pbridge for %s is down (exit=%d), restarting", bridge, process.getExitCode()
         ));
-        try {
-            Thread.sleep(1000L * restarts);
-        } catch (InterruptedException e) {
-            Thread.currentThread().interrupt();
-            return;
-        }
-        if (active) process.start(buildArgs());
+        return process.start(buildArgs());
     }
 
     public boolean isRunning() {
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/gvisor/GvisorBridgeBackend.java b/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/gvisor/GvisorBridgeBackend.java
index b309830c9..08298cbfe 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/gvisor/GvisorBridgeBackend.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/gvisor/GvisorBridgeBackend.java
@@ -20,6 +20,7 @@
 import java.security.SecureRandom;
 import java.util.ArrayList;
 import java.util.HashSet;
+import java.util.LinkedHashMap;
 import java.util.List;
 import java.util.Map;
 import java.util.concurrent.ConcurrentHashMap;
@@ -47,6 +48,8 @@ public final class GvisorBridgeBackend extends BridgeBackend {
     private final String id8;
     private String token = null;
     private GvswitchClient client = null;
+    /** Set once stop() runs so the watchdog never relaunches a torn-down switch. */
+    private volatile boolean stopped = false;
     /** tapName -> NIC config of currently attached ports. */
     private final Map<String, VMNicConfig> attached = new ConcurrentHashMap<>();
     /** tapName -> installed gvswitch forward refs ("vlan/id"). */
@@ -71,7 +74,12 @@ private String configPath() {
     }
 
     @Override
-    public void start() throws Exception {
+    public synchronized void start() throws Exception {
+        launch();
+    }
+
+    /** (Re)writes the config, spawns gvswitch and waits for its API. */
+    private synchronized void launch() throws Exception {
         var bytes = new byte[16];
         random.nextBytes(bytes);
         var sb = new StringBuilder();
@@ -103,6 +111,41 @@ public void start() throws Exception {
         waitReady();
     }
 
+    /**
+     * Watchdog tick: gvswitch IS the data path here, so if it died the whole
+     * network is down. Relaunch it and re-attach every port that was attached
+     * -- the taps are daemon-owned and still exist (crosvm holds them open), so
+     * we only re-POST the af_xdp ports + their static leases and forwards; the
+     * taps are never touched. Dynamic gvswitch state (learned FDB, DHCP leases)
+     * is rebuilt by the guests reconnecting through the restored switch.
+     */
+    @Override
+    public synchronized void reconcile() {
+        if (stopped || process.isRunning()) return;
+        var nics = new LinkedHashMap<>(attached);
+        Log.w(TAG, fmt(
+            "gvswitch %s is down (exit=%d), restarting and re-attaching %d port(s)",
+            id8, process.getExitCode(), nics.size()
+        ));
+        // The previous process's installs are gone; rebuild them from scratch.
+        installedForwards.clear();
+        forwardFailures.clear();
+        try {
+            launch();
+        } catch (Exception e) {
+            Log.e(TAG, fmt("gvswitch %s relaunch failed", id8), e);
+            return;
+        }
+        for (var e : nics.entrySet()) {
+            try {
+                postPort(e.getValue(), e.getKey());
+            } catch (Exception ex) {
+                Log.w(TAG, fmt("Re-attach of port %s failed", e.getKey()), ex);
+            }
+        }
+        Log.i(TAG, fmt("gvswitch %s recovered", id8));
+    }
+
     private void waitReady() throws Exception {
         var deadline = System.currentTimeMillis() + 5000;
         Exception last = null;
@@ -124,7 +167,8 @@ private void waitReady() throws Exception {
     }
 
     @Override
-    public void stop() {
+    public synchronized void stop() {
+        stopped = true;
         attached.clear();
         installedForwards.clear();
         forwardFailures.clear();
@@ -136,7 +180,7 @@ public void stop() {
     }
 
     @Override
-    public void attachNic(@NonNull VMNicConfig nic, @NonNull String tapName) throws Exception {
+    public synchronized void attachNic(@NonNull VMNicConfig nic, @NonNull String tapName) throws Exception {
         if (client == null) throw new IllegalStateException("gvswitch not running");
         var net = inst.getStore().backend;
         if (net.isInterfaceExists(tapName)) net.deleteTap(tapName);
@@ -145,25 +189,7 @@ public void attachNic(@NonNull VMNicConfig nic, @NonNull String tapName) throws
         try {
             if (!net.setLinkState(tapName, true))
                 throw new RuntimeException(fmt("Failed to bring up TAP %s", tapName));
-            var port = new JSONObject();
-            port.put("identifier", tapName);
-            var vlanId = nic.getVlanId();
-            port.put("vlan", vlanId == null ? 4095 : vlanId);
-            if (nic.isIsolated()) port.put("isolated", true);
-            var mac = nic.getMacAddress();
-            if (nic.isMacSecurity() && mac != null)
-                port.put("port_security", mac);
-            port.put("mode", "client");
-            port.put("transport", "af_xdp");
-            port.put("interface", tapName);
-            port.put("bpdu_guard", true);
-            var response = client.post("/api/v1/ports", port);
-            if (!response.isSuccess())
-                throw new RuntimeException(fmt(
-                    "gvswitch port create failed (%d): %s", response.code, response.body));
-            attached.put(tapName, nic);
-            applyStaticLeases(nic, tapName);
-            installNicForwards(nic, tapName);
+            postPort(nic, tapName);
         } catch (Exception e) {
             attached.remove(tapName);
             try {
@@ -175,6 +201,34 @@ public void attachNic(@NonNull VMNicConfig nic, @NonNull String tapName) throws
         }
     }
 
+    /**
+     * Creates the gvswitch af_xdp port over the (already existing, up) tap plus
+     * its static leases and forwards. Never creates or deletes the tap, so it
+     * is reusable for watchdog re-attach without disturbing crosvm.
+     */
+    private void postPort(@NonNull VMNicConfig nic, @NonNull String tapName) throws Exception {
+        if (client == null) throw new IllegalStateException("gvswitch not running");
+        var port = new JSONObject();
+        port.put("identifier", tapName);
+        var vlanId = nic.getVlanId();
+        port.put("vlan", vlanId == null ? 4095 : vlanId);
+        if (nic.isIsolated()) port.put("isolated", true);
+        var mac = nic.getMacAddress();
+        if (nic.isMacSecurity() && mac != null)
+            port.put("port_security", mac);
+        port.put("mode", "client");
+        port.put("transport", "af_xdp");
+        port.put("interface", tapName);
+        port.put("bpdu_guard", true);
+        var response = client.post("/api/v1/ports", port);
+        if (!response.isSuccess())
+            throw new RuntimeException(fmt(
+                "gvswitch port create failed (%d): %s", response.code, response.body));
+        attached.put(tapName, nic);
+        applyStaticLeases(nic, tapName);
+        installNicForwards(nic, tapName);
+    }
+
     private void applyStaticLeases(@NonNull VMNicConfig nic, @NonNull String tapName)
         throws Exception {
         var vlan = nic.resolveDhcpVlan(inst);
@@ -361,7 +415,7 @@ private static void check(@NonNull GvswitchClient.Response response, @NonNull St
     }
 
     @Override
-    public void detachNic(@NonNull VMNicConfig nic, @NonNull String tapName) {
+    public synchronized void detachNic(@NonNull VMNicConfig nic, @NonNull String tapName) {
         attached.remove(tapName);
         if (client != null) {
             try {
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/gvisor/GvswitchConfigBuilder.java b/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/gvisor/GvswitchConfigBuilder.java
index 8fc753eaf..01e16c223 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/gvisor/GvswitchConfigBuilder.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/gvisor/GvswitchConfigBuilder.java
@@ -50,10 +50,19 @@ private static JSONObject buildGateway(
         // per-family SNAT toggles are expressed via deny ranges
         boolean snat4 = net4 != null && vlan.isIpv4Snat();
         boolean snat6 = net6 != null && vlan.isIpv6Snat();
-        gw.put("enable_internet_routing", snat4 || snat6);
+        boolean routing = snat4 || snat6;
+        gw.put("enable_internet_routing", routing);
+        // The single routing switch serves both families, so once it's on we
+        // deny each family that isn't SNAT-enabled. !snat covers both cases:
+        // SNAT toggled off, and the family having no network at all.
         var deny = new JSONArray();
-        if (!snat4 && snat6) deny.put("0.0.0.0/0");
-        if (!snat6 && snat4 && net6 != null) deny.put("::/0");
+        if (routing) {
+            if (!snat4) deny.put("0.0.0.0/0");
+            // slirpnetstack's range parser splits on bare ':' outside
+            // brackets, so an IPv6 CIDR must be bracketed ("[::]/0"); a
+            // plain "::/0" fails with "error parsing ipportrange".
+            if (!snat6) deny.put("[::]/0");
+        }
         if (deny.length() > 0) gw.put("deny", deny);
         // No explicit DNS: gvswitch advertises the gateway IP via DHCP and
         // the dns_proxy answers it through the Android system resolver
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/store/network/NetworkConfigValidator.java b/app/src/main/java/cn/classfun/droidvm/lib/store/network/NetworkConfigValidator.java
index 73e978dda..8ba24cfc8 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/store/network/NetworkConfigValidator.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/store/network/NetworkConfigValidator.java
@@ -28,8 +28,11 @@ public static void validate(@NonNull NetworkConfig config) {
         var bridgeName = config.getBridgeName();
         if (bridgeName == null || !bridgeName.matches("[a-zA-Z][a-zA-Z0-9_-]*"))
             throw new IllegalArgumentException(fmt("Invalid bridge name: %s", bridgeName));
-        if (bridgeName.length() > 15)
-            throw new IllegalArgumentException("Bridge name longer than 15 characters");
+        // Cap at 12 so the longest derived name still fits IFNAMSIZ (15 usable):
+        // a per-VLAN bridge / trunk leg appends "v" or "." plus a 2-char VLAN
+        // code (bridge + 3). See LinuxNetwork.vlanCode / perVlanBridge.
+        if (bridgeName.length() > 12)
+            throw new IllegalArgumentException("Bridge name longer than 12 characters");
 
         var type = config.getBridgeType();
         var mode = config.getUplinkMode();
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/store/network/NetworkStore.java b/app/src/main/java/cn/classfun/droidvm/lib/store/network/NetworkStore.java
index 0439cf1a7..614bf7447 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/store/network/NetworkStore.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/store/network/NetworkStore.java
@@ -4,11 +4,13 @@
 import android.util.Log;
 
 import androidx.annotation.NonNull;
+import androidx.annotation.Nullable;
 
 import org.json.JSONException;
 import org.json.JSONObject;
 
 import java.io.File;
+import java.util.UUID;
 
 import cn.classfun.droidvm.lib.store.base.DataStore;
 import cn.classfun.droidvm.lib.utils.JsonUtils;
@@ -53,6 +55,15 @@ protected boolean load(@NonNull DataStore<NetworkConfig> store, @NonNull JSONObj
         }
     }
 
+    /** True if no other network (besides {@code exclude}) uses this bridge name. */
+    public boolean isBridgeNameUnique(@NonNull String bridgeName, @Nullable UUID exclude) {
+        for (var item : dataMap) {
+            if (exclude != null && exclude.equals(item.getId())) continue;
+            if (bridgeName.equals(item.getBridgeName())) return false;
+        }
+        return true;
+    }
+
     @NonNull
     @Override
     protected NetworkConfig create() {
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/store/vm/BootConfig.java b/app/src/main/java/cn/classfun/droidvm/lib/store/vm/BootConfig.java
index 6867f0700..37b74bf2a 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/store/vm/BootConfig.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/store/vm/BootConfig.java
@@ -74,7 +74,7 @@ public int getStringId() {
         }
     }
 
-    public static final long DEFAULT_BOOT_WAIT = 1;
+    public static final long DEFAULT_BOOT_WAIT = 2;
 
     /** Manual-source cmdline seed: first virtio disk, second partition. */
     public static final String DEFAULT_MANUAL_CMDLINE = "root=/dev/vda2";
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/network/edit/NetworkEditActivity.java b/app/src/main/java/cn/classfun/droidvm/ui/network/edit/NetworkEditActivity.java
index 2607bbaf8..4332016f2 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/network/edit/NetworkEditActivity.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/network/edit/NetworkEditActivity.java
@@ -10,6 +10,7 @@
 import android.os.Bundle;
 import android.os.Handler;
 import android.os.Looper;
+import android.text.InputFilter;
 import android.view.LayoutInflater;
 import android.widget.LinearLayout;
 import android.widget.TextView;
@@ -50,6 +51,11 @@
 
 public final class NetworkEditActivity extends AppCompatActivity {
     public static final String EXTRA_NETWORK_ID = "network_id";
+    /** bridge + "v"/"." + 2-char VLAN code must fit IFNAMSIZ (15 usable). */
+    private static final int MAX_BRIDGE_NAME_LEN = 12;
+    /** Interface-name charset: ASCII letters, digits, hyphen, underscore. */
+    private static final InputFilter BRIDGE_NAME_CHARSET = (src, start, end, dst, ds, de) ->
+        src.subSequence(start, end).toString().matches("[A-Za-z0-9_-]*") ? null : "";
     private final Handler mainHandler = new Handler(Looper.getMainLooper());
     private final Random random = new Random();
     private final List<VlanConfig> vlans = new ArrayList<>();
@@ -62,10 +68,10 @@ public final class NetworkEditActivity extends AppCompatActivity {
     private String selectedUplink = UplinkResolver.ID_WIFI;
     private boolean editMode = false;
     private UUID editNetworkId = null;
-    private String existingBridgeName = null;
     private CollapsingToolbarLayout collapsingToolbar;
     private TextView tvRunningBanner;
     private TextInputRowWidget inputName;
+    private TextInputRowWidget inputBridge;
     private SwitchRowWidget swAutoUp, swStp;
     private DropdownRowWidget ddBridgeType, ddUplinkMode;
     private DropdownRowWidget ddL2Uplink;
@@ -90,6 +96,7 @@ protected void onCreate(Bundle savedInstanceState) {
         collapsingToolbar = findViewById(R.id.collapsing_toolbar);
         tvRunningBanner = findViewById(R.id.tv_running_banner);
         inputName = findViewById(R.id.input_name);
+        inputBridge = findViewById(R.id.input_bridge);
         swAutoUp = findViewById(R.id.sw_auto_up);
         swStp = findViewById(R.id.sw_stp);
         ddBridgeType = findViewById(R.id.dd_bridge_type);
@@ -128,6 +135,10 @@ private void initialize() {
         ddL2Uplink.setOnItemClickListener((p, v, pos, id) -> onUplinkSelected(pos));
         btnAddVlan.setOnClickListener(v -> onAddVlan());
         inputMac.setEndIconOnClickListener(v -> inputMac.setText(generateRandomMac()));
+        inputBridge.setFilters(new InputFilter[]{
+            new InputFilter.LengthFilter(MAX_BRIDGE_NAME_LEN),
+            BRIDGE_NAME_CHARSET,
+        });
         fab.setOnClickListener(v -> onSaveClicked());
         updateUplinkModeDropdown();
         loadUplinks();
@@ -311,6 +322,8 @@ private void generateDefaults() {
         uplinkMode = UplinkMode.L3;
         ddUplinkMode.setText(labelOfMode(uplinkMode));
         inputMac.setText(generateRandomMac());
+        // suggest "br" + 8 UUID hex (10 chars, within the 12 cap); user may edit
+        inputBridge.setText(fmt("br%s", UUID.randomUUID().toString().substring(0, 8)));
         vlans.add(newVlan(0));
     }
 
@@ -422,7 +435,7 @@ private void loadExistingConfig() {
         swStp.setChecked(config.isStp());
         bridgeType = config.getBridgeType();
         uplinkMode = config.getUplinkMode();
-        existingBridgeName = config.getBridgeName();
+        inputBridge.setText(config.getBridgeName());
         ddUplinkMode.setText(labelOfMode(uplinkMode));
         var l2Uplink = config.getL2Uplink();
         if (l2Uplink != null && !l2Uplink.isEmpty()) selectedUplink = l2Uplink;
@@ -508,13 +521,26 @@ private void onSaveClicked() {
             inputName.setError(getString(R.string.network_edit_error_name_duplicate));
             return;
         }
+        var bridgeName = inputBridge.getText().trim();
+        if (bridgeName.isEmpty()) {
+            inputBridge.setError(getString(R.string.network_edit_error_bridge_empty));
+            return;
+        }
+        if (!bridgeName.matches("[a-zA-Z][a-zA-Z0-9_-]*")
+            || bridgeName.length() > MAX_BRIDGE_NAME_LEN) {
+            inputBridge.setError(getString(R.string.network_edit_error_bridge_invalid));
+            return;
+        }
+        inputBridge.setError(null);
+        if (!store.isBridgeNameUnique(bridgeName, editNetworkId)) {
+            inputBridge.setError(getString(R.string.network_edit_error_bridge_duplicate));
+            return;
+        }
         var config = new NetworkConfig();
         if (editMode && editNetworkId != null)
             config.setId(editNetworkId);
         config.setName(name);
-        config.setBridgeName(existingBridgeName != null
-            ? existingBridgeName
-            : fmt("br%s", config.getId().toString().substring(0, 8).replace("-", "")));
+        config.setBridgeName(bridgeName);
         config.item.set("auto_up", swAutoUp.isChecked());
         config.item.set("stp", swStp.isChecked());
         config.setBridgeType(bridgeType);
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/widgets/row/TextInputRowWidget.java b/app/src/main/java/cn/classfun/droidvm/ui/widgets/row/TextInputRowWidget.java
index cfa287413..f3951fbd6 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/widgets/row/TextInputRowWidget.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/widgets/row/TextInputRowWidget.java
@@ -2,6 +2,7 @@
 
 import android.content.Context;
 import android.text.Editable;
+import android.text.InputFilter;
 import android.text.InputType;
 import android.text.TextWatcher;
 import android.util.AttributeSet;
@@ -327,6 +328,11 @@ public void setError(@StringRes int resId) {
         textInputLayout.setError(context.getString(resId));
     }
 
+    /** Restricts what can be typed/pasted (e.g. an allowed-charset + length cap). */
+    public void setFilters(@NonNull InputFilter... filters) {
+        editText.setFilters(filters);
+    }
+
     @NonNull
     public String getText() {
         var e = editText.getText();
diff --git a/app/src/main/res/layout/activity_network_edit.xml b/app/src/main/res/layout/activity_network_edit.xml
index 999210597..5adc0aa5e 100644
--- a/app/src/main/res/layout/activity_network_edit.xml
+++ b/app/src/main/res/layout/activity_network_edit.xml
@@ -66,6 +66,14 @@
                     android:icon="@drawable/ic_edit"
                     android:inputType="text" />
 
+                <cn.classfun.droidvm.ui.widgets.row.TextInputRowWidget
+                    android:id="@+id/input_bridge"
+                    android:layout_width="match_parent"
+                    android:layout_height="wrap_content"
+                    android:hint="@string/network_edit_bridge_hint"
+                    android:icon="@drawable/ic_switch"
+                    android:inputType="textNoSuggestions" />
+
                 <cn.classfun.droidvm.ui.widgets.row.SwitchRowWidget
                     android:id="@+id/sw_auto_up"
                     android:layout_width="match_parent"

From 3949be5e08ac894d218a67e03eb0a91acf46af3b Mon Sep 17 00:00:00 2001
From: HuJK <gh@hujk.org>
Date: Sun, 21 Jun 2026 22:59:32 +0800
Subject: [PATCH 019/182] feat(migration): migrate legacy network and VM
 port-forward configs

- Migrate pre-rework networks.json (flat schema) to the v2 L3/VLAN model;
  the app and daemon load sites validate the migrated result and skip it
  (with a warning) when it does not hold up.

- Fold the legacy VM-level port_forwards array into each NIC's DHCPv4
  lease (structural only -- the lease offset is left unassigned).

- Refuse a static lease with no assigned offset at validation, so a
  migrated VM cannot boot at a wrong default IP.

- When starting a VM from the app, allocate any missing offset
  conflict-free (from 64 up, skipping the dynamic pool) and persist it.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01FikGHtfpTGfjxfEfuUF1Ra
---
 .../daemon/network/NetworkInstanceStore.java  |  17 +-
 .../lib/store/network/NetworkConfig.java      | 159 ++++++++++++++++++
 .../lib/store/network/NetworkStore.java       |  21 ++-
 .../droidvm/lib/store/vm/VMConfig.java        |  66 ++++++++
 .../droidvm/lib/store/vm/VMNicConfig.java     |  35 ++++
 .../droidvm/ui/vm/NicLeaseAllocator.java      | 125 ++++++++++++++
 .../cn/classfun/droidvm/ui/vm/VMActions.java  |   4 +
 7 files changed, 423 insertions(+), 4 deletions(-)
 create mode 100644 app/src/main/java/cn/classfun/droidvm/ui/vm/NicLeaseAllocator.java

diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/network/NetworkInstanceStore.java b/app/src/main/java/cn/classfun/droidvm/daemon/network/NetworkInstanceStore.java
index 1a9343b7f..cd1602122 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/network/NetworkInstanceStore.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/network/NetworkInstanceStore.java
@@ -50,12 +50,25 @@ protected boolean load(@NonNull DataStore<NetworkInstance> store, @NonNull JSONO
         try {
             store.clear();
             JsonUtils.forEachArray(obj, getTypeName(), (JSONObject entry) -> {
-                if (!NetworkConfig.isSupportedSchema(entry)) {
+                var migrated = NetworkConfig.migrate(entry);
+                if (migrated == null) {
                     Log.w(TAG, "Skipping network config with unsupported schema: "
                         + entry.optString("name"));
                     return;
                 }
-                store.addObject(entry);
+                if (migrated != entry) {
+                    // A config we just upgraded from a legacy schema: only keep
+                    // it if the migrated result validates (e.g. a DHCP pool
+                    // offset that lands outside the network is rejected here).
+                    try {
+                        NetworkConfigValidator.validate(new NetworkConfig(migrated));
+                    } catch (Exception e) {
+                        Log.w(TAG, "Skipping legacy network that failed migration/validation: "
+                            + entry.optString("name"), e);
+                        return;
+                    }
+                }
+                store.addObject(migrated);
             });
             return true;
         } catch (Exception e) {
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/store/network/NetworkConfig.java b/app/src/main/java/cn/classfun/droidvm/lib/store/network/NetworkConfig.java
index eb4eaa5c7..df002d119 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/store/network/NetworkConfig.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/store/network/NetworkConfig.java
@@ -1,5 +1,7 @@
 package cn.classfun.droidvm.lib.store.network;
 
+import android.util.Log;
+
 import androidx.annotation.NonNull;
 import androidx.annotation.Nullable;
 
@@ -10,10 +12,14 @@
 import java.util.List;
 import java.util.UUID;
 
+import cn.classfun.droidvm.lib.network.IPv4Address;
+import cn.classfun.droidvm.lib.network.IPv4Network;
 import cn.classfun.droidvm.lib.store.base.DataConfig;
 import cn.classfun.droidvm.lib.store.base.DataItem;
 
 public class NetworkConfig extends DataConfig {
+    private static final String TAG = "NetworkConfig";
+
     public static final int SCHEMA_VERSION = 2;
 
     public NetworkConfig() {
@@ -32,6 +38,159 @@ public static boolean isSupportedSchema(@NonNull JSONObject obj) {
         return obj.optInt("schema", 0) == SCHEMA_VERSION;
     }
 
+    /**
+     * Upgrades a stored network entry to the current schema. Returns {@code obj}
+     * unchanged when it is already current, a freshly built v2 object when it
+     * came from the pre-rework "flat" layout (no/zero schema), or {@code null}
+     * when it cannot be migrated -- a schema newer than this build understands,
+     * or a legacy entry that fails to convert. The caller is expected to run
+     * the result through {@link NetworkConfigValidator} before trusting it, so
+     * a structurally complete but semantically invalid migration (e.g. a DHCP
+     * pool offset that lands outside the network) is reported and skipped
+     * rather than loaded.
+     */
+    @Nullable
+    public static JSONObject migrate(@NonNull JSONObject obj) {
+        int v = obj.optInt("schema", 0);
+        if (v == SCHEMA_VERSION) return obj;
+        if (v > SCHEMA_VERSION) return null; // forward configs we can't read
+        try {
+            return migrateLegacyToV2(obj);
+        } catch (Exception e) {
+            Log.w(TAG, "Failed to migrate legacy network config: " + obj.optString("name"), e);
+            return null;
+        }
+    }
+
+    /**
+     * Converts a pre-rework network entry to schema v2. The old model was a
+     * standalone Linux bridge owning its own addresses, optional NAT and an
+     * optional IPv4 DHCP range -- exactly the new L3 routed uplink mode -- so
+     * the whole legacy config folds into a single untagged VLAN.
+     */
+    private static JSONObject migrateLegacyToV2(@NonNull JSONObject obj) throws JSONException {
+        var src = DataItem.newObject();
+        src.set(obj);
+
+        var out = DataItem.newObject();
+        out.set("schema", (long) SCHEMA_VERSION);
+        // keep id/name stable so VM NIC references (network_id) stay valid
+        var id = src.optString("id", "");
+        if (!id.isEmpty()) out.set("id", id);
+        var name = src.optString("name", "");
+        if (!name.isEmpty()) out.set("name", name);
+        var bridgeName = src.optString("bridge_name", "");
+        if (!bridgeName.isEmpty()) out.set("bridge_name", bridgeName);
+        out.set("bridge_type", BridgeType.LINUX.key());
+        out.set("uplink_mode", UplinkMode.L3.key());
+        out.set("stp", src.optBoolean("stp", false));
+        out.set("auto_up", src.optBoolean("auto_up", false));
+        out.set("l2", DataItem.newObject());
+
+        var l3 = DataItem.newObject();
+        var mac = src.optString("mac_address", "");
+        if (!mac.isEmpty()) l3.set("mac_address", mac);
+        var vlans = DataItem.newArray();
+        vlans.append(migrateLegacyVlan(src));
+        l3.set("vlans", vlans);
+        out.set("l3", l3);
+
+        return out.toJson();
+    }
+
+    /** Builds the single untagged VLAN that carries a legacy bridge's addressing. */
+    private static DataItem migrateLegacyVlan(@NonNull DataItem src) {
+        var ipv4Addrs = legacyAddresses(src, "ipv4_addresses");
+        var ipv6Addrs = legacyAddresses(src, "ipv6_addresses");
+        String ipv4Cidr = ipv4Addrs.isEmpty() ? null : ipv4Addrs.get(0);
+        String ipv6Cidr = ipv6Addrs.isEmpty() ? null : ipv6Addrs.get(0);
+
+        var vlan = DataItem.newObject();
+        vlan.set("vlan_id", 0L);
+
+        var ipv4 = DataItem.newObject();
+        ipv4.set("cidr", ipv4Cidr);
+        ipv4.set("snat", src.optBoolean("nat", false));
+        var dhcp4 = DataItem.newObject();
+        dhcp4.set("enabled", src.optBoolean("dhcp_enabled", false) && ipv4Cidr != null);
+        var offsets = legacyDhcp4Offsets(ipv4Cidr,
+            src.optString("dhcp_range_start", ""),
+            src.optString("dhcp_range_end", ""));
+        dhcp4.set("offset_start", offsets[0]);
+        dhcp4.set("offset_end", offsets[1]);
+        ipv4.set("dhcp", dhcp4);
+        vlan.set("ipv4", ipv4);
+
+        // the legacy UI had no DHCPv6 / SLAAC controls, so keep IPv6 as a plain
+        // static gateway address rather than switching on services that the
+        // old bridge never ran
+        var ipv6 = DataItem.newObject();
+        ipv6.set("source", Ipv6Source.STATIC.key());
+        ipv6.set("cidr", ipv6Cidr);
+        ipv6.set("snat", false);
+        var dhcp6 = DataItem.newObject();
+        dhcp6.set("enabled", false);
+        dhcp6.set("offset_start", 128L);
+        dhcp6.set("offset_end", 192L);
+        ipv6.set("dhcp", dhcp6);
+        var slaac = DataItem.newObject();
+        slaac.set("enabled", false);
+        ipv6.set("slaac", slaac);
+        vlan.set("ipv6", ipv6);
+
+        vlan.set("dns_servers", DataItem.newArray());
+        vlan.set("ipv4_secondary", legacySecondary(ipv4Addrs));
+        vlan.set("ipv6_secondary", legacySecondary(ipv6Addrs));
+        return vlan;
+    }
+
+    /** Non-empty string entries of a legacy CIDR array, in order. */
+    @NonNull
+    private static List<String> legacyAddresses(@NonNull DataItem src, @NonNull String key) {
+        var out = new ArrayList<String>();
+        var arr = src.opt(key, null);
+        if (arr == null || !arr.is(DataItem.Type.ARRAY)) return out;
+        for (var e : arr.asArray()) {
+            if (!e.is(DataItem.Type.STRING)) continue;
+            var s = e.asString();
+            if (s != null && !s.isEmpty()) out.add(s);
+        }
+        return out;
+    }
+
+    /** Everything after the first address becomes a secondary network. */
+    @NonNull
+    private static DataItem legacySecondary(@NonNull List<String> addrs) {
+        var arr = DataItem.newArray();
+        for (int i = 1; i < addrs.size(); i++)
+            arr.append(DataItem.newString(addrs.get(i)));
+        return arr;
+    }
+
+    /**
+     * Converts the legacy absolute DHCP range (start/end IPs) into pool offsets
+     * relative to the primary IPv4 network. Falls back to the standard
+     * 128..192 window when there is no usable range; the result is not clamped,
+     * so an out-of-range legacy range surfaces as an invalid config that the
+     * validator rejects (and the loader then warns about and skips).
+     */
+    @NonNull
+    private static long[] legacyDhcp4Offsets(
+        @Nullable String cidr, @NonNull String start, @NonNull String end
+    ) {
+        long[] def = {128L, 192L};
+        if (cidr == null || start.isEmpty() || end.isEmpty()) return def;
+        try {
+            var net = IPv4Network.parse(cidr);
+            long base = net.networkAddress().value();
+            long os = IPv4Address.parse(start).value() - base;
+            long oe = IPv4Address.parse(end).value() - base;
+            return new long[]{os, oe};
+        } catch (Exception e) {
+            return def;
+        }
+    }
+
     @Nullable
     public String getBridgeName() {
         return item.optString("bridge_name", null);
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/store/network/NetworkStore.java b/app/src/main/java/cn/classfun/droidvm/lib/store/network/NetworkStore.java
index 614bf7447..89d24008e 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/store/network/NetworkStore.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/store/network/NetworkStore.java
@@ -40,12 +40,29 @@ protected boolean load(@NonNull DataStore<NetworkConfig> store, @NonNull JSONObj
         try {
             store.clear();
             JsonUtils.forEachArray(obj, getTypeName(), (JSONObject entry) -> {
-                if (!NetworkConfig.isSupportedSchema(entry)) {
+                var migrated = NetworkConfig.migrate(entry);
+                if (migrated == null) {
                     Log.w(TAG, "Skipping network config with unsupported schema: "
                         + entry.optString("name"));
                     return;
                 }
-                store.addObject(entry);
+                if (migrated == entry) { // already current schema
+                    store.addObject(entry);
+                    return;
+                }
+                // A config we just upgraded from a legacy schema: only keep it
+                // if the migrated result actually validates (e.g. a DHCP pool
+                // offset that lands outside the network is rejected here).
+                NetworkConfig cfg;
+                try {
+                    cfg = new NetworkConfig(migrated);
+                    NetworkConfigValidator.validate(cfg);
+                } catch (Exception e) {
+                    Log.w(TAG, "Skipping legacy network that failed migration/validation: "
+                        + entry.optString("name"), e);
+                    return;
+                }
+                store.add(cfg);
             });
             return true;
         } catch (Exception e) {
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/store/vm/VMConfig.java b/app/src/main/java/cn/classfun/droidvm/lib/store/vm/VMConfig.java
index bb59ec128..05e75bf38 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/store/vm/VMConfig.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/store/vm/VMConfig.java
@@ -7,6 +7,7 @@
 import org.json.JSONException;
 import org.json.JSONObject;
 
+import java.util.LinkedHashMap;
 import java.util.UUID;
 import java.util.function.Consumer;
 
@@ -25,6 +26,7 @@ public VMConfig(@NonNull JSONObject obj) throws JSONException {
             item.remove("kernel");
         }
         migrateBoot();
+        migrateNicForwards();
     }
 
     /**
@@ -55,6 +57,70 @@ private void migrateBoot() {
         boot.setCmdline(item.optString("cmdline", ""));
     }
 
+    /**
+     * Folds the legacy VM-level "port_forwards" array into the new per-NIC
+     * DHCPv4 lease model. The old model forwarded a host port to a free-form
+     * guest IP with no managed lease; the new model rides forwards on a static
+     * lease. This does the structural conversion only: the matching NIC's
+     * lease is enabled and the forwards are moved onto it, but the lease
+     * "offset" (the guest IP position) is left unset. Forwards are decoupled
+     * from the static IP, so an empty offset is a valid "assign on boot"
+     * state -- it is allocated, with a cross-VM conflict check, when the VM is
+     * started. The legacy array is dropped once folded, so this is a no-op on
+     * later loads.
+     */
+    private void migrateNicForwards() {
+        var pfs = item.opt("port_forwards", null);
+        var nics = item.opt("networks", null);
+        if (pfs == null || !pfs.is(DataItem.Type.ARRAY) || pfs.size() == 0
+            || nics == null || !nics.is(DataItem.Type.ARRAY)) {
+            item.remove("port_forwards");
+            return;
+        }
+
+        // network_id -> first NIC on that network (forwards were keyed only by
+        // network, so they land on the first matching NIC)
+        var nicByNet = new LinkedHashMap<String, DataItem>();
+        for (var nic : nics.asArray()) {
+            if (!nic.is(DataItem.Type.OBJECT)) continue;
+            var netId = nic.optString("network_id", "");
+            if (!netId.isEmpty()) nicByNet.putIfAbsent(netId, nic);
+        }
+
+        for (var pf : pfs.asArray()) {
+            if (!pf.is(DataItem.Type.OBJECT)) continue;
+            if (!pf.optBoolean("enabled", true)) continue; // matched old runtime
+            var nic = nicByNet.get(pf.optString("network_id", ""));
+            if (nic == null) continue; // forward for a network this VM no longer attaches
+
+            var lease = nic.opt("dhcp4_lease", null);
+            if (lease == null || !lease.is(DataItem.Type.OBJECT)) {
+                nic.set("dhcp4_lease", DataItem.newObject());
+                lease = nic.get("dhcp4_lease");
+            }
+            // enable the lease but leave "offset" unset -- it is allocated,
+            // with a conflict check, when the VM boots
+            lease.set("enabled", true);
+
+            var forwards = lease.opt("forwards", null);
+            if (forwards == null || !forwards.is(DataItem.Type.ARRAY)) {
+                lease.set("forwards", DataItem.newArray());
+                forwards = lease.get("forwards");
+            }
+            var proto = pf.optString("protocol", "tcp");
+            if (proto.isEmpty()) proto = "tcp";
+            var forward = DataItem.newObject();
+            forward.set("proto", proto);
+            // host_ip had no equivalent in the new model (forwards listen on
+            // all host addresses); only the port pair carries over
+            forward.set("host", String.valueOf(pf.optLong("host_port", 0)));
+            forward.set("guest", String.valueOf(pf.optLong("guest_port", 0)));
+            forwards.append(forward);
+        }
+
+        item.remove("port_forwards");
+    }
+
     /** Iterates this VM's NIC entries (the "networks" array). */
     public final void forEachNic(@NonNull Consumer<VMNicConfig> consumer) {
         var nets = item.opt("networks", null);
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/store/vm/VMNicConfig.java b/app/src/main/java/cn/classfun/droidvm/lib/store/vm/VMNicConfig.java
index 0988768ce..d3be02f9a 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/store/vm/VMNicConfig.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/store/vm/VMNicConfig.java
@@ -92,6 +92,31 @@ public long getDhcp6Offset() {
         return lease("dhcp6_lease").optLong("offset", 64);
     }
 
+    /**
+     * Whether this NIC has a concrete DHCPv4 lease offset stored. A migrated
+     * config (or any lease enabled without an offset) leaves it empty; the
+     * offset is allocated at start time. Reads without creating the lease
+     * object so it stays a pure query.
+     */
+    public boolean hasDhcp4Offset() {
+        return hasOffset("dhcp4_lease");
+    }
+
+    public boolean hasDhcp6Offset() {
+        return hasOffset("dhcp6_lease");
+    }
+
+    private boolean hasOffset(@NonNull String leaseKey) {
+        var l = item.opt(leaseKey, null);
+        if (l == null || !l.is(DataItem.Type.OBJECT)) return false;
+        var off = l.opt("offset", null);
+        return off != null && off.is(DataItem.Type.INTEGER) && off.asInteger() > 0;
+    }
+
+    public void setDhcp4Offset(long offset) {
+        lease("dhcp4_lease").set("offset", offset);
+    }
+
     @NonNull
     public List<PortForward> getDhcp4Forwards() {
         return forwards("dhcp4_lease");
@@ -167,6 +192,13 @@ public void validate(@NonNull NetworkConfig network) {
                 );
             if (mac == null)
                 throw new IllegalArgumentException("DHCPv4 static lease requires a MAC address");
+            // an unassigned offset means there is no IP to boot with. Every
+            // path but daemon autoUp assigns one first (the GUI forces it, app
+            // start runs the allocator), so an empty offset here is a migrated
+            // VM autoUp has never resolved -- refuse rather than guess.
+            if (!hasDhcp4Offset())
+                throw new IllegalArgumentException(
+                    "DHCPv4 static lease has no assigned offset");
             var net4 = vlan.getIpv4Network();
             if (net4 != null) net4.addressAtOffset(getDhcp4Offset());
             for (var fwd : getDhcp4Forwards()) {
@@ -181,6 +213,9 @@ public void validate(@NonNull NetworkConfig network) {
                 throw new IllegalArgumentException(
                     "DHCPv6 static lease requires an L3 network with DHCPv6 enabled"
                 );
+            if (!hasDhcp6Offset())
+                throw new IllegalArgumentException(
+                    "DHCPv6 static lease has no assigned offset");
             var net6 = vlan.getIpv6Network();
             if (net6 != null) net6.addressAtOffset(getDhcp6Offset());
             for (var fwd : getDhcp6Forwards()) {
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/NicLeaseAllocator.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/NicLeaseAllocator.java
new file mode 100644
index 000000000..334a92e04
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/NicLeaseAllocator.java
@@ -0,0 +1,125 @@
+package cn.classfun.droidvm.ui.vm;
+
+import android.content.Context;
+import android.util.Log;
+
+import androidx.annotation.NonNull;
+
+import java.util.HashSet;
+import java.util.Set;
+import java.util.UUID;
+
+import cn.classfun.droidvm.lib.network.IPv4Network;
+import cn.classfun.droidvm.lib.store.network.NetworkConfig;
+import cn.classfun.droidvm.lib.store.network.NetworkStore;
+import cn.classfun.droidvm.lib.store.network.VlanConfig;
+import cn.classfun.droidvm.lib.store.vm.VMConfig;
+import cn.classfun.droidvm.lib.store.vm.VMStore;
+
+/**
+ * Fills in any unassigned DHCPv4 static-lease offset on a VM right before it
+ * starts. A migrated config (or any lease enabled without an offset) carries an
+ * empty offset; this allocates the smallest free value from 64 up, skipping the
+ * VLAN's dynamic pool and any offset already used by another VM -- or this VM's
+ * own other NICs -- on the same network/VLAN, then persists the result so the
+ * guest IP stays stable across restarts.
+ *
+ * Allocation is app-side and persisted here; nothing else assigns offsets.
+ */
+public final class NicLeaseAllocator {
+    private static final String TAG = "NicLeaseAllocator";
+
+    private NicLeaseAllocator() {
+    }
+
+    /**
+     * Resolves and persists empty DHCPv4 offsets for {@code config}. Best
+     * effort: failures are logged, never thrown, so a start is not blocked.
+     */
+    public static void resolveAndPersist(@NonNull VMConfig config, @NonNull Context ctx) {
+        try {
+            var vmStore = new VMStore();
+            vmStore.load(ctx);
+            var netStore = new NetworkStore();
+            netStore.load(ctx);
+
+            var selfId = config.getId();
+            boolean[] changed = {false};
+            config.forEachNic(nic -> {
+                if (!nic.isDhcp4LeaseEnabled() || nic.hasDhcp4Offset()) return;
+                var netId = nic.getNetworkId();
+                if (netId == null) return;
+                var network = netStore.findById(netId);
+                if (network == null) return;
+                var vlan = nic.resolveDhcpVlan(network);
+                if (vlan == null || !vlan.isDhcp4Enabled()) return;
+                var net4 = vlan.getIpv4Network();
+                if (net4 == null) return;
+
+                long offset = firstFree(usedOffsets(vmStore, config, selfId, network, vlan),
+                    vlan, net4);
+                if (offset < 0) {
+                    Log.w(TAG, "No free DHCPv4 offset for a NIC on network " + netId);
+                    return;
+                }
+                nic.setDhcp4Offset(offset);
+                changed[0] = true;
+            });
+
+            if (changed[0] && vmStore.findById(selfId) != null) {
+                vmStore.update(config);
+                vmStore.save(ctx);
+            }
+        } catch (Exception e) {
+            Log.w(TAG, "Failed to allocate DHCPv4 lease offsets", e);
+        }
+    }
+
+    /**
+     * Offsets already taken on {@code network}/{@code vlan} (IPv4): every other
+     * VM's NICs plus this VM's own already-assigned NICs, so a second NIC
+     * resolved in the same pass sees the first one's freshly set offset.
+     */
+    @NonNull
+    private static Set<Long> usedOffsets(
+        @NonNull VMStore vmStore, @NonNull VMConfig config, @NonNull UUID selfId,
+        @NonNull NetworkConfig network, @NonNull VlanConfig vlan
+    ) {
+        var used = new HashSet<Long>();
+        vmStore.forEach((id, vm) -> {
+            if (id.equals(selfId)) return; // its persisted copy is stale vs config
+            addOffsets(used, vm, network, vlan);
+        });
+        addOffsets(used, config, network, vlan);
+        return used;
+    }
+
+    private static void addOffsets(
+        @NonNull Set<Long> used, @NonNull VMConfig vm,
+        @NonNull NetworkConfig network, @NonNull VlanConfig vlan
+    ) {
+        var netIdStr = network.getId().toString();
+        vm.forEachNic(nic -> {
+            if (!netIdStr.equals(nic.getNetworkId())) return;
+            if (!nic.isDhcp4LeaseEnabled() || !nic.hasDhcp4Offset()) return;
+            var nv = nic.resolveDhcpVlan(network);
+            if (nv == null || nv.getVlanId() != vlan.getVlanId()) return;
+            used.add(nic.getDhcp4Offset());
+        });
+    }
+
+    /** Smallest offset >= 64 outside the dynamic pool and not already used. */
+    private static long firstFree(
+        @NonNull Set<Long> used, @NonNull VlanConfig vlan, @NonNull IPv4Network net4
+    ) {
+        long poolStart = vlan.getDhcp4OffsetStart();
+        long poolEnd = vlan.getDhcp4OffsetEnd();
+        long maxOffset = net4.totalAddresses() - 2; // addressAtOffset valid 1..total-2
+        for (long c = 64; c <= maxOffset; c++) {
+            if (c >= poolStart && c <= poolEnd) continue; // skip the dynamic pool
+            if (used.contains(c)) continue;
+            return c;
+        }
+        return -1;
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/VMActions.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/VMActions.java
index e7562f7ac..8804b5a88 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/VMActions.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/VMActions.java
@@ -284,6 +284,10 @@ private static void doCreateAndStart(
         @NonNull AtomicBoolean wantOpenConsole,
         @Nullable String bootEntry
     ) {
+        // migrated / decoupled NICs may have a static lease enabled but no
+        // offset yet; assign a conflict-free one (and persist it) before the
+        // config is pushed to the daemon, which never allocates offsets itself
+        NicLeaseAllocator.resolveAndPersist(config, ui.getContext());
         var conn = DaemonConnection.getInstance();
         var createReq = conn.buildRequest("vm_exists");
         createReq.put("vm_id", config.getId().toString());

From 161d6b072ecf520b365b165ba5fdd381ef543366 Mon Sep 17 00:00:00 2001
From: HuJK <gh@hujk.org>
Date: Sun, 21 Jun 2026 23:13:06 +0800
Subject: [PATCH 020/182] feat(i18n): add Traditional Chinese (Taiwan)
 translation
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Convert the Simplified Chinese strings to Traditional Chinese with Taiwan
vocabulary (e.g. memory 内存 -> 記憶體, 软件 -> 軟體, 镜像 -> 映像, 权限 ->
權限) and register zh-TW in the per-app locale config.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01FikGHtfpTGfjxfEfuUF1Ra
---
 app/src/main/assets/data/languages.yaml    |   3 +
 app/src/main/assets/prebuilts              |   2 +-
 app/src/main/res/values-zh-rTW/strings.xml | 936 +++++++++++++++++++++
 app/src/main/res/xml/locales_config.xml    |   1 +
 4 files changed, 941 insertions(+), 1 deletion(-)
 create mode 100644 app/src/main/res/values-zh-rTW/strings.xml

diff --git a/app/src/main/assets/data/languages.yaml b/app/src/main/assets/data/languages.yaml
index 6aa0165a2..63a497241 100644
--- a/app/src/main/assets/data/languages.yaml
+++ b/app/src/main/assets/data/languages.yaml
@@ -4,3 +4,6 @@ languages:
 
   - tag: zh-Hans-CN
     name: 简体中文
+
+  - tag: zh-Hant-TW
+    name: 繁體中文
diff --git a/app/src/main/assets/prebuilts b/app/src/main/assets/prebuilts
index ce07fc76c..56a9a9955 160000
--- a/app/src/main/assets/prebuilts
+++ b/app/src/main/assets/prebuilts
@@ -1 +1 @@
-Subproject commit ce07fc76c96315d26539bac3eedb021c1b0da285
+Subproject commit 56a9a99551ad70293f33b4c45c6ebb48ecd08074
diff --git a/app/src/main/res/values-zh-rTW/strings.xml b/app/src/main/res/values-zh-rTW/strings.xml
new file mode 100644
index 000000000..b7c6443dd
--- /dev/null
+++ b/app/src/main/res/values-zh-rTW/strings.xml
@@ -0,0 +1,936 @@
+<?xml version="1.0" encoding="utf-8"?>
+<resources>
+    <string name="app_name">DroidVM</string>
+
+    <string name="start_app_desc">基於高通 Gunyah 虛擬機器監視器的虛擬機器管理器，可在裝置上直接建立和管理輕量級 Linux 虛擬機器。</string>
+    <string name="start_faq_title">常見問題</string>
+
+    <string name="faq1_title">什麼是 Gunyah？</string>
+    <string name="faq1_body">Gunyah 是高通開發的 Type-1 虛擬機器監視器，直接執行在 Android 宿主系統的硬體層之下。它可以建立具有接近原生效能和強安全保障的隔離虛擬機器，無需依賴核心級虛擬化（KVM）。</string>
+
+    <string name="faq2_title">支援哪些裝置？</string>
+    <string name="faq2_body">目前僅支援搭載高通驍龍 8 Elite（SM8750）或更新 SoC 且已啟用 Gunyah 支援的裝置。舊款驍龍晶片組不包含必要的虛擬機器監視器韌體。</string>
+
+    <string name="faq3_title">有哪些環境要求？</string>
+    <string name="faq3_body">1. Root 權限（如 Magisk 或 KernelSU）。\n2. 必須安裝虛擬化 APEX（com.android.virt），其中提供了 crosvm 二進位檔案。\n3. 支援的高通 SoC，且韌體中已啟用 Gunyah 虛擬機器監視器。</string>
+
+    <string name="unimplement">功能未實現</string>
+
+    <string name="menu">選單</string>
+
+    <string name="status_icon_desc">狀態圖示</string>
+    <string name="fab_action_desc">操作</string>
+    <string name="ic_expand_desc">展開或摺疊</string>
+    <string name="setup_step_icon_desc">步驟圖示</string>
+    <string name="setup_skip_title">跳過此步驟？</string>
+    <string name="setup_skip_message">此項檢查未通過，跳過可能導致意外問題。確定要繼續嗎？</string>
+    <string name="setup_skip_confirm">跳過</string>
+    <string name="setup_grant">授權</string>
+
+    <string name="setup_root_title">申請 Root 權限</string>
+    <string name="setup_root_desc">正在申請 Root 權限&#8230;</string>
+    <string name="setup_root_success">\u2705 已獲取 Root 權限。</string>
+    <string name="setup_root_fail">\u274C Root 權限被拒絕，請授予 Root 權限後重試。</string>
+    <string name="setup_root_detail">核心：%1$s\nSELinux：%2$s</string>
+
+    <string name="setup_soc_title">檢查 SoC 型號</string>
+    <string name="setup_soc_desc">正在檢查 SoC 相容性&#8230;</string>
+    <string name="setup_soc_success">\u2705 SoC 支援：%1$s</string>
+    <string name="setup_soc_fail">\u274C 不支援的 SoC：%1$s。</string>
+    <string name="setup_soc_detail">晶片：%1$s</string>
+
+    <string name="setup_virt_title">檢查虛擬化支援</string>
+    <string name="setup_virt_desc">正在檢查虛擬化支援&#8230;</string>
+    <string name="setup_virt_success">\u2705 已找到虛擬化支援。</string>
+    <string name="setup_virt_fail">\u274C 未找到虛擬化支援，請確認已安裝 com.android.virt APEX。</string>
+    <string name="setup_virt_detail">KVM: %1$s\nGunyah: %2$s\n</string>
+
+    <string name="setup_storage_title">檔案存取權限</string>
+    <string name="setup_storage_desc">正在檢查檔案存取權限&#8230;</string>
+    <string name="setup_storage_success">\u2705 已獲取所有檔案存取權限。</string>
+    <string name="setup_storage_fail">\u274C 需要所有檔案存取權限以管理虛擬機器磁碟映像，點選授權。</string>
+
+    <string name="setup_extract_title">解壓預建置檔案</string>
+    <string name="setup_extract_desc">正在解壓預建置檔案&#8230;</string>
+    <string name="setup_extract_success">\u2705 預建置檔案解壓成功。</string>
+    <string name="setup_extract_uptodate">\u2705 預建置檔案已是最新。</string>
+    <string name="setup_extract_fail">\u274C 解壓預建置檔案失敗，請重試。</string>
+
+    <string name="setup_done_title">設定完成</string>
+    <string name="setup_done_desc">所有檢查均已通過。\n您可以開始使用 DroidVM。</string>
+
+    <string name="nav_home">首頁</string>
+    <string name="nav_vm">虛擬機器</string>
+    <string name="nav_disk">磁碟</string>
+    <string name="nav_network">網路</string>
+    <string name="nav_settings">設定</string>
+
+    <string name="home_card_daemon_running">執行中</string>
+    <string name="home_card_daemon_stopped">已停止</string>
+    <string name="home_card_daemon_pid">程序號: %1$d</string>
+    <string name="home_card_droidvm_daemon">DroidVM守護程序</string>
+    <string name="home_card_vm_title">虛擬機器</string>
+    <string name="home_card_vm_summary">%1$d/%2$d</string>
+    <string name="home_card_vm_empty">沒有虛擬機器</string>
+    <string name="home_card_disk_title">虛擬磁碟</string>
+    <string name="home_card_disk_summary">%1$d個 %2$s</string>
+    <string name="home_card_disk_empty">沒有虛擬磁碟</string>
+    <string name="home_card_network_title">虛擬網路</string>
+    <string name="home_card_network_summary">%1$d/%2$d</string>
+    <string name="home_card_network_empty">沒有虛擬網路</string>
+    <string name="home_card_update_available">發現新版本：v%1$s</string>
+    <string name="home_card_update_action">檢視更新</string>
+    <string name="home_card_wizard_title">建立嚮導</string>
+    <string name="home_card_import_title">匯入虛擬機器</string>
+    <string name="home_card_sysinfo_kernel">核心版本</string>
+    <string name="home_card_sysinfo_soc">SoC 型號</string>
+    <string name="home_card_help_title">幫助與文件</string>
+    <string name="home_card_feedback_title">反饋問題</string>
+    <string name="home_card_loading">載入中\u2026</string>
+
+    <string name="vm_empty">暫無虛擬機器。</string>
+    <string name="disk_empty">暫無磁碟。</string>
+    <string name="network_empty">暫無網路。</string>
+    <string name="empty_hint">點選 + 按鈕新建。</string>
+    <string name="empty_icon_desc">空狀態圖示</string>
+
+    <string name="fab_add_desc">建立</string>
+
+    <string name="menu_refresh">重新整理</string>
+
+    <string name="vm_icon_desc">虛擬機器圖示</string>
+    <string name="vm_item_info">%1$d 核 CPU - %2$d MB 記憶體</string>
+    <string name="vm_edit">編輯</string>
+    <string name="vm_delete">刪除</string>
+    <string name="vm_delete_confirm">確定要刪除此虛擬機器嗎？</string>
+    <string name="vm_state_stopped">已停止</string>
+    <string name="vm_state_starting">啟動中</string>
+    <string name="vm_state_running">執行中</string>
+    <string name="vm_state_stopping">停止中</string>
+
+    <string name="vm_exited_success">虛擬機器"%1$s"已停止。</string>
+    <string name="vm_exited_error">虛擬機器"%1$s"以退出碼 %2$d 退出。</string>
+    <string name="vm_exit_dialog_title">虛擬機器"%1$s"啟動失敗</string>
+    <string name="vm_exit_dialog_message">虛擬機器以退出碼 %1$d 退出。\n\n日誌：</string>
+    <string name="vm_exit_no_logs">無可用日誌。</string>
+
+    <string name="vm_info_start">啟動</string>
+    <string name="vm_info_stop">停止</string>
+    <string name="vm_info_restart">重啟</string>
+    <string name="vm_info_console">控制台</string>
+    <string name="vm_info_console_chooser_title">開啟控制台</string>
+    <string name="vm_info_created">建立時間</string>
+    <string name="vm_info_cpu_value">%1$d 核 CPU</string>
+    <string name="vm_info_memory_value">%1$d MiB</string>
+    <plurals name="vm_info_disks_value">
+        <item quantity="other">%1$d 個磁碟</item>
+    </plurals>
+    <string name="vm_info_disks_none">無</string>
+    <string name="vm_info_restart_confirm">確定要重啟此虛擬機器嗎？</string>
+    <string name="vm_info_delete_success">虛擬機器已刪除。</string>
+    <string name="vm_info_state_active">程序執行中</string>
+    <string name="vm_info_console_not_found">找不到任何控制台</string>
+    <string name="vm_info_console_text_select">文字控制台 %1$s</string>
+    <string name="vm_info_console_vnc_select">VNC 控制台</string>
+    <string name="vm_info_console_vnc_ext_select">外部顯示器的 VNC</string>
+
+    <string name="vm_info_logs">日誌</string>
+    <string name="vm_info_logs_chooser_title">檢視日誌</string>
+    <string name="vm_info_logs_title">日誌 - %1$s</string>
+    <string name="vm_info_logs_no_logs">無可用日誌。</string>
+    <string name="vm_info_logs_copy">複製</string>
+    <string name="vm_info_logs_save">儲存</string>
+    <string name="vm_info_logs_copied">日誌已複製到剪貼簿。</string>
+    <string name="vm_info_logs_save_failed">儲存日誌失敗。</string>
+
+    <string name="notif_channel_vm_events">虛擬機器事件</string>
+    <string name="notif_channel_vm_events_desc">虛擬機器狀態變更通知</string>
+    <string name="notif_vm_stopped_title">虛擬機器已停止</string>
+    <string name="notif_vm_failed_title">虛擬機器啟動失敗</string>
+
+    <string name="create_vm_title">建立虛擬機器</string>
+    <string name="edit_vm_title">編輯虛擬機器</string>
+    <string name="create_vm_category_basic">基本</string>
+    <string name="create_vm_name_hint">名稱</string>
+    <string name="create_vm_memory_hint">記憶體</string>
+    <string name="create_vm_cpu_hint">CPU 數量</string>
+    <string name="create_vm_backend">後端</string>
+    <string name="create_vm_backend_crosvm">CrosVM</string>
+    <string name="create_vm_backend_qemu">QEMU</string>
+    <string name="create_vm_btn">建立</string>
+    <string name="create_vm_error_name_empty">名稱不能為空</string>
+    <string name="create_vm_error_name_invalid">名稱包含無效字元</string>
+    <string name="create_vm_error_name_duplicate">已存在同名虛擬機器</string>
+    <string name="create_vm_error_save">儲存配置時發生錯誤</string>
+    <string name="create_vm_error_invalid_number">無效數字</string>
+    <string name="create_vm_error_path_invalid">無效的絕對路徑</string>
+    <string name="create_vm_category_kernel">Linux 核心</string>
+    <string name="create_vm_kernel_hint">核心</string>
+    <string name="create_vm_initrd_hint">Initrd</string>
+    <string name="create_vm_cmdline_hint">核心命令列</string>
+    <string name="create_vm_category_options">虛擬機器選項</string>
+    <string name="create_vm_balloon">記憶體氣球</string>
+    <string name="create_vm_pmu">PMU (效能監視器)</string>
+    <string name="create_vm_rng">RNG (隨機數生成器)</string>
+    <string name="create_vm_smt">SMT (同步多執行緒)</string>
+    <string name="create_vm_usb">USB (通用序列匯流排)</string>
+    <string name="create_vm_protected_vm">保護模式</string>
+    <string name="create_vm_sandbox">沙箱</string>
+    <string name="create_vm_hugepages">大頁記憶體</string>
+    <string name="create_vm_prepare_lend_mthp">預分配大頁</string>
+    <string name="create_vm_protected_normal">普通</string>
+    <string name="create_vm_protected_protected">保護</string>
+    <string name="create_vm_protected_without_firmware">無韌體保護</string>
+    <string name="create_vm_category_gpu">圖形加速器</string>
+    <string name="create_vm_gpu_enabled">啟用GPU</string>
+    <string name="create_vm_gpu_backend">渲染器</string>
+    <string name="create_vm_gpu_backend_2d">2D (軟體)</string>
+    <string name="create_vm_gpu_backend_virglrenderer">VirGL</string>
+    <string name="create_vm_gpu_backend_gfxstream">GfxStream</string>
+    <string name="create_vm_gpu_api">GPU API</string>
+    <string name="create_vm_gpu_api_vulkan">Vulkan</string>
+    <string name="create_vm_gpu_api_egl">EGL</string>
+    <string name="create_vm_gpu_api_opengles">OpenGL ES</string>
+    <string name="create_vm_gpu_api_angle">ANGLE</string>
+    <string name="create_vm_category_display">顯示</string>
+    <string name="create_vm_display_enabled">啟用顯示器</string>
+    <string name="create_vm_display_backend">顯示後端</string>
+    <string name="create_vm_display_backend_simplefb">SimpleFB</string>
+    <string name="create_vm_display_backend_virtio_gpu">Virtio-GPU</string>
+    <string name="create_vm_display_width">顯示寬度</string>
+    <string name="create_vm_display_height">顯示高度</string>
+    <string name="create_vm_display_refresh_rate">重新整理率 (Hz)</string>
+    <string name="create_vm_display_dpi_h">水平DPI</string>
+    <string name="create_vm_display_dpi_v">垂直DPI</string>
+    <string name="create_vm_category_vnc">VNC 伺服器</string>
+    <string name="create_vm_vnc_enabled">啟用 VNC</string>
+    <string name="create_vm_vnc_host">主機地址</string>
+    <string name="create_vm_vnc_port">埠</string>
+    <string name="create_vm_vnc_password_auth">密碼認證</string>
+    <string name="create_vm_vnc_password">密碼</string>
+    <string name="create_vm_vnc_password_clear">清空密碼</string>
+    <string name="create_vm_vnc_password_generate">生成密碼</string>
+    <string name="create_vm_category_disks">磁碟</string>
+    <string name="create_vm_category_network">網路</string>
+    <string name="create_vm_tab_basic">基本</string>
+    <string name="create_vm_tab_boot">啟動</string>
+    <string name="create_vm_tab_storage">儲存</string>
+    <string name="create_vm_tab_network">網路</string>
+    <string name="create_vm_tab_graphics">圖形</string>
+    <string name="create_vm_network_label">網橋網路</string>
+    <string name="create_vm_network_none">無</string>
+    <string name="edit_vm_net_add">新增網路</string>
+    <string name="edit_vm_net_empty">尚未新增網路。</string>
+    <string name="edit_vm_net_delete">移除網路</string>
+    <string name="edit_vm_net_mac_hint">MAC 地址（可選）</string>
+    <string name="edit_vm_net_mac_random">隨機</string>
+    <string name="edit_vm_net_mac_security">源 MAC 過濾</string>
+    <string name="edit_vm_net_isolated">埠隔離</string>
+    <string name="edit_vm_net_vlan">VLAN ID</string>
+    <string name="edit_vm_net_vlan_id">VLAN</string>
+    <string name="edit_vm_net_vlan_no_untagged">Linux 網橋不支援僅未標記(0)埠,請使用標記 VLAN 或 trunk</string>
+    <string name="edit_vm_net_vlan_invalid">VLAN 須為 0–4094,4095 表示 trunk</string>
+    <string name="edit_vm_net_dhcp4_lease">DHCPv4 靜態分配</string>
+    <string name="edit_vm_net_dhcp6_lease">DHCPv6 靜態分配</string>
+    <string name="edit_vm_net_lease_offset">地址偏移</string>
+    <string name="edit_vm_net_forwards">埠轉發（例如 tcp 80:80）</string>
+    <string name="edit_vm_net_forwards_hint">每行一條：[協議] 主機:客戶機（不填協議 = tcp+udp），範圍如 8000-9000:8000-9000</string>
+    <string name="edit_vm_net_forwards_need_snat">埠轉發只在 SNAT 啟用時生效</string>
+    <string name="edit_vm_net_dhcp_need_enable">請先啟用網路「%2$s」VLAN %3$d 的 DHCPv%1$s</string>
+    <string name="edit_vm_net_dhcp_trunk_note">（VLAN 4095 匹配網路的 VLAN 0）</string>
+    <string name="vm_info_port_forwards">埠轉發</string>
+    <string name="vm_info_pf_none">暫無生效轉發</string>
+    <string name="edit_vm_disk_path_hint">路徑</string>
+    <string name="edit_vm_disk_readonly">只讀</string>
+    <string name="edit_vm_disk_bus">匯流排</string>
+    <string name="edit_vm_disk_delete">移除磁碟</string>
+    <string name="edit_vm_disk_browse">瀏覽</string>
+    <string name="edit_vm_disk_browse_title">選擇磁碟來源</string>
+    <string name="edit_vm_disk_browse_file">選擇檔案</string>
+    <string name="edit_vm_disk_browse_registered">選擇已註冊的磁碟</string>
+    <string name="edit_vm_disk_browse_import_create">匯入或建立磁碟</string>
+    <string name="edit_vm_disk_no_registered">未找到已註冊的磁碟。</string>
+    <string name="edit_vm_disk_add">新增磁碟</string>
+    <string name="edit_vm_disk_empty">尚未新增磁碟。</string>
+
+    <string name="create_vm_category_shared_dirs">檔案系統</string>
+    <string name="edit_vm_shared_dir_add">新增共享目錄</string>
+    <string name="edit_vm_shared_dir_empty">尚未新增共享目錄。</string>
+    <string name="edit_vm_shared_dir_path_hint">宿主機目錄路徑</string>
+    <string name="edit_vm_shared_dir_tag_hint">標籤</string>
+    <string name="edit_vm_shared_dir_type">型別</string>
+    <string name="edit_vm_shared_dir_cache">快取</string>
+    <string name="edit_vm_shared_dir_writeback">回寫</string>
+    <string name="edit_vm_shared_dir_dax">DAX</string>
+    <string name="edit_vm_shared_dir_posix_acl">POSIX ACL</string>
+    <string name="edit_vm_shared_dir_delete">移除共享目錄</string>
+    <string name="edit_vm_shared_dir_browse">瀏覽</string>
+
+    <string name="edit_vm_kernel_browse_title">選擇核心</string>
+    <string name="edit_vm_kernel_clear">清空</string>
+    <string name="edit_vm_kernel_builtin">DroidVM 內建 Linux 核心</string>
+    <string name="edit_vm_kernel_microdroid">系統自帶 MicroDroid 核心</string>
+    <string name="edit_vm_kernel_external">選擇外部檔案</string>
+    <string name="edit_vm_kernel_not_found">目標核心不存在: %1$s</string>
+    <string name="edit_vm_boot_uefi">使用 UEFI 啟動</string>
+    <string name="edit_vm_boot_protocol">引導方式</string>
+    <string name="edit_vm_boot_protocol_uefi">UEFI</string>
+    <string name="edit_vm_boot_protocol_linux">Linux 開機協議</string>
+    <string name="edit_vm_uefi_firmware">UEFI 韌體(留空 = 內建 EDK2)</string>
+    <string name="edit_vm_uefi_firmware_builtin">內建 EDK2</string>
+    <string name="edit_vm_uefi_firmware_browse_title">選擇 UEFI 韌體</string>
+    <string name="edit_vm_uefi_firmware_hint">自定義韌體僅對 QEMU 後端生效\ncrosvm 始終使用內建 EDK2\nUEFI 引導 Linux 適配中,尚不可用;如需引導 Linux,請選擇 Linux 核心引導方式</string>
+    <string name="edit_vm_kernel_source">核心來源</string>
+    <string name="edit_vm_kernel_source_image">磁碟映像</string>
+    <string name="edit_vm_kernel_source_manual">手動指定</string>
+    <string name="edit_vm_boot_image_disk">引導磁碟</string>
+    <string name="edit_vm_boot_image_disk_title">選擇引導磁碟</string>
+    <string name="edit_vm_boot_entry">引導項</string>
+    <string name="edit_vm_boot_entry_auto">自動(跟隨引導載入器)</string>
+    <string name="edit_vm_boot_entry_auto_hint">客戶機更新核心後自動生效</string>
+    <string name="edit_vm_boot_entry_default_mark">%1$s(預設)</string>
+    <string name="edit_vm_boot_entry_builtin">DroidVM 內建 Linux 核心</string>
+    <string name="edit_vm_boot_entry_dma_warn">缺失 DMA_RESTRICTED_POOL</string>
+    <string name="edit_vm_boot_detect_title">檢測到的引導檔案</string>
+    <string name="edit_vm_boot_detect_entry">引導項</string>
+    <string name="edit_vm_boot_detect_kernel">核心</string>
+    <string name="edit_vm_boot_detect_initrd">initrd</string>
+    <string name="edit_vm_boot_detect_cmdline">核心命令列</string>
+    <string name="edit_vm_boot_detect_source">來源</string>
+    <string name="edit_vm_boot_detect_scanning">正在掃描…</string>
+    <string name="edit_vm_boot_detect_failed">掃描失敗:%1$s</string>
+    <string name="edit_vm_boot_detect_no_disk">此虛擬機器尚未配置磁碟映像</string>
+    <string name="edit_vm_boot_detect_root_warn">root= 指向物理裝置;請啟用自動修正或覆蓋 cmdline</string>
+    <string name="edit_vm_boot_rescan">重新掃描</string>
+    <string name="edit_vm_boot_vdafix">自動修正 root= 裝置</string>
+    <string name="edit_vm_boot_vdafix_hint">將 root=/dev/sdX 重寫為 PARTUUID 以適配 virtio</string>
+    <string name="edit_vm_boot_wait">開機選單等待秒數</string>
+    <string name="edit_vm_boot_wait_hint">0 = 不顯示選單直接啟動</string>
+    <string name="edit_vm_boot_wait_invalid">必須為秒數(數字)</string>
+    <string name="edit_vm_boot_cmdline_override">核心命令列覆蓋(留空 = 使用映像內的)</string>
+    <string name="edit_vm_boot_cmdline_override_hint">留空 = 使用映像內的 cmdline</string>
+    <string name="edit_vm_boot_menu_title">選擇引導項 — %1$s</string>
+    <string name="edit_vm_boot_menu_boot">啟動</string>
+    <string name="edit_vm_boot_menu_boot_in">啟動 (%1$d)</string>
+    <string name="edit_vm_boot_menu_remember">記住此選擇</string>
+    <string name="edit_vm_boot_menu_fallback">未找到固定的引導項“%1$s”,已改用預設</string>
+    <string name="edit_vm_boot_protected_dma_warn">此核心未啟用 CONFIG_DMA_RESTRICTED_POOL。\n在受保護 VM 下客戶機無法與主機共享 DMA 記憶體,virtio 裝置(磁碟/網路)將無法啟動。\n請改用內建核心,或重新編譯並啟用該選項。</string>
+    <string name="edit_vm_boot_uefi_hint">如果想要直接啟動 Linux 核心則請停用 UEFI</string>
+    <string name="kernel_analysis_title">核心分析</string>
+    <string name="kernel_analysis_analyze">分析</string>
+    <string name="kernel_analysis_hint">匯入前通過網路分析映像的核心/initrd</string>
+    <string name="kernel_analysis_need_url">請先輸入有效的 http(s):// 映像 URL</string>
+    <string name="kernel_analysis_found">找到 %1$d 個引導項</string>
+    <string name="kernel_analysis_progress">下載中：%1$d/%2$d 塊</string>
+    <string name="kernel_analysis_progress_n">下載中：%1$d 塊</string>
+    <string name="edit_vm_initrd_browse_title">選擇 initramfs</string>
+    <string name="edit_vm_initrd_clear">清空</string>
+    <string name="edit_vm_initrd_builtin">DroidVM 內建 Linux initrd</string>
+    <string name="edit_vm_initrd_microdroid">系統自帶 MicroDroid initrd</string>
+    <string name="edit_vm_initrd_microdroid_debug">系統自帶 MicroDroid initrd（可除錯）</string>
+    <string name="edit_vm_initrd_external">選擇外部檔案</string>
+    <string name="edit_vm_initrd_not_found">目標 initrd 不存在: %1$s</string>
+
+    <string name="settings_category_general">通用</string>
+    <string name="settings_language_title">語言</string>
+    <string name="settings_language_summary">更改應用顯示語言</string>
+    <string name="settings_language_system_default">跟隨系統</string>
+    <string name="settings_category_vm">虛擬機器</string>
+    <string name="settings_vm_auto_console_title">啟動時開啟控制台</string>
+    <string name="settings_vm_auto_console_summary">啟動虛擬機器時自動開啟控制台</string>
+    <string name="settings_vm_clear_logs_before_start_title">啟動前清理日誌</string>
+    <string name="settings_vm_clear_logs_before_start_summary">啟動虛擬機器前清理該虛擬機器的所有控制台日誌</string>
+    <string name="settings_category_about">關於</string>
+    <string name="settings_feedback_title">問題反饋</string>
+    <string name="settings_feedback_summary">在 GitHub 上報告問題</string>
+    <string name="settings_license_title">開源許可</string>
+    <string name="settings_license_summary">檢視第三方軟體許可證</string>
+    <string name="settings_privacy_title">隱私政策</string>
+    <string name="settings_privacy_summary">檢視隱私政策</string>
+    <string name="settings_category_update">更新</string>
+    <string name="settings_auto_check_update_title">自動檢查更新</string>
+    <string name="settings_auto_check_update_summary">啟動應用時自動檢查更新</string>
+    <string name="settings_check_update_title">檢查更新</string>
+    <string name="settings_check_update_summary">立即檢查新版本</string>
+    <string name="settings_check_update_checking">正在檢查更新\u2026</string>
+    <string name="settings_check_update_no_update">當前已是最新版本</string>
+    <string name="settings_check_update_error">檢查更新失敗</string>
+    <string name="settings_api_manager_title">API 服務</string>
+    <string name="settings_api_manager_summary">管理雲端 API 服務</string>
+    <string name="settings_api_manager_not_loaded">API 資訊未載入，請先同意隱私政策。</string>
+    <string name="license_detail_description">描述</string>
+    <string name="license_detail_license">許可證</string>
+    <string name="license_detail_urls">連結</string>
+
+    <string name="vm_daemon_error">與守護程序通訊失敗。</string>
+    <string name="vm_compressed_disk_title">壓縮的磁碟映像</string>
+    <string name="vm_compressed_disk_message">crosvm 無法讀取壓縮的 qcow2 映像——啟動時會出現磁碟 I/O 錯誤且找不到分割槽表。要先轉換成非壓縮再啟動嗎？\n%1$s</string>
+    <string name="vm_compressed_disk_convert">轉換並啟動</string>
+    <string name="vm_compressed_disk_start_anyway">仍要啟動</string>
+    <string name="vm_compressed_disk_start_countdown">仍要啟動 (%1$d)</string>
+    <string name="field_copy">複製</string>
+    <string name="field_copied">已複製到剪貼簿</string>
+
+    <string name="disk_icon_desc">磁碟圖示</string>
+    <string name="disk_meta">空間 %1$s \u00B7 實際 %2$s \u00B7 %3$s</string>
+    <string name="disk_size_unknown">未知</string>
+    <string name="disk_delete_confirm">確定要移除此磁碟條目嗎？</string>
+    <string name="disk_delete_file">同時刪除磁碟檔案</string>
+    <string name="disk_add_title">新增磁碟</string>
+    <string name="disk_add_import">匯入已有檔案</string>
+    <string name="disk_add_create">新建磁碟映像</string>
+    <string name="disk_delete">刪除</string>
+    <string name="disk_optimize">最佳化</string>
+    <string name="disk_optimize_backing_title">檢測到增量映像</string>
+    <string name="disk_optimize_backing_message">正在嘗試最佳化一個增量映像，請選擇操作\n保留增量映像，僅最佳化\n轉換為普通映像</string>
+    <string name="disk_optimize_backing_btn_keep">保留</string>
+    <string name="disk_optimize_backing_btn_flatten">轉換</string>
+    <string name="disk_create_increment">建立增量映像</string>
+    <string name="disk_show_info">檢視更多資訊</string>
+    <string name="disk_clone">克隆</string>
+    <string name="disk_clone_title">克隆磁碟</string>
+    <string name="disk_clone_name_hint">新檔名</string>
+    <string name="disk_clone_folder_hint">儲存資料夾</string>
+    <string name="disk_clone_error_name_empty">請輸入檔名</string>
+    <string name="disk_clone_error_folder_empty">請輸入儲存資料夾</string>
+    <string name="disk_clone_error_file_exists">目標檔案已存在</string>
+
+    <string name="disk_info_section_basic">基本資訊</string>
+    <string name="disk_info_section_details">映像詳情</string>
+    <string name="disk_info_section_raw">原始輸出</string>
+    <string name="disk_info_filename">檔名</string>
+    <string name="disk_info_folder">資料夾</string>
+    <string name="disk_info_format">格式</string>
+    <string name="disk_info_copy">複製</string>
+    <string name="disk_info_virtual_size">虛擬大小</string>
+    <string name="disk_info_actual_size">實際大小</string>
+    <string name="disk_info_cluster_size">簇大小</string>
+    <string name="disk_info_backing_file">基礎映像</string>
+    <string name="disk_info_encryption">加密</string>
+    <string name="disk_info_compression">壓縮</string>
+    <string name="disk_info_dirty_flag">狀態</string>
+    <string name="disk_info_encrypted_yes">已加密</string>
+    <string name="disk_info_dirty_yes">髒資料（已設定損壞標記）</string>
+    <string name="disk_info_lazy_refcounts">延遲引用計數已啟用</string>
+    <string name="disk_info_loading">載入中\u2026</string>
+    <string name="disk_info_load_failed">無法載入磁碟資訊</string>
+    <string name="disk_info_tab_info">資訊</string>
+    <string name="disk_info_tab_tree">層級</string>
+    <string name="disk_info_tab_snapshot">快照</string>
+    <string name="disk_info_tree_current">當前映像</string>
+    <string name="disk_info_tree_root">根映像</string>
+    <string name="disk_info_tree_no_chain">未發現映像鏈</string>
+    <string name="disk_info_tree_not_in_store">該映像未被 DroidVM 管理</string>
+    <string name="disk_info_snapshot_id">ID：%s</string>
+    <string name="disk_info_snapshot_vm_size">虛擬機器狀態大小：%s</string>
+    <string name="disk_info_snapshot_disk_size">磁碟大小：%s</string>
+    <string name="disk_info_snapshot_date">日期：%s</string>
+    <string name="disk_info_snapshot_vm_clock">虛擬機器時鐘：%s</string>
+    <string name="disk_info_no_snapshots">未發現快照</string>
+    <string name="disk_info_snapshot_create_title">建立快照</string>
+    <string name="disk_info_snapshot_create_hint">快照名稱</string>
+    <string name="disk_info_snapshot_create_error_empty">請輸入快照名稱</string>
+    <string name="disk_info_snapshot_apply">應用快照</string>
+    <string name="disk_info_snapshot_apply_message">確定要應用快照「%s」嗎？這將覆蓋當前磁碟狀態。</string>
+    <string name="disk_info_snapshot_delete">刪除快照</string>
+    <string name="disk_info_snapshot_delete_message">確定要刪除快照「%s」嗎？</string>
+    <string name="disk_info_snapshot_success">快照操作完成</string>
+    <string name="disk_info_snapshot_failed_title">快照操作失敗</string>
+
+    <string name="disk_create_title">建立磁碟映像</string>
+    <string name="disk_create_category_basic">基本</string>
+    <string name="disk_create_name_hint">檔名</string>
+    <string name="disk_create_folder_hint">儲存資料夾</string>
+    <string name="disk_create_size_hint">大小</string>
+    <string name="disk_create_category_format">格式</string>
+    <string name="disk_create_category_options">選項</string>
+    <string name="disk_create_preallocate">立即分配所有空間</string>
+    <string name="disk_create_preallocate_desc">寫入零填充整個檔案</string>
+    <string name="disk_create_compress">壓縮</string>
+    <string name="disk_create_compress_disabled">停用</string>
+    <string name="disk_create_compress_deflate">Deflate (zlib)</string>
+    <string name="disk_create_compress_zstd">Zstandard (zstd)</string>
+    <string name="disk_create_backing_hint">基礎映像</string>
+    <string name="disk_create_browse">瀏覽</string>
+    <string name="disk_create_fab_desc">建立磁碟</string>
+    <string name="disk_create_error_name_empty">檔名不能為空</string>
+    <string name="disk_create_error_name_invalid">檔名包含無效字元</string>
+    <string name="disk_create_error_exists">磁碟映像已存在</string>
+    <string name="disk_create_error_folder_empty">儲存資料夾不能為空</string>
+    <string name="disk_create_error_folder_invalid">無效的資料夾路徑</string>
+    <string name="disk_create_error_size_zero">大小必須大於 0</string>
+    <string name="disk_create_error_backing_same">基礎映像不能與目標磁碟相同</string>
+    <string name="disk_create_error_backing_invalid">無效的基礎映像路徑</string>
+    <string name="disk_create_success">磁碟"%1$s"已建立。</string>
+    <string name="disk_create_preview">預覽：%1$s</string>
+    <string name="disk_create_preview_desc">磁碟檔案路徑預覽</string>
+
+    <string name="lxc_title">匯入 LXC 映像</string>
+    <string name="lxc_category_source">來源</string>
+    <string name="lxc_meta_source_hint">後設資料來源</string>
+    <string name="lxc_download_source_hint">下載來源</string>
+    <string name="lxc_source_classfun">ClassFun API 服務</string>
+    <string name="lxc_source_official">官方 (LXC)</string>
+    <string name="lxc_source_custom">自定義 URL</string>
+    <string name="lxc_custom_meta_url_hint">後設資料映像站基礎 URL</string>
+    <string name="lxc_custom_download_url_hint">下載映像站基礎 URL</string>
+    <string name="lxc_meta_idle">請先載入後設資料</string>
+    <string name="lxc_meta_loading">載入中\u2026</string>
+    <string name="lxc_meta_refreshing">正在更新源列表\u2026</string>
+    <plurals name="lxc_meta_count">
+        <item quantity="other">後設資料：%1$d 個映像</item>
+    </plurals>
+    <string name="lxc_meta_error">載入失敗：%1$s</string>
+    <string name="lxc_meta_load">載入</string>
+    <string name="lxc_category_image">映像</string>
+    <string name="lxc_distro_hint">發行版</string>
+    <string name="lxc_version_hint">版本</string>
+    <string name="lxc_variant_hint">建置類別</string>
+    <string name="lxc_build_hint">建置版本</string>
+    <string name="lxc_category_output">輸出</string>
+    <string name="lxc_info_size">下載大小：%1$s</string>
+    <string name="lxc_info_path">遠端路徑：%1$s</string>
+    <string name="lxc_fab_import">匯入</string>
+    <string name="lxc_fab_desc">匯入映像</string>
+    <string name="lxc_import_success">映像"%1$s"已新增到磁碟列表。</string>
+    <string name="lxc_error_no_image">請先選擇一個映像。</string>
+    <string name="lxc_error_name_empty">檔名不能為空。</string>
+    <string name="lxc_error_folder_empty">儲存資料夾不能為空。</string>
+    <string name="lxc_error_custom_url">請輸入有效的映像站 URL。</string>
+    <string name="lxc_no_images">未找到 disk-kvm 映像。</string>
+    <string name="lxc_default_download_source">cernet</string>
+    <string name="disk_add_lxc">匯入 LXC 映像</string>
+    <string name="disk_add_url">從 URL 下載</string>
+    <string name="disk_add_images">下載發行版映像</string>
+
+    <string name="images_title">下載映像</string>
+    <string name="images_search_hint">搜尋映像\u2026</string>
+    <string name="images_empty">沒有找到映像</string>
+    <string name="images_category_image">映像</string>
+    <string name="images_category_mirror">映像源</string>
+    <string name="images_mirror_hint">下載映像源</string>
+    <string name="images_mirror_official">官方</string>
+    <string name="images_category_output">輸出</string>
+    <string name="images_fab_download">下載</string>
+    <string name="images_fab_desc">下載映像</string>
+    <string name="images_info_size">大小：%1$s</string>
+    <string name="images_info_url">地址：%1$s</string>
+    <string name="images_error_no_image">請先選擇一個映像。</string>
+    <string name="images_error_name_empty">檔名不能為空。</string>
+    <string name="images_error_folder_empty">儲存路徑不能為空。</string>
+    <string name="images_error_file_exists">檔案已存在。</string>
+    <string name="images_success">映像 \"%1$s\" 已新增到磁碟列表。</string>
+    <string name="images_pick_tap_hint">點選選擇一個映像</string>
+    <string name="images_confirm_title">確認映像</string>
+    <string name="images_confirm_repo">倉庫：%1$s</string>
+    <string name="images_confirm_path">路徑：%1$s</string>
+    <string name="images_confirm_arch">架構：%1$s</string>
+    <string name="images_confirm_size">大小：%1$s</string>
+    <string name="images_confirm_date">修改時間：%1$s</string>
+
+    <string name="import_url_title">從 URL 匯入</string>
+    <string name="import_url_category_source">來源</string>
+    <string name="import_url_url_hint">映像 URL</string>
+    <string name="import_url_status_idle">輸入 URL 後點擊載入獲取資訊</string>
+    <string name="import_url_status_loading">載入中\u2026</string>
+    <string name="import_url_status_size">大小：%1$s</string>
+    <string name="import_url_status_error">失敗：%1$s</string>
+    <string name="import_url_unknown">未知</string>
+    <string name="import_url_load">載入</string>
+    <string name="import_url_info_type">型別：%1$s</string>
+    <string name="import_url_category_output">輸出</string>
+    <string name="import_url_fab_desc">匯入映像</string>
+    <string name="import_url_error_url_empty">請輸入 URL</string>
+    <string name="import_url_error_url_invalid">無效的 URL</string>
+    <string name="import_url_error_name_empty">檔名不能為空</string>
+    <string name="import_url_error_folder_empty">儲存資料夾不能為空</string>
+    <string name="import_url_error_file_exists">檔案已存在</string>
+    <string name="import_url_success">映像"%1$s"已新增到磁碟列表。</string>
+
+    <string name="disk_operation_title">磁碟操作</string>
+    <string name="disk_operation_running">執行中\u2026</string>
+    <string name="disk_operation_success">操作完成。</string>
+    <string name="disk_operation_failed">操作失敗（退出碼 %1$d）。</string>
+    <string name="disk_operation_bad_task">無效的任務引數。</string>
+    <string name="disk_operation_cancel_title">取消操作？</string>
+    <string name="disk_operation_cancel_message">磁碟操作仍在進行中，確定要取消嗎？</string>
+
+    <string name="disk_change_password">修改密碼</string>
+    <string name="change_password_title">修改密碼</string>
+    <string name="change_password_disk_label">磁碟：%1$s</string>
+    <string name="change_password_hint">新密碼</string>
+    <string name="change_password_confirm_hint">確認密碼</string>
+    <string name="change_password_normal_users">同時修改普通使用者密碼</string>
+    <string name="change_password_confirm">確認</string>
+    <string name="change_password_error_empty">密碼不能為空</string>
+    <string name="change_password_error_mismatch">兩次輸入的密碼不一致</string>
+
+    <string name="agent_operation_title">代理操作</string>
+    <string name="agent_operation_preparing">準備中\u2026</string>
+    <string name="agent_operation_creating_vm">正在建立臨時虛擬機器\u2026</string>
+    <string name="agent_operation_starting_vm">正在啟動臨時虛擬機器\u2026</string>
+    <string name="agent_operation_running">執行中\u2026</string>
+    <string name="agent_operation_success">操作完成。</string>
+    <string name="agent_operation_failed">操作失敗（退出碼 %1$d）。</string>
+    <string name="agent_operation_failed_detail">操作失敗：%1$s</string>
+    <string name="agent_operation_prepare_failed">準備代理虛擬機器失敗。</string>
+    <string name="agent_operation_start_failed">啟動代理虛擬機器失敗：%1$s</string>
+    <string name="agent_operation_daemon_disconnected">守護程序連線已斷開。</string>
+    <string name="agent_operation_vm_exited">虛擬機器已退出</string>
+    <string name="agent_operation_cancel_title">取消操作？</string>
+    <string name="agent_operation_cancel_message">操作仍在進行中，取消將停止並刪除臨時虛擬機器。確定要取消嗎？</string>
+    <string name="agent_operation_log_preparing">正在準備代理虛擬機器\u2026\n</string>
+    <string name="agent_operation_log_creating_vm">正在守護程序上建立臨時虛擬機器\u2026\n</string>
+    <string name="agent_operation_log_starting_vm">正在啟動臨時虛擬機器\u2026\n</string>
+    <string name="agent_operation_log_running">臨時虛擬機器正在執行\u2026\n</string>
+    <string name="agent_operation_log_success">\n密碼修改成功。\n</string>
+    <string name="agent_operation_log_failed">\n操作失敗，請檢視上方日誌。\n</string>
+
+    <string name="disk_resize">調整大小</string>
+    <string name="disk_resize_title">調整磁碟大小</string>
+    <string name="disk_resize_new_size">新大小</string>
+    <string name="disk_resize_current">當前大小：%1$s</string>
+    <string name="disk_resize_filename">檔名：%1$s</string>
+    <string name="disk_resize_folder">資料夾: %1$s</string>
+    <string name="disk_resize_loading">載入中\u2026</string>
+    <string name="disk_resize_shrink_title">縮小磁碟</string>
+    <string name="disk_resize_shrink_message">新大小小於當前大小，縮小磁碟可能會導致資料丟失。確定要繼續嗎？</string>
+    <string name="disk_resize_error_invalid">請輸入有效的大小</string>
+    <string name="disk_resize_error_info">無法獲取磁碟資訊</string>
+
+    <string name="disk_set_format">轉換格式</string>
+    <string name="disk_set_format_title">轉換磁碟格式</string>
+    <string name="disk_set_format_name">檔名</string>
+    <string name="disk_set_format_target">目標格式</string>
+    <string name="disk_set_format_current">當前格式：%1$s</string>
+    <string name="disk_set_format_loading">載入中\u2026</string>
+    <string name="disk_set_format_error_name">檔名不能為空</string>
+    <string name="disk_set_format_error_same">目標格式與當前格式相同</string>
+    <string name="disk_set_format_error_info">無法檢測當前格式</string>
+
+    <string name="download_cancel_title">取消下載</string>
+    <string name="download_cancel_message">確定要取消下載"%1$s"嗎？</string>
+    <string name="download_percent">%1$.1f%%</string>
+    <string name="download_speed">%1$s/s</string>
+    <string name="download_size_progress">%1$s / %2$s</string>
+    <string name="download_size_unknown">%1$s / 未知</string>
+    <string name="download_eta">剩餘 %1$s</string>
+    <string name="download_eta_unknown">未知</string>
+    <string name="download_connecting">連線中\u2026</string>
+    <string name="download_finished">已完成</string>
+    <string name="download_failed">失敗：%1$s</string>
+    <string name="download_cancelled">已取消</string>
+    <string name="download_file_icon_desc">檔案圖示</string>
+    <string name="download_exit_title">正在下載</string>
+    <string name="download_exit_message">下載仍在進行中。現在離開將取消下載並刪除已下載的部分檔案。確定要退出嗎？</string>
+    <string name="download_paused">已暫停…</string>
+    <string name="download_paused_network">已暫停，等待網路…</string>
+    <string name="download_paused_retry">連線中斷，正在重試…</string>
+    <string name="download_paused_wifi">已暫停，等待 Wi-Fi…</string>
+    <string name="download_retrying">連線中斷，重試中 (%1$d/%2$d)…</string>
+    <string name="download_one_at_a_time">已有下載正在進行，請等待完成。</string>
+    <string name="download_background_toast">下載將在後臺繼續，可在通知欄檢視。</string>
+    <string name="download_error_start">無法開始下載，請確認系統下載管理器已啟用。</string>
+    <string name="notif_channel_downloads">下載</string>
+    <string name="notif_channel_downloads_desc">磁碟映像下載通知</string>
+    <string name="notif_download_complete_title">匯入完成</string>
+    <string name="notif_download_complete_text">"%1$s"已新增到磁碟列表。</string>
+    <string name="notif_download_failed_title">下載失敗</string>
+    <string name="notif_download_failed_text">無法下載"%1$s"。</string>
+    <string name="notif_channel_downloads_progress">下載中</string>
+    <string name="notif_channel_downloads_progress_desc">下載進行中的通知</string>
+    <string name="notif_download_connecting">連線中…</string>
+    <string name="notif_download_cancel">取消</string>
+
+    <string name="vm_state_suspended">已掛起</string>
+    <string name="vm_info_state_suspended">虛擬機器已掛起</string>
+
+    <string name="vm_info_suspend">掛起</string>
+    <string name="vm_info_resume">恢復</string>
+    <string name="vm_info_powerbtn">電源</string>
+    <string name="vm_info_sleepbtn">睡眠</string>
+
+    <string name="settings_category_daemon">守護程序服務</string>
+    <string name="settings_daemon_status_title">服務狀態</string>
+    <string name="settings_daemon_running">執行中</string>
+    <string name="settings_daemon_stopped">已停止</string>
+    <string name="settings_daemon_checking">檢查中\u2026</string>
+    <string name="settings_daemon_start">啟動服務</string>
+    <string name="settings_daemon_start_summary">啟動 droidvmd 守護程序</string>
+    <string name="settings_daemon_stop">停止服務</string>
+    <string name="settings_daemon_stop_summary">停止 droidvmd 守護程序</string>
+    <string name="settings_daemon_restart">重啟服務</string>
+    <string name="settings_daemon_restart_summary">重啟 droidvmd 守護程序</string>
+
+    <string name="daemon_outdated_title">檢測到舊版本守護程序</string>
+    <string name="daemon_outdated_message">正在執行舊版本的守護程序，是否要重啟？\n\n注意：所有正在執行的虛擬機器將被停止。</string>
+    <string name="daemon_outdated_restart">重啟</string>
+    <string name="daemon_outdated_ignore">忽略</string>
+    <string name="daemon_connected">守護程序已連線</string>
+    <string name="daemon_disconnected">守護程序已斷開</string>
+
+    <string name="test_build_warning_title">測試版本</string>
+    <string name="test_build_warning_message">您正在執行 DroidVM 的測試版本。\n\n此版本僅供測試使用，可能包含錯誤或不完整的功能，可能導致資料丟失或執行不穩定。\n\n如遇到問題，請在 GitHub 上反饋。</string>
+    <string name="test_build_warning_hide">不再提示</string>
+
+    <plurals name="network_item_info">
+        <item quantity="other">網橋：%1$s \u00B7 %2$d 個地址</item>
+    </plurals>
+    <string name="network_state_stopped">已停止</string>
+    <string name="network_state_starting">啟動中</string>
+    <string name="network_state_running">執行中</string>
+    <string name="network_state_stopping">停止中</string>
+    <string name="network_delete">刪除</string>
+    <string name="network_delete_confirm">確定要刪除此網路嗎？</string>
+    <string name="network_delete_in_use">無法刪除：網路正在被執行中的虛擬機器使用：%1$s</string>
+    <string name="network_create_title">建立網路</string>
+    <string name="network_create_success">網路"%1$s"建立成功。</string>
+    <string name="network_edit_title">編輯網路</string>
+    <string name="network_edit_saved">網路"%1$s"已儲存。</string>
+    <string name="network_edit_category_basic">基本</string>
+    <string name="network_edit_name_hint">網路名稱</string>
+    <string name="network_edit_bridge_hint">網橋名稱（例如 br0）</string>
+    <string name="network_edit_mac_hint">MAC 地址（例如 02:42:ac:11:00:01）</string>
+    <string name="network_edit_auto_up">啟動時自動啟用</string>
+    <string name="network_edit_stp">生成樹協議（STP）</string>
+    <string name="network_edit_nat">NAT（網路地址轉換）</string>
+    <string name="network_edit_category_ipv4">IPv4 地址</string>
+    <string name="network_edit_ipv4_hint">IPv4 CIDR（例如 192.168.1.1/24）</string>
+    <string name="network_edit_category_dns">DNS 伺服器</string>
+    <string name="network_edit_dns_hint">DNS 伺服器（例如 8.8.8.8）</string>
+    <string name="network_edit_category_ipv6">IPv6 地址</string>
+    <string name="network_edit_ipv6_hint">IPv6 CIDR（例如 fd00::1/64）</string>
+    <string name="network_edit_no_addresses">未配置地址。</string>
+    <string name="network_edit_remove_address">移除地址</string>
+    <string name="network_edit_category_dhcp">DHCP 服務</string>
+    <string name="network_edit_dhcp_enabled">啟用 DHCP 服務</string>
+    <string name="network_edit_dhcp_start_hint">地址池起始（例如 192.168.1.100）</string>
+    <string name="network_edit_dhcp_end_hint">地址池結束（例如 192.168.1.200）</string>
+    <string name="network_edit_btn_save">儲存</string>
+    <string name="network_edit_error_name_empty">網路名稱不能為空</string>
+    <string name="network_edit_error_name_duplicate">已存在同名網路</string>
+    <string name="network_edit_error_bridge_empty">網橋名稱不能為空</string>
+    <string name="network_edit_error_bridge_invalid">必須以字母開頭，且只能包含字母、數字、連字元或下劃線</string>
+    <string name="network_edit_error_address_invalid">無效的 CIDR 地址</string>
+    <string name="network_edit_error_mac_invalid">無效的 MAC 地址格式</string>
+    <string name="network_edit_error_not_found">未找到網路配置</string>
+    <string name="network_edit_error_bridge_duplicate">已存在使用此網橋名稱的網路</string>
+    <string name="network_edit_error_mac_duplicate">已存在使用此 MAC 地址的網路</string>
+    <string name="network_edit_error_ipv4_overlap">IPv4 子網 %1$s 與網路"%2$s"（%3$s）重疊</string>
+    <string name="network_edit_error_ipv6_overlap">IPv6 子網 %1$s 與網路"%2$s"（%3$s）重疊</string>
+    <string name="network_edit_error_dhcp_invalid">DHCP 地址池起始地址必須小於結束地址</string>
+    <string name="network_edit_error_dhcp_start_invalid">無效的 DHCP 地址池起始地址</string>
+    <string name="network_edit_error_dhcp_end_invalid">無效的 DHCP 地址池結束地址</string>
+    <string name="network_edit_error_ipv4_not_added">IPv4 地址輸入框不為空，請先新增或清空</string>
+    <string name="network_edit_error_ipv6_not_added">IPv6 地址輸入框不為空，請先新增或清空</string>
+    <string name="network_edit_error_dns_not_added">DNS 伺服器輸入框不為空，請先新增或清空</string>
+    <string name="network_edit_error_dns_invalid">無效的 DNS 伺服器地址</string>
+    <string name="network_edit_error_dns_empty">至少需要一個 DNS 伺服器</string>
+    <string name="network_edit_save">儲存網路</string>
+    <string name="network_edit_running_banner">網路正在執行，請先停止後再編輯。</string>
+    <string name="network_edit_bridge_type">網橋型別</string>
+    <string name="network_edit_bridge_type_linux">Linux 網橋</string>
+    <string name="network_edit_bridge_type_gvisor">gVisor 網橋</string>
+    <string name="network_edit_uplink_mode">外網連線</string>
+    <string name="network_edit_uplink_l2">二層橋接</string>
+    <string name="network_edit_uplink_l3">三層路由</string>
+    <string name="network_edit_uplink_none">無（虛擬機器內網）</string>
+    <string name="network_edit_category_l2">二層橋接</string>
+    <string name="network_edit_category_l3">三層路由</string>
+    <string name="network_edit_l2_uplink">上游介面</string>
+    <string name="network_edit_pseudo_bridge">偽橋接</string>
+    <string name="network_edit_uplink_wifi">Wi-Fi</string>
+    <string name="network_edit_uplink_ethernet">乙太網路</string>
+    <string name="network_edit_uplink_tethering">網路共享</string>
+    <string name="network_edit_uplink_unavailable">不可用</string>
+    <string name="network_edit_uplink_identifier">%1$s (%2$s)</string>
+    <string name="network_edit_pseudo_hint_wifi">Wi-Fi 上游無法直接橋接，必須使用偽橋接。</string>
+    <string name="network_edit_pseudo_hint_wired">此上游可直接橋接，偽橋接為可選項。</string>
+    <string name="network_edit_vlan_empty_hint">純虛擬機器內部網路，宿主機不參與。若要參與請新增 VLAN。</string>
+    <string name="network_edit_add_vlan">新增 VLAN</string>
+    <string name="network_edit_remove_vlan">移除 VLAN</string>
+    <string name="network_edit_vlan_untagged">Untagged</string>
+    <string name="network_edit_vlan_title">VLAN</string>
+    <string name="network_edit_vlan_id">VLAN ID</string>
+    <string name="network_edit_vlan_ipv4">主 IPv4 網路</string>
+    <string name="network_edit_vlan_ipv6">主 IPv6 網路</string>
+    <string name="network_edit_vlan_advanced">高階</string>
+    <string name="network_edit_vlan_v4_cidr">IPv4 CIDR（例如 10.181.7.1/24）</string>
+    <string name="network_edit_vlan_v4_snat">IPv4 SNAT</string>
+    <string name="network_edit_vlan_v4_dhcp">DHCPv4</string>
+    <string name="network_edit_vlan_offset_start">地址池偏移起始</string>
+    <string name="network_edit_vlan_offset_end">地址池偏移結束</string>
+    <string name="network_edit_vlan_v6_source">IPv6 來源</string>
+    <string name="network_edit_vlan_v6_static">靜態 CIDR</string>
+    <string name="network_edit_vlan_v6_pd">DHCP-PD</string>
+    <string name="network_edit_vlan_v6_cidr">IPv6 CIDR（例如 fd00:7::1/64）</string>
+    <string name="network_edit_vlan_pd_uplink">PD 上游介面</string>
+    <string name="network_edit_vlan_pd_duid">DUID（留空自動生成）</string>
+    <string name="network_edit_vlan_v6_snat">IPv6 SNAT（僅 gVisor 網橋）</string>
+    <string name="network_edit_vlan_v6_dhcp">DHCPv6</string>
+    <string name="network_edit_vlan_slaac">SLAAC（::/64）</string>
+    <string name="network_edit_vlan_v4_secondary">次要 IPv4 網路（逗號分隔）</string>
+    <string name="network_edit_vlan_v6_secondary">次要 IPv6 網路（逗號分隔）</string>
+    <string name="network_edit_vlan_dns">DNS 伺服器（留空 = 跟隨系統 DNS）</string>
+    <string name="network_edit_error_self_overlap">子網 %1$s 與 %2$s 重疊</string>
+    <string name="network_item_subtitle">%1$s · %2$s</string>
+    <string name="network_info_pbridge">偽橋接（pbridge）</string>
+    <string name="network_info_bridgedhcp">bridgedhcp</string>
+    <string name="network_info_gvswitch">gvswitch</string>
+    <string name="network_info_tool_running">執行中</string>
+    <string name="network_info_tool_stopped">已停止</string>
+    <string name="network_info_tool_view_log">點按檢視日誌</string>
+    <string name="network_info_tool_log_empty">無日誌輸出</string>
+
+    <string name="network_info_start">啟動</string>
+    <string name="network_info_stop">停止</string>
+    <string name="network_info_state_active">網路已啟用，正在轉發流量</string>
+    <string name="network_info_state_idle">網路未執行</string>
+    <string name="network_info_tab_basic">基本</string>
+    <string name="network_info_tab_addresses">地址</string>
+    <string name="network_info_tab_ports">埠</string>
+    <string name="network_info_tab_dhcp">DHCP</string>
+    <string name="network_info_tab_neighbors">鄰居</string>
+    <string name="network_info_bridge">網橋</string>
+    <string name="network_info_mac">MAC 地址</string>
+    <string name="network_info_auto_up">自動啟動</string>
+    <string name="network_info_stp">STP</string>
+    <string name="network_info_nat">NAT</string>
+    <string name="network_info_dhcp">DHCP 伺服器</string>
+    <string name="network_info_dhcp_range">DHCP 範圍</string>
+    <plurals name="network_info_dhcp_pool">
+        <item quantity="other">%1$s - %2$s (%3$d個地址)</item>
+    </plurals>
+    <string name="network_info_created">建立時間</string>
+    <string name="network_info_enabled">已啟用</string>
+    <string name="network_info_disabled">已停用</string>
+    <string name="network_info_no_addresses">無地址</string>
+    <string name="network_info_addr_bound">已繫結</string>
+    <string name="network_info_addr_unbound">未繫結</string>
+    <string name="network_info_addr_source_config">配置</string>
+    <string name="network_info_addr_source_auto">自動</string>
+    <string name="network_info_addr_source_pbridge">偽橋接VM</string>
+    <string name="network_info_pd_label">DHCP-PD</string>
+    <string name="network_info_pd_searching">搜尋中…</string>
+    <string name="network_info_pd_no_uplink">上游介面不可用</string>
+    <string name="network_info_pd_release">釋放</string>
+    <string name="network_info_pd_renew">更新</string>
+    <string name="network_info_no_ports">無已連線埠</string>
+    <string name="network_info_forward_failed">埠轉發失敗：%1$s</string>
+    <string name="network_info_no_leases">無 DHCP 租約</string>
+    <string name="network_info_no_neighbors">無鄰居</string>
+    <string name="network_info_dhcp_expires">到期: %1$s</string>
+
+    <string name="vnc_display_title">VNC 顯示器</string>
+    <string name="vnc_display_connecting">正在連線…</string>
+    <string name="vnc_display_connected">已連線 - %1$dx%2$d</string>
+    <string name="vnc_display_disconnected">已斷開連線</string>
+    <string name="vnc_display_reconnecting">正在重連 (%1$d/%2$d)…</string>
+    <string name="vnc_display_reconnect_failed">重連失敗，已嘗試 %1$d 次</string>
+    <string name="vnc_display_connect_failed">無法連線到 VNC 伺服器</string>
+    <string name="vnc_display_fullscreen">全屏</string>
+
+    <string name="vnc_menu_keyboard">軟鍵盤</string>
+    <string name="vnc_menu_extra_keys">額外按鍵</string>
+    <string name="vnc_menu_fullscreen">全屏</string>
+    <string name="vnc_menu_rotate">旋轉螢幕</string>
+    <string name="vnc_menu_reconnect">重新連線</string>
+    <string name="vnc_menu_external_app">使用外部程式連線</string>
+    <string name="vnc_menu_view_url">檢視連線地址</string>
+    <string name="vnc_menu_no_vnc_app">未找到可處理 VNC 連線的應用</string>
+    <string name="vnc_menu_url_copied">已複製到剪貼簿</string>
+    <string name="vnc_presentation_title">觸控板</string>
+    <string name="vnc_presentation_title_with_name">%1$s - 觸控板</string>
+
+    <string name="vnc_external_title">使用外部程式連線</string>
+    <string name="vnc_external_message">即將使用外部程式連線</string>
+    <string name="vnc_external_hint_target">目標</string>
+    <string name="vnc_external_hint_password">密碼</string>
+    <string name="vnc_external_cancel">取消</string>
+    <string name="vnc_external_connect">連線</string>
+    <string name="vnc_external_copy_password">複製密碼</string>
+    <string name="text_input_item_range">範圍：%1$s - %2$s</string>
+
+    <string name="display_select_display">選擇顯示器</string>
+    <string name="display_no_display">沒有可用的外部顯示器</string>
+    <string name="display_lost">外部顯示器已斷開</string>
+    <string name="display_not_on_title">顯示器未啟用</string>
+    <string name="display_not_on_message">所選的顯示器「%1$s」當前狀態為 %2$s，投屏可能無法正常工作。\n\n是否仍要繼續？</string>
+    <string name="display_start_failed">顯示器啟動失敗</string>
+    <string name="display_state_off">關閉</string>
+    <string name="display_state_on">啟用</string>
+    <string name="display_state_doze">休眠</string>
+    <string name="display_state_doze_suspend">深度休眠</string>
+    <string name="display_state_on_suspend">掛起</string>
+    <string name="display_state_unknown">未知</string>
+    <string name="display_touchpad_hint">滑動移動游標\n點選左鍵單擊\n雙指滾動</string>
+    <string name="display_mouse_left">滑鼠左鍵</string>
+    <string name="display_mouse_middle">滑鼠中鍵</string>
+    <string name="display_mouse_right">滑鼠右鍵</string>
+
+    <string name="logs_title">日誌</string>
+    <string name="logs_scroll_bottom">滾動到底部</string>
+    <string name="logs_clear">清除</string>
+    <string name="logs_save">儲存</string>
+    <string name="logs_save_success">日誌儲存成功</string>
+    <string name="logs_save_failed">儲存日誌失敗：%1$s</string>
+    <string name="logs_share">分享</string>
+    <string name="logs_share_title">分享日誌</string>
+    <string name="logs_share_failed">分享日誌失敗：%1$s</string>
+
+    <string name="privacy_step_title">隱私政策</string>
+    <string name="privacy_step_desc">繼續之前請閱讀並同意隱私政策</string>
+    <string name="privacy_accept">同意</string>
+    <string name="privacy_decline">拒絕</string>
+    <string name="privacy_decline_title">拒絕隱私政策？</string>
+    <string name="privacy_decline_message">如果拒絕隱私政策，部分功能可能無法使用。確定要拒絕嗎？</string>
+    <string name="privacy_decline_confirm">拒絕</string>
+
+    <string name="update_title">發現新版本</string>
+    <string name="update_current_version">當前版本：%1$s</string>
+    <string name="update_new_version">最新版本：%1$s</string>
+    <string name="update_changelog">更新日誌：</string>
+    <string name="update_cancel">取消</string>
+    <string name="update_download">下載</string>
+    <string name="update_browser">瀏覽器</string>
+
+    <string name="back_ask_title">放棄更改？</string>
+    <string name="back_ask_message">確定要返回嗎？所有更改將會丟失。</string>
+    <string name="back_ask_discard">放棄</string>
+    <string name="back_ask_keep_editing">繼續編輯</string>
+
+    <string name="hugepage_title">GH-Hugepage-Reserve 管理</string>
+    <string name="hugepage_subtitle">管理模組設定</string>
+    <string name="hugepage_section_status">狀態</string>
+    <string name="hugepage_section_stats">統計資訊</string>
+    <string name="hugepage_section_actions">操作</string>
+    <string name="hugepage_module_loaded">模組已載入</string>
+    <string name="hugepage_module_enabled">模組狀態</string>
+    <string name="hugepage_not_loaded">核心模組未載入。</string>
+    <string name="hugepage_not_installed">Magisk 模組未安裝。</string>
+    <string name="hugepage_not_installed_desc">gh-hugepage-reserve Magisk 模組未安裝，請先下載並安裝。</string>
+    <string name="hugepage_download">下載</string>
+    <string name="hugepage_crash_warning">模組在上次啟動時發生了崩潰。</string>
+    <string name="hugepage_enable_module">啟用模組</string>
+    <string name="hugepage_dismiss_crash">消除警告</string>
+    <string name="hugepage_crash_dismissed">崩潰警告已消除</string>
+    <string name="hugepage_stat_state">狀態</string>
+    <string name="hugepage_stat_total_served">已分配次數</string>
+    <string name="hugepage_stat_total_refilled">已回收次數</string>
+    <string name="hugepage_stat_active_vms">活動虛擬機器</string>
+    <string name="hugepage_stat_pool_available">可用: %1$d (%2$s)</string>
+    <string name="hugepage_stat_pool_total">總共: %1$d (%2$s)</string>
+    <string name="hugepage_stats_unavailable">模組未載入</string>
+    <string name="hugepage_manual_refill">回收</string>
+    <string name="hugepage_refill_triggered">回收已觸發</string>
+    <string name="hugepage_refill_failed">觸發回收失敗</string>
+    <string name="hugepage_pool_size">池大小</string>
+    <string name="hugepage_pool_size_saved">池大小已儲存（重啟後生效）</string>
+    <string name="hugepage_pool_size_failed">儲存池大小失敗</string>
+    <string name="hugepage_module_now_enabled">模組已啟用（重啟後生效）</string>
+    <string name="hugepage_module_now_disabled">模組已停用（重啟後生效）</string>
+    <string name="hugepage_stop">停止</string>
+    <string name="hugepage_stop_confirm">確定要停止大頁預留模組嗎？這將釋放所有預分配的頁面，可能會影響正在執行的虛擬機器。</string>
+    <string name="hugepage_unloaded">模組已解除安裝</string>
+    <string name="hugepage_unload_failed">解除安裝模組失敗</string>
+</resources>
diff --git a/app/src/main/res/xml/locales_config.xml b/app/src/main/res/xml/locales_config.xml
index 43b603f24..d128a7562 100644
--- a/app/src/main/res/xml/locales_config.xml
+++ b/app/src/main/res/xml/locales_config.xml
@@ -2,5 +2,6 @@
 <locale-config xmlns:android="http://schemas.android.com/apk/res/android">
     <locale android:name="en" />
     <locale android:name="zh-CN" />
+    <locale android:name="zh-TW" />
 </locale-config>
 

From 1b984a50aba8a83a1cb96b9cc3ced34b6824f65f Mon Sep 17 00:00:00 2001
From: HuJK <gh@hujk.org>
Date: Sun, 21 Jun 2026 23:50:21 +0800
Subject: [PATCH 021/182] ci(release): publish a debug-signed APK when no
 release key is set

The dev-release and release workflows built and published an unsigned
release APK whenever APP_SIGN_KEY_JKS was absent. Instead fall back to
assembleDebug (signed with the auto-generated debug keystore) so the
published artifact is always installable. The signed release path is
unchanged when the key is present.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01FikGHtfpTGfjxfEfuUF1Ra
---
 .github/workflows/dev-release.yml | 17 +++++++++++++++--
 .github/workflows/release.yml     | 20 ++++++++++++++++++--
 2 files changed, 33 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/dev-release.yml b/.github/workflows/dev-release.yml
index e0f5772a1..ac2b900d7 100644
--- a/.github/workflows/dev-release.yml
+++ b/.github/workflows/dev-release.yml
@@ -20,6 +20,8 @@ concurrency:
 jobs:
   dev-release:
     runs-on: ubuntu-latest
+    env:
+      HAS_SIGN_KEY: ${{ secrets.APP_SIGN_KEY_JKS != '' }}
 
     steps:
       - name: Checkout repository
@@ -45,13 +47,16 @@ jobs:
       - name: Grant execute permission for gradlew
         run: chmod +x gradlew
 
+      # With a signing key: build and sign a real release APK (current
+      # behaviour). Without one: ship the debug APK -- signed with the
+      # auto-generated debug keystore -- instead of an unsigned release.
       - name: Build release APK
+        if: ${{ env.HAS_SIGN_KEY == 'true' }}
         run: ./gradlew assembleRelease
 
       - name: Sign release APK
         if: ${{ env.HAS_SIGN_KEY == 'true' }}
         env:
-          HAS_SIGN_KEY: ${{ secrets.APP_SIGN_KEY_JKS != '' }}
           APP_SIGN_KEY_JKS: ${{ secrets.APP_SIGN_KEY_JKS }}
           APP_SIGN_KEY_PASS: ${{ secrets.APP_SIGN_KEY_PASS }}
         run: |
@@ -68,11 +73,19 @@ jobs:
             "$ALIGNED"
           rm -f "$ALIGNED" /tmp/keystore.jks
 
+      - name: Build debug APK (no signing key)
+        if: ${{ env.HAS_SIGN_KEY != 'true' }}
+        run: ./gradlew assembleDebug
+
       - name: Stage APK
         run: |
           set -euo pipefail
           mkdir -p release
-          cp app/build/outputs/apk/release/*.apk "release/DroidVM-dev.apk"
+          if [ "${HAS_SIGN_KEY}" = "true" ]; then
+            cp app/build/outputs/apk/release/*.apk "release/DroidVM-dev.apk"
+          else
+            cp app/build/outputs/apk/debug/*.apk "release/DroidVM-dev.apk"
+          fi
 
       - name: Publish rolling dev pre-release
         env:
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index ed0159217..0df30ba5c 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -11,6 +11,8 @@ permissions:
 jobs:
   release:
     runs-on: ubuntu-latest
+    env:
+      HAS_SIGN_KEY: ${{ secrets.APP_SIGN_KEY_JKS != '' }}
 
     steps:
       - name: Checkout repository
@@ -36,10 +38,15 @@ jobs:
       - name: Grant execute permission for gradlew
         run: chmod +x gradlew
 
+      # With a signing key: build and sign a real release APK (current
+      # behaviour). Without one: ship the debug APK -- signed with the
+      # auto-generated debug keystore -- instead of an unsigned release.
       - name: Build release APK
+        if: ${{ env.HAS_SIGN_KEY == 'true' }}
         run: ./gradlew assembleRelease
 
       - name: Sign release APK
+        if: ${{ env.HAS_SIGN_KEY == 'true' }}
         env:
           APP_SIGN_KEY_JKS: ${{ secrets.APP_SIGN_KEY_JKS }}
           APP_SIGN_KEY_PASS: ${{ secrets.APP_SIGN_KEY_PASS }}
@@ -57,6 +64,10 @@ jobs:
             "$ALIGNED"
           rm -f "$ALIGNED" /tmp/keystore.jks
 
+      - name: Build debug APK (no signing key)
+        if: ${{ env.HAS_SIGN_KEY != 'true' }}
+        run: ./gradlew assembleDebug
+
       - name: Get version info
         id: version
         run: |
@@ -70,8 +81,13 @@ jobs:
 
       - name: Rename APK
         run: |
+          set -euo pipefail
           mkdir -p release
-          cp app/build/outputs/apk/release/*.apk "release/DroidVM-v${{ steps.version.outputs.name }}.apk"
+          if [ "${HAS_SIGN_KEY}" = "true" ]; then
+            cp app/build/outputs/apk/release/*.apk "release/DroidVM-v${{ steps.version.outputs.name }}.apk"
+          else
+            cp app/build/outputs/apk/debug/*.apk "release/DroidVM-v${{ steps.version.outputs.name }}-debug.apk"
+          fi
 
       - name: Create GitHub Release
         uses: softprops/action-gh-release@v2
@@ -79,4 +95,4 @@ jobs:
           name: DroidVM v${{ steps.version.outputs.name }}
           draft: false
           prerelease: ${{ contains(github.ref_name, '-') }}
-          files: release/DroidVM-v${{ steps.version.outputs.name }}.apk
+          files: release/*.apk

From 8943195aa77602de77a654dc0212d1caf7933d6b Mon Sep 17 00:00:00 2001
From: HuJK <gh@hujk.org>
Date: Mon, 22 Jun 2026 00:50:57 +0800
Subject: [PATCH 022/182] fix(daemon): enforce single instance with a startup
 lock and force takeover

The daemon had no cross-process singleton guard: it picked a random port
and overwrote the pid file, so a racy app-side check (or an explicit start)
could leave two daemons running and fighting over VMs, networks and iptables.

Take an exclusive advisory lock on droidvmd.lock at startup, held for the
process lifetime so the kernel releases it automatically on death (incl.
SIGKILL). A normal launch exits when the lock is held; with --force the new
daemon terminates the running one (SIGINT, then SIGKILL) and takes over.
restartDaemon() now force-launches instead of the racy stop-then-wait loop.

Because a SIGKILL'd daemon skips cleanup, its crosvm/qemu children orphan and
survive; reap them on startup alongside the existing dnsmasq/gvswitch/pbridge
cleanup, matched by full prebuilt path.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01FikGHtfpTGfjxfEfuUF1Ra
---
 .../cn/classfun/droidvm/daemon/Daemon.java    | 118 ++++++++++++++++++
 .../droidvm/daemon/server/ServerContext.java  |   8 +-
 .../droidvm/lib/daemon/DaemonHelper.java      |  27 ++--
 3 files changed, 143 insertions(+), 10 deletions(-)

diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/Daemon.java b/app/src/main/java/cn/classfun/droidvm/daemon/Daemon.java
index 6e2ec4ebe..37b68f381 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/Daemon.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/Daemon.java
@@ -17,19 +17,132 @@
 import java.io.File;
 import java.io.FileWriter;
 import java.io.IOException;
+import java.nio.ByteBuffer;
+import java.nio.channels.FileChannel;
+import java.nio.channels.FileLock;
+import java.nio.file.Files;
+import java.nio.file.Paths;
+import java.nio.file.StandardOpenOption;
+import java.util.Arrays;
 import java.util.UUID;
 import java.util.concurrent.atomic.AtomicBoolean;
 
 import cn.classfun.droidvm.daemon.server.Server;
 import cn.classfun.droidvm.lib.natives.UnixHelper;
 import cn.classfun.droidvm.lib.utils.FileUtils;
+import cn.classfun.droidvm.lib.utils.ProcessUtils;
 
 public final class Daemon {
     public static final String TAG = "Daemon";
     private static final String RUN_DIR = pathJoin(DATA_DIR, "run");
+    private static final String LOCK_FILE = pathJoin(RUN_DIR, "droidvmd.lock");
     private static final AtomicBoolean cleaned = new AtomicBoolean(false);
     public static String daemonHash = null;
 
+    // Held for the whole process lifetime so the advisory lock stays taken; the
+    // kernel drops it automatically when this process dies (including SIGKILL),
+    // so a stale lock can never block the next daemon.
+    @SuppressWarnings({"FieldCanBeLocal", "unused"})
+    private static FileChannel lockChannel;
+    private static FileLock daemonLock;
+
+    /**
+     * Single-instance gate. Tries to take an exclusive lock on
+     * {@code droidvmd.lock}. Returns true when held by this process. When the
+     * lock is already taken by a live daemon: with {@code force}, that daemon
+     * is terminated (SIGINT, then SIGKILL) and the lock is taken over;
+     * without it, this returns false so the caller exits instead of running a
+     * second daemon.
+     */
+    private static boolean acquireLock(boolean force) {
+        var runDir = new File(RUN_DIR);
+        if (!runDir.exists() && !runDir.mkdirs())
+            Log.w(TAG, fmt("Failed to create run directory: %s", runDir));
+        try {
+            lockChannel = FileChannel.open(Paths.get(LOCK_FILE),
+                StandardOpenOption.CREATE, StandardOpenOption.READ, StandardOpenOption.WRITE);
+        } catch (IOException e) {
+            Log.e(TAG, fmt("Failed to open lock file: %s", LOCK_FILE), e);
+            return false;
+        }
+        if (tryLock()) {
+            writeLockOwner();
+            return true;
+        }
+        int holder = readLockOwner();
+        if (!force) {
+            Log.e(TAG, fmt(
+                "Another daemon (pid=%d) is already running; exiting "
+                    + "(start with --force to take over)", holder));
+            return false;
+        }
+        Log.i(TAG, fmt("--force: terminating existing daemon (pid=%d)", holder));
+        if (holder > 1) ProcessUtils.shellKillProcess(holder, ProcessUtils.SIGINT);
+        if (waitForLock(10_000)) {
+            writeLockOwner();
+            return true;
+        }
+        if (holder > 1) {
+            Log.w(TAG, fmt("Existing daemon (pid=%d) did not exit; sending SIGKILL", holder));
+            ProcessUtils.shellKillProcess(holder, ProcessUtils.SIGKILL);
+        }
+        if (waitForLock(3_000)) {
+            writeLockOwner();
+            return true;
+        }
+        Log.e(TAG, "Failed to take over the daemon lock");
+        return false;
+    }
+
+    private static boolean tryLock() {
+        try {
+            daemonLock = lockChannel.tryLock();
+            return daemonLock != null;
+        } catch (Exception e) {
+            // OverlappingFileLockException can't happen (single attempt); any
+            // other failure is treated as "not acquired".
+            Log.w(TAG, "tryLock failed", e);
+            return false;
+        }
+    }
+
+    private static boolean waitForLock(long timeoutMs) {
+        long deadline = System.currentTimeMillis() + timeoutMs;
+        while (System.currentTimeMillis() < deadline) {
+            if (tryLock()) return true;
+            try {
+                Thread.sleep(200);
+            } catch (InterruptedException e) {
+                return false;
+            }
+        }
+        return false;
+    }
+
+    /** Records this daemon's pid in the lock file so a later --force can find it. */
+    private static void writeLockOwner() {
+        try {
+            lockChannel.truncate(0);
+            lockChannel.position(0);
+            lockChannel.write(ByteBuffer.wrap(String.valueOf(Process.myPid()).getBytes()));
+            lockChannel.force(false);
+        } catch (IOException e) {
+            Log.w(TAG, "Failed to write lock owner pid", e);
+        }
+    }
+
+    /** Pid of the current lock holder: from the lock file, else the pid file. */
+    private static int readLockOwner() {
+        for (var path : new String[]{LOCK_FILE, getPidFile()}) {
+            try {
+                var s = new String(Files.readAllBytes(Paths.get(path))).trim();
+                if (!s.isEmpty()) return Integer.parseInt(s);
+            } catch (Exception ignored) {
+            }
+        }
+        return -1;
+    }
+
     private static void writePidFile() {
         var runDir = new File(RUN_DIR);
         if (!runDir.exists() && !runDir.mkdirs())
@@ -97,10 +210,15 @@ private static String getMyHash() {
     }
 
     public static void main(String... args) {
+        boolean force = Arrays.asList(args).contains("--force");
         System.out.print("Starting DroidVM Daemon...\n");
         UnixHelper.load();
         System.out.printf("Current pid: %d\n", Process.myPid());
         Log.d(TAG, "DroidVM Daemon is starting...");
+        if (!acquireLock(force)) {
+            System.out.print("Another DroidVM Daemon is already running.\n");
+            System.exit(1);
+        }
         daemonHash = getMyHash();
         Log.i(TAG, fmt("DroidVM Daemon hash: %s", daemonHash));
         writePidFile();
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/server/ServerContext.java b/app/src/main/java/cn/classfun/droidvm/daemon/server/ServerContext.java
index 928ab3a9d..00a2e61d4 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/server/ServerContext.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/server/ServerContext.java
@@ -1,6 +1,7 @@
 package cn.classfun.droidvm.daemon.server;
 
 import static cn.classfun.droidvm.lib.Constants.DATA_DIR;
+import static cn.classfun.droidvm.lib.utils.AssetUtils.getPrebuiltBinaryPath;
 import static cn.classfun.droidvm.lib.utils.RunUtils.run;
 import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
 import static cn.classfun.droidvm.lib.utils.StringUtils.pathJoin;
@@ -28,10 +29,15 @@ public ServerContext() {
         networks.load(new File(filesDir, networks.getFileName()));
         Log.i(TAG, fmt("config files loaded: %d VMs, %d networks", vms.size(), networks.size()));
         vms.setNetworkStore(networks);
-        // strays survive a daemon crash (children are orphaned, not killed)
+        // Strays survive a daemon crash or a forced (SIGKILL) takeover: the
+        // children are orphaned, not killed. Reap any left over from a previous
+        // daemon before we start fresh and auto-up. VM backends are matched by
+        // their full prebuilt path so unrelated processes are never hit.
         run("pkill dnsmasq");
         run("pkill gvswitch");
         run("pkill pbridge");
+        run("pkill -f %s", getPrebuiltBinaryPath("crosvm"));
+        run("pkill -f %s", getPrebuiltBinaryPath("qemu-system-aarch64"));
         try {
             networks.firewall.initialize();
         } catch (Exception e) {
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/daemon/DaemonHelper.java b/app/src/main/java/cn/classfun/droidvm/lib/daemon/DaemonHelper.java
index 735492673..d23c1c673 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/daemon/DaemonHelper.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/daemon/DaemonHelper.java
@@ -15,7 +15,6 @@
 import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
 import static cn.classfun.droidvm.lib.utils.StringUtils.pathJoin;
 import static cn.classfun.droidvm.lib.utils.ThreadUtils.runOnPool;
-import static cn.classfun.droidvm.lib.utils.ThreadUtils.threadSleepOrKill;
 
 import android.os.Handler;
 import android.os.Looper;
@@ -99,19 +98,30 @@ public static String readToken() {
     }
 
     public boolean startDaemon() {
+        return startDaemon(false);
+    }
+
+    /**
+     * Launches the daemon. The daemon takes a single-instance lock at startup,
+     * so a normal ({@code force == false}) launch is a no-op when one is
+     * already running. With {@code force}, the new daemon terminates the
+     * running one and takes over -- used for restart.
+     */
+    public boolean startDaemon(boolean force) {
         var zipPath = getDaemonZipPath();
-        Log.i(TAG, fmt("Starting daemon via app_process64 with %s", zipPath));
+        Log.i(TAG, fmt("Starting daemon via app_process64 with %s (force=%b)", zipPath, force));
         var runDir = pathJoin(DATA_DIR, "run");
         var uid = Process.myUid();
         run("mkdir -p %s", runDir);
         // Best-effort ownership fix; chown may be denied on some contexts (e.g. Android).
         run("chown %d:%d %s || true", uid, uid, runDir);
         var cmd = fmt(
-            "env CLASSPATH=%s %s %s / %s",
+            "env CLASSPATH=%s %s %s / %s%s",
             escapedString(zipPath),
             escapedString(getAssetBinaryPath("daemon")),
             escapedString(findExecute("app_process64")),
-            escapedString(Daemon.class.getName())
+            escapedString(Daemon.class.getName()),
+            force ? " --force" : ""
         );
         Log.i(TAG, fmt("Running command: %s", cmd));
         var result = run(cmd);
@@ -132,11 +142,10 @@ public boolean stopDaemon() {
     }
 
     public boolean restartDaemon() {
-        Log.i(TAG, "Restarting daemon");
-        stopDaemon();
-        while (isDaemonRunning())
-            threadSleepOrKill(1000);
-        return startDaemon();
+        // Force-launch: the new daemon kills the running one and takes the lock
+        // itself, which is atomic and avoids waiting on a possibly-stuck stop.
+        Log.i(TAG, "Restarting daemon (force takeover)");
+        return startDaemon(true);
     }
 
 

From 1f2c25261fd9918356c1f0512aaa7caf9b746a68 Mon Sep 17 00:00:00 2001
From: HuJK <gh@hujk.org>
Date: Mon, 22 Jun 2026 01:19:29 +0800
Subject: [PATCH 023/182] fix(ui): keep the network tool log below the status
 bar

The activity is edge-to-edge (targetSdk 36) but its root layout lacked
android:fitsSystemWindows, so the toolbar drew under the status bar. Add it
to match the other toolbar activities (e.g. the VM console).

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01FikGHtfpTGfjxfEfuUF1Ra
---
 app/src/main/res/layout/activity_network_tool_log.xml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/app/src/main/res/layout/activity_network_tool_log.xml b/app/src/main/res/layout/activity_network_tool_log.xml
index cb4b6637e..01b86033a 100644
--- a/app/src/main/res/layout/activity_network_tool_log.xml
+++ b/app/src/main/res/layout/activity_network_tool_log.xml
@@ -4,6 +4,7 @@
     android:layout_width="match_parent"
     android:layout_height="match_parent"
     android:background="?attr/colorSurface"
+    android:fitsSystemWindows="true"
     android:orientation="vertical">
 
     <com.google.android.material.appbar.AppBarLayout

From f1034a974df640a5e71e71a7bb676ba2341930bf Mon Sep 17 00:00:00 2001
From: HuJK <gh@hujk.org>
Date: Mon, 22 Jun 2026 03:19:11 +0800
Subject: [PATCH 024/182] fix(download): request POST_NOTIFICATIONS and fix
 stuck progress notifications

POST_NOTIFICATIONS was declared but never requested, so on Android 13+ the
background download's foreground-service notifications were silently
suppressed. When the user starts an import (URL / images / LXC), show a short
rationale and request it before the download begins; it proceeds either way.

The ongoing foreground notification also could not be swiped away and was
left stuck after cancel/finish (it was detached then nm.cancel'd, which does
not clear a detached ongoing notification on current Android). Stop the
service with STOP_FOREGROUND_REMOVE so it is removed, and post the
success/failed result on a separate notification id so it survives.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01FikGHtfpTGfjxfEfuUF1Ra
---
 .../lib/download/DiskDownloadService.java     | 25 +++++--
 .../lib/ui/NotificationPermission.java        | 67 +++++++++++++++++++
 .../ui/disk/download/ImportURLActivity.java   |  5 +-
 .../ui/disk/images/ImportImagesActivity.java  |  5 +-
 .../ui/disk/lxc/ImportLxcImagesActivity.java  |  5 +-
 app/src/main/res/values-zh-rCN/strings.xml    |  5 ++
 app/src/main/res/values-zh-rTW/strings.xml    |  5 ++
 app/src/main/res/values/strings.xml           |  5 ++
 8 files changed, 115 insertions(+), 7 deletions(-)
 create mode 100644 app/src/main/java/cn/classfun/droidvm/lib/ui/NotificationPermission.java

diff --git a/app/src/main/java/cn/classfun/droidvm/lib/download/DiskDownloadService.java b/app/src/main/java/cn/classfun/droidvm/lib/download/DiskDownloadService.java
index 2d92d5947..5d6a01cce 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/download/DiskDownloadService.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/download/DiskDownloadService.java
@@ -151,11 +151,17 @@ private void tick() {
             }
             switch (p.state) {
                 case DiskDownloadManager.STATE_SUCCESS:
-                    if (nm != null) nm.notify(notifId(id), buildDone(id));
+                    if (nm != null) {
+                        nm.cancel(notifId(id));
+                        nm.notify(doneNotifId(id), buildDone(id));
+                    }
                     active.remove(id);
                     break;
                 case DiskDownloadManager.STATE_FAILED:
-                    if (nm != null) nm.notify(notifId(id), buildFailed(id, p));
+                    if (nm != null) {
+                        nm.cancel(notifId(id));
+                        nm.notify(doneNotifId(id), buildFailed(id, p));
+                    }
                     active.remove(id);
                     break;
                 case DiskDownloadManager.STATE_CANCELLED:
@@ -193,8 +199,11 @@ private void stopForegroundAndSelf() {
         handler.removeCallbacks(pollTask);
         polling = false;
         foregroundId = -1;
-        // DETACH so finished (success/failed) notifications stay in the shade.
-        stopForeground(STOP_FOREGROUND_DETACH);
+        // REMOVE clears the ongoing foreground notification for good (DETACH
+        // would leave a stuck, un-swipeable notification after a cancel).
+        // Finished downloads carry their own separate notification
+        // (doneNotifId) that this does not touch.
+        stopForeground(STOP_FOREGROUND_REMOVE);
         stopSelf();
     }
 
@@ -323,4 +332,12 @@ private void ensureChannel() {
     private static int notifId(long id) {
         return NOTIF_BASE + (int) (id & 0xFFFF);
     }
+
+    /**
+     * Separate id for a finished (success/failed) notification, so it survives
+     * the ongoing foreground notification being removed when the service stops.
+     */
+    private static int doneNotifId(long id) {
+        return NOTIF_BASE + 0x1_0000 + (int) (id & 0xFFFF);
+    }
 }
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/ui/NotificationPermission.java b/app/src/main/java/cn/classfun/droidvm/lib/ui/NotificationPermission.java
new file mode 100644
index 000000000..aeab513d0
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/lib/ui/NotificationPermission.java
@@ -0,0 +1,67 @@
+package cn.classfun.droidvm.lib.ui;
+
+import android.Manifest;
+import android.content.pm.PackageManager;
+
+import androidx.activity.result.ActivityResultLauncher;
+import androidx.activity.result.contract.ActivityResultContracts;
+import androidx.annotation.NonNull;
+import androidx.appcompat.app.AppCompatActivity;
+import androidx.core.content.ContextCompat;
+
+import com.google.android.material.dialog.MaterialAlertDialogBuilder;
+
+import cn.classfun.droidvm.R;
+
+/**
+ * Asks for the runtime POST_NOTIFICATIONS permission (required since Android 13,
+ * the app's minSdk) at the moment a background download is about to start,
+ * after a short rationale. The download proceeds either way -- the permission
+ * only controls whether the foreground-service progress notification is shown.
+ *
+ * Construct from an activity's {@code onCreate}: the result launcher has to be
+ * registered before the activity reaches STARTED.
+ */
+public final class NotificationPermission {
+    private final AppCompatActivity activity;
+    private final ActivityResultLauncher<String> launcher;
+    private Runnable pending;
+
+    public NotificationPermission(@NonNull AppCompatActivity activity) {
+        this.activity = activity;
+        this.launcher = activity.registerForActivityResult(
+            new ActivityResultContracts.RequestPermission(), granted -> runPending());
+    }
+
+    /**
+     * Runs {@code action} immediately when notifications are already allowed;
+     * otherwise shows a rationale, requests the permission, and runs it once the
+     * user has responded (whether or not they granted it).
+     */
+    public void ensureThen(@NonNull Runnable action) {
+        if (granted()) {
+            action.run();
+            return;
+        }
+        pending = action;
+        new MaterialAlertDialogBuilder(activity)
+            .setTitle(R.string.notification_permission_title)
+            .setMessage(R.string.notification_permission_message)
+            .setPositiveButton(R.string.notification_permission_allow,
+                (d, w) -> launcher.launch(Manifest.permission.POST_NOTIFICATIONS))
+            .setNegativeButton(R.string.notification_permission_skip, (d, w) -> runPending())
+            .setOnCancelListener(d -> runPending())
+            .show();
+    }
+
+    private void runPending() {
+        var action = pending;
+        pending = null;
+        if (action != null) action.run();
+    }
+
+    private boolean granted() {
+        return ContextCompat.checkSelfPermission(activity,
+            Manifest.permission.POST_NOTIFICATIONS) == PackageManager.PERMISSION_GRANTED;
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/disk/download/ImportURLActivity.java b/app/src/main/java/cn/classfun/droidvm/ui/disk/download/ImportURLActivity.java
index b996c353d..0e7f905a3 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/disk/download/ImportURLActivity.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/disk/download/ImportURLActivity.java
@@ -47,6 +47,7 @@
 import cn.classfun.droidvm.R;
 import cn.classfun.droidvm.lib.download.DiskDownloadManager;
 import cn.classfun.droidvm.lib.download.DiskDownloadService;
+import cn.classfun.droidvm.lib.ui.NotificationPermission;
 import cn.classfun.droidvm.lib.ui.SimpleTextWatcher;
 import cn.classfun.droidvm.lib.utils.NetUtils.HttpException;
 import cn.classfun.droidvm.ui.disk.create.DiskFormat;
@@ -68,6 +69,7 @@ public final class ImportURLActivity extends AppCompatActivity {
     private KernelAnalysisWidget kernelAnalysis;
     private NestedScrollView scrollView;
     private ExtendedFloatingActionButton fabImport;
+    private NotificationPermission notifPermission;
     private CollapsingToolbarLayout collapsingToolbar;
     private MaterialToolbar toolbar;
     private boolean isLoading = false;
@@ -83,6 +85,7 @@ public final class ImportURLActivity extends AppCompatActivity {
     protected void onCreate(@Nullable Bundle savedInstanceState) {
         super.onCreate(savedInstanceState);
         setContentView(R.layout.activity_import_url);
+        notifPermission = new NotificationPermission(this);
         collapsingToolbar = findViewById(R.id.collapsing_toolbar);
         toolbar = findViewById(R.id.toolbar);
         inputUrl = findViewById(R.id.input_url);
@@ -345,7 +348,7 @@ private void doImport() {
         }
         downloadName = name;
         downloadFolder = folder;
-        startDownload(urlStr);
+        notifPermission.ensureThen(() -> startDownload(urlStr));
     }
 
     private void startDownload(String url) {
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/disk/images/ImportImagesActivity.java b/app/src/main/java/cn/classfun/droidvm/ui/disk/images/ImportImagesActivity.java
index c988ee9e8..389b809e4 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/disk/images/ImportImagesActivity.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/disk/images/ImportImagesActivity.java
@@ -41,6 +41,7 @@
 import cn.classfun.droidvm.lib.download.DiskDownloadManager;
 import cn.classfun.droidvm.lib.download.DiskDownloadService;
 import cn.classfun.droidvm.lib.ui.IconItemAdapter;
+import cn.classfun.droidvm.lib.ui.NotificationPermission;
 import cn.classfun.droidvm.ui.disk.create.DiskFormat;
 import cn.classfun.droidvm.ui.widgets.row.DropdownRowWidget;
 import cn.classfun.droidvm.ui.widgets.row.TextInputRowWidget;
@@ -62,6 +63,7 @@ public final class ImportImagesActivity extends AppCompatActivity {
     private TextView tvInfoSize;
     private TextView tvInfoUrl;
     private ExtendedFloatingActionButton fabDownload;
+    private NotificationPermission notifPermission;
     private DownloadWidget downloadWidget;
     private NestedScrollView scrollView;
     private String[] mirrorKeys;
@@ -78,6 +80,7 @@ public final class ImportImagesActivity extends AppCompatActivity {
     protected void onCreate(@Nullable Bundle savedInstanceState) {
         super.onCreate(savedInstanceState);
         setContentView(R.layout.activity_import_images);
+        notifPermission = new NotificationPermission(this);
         collapsingToolbar = findViewById(R.id.collapsing_toolbar);
         toolbar = findViewById(R.id.toolbar);
         cardPlaceholder = findViewById(R.id.card_placeholder);
@@ -304,7 +307,7 @@ private void doDownload() {
         downloadName = name;
         downloadFolder = folder;
         var url = resolveDownloadUrl();
-        startDownload(url);
+        notifPermission.ensureThen(() -> startDownload(url));
     }
 
     private void startDownload(String url) {
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/disk/lxc/ImportLxcImagesActivity.java b/app/src/main/java/cn/classfun/droidvm/ui/disk/lxc/ImportLxcImagesActivity.java
index 8f87c23ef..ebe80ea9b 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/disk/lxc/ImportLxcImagesActivity.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/disk/lxc/ImportLxcImagesActivity.java
@@ -58,6 +58,7 @@
 import cn.classfun.droidvm.lib.download.DiskDownloadManager;
 import cn.classfun.droidvm.lib.download.DiskDownloadService;
 import cn.classfun.droidvm.lib.ui.IconItemAdapter;
+import cn.classfun.droidvm.lib.ui.NotificationPermission;
 import cn.classfun.droidvm.ui.disk.create.DiskFormat;
 import cn.classfun.droidvm.ui.widgets.row.DropdownRowWidget;
 import cn.classfun.droidvm.ui.widgets.row.TextInputRowWidget;
@@ -88,6 +89,7 @@ public final class ImportLxcImagesActivity extends AppCompatActivity {
     private MaterialCardView cardInfo;
     private TextView tvInfoSize, tvInfoPath;
     private ExtendedFloatingActionButton fabImport;
+    private NotificationPermission notifPermission;
     private DownloadWidget downloadWidget;
     private KernelAnalysisWidget kernelAnalysis;
     private NestedScrollView scrollView;
@@ -112,6 +114,7 @@ public final class ImportLxcImagesActivity extends AppCompatActivity {
     protected void onCreate(@Nullable Bundle savedInstanceState) {
         super.onCreate(savedInstanceState);
         setContentView(R.layout.activity_import_lxc_images);
+        notifPermission = new NotificationPermission(this);
         collapsingToolbar = findViewById(R.id.collapsing_toolbar);
         toolbar = findViewById(R.id.toolbar);
         dropdownMetaSource = findViewById(R.id.dropdown_meta_source);
@@ -690,7 +693,7 @@ private void doImport() {
         }
         downloadName = name;
         downloadFolder = folder;
-        startDownload(downloadUrl);
+        notifPermission.ensureThen(() -> startDownload(downloadUrl));
     }
 
     private void startDownload(String url) {
diff --git a/app/src/main/res/values-zh-rCN/strings.xml b/app/src/main/res/values-zh-rCN/strings.xml
index 07d00a40f..659a6de06 100644
--- a/app/src/main/res/values-zh-rCN/strings.xml
+++ b/app/src/main/res/values-zh-rCN/strings.xml
@@ -933,4 +933,9 @@
     <string name="hugepage_stop_confirm">确定要停止大页预留模块吗？这将释放所有预分配的页面，可能会影响正在运行的虚拟机。</string>
     <string name="hugepage_unloaded">模块已卸载</string>
     <string name="hugepage_unload_failed">卸载模块失败</string>
+
+    <string name="notification_permission_title">允许通知？</string>
+    <string name="notification_permission_message">DroidVM 会在后台下载磁盘镜像，并通过通知显示进度。请允许通知，以便随时查看下载进度。</string>
+    <string name="notification_permission_allow">继续</string>
+    <string name="notification_permission_skip">暂不</string>
 </resources>
diff --git a/app/src/main/res/values-zh-rTW/strings.xml b/app/src/main/res/values-zh-rTW/strings.xml
index b7c6443dd..2f6c631de 100644
--- a/app/src/main/res/values-zh-rTW/strings.xml
+++ b/app/src/main/res/values-zh-rTW/strings.xml
@@ -933,4 +933,9 @@
     <string name="hugepage_stop_confirm">確定要停止大頁預留模組嗎？這將釋放所有預分配的頁面，可能會影響正在執行的虛擬機器。</string>
     <string name="hugepage_unloaded">模組已解除安裝</string>
     <string name="hugepage_unload_failed">解除安裝模組失敗</string>
+
+    <string name="notification_permission_title">允許通知？</string>
+    <string name="notification_permission_message">DroidVM 會在背景下載磁碟映像，並透過通知顯示進度。請允許通知，以便隨時查看下載進度。</string>
+    <string name="notification_permission_allow">繼續</string>
+    <string name="notification_permission_skip">暫不</string>
 </resources>
diff --git a/app/src/main/res/values/strings.xml b/app/src/main/res/values/strings.xml
index 06a6a9342..d98466bfd 100644
--- a/app/src/main/res/values/strings.xml
+++ b/app/src/main/res/values/strings.xml
@@ -972,4 +972,9 @@
     <string name="hugepage_stop_confirm">Are you sure you want to unload the hugepage reserve module? This will release all pre-allocated pages and may affect running VMs.</string>
     <string name="hugepage_unloaded">Module unloaded</string>
     <string name="hugepage_unload_failed">Failed to unload module</string>
+
+    <string name="notification_permission_title">Allow notifications?</string>
+    <string name="notification_permission_message">DroidVM downloads disk images in the background and shows the progress in a notification. Allow notifications so you can keep an eye on the download.</string>
+    <string name="notification_permission_allow">Continue</string>
+    <string name="notification_permission_skip">Not now</string>
 </resources>

From 7f17717e69413ea43db12ab1556da98d859544bc Mon Sep 17 00:00:00 2001
From: HuJyunKai <gh@hujk.org>
Date: Mon, 22 Jun 2026 11:09:12 +0800
Subject: [PATCH 025/182] Update dev-release.yml

---
 .github/workflows/dev-release.yml | 32 +++++++++++++++++++++++++------
 1 file changed, 26 insertions(+), 6 deletions(-)

diff --git a/.github/workflows/dev-release.yml b/.github/workflows/dev-release.yml
index ac2b900d7..7a6c16b6c 100644
--- a/.github/workflows/dev-release.yml
+++ b/.github/workflows/dev-release.yml
@@ -77,30 +77,50 @@ jobs:
         if: ${{ env.HAS_SIGN_KEY != 'true' }}
         run: ./gradlew assembleDebug
 
+      # Derive a version string from the latest real tag, e.g. `0.0.6.r63.52993d4`
+      # (matches release.yml). The moving `dev` tag is excluded so it never
+      # shadows the real version tag in `git describe`.
+      - name: Get version info
+        id: version
+        run: |
+          set -euo pipefail
+          if desc="$(git describe --long --tags --exclude dev 2>/dev/null)"; then
+            desc="$(echo "$desc" | sed 's/^[vV]//')"
+            if echo "$desc" | grep -qE '\-0\-g[0-9a-f]+$'; then
+              ver="$(echo "$desc" | sed 's/-0-g[0-9a-f]*$//')"
+            else
+              ver="$(echo "$desc" | sed 's/-\([0-9]*\)-g/.r\1./')"
+            fi
+          else
+            ver="$(git rev-parse --short HEAD)"
+          fi
+          echo "name=${ver}" >> "$GITHUB_OUTPUT"
+
       - name: Stage APK
         run: |
           set -euo pipefail
           mkdir -p release
+          apk="release/DroidVM-${{ steps.version.outputs.name }}-dev.apk"
           if [ "${HAS_SIGN_KEY}" = "true" ]; then
-            cp app/build/outputs/apk/release/*.apk "release/DroidVM-dev.apk"
+            cp app/build/outputs/apk/release/*.apk "$apk"
           else
-            cp app/build/outputs/apk/debug/*.apk "release/DroidVM-dev.apk"
+            cp app/build/outputs/apk/debug/*.apk "$apk"
           fi
 
       - name: Publish rolling dev pre-release
         env:
           GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          VER: ${{ steps.version.outputs.name }}
         run: |
           set -euo pipefail
-          ver="$(git describe --tags --always 2>/dev/null || git rev-parse --short HEAD)"
 
           # Drop the previous dev release + tag, then recreate at this commit so
           # `dev` always points at latest master (a moving, version-less tag).
           gh release delete dev --yes --cleanup-tag 2>/dev/null || true
           git push origin :refs/tags/dev 2>/dev/null || true
 
-          gh release create dev "release/DroidVM-dev.apk" \
+          gh release create dev "release/DroidVM-${VER}-dev.apk" \
             --prerelease \
             --target "${GITHUB_SHA}" \
-            --title "DroidVM dev (${ver})" \
-            --notes "Rolling development build from ${GITHUB_SHA} (${ver}). Not a stable release."
+            --title "DroidVM dev (${VER})" \
+            --notes "Rolling development build from ${GITHUB_SHA} (${VER}). Not a stable release."

From 45045e1bedf628d7546e077233bae5773dfb837d Mon Sep 17 00:00:00 2001
From: BigfootACA <bigfoot@classfun.cn>
Date: Mon, 22 Jun 2026 11:01:38 +0800
Subject: [PATCH 026/182] gradle: upgrade sdk to 37

Signed-off-by: BigfootACA <bigfoot@classfun.cn>
---
 app/build.gradle.kts                     | 5 ++---
 gradle/libs.versions.toml                | 4 ++--
 gradle/wrapper/gradle-wrapper.properties | 7 ++-----
 3 files changed, 6 insertions(+), 10 deletions(-)

diff --git a/app/build.gradle.kts b/app/build.gradle.kts
index d0cf93ad1..95bd1361e 100644
--- a/app/build.gradle.kts
+++ b/app/build.gradle.kts
@@ -50,15 +50,14 @@ println("Version code: $generatedVersionCode")
 android {
     namespace = "cn.classfun.droidvm"
     compileSdk {
-        version = release(36) {
-            minorApiLevel = 1
+        version = release(37) {
         }
     }
 
     defaultConfig {
         applicationId = "cn.classfun.droidvm"
         minSdk = 33
-        targetSdk = 36
+        targetSdk = 37
         versionCode = generatedVersionCode
         versionName = generatedVersionName
 
diff --git a/gradle/libs.versions.toml b/gradle/libs.versions.toml
index 16b5feb4b..6f7857bd2 100644
--- a/gradle/libs.versions.toml
+++ b/gradle/libs.versions.toml
@@ -3,13 +3,13 @@ activity = "1.13.0"
 annotationJvm = "1.10.0"
 appcompat = "1.7.1"
 auto-service = "1.1.1"
-agp = "9.1.0"
+agp = "9.2.1"
 constraintlayout = "2.2.1"
 espressoCore = "3.7.0"
 junitVersion = "1.3.0"
 junit = "4.13.2"
 libsu = "6.0.0"
-material = "1.13.0"
+material = "1.14.0"
 okhttp3 = "5.3.2"
 snakeyaml = "2.6"
 termux = "v0.118.3"
diff --git a/gradle/wrapper/gradle-wrapper.properties b/gradle/wrapper/gradle-wrapper.properties
index 9538e5f21..44e6e9cd7 100644
--- a/gradle/wrapper/gradle-wrapper.properties
+++ b/gradle/wrapper/gradle-wrapper.properties
@@ -1,9 +1,6 @@
-#Tue Mar 10 19:17:59 CST 2026
+#Mon Jun 22 10:44:53 CST 2026
 distributionBase=GRADLE_USER_HOME
 distributionPath=wrapper/dists
-distributionSha256Sum=2ab2958f2a1e51120c326cad6f385153bb11ee93b3c216c5fccebfdfbb7ec6cb
-distributionUrl=https\://services.gradle.org/distributions/gradle-9.4.1-bin.zip
-networkTimeout=10000
-validateDistributionUrl=true
+distributionUrl=https\://services.gradle.org/distributions/gradle-9.6.0-bin.zip
 zipStoreBase=GRADLE_USER_HOME
 zipStorePath=wrapper/dists

From 9dbef847910319b98f0b86c19a35d17d136e3774 Mon Sep 17 00:00:00 2001
From: BigfootACA <bigfoot@classfun.cn>
Date: Mon, 22 Jun 2026 11:03:31 +0800
Subject: [PATCH 027/182] gradle: add x86_64 to abiFilters again

Required for Android Emulator

Signed-off-by: BigfootACA <bigfoot@classfun.cn>
---
 app/build.gradle.kts | 4 +---
 1 file changed, 1 insertion(+), 3 deletions(-)

diff --git a/app/build.gradle.kts b/app/build.gradle.kts
index 95bd1361e..148349c2f 100644
--- a/app/build.gradle.kts
+++ b/app/build.gradle.kts
@@ -63,9 +63,7 @@ android {
 
         testInstrumentationRunner = "androidx.test.runner.AndroidJUnitRunner"
         ndk {
-            // arm64-v8a only: the VM runtime prebuilt (crosvm/qemu/kernel) ships
-            // for arm64 alone, so x86_64 could never boot a guest anyway.
-            abiFilters += listOf("arm64-v8a")
+            abiFilters += listOf("arm64-v8a", "x86_64")
         }
         externalNativeBuild {
             cmake {

From ccf71bc9fa56a5ed3350d26df1699d4edf5b0b7b Mon Sep 17 00:00:00 2001
From: BigfootACA <bigfoot@classfun.cn>
Date: Mon, 22 Jun 2026 11:09:31 +0800
Subject: [PATCH 028/182] VMEditStorageTab: use checkFileName instead of
 checkFilePath

Signed-off-by: BigfootACA <bigfoot@classfun.cn>
---
 .../classfun/droidvm/ui/vm/edit/storage/VMEditStorageTab.java  | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/storage/VMEditStorageTab.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/storage/VMEditStorageTab.java
index b6d2c6572..babb33d7a 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/storage/VMEditStorageTab.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/storage/VMEditStorageTab.java
@@ -1,6 +1,7 @@
 package cn.classfun.droidvm.ui.vm.edit.storage;
 
 import static android.app.Activity.RESULT_OK;
+import static cn.classfun.droidvm.lib.utils.FileUtils.checkFileName;
 import static cn.classfun.droidvm.lib.utils.FileUtils.checkFilePath;
 import static cn.classfun.droidvm.lib.utils.StringUtils.resolveUriPath;
 
@@ -135,7 +136,7 @@ public boolean validateInput(@NonNull VMStore store) {
             if (!checkFilePath(d.optString("path", ""), true))
                 return false;
             var tag = d.optString("tag", "");
-            if (!checkFilePath(tag, true))
+            if (!checkFileName(tag))
                 return false;
             if (set.contains(tag))
                 return false;

From ebb4e479a499ada75c73a674931b9cdb2bd7266d Mon Sep 17 00:00:00 2001
From: BigfootACA <bigfoot@classfun.cn>
Date: Mon, 22 Jun 2026 11:24:32 +0800
Subject: [PATCH 029/182] VMEditBaseTab: add showValidateFailed

Signed-off-by: BigfootACA <bigfoot@classfun.cn>
---
 .../droidvm/ui/vm/edit/base/VMEditBaseTab.java       | 12 ++++++++++++
 1 file changed, 12 insertions(+)

diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/base/VMEditBaseTab.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/base/VMEditBaseTab.java
index ddc286eec..26c79d9c6 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/base/VMEditBaseTab.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/base/VMEditBaseTab.java
@@ -3,6 +3,9 @@
 import android.view.View;
 
 import androidx.annotation.NonNull;
+import androidx.annotation.StringRes;
+
+import com.google.android.material.snackbar.Snackbar;
 
 import cn.classfun.droidvm.lib.store.vm.VMConfig;
 import cn.classfun.droidvm.lib.store.vm.VMStore;
@@ -25,6 +28,15 @@ public VMEditBaseTab(VMEditActivity parent, View view) {
     public void onTabShown() {
     }
 
+    protected final boolean showValidateFailed(@StringRes int message) {
+        return showValidateFailed(parent.getString(message));
+    }
+
+    protected final boolean showValidateFailed(@NonNull CharSequence message) {
+        Snackbar.make(parent, view, message, Snackbar.LENGTH_LONG).show();
+        return false;
+    }
+
     public abstract void loadConfig(@NonNull VMConfig config);
 
     public abstract boolean validateInput(@NonNull VMStore store);

From 729ed3d16e139d2e6059d7656b8e815aad21ee6d Mon Sep 17 00:00:00 2001
From: BigfootACA <bigfoot@classfun.cn>
Date: Mon, 22 Jun 2026 11:29:39 +0800
Subject: [PATCH 030/182] VMEditNetworkTab: add more check failed strings

Signed-off-by: BigfootACA <bigfoot@classfun.cn>
---
 .../droidvm/ui/vm/edit/network/VMEditNetworkTab.java      | 2 +-
 .../droidvm/ui/vm/edit/storage/VMEditStorageTab.java      | 8 ++++----
 app/src/main/res/values-zh-rCN/strings.xml                | 5 +++++
 app/src/main/res/values-zh-rTW/strings.xml                | 5 +++++
 app/src/main/res/values/strings.xml                       | 5 +++++
 5 files changed, 20 insertions(+), 5 deletions(-)

diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/network/VMEditNetworkTab.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/network/VMEditNetworkTab.java
index a56ddcda8..c1b775d84 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/network/VMEditNetworkTab.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/network/VMEditNetworkTab.java
@@ -41,7 +41,7 @@ public boolean validateInput(@NonNull VMStore store) {
         var nets = requireNonNull(listNets.getItems());
         for (var net : nets)
             if (net.getValue().optString("network_id", "").isEmpty())
-                return false;
+                return showValidateFailed(R.string.edit_vm_network_cannot_be_empty);
         return true;
     }
 
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/storage/VMEditStorageTab.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/storage/VMEditStorageTab.java
index babb33d7a..ca7add23d 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/storage/VMEditStorageTab.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/storage/VMEditStorageTab.java
@@ -129,17 +129,17 @@ public void loadConfig(@NonNull VMConfig config) {
     public boolean validateInput(@NonNull VMStore store) {
         for (var disk : diskAdapter.getItems())
             if (!checkFilePath(disk.getValue().optString("path", ""), true))
-                return false;
+                return showValidateFailed(R.string.edit_vm_target_disk_path_invalid);
         var set = new HashSet<String>();
         for (var dir : sharedDirAdapter.getItems()) {
             var d = dir.getValue();
             if (!checkFilePath(d.optString("path", ""), true))
-                return false;
+                return showValidateFailed(R.string.edit_vm_shared_directory_path_invalid);
             var tag = d.optString("tag", "");
             if (!checkFileName(tag))
-                return false;
+                return showValidateFailed(R.string.edit_vm_shared_dir_tag_invalid);
             if (set.contains(tag))
-                return false;
+                return showValidateFailed(R.string.edit_vm_shared_dir_tag_duplicated);
             set.add(tag);
         }
         return true;
diff --git a/app/src/main/res/values-zh-rCN/strings.xml b/app/src/main/res/values-zh-rCN/strings.xml
index 659a6de06..44ff33744 100644
--- a/app/src/main/res/values-zh-rCN/strings.xml
+++ b/app/src/main/res/values-zh-rCN/strings.xml
@@ -330,6 +330,11 @@
     <string name="edit_vm_initrd_microdroid_debug">系统自带 MicroDroid initrd（可调试）</string>
     <string name="edit_vm_initrd_external">选择外部文件</string>
     <string name="edit_vm_initrd_not_found">目标 initrd 不存在: %1$s</string>
+    <string name="edit_vm_network_cannot_be_empty">网络不能为空。</string>
+    <string name="edit_vm_target_disk_path_invalid">目标磁盘路径无效</string>
+    <string name="edit_vm_shared_directory_path_invalid">共享目录路径无效</string>
+    <string name="edit_vm_shared_dir_tag_invalid">共享目录标签无效</string>
+    <string name="edit_vm_shared_dir_tag_duplicated">共享目录标签重复</string>
 
     <string name="settings_category_general">通用</string>
     <string name="settings_language_title">语言</string>
diff --git a/app/src/main/res/values-zh-rTW/strings.xml b/app/src/main/res/values-zh-rTW/strings.xml
index 2f6c631de..aa60c75eb 100644
--- a/app/src/main/res/values-zh-rTW/strings.xml
+++ b/app/src/main/res/values-zh-rTW/strings.xml
@@ -330,6 +330,11 @@
     <string name="edit_vm_initrd_microdroid_debug">系統自帶 MicroDroid initrd（可除錯）</string>
     <string name="edit_vm_initrd_external">選擇外部檔案</string>
     <string name="edit_vm_initrd_not_found">目標 initrd 不存在: %1$s</string>
+    <string name="edit_vm_network_cannot_be_empty">網路不能為空。</string>
+    <string name="edit_vm_target_disk_path_invalid">目標磁碟路徑無效</string>
+    <string name="edit_vm_shared_directory_path_invalid">共享目錄路徑無效</string>
+    <string name="edit_vm_shared_dir_tag_invalid">共享目錄標籤無效</string>
+    <string name="edit_vm_shared_dir_tag_duplicated">共享目錄標籤重複</string>
 
     <string name="settings_category_general">通用</string>
     <string name="settings_language_title">語言</string>
diff --git a/app/src/main/res/values/strings.xml b/app/src/main/res/values/strings.xml
index d98466bfd..2183e88de 100644
--- a/app/src/main/res/values/strings.xml
+++ b/app/src/main/res/values/strings.xml
@@ -332,6 +332,11 @@
     <string name="edit_vm_initrd_microdroid_debug">System MicroDroid initrd (debuggable)</string>
     <string name="edit_vm_initrd_external">Select an external file</string>
     <string name="edit_vm_initrd_not_found">Target initramfs is not exists: %1$s</string>
+    <string name="edit_vm_network_cannot_be_empty">Network cannot be empty.</string>
+    <string name="edit_vm_target_disk_path_invalid">Target disk path invalid</string>
+    <string name="edit_vm_shared_directory_path_invalid">Shared directory path invalid</string>
+    <string name="edit_vm_shared_dir_tag_invalid">Shared dir tag invalid</string>
+    <string name="edit_vm_shared_dir_tag_duplicated">Shared dir tag duplicated</string>
 
     <string name="settings_category_general">General</string>
     <string name="settings_language_title">Language</string>

From 9f36d877bf8ef9bc7455be9f334b90b2ba065765 Mon Sep 17 00:00:00 2001
From: BigfootACA <bigfoot@classfun.cn>
Date: Mon, 22 Jun 2026 13:07:33 +0800
Subject: [PATCH 031/182] app: fix source warnings

Signed-off-by: BigfootACA <bigfoot@classfun.cn>
---
 app/build.gradle.kts                          | 36 +++++----
 app/src/main/AndroidManifest.xml              |  3 +-
 .../cn/classfun/droidvm/daemon/Daemon.java    |  8 +-
 .../daemon/network/NetworkInstance.java       | 20 ++---
 .../daemon/network/NetworkInstanceStore.java  |  5 +-
 .../daemon/network/backend/BridgeDhcp.java    |  9 ++-
 .../network/backend/DefaultRouterWatcher.java | 25 ++++---
 .../network/backend/FirewallHelper.java       |  2 +
 .../network/backend/LinuxBridgeBackend.java   | 74 ++++++++++---------
 .../daemon/network/backend/Netbox.java        | 12 ++-
 .../daemon/network/backend/Pbridge.java       |  7 +-
 .../network/backend/UplinkResolver.java       | 11 ++-
 .../backend/gvisor/GvisorBridgeBackend.java   | 16 ++--
 .../backend/gvisor/GvswitchClient.java        |  1 +
 .../classfun/droidvm/daemon/vm/BootPlan.java  | 30 ++++----
 .../droidvm/lib/data/QcomChipName.java        |  1 +
 .../lib/download/DiskDownloadService.java     |  6 +-
 .../droidvm/lib/store/base/RingBuffer.java    |  1 +
 .../lib/store/network/NetworkConfig.java      |  2 +-
 .../droidvm/lib/store/network/VlanConfig.java |  2 +-
 .../droidvm/lib/store/vm/BootConfig.java      |  5 +-
 .../droidvm/lib/store/vm/VMConfig.java        |  2 +-
 .../lib/ui/NotificationPermission.java        |  3 +-
 .../droidvm/lib/utils/AssetUtils.java         |  4 +
 .../classfun/droidvm/lib/utils/NetUtils.java  |  1 +
 .../droidvm/ui/agent/base/AgentVM.java        |  1 +
 .../ui/disk/download/ImportURLActivity.java   |  1 -
 .../droidvm/ui/disk/lxc/LxcImage.java         |  1 +
 .../ui/main/home/MainHomeFragment.java        |  2 +-
 .../ui/main/network/NetworkAdapter.java       |  3 +-
 .../droidvm/ui/main/vm/MainVMFragment.java    |  1 -
 .../ui/network/edit/NetworkEditActivity.java  | 20 +++--
 .../ui/network/edit/VlanCardBinder.java       |  1 -
 .../ui/network/info/NetworkInfoActivity.java  | 28 +++----
 .../droidvm/ui/vm/NicLeaseAllocator.java      |  5 +-
 .../droidvm/ui/vm/boot/BootEntries.java       |  9 +--
 .../droidvm/ui/vm/boot/BootMenuDialog.java    |  4 +-
 .../ui/vm/edit/base/VMEditBaseTab.java        |  1 +
 .../ui/vm/edit/network/VMNetEditAdapter.java  | 19 +++--
 .../vm/edit/network/VMNetEditViewHolder.java  |  5 +-
 .../ui/vm/edit/storage/VMEditStorageTab.java  |  3 +-
 .../droidvm/ui/vm/info/VMInfoActivity.java    |  7 +-
 .../ui/widgets/tools/DownloadWidget.java      |  2 +-
 .../droidvm/lib/store/vm/PortForwardTest.java |  6 +-
 44 files changed, 223 insertions(+), 182 deletions(-)

diff --git a/app/build.gradle.kts b/app/build.gradle.kts
index 148349c2f..652d528eb 100644
--- a/app/build.gradle.kts
+++ b/app/build.gradle.kts
@@ -38,7 +38,7 @@ val generatedVersionName: String = if (gitDescribe.matches(Regex(".*-0-g[0-9a-f]
     gitDescribe.replace(Regex("-0-g[0-9a-f]+$"), "")
 } else {
     gitDescribe
-        .replace(Regex("([^-]*-g)"), "r\$1")
+        .replace(Regex("([^-]*-g)"), $$"r$1")
         .replace("-", ".")
 }
 
@@ -157,11 +157,11 @@ abstract class CopyNativeBinAssetsTask : DefaultTask() {
 // Build-time extraction (unlike a first-run extract) is fine because the package
 // installer, not the app, populates nativeLibraryDir.
 abstract class UnpackComptimeJniLibsTask : DefaultTask() {
-    @get:javax.inject.Inject
-    abstract val archives: org.gradle.api.file.ArchiveOperations
+    @get:Inject
+    abstract val archives: ArchiveOperations
 
-    @get:javax.inject.Inject
-    abstract val fs: org.gradle.api.file.FileSystemOperations
+    @get:Inject
+    abstract val fs: FileSystemOperations
 
     @get:InputDirectory
     abstract val prebuiltsDir: DirectoryProperty
@@ -192,13 +192,13 @@ abstract class UnpackComptimeJniLibsTask : DefaultTask() {
 // are packaged. Pure-Java devs don't have this dir, so the CI-published
 // submodule artifacts are used as-is (the task no-ops via onlyIf).
 abstract class RegenPrebuiltsTask : DefaultTask() {
-    @get:javax.inject.Inject
-    abstract val exec: org.gradle.process.ExecOperations
+    @get:Inject
+    abstract val exec: ExecOperations
 
-    @get:org.gradle.api.tasks.Internal
+    @get:Internal
     abstract val prebuiltRoot: DirectoryProperty
 
-    @get:org.gradle.api.tasks.Internal
+    @get:Internal
     abstract val prebuiltsOut: DirectoryProperty
 
     @TaskAction
@@ -218,14 +218,14 @@ abstract class RegenPrebuiltsTask : DefaultTask() {
 // never runs. Download is best-effort: a failure logs a warning and the app falls
 // back to the system monospace, so it never breaks the build.
 abstract class FetchTerminalFontTask : DefaultTask() {
-    @get:javax.inject.Inject
-    abstract val archives: org.gradle.api.file.ArchiveOperations
+    @get:Inject
+    abstract val archives: ArchiveOperations
 
-    @get:org.gradle.api.tasks.Input
-    abstract val url: org.gradle.api.provider.Property<String>
+    @get:Input
+    abstract val url: Property<String>
 
-    @get:org.gradle.api.tasks.Input
-    abstract val sha256: org.gradle.api.provider.Property<String>
+    @get:Input
+    abstract val sha256: Property<String>
 
     @get:OutputDirectory
     abstract val outputDir: DirectoryProperty
@@ -269,10 +269,11 @@ abstract class FetchTerminalFontTask : DefaultTask() {
 val prebuiltRootDir = rootProject.layout.projectDirectory.dir("DroidVM-Prebuilt-Root")
 val prebuiltsSubmoduleDir = rootProject.layout.projectDirectory.dir("app/src/main/assets/prebuilts")
 val regenPrebuilts = tasks.register<RegenPrebuiltsTask>("regenPrebuilts") {
+    description = "Regenerate prebuilts from DroidVM-Prebuilt-Root if it exists and has auto-build/ content"
     prebuiltRoot.set(prebuiltRootDir)
     prebuiltsOut.set(prebuiltsSubmoduleDir)
     // Only when a native dev has checked out DroidVM-Prebuilt-Root with source
-    // under auto-build/. Otherwise the published submodule artifacts are used.
+    // under auto-build/. Otherwise, the published submodule artifacts are used.
     onlyIf {
         val autoBuild = prebuiltRootDir.dir("auto-build").asFile
         prebuiltRootDir.file("auto-build.py").asFile.isFile &&
@@ -289,6 +290,7 @@ androidComponents {
         val unpackComptimeTask = tasks.register<UnpackComptimeJniLibsTask>(
             "unpackComptimeJniLibs${variantName}"
         ) {
+            description = "Unpack prebuilt-<abi>-comptime.zip into jniLibs/<abi>/ for ${variant.name}"
             dependsOn(regenPrebuilts)
             prebuiltsDir.set(prebuiltsSubmoduleDir)
             outputDir.set(
@@ -301,6 +303,7 @@ androidComponents {
         val fetchFontTask = tasks.register<FetchTerminalFontTask>(
             "fetchTerminalFont${variantName}"
         ) {
+            description = "Fetch terminal font for ${variant.name}"
             url.set("https://github.com/subframe7536/maple-font/releases/download/v7.9/MapleMonoNL-NF.zip")
             sha256.set("aa3b096bc92df8503d77482b285a0567bafa6e83230d969700f455e610b1f655")
             outputDir.set(layout.buildDirectory.dir("generated/font_assets/${variant.name}"))
@@ -311,6 +314,7 @@ androidComponents {
         val copyNativeTask = tasks.register<CopyNativeBinAssetsTask>(
             "copyNativeBinAssets${variantName}"
         ) {
+            description = "Copy native bin assets for ${variant.name}"
             dependsOn("externalNativeBuild${variantName}")
             cmakeOutputDir.set(
                 layout.buildDirectory.dir(
diff --git a/app/src/main/AndroidManifest.xml b/app/src/main/AndroidManifest.xml
index be017c56a..e72402965 100644
--- a/app/src/main/AndroidManifest.xml
+++ b/app/src/main/AndroidManifest.xml
@@ -8,7 +8,8 @@
     <uses-permission android:name="android.permission.POST_NOTIFICATIONS" />
     <uses-permission android:name="android.permission.INTERNET" />
     <uses-permission android:name="android.permission.ACCESS_NETWORK_STATE" />
-    <uses-permission android:name="android.permission.FOREGROUND_SERVICE" />
+    <uses-permission android:name="android.permission.FOREGROUND_SERVICE"
+        tools:ignore="ForegroundServicesPolicy" />
     <uses-permission android:name="android.permission.FOREGROUND_SERVICE_DATA_SYNC" />
 
     <application
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/Daemon.java b/app/src/main/java/cn/classfun/droidvm/daemon/Daemon.java
index 37b68f381..997e9b356 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/Daemon.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/Daemon.java
@@ -20,7 +20,6 @@
 import java.nio.ByteBuffer;
 import java.nio.channels.FileChannel;
 import java.nio.channels.FileLock;
-import java.nio.file.Files;
 import java.nio.file.Paths;
 import java.nio.file.StandardOpenOption;
 import java.util.Arrays;
@@ -42,8 +41,9 @@ public final class Daemon {
     // Held for the whole process lifetime so the advisory lock stays taken; the
     // kernel drops it automatically when this process dies (including SIGKILL),
     // so a stale lock can never block the next daemon.
-    @SuppressWarnings({"FieldCanBeLocal", "unused"})
+    @SuppressWarnings("FieldCanBeLocal")
     private static FileChannel lockChannel;
+    @SuppressWarnings("FieldCanBeLocal")
     private static FileLock daemonLock;
 
     /**
@@ -111,6 +111,7 @@ private static boolean waitForLock(long timeoutMs) {
         while (System.currentTimeMillis() < deadline) {
             if (tryLock()) return true;
             try {
+                //noinspection BusyWait
                 Thread.sleep(200);
             } catch (InterruptedException e) {
                 return false;
@@ -120,6 +121,7 @@ private static boolean waitForLock(long timeoutMs) {
     }
 
     /** Records this daemon's pid in the lock file so a later --force can find it. */
+    @SuppressWarnings("ResultOfMethodCallIgnored")
     private static void writeLockOwner() {
         try {
             lockChannel.truncate(0);
@@ -135,7 +137,7 @@ private static void writeLockOwner() {
     private static int readLockOwner() {
         for (var path : new String[]{LOCK_FILE, getPidFile()}) {
             try {
-                var s = new String(Files.readAllBytes(Paths.get(path))).trim();
+                var s = FileUtils.readFile(path).trim();
                 if (!s.isEmpty()) return Integer.parseInt(s);
             } catch (Exception ignored) {
             }
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/network/NetworkInstance.java b/app/src/main/java/cn/classfun/droidvm/daemon/network/NetworkInstance.java
index 223a04227..87715f4fd 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/network/NetworkInstance.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/network/NetworkInstance.java
@@ -11,14 +11,16 @@
 import org.json.JSONException;
 import org.json.JSONObject;
 
+import java.util.ArrayList;
+import java.util.List;
 import java.util.Map;
 
 import cn.classfun.droidvm.daemon.network.backend.BridgeBackend;
 import cn.classfun.droidvm.daemon.network.backend.LinuxBridgeBackend;
+import cn.classfun.droidvm.daemon.network.backend.LinuxNetwork;
 import cn.classfun.droidvm.daemon.network.backend.gvisor.GvisorBridgeBackend;
 import cn.classfun.droidvm.lib.network.IPNetwork;
 import cn.classfun.droidvm.lib.network.IPv6Network;
-import cn.classfun.droidvm.lib.store.base.DataItem;
 import cn.classfun.droidvm.lib.store.network.BridgeType;
 import cn.classfun.droidvm.lib.store.network.NetworkConfig;
 import cn.classfun.droidvm.lib.store.network.NetworkState;
@@ -136,7 +138,7 @@ public boolean stop(boolean force) {
 
     /**
      * Watchdog entry point: while the network is RUNNING, ask the backend to
-     * restart and re-initialise any helper that has died. No-op otherwise, so a
+     * restart and re-initialize any helper that has died. No-op otherwise, so a
      * stopping/stopped network is never resurrected.
      */
     public void reconcile() {
@@ -153,7 +155,6 @@ public void reconcile() {
     @Nullable
     public String findRunningVMUsing() {
         var vms = store.context.getVMs();
-        if (vms == null) return null;
         var netId = getId().toString();
         var found = new String[1];
         vms.forEach((vmId, vm) -> {
@@ -172,10 +173,10 @@ public void attachNic(@NonNull VMNicConfig nic, @NonNull String tapName) throws
             throw new IllegalStateException(fmt("Network %s is not running", getName()));
         // The NIC may carry L3-only options (DHCP static lease / port forwards)
         // kept in its saved config for when it moves back to an L3 network.
-        // Strip the ones this network can't honour into a throwaway copy so the
+        // Strip the ones this network can't honor into a throwaway copy so the
         // VM still boots; the stored config is untouched, and genuine
         // misconfigurations still fail validation below.
-        var dropped = new java.util.ArrayList<String>();
+        var dropped = new ArrayList<String>();
         var effective = nic.sanitizedFor(this, dropped);
         if (!dropped.isEmpty())
             Log.i(TAG, fmt("NIC %s on network %s: ignoring unsupported options: %s",
@@ -257,7 +258,7 @@ public JSONArray listTools() {
 
     /** Captured stdout/stderr of a named tool, or null when unknown. */
     @Nullable
-    public java.util.List<String> toolLog(@NonNull String key) {
+    public List<String> toolLog(@NonNull String key) {
         return backend == null ? null : backend.toolLog(key);
     }
 
@@ -294,15 +295,14 @@ public JSONArray listDhcpLeases() {
      * VLANs (L3 mode only).
      */
     @NonNull
-    public java.util.List<String> getL3Devices() {
-        var out = new java.util.ArrayList<String>();
+    public List<String> getL3Devices() {
+        var out = new ArrayList<String>();
         var br = getBridgeName();
         if (br == null) return out;
         switch (getUplinkMode()) {
             case L3:
                 for (var vlan : getVlans()) {
-                    var dev = cn.classfun.droidvm.daemon.network.backend.LinuxNetwork
-                        .vlanDevice(br, vlan.getVlanId());
+                    var dev = LinuxNetwork.vlanDevice(br, vlan.getVlanId());
                     if (!out.contains(dev)) out.add(dev);
                 }
                 break;
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/network/NetworkInstanceStore.java b/app/src/main/java/cn/classfun/droidvm/daemon/network/NetworkInstanceStore.java
index cd1602122..0ffefcd80 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/network/NetworkInstanceStore.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/network/NetworkInstanceStore.java
@@ -16,14 +16,13 @@
 
 import java.util.ArrayList;
 
-import cn.classfun.droidvm.daemon.network.backend.BackendBase;
 import cn.classfun.droidvm.daemon.network.backend.FirewallHelper;
-import cn.classfun.droidvm.daemon.network.backend.iptables.IptablesBackend;
 import cn.classfun.droidvm.daemon.network.backend.LinuxNetwork;
+import cn.classfun.droidvm.daemon.network.backend.iptables.IptablesBackend;
 import cn.classfun.droidvm.daemon.server.ServerContext;
+import cn.classfun.droidvm.lib.store.base.DataStore;
 import cn.classfun.droidvm.lib.store.network.NetworkConfig;
 import cn.classfun.droidvm.lib.store.network.NetworkConfigValidator;
-import cn.classfun.droidvm.lib.store.base.DataStore;
 import cn.classfun.droidvm.lib.utils.JsonUtils;
 
 @SuppressWarnings("BooleanMethodIsAlwaysInverted")
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/BridgeDhcp.java b/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/BridgeDhcp.java
index d539a9628..b9d5c41a9 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/BridgeDhcp.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/BridgeDhcp.java
@@ -18,8 +18,8 @@
 import java.security.SecureRandom;
 import java.time.OffsetDateTime;
 import java.util.ArrayList;
+import java.util.HashSet;
 import java.util.List;
-import java.util.Map;
 import java.util.zip.CRC32;
 
 import cn.classfun.droidvm.daemon.network.NetworkInstance;
@@ -111,6 +111,7 @@ public void stop() {
      * on the watchdog's 5s tick while the network is running. Returns true when
      * healthy.
      */
+    @SuppressWarnings("UnusedReturnValue")
     public synchronized boolean reconcile() {
         if (!active || process.isRunning()) return true;
         Log.w(TAG, fmt(
@@ -134,6 +135,7 @@ public boolean isRunning() {
         return process.isRunning();
     }
 
+    @SuppressWarnings("unused")
     public int getExitCode() {
         return process.getExitCode();
     }
@@ -392,12 +394,11 @@ private JSONObject buildIface(@NonNull VlanConfig vlan) throws Exception {
      * configs (mac -> offset, matching the NIC's DHCP lease settings).
      */
     @NonNull
-    private JSONArray[] buildStatics(@NonNull VlanConfig vlan) throws Exception {
+    private JSONArray[] buildStatics(@NonNull VlanConfig vlan) {
         var v4 = new JSONArray();
         var v6 = new JSONArray();
         var netId = inst.getId().toString();
         var vms = inst.getStore().context.getVMs();
-        if (vms == null) return new JSONArray[]{v4, v6};
         vms.forEach((vmId, vm) -> {
             final int[] idx = {0};
             var failed = new Exception[1];
@@ -450,7 +451,7 @@ private long resolvePdRouteTable(@NonNull VlanConfig vlan) {
         synchronized (routeTableLock) {
             var existing = vlan.getPdRouteTable();
             if (existing != 0) return existing;
-            var used = new java.util.HashSet<Long>();
+            var used = new HashSet<Long>();
             inst.getStore().forEach((id, other) -> {
                 for (var v : other.getVlans())
                     used.add(v.getPdRouteTable());
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/DefaultRouterWatcher.java b/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/DefaultRouterWatcher.java
index ace17b87c..7853a0257 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/DefaultRouterWatcher.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/DefaultRouterWatcher.java
@@ -10,12 +10,14 @@
 import java.util.ArrayList;
 import java.util.LinkedHashSet;
 import java.util.List;
+import java.util.Objects;
 import java.util.Set;
+import java.util.concurrent.CopyOnWriteArrayList;
 import java.util.concurrent.Executors;
+import java.util.concurrent.RejectedExecutionException;
 import java.util.concurrent.ScheduledExecutorService;
 import java.util.concurrent.TimeUnit;
 
-import cn.classfun.droidvm.daemon.network.NetworkInstance;
 import cn.classfun.droidvm.daemon.server.ServerContext;
 import cn.classfun.droidvm.lib.Constants;
 import cn.classfun.droidvm.lib.store.network.BridgeType;
@@ -38,8 +40,8 @@ public final class DefaultRouterWatcher {
         "ap", "swlan", "softap", "rndis", "usb", "bt-pan"
     );
     private final ServerContext context;
-    private final List<Runnable> listeners = new java.util.concurrent.CopyOnWriteArrayList<>();
-    private final List<Runnable> hostIpListeners = new java.util.concurrent.CopyOnWriteArrayList<>();
+    private final List<Runnable> listeners = new CopyOnWriteArrayList<>();
+    private final List<Runnable> hostIpListeners = new CopyOnWriteArrayList<>();
     private volatile ScheduledExecutorService scheduler;
     private String lastDefault4 = null;
     private String lastDefault6 = null;
@@ -130,8 +132,9 @@ private void reconcileRules(boolean ipv6, @Nullable String table) {
             if (!ours) continue;
             var tbl = String.valueOf(r.optInt("table", 0));
             boolean stale = r.optBoolean("detached", false)
-                || table == null || !tbl.equals(table)
-                || !desired.contains(dev) || satisfied.contains(dev);
+                || !tbl.equals(table)
+                || !desired.contains(dev)
+                || satisfied.contains(dev);
             if (stale) {
                 Log.i(TAG, fmt("Removing stale rule: iif %s lookup %s (v%d)",
                     dev, tbl, ipv6 ? 6 : 4));
@@ -140,7 +143,7 @@ private void reconcileRules(boolean ipv6, @Nullable String table) {
                 satisfied.add(dev);
             }
         }
-        for (var dev : desired) {
+        if (table != null) for (var dev : desired) {
             if (satisfied.contains(dev)) continue;
             Log.i(TAG, fmt("Adding rule: iif %s lookup %s (v%d)",
                 dev, table, ipv6 ? 6 : 4));
@@ -160,8 +163,8 @@ private void updateDefaultRouter() {
             var new6 = currentDefaultTable(true);
             reconcileRules(false, new4);
             reconcileRules(true, new6);
-            boolean changed = !java.util.Objects.equals(new4, lastDefault4)
-                || !java.util.Objects.equals(new6, lastDefault6);
+            boolean changed = !Objects.equals(new4, lastDefault4)
+                || !Objects.equals(new6, lastDefault6);
             if (changed)
                 Log.i(TAG, fmt("Default network now v4=%s v6=%s", new4, new6));
             lastDefault4 = new4;
@@ -225,7 +228,7 @@ private void onMonitorSet(@NonNull Set<String> fresh) {
         if (s == null) return;
         try {
             s.execute(() -> applyHostIps(fresh));
-        } catch (java.util.concurrent.RejectedExecutionException ignored) {
+        } catch (RejectedExecutionException ignored) {
             // scheduler shutting down; the next start() reseeds
         }
     }
@@ -256,16 +259,18 @@ public void removeHostIpListener(@NonNull Runnable listener) {
     }
 
     /** Notified (on the watcher thread) when the default network changes. */
+    @SuppressWarnings("unused")
     public void addListener(@NonNull Runnable listener) {
         listeners.add(listener);
     }
 
+    @SuppressWarnings("unused")
     public void removeListener(@NonNull Runnable listener) {
         listeners.remove(listener);
     }
 
     /** Installs the new network's rules immediately (the tick would lag 5s). */
-    public synchronized void setForNewNetwork(@NonNull NetworkInstance inst) {
+    public synchronized void setForNewNetwork() {
         try {
             reconcileRules(false, currentDefaultTable(false));
             reconcileRules(true, currentDefaultTable(true));
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/FirewallHelper.java b/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/FirewallHelper.java
index 8f0e5d280..9d383b580 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/FirewallHelper.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/FirewallHelper.java
@@ -9,8 +9,10 @@
 @SuppressWarnings({"BooleanMethodIsAlwaysInverted", "unused", "UnusedReturnValue"})
 public abstract class FirewallHelper {
 
+    @SuppressWarnings("SameReturnValue")
     public abstract boolean initialize();
 
+    @SuppressWarnings("SameReturnValue")
     public abstract boolean shutdown();
 
     public abstract void initNetwork(NetworkInstance inst);
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/LinuxBridgeBackend.java b/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/LinuxBridgeBackend.java
index 53cd67071..f33e4e408 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/LinuxBridgeBackend.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/LinuxBridgeBackend.java
@@ -11,7 +11,13 @@
 import org.json.JSONException;
 import org.json.JSONObject;
 
+import java.util.ArrayList;
+import java.util.LinkedHashMap;
+import java.util.LinkedHashSet;
+import java.util.List;
 import java.util.Map;
+import java.util.Objects;
+import java.util.Set;
 import java.util.concurrent.ConcurrentHashMap;
 
 import cn.classfun.droidvm.daemon.network.NetworkInstance;
@@ -44,16 +50,16 @@ public final class LinuxBridgeBackend extends BridgeBackend {
     private final Map<Integer, IPv6Network> liveV6 = new ConcurrentHashMap<>();
     private final Map<String, Boolean> macSecurityActive = new ConcurrentHashMap<>();
     /** tapName -> forwards this NIC actually installed (for exact teardown). */
-    private final Map<String, java.util.List<InstalledForward>> installedForwards = new ConcurrentHashMap<>();
+    private final Map<String, List<InstalledForward>> installedForwards = new ConcurrentHashMap<>();
     /** tapName -> human-readable forward install failures. */
-    private final Map<String, java.util.List<String>> forwardFailures = new ConcurrentHashMap<>();
+    private final Map<String, List<String>> forwardFailures = new ConcurrentHashMap<>();
     /** vids whose per-VLAN bridge + trunk leg exist (configured or on-demand). */
-    private final java.util.Set<Integer> createdVlanBridges = ConcurrentHashMap.newKeySet();
+    private final Set<Integer> createdVlanBridges = ConcurrentHashMap.newKeySet();
     /** DHCP-PD vlanId -> uplink device written into the running bridgedhcp
      *  config ("" when it was unresolved). Lets us reload when it appears. */
     private final Map<Integer, String> pdConfiguredUplink = new ConcurrentHashMap<>();
     /** Host IPv4 set the installed DNAT rules currently reflect; kept in sync. */
-    private final java.util.Set<String> appliedHostIps = new java.util.LinkedHashSet<>();
+    private final Set<String> appliedHostIps = new LinkedHashSet<>();
     /** Re-scopes DNAT rules when the phone's host IPv4 set changes. */
     private Runnable hostIpListener = null;
 
@@ -83,7 +89,7 @@ public void start() throws Exception {
         if (!net.createBridge(br))
             throw new RuntimeException(fmt("Failed to create bridge %s", br));
         var mac = resolveBridgeMac();
-        if (mac != null && !net.setMacAddress(br, mac))
+        if (!net.setMacAddress(br, mac))
             Log.w(TAG, fmt("Failed to set MAC %s on %s", mac, br));
         net.setStp(br, inst.isStp());
         switch (inst.getUplinkMode()) {
@@ -105,7 +111,7 @@ public void start() throws Exception {
      * auto-generated persisted one otherwise. Without it the bridge MAC
      * would follow whichever port is enslaved.
      */
-    @Nullable
+    @NonNull
     private String resolveBridgeMac() {
         var mac = inst.getBridgeMacAddress();
         if (mac != null) return mac;
@@ -117,7 +123,7 @@ private String resolveBridgeMac() {
         return generated;
     }
 
-    private void startL2() throws Exception {
+    private void startL2() {
         var configured = inst.getL2Uplink();
         if (configured == null)
             throw new RuntimeException("L2 network has no uplink configured");
@@ -125,7 +131,7 @@ private void startL2() throws Exception {
         if (uplink == null)
             throw new RuntimeException(fmt("Uplink \"%s\" not found", configured));
         resolvedUplink = uplink;
-        // honour the configured toggle, but force pseudo-bridging when the
+        // honor the configured toggle, but force pseudo-bridging when the
         // resolved device can't be enslaved (Wi-Fi STA / non-ethernet)
         boolean pseudo = inst.isL2PseudoBridge()
             || UplinkResolver.assumeDontBridge(uplink);
@@ -193,16 +199,14 @@ private void startL3Services() {
         firewall.initNetwork(inst);
         net.populateRuleRoute(inst);
         var watcher = inst.getStore().context.getRouterWatcher();
-        if (watcher != null) {
-            watcher.setForNewNetwork(inst);
-            // seed the host-IP set DNAT rules are scoped to, then track changes
-            synchronized (this) {
-                appliedHostIps.clear();
-                appliedHostIps.addAll(watcher.getHostIpv4Addresses());
-            }
-            hostIpListener = this::onHostIpsChanged;
-            watcher.addHostIpListener(hostIpListener);
+        watcher.setForNewNetwork();
+        // seed the host-IP set DNAT rules are scoped to, then track changes
+        synchronized (this) {
+            appliedHostIps.clear();
+            appliedHostIps.addAll(watcher.getHostIpv4Addresses());
         }
+        hostIpListener = this::onHostIpsChanged;
+        watcher.addHostIpListener(hostIpListener);
         if (BridgeDhcp.isNeeded(inst.getVlans())) {
             dhcp = new BridgeDhcp(inst, this::onPdAddressChanged);
             if (!dhcp.start())
@@ -273,8 +277,7 @@ private synchronized void onPdAddressChanged(int vlanId, @Nullable IPv6Network a
     public void stop() {
         if (hostIpListener != null) {
             var watcher = inst.getStore().context.getRouterWatcher();
-            if (watcher != null)
-                watcher.removeHostIpListener(hostIpListener);
+            watcher.removeHostIpListener(hostIpListener);
             hostIpListener = null;
         }
         synchronized (this) {
@@ -322,7 +325,7 @@ public void reconcile() {
     }
 
     @Override
-    public void attachNic(@NonNull VMNicConfig nic, @NonNull String tapName) throws Exception {
+    public void attachNic(@NonNull VMNicConfig nic, @NonNull String tapName) {
         if (net.isInterfaceExists(tapName)) net.deleteTap(tapName);
         if (!net.createTap(tapName))
             throw new RuntimeException(fmt("Failed to create TAP %s", tapName));
@@ -425,8 +428,8 @@ private synchronized void installNicForwards(@NonNull VMNicConfig nic, @NonNull
         // NAT-loopback: a guest in this subnet reaching the forward gets
         // masqueraded so the target's reply returns via the gateway
         var hairpinSubnet = net4.toNetworkString();
-        var installed = new java.util.ArrayList<InstalledForward>();
-        var failures = new java.util.ArrayList<String>();
+        var installed = new ArrayList<InstalledForward>();
+        var failures = new ArrayList<String>();
         for (var fwd : nic.getDhcp4Forwards()) {
             try {
                 fwd.validate();
@@ -478,10 +481,9 @@ private synchronized void onHostIpsChanged() {
         // pick up a PD uplink that was unavailable when the network started
         reconcilePdUplinks();
         var watcher = inst.getStore().context.getRouterWatcher();
-        if (watcher == null) return;
         var target = watcher.getHostIpv4Addresses();
-        var added = new java.util.ArrayList<String>();
-        var removed = new java.util.ArrayList<String>();
+        var added = new ArrayList<String>();
+        var removed = new ArrayList<String>();
         for (var ip : target)
             if (!appliedHostIps.contains(ip)) added.add(ip);
         for (var ip : appliedHostIps)
@@ -541,26 +543,26 @@ public JSONArray listAddressEntries() {
         var out = new JSONArray();
         // VID -> configured (VMM-managed) CIDRs; VLAN 0 included if declared,
         // empty in L2/none mode (getVlans() is L3-only).
-        var configured = new java.util.LinkedHashMap<Integer, java.util.List<String>>();
+        var configured = new LinkedHashMap<Integer, List<String>>();
         for (var vlan : inst.getVlans())
             configured.put(vlan.getVlanId(), configuredCidrs(vlan));
         // Every VID whose L3 device may carry addresses, in a stable order:
         // VLAN 0 (the main bridge, always -- the L2 mirror lands here), the
         // configured VLANs in config order, then any on-demand per-VLAN bridge.
-        var vids = new java.util.LinkedHashSet<Integer>();
+        var vids = new LinkedHashSet<Integer>();
         vids.add(0);
         vids.addAll(configured.keySet());
         vids.addAll(createdVlanBridges);
         for (var vid : vids) {
             var dev = LinuxNetwork.vlanDevice(br, vid);
             // canonical key -> raw "ip/plen" of every live address on the device
-            var live = new java.util.LinkedHashMap<String, String>();
+            var live = new LinkedHashMap<String, String>();
             var liveArr = net.listAddresses(dev);
             for (int i = 0; i < liveArr.length(); i++) {
                 var raw = liveArr.optString(i, "");
                 if (!raw.isEmpty()) live.put(canonAddr(raw), raw);
             }
-            for (var cidr : configured.getOrDefault(vid, java.util.List.of())) {
+            for (var cidr : Objects.requireNonNull(configured.getOrDefault(vid, List.of()))) {
                 boolean bound = live.remove(canonAddr(cidr)) != null;
                 out.put(addressEntry(cidr, vid, bound, "configured"));
             }
@@ -574,8 +576,8 @@ public JSONArray listAddressEntries() {
         }
         // L2 pseudo-bridge: pbridge parks each learned guest address on the
         // uplink tagged with the offload magic (so the Wi-Fi firmware answers
-        // ARP/NS for them). Those tagged addresses are exactly the pseudo-
-        // bridged guests' IPs -- surface them under their own source; the metric
+        // ARP/NS for them). Those tagged addresses are exactly the pseudo-bridged
+        // guests' IPs -- surface them under their own source; the metric
         // filter drops the host's own (untagged) uplink addresses.
         if (pbridge != null && resolvedUplink != null) {
             var guests = net.listAddresses(resolvedUplink, Constants.PBRIDGE_OFFLOAD_MAGIC);
@@ -590,8 +592,8 @@ public JSONArray listAddressEntries() {
 
     /** Configured (VMM-managed) CIDRs of one VLAN: primary + secondary v4/v6. */
     @NonNull
-    private static java.util.List<String> configuredCidrs(@NonNull VlanConfig vlan) {
-        var list = new java.util.ArrayList<String>();
+    private static List<String> configuredCidrs(@NonNull VlanConfig vlan) {
+        var list = new ArrayList<String>();
         var v4 = vlan.getIpv4Cidr();
         if (v4 != null) list.add(v4);
         list.addAll(vlan.getIpv4Secondary());
@@ -681,9 +683,9 @@ public JSONArray listTools() {
 
     @Nullable
     @Override
-    public java.util.List<String> toolLog(@NonNull String key) {
-        if ("pbridge".equals(key) && pbridge != null) return pbridge.getLog();
-        if ("bridgedhcp".equals(key) && dhcp != null) return dhcp.getLog();
+    public List<String> toolLog(@NonNull String key) {
+        if (key.equals("pbridge") && pbridge != null) return pbridge.getLog();
+        if (key.equals("bridgedhcp") && dhcp != null) return dhcp.getLog();
         return null;
     }
 
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/Netbox.java b/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/Netbox.java
index ba5bc25ac..3660714ea 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/Netbox.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/Netbox.java
@@ -13,6 +13,7 @@
 import org.json.JSONObject;
 
 import java.util.ArrayList;
+import java.util.Collections;
 import java.util.LinkedHashSet;
 import java.util.List;
 import java.util.Set;
@@ -26,7 +27,7 @@
  * {@code IFA_RT_PRIORITY} in {@code -j} JSON, the field pbridge tags its
  * offload-proxy addresses with. {@code netbox} is our bundled, static Rust tool
  * that does the same operations straight over rtnetlink with a fixed JSON
- * schema, so behaviour is identical on every device. All argv building, binary
+ * schema, so behavior is identical on every device. All argv building, binary
  * resolution and JSON parsing live here; callers use the typed methods only.
  *
  * <p>Mutations return {@code true} on success (the tool's exit code); queries
@@ -96,14 +97,17 @@ static boolean addrDel(@NonNull String dev, @NonNull String cidr) {
 
     // ------------------------------------------------------- route/rule/fdb
 
+    @SuppressWarnings("UnusedReturnValue")
     static boolean routeAdd(@NonNull String dev, @NonNull String dst, @NonNull String table, boolean v6) {
         return run(v6Args("route-add", v6, "--dev", dev, "--dst", dst, "--table", table));
     }
 
+    @SuppressWarnings("UnusedReturnValue")
     static boolean ruleAdd(@NonNull String iif, @NonNull String table, boolean v6) {
         return run(v6Args("rule-add", v6, "--iif", iif, "--table", table));
     }
 
+    @SuppressWarnings("UnusedReturnValue")
     static boolean ruleDel(@NonNull String iif, @NonNull String table, boolean v6) {
         return run(v6Args("rule-del", v6, "--iif", iif, "--table", table));
     }
@@ -143,7 +147,7 @@ static JSONArray linkList(@Nullable String master, boolean bridgeOnly) {
         return query(args);
     }
 
-    /** Neighbours of one device as {@code [{dst,lladdr,dev,state[]}]}. */
+    /** Neighbors of one device as {@code [{dst,lladdr,dev,state[]}]}. */
     @NonNull
     static JSONArray neighList(@NonNull String dev) {
         return query(List.of("neigh-list", dev));
@@ -241,7 +245,7 @@ private static Set<String> parseHostIps(@NonNull String json) {
     private static String[] v6Args(@NonNull String sub, boolean v6, @NonNull String... rest) {
         var args = new ArrayList<String>();
         args.add(sub);
-        java.util.Collections.addAll(args, rest);
+        Collections.addAll(args, rest);
         if (v6) args.add("--v6");
         return args.toArray(new String[0]);
     }
@@ -249,7 +253,7 @@ private static String[] v6Args(@NonNull String sub, boolean v6, @NonNull String.
     private static boolean run(@NonNull String... args) {
         var cmd = new ArrayList<String>(args.length + 1);
         cmd.add(getAssetBinaryPath("netbox"));
-        java.util.Collections.addAll(cmd, args);
+        Collections.addAll(cmd, args);
         var result = runListQuiet(cmd);
         if (!result.isSuccess()) {
             Log.w(TAG, fmt("netbox %s failed (exit %d): %s",
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/Pbridge.java b/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/Pbridge.java
index 93cbf3275..2d91c8b7f 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/Pbridge.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/Pbridge.java
@@ -1,5 +1,6 @@
 package cn.classfun.droidvm.daemon.network.backend;
 
+import static cn.classfun.droidvm.lib.Constants.*;
 import static cn.classfun.droidvm.lib.utils.AssetUtils.getAssetBinaryPath;
 import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
 
@@ -38,7 +39,7 @@ private List<String> buildArgs() {
             "--offload-workaround", "v4,v6",
             // pin the proxy-address tag so host-IP discovery can exclude them
             "--offload-workaround-magic",
-            String.valueOf(cn.classfun.droidvm.lib.Constants.PBRIDGE_OFFLOAD_MAGIC),
+            String.valueOf(PBRIDGE_OFFLOAD_MAGIC),
             "--arp-keepalive", "10",
             "--loglevel", "info"
         );
@@ -59,6 +60,7 @@ public void stop() {
      * re-establishes the data path). Called on the watchdog's 5s tick while the
      * network is running. Returns true when healthy.
      */
+    @SuppressWarnings("UnusedReturnValue")
     public synchronized boolean reconcile() {
         if (!active || process.isRunning()) return true;
         Log.w(TAG, fmt(
@@ -71,12 +73,13 @@ public boolean isRunning() {
         return process.isRunning();
     }
 
+    @SuppressWarnings("unused")
     public int getExitCode() {
         return process.getExitCode();
     }
 
     @NonNull
-    public java.util.List<String> getLog() {
+    public List<String> getLog() {
         return process.getLog();
     }
 }
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/UplinkResolver.java b/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/UplinkResolver.java
index 8a3db6c4b..402f8ab4c 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/UplinkResolver.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/UplinkResolver.java
@@ -8,16 +8,18 @@
 import androidx.annotation.Nullable;
 
 import org.json.JSONArray;
+import org.json.JSONException;
 import org.json.JSONObject;
 
 import java.io.File;
 import java.nio.file.Files;
 import java.util.ArrayList;
 import java.util.List;
+import java.util.Set;
 
 /**
  * Enumerates host L2 uplink candidates and resolves the logical
- * "WiFi"/"Ethernet"/"Tethering" identifiers to a concrete interface at
+ * "Wi-Fi"/"Ethernet"/"Tethering" identifiers to a concrete interface at
  * network start: device names drift across reboots (wlan0 <-> wlan1), so the
  * identifier is stored and re-resolved live; a literal interface name is
  * pinned and used as-is.
@@ -111,8 +113,8 @@ private static int readInt(@NonNull File f) {
     }
 
     /** DEVTYPEs that are virtual L2 constructs, never a real uplink. */
-    private static final java.util.Set<String> VIRTUAL_DEVTYPES =
-        java.util.Set.of("vlan", "vxlan", "gretap", "erspan");
+    private static final Set<String> VIRTUAL_DEVTYPES =
+        Set.of("vlan", "vxlan", "gretap", "erspan");
 
     private static boolean isVirtualDevtype(@NonNull File entry) {
         try {
@@ -193,6 +195,7 @@ public static String resolve(@NonNull String configured) {
     }
 
     /** Whether a logical identifier's uplink can be bridged (Wi-Fi STA can't). */
+    @SuppressWarnings("unused")
     public static boolean identifierBridgeable(@NonNull String id) {
         return !id.equalsIgnoreCase(ID_WIFI);
     }
@@ -241,7 +244,7 @@ public static JSONObject listUplinksJson() {
     @NonNull
     private static JSONObject identifierJson(
         @NonNull String id, @Nullable String name, boolean bridgeable
-    ) throws org.json.JSONException {
+    ) throws JSONException {
         var obj = new JSONObject();
         obj.put("id", id);
         obj.put("name", name == null ? "" : name);
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/gvisor/GvisorBridgeBackend.java b/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/gvisor/GvisorBridgeBackend.java
index 08298cbfe..87af1a35d 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/gvisor/GvisorBridgeBackend.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/gvisor/GvisorBridgeBackend.java
@@ -19,7 +19,6 @@
 import java.math.BigInteger;
 import java.security.SecureRandom;
 import java.util.ArrayList;
-import java.util.HashSet;
 import java.util.LinkedHashMap;
 import java.util.List;
 import java.util.Map;
@@ -29,6 +28,8 @@
 import cn.classfun.droidvm.daemon.network.backend.BridgeBackend;
 import cn.classfun.droidvm.daemon.network.backend.ManagedProcess;
 import cn.classfun.droidvm.daemon.vm.VMInstanceStore;
+import cn.classfun.droidvm.lib.network.IPv4Network;
+import cn.classfun.droidvm.lib.network.IPv6Network;
 import cn.classfun.droidvm.lib.store.network.UplinkMode;
 import cn.classfun.droidvm.lib.store.network.VlanConfig;
 import cn.classfun.droidvm.lib.store.vm.VMNicConfig;
@@ -46,7 +47,6 @@ public final class GvisorBridgeBackend extends BridgeBackend {
     private static final SecureRandom random = new SecureRandom();
     private final ManagedProcess process;
     private final String id8;
-    private String token = null;
     private GvswitchClient client = null;
     /** Set once stop() runs so the watchdog never relaunches a torn-down switch. */
     private volatile boolean stopped = false;
@@ -84,7 +84,7 @@ private synchronized void launch() throws Exception {
         random.nextBytes(bytes);
         var sb = new StringBuilder();
         for (var b : bytes) sb.append(fmt("%02x", b));
-        token = sb.toString();
+        var token = sb.toString();
         var config = GvswitchConfigBuilder.build(inst);
         var configFile = new File(configPath());
         var parent = configFile.getParentFile();
@@ -161,6 +161,7 @@ private void waitReady() throws Exception {
             } catch (Exception e) {
                 last = e;
             }
+            //noinspection BusyWait
             Thread.sleep(200);
         }
         throw new RuntimeException("gvswitch API did not become ready", last);
@@ -206,6 +207,7 @@ public synchronized void attachNic(@NonNull VMNicConfig nic, @NonNull String tap
      * its static leases and forwards. Never creates or deletes the tap, so it
      * is reusable for watchdog re-attach without disturbing crosvm.
      */
+    @SuppressWarnings("ExtractMethodRecommender")
     private void postPort(@NonNull VMNicConfig nic, @NonNull String tapName) throws Exception {
         if (client == null) throw new IllegalStateException("gvswitch not running");
         var port = new JSONObject();
@@ -317,7 +319,7 @@ private void installNicForwards(@NonNull VMNicConfig nic, @NonNull String tapNam
 
     @Nullable
     private static String guestIpAtOffset(
-        @NonNull cn.classfun.droidvm.lib.network.IPv4Network net, long offset
+        @NonNull IPv4Network net, long offset
     ) {
         try {
             return net.addressAtOffset(offset).toString();
@@ -328,7 +330,7 @@ private static String guestIpAtOffset(
 
     @Nullable
     private static String guestIpAtOffset(
-        @NonNull cn.classfun.droidvm.lib.network.IPv6Network net, long offset
+        @NonNull IPv6Network net, long offset
     ) {
         try {
             return net.addressAtOffset(BigInteger.valueOf(offset)).toString();
@@ -566,7 +568,7 @@ public JSONArray listTools() {
 
     @Nullable
     @Override
-    public java.util.List<String> toolLog(@NonNull String key) {
-        return "gvswitch".equals(key) ? process.getLog() : null;
+    public List<String> toolLog(@NonNull String key) {
+        return key.equals("gvswitch") ? process.getLog() : null;
     }
 }
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/gvisor/GvswitchClient.java b/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/gvisor/GvswitchClient.java
index 2606b0d4c..23b598f08 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/gvisor/GvswitchClient.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/gvisor/GvswitchClient.java
@@ -70,6 +70,7 @@ public Response put(@NonNull String path, @Nullable Object body) throws IOExcept
     }
 
     @NonNull
+    @SuppressWarnings("UnusedReturnValue")
     public Response delete(@NonNull String path) throws IOException {
         return request("DELETE", path, null);
     }
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/vm/BootPlan.java b/app/src/main/java/cn/classfun/droidvm/daemon/vm/BootPlan.java
index ed161591e..87f10bd7b 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/vm/BootPlan.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/vm/BootPlan.java
@@ -1,5 +1,6 @@
 package cn.classfun.droidvm.daemon.vm;
 
+import static java.util.concurrent.TimeUnit.MILLISECONDS;
 import static cn.classfun.droidvm.lib.Constants.DATA_DIR;
 import static cn.classfun.droidvm.lib.Constants.PATH_BUILTIN_INITRD;
 import static cn.classfun.droidvm.lib.Constants.PATH_BUILTIN_KERNEL;
@@ -14,6 +15,7 @@
 import androidx.annotation.Nullable;
 
 import org.json.JSONArray;
+import org.json.JSONException;
 import org.json.JSONObject;
 
 import java.io.File;
@@ -26,6 +28,7 @@
 import cn.classfun.droidvm.lib.store.base.DataItem;
 import cn.classfun.droidvm.lib.store.vm.BootConfig;
 import cn.classfun.droidvm.lib.store.vm.VMConfig;
+import cn.classfun.droidvm.lib.utils.FileUtils;
 
 /**
  * A VM's boot configuration resolved into concrete backend inputs:
@@ -156,11 +159,9 @@ private static String builtinCmdline(
                 var entry = pinned != null
                     ? matchEntry(entries, pinned.id, pinned.title) : null;
                 if (entry == null) entry = defaultEntry(entries);
-                if (entry != null) {
-                    var fixed = boot.isVdafix() ? optStr(entry, "cmdline_fixed") : "";
-                    var cmdline = !fixed.isEmpty() ? fixed : optStr(entry, "cmdline");
-                    if (!cmdline.isEmpty()) return cmdline;
-                }
+                var fixed = boot.isVdafix() ? optStr(entry, "cmdline_fixed") : "";
+                var cmdline = !fixed.isEmpty() ? fixed : optStr(entry, "cmdline");
+                if (!cmdline.isEmpty()) return cmdline;
             }
         } catch (IOException e) {
             Log.w(TAG, fmt(
@@ -350,9 +351,11 @@ && cacheUpToDate(image, entry, manifest)) {
                 }
             }
         }
-        Files.write(
-            manifest.toPath(),
-            buildManifest(image, entry).toString().getBytes(StandardCharsets.UTF_8));
+        try {
+            FileUtils.saveJSONFile(manifest, buildManifest(image, entry));
+        } catch (JSONException e) {
+            Log.w(TAG, fmt("failed to write manifest for %s: %s", cacheDir, e.getMessage()));
+        }
     }
 
     /**
@@ -371,8 +374,7 @@ private static boolean cacheUpToDate(
     ) {
         JSONObject old;
         try {
-            old = new JSONObject(new String(
-                Files.readAllBytes(manifestFile.toPath()), StandardCharsets.UTF_8));
+            old = FileUtils.loadJSONFile(manifestFile);
         } catch (Exception e) {
             return false;
         }
@@ -463,6 +465,7 @@ private static String lbxMd5(@NonNull String image, @NonNull String uri, boolean
         return sp > 0 ? out.substring(0, sp) : out;
     }
 
+    @SuppressWarnings("BooleanMethodIsAlwaysInverted")
     private static boolean sameArray(
         @Nullable JSONArray a, @Nullable JSONArray b) {
         return String.valueOf(a).equals(String.valueOf(b));
@@ -479,15 +482,14 @@ private static String runLbx(@NonNull String... args) throws IOException {
         var argv = new String[args.length + 1];
         argv[0] = getAssetBinaryPath("lbx");
         System.arraycopy(args, 0, argv, 1, args.length);
-        var process = new NativeProcess.Builder(argv).start();
-        try {
+        try (var process = new NativeProcess.Builder(argv).start()) {
             var stdout = new String(
                 process.getInputStream().readAllBytes(), StandardCharsets.UTF_8);
             var stderr = new String(
                 process.getErrorStream().readAllBytes(), StandardCharsets.UTF_8);
             int code;
             try {
-                if (!process.waitFor(LBX_TIMEOUT_MS, java.util.concurrent.TimeUnit.MILLISECONDS)) {
+                if (!process.waitFor(LBX_TIMEOUT_MS, MILLISECONDS)) {
                     process.destroy();
                     throw new IOException(fmt("lbx timed out: %s", String.join(" ", argv)));
                 }
@@ -502,8 +504,6 @@ private static String runLbx(@NonNull String... args) throws IOException {
                         ? String.join(" ", argv) : stderr.trim()
                 ));
             return stdout;
-        } finally {
-            process.close();
         }
     }
 }
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/data/QcomChipName.java b/app/src/main/java/cn/classfun/droidvm/lib/data/QcomChipName.java
index 784945ac1..851f814ee 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/data/QcomChipName.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/data/QcomChipName.java
@@ -44,6 +44,7 @@ private void loadChipName() {
         }
     }
 
+    @SuppressWarnings("ReplaceAllNonRegex")
     public String lookupChipName(String soc) {
         if (chips == null)
             throw new IllegalStateException("Chips not loaded");
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/download/DiskDownloadService.java b/app/src/main/java/cn/classfun/droidvm/lib/download/DiskDownloadService.java
index 5d6a01cce..d582423a5 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/download/DiskDownloadService.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/download/DiskDownloadService.java
@@ -21,8 +21,10 @@
 import androidx.core.app.NotificationCompat;
 
 import java.util.ArrayList;
+import java.util.HashMap;
 import java.util.HashSet;
 import java.util.LinkedHashSet;
+import java.util.Map;
 import java.util.Set;
 import java.util.concurrent.ExecutorService;
 import java.util.concurrent.Executors;
@@ -53,7 +55,7 @@ public final class DiskDownloadService extends Service {
     private final Set<Long> active = new LinkedHashSet<>();
     /** Ids already handed to the executor, so a repeat START doesn't double-run. */
     private final Set<Long> submitted = new HashSet<>();
-    private final java.util.Map<Long, Tracker> trackers = new java.util.HashMap<>();
+    private final Map<Long, Tracker> trackers = new HashMap<>();
     private NotificationManager nm;
     private long foregroundId = -1;
     private boolean polling = false;
@@ -282,7 +284,7 @@ private long updateSpeed(long id, long downloaded) {
         }
         long elapsed = now - t.lastTime;
         if (elapsed >= SPEED_WINDOW_MS) {
-            t.speed = elapsed > 0 ? (downloaded - t.lastBytes) * 1000 / elapsed : 0;
+            t.speed = (downloaded - t.lastBytes) * 1000 / elapsed;
             t.lastTime = now;
             t.lastBytes = downloaded;
         }
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/store/base/RingBuffer.java b/app/src/main/java/cn/classfun/droidvm/lib/store/base/RingBuffer.java
index 3ae61625c..95e541104 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/store/base/RingBuffer.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/store/base/RingBuffer.java
@@ -44,6 +44,7 @@ public synchronized boolean adds(@NonNull byte[] data) {
         return adds(data, 0, data.length);
     }
 
+    @SuppressWarnings("SameReturnValue")
     public synchronized boolean adds(@NonNull byte[] data, int off, int len) {
         if (len > capacity) {
             off += len - capacity;
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/store/network/NetworkConfig.java b/app/src/main/java/cn/classfun/droidvm/lib/store/network/NetworkConfig.java
index df002d119..1fdd22675 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/store/network/NetworkConfig.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/store/network/NetworkConfig.java
@@ -153,7 +153,7 @@ private static List<String> legacyAddresses(@NonNull DataItem src, @NonNull Stri
         for (var e : arr.asArray()) {
             if (!e.is(DataItem.Type.STRING)) continue;
             var s = e.asString();
-            if (s != null && !s.isEmpty()) out.add(s);
+            if (!s.isEmpty()) out.add(s);
         }
         return out;
     }
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/store/network/VlanConfig.java b/app/src/main/java/cn/classfun/droidvm/lib/store/network/VlanConfig.java
index 9f70591f5..8bf15f154 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/store/network/VlanConfig.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/store/network/VlanConfig.java
@@ -228,7 +228,7 @@ private List<String> stringList(@NonNull String key) {
         for (var e : arr.asArray()) {
             if (!e.is(DataItem.Type.STRING)) continue;
             var s = e.asString();
-            if (s != null && !s.isEmpty()) out.add(s);
+            if (!s.isEmpty()) out.add(s);
         }
         return out;
     }
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/store/vm/BootConfig.java b/app/src/main/java/cn/classfun/droidvm/lib/store/vm/BootConfig.java
index 37b74bf2a..b15e03af6 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/store/vm/BootConfig.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/store/vm/BootConfig.java
@@ -36,8 +36,7 @@
  * {@code source} below it) only select which one takes effect, so toggling
  * in the UI never loses the other branch's values. Legacy flat keys
  * ({@code use_uefi}/{@code kernel}/{@code initrd}/{@code cmdline}/
- * {@code bios}) are folded into this object once, on config load -- see
- * {@link VMConfig#migrateBoot}.
+ * {@code bios}) are folded into this object once, on config load
  */
 public final class BootConfig {
     public enum Protocol implements StringEnum {
@@ -83,7 +82,7 @@ public int getStringId() {
      * Reserved {@code vm_start} boot_entry / boot-menu selection key for
      * "boot this disk with DroidVM's built-in kernel" -- not a disk image
      * entry, so it is matched as a sentinel (see {@code BootPlan.resolve})
-     * and can never collide with an lbx entry id (which never start '@').
+     * and can never collide with a lbx entry id (which never start '@').
      */
     public static final String BUILTIN_ENTRY_KEY = "@droidvm:builtin-kernel";
 
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/store/vm/VMConfig.java b/app/src/main/java/cn/classfun/droidvm/lib/store/vm/VMConfig.java
index 05e75bf38..7fae1bef5 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/store/vm/VMConfig.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/store/vm/VMConfig.java
@@ -72,7 +72,7 @@ private void migrateBoot() {
     private void migrateNicForwards() {
         var pfs = item.opt("port_forwards", null);
         var nics = item.opt("networks", null);
-        if (pfs == null || !pfs.is(DataItem.Type.ARRAY) || pfs.size() == 0
+        if (pfs == null || !pfs.is(DataItem.Type.ARRAY) || pfs.isEmpty()
             || nics == null || !nics.is(DataItem.Type.ARRAY)) {
             item.remove("port_forwards");
             return;
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/ui/NotificationPermission.java b/app/src/main/java/cn/classfun/droidvm/lib/ui/NotificationPermission.java
index aeab513d0..1d7d4878d 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/ui/NotificationPermission.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/ui/NotificationPermission.java
@@ -18,9 +18,10 @@
  * the app's minSdk) at the moment a background download is about to start,
  * after a short rationale. The download proceeds either way -- the permission
  * only controls whether the foreground-service progress notification is shown.
- *
+ * <p>
  * Construct from an activity's {@code onCreate}: the result launcher has to be
  * registered before the activity reaches STARTED.
+ * </p>
  */
 public final class NotificationPermission {
     private final AppCompatActivity activity;
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/utils/AssetUtils.java b/app/src/main/java/cn/classfun/droidvm/lib/utils/AssetUtils.java
index b25e09dd2..a6776b2bd 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/utils/AssetUtils.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/utils/AssetUtils.java
@@ -6,6 +6,7 @@
 import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
 import static cn.classfun.droidvm.lib.utils.StringUtils.pathJoin;
 
+import android.annotation.SuppressLint;
 import android.content.Context;
 import android.util.Log;
 
@@ -305,6 +306,8 @@ public static void extractPrebuilt(
     // symlink-free tree, so this reader stays small; corruption is still caught
     // by the per-file sha256 manifest check in needsExtractPrebuilt().
 
+    @SuppressLint("SetWorldReadable")
+    @SuppressWarnings("ResultOfMethodCallIgnored")
     private static void extractTarXz(@NonNull InputStream rawIn, @NonNull File destRoot)
         throws IOException {
         try (var xz = new XZInputStream(new BufferedInputStream(rawIn))) {
@@ -342,6 +345,7 @@ private static void extractTarXz(@NonNull InputStream rawIn, @NonNull File destR
                 }
                 skip(xz, padding(size));
                 outFile.setReadable(true, false);
+                //noinspection OctalInteger
                 if ((mode & 0111) != 0 || path.startsWith("bin/") || path.startsWith("usr/bin/"))
                     outFile.setExecutable(true, false);
             }
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/utils/NetUtils.java b/app/src/main/java/cn/classfun/droidvm/lib/utils/NetUtils.java
index 8db1971dd..f4506352c 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/utils/NetUtils.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/utils/NetUtils.java
@@ -228,6 +228,7 @@ public static String generateRandomMac() {
         );
     }
 
+    @SuppressWarnings("BooleanMethodIsAlwaysInverted")
     public static boolean isValidMac(@Nullable String mac) {
         return mac != null && mac.matches("([0-9A-Fa-f]{2}:){5}[0-9A-Fa-f]{2}");
     }
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/agent/base/AgentVM.java b/app/src/main/java/cn/classfun/droidvm/ui/agent/base/AgentVM.java
index 42d5d28de..b7c4ef863 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/agent/base/AgentVM.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/agent/base/AgentVM.java
@@ -142,6 +142,7 @@ public void setActionVar(@NonNull String key, @NonNull String value) {
         vars.put(key, value);
     }
 
+    @SuppressWarnings("BooleanMethodIsAlwaysInverted")
     public boolean hasActionVar(@NonNull String key) {
         return vars.containsKey(key);
     }
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/disk/download/ImportURLActivity.java b/app/src/main/java/cn/classfun/droidvm/ui/disk/download/ImportURLActivity.java
index 0e7f905a3..a6cacee16 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/disk/download/ImportURLActivity.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/disk/download/ImportURLActivity.java
@@ -26,7 +26,6 @@
 import androidx.activity.OnBackPressedCallback;
 import androidx.activity.result.ActivityResultLauncher;
 import androidx.activity.result.contract.ActivityResultContracts;
-import androidx.annotation.NonNull;
 import androidx.annotation.Nullable;
 import androidx.appcompat.app.AppCompatActivity;
 import androidx.core.widget.NestedScrollView;
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/disk/lxc/LxcImage.java b/app/src/main/java/cn/classfun/droidvm/ui/disk/lxc/LxcImage.java
index f545cb198..6054d46b5 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/disk/lxc/LxcImage.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/disk/lxc/LxcImage.java
@@ -135,6 +135,7 @@ public String getDisplayVersion() {
     }
 
     @NonNull
+    @SuppressWarnings("ReplaceAllNonRegex")
     public String getDefaultFileName() {
         var name = fmt(
             "%s-%s-%s-%s-%s.qcow2", distro.toLowerCase(),
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/main/home/MainHomeFragment.java b/app/src/main/java/cn/classfun/droidvm/ui/main/home/MainHomeFragment.java
index 12556a4d4..fe78d4fd4 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/main/home/MainHomeFragment.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/main/home/MainHomeFragment.java
@@ -359,7 +359,7 @@ public void refreshView() {
     @Override
     public void onDaemonEvent(JSONObject data) {
         var inner = data.optJSONObject("data");
-        if (inner != null && "output".equals(inner.optString("event"))) return;
+        if (inner != null && inner.optString("event").equals("output")) return;
         refreshView();
     }
 
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/main/network/NetworkAdapter.java b/app/src/main/java/cn/classfun/droidvm/ui/main/network/NetworkAdapter.java
index c039e8fed..b1230ca09 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/main/network/NetworkAdapter.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/main/network/NetworkAdapter.java
@@ -5,6 +5,7 @@
 import androidx.annotation.NonNull;
 
 import cn.classfun.droidvm.R;
+import cn.classfun.droidvm.lib.store.network.BridgeType;
 import cn.classfun.droidvm.lib.store.network.NetworkConfig;
 import cn.classfun.droidvm.lib.store.network.NetworkState;
 import cn.classfun.droidvm.lib.store.network.NetworkStore;
@@ -26,7 +27,7 @@ public void onBindViewHolder(@NonNull BaseViewHolder holder, int position) {
         var ctx = holder.itemView.getContext();
         var config = items.get(position);
         String typeLabel = ctx.getString(
-            config.getBridgeType() == cn.classfun.droidvm.lib.store.network.BridgeType.GVISOR
+            config.getBridgeType() == BridgeType.GVISOR
                 ? R.string.network_edit_bridge_type_gvisor
                 : R.string.network_edit_bridge_type_linux);
         String modeLabel;
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/main/vm/MainVMFragment.java b/app/src/main/java/cn/classfun/droidvm/ui/main/vm/MainVMFragment.java
index 8a6eed454..53c084c27 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/main/vm/MainVMFragment.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/main/vm/MainVMFragment.java
@@ -23,7 +23,6 @@
 import cn.classfun.droidvm.R;
 import cn.classfun.droidvm.lib.daemon.DaemonConnection;
 import cn.classfun.droidvm.lib.daemon.ForegroundCallback;
-import cn.classfun.droidvm.lib.daemon.VMEventHandler;
 import cn.classfun.droidvm.lib.store.vm.VMConfig;
 import cn.classfun.droidvm.lib.store.vm.VMState;
 import cn.classfun.droidvm.lib.store.vm.VMStore;
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/network/edit/NetworkEditActivity.java b/app/src/main/java/cn/classfun/droidvm/ui/network/edit/NetworkEditActivity.java
index 4332016f2..4ba17b646 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/network/edit/NetworkEditActivity.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/network/edit/NetworkEditActivity.java
@@ -24,14 +24,16 @@
 import com.google.android.material.button.MaterialButton;
 import com.google.android.material.floatingactionbutton.FloatingActionButton;
 
+import org.json.JSONObject;
+
 import java.util.ArrayList;
+import java.util.HashSet;
 import java.util.List;
 import java.util.Random;
 import java.util.UUID;
 
 import cn.classfun.droidvm.R;
 import cn.classfun.droidvm.lib.daemon.DaemonConnection;
-import cn.classfun.droidvm.lib.network.IPv4Address;
 import cn.classfun.droidvm.lib.network.IPv4Network;
 import cn.classfun.droidvm.lib.network.IPv6Network;
 import cn.classfun.droidvm.lib.store.base.DataItem;
@@ -84,7 +86,9 @@ public final class NetworkEditActivity extends AppCompatActivity {
     private MaterialButton btnAddVlan;
     private FloatingActionButton fab;
     private NetworkStore store;
+    @SuppressWarnings("FieldCanBeLocal")
     private String[] bridgeTypeLabels;
+    @SuppressWarnings("FieldCanBeLocal")
     private String[] uplinkModeLabels;
     private BridgeType bridgeType = BridgeType.LINUX;
     private UplinkMode uplinkMode = UplinkMode.L3;
@@ -135,10 +139,10 @@ private void initialize() {
         ddL2Uplink.setOnItemClickListener((p, v, pos, id) -> onUplinkSelected(pos));
         btnAddVlan.setOnClickListener(v -> onAddVlan());
         inputMac.setEndIconOnClickListener(v -> inputMac.setText(generateRandomMac()));
-        inputBridge.setFilters(new InputFilter[]{
+        inputBridge.setFilters(
             new InputFilter.LengthFilter(MAX_BRIDGE_NAME_LEN),
-            BRIDGE_NAME_CHARSET,
-        });
+            BRIDGE_NAME_CHARSET
+        );
         fab.setOnClickListener(v -> onSaveClicked());
         updateUplinkModeDropdown();
         loadUplinks();
@@ -217,7 +221,7 @@ private void loadUplinks() {
      * with their live-resolved name or "unavailable") followed by the concrete
      * physical L2 devices. The current selection is preserved.
      */
-    private void rebuildUplinks(@Nullable org.json.JSONObject data) {
+    private void rebuildUplinks(@Nullable JSONObject data) {
         uplinkLabels.clear();
         uplinkValues.clear();
         uplinkBridgeable.clear();
@@ -253,7 +257,7 @@ private void rebuildUplinks(@Nullable org.json.JSONObject data) {
 
     private void addIdentifier(
         @NonNull String id, @NonNull String display, boolean bridgeable,
-        @Nullable org.json.JSONObject data
+        @Nullable JSONObject data
     ) {
         String resolved = "";
         boolean br = bridgeable;
@@ -398,7 +402,7 @@ private void collectUsedNetworks(
         @NonNull List<IPv4Network> out4, @NonNull List<IPv6Network> out6
     ) {
         storeAllBinders();
-        var sources = new ArrayList<VlanConfig>(vlans);
+        var sources = new ArrayList<>(vlans);
         store.forEach((id, cfg) -> {
             if (id.equals(editNetworkId)) return;
             sources.addAll(cfg.getVlans());
@@ -476,7 +480,7 @@ private void checkRunningState() {
     private void onAddVlan() {
         storeAllBinders();
         // smallest free id in 0, 10, 20, ...
-        var used = new java.util.HashSet<Integer>();
+        var used = new HashSet<Integer>();
         for (var vlan : vlans) used.add(vlan.getVlanId());
         int id = 0;
         while (used.contains(id) && id < 4090) id += 10;
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/network/edit/VlanCardBinder.java b/app/src/main/java/cn/classfun/droidvm/ui/network/edit/VlanCardBinder.java
index f134f8048..5e640ea7d 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/network/edit/VlanCardBinder.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/network/edit/VlanCardBinder.java
@@ -15,7 +15,6 @@
 import com.google.android.material.materialswitch.MaterialSwitch;
 import com.google.android.material.textfield.TextInputEditText;
 
-import java.util.ArrayList;
 import java.util.List;
 
 import cn.classfun.droidvm.R;
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/network/info/NetworkInfoActivity.java b/app/src/main/java/cn/classfun/droidvm/ui/network/info/NetworkInfoActivity.java
index 00931ab2e..debc6eb9e 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/network/info/NetworkInfoActivity.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/network/info/NetworkInfoActivity.java
@@ -7,7 +7,6 @@
 import static android.widget.LinearLayout.VERTICAL;
 import static android.widget.Toast.LENGTH_LONG;
 import static android.widget.Toast.LENGTH_SHORT;
-import static java.util.Objects.requireNonNull;
 import static cn.classfun.droidvm.lib.store.enums.Enums.applyText;
 import static cn.classfun.droidvm.lib.store.enums.Enums.optEnum;
 import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
@@ -457,18 +456,19 @@ private void addToolRow(@NonNull LinearLayout container, @NonNull String key, bo
                               : R.string.network_info_tool_stopped),
             getString(R.string.network_info_tool_view_log)));
         line2.setVisibility(VISIBLE);
-        var ta = getTheme().obtainStyledAttributes(
-            new int[]{android.R.attr.selectableItemBackground});
-        view.setBackgroundResource(ta.getResourceId(0, 0));
-        ta.recycle();
-        view.setOnClickListener(v -> {
-            var intent = new Intent(this, NetworkToolLogActivity.class);
-            intent.putExtra("network_id", networkId.toString());
-            intent.putExtra("tool", key);
-            intent.putExtra("title", label);
-            startActivity(intent);
-        });
-        container.addView(view);
+        var attrs = new int[]{android.R.attr.selectableItemBackground};
+        try (var ta = getTheme().obtainStyledAttributes(attrs)) {
+            view.setBackgroundResource(ta.getResourceId(0, 0));
+            ta.recycle();
+            view.setOnClickListener(v -> {
+                var intent = new Intent(this, NetworkToolLogActivity.class);
+                intent.putExtra("network_id", networkId.toString());
+                intent.putExtra("tool", key);
+                intent.putExtra("title", label);
+                startActivity(intent);
+            });
+            container.addView(view);
+        }
     }
 
     private void bindBasic(@NonNull LinearLayout container) {
@@ -672,7 +672,7 @@ private void addPdEntry(@NonNull LinearLayout container, @NonNull JSONObject pd)
         // while searching) -- so this row matches the live nic address and the
         // "bound" chip reflects the real binding, not the raw delegation.
         var address = pd.optString("address", "");
-        var noUplink = "no_uplink".equals(state);
+        var noUplink = state.equals("no_uplink");
         var bound = !address.isEmpty();
         // CIDR area: the bound host address, or the status while there is none
         String line1;
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/NicLeaseAllocator.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/NicLeaseAllocator.java
index 334a92e04..58bce9581 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/NicLeaseAllocator.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/NicLeaseAllocator.java
@@ -23,8 +23,9 @@
  * VLAN's dynamic pool and any offset already used by another VM -- or this VM's
  * own other NICs -- on the same network/VLAN, then persists the result so the
  * guest IP stays stable across restarts.
- *
+ * <p>
  * Allocation is app-side and persisted here; nothing else assigns offsets.
+ * </p>
  */
 public final class NicLeaseAllocator {
     private static final String TAG = "NicLeaseAllocator";
@@ -114,7 +115,7 @@ private static long firstFree(
     ) {
         long poolStart = vlan.getDhcp4OffsetStart();
         long poolEnd = vlan.getDhcp4OffsetEnd();
-        long maxOffset = net4.totalAddresses() - 2; // addressAtOffset valid 1..total-2
+        long maxOffset = net4.totalAddresses() - 2; // addressAtOffset valid 1...total-2
         for (long c = 64; c <= maxOffset; c++) {
             if (c >= poolStart && c <= poolEnd) continue; // skip the dynamic pool
             if (used.contains(c)) continue;
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/boot/BootEntries.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/boot/BootEntries.java
index bfd43487f..54664008f 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/boot/BootEntries.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/boot/BootEntries.java
@@ -123,13 +123,6 @@ public String effectiveCmdline(boolean vdafix) {
             return vdafix && !cmdlineFixed.isEmpty() ? cmdlineFixed : cmdline;
         }
 
-        /** vdafix did not (or could not) neutralize a device-name root=. */
-        public boolean hasRootDeviceWarning(boolean vdafix) {
-            var c = effectiveCmdline(vdafix);
-            return c.contains("root=/dev/sd") || c.contains("root=/dev/nvme")
-                || c.contains("root=/dev/hd");
-        }
-
         /**
          * Kernel is known to lack CONFIG_DMA_RESTRICTED_POOL, so its virtio
          * DMA cannot reach the host-shared pool and the devices fail under a
@@ -232,7 +225,7 @@ private static void runAnalyze(
             }
             int code = proc.exitValue();
             if (code == 0) {
-                onScan.onScan(parse(new JSONArray(stdout.toString("UTF-8"))), null);
+                onScan.onScan(parse(new JSONArray(stdout.toString(StandardCharsets.UTF_8))), null);
             } else {
                 // Surface lbx's real stderr rather than a generic error.
                 var msg = errBuf.toString().trim();
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/boot/BootMenuDialog.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/boot/BootMenuDialog.java
index 164697cc9..238ebd8a4 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/boot/BootMenuDialog.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/boot/BootMenuDialog.java
@@ -24,6 +24,7 @@
 import com.google.android.material.dialog.MaterialAlertDialogBuilder;
 
 import cn.classfun.droidvm.R;
+import cn.classfun.droidvm.lib.store.base.DataItem;
 import cn.classfun.droidvm.lib.store.vm.BootConfig;
 import cn.classfun.droidvm.lib.store.vm.ProtectedVM;
 import cn.classfun.droidvm.lib.store.vm.VMConfig;
@@ -352,8 +353,7 @@ private static String entryWarning(
     @Nullable
     private static String firstImagePath(@NonNull VMConfig config, int preferred) {
         var disks = config.item.opt("disks", null);
-        if (disks == null
-            || !disks.is(cn.classfun.droidvm.lib.store.base.DataItem.Type.ARRAY))
+        if (disks == null || !disks.is(DataItem.Type.ARRAY))
             return null;
         var arr = disks.asArray();
         if (preferred >= 0 && preferred < arr.size()) {
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/base/VMEditBaseTab.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/base/VMEditBaseTab.java
index 26c79d9c6..a5fba6a9c 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/base/VMEditBaseTab.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/base/VMEditBaseTab.java
@@ -32,6 +32,7 @@ protected final boolean showValidateFailed(@StringRes int message) {
         return showValidateFailed(parent.getString(message));
     }
 
+    @SuppressWarnings("SameReturnValue")
     protected final boolean showValidateFailed(@NonNull CharSequence message) {
         Snackbar.make(parent, view, message, Snackbar.LENGTH_LONG).show();
         return false;
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/network/VMNetEditAdapter.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/network/VMNetEditAdapter.java
index 231604c81..fcb55ebbc 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/network/VMNetEditAdapter.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/network/VMNetEditAdapter.java
@@ -5,6 +5,7 @@
 import static cn.classfun.droidvm.lib.utils.NetUtils.generateRandomMac;
 import static cn.classfun.droidvm.lib.utils.StringUtils.getEditText;
 
+import android.annotation.SuppressLint;
 import android.content.Context;
 import android.content.DialogInterface;
 import android.view.View;
@@ -15,11 +16,14 @@
 
 import com.google.android.material.button.MaterialButton;
 import com.google.android.material.dialog.MaterialAlertDialogBuilder;
+import com.google.android.material.materialswitch.MaterialSwitch;
 
 import java.util.ArrayList;
+import java.util.List;
 
 import cn.classfun.droidvm.R;
 import cn.classfun.droidvm.lib.store.base.DataItem;
+import cn.classfun.droidvm.lib.store.network.BridgeType;
 import cn.classfun.droidvm.lib.store.network.NetworkConfig;
 import cn.classfun.droidvm.lib.store.network.NetworkStore;
 import cn.classfun.droidvm.lib.store.network.UplinkMode;
@@ -99,7 +103,7 @@ public void onBindViewHolder(@NonNull VMNetEditViewHolder holder, int position)
 
     private void bindSwitch(
         @NonNull VMNetEditViewHolder holder,
-        @NonNull com.google.android.material.materialswitch.MaterialSwitch sw,
+        @NonNull MaterialSwitch sw,
         @NonNull String key, boolean value
     ) {
         sw.setOnCheckedChangeListener(null);
@@ -162,8 +166,7 @@ private void bindVlan(@NonNull VMNetEditViewHolder holder, @NonNull VMNicConfig
     private boolean isLinuxBridge(@NonNull VMNicConfig nic) {
         var netId = nic.getNetworkId();
         var network = netId != null ? networks().findById(netId) : null;
-        return network != null && network.getBridgeType()
-            == cn.classfun.droidvm.lib.store.network.BridgeType.LINUX;
+        return network != null && network.getBridgeType() == BridgeType.LINUX;
     }
 
     /** First tagged VLAN configured on the NIC's network, or 1. */
@@ -190,6 +193,7 @@ else if (id > 4094)
     }
 
     /** Toggle off = trunk: the ID field locks to the 4095 trunk marker. */
+    @SuppressLint("SetTextI18n")
     private static void applyVlanFieldState(
         @NonNull VMNetEditViewHolder holder, @Nullable Integer vlanId
     ) {
@@ -262,7 +266,7 @@ private void bindLease(
         // IPv6 forwards need IPv6 SNAT, which the Linux bridge can't do
         // (Android kernel has no IPv6 NAT) -- hide them there entirely
         boolean fwdSupported = !v6
-            || network.getBridgeType() == cn.classfun.droidvm.lib.store.network.BridgeType.GVISOR;
+            || network.getBridgeType() == BridgeType.GVISOR;
         fwdTil.setVisibility(fwdSupported ? VISIBLE : GONE);
         boolean snat = fwdSupported && vlan != null
             && (v6 ? vlan.isIpv6Snat() : vlan.isIpv4Snat());
@@ -270,7 +274,6 @@ private void bindLease(
         fwd.setEnabled(snat);
         fwdTil.setHelperText(snat ? context.getString(R.string.edit_vm_net_forwards_hint)
             : context.getString(R.string.edit_vm_net_forwards_need_snat));
-        var vlanFinal = vlan;
         sw.setOnCheckedChangeListener((b, checked) -> {
             int pos = holder.getBindingAdapterPosition();
             if (pos == RecyclerView.NO_POSITION) return;
@@ -279,8 +282,8 @@ private void bindLease(
             offsetTil.setEnabled(checked);
             var lease = leaseItem(items.get(pos), leaseKey);
             lease.set("enabled", checked);
-            if (checked && lease.optLong("offset", 0) <= 0 && vlanFinal != null) {
-                long free = nextFreeOffset(network, vlanFinal, pos, v6);
+            if (checked && lease.optLong("offset", 0) <= 0 && vlan != null) {
+                long free = nextFreeOffset(network, vlan, pos, v6);
                 lease.set("offset", free);
                 offset.setText(String.valueOf(free));
             }
@@ -356,7 +359,7 @@ private static void collectOffset(
 
     /** "tcp 80:80" lines <-> forwards array of {proto, host, guest}. */
     @NonNull
-    static String formatForwards(@NonNull java.util.List<VMNicConfig.PortForward> forwards) {
+    static String formatForwards(@NonNull List<VMNicConfig.PortForward> forwards) {
         var sb = new StringBuilder();
         for (var fwd : forwards) {
             if (sb.length() > 0) sb.append('\n');
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/network/VMNetEditViewHolder.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/network/VMNetEditViewHolder.java
index 6d2520b03..32d0721c4 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/network/VMNetEditViewHolder.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/network/VMNetEditViewHolder.java
@@ -3,6 +3,7 @@
 import android.view.View;
 import android.widget.ImageButton;
 import android.widget.LinearLayout;
+import android.widget.TextView;
 
 import androidx.annotation.NonNull;
 import androidx.recyclerview.widget.RecyclerView;
@@ -27,7 +28,7 @@ public final class VMNetEditViewHolder extends RecyclerView.ViewHolder {
     final LinearLayout groupDhcp4;
     final MaterialSwitch swDhcp4;
     final View groupDhcp4Detail;
-    final android.widget.TextView tvDhcp4Hint;
+    final TextView tvDhcp4Hint;
     final TextInputEditText etDhcp4Offset;
     final TextInputLayout tilDhcp4Offset;
     final TextInputLayout tilFwd4;
@@ -35,7 +36,7 @@ public final class VMNetEditViewHolder extends RecyclerView.ViewHolder {
     final LinearLayout groupDhcp6;
     final MaterialSwitch swDhcp6;
     final View groupDhcp6Detail;
-    final android.widget.TextView tvDhcp6Hint;
+    final TextView tvDhcp6Hint;
     final TextInputEditText etDhcp6Offset;
     final TextInputLayout tilDhcp6Offset;
     final TextInputLayout tilFwd6;
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/storage/VMEditStorageTab.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/storage/VMEditStorageTab.java
index ca7add23d..9033e035c 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/storage/VMEditStorageTab.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/storage/VMEditStorageTab.java
@@ -12,6 +12,7 @@
 import androidx.activity.result.ActivityResultLauncher;
 import androidx.activity.result.contract.ActivityResultContracts;
 import androidx.annotation.NonNull;
+import androidx.annotation.Nullable;
 
 import java.util.HashSet;
 
@@ -114,7 +115,7 @@ private void activityResult(@NonNull ActivityResult result) {
     }
 
     /** Live disk entries as edited right now (not yet saved to config). */
-    @NonNull
+    @Nullable
     public DataItem getCurrentDisks() {
         return listDisks.getItems();
     }
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/info/VMInfoActivity.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/info/VMInfoActivity.java
index c15a9a37a..ff994359a 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/info/VMInfoActivity.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/info/VMInfoActivity.java
@@ -25,7 +25,6 @@
 import androidx.activity.result.contract.ActivityResultContracts;
 import androidx.annotation.NonNull;
 import androidx.annotation.Nullable;
-import androidx.appcompat.app.AlertDialog;
 import androidx.appcompat.app.AppCompatActivity;
 
 import com.google.android.material.appbar.CollapsingToolbarLayout;
@@ -33,8 +32,6 @@
 import com.google.android.material.button.MaterialButton;
 import com.google.android.material.dialog.MaterialAlertDialogBuilder;
 
-import org.json.JSONArray;
-import org.json.JSONException;
 import org.json.JSONObject;
 
 import java.text.DateFormat;
@@ -48,13 +45,13 @@
 import cn.classfun.droidvm.lib.daemon.DaemonConnection;
 import cn.classfun.droidvm.lib.daemon.ForegroundCallback;
 import cn.classfun.droidvm.lib.store.base.DataItem;
+import cn.classfun.droidvm.lib.store.network.NetworkStore;
 import cn.classfun.droidvm.lib.store.vm.BootConfig;
 import cn.classfun.droidvm.lib.store.vm.ProtectedVM;
 import cn.classfun.droidvm.lib.store.vm.VMConfig;
 import cn.classfun.droidvm.lib.store.vm.VMState;
 import cn.classfun.droidvm.lib.store.vm.VMStore;
 import cn.classfun.droidvm.lib.ui.UIContext;
-import cn.classfun.droidvm.lib.store.network.NetworkStore;
 import cn.classfun.droidvm.ui.vm.VMActions;
 import cn.classfun.droidvm.ui.vm.edit.VMEditActivity;
 import cn.classfun.droidvm.ui.widgets.container.CollapsibleContainer;
@@ -351,7 +348,7 @@ private void refreshPortForwards() {
             ccPortForwards.setVisibility(View.GONE);
             return;
         }
-        var lines = new java.util.ArrayList<String>();
+        var lines = new ArrayList<String>();
         var networks = new NetworkStore();
         networks.load(this);
         config.forEachNic(nic -> {
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/widgets/tools/DownloadWidget.java b/app/src/main/java/cn/classfun/droidvm/ui/widgets/tools/DownloadWidget.java
index f5e758d09..8e56fa275 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/widgets/tools/DownloadWidget.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/widgets/tools/DownloadWidget.java
@@ -107,7 +107,7 @@ public void updateExternal(long downloaded, long total) {
         long elapsed = now - lastUpdateTime;
         if (elapsed >= UI_UPDATE_INTERVAL_MS) {
             long deltaBytes = downloaded - lastUpdateBytes;
-            speedBytesPerSec = elapsed > 0 ? (deltaBytes * 1000 / elapsed) : 0;
+            speedBytesPerSec = deltaBytes * 1000 / elapsed;
             lastUpdateTime = now;
             lastUpdateBytes = downloaded;
         }
diff --git a/app/src/test/java/cn/classfun/droidvm/lib/store/vm/PortForwardTest.java b/app/src/test/java/cn/classfun/droidvm/lib/store/vm/PortForwardTest.java
index 7f1f0f1d7..d40413a7a 100644
--- a/app/src/test/java/cn/classfun/droidvm/lib/store/vm/PortForwardTest.java
+++ b/app/src/test/java/cn/classfun/droidvm/lib/store/vm/PortForwardTest.java
@@ -5,6 +5,8 @@
 
 import org.junit.Test;
 
+import java.util.List;
+
 import cn.classfun.droidvm.lib.store.vm.VMNicConfig.PortForward;
 
 public class PortForwardTest {
@@ -48,12 +50,12 @@ public void reversedRangeRejected() {
     public void anyExpandsToTcpAndUdp() {
         var fwd = new PortForward("any", "8080", "80");
         fwd.validate();
-        assertEquals(java.util.List.of("tcp", "udp"), fwd.protocols());
+        assertEquals(List.of("tcp", "udp"), fwd.protocols());
     }
 
     @Test
     public void concreteProtoIsSingleton() {
-        assertEquals(java.util.List.of("udp"), new PortForward("udp", "53", "53").protocols());
+        assertEquals(List.of("udp"), new PortForward("udp", "53", "53").protocols());
     }
 
     @Test

From 146176a1dfb1a0358039f6aee201cc7a8b9ff9c6 Mon Sep 17 00:00:00 2001
From: BigfootACA <bigfoot@classfun.cn>
Date: Mon, 22 Jun 2026 13:07:53 +0800
Subject: [PATCH 032/182] values: remove unused strings

Signed-off-by: BigfootACA <bigfoot@classfun.cn>
---
 app/src/main/res/values-zh-rCN/strings.xml | 64 ---------------------
 app/src/main/res/values-zh-rTW/strings.xml | 64 ---------------------
 app/src/main/res/values/strings.xml        | 66 ----------------------
 3 files changed, 194 deletions(-)

diff --git a/app/src/main/res/values-zh-rCN/strings.xml b/app/src/main/res/values-zh-rCN/strings.xml
index 44ff33744..0b3d2b57a 100644
--- a/app/src/main/res/values-zh-rCN/strings.xml
+++ b/app/src/main/res/values-zh-rCN/strings.xml
@@ -135,12 +135,7 @@
     <string name="vm_info_console_vnc_ext_select">外部显示器的 VNC</string>
 
     <string name="vm_info_logs">日志</string>
-    <string name="vm_info_logs_chooser_title">查看日志</string>
-    <string name="vm_info_logs_title">日志 - %1$s</string>
     <string name="vm_info_logs_no_logs">无可用日志。</string>
-    <string name="vm_info_logs_copy">复制</string>
-    <string name="vm_info_logs_save">保存</string>
-    <string name="vm_info_logs_copied">日志已复制到剪贴板。</string>
     <string name="vm_info_logs_save_failed">保存日志失败。</string>
 
     <string name="notif_channel_vm_events">虚拟机事件</string>
@@ -272,7 +267,6 @@
     <string name="edit_vm_kernel_microdroid">系统自带 MicroDroid 内核</string>
     <string name="edit_vm_kernel_external">选择外部文件</string>
     <string name="edit_vm_kernel_not_found">目标内核不存在: %1$s</string>
-    <string name="edit_vm_boot_uefi">使用 UEFI 启动</string>
     <string name="edit_vm_boot_protocol">引导方式</string>
     <string name="edit_vm_boot_protocol_uefi">UEFI</string>
     <string name="edit_vm_boot_protocol_linux">Linux 开机协议</string>
@@ -284,15 +278,12 @@
     <string name="edit_vm_kernel_source_image">磁盘镜像</string>
     <string name="edit_vm_kernel_source_manual">手动指定</string>
     <string name="edit_vm_boot_image_disk">引导磁盘</string>
-    <string name="edit_vm_boot_image_disk_title">选择引导磁盘</string>
     <string name="edit_vm_boot_entry">引导项</string>
     <string name="edit_vm_boot_entry_auto">自动(跟随引导加载器)</string>
-    <string name="edit_vm_boot_entry_auto_hint">客户机更新内核后自动生效</string>
     <string name="edit_vm_boot_entry_default_mark">%1$s(默认)</string>
     <string name="edit_vm_boot_entry_builtin">DroidVM 内置 Linux 内核</string>
     <string name="edit_vm_boot_entry_dma_warn">缺失 DMA_RESTRICTED_POOL</string>
     <string name="edit_vm_boot_detect_title">检测到的引导文件</string>
-    <string name="edit_vm_boot_detect_entry">引导项</string>
     <string name="edit_vm_boot_detect_kernel">内核</string>
     <string name="edit_vm_boot_detect_initrd">initrd</string>
     <string name="edit_vm_boot_detect_cmdline">内核命令行</string>
@@ -300,22 +291,17 @@
     <string name="edit_vm_boot_detect_scanning">正在扫描…</string>
     <string name="edit_vm_boot_detect_failed">扫描失败:%1$s</string>
     <string name="edit_vm_boot_detect_no_disk">此虚拟机尚未配置磁盘镜像</string>
-    <string name="edit_vm_boot_detect_root_warn">root= 指向物理设备;请启用自动修正或覆盖 cmdline</string>
     <string name="edit_vm_boot_rescan">重新扫描</string>
     <string name="edit_vm_boot_vdafix">自动修正 root= 设备</string>
-    <string name="edit_vm_boot_vdafix_hint">将 root=/dev/sdX 重写为 PARTUUID 以适配 virtio</string>
     <string name="edit_vm_boot_wait">开机菜单等待秒数</string>
-    <string name="edit_vm_boot_wait_hint">0 = 不显示菜单直接启动</string>
     <string name="edit_vm_boot_wait_invalid">必须为秒数(数字)</string>
     <string name="edit_vm_boot_cmdline_override">内核命令行覆盖(留空 = 使用镜像内的)</string>
-    <string name="edit_vm_boot_cmdline_override_hint">留空 = 使用镜像内的 cmdline</string>
     <string name="edit_vm_boot_menu_title">选择引导项 — %1$s</string>
     <string name="edit_vm_boot_menu_boot">启动</string>
     <string name="edit_vm_boot_menu_boot_in">启动 (%1$d)</string>
     <string name="edit_vm_boot_menu_remember">记住此选择</string>
     <string name="edit_vm_boot_menu_fallback">未找到固定的引导项“%1$s”,已改用默认</string>
     <string name="edit_vm_boot_protected_dma_warn">此内核未启用 CONFIG_DMA_RESTRICTED_POOL。\n在受保护 VM 下客户机无法与主机共享 DMA 内存,virtio 设备(磁盘/网络)将无法启动。\n请改用内置内核,或重新编译并启用该选项。</string>
-    <string name="edit_vm_boot_uefi_hint">如果想要直接启动 Linux 内核则请禁用 UEFI</string>
     <string name="kernel_analysis_title">内核分析</string>
     <string name="kernel_analysis_analyze">分析</string>
     <string name="kernel_analysis_hint">导入前通过网络分析镜像的内核/initrd</string>
@@ -626,22 +612,12 @@
     <string name="download_failed">失败：%1$s</string>
     <string name="download_cancelled">已取消</string>
     <string name="download_file_icon_desc">文件图标</string>
-    <string name="download_exit_title">正在下载</string>
-    <string name="download_exit_message">下载仍在进行中。现在离开将取消下载并删除已下载的部分文件。确定要退出吗？</string>
     <string name="download_paused">已暂停…</string>
-    <string name="download_paused_network">已暂停，等待网络…</string>
-    <string name="download_paused_retry">连接中断，正在重试…</string>
-    <string name="download_paused_wifi">已暂停，等待 Wi-Fi…</string>
     <string name="download_retrying">连接中断，重试中 (%1$d/%2$d)…</string>
     <string name="download_one_at_a_time">已有下载正在进行，请等待完成。</string>
     <string name="download_background_toast">下载将在后台继续，可在通知栏查看。</string>
     <string name="download_error_start">无法开始下载，请确认系统下载管理器已启用。</string>
-    <string name="notif_channel_downloads">下载</string>
-    <string name="notif_channel_downloads_desc">磁盘镜像下载通知</string>
     <string name="notif_download_complete_title">导入完成</string>
-    <string name="notif_download_complete_text">"%1$s"已添加到磁盘列表。</string>
-    <string name="notif_download_failed_title">下载失败</string>
-    <string name="notif_download_failed_text">无法下载"%1$s"。</string>
     <string name="notif_channel_downloads_progress">下载中</string>
     <string name="notif_channel_downloads_progress_desc">下载进行中的通知</string>
     <string name="notif_download_connecting">连接中…</string>
@@ -678,9 +654,6 @@
     <string name="test_build_warning_message">您正在运行 DroidVM 的测试版本。\n\n此版本仅供测试使用，可能包含错误或不完整的功能，可能导致数据丢失或运行不稳定。\n\n如遇到问题，请在 GitHub 上反馈。</string>
     <string name="test_build_warning_hide">不再提示</string>
 
-    <plurals name="network_item_info">
-        <item quantity="other">网桥：%1$s \u00B7 %2$d 个地址</item>
-    </plurals>
     <string name="network_state_stopped">已停止</string>
     <string name="network_state_starting">启动中</string>
     <string name="network_state_running">运行中</string>
@@ -698,39 +671,14 @@
     <string name="network_edit_mac_hint">MAC 地址（例如 02:42:ac:11:00:01）</string>
     <string name="network_edit_auto_up">启动时自动启用</string>
     <string name="network_edit_stp">生成树协议（STP）</string>
-    <string name="network_edit_nat">NAT（网络地址转换）</string>
-    <string name="network_edit_category_ipv4">IPv4 地址</string>
-    <string name="network_edit_ipv4_hint">IPv4 CIDR（例如 192.168.1.1/24）</string>
-    <string name="network_edit_category_dns">DNS 服务器</string>
-    <string name="network_edit_dns_hint">DNS 服务器（例如 8.8.8.8）</string>
-    <string name="network_edit_category_ipv6">IPv6 地址</string>
-    <string name="network_edit_ipv6_hint">IPv6 CIDR（例如 fd00::1/64）</string>
-    <string name="network_edit_no_addresses">未配置地址。</string>
-    <string name="network_edit_remove_address">移除地址</string>
-    <string name="network_edit_category_dhcp">DHCP 服务</string>
-    <string name="network_edit_dhcp_enabled">启用 DHCP 服务</string>
-    <string name="network_edit_dhcp_start_hint">地址池起始（例如 192.168.1.100）</string>
-    <string name="network_edit_dhcp_end_hint">地址池结束（例如 192.168.1.200）</string>
-    <string name="network_edit_btn_save">保存</string>
     <string name="network_edit_error_name_empty">网络名称不能为空</string>
     <string name="network_edit_error_name_duplicate">已存在同名网络</string>
     <string name="network_edit_error_bridge_empty">网桥名称不能为空</string>
     <string name="network_edit_error_bridge_invalid">必须以字母开头，且只能包含字母、数字、连字符或下划线</string>
-    <string name="network_edit_error_address_invalid">无效的 CIDR 地址</string>
-    <string name="network_edit_error_mac_invalid">无效的 MAC 地址格式</string>
     <string name="network_edit_error_not_found">未找到网络配置</string>
     <string name="network_edit_error_bridge_duplicate">已存在使用此网桥名称的网络</string>
-    <string name="network_edit_error_mac_duplicate">已存在使用此 MAC 地址的网络</string>
     <string name="network_edit_error_ipv4_overlap">IPv4 子网 %1$s 与网络"%2$s"（%3$s）重叠</string>
     <string name="network_edit_error_ipv6_overlap">IPv6 子网 %1$s 与网络"%2$s"（%3$s）重叠</string>
-    <string name="network_edit_error_dhcp_invalid">DHCP 地址池起始地址必须小于结束地址</string>
-    <string name="network_edit_error_dhcp_start_invalid">无效的 DHCP 地址池起始地址</string>
-    <string name="network_edit_error_dhcp_end_invalid">无效的 DHCP 地址池结束地址</string>
-    <string name="network_edit_error_ipv4_not_added">IPv4 地址输入框不为空，请先添加或清空</string>
-    <string name="network_edit_error_ipv6_not_added">IPv6 地址输入框不为空，请先添加或清空</string>
-    <string name="network_edit_error_dns_not_added">DNS 服务器输入框不为空，请先添加或清空</string>
-    <string name="network_edit_error_dns_invalid">无效的 DNS 服务器地址</string>
-    <string name="network_edit_error_dns_empty">至少需要一个 DNS 服务器</string>
     <string name="network_edit_save">保存网络</string>
     <string name="network_edit_running_banner">网络正在运行，请先停止后再编辑。</string>
     <string name="network_edit_bridge_type">网桥类型</string>
@@ -800,12 +748,6 @@
     <string name="network_info_mac">MAC 地址</string>
     <string name="network_info_auto_up">自动启动</string>
     <string name="network_info_stp">STP</string>
-    <string name="network_info_nat">NAT</string>
-    <string name="network_info_dhcp">DHCP 服务器</string>
-    <string name="network_info_dhcp_range">DHCP 范围</string>
-    <plurals name="network_info_dhcp_pool">
-        <item quantity="other">%1$s - %2$s (%3$d个地址)</item>
-    </plurals>
     <string name="network_info_created">创建时间</string>
     <string name="network_info_enabled">已启用</string>
     <string name="network_info_disabled">已禁用</string>
@@ -829,7 +771,6 @@
     <string name="vnc_display_title">VNC 显示器</string>
     <string name="vnc_display_connecting">正在连接…</string>
     <string name="vnc_display_connected">已连接 - %1$dx%2$d</string>
-    <string name="vnc_display_disconnected">已断开连接</string>
     <string name="vnc_display_reconnecting">正在重连 (%1$d/%2$d)…</string>
     <string name="vnc_display_reconnect_failed">重连失败，已尝试 %1$d 次</string>
     <string name="vnc_display_connect_failed">无法连接到 VNC 服务器</string>
@@ -906,11 +847,6 @@
 
     <string name="hugepage_title">GH-Hugepage-Reserve 管理</string>
     <string name="hugepage_subtitle">管理模块设置</string>
-    <string name="hugepage_section_status">状态</string>
-    <string name="hugepage_section_stats">统计信息</string>
-    <string name="hugepage_section_actions">操作</string>
-    <string name="hugepage_module_loaded">模块已加载</string>
-    <string name="hugepage_module_enabled">模块状态</string>
     <string name="hugepage_not_loaded">内核模块未加载。</string>
     <string name="hugepage_not_installed">Magisk 模块未安装。</string>
     <string name="hugepage_not_installed_desc">gh-hugepage-reserve Magisk 模块未安装，请先下载并安装。</string>
diff --git a/app/src/main/res/values-zh-rTW/strings.xml b/app/src/main/res/values-zh-rTW/strings.xml
index aa60c75eb..45a1a6ef6 100644
--- a/app/src/main/res/values-zh-rTW/strings.xml
+++ b/app/src/main/res/values-zh-rTW/strings.xml
@@ -135,12 +135,7 @@
     <string name="vm_info_console_vnc_ext_select">外部顯示器的 VNC</string>
 
     <string name="vm_info_logs">日誌</string>
-    <string name="vm_info_logs_chooser_title">檢視日誌</string>
-    <string name="vm_info_logs_title">日誌 - %1$s</string>
     <string name="vm_info_logs_no_logs">無可用日誌。</string>
-    <string name="vm_info_logs_copy">複製</string>
-    <string name="vm_info_logs_save">儲存</string>
-    <string name="vm_info_logs_copied">日誌已複製到剪貼簿。</string>
     <string name="vm_info_logs_save_failed">儲存日誌失敗。</string>
 
     <string name="notif_channel_vm_events">虛擬機器事件</string>
@@ -272,7 +267,6 @@
     <string name="edit_vm_kernel_microdroid">系統自帶 MicroDroid 核心</string>
     <string name="edit_vm_kernel_external">選擇外部檔案</string>
     <string name="edit_vm_kernel_not_found">目標核心不存在: %1$s</string>
-    <string name="edit_vm_boot_uefi">使用 UEFI 啟動</string>
     <string name="edit_vm_boot_protocol">引導方式</string>
     <string name="edit_vm_boot_protocol_uefi">UEFI</string>
     <string name="edit_vm_boot_protocol_linux">Linux 開機協議</string>
@@ -284,15 +278,12 @@
     <string name="edit_vm_kernel_source_image">磁碟映像</string>
     <string name="edit_vm_kernel_source_manual">手動指定</string>
     <string name="edit_vm_boot_image_disk">引導磁碟</string>
-    <string name="edit_vm_boot_image_disk_title">選擇引導磁碟</string>
     <string name="edit_vm_boot_entry">引導項</string>
     <string name="edit_vm_boot_entry_auto">自動(跟隨引導載入器)</string>
-    <string name="edit_vm_boot_entry_auto_hint">客戶機更新核心後自動生效</string>
     <string name="edit_vm_boot_entry_default_mark">%1$s(預設)</string>
     <string name="edit_vm_boot_entry_builtin">DroidVM 內建 Linux 核心</string>
     <string name="edit_vm_boot_entry_dma_warn">缺失 DMA_RESTRICTED_POOL</string>
     <string name="edit_vm_boot_detect_title">檢測到的引導檔案</string>
-    <string name="edit_vm_boot_detect_entry">引導項</string>
     <string name="edit_vm_boot_detect_kernel">核心</string>
     <string name="edit_vm_boot_detect_initrd">initrd</string>
     <string name="edit_vm_boot_detect_cmdline">核心命令列</string>
@@ -300,22 +291,17 @@
     <string name="edit_vm_boot_detect_scanning">正在掃描…</string>
     <string name="edit_vm_boot_detect_failed">掃描失敗:%1$s</string>
     <string name="edit_vm_boot_detect_no_disk">此虛擬機器尚未配置磁碟映像</string>
-    <string name="edit_vm_boot_detect_root_warn">root= 指向物理裝置;請啟用自動修正或覆蓋 cmdline</string>
     <string name="edit_vm_boot_rescan">重新掃描</string>
     <string name="edit_vm_boot_vdafix">自動修正 root= 裝置</string>
-    <string name="edit_vm_boot_vdafix_hint">將 root=/dev/sdX 重寫為 PARTUUID 以適配 virtio</string>
     <string name="edit_vm_boot_wait">開機選單等待秒數</string>
-    <string name="edit_vm_boot_wait_hint">0 = 不顯示選單直接啟動</string>
     <string name="edit_vm_boot_wait_invalid">必須為秒數(數字)</string>
     <string name="edit_vm_boot_cmdline_override">核心命令列覆蓋(留空 = 使用映像內的)</string>
-    <string name="edit_vm_boot_cmdline_override_hint">留空 = 使用映像內的 cmdline</string>
     <string name="edit_vm_boot_menu_title">選擇引導項 — %1$s</string>
     <string name="edit_vm_boot_menu_boot">啟動</string>
     <string name="edit_vm_boot_menu_boot_in">啟動 (%1$d)</string>
     <string name="edit_vm_boot_menu_remember">記住此選擇</string>
     <string name="edit_vm_boot_menu_fallback">未找到固定的引導項“%1$s”,已改用預設</string>
     <string name="edit_vm_boot_protected_dma_warn">此核心未啟用 CONFIG_DMA_RESTRICTED_POOL。\n在受保護 VM 下客戶機無法與主機共享 DMA 記憶體,virtio 裝置(磁碟/網路)將無法啟動。\n請改用內建核心,或重新編譯並啟用該選項。</string>
-    <string name="edit_vm_boot_uefi_hint">如果想要直接啟動 Linux 核心則請停用 UEFI</string>
     <string name="kernel_analysis_title">核心分析</string>
     <string name="kernel_analysis_analyze">分析</string>
     <string name="kernel_analysis_hint">匯入前通過網路分析映像的核心/initrd</string>
@@ -626,22 +612,12 @@
     <string name="download_failed">失敗：%1$s</string>
     <string name="download_cancelled">已取消</string>
     <string name="download_file_icon_desc">檔案圖示</string>
-    <string name="download_exit_title">正在下載</string>
-    <string name="download_exit_message">下載仍在進行中。現在離開將取消下載並刪除已下載的部分檔案。確定要退出嗎？</string>
     <string name="download_paused">已暫停…</string>
-    <string name="download_paused_network">已暫停，等待網路…</string>
-    <string name="download_paused_retry">連線中斷，正在重試…</string>
-    <string name="download_paused_wifi">已暫停，等待 Wi-Fi…</string>
     <string name="download_retrying">連線中斷，重試中 (%1$d/%2$d)…</string>
     <string name="download_one_at_a_time">已有下載正在進行，請等待完成。</string>
     <string name="download_background_toast">下載將在後臺繼續，可在通知欄檢視。</string>
     <string name="download_error_start">無法開始下載，請確認系統下載管理器已啟用。</string>
-    <string name="notif_channel_downloads">下載</string>
-    <string name="notif_channel_downloads_desc">磁碟映像下載通知</string>
     <string name="notif_download_complete_title">匯入完成</string>
-    <string name="notif_download_complete_text">"%1$s"已新增到磁碟列表。</string>
-    <string name="notif_download_failed_title">下載失敗</string>
-    <string name="notif_download_failed_text">無法下載"%1$s"。</string>
     <string name="notif_channel_downloads_progress">下載中</string>
     <string name="notif_channel_downloads_progress_desc">下載進行中的通知</string>
     <string name="notif_download_connecting">連線中…</string>
@@ -678,9 +654,6 @@
     <string name="test_build_warning_message">您正在執行 DroidVM 的測試版本。\n\n此版本僅供測試使用，可能包含錯誤或不完整的功能，可能導致資料丟失或執行不穩定。\n\n如遇到問題，請在 GitHub 上反饋。</string>
     <string name="test_build_warning_hide">不再提示</string>
 
-    <plurals name="network_item_info">
-        <item quantity="other">網橋：%1$s \u00B7 %2$d 個地址</item>
-    </plurals>
     <string name="network_state_stopped">已停止</string>
     <string name="network_state_starting">啟動中</string>
     <string name="network_state_running">執行中</string>
@@ -698,39 +671,14 @@
     <string name="network_edit_mac_hint">MAC 地址（例如 02:42:ac:11:00:01）</string>
     <string name="network_edit_auto_up">啟動時自動啟用</string>
     <string name="network_edit_stp">生成樹協議（STP）</string>
-    <string name="network_edit_nat">NAT（網路地址轉換）</string>
-    <string name="network_edit_category_ipv4">IPv4 地址</string>
-    <string name="network_edit_ipv4_hint">IPv4 CIDR（例如 192.168.1.1/24）</string>
-    <string name="network_edit_category_dns">DNS 伺服器</string>
-    <string name="network_edit_dns_hint">DNS 伺服器（例如 8.8.8.8）</string>
-    <string name="network_edit_category_ipv6">IPv6 地址</string>
-    <string name="network_edit_ipv6_hint">IPv6 CIDR（例如 fd00::1/64）</string>
-    <string name="network_edit_no_addresses">未配置地址。</string>
-    <string name="network_edit_remove_address">移除地址</string>
-    <string name="network_edit_category_dhcp">DHCP 服務</string>
-    <string name="network_edit_dhcp_enabled">啟用 DHCP 服務</string>
-    <string name="network_edit_dhcp_start_hint">地址池起始（例如 192.168.1.100）</string>
-    <string name="network_edit_dhcp_end_hint">地址池結束（例如 192.168.1.200）</string>
-    <string name="network_edit_btn_save">儲存</string>
     <string name="network_edit_error_name_empty">網路名稱不能為空</string>
     <string name="network_edit_error_name_duplicate">已存在同名網路</string>
     <string name="network_edit_error_bridge_empty">網橋名稱不能為空</string>
     <string name="network_edit_error_bridge_invalid">必須以字母開頭，且只能包含字母、數字、連字元或下劃線</string>
-    <string name="network_edit_error_address_invalid">無效的 CIDR 地址</string>
-    <string name="network_edit_error_mac_invalid">無效的 MAC 地址格式</string>
     <string name="network_edit_error_not_found">未找到網路配置</string>
     <string name="network_edit_error_bridge_duplicate">已存在使用此網橋名稱的網路</string>
-    <string name="network_edit_error_mac_duplicate">已存在使用此 MAC 地址的網路</string>
     <string name="network_edit_error_ipv4_overlap">IPv4 子網 %1$s 與網路"%2$s"（%3$s）重疊</string>
     <string name="network_edit_error_ipv6_overlap">IPv6 子網 %1$s 與網路"%2$s"（%3$s）重疊</string>
-    <string name="network_edit_error_dhcp_invalid">DHCP 地址池起始地址必須小於結束地址</string>
-    <string name="network_edit_error_dhcp_start_invalid">無效的 DHCP 地址池起始地址</string>
-    <string name="network_edit_error_dhcp_end_invalid">無效的 DHCP 地址池結束地址</string>
-    <string name="network_edit_error_ipv4_not_added">IPv4 地址輸入框不為空，請先新增或清空</string>
-    <string name="network_edit_error_ipv6_not_added">IPv6 地址輸入框不為空，請先新增或清空</string>
-    <string name="network_edit_error_dns_not_added">DNS 伺服器輸入框不為空，請先新增或清空</string>
-    <string name="network_edit_error_dns_invalid">無效的 DNS 伺服器地址</string>
-    <string name="network_edit_error_dns_empty">至少需要一個 DNS 伺服器</string>
     <string name="network_edit_save">儲存網路</string>
     <string name="network_edit_running_banner">網路正在執行，請先停止後再編輯。</string>
     <string name="network_edit_bridge_type">網橋型別</string>
@@ -800,12 +748,6 @@
     <string name="network_info_mac">MAC 地址</string>
     <string name="network_info_auto_up">自動啟動</string>
     <string name="network_info_stp">STP</string>
-    <string name="network_info_nat">NAT</string>
-    <string name="network_info_dhcp">DHCP 伺服器</string>
-    <string name="network_info_dhcp_range">DHCP 範圍</string>
-    <plurals name="network_info_dhcp_pool">
-        <item quantity="other">%1$s - %2$s (%3$d個地址)</item>
-    </plurals>
     <string name="network_info_created">建立時間</string>
     <string name="network_info_enabled">已啟用</string>
     <string name="network_info_disabled">已停用</string>
@@ -829,7 +771,6 @@
     <string name="vnc_display_title">VNC 顯示器</string>
     <string name="vnc_display_connecting">正在連線…</string>
     <string name="vnc_display_connected">已連線 - %1$dx%2$d</string>
-    <string name="vnc_display_disconnected">已斷開連線</string>
     <string name="vnc_display_reconnecting">正在重連 (%1$d/%2$d)…</string>
     <string name="vnc_display_reconnect_failed">重連失敗，已嘗試 %1$d 次</string>
     <string name="vnc_display_connect_failed">無法連線到 VNC 伺服器</string>
@@ -906,11 +847,6 @@
 
     <string name="hugepage_title">GH-Hugepage-Reserve 管理</string>
     <string name="hugepage_subtitle">管理模組設定</string>
-    <string name="hugepage_section_status">狀態</string>
-    <string name="hugepage_section_stats">統計資訊</string>
-    <string name="hugepage_section_actions">操作</string>
-    <string name="hugepage_module_loaded">模組已載入</string>
-    <string name="hugepage_module_enabled">模組狀態</string>
     <string name="hugepage_not_loaded">核心模組未載入。</string>
     <string name="hugepage_not_installed">Magisk 模組未安裝。</string>
     <string name="hugepage_not_installed_desc">gh-hugepage-reserve Magisk 模組未安裝，請先下載並安裝。</string>
diff --git a/app/src/main/res/values/strings.xml b/app/src/main/res/values/strings.xml
index 2183e88de..d597a2bbd 100644
--- a/app/src/main/res/values/strings.xml
+++ b/app/src/main/res/values/strings.xml
@@ -137,12 +137,7 @@
     <string name="vm_info_console_vnc_ext_select">VNC on external Display</string>
 
     <string name="vm_info_logs">Logs</string>
-    <string name="vm_info_logs_chooser_title">View Logs</string>
-    <string name="vm_info_logs_title">Logs - %1$s</string>
     <string name="vm_info_logs_no_logs">No logs available.</string>
-    <string name="vm_info_logs_copy">Copy</string>
-    <string name="vm_info_logs_save">Save</string>
-    <string name="vm_info_logs_copied">Logs copied to clipboard.</string>
     <string name="vm_info_logs_save_failed">Failed to save logs.</string>
 
     <string name="notif_channel_vm_events">VM Events</string>
@@ -274,7 +269,6 @@
     <string name="edit_vm_kernel_microdroid">System MicroDroid kernel</string>
     <string name="edit_vm_kernel_external">Select an external file</string>
     <string name="edit_vm_kernel_not_found">Target kernel is not exists: %1$s</string>
-    <string name="edit_vm_boot_uefi">Boot with UEFI</string>
     <string name="edit_vm_boot_protocol">Boot protocol</string>
     <string name="edit_vm_boot_protocol_uefi">UEFI</string>
     <string name="edit_vm_boot_protocol_linux">Linux boot protocol</string>
@@ -286,15 +280,12 @@
     <string name="edit_vm_kernel_source_image">Disk image</string>
     <string name="edit_vm_kernel_source_manual">Manual</string>
     <string name="edit_vm_boot_image_disk">Boot disk</string>
-    <string name="edit_vm_boot_image_disk_title">Select boot disk</string>
     <string name="edit_vm_boot_entry">Boot entry</string>
     <string name="edit_vm_boot_entry_auto">Auto (bootloader default)</string>
-    <string name="edit_vm_boot_entry_auto_hint">Follows guest kernel updates automatically</string>
     <string name="edit_vm_boot_entry_default_mark">%1$s (default)</string>
     <string name="edit_vm_boot_entry_builtin">DroidVM built-in Linux kernel</string>
     <string name="edit_vm_boot_entry_dma_warn">Missing DMA_RESTRICTED_POOL</string>
     <string name="edit_vm_boot_detect_title">Detected boot files</string>
-    <string name="edit_vm_boot_detect_entry">entry</string>
     <string name="edit_vm_boot_detect_kernel">Kernel</string>
     <string name="edit_vm_boot_detect_initrd">initrd</string>
     <string name="edit_vm_boot_detect_cmdline">Kernel cmdline</string>
@@ -302,22 +293,17 @@
     <string name="edit_vm_boot_detect_scanning">Scanning...</string>
     <string name="edit_vm_boot_detect_failed">Scan failed: %1$s</string>
     <string name="edit_vm_boot_detect_no_disk">No disk image configured for this VM</string>
-    <string name="edit_vm_boot_detect_root_warn">root= names a physical device; enable auto-fix or override the cmdline</string>
     <string name="edit_vm_boot_rescan">Rescan</string>
     <string name="edit_vm_boot_vdafix">Auto-fix root= device</string>
-    <string name="edit_vm_boot_vdafix_hint">Rewrites root=/dev/sdX to PARTUUID for virtio</string>
     <string name="edit_vm_boot_wait">Boot menu countdown (seconds)</string>
-    <string name="edit_vm_boot_wait_hint">0 = boot immediately without menu</string>
     <string name="edit_vm_boot_wait_invalid">Must be a number of seconds</string>
     <string name="edit_vm_boot_cmdline_override">Kernel cmdline override (empty = from image)</string>
-    <string name="edit_vm_boot_cmdline_override_hint">Empty = use cmdline from the image</string>
     <string name="edit_vm_boot_menu_title">Select boot entry -- %1$s</string>
     <string name="edit_vm_boot_menu_boot">Boot</string>
     <string name="edit_vm_boot_menu_boot_in">Boot (%1$d)</string>
     <string name="edit_vm_boot_menu_remember">Remember this choice</string>
     <string name="edit_vm_boot_menu_fallback">Pinned entry "%1$s" not found; using default</string>
     <string name="edit_vm_boot_protected_dma_warn">This kernel lacks CONFIG_DMA_RESTRICTED_POOL.\nUnder a protected VM the guest cannot share DMA memory with the host, so virtio devices (disk/network) will fail to start.\nUse the built-in kernel, or rebuild with CONFIG_DMA_RESTRICTED_POOL.</string>
-    <string name="edit_vm_boot_uefi_hint">To boot a Linux kernel directly, please disable UEFI</string>
     <string name="kernel_analysis_title">Kernel analysis</string>
     <string name="kernel_analysis_analyze">Analyze</string>
     <string name="kernel_analysis_hint">Analyze the image\'s kernel/initrd over the network before importing</string>
@@ -663,22 +649,12 @@
     <string name="download_failed">Failed: %1$s</string>
     <string name="download_cancelled">Cancelled</string>
     <string name="download_file_icon_desc">File icon</string>
-    <string name="download_exit_title">Download in progress</string>
-    <string name="download_exit_message">A download is still in progress. Leaving now will cancel it and delete the partial file. Are you sure?</string>
     <string name="download_paused">Paused...</string>
-    <string name="download_paused_network">Paused, waiting for network...</string>
-    <string name="download_paused_retry">Connection interrupted, retrying...</string>
-    <string name="download_paused_wifi">Paused, waiting for Wi-Fi...</string>
     <string name="download_retrying">Connection lost, retrying (%1$d/%2$d)...</string>
     <string name="download_one_at_a_time">A download is already in progress. Please wait for it to finish.</string>
     <string name="download_background_toast">Download continues in the background. Check the notification shade.</string>    <string name="download_error_start">Could not start the download. Make sure the system Download Manager is enabled.</string>
 
-    <string name="notif_channel_downloads">Downloads</string>
-    <string name="notif_channel_downloads_desc">Disk image download notifications</string>
     <string name="notif_download_complete_title">Import complete</string>
-    <string name="notif_download_complete_text">\"%1$s\" was added to the disk list.</string>
-    <string name="notif_download_failed_title">Download failed</string>
-    <string name="notif_download_failed_text">Failed to download \"%1$s\".</string>
     <string name="notif_channel_downloads_progress">Downloading</string>
     <string name="notif_channel_downloads_progress_desc">Ongoing download progress</string>
     <string name="notif_download_connecting">Connecting...</string>
@@ -715,10 +691,6 @@
     <string name="test_build_warning_message">You are running a test build of DroidVM.\n\nThis version is for testing purposes only and may contain bugs or incomplete features. Data loss or instability may occur.\n\nPlease report any issues on GitHub.</string>
     <string name="test_build_warning_hide">Don\'t show again</string>
 
-    <plurals name="network_item_info">
-        <item quantity="one">bridge: %1$s \u00B7 %2$d address</item>
-        <item quantity="other">bridge: %1$s \u00B7 %2$d addresses</item>
-    </plurals>
     <string name="network_state_stopped">Stopped</string>
     <string name="network_state_starting">Starting</string>
     <string name="network_state_running">Running</string>
@@ -736,39 +708,14 @@
     <string name="network_edit_mac_hint">MAC address (e.g. 02:42:ac:11:00:01)</string>
     <string name="network_edit_auto_up">Bring up on start</string>
     <string name="network_edit_stp">Spanning Tree Protocol (STP)</string>
-    <string name="network_edit_nat">NAT (Network Address Translate)</string>
-    <string name="network_edit_category_ipv4">IPv4 Addresses</string>
-    <string name="network_edit_ipv4_hint">IPv4 CIDR (e.g. 192.168.1.1/24)</string>
-    <string name="network_edit_category_dns">DNS Servers</string>
-    <string name="network_edit_dns_hint">DNS server (e.g. 8.8.8.8)</string>
-    <string name="network_edit_category_ipv6">IPv6 Addresses</string>
-    <string name="network_edit_ipv6_hint">IPv6 CIDR (e.g. fd00::1/64)</string>
-    <string name="network_edit_no_addresses">No addresses configured.</string>
-    <string name="network_edit_remove_address">Remove address</string>
-    <string name="network_edit_category_dhcp">DHCP Server</string>
-    <string name="network_edit_dhcp_enabled">Enable DHCP server</string>
-    <string name="network_edit_dhcp_start_hint">Pool start (e.g. 192.168.1.100)</string>
-    <string name="network_edit_dhcp_end_hint">Pool end (e.g. 192.168.1.200)</string>
-    <string name="network_edit_btn_save">Save</string>
     <string name="network_edit_error_name_empty">Network name is required</string>
     <string name="network_edit_error_name_duplicate">A network with this name already exists</string>
     <string name="network_edit_error_bridge_empty">Bridge name is required</string>
     <string name="network_edit_error_bridge_invalid">Must start with a letter and contain only letters, digits, hyphens, or underscores</string>
-    <string name="network_edit_error_address_invalid">Invalid CIDR address</string>
-    <string name="network_edit_error_mac_invalid">Invalid MAC address format</string>
     <string name="network_edit_error_not_found">Network configuration not found</string>
     <string name="network_edit_error_bridge_duplicate">A network with this bridge name already exists</string>
-    <string name="network_edit_error_mac_duplicate">A network with this MAC address already exists</string>
     <string name="network_edit_error_ipv4_overlap">IPv4 subnet %1$s overlaps with network \"%2$s\" (%3$s)</string>
     <string name="network_edit_error_ipv6_overlap">IPv6 subnet %1$s overlaps with network \"%2$s\" (%3$s)</string>
-    <string name="network_edit_error_dhcp_invalid">DHCP pool start must be before pool end</string>
-    <string name="network_edit_error_dhcp_start_invalid">Invalid DHCP pool start address</string>
-    <string name="network_edit_error_dhcp_end_invalid">Invalid DHCP pool end address</string>
-    <string name="network_edit_error_ipv4_not_added">IPv4 address input is not empty, please add it first or clear the field</string>
-    <string name="network_edit_error_ipv6_not_added">IPv6 address input is not empty, please add it first or clear the field</string>
-    <string name="network_edit_error_dns_not_added">DNS server input is not empty, please add it first or clear the field</string>
-    <string name="network_edit_error_dns_invalid">Invalid DNS server address</string>
-    <string name="network_edit_error_dns_empty">At least one DNS server is required</string>
     <string name="network_edit_save">Save network</string>
     <string name="network_edit_running_banner">This network is running. Stop it before editing.</string>
     <string name="network_edit_bridge_type">Bridge type</string>
@@ -838,13 +785,6 @@
     <string name="network_info_mac">MAC Address</string>
     <string name="network_info_auto_up">Auto start</string>
     <string name="network_info_stp">STP</string>
-    <string name="network_info_nat">NAT</string>
-    <string name="network_info_dhcp">DHCP Server</string>
-    <string name="network_info_dhcp_range">DHCP Range</string>
-    <plurals name="network_info_dhcp_pool">
-        <item quantity="one">%1$s - %2$s (%3$d address)</item>
-        <item quantity="other">%1$s - %2$s (%3$d addresses)</item>
-    </plurals>
     <string name="network_info_created">Created</string>
     <string name="network_info_enabled">Enabled</string>
     <string name="network_info_disabled">Disabled</string>
@@ -868,7 +808,6 @@
     <string name="vnc_display_title">VNC Display</string>
     <string name="vnc_display_connecting">Connecting\u2026</string>
     <string name="vnc_display_connected">Connected - %1$dx%2$d</string>
-    <string name="vnc_display_disconnected">Disconnected</string>
     <string name="vnc_display_reconnecting">Reconnecting (%1$d/%2$d)\u2026</string>
     <string name="vnc_display_reconnect_failed">Reconnect failed after %1$d attempts</string>
     <string name="vnc_display_connect_failed">Failed to connect to VNC server</string>
@@ -945,11 +884,6 @@
 
     <string name="hugepage_title">GH-Hugepage-Reserve Management</string>
     <string name="hugepage_subtitle">Manage module settings</string>
-    <string name="hugepage_section_status">Status</string>
-    <string name="hugepage_section_stats">Statistics</string>
-    <string name="hugepage_section_actions">Actions</string>
-    <string name="hugepage_module_loaded">Module Loaded</string>
-    <string name="hugepage_module_enabled">Module Status</string>
     <string name="hugepage_not_loaded">Kernel module is not loaded.</string>
     <string name="hugepage_not_installed">Magisk module is not installed.</string>
     <string name="hugepage_not_installed_desc">The gh-hugepage-reserve Magisk module is not installed. Please download and install it first.</string>

From ab7e116e422590330005eefd21060b9d2adbb773 Mon Sep 17 00:00:00 2001
From: BigfootACA <bigfoot@classfun.cn>
Date: Mon, 22 Jun 2026 13:43:27 +0800
Subject: [PATCH 033/182] ServerContext: kill netbox when startup

Signed-off-by: BigfootACA <bigfoot@classfun.cn>
---
 .../java/cn/classfun/droidvm/daemon/server/ServerContext.java    | 1 +
 1 file changed, 1 insertion(+)

diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/server/ServerContext.java b/app/src/main/java/cn/classfun/droidvm/daemon/server/ServerContext.java
index 00a2e61d4..204573912 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/server/ServerContext.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/server/ServerContext.java
@@ -36,6 +36,7 @@ public ServerContext() {
         run("pkill dnsmasq");
         run("pkill gvswitch");
         run("pkill pbridge");
+        run("pkill netbox");
         run("pkill -f %s", getPrebuiltBinaryPath("crosvm"));
         run("pkill -f %s", getPrebuiltBinaryPath("qemu-system-aarch64"));
         try {

From 3227b797dbb7ce24057028007f288b4f210e5d4f Mon Sep 17 00:00:00 2001
From: BigfootACA <bigfoot@classfun.cn>
Date: Mon, 22 Jun 2026 14:17:33 +0800
Subject: [PATCH 034/182] DaemonHelper: revert restartDaemon

Signed-off-by: BigfootACA <bigfoot@classfun.cn>
---
 .../cn/classfun/droidvm/lib/daemon/DaemonHelper.java   | 10 ++++++----
 1 file changed, 6 insertions(+), 4 deletions(-)

diff --git a/app/src/main/java/cn/classfun/droidvm/lib/daemon/DaemonHelper.java b/app/src/main/java/cn/classfun/droidvm/lib/daemon/DaemonHelper.java
index d23c1c673..bd4ae2480 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/daemon/DaemonHelper.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/daemon/DaemonHelper.java
@@ -15,6 +15,7 @@
 import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
 import static cn.classfun.droidvm.lib.utils.StringUtils.pathJoin;
 import static cn.classfun.droidvm.lib.utils.ThreadUtils.runOnPool;
+import static cn.classfun.droidvm.lib.utils.ThreadUtils.threadSleepOrKill;
 
 import android.os.Handler;
 import android.os.Looper;
@@ -142,10 +143,11 @@ public boolean stopDaemon() {
     }
 
     public boolean restartDaemon() {
-        // Force-launch: the new daemon kills the running one and takes the lock
-        // itself, which is atomic and avoids waiting on a possibly-stuck stop.
-        Log.i(TAG, "Restarting daemon (force takeover)");
-        return startDaemon(true);
+        Log.i(TAG, "Restarting daemon");
+        stopDaemon();
+        while (isDaemonRunning())
+            threadSleepOrKill(1000);
+        return startDaemon();
     }
 
 

From 158ae517f8ed357462f926c0d8402602875b7a2e Mon Sep 17 00:00:00 2001
From: HuJK <gh@hujk.org>
Date: Mon, 22 Jun 2026 15:01:50 +0800
Subject: [PATCH 035/182] (fix)NativeProcess + fix state scan on wrong
 interface

---
 .gitignore                                    |   1 +
 .../daemon/network/NetworkInstanceStore.java  |   6 +-
 .../network/backend/ManagedProcess.java       | 108 ++++++++++--------
 .../classfun/droidvm/lib/run/RunResult.java   |   2 +-
 .../ui/network/info/NetworkInfoActivity.java  |   1 -
 5 files changed, 66 insertions(+), 52 deletions(-)

diff --git a/.gitignore b/.gitignore
index 51138b689..2625919c3 100644
--- a/.gitignore
+++ b/.gitignore
@@ -4,6 +4,7 @@
 /.idea
 /.vscode
 /DroidVM-Prebuilt-Root
+/DroidVM-Prebuilt-Root_
 .DS_Store
 /build
 /captures
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/network/NetworkInstanceStore.java b/app/src/main/java/cn/classfun/droidvm/daemon/network/NetworkInstanceStore.java
index 0ffefcd80..f0f4fd5b3 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/network/NetworkInstanceStore.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/network/NetworkInstanceStore.java
@@ -21,6 +21,7 @@
 import cn.classfun.droidvm.daemon.network.backend.iptables.IptablesBackend;
 import cn.classfun.droidvm.daemon.server.ServerContext;
 import cn.classfun.droidvm.lib.store.base.DataStore;
+import cn.classfun.droidvm.lib.store.network.BridgeType;
 import cn.classfun.droidvm.lib.store.network.NetworkConfig;
 import cn.classfun.droidvm.lib.store.network.NetworkConfigValidator;
 import cn.classfun.droidvm.lib.utils.JsonUtils;
@@ -149,7 +150,10 @@ public JSONArray listNetworks() {
             try {
                 var obj = inst.toInfoJson();
                 var s = inst.getState();
-                if (s == RUNNING) {
+                // Only a Linux-bridge network has a real kernel device to query
+                // via netbox; gvisor is a userspace data path (gvswitch) with no
+                // kernel interface, so querying it just spams ENODEV warnings.
+                if (s == RUNNING && inst.getBridgeType() == BridgeType.LINUX) {
                     var br = inst.item.optString("bridge_name", "");
                     obj.put("live_interfaces", backend.listBridgeInterfaces(br));
                     obj.put("live_addresses", backend.listAddresses(br));
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/ManagedProcess.java b/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/ManagedProcess.java
index 1ae0da1b0..59b7952cd 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/ManagedProcess.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/ManagedProcess.java
@@ -8,13 +8,14 @@
 import androidx.annotation.Nullable;
 
 import java.io.BufferedReader;
+import java.io.InputStream;
 import java.io.InputStreamReader;
-import java.io.InterruptedIOException;
 import java.util.ArrayDeque;
 import java.util.ArrayList;
 import java.util.List;
 import java.util.concurrent.TimeUnit;
 
+import cn.classfun.droidvm.lib.natives.NativeProcess;
 import cn.classfun.droidvm.lib.utils.ProcessUtils;
 
 /**
@@ -29,12 +30,15 @@ public interface LineListener {
 
     private final String tag;
     private final String logTag;
-    private Process process = null;
+    private NativeProcess process = null;
     private Thread monitor = null;
+    private Thread errPump = null;
     private volatile boolean running = false;
     private volatile int exitCode = -1;
     private Runnable onUnexpectedExit = null;
     private volatile LineListener lineListener = null;
+    /** Serialises line delivery across the stdout/stderr pumps. */
+    private final Object listenerLock = new Object();
     /** Recent merged stdout+stderr lines, surfaced to the network info UI. */
     private static final int LOG_CAP = 1000;
     private final ArrayDeque<String> logBuffer = new ArrayDeque<>();
@@ -61,44 +65,37 @@ public synchronized boolean start(@NonNull List<String> args) {
         stop();
         Log.i(logTag, fmt("Starting: %s", String.join(" ", args)));
         appendLog(fmt("=== starting: %s ===", String.join(" ", args)));
+        NativeProcess proc;
         try {
-            var pb = new ProcessBuilder(args);
-            pb.redirectErrorStream(true);
             exitCode = -1;
-            process = pb.start();
+            proc = new NativeProcess.Builder(args.toArray(new String[0])).start();
         } catch (Exception e) {
             Log.e(logTag, "Failed to start process", e);
             process = null;
             running = false;
             return false;
         }
+        process = proc;
         running = true;
-        monitor = new Thread(this::monitorThread, fmt("mon-%s", tag));
+        // NativeProcess keeps stdout/stderr on separate pipes (no
+        // redirectErrorStream); pump both into the same log/listener so the
+        // merged-output behaviour callers rely on is preserved.
+        var ep = new Thread(() -> pump(proc.getErrorStream()), fmt("err-%s", tag));
+        ep.setDaemon(true);
+        errPump = ep;
+        monitor = new Thread(() -> monitorThread(proc, ep), fmt("mon-%s", tag));
         monitor.setDaemon(true);
+        ep.start();
         monitor.start();
         return true;
     }
 
-    private void monitorThread() {
-        var proc = process;
-        if (proc == null) return;
+    private void monitorThread(@NonNull NativeProcess proc, @NonNull Thread errThread) {
         try {
-            try (var reader = new BufferedReader(
-                new InputStreamReader(proc.getInputStream()))) {
-                String line;
-                while ((line = reader.readLine()) != null) {
-                    Log.d(logTag, line);
-                    appendLog(line);
-                    var listener = lineListener;
-                    if (listener != null) {
-                        try {
-                            listener.onLine(line);
-                        } catch (Exception e) {
-                            Log.w(logTag, "Line listener failed", e);
-                        }
-                    }
-                }
-            }
+            // stdout drains until the child closes it (i.e. exits / is killed)
+            pump(proc.getInputStream());
+            // flush any tail of stderr before reporting the exit
+            errThread.join();
             int code = proc.waitFor();
             exitCode = code;
             boolean unexpected = running;
@@ -111,13 +108,42 @@ private void monitorThread() {
             } else {
                 Log.i(logTag, fmt("Process exited (code %d)", code));
             }
-        } catch (InterruptedException | InterruptedIOException e) {
+        } catch (InterruptedException e) {
             Thread.currentThread().interrupt();
             Log.d(logTag, "Process monitor interrupted");
         } catch (Exception e) {
             Log.e(logTag, "Process monitor failed", e);
         } finally {
             running = false;
+            proc.close();
+        }
+    }
+
+    /** Reads one output stream line-by-line until EOF. */
+    private void pump(@NonNull InputStream in) {
+        try (var reader = new BufferedReader(new InputStreamReader(in))) {
+            String line;
+            while ((line = reader.readLine()) != null)
+                handleLine(line);
+        } catch (Exception e) {
+            // Expected when stop() kills the child and the pipe closes mid-read.
+            Log.d(logTag, fmt("output stream closed: %s", e.getMessage()));
+        }
+    }
+
+    /** Logs, buffers and dispatches one line; serialised so listeners see one
+     *  line at a time (as they did when stderr was merged into stdout). */
+    private void handleLine(@NonNull String line) {
+        Log.d(logTag, line);
+        appendLog(line);
+        var listener = lineListener;
+        if (listener == null) return;
+        synchronized (listenerLock) {
+            try {
+                listener.onLine(line);
+            } catch (Exception e) {
+                Log.w(logTag, "Line listener failed", e);
+            }
         }
     }
 
@@ -134,6 +160,10 @@ public synchronized void stop() {
             monitor.interrupt();
             monitor = null;
         }
+        if (errPump != null) {
+            errPump.interrupt();
+            errPump = null;
+        }
         var proc = process;
         process = null;
         if (proc == null) return;
@@ -145,39 +175,19 @@ public synchronized void stop() {
             Thread.currentThread().interrupt();
         }
         proc.destroyForcibly();
-        try {
-            proc.waitFor();
-        } catch (InterruptedException ignored) {
-            Thread.currentThread().interrupt();
-        }
+        proc.waitFor();
+        proc.close();
     }
 
     /** Sends a signal (e.g. SIGHUP for config reload) to the running process. */
     public synchronized boolean signal(int signal) {
         var proc = process;
         if (proc == null || !proc.isAlive()) return false;
-        int pid = pidOf(proc);
+        int pid = proc.pid();
         if (pid <= 0) return false;
         return ProcessUtils.shellKillProcess(pid, signal);
     }
 
-    /** java.lang.Process.pid() is not in the Android compile SDK; reflect. */
-    private static int pidOf(@NonNull Process proc) {
-        try {
-            var method = Process.class.getMethod("pid");
-            return (int) (long) (Long) method.invoke(proc);
-        } catch (Exception ignored) {
-        }
-        try {
-            var field = proc.getClass().getDeclaredField("pid");
-            field.setAccessible(true);
-            return field.getInt(proc);
-        } catch (Exception e) {
-            Log.w("ManagedProcess", "Failed to determine process pid", e);
-            return -1;
-        }
-    }
-
     private void appendLog(@NonNull String line) {
         synchronized (logBuffer) {
             while (logBuffer.size() >= LOG_CAP) logBuffer.removeFirst();
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/run/RunResult.java b/app/src/main/java/cn/classfun/droidvm/lib/run/RunResult.java
index cdb90c97e..4c42bfdfb 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/run/RunResult.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/run/RunResult.java
@@ -35,6 +35,6 @@ public String getOutString() {
 
     @NonNull
     public String getErrString() {
-        return String.join("\n", getOut()).trim();
+        return String.join("\n", getErr()).trim();
     }
 }
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/network/info/NetworkInfoActivity.java b/app/src/main/java/cn/classfun/droidvm/ui/network/info/NetworkInfoActivity.java
index debc6eb9e..3e4149902 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/network/info/NetworkInfoActivity.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/network/info/NetworkInfoActivity.java
@@ -459,7 +459,6 @@ private void addToolRow(@NonNull LinearLayout container, @NonNull String key, bo
         var attrs = new int[]{android.R.attr.selectableItemBackground};
         try (var ta = getTheme().obtainStyledAttributes(attrs)) {
             view.setBackgroundResource(ta.getResourceId(0, 0));
-            ta.recycle();
             view.setOnClickListener(v -> {
                 var intent = new Intent(this, NetworkToolLogActivity.class);
                 intent.putExtra("network_id", networkId.toString());

From 874f410135dabdef8098e2f63c6fa3ff6bafcf9e Mon Sep 17 00:00:00 2001
From: BigfootACA <bigfoot@classfun.cn>
Date: Mon, 22 Jun 2026 17:13:30 +0800
Subject: [PATCH 036/182] lib: introduce LogHelper for fast diagnostic

Signed-off-by: BigfootACA <bigfoot@classfun.cn>
---
 .../droidvm/lib/daemon/VMEventHandler.java    |  3 +
 .../classfun/droidvm/lib/diag/LogHelper.java  | 89 +++++++++++++++++++
 .../droidvm/lib/diag/LogHelperHandler.java    | 56 ++++++++++++
 .../handler/BadSM8650HostKernelHandler.java   | 30 +++++++
 .../diag/handler/HugePageFaultHandler.java    | 30 +++++++
 .../OsKernelWithoutRestrictPoolHandler.java   | 29 ++++++
 .../UnsupportedGunyahVersionHandler.java      | 30 +++++++
 .../handler/UnsupportedSandboxHandler.java    | 29 ++++++
 app/src/main/res/values-zh-rCN/strings.xml    | 15 ++++
 app/src/main/res/values-zh-rTW/strings.xml    | 15 ++++
 app/src/main/res/values/strings.xml           | 15 ++++
 11 files changed, 341 insertions(+)
 create mode 100644 app/src/main/java/cn/classfun/droidvm/lib/diag/LogHelper.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/lib/diag/LogHelperHandler.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/lib/diag/handler/BadSM8650HostKernelHandler.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/lib/diag/handler/HugePageFaultHandler.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/lib/diag/handler/OsKernelWithoutRestrictPoolHandler.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/lib/diag/handler/UnsupportedGunyahVersionHandler.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/lib/diag/handler/UnsupportedSandboxHandler.java

diff --git a/app/src/main/java/cn/classfun/droidvm/lib/daemon/VMEventHandler.java b/app/src/main/java/cn/classfun/droidvm/lib/daemon/VMEventHandler.java
index 86ad89895..4d679c7b0 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/daemon/VMEventHandler.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/daemon/VMEventHandler.java
@@ -37,6 +37,7 @@
 import java.util.UUID;
 
 import cn.classfun.droidvm.R;
+import cn.classfun.droidvm.lib.diag.LogHelper;
 import cn.classfun.droidvm.lib.store.vm.VMState;
 import cn.classfun.droidvm.lib.store.vm.VMStore;
 import cn.classfun.droidvm.lib.ui.UIContext;
@@ -57,6 +58,7 @@ public final class VMEventHandler implements
     private int activeActivityCount = 0;
     private WeakReference<Activity> currentActivity = new WeakReference<>(null);
     private volatile boolean hashMismatchShown = false;
+    private final LogHelper logHelper = new LogHelper(this);
 
     public interface ActivityTask {
         void run(@NonNull Activity activity);
@@ -140,6 +142,7 @@ public void onVMExited(UUID vmId, String vmName, int exitCode, JSONObject data)
 
     @Override
     public void onDaemonEvent(@NonNull JSONObject msg) {
+        logHelper.onDaemonEvent(msg);
         var type = msg.optString("type", "");
         if (!type.equals("event")) return;
         var data = msg.optJSONObject("data");
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/diag/LogHelper.java b/app/src/main/java/cn/classfun/droidvm/lib/diag/LogHelper.java
new file mode 100644
index 000000000..c039d5d9f
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/lib/diag/LogHelper.java
@@ -0,0 +1,89 @@
+package cn.classfun.droidvm.lib.diag;
+
+import androidx.annotation.NonNull;
+
+import org.json.JSONObject;
+
+import java.net.URLDecoder;
+import java.nio.charset.StandardCharsets;
+import java.util.HashMap;
+import java.util.HashSet;
+import java.util.Map;
+import java.util.Set;
+import java.util.UUID;
+
+import cn.classfun.droidvm.lib.daemon.DaemonConnection;
+import cn.classfun.droidvm.lib.daemon.VMEventHandler;
+import cn.classfun.droidvm.lib.diag.handler.BadSM8650HostKernelHandler;
+import cn.classfun.droidvm.lib.diag.handler.HugePageFaultHandler;
+import cn.classfun.droidvm.lib.diag.handler.OsKernelWithoutRestrictPoolHandler;
+import cn.classfun.droidvm.lib.diag.handler.UnsupportedGunyahVersionHandler;
+import cn.classfun.droidvm.lib.diag.handler.UnsupportedSandboxHandler;
+import cn.classfun.droidvm.lib.store.base.RingBuffer;
+
+public final class LogHelper implements DaemonConnection.EventListener {
+    private final VMEventHandler vmEventHandler;
+    private final Map<UUID, LogContext> vmLogContexts = new HashMap<>();
+
+    public LogHelper(VMEventHandler vmEventHandler) {
+        this.vmEventHandler = vmEventHandler;
+    }
+
+    private static class LogContext {
+        final UUID vmId;
+        final Map<String, RingBuffer> log = new HashMap<>();
+        final Set<LogHelperHandler> disabled = new HashSet<>();
+
+        private LogContext(UUID vmId) {
+            this.vmId = vmId;
+        }
+    }
+    private static final LogHelperHandler[] handlers = new LogHelperHandler[]{
+        new BadSM8650HostKernelHandler(),
+        new HugePageFaultHandler(),
+        new OsKernelWithoutRestrictPoolHandler(),
+        new UnsupportedGunyahVersionHandler(),
+        new UnsupportedSandboxHandler(),
+    };
+
+    @Override
+    public void onDaemonEvent(@NonNull JSONObject msg) {
+        var type = msg.optString("type", "");
+        if (!type.equals("event")) return;
+        var data = msg.optJSONObject("data");
+        if (data == null) return;
+        var vmId = UUID.fromString(data.optString("vm_id", ""));
+        var vmName = data.optString("vm_name", "");
+        var event = data.optString("event", "");
+        if (event.equals("exited")) {
+            vmLogContexts.remove(vmId);
+            return;
+        }
+        var logs = vmLogContexts.computeIfAbsent(vmId, k -> new LogContext(vmId));
+        if (!event.equals("output")) return;
+        var text = URLDecoder.decode(data.optString("data", ""), StandardCharsets.UTF_8);
+        var stream = data.optString("stream", "");
+        if (stream.isEmpty()) return;
+        var buff = logs.log.computeIfAbsent(stream, k -> new RingBuffer(4096));
+        buff.adds(text.getBytes(StandardCharsets.UTF_8));
+        var full = new String(buff.peekAll(), StandardCharsets.UTF_8);
+        for (var handler : handlers) {
+            if (logs.disabled.contains(handler)) continue;
+            if (!handler.match(vmId, stream, full)) continue;
+            vmEventHandler.queueActivityTask(act -> handler.show(act, vmId, vmName));
+            if (handler.isOnce())
+                logs.disabled.add(handler);
+        }
+    }
+
+    @Override
+    public void onDaemonConnected() {
+
+    }
+
+    @Override
+    public void onDaemonDisconnected() {
+
+    }
+
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/diag/LogHelperHandler.java b/app/src/main/java/cn/classfun/droidvm/lib/diag/LogHelperHandler.java
new file mode 100644
index 000000000..2c7028879
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/lib/diag/LogHelperHandler.java
@@ -0,0 +1,56 @@
+package cn.classfun.droidvm.lib.diag;
+
+import static android.content.Intent.ACTION_VIEW;
+
+import android.content.Context;
+import android.content.DialogInterface.OnClickListener;
+import android.content.Intent;
+import android.net.Uri;
+
+import androidx.annotation.NonNull;
+import androidx.annotation.StringRes;
+
+import com.google.android.material.dialog.MaterialAlertDialogBuilder;
+
+import java.util.UUID;
+
+import cn.classfun.droidvm.R;
+import cn.classfun.droidvm.lib.utils.FileUtils;
+
+public abstract class LogHelperHandler {
+    private static boolean hasGunyahInfo = false, isGunyah = false;
+    public boolean match(@NonNull UUID vmId, @NonNull String stream, @NonNull String text) {
+        return false;
+    }
+
+    public boolean isOnce() {
+        return true;
+    }
+
+    public abstract void show(@NonNull Context ctx, @NonNull UUID vmId, @NonNull String vmName);
+
+    protected static boolean isGunyah() {
+        if (!hasGunyahInfo) {
+            isGunyah = FileUtils.shellCheckExists("/dev/gunyah");
+            hasGunyahInfo = true;
+        }
+        return isGunyah;
+    }
+
+    protected static void showDialog(
+        @NonNull Context ctx,
+        @StringRes int urlId,
+        @StringRes int titleId,
+        @StringRes int messageId,
+        Object... args
+    ) {
+        var mab = new MaterialAlertDialogBuilder(ctx);
+        mab.setTitle(titleId);
+        mab.setMessage(ctx.getString(messageId, args));
+        mab.setPositiveButton(android.R.string.ok, null);
+        var url = ctx.getString(urlId);
+        OnClickListener cb = (d, w) -> ctx.startActivity(new Intent(ACTION_VIEW, Uri.parse(url)));
+        if (!url.isEmpty()) mab.setNeutralButton(R.string.log_helper_open_url, cb);
+        mab.show();
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/diag/handler/BadSM8650HostKernelHandler.java b/app/src/main/java/cn/classfun/droidvm/lib/diag/handler/BadSM8650HostKernelHandler.java
new file mode 100644
index 000000000..31f220796
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/lib/diag/handler/BadSM8650HostKernelHandler.java
@@ -0,0 +1,30 @@
+package cn.classfun.droidvm.lib.diag.handler;
+
+import android.content.Context;
+
+import androidx.annotation.NonNull;
+
+import java.util.UUID;
+
+import cn.classfun.droidvm.R;
+import cn.classfun.droidvm.lib.diag.LogHelperHandler;
+
+public final class BadSM8650HostKernelHandler extends LogHelperHandler {
+    @Override
+    public boolean match(@NonNull UUID vmId, @NonNull String stream, @NonNull String text) {
+        return
+            stream.equals("stderr") &&
+            text.contains("exiting with error 1: the architecture failed to build the vm") &&
+            text.contains("failed to initialize virtual machine No such device (os error 19)") &&
+            isGunyah();
+    }
+
+    @Override
+    public void show(@NonNull Context ctx, @NonNull UUID vmId, @NonNull String vmName) {
+        showDialog(ctx,
+            R.string.log_helper_bad_sm8650_kernel_url,
+            R.string.log_helper_bad_sm8650_kernel_title,
+            R.string.log_helper_bad_sm8650_kernel_message
+        );
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/diag/handler/HugePageFaultHandler.java b/app/src/main/java/cn/classfun/droidvm/lib/diag/handler/HugePageFaultHandler.java
new file mode 100644
index 000000000..cc69844f7
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/lib/diag/handler/HugePageFaultHandler.java
@@ -0,0 +1,30 @@
+package cn.classfun.droidvm.lib.diag.handler;
+
+import android.content.Context;
+
+import androidx.annotation.NonNull;
+
+import java.util.UUID;
+
+import cn.classfun.droidvm.R;
+import cn.classfun.droidvm.lib.diag.LogHelperHandler;
+
+public final class HugePageFaultHandler extends LogHelperHandler {
+    @Override
+    public boolean match(@NonNull UUID vmId, @NonNull String stream, @NonNull String text) {
+        return
+            stream.equals("stderr") &&
+            text.contains("page fault at 0x") &&
+            text.contains("vcpu hit unknown error: Out of memory");
+    }
+
+    @Override
+    public void show(@NonNull Context ctx, @NonNull UUID vmId, @NonNull String vmName) {
+        showDialog(ctx,
+            R.string.log_helper_huge_page_fault_url,
+            R.string.log_helper_huge_page_fault_title,
+            R.string.log_helper_huge_page_fault_message,
+            vmName
+        );
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/diag/handler/OsKernelWithoutRestrictPoolHandler.java b/app/src/main/java/cn/classfun/droidvm/lib/diag/handler/OsKernelWithoutRestrictPoolHandler.java
new file mode 100644
index 000000000..5316f4840
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/lib/diag/handler/OsKernelWithoutRestrictPoolHandler.java
@@ -0,0 +1,29 @@
+package cn.classfun.droidvm.lib.diag.handler;
+
+import android.content.Context;
+
+import androidx.annotation.NonNull;
+
+import java.util.UUID;
+
+import cn.classfun.droidvm.R;
+import cn.classfun.droidvm.lib.diag.LogHelperHandler;
+
+public final class OsKernelWithoutRestrictPoolHandler extends LogHelperHandler {
+    @Override
+    public boolean match(@NonNull UUID vmId, @NonNull String stream, @NonNull String text) {
+        return
+            stream.equals("stderr") &&
+            text.contains("host access to lent memory region at 0x");
+    }
+
+    @Override
+    public void show(@NonNull Context ctx, @NonNull UUID vmId, @NonNull String vmName) {
+        showDialog(ctx,
+            R.string.log_helper_no_restrict_pool_url,
+            R.string.log_helper_no_restrict_pool_title,
+            R.string.log_helper_no_restrict_pool_message,
+            vmName
+        );
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/diag/handler/UnsupportedGunyahVersionHandler.java b/app/src/main/java/cn/classfun/droidvm/lib/diag/handler/UnsupportedGunyahVersionHandler.java
new file mode 100644
index 000000000..8c55a0d60
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/lib/diag/handler/UnsupportedGunyahVersionHandler.java
@@ -0,0 +1,30 @@
+package cn.classfun.droidvm.lib.diag.handler;
+
+import android.content.Context;
+
+import androidx.annotation.NonNull;
+
+import java.util.UUID;
+
+import cn.classfun.droidvm.R;
+import cn.classfun.droidvm.lib.diag.LogHelperHandler;
+
+public final class UnsupportedGunyahVersionHandler extends LogHelperHandler {
+    @Override
+    public boolean match(@NonNull UUID vmId, @NonNull String stream, @NonNull String text) {
+        return
+            stream.equals("stderr") &&
+            text.contains("exiting with error 1: failed to create vm") &&
+            text.contains("Invalid argument (os error 22)") &&
+            isGunyah();
+    }
+
+    @Override
+    public void show(@NonNull Context ctx, @NonNull UUID vmId, @NonNull String vmName) {
+        showDialog(ctx,
+            R.string.nullptr,
+            R.string.log_helper_unsupported_gunyah_title,
+            R.string.log_helper_unsupported_gunyah_message
+        );
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/diag/handler/UnsupportedSandboxHandler.java b/app/src/main/java/cn/classfun/droidvm/lib/diag/handler/UnsupportedSandboxHandler.java
new file mode 100644
index 000000000..8a870273e
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/lib/diag/handler/UnsupportedSandboxHandler.java
@@ -0,0 +1,29 @@
+package cn.classfun.droidvm.lib.diag.handler;
+
+import android.content.Context;
+
+import androidx.annotation.NonNull;
+
+import java.util.UUID;
+
+import cn.classfun.droidvm.R;
+import cn.classfun.droidvm.lib.diag.LogHelperHandler;
+
+public final class UnsupportedSandboxHandler extends LogHelperHandler {
+    @Override
+    public boolean match(@NonNull UUID vmId, @NonNull String stream, @NonNull String text) {
+        return
+            stream.equals("stderr") &&
+            text.contains("\"/var/empty\" is not a directory, cannot create jail") &&
+            isGunyah();
+    }
+
+    @Override
+    public void show(@NonNull Context ctx, @NonNull UUID vmId, @NonNull String vmName) {
+        showDialog(ctx,
+            R.string.nullptr,
+            R.string.log_helper_unsupported_sandbox_title,
+            R.string.log_helper_unsupported_sandbox_message
+        );
+    }
+}
diff --git a/app/src/main/res/values-zh-rCN/strings.xml b/app/src/main/res/values-zh-rCN/strings.xml
index 0b3d2b57a..6343d8df8 100644
--- a/app/src/main/res/values-zh-rCN/strings.xml
+++ b/app/src/main/res/values-zh-rCN/strings.xml
@@ -879,4 +879,19 @@
     <string name="notification_permission_message">DroidVM 会在后台下载磁盘镜像，并通过通知显示进度。请允许通知，以便随时查看下载进度。</string>
     <string name="notification_permission_allow">继续</string>
     <string name="notification_permission_skip">暂不</string>
+
+    <string name="log_helper_open_url">打开</string>
+    <string name="log_helper_bad_sm8650_kernel_url" formatted="false">https://github.com/Droid-VM/DroidVM/wiki/%E9%97%AE%E9%A2%98%EF%BC%9AGunyah%E8%B5%84%E6%BA%90%E7%AE%A1%E7%90%86%E5%99%A8%E6%8B%92%E7%BB%9D%E5%90%AF%E5%8A%A8%E8%99%9A%E6%8B%9F%E6%9C%BA</string>
+    <string name="log_helper_bad_sm8650_kernel_title">Gunyah资源管理器拒绝启动虚拟机</string>
+    <string name="log_helper_bad_sm8650_kernel_message">您的设备运行的内核存在某些问题，请尝试更换或重新编译。\n请尝试开启或关闭"预分配大页"选项。\n打开浏览器查看更多信息。</string>
+    <string name="log_helper_huge_page_fault_url" formatted="false">https://github.com/Droid-VM/DroidVM/wiki/%E9%97%AE%E9%A2%98%EF%BC%9A%E8%99%9A%E6%8B%9F%E6%9C%BA%E8%BF%90%E8%A1%8C%E6%97%B6%E5%87%BA%E7%8E%B0%E5%86%85%E5%AD%98%E4%B8%8D%E8%B6%B3%E9%94%99%E8%AF%AF</string>
+    <string name="log_helper_huge_page_fault_title">大页内存不足</string>
+    <string name="log_helper_huge_page_fault_message">虚拟机 %1$s 遇到了大页内存不足的情况。\n请尝试修改内存大小，或者使用预分配模块。\n打开浏览器查看更多信息。</string>
+    <string name="log_helper_no_restrict_pool_url" formatted="false">https://github.com/Droid-VM/DroidVM/wiki/%E9%97%AE%E9%A2%98%EF%BC%9A%E8%99%9A%E6%8B%9F%E6%9C%BA%E7%9A%84%E7%B3%BB%E7%BB%9F%E4%B8%8D%E6%94%AF%E6%8C%81SWIOTLB-Restrict-DMA-Pool</string>
+    <string name="log_helper_no_restrict_pool_title">虚拟机内核功能缺失</string>
+    <string name="log_helper_no_restrict_pool_message">虚拟机 %1$s 的内核不支持 Restricted DMA Pool。\n请更换内核或使用DroidVM内置内核。\n打开浏览器查看更多信息。</string>
+    <string name="log_helper_unsupported_gunyah_title">不支持的Gunyah版本</string>
+    <string name="log_helper_unsupported_gunyah_message">您的设备上的Gunyah版本过旧（如骁龙8 Gen 2），请尝试更新系统或更换新的设备。</string>
+    <string name="log_helper_unsupported_sandbox_title">沙箱模式不支持</string>
+    <string name="log_helper_unsupported_sandbox_message">crosvm的沙箱模式在此平台不可用，请禁用沙箱模式。</string>
 </resources>
diff --git a/app/src/main/res/values-zh-rTW/strings.xml b/app/src/main/res/values-zh-rTW/strings.xml
index 45a1a6ef6..d775a02af 100644
--- a/app/src/main/res/values-zh-rTW/strings.xml
+++ b/app/src/main/res/values-zh-rTW/strings.xml
@@ -879,4 +879,19 @@
     <string name="notification_permission_message">DroidVM 會在背景下載磁碟映像，並透過通知顯示進度。請允許通知，以便隨時查看下載進度。</string>
     <string name="notification_permission_allow">繼續</string>
     <string name="notification_permission_skip">暫不</string>
+
+    <string name="log_helper_open_url">開啟</string>
+    <string name="log_helper_bad_sm8650_kernel_url" formatted="false">https://github.com/Droid-VM/DroidVM/wiki/%E9%97%AE%E9%A2%98%EF%BC%9AGunyah%E8%B5%84%E6%BA%90%E7%AE%A1%E7%90%86%E5%99%A8%E6%8B%92%E7%BB%9D%E5%90%AF%E5%8A%A8%E8%99%9A%E6%8B%9F%E6%9C%BA</string>
+    <string name="log_helper_bad_sm8650_kernel_title">Gunyah資源管理器拒絕啟動虛擬機器</string>
+    <string name="log_helper_bad_sm8650_kernel_message">您的裝置執行的核心存在某些問題，請嘗試更換或重新編譯。\n請嘗試開啟或關閉「預分配大頁」選項\n開啟瀏覽器查看更多資訊。</string>
+    <string name="log_helper_huge_page_fault_url" formatted="false">https://github.com/Droid-VM/DroidVM/wiki/%E9%97%AE%E9%A2%98%EF%BC%9A%E8%99%9A%E6%8B%9F%E6%9C%BA%E8%BF%90%E8%A1%8C%E6%97%B6%E5%87%BA%E7%8E%B0%E5%86%85%E5%AD%98%E4%B8%8D%E8%B6%B3%E9%94%99%E8%AF%AF</string>
+    <string name="log_helper_huge_page_fault_title">大頁記憶體不足</string>
+    <string name="log_helper_huge_page_fault_message">虛擬機器 %1$s 遇到了大頁記憶體不足的情況。\n請嘗試修改記憶體大小，或者使用預分配模組。\n開啟瀏覽器查看更多資訊。</string>
+    <string name="log_helper_no_restrict_pool_url" formatted="false">https://github.com/Droid-VM/DroidVM/wiki/%E9%97%AE%E9%A2%98%EF%BC%9A%E8%99%9A%E6%8B%9F%E6%9C%BA%E7%9A%84%E7%B3%BB%E7%BB%9F%E4%B8%8D%E6%94%AF%E6%8C%81SWIOTLB-Restrict-DMA-Pool</string>
+    <string name="log_helper_no_restrict_pool_title">虛擬機器核心功能缺失</string>
+    <string name="log_helper_no_restrict_pool_message">虛擬機器 %1$s 的核心不支援 Restricted DMA Pool。\n請更換核心或使用 DroidVM 內建核心。\n開啟瀏覽器查看更多資訊。</string>
+    <string name="log_helper_unsupported_gunyah_title">不支援的 Gunyah 版本</string>
+    <string name="log_helper_unsupported_gunyah_message">您的裝置上的 Gunyah 版本過舊（如驍龍 8 Gen 2），請嘗試更新系統或更換較新的裝置。</string>
+    <string name="log_helper_unsupported_sandbox_title">沙箱模式不支援</string>
+    <string name="log_helper_unsupported_sandbox_message">crosvm的沙箱模式在此平台不可用，請停用沙箱模式。</string>
 </resources>
diff --git a/app/src/main/res/values/strings.xml b/app/src/main/res/values/strings.xml
index d597a2bbd..4f109e597 100644
--- a/app/src/main/res/values/strings.xml
+++ b/app/src/main/res/values/strings.xml
@@ -916,4 +916,19 @@
     <string name="notification_permission_message">DroidVM downloads disk images in the background and shows the progress in a notification. Allow notifications so you can keep an eye on the download.</string>
     <string name="notification_permission_allow">Continue</string>
     <string name="notification_permission_skip">Not now</string>
+
+    <string name="log_helper_open_url">Open</string>
+    <string name="log_helper_bad_sm8650_kernel_url" formatted="false">https://github.com/Droid-VM/DroidVM/wiki/Problem%3A-Gunyah-Resource-Manager-refuses-to-start-the-virtual-machine%2e</string>
+    <string name="log_helper_bad_sm8650_kernel_title">Gunyah Resource Manager refuses to start the virtual machine</string>
+    <string name="log_helper_bad_sm8650_kernel_message">There are some issues with the kernel running on your device. Try replacing or recompiling it.\nTry enabling or disabling the "Prepare Lend mTHP" option.\nOpen the browser for more information.</string>
+    <string name="log_helper_huge_page_fault_url" formatted="false">https://github.com/Droid-VM/DroidVM/wiki/Problem%3A-An-out%E2%80%90of%E2%80%90memory-error-occurred-while-the-virtual-machine-was-running%2e</string>
+    <string name="log_helper_huge_page_fault_title">Insufficient huge page memory</string>
+    <string name="log_helper_huge_page_fault_message">Virtual machine %s ran into insufficient huge page memory.\nTry changing the memory size, or use the pre-allocation module.\nOpen the browser for more information.</string>
+    <string name="log_helper_no_restrict_pool_url" formatted="false">https://github.com/Droid-VM/DroidVM/wiki/Problem%3A-The-virtual-machine%27s-system-does-not-support-SWIOTLB-Restrict-DMA-Pool%2e</string>
+    <string name="log_helper_no_restrict_pool_title">Missing virtual machine kernel functionality</string>
+    <string name="log_helper_no_restrict_pool_message">The kernel of virtual machine %s does not support Restricted DMA Pool.\nPlease replace the kernel or use the built-in DroidVM kernel.\nOpen the browser for more information.</string>
+    <string name="log_helper_unsupported_gunyah_title">Unsupported Gunyah version</string>
+    <string name="log_helper_unsupported_gunyah_message">The Gunyah version on your device is too old (for example, Snapdragon 8 Gen 2). Try updating the system or switching to a newer device.</string>
+    <string name="log_helper_unsupported_sandbox_title">Sandbox is not supported</string>
+    <string name="log_helper_unsupported_sandbox_message">crosvm\'s sandbox is not available on this platform. Please disable sandbox.</string>
 </resources>

From ff69a033bbbf7be075f8d6737192cacf7078b274 Mon Sep 17 00:00:00 2001
From: BigfootACA <bigfoot@classfun.cn>
Date: Tue, 23 Jun 2026 08:57:12 +0800
Subject: [PATCH 037/182] VMVncDisplayActivity: add virtual gesture mouse

Signed-off-by: BigfootACA <bigfoot@classfun.cn>
---
 .../vnc/display/VMVncDisplayActivity.java     | 492 +++++++++++++++++-
 app/src/main/res/drawable/ic_mouse.xml        |  11 +
 .../res/layout/activity_vm_vnc_display.xml    |  13 +-
 .../main/res/menu/menu_vnc_display_menu.xml   |   5 +
 app/src/main/res/values-zh-rCN/strings.xml    |  12 +
 app/src/main/res/values-zh-rTW/strings.xml    |  12 +
 app/src/main/res/values/strings.xml           |  12 +
 7 files changed, 545 insertions(+), 12 deletions(-)
 create mode 100644 app/src/main/res/drawable/ic_mouse.xml

diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/display/vnc/display/VMVncDisplayActivity.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/vnc/display/VMVncDisplayActivity.java
index 09b31d181..1961f7896 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/display/vnc/display/VMVncDisplayActivity.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/vnc/display/VMVncDisplayActivity.java
@@ -1,6 +1,12 @@
 package cn.classfun.droidvm.ui.vm.display.vnc.display;
 
+import static android.view.Gravity.BOTTOM;
 import static android.view.Gravity.CENTER;
+import static android.view.Gravity.CENTER_HORIZONTAL;
+import static android.view.Gravity.CENTER_VERTICAL;
+import static android.view.Gravity.END;
+import static android.view.Gravity.START;
+import static android.view.Gravity.TOP;
 import static android.view.View.GONE;
 import static android.view.View.VISIBLE;
 import static android.view.WindowInsetsController.BEHAVIOR_SHOW_TRANSIENT_BARS_BY_SWIPE;
@@ -8,15 +14,26 @@
 import static java.lang.Math.min;
 
 import android.annotation.SuppressLint;
+import android.content.Context;
+import android.content.SharedPreferences;
 import android.graphics.Bitmap;
+import android.graphics.drawable.GradientDrawable;
+import android.util.TypedValue;
 import android.view.MenuItem;
 import android.view.MotionEvent;
 import android.view.View;
+import android.view.ViewGroup;
 import android.view.WindowInsets;
+import android.view.WindowManager;
 import android.widget.FrameLayout;
+import android.widget.ImageView;
 import android.widget.LinearLayout;
+import android.widget.TextView;
 
 import androidx.annotation.NonNull;
+import androidx.core.graphics.Insets;
+import androidx.core.view.ViewCompat;
+import androidx.core.view.WindowInsetsCompat;
 
 import com.google.android.material.button.MaterialButton;
 import com.google.android.material.floatingactionbutton.FloatingActionButton;
@@ -28,12 +45,55 @@
 
 public final class VMVncDisplayActivity extends BaseVncActivity {
     private static final long AUTO_HIDE_DELAY_MS = 3000;
+    private static final long OP_LABEL_HIDE_DELAY_MS = 2000;
+    private static final String PREFS_NAME = "droidvm_prefs";
+    private static final String KEY_INPUT_MODE = "display_input_mode";
+    private static final float TAP_SLOP = 20f;
+    private static final long TAP_TIMEOUT = 250;
+    private static final long DOUBLE_TAP_TIMEOUT = 300;
+    private static final float DEFAULT_ZOOM = 1f;
+    private static final float MIN_ZOOM = 0.5f;
+    private static final float MAX_ZOOM = 5f;
+    private static final float SNAP_THRESHOLD = 15f;
+    private static final float MIN_SCALE_DIST = 24f;
+    private static final float SCROLL_THRESHOLD = 8f;
+    private static final int MASK_LEFT = 1;
+    private static final int MASK_MIDDLE = 2;
+    private static final int MASK_RIGHT = 4;
+    private static final int MASK_SCROLL_UP = 8;
+    private static final int MASK_SCROLL_DOWN = 16;
+
+    private enum InputMode {TOUCH, MOUSE}
     private LinearLayout statusBar;
     private MaterialButton btnFullscreen;
     private FrameLayout displayContainer;
     private FloatingActionButton fabMenu;
+    private TextView operationLabel;
     private boolean isFullscreen = false;
     private boolean extraKeysVisible = true;
+    private InputMode inputMode = InputMode.TOUCH;
+    private SharedPreferences prefs;
+    private float cursorX, cursorY;
+    private int baseViewW, baseViewH;
+    private float zoom = DEFAULT_ZOOM;
+    private float panX, panY;
+    private int gestureMaxPointers;
+    private boolean gestureMoved;
+    private long gestureStartTime;
+    private float gestureStartMidX, gestureStartMidY;
+    private long lastTapTime;
+    private int lastTapFingerCount;
+    private float lastTouchX, lastTouchY;
+    private float lastMidX, lastMidY;
+    private float initialAngle;
+    private float rotationBase;
+    private float initialDist;
+    private float initialZoom;
+    private float lastScrollMidY;
+
+    private final Runnable hideOperationLabel = () -> {
+        if (operationLabel != null) operationLabel.setVisibility(GONE);
+    };
 
 
     @Override
@@ -52,10 +112,15 @@ protected void onBindExtraViews() {
         btnFullscreen = findViewById(R.id.btn_fullscreen);
         displayContainer = findViewById(R.id.display_container);
         fabMenu = findViewById(R.id.fab_menu);
+        operationLabel = findViewById(R.id.tv_operation);
     }
 
     @Override
     protected void onSetupActivity() {
+        prefs = getSharedPreferences(PREFS_NAME, Context.MODE_PRIVATE);
+        inputMode = InputMode.values()[prefs.getInt(KEY_INPUT_MODE, 0)];
+        setupCutoutMode();
+        setupWindowInsets();
         btnFullscreen.setOnClickListener(v -> toggleFullscreen());
         displayContainer.addOnLayoutChangeListener((
             v, left, top, right, bottom, oldLeft, oldTop, oldRight, oldBottom
@@ -63,17 +128,53 @@ protected void onSetupActivity() {
             int cw = right - left, ch = bottom - top;
             if (cw > 0 && ch > 0) v.post(() -> updateAspectRatio(cw, ch));
         });
-        displayContainer.setOnClickListener(v -> {
-            showBars();
-            toggleSoftKeyboard();
-        });
+        setupOperationLabel();
         setupDisplayTouch();
         setupFab();
+        applyInputMode();
+    }
+
+    private void setupCutoutMode() {
+        var params = getWindow().getAttributes();
+        params.layoutInDisplayCutoutMode =
+            WindowManager.LayoutParams.LAYOUT_IN_DISPLAY_CUTOUT_MODE_SHORT_EDGES;
+        getWindow().setAttributes(params);
+    }
+
+    private void setupWindowInsets() {
+        var content = (ViewGroup) findViewById(android.R.id.content);
+        ViewCompat.setOnApplyWindowInsetsListener(content, (v, insets) -> {
+            Insets sysBars = insets.getInsets(WindowInsetsCompat.Type.systemBars());
+            Insets ime = insets.getInsets(WindowInsetsCompat.Type.ime());
+            int top = isFullscreen ? 0 : sysBars.top;
+            int bottom = ime.bottom;
+            v.setPadding(0, top, 0, bottom);
+            return insets;
+        });
+        ViewCompat.requestApplyInsets(content);
+    }
+
+    private float dp(float v) {
+        return TypedValue.applyDimension(
+            TypedValue.COMPLEX_UNIT_DIP, v, getResources().getDisplayMetrics());
+    }
+
+    private void setupOperationLabel() {
+        if (operationLabel == null) return;
+        var bg = new GradientDrawable();
+        bg.setCornerRadius(dp(8));
+        bg.setColor(0x80000000);
+        operationLabel.setBackground(bg);
     }
 
     @Override
     protected void onFramebufferReady(int width, int height) {
         updateAspectRatio(displayContainer.getWidth(), displayContainer.getHeight());
+        if (inputMode == InputMode.MOUSE) {
+            if (cursorX < 0 || cursorX >= width) cursorX = width / 2f;
+            if (cursorY < 0 || cursorY >= height) cursorY = height / 2f;
+            ensureCursorVisible();
+        }
     }
 
     @Override
@@ -90,6 +191,7 @@ protected void onStatusChanged(String text, VncStatus status) {
     @Override
     protected void onDestroyExtra() {
         mainHandler.removeCallbacks(this::hideBars);
+        mainHandler.removeCallbacks(hideOperationLabel);
     }
 
     private boolean onDisplayTouch(View v, MotionEvent event) {
@@ -135,22 +237,375 @@ private boolean onDisplayTouch(View v, MotionEvent event) {
     @SuppressLint("ClickableViewAccessibility")
     private void setupDisplayTouch() {
         ivDisplay.setTextCommitListener(createTextCommitListener());
-        ivDisplay.setOnTouchListener(this::onDisplayTouch);
+    }
+
+    @SuppressLint("ClickableViewAccessibility")
+    private void applyInputMode() {
+        if (inputMode == InputMode.MOUSE) {
+            ivDisplay.setScaleType(ImageView.ScaleType.FIT_CENTER);
+            ivDisplay.setClickable(false);
+            ivDisplay.setOnTouchListener(null);
+            displayContainer.setClickable(true);
+            displayContainer.setOnClickListener(null);
+            displayContainer.setOnTouchListener(this::onMouseTouch);
+            if (operationLabel != null) operationLabel.setVisibility(GONE);
+            applyViewSize();
+            applyViewTransform();
+            ensureCursorVisible();
+        } else {
+            ivDisplay.setScaleType(ImageView.ScaleType.FIT_CENTER);
+            ivDisplay.setClickable(true);
+            ivDisplay.setOnTouchListener(this::onDisplayTouch);
+            displayContainer.setOnTouchListener(null);
+            displayContainer.setClickable(true);
+            displayContainer.setOnClickListener(v -> {
+                showBars();
+                toggleSoftKeyboard();
+            });
+            if (operationLabel != null) operationLabel.setVisibility(GONE);
+        }
+    }
+
+    private void setInputMode(InputMode mode) {
+        if (inputMode == mode) return;
+        inputMode = mode;
+        prefs.edit().putInt(KEY_INPUT_MODE, mode.ordinal()).apply();
+        resetViewTransform();
+        if (mode == InputMode.MOUSE) {
+            if (fbWidth > 0) cursorX = fbWidth / 2f;
+            if (fbHeight > 0) cursorY = fbHeight / 2f;
+        }
+        applyViewSize();
+        applyInputMode();
+    }
+
+    private void resetViewTransform() {
+        zoom = DEFAULT_ZOOM;
+        panX = 0;
+        panY = 0;
+        ivDisplay.setTranslationX(0);
+        ivDisplay.setTranslationY(0);
+        ivDisplay.setRotation(0);
+    }
+
+    private int currentViewW() {
+        return inputMode == InputMode.MOUSE
+            ? Math.round(baseViewW * zoom) : baseViewW;
+    }
+
+    private int currentViewH() {
+        return inputMode == InputMode.MOUSE
+            ? Math.round(baseViewH * zoom) : baseViewH;
+    }
+
+    private void applyViewSize() {
+        if (baseViewW <= 0 || baseViewH <= 0) return;
+        int w = currentViewW(), h = currentViewH();
+        var lp = ivDisplay.getLayoutParams();
+        if (lp instanceof FrameLayout.LayoutParams) {
+            ((FrameLayout.LayoutParams) lp).gravity = CENTER;
+            lp.width = w;
+            lp.height = h;
+        } else {
+            lp = new FrameLayout.LayoutParams(w, h, CENTER);
+        }
+        ivDisplay.setLayoutParams(lp);
+    }
+
+    private void applyViewTransform() {
+        ivDisplay.setTranslationX(panX);
+        ivDisplay.setTranslationY(panY);
+    }
+
+    private float midX(@NonNull MotionEvent e) {
+        float s = 0;
+        for (int i = 0; i < e.getPointerCount(); i++) s += e.getX(i);
+        return s / e.getPointerCount();
+    }
+
+    private float midY(@NonNull MotionEvent e) {
+        float s = 0;
+        for (int i = 0; i < e.getPointerCount(); i++) s += e.getY(i);
+        return s / e.getPointerCount();
+    }
+
+    @SuppressLint("ClickableViewAccessibility")
+    private boolean onMouseTouch(View v, MotionEvent event) {
+        if (vncClient == null || !vncClient.isConnected()) return false;
+        if (fbWidth <= 0 || fbHeight <= 0) return false;
+        int pc = event.getPointerCount();
+        switch (event.getActionMasked()) {
+            case MotionEvent.ACTION_DOWN:
+                gestureMaxPointers = 1;
+                gestureMoved = false;
+                gestureStartTime = System.currentTimeMillis();
+                gestureStartMidX = event.getX();
+                gestureStartMidY = event.getY();
+                lastTouchX = event.getX();
+                lastTouchY = event.getY();
+                return true;
+            case MotionEvent.ACTION_POINTER_DOWN:
+                gestureMaxPointers = max(gestureMaxPointers, pc);
+                if (pc == 2) initTwoFinger(event);
+                if (pc >= 3) lastScrollMidY = midY(event);
+                return true;
+            case MotionEvent.ACTION_MOVE: {
+                float mx = midX(event), my = midY(event);
+                float dist = (float) Math.hypot(
+                    mx - gestureStartMidX, my - gestureStartMidY);
+                if (dist > TAP_SLOP) gestureMoved = true;
+                if (gestureMaxPointers >= 3 && pc >= 3) {
+                    float dy = my - lastScrollMidY;
+                    if (Math.abs(dy) > SCROLL_THRESHOLD) {
+                        boolean up = dy < 0;
+                        vncClient.sendPointer((int) cursorX, (int) cursorY,
+                            up ? MASK_SCROLL_UP : MASK_SCROLL_DOWN);
+                        vncClient.sendPointer((int) cursorX, (int) cursorY, 0);
+                        showOperation(up
+                            ? R.string.vnc_op_scroll_up
+                            : R.string.vnc_op_scroll_down);
+                        lastScrollMidY = my;
+                    }
+                } else if (gestureMaxPointers >= 2 && pc >= 2) {
+                    handleTwoFinger(event);
+                } else if (gestureMaxPointers <= 1 && pc == 1) {
+                    float dx = event.getX() - lastTouchX;
+                    float dy = event.getY() - lastTouchY;
+                    lastTouchX = event.getX();
+                    lastTouchY = event.getY();
+                    if (dx != 0 || dy != 0) {
+                        moveCursor(dx, dy);
+                        showOperation(R.string.vnc_op_mouse_move);
+                    }
+                }
+                return true;
+            }
+            case MotionEvent.ACTION_UP:
+                if (gestureMaxPointers >= 2) {
+                    ivDisplay.setRotation(snapRotation(ivDisplay.getRotation()));
+                    clampPan();
+                    ivDisplay.setTranslationX(panX);
+                    ivDisplay.setTranslationY(panY);
+                    updateOperationLabelPosition();
+                } else {
+                    ensureCursorVisible();
+                }
+                if (!gestureMoved
+                    && System.currentTimeMillis() - gestureStartTime < TAP_TIMEOUT) {
+                    boolean dbl = lastTapFingerCount == gestureMaxPointers
+                        && System.currentTimeMillis() - lastTapTime < DOUBLE_TAP_TIMEOUT;
+                    handleTap(gestureMaxPointers, dbl);
+                    lastTapTime = System.currentTimeMillis();
+                    lastTapFingerCount = gestureMaxPointers;
+                } else {
+                    lastTapFingerCount = 0;
+                }
+                gestureMaxPointers = 0;
+                return true;
+            case MotionEvent.ACTION_CANCEL:
+                gestureMaxPointers = 0;
+                lastTapFingerCount = 0;
+                return true;
+            case MotionEvent.ACTION_POINTER_UP:
+                if (gestureMaxPointers == 2 && pc <= 2)
+                    ivDisplay.setRotation(snapRotation(ivDisplay.getRotation()));
+                return true;
+        }
+        return false;
+    }
+
+    private void handleTap(int fingerCount, boolean dbl) {
+        switch (fingerCount) {
+            case 1:
+                sendClick(MASK_LEFT);
+                if (dbl) sendClick(MASK_LEFT);
+                showOperation(dbl
+                    ? R.string.vnc_op_left_double_click
+                    : R.string.vnc_op_left_click);
+                break;
+            case 2:
+                sendClick(MASK_RIGHT);
+                if (dbl) sendClick(MASK_RIGHT);
+                showOperation(dbl
+                    ? R.string.vnc_op_right_double_click
+                    : R.string.vnc_op_right_click);
+                break;
+            default:
+                sendClick(MASK_MIDDLE);
+                if (dbl) sendClick(MASK_MIDDLE);
+                showOperation(dbl
+                    ? R.string.vnc_op_middle_double_click
+                    : R.string.vnc_op_middle_click);
+                break;
+        }
+    }
+
+    private void sendClick(int mask) {
+        vncClient.sendPointer((int) cursorX, (int) cursorY, mask);
+        vncClient.sendPointer((int) cursorX, (int) cursorY, 0);
+    }
+
+    private void initTwoFinger(@NonNull MotionEvent event) {
+        lastMidX = (event.getX(0) + event.getX(1)) / 2f;
+        lastMidY = (event.getY(0) + event.getY(1)) / 2f;
+        initialAngle = twoFingerAngle(event);
+        rotationBase = ivDisplay.getRotation();
+        initialDist = twoFingerDistance(event);
+        initialZoom = zoom;
+    }
+
+    private void handleTwoFinger(@NonNull MotionEvent event) {
+        float mx = (event.getX(0) + event.getX(1)) / 2f;
+        float my = (event.getY(0) + event.getY(1)) / 2f;
+        panX += mx - lastMidX;
+        panY += my - lastMidY;
+        lastMidX = mx;
+        lastMidY = my;
+        clampPan();
+        ivDisplay.setTranslationX(panX);
+        ivDisplay.setTranslationY(panY);
+        float angle = twoFingerAngle(event);
+        float dAngle = normalizeAngle(angle - initialAngle);
+        ivDisplay.setRotation(snapNear(rotationBase + dAngle));
+        float dist = twoFingerDistance(event);
+        if (initialDist > MIN_SCALE_DIST) {
+            float nz = max(MIN_ZOOM, min(initialZoom * dist / initialDist, MAX_ZOOM));
+            if (nz != zoom) {
+                zoom = nz;
+                applyViewSize();
+            }
+        }
+        updateOperationLabelPosition();
+    }
+
+    private void clampPan() {
+        int cW = displayContainer.getWidth();
+        int cH = displayContainer.getHeight();
+        int vW = currentViewW();
+        int vH = currentViewH();
+        panX = max(-(cW + vW) / 2f, min(panX, (cW + vW) / 2f));
+        panY = max(-(cH + vH) / 2f, min(panY, (cH + vH) / 2f));
+    }
+
+    private float twoFingerAngle(@NonNull MotionEvent e) {
+        float dx = e.getX(1) - e.getX(0);
+        float dy = e.getY(1) - e.getY(0);
+        return (float) Math.toDegrees(Math.atan2(dy, dx));
+    }
+
+    private float twoFingerDistance(@NonNull MotionEvent e) {
+        float dx = e.getX(1) - e.getX(0);
+        float dy = e.getY(1) - e.getY(0);
+        return (float) Math.hypot(dx, dy);
+    }
+
+    private float normalizeAngle(float a) {
+        while (a > 180) a -= 360;
+        while (a < -180) a += 360;
+        return a;
+    }
+
+    private float snapNear(float deg) {
+        float snapped = Math.round(deg / 90f) * 90f;
+        if (Math.abs(deg - snapped) <= SNAP_THRESHOLD) return snapped;
+        return deg;
+    }
+
+    private float snapRotation(float deg) {
+        return Math.round(deg / 90f) * 90f;
+    }
+
+    private void moveCursor(float dx, float dy) {
+        if (fbWidth <= 0 || fbHeight <= 0) return;
+        double rad = Math.toRadians(ivDisplay.getRotation());
+        float cos = (float) Math.cos(rad), sin = (float) Math.sin(rad);
+        float vncDx = dx * cos + dy * sin;
+        float vncDy = -dx * sin + dy * cos;
+        cursorX = max(0, min(cursorX + vncDx, fbWidth - 1));
+        cursorY = max(0, min(cursorY + vncDy, fbHeight - 1));
+        vncClient.sendPointer((int) cursorX, (int) cursorY, 0);
+        ensureCursorVisible();
+    }
+
+    private void ensureCursorVisible() {
+        if (fbWidth <= 0 || fbHeight <= 0) return;
+        int cW = displayContainer.getWidth();
+        int cH = displayContainer.getHeight();
+        int viewW = currentViewW();
+        int viewH = currentViewH();
+        if (cW <= 0 || cH <= 0 || viewW <= 0 || viewH <= 0) return;
+        double rad = Math.toRadians(ivDisplay.getRotation());
+        float cos = (float) Math.cos(rad), sin = (float) Math.sin(rad);
+        float localX = cursorX * viewW / (float) fbWidth;
+        float localY = cursorY * viewH / (float) fbHeight;
+        float relX = localX - viewW / 2f;
+        float relY = localY - viewH / 2f;
+        float rotX = relX * cos - relY * sin;
+        float rotY = relX * sin + relY * cos;
+        float screenX = cW / 2f + panX + rotX;
+        float screenY = cH / 2f + panY + rotY;
+        if (screenX < 0) panX -= screenX;
+        else if (screenX > cW) panX -= (screenX - cW);
+        if (screenY < 0) panY -= screenY;
+        else if (screenY > cH) panY -= (screenY - cH);
+        clampPan();
+        ivDisplay.setTranslationX(panX);
+        ivDisplay.setTranslationY(panY);
+        updateOperationLabelPosition();
+    }
+
+    private void updateOperationLabelPosition() {
+        if (operationLabel == null) return;
+        int cW = displayContainer.getWidth();
+        int cH = displayContainer.getHeight();
+        if (cW <= 0 || cH <= 0) return;
+        float r = ivDisplay.getRotation();
+        operationLabel.setRotation(r);
+        int deg = ((Math.round(r / 90f) % 4) + 4) % 4;
+        var lp = (FrameLayout.LayoutParams) operationLabel.getLayoutParams();
+        int m = (int) dp(8);
+        switch (deg) {
+            case 0:
+                lp.gravity = TOP | CENTER_HORIZONTAL;
+                lp.setMargins(0, m, 0, 0);
+                break;
+            case 1:
+                lp.gravity = END | CENTER_VERTICAL;
+                lp.setMargins(0, 0, m, 0);
+                break;
+            case 2:
+                lp.gravity = BOTTOM | CENTER_HORIZONTAL;
+                lp.setMargins(0, 0, 0, m);
+                break;
+            default:
+                lp.gravity = START | CENTER_VERTICAL;
+                lp.setMargins(m, 0, 0, 0);
+                break;
+        }
+        operationLabel.setLayoutParams(lp);
+    }
+
+    private void showOperation(int resId) {
+        if (operationLabel == null) return;
+        operationLabel.setText(resId);
+        operationLabel.setVisibility(VISIBLE);
+        mainHandler.removeCallbacks(hideOperationLabel);
+        mainHandler.postDelayed(hideOperationLabel, OP_LABEL_HIDE_DELAY_MS);
     }
 
     private void updateAspectRatio(int containerW, int containerH) {
         if (containerW <= 0 || containerH <= 0 || fbWidth <= 0 || fbHeight <= 0) return;
         float vmAspect = (float) fbWidth / fbHeight;
         float containerAspect = (float) containerW / containerH;
-        int viewW, viewH;
         if (vmAspect > containerAspect) {
-            viewW = containerW;
-            viewH = Math.round(containerW / vmAspect);
+            baseViewW = containerW;
+            baseViewH = Math.round(containerW / vmAspect);
         } else {
-            viewH = containerH;
-            viewW = Math.round(containerH * vmAspect);
+            baseViewH = containerH;
+            baseViewW = Math.round(containerH * vmAspect);
         }
-        ivDisplay.setLayoutParams(new FrameLayout.LayoutParams(viewW, viewH, CENTER));
+        applyViewSize();
+        if (inputMode == InputMode.MOUSE) ensureCursorVisible();
     }
 
     private void showBars() {
@@ -180,6 +635,7 @@ private void toggleFullscreen() {
             if (extraKeysVisible) extraKeysPanel.animateIn();
             controller.show(WindowInsets.Type.systemBars());
         }
+        ViewCompat.requestApplyInsets(findViewById(android.R.id.content));
     }
 
     private void toggleExtraKeys() {
@@ -196,6 +652,16 @@ private void setupFab() {
     private void showFabMenu() {
         var popup = new MaterialMenu(this, fabMenu);
         popup.inflate(R.menu.menu_vnc_display_menu);
+        var item = popup.getMenu().findItem(R.id.menu_input_mode);
+        if (item != null) {
+            if (inputMode == InputMode.TOUCH) {
+                item.setTitle(R.string.vnc_menu_input_mode_mouse);
+                item.setIcon(R.drawable.ic_mouse);
+            } else {
+                item.setTitle(R.string.vnc_menu_input_mode_touch);
+                item.setIcon(R.drawable.ic_touchpad);
+            }
+        }
         popup.setOnMenuItemClickListener(this::onMenuItemClicked);
         popup.show();
     }
@@ -209,6 +675,10 @@ protected boolean onMenuItemClicked(@NonNull MenuItem item) {
         } else if (id == R.id.menu_fullscreen) {
             toggleFullscreen();
             return true;
+        } else if (id == R.id.menu_input_mode) {
+            setInputMode(inputMode == InputMode.TOUCH
+                ? InputMode.MOUSE : InputMode.TOUCH);
+            return true;
         }
         return super.onMenuItemClicked(item);
     }
diff --git a/app/src/main/res/drawable/ic_mouse.xml b/app/src/main/res/drawable/ic_mouse.xml
new file mode 100644
index 000000000..936990ead
--- /dev/null
+++ b/app/src/main/res/drawable/ic_mouse.xml
@@ -0,0 +1,11 @@
+<?xml version="1.0" encoding="utf-8"?>
+<vector xmlns:android="http://schemas.android.com/apk/res/android"
+    android:width="24dp"
+    android:height="24dp"
+    android:viewportWidth="24"
+    android:viewportHeight="24">
+    <path
+        android:fillColor="#FFFFFFFF"
+        android:fillType="evenOdd"
+        android:pathData="M12,2C8.13,2 5,5.13 5,9v6c0,3.87 3.13,7 7,7s7,-3.13 7,-7V9c0,-3.87 -3.13,-7 -7,-7zM12,4c2.76,0 5,2.24 5,5v6c0,2.76 -2.24,5 -5,5s-5,-2.24 -5,-5V9c0,-2.76 2.24,-5 5,-5zM11,6h2v4h-2z" />
+</vector>
diff --git a/app/src/main/res/layout/activity_vm_vnc_display.xml b/app/src/main/res/layout/activity_vm_vnc_display.xml
index a76f448af..90672de5d 100644
--- a/app/src/main/res/layout/activity_vm_vnc_display.xml
+++ b/app/src/main/res/layout/activity_vm_vnc_display.xml
@@ -6,7 +6,6 @@
     android:layout_width="match_parent"
     android:layout_height="match_parent"
     android:background="@color/vnc_background"
-    android:fitsSystemWindows="true"
     android:orientation="vertical"
     tools:context=".ui.vm.display.vnc.display.VMVncDisplayActivity">
 
@@ -103,6 +102,18 @@
 
         </LinearLayout>
 
+        <TextView
+            android:id="@+id/tv_operation"
+            android:layout_width="wrap_content"
+            android:layout_height="wrap_content"
+            android:layout_gravity="top|center_horizontal"
+            android:paddingHorizontal="12dp"
+            android:paddingVertical="4dp"
+            android:textColor="@android:color/white"
+            android:textSize="12sp"
+            android:visibility="gone"
+            tools:ignore="HardcodedText" />
+
         <com.google.android.material.floatingactionbutton.FloatingActionButton
             android:id="@+id/fab_menu"
             android:layout_width="wrap_content"
diff --git a/app/src/main/res/menu/menu_vnc_display_menu.xml b/app/src/main/res/menu/menu_vnc_display_menu.xml
index c1c7c3d63..14619bd85 100644
--- a/app/src/main/res/menu/menu_vnc_display_menu.xml
+++ b/app/src/main/res/menu/menu_vnc_display_menu.xml
@@ -11,6 +11,11 @@
         android:icon="@drawable/ic_keyboard_esc"
         android:title="@string/vnc_menu_extra_keys" />
 
+    <item
+        android:id="@+id/menu_input_mode"
+        android:icon="@drawable/ic_touchpad"
+        android:title="@string/vnc_menu_input_mode_mouse" />
+
     <item
         android:id="@+id/menu_fullscreen"
         android:icon="@drawable/ic_fullscreen"
diff --git a/app/src/main/res/values-zh-rCN/strings.xml b/app/src/main/res/values-zh-rCN/strings.xml
index 6343d8df8..a8a03c4f6 100644
--- a/app/src/main/res/values-zh-rCN/strings.xml
+++ b/app/src/main/res/values-zh-rCN/strings.xml
@@ -779,7 +779,19 @@
     <string name="vnc_menu_keyboard">软键盘</string>
     <string name="vnc_menu_extra_keys">额外按键</string>
     <string name="vnc_menu_fullscreen">全屏</string>
+    <string name="vnc_menu_input_mode_touch">触摸模式</string>
+    <string name="vnc_menu_input_mode_mouse">鼠标模式</string>
     <string name="vnc_menu_rotate">旋转屏幕</string>
+
+    <string name="vnc_op_mouse_move">鼠标移动</string>
+    <string name="vnc_op_left_click">左键单击</string>
+    <string name="vnc_op_left_double_click">左键双击</string>
+    <string name="vnc_op_right_click">右键单击</string>
+    <string name="vnc_op_right_double_click">右键双击</string>
+    <string name="vnc_op_middle_click">中键单击</string>
+    <string name="vnc_op_middle_double_click">中键双击</string>
+    <string name="vnc_op_scroll_up">滚轮上滚</string>
+    <string name="vnc_op_scroll_down">滚轮下滚</string>
     <string name="vnc_menu_reconnect">重新连接</string>
     <string name="vnc_menu_external_app">使用外部程序连接</string>
     <string name="vnc_menu_view_url">查看连接地址</string>
diff --git a/app/src/main/res/values-zh-rTW/strings.xml b/app/src/main/res/values-zh-rTW/strings.xml
index d775a02af..9beea8a68 100644
--- a/app/src/main/res/values-zh-rTW/strings.xml
+++ b/app/src/main/res/values-zh-rTW/strings.xml
@@ -779,7 +779,19 @@
     <string name="vnc_menu_keyboard">軟鍵盤</string>
     <string name="vnc_menu_extra_keys">額外按鍵</string>
     <string name="vnc_menu_fullscreen">全屏</string>
+    <string name="vnc_menu_input_mode_touch">觸控模式</string>
+    <string name="vnc_menu_input_mode_mouse">滑鼠模式</string>
     <string name="vnc_menu_rotate">旋轉螢幕</string>
+
+    <string name="vnc_op_mouse_move">滑鼠移動</string>
+    <string name="vnc_op_left_click">左鍵單擊</string>
+    <string name="vnc_op_left_double_click">左鍵雙擊</string>
+    <string name="vnc_op_right_click">右鍵單擊</string>
+    <string name="vnc_op_right_double_click">右鍵雙擊</string>
+    <string name="vnc_op_middle_click">中鍵單擊</string>
+    <string name="vnc_op_middle_double_click">中鍵雙擊</string>
+    <string name="vnc_op_scroll_up">滾輪上滾</string>
+    <string name="vnc_op_scroll_down">滾輪下滾</string>
     <string name="vnc_menu_reconnect">重新連線</string>
     <string name="vnc_menu_external_app">使用外部程式連線</string>
     <string name="vnc_menu_view_url">檢視連線地址</string>
diff --git a/app/src/main/res/values/strings.xml b/app/src/main/res/values/strings.xml
index 4f109e597..f56d10780 100644
--- a/app/src/main/res/values/strings.xml
+++ b/app/src/main/res/values/strings.xml
@@ -816,7 +816,19 @@
     <string name="vnc_menu_keyboard">Soft Keyboard</string>
     <string name="vnc_menu_extra_keys">Extra Keys</string>
     <string name="vnc_menu_fullscreen">Fullscreen</string>
+    <string name="vnc_menu_input_mode_touch">Touch Mode</string>
+    <string name="vnc_menu_input_mode_mouse">Mouse Mode</string>
     <string name="vnc_menu_rotate">Rotate Screen</string>
+
+    <string name="vnc_op_mouse_move">Mouse Move</string>
+    <string name="vnc_op_left_click">Left Click</string>
+    <string name="vnc_op_left_double_click">Left Double-Click</string>
+    <string name="vnc_op_right_click">Right Click</string>
+    <string name="vnc_op_right_double_click">Right Double-Click</string>
+    <string name="vnc_op_middle_click">Middle Click</string>
+    <string name="vnc_op_middle_double_click">Middle Double-Click</string>
+    <string name="vnc_op_scroll_up">Scroll Up</string>
+    <string name="vnc_op_scroll_down">Scroll Down</string>
     <string name="vnc_menu_reconnect">Reconnect</string>
     <string name="vnc_menu_external_app">Open with External App</string>
     <string name="vnc_menu_view_url">View Connection URL</string>

From db14f50b030cdfacbacde29889019bf016ea49e4 Mon Sep 17 00:00:00 2001
From: BigfootACA <bigfoot@classfun.cn>
Date: Tue, 23 Jun 2026 12:03:32 +0800
Subject: [PATCH 038/182] VMVncPresentationActivity: add USB mouse and keyboard
 supports

Signed-off-by: BigfootACA <bigfoot@classfun.cn>
---
 app/src/main/AndroidManifest.xml              |   1 +
 .../ui/vm/display/base/UsbHidInput.java       | 453 ++++++++++++++++++
 .../droidvm/ui/vm/display/base/X11Keymap.java |   6 +-
 .../vm/display/vnc/base/BaseVncActivity.java  |  19 +
 .../display/VMVncPresentationActivity.java    | 198 +++++++-
 .../display/vnc/input/VncTouchPadPanel.java   |  14 +
 app/src/main/res/values-zh-rCN/strings.xml    |   2 +
 app/src/main/res/values-zh-rTW/strings.xml    |   2 +
 app/src/main/res/values/strings.xml           |   2 +
 9 files changed, 692 insertions(+), 5 deletions(-)
 create mode 100644 app/src/main/java/cn/classfun/droidvm/ui/vm/display/base/UsbHidInput.java

diff --git a/app/src/main/AndroidManifest.xml b/app/src/main/AndroidManifest.xml
index e72402965..a11c44bda 100644
--- a/app/src/main/AndroidManifest.xml
+++ b/app/src/main/AndroidManifest.xml
@@ -11,6 +11,7 @@
     <uses-permission android:name="android.permission.FOREGROUND_SERVICE"
         tools:ignore="ForegroundServicesPolicy" />
     <uses-permission android:name="android.permission.FOREGROUND_SERVICE_DATA_SYNC" />
+    <uses-feature android:name="android.hardware.usb.host" android:required="false" />
 
     <application
         android:name=".DroidVMApp"
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/display/base/UsbHidInput.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/base/UsbHidInput.java
new file mode 100644
index 000000000..d034ee04a
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/base/UsbHidInput.java
@@ -0,0 +1,453 @@
+package cn.classfun.droidvm.ui.vm.display.base;
+
+import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
+import static cn.classfun.droidvm.ui.vm.display.base.X11Keymap.*;
+
+import android.app.PendingIntent;
+import android.content.BroadcastReceiver;
+import android.content.Context;
+import android.content.Intent;
+import android.content.IntentFilter;
+import android.hardware.usb.UsbConstants;
+import android.hardware.usb.UsbDevice;
+import android.hardware.usb.UsbDeviceConnection;
+import android.hardware.usb.UsbEndpoint;
+import android.hardware.usb.UsbInterface;
+import android.hardware.usb.UsbManager;
+import android.os.Handler;
+import android.os.Looper;
+import android.util.Log;
+
+import androidx.annotation.NonNull;
+import androidx.annotation.Nullable;
+
+import java.util.HashSet;
+import java.util.Map;
+import java.util.Set;
+import java.util.concurrent.ConcurrentHashMap;
+
+public final class UsbHidInput {
+    private static final String TAG = "UsbHidInput";
+    private static final int HID_CLASS = UsbConstants.USB_CLASS_HID;
+    private static final int PROTO_KEYBOARD = 1;
+    private static final int PROTO_MOUSE = 2;
+    private static final int REQ_SET_PROTOCOL = 0x0B;
+    private static final int REQ_SET_REPORT = 0x09;
+    private static final int OUTPUT_REPORT = 0x02;
+    private static final int BOOT_PROTOCOL = 0;
+    private static final int XK_Pause = 0xFF13;
+    private static final int READ_TIMEOUT_MS = 1000;
+    private static final String ACTION_USB_PERMISSION = "android.hardware.usb.action.USB_PERMISSION";
+    private static final int USB_RECIP_INTERFACE = 0x01;
+
+    public interface Listener {
+        void onKeyEvent(int keysym, boolean down);
+        void onMouseMove(int dx, int dy);
+        void onMouseButton(int button, boolean pressed);
+        void onMouseScroll(boolean up);
+        void onDeviceChanged(int keyboards, int mice);
+    }
+
+    private final Context ctx;
+    private final UsbManager usbManager;
+    private final Handler main;
+    @Nullable
+    private volatile Listener listener;
+    private volatile boolean running;
+    private volatile byte ledState = 0;
+    private final Map<String, DeviceReader> readers = new ConcurrentHashMap<>();
+    private final Set<String> pendingPerm = ConcurrentHashMap.newKeySet();
+
+    private final BroadcastReceiver receiver = new BroadcastReceiver() {
+        @Override
+        public void onReceive(Context c, @NonNull Intent intent) {
+            var dev = intent.getParcelableExtra(UsbManager.EXTRA_DEVICE, UsbDevice.class);
+            if (dev == null) return;
+            var action = intent.getAction();
+            if (action != null) switch (action) {
+                case UsbManager.ACTION_USB_DEVICE_ATTACHED:
+                    scanDevice(dev);
+                    break;
+                case UsbManager.ACTION_USB_DEVICE_DETACHED:
+                    removeDevice(dev.getDeviceName());
+                    break;
+                case ACTION_USB_PERMISSION:
+                    pendingPerm.remove(dev.getDeviceName());
+                    if (intent.getBooleanExtra(UsbManager.EXTRA_PERMISSION_GRANTED, false))
+                        openDevice(dev);
+                    break;
+            }
+        }
+    };
+
+    public UsbHidInput(@NonNull Context context) {
+        ctx = context.getApplicationContext();
+        usbManager = ctx.getSystemService(UsbManager.class);
+        main = new Handler(Looper.getMainLooper());
+    }
+
+    public void setListener(@Nullable Listener l) {
+        listener = l;
+    }
+
+    public void start() {
+        if (running) return;
+        running = true;
+        IntentFilter filter = new IntentFilter();
+        filter.addAction(UsbManager.ACTION_USB_DEVICE_ATTACHED);
+        filter.addAction(UsbManager.ACTION_USB_DEVICE_DETACHED);
+        filter.addAction(ACTION_USB_PERMISSION);
+        ctx.registerReceiver(receiver, filter, Context.RECEIVER_NOT_EXPORTED);
+        scanAll();
+        notifyChanged();
+    }
+
+    public void stop() {
+        running = false;
+        try {
+            ctx.unregisterReceiver(receiver);
+        } catch (Exception ignored) {
+        }
+        for (var r : readers.values()) r.cancel();
+        readers.clear();
+        pendingPerm.clear();
+    }
+
+    @SuppressWarnings("unused")
+    public int getDeviceCount() {
+        return readers.size();
+    }
+
+    public void setLedState(boolean caps, boolean num, boolean scroll) {
+        byte state = 0;
+        if (num) state |= 0x01;
+        if (caps) state |= 0x02;
+        if (scroll) state |= 0x04;
+        ledState = state;
+        for (var r : readers.values())
+            if (r.proto == PROTO_KEYBOARD) r.sendLedReport(state);
+    }
+
+    private void scanAll() {
+        if (usbManager == null) return;
+        for (var dev : usbManager.getDeviceList().values()) scanDevice(dev);
+    }
+
+    private void scanDevice(@NonNull UsbDevice device) {
+        if (!running) return;
+        var name = device.getDeviceName();
+        for (int i = 0; i < device.getInterfaceCount(); i++) {
+            var iface = device.getInterface(i);
+            if (iface.getInterfaceClass() != HID_CLASS) continue;
+            int proto = iface.getInterfaceProtocol();
+            Log.i(TAG, fmt("scanDevice: %s, proto: %d", name, proto));
+            if (proto != PROTO_KEYBOARD && proto != PROTO_MOUSE) continue;
+            var key = fmt("%s#%d", name, iface.getId());
+            if (readers.containsKey(key)) continue;
+            if (usbManager.hasPermission(device)) {
+                openInterface(device, iface, key);
+            } else if (pendingPerm.add(name)) {
+                requestPermission(device);
+            }
+        }
+    }
+
+    private void requestPermission(@NonNull UsbDevice device) {
+        var intent = new Intent(ACTION_USB_PERMISSION);
+        intent.setPackage(ctx.getPackageName());
+        int flags = PendingIntent.FLAG_UPDATE_CURRENT | PendingIntent.FLAG_MUTABLE;
+        var pi = PendingIntent.getBroadcast(ctx, 0, intent, flags);
+        usbManager.requestPermission(device, pi);
+    }
+
+    private void openDevice(@NonNull UsbDevice device) {
+        if (!running) return;
+        scanDevice(device);
+    }
+
+    private void openInterface(
+        @NonNull UsbDevice device,
+        @NonNull UsbInterface iface,
+        @NonNull String key
+    ) {
+        int proto = iface.getInterfaceProtocol();
+        var conn = usbManager.openDevice(device);
+        if (conn == null) {
+            Log.e(TAG, fmt("openDevice failed: %s", key));
+            return;
+        }
+        if (!conn.claimInterface(iface, true)) {
+            Log.e(TAG, fmt("claimInterface failed: %s", key));
+            conn.close();
+            return;
+        }
+        var req = UsbConstants.USB_DIR_OUT | UsbConstants.USB_TYPE_CLASS | USB_RECIP_INTERFACE;
+        conn.controlTransfer(req, REQ_SET_PROTOCOL, BOOT_PROTOCOL, iface.getId(), null, 0, 200);
+        UsbEndpoint epIn = null;
+        for (int i = 0; i < iface.getEndpointCount(); i++) {
+            var ep = iface.getEndpoint(i);
+            if (ep.getDirection() == UsbConstants.USB_DIR_IN) {
+                epIn = ep;
+                break;
+            }
+        }
+        if (epIn == null) {
+            Log.e(TAG, fmt("No IN endpoint: %s", key));
+            conn.releaseInterface(iface);
+            conn.close();
+            return;
+        }
+        var reader = new DeviceReader(conn, iface, epIn, proto, key);
+        readers.put(key, reader);
+        reader.start();
+        notifyChanged();
+    }
+
+    private void removeDevice(@NonNull String deviceName) {
+        var prefix = fmt("%s#", deviceName);
+        boolean changed = false;
+        for (var key : new HashSet<>(readers.keySet())) {
+            if (key.startsWith(prefix)) {
+                var r = readers.remove(key);
+                if (r != null) {
+                    r.cancel();
+                    changed = true;
+                }
+            }
+        }
+        pendingPerm.remove(deviceName);
+        if (changed) notifyChanged();
+    }
+
+    private void notifyChanged() {
+        int kb = 0, ms = 0;
+        for (var r : readers.values()) switch (r.proto) {
+            case PROTO_KEYBOARD:
+                kb++;
+                break;
+            case PROTO_MOUSE:
+                ms++;
+                break;
+        }
+        final int keyboards = kb, mice = ms;
+        main.post(() -> {
+            Listener l = listener;
+            if (l != null) l.onDeviceChanged(keyboards, mice);
+        });
+    }
+
+    static int hidToXKeysym(int hid) {
+        if (hid >= 0x04 && hid <= 0x1D) return XK_a + (hid - 0x04);
+        if (hid >= 0x1E && hid <= 0x26) return XK_1 + (hid - 0x1E);
+        if (hid == 0x27) return XK_0;
+        if (hid >= 0x3A && hid <= 0x45) return XK_F1 + (hid - 0x3A);
+        if (hid >= 0x59 && hid <= 0x61) return XK_KP_0 + 1 + (hid - 0x59);
+        if (hid >= 0x68 && hid <= 0x6F) return XK_F13 + (hid - 0x68);
+        if (hid >= 0xE0 && hid <= 0xE7) return hidModifierToXKeysym(hid);
+        switch (hid) {
+            case 0x28: return XK_Return;
+            case 0x29: return XK_Escape;
+            case 0x2A: return XK_BackSpace;
+            case 0x2B: return XK_Tab;
+            case 0x2C: return XK_space;
+            case 0x2D: return XK_minus;
+            case 0x2E: return XK_equal;
+            case 0x2F: return XK_bracketleft;
+            case 0x30: return XK_bracketright;
+            case 0x31: return XK_backslash;
+            case 0x33: return XK_semicolon;
+            case 0x34: return XK_apostrophe;
+            case 0x35: return XK_grave;
+            case 0x36: return XK_comma;
+            case 0x37: return XK_period;
+            case 0x38: return XK_slash;
+            case 0x39: return XK_Caps_Lock;
+            case 0x46: return XK_Print;
+            case 0x47: return XK_Scroll_Lock;
+            case 0x48: return XK_Pause;
+            case 0x49: return XK_Insert;
+            case 0x4A: return XK_Home;
+            case 0x4B: return XK_Page_Up;
+            case 0x4C: return XK_Delete;
+            case 0x4D: return XK_End;
+            case 0x4E: return XK_Page_Down;
+            case 0x4F: return XK_Right;
+            case 0x50: return XK_Left;
+            case 0x51: return XK_Down;
+            case 0x52: return XK_Up;
+            case 0x53: return XK_Num_Lock;
+            case 0x54: return XK_KP_Divide;
+            case 0x55: return XK_KP_Multiply;
+            case 0x56: return XK_KP_Subtract;
+            case 0x57: return XK_KP_Add;
+            case 0x58: return XK_KP_Enter;
+            case 0x62: return XK_KP_0;
+            case 0x63: return XK_KP_Decimal;
+            case 0x67: return XK_KP_Equal;
+            default: return 0;
+        }
+    }
+
+    private static int hidModifierToXKeysym(int hid) {
+        switch (hid) {
+            case 0xE0: return XK_Control_L;
+            case 0xE1: return XK_Shift_L;
+            case 0xE2: return XK_Alt_L;
+            case 0xE3: return XK_Super_L;
+            case 0xE4: return XK_Control_R;
+            case 0xE5: return XK_Shift_R;
+            case 0xE6: return XK_Alt_R;
+            case 0xE7: return XK_Super_R;
+            default: return 0;
+        }
+    }
+
+    private final class DeviceReader extends Thread {
+        private final UsbDeviceConnection conn;
+        private final UsbInterface iface;
+        private final UsbEndpoint epIn;
+        private final int proto;
+        private final String key;
+        private volatile boolean alive = true;
+
+        private int prevMods;
+        private final Set<Integer> prevKeys = new HashSet<>();
+        private int prevButtons;
+
+        DeviceReader(
+            UsbDeviceConnection conn, UsbInterface iface,
+            UsbEndpoint epIn, int proto, String key
+        ) {
+            this.conn = conn;
+            this.iface = iface;
+            this.epIn = epIn;
+            this.proto = proto;
+            this.key = key;
+            setName(fmt("UsbHid-%s", proto == PROTO_KEYBOARD ? "Kbd" : "Mouse"));
+            setDaemon(true);
+        }
+
+        void cancel() {
+            alive = false;
+            interrupt();
+        }
+
+        void sendLedReport(byte state) {
+            var req = UsbConstants.USB_DIR_OUT | UsbConstants.USB_TYPE_CLASS
+                | USB_RECIP_INTERFACE;
+            conn.controlTransfer(req, REQ_SET_REPORT,
+                (OUTPUT_REPORT << 8), iface.getId(),
+                new byte[]{state}, 1, 200);
+        }
+
+        @Override
+        public void run() {
+            int max = Math.max(8, epIn.getMaxPacketSize());
+            byte[] buf = new byte[max];
+            Log.i(TAG, fmt("Reader started: %s", key));
+            if (proto == PROTO_KEYBOARD) sendLedReport(ledState);
+            while (alive) {
+                int n;
+                try {
+                    n = conn.bulkTransfer(epIn, buf, buf.length, READ_TIMEOUT_MS);
+                } catch (Exception e) {
+                    if (!alive) break;
+                    Log.w(TAG, fmt("bulkTransfer error: %s", e.getMessage()));
+                    break;
+                }
+                if (n < 0) {
+                    if (!alive) break;
+                    continue;
+                }
+                if (n == 0) continue;
+                if (proto == PROTO_KEYBOARD) parseKeyboard(buf, n);
+                else parseMouse(buf, n);
+            }
+            try {
+                conn.releaseInterface(iface);
+            } catch (Exception ignored) {
+            }
+            try {
+                conn.close();
+            } catch (Exception ignored) {
+            }
+            if (readers.remove(key) != null) notifyChanged();
+            Log.i(TAG, fmt("Reader stopped: %s", key));
+        }
+
+        private void parseKeyboard(byte[] d, int len) {
+            if (len < 3) return;
+            int mods = d[0] & 0xFF;
+            int modDiff = mods ^ prevMods;
+            if (modDiff != 0) {
+                for (int b = 0; b < 8; b++) {
+                    if ((modDiff & (1 << b)) == 0) continue;
+                    boolean down = (mods & (1 << b)) != 0;
+                    int keysym = hidToXKeysym(0xE0 + b);
+                    if (keysym != 0) dispatchKey(keysym, down);
+                }
+                prevMods = mods;
+            }
+            var cur = new HashSet<Integer>();
+            int keyEnd = Math.min(len, 8);
+            for (int i = 2; i < keyEnd; i++) {
+                int code = d[i] & 0xFF;
+                if (code != 0) cur.add(code);
+            }
+            for (int code : cur) {
+                if (!prevKeys.contains(code)) {
+                    int ks = hidToXKeysym(code);
+                    if (ks != 0) dispatchKey(ks, true);
+                }
+            }
+            for (int code : prevKeys) {
+                if (!cur.contains(code)) {
+                    int ks = hidToXKeysym(code);
+                    if (ks != 0) dispatchKey(ks, false);
+                }
+            }
+            prevKeys.clear();
+            prevKeys.addAll(cur);
+        }
+
+        private void parseMouse(byte[] d, int len) {
+            if (len < 3) return;
+            int buttons = d[0] & 0x07;
+            int dx = d[1];
+            int dy = d[2];
+            int diff = buttons ^ prevButtons;
+            if (diff != 0) {
+                for (int b = 0; b < 3; b++) {
+                    if ((diff & (1 << b)) == 0) continue;
+                    dispatchMouseButton(b, (buttons & (1 << b)) != 0);
+                }
+                prevButtons = buttons;
+            }
+            if (dx != 0 || dy != 0) dispatchMouseMove(dx, dy);
+            if (len >= 4) {
+                int wheel = d[3];
+                if (wheel != 0) dispatchScroll(wheel > 0);
+            }
+        }
+
+        private void dispatchKey(int keysym, boolean down) {
+            Listener l = listener;
+            if (l != null) l.onKeyEvent(keysym, down);
+        }
+
+        private void dispatchMouseMove(int dx, int dy) {
+            Listener l = listener;
+            if (l != null) l.onMouseMove(dx, dy);
+        }
+
+        private void dispatchMouseButton(int button, boolean pressed) {
+            Listener l = listener;
+            if (l != null) l.onMouseButton(button, pressed);
+        }
+
+        private void dispatchScroll(boolean up) {
+            Listener l = listener;
+            if (l != null) l.onMouseScroll(up);
+        }
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/display/base/X11Keymap.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/base/X11Keymap.java
index 5e0b1cd9c..22921d5e1 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/display/base/X11Keymap.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/base/X11Keymap.java
@@ -46,6 +46,8 @@ public final class X11Keymap {
     public static final int XK_Meta_R =                           0xffe8;  /* Right meta */
     public static final int XK_Alt_L =                            0xffe9;  /* Left alt */
     public static final int XK_Alt_R =                            0xffea;  /* Right alt */
+    public static final int XK_Super_L =                          0xffeb;  /* Left super (Win key) */
+    public static final int XK_Super_R =                          0xffec;  /* Right super (Win key) */
     public static final int XK_3270_PrintScreen =                 0xfd1d;
     public static final int XK_space =                            0x0020;  /* U+0020 SPACE */
     public static final int XK_exclam =                           0x0021;  /* U+0021 EXCLAMATION MARK */
@@ -221,9 +223,9 @@ public static int androidKeyToXKeysym(int keyCode) {
             case KeyEvent.KEYCODE_CAPS_LOCK:
                 return XK_Caps_Lock;
             case KeyEvent.KEYCODE_META_LEFT:
-                return XK_Meta_L;
+                return XK_Super_L;
             case KeyEvent.KEYCODE_META_RIGHT:
-                return XK_Meta_R;
+                return XK_Super_R;
             case KeyEvent.KEYCODE_SCROLL_LOCK:
                 return XK_Scroll_Lock;
             case KeyEvent.KEYCODE_NUM_LOCK:
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/display/vnc/base/BaseVncActivity.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/vnc/base/BaseVncActivity.java
index 9331f1d0a..f319b4221 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/display/vnc/base/BaseVncActivity.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/vnc/base/BaseVncActivity.java
@@ -81,6 +81,13 @@ public abstract class BaseVncActivity extends AppCompatActivity implements ImeIn
     protected Bitmap displayBitmap;
     protected final Object bitmapLock = new Object();
     protected VncStatus status = VncStatus.CONNECTING;
+    protected boolean capsLockOn = false;
+    protected boolean numLockOn = false;
+    protected LedStateListener ledStateListener;
+
+    public interface LedStateListener {
+        void onLedStateChanged(boolean caps, boolean num);
+    }
 
     protected enum VncStatus {
         CONNECTING,
@@ -420,6 +427,13 @@ public boolean dispatchKeyEvent(@NonNull KeyEvent event) {
                 metaState = (metaState | META_SHIFT_ON) & ~META_SHIFT_MASK | META_SHIFT_ON;
             }
             if (action == KeyEvent.ACTION_DOWN) {
+                if (keyCode == KEYCODE_CAPS_LOCK) {
+                    capsLockOn = !capsLockOn;
+                    notifyLedState();
+                } else if (keyCode == KEYCODE_NUM_LOCK) {
+                    numLockOn = !numLockOn;
+                    notifyLedState();
+                }
                 if (!modifier && vncExtraKeys.hasNonStickyModifiers())
                     vncExtraKeys.applyModifiers(true);
                 if (!modifier) sendMetaState(metaState, true);
@@ -495,6 +509,11 @@ private void sendMetaState(int metaState, boolean down) {
             vncClient.sendKey(androidKeyToXKeysym(KEYCODE_META_LEFT), down);
     }
 
+    private void notifyLedState() {
+        if (ledStateListener != null)
+            ledStateListener.onLedStateChanged(capsLockOn, numLockOn);
+    }
+
     protected static boolean isModifierKey(int keyCode) {
         switch (keyCode) {
             case KEYCODE_SHIFT_LEFT:
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/display/vnc/display/VMVncPresentationActivity.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/vnc/display/VMVncPresentationActivity.java
index 7cf14e8a1..f76cfa08a 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/display/vnc/display/VMVncPresentationActivity.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/vnc/display/VMVncPresentationActivity.java
@@ -1,11 +1,15 @@
 package cn.classfun.droidvm.ui.vm.display.vnc.display;
 
-import static cn.classfun.droidvm.lib.ui.MaterialMenu.setupToolbarMenu;
+import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
 import static cn.classfun.droidvm.ui.vm.display.base.DisplayPresentation.displayStateName;
 
 import android.graphics.Bitmap;
 import android.hardware.display.DisplayManager;
+import android.util.Log;
 import android.view.Display;
+import android.view.MenuItem;
+import android.view.MotionEvent;
+import android.view.View;
 import android.widget.Toast;
 
 import androidx.annotation.NonNull;
@@ -13,19 +17,25 @@
 import com.google.android.material.dialog.MaterialAlertDialogBuilder;
 
 import cn.classfun.droidvm.R;
+import cn.classfun.droidvm.lib.ui.MaterialMenu;
 import cn.classfun.droidvm.ui.vm.display.base.DisplayPresentation;
 import cn.classfun.droidvm.ui.vm.display.base.DisplayTouchPadPanel;
+import cn.classfun.droidvm.ui.vm.display.base.UsbHidInput;
 import cn.classfun.droidvm.ui.vm.display.vnc.base.BaseVncActivity;
 import cn.classfun.droidvm.ui.vm.display.vnc.input.VncTouchPadPanel;
 
 public final class VMVncPresentationActivity
     extends BaseVncActivity
-    implements DisplayManager.DisplayListener {
+    implements DisplayManager.DisplayListener, UsbHidInput.Listener {
     private DisplayTouchPadPanel touchpadPanel;
     private VncTouchPadPanel vncTouchPad;
     private int targetDisplayId = -1;
     private DisplayManager displayManager;
     private DisplayPresentation pres;
+    private UsbHidInput usbHidInput;
+    private boolean usbInputEnabled;
+    private int mouseButtonMask;
+    private static final float MOUSE_SPEED = 2.5f;
 
     @Override
     public void onDisplayAdded(int displayId) {
@@ -68,7 +78,8 @@ protected void onSetupActivity() {
         vncTouchPad = new VncTouchPadPanel(touchpadPanel);
         ivDisplay.setTextCommitListener(createTextCommitListener());
         touchpadPanel.getTouchpadArea().setOnClickListener(v -> toggleSoftKeyboard());
-        setupToolbarMenu(toolbar, R.menu.menu_vnc_presentation_menu, this::onMenuItemClicked);
+        setupPointerCapture();
+        setupPresentationMenu();
         displayManager = getSystemService(DisplayManager.class);
         displayManager.registerDisplayListener(this, mainHandler);
         DisplayPresentation.showDisplaySelectionDialog(this, disp -> {
@@ -77,6 +88,68 @@ protected void onSetupActivity() {
         });
     }
 
+    private void setupPointerCapture() {
+        var area = touchpadPanel.getTouchpadArea();
+        area.setFocusable(true);
+        area.setFocusableInTouchMode(true);
+        area.setOnCapturedPointerListener(this::onCapturedPointer);
+    }
+
+    private boolean onCapturedPointer(View v, MotionEvent event) {
+        var c = vncClient;
+        if (c == null || !c.isConnected()) return false;
+        switch (event.getActionMasked()) {
+            case MotionEvent.ACTION_MOVE:
+            case MotionEvent.ACTION_HOVER_MOVE:
+                float dx = event.getX() * MOUSE_SPEED;
+                float dy = event.getY() * MOUSE_SPEED;
+                if (dx != 0 || dy != 0) {
+                    vncTouchPad.moveCursor(dx, dy);
+                    sendPointer();
+                }
+                return true;
+            case MotionEvent.ACTION_BUTTON_PRESS:
+                mouseButtonMask |= buttonToMask(event.getActionButton());
+                sendPointer();
+                return true;
+            case MotionEvent.ACTION_BUTTON_RELEASE:
+                mouseButtonMask &= ~buttonToMask(event.getActionButton());
+                sendPointer();
+                return true;
+            case MotionEvent.ACTION_SCROLL:
+                float scroll = event.getAxisValue(MotionEvent.AXIS_VSCROLL);
+                if (scroll != 0) {
+                    c.sendPointer(
+                        (int) vncTouchPad.getCursorX(),
+                        (int) vncTouchPad.getCursorY(),
+                        scroll > 0 ? 8 : 16
+                    );
+                    sendPointer();
+                }
+                return true;
+        }
+        return false;
+    }
+
+    private void sendPointer() {
+        var c = vncClient;
+        if (c == null || !c.isConnected()) return;
+        c.sendPointer(
+            (int) vncTouchPad.getCursorX(),
+            (int) vncTouchPad.getCursorY(),
+            mouseButtonMask
+        );
+    }
+
+    private static int buttonToMask(int button) {
+        switch (button) {
+            case MotionEvent.BUTTON_PRIMARY: return 1;
+            case MotionEvent.BUTTON_TERTIARY: return 2;
+            case MotionEvent.BUTTON_SECONDARY: return 4;
+            default: return 0;
+        }
+    }
+
     @Override
     protected void onFramebufferReady(int width, int height) {
         vncTouchPad.setFramebufferSize(width, height);
@@ -97,6 +170,7 @@ protected void onClearDisplay() {
 
     @Override
     protected void onDestroyExtra() {
+        stopInputCapture();
         if (pres != null) {
             pres.dismiss();
             pres = null;
@@ -130,6 +204,7 @@ private void startPresentationOnTarget() {
                 .show();
             return;
         }
+        startInputCapture();
         synchronized (bitmapLock) {
             if (displayBitmap != null && !displayBitmap.isRecycled())
                 pres.updateBitmap(displayBitmap);
@@ -157,4 +232,121 @@ private void selectDisplay(@NonNull Display display) {
             .setOnDismissListener(d -> start.run())
             .show();
     }
+
+    private void setupPresentationMenu() {
+        int id = View.generateViewId();
+        var item = toolbar.getMenu().add(0, id, 0, R.string.menu);
+        item.setIcon(R.drawable.ic_more_vert);
+        item.setShowAsAction(MenuItem.SHOW_AS_ACTION_ALWAYS);
+        toolbar.setOnMenuItemClickListener(mi -> {
+            if (mi.getItemId() == id) {
+                showPresentationMenu();
+                return true;
+            }
+            return false;
+        });
+    }
+
+    private void showPresentationMenu() {
+        var popup = new MaterialMenu(this, toolbar);
+        popup.inflate(R.menu.menu_vnc_presentation_menu);
+        popup.setOnMenuItemClickListener(this::onMenuItemClicked);
+        popup.show();
+    }
+
+    private void startInputCapture() {
+        if (usbHidInput == null) {
+            usbHidInput = new UsbHidInput(this);
+            usbHidInput.setListener(this);
+        }
+        mouseButtonMask = 0;
+        usbInputEnabled = true;
+        usbHidInput.start();
+        usbHidInput.setLedState(capsLockOn, numLockOn, false);
+        ledStateListener = (caps, num) -> {
+            if (usbHidInput != null)
+                usbHidInput.setLedState(caps, num, false);
+        };
+        requestMouseCapture();
+    }
+
+    private void requestMouseCapture() {
+        var area = touchpadPanel.getTouchpadArea();
+        area.post(() -> {
+            if (!usbInputEnabled) return;
+            area.requestFocus();
+            area.requestPointerCapture();
+            Log.i(TAG, fmt(
+                "requestPointerCapture, hasCapture=%b",
+                area.hasPointerCapture()
+            ));
+        });
+    }
+
+    private void stopInputCapture() {
+        ledStateListener = null;
+        if (usbHidInput != null) usbHidInput.stop();
+        var area = touchpadPanel.getTouchpadArea();
+        area.releasePointerCapture();
+        mouseButtonMask = 0;
+        usbInputEnabled = false;
+    }
+
+    @Override
+    public void onKeyEvent(int keysym, boolean down) {
+        var c = vncClient;
+        if (c != null && c.isConnected())
+            c.sendKey(keysym, down);
+    }
+
+    @Override
+    public void onMouseMove(int dx, int dy) {
+        var c = vncClient;
+        if (c == null || !c.isConnected()) return;
+        vncTouchPad.moveCursor(dx, dy);
+        c.sendPointer(
+            (int) vncTouchPad.getCursorX(),
+            (int) vncTouchPad.getCursorY(),
+            mouseButtonMask
+        );
+    }
+
+    @Override
+    public void onMouseButton(int button, boolean pressed) {
+        var c = vncClient;
+        if (c == null || !c.isConnected()) return;
+        int mask = 1 << button;
+        if (pressed) mouseButtonMask |= mask;
+        else mouseButtonMask &= ~mask;
+        c.sendPointer(
+            (int) vncTouchPad.getCursorX(),
+            (int) vncTouchPad.getCursorY(),
+            mouseButtonMask
+        );
+    }
+
+    @Override
+    public void onMouseScroll(boolean up) {
+        var c = vncClient;
+        if (c == null || !c.isConnected()) return;
+        int scrollMask = up ? 8 : 16;
+        c.sendPointer(
+            (int) vncTouchPad.getCursorX(),
+            (int) vncTouchPad.getCursorY(),
+            scrollMask
+        );
+        c.sendPointer(
+            (int) vncTouchPad.getCursorX(),
+            (int) vncTouchPad.getCursorY(),
+            mouseButtonMask
+        );
+    }
+
+    @Override
+    public void onDeviceChanged(int keyboards, int mice) {
+        var msg = (keyboards + mice > 0) ?
+            getString(R.string.usb_input_status, keyboards, mice) :
+            getString(R.string.usb_input_no_device);
+        Toast.makeText(VMVncPresentationActivity.this, msg, Toast.LENGTH_SHORT).show();
+    }
 }
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/display/vnc/input/VncTouchPadPanel.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/vnc/input/VncTouchPadPanel.java
index 6d475fb8a..b9e99b1bc 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/display/vnc/input/VncTouchPadPanel.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/vnc/input/VncTouchPadPanel.java
@@ -41,6 +41,20 @@ public void setFramebufferSize(int width, int height) {
         cursorY = height / 2f;
     }
 
+    public float getCursorX() {
+        return cursorX;
+    }
+
+    public float getCursorY() {
+        return cursorY;
+    }
+
+    public void moveCursor(float dx, float dy) {
+        if (fbWidth <= 0 || fbHeight <= 0) return;
+        cursorX = max(0, min(cursorX + dx, fbWidth - 1));
+        cursorY = max(0, min(cursorY + dy, fbHeight - 1));
+    }
+
     @Override
     public void onCursorMove(float dx, float dy) {
         if (vncClient == null || !vncClient.isConnected()) return;
diff --git a/app/src/main/res/values-zh-rCN/strings.xml b/app/src/main/res/values-zh-rCN/strings.xml
index a8a03c4f6..ebea9b7f4 100644
--- a/app/src/main/res/values-zh-rCN/strings.xml
+++ b/app/src/main/res/values-zh-rCN/strings.xml
@@ -781,6 +781,8 @@
     <string name="vnc_menu_fullscreen">全屏</string>
     <string name="vnc_menu_input_mode_touch">触摸模式</string>
     <string name="vnc_menu_input_mode_mouse">鼠标模式</string>
+    <string name="usb_input_no_device">未找到USB键盘或鼠标</string>
+    <string name="usb_input_status">USB输入：%1$d个键盘，%2$d个鼠标</string>
     <string name="vnc_menu_rotate">旋转屏幕</string>
 
     <string name="vnc_op_mouse_move">鼠标移动</string>
diff --git a/app/src/main/res/values-zh-rTW/strings.xml b/app/src/main/res/values-zh-rTW/strings.xml
index 9beea8a68..cecfca264 100644
--- a/app/src/main/res/values-zh-rTW/strings.xml
+++ b/app/src/main/res/values-zh-rTW/strings.xml
@@ -781,6 +781,8 @@
     <string name="vnc_menu_fullscreen">全屏</string>
     <string name="vnc_menu_input_mode_touch">觸控模式</string>
     <string name="vnc_menu_input_mode_mouse">滑鼠模式</string>
+    <string name="usb_input_no_device">未找到USB鍵盤或滑鼠</string>
+    <string name="usb_input_status">USB輸入：%1$d個鍵盤，%2$d個滑鼠</string>
     <string name="vnc_menu_rotate">旋轉螢幕</string>
 
     <string name="vnc_op_mouse_move">滑鼠移動</string>
diff --git a/app/src/main/res/values/strings.xml b/app/src/main/res/values/strings.xml
index f56d10780..a3022eac0 100644
--- a/app/src/main/res/values/strings.xml
+++ b/app/src/main/res/values/strings.xml
@@ -818,6 +818,8 @@
     <string name="vnc_menu_fullscreen">Fullscreen</string>
     <string name="vnc_menu_input_mode_touch">Touch Mode</string>
     <string name="vnc_menu_input_mode_mouse">Mouse Mode</string>
+    <string name="usb_input_no_device">No USB keyboard or mouse found</string>
+    <string name="usb_input_status">USB input: %1$d keyboard(s), %2$d mouse(es)</string>
     <string name="vnc_menu_rotate">Rotate Screen</string>
 
     <string name="vnc_op_mouse_move">Mouse Move</string>

From c33a407243cdb68c007fc86df010d1705a03351a Mon Sep 17 00:00:00 2001
From: BigfootACA <bigfoot@classfun.cn>
Date: Tue, 23 Jun 2026 12:58:58 +0800
Subject: [PATCH 039/182] MainSettingsFragment: add config import and export
 supports

Signed-off-by: BigfootACA <bigfoot@classfun.cn>
---
 .../main/settings/MainSettingsFragment.java   | 146 ++++++++++++++++++
 app/src/main/res/drawable/ic_export_to.xml    |   9 ++
 app/src/main/res/drawable/ic_import_from.xml  |   9 ++
 .../res/layout/fragment_main_settings.xml     |  24 +++
 app/src/main/res/values-zh-rCN/strings.xml    |  12 ++
 app/src/main/res/values-zh-rTW/strings.xml    |  12 ++
 app/src/main/res/values/strings.xml           |  12 ++
 7 files changed, 224 insertions(+)
 create mode 100644 app/src/main/res/drawable/ic_export_to.xml
 create mode 100644 app/src/main/res/drawable/ic_import_from.xml

diff --git a/app/src/main/java/cn/classfun/droidvm/ui/main/settings/MainSettingsFragment.java b/app/src/main/java/cn/classfun/droidvm/ui/main/settings/MainSettingsFragment.java
index 9f5cb65b6..e65053e55 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/main/settings/MainSettingsFragment.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/main/settings/MainSettingsFragment.java
@@ -6,6 +6,7 @@
 import static android.widget.Toast.LENGTH_LONG;
 import static android.widget.Toast.LENGTH_SHORT;
 import static cn.classfun.droidvm.lib.Constants.GITHUB_ISSUE_URL;
+import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
 import static cn.classfun.droidvm.lib.utils.ThreadUtils.runOnPool;
 
 import android.content.Context;
@@ -17,6 +18,8 @@
 import android.view.View;
 import android.widget.Toast;
 
+import androidx.activity.result.ActivityResultLauncher;
+import androidx.activity.result.contract.ActivityResultContracts;
 import androidx.annotation.MenuRes;
 import androidx.annotation.NonNull;
 import androidx.annotation.Nullable;
@@ -25,11 +28,27 @@
 
 import com.google.android.material.dialog.MaterialAlertDialogBuilder;
 
+import org.json.JSONException;
+import org.json.JSONObject;
+
+import java.io.BufferedReader;
+import java.io.InputStreamReader;
+import java.nio.charset.StandardCharsets;
+import java.text.SimpleDateFormat;
+import java.util.Date;
+import java.util.Locale;
+
+import cn.classfun.droidvm.BuildConfig;
 import cn.classfun.droidvm.R;
 import cn.classfun.droidvm.lib.api.ApiManager;
 import cn.classfun.droidvm.lib.api.Privacy;
 import cn.classfun.droidvm.lib.daemon.DaemonHelper;
 import cn.classfun.droidvm.lib.data.Language;
+import cn.classfun.droidvm.lib.store.base.DataConfig;
+import cn.classfun.droidvm.lib.store.base.DataStore;
+import cn.classfun.droidvm.lib.store.disk.DiskStore;
+import cn.classfun.droidvm.lib.store.network.NetworkStore;
+import cn.classfun.droidvm.lib.store.vm.VMStore;
 import cn.classfun.droidvm.lib.ui.UIContext;
 import cn.classfun.droidvm.ui.hugepage.HugePageActivity;
 import cn.classfun.droidvm.ui.main.base.MainBaseFragment;
@@ -65,7 +84,11 @@ public final class MainSettingsFragment extends MainBaseFragment {
     private TextRowWidget itemPrivacy;
     private TextRowWidget itemApiManager;
     private TextRowWidget itemHugepageReserve;
+    private TextRowWidget itemExportConfig;
+    private TextRowWidget itemImportConfig;
     private DaemonHelper daemon;
+    private ActivityResultLauncher<String> exportConfigLauncher;
+    private ActivityResultLauncher<String[]> importConfigLauncher;
 
     @Override
     protected int getLayoutResId() {
@@ -113,6 +136,16 @@ public void onViewCreated(@NonNull View view, @Nullable Bundle savedInstanceStat
         itemPrivacy = view.findViewById(R.id.item_privacy);
         itemApiManager = view.findViewById(R.id.item_api_manager);
         itemHugepageReserve = view.findViewById(R.id.item_hugepage_reserve);
+        itemExportConfig = view.findViewById(R.id.item_export_config);
+        itemImportConfig = view.findViewById(R.id.item_import_config);
+        exportConfigLauncher = registerForActivityResult(
+            new ActivityResultContracts.CreateDocument("application/json"),
+            this::onExportFileSelected
+        );
+        importConfigLauncher = registerForActivityResult(
+            new ActivityResultContracts.OpenDocument(),
+            this::onImportFileSelected
+        );
         initSettings();
     }
 
@@ -132,6 +165,8 @@ private void initSettings() {
         bindOnClick(itemPrivacy, this::showPrivacyPolicy);
         bindOnClick(itemApiManager, this::showApiManager);
         bindOnClick(itemHugepageReserve, this::showHugePageReserve);
+        bindOnClick(itemExportConfig, this::exportConfig);
+        bindOnClick(itemImportConfig, this::importConfig);
         itemDaemonStatus.setSubtitle(R.string.settings_daemon_checking);
         itemDaemonStart.setVisibility(GONE);
         itemDaemonStop.setVisibility(GONE);
@@ -296,4 +331,115 @@ private void showApiManager() {
     private void showHugePageReserve() {
         startActivity(new Intent(requireContext(), HugePageActivity.class));
     }
+
+    private void exportConfig() {
+        var sdf = new SimpleDateFormat("yyyyMMdd_HHmmss", Locale.getDefault());
+        var timestamp = sdf.format(new Date());
+        exportConfigLauncher.launch(fmt("DroidVM_backup_%s.json", timestamp));
+    }
+
+    @SuppressWarnings("unused")
+    private void onExportFileSelected(Uri uri) {
+        if (uri == null) return;
+        var ctx = requireContext().getApplicationContext();
+        runOnPool(() -> {
+            try {
+                var vmStore = new VMStore(ctx);
+                var diskStore = new DiskStore(ctx);
+                var netStore = new NetworkStore(ctx);
+                var exportJson = new JSONObject();
+                exportJson.put("version", 1);
+                exportJson.put("timestamp", System.currentTimeMillis());
+                var sdf = new SimpleDateFormat("yyyy-MM-dd_HH:mm:ss", Locale.getDefault());
+                exportJson.put("date", sdf.format(new Date()));
+                exportJson.put("app_version", BuildConfig.VERSION_NAME);
+                exportJson.put("app_version_code", BuildConfig.VERSION_CODE);
+                exportJson.put("app_version_name", BuildConfig.VERSION_NAME);
+                exportJson.put("app_build_type", BuildConfig.BUILD_TYPE);
+                exportJson.put("app_id", BuildConfig.APPLICATION_ID);
+                exportJson.put("vms", vmStore.toJson().getJSONArray("vms"));
+                exportJson.put("disks", diskStore.toJson().getJSONArray("disks"));
+                exportJson.put("networks", netStore.toJson().getJSONArray("networks"));
+                try (var os = ctx.getContentResolver().openOutputStream(uri)) {
+                    if (os == null) throw new Exception("Failed to open output stream");
+                    os.write(exportJson.toString(4).getBytes(StandardCharsets.UTF_8));
+                }
+                mainHandler.post(() -> Toast.makeText(requireContext(),
+                    R.string.settings_export_success, LENGTH_SHORT).show());
+            } catch (Exception e) {
+                mainHandler.post(() -> Toast.makeText(requireContext(),
+                    getString(R.string.settings_export_failed, e.getMessage()), LENGTH_LONG).show());
+            }
+        });
+    }
+
+    private void importConfig() {
+        new MaterialAlertDialogBuilder(requireContext())
+            .setTitle(R.string.settings_import_confirm_title)
+            .setMessage(R.string.settings_import_confirm_message)
+            .setPositiveButton(android.R.string.ok, (d, w) ->
+                importConfigLauncher.launch(new String[]{"application/json"}))
+            .setNegativeButton(android.R.string.cancel, null)
+            .show();
+    }
+
+    private <T extends DataConfig> void loadStore(
+        @NonNull Class<? extends DataStore<T>> store,
+        @NonNull JSONObject json
+    ) throws Exception {
+        var ctx = requireContext().getApplicationContext();
+        var oldStore = store.newInstance();
+        var newStore = store.newInstance();
+        oldStore.load(ctx);
+        newStore.load(json);
+        newStore.forEach((k, v) -> {
+            if (oldStore.findById(k) == null)
+                oldStore.add(v);
+            else
+                oldStore.update(v);
+        });
+        oldStore.save(ctx);
+    }
+
+    @SuppressWarnings("unused")
+    private void onImportFileSelected(Uri uri) {
+        if (uri == null) return;
+        var ctx = requireContext().getApplicationContext();
+        runOnPool(() -> {
+            try {
+                StringBuilder sb = new StringBuilder();
+                try (var is = ctx.getContentResolver().openInputStream(uri)) {
+                    if (is == null) throw new Exception("Failed to open input stream");
+                    try (var reader = new BufferedReader(new InputStreamReader(is))) {
+                        String line;
+                        while ((line = reader.readLine()) != null)
+                            sb.append(line).append('\n');
+                    }
+                }
+                var importJson = new JSONObject(sb.toString());
+                int count = 0;
+                if (importJson.has("vms")) {
+                    loadStore(VMStore.class, importJson);
+                    count++;
+                }
+                if (importJson.has("disks")) {
+                    loadStore(DiskStore.class, importJson);
+                    count++;
+                }
+                if (importJson.has("networks")) {
+                    loadStore(NetworkStore.class, importJson);
+                    count++;
+                }
+                final int imported = count;
+                mainHandler.post(() -> Toast.makeText(requireContext(),
+                    getString(R.string.settings_import_success, imported), LENGTH_SHORT).show());
+            } catch (JSONException e) {
+                mainHandler.post(() -> Toast.makeText(requireContext(),
+                    R.string.settings_import_invalid_json, LENGTH_LONG).show());
+            } catch (Exception e) {
+                mainHandler.post(() -> Toast.makeText(requireContext(),
+                    getString(R.string.settings_import_failed, e.getMessage()), LENGTH_LONG).show());
+            }
+        });
+    }
 }
diff --git a/app/src/main/res/drawable/ic_export_to.xml b/app/src/main/res/drawable/ic_export_to.xml
new file mode 100644
index 000000000..269b6ef36
--- /dev/null
+++ b/app/src/main/res/drawable/ic_export_to.xml
@@ -0,0 +1,9 @@
+<vector xmlns:android="http://schemas.android.com/apk/res/android"
+    android:width="24dp"
+    android:height="24dp"
+    android:viewportWidth="24"
+    android:viewportHeight="24">
+    <path
+        android:fillColor="?attr/colorOnSurface"
+        android:pathData="M23,12L19,8V11H10V13H19V16M1,18V6C1,4.89 1.9,4 3,4H15A2,2 0 0,1 17,6V9H15V6H3V18H15V15H17V18A2,2 0 0,1 15,20H3A2,2 0 0,1 1,18Z" />
+</vector>
diff --git a/app/src/main/res/drawable/ic_import_from.xml b/app/src/main/res/drawable/ic_import_from.xml
new file mode 100644
index 000000000..5ea8dc1bf
--- /dev/null
+++ b/app/src/main/res/drawable/ic_import_from.xml
@@ -0,0 +1,9 @@
+<vector xmlns:android="http://schemas.android.com/apk/res/android"
+    android:width="24dp"
+    android:height="24dp"
+    android:viewportWidth="24"
+    android:viewportHeight="24">
+    <path
+        android:fillColor="?attr/colorOnSurface"
+        android:pathData="M14,12L10,8V11H2V13H10V16M20,18V6C20,4.89 19.1,4 18,4H6A2,2 0 0,0 4,6V9H6V6H18V18H6V15H4V18A2,2 0 0,0 6,20H18A2,2 0 0,0 20,18Z" />
+</vector>
diff --git a/app/src/main/res/layout/fragment_main_settings.xml b/app/src/main/res/layout/fragment_main_settings.xml
index 94c6effc8..948cdf8e5 100644
--- a/app/src/main/res/layout/fragment_main_settings.xml
+++ b/app/src/main/res/layout/fragment_main_settings.xml
@@ -65,6 +65,30 @@
 
             </cn.classfun.droidvm.ui.widgets.container.CollapsibleContainer>
 
+            <cn.classfun.droidvm.ui.widgets.container.CollapsibleContainer
+                android:layout_width="match_parent"
+                android:layout_height="wrap_content"
+                android:title="@string/settings_category_backup"
+                app:cc_collapsible="false">
+
+                <cn.classfun.droidvm.ui.widgets.row.TextRowWidget
+                    android:id="@+id/item_export_config"
+                    android:layout_width="match_parent"
+                    android:layout_height="wrap_content"
+                    android:icon="@drawable/ic_export_to"
+                    android:subtitle="@string/settings_export_config_summary"
+                    android:text="@string/settings_export_config_title" />
+
+                <cn.classfun.droidvm.ui.widgets.row.TextRowWidget
+                    android:id="@+id/item_import_config"
+                    android:layout_width="match_parent"
+                    android:layout_height="wrap_content"
+                    android:icon="@drawable/ic_import_from"
+                    android:subtitle="@string/settings_import_config_summary"
+                    android:text="@string/settings_import_config_title" />
+
+            </cn.classfun.droidvm.ui.widgets.container.CollapsibleContainer>
+
             <cn.classfun.droidvm.ui.widgets.container.CollapsibleContainer
                 android:layout_width="match_parent"
                 android:layout_height="wrap_content"
diff --git a/app/src/main/res/values-zh-rCN/strings.xml b/app/src/main/res/values-zh-rCN/strings.xml
index ebea9b7f4..8329c887e 100644
--- a/app/src/main/res/values-zh-rCN/strings.xml
+++ b/app/src/main/res/values-zh-rCN/strings.xml
@@ -326,6 +326,18 @@
     <string name="settings_language_title">语言</string>
     <string name="settings_language_summary">更改应用显示语言</string>
     <string name="settings_language_system_default">跟随系统</string>
+    <string name="settings_category_backup">备份与还原</string>
+    <string name="settings_export_config_title">导出配置到文件</string>
+    <string name="settings_export_config_summary">将虚拟机、网络和磁盘配置备份为 JSON 文件</string>
+    <string name="settings_import_config_title">从文件导入配置</string>
+    <string name="settings_import_config_summary">从 JSON 文件还原虚拟机、网络和磁盘配置</string>
+    <string name="settings_export_success">配置导出成功。</string>
+    <string name="settings_export_failed">导出失败：%1$s</string>
+    <string name="settings_import_confirm_title">导入配置</string>
+    <string name="settings_import_confirm_message">这将用选定文件中的数据覆盖您现有的虚拟机、磁盘和网络配置。确定要继续吗？</string>
+    <string name="settings_import_success">成功导入 %1$d 个配置文件。</string>
+    <string name="settings_import_failed">导入失败：%1$s</string>
+    <string name="settings_import_invalid_json">选定文件不是有效的配置备份文件。</string>
     <string name="settings_category_vm">虚拟机</string>
     <string name="settings_vm_auto_console_title">启动时打开控制台</string>
     <string name="settings_vm_auto_console_summary">启动虚拟机时自动打开控制台</string>
diff --git a/app/src/main/res/values-zh-rTW/strings.xml b/app/src/main/res/values-zh-rTW/strings.xml
index cecfca264..4847dd54d 100644
--- a/app/src/main/res/values-zh-rTW/strings.xml
+++ b/app/src/main/res/values-zh-rTW/strings.xml
@@ -326,6 +326,18 @@
     <string name="settings_language_title">語言</string>
     <string name="settings_language_summary">更改應用顯示語言</string>
     <string name="settings_language_system_default">跟隨系統</string>
+    <string name="settings_category_backup">備份與還原</string>
+    <string name="settings_export_config_title">匯出設定至檔案</string>
+    <string name="settings_export_config_summary">將虛擬機器、網路和磁碟設定備份為 JSON 檔案</string>
+    <string name="settings_import_config_title">從檔案匯入設定</string>
+    <string name="settings_import_config_summary">從 JSON 檔案還原虛擬機器、網路和磁碟設定</string>
+    <string name="settings_export_success">設定匯出成功。</string>
+    <string name="settings_export_failed">匯出失敗：%1$s</string>
+    <string name="settings_import_confirm_title">匯入設定</string>
+    <string name="settings_import_confirm_message">這將用選定檔案中的資料覆蓋您現有的虛擬機器、磁碟和網路設定。確定要繼續嗎？</string>
+    <string name="settings_import_success">成功匯入 %1$d 個設定檔。</string>
+    <string name="settings_import_failed">匯入失敗：%1$s</string>
+    <string name="settings_import_invalid_json">選定檔案不是有效的設定備份檔案。</string>
     <string name="settings_category_vm">虛擬機器</string>
     <string name="settings_vm_auto_console_title">啟動時開啟控制台</string>
     <string name="settings_vm_auto_console_summary">啟動虛擬機器時自動開啟控制台</string>
diff --git a/app/src/main/res/values/strings.xml b/app/src/main/res/values/strings.xml
index a3022eac0..184ffbd9a 100644
--- a/app/src/main/res/values/strings.xml
+++ b/app/src/main/res/values/strings.xml
@@ -328,6 +328,18 @@
     <string name="settings_language_title">Language</string>
     <string name="settings_language_summary">Change the app display language</string>
     <string name="settings_language_system_default">System Default</string>
+    <string name="settings_category_backup">Backup</string>
+    <string name="settings_export_config_title">Export config to file</string>
+    <string name="settings_export_config_summary">Backup VM, networks and disk configs to a JSON file</string>
+    <string name="settings_import_config_title">Import config from file</string>
+    <string name="settings_import_config_summary">Restore VM, networks and disks configs from a JSON file</string>
+    <string name="settings_export_success">Configuration exported successfully.</string>
+    <string name="settings_export_failed">Export failed: %1$s</string>
+    <string name="settings_import_confirm_title">Import Configuration</string>
+    <string name="settings_import_confirm_message">This will overwrite your existing VM, disk, and network configurations with the data from the selected file. Are you sure you want to continue?</string>
+    <string name="settings_import_success">Successfully imported %1$d configuration file(s).</string>
+    <string name="settings_import_failed">Import failed: %1$s</string>
+    <string name="settings_import_invalid_json">The selected file is not a valid configuration backup.</string>
     <string name="settings_category_vm">Virtual Machine</string>
     <string name="settings_vm_auto_console_title">Open console on start</string>
     <string name="settings_vm_auto_console_summary">Automatically open the console when a VM is started</string>

From 5d79a7bfa67b4f4a0bc9a8244bbb64629180b10c Mon Sep 17 00:00:00 2001
From: BigfootACA <bigfoot@classfun.cn>
Date: Tue, 23 Jun 2026 13:33:46 +0800
Subject: [PATCH 040/182] VMEditBasicTab: add extra options supports

Signed-off-by: BigfootACA <bigfoot@classfun.cn>
---
 .../vm/backend/CrosvmBackendInstance.java     |  3 +++
 .../vm/backend/QemuBackendInstance.java       |  3 +++
 .../ui/vm/edit/basic/VMEditBasicTab.java      | 23 ++++++++++++++++
 .../main/res/layout/partial_vm_edit_basic.xml | 27 +++++++++++++++++++
 app/src/main/res/values-zh-rCN/strings.xml    |  2 ++
 app/src/main/res/values-zh-rTW/strings.xml    |  2 ++
 app/src/main/res/values/strings.xml           |  2 ++
 7 files changed, 62 insertions(+)

diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/CrosvmBackendInstance.java b/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/CrosvmBackendInstance.java
index 10f13cac1..2d33a3623 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/CrosvmBackendInstance.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/CrosvmBackendInstance.java
@@ -33,6 +33,7 @@
 import cn.classfun.droidvm.daemon.vm.VMBackendInstance;
 import cn.classfun.droidvm.daemon.vm.VMStartResult;
 import cn.classfun.droidvm.lib.natives.NativeProcess;
+import cn.classfun.droidvm.lib.store.base.DataItem;
 import cn.classfun.droidvm.lib.store.disk.DiskBus;
 import cn.classfun.droidvm.lib.store.vm.DisplayBackend;
 import cn.classfun.droidvm.lib.store.vm.GpuApi;
@@ -170,6 +171,8 @@ private List<String> buildCommand() {
         buildGpuCommand(args);
         buildVncCommand(args);
         buildSerialCommand(args);
+        item.opt("extra_options", DataItem.newArray())
+            .forEach(arg -> args.add(arg.getValue().asString()));
         if (boot.uefi) {
             // crosvm has no custom-firmware support; always builtin EDK2
             args.add(PATH_EDK2_FIRMWARE);
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/QemuBackendInstance.java b/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/QemuBackendInstance.java
index 109d372f2..706bca772 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/QemuBackendInstance.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/QemuBackendInstance.java
@@ -33,6 +33,7 @@
 import cn.classfun.droidvm.daemon.vm.VMBackendInstance;
 import cn.classfun.droidvm.daemon.vm.VMStartResult;
 import cn.classfun.droidvm.lib.natives.NativeProcess;
+import cn.classfun.droidvm.lib.store.base.DataItem;
 import cn.classfun.droidvm.lib.store.disk.DiskBus;
 import cn.classfun.droidvm.lib.store.vm.DisplayBackend;
 import cn.classfun.droidvm.lib.store.vm.GpuBackend;
@@ -202,6 +203,8 @@ private List<String> buildCommand() {
         args.add("-qmp");
         args.add(fmt("unix:%s,server,nowait", qmpSocketPath));
         args.add("-nodefaults");
+        item.opt("extra_options", DataItem.newArray())
+            .forEach(arg -> args.add(arg.getValue().asString()));
         return args;
     }
 
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/basic/VMEditBasicTab.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/basic/VMEditBasicTab.java
index ab7ff0923..e4b7ac918 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/basic/VMEditBasicTab.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/basic/VMEditBasicTab.java
@@ -3,6 +3,7 @@
 import static cn.classfun.droidvm.lib.utils.FileUtils.checkFileName;
 import static cn.classfun.droidvm.lib.store.enums.Enums.optEnum;
 import static cn.classfun.droidvm.lib.store.vm.ProtectedVM.PROTECTED_WITHOUT_FIRMWARE;
+import static cn.classfun.droidvm.lib.utils.StringUtils.getEditText;
 
 import android.text.TextUtils;
 import android.view.View;
@@ -10,7 +11,10 @@
 import androidx.annotation.NonNull;
 import androidx.annotation.Nullable;
 
+import com.google.android.material.textfield.TextInputEditText;
+
 import cn.classfun.droidvm.R;
+import cn.classfun.droidvm.lib.store.base.DataItem;
 import cn.classfun.droidvm.lib.store.vm.ProtectedVM;
 import cn.classfun.droidvm.lib.store.vm.VMBackend;
 import cn.classfun.droidvm.lib.size.SizeUnit;
@@ -36,6 +40,7 @@ public final class VMEditBasicTab extends VMEditBaseTab {
     private SwitchRowWidget swPrepareLendMthp;
     private ChooseRowWidget chooseProtectedVm;
     private ChooseRowWidget chooseBackend;
+    private TextInputEditText etExtraOptions;
 
     public VMEditBasicTab(VMEditActivity parent, View view) {
         super(parent, view);
@@ -56,6 +61,7 @@ public void initView() {
         swPrepareLendMthp = view.findViewById(R.id.sw_prepare_lend_mthp);
         chooseProtectedVm = view.findViewById(R.id.choose_protected_vm);
         chooseBackend = view.findViewById(R.id.choose_backend);
+        etExtraOptions = view.findViewById(R.id.et_extra_options);
     }
 
     @Override
@@ -82,6 +88,15 @@ public void loadConfig(@NonNull VMConfig config) {
         swPrepareLendMthp.setChecked(item.optBoolean("prepare_lend_mthp", true));
         chooseProtectedVm.setSelectedItem(optEnum(item, "protected_vm", PROTECTED_WITHOUT_FIRMWARE));
         chooseBackend.setSelectedItem(optEnum(item, "backend", VMBackend.DEFAULT));
+        var extraOpts = item.opt("extra_options", null);
+        if (extraOpts != null && extraOpts.is(DataItem.Type.ARRAY)) {
+            var sb = new StringBuilder();
+            for (int i = 0; i < extraOpts.size(); i++) {
+                if (i > 0) sb.append('\n');
+                sb.append(extraOpts.optString(i, ""));
+            }
+            etExtraOptions.setText(sb.toString());
+        }
     }
 
     private boolean validateInputName(@NonNull VMStore store) {
@@ -158,6 +173,14 @@ public void saveConfig(@NonNull VMConfig config) {
         item.set("protected_vm", pvm);
         VMBackend backend = chooseBackend.getSelectedItem();
         item.set("backend", backend);
+        var arr = DataItem.newArray();
+        var text = getEditText(etExtraOptions);
+        for (var line : text.split("\n")) {
+            var trimmed = line.trim();
+            if (!trimmed.isEmpty())
+                arr.append(DataItem.newString(trimmed));
+        }
+        item.set("extra_options", arr);
     }
 
     /**
diff --git a/app/src/main/res/layout/partial_vm_edit_basic.xml b/app/src/main/res/layout/partial_vm_edit_basic.xml
index 34539056a..50dfe1ffa 100644
--- a/app/src/main/res/layout/partial_vm_edit_basic.xml
+++ b/app/src/main/res/layout/partial_vm_edit_basic.xml
@@ -126,4 +126,31 @@
 
     </cn.classfun.droidvm.ui.widgets.container.CollapsibleContainer>
 
+    <cn.classfun.droidvm.ui.widgets.container.CollapsibleContainer
+        android:layout_width="match_parent"
+        android:layout_height="wrap_content"
+        android:title="@string/create_vm_category_extra_options">
+
+        <com.google.android.material.textfield.TextInputLayout
+            android:id="@+id/til_extra_options"
+            style="@style/Widget.Material3.TextInputLayout.OutlinedBox"
+            android:layout_width="match_parent"
+            android:layout_height="wrap_content"
+            android:hint="@string/create_vm_extra_option_hint">
+
+            <com.google.android.material.textfield.TextInputEditText
+                android:id="@+id/et_extra_options"
+                android:layout_width="match_parent"
+                android:layout_height="wrap_content"
+                android:gravity="top"
+                android:inputType="text|textMultiLine"
+                android:minLines="3"
+                android:textSize="14sp"
+                android:layout_marginStart="24dp"
+                android:layout_marginEnd="24dp" />
+
+        </com.google.android.material.textfield.TextInputLayout>
+
+    </cn.classfun.droidvm.ui.widgets.container.CollapsibleContainer>
+
 </LinearLayout>
diff --git a/app/src/main/res/values-zh-rCN/strings.xml b/app/src/main/res/values-zh-rCN/strings.xml
index 8329c887e..345e4614f 100644
--- a/app/src/main/res/values-zh-rCN/strings.xml
+++ b/app/src/main/res/values-zh-rCN/strings.xml
@@ -176,6 +176,8 @@
     <string name="create_vm_protected_normal">普通</string>
     <string name="create_vm_protected_protected">保护</string>
     <string name="create_vm_protected_without_firmware">无固件保护</string>
+    <string name="create_vm_category_extra_options">额外选项</string>
+    <string name="create_vm_extra_option_hint">额外选项（每行一个）</string>
     <string name="create_vm_category_gpu">图形加速器</string>
     <string name="create_vm_gpu_enabled">启用GPU</string>
     <string name="create_vm_gpu_backend">渲染器</string>
diff --git a/app/src/main/res/values-zh-rTW/strings.xml b/app/src/main/res/values-zh-rTW/strings.xml
index 4847dd54d..01fa2f510 100644
--- a/app/src/main/res/values-zh-rTW/strings.xml
+++ b/app/src/main/res/values-zh-rTW/strings.xml
@@ -176,6 +176,8 @@
     <string name="create_vm_protected_normal">普通</string>
     <string name="create_vm_protected_protected">保護</string>
     <string name="create_vm_protected_without_firmware">無韌體保護</string>
+    <string name="create_vm_category_extra_options">額外選項</string>
+    <string name="create_vm_extra_option_hint">額外選項（每行一個）</string>
     <string name="create_vm_category_gpu">圖形加速器</string>
     <string name="create_vm_gpu_enabled">啟用GPU</string>
     <string name="create_vm_gpu_backend">渲染器</string>
diff --git a/app/src/main/res/values/strings.xml b/app/src/main/res/values/strings.xml
index 184ffbd9a..e0f79b4ee 100644
--- a/app/src/main/res/values/strings.xml
+++ b/app/src/main/res/values/strings.xml
@@ -178,6 +178,8 @@
     <string name="create_vm_protected_normal">Normal</string>
     <string name="create_vm_protected_protected">Protected</string>
     <string name="create_vm_protected_without_firmware">Protected without firmware</string>
+    <string name="create_vm_category_extra_options">Extra Options</string>
+    <string name="create_vm_extra_option_hint">Extra arguments (one per line)</string>
     <string name="create_vm_category_gpu">Graphics Accelerator</string>
     <string name="create_vm_gpu_enabled">Enable GPU</string>
     <string name="create_vm_gpu_backend">Renderer</string>

From 19e90937c1e8e1c9da3f7d78535f8d382a243f25 Mon Sep 17 00:00:00 2001
From: BigfootACA <bigfoot@classfun.cn>
Date: Tue, 23 Jun 2026 15:07:51 +0800
Subject: [PATCH 041/182] VMEditBasicTab: add multiple hypervisor supports

Signed-off-by: BigfootACA <bigfoot@classfun.cn>
---
 .../droidvm/daemon/vm/VMInstance.java         |  9 +-
 .../vm/backend/CrosvmBackendInstance.java     | 24 +++++-
 .../vm/backend/QemuBackendInstance.java       | 46 +++++++---
 .../droidvm/lib/store/vm/VMHypervisor.java    | 85 +++++++++++++++++++
 .../step/VirtualizationStepFragment.java      | 37 ++++----
 .../ui/vm/edit/basic/VMEditBasicTab.java      | 18 +++-
 .../main/res/drawable/ic_cellphone_cog.xml    |  9 ++
 .../main/res/layout/partial_vm_edit_basic.xml |  7 ++
 app/src/main/res/values-zh-rCN/strings.xml    |  8 +-
 app/src/main/res/values-zh-rTW/strings.xml    |  8 +-
 app/src/main/res/values/strings.xml           |  8 +-
 11 files changed, 226 insertions(+), 33 deletions(-)
 create mode 100644 app/src/main/java/cn/classfun/droidvm/lib/store/vm/VMHypervisor.java
 create mode 100644 app/src/main/res/drawable/ic_cellphone_cog.xml

diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/vm/VMInstance.java b/app/src/main/java/cn/classfun/droidvm/daemon/vm/VMInstance.java
index 8ba497b73..32349b1a6 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/vm/VMInstance.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/vm/VMInstance.java
@@ -352,7 +352,14 @@ private void runVM() {
         }
         if (bootPlan.entryFallback)
             fireEvent("boot_entry_fallback", null);
-        var result = inst.start();
+        VMStartResult result;
+        try {
+            result = inst.start();
+        } catch (Exception e) {
+            Log.e(TAG, fmt("VM %s: exception during start vm", getName()), e);
+            result = new VMStartResult();
+            result.setProcess(null);
+        }
         if (!result.isSuccess()) {
             exitCode = -1;
             setState(VMState.STOPPED);
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/CrosvmBackendInstance.java b/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/CrosvmBackendInstance.java
index 2d33a3623..376a0d758 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/CrosvmBackendInstance.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/CrosvmBackendInstance.java
@@ -41,7 +41,9 @@
 import cn.classfun.droidvm.lib.store.vm.ProtectedVM;
 import cn.classfun.droidvm.lib.store.vm.SharedDirCache;
 import cn.classfun.droidvm.lib.store.vm.SharedDirType;
+import cn.classfun.droidvm.lib.store.vm.VMBackend;
 import cn.classfun.droidvm.lib.store.vm.VMConfig;
+import cn.classfun.droidvm.lib.store.vm.VMHypervisor;
 
 @SuppressWarnings("FieldCanBeLocal")
 public final class CrosvmBackendInstance extends VMBackendInstance {
@@ -126,7 +128,27 @@ private List<String> buildCommand() {
         args.add(String.valueOf(Math.max(item.optLong("memory_mb", 512), 64)));
         args.add("--cpus");
         args.add(String.valueOf(Math.max(item.optLong("cpu_count", 1), 1)));
-        switch (optEnum(item, "protected_vm", ProtectedVM.PROTECTED_WITHOUT_FIRMWARE)) {
+        var hyp = item.optString("hypervisor", "auto");
+        var hypervisor = VMHypervisor.valueOf(hyp.toUpperCase());
+        if (hypervisor == VMHypervisor.AUTO)
+            hypervisor = VMHypervisor.findPreferredHypervisor(VMBackend.CROSVM);
+        if (hypervisor == null) throw new RuntimeException("No supported hypervisor found for CROSVM backend");
+        args.add("--hypervisor");
+        var defProtectedMode = ProtectedVM.PROTECTED_NORMAL;
+        switch (hypervisor) {
+            case KVM:
+                args.add("kvm");
+                break;
+            case GUNYAH:
+                args.add("gunyah");
+                defProtectedMode = ProtectedVM.PROTECTED_WITHOUT_FIRMWARE;
+                break;
+            case GENIEZONE:
+                args.add("geniezone");
+                break;
+            default:throw new IllegalArgumentException(fmt("Unsupported hypervisor: %s", hypervisor));
+        }
+        switch (optEnum(item, "protected_vm", defProtectedMode)) {
             case PROTECTED_PROTECTED:
                 args.add("--protected-vm");
                 break;
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/QemuBackendInstance.java b/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/QemuBackendInstance.java
index 706bca772..ffc7f38f4 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/QemuBackendInstance.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/QemuBackendInstance.java
@@ -39,7 +39,9 @@
 import cn.classfun.droidvm.lib.store.vm.GpuBackend;
 import cn.classfun.droidvm.lib.store.vm.ProtectedVM;
 import cn.classfun.droidvm.lib.store.vm.SharedDirCache;
+import cn.classfun.droidvm.lib.store.vm.VMBackend;
 import cn.classfun.droidvm.lib.store.vm.VMConfig;
+import cn.classfun.droidvm.lib.store.vm.VMHypervisor;
 
 @SuppressWarnings("FieldCanBeLocal")
 public final class QemuBackendInstance extends VMBackendInstance {
@@ -125,24 +127,44 @@ private List<String> buildCommand() {
         args.add(config.getName());
         args.add("-L");
         args.add(pathJoin(DATA_DIR, "usr", "share", "qemu"));
-        var protectedVm = optEnum(item, "protected_vm", ProtectedVM.PROTECTED_WITHOUT_FIRMWARE);
+        var hyp = item.optString("hypervisor", "auto");
+        var hypervisor = VMHypervisor.valueOf(hyp.toUpperCase());
+        if (hypervisor == VMHypervisor.AUTO)
+            hypervisor = VMHypervisor.findPreferredHypervisor(VMBackend.QEMU);
+        if (hypervisor == null) throw new RuntimeException("No supported hypervisor found for QEMU backend");
+        args.add("-accel");
+        var defProtectedMode = ProtectedVM.PROTECTED_NORMAL;
+        switch (hypervisor) {
+            case KVM:
+                args.add("kvm");
+                break;
+            case GUNYAH:
+                args.add("gunyah");
+                defProtectedMode = ProtectedVM.PROTECTED_WITHOUT_FIRMWARE;
+                break;
+            case SOFT:
+                args.add("tcg");
+                break;
+            default:throw new IllegalArgumentException(fmt("Unsupported hypervisor: %s", hypervisor));
+        }
+        args.add("-machine");
+        var machine = item.optString("machine_type", "virt");
+        var protectedVm = optEnum(item, "protected_vm", defProtectedMode);
+        if (hypervisor == VMHypervisor.SOFT)
+            protectedVm = ProtectedVM.PROTECTED_NORMAL;
         switch (protectedVm) {
             case PROTECTED_PROTECTED:
             case PROTECTED_WITHOUT_FIRMWARE:
-                args.add("-machine");
-                args.add("virt,confidential-guest-support=prot0");
-                args.add("-accel");
-                args.add("gunyah");
-                break;
-            default:
-                args.add("-machine");
-                args.add("virt");
-                args.add("-accel");
-                args.add("gunyah");
+                machine += ",confidential-guest-support=prot0";
                 break;
         }
+        args.add(machine);
         args.add("-cpu");
-        args.add(item.optBoolean("pmu", false) ? "host" : "host,pmu=off");
+        var cpu = "host";
+        if (hypervisor == VMHypervisor.SOFT)
+            cpu = item.optString("cpu_model", "cortex-a710");
+        if (!item.optBoolean("pmu", false)) cpu += ",pmu=off";
+        args.add(cpu);
         long cpuCount = Math.max(item.optLong("cpu_count", 1), 1);
         boolean smt = item.optBoolean("smt", true);
         long threads = smt ? 2 : 1;
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/store/vm/VMHypervisor.java b/app/src/main/java/cn/classfun/droidvm/lib/store/vm/VMHypervisor.java
new file mode 100644
index 000000000..e592d5007
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/lib/store/vm/VMHypervisor.java
@@ -0,0 +1,85 @@
+package cn.classfun.droidvm.lib.store.vm;
+
+import static cn.classfun.droidvm.lib.utils.FileUtils.shellCheckExists;
+
+import androidx.annotation.NonNull;
+import androidx.annotation.Nullable;
+import androidx.annotation.StringRes;
+
+import java.util.List;
+
+import cn.classfun.droidvm.R;
+import cn.classfun.droidvm.lib.store.enums.StringEnum;
+
+public enum VMHypervisor implements StringEnum {
+    AUTO(R.string.create_vm_hypervisor_auto, null),
+    SOFT(R.string.create_vm_hypervisor_soft, null),
+    KVM(R.string.create_vm_hypervisor_kvm, "/dev/kvm"),
+    GUNYAH(R.string.create_vm_hypervisor_gunyah, "/dev/gunyah"),
+    GENIEZONE(R.string.create_vm_hypervisor_geniezone, "/dev/gzvm");
+
+    public static final VMHypervisor DEFAULT = AUTO;
+
+    private final @StringRes int stringId;
+    private final String devicePath;
+
+    VMHypervisor(@StringRes int stringId, @Nullable String devicePath) {
+        this.stringId = stringId;
+        this.devicePath = devicePath;
+    }
+
+    @Override
+    @StringRes
+    public int getStringId() {
+        return stringId;
+    }
+
+    @Nullable
+    public String getDevicePath() {
+        return devicePath;
+    }
+
+    public boolean isSupported() {
+        return devicePath == null || shellCheckExists(devicePath);
+    }
+
+    public static boolean isBackendSupported(VMBackend backend, VMHypervisor hypervisor) {
+        if (backend == null || hypervisor == AUTO) return true;
+        switch (backend) {
+            case QEMU: switch (hypervisor) {
+                case SOFT:
+                case KVM:
+                case GUNYAH:
+                    return true;
+            } break;
+            case CROSVM: switch (hypervisor) {
+                case KVM:
+                case GUNYAH:
+                case GENIEZONE:
+                    return true;
+            } break;
+        }
+        return false;
+    }
+
+    @Nullable
+    public static VMHypervisor findPreferredHypervisor(
+        @Nullable VMBackend backend,
+        @NonNull List<VMHypervisor> allowed
+    ) {
+        for (var hypervisor : allowed) {
+            if (hypervisor.getDevicePath() == null) continue;
+            if (!isBackendSupported(backend, hypervisor)) continue;
+            if (!hypervisor.isSupported()) continue;
+            return hypervisor;
+        }
+        if (allowed.contains(SOFT) && isBackendSupported(backend, SOFT))
+            return SOFT;
+        return null;
+    }
+
+    @Nullable
+    public static VMHypervisor findPreferredHypervisor(@Nullable VMBackend backend) {
+        return findPreferredHypervisor(backend, List.of(values()));
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/setup/step/VirtualizationStepFragment.java b/app/src/main/java/cn/classfun/droidvm/ui/setup/step/VirtualizationStepFragment.java
index 877afbb85..14851c791 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/setup/step/VirtualizationStepFragment.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/setup/step/VirtualizationStepFragment.java
@@ -1,6 +1,5 @@
 package cn.classfun.droidvm.ui.setup.step;
 
-import static cn.classfun.droidvm.lib.utils.FileUtils.shellCheckExists;
 import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
 import static cn.classfun.droidvm.lib.utils.ThreadUtils.runOnPool;
 import static cn.classfun.droidvm.lib.utils.ThreadUtils.threadSleep;
@@ -16,6 +15,7 @@
 import androidx.annotation.Nullable;
 
 import cn.classfun.droidvm.R;
+import cn.classfun.droidvm.lib.store.vm.VMHypervisor;
 import cn.classfun.droidvm.ui.setup.SetupActivity;
 import cn.classfun.droidvm.ui.setup.base.BaseCheckStepFragment;
 
@@ -44,23 +44,30 @@ protected void runCheck() {
 
     private void operationThread() {
         threadSleep(CHECK_DELAY);
-        var kvmExists = shellCheckExists("/dev/kvm");
-        var gunyahExists = shellCheckExists("/dev/gunyah");
-        boolean success = kvmExists || gunyahExists;
-        Log.i(TAG, fmt(
-            "kvm exists: %s gunyah exists: %s",
-            String.valueOf(kvmExists),
-            String.valueOf(gunyahExists)
-        ));
+        boolean success = false;
+        var ctx = requireContext();
+        var displayString = new StringBuilder();
+        for (var hyp : VMHypervisor.values()) {
+            if (hyp.getDevicePath() == null) continue;
+            var supported = hyp.isSupported();
+            displayString.append(fmt(
+                "%s: %s\n",
+                hyp.getDisplayString(ctx),
+                supported ? "✅" : "❌"
+            ));
+            Log.i(TAG, fmt(
+                "%s: %s",
+                hyp.name().toLowerCase(),
+                supported
+            ));
+            if (supported) success = true;
+        }
+        var finalSuccess = success;
         requireActivity().runOnUiThread(() -> {
             if (!isAdded()) return;
-            if (success) {
+            if (finalSuccess) {
                 showSuccess(R.string.setup_virt_title, R.string.setup_virt_success);
-                showDetail(getString(
-                    R.string.setup_virt_detail,
-                    String.valueOf(kvmExists),
-                    String.valueOf(gunyahExists)
-                ));
+                showDetail(displayString.toString());
             } else {
                 showError(R.string.setup_virt_title, R.string.setup_virt_fail);
             }
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/basic/VMEditBasicTab.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/basic/VMEditBasicTab.java
index e4b7ac918..ead57cc5a 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/basic/VMEditBasicTab.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/basic/VMEditBasicTab.java
@@ -19,6 +19,7 @@
 import cn.classfun.droidvm.lib.store.vm.VMBackend;
 import cn.classfun.droidvm.lib.size.SizeUnit;
 import cn.classfun.droidvm.lib.store.vm.VMConfig;
+import cn.classfun.droidvm.lib.store.vm.VMHypervisor;
 import cn.classfun.droidvm.lib.store.vm.VMStore;
 import cn.classfun.droidvm.ui.vm.edit.VMEditActivity;
 import cn.classfun.droidvm.ui.vm.edit.base.VMEditBaseTab;
@@ -40,6 +41,7 @@ public final class VMEditBasicTab extends VMEditBaseTab {
     private SwitchRowWidget swPrepareLendMthp;
     private ChooseRowWidget chooseProtectedVm;
     private ChooseRowWidget chooseBackend;
+    private ChooseRowWidget chooseHypervisor;
     private TextInputEditText etExtraOptions;
 
     public VMEditBasicTab(VMEditActivity parent, View view) {
@@ -61,6 +63,7 @@ public void initView() {
         swPrepareLendMthp = view.findViewById(R.id.sw_prepare_lend_mthp);
         chooseProtectedVm = view.findViewById(R.id.choose_protected_vm);
         chooseBackend = view.findViewById(R.id.choose_backend);
+        chooseHypervisor = view.findViewById(R.id.choose_hypervisor);
         etExtraOptions = view.findViewById(R.id.et_extra_options);
     }
 
@@ -69,7 +72,8 @@ public void initValue() {
         inputMemory.setValue(512, SizeUnit.MB);
         inputCpu.setValue(1);
         chooseProtectedVm.configure(ProtectedVM.class, PROTECTED_WITHOUT_FIRMWARE);
-        chooseBackend.configure(VMBackend.class, VMBackend.CROSVM);
+        chooseBackend.configure(VMBackend.class, VMBackend.DEFAULT);
+        chooseHypervisor.configure(VMHypervisor.class, VMHypervisor.DEFAULT);
     }
 
     @Override
@@ -88,6 +92,7 @@ public void loadConfig(@NonNull VMConfig config) {
         swPrepareLendMthp.setChecked(item.optBoolean("prepare_lend_mthp", true));
         chooseProtectedVm.setSelectedItem(optEnum(item, "protected_vm", PROTECTED_WITHOUT_FIRMWARE));
         chooseBackend.setSelectedItem(optEnum(item, "backend", VMBackend.DEFAULT));
+        chooseHypervisor.setSelectedItem(optEnum(item, "hypervisor", VMHypervisor.DEFAULT));
         var extraOpts = item.opt("extra_options", null);
         if (extraOpts != null && extraOpts.is(DataItem.Type.ARRAY)) {
             var sb = new StringBuilder();
@@ -147,11 +152,20 @@ private boolean validateInputCpu(@NonNull VMStore ignored) {
         return true;
     }
 
+    private boolean validateHypervisor(@NonNull VMStore ignored) {
+        VMBackend backend = chooseBackend.getSelectedItem();
+        VMHypervisor hypervisor = chooseHypervisor.getSelectedItem();
+        if (!VMHypervisor.isBackendSupported(backend, hypervisor))
+            return showValidateFailed(R.string.create_vm_error_hypervisor_not_supported);
+        return true;
+    }
+
     @Override
     public boolean validateInput(@NonNull VMStore store) {
         if (!validateInputName(store)) return false;
         if (!validateInputMemory(store)) return false;
         if (!validateInputCpu(store)) return false;
+        if (!validateHypervisor(store)) return false;
         return true;
     }
 
@@ -173,6 +187,8 @@ public void saveConfig(@NonNull VMConfig config) {
         item.set("protected_vm", pvm);
         VMBackend backend = chooseBackend.getSelectedItem();
         item.set("backend", backend);
+        VMHypervisor hypervisor = chooseHypervisor.getSelectedItem();
+        item.set("hypervisor", hypervisor);
         var arr = DataItem.newArray();
         var text = getEditText(etExtraOptions);
         for (var line : text.split("\n")) {
diff --git a/app/src/main/res/drawable/ic_cellphone_cog.xml b/app/src/main/res/drawable/ic_cellphone_cog.xml
new file mode 100644
index 000000000..0812d86bd
--- /dev/null
+++ b/app/src/main/res/drawable/ic_cellphone_cog.xml
@@ -0,0 +1,9 @@
+<vector xmlns:android="http://schemas.android.com/apk/res/android"
+    android:width="24dp"
+    android:height="24dp"
+    android:viewportWidth="24"
+    android:viewportHeight="24">
+    <path
+        android:fillColor="?attr/colorOnSurface"
+        android:pathData="M9.82,12.5C9.84,12.33 9.86,12.17 9.86,12C9.86,11.83 9.84,11.67 9.82,11.5L10.9,10.69C11,10.62 11,10.5 10.96,10.37L9.93,8.64C9.87,8.53 9.73,8.5 9.62,8.53L8.34,9.03C8.07,8.83 7.78,8.67 7.47,8.54L7.27,7.21C7.27,7.09 7.16,7 7.03,7H5C4.85,7 4.74,7.09 4.72,7.21L4.5,8.53C4.21,8.65 3.92,8.83 3.65,9L2.37,8.5C2.25,8.47 2.12,8.5 2.06,8.63L1.03,10.36C0.97,10.5 1,10.61 1.1,10.69L2.18,11.5C2.16,11.67 2.15,11.84 2.15,12C2.15,12.17 2.17,12.33 2.19,12.5L1.1,13.32C1,13.39 1,13.53 1.04,13.64L2.07,15.37C2.13,15.5 2.27,15.5 2.38,15.5L3.66,15C3.93,15.18 4.22,15.34 4.53,15.47L4.73,16.79C4.74,16.91 4.85,17 5,17H7.04C7.17,17 7.28,16.91 7.29,16.79L7.5,15.47C7.8,15.35 8.09,15.17 8.36,15L9.64,15.5C9.76,15.53 9.89,15.5 9.95,15.37L11,13.64C11.04,13.53 11,13.4 10.92,13.32L9.82,12.5M6,13.75C5,13.75 4.2,12.97 4.2,12C4.2,11.03 5,10.25 6,10.25C7,10.25 7.8,11.03 7.8,12C7.8,12.97 7,13.75 6,13.75M17,1H7A2,2 0 0,0 5,3V6H7V4H17V20H7V18H5V21A2,2 0 0,0 7,23H17A2,2 0 0,0 19,21V3A2,2 0 0,0 17,1Z" />
+</vector>
diff --git a/app/src/main/res/layout/partial_vm_edit_basic.xml b/app/src/main/res/layout/partial_vm_edit_basic.xml
index 50dfe1ffa..139ba7162 100644
--- a/app/src/main/res/layout/partial_vm_edit_basic.xml
+++ b/app/src/main/res/layout/partial_vm_edit_basic.xml
@@ -48,6 +48,13 @@
             android:icon="@drawable/ic_application_cog"
             android:text="@string/create_vm_backend" />
 
+        <cn.classfun.droidvm.ui.widgets.row.ChooseRowWidget
+            android:id="@+id/choose_hypervisor"
+            android:layout_width="match_parent"
+            android:layout_height="wrap_content"
+            android:icon="@drawable/ic_cellphone_cog"
+            android:text="@string/create_vm_hypervisor" />
+
     </cn.classfun.droidvm.ui.widgets.container.CollapsibleContainer>
 
     <cn.classfun.droidvm.ui.widgets.container.CollapsibleContainer
diff --git a/app/src/main/res/values-zh-rCN/strings.xml b/app/src/main/res/values-zh-rCN/strings.xml
index 345e4614f..b8fda6ce8 100644
--- a/app/src/main/res/values-zh-rCN/strings.xml
+++ b/app/src/main/res/values-zh-rCN/strings.xml
@@ -43,7 +43,6 @@
     <string name="setup_virt_desc">正在检查虚拟化支持&#8230;</string>
     <string name="setup_virt_success">\u2705 已找到虚拟化支持。</string>
     <string name="setup_virt_fail">\u274C 未找到虚拟化支持，请确认已安装 com.android.virt APEX。</string>
-    <string name="setup_virt_detail">KVM: %1$s\nGunyah: %2$s\n</string>
 
     <string name="setup_storage_title">文件访问权限</string>
     <string name="setup_storage_desc">正在检查文件访问权限&#8230;</string>
@@ -152,12 +151,19 @@
     <string name="create_vm_backend">后端</string>
     <string name="create_vm_backend_crosvm">CrosVM</string>
     <string name="create_vm_backend_qemu">QEMU</string>
+    <string name="create_vm_hypervisor">虚拟化</string>
+    <string name="create_vm_hypervisor_auto">自动</string>
+    <string name="create_vm_hypervisor_soft">软件模拟</string>
+    <string name="create_vm_hypervisor_kvm">Linux KVM</string>
+    <string name="create_vm_hypervisor_gunyah">高通 Gunyah</string>
+    <string name="create_vm_hypervisor_geniezone">联发科 GenieZone</string>
     <string name="create_vm_btn">创建</string>
     <string name="create_vm_error_name_empty">名称不能为空</string>
     <string name="create_vm_error_name_invalid">名称包含无效字符</string>
     <string name="create_vm_error_name_duplicate">已存在同名虚拟机</string>
     <string name="create_vm_error_save">保存配置时发生错误</string>
     <string name="create_vm_error_invalid_number">无效数字</string>
+    <string name="create_vm_error_hypervisor_not_supported">所选后端不支持选中的虚拟化模式</string>
     <string name="create_vm_error_path_invalid">无效的绝对路径</string>
     <string name="create_vm_category_kernel">Linux 内核</string>
     <string name="create_vm_kernel_hint">内核</string>
diff --git a/app/src/main/res/values-zh-rTW/strings.xml b/app/src/main/res/values-zh-rTW/strings.xml
index 01fa2f510..7e536f825 100644
--- a/app/src/main/res/values-zh-rTW/strings.xml
+++ b/app/src/main/res/values-zh-rTW/strings.xml
@@ -43,7 +43,6 @@
     <string name="setup_virt_desc">正在檢查虛擬化支援&#8230;</string>
     <string name="setup_virt_success">\u2705 已找到虛擬化支援。</string>
     <string name="setup_virt_fail">\u274C 未找到虛擬化支援，請確認已安裝 com.android.virt APEX。</string>
-    <string name="setup_virt_detail">KVM: %1$s\nGunyah: %2$s\n</string>
 
     <string name="setup_storage_title">檔案存取權限</string>
     <string name="setup_storage_desc">正在檢查檔案存取權限&#8230;</string>
@@ -152,12 +151,19 @@
     <string name="create_vm_backend">後端</string>
     <string name="create_vm_backend_crosvm">CrosVM</string>
     <string name="create_vm_backend_qemu">QEMU</string>
+    <string name="create_vm_hypervisor">虛擬化</string>
+    <string name="create_vm_hypervisor_auto">自動</string>
+    <string name="create_vm_hypervisor_soft">軟體模擬</string>
+    <string name="create_vm_hypervisor_kvm">Linux KVM</string>
+    <string name="create_vm_hypervisor_gunyah">高通 Gunyah</string>
+    <string name="create_vm_hypervisor_geniezone">聯發科 GenieZone</string>
     <string name="create_vm_btn">建立</string>
     <string name="create_vm_error_name_empty">名稱不能為空</string>
     <string name="create_vm_error_name_invalid">名稱包含無效字元</string>
     <string name="create_vm_error_name_duplicate">已存在同名虛擬機器</string>
     <string name="create_vm_error_save">儲存配置時發生錯誤</string>
     <string name="create_vm_error_invalid_number">無效數字</string>
+    <string name="create_vm_error_hypervisor_not_supported">所選後端不支援選取的虛擬化模式</string>
     <string name="create_vm_error_path_invalid">無效的絕對路徑</string>
     <string name="create_vm_category_kernel">Linux 核心</string>
     <string name="create_vm_kernel_hint">核心</string>
diff --git a/app/src/main/res/values/strings.xml b/app/src/main/res/values/strings.xml
index e0f79b4ee..da1818c09 100644
--- a/app/src/main/res/values/strings.xml
+++ b/app/src/main/res/values/strings.xml
@@ -44,7 +44,6 @@
     <string name="setup_virt_desc">Checking virtualization support&#8230;</string>
     <string name="setup_virt_success">\u2705 Virtualization support found.</string>
     <string name="setup_virt_fail">\u274C Virtualization support not found. Please ensure the com.android.virt APEX is available.</string>
-    <string name="setup_virt_detail">KVM: %1$s\nGunyah: %2$s\n</string>
 
     <string name="setup_storage_title">File Access</string>
     <string name="setup_storage_desc">Checking file access permission&#8230;</string>
@@ -154,12 +153,19 @@
     <string name="create_vm_backend">Backend</string>
     <string name="create_vm_backend_crosvm">CrosVM</string>
     <string name="create_vm_backend_qemu">QEMU</string>
+    <string name="create_vm_hypervisor">Hypervisor</string>
+    <string name="create_vm_hypervisor_auto">Auto</string>
+    <string name="create_vm_hypervisor_soft">Software Emulated</string>
+    <string name="create_vm_hypervisor_kvm">Linux KVM</string>
+    <string name="create_vm_hypervisor_gunyah">Qualcomm Gunyah</string>
+    <string name="create_vm_hypervisor_geniezone">MediaTek GenieZone</string>
     <string name="create_vm_btn">Create</string>
     <string name="create_vm_error_name_empty">Name is required</string>
     <string name="create_vm_error_name_invalid">Name contains invalid characters</string>
     <string name="create_vm_error_name_duplicate">A VM with this name already exists</string>
     <string name="create_vm_error_save">Error while saving config</string>
     <string name="create_vm_error_invalid_number">Invalid number</string>
+    <string name="create_vm_error_hypervisor_not_supported">Selected hypervisor is not supported by selected backend</string>
     <string name="create_vm_error_path_invalid">Invalid absolute path</string>
     <string name="create_vm_category_kernel">Linux Kernel</string>
     <string name="create_vm_kernel_hint">Kernel</string>

From 944bd74c84a4d62912de5359c99b5710c0d1f81d Mon Sep 17 00:00:00 2001
From: lateautumn233 <lateautumn233@foxmail.com>
Date: Wed, 24 Jun 2026 17:42:07 +0800
Subject: [PATCH 042/182] feat(display): add crosvm native display backend

- Render guest via crosvm android-display into an Android Surface
- Forward touch/keyboard as evdev over daemon binder with IPC fallback
- Host broker binder + pre-bound input sockets in the root daemon
- Track MT slots per pointer and toggle BTN_TOUCH on first/last contact
- Extract BaseExtraKeysAdapter shared by VNC and native key panels
---
 app/src/main/AndroidManifest.xml              |   7 +
 .../aidl/android/crosvm/DisplayConfig.aidl    |  25 +
 .../crosvm/ICrosvmAndroidDisplayService.aidl  |  44 ++
 .../display/INativeDisplayRootService.aidl    |  27 +
 .../cn/classfun/droidvm/daemon/Daemon.java    |   4 +
 .../daemon/display/DaemonSystemContext.java   |  60 ++
 .../daemon/display/NativeDisplayBinder.java   | 124 +++++
 .../daemon/ipc/vm/DisplayAttachHandler.java   |  32 ++
 .../droidvm/daemon/ipc/vm/InputHandler.java   |  44 ++
 .../droidvm/daemon/server/Server.java         |   3 +
 .../droidvm/daemon/vm/VMBackendInstance.java  |   8 +
 .../droidvm/daemon/vm/VMInstance.java         |  10 +-
 .../vm/backend/CrosvmBackendInstance.java     |  60 ++
 .../vm/backend/NativeDisplayInputBridge.java  | 194 +++++++
 .../droidvm/lib/store/vm/NativeDisplay.java   |  72 +++
 .../vm/display/base/BaseExtraKeysAdapter.java | 123 +++++
 .../display/DisplayProvider.java              | 225 ++++++++
 .../display/VMNativeDisplayActivity.java      | 514 ++++++++++++++++++
 .../nativedisplay/input/DirectInputSink.java  |  71 +++
 .../nativedisplay/input/EvdevEncoder.java     | 181 ++++++
 .../nativedisplay/input/InputForwarder.java   | 178 ++++++
 .../nativedisplay/input/KeyCodeMapper.java    | 152 ++++++
 .../input/NativeExtraKeysPanel.java           |  57 ++
 .../input/NativeKeyboardEditText.java         |  70 +++
 .../input/TouchScaleCalculator.java           |  31 ++
 .../display/vnc/input/VncExtraKeysPanel.java  | 109 +---
 .../vm/edit/graphics/VMEditGraphicsTab.java   |  17 +
 .../droidvm/ui/vm/info/ConsoleButton.java     |  29 +-
 .../res/layout/activity_vm_native_display.xml | 144 +++++
 .../res/layout/partial_vm_edit_graphics.xml   |   7 +
 .../res/menu/menu_native_display_menu.xml     |  19 +
 app/src/main/res/values-zh-rCN/strings.xml    |   8 +
 app/src/main/res/values/strings.xml           |   8 +
 33 files changed, 2561 insertions(+), 96 deletions(-)
 create mode 100644 app/src/main/aidl/android/crosvm/DisplayConfig.aidl
 create mode 100644 app/src/main/aidl/android/crosvm/ICrosvmAndroidDisplayService.aidl
 create mode 100644 app/src/main/aidl/cn/classfun/droidvm/display/INativeDisplayRootService.aidl
 create mode 100644 app/src/main/java/cn/classfun/droidvm/daemon/display/DaemonSystemContext.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/daemon/display/NativeDisplayBinder.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/daemon/ipc/vm/DisplayAttachHandler.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/daemon/ipc/vm/InputHandler.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/NativeDisplayInputBridge.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/lib/store/vm/NativeDisplay.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/ui/vm/display/base/BaseExtraKeysAdapter.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/ui/vm/display/nativedisplay/display/DisplayProvider.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/ui/vm/display/nativedisplay/display/VMNativeDisplayActivity.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/ui/vm/display/nativedisplay/input/DirectInputSink.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/ui/vm/display/nativedisplay/input/EvdevEncoder.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/ui/vm/display/nativedisplay/input/InputForwarder.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/ui/vm/display/nativedisplay/input/KeyCodeMapper.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/ui/vm/display/nativedisplay/input/NativeExtraKeysPanel.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/ui/vm/display/nativedisplay/input/NativeKeyboardEditText.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/ui/vm/display/nativedisplay/input/TouchScaleCalculator.java
 create mode 100644 app/src/main/res/layout/activity_vm_native_display.xml
 create mode 100644 app/src/main/res/menu/menu_native_display_menu.xml

diff --git a/app/src/main/AndroidManifest.xml b/app/src/main/AndroidManifest.xml
index dcdd950ce..573420adf 100644
--- a/app/src/main/AndroidManifest.xml
+++ b/app/src/main/AndroidManifest.xml
@@ -82,6 +82,13 @@
             android:theme="@style/Theme.DroidVM.NoActionBar.Dark"
             android:windowSoftInputMode="adjustResize" />
 
+        <activity
+            android:name=".ui.vm.display.nativedisplay.display.VMNativeDisplayActivity"
+            android:configChanges="orientation|screenSize|keyboardHidden|screenLayout|smallestScreenSize"
+            android:exported="false"
+            android:theme="@style/Theme.DroidVM.NoActionBar.Dark"
+            android:windowSoftInputMode="adjustResize" />
+
         <activity
             android:name=".ui.disk.lxc.ImportLxcImagesActivity"
             android:configChanges="orientation|screenSize|keyboardHidden|screenLayout|smallestScreenSize"
diff --git a/app/src/main/aidl/android/crosvm/DisplayConfig.aidl b/app/src/main/aidl/android/crosvm/DisplayConfig.aidl
new file mode 100644
index 000000000..7a7382f39
--- /dev/null
+++ b/app/src/main/aidl/android/crosvm/DisplayConfig.aidl
@@ -0,0 +1,25 @@
+/*
+ * Copyright 2024 The Android Open Source Project
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+package android.crosvm;
+
+/** Display configuration reported by crosvm. */
+parcelable DisplayConfig {
+    int width;
+    int height;
+    int dpi;
+    int refreshRate;
+}
diff --git a/app/src/main/aidl/android/crosvm/ICrosvmAndroidDisplayService.aidl b/app/src/main/aidl/android/crosvm/ICrosvmAndroidDisplayService.aidl
new file mode 100644
index 000000000..dddfc5466
--- /dev/null
+++ b/app/src/main/aidl/android/crosvm/ICrosvmAndroidDisplayService.aidl
@@ -0,0 +1,44 @@
+/*
+ * Copyright 2024 The Android Open Source Project
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+package android.crosvm;
+
+import android.crosvm.DisplayConfig;
+import android.os.ParcelFileDescriptor;
+import android.view.Surface;
+
+/**
+ * Service to provide Crosvm with an Android Surface for showing a guest's display.
+ *
+ * NOTE: This binder is implemented by crosvm itself (android_display_backend). The method order
+ * here MUST match the .aidl crosvm was built against, because binder transaction codes are derived
+ * from declaration order. Input forwarding is NOT done through this interface; input goes through
+ * per-device unix sockets that crosvm reads via `--input ...[path=...]`.
+ */
+interface ICrosvmAndroidDisplayService {
+    void setSurface(in Surface surface, boolean forCursor);
+    void setCursorStream(in ParcelFileDescriptor stream);
+    void removeSurface(boolean forCursor);
+    void saveFrameForSurface(boolean forCursor);
+    void drawSavedFrameForSurface(boolean forCursor);
+
+    /**
+     * Returns the guest display configuration, or null if not available yet. crosvm's current
+     * backend may not implement this; callers must tolerate the call failing and fall back to a
+     * default resolution.
+     */
+    DisplayConfig getDisplayConfig();
+}
diff --git a/app/src/main/aidl/cn/classfun/droidvm/display/INativeDisplayRootService.aidl b/app/src/main/aidl/cn/classfun/droidvm/display/INativeDisplayRootService.aidl
new file mode 100644
index 000000000..16ec92ff0
--- /dev/null
+++ b/app/src/main/aidl/cn/classfun/droidvm/display/INativeDisplayRootService.aidl
@@ -0,0 +1,27 @@
+package cn.classfun.droidvm.display;
+
+/**
+ * AIDL interface for the native-display broker. It is implemented and hosted by the daemon (which
+ * already runs as root) and handed to the UI via a broadcast (see
+ * NativeDisplay.BINDER_BROADCAST_ACTION), because a live IBinder cannot cross the daemon's
+ * TCP/JSON-RPC channel. No separate root process is involved: an untrusted_app can neither look up
+ * crosvm's display service nor connectto the daemon's su-domain input sockets itself, so it calls
+ * these methods on the daemon over binder instead.
+ */
+interface INativeDisplayRootService {
+    /**
+     * Calls ServiceManager.waitForService(serviceName) inside the daemon (root) and returns the
+     * ICrosvmAndroidDisplayService binder, or null if not found. serviceName is the per-VM key.
+     */
+    IBinder waitForDisplayBinder(String serviceName);
+
+    /**
+     * Forwards pre-encoded evdev [data] (8-byte records) for [channel] straight to the crosvm input
+     * socket the daemon owns, looking up the running VM by [vmId]. Runs on a daemon binder thread, so
+     * the bytes reach crosvm with no extra socket hop. Bytes (not an fd) cross the binder,
+     * sidestepping both the SELinux 'connectto' denial (app->su socket) and the 'fd use' denial (app
+     * receiving an su-owned fd). Returns true if written, false on any failure so the caller can fall
+     * back to the vm_input IPC path.
+     */
+    boolean writeInput(String vmId, int channel, in byte[] data);
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/Daemon.java b/app/src/main/java/cn/classfun/droidvm/daemon/Daemon.java
index 6e2ec4ebe..5e20a4342 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/Daemon.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/Daemon.java
@@ -20,6 +20,7 @@
 import java.util.UUID;
 import java.util.concurrent.atomic.AtomicBoolean;
 
+import cn.classfun.droidvm.daemon.display.DaemonSystemContext;
 import cn.classfun.droidvm.daemon.server.Server;
 import cn.classfun.droidvm.lib.natives.UnixHelper;
 import cn.classfun.droidvm.lib.utils.FileUtils;
@@ -99,6 +100,9 @@ private static String getMyHash() {
     public static void main(String... args) {
         System.out.print("Starting DroidVM Daemon...\n");
         UnixHelper.load();
+        // Build a system Context on the main thread (it prepares the main looper) so the daemon can
+        // broadcast the native-display binder to the UI. Must happen before server.run() blocks here.
+        DaemonSystemContext.init();
         System.out.printf("Current pid: %d\n", Process.myPid());
         Log.d(TAG, "DroidVM Daemon is starting...");
         daemonHash = getMyHash();
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/display/DaemonSystemContext.java b/app/src/main/java/cn/classfun/droidvm/daemon/display/DaemonSystemContext.java
new file mode 100644
index 000000000..f69ec8b44
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/display/DaemonSystemContext.java
@@ -0,0 +1,60 @@
+package cn.classfun.droidvm.daemon.display;
+
+import android.annotation.SuppressLint;
+import android.content.Context;
+import android.os.Looper;
+import android.util.Log;
+
+import androidx.annotation.Nullable;
+
+import java.lang.reflect.Constructor;
+
+/**
+ * Builds a system {@link Context} inside the daemon's bare app_process so it can {@code sendBroadcast}
+ * - the channel used to hand the native-display binder to the UI (a live IBinder can't cross the
+ * daemon's TCP/JSON-RPC socket).
+ *
+ * We construct an {@code ActivityThread} directly and ask it for the system Context, rather than
+ * {@code ActivityThread.systemMain()}: systemMain()'s {@code attach(true)} runs app/Instrumentation
+ * init that throws in a bare daemon process. The ActivityThread ctor only needs a prepared main
+ * looper (for its internal Handler), so {@link #init()} must run on the daemon's main thread (see
+ * Daemon.main). We never loop it; a fire-and-forget broadcast is a plain binder call to AMS.
+ */
+public final class DaemonSystemContext {
+    private static final String TAG = "DaemonSysContext";
+    private static Context context;
+
+    private DaemonSystemContext() {
+    }
+
+    /** Creates the system Context once, on the daemon main thread. Safe to call repeatedly. */
+    @SuppressLint({"PrivateApi", "DiscouragedPrivateApi"})
+    public static synchronized void init() {
+        if (context != null) return;
+        try {
+            if (Looper.myLooper() == null) Looper.prepareMainLooper();
+        } catch (Throwable t) {
+            Log.w(TAG, "prepareMainLooper: " + t);
+        }
+        try {
+            Class<?> at = Class.forName("android.app.ActivityThread");
+            Constructor<?> ctor = at.getDeclaredConstructor();
+            ctor.setAccessible(true);
+            Object thread = ctor.newInstance();
+            context = (Context) at.getMethod("getSystemContext").invoke(thread);
+            if (context != null) {
+                Log.i(TAG, "system context ready");
+                return;
+            }
+            Log.e(TAG, "getSystemContext returned null");
+        } catch (Throwable t) {
+            Log.e(TAG, "failed to create system context", t);
+        }
+    }
+
+    /** The system Context, or null if {@link #init()} hasn't run or failed. */
+    @Nullable
+    public static Context get() {
+        return context;
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/display/NativeDisplayBinder.java b/app/src/main/java/cn/classfun/droidvm/daemon/display/NativeDisplayBinder.java
new file mode 100644
index 000000000..97d8ce6d2
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/display/NativeDisplayBinder.java
@@ -0,0 +1,124 @@
+package cn.classfun.droidvm.daemon.display;
+
+import static cn.classfun.droidvm.BuildConfig.APPLICATION_ID;
+
+import android.content.Intent;
+import android.os.Bundle;
+import android.os.IBinder;
+import android.util.Log;
+
+import androidx.annotation.NonNull;
+
+import java.lang.reflect.Method;
+
+import cn.classfun.droidvm.daemon.server.ServerContext;
+import cn.classfun.droidvm.display.INativeDisplayRootService;
+import cn.classfun.droidvm.lib.store.vm.NativeDisplay;
+
+/**
+ * Daemon-hosted native-display broker. The daemon already runs as root, so it does both jobs the
+ * UI used to reach through a separate libsu RootService:
+ * <ul>
+ *   <li>{@link INativeDisplayRootService#waitForDisplayBinder(String)} - look up the per-VM
+ *       ICrosvmAndroidDisplayService binder crosvm registers via
+ *       {@code --android-display-service <serviceName>} (an untrusted_app can't do this lookup).</li>
+ *   <li>{@link INativeDisplayRootService#writeInput(String, int, byte[])} - write evdev straight to
+ *       the crosvm input socket the daemon owns (no extra socket hop), by looking up the VM.</li>
+ * </ul>
+ *
+ * The binder can't ride the daemon's TCP/JSON-RPC channel, so it is broadcast to the UI through
+ * system_server (see {@link #attach}); the {@code display_attach} IPC command triggers that.
+ */
+public final class NativeDisplayBinder {
+    private static final String TAG = "NativeDisplayBinder";
+
+    private static INativeDisplayRootService.Stub binder;
+
+    private NativeDisplayBinder() {
+    }
+
+    /**
+     * Builds the broker binder once and broadcasts it to the UI Activity that requested it with
+     * [nonce]. Called from the {@code display_attach} IPC handler (a daemon worker thread).
+     */
+    public static synchronized void attach(@NonNull ServerContext ctx, @NonNull String nonce) {
+        if (binder == null) binder = createBinder(ctx);
+        broadcast(binder, nonce);
+    }
+
+    private static INativeDisplayRootService.Stub createBinder(@NonNull ServerContext ctx) {
+        return new INativeDisplayRootService.Stub() {
+            @Override
+            public IBinder waitForDisplayBinder(String serviceName) {
+                return doWaitForDisplayBinder(serviceName);
+            }
+
+            @Override
+            public boolean writeInput(String vmId, int channel, byte[] data) {
+                if (vmId == null || data == null || data.length == 0) return false;
+                var inst = ctx.getVMs().findById(vmId);
+                if (inst == null) return false;
+                return inst.writeNativeInput(channel, data);
+            }
+        };
+    }
+
+    /** Broadcasts [binder] to our package with [nonce] nested in a Bundle (kept off the top-level
+     * extras so AMS doesn't strip the live IBinder). */
+    private static void broadcast(@NonNull IBinder binder, @NonNull String nonce) {
+        var context = DaemonSystemContext.get();
+        if (context == null) {
+            Log.e(TAG, "no system context; cannot broadcast display binder");
+            return;
+        }
+        var bundle = new Bundle();
+        bundle.putBinder(NativeDisplay.EXTRA_BINDER, binder);
+        bundle.putString(NativeDisplay.EXTRA_NONCE, nonce);
+        var intent = new Intent(NativeDisplay.BINDER_BROADCAST_ACTION);
+        intent.setPackage(APPLICATION_ID);
+        intent.putExtra(NativeDisplay.EXTRA_BUNDLE, bundle);
+        context.sendBroadcast(intent);
+        Log.i(TAG, "broadcast native-display binder (nonce=" + nonce + ")");
+    }
+
+    private static IBinder smCall(@NonNull String method, @NonNull String name) {
+        try {
+            Class<?> sm = Class.forName("android.os.ServiceManager");
+            Method m = sm.getMethod(method, String.class);
+            return (IBinder) m.invoke(null, name);
+        } catch (Exception e) {
+            Log.w(TAG, method + " reflection failed: " + e.getMessage());
+            return null;
+        }
+    }
+
+    private static IBinder waitForServiceWithTimeout(@NonNull String name, long timeoutMs) {
+        var holder = new IBinder[1];
+        var t = new Thread(() -> holder[0] = smCall("waitForService", name), "WaitSvc-" + name);
+        t.setDaemon(true);
+        t.start();
+        try {
+            t.join(timeoutMs);
+        } catch (InterruptedException ignored) {
+        }
+        return holder[0];
+    }
+
+    private static IBinder doWaitForDisplayBinder(@NonNull String serviceName) {
+        Log.i(TAG, "waitForDisplayBinder('" + serviceName + "')");
+        var direct = smCall("checkService", serviceName);
+        if (direct != null) {
+            Log.i(TAG, "OK: got display binder directly from ServiceManager");
+            return direct;
+        }
+        Log.i(TAG, "Not found, waiting up to 5s...");
+        var waited = waitForServiceWithTimeout(serviceName, 5000L);
+        if (waited != null) {
+            Log.i(TAG, "OK: got display binder via waitForService");
+            return waited;
+        }
+        Log.e(TAG, "'" + serviceName + "' not found - is crosvm running with "
+            + "--android-display-service " + serviceName + "?");
+        return null;
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/ipc/vm/DisplayAttachHandler.java b/app/src/main/java/cn/classfun/droidvm/daemon/ipc/vm/DisplayAttachHandler.java
new file mode 100644
index 000000000..043f1dd5f
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/ipc/vm/DisplayAttachHandler.java
@@ -0,0 +1,32 @@
+package cn.classfun.droidvm.daemon.ipc.vm;
+
+import androidx.annotation.NonNull;
+
+import com.google.auto.service.AutoService;
+
+import cn.classfun.droidvm.daemon.display.NativeDisplayBinder;
+import cn.classfun.droidvm.daemon.server.ClientRequest;
+import cn.classfun.droidvm.daemon.server.RequestException;
+import cn.classfun.droidvm.daemon.server.RequestHandler;
+
+/**
+ * Hands the daemon's native-display binder to the UI. A live IBinder can't ride this JSON-RPC
+ * channel, so the daemon broadcasts it (through system_server) to the requesting Activity instead;
+ * the Activity proves which broadcast is its own with [nonce]. Params: nonce (per-attach token).
+ */
+@AutoService(RequestHandler.class)
+public final class DisplayAttachHandler extends RequestHandler {
+    @NonNull
+    @Override
+    public String getName() {
+        return "display_attach";
+    }
+
+    @Override
+    public void handle(@NonNull ClientRequest request) throws Exception {
+        var nonce = request.getParams().optString("nonce", "");
+        if (nonce.isEmpty())
+            throw new RequestException("missing nonce");
+        NativeDisplayBinder.attach(request.getContext(), nonce);
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/ipc/vm/InputHandler.java b/app/src/main/java/cn/classfun/droidvm/daemon/ipc/vm/InputHandler.java
new file mode 100644
index 000000000..15f771e40
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/ipc/vm/InputHandler.java
@@ -0,0 +1,44 @@
+package cn.classfun.droidvm.daemon.ipc.vm;
+
+import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
+
+import android.util.Base64;
+
+import androidx.annotation.NonNull;
+
+import com.google.auto.service.AutoService;
+
+import cn.classfun.droidvm.daemon.server.ClientRequest;
+import cn.classfun.droidvm.daemon.server.RequestException;
+import cn.classfun.droidvm.daemon.server.RequestHandler;
+
+/**
+ * Forwards native-display input from the UI to the per-VM crosvm process. The daemon is the only
+ * listener on crosvm's --input sockets (it pre-binds them before exec'ing crosvm), so it is the
+ * only process that can deliver evdev to the guest; the UI sends bytes here instead of writing a
+ * socket directly. Params: vm_id, channel (NativeDisplay constants), data (base64 evdev records).
+ */
+@AutoService(RequestHandler.class)
+public final class InputHandler extends RequestHandler {
+    @NonNull
+    @Override
+    public String getName() {
+        return "vm_input";
+    }
+
+    @Override
+    public void handle(@NonNull ClientRequest request) throws Exception {
+        var params = request.getParams();
+        var vmId = params.optString("vm_id", "");
+        if (vmId.isEmpty())
+            throw new RequestException("missing vm_id");
+        var channel = params.optInt("channel", -1);
+        var data = Base64.decode(params.optString("data", ""), Base64.NO_WRAP);
+        var inst = request.getContext().getVMs().findById(vmId);
+        if (inst == null)
+            throw new RequestException(fmt("VM not found: %s", vmId));
+        // Report whether the bytes actually reached crosvm so the UI can tell a silent drop (peer
+        // not connected yet, bad channel, VM not running) from a real delivery.
+        request.res().put("delivered", inst.writeNativeInput(channel, data));
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/server/Server.java b/app/src/main/java/cn/classfun/droidvm/daemon/server/Server.java
index 5ad2e19a0..061b554e6 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/server/Server.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/server/Server.java
@@ -146,6 +146,9 @@ public boolean isRunning() {
 
     private void handleClient(@NonNull Socket client) {
         try {
+            // Disable Nagle on the accepted socket so daemon->UI responses (incl. input ACKs)
+            // aren't delayed; pairs with the client-side setTcpNoDelay in DaemonClient.
+            client.setTcpNoDelay(true);
             var handler = new ClientHandler(this, client);
             synchronized (clients) {
                 clients.add(handler);
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/vm/VMBackendInstance.java b/app/src/main/java/cn/classfun/droidvm/daemon/vm/VMBackendInstance.java
index e2c2fe41d..e9ead2135 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/vm/VMBackendInstance.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/vm/VMBackendInstance.java
@@ -25,6 +25,14 @@ public abstract class VMBackendInstance {
 
     public abstract void cleanup();
 
+    /**
+     * Writes pre-encoded evdev bytes to the running backend's native-display input channel on
+     * behalf of the UI. Only the crosvm backend implements this; others report not-delivered.
+     */
+    public boolean writeNativeInput(int channel, @NonNull byte[] data) {
+        return false;
+    }
+
     @NonNull
     @SuppressWarnings("unused")
     public Map<String, ConsoleStream> getStreams() {
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/vm/VMInstance.java b/app/src/main/java/cn/classfun/droidvm/daemon/vm/VMInstance.java
index d8750b0fd..575317529 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/vm/VMInstance.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/vm/VMInstance.java
@@ -75,12 +75,20 @@ public BackendBase getBackend() {
     }
 
     @NonNull
-    VMBackendInstance getBackendInstance() {
+    synchronized VMBackendInstance getBackendInstance() {
         if (this.backendInstance == null)
             this.backendInstance = getBackend().create(this);
         return this.backendInstance;
     }
 
+    /** Forwards UI-sent evdev bytes to the running backend's native-display input channel. */
+    public boolean writeNativeInput(int channel, @NonNull byte[] data) {
+        // Only a running VM has a backend with bound input sockets; skip otherwise so a stale or
+        // spoofed input call can't lazily create an idle backend instance.
+        if (state != VMState.RUNNING) return false;
+        return getBackendInstance().writeNativeInput(channel, data);
+    }
+
     @NonNull
     public VMState getState() {
         return state;
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/CrosvmBackendInstance.java b/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/CrosvmBackendInstance.java
index 83f695194..c831e5012 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/CrosvmBackendInstance.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/CrosvmBackendInstance.java
@@ -36,6 +36,7 @@
 import cn.classfun.droidvm.lib.store.vm.DisplayBackend;
 import cn.classfun.droidvm.lib.store.vm.GpuApi;
 import cn.classfun.droidvm.lib.store.vm.GpuBackend;
+import cn.classfun.droidvm.lib.store.vm.NativeDisplay;
 import cn.classfun.droidvm.lib.store.vm.ProtectedVM;
 import cn.classfun.droidvm.lib.store.vm.SharedDirCache;
 import cn.classfun.droidvm.lib.store.vm.SharedDirType;
@@ -48,6 +49,8 @@ public final class CrosvmBackendInstance extends VMBackendInstance {
     private final VMConfig config;
     private SerialPipe uart = null;
     private String controlSocketPath = null;
+    /** Owns the per-VM native-display input sockets (crosvm-facing + UI-facing); see start(). */
+    private final NativeDisplayInputBridge inputBridge = new NativeDisplayInputBridge();
     private final FDPipeConsoleStream uartStream;
     private final InputConsoleStream stdoutStream;
     private final InputConsoleStream stderrStream;
@@ -85,6 +88,16 @@ public VMStartResult start() {
         controlSocketPath = pathJoin(RUN_PATH, fmt("%s.sock", config.getName()));
         deleteFile(controlSocketPath);
         Log.i(TAG, fmt("Control socket path: %s", controlSocketPath));
+        // Native display: crosvm's --input <kind>[path=...] connects to a unix socket whose inode
+        // must already exist (crosvm is the *client*), and the display-page entry only appears after
+        // the VM is up - so the daemon is the only process that can both bind the socket before
+        // crosvm starts and stay alive to feed it. We pre-bind + accept here; the UI forwards evdev
+        // to us via the vm_input IPC command (see InputHandler). Server fds released on cleanup().
+        if (isNativeDisplayEnabled()) {
+            if (!inputBridge.startListening(NativeDisplay.serviceName(config))) {
+                Log.e(TAG, "Native display input sockets unavailable; crosvm will likely fail");
+            }
+        }
         var args = buildCommand();
         Log.i(TAG, fmt("Executing: %s", String.join(" ", args)));
         try {
@@ -107,6 +120,7 @@ public VMStartResult start() {
                 uart = null;
             }
             controlSocketPath = null;
+            inputBridge.release();
             return result;
         }
         return result;
@@ -309,6 +323,46 @@ private void buildGpuCommand(@NonNull List<String> args) {
                 item.optLong("display_height", 720)
             ));
         }
+        // Native display: crosvm registers an ICrosvmAndroidDisplayService binder under a per-VM
+        // name and renders the gfxstream/virtio-gpu output straight into the Android Surface the UI
+        // hands it. Requires the GPU (virtio-gpu) path above. Touch/keyboard come back over the
+        // per-VM unix sockets the root service listens on; their paths must match NativeDisplay.
+        // Single source of truth for the enable check; isNativeDisplayEnabled() also gates the
+        // socket pre-bind in start(), so the two must never diverge.
+        if (isNativeDisplayEnabled()) {
+            buildNativeDisplayCommand(args);
+        }
+    }
+
+    private void buildNativeDisplayCommand(@NonNull List<String> args) {
+        var item = config.item;
+        var serviceName = NativeDisplay.serviceName(config);
+        var width = item.optLong("display_width", 1280);
+        var height = item.optLong("display_height", 720);
+        args.add("--android-display-service");
+        args.add(serviceName);
+        // multi-touch ABS range must equal the guest resolution so view coords scale straight onto
+        // ABS_X/ABS_Y (see EvdevEncoder / TouchScaleCalculator).
+        args.add("--input");
+        args.add(fmt(
+            "multi-touch[path=%s,width=%d,height=%d]",
+            NativeDisplay.inputSocketPath(serviceName, NativeDisplay.MULTITOUCH), width, height
+        ));
+        args.add("--input");
+        args.add(fmt(
+            "keyboard[path=%s]",
+            NativeDisplay.inputSocketPath(serviceName, NativeDisplay.KEYBOARD)
+        ));
+    }
+
+    /** True iff the per-VM crosvm command will reference native-display input sockets. */
+    private boolean isNativeDisplayEnabled() {
+        var item = config.item;
+        if (!item.optBoolean("gpu_enabled", false)) return false;
+        if (!item.optBoolean("display_enabled", false)) return false;
+        var backend = optEnum(item, "display_backend", DisplayBackend.NONE);
+        if (backend != DisplayBackend.VIRTIO_GPU) return false;
+        return item.optBoolean("native_display_enabled", false);
     }
 
     private void buildVncCommand(@NonNull List<String> args) {
@@ -404,11 +458,17 @@ public boolean hasControlSocket() {
         return controlSocketPath != null;
     }
 
+    @Override
+    public boolean writeNativeInput(int channel, @NonNull byte[] data) {
+        return inputBridge.writeNativeInput(channel, data);
+    }
+
     @Override
     public void cleanup() {
         if (controlSocketPath != null) {
             deleteFile(controlSocketPath);
             controlSocketPath = null;
         }
+        inputBridge.release();
     }
 }
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/NativeDisplayInputBridge.java b/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/NativeDisplayInputBridge.java
new file mode 100644
index 000000000..af5a3c9ba
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/NativeDisplayInputBridge.java
@@ -0,0 +1,194 @@
+package cn.classfun.droidvm.daemon.vm.backend;
+
+import static cn.classfun.droidvm.lib.utils.FileUtils.deleteFile;
+import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
+
+import android.util.Log;
+
+import androidx.annotation.NonNull;
+
+import java.io.IOException;
+
+import cn.classfun.droidvm.lib.natives.UnixHelper;
+import cn.classfun.droidvm.lib.network.FDSocket;
+import cn.classfun.droidvm.lib.store.vm.NativeDisplay;
+
+/**
+ * Owns the per-VM native-display input sockets for one crosvm instance. crosvm's --input
+ * <kind>[path=...] connects to a unix socket whose inode must already exist (crosvm is the
+ * *client*), so the daemon is the only process that can both bind the socket before crosvm starts
+ * and stay alive to feed it. This bridge pre-binds + accepts the crosvm-facing sockets; evdev from
+ * the UI arrives via {@link #writeNativeInput(int, byte[])} - called either on the daemon's
+ * native-display broker binder thread (touch hot path) or from the vm_input IPC handler - and is
+ * written straight to the matching crosvm peer. {@link CrosvmBackendInstance} drives the lifecycle:
+ * {@link #startListening(String)} from start() and {@link #release()} from cleanup().
+ */
+final class NativeDisplayInputBridge {
+    private static final String TAG = "NativeDisplayInput";
+
+    /** Server fds for the per-VM native-display input sockets, kept while crosvm is running. */
+    private volatile int[] inputServerFds = null;
+    /** Paths of the input sockets we listened on, so {@link #release()} can unlink them. */
+    private volatile String[] inputSocketPaths = null;
+    /**
+     * The crosvm-side connection accepted on each input channel. crosvm connects to OUR socket at
+     * startup (we are the only listener), so writing UI-forwarded evdev here is what actually
+     * reaches the guest. Indexed by NativeDisplay channel constants. Volatile because the accept
+     * threads, the write threads, and release() all touch it without a single shared lock.
+     */
+    private volatile FDSocket[] inputPeers = null;
+    /** Per-channel write lock; also guards swapping {@link #inputPeers} on reconnect. */
+    private volatile Object[] inputWriteLocks = null;
+    private volatile boolean inputClosed = false;
+
+    /**
+     * Pre-creates the per-VM native-display input sockets as listening unix sockets. crosvm
+     * connects to these paths at startup, so a listener must exist before
+     * {@link CrosvmBackendInstance#start()} execs the crosvm process. nativeUnixListen unlinks any
+     * stale inode and re-binds, so a leftover socket file from a crashed run is replaced rather than
+     * blocking us. Returns true iff every channel ended up with a live listener. Server fds we open
+     * are tracked for release in {@link #release()}.
+     */
+    boolean startListening(@NonNull String serviceName) {
+        if (!UnixHelper.isLoaded()) {
+            Log.w(TAG, "UnixHelper not loaded; cannot pre-bind native-display input sockets");
+            return false;
+        }
+        var paths = new String[NativeDisplay.CHANNEL_COUNT];
+        var fds = new int[NativeDisplay.CHANNEL_COUNT];
+        inputClosed = false;
+        inputPeers = new FDSocket[NativeDisplay.CHANNEL_COUNT];
+        inputWriteLocks = new Object[NativeDisplay.CHANNEL_COUNT];
+        boolean allListening = true;
+        for (int ch = 0; ch < NativeDisplay.CHANNEL_COUNT; ch++) {
+            inputWriteLocks[ch] = new Object();
+            var path = NativeDisplay.inputSocketPath(serviceName, ch);
+            paths[ch] = path;
+            var fd = UnixHelper.nativeUnixListen(path);
+            if (fd < 0) {
+                Log.w(TAG, fmt("Failed to pre-listen on input socket: %s", path));
+                allListening = false;
+                fds[ch] = -1;
+            } else {
+                Log.i(TAG, fmt("Pre-listening on input socket: %s (fd=%d)", path, fd));
+                fds[ch] = fd;
+                // Accept crosvm's connection in the background. crosvm is the client and connects
+                // at its own startup, so a peer may not arrive until after start() execs it.
+                startInputAcceptThread(ch, fd);
+            }
+        }
+        inputSocketPaths = paths;
+        inputServerFds = fds;
+        return allListening;
+    }
+
+    /**
+     * Accepts crosvm's connection on one input channel and keeps the live peer in
+     * {@link #inputPeers}. Loops so a crosvm restart (new connection on the same socket) replaces
+     * the dead peer; ends when {@link #release()} closes the server fd.
+     */
+    private void startInputAcceptThread(int channel, int serverFd) {
+        var t = new Thread(() -> {
+            while (!inputClosed) {
+                int peerFd = UnixHelper.nativeUnixAccept(serverFd);
+                if (peerFd < 0) {
+                    if (inputClosed) break;
+                    try {
+                        Thread.sleep(200);
+                    } catch (InterruptedException e) {
+                        break;
+                    }
+                    continue;
+                }
+                var peer = new FDSocket(peerFd);
+                // Snapshot the lock/peer arrays: release() can null them concurrently.
+                var locks = inputWriteLocks;
+                if (locks == null) {
+                    peer.close();
+                    break;
+                }
+                synchronized (locks[channel]) {
+                    var peers = inputPeers;
+                    if (peers == null) {
+                        peer.close();
+                        break;
+                    }
+                    var old = peers[channel];
+                    peers[channel] = peer;
+                    if (old != null) old.close();
+                }
+                Log.i(TAG, fmt("crosvm input connected: channel %d", channel));
+            }
+        }, fmt("CrosvmInputAccept-%d", channel));
+        t.setDaemon(true);
+        t.start();
+    }
+
+    /**
+     * Writes pre-encoded evdev bytes (8-byte records) to the crosvm connection for [channel].
+     * Called from the daemon IPC thread on behalf of the UI. Returns false if no crosvm peer is
+     * connected yet or the write fails.
+     */
+    boolean writeNativeInput(int channel, @NonNull byte[] data) {
+        if (channel < 0 || channel >= NativeDisplay.CHANNEL_COUNT || data.length == 0) return false;
+        // Snapshot the arrays once: release() nulls these fields concurrently, so dereferencing the
+        // live field after the guard could NPE. The lock object itself stays valid for the session.
+        var locks = inputWriteLocks;
+        if (locks == null) return false;
+        var lock = locks[channel];
+        if (lock == null) return false;
+        synchronized (lock) {
+            var peers = inputPeers;
+            if (peers == null) return false;
+            var peer = peers[channel];
+            if (peer == null || !peer.isOpen()) return false;
+            try {
+                var os = peer.getOutputStream();
+                os.write(data);
+                os.flush();
+                return true;
+            } catch (IOException e) {
+                Log.w(TAG, fmt("input write channel %d failed: %s", channel, e.getMessage()));
+                peers[channel] = null;
+                peer.close();
+                return false;
+            }
+        }
+    }
+
+    /**
+     * Closes the input server fds we opened and unlinks only the inodes we own. Channels that
+     * fell through to the UI's listener (fd == -1) are left untouched so we don't yank a socket
+     * the UI still holds.
+     */
+    void release() {
+        inputClosed = true; // stop accept loops; closing the server fd below unblocks nativeUnixAccept
+        if (inputPeers != null) {
+            for (int ch = 0; ch < inputPeers.length; ch++) {
+                if (inputWriteLocks != null && inputWriteLocks[ch] != null) {
+                    synchronized (inputWriteLocks[ch]) {
+                        if (inputPeers[ch] != null) {
+                            inputPeers[ch].close();
+                            inputPeers[ch] = null;
+                        }
+                    }
+                }
+            }
+            inputPeers = null;
+        }
+        inputWriteLocks = null;
+        if (inputServerFds == null) {
+            inputSocketPaths = null;
+            return;
+        }
+        for (int ch = 0; ch < inputServerFds.length; ch++) {
+            int fd = inputServerFds[ch];
+            if (fd < 0) continue;
+            UnixHelper.nativeCloseFd(fd);
+            if (inputSocketPaths != null && inputSocketPaths[ch] != null)
+                deleteFile(inputSocketPaths[ch]);
+        }
+        inputServerFds = null;
+        inputSocketPaths = null;
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/store/vm/NativeDisplay.java b/app/src/main/java/cn/classfun/droidvm/lib/store/vm/NativeDisplay.java
new file mode 100644
index 000000000..c6951f64a
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/lib/store/vm/NativeDisplay.java
@@ -0,0 +1,72 @@
+package cn.classfun.droidvm.lib.store.vm;
+
+import static cn.classfun.droidvm.lib.Constants.DATA_DIR;
+import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
+import static cn.classfun.droidvm.lib.utils.StringUtils.pathJoin;
+
+import androidx.annotation.NonNull;
+
+/**
+ * Shared naming for the native (crosvm android-display) backend. The daemon (launching crosvm and
+ * hosting the native-display binder) and the UI (looking up the display binder / sending input)
+ * both derive the per-VM service name and socket paths from here, so they agree and different VMs
+ * never collide.
+ *
+ * The service name doubles as the vmKey: it identifies both the servicemanager entry crosvm
+ * registers (--android-display-service) and the VM's input-socket set.
+ */
+public final class NativeDisplay {
+    /** Input channels (MVP: multi-touch + keyboard). */
+    public static final int MULTITOUCH = 0;
+    public static final int KEYBOARD = 1;
+    public static final int CHANNEL_COUNT = 2;
+
+    /**
+     * Broadcast the daemon (running as root) sends to hand its INativeDisplayRootService binder to
+     * the UI. A live IBinder can't cross the daemon's TCP/JSON-RPC channel, so it travels through
+     * system_server as a broadcast extra instead (the same path libsu/Shizuku use), sidestepping the
+     * servicemanager-find restriction an untrusted_app hits. The binder + nonce are nested in a
+     * Bundle under {@link #EXTRA_BUNDLE} so AMS doesn't strip the binder from the top-level extras.
+     */
+    public static final String BINDER_BROADCAST_ACTION =
+        "cn.classfun.droidvm.action.NATIVE_DISPLAY_BINDER";
+    public static final String EXTRA_BUNDLE = "extra.bundle";
+    public static final String EXTRA_BINDER = "binder";
+    /** Per-attach random token; the UI only accepts a broadcast carrying the nonce it requested. */
+    public static final String EXTRA_NONCE = "nonce";
+
+    private static final String[] KINDS = {"multitouch", "keyboard"};
+    private static final String RUN_PATH = pathJoin(DATA_DIR, "run");
+
+    private NativeDisplay() {
+    }
+
+    /** Per-VM crosvm display service name; also used as the vmKey for input sockets. */
+    @NonNull
+    public static String serviceName(@NonNull VMConfig config) {
+        return serviceNameFromId(config.getId().toString());
+    }
+
+    /** Same as {@link #serviceName(VMConfig)} but from a raw VM id (e.g. an Intent extra). */
+    @NonNull
+    public static String serviceNameFromId(@NonNull String vmId) {
+        return "droidvm_disp_" + sanitize(vmId);
+    }
+
+    /** The socket path crosvm connects to for [vmKey]'s [channel]. Must match across all callers. */
+    @NonNull
+    public static String inputSocketPath(@NonNull String vmKey, int channel) {
+        return pathJoin(RUN_PATH, fmt("%s_input_%s.sock", sanitize(vmKey), KINDS[channel]));
+    }
+
+    /** Keep socket/service names to a filesystem- and binder-safe charset. */
+    @NonNull
+    public static String sanitize(@NonNull String s) {
+        var sb = new StringBuilder(s.length());
+        for (int i = 0; i < s.length(); i++) {
+            char c = s.charAt(i);
+            sb.append((Character.isLetterOrDigit(c) || c == '_' || c == '-') ? c : '_');
+        }
+        return sb.toString();
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/display/base/BaseExtraKeysAdapter.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/base/BaseExtraKeysAdapter.java
new file mode 100644
index 000000000..f0cc647e3
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/base/BaseExtraKeysAdapter.java
@@ -0,0 +1,123 @@
+package cn.classfun.droidvm.ui.vm.display.base;
+
+import static android.view.KeyEvent.KEYCODE_ALT_LEFT;
+import static android.view.KeyEvent.KEYCODE_CTRL_LEFT;
+import static android.view.KeyEvent.KEYCODE_META_LEFT;
+import static android.view.KeyEvent.KEYCODE_SHIFT_LEFT;
+
+import androidx.annotation.NonNull;
+
+/**
+ * Shared sticky-modifier state machine for the {@link DisplayExtraKeysPanel}. It bridges the
+ * panel's Ctrl/Alt/Shift/Win toggles (sticky vs. one-shot) to a backend; the VNC and native-display
+ * adapters differ only in {@link #emitKey} (how a key reaches the backend) and {@link #isReady}
+ * (whether the backend can accept events), so everything else lives here once.
+ */
+public abstract class BaseExtraKeysAdapter implements KeyListener {
+    @NonNull
+    protected final DisplayExtraKeysPanel panel;
+
+    private boolean ctrlSticky, altSticky, shiftSticky, winSticky;
+
+    protected BaseExtraKeysAdapter(@NonNull DisplayExtraKeysPanel panel) {
+        this.panel = panel;
+        panel.setKeyListener(this);
+    }
+
+    /** Sends one key down/up to the backend. Only invoked when {@link #isReady()} is true. */
+    protected abstract void emitKey(int androidKeyCode, boolean down);
+
+    /** True when the backend can currently accept events. */
+    protected abstract boolean isReady();
+
+    /** True if any active modifier is non-sticky and so must be wrapped around a real keystroke. */
+    public boolean hasNonStickyModifiers() {
+        return (panel.isCtrlDown() && !ctrlSticky)
+            || (panel.isAltDown() && !altSticky)
+            || (panel.isShiftDown() && !shiftSticky)
+            || (panel.isWinDown() && !winSticky);
+    }
+
+    /** Press (or release) every active, non-sticky modifier around a keystroke. */
+    public void applyModifiers(boolean down) {
+        if (!isReady()) return;
+        if (panel.isCtrlDown() && !ctrlSticky) emitKey(KEYCODE_CTRL_LEFT, down);
+        if (panel.isAltDown() && !altSticky) emitKey(KEYCODE_ALT_LEFT, down);
+        if (panel.isShiftDown() && !shiftSticky) emitKey(KEYCODE_SHIFT_LEFT, down);
+        if (panel.isWinDown() && !winSticky) emitKey(KEYCODE_META_LEFT, down);
+        if (!down) {
+            if (!ctrlSticky) panel.setCtrlDown(false);
+            if (!altSticky) panel.setAltDown(false);
+            if (!shiftSticky) panel.setShiftDown(false);
+            if (!winSticky) panel.setWinDown(false);
+            panel.updateToggleButtons();
+        }
+    }
+
+    /** Taps a key with the active modifiers wrapped around it. */
+    protected void tapKey(int androidKeyCode) {
+        if (!isReady()) return;
+        applyModifiers(true);
+        emitKey(androidKeyCode, true);
+        emitKey(androidKeyCode, false);
+        applyModifiers(false);
+    }
+
+    @Override
+    public void onModifierClick(int androidKeyCode) {
+        if (getSticky(androidKeyCode)) {
+            setSticky(androidKeyCode, false);
+            setDown(androidKeyCode, false);
+            if (isReady()) emitKey(androidKeyCode, false);
+        } else {
+            setDown(androidKeyCode, !getDown(androidKeyCode));
+        }
+        panel.updateToggleButtons();
+    }
+
+    @Override
+    public void onModifierLongClick(int androidKeyCode) {
+        setDown(androidKeyCode, true);
+        setSticky(androidKeyCode, true);
+        if (isReady()) emitKey(androidKeyCode, true);
+        panel.updateToggleButtons();
+    }
+
+    private boolean getDown(int keyCode) {
+        switch (keyCode) {
+            case KEYCODE_CTRL_LEFT: return panel.isCtrlDown();
+            case KEYCODE_ALT_LEFT: return panel.isAltDown();
+            case KEYCODE_SHIFT_LEFT: return panel.isShiftDown();
+            case KEYCODE_META_LEFT: return panel.isWinDown();
+            default: return false;
+        }
+    }
+
+    private void setDown(int keyCode, boolean value) {
+        switch (keyCode) {
+            case KEYCODE_CTRL_LEFT: panel.setCtrlDown(value); break;
+            case KEYCODE_ALT_LEFT: panel.setAltDown(value); break;
+            case KEYCODE_SHIFT_LEFT: panel.setShiftDown(value); break;
+            case KEYCODE_META_LEFT: panel.setWinDown(value); break;
+        }
+    }
+
+    private boolean getSticky(int keyCode) {
+        switch (keyCode) {
+            case KEYCODE_CTRL_LEFT: return ctrlSticky;
+            case KEYCODE_ALT_LEFT: return altSticky;
+            case KEYCODE_SHIFT_LEFT: return shiftSticky;
+            case KEYCODE_META_LEFT: return winSticky;
+            default: return false;
+        }
+    }
+
+    private void setSticky(int keyCode, boolean value) {
+        switch (keyCode) {
+            case KEYCODE_CTRL_LEFT: ctrlSticky = value; break;
+            case KEYCODE_ALT_LEFT: altSticky = value; break;
+            case KEYCODE_SHIFT_LEFT: shiftSticky = value; break;
+            case KEYCODE_META_LEFT: winSticky = value; break;
+        }
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/display/nativedisplay/display/DisplayProvider.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/nativedisplay/display/DisplayProvider.java
new file mode 100644
index 000000000..f58252a6c
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/nativedisplay/display/DisplayProvider.java
@@ -0,0 +1,225 @@
+package cn.classfun.droidvm.ui.vm.display.nativedisplay.display;
+
+import android.crosvm.DisplayConfig;
+import android.crosvm.ICrosvmAndroidDisplayService;
+import android.os.DeadObjectException;
+import android.os.Handler;
+import android.os.IBinder;
+import android.os.Looper;
+import android.os.RemoteException;
+import android.util.Log;
+import android.view.Surface;
+import android.view.SurfaceHolder;
+import android.view.SurfaceView;
+
+import androidx.annotation.NonNull;
+
+import java.util.concurrent.ExecutorService;
+import java.util.concurrent.Executors;
+import java.util.function.Consumer;
+import java.util.function.Supplier;
+
+/**
+ * Hands crosvm the main display {@link Surface} for one VM. MVP: main surface only (no cursor
+ * overlay). gfxstream/virtio-gpu renders the guest framebuffer straight into this Surface.
+ *
+ * Invariants (mirrored from the reference DisplayProvider):
+ *  - Binder fetch on a background thread; the main thread never blocks.
+ *  - setSurface is called AT MOST ONCE per surface lifetime (surfaceCreated -> surfaceDestroyed).
+ *    Layout-driven surfaceChanged must NOT re-call it (crosvm throws if called twice).
+ *  - surfaceDestroyed -> save frame + removeSurface; the next surfaceCreated starts a new session.
+ */
+final class DisplayProvider {
+    private static final String TAG = "NativeDisplayProvider";
+    // Stop polling for the display binder after this many 1s rounds (the daemon-side
+    // waitForService already blocks up to 5s each), so a dead broker doesn't spin forever.
+    private static final int MAX_BINDER_ATTEMPTS = 30;
+
+    private final SurfaceView mainView;
+    private int width;
+    private int height;
+    private final Supplier<IBinder> binderProvider;
+    private final Consumer<Boolean> onConnected;
+    private final Consumer<DisplayConfig> onDisplayConfig;
+
+    private final Handler mainHandler = new Handler(Looper.getMainLooper());
+    private final ExecutorService executor =
+        Executors.newSingleThreadExecutor(r -> new Thread(r, "NativeDisplayProvider-bg"));
+
+    // All fields below touched only on the main thread.
+    private ICrosvmAndroidDisplayService displayService;
+    private boolean needsSend = false;
+    private boolean hasSavedFrame = false;
+
+    private final IBinder.DeathRecipient deathRecipient;
+
+    DisplayProvider(@NonNull SurfaceView mainView, int width, int height,
+                    @NonNull Supplier<IBinder> binderProvider,
+                    @NonNull Consumer<Boolean> onConnected,
+                    @NonNull Consumer<DisplayConfig> onDisplayConfig) {
+        this.mainView = mainView;
+        this.width = width;
+        this.height = height;
+        this.binderProvider = binderProvider;
+        this.onConnected = onConnected;
+        this.onDisplayConfig = onDisplayConfig;
+        this.deathRecipient = () -> mainHandler.post(() -> {
+            Log.w(TAG, "display service died - connection lost");
+            onConnected.accept(false);
+            displayService = null;
+            needsSend = false;
+        });
+
+        mainView.setSurfaceLifecycle(SurfaceView.SURFACE_LIFECYCLE_FOLLOWS_ATTACHMENT);
+        mainView.getHolder().addCallback(new Callback());
+
+        var surface = mainView.getHolder().getSurface();
+        if (surface != null && surface.isValid()) {
+            mainView.getHolder().setFixedSize(width, height);
+            needsSend = true;
+        }
+        fetchBinder();
+    }
+
+    private void fetchBinder() {
+        executor.submit(() -> {
+            IBinder binder = null;
+            int attempts = 0;
+            while (!Thread.currentThread().isInterrupted() && attempts < MAX_BINDER_ATTEMPTS) {
+                try {
+                    binder = binderProvider.get();
+                } catch (Exception e) {
+                    Log.e(TAG, "binderProvider threw", e);
+                    binder = null;
+                }
+                if (binder != null) break;
+                attempts++;
+                try {
+                    Thread.sleep(1000);
+                } catch (InterruptedException e) {
+                    Thread.currentThread().interrupt();
+                    return;
+                }
+            }
+            final IBinder got = binder;
+            if (got == null) {
+                // Give up rather than poll forever: the daemon broker may have died (the supplier
+                // returns null once rootService is dropped), so the display can't be reached.
+                Log.e(TAG, "display binder unavailable after " + MAX_BINDER_ATTEMPTS + " attempts");
+                mainHandler.post(() -> onConnected.accept(false));
+                return;
+            }
+            mainHandler.post(() -> onBinderReady(got));
+        });
+    }
+
+    private void onBinderReady(@NonNull IBinder binder) {
+        Log.i(TAG, "got crosvm display binder");
+        displayService = ICrosvmAndroidDisplayService.Stub.asInterface(binder);
+        try {
+            binder.linkToDeath(deathRecipient, 0);
+        } catch (RemoteException e) {
+            Log.w(TAG, "linkToDeath failed", e);
+        }
+        try {
+            DisplayConfig config = displayService.getDisplayConfig();
+            if (config != null && config.width > 0 && config.height > 0) {
+                width = config.width;
+                height = config.height;
+                mainView.getHolder().setFixedSize(width, height);
+                onDisplayConfig.accept(config);
+            }
+        } catch (Exception e) {
+            Log.w(TAG, "getDisplayConfig unavailable, using default " + width + "x" + height);
+        }
+        onConnected.accept(true);
+        applyPendingSurface();
+    }
+
+    private void applyPendingSurface() {
+        if (displayService == null || !needsSend) return;
+        trySendSurface(mainView.getHolder());
+    }
+
+    private void trySendSurface(@NonNull SurfaceHolder holder) {
+        var svc = displayService;
+        if (svc == null) return;
+        Surface surface = holder.getSurface();
+        if (surface == null || !surface.isValid()) {
+            Log.w(TAG, "main surface not valid - skipping");
+            return;
+        }
+        try {
+            svc.setSurface(surface, false);
+            markSent();
+        } catch (IllegalArgumentException e) {
+            // KNOWN/BENIGN: the reference TerminalApp DisplayProvider documents that setSurface
+            // throws IllegalArgumentException from the binder reply path even though crosvm DID
+            // receive and configure the surface. Treat as delivered.
+            Log.w(TAG, "setSurface: IllegalArgumentException (known/benign) - treating as delivered");
+            markSent();
+        } catch (Exception e) {
+            Log.e(TAG, "setSurface failed", e);
+        }
+    }
+
+    private void markSent() {
+        needsSend = false;
+        Log.i(TAG, "main surface sent");
+        if (hasSavedFrame && displayService != null) {
+            // The surface was recreated (e.g. rotation/fullscreen). Repaint the captured frame so
+            // a lazy-redraw guest compositor doesn't leave it black.
+            try {
+                displayService.drawSavedFrameForSurface(false);
+            } catch (Exception e) {
+                Log.w(TAG, "drawSavedFrameForSurface failed", e);
+            }
+        }
+    }
+
+    private final class Callback implements SurfaceHolder.Callback {
+        @Override
+        public void surfaceCreated(@NonNull SurfaceHolder holder) {
+            holder.setFixedSize(width, height);
+            needsSend = true; // fresh surface - send on next surfaceChanged
+        }
+
+        @Override
+        public void surfaceChanged(@NonNull SurfaceHolder holder, int format, int w, int h) {
+            if (displayService == null || !needsSend) return;
+            trySendSurface(holder);
+        }
+
+        @Override
+        public void surfaceDestroyed(@NonNull SurfaceHolder holder) {
+            needsSend = false;
+            var svc = displayService;
+            if (svc == null) return;
+            try {
+                svc.saveFrameForSurface(false);
+                hasSavedFrame = true;
+            } catch (Exception e) {
+                Log.w(TAG, "saveFrameForSurface failed", e);
+            }
+            try {
+                svc.removeSurface(false);
+            } catch (DeadObjectException e) {
+                Log.w(TAG, "display service already dead on surfaceDestroyed");
+            } catch (RemoteException e) {
+                Log.e(TAG, "removeSurface failed", e);
+            }
+        }
+    }
+
+    void shutdown() {
+        if (displayService != null) {
+            try {
+                displayService.asBinder().unlinkToDeath(deathRecipient, 0);
+            } catch (Exception ignored) {
+            }
+        }
+        executor.shutdownNow();
+        displayService = null;
+        needsSend = false;
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/display/nativedisplay/display/VMNativeDisplayActivity.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/nativedisplay/display/VMNativeDisplayActivity.java
new file mode 100644
index 000000000..25b19cee7
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/nativedisplay/display/VMNativeDisplayActivity.java
@@ -0,0 +1,514 @@
+package cn.classfun.droidvm.ui.vm.display.nativedisplay.display;
+
+import static android.view.Gravity.CENTER;
+import static android.view.View.GONE;
+import static android.view.View.VISIBLE;
+import static android.view.WindowInsetsController.BEHAVIOR_SHOW_TRANSIENT_BARS_BY_SWIPE;
+import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
+
+import android.annotation.SuppressLint;
+import android.content.BroadcastReceiver;
+import android.content.Context;
+import android.content.Intent;
+import android.content.IntentFilter;
+import android.graphics.drawable.GradientDrawable;
+import android.os.Bundle;
+import android.os.Handler;
+import android.os.IBinder;
+import android.os.Looper;
+import android.os.RemoteException;
+import android.util.Base64;
+import android.util.Log;
+import android.view.KeyCharacterMap;
+import android.view.KeyEvent;
+import android.view.MenuItem;
+import android.view.MotionEvent;
+import android.view.SurfaceView;
+import android.view.View;
+import android.view.WindowInsets;
+import android.view.WindowManager;
+import android.view.inputmethod.InputMethodManager;
+import android.widget.FrameLayout;
+import android.widget.LinearLayout;
+import android.widget.TextView;
+
+import androidx.annotation.NonNull;
+import androidx.annotation.Nullable;
+import androidx.appcompat.app.AppCompatActivity;
+
+import com.google.android.material.appbar.MaterialToolbar;
+import com.google.android.material.button.MaterialButton;
+import com.google.android.material.floatingactionbutton.FloatingActionButton;
+
+import org.json.JSONObject;
+
+import java.util.UUID;
+
+import cn.classfun.droidvm.R;
+import cn.classfun.droidvm.display.INativeDisplayRootService;
+import cn.classfun.droidvm.lib.daemon.DaemonConnection;
+import cn.classfun.droidvm.lib.store.vm.NativeDisplay;
+import cn.classfun.droidvm.lib.ui.DragTouchListener;
+import cn.classfun.droidvm.lib.ui.MaterialMenu;
+import cn.classfun.droidvm.ui.vm.display.base.DisplayExtraKeysPanel;
+import cn.classfun.droidvm.ui.vm.display.nativedisplay.input.DirectInputSink;
+import cn.classfun.droidvm.ui.vm.display.nativedisplay.input.InputForwarder;
+import cn.classfun.droidvm.ui.vm.display.nativedisplay.input.NativeExtraKeysPanel;
+import cn.classfun.droidvm.ui.vm.display.nativedisplay.input.NativeKeyboardEditText;
+import cn.classfun.droidvm.ui.vm.display.nativedisplay.input.TouchScaleCalculator;
+
+/**
+ * Native display: shows a VM's gfxstream/virtio-gpu output by handing crosvm an Android Surface
+ * (via the per-VM ICrosvmAndroidDisplayService binder) and forwarding touch/keyboard as evdev.
+ *
+ * Input: the daemon (uid=0) owns crosvm's --input sockets (it binds them before crosvm starts and
+ * accepts the connection), so this Activity forwards evdev to the daemon rather than writing the
+ * sockets directly. The daemon hosts a broker binder ({@link INativeDisplayRootService}) that both
+ * looks up the per-VM display binder and, on the touch hot path, writes evdev straight to crosvm
+ * ({@link DirectInputSink}); the vm_input IPC command is the fallback when that path is unavailable.
+ * The binder can't ride the daemon's TCP/JSON-RPC channel, so it arrives via a broadcast the daemon
+ * sends in response to the {@code display_attach} request below.
+ */
+public final class VMNativeDisplayActivity extends AppCompatActivity {
+    private static final String TAG = "VMNativeDisplay";
+    public static final String EXTRA_VM_NAME = "vm_name";
+    public static final String EXTRA_VM_ID = "vm_id";
+    public static final String EXTRA_WIDTH = "display_width";
+    public static final String EXTRA_HEIGHT = "display_height";
+    private static final long AUTO_HIDE_DELAY_MS = 3000;
+
+    private final Handler mainHandler = new Handler(Looper.getMainLooper());
+    // Converts committed IME text into key events (handles Shift for upper-case/symbols).
+    private final KeyCharacterMap keyCharacterMap =
+        KeyCharacterMap.load(KeyCharacterMap.VIRTUAL_KEYBOARD);
+
+    private MaterialToolbar toolbar;
+    private LinearLayout statusBar;
+    private View statusIndicator;
+    private TextView tvStatus;
+    private LinearLayout overlayConnecting;
+    private TextView tvConnectingMessage;
+    private FrameLayout displayContainer;
+    private SurfaceView surfaceView;
+    private NativeKeyboardEditText keyboardInput;
+    private FloatingActionButton fabMenu;
+    private MaterialButton btnFullscreen;
+    private DisplayExtraKeysPanel extraKeysPanel;
+
+    private String vmName = "";
+    private String vmId = "";
+    private String vmKey = "";
+    private int guestWidth = 1280;
+    private int guestHeight = 720;
+
+    private INativeDisplayRootService rootService;
+    private DisplayProvider displayProvider;
+    private InputForwarder inputForwarder;
+    private DirectInputSink directSink;
+    private NativeExtraKeysPanel nativeExtraKeys;
+    private boolean isFullscreen = false;
+    private boolean connected = false;
+
+    // Per-attach random token: we only accept the binder broadcast carrying the nonce we requested,
+    // so another app spoofing the (exported) action can't slip us a fake broker binder.
+    private final String attachNonce = UUID.randomUUID().toString();
+    private boolean binderReceiverRegistered = false;
+    private boolean rootConnected = false;
+
+    // The daemon broadcasts its broker binder here in response to our display_attach request.
+    private final BroadcastReceiver binderReceiver = new BroadcastReceiver() {
+        @Override
+        public void onReceive(Context context, Intent intent) {
+            var bundle = intent.getBundleExtra(NativeDisplay.EXTRA_BUNDLE);
+            if (bundle == null || !attachNonce.equals(bundle.getString(NativeDisplay.EXTRA_NONCE)))
+                return;
+            var binder = bundle.getBinder(NativeDisplay.EXTRA_BINDER);
+            if (binder != null) onBinderReceived(binder);
+        }
+    };
+
+    // Daemon died (e.g. restart): drop the broker binder so writes fall back to the vm_input IPC.
+    private final IBinder.DeathRecipient deathRecipient = () -> mainHandler.post(() -> {
+        Log.w(TAG, "daemon broker binder died");
+        rootService = null;
+    });
+
+    @Override
+    protected void onCreate(@Nullable Bundle savedInstanceState) {
+        super.onCreate(savedInstanceState);
+        getWindow().addFlags(WindowManager.LayoutParams.FLAG_KEEP_SCREEN_ON);
+        setContentView(R.layout.activity_vm_native_display);
+
+        var intent = getIntent();
+        vmName = orEmpty(intent.getStringExtra(EXTRA_VM_NAME));
+        vmId = orEmpty(intent.getStringExtra(EXTRA_VM_ID));
+        guestWidth = (int) intent.getLongExtra(EXTRA_WIDTH, 1280);
+        guestHeight = (int) intent.getLongExtra(EXTRA_HEIGHT, 720);
+        vmKey = NativeDisplay.serviceNameFromId(vmId);
+
+        bindViews();
+        toolbar.setTitle(vmName.isEmpty() ? getString(R.string.native_display_title) : vmName);
+        toolbar.setNavigationOnClickListener(v -> finish());
+        setupViews();
+        setStatus(getString(R.string.native_display_connecting), R.color.vnc_status_connecting);
+        showOverlay(getString(R.string.native_display_waiting));
+
+        if (vmId.isEmpty()) {
+            setStatus(getString(R.string.native_display_failed), R.color.vnc_status_error);
+            showOverlay(getString(R.string.native_display_failed));
+            return;
+        }
+        // Ask the daemon (uid=0) for its broker binder. It can't ride the JSON-RPC channel, so the
+        // daemon broadcasts it back to binderReceiver (matched by attachNonce).
+        registerReceiver(binderReceiver,
+            new IntentFilter(NativeDisplay.BINDER_BROADCAST_ACTION), Context.RECEIVER_EXPORTED);
+        binderReceiverRegistered = true;
+        requestDisplayBinder(10);
+    }
+
+    // Sends display_attach; the daemon answers with a broadcast. Retries while the daemon connection
+    // is still coming up, since the Activity can open just before DaemonConnection authenticates.
+    private void requestDisplayBinder(int attemptsLeft) {
+        if (rootConnected || isFinishing()) return;
+        DaemonConnection.getInstance().buildRequest("display_attach")
+            .put("nonce", attachNonce)
+            .onError(e -> retryDisplayBinder(attemptsLeft))
+            .onUnsuccessful(r -> retryDisplayBinder(attemptsLeft))
+            .invoke();
+    }
+
+    private void retryDisplayBinder(int attemptsLeft) {
+        if (attemptsLeft <= 0) {
+            Log.w(TAG, "display_attach exhausted retries; daemon unavailable");
+            return;
+        }
+        mainHandler.postDelayed(() -> requestDisplayBinder(attemptsLeft - 1), 500);
+    }
+
+    private void onBinderReceived(@NonNull IBinder binder) {
+        if (rootConnected) return; // ignore duplicate broadcasts
+        rootConnected = true;
+        rootService = INativeDisplayRootService.Stub.asInterface(binder);
+        try {
+            binder.linkToDeath(deathRecipient, 0);
+        } catch (RemoteException e) {
+            Log.w(TAG, "linkToDeath failed", e);
+        }
+        onRootConnected();
+    }
+
+    private void onRootConnected() {
+        if (rootService == null) return;
+        // Try a direct unix-socket sink to the daemon (one write per evdev frame, no IPC
+        // round-trip); on any failure it falls back to the vm_input JSON-RPC path below.
+        directSink = new DirectInputSink(vmId, rootService, this::sendInputToDaemon);
+        inputForwarder = new InputForwarder(directSink);
+        if (nativeExtraKeys != null) nativeExtraKeys.setForwarder(inputForwarder);
+
+        // Start the VM now that listeners are up (no-op if already running).
+        DaemonConnection.getInstance().buildRequest("vm_start")
+            .put("vm_id", vmId)
+            .onResponse(r -> {})
+            .onUnsuccessful(r -> {})
+            .onError(e -> Log.w(TAG, "vm_start request failed", e))
+            .invoke();
+
+        // Display binder is looked up via the root service (servicemanager) on a bg thread.
+        displayProvider = new DisplayProvider(
+            surfaceView, guestWidth, guestHeight,
+            () -> {
+                var svc = rootService;
+                if (svc == null) return null;
+                try {
+                    return svc.waitForDisplayBinder(vmKey);
+                } catch (Exception e) {
+                    return null;
+                }
+            },
+            isConnected -> mainHandler.post(() -> onDisplayConnected(isConnected)),
+            config -> mainHandler.post(() -> {
+                guestWidth = config.width;
+                guestHeight = config.height;
+                updateAspectRatio(displayContainer.getWidth(), displayContainer.getHeight());
+            })
+        );
+    }
+
+    private void onDisplayConnected(boolean isConnected) {
+        connected = isConnected;
+        if (isConnected) {
+            setStatus(fmt(getString(R.string.native_display_connected), guestWidth, guestHeight),
+                R.color.vnc_status_connected);
+            hideOverlay();
+            updateAspectRatio(displayContainer.getWidth(), displayContainer.getHeight());
+        } else {
+            setStatus(getString(R.string.native_display_connecting), R.color.vnc_status_connecting);
+            showOverlay(getString(R.string.native_display_waiting));
+        }
+    }
+
+    private void bindViews() {
+        toolbar = findViewById(R.id.toolbar);
+        statusBar = findViewById(R.id.status_bar);
+        statusIndicator = findViewById(R.id.status_indicator);
+        tvStatus = findViewById(R.id.tv_status);
+        overlayConnecting = findViewById(R.id.overlay_connecting);
+        tvConnectingMessage = findViewById(R.id.tv_connecting_message);
+        displayContainer = findViewById(R.id.display_container);
+        surfaceView = findViewById(R.id.surface_view);
+        keyboardInput = findViewById(R.id.keyboard_input);
+        fabMenu = findViewById(R.id.fab_menu);
+        btnFullscreen = findViewById(R.id.btn_fullscreen);
+        extraKeysPanel = findViewById(R.id.extra_keys_panel);
+        nativeExtraKeys = new NativeExtraKeysPanel(extraKeysPanel);
+    }
+
+    @SuppressLint("ClickableViewAccessibility")
+    private void setupViews() {
+        btnFullscreen.setOnClickListener(v -> toggleFullscreen());
+        displayContainer.addOnLayoutChangeListener((
+            v, l, t, r, b, ol, ot, or2, ob
+        ) -> {
+            int cw = r - l, ch = b - t;
+            if (cw > 0 && ch > 0) v.post(() -> updateAspectRatio(cw, ch));
+        });
+        surfaceView.setOnTouchListener(this::onSurfaceTouch);
+        keyboardInput.setTextInputListener(new NativeKeyboardEditText.TextInputListener() {
+            @Override
+            public void onCommitText(@NonNull CharSequence text) {
+                forwardText(text);
+            }
+
+            @Override
+            public void onDeleteSurrounding(int beforeLength, int afterLength) {
+                for (int i = 0; i < beforeLength; i++) tapKey(KeyEvent.KEYCODE_DEL);
+                for (int i = 0; i < afterLength; i++) tapKey(KeyEvent.KEYCODE_FORWARD_DEL);
+            }
+        });
+        var listener = new DragTouchListener(this, this::showFabMenu);
+        fabMenu.setOnTouchListener(listener);
+    }
+
+    // Soft keyboards that commit text (instead of sending key events) land here; translate each
+    // character to its key event sequence and forward as evdev.
+    private void forwardText(@NonNull CharSequence text) {
+        if (inputForwarder == null || !connected) return;
+        KeyEvent[] events = keyCharacterMap.getEvents(text.toString().toCharArray());
+        if (events == null) return;
+        // Wrap with the extra-keys panel modifiers so e.g. Ctrl+(typed key) reaches the guest.
+        nativeExtraKeys.applyModifiers(true);
+        for (KeyEvent e : events) {
+            if (e.getAction() == KeyEvent.ACTION_DOWN) {
+                inputForwarder.sendKeyEvent(e.getKeyCode(), true);
+            } else if (e.getAction() == KeyEvent.ACTION_UP) {
+                inputForwarder.sendKeyEvent(e.getKeyCode(), false);
+            }
+        }
+        nativeExtraKeys.applyModifiers(false);
+    }
+
+    private void tapKey(int keyCode) {
+        if (inputForwarder == null || !connected) return;
+        nativeExtraKeys.applyModifiers(true);
+        inputForwarder.sendKeyEvent(keyCode, true);
+        inputForwarder.sendKeyEvent(keyCode, false);
+        nativeExtraKeys.applyModifiers(false);
+    }
+
+    private boolean onSurfaceTouch(View v, MotionEvent event) {
+        if (inputForwarder == null || v.getWidth() <= 0 || v.getHeight() <= 0) return false;
+        // The SurfaceView is sized to the guest aspect ratio, so offsets are zero and scale is
+        // simply guest/view per axis.
+        var tf = TouchScaleCalculator.compute(guestWidth, guestHeight, v.getWidth(), v.getHeight());
+        inputForwarder.sendTouchEvent(event, tf.scaleX, tf.scaleY);
+        return true;
+    }
+
+    // Sink for InputForwarder: ships encoded evdev to the daemon, which owns the crosvm input
+    // sockets and writes them to the guest. Called on the (single) InputForwarder worker thread, so
+    // the synchronous request keeps events ordered and back-pressured.
+    private boolean sendInputToDaemon(int channel, @NonNull byte[] data) {
+        try {
+            var req = new JSONObject();
+            req.put("command", "vm_input");
+            req.put("vm_id", vmId);
+            req.put("channel", channel);
+            req.put("data", Base64.encodeToString(data, Base64.NO_WRAP));
+            var resp = DaemonConnection.getInstance().request(req);
+            return resp.optBoolean("delivered", false);
+        } catch (Exception e) {
+            return false;
+        }
+    }
+
+    @Override
+    public boolean dispatchKeyEvent(@NonNull KeyEvent event) {
+        int keyCode = event.getKeyCode();
+        if (keyCode == KeyEvent.KEYCODE_VOLUME_UP || keyCode == KeyEvent.KEYCODE_VOLUME_DOWN)
+            return super.dispatchKeyEvent(event);
+        if (inputForwarder != null && connected) {
+            // Don't wrap a hardware modifier key in the panel's sticky modifiers; only real keys.
+            boolean modifier = isModifierKey(keyCode);
+            boolean handled;
+            if (event.getAction() == KeyEvent.ACTION_DOWN) {
+                if (!modifier && nativeExtraKeys.hasNonStickyModifiers())
+                    nativeExtraKeys.applyModifiers(true);
+                handled = inputForwarder.sendKeyEvent(keyCode, true);
+            } else if (event.getAction() == KeyEvent.ACTION_UP) {
+                handled = inputForwarder.sendKeyEvent(keyCode, false);
+                if (!modifier && nativeExtraKeys.hasNonStickyModifiers())
+                    nativeExtraKeys.applyModifiers(false);
+            } else {
+                handled = false;
+            }
+            if (handled) return true;
+        }
+        return super.dispatchKeyEvent(event);
+    }
+
+    private static boolean isModifierKey(int keyCode) {
+        switch (keyCode) {
+            case KeyEvent.KEYCODE_SHIFT_LEFT:
+            case KeyEvent.KEYCODE_SHIFT_RIGHT:
+            case KeyEvent.KEYCODE_CTRL_LEFT:
+            case KeyEvent.KEYCODE_CTRL_RIGHT:
+            case KeyEvent.KEYCODE_ALT_LEFT:
+            case KeyEvent.KEYCODE_ALT_RIGHT:
+            case KeyEvent.KEYCODE_META_LEFT:
+            case KeyEvent.KEYCODE_META_RIGHT:
+            case KeyEvent.KEYCODE_CAPS_LOCK:
+                return true;
+            default:
+                return false;
+        }
+    }
+
+    private void updateAspectRatio(int containerW, int containerH) {
+        if (containerW <= 0 || containerH <= 0 || guestWidth <= 0 || guestHeight <= 0) return;
+        float vmAspect = (float) guestWidth / guestHeight;
+        float containerAspect = (float) containerW / containerH;
+        int viewW, viewH;
+        if (vmAspect > containerAspect) {
+            viewW = containerW;
+            viewH = Math.round(containerW / vmAspect);
+        } else {
+            viewH = containerH;
+            viewW = Math.round(containerH * vmAspect);
+        }
+        surfaceView.setLayoutParams(new FrameLayout.LayoutParams(viewW, viewH, CENTER));
+    }
+
+    private void setStatus(String text, int colorRes) {
+        tvStatus.setText(text);
+        var indicator = new GradientDrawable();
+        indicator.setShape(GradientDrawable.OVAL);
+        indicator.setColor(getColor(colorRes));
+        statusIndicator.setBackground(indicator);
+    }
+
+    private void showOverlay(String message) {
+        overlayConnecting.setVisibility(VISIBLE);
+        tvConnectingMessage.setText(message);
+    }
+
+    private void hideOverlay() {
+        overlayConnecting.setVisibility(GONE);
+    }
+
+    private void toggleSoftKeyboard() {
+        var imm = getSystemService(InputMethodManager.class);
+        if (imm != null) tryShowKeyboard(imm, 10);
+    }
+
+    // Drive a real (invisible) EditText: a SurfaceView is an unreliable IME target on some ROMs.
+    // The popup menu relinquishes window focus right before this runs, so the editor isn't yet
+    // "served" by the IMM and showSoftInput() is silently ignored (no ResultReceiver callback
+    // either). Retry on a short delay until the input connection is established; force as a last
+    // resort.
+    private void tryShowKeyboard(@NonNull InputMethodManager imm, int attemptsLeft) {
+        keyboardInput.requestFocus();
+        if (imm.showSoftInput(keyboardInput, InputMethodManager.SHOW_IMPLICIT)) return;
+        if (attemptsLeft > 0) {
+            mainHandler.postDelayed(() -> tryShowKeyboard(imm, attemptsLeft - 1), 60);
+        } else {
+            imm.toggleSoftInput(InputMethodManager.SHOW_FORCED, 0);
+        }
+    }
+
+    private void toggleFullscreen() {
+        isFullscreen = !isFullscreen;
+        var controller = getWindow().getInsetsController();
+        if (controller == null) return;
+        if (isFullscreen) {
+            toolbar.setVisibility(GONE);
+            statusBar.setVisibility(GONE);
+            extraKeysPanel.setVisibility(GONE);
+            controller.hide(WindowInsets.Type.systemBars());
+            controller.setSystemBarsBehavior(BEHAVIOR_SHOW_TRANSIENT_BARS_BY_SWIPE);
+        } else {
+            toolbar.setVisibility(VISIBLE);
+            statusBar.setVisibility(VISIBLE);
+            extraKeysPanel.animateIn();
+            controller.show(WindowInsets.Type.systemBars());
+        }
+    }
+
+    private void showFabMenu() {
+        var popup = new MaterialMenu(this, fabMenu);
+        popup.inflate(R.menu.menu_native_display_menu);
+        popup.setOnMenuItemClickListener(this::onMenuItemClicked);
+        popup.show();
+    }
+
+    private boolean onMenuItemClicked(@NonNull MenuItem item) {
+        int id = item.getItemId();
+        if (id == R.id.menu_keyboard) {
+            toggleSoftKeyboard();
+            return true;
+        } else if (id == R.id.menu_extra_keys) {
+            extraKeysPanel.setVisibleAnimated(extraKeysPanel.getVisibility() != VISIBLE);
+            return true;
+        } else if (id == R.id.menu_fullscreen) {
+            toggleFullscreen();
+            return true;
+        }
+        return false;
+    }
+
+    @Override
+    protected void onDestroy() {
+        super.onDestroy();
+        extraKeysPanel.stopKeyRepeat();
+        if (displayProvider != null) {
+            displayProvider.shutdown();
+            displayProvider = null;
+        }
+        if (inputForwarder != null) {
+            inputForwarder.close();
+            inputForwarder = null;
+        }
+        if (directSink != null) {
+            directSink.close();
+            directSink = null;
+        }
+        if (binderReceiverRegistered) {
+            try {
+                unregisterReceiver(binderReceiver);
+            } catch (Exception ignored) {
+            }
+            binderReceiverRegistered = false;
+        }
+        if (rootService != null) {
+            try {
+                rootService.asBinder().unlinkToDeath(deathRecipient, 0);
+            } catch (Exception ignored) {
+            }
+        }
+        rootService = null;
+    }
+
+    @NonNull
+    private static String orEmpty(@Nullable String s) {
+        return s == null ? "" : s;
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/display/nativedisplay/input/DirectInputSink.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/nativedisplay/input/DirectInputSink.java
new file mode 100644
index 000000000..523c758a5
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/nativedisplay/input/DirectInputSink.java
@@ -0,0 +1,71 @@
+package cn.classfun.droidvm.ui.vm.display.nativedisplay.input;
+
+import static cn.classfun.droidvm.lib.store.vm.NativeDisplay.CHANNEL_COUNT;
+import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
+
+import android.util.Log;
+
+import androidx.annotation.NonNull;
+import androidx.annotation.Nullable;
+
+import cn.classfun.droidvm.display.INativeDisplayRootService;
+
+/**
+ * {@link InputForwarder.InputSink} that hands pre-encoded evdev straight to the daemon via its
+ * binder ({@link INativeDisplayRootService#writeInput}), which writes it to the crosvm input socket
+ * it owns - bypassing the slow vm_input JSON-RPC round-trip. An untrusted_app can neither
+ * {@code connectto} that su-domain socket nor receive its fd over binder, but it can hand the bytes
+ * across binder. Falls back to {@code fallback} on any failure so the feature degrades to the
+ * original IPC path instead of dropping input.
+ */
+public final class DirectInputSink implements InputForwarder.InputSink {
+    private static final String TAG = "DirectInputSink";
+
+    private final String vmId;
+    private final INativeDisplayRootService rootService;
+    private final InputForwarder.InputSink fallback;
+    private volatile boolean closed = false;
+    // Whether the most recent write() went out the daemon-binder path (vs. the IPC fallback). For
+    // latency diagnostics only; the worker thread is single-threaded so a plain volatile is enough.
+    private volatile boolean lastWriteDirect = false;
+
+    /**
+     * @param vmId        the VM id, used by the daemon to find the running VM's input channel.
+     * @param rootService daemon broker binder that writes the bytes; null disables the direct path.
+     * @param fallback    sink used when the direct path is unavailable or errors.
+     */
+    public DirectInputSink(@NonNull String vmId, @Nullable INativeDisplayRootService rootService,
+                           @Nullable InputForwarder.InputSink fallback) {
+        this.vmId = vmId;
+        this.rootService = rootService;
+        this.fallback = fallback;
+    }
+
+    @Override
+    public boolean write(int channel, @NonNull byte[] data) {
+        if (closed || channel < 0 || channel >= CHANNEL_COUNT) return false;
+        if (rootService != null) {
+            try {
+                if (rootService.writeInput(vmId, channel, data)) {
+                    lastWriteDirect = true;
+                    return true;
+                }
+            } catch (Exception e) {
+                Log.w(TAG, fmt("channel %d root forward failed: %s - falling back",
+                    channel, e.getMessage()));
+            }
+        }
+        lastWriteDirect = false;
+        return fallback != null && fallback.write(channel, data);
+    }
+
+    /** True iff the most recent {@link #write} went out the daemon-binder path. Diagnostics only. */
+    public boolean wasLastWriteDirect() {
+        return lastWriteDirect;
+    }
+
+    /** Stops using the direct path; subsequent writes go through the fallback. */
+    public void close() {
+        closed = true;
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/display/nativedisplay/input/EvdevEncoder.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/nativedisplay/input/EvdevEncoder.java
new file mode 100644
index 000000000..a78b2d2b8
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/nativedisplay/input/EvdevEncoder.java
@@ -0,0 +1,181 @@
+package cn.classfun.droidvm.ui.vm.display.nativedisplay.input;
+
+import android.view.MotionEvent;
+
+import androidx.annotation.NonNull;
+import androidx.annotation.Nullable;
+
+import java.nio.ByteBuffer;
+import java.nio.ByteOrder;
+import java.util.ArrayList;
+import java.util.HashMap;
+import java.util.List;
+import java.util.Map;
+
+/**
+ * Encodes input into the wire format crosvm's virtio-input devices read from a socket: a stream of
+ * fixed 8-byte little-endian records {@code (type: u16, code: u16, value: i32)}. crosvm connects to
+ * the socket given via {@code --input multi-touch[path=...]} / {@code keyboard[...]} and consumes
+ * these records directly. MVP scope: multi-touch + keyboard.
+ *
+ * Touch encoding is stateful (one instance per session): it keeps a pointer-id -> MT slot mapping
+ * because evdev slots must be small reused indices, while Android pointer ids can grow/be sparse;
+ * and a contact count so BTN_TOUCH toggles only on the first finger down and the last finger up.
+ * All touch methods run on the single InputForwarder worker thread, so the state needs no locking.
+ */
+public final class EvdevEncoder {
+    // from include/uapi/linux/input-event-codes.h
+    private static final short EV_SYN = 0x00;
+    private static final short EV_KEY = 0x01;
+    private static final short EV_ABS = 0x03;
+
+    private static final short SYN_REPORT = 0x00;
+
+    private static final short ABS_X = 0x00;
+    private static final short ABS_Y = 0x01;
+    private static final short ABS_MT_SLOT = 0x2f;
+    private static final short ABS_MT_POSITION_X = 0x35;
+    private static final short ABS_MT_POSITION_Y = 0x36;
+    private static final short ABS_MT_TRACKING_ID = 0x39;
+
+    private static final short BTN_TOUCH = 0x14a;
+
+    /** Live Android pointer id -> evdev MT slot. Touched only on the worker thread. */
+    private final Map<Integer, Integer> pointerSlots = new HashMap<>();
+
+    public EvdevEncoder() {
+    }
+
+    private static final class Event {
+        final short type;
+        final short code;
+        final int value;
+
+        Event(short type, short code, int value) {
+            this.type = type;
+            this.code = code;
+            this.value = value;
+        }
+    }
+
+    /** Serializes events to the contiguous 8-byte-record buffer crosvm reads (one write per batch). */
+    @NonNull
+    private static byte[] encode(@NonNull List<Event> events) {
+        var buf = ByteBuffer.allocate(8 * events.size()).order(ByteOrder.LITTLE_ENDIAN);
+        for (var e : events) {
+            buf.putShort(e.type);
+            buf.putShort(e.code);
+            buf.putInt(e.value);
+        }
+        return buf.array();
+    }
+
+    /**
+     * Encodes a key down/up plus SYN into a ready-to-send record buffer.
+     *
+     * @param scanCode Linux evdev KEY_* code (from {@link KeyCodeMapper}).
+     */
+    @NonNull
+    public static byte[] encodeKey(short scanCode, boolean down) {
+        var events = new ArrayList<Event>(2);
+        events.add(new Event(EV_KEY, scanCode, down ? 1 : 0));
+        events.add(new Event(EV_SYN, SYN_REPORT, 0));
+        return encode(events);
+    }
+
+    /**
+     * Encodes a touch {@link MotionEvent} into multi-touch evdev records, or null if there is
+     * nothing to send. The multi-touch device's ABS range must equal the guest resolution passed
+     * via {@code --input multi-touch[width=guestW,height=guestH]}.
+     *
+     * @param scaleX guestWidth / viewWidth
+     * @param scaleY guestHeight / viewHeight
+     */
+    @Nullable
+    public byte[] encodeTouch(@NonNull MotionEvent event, float scaleX, float scaleY) {
+        switch (event.getActionMasked()) {
+            case MotionEvent.ACTION_MOVE: {
+                int count = event.getPointerCount();
+                var events = new ArrayList<Event>(count * 4 + 1);
+                for (int i = 0; i < count; i++) {
+                    int id = event.getPointerId(i);
+                    Integer slot = pointerSlots.get(id);
+                    if (slot == null) continue; // no DOWN seen for this pointer; ignore
+                    int x = (int) (event.getX(i) * scaleX);
+                    int y = (int) (event.getY(i) * scaleY);
+                    events.add(new Event(EV_ABS, ABS_MT_SLOT, slot));
+                    events.add(new Event(EV_ABS, ABS_MT_POSITION_X, x));
+                    events.add(new Event(EV_ABS, ABS_MT_POSITION_Y, y));
+                    if (i == 0) { // mirror the primary pointer onto the single-touch axes
+                        events.add(new Event(EV_ABS, ABS_X, x));
+                        events.add(new Event(EV_ABS, ABS_Y, y));
+                    }
+                }
+                if (events.isEmpty()) return null;
+                events.add(new Event(EV_SYN, SYN_REPORT, 0));
+                return encode(events);
+            }
+            case MotionEvent.ACTION_DOWN:
+            case MotionEvent.ACTION_POINTER_DOWN: {
+                int idx = event.getActionIndex();
+                int id = event.getPointerId(idx);
+                int slot = allocSlot(id);
+                int x = (int) (event.getX(idx) * scaleX);
+                int y = (int) (event.getY(idx) * scaleY);
+                var events = new ArrayList<Event>(8);
+                // Only the first contact toggles BTN_TOUCH; further fingers must not re-assert it.
+                if (pointerSlots.size() == 1)
+                    events.add(new Event(EV_KEY, BTN_TOUCH, 1));
+                events.add(new Event(EV_ABS, ABS_MT_SLOT, slot));
+                events.add(new Event(EV_ABS, ABS_MT_TRACKING_ID, id));
+                events.add(new Event(EV_ABS, ABS_MT_POSITION_X, x));
+                events.add(new Event(EV_ABS, ABS_MT_POSITION_Y, y));
+                if (slot == 0) {
+                    events.add(new Event(EV_ABS, ABS_X, x));
+                    events.add(new Event(EV_ABS, ABS_Y, y));
+                }
+                events.add(new Event(EV_SYN, SYN_REPORT, 0));
+                return encode(events);
+            }
+            case MotionEvent.ACTION_UP:
+            case MotionEvent.ACTION_POINTER_UP: {
+                int id = event.getPointerId(event.getActionIndex());
+                Integer slot = pointerSlots.remove(id);
+                if (slot == null) return null;
+                var events = new ArrayList<Event>(4);
+                events.add(new Event(EV_ABS, ABS_MT_SLOT, slot));
+                events.add(new Event(EV_ABS, ABS_MT_TRACKING_ID, -1));
+                // Only release BTN_TOUCH once the last finger is up; a POINTER_UP with fingers
+                // still down must keep BTN_TOUCH asserted.
+                if (pointerSlots.isEmpty())
+                    events.add(new Event(EV_KEY, BTN_TOUCH, 0));
+                events.add(new Event(EV_SYN, SYN_REPORT, 0));
+                return encode(events);
+            }
+            case MotionEvent.ACTION_CANCEL: {
+                if (pointerSlots.isEmpty()) return null;
+                var events = new ArrayList<Event>(pointerSlots.size() * 2 + 2);
+                for (int slot : pointerSlots.values()) {
+                    events.add(new Event(EV_ABS, ABS_MT_SLOT, slot));
+                    events.add(new Event(EV_ABS, ABS_MT_TRACKING_ID, -1));
+                }
+                pointerSlots.clear();
+                events.add(new Event(EV_KEY, BTN_TOUCH, 0));
+                events.add(new Event(EV_SYN, SYN_REPORT, 0));
+                return encode(events);
+            }
+            default:
+                return null;
+        }
+    }
+
+    /** Maps a pointer id to a stable slot, allocating the lowest free slot index if new. */
+    private int allocSlot(int pointerId) {
+        Integer existing = pointerSlots.get(pointerId);
+        if (existing != null) return existing;
+        int slot = 0;
+        while (pointerSlots.containsValue(slot)) slot++;
+        pointerSlots.put(pointerId, slot);
+        return slot;
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/display/nativedisplay/input/InputForwarder.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/nativedisplay/input/InputForwarder.java
new file mode 100644
index 000000000..163981464
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/nativedisplay/input/InputForwarder.java
@@ -0,0 +1,178 @@
+package cn.classfun.droidvm.ui.vm.display.nativedisplay.input;
+
+import static cn.classfun.droidvm.lib.store.vm.NativeDisplay.KEYBOARD;
+import static cn.classfun.droidvm.lib.store.vm.NativeDisplay.MULTITOUCH;
+import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
+
+import android.os.SystemClock;
+import android.util.Log;
+import android.view.MotionEvent;
+
+import androidx.annotation.NonNull;
+
+import java.util.concurrent.ExecutorService;
+import java.util.concurrent.Executors;
+import java.util.concurrent.atomic.AtomicReference;
+
+/**
+ * Centralized input forwarding to the guest VM. Events are encoded with {@link EvdevEncoder} and
+ * shipped via {@link InputSink} to the daemon (which owns the per-device unix sockets crosvm reads
+ * from) over its IPC. Each high-level event is encoded once and sent in a single sink call. Work is
+ * serialized on one background thread; MotionEvents are copied first because the framework recycles
+ * the originals.
+ *
+ * ACTION_MOVE is coalesced: the synchronous per-event IPC round-trip is far slower than the touch
+ * sample rate, so unbounded moves would pile up in the worker queue and the on-screen pointer would
+ * fall seconds behind the finger. Only the newest pending move is kept; discrete DOWN/UP/POINTER_*
+ * events are never dropped and stay ordered. MVP scope: touch + keyboard.
+ */
+public final class InputForwarder {
+    private static final String TAG = "InputForwarder";
+
+    /** Writes pre-encoded evdev bytes for a channel in the root process; false if not delivered. */
+    public interface InputSink {
+        boolean write(int channel, @NonNull byte[] data);
+    }
+
+    private final InputSink sink;
+    // Stateful touch encoder (pointer-id -> slot, contact count); single-threaded on the worker.
+    private final EvdevEncoder encoder = new EvdevEncoder();
+    private final ExecutorService worker = Executors.newSingleThreadExecutor(r -> {
+        var t = new Thread(r, "InputForwarder");
+        t.setDaemon(true);
+        return t;
+    });
+
+    // Newest pending ACTION_MOVE, coalesced so a fast finger can't outrun the synchronous IPC.
+    private final AtomicReference<TouchFrame> pendingMove = new AtomicReference<>();
+
+    private static final class TouchFrame {
+        final MotionEvent event;
+        final float scaleX;
+        final float scaleY;
+
+        TouchFrame(@NonNull MotionEvent event, float scaleX, float scaleY) {
+            this.event = event;
+            this.scaleX = scaleX;
+            this.scaleY = scaleY;
+        }
+    }
+
+    public InputForwarder(@NonNull InputSink sink) {
+        this.sink = sink;
+    }
+
+    private void submit(@NonNull String name, @NonNull Runnable block) {
+        try {
+            worker.execute(() -> {
+                try {
+                    block.run();
+                } catch (Exception e) {
+                    Log.e(TAG, name + " failed", e);
+                }
+            });
+        } catch (Exception e) {
+            Log.d(TAG, name + " dropped: " + e.getMessage());
+        }
+    }
+
+    /**
+     * @param scaleX guestWidth / viewWidth
+     * @param scaleY guestHeight / viewHeight
+     */
+    public void sendTouchEvent(@NonNull MotionEvent event, float scaleX, float scaleY) {
+        var copy = MotionEvent.obtainNoHistory(event);
+        if (event.getActionMasked() == MotionEvent.ACTION_MOVE) {
+            // Keep only the latest move; schedule a drain only when the slot was empty so the
+            // worker queue never holds more than one pending move regardless of touch rate.
+            var prev = pendingMove.getAndSet(new TouchFrame(copy, scaleX, scaleY));
+            if (prev != null) {
+                prev.event.recycle();
+            } else {
+                submit("touchMove", this::drainMove);
+            }
+        } else {
+            // DOWN/UP/POINTER_* are discrete state changes; never drop, keep them ordered.
+            submit("touchEvent", () -> sendTouchNow(copy, scaleX, scaleY));
+        }
+    }
+
+    private void drainMove() {
+        var frame = pendingMove.getAndSet(null);
+        if (frame == null) return; // already superseded; a later drain will (or did) handle it
+        sendTouchNow(frame.event, frame.scaleX, frame.scaleY);
+    }
+
+    private void sendTouchNow(@NonNull MotionEvent event, float scaleX, float scaleY) {
+        // eventTime is on the SystemClock.uptimeMillis() timebase, so the diff below is the full
+        // finger-to-sink latency (kernel input -> framework dispatch -> our worker -> sink). Read it
+        // before recycle() since the framework reuses the MotionEvent afterwards.
+        long eventTimeMs = event.getEventTime();
+        byte[] data;
+        try {
+            data = encoder.encodeTouch(event, scaleX, scaleY);
+        } catch (Exception e) {
+            Log.e(TAG, "encode touch failed", e);
+            return;
+        } finally {
+            event.recycle();
+        }
+        if (data == null) return; // nothing to send for this event
+        long sinkStartNs = System.nanoTime();
+        boolean ok = sink.write(MULTITOUCH, data);
+        double sinkMs = (System.nanoTime() - sinkStartNs) / 1_000_000.0;
+        long e2eMs = SystemClock.uptimeMillis() - eventTimeMs;
+        // direct=false means the write fell back to the vm_input JSON-RPC IPC path (~40ms) instead
+        // of the direct unix socket (<1ms) - i.e. the UI couldn't reach the daemon's UI input socket.
+        boolean direct = sink instanceof DirectInputSink && ((DirectInputSink) sink).wasLastWriteDirect();
+        Log.d(TAG, fmt("touch latency: sink=%.2fms e2e=%dms direct=%b delivered=%b",
+            sinkMs, e2eMs, direct, ok));
+    }
+
+    /**
+     * Forwards a hardware/virtual key by Android key code.
+     *
+     * @return true if the key code is mapped, false otherwise.
+     */
+    public boolean sendKeyEvent(int keyCode, boolean pressed) {
+        int base = KeyCodeMapper.shiftSynthBase(keyCode);
+        if (base != -1) {
+            int baseScan = KeyCodeMapper.androidToEvdev(base);
+            if (baseScan == -1) return false;
+            if (pressed) {
+                sendRawKeyEvent(KeyCodeMapper.KEY_LEFTSHIFT, true);
+                sendRawKeyEvent(baseScan, true);
+            } else {
+                sendRawKeyEvent(baseScan, false);
+                sendRawKeyEvent(KeyCodeMapper.KEY_LEFTSHIFT, false);
+            }
+            return true;
+        }
+        int scanCode = KeyCodeMapper.androidToEvdev(keyCode);
+        if (scanCode == -1) return false;
+        sendRawKeyEvent(scanCode, pressed);
+        return true;
+    }
+
+    /** Sends a raw Linux evdev KEY_* scan code. */
+    public void sendRawKeyEvent(int scanCode, boolean pressed) {
+        submit("sendRawKeyEvent", () -> {
+            byte[] data;
+            try {
+                data = EvdevEncoder.encodeKey((short) scanCode, pressed);
+            } catch (Exception e) {
+                Log.e(TAG, "encode key failed", e);
+                return;
+            }
+            boolean ok = sink.write(KEYBOARD, data);
+            Log.d(TAG, fmt("key scan=%d down=%b delivered=%b", scanCode, pressed, ok));
+        });
+    }
+
+    /** Shuts down the worker. Sockets are owned by the root process, not closed here. */
+    public void close() {
+        worker.shutdownNow();
+        var frame = pendingMove.getAndSet(null);
+        if (frame != null) frame.event.recycle();
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/display/nativedisplay/input/KeyCodeMapper.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/nativedisplay/input/KeyCodeMapper.java
new file mode 100644
index 000000000..644eaf138
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/nativedisplay/input/KeyCodeMapper.java
@@ -0,0 +1,152 @@
+package cn.classfun.droidvm.ui.vm.display.nativedisplay.input;
+
+import android.view.KeyEvent;
+
+import java.util.HashMap;
+import java.util.Map;
+
+/**
+ * Maps Android {@link KeyEvent} codes to Linux evdev scan codes (KEY_*).
+ */
+public final class KeyCodeMapper {
+    // Linux evdev KEY_* codes (from linux/input-event-codes.h)
+    public static final int KEY_ESC = 1;
+    public static final int KEY_1 = 2, KEY_2 = 3, KEY_3 = 4, KEY_4 = 5, KEY_5 = 6;
+    public static final int KEY_6 = 7, KEY_7 = 8, KEY_8 = 9, KEY_9 = 10, KEY_0 = 11;
+    public static final int KEY_MINUS = 12, KEY_EQUAL = 13, KEY_BACKSPACE = 14, KEY_TAB = 15;
+    public static final int KEY_Q = 16, KEY_W = 17, KEY_E = 18, KEY_R = 19, KEY_T = 20;
+    public static final int KEY_Y = 21, KEY_U = 22, KEY_I = 23, KEY_O = 24, KEY_P = 25;
+    public static final int KEY_LEFTBRACE = 26, KEY_RIGHTBRACE = 27, KEY_ENTER = 28;
+    public static final int KEY_LEFTCTRL = 29;
+    public static final int KEY_A = 30, KEY_S = 31, KEY_D = 32, KEY_F = 33, KEY_G = 34;
+    public static final int KEY_H = 35, KEY_J = 36, KEY_K = 37, KEY_L = 38;
+    public static final int KEY_SEMICOLON = 39, KEY_APOSTROPHE = 40, KEY_GRAVE = 41;
+    public static final int KEY_LEFTSHIFT = 42, KEY_BACKSLASH = 43;
+    public static final int KEY_Z = 44, KEY_X = 45, KEY_C = 46, KEY_V = 47, KEY_B = 48;
+    public static final int KEY_N = 49, KEY_M = 50;
+    public static final int KEY_COMMA = 51, KEY_DOT = 52, KEY_SLASH = 53, KEY_RIGHTSHIFT = 54;
+    public static final int KEY_KPASTERISK = 55, KEY_LEFTALT = 56, KEY_SPACE = 57, KEY_CAPSLOCK = 58;
+    public static final int KEY_F1 = 59, KEY_F2 = 60, KEY_F3 = 61, KEY_F4 = 62, KEY_F5 = 63;
+    public static final int KEY_F6 = 64, KEY_F7 = 65, KEY_F8 = 66, KEY_F9 = 67, KEY_F10 = 68;
+    public static final int KEY_NUMLOCK = 69, KEY_SCROLLLOCK = 70;
+    public static final int KEY_KP7 = 71, KEY_KP8 = 72, KEY_KP9 = 73, KEY_KPMINUS = 74;
+    public static final int KEY_KP4 = 75, KEY_KP5 = 76, KEY_KP6 = 77, KEY_KPPLUS = 78;
+    public static final int KEY_KP1 = 79, KEY_KP2 = 80, KEY_KP3 = 81, KEY_KP0 = 82, KEY_KPDOT = 83;
+    public static final int KEY_F11 = 87, KEY_F12 = 88, KEY_KPENTER = 96, KEY_RIGHTCTRL = 97;
+    public static final int KEY_KPSLASH = 98, KEY_SYSRQ = 99, KEY_RIGHTALT = 100;
+    public static final int KEY_HOME = 102, KEY_UP = 103, KEY_PAGEUP = 104, KEY_LEFT = 105;
+    public static final int KEY_RIGHT = 106, KEY_END = 107, KEY_DOWN = 108, KEY_PAGEDOWN = 109;
+    public static final int KEY_INSERT = 110, KEY_DELETE = 111, KEY_PAUSE = 119;
+    public static final int KEY_KPEQUAL = 117, KEY_LEFTMETA = 125, KEY_RIGHTMETA = 126;
+
+    private static final Map<Integer, Integer> KEYCODE_MAP = new HashMap<>();
+
+    static {
+        // Letters
+        put(KeyEvent.KEYCODE_A, KEY_A); put(KeyEvent.KEYCODE_B, KEY_B);
+        put(KeyEvent.KEYCODE_C, KEY_C); put(KeyEvent.KEYCODE_D, KEY_D);
+        put(KeyEvent.KEYCODE_E, KEY_E); put(KeyEvent.KEYCODE_F, KEY_F);
+        put(KeyEvent.KEYCODE_G, KEY_G); put(KeyEvent.KEYCODE_H, KEY_H);
+        put(KeyEvent.KEYCODE_I, KEY_I); put(KeyEvent.KEYCODE_J, KEY_J);
+        put(KeyEvent.KEYCODE_K, KEY_K); put(KeyEvent.KEYCODE_L, KEY_L);
+        put(KeyEvent.KEYCODE_M, KEY_M); put(KeyEvent.KEYCODE_N, KEY_N);
+        put(KeyEvent.KEYCODE_O, KEY_O); put(KeyEvent.KEYCODE_P, KEY_P);
+        put(KeyEvent.KEYCODE_Q, KEY_Q); put(KeyEvent.KEYCODE_R, KEY_R);
+        put(KeyEvent.KEYCODE_S, KEY_S); put(KeyEvent.KEYCODE_T, KEY_T);
+        put(KeyEvent.KEYCODE_U, KEY_U); put(KeyEvent.KEYCODE_V, KEY_V);
+        put(KeyEvent.KEYCODE_W, KEY_W); put(KeyEvent.KEYCODE_X, KEY_X);
+        put(KeyEvent.KEYCODE_Y, KEY_Y); put(KeyEvent.KEYCODE_Z, KEY_Z);
+        // Numbers
+        put(KeyEvent.KEYCODE_0, KEY_0); put(KeyEvent.KEYCODE_1, KEY_1);
+        put(KeyEvent.KEYCODE_2, KEY_2); put(KeyEvent.KEYCODE_3, KEY_3);
+        put(KeyEvent.KEYCODE_4, KEY_4); put(KeyEvent.KEYCODE_5, KEY_5);
+        put(KeyEvent.KEYCODE_6, KEY_6); put(KeyEvent.KEYCODE_7, KEY_7);
+        put(KeyEvent.KEYCODE_8, KEY_8); put(KeyEvent.KEYCODE_9, KEY_9);
+        // Function keys
+        put(KeyEvent.KEYCODE_F1, KEY_F1); put(KeyEvent.KEYCODE_F2, KEY_F2);
+        put(KeyEvent.KEYCODE_F3, KEY_F3); put(KeyEvent.KEYCODE_F4, KEY_F4);
+        put(KeyEvent.KEYCODE_F5, KEY_F5); put(KeyEvent.KEYCODE_F6, KEY_F6);
+        put(KeyEvent.KEYCODE_F7, KEY_F7); put(KeyEvent.KEYCODE_F8, KEY_F8);
+        put(KeyEvent.KEYCODE_F9, KEY_F9); put(KeyEvent.KEYCODE_F10, KEY_F10);
+        put(KeyEvent.KEYCODE_F11, KEY_F11); put(KeyEvent.KEYCODE_F12, KEY_F12);
+        // Modifiers
+        put(KeyEvent.KEYCODE_SHIFT_LEFT, KEY_LEFTSHIFT);
+        put(KeyEvent.KEYCODE_SHIFT_RIGHT, KEY_RIGHTSHIFT);
+        put(KeyEvent.KEYCODE_CTRL_LEFT, KEY_LEFTCTRL);
+        put(KeyEvent.KEYCODE_CTRL_RIGHT, KEY_RIGHTCTRL);
+        put(KeyEvent.KEYCODE_ALT_LEFT, KEY_LEFTALT);
+        put(KeyEvent.KEYCODE_ALT_RIGHT, KEY_RIGHTALT);
+        put(KeyEvent.KEYCODE_META_LEFT, KEY_LEFTMETA);
+        put(KeyEvent.KEYCODE_META_RIGHT, KEY_RIGHTMETA);
+        // Special keys
+        put(KeyEvent.KEYCODE_ENTER, KEY_ENTER); put(KeyEvent.KEYCODE_TAB, KEY_TAB);
+        put(KeyEvent.KEYCODE_SPACE, KEY_SPACE); put(KeyEvent.KEYCODE_DEL, KEY_BACKSPACE);
+        put(KeyEvent.KEYCODE_ESCAPE, KEY_ESC); put(KeyEvent.KEYCODE_FORWARD_DEL, KEY_DELETE);
+        // Navigation
+        put(KeyEvent.KEYCODE_DPAD_UP, KEY_UP); put(KeyEvent.KEYCODE_DPAD_DOWN, KEY_DOWN);
+        put(KeyEvent.KEYCODE_DPAD_LEFT, KEY_LEFT); put(KeyEvent.KEYCODE_DPAD_RIGHT, KEY_RIGHT);
+        put(KeyEvent.KEYCODE_PAGE_UP, KEY_PAGEUP); put(KeyEvent.KEYCODE_PAGE_DOWN, KEY_PAGEDOWN);
+        put(KeyEvent.KEYCODE_MOVE_HOME, KEY_HOME); put(KeyEvent.KEYCODE_MOVE_END, KEY_END);
+        put(KeyEvent.KEYCODE_INSERT, KEY_INSERT);
+        // Punctuation
+        put(KeyEvent.KEYCODE_MINUS, KEY_MINUS); put(KeyEvent.KEYCODE_EQUALS, KEY_EQUAL);
+        put(KeyEvent.KEYCODE_LEFT_BRACKET, KEY_LEFTBRACE);
+        put(KeyEvent.KEYCODE_RIGHT_BRACKET, KEY_RIGHTBRACE);
+        put(KeyEvent.KEYCODE_BACKSLASH, KEY_BACKSLASH);
+        put(KeyEvent.KEYCODE_SEMICOLON, KEY_SEMICOLON);
+        put(KeyEvent.KEYCODE_APOSTROPHE, KEY_APOSTROPHE);
+        put(KeyEvent.KEYCODE_GRAVE, KEY_GRAVE); put(KeyEvent.KEYCODE_COMMA, KEY_COMMA);
+        put(KeyEvent.KEYCODE_PERIOD, KEY_DOT); put(KeyEvent.KEYCODE_SLASH, KEY_SLASH);
+        // Numpad
+        put(KeyEvent.KEYCODE_NUMPAD_0, KEY_KP0); put(KeyEvent.KEYCODE_NUMPAD_1, KEY_KP1);
+        put(KeyEvent.KEYCODE_NUMPAD_2, KEY_KP2); put(KeyEvent.KEYCODE_NUMPAD_3, KEY_KP3);
+        put(KeyEvent.KEYCODE_NUMPAD_4, KEY_KP4); put(KeyEvent.KEYCODE_NUMPAD_5, KEY_KP5);
+        put(KeyEvent.KEYCODE_NUMPAD_6, KEY_KP6); put(KeyEvent.KEYCODE_NUMPAD_7, KEY_KP7);
+        put(KeyEvent.KEYCODE_NUMPAD_8, KEY_KP8); put(KeyEvent.KEYCODE_NUMPAD_9, KEY_KP9);
+        put(KeyEvent.KEYCODE_NUMPAD_DIVIDE, KEY_KPSLASH);
+        put(KeyEvent.KEYCODE_NUMPAD_MULTIPLY, KEY_KPASTERISK);
+        put(KeyEvent.KEYCODE_NUMPAD_SUBTRACT, KEY_KPMINUS);
+        put(KeyEvent.KEYCODE_NUMPAD_ADD, KEY_KPPLUS);
+        put(KeyEvent.KEYCODE_NUMPAD_DOT, KEY_KPDOT);
+        put(KeyEvent.KEYCODE_NUMPAD_ENTER, KEY_KPENTER);
+        put(KeyEvent.KEYCODE_NUMPAD_EQUALS, KEY_KPEQUAL);
+        put(KeyEvent.KEYCODE_NUM_LOCK, KEY_NUMLOCK);
+        // Other
+        put(KeyEvent.KEYCODE_CAPS_LOCK, KEY_CAPSLOCK);
+        put(KeyEvent.KEYCODE_SCROLL_LOCK, KEY_SCROLLLOCK);
+        put(KeyEvent.KEYCODE_BREAK, KEY_PAUSE);
+        put(KeyEvent.KEYCODE_SYSRQ, KEY_SYSRQ);
+    }
+
+    private KeyCodeMapper() {
+    }
+
+    private static void put(int androidKey, int evdev) {
+        KEYCODE_MAP.put(androidKey, evdev);
+    }
+
+    /** Linux evdev KEY_* for an Android key code, or -1 if unmapped. */
+    public static int androidToEvdev(int keyCode) {
+        Integer v = KEYCODE_MAP.get(keyCode);
+        return v == null ? -1 : v;
+    }
+
+    /**
+     * Some Android keys need Shift synthesized (e.g. {@code @} = Shift+2). Returns the base Android
+     * key code to hold with Shift, or -1 if no synthesis is needed.
+     */
+    public static int shiftSynthBase(int keyCode) {
+        switch (keyCode) {
+            case KeyEvent.KEYCODE_AT:
+                return KeyEvent.KEYCODE_2;     // @
+            case KeyEvent.KEYCODE_POUND:
+                return KeyEvent.KEYCODE_3;     // #
+            case KeyEvent.KEYCODE_STAR:
+                return KeyEvent.KEYCODE_8;     // *
+            case KeyEvent.KEYCODE_PLUS:
+                return KeyEvent.KEYCODE_EQUALS; // +
+            default:
+                return -1;
+        }
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/display/nativedisplay/input/NativeExtraKeysPanel.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/nativedisplay/input/NativeExtraKeysPanel.java
new file mode 100644
index 000000000..3cbe10f8b
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/nativedisplay/input/NativeExtraKeysPanel.java
@@ -0,0 +1,57 @@
+package cn.classfun.droidvm.ui.vm.display.nativedisplay.input;
+
+import static android.view.KeyEvent.KEYCODE_CAPS_LOCK;
+import static android.view.KeyEvent.KEYCODE_MINUS;
+import static android.view.KeyEvent.KEYCODE_SLASH;
+
+import androidx.annotation.NonNull;
+import androidx.annotation.Nullable;
+
+import cn.classfun.droidvm.ui.vm.display.base.BaseExtraKeysAdapter;
+import cn.classfun.droidvm.ui.vm.display.base.DisplayExtraKeysPanel;
+
+/**
+ * Adapts the shared {@link DisplayExtraKeysPanel} to the native backend, emitting evdev key events
+ * through {@link InputForwarder}. The sticky-modifier handling lives in {@link BaseExtraKeysAdapter};
+ * only the emit/ready hooks and the repeat/caps key mapping are backend-specific.
+ */
+public final class NativeExtraKeysPanel extends BaseExtraKeysAdapter {
+    @Nullable
+    private InputForwarder forwarder;
+
+    public NativeExtraKeysPanel(@NonNull DisplayExtraKeysPanel panel) {
+        super(panel);
+    }
+
+    public void setForwarder(@Nullable InputForwarder forwarder) {
+        this.forwarder = forwarder;
+    }
+
+    @Override
+    protected void emitKey(int androidKeyCode, boolean down) {
+        if (forwarder != null) forwarder.sendKeyEvent(androidKeyCode, down);
+    }
+
+    @Override
+    protected boolean isReady() {
+        return forwarder != null;
+    }
+
+    @Override
+    public void onKeyRepeat(int androidKeyCode) {
+        tapKey(androidKeyCode);
+    }
+
+    @Override
+    public void onCharRepeat(char ch) {
+        if (ch == '/') tapKey(KEYCODE_SLASH);
+        else if (ch == '-') tapKey(KEYCODE_MINUS);
+    }
+
+    @Override
+    public void onCapsToggle(boolean active) {
+        if (!isReady()) return;
+        emitKey(KEYCODE_CAPS_LOCK, true);
+        emitKey(KEYCODE_CAPS_LOCK, false);
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/display/nativedisplay/input/NativeKeyboardEditText.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/nativedisplay/input/NativeKeyboardEditText.java
new file mode 100644
index 000000000..d7ef0de4e
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/nativedisplay/input/NativeKeyboardEditText.java
@@ -0,0 +1,70 @@
+package cn.classfun.droidvm.ui.vm.display.nativedisplay.input;
+
+import android.content.Context;
+import android.text.InputType;
+import android.util.AttributeSet;
+import android.view.inputmethod.BaseInputConnection;
+import android.view.inputmethod.EditorInfo;
+import android.view.inputmethod.InputConnection;
+
+import androidx.annotation.NonNull;
+import androidx.annotation.Nullable;
+import androidx.appcompat.widget.AppCompatEditText;
+
+/**
+ * Invisible EditText whose only job is to host the IME for the native display. A SurfaceView is an
+ * unreliable soft-keyboard target on some ROMs (showSoftInput is silently ignored), so keyboard
+ * focus and input are delegated to this real editor instead.
+ *
+ * It uses {@code TYPE_NULL} so IMEs send raw key events (routed to the Activity's dispatchKeyEvent)
+ * while keyboards that commit text report it through the listener. No text accumulates in the field.
+ */
+public final class NativeKeyboardEditText extends AppCompatEditText {
+    public interface TextInputListener {
+        void onCommitText(@NonNull CharSequence text);
+
+        void onDeleteSurrounding(int beforeLength, int afterLength);
+    }
+
+    @Nullable
+    private TextInputListener textInputListener;
+
+    public NativeKeyboardEditText(@NonNull Context context) {
+        super(context);
+    }
+
+    public NativeKeyboardEditText(@NonNull Context context, @Nullable AttributeSet attrs) {
+        super(context, attrs);
+    }
+
+    public NativeKeyboardEditText(@NonNull Context context, @Nullable AttributeSet attrs,
+                                  int defStyleAttr) {
+        super(context, attrs, defStyleAttr);
+    }
+
+    public void setTextInputListener(@Nullable TextInputListener listener) {
+        this.textInputListener = listener;
+    }
+
+    @NonNull
+    @Override
+    public InputConnection onCreateInputConnection(@NonNull EditorInfo outAttrs) {
+        outAttrs.inputType = InputType.TYPE_NULL;
+        outAttrs.imeOptions = EditorInfo.IME_FLAG_NO_FULLSCREEN | EditorInfo.IME_FLAG_NO_EXTRACT_UI;
+        return new BaseInputConnection(this, false) {
+            @Override
+            public boolean commitText(CharSequence text, int newCursorPosition) {
+                if (text != null && textInputListener != null)
+                    textInputListener.onCommitText(text);
+                return true;
+            }
+
+            @Override
+            public boolean deleteSurroundingText(int beforeLength, int afterLength) {
+                if (textInputListener != null)
+                    textInputListener.onDeleteSurrounding(beforeLength, afterLength);
+                return true;
+            }
+        };
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/display/nativedisplay/input/TouchScaleCalculator.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/nativedisplay/input/TouchScaleCalculator.java
new file mode 100644
index 000000000..85a91bc43
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/nativedisplay/input/TouchScaleCalculator.java
@@ -0,0 +1,31 @@
+package cn.classfun.droidvm.ui.vm.display.nativedisplay.input;
+
+/**
+ * Computes per-axis touch scale from view size to guest resolution. The touch listener is attached
+ * to the SurfaceView, which is itself sized to the guest aspect ratio (see
+ * {@code VMNativeDisplayActivity#updateAspectRatio}), so its bounds carry no letterbox/pillarbox
+ * bars: there is no offset and scale is simply guest/view per axis.
+ */
+public final class TouchScaleCalculator {
+    private TouchScaleCalculator() {
+    }
+
+    public static final class TouchTransform {
+        public final float scaleX;
+        public final float scaleY;
+
+        TouchTransform(float scaleX, float scaleY) {
+            this.scaleX = scaleX;
+            this.scaleY = scaleY;
+        }
+    }
+
+    public static TouchTransform compute(int guestWidth, int guestHeight,
+                                         int viewWidth, int viewHeight) {
+        if (viewWidth <= 0 || viewHeight <= 0 || guestWidth <= 0 || guestHeight <= 0) {
+            return new TouchTransform(1f, 1f);
+        }
+        return new TouchTransform((float) guestWidth / viewWidth,
+            (float) guestHeight / viewHeight);
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/display/vnc/input/VncExtraKeysPanel.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/vnc/input/VncExtraKeysPanel.java
index 53f9f63ab..0f2c440dd 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/display/vnc/input/VncExtraKeysPanel.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/vnc/input/VncExtraKeysPanel.java
@@ -1,26 +1,26 @@
 package cn.classfun.droidvm.ui.vm.display.vnc.input;
 
-import static android.view.KeyEvent.*;
+import static android.view.KeyEvent.KEYCODE_CAPS_LOCK;
 import static cn.classfun.droidvm.ui.vm.display.base.X11Keymap.androidKeyToXKeysym;
 
 import androidx.annotation.NonNull;
 import androidx.annotation.Nullable;
 
+import cn.classfun.droidvm.ui.vm.display.base.BaseExtraKeysAdapter;
 import cn.classfun.droidvm.ui.vm.display.base.DisplayExtraKeysPanel;
-import cn.classfun.droidvm.ui.vm.display.base.KeyListener;
 import cn.classfun.droidvm.ui.vm.display.vnc.base.VncClient;
 
-public final class VncExtraKeysPanel implements KeyListener {
+/**
+ * Adapts the shared {@link DisplayExtraKeysPanel} to a VNC backend, emitting X keysyms through
+ * {@link VncClient}. The sticky-modifier handling lives in {@link BaseExtraKeysAdapter}; only the
+ * emit/ready hooks and the keysym-level send helpers are backend-specific.
+ */
+public final class VncExtraKeysPanel extends BaseExtraKeysAdapter {
     @Nullable
     private VncClient vncClient;
-    @NonNull
-    private final DisplayExtraKeysPanel panel;
-
-    private boolean ctrlSticky, altSticky, shiftSticky, winSticky;
 
     public VncExtraKeysPanel(@NonNull DisplayExtraKeysPanel panel) {
-        this.panel = panel;
-        panel.setKeyListener(this);
+        super(panel);
     }
 
     public void setVncClient(@Nullable VncClient client) {
@@ -33,34 +33,18 @@ public DisplayExtraKeysPanel getPanel() {
         return panel;
     }
 
-    public boolean hasNonStickyModifiers() {
-        return (panel.isCtrlDown() && !ctrlSticky)
-            || (panel.isAltDown() && !altSticky)
-            || (panel.isShiftDown() && !shiftSticky)
-            || (panel.isWinDown() && !winSticky);
+    @Override
+    protected void emitKey(int androidKeyCode, boolean down) {
+        if (vncClient != null) vncClient.sendKey(androidKeyToXKeysym(androidKeyCode), down);
     }
 
-    public void applyModifiers(boolean down) {
-        if (vncClient == null || !vncClient.isConnected()) return;
-        if (panel.isCtrlDown() && !ctrlSticky)
-            vncClient.sendKey(androidKeyToXKeysym(KEYCODE_CTRL_LEFT), down);
-        if (panel.isAltDown() && !altSticky)
-            vncClient.sendKey(androidKeyToXKeysym(KEYCODE_ALT_LEFT), down);
-        if (panel.isShiftDown() && !shiftSticky)
-            vncClient.sendKey(androidKeyToXKeysym(KEYCODE_SHIFT_LEFT), down);
-        if (panel.isWinDown() && !winSticky)
-            vncClient.sendKey(androidKeyToXKeysym(KEYCODE_META_LEFT), down);
-        if (!down) {
-            if (!ctrlSticky) panel.setCtrlDown(false);
-            if (!altSticky) panel.setAltDown(false);
-            if (!shiftSticky) panel.setShiftDown(false);
-            if (!winSticky) panel.setWinDown(false);
-            panel.updateToggleButtons();
-        }
+    @Override
+    protected boolean isReady() {
+        return vncClient != null && vncClient.isConnected();
     }
 
     public void sendKeysym(int keysym) {
-        if (vncClient == null || !vncClient.isConnected() || keysym == 0) return;
+        if (!isReady() || keysym == 0) return;
         applyModifiers(true);
         vncClient.sendKey(keysym, true);
         vncClient.sendKey(keysym, false);
@@ -85,69 +69,8 @@ public void onCharRepeat(char ch) {
         sendChar(ch);
     }
 
-
     @Override
     public void onCapsToggle(boolean active) {
         sendKey(KEYCODE_CAPS_LOCK);
     }
-
-    @Override
-    public void onModifierClick(int androidKeyCode) {
-        if (getSticky(androidKeyCode)) {
-            setSticky(androidKeyCode, false);
-            setDown(androidKeyCode, false);
-            if (vncClient != null && vncClient.isConnected())
-                vncClient.sendKey(androidKeyToXKeysym(androidKeyCode), false);
-        } else {
-            setDown(androidKeyCode, !getDown(androidKeyCode));
-        }
-        panel.updateToggleButtons();
-    }
-
-    @Override
-    public void onModifierLongClick(int androidKeyCode) {
-        setDown(androidKeyCode, true);
-        setSticky(androidKeyCode, true);
-        if (vncClient != null && vncClient.isConnected())
-            vncClient.sendKey(androidKeyToXKeysym(androidKeyCode), true);
-        panel.updateToggleButtons();
-    }
-
-    private boolean getDown(int keyCode) {
-        switch (keyCode) {
-            case KEYCODE_CTRL_LEFT: return panel.isCtrlDown();
-            case KEYCODE_ALT_LEFT: return panel.isAltDown();
-            case KEYCODE_SHIFT_LEFT: return panel.isShiftDown();
-            case KEYCODE_META_LEFT: return panel.isWinDown();
-            default: return false;
-        }
-    }
-
-    private void setDown(int keyCode, boolean value) {
-        switch (keyCode) {
-            case KEYCODE_CTRL_LEFT: panel.setCtrlDown(value); break;
-            case KEYCODE_ALT_LEFT: panel.setAltDown(value); break;
-            case KEYCODE_SHIFT_LEFT: panel.setShiftDown(value); break;
-            case KEYCODE_META_LEFT: panel.setWinDown(value); break;
-        }
-    }
-
-    private boolean getSticky(int keyCode) {
-        switch (keyCode) {
-            case KEYCODE_CTRL_LEFT: return ctrlSticky;
-            case KEYCODE_ALT_LEFT: return altSticky;
-            case KEYCODE_SHIFT_LEFT: return shiftSticky;
-            case KEYCODE_META_LEFT: return winSticky;
-            default: return false;
-        }
-    }
-
-    private void setSticky(int keyCode, boolean value) {
-        switch (keyCode) {
-            case KEYCODE_CTRL_LEFT: ctrlSticky = value; break;
-            case KEYCODE_ALT_LEFT: altSticky = value; break;
-            case KEYCODE_SHIFT_LEFT: shiftSticky = value; break;
-            case KEYCODE_META_LEFT: winSticky = value; break;
-        }
-    }
 }
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/graphics/VMEditGraphicsTab.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/graphics/VMEditGraphicsTab.java
index 19b9ca147..579c4caa4 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/graphics/VMEditGraphicsTab.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/graphics/VMEditGraphicsTab.java
@@ -38,6 +38,7 @@ public final class VMEditGraphicsTab extends VMEditBaseTab {
     private SwitchRowWidget swVncEnabled;
     private SwitchRowWidget swVncPasswordAuth;
     private SwitchRowWidget swDisplayEnabled;
+    private SwitchRowWidget swNativeDisplayEnabled;
     private ChooseRowWidget chooseGpuBackend;
     private ChooseRowWidget chooseGpuApi;
     private ChooseRowWidget chooseDisplayBackend;
@@ -63,6 +64,7 @@ public void initView() {
         chooseGpuApi = view.findViewById(R.id.choose_gpu_api);
         gpuOptions = view.findViewById(R.id.gpu_options);
         swDisplayEnabled = view.findViewById(R.id.sw_display_enabled);
+        swNativeDisplayEnabled = view.findViewById(R.id.sw_native_display_enabled);
         chooseDisplayBackend = view.findViewById(R.id.choose_display_backend);
         displayOptions = view.findViewById(R.id.display_options);
         etDisplayWidth = view.findViewById(R.id.et_display_width);
@@ -114,6 +116,7 @@ public void loadConfig(@NonNull VMConfig config) {
         var item = config.item;
         swGpuEnabled.setChecked(item.optBoolean("gpu_enabled", false));
         swDisplayEnabled.setChecked(item.optBoolean("display_enabled", false));
+        swNativeDisplayEnabled.setChecked(item.optBoolean("native_display_enabled", false));
         etDisplayWidth.setText(String.valueOf(item.optLong("display_width", 1280)));
         etDisplayHeight.setText(String.valueOf(item.optLong("display_height", 720)));
         etDisplayRefreshRate.setText(String.valueOf(item.optLong("display_refresh_rate", 60)));
@@ -189,6 +192,10 @@ public void saveConfig(@NonNull VMConfig config) {
         if (displayEnabled) {
             DisplayBackend displayBackend = chooseDisplayBackend.getSelectedItem();
             item.set("display_backend", displayBackend);
+            // Native display only applies to virtio-gpu + GPU enabled.
+            item.set("native_display_enabled", gpuEnabled
+                && displayBackend == DisplayBackend.VIRTIO_GPU
+                && swNativeDisplayEnabled.isChecked());
             item.set("display_width", parseInt(getEditText(etDisplayWidth)));
             item.set("display_height", parseInt(getEditText(etDisplayHeight)));
             item.set("display_refresh_rate", parseInt(getEditText(etDisplayRefreshRate)));
@@ -214,6 +221,7 @@ private void updateGpuVisibility() {
             if (chooseDisplayBackend.getSelectedItem() == DisplayBackend.VIRTIO_GPU)
                 chooseDisplayBackend.setSelectedItem(SIMPLEFB);
         }
+        updateNativeDisplayVisibility();
     }
 
     private void updateDisplayVisibility() {
@@ -223,6 +231,15 @@ private void updateDisplayVisibility() {
     private void updateDisplayDpiVisibility() {
         var backend = chooseDisplayBackend.getSelectedItem();
         displayDpiOptions.setVisibility(backend != SIMPLEFB ? VISIBLE : GONE);
+        updateNativeDisplayVisibility();
+    }
+
+    private void updateNativeDisplayVisibility() {
+        // Native display rides on virtio-gpu (gfxstream) only.
+        boolean ok = swGpuEnabled.isChecked()
+            && chooseDisplayBackend.getSelectedItem() == DisplayBackend.VIRTIO_GPU;
+        swNativeDisplayEnabled.setVisibility(ok ? VISIBLE : GONE);
+        if (!ok) swNativeDisplayEnabled.setChecked(false);
     }
 
     private void updateVncVisibility() {
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/info/ConsoleButton.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/info/ConsoleButton.java
index bae99ad68..14f46022a 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/info/ConsoleButton.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/info/ConsoleButton.java
@@ -24,6 +24,7 @@
 import cn.classfun.droidvm.lib.store.vm.VMState;
 import cn.classfun.droidvm.lib.ui.IconItemAdapter;
 import cn.classfun.droidvm.ui.vm.console.VMConsoleActivity;
+import cn.classfun.droidvm.ui.vm.display.nativedisplay.display.VMNativeDisplayActivity;
 import cn.classfun.droidvm.ui.vm.display.vnc.base.BaseVncActivity;
 import cn.classfun.droidvm.ui.vm.display.vnc.display.VMVncDisplayActivity;
 import cn.classfun.droidvm.ui.vm.display.vnc.display.VMVncPresentationActivity;
@@ -53,6 +54,11 @@ void showConsoleChooser() {
     }
 
     void openDefaultConsole() {
+        if (parent.config != null
+            && parent.config.item.optBoolean("native_display_enabled", false)) {
+            openNativeDisplay();
+            return;
+        }
         if (parent.config != null && parent.config.item.optBoolean("vnc_enabled", false)) {
             openVncDisplay();
             return;
@@ -96,6 +102,12 @@ private void buildConsoleChooserDialog(@Nullable JSONArray streams) {
         var running = parent.currentState != VMState.STOPPED;
         var cfg = parent.config == null ? DataItem.newObject() : parent.config.item;
         var hasVnc = running && cfg.optBoolean("vnc_enabled", false);
+        var hasNative = running && cfg.optBoolean("native_display_enabled", false);
+        if (hasNative) {
+            names.add("native");
+            titles.add(parent.getString(R.string.vm_info_console_native_select));
+            icons.add(R.drawable.ic_monitor);
+        }
         if (hasVnc) {
             names.add("vnc");
             titles.add(parent.getString(R.string.vm_info_console_vnc_select));
@@ -108,14 +120,16 @@ private void buildConsoleChooserDialog(@Nullable JSONArray streams) {
             Toast.makeText(parent, R.string.vm_info_console_not_found, LENGTH_SHORT).show();
             return;
         }
-        if (names.size() == 1 && !hasVnc) {
+        if (names.size() == 1 && !hasVnc && !hasNative) {
             openConsole(names.get(0));
             return;
         }
         var adapter = IconItemAdapter.create(parent, titles, icons);
         DialogInterface.OnClickListener callback = (dialog, which) -> {
             var selected = names.get(which);
-            if (selected.equals("vnc")) {
+            if (selected.equals("native")) {
+                openNativeDisplay();
+            } else if (selected.equals("vnc")) {
                 openVncDisplay();
             } else if (selected.equals("vnc-ext")) {
                 openVncExtDisplay();
@@ -138,6 +152,17 @@ private void openConsole(@NonNull String stream) {
         parent.startActivity(intent);
     }
 
+    private void openNativeDisplay() {
+        if (parent.config == null) return;
+        var item = parent.config.item;
+        var intent = new Intent(parent, VMNativeDisplayActivity.class);
+        intent.putExtra(VMNativeDisplayActivity.EXTRA_VM_ID, parent.vmId.toString());
+        intent.putExtra(VMNativeDisplayActivity.EXTRA_VM_NAME, parent.config.getName());
+        intent.putExtra(VMNativeDisplayActivity.EXTRA_WIDTH, item.optLong("display_width", 1280));
+        intent.putExtra(VMNativeDisplayActivity.EXTRA_HEIGHT, item.optLong("display_height", 720));
+        parent.startActivity(intent);
+    }
+
     private void openVncDisplay() {
         if (parent.config == null) return;
         var intent = new Intent(parent, VMVncDisplayActivity.class);
diff --git a/app/src/main/res/layout/activity_vm_native_display.xml b/app/src/main/res/layout/activity_vm_native_display.xml
new file mode 100644
index 000000000..46f492380
--- /dev/null
+++ b/app/src/main/res/layout/activity_vm_native_display.xml
@@ -0,0 +1,144 @@
+<?xml version="1.0" encoding="utf-8"?>
+<LinearLayout xmlns:android="http://schemas.android.com/apk/res/android"
+    xmlns:app="http://schemas.android.com/apk/res-auto"
+    xmlns:tools="http://schemas.android.com/tools"
+    android:id="@+id/main"
+    android:layout_width="match_parent"
+    android:layout_height="match_parent"
+    android:background="@color/vnc_background"
+    android:fitsSystemWindows="true"
+    android:orientation="vertical"
+    tools:context=".ui.vm.display.nativedisplay.display.VMNativeDisplayActivity">
+
+    <com.google.android.material.appbar.MaterialToolbar
+        android:id="@+id/toolbar"
+        android:layout_width="match_parent"
+        android:layout_height="?attr/actionBarSize"
+        app:navigationIcon="?attr/homeAsUpIndicator"
+        app:titleTextColor="@android:color/white" />
+
+    <LinearLayout
+        android:id="@+id/status_bar"
+        android:layout_width="match_parent"
+        android:layout_height="wrap_content"
+        android:background="@color/vnc_status_bar_background"
+        android:gravity="center_vertical"
+        android:orientation="horizontal"
+        android:paddingHorizontal="16dp"
+        android:paddingVertical="8dp">
+
+        <View
+            android:id="@+id/status_indicator"
+            android:layout_width="10dp"
+            android:layout_height="10dp"
+            android:background="@android:color/holo_orange_dark" />
+
+        <TextView
+            android:id="@+id/tv_status"
+            android:layout_width="0dp"
+            android:layout_height="wrap_content"
+            android:layout_marginStart="8dp"
+            android:layout_weight="1"
+            android:fontFamily="monospace"
+            android:text="@string/native_display_connecting"
+            android:textColor="@android:color/white"
+            android:textSize="13sp" />
+
+        <com.google.android.material.button.MaterialButton
+            android:id="@+id/btn_fullscreen"
+            style="@style/Widget.Material3.Button.IconButton"
+            android:layout_width="48dp"
+            android:layout_height="48dp"
+            android:contentDescription="@string/vnc_display_fullscreen"
+            app:icon="@drawable/ic_fullscreen"
+            app:iconTint="@android:color/white" />
+
+    </LinearLayout>
+
+    <FrameLayout
+        android:id="@+id/display_container"
+        android:layout_width="match_parent"
+        android:layout_height="0dp"
+        android:layout_weight="1"
+        android:background="@color/vnc_background"
+        android:clickable="true">
+
+        <SurfaceView
+            android:id="@+id/surface_view"
+            android:layout_width="match_parent"
+            android:layout_height="match_parent"
+            android:layout_gravity="center" />
+
+        <!-- Editor that hosts the IME; SurfaceView is an unreliable keyboard target. Kept visually
+             imperceptible (1px, transparent text/background, no cursor) rather than alpha=0, because
+             some ROMs (e.g. OPlus) refuse to show the keyboard for a fully invisible editor. -->
+        <cn.classfun.droidvm.ui.vm.display.nativedisplay.input.NativeKeyboardEditText
+            android:id="@+id/keyboard_input"
+            android:layout_width="1dp"
+            android:layout_height="1dp"
+            android:layout_gravity="bottom|start"
+            android:background="@android:color/transparent"
+            android:cursorVisible="false"
+            android:focusable="true"
+            android:focusableInTouchMode="true"
+            android:importantForAccessibility="no"
+            android:importantForAutofill="no"
+            android:inputType="text"
+            android:textColor="@android:color/transparent"
+            tools:ignore="LabelFor,TextFields" />
+
+        <LinearLayout
+            android:id="@+id/overlay_connecting"
+            android:layout_width="wrap_content"
+            android:layout_height="wrap_content"
+            android:layout_gravity="center"
+            android:gravity="center"
+            android:orientation="vertical"
+            android:padding="24dp">
+
+            <ProgressBar
+                android:id="@+id/progress_connecting"
+                android:layout_width="48dp"
+                android:layout_height="48dp"
+                android:indeterminate="true"
+                android:indeterminateTint="@android:color/white" />
+
+            <TextView
+                android:id="@+id/tv_connecting_message"
+                android:layout_width="wrap_content"
+                android:layout_height="wrap_content"
+                android:layout_marginTop="16dp"
+                android:gravity="center"
+                android:text="@string/native_display_connecting"
+                android:textColor="@android:color/white"
+                android:textSize="14sp" />
+
+        </LinearLayout>
+
+        <com.google.android.material.floatingactionbutton.FloatingActionButton
+            android:id="@+id/fab_menu"
+            android:layout_width="wrap_content"
+            android:layout_height="wrap_content"
+            android:layout_gravity="bottom|end"
+            android:layout_margin="16dp"
+            android:alpha="0.7"
+            android:contentDescription="@string/menu"
+            app:backgroundTint="@color/vnc_fab_background"
+            app:elevation="4dp"
+            app:fabCustomSize="32dp"
+            app:maxImageSize="16dp"
+            app:shapeAppearanceOverlay="@style/ShapeAppearanceOverlay.Fab.Circle"
+            app:srcCompat="@drawable/ic_more_vert"
+            app:tint="@android:color/white"
+            tools:ignore="ClassNameCheck" />
+
+    </FrameLayout>
+
+    <cn.classfun.droidvm.ui.vm.display.base.DisplayExtraKeysPanel
+        android:id="@+id/extra_keys_panel"
+        android:layout_width="match_parent"
+        android:layout_height="wrap_content"
+        android:gravity="bottom"
+        android:orientation="vertical" />
+
+</LinearLayout>
diff --git a/app/src/main/res/layout/partial_vm_edit_graphics.xml b/app/src/main/res/layout/partial_vm_edit_graphics.xml
index 7fdcb5f2d..1f66ed78d 100644
--- a/app/src/main/res/layout/partial_vm_edit_graphics.xml
+++ b/app/src/main/res/layout/partial_vm_edit_graphics.xml
@@ -69,6 +69,13 @@
                 android:icon="@drawable/ic_connection"
                 android:text="@string/create_vm_display_backend" />
 
+            <cn.classfun.droidvm.ui.widgets.row.SwitchRowWidget
+                android:id="@+id/sw_native_display_enabled"
+                android:layout_width="match_parent"
+                android:layout_height="wrap_content"
+                android:icon="@drawable/ic_monitor"
+                android:text="@string/create_vm_native_display_enabled" />
+
             <LinearLayout
                 android:layout_width="match_parent"
                 android:layout_height="wrap_content"
diff --git a/app/src/main/res/menu/menu_native_display_menu.xml b/app/src/main/res/menu/menu_native_display_menu.xml
new file mode 100644
index 000000000..b90c8afc6
--- /dev/null
+++ b/app/src/main/res/menu/menu_native_display_menu.xml
@@ -0,0 +1,19 @@
+<?xml version="1.0" encoding="utf-8"?>
+<menu xmlns:android="http://schemas.android.com/apk/res/android">
+
+    <item
+        android:id="@+id/menu_keyboard"
+        android:icon="@drawable/ic_keyboard"
+        android:title="@string/vnc_menu_keyboard" />
+
+    <item
+        android:id="@+id/menu_extra_keys"
+        android:icon="@drawable/ic_keyboard_esc"
+        android:title="@string/vnc_menu_extra_keys" />
+
+    <item
+        android:id="@+id/menu_fullscreen"
+        android:icon="@drawable/ic_fullscreen"
+        android:title="@string/vnc_menu_fullscreen" />
+
+</menu>
diff --git a/app/src/main/res/values-zh-rCN/strings.xml b/app/src/main/res/values-zh-rCN/strings.xml
index 1ba620f12..a8e61f2a0 100644
--- a/app/src/main/res/values-zh-rCN/strings.xml
+++ b/app/src/main/res/values-zh-rCN/strings.xml
@@ -132,6 +132,7 @@
     <string name="vm_info_console_not_found">找不到任何控制台</string>
     <string name="vm_info_console_text_select">文字控制台 %1$s</string>
     <string name="vm_info_console_vnc_select">VNC 控制台</string>
+    <string name="vm_info_console_native_select">原生显示</string>
     <string name="vm_info_console_vnc_ext_select">外部显示器的 VNC</string>
 
     <string name="vm_info_logs">日志</string>
@@ -204,6 +205,7 @@
     <string name="create_vm_display_dpi_v">垂直DPI</string>
     <string name="create_vm_category_vnc">VNC 服务器</string>
     <string name="create_vm_vnc_enabled">启用 VNC</string>
+    <string name="create_vm_native_display_enabled">启用原生显示 (virtio-gpu)</string>
     <string name="create_vm_vnc_host">主机地址</string>
     <string name="create_vm_vnc_port">端口</string>
     <string name="create_vm_vnc_password_auth">密码认证</string>
@@ -693,6 +695,12 @@
     <string name="vnc_display_connect_failed">无法连接到 VNC 服务器</string>
     <string name="vnc_display_fullscreen">全屏</string>
 
+    <string name="native_display_title">原生显示器</string>
+    <string name="native_display_connecting">正在连接…</string>
+    <string name="native_display_waiting">正在等待虚拟机画面…</string>
+    <string name="native_display_connected">已连接 - %1$dx%2$d</string>
+    <string name="native_display_failed">原生显示启动失败</string>
+
     <string name="vnc_menu_keyboard">软键盘</string>
     <string name="vnc_menu_extra_keys">额外按键</string>
     <string name="vnc_menu_fullscreen">全屏</string>
diff --git a/app/src/main/res/values/strings.xml b/app/src/main/res/values/strings.xml
index 67e7b2cd5..edf8d8390 100644
--- a/app/src/main/res/values/strings.xml
+++ b/app/src/main/res/values/strings.xml
@@ -135,6 +135,7 @@
     <string name="vm_info_console_text_select">Text Console %1$s</string>
     <string name="vm_info_console_vnc_select">VNC Console</string>
     <string name="vm_info_console_vnc_ext_select">VNC on external Display</string>
+    <string name="vm_info_console_native_select">Native Display</string>
 
     <string name="vm_info_logs">Logs</string>
     <string name="vm_info_logs_chooser_title">View Logs</string>
@@ -206,6 +207,7 @@
     <string name="create_vm_display_dpi_v">DPI Vertical</string>
     <string name="create_vm_category_vnc">VNC Server</string>
     <string name="create_vm_vnc_enabled">Enable VNC</string>
+    <string name="create_vm_native_display_enabled">Enable native display (virtio-gpu)</string>
     <string name="create_vm_vnc_host">Host</string>
     <string name="create_vm_vnc_port">Port</string>
     <string name="create_vm_vnc_password_auth">Password Auth</string>
@@ -732,6 +734,12 @@
     <string name="vnc_display_connect_failed">Failed to connect to VNC server</string>
     <string name="vnc_display_fullscreen">Fullscreen</string>
 
+    <string name="native_display_title">Native Display</string>
+    <string name="native_display_connecting">Connecting…</string>
+    <string name="native_display_waiting">Waiting for VM display…</string>
+    <string name="native_display_connected">Connected - %1$dx%2$d</string>
+    <string name="native_display_failed">Failed to start native display</string>
+
     <string name="vnc_menu_keyboard">Soft Keyboard</string>
     <string name="vnc_menu_extra_keys">Extra Keys</string>
     <string name="vnc_menu_fullscreen">Fullscreen</string>

From 8198c1ce7244b0dee0938c916f4753334c91cbc6 Mon Sep 17 00:00:00 2001
From: HuJK <gh@hujk.org>
Date: Fri, 26 Jun 2026 00:13:08 +0800
Subject: [PATCH 043/182] (feat) configurable swiotib

---
 .../daemon/vm/backend/QemuBackendInstance.java       |  3 ++-
 .../droidvm/ui/vm/edit/basic/VMEditBasicTab.java     |  5 +++++
 app/src/main/res/layout/partial_vm_edit_basic.xml    | 12 ++++++++++++
 app/src/main/res/values-zh-rCN/strings.xml           |  1 +
 app/src/main/res/values-zh-rTW/strings.xml           |  1 +
 app/src/main/res/values/strings.xml                  |  1 +
 6 files changed, 22 insertions(+), 1 deletion(-)

diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/QemuBackendInstance.java b/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/QemuBackendInstance.java
index ffc7f38f4..6860a19e2 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/QemuBackendInstance.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/QemuBackendInstance.java
@@ -177,8 +177,9 @@ private List<String> buildCommand() {
         switch (protectedVm) {
             case PROTECTED_PROTECTED:
             case PROTECTED_WITHOUT_FIRMWARE:
+                long swiotlbMb = Math.max(item.optLong("swiotlb_mb", 64), 1);
                 args.add("-object");
-                args.add("arm-confidential-guest,id=prot0,swiotlb-size=64M");
+                args.add(fmt("arm-confidential-guest,id=prot0,swiotlb-size=%dM", swiotlbMb));
                 break;
         }
         var boot = BootPlan.of(config);
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/basic/VMEditBasicTab.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/basic/VMEditBasicTab.java
index ead57cc5a..607daa45c 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/basic/VMEditBasicTab.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/basic/VMEditBasicTab.java
@@ -31,6 +31,7 @@ public final class VMEditBasicTab extends VMEditBaseTab {
     private TextInputRowWidget inputName;
     private TextInputRowWidget inputMemory;
     private TextInputRowWidget inputCpu;
+    private TextInputRowWidget inputSwiotlb;
     private SwitchRowWidget swBalloon;
     private SwitchRowWidget swPmu;
     private SwitchRowWidget swRng;
@@ -53,6 +54,7 @@ public void initView() {
         inputName = view.findViewById(R.id.input_name);
         inputMemory = view.findViewById(R.id.input_memory);
         inputCpu = view.findViewById(R.id.input_cpu);
+        inputSwiotlb = view.findViewById(R.id.input_swiotlb);
         swBalloon = view.findViewById(R.id.sw_balloon);
         swPmu = view.findViewById(R.id.sw_pmu);
         swRng = view.findViewById(R.id.sw_rng);
@@ -71,6 +73,7 @@ public void initView() {
     public void initValue() {
         inputMemory.setValue(512, SizeUnit.MB);
         inputCpu.setValue(1);
+        inputSwiotlb.setValue(64, SizeUnit.MB);
         chooseProtectedVm.configure(ProtectedVM.class, PROTECTED_WITHOUT_FIRMWARE);
         chooseBackend.configure(VMBackend.class, VMBackend.DEFAULT);
         chooseHypervisor.configure(VMHypervisor.class, VMHypervisor.DEFAULT);
@@ -82,6 +85,7 @@ public void loadConfig(@NonNull VMConfig config) {
         inputName.setText(config.getName());
         inputMemory.setValue(item.optLong("memory_mb", 512), SizeUnit.MB);
         inputCpu.setValue(item.optLong("cpu_count", 1));
+        inputSwiotlb.setValue(item.optLong("swiotlb_mb", 64), SizeUnit.MB);
         swBalloon.setChecked(item.optBoolean("balloon", false));
         swPmu.setChecked(item.optBoolean("pmu", false));
         swRng.setChecked(item.optBoolean("rng", false));
@@ -175,6 +179,7 @@ public void saveConfig(@NonNull VMConfig config) {
         config.setName(inputName.getText());
         item.set("memory_mb", inputMemory.getValue(SizeUnit.MB));
         item.set("cpu_count", inputCpu.getValue());
+        item.set("swiotlb_mb", inputSwiotlb.getValue(SizeUnit.MB));
         item.set("balloon", swBalloon.isChecked());
         item.set("pmu", swPmu.isChecked());
         item.set("rng", swRng.isChecked());
diff --git a/app/src/main/res/layout/partial_vm_edit_basic.xml b/app/src/main/res/layout/partial_vm_edit_basic.xml
index 139ba7162..6dc7aef43 100644
--- a/app/src/main/res/layout/partial_vm_edit_basic.xml
+++ b/app/src/main/res/layout/partial_vm_edit_basic.xml
@@ -76,6 +76,18 @@
             android:icon="@drawable/ic_shield"
             android:text="@string/create_vm_protected_vm" />
 
+        <cn.classfun.droidvm.ui.widgets.row.TextInputRowWidget
+            android:id="@+id/input_swiotlb"
+            android:layout_width="match_parent"
+            android:layout_height="wrap_content"
+            android:hint="@string/create_vm_swiotlb_hint"
+            android:icon="@drawable/ic_memory"
+            android:inputType="number"
+            app:ti_max="1GiB"
+            app:ti_min="1MiB"
+            app:ti_mode="size"
+            app:ti_precision="1MiB" />
+
         <cn.classfun.droidvm.ui.widgets.row.SwitchRowWidget
             android:id="@+id/sw_sandbox"
             android:layout_width="match_parent"
diff --git a/app/src/main/res/values-zh-rCN/strings.xml b/app/src/main/res/values-zh-rCN/strings.xml
index b8fda6ce8..c41bcdc1f 100644
--- a/app/src/main/res/values-zh-rCN/strings.xml
+++ b/app/src/main/res/values-zh-rCN/strings.xml
@@ -176,6 +176,7 @@
     <string name="create_vm_smt">SMT (同步多线程)</string>
     <string name="create_vm_usb">USB (通用串行总线)</string>
     <string name="create_vm_protected_vm">保护模式</string>
+    <string name="create_vm_swiotlb_hint">SWIOTLB 大小（保护模式）</string>
     <string name="create_vm_sandbox">沙箱</string>
     <string name="create_vm_hugepages">大页内存</string>
     <string name="create_vm_prepare_lend_mthp">预分配大页</string>
diff --git a/app/src/main/res/values-zh-rTW/strings.xml b/app/src/main/res/values-zh-rTW/strings.xml
index 7e536f825..8a6eddb06 100644
--- a/app/src/main/res/values-zh-rTW/strings.xml
+++ b/app/src/main/res/values-zh-rTW/strings.xml
@@ -176,6 +176,7 @@
     <string name="create_vm_smt">SMT (同步多執行緒)</string>
     <string name="create_vm_usb">USB (通用序列匯流排)</string>
     <string name="create_vm_protected_vm">保護模式</string>
+    <string name="create_vm_swiotlb_hint">SWIOTLB 大小（保護模式）</string>
     <string name="create_vm_sandbox">沙箱</string>
     <string name="create_vm_hugepages">大頁記憶體</string>
     <string name="create_vm_prepare_lend_mthp">預分配大頁</string>
diff --git a/app/src/main/res/values/strings.xml b/app/src/main/res/values/strings.xml
index da1818c09..5009adcb0 100644
--- a/app/src/main/res/values/strings.xml
+++ b/app/src/main/res/values/strings.xml
@@ -178,6 +178,7 @@
     <string name="create_vm_smt">SMT (Simultaneous MultiThread)</string>
     <string name="create_vm_usb">USB (Universal Serial Bus)</string>
     <string name="create_vm_protected_vm">Protected VM</string>
+    <string name="create_vm_swiotlb_hint">SWIOTLB Size (Protected VM)</string>
     <string name="create_vm_sandbox">Sandbox</string>
     <string name="create_vm_hugepages">Hugepages</string>
     <string name="create_vm_prepare_lend_mthp">Prepare Lend mTHP</string>

From 87ef459793d62d6f5c7ccf27a3500082664331e5 Mon Sep 17 00:00:00 2001
From: HuJK <gh@hujk.oeg>
Date: Fri, 26 Jun 2026 05:55:53 +0800
Subject: [PATCH 044/182] fix(type disk path no longer jump to head)

---
 .../edit/storage/disk/VMDiskEditAdapter.java  | 25 ++++++++++++++++++-
 1 file changed, 24 insertions(+), 1 deletion(-)

diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/storage/disk/VMDiskEditAdapter.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/storage/disk/VMDiskEditAdapter.java
index 3b9c22c3e..f39dd4102 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/storage/disk/VMDiskEditAdapter.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/storage/disk/VMDiskEditAdapter.java
@@ -28,6 +28,7 @@ public final class VMDiskEditAdapter extends CardItemAdapter<VMDiskEditViewHolde
     private OnItemClickListener browseFileListener;
     private OnItemClickListener importOrCreateListener;
     private boolean readonlyChanged = false;
+    private boolean updatingViews = false;
 
     public VMDiskEditAdapter(@NonNull Context context) {
         super(context);
@@ -60,6 +61,26 @@ public void setPathAt(int position, String path) {
         }
     }
 
+    // Handles path edits coming from the user typing in the field. Updates the
+    // data model (and the dependent views) directly without notifyItemChanged,
+    // which would rebind the row and reset the EditText cursor to the start.
+    private void onPathTyped(VMDiskEditViewHolder holder, int position, String path) {
+        if (position < 0 || position >= items.size()) return;
+        var disk = items.get(position);
+        disk.set("path", path);
+        if (path.toLowerCase().endsWith(".iso")) {
+            disk.set("readonly", true);
+            disk.set("bus", DiskBus.CDROM);
+            updatingViews = true;
+            try {
+                holder.switchReadonly.setChecked(true);
+                holder.btnBus.setSelectedItem(DiskBus.CDROM);
+            } finally {
+                updatingViews = false;
+            }
+        }
+    }
+
     @NonNull
     @Override
     protected VMDiskEditViewHolder createViewHolderInstance(@NonNull View view) {
@@ -79,6 +100,7 @@ public void onBindViewHolder(@NonNull VMDiskEditViewHolder holder, int position)
         holder.switchReadonly.setChecked(disk.optBoolean("readonly", false));
         holder.btnBus.configure(DiskBus.class, Enums.optEnum(disk, "bus", DiskBus.VIRTIO));
         holder.btnBus.setOnValueChangedListener((oldVal, newVal) -> {
+            if (updatingViews) return;
             int pos = holder.getBindingAdapterPosition();
             if (pos == RecyclerView.NO_POSITION) return;
             var item = items.get(pos);
@@ -95,11 +117,12 @@ public void onBindViewHolder(@NonNull VMDiskEditViewHolder holder, int position)
             public void afterTextChanged(Editable s) {
                 int pos = holder.getBindingAdapterPosition();
                 if (pos != RecyclerView.NO_POSITION)
-                    setPathAt(pos, s.toString());
+                    onPathTyped(holder, pos, s.toString());
             }
         };
         holder.etPath.addTextChangedListener(holder.pathWatcher);
         holder.switchReadonly.setOnCheckedChangeListener((btn, checked) -> {
+            if (updatingViews) return;
             int pos = holder.getBindingAdapterPosition();
             readonlyChanged = true;
             if (pos != RecyclerView.NO_POSITION)

From 19e5c25dc3107a0bb727be72caa7df8c68e19f35 Mon Sep 17 00:00:00 2001
From: lateautumn233 <lateautumn233@foxmail.com>
Date: Thu, 25 Jun 2026 22:27:32 +0800
Subject: [PATCH 045/182] feat(mthp): add mode selection for lend mTHP
 allocation

- Create LendMthpMode enum (DISABLED/SINGLE/CHUNKED) with backward-compat migration
- Migrate daemon CLI args from --prepare-lend-mthp boolean to --prepare-lend-mthp-mode
- Switch UI from binary toggle to three-way chooser in VMEditBasicTab
- Update AgentVM temporary VM to use LendMthpMode.DISABLED
- Add localized labels for all three lend mTHP modes
---
 .../vm/backend/CrosvmBackendInstance.java     | 15 ++++++-
 .../droidvm/lib/store/vm/LendMthpMode.java    | 41 +++++++++++++++++++
 .../droidvm/ui/agent/base/AgentVM.java        |  3 +-
 .../ui/vm/edit/basic/VMEditBasicTab.java      | 11 +++--
 .../main/res/layout/partial_vm_edit_basic.xml |  5 +--
 app/src/main/res/values-zh-rCN/strings.xml    |  3 ++
 app/src/main/res/values/strings.xml           |  3 ++
 7 files changed, 71 insertions(+), 10 deletions(-)
 create mode 100644 app/src/main/java/cn/classfun/droidvm/lib/store/vm/LendMthpMode.java

diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/CrosvmBackendInstance.java b/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/CrosvmBackendInstance.java
index 2f9c01eb6..210a6db30 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/CrosvmBackendInstance.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/CrosvmBackendInstance.java
@@ -38,6 +38,7 @@
 import cn.classfun.droidvm.lib.store.vm.DisplayBackend;
 import cn.classfun.droidvm.lib.store.vm.GpuApi;
 import cn.classfun.droidvm.lib.store.vm.GpuBackend;
+import cn.classfun.droidvm.lib.store.vm.LendMthpMode;
 import cn.classfun.droidvm.lib.store.vm.NativeDisplay;
 import cn.classfun.droidvm.lib.store.vm.ProtectedVM;
 import cn.classfun.droidvm.lib.store.vm.SharedDirCache;
@@ -186,8 +187,18 @@ private List<String> buildCommand() {
             args.add("--disable-sandbox");
         if (item.optBoolean("hugepages", true))
             args.add("--hugepages");
-        if (item.optBoolean("prepare_lend_mthp", true))
-            args.add("--prepare-lend-mthp");
+        switch (LendMthpMode.fromItem(item)) {
+            case SINGLE:
+                args.add("--prepare-lend-mthp-mode");
+                args.add("single");
+                break;
+            case CHUNKED:
+                args.add("--prepare-lend-mthp-mode");
+                args.add("chunked");
+                break;
+            default:
+                break;
+        }
         var boot = BootPlan.of(config);
         if (!boot.initrd.isEmpty()) {
             args.add("--initrd");
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/store/vm/LendMthpMode.java b/app/src/main/java/cn/classfun/droidvm/lib/store/vm/LendMthpMode.java
new file mode 100644
index 000000000..d45676c48
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/lib/store/vm/LendMthpMode.java
@@ -0,0 +1,41 @@
+package cn.classfun.droidvm.lib.store.vm;
+
+import static cn.classfun.droidvm.lib.store.enums.Enums.optEnum;
+
+import androidx.annotation.NonNull;
+import androidx.annotation.StringRes;
+
+import cn.classfun.droidvm.R;
+import cn.classfun.droidvm.lib.store.base.DataItem;
+import cn.classfun.droidvm.lib.store.enums.StringEnum;
+
+public enum LendMthpMode implements StringEnum {
+    DISABLED(R.string.create_vm_prepare_lend_mthp_disabled),
+    SINGLE(R.string.create_vm_prepare_lend_mthp_single),
+    CHUNKED(R.string.create_vm_prepare_lend_mthp_chunked);
+
+    public static final String KEY = "prepare_lend_mthp";
+    public static final LendMthpMode DEFAULT = CHUNKED;
+
+    private final @StringRes int stringId;
+
+    LendMthpMode(@StringRes int stringId) {
+        this.stringId = stringId;
+    }
+
+    @Override
+    @StringRes
+    public int getStringId() {
+        return stringId;
+    }
+
+    // Resolves the mode from config, migrating the legacy boolean value
+    // (true -> chunked, false -> disabled) written by older versions.
+    @NonNull
+    public static LendMthpMode fromItem(@NonNull DataItem item) {
+        var raw = item.opt(KEY, null);
+        if (raw != null && raw.is(DataItem.Type.BOOLEAN))
+            return raw.asBoolean() ? CHUNKED : DISABLED;
+        return optEnum(item, KEY, DEFAULT);
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/agent/base/AgentVM.java b/app/src/main/java/cn/classfun/droidvm/ui/agent/base/AgentVM.java
index b7c4ef863..0b4ca11e5 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/agent/base/AgentVM.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/agent/base/AgentVM.java
@@ -29,6 +29,7 @@
 import cn.classfun.droidvm.lib.store.disk.DiskConfig;
 import cn.classfun.droidvm.lib.store.disk.DiskStore;
 import cn.classfun.droidvm.lib.store.vm.BootConfig;
+import cn.classfun.droidvm.lib.store.vm.LendMthpMode;
 import cn.classfun.droidvm.lib.store.vm.SharedDirType;
 import cn.classfun.droidvm.lib.store.vm.VMConfig;
 import cn.classfun.droidvm.lib.utils.FileUtils;
@@ -108,7 +109,7 @@ public VMConfig buildVM() {
         vm.item.set("temporary", true);
         vm.item.set("cpu_count", 1);
         vm.item.set("memory_mb", 384);
-        vm.item.set("prepare_lend_mthp", false);
+        vm.item.set(LendMthpMode.KEY, LendMthpMode.DISABLED);
         var boot = BootConfig.of(vm);
         boot.setProtocol(BootConfig.Protocol.LINUX);
         boot.setLinuxSource(BootConfig.LinuxSource.MANUAL);
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/basic/VMEditBasicTab.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/basic/VMEditBasicTab.java
index 607daa45c..8ab148be2 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/basic/VMEditBasicTab.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/basic/VMEditBasicTab.java
@@ -15,6 +15,7 @@
 
 import cn.classfun.droidvm.R;
 import cn.classfun.droidvm.lib.store.base.DataItem;
+import cn.classfun.droidvm.lib.store.vm.LendMthpMode;
 import cn.classfun.droidvm.lib.store.vm.ProtectedVM;
 import cn.classfun.droidvm.lib.store.vm.VMBackend;
 import cn.classfun.droidvm.lib.size.SizeUnit;
@@ -39,7 +40,7 @@ public final class VMEditBasicTab extends VMEditBaseTab {
     private SwitchRowWidget swUsb;
     private SwitchRowWidget swSandbox;
     private SwitchRowWidget swHugepages;
-    private SwitchRowWidget swPrepareLendMthp;
+    private ChooseRowWidget choosePrepareLendMthp;
     private ChooseRowWidget chooseProtectedVm;
     private ChooseRowWidget chooseBackend;
     private ChooseRowWidget chooseHypervisor;
@@ -62,7 +63,7 @@ public void initView() {
         swUsb = view.findViewById(R.id.sw_usb);
         swSandbox = view.findViewById(R.id.sw_sandbox);
         swHugepages = view.findViewById(R.id.sw_hugepages);
-        swPrepareLendMthp = view.findViewById(R.id.sw_prepare_lend_mthp);
+        choosePrepareLendMthp = view.findViewById(R.id.choose_prepare_lend_mthp);
         chooseProtectedVm = view.findViewById(R.id.choose_protected_vm);
         chooseBackend = view.findViewById(R.id.choose_backend);
         chooseHypervisor = view.findViewById(R.id.choose_hypervisor);
@@ -74,6 +75,7 @@ public void initValue() {
         inputMemory.setValue(512, SizeUnit.MB);
         inputCpu.setValue(1);
         inputSwiotlb.setValue(64, SizeUnit.MB);
+        choosePrepareLendMthp.configure(LendMthpMode.class, LendMthpMode.DEFAULT);
         chooseProtectedVm.configure(ProtectedVM.class, PROTECTED_WITHOUT_FIRMWARE);
         chooseBackend.configure(VMBackend.class, VMBackend.DEFAULT);
         chooseHypervisor.configure(VMHypervisor.class, VMHypervisor.DEFAULT);
@@ -93,7 +95,7 @@ public void loadConfig(@NonNull VMConfig config) {
         swUsb.setChecked(item.optBoolean("usb", false));
         swSandbox.setChecked(item.optBoolean("sandbox", false));
         swHugepages.setChecked(item.optBoolean("hugepages", false));
-        swPrepareLendMthp.setChecked(item.optBoolean("prepare_lend_mthp", true));
+        choosePrepareLendMthp.setSelectedItem(LendMthpMode.fromItem(item));
         chooseProtectedVm.setSelectedItem(optEnum(item, "protected_vm", PROTECTED_WITHOUT_FIRMWARE));
         chooseBackend.setSelectedItem(optEnum(item, "backend", VMBackend.DEFAULT));
         chooseHypervisor.setSelectedItem(optEnum(item, "hypervisor", VMHypervisor.DEFAULT));
@@ -187,7 +189,8 @@ public void saveConfig(@NonNull VMConfig config) {
         item.set("usb", swUsb.isChecked());
         item.set("sandbox", swSandbox.isChecked());
         item.set("hugepages", swHugepages.isChecked());
-        item.set("prepare_lend_mthp", swPrepareLendMthp.isChecked());
+        LendMthpMode lendMthpMode = choosePrepareLendMthp.getSelectedItem();
+        item.set(LendMthpMode.KEY, lendMthpMode);
         ProtectedVM pvm = chooseProtectedVm.getSelectedItem();
         item.set("protected_vm", pvm);
         VMBackend backend = chooseBackend.getSelectedItem();
diff --git a/app/src/main/res/layout/partial_vm_edit_basic.xml b/app/src/main/res/layout/partial_vm_edit_basic.xml
index 6dc7aef43..7faec6450 100644
--- a/app/src/main/res/layout/partial_vm_edit_basic.xml
+++ b/app/src/main/res/layout/partial_vm_edit_basic.xml
@@ -103,11 +103,10 @@
             android:icon="@drawable/ic_memory"
             android:text="@string/create_vm_hugepages" />
 
-        <cn.classfun.droidvm.ui.widgets.row.SwitchRowWidget
-            android:id="@+id/sw_prepare_lend_mthp"
+        <cn.classfun.droidvm.ui.widgets.row.ChooseRowWidget
+            android:id="@+id/choose_prepare_lend_mthp"
             android:layout_width="match_parent"
             android:layout_height="wrap_content"
-            android:checked="true"
             android:icon="@drawable/ic_preallocate"
             android:text="@string/create_vm_prepare_lend_mthp" />
 
diff --git a/app/src/main/res/values-zh-rCN/strings.xml b/app/src/main/res/values-zh-rCN/strings.xml
index 08f44a003..6cb8f6f1f 100644
--- a/app/src/main/res/values-zh-rCN/strings.xml
+++ b/app/src/main/res/values-zh-rCN/strings.xml
@@ -181,6 +181,9 @@
     <string name="create_vm_sandbox">沙箱</string>
     <string name="create_vm_hugepages">大页内存</string>
     <string name="create_vm_prepare_lend_mthp">预分配大页</string>
+    <string name="create_vm_prepare_lend_mthp_disabled">禁用</string>
+    <string name="create_vm_prepare_lend_mthp_single">单次 (整块借出)</string>
+    <string name="create_vm_prepare_lend_mthp_chunked">分块 (≤256MiB)</string>
     <string name="create_vm_protected_normal">普通</string>
     <string name="create_vm_protected_protected">保护</string>
     <string name="create_vm_protected_without_firmware">无固件保护</string>
diff --git a/app/src/main/res/values/strings.xml b/app/src/main/res/values/strings.xml
index 2fe723817..9cb7f5594 100644
--- a/app/src/main/res/values/strings.xml
+++ b/app/src/main/res/values/strings.xml
@@ -183,6 +183,9 @@
     <string name="create_vm_sandbox">Sandbox</string>
     <string name="create_vm_hugepages">Hugepages</string>
     <string name="create_vm_prepare_lend_mthp">Prepare Lend mTHP</string>
+    <string name="create_vm_prepare_lend_mthp_disabled">Disabled</string>
+    <string name="create_vm_prepare_lend_mthp_single">Single (whole region)</string>
+    <string name="create_vm_prepare_lend_mthp_chunked">Chunked (≤256MiB)</string>
     <string name="create_vm_protected_normal">Normal</string>
     <string name="create_vm_protected_protected">Protected</string>
     <string name="create_vm_protected_without_firmware">Protected without firmware</string>

From c13abfbdc7638d7d3568e58db6b23fbfbf552ef5 Mon Sep 17 00:00:00 2001
From: BigfootACA <bigfoot@classfun.cn>
Date: Fri, 26 Jun 2026 11:08:42 +0800
Subject: [PATCH 046/182] cpp: add libcompat for old android version supports

Signed-off-by: BigfootACA <bigfoot@classfun.cn>
---
 app/build.gradle.kts                          |  10 +-
 app/src/main/cpp/CMakeLists.txt               |  25 +++-
 app/src/main/cpp/compat/a13.S                 |   1 +
 app/src/main/cpp/compat/a13.cpp               |  19 +++
 app/src/main/cpp/compat/a14.S                 |  28 ++++
 app/src/main/cpp/compat/a14.cpp               | 139 ++++++++++++++++++
 app/src/main/cpp/compat/a15.S                 |   1 +
 app/src/main/cpp/compat/a15.cpp               |   1 +
 app/src/main/cpp/compat/a16.S                 |   1 +
 app/src/main/cpp/compat/a16.cpp               |   1 +
 app/src/main/cpp/compat/a17.S                 |   0
 app/src/main/cpp/compat/a17.cpp               |   0
 .../droidvm/daemon/vm/VMBackendInstance.java  |   4 +
 .../cn/classfun/droidvm/lib/Constants.java    |  10 +-
 14 files changed, 237 insertions(+), 3 deletions(-)
 create mode 100644 app/src/main/cpp/compat/a13.S
 create mode 100644 app/src/main/cpp/compat/a13.cpp
 create mode 100644 app/src/main/cpp/compat/a14.S
 create mode 100644 app/src/main/cpp/compat/a14.cpp
 create mode 100644 app/src/main/cpp/compat/a15.S
 create mode 100644 app/src/main/cpp/compat/a15.cpp
 create mode 100644 app/src/main/cpp/compat/a16.S
 create mode 100644 app/src/main/cpp/compat/a16.cpp
 create mode 100644 app/src/main/cpp/compat/a17.S
 create mode 100644 app/src/main/cpp/compat/a17.cpp

diff --git a/app/build.gradle.kts b/app/build.gradle.kts
index 652d528eb..76309e640 100644
--- a/app/build.gradle.kts
+++ b/app/build.gradle.kts
@@ -138,7 +138,15 @@ abstract class CopyNativeBinAssetsTask : DefaultTask() {
                 dest.parentFile.mkdirs()
                 src.copyTo(dest, overwrite = true)
             }
-        val libraries = setOf("libsimpledump.so", "libunixhelper.so")
+        val libraries = setOf(
+            "libsimpledump.so",
+            "libunixhelper.so",
+            "libcompat_a13.so",
+            "libcompat_a14.so",
+            "libcompat_a15.so",
+            "libcompat_a16.so",
+            "libcompat_a17.so",
+        )
         cmakeDir.walkTopDown()
             .filter { it.name in libraries && it.isFile }
             .forEach { src ->
diff --git a/app/src/main/cpp/CMakeLists.txt b/app/src/main/cpp/CMakeLists.txt
index 67d76204a..d7a0eca90 100644
--- a/app/src/main/cpp/CMakeLists.txt
+++ b/app/src/main/cpp/CMakeLists.txt
@@ -1,5 +1,5 @@
 cmake_minimum_required(VERSION 3.22.1)
-project(droidvm LANGUAGES C CXX)
+project(droidvm LANGUAGES C CXX ASM)
 
 set(SHARED_INCLUDE_DIRS
     ${CMAKE_CURRENT_SOURCE_DIR}/jsoncpp/include
@@ -61,6 +61,29 @@ add_library(simpledump SHARED
 
 target_compile_options(simpledump PRIVATE -Wall -Wextra -O0 -Wno-format-security -Wno-format)
 
+add_library(compat_a13 SHARED compat/a13.cpp compat/a13.S)
+add_library(compat_a14 SHARED compat/a14.cpp compat/a14.S)
+add_library(compat_a15 SHARED compat/a15.cpp compat/a15.S)
+add_library(compat_a16 SHARED compat/a16.cpp compat/a16.S)
+add_library(compat_a17 SHARED compat/a17.cpp compat/a17.S)
+target_compile_options(compat_a13 PRIVATE -Wall -Wextra -O0 -Wno-nullability-completeness)
+target_compile_options(compat_a14 PRIVATE -Wall -Wextra -O0 -Wno-nullability-completeness)
+target_compile_options(compat_a15 PRIVATE -Wall -Wextra -O0 -Wno-nullability-completeness)
+target_compile_options(compat_a16 PRIVATE -Wall -Wextra -O0 -Wno-nullability-completeness)
+target_compile_options(compat_a17 PRIVATE -Wall -Wextra -O0 -Wno-nullability-completeness)
+target_link_options(compat_a13 PRIVATE
+        "-Wl,--undefined=_ZTVNSt6__ndk114basic_ofstreamIcNS_11char_traitsIcEEEE"
+        "-Wl,--undefined=_ZTTNSt6__ndk114basic_ofstreamIcNS_11char_traitsIcEEEE"
+        "-Wl,--defsym,_ZTVNSt3__114basic_ofstreamIcNS_11char_traitsIcEEEE=_ZTVNSt6__ndk114basic_ofstreamIcNS_11char_traitsIcEEEE"
+        "-Wl,--defsym,_ZTTNSt3__114basic_ofstreamIcNS_11char_traitsIcEEEE=_ZTTNSt6__ndk114basic_ofstreamIcNS_11char_traitsIcEEEE"
+)
+target_link_options(compat_a14 PRIVATE
+        "-Wl,--undefined=_ZTVNSt6__ndk114basic_ofstreamIcNS_11char_traitsIcEEEE"
+        "-Wl,--undefined=_ZTTNSt6__ndk114basic_ofstreamIcNS_11char_traitsIcEEEE"
+        "-Wl,--defsym,_ZTVNSt3__114basic_ofstreamIcNS_11char_traitsIcEEEE=_ZTVNSt6__ndk114basic_ofstreamIcNS_11char_traitsIcEEEE"
+        "-Wl,--defsym,_ZTTNSt3__114basic_ofstreamIcNS_11char_traitsIcEEEE=_ZTTNSt6__ndk114basic_ofstreamIcNS_11char_traitsIcEEEE"
+)
+
 set(LIBVNCSERVER_DIR ${CMAKE_CURRENT_SOURCE_DIR}/libvncserver)
 set(LIBVNCSERVER_INSTALL OFF CACHE BOOL "" FORCE)
 set(WITH_OPENSSL  ON  CACHE BOOL "" FORCE)
diff --git a/app/src/main/cpp/compat/a13.S b/app/src/main/cpp/compat/a13.S
new file mode 100644
index 000000000..8e60f3d81
--- /dev/null
+++ b/app/src/main/cpp/compat/a13.S
@@ -0,0 +1 @@
+#include "a14.S"
diff --git a/app/src/main/cpp/compat/a13.cpp b/app/src/main/cpp/compat/a13.cpp
new file mode 100644
index 000000000..11fb5abe3
--- /dev/null
+++ b/app/src/main/cpp/compat/a13.cpp
@@ -0,0 +1,19 @@
+#include "a14.cpp"
+#include <cstdint>
+#include <cstdarg>
+#include <cstdio>
+#include <cstdlib>
+#include <utility>
+#include <charconv>
+#include <fstream>
+#include <iostream>
+
+__attribute__((weak))
+extern "C" int32_t ANativeWindow_readFromParcel(const void* _Nonnull, void* _Nullable* _Nonnull) {
+    return (int32_t)0x80000002;
+}
+
+__attribute__((weak))
+extern "C" int32_t ANativeWindow_writeToParcel(void* _Nonnull, void* _Nonnull) {
+    return (int32_t)0x80000002;
+}
diff --git a/app/src/main/cpp/compat/a14.S b/app/src/main/cpp/compat/a14.S
new file mode 100644
index 000000000..b3f50afb3
--- /dev/null
+++ b/app/src/main/cpp/compat/a14.S
@@ -0,0 +1,28 @@
+#include "a15.S"
+#if defined(__arm64__) || defined(__aarch64__)
+.text
+
+// std::__ndk1::basic_ofstream<char, std::__ndk1::char_traits<char> >::open(std::__ndk1::basic_string<char, std::__ndk1::char_traits<char>, std::__ndk1::allocator<char> > const&, unsigned int)
+.globl _ZNSt3__114basic_ofstreamIcNS_11char_traitsIcEEE4openERKNS_12basic_stringIcS2_NS_9allocatorIcEEEEj
+.type _ZNSt3__114basic_ofstreamIcNS_11char_traitsIcEEE4openERKNS_12basic_stringIcS2_NS_9allocatorIcEEEEj, %function
+_ZNSt3__114basic_ofstreamIcNS_11char_traitsIcEEE4openERKNS_12basic_stringIcS2_NS_9allocatorIcEEEEj:
+    b _ZNSt6__ndk114basic_ofstreamIcNS_11char_traitsIcEEE4openERKNS_12basic_stringIcS2_NS_9allocatorIcEEEEj
+
+// std::__1::basic_filebuf<char, std::__1::char_traits<char> >::~basic_filebuf()
+.globl _ZNSt3__113basic_filebufIcNS_11char_traitsIcEEED1Ev
+.type _ZNSt3__113basic_filebufIcNS_11char_traitsIcEEED1Ev, %function
+_ZNSt3__113basic_filebufIcNS_11char_traitsIcEEED1Ev:
+    b _ZNSt6__ndk113basic_filebufIcNS_11char_traitsIcEEED1Ev
+
+// std::__1::basic_filebuf<char, std::__1::char_traits<char> >::basic_filebuf()
+.globl _ZNSt3__113basic_filebufIcNS_11char_traitsIcEEEC1Ev
+.type _ZNSt3__113basic_filebufIcNS_11char_traitsIcEEEC1Ev, %function
+_ZNSt3__113basic_filebufIcNS_11char_traitsIcEEEC1Ev:
+    b _ZNSt6__ndk113basic_filebufIcNS_11char_traitsIcEEEC1Ev
+
+// std::__1::basic_filebuf<char, std::__1::char_traits<char> >::close()
+.globl _ZNSt3__113basic_filebufIcNS_11char_traitsIcEEE5closeEv
+.type _ZNSt3__113basic_filebufIcNS_11char_traitsIcEEE5closeEv, %function
+_ZNSt3__113basic_filebufIcNS_11char_traitsIcEEE5closeEv:
+    b _ZNSt6__ndk113basic_filebufIcNS_11char_traitsIcEEE5closeEv
+#endif
diff --git a/app/src/main/cpp/compat/a14.cpp b/app/src/main/cpp/compat/a14.cpp
new file mode 100644
index 000000000..84a8775b3
--- /dev/null
+++ b/app/src/main/cpp/compat/a14.cpp
@@ -0,0 +1,139 @@
+#include "a15.cpp"
+#include <cstdint>
+#include <cstdarg>
+#include <cstdio>
+#include <cstdlib>
+#include <utility>
+#include <charconv>
+#include <fstream>
+#include <iostream>
+#include <sys/epoll.h>
+
+static std::ofstream ofs;
+
+__attribute__((weak))
+extern "C" void AIBinder_Class_setTransactionCodeToFunctionNameMap(void*, const char* const*, size_t) {
+
+}
+
+__attribute__((weak))
+void __libcpp_verbose_abort(char const* format, ...) __asm("_ZNSt3__122__libcpp_verbose_abortEPKcz");
+
+__attribute__((weak))
+void __libcpp_verbose_abort(char const* format, ...) {
+    va_list list;
+    va_start(list, format);
+    vfprintf(stderr, format, list);
+    va_end(list);
+    abort();
+}
+
+std::to_chars_result fix_to_chars1(char* first, char* last, float value,std::chars_format fmt, int precision) __asm("_ZNSt3__18to_charsEPcS0_fNS_12chars_formatEi");
+
+__attribute__((weak))
+std::to_chars_result fix_to_chars1(char* first, char* last, float value,std::chars_format fmt, int precision) {
+    return std::to_chars(first, last, value, fmt, precision);
+}
+
+std::to_chars_result fix_to_chars2(char* first, char* last, float value) __asm("_ZNSt3__18to_charsEPcS0_f");
+
+__attribute__((weak))
+std::to_chars_result fix_to_chars2(char* first, char* last, float value) {
+    return std::to_chars(first, last, value);
+}
+
+std::to_chars_result fix_to_chars3(char* first, char* last, float value,std::chars_format fmt) __asm("_ZNSt3__18to_charsEPcS0_fNS_12chars_formatE");
+
+__attribute__((weak))
+std::to_chars_result fix_to_chars3(char* first, char* last, float value,std::chars_format fmt) {
+    return std::to_chars(first, last, value, fmt);
+}
+
+std::to_chars_result fix_to_chars4(char* first, char* last, double value,std::chars_format fmt, int precision) __asm("_ZNSt3__18to_charsEPcS0_dNS_12chars_formatEi");
+
+__attribute__((weak))
+std::to_chars_result fix_to_chars4(char* first, char* last, double value,std::chars_format fmt, int precision) {
+    return std::to_chars(first, last, value, fmt, precision);
+}
+
+std::to_chars_result fix_to_chars5(char* first, char* last, double value) __asm("_ZNSt3__18to_charsEPcS0_d");
+
+__attribute__((weak))
+std::to_chars_result fix_to_chars5(char* first, char* last, double value) {
+    return std::to_chars(first, last, value);
+}
+
+std::to_chars_result fix_to_chars6(char* first, char* last, double value,std::chars_format fmt) __asm("_ZNSt3__18to_charsEPcS0_dNS_12chars_formatE");
+
+__attribute__((weak))
+std::to_chars_result fix_to_chars6(char* first, char* last, double value,std::chars_format fmt) {
+    return std::to_chars(first, last, value, fmt);
+}
+
+std::to_chars_result fix_to_chars7(char* first, char* last, long double value,std::chars_format fmt, int precision) __asm("_ZNSt3__18to_charsEPcS0_eNS_12chars_formatEi");
+
+__attribute__((weak))
+std::to_chars_result fix_to_chars7(char* first, char* last, long double value,std::chars_format fmt, int precision) {
+    return std::to_chars(first, last, value, fmt, precision);
+}
+
+std::to_chars_result fix_to_chars8(char* first, char* last, long double value) __asm("_ZNSt3__18to_charsEPcS0_e");
+
+__attribute__((weak))
+std::to_chars_result fix_to_chars8(char* first, char* last, long double value) {
+    return std::to_chars(first, last, value);
+}
+
+std::to_chars_result fix_to_chars9(char* first, char* last, long double value,std::chars_format fmt) __asm("_ZNSt3__18to_charsEPcS0_eNS_12chars_formatE");
+
+__attribute__((weak))
+std::to_chars_result fix_to_chars9(char* first, char* last, long double value,std::chars_format fmt) {
+    return std::to_chars(first, last, value, fmt);
+}
+
+namespace android {
+    typedef int64_t PictureProfileId;
+    class PictureProfileHandle {
+    public:
+        static const PictureProfileHandle NONE;
+        PictureProfileHandle() { *this = NONE; }
+        explicit PictureProfileHandle(PictureProfileId id) : mId(id) {}
+        PictureProfileId const& getId() const { return mId; }
+        inline bool operator==(const PictureProfileHandle& rhs) { return mId == rhs.mId; }
+        inline bool operator!=(const PictureProfileHandle& rhs) { return !(*this == rhs); }
+        inline bool operator!() const { return mId == NONE.mId; }
+        operator bool() const { return !!*this; }
+        friend ::std::string toString(const PictureProfileHandle& handle);
+    private:
+        PictureProfileId mId;
+    };
+    const PictureProfileHandle PictureProfileHandle::NONE(0);
+    ::std::string toString(const PictureProfileHandle& handle) {
+        return std::format("{:#010x}", handle.getId());
+    }
+    namespace binder::os {
+        __attribute__((weak))
+        void trace_begin(uint64_t, const char*) {
+        }
+        __attribute__((weak))
+        void trace_end(uint64_t) {
+        }
+        __attribute__((weak))
+        void trace_int(uint64_t, const char*, int32_t) {
+        }
+    }
+}
+
+__attribute__((weak))
+extern "C" int epoll_pwait2(
+    int epfd, struct epoll_event* events, int maxevents,
+    const struct timespec *_Nullable ts,
+    const sigset_t *_Nullable sigmask
+) {
+    int ms = -1;
+    if (ts) {
+        ms = (int)(ts->tv_sec * 1000L + ts->tv_nsec / 1000000L);
+        if (ms < 0) ms = 0;
+    }
+    return epoll_pwait(epfd, events, maxevents, ms, sigmask);
+}
diff --git a/app/src/main/cpp/compat/a15.S b/app/src/main/cpp/compat/a15.S
new file mode 100644
index 000000000..a23f8b99b
--- /dev/null
+++ b/app/src/main/cpp/compat/a15.S
@@ -0,0 +1 @@
+#include "a16.S"
diff --git a/app/src/main/cpp/compat/a15.cpp b/app/src/main/cpp/compat/a15.cpp
new file mode 100644
index 000000000..b7c6b1aac
--- /dev/null
+++ b/app/src/main/cpp/compat/a15.cpp
@@ -0,0 +1 @@
+#include "a16.cpp"
diff --git a/app/src/main/cpp/compat/a16.S b/app/src/main/cpp/compat/a16.S
new file mode 100644
index 000000000..b1093e154
--- /dev/null
+++ b/app/src/main/cpp/compat/a16.S
@@ -0,0 +1 @@
+#include "a17.S"
diff --git a/app/src/main/cpp/compat/a16.cpp b/app/src/main/cpp/compat/a16.cpp
new file mode 100644
index 000000000..08479010b
--- /dev/null
+++ b/app/src/main/cpp/compat/a16.cpp
@@ -0,0 +1 @@
+#include "a17.cpp"
diff --git a/app/src/main/cpp/compat/a17.S b/app/src/main/cpp/compat/a17.S
new file mode 100644
index 000000000..e69de29bb
diff --git a/app/src/main/cpp/compat/a17.cpp b/app/src/main/cpp/compat/a17.cpp
new file mode 100644
index 000000000..e69de29bb
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/vm/VMBackendInstance.java b/app/src/main/java/cn/classfun/droidvm/daemon/vm/VMBackendInstance.java
index e9ead2135..73775521e 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/vm/VMBackendInstance.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/vm/VMBackendInstance.java
@@ -3,8 +3,11 @@
 import static cn.classfun.droidvm.lib.Constants.DATA_DIR;
 import static cn.classfun.droidvm.lib.natives.NativeProcess.RLIM_INFINITY;
 import static cn.classfun.droidvm.lib.utils.RunUtils.run;
+import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
 import static cn.classfun.droidvm.lib.utils.StringUtils.pathJoin;
 
+import android.os.Build;
+
 import androidx.annotation.NonNull;
 
 import java.util.LinkedHashMap;
@@ -54,6 +57,7 @@ private void cleanUpMemory() {
     protected void prepareProcess(@NonNull NativeProcess.Builder builder) {
         String[] preload = {
             pathJoin(DATA_DIR, "lib", "libsimpledump.so"),
+            pathJoin(DATA_DIR, "lib", fmt("libcompat_a%s.so", Build.VERSION.RELEASE)),
         };
         builder.environment("LD_PRELOAD", String.join(":", preload));
         builder.environment("LD_LIBRARY_PATH", pathJoin(DATA_DIR, "usr", "lib"));
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/Constants.java b/app/src/main/java/cn/classfun/droidvm/lib/Constants.java
index 8642176af..f15802dd9 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/Constants.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/Constants.java
@@ -24,7 +24,15 @@ public final class Constants {
     // third-party daemons (gvswitch/pbridge/bridgedhcp/netbox) and lbx now
     // arrive via the prebuilt tar.xz, extracted to DATA/bin/<name>.
     public static final String[] BINARIES_BUILT = {"droidvm", "daemon"};
-    public static final String[] LIBRARIES_BUILT = {"libsimpledump.so", "libunixhelper.so"};
+    public static final String[] LIBRARIES_BUILT = {
+        "libsimpledump.so",
+        "libunixhelper.so",
+        "libcompat_a13.so",
+        "libcompat_a14.so",
+        "libcompat_a15.so",
+        "libcompat_a16.so",
+        "libcompat_a17.so",
+    };
     /**
      * IFA_RT_PRIORITY magic that pbridge tags its ND/ARP-offload proxy
      * addresses with (its --offload-workaround-magic). Host-IP discovery

From ce5f41ad861d9aaff4e4b141b45ca0225ddf3483 Mon Sep 17 00:00:00 2001
From: BigfootACA <bigfoot@classfun.cn>
Date: Fri, 26 Jun 2026 11:10:12 +0800
Subject: [PATCH 047/182] Daemon: set proctitile to droidvmd

Signed-off-by: BigfootACA <bigfoot@classfun.cn>
---
 app/src/main/java/cn/classfun/droidvm/daemon/Daemon.java | 9 +++++++++
 1 file changed, 9 insertions(+)

diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/Daemon.java b/app/src/main/java/cn/classfun/droidvm/daemon/Daemon.java
index a96697f9b..080d668dc 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/Daemon.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/Daemon.java
@@ -212,6 +212,14 @@ private static String getMyHash() {
         }
     }
 
+    private static void setProcTitle() {
+        try {
+            FileUtils.writeFile("/proc/self/comm", "droidvmd");
+        } catch (IOException e) {
+            Log.w(TAG, "Failed to set process title", e);
+        }
+    }
+
     public static void main(String... args) {
         boolean force = Arrays.asList(args).contains("--force");
         System.out.print("Starting DroidVM Daemon...\n");
@@ -219,6 +227,7 @@ public static void main(String... args) {
         // Build a system Context on the main thread (it prepares the main looper) so the daemon can
         // broadcast the native-display binder to the UI. Must happen before server.run() blocks here.
         DaemonSystemContext.init();
+        setProcTitle();
         System.out.printf("Current pid: %d\n", Process.myPid());
         Log.d(TAG, "DroidVM Daemon is starting...");
         if (!acquireLock(force)) {

From f23c5c0b821094f53191587c20f7cbe0c3435296 Mon Sep 17 00:00:00 2001
From: BigfootACA <bigfoot@classfun.cn>
Date: Fri, 26 Jun 2026 11:10:29 +0800
Subject: [PATCH 048/182] assets: remove old hash.json

Signed-off-by: BigfootACA <bigfoot@classfun.cn>
---
 app/src/main/assets/hash.json | 14 --------------
 1 file changed, 14 deletions(-)
 delete mode 100644 app/src/main/assets/hash.json

diff --git a/app/src/main/assets/hash.json b/app/src/main/assets/hash.json
deleted file mode 100644
index c62f5d047..000000000
--- a/app/src/main/assets/hash.json
+++ /dev/null
@@ -1,14 +0,0 @@
-{
-  "hash": [
-    {
-      "file": "prebuilts/prebuilt-arm64-v8a.7z",
-      "sha256": "263e905b4d33fecdaba1f0744384ff6bc4b7b478e65ecafd6ac8a50b0eeec55c"
-    }, {
-      "file": "bin/arm64-v8a/7za",
-      "sha256": "8443af0bd27d694f0431c0e46fc33d149004e5d9f8c03d484cffb8b03e928531"
-    }, {
-      "file": "bin/x86_64/7za",
-      "sha256": "57ea4f617b559556a4019ac8fe8c27cc9422ff4a988ad1be3728319a622093d8"
-    }
-  ]
-}

From 42e5f8ec33ea5e9b7526f844c14ad23f7098c9c5 Mon Sep 17 00:00:00 2001
From: BigfootACA <bigfoot@classfun.cn>
Date: Fri, 26 Jun 2026 11:12:35 +0800
Subject: [PATCH 049/182] DaemonHelper: fix stale pid file after reboot

Signed-off-by: BigfootACA <bigfoot@classfun.cn>
---
 .../droidvm/lib/daemon/DaemonHelper.java      | 20 +++++++++++++++++--
 1 file changed, 18 insertions(+), 2 deletions(-)

diff --git a/app/src/main/java/cn/classfun/droidvm/lib/daemon/DaemonHelper.java b/app/src/main/java/cn/classfun/droidvm/lib/daemon/DaemonHelper.java
index bd4ae2480..0ff2b882c 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/daemon/DaemonHelper.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/daemon/DaemonHelper.java
@@ -75,10 +75,26 @@ public String getDaemonZipPath() {
     public static int readPid() {
         try {
             var pid = parseInt(shellReadFile(getPidFile()).trim());
-            return isPidExists(pid) ? pid : -1;
+            if (isPidExists(pid)) {
+                try {
+                    var comm = shellReadFile(fmt("/proc/%d/comm", pid)).trim();
+                    if (comm.equals("droidvmd")) return pid;
+                    Log.i(TAG, fmt("proctitle mismatch: %s", comm));
+                } catch (Exception e) {
+                    Log.w(TAG, "Failed to read proctitle", e);
+                }
+                try {
+                    var comm = shellReadFile(fmt("/proc/%d/cmdline", pid));
+                    if (comm.contains(Daemon.class.getName())) return pid;
+                    Log.i(TAG, fmt("cmdline mismatch: %s", comm.replace('\0', ' ')));
+                } catch (Exception e) {
+                    Log.w(TAG, "Failed to read cmdline", e);
+                }
+                Log.w(TAG, "pid file maybe stale");
+            }
         } catch (Exception ignored) {
-            return -1;
         }
+        return -1;
     }
 
     public static boolean isDaemonRunning() {

From 4f516294fce3d32f24cb2fcde51ae2a9760268ee Mon Sep 17 00:00:00 2001
From: BigfootACA <bigfoot@classfun.cn>
Date: Fri, 26 Jun 2026 11:45:17 +0800
Subject: [PATCH 050/182] dialog_logs.xml: fix dialog button display

Signed-off-by: BigfootACA <bigfoot@classfun.cn>
---
 .../droidvm/lib/daemon/VMEventHandler.java    | 11 +++-----
 .../info/snapshot/DiskInfoSnapshotTab.java    | 10 +++-----
 app/src/main/res/layout/dialog_logs.xml       | 25 ++++++++-----------
 3 files changed, 19 insertions(+), 27 deletions(-)

diff --git a/app/src/main/java/cn/classfun/droidvm/lib/daemon/VMEventHandler.java b/app/src/main/java/cn/classfun/droidvm/lib/daemon/VMEventHandler.java
index 4d679c7b0..28b602b40 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/daemon/VMEventHandler.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/daemon/VMEventHandler.java
@@ -18,7 +18,6 @@
 import android.os.Handler;
 import android.os.Looper;
 import android.util.Log;
-import android.view.LayoutInflater;
 import android.widget.TextView;
 import android.widget.Toast;
 
@@ -104,16 +103,14 @@ private void showExitDialog(Activity act, String vmName, int exitCode, @NonNull
         store.load(act);
         var vm = store.findByName(vmName);
         if (vm != null && vm.item.optBoolean("temporary", false)) return;
-        var inf = LayoutInflater.from(act);
-        var view = inf.inflate(R.layout.dialog_logs, null);
-        TextView tvLog = view.findViewById(R.id.tv_log);
-        tvLog.setText(logText.toString().trim());
-        new MaterialAlertDialogBuilder(act)
+        var dialog = new MaterialAlertDialogBuilder(act)
             .setTitle(act.getString(R.string.vm_exit_dialog_title, vmName))
             .setMessage(act.getString(R.string.vm_exit_dialog_message, exitCode))
-            .setView(view)
+            .setView(R.layout.dialog_logs)
             .setPositiveButton(android.R.string.ok, null)
             .show();
+        TextView tvLog = dialog.findViewById(R.id.tv_log);
+        if (tvLog != null) tvLog.append(logText.toString().trim());
     }
 
     private void addExitHandler() {
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/disk/info/snapshot/DiskInfoSnapshotTab.java b/app/src/main/java/cn/classfun/droidvm/ui/disk/info/snapshot/DiskInfoSnapshotTab.java
index e55cccc01..465057d97 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/disk/info/snapshot/DiskInfoSnapshotTab.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/disk/info/snapshot/DiskInfoSnapshotTab.java
@@ -271,15 +271,13 @@ private void runSnapshotCommand(@NonNull String flag, @NonNull String snapshotNa
     }
 
     private void showErrorDialog(@NonNull String message) {
-        var dialogView = LayoutInflater.from(activity)
-            .inflate(R.layout.dialog_logs, null);
-        TextView tvLog = dialogView.findViewById(R.id.tv_log);
-        tvLog.setText(message);
-        new MaterialAlertDialogBuilder(activity)
+        var dialog = new MaterialAlertDialogBuilder(activity)
             .setTitle(R.string.disk_info_snapshot_failed_title)
-            .setView(dialogView)
+            .setView(R.layout.dialog_logs)
             .setPositiveButton(android.R.string.ok, null)
             .show();
+        TextView tvLog = dialog.findViewById(R.id.tv_log);
+        if (tvLog != null) tvLog.append(message.trim());
     }
 }
 
diff --git a/app/src/main/res/layout/dialog_logs.xml b/app/src/main/res/layout/dialog_logs.xml
index d4f1f30ab..4914b5205 100644
--- a/app/src/main/res/layout/dialog_logs.xml
+++ b/app/src/main/res/layout/dialog_logs.xml
@@ -1,16 +1,13 @@
 <?xml version="1.0" encoding="utf-8"?>
-<ScrollView xmlns:android="http://schemas.android.com/apk/res/android"
+<TextView xmlns:android="http://schemas.android.com/apk/res/android"
+    android:id="@+id/tv_log"
     android:layout_width="match_parent"
-    android:layout_height="match_parent">
-
-    <TextView
-        android:id="@+id/tv_log"
-        android:layout_width="match_parent"
-        android:layout_height="wrap_content"
-        android:contentDescription="@string/logs_title"
-        android:fontFamily="monospace"
-        android:padding="16dp"
-        android:textIsSelectable="true"
-        android:textSize="12sp" />
-
-</ScrollView>
+    android:layout_height="wrap_content"
+    android:contentDescription="@string/logs_title"
+    android:fontFamily="monospace"
+    android:gravity="bottom"
+    android:maxLines="15"
+    android:padding="16dp"
+    android:scrollbars="vertical"
+    android:textIsSelectable="true"
+    android:textSize="12sp" />

From fee9819e31676dabdfaf349d8385b6e2004f7d47 Mon Sep 17 00:00:00 2001
From: BigfootACA <bigfoot@classfun.cn>
Date: Fri, 26 Jun 2026 12:27:15 +0800
Subject: [PATCH 051/182] LogHelper: add display delay

Signed-off-by: BigfootACA <bigfoot@classfun.cn>
---
 .../main/java/cn/classfun/droidvm/lib/diag/LogHelper.java   | 6 +++++-
 .../java/cn/classfun/droidvm/lib/diag/LogHelperHandler.java | 5 +++++
 2 files changed, 10 insertions(+), 1 deletion(-)

diff --git a/app/src/main/java/cn/classfun/droidvm/lib/diag/LogHelper.java b/app/src/main/java/cn/classfun/droidvm/lib/diag/LogHelper.java
index c039d5d9f..1f347e817 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/diag/LogHelper.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/diag/LogHelper.java
@@ -1,5 +1,8 @@
 package cn.classfun.droidvm.lib.diag;
 
+import android.os.Handler;
+import android.os.Looper;
+
 import androidx.annotation.NonNull;
 
 import org.json.JSONObject;
@@ -70,7 +73,8 @@ public void onDaemonEvent(@NonNull JSONObject msg) {
         for (var handler : handlers) {
             if (logs.disabled.contains(handler)) continue;
             if (!handler.match(vmId, stream, full)) continue;
-            vmEventHandler.queueActivityTask(act -> handler.show(act, vmId, vmName));
+            Runnable show = () -> vmEventHandler.queueActivityTask(act -> handler.show(act, vmId, vmName));
+            new Handler(Looper.getMainLooper()).postDelayed(show, handler.getShowDelay().toMillis());
             if (handler.isOnce())
                 logs.disabled.add(handler);
         }
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/diag/LogHelperHandler.java b/app/src/main/java/cn/classfun/droidvm/lib/diag/LogHelperHandler.java
index 2c7028879..e551bbcc7 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/diag/LogHelperHandler.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/diag/LogHelperHandler.java
@@ -12,6 +12,7 @@
 
 import com.google.android.material.dialog.MaterialAlertDialogBuilder;
 
+import java.time.Duration;
 import java.util.UUID;
 
 import cn.classfun.droidvm.R;
@@ -27,6 +28,10 @@ public boolean isOnce() {
         return true;
     }
 
+    public Duration getShowDelay() {
+        return Duration.ofSeconds(2);
+    }
+
     public abstract void show(@NonNull Context ctx, @NonNull UUID vmId, @NonNull String vmName);
 
     protected static boolean isGunyah() {

From 3b8fdd6c15f6389f634ee4afc4c418d9def7ef8c Mon Sep 17 00:00:00 2001
From: BigfootACA <bigfoot@classfun.cn>
Date: Fri, 26 Jun 2026 12:50:43 +0800
Subject: [PATCH 052/182] VMEventHandler: add see more button in vm exit dialog

Signed-off-by: BigfootACA <bigfoot@classfun.cn>
---
 .../droidvm/lib/daemon/VMEventHandler.java        | 15 +++++++++++++--
 app/src/main/res/values-zh-rCN/strings.xml        |  1 +
 app/src/main/res/values-zh-rTW/strings.xml        |  1 +
 app/src/main/res/values/strings.xml               |  1 +
 4 files changed, 16 insertions(+), 2 deletions(-)

diff --git a/app/src/main/java/cn/classfun/droidvm/lib/daemon/VMEventHandler.java b/app/src/main/java/cn/classfun/droidvm/lib/daemon/VMEventHandler.java
index 28b602b40..855be845f 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/daemon/VMEventHandler.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/daemon/VMEventHandler.java
@@ -42,6 +42,7 @@
 import cn.classfun.droidvm.lib.ui.UIContext;
 import cn.classfun.droidvm.ui.SplashActivity;
 import cn.classfun.droidvm.ui.main.MainActivity;
+import cn.classfun.droidvm.ui.vm.console.VMConsoleActivity;
 
 public final class VMEventHandler implements
     DaemonConnection.EventListener,
@@ -102,12 +103,22 @@ private void showExitDialog(Activity act, String vmName, int exitCode, @NonNull
         var store = new VMStore();
         store.load(act);
         var vm = store.findByName(vmName);
-        if (vm != null && vm.item.optBoolean("temporary", false)) return;
+        if (vm == null) return;
+        if (vm.item.optBoolean("temporary", false)) return;
+        DialogInterface.OnClickListener btnSeeMore = (d, w) -> {
+            if (act.isFinishing() || act.isDestroyed()) return;
+            var intent = new Intent(act, VMConsoleActivity.class);
+            intent.putExtra(VMConsoleActivity.EXTRA_VM_ID, vm.getId().toString());
+            intent.putExtra(VMConsoleActivity.EXTRA_VM_NAME, vmName);
+            intent.putExtra(VMConsoleActivity.EXTRA_STREAM, "stdio");
+            intent.putExtra(VMConsoleActivity.EXTRA_LOGS, true);
+            act.startActivity(intent);
+        };
         var dialog = new MaterialAlertDialogBuilder(act)
             .setTitle(act.getString(R.string.vm_exit_dialog_title, vmName))
             .setMessage(act.getString(R.string.vm_exit_dialog_message, exitCode))
             .setView(R.layout.dialog_logs)
-            .setPositiveButton(android.R.string.ok, null)
+            .setPositiveButton(R.string.vm_exit_see_more, btnSeeMore)
             .show();
         TextView tvLog = dialog.findViewById(R.id.tv_log);
         if (tvLog != null) tvLog.append(logText.toString().trim());
diff --git a/app/src/main/res/values-zh-rCN/strings.xml b/app/src/main/res/values-zh-rCN/strings.xml
index 6cb8f6f1f..fde9c3f0a 100644
--- a/app/src/main/res/values-zh-rCN/strings.xml
+++ b/app/src/main/res/values-zh-rCN/strings.xml
@@ -112,6 +112,7 @@
     <string name="vm_exit_dialog_title">虚拟机"%1$s"启动失败</string>
     <string name="vm_exit_dialog_message">虚拟机以退出码 %1$d 退出。\n\n日志：</string>
     <string name="vm_exit_no_logs">无可用日志。</string>
+    <string name="vm_exit_see_more">查看更多</string>
 
     <string name="vm_info_start">启动</string>
     <string name="vm_info_stop">停止</string>
diff --git a/app/src/main/res/values-zh-rTW/strings.xml b/app/src/main/res/values-zh-rTW/strings.xml
index 8a6eddb06..ac7ed8b6b 100644
--- a/app/src/main/res/values-zh-rTW/strings.xml
+++ b/app/src/main/res/values-zh-rTW/strings.xml
@@ -112,6 +112,7 @@
     <string name="vm_exit_dialog_title">虛擬機器"%1$s"啟動失敗</string>
     <string name="vm_exit_dialog_message">虛擬機器以退出碼 %1$d 退出。\n\n日誌：</string>
     <string name="vm_exit_no_logs">無可用日誌。</string>
+    <string name="vm_exit_see_more">查看更多</string>
 
     <string name="vm_info_start">啟動</string>
     <string name="vm_info_stop">停止</string>
diff --git a/app/src/main/res/values/strings.xml b/app/src/main/res/values/strings.xml
index 9cb7f5594..d14f63995 100644
--- a/app/src/main/res/values/strings.xml
+++ b/app/src/main/res/values/strings.xml
@@ -113,6 +113,7 @@
     <string name="vm_exit_dialog_title">VM \"%1$s\" Failed</string>
     <string name="vm_exit_dialog_message">The virtual machine exited with code %1$d.\n\nLogs:</string>
     <string name="vm_exit_no_logs">No logs available.</string>
+    <string name="vm_exit_see_more">See more</string>
 
     <string name="vm_info_start">Start</string>
     <string name="vm_info_stop">Stop</string>

From 7412d0038701a44d4152626233a4459a9957a82e Mon Sep 17 00:00:00 2001
From: BigfootACA <bigfoot@classfun.cn>
Date: Fri, 26 Jun 2026 12:51:44 +0800
Subject: [PATCH 053/182] VMConsoleActivity: set toolbar menu button to white

Signed-off-by: BigfootACA <bigfoot@classfun.cn>
---
 .../main/java/cn/classfun/droidvm/lib/ui/MaterialMenu.java | 4 +++-
 .../classfun/droidvm/ui/vm/console/VMConsoleActivity.java  | 7 ++++++-
 2 files changed, 9 insertions(+), 2 deletions(-)

diff --git a/app/src/main/java/cn/classfun/droidvm/lib/ui/MaterialMenu.java b/app/src/main/java/cn/classfun/droidvm/lib/ui/MaterialMenu.java
index f4269146d..2ac024dea 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/ui/MaterialMenu.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/ui/MaterialMenu.java
@@ -190,7 +190,8 @@ private void applyListViewStyle() {
         listView.setDividerHeight(0);
     }
 
-    public static void setupToolbarMenu(
+    @NonNull
+    public static MenuItem setupToolbarMenu(
         @NonNull MaterialToolbar toolbar,
         @MenuRes int menuId,
         @Nullable MenuItem.OnMenuItemClickListener listener
@@ -212,6 +213,7 @@ public static void setupToolbarMenu(
             }
             return false;
         });
+        return item;
     }
 
     private static final class MenuEntry {
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/console/VMConsoleActivity.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/console/VMConsoleActivity.java
index ef0c73806..b3c8099bf 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/console/VMConsoleActivity.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/console/VMConsoleActivity.java
@@ -14,6 +14,9 @@
 import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
 import static cn.classfun.droidvm.lib.utils.ThreadUtils.runOnPool;
 
+import android.content.res.ColorStateList;
+import android.graphics.Color;
+import android.graphics.PorterDuff;
 import android.net.Uri;
 import android.os.Bundle;
 import android.os.Handler;
@@ -146,7 +149,9 @@ protected void onCreate(Bundle savedInstanceState) {
         MaterialToolbar toolbar = findViewById(R.id.toolbar);
         toolbar.setTitle(fmt("%s - %s", vmName, streamName));
         toolbar.setNavigationOnClickListener(v -> finish());
-        setupToolbarMenu(toolbar, R.menu.menu_vm_console, this::onMenuItemClicked);
+        var item = setupToolbarMenu(toolbar, R.menu.menu_vm_console, this::onMenuItemClicked);
+        item.setIconTintList(ColorStateList.valueOf(Color.WHITE));
+        item.setIconTintMode(PorterDuff.Mode.SRC_IN);
         terminalView = findViewById(R.id.terminal_view);
         terminalView.setTerminalViewClient(viewClient);
         var consoleBin = getAssetBinaryPath("droidvm");

From 6e6aa09186d72e94015b355e275bfd9759f79fd7 Mon Sep 17 00:00:00 2001
From: BigfootACA <bigfoot@classfun.cn>
Date: Fri, 26 Jun 2026 13:18:50 +0800
Subject: [PATCH 054/182] VMEditBasicTab: use single mTHP on Snapdragon 8 Gen 3

Signed-off-by: BigfootACA <bigfoot@classfun.cn>
---
 app/src/main/assets/data/gunyah.yaml            |  1 +
 .../ui/vm/edit/basic/VMEditBasicTab.java        | 17 +++++++++++++++++
 2 files changed, 18 insertions(+)

diff --git a/app/src/main/assets/data/gunyah.yaml b/app/src/main/assets/data/gunyah.yaml
index c10a4d1f3..9886f2963 100644
--- a/app/src/main/assets/data/gunyah.yaml
+++ b/app/src/main/assets/data/gunyah.yaml
@@ -11,6 +11,7 @@ gunyah:
       - SM8650QAB
     capabilities:
       gunyah: yes
+      mthp_single: yes
 
   # Qualcomm Snapdragon 8 Elite
   - socs:
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/basic/VMEditBasicTab.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/basic/VMEditBasicTab.java
index 8ab148be2..9a5bf6748 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/basic/VMEditBasicTab.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/basic/VMEditBasicTab.java
@@ -6,6 +6,7 @@
 import static cn.classfun.droidvm.lib.utils.StringUtils.getEditText;
 
 import android.text.TextUtils;
+import android.util.Log;
 import android.view.View;
 
 import androidx.annotation.NonNull;
@@ -14,6 +15,8 @@
 import com.google.android.material.textfield.TextInputEditText;
 
 import cn.classfun.droidvm.R;
+import cn.classfun.droidvm.lib.data.QcomChipName;
+import cn.classfun.droidvm.lib.data.QcomGunyahSupports;
 import cn.classfun.droidvm.lib.store.base.DataItem;
 import cn.classfun.droidvm.lib.store.vm.LendMthpMode;
 import cn.classfun.droidvm.lib.store.vm.ProtectedVM;
@@ -29,6 +32,7 @@
 import cn.classfun.droidvm.ui.widgets.row.TextInputRowWidget;
 
 public final class VMEditBasicTab extends VMEditBaseTab {
+    private final String TAG = "VMEditBasicTab";
     private TextInputRowWidget inputName;
     private TextInputRowWidget inputMemory;
     private TextInputRowWidget inputCpu;
@@ -79,6 +83,19 @@ public void initValue() {
         chooseProtectedVm.configure(ProtectedVM.class, PROTECTED_WITHOUT_FIRMWARE);
         chooseBackend.configure(VMBackend.class, VMBackend.DEFAULT);
         chooseHypervisor.configure(VMHypervisor.class, VMHypervisor.DEFAULT);
+        choosePrepareLendMthp.configure(LendMthpMode.class, LendMthpMode.CHUNKED);
+        try {
+            var socModel = QcomChipName.getCurrentSoC();
+            var gunyah = new QcomGunyahSupports(parent);
+            if (gunyah.isCapacitySupported(socModel, "no_mthp"))
+                choosePrepareLendMthp.setSelectedItem(LendMthpMode.DISABLED);
+            if (gunyah.isCapacitySupported(socModel, "mthp_chunked"))
+                choosePrepareLendMthp.setSelectedItem(LendMthpMode.CHUNKED);
+            if (gunyah.isCapacitySupported(socModel, "mthp_single"))
+                choosePrepareLendMthp.setSelectedItem(LendMthpMode.SINGLE);
+        } catch (Exception e) {
+            Log.w(TAG, "failed to load soc capacity", e);
+        }
     }
 
     @Override

From 1cffe2108ac8a5c50ef29d8a6723431546194137 Mon Sep 17 00:00:00 2001
From: BigfootACA <bigfoot@classfun.cn>
Date: Fri, 26 Jun 2026 17:05:46 +0800
Subject: [PATCH 055/182] VMEditBasicTab: add strace debug option

Signed-off-by: BigfootACA <bigfoot@classfun.cn>
---
 .../droidvm/daemon/vm/VMBackendInstance.java  | 47 +++++++++++++++++++
 .../vm/backend/CrosvmBackendInstance.java     |  4 +-
 .../vm/backend/QemuBackendInstance.java       |  4 +-
 .../ui/vm/edit/basic/VMEditBasicTab.java      |  5 +-
 .../main/res/layout/partial_vm_edit_basic.xml |  8 ++++
 app/src/main/res/values-zh-rCN/strings.xml    |  1 +
 app/src/main/res/values-zh-rTW/strings.xml    |  1 +
 app/src/main/res/values/strings.xml           |  1 +
 8 files changed, 66 insertions(+), 5 deletions(-)

diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/vm/VMBackendInstance.java b/app/src/main/java/cn/classfun/droidvm/daemon/vm/VMBackendInstance.java
index 73775521e..86d5ea32b 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/vm/VMBackendInstance.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/vm/VMBackendInstance.java
@@ -2,22 +2,35 @@
 
 import static cn.classfun.droidvm.lib.Constants.DATA_DIR;
 import static cn.classfun.droidvm.lib.natives.NativeProcess.RLIM_INFINITY;
+import static cn.classfun.droidvm.lib.utils.AssetUtils.getPrebuiltBinaryPath;
 import static cn.classfun.droidvm.lib.utils.RunUtils.run;
 import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
 import static cn.classfun.droidvm.lib.utils.StringUtils.pathJoin;
 
 import android.os.Build;
+import android.util.Log;
 
 import androidx.annotation.NonNull;
 
+import java.io.File;
 import java.util.LinkedHashMap;
+import java.util.List;
 import java.util.Map;
 
 import cn.classfun.droidvm.daemon.console.ConsoleStream;
 import cn.classfun.droidvm.lib.natives.NativeProcess;
+import cn.classfun.droidvm.lib.store.vm.VMConfig;
+import cn.classfun.droidvm.lib.utils.FileUtils;
 
 public abstract class VMBackendInstance {
+    private static final String TAG = "VMBackendInstance";
     protected final Map<String, ConsoleStream> streams = new LinkedHashMap<>();
+    protected final VMConfig config;
+    private boolean stracePrepared = false;
+
+    protected VMBackendInstance(@NonNull VMConfig config) {
+        this.config = config;
+    }
 
     @NonNull
     public abstract VMStartResult start();
@@ -65,4 +78,38 @@ protected void prepareProcess(@NonNull NativeProcess.Builder builder) {
         builder.maxLockedMemory(RLIM_INFINITY);
         cleanUpMemory();
     }
+
+    @NonNull
+    protected String getStraceFolder() {
+        var dirName = fmt("strace-%s", config.getId());
+        var dir = pathJoin(DATA_DIR, "cache", dirName);
+        var dirObj = new File(dir);
+        if (!stracePrepared) {
+            stracePrepared = true;
+            if (dirObj.exists())
+                FileUtils.shellRemoveTree(dir);
+            if (!dirObj.mkdir())
+                Log.w(TAG, "Failed to create strace directory");
+        }
+        return dir;
+    }
+
+    protected void prepareStraceArguments(@NonNull List<String> args) {
+        var item = config.item;
+        if (!item.optBoolean("strace", false)) return;
+        var strace = getPrebuiltBinaryPath("strace");
+        if (!new File(strace).exists())
+            strace = FileUtils.findExecute("strace", null);
+        if (strace == null || !new File(strace).exists()) {
+            Log.e(TAG, "no strace binary found");
+            return;
+        }
+        var dir = getStraceFolder();
+        args.add(strace);
+        args.add("-Tttrvyyff");
+        args.add("-s");
+        args.add("8192");
+        args.add("-o");
+        args.add(pathJoin(dir, "strace.log"));
+    }
 }
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/CrosvmBackendInstance.java b/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/CrosvmBackendInstance.java
index 210a6db30..e66114e38 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/CrosvmBackendInstance.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/CrosvmBackendInstance.java
@@ -51,7 +51,6 @@
 public final class CrosvmBackendInstance extends VMBackendInstance {
     private static final String TAG = "CrosvmBackendInstance";
     private static final String RUN_PATH = pathJoin(DATA_DIR, "run");
-    private final VMConfig config;
     private SerialPipe uart = null;
     private String controlSocketPath = null;
     /** Owns the per-VM native-display input sockets (crosvm-facing + UI-facing); see start(). */
@@ -62,7 +61,7 @@ public final class CrosvmBackendInstance extends VMBackendInstance {
     private final SimpleConsoleStream stdioStream;
 
     public CrosvmBackendInstance(@NonNull VMConfig config) {
-        this.config = config;
+        super(config);
         uartStream = new FDPipeConsoleStream(config, "uart", -1, -1);
         stdoutStream = new InputConsoleStream(config, "stdout", null);
         stderrStream = new InputConsoleStream(config, "stderr", null);
@@ -135,6 +134,7 @@ public VMStartResult start() {
     private List<String> buildCommand() {
         var item = config.item;
         var args = new ArrayList<String>();
+        prepareStraceArguments(args);
         args.add(getPrebuiltBinaryPath("crosvm"));
         args.add("run");
         args.add("--name");
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/QemuBackendInstance.java b/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/QemuBackendInstance.java
index 6860a19e2..3897aa929 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/QemuBackendInstance.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/QemuBackendInstance.java
@@ -47,7 +47,6 @@
 public final class QemuBackendInstance extends VMBackendInstance {
     private static final String TAG = "QemuBackendInstance";
     private static final String RUN_PATH = pathJoin(DATA_DIR, "run");
-    private final VMConfig config;
     private String qmpSocketPath = null;
     private String uartSocketPath = null;
     private int ioThreadCounter = 0;
@@ -58,7 +57,7 @@ public final class QemuBackendInstance extends VMBackendInstance {
     private final SimpleConsoleStream stdioStream;
 
     public QemuBackendInstance(@NonNull VMConfig config) {
-        this.config = config;
+        super(config);
         uartStream = new LocalSocketConsoleStream(config, "uart", null);
         stdoutStream = new InputConsoleStream(config, "stdout", null);
         stderrStream = new InputConsoleStream(config, "stderr", null);
@@ -122,6 +121,7 @@ private void waitForUartClient() {
     private List<String> buildCommand() {
         var item = config.item;
         var args = new ArrayList<String>();
+        prepareStraceArguments(args);
         args.add(getPrebuiltBinaryPath("qemu-system-aarch64"));
         args.add("-name");
         args.add(config.getName());
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/basic/VMEditBasicTab.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/basic/VMEditBasicTab.java
index 9a5bf6748..80c0609fe 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/basic/VMEditBasicTab.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/basic/VMEditBasicTab.java
@@ -44,6 +44,7 @@ public final class VMEditBasicTab extends VMEditBaseTab {
     private SwitchRowWidget swUsb;
     private SwitchRowWidget swSandbox;
     private SwitchRowWidget swHugepages;
+    private SwitchRowWidget swDebug;
     private ChooseRowWidget choosePrepareLendMthp;
     private ChooseRowWidget chooseProtectedVm;
     private ChooseRowWidget chooseBackend;
@@ -67,6 +68,7 @@ public void initView() {
         swUsb = view.findViewById(R.id.sw_usb);
         swSandbox = view.findViewById(R.id.sw_sandbox);
         swHugepages = view.findViewById(R.id.sw_hugepages);
+        swDebug = view.findViewById(R.id.sw_debug);
         choosePrepareLendMthp = view.findViewById(R.id.choose_prepare_lend_mthp);
         chooseProtectedVm = view.findViewById(R.id.choose_protected_vm);
         chooseBackend = view.findViewById(R.id.choose_backend);
@@ -79,7 +81,6 @@ public void initValue() {
         inputMemory.setValue(512, SizeUnit.MB);
         inputCpu.setValue(1);
         inputSwiotlb.setValue(64, SizeUnit.MB);
-        choosePrepareLendMthp.configure(LendMthpMode.class, LendMthpMode.DEFAULT);
         chooseProtectedVm.configure(ProtectedVM.class, PROTECTED_WITHOUT_FIRMWARE);
         chooseBackend.configure(VMBackend.class, VMBackend.DEFAULT);
         chooseHypervisor.configure(VMHypervisor.class, VMHypervisor.DEFAULT);
@@ -112,6 +113,7 @@ public void loadConfig(@NonNull VMConfig config) {
         swUsb.setChecked(item.optBoolean("usb", false));
         swSandbox.setChecked(item.optBoolean("sandbox", false));
         swHugepages.setChecked(item.optBoolean("hugepages", false));
+        swDebug.setChecked(item.optBoolean("strace", false));
         choosePrepareLendMthp.setSelectedItem(LendMthpMode.fromItem(item));
         chooseProtectedVm.setSelectedItem(optEnum(item, "protected_vm", PROTECTED_WITHOUT_FIRMWARE));
         chooseBackend.setSelectedItem(optEnum(item, "backend", VMBackend.DEFAULT));
@@ -206,6 +208,7 @@ public void saveConfig(@NonNull VMConfig config) {
         item.set("usb", swUsb.isChecked());
         item.set("sandbox", swSandbox.isChecked());
         item.set("hugepages", swHugepages.isChecked());
+        item.set("strace", swDebug.isChecked());
         LendMthpMode lendMthpMode = choosePrepareLendMthp.getSelectedItem();
         item.set(LendMthpMode.KEY, lendMthpMode);
         ProtectedVM pvm = chooseProtectedVm.getSelectedItem();
diff --git a/app/src/main/res/layout/partial_vm_edit_basic.xml b/app/src/main/res/layout/partial_vm_edit_basic.xml
index 7faec6450..4489f872f 100644
--- a/app/src/main/res/layout/partial_vm_edit_basic.xml
+++ b/app/src/main/res/layout/partial_vm_edit_basic.xml
@@ -142,6 +142,14 @@
             android:icon="@drawable/ic_usb"
             android:text="@string/create_vm_usb" />
 
+        <cn.classfun.droidvm.ui.widgets.row.SwitchRowWidget
+            android:id="@+id/sw_debug"
+            android:layout_width="match_parent"
+            android:layout_height="wrap_content"
+            android:checked="true"
+            android:icon="@drawable/ic_bug"
+            android:text="@string/create_vm_debug" />
+
     </cn.classfun.droidvm.ui.widgets.container.CollapsibleContainer>
 
     <cn.classfun.droidvm.ui.widgets.container.CollapsibleContainer
diff --git a/app/src/main/res/values-zh-rCN/strings.xml b/app/src/main/res/values-zh-rCN/strings.xml
index fde9c3f0a..6f0667c0d 100644
--- a/app/src/main/res/values-zh-rCN/strings.xml
+++ b/app/src/main/res/values-zh-rCN/strings.xml
@@ -177,6 +177,7 @@
     <string name="create_vm_rng">RNG (随机数生成器)</string>
     <string name="create_vm_smt">SMT (同步多线程)</string>
     <string name="create_vm_usb">USB (通用串行总线)</string>
+    <string name="create_vm_debug">调试追踪</string>
     <string name="create_vm_protected_vm">保护模式</string>
     <string name="create_vm_swiotlb_hint">SWIOTLB 大小（保护模式）</string>
     <string name="create_vm_sandbox">沙箱</string>
diff --git a/app/src/main/res/values-zh-rTW/strings.xml b/app/src/main/res/values-zh-rTW/strings.xml
index ac7ed8b6b..46864f453 100644
--- a/app/src/main/res/values-zh-rTW/strings.xml
+++ b/app/src/main/res/values-zh-rTW/strings.xml
@@ -176,6 +176,7 @@
     <string name="create_vm_rng">RNG (隨機數生成器)</string>
     <string name="create_vm_smt">SMT (同步多執行緒)</string>
     <string name="create_vm_usb">USB (通用序列匯流排)</string>
+    <string name="create_vm_debug">除錯追蹤</string>
     <string name="create_vm_protected_vm">保護模式</string>
     <string name="create_vm_swiotlb_hint">SWIOTLB 大小（保護模式）</string>
     <string name="create_vm_sandbox">沙箱</string>
diff --git a/app/src/main/res/values/strings.xml b/app/src/main/res/values/strings.xml
index d14f63995..632d40281 100644
--- a/app/src/main/res/values/strings.xml
+++ b/app/src/main/res/values/strings.xml
@@ -179,6 +179,7 @@
     <string name="create_vm_rng">RNG (Random Number Generator)</string>
     <string name="create_vm_smt">SMT (Simultaneous MultiThread)</string>
     <string name="create_vm_usb">USB (Universal Serial Bus)</string>
+    <string name="create_vm_debug">Debug trace</string>
     <string name="create_vm_protected_vm">Protected VM</string>
     <string name="create_vm_swiotlb_hint">SWIOTLB Size (Protected VM)</string>
     <string name="create_vm_sandbox">Sandbox</string>

From 671b3f49b0d59ed5382f7bfe9b7e981f8d961c5d Mon Sep 17 00:00:00 2001
From: BigfootACA <bigfoot@classfun.cn>
Date: Sat, 27 Jun 2026 11:04:32 +0800
Subject: [PATCH 056/182] assets: update prebuilts

https://github.com/Droid-VM/DroidVM-Prebuilt-Root/commit/abccf596613f41c475376a7ed29c9d29b1dac559

Signed-off-by: BigfootACA <bigfoot@classfun.cn>
---
 app/src/main/assets/prebuilts | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/app/src/main/assets/prebuilts b/app/src/main/assets/prebuilts
index 56a9a9955..a6a039afa 160000
--- a/app/src/main/assets/prebuilts
+++ b/app/src/main/assets/prebuilts
@@ -1 +1 @@
-Subproject commit 56a9a99551ad70293f33b4c45c6ebb48ecd08074
+Subproject commit a6a039afafe28b8b835570f60fd63bcc6218d753

From 36150b5a1e23c4f1d3b4f5982be66059ed5cba59 Mon Sep 17 00:00:00 2001
From: BigfootACA <bigfoot@classfun.cn>
Date: Sat, 27 Jun 2026 10:46:49 +0800
Subject: [PATCH 057/182] strings.xml: add missing zh-rTW translations

Signed-off-by: BigfootACA <bigfoot@classfun.cn>
---
 app/src/main/res/values-zh-rTW/strings.xml | 11 +++++++++++
 1 file changed, 11 insertions(+)

diff --git a/app/src/main/res/values-zh-rTW/strings.xml b/app/src/main/res/values-zh-rTW/strings.xml
index 46864f453..7273b783a 100644
--- a/app/src/main/res/values-zh-rTW/strings.xml
+++ b/app/src/main/res/values-zh-rTW/strings.xml
@@ -132,6 +132,7 @@
     <string name="vm_info_console_not_found">找不到任何控制台</string>
     <string name="vm_info_console_text_select">文字控制台 %1$s</string>
     <string name="vm_info_console_vnc_select">VNC 控制台</string>
+    <string name="vm_info_console_native_select">原生顯示</string>
     <string name="vm_info_console_vnc_ext_select">外部顯示器的 VNC</string>
 
     <string name="vm_info_logs">日誌</string>
@@ -182,6 +183,9 @@
     <string name="create_vm_sandbox">沙箱</string>
     <string name="create_vm_hugepages">大頁記憶體</string>
     <string name="create_vm_prepare_lend_mthp">預分配大頁</string>
+    <string name="create_vm_prepare_lend_mthp_disabled">停用</string>
+    <string name="create_vm_prepare_lend_mthp_single">單次 (整塊借出)</string>
+    <string name="create_vm_prepare_lend_mthp_chunked">分塊 (≤256MiB)</string>
     <string name="create_vm_protected_normal">普通</string>
     <string name="create_vm_protected_protected">保護</string>
     <string name="create_vm_protected_without_firmware">無韌體保護</string>
@@ -210,6 +214,7 @@
     <string name="create_vm_display_dpi_v">垂直DPI</string>
     <string name="create_vm_category_vnc">VNC 伺服器</string>
     <string name="create_vm_vnc_enabled">啟用 VNC</string>
+    <string name="create_vm_native_display_enabled">啟用原生顯示 (virtio-gpu)</string>
     <string name="create_vm_vnc_host">主機地址</string>
     <string name="create_vm_vnc_port">埠</string>
     <string name="create_vm_vnc_password_auth">密碼認證</string>
@@ -799,6 +804,12 @@
     <string name="vnc_display_connect_failed">無法連線到 VNC 伺服器</string>
     <string name="vnc_display_fullscreen">全屏</string>
 
+    <string name="native_display_title">原生顯示器</string>
+    <string name="native_display_connecting">正在連接…</string>
+    <string name="native_display_waiting">正在等待虛擬機器畫面…</string>
+    <string name="native_display_connected">已連接 - %1$dx%2$d</string>
+    <string name="native_display_failed">原生顯示啟動失敗</string>
+
     <string name="vnc_menu_keyboard">軟鍵盤</string>
     <string name="vnc_menu_extra_keys">額外按鍵</string>
     <string name="vnc_menu_fullscreen">全屏</string>

From 5c0149c06982b9d2b9b0ac0e7bda93166a6a502b Mon Sep 17 00:00:00 2001
From: BigfootACA <bigfoot@classfun.cn>
Date: Sat, 27 Jun 2026 10:55:48 +0800
Subject: [PATCH 058/182] strings.xml: fix ASCII compatible in default
 strings.xml

Signed-off-by: BigfootACA <bigfoot@classfun.cn>
---
 app/src/main/res/values/strings.xml | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/app/src/main/res/values/strings.xml b/app/src/main/res/values/strings.xml
index 632d40281..abf3e6087 100644
--- a/app/src/main/res/values/strings.xml
+++ b/app/src/main/res/values/strings.xml
@@ -187,7 +187,7 @@
     <string name="create_vm_prepare_lend_mthp">Prepare Lend mTHP</string>
     <string name="create_vm_prepare_lend_mthp_disabled">Disabled</string>
     <string name="create_vm_prepare_lend_mthp_single">Single (whole region)</string>
-    <string name="create_vm_prepare_lend_mthp_chunked">Chunked (≤256MiB)</string>
+    <string name="create_vm_prepare_lend_mthp_chunked">Chunked (&#8804;256MiB)</string>
     <string name="create_vm_protected_normal">Normal</string>
     <string name="create_vm_protected_protected">Protected</string>
     <string name="create_vm_protected_without_firmware">Protected without firmware</string>
@@ -842,8 +842,8 @@
     <string name="vnc_display_fullscreen">Fullscreen</string>
 
     <string name="native_display_title">Native Display</string>
-    <string name="native_display_connecting">Connecting…</string>
-    <string name="native_display_waiting">Waiting for VM display…</string>
+    <string name="native_display_connecting">Connecting...</string>
+    <string name="native_display_waiting">Waiting for VM display...</string>
     <string name="native_display_connected">Connected - %1$dx%2$d</string>
     <string name="native_display_failed">Failed to start native display</string>
 

From 8093cd0d609afc4a5829b8edfb88a84c00d6ba70 Mon Sep 17 00:00:00 2001
From: BigfootACA <bigfoot@classfun.cn>
Date: Sat, 27 Jun 2026 14:36:15 +0800
Subject: [PATCH 059/182] VMEditBasicTab: disable debug trace by default

Signed-off-by: BigfootACA <bigfoot@classfun.cn>
---
 .../cn/classfun/droidvm/ui/vm/edit/basic/VMEditBasicTab.java     | 1 +
 1 file changed, 1 insertion(+)

diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/basic/VMEditBasicTab.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/basic/VMEditBasicTab.java
index 80c0609fe..f6d8eeebe 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/basic/VMEditBasicTab.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/basic/VMEditBasicTab.java
@@ -81,6 +81,7 @@ public void initValue() {
         inputMemory.setValue(512, SizeUnit.MB);
         inputCpu.setValue(1);
         inputSwiotlb.setValue(64, SizeUnit.MB);
+        swDebug.setChecked(false);
         chooseProtectedVm.configure(ProtectedVM.class, PROTECTED_WITHOUT_FIRMWARE);
         chooseBackend.configure(VMBackend.class, VMBackend.DEFAULT);
         chooseHypervisor.configure(VMHypervisor.class, VMHypervisor.DEFAULT);

From 638961dd293b8257e7cc96748b694e759d8bae9e Mon Sep 17 00:00:00 2001
From: BigfootACA <bigfoot@classfun.cn>
Date: Sat, 27 Jun 2026 14:36:54 +0800
Subject: [PATCH 060/182] VirtualizationStepFragment: remove com.android.virt
 from failed string

Signed-off-by: BigfootACA <bigfoot@classfun.cn>
---
 .../droidvm/ui/setup/step/VirtualizationStepFragment.java       | 2 +-
 app/src/main/res/values-zh-rCN/strings.xml                      | 2 +-
 app/src/main/res/values-zh-rTW/strings.xml                      | 2 +-
 app/src/main/res/values/strings.xml                             | 2 +-
 4 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/app/src/main/java/cn/classfun/droidvm/ui/setup/step/VirtualizationStepFragment.java b/app/src/main/java/cn/classfun/droidvm/ui/setup/step/VirtualizationStepFragment.java
index 14851c791..8a8aee400 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/setup/step/VirtualizationStepFragment.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/setup/step/VirtualizationStepFragment.java
@@ -67,10 +67,10 @@ private void operationThread() {
             if (!isAdded()) return;
             if (finalSuccess) {
                 showSuccess(R.string.setup_virt_title, R.string.setup_virt_success);
-                showDetail(displayString.toString());
             } else {
                 showError(R.string.setup_virt_title, R.string.setup_virt_fail);
             }
+            showDetail(displayString.toString());
         });
     }
 
diff --git a/app/src/main/res/values-zh-rCN/strings.xml b/app/src/main/res/values-zh-rCN/strings.xml
index 6f0667c0d..9467c7d6d 100644
--- a/app/src/main/res/values-zh-rCN/strings.xml
+++ b/app/src/main/res/values-zh-rCN/strings.xml
@@ -42,7 +42,7 @@
     <string name="setup_virt_title">检查虚拟化支持</string>
     <string name="setup_virt_desc">正在检查虚拟化支持&#8230;</string>
     <string name="setup_virt_success">\u2705 已找到虚拟化支持。</string>
-    <string name="setup_virt_fail">\u274C 未找到虚拟化支持，请确认已安装 com.android.virt APEX。</string>
+    <string name="setup_virt_fail">\u274C 未找到虚拟化支持。</string>
 
     <string name="setup_storage_title">文件访问权限</string>
     <string name="setup_storage_desc">正在检查文件访问权限&#8230;</string>
diff --git a/app/src/main/res/values-zh-rTW/strings.xml b/app/src/main/res/values-zh-rTW/strings.xml
index 7273b783a..1804c2046 100644
--- a/app/src/main/res/values-zh-rTW/strings.xml
+++ b/app/src/main/res/values-zh-rTW/strings.xml
@@ -42,7 +42,7 @@
     <string name="setup_virt_title">檢查虛擬化支援</string>
     <string name="setup_virt_desc">正在檢查虛擬化支援&#8230;</string>
     <string name="setup_virt_success">\u2705 已找到虛擬化支援。</string>
-    <string name="setup_virt_fail">\u274C 未找到虛擬化支援，請確認已安裝 com.android.virt APEX。</string>
+    <string name="setup_virt_fail">\u274C 未找到虛擬化支援。</string>
 
     <string name="setup_storage_title">檔案存取權限</string>
     <string name="setup_storage_desc">正在檢查檔案存取權限&#8230;</string>
diff --git a/app/src/main/res/values/strings.xml b/app/src/main/res/values/strings.xml
index abf3e6087..3d6f816ad 100644
--- a/app/src/main/res/values/strings.xml
+++ b/app/src/main/res/values/strings.xml
@@ -43,7 +43,7 @@
     <string name="setup_virt_title">Check Virtualization</string>
     <string name="setup_virt_desc">Checking virtualization support&#8230;</string>
     <string name="setup_virt_success">\u2705 Virtualization support found.</string>
-    <string name="setup_virt_fail">\u274C Virtualization support not found. Please ensure the com.android.virt APEX is available.</string>
+    <string name="setup_virt_fail">\u274C Virtualization support not found.</string>
 
     <string name="setup_storage_title">File Access</string>
     <string name="setup_storage_desc">Checking file access permission&#8230;</string>

From cdfed1c50bea9a3caf59e18d5799144dd38b4cf9 Mon Sep 17 00:00:00 2001
From: BigfootACA <bigfoot@classfun.cn>
Date: Sat, 27 Jun 2026 15:22:18 +0800
Subject: [PATCH 061/182] README.md: add GenieZone and KVM

Signed-off-by: BigfootACA <bigfoot@classfun.cn>
---
 README.md                                  | 15 ++++++++++++---
 README.zh.md                               | 16 ++++++++++++----
 app/src/main/res/values-zh-rCN/strings.xml | 10 +++++-----
 app/src/main/res/values-zh-rTW/strings.xml | 10 +++++-----
 app/src/main/res/values/strings.xml        | 10 +++++-----
 5 files changed, 39 insertions(+), 22 deletions(-)

diff --git a/README.md b/README.md
index f8fe90236..957ed79f7 100644
--- a/README.md
+++ b/README.md
@@ -4,7 +4,13 @@
 
 [简体中文](README.zh.md) | [English](README.md)
 
-A virtual machine manager for Android, powered by the **Qualcomm Gunyah Hypervisor**
+An Android virtual machine manager with support for multiple hypervisors, including Qualcomm Gunyah, MediaTek GenieZone, and Linux KVM.
+
+Supported hypervisors:
+
+- Qualcomm Gunyah (`/dev/gunyah`)
+- MediaTek GenieZone (`/dev/gzvm`)
+- Linux KVM (`/dev/kvm`)
 
 Create and manage lightweight VMs directly on your device with near-native performance.
 
@@ -34,8 +40,11 @@ Create and manage lightweight VMs directly on your device with near-native perfo
 
 - **Android 13** (API 33) or newer
 - **Root access** (Magisk, KernelSU, APatch, or similar)
-- **Qualcomm Snapdragon 8 Gen 3** (SM8650) or newer SoC, **Qualcomm Snapdragon 8 Elite** (SM8750) recommended, with Gunyah Hypervisor enabled
-- **Virtualization** enabled (/dev/gunyah or /dev/kvm)
+- A supported ARM64 device with hardware virtualization enabled by firmware and kernel:
+  - Qualcomm: **Snapdragon 8 Gen 3** (SM8650) or newer SoC, **Snapdragon 8 Elite** (SM8750) recommended, with Gunyah enabled
+  - MediaTek: **Dimensity 9000** or newer SoC with GenieZone enabled
+  - Other ARM64 devices: booted with EL2 and Linux KVM enabled
+- An available virtualization device node: `/dev/gunyah`, `/dev/gzvm`, or `/dev/kvm`
 
 ## Building
 
diff --git a/README.zh.md b/README.zh.md
index d98bc93c4..222ef4706 100644
--- a/README.zh.md
+++ b/README.zh.md
@@ -4,7 +4,13 @@
 
 [简体中文](README.zh.md) | [English](README.md)
 
-基于 **高通 Gunyah Hypervisor** 的 Android 虚拟机管理器
+支持多种 Hypervisor 的 Android 虚拟机管理器，包括高通 Gunyah、联发科 GenieZone 和 Linux KVM。
+
+支持的虚拟化方案：
+
+- 高通 Gunyah（`/dev/gunyah`）
+- 联发科 GenieZone（`/dev/gzvm`）
+- Linux KVM（`/dev/kvm`）
 
 在安卓设备上直接创建和管理轻量级虚拟机，享受接近原生的性能。
 
@@ -34,8 +40,11 @@
 
 - **Android 13**（API 33）或更高版本
 - **Root 权限**（Magisk、KernelSU、APatch 或类似工具）
-- **高通骁龙 8 Gen 3**（SM8650）或更新的 SoC，推荐 **高通骁龙 8 Elite**（SM8750），需启用 Gunyah Hypervisor
-- 已启用 **虚拟化** 支持（/dev/gunyah 或 /dev/kvm）
+- 固件和内核已启用硬件虚拟化的 ARM64 设备：
+  - 高通：**骁龙 8 Gen 3**（SM8650）或更新 SoC，推荐 **骁龙 8 Elite**（SM8750），需启用 Gunyah
+  - 联发科：**天玑 9000** 或更新 SoC，需启用 GenieZone
+  - 其他 ARM64 设备：以 EL2 启动，并启用 Linux KVM
+- 可用的虚拟化设备节点：`/dev/gunyah`、`/dev/gzvm` 或 `/dev/kvm`
 
 ## 构建
 
@@ -59,4 +68,3 @@ git submodule update --init --recursive
 ## 许可证
 
 本项目基于 **GNU 通用公共许可证 v3.0** 发布。详见 [LICENSE.txt](LICENSE.txt)。
-
diff --git a/app/src/main/res/values-zh-rCN/strings.xml b/app/src/main/res/values-zh-rCN/strings.xml
index 9467c7d6d..4707a9ea7 100644
--- a/app/src/main/res/values-zh-rCN/strings.xml
+++ b/app/src/main/res/values-zh-rCN/strings.xml
@@ -2,17 +2,17 @@
 <resources>
     <string name="app_name">DroidVM</string>
 
-    <string name="start_app_desc">基于高通 Gunyah 虚拟机监视器的虚拟机管理器，可在设备上直接创建和管理轻量级 Linux 虚拟机。</string>
+    <string name="start_app_desc">支持高通 Gunyah、联发科 GenieZone 和 Linux KVM 的 Android 虚拟机管理器，可在设备上直接创建和管理轻量级 Linux 或 Windows 虚拟机。</string>
     <string name="start_faq_title">常见问题</string>
 
-    <string name="faq1_title">什么是 Gunyah？</string>
-    <string name="faq1_body">Gunyah 是高通开发的 Type-1 虚拟机监视器，直接运行在 Android 宿主系统的硬件层之下。它可以创建具有接近原生性能和强安全保障的隔离虚拟机，无需依赖内核级虚拟化（KVM）。</string>
+    <string name="faq1_title">什么是虚拟化？</string>
+    <string name="faq1_body">Gunyah：高通开发的 Type-1 虚拟机监视器，提供受保护的虚拟机支持。\nGenieZone：联发科开发的 Type-1 虚拟机监视器，提供硬件辅助虚拟机支持。\nLinux KVM：Linux 内核内置的虚拟化框架，适用于以 EL2 启动且启用虚拟化扩展的 ARM64 设备。</string>
 
     <string name="faq2_title">支持哪些设备？</string>
-    <string name="faq2_body">目前仅支持搭载高通骁龙 8 Elite（SM8750）或更新 SoC 且已启用 Gunyah 支持的设备。旧款骁龙芯片组不包含必要的虚拟机监视器固件。</string>
+    <string name="faq2_body">高通：骁龙 8 Gen 3（SM8650）或更新 SoC 且已启用 Gunyah 的设备，推荐骁龙 8 Elite（SM8750）或更新平台。\n联发科：天玑 9000 或更新 SoC 且已启用 GenieZone 的设备。\nLinux KVM：以 EL2 启动的 ARM64 设备，例如 Google Tensor、瑞芯微等平台。</string>
 
     <string name="faq3_title">有哪些环境要求？</string>
-    <string name="faq3_body">1. Root 权限（如 Magisk 或 KernelSU）。\n2. 必须安装虚拟化 APEX（com.android.virt），其中提供了 crosvm 二进制文件。\n3. 支持的高通 SoC，且固件中已启用 Gunyah 虚拟机监视器。</string>
+    <string name="faq3_body">1. Root 权限（如 Magisk、KernelSU 或 APatch）。\n2. 支持的 ARM64 SoC，且固件和内核已启用 Gunyah、GenieZone 或 Linux KVM。\n3. 可用的虚拟化设备节点：/dev/gunyah、/dev/gzvm 或 /dev/kvm。</string>
 
     <string name="unimplement">功能未实现</string>
 
diff --git a/app/src/main/res/values-zh-rTW/strings.xml b/app/src/main/res/values-zh-rTW/strings.xml
index 1804c2046..9f5ba258f 100644
--- a/app/src/main/res/values-zh-rTW/strings.xml
+++ b/app/src/main/res/values-zh-rTW/strings.xml
@@ -2,17 +2,17 @@
 <resources>
     <string name="app_name">DroidVM</string>
 
-    <string name="start_app_desc">基於高通 Gunyah 虛擬機器監視器的虛擬機器管理器，可在裝置上直接建立和管理輕量級 Linux 虛擬機器。</string>
+    <string name="start_app_desc">支援高通 Gunyah、聯發科 GenieZone 和 Linux KVM 的 Android 虛擬機器管理器，可在裝置上直接建立和管理輕量級 Linux 或 Windows 虛擬機器。</string>
     <string name="start_faq_title">常見問題</string>
 
-    <string name="faq1_title">什麼是 Gunyah？</string>
-    <string name="faq1_body">Gunyah 是高通開發的 Type-1 虛擬機器監視器，直接執行在 Android 宿主系統的硬體層之下。它可以建立具有接近原生效能和強安全保障的隔離虛擬機器，無需依賴核心級虛擬化（KVM）。</string>
+    <string name="faq1_title">什麼是虛擬化？</string>
+    <string name="faq1_body">Gunyah：高通開發的 Type-1 虛擬機器監視器，提供受保護的虛擬機器支援。\nGenieZone：聯發科開發的 Type-1 虛擬機器監視器，提供硬體輔助虛擬機器支援。\nLinux KVM：Linux 核心內建的虛擬化框架，適用於以 EL2 啟動且啟用虛擬化擴充的 ARM64 裝置。</string>
 
     <string name="faq2_title">支援哪些裝置？</string>
-    <string name="faq2_body">目前僅支援搭載高通驍龍 8 Elite（SM8750）或更新 SoC 且已啟用 Gunyah 支援的裝置。舊款驍龍晶片組不包含必要的虛擬機器監視器韌體。</string>
+    <string name="faq2_body">高通：驍龍 8 Gen 3（SM8650）或更新 SoC 且已啟用 Gunyah 的裝置，建議使用驍龍 8 Elite（SM8750）或更新平台。\n聯發科：天璣 9000 或更新 SoC 且已啟用 GenieZone 的裝置。\nLinux KVM：以 EL2 啟動的 ARM64 裝置，例如 Google Tensor、瑞芯微等平台。</string>
 
     <string name="faq3_title">有哪些環境要求？</string>
-    <string name="faq3_body">1. Root 權限（如 Magisk 或 KernelSU）。\n2. 必須安裝虛擬化 APEX（com.android.virt），其中提供了 crosvm 二進位檔案。\n3. 支援的高通 SoC，且韌體中已啟用 Gunyah 虛擬機器監視器。</string>
+    <string name="faq3_body">1. Root 權限（如 Magisk、KernelSU 或 APatch）。\n2. 支援的 ARM64 SoC，且韌體和核心已啟用 Gunyah、GenieZone 或 Linux KVM。\n3. 可用的虛擬化裝置節點：/dev/gunyah、/dev/gzvm 或 /dev/kvm。</string>
 
     <string name="unimplement">功能未實現</string>
 
diff --git a/app/src/main/res/values/strings.xml b/app/src/main/res/values/strings.xml
index 3d6f816ad..9dc1642ca 100644
--- a/app/src/main/res/values/strings.xml
+++ b/app/src/main/res/values/strings.xml
@@ -3,17 +3,17 @@
     <string name="nullptr" translatable="false" />
     <string name="app_name">DroidVM</string>
 
-    <string name="start_app_desc">A virtual machine manager powered by Qualcomm Gunyah Hypervisor. Create and manage lightweight Linux VMs directly on your device.</string>
+    <string name="start_app_desc">A virtual machine manager for Android with support for Qualcomm Gunyah, MediaTek GenieZone, and Linux KVM. Create and manage lightweight Linux or Windows VMs directly on your device.</string>
     <string name="start_faq_title">Frequently Asked Questions</string>
 
-    <string name="faq1_title">What is Gunyah?</string>
-    <string name="faq1_body">Gunyah is a Type-1 hypervisor developed by Qualcomm that runs directly on the hardware beneath the Android host OS. It allows creating isolated virtual machines with near-native performance and strong security guarantees, without relying on kernel-level virtualization (KVM).</string>
+    <string name="faq1_title">What is virtualization?</string>
+    <string name="faq1_body">Gunyah: a Type-1 hypervisor developed by Qualcomm for protected virtual machines.\nGenieZone: a Type-1 hypervisor developed by MediaTek for hardware-assisted virtual machines.\nLinux KVM: the Linux kernel virtualization framework, available on ARM64 devices booted with EL2 and virtualization extensions enabled.</string>
 
     <string name="faq2_title">Which devices are supported?</string>
-    <string name="faq2_body">Currently only devices with Qualcomm Snapdragon 8 Elite (SM8750) or newer SoCs that ship with Gunyah support enabled are supported. Older Snapdragon chipsets do not include the necessary hypervisor firmware.</string>
+    <string name="faq2_body">Qualcomm: Snapdragon 8 Gen 3 (SM8650) or newer SoCs with Gunyah enabled. Snapdragon 8 Elite (SM8750) or newer is recommended.\nMediaTek: Dimensity 9000 or newer SoCs with GenieZone enabled.\nLinux KVM: ARM64 devices booted with EL2, such as Google Tensor and Rockchip devices.</string>
 
     <string name="faq3_title">What are the environment requirements?</string>
-    <string name="faq3_body">1. Root access (e.g. Magisk or KernelSU).\n2. The virtualization APEX (com.android.virt) must be installed, which provides the crosvm binary.\n3. A supported Qualcomm SoC with Gunyah hypervisor enabled in firmware.</string>
+    <string name="faq3_body">1. Root access (for example, Magisk, KernelSU, or APatch).\n2. A supported ARM64 SoC with Gunyah, GenieZone, or Linux KVM enabled by firmware and kernel.\n3. An available virtualization device node: /dev/gunyah, /dev/gzvm, or /dev/kvm.</string>
 
     <string name="unimplement">Function not implement</string>
 

From b5e2cade221d8f3dd3a72aca1b8c7c6146cbed3c Mon Sep 17 00:00:00 2001
From: BigfootACA <bigfoot@classfun.cn>
Date: Sat, 27 Jun 2026 15:22:51 +0800
Subject: [PATCH 062/182] MainHomeFragment: set document url to github pages

Signed-off-by: BigfootACA <bigfoot@classfun.cn>
---
 app/src/main/java/cn/classfun/droidvm/lib/Constants.java       | 1 -
 .../cn/classfun/droidvm/ui/main/home/MainHomeFragment.java     | 3 +--
 app/src/main/res/values-zh-rCN/strings.xml                     | 1 +
 app/src/main/res/values-zh-rTW/strings.xml                     | 1 +
 app/src/main/res/values/strings.xml                            | 1 +
 5 files changed, 4 insertions(+), 3 deletions(-)

diff --git a/app/src/main/java/cn/classfun/droidvm/lib/Constants.java b/app/src/main/java/cn/classfun/droidvm/lib/Constants.java
index f15802dd9..9256ea2c1 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/Constants.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/Constants.java
@@ -18,7 +18,6 @@ public final class Constants {
     public static final String PATH_BUILTIN_INITRD = pathJoin(DATA_DIR, "/usr/share/droidvm/initramfs.img");
     public static final String PATH_EDK2_FIRMWARE = pathJoin(DATA_DIR, "/usr/share/droidvm/edk2-gunyah.fd");
     public static final String PATH_EDK2_QEMU_FIRMWARE = pathJoin(DATA_DIR, "/usr/share/droidvm/edk2-qemu.fd");
-    public static final String GITHUB_WIKI_URL = "https://github.com/Droid-VM/DroidVM/wiki";
     public static final String GITHUB_ISSUE_URL = "https://github.com/Droid-VM/DroidVM/issues";
     // droidvm + daemon are CMake-built and shipped as APK assets. The
     // third-party daemons (gvswitch/pbridge/bridgedhcp/netbox) and lbx now
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/main/home/MainHomeFragment.java b/app/src/main/java/cn/classfun/droidvm/ui/main/home/MainHomeFragment.java
index fe78d4fd4..47e1261df 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/main/home/MainHomeFragment.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/main/home/MainHomeFragment.java
@@ -3,7 +3,6 @@
 import static android.content.Intent.ACTION_VIEW;
 import static android.widget.Toast.LENGTH_SHORT;
 import static cn.classfun.droidvm.lib.Constants.GITHUB_ISSUE_URL;
-import static cn.classfun.droidvm.lib.Constants.GITHUB_WIKI_URL;
 import static cn.classfun.droidvm.lib.size.SizeUtils.formatSize;
 import static cn.classfun.droidvm.lib.utils.ThreadUtils.runOnPool;
 
@@ -113,7 +112,7 @@ public void onViewCreated(@NonNull View view, @Nullable Bundle savedInstanceStat
         view.findViewById(R.id.card_network).setOnClickListener(v -> navigateToTab(R.id.nav_network));
         view.findViewById(R.id.card_wizard).setOnClickListener(v -> openWizard());
         view.findViewById(R.id.card_import).setOnClickListener(v -> openImport());
-        view.findViewById(R.id.card_help).setOnClickListener(v -> openLink(GITHUB_WIKI_URL));
+        view.findViewById(R.id.card_help).setOnClickListener(v -> openLink(getString(R.string.home_card_help_url)));
         view.findViewById(R.id.card_feedback).setOnClickListener(v -> openLink(GITHUB_ISSUE_URL));
         cardUpdate.setOnClickListener(v -> showUpdateDialog());
         checkForUpdate();
diff --git a/app/src/main/res/values-zh-rCN/strings.xml b/app/src/main/res/values-zh-rCN/strings.xml
index 4707a9ea7..57eaa15ee 100644
--- a/app/src/main/res/values-zh-rCN/strings.xml
+++ b/app/src/main/res/values-zh-rCN/strings.xml
@@ -86,6 +86,7 @@
     <string name="home_card_help_title">帮助与文档</string>
     <string name="home_card_feedback_title">反馈问题</string>
     <string name="home_card_loading">加载中\u2026</string>
+    <string name="home_card_help_url">https://droid-vm.github.io/</string>
 
     <string name="vm_empty">暂无虚拟机。</string>
     <string name="disk_empty">暂无磁盘。</string>
diff --git a/app/src/main/res/values-zh-rTW/strings.xml b/app/src/main/res/values-zh-rTW/strings.xml
index 9f5ba258f..8ff732ffe 100644
--- a/app/src/main/res/values-zh-rTW/strings.xml
+++ b/app/src/main/res/values-zh-rTW/strings.xml
@@ -86,6 +86,7 @@
     <string name="home_card_help_title">幫助與文件</string>
     <string name="home_card_feedback_title">反饋問題</string>
     <string name="home_card_loading">載入中\u2026</string>
+    <string name="home_card_help_url">https://droid-vm.github.io/</string>
 
     <string name="vm_empty">暫無虛擬機器。</string>
     <string name="disk_empty">暫無磁碟。</string>
diff --git a/app/src/main/res/values/strings.xml b/app/src/main/res/values/strings.xml
index 9dc1642ca..e6b5d8c90 100644
--- a/app/src/main/res/values/strings.xml
+++ b/app/src/main/res/values/strings.xml
@@ -87,6 +87,7 @@
     <string name="home_card_help_title">Help &amp; Documentation</string>
     <string name="home_card_feedback_title">Report Issue</string>
     <string name="home_card_loading">Loading\u2026</string>
+    <string name="home_card_help_url">https://droid-vm.github.io/en/</string>
 
     <string name="vm_empty">No virtual machines yet.</string>
     <string name="disk_empty">No disks yet.</string>

From 3c32f7d8062394f45e0cacf1889b4f4c9325d86b Mon Sep 17 00:00:00 2001
From: HuJK <gh@hujk.oeg>
Date: Sat, 27 Jun 2026 21:43:05 +0800
Subject: [PATCH 063/182] (fix) add lock=false on scsi drive

---
 .../droidvm/daemon/vm/backend/CrosvmBackendInstance.java         | 1 +
 1 file changed, 1 insertion(+)

diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/CrosvmBackendInstance.java b/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/CrosvmBackendInstance.java
index e66114e38..7a4e9a566 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/CrosvmBackendInstance.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/CrosvmBackendInstance.java
@@ -241,6 +241,7 @@ private void buildDiskCommand(@NonNull List<String> args) {
             var arg = new StringBuilder(path);
             switch (bus) {
                 case SCSI:
+                    arg.append(",lock=false");
                     if (readonly) arg.append(",ro=true");
                     args.add("--scsi-block");
                     args.add(arg.toString());

From bde5d51505508d8bb522370a87541e1c9c493006 Mon Sep 17 00:00:00 2001
From: HuJK <gh@hujk.oeg>
Date: Sat, 27 Jun 2026 21:58:24 +0800
Subject: [PATCH 064/182] build: skip prebuilts submodule checkout in local
 build flow

When DroidVM-Prebuilt-Root is active the prebuilts are regenerated by
auto-build.py, so checking out the DroidVM-Prebuilts submodule only
clobbers the locally-built artifacts and moves the recorded pointer.
Update every other submodule instead.
---
 build.sh | 13 ++++++++++++-
 1 file changed, 12 insertions(+), 1 deletion(-)

diff --git a/build.sh b/build.sh
index 21648066e..8b99be568 100755
--- a/build.sh
+++ b/build.sh
@@ -66,8 +66,19 @@ fi
 # ---------------------------------------------------------------- submodules
 # Includes the DroidVM-Prebuilts submodule (prebuilt artifacts) and the CMake
 # submodules (libvncserver, jsoncpp, udisasm).
+PREBUILT_SUBMODULE="app/src/main/assets/prebuilts"
 log "Initializing git submodules"
-git submodule update --init --recursive
+if prebuilt_root_active; then
+    # Local build flow: prebuilts are regenerated by auto-build.py, so checking
+    # out the DroidVM-Prebuilts submodule would only clobber the locally-built
+    # artifacts (and move the recorded pointer). Update every other submodule.
+    log "Local prebuilt build active; skipping $PREBUILT_SUBMODULE checkout"
+    paths=$(git config -f .gitmodules --get-regexp '^submodule\..*\.path$' \
+        | awk '{print $2}' | grep -vx "$PREBUILT_SUBMODULE" || true)
+    [ -n "$paths" ] && git submodule update --init --recursive -- $paths
+else
+    git submodule update --init --recursive
+fi
 
 # --------------------------------------------------------------------- APK
 log "Building APK ($GRADLE_TASK)"

From c3e8ae2e21ba4901eb8db2798edcdbf62e6675e9 Mon Sep 17 00:00:00 2001
From: BigfootACA <bigfoot@classfun.cn>
Date: Sat, 27 Jun 2026 22:59:05 +0800
Subject: [PATCH 065/182] DiskActionDialog: fix crash on target disk already
 exists

Signed-off-by: BigfootACA <bigfoot@classfun.cn>
---
 .../ui/disk/action/DiskActionDialog.java      | 29 +++++++++++++++----
 1 file changed, 24 insertions(+), 5 deletions(-)

diff --git a/app/src/main/java/cn/classfun/droidvm/ui/disk/action/DiskActionDialog.java b/app/src/main/java/cn/classfun/droidvm/ui/disk/action/DiskActionDialog.java
index bbbe022bf..56850ee19 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/disk/action/DiskActionDialog.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/disk/action/DiskActionDialog.java
@@ -228,14 +228,33 @@ public DiskConfig onFileImported(Uri uri) {
         config.item.set("folder", folder);
         var store = new DiskStore();
         runOnPool(() -> {
-            store.load(context);
-            store.add(config);
-            store.save(context);
+            try {
+                store.load(context);
+                if (store.findByName(fileName) != null) {
+                    mainLooper.post(() -> Toast.makeText(
+                        context,
+                        R.string.disk_create_error_exists,
+                        LENGTH_SHORT
+                    ).show());
+                    return;
+                }
+                store.add(config);
+                store.save(context);
+            } catch (Exception ignored) {
+                mainLooper.post(() -> Toast.makeText(
+                    context,
+                    R.string.disk_create_error_folder_invalid,
+                    LENGTH_SHORT
+                ).show());
+                return;
+            }
+            mainLooper.post(() -> {
+                var str = context.getString(R.string.disk_create_success, fileName);
+                Toast.makeText(context, str, LENGTH_SHORT).show();
+            });
             if (this.onUpdate != null)
                 this.onUpdate.run();
         });
-        var str = context.getString(R.string.disk_create_success, fileName);
-        Toast.makeText(context, str, LENGTH_SHORT).show();
         return config;
     }
 

From 9c733072995fc9ccc78ccd7610028bf499b41aed Mon Sep 17 00:00:00 2001
From: BigfootACA <bigfoot@classfun.cn>
Date: Sat, 27 Jun 2026 22:59:30 +0800
Subject: [PATCH 066/182] StringUtils: refactor resolveUriPath for more uri
 document path parse

Signed-off-by: BigfootACA <bigfoot@classfun.cn>
---
 .../droidvm/lib/utils/StringUtils.java        | 31 +++++++++++++------
 1 file changed, 21 insertions(+), 10 deletions(-)

diff --git a/app/src/main/java/cn/classfun/droidvm/lib/utils/StringUtils.java b/app/src/main/java/cn/classfun/droidvm/lib/utils/StringUtils.java
index 58000a3f6..879cffdc0 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/utils/StringUtils.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/utils/StringUtils.java
@@ -61,8 +61,22 @@ private static String getRealPathFromURI(@NonNull Context context, Uri uri) {
         return null;
     }
 
-    public static String resolveUriPath(Context ctx, Uri uri) {
+    @Nullable
+    private static String parseTreePath(@Nullable String content, @Nullable String tag) {
         var extStorage = externalPath();
+        if (content == null) return null;
+        if (tag != null) {
+            if (!content.startsWith(tag)) return null;
+            content = content.substring(tag.length());
+        }
+        if (shellCheckExists(content)) return content;
+        var real = pathJoin(extStorage, content);
+        if (shellCheckExists(real)) return real;
+        return null;
+    }
+
+    public static String resolveUriPath(Context ctx, Uri uri) {
+        String part;
         try {
             var real = getRealPathFromURI(ctx, uri);
             if (real != null && shellCheckExists(real)) return real;
@@ -70,26 +84,23 @@ public static String resolveUriPath(Context ctx, Uri uri) {
         }
         try {
             var docId = DocumentsContract.getDocumentId(uri);
-            if (docId != null && docId.startsWith("primary:"))
-                return pathJoin(extStorage, docId.substring("primary:".length()));
+            if ((part = parseTreePath(docId, "primary:")) != null) return part;
         } catch (Exception ignored) {
         }
         try {
             var treeId = DocumentsContract.getTreeDocumentId(uri);
-            if (treeId != null && treeId.startsWith("primary:"))
-                return pathJoin(extStorage, treeId.substring("primary:".length()));
+            if ((part = parseTreePath(treeId, "primary:")) != null) return part;
         } catch (Exception ignored) {
         }
         var path = uri.getPath();
-        if (path != null && path.startsWith("/document/primary:"))
-            return pathJoin(extStorage, path.substring("/document/primary:".length()));
-        if (path != null && path.startsWith("/external_files/"))
-            return pathJoin(extStorage, path.substring("/external_files/".length()));
+        if ((part = parseTreePath(path, "/document/primary:")) != null) return part;
+        if ((part = parseTreePath(path, "/external_files/")) != null) return part;
+        if ((part = parseTreePath(path, "/tree/primary:")) != null) return part;
         if (path != null && path.startsWith("/tree/primary:")) {
             var sub = path.substring("/tree/primary:".length());
             int slash = sub.indexOf("/document/");
             if (slash >= 0) sub = sub.substring(0, slash);
-            return pathJoin(extStorage, sub);
+            return pathJoin(externalPath(), sub);
         }
         return path;
     }

From 11b33301bde11d4aa50d4f74aac23c899ce2080d Mon Sep 17 00:00:00 2001
From: HuJK <gh@hujk.org>
Date: Mon, 29 Jun 2026 14:49:02 +0800
Subject: [PATCH 067/182] network: route Linux-bridge guests through the VPN
 like local apps

Forwarded guest packets carry no fwmark, so they never match netd's
uid/netId-keyed "iif lo" rules and fall through to the default network --
breaking guest access to VPN-backed services and the reverse path of
port forwards from VPN clients.

DefaultRouterWatcher now mirrors the tables a default app traverses (the
secure-VPN and default-network selection rules, identified by fwmark 0 +
fwmask present + iif lo) into per-bridge "iif <br> lookup <table>" rules,
in netd priority order so a split tunnel's VPN table is consulted before
the default one. Ordering is pinned with explicit FRA_PRIORITY
(RULE_PRIORITY_BASE + i) rather than insertion order, which the kernel
matches LIFO on-device and silently reversed (also caused per-tick churn).

- netbox: add --priority to rule-add/rule-del so the chain order is
  deterministic across kernel versions
- IptablesBackend: allow FORWARD to/from tun+ so guests routed to the VPN
  table are forwarded out tun0 instead of hitting the trailing DROP
- prebuilts: bump to 06a1cc4 (netbox with --priority)

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
---
 app/src/main/assets/prebuilts                 |   2 +-
 .../network/backend/DefaultRouterWatcher.java | 239 ++++++++++++------
 .../daemon/network/backend/Netbox.java        |  10 +-
 .../backend/iptables/IptablesBackend.java     |   7 +-
 4 files changed, 181 insertions(+), 77 deletions(-)

diff --git a/app/src/main/assets/prebuilts b/app/src/main/assets/prebuilts
index a6a039afa..06a1cc4e4 160000
--- a/app/src/main/assets/prebuilts
+++ b/app/src/main/assets/prebuilts
@@ -1 +1 @@
-Subproject commit a6a039afafe28b8b835570f60fd63bcc6218d753
+Subproject commit 06a1cc4e47be68d030aa54546175c8172f2786a0
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/DefaultRouterWatcher.java b/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/DefaultRouterWatcher.java
index 7853a0257..b17f26bec 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/DefaultRouterWatcher.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/DefaultRouterWatcher.java
@@ -5,12 +5,13 @@
 import android.util.Log;
 
 import androidx.annotation.NonNull;
-import androidx.annotation.Nullable;
 
 import java.util.ArrayList;
+import java.util.Comparator;
+import java.util.HashSet;
+import java.util.LinkedHashMap;
 import java.util.LinkedHashSet;
 import java.util.List;
-import java.util.Objects;
 import java.util.Set;
 import java.util.concurrent.CopyOnWriteArrayList;
 import java.util.concurrent.Executors;
@@ -27,6 +28,15 @@
 public final class DefaultRouterWatcher {
     private static final String TAG = "DefaultRouterWatcher";
     private static final long POLL_INTERVAL_SEC = 5;
+    /**
+     * FRA_PRIORITY of the first "iif {bridge} lookup {table}" rule; rule i in a
+     * bridge's chain gets {@code RULE_PRIORITY_BASE + i}. Sits above the local
+     * table (priority 0) and below netd's lowest rule (10000), so a guest packet
+     * is matched by the local table first, then our chain, before netd's
+     * "from all" fallbacks. Leaves headroom for far more tables than any device
+     * has networks.
+     */
+    private static final int RULE_PRIORITY_BASE = 9000;
     /**
      * Interface-name prefixes whose IPv4 addresses count as the phone's own
      * reachable IPs for port-forward DNAT scoping: Wi-Fi, cellular, VPN,
@@ -43,8 +53,8 @@ public final class DefaultRouterWatcher {
     private final List<Runnable> listeners = new CopyOnWriteArrayList<>();
     private final List<Runnable> hostIpListeners = new CopyOnWriteArrayList<>();
     private volatile ScheduledExecutorService scheduler;
-    private String lastDefault4 = null;
-    private String lastDefault6 = null;
+    private List<String> lastTables4 = List.of();
+    private List<String> lastTables6 = List.of();
     /** Phone's own IPv4 addresses; the netbox host-ips policy decides the set. */
     private volatile Set<String> hostIpv4 = Set.of();
     /** netbox monitor-addr: pushes host-IP changes the instant they happen. */
@@ -57,97 +67,185 @@ public DefaultRouterWatcher(@NonNull ServerContext context) {
     }
 
     /**
-     * The routing table of the current default network, per family: Android
-     * keeps the default route out of main and selects it with the netd rule
-     * "from all fwmark 0x0/0xffff iif lo lookup {table}".
+     * The ordered routing tables a default-network app's locally-generated
+     * traffic would traverse, per family -- the egress half of guest routing.
+     * Forwarded guest packets carry no fwmark, so they never match netd's
+     * uid/netId-keyed "iif lo" rules; we mirror the tables those rules select
+     * into "iif {bridge}" rules instead (see {@link #reconcileRules}).
+     *
+     * <p>A default app's packet has fwmark 0 (no explicitly selected network,
+     * not VPN-protected), so it is selected by exactly the "iif lo" lookup
+     * rules whose fwmark is unset/0:
+     * <ul>
+     *   <li>the secure-VPN rule ("from all fwmark 0x0/0x20000 iif lo ... lookup
+     *       {vpn}", priority 13000) -> the VPN table holding a split tunnel's
+     *       routes (e.g. 10.0.0.0/8);</li>
+     *   <li>the default-network rule ("from all fwmark 0x0/0xffff iif lo lookup
+     *       {default}") -> the underlying network's table (e.g. wlan0).</li>
+     * </ul>
+     * netId explicit/implicit rules carry a nonzero fwmark and are skipped.
+     * Returned in netd priority order so a split-tunnel VPN's table is consulted
+     * before the default one: a guest packet to 10.x matches the VPN table;
+     * anything else finds no route there and falls through to the default table
+     * (kernel policy-rule fall-through). With no VPN the list is just the single
+     * default table; a full-tunnel VPN's table has a default route, so the trailing
+     * default table is simply never reached.
+     *
+     * <p>Matching is on what netbox exposes (priority, iif, table, fwmark,
+     * fwmask -- not oif/uidrange), so the filter must single out the fwmark
+     * selection rules:
+     * <ul>
+     *   <li>{@code lookup} -- it routes to a table (not unreachable/blackhole);</li>
+     *   <li>{@code iif == "lo"} -- locally-generated selection rules, not the
+     *       "from all" legacy/local-network rules that forwarded packets already
+     *       traverse;</li>
+     *   <li>{@code fwmark} unset/0 -- a default app's mark (the kernel omits
+     *       FRA_FWMARK when the mark is 0); netId explicit/implicit rules carry a
+     *       nonzero mark and are skipped;</li>
+     *   <li>{@code fwmask} present -- this is the key discriminator. A real
+     *       fwmark selector always emits FRA_FWMASK (the kernel sends it whenever
+     *       the mask is nonzero, e.g. 0x20000/0xffff), even when the mark value
+     *       is 0. The "iif lo oif &lt;iface&gt; ... lookup" output-interface rules
+     *       (priorities 11000/17000, incl. dummy0 blackholes) carry no mark or
+     *       mask, so their fwmask is null and they are excluded -- without this
+     *       check those oif rules would be picked up (their oif is invisible to
+     *       us) and wrongly rank wlan0/dummy0 ahead of the VPN table.</li>
+     * </ul>
      */
-    @Nullable
-    private String currentDefaultTable(boolean ipv6) {
-        // netd selects the default network with "from all fwmark 0x0/0xffff
-        // iif lo lookup {table}" (mark 0, mask 0xffff). The kernel omits
-        // FRA_FWMARK when the mark is 0, so match on the 0xffff mask alone.
+    @NonNull
+    private List<String> currentLocalAppTables(boolean ipv6) {
+        // ruleList is in kernel order = ascending priority, so collecting in
+        // iteration order preserves netd's precedence (secure-VPN before default).
+        var tables = new LinkedHashSet<String>();
         var rows = Netbox.ruleList(ipv6);
         for (int i = 0; i < rows.length(); i++) {
             var r = rows.optJSONObject(i);
             if (r == null) continue;
-            if (r.optInt("fwmark", 0) != 0) continue;
-            if (r.optInt("fwmask", 0) != 0xffff) continue;
-            return String.valueOf(r.optInt("table", 0));
+            if (!r.optBoolean("lookup", false)) continue;
+            if (!"lo".equals(r.optString("iif", ""))) continue;
+            if (r.isNull("fwmask")) continue;
+            if (!r.isNull("fwmark") && r.optInt("fwmark", 0) != 0) continue;
+            tables.add(String.valueOf(r.optInt("table", 0)));
         }
-        return null;
+        return new ArrayList<>(tables);
     }
 
-    private void ruleDel(boolean ipv6, @NonNull String dev, @NonNull String table) {
-        Netbox.ruleDel(dev, table, ipv6);
+    private void ruleDel(boolean ipv6, @NonNull String dev, @NonNull String table, int priority) {
+        Netbox.ruleDel(dev, table, priority, ipv6);
     }
 
-    private void ruleAdd(boolean ipv6, @NonNull String dev, @NonNull String table) {
-        Netbox.ruleAdd(dev, table, ipv6);
+    private void ruleAdd(boolean ipv6, @NonNull String dev, @NonNull String table, int priority) {
+        Netbox.ruleAdd(dev, table, priority, ipv6);
     }
 
     /**
-     * Reconciles one family's "iif {bridge} lookup {default-table}" rules
-     * (the egress half of guest routing: forwarded packets carry no fwmark
-     * and Android's netd rules end in "from all unreachable", so each
-     * bridge needs an explicit rule into the default network's table).
-     * Declarative per tick: deletes stale rules -- wrong table, duplicates
-     * (added twice across restarts) and [detached] leftovers from a
-     * recreated bridge -- and adds what is missing. Stale-rule deletion by
-     * spec may remove either twin first; the next tick converges.
+     * Reconciles one family's per-bridge "iif {bridge} priority {p} lookup
+     * {table}" rule chains against {@code tables} (the egress half of guest
+     * routing: forwarded packets carry no fwmark and Android's netd rules end
+     * in "from all unreachable", so each bridge needs explicit rules into the
+     * tables a local app would use). Each running Linux-L3 bridge gets the
+     * whole ordered {@code tables} chain so split-tunnel works: the VPN table
+     * is tried before the default one and the kernel falls through when it has
+     * no matching route -- see {@link #currentLocalAppTables}.
+     *
+     * <p>Order matters (a packet to 10.x must hit the VPN table before the
+     * default table's 0.0.0.0/0). We pin it with explicit FRA_PRIORITY rather
+     * than insertion order: rule i gets priority {@code RULE_PRIORITY_BASE + i}
+     * (ascending = tables[0] first). Insertion order is unreliable -- the kernel
+     * matches same-priority rules FIFO or LIFO depending on version (observed
+     * LIFO on-device, which silently reversed the chain). The band sits below
+     * netd's lowest rule (10000) and above the local table (0), so a guest
+     * packet hits local first, then our chain.
+     *
+     * <p>Declarative per chain: a bridge whose installed rules (each as a
+     * "priority table" spec, sorted by priority) exactly equal the desired
+     * chain is left untouched; any other bridge -- wrong tables/priorities
+     * (incl. the pre-priority builds' priority-0 rules), [detached] from a
+     * recreated bridge, or no longer desired -- has all its rules deleted (each
+     * by its own priority) and, if still desired, the full chain re-added. An
+     * empty {@code tables} (no default network, or stop()) desires no bridge,
+     * so every leftover rule is swept.
      */
-    private void reconcileRules(boolean ipv6, @Nullable String table) {
-        var desired = new LinkedHashSet<String>();
+    private void reconcileRules(boolean ipv6, @NonNull List<String> tables) {
+        var desiredDevs = new LinkedHashSet<String>();
         var bridges = new ArrayList<String>();
         context.getNetworks().forEach((uuid, inst) -> {
             var br = inst.getBridgeName();
             if (br != null && !br.isEmpty()) bridges.add(br);
             // Only a running Linux-bridge L3 network has a real kernel bridge
-            // that forwarded guest traffic needs an "iif <bridge> lookup
-            // <table>" rule for. gvisor is a userspace data path (gvswitch +
-            // AF_XDP) with no kernel device for its bridge name, so a rule on
-            // it would sit [detached] and flap every tick; a stopped network
-            // has no bridge either. Whitelist the one case that needs rules --
-            // any other backend is excluded by default. Both still go into
+            // that forwarded guest traffic needs "iif <bridge> lookup <table>"
+            // rules for. gvisor is a userspace data path (gvswitch + AF_XDP)
+            // with no kernel device for its bridge name, so a rule on it would
+            // sit [detached] and flap every tick; a stopped network has no
+            // bridge either. Whitelist the one case that needs rules -- any
+            // other backend is excluded by default. Both still go into
             // `bridges` above so their leftover rules are swept here.
-            if (table != null
+            if (!tables.isEmpty()
                 && inst.getState() == NetworkState.RUNNING
                 && inst.getBridgeType() == BridgeType.LINUX
                 && inst.getUplinkMode() == UplinkMode.L3)
-                desired.addAll(inst.getL3Devices());
+                desiredDevs.addAll(inst.getL3Devices());
         });
 
-        var satisfied = new LinkedHashSet<String>();
+        // Desired chain as "priority table" specs in ascending priority; the
+        // same list for every desired bridge. tables[0] (the VPN table) gets the
+        // lowest priority so it is evaluated first.
+        var desired = new ArrayList<String>();
+        for (int i = 0; i < tables.size(); i++)
+            desired.add((RULE_PRIORITY_BASE + i) + " " + tables.get(i));
+
+        // Group our installed rules per device as "priority table" specs. Ours
+        // are the plain rules: an iif owned by a bridge, a lookup action, no
+        // fwmark/mask (netd's are all marked or oif/uid scoped). Sort each
+        // device's specs by priority so the comparison is order-canonical.
+        var installed = new LinkedHashMap<String, List<String>>();
+        var detached = new HashSet<String>();
         var rows = Netbox.ruleList(ipv6);
         for (int i = 0; i < rows.length(); i++) {
             var r = rows.optJSONObject(i);
             if (r == null) continue;
             var dev = r.optString("iif", "");
-            // only our "iif <bridge> lookup <table>" rules: skip rules with no
-            // iif, and netd's marked rules (any fwmark/mask present)
             if (dev.isEmpty()) continue;
+            if (!r.optBoolean("lookup", false)) continue;
             if (!r.isNull("fwmark") || !r.isNull("fwmask")) continue;
             boolean ours = false;
             for (var br : bridges)
                 if (dev.startsWith(br)) { ours = true; break; }
             if (!ours) continue;
-            var tbl = String.valueOf(r.optInt("table", 0));
-            boolean stale = r.optBoolean("detached", false)
-                || !tbl.equals(table)
-                || !desired.contains(dev)
-                || satisfied.contains(dev);
-            if (stale) {
-                Log.i(TAG, fmt("Removing stale rule: iif %s lookup %s (v%d)",
-                    dev, tbl, ipv6 ? 6 : 4));
-                ruleDel(ipv6, dev, tbl);
-            } else {
-                satisfied.add(dev);
-            }
+            installed.computeIfAbsent(dev, k -> new ArrayList<>())
+                .add(r.optInt("priority", 0) + " " + r.optInt("table", 0));
+            if (r.optBoolean("detached", false)) detached.add(dev);
         }
-        if (table != null) for (var dev : desired) {
-            if (satisfied.contains(dev)) continue;
-            Log.i(TAG, fmt("Adding rule: iif %s lookup %s (v%d)",
-                dev, table, ipv6 ? 6 : 4));
-            ruleAdd(ipv6, dev, table);
+        installed.values().forEach(specs -> specs.sort(Comparator.comparingInt(
+            s -> Integer.parseInt(s.substring(0, s.indexOf(' '))))));
+
+        // A device is already correct iff it is still desired, has no detached
+        // rule, and its installed specs equal the desired chain (same tables AND
+        // priorities). Everything else is torn down -- each rule deleted by its
+        // own priority -- and desired-but-incorrect devices are rebuilt below.
+        var correct = new HashSet<String>();
+        installed.forEach((dev, specs) -> {
+            if (desiredDevs.contains(dev)
+                && !detached.contains(dev)
+                && specs.equals(desired)) {
+                correct.add(dev);
+                return;
+            }
+            Log.i(TAG, fmt("Removing stale chain: iif %s [%s] (v%d)",
+                dev, specs, ipv6 ? 6 : 4));
+            for (var spec : specs) {
+                int sp = spec.indexOf(' ');
+                ruleDel(ipv6, dev, spec.substring(sp + 1),
+                    Integer.parseInt(spec.substring(0, sp)));
+            }
+        });
+
+        for (var dev : desiredDevs) {
+            if (correct.contains(dev)) continue;
+            Log.i(TAG, fmt("Adding chain: iif %s [%s] (v%d)",
+                dev, desired, ipv6 ? 6 : 4));
+            for (int i = 0; i < tables.size(); i++)
+                ruleAdd(ipv6, dev, tables.get(i), RULE_PRIORITY_BASE + i);
         }
     }
 
@@ -159,19 +257,18 @@ private synchronized void runOnce() {
 
     private void updateDefaultRouter() {
         try {
-            var new4 = currentDefaultTable(false);
-            var new6 = currentDefaultTable(true);
+            var new4 = currentLocalAppTables(false);
+            var new6 = currentLocalAppTables(true);
             reconcileRules(false, new4);
             reconcileRules(true, new6);
-            boolean changed = !Objects.equals(new4, lastDefault4)
-                || !Objects.equals(new6, lastDefault6);
+            boolean changed = !new4.equals(lastTables4) || !new6.equals(lastTables6);
             if (changed)
-                Log.i(TAG, fmt("Default network now v4=%s v6=%s", new4, new6));
-            lastDefault4 = new4;
-            lastDefault6 = new6;
+                Log.i(TAG, fmt("Local-app route tables now v4=%s v6=%s", new4, new6));
+            lastTables4 = new4;
+            lastTables6 = new6;
             // notify only on appearance/change, not on loss: a reconnect to
-            // the same network re-triggers because the loss nulled the state
-            if (changed && (new4 != null || new6 != null))
+            // the same network re-triggers because the loss emptied the state
+            if (changed && (!new4.isEmpty() || !new6.isEmpty()))
                 notifyChange();
         } catch (Exception e) {
             Log.w(TAG, "Failed to update default router", e);
@@ -272,8 +369,8 @@ public void removeListener(@NonNull Runnable listener) {
     /** Installs the new network's rules immediately (the tick would lag 5s). */
     public synchronized void setForNewNetwork() {
         try {
-            reconcileRules(false, currentDefaultTable(false));
-            reconcileRules(true, currentDefaultTable(true));
+            reconcileRules(false, currentLocalAppTables(false));
+            reconcileRules(true, currentLocalAppTables(true));
         } catch (Exception e) {
             Log.w(TAG, "Failed to install rules for new network", e);
         }
@@ -304,8 +401,8 @@ public synchronized void stop() {
         }
         // sweep every rule of ours, both families
         try {
-            reconcileRules(false, null);
-            reconcileRules(true, null);
+            reconcileRules(false, List.of());
+            reconcileRules(true, List.of());
         } catch (Exception e) {
             Log.w(TAG, "Failed to sweep rules on stop", e);
         }
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/Netbox.java b/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/Netbox.java
index 3660714ea..3d08b0783 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/Netbox.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/Netbox.java
@@ -103,13 +103,15 @@ static boolean routeAdd(@NonNull String dev, @NonNull String dst, @NonNull Strin
     }
 
     @SuppressWarnings("UnusedReturnValue")
-    static boolean ruleAdd(@NonNull String iif, @NonNull String table, boolean v6) {
-        return run(v6Args("rule-add", v6, "--iif", iif, "--table", table));
+    static boolean ruleAdd(@NonNull String iif, @NonNull String table, int priority, boolean v6) {
+        return run(v6Args("rule-add", v6, "--iif", iif, "--table", table,
+            "--priority", String.valueOf(priority)));
     }
 
     @SuppressWarnings("UnusedReturnValue")
-    static boolean ruleDel(@NonNull String iif, @NonNull String table, boolean v6) {
-        return run(v6Args("rule-del", v6, "--iif", iif, "--table", table));
+    static boolean ruleDel(@NonNull String iif, @NonNull String table, int priority, boolean v6) {
+        return run(v6Args("rule-del", v6, "--iif", iif, "--table", table,
+            "--priority", String.valueOf(priority)));
     }
 
     static boolean fdbAdd(@NonNull String mac, @NonNull String dev) {
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/iptables/IptablesBackend.java b/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/iptables/IptablesBackend.java
index ce4062773..f98e19dec 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/iptables/IptablesBackend.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/iptables/IptablesBackend.java
@@ -60,7 +60,12 @@ public final class IptablesBackend extends FirewallHelper {
         FIL6_OUT,
         FIL6_FWD,
     };
-    private static final String[] EXT_IFACES = {"wlan+", "eth+", "rmnet_data+"};
+    // Uplink interfaces guest traffic may be forwarded out of (and replies in
+    // from); anything else hits the trailing DROP. "tun+" covers the system VPN
+    // so a guest routed to the VPN table (see DefaultRouterWatcher) is actually
+    // forwarded out tun0 instead of dropped -- it mirrors the "tun" prefix in
+    // that watcher's HOST_IFACE_PREFIXES, which this list is meant to track.
+    private static final String[] EXT_IFACES = {"wlan+", "eth+", "rmnet+", "tun+"};
 
     synchronized boolean iptables(@NonNull String... args) {
         int retry = 0;

From 79af345fe67b2d6e0ee55fa2b2fa9d52d1ceacaa Mon Sep 17 00:00:00 2001
From: HuJK <gh@hujk.org>
Date: Tue, 30 Jun 2026 09:50:34 +0800
Subject: [PATCH 068/182] vnc: use daemon-resolved LAN address for
 IPv4-wildcard binds

When a VM binds VNC to 0.0.0.0, resolve the phone's own LAN IPv4 from the
router watcher's filtered host-IP set (which already excludes pbridge
offload-proxy addresses) and use it for the external/remote connect URI.
The client cannot exclude those itself: the offload tag is a netlink route
metric invisible to java.net.NetworkInterface.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
---
 .../droidvm/daemon/ipc/vm/VncInfoHandler.java | 12 ++++++++++
 .../vm/display/vnc/base/BaseVncActivity.java  | 23 +++++++++++++++++--
 2 files changed, 33 insertions(+), 2 deletions(-)

diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/ipc/vm/VncInfoHandler.java b/app/src/main/java/cn/classfun/droidvm/daemon/ipc/vm/VncInfoHandler.java
index ba9215068..30c366e28 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/ipc/vm/VncInfoHandler.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/ipc/vm/VncInfoHandler.java
@@ -32,5 +32,17 @@ public void handle(@NonNull ClientRequest request) throws Exception {
         res.put("host", !host.isEmpty() ? host : "127.0.0.1");
         res.put("port", inst.item.optLong("vnc_port", -1));
         res.put("password", inst.item.optString("vnc_password", ""));
+        // When VNC binds to the IPv4 wildcard, resolve the phone's own LAN
+        // address here from the router watcher's filtered host-IP set, which
+        // already drops pbridge offload-proxy addresses parked on the uplink.
+        // The client cannot exclude those itself: the offload tag is a netlink
+        // route metric invisible to java.net.NetworkInterface, so its naive
+        // interface enumeration would pick a guest proxy IP instead.
+        if ("0.0.0.0".equals(host)) {
+            var hostIps = request.getContext().getRouterWatcher().getHostIpv4Addresses();
+            var it = hostIps.iterator();
+            if (it.hasNext())
+                res.put("remote_host", it.next());
+        }
     }
 }
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/display/vnc/base/BaseVncActivity.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/vnc/base/BaseVncActivity.java
index f319b4221..9fafe5eb7 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/display/vnc/base/BaseVncActivity.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/vnc/base/BaseVncActivity.java
@@ -72,6 +72,10 @@ public abstract class BaseVncActivity extends AppCompatActivity implements ImeIn
     protected String vmName = "";
     protected String vmId = "";
     protected String vncHost = "127.0.0.1";
+    // Phone LAN address the daemon resolved for an IPv4-wildcard bind (offload
+    // proxy IPs already excluded); empty when not applicable. Preferred over
+    // local interface enumeration for the external/remote connect address.
+    protected String vncRemoteHost = "";
     protected int vncPort = DEFAULT_PORT;
     protected String vncPassword = null;
     protected volatile boolean running = false;
@@ -223,6 +227,7 @@ protected void fetchVncInfoAndConnect() {
         };
         DaemonConnection.OnResponse res = resp -> {
             vncHost = resp.optString("host", "127.0.0.1");
+            vncRemoteHost = resp.optString("remote_host", "");
             vncPort = resp.optInt("port", DEFAULT_PORT);
             vncPassword = resp.optString("password", "");
             if (vncPassword.isEmpty()) vncPassword = null;
@@ -594,10 +599,24 @@ protected void rotateScreen() {
         }
     }
 
+    /**
+     * Resolves the host for a VNC URI. For the external/remote address, prefers
+     * the daemon-resolved phone LAN address ({@link #vncRemoteHost}) when the VM
+     * binds the IPv4 wildcard, since it excludes pbridge offload-proxy IPs that
+     * local interface enumeration cannot tell apart. Falls back to
+     * {@link cn.classfun.droidvm.lib.utils.NetUtils#resolveAddress} otherwise.
+     */
+    @NonNull
+    private String resolveVncHost(boolean local) {
+        if (!local && "0.0.0.0".equals(vncHost) && !vncRemoteHost.isEmpty())
+            return vncRemoteHost;
+        return resolveAddress(vncHost, local);
+    }
+
     @NonNull
     protected String generateVncUri(boolean local) {
         var sb = new StringBuilder();
-        var host = resolveAddress(vncHost, local);
+        var host = resolveVncHost(local);
         var port = vncPort;
         sb.append(fmt("vnc://%s:%d/", host, port));
         var ps = new StringBuilder();
@@ -610,7 +629,7 @@ protected String generateVncUri(boolean local) {
 
     protected void openWithExternalApp() {
         var url = generateVncUri(false);
-        var host = resolveAddress(vncHost, false);
+        var host = resolveVncHost(false);
         var target = fmt("%s:%d", host, vncPort);
         boolean hasPassword = vncPassword != null && !vncPassword.isEmpty();
         var view = getLayoutInflater().inflate(R.layout.dialog_vnc_external, null);

From de10129e3f7dc917a331392fea1d58a516566206 Mon Sep 17 00:00:00 2001
From: HuJK <gh@hujk.org>
Date: Tue, 30 Jun 2026 09:50:34 +0800
Subject: [PATCH 069/182] vm: record created_at timestamp on VM creation

The VM info screen already shows a "created" row; populate it by stamping
created_at when a new VMConfig is constructed.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
---
 app/src/main/java/cn/classfun/droidvm/lib/store/vm/VMConfig.java | 1 +
 1 file changed, 1 insertion(+)

diff --git a/app/src/main/java/cn/classfun/droidvm/lib/store/vm/VMConfig.java b/app/src/main/java/cn/classfun/droidvm/lib/store/vm/VMConfig.java
index 7fae1bef5..4ef282125 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/store/vm/VMConfig.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/store/vm/VMConfig.java
@@ -17,6 +17,7 @@
 public class VMConfig extends DataConfig {
     public VMConfig() {
         setId(UUID.randomUUID());
+        item.set("created_at", System.currentTimeMillis());
     }
 
     public VMConfig(@NonNull JSONObject obj) throws JSONException {

From 495b9ede3400bab9f6734731a170fd4e14856de2 Mon Sep 17 00:00:00 2001
From: HuJK <gh@hujk.org>
Date: Tue, 30 Jun 2026 09:50:45 +0800
Subject: [PATCH 070/182] (feat) adjust hugepage pool size at runtime, see vm
 memory allocated

Add a hugepage reserve-pool manager: live pool resize (shrink frees now,
grow + acquire migrates pages in), per-VM attribution via the kernel module
(KO) with a THP-scan fallback, kill/stack-trace actions, and a usage screen.
The Disable button shrinks the pool to one page (freeing memory) without
unloading, so per-VM tracking is never lost.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
---
 app/src/main/AndroidManifest.xml              |   7 +
 .../droidvm/ui/hugepage/HugePageActivity.java | 399 ++++++++--
 .../droidvm/ui/hugepage/HugePageColor.java    |  39 +
 .../droidvm/ui/hugepage/HugePageProcess.java  |  66 ++
 .../ui/hugepage/HugePageProcessActivity.java  | 747 ++++++++++++++++++
 .../ui/hugepage/HugePageProcessAdapter.java   | 198 +++++
 .../droidvm/ui/hugepage/SegmentedBar.java     |  77 ++
 .../main/res/drawable/ic_circle_filled.xml    |   9 +
 .../main/res/drawable/ic_circle_outline.xml   |  11 +
 app/src/main/res/layout/activity_hugepage.xml | 129 ++-
 .../res/layout/activity_hugepage_process.xml  | 112 +++
 .../main/res/layout/item_hugepage_process.xml | 112 +++
 .../main/res/menu/menu_hugepage_process.xml   |  20 +
 app/src/main/res/values-night/colors.xml      |   2 +
 app/src/main/res/values-zh-rCN/strings.xml    |  57 ++
 app/src/main/res/values-zh-rTW/strings.xml    |  63 +-
 app/src/main/res/values/colors.xml            |   3 +
 app/src/main/res/values/strings.xml           |  63 +-
 18 files changed, 2015 insertions(+), 99 deletions(-)
 create mode 100644 app/src/main/java/cn/classfun/droidvm/ui/hugepage/HugePageColor.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/ui/hugepage/HugePageProcess.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/ui/hugepage/HugePageProcessActivity.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/ui/hugepage/HugePageProcessAdapter.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/ui/hugepage/SegmentedBar.java
 create mode 100644 app/src/main/res/drawable/ic_circle_filled.xml
 create mode 100644 app/src/main/res/drawable/ic_circle_outline.xml
 create mode 100644 app/src/main/res/layout/activity_hugepage_process.xml
 create mode 100644 app/src/main/res/layout/item_hugepage_process.xml
 create mode 100644 app/src/main/res/menu/menu_hugepage_process.xml

diff --git a/app/src/main/AndroidManifest.xml b/app/src/main/AndroidManifest.xml
index a384f6bba..65cd1970c 100644
--- a/app/src/main/AndroidManifest.xml
+++ b/app/src/main/AndroidManifest.xml
@@ -184,6 +184,13 @@
             android:theme="@style/Theme.DroidVM.NoActionBar"
             android:windowSoftInputMode="adjustResize" />
 
+        <activity
+            android:name=".ui.hugepage.HugePageProcessActivity"
+            android:configChanges="orientation|screenSize|keyboardHidden|screenLayout|smallestScreenSize"
+            android:exported="false"
+            android:theme="@style/Theme.DroidVM.NoActionBar"
+            android:windowSoftInputMode="adjustResize" />
+
         <provider
             android:name="androidx.core.content.FileProvider"
             android:authorities="${applicationId}.fileprovider"
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/hugepage/HugePageActivity.java b/app/src/main/java/cn/classfun/droidvm/ui/hugepage/HugePageActivity.java
index 17aa3f4f1..808ac85da 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/hugepage/HugePageActivity.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/hugepage/HugePageActivity.java
@@ -11,10 +11,13 @@
 import static cn.classfun.droidvm.lib.utils.ThreadUtils.runOnPool;
 
 import android.content.Intent;
+import android.content.res.ColorStateList;
+import android.graphics.Color;
 import android.net.Uri;
 import android.os.Bundle;
 import android.os.Handler;
 import android.os.Looper;
+import android.view.View;
 import android.util.Log;
 import android.view.inputmethod.EditorInfo;
 import android.widget.TextView;
@@ -32,10 +35,15 @@
 import com.google.android.material.progressindicator.LinearProgressIndicator;
 
 import java.math.BigInteger;
+import java.util.ArrayList;
 import java.util.LinkedHashMap;
+import java.util.List;
 import java.util.Map;
+import java.util.concurrent.CountDownLatch;
+import java.util.concurrent.TimeUnit;
 
 import cn.classfun.droidvm.R;
+import cn.classfun.droidvm.lib.daemon.DaemonConnection;
 import cn.classfun.droidvm.lib.size.SizeUtils;
 import cn.classfun.droidvm.ui.widgets.row.SwitchRowWidget;
 import cn.classfun.droidvm.ui.widgets.row.TextInputRowWidget;
@@ -57,11 +65,21 @@ public final class HugePageActivity extends AppCompatActivity {
     private MaterialCardView cardCrashWarning;
     private MaterialCardView cardNotLoaded;
     private TextInputRowWidget inputPoolSize;
-    private MaterialButton btnManualRefill;
-    private MaterialButton btnStop;
-    private LinearProgressIndicator progressPoolUsage;
+    private MaterialButton btnSavePoolSize;
+    private View progressSavePoolSize;
+    private ColorStateList saveTextColors;
+    private MaterialButton btnModuleToggle;
+    private boolean moduleInstalled = false;
+    private boolean moduleLoaded = false;
+    private boolean moduleHasPoolWant = false;
+    private boolean moduleSoftDisabled = false;
+    private boolean moduleAcquiring = false;
+    private MaterialButton btnViewProcesses;
+    private SegmentedBar segPoolBar;
+    private TextView tvPoolUsed;
     private TextView tvPoolAvail;
     private TextView tvPoolTotal;
+    private TextView tvPoolSize;
     private SwitchRowWidget rowModuleEnable;
     private TextRowWidget rowStatState;
     private TextRowWidget rowStatTotalServed;
@@ -81,11 +99,16 @@ protected void onCreate(@Nullable Bundle savedInstanceState) {
         cardCrashWarning = findViewById(R.id.card_crash_warning);
         cardNotLoaded = findViewById(R.id.card_not_installed);
         inputPoolSize = findViewById(R.id.input_pool_size);
-        btnManualRefill = findViewById(R.id.btn_manual_refill);
-        btnStop = findViewById(R.id.btn_stop);
-        progressPoolUsage = findViewById(R.id.progress_pool_usage);
+        btnSavePoolSize = findViewById(R.id.btn_save_pool_size);
+        progressSavePoolSize = findViewById(R.id.progress_save_pool_size);
+        saveTextColors = btnSavePoolSize.getTextColors();
+        btnModuleToggle = findViewById(R.id.btn_module_toggle);
+        btnViewProcesses = findViewById(R.id.btn_view_processes);
+        segPoolBar = findViewById(R.id.seg_pool_bar);
+        tvPoolUsed = findViewById(R.id.tv_pool_used);
         tvPoolAvail = findViewById(R.id.tv_pool_avail);
         tvPoolTotal = findViewById(R.id.tv_pool_total);
+        tvPoolSize = findViewById(R.id.tv_pool_size);
         rowModuleEnable = findViewById(R.id.row_module_enable);
         rowStatState = findViewById(R.id.row_stat_state);
         rowStatTotalServed = findViewById(R.id.row_stat_total_served);
@@ -95,35 +118,35 @@ protected void onCreate(@Nullable Bundle savedInstanceState) {
     }
 
     private void initialize() {
-        if (!shellCheckExists(MODULE_PROP)) {
-            new MaterialAlertDialogBuilder(this)
-                .setTitle(R.string.hugepage_not_installed)
-                .setMessage(R.string.hugepage_not_installed_desc)
-                .setPositiveButton(android.R.string.ok, null)
-                .setNeutralButton(R.string.hugepage_download, (d, v) -> openModulePage())
-                .setOnDismissListener(d -> finish())
-                .show();
-            return;
-        }
         toolbar.setTitle(R.string.hugepage_title);
         toolbar.setNavigationOnClickListener(v -> finish());
-        btnManualRefill.setOnClickListener(v -> doManualRefill());
+        btnSavePoolSize.setOnClickListener(v -> {
+            if (moduleAcquiring) interruptAcquire();
+            else savePoolSize();
+        });
         rowModuleEnable.setOnCheckedChangeListener(this::doToggleModule);
-        btnStop.setOnClickListener(v -> confirmUnload());
-        cardCrashWarning.setOnClickListener(v -> doDismissCrash());
-        inputPoolSize.setOnFocusLostListener(this::savePoolSize);
-        inputPoolSize.setOnEditorActionListener((v, actionId, event) -> {
-            if (actionId == EditorInfo.IME_ACTION_DONE) {
-                savePoolSize();
-                return true;
-            }
-            return false;
+        // One button:
+        //   not installed        -> Install (open releases page)
+        //   installed, unloaded  -> Enable (insmod)
+        //   loaded, soft-disabled-> Enable (restore pool_want + acquire)
+        //   loaded (v7)          -> Disable (shrink pool to 1 page, stay loaded
+        //                           so per-VM tracking is never lost; no save)
+        //   loaded (v6, no knob) -> Disable (rmmod)
+        btnModuleToggle.setOnClickListener(v -> {
+            if (!moduleInstalled) openModulePage();
+            else if (!moduleLoaded) doLoad();
+            else if (moduleSoftDisabled) doSoftEnable();
+            else if (moduleHasPoolWant) doSoftDisable();
+            else confirmUnload();
         });
+        btnViewProcesses.setOnClickListener(v -> startActivity(
+            new Intent(this, HugePageProcessActivity.class)));
+        cardCrashWarning.setOnClickListener(v -> doDismissCrash());
         loadPoolSize();
     }
 
     private void openModulePage() {
-        var url = "https://github.com/Droid-VM/gh-hugepage-reserve";
+        var url = "https://github.com/Droid-VM/gh-hugepage-reserve/releases";
         var intent = new Intent(Intent.ACTION_VIEW, Uri.parse(url));
         startActivity(intent);
     }
@@ -141,7 +164,6 @@ protected void onPause() {
         super.onPause();
         resumed = false;
         handler.removeCallbacks(refreshRunnable);
-        savePoolSize();
     }
 
     private void scheduleRefresh() {
@@ -150,22 +172,51 @@ private void scheduleRefresh() {
 
     private void refreshStatus() {
         runOnPool(() -> {
+            var moduleInst = shellCheckExists(MODULE_PROP);
             var moduleLoaded = shellCheckExists(SYSFS_BASE);
             var moduleDisabled = shellCheckExists(DISABLE_FILE);
             var crashStamp = shellCheckExists(CRASH_FILE);
             var refillStat = "";
+            var servedSummary = "";
             if (moduleLoaded) try {
                 refillStat = shellReadFile(pathJoin(SYSFS_PARAMS, "refill_stat"));
+                // Reconcile + read per-VM served pages so this screen's bar shows
+                // the exact same per-VM breakdown as the usage screen's bar.
+                if (shellCheckExists(pathJoin(SYSFS_PARAMS, "served_summary"))) {
+                    run("echo 1 > %s/reconcile", SYSFS_PARAMS);
+                    servedSummary = shellReadFile(pathJoin(SYSFS_PARAMS, "served_summary"));
+                }
             } catch (Exception e) {
                 Log.w(TAG, "Failed to read parameters", e);
             }
             var stats = parseProp(refillStat);
+            var owners = parseServedOwners(servedSummary);
             runOnUiThread(() -> updateUI(
-                moduleLoaded, moduleDisabled, crashStamp, stats
+                moduleInst, moduleLoaded, moduleDisabled, crashStamp, stats, owners
             ));
         });
     }
 
+    /** Parse served_summary "owner ... pid=N pages=M" lines into {pid, pages}. */
+    @NonNull
+    private List<long[]> parseServedOwners(@NonNull String raw) {
+        var owners = new ArrayList<long[]>();
+        for (var line : raw.split("\n")) {
+            line = line.trim();
+            if (!line.startsWith("owner ")) continue;
+            long pid = -1, pages = 0;
+            for (var tok : line.split("\\s+")) {
+                try {
+                    if (tok.startsWith("pid=")) pid = Long.parseLong(tok.substring(4));
+                    else if (tok.startsWith("pages=")) pages = Long.parseLong(tok.substring(6));
+                } catch (NumberFormatException ignored) {
+                }
+            }
+            if (pid > 0 && pages > 0) owners.add(new long[]{pid, pages});
+        }
+        return owners;
+    }
+
     @NonNull
     private Map<String, String> parseProp(@NonNull String raw) {
         var map = new LinkedHashMap<String, String>();
@@ -188,9 +239,10 @@ private long getPages(@NonNull Map<String, String> stats, @NonNull String key) {
     }
 
     private void updateUI(
-        boolean loaded,
+        boolean installed, boolean loaded,
         boolean disabled, boolean crashed,
-        @NonNull Map<String, String> stats
+        @NonNull Map<String, String> stats,
+        @NonNull List<long[]> owners
     ) {
         if (isFinishing()) return;
         cardCrashWarning.setVisibility(crashed ? VISIBLE : GONE);
@@ -203,51 +255,200 @@ private void updateUI(
             try {
                 var poolAvail = getPages(stats, "pool_avail");
                 var poolTotal = getPages(stats, "pool_total");
+                // "total" shows the desired target (pool_want); grow raises it
+                // while capacity (pool_total) only rises via acquire. Old
+                // modules without pool_want fall back to capacity.
+                var poolWant = getPages(stats, "pool_want");
+                if (poolWant <= 0) poolWant = poolTotal;
+                // Used = pages currently served to VMs (traced). Prefer the live
+                // served counter; pool_total - avail under-counts after a shrink
+                // that left served pages out. Old modules: fall back to that.
+                var used = stats.containsKey("served")
+                    ? getPages(stats, "served")
+                    : Math.clamp(poolTotal - poolAvail, 0, poolTotal);
+                // 2x2 caption (identical to the usage screen): used / available
+                // on top, total / pool-size below. Total = real held reserve
+                // (used + avail = owned + traced), shown raw - no clamp to the
+                // pool size, so a kernel that fails to release on shrink shows up
+                // as total > the size you set.
+                var held = used + poolAvail;
+                setPagesString(tvPoolUsed, R.string.hugepage_stat_pool_used, used);
                 setPagesString(tvPoolAvail, R.string.hugepage_stat_pool_available, poolAvail);
-                setPagesString(tvPoolTotal, R.string.hugepage_stat_pool_total, poolTotal);
-                if (poolTotal > 0) {
-                    var used = Math.clamp(poolTotal - poolAvail, 0, poolTotal);
-                    var progress = (int) (used * 1000L / poolTotal);
-                    progressPoolUsage.setProgress(progress);
-                } else {
-                    progressPoolUsage.setProgress(0);
+                setPagesString(tvPoolTotal, R.string.hugepage_stat_pool_total, held);
+                setPagesString(tvPoolSize, R.string.hugepage_stat_pool_size, poolWant);
+                // Segmented bar: one colored segment per VM (same per-VM colours
+                // and deficit block as the usage screen's bar) + a track for the
+                // available portion; total = want.
+                boolean dark = HugePageColor.isDark(this);
+                int n = owners.size();
+                int[] colors = new int[n + 1];
+                float[] values = new float[n + 1];
+                long seg = 0;
+                for (int i = 0; i < n; i++) {
+                    int pid = (int) owners.get(i)[0];
+                    long ownerPages = owners.get(i)[1];
+                    colors[i] = HugePageColor.forPid(pid, dark);
+                    values[i] = ownerPages;
+                    seg += ownerPages;
                 }
+                colors[n] = HugePageColor.pending(this);
+                values[n] = Math.max(0, poolWant - seg - poolAvail);
+                float total = Math.max(poolWant, seg + poolAvail);
+                segPoolBar.setData(colors, values, total);
             } catch (NumberFormatException e) {
+                tvPoolUsed.setText("-");
                 tvPoolAvail.setText("-");
                 tvPoolTotal.setText("-");
-                progressPoolUsage.setProgress(0);
+                tvPoolSize.setText("-");
+                segPoolBar.setData(new int[0], new float[0], 0f);
             }
         } else {
             rowStatState.setValue(getString(R.string.hugepage_stats_unavailable));
             rowStatTotalServed.setValue(null);
             rowStatTotalRefilled.setValue(null);
             rowStatActiveVms.setValue(null);
+            tvPoolUsed.setText("-");
             tvPoolAvail.setText("-");
             tvPoolTotal.setText("-");
-            progressPoolUsage.setProgress(0);
+            tvPoolSize.setText("-");
+            segPoolBar.setData(new int[0], new float[0], 0f);
         }
-        btnManualRefill.setEnabled(loaded);
-        btnStop.setEnabled(loaded);
+        // While an acquire runs the Save button shows a spinner (label hidden,
+        // floppy icon kept) but stays pressable: tapping it then interrupts the
+        // acquire, keeping the current size (see the click handler). pool_want is
+        // settable any time now, so neither button needs to be disabled.
+        boolean acquiring = loaded && "1".equals(stats.get("acquire_active"));
+        moduleAcquiring = acquiring;
+        progressSavePoolSize.setVisibility(acquiring ? VISIBLE : GONE);
+        if (acquiring) btnSavePoolSize.setTextColor(Color.TRANSPARENT);
+        else btnSavePoolSize.setTextColor(saveTextColors);
+        btnSavePoolSize.setEnabled(installed);
+        // Install / Enable / Disable. "Disable" on v7 shrinks the pool to one
+        // page (frees memory) but keeps the module loaded so it never loses
+        // per-VM tracking; soft-disabled shows "Enable" again. v6 has no
+        // pool_want knob, so Disable falls back to rmmod.
+        moduleInstalled = installed;
+        moduleLoaded = loaded;
+        moduleHasPoolWant = stats.containsKey("pool_want");
+        moduleSoftDisabled = loaded && moduleHasPoolWant
+            && getPages(stats, "pool_want") <= 1;
+        btnModuleToggle.setEnabled(true);
+        if (!installed) {
+            btnModuleToggle.setText(R.string.hugepage_btn_install);
+            btnModuleToggle.setIconResource(R.drawable.ic_download);
+        } else if (!loaded || moduleSoftDisabled) {
+            btnModuleToggle.setText(R.string.hugepage_btn_enable);
+            btnModuleToggle.setIconResource(R.drawable.ic_start);
+        } else {
+            btnModuleToggle.setText(R.string.hugepage_btn_disable);
+            btnModuleToggle.setIconResource(R.drawable.ic_stop);
+        }
+        rowModuleEnable.setEnabled(installed);
         rowModuleEnable.setChecked(!disabled);
     }
 
-    private void doManualRefill() {
-        btnManualRefill.setEnabled(false);
+    private void doLoad() {
+        btnModuleToggle.setEnabled(false);
         runOnPool(() -> {
-            var result = run(
-                "echo 1 > %s/manual_refill",
-                SYSFS_PARAMS
-            ).isSuccess();
+            if (shellCheckExists(SYSFS_BASE)) {
+                runOnUiThread(() -> {
+                    Toast.makeText(this, R.string.hugepage_already_loaded,
+                        LENGTH_SHORT).show();
+                    refreshStatus();
+                });
+                return;
+            }
+            // Read the configured size from settings.prop in Java (rather than
+            // sourcing it in shell). v7 reads pool_want, older builds pool_target.
+            var size = "1024";
+            if (shellCheckExists(SETTINGS_PROP)) {
+                var settings = parseProp(shellReadFile(SETTINGS_PROP));
+                size = settings.getOrDefault("pool_want",
+                    settings.getOrDefault("pool_target", "1024"));
+            }
+            // Insmod compatibly across versions: v7 takes pool_want, older builds
+            // take pool_target, anything else loads bare. First success wins.
+            var ko = pathJoin(MAGISK_BASE, "gh_hugepage_reserve.ko");
+            var result =
+                run("insmod \"%s\" pool_want=\"%s\"", ko, size).isSuccess()
+                    || run("insmod \"%s\" pool_target=\"%s\"", ko, size).isSuccess()
+                    || run("insmod \"%s\"", ko).isSuccess();
             runOnUiThread(() -> {
-                btnManualRefill.setEnabled(true);
-                var msg = result ?
-                    R.string.hugepage_refill_triggered :
-                    R.string.hugepage_refill_failed;
-                Toast.makeText(this, msg, LENGTH_SHORT).show();
+                Toast.makeText(this, result
+                        ? R.string.hugepage_loaded
+                        : R.string.hugepage_load_failed,
+                    LENGTH_SHORT).show();
+                refreshStatus();
             });
         });
     }
 
+    /**
+     * Soft-disable (v7): shrink the pool to a single page so the reserved memory
+     * is freed back to the system, but keep the module loaded so it never loses
+     * per-VM tracking (unlike rmmod). settings.prop is left untouched, so the
+     * next boot still allocates the configured capacity.
+     */
+    private void doSoftDisable() {
+        btnModuleToggle.setEnabled(false);
+        runOnPool(() -> {
+            // The module refuses a resize mid-acquire, so stop the worker first.
+            stopAcquireAndWait();
+            run("echo 1 > %s/pool_want", SYSFS_PARAMS);
+            runOnUiThread(this::refreshStatus);
+        });
+    }
+
+    /**
+     * Interrupt a running acquire: write 0 to the acquire knob. pool_want is left
+     * intact, so the worker stops at the size reached so far and the remaining
+     * deficit keeps showing as "waiting for acquire".
+     */
+    private void interruptAcquire() {
+        runOnPool(() -> {
+            run("echo 0 > %s/acquire", SYSFS_PARAMS);
+            runOnUiThread(this::refreshStatus);
+        });
+    }
+
+    /**
+     * Interrupt any running acquire and block (on the pool thread) until the
+     * worker is quiescent. pool_want can't be set while an acquire runs, so call
+     * this before writing pool_want. The worker can be mid-migration, so this may
+     * take a moment; bounded so a wedged worker can't hang us forever.
+     */
+    private void stopAcquireAndWait() {
+        if (!shellCheckExists(pathJoin(SYSFS_PARAMS, "acquire"))) return;
+        run("echo 0 > %s/acquire", SYSFS_PARAMS);
+        for (int i = 0; i < 60; i++) {
+            var st = parseProp(shellReadFile(pathJoin(SYSFS_PARAMS, "refill_stat")));
+            if (!"1".equals(st.get("acquire_active"))) return;
+            try {
+                Thread.sleep(500);
+            } catch (InterruptedException ignored) {
+                return;
+            }
+        }
+    }
+
+    /** Re-enable a soft-disabled pool: restore the configured size and refill. */
+    private void doSoftEnable() {
+        btnModuleToggle.setEnabled(false);
+        runOnPool(() -> {
+            var size = "1024";
+            if (shellCheckExists(SETTINGS_PROP)) {
+                var s = parseProp(shellReadFile(SETTINGS_PROP));
+                size = s.getOrDefault("pool_want",
+                    s.getOrDefault("pool_target", "1024"));
+            }
+            run("echo %s > %s/pool_want", size, SYSFS_PARAMS);
+            if (shellCheckExists(pathJoin(SYSFS_PARAMS, "acquire"))) {
+                run("echo 1 > %s/acquire", SYSFS_PARAMS);
+            }
+            runOnUiThread(this::refreshStatus);
+        });
+    }
+
     private void loadPoolSize() {
         runOnPool(() -> {
             Map<String, String> settings;
@@ -258,32 +459,102 @@ private void loadPoolSize() {
                 Log.w(TAG, "Failed to read settings.prop", e);
                 return;
             }
-            var cur = settings.getOrDefault("pool_target", "2048");
-            if (cur == null || cur.isEmpty()) cur = "2048";
+            // Prefer pool_want; fall back to legacy pool_target.
+            var cur = settings.getOrDefault("pool_want",
+                settings.getOrDefault("pool_target", "1024"));
+            if (cur == null || cur.isEmpty()) cur = "1024";
             try {
                 var pages = Long.parseLong(cur);
                 var bytes = BigInteger.valueOf(pages * PAGE_SIZE);
                 runOnUiThread(() -> inputPoolSize.setBigValue(bytes));
             } catch (NumberFormatException e) {
-                Log.w(TAG, "Failed to parse pool_target", e);
+                Log.w(TAG, "Failed to parse pool_want", e);
             }
         });
     }
 
+    /**
+     * Sum of configured memory (MiB) over every VM that currently has a live
+     * process (state RUNNING/STARTING/SUSPENDED). Blocks briefly on the daemon;
+     * call from a background thread. 0 if none / daemon unreachable.
+     */
+    private long runningVmMemMib() {
+        var total = new long[]{0};
+        var latch = new CountDownLatch(1);
+        DaemonConnection.getInstance().buildRequest("vm_list")
+            .onResponse(resp -> {
+                try {
+                    var arr = resp.optJSONArray("data");
+                    if (arr != null) {
+                        for (int i = 0; i < arr.length(); i++) {
+                            var vm = arr.optJSONObject(i);
+                            if (vm == null) continue;
+                            var state = vm.optString("state", "STOPPED");
+                            if ("RUNNING".equals(state) || "STARTING".equals(state)
+                                || "SUSPENDED".equals(state)) {
+                                total[0] += vm.optLong("memory_mb", 0);
+                            }
+                        }
+                    }
+                } finally {
+                    latch.countDown();
+                }
+            })
+            .onError(e -> latch.countDown())
+            .invoke();
+        try {
+            //noinspection ResultOfMethodCallIgnored
+            latch.await(2, TimeUnit.SECONDS);
+        } catch (InterruptedException ignored) {
+        }
+        return total[0];
+    }
+
     private void savePoolSize() {
         if (!inputPoolSize.isInputValid()) return;
         var bytes = inputPoolSize.getBigValue();
         var pages = bytes.divide(BigInteger.valueOf(PAGE_SIZE));
         runOnPool(() -> {
-            var result = run(
-                "echo 'pool_target=%s' > %s",
-                pages.toString(), SETTINGS_PROP
-            ).isSuccess();
+            // The pool must be able to back every running VM's RAM, so it can't
+            // be set below the sum of running VMs' configured memory.
+            long needMib = runningVmMemMib();
+            long wantMib = pages.longValue() * (PAGE_SIZE / (1024 * 1024));
+            if (needMib > 0 && wantMib < needMib) {
+                runOnUiThread(() -> Toast.makeText(this,
+                    getString(R.string.hugepage_pool_below_vms,
+                        SizeUtils.formatSize(needMib * 1024 * 1024)),
+                    LENGTH_SHORT).show());
+                return;
+            }
+            // Persist for the next load. Write BOTH keys so the size survives
+            // whichever module/loader is installed at boot: v7's loader reads
+            // pool_want, an older (v6) package's loader reads pool_target.
+            var wroteWant = run("echo 'pool_want=%s' > %s",
+                pages.toString(), SETTINGS_PROP).isSuccess();
+            var wroteTarget = run("echo 'pool_target=%s' >> %s",
+                pages.toString(), SETTINGS_PROP).isSuccess();
+            var result = wroteWant && wroteTarget;
+            // Apply at runtime via the single pool_want knob: shrink frees excess
+            // now, grow only raises the target (Acquire fills it). Old modules
+            // without pool_want just keep the saved value (effective next reboot).
+            var applied = false;
+            if (shellCheckExists(pathJoin(SYSFS_PARAMS, "pool_want"))) {
+                applied = run("echo %s > %s/pool_want",
+                    pages.toString(), SYSFS_PARAMS).isSuccess();
+                // Saving also kicks off one acquire so a grown target starts
+                // filling immediately (a shrink just makes the worker exit at
+                // once). The 1 s status poll then animates the bar + Save spinner.
+                if (applied && shellCheckExists(pathJoin(SYSFS_PARAMS, "acquire"))) {
+                    run("echo 1 > %s/acquire", SYSFS_PARAMS);
+                }
+            }
+            var finalApplied = applied;
             runOnUiThread(() -> {
-                var msg = result ?
-                    R.string.hugepage_pool_size_saved :
-                    R.string.hugepage_pool_size_failed;
+                int msg = !result ? R.string.hugepage_pool_size_failed
+                    : finalApplied ? R.string.hugepage_pool_size_applied
+                    : R.string.hugepage_pool_size_saved;
                 Toast.makeText(this, msg, LENGTH_SHORT).show();
+                refreshStatus();
             });
         });
     }
@@ -317,7 +588,7 @@ private void confirmUnload() {
     }
 
     private void doUnload() {
-        btnStop.setEnabled(false);
+        btnModuleToggle.setEnabled(false);
         runOnPool(() -> {
             var result = runList("rmmod", "gh_hugepage_reserve").isSuccess();
             runOnUiThread(() -> {
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/hugepage/HugePageColor.java b/app/src/main/java/cn/classfun/droidvm/ui/hugepage/HugePageColor.java
new file mode 100644
index 000000000..19f71c334
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/ui/hugepage/HugePageColor.java
@@ -0,0 +1,39 @@
+package cn.classfun.droidvm.ui.hugepage;
+
+import android.content.Context;
+import android.content.res.Configuration;
+import android.graphics.Color;
+
+import androidx.annotation.NonNull;
+import androidx.core.content.ContextCompat;
+
+import cn.classfun.droidvm.R;
+
+/**
+ * Deterministic per-process colors for the hugepage usage bar and list icons.
+ * The same pid always maps to the same hue (stable across refreshes); in dark
+ * mode colors are light, in light mode they are dark, so they read against the
+ * surface either way.
+ */
+final class HugePageColor {
+    private HugePageColor() {
+    }
+
+    static boolean isDark(Context ctx) {
+        int mode = ctx.getResources().getConfiguration().uiMode
+            & Configuration.UI_MODE_NIGHT_MASK;
+        return mode == Configuration.UI_MODE_NIGHT_YES;
+    }
+
+    /** Golden-angle hue spread keyed by pid, theme-aware saturation/value. */
+    static int forPid(int pid, boolean dark) {
+        float hue = ((pid * 137.508f) % 360f + 360f) % 360f;
+        float[] hsv = {hue, dark ? 0.50f : 0.72f, dark ? 0.90f : 0.55f};
+        return Color.HSVToColor(hsv);
+    }
+
+    /** Color for the "waiting for acquire" capacity-deficit portion. */
+    static int pending(@NonNull Context ctx) {
+        return ContextCompat.getColor(ctx, R.color.hugepage_pending);
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/hugepage/HugePageProcess.java b/app/src/main/java/cn/classfun/droidvm/ui/hugepage/HugePageProcess.java
new file mode 100644
index 000000000..c8ebec89f
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/ui/hugepage/HugePageProcess.java
@@ -0,0 +1,66 @@
+package cn.classfun.droidvm.ui.hugepage;
+
+import androidx.annotation.NonNull;
+import androidx.annotation.Nullable;
+
+/**
+ * A single process that the gh_hugepage_reserve module has served pool pages to.
+ * Sourced from the module's {@code vm_owners} sysfs file and enriched with live
+ * /proc state. {@link #vmName} is a best-effort match against running VMs and may
+ * be null for non-DroidVM processes that still consume the reserved pool.
+ */
+public final class HugePageProcess {
+    public final int pid;
+    @NonNull
+    public final String comm;
+    /**
+     * Pool pages served to this owner (cumulative, 2MiB each), or -1 when this
+     * row came from a system-wide /proc scan rather than module attribution.
+     */
+    public final long servedPages;
+    /**
+     * Current THP-backed memory mapped by the process, in kB (-1 if unknown).
+     * Sum of AnonHugePages + ShmemPmdMapped: crosvm guest RAM is shmem-backed
+     * THP (ShmemPmdMapped), so AnonHugePages alone is 0 for VMs.
+     */
+    public final long thpKb;
+    /** Process state char from /proc/<pid>/status, e.g. 'R','S','D' ('?' unknown). */
+    public final char state;
+    /** Matched VM name, or null when no running VM owns this pid. */
+    @Nullable
+    public final String vmName;
+    /** Whether /proc/<pid> still exists (process alive). */
+    public final boolean alive;
+    /** Assigned display color (icon tint + bar segment). */
+    public final int color;
+    /** True for the synthetic "unattributed" pool usage row (no actions). */
+    public final boolean unknown;
+    /** True for the synthetic "waiting for acquire" deficit row (acquire btn). */
+    public final boolean acquire;
+
+    public HugePageProcess(
+        int pid, @NonNull String comm, long servedPages,
+        long thpKb, char state, @Nullable String vmName, boolean alive,
+        int color, boolean unknown, boolean acquire
+    ) {
+        this.pid = pid;
+        this.comm = comm;
+        this.servedPages = servedPages;
+        this.thpKb = thpKb;
+        this.state = state;
+        this.vmName = vmName;
+        this.alive = alive;
+        this.color = color;
+        this.unknown = unknown;
+        this.acquire = acquire;
+    }
+
+    /** THP occupancy expressed in 2MiB pages (-1 if unknown). */
+    public long thpPages() {
+        return thpKb < 0 ? -1 : thpKb / 2048;
+    }
+
+    public boolean isUninterruptibleSleep() {
+        return state == 'D';
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/hugepage/HugePageProcessActivity.java b/app/src/main/java/cn/classfun/droidvm/ui/hugepage/HugePageProcessActivity.java
new file mode 100644
index 000000000..b23b37752
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/ui/hugepage/HugePageProcessActivity.java
@@ -0,0 +1,747 @@
+package cn.classfun.droidvm.ui.hugepage;
+
+import static android.view.View.GONE;
+import static android.view.View.VISIBLE;
+import static android.widget.Toast.LENGTH_LONG;
+import static android.widget.Toast.LENGTH_SHORT;
+import static cn.classfun.droidvm.lib.utils.FileUtils.shellCheckExists;
+import static cn.classfun.droidvm.lib.utils.FileUtils.shellReadFile;
+import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
+import static cn.classfun.droidvm.lib.utils.ProcessUtils.SIGKILL;
+import static cn.classfun.droidvm.lib.utils.ProcessUtils.SIGTERM;
+import static cn.classfun.droidvm.lib.utils.ProcessUtils.shellKillProcess;
+import static cn.classfun.droidvm.lib.utils.RunUtils.run;
+import static cn.classfun.droidvm.lib.utils.StringUtils.pathJoin;
+import static cn.classfun.droidvm.lib.utils.ThreadUtils.runOnPool;
+
+import android.os.Bundle;
+import android.os.Handler;
+import android.os.Looper;
+import android.util.Log;
+import android.view.MenuItem;
+import android.widget.TextView;
+import android.widget.Toast;
+
+import android.annotation.SuppressLint;
+
+import androidx.annotation.NonNull;
+import androidx.appcompat.view.menu.MenuBuilder;
+import androidx.annotation.Nullable;
+import androidx.appcompat.app.AppCompatActivity;
+import androidx.recyclerview.widget.LinearLayoutManager;
+import androidx.recyclerview.widget.RecyclerView;
+
+import com.google.android.material.appbar.MaterialToolbar;
+import com.google.android.material.dialog.MaterialAlertDialogBuilder;
+
+import java.util.ArrayList;
+import java.util.Collection;
+import java.util.HashMap;
+import java.util.List;
+import java.util.Map;
+import java.util.concurrent.CountDownLatch;
+import java.util.concurrent.TimeUnit;
+
+import cn.classfun.droidvm.R;
+import cn.classfun.droidvm.lib.daemon.DaemonConnection;
+import cn.classfun.droidvm.lib.size.SizeUtils;
+
+/**
+ * Lists the processes the gh_hugepage_reserve module has served pool pages to,
+ * sourced from the module's {@code vm_owners} sysfs file and enriched with live
+ * /proc state. Each row offers a kill action (SIGTERM/SIGKILL); processes stuck
+ * in uninterruptible sleep (D state) expose their kernel stack.
+ */
+public final class HugePageProcessActivity extends AppCompatActivity
+    implements HugePageProcessAdapter.Listener {
+    private static final String TAG = "HugePageProcessActivity";
+    private static final String SYSFS_BASE = "/sys/module/gh_hugepage_reserve";
+    private static final String SYSFS_PARAMS = pathJoin(SYSFS_BASE, "parameters");
+    private static final String SYSFS_OWNERS = pathJoin(SYSFS_PARAMS, "vm_owners");
+    private static final long REFRESH_INTERVAL_MS = 2000;
+    /** Acquire progress poll: ~500 ms ticks, capped so a wedged run can't poll forever. */
+    private static final long ACQUIRE_POLL_MS = 500;
+    private static final int ACQUIRE_POLL_MAX = 1200;   // ~10 min ceiling
+    private static final long HUGE_PAGE_BYTES = 2L * 1024 * 1024;
+
+    private final Handler handler = new Handler(Looper.getMainLooper());
+    private boolean resumed = false;
+    private boolean scanMode = false;
+    private boolean firstRefresh = true;
+    private volatile boolean acquireWatching = false;
+    // The KO-vs-THP fallback is resolved at most once (on entry). After that,
+    // and after any manual menu choice, we never auto-switch again - otherwise a
+    // single flaky root `test -e` under load would permanently bounce KO->THP.
+    private volatile boolean modeResolved = false;
+    private MaterialToolbar toolbar;
+    private RecyclerView recyclerView;
+    private TextView tvEmpty;
+    private TextView tvUsed;
+    private TextView tvAvail;
+    private TextView tvTotal;
+    private TextView tvPoolSize;
+    private SegmentedBar segBar;
+    private HugePageProcessAdapter adapter;
+
+    private final Runnable refreshRunnable = () -> {
+        refresh();
+        scheduleRefresh();
+    };
+
+    @Override
+    @SuppressLint("RestrictedApi")  // MenuBuilder.setOptionalIconsVisible
+    protected void onCreate(@Nullable Bundle savedInstanceState) {
+        super.onCreate(savedInstanceState);
+        setContentView(R.layout.activity_hugepage_process);
+        toolbar = findViewById(R.id.toolbar);
+        recyclerView = findViewById(R.id.recycler);
+        tvEmpty = findViewById(R.id.tv_empty);
+        tvUsed = findViewById(R.id.tv_used);
+        tvAvail = findViewById(R.id.tv_avail);
+        tvTotal = findViewById(R.id.tv_total);
+        tvPoolSize = findViewById(R.id.tv_pool_size);
+        segBar = findViewById(R.id.seg_bar);
+        toolbar.setTitle(R.string.hugepage_proc_title_screen);
+        toolbar.setNavigationOnClickListener(v -> finish());
+        adapter = new HugePageProcessAdapter(this);
+        recyclerView.setLayoutManager(new LinearLayoutManager(this));
+        recyclerView.setAdapter(adapter);
+
+        // Always default to KO (module attribution) on entry; refresh() auto
+        // switches to THP scan only when the module is unusable.
+        scanMode = false;
+        toolbar.inflateMenu(R.menu.menu_hugepage_process);
+        // Material hides menu-item icons in the overflow popup by default; force
+        // them on so the active-mode check icon is visible.
+        var menu = toolbar.getMenu();
+        if (menu instanceof MenuBuilder) {
+            ((MenuBuilder) menu).setOptionalIconsVisible(true);
+        }
+        updateModeChecked();
+        toolbar.setOnMenuItemClickListener(item -> {
+            int id = item.getItemId();
+            if (id == R.id.menu_mode_ko) {
+                setMode(false);
+                return true;
+            }
+            if (id == R.id.menu_mode_scan) {
+                setMode(true);
+                return true;
+            }
+            return false;
+        });
+    }
+
+    private void updateModeChecked() {
+        // Radio-style: filled circle = active mode, hollow circle = inactive.
+        // (overflow icons are forced visible in onCreate; a checkableBehavior
+        // radio didn't redraw here, and glyphs would be non-ASCII in code.)
+        var menu = toolbar.getMenu();
+        var ko = menu.findItem(R.id.menu_mode_ko);
+        var scan = menu.findItem(R.id.menu_mode_scan);
+        if (ko != null) ko.setIcon(modeIcon(!scanMode));
+        if (scan != null) scan.setIcon(modeIcon(scanMode));
+    }
+
+    private static int modeIcon(boolean active) {
+        return active ? R.drawable.ic_circle_filled : R.drawable.ic_circle_outline;
+    }
+
+    /** User picked a mode from the menu (session-only; entry always defaults KO). */
+    private void setMode(boolean scan) {
+        scanMode = scan;
+        modeResolved = true;   // explicit choice: never auto-switch again
+        updateModeChecked();
+        refresh();
+    }
+
+    /**
+     * KO was selected but its attribution API is absent (module not loaded, or
+     * an old .ko). Switch the effective mode to scan for this session without
+     * overwriting any saved preference, and tell the user why. A present-but-
+     * empty pool (no VM) never reaches here - that stays in KO.
+     */
+    private void fallbackToScan() {
+        if (!scanMode) {
+            scanMode = true;
+            updateModeChecked();
+            Toast.makeText(this, R.string.hugepage_proc_ko_unavailable,
+                LENGTH_SHORT).show();
+        }
+    }
+
+
+    @Override
+    protected void onResume() {
+        super.onResume();
+        resumed = true;
+        refresh();
+        scheduleRefresh();
+    }
+
+    @Override
+    protected void onPause() {
+        super.onPause();
+        resumed = false;
+        handler.removeCallbacks(refreshRunnable);
+    }
+
+    private void scheduleRefresh() {
+        if (resumed) handler.postDelayed(refreshRunnable, REFRESH_INTERVAL_MS);
+    }
+
+    /* ================================================================== */
+    /*  Data collection                                                   */
+    /* ================================================================== */
+
+    private void refresh() {
+        // Only the very first load shows a "scanning" placeholder. Every later
+        // refresh runs entirely in the background and atomically swaps the
+        // results in via showResult(), so the list never blanks mid-scan.
+        if (firstRefresh) {
+            recyclerView.setVisibility(GONE);
+            tvEmpty.setText(R.string.hugepage_proc_loading);
+            tvEmpty.setVisibility(VISIBLE);
+        }
+        runOnPool(() -> {
+            boolean dark = HugePageColor.isDark(this);
+            boolean useScan = scanMode;
+            boolean autoSwitched = false;
+            // ONE-SHOT: only on the first resolve do we consider falling back to
+            // scan when the KO attribution API is absent (module not loaded, or
+            // an old .ko without served_summary). After that we never re-probe,
+            // so a transient root `test -e` failure can't flip a working KO view
+            // to THP. A present-but-empty pool (no VM) stays in KO ("no VM").
+            if (!modeResolved) {
+                if (!useScan && !koApiPresent() && !koApiPresent()) {
+                    // Probed twice (a single root `test -e` can flake under load);
+                    // only fall back to scan if the KO API is really absent.
+                    useScan = true;
+                    autoSwitched = true;
+                }
+                modeResolved = true;
+            }
+
+            List<HugePageProcess> list = new ArrayList<>();
+            String emptyText;
+            if (useScan) {
+                // Scan mode: system-wide THP (Anon + Shmem), no module needed.
+                try {
+                    list = scanProc(dark);
+                } catch (Exception e) {
+                    Log.w(TAG, "Scan failed", e);
+                }
+                emptyText = getString(R.string.hugepage_proc_scan_empty);
+            } else {
+                // Reconcile the served-page table on every query, then read the
+                // reconciled per-owner live page counts.
+                var livePages = new HashMap<Integer, Long>();
+                try {
+                    run("echo 1 > %s/reconcile", SYSFS_PARAMS);
+                    var sum = shellReadFile(pathJoin(SYSFS_PARAMS, "served_summary"));
+                    for (var ln : sum.split("\n")) {
+                        ln = ln.trim();
+                        if (!ln.startsWith("owner ")) continue;
+                        int pid = -1;
+                        long pages = 0;
+                        for (var tok : ln.split("\\s+")) {
+                            if (tok.startsWith("pid=")) pid = Integer.parseInt(tok.substring(4));
+                            else if (tok.startsWith("pages=")) pages = Long.parseLong(tok.substring(6));
+                        }
+                        if (pid > 0) livePages.put(pid, pages);
+                    }
+                } catch (Exception e) {
+                    Log.w(TAG, "reconcile/served_summary unavailable (old .ko?)", e);
+                }
+                try {
+                    var owners = parseOwners(shellReadFile(SYSFS_OWNERS));
+                    if (!owners.isEmpty()) list = buildFromOwners(owners, dark, livePages);
+                } catch (Exception e) {
+                    Log.w(TAG, "Failed to collect hugepage owners", e);
+                }
+                // Reached only when the KO API is present (else we auto-switched
+                // to scan above), so an empty list genuinely means "no VM".
+                emptyText = getString(R.string.hugepage_proc_owner_empty);
+            }
+
+            // Three-value model: hold (pages in pool) + traced (sum of all
+            // applied/served processes) + waiting-to-acquire = want.
+            //   traced  = sum of listed rows' occupancy
+            //   hold    = pool_avail
+            //   want    = pool_want (grow target)
+            //   waiting = max(0, want - hold - traced)   <- one segment, no
+            //             separate "unattributed"; it absorbs grow-deficit and
+            //             orphaned (served-but-owner-gone) pages alike.
+            long tracedKb = 0;
+            for (var r : list) if (r.thpKb > 0) tracedKb += r.thpKb;
+            long holdKb, wantKb;
+            var pool = readPoolPages();
+            boolean kernelAcquiring = pool != null && pool.length >= 4 && pool[3] != 0;
+            if (pool != null) {
+                holdKb = pool[1] * 2048;   // avail
+                wantKb = pool[2] * 2048;   // want
+            } else {
+                holdKb = 0;
+                wantKb = tracedKb;
+            }
+            long deficitKb = wantKb - holdKb - tracedKb;
+            if (deficitKb > 0) {
+                list.add(new HugePageProcess(
+                    0, getString(R.string.hugepage_proc_deficit), -1, deficitKb,
+                    '?', null, true, HugePageColor.pending(this), false, true));
+            }
+
+            var finalList = list;
+            var finalEmpty = emptyText;
+            var finalAuto = autoSwitched;
+            var fTraced = tracedKb;
+            var fHold = holdKb;
+            var fWant = wantKb;
+            var fAcquiring = kernelAcquiring;
+            runOnUiThread(() -> {
+                if (finalAuto) fallbackToScan();
+                // Re-sync the menu radio every refresh. Doing it once in onCreate
+                // (right after inflateMenu, before the menu is laid out) doesn't
+                // stick, leaving the radio showing the wrong mode.
+                updateModeChecked();
+                adapter.setAcquiring(fAcquiring || acquireWatching);
+                showResult(finalList, fTraced, fHold, fWant, finalEmpty);
+            });
+        });
+    }
+
+    /** True if the loaded module exposes the KO attribution API (v7+). */
+    private boolean koApiPresent() {
+        return shellCheckExists(SYSFS_BASE)
+            && shellCheckExists(pathJoin(SYSFS_PARAMS, "served_summary"));
+    }
+
+    @Nullable
+    private long[] readPoolPages() {
+        try {
+            if (!shellCheckExists(SYSFS_BASE)) return null;
+            var raw = shellReadFile(pathJoin(SYSFS_PARAMS, "refill_stat"));
+            long total = -1, avail = 0, want = -1, acquiring = 0, served = 0;
+            for (var line : raw.split("\n")) {
+                line = line.trim();
+                if (line.startsWith("pool_total=")) {
+                    total = Long.parseLong(line.substring(11).trim());
+                } else if (line.startsWith("pool_avail=")) {
+                    avail = Long.parseLong(line.substring(11).trim());
+                } else if (line.startsWith("pool_want=")) {
+                    want = Long.parseLong(line.substring(10).trim());
+                } else if (line.startsWith("acquire_active=")) {
+                    acquiring = Long.parseLong(line.substring(15).trim());
+                } else if (line.startsWith("served=")) {
+                    served = Long.parseLong(line.substring(7).trim());
+                }
+            }
+            if (total < 0) return null;
+            // Old modules have no pool_want -> treat want == capacity.
+            if (want < 0) want = total;
+            return new long[]{total, avail, want, acquiring, served};
+        } catch (Exception e) {
+            return null;
+        }
+    }
+
+    /**
+     * Batch-read live /proc state (R/S/D + liveness) and THP occupancy
+     * (AnonHugePages + ShmemPmdMapped) for the given pids in a single root call.
+     * Shared by KO attribution (buildFromOwners) and THP scan (scanProc).
+     */
+    @NonNull
+    private Map<Integer, ProcInfo> readProcInfo(@NonNull Collection<Integer> pids) {
+        if (pids.isEmpty()) return new HashMap<>();
+        var pidList = new StringBuilder();
+        for (var pid : pids) {
+            if (pidList.length() > 0) pidList.append(' ');
+            pidList.append(pid);
+        }
+        var procRaw = run(
+            "for p in %s; do echo \"@@@ $p\"; " +
+                "grep -E '^State:' /proc/$p/status 2>/dev/null; " +
+                "grep -E '^AnonHugePages:|^ShmemPmdMapped:' " +
+                "/proc/$p/smaps_rollup 2>/dev/null; " +
+                "done",
+            pidList.toString()
+        ).getOutString();
+        return parseProcInfo(procRaw);
+    }
+
+    @NonNull
+    private List<HugePageProcess> buildFromOwners(
+        @NonNull List<Owner> owners, boolean dark,
+        @NonNull Map<Integer, Long> livePages
+    ) {
+        var pids = new ArrayList<Integer>();
+        for (var o : owners) pids.add(o.pid);
+        var procInfo = readProcInfo(pids);
+
+        // Best-effort map pid -> VM name (only running VMs have a live pid).
+        var vmMap = fetchVmMap();
+
+        var result = new ArrayList<HugePageProcess>();
+        for (var o : owners) {
+            var info = procInfo.get(o.pid);
+            char state = info != null ? info.state : '?';
+            boolean alive = info != null && info.alive;
+            // Occupancy = traced (reconciled served-page count for this owner),
+            // not the /proc THP scan. /proc is only used for state + liveness.
+            Long served = livePages.get(o.pid);
+            long tracedKb = (served != null ? served : 0L) * 2048;
+            result.add(new HugePageProcess(
+                o.pid, o.comm, -1, tracedKb, state,
+                vmMap.get(o.pid), alive, HugePageColor.forPid(o.pid, dark),
+                false, false));
+        }
+        result.sort((a, b) -> Long.compare(b.thpKb, a.thpKb));
+        return result;
+    }
+
+    /**
+     * VM-only "scan": list the daemon's running VM processes and their actual
+     * THP occupancy (AnonHugePages + ShmemPmdMapped) from smaps. We deliberately
+     * do NOT scan all of /proc - system-wide THP (launchers, etc.) is noise that
+     * has nothing to do with the reserve pool. Works without the kernel module
+     * (ground-truth occupancy straight from each VM's smaps).
+     */
+    @NonNull
+    private List<HugePageProcess> scanProc(boolean dark) {
+        // Running VMs (pid -> name) come from the daemon.
+        var vmMap = fetchVmMap();
+        if (vmMap.isEmpty()) return new ArrayList<>();
+
+        var procInfo = readProcInfo(vmMap.keySet());
+
+        var result = new ArrayList<HugePageProcess>();
+        for (var e : vmMap.entrySet()) {
+            int pid = e.getKey();
+            var info = procInfo.get(pid);
+            char state = info != null ? info.state : '?';
+            long thp = info != null ? info.thpKb : -1;
+            boolean alive = info != null && info.alive;
+            result.add(new HugePageProcess(
+                pid, e.getValue(), -1, thp, state, e.getValue(), alive,
+                HugePageColor.forPid(pid, dark), false, false));
+        }
+        result.sort((a, b) -> Long.compare(b.thpKb, a.thpKb));
+        return result;
+    }
+
+    private static final class Owner {
+        final int pid;
+        final String comm;
+        final long served;
+
+        Owner(int pid, String comm, long served) {
+            this.pid = pid;
+            this.comm = comm;
+            this.served = served;
+        }
+    }
+
+    private static final class ProcInfo {
+        final char state;
+        final long thpKb;
+        final boolean alive;
+
+        ProcInfo(char state, long thpKb, boolean alive) {
+            this.state = state;
+            this.thpKb = thpKb;
+            this.alive = alive;
+        }
+    }
+
+    @NonNull
+    private List<Owner> parseOwners(@NonNull String raw) {
+        var list = new ArrayList<Owner>();
+        for (var line : raw.split("\n")) {
+            line = line.trim();
+            if (line.isEmpty()) continue;
+            // Format: pid=<n> served=<n> comm=<rest>
+            int pid = -1;
+            long served = 0;
+            String comm = "?";
+            int commIdx = line.indexOf("comm=");
+            if (commIdx >= 0) comm = line.substring(commIdx + 5).trim();
+            for (var tok : line.split("\\s+")) {
+                if (tok.startsWith("pid=")) {
+                    try {
+                        pid = Integer.parseInt(tok.substring(4));
+                    } catch (NumberFormatException ignored) {
+                    }
+                } else if (tok.startsWith("served=")) {
+                    try {
+                        served = Long.parseLong(tok.substring(7));
+                    } catch (NumberFormatException ignored) {
+                    }
+                }
+            }
+            if (pid > 0) list.add(new Owner(pid, comm, served));
+        }
+        return list;
+    }
+
+    @NonNull
+    private Map<Integer, ProcInfo> parseProcInfo(@NonNull String raw) {
+        var map = new HashMap<Integer, ProcInfo>();
+        int curPid = -1;
+        char state = '?';
+        long thp = -1; // -1 = unknown; becomes sum of Anon + Shmem THP
+        boolean alive = false;
+        for (var line : raw.split("\n")) {
+            if (line.startsWith("@@@ ")) {
+                if (curPid > 0)
+                    map.put(curPid, new ProcInfo(state, thp, alive));
+                try {
+                    curPid = Integer.parseInt(line.substring(4).trim());
+                } catch (NumberFormatException e) {
+                    curPid = -1;
+                }
+                state = '?';
+                thp = -1;
+                alive = false;
+            } else if (line.startsWith("State:")) {
+                var v = line.substring(6).trim();
+                if (!v.isEmpty()) state = v.charAt(0);
+                alive = true; // status readable -> process exists
+            } else if (line.startsWith("AnonHugePages:")
+                || line.startsWith("ShmemPmdMapped:")) {
+                var digits = line.replaceAll("[^0-9]", "");
+                if (!digits.isEmpty()) {
+                    try {
+                        thp = (thp < 0 ? 0 : thp) + Long.parseLong(digits);
+                    } catch (NumberFormatException ignored) {
+                    }
+                }
+            }
+        }
+        if (curPid > 0) map.put(curPid, new ProcInfo(state, thp, alive));
+        return map;
+    }
+
+    @NonNull
+    private Map<Integer, String> fetchVmMap() {
+        var map = new HashMap<Integer, String>();
+        var latch = new CountDownLatch(1);
+        DaemonConnection.getInstance().buildRequest("vm_list")
+            .onResponse(resp -> {
+                try {
+                    var arr = resp.optJSONArray("data");
+                    if (arr != null) {
+                        for (int i = 0; i < arr.length(); i++) {
+                            var obj = arr.optJSONObject(i);
+                            if (obj == null) continue;
+                            int pid = obj.optInt("pid", -1);
+                            var name = obj.optString("name", null);
+                            if (pid > 0 && name != null) map.put(pid, name);
+                        }
+                    }
+                } finally {
+                    latch.countDown();
+                }
+            })
+            .onError(e -> latch.countDown())
+            .invoke();
+        try {
+            //noinspection ResultOfMethodCallIgnored
+            latch.await(2, TimeUnit.SECONDS);
+        } catch (InterruptedException ignored) {
+        }
+        return map;
+    }
+
+    private void showResult(
+        @NonNull List<HugePageProcess> list, long usedKb, long availKb,
+        long wantKb, @NonNull String emptyText
+    ) {
+        if (isFinishing()) return;
+        firstRefresh = false;
+        adapter.submit(list);
+
+        // Segmented bar: one colored segment per row, including the
+        // "waiting for acquire" (deficit) row. Track = available; total = want.
+        int n = list.size();
+        int[] colors = new int[n];
+        float[] values = new float[n];
+        long seg = 0;
+        for (int i = 0; i < n; i++) {
+            colors[i] = list.get(i).color;
+            values[i] = Math.max(0, list.get(i).thpKb);
+            seg += values[i];
+        }
+        float total = Math.max(wantKb, seg + Math.max(0, availKb));
+        segBar.setData(colors, values, total);
+
+        // 2x2 caption: used / available on top, total / pool-size below.
+        // Total = the real held reserve (used + avail = owned + traced), shown
+        // raw with no clamp to pool size: if the kernel ever fails to release
+        // pages on a shrink, total exceeds the pool size you set, surfacing it
+        // instead of hiding it.
+        long heldKb = usedKb + availKb;
+        tvUsed.setText(getString(R.string.hugepage_stat_pool_used,
+            usedKb / 2048, SizeUtils.formatSize(usedKb * 1024)));
+        tvAvail.setText(getString(R.string.hugepage_stat_pool_available,
+            availKb / 2048, SizeUtils.formatSize(availKb * 1024)));
+        tvTotal.setText(getString(R.string.hugepage_stat_pool_total,
+            heldKb / 2048, SizeUtils.formatSize(heldKb * 1024)));
+        tvPoolSize.setText(getString(R.string.hugepage_stat_pool_size,
+            wantKb / 2048, SizeUtils.formatSize(wantKb * 1024)));
+
+        if (list.isEmpty()) {
+            tvEmpty.setText(emptyText);
+            tvEmpty.setVisibility(VISIBLE);
+            recyclerView.setVisibility(GONE);
+        } else {
+            tvEmpty.setVisibility(GONE);
+            recyclerView.setVisibility(VISIBLE);
+        }
+    }
+
+    /* ================================================================== */
+    /*  Actions                                                           */
+    /* ================================================================== */
+
+    @Override
+    public void onKill(@NonNull HugePageProcess proc) {
+        var label = getString(R.string.hugepage_proc_title, proc.comm, proc.pid);
+        var signals = new String[]{
+            getString(R.string.hugepage_proc_sigterm),
+            getString(R.string.hugepage_proc_sigkill),
+        };
+        final int[] sel = {0}; // default SIGTERM
+        new MaterialAlertDialogBuilder(this)
+            .setTitle(getString(R.string.hugepage_proc_kill_title, label))
+            .setSingleChoiceItems(signals, 0, (d, w) -> sel[0] = w)
+            .setPositiveButton(R.string.hugepage_proc_kill,
+                (d, w) -> doKill(proc, sel[0] == 0 ? SIGTERM : SIGKILL))
+            .setNegativeButton(android.R.string.cancel, null)
+            .show();
+    }
+
+    private void doKill(@NonNull HugePageProcess proc, int signal) {
+        runOnPool(() -> {
+            var ok = shellKillProcess(proc.pid, signal);
+            runOnUiThread(() -> {
+                Toast.makeText(this, ok ?
+                        R.string.hugepage_proc_kill_sent :
+                        R.string.hugepage_proc_kill_failed,
+                    LENGTH_SHORT).show();
+                refresh();
+            });
+        });
+    }
+
+    @Override
+    public void onAcquire() {
+        if (acquireWatching) return;            // already polling a run
+        Toast.makeText(this, R.string.hugepage_proc_acquire_running, LENGTH_SHORT).show();
+        acquireWatching = true;
+        adapter.setAcquiring(true);             // immediate spinner feedback
+        // Fire-and-poll on a dedicated thread so the shared pool executor (and
+        // thus the periodic refresh that animates the climbing numbers) is never
+        // blocked. The kernel 'acquire' write returns immediately; the worker
+        // migrates in the background and we watch acquire_active for completion.
+        new Thread(() -> {
+            boolean triggered = false;
+            try {
+                if (shellCheckExists(pathJoin(SYSFS_PARAMS, "acquire"))) {
+                    triggered = run("echo 1 > %s/acquire", SYSFS_PARAMS).isSuccess();
+                } else if (shellCheckExists(pathJoin(SYSFS_PARAMS, "manual_refill"))) {
+                    triggered = run("echo 1 > %s/manual_refill", SYSFS_PARAMS).isSuccess();
+                }
+            } catch (Exception e) {
+                Log.w(TAG, "acquire trigger failed", e);
+            }
+            if (!triggered) {
+                acquireWatching = false;
+                runOnUiThread(() -> Toast.makeText(this,
+                    R.string.hugepage_refill_failed, LENGTH_SHORT).show());
+                return;
+            }
+            // Poll until the worker clears acquire_active. Each tick nudges the
+            // UI to re-read refill_stat so the count visibly climbs.
+            long[] pages = null;
+            for (int i = 0; i < ACQUIRE_POLL_MAX; i++) {
+                try { Thread.sleep(ACQUIRE_POLL_MS); } catch (InterruptedException ignored) {}
+                pages = readPoolPages();      // {total, avail, want, acquiring, served}
+                runOnUiThread(this::refresh); // animate climbing numbers
+                if (pages == null || pages.length < 5 || pages[3] == 0) break;
+            }
+            var finalPages = pages;
+            acquireWatching = false;
+            runOnUiThread(() -> {
+                if (finalPages != null && finalPages.length >= 5) {
+                    // Achieved = owned + traced (pool_avail + served), NOT
+                    // pool_total: after a shrink that left served pages out,
+                    // pool_total under-counts the pages VMs already hold.
+                    long got = finalPages[1] + finalPages[4];
+                    long want = finalPages[2] >= 0 ? finalPages[2] : got;
+                    String msg = got >= want
+                        ? getString(R.string.hugepage_proc_acquire_full,
+                            fmtPages(want))
+                        : getString(R.string.hugepage_proc_acquire_partial,
+                            fmtPages(got), fmtPages(want));
+                    Toast.makeText(this, msg, LENGTH_LONG).show();
+                } else {
+                    Toast.makeText(this, R.string.hugepage_proc_acquire_done,
+                        LENGTH_SHORT).show();
+                }
+                refresh();
+            });
+        }, "hugepage-acquire").start();
+    }
+
+    /** Tapping the acquire spinner stops the run; the poll loop then finishes. */
+    @Override
+    public void onStopAcquire() {
+        runOnPool(() -> {
+            try {
+                run("echo 0 > %s/acquire", SYSFS_PARAMS);
+            } catch (Exception e) {
+                Log.w(TAG, "stop acquire failed", e);
+            }
+            runOnUiThread(this::refresh);
+        });
+    }
+
+    /** Format a huge-page count (2 MiB each) as a human size, e.g. "5.84 GiB". */
+    private static String fmtPages(long pages) {
+        return SizeUtils.formatSize(pages * HUGE_PAGE_BYTES);
+    }
+
+    @Override
+    public void onShowStack(@NonNull HugePageProcess proc) {
+        runOnPool(() -> {
+            String stack;
+            try {
+                stack = shellReadFile(fmt("/proc/%d/stack", proc.pid));
+            } catch (Exception e) {
+                stack = "";
+            }
+            if (stack.trim().isEmpty())
+                stack = getString(R.string.hugepage_proc_stack_unavailable);
+            var finalStack = stack;
+            runOnUiThread(() -> showStackDialog(proc, finalStack));
+        });
+    }
+
+    private void showStackDialog(@NonNull HugePageProcess proc, @NonNull String stack) {
+        if (isFinishing()) return;
+        var tv = new TextView(this);
+        int pad = (int) (16 * getResources().getDisplayMetrics().density);
+        tv.setPadding(pad, pad, pad, pad);
+        tv.setTextIsSelectable(true);
+        tv.setTypeface(android.graphics.Typeface.MONOSPACE);
+        tv.setTextSize(12);
+        tv.setText(stack);
+        var scroll = new androidx.core.widget.NestedScrollView(this);
+        scroll.addView(tv);
+        new MaterialAlertDialogBuilder(this)
+            .setTitle(getString(R.string.hugepage_proc_stack_title, proc.pid))
+            .setView(scroll)
+            .setPositiveButton(android.R.string.ok, null)
+            .show();
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/hugepage/HugePageProcessAdapter.java b/app/src/main/java/cn/classfun/droidvm/ui/hugepage/HugePageProcessAdapter.java
new file mode 100644
index 000000000..88aee65ac
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/ui/hugepage/HugePageProcessAdapter.java
@@ -0,0 +1,198 @@
+package cn.classfun.droidvm.ui.hugepage;
+
+import static android.view.View.GONE;
+import static android.view.View.VISIBLE;
+
+import android.annotation.SuppressLint;
+import android.view.LayoutInflater;
+import android.view.View;
+import android.view.ViewGroup;
+import android.widget.ImageButton;
+import android.widget.ImageView;
+import android.widget.TextView;
+
+import androidx.annotation.NonNull;
+import androidx.recyclerview.widget.RecyclerView;
+
+import com.google.android.material.color.MaterialColors;
+
+import java.util.ArrayList;
+import java.util.List;
+
+import cn.classfun.droidvm.R;
+import cn.classfun.droidvm.lib.size.SizeUtils;
+
+@SuppressLint("NotifyDataSetChanged")
+@SuppressWarnings("ClassEscapesDefinedScope")
+public final class HugePageProcessAdapter
+    extends RecyclerView.Adapter<HugePageProcessAdapter.Holder> {
+
+    public interface Listener {
+        void onKill(@NonNull HugePageProcess proc);
+
+        void onShowStack(@NonNull HugePageProcess proc);
+
+        void onAcquire();
+
+        void onStopAcquire();
+    }
+
+    private static final long PAGE_SIZE = 2L * 1024 * 1024;
+    private final List<HugePageProcess> items = new ArrayList<>();
+    private final Listener listener;
+    private boolean acquiring = false;
+
+    public HugePageProcessAdapter(@NonNull Listener listener) {
+        this.listener = listener;
+        setHasStableIds(true);
+    }
+
+    /** Toggle the spinner on the Acquire row while a run is in flight. */
+    public void setAcquiring(boolean acquiring) {
+        if (this.acquiring == acquiring) return;
+        this.acquiring = acquiring;
+        notifyDataSetChanged();
+    }
+
+    public void submit(@NonNull List<HugePageProcess> newItems) {
+        items.clear();
+        items.addAll(newItems);
+        notifyDataSetChanged();
+    }
+
+    @Override
+    public long getItemId(int position) {
+        return items.get(position).pid;
+    }
+
+    @Override
+    public int getItemCount() {
+        return items.size();
+    }
+
+    @NonNull
+    @Override
+    public Holder onCreateViewHolder(@NonNull ViewGroup parent, int viewType) {
+        var view = LayoutInflater.from(parent.getContext())
+            .inflate(R.layout.item_hugepage_process, parent, false);
+        return new Holder(view);
+    }
+
+    @Override
+    public void onBindViewHolder(@NonNull Holder holder, int position) {
+        var ctx = holder.itemView.getContext();
+        var p = items.get(position);
+
+        holder.icon.setColorFilter(p.color);
+
+        // Usage line: page count (size). Always shown when known.
+        if (p.thpKb >= 0) {
+            holder.anon.setVisibility(VISIBLE);
+            holder.anon.setText(ctx.getString(
+                R.string.hugepage_proc_anon,
+                p.thpPages(), SizeUtils.formatSize(p.thpKb * 1024)));
+        } else {
+            holder.anon.setVisibility(GONE);
+        }
+
+        if (p.unknown || p.acquire) {
+            // Synthetic rows: "unattributed" (no action) and "waiting for
+            // acquire" (deficit, with an Acquire button).
+            holder.title.setText(p.comm);
+            holder.served.setVisibility(GONE);
+            holder.stateView.setVisibility(GONE);
+            holder.btnStack.setVisibility(GONE);
+            holder.btnStack.setOnClickListener(null);
+            holder.itemView.setAlpha(1f);
+            if (p.acquire) {
+                // While a run is in flight show the spinner in place of the
+                // button - same look as before, but tapping it stops the acquire.
+                holder.progressAcquire.setVisibility(acquiring ? VISIBLE : GONE);
+                holder.progressAcquire.setOnClickListener(
+                    acquiring ? v -> listener.onStopAcquire() : null);
+                holder.btnKill.setVisibility(acquiring ? GONE : VISIBLE);
+                holder.btnKill.setImageResource(R.drawable.ic_download);
+                holder.btnKill.setColorFilter(MaterialColors.getColor(
+                    holder.itemView, androidx.appcompat.R.attr.colorPrimary));
+                holder.btnKill.setContentDescription(
+                    ctx.getString(R.string.hugepage_proc_acquire));
+                holder.btnKill.setOnClickListener(v -> listener.onAcquire());
+            } else {
+                holder.progressAcquire.setVisibility(GONE);
+                holder.progressAcquire.setOnClickListener(null);
+                holder.btnKill.setVisibility(GONE);
+                holder.btnKill.setOnClickListener(null);
+            }
+            return;
+        }
+
+        holder.progressAcquire.setVisibility(GONE);
+        holder.btnKill.setVisibility(VISIBLE);
+        // Restore the kill affordance (views are recycled from acquire rows).
+        holder.btnKill.setImageResource(R.drawable.ic_close);
+        holder.btnKill.setColorFilter(MaterialColors.getColor(
+            holder.itemView, androidx.appcompat.R.attr.colorError));
+        holder.btnKill.setContentDescription(
+            ctx.getString(R.string.hugepage_proc_kill));
+        holder.title.setText(ctx.getString(
+            R.string.hugepage_proc_title, p.comm, p.pid));
+
+        // Served pages are only known for module-attributed owners; scan-sourced
+        // rows (servedPages < 0) hide it.
+        if (p.servedPages >= 0) {
+            holder.served.setVisibility(VISIBLE);
+            holder.served.setText(ctx.getString(
+                R.string.hugepage_proc_served,
+                p.servedPages, SizeUtils.formatSize(p.servedPages * PAGE_SIZE)));
+        } else {
+            holder.served.setVisibility(GONE);
+        }
+
+        // Kernel state char only (R/S/D/...), shown left of the kill button.
+        // D (uninterruptible sleep) highlighted in the error color.
+        holder.stateView.setVisibility(VISIBLE);
+        holder.stateView.setText(String.valueOf(p.state));
+        holder.stateView.setTextColor(MaterialColors.getColor(holder.itemView,
+            p.isUninterruptibleSleep()
+                ? androidx.appcompat.R.attr.colorError
+                : com.google.android.material.R.attr.colorOnSurfaceVariant));
+
+        boolean dead = !p.alive;
+        holder.itemView.setAlpha(dead ? 0.45f : 1f);
+
+        // D-state -> show kernel-stack icon
+        if (p.isUninterruptibleSleep()) {
+            holder.btnStack.setVisibility(VISIBLE);
+            holder.btnStack.setOnClickListener(v -> listener.onShowStack(p));
+        } else {
+            holder.btnStack.setVisibility(GONE);
+            holder.btnStack.setOnClickListener(null);
+        }
+
+        holder.btnKill.setEnabled(!dead);
+        holder.btnKill.setOnClickListener(dead ? null : v -> listener.onKill(p));
+    }
+
+    static final class Holder extends RecyclerView.ViewHolder {
+        final ImageView icon;
+        final TextView title;
+        final TextView served;
+        final TextView anon;
+        final TextView stateView;
+        final ImageButton btnStack;
+        final ImageButton btnKill;
+        final View progressAcquire;
+
+        Holder(@NonNull View v) {
+            super(v);
+            icon = v.findViewById(R.id.iv_proc_icon);
+            title = v.findViewById(R.id.tv_proc_title);
+            served = v.findViewById(R.id.tv_proc_served);
+            anon = v.findViewById(R.id.tv_proc_anon);
+            stateView = v.findViewById(R.id.tv_proc_state);
+            btnStack = v.findViewById(R.id.btn_proc_stack);
+            btnKill = v.findViewById(R.id.btn_proc_kill);
+            progressAcquire = v.findViewById(R.id.progress_proc_acquire);
+        }
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/hugepage/SegmentedBar.java b/app/src/main/java/cn/classfun/droidvm/ui/hugepage/SegmentedBar.java
new file mode 100644
index 000000000..51d866ba3
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/ui/hugepage/SegmentedBar.java
@@ -0,0 +1,77 @@
+package cn.classfun.droidvm.ui.hugepage;
+
+import android.content.Context;
+import android.graphics.Canvas;
+import android.graphics.Paint;
+import android.graphics.Path;
+import android.graphics.RectF;
+import android.util.AttributeSet;
+import android.view.View;
+
+import androidx.annotation.NonNull;
+import androidx.annotation.Nullable;
+import androidx.core.content.ContextCompat;
+
+import cn.classfun.droidvm.R;
+
+/**
+ * A rounded horizontal bar split into colored segments (one per process) plus a
+ * track for the remaining/available portion. Widths are proportional; the caller
+ * passes a {@code total} that is always &gt;= the sum of segment values, so the
+ * segments can never overflow the bar (no crash on over-accounting).
+ */
+public final class SegmentedBar extends View {
+    private int[] colors = new int[0];
+    private float[] values = new float[0];
+    private float total = 0f;
+    private int trackColor;
+    private final Paint paint = new Paint(Paint.ANTI_ALIAS_FLAG);
+    private final RectF rect = new RectF();
+    private final Path clip = new Path();
+    private final float radius;
+
+    public SegmentedBar(Context context) {
+        this(context, null);
+    }
+
+    public SegmentedBar(Context context, @Nullable AttributeSet attrs) {
+        super(context, attrs);
+        radius = 3f * getResources().getDisplayMetrics().density;
+        trackColor = ContextCompat.getColor(context, R.color.hugepage_bar_track);
+    }
+
+    public void setData(@NonNull int[] colors, @NonNull float[] values, float total) {
+        this.colors = colors;
+        this.values = values;
+        this.total = total;
+        invalidate();
+    }
+
+    @Override
+    protected void onDraw(@NonNull Canvas canvas) {
+        super.onDraw(canvas);
+        float w = getWidth();
+        float h = getHeight();
+        if (w <= 0 || h <= 0) return;
+
+        rect.set(0, 0, w, h);
+        clip.reset();
+        clip.addRoundRect(rect, radius, radius, Path.Direction.CW);
+        canvas.clipPath(clip);
+
+        paint.setStyle(Paint.Style.FILL);
+        paint.setColor(trackColor);
+        canvas.drawRect(0, 0, w, h, paint);
+
+        if (total <= 0f) return;
+        float x = 0f;
+        int n = Math.min(colors.length, values.length);
+        for (int i = 0; i < n; i++) {
+            float segW = w * (values[i] / total);
+            if (segW <= 0f) continue;
+            paint.setColor(colors[i]);
+            canvas.drawRect(x, 0, Math.min(x + segW, w), h, paint);
+            x += segW;
+        }
+    }
+}
diff --git a/app/src/main/res/drawable/ic_circle_filled.xml b/app/src/main/res/drawable/ic_circle_filled.xml
new file mode 100644
index 000000000..862bd7269
--- /dev/null
+++ b/app/src/main/res/drawable/ic_circle_filled.xml
@@ -0,0 +1,9 @@
+<vector xmlns:android="http://schemas.android.com/apk/res/android"
+    android:width="24dp"
+    android:height="24dp"
+    android:viewportWidth="24"
+    android:viewportHeight="24">
+    <path
+        android:fillColor="?attr/colorOnSurface"
+        android:pathData="M7,12 a5,5 0 1,0 10,0 a5,5 0 1,0 -10,0z" />
+</vector>
diff --git a/app/src/main/res/drawable/ic_circle_outline.xml b/app/src/main/res/drawable/ic_circle_outline.xml
new file mode 100644
index 000000000..add05b31d
--- /dev/null
+++ b/app/src/main/res/drawable/ic_circle_outline.xml
@@ -0,0 +1,11 @@
+<vector xmlns:android="http://schemas.android.com/apk/res/android"
+    android:width="24dp"
+    android:height="24dp"
+    android:viewportWidth="24"
+    android:viewportHeight="24">
+    <path
+        android:fillColor="#00000000"
+        android:strokeColor="?attr/colorOnSurface"
+        android:strokeWidth="2"
+        android:pathData="M7,12 a5,5 0 1,0 10,0 a5,5 0 1,0 -10,0z" />
+</vector>
diff --git a/app/src/main/res/layout/activity_hugepage.xml b/app/src/main/res/layout/activity_hugepage.xml
index 79b609c00..8c3c9f8a4 100644
--- a/app/src/main/res/layout/activity_hugepage.xml
+++ b/app/src/main/res/layout/activity_hugepage.xml
@@ -1,24 +1,32 @@
 <?xml version="1.0" encoding="utf-8"?>
-<LinearLayout xmlns:android="http://schemas.android.com/apk/res/android"
+<androidx.coordinatorlayout.widget.CoordinatorLayout xmlns:android="http://schemas.android.com/apk/res/android"
     xmlns:app="http://schemas.android.com/apk/res-auto"
     xmlns:tools="http://schemas.android.com/tools"
     android:layout_width="match_parent"
     android:layout_height="match_parent"
     android:fitsSystemWindows="true"
-    android:orientation="vertical"
     tools:context=".ui.hugepage.HugePageActivity">
 
-    <com.google.android.material.appbar.MaterialToolbar
-        android:id="@+id/toolbar"
+    <com.google.android.material.appbar.AppBarLayout
+        android:id="@+id/app_bar"
         android:layout_width="match_parent"
-        android:layout_height="?attr/actionBarSize"
-        app:navigationIcon="?attr/homeAsUpIndicator" />
+        android:layout_height="wrap_content"
+        android:fitsSystemWindows="true">
+
+        <com.google.android.material.appbar.MaterialToolbar
+            android:id="@+id/toolbar"
+            android:layout_width="match_parent"
+            android:layout_height="?attr/actionBarSize"
+            app:navigationIcon="?attr/homeAsUpIndicator" />
+
+    </com.google.android.material.appbar.AppBarLayout>
 
     <androidx.core.widget.NestedScrollView
         android:layout_width="match_parent"
         android:layout_height="match_parent"
         android:clipToPadding="false"
-        android:paddingBottom="16dp">
+        android:paddingBottom="16dp"
+        app:layout_behavior="@string/appbar_scrolling_view_behavior">
 
         <LinearLayout
             android:id="@+id/content"
@@ -123,27 +131,57 @@
                 android:layout_margin="8dp"
                 android:orientation="horizontal">
 
-                <com.google.android.material.button.MaterialButton
-                    android:id="@+id/btn_manual_refill"
-                    style="@style/Widget.Material3.Button.TonalButton"
+                <FrameLayout
                     android:layout_width="0dp"
                     android:layout_height="wrap_content"
                     android:layout_margin="4dp"
-                    android:layout_weight="1"
-                    android:text="@string/hugepage_manual_refill"
-                    app:icon="@drawable/ic_refresh" />
+                    android:layout_weight="1">
+
+                    <com.google.android.material.button.MaterialButton
+                        android:id="@+id/btn_save_pool_size"
+                        style="@style/Widget.Material3.Button.TonalButton"
+                        android:layout_width="match_parent"
+                        android:layout_height="wrap_content"
+                        android:text="@string/hugepage_save_pool_size"
+                        app:icon="@drawable/ic_floppy" />
+
+                    <!-- Acquire spinner with a pause glyph in the centre. Not
+                         clickable itself: touches pass through to the button
+                         below, whose handler interrupts the acquire. -->
+                    <FrameLayout
+                        android:id="@+id/progress_save_pool_size"
+                        android:layout_width="24dp"
+                        android:layout_height="24dp"
+                        android:layout_gravity="center"
+                        android:visibility="gone"
+                        tools:visibility="visible">
+
+                        <ProgressBar
+                            style="?android:attr/progressBarStyleSmall"
+                            android:layout_width="match_parent"
+                            android:layout_height="match_parent"
+                            android:indeterminate="true"
+                            android:indeterminateTint="?attr/colorOnSecondaryContainer" />
+
+                        <ImageView
+                            android:layout_width="12dp"
+                            android:layout_height="12dp"
+                            android:layout_gravity="center"
+                            android:contentDescription="@string/hugepage_proc_acquire_stop"
+                            android:src="@drawable/ic_pause"
+                            app:tint="?attr/colorOnSecondaryContainer" />
+                    </FrameLayout>
+                </FrameLayout>
 
                 <com.google.android.material.button.MaterialButton
-                    android:id="@+id/btn_stop"
-                    style="@style/Widget.Material3.Button.OutlinedButton"
+                    android:id="@+id/btn_module_toggle"
+                    style="@style/Widget.Material3.Button.TonalButton"
                     android:layout_width="0dp"
                     android:layout_height="wrap_content"
                     android:layout_margin="4dp"
                     android:layout_weight="1"
-                    android:text="@string/hugepage_stop"
-                    android:textColor="?attr/colorError"
-                    app:icon="@drawable/ic_stop"
-                    app:iconTint="?attr/colorError" />
+                    android:text="@string/hugepage_btn_enable"
+                    app:icon="@drawable/ic_start" />
             </LinearLayout>
 
             <LinearLayout
@@ -152,15 +190,11 @@
                 android:layout_margin="8dp"
                 android:orientation="vertical">
 
-                <com.google.android.material.progressindicator.LinearProgressIndicator
-                    android:id="@+id/progress_pool_usage"
+                <cn.classfun.droidvm.ui.hugepage.SegmentedBar
+                    android:id="@+id/seg_pool_bar"
                     android:layout_width="match_parent"
-                    android:layout_height="wrap_content"
-                    android:layout_margin="12dp"
-                    android:indeterminate="false"
-                    android:max="1000"
-                    app:trackCornerRadius="2dp"
-                    app:trackThickness="6dp" />
+                    android:layout_height="10dp"
+                    android:layout_margin="12dp" />
 
                 <LinearLayout
                     android:layout_width="match_parent"
@@ -170,7 +204,7 @@
                     android:orientation="horizontal">
 
                     <TextView
-                        android:id="@+id/tv_pool_avail"
+                        android:id="@+id/tv_pool_used"
                         android:layout_width="wrap_content"
                         android:layout_height="wrap_content"
                         android:textSize="12sp" />
@@ -180,15 +214,52 @@
                         android:layout_height="0dp"
                         android:layout_weight="1" />
 
+                    <TextView
+                        android:id="@+id/tv_pool_avail"
+                        android:layout_width="wrap_content"
+                        android:layout_height="wrap_content"
+                        android:textSize="12sp" />
+
+                </LinearLayout>
+
+                <LinearLayout
+                    android:layout_width="match_parent"
+                    android:layout_height="wrap_content"
+                    android:layout_marginStart="8dp"
+                    android:layout_marginEnd="8dp"
+                    android:layout_marginTop="2dp"
+                    android:orientation="horizontal">
+
                     <TextView
                         android:id="@+id/tv_pool_total"
                         android:layout_width="wrap_content"
                         android:layout_height="wrap_content"
                         android:textSize="12sp" />
 
+                    <Space
+                        android:layout_width="0dp"
+                        android:layout_height="0dp"
+                        android:layout_weight="1" />
+
+                    <TextView
+                        android:id="@+id/tv_pool_size"
+                        android:layout_width="wrap_content"
+                        android:layout_height="wrap_content"
+                        android:textSize="12sp" />
+
                 </LinearLayout>
             </LinearLayout>
 
+            <com.google.android.material.button.MaterialButton
+                android:id="@+id/btn_view_processes"
+                style="@style/Widget.Material3.Button.TextButton"
+                android:layout_width="match_parent"
+                android:layout_height="wrap_content"
+                android:layout_marginStart="12dp"
+                android:layout_marginEnd="12dp"
+                android:text="@string/hugepage_view_processes"
+                app:icon="@drawable/ic_file_tree" />
+
             <cn.classfun.droidvm.ui.widgets.row.SwitchRowWidget
                 android:id="@+id/row_module_enable"
                 android:layout_width="match_parent"
@@ -226,4 +297,4 @@
 
         </LinearLayout>
     </androidx.core.widget.NestedScrollView>
-</LinearLayout>
+</androidx.coordinatorlayout.widget.CoordinatorLayout>
diff --git a/app/src/main/res/layout/activity_hugepage_process.xml b/app/src/main/res/layout/activity_hugepage_process.xml
new file mode 100644
index 000000000..9e3d3c25f
--- /dev/null
+++ b/app/src/main/res/layout/activity_hugepage_process.xml
@@ -0,0 +1,112 @@
+<?xml version="1.0" encoding="utf-8"?>
+<LinearLayout xmlns:android="http://schemas.android.com/apk/res/android"
+    xmlns:app="http://schemas.android.com/apk/res-auto"
+    xmlns:tools="http://schemas.android.com/tools"
+    android:layout_width="match_parent"
+    android:layout_height="match_parent"
+    android:fitsSystemWindows="true"
+    android:orientation="vertical"
+    tools:context=".ui.hugepage.HugePageProcessActivity">
+
+    <com.google.android.material.appbar.MaterialToolbar
+        android:id="@+id/toolbar"
+        android:layout_width="match_parent"
+        android:layout_height="?attr/actionBarSize"
+        app:navigationIcon="?attr/homeAsUpIndicator" />
+
+    <LinearLayout
+        android:layout_width="match_parent"
+        android:layout_height="wrap_content"
+        android:layout_marginStart="20dp"
+        android:layout_marginEnd="20dp"
+        android:layout_marginTop="8dp"
+        android:layout_marginBottom="4dp"
+        android:orientation="vertical">
+
+        <cn.classfun.droidvm.ui.hugepage.SegmentedBar
+            android:id="@+id/seg_bar"
+            android:layout_width="match_parent"
+            android:layout_height="10dp" />
+
+        <LinearLayout
+            android:layout_width="match_parent"
+            android:layout_height="wrap_content"
+            android:layout_marginTop="6dp"
+            android:orientation="horizontal">
+
+            <TextView
+                android:id="@+id/tv_used"
+                android:layout_width="wrap_content"
+                android:layout_height="wrap_content"
+                android:textSize="12sp"
+                tools:text="Used: 2462 (4.8 GiB)" />
+
+            <Space
+                android:layout_width="0dp"
+                android:layout_height="0dp"
+                android:layout_weight="1" />
+
+            <TextView
+                android:id="@+id/tv_avail"
+                android:layout_width="wrap_content"
+                android:layout_height="wrap_content"
+                android:textSize="12sp"
+                tools:text="Available: 610 (1.2 GiB)" />
+        </LinearLayout>
+
+        <LinearLayout
+            android:layout_width="match_parent"
+            android:layout_height="wrap_content"
+            android:layout_marginTop="2dp"
+            android:orientation="horizontal">
+
+            <TextView
+                android:id="@+id/tv_total"
+                android:layout_width="wrap_content"
+                android:layout_height="wrap_content"
+                android:textSize="12sp"
+                tools:text="Total: 3072 (6.0 GiB)" />
+
+            <Space
+                android:layout_width="0dp"
+                android:layout_height="0dp"
+                android:layout_weight="1" />
+
+            <TextView
+                android:id="@+id/tv_pool_size"
+                android:layout_width="wrap_content"
+                android:layout_height="wrap_content"
+                android:textSize="12sp"
+                tools:text="Pool size: 3072 (6.0 GiB)" />
+        </LinearLayout>
+    </LinearLayout>
+
+    <FrameLayout
+        android:layout_width="match_parent"
+        android:layout_height="match_parent">
+
+        <androidx.recyclerview.widget.RecyclerView
+            android:id="@+id/recycler"
+            android:layout_width="match_parent"
+            android:layout_height="match_parent"
+            android:clipToPadding="false"
+            android:paddingTop="4dp"
+            android:paddingBottom="16dp"
+            tools:listitem="@layout/item_hugepage_process" />
+
+        <TextView
+            android:id="@+id/tv_empty"
+            android:layout_width="match_parent"
+            android:layout_height="wrap_content"
+            android:layout_gravity="center"
+            android:layout_marginStart="32dp"
+            android:layout_marginEnd="32dp"
+            android:gravity="center"
+            android:textAppearance="?attr/textAppearanceBodyMedium"
+            android:textColor="?attr/colorOnSurfaceVariant"
+            android:visibility="gone"
+            tools:text="No processes are using the reserved hugepage pool."
+            tools:visibility="visible" />
+
+    </FrameLayout>
+</LinearLayout>
diff --git a/app/src/main/res/layout/item_hugepage_process.xml b/app/src/main/res/layout/item_hugepage_process.xml
new file mode 100644
index 000000000..e43c8f599
--- /dev/null
+++ b/app/src/main/res/layout/item_hugepage_process.xml
@@ -0,0 +1,112 @@
+<?xml version="1.0" encoding="utf-8"?>
+<LinearLayout xmlns:android="http://schemas.android.com/apk/res/android"
+    xmlns:app="http://schemas.android.com/apk/res-auto"
+    xmlns:tools="http://schemas.android.com/tools"
+    android:layout_width="match_parent"
+    android:layout_height="wrap_content"
+    android:gravity="center_vertical"
+    android:orientation="horizontal"
+    android:paddingStart="16dp"
+    android:paddingEnd="8dp"
+    android:paddingTop="10dp"
+    android:paddingBottom="10dp">
+
+    <ImageView
+        android:id="@+id/iv_proc_icon"
+        android:layout_width="28dp"
+        android:layout_height="28dp"
+        android:contentDescription="@string/hugepage_proc_title_screen"
+        android:src="@drawable/ic_memory"
+        app:tint="?attr/colorPrimary" />
+
+    <LinearLayout
+        android:layout_width="0dp"
+        android:layout_height="wrap_content"
+        android:layout_marginStart="16dp"
+        android:layout_weight="1"
+        android:orientation="vertical">
+
+        <TextView
+            android:id="@+id/tv_proc_title"
+            android:layout_width="match_parent"
+            android:layout_height="wrap_content"
+            android:ellipsize="end"
+            android:maxLines="1"
+            android:textAppearance="?attr/textAppearanceTitleSmall"
+            android:textColor="?attr/colorOnSurface"
+            tools:text="crosvm (pid 12345)" />
+
+        <TextView
+            android:id="@+id/tv_proc_served"
+            android:layout_width="match_parent"
+            android:layout_height="wrap_content"
+            android:textAppearance="?attr/textAppearanceBodySmall"
+            android:textColor="?attr/colorOnSurfaceVariant"
+            tools:text="Served: 512 pages (1.0 GiB)" />
+
+        <TextView
+            android:id="@+id/tv_proc_anon"
+            android:layout_width="match_parent"
+            android:layout_height="wrap_content"
+            android:textAppearance="?attr/textAppearanceBodySmall"
+            android:textColor="?attr/colorOnSurfaceVariant" />
+    </LinearLayout>
+
+    <ImageButton
+        android:id="@+id/btn_proc_stack"
+        style="@style/Widget.Material3.Button.IconButton"
+        android:layout_width="44dp"
+        android:layout_height="44dp"
+        android:contentDescription="@string/hugepage_proc_stack_title"
+        android:src="@drawable/ic_file_tree"
+        app:tint="?attr/colorError"
+        tools:visibility="visible" />
+
+    <TextView
+        android:id="@+id/tv_proc_state"
+        android:layout_width="wrap_content"
+        android:layout_height="wrap_content"
+        android:minWidth="18dp"
+        android:gravity="center"
+        android:fontFamily="monospace"
+        android:textAppearance="?attr/textAppearanceTitleMedium"
+        android:textColor="?attr/colorOnSurfaceVariant"
+        tools:text="D" />
+
+    <ImageButton
+        android:id="@+id/btn_proc_kill"
+        style="@style/Widget.Material3.Button.IconButton"
+        android:layout_width="44dp"
+        android:layout_height="44dp"
+        android:contentDescription="@string/hugepage_proc_kill"
+        android:src="@drawable/ic_close"
+        app:tint="?attr/colorError" />
+
+    <!-- Acquire-in-progress spinner with a pause glyph in the centre; tapping
+         it stops the acquire (wired in the adapter). -->
+    <FrameLayout
+        android:id="@+id/progress_proc_acquire"
+        android:layout_width="44dp"
+        android:layout_height="44dp"
+        android:contentDescription="@string/hugepage_proc_acquire_stop"
+        android:visibility="gone"
+        tools:visibility="visible">
+
+        <ProgressBar
+            style="?android:attr/progressBarStyleSmall"
+            android:layout_width="match_parent"
+            android:layout_height="match_parent"
+            android:padding="8dp"
+            android:indeterminate="true"
+            android:indeterminateTint="?attr/colorPrimary" />
+
+        <ImageView
+            android:layout_width="14dp"
+            android:layout_height="14dp"
+            android:layout_gravity="center"
+            android:contentDescription="@string/hugepage_proc_acquire_stop"
+            android:src="@drawable/ic_pause"
+            app:tint="?attr/colorPrimary" />
+    </FrameLayout>
+
+</LinearLayout>
diff --git a/app/src/main/res/menu/menu_hugepage_process.xml b/app/src/main/res/menu/menu_hugepage_process.xml
new file mode 100644
index 000000000..706b70adc
--- /dev/null
+++ b/app/src/main/res/menu/menu_hugepage_process.xml
@@ -0,0 +1,20 @@
+<?xml version="1.0" encoding="utf-8"?>
+<menu xmlns:android="http://schemas.android.com/apk/res/android"
+    xmlns:app="http://schemas.android.com/apk/res-auto">
+
+    <!-- Plain items; the active mode is shown by a ●/○ prefix set in code.
+         A checkableBehavior="single" radio was unreliable here: setChecked()
+         on overflow items doesn't redraw on some devices, leaving the radio
+         stuck on the wrong mode even though the mode itself was correct. -->
+    <group android:id="@+id/grp_mode">
+        <item
+            android:id="@+id/menu_mode_ko"
+            android:title="@string/hugepage_proc_mode_ko"
+            app:showAsAction="never" />
+        <item
+            android:id="@+id/menu_mode_scan"
+            android:title="@string/hugepage_proc_mode_scan"
+            app:showAsAction="never" />
+    </group>
+
+</menu>
diff --git a/app/src/main/res/values-night/colors.xml b/app/src/main/res/values-night/colors.xml
index d1dcb16cd..aecd225e4 100644
--- a/app/src/main/res/values-night/colors.xml
+++ b/app/src/main/res/values-night/colors.xml
@@ -5,4 +5,6 @@
     <color name="daemon_card_background_stopped">#FF3A1B1B</color>
 
     <color name="kernel_analysis_title">#FF64B5F6</color>
+
+    <color name="hugepage_pending">#80BFAF7C</color>
 </resources>
diff --git a/app/src/main/res/values-zh-rCN/strings.xml b/app/src/main/res/values-zh-rCN/strings.xml
index 57eaa15ee..149211848 100644
--- a/app/src/main/res/values-zh-rCN/strings.xml
+++ b/app/src/main/res/values-zh-rCN/strings.xml
@@ -910,6 +910,7 @@
     <string name="hugepage_stat_active_vms">活动虚拟机</string>
     <string name="hugepage_stat_pool_available">可用: %1$d (%2$s)</string>
     <string name="hugepage_stat_pool_total">总共: %1$d (%2$s)</string>
+    <string name="hugepage_stat_pool_size">池大小: %1$d (%2$s)</string>
     <string name="hugepage_stats_unavailable">模块未加载</string>
     <string name="hugepage_manual_refill">回收</string>
     <string name="hugepage_refill_triggered">回收已触发</string>
@@ -943,4 +944,60 @@
     <string name="log_helper_unsupported_gunyah_message">您的设备上的Gunyah版本过旧（如骁龙8 Gen 2），请尝试更新系统或更换新的设备。</string>
     <string name="log_helper_unsupported_sandbox_title">沙箱模式不支持</string>
     <string name="log_helper_unsupported_sandbox_message">crosvm的沙箱模式在此平台不可用，请禁用沙箱模式。</string>
+
+    <string name="hugepage_already_loaded">模块已处于加载状态</string>
+    <string name="hugepage_btn_disable">停用</string>
+    <string name="hugepage_btn_enable">启用</string>
+    <string name="hugepage_btn_install">安装</string>
+    <string name="hugepage_load">加载</string>
+    <string name="hugepage_load_failed">加载模块失败</string>
+    <string name="hugepage_loaded">模块已加载</string>
+    <string name="hugepage_pool_below_vms">池大小不可小于运行中 VM 的内存总和（%1$s）</string>
+    <string name="hugepage_pool_shrink_busy">获取中，无法缩小，请等待获取完成</string>
+    <string name="hugepage_pool_size_applied">池大小已保存并应用（增大需点获取）</string>
+    <string name="hugepage_proc_acquire">获取</string>
+    <string name="hugepage_proc_acquire_done">获取完成</string>
+    <string name="hugepage_proc_acquire_stop">停止获取</string>
+    <string name="hugepage_proc_acquire_full">获取完成:已达成 %1$s</string>
+    <string name="hugepage_proc_acquire_partial">获取结束:达成 %1$s / 目标 %2$s(系统目前无法再凑出更多)</string>
+    <string name="hugepage_proc_acquire_running">获取大页中…</string>
+    <string name="hugepage_proc_acquire_userspace">模块不足,尝试 userspace 协助…</string>
+    <string name="hugepage_proc_anon">占用:%1$d 页 (%2$s)</string>
+    <string name="hugepage_proc_deficit">等待获取</string>
+    <string name="hugepage_proc_empty">目前没有线程占用保留的 hugepage 池。</string>
+    <string name="hugepage_proc_kill">终止</string>
+    <string name="hugepage_proc_kill_failed">发送信号失败</string>
+    <string name="hugepage_proc_kill_sent">已发送信号</string>
+    <string name="hugepage_proc_kill_title">确定终止 %1$s?</string>
+    <string name="hugepage_proc_ko_unavailable">模块不可用,改用扫描模式</string>
+    <string name="hugepage_proc_loading">扫描中…</string>
+    <string name="hugepage_proc_mode">显示模式</string>
+    <string name="hugepage_proc_mode_ko">模块归属 (KO)</string>
+    <string name="hugepage_proc_mode_scan">系统扫描 (THP)</string>
+    <string name="hugepage_proc_no_vm">未跟踪的虚拟机</string>
+    <string name="hugepage_proc_not_loaded">内核模块未加载。</string>
+    <string name="hugepage_proc_old_module">已加载的模块没有逐 VM 归属 API(旧版)。请从菜单切换系统扫描。</string>
+    <string name="hugepage_proc_owner_empty">目前没有 VM 持有保留的大页。</string>
+    <string name="hugepage_proc_scan_empty">目前没有运行中的 VM 在使用大页。</string>
+    <string name="hugepage_proc_scan_mode">扫描模式</string>
+    <string name="hugepage_proc_served">已分配:%1$d 页 (%2$s)</string>
+    <string name="hugepage_proc_sigkill">SIGKILL (9) — 强制</string>
+    <string name="hugepage_proc_sigterm">SIGTERM (15) — 正常结束</string>
+    <string name="hugepage_proc_stack_title">内核堆栈 (pid %1$d)</string>
+    <string name="hugepage_proc_stack_unavailable">无法获取内核堆栈(线程可能已被唤醒)。</string>
+    <string name="hugepage_proc_state">状态:%1$c (%2$s)</string>
+    <string name="hugepage_proc_state_disk">不可中断睡眠</string>
+    <string name="hugepage_proc_state_running">运行中</string>
+    <string name="hugepage_proc_state_sleeping">睡眠</string>
+    <string name="hugepage_proc_state_stopped">已停止</string>
+    <string name="hugepage_proc_state_unknown">未知 / 已结束</string>
+    <string name="hugepage_proc_state_zombie">僵尸</string>
+    <string name="hugepage_proc_title">%1$s (pid %2$d)</string>
+    <string name="hugepage_proc_title_screen">Hugepage 池占用</string>
+    <string name="hugepage_proc_unknown">未归属</string>
+    <string name="hugepage_proc_unknown_breakdown">未归属 — 已释放 %1$d / 已挪用 %2$d 页</string>
+    <string name="hugepage_proc_vm">虚拟机:%1$s</string>
+    <string name="hugepage_save_pool_size">保存</string>
+    <string name="hugepage_stat_pool_used">已使用: %1$d (%2$s)</string>
+    <string name="hugepage_view_processes">显示占用</string>
 </resources>
diff --git a/app/src/main/res/values-zh-rTW/strings.xml b/app/src/main/res/values-zh-rTW/strings.xml
index 8ff732ffe..c4bfb4a41 100644
--- a/app/src/main/res/values-zh-rTW/strings.xml
+++ b/app/src/main/res/values-zh-rTW/strings.xml
@@ -909,21 +909,78 @@
     <string name="hugepage_stat_total_refilled">已回收次數</string>
     <string name="hugepage_stat_active_vms">活動虛擬機器</string>
     <string name="hugepage_stat_pool_available">可用: %1$d (%2$s)</string>
+    <string name="hugepage_stat_pool_used">已使用: %1$d (%2$s)</string>
     <string name="hugepage_stat_pool_total">總共: %1$d (%2$s)</string>
+    <string name="hugepage_stat_pool_size">池大小: %1$d (%2$s)</string>
     <string name="hugepage_stats_unavailable">模組未載入</string>
-    <string name="hugepage_manual_refill">回收</string>
-    <string name="hugepage_refill_triggered">回收已觸發</string>
-    <string name="hugepage_refill_failed">觸發回收失敗</string>
+    <string name="hugepage_manual_refill">獲取大頁</string>
+    <string name="hugepage_refill_triggered">獲取已觸發</string>
+    <string name="hugepage_save_pool_size">儲存</string>
+    <string name="hugepage_proc_acquire">獲取</string>
+    <string name="hugepage_proc_acquire_running">獲取大頁中…</string>
+    <string name="hugepage_proc_acquire_done">獲取完成</string>
+    <string name="hugepage_proc_acquire_stop">停止獲取</string>
+    <string name="hugepage_proc_acquire_full">獲取完成:已達成 %1$s</string>
+    <string name="hugepage_proc_acquire_partial">獲取結束:達成 %1$s / 目標 %2$s(系統目前無法再湊出更多)</string>
+    <string name="hugepage_proc_acquire_userspace">模組不足,嘗試 userspace 協助…</string>
+    <string name="hugepage_refill_failed">觸發獲取失敗</string>
     <string name="hugepage_pool_size">池大小</string>
     <string name="hugepage_pool_size_saved">池大小已儲存（重啟後生效）</string>
+    <string name="hugepage_pool_size_applied">池大小已儲存並套用（放大需按獲取）</string>
+    <string name="hugepage_pool_shrink_busy">獲取中，無法縮小，請待獲取完成</string>
+    <string name="hugepage_pool_below_vms">池大小不可小於執行中 VM 的記憶體總和（%1$s）</string>
     <string name="hugepage_pool_size_failed">儲存池大小失敗</string>
     <string name="hugepage_module_now_enabled">模組已啟用（重啟後生效）</string>
     <string name="hugepage_module_now_disabled">模組已停用（重啟後生效）</string>
+    <string name="hugepage_btn_install">安裝</string>
+    <string name="hugepage_btn_enable">啟用</string>
+    <string name="hugepage_btn_disable">停用</string>
+    <string name="hugepage_load">載入</string>
+    <string name="hugepage_loaded">模組已載入</string>
+    <string name="hugepage_load_failed">載入模組失敗</string>
+    <string name="hugepage_already_loaded">模組已在載入狀態</string>
     <string name="hugepage_stop">停止</string>
     <string name="hugepage_stop_confirm">確定要停止大頁預留模組嗎？這將釋放所有預分配的頁面，可能會影響正在執行的虛擬機器。</string>
     <string name="hugepage_unloaded">模組已解除安裝</string>
     <string name="hugepage_unload_failed">解除安裝模組失敗</string>
 
+    <string name="hugepage_view_processes">顯示占用</string>
+    <string name="hugepage_proc_title_screen">Hugepage 集區占用</string>
+    <string name="hugepage_proc_title">%1$s (pid %2$d)</string>
+    <string name="hugepage_proc_served">已配發:%1$d 頁 (%2$s)</string>
+    <string name="hugepage_proc_anon">占用:%1$d 頁 (%2$s)</string>
+    <string name="hugepage_proc_unknown">未歸屬</string>
+    <string name="hugepage_proc_unknown_breakdown">未歸屬 — 已釋放 %1$d / 已挪用 %2$d 頁</string>
+    <string name="hugepage_proc_deficit">等待獲取</string>
+    <string name="hugepage_proc_vm">虛擬機器:%1$s</string>
+    <string name="hugepage_proc_no_vm">非追蹤中的虛擬機器</string>
+    <string name="hugepage_proc_state">狀態:%1$c (%2$s)</string>
+    <string name="hugepage_proc_state_running">執行中</string>
+    <string name="hugepage_proc_state_sleeping">睡眠</string>
+    <string name="hugepage_proc_state_disk">不可中斷睡眠</string>
+    <string name="hugepage_proc_state_stopped">已停止</string>
+    <string name="hugepage_proc_state_zombie">殭屍</string>
+    <string name="hugepage_proc_state_unknown">未知 / 已結束</string>
+    <string name="hugepage_proc_scan_mode">掃描模式</string>
+    <string name="hugepage_proc_loading">掃描中…</string>
+    <string name="hugepage_proc_mode">顯示模式</string>
+    <string name="hugepage_proc_mode_ko">模組歸屬 (KO)</string>
+    <string name="hugepage_proc_mode_scan">系統掃描 (THP)</string>
+    <string name="hugepage_proc_ko_unavailable">模組不可用,改用掃描模式</string>
+    <string name="hugepage_proc_empty">目前沒有執行緒占用保留的 hugepage 集區。</string>
+    <string name="hugepage_proc_owner_empty">目前沒有 VM 持有保留的大頁。</string>
+    <string name="hugepage_proc_scan_empty">目前沒有執行中的 VM 在使用大頁。</string>
+    <string name="hugepage_proc_not_loaded">核心模組未載入。</string>
+    <string name="hugepage_proc_old_module">已載入的模組沒有逐 VM 歸屬 API(舊版)。請從選單切換系統掃描。</string>
+    <string name="hugepage_proc_kill">終止</string>
+    <string name="hugepage_proc_kill_title">確定終止 %1$s?</string>
+    <string name="hugepage_proc_sigterm">SIGTERM (15) — 正常結束</string>
+    <string name="hugepage_proc_sigkill">SIGKILL (9) — 強制</string>
+    <string name="hugepage_proc_kill_sent">已送出訊號</string>
+    <string name="hugepage_proc_kill_failed">送出訊號失敗</string>
+    <string name="hugepage_proc_stack_title">核心堆疊 (pid %1$d)</string>
+    <string name="hugepage_proc_stack_unavailable">無法取得核心堆疊(執行緒可能已被喚醒)。</string>
+
     <string name="notification_permission_title">允許通知？</string>
     <string name="notification_permission_message">DroidVM 會在背景下載磁碟映像，並透過通知顯示進度。請允許通知，以便隨時查看下載進度。</string>
     <string name="notification_permission_allow">繼續</string>
diff --git a/app/src/main/res/values/colors.xml b/app/src/main/res/values/colors.xml
index 0f5cfb0fc..d0bb4de94 100644
--- a/app/src/main/res/values/colors.xml
+++ b/app/src/main/res/values/colors.xml
@@ -22,4 +22,7 @@
     <color name="daemon_card_background_stopped">#FFFADFE0</color>
 
     <color name="kernel_analysis_title">#FF1976D2</color>
+
+    <color name="hugepage_bar_track">#33808080</color>
+    <color name="hugepage_pending">#807D9CB3</color>
 </resources>
diff --git a/app/src/main/res/values/strings.xml b/app/src/main/res/values/strings.xml
index e6b5d8c90..8f86e2f1a 100644
--- a/app/src/main/res/values/strings.xml
+++ b/app/src/main/res/values/strings.xml
@@ -946,21 +946,78 @@
     <string name="hugepage_stat_total_refilled">Total Refilled</string>
     <string name="hugepage_stat_active_vms">Active VMs</string>
     <string name="hugepage_stat_pool_available">Available: %1$d (%2$s)</string>
+    <string name="hugepage_stat_pool_used">Used: %1$d (%2$s)</string>
     <string name="hugepage_stat_pool_total">Total: %1$d (%2$s)</string>
+    <string name="hugepage_stat_pool_size">Pool size: %1$d (%2$s)</string>
     <string name="hugepage_stats_unavailable">Module not loaded</string>
-    <string name="hugepage_manual_refill">Refill</string>
-    <string name="hugepage_refill_triggered">Refill triggered</string>
-    <string name="hugepage_refill_failed">Failed to trigger refill</string>
+    <string name="hugepage_manual_refill">Acquire Pages</string>
+    <string name="hugepage_refill_triggered">Acquire triggered</string>
+    <string name="hugepage_refill_failed">Failed to trigger acquire</string>
+    <string name="hugepage_save_pool_size">Save</string>
+    <string name="hugepage_proc_acquire">Acquire</string>
+    <string name="hugepage_proc_acquire_running">Acquiring huge pages…</string>
+    <string name="hugepage_proc_acquire_done">Acquire done</string>
+    <string name="hugepage_proc_acquire_stop">Stop acquiring</string>
+    <string name="hugepage_proc_acquire_full">Acquire complete: reached %1$s</string>
+    <string name="hugepage_proc_acquire_partial">Acquire stopped: got %1$s of %2$s (system can\'t migrate more right now)</string>
+    <string name="hugepage_proc_acquire_userspace">Module short; trying userspace assist…</string>
     <string name="hugepage_pool_size">Pool Size</string>
     <string name="hugepage_pool_size_saved">Pool size saved (effective after reboot)</string>
+    <string name="hugepage_pool_size_applied">Pool size saved &amp; applied (grow needs Acquire)</string>
+    <string name="hugepage_pool_shrink_busy">Acquiring — can\'t shrink now, wait for it to finish</string>
+    <string name="hugepage_pool_below_vms">Pool can\'t be smaller than the running VMs\' total memory (%1$s)</string>
     <string name="hugepage_pool_size_failed">Failed to save pool size</string>
     <string name="hugepage_module_now_enabled">Module enabled (effective after reboot)</string>
     <string name="hugepage_module_now_disabled">Module disabled (effective after reboot)</string>
+    <string name="hugepage_btn_install">Install</string>
+    <string name="hugepage_btn_enable">Enable</string>
+    <string name="hugepage_btn_disable">Disable</string>
+    <string name="hugepage_load">Load</string>
+    <string name="hugepage_loaded">Module loaded</string>
+    <string name="hugepage_load_failed">Failed to load module</string>
+    <string name="hugepage_already_loaded">Module already loaded</string>
     <string name="hugepage_stop">Stop</string>
     <string name="hugepage_stop_confirm">Are you sure you want to unload the hugepage reserve module? This will release all pre-allocated pages and may affect running VMs.</string>
     <string name="hugepage_unloaded">Module unloaded</string>
     <string name="hugepage_unload_failed">Failed to unload module</string>
 
+    <string name="hugepage_view_processes">Show Usage</string>
+    <string name="hugepage_proc_title_screen">Hugepage Pool Usage</string>
+    <string name="hugepage_proc_title">%1$s (pid %2$d)</string>
+    <string name="hugepage_proc_served">Served: %1$d pages (%2$s)</string>
+    <string name="hugepage_proc_anon">Usage: %1$d pages (%2$s)</string>
+    <string name="hugepage_proc_unknown">Unattributed</string>
+    <string name="hugepage_proc_unknown_breakdown">Unattributed — freed %1$d / reused %2$d pages</string>
+    <string name="hugepage_proc_deficit">Waiting for acquire</string>
+    <string name="hugepage_proc_vm">VM: %1$s</string>
+    <string name="hugepage_proc_no_vm">Not a tracked VM</string>
+    <string name="hugepage_proc_state">State: %1$c (%2$s)</string>
+    <string name="hugepage_proc_state_running">running</string>
+    <string name="hugepage_proc_state_sleeping">sleeping</string>
+    <string name="hugepage_proc_state_disk">uninterruptible sleep</string>
+    <string name="hugepage_proc_state_stopped">stopped</string>
+    <string name="hugepage_proc_state_zombie">zombie</string>
+    <string name="hugepage_proc_state_unknown">unknown / exited</string>
+    <string name="hugepage_proc_scan_mode">Scan mode</string>
+    <string name="hugepage_proc_loading">Scanning…</string>
+    <string name="hugepage_proc_mode">Display mode</string>
+    <string name="hugepage_proc_mode_ko">Module attribution (KO)</string>
+    <string name="hugepage_proc_mode_scan">System scan (THP)</string>
+    <string name="hugepage_proc_ko_unavailable">Module unavailable — using scan mode</string>
+    <string name="hugepage_proc_empty">No processes are currently using the reserved hugepage pool.</string>
+    <string name="hugepage_proc_owner_empty">No VM is holding reserved huge pages.</string>
+    <string name="hugepage_proc_scan_empty">No running VM is using huge pages.</string>
+    <string name="hugepage_proc_not_loaded">Kernel module is not loaded.</string>
+    <string name="hugepage_proc_old_module">Loaded module has no per-VM attribution API (old build). Switch to System scan (menu).</string>
+    <string name="hugepage_proc_kill">Kill</string>
+    <string name="hugepage_proc_kill_title">Kill %1$s?</string>
+    <string name="hugepage_proc_sigterm">SIGTERM (15) — graceful</string>
+    <string name="hugepage_proc_sigkill">SIGKILL (9) — force</string>
+    <string name="hugepage_proc_kill_sent">Signal sent</string>
+    <string name="hugepage_proc_kill_failed">Failed to send signal</string>
+    <string name="hugepage_proc_stack_title">Kernel stack (pid %1$d)</string>
+    <string name="hugepage_proc_stack_unavailable">Kernel stack unavailable (process may have woken up).</string>
+
     <string name="notification_permission_title">Allow notifications?</string>
     <string name="notification_permission_message">DroidVM downloads disk images in the background and shows the progress in a notification. Allow notifications so you can keep an eye on the download.</string>
     <string name="notification_permission_allow">Continue</string>

From e2c82af04526ddb03bed4d94c7abbd1d070e409f Mon Sep 17 00:00:00 2001
From: lateautumn233 <lateautumn233@foxmail.com>
Date: Tue, 30 Jun 2026 01:20:59 +0800
Subject: [PATCH 071/182] feat(vm): add guest reboot support

- Implement vm_reboot IPC command and RebootHandler
- Add REBOOTING state and rebooting event in daemon-client communication
- Support crosvm exit code detection (--extended-status flag)
- Add CrosvmExit constants to distinguish reset from crash/panic/watchdog
- Implement automatic VM relaunch on guest-requested reset (code 32)
- Update console to track reboot state and show seamless relaunch
- Update UI to use vm_reboot instead of stop+delay+start sequence
- Add localized strings for reboot state and exit reasons
---
 app/src/main/cpp/console/commands/console.cpp | 24 +++++--
 .../droidvm/daemon/ipc/vm/RebootHandler.java  | 34 +++++++++
 .../droidvm/daemon/vm/VMInstance.java         | 69 ++++++++++++++++++-
 .../vm/backend/CrosvmBackendInstance.java     |  3 +
 .../droidvm/lib/daemon/VMEventHandler.java    | 25 ++++++-
 .../classfun/droidvm/lib/data/CrosvmExit.java | 32 +++++++++
 .../droidvm/lib/store/vm/VMState.java         |  4 ++
 .../droidvm/ui/vm/info/VMInfoActivity.java    |  8 ++-
 app/src/main/res/values-zh-rCN/strings.xml    |  5 ++
 app/src/main/res/values-zh-rTW/strings.xml    |  1 +
 app/src/main/res/values/strings.xml           |  5 ++
 11 files changed, 200 insertions(+), 10 deletions(-)
 create mode 100644 app/src/main/java/cn/classfun/droidvm/daemon/ipc/vm/RebootHandler.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/lib/data/CrosvmExit.java

diff --git a/app/src/main/cpp/console/commands/console.cpp b/app/src/main/cpp/console/commands/console.cpp
index 99647b758..817d5d318 100644
--- a/app/src/main/cpp/console/commands/console.cpp
+++ b/app/src/main/cpp/console/commands/console.cpp
@@ -43,6 +43,7 @@ class ConsoleCommand : public Command {
     );
 
     bool running = false;
+    bool rebooting = false;
 };
 
 void ConsoleCommand::console_list(const std::string &vm) {
@@ -94,12 +95,25 @@ void ConsoleCommand::process_event(
                 fflush(stdout);
             }
         }
-    } else if (event == "exited" || event == "state") {
+    } else if (event == "rebooting") {
+        // Guest-initiated reboot: the daemon tears down crosvm and relaunches it
+        // reusing the same console streams. Stay attached so the new boot's output
+        // streams in seamlessly instead of dropping the terminal.
+        rebooting = true;
+        fprintf(stderr, "\n[droidvm] VM rebooting...\n");
+    } else if (event == "exited") {
+        // The only authoritative terminal signal. Every non-reboot end path fires
+        // "exited" (with the real code); a bare "stopped" state during reboot does not.
+        int code = edata.get("exit_code", -1).asInt();
+        fprintf(stderr, "\n[droidvm] VM exited (code %d).\n", code);
+        running = false;
+    } else if (event == "state") {
         auto state = edata.get("state", "").asString();
-        if (state == "stopped") {
-            int code = edata.get("exit_code", -1).asInt();
-            fprintf(stderr, "\n[droidvm] VM exited (code %d).\n", code);
-            running = false;
+        // A "stopped" state event arrives during reboot too, so it is NOT terminal
+        // on its own - we wait for "exited". Just clear the reboot notice once back up.
+        if (state == "running" && rebooting) {
+            rebooting = false;
+            fprintf(stderr, "[droidvm] VM is back up.\n");
         }
     }
 }
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/ipc/vm/RebootHandler.java b/app/src/main/java/cn/classfun/droidvm/daemon/ipc/vm/RebootHandler.java
new file mode 100644
index 000000000..fb3af10a8
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/ipc/vm/RebootHandler.java
@@ -0,0 +1,34 @@
+package cn.classfun.droidvm.daemon.ipc.vm;
+
+import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
+
+import androidx.annotation.NonNull;
+
+import com.google.auto.service.AutoService;
+
+import cn.classfun.droidvm.daemon.server.ClientRequest;
+import cn.classfun.droidvm.daemon.server.RequestException;
+import cn.classfun.droidvm.daemon.server.RequestHandler;
+
+@AutoService(RequestHandler.class)
+public final class RebootHandler extends RequestHandler {
+    @NonNull
+    @Override
+    public String getName() {
+        return "vm_reboot";
+    }
+
+    @Override
+    public void handle(@NonNull ClientRequest request) throws Exception {
+        var params = request.getParams();
+        var vmId = params.optString("vm_id", "");
+        if (vmId.isEmpty())
+            throw new RequestException("missing vm_id");
+        var vms = request.getContext().getVMs();
+        var inst = vms.findById(vmId);
+        if (inst == null)
+            throw new RequestException(fmt("VM not found: %s", vmId));
+        if (!inst.reboot())
+            throw new RequestException("failed to reboot VM");
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/vm/VMInstance.java b/app/src/main/java/cn/classfun/droidvm/daemon/vm/VMInstance.java
index 2a71e0893..c69030ff5 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/vm/VMInstance.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/vm/VMInstance.java
@@ -23,6 +23,7 @@
 
 import cn.classfun.droidvm.daemon.console.ConsoleStream;
 import cn.classfun.droidvm.daemon.vm.backend.BackendBase;
+import cn.classfun.droidvm.lib.data.CrosvmExit;
 import cn.classfun.droidvm.lib.natives.NativeProcess;
 import cn.classfun.droidvm.lib.natives.UnixHelper;
 import cn.classfun.droidvm.lib.store.base.DataItem;
@@ -45,6 +46,11 @@ public final class VMInstance extends VMConfig {
     private final VMInstanceStore store;
     private BootPlan bootPlan;
     private String bootEntryOverride;
+    private volatile boolean rebootRequested = false;
+
+    // Delay before relaunching on reboot: lets the kernel settle same-name TAP
+    // teardown/recreate and throttles a guest reboot-loop (no restart cap).
+    private static final long REBOOT_RELAUNCH_DELAY_MS = 500;
 
     public interface VMEventCallback {
         @SuppressWarnings("unused")
@@ -148,7 +154,9 @@ public void setBootEntryOverride(@Nullable String entryId) {
 
     @SuppressWarnings("BooleanMethodIsAlwaysInverted")
     public boolean start() {
-        if (state != VMState.STOPPED) {
+        // REBOOTING is accepted too: the reboot relaunch calls start() from that
+        // transient state (process already gone) and goes straight to STARTING.
+        if (state != VMState.STOPPED && state != VMState.REBOOTING) {
             Log.w(TAG, fmt("VM %s is not stopped (state=%s), cannot start", getId(), state.name()));
             return false;
         }
@@ -277,6 +285,26 @@ public boolean stop() {
         return true;
     }
 
+    public boolean reboot() {
+        if (state != VMState.RUNNING) {
+            Log.w(TAG, fmt("Cannot reboot VM %s: state=%s", getId(), state.name()));
+            return false;
+        }
+        Log.i(TAG, fmt("Reboot requested for VM %s", getName()));
+        // crosvm has no reset control command, so reboot = ask crosvm to exit and
+        // let runVM() relaunch via the rebootRequested flag (kept set on fallback).
+        rebootRequested = true;
+        if (getBackendInstance().hasControlSocket()) {
+            if (runControlCommand("stop")) return true;
+            Log.w(TAG, fmt("Control stop failed for reboot of VM %s, falling back to destroy", getName()));
+        }
+        if (process != null && process.isAlive()) {
+            process.destroy();
+            shellKillProcess(process.pid());
+        }
+        return true;
+    }
+
     public boolean suspend() {
         if (state != VMState.RUNNING) {
             Log.w(TAG, fmt("Cannot suspend VM %s: state=%s", getId(), state.name()));
@@ -399,6 +427,9 @@ private void runVM() {
             } catch (Exception ignored) {
             }
         }
+        // A guest-requested reset (crosvm exit 32) or a host-issued reboot both
+        // relaunch the VM; an explicit user stop never does and wins over both.
+        boolean wantRestart = !stoppedByUser && (code == CrosvmExit.RESET.getCode() || rebootRequested);
         if (stoppedByUser && code != 0) {
             Log.i(TAG, fmt("VM %s stopped by user", getName()));
             exitCode = 0;
@@ -407,10 +438,46 @@ private void runVM() {
         }
         cleanupTap();
         inst.cleanup();
+        if (wantRestart) {
+            rebootRequested = false;
+            exitCode = -1;
+            // Broadcast REBOOTING (not STOPPED) so clients render "rebooting" for the
+            // whole relaunch window instead of flickering to a stopped row/button.
+            // start() accepts REBOOTING, so the next transition is straight to STARTING.
+            setState(VMState.REBOOTING);
+            fireEvent("rebooting", null);
+            Log.i(TAG, fmt("VM %s rebooting (exit code %d)", getName(), code));
+            scheduleRelaunch();
+            return;
+        }
         setState(VMState.STOPPED);
         fireEvent("exited", null);
     }
 
+    // Relaunch off the worker thread: start() joins workerThread (this thread),
+    // and the short sleep settles same-name TAP recreation before re-setup.
+    private void scheduleRelaunch() {
+        var t = new Thread(() -> {
+            try {
+                Thread.sleep(REBOOT_RELAUNCH_DELAY_MS);
+            } catch (InterruptedException ignored) {
+                return;
+            }
+            if (state != VMState.REBOOTING) return; // user changed state meanwhile
+            if (!start()) {
+                Log.w(TAG, fmt("VM %s relaunch failed", getName()));
+                // Surface the failure as a real exit so attached consoles / UI stop
+                // waiting for the reboot to come back. start() left us in REBOOTING,
+                // so settle to STOPPED before the exit fires the correct final state.
+                exitCode = -1;
+                setState(VMState.STOPPED);
+                fireEvent("exited", null);
+            }
+        }, fmt("VM-relaunch-%s", getId()));
+        t.setDaemon(true);
+        t.start();
+    }
+
     private void cleanupTap() {
         var nets = requireNonNull(item.opt("networks", DataItem.newArray()));
         if (nets.isEmpty()) return;
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/CrosvmBackendInstance.java b/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/CrosvmBackendInstance.java
index 7a4e9a566..f83505f23 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/CrosvmBackendInstance.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/CrosvmBackendInstance.java
@@ -136,6 +136,9 @@ private List<String> buildCommand() {
         var args = new ArrayList<String>();
         prepareStraceArguments(args);
         args.add(getPrebuiltBinaryPath("crosvm"));
+        // Top-level flag (must precede `run`): makes crosvm surface CommandStatus
+        // exit codes (see CrosvmExit) so runVM() can tell reset/crash/panic apart.
+        args.add("--extended-status");
         args.add("run");
         args.add("--name");
         args.add(config.getName());
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/daemon/VMEventHandler.java b/app/src/main/java/cn/classfun/droidvm/lib/daemon/VMEventHandler.java
index 855be845f..26788ee84 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/daemon/VMEventHandler.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/daemon/VMEventHandler.java
@@ -36,6 +36,7 @@
 import java.util.UUID;
 
 import cn.classfun.droidvm.R;
+import cn.classfun.droidvm.lib.data.CrosvmExit;
 import cn.classfun.droidvm.lib.diag.LogHelper;
 import cn.classfun.droidvm.lib.store.vm.VMState;
 import cn.classfun.droidvm.lib.store.vm.VMStore;
@@ -92,6 +93,24 @@ private void callOnVmExited(UUID vmId, String vmName, int exitCode, JSONObject d
             c.onVMExited(vmId, vmName, exitCode, data);
     }
 
+    /** Maps a crosvm exit code to a user-facing message resource (args: vmName, code). */
+    public static int exitMessageRes(int exitCode) {
+        CrosvmExit exit = CrosvmExit.fromCode(exitCode);
+        if (exit == null) {
+            return R.string.vm_exited_error;
+        }
+        switch (exit) {
+            case CRASH:
+                return R.string.vm_exit_crash;
+            case GUEST_PANIC:
+                return R.string.vm_exit_guest_panic;
+            case WATCHDOG:
+                return R.string.vm_exit_watchdog;
+            default:
+                return R.string.vm_exited_error;
+        }
+    }
+
     private void showExitDialog(Activity act, String vmName, int exitCode, @NonNull JSONObject data) {
         var logText = new StringBuilder();
         var stdio = data.optString("stdio", "");
@@ -140,7 +159,7 @@ public void onVMExited(UUID vmId, String vmName, int exitCode, JSONObject data)
             } else {
                 Toast.makeText(
                     act,
-                    act.getString(R.string.vm_exited_error, vmName, exitCode),
+                    act.getString(exitMessageRes(exitCode), vmName, exitCode),
                     LENGTH_LONG
                 ).show();
                 showExitDialog(act, vmName, exitCode, data);
@@ -169,6 +188,10 @@ public void onDaemonEvent(@NonNull JSONObject msg) {
                 if (foregroundCallback.isEmpty() || !isAppInForeground())
                     showExitNotification(vmId, vmName, exitCode);
                 callOnVmExited(vmId, vmName, exitCode, data);
+            } else if (event.equals("rebooting")) {
+                queueActivityTask(act -> Toast.makeText(
+                    act, act.getString(R.string.vm_rebooting, vmName), LENGTH_SHORT
+                ).show(), SplashActivity.class);
             }
         });
     }
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/data/CrosvmExit.java b/app/src/main/java/cn/classfun/droidvm/lib/data/CrosvmExit.java
new file mode 100644
index 000000000..db4920b34
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/lib/data/CrosvmExit.java
@@ -0,0 +1,32 @@
+package cn.classfun.droidvm.lib.data;
+
+/**
+ * crosvm process exit codes (CommandStatus). RESET drives the automatic relaunch
+ * in VMInstance; the rest are surfaced to the user as distinct failure reasons.
+ */
+public enum CrosvmExit {
+    RESET(32),        // VmReset: guest requested reboot/reset
+    CRASH(33),        // VmCrash
+    GUEST_PANIC(34),  // kernel panic in guest
+    WATCHDOG(36);     // vcpu stall / watchdog reset
+
+    private final int code;
+
+    CrosvmExit(int code) {
+        this.code = code;
+    }
+
+    public int getCode() {
+        return code;
+    }
+
+    /** Maps a raw crosvm exit code to its constant, or null when unrecognized. */
+    public static CrosvmExit fromCode(int code) {
+        for (CrosvmExit exit : values()) {
+            if (exit.code == code) {
+                return exit;
+            }
+        }
+        return null;
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/store/vm/VMState.java b/app/src/main/java/cn/classfun/droidvm/lib/store/vm/VMState.java
index e53500d5e..291ff6859 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/store/vm/VMState.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/store/vm/VMState.java
@@ -27,6 +27,10 @@ public enum VMState implements StringEnum, ColorEnum {
     STOPPING(
         R.string.vm_state_stopping,
         android.R.color.holo_orange_dark
+    ),
+    REBOOTING(
+        R.string.vm_state_rebooting,
+        android.R.color.holo_orange_dark
     );
 
     private final @StringRes int stringId;
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/info/VMInfoActivity.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/info/VMInfoActivity.java
index ff994359a..fac636af7 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/info/VMInfoActivity.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/info/VMInfoActivity.java
@@ -44,6 +44,7 @@
 import cn.classfun.droidvm.R;
 import cn.classfun.droidvm.lib.daemon.DaemonConnection;
 import cn.classfun.droidvm.lib.daemon.ForegroundCallback;
+import cn.classfun.droidvm.lib.daemon.VMEventHandler;
 import cn.classfun.droidvm.lib.store.base.DataItem;
 import cn.classfun.droidvm.lib.store.network.NetworkStore;
 import cn.classfun.droidvm.lib.store.vm.BootConfig;
@@ -204,7 +205,7 @@ public void onVMExited(UUID id, String vmName, int exitCode, JSONObject data) {
                 ).show();
             } else {
                 Toast.makeText(this,
-                    getString(R.string.vm_exited_error, vmName, exitCode),
+                    getString(VMEventHandler.exitMessageRes(exitCode), vmName, exitCode),
                     LENGTH_LONG
                 ).show();
             }
@@ -431,9 +432,10 @@ private void doStop() {
     }
 
     private void doRestart() {
+        // crosvm reboot: daemon stops crosvm and relaunches it (no client-side
+        // stop+delay+start); a guest-initiated reboot takes the same daemon path.
         DialogInterface.OnClickListener cb = (d, w) ->
-            sendCommand("vm_stop", vmId, mainHandler, ui,
-                () -> mainHandler.postDelayed(this::doStart, 1500));
+            sendCommand("vm_reboot", vmId, mainHandler, ui);
         new MaterialAlertDialogBuilder(this)
             .setTitle(config.getName())
             .setMessage(R.string.vm_info_restart_confirm)
diff --git a/app/src/main/res/values-zh-rCN/strings.xml b/app/src/main/res/values-zh-rCN/strings.xml
index 57eaa15ee..5d6581518 100644
--- a/app/src/main/res/values-zh-rCN/strings.xml
+++ b/app/src/main/res/values-zh-rCN/strings.xml
@@ -107,9 +107,14 @@
     <string name="vm_state_starting">启动中</string>
     <string name="vm_state_running">运行中</string>
     <string name="vm_state_stopping">停止中</string>
+    <string name="vm_state_rebooting">重启中</string>
 
     <string name="vm_exited_success">虚拟机"%1$s"已停止。</string>
     <string name="vm_exited_error">虚拟机"%1$s"以退出码 %2$d 退出。</string>
+    <string name="vm_exit_crash">虚拟机"%1$s"已崩溃（退出码 %2$d）。</string>
+    <string name="vm_exit_guest_panic">虚拟机"%1$s"guest 内核 panic（退出码 %2$d）。</string>
+    <string name="vm_exit_watchdog">虚拟机"%1$s"卡死，已被看门狗复位（退出码 %2$d）。</string>
+    <string name="vm_rebooting">正在重启虚拟机"%1$s"…</string>
     <string name="vm_exit_dialog_title">虚拟机"%1$s"启动失败</string>
     <string name="vm_exit_dialog_message">虚拟机以退出码 %1$d 退出。\n\n日志：</string>
     <string name="vm_exit_no_logs">无可用日志。</string>
diff --git a/app/src/main/res/values-zh-rTW/strings.xml b/app/src/main/res/values-zh-rTW/strings.xml
index 8ff732ffe..38a2d43cf 100644
--- a/app/src/main/res/values-zh-rTW/strings.xml
+++ b/app/src/main/res/values-zh-rTW/strings.xml
@@ -107,6 +107,7 @@
     <string name="vm_state_starting">啟動中</string>
     <string name="vm_state_running">執行中</string>
     <string name="vm_state_stopping">停止中</string>
+    <string name="vm_state_rebooting">重新啟動中</string>
 
     <string name="vm_exited_success">虛擬機器"%1$s"已停止。</string>
     <string name="vm_exited_error">虛擬機器"%1$s"以退出碼 %2$d 退出。</string>
diff --git a/app/src/main/res/values/strings.xml b/app/src/main/res/values/strings.xml
index e6b5d8c90..4375bd783 100644
--- a/app/src/main/res/values/strings.xml
+++ b/app/src/main/res/values/strings.xml
@@ -108,9 +108,14 @@
     <string name="vm_state_starting">Starting</string>
     <string name="vm_state_running">Running</string>
     <string name="vm_state_stopping">Stopping</string>
+    <string name="vm_state_rebooting">Rebooting</string>
 
     <string name="vm_exited_success">VM \"%1$s\" has stopped.</string>
     <string name="vm_exited_error">VM \"%1$s\" exited with code %2$d.</string>
+    <string name="vm_exit_crash">VM \"%1$s\" crashed (code %2$d).</string>
+    <string name="vm_exit_guest_panic">VM \"%1$s\" hit a kernel panic in the guest (code %2$d).</string>
+    <string name="vm_exit_watchdog">VM \"%1$s\" stalled and was reset by the watchdog (code %2$d).</string>
+    <string name="vm_rebooting">Rebooting VM \"%1$s\"…</string>
     <string name="vm_exit_dialog_title">VM \"%1$s\" Failed</string>
     <string name="vm_exit_dialog_message">The virtual machine exited with code %1$d.\n\nLogs:</string>
     <string name="vm_exit_no_logs">No logs available.</string>

From b5f697f623b53392d07a3baa7a5fef8466042628 Mon Sep 17 00:00:00 2001
From: BigfootACA <bigfoot@classfun.cn>
Date: Sun, 28 Jun 2026 09:44:43 +0800
Subject: [PATCH 072/182] StringUtils: resolveUriPath: add document parse

Signed-off-by: BigfootACA <bigfoot@classfun.cn>
---
 .../cn/classfun/droidvm/lib/utils/StringUtils.java  | 13 +++++++------
 1 file changed, 7 insertions(+), 6 deletions(-)

diff --git a/app/src/main/java/cn/classfun/droidvm/lib/utils/StringUtils.java b/app/src/main/java/cn/classfun/droidvm/lib/utils/StringUtils.java
index 879cffdc0..f1ab98d08 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/utils/StringUtils.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/utils/StringUtils.java
@@ -72,6 +72,13 @@ private static String parseTreePath(@Nullable String content, @Nullable String t
         if (shellCheckExists(content)) return content;
         var real = pathJoin(extStorage, content);
         if (shellCheckExists(real)) return real;
+        int slash = content.indexOf("/document/");
+        if (slash >= 0) {
+            content = content.substring(0, slash);
+            if (shellCheckExists(content)) return content;
+            real = pathJoin(extStorage, content);
+            if (shellCheckExists(real)) return real;
+        }
         return null;
     }
 
@@ -96,12 +103,6 @@ public static String resolveUriPath(Context ctx, Uri uri) {
         if ((part = parseTreePath(path, "/document/primary:")) != null) return part;
         if ((part = parseTreePath(path, "/external_files/")) != null) return part;
         if ((part = parseTreePath(path, "/tree/primary:")) != null) return part;
-        if (path != null && path.startsWith("/tree/primary:")) {
-            var sub = path.substring("/tree/primary:".length());
-            int slash = sub.indexOf("/document/");
-            if (slash >= 0) sub = sub.substring(0, slash);
-            return pathJoin(externalPath(), sub);
-        }
         return path;
     }
 

From e0d512ee0bed3e8a29dbf3872568a771da2f4fb0 Mon Sep 17 00:00:00 2001
From: BigfootACA <bigfoot@classfun.cn>
Date: Sun, 28 Jun 2026 09:45:16 +0800
Subject: [PATCH 073/182] DiskInfoInfoTab: auto close when disk deleted

Signed-off-by: BigfootACA <bigfoot@classfun.cn>
---
 .../ui/disk/info/info/DiskInfoInfoTab.java    | 36 +++++++++++++------
 1 file changed, 25 insertions(+), 11 deletions(-)

diff --git a/app/src/main/java/cn/classfun/droidvm/ui/disk/info/info/DiskInfoInfoTab.java b/app/src/main/java/cn/classfun/droidvm/ui/disk/info/info/DiskInfoInfoTab.java
index 0423d740d..f819a5845 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/disk/info/info/DiskInfoInfoTab.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/disk/info/info/DiskInfoInfoTab.java
@@ -8,6 +8,7 @@
 import android.content.ClipboardManager;
 import android.content.Context;
 import android.content.DialogInterface;
+import android.util.Log;
 import android.widget.FrameLayout;
 import android.widget.TextView;
 
@@ -22,6 +23,7 @@
 
 import cn.classfun.droidvm.R;
 import cn.classfun.droidvm.lib.store.disk.DiskConfig;
+import cn.classfun.droidvm.lib.store.disk.DiskStore;
 import cn.classfun.droidvm.ui.disk.action.DiskActionDialog;
 import cn.classfun.droidvm.ui.disk.info.DiskInfoActivity;
 import cn.classfun.droidvm.ui.disk.info.base.DiskInfoBaseTab;
@@ -29,6 +31,7 @@
 import cn.classfun.droidvm.ui.widgets.row.TextRowWidget;
 
 public final class DiskInfoInfoTab extends DiskInfoBaseTab {
+    private static final String TAG = "DiskInfoInfoTab";
     private CollapsibleContainer sectionDetails;
     private CollapsibleContainer sectionRaw;
     private TextView tvSummary;
@@ -91,23 +94,23 @@ public void onCreateView() {
     }
 
     private void initialize() {
-        dialog = new DiskActionDialog(activity, null, null);
+        dialog = new DiskActionDialog(activity, this::onDiskUpdated, null);
         bindButton(btnResize, R.id.menu_disk_resize);
         bindButton(btnConvert, R.id.menu_disk_convert);
         bindButton(btnOptimize, R.id.menu_disk_optimize);
         bindButton(btnCreateIncrement, R.id.menu_disk_create_increment);
         bindButton(btnClone, R.id.menu_disk_clone);
         bindButton(btnDelete, R.id.menu_disk_delete);
-    bindCopy(rowFilename);
-    bindCopy(rowFolder);
-    bindCopy(rowFormat);
-    bindCopy(rowVirtualSize);
-    bindCopy(rowActualSize);
-    bindCopy(rowClusterSize);
-    bindCopy(rowBackingFile);
-    bindCopy(rowEncryption);
-    bindCopy(rowCompression);
-    bindCopy(rowDirtyFlag);
+        bindCopy(rowFilename);
+        bindCopy(rowFolder);
+        bindCopy(rowFormat);
+        bindCopy(rowVirtualSize);
+        bindCopy(rowActualSize);
+        bindCopy(rowClusterSize);
+        bindCopy(rowBackingFile);
+        bindCopy(rowEncryption);
+        bindCopy(rowCompression);
+        bindCopy(rowDirtyFlag);
         var rowExtra1 = view.findViewById(R.id.row_extra_1);
         var rowExtra2 = view.findViewById(R.id.row_extra_2);
         var fmt = activity.config.getFormat();
@@ -117,6 +120,17 @@ private void initialize() {
         }
     }
 
+    private void onDiskUpdated() {
+        try {
+            var store = new DiskStore();
+            store.load(activity);
+            if (store.findById(activity.config.getId()) == null)
+                activity.runOnUiThread(activity::finish);
+        } catch (Exception e) {
+            Log.w(TAG, "Failed to load disk info", e);
+        }
+    }
+
     private void bindButton(@NonNull MaterialButton btn, @IdRes int id) {
         btn.setOnClickListener(v -> dialog.diskMenuOnClick(activity.config, id));
     }

From 4012a47def07cc500592da69e01b79b7fa1c9ffe Mon Sep 17 00:00:00 2001
From: BigfootACA <bigfoot@classfun.cn>
Date: Sun, 28 Jun 2026 09:52:35 +0800
Subject: [PATCH 074/182] VMEditGraphicsTab: add checks for native display

Signed-off-by: BigfootACA <bigfoot@classfun.cn>
---
 .../classfun/droidvm/ui/vm/edit/VMEditActivity.java | 13 +++++++++++++
 .../droidvm/ui/vm/edit/basic/VMEditBasicTab.java    |  4 ++++
 .../ui/vm/edit/graphics/VMEditGraphicsTab.java      |  5 +++++
 app/src/main/res/values-zh-rCN/strings.xml          |  2 ++
 app/src/main/res/values-zh-rTW/strings.xml          |  2 ++
 app/src/main/res/values/strings.xml                 |  2 ++
 6 files changed, 28 insertions(+)

diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/VMEditActivity.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/VMEditActivity.java
index 835b5f21e..acb06d0f9 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/VMEditActivity.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/VMEditActivity.java
@@ -19,7 +19,9 @@
 import com.google.android.material.tabs.TabLayout;
 
 import java.util.ArrayList;
+import java.util.HashMap;
 import java.util.List;
+import java.util.Map;
 import java.util.UUID;
 import java.util.function.Consumer;
 
@@ -45,6 +47,17 @@ public final class VMEditActivity extends SwipeableTabActivity {
     public Consumer<Uri> currentPicker = null;
     public boolean editMode = false;
     public UUID editVMId = null;
+    private final Map<String, Object> sharedData = new HashMap<>();
+
+
+    public <T> void put(@NonNull String key, T value) {
+        sharedData.put(key, value);
+    }
+
+    @SuppressWarnings("unchecked")
+    public <T> T get(@NonNull String key, T def) {
+        return (T) sharedData.getOrDefault(key, def);
+    }
 
     private void pickerResult(Uri uri) {
         if (currentPicker != null && uri != null)
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/basic/VMEditBasicTab.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/basic/VMEditBasicTab.java
index f6d8eeebe..4d5f4173b 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/basic/VMEditBasicTab.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/basic/VMEditBasicTab.java
@@ -86,6 +86,10 @@ public void initValue() {
         chooseBackend.configure(VMBackend.class, VMBackend.DEFAULT);
         chooseHypervisor.configure(VMHypervisor.class, VMHypervisor.DEFAULT);
         choosePrepareLendMthp.configure(LendMthpMode.class, LendMthpMode.CHUNKED);
+        parent.put("backend", VMBackend.DEFAULT);
+        parent.put("hypervisor", VMHypervisor.DEFAULT);
+        chooseBackend.setOnValueChangedListener((oldValue, newValue) -> parent.put("backend", newValue));
+        chooseHypervisor.setOnValueChangedListener((oldValue, newValue) -> parent.put("hypervisor", newValue));
         try {
             var socModel = QcomChipName.getCurrentSoC();
             var gunyah = new QcomGunyahSupports(parent);
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/graphics/VMEditGraphicsTab.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/graphics/VMEditGraphicsTab.java
index 579c4caa4..3b8d9e6ee 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/graphics/VMEditGraphicsTab.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/graphics/VMEditGraphicsTab.java
@@ -17,6 +17,7 @@
 import com.google.android.material.textfield.TextInputEditText;
 
 import cn.classfun.droidvm.R;
+import cn.classfun.droidvm.lib.store.vm.VMBackend;
 import cn.classfun.droidvm.lib.store.vm.VMConfig;
 import cn.classfun.droidvm.lib.store.vm.VMStore;
 import cn.classfun.droidvm.lib.store.vm.DisplayBackend;
@@ -171,6 +172,10 @@ public boolean validateInput(@NonNull VMStore store) {
         if (!checkInputField(etDisplayDpiH, false, 100, 800)) return false;
         if (!checkInputField(etDisplayDpiV, false, 100, 800)) return false;
         if (!checkInputField(etVncPort, true, 1024, 65535)) return false;
+        if (parent.get("backend", VMBackend.DEFAULT) != VMBackend.CROSVM && swNativeDisplayEnabled.isChecked())
+            return showValidateFailed(R.string.create_vm_error_native_display_only_crosvm);
+        if (swNativeDisplayEnabled.isChecked() && swVncEnabled.isChecked())
+            return showValidateFailed(R.string.create_vm_error_native_display_vnc_cannot_enabled);
         return true;
     }
 
diff --git a/app/src/main/res/values-zh-rCN/strings.xml b/app/src/main/res/values-zh-rCN/strings.xml
index 1b2cf1bb0..d9251fda3 100644
--- a/app/src/main/res/values-zh-rCN/strings.xml
+++ b/app/src/main/res/values-zh-rCN/strings.xml
@@ -173,6 +173,8 @@
     <string name="create_vm_error_invalid_number">无效数字</string>
     <string name="create_vm_error_hypervisor_not_supported">所选后端不支持选中的虚拟化模式</string>
     <string name="create_vm_error_path_invalid">无效的绝对路径</string>
+    <string name="create_vm_error_native_display_only_crosvm">原生显示只在使用CrosVM后端时有效</string>
+    <string name="create_vm_error_native_display_vnc_cannot_enabled">原生显示和VNC不能同时启用</string>
     <string name="create_vm_category_kernel">Linux 内核</string>
     <string name="create_vm_kernel_hint">内核</string>
     <string name="create_vm_initrd_hint">Initrd</string>
diff --git a/app/src/main/res/values-zh-rTW/strings.xml b/app/src/main/res/values-zh-rTW/strings.xml
index 446626b2b..04983f8ad 100644
--- a/app/src/main/res/values-zh-rTW/strings.xml
+++ b/app/src/main/res/values-zh-rTW/strings.xml
@@ -169,6 +169,8 @@
     <string name="create_vm_error_invalid_number">無效數字</string>
     <string name="create_vm_error_hypervisor_not_supported">所選後端不支援選取的虛擬化模式</string>
     <string name="create_vm_error_path_invalid">無效的絕對路徑</string>
+    <string name="create_vm_error_native_display_only_crosvm">原生顯示只在使用CrosVM後端時有效</string>
+    <string name="create_vm_error_native_display_vnc_cannot_enabled">原生顯示和VNC不能同時啟用</string>
     <string name="create_vm_category_kernel">Linux 核心</string>
     <string name="create_vm_kernel_hint">核心</string>
     <string name="create_vm_initrd_hint">Initrd</string>
diff --git a/app/src/main/res/values/strings.xml b/app/src/main/res/values/strings.xml
index 91b4d5a27..e43ba330b 100644
--- a/app/src/main/res/values/strings.xml
+++ b/app/src/main/res/values/strings.xml
@@ -175,6 +175,8 @@
     <string name="create_vm_error_invalid_number">Invalid number</string>
     <string name="create_vm_error_hypervisor_not_supported">Selected hypervisor is not supported by selected backend</string>
     <string name="create_vm_error_path_invalid">Invalid absolute path</string>
+    <string name="create_vm_error_native_display_only_crosvm">Native display only applies to CrosVM backend.</string>
+    <string name="create_vm_error_native_display_vnc_cannot_enabled">Native display and VNC cannot be enabled at the same time.</string>
     <string name="create_vm_category_kernel">Linux Kernel</string>
     <string name="create_vm_kernel_hint">Kernel</string>
     <string name="create_vm_initrd_hint">Initrd</string>

From 711168c61eebcba7a9431664f3c6a4c1fbf574d9 Mon Sep 17 00:00:00 2001
From: BigfootACA <bigfoot@classfun.cn>
Date: Mon, 29 Jun 2026 08:02:43 +0800
Subject: [PATCH 075/182] license.yaml: add new dependencies

Signed-off-by: BigfootACA <bigfoot@classfun.cn>
---
 app/src/main/assets/data/license.yaml | 34 +++++++++++++++++++++++++++
 1 file changed, 34 insertions(+)

diff --git a/app/src/main/assets/data/license.yaml b/app/src/main/assets/data/license.yaml
index 00517d89d..693ce239f 100644
--- a/app/src/main/assets/data/license.yaml
+++ b/app/src/main/assets/data/license.yaml
@@ -104,3 +104,37 @@ license:
     urls:
       - https://android.googlesource.com/platform/hardware/google/gfxstream/
       - https://github.com/google/gfxstream
+
+  - name: netbox
+    description: Network manage utility for DroidVM
+    license: GPL-3.0
+    urls:
+      - https://github.com/Droid-VM/netbox
+
+  - name: gvisor-vswitch
+    description: Virtual Switch based on gVisor
+    license: Apache-2.0
+    urls:
+      - https://github.com/Droid-VM/gvisor-vswitch
+      - https://github.com/HuJK/gvisor-vswitch
+
+  - name: pseudo-bridge-rs
+    description: Pseudo Bridge
+    license: Apache-2.0
+    urls:
+      - https://github.com/Droid-VM/pseudo-bridge-rs
+      - https://github.com/KusakabeShi/pseudo-bridge-rs
+
+  - name: linux-boot-extractor
+    description: Linux Boot Extractor
+    license: GPL-3.0
+    urls:
+      - https://github.com/Droid-VM/linux-boot-extractor
+      - https://github.com/HuJK/linux-boot-extractor
+
+  - name: bridgedhcp
+    description: DHCPv4 / DHCPv6 / SLAAC server for Linux bridge interfaces
+    license: GPL-3.0
+    urls:
+      - https://github.com/Droid-VM/bridgedhcp
+      - https://github.com/HuJK/bridgedhcp

From e78b27577e51a9b09f6c2b3a4d5bba39b78b4373 Mon Sep 17 00:00:00 2001
From: BigfootACA <bigfoot@classfun.cn>
Date: Mon, 29 Jun 2026 08:04:43 +0800
Subject: [PATCH 076/182] DiskAdapter: display cdrom icon on ISO files

Signed-off-by: BigfootACA <bigfoot@classfun.cn>
---
 .../cn/classfun/droidvm/ui/main/base/list/DataAdapter.java   | 4 ++--
 .../java/cn/classfun/droidvm/ui/main/disk/DiskAdapter.java   | 5 ++++-
 .../cn/classfun/droidvm/ui/main/network/NetworkAdapter.java  | 2 +-
 .../main/java/cn/classfun/droidvm/ui/main/vm/VMAdapter.java  | 2 +-
 4 files changed, 8 insertions(+), 5 deletions(-)

diff --git a/app/src/main/java/cn/classfun/droidvm/ui/main/base/list/DataAdapter.java b/app/src/main/java/cn/classfun/droidvm/ui/main/base/list/DataAdapter.java
index 54d833e27..4aa236459 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/main/base/list/DataAdapter.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/main/base/list/DataAdapter.java
@@ -55,7 +55,7 @@ public final BaseViewHolder onCreateViewHolder(@NonNull ViewGroup parent, int vi
     public void onBindViewHolder(@NonNull BaseViewHolder h, int position) {
         var d = items.get(position);
         var ctx = h.itemView.getContext();
-        var drawable = AppCompatResources.getDrawable(ctx, getIconResId());
+        var drawable = AppCompatResources.getDrawable(ctx, getIconResId(d));
         h.itemIcon.setImageDrawable(drawable);
         if (d != null)
             h.itemName.setText(d.getName());
@@ -71,7 +71,7 @@ public void onBindViewHolder(@NonNull BaseViewHolder h, int position) {
     }
 
     @DrawableRes
-    public abstract int getIconResId();
+    public abstract int getIconResId(@NonNull D data);
 
     @SuppressLint("NotifyDataSetChanged")
     public void onItemsUpdated() {
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/main/disk/DiskAdapter.java b/app/src/main/java/cn/classfun/droidvm/ui/main/disk/DiskAdapter.java
index f6ad2dbdd..e97e932b4 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/main/disk/DiskAdapter.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/main/disk/DiskAdapter.java
@@ -18,6 +18,7 @@
 import cn.classfun.droidvm.lib.store.disk.DiskConfig;
 import cn.classfun.droidvm.lib.store.disk.DiskStore;
 import cn.classfun.droidvm.lib.utils.ImageUtils;
+import cn.classfun.droidvm.ui.disk.create.DiskFormat;
 import cn.classfun.droidvm.ui.main.base.BaseViewHolder;
 import cn.classfun.droidvm.ui.main.base.list.DataAdapter;
 
@@ -36,7 +37,9 @@ public void onItemsUpdated() {
     }
 
     @Override
-    public int getIconResId() {
+    public int getIconResId(@NonNull DiskConfig disk) {
+        if (disk.getFormat() == DiskFormat.ISO)
+            return R.drawable.ic_cdrom;
         return R.drawable.ic_nav_disk;
     }
 
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/main/network/NetworkAdapter.java b/app/src/main/java/cn/classfun/droidvm/ui/main/network/NetworkAdapter.java
index b1230ca09..5aeb08da1 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/main/network/NetworkAdapter.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/main/network/NetworkAdapter.java
@@ -18,7 +18,7 @@ public NetworkAdapter() {
     }
 
     @Override
-    public int getIconResId() {
+    public int getIconResId(@NonNull NetworkConfig network) {
         return R.drawable.ic_switch;
     }
 
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/main/vm/VMAdapter.java b/app/src/main/java/cn/classfun/droidvm/ui/main/vm/VMAdapter.java
index a32f42bde..29a66d326 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/main/vm/VMAdapter.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/main/vm/VMAdapter.java
@@ -17,7 +17,7 @@ public VMAdapter() {
     }
 
     @Override
-    public int getIconResId() {
+    public int getIconResId(@NonNull VMConfig vm) {
         return R.drawable.ic_nav_vm;
     }
 

From c7fbaec8ebbeef68a957893e4dedf46ddf4a49c4 Mon Sep 17 00:00:00 2001
From: BigfootACA <bigfoot@classfun.cn>
Date: Tue, 30 Jun 2026 17:13:34 +0800
Subject: [PATCH 077/182] assets: update prebuilts

https://github.com/Droid-VM/DroidVM-Prebuilt-Root/commit/4016dba63af0970337eadde0eb1d810c15a048e2

Signed-off-by: BigfootACA <bigfoot@classfun.cn>
---
 app/src/main/assets/prebuilts | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/app/src/main/assets/prebuilts b/app/src/main/assets/prebuilts
index 06a1cc4e4..fc972f187 160000
--- a/app/src/main/assets/prebuilts
+++ b/app/src/main/assets/prebuilts
@@ -1 +1 @@
-Subproject commit 06a1cc4e47be68d030aa54546175c8172f2786a0
+Subproject commit fc972f1871a2accb31fc0d5f2c08cc8a37d8dd8a

From 4e0d2682458930e86c40027e51edb654ee581806 Mon Sep 17 00:00:00 2001
From: BigfootACA <bigfoot@classfun.cn>
Date: Tue, 30 Jun 2026 17:17:05 +0800
Subject: [PATCH 078/182] qcom.xml: add SM8735P

Signed-off-by: BigfootACA <bigfoot@classfun.cn>
---
 app/src/main/assets/data/gunyah.yaml | 1 +
 app/src/main/res/xml/qcom.xml        | 1 +
 2 files changed, 2 insertions(+)

diff --git a/app/src/main/assets/data/gunyah.yaml b/app/src/main/assets/data/gunyah.yaml
index 9886f2963..7738ddc1a 100644
--- a/app/src/main/assets/data/gunyah.yaml
+++ b/app/src/main/assets/data/gunyah.yaml
@@ -16,6 +16,7 @@ gunyah:
   # Qualcomm Snapdragon 8 Elite
   - socs:
       - SM8735
+      - SM8735P
       - SM8750
       - SM87503AB
       - SM8750AB
diff --git a/app/src/main/res/xml/qcom.xml b/app/src/main/res/xml/qcom.xml
index de1d2c360..c111404df 100644
--- a/app/src/main/res/xml/qcom.xml
+++ b/app/src/main/res/xml/qcom.xml
@@ -212,6 +212,7 @@
     <chip id="SM8650QAA"    >Qualcomm Snapdragon 8 Gen 3</chip>
     <chip id="SM8650QAB"    >Qualcomm Snapdragon 8 Gen 3</chip>
     <chip id="SM8735"       >Qualcomm Snapdragon 8s Gen 4</chip>
+    <chip id="SM8735P"      >Qualcomm Snapdragon 8s Gen 4</chip>
     <chip id="SM8750"       >Qualcomm Snapdragon 8 Elite</chip>
     <chip id="SM87503AB"    >Qualcomm Snapdragon 8 Elite</chip>
     <chip id="SM8750AB"     >Qualcomm Snapdragon 8 Elite</chip>

From ea3b38bcc490d1fee6ce300904627332b2cb26d6 Mon Sep 17 00:00:00 2001
From: HuJK <gh@hujk.org>
Date: Tue, 30 Jun 2026 18:33:39 +0800
Subject: [PATCH 079/182] (feat) UI update usage bar

---
 .../droidvm/ui/hugepage/HugePageActivity.java | 106 +++--
 .../droidvm/ui/hugepage/HugePageModel.java    | 376 ++++++++++++++++++
 .../ui/hugepage/HugePageProcessActivity.java  | 289 ++++----------
 .../droidvm/ui/hugepage/SegmentedBar.java     | 170 +++++++-
 app/src/main/res/layout/activity_hugepage.xml |   2 +-
 app/src/main/res/values-zh-rCN/strings.xml    |   4 +-
 app/src/main/res/values-zh-rTW/strings.xml    |   4 +-
 app/src/main/res/values/strings.xml           |   4 +-
 8 files changed, 703 insertions(+), 252 deletions(-)
 create mode 100644 app/src/main/java/cn/classfun/droidvm/ui/hugepage/HugePageModel.java

diff --git a/app/src/main/java/cn/classfun/droidvm/ui/hugepage/HugePageActivity.java b/app/src/main/java/cn/classfun/droidvm/ui/hugepage/HugePageActivity.java
index 808ac85da..d5a6dd7a2 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/hugepage/HugePageActivity.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/hugepage/HugePageActivity.java
@@ -60,6 +60,7 @@ public final class HugePageActivity extends AppCompatActivity {
     private static final String CRASH_FILE = pathJoin(MAGISK_BASE, "crash");
     private static final long PAGE_SIZE = 2L * 1024 * 1024; // 2MiB per page
     private final Handler handler = new Handler(Looper.getMainLooper());
+    private final HugePageModel model = new HugePageModel();
     private boolean resumed = false;
     private MaterialToolbar toolbar;
     private MaterialCardView cardCrashWarning;
@@ -171,28 +172,53 @@ private void scheduleRefresh() {
     }
 
     private void refreshStatus() {
+        refreshStatus(false);
+    }
+
+    /**
+     * @param forceCaps re-probe module capabilities immediately (bypass the
+     *                  cache) - pass true right after loading/unloading so the UI
+     *                  reflects the new module state without the cache's lag.
+     */
+    private void refreshStatus(boolean forceCaps) {
         runOnPool(() -> {
+            var caps = model.caps(forceCaps);
             var moduleInst = shellCheckExists(MODULE_PROP);
-            var moduleLoaded = shellCheckExists(SYSFS_BASE);
+            var moduleLoaded = caps.loaded;
             var moduleDisabled = shellCheckExists(DISABLE_FILE);
             var crashStamp = shellCheckExists(CRASH_FILE);
             var refillStat = "";
             var servedSummary = "";
+            var koAttribution = false;
             if (moduleLoaded) try {
                 refillStat = shellReadFile(pathJoin(SYSFS_PARAMS, "refill_stat"));
                 // Reconcile + read per-VM served pages so this screen's bar shows
                 // the exact same per-VM breakdown as the usage screen's bar.
-                if (shellCheckExists(pathJoin(SYSFS_PARAMS, "served_summary"))) {
+                if (caps.koAttribution) {
                     run("echo 1 > %s/reconcile", SYSFS_PARAMS);
                     servedSummary = shellReadFile(pathJoin(SYSFS_PARAMS, "served_summary"));
+                    koAttribution = true;
                 }
             } catch (Exception e) {
                 Log.w(TAG, "Failed to read parameters", e);
             }
             var stats = parseProp(refillStat);
-            var owners = parseServedOwners(servedSummary);
+            // pid -> friendly VM name, so each used segment is labelled "w11"
+            // like the usage screen. Old modules without the KO attribution API
+            // (no served_summary) fall back to a system THP scan of running VMs,
+            // mirroring the usage screen's "scan" mode, instead of showing the
+            // unavailable per-VM module-attribution breakdown.
+            List<long[]> owners;
+            Map<Integer, String> vmMap;
+            if (koAttribution) {
+                owners = parseServedOwners(servedSummary);
+                vmMap = owners.isEmpty() ? new LinkedHashMap<>() : model.vmNames(false);
+            } else {
+                vmMap = moduleLoaded ? model.vmNames(false) : new LinkedHashMap<>();
+                owners = model.scanThpPages(vmMap.keySet());
+            }
             runOnUiThread(() -> updateUI(
-                moduleInst, moduleLoaded, moduleDisabled, crashStamp, stats, owners
+                moduleInst, moduleLoaded, moduleDisabled, crashStamp, stats, owners, vmMap
             ));
         });
     }
@@ -242,7 +268,8 @@ private void updateUI(
         boolean installed, boolean loaded,
         boolean disabled, boolean crashed,
         @NonNull Map<String, String> stats,
-        @NonNull List<long[]> owners
+        @NonNull List<long[]> owners,
+        @NonNull Map<Integer, String> vmMap
     ) {
         if (isFinishing()) return;
         cardCrashWarning.setVisibility(crashed ? VISIBLE : GONE);
@@ -260,41 +287,50 @@ private void updateUI(
                 // modules without pool_want fall back to capacity.
                 var poolWant = getPages(stats, "pool_want");
                 if (poolWant <= 0) poolWant = poolTotal;
-                // Used = pages currently served to VMs (traced). Prefer the live
-                // served counter; pool_total - avail under-counts after a shrink
-                // that left served pages out. Old modules: fall back to that.
-                var used = stats.containsKey("served")
-                    ? getPages(stats, "served")
-                    : Math.clamp(poolTotal - poolAvail, 0, poolTotal);
-                // 2x2 caption (identical to the usage screen): used / available
-                // on top, total / pool-size below. Total = real held reserve
-                // (used + avail = owned + traced), shown raw - no clamp to the
-                // pool size, so a kernel that fails to release on shrink shows up
-                // as total > the size you set.
-                var held = used + poolAvail;
-                setPagesString(tvPoolUsed, R.string.hugepage_stat_pool_used, used);
-                setPagesString(tvPoolAvail, R.string.hugepage_stat_pool_available, poolAvail);
-                setPagesString(tvPoolTotal, R.string.hugepage_stat_pool_total, held);
-                setPagesString(tvPoolSize, R.string.hugepage_stat_pool_size, poolWant);
-                // Segmented bar: one colored segment per VM (same per-VM colours
-                // and deficit block as the usage screen's bar) + a track for the
-                // available portion; total = want.
+                // Apple-storage-bar style: one labelled colored block per VM
+                // (used), then the available portion as a track-coloured gap,
+                // then the waiting-to-acquire (deficit) block pinned flush right.
+                // Each block draws its label inside if wide enough.
                 boolean dark = HugePageColor.isDark(this);
                 int n = owners.size();
-                int[] colors = new int[n + 1];
-                float[] values = new float[n + 1];
+                int[] usedColors = new int[n];
+                float[] usedValues = new float[n];
+                String[] usedLabels = new String[n];
                 long seg = 0;
                 for (int i = 0; i < n; i++) {
                     int pid = (int) owners.get(i)[0];
                     long ownerPages = owners.get(i)[1];
-                    colors[i] = HugePageColor.forPid(pid, dark);
-                    values[i] = ownerPages;
+                    usedColors[i] = HugePageColor.forPid(pid, dark);
+                    usedValues[i] = ownerPages;
+                    String name = vmMap.get(pid);
+                    if (name == null) name = getString(R.string.hugepage_proc_pid, pid);
+                    // Two stacked lines: label over capacity.
+                    usedLabels[i] = name + "\n" + SizeUtils.formatSize(ownerPages * PAGE_SIZE);
                     seg += ownerPages;
                 }
-                colors[n] = HugePageColor.pending(this);
-                values[n] = Math.max(0, poolWant - seg - poolAvail);
-                float total = Math.max(poolWant, seg + poolAvail);
-                segPoolBar.setData(colors, values, total);
+                // "used" is the sum of the segments the bar draws, so the caption
+                // and the bar always agree (one canonical quantity: the per-VM
+                // served/scanned pages). The kernel 'served' counter can include
+                // orphaned owner-gone pages that have no segment; those surface in
+                // the held/available gap rather than as an invisible caption delta.
+                long used = seg;
+                long deficit = Math.max(0, poolWant - seg - poolAvail);
+                // 2x2 caption: used / available on top, total / pool-size below.
+                // Total = real held reserve (used + avail), shown raw - no clamp
+                // to the pool size, so a kernel that fails to release on shrink
+                // shows up as total > the size you set.
+                var held = used + poolAvail;
+                setPagesString(tvPoolUsed, R.string.hugepage_stat_pool_used, used);
+                setPagesString(tvPoolAvail, R.string.hugepage_stat_pool_available, poolAvail);
+                setPagesString(tvPoolTotal, R.string.hugepage_stat_pool_total, held);
+                setPagesString(tvPoolSize, R.string.hugepage_stat_pool_size, poolWant);
+                segPoolBar.setStorage(usedColors, usedValues, usedLabels,
+                    poolAvail, getString(R.string.hugepage_bar_available)
+                        + "\n" + SizeUtils.formatSize(poolAvail * PAGE_SIZE),
+                    HugePageColor.pending(this), deficit,
+                    getString(R.string.hugepage_proc_deficit)
+                        + "\n" + SizeUtils.formatSize(deficit * PAGE_SIZE),
+                    poolWant);
             } catch (NumberFormatException e) {
                 tvPoolUsed.setText("-");
                 tvPoolAvail.setText("-");
@@ -354,7 +390,7 @@ private void doLoad() {
                 runOnUiThread(() -> {
                     Toast.makeText(this, R.string.hugepage_already_loaded,
                         LENGTH_SHORT).show();
-                    refreshStatus();
+                    refreshStatus(true);
                 });
                 return;
             }
@@ -378,7 +414,7 @@ private void doLoad() {
                         ? R.string.hugepage_loaded
                         : R.string.hugepage_load_failed,
                     LENGTH_SHORT).show();
-                refreshStatus();
+                refreshStatus(true);
             });
         });
     }
@@ -596,7 +632,7 @@ private void doUnload() {
                     R.string.hugepage_unloaded :
                     R.string.hugepage_unload_failed;
                 Toast.makeText(this, msg, LENGTH_SHORT).show();
-                refreshStatus();
+                refreshStatus(true);
             });
         });
     }
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/hugepage/HugePageModel.java b/app/src/main/java/cn/classfun/droidvm/ui/hugepage/HugePageModel.java
new file mode 100644
index 000000000..0e1958c42
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/ui/hugepage/HugePageModel.java
@@ -0,0 +1,376 @@
+package cn.classfun.droidvm.ui.hugepage;
+
+import static cn.classfun.droidvm.lib.utils.FileUtils.shellCheckExists;
+import static cn.classfun.droidvm.lib.utils.FileUtils.shellReadFile;
+import static cn.classfun.droidvm.lib.utils.RunUtils.run;
+import static cn.classfun.droidvm.lib.utils.StringUtils.pathJoin;
+
+import android.os.SystemClock;
+
+import androidx.annotation.NonNull;
+import androidx.annotation.Nullable;
+
+import java.util.ArrayList;
+import java.util.Collection;
+import java.util.LinkedHashMap;
+import java.util.List;
+import java.util.Map;
+import java.util.concurrent.CountDownLatch;
+import java.util.concurrent.TimeUnit;
+import java.util.concurrent.atomic.AtomicReference;
+import java.util.regex.Pattern;
+
+import cn.classfun.droidvm.lib.daemon.DaemonConnection;
+
+/**
+ * Shared huge-page data layer for the status ({@link HugePageActivity}) and
+ * process ({@link HugePageProcessActivity}) screens.
+ *
+ * <p>Both screens run a per-second refresh loop, so this class caches the three
+ * expensive sources with short TTLs so a refresh no longer re-probes root sysfs,
+ * blocks on the daemon, or re-scans {@code /proc} every single tick:
+ * <ul>
+ *   <li><b>capabilities</b> — one batched root probe of the module's sysfs knobs,
+ *       resolved at most once per {@link #CAPS_TTL_MS} (a static property of the
+ *       loaded {@code .ko}, not something to re-derive every tick);</li>
+ *   <li><b>VM names</b> — the daemon {@code vm_list} pid&rarr;name map, fetched at
+ *       most once per {@link #VM_TTL_MS} and reused (last-known) on a slow daemon
+ *       so labels never blank to raw pids;</li>
+ *   <li><b>pool_target</b> — the read-only v6 grow target, read once and cached.</li>
+ * </ul>
+ * Each screen owns its own instance (separate caches); everything here is
+ * context-free (pure data), so it never holds an Activity reference.
+ */
+final class HugePageModel {
+    static final String SYSFS_BASE = "/sys/module/gh_hugepage_reserve";
+    static final String SYSFS_PARAMS = pathJoin(SYSFS_BASE, "parameters");
+    static final String SYSFS_OWNERS = pathJoin(SYSFS_PARAMS, "vm_owners");
+    /** A THP huge page is 2 MiB, i.e. 2048 KiB. */
+    static final long KB_PER_PAGE = 2048;
+    static final long PAGE_BYTES = KB_PER_PAGE * 1024;
+
+    /** meminfo/smaps values are "<n> kB"; strip everything but the digits once. */
+    private static final Pattern NON_DIGITS = Pattern.compile("[^0-9]");
+
+    private static final long CAPS_TTL_MS = 3000;
+    private static final long VM_TTL_MS = 4000;
+    private static final long DAEMON_TIMEOUT_S = 2;
+
+    /* ================================================================== */
+    /*  Module capabilities                                               */
+    /* ================================================================== */
+
+    /** Immutable snapshot of what the currently-loaded module supports. */
+    static final class Caps {
+        /** {@code /sys/module/gh_hugepage_reserve} exists (module is loaded). */
+        final boolean loaded;
+        /** served_summary present: per-VM KO attribution API (v7). */
+        final boolean koAttribution;
+        /** pool_want knob present (v7 resizable target). */
+        final boolean hasPoolWant;
+        /** acquire knob present (v7 async grow). */
+        final boolean hasAcquire;
+        /** manual_refill knob present (v6 refill). */
+        final boolean hasManualRefill;
+
+        Caps(boolean loaded, boolean koAttribution, boolean hasPoolWant,
+             boolean hasAcquire, boolean hasManualRefill) {
+            this.loaded = loaded;
+            this.koAttribution = koAttribution;
+            this.hasPoolWant = hasPoolWant;
+            this.hasAcquire = hasAcquire;
+            this.hasManualRefill = hasManualRefill;
+        }
+    }
+
+    @Nullable
+    private volatile Caps capsCache;
+    private volatile long capsAtMs = Long.MIN_VALUE;
+
+    /**
+     * Module capabilities, cached for {@link #CAPS_TTL_MS}. Resolving this from a
+     * cache (instead of re-probing every refresh) is what stops a single flaky
+     * root {@code test -e} from flapping the whole view between KO and scan mode.
+     * Pass {@code force = true} right after an action that changes the module
+     * (load / unload / soft-disable) to re-probe immediately.
+     */
+    @NonNull
+    Caps caps(boolean force) {
+        long now = SystemClock.elapsedRealtime();
+        var c = capsCache;
+        if (!force && c != null && now - capsAtMs < CAPS_TTL_MS) return c;
+        c = probeCaps();
+        capsCache = c;
+        capsAtMs = now;
+        return c;
+    }
+
+    /**
+     * One batched root round-trip that tests every knob at once (5 {@code test -e}
+     * in a single {@code run}, instead of one exec per knob). If it comes back
+     * "not loaded" we retry once, since a lone root {@code test -e} can flake
+     * under load and we don't want to spuriously report the module gone.
+     */
+    @NonNull
+    private Caps probeCaps() {
+        var caps = probeCapsOnce();
+        if (!caps.loaded) caps = probeCapsOnce();   // absorb a flaky probe
+        return caps;
+    }
+
+    @NonNull
+    private Caps probeCapsOnce() {
+        String raw;
+        try {
+            raw = run(
+                "for f in base served_summary pool_want acquire manual_refill; do "
+                    + "if [ \"$f\" = base ]; then t=%1$s; else t=%2$s/$f; fi; "
+                    + "[ -e \"$t\" ] && echo 1 || echo 0; done",
+                SYSFS_BASE, SYSFS_PARAMS
+            ).getOutString();
+        } catch (Exception e) {
+            raw = "";
+        }
+        var f = raw.split("\n");
+        boolean loaded = flag(f, 0);
+        boolean served = flag(f, 1);
+        return new Caps(loaded, loaded && served, flag(f, 2), flag(f, 3), flag(f, 4));
+    }
+
+    private static boolean flag(@NonNull String[] lines, int i) {
+        return i < lines.length && "1".equals(lines[i].trim());
+    }
+
+    /* ================================================================== */
+    /*  VM name resolution (daemon vm_list)                               */
+    /* ================================================================== */
+
+    @NonNull
+    private volatile Map<Integer, String> vmNames = new LinkedHashMap<>();
+    private volatile long vmNamesAtMs = Long.MIN_VALUE;
+    private volatile boolean vmNamesInit = false;
+
+    /**
+     * Best-effort pid&rarr;VM-name map from the daemon, cached for
+     * {@link #VM_TTL_MS}. Within the TTL the cached map is returned without
+     * contacting the daemon, so the refresh loop no longer blocks up to 2s every
+     * tick. On a fetch that times out the last known map is kept (labels stay
+     * stable instead of blanking to raw pids). Pass {@code force = true} to
+     * bypass the cache (e.g. right after killing a process).
+     */
+    @NonNull
+    Map<Integer, String> vmNames(boolean force) {
+        long now = SystemClock.elapsedRealtime();
+        if (!force && vmNamesInit && now - vmNamesAtMs < VM_TTL_MS) return vmNames;
+        var fresh = fetchVmMap();
+        if (fresh != null) {            // null == timed out / error: keep last known
+            vmNames = fresh;
+            vmNamesAtMs = now;
+            vmNamesInit = true;
+        }
+        return vmNames;
+    }
+
+    /**
+     * One blocking daemon {@code vm_list} round-trip (bounded to
+     * {@link #DAEMON_TIMEOUT_S}). Returns {@code null} on timeout/error so the
+     * caller can distinguish "no answer" from a genuine empty VM list.
+     *
+     * <p>The map is published through an {@link AtomicReference} set inside the
+     * callback, so the caller either sees a fully-built map or {@code null} —
+     * never a half-populated one, even when the response lands right at the
+     * timeout boundary.
+     */
+    @Nullable
+    private Map<Integer, String> fetchVmMap() {
+        var result = new AtomicReference<Map<Integer, String>>(null);
+        var latch = new CountDownLatch(1);
+        DaemonConnection.getInstance().buildRequest("vm_list")
+            .onResponse(resp -> {
+                try {
+                    var map = new LinkedHashMap<Integer, String>();
+                    var arr = resp.optJSONArray("data");
+                    if (arr != null) {
+                        for (int i = 0; i < arr.length(); i++) {
+                            var obj = arr.optJSONObject(i);
+                            if (obj == null) continue;
+                            int pid = obj.optInt("pid", -1);
+                            var name = obj.optString("name", null);
+                            if (pid > 0 && name != null) map.put(pid, name);
+                        }
+                    }
+                    result.set(map);
+                } finally {
+                    latch.countDown();
+                }
+            })
+            .onError(e -> latch.countDown())
+            .invoke();
+        try {
+            //noinspection ResultOfMethodCallIgnored
+            latch.await(DAEMON_TIMEOUT_S, TimeUnit.SECONDS);
+        } catch (InterruptedException ignored) {
+        }
+        return result.get();
+    }
+
+    /* ================================================================== */
+    /*  /proc scanning                                                    */
+    /* ================================================================== */
+
+    /** Live /proc state for a pid: run state, THP occupancy, liveness. */
+    static final class ProcInfo {
+        final char state;
+        /** AnonHugePages + ShmemPmdMapped in KiB, or -1 if unknown. */
+        final long thpKb;
+        final boolean alive;
+
+        ProcInfo(char state, long thpKb, boolean alive) {
+            this.state = state;
+            this.thpKb = thpKb;
+            this.alive = alive;
+        }
+    }
+
+    /**
+     * Batch-read live /proc state (R/S/D + liveness) and THP occupancy
+     * (AnonHugePages + ShmemPmdMapped) for the given pids in a single root call.
+     */
+    @NonNull
+    Map<Integer, ProcInfo> readProcInfo(@NonNull Collection<Integer> pids) {
+        var map = new LinkedHashMap<Integer, ProcInfo>();
+        if (pids.isEmpty()) return map;
+        var pidList = new StringBuilder();
+        for (var pid : pids) {
+            if (pidList.length() > 0) pidList.append(' ');
+            pidList.append(pid);
+        }
+        String raw;
+        try {
+            raw = run(
+                "for p in %s; do echo \"@@@ $p\"; "
+                    + "grep -E '^State:' /proc/$p/status 2>/dev/null; "
+                    + "grep -E '^AnonHugePages:|^ShmemPmdMapped:' "
+                    + "/proc/$p/smaps_rollup 2>/dev/null; "
+                    + "done",
+                pidList.toString()
+            ).getOutString();
+        } catch (Exception e) {
+            return map;
+        }
+        int curPid = -1;
+        char state = '?';
+        long thp = -1;
+        boolean alive = false;
+        for (var line : raw.split("\n")) {
+            if (line.startsWith("@@@ ")) {
+                if (curPid > 0) map.put(curPid, new ProcInfo(state, thp, alive));
+                try {
+                    curPid = Integer.parseInt(line.substring(4).trim());
+                } catch (NumberFormatException e) {
+                    curPid = -1;
+                }
+                state = '?';
+                thp = -1;
+                alive = false;
+            } else if (line.startsWith("State:")) {
+                var v = line.substring(6).trim();
+                if (!v.isEmpty()) state = v.charAt(0);
+                alive = true;   // status readable -> process exists
+            } else if (line.startsWith("AnonHugePages:")
+                || line.startsWith("ShmemPmdMapped:")) {
+                var digits = NON_DIGITS.matcher(line).replaceAll("");
+                if (!digits.isEmpty()) {
+                    try {
+                        thp = (thp < 0 ? 0 : thp) + Long.parseLong(digits);
+                    } catch (NumberFormatException ignored) {
+                    }
+                }
+            }
+        }
+        if (curPid > 0) map.put(curPid, new ProcInfo(state, thp, alive));
+        return map;
+    }
+
+    /**
+     * Per-VM THP occupancy in <b>pages</b> for the given pids, as {pid, pages}
+     * rows, dropping any VM with under one full huge page. Used by the status
+     * screen's scan-fallback bar; a thin wrapper over {@link #readProcInfo}.
+     */
+    @NonNull
+    List<long[]> scanThpPages(@NonNull Collection<Integer> pids) {
+        var result = new ArrayList<long[]>();
+        var procInfo = readProcInfo(pids);
+        for (var pid : pids) {
+            var info = procInfo.get(pid);
+            if (info == null || info.thpKb <= 0) continue;
+            long pages = info.thpKb / KB_PER_PAGE;
+            if (pages > 0) result.add(new long[]{pid, pages});
+        }
+        return result;
+    }
+
+    /* ================================================================== */
+    /*  Pool stats                                                        */
+    /* ================================================================== */
+
+    private volatile long poolTargetCache = -1;
+    private volatile long poolTargetAtMs = Long.MIN_VALUE;
+
+    /**
+     * v6 grow target from the read-only {@code pool_target} param, cached with a
+     * short TTL (it is static until the module is reloaded / the app restarts).
+     * Returns -1 if unavailable. This is what stops the v6 refresh loop from
+     * re-{@code cat}-ing the same static file every tick.
+     */
+    private long poolTarget() {
+        long now = SystemClock.elapsedRealtime();
+        if (poolTargetAtMs != Long.MIN_VALUE && now - poolTargetAtMs < CAPS_TTL_MS) {
+            return poolTargetCache;
+        }
+        long v = -1;
+        try {
+            var t = shellReadFile(pathJoin(SYSFS_PARAMS, "pool_target")).trim();
+            if (!t.isEmpty()) v = Long.parseLong(t);
+        } catch (Exception ignored) {
+        }
+        poolTargetCache = v;
+        poolTargetAtMs = now;
+        return v;
+    }
+
+    /**
+     * Read the pool counters from {@code refill_stat}.
+     * Returns {@code {total, avail, want, acquiring, served}} in pages, or
+     * {@code null} if the module isn't loaded / stats are unreadable. {@code want}
+     * falls back to v6's cached {@code pool_target}, then to capacity.
+     */
+    @Nullable
+    long[] readPoolPages() {
+        try {
+            if (!shellCheckExists(SYSFS_BASE)) return null;
+            var raw = shellReadFile(pathJoin(SYSFS_PARAMS, "refill_stat"));
+            long total = -1, avail = 0, want = -1, acquiring = 0, served = 0;
+            for (var line : raw.split("\n")) {
+                line = line.trim();
+                if (line.startsWith("pool_total=")) {
+                    total = Long.parseLong(line.substring(11).trim());
+                } else if (line.startsWith("pool_avail=")) {
+                    avail = Long.parseLong(line.substring(11).trim());
+                } else if (line.startsWith("pool_want=")) {
+                    want = Long.parseLong(line.substring(10).trim());
+                } else if (line.startsWith("acquire_active=")) {
+                    acquiring = Long.parseLong(line.substring(15).trim());
+                } else if (line.startsWith("served=")) {
+                    served = Long.parseLong(line.substring(7).trim());
+                }
+            }
+            if (total < 0) return null;
+            if (want < 0) want = poolTarget();   // v6: separate read-only knob
+            if (want < 0) want = total;
+            return new long[]{total, avail, want, acquiring, served};
+        } catch (Exception e) {
+            return null;
+        }
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/hugepage/HugePageProcessActivity.java b/app/src/main/java/cn/classfun/droidvm/ui/hugepage/HugePageProcessActivity.java
index b23b37752..1f1bc9e00 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/hugepage/HugePageProcessActivity.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/hugepage/HugePageProcessActivity.java
@@ -4,7 +4,6 @@
 import static android.view.View.VISIBLE;
 import static android.widget.Toast.LENGTH_LONG;
 import static android.widget.Toast.LENGTH_SHORT;
-import static cn.classfun.droidvm.lib.utils.FileUtils.shellCheckExists;
 import static cn.classfun.droidvm.lib.utils.FileUtils.shellReadFile;
 import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
 import static cn.classfun.droidvm.lib.utils.ProcessUtils.SIGKILL;
@@ -35,15 +34,11 @@
 import com.google.android.material.dialog.MaterialAlertDialogBuilder;
 
 import java.util.ArrayList;
-import java.util.Collection;
 import java.util.HashMap;
 import java.util.List;
 import java.util.Map;
-import java.util.concurrent.CountDownLatch;
-import java.util.concurrent.TimeUnit;
 
 import cn.classfun.droidvm.R;
-import cn.classfun.droidvm.lib.daemon.DaemonConnection;
 import cn.classfun.droidvm.lib.size.SizeUtils;
 
 /**
@@ -65,14 +60,19 @@ public final class HugePageProcessActivity extends AppCompatActivity
     private static final long HUGE_PAGE_BYTES = 2L * 1024 * 1024;
 
     private final Handler handler = new Handler(Looper.getMainLooper());
+    private final HugePageModel model = new HugePageModel();
     private boolean resumed = false;
+    // scanMode = the user's preference; koPresent = whether the KO attribution
+    // API is available. The effective mode shown is (scanMode || !koPresent) -
+    // forced to scan whenever KO is absent - computed on demand so a menu tap is
+    // reflected immediately instead of after the next background refresh.
     private boolean scanMode = false;
+    private volatile boolean koPresent = true;
+    // Edge-trigger the "KO unavailable" toast on the present->absent transition
+    // only, so a stably-unavailable module doesn't re-toast every refresh.
+    private boolean koWasPresent = true;
     private boolean firstRefresh = true;
     private volatile boolean acquireWatching = false;
-    // The KO-vs-THP fallback is resolved at most once (on entry). After that,
-    // and after any manual menu choice, we never auto-switch again - otherwise a
-    // single flaky root `test -e` under load would permanently bounce KO->THP.
-    private volatile boolean modeResolved = false;
     private MaterialToolbar toolbar;
     private RecyclerView recyclerView;
     private TextView tvEmpty;
@@ -139,38 +139,28 @@ private void updateModeChecked() {
         var menu = toolbar.getMenu();
         var ko = menu.findItem(R.id.menu_mode_ko);
         var scan = menu.findItem(R.id.menu_mode_scan);
-        if (ko != null) ko.setIcon(modeIcon(!scanMode));
-        if (scan != null) scan.setIcon(modeIcon(scanMode));
+        // Effective mode is derived from the user's choice + KO availability, so a
+        // just-tapped mode is reflected instantly (not after the next refresh);
+        // the KO entry is disabled outright when its attribution API is absent.
+        boolean effectiveScan = scanMode || !koPresent;
+        if (ko != null) {
+            ko.setIcon(modeIcon(!effectiveScan));
+            ko.setEnabled(koPresent);
+        }
+        if (scan != null) scan.setIcon(modeIcon(effectiveScan));
     }
 
     private static int modeIcon(boolean active) {
         return active ? R.drawable.ic_circle_filled : R.drawable.ic_circle_outline;
     }
 
-    /** User picked a mode from the menu (session-only; entry always defaults KO). */
+    /** User picked a mode from the menu (session-only preference). */
     private void setMode(boolean scan) {
         scanMode = scan;
-        modeResolved = true;   // explicit choice: never auto-switch again
         updateModeChecked();
         refresh();
     }
 
-    /**
-     * KO was selected but its attribution API is absent (module not loaded, or
-     * an old .ko). Switch the effective mode to scan for this session without
-     * overwriting any saved preference, and tell the user why. A present-but-
-     * empty pool (no VM) never reaches here - that stays in KO.
-     */
-    private void fallbackToScan() {
-        if (!scanMode) {
-            scanMode = true;
-            updateModeChecked();
-            Toast.makeText(this, R.string.hugepage_proc_ko_unavailable,
-                LENGTH_SHORT).show();
-        }
-    }
-
-
     @Override
     protected void onResume() {
         super.onResume();
@@ -205,22 +195,13 @@ private void refresh() {
         }
         runOnPool(() -> {
             boolean dark = HugePageColor.isDark(this);
-            boolean useScan = scanMode;
-            boolean autoSwitched = false;
-            // ONE-SHOT: only on the first resolve do we consider falling back to
-            // scan when the KO attribution API is absent (module not loaded, or
-            // an old .ko without served_summary). After that we never re-probe,
-            // so a transient root `test -e` failure can't flip a working KO view
-            // to THP. A present-but-empty pool (no VM) stays in KO ("no VM").
-            if (!modeResolved) {
-                if (!useScan && !koApiPresent() && !koApiPresent()) {
-                    // Probed twice (a single root `test -e` can flake under load);
-                    // only fall back to scan if the KO API is really absent.
-                    useScan = true;
-                    autoSwitched = true;
-                }
-                modeResolved = true;
-            }
+            // KO attribution availability comes from the cached capability probe
+            // (re-probed at most every few seconds, with a retry on a negative),
+            // so a single flaky root `test -e` can't flap the whole view between
+            // KO and scan every tick. Absent -> force scan, disable the KO entry.
+            // A present-but-empty pool (no VM) keeps KO available ("no VM").
+            boolean koNow = model.caps(false).koAttribution;
+            boolean useScan = scanMode || !koNow;
 
             List<HugePageProcess> list = new ArrayList<>();
             String emptyText;
@@ -275,7 +256,7 @@ private void refresh() {
             long tracedKb = 0;
             for (var r : list) if (r.thpKb > 0) tracedKb += r.thpKb;
             long holdKb, wantKb;
-            var pool = readPoolPages();
+            var pool = model.readPoolPages();
             boolean kernelAcquiring = pool != null && pool.length >= 4 && pool[3] != 0;
             if (pool != null) {
                 holdKb = pool[1] * 2048;   // avail
@@ -293,13 +274,20 @@ private void refresh() {
 
             var finalList = list;
             var finalEmpty = emptyText;
-            var finalAuto = autoSwitched;
+            var fKoNow = koNow;
             var fTraced = tracedKb;
             var fHold = holdKb;
             var fWant = wantKb;
             var fAcquiring = kernelAcquiring;
             runOnUiThread(() -> {
-                if (finalAuto) fallbackToScan();
+                koPresent = fKoNow;
+                // Toast only on the present->absent edge while the user wants KO,
+                // so a stably-unavailable module doesn't re-toast every refresh.
+                if (koWasPresent && !fKoNow && !scanMode) {
+                    Toast.makeText(this, R.string.hugepage_proc_ko_unavailable,
+                        LENGTH_SHORT).show();
+                }
+                koWasPresent = fKoNow;
                 // Re-sync the menu radio every refresh. Doing it once in onCreate
                 // (right after inflateMenu, before the menu is laid out) doesn't
                 // stick, leaving the radio showing the wrong mode.
@@ -310,65 +298,6 @@ private void refresh() {
         });
     }
 
-    /** True if the loaded module exposes the KO attribution API (v7+). */
-    private boolean koApiPresent() {
-        return shellCheckExists(SYSFS_BASE)
-            && shellCheckExists(pathJoin(SYSFS_PARAMS, "served_summary"));
-    }
-
-    @Nullable
-    private long[] readPoolPages() {
-        try {
-            if (!shellCheckExists(SYSFS_BASE)) return null;
-            var raw = shellReadFile(pathJoin(SYSFS_PARAMS, "refill_stat"));
-            long total = -1, avail = 0, want = -1, acquiring = 0, served = 0;
-            for (var line : raw.split("\n")) {
-                line = line.trim();
-                if (line.startsWith("pool_total=")) {
-                    total = Long.parseLong(line.substring(11).trim());
-                } else if (line.startsWith("pool_avail=")) {
-                    avail = Long.parseLong(line.substring(11).trim());
-                } else if (line.startsWith("pool_want=")) {
-                    want = Long.parseLong(line.substring(10).trim());
-                } else if (line.startsWith("acquire_active=")) {
-                    acquiring = Long.parseLong(line.substring(15).trim());
-                } else if (line.startsWith("served=")) {
-                    served = Long.parseLong(line.substring(7).trim());
-                }
-            }
-            if (total < 0) return null;
-            // Old modules have no pool_want -> treat want == capacity.
-            if (want < 0) want = total;
-            return new long[]{total, avail, want, acquiring, served};
-        } catch (Exception e) {
-            return null;
-        }
-    }
-
-    /**
-     * Batch-read live /proc state (R/S/D + liveness) and THP occupancy
-     * (AnonHugePages + ShmemPmdMapped) for the given pids in a single root call.
-     * Shared by KO attribution (buildFromOwners) and THP scan (scanProc).
-     */
-    @NonNull
-    private Map<Integer, ProcInfo> readProcInfo(@NonNull Collection<Integer> pids) {
-        if (pids.isEmpty()) return new HashMap<>();
-        var pidList = new StringBuilder();
-        for (var pid : pids) {
-            if (pidList.length() > 0) pidList.append(' ');
-            pidList.append(pid);
-        }
-        var procRaw = run(
-            "for p in %s; do echo \"@@@ $p\"; " +
-                "grep -E '^State:' /proc/$p/status 2>/dev/null; " +
-                "grep -E '^AnonHugePages:|^ShmemPmdMapped:' " +
-                "/proc/$p/smaps_rollup 2>/dev/null; " +
-                "done",
-            pidList.toString()
-        ).getOutString();
-        return parseProcInfo(procRaw);
-    }
-
     @NonNull
     private List<HugePageProcess> buildFromOwners(
         @NonNull List<Owner> owners, boolean dark,
@@ -376,10 +305,10 @@ private List<HugePageProcess> buildFromOwners(
     ) {
         var pids = new ArrayList<Integer>();
         for (var o : owners) pids.add(o.pid);
-        var procInfo = readProcInfo(pids);
+        var procInfo = model.readProcInfo(pids);
 
         // Best-effort map pid -> VM name (only running VMs have a live pid).
-        var vmMap = fetchVmMap();
+        var vmMap = model.vmNames(false);
 
         var result = new ArrayList<HugePageProcess>();
         for (var o : owners) {
@@ -409,10 +338,10 @@ private List<HugePageProcess> buildFromOwners(
     @NonNull
     private List<HugePageProcess> scanProc(boolean dark) {
         // Running VMs (pid -> name) come from the daemon.
-        var vmMap = fetchVmMap();
+        var vmMap = model.vmNames(false);
         if (vmMap.isEmpty()) return new ArrayList<>();
 
-        var procInfo = readProcInfo(vmMap.keySet());
+        var procInfo = model.readProcInfo(vmMap.keySet());
 
         var result = new ArrayList<HugePageProcess>();
         for (var e : vmMap.entrySet()) {
@@ -441,18 +370,6 @@ private static final class Owner {
         }
     }
 
-    private static final class ProcInfo {
-        final char state;
-        final long thpKb;
-        final boolean alive;
-
-        ProcInfo(char state, long thpKb, boolean alive) {
-            this.state = state;
-            this.thpKb = thpKb;
-            this.alive = alive;
-        }
-    }
-
     @NonNull
     private List<Owner> parseOwners(@NonNull String raw) {
         var list = new ArrayList<Owner>();
@@ -483,75 +400,6 @@ private List<Owner> parseOwners(@NonNull String raw) {
         return list;
     }
 
-    @NonNull
-    private Map<Integer, ProcInfo> parseProcInfo(@NonNull String raw) {
-        var map = new HashMap<Integer, ProcInfo>();
-        int curPid = -1;
-        char state = '?';
-        long thp = -1; // -1 = unknown; becomes sum of Anon + Shmem THP
-        boolean alive = false;
-        for (var line : raw.split("\n")) {
-            if (line.startsWith("@@@ ")) {
-                if (curPid > 0)
-                    map.put(curPid, new ProcInfo(state, thp, alive));
-                try {
-                    curPid = Integer.parseInt(line.substring(4).trim());
-                } catch (NumberFormatException e) {
-                    curPid = -1;
-                }
-                state = '?';
-                thp = -1;
-                alive = false;
-            } else if (line.startsWith("State:")) {
-                var v = line.substring(6).trim();
-                if (!v.isEmpty()) state = v.charAt(0);
-                alive = true; // status readable -> process exists
-            } else if (line.startsWith("AnonHugePages:")
-                || line.startsWith("ShmemPmdMapped:")) {
-                var digits = line.replaceAll("[^0-9]", "");
-                if (!digits.isEmpty()) {
-                    try {
-                        thp = (thp < 0 ? 0 : thp) + Long.parseLong(digits);
-                    } catch (NumberFormatException ignored) {
-                    }
-                }
-            }
-        }
-        if (curPid > 0) map.put(curPid, new ProcInfo(state, thp, alive));
-        return map;
-    }
-
-    @NonNull
-    private Map<Integer, String> fetchVmMap() {
-        var map = new HashMap<Integer, String>();
-        var latch = new CountDownLatch(1);
-        DaemonConnection.getInstance().buildRequest("vm_list")
-            .onResponse(resp -> {
-                try {
-                    var arr = resp.optJSONArray("data");
-                    if (arr != null) {
-                        for (int i = 0; i < arr.length(); i++) {
-                            var obj = arr.optJSONObject(i);
-                            if (obj == null) continue;
-                            int pid = obj.optInt("pid", -1);
-                            var name = obj.optString("name", null);
-                            if (pid > 0 && name != null) map.put(pid, name);
-                        }
-                    }
-                } finally {
-                    latch.countDown();
-                }
-            })
-            .onError(e -> latch.countDown())
-            .invoke();
-        try {
-            //noinspection ResultOfMethodCallIgnored
-            latch.await(2, TimeUnit.SECONDS);
-        } catch (InterruptedException ignored) {
-        }
-        return map;
-    }
-
     private void showResult(
         @NonNull List<HugePageProcess> list, long usedKb, long availKb,
         long wantKb, @NonNull String emptyText
@@ -560,19 +408,28 @@ private void showResult(
         firstRefresh = false;
         adapter.submit(list);
 
-        // Segmented bar: one colored segment per row, including the
-        // "waiting for acquire" (deficit) row. Track = available; total = want.
-        int n = list.size();
-        int[] colors = new int[n];
-        float[] values = new float[n];
-        long seg = 0;
-        for (int i = 0; i < n; i++) {
-            colors[i] = list.get(i).color;
-            values[i] = Math.max(0, list.get(i).thpKb);
-            seg += values[i];
+        // Segmented bar (shared builder): VM segments (used), then the available
+        // portion as a track-coloured gap, then the "waiting for acquire" deficit
+        // pinned flush right. This screen's bar is a plain unlabelled meter.
+        int used = 0;
+        for (var p : list) if (!p.acquire) used++;
+        int[] usedColors = new int[used];
+        float[] usedValues = new float[used];
+        int deficitColor = HugePageColor.pending(this);
+        long deficit = 0;
+        int u = 0;
+        for (var p : list) {
+            if (p.acquire) {                       // deficit rows: colour + value
+                deficitColor = p.color;
+                deficit += Math.max(0, p.thpKb);
+            } else {                               // used: one segment per VM
+                usedColors[u] = p.color;
+                usedValues[u] = Math.max(0, p.thpKb);
+                u++;
+            }
         }
-        float total = Math.max(wantKb, seg + Math.max(0, availKb));
-        segBar.setData(colors, values, total);
+        segBar.setStorage(usedColors, usedValues, null,
+            availKb, null, deficitColor, deficit, null, wantKb);
 
         // 2x2 caption: used / available on top, total / pool-size below.
         // Total = the real held reserve (used + avail = owned + traced), shown
@@ -644,11 +501,13 @@ public void onAcquire() {
         // blocked. The kernel 'acquire' write returns immediately; the worker
         // migrates in the background and we watch acquire_active for completion.
         new Thread(() -> {
+            var caps = model.caps(false);
+            boolean v7 = caps.hasAcquire;
             boolean triggered = false;
             try {
-                if (shellCheckExists(pathJoin(SYSFS_PARAMS, "acquire"))) {
+                if (v7) {
                     triggered = run("echo 1 > %s/acquire", SYSFS_PARAMS).isSuccess();
-                } else if (shellCheckExists(pathJoin(SYSFS_PARAMS, "manual_refill"))) {
+                } else if (caps.hasManualRefill) {
                     triggered = run("echo 1 > %s/manual_refill", SYSFS_PARAMS).isSuccess();
                 }
             } catch (Exception e) {
@@ -660,12 +519,24 @@ public void onAcquire() {
                     R.string.hugepage_refill_failed, LENGTH_SHORT).show());
                 return;
             }
-            // Poll until the worker clears acquire_active. Each tick nudges the
-            // UI to re-read refill_stat so the count visibly climbs.
+            if (!v7) {
+                // v6 (manual_refill): an async refill with no acquire_active to
+                // poll and no served=/pool_want to report a precise got/want.
+                // Just trigger it and let the periodic refresh animate the bar.
+                acquireWatching = false;
+                runOnUiThread(() -> {
+                    Toast.makeText(this, R.string.hugepage_proc_acquire_done,
+                        LENGTH_SHORT).show();
+                    refresh();
+                });
+                return;
+            }
+            // v7: poll until the worker clears acquire_active. Each tick nudges
+            // the UI to re-read refill_stat so the count visibly climbs.
             long[] pages = null;
             for (int i = 0; i < ACQUIRE_POLL_MAX; i++) {
                 try { Thread.sleep(ACQUIRE_POLL_MS); } catch (InterruptedException ignored) {}
-                pages = readPoolPages();      // {total, avail, want, acquiring, served}
+                pages = model.readPoolPages();  // {total, avail, want, acquiring, served}
                 runOnUiThread(this::refresh); // animate climbing numbers
                 if (pages == null || pages.length < 5 || pages[3] == 0) break;
             }
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/hugepage/SegmentedBar.java b/app/src/main/java/cn/classfun/droidvm/ui/hugepage/SegmentedBar.java
index 51d866ba3..a5c864ffd 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/hugepage/SegmentedBar.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/hugepage/SegmentedBar.java
@@ -2,10 +2,12 @@
 
 import android.content.Context;
 import android.graphics.Canvas;
+import android.graphics.Color;
 import android.graphics.Paint;
 import android.graphics.Path;
 import android.graphics.RectF;
 import android.util.AttributeSet;
+import android.util.TypedValue;
 import android.view.View;
 
 import androidx.annotation.NonNull;
@@ -19,16 +21,37 @@
  * track for the remaining/available portion. Widths are proportional; the caller
  * passes a {@code total} that is always &gt;= the sum of segment values, so the
  * segments can never overflow the bar (no crash on over-accounting).
+ *
+ * <p>An optional {@code labels} array enables an Apple-storage-bar style: each
+ * segment wide enough to fit its label draws it inside the colored block, with
+ * the text colour chosen automatically for contrast. When {@code labels} is null
+ * the bar stays a plain thin meter.
  */
 public final class SegmentedBar extends View {
     private int[] colors = new int[0];
     private float[] values = new float[0];
+    @Nullable
+    private String[] labels = null;
+    // Per-segment label data pre-split, pre-measured and pre-coloured in setData,
+    // so onDraw (a hot path) allocates and measures nothing. labelTop[i] == null
+    // means "no label for this segment".
+    @Nullable
+    private String[] labelTop;
+    @Nullable
+    private String[] labelBottom;
+    private float[] labelTopW = new float[0];
+    private float[] labelBotW = new float[0];
+    private int[] labelTextColor = new int[0];
     private float total = 0f;
-    private int trackColor;
+    private final int trackColor;
+    private final boolean darkTheme;
     private final Paint paint = new Paint(Paint.ANTI_ALIAS_FLAG);
+    private final Paint textPaint = new Paint(Paint.ANTI_ALIAS_FLAG);
+    private final Paint subTextPaint = new Paint(Paint.ANTI_ALIAS_FLAG);
     private final RectF rect = new RectF();
     private final Path clip = new Path();
-    private final float radius;
+    private final float density;
+    private final float labelPad;
 
     public SegmentedBar(Context context) {
         this(context, null);
@@ -36,17 +59,104 @@ public SegmentedBar(Context context) {
 
     public SegmentedBar(Context context, @Nullable AttributeSet attrs) {
         super(context, attrs);
-        radius = 3f * getResources().getDisplayMetrics().density;
+        density = getResources().getDisplayMetrics().density;
+        labelPad = 6f * density;
         trackColor = ContextCompat.getColor(context, R.color.hugepage_bar_track);
+        darkTheme = HugePageColor.isDark(context);
+        var dm = getResources().getDisplayMetrics();
+        textPaint.setTextSize(TypedValue.applyDimension(
+            TypedValue.COMPLEX_UNIT_SP, 11f, dm));    // label line
+        subTextPaint.setTextSize(TypedValue.applyDimension(
+            TypedValue.COMPLEX_UNIT_SP, 10f, dm));    // capacity line
     }
 
+    /** Plain thin meter: segments only, no in-bar labels. */
     public void setData(@NonNull int[] colors, @NonNull float[] values, float total) {
+        setData(colors, values, null, total);
+    }
+
+    /** Apple-style: each wide-enough segment draws {@code labels[i]} inside it. */
+    public void setData(@NonNull int[] colors, @NonNull float[] values,
+                        @Nullable String[] labels, float total) {
         this.colors = colors;
         this.values = values;
+        this.labels = labels;
         this.total = total;
+        prepareLabels();
         invalidate();
     }
 
+    /** Pre-split, pre-measure and pre-colour labels so onDraw does none of it. */
+    private void prepareLabels() {
+        if (labels == null) {
+            labelTop = null;
+            labelBottom = null;
+            return;
+        }
+        int m = labels.length;
+        labelTop = new String[m];
+        labelBottom = new String[m];
+        labelTopW = new float[m];
+        labelBotW = new float[m];
+        labelTextColor = new int[m];
+        for (int i = 0; i < m; i++) {
+            var label = labels[i];
+            if (label == null || label.isEmpty()) {
+                labelTop[i] = null;         // no label for this segment
+                continue;
+            }
+            int nl = label.indexOf('\n');   // "top\nbottom"; no split() regex
+            labelTop[i] = nl < 0 ? label : label.substring(0, nl);
+            labelBottom[i] = nl < 0 ? null : label.substring(nl + 1);
+            labelTopW[i] = textPaint.measureText(labelTop[i]);
+            labelBotW[i] = labelBottom[i] != null
+                ? subTextPaint.measureText(labelBottom[i]) : 0f;
+            labelTextColor[i] = i < colors.length
+                ? textColorFor(colors[i]) : 0xFFFFFFFF;
+        }
+    }
+
+    /**
+     * Assemble and set a storage-style bar shared by both hugepage screens:
+     * the {@code used} segments, then the available portion as a track-coloured
+     * gap, then the deficit ("waiting for acquire") pinned flush against the
+     * right edge. {@code total = max(want, sum(used) + avail)}, so the deficit
+     * ends exactly at the bar's right edge. Pass {@code usedLabels != null} for
+     * the labelled (status-screen) bar or {@code null} for the plain meter.
+     *
+     * @param usedColors one colour per used segment
+     * @param usedValues one value per used segment (same length as usedColors)
+     * @param usedLabels per-segment labels, or {@code null} for no labels
+     */
+    public void setStorage(
+        @NonNull int[] usedColors, @NonNull float[] usedValues,
+        @Nullable String[] usedLabels,
+        float avail, @Nullable String availLabel,
+        int deficitColor, float deficit, @Nullable String deficitLabel,
+        float want
+    ) {
+        int n = usedValues.length;
+        boolean withLabels = usedLabels != null;
+        int[] c = new int[n + 2];
+        float[] v = new float[n + 2];
+        String[] l = withLabels ? new String[n + 2] : null;
+        float seg = 0;
+        for (int i = 0; i < n; i++) {
+            c[i] = usedColors[i];
+            v[i] = Math.max(0, usedValues[i]);
+            if (withLabels) l[i] = usedLabels[i];
+            seg += v[i];
+        }
+        float a = Math.max(0, avail);
+        c[n] = trackColor;                       // available gap
+        v[n] = a;
+        if (withLabels) l[n] = availLabel;
+        c[n + 1] = deficitColor;                 // deficit, flush right
+        v[n + 1] = Math.max(0, deficit);
+        if (withLabels) l[n + 1] = deficitLabel;
+        setData(c, v, l, Math.max(want, seg + a));
+    }
+
     @Override
     protected void onDraw(@NonNull Canvas canvas) {
         super.onDraw(canvas);
@@ -54,6 +164,7 @@ protected void onDraw(@NonNull Canvas canvas) {
         float h = getHeight();
         if (w <= 0 || h <= 0) return;
 
+        float radius = Math.min(6f * density, h / 3f);
         rect.set(0, 0, w, h);
         clip.reset();
         clip.addRoundRect(rect, radius, radius, Path.Direction.CW);
@@ -69,9 +180,60 @@ protected void onDraw(@NonNull Canvas canvas) {
         for (int i = 0; i < n; i++) {
             float segW = w * (values[i] / total);
             if (segW <= 0f) continue;
+            float segRight = Math.min(x + segW, w);
             paint.setColor(colors[i]);
-            canvas.drawRect(x, 0, Math.min(x + segW, w), h, paint);
+            canvas.drawRect(x, 0, segRight, h, paint);
+            drawLabel(canvas, i, x, segRight, h);
             x += segW;
         }
     }
+
+    /**
+     * Draw the block label as two stacked, centred lines: {@code "top\nbottom"}
+     * (label over capacity). A label with no newline draws as a single line.
+     * The whole label is omitted if the widest line would not fit the block.
+     */
+    private void drawLabel(@NonNull Canvas canvas, int i, float left, float right, float h) {
+        if (labelTop == null || i >= labelTop.length) return;
+        String top = labelTop[i];
+        if (top == null) return;                    // no / empty label
+        String bottom = labelBottom[i];
+
+        float segW = right - left;
+        float topW = labelTopW[i];
+        float botW = labelBotW[i];
+        if (segW < Math.max(topW, botW) + 2f * labelPad) return;   // omit if it won't fit
+
+        int color = labelTextColor[i];
+        textPaint.setColor(color);
+        float topH = textPaint.descent() - textPaint.ascent();
+        if (bottom == null) {
+            float ty = h / 2f - (textPaint.descent() + textPaint.ascent()) / 2f;
+            canvas.drawText(top, left + (segW - topW) / 2f, ty, textPaint);
+            return;
+        }
+        subTextPaint.setColor(color);
+        float gap = 1f * density;
+        float botH = subTextPaint.descent() - subTextPaint.ascent();
+        float startY = (h - (topH + gap + botH)) / 2f;
+        float topBaseline = startY - textPaint.ascent();
+        float botBaseline = startY + topH + gap - subTextPaint.ascent();
+        canvas.drawText(top, left + (segW - topW) / 2f, topBaseline, textPaint);
+        canvas.drawText(bottom, left + (segW - botW) / 2f, botBaseline, subTextPaint);
+    }
+
+    /**
+     * Pick black or white text for readability over a (possibly translucent)
+     * segment colour by compositing it over the theme surface and comparing
+     * perceived luminance.
+     */
+    private int textColorFor(int segColor) {
+        int a = Color.alpha(segColor);
+        int bg = darkTheme ? 0xFF1C1B1F : 0xFFFFFFFF;
+        int r = (Color.red(segColor) * a + Color.red(bg) * (255 - a)) / 255;
+        int g = (Color.green(segColor) * a + Color.green(bg) * (255 - a)) / 255;
+        int b = (Color.blue(segColor) * a + Color.blue(bg) * (255 - a)) / 255;
+        double lum = (0.299 * r + 0.587 * g + 0.114 * b) / 255.0;
+        return lum > 0.6 ? 0xDE000000 : 0xFFFFFFFF;
+    }
 }
diff --git a/app/src/main/res/layout/activity_hugepage.xml b/app/src/main/res/layout/activity_hugepage.xml
index 8c3c9f8a4..7f2510171 100644
--- a/app/src/main/res/layout/activity_hugepage.xml
+++ b/app/src/main/res/layout/activity_hugepage.xml
@@ -193,7 +193,7 @@
                 <cn.classfun.droidvm.ui.hugepage.SegmentedBar
                     android:id="@+id/seg_pool_bar"
                     android:layout_width="match_parent"
-                    android:layout_height="10dp"
+                    android:layout_height="40dp"
                     android:layout_margin="12dp" />
 
                 <LinearLayout
diff --git a/app/src/main/res/values-zh-rCN/strings.xml b/app/src/main/res/values-zh-rCN/strings.xml
index d9251fda3..0fed84dc5 100644
--- a/app/src/main/res/values-zh-rCN/strings.xml
+++ b/app/src/main/res/values-zh-rCN/strings.xml
@@ -961,7 +961,7 @@
     <string name="hugepage_loaded">模块已加载</string>
     <string name="hugepage_pool_below_vms">池大小不可小于运行中 VM 的内存总和（%1$s）</string>
     <string name="hugepage_pool_shrink_busy">获取中，无法缩小，请等待获取完成</string>
-    <string name="hugepage_pool_size_applied">池大小已保存并应用（增大需点获取）</string>
+    <string name="hugepage_pool_size_applied">池大小已保存并应用</string>
     <string name="hugepage_proc_acquire">获取</string>
     <string name="hugepage_proc_acquire_done">获取完成</string>
     <string name="hugepage_proc_acquire_stop">停止获取</string>
@@ -971,6 +971,8 @@
     <string name="hugepage_proc_acquire_userspace">模块不足,尝试 userspace 协助…</string>
     <string name="hugepage_proc_anon">占用:%1$d 页 (%2$s)</string>
     <string name="hugepage_proc_deficit">等待获取</string>
+    <string name="hugepage_proc_pid">pid %1$d</string>
+    <string name="hugepage_bar_available">可用</string>
     <string name="hugepage_proc_empty">目前没有线程占用保留的 hugepage 池。</string>
     <string name="hugepage_proc_kill">终止</string>
     <string name="hugepage_proc_kill_failed">发送信号失败</string>
diff --git a/app/src/main/res/values-zh-rTW/strings.xml b/app/src/main/res/values-zh-rTW/strings.xml
index 04983f8ad..ca90d6224 100644
--- a/app/src/main/res/values-zh-rTW/strings.xml
+++ b/app/src/main/res/values-zh-rTW/strings.xml
@@ -929,7 +929,7 @@
     <string name="hugepage_refill_failed">觸發獲取失敗</string>
     <string name="hugepage_pool_size">池大小</string>
     <string name="hugepage_pool_size_saved">池大小已儲存（重啟後生效）</string>
-    <string name="hugepage_pool_size_applied">池大小已儲存並套用（放大需按獲取）</string>
+    <string name="hugepage_pool_size_applied">池大小已儲存並套用</string>
     <string name="hugepage_pool_shrink_busy">獲取中，無法縮小，請待獲取完成</string>
     <string name="hugepage_pool_below_vms">池大小不可小於執行中 VM 的記憶體總和（%1$s）</string>
     <string name="hugepage_pool_size_failed">儲存池大小失敗</string>
@@ -955,6 +955,8 @@
     <string name="hugepage_proc_unknown">未歸屬</string>
     <string name="hugepage_proc_unknown_breakdown">未歸屬 — 已釋放 %1$d / 已挪用 %2$d 頁</string>
     <string name="hugepage_proc_deficit">等待獲取</string>
+    <string name="hugepage_proc_pid">pid %1$d</string>
+    <string name="hugepage_bar_available">可用</string>
     <string name="hugepage_proc_vm">虛擬機器:%1$s</string>
     <string name="hugepage_proc_no_vm">非追蹤中的虛擬機器</string>
     <string name="hugepage_proc_state">狀態:%1$c (%2$s)</string>
diff --git a/app/src/main/res/values/strings.xml b/app/src/main/res/values/strings.xml
index e43ba330b..7692a340f 100644
--- a/app/src/main/res/values/strings.xml
+++ b/app/src/main/res/values/strings.xml
@@ -970,7 +970,7 @@
     <string name="hugepage_proc_acquire_userspace">Module short; trying userspace assist…</string>
     <string name="hugepage_pool_size">Pool Size</string>
     <string name="hugepage_pool_size_saved">Pool size saved (effective after reboot)</string>
-    <string name="hugepage_pool_size_applied">Pool size saved &amp; applied (grow needs Acquire)</string>
+    <string name="hugepage_pool_size_applied">Pool size saved &amp; applied</string>
     <string name="hugepage_pool_shrink_busy">Acquiring — can\'t shrink now, wait for it to finish</string>
     <string name="hugepage_pool_below_vms">Pool can\'t be smaller than the running VMs\' total memory (%1$s)</string>
     <string name="hugepage_pool_size_failed">Failed to save pool size</string>
@@ -996,6 +996,8 @@
     <string name="hugepage_proc_unknown">Unattributed</string>
     <string name="hugepage_proc_unknown_breakdown">Unattributed — freed %1$d / reused %2$d pages</string>
     <string name="hugepage_proc_deficit">Waiting for acquire</string>
+    <string name="hugepage_proc_pid">pid %1$d</string>
+    <string name="hugepage_bar_available">Available</string>
     <string name="hugepage_proc_vm">VM: %1$s</string>
     <string name="hugepage_proc_no_vm">Not a tracked VM</string>
     <string name="hugepage_proc_state">State: %1$c (%2$s)</string>

From 9128ebe6107edeaa9bda9c1f1e3795641cbd6e26 Mon Sep 17 00:00:00 2001
From: HuJK <gh@hujk.org>
Date: Sun, 5 Jul 2026 10:22:43 +0800
Subject: [PATCH 080/182] hugepage: acquire-mode buttons (v1/v2/v3) with
 per-mode spinners

Expose the module's three acquire algorithms in the UI and reflect which one is
running.

- Buttons: v1/v2/v3 on the process-list "waiting for acquire" row and a new
  "Acquire huge pages" item on the main status screen (shared acquire_buttons.xml,
  same row style as the stat rows). Each writes acquire=1/2/3 via
  HugePageOps.acquire(int mode, ...).
- Per-mode spinner: read acquire_mode from refill_stat (readPoolPages index 5,
  -1 when the module can't report it). While a run is in flight only the running
  mode spins (tap = stop) and the other two grey out; an unknown mode (old module)
  falls back to spinning all three.
- Enable only on a real deficit: loaded && pool_want > 0 && avail+served < want.
  Disabled when not loaded, already at target, or soft-disabled (want=0).
- Gentler defaults: pool-size minimum lowered to 0 (ti_min=0MiB); soft-disable
  writes pool_want=0; Enable/Save auto-fill uses v1 (migrate only, no zram
  eviction, no reboot risk).

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01TaHcvnHaZk8qqpKiS25Hbk
---
 .../droidvm/ui/hugepage/HugePageActivity.java | 546 ++++++------
 .../droidvm/ui/hugepage/HugePageModel.java    | 807 ++++++++++++++----
 .../ui/hugepage/HugePageProcessActivity.java  | 265 ++----
 .../ui/hugepage/HugePageProcessAdapter.java   |  86 +-
 .../cn/classfun/droidvm/ui/hugepage/Try.java  |  48 ++
 app/src/main/res/layout/acquire_buttons.xml   | 197 +++++
 app/src/main/res/layout/activity_hugepage.xml |  33 +-
 .../main/res/layout/item_hugepage_process.xml |  32 +-
 app/src/main/res/values-zh-rCN/strings.xml    |  12 +
 app/src/main/res/values-zh-rTW/strings.xml    |  12 +
 app/src/main/res/values/strings.xml           |  12 +
 11 files changed, 1367 insertions(+), 683 deletions(-)
 create mode 100644 app/src/main/java/cn/classfun/droidvm/ui/hugepage/Try.java
 create mode 100644 app/src/main/res/layout/acquire_buttons.xml

diff --git a/app/src/main/java/cn/classfun/droidvm/ui/hugepage/HugePageActivity.java b/app/src/main/java/cn/classfun/droidvm/ui/hugepage/HugePageActivity.java
index d5a6dd7a2..a4d4be4cb 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/hugepage/HugePageActivity.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/hugepage/HugePageActivity.java
@@ -5,11 +5,11 @@
 import static android.widget.Toast.LENGTH_SHORT;
 import static cn.classfun.droidvm.lib.utils.FileUtils.shellCheckExists;
 import static cn.classfun.droidvm.lib.utils.FileUtils.shellReadFile;
-import static cn.classfun.droidvm.lib.utils.RunUtils.run;
 import static cn.classfun.droidvm.lib.utils.RunUtils.runList;
 import static cn.classfun.droidvm.lib.utils.StringUtils.pathJoin;
 import static cn.classfun.droidvm.lib.utils.ThreadUtils.runOnPool;
 
+import android.content.Context;
 import android.content.Intent;
 import android.content.res.ColorStateList;
 import android.graphics.Color;
@@ -51,10 +51,7 @@
 
 public final class HugePageActivity extends AppCompatActivity {
     private static final String TAG = "HugePageActivity";
-    private static final String SYSFS_BASE = "/sys/module/gh_hugepage_reserve";
-    private static final String SYSFS_PARAMS = pathJoin(SYSFS_BASE, "parameters");
     private static final String MAGISK_BASE = "/data/adb/modules/gh-hugepage-reserve";
-    private static final String MODULE_PROP = pathJoin(MAGISK_BASE, "module.prop");
     private static final String SETTINGS_PROP = pathJoin(MAGISK_BASE, "settings.prop");
     private static final String DISABLE_FILE = pathJoin(MAGISK_BASE, "disable");
     private static final String CRASH_FILE = pathJoin(MAGISK_BASE, "crash");
@@ -75,7 +72,22 @@ public final class HugePageActivity extends AppCompatActivity {
     private boolean moduleHasPoolWant = false;
     private boolean moduleSoftDisabled = false;
     private boolean moduleAcquiring = false;
+    // Drives the acquire-mode slots (v1/v2/v3): true while a run is in flight.
+    // Set optimistically on tap, then reconciled from acquire_active
+    // (readPoolPages()[3]) by the periodic status refresh.
+    private boolean mainAcquiring = false;
+    private int mainAcquireMode = -1;   // running v (1/2/3); -1 = unknown (old module)
+    private boolean wasAcquiring = false;   // last-seen acquire_active, for the "done" toast
+    // Acquire buttons usable only when the module is loaded and there is a deficit
+    // to fill (avail+served < want); disabled at target, unloaded, or soft-disabled.
+    private boolean acquireEnabled = false;
     private MaterialButton btnViewProcesses;
+    private View btnAcquireV1;
+    private View btnAcquireV2;
+    private View btnAcquireV3;
+    private View progressAcquireV1;
+    private View progressAcquireV2;
+    private View progressAcquireV3;
     private SegmentedBar segPoolBar;
     private TextView tvPoolUsed;
     private TextView tvPoolAvail;
@@ -105,6 +117,12 @@ protected void onCreate(@Nullable Bundle savedInstanceState) {
         saveTextColors = btnSavePoolSize.getTextColors();
         btnModuleToggle = findViewById(R.id.btn_module_toggle);
         btnViewProcesses = findViewById(R.id.btn_view_processes);
+        btnAcquireV1 = findViewById(R.id.btn_acquire_v1);
+        btnAcquireV2 = findViewById(R.id.btn_acquire_v2);
+        btnAcquireV3 = findViewById(R.id.btn_acquire_v3);
+        progressAcquireV1 = findViewById(R.id.progress_acquire_v1);
+        progressAcquireV2 = findViewById(R.id.progress_acquire_v2);
+        progressAcquireV3 = findViewById(R.id.progress_acquire_v3);
         segPoolBar = findViewById(R.id.seg_pool_bar);
         tvPoolUsed = findViewById(R.id.tv_pool_used);
         tvPoolAvail = findViewById(R.id.tv_pool_avail);
@@ -135,17 +153,122 @@ private void initialize() {
         //   loaded (v6, no knob) -> Disable (rmmod)
         btnModuleToggle.setOnClickListener(v -> {
             if (!moduleInstalled) openModulePage();
-            else if (!moduleLoaded) doLoad();
-            else if (moduleSoftDisabled) doSoftEnable();
-            else if (moduleHasPoolWant) doSoftDisable();
-            else confirmUnload();
+            else if (!moduleLoaded || moduleSoftDisabled) doEnable();
+            else if (moduleHasPoolWant) doDisable();   // v7: soft-disable (pool_want=0)
+            else confirmUnload();                       // v6: no soft knob -> confirm rmmod
         });
         btnViewProcesses.setOnClickListener(v -> startActivity(
             new Intent(this, HugePageProcessActivity.class)));
+        // Acquire-mode slots: each button starts its mode; each spinner (shown
+        // while a run is in flight) interrupts it. Listeners are static — the
+        // slots aren't recycled — and the idle/running visibility toggle is
+        // driven by applyAcquireState().
+        // Short-press runs it (gated to the pressable state); long-press opens the
+        // what-does-this-do dialog with a Run/Cancel choice (always available, even
+        // when the button is greyed - the buttons stay enabled for that).
+        btnAcquireV1.setOnClickListener(v -> { if (acquireEnabled && !mainAcquiring) startAcquire(1); });
+        btnAcquireV2.setOnClickListener(v -> { if (acquireEnabled && !mainAcquiring) startAcquire(2); });
+        btnAcquireV3.setOnClickListener(v -> { if (acquireEnabled && !mainAcquiring) startAcquire(3); });
+        btnAcquireV1.setOnLongClickListener(v -> { showAcquireInfo(this, 1, () -> startAcquire(1)); return true; });
+        btnAcquireV2.setOnLongClickListener(v -> { showAcquireInfo(this, 2, () -> startAcquire(2)); return true; });
+        btnAcquireV3.setOnLongClickListener(v -> { showAcquireInfo(this, 3, () -> startAcquire(3)); return true; });
+        View.OnClickListener stopAcquire = v -> stopMainAcquire();
+        progressAcquireV1.setOnClickListener(stopAcquire);
+        progressAcquireV2.setOnClickListener(stopAcquire);
+        progressAcquireV3.setOnClickListener(stopAcquire);
+        applyAcquireState();
         cardCrashWarning.setOnClickListener(v -> doDismissCrash());
         loadPoolSize();
     }
 
+    /**
+     * Reflect {@link #mainAcquiring}/{@link #mainAcquireMode} on the three slots:
+     *   idle                      -> all enabled buttons, no spinners;
+     *   running, mode unknown(-1) -> all three spin (module can't report the mode);
+     *   running, mode 1/2/3       -> that slot spins, the other two are disabled buttons.
+     * Click listeners are static (set in initialize); a disabled button ignores taps.
+     */
+    private void applyAcquireState() {
+        applyAcquireSlot(btnAcquireV1, progressAcquireV1, 1);
+        applyAcquireSlot(btnAcquireV2, progressAcquireV2, 2);
+        applyAcquireSlot(btnAcquireV3, progressAcquireV3, 3);
+    }
+
+    private void applyAcquireSlot(View btn, View spinner, int mode) {
+        boolean spin = mainAcquiring && (mainAcquireMode < 0 || mainAcquireMode == mode);
+        btn.setVisibility(spin ? GONE : VISIBLE);
+        // Left enabled so a long-press always opens the info dialog; the short-press
+        // is gated in its click handler, and the icon+badge greys via alpha when it
+        // can't run (a run in flight, or no deficit / not loaded).
+        btn.setAlpha((!mainAcquiring && acquireEnabled) ? 1f : 0.38f);
+        spinner.setVisibility(spin ? VISIBLE : GONE);
+    }
+
+    /** Long-press info: what the acquire mode does, with a Run/Cancel choice. */
+    static void showAcquireInfo(@NonNull Context ctx, int mode, @NonNull Runnable onRun) {
+        int modeLabel = mode == 2 ? R.string.hugepage_proc_acquire_v2
+            : mode == 3 ? R.string.hugepage_proc_acquire_v3
+            : R.string.hugepage_proc_acquire_v1;
+        int msg = mode == 2 ? R.string.hugepage_acquire_v2_explain
+            : mode == 3 ? R.string.hugepage_acquire_v3_explain
+            : R.string.hugepage_acquire_v1_explain;
+        // Title = "Acquire huge pages" + the mode badge, e.g. "獲取大頁 v1".
+        String title = ctx.getString(R.string.hugepage_acquire_pages_title)
+            + " " + ctx.getString(modeLabel);
+        new MaterialAlertDialogBuilder(ctx)
+            .setTitle(title)
+            .setMessage(msg)
+            .setPositiveButton(R.string.hugepage_acquire_run, (d, w) -> onRun.run())
+            .setNegativeButton(android.R.string.cancel, null)
+            .show();
+    }
+
+    /**
+     * Start filling the pool with acquire algorithm {@code mode} (see
+     * {@link HugePageModel#acquire}). Optimistically shows the spinners, fires the
+     * knob write on a dedicated thread (so the pool executor and its status poll
+     * stay free), and lets the periodic refresh reconcile the spinner from
+     * acquire_active. A failed trigger reverts immediately.
+     */
+    private void startAcquire(int mode) {
+        if (mainAcquiring) return;              // already running
+        Toast.makeText(this, R.string.hugepage_proc_acquire_running, LENGTH_SHORT).show();
+        mainAcquiring = true;
+        mainAcquireMode = mode;                 // we know which we just started
+        applyAcquireState();                    // immediate spinner feedback
+        new Thread(() -> {
+            var res = model.acquire(mode);
+            if (!res.ok()) {
+                mainAcquiring = false;
+                runOnUiThread(() -> {
+                    Toast.makeText(this, R.string.hugepage_refill_failed,
+                        LENGTH_SHORT).show();
+                    applyAcquireState();
+                });
+                return;
+            }
+            // Triggered: the periodic refresh reads acquire_active and keeps the
+            // spinner up until the worker clears it. This screen doesn't track
+            // completion, so if the mode degraded below what was asked, say so now.
+            final String actualImpl = res.impl != null ? res.impl : "";
+            final boolean degraded = res.degraded;
+            runOnUiThread(() -> {
+                if (degraded) Toast.makeText(this,
+                    getString(R.string.hugepage_acquire_degraded, actualImpl),
+                    Toast.LENGTH_LONG).show();
+                refreshStatus();
+            });
+        }, "hugepage-acquire").start();
+    }
+
+    /** Tapping an acquire spinner interrupts the run; the refresh clears the flag. */
+    private void stopMainAcquire() {
+        runOnPool(() -> {
+            model.stopAcquire();
+            runOnUiThread(this::refreshStatus);
+        });
+    }
+
     private void openModulePage() {
         var url = "https://github.com/Droid-VM/gh-hugepage-reserve/releases";
         var intent = new Intent(Intent.ACTION_VIEW, Uri.parse(url));
@@ -172,77 +295,26 @@ private void scheduleRefresh() {
     }
 
     private void refreshStatus() {
-        refreshStatus(false);
-    }
-
-    /**
-     * @param forceCaps re-probe module capabilities immediately (bypass the
-     *                  cache) - pass true right after loading/unloading so the UI
-     *                  reflects the new module state without the cache's lag.
-     */
-    private void refreshStatus(boolean forceCaps) {
         runOnPool(() -> {
-            var caps = model.caps(forceCaps);
-            var moduleInst = shellCheckExists(MODULE_PROP);
-            var moduleLoaded = caps.loaded;
-            var moduleDisabled = shellCheckExists(DISABLE_FILE);
+            // One version-unified read of module + pool state.
+            var snap = model.state();
             var crashStamp = shellCheckExists(CRASH_FILE);
-            var refillStat = "";
-            var servedSummary = "";
-            var koAttribution = false;
-            if (moduleLoaded) try {
-                refillStat = shellReadFile(pathJoin(SYSFS_PARAMS, "refill_stat"));
-                // Reconcile + read per-VM served pages so this screen's bar shows
-                // the exact same per-VM breakdown as the usage screen's bar.
-                if (caps.koAttribution) {
-                    run("echo 1 > %s/reconcile", SYSFS_PARAMS);
-                    servedSummary = shellReadFile(pathJoin(SYSFS_PARAMS, "served_summary"));
-                    koAttribution = true;
+            // Per-VM breakdown through the usage ladder (KO attribution, degrading
+            // to a THP scan of running VMs), so this bar matches the usage screen.
+            // Each segment is labelled with the friendly VM name from vmMap.
+            List<long[]> owners = new ArrayList<>();
+            if (snap.loaded) {
+                for (var e : model.usage(null).entries) {
+                    if (e.pages > 0) owners.add(new long[]{e.pid, e.pages});
                 }
-            } catch (Exception e) {
-                Log.w(TAG, "Failed to read parameters", e);
-            }
-            var stats = parseProp(refillStat);
-            // pid -> friendly VM name, so each used segment is labelled "w11"
-            // like the usage screen. Old modules without the KO attribution API
-            // (no served_summary) fall back to a system THP scan of running VMs,
-            // mirroring the usage screen's "scan" mode, instead of showing the
-            // unavailable per-VM module-attribution breakdown.
-            List<long[]> owners;
-            Map<Integer, String> vmMap;
-            if (koAttribution) {
-                owners = parseServedOwners(servedSummary);
-                vmMap = owners.isEmpty() ? new LinkedHashMap<>() : model.vmNames(false);
-            } else {
-                vmMap = moduleLoaded ? model.vmNames(false) : new LinkedHashMap<>();
-                owners = model.scanThpPages(vmMap.keySet());
             }
-            runOnUiThread(() -> updateUI(
-                moduleInst, moduleLoaded, moduleDisabled, crashStamp, stats, owners, vmMap
-            ));
+            // Only fetch VM names when there are rows to label.
+            Map<Integer, String> vmMap = owners.isEmpty()
+                ? new LinkedHashMap<>() : model.vmNames(false);
+            runOnUiThread(() -> updateUI(snap, crashStamp, owners, vmMap));
         });
     }
 
-    /** Parse served_summary "owner ... pid=N pages=M" lines into {pid, pages}. */
-    @NonNull
-    private List<long[]> parseServedOwners(@NonNull String raw) {
-        var owners = new ArrayList<long[]>();
-        for (var line : raw.split("\n")) {
-            line = line.trim();
-            if (!line.startsWith("owner ")) continue;
-            long pid = -1, pages = 0;
-            for (var tok : line.split("\\s+")) {
-                try {
-                    if (tok.startsWith("pid=")) pid = Long.parseLong(tok.substring(4));
-                    else if (tok.startsWith("pages=")) pages = Long.parseLong(tok.substring(6));
-                } catch (NumberFormatException ignored) {
-                }
-            }
-            if (pid > 0 && pages > 0) owners.add(new long[]{pid, pages});
-        }
-        return owners;
-    }
-
     @NonNull
     private Map<String, String> parseProp(@NonNull String raw) {
         var map = new LinkedHashMap<String, String>();
@@ -258,86 +330,67 @@ private void setPagesString(@NonNull TextView tv, @StringRes int str, long pages
         tv.setText(getString(str, pages, SizeUtils.formatSize(pages * PAGE_SIZE)));
     }
 
-    private long getPages(@NonNull Map<String, String> stats, @NonNull String key) {
-        var value = stats.get(key);
-        if (value == null) return 0;
-        return Long.parseLong(value);
-    }
-
     private void updateUI(
-        boolean installed, boolean loaded,
-        boolean disabled, boolean crashed,
-        @NonNull Map<String, String> stats,
+        @NonNull HugePageModel.Snapshot snap, boolean crashed,
         @NonNull List<long[]> owners,
         @NonNull Map<Integer, String> vmMap
     ) {
         if (isFinishing()) return;
         cardCrashWarning.setVisibility(crashed ? VISIBLE : GONE);
-        cardNotLoaded.setVisibility(loaded ? GONE : VISIBLE);
-        if (loaded && !stats.isEmpty()) {
-            rowStatState.setValue(stats.getOrDefault("state", "-"));
-            rowStatTotalServed.setValue(stats.getOrDefault("total_served", "-"));
-            rowStatTotalRefilled.setValue(stats.getOrDefault("total_refilled", "-"));
-            rowStatActiveVms.setValue(stats.getOrDefault("active_vms", "-"));
-            try {
-                var poolAvail = getPages(stats, "pool_avail");
-                var poolTotal = getPages(stats, "pool_total");
-                // "total" shows the desired target (pool_want); grow raises it
-                // while capacity (pool_total) only rises via acquire. Old
-                // modules without pool_want fall back to capacity.
-                var poolWant = getPages(stats, "pool_want");
-                if (poolWant <= 0) poolWant = poolTotal;
-                // Apple-storage-bar style: one labelled colored block per VM
-                // (used), then the available portion as a track-coloured gap,
-                // then the waiting-to-acquire (deficit) block pinned flush right.
-                // Each block draws its label inside if wide enough.
-                boolean dark = HugePageColor.isDark(this);
-                int n = owners.size();
-                int[] usedColors = new int[n];
-                float[] usedValues = new float[n];
-                String[] usedLabels = new String[n];
-                long seg = 0;
-                for (int i = 0; i < n; i++) {
-                    int pid = (int) owners.get(i)[0];
-                    long ownerPages = owners.get(i)[1];
-                    usedColors[i] = HugePageColor.forPid(pid, dark);
-                    usedValues[i] = ownerPages;
-                    String name = vmMap.get(pid);
-                    if (name == null) name = getString(R.string.hugepage_proc_pid, pid);
-                    // Two stacked lines: label over capacity.
-                    usedLabels[i] = name + "\n" + SizeUtils.formatSize(ownerPages * PAGE_SIZE);
-                    seg += ownerPages;
-                }
-                // "used" is the sum of the segments the bar draws, so the caption
-                // and the bar always agree (one canonical quantity: the per-VM
-                // served/scanned pages). The kernel 'served' counter can include
-                // orphaned owner-gone pages that have no segment; those surface in
-                // the held/available gap rather than as an invisible caption delta.
-                long used = seg;
-                long deficit = Math.max(0, poolWant - seg - poolAvail);
-                // 2x2 caption: used / available on top, total / pool-size below.
-                // Total = real held reserve (used + avail), shown raw - no clamp
-                // to the pool size, so a kernel that fails to release on shrink
-                // shows up as total > the size you set.
-                var held = used + poolAvail;
-                setPagesString(tvPoolUsed, R.string.hugepage_stat_pool_used, used);
-                setPagesString(tvPoolAvail, R.string.hugepage_stat_pool_available, poolAvail);
-                setPagesString(tvPoolTotal, R.string.hugepage_stat_pool_total, held);
-                setPagesString(tvPoolSize, R.string.hugepage_stat_pool_size, poolWant);
-                segPoolBar.setStorage(usedColors, usedValues, usedLabels,
-                    poolAvail, getString(R.string.hugepage_bar_available)
-                        + "\n" + SizeUtils.formatSize(poolAvail * PAGE_SIZE),
-                    HugePageColor.pending(this), deficit,
-                    getString(R.string.hugepage_proc_deficit)
-                        + "\n" + SizeUtils.formatSize(deficit * PAGE_SIZE),
-                    poolWant);
-            } catch (NumberFormatException e) {
-                tvPoolUsed.setText("-");
-                tvPoolAvail.setText("-");
-                tvPoolTotal.setText("-");
-                tvPoolSize.setText("-");
-                segPoolBar.setData(new int[0], new float[0], 0f);
+        cardNotLoaded.setVisibility(snap.loaded ? GONE : VISIBLE);
+        if (snap.loaded && snap.statsOk) {
+            rowStatState.setValue(snap.state);
+            rowStatTotalServed.setValue(snap.totalServed);
+            rowStatTotalRefilled.setValue(snap.totalRefilled);
+            rowStatActiveVms.setValue(snap.activeVms);
+            var poolAvail = snap.free;
+            // "total" shows the desired target - the model's version-unified
+            // want (pool_want, else v6 pool_target, else current capacity).
+            var poolWant = snap.targetIdeal;
+            // Apple-storage-bar style: one labelled colored block per VM
+            // (used), then the available portion as a track-coloured gap,
+            // then the waiting-to-acquire (deficit) block pinned flush right.
+            // Each block draws its label inside if wide enough.
+            boolean dark = HugePageColor.isDark(this);
+            int n = owners.size();
+            int[] usedColors = new int[n];
+            float[] usedValues = new float[n];
+            String[] usedLabels = new String[n];
+            long seg = 0;
+            for (int i = 0; i < n; i++) {
+                int pid = (int) owners.get(i)[0];
+                long ownerPages = owners.get(i)[1];
+                usedColors[i] = HugePageColor.forPid(pid, dark);
+                usedValues[i] = ownerPages;
+                String name = vmMap.get(pid);
+                if (name == null) name = getString(R.string.hugepage_proc_pid, pid);
+                // Two stacked lines: label over capacity.
+                usedLabels[i] = name + "\n" + SizeUtils.formatSize(ownerPages * PAGE_SIZE);
+                seg += ownerPages;
             }
+            // "used" is the sum of the segments the bar draws, so the caption
+            // and the bar always agree (one canonical quantity: the per-VM
+            // served/scanned pages). The kernel 'served' counter can include
+            // orphaned owner-gone pages that have no segment; those surface in
+            // the held/available gap rather than as an invisible caption delta.
+            long used = seg;
+            long deficit = Math.max(0, poolWant - seg - poolAvail);
+            // 2x2 caption: used / available on top, total / pool-size below.
+            // Total = real held reserve (used + avail), shown raw - no clamp
+            // to the pool size, so a kernel that fails to release on shrink
+            // shows up as total > the size you set.
+            var held = used + poolAvail;
+            setPagesString(tvPoolUsed, R.string.hugepage_stat_pool_used, used);
+            setPagesString(tvPoolAvail, R.string.hugepage_stat_pool_available, poolAvail);
+            setPagesString(tvPoolTotal, R.string.hugepage_stat_pool_total, held);
+            setPagesString(tvPoolSize, R.string.hugepage_stat_pool_size, poolWant);
+            segPoolBar.setStorage(usedColors, usedValues, usedLabels,
+                poolAvail, getString(R.string.hugepage_bar_available)
+                    + "\n" + SizeUtils.formatSize(poolAvail * PAGE_SIZE),
+                HugePageColor.pending(this), deficit,
+                getString(R.string.hugepage_proc_deficit)
+                    + "\n" + SizeUtils.formatSize(deficit * PAGE_SIZE),
+                poolWant);
         } else {
             rowStatState.setValue(getString(R.string.hugepage_stats_unavailable));
             rowStatTotalServed.setValue(null);
@@ -353,85 +406,102 @@ poolAvail, getString(R.string.hugepage_bar_available)
         // floppy icon kept) but stays pressable: tapping it then interrupts the
         // acquire, keeping the current size (see the click handler). pool_want is
         // settable any time now, so neither button needs to be disabled.
-        boolean acquiring = loaded && "1".equals(stats.get("acquire_active"));
+        boolean acquiring = snap.acquiring;
         moduleAcquiring = acquiring;
+        // Reconcile the acquire slots from acquire_active + acquire_mode so a run
+        // that finishes (or was started elsewhere) toggles spinners<->buttons, and
+        // only the running mode spins. acquire_mode is -1 on old modules -> makes
+        // all three spin.
+        int mode = acquiring ? snap.acquireMode : -1;
+        // A real acquire_active 1 -> 0 edge = the worker finished; announce the
+        // achieved size (this screen is fire-and-forget - unlike the process list,
+        // which polls). Track the kernel flag, not the optimistic mainAcquiring, so
+        // an acquire that never actually started can't fake a "done".
+        if (wasAcquiring && !acquiring) {
+            long got = snap.free + snap.lent;
+            long want = snap.targetIdeal;
+            Toast.makeText(this, got >= want
+                    ? getString(R.string.hugepage_proc_acquire_full,
+                        SizeUtils.formatSize(want * PAGE_SIZE))
+                    : getString(R.string.hugepage_proc_acquire_partial,
+                        SizeUtils.formatSize(got * PAGE_SIZE),
+                        SizeUtils.formatSize(want * PAGE_SIZE)),
+                Toast.LENGTH_LONG).show();
+        }
+        wasAcquiring = acquiring;
+        if (mainAcquiring != acquiring || mainAcquireMode != mode) {
+            mainAcquiring = acquiring;
+            mainAcquireMode = mode;
+            applyAcquireState();
+        }
         progressSavePoolSize.setVisibility(acquiring ? VISIBLE : GONE);
         if (acquiring) btnSavePoolSize.setTextColor(Color.TRANSPARENT);
         else btnSavePoolSize.setTextColor(saveTextColors);
-        btnSavePoolSize.setEnabled(installed);
+        btnSavePoolSize.setEnabled(snap.installed);
         // Install / Enable / Disable. "Disable" on v7 shrinks the pool to one
         // page (frees memory) but keeps the module loaded so it never loses
         // per-VM tracking; soft-disabled shows "Enable" again. v6 has no
         // pool_want knob, so Disable falls back to rmmod.
-        moduleInstalled = installed;
-        moduleLoaded = loaded;
-        moduleHasPoolWant = stats.containsKey("pool_want");
-        moduleSoftDisabled = loaded && moduleHasPoolWant
-            && getPages(stats, "pool_want") <= 1;
+        moduleInstalled = snap.installed;
+        moduleLoaded = snap.loaded;
+        moduleHasPoolWant = snap.hasPoolWant;
+        moduleSoftDisabled = snap.softDisabled;
         btnModuleToggle.setEnabled(true);
-        if (!installed) {
+        if (!snap.installed) {
             btnModuleToggle.setText(R.string.hugepage_btn_install);
             btnModuleToggle.setIconResource(R.drawable.ic_download);
-        } else if (!loaded || moduleSoftDisabled) {
+        } else if (!snap.loaded || snap.softDisabled) {
             btnModuleToggle.setText(R.string.hugepage_btn_enable);
             btnModuleToggle.setIconResource(R.drawable.ic_start);
         } else {
             btnModuleToggle.setText(R.string.hugepage_btn_disable);
             btnModuleToggle.setIconResource(R.drawable.ic_stop);
         }
-        rowModuleEnable.setEnabled(installed);
-        rowModuleEnable.setChecked(!disabled);
+        rowModuleEnable.setEnabled(snap.installed);
+        rowModuleEnable.setChecked(snap.bootEnabled);
+
+        // Acquire buttons usable exactly when there is a deficit to fill. The
+        // model's version-unified deficit already folds in v6 (no pool_want) and
+        // soft-disable (want 0), so there is no version branching here.
+        acquireEnabled = snap.loaded && snap.deficit > 0;
+        applyAcquireState();
     }
 
-    private void doLoad() {
+    /**
+     * Bring the pool up: load the module (if unloaded) or restore the saved target
+     * (if soft-disabled), then kick one gentle v1 fill toward it. The model picks
+     * the version-appropriate path (insmod / pool_want write) and reads the size
+     * from settings.prop itself.
+     */
+    private void doEnable() {
         btnModuleToggle.setEnabled(false);
         runOnPool(() -> {
-            if (shellCheckExists(SYSFS_BASE)) {
-                runOnUiThread(() -> {
-                    Toast.makeText(this, R.string.hugepage_already_loaded,
-                        LENGTH_SHORT).show();
-                    refreshStatus(true);
-                });
-                return;
-            }
-            // Read the configured size from settings.prop in Java (rather than
-            // sourcing it in shell). v7 reads pool_want, older builds pool_target.
-            var size = "1024";
-            if (shellCheckExists(SETTINGS_PROP)) {
-                var settings = parseProp(shellReadFile(SETTINGS_PROP));
-                size = settings.getOrDefault("pool_want",
-                    settings.getOrDefault("pool_target", "1024"));
-            }
-            // Insmod compatibly across versions: v7 takes pool_want, older builds
-            // take pool_target, anything else loads bare. First success wins.
-            var ko = pathJoin(MAGISK_BASE, "gh_hugepage_reserve.ko");
-            var result =
-                run("insmod \"%s\" pool_want=\"%s\"", ko, size).isSuccess()
-                    || run("insmod \"%s\" pool_target=\"%s\"", ko, size).isSuccess()
-                    || run("insmod \"%s\"", ko).isSuccess();
+            var res = model.setRuntimeEnabled(true);
+            if (res.ok()) model.acquire(1);   // GUI drives the fill (v1 = gentlest)
             runOnUiThread(() -> {
-                Toast.makeText(this, result
-                        ? R.string.hugepage_loaded
-                        : R.string.hugepage_load_failed,
+                Toast.makeText(this, res.ok()
+                    ? R.string.hugepage_loaded : R.string.hugepage_load_failed,
                     LENGTH_SHORT).show();
-                refreshStatus(true);
+                refreshStatus();
             });
         });
     }
 
     /**
-     * Soft-disable (v7): shrink the pool to a single page so the reserved memory
-     * is freed back to the system, but keep the module loaded so it never loses
-     * per-VM tracking (unlike rmmod). settings.prop is left untouched, so the
-     * next boot still allocates the configured capacity.
+     * Take the pool down: soft-disable (shrink pool_want to 0, module stays loaded
+     * so per-VM tracking survives) where supported, else rmmod (v6). The module
+     * refuses a resize mid-acquire, so the running worker is stopped first.
      */
-    private void doSoftDisable() {
+    private void doDisable() {
         btnModuleToggle.setEnabled(false);
         runOnPool(() -> {
-            // The module refuses a resize mid-acquire, so stop the worker first.
             stopAcquireAndWait();
-            run("echo 1 > %s/pool_want", SYSFS_PARAMS);
-            runOnUiThread(this::refreshStatus);
+            var res = model.setRuntimeEnabled(false);
+            runOnUiThread(() -> {
+                if (!res.ok()) Toast.makeText(this,
+                    R.string.hugepage_unload_failed, LENGTH_SHORT).show();
+                refreshStatus();
+            });
         });
     }
 
@@ -442,7 +512,7 @@ private void doSoftDisable() {
      */
     private void interruptAcquire() {
         runOnPool(() -> {
-            run("echo 0 > %s/acquire", SYSFS_PARAMS);
+            model.stopAcquire();
             runOnUiThread(this::refreshStatus);
         });
     }
@@ -450,15 +520,14 @@ private void interruptAcquire() {
     /**
      * Interrupt any running acquire and block (on the pool thread) until the
      * worker is quiescent. pool_want can't be set while an acquire runs, so call
-     * this before writing pool_want. The worker can be mid-migration, so this may
-     * take a moment; bounded so a wedged worker can't hang us forever.
+     * this before a soft-disable. The worker can be mid-migration, so this may take
+     * a moment; bounded so a wedged worker can't hang us forever.
      */
     private void stopAcquireAndWait() {
-        if (!shellCheckExists(pathJoin(SYSFS_PARAMS, "acquire"))) return;
-        run("echo 0 > %s/acquire", SYSFS_PARAMS);
+        if (!model.acquiring()) return;   // nothing running (also the v6 case)
+        model.stopAcquire();
         for (int i = 0; i < 60; i++) {
-            var st = parseProp(shellReadFile(pathJoin(SYSFS_PARAMS, "refill_stat")));
-            if (!"1".equals(st.get("acquire_active"))) return;
+            if (!model.acquiring()) return;
             try {
                 Thread.sleep(500);
             } catch (InterruptedException ignored) {
@@ -467,24 +536,6 @@ private void stopAcquireAndWait() {
         }
     }
 
-    /** Re-enable a soft-disabled pool: restore the configured size and refill. */
-    private void doSoftEnable() {
-        btnModuleToggle.setEnabled(false);
-        runOnPool(() -> {
-            var size = "1024";
-            if (shellCheckExists(SETTINGS_PROP)) {
-                var s = parseProp(shellReadFile(SETTINGS_PROP));
-                size = s.getOrDefault("pool_want",
-                    s.getOrDefault("pool_target", "1024"));
-            }
-            run("echo %s > %s/pool_want", size, SYSFS_PARAMS);
-            if (shellCheckExists(pathJoin(SYSFS_PARAMS, "acquire"))) {
-                run("echo 1 > %s/acquire", SYSFS_PARAMS);
-            }
-            runOnUiThread(this::refreshStatus);
-        });
-    }
-
     private void loadPoolSize() {
         runOnPool(() -> {
             Map<String, String> settings;
@@ -562,32 +613,19 @@ private void savePoolSize() {
                     LENGTH_SHORT).show());
                 return;
             }
-            // Persist for the next load. Write BOTH keys so the size survives
-            // whichever module/loader is installed at boot: v7's loader reads
-            // pool_want, an older (v6) package's loader reads pool_target.
-            var wroteWant = run("echo 'pool_want=%s' > %s",
-                pages.toString(), SETTINGS_PROP).isSuccess();
-            var wroteTarget = run("echo 'pool_target=%s' >> %s",
-                pages.toString(), SETTINGS_PROP).isSuccess();
-            var result = wroteWant && wroteTarget;
-            // Apply at runtime via the single pool_want knob: shrink frees excess
-            // now, grow only raises the target (Acquire fills it). Old modules
-            // without pool_want just keep the saved value (effective next reboot).
-            var applied = false;
-            if (shellCheckExists(pathJoin(SYSFS_PARAMS, "pool_want"))) {
-                applied = run("echo %s > %s/pool_want",
-                    pages.toString(), SYSFS_PARAMS).isSuccess();
-                // Saving also kicks off one acquire so a grown target starts
-                // filling immediately (a shrink just makes the worker exit at
-                // once). The 1 s status poll then animates the bar + Save spinner.
-                if (applied && shellCheckExists(pathJoin(SYSFS_PARAMS, "acquire"))) {
-                    run("echo 1 > %s/acquire", SYSFS_PARAMS);
-                }
-            }
-            var finalApplied = applied;
+            // Persist for the next load and apply to the running pool where the
+            // live knob exists (v7); v6's read-only target only lands next boot.
+            var res = model.saveSize(pages.longValue());
+            // A grow leaves a deficit -> kick one v1 fill so the raised target
+            // starts filling at once (a shrink is applied by the write itself).
+            // The GUI drives acquire; the model's saveSize deliberately doesn't.
+            var snap = model.state();
+            if (res.ok() && snap.loaded && snap.deficit > 0) model.acquire(1);
+            boolean okSaved = res.ok();
+            boolean appliedNow = "pool_want".equals(res.impl);   // live write actually landed
             runOnUiThread(() -> {
-                int msg = !result ? R.string.hugepage_pool_size_failed
-                    : finalApplied ? R.string.hugepage_pool_size_applied
+                int msg = !okSaved ? R.string.hugepage_pool_size_failed
+                    : appliedNow ? R.string.hugepage_pool_size_applied
                     : R.string.hugepage_pool_size_saved;
                 Toast.makeText(this, msg, LENGTH_SHORT).show();
                 refreshStatus();
@@ -597,13 +635,11 @@ private void savePoolSize() {
 
     private void doToggleModule() {
         var enabled = rowModuleEnable.isChecked();
-        if (shellCheckExists(DISABLE_FILE) != enabled) return;
+        if (shellCheckExists(DISABLE_FILE) != enabled) return;   // ignore the programmatic echo
         runOnPool(() -> {
-            var result = enabled ?
-                runList("rm", "-f", DISABLE_FILE) :
-                runList("touch", DISABLE_FILE);
+            var res = model.setBootEnabled(enabled);
             runOnUiThread(() -> {
-                if (result.isSuccess()) {
+                if (res.ok()) {
                     var msg = enabled ?
                         R.string.hugepage_module_now_enabled :
                         R.string.hugepage_module_now_disabled;
@@ -618,25 +654,11 @@ private void confirmUnload() {
         new MaterialAlertDialogBuilder(this)
             .setTitle(R.string.hugepage_stop)
             .setMessage(R.string.hugepage_stop_confirm)
-            .setPositiveButton(R.string.hugepage_stop, (d, w) -> doUnload())
+            .setPositiveButton(R.string.hugepage_stop, (d, w) -> doDisable())
             .setNegativeButton(android.R.string.cancel, null)
             .show();
     }
 
-    private void doUnload() {
-        btnModuleToggle.setEnabled(false);
-        runOnPool(() -> {
-            var result = runList("rmmod", "gh_hugepage_reserve").isSuccess();
-            runOnUiThread(() -> {
-                var msg = result ?
-                    R.string.hugepage_unloaded :
-                    R.string.hugepage_unload_failed;
-                Toast.makeText(this, msg, LENGTH_SHORT).show();
-                refreshStatus(true);
-            });
-        });
-    }
-
     private void doDismissCrash() {
         runOnPool(() -> {
             runList("rm", "-f", CRASH_FILE);
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/hugepage/HugePageModel.java b/app/src/main/java/cn/classfun/droidvm/ui/hugepage/HugePageModel.java
index 0e1958c42..8c4b5e9ca 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/hugepage/HugePageModel.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/hugepage/HugePageModel.java
@@ -3,6 +3,7 @@
 import static cn.classfun.droidvm.lib.utils.FileUtils.shellCheckExists;
 import static cn.classfun.droidvm.lib.utils.FileUtils.shellReadFile;
 import static cn.classfun.droidvm.lib.utils.RunUtils.run;
+import static cn.classfun.droidvm.lib.utils.RunUtils.runList;
 import static cn.classfun.droidvm.lib.utils.StringUtils.pathJoin;
 
 import android.os.SystemClock;
@@ -18,131 +19,679 @@
 import java.util.concurrent.CountDownLatch;
 import java.util.concurrent.TimeUnit;
 import java.util.concurrent.atomic.AtomicReference;
+import java.util.function.Supplier;
 import java.util.regex.Pattern;
 
 import cn.classfun.droidvm.lib.daemon.DaemonConnection;
+import cn.classfun.droidvm.lib.run.RunResult;
 
 /**
- * Shared huge-page data layer for the status ({@link HugePageActivity}) and
- * process ({@link HugePageProcessActivity}) screens.
+ * The single huge-page facade both screens ({@link HugePageActivity},
+ * {@link HugePageProcessActivity}) talk to.
  *
- * <p>Both screens run a per-second refresh loop, so this class caches the three
- * expensive sources with short TTLs so a refresh no longer re-probes root sysfs,
- * blocks on the daemon, or re-scans {@code /proc} every single tick:
- * <ul>
- *   <li><b>capabilities</b> — one batched root probe of the module's sysfs knobs,
- *       resolved at most once per {@link #CAPS_TTL_MS} (a static property of the
- *       loaded {@code .ko}, not something to re-derive every tick);</li>
- *   <li><b>VM names</b> — the daemon {@code vm_list} pid&rarr;name map, fetched at
- *       most once per {@link #VM_TTL_MS} and reused (last-known) on a slow daemon
- *       so labels never blank to raw pids;</li>
- *   <li><b>pool_target</b> — the read-only v6 grow target, read once and cached.</li>
- * </ul>
- * Each screen owns its own instance (separate caches); everything here is
- * context-free (pure data), so it never holds an Activity reference.
+ * <p>It hides the {@code gh_hugepage_reserve} module's <b>v6/v7 differences</b>:
+ * callers ask for a high-level operation and never branch on version or poke raw
+ * sysfs. Version is never decided ahead of time — each mutation is a
+ * <b>degradation ladder</b> that just tries the best knob and falls back
+ * (e.g. the migrating {@code acquire} knob → {@code manual_refill};
+ * {@code pool_want=0} soft-disable → {@code rmmod}). The internal {@link Try}
+ * ladder is collapsed to a small {@link Result} ({@code OK / UNSUPPORTED /
+ * FAILED}) for the GUI — that is the "無法執行就回傳 error" contract.
+ *
+ * <p>Reads are cached with short TTLs so the per-second refresh loop doesn't
+ * block on the daemon or re-read a static knob every tick. Each screen owns its
+ * own instance (separate caches); everything here is context-free (pure data) and
+ * never holds an Activity reference. Mutations do shell I/O — call them off the UI
+ * thread.
  */
 final class HugePageModel {
     static final String SYSFS_BASE = "/sys/module/gh_hugepage_reserve";
     static final String SYSFS_PARAMS = pathJoin(SYSFS_BASE, "parameters");
-    static final String SYSFS_OWNERS = pathJoin(SYSFS_PARAMS, "vm_owners");
-    /** A THP huge page is 2 MiB, i.e. 2048 KiB. */
-    static final long KB_PER_PAGE = 2048;
-    static final long PAGE_BYTES = KB_PER_PAGE * 1024;
+    private static final String SYSFS_OWNERS = pathJoin(SYSFS_PARAMS, "vm_owners");
+    private static final String MAGISK_BASE = "/data/adb/modules/gh-hugepage-reserve";
+    private static final String MODULE_PROP = pathJoin(MAGISK_BASE, "module.prop");
+    private static final String DISABLE_FILE = pathJoin(MAGISK_BASE, "disable");
+    private static final String SETTINGS_PROP = pathJoin(MAGISK_BASE, "settings.prop");
+    private static final String KO_PATH = pathJoin(MAGISK_BASE, "gh_hugepage_reserve.ko");
+    /** A THP huge page is 2 MiB = 2048 KiB. */
+    private static final long KB_PER_PAGE = 2048;
+    /** Default target if settings.prop has none (pages): 1024 x 2 MB = 2 GB. */
+    private static final long DEFAULT_WANT_PAGES = 1024;
 
     /** meminfo/smaps values are "<n> kB"; strip everything but the digits once. */
     private static final Pattern NON_DIGITS = Pattern.compile("[^0-9]");
 
-    private static final long CAPS_TTL_MS = 3000;
+    private static final long STAT_TTL_MS = 3000;
     private static final long VM_TTL_MS = 4000;
     private static final long DAEMON_TIMEOUT_S = 2;
 
     /* ================================================================== */
-    /*  Module capabilities                                               */
+    /*  Public result / data types                                        */
     /* ================================================================== */
 
-    /** Immutable snapshot of what the currently-loaded module supports. */
-    static final class Caps {
-        /** {@code /sys/module/gh_hugepage_reserve} exists (module is loaded). */
-        final boolean loaded;
-        /** served_summary present: per-VM KO attribution API (v7). */
-        final boolean koAttribution;
-        /** pool_want knob present (v7 resizable target). */
-        final boolean hasPoolWant;
-        /** acquire knob present (v7 async grow). */
-        final boolean hasAcquire;
-        /** manual_refill knob present (v6 refill). */
-        final boolean hasManualRefill;
-
-        Caps(boolean loaded, boolean koAttribution, boolean hasPoolWant,
-             boolean hasAcquire, boolean hasManualRefill) {
+    /** Outcome of a mutation. {@code UNSUPPORTED} = the module/version can't do it. */
+    enum Outcome { OK, UNSUPPORTED, FAILED }
+
+    /** Which way a usage list was sourced: module KO attribution, or a THP scan. */
+    enum Source { KO, SCAN }
+
+    /**
+     * Collapsed result of a high-level mutation: the overall outcome, which
+     * concrete implementation won (or last failed), and a human reason on failure.
+     */
+    static final class Result {
+        @NonNull final Outcome outcome;
+        /** Which rung ran (e.g. "acquire", "manual_refill", "soft", "BARE"), or null. */
+        @Nullable final String impl;
+        /** Failure reason, or null on success. */
+        @Nullable final String detail;
+        /**
+         * True when a <b>fallback</b> rung won: a preferred implementation was
+         * tried first and failed. This replaces the old ladder's "the trace has
+         * more than one element" degradation signal - {@link #impl} says which
+         * fallback, {@code degraded} says that it is one.
+         */
+        final boolean degraded;
+
+        private Result(@NonNull Outcome outcome, @Nullable String impl,
+                       @Nullable String detail, boolean degraded) {
+            this.outcome = outcome;
+            this.impl = impl;
+            this.detail = detail;
+            this.degraded = degraded;
+        }
+
+        boolean ok() {
+            return outcome == Outcome.OK;
+        }
+
+        static Result ok(@Nullable String impl) {
+            return new Result(Outcome.OK, impl, null, false);
+        }
+
+        static Result ok(@Nullable String impl, boolean degraded) {
+            return new Result(Outcome.OK, impl, null, degraded);
+        }
+
+        static Result failed(@Nullable String impl, @Nullable String detail) {
+            return new Result(Outcome.FAILED, impl, detail, false);
+        }
+
+        static Result unsupported(@Nullable String detail) {
+            return new Result(Outcome.UNSUPPORTED, null, detail, false);
+        }
+    }
+
+    /** A per-VM usage list plus which source produced it. */
+    static final class Usage {
+        @NonNull final List<UsageEntry> entries;
+        @NonNull final Source source;
+
+        Usage(@NonNull List<UsageEntry> entries, @NonNull Source source) {
+            this.entries = entries;
+            this.source = source;
+        }
+    }
+
+    /** One attributed process: pid, name, huge pages, and live /proc state. */
+    static final class UsageEntry {
+        final int pid;
+        /** Owner comm (KO) or VM name (scan). */
+        @NonNull final String comm;
+        /** Huge pages attributed: reconciled served count (KO) or THP occupancy (scan). */
+        final long pages;
+        /** /proc run state (R/S/D/...), or '?' if unknown. */
+        final char state;
+        final boolean alive;
+
+        UsageEntry(int pid, @NonNull String comm, long pages, char state, boolean alive) {
+            this.pid = pid;
+            this.comm = comm;
+            this.pages = pages;
+            this.state = state;
+            this.alive = alive;
+        }
+    }
+
+    /**
+     * Version-unified snapshot of module + pool state. {@code targetIdeal} is the
+     * one "target" concept across versions: v7's {@code pool_want}, else v6's
+     * read-only {@code pool_target}, else current capacity. {@code deficit} is what
+     * is still missing toward it ({@code targetIdeal − free − lent}); the acquire
+     * buttons are usable exactly when {@code loaded && deficit > 0}.
+     */
+    static final class Snapshot {
+        final boolean installed;      // Magisk module files present
+        final boolean loaded;         // insmod'd (sysfs node exists)
+        final boolean statsOk;        // refill_stat was readable (false on a transient failure)
+        final boolean bootEnabled;    // will load next boot (no Magisk disable file)
+        final long targetIdeal;       // unified target (want): pool_want ?? pool_target ?? built
+        final long built;             // pool_total (capacity assembled)
+        final long free;              // pool_avail (in the pool now)
+        final long lent;              // served (out to VMs); 0 if the module can't report it (v6)
+        final long deficit;           // max(0, targetIdeal − free − lent)
+        final boolean acquiring;      // an acquire worker is running
+        final int acquireMode;        // which mode (1/2/3), or -1 if the module can't report it
+        final boolean hasPoolWant;    // pool_want knob reported (v7 runtime-resizable)
+        final boolean softDisabled;   // v7 pool_want <= 1 (reserve released, module stays loaded)
+        // Raw display strings from refill_stat (pass-through, "-" when absent).
+        @NonNull final String state;
+        @NonNull final String totalServed;
+        @NonNull final String totalRefilled;
+        @NonNull final String activeVms;
+
+        private Snapshot(boolean installed, boolean loaded, boolean statsOk, boolean bootEnabled,
+                         long targetIdeal, long built, long free, long lent, long deficit,
+                         boolean acquiring, int acquireMode, boolean hasPoolWant,
+                         boolean softDisabled, @NonNull String state, @NonNull String totalServed,
+                         @NonNull String totalRefilled, @NonNull String activeVms) {
+            this.installed = installed;
             this.loaded = loaded;
-            this.koAttribution = koAttribution;
+            this.statsOk = statsOk;
+            this.bootEnabled = bootEnabled;
+            this.targetIdeal = targetIdeal;
+            this.built = built;
+            this.free = free;
+            this.lent = lent;
+            this.deficit = deficit;
+            this.acquiring = acquiring;
+            this.acquireMode = acquireMode;
             this.hasPoolWant = hasPoolWant;
-            this.hasAcquire = hasAcquire;
-            this.hasManualRefill = hasManualRefill;
+            this.softDisabled = softDisabled;
+            this.state = state;
+            this.totalServed = totalServed;
+            this.totalRefilled = totalRefilled;
+            this.activeVms = activeVms;
         }
     }
 
-    @Nullable
-    private volatile Caps capsCache;
-    private volatile long capsAtMs = Long.MIN_VALUE;
+    /* ================================================================== */
+    /*  Public high-level API                                             */
+    /* ================================================================== */
 
     /**
-     * Module capabilities, cached for {@link #CAPS_TTL_MS}. Resolving this from a
-     * cache (instead of re-probing every refresh) is what stops a single flaky
-     * root {@code test -e} from flapping the whole view between KO and scan mode.
-     * Pass {@code force = true} right after an action that changes the module
-     * (load / unload / soft-disable) to re-probe immediately.
+     * Version-unified module + pool snapshot. Never throws; when the module isn't
+     * loaded the pool fields are zero and {@code loaded == false}.
      */
     @NonNull
-    Caps caps(boolean force) {
-        long now = SystemClock.elapsedRealtime();
-        var c = capsCache;
-        if (!force && c != null && now - capsAtMs < CAPS_TTL_MS) return c;
-        c = probeCaps();
-        capsCache = c;
-        capsAtMs = now;
-        return c;
+    Snapshot state() {
+        boolean installed = existsSticky(MODULE_PROP);
+        boolean bootEnabled = !shellCheckExists(DISABLE_FILE);
+        boolean loaded = existsSticky(SYSFS_BASE);
+        if (!loaded) {
+            return new Snapshot(installed, false, false, bootEnabled,
+                0, 0, 0, 0, 0, false, -1, false, false, "-", "-", "-", "-");
+        }
+        var s = parseProp(safeRead(pathJoin(SYSFS_PARAMS, "refill_stat")));
+        boolean statsOk = !s.isEmpty();   // empty == the read failed transiently
+        boolean hasWant = s.containsKey("pool_want");
+        long built = getLong(s, "pool_total", 0);
+        long free = getLong(s, "pool_avail", 0);
+        long lent = getLong(s, "served", 0);
+        long rawWant = getLong(s, "pool_want", -1);
+        long want = rawWant;
+        if (want < 0) want = poolTarget();   // v6: separate read-only knob
+        if (want < 0) want = built;           // last resort: current capacity
+        long deficit = Math.max(0, want - free - lent);
+        boolean acquiring = "1".equals(s.get("acquire_active"));
+        int mode = (int) getLong(s, "acquire_mode", -1);
+        boolean softDisabled = hasWant && rawWant <= 1;
+        return new Snapshot(installed, true, statsOk, bootEnabled,
+            want, built, free, lent, deficit, acquiring, mode, hasWant, softDisabled,
+            s.getOrDefault("state", "-"), s.getOrDefault("total_served", "-"),
+            s.getOrDefault("total_refilled", "-"), s.getOrDefault("active_vms", "-"));
     }
 
     /**
-     * One batched root round-trip that tests every knob at once (5 {@code test -e}
-     * in a single {@code run}, instead of one exec per knob). If it comes back
-     * "not loaded" we retry once, since a lone root {@code test -e} can flake
-     * under load and we don't want to spuriously report the module gone.
+     * Whether an acquire worker is currently running. Reads only {@code refill_stat}
+     * (no module / boot-file probing), so it is cheap enough for the tight poll
+     * loops where a full {@link #state()} every 500 ms would be wasteful.
+     */
+    boolean acquiring() {
+        return "1".equals(parseProp(safeRead(
+            pathJoin(SYSFS_PARAMS, "refill_stat"))).get("acquire_active"));
+    }
+
+    /**
+     * Per-VM huge-page usage. Prefers KO attribution (the module's reconciled
+     * {@code served_summary} + {@code vm_owners}); degrades to a THP scan of the
+     * daemon's running VMs. Pass a {@code pref} to pin a source (the UI lets the
+     * user choose), or {@code null} to walk the ladder.
      */
     @NonNull
-    private Caps probeCaps() {
-        var caps = probeCapsOnce();
-        if (!caps.loaded) caps = probeCapsOnce();   // absorb a flaky probe
-        return caps;
+    Usage usage(@Nullable Source pref) {
+        var log = new ArrayList<Try<Source, List<UsageEntry>>>();
+        if (rung(pref, log, Source.KO, this::usageFromKo)) return usageOf(log);
+        rung(pref, log, Source.SCAN, this::usageFromScan);
+        return usageOf(log);
     }
 
+    /** Whether KO attribution is currently available (the {@code served_summary} knob exists). */
+    boolean koAvailable() {
+        return existsSticky(pathJoin(SYSFS_PARAMS, "served_summary"));
+    }
+
+    /**
+     * Save a new pool target of {@code pages}. Persists it to settings.prop (for
+     * the next boot) and applies it to the running pool if the live {@code pool_want}
+     * knob exists; on v6 (read-only {@code pool_target}) only the persist takes
+     * effect. Does <b>not</b> fire an acquire — the caller drives that from the
+     * resulting {@link Snapshot#deficit}.
+     */
     @NonNull
-    private Caps probeCapsOnce() {
-        String raw;
+    Result saveSize(long pages) {
+        var persisted = writeSettings(pages);
+        if (!persisted.ok()) return Result.failed("settings", persisted.error);
+        // Best-effort live apply; the impl reports whether it actually took effect
+        // on the running pool ("pool_want") or only persisted for next boot
+        // ("settings" - v6's read-only target, or a rejected write).
+        var live = writeKnob("pool_want", Long.toString(pages));
+        // Degraded when the live write didn't land (v6 read-only target, or a
+        // rejected write): only the next-boot persist took effect.
+        return Result.ok(live.ok() ? "pool_want" : "settings", !live.ok());
+    }
+
+    /**
+     * Bring the running pool up (true) or down (false), choosing the deepest action
+     * the module supports:
+     * <ul>
+     *   <li><b>enable</b>: not loaded → insmod (targeting the saved size); loaded →
+     *       restore the target by writing the saved {@code pool_want} (v6 loaded is
+     *       already active, so this is a no-op there);</li>
+     *   <li><b>disable</b>: try {@code pool_want=0} (soft — frees the reserve but
+     *       keeps per-VM tracking); if that write can't happen (v6 has no such knob)
+     *       fall back to {@code rmmod}.</li>
+     * </ul>
+     */
+    @NonNull
+    Result setRuntimeEnabled(boolean on) {
+        if (on) {
+            if (!existsSticky(SYSFS_BASE)) {
+                return collapse(loadLadder(savedWantPages()));   // insmod
+            }
+            // Loaded: restore the target. Succeeds on v7; on v6 there's no pool_want
+            // and a loaded module is already active, so treat a failed write as "已啟用".
+            var t = writeKnob("pool_want", Long.toString(savedWantPages()));
+            return t.ok() ? Result.ok("soft-enable") : Result.ok("already-active");
+        }
+        // Disable. Pick soft-vs-rmmod by *capability* (does the pool_want knob
+        // exist?), NOT by write success: a v7 soft-disable can also fail
+        // transiently (the module refuses a resize mid-acquire, or a root hiccup),
+        // and escalating that to rmmod would destroy the per-VM tracking that
+        // soft-disable exists to preserve. So v7 only ever soft-disables (a failed
+        // write is reported as FAILED to retry); only v6 (no knob) falls to rmmod.
+        if (existsSticky(pathJoin(SYSFS_PARAMS, "pool_want"))) {
+            var soft = writeKnob("pool_want", "0");
+            return soft.ok() ? Result.ok("soft") : Result.failed("soft", soft.error);
+        }
+        return collapse(unloadLadder());
+    }
+
+    /**
+     * Enable (true) or disable (false) the module for the <b>next boot</b> via the
+     * Magisk {@code disable} marker file. Independent of the running module.
+     */
+    @NonNull
+    Result setBootEnabled(boolean on) {
+        var r = on
+            ? runList("rm", "-f", DISABLE_FILE)
+            : run("touch %s", DISABLE_FILE);
+        return r.isSuccess()
+            ? Result.ok(on ? "enable-boot" : "disable-boot")
+            : Result.failed("disable-file", reason(r, "disable"));
+    }
+
+    /**
+     * Fill the pool toward its target with acquire algorithm {@code mode}
+     * (1 = original scan, 2 = migrate + system reclaim, 3 = migrate + per-block
+     * evict). Prefers the migrating {@code acquire} knob; on any failure (v6 has no
+     * such knob, or -ENOSYS where this kernel can't run that mode) degrades to
+     * {@code manual_refill}. Fire-and-return — poll {@link #state()} for completion.
+     */
+    @NonNull
+    Result acquire(int mode) {
+        // Drop the whole VM page cache + reclaimable slab first so more 2 MB windows
+        // are already free (or trivially assemblable) before the sweep - the module's
+        // own acquire_drop_slab covers slab only, not the page cache. Best-effort: a
+        // failed drop doesn't block the acquire.
+        run("echo 3 > /proc/sys/vm/drop_caches");
+        // Walk the requested mode down to the gentlest migrating mode: the module
+        // returns -ENOSYS for a mode whose symbols didn't resolve (e.g. v3 on a
+        // kernel lacking the folio/reclaim symbols, or v2 with no alloc_contig_range),
+        // so try mode -> ... -> 1 before giving up on migration and falling back to a
+        // plain manual_refill. Any acquire mode is pollable via acquire_active, so the
+        // winning impl is uniformly "acquire" (the running mode surfaces in acquire_mode).
+        for (int m = mode; m >= 1; m--) {
+            if (writeKnob("acquire", Integer.toString(m)).ok()) {
+                // impl names the actual migrating mode that ran ("v1".."v3");
+                // degraded when it's below what was asked for.
+                return Result.ok("v" + m, m != mode);
+            }
+        }
+        var refill = writeKnob("manual_refill", "1");
+        return refill.ok()
+            ? Result.ok("manual_refill", true)
+            : Result.unsupported("no acquire / manual_refill knob");
+    }
+
+    /** Interrupt a running acquire (write 0 to the knob). No worker exists on v6. */
+    @NonNull
+    Result stopAcquire() {
+        var t = writeKnob("acquire", "0");
+        return t.ok() ? Result.ok("acquire") : Result.unsupported(t.error);
+    }
+
+    /* ================================================================== */
+    /*  Ladder plumbing (internal)                                        */
+    /* ================================================================== */
+
+    /** insmod ladder: both keys, then {@code pool_want=} (v7), {@code pool_target=} (v6), bare. */
+    private enum LoadImpl { BOTH, POOL_WANT, POOL_TARGET, BARE }
+
+    /** Marker for single-implementation actions. */
+    private enum Only { DEFAULT }
+
+    private static <I, V> boolean rung(
+        @Nullable I only, @NonNull List<Try<I, V>> log,
+        @NonNull I impl, @NonNull Supplier<Try<I, V>> action
+    ) {
+        if (only != null && only != impl) return false;
+        var t = action.get();
+        log.add(t);
+        return t.ok();
+    }
+
+    /** Collapse a finished ladder trace into a {@link Result}. */
+    @NonNull
+    private static <I, V> Result collapse(@NonNull List<Try<I, V>> log) {
+        if (log.isEmpty()) return Result.failed(null, "no attempt");
+        var last = log.get(log.size() - 1);
+        boolean degraded = log.size() > 1;   // earlier rungs failed before this won
+        return last.ok()
+            ? Result.ok(String.valueOf(last.impl), degraded)
+            : Result.failed(String.valueOf(last.impl), last.error);
+    }
+
+    @NonNull
+    private static Usage usageOf(@NonNull List<Try<Source, List<UsageEntry>>> log) {
+        var last = log.isEmpty() ? null : log.get(log.size() - 1);
+        if (last != null && last.ok() && last.value != null) {
+            return new Usage(last.value, last.impl);
+        }
+        return new Usage(new ArrayList<>(), Source.SCAN);
+    }
+
+    /* ================================================================== */
+    /*  Module lifecycle ladders                                          */
+    /* ================================================================== */
+
+    @NonNull
+    private List<Try<LoadImpl, Void>> loadLadder(long pages) {
+        var log = new ArrayList<Try<LoadImpl, Void>>();
+        var w = "pool_want=\"" + pages + "\"";
+        var t = "pool_target=\"" + pages + "\"";
+        // Pass BOTH size params first. A lenient kernel silently ignores the param
+        // the module doesn't have, so it still gets the right size via the one it
+        // does - pool_want (v7) or pool_target (v6). This is essential: on a v6
+        // module `pool_want=` alone loads fine (returns 0) but is ignored, leaving
+        // the pool at its compiled 1024 default - the ladder must not stop there.
+        // Strict kernels reject the unknown param, so fall back to each key alone,
+        // then a bare (default-size) load.
+        if (rung(null, log, LoadImpl.BOTH,
+            () -> insmod(LoadImpl.BOTH, w + " " + t))) return log;
+        if (rung(null, log, LoadImpl.POOL_WANT,
+            () -> insmod(LoadImpl.POOL_WANT, w))) return log;
+        if (rung(null, log, LoadImpl.POOL_TARGET,
+            () -> insmod(LoadImpl.POOL_TARGET, t))) return log;
+        rung(null, log, LoadImpl.BARE, () -> insmod(LoadImpl.BARE, null));
+        return log;
+    }
+
+    private static Try<LoadImpl, Void> insmod(@NonNull LoadImpl impl, @Nullable String arg) {
+        var r = (arg == null)
+            ? run("insmod \"%s\"", KO_PATH)
+            : run("insmod \"%s\" %s", KO_PATH, arg);
+        return r.isSuccess() ? Try.ok(impl, null) : Try.fail(impl, reason(r, "insmod"));
+    }
+
+    @NonNull
+    private List<Try<Only, Void>> unloadLadder() {
+        var log = new ArrayList<Try<Only, Void>>();
+        rung(null, log, Only.DEFAULT, () -> {
+            var r = runList("rmmod", "gh_hugepage_reserve");
+            return r.isSuccess()
+                ? Try.<Only, Void>ok(Only.DEFAULT, null)
+                : Try.<Only, Void>fail(Only.DEFAULT, reason(r, "rmmod"));
+        });
+        return log;
+    }
+
+    /** The configured target from settings.prop (pool_want, legacy pool_target). */
+    private long savedWantPages() {
+        if (existsSticky(SETTINGS_PROP)) {
+            var s = parseProp(safeRead(SETTINGS_PROP));
+            var v = s.getOrDefault("pool_want", s.get("pool_target"));
+            if (v != null) try {
+                return Long.parseLong(v.trim());
+            } catch (NumberFormatException ignored) {
+            }
+        }
+        return DEFAULT_WANT_PAGES;
+    }
+
+    /* ================================================================== */
+    /*  Shell helpers                                                     */
+    /* ================================================================== */
+
+    /** Write a knob; returns a bare success/fail Try (single-impl call sites). */
+    private static Try<Only, Void> writeKnob(@NonNull String knob, @NonNull String value) {
+        return writeKnobTry(Only.DEFAULT, knob, value);
+    }
+
+    /** Write a knob under the given impl marker; the Try carries the errno reason. */
+    private static <I> Try<I, Void> writeKnobTry(
+        @NonNull I impl, @NonNull String knob, @NonNull String value
+    ) {
+        var r = run("echo %s > %s/%s", value, SYSFS_PARAMS, knob);
+        return r.isSuccess()
+            ? Try.<I, Void>ok(impl, null)
+            : Try.<I, Void>fail(impl, reason(r, knob));
+    }
+
+    /** Persist the target to settings.prop under both keys (whichever loader reads). */
+    private static Try<Only, Void> writeSettings(long pages) {
+        var a = run("echo 'pool_want=%s' > %s", pages, SETTINGS_PROP);
+        var b = run("echo 'pool_target=%s' >> %s", pages, SETTINGS_PROP);
+        return (a.isSuccess() && b.isSuccess())
+            ? Try.<Only, Void>ok(Only.DEFAULT, null)
+            : Try.<Only, Void>fail(Only.DEFAULT, reason(a.isSuccess() ? b : a, "settings.prop"));
+    }
+
+    @NonNull
+    private static String reason(@NonNull RunResult r, @NonNull String what) {
+        var msg = r.getErrString().trim();
+        if (msg.isEmpty()) msg = r.getOutString().trim();
+        if (msg.isEmpty()) msg = "exit " + r.getCode();
+        return what + ": " + msg;
+    }
+
+    /**
+     * {@code test -e} that retries once on a negative. A lone root {@code test -e}
+     * can flake under load; retrying only the negative absorbs that transient miss
+     * without caching a possibly-stale positive.
+     */
+    private static boolean existsSticky(@NonNull String path) {
+        return shellCheckExists(path) || shellCheckExists(path);
+    }
+
+    @NonNull
+    private static String safeRead(@NonNull String path) {
         try {
-            raw = run(
-                "for f in base served_summary pool_want acquire manual_refill; do "
-                    + "if [ \"$f\" = base ]; then t=%1$s; else t=%2$s/$f; fi; "
-                    + "[ -e \"$t\" ] && echo 1 || echo 0; done",
-                SYSFS_BASE, SYSFS_PARAMS
-            ).getOutString();
+            return shellReadFile(path);
         } catch (Exception e) {
-            raw = "";
+            return "";
         }
-        var f = raw.split("\n");
-        boolean loaded = flag(f, 0);
-        boolean served = flag(f, 1);
-        return new Caps(loaded, loaded && served, flag(f, 2), flag(f, 3), flag(f, 4));
     }
 
-    private static boolean flag(@NonNull String[] lines, int i) {
-        return i < lines.length && "1".equals(lines[i].trim());
+    @NonNull
+    private static Map<String, String> parseProp(@NonNull String raw) {
+        var map = new LinkedHashMap<String, String>();
+        for (var line : raw.split("\n")) {
+            var parts = line.split("=", 2);
+            if (parts.length == 2) map.put(parts[0].trim(), parts[1].trim());
+        }
+        return map;
+    }
+
+    private static long getLong(@NonNull Map<String, String> m, @NonNull String key, long def) {
+        var v = m.get(key);
+        if (v == null) return def;
+        try {
+            return Long.parseLong(v.trim());
+        } catch (NumberFormatException e) {
+            return def;
+        }
     }
 
     /* ================================================================== */
-    /*  VM name resolution (daemon vm_list)                               */
+    /*  Pool target (v6 read-only knob, cached)                           */
+    /* ================================================================== */
+
+    private volatile long poolTargetCache = -1;
+    private volatile long poolTargetAtMs = Long.MIN_VALUE;
+
+    /**
+     * v6 grow target from the read-only {@code pool_target} param, cached with a
+     * short TTL (static until the module is reloaded). Returns -1 if unavailable.
+     */
+    private long poolTarget() {
+        long now = SystemClock.elapsedRealtime();
+        if (poolTargetAtMs != Long.MIN_VALUE && now - poolTargetAtMs < STAT_TTL_MS) {
+            return poolTargetCache;
+        }
+        long v = -1;
+        try {
+            var t = shellReadFile(pathJoin(SYSFS_PARAMS, "pool_target")).trim();
+            if (!t.isEmpty()) v = Long.parseLong(t);
+        } catch (Exception ignored) {
+        }
+        poolTargetCache = v;
+        poolTargetAtMs = now;
+        return v;
+    }
+
+    /* ================================================================== */
+    /*  Usage sources (KO attribution / THP scan)                         */
+    /* ================================================================== */
+
+    private Try<Source, List<UsageEntry>> usageFromKo() {
+        if (!koAvailable()) return Try.fail(Source.KO, "KO attribution knobs absent");
+        try {
+            // Reconcile, then read reconciled per-owner live page counts.
+            run("echo 1 > %s/reconcile", SYSFS_PARAMS);
+            var livePages = new LinkedHashMap<Integer, Long>();
+            for (var ln : safeRead(pathJoin(SYSFS_PARAMS, "served_summary")).split("\n")) {
+                ln = ln.trim();
+                if (!ln.startsWith("owner ")) continue;
+                int pid = -1;
+                long pages = 0;
+                for (var tok : ln.split("\\s+")) {
+                    if (tok.startsWith("pid=")) pid = parseIntSafe(tok.substring(4));
+                    else if (tok.startsWith("pages=")) pages = parseLongSafe(tok.substring(6));
+                }
+                if (pid > 0) livePages.put(pid, pages);
+            }
+            var owners = parseOwners(safeRead(SYSFS_OWNERS));
+            var pids = new ArrayList<Integer>();
+            for (var o : owners) pids.add(o.pid);
+            var procInfo = readProcInfo(pids);
+
+            var out = new ArrayList<UsageEntry>();
+            for (var o : owners) {
+                var info = procInfo.get(o.pid);
+                char state = info != null ? info.state : '?';
+                boolean alive = info != null && info.alive;
+                // Occupancy = reconciled served count (not the /proc scan; /proc is
+                // only used for run state + liveness).
+                Long served = livePages.get(o.pid);
+                out.add(new UsageEntry(o.pid, o.comm, served != null ? served : 0L, state, alive));
+            }
+            out.sort((a, b) -> Long.compare(b.pages, a.pages));
+            return Try.ok(Source.KO, out);
+        } catch (Exception e) {
+            return Try.fail(Source.KO, "KO read: " + e.getMessage());
+        }
+    }
+
+    private Try<Source, List<UsageEntry>> usageFromScan() {
+        // Running VMs (pid -> name) come from the daemon; scan only those, not all
+        // of /proc (system-wide THP is noise unrelated to the pool).
+        var vmMap = vmNames(false);
+        if (vmMap.isEmpty()) return Try.fail(Source.SCAN, "no running VM pids");
+        var procInfo = readProcInfo(vmMap.keySet());
+
+        var out = new ArrayList<UsageEntry>();
+        for (var e : vmMap.entrySet()) {
+            int pid = e.getKey();
+            var info = procInfo.get(pid);
+            char state = info != null ? info.state : '?';
+            long thpKb = info != null ? info.thpKb : -1;
+            long pages = thpKb > 0 ? thpKb / KB_PER_PAGE : 0;
+            boolean alive = info != null && info.alive;
+            out.add(new UsageEntry(pid, e.getValue(), pages, state, alive));
+        }
+        out.sort((a, b) -> Long.compare(b.pages, a.pages));
+        return Try.ok(Source.SCAN, out);
+    }
+
+    /* ---- vm_owners parsing ("pid=<n> served=<n> comm=<rest>") ---- */
+
+    private static final class Owner {
+        final int pid;
+        @NonNull final String comm;
+
+        Owner(int pid, @NonNull String comm) {
+            this.pid = pid;
+            this.comm = comm;
+        }
+    }
+
+    @NonNull
+    private static List<Owner> parseOwners(@NonNull String raw) {
+        var list = new ArrayList<Owner>();
+        for (var line : raw.split("\n")) {
+            line = line.trim();
+            if (line.isEmpty()) continue;
+            int pid = -1;
+            String comm = "?";
+            int commIdx = line.indexOf("comm=");
+            if (commIdx >= 0) comm = line.substring(commIdx + 5).trim();
+            for (var tok : line.split("\\s+")) {
+                if (tok.startsWith("pid=")) pid = parseIntSafe(tok.substring(4));
+            }
+            if (pid > 0) list.add(new Owner(pid, comm));
+        }
+        return list;
+    }
+
+    private static int parseIntSafe(@NonNull String s) {
+        try {
+            return Integer.parseInt(s.trim());
+        } catch (NumberFormatException e) {
+            return -1;
+        }
+    }
+
+    private static long parseLongSafe(@NonNull String s) {
+        try {
+            return Long.parseLong(s.trim());
+        } catch (NumberFormatException e) {
+            return 0;
+        }
+    }
+
+    /* ================================================================== */
+    /*  VM name resolution (daemon vm_list), cached                       */
     /* ================================================================== */
 
     @NonNull
@@ -153,10 +702,8 @@ private static boolean flag(@NonNull String[] lines, int i) {
     /**
      * Best-effort pid&rarr;VM-name map from the daemon, cached for
      * {@link #VM_TTL_MS}. Within the TTL the cached map is returned without
-     * contacting the daemon, so the refresh loop no longer blocks up to 2s every
-     * tick. On a fetch that times out the last known map is kept (labels stay
-     * stable instead of blanking to raw pids). Pass {@code force = true} to
-     * bypass the cache (e.g. right after killing a process).
+     * contacting the daemon. On a timeout the last known map is kept (labels stay
+     * stable instead of blanking to raw pids). Pass {@code force} to bypass the cache.
      */
     @NonNull
     Map<Integer, String> vmNames(boolean force) {
@@ -171,16 +718,6 @@ Map<Integer, String> vmNames(boolean force) {
         return vmNames;
     }
 
-    /**
-     * One blocking daemon {@code vm_list} round-trip (bounded to
-     * {@link #DAEMON_TIMEOUT_S}). Returns {@code null} on timeout/error so the
-     * caller can distinguish "no answer" from a genuine empty VM list.
-     *
-     * <p>The map is published through an {@link AtomicReference} set inside the
-     * callback, so the caller either sees a fully-built map or {@code null} —
-     * never a half-populated one, even when the response lands right at the
-     * timeout boundary.
-     */
     @Nullable
     private Map<Integer, String> fetchVmMap() {
         var result = new AtomicReference<Map<Integer, String>>(null);
@@ -291,86 +828,4 @@ Map<Integer, ProcInfo> readProcInfo(@NonNull Collection<Integer> pids) {
         if (curPid > 0) map.put(curPid, new ProcInfo(state, thp, alive));
         return map;
     }
-
-    /**
-     * Per-VM THP occupancy in <b>pages</b> for the given pids, as {pid, pages}
-     * rows, dropping any VM with under one full huge page. Used by the status
-     * screen's scan-fallback bar; a thin wrapper over {@link #readProcInfo}.
-     */
-    @NonNull
-    List<long[]> scanThpPages(@NonNull Collection<Integer> pids) {
-        var result = new ArrayList<long[]>();
-        var procInfo = readProcInfo(pids);
-        for (var pid : pids) {
-            var info = procInfo.get(pid);
-            if (info == null || info.thpKb <= 0) continue;
-            long pages = info.thpKb / KB_PER_PAGE;
-            if (pages > 0) result.add(new long[]{pid, pages});
-        }
-        return result;
-    }
-
-    /* ================================================================== */
-    /*  Pool stats                                                        */
-    /* ================================================================== */
-
-    private volatile long poolTargetCache = -1;
-    private volatile long poolTargetAtMs = Long.MIN_VALUE;
-
-    /**
-     * v6 grow target from the read-only {@code pool_target} param, cached with a
-     * short TTL (it is static until the module is reloaded / the app restarts).
-     * Returns -1 if unavailable. This is what stops the v6 refresh loop from
-     * re-{@code cat}-ing the same static file every tick.
-     */
-    private long poolTarget() {
-        long now = SystemClock.elapsedRealtime();
-        if (poolTargetAtMs != Long.MIN_VALUE && now - poolTargetAtMs < CAPS_TTL_MS) {
-            return poolTargetCache;
-        }
-        long v = -1;
-        try {
-            var t = shellReadFile(pathJoin(SYSFS_PARAMS, "pool_target")).trim();
-            if (!t.isEmpty()) v = Long.parseLong(t);
-        } catch (Exception ignored) {
-        }
-        poolTargetCache = v;
-        poolTargetAtMs = now;
-        return v;
-    }
-
-    /**
-     * Read the pool counters from {@code refill_stat}.
-     * Returns {@code {total, avail, want, acquiring, served}} in pages, or
-     * {@code null} if the module isn't loaded / stats are unreadable. {@code want}
-     * falls back to v6's cached {@code pool_target}, then to capacity.
-     */
-    @Nullable
-    long[] readPoolPages() {
-        try {
-            if (!shellCheckExists(SYSFS_BASE)) return null;
-            var raw = shellReadFile(pathJoin(SYSFS_PARAMS, "refill_stat"));
-            long total = -1, avail = 0, want = -1, acquiring = 0, served = 0;
-            for (var line : raw.split("\n")) {
-                line = line.trim();
-                if (line.startsWith("pool_total=")) {
-                    total = Long.parseLong(line.substring(11).trim());
-                } else if (line.startsWith("pool_avail=")) {
-                    avail = Long.parseLong(line.substring(11).trim());
-                } else if (line.startsWith("pool_want=")) {
-                    want = Long.parseLong(line.substring(10).trim());
-                } else if (line.startsWith("acquire_active=")) {
-                    acquiring = Long.parseLong(line.substring(15).trim());
-                } else if (line.startsWith("served=")) {
-                    served = Long.parseLong(line.substring(7).trim());
-                }
-            }
-            if (total < 0) return null;
-            if (want < 0) want = poolTarget();   // v6: separate read-only knob
-            if (want < 0) want = total;
-            return new long[]{total, avail, want, acquiring, served};
-        } catch (Exception e) {
-            return null;
-        }
-    }
 }
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/hugepage/HugePageProcessActivity.java b/app/src/main/java/cn/classfun/droidvm/ui/hugepage/HugePageProcessActivity.java
index 1f1bc9e00..1bdce4994 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/hugepage/HugePageProcessActivity.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/hugepage/HugePageProcessActivity.java
@@ -9,8 +9,6 @@
 import static cn.classfun.droidvm.lib.utils.ProcessUtils.SIGKILL;
 import static cn.classfun.droidvm.lib.utils.ProcessUtils.SIGTERM;
 import static cn.classfun.droidvm.lib.utils.ProcessUtils.shellKillProcess;
-import static cn.classfun.droidvm.lib.utils.RunUtils.run;
-import static cn.classfun.droidvm.lib.utils.StringUtils.pathJoin;
 import static cn.classfun.droidvm.lib.utils.ThreadUtils.runOnPool;
 
 import android.os.Bundle;
@@ -34,9 +32,7 @@
 import com.google.android.material.dialog.MaterialAlertDialogBuilder;
 
 import java.util.ArrayList;
-import java.util.HashMap;
 import java.util.List;
-import java.util.Map;
 
 import cn.classfun.droidvm.R;
 import cn.classfun.droidvm.lib.size.SizeUtils;
@@ -50,9 +46,6 @@
 public final class HugePageProcessActivity extends AppCompatActivity
     implements HugePageProcessAdapter.Listener {
     private static final String TAG = "HugePageProcessActivity";
-    private static final String SYSFS_BASE = "/sys/module/gh_hugepage_reserve";
-    private static final String SYSFS_PARAMS = pathJoin(SYSFS_BASE, "parameters");
-    private static final String SYSFS_OWNERS = pathJoin(SYSFS_PARAMS, "vm_owners");
     private static final long REFRESH_INTERVAL_MS = 2000;
     /** Acquire progress poll: ~500 ms ticks, capped so a wedged run can't poll forever. */
     private static final long ACQUIRE_POLL_MS = 500;
@@ -73,6 +66,7 @@ public final class HugePageProcessActivity extends AppCompatActivity
     private boolean koWasPresent = true;
     private boolean firstRefresh = true;
     private volatile boolean acquireWatching = false;
+    private volatile int acquireWatchMode = -1;   // mode we optimistically started
     private MaterialToolbar toolbar;
     private RecyclerView recyclerView;
     private TextView tvEmpty;
@@ -195,55 +189,19 @@ private void refresh() {
         }
         runOnPool(() -> {
             boolean dark = HugePageColor.isDark(this);
-            // KO attribution availability comes from the cached capability probe
-            // (re-probed at most every few seconds, with a retry on a negative),
-            // so a single flaky root `test -e` can't flap the whole view between
-            // KO and scan every tick. Absent -> force scan, disable the KO entry.
-            // A present-but-empty pool (no VM) keeps KO available ("no VM").
-            boolean koNow = model.caps(false).koAttribution;
-            boolean useScan = scanMode || !koNow;
-
-            List<HugePageProcess> list = new ArrayList<>();
-            String emptyText;
-            if (useScan) {
-                // Scan mode: system-wide THP (Anon + Shmem), no module needed.
-                try {
-                    list = scanProc(dark);
-                } catch (Exception e) {
-                    Log.w(TAG, "Scan failed", e);
-                }
-                emptyText = getString(R.string.hugepage_proc_scan_empty);
-            } else {
-                // Reconcile the served-page table on every query, then read the
-                // reconciled per-owner live page counts.
-                var livePages = new HashMap<Integer, Long>();
-                try {
-                    run("echo 1 > %s/reconcile", SYSFS_PARAMS);
-                    var sum = shellReadFile(pathJoin(SYSFS_PARAMS, "served_summary"));
-                    for (var ln : sum.split("\n")) {
-                        ln = ln.trim();
-                        if (!ln.startsWith("owner ")) continue;
-                        int pid = -1;
-                        long pages = 0;
-                        for (var tok : ln.split("\\s+")) {
-                            if (tok.startsWith("pid=")) pid = Integer.parseInt(tok.substring(4));
-                            else if (tok.startsWith("pages=")) pages = Long.parseLong(tok.substring(6));
-                        }
-                        if (pid > 0) livePages.put(pid, pages);
-                    }
-                } catch (Exception e) {
-                    Log.w(TAG, "reconcile/served_summary unavailable (old .ko?)", e);
-                }
-                try {
-                    var owners = parseOwners(shellReadFile(SYSFS_OWNERS));
-                    if (!owners.isEmpty()) list = buildFromOwners(owners, dark, livePages);
-                } catch (Exception e) {
-                    Log.w(TAG, "Failed to collect hugepage owners", e);
-                }
-                // Reached only when the KO API is present (else we auto-switched
-                // to scan above), so an empty list genuinely means "no VM".
-                emptyText = getString(R.string.hugepage_proc_owner_empty);
-            }
+            // Pull the usage list through the degradation ladder: honour the user's
+            // scan preference by pinning SCAN, else auto (KO, degrading to a THP scan
+            // when the module's attribution knobs are absent). The winning impl says
+            // what's actually shown; koAvailable() says whether KO *could* be used,
+            // to keep the mode menu + toast meaningful even while showing a scan.
+            var usage = model.usage(scanMode ? HugePageModel.Source.SCAN : null);
+            boolean koNow = model.koAvailable();
+            boolean useScan = usage.source != HugePageModel.Source.KO;
+
+            List<HugePageProcess> list = buildFromEntries(usage.entries, dark);
+            String emptyText = getString(useScan
+                ? R.string.hugepage_proc_scan_empty
+                : R.string.hugepage_proc_owner_empty);
 
             // Three-value model: hold (pages in pool) + traced (sum of all
             // applied/served processes) + waiting-to-acquire = want.
@@ -255,16 +213,11 @@ private void refresh() {
             //             orphaned (served-but-owner-gone) pages alike.
             long tracedKb = 0;
             for (var r : list) if (r.thpKb > 0) tracedKb += r.thpKb;
-            long holdKb, wantKb;
-            var pool = model.readPoolPages();
-            boolean kernelAcquiring = pool != null && pool.length >= 4 && pool[3] != 0;
-            if (pool != null) {
-                holdKb = pool[1] * 2048;   // avail
-                wantKb = pool[2] * 2048;   // want
-            } else {
-                holdKb = 0;
-                wantKb = tracedKb;
-            }
+            var snap = model.state();
+            boolean kernelAcquiring = snap.acquiring;
+            int kernelMode = snap.acquireMode;
+            long holdKb = snap.loaded ? snap.free * 2048 : 0;                // avail
+            long wantKb = snap.loaded ? snap.targetIdeal * 2048 : tracedKb;  // want
             long deficitKb = wantKb - holdKb - tracedKb;
             if (deficitKb > 0) {
                 list.add(new HugePageProcess(
@@ -279,6 +232,7 @@ private void refresh() {
             var fHold = holdKb;
             var fWant = wantKb;
             var fAcquiring = kernelAcquiring;
+            var fMode = kernelMode;
             runOnUiThread(() -> {
                 koPresent = fKoNow;
                 // Toast only on the present->absent edge while the user wants KO,
@@ -292,114 +246,33 @@ private void refresh() {
                 // (right after inflateMenu, before the menu is laid out) doesn't
                 // stick, leaving the radio showing the wrong mode.
                 updateModeChecked();
-                adapter.setAcquiring(fAcquiring || acquireWatching);
+                int uiMode = fAcquiring ? fMode
+                    : (acquireWatching ? acquireWatchMode : -1);
+                adapter.setAcquireState(fAcquiring || acquireWatching, uiMode);
                 showResult(finalList, fTraced, fHold, fWant, finalEmpty);
             });
         });
     }
 
+    /** Map ladder usage entries to display rows (color + VM-name enrichment). */
     @NonNull
-    private List<HugePageProcess> buildFromOwners(
-        @NonNull List<Owner> owners, boolean dark,
-        @NonNull Map<Integer, Long> livePages
+    private List<HugePageProcess> buildFromEntries(
+        @NonNull List<HugePageModel.UsageEntry> entries, boolean dark
     ) {
-        var pids = new ArrayList<Integer>();
-        for (var o : owners) pids.add(o.pid);
-        var procInfo = model.readProcInfo(pids);
-
-        // Best-effort map pid -> VM name (only running VMs have a live pid).
-        var vmMap = model.vmNames(false);
-
-        var result = new ArrayList<HugePageProcess>();
-        for (var o : owners) {
-            var info = procInfo.get(o.pid);
-            char state = info != null ? info.state : '?';
-            boolean alive = info != null && info.alive;
-            // Occupancy = traced (reconciled served-page count for this owner),
-            // not the /proc THP scan. /proc is only used for state + liveness.
-            Long served = livePages.get(o.pid);
-            long tracedKb = (served != null ? served : 0L) * 2048;
-            result.add(new HugePageProcess(
-                o.pid, o.comm, -1, tracedKb, state,
-                vmMap.get(o.pid), alive, HugePageColor.forPid(o.pid, dark),
-                false, false));
-        }
-        result.sort((a, b) -> Long.compare(b.thpKb, a.thpKb));
-        return result;
-    }
-
-    /**
-     * VM-only "scan": list the daemon's running VM processes and their actual
-     * THP occupancy (AnonHugePages + ShmemPmdMapped) from smaps. We deliberately
-     * do NOT scan all of /proc - system-wide THP (launchers, etc.) is noise that
-     * has nothing to do with the reserve pool. Works without the kernel module
-     * (ground-truth occupancy straight from each VM's smaps).
-     */
-    @NonNull
-    private List<HugePageProcess> scanProc(boolean dark) {
-        // Running VMs (pid -> name) come from the daemon.
+        // Best-effort pid -> VM name (running VMs only); for KO rows this labels
+        // the process, for scan rows it echoes the name the entry already carries.
         var vmMap = model.vmNames(false);
-        if (vmMap.isEmpty()) return new ArrayList<>();
-
-        var procInfo = model.readProcInfo(vmMap.keySet());
-
         var result = new ArrayList<HugePageProcess>();
-        for (var e : vmMap.entrySet()) {
-            int pid = e.getKey();
-            var info = procInfo.get(pid);
-            char state = info != null ? info.state : '?';
-            long thp = info != null ? info.thpKb : -1;
-            boolean alive = info != null && info.alive;
+        for (var e : entries) {
             result.add(new HugePageProcess(
-                pid, e.getValue(), -1, thp, state, e.getValue(), alive,
-                HugePageColor.forPid(pid, dark), false, false));
+                e.pid, e.comm, -1, e.pages * 2048, e.state,
+                vmMap.getOrDefault(e.pid, e.comm), e.alive,
+                HugePageColor.forPid(e.pid, dark), false, false));
         }
         result.sort((a, b) -> Long.compare(b.thpKb, a.thpKb));
         return result;
     }
 
-    private static final class Owner {
-        final int pid;
-        final String comm;
-        final long served;
-
-        Owner(int pid, String comm, long served) {
-            this.pid = pid;
-            this.comm = comm;
-            this.served = served;
-        }
-    }
-
-    @NonNull
-    private List<Owner> parseOwners(@NonNull String raw) {
-        var list = new ArrayList<Owner>();
-        for (var line : raw.split("\n")) {
-            line = line.trim();
-            if (line.isEmpty()) continue;
-            // Format: pid=<n> served=<n> comm=<rest>
-            int pid = -1;
-            long served = 0;
-            String comm = "?";
-            int commIdx = line.indexOf("comm=");
-            if (commIdx >= 0) comm = line.substring(commIdx + 5).trim();
-            for (var tok : line.split("\\s+")) {
-                if (tok.startsWith("pid=")) {
-                    try {
-                        pid = Integer.parseInt(tok.substring(4));
-                    } catch (NumberFormatException ignored) {
-                    }
-                } else if (tok.startsWith("served=")) {
-                    try {
-                        served = Long.parseLong(tok.substring(7));
-                    } catch (NumberFormatException ignored) {
-                    }
-                }
-            }
-            if (pid > 0) list.add(new Owner(pid, comm, served));
-        }
-        return list;
-    }
-
     private void showResult(
         @NonNull List<HugePageProcess> list, long usedKb, long availKb,
         long wantKb, @NonNull String emptyText
@@ -491,64 +364,62 @@ private void doKill(@NonNull HugePageProcess proc, int signal) {
     }
 
     @Override
-    public void onAcquire() {
+    public void onAcquire(int mode) {
         if (acquireWatching) return;            // already polling a run
         Toast.makeText(this, R.string.hugepage_proc_acquire_running, LENGTH_SHORT).show();
         acquireWatching = true;
-        adapter.setAcquiring(true);             // immediate spinner feedback
+        acquireWatchMode = mode;                // remember which we just started
+        adapter.setAcquireState(true, mode);    // immediate spinner feedback
         // Fire-and-poll on a dedicated thread so the shared pool executor (and
         // thus the periodic refresh that animates the climbing numbers) is never
         // blocked. The kernel 'acquire' write returns immediately; the worker
         // migrates in the background and we watch acquire_active for completion.
         new Thread(() -> {
-            var caps = model.caps(false);
-            boolean v7 = caps.hasAcquire;
-            boolean triggered = false;
-            try {
-                if (v7) {
-                    triggered = run("echo 1 > %s/acquire", SYSFS_PARAMS).isSuccess();
-                } else if (caps.hasManualRefill) {
-                    triggered = run("echo 1 > %s/manual_refill", SYSFS_PARAMS).isSuccess();
-                }
-            } catch (Exception e) {
-                Log.w(TAG, "acquire trigger failed", e);
-            }
+            // Fill the pool via the acquire ladder: the migrating 'acquire' knob,
+            // degrading to 'manual_refill' on any failure (e.g. -ENOSYS on kernels
+            // that can't migrate). The trace's last entry says what actually ran.
+            var res = model.acquire(mode);
+            boolean triggered = res.ok();
+            // Only a migrating acquire mode exposes acquire_active to poll; the
+            // manual_refill fallback is fire-and-forget with no progress to watch.
+            boolean migrating = triggered && !"manual_refill".equals(res.impl);
+            final boolean degraded = res.degraded;      // ran below the requested mode
+            final String actualImpl = res.impl != null ? res.impl : "";
             if (!triggered) {
                 acquireWatching = false;
                 runOnUiThread(() -> Toast.makeText(this,
                     R.string.hugepage_refill_failed, LENGTH_SHORT).show());
                 return;
             }
-            if (!v7) {
-                // v6 (manual_refill): an async refill with no acquire_active to
-                // poll and no served=/pool_want to report a precise got/want.
-                // Just trigger it and let the periodic refresh animate the bar.
+            if (!migrating) {
+                // Fell all the way to manual_refill: async, no acquire_active/served
+                // to poll. Name the fallback (it is itself the degradation).
                 acquireWatching = false;
                 runOnUiThread(() -> {
-                    Toast.makeText(this, R.string.hugepage_proc_acquire_done,
-                        LENGTH_SHORT).show();
+                    Toast.makeText(this,
+                        getString(R.string.hugepage_acquire_degraded, actualImpl),
+                        LENGTH_LONG).show();
                     refresh();
                 });
                 return;
             }
-            // v7: poll until the worker clears acquire_active. Each tick nudges
+            // Migrating: poll until the worker clears acquire_active. Each tick nudges
             // the UI to re-read refill_stat so the count visibly climbs.
-            long[] pages = null;
-            for (int i = 0; i < ACQUIRE_POLL_MAX; i++) {
+            boolean running = true;
+            for (int i = 0; i < ACQUIRE_POLL_MAX && running; i++) {
                 try { Thread.sleep(ACQUIRE_POLL_MS); } catch (InterruptedException ignored) {}
-                pages = model.readPoolPages();  // {total, avail, want, acquiring, served}
-                runOnUiThread(this::refresh); // animate climbing numbers
-                if (pages == null || pages.length < 5 || pages[3] == 0) break;
+                runOnUiThread(this::refresh);   // animate climbing numbers (reads full state)
+                running = model.acquiring();    // cheap acquire_active-only probe
             }
-            var finalPages = pages;
+            var finalSnap = model.state();      // one full read for the final got/want
             acquireWatching = false;
             runOnUiThread(() -> {
-                if (finalPages != null && finalPages.length >= 5) {
+                if (finalSnap != null && finalSnap.loaded) {
                     // Achieved = owned + traced (pool_avail + served), NOT
                     // pool_total: after a shrink that left served pages out,
                     // pool_total under-counts the pages VMs already hold.
-                    long got = finalPages[1] + finalPages[4];
-                    long want = finalPages[2] >= 0 ? finalPages[2] : got;
+                    long got = finalSnap.free + finalSnap.lent;
+                    long want = finalSnap.targetIdeal;
                     String msg = got >= want
                         ? getString(R.string.hugepage_proc_acquire_full,
                             fmtPages(want))
@@ -559,20 +430,26 @@ public void onAcquire() {
                     Toast.makeText(this, R.string.hugepage_proc_acquire_done,
                         LENGTH_SHORT).show();
                 }
+                // Requested a higher mode than could run (e.g. v3 -> v2) -> name it.
+                if (degraded) Toast.makeText(this,
+                    getString(R.string.hugepage_acquire_degraded, actualImpl),
+                    LENGTH_LONG).show();
                 refresh();
             });
         }, "hugepage-acquire").start();
     }
 
+    /** Long-press an acquire button: explain the mode, with a Run/Cancel choice. */
+    @Override
+    public void onAcquireInfo(int mode) {
+        HugePageActivity.showAcquireInfo(this, mode, () -> onAcquire(mode));
+    }
+
     /** Tapping the acquire spinner stops the run; the poll loop then finishes. */
     @Override
     public void onStopAcquire() {
         runOnPool(() -> {
-            try {
-                run("echo 0 > %s/acquire", SYSFS_PARAMS);
-            } catch (Exception e) {
-                Log.w(TAG, "stop acquire failed", e);
-            }
+            model.stopAcquire();
             runOnUiThread(this::refresh);
         });
     }
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/hugepage/HugePageProcessAdapter.java b/app/src/main/java/cn/classfun/droidvm/ui/hugepage/HugePageProcessAdapter.java
index 88aee65ac..1f41f3fa9 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/hugepage/HugePageProcessAdapter.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/hugepage/HugePageProcessAdapter.java
@@ -32,7 +32,12 @@ public interface Listener {
 
         void onShowStack(@NonNull HugePageProcess proc);
 
-        void onAcquire();
+        /** @param mode acquire algorithm: 2 = migrate + system reclaim,
+         *              3 = migrate + per-block evict to zram. */
+        void onAcquire(int mode);
+
+        /** Long-press: show the what-does-this-mode-do dialog (with a Run choice). */
+        void onAcquireInfo(int mode);
 
         void onStopAcquire();
     }
@@ -41,16 +46,23 @@ public interface Listener {
     private final List<HugePageProcess> items = new ArrayList<>();
     private final Listener listener;
     private boolean acquiring = false;
+    private int acquireMode = -1;   // running v (1/2/3); -1 = unknown (old module)
 
     public HugePageProcessAdapter(@NonNull Listener listener) {
         this.listener = listener;
         setHasStableIds(true);
     }
 
-    /** Toggle the spinner on the Acquire row while a run is in flight. */
-    public void setAcquiring(boolean acquiring) {
-        if (this.acquiring == acquiring) return;
+    /**
+     * Reflect the acquire state on the row: idle = three buttons, running with a
+     * known mode = that slot spins + the other two greyed out, running with an
+     * unknown mode (-1, old module) = all three spin.
+     */
+    public void setAcquireState(boolean acquiring, int mode) {
+        if (!acquiring) mode = -1;
+        if (this.acquiring == acquiring && this.acquireMode == mode) return;
         this.acquiring = acquiring;
+        this.acquireMode = mode;
         notifyDataSetChanged();
     }
 
@@ -104,29 +116,19 @@ public void onBindViewHolder(@NonNull Holder holder, int position) {
             holder.btnStack.setVisibility(GONE);
             holder.btnStack.setOnClickListener(null);
             holder.itemView.setAlpha(1f);
+            holder.btnKill.setVisibility(GONE);
+            holder.btnKill.setOnClickListener(null);
             if (p.acquire) {
-                // While a run is in flight show the spinner in place of the
-                // button - same look as before, but tapping it stops the acquire.
-                holder.progressAcquire.setVisibility(acquiring ? VISIBLE : GONE);
-                holder.progressAcquire.setOnClickListener(
-                    acquiring ? v -> listener.onStopAcquire() : null);
-                holder.btnKill.setVisibility(acquiring ? GONE : VISIBLE);
-                holder.btnKill.setImageResource(R.drawable.ic_download);
-                holder.btnKill.setColorFilter(MaterialColors.getColor(
-                    holder.itemView, androidx.appcompat.R.attr.colorPrimary));
-                holder.btnKill.setContentDescription(
-                    ctx.getString(R.string.hugepage_proc_acquire));
-                holder.btnKill.setOnClickListener(v -> listener.onAcquire());
+                bindAcquireSlot(holder.btnAcquireV1, holder.progressAcquireV1, 1);
+                bindAcquireSlot(holder.btnAcquireV2, holder.progressAcquireV2, 2);
+                bindAcquireSlot(holder.btnAcquireV3, holder.progressAcquireV3, 3);
             } else {
-                holder.progressAcquire.setVisibility(GONE);
-                holder.progressAcquire.setOnClickListener(null);
-                holder.btnKill.setVisibility(GONE);
-                holder.btnKill.setOnClickListener(null);
+                hideAcquireSlots(holder);
             }
             return;
         }
 
-        holder.progressAcquire.setVisibility(GONE);
+        hideAcquireSlots(holder);
         holder.btnKill.setVisibility(VISIBLE);
         // Restore the kill affordance (views are recycled from acquire rows).
         holder.btnKill.setImageResource(R.drawable.ic_close);
@@ -173,6 +175,34 @@ public void onBindViewHolder(@NonNull Holder holder, int position) {
         holder.btnKill.setOnClickListener(dead ? null : v -> listener.onKill(p));
     }
 
+    /** One acquire slot: spins iff running AND (mode unknown or this mode); when a
+     *  run is in flight the non-running slots are visible-but-disabled buttons. */
+    private void bindAcquireSlot(View btn, View spinner, int mode) {
+        boolean spin = acquiring && (acquireMode < 0 || acquireMode == mode);
+        btn.setVisibility(spin ? GONE : VISIBLE);
+        // Left enabled so long-press always opens the info dialog; short-press is
+        // gated on !acquiring and the icon greys via alpha while a run is in flight.
+        btn.setAlpha(acquiring ? 0.38f : 1f);
+        btn.setOnClickListener(v -> { if (!acquiring) listener.onAcquire(mode); });
+        btn.setOnLongClickListener(v -> { listener.onAcquireInfo(mode); return true; });
+        spinner.setVisibility(spin ? VISIBLE : GONE);
+        spinner.setOnClickListener(spin ? v -> listener.onStopAcquire() : null);
+    }
+
+    /** Hide all six acquire views and reset the buttons' enabled state (recycled). */
+    private static void hideAcquireSlots(Holder h) {
+        View[] all = {h.btnAcquireV1, h.btnAcquireV2, h.btnAcquireV3,
+            h.progressAcquireV1, h.progressAcquireV2, h.progressAcquireV3};
+        for (View v : all) {
+            v.setVisibility(GONE);
+            v.setOnClickListener(null);
+        }
+        for (View b : new View[]{h.btnAcquireV1, h.btnAcquireV2, h.btnAcquireV3}) {
+            b.setOnLongClickListener(null);
+            b.setAlpha(1f);
+        }
+    }
+
     static final class Holder extends RecyclerView.ViewHolder {
         final ImageView icon;
         final TextView title;
@@ -181,7 +211,12 @@ static final class Holder extends RecyclerView.ViewHolder {
         final TextView stateView;
         final ImageButton btnStack;
         final ImageButton btnKill;
-        final View progressAcquire;
+        final View btnAcquireV1;
+        final View btnAcquireV2;
+        final View btnAcquireV3;
+        final View progressAcquireV1;
+        final View progressAcquireV2;
+        final View progressAcquireV3;
 
         Holder(@NonNull View v) {
             super(v);
@@ -192,7 +227,12 @@ static final class Holder extends RecyclerView.ViewHolder {
             stateView = v.findViewById(R.id.tv_proc_state);
             btnStack = v.findViewById(R.id.btn_proc_stack);
             btnKill = v.findViewById(R.id.btn_proc_kill);
-            progressAcquire = v.findViewById(R.id.progress_proc_acquire);
+            btnAcquireV1 = v.findViewById(R.id.btn_acquire_v1);
+            btnAcquireV2 = v.findViewById(R.id.btn_acquire_v2);
+            btnAcquireV3 = v.findViewById(R.id.btn_acquire_v3);
+            progressAcquireV1 = v.findViewById(R.id.progress_acquire_v1);
+            progressAcquireV2 = v.findViewById(R.id.progress_acquire_v2);
+            progressAcquireV3 = v.findViewById(R.id.progress_acquire_v3);
         }
     }
 }
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/hugepage/Try.java b/app/src/main/java/cn/classfun/droidvm/ui/hugepage/Try.java
new file mode 100644
index 000000000..84df9409a
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/ui/hugepage/Try.java
@@ -0,0 +1,48 @@
+package cn.classfun.droidvm.ui.hugepage;
+
+import androidx.annotation.Nullable;
+
+/**
+ * One implementation's attempt within a degradation ladder: which implementation
+ * ran, plus its return value on success or its failure reason otherwise. The pair
+ * {@code (value | error, impl)} is what a {@link HugePageModel} feature call
+ * accumulates into an ordered {@code List<Try<...>>}; a success stops the ladder,
+ * so the caller judges the overall outcome from the <b>last</b> element:
+ * <ul>
+ *   <li>last {@link #ok()} and alone — success via the primary implementation;</li>
+ *   <li>last {@link #ok()} after earlier fails — success, degraded to a fallback;</li>
+ *   <li>last not {@link #ok()} — failure, and every rung's reason is in the list.</li>
+ * </ul>
+ *
+ * @param <I> the feature's implementation enum (which way it was done)
+ * @param <V> the value produced on success ({@link Void} for pure actions)
+ */
+final class Try<I, V> {
+    /** The implementation this attempt used. */
+    final I impl;
+    /** The value produced on success; {@code null} on failure (or for {@link Void}). */
+    @Nullable
+    final V value;
+    /** The failure reason; {@code null} on success. */
+    @Nullable
+    final String error;
+
+    private Try(I impl, @Nullable V value, @Nullable String error) {
+        this.impl = impl;
+        this.value = value;
+        this.error = error;
+    }
+
+    static <I, V> Try<I, V> ok(I impl, @Nullable V value) {
+        return new Try<>(impl, value, null);
+    }
+
+    static <I, V> Try<I, V> fail(I impl, String error) {
+        return new Try<>(impl, null, error);
+    }
+
+    /** True if this implementation succeeded (a non-null error means failure). */
+    boolean ok() {
+        return error == null;
+    }
+}
diff --git a/app/src/main/res/layout/acquire_buttons.xml b/app/src/main/res/layout/acquire_buttons.xml
new file mode 100644
index 000000000..fb26d474c
--- /dev/null
+++ b/app/src/main/res/layout/acquire_buttons.xml
@@ -0,0 +1,197 @@
+<?xml version="1.0" encoding="utf-8"?>
+<!-- Reusable acquire-mode slots: v1 = original scan, v2 = migrate + system
+     reclaim, v3 = migrate + per-block evict to zram. Each slot overlays an
+     acquire button (a download icon with the mode number badged bottom-end) with
+     an in-progress stop spinner; idle shows the button, running shows the spinner
+     (tap = stop). Shared by the process-list row and the main status screen; the
+     host lays the three slots out horizontally. The btn_acquire_v* views are
+     plain clickable FrameLayouts - the code toggles visibility/enabled and greys
+     them via alpha (see applyAcquireSlot / bindAcquireSlot). -->
+<merge xmlns:android="http://schemas.android.com/apk/res/android"
+    xmlns:app="http://schemas.android.com/apk/res-auto"
+    xmlns:tools="http://schemas.android.com/tools">
+
+    <FrameLayout
+        android:layout_width="wrap_content"
+        android:layout_height="wrap_content">
+
+        <FrameLayout
+            android:id="@+id/btn_acquire_v1"
+            android:layout_width="44dp"
+            android:layout_height="44dp"
+            android:background="?attr/selectableItemBackgroundBorderless"
+            android:clickable="true"
+            android:contentDescription="@string/hugepage_proc_acquire_v1_desc"
+            android:focusable="true">
+
+            <ImageView
+                android:layout_width="24dp"
+                android:layout_height="24dp"
+                android:layout_gravity="center"
+                android:importantForAccessibility="no"
+                android:src="@drawable/ic_download"
+                app:tint="?attr/colorPrimary" />
+
+            <TextView
+                android:layout_width="wrap_content"
+                android:layout_height="wrap_content"
+                android:layout_gravity="bottom|end"
+                android:layout_marginEnd="1dp"
+                android:layout_marginBottom="1dp"
+                android:importantForAccessibility="no"
+                android:includeFontPadding="false"
+                android:text="@string/hugepage_proc_acquire_v1"
+                android:textColor="?attr/colorPrimary"
+                android:textSize="14sp"
+                android:textStyle="bold" />
+        </FrameLayout>
+
+        <FrameLayout
+            android:id="@+id/progress_acquire_v1"
+            android:layout_width="44dp"
+            android:layout_height="44dp"
+            android:contentDescription="@string/hugepage_proc_acquire_stop"
+            android:visibility="gone"
+            tools:visibility="visible">
+
+            <ProgressBar
+                style="?android:attr/progressBarStyleSmall"
+                android:layout_width="match_parent"
+                android:layout_height="match_parent"
+                android:padding="8dp"
+                android:indeterminate="true"
+                android:indeterminateTint="?attr/colorPrimary" />
+
+            <ImageView
+                android:layout_width="14dp"
+                android:layout_height="14dp"
+                android:layout_gravity="center"
+                android:contentDescription="@string/hugepage_proc_acquire_stop"
+                android:src="@drawable/ic_pause"
+                app:tint="?attr/colorPrimary" />
+        </FrameLayout>
+    </FrameLayout>
+
+    <FrameLayout
+        android:layout_width="wrap_content"
+        android:layout_height="wrap_content">
+
+        <FrameLayout
+            android:id="@+id/btn_acquire_v2"
+            android:layout_width="44dp"
+            android:layout_height="44dp"
+            android:background="?attr/selectableItemBackgroundBorderless"
+            android:clickable="true"
+            android:contentDescription="@string/hugepage_proc_acquire_v2_desc"
+            android:focusable="true">
+
+            <ImageView
+                android:layout_width="24dp"
+                android:layout_height="24dp"
+                android:layout_gravity="center"
+                android:importantForAccessibility="no"
+                android:src="@drawable/ic_download"
+                app:tint="?attr/colorPrimary" />
+
+            <TextView
+                android:layout_width="wrap_content"
+                android:layout_height="wrap_content"
+                android:layout_gravity="bottom|end"
+                android:layout_marginEnd="1dp"
+                android:layout_marginBottom="1dp"
+                android:importantForAccessibility="no"
+                android:includeFontPadding="false"
+                android:text="@string/hugepage_proc_acquire_v2"
+                android:textColor="?attr/colorPrimary"
+                android:textSize="14sp"
+                android:textStyle="bold" />
+        </FrameLayout>
+
+        <FrameLayout
+            android:id="@+id/progress_acquire_v2"
+            android:layout_width="44dp"
+            android:layout_height="44dp"
+            android:contentDescription="@string/hugepage_proc_acquire_stop"
+            android:visibility="gone"
+            tools:visibility="visible">
+
+            <ProgressBar
+                style="?android:attr/progressBarStyleSmall"
+                android:layout_width="match_parent"
+                android:layout_height="match_parent"
+                android:padding="8dp"
+                android:indeterminate="true"
+                android:indeterminateTint="?attr/colorPrimary" />
+
+            <ImageView
+                android:layout_width="14dp"
+                android:layout_height="14dp"
+                android:layout_gravity="center"
+                android:contentDescription="@string/hugepage_proc_acquire_stop"
+                android:src="@drawable/ic_pause"
+                app:tint="?attr/colorPrimary" />
+        </FrameLayout>
+    </FrameLayout>
+
+    <FrameLayout
+        android:layout_width="wrap_content"
+        android:layout_height="wrap_content">
+
+        <FrameLayout
+            android:id="@+id/btn_acquire_v3"
+            android:layout_width="44dp"
+            android:layout_height="44dp"
+            android:background="?attr/selectableItemBackgroundBorderless"
+            android:clickable="true"
+            android:contentDescription="@string/hugepage_proc_acquire_v3_desc"
+            android:focusable="true">
+
+            <ImageView
+                android:layout_width="24dp"
+                android:layout_height="24dp"
+                android:layout_gravity="center"
+                android:importantForAccessibility="no"
+                android:src="@drawable/ic_download"
+                app:tint="?attr/colorPrimary" />
+
+            <TextView
+                android:layout_width="wrap_content"
+                android:layout_height="wrap_content"
+                android:layout_gravity="bottom|end"
+                android:layout_marginEnd="1dp"
+                android:layout_marginBottom="1dp"
+                android:importantForAccessibility="no"
+                android:includeFontPadding="false"
+                android:text="@string/hugepage_proc_acquire_v3"
+                android:textColor="?attr/colorPrimary"
+                android:textSize="14sp"
+                android:textStyle="bold" />
+        </FrameLayout>
+
+        <FrameLayout
+            android:id="@+id/progress_acquire_v3"
+            android:layout_width="44dp"
+            android:layout_height="44dp"
+            android:contentDescription="@string/hugepage_proc_acquire_stop"
+            android:visibility="gone"
+            tools:visibility="visible">
+
+            <ProgressBar
+                style="?android:attr/progressBarStyleSmall"
+                android:layout_width="match_parent"
+                android:layout_height="match_parent"
+                android:padding="8dp"
+                android:indeterminate="true"
+                android:indeterminateTint="?attr/colorPrimary" />
+
+            <ImageView
+                android:layout_width="14dp"
+                android:layout_height="14dp"
+                android:layout_gravity="center"
+                android:contentDescription="@string/hugepage_proc_acquire_stop"
+                android:src="@drawable/ic_pause"
+                app:tint="?attr/colorPrimary" />
+        </FrameLayout>
+    </FrameLayout>
+
+</merge>
diff --git a/app/src/main/res/layout/activity_hugepage.xml b/app/src/main/res/layout/activity_hugepage.xml
index 7f2510171..44b571294 100644
--- a/app/src/main/res/layout/activity_hugepage.xml
+++ b/app/src/main/res/layout/activity_hugepage.xml
@@ -121,7 +121,7 @@
                 android:icon="@drawable/ic_resize"
                 android:inputType="number"
                 app:ti_max="16GiB"
-                app:ti_min="256MiB"
+                app:ti_min="0MiB"
                 app:ti_mode="size"
                 app:ti_precision="2MiB" />
 
@@ -260,6 +260,37 @@
                 android:text="@string/hugepage_view_processes"
                 app:icon="@drawable/ic_file_tree" />
 
+            <!-- Same row style as the TextRowWidget/SwitchRowWidget rows below:
+                 icon, label, then the interactive controls on the right. -->
+            <LinearLayout
+                android:id="@+id/row_acquire_pages"
+                android:layout_width="match_parent"
+                android:layout_height="wrap_content"
+                android:gravity="center_vertical"
+                android:minHeight="72dp"
+                android:orientation="horizontal"
+                android:paddingStart="16dp"
+                android:paddingTop="8dp"
+                android:paddingEnd="16dp"
+                android:paddingBottom="8dp">
+
+                <ImageView
+                    android:layout_width="24dp"
+                    android:layout_height="24dp"
+                    android:contentDescription="@null"
+                    android:src="@drawable/ic_memory" />
+
+                <TextView
+                    android:layout_width="0dp"
+                    android:layout_height="wrap_content"
+                    android:layout_marginStart="32dp"
+                    android:layout_weight="1"
+                    android:text="@string/hugepage_acquire_pages_title"
+                    android:textSize="16sp" />
+
+                <include layout="@layout/acquire_buttons" />
+            </LinearLayout>
+
             <cn.classfun.droidvm.ui.widgets.row.SwitchRowWidget
                 android:id="@+id/row_module_enable"
                 android:layout_width="match_parent"
diff --git a/app/src/main/res/layout/item_hugepage_process.xml b/app/src/main/res/layout/item_hugepage_process.xml
index e43c8f599..3b67f0912 100644
--- a/app/src/main/res/layout/item_hugepage_process.xml
+++ b/app/src/main/res/layout/item_hugepage_process.xml
@@ -73,6 +73,11 @@
         android:textColor="?attr/colorOnSurfaceVariant"
         tools:text="D" />
 
+    <!-- Acquire-mode slots (v1/v2/v3), shown only on the "waiting for acquire"
+         row; each toggles between its button and an in-progress stop spinner
+         (wired in the adapter). -->
+    <include layout="@layout/acquire_buttons" />
+
     <ImageButton
         android:id="@+id/btn_proc_kill"
         style="@style/Widget.Material3.Button.IconButton"
@@ -82,31 +87,4 @@
         android:src="@drawable/ic_close"
         app:tint="?attr/colorError" />
 
-    <!-- Acquire-in-progress spinner with a pause glyph in the centre; tapping
-         it stops the acquire (wired in the adapter). -->
-    <FrameLayout
-        android:id="@+id/progress_proc_acquire"
-        android:layout_width="44dp"
-        android:layout_height="44dp"
-        android:contentDescription="@string/hugepage_proc_acquire_stop"
-        android:visibility="gone"
-        tools:visibility="visible">
-
-        <ProgressBar
-            style="?android:attr/progressBarStyleSmall"
-            android:layout_width="match_parent"
-            android:layout_height="match_parent"
-            android:padding="8dp"
-            android:indeterminate="true"
-            android:indeterminateTint="?attr/colorPrimary" />
-
-        <ImageView
-            android:layout_width="14dp"
-            android:layout_height="14dp"
-            android:layout_gravity="center"
-            android:contentDescription="@string/hugepage_proc_acquire_stop"
-            android:src="@drawable/ic_pause"
-            app:tint="?attr/colorPrimary" />
-    </FrameLayout>
-
 </LinearLayout>
diff --git a/app/src/main/res/values-zh-rCN/strings.xml b/app/src/main/res/values-zh-rCN/strings.xml
index 0fed84dc5..ca74410a5 100644
--- a/app/src/main/res/values-zh-rCN/strings.xml
+++ b/app/src/main/res/values-zh-rCN/strings.xml
@@ -964,6 +964,18 @@
     <string name="hugepage_pool_size_applied">池大小已保存并应用</string>
     <string name="hugepage_proc_acquire">获取</string>
     <string name="hugepage_proc_acquire_done">获取完成</string>
+    <string name="hugepage_acquire_pages_title">获取大页</string>
+    <string name="hugepage_acquire_run">执行</string>
+    <string name="hugepage_acquire_degraded">已降级，实际使用 %1$s</string>
+    <string name="hugepage_proc_acquire_v1">v1</string>
+    <string name="hugepage_proc_acquire_v2">v2</string>
+    <string name="hugepage_proc_acquire_v3">v3</string>
+    <string name="hugepage_proc_acquire_v1_desc">获取 v1（alloc_contig_pages 扫描）</string>
+    <string name="hugepage_proc_acquire_v2_desc">获取 v2（迁移＋系统回收）</string>
+    <string name="hugepage_proc_acquire_v3_desc">获取 v3（迁移＋逐块挤到 zram）</string>
+    <string name="hugepage_acquire_v1_explain">用 alloc_contig_pages 收集大页</string>
+    <string name="hugepage_acquire_v2_explain">用 try_to_free_mem_cgroup_pages 把其他程序挤到 swap/zram\n再用 alloc_contig_range 收集大页</string>
+    <string name="hugepage_acquire_v3_explain">用 folio_isolate_lru + reclaim_pages 精准把页面挤到 swap/zram\n再用 alloc_contig_range 收集大页</string>
     <string name="hugepage_proc_acquire_stop">停止获取</string>
     <string name="hugepage_proc_acquire_full">获取完成:已达成 %1$s</string>
     <string name="hugepage_proc_acquire_partial">获取结束:达成 %1$s / 目标 %2$s(系统目前无法再凑出更多)</string>
diff --git a/app/src/main/res/values-zh-rTW/strings.xml b/app/src/main/res/values-zh-rTW/strings.xml
index ca90d6224..63c8f8c83 100644
--- a/app/src/main/res/values-zh-rTW/strings.xml
+++ b/app/src/main/res/values-zh-rTW/strings.xml
@@ -922,11 +922,23 @@
     <string name="hugepage_proc_acquire">獲取</string>
     <string name="hugepage_proc_acquire_running">獲取大頁中…</string>
     <string name="hugepage_proc_acquire_done">獲取完成</string>
+    <string name="hugepage_proc_acquire_v1">v1</string>
+    <string name="hugepage_proc_acquire_v2">v2</string>
+    <string name="hugepage_proc_acquire_v3">v3</string>
+    <string name="hugepage_proc_acquire_v1_desc">獲取 v1（alloc_contig_pages 掃描）</string>
+    <string name="hugepage_proc_acquire_v2_desc">獲取 v2（遷移＋系統回收）</string>
+    <string name="hugepage_proc_acquire_v3_desc">獲取 v3（遷移＋逐塊擠到 zram）</string>
+    <string name="hugepage_acquire_degraded">已降級，實際使用 %1$s</string>
+    <string name="hugepage_acquire_run">執行</string>
+    <string name="hugepage_acquire_v1_explain">用 alloc_contig_pages 蒐集大頁</string>
+    <string name="hugepage_acquire_v2_explain">用 try_to_free_mem_cgroup_pages 把其他程式擠到 swap/zram\n再用 alloc_contig_range 蒐集大頁</string>
+    <string name="hugepage_acquire_v3_explain">用 folio_isolate_lru + reclaim_pages 精準把頁面擠到 swap/zram\n再用 alloc_contig_range 蒐集大頁</string>
     <string name="hugepage_proc_acquire_stop">停止獲取</string>
     <string name="hugepage_proc_acquire_full">獲取完成:已達成 %1$s</string>
     <string name="hugepage_proc_acquire_partial">獲取結束:達成 %1$s / 目標 %2$s(系統目前無法再湊出更多)</string>
     <string name="hugepage_proc_acquire_userspace">模組不足,嘗試 userspace 協助…</string>
     <string name="hugepage_refill_failed">觸發獲取失敗</string>
+    <string name="hugepage_acquire_pages_title">獲取大頁</string>
     <string name="hugepage_pool_size">池大小</string>
     <string name="hugepage_pool_size_saved">池大小已儲存（重啟後生效）</string>
     <string name="hugepage_pool_size_applied">池大小已儲存並套用</string>
diff --git a/app/src/main/res/values/strings.xml b/app/src/main/res/values/strings.xml
index 7692a340f..1ab0997f6 100644
--- a/app/src/main/res/values/strings.xml
+++ b/app/src/main/res/values/strings.xml
@@ -962,12 +962,24 @@
     <string name="hugepage_refill_failed">Failed to trigger acquire</string>
     <string name="hugepage_save_pool_size">Save</string>
     <string name="hugepage_proc_acquire">Acquire</string>
+    <string name="hugepage_proc_acquire_v1">v1</string>
+    <string name="hugepage_proc_acquire_v2">v2</string>
+    <string name="hugepage_proc_acquire_v3">v3</string>
+    <string name="hugepage_proc_acquire_v1_desc">Acquire v1 (alloc_contig_pages scan)</string>
+    <string name="hugepage_proc_acquire_v2_desc">Acquire v2 (migrate + system reclaim)</string>
+    <string name="hugepage_proc_acquire_v3_desc">Acquire v3 (migrate + per-block evict to zram)</string>
+    <string name="hugepage_acquire_run">Run</string>
+    <string name="hugepage_acquire_v1_explain">Uses alloc_contig_pages to collect huge pages</string>
+    <string name="hugepage_acquire_v2_explain">Uses try_to_free_mem_cgroup_pages to push other apps into swap/zram\nthen alloc_contig_range to collect huge pages</string>
+    <string name="hugepage_acquire_v3_explain">Uses folio_isolate_lru + reclaim_pages to precisely push pages into swap/zram\nthen alloc_contig_range to collect huge pages</string>
     <string name="hugepage_proc_acquire_running">Acquiring huge pages…</string>
     <string name="hugepage_proc_acquire_done">Acquire done</string>
+    <string name="hugepage_acquire_degraded">Downgraded — ran %1$s instead</string>
     <string name="hugepage_proc_acquire_stop">Stop acquiring</string>
     <string name="hugepage_proc_acquire_full">Acquire complete: reached %1$s</string>
     <string name="hugepage_proc_acquire_partial">Acquire stopped: got %1$s of %2$s (system can\'t migrate more right now)</string>
     <string name="hugepage_proc_acquire_userspace">Module short; trying userspace assist…</string>
+    <string name="hugepage_acquire_pages_title">Acquire huge pages</string>
     <string name="hugepage_pool_size">Pool Size</string>
     <string name="hugepage_pool_size_saved">Pool size saved (effective after reboot)</string>
     <string name="hugepage_pool_size_applied">Pool size saved &amp; applied</string>

From 35fc525cc1e33f521b74a7dcbfefb184f42d3819 Mon Sep 17 00:00:00 2001
From: HuJK <gh@hujk.org>
Date: Sun, 5 Jul 2026 10:22:43 +0800
Subject: [PATCH 081/182] prebuilts: bump submodule to 2c31cec

Point the prebuilts submodule at 2c31cecdedb5110e8861b8b698ba5b538725cfb7
(same DroidVM-Prebuilt-Root 4016dba, rebuilt).

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01TaHcvnHaZk8qqpKiS25Hbk
---
 app/src/main/assets/prebuilts | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/app/src/main/assets/prebuilts b/app/src/main/assets/prebuilts
index fc972f187..2c31cecde 160000
--- a/app/src/main/assets/prebuilts
+++ b/app/src/main/assets/prebuilts
@@ -1 +1 @@
-Subproject commit fc972f1871a2accb31fc0d5f2c08cc8a37d8dd8a
+Subproject commit 2c31cecdedb5110e8861b8b698ba5b538725cfb7

From fc0359bb8b46a341abf463783b7d8c44d2498f65 Mon Sep 17 00:00:00 2001
From: HuJK <gh@hujk.org>
Date: Sun, 5 Jul 2026 10:22:43 +0800
Subject: [PATCH 082/182] (fix) fullscreen mode doesn't work correctly

---
 .../display/vnc/display/VMVncDisplayActivity.java   | 13 ++++++++++++-
 1 file changed, 12 insertions(+), 1 deletion(-)

diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/display/vnc/display/VMVncDisplayActivity.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/vnc/display/VMVncDisplayActivity.java
index 1961f7896..e177de753 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/display/vnc/display/VMVncDisplayActivity.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/vnc/display/VMVncDisplayActivity.java
@@ -346,6 +346,15 @@ private boolean onMouseTouch(View v, MotionEvent event) {
                 return true;
             case MotionEvent.ACTION_POINTER_DOWN:
                 gestureMaxPointers = max(gestureMaxPointers, pc);
+                // Re-anchor the tap reference to the multi-finger midpoint and
+                // restart the tap window. The ACTION_DOWN anchor was a single
+                // finger position, so the two-finger midpoint sits ~half a
+                // finger-spread away and would instantly trip gestureMoved,
+                // making a still two-finger tap (right click) impossible.
+                gestureStartMidX = midX(event);
+                gestureStartMidY = midY(event);
+                gestureStartTime = System.currentTimeMillis();
+                gestureMoved = false;
                 if (pc == 2) initTwoFinger(event);
                 if (pc >= 3) lastScrollMidY = midY(event);
                 return true;
@@ -626,7 +635,9 @@ private void toggleFullscreen() {
         var controller = getWindow().getInsetsController();
         if (controller == null) return;
         if (isFullscreen) {
-            hideBars();
+            mainHandler.removeCallbacks(this::hideBars);
+            toolbar.setVisibility(GONE);
+            statusBar.setVisibility(GONE);
             extraKeysPanel.setVisibility(GONE);
             controller.hide(WindowInsets.Type.systemBars());
             controller.setSystemBarsBehavior(BEHAVIOR_SHOW_TRANSIENT_BARS_BY_SWIPE);

From a00a3d56652a573adb889f429f43701449b131d4 Mon Sep 17 00:00:00 2001
From: HuJK <gh@hujk.org>
Date: Sun, 5 Jul 2026 10:39:09 +0800
Subject: [PATCH 083/182] vm: route list auto-open-after-start through the same
 console picker as VM info

Starting a VM from the list auto-opened VMConsoleActivity (UART) unconditionally
(MainVMFragment.onVMStateChanged hard-coded it), while the VM-info console button
(ConsoleButton.openDefaultConsole) is display-aware: native display, else VNC,
else the serial console. So a VNC/native VM started from the list wrongly popped
the UART console instead of its display.

Extract that routing into a shared VmConsoleRouter.openDefault(); the info button
and the list auto-open now both call it, so they agree. ConsoleButton's chooser
open-helpers delegate to the router too (single source of truth).

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01TaHcvnHaZk8qqpKiS25Hbk
---
 .../droidvm/ui/main/vm/MainVMFragment.java    |   9 +-
 .../ui/vm/console/VmConsoleRouter.java        | 104 ++++++++++++++++++
 .../droidvm/ui/vm/info/ConsoleButton.java     |  69 ++----------
 3 files changed, 119 insertions(+), 63 deletions(-)
 create mode 100644 app/src/main/java/cn/classfun/droidvm/ui/vm/console/VmConsoleRouter.java

diff --git a/app/src/main/java/cn/classfun/droidvm/ui/main/vm/MainVMFragment.java b/app/src/main/java/cn/classfun/droidvm/ui/main/vm/MainVMFragment.java
index 53c084c27..442b18a93 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/main/vm/MainVMFragment.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/main/vm/MainVMFragment.java
@@ -28,7 +28,7 @@
 import cn.classfun.droidvm.lib.store.vm.VMStore;
 import cn.classfun.droidvm.ui.main.base.stateful.MainStatefulFragment;
 import cn.classfun.droidvm.ui.vm.VMActions;
-import cn.classfun.droidvm.ui.vm.console.VMConsoleActivity;
+import cn.classfun.droidvm.ui.vm.console.VmConsoleRouter;
 import cn.classfun.droidvm.ui.vm.edit.VMEditActivity;
 import cn.classfun.droidvm.ui.vm.info.VMInfoActivity;
 
@@ -133,10 +133,9 @@ public void onVMStateChanged(UUID vmId, VMState state) {
             if (state == VMState.RUNNING && wantOpenConsole.compareAndSet(true, false)) {
                 var config = adapter.items.findById(vmId);
                 if (config == null) return;
-                var intent = new Intent(requireContext(), VMConsoleActivity.class);
-                intent.putExtra(VMConsoleActivity.EXTRA_VM_ID, vmId.toString());
-                intent.putExtra(VMConsoleActivity.EXTRA_VM_NAME, config.getName());
-                startActivity(intent);
+                // Same routing as the VM-info console button (native -> VNC ->
+                // serial), so a VNC/native VM auto-opens its display, not always UART.
+                VmConsoleRouter.openDefault(requireContext(), vmId, config, true);
             }
         });
     }
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/console/VmConsoleRouter.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/console/VmConsoleRouter.java
new file mode 100644
index 000000000..923f7de5e
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/console/VmConsoleRouter.java
@@ -0,0 +1,104 @@
+package cn.classfun.droidvm.ui.vm.console;
+
+import android.content.Context;
+import android.content.Intent;
+import android.os.Handler;
+import android.os.Looper;
+
+import androidx.annotation.NonNull;
+
+import java.util.ArrayList;
+import java.util.UUID;
+
+import cn.classfun.droidvm.lib.daemon.DaemonConnection;
+import cn.classfun.droidvm.lib.store.vm.VMConfig;
+import cn.classfun.droidvm.ui.vm.display.nativedisplay.display.VMNativeDisplayActivity;
+import cn.classfun.droidvm.ui.vm.display.vnc.base.BaseVncActivity;
+import cn.classfun.droidvm.ui.vm.display.vnc.display.VMVncDisplayActivity;
+import cn.classfun.droidvm.ui.vm.display.vnc.display.VMVncPresentationActivity;
+
+/**
+ * Shared "open the VM's default view" routing, so the VM-info screen (a console
+ * button) and the VM-list auto-open-after-start pick the <b>same</b> thing:
+ * native display, else VNC, else the serial console (uart, then stdio). Keeping
+ * this in one place is why both paths agree instead of the list always opening
+ * the UART console regardless of the VM's display.
+ */
+public final class VmConsoleRouter {
+    private VmConsoleRouter() {
+    }
+
+    /**
+     * Open the VM's default view. {@code running} = the VM is up (so the serial
+     * console shows the live stream, not saved logs).
+     */
+    public static void openDefault(@NonNull Context ctx, @NonNull UUID vmId,
+                                   @NonNull VMConfig config, boolean running) {
+        var item = config.item;
+        if (item.optBoolean("native_display_enabled", false)) {
+            openNative(ctx, vmId, config);
+            return;
+        }
+        if (item.optBoolean("vnc_enabled", false)) {
+            openVnc(ctx, vmId, config);
+            return;
+        }
+        // Serial console: ask the daemon which streams exist, prefer uart then stdio.
+        DaemonConnection.getInstance().buildRequest("vm_console_list")
+            .put("vm_id", vmId.toString())
+            .onResponse(resp -> {
+                var data = resp.optJSONArray("data");
+                String stream = null;
+                if (data != null) {
+                    var names = new ArrayList<String>();
+                    for (int i = 0; i < data.length(); i++) {
+                        var n = data.optString(i, "");
+                        if (!n.isEmpty()) names.add(n);
+                    }
+                    if (names.contains("uart")) stream = "uart";
+                    else if (names.contains("stdio")) stream = "stdio";
+                }
+                if (stream == null) return;
+                final var s = stream;
+                new Handler(Looper.getMainLooper()).post(
+                    () -> openConsole(ctx, vmId, config, s, !running));
+            })
+            .onUnsuccessful(r -> {
+            })
+            .invoke();
+    }
+
+    public static void openConsole(@NonNull Context ctx, @NonNull UUID vmId,
+                                   @NonNull VMConfig config, @NonNull String stream, boolean logs) {
+        var intent = new Intent(ctx, VMConsoleActivity.class);
+        intent.putExtra(VMConsoleActivity.EXTRA_VM_ID, vmId.toString());
+        intent.putExtra(VMConsoleActivity.EXTRA_VM_NAME, config.getName());
+        intent.putExtra(VMConsoleActivity.EXTRA_STREAM, stream);
+        intent.putExtra(VMConsoleActivity.EXTRA_LOGS, logs);
+        ctx.startActivity(intent);
+    }
+
+    public static void openNative(@NonNull Context ctx, @NonNull UUID vmId, @NonNull VMConfig config) {
+        var item = config.item;
+        var intent = new Intent(ctx, VMNativeDisplayActivity.class);
+        intent.putExtra(VMNativeDisplayActivity.EXTRA_VM_ID, vmId.toString());
+        intent.putExtra(VMNativeDisplayActivity.EXTRA_VM_NAME, config.getName());
+        intent.putExtra(VMNativeDisplayActivity.EXTRA_WIDTH, item.optLong("display_width", 1280));
+        intent.putExtra(VMNativeDisplayActivity.EXTRA_HEIGHT, item.optLong("display_height", 720));
+        ctx.startActivity(intent);
+    }
+
+    public static void openVnc(@NonNull Context ctx, @NonNull UUID vmId, @NonNull VMConfig config) {
+        var intent = new Intent(ctx, VMVncDisplayActivity.class);
+        intent.putExtra(BaseVncActivity.EXTRA_VM_ID, vmId.toString());
+        intent.putExtra(BaseVncActivity.EXTRA_VM_NAME, config.getName());
+        ctx.startActivity(intent);
+    }
+
+    public static void openVncExt(@NonNull Context ctx, @NonNull UUID vmId, @NonNull VMConfig config) {
+        var intent = new Intent(ctx, VMVncPresentationActivity.class);
+        intent.putExtra(BaseVncActivity.EXTRA_VM_ID, vmId.toString());
+        intent.putExtra(BaseVncActivity.EXTRA_VM_NAME, config.getName());
+        ctx.startActivity(intent);
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/info/ConsoleButton.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/info/ConsoleButton.java
index 14f46022a..70597d311 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/info/ConsoleButton.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/info/ConsoleButton.java
@@ -3,7 +3,6 @@
 import static android.widget.Toast.LENGTH_SHORT;
 
 import android.content.DialogInterface;
-import android.content.Intent;
 import android.os.Handler;
 import android.os.Looper;
 import android.util.Log;
@@ -23,11 +22,7 @@
 import cn.classfun.droidvm.lib.store.base.DataItem;
 import cn.classfun.droidvm.lib.store.vm.VMState;
 import cn.classfun.droidvm.lib.ui.IconItemAdapter;
-import cn.classfun.droidvm.ui.vm.console.VMConsoleActivity;
-import cn.classfun.droidvm.ui.vm.display.nativedisplay.display.VMNativeDisplayActivity;
-import cn.classfun.droidvm.ui.vm.display.vnc.base.BaseVncActivity;
-import cn.classfun.droidvm.ui.vm.display.vnc.display.VMVncDisplayActivity;
-import cn.classfun.droidvm.ui.vm.display.vnc.display.VMVncPresentationActivity;
+import cn.classfun.droidvm.ui.vm.console.VmConsoleRouter;
 
 public final class ConsoleButton {
     private static final String TAG = "VMInfoActivity";
@@ -54,37 +49,11 @@ void showConsoleChooser() {
     }
 
     void openDefaultConsole() {
-        if (parent.config != null
-            && parent.config.item.optBoolean("native_display_enabled", false)) {
-            openNativeDisplay();
-            return;
-        }
-        if (parent.config != null && parent.config.item.optBoolean("vnc_enabled", false)) {
-            openVncDisplay();
-            return;
-        }
-        DaemonConnection.OnResponse res = resp -> {
-            var data = resp.optJSONArray("data");
-            if (data == null) return;
-            var list = new ArrayList<String>();
-            for (int i = 0; i < data.length(); i++) {
-                var name = data.optString(i, "");
-                if (!name.isEmpty()) list.add(name);
-            }
-            String defaultConsole = null;
-            if (list.contains("uart"))
-                defaultConsole = "uart";
-            if (defaultConsole == null && list.contains("stdio"))
-                defaultConsole = "stdio";
-            if (defaultConsole == null) return;
-            final var target = defaultConsole;
-            mainHandler.post(() -> openConsole(target));
-        };
-        DaemonConnection.getInstance().buildRequest("vm_console_list")
-            .put("vm_id", parent.vmId.toString())
-            .onResponse(res)
-            .onUnsuccessful(r -> {})
-            .invoke();
+        if (parent.config == null) return;
+        // Shared with the VM-list auto-open-after-start (VmConsoleRouter), so both
+        // pick the same view: native -> VNC -> serial (uart, then stdio).
+        VmConsoleRouter.openDefault(parent, parent.vmId, parent.config,
+            parent.currentState != VMState.STOPPED);
     }
 
     private void buildConsoleChooserDialog(@Nullable JSONArray streams) {
@@ -144,38 +113,22 @@ private void buildConsoleChooserDialog(@Nullable JSONArray streams) {
     }
 
     private void openConsole(@NonNull String stream) {
-        var intent = new Intent(parent, VMConsoleActivity.class);
-        intent.putExtra(VMConsoleActivity.EXTRA_VM_ID, parent.vmId.toString());
-        intent.putExtra(VMConsoleActivity.EXTRA_VM_NAME, parent.config.getName());
-        intent.putExtra(VMConsoleActivity.EXTRA_STREAM, stream);
-        intent.putExtra(VMConsoleActivity.EXTRA_LOGS, parent.currentState == VMState.STOPPED);
-        parent.startActivity(intent);
+        VmConsoleRouter.openConsole(parent, parent.vmId, parent.config, stream,
+            parent.currentState == VMState.STOPPED);
     }
 
     private void openNativeDisplay() {
         if (parent.config == null) return;
-        var item = parent.config.item;
-        var intent = new Intent(parent, VMNativeDisplayActivity.class);
-        intent.putExtra(VMNativeDisplayActivity.EXTRA_VM_ID, parent.vmId.toString());
-        intent.putExtra(VMNativeDisplayActivity.EXTRA_VM_NAME, parent.config.getName());
-        intent.putExtra(VMNativeDisplayActivity.EXTRA_WIDTH, item.optLong("display_width", 1280));
-        intent.putExtra(VMNativeDisplayActivity.EXTRA_HEIGHT, item.optLong("display_height", 720));
-        parent.startActivity(intent);
+        VmConsoleRouter.openNative(parent, parent.vmId, parent.config);
     }
 
     private void openVncDisplay() {
         if (parent.config == null) return;
-        var intent = new Intent(parent, VMVncDisplayActivity.class);
-        intent.putExtra(BaseVncActivity.EXTRA_VM_ID, parent.vmId.toString());
-        intent.putExtra(BaseVncActivity.EXTRA_VM_NAME, parent.config.getName());
-        parent.startActivity(intent);
+        VmConsoleRouter.openVnc(parent, parent.vmId, parent.config);
     }
 
     private void openVncExtDisplay() {
         if (parent.config == null) return;
-        var intent = new Intent(parent, VMVncPresentationActivity.class);
-        intent.putExtra(BaseVncActivity.EXTRA_VM_ID, parent.vmId.toString());
-        intent.putExtra(BaseVncActivity.EXTRA_VM_NAME, parent.config.getName());
-        parent.startActivity(intent);
+        VmConsoleRouter.openVncExt(parent, parent.vmId, parent.config);
     }
 }

From 1668dc3ab9f907d4fcc366ea8efd7282584fc9d4 Mon Sep 17 00:00:00 2001
From: HuJK <gh@hujk.org>
Date: Sun, 5 Jul 2026 22:20:43 +0800
Subject: [PATCH 084/182] network: watchdog re-asserts IP forwarding while an
 L3 bridge runs

netd owns net.ipv4.ip_forward and net.ipv6.conf.all.forwarding globally and
clears them whenever it retunes tethering, silently black-holing every
forwarded guest packet. IptablesBackend enables them once at init;
DefaultRouterWatcher now re-asserts them on its 5s tick for as long as a
running LINUX + L3 network needs kernel forwarding.

Gated on hasL3LinuxBridge() -- the same condition the routing rules use -- so
with no L3 bridge netd's value is left alone rather than forcing global
forwarding on the phone. Both families are covered because netd flips v4 and
v6 together. Reads before writing via runQuiet so the poll stays out of
logcat; only a value netd actually reset is corrected and logged.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01TaHcvnHaZk8qqpKiS25Hbk
---
 .../network/backend/DefaultRouterWatcher.java | 58 +++++++++++++++++++
 1 file changed, 58 insertions(+)

diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/DefaultRouterWatcher.java b/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/DefaultRouterWatcher.java
index b17f26bec..ac7a6e04d 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/DefaultRouterWatcher.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/DefaultRouterWatcher.java
@@ -24,6 +24,7 @@
 import cn.classfun.droidvm.lib.store.network.BridgeType;
 import cn.classfun.droidvm.lib.store.network.NetworkState;
 import cn.classfun.droidvm.lib.store.network.UplinkMode;
+import cn.classfun.droidvm.lib.utils.RunUtils;
 
 public final class DefaultRouterWatcher {
     private static final String TAG = "DefaultRouterWatcher";
@@ -253,6 +254,63 @@ private synchronized void runOnce() {
         ensureHostIpMonitor();
         updateHostIps();
         updateDefaultRouter();
+        reassertForwarding();
+    }
+
+    /**
+     * Re-asserts the kernel forwarding sysctls that guest L3 routing depends
+     * on. netd owns these globally and clears them whenever it retunes
+     * tethering, which silently black-holes every forwarded guest packet.
+     * {@link cn.classfun.droidvm.daemon.network.backend.iptables.IptablesBackend}
+     * enables them once at init; this keeps them enabled for as long as a
+     * Linux-bridge L3 network is running.
+     *
+     * <p>Gated on {@link #hasL3LinuxBridge()} -- the same "running LINUX + L3"
+     * condition the routing rules use. With no such network there is nothing
+     * to forward, so netd's value is left alone rather than forcing global
+     * forwarding on the phone. Both families are covered because netd flips
+     * v4 and v6 together (as does {@code enableIpForward}). Reads before
+     * writing: an untouched value costs one cheap cat and stays silent; only a
+     * value netd actually reset is corrected and logged (it means netd raced
+     * us). Never throws out of the tick -- a transient shell failure must not
+     * tear down the routing rules.
+     */
+    private void reassertForwarding() {
+        try {
+            if (!hasL3LinuxBridge()) return;
+            ensureSysctlOne("/proc/sys/net/ipv4/ip_forward", "net.ipv4.ip_forward");
+            ensureSysctlOne("/proc/sys/net/ipv6/conf/all/forwarding",
+                "net.ipv6.conf.all.forwarding");
+        } catch (Exception e) {
+            Log.w(TAG, "Failed to re-assert forwarding sysctls", e);
+        }
+    }
+
+    /**
+     * Writes 1 to {@code path} only if it is not already 1; logs corrections.
+     * Both the read and the write go through {@code runQuiet} so the 5s poll
+     * stays out of logcat -- {@code RunContext.run} would log a "Running
+     * command: cat ..." line every tick. The only line this ever emits is the
+     * warning below, and only when netd actually reset the value.
+     */
+    private void ensureSysctlOne(@NonNull String path, @NonNull String name) {
+        var cur = RunUtils.runQuiet("cat " + path).getOutString();
+        if ("1".equals(cur)) return;
+        Log.w(TAG, fmt("%s=%s (netd reset it); re-enabling forwarding",
+            name, cur.isEmpty() ? "?" : cur));
+        RunUtils.runQuiet("echo 1 > " + path);
+    }
+
+    /** True while any RUNNING Linux-bridge L3 network needs kernel forwarding. */
+    private boolean hasL3LinuxBridge() {
+        var found = new boolean[]{false};
+        context.getNetworks().forEach((uuid, inst) -> {
+            if (inst.getState() == NetworkState.RUNNING
+                && inst.getBridgeType() == BridgeType.LINUX
+                && inst.getUplinkMode() == UplinkMode.L3)
+                found[0] = true;
+        });
+        return found[0];
     }
 
     private void updateDefaultRouter() {

From e9f6bd586015322ab9143fa0c486dd0ad3455332 Mon Sep 17 00:00:00 2001
From: HuJK <gh@hujk.org>
Date: Sun, 5 Jul 2026 22:20:49 +0800
Subject: [PATCH 085/182] ci: add non-ASCII and translation-completeness PR
 checks

Two Python checks wired into a new Checks workflow (push + PR):

- check_ascii.py: fails on any non-ASCII byte in a tracked file, so a stray
  smart-quote, em-dash, arrow or CJK char can't slip into code, comments or
  config. Genuine i18n / natural-language files are exempt via
  scripts/ci/ascii_allow.txt (translations, privacy text, docs, ...).
- check_translations.py: fails if any values-<locale>/strings.xml is missing,
  has extra, or has stale entries vs the translatable keys in
  values/strings.xml, so nothing ships half-translated.

Fixes so the current tree passes:
- Replace the check/cross emoji in the virtualization setup step with inline
  tinted vector icons (ImageSpan over ic_check/ic_close); widen showDetail() to
  CharSequence; add status_supported/status_unsupported colors. The mode menu
  already used circle icons; only a stale glyph comment remained.
- Convert typographic dashes/arrows/minus-sign and stray CJK in the hugepage
  and Try comments to ASCII.
- Add the 4 missing zh-rTW strings (vm_exit_crash, vm_exit_guest_panic,
  vm_exit_watchdog, vm_rebooting).

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01TaHcvnHaZk8qqpKiS25Hbk
---
 .github/workflows/checks.yml                  |  32 +++++
 .../droidvm/ui/hugepage/HugePageActivity.java |   6 +-
 .../droidvm/ui/hugepage/HugePageModel.java    |  24 ++--
 .../cn/classfun/droidvm/ui/hugepage/Try.java  |   6 +-
 .../ui/setup/base/BaseCheckStepFragment.java  |   2 +-
 .../step/VirtualizationStepFragment.java      |  42 +++++--
 .../main/res/menu/menu_hugepage_process.xml   |  10 +-
 app/src/main/res/values-zh-rTW/strings.xml    |   4 +
 app/src/main/res/values/colors.xml            |   4 +
 scripts/ci/ascii_allow.txt                    |  24 ++++
 scripts/ci/check_ascii.py                     | 111 ++++++++++++++++++
 scripts/ci/check_translations.py              |  94 +++++++++++++++
 12 files changed, 329 insertions(+), 30 deletions(-)
 create mode 100644 .github/workflows/checks.yml
 create mode 100644 scripts/ci/ascii_allow.txt
 create mode 100644 scripts/ci/check_ascii.py
 create mode 100644 scripts/ci/check_translations.py

diff --git a/.github/workflows/checks.yml b/.github/workflows/checks.yml
new file mode 100644
index 000000000..49354306b
--- /dev/null
+++ b/.github/workflows/checks.yml
@@ -0,0 +1,32 @@
+name: Checks
+
+on:
+  push:
+    branches: [ "**" ]
+  pull_request:
+    branches: [ "**" ]
+  workflow_dispatch:
+
+concurrency:
+  group: checks-${{ github.ref }}
+  cancel-in-progress: true
+
+jobs:
+  lint:
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+        # No submodules: these checks only look at this repo's own sources.
+
+      - name: Set up Python
+        uses: actions/setup-python@v5
+        with:
+          python-version: '3.x'
+
+      - name: No non-ASCII in code/config
+        run: python3 scripts/ci/check_ascii.py
+
+      - name: Translations complete across all locales
+        run: python3 scripts/ci/check_translations.py
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/hugepage/HugePageActivity.java b/app/src/main/java/cn/classfun/droidvm/ui/hugepage/HugePageActivity.java
index a4d4be4cb..be7a6929f 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/hugepage/HugePageActivity.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/hugepage/HugePageActivity.java
@@ -160,8 +160,8 @@ private void initialize() {
         btnViewProcesses.setOnClickListener(v -> startActivity(
             new Intent(this, HugePageProcessActivity.class)));
         // Acquire-mode slots: each button starts its mode; each spinner (shown
-        // while a run is in flight) interrupts it. Listeners are static — the
-        // slots aren't recycled — and the idle/running visibility toggle is
+        // while a run is in flight) interrupts it. Listeners are static -- the
+        // slots aren't recycled -- and the idle/running visibility toggle is
         // driven by applyAcquireState().
         // Short-press runs it (gated to the pressable state); long-press opens the
         // what-does-this-do dialog with a Run/Cancel choice (always available, even
@@ -212,7 +212,7 @@ static void showAcquireInfo(@NonNull Context ctx, int mode, @NonNull Runnable on
         int msg = mode == 2 ? R.string.hugepage_acquire_v2_explain
             : mode == 3 ? R.string.hugepage_acquire_v3_explain
             : R.string.hugepage_acquire_v1_explain;
-        // Title = "Acquire huge pages" + the mode badge, e.g. "獲取大頁 v1".
+        // Title = "Acquire huge pages" + the mode badge, e.g. "Acquire huge pages v1".
         String title = ctx.getString(R.string.hugepage_acquire_pages_title)
             + " " + ctx.getString(modeLabel);
         new MaterialAlertDialogBuilder(ctx)
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/hugepage/HugePageModel.java b/app/src/main/java/cn/classfun/droidvm/ui/hugepage/HugePageModel.java
index 8c4b5e9ca..cd4d58344 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/hugepage/HugePageModel.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/hugepage/HugePageModel.java
@@ -31,17 +31,17 @@
  *
  * <p>It hides the {@code gh_hugepage_reserve} module's <b>v6/v7 differences</b>:
  * callers ask for a high-level operation and never branch on version or poke raw
- * sysfs. Version is never decided ahead of time — each mutation is a
+ * sysfs. Version is never decided ahead of time -- each mutation is a
  * <b>degradation ladder</b> that just tries the best knob and falls back
- * (e.g. the migrating {@code acquire} knob → {@code manual_refill};
- * {@code pool_want=0} soft-disable → {@code rmmod}). The internal {@link Try}
+ * (e.g. the migrating {@code acquire} knob -> {@code manual_refill};
+ * {@code pool_want=0} soft-disable -> {@code rmmod}). The internal {@link Try}
  * ladder is collapsed to a small {@link Result} ({@code OK / UNSUPPORTED /
- * FAILED}) for the GUI — that is the "無法執行就回傳 error" contract.
+ * FAILED}) for the GUI -- that is the "return an error when it can't run" contract.
  *
  * <p>Reads are cached with short TTLs so the per-second refresh loop doesn't
  * block on the daemon or re-read a static knob every tick. Each screen owns its
  * own instance (separate caches); everything here is context-free (pure data) and
- * never holds an Activity reference. Mutations do shell I/O — call them off the UI
+ * never holds an Activity reference. Mutations do shell I/O -- call them off the UI
  * thread.
  */
 final class HugePageModel {
@@ -157,7 +157,7 @@ static final class UsageEntry {
      * Version-unified snapshot of module + pool state. {@code targetIdeal} is the
      * one "target" concept across versions: v7's {@code pool_want}, else v6's
      * read-only {@code pool_target}, else current capacity. {@code deficit} is what
-     * is still missing toward it ({@code targetIdeal − free − lent}); the acquire
+     * is still missing toward it ({@code targetIdeal - free - lent}); the acquire
      * buttons are usable exactly when {@code loaded && deficit > 0}.
      */
     static final class Snapshot {
@@ -169,7 +169,7 @@ static final class Snapshot {
         final long built;             // pool_total (capacity assembled)
         final long free;              // pool_avail (in the pool now)
         final long lent;              // served (out to VMs); 0 if the module can't report it (v6)
-        final long deficit;           // max(0, targetIdeal − free − lent)
+        final long deficit;           // max(0, targetIdeal - free - lent)
         final boolean acquiring;      // an acquire worker is running
         final int acquireMode;        // which mode (1/2/3), or -1 if the module can't report it
         final boolean hasPoolWant;    // pool_want knob reported (v7 runtime-resizable)
@@ -275,7 +275,7 @@ boolean koAvailable() {
      * Save a new pool target of {@code pages}. Persists it to settings.prop (for
      * the next boot) and applies it to the running pool if the live {@code pool_want}
      * knob exists; on v6 (read-only {@code pool_target}) only the persist takes
-     * effect. Does <b>not</b> fire an acquire — the caller drives that from the
+     * effect. Does <b>not</b> fire an acquire -- the caller drives that from the
      * resulting {@link Snapshot#deficit}.
      */
     @NonNull
@@ -295,10 +295,10 @@ Result saveSize(long pages) {
      * Bring the running pool up (true) or down (false), choosing the deepest action
      * the module supports:
      * <ul>
-     *   <li><b>enable</b>: not loaded → insmod (targeting the saved size); loaded →
+     *   <li><b>enable</b>: not loaded -> insmod (targeting the saved size); loaded ->
      *       restore the target by writing the saved {@code pool_want} (v6 loaded is
      *       already active, so this is a no-op there);</li>
-     *   <li><b>disable</b>: try {@code pool_want=0} (soft — frees the reserve but
+     *   <li><b>disable</b>: try {@code pool_want=0} (soft -- frees the reserve but
      *       keeps per-VM tracking); if that write can't happen (v6 has no such knob)
      *       fall back to {@code rmmod}.</li>
      * </ul>
@@ -310,7 +310,7 @@ Result setRuntimeEnabled(boolean on) {
                 return collapse(loadLadder(savedWantPages()));   // insmod
             }
             // Loaded: restore the target. Succeeds on v7; on v6 there's no pool_want
-            // and a loaded module is already active, so treat a failed write as "已啟用".
+            // and a loaded module is already active, so treat a failed write as "already enabled".
             var t = writeKnob("pool_want", Long.toString(savedWantPages()));
             return t.ok() ? Result.ok("soft-enable") : Result.ok("already-active");
         }
@@ -346,7 +346,7 @@ Result setBootEnabled(boolean on) {
      * (1 = original scan, 2 = migrate + system reclaim, 3 = migrate + per-block
      * evict). Prefers the migrating {@code acquire} knob; on any failure (v6 has no
      * such knob, or -ENOSYS where this kernel can't run that mode) degrades to
-     * {@code manual_refill}. Fire-and-return — poll {@link #state()} for completion.
+     * {@code manual_refill}. Fire-and-return -- poll {@link #state()} for completion.
      */
     @NonNull
     Result acquire(int mode) {
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/hugepage/Try.java b/app/src/main/java/cn/classfun/droidvm/ui/hugepage/Try.java
index 84df9409a..3f787d527 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/hugepage/Try.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/hugepage/Try.java
@@ -9,9 +9,9 @@
  * accumulates into an ordered {@code List<Try<...>>}; a success stops the ladder,
  * so the caller judges the overall outcome from the <b>last</b> element:
  * <ul>
- *   <li>last {@link #ok()} and alone — success via the primary implementation;</li>
- *   <li>last {@link #ok()} after earlier fails — success, degraded to a fallback;</li>
- *   <li>last not {@link #ok()} — failure, and every rung's reason is in the list.</li>
+ *   <li>last {@link #ok()} and alone -- success via the primary implementation;</li>
+ *   <li>last {@link #ok()} after earlier fails -- success, degraded to a fallback;</li>
+ *   <li>last not {@link #ok()} -- failure, and every rung's reason is in the list.</li>
  * </ul>
  *
  * @param <I> the feature's implementation enum (which way it was done)
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/setup/base/BaseCheckStepFragment.java b/app/src/main/java/cn/classfun/droidvm/ui/setup/base/BaseCheckStepFragment.java
index 2e44a05ac..eb9c89104 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/setup/base/BaseCheckStepFragment.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/setup/base/BaseCheckStepFragment.java
@@ -83,7 +83,7 @@ private void requestSkip() {
             .show();
     }
 
-    protected void showDetail(String text) {
+    protected void showDetail(CharSequence text) {
         tvStepDetail.setText(text);
         tvStepDetail.setVisibility(VISIBLE);
     }
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/setup/step/VirtualizationStepFragment.java b/app/src/main/java/cn/classfun/droidvm/ui/setup/step/VirtualizationStepFragment.java
index 8a8aee400..5003a803b 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/setup/step/VirtualizationStepFragment.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/setup/step/VirtualizationStepFragment.java
@@ -5,14 +5,24 @@
 import static cn.classfun.droidvm.lib.utils.ThreadUtils.threadSleep;
 import static cn.classfun.droidvm.ui.setup.SetupActivity.CHECK_DELAY;
 
+import android.content.Context;
+import android.graphics.drawable.Drawable;
 import android.os.Bundle;
+import android.text.SpannableStringBuilder;
+import android.text.Spanned;
+import android.text.style.ImageSpan;
 import android.util.Log;
 import android.view.LayoutInflater;
 import android.view.View;
 import android.view.ViewGroup;
 
+import androidx.annotation.ColorRes;
+import androidx.annotation.DrawableRes;
 import androidx.annotation.NonNull;
 import androidx.annotation.Nullable;
+import androidx.core.content.ContextCompat;
+
+import java.util.Objects;
 
 import cn.classfun.droidvm.R;
 import cn.classfun.droidvm.lib.store.vm.VMHypervisor;
@@ -46,15 +56,17 @@ private void operationThread() {
         threadSleep(CHECK_DELAY);
         boolean success = false;
         var ctx = requireContext();
-        var displayString = new StringBuilder();
+        // Per-hypervisor line with an inline check/cross icon (not an emoji) for
+        // its supported state; a Spannable carries the ImageSpans into the detail
+        // TextView. Built off the UI thread -- ImageSpan only holds a Drawable, it
+        // touches no view -- then handed to showDetail() on the UI thread.
+        var detail = new SpannableStringBuilder();
         for (var hyp : VMHypervisor.values()) {
             if (hyp.getDevicePath() == null) continue;
             var supported = hyp.isSupported();
-            displayString.append(fmt(
-                "%s: %s\n",
-                hyp.getDisplayString(ctx),
-                supported ? "✅" : "❌"
-            ));
+            if (detail.length() > 0) detail.append('\n');
+            detail.append(hyp.getDisplayString(ctx)).append(": ");
+            appendStatusIcon(detail, ctx, supported);
             Log.i(TAG, fmt(
                 "%s: %s",
                 hyp.name().toLowerCase(),
@@ -70,10 +82,26 @@ private void operationThread() {
             } else {
                 showError(R.string.setup_virt_title, R.string.setup_virt_fail);
             }
-            showDetail(displayString.toString());
+            showDetail(detail);
         });
     }
 
+    /** Appends a tinted check (supported) or cross (unsupported) icon inline. */
+    private static void appendStatusIcon(
+        @NonNull SpannableStringBuilder sb, @NonNull Context ctx, boolean supported
+    ) {
+        @DrawableRes int icon = supported ? R.drawable.ic_check : R.drawable.ic_close;
+        @ColorRes int tint = supported ? R.color.status_supported : R.color.status_unsupported;
+        Drawable d = Objects.requireNonNull(ContextCompat.getDrawable(ctx, icon)).mutate();
+        int size = Math.round(ctx.getResources().getDisplayMetrics().density * 16);
+        d.setBounds(0, 0, size, size);
+        d.setTint(ContextCompat.getColor(ctx, tint));
+        int start = sb.length();
+        sb.append(' '); // placeholder glyph the span draws over
+        sb.setSpan(new ImageSpan(d, ImageSpan.ALIGN_CENTER),
+            start, sb.length(), Spanned.SPAN_EXCLUSIVE_EXCLUSIVE);
+    }
+
     @Override
     public boolean isHiddenStep() {
         return !optBoolean("isRoot", false);
diff --git a/app/src/main/res/menu/menu_hugepage_process.xml b/app/src/main/res/menu/menu_hugepage_process.xml
index 706b70adc..a80f7d10c 100644
--- a/app/src/main/res/menu/menu_hugepage_process.xml
+++ b/app/src/main/res/menu/menu_hugepage_process.xml
@@ -2,10 +2,12 @@
 <menu xmlns:android="http://schemas.android.com/apk/res/android"
     xmlns:app="http://schemas.android.com/apk/res-auto">
 
-    <!-- Plain items; the active mode is shown by a ●/○ prefix set in code.
-         A checkableBehavior="single" radio was unreliable here: setChecked()
-         on overflow items doesn't redraw on some devices, leaving the radio
-         stuck on the wrong mode even though the mode itself was correct. -->
+    <!-- Plain items; the active mode is marked in code with a filled-vs-hollow
+         circle icon (ic_circle_filled / ic_circle_outline), set in
+         updateModeChecked(). A checkableBehavior="single" radio was unreliable
+         here: setChecked() on overflow items doesn't redraw on some devices,
+         leaving the radio stuck on the wrong mode even though the mode itself
+         was correct. -->
     <group android:id="@+id/grp_mode">
         <item
             android:id="@+id/menu_mode_ko"
diff --git a/app/src/main/res/values-zh-rTW/strings.xml b/app/src/main/res/values-zh-rTW/strings.xml
index 63c8f8c83..ad077a576 100644
--- a/app/src/main/res/values-zh-rTW/strings.xml
+++ b/app/src/main/res/values-zh-rTW/strings.xml
@@ -111,6 +111,10 @@
 
     <string name="vm_exited_success">虛擬機器"%1$s"已停止。</string>
     <string name="vm_exited_error">虛擬機器"%1$s"以退出碼 %2$d 退出。</string>
+    <string name="vm_exit_crash">虛擬機器"%1$s"已當機（退出碼 %2$d）。</string>
+    <string name="vm_exit_guest_panic">虛擬機器"%1$s"guest 核心 panic（退出碼 %2$d）。</string>
+    <string name="vm_exit_watchdog">虛擬機器"%1$s"停滯，已被看門狗重置（退出碼 %2$d）。</string>
+    <string name="vm_rebooting">正在重新啟動虛擬機器"%1$s"…</string>
     <string name="vm_exit_dialog_title">虛擬機器"%1$s"啟動失敗</string>
     <string name="vm_exit_dialog_message">虛擬機器以退出碼 %1$d 退出。\n\n日誌：</string>
     <string name="vm_exit_no_logs">無可用日誌。</string>
diff --git a/app/src/main/res/values/colors.xml b/app/src/main/res/values/colors.xml
index d0bb4de94..665b2beb4 100644
--- a/app/src/main/res/values/colors.xml
+++ b/app/src/main/res/values/colors.xml
@@ -25,4 +25,8 @@
 
     <color name="hugepage_bar_track">#33808080</color>
     <color name="hugepage_pending">#807D9CB3</color>
+
+    <!-- Inline supported/unsupported status icons (readable on light and dark). -->
+    <color name="status_supported">#FF4CAF50</color>
+    <color name="status_unsupported">#FFF44336</color>
 </resources>
diff --git a/scripts/ci/ascii_allow.txt b/scripts/ci/ascii_allow.txt
new file mode 100644
index 000000000..976cf50c0
--- /dev/null
+++ b/scripts/ci/ascii_allow.txt
@@ -0,0 +1,24 @@
+# Files permitted to contain non-ASCII bytes. Everything else tracked in the
+# repo must be pure 7-bit ASCII (enforced by check_ascii.py). One glob per line;
+# blank lines and '#' comments are ignored. Globs are matched against the
+# repo-relative path (POSIX '/'), and '*' also spans '/'.
+#
+# Only genuine natural-language / i18n content belongs here -- source code,
+# build files, layouts, manifests and config must stay ASCII.
+
+# UI strings: translation source (values/) and the translations themselves.
+app/src/main/res/values*/strings.xml
+
+# Privacy policy, one file per language.
+app/src/main/assets/privacy/*.txt
+
+# Localized data: repo-listing display names and language endonyms.
+app/src/main/assets/data/repo.yaml
+app/src/main/assets/data/languages.yaml
+
+# Documentation (prose; may name languages/tools in their own script).
+*.md
+
+# Third-party / tool-generated files we don't hand-edit.
+LICENSE.txt
+gradlew
diff --git a/scripts/ci/check_ascii.py b/scripts/ci/check_ascii.py
new file mode 100644
index 000000000..2feb45c94
--- /dev/null
+++ b/scripts/ci/check_ascii.py
@@ -0,0 +1,111 @@
+#!/usr/bin/env python3
+"""Fail if any tracked text file contains non-ASCII bytes.
+
+Source code, build files, layouts, manifests and config must be pure 7-bit
+ASCII so a stray smart-quote, em-dash, arrow or CJK character can't slip into
+code or a comment. Genuine natural-language / i18n content (translations,
+privacy text, docs, ...) is exempt via scripts/ci/ascii_allow.txt.
+
+Scope is the git index (`git ls-files`), so build outputs and submodule
+contents are never scanned. Binary files are skipped by extension and by a
+NUL-byte sniff. Exit status is 0 when clean, 1 when any violation is found.
+
+Usage: run from the repo root, or pass the repo root as argv[1].
+"""
+import fnmatch
+import os
+import subprocess
+import sys
+
+ALLOWLIST = "scripts/ci/ascii_allow.txt"
+
+# Extensions that are always binary -- skipped without reading.
+BINARY_EXT = {
+    ".webp", ".png", ".jpg", ".jpeg", ".gif", ".ico", ".bmp",
+    ".jar", ".zip", ".zst", ".gz", ".7z", ".apk", ".aar",
+    ".so", ".a", ".o", ".bin", ".dex",
+    ".ttf", ".otf", ".woff", ".woff2",
+    ".keystore", ".jks", ".pdf",
+}
+
+MAX_REPORT_PER_FILE = 5  # don't drown the log on a fully non-ASCII file
+
+
+def load_allow(root):
+    path = os.path.join(root, ALLOWLIST)
+    globs = []
+    if not os.path.isfile(path):
+        return globs
+    with open(path, encoding="utf-8") as fh:
+        for line in fh:
+            line = line.split("#", 1)[0].strip()
+            if line:
+                globs.append(line)
+    return globs
+
+
+def allowed(rel, globs):
+    return any(fnmatch.fnmatch(rel, g) for g in globs)
+
+
+def tracked_files(root):
+    out = subprocess.check_output(
+        ["git", "-C", root, "ls-files", "-z"])
+    return [p for p in out.decode("utf-8", "surrogateescape").split("\0") if p]
+
+
+def scan(root, rel):
+    """Return a list of (line, col, char) for non-ASCII bytes, or []."""
+    path = os.path.join(root, rel)
+    if not os.path.isfile(path):  # submodule gitlink, symlink to nowhere, ...
+        return []
+    if os.path.splitext(rel)[1].lower() in BINARY_EXT:
+        return []
+    with open(path, "rb") as fh:
+        data = fh.read()
+    if b"\x00" in data:  # looks binary
+        return []
+    hits = []
+    line = col = 1
+    for b in data:
+        if b == 0x0A:
+            line += 1
+            col = 1
+            continue
+        if b > 0x7F:
+            hits.append((line, col, b))
+        col += 1
+    return hits
+
+
+def main():
+    root = os.path.abspath(sys.argv[1]) if len(sys.argv) > 1 else os.getcwd()
+    globs = load_allow(root)
+    violations = 0
+    files_with_hits = 0
+    for rel in tracked_files(root):
+        if allowed(rel, globs):
+            continue
+        hits = scan(root, rel)
+        if not hits:
+            continue
+        files_with_hits += 1
+        violations += len(hits)
+        print(f"{rel}: {len(hits)} non-ASCII byte(s)")
+        for line, col, b in hits[:MAX_REPORT_PER_FILE]:
+            print(f"    {rel}:{line}:{col}: byte 0x{b:02X}")
+        if len(hits) > MAX_REPORT_PER_FILE:
+            print(f"    ... and {len(hits) - MAX_REPORT_PER_FILE} more")
+
+    if violations:
+        print()
+        print(f"FAIL: {violations} non-ASCII byte(s) in {files_with_hits} file(s).")
+        print("Use ASCII (e.g. -- for an em-dash, -> for an arrow), or add a")
+        print(f"genuinely-i18n path to {ALLOWLIST}.")
+        return 1
+    print("OK: no non-ASCII in tracked code/config files.")
+    return 0
+
+
+if __name__ == "__main__":
+    sys.exit(main())
diff --git a/scripts/ci/check_translations.py b/scripts/ci/check_translations.py
new file mode 100644
index 000000000..7c245a170
--- /dev/null
+++ b/scripts/ci/check_translations.py
@@ -0,0 +1,94 @@
+#!/usr/bin/env python3
+"""Fail if any locale is missing (or has extra) translated string entries.
+
+The base `values/strings.xml` is the source of truth: every entry that is not
+`translatable="false"` must appear in every `values-<locale>/strings.xml`, and a
+locale must not carry entries that no longer exist in the base. This keeps all
+languages at the same set of keys so nothing ships half-translated.
+
+Entries compared: <string>, <plurals> and <string-array>, keyed by name. (Only
+presence of the key is checked, not per-plural quantities -- those legitimately
+differ by language.) `values-night` and other non-locale qualifiers are ignored
+because they carry no strings.xml.
+
+Exit status is 0 when every locale matches the base, 1 otherwise.
+
+Usage: run from the repo root, or pass the res/ directory as argv[1].
+"""
+import os
+import sys
+import xml.etree.ElementTree as ET
+
+DEFAULT_RES = "app/src/main/res"
+ENTRY_TAGS = {"string", "plurals", "string-array"}
+
+
+def names(strings_xml):
+    """(translatable names, translatable=false names) in one strings.xml."""
+    root = ET.parse(strings_xml).getroot()
+    keep, nontrans = set(), set()
+    for el in root:
+        if el.tag not in ENTRY_TAGS:
+            continue
+        name = el.get("name")
+        if not name:
+            continue
+        if (el.get("translatable") or "").lower() == "false":
+            nontrans.add(name)
+        else:
+            keep.add(name)
+    return keep, nontrans
+
+
+def main():
+    res = os.path.abspath(sys.argv[1]) if len(sys.argv) > 1 else \
+        os.path.join(os.getcwd(), DEFAULT_RES)
+
+    base_xml = os.path.join(res, "values", "strings.xml")
+    if not os.path.isfile(base_xml):
+        print(f"FAIL: base strings.xml not found at {base_xml}")
+        return 1
+    base, base_nontrans = names(base_xml)
+    print(f"base (values/strings.xml): {len(base)} translatable "
+          f"({len(base_nontrans)} translatable=false)")
+
+    locales = []
+    for d in sorted(os.listdir(res)):
+        if not d.startswith("values-"):
+            continue
+        sp = os.path.join(res, d, "strings.xml")
+        if os.path.isfile(sp):       # non-locale qualifiers (e.g. values-night) have none
+            locales.append((d, sp))
+
+    if not locales:
+        print("OK: no translation locales to check.")
+        return 0
+
+    failed = False
+    for d, sp in locales:
+        loc, _ = names(sp)
+        missing = sorted(base - loc)
+        extra = sorted(loc - base)
+        stale = sorted(loc & base_nontrans)  # translating a non-translatable key
+        if not missing and not extra and not stale:
+            print(f"  OK   {d}: {len(loc)}/{len(base)}")
+            continue
+        failed = True
+        print(f"  FAIL {d}: {len(loc)}/{len(base)}")
+        for n in missing:
+            print(f"        missing:  {n}")
+        for n in extra:
+            print(f"        extra:    {n}  (not in base)")
+        for n in stale:
+            print(f"        stale:    {n}  (base marks it translatable=false)")
+
+    if failed:
+        print()
+        print("FAIL: translations are out of sync with the base strings.")
+        return 1
+    print("OK: every locale matches the base string set.")
+    return 0
+
+
+if __name__ == "__main__":
+    sys.exit(main())

From 67effe76e61b28add11e13b0e028a743130b5775 Mon Sep 17 00:00:00 2001
From: lateautumn233 <lateautumn233@foxmail.com>
Date: Sat, 4 Jul 2026 20:54:04 +0800
Subject: [PATCH 086/182] feat(disk): preserve compression when optimizing
 images

- Fix qemu-img convert: positional args must follow all options (was breaking -c placement)
- Add ImageUtils.hasCompressedClusters() using qemu-img check's real compressed-clusters count
- Implement applyKeepCompress() to preserve source compression algorithm during optimization
- New "Keep compression when optimizing" setting (disabled by default) with UI controls
- Add i18n strings (English, Simplified Chinese, Traditional Chinese)
---
 .../droidvm/lib/utils/ImageUtils.java         | 27 +++++++++++++
 .../ui/disk/action/DiskActionDialog.java      |  1 +
 .../disk/operation/DiskOperationActivity.java | 40 +++++++++++++++++++
 .../disk/operation/ImageCommandGenerate.java  | 13 ++++--
 .../main/settings/MainSettingsFragment.java   |  9 +++++
 .../res/layout/fragment_main_settings.xml     |  8 ++++
 app/src/main/res/values-zh-rCN/strings.xml    |  2 +
 app/src/main/res/values-zh-rTW/strings.xml    |  2 +
 app/src/main/res/values/strings.xml           |  2 +
 9 files changed, 100 insertions(+), 4 deletions(-)

diff --git a/app/src/main/java/cn/classfun/droidvm/lib/utils/ImageUtils.java b/app/src/main/java/cn/classfun/droidvm/lib/utils/ImageUtils.java
index af4f830a2..9e3b8297d 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/utils/ImageUtils.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/utils/ImageUtils.java
@@ -28,4 +28,31 @@ public static JSONObject getImageInfo(String path) throws JSONException {
         }
         return new JSONObject(result.getOutString());
     }
+
+    /**
+     * Whether {@code path} actually stores compressed clusters, per
+     * {@code qemu-img check}'s {@code compressed-clusters} count. This is the
+     * real signal: the qcow2 header's {@code compression-type} reads "zlib" for
+     * every v3 image (even ones with no compressed data), so it cannot tell an
+     * uncompressed disk from a compressed one. Unlike lbx, qemu-img reads both
+     * zlib and zstd images, so a zstd disk is detected too. Any detection
+     * failure (raw images reject {@code check}, etc.) returns {@code false} --
+     * an undetectable image is treated as uncompressed.
+     */
+    public static boolean hasCompressedClusters(String path) {
+        try {
+            var result = runListQuiet(
+                getPrebuiltBinaryPath("qemu-img"),
+                "check", "--output=json", path);
+            var out = result.getOutString();
+            // qemu-img check still writes its JSON report on non-zero exits
+            // (leaks/corruptions), so parse whatever it produced rather than
+            // gating on isSuccess(); a missing/garbage body throws -> false.
+            if (out == null || out.isEmpty())
+                return false;
+            return new JSONObject(out).optLong("compressed-clusters", 0) > 0;
+        } catch (Exception e) {
+            return false;
+        }
+    }
 }
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/disk/action/DiskActionDialog.java b/app/src/main/java/cn/classfun/droidvm/ui/disk/action/DiskActionDialog.java
index 56850ee19..99d717265 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/disk/action/DiskActionDialog.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/disk/action/DiskActionDialog.java
@@ -121,6 +121,7 @@ public void tryOptimize(@NonNull DiskConfig config) {
             try {
                 var info = ImageUtils.getImageInfo(config.getFullPath());
                 obj.put("action", "convert");
+                obj.put("keep_compress", true); // preserve compression when optimizing
                 obj.put("format", info.getString("format"));
                 if (info.has("backing-filename"))
                     obj.put("backing_path", info.getString("backing-filename"));
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/disk/operation/DiskOperationActivity.java b/app/src/main/java/cn/classfun/droidvm/ui/disk/operation/DiskOperationActivity.java
index 12a3b1e54..677cf3b39 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/disk/operation/DiskOperationActivity.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/disk/operation/DiskOperationActivity.java
@@ -3,6 +3,8 @@
 import static android.view.View.GONE;
 import static android.view.View.VISIBLE;
 import static cn.classfun.droidvm.lib.utils.FileUtils.findExecute;
+import static cn.classfun.droidvm.lib.utils.ImageUtils.getImageInfo;
+import static cn.classfun.droidvm.lib.utils.ImageUtils.hasCompressedClusters;
 import static cn.classfun.droidvm.lib.utils.ProcessUtils.SIGHUP;
 import static cn.classfun.droidvm.lib.utils.ProcessUtils.shellKillProcess;
 import static cn.classfun.droidvm.lib.utils.StringUtils.basename;
@@ -42,6 +44,7 @@
 import cn.classfun.droidvm.lib.ui.termux.SimpleTerminalSessionClient;
 import cn.classfun.droidvm.lib.ui.termux.TerminalFonts;
 import cn.classfun.droidvm.lib.ui.termux.SimpleTerminalViewClient;
+import cn.classfun.droidvm.ui.main.settings.MainSettingsFragment;
 
 public final class DiskOperationActivity extends AppCompatActivity {
     private static final String TAG = "DiskOperationActivity";
@@ -133,6 +136,7 @@ public static void startOptimize(
         try {
             var obj = new JSONObject();
             obj.put("action", "convert");
+            obj.put("keep_compress", true); // preserve compression when optimizing
             var intent = createIntent(context, diskId, obj);
             context.startActivity(intent);
         } catch (Exception e) {
@@ -221,6 +225,7 @@ public void handleOnBackPressed() {
             final String cmd;
             try {
                 var task = new JSONObject(taskJsonStr);
+                applyKeepCompress(getApplicationContext(), task, diskPath);
                 var gen = new ImageCommandGenerate(diskStore);
                 cmd = gen.buildCommand(task, diskPath);
                 taskAction = task.optString("action", "");
@@ -235,6 +240,41 @@ public void handleOnBackPressed() {
         });
     }
 
+    /**
+     * When a task opts into keep-compress (the user-facing "optimize", not the
+     * pre-start decompress in {@link #optimizeForResultIntent}), re-compress the
+     * rewritten image with the algorithm the source uses instead of rewriting it
+     * uncompressed. Whether the source is compressed at all is decided by
+     * qemu-img's real {@code compressed-clusters} count
+     * ({@code ImageUtils.hasCompressedClusters}); the qcow2 header's
+     * {@code compression-type} is only read to pick zlib vs
+     * zstd, because that header field reads "zlib" for every v3 image and so
+     * cannot on its own distinguish an uncompressed disk from a compressed one.
+     * An uncompressed source (raw, or a v3 qcow2 with no compressed data) is left
+     * alone. An explicit {@code compress} in the task always wins, the user can
+     * turn this off globally in settings, and any detection failure falls through
+     * to the default (uncompressed) rewrite.
+     */
+    private static void applyKeepCompress(
+        @NonNull Context ctx, @NonNull JSONObject task, @NonNull String path) {
+        if (!task.optBoolean("keep_compress", false) || task.has("compress"))
+            return;
+        if (!MainSettingsFragment.isKeepCompressOnOptimizeEnabled(ctx))
+            return;
+        try {
+            if (!hasCompressedClusters(path))
+                return; // nothing actually compressed -- rewrite uncompressed
+            var info = getImageInfo(path);
+            var fmtSpecific = info.optJSONObject("format-specific");
+            var data = fmtSpecific == null ? null : fmtSpecific.optJSONObject("data");
+            var type = data == null ? "" : data.optString("compression-type", "");
+            // qemu compression-type zstd stays zstd; zlib (and anything else) -> deflate.
+            task.put("compress", "zstd".equals(type) ? "zstd" : "deflate");
+        } catch (Exception e) {
+            Log.w(TAG, "keep-compress detection failed", e);
+        }
+    }
+
     private void startTerminalSession(String cmd) {
         var shell = findExecute("su", "/system/bin/su");
         var cwd = getFilesDir().getAbsolutePath();
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/disk/operation/ImageCommandGenerate.java b/app/src/main/java/cn/classfun/droidvm/ui/disk/operation/ImageCommandGenerate.java
index 8059020ac..33aaef6c3 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/disk/operation/ImageCommandGenerate.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/disk/operation/ImageCommandGenerate.java
@@ -118,7 +118,6 @@ private void appendConvert() throws JSONException {
             task.put("format", format);
         } else throw new RuntimeException("No format specified in task or image info");
         sb.append(" --target-format ").append(format);
-        sb.append(" ").append(eDiskPath).append(" ");
         if (task.has("output")) {
             outputPath = task.getString("output");
         } else {
@@ -129,11 +128,17 @@ private void appendConvert() throws JSONException {
         if (!opts.isEmpty())
             sb.append(" --target-format-options ").append(opts);
         if (!task.optString("compress", "none").equals("none"))
-            sb.append(" --compress");
-        sb.append(" ");
+            // -c (short form): the bundled qemu-img rejects the --compress long
+            // option even though it accepts the other long options.
+            sb.append(" -c");
+        // Positional args go last. qemu-img stops parsing options at the first
+        // SRC_FILE (convert accepts multiple source files), so any option after
+        // it -- e.g. --compress -- is misread as an extra source file. All
+        // options must precede SRC_FILE.
         realPath = escapedString(outputPath);
         tmpPath = escapedString(fmt("%s.tmp", diskPath));
-        sb.append(useTempPath ? tmpPath : realPath);
+        sb.append(" ").append(eDiskPath);
+        sb.append(" ").append(useTempPath ? tmpPath : realPath);
     }
 
     @NonNull
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/main/settings/MainSettingsFragment.java b/app/src/main/java/cn/classfun/droidvm/ui/main/settings/MainSettingsFragment.java
index e65053e55..e09bfb6b2 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/main/settings/MainSettingsFragment.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/main/settings/MainSettingsFragment.java
@@ -65,6 +65,7 @@ public final class MainSettingsFragment extends MainBaseFragment {
     private static final String PREFS_NAME = "droidvm_prefs";
     public static final String KEY_VM_AUTO_CONSOLE = "vm_auto_console";
     public static final String KEY_VM_CLEAR_LOGS_BEFORE_START = "vm_clear_logs_before_start";
+    public static final String KEY_VM_KEEP_COMPRESS_ON_OPTIMIZE = "vm_keep_compress_on_optimize";
     public static final String KEY_AUTO_CHECK_UPDATE = "auto_check_update";
     private final Handler mainHandler = new Handler(Looper.getMainLooper());
     private final Runnable daemonStatusRefreshRunnable = this::periodRefreshDaemonStatus;
@@ -78,6 +79,7 @@ public final class MainSettingsFragment extends MainBaseFragment {
     private TextRowWidget itemDaemonRestart;
     private SwitchRowWidget itemVMAutoConsole;
     private SwitchRowWidget itemVMClearLogsBeforeStart;
+    private SwitchRowWidget itemVMKeepCompressOnOptimize;
     private TextRowWidget itemLicense;
     private SwitchRowWidget itemAutoCheckUpdate;
     private TextRowWidget itemCheckUpdate;
@@ -130,6 +132,7 @@ public void onViewCreated(@NonNull View view, @Nullable Bundle savedInstanceStat
         itemDaemonRestart = view.findViewById(R.id.item_daemon_restart);
         itemVMAutoConsole = view.findViewById(R.id.item_vm_auto_console);
         itemVMClearLogsBeforeStart = view.findViewById(R.id.item_vm_clear_logs_before_start);
+        itemVMKeepCompressOnOptimize = view.findViewById(R.id.item_vm_keep_compress_on_optimize);
         itemLicense = view.findViewById(R.id.item_license);
         itemAutoCheckUpdate = view.findViewById(R.id.item_auto_check_update);
         itemCheckUpdate = view.findViewById(R.id.item_check_update);
@@ -160,6 +163,7 @@ private void initSettings() {
         bindOnClick(itemDaemonRestart, daemon::asyncRestartDaemon);
         bindOnChecked(itemVMAutoConsole, KEY_VM_AUTO_CONSOLE, false);
         bindOnChecked(itemVMClearLogsBeforeStart, KEY_VM_CLEAR_LOGS_BEFORE_START, false);
+        bindOnChecked(itemVMKeepCompressOnOptimize, KEY_VM_KEEP_COMPRESS_ON_OPTIMIZE, false);
         bindOnChecked(itemAutoCheckUpdate, KEY_AUTO_CHECK_UPDATE, true);
         bindOnClick(itemCheckUpdate, this::checkUpdate);
         bindOnClick(itemPrivacy, this::showPrivacyPolicy);
@@ -203,6 +207,11 @@ public static boolean isClearLogsBeforeStartEnabled(@NonNull Context context) {
         return prefs.getBoolean(KEY_VM_CLEAR_LOGS_BEFORE_START, false);
     }
 
+    public static boolean isKeepCompressOnOptimizeEnabled(@NonNull Context context) {
+        var prefs = context.getSharedPreferences(PREFS_NAME, Context.MODE_PRIVATE);
+        return prefs.getBoolean(KEY_VM_KEEP_COMPRESS_ON_OPTIMIZE, false);
+    }
+
     public static boolean isAutoCheckUpdateEnabled(@NonNull Context context) {
         var prefs = context.getSharedPreferences(PREFS_NAME, Context.MODE_PRIVATE);
         return prefs.getBoolean(KEY_AUTO_CHECK_UPDATE, true);
diff --git a/app/src/main/res/layout/fragment_main_settings.xml b/app/src/main/res/layout/fragment_main_settings.xml
index 948cdf8e5..250c048e8 100644
--- a/app/src/main/res/layout/fragment_main_settings.xml
+++ b/app/src/main/res/layout/fragment_main_settings.xml
@@ -63,6 +63,14 @@
                     android:subtitle="@string/settings_vm_clear_logs_before_start_summary"
                     android:text="@string/settings_vm_clear_logs_before_start_title" />
 
+                <cn.classfun.droidvm.ui.widgets.row.SwitchRowWidget
+                    android:id="@+id/item_vm_keep_compress_on_optimize"
+                    android:layout_width="match_parent"
+                    android:layout_height="wrap_content"
+                    android:icon="@drawable/ic_wand"
+                    android:subtitle="@string/settings_vm_keep_compress_on_optimize_summary"
+                    android:text="@string/settings_vm_keep_compress_on_optimize_title" />
+
             </cn.classfun.droidvm.ui.widgets.container.CollapsibleContainer>
 
             <cn.classfun.droidvm.ui.widgets.container.CollapsibleContainer
diff --git a/app/src/main/res/values-zh-rCN/strings.xml b/app/src/main/res/values-zh-rCN/strings.xml
index 0fed84dc5..da3bbee7a 100644
--- a/app/src/main/res/values-zh-rCN/strings.xml
+++ b/app/src/main/res/values-zh-rCN/strings.xml
@@ -367,6 +367,8 @@
     <string name="settings_vm_auto_console_summary">启动虚拟机时自动打开控制台</string>
     <string name="settings_vm_clear_logs_before_start_title">启动前清理日志</string>
     <string name="settings_vm_clear_logs_before_start_summary">启动虚拟机前清理该虚拟机的所有控制台日志</string>
+    <string name="settings_vm_keep_compress_on_optimize_title">优化时保持压缩</string>
+    <string name="settings_vm_keep_compress_on_optimize_summary">优化磁盘时保留其原有压缩而非解压；关闭则重写为未压缩</string>
     <string name="settings_category_about">关于</string>
     <string name="settings_feedback_title">问题反馈</string>
     <string name="settings_feedback_summary">在 GitHub 上报告问题</string>
diff --git a/app/src/main/res/values-zh-rTW/strings.xml b/app/src/main/res/values-zh-rTW/strings.xml
index ca90d6224..13af394a9 100644
--- a/app/src/main/res/values-zh-rTW/strings.xml
+++ b/app/src/main/res/values-zh-rTW/strings.xml
@@ -363,6 +363,8 @@
     <string name="settings_vm_auto_console_summary">啟動虛擬機器時自動開啟控制台</string>
     <string name="settings_vm_clear_logs_before_start_title">啟動前清理日誌</string>
     <string name="settings_vm_clear_logs_before_start_summary">啟動虛擬機器前清理該虛擬機器的所有控制台日誌</string>
+    <string name="settings_vm_keep_compress_on_optimize_title">最佳化時保持壓縮</string>
+    <string name="settings_vm_keep_compress_on_optimize_summary">最佳化磁碟時保留其原有壓縮而非解壓縮；關閉則重寫為未壓縮</string>
     <string name="settings_category_about">關於</string>
     <string name="settings_feedback_title">問題反饋</string>
     <string name="settings_feedback_summary">在 GitHub 上報告問題</string>
diff --git a/app/src/main/res/values/strings.xml b/app/src/main/res/values/strings.xml
index 7692a340f..3ca868778 100644
--- a/app/src/main/res/values/strings.xml
+++ b/app/src/main/res/values/strings.xml
@@ -369,6 +369,8 @@
     <string name="settings_vm_auto_console_summary">Automatically open the console when a VM is started</string>
     <string name="settings_vm_clear_logs_before_start_title">Clear logs before start</string>
     <string name="settings_vm_clear_logs_before_start_summary">Clear all console logs for the VM before it starts</string>
+    <string name="settings_vm_keep_compress_on_optimize_title">Keep compression when optimizing</string>
+    <string name="settings_vm_keep_compress_on_optimize_summary">Preserve a disk\'s existing compression when optimizing instead of decompressing it; off rewrites the disk uncompressed</string>
     <string name="settings_category_about">About</string>
     <string name="settings_feedback_title">Feedback</string>
     <string name="settings_feedback_summary">Report issues on GitHub</string>

From 2ccfec6eb45a418c947d59e34ad6be2290fa9e4f Mon Sep 17 00:00:00 2001
From: lateautumn233 <lateautumn233@foxmail.com>
Date: Sun, 5 Jul 2026 22:05:15 +0800
Subject: [PATCH 087/182] feat(disk): add compression option to convert dialog
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

- Add compression selector (visible only for QCOW2 format)
- Allow QCOW2→QCOW2 conversion to support re-compression/decompression
- Handle in-place re-compress via temp file path to avoid read lock collision
---
 .../ui/disk/action/DiskSetFormatDialog.java   | 24 +++++++++++++++++--
 .../disk/operation/DiskOperationActivity.java |  5 +++-
 .../disk/operation/ImageCommandGenerate.java  |  5 ++++
 .../res/layout/dialog_disk_set_format.xml     |  8 +++++++
 4 files changed, 39 insertions(+), 3 deletions(-)

diff --git a/app/src/main/java/cn/classfun/droidvm/ui/disk/action/DiskSetFormatDialog.java b/app/src/main/java/cn/classfun/droidvm/ui/disk/action/DiskSetFormatDialog.java
index 37043d3e8..358f48696 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/disk/action/DiskSetFormatDialog.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/disk/action/DiskSetFormatDialog.java
@@ -7,6 +7,10 @@
 import static cn.classfun.droidvm.lib.utils.ThreadUtils.runOnPool;
 import static cn.classfun.droidvm.ui.disk.operation.DiskOperationActivity.startConvert;
 
+import static android.view.View.GONE;
+import static android.view.View.VISIBLE;
+import static cn.classfun.droidvm.lib.store.disk.DiskConfig.supportsCompress;
+
 import android.content.Context;
 import android.os.Handler;
 import android.os.Looper;
@@ -23,6 +27,7 @@
 import cn.classfun.droidvm.R;
 import cn.classfun.droidvm.lib.store.disk.DiskConfig;
 import cn.classfun.droidvm.lib.utils.ImageUtils;
+import cn.classfun.droidvm.ui.disk.create.DiskCompress;
 import cn.classfun.droidvm.ui.disk.create.DiskFormat;
 import cn.classfun.droidvm.ui.widgets.row.ChooseRowWidget;
 import cn.classfun.droidvm.ui.widgets.row.TextInputRowWidget;
@@ -34,6 +39,7 @@ public final class DiskSetFormatDialog {
     private final DiskConfig config;
     private TextInputRowWidget inputName;
     private ChooseRowWidget chooseFormat;
+    private ChooseRowWidget chooseCompress;
     private TextView tvCurrentFormat;
     private DiskFormat currentFormat = null;
 
@@ -47,14 +53,18 @@ public void show() {
         tvCurrentFormat = view.findViewById(R.id.tv_current_format);
         inputName = view.findViewById(R.id.input_name);
         chooseFormat = view.findViewById(R.id.choose_format);
+        chooseCompress = view.findViewById(R.id.choose_compress);
         chooseFormat.setItems(DiskFormat.class);
+        chooseCompress.configure(DiskCompress.class, DiskCompress.DEFLATE);
         inputName.setText(config.getName());
         tvCurrentFormat.setText(R.string.disk_set_format_loading);
         runOnPool(this::loadImageInfo);
         chooseFormat.setOnValueChangedListener(() -> {
             DiskFormat fmt = chooseFormat.getSelectedItem();
             updateFileName(inputName, config.getName(), fmt.getExt());
+            updateCompressVisibility(fmt);
         });
+        updateCompressVisibility(chooseFormat.getSelectedItem());
         var dialog = new MaterialAlertDialogBuilder(context)
             .setTitle(R.string.disk_set_format_title)
             .setView(view)
@@ -70,16 +80,25 @@ public void show() {
             }
             inputName.setError(null);
             DiskFormat format = chooseFormat.getSelectedItem();
-            if (format.equals(currentFormat)) {
+            // Same format is still a valid conversion when it carries a
+            // compression choice (qcow2): the user may only be re-compressing.
+            if (format.equals(currentFormat) && !supportsCompress(format)) {
                 Toast.makeText(context, R.string.disk_set_format_error_same, LENGTH_LONG).show();
                 return;
             }
             dialog.dismiss();
             var output = pathJoin(config.item.optString("folder", ""), name);
-            startConvert(context, config.getId(), format.name().toLowerCase(), output);
+            var compress = supportsCompress(format)
+                ? chooseCompress.<DiskCompress>getSelectedItem().name().toLowerCase()
+                : "none";
+            startConvert(context, config.getId(), format.name().toLowerCase(), output, compress);
         });
     }
 
+    private void updateCompressVisibility(DiskFormat fmt) {
+        chooseCompress.setVisibility(supportsCompress(fmt) ? VISIBLE : GONE);
+    }
+
     private void loadImageInfo() {
         try {
             currentFormat = null;
@@ -100,6 +119,7 @@ private void loadImageInfo() {
                 currentFormat = chooseFormat.getSelectedItem();
             }
             updateFileName(inputName, config.getName(), currentFormat.getExt());
+            updateCompressVisibility(chooseFormat.getSelectedItem());
         });
     }
 
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/disk/operation/DiskOperationActivity.java b/app/src/main/java/cn/classfun/droidvm/ui/disk/operation/DiskOperationActivity.java
index 677cf3b39..5a04126b6 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/disk/operation/DiskOperationActivity.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/disk/operation/DiskOperationActivity.java
@@ -148,13 +148,16 @@ public static void startConvert(
         @NonNull Context context,
         @NonNull UUID diskId,
         @NonNull String format,
-        @NonNull String output
+        @NonNull String output,
+        @NonNull String compress
     ) {
         try {
             var obj = new JSONObject();
             obj.put("action", "convert");
             obj.put("format", format);
             obj.put("output", output);
+            if (!compress.equals("none"))
+                obj.put("compress", compress);
             var intent = createIntent(context, diskId, obj);
             context.startActivity(intent);
         } catch (Exception e) {
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/disk/operation/ImageCommandGenerate.java b/app/src/main/java/cn/classfun/droidvm/ui/disk/operation/ImageCommandGenerate.java
index 33aaef6c3..157ae6f97 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/disk/operation/ImageCommandGenerate.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/disk/operation/ImageCommandGenerate.java
@@ -120,6 +120,11 @@ private void appendConvert() throws JSONException {
         sb.append(" --target-format ").append(format);
         if (task.has("output")) {
             outputPath = task.getString("output");
+            // In-place re-compress (output == source): writing straight to the
+            // target collides with the source's own read lock, so route through
+            // the .tmp + rename path even though an output was given.
+            if (outputPath.equals(diskPath))
+                useTempPath = true;
         } else {
             useTempPath = true;
         }
diff --git a/app/src/main/res/layout/dialog_disk_set_format.xml b/app/src/main/res/layout/dialog_disk_set_format.xml
index eeca2d5dc..e6cf78467 100644
--- a/app/src/main/res/layout/dialog_disk_set_format.xml
+++ b/app/src/main/res/layout/dialog_disk_set_format.xml
@@ -31,4 +31,12 @@
         android:icon="@drawable/ic_disk_format"
         android:text="@string/disk_set_format_target" />
 
+    <cn.classfun.droidvm.ui.widgets.row.ChooseRowWidget
+        android:id="@+id/choose_compress"
+        android:layout_width="match_parent"
+        android:layout_height="wrap_content"
+        android:icon="@drawable/ic_compress"
+        android:text="@string/disk_create_compress"
+        android:visibility="gone" />
+
 </LinearLayout>

From aecff06bbfd4dd64eef0d8b950b5fbf160fc3b95 Mon Sep 17 00:00:00 2001
From: lateautumn233 <lateautumn233@foxmail.com>
Date: Sun, 5 Jul 2026 23:37:28 +0800
Subject: [PATCH 088/182] feat(cpu): add CPU affinity support for disk
 operations

- New CpuUtils utility to enumerate cores and identify frequency tiers
- Add CPU affinity settings UI with multi-core selection dialog
- Bind disk operations (qemu-img, clone) to selected cores via taskset
- Support automatic big-core filtering on heterogeneous CPU layouts
- Reserve KEY_CROSVM_CPU_AFFINITY for future VM affinity support
---
 .../vm/backend/CrosvmBackendInstance.java     |   5 +
 .../classfun/droidvm/lib/utils/CpuUtils.java  | 214 ++++++++++++++++++
 .../disk/operation/DiskOperationActivity.java |   2 +
 .../disk/operation/ImageCommandGenerate.java  |  17 ++
 .../main/settings/MainSettingsFragment.java   | 106 +++++++++
 .../res/layout/fragment_main_settings.xml     |   8 +
 app/src/main/res/values-zh-rCN/strings.xml    |   7 +
 app/src/main/res/values-zh-rTW/strings.xml    |   7 +
 app/src/main/res/values/strings.xml           |   7 +
 9 files changed, 373 insertions(+)
 create mode 100644 app/src/main/java/cn/classfun/droidvm/lib/utils/CpuUtils.java

diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/CrosvmBackendInstance.java b/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/CrosvmBackendInstance.java
index f83505f23..756bba52b 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/CrosvmBackendInstance.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/CrosvmBackendInstance.java
@@ -135,6 +135,11 @@ private List<String> buildCommand() {
         var item = config.item;
         var args = new ArrayList<String>();
         prepareStraceArguments(args);
+        // TODO(cpu-affinity): to bind the VM to selected host cores, prepend a
+        // system-taskset wrapper here (mirroring prepareStraceArguments):
+        // "taskset -a <hexMask>", with the mask from CpuUtils.coresCsvToHexMask
+        // reading a future MainSettingsFragment.KEY_CROSVM_CPU_AFFINITY setting.
+        // Note toybox taskset takes a hex mask (no "0x"), not a -c core list.
         args.add(getPrebuiltBinaryPath("crosvm"));
         // Top-level flag (must precede `run`): makes crosvm surface CommandStatus
         // exit codes (see CrosvmExit) so runVM() can tell reset/crash/panic apart.
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/utils/CpuUtils.java b/app/src/main/java/cn/classfun/droidvm/lib/utils/CpuUtils.java
new file mode 100644
index 000000000..fdb94c03a
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/lib/utils/CpuUtils.java
@@ -0,0 +1,214 @@
+package cn.classfun.droidvm.lib.utils;
+
+import android.util.Log;
+
+import androidx.annotation.NonNull;
+
+import java.io.File;
+import java.util.ArrayList;
+import java.util.List;
+import java.util.Locale;
+import java.util.TreeSet;
+import java.util.regex.Pattern;
+
+/**
+ * Host CPU topology helper: enumerates cores, reads each core's max frequency
+ * from sysfs and groups them into frequency tiers so callers can tell the
+ * little cluster apart from the big/prime clusters (for CPU-affinity binding).
+ * Reads are best-effort; a core whose frequency cannot be read is reported with
+ * {@code maxFreqKHz == 0} and treated as tier 0.
+ */
+public final class CpuUtils {
+    private static final String TAG = "CpuUtils";
+    private static final String CPU_ROOT = "/sys/devices/system/cpu";
+    private static final Pattern CPU_DIR = Pattern.compile("cpu\\d+");
+
+    private CpuUtils() {
+    }
+
+    /** A single host CPU core and its cluster classification. */
+    public static final class CpuCore {
+        public final int index;
+        public final long maxFreqKHz; // 0 when unknown
+        public final int tier;        // 0 = lowest-freq cluster, ascending
+        public final boolean big;     // true when not in the lowest-freq cluster
+
+        CpuCore(int index, long maxFreqKHz, int tier, boolean big) {
+            this.index = index;
+            this.maxFreqKHz = maxFreqKHz;
+            this.tier = tier;
+            this.big = big;
+        }
+    }
+
+    /**
+     * Enumerate host cores sorted by index, each tagged with its frequency tier.
+     * Never returns null; falls back to {@link Runtime#availableProcessors()}
+     * with unknown frequencies if sysfs cannot be read.
+     */
+    @NonNull
+    public static List<CpuCore> getCores() {
+        var indices = listCoreIndices();
+        var freqs = new long[indices.size()];
+        var distinct = new TreeSet<Long>();
+        for (int i = 0; i < indices.size(); i++) {
+            freqs[i] = readMaxFreqKHz(indices.get(i));
+            if (freqs[i] > 0) distinct.add(freqs[i]);
+        }
+        // Ascending tier index per distinct frequency; unknown (0) stays tier 0.
+        var tierOf = new ArrayList<>(distinct);
+        var cores = new ArrayList<CpuCore>(indices.size());
+        for (int i = 0; i < indices.size(); i++) {
+            int tier = freqs[i] > 0 ? tierOf.indexOf(freqs[i]) : 0;
+            cores.add(new CpuCore(indices.get(i), freqs[i], tier, tier > 0));
+        }
+        return cores;
+    }
+
+    /** Number of distinct frequency clusters (1 when frequencies are unknown). */
+    public static int tierCount(@NonNull List<CpuCore> cores) {
+        int max = 0;
+        for (var c : cores) max = Math.max(max, c.tier);
+        return max + 1;
+    }
+
+    /**
+     * Default selection for "filter out the little cores": every core that is
+     * not in the lowest-frequency cluster. When there is only a single cluster
+     * (or detection failed) all cores are returned, since filtering is moot.
+     */
+    @NonNull
+    public static String defaultBigCoresCsv() {
+        var cores = getCores();
+        boolean single = tierCount(cores) <= 1;
+        var sb = new StringBuilder();
+        for (var c : cores) {
+            if (single || c.big) {
+                if (sb.length() > 0) sb.append(',');
+                sb.append(c.index);
+            }
+        }
+        return sb.toString();
+    }
+
+    /** Format a KHz frequency as e.g. "2.60 GHz"; empty string when unknown. */
+    @NonNull
+    public static String formatFreq(long khz) {
+        if (khz <= 0) return "";
+        return String.format(Locale.US, "%.2f GHz", khz / 1_000_000.0);
+    }
+
+    /**
+     * Collapse a core-index CSV into a compact range string, e.g.
+     * "4,5,6,7" -> "4-7", "0,4,5,6,7" -> "0,4-7". Returns "" for empty input.
+     */
+    @NonNull
+    public static String compactRanges(@NonNull String csv) {
+        var nums = parseCsv(csv);
+        if (nums.isEmpty()) return "";
+        var sb = new StringBuilder();
+        int start = nums.get(0), prev = start;
+        for (int i = 1; i <= nums.size(); i++) {
+            int cur = i < nums.size() ? nums.get(i) : Integer.MIN_VALUE;
+            if (cur == prev + 1) {
+                prev = cur;
+                continue;
+            }
+            if (sb.length() > 0) sb.append(',');
+            if (start == prev) sb.append(start);
+            else sb.append(start).append('-').append(prev);
+            start = prev = cur;
+        }
+        return sb.toString();
+    }
+
+    /**
+     * Convert a core-index CSV into the hex CPU mask that toybox {@code taskset}
+     * expects (no "0x" prefix), e.g. "4,5,6,7" -> "f0", "0,1" -> "3". Returns
+     * "" for empty input. Bit N set means core N is allowed.
+     */
+    @NonNull
+    public static String coresCsvToHexMask(@NonNull String csv) {
+        var nums = parseCsv(csv);
+        if (nums.isEmpty()) return "";
+        var mask = java.math.BigInteger.ZERO;
+        for (int idx : nums) {
+            if (idx >= 0) mask = mask.setBit(idx);
+        }
+        return mask.signum() == 0 ? "" : mask.toString(16);
+    }
+
+    @NonNull
+    private static List<Integer> parseCsv(@NonNull String csv) {
+        var out = new ArrayList<Integer>();
+        if (csv.isEmpty()) return out;
+        for (var part : csv.split(",")) {
+            part = part.trim();
+            if (part.isEmpty()) continue;
+            try {
+                out.add(Integer.parseInt(part));
+            } catch (NumberFormatException ignored) {
+            }
+        }
+        return out;
+    }
+
+    @NonNull
+    private static List<Integer> listCoreIndices() {
+        var out = new ArrayList<Integer>();
+        var root = new File(CPU_ROOT);
+        var dirs = root.listFiles();
+        if (dirs != null) {
+            for (var d : dirs) {
+                if (!d.isDirectory() || !CPU_DIR.matcher(d.getName()).matches()) continue;
+                try {
+                    out.add(Integer.parseInt(d.getName().substring(3)));
+                } catch (NumberFormatException ignored) {
+                }
+            }
+        }
+        if (out.isEmpty()) {
+            // sysfs unreadable -- fall back to the runtime-reported count.
+            int n = Math.max(1, Runtime.getRuntime().availableProcessors());
+            for (int i = 0; i < n; i++) out.add(i);
+        } else {
+            out.sort(Integer::compareTo);
+        }
+        return out;
+    }
+
+    private static long readMaxFreqKHz(int index) {
+        // cpuinfo_max_freq is the hardware ceiling; scaling_max_freq is the
+        // policy ceiling (usually equal). Try the direct read first, then a
+        // root-backed read, before giving up on this core.
+        long v = tryReadFreq(fmt("%s/cpu%d/cpufreq/cpuinfo_max_freq", CPU_ROOT, index));
+        if (v > 0) return v;
+        return tryReadFreq(fmt("%s/cpu%d/cpufreq/scaling_max_freq", CPU_ROOT, index));
+    }
+
+    private static long tryReadFreq(@NonNull String path) {
+        String raw = null;
+        try {
+            raw = FileUtils.readFile(path);
+        } catch (Exception directFailed) {
+            try {
+                raw = FileUtils.shellReadFile(path);
+            } catch (Exception rootFailed) {
+                Log.d(TAG, "freq read failed: " + path);
+            }
+        }
+        if (raw == null) return 0;
+        raw = raw.trim();
+        if (raw.isEmpty()) return 0;
+        try {
+            return Long.parseLong(raw);
+        } catch (NumberFormatException e) {
+            return 0;
+        }
+    }
+
+    @NonNull
+    private static String fmt(@NonNull String f, Object... args) {
+        return String.format(Locale.US, f, args);
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/disk/operation/DiskOperationActivity.java b/app/src/main/java/cn/classfun/droidvm/ui/disk/operation/DiskOperationActivity.java
index 5a04126b6..6edf43ac9 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/disk/operation/DiskOperationActivity.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/disk/operation/DiskOperationActivity.java
@@ -230,6 +230,8 @@ public void handleOnBackPressed() {
                 var task = new JSONObject(taskJsonStr);
                 applyKeepCompress(getApplicationContext(), task, diskPath);
                 var gen = new ImageCommandGenerate(diskStore);
+                gen.setCpuAffinity(
+                    MainSettingsFragment.getQemuImgCpuAffinity(getApplicationContext()));
                 cmd = gen.buildCommand(task, diskPath);
                 taskAction = task.optString("action", "");
                 outputPath = gen.getOutputPath();
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/disk/operation/ImageCommandGenerate.java b/app/src/main/java/cn/classfun/droidvm/ui/disk/operation/ImageCommandGenerate.java
index 157ae6f97..825285c46 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/disk/operation/ImageCommandGenerate.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/disk/operation/ImageCommandGenerate.java
@@ -14,6 +14,7 @@
 import java.util.UUID;
 
 import cn.classfun.droidvm.lib.store.disk.DiskStore;
+import cn.classfun.droidvm.lib.utils.CpuUtils;
 import cn.classfun.droidvm.ui.disk.create.DiskFormat;
 
 public final class ImageCommandGenerate {
@@ -25,6 +26,7 @@ public final class ImageCommandGenerate {
     private String realPath;
     private String tmpPath;
     private String outputPath;
+    private String cpuAffinity = "";
     private final DiskStore diskStore;
 
     public ImageCommandGenerate(@NonNull DiskStore diskStore) {
@@ -35,6 +37,14 @@ public String getOutputPath() {
         return outputPath;
     }
 
+    /**
+     * Restrict the worker (qemu-img, or pv for clone) to the given host cores.
+     * Value is a taskset -c list such as "4,5,6,7"; empty means no binding.
+     */
+    public void setCpuAffinity(String cpuAffinity) {
+        this.cpuAffinity = cpuAffinity == null ? "" : cpuAffinity;
+    }
+
     @NonNull
     public String buildCommand(@NonNull JSONObject task, String diskPath) throws JSONException {
         this.task = task;
@@ -50,6 +60,13 @@ public String buildCommand(@NonNull JSONObject task, String diskPath) throws JSO
         sb.append("set -x; ");
         sb.append(fmt("mkdir -pv %s; ", escapedString(dirname(diskPath))));
         sb.append("if ");
+        // Bind the worker to selected host cores. The prefix goes before both
+        // the qemu-img and the clone/pv binary, so it covers every action.
+        // Uses Android's system taskset (toybox), which takes a hex CPU mask
+        // with no "0x" prefix -- the bundled busybox has no taskset applet.
+        var affinityMask = CpuUtils.coresCsvToHexMask(cpuAffinity);
+        if (!affinityMask.isEmpty())
+            sb.append("taskset ").append(affinityMask).append(" ");
         if (!task.getString("action").equals("clone"))
             sb.append(escapedString(qemuImg));
         appendAction();
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/main/settings/MainSettingsFragment.java b/app/src/main/java/cn/classfun/droidvm/ui/main/settings/MainSettingsFragment.java
index e09bfb6b2..cd5b6173d 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/main/settings/MainSettingsFragment.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/main/settings/MainSettingsFragment.java
@@ -50,6 +50,7 @@
 import cn.classfun.droidvm.lib.store.network.NetworkStore;
 import cn.classfun.droidvm.lib.store.vm.VMStore;
 import cn.classfun.droidvm.lib.ui.UIContext;
+import cn.classfun.droidvm.lib.utils.CpuUtils;
 import cn.classfun.droidvm.ui.hugepage.HugePageActivity;
 import cn.classfun.droidvm.ui.main.base.MainBaseFragment;
 import cn.classfun.droidvm.ui.setup.SetupActivity;
@@ -66,6 +67,10 @@ public final class MainSettingsFragment extends MainBaseFragment {
     public static final String KEY_VM_AUTO_CONSOLE = "vm_auto_console";
     public static final String KEY_VM_CLEAR_LOGS_BEFORE_START = "vm_clear_logs_before_start";
     public static final String KEY_VM_KEEP_COMPRESS_ON_OPTIMIZE = "vm_keep_compress_on_optimize";
+    public static final String KEY_QEMU_IMG_CPU_AFFINITY = "qemu_img_cpu_affinity";
+    // Reserved for a future crosvm/qemu VM affinity setting; not read or
+    // written yet, and intentionally has no UI in this release.
+    // public static final String KEY_CROSVM_CPU_AFFINITY = "crosvm_cpu_affinity";
     public static final String KEY_AUTO_CHECK_UPDATE = "auto_check_update";
     private final Handler mainHandler = new Handler(Looper.getMainLooper());
     private final Runnable daemonStatusRefreshRunnable = this::periodRefreshDaemonStatus;
@@ -80,6 +85,7 @@ public final class MainSettingsFragment extends MainBaseFragment {
     private SwitchRowWidget itemVMAutoConsole;
     private SwitchRowWidget itemVMClearLogsBeforeStart;
     private SwitchRowWidget itemVMKeepCompressOnOptimize;
+    private TextRowWidget itemCpuAffinity;
     private TextRowWidget itemLicense;
     private SwitchRowWidget itemAutoCheckUpdate;
     private TextRowWidget itemCheckUpdate;
@@ -133,6 +139,7 @@ public void onViewCreated(@NonNull View view, @Nullable Bundle savedInstanceStat
         itemVMAutoConsole = view.findViewById(R.id.item_vm_auto_console);
         itemVMClearLogsBeforeStart = view.findViewById(R.id.item_vm_clear_logs_before_start);
         itemVMKeepCompressOnOptimize = view.findViewById(R.id.item_vm_keep_compress_on_optimize);
+        itemCpuAffinity = view.findViewById(R.id.item_cpu_affinity);
         itemLicense = view.findViewById(R.id.item_license);
         itemAutoCheckUpdate = view.findViewById(R.id.item_auto_check_update);
         itemCheckUpdate = view.findViewById(R.id.item_check_update);
@@ -164,6 +171,8 @@ private void initSettings() {
         bindOnChecked(itemVMAutoConsole, KEY_VM_AUTO_CONSOLE, false);
         bindOnChecked(itemVMClearLogsBeforeStart, KEY_VM_CLEAR_LOGS_BEFORE_START, false);
         bindOnChecked(itemVMKeepCompressOnOptimize, KEY_VM_KEEP_COMPRESS_ON_OPTIMIZE, false);
+        bindOnClick(itemCpuAffinity, this::showCpuAffinityDialog);
+        refreshCpuAffinitySummary();
         bindOnChecked(itemAutoCheckUpdate, KEY_AUTO_CHECK_UPDATE, true);
         bindOnClick(itemCheckUpdate, this::checkUpdate);
         bindOnClick(itemPrivacy, this::showPrivacyPolicy);
@@ -217,6 +226,16 @@ public static boolean isAutoCheckUpdateEnabled(@NonNull Context context) {
         return prefs.getBoolean(KEY_AUTO_CHECK_UPDATE, true);
     }
 
+    /**
+     * qemu-img CPU affinity as a taskset -c core list (e.g. "4,5,6,7").
+     * Empty string means no binding (qemu-img may use every core).
+     */
+    @NonNull
+    public static String getQemuImgCpuAffinity(@NonNull Context context) {
+        var prefs = context.getSharedPreferences(PREFS_NAME, Context.MODE_PRIVATE);
+        return prefs.getString(KEY_QEMU_IMG_CPU_AFFINITY, "");
+    }
+
     private void onRefreshDaemonStatus(boolean r) {
         itemDaemonStatus.setSubtitle(r ?
             R.string.settings_daemon_running : R.string.settings_daemon_stopped);
@@ -276,6 +295,93 @@ private void showLanguageDialog() {
             .show();
     }
 
+    private void refreshCpuAffinitySummary() {
+        if (itemCpuAffinity == null) return;
+        var csv = getQemuImgCpuAffinity(requireContext());
+        if (csv.isEmpty()) {
+            itemCpuAffinity.setSubtitle(R.string.settings_cpu_affinity_all_cores);
+        } else {
+            itemCpuAffinity.setSubtitle(getString(
+                R.string.settings_cpu_affinity_summary_fmt, CpuUtils.compactRanges(csv)));
+        }
+    }
+
+    private void showCpuAffinityDialog() {
+        var ctx = requireContext();
+        var cores = CpuUtils.getCores();
+        int tiers = CpuUtils.tierCount(cores);
+        var labels = new String[cores.size()];
+        for (int i = 0; i < cores.size(); i++)
+            labels[i] = cpuCoreLabel(cores.get(i), tiers);
+
+        // Saved selection, or the "filter out little cores" default when unset.
+        var savedCsv = getQemuImgCpuAffinity(ctx);
+        var selectedIdx = parseCsvToSet(
+            savedCsv.isEmpty() ? CpuUtils.defaultBigCoresCsv() : savedCsv);
+        var checked = new boolean[cores.size()];
+        for (int i = 0; i < cores.size(); i++)
+            checked[i] = selectedIdx.contains(cores.get(i).index);
+
+        var dialog = new MaterialAlertDialogBuilder(ctx)
+            .setTitle(R.string.settings_cpu_affinity_title)
+            .setMultiChoiceItems(labels, checked, (d, which, isChecked) ->
+                checked[which] = isChecked)
+            .setNeutralButton(R.string.settings_cpu_affinity_big_only, null)
+            .setNegativeButton(android.R.string.cancel, null)
+            .setPositiveButton(android.R.string.ok, (d, w) -> {
+                var sb = new StringBuilder();
+                for (int i = 0; i < cores.size(); i++) {
+                    if (!checked[i]) continue;
+                    if (sb.length() > 0) sb.append(',');
+                    sb.append(cores.get(i).index);
+                }
+                ctx.getSharedPreferences(PREFS_NAME, Context.MODE_PRIVATE)
+                    .edit().putString(KEY_QEMU_IMG_CPU_AFFINITY, sb.toString()).apply();
+                refreshCpuAffinitySummary();
+            })
+            .create();
+        dialog.show();
+        // Re-check only the big cores without dismissing the dialog.
+        dialog.getButton(android.app.AlertDialog.BUTTON_NEUTRAL).setOnClickListener(v -> {
+            var bigIdx = parseCsvToSet(CpuUtils.defaultBigCoresCsv());
+            var list = dialog.getListView();
+            for (int i = 0; i < cores.size(); i++) {
+                checked[i] = bigIdx.contains(cores.get(i).index);
+                list.setItemChecked(i, checked[i]);
+            }
+        });
+    }
+
+    @NonNull
+    private String cpuCoreLabel(@NonNull CpuUtils.CpuCore core, int tiers) {
+        var freq = CpuUtils.formatFreq(core.maxFreqKHz);
+        int tierRes;
+        if (tiers <= 1) tierRes = 0;
+        else if (core.tier == 0) tierRes = R.string.settings_cpu_affinity_tier_little;
+        else if (tiers >= 3 && core.tier == tiers - 1)
+            tierRes = R.string.settings_cpu_affinity_tier_prime;
+        else tierRes = R.string.settings_cpu_affinity_tier_big;
+        var sb = new StringBuilder(fmt("CPU%d", core.index));
+        if (!freq.isEmpty()) sb.append("    ").append(freq);
+        if (tierRes != 0) sb.append("    ").append(getString(tierRes));
+        return sb.toString();
+    }
+
+    @NonNull
+    private static java.util.Set<Integer> parseCsvToSet(@NonNull String csv) {
+        var set = new java.util.HashSet<Integer>();
+        if (csv.isEmpty()) return set;
+        for (var part : csv.split(",")) {
+            part = part.trim();
+            if (part.isEmpty()) continue;
+            try {
+                set.add(Integer.parseInt(part));
+            } catch (NumberFormatException ignored) {
+            }
+        }
+        return set;
+    }
+
     private void showLicenseDialog() {
         new SoftwareLicenseDialog(requireContext()).show();
     }
diff --git a/app/src/main/res/layout/fragment_main_settings.xml b/app/src/main/res/layout/fragment_main_settings.xml
index 250c048e8..5deeeb484 100644
--- a/app/src/main/res/layout/fragment_main_settings.xml
+++ b/app/src/main/res/layout/fragment_main_settings.xml
@@ -71,6 +71,14 @@
                     android:subtitle="@string/settings_vm_keep_compress_on_optimize_summary"
                     android:text="@string/settings_vm_keep_compress_on_optimize_title" />
 
+                <cn.classfun.droidvm.ui.widgets.row.TextRowWidget
+                    android:id="@+id/item_cpu_affinity"
+                    android:layout_width="match_parent"
+                    android:layout_height="wrap_content"
+                    android:icon="@drawable/ic_cpu"
+                    android:subtitle="@string/settings_cpu_affinity_all_cores"
+                    android:text="@string/settings_cpu_affinity_title" />
+
             </cn.classfun.droidvm.ui.widgets.container.CollapsibleContainer>
 
             <cn.classfun.droidvm.ui.widgets.container.CollapsibleContainer
diff --git a/app/src/main/res/values-zh-rCN/strings.xml b/app/src/main/res/values-zh-rCN/strings.xml
index da3bbee7a..79da73835 100644
--- a/app/src/main/res/values-zh-rCN/strings.xml
+++ b/app/src/main/res/values-zh-rCN/strings.xml
@@ -369,6 +369,13 @@
     <string name="settings_vm_clear_logs_before_start_summary">启动虚拟机前清理该虚拟机的所有控制台日志</string>
     <string name="settings_vm_keep_compress_on_optimize_title">优化时保持压缩</string>
     <string name="settings_vm_keep_compress_on_optimize_summary">优化磁盘时保留其原有压缩而非解压；关闭则重写为未压缩</string>
+    <string name="settings_cpu_affinity_title">CPU 亲和性</string>
+    <string name="settings_cpu_affinity_summary_fmt">磁盘操作运行于核心 %1$s</string>
+    <string name="settings_cpu_affinity_all_cores">磁盘操作可使用全部核心</string>
+    <string name="settings_cpu_affinity_big_only">仅大核</string>
+    <string name="settings_cpu_affinity_tier_little">小核</string>
+    <string name="settings_cpu_affinity_tier_big">大核</string>
+    <string name="settings_cpu_affinity_tier_prime">超大核</string>
     <string name="settings_category_about">关于</string>
     <string name="settings_feedback_title">问题反馈</string>
     <string name="settings_feedback_summary">在 GitHub 上报告问题</string>
diff --git a/app/src/main/res/values-zh-rTW/strings.xml b/app/src/main/res/values-zh-rTW/strings.xml
index 13af394a9..a12832af4 100644
--- a/app/src/main/res/values-zh-rTW/strings.xml
+++ b/app/src/main/res/values-zh-rTW/strings.xml
@@ -365,6 +365,13 @@
     <string name="settings_vm_clear_logs_before_start_summary">啟動虛擬機器前清理該虛擬機器的所有控制台日誌</string>
     <string name="settings_vm_keep_compress_on_optimize_title">最佳化時保持壓縮</string>
     <string name="settings_vm_keep_compress_on_optimize_summary">最佳化磁碟時保留其原有壓縮而非解壓縮；關閉則重寫為未壓縮</string>
+    <string name="settings_cpu_affinity_title">CPU 親和性</string>
+    <string name="settings_cpu_affinity_summary_fmt">磁碟操作執行於核心 %1$s</string>
+    <string name="settings_cpu_affinity_all_cores">磁碟操作可使用全部核心</string>
+    <string name="settings_cpu_affinity_big_only">僅大核</string>
+    <string name="settings_cpu_affinity_tier_little">小核</string>
+    <string name="settings_cpu_affinity_tier_big">大核</string>
+    <string name="settings_cpu_affinity_tier_prime">超大核</string>
     <string name="settings_category_about">關於</string>
     <string name="settings_feedback_title">問題反饋</string>
     <string name="settings_feedback_summary">在 GitHub 上報告問題</string>
diff --git a/app/src/main/res/values/strings.xml b/app/src/main/res/values/strings.xml
index 3ca868778..f8b427d6f 100644
--- a/app/src/main/res/values/strings.xml
+++ b/app/src/main/res/values/strings.xml
@@ -371,6 +371,13 @@
     <string name="settings_vm_clear_logs_before_start_summary">Clear all console logs for the VM before it starts</string>
     <string name="settings_vm_keep_compress_on_optimize_title">Keep compression when optimizing</string>
     <string name="settings_vm_keep_compress_on_optimize_summary">Preserve a disk\'s existing compression when optimizing instead of decompressing it; off rewrites the disk uncompressed</string>
+    <string name="settings_cpu_affinity_title">CPU affinity</string>
+    <string name="settings_cpu_affinity_summary_fmt">Disk ops run on cores %1$s</string>
+    <string name="settings_cpu_affinity_all_cores">Disk ops may use all cores</string>
+    <string name="settings_cpu_affinity_big_only">Big cores only</string>
+    <string name="settings_cpu_affinity_tier_little">little</string>
+    <string name="settings_cpu_affinity_tier_big">big</string>
+    <string name="settings_cpu_affinity_tier_prime">prime</string>
     <string name="settings_category_about">About</string>
     <string name="settings_feedback_title">Feedback</string>
     <string name="settings_feedback_summary">Report issues on GitHub</string>

From 88cd342e500ed7e4cc7c338a8afe8daf782ee3ee Mon Sep 17 00:00:00 2001
From: HuJK <gh@hujk.org>
Date: Mon, 6 Jul 2026 13:28:02 +0800
Subject: [PATCH 089/182] review (PR #34): rename VMConsoleRouter, relocate
 Try, harden shell calls, ASCII base strings

Addresses BigfootACA's review comments:
- Rename VmConsoleRouter -> VMConsoleRouter (VM initialism); update references.
- Move the generic Try<I,V> degradation-ladder helper to lib/utils for reuse
  (now public; javadoc de-specialised from HugePageModel).
- HugePageModel: wrap the module path in escapedString(); build strings with
  fmt() instead of + concatenation.
- HugePageActivity: fmt() for the acquire-dialog title.
- DefaultRouterWatcher: read the sysctl via shellReadFile().
- Base values/strings.xml is ASCII-only now (typographic ellipsis/em-dash ->
  "..." / "-"), and the non-ASCII allowlist narrows to values-*/strings.xml so
  the English source file is checked too.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01TaHcvnHaZk8qqpKiS25Hbk
---
 .../network/backend/DefaultRouterWatcher.java | 18 ++++++++-------
 .../{ui/hugepage => lib/utils}/Try.java       | 22 +++++++++----------
 .../droidvm/ui/hugepage/HugePageActivity.java | 14 ++++++------
 .../droidvm/ui/hugepage/HugePageModel.java    | 21 ++++++++++--------
 .../droidvm/ui/main/vm/MainVMFragment.java    |  4 ++--
 ...onsoleRouter.java => VMConsoleRouter.java} |  4 ++--
 .../droidvm/ui/vm/info/ConsoleButton.java     | 14 ++++++------
 app/src/main/res/values/strings.xml           | 20 ++++++++---------
 scripts/ci/ascii_allow.txt                    |  5 +++--
 9 files changed, 64 insertions(+), 58 deletions(-)
 rename app/src/main/java/cn/classfun/droidvm/{ui/hugepage => lib/utils}/Try.java (70%)
 rename app/src/main/java/cn/classfun/droidvm/ui/vm/console/{VmConsoleRouter.java => VMConsoleRouter.java} (98%)

diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/DefaultRouterWatcher.java b/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/DefaultRouterWatcher.java
index ac7a6e04d..c6b8e59b2 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/DefaultRouterWatcher.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/DefaultRouterWatcher.java
@@ -1,5 +1,6 @@
 package cn.classfun.droidvm.daemon.network.backend;
 
+import static cn.classfun.droidvm.lib.utils.FileUtils.shellReadFile;
 import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
 
 import android.util.Log;
@@ -193,7 +194,7 @@ private void reconcileRules(boolean ipv6, @NonNull List<String> tables) {
         // lowest priority so it is evaluated first.
         var desired = new ArrayList<String>();
         for (int i = 0; i < tables.size(); i++)
-            desired.add((RULE_PRIORITY_BASE + i) + " " + tables.get(i));
+            desired.add(fmt("%d %s", RULE_PRIORITY_BASE + i, tables.get(i)));
 
         // Group our installed rules per device as "priority table" specs. Ours
         // are the plain rules: an iif owned by a bridge, a lookup action, no
@@ -214,7 +215,7 @@ private void reconcileRules(boolean ipv6, @NonNull List<String> tables) {
                 if (dev.startsWith(br)) { ours = true; break; }
             if (!ours) continue;
             installed.computeIfAbsent(dev, k -> new ArrayList<>())
-                .add(r.optInt("priority", 0) + " " + r.optInt("table", 0));
+                .add(fmt("%d %d", r.optInt("priority", 0), r.optInt("table", 0)));
             if (r.optBoolean("detached", false)) detached.add(dev);
         }
         installed.values().forEach(specs -> specs.sort(Comparator.comparingInt(
@@ -288,17 +289,18 @@ private void reassertForwarding() {
 
     /**
      * Writes 1 to {@code path} only if it is not already 1; logs corrections.
-     * Both the read and the write go through {@code runQuiet} so the 5s poll
-     * stays out of logcat -- {@code RunContext.run} would log a "Running
-     * command: cat ..." line every tick. The only line this ever emits is the
-     * warning below, and only when netd actually reset the value.
+     * The read ({@code shellReadFile}) and the write ({@code runQuiet}) are both
+     * quiet, so the 5s poll stays out of logcat -- {@code RunContext.run} would
+     * otherwise log a "Running command: cat ..." line every tick. The only line
+     * this emits on a normal tick is the warning below, and only when netd
+     * actually reset the value.
      */
     private void ensureSysctlOne(@NonNull String path, @NonNull String name) {
-        var cur = RunUtils.runQuiet("cat " + path).getOutString();
+        var cur = shellReadFile(path);
         if ("1".equals(cur)) return;
         Log.w(TAG, fmt("%s=%s (netd reset it); re-enabling forwarding",
             name, cur.isEmpty() ? "?" : cur));
-        RunUtils.runQuiet("echo 1 > " + path);
+        RunUtils.runQuiet(fmt("echo 1 > %s", path));
     }
 
     /** True while any RUNNING Linux-bridge L3 network needs kernel forwarding. */
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/hugepage/Try.java b/app/src/main/java/cn/classfun/droidvm/lib/utils/Try.java
similarity index 70%
rename from app/src/main/java/cn/classfun/droidvm/ui/hugepage/Try.java
rename to app/src/main/java/cn/classfun/droidvm/lib/utils/Try.java
index 3f787d527..ed195bbb4 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/hugepage/Try.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/utils/Try.java
@@ -1,13 +1,13 @@
-package cn.classfun.droidvm.ui.hugepage;
+package cn.classfun.droidvm.lib.utils;
 
 import androidx.annotation.Nullable;
 
 /**
  * One implementation's attempt within a degradation ladder: which implementation
  * ran, plus its return value on success or its failure reason otherwise. The pair
- * {@code (value | error, impl)} is what a {@link HugePageModel} feature call
- * accumulates into an ordered {@code List<Try<...>>}; a success stops the ladder,
- * so the caller judges the overall outcome from the <b>last</b> element:
+ * {@code (value | error, impl)} is what a feature call accumulates into an ordered
+ * {@code List<Try<...>>}; a success stops the ladder, so the caller judges the
+ * overall outcome from the <b>last</b> element:
  * <ul>
  *   <li>last {@link #ok()} and alone -- success via the primary implementation;</li>
  *   <li>last {@link #ok()} after earlier fails -- success, degraded to a fallback;</li>
@@ -17,15 +17,15 @@
  * @param <I> the feature's implementation enum (which way it was done)
  * @param <V> the value produced on success ({@link Void} for pure actions)
  */
-final class Try<I, V> {
+public final class Try<I, V> {
     /** The implementation this attempt used. */
-    final I impl;
+    public final I impl;
     /** The value produced on success; {@code null} on failure (or for {@link Void}). */
     @Nullable
-    final V value;
+    public final V value;
     /** The failure reason; {@code null} on success. */
     @Nullable
-    final String error;
+    public final String error;
 
     private Try(I impl, @Nullable V value, @Nullable String error) {
         this.impl = impl;
@@ -33,16 +33,16 @@ private Try(I impl, @Nullable V value, @Nullable String error) {
         this.error = error;
     }
 
-    static <I, V> Try<I, V> ok(I impl, @Nullable V value) {
+    public static <I, V> Try<I, V> ok(I impl, @Nullable V value) {
         return new Try<>(impl, value, null);
     }
 
-    static <I, V> Try<I, V> fail(I impl, String error) {
+    public static <I, V> Try<I, V> fail(I impl, String error) {
         return new Try<>(impl, null, error);
     }
 
     /** True if this implementation succeeded (a non-null error means failure). */
-    boolean ok() {
+    public boolean ok() {
         return error == null;
     }
 }
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/hugepage/HugePageActivity.java b/app/src/main/java/cn/classfun/droidvm/ui/hugepage/HugePageActivity.java
index be7a6929f..bcd32a974 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/hugepage/HugePageActivity.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/hugepage/HugePageActivity.java
@@ -6,6 +6,7 @@
 import static cn.classfun.droidvm.lib.utils.FileUtils.shellCheckExists;
 import static cn.classfun.droidvm.lib.utils.FileUtils.shellReadFile;
 import static cn.classfun.droidvm.lib.utils.RunUtils.runList;
+import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
 import static cn.classfun.droidvm.lib.utils.StringUtils.pathJoin;
 import static cn.classfun.droidvm.lib.utils.ThreadUtils.runOnPool;
 
@@ -213,8 +214,9 @@ static void showAcquireInfo(@NonNull Context ctx, int mode, @NonNull Runnable on
             : mode == 3 ? R.string.hugepage_acquire_v3_explain
             : R.string.hugepage_acquire_v1_explain;
         // Title = "Acquire huge pages" + the mode badge, e.g. "Acquire huge pages v1".
-        String title = ctx.getString(R.string.hugepage_acquire_pages_title)
-            + " " + ctx.getString(modeLabel);
+        String title = fmt("%s %s",
+            ctx.getString(R.string.hugepage_acquire_pages_title),
+            ctx.getString(modeLabel));
         new MaterialAlertDialogBuilder(ctx)
             .setTitle(title)
             .setMessage(msg)
@@ -365,7 +367,7 @@ private void updateUI(
                 String name = vmMap.get(pid);
                 if (name == null) name = getString(R.string.hugepage_proc_pid, pid);
                 // Two stacked lines: label over capacity.
-                usedLabels[i] = name + "\n" + SizeUtils.formatSize(ownerPages * PAGE_SIZE);
+                usedLabels[i] = fmt("%s\n%s", name, SizeUtils.formatSize(ownerPages * PAGE_SIZE));
                 seg += ownerPages;
             }
             // "used" is the sum of the segments the bar draws, so the caption
@@ -385,11 +387,9 @@ private void updateUI(
             setPagesString(tvPoolTotal, R.string.hugepage_stat_pool_total, held);
             setPagesString(tvPoolSize, R.string.hugepage_stat_pool_size, poolWant);
             segPoolBar.setStorage(usedColors, usedValues, usedLabels,
-                poolAvail, getString(R.string.hugepage_bar_available)
-                    + "\n" + SizeUtils.formatSize(poolAvail * PAGE_SIZE),
+                poolAvail, fmt("%s\n%s", getString(R.string.hugepage_bar_available), SizeUtils.formatSize(poolAvail * PAGE_SIZE)),
                 HugePageColor.pending(this), deficit,
-                getString(R.string.hugepage_proc_deficit)
-                    + "\n" + SizeUtils.formatSize(deficit * PAGE_SIZE),
+                fmt("%s\n%s", getString(R.string.hugepage_proc_deficit), SizeUtils.formatSize(deficit * PAGE_SIZE)),
                 poolWant);
         } else {
             rowStatState.setValue(getString(R.string.hugepage_stats_unavailable));
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/hugepage/HugePageModel.java b/app/src/main/java/cn/classfun/droidvm/ui/hugepage/HugePageModel.java
index cd4d58344..f26d7e977 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/hugepage/HugePageModel.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/hugepage/HugePageModel.java
@@ -2,8 +2,10 @@
 
 import static cn.classfun.droidvm.lib.utils.FileUtils.shellCheckExists;
 import static cn.classfun.droidvm.lib.utils.FileUtils.shellReadFile;
+import static cn.classfun.droidvm.lib.utils.RunUtils.escapedString;
 import static cn.classfun.droidvm.lib.utils.RunUtils.run;
 import static cn.classfun.droidvm.lib.utils.RunUtils.runList;
+import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
 import static cn.classfun.droidvm.lib.utils.StringUtils.pathJoin;
 
 import android.os.SystemClock;
@@ -24,6 +26,7 @@
 
 import cn.classfun.droidvm.lib.daemon.DaemonConnection;
 import cn.classfun.droidvm.lib.run.RunResult;
+import cn.classfun.droidvm.lib.utils.Try;
 
 /**
  * The single huge-page facade both screens ({@link HugePageActivity},
@@ -365,7 +368,7 @@ Result acquire(int mode) {
             if (writeKnob("acquire", Integer.toString(m)).ok()) {
                 // impl names the actual migrating mode that ran ("v1".."v3");
                 // degraded when it's below what was asked for.
-                return Result.ok("v" + m, m != mode);
+                return Result.ok(fmt("v%d", m), m != mode);
             }
         }
         var refill = writeKnob("manual_refill", "1");
@@ -428,8 +431,8 @@ private static Usage usageOf(@NonNull List<Try<Source, List<UsageEntry>>> log) {
     @NonNull
     private List<Try<LoadImpl, Void>> loadLadder(long pages) {
         var log = new ArrayList<Try<LoadImpl, Void>>();
-        var w = "pool_want=\"" + pages + "\"";
-        var t = "pool_target=\"" + pages + "\"";
+        var w = fmt("pool_want=\"%d\"", pages);
+        var t = fmt("pool_target=\"%d\"", pages);
         // Pass BOTH size params first. A lenient kernel silently ignores the param
         // the module doesn't have, so it still gets the right size via the one it
         // does - pool_want (v7) or pool_target (v6). This is essential: on a v6
@@ -438,7 +441,7 @@ private List<Try<LoadImpl, Void>> loadLadder(long pages) {
         // Strict kernels reject the unknown param, so fall back to each key alone,
         // then a bare (default-size) load.
         if (rung(null, log, LoadImpl.BOTH,
-            () -> insmod(LoadImpl.BOTH, w + " " + t))) return log;
+            () -> insmod(LoadImpl.BOTH, fmt("%s %s", w, t)))) return log;
         if (rung(null, log, LoadImpl.POOL_WANT,
             () -> insmod(LoadImpl.POOL_WANT, w))) return log;
         if (rung(null, log, LoadImpl.POOL_TARGET,
@@ -449,8 +452,8 @@ private List<Try<LoadImpl, Void>> loadLadder(long pages) {
 
     private static Try<LoadImpl, Void> insmod(@NonNull LoadImpl impl, @Nullable String arg) {
         var r = (arg == null)
-            ? run("insmod \"%s\"", KO_PATH)
-            : run("insmod \"%s\" %s", KO_PATH, arg);
+            ? run("insmod %s", escapedString(KO_PATH))
+            : run("insmod %s %s", escapedString(KO_PATH), arg);
         return r.isSuccess() ? Try.ok(impl, null) : Try.fail(impl, reason(r, "insmod"));
     }
 
@@ -511,8 +514,8 @@ private static Try<Only, Void> writeSettings(long pages) {
     private static String reason(@NonNull RunResult r, @NonNull String what) {
         var msg = r.getErrString().trim();
         if (msg.isEmpty()) msg = r.getOutString().trim();
-        if (msg.isEmpty()) msg = "exit " + r.getCode();
-        return what + ": " + msg;
+        if (msg.isEmpty()) msg = fmt("exit %d", r.getCode());
+        return fmt("%s: %s", what, msg);
     }
 
     /**
@@ -619,7 +622,7 @@ private Try<Source, List<UsageEntry>> usageFromKo() {
             out.sort((a, b) -> Long.compare(b.pages, a.pages));
             return Try.ok(Source.KO, out);
         } catch (Exception e) {
-            return Try.fail(Source.KO, "KO read: " + e.getMessage());
+            return Try.fail(Source.KO, fmt("KO read: %s", e.getMessage()));
         }
     }
 
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/main/vm/MainVMFragment.java b/app/src/main/java/cn/classfun/droidvm/ui/main/vm/MainVMFragment.java
index 442b18a93..e6b56d4e8 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/main/vm/MainVMFragment.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/main/vm/MainVMFragment.java
@@ -28,7 +28,7 @@
 import cn.classfun.droidvm.lib.store.vm.VMStore;
 import cn.classfun.droidvm.ui.main.base.stateful.MainStatefulFragment;
 import cn.classfun.droidvm.ui.vm.VMActions;
-import cn.classfun.droidvm.ui.vm.console.VmConsoleRouter;
+import cn.classfun.droidvm.ui.vm.console.VMConsoleRouter;
 import cn.classfun.droidvm.ui.vm.edit.VMEditActivity;
 import cn.classfun.droidvm.ui.vm.info.VMInfoActivity;
 
@@ -135,7 +135,7 @@ public void onVMStateChanged(UUID vmId, VMState state) {
                 if (config == null) return;
                 // Same routing as the VM-info console button (native -> VNC ->
                 // serial), so a VNC/native VM auto-opens its display, not always UART.
-                VmConsoleRouter.openDefault(requireContext(), vmId, config, true);
+                VMConsoleRouter.openDefault(requireContext(), vmId, config, true);
             }
         });
     }
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/console/VmConsoleRouter.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/console/VMConsoleRouter.java
similarity index 98%
rename from app/src/main/java/cn/classfun/droidvm/ui/vm/console/VmConsoleRouter.java
rename to app/src/main/java/cn/classfun/droidvm/ui/vm/console/VMConsoleRouter.java
index 923f7de5e..a8a014634 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/console/VmConsoleRouter.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/console/VMConsoleRouter.java
@@ -24,8 +24,8 @@
  * this in one place is why both paths agree instead of the list always opening
  * the UART console regardless of the VM's display.
  */
-public final class VmConsoleRouter {
-    private VmConsoleRouter() {
+public final class VMConsoleRouter {
+    private VMConsoleRouter() {
     }
 
     /**
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/info/ConsoleButton.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/info/ConsoleButton.java
index 70597d311..5cfda47be 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/info/ConsoleButton.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/info/ConsoleButton.java
@@ -22,7 +22,7 @@
 import cn.classfun.droidvm.lib.store.base.DataItem;
 import cn.classfun.droidvm.lib.store.vm.VMState;
 import cn.classfun.droidvm.lib.ui.IconItemAdapter;
-import cn.classfun.droidvm.ui.vm.console.VmConsoleRouter;
+import cn.classfun.droidvm.ui.vm.console.VMConsoleRouter;
 
 public final class ConsoleButton {
     private static final String TAG = "VMInfoActivity";
@@ -50,9 +50,9 @@ void showConsoleChooser() {
 
     void openDefaultConsole() {
         if (parent.config == null) return;
-        // Shared with the VM-list auto-open-after-start (VmConsoleRouter), so both
+        // Shared with the VM-list auto-open-after-start (VMConsoleRouter), so both
         // pick the same view: native -> VNC -> serial (uart, then stdio).
-        VmConsoleRouter.openDefault(parent, parent.vmId, parent.config,
+        VMConsoleRouter.openDefault(parent, parent.vmId, parent.config,
             parent.currentState != VMState.STOPPED);
     }
 
@@ -113,22 +113,22 @@ private void buildConsoleChooserDialog(@Nullable JSONArray streams) {
     }
 
     private void openConsole(@NonNull String stream) {
-        VmConsoleRouter.openConsole(parent, parent.vmId, parent.config, stream,
+        VMConsoleRouter.openConsole(parent, parent.vmId, parent.config, stream,
             parent.currentState == VMState.STOPPED);
     }
 
     private void openNativeDisplay() {
         if (parent.config == null) return;
-        VmConsoleRouter.openNative(parent, parent.vmId, parent.config);
+        VMConsoleRouter.openNative(parent, parent.vmId, parent.config);
     }
 
     private void openVncDisplay() {
         if (parent.config == null) return;
-        VmConsoleRouter.openVnc(parent, parent.vmId, parent.config);
+        VMConsoleRouter.openVnc(parent, parent.vmId, parent.config);
     }
 
     private void openVncExtDisplay() {
         if (parent.config == null) return;
-        VmConsoleRouter.openVncExt(parent, parent.vmId, parent.config);
+        VMConsoleRouter.openVncExt(parent, parent.vmId, parent.config);
     }
 }
diff --git a/app/src/main/res/values/strings.xml b/app/src/main/res/values/strings.xml
index 1ab0997f6..64c71f4bf 100644
--- a/app/src/main/res/values/strings.xml
+++ b/app/src/main/res/values/strings.xml
@@ -115,7 +115,7 @@
     <string name="vm_exit_crash">VM \"%1$s\" crashed (code %2$d).</string>
     <string name="vm_exit_guest_panic">VM \"%1$s\" hit a kernel panic in the guest (code %2$d).</string>
     <string name="vm_exit_watchdog">VM \"%1$s\" stalled and was reset by the watchdog (code %2$d).</string>
-    <string name="vm_rebooting">Rebooting VM \"%1$s\"…</string>
+    <string name="vm_rebooting">Rebooting VM \"%1$s\"...</string>
     <string name="vm_exit_dialog_title">VM \"%1$s\" Failed</string>
     <string name="vm_exit_dialog_message">The virtual machine exited with code %1$d.\n\nLogs:</string>
     <string name="vm_exit_no_logs">No logs available.</string>
@@ -972,18 +972,18 @@
     <string name="hugepage_acquire_v1_explain">Uses alloc_contig_pages to collect huge pages</string>
     <string name="hugepage_acquire_v2_explain">Uses try_to_free_mem_cgroup_pages to push other apps into swap/zram\nthen alloc_contig_range to collect huge pages</string>
     <string name="hugepage_acquire_v3_explain">Uses folio_isolate_lru + reclaim_pages to precisely push pages into swap/zram\nthen alloc_contig_range to collect huge pages</string>
-    <string name="hugepage_proc_acquire_running">Acquiring huge pages…</string>
+    <string name="hugepage_proc_acquire_running">Acquiring huge pages...</string>
     <string name="hugepage_proc_acquire_done">Acquire done</string>
-    <string name="hugepage_acquire_degraded">Downgraded — ran %1$s instead</string>
+    <string name="hugepage_acquire_degraded">Downgraded - ran %1$s instead</string>
     <string name="hugepage_proc_acquire_stop">Stop acquiring</string>
     <string name="hugepage_proc_acquire_full">Acquire complete: reached %1$s</string>
     <string name="hugepage_proc_acquire_partial">Acquire stopped: got %1$s of %2$s (system can\'t migrate more right now)</string>
-    <string name="hugepage_proc_acquire_userspace">Module short; trying userspace assist…</string>
+    <string name="hugepage_proc_acquire_userspace">Module short; trying userspace assist...</string>
     <string name="hugepage_acquire_pages_title">Acquire huge pages</string>
     <string name="hugepage_pool_size">Pool Size</string>
     <string name="hugepage_pool_size_saved">Pool size saved (effective after reboot)</string>
     <string name="hugepage_pool_size_applied">Pool size saved &amp; applied</string>
-    <string name="hugepage_pool_shrink_busy">Acquiring — can\'t shrink now, wait for it to finish</string>
+    <string name="hugepage_pool_shrink_busy">Acquiring - can\'t shrink now, wait for it to finish</string>
     <string name="hugepage_pool_below_vms">Pool can\'t be smaller than the running VMs\' total memory (%1$s)</string>
     <string name="hugepage_pool_size_failed">Failed to save pool size</string>
     <string name="hugepage_module_now_enabled">Module enabled (effective after reboot)</string>
@@ -1006,7 +1006,7 @@
     <string name="hugepage_proc_served">Served: %1$d pages (%2$s)</string>
     <string name="hugepage_proc_anon">Usage: %1$d pages (%2$s)</string>
     <string name="hugepage_proc_unknown">Unattributed</string>
-    <string name="hugepage_proc_unknown_breakdown">Unattributed — freed %1$d / reused %2$d pages</string>
+    <string name="hugepage_proc_unknown_breakdown">Unattributed - freed %1$d / reused %2$d pages</string>
     <string name="hugepage_proc_deficit">Waiting for acquire</string>
     <string name="hugepage_proc_pid">pid %1$d</string>
     <string name="hugepage_bar_available">Available</string>
@@ -1020,11 +1020,11 @@
     <string name="hugepage_proc_state_zombie">zombie</string>
     <string name="hugepage_proc_state_unknown">unknown / exited</string>
     <string name="hugepage_proc_scan_mode">Scan mode</string>
-    <string name="hugepage_proc_loading">Scanning…</string>
+    <string name="hugepage_proc_loading">Scanning...</string>
     <string name="hugepage_proc_mode">Display mode</string>
     <string name="hugepage_proc_mode_ko">Module attribution (KO)</string>
     <string name="hugepage_proc_mode_scan">System scan (THP)</string>
-    <string name="hugepage_proc_ko_unavailable">Module unavailable — using scan mode</string>
+    <string name="hugepage_proc_ko_unavailable">Module unavailable - using scan mode</string>
     <string name="hugepage_proc_empty">No processes are currently using the reserved hugepage pool.</string>
     <string name="hugepage_proc_owner_empty">No VM is holding reserved huge pages.</string>
     <string name="hugepage_proc_scan_empty">No running VM is using huge pages.</string>
@@ -1032,8 +1032,8 @@
     <string name="hugepage_proc_old_module">Loaded module has no per-VM attribution API (old build). Switch to System scan (menu).</string>
     <string name="hugepage_proc_kill">Kill</string>
     <string name="hugepage_proc_kill_title">Kill %1$s?</string>
-    <string name="hugepage_proc_sigterm">SIGTERM (15) — graceful</string>
-    <string name="hugepage_proc_sigkill">SIGKILL (9) — force</string>
+    <string name="hugepage_proc_sigterm">SIGTERM (15) - graceful</string>
+    <string name="hugepage_proc_sigkill">SIGKILL (9) - force</string>
     <string name="hugepage_proc_kill_sent">Signal sent</string>
     <string name="hugepage_proc_kill_failed">Failed to send signal</string>
     <string name="hugepage_proc_stack_title">Kernel stack (pid %1$d)</string>
diff --git a/scripts/ci/ascii_allow.txt b/scripts/ci/ascii_allow.txt
index 976cf50c0..503a8e61a 100644
--- a/scripts/ci/ascii_allow.txt
+++ b/scripts/ci/ascii_allow.txt
@@ -6,8 +6,9 @@
 # Only genuine natural-language / i18n content belongs here -- source code,
 # build files, layouts, manifests and config must stay ASCII.
 
-# UI strings: translation source (values/) and the translations themselves.
-app/src/main/res/values*/strings.xml
+# Translated UI strings only. The base values/strings.xml (English source) must
+# stay ASCII -- it is deliberately not matched by this locale-qualified glob.
+app/src/main/res/values-*/strings.xml
 
 # Privacy policy, one file per language.
 app/src/main/assets/privacy/*.txt

From 21cf41fed1af6f1d68659b492873b3e4d8b7180d Mon Sep 17 00:00:00 2001
From: lateautumn233 <lateautumn233@foxmail.com>
Date: Mon, 6 Jul 2026 13:49:52 +0800
Subject: [PATCH 090/182] refactor(disk): address review feedback on CPU
 affinity and image utils

- CrosvmBackendInstance: drop the no-op cpu-affinity TODO comment
- CpuUtils: reuse SizeUtils.findFloatUnit for frequency formatting and
  StringUtils.fmt instead of a local fmt helper
- ImageUtils: split out getImageCheck() mirroring getImageInfo()
- MainSettingsFragment: import Set/HashSet, drop commented-out reserved key
---
 .../vm/backend/CrosvmBackendInstance.java     |  5 ----
 .../classfun/droidvm/lib/utils/CpuUtils.java  | 23 +++++++++-------
 .../droidvm/lib/utils/ImageUtils.java         | 26 ++++++++++++-------
 .../main/settings/MainSettingsFragment.java   |  9 +++----
 4 files changed, 34 insertions(+), 29 deletions(-)

diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/CrosvmBackendInstance.java b/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/CrosvmBackendInstance.java
index 756bba52b..f83505f23 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/CrosvmBackendInstance.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/CrosvmBackendInstance.java
@@ -135,11 +135,6 @@ private List<String> buildCommand() {
         var item = config.item;
         var args = new ArrayList<String>();
         prepareStraceArguments(args);
-        // TODO(cpu-affinity): to bind the VM to selected host cores, prepend a
-        // system-taskset wrapper here (mirroring prepareStraceArguments):
-        // "taskset -a <hexMask>", with the mask from CpuUtils.coresCsvToHexMask
-        // reading a future MainSettingsFragment.KEY_CROSVM_CPU_AFFINITY setting.
-        // Note toybox taskset takes a hex mask (no "0x"), not a -c core list.
         args.add(getPrebuiltBinaryPath("crosvm"));
         // Top-level flag (must precede `run`): makes crosvm surface CommandStatus
         // exit codes (see CrosvmExit) so runVM() can tell reset/crash/panic apart.
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/utils/CpuUtils.java b/app/src/main/java/cn/classfun/droidvm/lib/utils/CpuUtils.java
index fdb94c03a..72c09374e 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/utils/CpuUtils.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/utils/CpuUtils.java
@@ -1,5 +1,7 @@
 package cn.classfun.droidvm.lib.utils;
 
+import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
+
 import android.util.Log;
 
 import androidx.annotation.NonNull;
@@ -7,10 +9,11 @@
 import java.io.File;
 import java.util.ArrayList;
 import java.util.List;
-import java.util.Locale;
 import java.util.TreeSet;
 import java.util.regex.Pattern;
 
+import cn.classfun.droidvm.lib.size.SizeUtils;
+
 /**
  * Host CPU topology helper: enumerates cores, reads each core's max frequency
  * from sysfs and groups them into frequency tiers so callers can tell the
@@ -91,11 +94,18 @@ public static String defaultBigCoresCsv() {
         return sb.toString();
     }
 
-    /** Format a KHz frequency as e.g. "2.60 GHz"; empty string when unknown. */
+    // Hz-family labels indexed by SizeUtils tier (B/KB/MB/GB/... -> Hz/kHz/...).
+    private static final String[] FREQ_UNITS = {"Hz", "kHz", "MHz", "GHz", "THz"};
+
+    /** Format a KHz frequency as e.g. "2.42 GHz"; empty string when unknown. */
     @NonNull
     public static String formatFreq(long khz) {
         if (khz <= 0) return "";
-        return String.format(Locale.US, "%.2f GHz", khz / 1_000_000.0);
+        var pair = SizeUtils.findFloatUnit(khz * 1000L);
+        int tier = pair.getUnit().ordinal();
+        String unit = tier < FREQ_UNITS.length
+            ? FREQ_UNITS[tier] : pair.getUnit().getString();
+        return fmt("%s %s", pair.getNumberFloat(2), unit);
     }
 
     /**
@@ -194,7 +204,7 @@ private static long tryReadFreq(@NonNull String path) {
             try {
                 raw = FileUtils.shellReadFile(path);
             } catch (Exception rootFailed) {
-                Log.d(TAG, "freq read failed: " + path);
+                Log.d(TAG, fmt("freq read failed: %s", path));
             }
         }
         if (raw == null) return 0;
@@ -206,9 +216,4 @@ private static long tryReadFreq(@NonNull String path) {
             return 0;
         }
     }
-
-    @NonNull
-    private static String fmt(@NonNull String f, Object... args) {
-        return String.format(Locale.US, f, args);
-    }
 }
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/utils/ImageUtils.java b/app/src/main/java/cn/classfun/droidvm/lib/utils/ImageUtils.java
index 9e3b8297d..ba4d3042c 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/utils/ImageUtils.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/utils/ImageUtils.java
@@ -29,6 +29,21 @@ public static JSONObject getImageInfo(String path) throws JSONException {
         return new JSONObject(result.getOutString());
     }
 
+    @NonNull
+    public static JSONObject getImageCheck(String path) throws JSONException {
+        var result = runListQuiet(
+            getPrebuiltBinaryPath("qemu-img"),
+            "check", "--output=json", path
+        );
+        // qemu-img check still writes its JSON report on non-zero exits
+        // (leaks/corruptions), so parse whatever it produced rather than
+        // gating on isSuccess(); a missing/garbage body throws.
+        var out = result.getOutString();
+        if (out == null || out.isEmpty())
+            throw new JSONException("qemu-img check produced no output");
+        return new JSONObject(out);
+    }
+
     /**
      * Whether {@code path} actually stores compressed clusters, per
      * {@code qemu-img check}'s {@code compressed-clusters} count. This is the
@@ -41,16 +56,7 @@ public static JSONObject getImageInfo(String path) throws JSONException {
      */
     public static boolean hasCompressedClusters(String path) {
         try {
-            var result = runListQuiet(
-                getPrebuiltBinaryPath("qemu-img"),
-                "check", "--output=json", path);
-            var out = result.getOutString();
-            // qemu-img check still writes its JSON report on non-zero exits
-            // (leaks/corruptions), so parse whatever it produced rather than
-            // gating on isSuccess(); a missing/garbage body throws -> false.
-            if (out == null || out.isEmpty())
-                return false;
-            return new JSONObject(out).optLong("compressed-clusters", 0) > 0;
+            return getImageCheck(path).optLong("compressed-clusters", 0) > 0;
         } catch (Exception e) {
             return false;
         }
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/main/settings/MainSettingsFragment.java b/app/src/main/java/cn/classfun/droidvm/ui/main/settings/MainSettingsFragment.java
index cd5b6173d..72f80ba7d 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/main/settings/MainSettingsFragment.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/main/settings/MainSettingsFragment.java
@@ -36,7 +36,9 @@
 import java.nio.charset.StandardCharsets;
 import java.text.SimpleDateFormat;
 import java.util.Date;
+import java.util.HashSet;
 import java.util.Locale;
+import java.util.Set;
 
 import cn.classfun.droidvm.BuildConfig;
 import cn.classfun.droidvm.R;
@@ -68,9 +70,6 @@ public final class MainSettingsFragment extends MainBaseFragment {
     public static final String KEY_VM_CLEAR_LOGS_BEFORE_START = "vm_clear_logs_before_start";
     public static final String KEY_VM_KEEP_COMPRESS_ON_OPTIMIZE = "vm_keep_compress_on_optimize";
     public static final String KEY_QEMU_IMG_CPU_AFFINITY = "qemu_img_cpu_affinity";
-    // Reserved for a future crosvm/qemu VM affinity setting; not read or
-    // written yet, and intentionally has no UI in this release.
-    // public static final String KEY_CROSVM_CPU_AFFINITY = "crosvm_cpu_affinity";
     public static final String KEY_AUTO_CHECK_UPDATE = "auto_check_update";
     private final Handler mainHandler = new Handler(Looper.getMainLooper());
     private final Runnable daemonStatusRefreshRunnable = this::periodRefreshDaemonStatus;
@@ -368,8 +367,8 @@ else if (tiers >= 3 && core.tier == tiers - 1)
     }
 
     @NonNull
-    private static java.util.Set<Integer> parseCsvToSet(@NonNull String csv) {
-        var set = new java.util.HashSet<Integer>();
+    private static Set<Integer> parseCsvToSet(@NonNull String csv) {
+        var set = new HashSet<Integer>();
         if (csv.isEmpty()) return set;
         for (var part : csv.split(",")) {
             part = part.trim();

From 4ce83d3ccef3ba45ae779bdf78e8f89885a3da68 Mon Sep 17 00:00:00 2001
From: lateautumn233 <lateautumn233@foxmail.com>
Date: Mon, 6 Jul 2026 14:14:57 +0800
Subject: [PATCH 091/182] fix(cpu): format CPU frequency with decimal (SI)
 units

findFloatUnit uses binary 1024 steps, which underreports clock speeds
(2.60 GHz shown as 2.42 GHz). Frequencies are SI/decimal, so pick the
Hz/kHz/MHz/GHz tier by dividing by 1000.
---
 .../classfun/droidvm/lib/utils/CpuUtils.java   | 18 +++++++++---------
 1 file changed, 9 insertions(+), 9 deletions(-)

diff --git a/app/src/main/java/cn/classfun/droidvm/lib/utils/CpuUtils.java b/app/src/main/java/cn/classfun/droidvm/lib/utils/CpuUtils.java
index 72c09374e..571414a45 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/utils/CpuUtils.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/utils/CpuUtils.java
@@ -12,8 +12,6 @@
 import java.util.TreeSet;
 import java.util.regex.Pattern;
 
-import cn.classfun.droidvm.lib.size.SizeUtils;
-
 /**
  * Host CPU topology helper: enumerates cores, reads each core's max frequency
  * from sysfs and groups them into frequency tiers so callers can tell the
@@ -94,18 +92,20 @@ public static String defaultBigCoresCsv() {
         return sb.toString();
     }
 
-    // Hz-family labels indexed by SizeUtils tier (B/KB/MB/GB/... -> Hz/kHz/...).
+    // Frequency uses decimal (SI) steps of 1000, unlike SizeUtils' binary units.
     private static final String[] FREQ_UNITS = {"Hz", "kHz", "MHz", "GHz", "THz"};
 
-    /** Format a KHz frequency as e.g. "2.42 GHz"; empty string when unknown. */
+    /** Format a KHz frequency as e.g. "2.60 GHz"; empty string when unknown. */
     @NonNull
     public static String formatFreq(long khz) {
         if (khz <= 0) return "";
-        var pair = SizeUtils.findFloatUnit(khz * 1000L);
-        int tier = pair.getUnit().ordinal();
-        String unit = tier < FREQ_UNITS.length
-            ? FREQ_UNITS[tier] : pair.getUnit().getString();
-        return fmt("%s %s", pair.getNumberFloat(2), unit);
+        double value = khz * 1000.0;
+        int tier = 0;
+        while (value >= 1000.0 && tier < FREQ_UNITS.length - 1) {
+            value /= 1000.0;
+            tier++;
+        }
+        return fmt("%.2f %s", value, FREQ_UNITS[tier]);
     }
 
     /**

From 6f19517a94e44f1a34d286a4fe0aa9e42f35caf9 Mon Sep 17 00:00:00 2001
From: HuJK <gh@hujk.org>
Date: Mon, 6 Jul 2026 13:28:09 +0800
Subject: [PATCH 092/182] ci: enforce fmt() over complex string concatenation;
 convert existing ones

Add scripts/ci/check_string_concat.py (wired into the Checks workflow): a
Java-literal-aware scanner that fails when a bare + joins a string literal with a
runtime expression ("x=" + v), which reads better as fmt("x=%s", v). It masks
comments and string/char literals first, so + inside a literal ("wlan+", "%s+",
"\s+") and literal+literal constants are not flagged; a line can opt out with a
trailing // concat-ok comment.

A glance-obvious accumulator append stays as-is: a += statement with at most ONE
+ (s += "x" + y) reads clearly and is exempt; a += chaining two or more +
(s += "a" + b + "c") loses the exemption and is flagged. Only concatenation that
doesn't read at a glance is pushed to fmt(). The + count is scoped per statement
(to the next ; { }).

Convert the pre-existing complex concatenations across the codebase to fmt()
(mostly Log calls); route filesystem-path joins through pathJoin(). Simple
single-+ += appends are left as +=. StringUtils.pathJoin's own body keeps its +
with a // concat-ok note -- it is the canonical joiner and fmt() there would be
a hot-path cost.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01TaHcvnHaZk8qqpKiS25Hbk
---
 .github/workflows/checks.yml                  |   3 +
 .../daemon/display/DaemonSystemContext.java   |   3 +-
 .../daemon/display/NativeDisplayBinder.java   |  13 +-
 .../daemon/network/NetworkInstanceStore.java  |   6 +-
 .../backend/gvisor/GvisorBridgeBackend.java   |   2 +-
 .../lib/download/DiskDownloadManager.java     |   8 +-
 .../lib/download/DiskDownloadService.java     |   1 +
 .../lib/store/network/NetworkConfig.java      |   5 +-
 .../lib/store/network/NetworkStore.java       |   7 +-
 .../droidvm/lib/store/vm/NativeDisplay.java   |   2 +-
 .../droidvm/lib/ui/termux/TerminalFonts.java  |   3 +-
 .../droidvm/lib/utils/AssetUtils.java         |   2 +-
 .../droidvm/lib/utils/StringUtils.java        |   2 +-
 .../droidvm/ui/vm/NicLeaseAllocator.java      |   3 +-
 .../droidvm/ui/vm/boot/BootEntries.java       |   3 +-
 .../droidvm/ui/vm/boot/BootMenuDialog.java    |   3 +-
 .../display/DisplayProvider.java              |   5 +-
 .../nativedisplay/input/InputForwarder.java   |   4 +-
 .../droidvm/ui/vm/info/VMInfoActivity.java    |   9 +-
 scripts/ci/check_string_concat.py             | 158 ++++++++++++++++++
 20 files changed, 204 insertions(+), 38 deletions(-)
 create mode 100644 scripts/ci/check_string_concat.py

diff --git a/.github/workflows/checks.yml b/.github/workflows/checks.yml
index 49354306b..78e71579d 100644
--- a/.github/workflows/checks.yml
+++ b/.github/workflows/checks.yml
@@ -30,3 +30,6 @@ jobs:
 
       - name: Translations complete across all locales
         run: python3 scripts/ci/check_translations.py
+
+      - name: Use fmt() instead of string concatenation
+        run: python3 scripts/ci/check_string_concat.py
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/display/DaemonSystemContext.java b/app/src/main/java/cn/classfun/droidvm/daemon/display/DaemonSystemContext.java
index f69ec8b44..3437a54aa 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/display/DaemonSystemContext.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/display/DaemonSystemContext.java
@@ -1,5 +1,6 @@
 package cn.classfun.droidvm.daemon.display;
 
+import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
 import android.annotation.SuppressLint;
 import android.content.Context;
 import android.os.Looper;
@@ -34,7 +35,7 @@ public static synchronized void init() {
         try {
             if (Looper.myLooper() == null) Looper.prepareMainLooper();
         } catch (Throwable t) {
-            Log.w(TAG, "prepareMainLooper: " + t);
+            Log.w(TAG, fmt("prepareMainLooper: %s", t));
         }
         try {
             Class<?> at = Class.forName("android.app.ActivityThread");
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/display/NativeDisplayBinder.java b/app/src/main/java/cn/classfun/droidvm/daemon/display/NativeDisplayBinder.java
index 97d8ce6d2..6b866490b 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/display/NativeDisplayBinder.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/display/NativeDisplayBinder.java
@@ -1,5 +1,6 @@
 package cn.classfun.droidvm.daemon.display;
 
+import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
 import static cn.classfun.droidvm.BuildConfig.APPLICATION_ID;
 
 import android.content.Intent;
@@ -78,7 +79,7 @@ private static void broadcast(@NonNull IBinder binder, @NonNull String nonce) {
         intent.setPackage(APPLICATION_ID);
         intent.putExtra(NativeDisplay.EXTRA_BUNDLE, bundle);
         context.sendBroadcast(intent);
-        Log.i(TAG, "broadcast native-display binder (nonce=" + nonce + ")");
+        Log.i(TAG, fmt("broadcast native-display binder (nonce=%s)", nonce));
     }
 
     private static IBinder smCall(@NonNull String method, @NonNull String name) {
@@ -87,14 +88,14 @@ private static IBinder smCall(@NonNull String method, @NonNull String name) {
             Method m = sm.getMethod(method, String.class);
             return (IBinder) m.invoke(null, name);
         } catch (Exception e) {
-            Log.w(TAG, method + " reflection failed: " + e.getMessage());
+            Log.w(TAG, fmt("%s reflection failed: %s", method, e.getMessage()));
             return null;
         }
     }
 
     private static IBinder waitForServiceWithTimeout(@NonNull String name, long timeoutMs) {
         var holder = new IBinder[1];
-        var t = new Thread(() -> holder[0] = smCall("waitForService", name), "WaitSvc-" + name);
+        var t = new Thread(() -> holder[0] = smCall("waitForService", name), fmt("WaitSvc-%s", name));
         t.setDaemon(true);
         t.start();
         try {
@@ -105,7 +106,7 @@ private static IBinder waitForServiceWithTimeout(@NonNull String name, long time
     }
 
     private static IBinder doWaitForDisplayBinder(@NonNull String serviceName) {
-        Log.i(TAG, "waitForDisplayBinder('" + serviceName + "')");
+        Log.i(TAG, fmt("waitForDisplayBinder('%s')", serviceName));
         var direct = smCall("checkService", serviceName);
         if (direct != null) {
             Log.i(TAG, "OK: got display binder directly from ServiceManager");
@@ -117,8 +118,8 @@ private static IBinder doWaitForDisplayBinder(@NonNull String serviceName) {
             Log.i(TAG, "OK: got display binder via waitForService");
             return waited;
         }
-        Log.e(TAG, "'" + serviceName + "' not found - is crosvm running with "
-            + "--android-display-service " + serviceName + "?");
+        Log.e(TAG, fmt("'%s' not found - is crosvm running with "
+            + "--android-display-service %s?", serviceName, serviceName));
         return null;
     }
 }
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/network/NetworkInstanceStore.java b/app/src/main/java/cn/classfun/droidvm/daemon/network/NetworkInstanceStore.java
index f0f4fd5b3..e69a9975d 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/network/NetworkInstanceStore.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/network/NetworkInstanceStore.java
@@ -52,8 +52,7 @@ protected boolean load(@NonNull DataStore<NetworkInstance> store, @NonNull JSONO
             JsonUtils.forEachArray(obj, getTypeName(), (JSONObject entry) -> {
                 var migrated = NetworkConfig.migrate(entry);
                 if (migrated == null) {
-                    Log.w(TAG, "Skipping network config with unsupported schema: "
-                        + entry.optString("name"));
+                    Log.w(TAG, fmt("Skipping network config with unsupported schema: %s", entry.optString("name")));
                     return;
                 }
                 if (migrated != entry) {
@@ -63,8 +62,7 @@ protected boolean load(@NonNull DataStore<NetworkInstance> store, @NonNull JSONO
                     try {
                         NetworkConfigValidator.validate(new NetworkConfig(migrated));
                     } catch (Exception e) {
-                        Log.w(TAG, "Skipping legacy network that failed migration/validation: "
-                            + entry.optString("name"), e);
+                        Log.w(TAG, fmt("Skipping legacy network that failed migration/validation: %s", entry.optString("name")), e);
                         return;
                     }
                 }
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/gvisor/GvisorBridgeBackend.java b/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/gvisor/GvisorBridgeBackend.java
index 87af1a35d..e6c8bb6cf 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/gvisor/GvisorBridgeBackend.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/gvisor/GvisorBridgeBackend.java
@@ -377,7 +377,7 @@ private void postForward(
                         fmt("/api/v1/gateways/%d/forwards", vlanId), rule);
                     if (resp.isSuccess()) {
                         var id = resp.json().optString("id", "");
-                        if (!id.isEmpty()) ids.add(vlanId + "/" + id);
+                        if (!id.isEmpty()) ids.add(fmt("%d/%s", vlanId, id));
                     } else {
                         failures.add(fmt("%s %s (%s)", proto, bind, briefBody(resp.body)));
                     }
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/download/DiskDownloadManager.java b/app/src/main/java/cn/classfun/droidvm/lib/download/DiskDownloadManager.java
index f5547a95d..0d2ff6b21 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/download/DiskDownloadManager.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/download/DiskDownloadManager.java
@@ -231,7 +231,7 @@ static void runDownload(@NonNull Context context, long id) {
         var ctx = context.getApplicationContext();
         var d = JOBS.get(id);
         if (d == null) return;
-        var part = new File(d.folder, d.name + ".part");
+        var part = new File(d.folder, fmt("%s.part", d.name));
         var dest = new File(d.folder, d.name);
         try {
             var parent = dest.getParentFile();
@@ -285,15 +285,15 @@ private static void downloadOnce(Download d, File part) throws IOException {
         conn.setInstanceFollowRedirects(true);
         conn.setRequestProperty("User-Agent", d.userAgent);
         conn.setRequestProperty("Accept-Encoding", "identity");
-        if (existing > 0) conn.setRequestProperty("Range", "bytes=" + existing + "-");
+        if (existing > 0) conn.setRequestProperty("Range", fmt("bytes=%d-", existing));
         d.activeConn = conn;
         try {
             int code = conn.getResponseCode();
             boolean resumed = code == HttpURLConnection.HTTP_PARTIAL; // 206
             if (code != HttpURLConnection.HTTP_OK && code != HttpURLConnection.HTTP_PARTIAL)
-                throw new IOException("HTTP " + code);
+                throw new IOException(fmt("HTTP %d", code));
             Log.i(TAG, fmt("Download #%d %s from %s (HTTP %d)",
-                d.id, existing > 0 ? "resuming@" + existing : "starting", conn.getURL(), code));
+                d.id, existing > 0 ? fmt("resuming@%d", existing) : "starting", conn.getURL(), code));
             // Server ignored our Range and is sending the whole file again.
             long start = resumed ? existing : 0;
             d.total = resolveTotal(conn, resumed, start);
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/download/DiskDownloadService.java b/app/src/main/java/cn/classfun/droidvm/lib/download/DiskDownloadService.java
index d582423a5..6ea6a7022 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/download/DiskDownloadService.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/download/DiskDownloadService.java
@@ -1,5 +1,6 @@
 package cn.classfun.droidvm.lib.download;
 
+import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
 import static cn.classfun.droidvm.lib.size.SizeUtils.formatSize;
 import static cn.classfun.droidvm.lib.utils.StringUtils.formatDuration;
 
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/store/network/NetworkConfig.java b/app/src/main/java/cn/classfun/droidvm/lib/store/network/NetworkConfig.java
index 1fdd22675..d44e27afc 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/store/network/NetworkConfig.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/store/network/NetworkConfig.java
@@ -1,5 +1,6 @@
 package cn.classfun.droidvm.lib.store.network;
 
+import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
 import android.util.Log;
 
 import androidx.annotation.NonNull;
@@ -30,7 +31,7 @@ public NetworkConfig() {
     public NetworkConfig(@NonNull JSONObject obj) throws JSONException {
         item.set(obj);
         if (!isSupportedSchema(obj)) throw new JSONException(
-            "Unsupported network config schema (expected " + SCHEMA_VERSION + ")"
+            fmt("Unsupported network config schema (expected %s)", SCHEMA_VERSION)
         );
     }
 
@@ -57,7 +58,7 @@ public static JSONObject migrate(@NonNull JSONObject obj) {
         try {
             return migrateLegacyToV2(obj);
         } catch (Exception e) {
-            Log.w(TAG, "Failed to migrate legacy network config: " + obj.optString("name"), e);
+            Log.w(TAG, fmt("Failed to migrate legacy network config: %s", obj.optString("name")), e);
             return null;
         }
     }
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/store/network/NetworkStore.java b/app/src/main/java/cn/classfun/droidvm/lib/store/network/NetworkStore.java
index 89d24008e..b2b7f7d83 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/store/network/NetworkStore.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/store/network/NetworkStore.java
@@ -1,5 +1,6 @@
 package cn.classfun.droidvm.lib.store.network;
 
+import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
 import android.content.Context;
 import android.util.Log;
 
@@ -42,8 +43,7 @@ protected boolean load(@NonNull DataStore<NetworkConfig> store, @NonNull JSONObj
             JsonUtils.forEachArray(obj, getTypeName(), (JSONObject entry) -> {
                 var migrated = NetworkConfig.migrate(entry);
                 if (migrated == null) {
-                    Log.w(TAG, "Skipping network config with unsupported schema: "
-                        + entry.optString("name"));
+                    Log.w(TAG, fmt("Skipping network config with unsupported schema: %s", entry.optString("name")));
                     return;
                 }
                 if (migrated == entry) { // already current schema
@@ -58,8 +58,7 @@ protected boolean load(@NonNull DataStore<NetworkConfig> store, @NonNull JSONObj
                     cfg = new NetworkConfig(migrated);
                     NetworkConfigValidator.validate(cfg);
                 } catch (Exception e) {
-                    Log.w(TAG, "Skipping legacy network that failed migration/validation: "
-                        + entry.optString("name"), e);
+                    Log.w(TAG, fmt("Skipping legacy network that failed migration/validation: %s", entry.optString("name")), e);
                     return;
                 }
                 store.add(cfg);
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/store/vm/NativeDisplay.java b/app/src/main/java/cn/classfun/droidvm/lib/store/vm/NativeDisplay.java
index c6951f64a..b04457605 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/store/vm/NativeDisplay.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/store/vm/NativeDisplay.java
@@ -50,7 +50,7 @@ public static String serviceName(@NonNull VMConfig config) {
     /** Same as {@link #serviceName(VMConfig)} but from a raw VM id (e.g. an Intent extra). */
     @NonNull
     public static String serviceNameFromId(@NonNull String vmId) {
-        return "droidvm_disp_" + sanitize(vmId);
+        return fmt("droidvm_disp_%s", sanitize(vmId));
     }
 
     /** The socket path crosvm connects to for [vmKey]'s [channel]. Must match across all callers. */
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/ui/termux/TerminalFonts.java b/app/src/main/java/cn/classfun/droidvm/lib/ui/termux/TerminalFonts.java
index d52fe68c7..d6b64d9e2 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/ui/termux/TerminalFonts.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/ui/termux/TerminalFonts.java
@@ -1,5 +1,6 @@
 package cn.classfun.droidvm.lib.ui.termux;
 
+import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
 import android.content.Context;
 import android.graphics.Typeface;
 import android.util.Log;
@@ -49,7 +50,7 @@ public static Typeface load(@NonNull Context ctx) {
             try {
                 return Typeface.createFromFile(userFont);
             } catch (Exception e) {
-                Log.w(TAG, "Ignoring unreadable user font " + userFont, e);
+                Log.w(TAG, fmt("Ignoring unreadable user font %s", userFont), e);
             }
         }
         if (bundled == null) {
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/utils/AssetUtils.java b/app/src/main/java/cn/classfun/droidvm/lib/utils/AssetUtils.java
index a6776b2bd..4b04513c0 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/utils/AssetUtils.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/utils/AssetUtils.java
@@ -316,7 +316,7 @@ private static void extractTarXz(@NonNull InputStream rawIn, @NonNull File destR
                 if (isZeroBlock(header)) break;
                 var name = cString(header, 0, 100);
                 var prefix = cString(header, 345, 155);
-                var path = prefix.isEmpty() ? name : prefix + "/" + name;
+                var path = prefix.isEmpty() ? name : pathJoin(prefix, name);
                 var size = parseOctal(header, 124, 12);
                 var mode = (int) parseOctal(header, 100, 8);
                 var type = (char) (header[156] & 0xff);
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/utils/StringUtils.java b/app/src/main/java/cn/classfun/droidvm/lib/utils/StringUtils.java
index f1ab98d08..3d1a4613e 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/utils/StringUtils.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/utils/StringUtils.java
@@ -137,7 +137,7 @@ public static String extensionLower(@NonNull String path) {
     public static String pathJoin(@NonNull String base, @NonNull String child) {
         if (base.endsWith("/")) base = base.substring(0, base.length() - 1);
         if (child.startsWith("/")) child = child.substring(1);
-        return base + "/" + child;
+        return base + "/" + child; // concat-ok: the canonical path join; fmt() would be a hot-path perf hit
     }
 
     @NonNull
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/NicLeaseAllocator.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/NicLeaseAllocator.java
index 58bce9581..018fb1b34 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/NicLeaseAllocator.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/NicLeaseAllocator.java
@@ -1,5 +1,6 @@
 package cn.classfun.droidvm.ui.vm;
 
+import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
 import android.content.Context;
 import android.util.Log;
 
@@ -60,7 +61,7 @@ public static void resolveAndPersist(@NonNull VMConfig config, @NonNull Context
                 long offset = firstFree(usedOffsets(vmStore, config, selfId, network, vlan),
                     vlan, net4);
                 if (offset < 0) {
-                    Log.w(TAG, "No free DHCPv4 offset for a NIC on network " + netId);
+                    Log.w(TAG, fmt("No free DHCPv4 offset for a NIC on network %s", netId));
                     return;
                 }
                 nic.setDhcp4Offset(offset);
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/boot/BootEntries.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/boot/BootEntries.java
index 54664008f..de833127f 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/boot/BootEntries.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/boot/BootEntries.java
@@ -1,5 +1,6 @@
 package cn.classfun.droidvm.ui.vm.boot;
 
+import static cn.classfun.droidvm.lib.utils.StringUtils.pathJoin;
 import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
 
 import android.content.Context;
@@ -176,7 +177,7 @@ public static void analyzeUrl(
         @NonNull Context ctx, @NonNull String url, int timeoutSecs,
         @NonNull OnProgress onProgress, @NonNull OnScan onScan
     ) {
-        var lbx = ctx.getApplicationInfo().nativeLibraryDir + "/liblbx.so";
+        var lbx = pathJoin(ctx.getApplicationInfo().nativeLibraryDir, "liblbx.so");
         var thread = new Thread(
             () -> runAnalyze(lbx, url, timeoutSecs, onProgress, onScan), "lbx-analyze");
         thread.setDaemon(true);
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/boot/BootMenuDialog.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/boot/BootMenuDialog.java
index 238ebd8a4..cd84b5bb4 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/boot/BootMenuDialog.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/boot/BootMenuDialog.java
@@ -1,5 +1,6 @@
 package cn.classfun.droidvm.ui.vm.boot;
 
+import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
 import static android.view.View.GONE;
 import static android.view.View.VISIBLE;
 import static cn.classfun.droidvm.lib.store.enums.Enums.optEnum;
@@ -251,7 +252,7 @@ private static void updateSummary(
             summary.setVisibility(GONE);
             return;
         }
-        var line = entry.kernel + " | " + entry.source;
+        var line = fmt("%s | %s", entry.kernel, entry.source);
         var cmdline = entry.effectiveCmdline(boot.isVdafix());
         if (!cmdline.isEmpty()) line += "\n" + cmdline;
         summary.setVisibility(VISIBLE);
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/display/nativedisplay/display/DisplayProvider.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/nativedisplay/display/DisplayProvider.java
index f58252a6c..524e5db1b 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/display/nativedisplay/display/DisplayProvider.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/nativedisplay/display/DisplayProvider.java
@@ -1,5 +1,6 @@
 package cn.classfun.droidvm.ui.vm.display.nativedisplay.display;
 
+import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
 import android.crosvm.DisplayConfig;
 import android.crosvm.ICrosvmAndroidDisplayService;
 import android.os.DeadObjectException;
@@ -105,7 +106,7 @@ private void fetchBinder() {
             if (got == null) {
                 // Give up rather than poll forever: the daemon broker may have died (the supplier
                 // returns null once rootService is dropped), so the display can't be reached.
-                Log.e(TAG, "display binder unavailable after " + MAX_BINDER_ATTEMPTS + " attempts");
+                Log.e(TAG, fmt("display binder unavailable after %d attempts", MAX_BINDER_ATTEMPTS));
                 mainHandler.post(() -> onConnected.accept(false));
                 return;
             }
@@ -130,7 +131,7 @@ private void onBinderReady(@NonNull IBinder binder) {
                 onDisplayConfig.accept(config);
             }
         } catch (Exception e) {
-            Log.w(TAG, "getDisplayConfig unavailable, using default " + width + "x" + height);
+            Log.w(TAG, fmt("getDisplayConfig unavailable, using default %dx%d", width, height));
         }
         onConnected.accept(true);
         applyPendingSurface();
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/display/nativedisplay/input/InputForwarder.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/nativedisplay/input/InputForwarder.java
index 163981464..ce192c4a7 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/display/nativedisplay/input/InputForwarder.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/nativedisplay/input/InputForwarder.java
@@ -68,11 +68,11 @@ private void submit(@NonNull String name, @NonNull Runnable block) {
                 try {
                     block.run();
                 } catch (Exception e) {
-                    Log.e(TAG, name + " failed", e);
+                    Log.e(TAG, fmt("%s failed", name), e);
                 }
             });
         } catch (Exception e) {
-            Log.d(TAG, name + " dropped: " + e.getMessage());
+            Log.d(TAG, fmt("%s dropped: %s", name, e.getMessage()));
         }
     }
 
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/info/VMInfoActivity.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/info/VMInfoActivity.java
index fac636af7..c5b822933 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/info/VMInfoActivity.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/info/VMInfoActivity.java
@@ -1,5 +1,6 @@
 package cn.classfun.droidvm.ui.vm.info;
 
+import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
 import static android.widget.Toast.LENGTH_LONG;
 import static android.widget.Toast.LENGTH_SHORT;
 import static cn.classfun.droidvm.lib.store.enums.Enums.applyText;
@@ -229,7 +230,7 @@ private String bootSummary() {
             var pinned = boot.getImageEntry();
             var label = getString(R.string.edit_vm_kernel_source_image);
             if (pinned != null && pinned.title != null)
-                return label + " | " + pinned.title;
+                return fmt("%s | %s", label, pinned.title);
             return label;
         }
         return basename(boot.getKernel());
@@ -368,8 +369,7 @@ private void refreshPortForwards() {
                     } catch (Exception e) {
                         guest = "?";
                     }
-                    lines.add(fwd.proto.toUpperCase() + "  *:" + fwd.host
-                        + " -> " + guest + ":" + fwd.guest);
+                    lines.add(fmt("%s  *:%s -> %s:%s", fwd.proto.toUpperCase(), fwd.host, guest, fwd.guest));
                 }
             }
             if (nic.isDhcp6LeaseEnabled() && vlan.isDhcp6Enabled()) {
@@ -383,8 +383,7 @@ private void refreshPortForwards() {
                     } catch (Exception e) {
                         guest = "?";
                     }
-                    lines.add(fwd.proto.toUpperCase() + "  *:" + fwd.host
-                        + " -> [" + guest + "]:" + fwd.guest);
+                    lines.add(fmt("%s  *:%s -> [%s]:%s", fwd.proto.toUpperCase(), fwd.host, guest, fwd.guest));
                 }
             }
         });
diff --git a/scripts/ci/check_string_concat.py b/scripts/ci/check_string_concat.py
new file mode 100644
index 000000000..e6354feef
--- /dev/null
+++ b/scripts/ci/check_string_concat.py
@@ -0,0 +1,158 @@
+#!/usr/bin/env python3
+"""Flag Java string building done with `+` instead of the project's fmt() helper.
+
+Reports every `+` where exactly one operand is a string literal and the other is
+a runtime expression (`"x=" + v`, `v + " done"`), which reads better as
+`fmt("x=%s", v)`. Deliberately NOT flagged:
+  - `+` inside a string literal ("wlan+", "%s+", "\\s+") -- masked out first;
+  - literal + literal ("a" + "b") -- a compile-time constant, fmt adds nothing;
+  - `++` and numeric `+` with no string operand;
+  - a `+=` append with a SINGLE `+` (`s += "x" + y`) -- appending one piece to
+    an accumulator is clear intent fmt() would only obscure. But a `+=` chaining
+    two or more `+` (`s += "a" + b + "c"`) IS flagged: keep append complexity
+    low and reach for fmt() there. The count is per statement (to the next
+    `;`/`{`/`}`).
+
+A line is exempted with a trailing `// concat-ok` comment (for the rare case
+where `+` genuinely reads better, e.g. a one-off constant split for width).
+
+Not a full parser: it masks comments and string/char literals, then inspects
+the token on each side of every bare `+`. Good enough to catch the pattern the
+reviewers keep flagging without drowning in false positives.
+
+Exit status is 0 when clean, 1 when any violation is found. Run from the repo
+root, or pass the repo root as argv[1].
+"""
+import os
+import re
+import subprocess
+import sys
+
+SUPPRESS = "concat-ok"
+
+
+def mask(src):
+    """Replace comments with spaces and each string/char literal with one STR
+    sentinel (\x01), preserving newlines so line numbers stay accurate."""
+    out = []
+    i, n = 0, len(src)
+    STR = "\x01"
+    while i < n:
+        c = src[i]
+        two = src[i:i + 2]
+        if two == "//":
+            j = src.find("\n", i)
+            j = n if j < 0 else j
+            out.append(" " * (j - i))
+            i = j
+        elif two == "/*":
+            j = src.find("*/", i + 2)
+            j = n if j < 0 else j + 2
+            out.append("".join(ch if ch == "\n" else " " for ch in src[i:j]))
+            i = j
+        elif c in "\"'":
+            j = i + 1                         # consume literal, honour escapes
+            while j < n:
+                if src[j] == "\\":
+                    j += 2
+                    continue
+                if src[j] == c:
+                    j += 1
+                    break
+                j += 1
+            out.append(STR)
+            i = j
+        else:
+            out.append(c)
+            i += 1
+    return "".join(out)
+
+
+# Significant tokens: a string literal (\x01), '+=' (marks an append statement),
+# a value (identifier / number / closing bracket = end of a sub-expression), a
+# '+', or a statement boundary (; { }) that scopes the '+=' exemption.
+TOKEN = re.compile(r"""
+      \x01                                   # string literal
+    | \+\+ | \+=                             # compound operators (+= = append)
+    | \+                                     # the concatenation operator
+    | [A-Za-z_$][A-Za-z0-9_$]* | [0-9][\w.]* # identifier / number
+    | [)\]]                                  # end of a sub-expression
+    | [;{}]                                  # statement boundary
+""", re.VERBOSE)
+
+
+def _statement_hits(stmt, masked, suppressed):
+    """Violations within one statement's tokens. A '+=' append stays exempt only
+    while it is glance-obvious - at most ONE '+'. A second '+' (`s += "a"+b+"c"`)
+    is too complex: the exemption drops and every literal-joining '+' is reported,
+    steering it to fmt()."""
+    is_append = any(t == "+=" for t, _ in stmt)
+    plus_count = sum(1 for t, _ in stmt if t == "+")
+    if is_append and plus_count <= 1:        # simple accumulator append: allow
+        return
+    for k, (tok, pos) in enumerate(stmt):
+        if tok != "+":
+            continue
+        left = stmt[k - 1][0] if k > 0 else None
+        right = stmt[k + 1][0] if k + 1 < len(stmt) else None
+        if (left == "\x01") != (right == "\x01"):   # exactly one is a literal
+            line = masked.count("\n", 0, pos) + 1
+            if line not in suppressed:
+                yield line
+
+
+def violations_in(src, masked):
+    """Yield line numbers where a bare '+' joins a string literal and an expr.
+    Tokens are split into statements on ; { } so a '+=' append exemption cannot
+    leak past its statement and its '+' count is scoped correctly. Literal+literal
+    that spans lines stays within one statement, so it is still never flagged."""
+    # suppression: any line carrying the marker is skipped. Checked against the
+    # original source, since masking blanks the comment the marker lives in.
+    suppressed = {i for i, ln in enumerate(src.split("\n"), 1) if SUPPRESS in ln}
+    stmt = []
+    for m in TOKEN.finditer(masked):
+        tok = m.group(0)
+        if tok in (";", "{", "}"):
+            yield from _statement_hits(stmt, masked, suppressed)
+            stmt = []
+        else:
+            stmt.append((tok, m.start()))
+    yield from _statement_hits(stmt, masked, suppressed)
+
+
+def tracked_java(root):
+    out = subprocess.check_output(["git", "-C", root, "ls-files", "*.java"])
+    return out.decode().split()
+
+
+def main():
+    root = os.path.abspath(sys.argv[1]) if len(sys.argv) > 1 else os.getcwd()
+    total = 0
+    files = 0
+    for rel in tracked_java(root):
+        p = os.path.join(root, rel)
+        if not os.path.isfile(p):
+            continue
+        with open(p, encoding="utf-8", errors="replace") as fh:
+            src = fh.read()
+        lines = sorted(set(violations_in(src, mask(src))))
+        if not lines:
+            continue
+        files += 1
+        total += len(lines)
+        raw = src.split("\n")
+        for ln in lines:
+            print(f"{rel}:{ln}: {raw[ln - 1].strip()[:100]}")
+
+    if total:
+        print()
+        print(f"FAIL: {total} string concatenation(s) in {files} file(s); "
+              f"use fmt() instead of +.")
+        print(f"For a deliberate exception, add a trailing '// {SUPPRESS}' comment.")
+        return 1
+    print("OK: no string-literal '+' concatenation.")
+    return 0
+
+
+if __name__ == "__main__":
+    sys.exit(main())

From d3cdc05aa46c07028541d730ceb228562478a17b Mon Sep 17 00:00:00 2001
From: HuJK <gh@hujk.org>
Date: Mon, 6 Jul 2026 16:55:31 +0800
Subject: [PATCH 093/182] acquire btn update

---
 .../ui/hugepage/AcquireContainerView.java     | 171 ++++++++++++++++++
 .../droidvm/ui/hugepage/HugePageActivity.java |  69 +++++--
 .../ui/hugepage/HugePageProcessActivity.java  |   6 +
 .../ui/hugepage/HugePageProcessAdapter.java   |   5 +-
 app/src/main/res/layout/acquire_buttons.xml   |  75 ++------
 app/src/main/res/values-zh-rCN/strings.xml    |   4 +-
 app/src/main/res/values-zh-rTW/strings.xml    |   4 +-
 app/src/main/res/values/attrs.xml             |   5 +
 app/src/main/res/values/strings.xml           |   4 +-
 9 files changed, 259 insertions(+), 84 deletions(-)
 create mode 100644 app/src/main/java/cn/classfun/droidvm/ui/hugepage/AcquireContainerView.java

diff --git a/app/src/main/java/cn/classfun/droidvm/ui/hugepage/AcquireContainerView.java b/app/src/main/java/cn/classfun/droidvm/ui/hugepage/AcquireContainerView.java
new file mode 100644
index 000000000..1a56bf0a5
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/ui/hugepage/AcquireContainerView.java
@@ -0,0 +1,171 @@
+package cn.classfun.droidvm.ui.hugepage;
+
+import android.content.Context;
+import android.content.res.TypedArray;
+import android.graphics.Canvas;
+import android.graphics.Color;
+import android.graphics.Paint;
+import android.graphics.Path;
+import android.graphics.RectF;
+import android.graphics.drawable.Drawable;
+import android.util.AttributeSet;
+import android.view.View;
+
+import androidx.annotation.NonNull;
+import androidx.annotation.Nullable;
+import androidx.appcompat.content.res.AppCompatResources;
+import androidx.core.graphics.ColorUtils;
+
+import com.google.android.material.color.MaterialColors;
+
+import cn.classfun.droidvm.R;
+
+/**
+ * The acquire-mode glyph drawn as a liquid-fill tank: an open-top box (no lid)
+ * with the download icon centred inside. The box fills with "water" up to a
+ * per-mode level - v1 shallow, v2 mid, v3 near-full - so the fill height, not a
+ * number badge, is what tells the three modes apart.
+ *
+ * <p>The download glyph is split at the water line and drawn in opposite colours
+ * either side of it: {@code colorPrimary} above the surface (on the empty tank),
+ * {@code colorOnPrimary} for the submerged part (carved out of the water). The
+ * fill level is set per slot via {@code app:acv_fill} in {@code acquire_buttons.xml}.
+ * Greying/hiding is done by the host toggling the parent slot's alpha/visibility,
+ * so this view just draws itself at full strength.
+ */
+public final class AcquireContainerView extends View {
+    private final float density;
+    private final Paint paint = new Paint(Paint.ANTI_ALIAS_FLAG);
+    private final Path walls = new Path();     // open-top outline (stroked)
+    private final Path interior = new Path();  // rounded-bottom fill region (clip)
+    private final RectF box = new RectF();
+    @Nullable
+    private final Drawable glyph;
+
+    private final int colorOutline;
+    private final int colorWater;
+    private final int colorInterior;
+    private final int colorGlyphAbove;
+    private final int colorGlyphBelow;
+
+    /** 0 = empty tank, 1 = full. Sets how high the water rises inside the box. */
+    private float fill = 0.5f;
+
+    public AcquireContainerView(Context context) {
+        this(context, null);
+    }
+
+    public AcquireContainerView(Context context, @Nullable AttributeSet attrs) {
+        super(context, attrs);
+        density = getResources().getDisplayMetrics().density;
+        Drawable d = AppCompatResources.getDrawable(context, R.drawable.ic_download);
+        glyph = d != null ? d.mutate() : null;   // mutate: per-instance tint
+        int primary = MaterialColors.getColor(context,
+            androidx.appcompat.R.attr.colorPrimary, Color.BLUE);
+        int onPrimary = MaterialColors.getColor(context,
+            com.google.android.material.R.attr.colorOnPrimary, Color.WHITE);
+        colorOutline = primary;
+        colorWater = primary;
+        colorInterior = ColorUtils.setAlphaComponent(primary, 0x24);  // faint tank tint
+        colorGlyphAbove = primary;                // over the empty tank
+        colorGlyphBelow = onPrimary;              // the opposite colour, under water
+        if (attrs != null) {
+            TypedArray a = context.obtainStyledAttributes(
+                attrs, R.styleable.AcquireContainerView);
+            fill = clamp01(a.getFloat(R.styleable.AcquireContainerView_acv_fill, fill));
+            a.recycle();
+        }
+    }
+
+    /** Set the fill level (0..1) at runtime; clamped. */
+    public void setFill(float value) {
+        float v = clamp01(value);
+        if (v != fill) {
+            fill = v;
+            invalidate();
+        }
+    }
+
+    @Override
+    protected void onMeasure(int widthMeasureSpec, int heightMeasureSpec) {
+        int def = Math.round(44 * density);
+        setMeasuredDimension(resolveSize(def, widthMeasureSpec),
+            resolveSize(def, heightMeasureSpec));
+    }
+
+    @Override
+    protected void onDraw(@NonNull Canvas canvas) {
+        super.onDraw(canvas);
+        float w = getWidth(), h = getHeight();
+        if (w <= 0 || h <= 0) return;
+
+        float side = Math.min(w, h) * 0.62f;      // square tank, centred
+        float left = (w - side) / 2f;
+        float top = (h - side) / 2f;
+        float right = left + side;
+        float bottom = top + side;
+        box.set(left, top, right, bottom);
+        float radius = side * 0.18f;               // rounded bottom corners
+        float stroke = Math.max(1.5f * density, side * 0.07f);
+        float inset = stroke / 2f;                 // keep the stroke inside the box
+
+        // Water surface, measured from the bottom up. Clamp inside the tank.
+        float waterY = Math.max(top, Math.min(bottom, bottom - fill * side));
+
+        // Interior region (square top, rounded bottom) clips the tint fills so
+        // the water follows the rounded corners.
+        interior.reset();
+        interior.addRoundRect(box,
+            new float[]{0, 0, 0, 0, radius, radius, radius, radius},
+            Path.Direction.CW);
+
+        canvas.save();
+        canvas.clipPath(interior);
+        paint.setStyle(Paint.Style.FILL);
+        paint.setColor(colorInterior);            // faint tint over the whole tank
+        canvas.drawRect(left, top, right, bottom, paint);
+        paint.setColor(colorWater);               // opaque water in the lower part
+        canvas.drawRect(left, waterY, right, bottom, paint);
+        canvas.restore();
+
+        // Open-top walls: left side, rounded bottom, right side - no top edge.
+        walls.reset();
+        walls.moveTo(left + inset, top);
+        walls.lineTo(left + inset, bottom - radius);
+        walls.quadTo(left + inset, bottom - inset, left + radius, bottom - inset);
+        walls.lineTo(right - radius, bottom - inset);
+        walls.quadTo(right - inset, bottom - inset, right - inset, bottom - radius);
+        walls.lineTo(right - inset, top);
+        paint.setStyle(Paint.Style.STROKE);
+        paint.setStrokeWidth(stroke);
+        paint.setStrokeCap(Paint.Cap.ROUND);
+        paint.setStrokeJoin(Paint.Join.ROUND);
+        paint.setColor(colorOutline);
+        canvas.drawPath(walls, paint);
+
+        // Download glyph, centred and split at the water line: primary above the
+        // surface, the inverted on-primary colour carved out of the water below.
+        if (glyph != null) {
+            float g = side * 0.60f;
+            int gl = Math.round(left + (side - g) / 2f);
+            int gt = Math.round(top + (side - g) / 2f);
+            glyph.setBounds(gl, gt, Math.round(gl + g), Math.round(gt + g));
+
+            canvas.save();
+            canvas.clipRect(left, top, right, waterY);
+            glyph.setTint(colorGlyphAbove);
+            glyph.draw(canvas);
+            canvas.restore();
+
+            canvas.save();
+            canvas.clipRect(left, waterY, right, bottom);
+            glyph.setTint(colorGlyphBelow);
+            glyph.draw(canvas);
+            canvas.restore();
+        }
+    }
+
+    private static float clamp01(float v) {
+        return v < 0f ? 0f : Math.min(v, 1f);
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/hugepage/HugePageActivity.java b/app/src/main/java/cn/classfun/droidvm/ui/hugepage/HugePageActivity.java
index bcd32a974..c859a6c1f 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/hugepage/HugePageActivity.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/hugepage/HugePageActivity.java
@@ -21,6 +21,7 @@
 import android.view.View;
 import android.util.Log;
 import android.view.inputmethod.EditorInfo;
+import android.widget.FrameLayout;
 import android.widget.TextView;
 import android.widget.Toast;
 
@@ -32,6 +33,7 @@
 import com.google.android.material.appbar.MaterialToolbar;
 import com.google.android.material.button.MaterialButton;
 import com.google.android.material.card.MaterialCardView;
+import com.google.android.material.checkbox.MaterialCheckBox;
 import com.google.android.material.dialog.MaterialAlertDialogBuilder;
 import com.google.android.material.progressindicator.LinearProgressIndicator;
 
@@ -57,6 +59,10 @@ public final class HugePageActivity extends AppCompatActivity {
     private static final String DISABLE_FILE = pathJoin(MAGISK_BASE, "disable");
     private static final String CRASH_FILE = pathJoin(MAGISK_BASE, "crash");
     private static final long PAGE_SIZE = 2L * 1024 * 1024; // 2MiB per page
+    // Shared app prefs (same store as Privacy/ApiManager) + the "don't ask again"
+    // flag for the acquire confirm dialog.
+    private static final String PREFS_NAME = "droidvm_prefs";
+    private static final String KEY_SKIP_ACQUIRE_CONFIRM = "hugepage_acquire_skip_confirm";
     private final Handler handler = new Handler(Looper.getMainLooper());
     private final HugePageModel model = new HugePageModel();
     private boolean resumed = false;
@@ -164,12 +170,13 @@ private void initialize() {
         // while a run is in flight) interrupts it. Listeners are static -- the
         // slots aren't recycled -- and the idle/running visibility toggle is
         // driven by applyAcquireState().
-        // Short-press runs it (gated to the pressable state); long-press opens the
-        // what-does-this-do dialog with a Run/Cancel choice (always available, even
-        // when the button is greyed - the buttons stay enabled for that).
-        btnAcquireV1.setOnClickListener(v -> { if (acquireEnabled && !mainAcquiring) startAcquire(1); });
-        btnAcquireV2.setOnClickListener(v -> { if (acquireEnabled && !mainAcquiring) startAcquire(2); });
-        btnAcquireV3.setOnClickListener(v -> { if (acquireEnabled && !mainAcquiring) startAcquire(3); });
+        // Short-press opens the what-does-this-do dialog (or, once the user ticks
+        // "don't ask again", runs straight away) - gated to the pressable state.
+        // Long-press always opens the dialog, even when the button is greyed (the
+        // buttons stay enabled for that), so the prompt can be re-summoned any time.
+        btnAcquireV1.setOnClickListener(v -> { if (acquireEnabled && !mainAcquiring) confirmAcquire(this, 1, () -> startAcquire(1)); });
+        btnAcquireV2.setOnClickListener(v -> { if (acquireEnabled && !mainAcquiring) confirmAcquire(this, 2, () -> startAcquire(2)); });
+        btnAcquireV3.setOnClickListener(v -> { if (acquireEnabled && !mainAcquiring) confirmAcquire(this, 3, () -> startAcquire(3)); });
         btnAcquireV1.setOnLongClickListener(v -> { showAcquireInfo(this, 1, () -> startAcquire(1)); return true; });
         btnAcquireV2.setOnLongClickListener(v -> { showAcquireInfo(this, 2, () -> startAcquire(2)); return true; });
         btnAcquireV3.setOnLongClickListener(v -> { showAcquireInfo(this, 3, () -> startAcquire(3)); return true; });
@@ -205,26 +212,58 @@ private void applyAcquireSlot(View btn, View spinner, int mode) {
         spinner.setVisibility(spin ? VISIBLE : GONE);
     }
 
-    /** Long-press info: what the acquire mode does, with a Run/Cancel choice. */
+    /**
+     * Short-press an acquire button: run straight away if the user ticked "don't
+     * ask again" in a past prompt, otherwise show the confirm dialog. Long-press
+     * bypasses this and always shows the dialog (see {@link #showAcquireInfo}).
+     */
+    static void confirmAcquire(@NonNull Context ctx, int mode, @NonNull Runnable onRun) {
+        if (skipAcquireConfirm(ctx)) onRun.run();
+        else showAcquireInfo(ctx, mode, onRun);
+    }
+
+    /**
+     * Explain what the acquire mode does, with a Run/Cancel choice and a "don't ask
+     * again" checkbox. The checkbox seeds from and (on any dismiss) writes back the
+     * skip preference, so it doubles as the way to re-enable the prompt after opting
+     * out; Run additionally starts the acquire. Shared by both hugepage screens, for
+     * short-press (via {@link #confirmAcquire}) and long-press alike. The title is
+     * always "Acquire huge pages" - the mode is conveyed by the explanation text.
+     */
     static void showAcquireInfo(@NonNull Context ctx, int mode, @NonNull Runnable onRun) {
-        int modeLabel = mode == 2 ? R.string.hugepage_proc_acquire_v2
-            : mode == 3 ? R.string.hugepage_proc_acquire_v3
-            : R.string.hugepage_proc_acquire_v1;
         int msg = mode == 2 ? R.string.hugepage_acquire_v2_explain
             : mode == 3 ? R.string.hugepage_acquire_v3_explain
             : R.string.hugepage_acquire_v1_explain;
-        // Title = "Acquire huge pages" + the mode badge, e.g. "Acquire huge pages v1".
-        String title = fmt("%s %s",
-            ctx.getString(R.string.hugepage_acquire_pages_title),
-            ctx.getString(modeLabel));
+        // "Don't ask again", indented to line up with the dialog's message text.
+        float density = ctx.getResources().getDisplayMetrics().density;
+        var dontAsk = new MaterialCheckBox(ctx);
+        dontAsk.setText(R.string.hugepage_acquire_dont_ask);
+        dontAsk.setChecked(skipAcquireConfirm(ctx));
+        var holder = new FrameLayout(ctx);
+        int padH = Math.round(24 * density);
+        holder.setPaddingRelative(padH, Math.round(4 * density), padH, 0);
+        holder.addView(dontAsk);
         new MaterialAlertDialogBuilder(ctx)
-            .setTitle(title)
+            .setTitle(R.string.hugepage_acquire_pages_title)   // no v1/v2/v3 suffix
             .setMessage(msg)
+            .setView(holder)
             .setPositiveButton(R.string.hugepage_acquire_run, (d, w) -> onRun.run())
             .setNegativeButton(android.R.string.cancel, null)
+            .setOnDismissListener(d -> setSkipAcquireConfirm(ctx, dontAsk.isChecked()))
             .show();
     }
 
+    /** True once the user opted out of the acquire prompt (short-press runs directly). */
+    static boolean skipAcquireConfirm(@NonNull Context ctx) {
+        return ctx.getSharedPreferences(PREFS_NAME, Context.MODE_PRIVATE)
+            .getBoolean(KEY_SKIP_ACQUIRE_CONFIRM, false);
+    }
+
+    private static void setSkipAcquireConfirm(@NonNull Context ctx, boolean skip) {
+        ctx.getSharedPreferences(PREFS_NAME, Context.MODE_PRIVATE)
+            .edit().putBoolean(KEY_SKIP_ACQUIRE_CONFIRM, skip).apply();
+    }
+
     /**
      * Start filling the pool with acquire algorithm {@code mode} (see
      * {@link HugePageModel#acquire}). Optimistically shows the spinners, fires the
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/hugepage/HugePageProcessActivity.java b/app/src/main/java/cn/classfun/droidvm/ui/hugepage/HugePageProcessActivity.java
index 1bdce4994..20a47990e 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/hugepage/HugePageProcessActivity.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/hugepage/HugePageProcessActivity.java
@@ -439,6 +439,12 @@ public void onAcquire(int mode) {
         }, "hugepage-acquire").start();
     }
 
+    /** Short-press an acquire button: confirm (unless the user opted out), then run. */
+    @Override
+    public void onAcquireConfirm(int mode) {
+        HugePageActivity.confirmAcquire(this, mode, () -> onAcquire(mode));
+    }
+
     /** Long-press an acquire button: explain the mode, with a Run/Cancel choice. */
     @Override
     public void onAcquireInfo(int mode) {
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/hugepage/HugePageProcessAdapter.java b/app/src/main/java/cn/classfun/droidvm/ui/hugepage/HugePageProcessAdapter.java
index 1f41f3fa9..39f138899 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/hugepage/HugePageProcessAdapter.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/hugepage/HugePageProcessAdapter.java
@@ -36,6 +36,9 @@ public interface Listener {
          *              3 = migrate + per-block evict to zram. */
         void onAcquire(int mode);
 
+        /** Short-press: confirm via the info dialog (unless the user opted out), then run. */
+        void onAcquireConfirm(int mode);
+
         /** Long-press: show the what-does-this-mode-do dialog (with a Run choice). */
         void onAcquireInfo(int mode);
 
@@ -183,7 +186,7 @@ private void bindAcquireSlot(View btn, View spinner, int mode) {
         // Left enabled so long-press always opens the info dialog; short-press is
         // gated on !acquiring and the icon greys via alpha while a run is in flight.
         btn.setAlpha(acquiring ? 0.38f : 1f);
-        btn.setOnClickListener(v -> { if (!acquiring) listener.onAcquire(mode); });
+        btn.setOnClickListener(v -> { if (!acquiring) listener.onAcquireConfirm(mode); });
         btn.setOnLongClickListener(v -> { listener.onAcquireInfo(mode); return true; });
         spinner.setVisibility(spin ? VISIBLE : GONE);
         spinner.setOnClickListener(spin ? v -> listener.onStopAcquire() : null);
diff --git a/app/src/main/res/layout/acquire_buttons.xml b/app/src/main/res/layout/acquire_buttons.xml
index fb26d474c..61258510b 100644
--- a/app/src/main/res/layout/acquire_buttons.xml
+++ b/app/src/main/res/layout/acquire_buttons.xml
@@ -1,8 +1,10 @@
 <?xml version="1.0" encoding="utf-8"?>
 <!-- Reusable acquire-mode slots: v1 = original scan, v2 = migrate + system
      reclaim, v3 = migrate + per-block evict to zram. Each slot overlays an
-     acquire button (a download icon with the mode number badged bottom-end) with
-     an in-progress stop spinner; idle shows the button, running shows the spinner
+     acquire button (an AcquireContainerView: an open-top tank with a centred
+     download glyph, filled with water to a per-mode level - v1 shallow, v2 mid,
+     v3 near-full - so the fill height is what tells the modes apart) with an
+     in-progress stop spinner; idle shows the button, running shows the spinner
      (tap = stop). Shared by the process-list row and the main status screen; the
      host lays the three slots out horizontally. The btn_acquire_v* views are
      plain clickable FrameLayouts - the code toggles visibility/enabled and greys
@@ -24,26 +26,11 @@
             android:contentDescription="@string/hugepage_proc_acquire_v1_desc"
             android:focusable="true">
 
-            <ImageView
-                android:layout_width="24dp"
-                android:layout_height="24dp"
-                android:layout_gravity="center"
-                android:importantForAccessibility="no"
-                android:src="@drawable/ic_download"
-                app:tint="?attr/colorPrimary" />
-
-            <TextView
-                android:layout_width="wrap_content"
-                android:layout_height="wrap_content"
-                android:layout_gravity="bottom|end"
-                android:layout_marginEnd="1dp"
-                android:layout_marginBottom="1dp"
+            <cn.classfun.droidvm.ui.hugepage.AcquireContainerView
+                android:layout_width="match_parent"
+                android:layout_height="match_parent"
                 android:importantForAccessibility="no"
-                android:includeFontPadding="false"
-                android:text="@string/hugepage_proc_acquire_v1"
-                android:textColor="?attr/colorPrimary"
-                android:textSize="14sp"
-                android:textStyle="bold" />
+                app:acv_fill="0.30" />
         </FrameLayout>
 
         <FrameLayout
@@ -85,26 +72,11 @@
             android:contentDescription="@string/hugepage_proc_acquire_v2_desc"
             android:focusable="true">
 
-            <ImageView
-                android:layout_width="24dp"
-                android:layout_height="24dp"
-                android:layout_gravity="center"
-                android:importantForAccessibility="no"
-                android:src="@drawable/ic_download"
-                app:tint="?attr/colorPrimary" />
-
-            <TextView
-                android:layout_width="wrap_content"
-                android:layout_height="wrap_content"
-                android:layout_gravity="bottom|end"
-                android:layout_marginEnd="1dp"
-                android:layout_marginBottom="1dp"
+            <cn.classfun.droidvm.ui.hugepage.AcquireContainerView
+                android:layout_width="match_parent"
+                android:layout_height="match_parent"
                 android:importantForAccessibility="no"
-                android:includeFontPadding="false"
-                android:text="@string/hugepage_proc_acquire_v2"
-                android:textColor="?attr/colorPrimary"
-                android:textSize="14sp"
-                android:textStyle="bold" />
+                app:acv_fill="0.60" />
         </FrameLayout>
 
         <FrameLayout
@@ -146,26 +118,11 @@
             android:contentDescription="@string/hugepage_proc_acquire_v3_desc"
             android:focusable="true">
 
-            <ImageView
-                android:layout_width="24dp"
-                android:layout_height="24dp"
-                android:layout_gravity="center"
-                android:importantForAccessibility="no"
-                android:src="@drawable/ic_download"
-                app:tint="?attr/colorPrimary" />
-
-            <TextView
-                android:layout_width="wrap_content"
-                android:layout_height="wrap_content"
-                android:layout_gravity="bottom|end"
-                android:layout_marginEnd="1dp"
-                android:layout_marginBottom="1dp"
+            <cn.classfun.droidvm.ui.hugepage.AcquireContainerView
+                android:layout_width="match_parent"
+                android:layout_height="match_parent"
                 android:importantForAccessibility="no"
-                android:includeFontPadding="false"
-                android:text="@string/hugepage_proc_acquire_v3"
-                android:textColor="?attr/colorPrimary"
-                android:textSize="14sp"
-                android:textStyle="bold" />
+                app:acv_fill="0.90" />
         </FrameLayout>
 
         <FrameLayout
diff --git a/app/src/main/res/values-zh-rCN/strings.xml b/app/src/main/res/values-zh-rCN/strings.xml
index ca74410a5..0899222d7 100644
--- a/app/src/main/res/values-zh-rCN/strings.xml
+++ b/app/src/main/res/values-zh-rCN/strings.xml
@@ -966,10 +966,8 @@
     <string name="hugepage_proc_acquire_done">获取完成</string>
     <string name="hugepage_acquire_pages_title">获取大页</string>
     <string name="hugepage_acquire_run">执行</string>
+    <string name="hugepage_acquire_dont_ask">不再提示</string>
     <string name="hugepage_acquire_degraded">已降级，实际使用 %1$s</string>
-    <string name="hugepage_proc_acquire_v1">v1</string>
-    <string name="hugepage_proc_acquire_v2">v2</string>
-    <string name="hugepage_proc_acquire_v3">v3</string>
     <string name="hugepage_proc_acquire_v1_desc">获取 v1（alloc_contig_pages 扫描）</string>
     <string name="hugepage_proc_acquire_v2_desc">获取 v2（迁移＋系统回收）</string>
     <string name="hugepage_proc_acquire_v3_desc">获取 v3（迁移＋逐块挤到 zram）</string>
diff --git a/app/src/main/res/values-zh-rTW/strings.xml b/app/src/main/res/values-zh-rTW/strings.xml
index ad077a576..51849290d 100644
--- a/app/src/main/res/values-zh-rTW/strings.xml
+++ b/app/src/main/res/values-zh-rTW/strings.xml
@@ -926,14 +926,12 @@
     <string name="hugepage_proc_acquire">獲取</string>
     <string name="hugepage_proc_acquire_running">獲取大頁中…</string>
     <string name="hugepage_proc_acquire_done">獲取完成</string>
-    <string name="hugepage_proc_acquire_v1">v1</string>
-    <string name="hugepage_proc_acquire_v2">v2</string>
-    <string name="hugepage_proc_acquire_v3">v3</string>
     <string name="hugepage_proc_acquire_v1_desc">獲取 v1（alloc_contig_pages 掃描）</string>
     <string name="hugepage_proc_acquire_v2_desc">獲取 v2（遷移＋系統回收）</string>
     <string name="hugepage_proc_acquire_v3_desc">獲取 v3（遷移＋逐塊擠到 zram）</string>
     <string name="hugepage_acquire_degraded">已降級，實際使用 %1$s</string>
     <string name="hugepage_acquire_run">執行</string>
+    <string name="hugepage_acquire_dont_ask">以後不再提示</string>
     <string name="hugepage_acquire_v1_explain">用 alloc_contig_pages 蒐集大頁</string>
     <string name="hugepage_acquire_v2_explain">用 try_to_free_mem_cgroup_pages 把其他程式擠到 swap/zram\n再用 alloc_contig_range 蒐集大頁</string>
     <string name="hugepage_acquire_v3_explain">用 folio_isolate_lru + reclaim_pages 精準把頁面擠到 swap/zram\n再用 alloc_contig_range 蒐集大頁</string>
diff --git a/app/src/main/res/values/attrs.xml b/app/src/main/res/values/attrs.xml
index af54d63a9..e431d4cc5 100644
--- a/app/src/main/res/values/attrs.xml
+++ b/app/src/main/res/values/attrs.xml
@@ -1,5 +1,10 @@
 <?xml version="1.0" encoding="utf-8"?>
 <resources>
+    <declare-styleable name="AcquireContainerView">
+        <!-- Water level of the tank, 0 (empty) .. 1 (full); encodes v1/v2/v3. -->
+        <attr name="acv_fill" format="float" />
+    </declare-styleable>
+
     <declare-styleable name="SwitchRowWidget">
         <attr name="android:icon" format="reference" />
         <attr name="android:text" format="string|reference" />
diff --git a/app/src/main/res/values/strings.xml b/app/src/main/res/values/strings.xml
index 64c71f4bf..16bb6b152 100644
--- a/app/src/main/res/values/strings.xml
+++ b/app/src/main/res/values/strings.xml
@@ -962,13 +962,11 @@
     <string name="hugepage_refill_failed">Failed to trigger acquire</string>
     <string name="hugepage_save_pool_size">Save</string>
     <string name="hugepage_proc_acquire">Acquire</string>
-    <string name="hugepage_proc_acquire_v1">v1</string>
-    <string name="hugepage_proc_acquire_v2">v2</string>
-    <string name="hugepage_proc_acquire_v3">v3</string>
     <string name="hugepage_proc_acquire_v1_desc">Acquire v1 (alloc_contig_pages scan)</string>
     <string name="hugepage_proc_acquire_v2_desc">Acquire v2 (migrate + system reclaim)</string>
     <string name="hugepage_proc_acquire_v3_desc">Acquire v3 (migrate + per-block evict to zram)</string>
     <string name="hugepage_acquire_run">Run</string>
+    <string name="hugepage_acquire_dont_ask">Don\'t ask again</string>
     <string name="hugepage_acquire_v1_explain">Uses alloc_contig_pages to collect huge pages</string>
     <string name="hugepage_acquire_v2_explain">Uses try_to_free_mem_cgroup_pages to push other apps into swap/zram\nthen alloc_contig_range to collect huge pages</string>
     <string name="hugepage_acquire_v3_explain">Uses folio_isolate_lru + reclaim_pages to precisely push pages into swap/zram\nthen alloc_contig_range to collect huge pages</string>

From 80e04c80bc58cf02afe864f5eb1823ebb8adf507 Mon Sep 17 00:00:00 2001
From: HuJK <gh@hujk.org>
Date: Tue, 7 Jul 2026 02:47:16 +0800
Subject: [PATCH 094/182] hugepage: show acquire_stop_reason in the
 acquire-done bubble

The gh_hugepage_reserve module now exports acquire_stop_reason in refill_stat
(why the last user-triggered acquire stopped). Thread it through Snapshot as a
pass-through display string (like state/totalServed) and append it to the
acquire-done Toast, so the user sees the reason in the bubble instead of having
to read dmesg. Kernel free text; appended raw (localization is a follow-up).

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
---
 .../droidvm/ui/hugepage/HugePageActivity.java         | 11 ++++++++---
 .../classfun/droidvm/ui/hugepage/HugePageModel.java   | 10 +++++++---
 2 files changed, 15 insertions(+), 6 deletions(-)

diff --git a/app/src/main/java/cn/classfun/droidvm/ui/hugepage/HugePageActivity.java b/app/src/main/java/cn/classfun/droidvm/ui/hugepage/HugePageActivity.java
index c859a6c1f..f562b72de 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/hugepage/HugePageActivity.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/hugepage/HugePageActivity.java
@@ -459,13 +459,18 @@ poolAvail, fmt("%s\n%s", getString(R.string.hugepage_bar_available), SizeUtils.f
         if (wasAcquiring && !acquiring) {
             long got = snap.free + snap.lent;
             long want = snap.targetIdeal;
-            Toast.makeText(this, got >= want
+            String msg = got >= want
                     ? getString(R.string.hugepage_proc_acquire_full,
                         SizeUtils.formatSize(want * PAGE_SIZE))
                     : getString(R.string.hugepage_proc_acquire_partial,
                         SizeUtils.formatSize(got * PAGE_SIZE),
-                        SizeUtils.formatSize(want * PAGE_SIZE)),
-                Toast.LENGTH_LONG).show();
+                        SizeUtils.formatSize(want * PAGE_SIZE));
+            // Append why the acquire stopped (kernel free text from refill_stat's
+            // acquire_stop_reason), so the user sees the reason in the bubble.
+            String reason = snap.acquireStopReason;
+            if (!reason.isEmpty() && !"-".equals(reason))
+                msg += "\n" + reason;
+            Toast.makeText(this, msg, Toast.LENGTH_LONG).show();
         }
         wasAcquiring = acquiring;
         if (mainAcquiring != acquiring || mainAcquireMode != mode) {
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/hugepage/HugePageModel.java b/app/src/main/java/cn/classfun/droidvm/ui/hugepage/HugePageModel.java
index f26d7e977..8d9a92e39 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/hugepage/HugePageModel.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/hugepage/HugePageModel.java
@@ -182,12 +182,14 @@ static final class Snapshot {
         @NonNull final String totalServed;
         @NonNull final String totalRefilled;
         @NonNull final String activeVms;
+        @NonNull final String acquireStopReason;   // why the last acquire stopped ("-" if unreported)
 
         private Snapshot(boolean installed, boolean loaded, boolean statsOk, boolean bootEnabled,
                          long targetIdeal, long built, long free, long lent, long deficit,
                          boolean acquiring, int acquireMode, boolean hasPoolWant,
                          boolean softDisabled, @NonNull String state, @NonNull String totalServed,
-                         @NonNull String totalRefilled, @NonNull String activeVms) {
+                         @NonNull String totalRefilled, @NonNull String activeVms,
+                         @NonNull String acquireStopReason) {
             this.installed = installed;
             this.loaded = loaded;
             this.statsOk = statsOk;
@@ -205,6 +207,7 @@ private Snapshot(boolean installed, boolean loaded, boolean statsOk, boolean boo
             this.totalServed = totalServed;
             this.totalRefilled = totalRefilled;
             this.activeVms = activeVms;
+            this.acquireStopReason = acquireStopReason;
         }
     }
 
@@ -223,7 +226,7 @@ Snapshot state() {
         boolean loaded = existsSticky(SYSFS_BASE);
         if (!loaded) {
             return new Snapshot(installed, false, false, bootEnabled,
-                0, 0, 0, 0, 0, false, -1, false, false, "-", "-", "-", "-");
+                0, 0, 0, 0, 0, false, -1, false, false, "-", "-", "-", "-", "-");
         }
         var s = parseProp(safeRead(pathJoin(SYSFS_PARAMS, "refill_stat")));
         boolean statsOk = !s.isEmpty();   // empty == the read failed transiently
@@ -242,7 +245,8 @@ Snapshot state() {
         return new Snapshot(installed, true, statsOk, bootEnabled,
             want, built, free, lent, deficit, acquiring, mode, hasWant, softDisabled,
             s.getOrDefault("state", "-"), s.getOrDefault("total_served", "-"),
-            s.getOrDefault("total_refilled", "-"), s.getOrDefault("active_vms", "-"));
+            s.getOrDefault("total_refilled", "-"), s.getOrDefault("active_vms", "-"),
+            s.getOrDefault("acquire_stop_reason", "-"));
     }
 
     /**

From f8021e1e067bc508c0c0f1f00b6c5b4b6554dce1 Mon Sep 17 00:00:00 2001
From: BigfootACA <bigfoot@classfun.cn>
Date: Fri, 3 Jul 2026 20:01:09 +0800
Subject: [PATCH 095/182] daemon: add SetAppConfig

Signed-off-by: BigfootACA <bigfoot@classfun.cn>
---
 .../daemon/ipc/basic/SetAppConfig.java        | 29 +++++++++++++++++++
 .../droidvm/daemon/server/ServerContext.java  |  2 ++
 .../droidvm/daemon/vm/VMBackendInstance.java  |  5 +++-
 .../droidvm/daemon/vm/VMInstance.java         |  2 +-
 .../daemon/vm/backend/BackendBase.java        |  6 +++-
 .../daemon/vm/backend/CrosvmBackend.java      |  8 +++--
 .../vm/backend/CrosvmBackendInstance.java     |  8 +++--
 .../daemon/vm/backend/QemuBackend.java        |  8 +++--
 .../vm/backend/QemuBackendInstance.java       |  8 +++--
 .../droidvm/lib/daemon/VMEventHandler.java    | 26 +++++++++++++++++
 .../main/settings/MainSettingsFragment.java   |  7 +++--
 11 files changed, 96 insertions(+), 13 deletions(-)
 create mode 100644 app/src/main/java/cn/classfun/droidvm/daemon/ipc/basic/SetAppConfig.java

diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/ipc/basic/SetAppConfig.java b/app/src/main/java/cn/classfun/droidvm/daemon/ipc/basic/SetAppConfig.java
new file mode 100644
index 000000000..33db76b3b
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/ipc/basic/SetAppConfig.java
@@ -0,0 +1,29 @@
+package cn.classfun.droidvm.daemon.ipc.basic;
+
+import androidx.annotation.NonNull;
+
+import com.google.auto.service.AutoService;
+
+import cn.classfun.droidvm.daemon.server.ClientRequest;
+import cn.classfun.droidvm.daemon.server.RequestHandler;
+import cn.classfun.droidvm.lib.store.base.DataItem;
+
+@AutoService(RequestHandler.class)
+public class SetAppConfig extends RequestHandler {
+    @NonNull
+    @Override
+    public String getName() {
+        return "set_app_config";
+    }
+
+    @Override
+    public void handle(@NonNull ClientRequest request) throws Exception {
+        var params = request.getParams();
+        if (!params.has("config"))
+            throw new RuntimeException("missing config");
+        var cfg = params.getJSONObject("config");
+        var data = DataItem.fromJson(cfg);
+        var ctx = request.getContext();
+        ctx.appConfig = data;
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/server/ServerContext.java b/app/src/main/java/cn/classfun/droidvm/daemon/server/ServerContext.java
index 204573912..043c2cb60 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/server/ServerContext.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/server/ServerContext.java
@@ -15,12 +15,14 @@
 import cn.classfun.droidvm.daemon.network.NetworkInstanceStore;
 import cn.classfun.droidvm.daemon.network.backend.DefaultRouterWatcher;
 import cn.classfun.droidvm.daemon.vm.VMInstanceStore;
+import cn.classfun.droidvm.lib.store.base.DataItem;
 
 public final class ServerContext {
     private static final String TAG = "ServerContext";
     private final VMInstanceStore vms = new VMInstanceStore(this);
     private final NetworkInstanceStore networks = new NetworkInstanceStore(this);
     private final DefaultRouterWatcher routerWatcher = new DefaultRouterWatcher(this);
+    public DataItem appConfig = DataItem.newObject();
 
     public ServerContext() {
         Log.i(TAG, "loading config files...");
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/vm/VMBackendInstance.java b/app/src/main/java/cn/classfun/droidvm/daemon/vm/VMBackendInstance.java
index 86d5ea32b..9b8464893 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/vm/VMBackendInstance.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/vm/VMBackendInstance.java
@@ -18,6 +18,7 @@
 import java.util.Map;
 
 import cn.classfun.droidvm.daemon.console.ConsoleStream;
+import cn.classfun.droidvm.daemon.server.ServerContext;
 import cn.classfun.droidvm.lib.natives.NativeProcess;
 import cn.classfun.droidvm.lib.store.vm.VMConfig;
 import cn.classfun.droidvm.lib.utils.FileUtils;
@@ -26,9 +27,11 @@ public abstract class VMBackendInstance {
     private static final String TAG = "VMBackendInstance";
     protected final Map<String, ConsoleStream> streams = new LinkedHashMap<>();
     protected final VMConfig config;
+    protected final ServerContext context;
     private boolean stracePrepared = false;
 
-    protected VMBackendInstance(@NonNull VMConfig config) {
+    protected VMBackendInstance(@NonNull ServerContext context, @NonNull VMConfig config) {
+        this.context = context;
         this.config = config;
     }
 
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/vm/VMInstance.java b/app/src/main/java/cn/classfun/droidvm/daemon/vm/VMInstance.java
index c69030ff5..9da40e025 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/vm/VMInstance.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/vm/VMInstance.java
@@ -84,7 +84,7 @@ public BackendBase getBackend() {
     @NonNull
     synchronized VMBackendInstance getBackendInstance() {
         if (this.backendInstance == null)
-            this.backendInstance = getBackend().create(this);
+            this.backendInstance = getBackend().create(store.context, this);
         return this.backendInstance;
     }
 
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/BackendBase.java b/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/BackendBase.java
index 23e30270b..41de65647 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/BackendBase.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/BackendBase.java
@@ -11,6 +11,7 @@
 import java.util.Map;
 import java.util.ServiceLoader;
 
+import cn.classfun.droidvm.daemon.server.ServerContext;
 import cn.classfun.droidvm.daemon.vm.VMBackendInstance;
 import cn.classfun.droidvm.lib.store.vm.VMConfig;
 
@@ -23,7 +24,10 @@ public abstract class BackendBase {
     public abstract String name();
 
     @NonNull
-    public abstract VMBackendInstance create(@NonNull VMConfig config);
+    public abstract VMBackendInstance create(
+        @NonNull ServerContext context,
+        @NonNull VMConfig config
+    );
 
     public static void loadAll() {
         if (!backends.isEmpty()) return;
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/CrosvmBackend.java b/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/CrosvmBackend.java
index 2444db096..37185f3c0 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/CrosvmBackend.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/CrosvmBackend.java
@@ -4,6 +4,7 @@
 
 import com.google.auto.service.AutoService;
 
+import cn.classfun.droidvm.daemon.server.ServerContext;
 import cn.classfun.droidvm.daemon.vm.VMBackendInstance;
 import cn.classfun.droidvm.lib.store.vm.VMConfig;
 
@@ -17,7 +18,10 @@ public String name() {
 
     @NonNull
     @Override
-    public VMBackendInstance create(@NonNull VMConfig config) {
-        return new CrosvmBackendInstance(config);
+    public VMBackendInstance create(
+        @NonNull ServerContext context,
+        @NonNull VMConfig config
+    ) {
+        return new CrosvmBackendInstance(context, config);
     }
 }
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/CrosvmBackendInstance.java b/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/CrosvmBackendInstance.java
index f83505f23..1e1ef05cd 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/CrosvmBackendInstance.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/CrosvmBackendInstance.java
@@ -28,6 +28,7 @@
 import cn.classfun.droidvm.daemon.console.FDPipeConsoleStream;
 import cn.classfun.droidvm.daemon.console.InputConsoleStream;
 import cn.classfun.droidvm.daemon.console.SimpleConsoleStream;
+import cn.classfun.droidvm.daemon.server.ServerContext;
 import cn.classfun.droidvm.daemon.vm.BootPlan;
 import cn.classfun.droidvm.daemon.vm.SerialPipe;
 import cn.classfun.droidvm.daemon.vm.VMBackendInstance;
@@ -60,8 +61,11 @@ public final class CrosvmBackendInstance extends VMBackendInstance {
     private final InputConsoleStream stderrStream;
     private final SimpleConsoleStream stdioStream;
 
-    public CrosvmBackendInstance(@NonNull VMConfig config) {
-        super(config);
+    public CrosvmBackendInstance(
+        @NonNull ServerContext context,
+        @NonNull VMConfig config
+    ) {
+        super(context, config);
         uartStream = new FDPipeConsoleStream(config, "uart", -1, -1);
         stdoutStream = new InputConsoleStream(config, "stdout", null);
         stderrStream = new InputConsoleStream(config, "stderr", null);
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/QemuBackend.java b/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/QemuBackend.java
index cf32288f0..6479786d8 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/QemuBackend.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/QemuBackend.java
@@ -4,6 +4,7 @@
 
 import com.google.auto.service.AutoService;
 
+import cn.classfun.droidvm.daemon.server.ServerContext;
 import cn.classfun.droidvm.daemon.vm.VMBackendInstance;
 import cn.classfun.droidvm.lib.store.vm.VMConfig;
 
@@ -17,7 +18,10 @@ public String name() {
 
     @NonNull
     @Override
-    public VMBackendInstance create(@NonNull VMConfig config) {
-        return new QemuBackendInstance(config);
+    public VMBackendInstance create(
+        @NonNull ServerContext context,
+        @NonNull VMConfig config
+    ) {
+        return new QemuBackendInstance(context, config);
     }
 }
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/QemuBackendInstance.java b/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/QemuBackendInstance.java
index 3897aa929..dcf322f8e 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/QemuBackendInstance.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/QemuBackendInstance.java
@@ -29,6 +29,7 @@
 import cn.classfun.droidvm.daemon.console.InputConsoleStream;
 import cn.classfun.droidvm.daemon.console.LocalSocketConsoleStream;
 import cn.classfun.droidvm.daemon.console.SimpleConsoleStream;
+import cn.classfun.droidvm.daemon.server.ServerContext;
 import cn.classfun.droidvm.daemon.vm.BootPlan;
 import cn.classfun.droidvm.daemon.vm.VMBackendInstance;
 import cn.classfun.droidvm.daemon.vm.VMStartResult;
@@ -56,8 +57,11 @@ public final class QemuBackendInstance extends VMBackendInstance {
     private final InputConsoleStream stderrStream;
     private final SimpleConsoleStream stdioStream;
 
-    public QemuBackendInstance(@NonNull VMConfig config) {
-        super(config);
+    public QemuBackendInstance(
+        @NonNull ServerContext context,
+        @NonNull VMConfig config
+    ) {
+        super(context, config);
         uartStream = new LocalSocketConsoleStream(config, "uart", null);
         stdoutStream = new InputConsoleStream(config, "stdout", null);
         stderrStream = new InputConsoleStream(config, "stderr", null);
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/daemon/VMEventHandler.java b/app/src/main/java/cn/classfun/droidvm/lib/daemon/VMEventHandler.java
index 26788ee84..da8923c46 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/daemon/VMEventHandler.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/daemon/VMEventHandler.java
@@ -1,5 +1,6 @@
 package cn.classfun.droidvm.lib.daemon;
 
+import static android.content.Context.MODE_PRIVATE;
 import static android.widget.Toast.LENGTH_LONG;
 import static android.widget.Toast.LENGTH_SHORT;
 import static cn.classfun.droidvm.lib.utils.FileUtils.calcHashForFile;
@@ -41,6 +42,7 @@
 import cn.classfun.droidvm.lib.store.vm.VMState;
 import cn.classfun.droidvm.lib.store.vm.VMStore;
 import cn.classfun.droidvm.lib.ui.UIContext;
+import cn.classfun.droidvm.lib.utils.ThreadUtils;
 import cn.classfun.droidvm.ui.SplashActivity;
 import cn.classfun.droidvm.ui.main.MainActivity;
 import cn.classfun.droidvm.ui.vm.console.VMConsoleActivity;
@@ -203,6 +205,7 @@ public void onDaemonConnected() {
         queueActivityTask(act -> Toast.makeText(
             act, R.string.daemon_connected, Toast.LENGTH_SHORT
         ).show());
+        queueActivityTask(VMEventHandler::sendAppConfig);
     }
 
     @Override
@@ -214,6 +217,29 @@ public void onDaemonDisconnected() {
         ).show());
     }
 
+    public static void sendAppConfig(Activity act) {
+        var req = new JSONObject();
+        try {
+            var pref = act.getSharedPreferences("droidvm_prefs", MODE_PRIVATE);
+            req.put("command", "set_app_config");
+            req.put("config", new JSONObject(pref.getAll()));
+        } catch (Exception e) {
+            Log.w(TAG, "Failed to prepare app config", e);
+        }
+        ThreadUtils.runOnPool(() -> {
+            try {
+                var conn = DaemonConnection.getInstance();
+                var resp = conn.request(req);
+                if (!resp.optBoolean("success", false)) {
+                    var msg = resp.optString("message", "unknown error");
+                    Log.w(TAG, fmt("set_app_config failed: %s", msg));
+                }
+            } catch (Exception e) {
+                Log.w(TAG, "Failed to send app config to daemon", e);
+            }
+        });
+    }
+
     private boolean isOutdatedDaemon(JSONObject resp) {
         try {
             var daemonHash = resp.optString("daemon_hash", "");
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/main/settings/MainSettingsFragment.java b/app/src/main/java/cn/classfun/droidvm/ui/main/settings/MainSettingsFragment.java
index 72f80ba7d..fe1b02ae2 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/main/settings/MainSettingsFragment.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/main/settings/MainSettingsFragment.java
@@ -45,6 +45,7 @@
 import cn.classfun.droidvm.lib.api.ApiManager;
 import cn.classfun.droidvm.lib.api.Privacy;
 import cn.classfun.droidvm.lib.daemon.DaemonHelper;
+import cn.classfun.droidvm.lib.daemon.VMEventHandler;
 import cn.classfun.droidvm.lib.data.Language;
 import cn.classfun.droidvm.lib.store.base.DataConfig;
 import cn.classfun.droidvm.lib.store.base.DataStore;
@@ -119,8 +120,10 @@ private void bindOnClick(@NonNull View view, Runnable action) {
     private void bindOnChecked(@NonNull SwitchRowWidget item, String key, boolean def) {
         var prefs = requireContext().getSharedPreferences(PREFS_NAME, 0);
         item.setChecked(prefs.getBoolean(key, def));
-        item.setOnCheckedChangeListener((btn, checked) ->
-            prefs.edit().putBoolean(key, checked).apply());
+        item.setOnCheckedChangeListener((btn, checked) -> {
+            prefs.edit().putBoolean(key, checked).apply();
+            VMEventHandler.sendAppConfig(requireActivity());
+        });
     }
 
     @Override

From 5944195bc285f2f187b3ac528b434f0e158f22f4 Mon Sep 17 00:00:00 2001
From: BigfootACA <bigfoot@classfun.cn>
Date: Fri, 3 Jul 2026 20:02:27 +0800
Subject: [PATCH 096/182] MainSettingsFragment: add direct access to external
 storage

Signed-off-by: BigfootACA <bigfoot@classfun.cn>
---
 .../classfun/droidvm/daemon/vm/VMBackendInstance.java  | 10 ++++++++++
 .../daemon/vm/backend/CrosvmBackendInstance.java       |  1 +
 .../droidvm/daemon/vm/backend/QemuBackendInstance.java |  1 +
 .../droidvm/ui/main/settings/MainSettingsFragment.java |  4 ++++
 app/src/main/res/drawable/ic_sd.xml                    |  9 +++++++++
 app/src/main/res/layout/fragment_main_settings.xml     |  8 ++++++++
 app/src/main/res/values-zh-rCN/strings.xml             |  2 ++
 app/src/main/res/values-zh-rTW/strings.xml             |  2 ++
 app/src/main/res/values/strings.xml                    |  2 ++
 9 files changed, 39 insertions(+)
 create mode 100644 app/src/main/res/drawable/ic_sd.xml

diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/vm/VMBackendInstance.java b/app/src/main/java/cn/classfun/droidvm/daemon/vm/VMBackendInstance.java
index 9b8464893..28f4b4ea9 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/vm/VMBackendInstance.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/vm/VMBackendInstance.java
@@ -6,6 +6,7 @@
 import static cn.classfun.droidvm.lib.utils.RunUtils.run;
 import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
 import static cn.classfun.droidvm.lib.utils.StringUtils.pathJoin;
+import static cn.classfun.droidvm.ui.main.settings.MainSettingsFragment.KEY_OPTIMIZE_SDCARD;
 
 import android.os.Build;
 import android.util.Log;
@@ -115,4 +116,13 @@ protected void prepareStraceArguments(@NonNull List<String> args) {
         args.add("-o");
         args.add(pathJoin(dir, "strace.log"));
     }
+
+    protected String patchOptimizedPath(@NonNull String path) {
+        var en = context.appConfig.optBoolean(KEY_OPTIMIZE_SDCARD, true);
+        var prefix = "/storage/emulated/";
+        var newPrefix = "/data/media/";
+        if (en && path.startsWith(prefix))
+            path = newPrefix + path.substring(prefix.length());
+        return path;
+    }
 }
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/CrosvmBackendInstance.java b/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/CrosvmBackendInstance.java
index 1e1ef05cd..f38b1320b 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/CrosvmBackendInstance.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/CrosvmBackendInstance.java
@@ -243,6 +243,7 @@ private void buildDiskCommand(@NonNull List<String> args) {
             var disk = iter.getValue();
             var path = disk.optString("path", "");
             if (path.isEmpty()) continue;
+            path = patchOptimizedPath(path);
             var readonly = disk.optBoolean("readonly", false);
             var bus = optEnum(disk, "bus", DiskBus.VIRTIO);
             var arg = new StringBuilder(path);
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/QemuBackendInstance.java b/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/QemuBackendInstance.java
index dcf322f8e..8cff0bcd5 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/QemuBackendInstance.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/QemuBackendInstance.java
@@ -245,6 +245,7 @@ private void buildDiskCommand(@NonNull List<String> args) {
             var disk = iter.getValue();
             var path = disk.optString("path", "");
             if (path.isEmpty()) continue;
+            path = patchOptimizedPath(path);
             var readonly = disk.optBoolean("readonly", false);
             var bus = optEnum(disk, "bus", DiskBus.VIRTIO);
             switch (bus) {
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/main/settings/MainSettingsFragment.java b/app/src/main/java/cn/classfun/droidvm/ui/main/settings/MainSettingsFragment.java
index fe1b02ae2..4639280e5 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/main/settings/MainSettingsFragment.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/main/settings/MainSettingsFragment.java
@@ -71,6 +71,7 @@ public final class MainSettingsFragment extends MainBaseFragment {
     public static final String KEY_VM_CLEAR_LOGS_BEFORE_START = "vm_clear_logs_before_start";
     public static final String KEY_VM_KEEP_COMPRESS_ON_OPTIMIZE = "vm_keep_compress_on_optimize";
     public static final String KEY_QEMU_IMG_CPU_AFFINITY = "qemu_img_cpu_affinity";
+    public static final String KEY_OPTIMIZE_SDCARD = "optimize_sdcard";
     public static final String KEY_AUTO_CHECK_UPDATE = "auto_check_update";
     private final Handler mainHandler = new Handler(Looper.getMainLooper());
     private final Runnable daemonStatusRefreshRunnable = this::periodRefreshDaemonStatus;
@@ -85,6 +86,7 @@ public final class MainSettingsFragment extends MainBaseFragment {
     private SwitchRowWidget itemVMAutoConsole;
     private SwitchRowWidget itemVMClearLogsBeforeStart;
     private SwitchRowWidget itemVMKeepCompressOnOptimize;
+    private SwitchRowWidget itemOptimizeSdcard;
     private TextRowWidget itemCpuAffinity;
     private TextRowWidget itemLicense;
     private SwitchRowWidget itemAutoCheckUpdate;
@@ -141,6 +143,7 @@ public void onViewCreated(@NonNull View view, @Nullable Bundle savedInstanceStat
         itemVMAutoConsole = view.findViewById(R.id.item_vm_auto_console);
         itemVMClearLogsBeforeStart = view.findViewById(R.id.item_vm_clear_logs_before_start);
         itemVMKeepCompressOnOptimize = view.findViewById(R.id.item_vm_keep_compress_on_optimize);
+        itemOptimizeSdcard = view.findViewById(R.id.item_optimize_sdcard);
         itemCpuAffinity = view.findViewById(R.id.item_cpu_affinity);
         itemLicense = view.findViewById(R.id.item_license);
         itemAutoCheckUpdate = view.findViewById(R.id.item_auto_check_update);
@@ -175,6 +178,7 @@ private void initSettings() {
         bindOnChecked(itemVMKeepCompressOnOptimize, KEY_VM_KEEP_COMPRESS_ON_OPTIMIZE, false);
         bindOnClick(itemCpuAffinity, this::showCpuAffinityDialog);
         refreshCpuAffinitySummary();
+        bindOnChecked(itemOptimizeSdcard, KEY_OPTIMIZE_SDCARD, true);
         bindOnChecked(itemAutoCheckUpdate, KEY_AUTO_CHECK_UPDATE, true);
         bindOnClick(itemCheckUpdate, this::checkUpdate);
         bindOnClick(itemPrivacy, this::showPrivacyPolicy);
diff --git a/app/src/main/res/drawable/ic_sd.xml b/app/src/main/res/drawable/ic_sd.xml
new file mode 100644
index 000000000..690586dbd
--- /dev/null
+++ b/app/src/main/res/drawable/ic_sd.xml
@@ -0,0 +1,9 @@
+<vector xmlns:android="http://schemas.android.com/apk/res/android"
+    android:width="24dp"
+    android:height="24dp"
+    android:viewportWidth="24"
+    android:viewportHeight="24">
+    <path
+        android:fillColor="?attr/colorOnSurface"
+        android:pathData="M18,8H16V4H18M15,8H13V4H15M12,8H10V4H12M18,2H10L4,8V20A2,2 0 0,0 6,22H18A2,2 0 0,0 20,20V4A2,2 0 0,0 18,2Z" />
+</vector>
diff --git a/app/src/main/res/layout/fragment_main_settings.xml b/app/src/main/res/layout/fragment_main_settings.xml
index 5deeeb484..ed546d586 100644
--- a/app/src/main/res/layout/fragment_main_settings.xml
+++ b/app/src/main/res/layout/fragment_main_settings.xml
@@ -71,6 +71,14 @@
                     android:subtitle="@string/settings_vm_keep_compress_on_optimize_summary"
                     android:text="@string/settings_vm_keep_compress_on_optimize_title" />
 
+                <cn.classfun.droidvm.ui.widgets.row.SwitchRowWidget
+                    android:id="@+id/item_optimize_sdcard"
+                    android:layout_width="match_parent"
+                    android:layout_height="wrap_content"
+                    android:icon="@drawable/ic_sd"
+                    android:subtitle="@string/settings_optimize_sdcard_summary"
+                    android:text="@string/settings_optimize_sdcard_title" />
+
                 <cn.classfun.droidvm.ui.widgets.row.TextRowWidget
                     android:id="@+id/item_cpu_affinity"
                     android:layout_width="match_parent"
diff --git a/app/src/main/res/values-zh-rCN/strings.xml b/app/src/main/res/values-zh-rCN/strings.xml
index 888341c99..05f70cafa 100644
--- a/app/src/main/res/values-zh-rCN/strings.xml
+++ b/app/src/main/res/values-zh-rCN/strings.xml
@@ -376,6 +376,8 @@
     <string name="settings_cpu_affinity_tier_little">小核</string>
     <string name="settings_cpu_affinity_tier_big">大核</string>
     <string name="settings_cpu_affinity_tier_prime">超大核</string>
+    <string name="settings_optimize_sdcard_title">直接访问外部存储</string>
+    <string name="settings_optimize_sdcard_summary">使用 /data/media 代替 /storage/emulated 以提升磁盘性能</string>
     <string name="settings_category_about">关于</string>
     <string name="settings_feedback_title">问题反馈</string>
     <string name="settings_feedback_summary">在 GitHub 上报告问题</string>
diff --git a/app/src/main/res/values-zh-rTW/strings.xml b/app/src/main/res/values-zh-rTW/strings.xml
index 152813e54..4733a634f 100644
--- a/app/src/main/res/values-zh-rTW/strings.xml
+++ b/app/src/main/res/values-zh-rTW/strings.xml
@@ -376,6 +376,8 @@
     <string name="settings_cpu_affinity_tier_little">小核</string>
     <string name="settings_cpu_affinity_tier_big">大核</string>
     <string name="settings_cpu_affinity_tier_prime">超大核</string>
+    <string name="settings_optimize_sdcard_title">直接存取外部存儲</string>
+    <string name="settings_optimize_sdcard_summary">使用 /data/media 取代 /storage/emulated 以提升磁碟效能</string>
     <string name="settings_category_about">關於</string>
     <string name="settings_feedback_title">問題反饋</string>
     <string name="settings_feedback_summary">在 GitHub 上報告問題</string>
diff --git a/app/src/main/res/values/strings.xml b/app/src/main/res/values/strings.xml
index 912740987..f87ab2185 100644
--- a/app/src/main/res/values/strings.xml
+++ b/app/src/main/res/values/strings.xml
@@ -378,6 +378,8 @@
     <string name="settings_cpu_affinity_tier_little">little</string>
     <string name="settings_cpu_affinity_tier_big">big</string>
     <string name="settings_cpu_affinity_tier_prime">prime</string>
+    <string name="settings_optimize_sdcard_title">Direct access to external storage</string>
+    <string name="settings_optimize_sdcard_summary">Use /data/media instead of /storage/emulated to improve disk performance</string>
     <string name="settings_category_about">About</string>
     <string name="settings_feedback_title">Feedback</string>
     <string name="settings_feedback_summary">Report issues on GitHub</string>

From a182a649859550f8219c438a6248096bd19f1354 Mon Sep 17 00:00:00 2001
From: BigfootACA <bigfoot@classfun.cn>
Date: Sat, 4 Jul 2026 16:41:29 +0800
Subject: [PATCH 097/182] LogsActivity: move logcat to daemon

Signed-off-by: BigfootACA <bigfoot@classfun.cn>
---
 .../cn/classfun/droidvm/daemon/Daemon.java    | 47 +++++++++--
 .../droidvm/ui/logs/LogsActivity.java         | 80 +++++++++++++------
 app/src/main/res/values-zh-rCN/strings.xml    |  2 +
 app/src/main/res/values-zh-rTW/strings.xml    |  2 +
 app/src/main/res/values/strings.xml           |  2 +
 5 files changed, 102 insertions(+), 31 deletions(-)

diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/Daemon.java b/app/src/main/java/cn/classfun/droidvm/daemon/Daemon.java
index 080d668dc..6db9c1229 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/Daemon.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/Daemon.java
@@ -1,15 +1,18 @@
 package cn.classfun.droidvm.daemon;
 
+import static android.os.Process.myPid;
 import static cn.classfun.droidvm.BuildConfig.APPLICATION_ID;
 import static cn.classfun.droidvm.lib.Constants.DATA_DIR;
 import static cn.classfun.droidvm.lib.daemon.DaemonHelper.getPidFile;
 import static cn.classfun.droidvm.lib.daemon.DaemonHelper.getPortFile;
 import static cn.classfun.droidvm.lib.daemon.DaemonHelper.getTokenFile;
+import static cn.classfun.droidvm.lib.utils.FileUtils.findExecute;
+import static cn.classfun.droidvm.lib.utils.FileUtils.writeFile;
 import static cn.classfun.droidvm.lib.utils.RunUtils.runList;
 import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
 import static cn.classfun.droidvm.lib.utils.StringUtils.pathJoin;
 
-import android.os.Process;
+import android.system.Os;
 import android.util.Log;
 
 import androidx.annotation.NonNull;
@@ -34,10 +37,12 @@
 
 public final class Daemon {
     public static final String TAG = "Daemon";
+    public static final String LOG_PATH = pathJoin(DATA_DIR, "cache", "daemon.log");
     private static final String RUN_DIR = pathJoin(DATA_DIR, "run");
     private static final String LOCK_FILE = pathJoin(RUN_DIR, "droidvmd.lock");
     private static final AtomicBoolean cleaned = new AtomicBoolean(false);
     public static String daemonHash = null;
+    private static Process logcatProcess = null;
 
     // Held for the whole process lifetime so the advisory lock stays taken; the
     // kernel drops it automatically when this process dies (including SIGKILL),
@@ -127,7 +132,7 @@ private static void writeLockOwner() {
         try {
             lockChannel.truncate(0);
             lockChannel.position(0);
-            lockChannel.write(ByteBuffer.wrap(String.valueOf(Process.myPid()).getBytes()));
+            lockChannel.write(ByteBuffer.wrap(String.valueOf(myPid()).getBytes()));
             lockChannel.force(false);
         } catch (IOException e) {
             Log.w(TAG, "Failed to write lock owner pid", e);
@@ -152,9 +157,9 @@ private static void writePidFile() {
             Log.w(TAG, fmt("Failed to create run directory: %s", runDir));
         var pidFile = new File(runDir, "droidvmd.pid");
         try (var writer = new FileWriter(pidFile)) {
-            writer.write(String.valueOf(Process.myPid()));
+            writer.write(String.valueOf(myPid()));
             writer.flush();
-            Log.i(TAG, fmt("PID file written: %s (pid=%d)", pidFile, Process.myPid()));
+            Log.i(TAG, fmt("PID file written: %s (pid=%d)", pidFile, myPid()));
         } catch (IOException e) {
             Log.e(TAG, fmt("Failed to write PID file: %s", pidFile), e);
         }
@@ -220,6 +225,35 @@ private static void setProcTitle() {
         }
     }
 
+    @SuppressWarnings("OctalInteger")
+    private static void startLogcat() {
+        try {
+            var builder = new ProcessBuilder();
+            var file = new File(LOG_PATH);
+            if (file.exists() && !file.delete())
+                Log.w(TAG, "failed to remove old log");
+            writeFile(file, "");
+            var uid = Server.getDroidVMUid();
+            Os.chmod(LOG_PATH, 0600);
+            Os.chown(LOG_PATH, uid, uid);
+            builder.command(
+                findExecute("logcat", "/system/bin/logcat"),
+                fmt("--pid=%d", myPid())
+            );
+            builder.redirectOutput(new File(LOG_PATH));
+            logcatProcess = builder.start();
+        } catch (Exception e) {
+            Log.w(TAG, "failed to start logcat", e);
+            logcatProcess = null;
+        }
+    }
+
+    private static void stopLogcat() {
+        if (logcatProcess == null) return;
+        logcatProcess.destroy();
+        logcatProcess = null;
+    }
+
     public static void main(String... args) {
         boolean force = Arrays.asList(args).contains("--force");
         System.out.print("Starting DroidVM Daemon...\n");
@@ -228,7 +262,8 @@ public static void main(String... args) {
         // broadcast the native-display binder to the UI. Must happen before server.run() blocks here.
         DaemonSystemContext.init();
         setProcTitle();
-        System.out.printf("Current pid: %d\n", Process.myPid());
+        startLogcat();
+        System.out.printf("Current pid: %d\n", myPid());
         Log.d(TAG, "DroidVM Daemon is starting...");
         if (!acquireLock(force)) {
             System.out.print("Another DroidVM Daemon is already running.\n");
@@ -250,8 +285,10 @@ public static void main(String... args) {
         Runtime.getRuntime().addShutdownHook(new Thread(() -> {
             server.stop();
             cleanup(server);
+            stopLogcat();
         }));
         server.run();
         cleanup(server);
+        stopLogcat();
     }
 }
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/logs/LogsActivity.java b/app/src/main/java/cn/classfun/droidvm/ui/logs/LogsActivity.java
index 206cd9b76..0292a8946 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/logs/LogsActivity.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/logs/LogsActivity.java
@@ -1,6 +1,7 @@
 package cn.classfun.droidvm.ui.logs;
 
-import static cn.classfun.droidvm.lib.utils.FileUtils.findExecute;
+import static java.nio.charset.StandardCharsets.UTF_8;
+import static cn.classfun.droidvm.daemon.Daemon.LOG_PATH;
 import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
 
 import android.net.Uri;
@@ -18,11 +19,13 @@
 import androidx.recyclerview.widget.RecyclerView;
 
 import com.google.android.material.appbar.MaterialToolbar;
+import com.google.android.material.dialog.MaterialAlertDialogBuilder;
 
-import java.io.BufferedReader;
 import java.io.BufferedWriter;
-import java.io.InputStreamReader;
+import java.io.ByteArrayOutputStream;
+import java.io.File;
 import java.io.OutputStreamWriter;
+import java.io.RandomAccessFile;
 import java.text.SimpleDateFormat;
 import java.util.ArrayList;
 import java.util.Date;
@@ -31,7 +34,6 @@
 import java.util.concurrent.atomic.AtomicBoolean;
 
 import cn.classfun.droidvm.R;
-import cn.classfun.droidvm.lib.daemon.DaemonHelper;
 import cn.classfun.droidvm.lib.utils.ShareUtils;
 
 public final class LogsActivity extends AppCompatActivity {
@@ -40,8 +42,9 @@ public final class LogsActivity extends AppCompatActivity {
 
     private RecyclerView recyclerView;
     private LogAdapter adapter;
-    private Process logcatProcess;
+    private RandomAccessFile logFile;
     private Thread readerThread;
+    private final ByteArrayOutputStream lineBuf = new ByteArrayOutputStream(8192);
     private volatile boolean autoScroll = true;
     private final List<String> pendingLines = new ArrayList<>();
     private final AtomicBoolean updated = new AtomicBoolean(false);
@@ -80,7 +83,13 @@ public void onScrolled(@NonNull RecyclerView rv, int dx, int dy) {
                 }
             }
         });
-        startLogcat();
+        if (new File(LOG_PATH).exists())
+            startLogcat();
+        else new MaterialAlertDialogBuilder(this)
+            .setTitle(R.string.logs_not_found_title)
+            .setMessage(R.string.logs_not_found_message)
+            .setPositiveButton(android.R.string.ok, null)
+            .show();
     }
 
     private boolean onMenuItemClick(@NonNull MenuItem item) {
@@ -157,13 +166,8 @@ private void startLogcat() {
         }
         updated.set(false);
         try {
-            var pid = DaemonHelper.readPid();
-            if (pid < 0) throw new RuntimeException("Daemon is not running");
-            var cmd = fmt("logcat --pid=%d", pid);
-            var shell = findExecute("su", "/system/bin/su");
-            var builder = new ProcessBuilder(shell, "-c", cmd);
-            builder.redirectErrorStream(true);
-            logcatProcess = builder.start();
+            logFile = new RandomAccessFile(LOG_PATH, "r");
+            logFile.seek(0);
         } catch (Exception e) {
             var lines = new ArrayList<String>();
             lines.add(e.toString());
@@ -171,27 +175,48 @@ private void startLogcat() {
             return;
         }
         running = true;
-        readerThread = new Thread(this::logcatThread, "LogcatReader");
+        lineBuf.reset();
+        readerThread = new Thread(this::logcatThread, "LogReader");
         readerThread.setDaemon(true);
         readerThread.start();
         uiHandler.postDelayed(flushRunnable, FLUSH_INTERVAL_MS);
     }
 
     private void logcatThread() {
-        try (
-            var input = new InputStreamReader(logcatProcess.getInputStream());
-            var reader = new BufferedReader(input, 16384)
-        ) {
-            String line;
-            while (running && (line = reader.readLine()) != null) {
-                synchronized (pendingLines) {
-                    pendingLines.add(line);
-                    updated.set(true);
+        var buf = new byte[8192];
+        try {
+            while (running) {
+                long len = logFile.length();
+                long pos = logFile.getFilePointer();
+                if (len < pos) {
+                    logFile.seek(0);
+                    pos = 0;
+                }
+                if (len > pos) {
+                    int rl = (int) Math.min(buf.length, len - pos);
+                    int n = logFile.read(buf, 0, rl);
+                    if (n > 0) {
+                        for (int i = 0; i < n; i++) {
+                            byte b = buf[i];
+                            if (b == '\n') {
+                                var line = lineBuf.toString(UTF_8);
+                                lineBuf.reset();
+                                synchronized (pendingLines) {
+                                    pendingLines.add(line);
+                                    updated.set(true);
+                                }
+                            } else if (b != '\r')
+                                lineBuf.write(b);
+                        }
+                        continue;
+                    }
                 }
                 while (running && suspend.get()) {
                     //noinspection BusyWait
                     Thread.sleep(FLUSH_INTERVAL_MS);
                 }
+                //noinspection BusyWait
+                Thread.sleep(FLUSH_INTERVAL_MS);
             }
         } catch (Exception ignored) {
         }
@@ -220,9 +245,12 @@ private void flushBuffer() {
     private void stopLogcat() {
         running = false;
         uiHandler.removeCallbacks(flushRunnable);
-        if (logcatProcess != null) {
-            logcatProcess.destroy();
-            logcatProcess = null;
+        if (logFile != null) {
+            try {
+                logFile.close();
+            } catch (Exception ignored) {
+            }
+            logFile = null;
         }
         if (readerThread != null) {
             readerThread.interrupt();
diff --git a/app/src/main/res/values-zh-rCN/strings.xml b/app/src/main/res/values-zh-rCN/strings.xml
index 05f70cafa..90fd075f8 100644
--- a/app/src/main/res/values-zh-rCN/strings.xml
+++ b/app/src/main/res/values-zh-rCN/strings.xml
@@ -890,6 +890,8 @@
     <string name="logs_share">分享</string>
     <string name="logs_share_title">分享日志</string>
     <string name="logs_share_failed">分享日志失败：%1$s</string>
+    <string name="logs_not_found_title">守护进程日志不可用</string>
+    <string name="logs_not_found_message">找不到守护进程的日志文件，守护进程是否正在运行？</string>
 
     <string name="privacy_step_title">隐私政策</string>
     <string name="privacy_step_desc">继续之前请阅读并同意隐私政策</string>
diff --git a/app/src/main/res/values-zh-rTW/strings.xml b/app/src/main/res/values-zh-rTW/strings.xml
index 4733a634f..cc5b40e81 100644
--- a/app/src/main/res/values-zh-rTW/strings.xml
+++ b/app/src/main/res/values-zh-rTW/strings.xml
@@ -890,6 +890,8 @@
     <string name="logs_share">分享</string>
     <string name="logs_share_title">分享日誌</string>
     <string name="logs_share_failed">分享日誌失敗：%1$s</string>
+    <string name="logs_not_found_title">守護程式日誌不可用</string>
+    <string name="logs_not_found_message">找不到守護程式的日誌文件，守護程式是否正在執行？</string>
 
     <string name="privacy_step_title">隱私政策</string>
     <string name="privacy_step_desc">繼續之前請閱讀並同意隱私政策</string>
diff --git a/app/src/main/res/values/strings.xml b/app/src/main/res/values/strings.xml
index f87ab2185..8a2f24f09 100644
--- a/app/src/main/res/values/strings.xml
+++ b/app/src/main/res/values/strings.xml
@@ -927,6 +927,8 @@
     <string name="logs_share">Share</string>
     <string name="logs_share_title">Share logs</string>
     <string name="logs_share_failed">Failed to share logs: %1$s</string>
+    <string name="logs_not_found_title">Daemon log unavailable</string>
+    <string name="logs_not_found_message">No daemon log file found, is daemon running?</string>
 
     <string name="privacy_step_title">Privacy Policy</string>
     <string name="privacy_step_desc">Please read and agree to the privacy policy before continuing</string>

From 71c8e435e4c9fea41042f85e06060cd60f0741d1 Mon Sep 17 00:00:00 2001
From: BigfootACA <bigfoot@classfun.cn>
Date: Sun, 5 Jul 2026 11:32:43 +0800
Subject: [PATCH 098/182] BaseCheckStepFragment: trigger check on resume

Signed-off-by: BigfootACA <bigfoot@classfun.cn>
---
 .../droidvm/ui/setup/base/BaseCheckStepFragment.java        | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/app/src/main/java/cn/classfun/droidvm/ui/setup/base/BaseCheckStepFragment.java b/app/src/main/java/cn/classfun/droidvm/ui/setup/base/BaseCheckStepFragment.java
index eb9c89104..cbd35647c 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/setup/base/BaseCheckStepFragment.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/setup/base/BaseCheckStepFragment.java
@@ -33,6 +33,12 @@ public void onViewCreated(@NonNull View view, @Nullable Bundle savedInstanceStat
         runCheck();
     }
 
+    @Override
+    public void onResume() {
+        super.onResume();
+        runCheck();
+    }
+
     protected abstract void runCheck();
 
     @SuppressWarnings("SameReturnValue")

From 98c45b19fb3b3d7eea48851022e1b87a89b94219 Mon Sep 17 00:00:00 2001
From: BigfootACA <bigfoot@classfun.cn>
Date: Sun, 5 Jul 2026 11:33:34 +0800
Subject: [PATCH 099/182] PickerButtonWidget: fix button in RTL layout

Signed-off-by: BigfootACA <bigfoot@classfun.cn>
---
 app/src/main/res/layout/widget_picker_button.xml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/app/src/main/res/layout/widget_picker_button.xml b/app/src/main/res/layout/widget_picker_button.xml
index 08098dfc7..9525a8844 100644
--- a/app/src/main/res/layout/widget_picker_button.xml
+++ b/app/src/main/res/layout/widget_picker_button.xml
@@ -11,6 +11,7 @@
         android:layout_width="wrap_content"
         android:layout_height="wrap_content"
         android:layout_centerInParent="true"
+        android:layout_alignParentStart="true"
         android:minWidth="64dp"
         tools:ignore="SpeakableTextPresentCheck"
         tools:visibility="visible" />

From fb7628d11ed9e2844836b8baf88cb7e3e2cc18db Mon Sep 17 00:00:00 2001
From: BigfootACA <bigfoot@classfun.cn>
Date: Sun, 5 Jul 2026 11:34:22 +0800
Subject: [PATCH 100/182] TabSwipeHelper: fix swipe in RTL layout

Signed-off-by: BigfootACA <bigfoot@classfun.cn>
---
 .../droidvm/lib/ui/TabSwipeHelper.java        | 66 +++++++++++++------
 1 file changed, 47 insertions(+), 19 deletions(-)

diff --git a/app/src/main/java/cn/classfun/droidvm/lib/ui/TabSwipeHelper.java b/app/src/main/java/cn/classfun/droidvm/lib/ui/TabSwipeHelper.java
index 9eb6632f2..ff415d81c 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/ui/TabSwipeHelper.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/ui/TabSwipeHelper.java
@@ -85,8 +85,10 @@ private boolean onMotionEventMove(
                     float dx = ev.getX() - touchStartX;
                     int pos = callback.getCurrentTabIndex();
                     int last = callback.getTabCount() - 1;
-                    isDragging = !((dx > 0 && pos == 0) ||
-                        (dx < 0 && pos == last));
+                    int prevSign = prevFingerSign();
+                    int nextSign = nextFingerSign();
+                    isDragging = !((pos == 0 && dx * prevSign > 0) ||
+                        (pos == last && dx * nextSign > 0));
                 }
                 if (isDragging) {
                     prepareDrag();
@@ -161,6 +163,19 @@ private int getWidth() {
         return activity.getWindow().getDecorView().getWidth();
     }
 
+    private boolean isRtl() {
+        return activity.getWindow().getDecorView().getLayoutDirection()
+            == View.LAYOUT_DIRECTION_RTL;
+    }
+
+    private int prevFingerSign() {
+        return isRtl() ? -1 : 1;
+    }
+
+    private int nextFingerSign() {
+        return isRtl() ? 1 : -1;
+    }
+
     private void prepareDrag() {
         int pos = callback.getCurrentTabIndex();
         int count = callback.getTabCount();
@@ -169,14 +184,16 @@ private void prepareDrag() {
         dragNextView = pos < count - 1 ? callback.getTabView(pos + 1) : null;
         int width = dragCurrentView.getWidth();
         if (width <= 0) width = getWidth();
+        int prevSign = prevFingerSign();
+        int nextSign = nextFingerSign();
         if (dragPrevView != null) {
             dragPrevView.animate().cancel();
-            dragPrevView.setTranslationX(-width);
+            dragPrevView.setTranslationX(-prevSign * width);
             dragPrevView.setVisibility(View.VISIBLE);
         }
         if (dragNextView != null) {
             dragNextView.animate().cancel();
-            dragNextView.setTranslationX(width);
+            dragNextView.setTranslationX(-nextSign * width);
             dragNextView.setVisibility(View.VISIBLE);
         }
     }
@@ -184,25 +201,32 @@ private void prepareDrag() {
     private void updateDrag(float dx) {
         if (dragCurrentView == null) return;
         int width = dragCurrentView.getWidth();
-        if (dragPrevView == null && dx > 0) dx = 0;
-        if (dragNextView == null && dx < 0) dx = 0;
+        int prevSign = prevFingerSign();
+        int nextSign = nextFingerSign();
+        if (dragPrevView == null && dx * prevSign > 0) dx = 0;
+        if (dragNextView == null && dx * nextSign > 0) dx = 0;
         dragCurrentView.setTranslationX(dx);
-        if (dragPrevView != null) dragPrevView.setTranslationX(dx - width);
-        if (dragNextView != null) dragNextView.setTranslationX(dx + width);
+        if (dragPrevView != null)
+            dragPrevView.setTranslationX(dx - prevSign * width);
+        if (dragNextView != null)
+            dragNextView.setTranslationX(dx - nextSign * width);
     }
 
     private void finishDrag(float dx, float velocityX) {
         if (dragCurrentView == null) return;
         int width = dragCurrentView.getWidth();
-        if (dragPrevView == null && dx > 0) dx = 0;
-        if (dragNextView == null && dx < 0) dx = 0;
+        int prevSign = prevFingerSign();
+        int nextSign = nextFingerSign();
+        if (dragPrevView == null && dx * prevSign > 0) dx = 0;
+        if (dragNextView == null && dx * nextSign > 0) dx = 0;
         boolean goNext = false, goPrev = false;
         if (Math.abs(velocityX) > SNAP_VELOCITY) {
-            if (velocityX > 0 && dragPrevView != null) goPrev = true;
-            else if (velocityX < 0 && dragNextView != null) goNext = true;
+            if (velocityX * prevSign > 0 && dragPrevView != null) goPrev = true;
+            else if (velocityX * nextSign > 0 && dragNextView != null)
+                goNext = true;
         } else if (Math.abs(dx) > width * SNAP_FRACTION) {
-            if (dx > 0 && dragPrevView != null) goPrev = true;
-            else if (dx < 0 && dragNextView != null) goNext = true;
+            if (dx * prevSign > 0 && dragPrevView != null) goPrev = true;
+            else if (dx * nextSign > 0 && dragNextView != null) goNext = true;
         }
         settling = true;
         int current = callback.getCurrentTabIndex();
@@ -217,13 +241,14 @@ private void settleDragTo(int targetIdx) {
         boolean toNext = targetIdx > current;
         View targetView = toNext ? dragNextView : dragPrevView;
         View otherView = toNext ? dragPrevView : dragNextView;
+        int sign = toNext ? nextFingerSign() : prevFingerSign();
         if (otherView != null) {
             otherView.animate().cancel();
             otherView.setVisibility(View.GONE);
             otherView.setTranslationX(0);
         }
         dragCurrentView.animate()
-            .translationX(toNext ? -width : width)
+            .translationX(sign * width)
             .setDuration(SETTLE_DURATION)
             .withEndAction(() -> {
                 dragCurrentView.setVisibility(View.GONE);
@@ -242,6 +267,8 @@ private void settleDragTo(int targetIdx) {
 
     private void settleBack() {
         int width = dragCurrentView.getWidth();
+        int prevSign = prevFingerSign();
+        int nextSign = nextFingerSign();
         dragCurrentView.animate()
             .translationX(0)
             .setDuration(SETTLE_DURATION)
@@ -249,7 +276,7 @@ private void settleBack() {
             .start();
         if (dragPrevView != null) {
             dragPrevView.animate()
-                .translationX(-width)
+                .translationX(-prevSign * width)
                 .setDuration(SETTLE_DURATION)
                 .withEndAction(() -> {
                     dragPrevView.setVisibility(View.GONE);
@@ -259,7 +286,7 @@ private void settleBack() {
         }
         if (dragNextView != null) {
             dragNextView.animate()
-                .translationX(width)
+                .translationX(-nextSign * width)
                 .setDuration(SETTLE_DURATION)
                 .withEndAction(() -> {
                     dragNextView.setVisibility(View.GONE);
@@ -334,6 +361,7 @@ private void doAnimateStep(
         View inView = callback.getTabView(inIdx);
         int width = outView.getWidth();
         if (width <= 0) width = getWidth();
+        int sign = direction > 0 ? nextFingerSign() : prevFingerSign();
         Runnable animateEndAction = () -> {
             outView.setVisibility(View.GONE);
             outView.setTranslationX(0);
@@ -347,11 +375,11 @@ private void doAnimateStep(
             }
         };
         outView.animate()
-            .translationX(-direction * width)
+            .translationX(sign * width)
             .setDuration(duration)
             .withEndAction(animateEndAction)
             .start();
-        inView.setTranslationX(direction * width);
+        inView.setTranslationX(-sign * width);
         inView.setVisibility(View.VISIBLE);
         inView.animate()
             .translationX(0)

From e3969924ce4cf11ab810ed2c1ab87d09e34014d9 Mon Sep 17 00:00:00 2001
From: BigfootACA <bigfoot@classfun.cn>
Date: Sun, 5 Jul 2026 11:37:44 +0800
Subject: [PATCH 101/182] StringUtils: resolveUriPath: try open target file to
 read path

Signed-off-by: BigfootACA <bigfoot@classfun.cn>
---
 .../droidvm/lib/utils/StringUtils.java        | 32 +++++++++++++++++++
 1 file changed, 32 insertions(+)

diff --git a/app/src/main/java/cn/classfun/droidvm/lib/utils/StringUtils.java b/app/src/main/java/cn/classfun/droidvm/lib/utils/StringUtils.java
index 3d1a4613e..3d49a8c9f 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/utils/StringUtils.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/utils/StringUtils.java
@@ -3,6 +3,7 @@
 import static java.nio.charset.StandardCharsets.UTF_8;
 import static java.util.Base64.getDecoder;
 import static java.util.Base64.getEncoder;
+import static java.util.Objects.requireNonNull;
 import static cn.classfun.droidvm.lib.utils.FileUtils.copyStream;
 import static cn.classfun.droidvm.lib.utils.FileUtils.externalPath;
 import static cn.classfun.droidvm.lib.utils.FileUtils.shellCheckExists;
@@ -10,6 +11,7 @@
 import android.content.Context;
 import android.net.Uri;
 import android.provider.DocumentsContract;
+import android.system.Os;
 import android.widget.EditText;
 
 import androidx.annotation.NonNull;
@@ -82,6 +84,26 @@ private static String parseTreePath(@Nullable String content, @Nullable String t
         return null;
     }
 
+    @Nullable
+    private static String tryResolvePathFromFd(
+        @NonNull Context ctx,
+        @NonNull Uri uri,
+        @NonNull String mode
+    ) throws Exception {
+        var resolver = ctx.getContentResolver();
+        try (var pfd = resolver.openFileDescriptor(uri, mode)) {
+            requireNonNull(pfd);
+            var fdp = fmt("/proc/self/fd/%d", pfd.getFd());
+            var path = Os.readlink(fdp);
+            if (
+                shellCheckExists(path) &&
+                path.startsWith("/") &&
+                !path.endsWith(" (deleted)")
+            ) return path;
+        }
+        return null;
+    }
+
     public static String resolveUriPath(Context ctx, Uri uri) {
         String part;
         try {
@@ -103,6 +125,16 @@ public static String resolveUriPath(Context ctx, Uri uri) {
         if ((part = parseTreePath(path, "/document/primary:")) != null) return part;
         if ((part = parseTreePath(path, "/external_files/")) != null) return part;
         if ((part = parseTreePath(path, "/tree/primary:")) != null) return part;
+        try {
+            var real = tryResolvePathFromFd(ctx, uri, "r");
+            if (real != null) return real;
+        } catch (Exception ignored) {
+        }
+        try {
+            var real = tryResolvePathFromFd(ctx, uri, "rw");
+            if (real != null) return real;
+        } catch (Exception ignored) {
+        }
         return path;
     }
 

From d3ee31b26d9273212ff1be248e83f2e0480552d0 Mon Sep 17 00:00:00 2001
From: BigfootACA <bigfoot@classfun.cn>
Date: Sun, 5 Jul 2026 11:39:42 +0800
Subject: [PATCH 102/182] JsonUtils: add listToJSONArray and mapToJSONObject

Signed-off-by: BigfootACA <bigfoot@classfun.cn>
---
 .../classfun/droidvm/lib/utils/JsonUtils.java | 29 +++++++++++++++++++
 1 file changed, 29 insertions(+)

diff --git a/app/src/main/java/cn/classfun/droidvm/lib/utils/JsonUtils.java b/app/src/main/java/cn/classfun/droidvm/lib/utils/JsonUtils.java
index 9d5ef9ccb..86d11638e 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/utils/JsonUtils.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/utils/JsonUtils.java
@@ -13,6 +13,8 @@
 import java.util.Locale;
 import java.util.Map;
 
+import cn.classfun.droidvm.lib.store.base.JSONSerialize;
+
 public final class JsonUtils {
     @NonNull
     @SuppressWarnings("unused")
@@ -277,6 +279,33 @@ public static <T, V> List<V> arrayToList(
         return arrayToList(obj.getJSONArray(key), cb);
     }
 
+    @NonNull
+    @SuppressWarnings("unused")
+    public static <T extends JSONSerialize> JSONArray listToJSONArray(
+        @NonNull List<T> list
+    ) throws JSONException {
+        var arr = new JSONArray();
+        for (var item : list)
+            arr.put(item.toJson());
+        return arr;
+    }
+
+    @NonNull
+    @SuppressWarnings("unused")
+    public static <T extends JSONSerialize> JSONObject mapToJSONObject(
+        @NonNull Map<String, T> map
+    ) throws JSONException {
+        var obj = new JSONObject();
+        for (var key : map.keySet()) {
+            var value = JSONObject.NULL;
+            var item = map.get(key);
+            if (item != null)
+                value = item.toJson();
+            obj.put(key, value);
+        }
+        return obj;
+    }
+
     public interface ObjectValueMapper<T, R> {
         @Nullable
         @SuppressWarnings({"RedundantThrows", "unused"})

From 37cc82ff740bde37940175e600106d1b97df24a9 Mon Sep 17 00:00:00 2001
From: BigfootACA <bigfoot@classfun.cn>
Date: Mon, 6 Jul 2026 23:59:40 +0800
Subject: [PATCH 103/182] LogHelper: fix event handle without vm_id

Signed-off-by: BigfootACA <bigfoot@classfun.cn>
---
 .../cn/classfun/droidvm/lib/diag/LogHelper.java    | 14 ++++++++------
 1 file changed, 8 insertions(+), 6 deletions(-)

diff --git a/app/src/main/java/cn/classfun/droidvm/lib/diag/LogHelper.java b/app/src/main/java/cn/classfun/droidvm/lib/diag/LogHelper.java
index 1f347e817..35c61338d 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/diag/LogHelper.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/diag/LogHelper.java
@@ -51,21 +51,23 @@ private LogContext(UUID vmId) {
 
     @Override
     public void onDaemonEvent(@NonNull JSONObject msg) {
-        var type = msg.optString("type", "");
+        var type = msg.optString("type");
         if (!type.equals("event")) return;
         var data = msg.optJSONObject("data");
         if (data == null) return;
-        var vmId = UUID.fromString(data.optString("vm_id", ""));
-        var vmName = data.optString("vm_name", "");
-        var event = data.optString("event", "");
+        var vmIdStr = data.optString("vm_id");
+        if (vmIdStr.isEmpty()) return;
+        var vmId = UUID.fromString(vmIdStr);
+        var vmName = data.optString("vm_name");
+        var event = data.optString("event");
         if (event.equals("exited")) {
             vmLogContexts.remove(vmId);
             return;
         }
         var logs = vmLogContexts.computeIfAbsent(vmId, k -> new LogContext(vmId));
         if (!event.equals("output")) return;
-        var text = URLDecoder.decode(data.optString("data", ""), StandardCharsets.UTF_8);
-        var stream = data.optString("stream", "");
+        var text = URLDecoder.decode(data.optString("data"), StandardCharsets.UTF_8);
+        var stream = data.optString("stream");
         if (stream.isEmpty()) return;
         var buff = logs.log.computeIfAbsent(stream, k -> new RingBuffer(4096));
         buff.adds(text.getBytes(StandardCharsets.UTF_8));

From 2d919f6cc8b12cae4db96a53b587742fcd456b46 Mon Sep 17 00:00:00 2001
From: BigfootACA <bigfoot@classfun.cn>
Date: Tue, 7 Jul 2026 00:00:15 +0800
Subject: [PATCH 104/182] DiskStore: allow non unique disk name

Signed-off-by: BigfootACA <bigfoot@classfun.cn>
---
 .../java/cn/classfun/droidvm/lib/store/base/DataStore.java   | 5 +++++
 .../java/cn/classfun/droidvm/lib/store/disk/DiskStore.java   | 5 +++++
 2 files changed, 10 insertions(+)

diff --git a/app/src/main/java/cn/classfun/droidvm/lib/store/base/DataStore.java b/app/src/main/java/cn/classfun/droidvm/lib/store/base/DataStore.java
index a752b13cc..87a1949a1 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/store/base/DataStore.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/store/base/DataStore.java
@@ -270,6 +270,7 @@ public final boolean isNameUnique(String name) {
     }
 
     public final boolean isNameUnique(String name, List<UUID> excludes) {
+        if (!shouldNameUnique()) return true;
         if (name == null) return false;
         for (var item : dataMap) {
             if (excludes != null && excludes.contains(item.getId()))
@@ -309,6 +310,10 @@ public final boolean equals(Object obj) {
         return dataMap.equals(other.dataMap);
     }
 
+    protected boolean shouldNameUnique() {
+        return true;
+    }
+
     @NonNull
     @SuppressWarnings("unused")
     protected abstract T create();
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/store/disk/DiskStore.java b/app/src/main/java/cn/classfun/droidvm/lib/store/disk/DiskStore.java
index 955798df1..1dce22b4b 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/store/disk/DiskStore.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/store/disk/DiskStore.java
@@ -32,6 +32,11 @@ public DiskStore(@NonNull Context context) {
         super(context);
     }
 
+    @Override
+    protected boolean shouldNameUnique() {
+        return false;
+    }
+
     @NonNull
     @Override
     protected DiskConfig create() {

From 998a133424e6a59c23d2a84115ea4570db020aa3 Mon Sep 17 00:00:00 2001
From: BigfootACA <bigfoot@classfun.cn>
Date: Tue, 7 Jul 2026 00:00:53 +0800
Subject: [PATCH 105/182] ShareUtils: refactor and add shareFile

Signed-off-by: BigfootACA <bigfoot@classfun.cn>
---
 .../droidvm/lib/utils/ShareUtils.java         | 62 +++++++++++++------
 app/src/main/res/xml/file_paths.xml           |  7 ++-
 2 files changed, 48 insertions(+), 21 deletions(-)

diff --git a/app/src/main/java/cn/classfun/droidvm/lib/utils/ShareUtils.java b/app/src/main/java/cn/classfun/droidvm/lib/utils/ShareUtils.java
index 66d28397b..ee824e39a 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/utils/ShareUtils.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/utils/ShareUtils.java
@@ -9,34 +9,30 @@
 import android.os.Handler;
 import android.os.Looper;
 import android.util.Log;
+import android.webkit.MimeTypeMap;
 
+import androidx.annotation.NonNull;
+import androidx.annotation.Nullable;
 import androidx.core.content.FileProvider;
 
 import java.io.File;
 import java.io.FileOutputStream;
 import java.nio.charset.StandardCharsets;
 
-/** Helpers for exporting in-app text to the system share sheet (ACTION_SEND). */
 public final class ShareUtils {
     private static final String TAG = "ShareUtils";
-    private static final String SHARE_DIR = "shared_logs";
+    private static final String SHARE_DIR = "shared";
     private static final Handler MAIN = new Handler(Looper.getMainLooper());
 
     private ShareUtils() {
     }
 
-    /**
-     * Write {@code content} to a temp file under the cache dir and launch the system
-     * share sheet with it as a {@code text/plain} attachment. File write runs off the
-     * main thread; the chooser is launched back on the main thread. {@code onError} is
-     * invoked on the main thread with a message when sharing fails.
-     */
     public static void shareTextAsFile(
-        Context context,
-        String filename,
-        String content,
-        String chooserTitle,
-        OnError onError
+        @NonNull Context context,
+        @NonNull String filename,
+        @NonNull String content,
+        @NonNull String chooserTitle,
+        @Nullable OnError onError
     ) {
         var appContext = context.getApplicationContext();
         runOnPool(() -> {
@@ -50,9 +46,7 @@ public static void shareTextAsFile(
                     os.write(content.getBytes(StandardCharsets.UTF_8));
                     os.flush();
                 }
-                var authority = fmt("%s.fileprovider", appContext.getPackageName());
-                var uri = FileProvider.getUriForFile(appContext, authority, file);
-                MAIN.post(() -> launchChooser(context, uri, chooserTitle, onError));
+                shareFile(context, file, null, chooserTitle, onError);
             } catch (Exception e) {
                 Log.e(TAG, "Failed to prepare shared file", e);
                 MAIN.post(() -> {
@@ -62,10 +56,41 @@ public static void shareTextAsFile(
         });
     }
 
-    private static void launchChooser(Context context, Uri uri, String title, OnError onError) {
+    public static void shareFile(
+        @NonNull Context context,
+        @NonNull File file,
+        @Nullable String mime,
+        @NonNull String chooserTitle,
+        @Nullable OnError onError
+    ) {
+        try {
+            var appContext = context.getApplicationContext();
+            var authority = fmt("%s.fileprovider", appContext.getPackageName());
+            var uri = FileProvider.getUriForFile(appContext, authority, file);
+            MAIN.post(() -> launchChooser(context, uri, chooserTitle, mime, onError));
+        } catch (Exception e) {
+            Log.e(TAG, "Failed to create share uri", e);
+            MAIN.post(() -> {
+                if (onError != null) onError.onError(e.getMessage());
+            });
+        }
+    }
+
+    public static void launchChooser(
+        @NonNull Context context,
+        @NonNull Uri uri,
+        @NonNull String title,
+        @Nullable String mime,
+        @Nullable OnError onError
+    ) {
+        if (mime == null) {
+            var ext = MimeTypeMap.getFileExtensionFromUrl(uri.toString());
+            if (ext != null) mime = MimeTypeMap.getSingleton().getMimeTypeFromExtension(ext);
+            if (mime == null) mime = "application/octet-stream";
+        }
         try {
             var send = new Intent(Intent.ACTION_SEND)
-                .setType("text/plain")
+                .setType(mime)
                 .putExtra(Intent.EXTRA_STREAM, uri)
                 .addFlags(Intent.FLAG_GRANT_READ_URI_PERMISSION);
             var chooser = Intent.createChooser(send, title);
@@ -77,7 +102,6 @@ private static void launchChooser(Context context, Uri uri, String title, OnErro
         }
     }
 
-    /** Drop previously exported files so the cache dir does not grow unbounded. */
     private static void pruneOldFiles(File dir) {
         var files = dir.listFiles();
         if (files == null) return;
diff --git a/app/src/main/res/xml/file_paths.xml b/app/src/main/res/xml/file_paths.xml
index fa1e5caaa..f55980838 100644
--- a/app/src/main/res/xml/file_paths.xml
+++ b/app/src/main/res/xml/file_paths.xml
@@ -2,6 +2,9 @@
 <paths>
     <!-- Temp files exported for sharing via FileProvider -->
     <cache-path
-        name="shared_logs"
-        path="shared_logs/" />
+        name="shared"
+        path="shared/" />
+    <external-path
+        name="external_files"
+        path="." />
 </paths>

From 2fa35c991f555e166a109609bfb4987526afc49a Mon Sep 17 00:00:00 2001
From: BigfootACA <bigfoot@classfun.cn>
Date: Tue, 7 Jul 2026 00:01:53 +0800
Subject: [PATCH 106/182] utils: add BinaryUtils

Signed-off-by: BigfootACA <bigfoot@classfun.cn>
---
 .../droidvm/lib/utils/BinaryUtils.java        | 109 ++++++++++++++++++
 1 file changed, 109 insertions(+)
 create mode 100644 app/src/main/java/cn/classfun/droidvm/lib/utils/BinaryUtils.java

diff --git a/app/src/main/java/cn/classfun/droidvm/lib/utils/BinaryUtils.java b/app/src/main/java/cn/classfun/droidvm/lib/utils/BinaryUtils.java
new file mode 100644
index 000000000..38a7c7d7f
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/lib/utils/BinaryUtils.java
@@ -0,0 +1,109 @@
+package cn.classfun.droidvm.lib.utils;
+
+import static java.nio.charset.StandardCharsets.UTF_8;
+import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
+
+import androidx.annotation.NonNull;
+
+import java.io.EOFException;
+import java.io.IOException;
+import java.io.InputStream;
+import java.io.RandomAccessFile;
+import java.nio.ByteBuffer;
+import java.nio.charset.CodingErrorAction;
+
+public class BinaryUtils {
+    private static final byte[] ZERO = new byte[64 * 1024];
+    private BinaryUtils() {
+
+    }
+
+    public static long alignUp(long value) {
+        return alignUp(value, 0x1000);
+    }
+
+    public static long alignUp(long value, long align) {
+        long mask = align - 1L;
+        return (value + mask) & ~mask;
+    }
+
+    public static long alignUpStrict(long value) {
+        return alignUpStrict(value, 0x1000);
+    }
+
+    public static long alignUpStrict(long value, long align) {
+        long aligned = alignUp(value);
+        return aligned == value ? value + align : aligned;
+    }
+
+    public static void writeZero(@NonNull RandomAccessFile raf, long count) throws IOException {
+        long rem = count;
+        while (rem > 0) {
+            int n = (int) Math.min(ZERO.length, rem);
+            raf.write(ZERO, 0, n);
+            rem -= n;
+        }
+    }
+
+    @NonNull
+    public static String decodeUtf8(@NonNull byte[] bytes) throws IOException {
+        var decoder = UTF_8.newDecoder()
+            .onMalformedInput(CodingErrorAction.REPORT)
+            .onUnmappableCharacter(CodingErrorAction.REPORT);
+        try {
+            return decoder.decode(ByteBuffer.wrap(bytes)).toString();
+        } catch (Exception e) {
+            throw new IOException("vmpkg manifest is not valid UTF-8", e);
+        }
+    }
+
+    public static void readZeroPadding(@NonNull InputStream in, long n) throws IOException {
+        var buf = new byte[64 * 1024];
+        long rem = n;
+        while (rem > 0) {
+            int toRead = (int) Math.min(buf.length, rem);
+            int read = in.read(buf, 0, toRead);
+            if (read < 0) throw new EOFException("unexpected end of vmpkg padding");
+            for (int i = 0; i < read; i++)
+                if (buf[i] != 0) throw new IOException("vmpkg padding is not zero-filled");
+            rem -= read;
+        }
+    }
+
+    public static int readSome(@NonNull InputStream in, @NonNull byte[] buf) throws IOException {
+        int n = 0;
+        while (n < buf.length) {
+            int r = in.read(buf, n, buf.length - n);
+            if (r < 0) break;
+            n += r;
+        }
+        return n;
+    }
+
+    public static void readFully(@NonNull InputStream in, @NonNull byte[] buf) throws IOException {
+        int n = readSome(in, buf);
+        if (n != buf.length) throw new EOFException("unexpected end of vmpkg");
+    }
+
+    public static int getUInt16LE(@NonNull byte[] buf, int off) {
+        return (buf[off] & 0xff) | ((buf[off + 1] & 0xff) << 8);
+    }
+
+    public static long getInt64LE(@NonNull byte[] buf, int off) {
+        long v = 0;
+        for (int i = 7; i >= 0; i--) v = (v << 8) | (buf[off + i] & 0xffL);
+        return v;
+    }
+
+    public static void putUInt16LE(@NonNull byte[] buf, int off, int value) throws IOException {
+        if (value < 0 || value > 0xffff)
+            throw new IOException(fmt("uint16 out of range: %d", value));
+        buf[off] = (byte) (value & 0xff);
+        buf[off + 1] = (byte) ((value >>> 8) & 0xff);
+    }
+
+    public static void putInt64LE(@NonNull byte[] buf, int off, long value) throws IOException {
+        if (value < 0) throw new IOException(fmt("uint64 out of range: %d", value));
+        for (int i = 0; i < 8; i++) buf[off + i] = (byte) ((value >>> (i * 8)) & 0xff);
+    }
+}

From f43bbcf1b07fb91f050cbb1d08f8653585051753 Mon Sep 17 00:00:00 2001
From: BigfootACA <bigfoot@classfun.cn>
Date: Tue, 7 Jul 2026 11:13:05 +0800
Subject: [PATCH 107/182] java: fix all deprecated api usage

Signed-off-by: BigfootACA <bigfoot@classfun.cn>
---
 .../droidvm/daemon/display/DaemonSystemContext.java         | 4 ++--
 .../droidvm/ui/main/settings/MainSettingsFragment.java      | 6 ++++--
 .../classfun/droidvm/ui/vm/console/VMConsoleActivity.java   | 3 +--
 .../nativedisplay/display/VMNativeDisplayActivity.java      | 4 +---
 .../droidvm/ui/vm/display/vnc/base/BaseVncActivity.java     | 3 +--
 .../cn/classfun/droidvm/ui/vm/edit/boot/VMEditBootTab.java  | 2 +-
 6 files changed, 10 insertions(+), 12 deletions(-)

diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/display/DaemonSystemContext.java b/app/src/main/java/cn/classfun/droidvm/daemon/display/DaemonSystemContext.java
index 3437a54aa..e5e4c1f07 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/display/DaemonSystemContext.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/display/DaemonSystemContext.java
@@ -33,9 +33,9 @@ private DaemonSystemContext() {
     public static synchronized void init() {
         if (context != null) return;
         try {
-            if (Looper.myLooper() == null) Looper.prepareMainLooper();
+            if (Looper.myLooper() == null) Looper.prepare();
         } catch (Throwable t) {
-            Log.w(TAG, fmt("prepareMainLooper: %s", t));
+            Log.w(TAG, fmt("prepare looper: %s", t));
         }
         try {
             Class<?> at = Class.forName("android.app.ActivityThread");
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/main/settings/MainSettingsFragment.java b/app/src/main/java/cn/classfun/droidvm/ui/main/settings/MainSettingsFragment.java
index 4639280e5..617628e24 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/main/settings/MainSettingsFragment.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/main/settings/MainSettingsFragment.java
@@ -509,8 +509,10 @@ private <T extends DataConfig> void loadStore(
         @NonNull JSONObject json
     ) throws Exception {
         var ctx = requireContext().getApplicationContext();
-        var oldStore = store.newInstance();
-        var newStore = store.newInstance();
+        var ctor = store.getDeclaredConstructor();
+        ctor.setAccessible(true);
+        var oldStore = ctor.newInstance();
+        var newStore = ctor.newInstance();
         oldStore.load(ctx);
         newStore.load(json);
         newStore.forEach((k, v) -> {
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/console/VMConsoleActivity.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/console/VMConsoleActivity.java
index b3c8099bf..12fcaba1a 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/console/VMConsoleActivity.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/console/VMConsoleActivity.java
@@ -2,7 +2,6 @@
 
 import static android.view.HapticFeedbackConstants.KEYBOARD_TAP;
 import static android.view.KeyEvent.*;
-import static android.view.inputmethod.InputMethodManager.SHOW_IMPLICIT;
 import static android.widget.Toast.LENGTH_SHORT;
 import static java.util.Objects.requireNonNull;
 import static cn.classfun.droidvm.lib.ui.MaterialMenu.setupToolbarMenu;
@@ -107,7 +106,7 @@ public void onSingleTapUp(MotionEvent e) {
             var imm = getSystemService(InputMethodManager.class);
             if (imm != null && terminalView != null) {
                 terminalView.requestFocus();
-                imm.showSoftInput(terminalView, SHOW_IMPLICIT);
+                imm.showSoftInput(terminalView, 0);
             }
         }
 
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/display/nativedisplay/display/VMNativeDisplayActivity.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/nativedisplay/display/VMNativeDisplayActivity.java
index 25b19cee7..12f0622f2 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/display/nativedisplay/display/VMNativeDisplayActivity.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/nativedisplay/display/VMNativeDisplayActivity.java
@@ -427,11 +427,9 @@ private void toggleSoftKeyboard() {
     // resort.
     private void tryShowKeyboard(@NonNull InputMethodManager imm, int attemptsLeft) {
         keyboardInput.requestFocus();
-        if (imm.showSoftInput(keyboardInput, InputMethodManager.SHOW_IMPLICIT)) return;
+        if (imm.showSoftInput(keyboardInput, 0)) return;
         if (attemptsLeft > 0) {
             mainHandler.postDelayed(() -> tryShowKeyboard(imm, attemptsLeft - 1), 60);
-        } else {
-            imm.toggleSoftInput(InputMethodManager.SHOW_FORCED, 0);
         }
     }
 
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/display/vnc/base/BaseVncActivity.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/vnc/base/BaseVncActivity.java
index 9fafe5eb7..e5447a5d7 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/display/vnc/base/BaseVncActivity.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/vnc/base/BaseVncActivity.java
@@ -5,7 +5,6 @@
 import static android.view.KeyEvent.*;
 import static android.view.View.GONE;
 import static android.view.View.VISIBLE;
-import static android.view.inputmethod.InputMethodManager.SHOW_IMPLICIT;
 import static org.yaml.snakeyaml.util.UriEncoder.encode;
 import static java.util.concurrent.Executors.newSingleThreadExecutor;
 import static java.util.concurrent.TimeUnit.SECONDS;
@@ -540,7 +539,7 @@ protected void toggleSoftKeyboard() {
         var imm = getSystemService(InputMethodManager.class);
         if (imm != null && ivDisplay != null) {
             ivDisplay.requestFocus();
-            imm.showSoftInput(ivDisplay, SHOW_IMPLICIT);
+            imm.showSoftInput(ivDisplay, 0);
         }
     }
 
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/boot/VMEditBootTab.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/boot/VMEditBootTab.java
index e1939c240..ace779d7b 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/boot/VMEditBootTab.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/boot/VMEditBootTab.java
@@ -454,7 +454,7 @@ private void redirectCmdlineEditToOverride(int caret) {
         etCmdlineOverride.setSelection(Math.max(0, Math.min(caret, etCmdlineOverride.length())));
         var imm = (InputMethodManager) parent.getSystemService(Context.INPUT_METHOD_SERVICE);
         if (imm != null)
-            imm.showSoftInput(etCmdlineOverride, InputMethodManager.SHOW_IMPLICIT);
+            imm.showSoftInput(etCmdlineOverride, 0);
     }
 
     private void updateDetectionCard() {

From aa1e0d656947d98bf9dfdb40ea7a7c74f3eddd85 Mon Sep 17 00:00:00 2001
From: BigfootACA <bigfoot@classfun.cn>
Date: Tue, 7 Jul 2026 11:55:12 +0800
Subject: [PATCH 108/182] AssetUtils: refactor libraries extract

Signed-off-by: BigfootACA <bigfoot@classfun.cn>
---
 app/build.gradle.kts                          | 17 ------------
 .../cn/classfun/droidvm/lib/Constants.java    |  9 -------
 .../droidvm/lib/daemon/DaemonHelper.java      |  8 +++++-
 .../droidvm/lib/utils/AssetUtils.java         | 27 ++++++++++++++++++-
 4 files changed, 33 insertions(+), 28 deletions(-)

diff --git a/app/build.gradle.kts b/app/build.gradle.kts
index 76309e640..bc2fe88a5 100644
--- a/app/build.gradle.kts
+++ b/app/build.gradle.kts
@@ -138,23 +138,6 @@ abstract class CopyNativeBinAssetsTask : DefaultTask() {
                 dest.parentFile.mkdirs()
                 src.copyTo(dest, overwrite = true)
             }
-        val libraries = setOf(
-            "libsimpledump.so",
-            "libunixhelper.so",
-            "libcompat_a13.so",
-            "libcompat_a14.so",
-            "libcompat_a15.so",
-            "libcompat_a16.so",
-            "libcompat_a17.so",
-        )
-        cmakeDir.walkTopDown()
-            .filter { it.name in libraries && it.isFile }
-            .forEach { src ->
-                val abi = src.parentFile.name
-                val dest = File(outDir, "lib/$abi/${src.name}")
-                dest.parentFile.mkdirs()
-                src.copyTo(dest, overwrite = true)
-            }
     }
 }
 
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/Constants.java b/app/src/main/java/cn/classfun/droidvm/lib/Constants.java
index 9256ea2c1..5ce2353db 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/Constants.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/Constants.java
@@ -23,15 +23,6 @@ public final class Constants {
     // third-party daemons (gvswitch/pbridge/bridgedhcp/netbox) and lbx now
     // arrive via the prebuilt tar.xz, extracted to DATA/bin/<name>.
     public static final String[] BINARIES_BUILT = {"droidvm", "daemon"};
-    public static final String[] LIBRARIES_BUILT = {
-        "libsimpledump.so",
-        "libunixhelper.so",
-        "libcompat_a13.so",
-        "libcompat_a14.so",
-        "libcompat_a15.so",
-        "libcompat_a16.so",
-        "libcompat_a17.so",
-    };
     /**
      * IFA_RT_PRIORITY magic that pbridge tags its ND/ARP-offload proxy
      * addresses with (its --offload-workaround-magic). Host-IP discovery
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/daemon/DaemonHelper.java b/app/src/main/java/cn/classfun/droidvm/lib/daemon/DaemonHelper.java
index 0ff2b882c..3668efab7 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/daemon/DaemonHelper.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/daemon/DaemonHelper.java
@@ -132,9 +132,15 @@ public boolean startDaemon(boolean force) {
         run("mkdir -p %s", runDir);
         // Best-effort ownership fix; chown may be denied on some contexts (e.g. Android).
         run("chown %d:%d %s || true", uid, uid, runDir);
+        var libPath = fmt(
+            "%s:%s",
+            ctx.getContext().getApplicationInfo().nativeLibraryDir,
+            pathJoin(DATA_DIR, "lib")
+        );
         var cmd = fmt(
-            "env CLASSPATH=%s %s %s / %s%s",
+            "env CLASSPATH=%s LD_LIBRARY_PATH=%s %s %s / %s%s",
             escapedString(zipPath),
+            escapedString(libPath),
             escapedString(getAssetBinaryPath("daemon")),
             escapedString(findExecute("app_process64")),
             escapedString(Daemon.class.getName()),
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/utils/AssetUtils.java b/app/src/main/java/cn/classfun/droidvm/lib/utils/AssetUtils.java
index 4b04513c0..9a6afaebf 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/utils/AssetUtils.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/utils/AssetUtils.java
@@ -20,6 +20,7 @@
 
 import java.io.BufferedInputStream;
 import java.io.File;
+import java.io.FileInputStream;
 import java.io.FileOutputStream;
 import java.io.IOException;
 import java.io.InputStream;
@@ -204,8 +205,32 @@ public static void extractBinaries(@NonNull Context context) {
         extractAsset(context, "bin", BINARIES_BUILT, false);
     }
 
+    @SuppressLint("SetWorldReadable")
     public static void extractLibraries(@NonNull Context context) {
-        extractAsset(context, "lib", LIBRARIES_BUILT, false);
+        var srcDir = new File(context.getApplicationInfo().nativeLibraryDir);
+        var srcFiles = srcDir.listFiles((dir, name) -> name.endsWith(".so"));
+        if (srcFiles == null || srcFiles.length == 0) {
+            Log.w(TAG, fmt("No installed native library in %s", srcDir));
+            return;
+        }
+        var dstDir = new File(context.getDataDir(), "lib");
+        if (!dstDir.exists() && !dstDir.mkdirs())
+            Log.w(TAG, fmt("Failed to create native library dir: %s", dstDir));
+        for (var src : srcFiles) {
+            var dst = new File(dstDir, src.getName());
+            try {
+                if (dst.exists() && !dst.delete())
+                    Log.w(TAG, fmt("Could not unlink old native library: %s", dst));
+                try (var in = new FileInputStream(src); var out = new FileOutputStream(dst)) {
+                    copyStream(in, out);
+                }
+                if (!dst.setReadable(true, false))
+                    Log.w(TAG, "setReadable failed");
+                Log.i(TAG, fmt("Extracted installed native library %s to %s", src, dst));
+            } catch (Exception e) {
+                Log.e(TAG, fmt("Failed to extract installed native library: %s", src), e);
+            }
+        }
     }
 
     public static boolean needsExtractPrebuilt(@NonNull Context context) {

From 4aa3efbbb2b17a38b51c76771f63a9106fe4b1f2 Mon Sep 17 00:00:00 2001
From: BigfootACA <bigfoot@classfun.cn>
Date: Tue, 7 Jul 2026 15:24:31 +0800
Subject: [PATCH 109/182] lib: add archive for tarball

Signed-off-by: BigfootACA <bigfoot@classfun.cn>
---
 app/build.gradle.kts                          |   2 +
 .../droidvm/lib/archive/Compression.java      |  90 +++++++++
 .../lib/archive/LimitedInputStream.java       |  63 ++++++
 .../lib/archive/OutputStreamLimiter.java      |  49 +++++
 .../archive/RandomAccessFileOutputStream.java |  26 +++
 .../droidvm/lib/archive/TarReader.java        | 145 ++++++++++++++
 .../droidvm/lib/archive/TarWriter.java        | 183 ++++++++++++++++++
 gradle/libs.versions.toml                     |   2 +
 8 files changed, 560 insertions(+)
 create mode 100644 app/src/main/java/cn/classfun/droidvm/lib/archive/Compression.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/lib/archive/LimitedInputStream.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/lib/archive/OutputStreamLimiter.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/lib/archive/RandomAccessFileOutputStream.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/lib/archive/TarReader.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/lib/archive/TarWriter.java

diff --git a/app/build.gradle.kts b/app/build.gradle.kts
index bc2fe88a5..aac83d6e7 100644
--- a/app/build.gradle.kts
+++ b/app/build.gradle.kts
@@ -337,6 +337,8 @@ dependencies {
     implementation(libs.okhttp3)
     implementation(libs.snakeyaml)
     implementation(libs.xz)
+    implementation(libs.zstd) { artifact { type = "aar" } }
+    testImplementation(libs.zstd)
     implementation(libs.termux.emulator)
     implementation(libs.termux.view)
     testImplementation(libs.junit)
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/archive/Compression.java b/app/src/main/java/cn/classfun/droidvm/lib/archive/Compression.java
new file mode 100644
index 000000000..059234a2c
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/lib/archive/Compression.java
@@ -0,0 +1,90 @@
+package cn.classfun.droidvm.lib.archive;
+
+import android.content.Context;
+
+import androidx.annotation.NonNull;
+import androidx.annotation.Nullable;
+import androidx.annotation.StringRes;
+
+import cn.classfun.droidvm.R;
+import cn.classfun.droidvm.lib.store.enums.StringEnum;
+
+public enum Compression implements StringEnum {
+    NONE(
+        /* ext     = */ "bin",
+        /* mime    = */ "application/octet-stream",
+        /* id      = */ "none",
+        /* type    = */ 0,
+        /* display = */ R.string.vmpkg_export_compression_none,
+        /* desc    = */ R.string.nullptr
+    ),
+    GZIP(
+        /* ext     = */ "gz",
+        /* mime    = */ "application/gzip",
+        /* id      = */ "gzip",
+        /* type    = */ 1,
+        /* display = */ R.string.vmpkg_export_compression_gzip,
+        /* desc    = */ R.string.vmpkg_export_compression_gzip_desc
+    ),
+    XZ(
+        /* ext     = */ "xz",
+        /* mime    = */ "application/x-xz",
+        /* id      = */ "xz",
+        /* type    = */ 2,
+        /* display = */ R.string.vmpkg_export_compression_xz,
+        /* desc    = */ R.string.vmpkg_export_compression_xz_desc
+    ),
+    ZSTD(
+        /* ext     = */ "zst",
+        /* mime    = */ "application/zstd",
+        /* id      = */ "zstd",
+        /* type    = */ 3,
+        /* display = */ R.string.vmpkg_export_compression_zstd,
+        /* desc    = */ R.string.vmpkg_export_compression_zstd_desc
+    );
+
+    @NonNull
+    public final String extSuffix;
+    @NonNull
+    public final String mime;
+    @NonNull
+    public final String id;
+    public final int type;
+    @StringRes
+    public final int display;
+    @StringRes
+    public final int desc;
+
+    Compression(
+        @NonNull String extSuffix,
+        @NonNull String mime,
+        @NonNull String id,
+        int type,
+        @StringRes int display,
+        @StringRes int desc
+    ) {
+        this.extSuffix = extSuffix;
+        this.mime = mime;
+        this.id = id;
+        this.type = type;
+        this.display = display;
+        this.desc = desc;
+    }
+
+    @Override
+    public String getString() {
+        return id;
+    }
+
+    @NonNull
+    @Override
+    public String getDisplayString(@NonNull Context ctx) {
+        return ctx.getString(display);
+    }
+
+    @Nullable
+    public static Compression fromType(int type) {
+        for (var c : values()) if (c.type == type) return c;
+        return null;
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/archive/LimitedInputStream.java b/app/src/main/java/cn/classfun/droidvm/lib/archive/LimitedInputStream.java
new file mode 100644
index 000000000..451ccfa0c
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/lib/archive/LimitedInputStream.java
@@ -0,0 +1,63 @@
+package cn.classfun.droidvm.lib.archive;
+
+import androidx.annotation.NonNull;
+
+import java.io.EOFException;
+import java.io.IOException;
+import java.io.InputStream;
+
+public final class LimitedInputStream extends InputStream {
+    private final InputStream in;
+    private long remaining;
+    private boolean closed = false;
+
+    public LimitedInputStream(@NonNull InputStream in, long size) {
+        this.in = in;
+        this.remaining = size;
+    }
+
+    @Override
+    public int read() throws IOException {
+        if (closed) return -1;
+        if (remaining <= 0) return -1;
+        int b = in.read();
+        if (b >= 0) remaining--;
+        return b;
+    }
+
+    @Override
+    public int read(byte[] b, int off, int len) throws IOException {
+        if (closed || remaining <= 0) return -1;
+        int toRead = (int) Math.min(len, remaining);
+        int n = in.read(b, off, toRead);
+        if (n > 0) remaining -= n;
+        return n;
+    }
+
+    @Override
+    public int read(byte[] b) throws IOException {
+        return read(b, 0, b.length);
+    }
+
+    @Override
+    public void close() {
+        closed = true;
+    }
+
+    public long getRemaining() {
+        return remaining;
+    }
+
+    public void drain() throws IOException {
+        while (remaining > 0) {
+            long r = in.skip(remaining);
+            if (r <= 0) {
+                if (in.read() < 0)
+                    throw new EOFException("unexpected end of tar entry");
+                remaining--;
+            } else {
+                remaining -= r;
+            }
+        }
+    }
+}
\ No newline at end of file
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/archive/OutputStreamLimiter.java b/app/src/main/java/cn/classfun/droidvm/lib/archive/OutputStreamLimiter.java
new file mode 100644
index 000000000..8abc2991d
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/lib/archive/OutputStreamLimiter.java
@@ -0,0 +1,49 @@
+package cn.classfun.droidvm.lib.archive;
+
+import androidx.annotation.NonNull;
+
+import java.io.IOException;
+import java.io.OutputStream;
+
+public final class OutputStreamLimiter extends OutputStream {
+    private final OutputStream out;
+    private long remaining;
+    private boolean closed = false;
+
+    public OutputStreamLimiter(@NonNull OutputStream out, long size) {
+        this.out = out;
+        this.remaining = size;
+    }
+
+    @Override
+    public void write(int b) throws IOException {
+        if (closed || remaining <= 0)
+            throw new IOException("entry overwrote its declared size");
+        out.write(b);
+        remaining--;
+    }
+
+    @Override
+    public void write(byte[] b, int off, int len) throws IOException {
+        if (closed)
+            throw new IOException("entry closed");
+        if (len > remaining)
+            throw new IOException("entry overwrote its declared size");
+        out.write(b, off, len);
+        remaining -= len;
+    }
+
+    @Override
+    public void write(byte[] b) throws IOException {
+        write(b, 0, b.length);
+    }
+
+    @Override
+    public void close() {
+        closed = true;
+    }
+
+    public long getRemaining() {
+        return remaining;
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/archive/RandomAccessFileOutputStream.java b/app/src/main/java/cn/classfun/droidvm/lib/archive/RandomAccessFileOutputStream.java
new file mode 100644
index 000000000..6d32422cf
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/lib/archive/RandomAccessFileOutputStream.java
@@ -0,0 +1,26 @@
+package cn.classfun.droidvm.lib.archive;
+
+import androidx.annotation.NonNull;
+
+import java.io.IOException;
+import java.io.OutputStream;
+import java.io.RandomAccessFile;
+
+public final class RandomAccessFileOutputStream extends OutputStream {
+    @NonNull
+    private final RandomAccessFile file;
+
+    public RandomAccessFileOutputStream(@NonNull RandomAccessFile file) {
+        this.file = file;
+    }
+
+    @Override
+    public void write(int b) throws IOException {
+        file.write(b);
+    }
+
+    @Override
+    public void write(@NonNull byte[] b, int off, int len) throws IOException {
+        file.write(b, off, len);
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/archive/TarReader.java b/app/src/main/java/cn/classfun/droidvm/lib/archive/TarReader.java
new file mode 100644
index 000000000..34f9b55e5
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/lib/archive/TarReader.java
@@ -0,0 +1,145 @@
+package cn.classfun.droidvm.lib.archive;
+
+import static java.nio.charset.StandardCharsets.UTF_8;
+
+import androidx.annotation.NonNull;
+
+import java.io.EOFException;
+import java.io.IOException;
+import java.io.InputStream;
+
+public final class TarReader implements AutoCloseable {
+    private static final int BLOCK = 512;
+    private final InputStream in;
+    private boolean closed = false;
+    private boolean eof = false;
+
+    public TarReader(@NonNull InputStream in) {
+        this.in = in;
+    }
+
+    public interface EntryHandler {
+        void handle(
+            @NonNull String name,
+            int mode,
+            long size,
+            @NonNull InputStream content
+        ) throws Exception;
+    }
+
+    public void forEach(@NonNull EntryHandler handler) throws Exception {
+        while (!eof) {
+            var hdr = readBlock();
+            if (isNullBlock(hdr)) {
+                eof = true;
+                return;
+            }
+            String name = cstr(hdr, 0, 100);
+            int type = hdr[156] & 0xff;
+            long size = parseOctal(hdr, 124, 12);
+            int mode = (int) parseOctal(hdr, 100, 8);
+            if (type == 'L') {
+                var nameBuf = new byte[(int) size];
+                readFully(nameBuf);
+                skipPad(size);
+                name = new String(nameBuf, UTF_8).trim();
+                hdr = readBlock();
+                if (isNullBlock(hdr)) {
+                    eof = true;
+                    return;
+                }
+                size = parseOctal(hdr, 124, 12);
+                mode = (int) parseOctal(hdr, 100, 8);
+                type = hdr[156] & 0xff;
+            }
+            if (type != '0' && type != 0) {
+                skipFully(size);
+                skipPad(size);
+                continue;
+            }
+            var limited = new LimitedInputStream(in, size);
+            handler.handle(name, mode, size, limited);
+            limited.drain();
+            skipPad(size);
+        }
+    }
+
+    private byte[] readBlock() throws IOException {
+        var buf = new byte[BLOCK];
+        int n = 0;
+        while (n < BLOCK) {
+            int r = in.read(buf, n, BLOCK - n);
+            if (r < 0) {
+                if (n == 0) {
+                    eof = true;
+                    return buf;
+                }
+                throw new EOFException("unexpected end of tar header");
+            }
+            n += r;
+        }
+        return buf;
+    }
+
+    private void readFully(@NonNull byte[] buf) throws IOException {
+        int n = 0;
+        while (n < buf.length) {
+            int r = in.read(buf, n, buf.length - n);
+            if (r < 0) throw new EOFException("unexpected end of tar entry");
+            n += r;
+        }
+    }
+
+    private void skipFully(long n) throws IOException {
+        long rem = n;
+        while (rem > 0) {
+            long r = in.skip(rem);
+            if (r <= 0) {
+                if (in.read() < 0)
+                    throw new EOFException("unexpected end of tar entry");
+                rem--;
+            } else {
+                rem -= r;
+            }
+        }
+    }
+
+    private void skipPad(long size) throws IOException {
+        int pad = (int) ((BLOCK - (size % BLOCK)) % BLOCK);
+        if (pad > 0) skipFully(pad);
+    }
+
+    private static boolean isNullBlock(@NonNull byte[] hdr) {
+        for (int i = 0; i < BLOCK; i++)
+            if (hdr[i] != 0)
+                return false;
+        return true;
+    }
+
+    @NonNull
+    private static String cstr(@NonNull byte[] hdr, int off, int len) {
+        var end = off;
+        while (end < off + len && hdr[end] != 0) end++;
+        if (end == off) return "";
+        return new String(hdr, off, end - off, UTF_8);
+    }
+
+    private static long parseOctal(@NonNull byte[] hdr, int off, int len) {
+        var s = cstr(hdr, off, len);
+        if (s.isEmpty()) return 0;
+        var trimmed = s.trim();
+        if (trimmed.isEmpty()) return 0;
+        try {
+            return Long.parseLong(trimmed, 8);
+        } catch (NumberFormatException e) {
+            return 0;
+        }
+    }
+
+    @Override
+    public void close() throws IOException {
+        if (closed) return;
+        closed = true;
+        in.close();
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/archive/TarWriter.java b/app/src/main/java/cn/classfun/droidvm/lib/archive/TarWriter.java
new file mode 100644
index 000000000..c47f01209
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/lib/archive/TarWriter.java
@@ -0,0 +1,183 @@
+package cn.classfun.droidvm.lib.archive;
+
+import static java.nio.charset.StandardCharsets.US_ASCII;
+import static java.nio.charset.StandardCharsets.UTF_8;
+
+import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
+
+import androidx.annotation.NonNull;
+import androidx.annotation.Nullable;
+
+import com.github.luben.zstd.ZstdInputStream;
+import com.github.luben.zstd.ZstdOutputStream;
+
+import org.tukaani.xz.LZMA2Options;
+import org.tukaani.xz.XZInputStream;
+import org.tukaani.xz.XZOutputStream;
+
+import java.io.IOException;
+import java.io.InputStream;
+import java.io.OutputStream;
+import java.util.zip.GZIPInputStream;
+import java.util.zip.GZIPOutputStream;
+
+public final class TarWriter implements AutoCloseable {
+    private static final int BLOCK = 512;
+    private final OutputStream out;
+    private boolean closed = false;
+
+    public TarWriter(@NonNull OutputStream out) {
+        this.out = out;
+    }
+
+    public void entry(
+        @NonNull String name,
+        byte[] content
+    ) throws IOException {
+        entry(name, content, 0, content.length);
+    }
+
+    public void entry(
+        @NonNull String name,
+        byte[] content,
+        int off,
+        int len
+    ) throws IOException {
+        entry(name, len, os -> os.write(content, off, len));
+    }
+
+    public interface ContentWriter {
+        void write(@NonNull OutputStream os) throws IOException;
+    }
+
+    @SuppressWarnings("OctalInteger")
+    public static final class TarMetadata {
+        public int mode = 0644;
+        public int uid = 0;
+        public int gid = 0;
+        public long mtime = System.currentTimeMillis() / 1000;
+    }
+
+    public void entry(
+        @NonNull String name,
+        long size,
+        @NonNull ContentWriter writer
+    ) throws IOException {
+        entry(name, size, null, writer);
+    }
+
+    public void entry(
+        @NonNull String name,
+        long size,
+        @Nullable TarMetadata metadata,
+        @NonNull ContentWriter writer
+    ) throws IOException {
+        if (closed) throw new IOException("TarWriter closed");
+        if (name.length() > 100) {
+            entry("./@LongLink", name.getBytes(UTF_8));
+            int slash = name.lastIndexOf('/');
+            if (slash >= 0 && slash < name.length() - 1)
+                name = name.substring(slash + 1);
+        }
+        writeHeader(name, size, '0', metadata);
+        long remaining;
+        try (var sink = new OutputStreamLimiter(out, size)) {
+            writer.write(sink);
+            remaining = sink.getRemaining();
+        }
+        if (remaining > 0) throw new IOException(fmt(
+            "entry %s: short write (%d of %d bytes)",
+            name, size - remaining, size
+        ));
+        int pad = (int) ((BLOCK - (size % BLOCK)) % BLOCK);
+        if (pad > 0) {
+            out.write(new byte[pad]);
+        }
+    }
+
+    private void writeHeader(
+        @NonNull String name,
+        long size,
+        char type,
+        @Nullable TarMetadata metadata
+    ) throws IOException {
+        var hdr = new byte[BLOCK];
+        var nameBytes = name.getBytes(UTF_8);
+        System.arraycopy(nameBytes, 0, hdr, 0, Math.min(nameBytes.length, 100));
+        if (metadata == null) metadata = new TarMetadata();
+        field(hdr, 100, 8, padOctal(metadata.mode, 7));
+        field(hdr, 108, 8, padOctal(metadata.uid, 7));
+        field(hdr, 116, 8, padOctal(metadata.gid, 7));
+        field(hdr, 124, 12, padOctal(size, 11));
+        field(hdr, 136, 12, padOctal(metadata.mtime, 11));
+        for (int i = 148; i < 156; i++) hdr[i] = ' ';
+        hdr[156] = (byte) type;
+        var magic = "ustar";
+        System.arraycopy(magic.getBytes(US_ASCII), 0, hdr, 257, 5);
+        hdr[262] = 0;
+        int sum = 0;
+        for (byte b : hdr) sum += b & 0xff;
+        field(hdr, 148, 8, Long.toOctalString(sum).concat(" "));
+        out.write(hdr);
+    }
+
+    private static void field(byte[] hdr, int off, int len, @NonNull String oct) {
+        var b = oct.getBytes(US_ASCII);
+        int n = Math.min(b.length, len);
+        System.arraycopy(b, 0, hdr, off, n);
+        for (int i = off + n; i < off + len; i++) hdr[i] = 0;
+    }
+
+    @NonNull
+    private static String padOctal(long value, int digits) {
+        var s = Long.toOctalString(value);
+        if (s.length() < digits)
+            s = "0".repeat(digits - s.length()).concat(s);
+        return s;
+    }
+
+    @Override
+    public void close() throws IOException {
+        if (closed) return;
+        closed = true;
+        out.write(new byte[BLOCK * 2]);
+    }
+
+    @NonNull
+    public static OutputStream wrapCompressionOutput(
+        @NonNull OutputStream out,
+        @NonNull Compression c
+    ) throws Exception {
+        switch (c) {
+            case NONE:
+                return out;
+            case GZIP:
+                return new GZIPOutputStream(out, 64 * 1024);
+            case XZ:
+                return new XZOutputStream(out, new LZMA2Options());
+            case ZSTD:
+                return new ZstdOutputStream(out, 3);
+            default:
+                throw new IllegalArgumentException(fmt("unknown compression: %s", c));
+        }
+    }
+
+    @NonNull
+    public static InputStream wrapCompressionInput(
+        @NonNull InputStream out,
+        @NonNull Compression c
+    ) throws Exception {
+        switch (c) {
+            case NONE:
+                return out;
+            case GZIP:
+                return new GZIPInputStream(out, 64 * 1024);
+            case XZ:
+                return new XZInputStream(out);
+            case ZSTD:
+                return new ZstdInputStream(out);
+            default:
+                throw new IllegalArgumentException(fmt("unknown compression: %s", c));
+        }
+    }
+}
diff --git a/gradle/libs.versions.toml b/gradle/libs.versions.toml
index 6f7857bd2..b93c2b823 100644
--- a/gradle/libs.versions.toml
+++ b/gradle/libs.versions.toml
@@ -14,6 +14,7 @@ okhttp3 = "5.3.2"
 snakeyaml = "2.6"
 termux = "v0.118.3"
 xz = "1.10"
+zstd = "1.5.7-11"
 
 [libraries]
 activity = { group = "androidx.activity", name = "activity", version.ref = "activity" }
@@ -32,6 +33,7 @@ material = { group = "com.google.android.material", name = "material", version.r
 okhttp3 = { group = "com.squareup.okhttp3", name = "okhttp", version.ref = "okhttp3" }
 snakeyaml = { group = "org.yaml", name = "snakeyaml", version.ref = "snakeyaml" }
 xz = { group = "org.tukaani", name = "xz", version.ref = "xz" }
+zstd = { group = "com.github.luben", name = "zstd-jni", version.ref = "zstd" }
 #noinspection Aligned16KB
 termux-emulator = { group = "com.github.termux.termux-app", name = "terminal-emulator", version.ref = "termux" }
 termux-view = { group = "com.github.termux.termux-app", name = "terminal-view", version.ref = "termux" }

From d6245c6f98138edc2014bcd2e59c3a1161086375 Mon Sep 17 00:00:00 2001
From: BigfootACA <bigfoot@classfun.cn>
Date: Tue, 7 Jul 2026 15:25:05 +0800
Subject: [PATCH 110/182] AssetUtils: extractTarXz: refactor use TarReader

Signed-off-by: BigfootACA <bigfoot@classfun.cn>
---
 .../droidvm/lib/utils/AssetUtils.java         | 118 +++---------------
 1 file changed, 15 insertions(+), 103 deletions(-)

diff --git a/app/src/main/java/cn/classfun/droidvm/lib/utils/AssetUtils.java b/app/src/main/java/cn/classfun/droidvm/lib/utils/AssetUtils.java
index 9a6afaebf..6ca1f30f1 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/utils/AssetUtils.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/utils/AssetUtils.java
@@ -24,9 +24,9 @@
 import java.io.FileOutputStream;
 import java.io.IOException;
 import java.io.InputStream;
-import java.nio.charset.StandardCharsets;
 import java.util.ArrayList;
 
+import cn.classfun.droidvm.lib.archive.TarReader;
 import cn.classfun.droidvm.lib.crypt.HashFile;
 
 public final class AssetUtils {
@@ -326,120 +326,32 @@ public static void extractPrebuilt(
         }
     }
 
-    // ---- minimal tar.xz extraction (USTAR; no PAX/GNU records, no symlinks) ----
-    // The packer (auto-build.py) forces USTAR_FORMAT over a short-path,
-    // symlink-free tree, so this reader stays small; corruption is still caught
-    // by the per-file sha256 manifest check in needsExtractPrebuilt().
-
     @SuppressLint("SetWorldReadable")
-    @SuppressWarnings("ResultOfMethodCallIgnored")
+    @SuppressWarnings({"ResultOfMethodCallIgnored", "OctalInteger"})
     private static void extractTarXz(@NonNull InputStream rawIn, @NonNull File destRoot)
         throws IOException {
-        try (var xz = new XZInputStream(new BufferedInputStream(rawIn))) {
-            var header = new byte[512];
-            while (readBlock(xz, header)) {
-                if (isZeroBlock(header)) break;
-                var name = cString(header, 0, 100);
-                var prefix = cString(header, 345, 155);
-                var path = prefix.isEmpty() ? name : pathJoin(prefix, name);
-                var size = parseOctal(header, 124, 12);
-                var mode = (int) parseOctal(header, 100, 8);
-                var type = (char) (header[156] & 0xff);
-                var outFile = new File(destRoot, path);
-                if (type == '5') {                       // directory
-                    if (!outFile.isDirectory() && !outFile.mkdirs())
-                        throw new IOException(fmt("Failed to mkdir %s", outFile));
-                    continue;
-                }
-                if (type != '0' && type != '\0') {       // unexpected (symlink/etc.)
-                    Log.w(TAG, fmt("Skipping unsupported tar entry %s (type %c)", path, type));
-                    skip(xz, size + padding(size));
-                    continue;
-                }
+        try (
+            var xz = new XZInputStream(new BufferedInputStream(rawIn));
+            var tar = new TarReader(xz)
+        ) {
+            tar.forEach((name, mode, size, content) -> {
+                var outFile = new File(destRoot, name);
                 var parent = outFile.getParentFile();
                 if (parent != null && !parent.isDirectory() && !parent.mkdirs())
                     throw new IOException(fmt("Failed to mkdir %s", parent));
-                // Unlink any existing file first. Opening it in place would fail
-                // with ETXTBSY if it's a currently-running executable (e.g. the
-                // gvswitch daemon); unlinking is safe -- a running process keeps
-                // the old inode while the name is rebound to the new file.
                 if (outFile.exists() && !outFile.delete())
                     Log.w(TAG, fmt("Could not unlink existing %s before extract", outFile));
                 try (var os = new FileOutputStream(outFile)) {
-                    copyN(xz, os, size);
+                    copyStream(content, os);
                 }
-                skip(xz, padding(size));
                 outFile.setReadable(true, false);
-                //noinspection OctalInteger
-                if ((mode & 0111) != 0 || path.startsWith("bin/") || path.startsWith("usr/bin/"))
+                if ((mode & 0111) != 0 || name.startsWith("bin/") || name.startsWith("usr/bin/"))
                     outFile.setExecutable(true, false);
-            }
-        }
-    }
-
-    private static long padding(long size) {
-        var rem = size % 512;
-        return rem == 0 ? 0 : 512 - rem;
-    }
-
-    /** Read exactly one 512-byte block; false on a clean EOF between blocks. */
-    private static boolean readBlock(@NonNull InputStream in, @NonNull byte[] buf)
-        throws IOException {
-        var off = 0;
-        while (off < buf.length) {
-            var n = in.read(buf, off, buf.length - off);
-            if (n < 0) {
-                if (off == 0) return false;
-                throw new IOException("Truncated tar stream");
-            }
-            off += n;
-        }
-        return true;
-    }
-
-    private static boolean isZeroBlock(@NonNull byte[] buf) {
-        for (var b : buf) if (b != 0) return false;
-        return true;
-    }
-
-    private static String cString(@NonNull byte[] buf, int off, int len) {
-        var end = off;
-        var max = off + len;
-        while (end < max && buf[end] != 0) end++;
-        return new String(buf, off, end - off, StandardCharsets.UTF_8);
-    }
-
-    private static long parseOctal(@NonNull byte[] buf, int off, int len) {
-        long value = 0;
-        var i = off;
-        var max = off + len;
-        while (i < max && (buf[i] == ' ' || buf[i] == 0)) i++;
-        while (i < max && buf[i] >= '0' && buf[i] <= '7') {
-            value = (value << 3) + (buf[i] - '0');
-            i++;
-        }
-        return value;
-    }
-
-    private static void copyN(@NonNull InputStream in, @NonNull FileOutputStream out, long n)
-        throws IOException {
-        var buf = new byte[8192];
-        var remaining = n;
-        while (remaining > 0) {
-            var got = in.read(buf, 0, (int) Math.min(buf.length, remaining));
-            if (got < 0) throw new IOException("Truncated tar entry");
-            out.write(buf, 0, got);
-            remaining -= got;
-        }
-    }
-
-    private static void skip(@NonNull InputStream in, long n) throws IOException {
-        var remaining = n;
-        var buf = new byte[8192];
-        while (remaining > 0) {
-            var got = in.read(buf, 0, (int) Math.min(buf.length, remaining));
-            if (got < 0) throw new IOException("Truncated tar stream");
-            remaining -= got;
+            });
+        } catch (IOException e) {
+            throw e;
+        } catch (Exception e) {
+            throw new IOException("Failed to extract tar.xz", e);
         }
     }
 

From 65753b0a1b372cc5c104f8613f6befebdb6f065f Mon Sep 17 00:00:00 2001
From: BigfootACA <bigfoot@classfun.cn>
Date: Tue, 7 Jul 2026 15:26:38 +0800
Subject: [PATCH 111/182] daemon: add command vm_get

Signed-off-by: BigfootACA <bigfoot@classfun.cn>
---
 .../droidvm/daemon/ipc/vm/GetHandler.java     | 34 +++++++++++++++++++
 1 file changed, 34 insertions(+)
 create mode 100644 app/src/main/java/cn/classfun/droidvm/daemon/ipc/vm/GetHandler.java

diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/ipc/vm/GetHandler.java b/app/src/main/java/cn/classfun/droidvm/daemon/ipc/vm/GetHandler.java
new file mode 100644
index 000000000..44be4febf
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/ipc/vm/GetHandler.java
@@ -0,0 +1,34 @@
+package cn.classfun.droidvm.daemon.ipc.vm;
+
+import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
+
+import androidx.annotation.NonNull;
+
+import com.google.auto.service.AutoService;
+
+import cn.classfun.droidvm.daemon.server.ClientRequest;
+import cn.classfun.droidvm.daemon.server.RequestException;
+import cn.classfun.droidvm.daemon.server.RequestHandler;
+
+@AutoService(RequestHandler.class)
+public final class GetHandler extends RequestHandler {
+    @NonNull
+    @Override
+    public String getName() {
+        return "vm_get";
+    }
+
+    @Override
+    public void handle(@NonNull ClientRequest request) throws Exception {
+        var params = request.getParams();
+        var vmId = params.optString("vm_id", "");
+        if (vmId.isEmpty())
+            throw new RequestException("missing vm_id");
+        var vms = request.getContext().getVMs();
+        var inst = vms.findById(vmId);
+        if (inst == null)
+            throw new RequestException(fmt("VM not found: %s", vmId));
+        var res = request.res();
+        res.put("data", inst.toJson());
+    }
+}

From de60fd5a068623e344bba1b35828fa169adcaaa5 Mon Sep 17 00:00:00 2001
From: BigfootACA <bigfoot@classfun.cn>
Date: Tue, 7 Jul 2026 15:35:26 +0800
Subject: [PATCH 112/182] lib: add pkg for vm package

Signed-off-by: BigfootACA <bigfoot@classfun.cn>
---
 .../cn/classfun/droidvm/lib/pkg/BootFile.java |  61 +++++++++++
 .../classfun/droidvm/lib/pkg/DiskEntry.java   |  75 +++++++++++++
 .../cn/classfun/droidvm/lib/pkg/DiskRef.java  |  54 ++++++++++
 .../droidvm/lib/pkg/PackageConstants.java     |  17 +++
 .../droidvm/lib/pkg/PackageHeader.java        |  69 ++++++++++++
 .../droidvm/lib/pkg/PackageInput.java         |  74 +++++++++++++
 .../droidvm/lib/pkg/PackageManifest.java      | 100 ++++++++++++++++++
 .../cn/classfun/droidvm/lib/pkg/Phase.java    |   9 ++
 8 files changed, 459 insertions(+)
 create mode 100644 app/src/main/java/cn/classfun/droidvm/lib/pkg/BootFile.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/lib/pkg/DiskEntry.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/lib/pkg/DiskRef.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/lib/pkg/PackageConstants.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/lib/pkg/PackageHeader.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/lib/pkg/PackageInput.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/lib/pkg/PackageManifest.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/lib/pkg/Phase.java

diff --git a/app/src/main/java/cn/classfun/droidvm/lib/pkg/BootFile.java b/app/src/main/java/cn/classfun/droidvm/lib/pkg/BootFile.java
new file mode 100644
index 000000000..70ece34ec
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/lib/pkg/BootFile.java
@@ -0,0 +1,61 @@
+package cn.classfun.droidvm.lib.pkg;
+
+import androidx.annotation.NonNull;
+
+import org.json.JSONException;
+import org.json.JSONObject;
+
+import java.io.File;
+
+import cn.classfun.droidvm.lib.store.base.JSONSerialize;
+
+public final class BootFile implements JSONSerialize {
+    public String archivePath = null;
+    public String name = null;
+    public String path = null;
+    public String kind = null;
+    public long size = 0;
+    public File target = null;
+
+    public BootFile() {
+    }
+
+    public BootFile(@NonNull JSONObject o) {
+        archivePath = o.optString("archive_path");
+        name = o.optString("name");
+        path = o.optString("path");
+        kind = o.optString("kind");
+        size = o.optLong("size");
+    }
+
+    @NonNull
+    @Override
+    public JSONObject toJson() throws JSONException {
+        var b = new JSONObject();
+        b.put("archive_path", archivePath);
+        b.put("name", name);
+        b.put("path", path);
+        b.put("kind", kind);
+        b.put("size", size);
+        return b;
+    }
+
+    public boolean isExists() {
+        var f = new File(path);
+        return f.exists() && f.isFile();
+    }
+
+    public void build() {
+        var f = new File(path);
+        name = f.getName();
+        archivePath = name;
+        size = f.length();
+    }
+
+    @NonNull
+    public static BootFile from(Object o) throws JSONException {
+        if (o instanceof JSONObject)
+            return new BootFile((JSONObject) o);
+        throw new JSONException("object is not json");
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/pkg/DiskEntry.java b/app/src/main/java/cn/classfun/droidvm/lib/pkg/DiskEntry.java
new file mode 100644
index 000000000..0017d0e6c
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/lib/pkg/DiskEntry.java
@@ -0,0 +1,75 @@
+package cn.classfun.droidvm.lib.pkg;
+
+import static cn.classfun.droidvm.lib.store.enums.Enums.optEnum;
+
+import androidx.annotation.NonNull;
+
+import org.json.JSONException;
+import org.json.JSONObject;
+
+import java.io.File;
+
+import cn.classfun.droidvm.lib.store.base.JSONSerialize;
+import cn.classfun.droidvm.ui.disk.create.DiskFormat;
+
+public final class DiskEntry implements JSONSerialize {
+    public DiskRef ref;
+    public String name = null;
+    public DiskFormat format = null;
+    public long size = 0;
+    public String archivePath = null;
+    public File target = null;
+
+    public DiskEntry(DiskRef ref) {
+        this.ref = ref;
+    }
+
+    public DiskEntry(@NonNull JSONObject o) {
+        ref = new DiskRef(0, o);
+        name = o.optString("name", "disk.img");
+        format = optEnum(o, "format", DiskFormat.RAW);
+        size = o.optLong("size");
+        archivePath = o.optString("archive_path");
+    }
+
+    @NonNull
+    @Override
+    public JSONObject toJson() throws JSONException {
+        var o = ref.toJson();
+        if (target != null) {
+            o.put("path", target.getPath());
+            o.put("name", target.getName());
+        } else {
+            o.put("name", name);
+        }
+        o.put("format", format.name().toLowerCase());
+        o.put("size", size);
+        o.put("archive_path", archivePath);
+        return o;
+    }
+
+    private static @NonNull String sanitize(@NonNull String name) {
+        var sb = new StringBuilder();
+        for (int i = 0; i < name.length(); i++) {
+            char c = name.charAt(i);
+            if (c == '/' || c == '\\' || c < 0x20) c = '_';
+            sb.append(c);
+        }
+        return sb.toString();
+    }
+
+    public void build() {
+        var file = new File(ref.path);
+        name = file.getName();
+        archivePath = sanitize(name);
+        format = DiskFormat.fromFilename(name);
+        size = file.length();
+    }
+
+    @NonNull
+    public static DiskEntry from(Object o) throws JSONException {
+        if (o instanceof JSONObject)
+            return new DiskEntry((JSONObject) o);
+        throw new JSONException("object is not json");
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/pkg/DiskRef.java b/app/src/main/java/cn/classfun/droidvm/lib/pkg/DiskRef.java
new file mode 100644
index 000000000..768b98763
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/lib/pkg/DiskRef.java
@@ -0,0 +1,54 @@
+package cn.classfun.droidvm.lib.pkg;
+
+import static java.util.Objects.requireNonNull;
+import static cn.classfun.droidvm.lib.store.enums.Enums.optEnum;
+
+import androidx.annotation.NonNull;
+
+import org.json.JSONException;
+import org.json.JSONObject;
+
+import cn.classfun.droidvm.lib.store.base.DataItem;
+import cn.classfun.droidvm.lib.store.base.JSONSerialize;
+import cn.classfun.droidvm.lib.store.disk.DiskBus;
+import cn.classfun.droidvm.ui.disk.create.DiskFormat;
+
+public final class DiskRef implements JSONSerialize {
+    public int index;
+    public String path;
+    public boolean readonly;
+    public DiskBus bus;
+
+    public DiskRef(int index, @NonNull JSONObject jo) {
+        this.index = index;
+        this.path = jo.optString("path", "");
+        this.readonly = jo.optBoolean("readonly", false);
+        this.bus = optEnum(jo, "bus", DiskBus.VIRTIO);
+    }
+
+    public DiskRef(int index, @NonNull DataItem o) {
+        this.index = index;
+        this.path = o.optString("path", "");
+        this.readonly = o.optBoolean("readonly", false);
+        this.bus = optEnum(o, "bus", DiskBus.VIRTIO);
+    }
+
+    @NonNull
+    public DiskFormat getFormat() {
+        return DiskFormat.fromFilename(requireNonNull(path));
+    }
+
+    public boolean isCDROM() {
+        return getFormat() == DiskFormat.ISO;
+    }
+
+    @NonNull
+    @Override
+    public JSONObject toJson() throws JSONException {
+        var d = new JSONObject();
+        d.put("readonly", readonly);
+        d.put("bus", bus);
+        d.put("path", path);
+        return d;
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/pkg/PackageConstants.java b/app/src/main/java/cn/classfun/droidvm/lib/pkg/PackageConstants.java
new file mode 100644
index 000000000..bca0dadfd
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/lib/pkg/PackageConstants.java
@@ -0,0 +1,17 @@
+package cn.classfun.droidvm.lib.pkg;
+
+import cn.classfun.droidvm.lib.archive.Compression;
+
+public final class PackageConstants {
+    public static final String EXTENSION = "vmpkg";
+    public static final String MIME = "application/vnd.droidvm.vmpkg";
+    public static final String MAGIC = "VMPKG";
+    public static final int HEADER_SIZE = 24;
+    public static final int BUFFER = 64 * 1024;
+    public static final int MANIFEST_VERSION = 1;
+    public static final String MANIFEST_NAME = "manifest.json";
+    public static final Compression DEFAULT_COMPRESSION = Compression.ZSTD;
+
+    private PackageConstants() {
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/pkg/PackageHeader.java b/app/src/main/java/cn/classfun/droidvm/lib/pkg/PackageHeader.java
new file mode 100644
index 000000000..08d934b12
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/lib/pkg/PackageHeader.java
@@ -0,0 +1,69 @@
+package cn.classfun.droidvm.lib.pkg;
+
+import static java.nio.charset.StandardCharsets.UTF_8;
+import static cn.classfun.droidvm.lib.utils.BinaryUtils.getInt64LE;
+import static cn.classfun.droidvm.lib.utils.BinaryUtils.getUInt16LE;
+import static cn.classfun.droidvm.lib.utils.BinaryUtils.readFully;
+import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
+
+import androidx.annotation.NonNull;
+
+import java.io.IOException;
+import java.io.InputStream;
+
+import cn.classfun.droidvm.lib.archive.Compression;
+
+public final class PackageHeader {
+    public int manifestVersion = 0;
+    public int appVersionCode = 0;
+    public int manifestSize = 0;
+    public int compression = 0;
+    public long dataSize = 0;
+
+    public PackageHeader() {
+    }
+
+    public void parseFromData(@NonNull byte[] hdr) throws IOException {
+        if (hdr.length < PackageConstants.HEADER_SIZE)
+            throw new IOException("incomplete package header");
+        if (!checkMagic(hdr))
+            throw new IOException("invalid package header");
+        manifestVersion = getUInt16LE(hdr, 6);
+        appVersionCode = getUInt16LE(hdr, 8);
+        manifestSize = getUInt16LE(hdr, 10);
+        compression = getUInt16LE(hdr, 12);
+        dataSize = getInt64LE(hdr, 16);
+    }
+
+    public void validate() throws IOException {
+        if (manifestVersion != PackageConstants.MANIFEST_VERSION)
+            throw new IOException(fmt("unsupported vmpkg manifest version: %d", manifestVersion));
+        if (Compression.fromType(compression) == null)
+            throw new IOException(fmt("unsupported vmpkg compression: %d", compression));
+        if (manifestSize <= 0) throw new IOException("empty vmpkg manifest");
+        if (dataSize < 0) throw new IOException("vmpkg data size is too large");
+    }
+
+    @NonNull
+    public static PackageHeader fromBytes(byte[] hdr) throws IOException {
+        var header = new PackageHeader();
+        header.parseFromData(hdr);
+        header.validate();
+        return header;
+    }
+
+    @NonNull
+    public static PackageHeader fromStream(InputStream in) throws IOException {
+        var hdr = new byte[PackageConstants.HEADER_SIZE];
+        readFully(in, hdr);
+        return fromBytes(hdr);
+    }
+
+    public static boolean checkMagic(@NonNull byte[] hdr) {
+        if (hdr.length < PackageConstants.MAGIC.length() + 1) return false;
+        var magic = PackageConstants.MAGIC.getBytes(UTF_8);
+        for (int i = 0; i < magic.length; i++)
+            if (hdr[i] != magic[i]) return false;
+        return hdr[magic.length] == 0;
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/pkg/PackageInput.java b/app/src/main/java/cn/classfun/droidvm/lib/pkg/PackageInput.java
new file mode 100644
index 000000000..7a35024ad
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/lib/pkg/PackageInput.java
@@ -0,0 +1,74 @@
+package cn.classfun.droidvm.lib.pkg;
+
+import static cn.classfun.droidvm.lib.archive.TarWriter.wrapCompressionInput;
+import static cn.classfun.droidvm.lib.utils.BinaryUtils.alignUp;
+import static cn.classfun.droidvm.lib.utils.BinaryUtils.alignUpStrict;
+import static cn.classfun.droidvm.lib.utils.BinaryUtils.readZeroPadding;
+
+import androidx.annotation.NonNull;
+
+import java.io.IOException;
+import java.io.InputStream;
+
+import cn.classfun.droidvm.lib.archive.Compression;
+import cn.classfun.droidvm.lib.archive.LimitedInputStream;
+
+public final class PackageInput implements AutoCloseable {
+    @NonNull
+    private final InputStream source;
+    @NonNull
+    private final LimitedInputStream rawData;
+    @NonNull
+    public final InputStream data;
+    @NonNull
+    public final PackageManifest manifest;
+    @NonNull
+    private final PackageHeader header;
+
+    public PackageInput(
+        @NonNull InputStream source,
+        @NonNull LimitedInputStream rawData,
+        @NonNull InputStream data,
+        @NonNull PackageManifest manifest,
+        @NonNull PackageHeader header
+    ) {
+        this.source = source;
+        this.rawData = rawData;
+        this.data = data;
+        this.manifest = manifest;
+        this.header = header;
+    }
+
+    public void validateDataConsumed() throws IOException {
+        if (rawData.getRemaining() != 0)
+            throw new IOException("vmpkg data_size is larger than tarball data");
+        long dataEnd = alignUpStrict(alignUp(PackageConstants.HEADER_SIZE) + header.manifestSize);
+        dataEnd += header.dataSize;
+        readZeroPadding(source, alignUp(dataEnd) - dataEnd);
+        if (source.read() >= 0) throw new IOException("unexpected bytes after vmpkg package");
+    }
+
+    @Override
+    public void close() throws IOException {
+        data.close();
+    }
+
+    @NonNull
+    public static PackageInput open(@NonNull InputStream raw) throws Exception {
+        var pkgHeader = PackageHeader.fromStream(raw);
+        var manifest = PackageManifest.fromStream(raw, pkgHeader);
+        if (pkgHeader.manifestVersion != manifest.manifestVersion)
+            throw new IOException("vmpkg manifest_version mismatch");
+        if (pkgHeader.appVersionCode != manifest.appVersionCode)
+            throw new IOException("vmpkg app_version_code mismatch");
+        if (pkgHeader.compression != manifest.compression.type)
+            throw new IOException("vmpkg compression mismatch");
+        long pos = alignUp(PackageConstants.HEADER_SIZE) + pkgHeader.manifestSize;
+        readZeroPadding(raw, alignUpStrict(pos) - pos);
+        var stream = new LimitedInputStream(raw, pkgHeader.dataSize);
+        var compression = Compression.fromType(pkgHeader.compression);
+        if (compression == null) throw new IllegalArgumentException("invalid compression");
+        var compStream = wrapCompressionInput(stream, compression);
+        return new PackageInput(raw, stream, compStream, manifest, pkgHeader);
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/pkg/PackageManifest.java b/app/src/main/java/cn/classfun/droidvm/lib/pkg/PackageManifest.java
new file mode 100644
index 000000000..eaa900961
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/lib/pkg/PackageManifest.java
@@ -0,0 +1,100 @@
+package cn.classfun.droidvm.lib.pkg;
+
+import static cn.classfun.droidvm.lib.store.enums.Enums.optEnum;
+import static cn.classfun.droidvm.lib.utils.BinaryUtils.alignUp;
+import static cn.classfun.droidvm.lib.utils.BinaryUtils.decodeUtf8;
+import static cn.classfun.droidvm.lib.utils.BinaryUtils.readFully;
+import static cn.classfun.droidvm.lib.utils.BinaryUtils.readZeroPadding;
+import static cn.classfun.droidvm.lib.utils.JsonUtils.arrayToList;
+import static cn.classfun.droidvm.lib.utils.JsonUtils.listToJSONArray;
+
+import androidx.annotation.NonNull;
+import androidx.annotation.Nullable;
+
+import org.json.JSONException;
+import org.json.JSONObject;
+
+import java.io.InputStream;
+import java.util.ArrayList;
+import java.util.List;
+
+import cn.classfun.droidvm.BuildConfig;
+import cn.classfun.droidvm.lib.archive.Compression;
+import cn.classfun.droidvm.lib.store.base.JSONSerialize;
+import cn.classfun.droidvm.lib.store.network.NetworkConfig;
+import cn.classfun.droidvm.lib.store.vm.VMConfig;
+
+public final class PackageManifest implements JSONSerialize {
+    public int manifestVersion = PackageConstants.MANIFEST_VERSION;
+    public String format = PackageConstants.EXTENSION;
+    public long createdAt = System.currentTimeMillis();
+    public String appVersion = BuildConfig.VERSION_NAME;
+    public int appVersionCode = BuildConfig.VERSION_CODE;
+    public String appBuildType = BuildConfig.BUILD_TYPE;
+    public Compression compression = PackageConstants.DEFAULT_COMPRESSION;
+    public VMConfig vm = new VMConfig();
+    public List<DiskEntry> disks = new ArrayList<>();
+    public List<BootFile> boots = new ArrayList<>();
+    public List<NetworkConfig> networks = new ArrayList<>();
+
+    @NonNull
+    @Override
+    public JSONObject toJson() throws JSONException{
+        var o = new JSONObject();
+        o.put("manifest_version", manifestVersion);
+        o.put("format", format);
+        o.put("created_at", createdAt);
+        o.put("app_version", appVersion);
+        o.put("app_version_code", appVersionCode);
+        o.put("app_build_type", appBuildType);
+        o.put("compression", compression);
+        o.put("vm", vm.toJson());
+        o.put("disks", listToJSONArray(disks));
+        o.put("boots", listToJSONArray(boots));
+        o.put("networks", listToJSONArray(networks));
+        return o;
+    }
+
+    @Nullable
+    public DiskEntry findDisk(@NonNull String archivePath) {
+        for (var disk : disks)
+            if (archivePath.equals(disk.archivePath)) return disk;
+        return null;
+    }
+
+    @Nullable
+    public BootFile findBoot(@NonNull String archivePath) {
+        for (var boot : boots)
+            if (archivePath.equals(boot.archivePath)) return boot;
+        return null;
+    }
+
+    @NonNull
+    public static PackageManifest fromStream(
+        @NonNull InputStream in,
+        @NonNull PackageHeader hdr
+    ) throws Exception {
+        readZeroPadding(in, alignUp(PackageConstants.HEADER_SIZE) - PackageConstants.HEADER_SIZE);
+        var manifest = new byte[hdr.manifestSize];
+        readFully(in, manifest);
+        var json = new JSONObject(decodeUtf8(manifest));
+        return fromJson(json);
+    }
+
+    @NonNull
+    public static PackageManifest fromJson(@NonNull JSONObject o) throws JSONException {
+        var m = new PackageManifest();
+        m.manifestVersion = o.optInt("manifest_version");
+        m.format = o.optString("format");
+        m.createdAt = o.optLong("created_at");
+        m.appVersion = o.optString("app_version");
+        m.appVersionCode = o.optInt("app_version_code");
+        m.appBuildType = o.optString("app_build_type");
+        m.compression = optEnum(o, "compression", PackageConstants.DEFAULT_COMPRESSION);
+        m.vm = new VMConfig(o.getJSONObject("vm"));
+        m.disks = arrayToList(o, "disks", DiskEntry::from);
+        m.boots = arrayToList(o, "boots", BootFile::from);
+        m.networks = arrayToList(o, "networks", (JSONObject net) -> new NetworkConfig(net));
+        return m;
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/pkg/Phase.java b/app/src/main/java/cn/classfun/droidvm/lib/pkg/Phase.java
new file mode 100644
index 000000000..41646fe3b
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/lib/pkg/Phase.java
@@ -0,0 +1,9 @@
+package cn.classfun.droidvm.lib.pkg;
+
+public enum Phase {
+    IDLE,
+    SCAN,
+    PACK,
+    DONE,
+    ERROR
+}

From 9e50164cb7fbb66813f677a795b0d074a58931ac Mon Sep 17 00:00:00 2001
From: BigfootACA <bigfoot@classfun.cn>
Date: Tue, 7 Jul 2026 15:36:21 +0800
Subject: [PATCH 113/182] daemon: add vm_export and vm_import for vm package

Signed-off-by: BigfootACA <bigfoot@classfun.cn>
---
 .../droidvm/daemon/ipc/vm/ExportHandler.java  |  35 +++
 .../droidvm/daemon/ipc/vm/ImportHandler.java  |  34 ++
 .../droidvm/daemon/server/ServerContext.java  |  17 +
 .../droidvm/daemon/vm/pkg/VMExportTask.java   | 220 +++++++++++++
 .../droidvm/daemon/vm/pkg/VMExportUtils.java  | 172 +++++++++++
 .../droidvm/daemon/vm/pkg/VMImportTask.java   | 292 ++++++++++++++++++
 .../droidvm/daemon/vm/pkg/VMImportUtils.java  |  67 ++++
 7 files changed, 837 insertions(+)
 create mode 100644 app/src/main/java/cn/classfun/droidvm/daemon/ipc/vm/ExportHandler.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/daemon/ipc/vm/ImportHandler.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/daemon/vm/pkg/VMExportTask.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/daemon/vm/pkg/VMExportUtils.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/daemon/vm/pkg/VMImportTask.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/daemon/vm/pkg/VMImportUtils.java

diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/ipc/vm/ExportHandler.java b/app/src/main/java/cn/classfun/droidvm/daemon/ipc/vm/ExportHandler.java
new file mode 100644
index 000000000..28cf88ea9
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/ipc/vm/ExportHandler.java
@@ -0,0 +1,35 @@
+package cn.classfun.droidvm.daemon.ipc.vm;
+
+import androidx.annotation.NonNull;
+
+import com.google.auto.service.AutoService;
+
+import cn.classfun.droidvm.daemon.server.ClientRequest;
+import cn.classfun.droidvm.daemon.server.RequestException;
+import cn.classfun.droidvm.daemon.server.RequestHandler;
+import cn.classfun.droidvm.daemon.vm.pkg.VMExportTask;
+
+@AutoService(RequestHandler.class)
+public final class ExportHandler extends RequestHandler {
+    @NonNull
+    @Override
+    public String getName() {
+        return "vm_export";
+    }
+
+    @Override
+    public void handle(@NonNull ClientRequest request) throws Exception {
+        var params = request.getParams();
+        var destPath = params.optString("dest_path", "");
+        if (!params.has("vm_id"))
+            throw new RequestException("missing vm_id");
+        if (destPath.isEmpty())
+            throw new RequestException("missing dest_path");
+        var store = request.getContext().getExportTaskStore();
+        var server = request.getClient().getServer();
+        var task = new VMExportTask(server, params);
+        store.put(task.taskId, task);
+        task.startAsync();
+        request.res().put("task_id", task.taskId.toString());
+    }
+}
\ No newline at end of file
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/ipc/vm/ImportHandler.java b/app/src/main/java/cn/classfun/droidvm/daemon/ipc/vm/ImportHandler.java
new file mode 100644
index 000000000..caac7fe4f
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/ipc/vm/ImportHandler.java
@@ -0,0 +1,34 @@
+package cn.classfun.droidvm.daemon.ipc.vm;
+
+import androidx.annotation.NonNull;
+
+import com.google.auto.service.AutoService;
+
+import cn.classfun.droidvm.daemon.server.ClientRequest;
+import cn.classfun.droidvm.daemon.server.RequestException;
+import cn.classfun.droidvm.daemon.server.RequestHandler;
+import cn.classfun.droidvm.daemon.vm.pkg.VMImportTask;
+
+@AutoService(RequestHandler.class)
+public final class ImportHandler extends RequestHandler {
+    @NonNull
+    @Override
+    public String getName() {
+        return "vm_import";
+    }
+
+    @Override
+    public void handle(@NonNull ClientRequest request) throws Exception {
+        var params = request.getParams();
+        if (params.optString("src_path", "").isEmpty())
+            throw new RequestException("missing src_path");
+        if (params.optString("target_dir", "").isEmpty())
+            throw new RequestException("missing target_dir");
+        var store = request.getContext().getImportTaskStore();
+        var server = request.getClient().getServer();
+        var task = new VMImportTask(server, params);
+        store.put(task.taskId, task);
+        task.startAsync();
+        request.res().put("task_id", task.taskId.toString());
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/server/ServerContext.java b/app/src/main/java/cn/classfun/droidvm/daemon/server/ServerContext.java
index 043c2cb60..30607aab8 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/server/ServerContext.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/server/ServerContext.java
@@ -11,10 +11,15 @@
 import androidx.annotation.NonNull;
 
 import java.io.File;
+import java.util.Map;
+import java.util.UUID;
+import java.util.concurrent.ConcurrentHashMap;
 
 import cn.classfun.droidvm.daemon.network.NetworkInstanceStore;
 import cn.classfun.droidvm.daemon.network.backend.DefaultRouterWatcher;
 import cn.classfun.droidvm.daemon.vm.VMInstanceStore;
+import cn.classfun.droidvm.daemon.vm.pkg.VMExportTask;
+import cn.classfun.droidvm.daemon.vm.pkg.VMImportTask;
 import cn.classfun.droidvm.lib.store.base.DataItem;
 
 public final class ServerContext {
@@ -22,6 +27,8 @@ public final class ServerContext {
     private final VMInstanceStore vms = new VMInstanceStore(this);
     private final NetworkInstanceStore networks = new NetworkInstanceStore(this);
     private final DefaultRouterWatcher routerWatcher = new DefaultRouterWatcher(this);
+    private final Map<UUID, VMExportTask> exportTasks = new ConcurrentHashMap<>();
+    private final Map<UUID, VMImportTask> importTasks = new ConcurrentHashMap<>();
     public DataItem appConfig = DataItem.newObject();
 
     public ServerContext() {
@@ -77,4 +84,14 @@ public NetworkInstanceStore getNetworks() {
     public DefaultRouterWatcher getRouterWatcher() {
         return routerWatcher;
     }
+
+    @NonNull
+    public Map<UUID, VMExportTask> getExportTaskStore() {
+        return exportTasks;
+    }
+
+    @NonNull
+    public Map<UUID, VMImportTask> getImportTaskStore() {
+        return importTasks;
+    }
 }
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/vm/pkg/VMExportTask.java b/app/src/main/java/cn/classfun/droidvm/daemon/vm/pkg/VMExportTask.java
new file mode 100644
index 000000000..b40674956
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/vm/pkg/VMExportTask.java
@@ -0,0 +1,220 @@
+package cn.classfun.droidvm.daemon.vm.pkg;
+
+import static java.nio.charset.StandardCharsets.UTF_8;
+import static cn.classfun.droidvm.daemon.vm.pkg.VMExportUtils.buildHeader;
+import static cn.classfun.droidvm.daemon.vm.pkg.VMExportUtils.collectBootFiles;
+import static cn.classfun.droidvm.daemon.vm.pkg.VMExportUtils.collectNetworks;
+import static cn.classfun.droidvm.daemon.vm.pkg.VMExportUtils.sanitizeVM;
+import static cn.classfun.droidvm.lib.archive.TarWriter.wrapCompressionOutput;
+import static cn.classfun.droidvm.lib.pkg.PackageConstants.BUFFER;
+import static cn.classfun.droidvm.lib.store.enums.Enums.optEnum;
+import static cn.classfun.droidvm.lib.utils.BinaryUtils.alignUp;
+import static cn.classfun.droidvm.lib.utils.BinaryUtils.alignUpStrict;
+import static cn.classfun.droidvm.lib.utils.BinaryUtils.writeZero;
+import static cn.classfun.droidvm.lib.utils.StringUtils.basename;
+import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
+import static cn.classfun.droidvm.lib.utils.ThreadUtils.runOnPool;
+
+import android.util.Log;
+
+import androidx.annotation.NonNull;
+
+import org.json.JSONObject;
+
+import java.io.File;
+import java.io.FileInputStream;
+import java.io.IOException;
+import java.io.RandomAccessFile;
+import java.util.HashSet;
+import java.util.UUID;
+
+import cn.classfun.droidvm.daemon.server.Server;
+import cn.classfun.droidvm.lib.archive.RandomAccessFileOutputStream;
+import cn.classfun.droidvm.lib.archive.TarWriter;
+import cn.classfun.droidvm.lib.pkg.DiskEntry;
+import cn.classfun.droidvm.lib.pkg.DiskRef;
+import cn.classfun.droidvm.lib.pkg.PackageConstants;
+import cn.classfun.droidvm.lib.pkg.PackageManifest;
+import cn.classfun.droidvm.lib.pkg.Phase;
+import cn.classfun.droidvm.lib.store.base.DataItem;
+
+public final class VMExportTask {
+    private static final String TAG = "VMExportTask";
+    private static final long PACK_PROGRESS_INTERVAL_MS = 500;
+    public final UUID taskId = UUID.randomUUID();
+    private final Server server;
+    private final PackageManifest manifest = new PackageManifest();
+    private final UUID sourceVMId;
+    private final int totalItems;
+    private final String destPath;
+
+    public VMExportTask(
+        @NonNull Server server,
+        @NonNull JSONObject request
+    ) {
+        this.server = server;
+        destPath = request.optString("dest_path");
+        if (!destPath.startsWith("/"))
+            throw new IllegalArgumentException("missing dest_path");
+        var vmId = UUID.fromString(request.optString("vm_id"));
+        sourceVMId = vmId;
+        var vm = server.getContext().getVMs().findById(vmId);
+        if (vm == null) throw new IllegalArgumentException("target vm not found");
+        manifest.vm = sanitizeVM(vm);
+        manifest.compression = optEnum(
+            request, "compression",
+            PackageConstants.DEFAULT_COMPRESSION
+        );
+        var wanted = request.optJSONArray("disks");
+        var wantedSet = new HashSet<Integer>();
+        if (wanted != null) for (int i = 0; i < wanted.length(); i++)
+            wantedSet.add(wanted.optInt(i, -1));
+        var arr = vm.item.opt("disks", DataItem.newArray());
+        for (int i = 0; i < arr.size(); i++) {
+            var e = arr.get(i);
+            if (!e.is(DataItem.Type.OBJECT)) continue;
+            if (!wantedSet.isEmpty() && !wantedSet.contains(i)) continue;
+            var disk = new DiskEntry(new DiskRef(i, e));
+            disk.build();
+            manifest.disks.add(disk);
+        }
+        collectBootFiles(manifest);
+        collectNetworks(manifest, server.getContext().getNetworks(), vm);
+        manifest.vm.item.remove("disks");
+        totalItems = manifest.disks.size() + manifest.boots.size();
+    }
+
+    public void startAsync() {
+        runOnPool(() -> {
+            var data = DataItem.newObject();
+            data.set("total", totalItems);
+            try {
+                startWrite();
+                data.set("done", totalItems);
+                emit(data, Phase.DONE);
+            } catch (Exception e) {
+                Log.w(TAG, fmt("Export task %s failed", taskId), e);
+                data.set("done", 0);
+                data.set("message", e.getMessage());
+                emit(data, Phase.ERROR);
+            } finally {
+                var store = server.getContext().getExportTaskStore();
+                store.remove(taskId);
+            }
+        });
+    }
+
+    private void startWrite() throws Exception {
+        var outFile = new File(destPath);
+        var manifestBytes = manifest.toJson().toString(4).getBytes(UTF_8);
+        if (manifestBytes.length > 0xffff)
+            throw new IOException(fmt("manifest too large: %d bytes", manifestBytes.length));
+        try (var raf = new RandomAccessFile(outFile, "rw")) {
+            raf.setLength(0);
+            raf.write(new byte[PackageConstants.HEADER_SIZE]);
+            writeZero(raf, alignUp(raf.getFilePointer()) - raf.getFilePointer());
+            raf.write(manifestBytes);
+            writeZero(raf, alignUpStrict(raf.getFilePointer()) - raf.getFilePointer());
+            long dataStart = raf.getFilePointer();
+            try (
+                var fileOut = new RandomAccessFileOutputStream(raf);
+                var compressed = wrapCompressionOutput(fileOut, manifest.compression);
+                var tar = new TarWriter(compressed)
+            ) {
+                tar.entry(PackageConstants.MANIFEST_NAME, manifestBytes);
+                pack(tar);
+            }
+            long dataEnd = raf.getFilePointer();
+            long dataSize = dataEnd - dataStart;
+            writeZero(raf, alignUp(dataEnd) - dataEnd);
+            raf.seek(0);
+            raf.write(buildHeader(manifest, manifestBytes.length, dataSize));
+        }
+    }
+
+    private void pack(@NonNull TarWriter tar) throws Exception {
+        int done;
+        var data = DataItem.newObject();
+        data.set("done", 0);
+        if (!manifest.disks.isEmpty()) {
+            data.set("total",  manifest.disks.size());
+            emit(data, Phase.PACK);
+            done = 0;
+            for (var m : manifest.disks) {
+                writeFile(
+                    tar, m.archivePath, m.ref.path,
+                    done, manifest.disks.size()
+                );
+                done++;
+            }
+        }
+        if (!manifest.boots.isEmpty()) {
+            data.set("total", manifest.boots.size());
+            emit(data, Phase.PACK);
+            done = 0;
+            for (var bf : manifest.boots) {
+                writeFile(
+                    tar, bf.archivePath, bf.path,
+                    done, manifest.boots.size()
+                );
+                done++;
+            }
+        }
+    }
+
+    private void writeFile(
+        @NonNull TarWriter tar,
+        @NonNull String item,
+        @NonNull String path,
+        int doneItems,
+        int totalItems
+    ) throws Exception {
+        var f = new File(path);
+        var size = f.length();
+        var data = DataItem.newObject();
+        data.set("done", doneItems);
+        data.set("total", totalItems);
+        data.set("file", basename(path));
+        data.set("bytes_done", 0);
+        data.set("bytes_total", size);
+        emit(data, Phase.PACK);
+        tar.entry(item, size, os -> {
+            try (var is = new FileInputStream(f)) {
+                var buf = new byte[BUFFER];
+                long written = 0;
+                long lastEmit = System.currentTimeMillis();
+                int r;
+                while ((r = is.read(buf)) > 0) {
+                    os.write(buf, 0, r);
+                    written += r;
+                    var now = System.currentTimeMillis();
+                    if (now - lastEmit >= PACK_PROGRESS_INTERVAL_MS) {
+                        data.set("bytes_done", written);
+                        emit(data, Phase.PACK);
+                        lastEmit = now;
+                    }
+                }
+                data.set("bytes_done", size);
+                data.set("done", doneItems + 1);
+                emit(data, Phase.PACK);
+            }
+        });
+    }
+
+    private void emit(@NonNull DataItem item, @NonNull Phase phase) {
+        try {
+            var data = item.toJson();
+            data.put("event", "vm_export_status");
+            data.put("task_id", taskId.toString());
+            data.put("phase", phase.name().toLowerCase());
+            data.put("vm_id", sourceVMId.toString());
+            data.put("vm_name", manifest.vm.getName());
+            var ev = new JSONObject();
+            ev.put("type", "event");
+            ev.put("data", data);
+            server.broadcastEvent(ev);
+        } catch (Exception e) {
+            Log.w(TAG, fmt("Failed to emit export event for %s", taskId), e);
+        }
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/vm/pkg/VMExportUtils.java b/app/src/main/java/cn/classfun/droidvm/daemon/vm/pkg/VMExportUtils.java
new file mode 100644
index 000000000..2ed8a7934
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/vm/pkg/VMExportUtils.java
@@ -0,0 +1,172 @@
+package cn.classfun.droidvm.daemon.vm.pkg;
+
+import static java.nio.charset.StandardCharsets.UTF_8;
+import static cn.classfun.droidvm.lib.Constants.PATH_BUILTIN_INITRD;
+import static cn.classfun.droidvm.lib.Constants.PATH_BUILTIN_KERNEL;
+import static cn.classfun.droidvm.lib.Constants.PATH_EDK2_FIRMWARE;
+import static cn.classfun.droidvm.lib.Constants.PATH_EDK2_QEMU_FIRMWARE;
+import static cn.classfun.droidvm.lib.Constants.PATH_MICRODROID_INITRD;
+import static cn.classfun.droidvm.lib.Constants.PATH_MICRODROID_INITRD_DEBUG;
+import static cn.classfun.droidvm.lib.Constants.PATH_MICRODROID_KERNEL;
+import static cn.classfun.droidvm.lib.utils.BinaryUtils.putInt64LE;
+import static cn.classfun.droidvm.lib.utils.BinaryUtils.putUInt16LE;
+import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
+
+import android.util.Log;
+
+import androidx.annotation.NonNull;
+
+import java.io.IOException;
+import java.util.HashMap;
+import java.util.HashSet;
+import java.util.LinkedHashSet;
+import java.util.Set;
+
+import cn.classfun.droidvm.BuildConfig;
+import cn.classfun.droidvm.daemon.network.NetworkInstanceStore;
+import cn.classfun.droidvm.lib.pkg.BootFile;
+import cn.classfun.droidvm.lib.pkg.PackageConstants;
+import cn.classfun.droidvm.lib.pkg.PackageManifest;
+import cn.classfun.droidvm.lib.store.base.DataItem;
+import cn.classfun.droidvm.lib.store.network.NetworkConfig;
+import cn.classfun.droidvm.lib.store.vm.BootConfig;
+import cn.classfun.droidvm.lib.store.vm.VMConfig;
+
+public final class VMExportUtils {
+    private static final String TAG = "VMExportUtils";
+    private VMExportUtils() {
+    }
+
+    public static void scrubUnique(@NonNull DataItem item) {
+        if (item.is(DataItem.Type.OBJECT)) {
+            item.remove("id");
+            item.remove("vm_id");
+            item.remove("uuid");
+            item.remove("mac");
+            item.remove("mac_address");
+            item.remove("tap_name");
+            for (var child : item.asObject().values())
+                scrubUnique(child);
+        } else if (item.is(DataItem.Type.ARRAY)) {
+            for (var child : item.asArray())
+                scrubUnique(child);
+        }
+    }
+
+    @NonNull
+    public static byte[] buildHeader(
+        @NonNull PackageManifest manifest,
+        int manifestSize,
+        long dataSize
+    ) throws IOException {
+        var hdr = new byte[PackageConstants.HEADER_SIZE];
+        var magic = PackageConstants.MAGIC.getBytes(UTF_8);
+        System.arraycopy(magic, 0, hdr, 0, magic.length);
+        putUInt16LE(hdr, 6, PackageConstants.MANIFEST_VERSION);
+        putUInt16LE(hdr, 8, BuildConfig.VERSION_CODE);
+        putUInt16LE(hdr, 10, manifestSize);
+        putUInt16LE(hdr, 12, manifest.compression.type);
+        putInt64LE(hdr, 16, dataSize);
+        return hdr;
+    }
+
+    private static void addBootFile(
+        @NonNull PackageManifest manifest,
+        @NonNull String path,
+        @NonNull String kind,
+        @NonNull Set<String> builtins,
+        @NonNull Set<String> seen
+    ) {
+        if (path.isEmpty()) return;
+        if (builtins.contains(path)) return;
+        var file = new BootFile();
+        file.path = path;
+        file.kind = kind;
+        if (!file.isExists()) return;
+        file.build();
+        if (!seen.add(file.archivePath)) return;
+        manifest.boots.add(file);
+    }
+
+    public static void collectBootFiles(@NonNull PackageManifest manifest) {
+        var builtins = new HashSet<String>();
+        builtins.add(PATH_BUILTIN_KERNEL);
+        builtins.add(PATH_BUILTIN_INITRD);
+        builtins.add(PATH_EDK2_FIRMWARE);
+        builtins.add(PATH_EDK2_QEMU_FIRMWARE);
+        builtins.add(PATH_MICRODROID_KERNEL);
+        builtins.add(PATH_MICRODROID_INITRD);
+        builtins.add(PATH_MICRODROID_INITRD_DEBUG);
+        var seen = new LinkedHashSet<String>();
+        var boot = BootConfig.of(manifest.vm);
+        if (boot.getProtocol() == BootConfig.Protocol.UEFI) {
+            addBootFile(manifest, boot.getUefiFirmware(), "uefi", builtins, seen);
+        } else if (boot.getLinuxSource() == BootConfig.LinuxSource.MANUAL) {
+            addBootFile(manifest, boot.getKernel(), "kernel", builtins, seen);
+            addBootFile(manifest, boot.getInitrd(), "initrd", builtins, seen);
+        }
+    }
+
+    @NonNull
+    public static VMConfig sanitizeVM(@NonNull VMConfig vm) {
+        try {
+            var copy = new VMConfig(vm.toJson());
+            copy.item.remove("id");
+            var nets = copy.item.opt("networks", null);
+            if (nets != null && nets.is(DataItem.Type.ARRAY)) {
+                var refMap = new HashMap<String, String>();
+                int n = 0;
+                for (var item : nets.asArray()) {
+                    if (!item.is(DataItem.Type.OBJECT)) continue;
+                    var original = item.optString("network_id", "");
+                    if (!original.isEmpty()) {
+                        var ref = refMap.get(original);
+                        if (ref == null) {
+                            ref = fmt("net%d", n++);
+                            refMap.put(original, ref);
+                        }
+                        item.set("pkg_network_ref", ref);
+                    }
+                    item.remove("network_id");
+                    item.remove("mac_address");
+                    item.remove("tap_name");
+                }
+            }
+            return copy;
+        } catch (Exception e) {
+            throw new IllegalArgumentException("failed to sanitize VM config", e);
+        }
+    }
+
+    public static void collectNetworks(
+        @NonNull PackageManifest manifest,
+        @NonNull NetworkInstanceStore store,
+        @NonNull VMConfig sourceVM
+    ) {
+        var srcNets = sourceVM.item.opt("networks", null);
+        var exportNets = manifest.vm.item.opt("networks", null);
+        if (srcNets == null || exportNets == null) return;
+        if (!srcNets.is(DataItem.Type.ARRAY) || !exportNets.is(DataItem.Type.ARRAY)) return;
+        var seen = new HashSet<String>();
+        var srcArr = srcNets.asArray();
+        var exportArr = exportNets.asArray();
+        for (int i = 0; i < srcArr.size() && i < exportArr.size(); i++) {
+            var src = srcArr.get(i);
+            var exported = exportArr.get(i);
+            if (!src.is(DataItem.Type.OBJECT) || !exported.is(DataItem.Type.OBJECT)) continue;
+            var netId = src.optString("network_id", "");
+            var ref = exported.optString("pkg_network_ref", "");
+            if (netId.isEmpty() || ref.isEmpty() || !seen.add(netId)) continue;
+            var net = store.findById(netId);
+            if (net == null) continue;
+            try {
+                var cfg = new NetworkConfig(net.toJson());
+                scrubUnique(cfg.item);
+                cfg.item.set("pkg_network_ref", ref);
+                manifest.networks.add(cfg);
+            } catch (Exception e) {
+                Log.w(TAG, fmt("Failed to export network %s", netId), e);
+            }
+        }
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/vm/pkg/VMImportTask.java b/app/src/main/java/cn/classfun/droidvm/daemon/vm/pkg/VMImportTask.java
new file mode 100644
index 000000000..dcf56b774
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/vm/pkg/VMImportTask.java
@@ -0,0 +1,292 @@
+package cn.classfun.droidvm.daemon.vm.pkg;
+
+import static cn.classfun.droidvm.daemon.vm.pkg.VMImportUtils.remapBootPaths;
+import static cn.classfun.droidvm.daemon.vm.pkg.VMImportUtils.remapDiskPaths;
+import static cn.classfun.droidvm.daemon.vm.pkg.VMImportUtils.uniqueFile;
+import static cn.classfun.droidvm.lib.pkg.PackageConstants.BUFFER;
+import static cn.classfun.droidvm.lib.utils.JsonUtils.listToJSONArray;
+import static cn.classfun.droidvm.lib.utils.StringUtils.basename;
+import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
+import static cn.classfun.droidvm.lib.utils.ThreadUtils.runOnPool;
+
+import android.util.Log;
+
+import androidx.annotation.NonNull;
+
+import org.json.JSONArray;
+import org.json.JSONObject;
+
+import java.io.File;
+import java.io.FileInputStream;
+import java.io.FileOutputStream;
+import java.io.IOException;
+import java.io.InputStream;
+import java.util.ArrayList;
+import java.util.HashMap;
+import java.util.List;
+import java.util.UUID;
+import java.util.concurrent.atomic.AtomicBoolean;
+
+import cn.classfun.droidvm.daemon.server.Server;
+import cn.classfun.droidvm.lib.archive.TarReader;
+import cn.classfun.droidvm.lib.pkg.BootFile;
+import cn.classfun.droidvm.lib.pkg.DiskEntry;
+import cn.classfun.droidvm.lib.pkg.PackageInput;
+import cn.classfun.droidvm.lib.pkg.PackageManifest;
+import cn.classfun.droidvm.lib.pkg.Phase;
+import cn.classfun.droidvm.lib.store.base.DataItem;
+import cn.classfun.droidvm.lib.store.network.NetworkConfig;
+import cn.classfun.droidvm.lib.store.vm.VMConfig;
+
+public final class VMImportTask {
+    private static final String TAG = "VMImportTask";
+    private static final long PROGRESS_INTERVAL_MS = 500;
+    public final UUID taskId = UUID.randomUUID();
+    private final Server server;
+    private final String srcPath;
+    private final File targetDir;
+    private final String networkMode;
+    private int totalItems;
+    public VMConfig importedVM = null;
+    public PackageManifest importedManifest = null;
+    public final ArrayList<DiskEntry> placedDisks = new ArrayList<>();
+    public final ArrayList<BootFile> placedBoots = new ArrayList<>();
+
+    public VMImportTask(@NonNull Server server, @NonNull JSONObject request) {
+        this.server = server;
+        srcPath = request.optString("src_path", "");
+        if (!srcPath.startsWith("/"))
+            throw new IllegalArgumentException("missing src_path");
+        var targetPath = request.optString("target_dir", "");
+        if (!targetPath.startsWith("/"))
+            throw new IllegalArgumentException("missing target_dir");
+        targetDir = new File(targetPath);
+        networkMode = request.optString("network_mode", "auto");
+    }
+
+    public void startAsync() {
+        runOnPool(this::run);
+    }
+
+    private void run() {
+        var data = DataItem.newObject();
+        try {
+            unpack();
+            importedVM.setName(uniqueVMName(importedVM.getName()));
+            var networks = importNetworks(importedVM, importedManifest.networks);
+            var vmId = server.getContext().getVMs().createVM(importedVM);
+            if (vmId == null || vmId.isEmpty()) throw new IOException("failed to register VM");
+            data.set("done", totalItems);
+            data.set("total", totalItems);
+            data.set("vm_id", vmId);
+            data.set("vm_name", importedVM.getName());
+            data.set("disks", listToJSONArray(placedDisks));
+            data.set("boots", listToJSONArray(placedBoots));
+            data.set("networks", networks);
+            emit(data, Phase.DONE);
+        } catch (Exception e) {
+            Log.w(TAG, fmt("Import task %s failed", taskId), e);
+            data.set("done", 0);
+            data.set("total", totalItems);
+            data.set("message", e.getMessage());
+            emit(data, Phase.ERROR);
+        } finally {
+            server.getContext().getImportTaskStore().remove(taskId);
+        }
+    }
+
+    private void onTarItem(
+        @NonNull String name,
+        int mode,
+        long size,
+        @NonNull InputStream content
+    ) throws Exception{
+        var disk = importedManifest.findDisk(name);
+        if (disk != null) {
+            var target = uniqueFile(targetDir, disk.name);
+            copyEntry(content, target, size, placedDisks.size(), totalItems);
+            disk.target = target;
+            placedDisks.add(disk);
+            return;
+        }
+        var boot = importedManifest.findBoot(name);
+        if (boot != null) {
+            var dir = new File(targetDir, "boot");
+            if (!dir.exists() && !dir.mkdirs())
+                throw new IOException(fmt("Cannot create %s", dir));
+            var target = uniqueFile(dir, boot.name);
+            var count = placedDisks.size() + placedBoots.size();
+            copyEntry(content, target, size, count, totalItems);
+            boot.target = target;
+            placedBoots.add(boot);
+        }
+    }
+
+    private void unpack() throws Exception {
+        if (!targetDir.exists() && !targetDir.mkdirs())
+            throw new IOException(fmt("Cannot create target dir: %s", targetDir));
+        try (
+            var in = new FileInputStream(srcPath);
+            var pkg = PackageInput.open(in)
+        ) {
+            importedManifest = pkg.manifest;
+            totalItems = importedManifest.disks.size() + importedManifest.boots.size();
+            var data = DataItem.newObject();
+            data.set("done", 0);
+            data.set("total", totalItems);
+            emit(data, Phase.PACK);
+            var tar = new TarReader(pkg.data);
+            tar.forEach(this::onTarItem);
+            var buf = new byte[BUFFER];
+            //noinspection StatementWithEmptyBody
+            while (pkg.data.read(buf) >= 0);
+            pkg.validateDataConsumed();
+        }
+        var vm = new VMConfig(importedManifest.vm.toJson());
+        vm.setId(UUID.randomUUID());
+        remapDiskPaths(vm, placedDisks);
+        remapBootPaths(vm, placedBoots);
+        importedVM = vm;
+    }
+
+    @NonNull
+    private JSONArray importNetworks(
+        @NonNull VMConfig vm,
+        @NonNull List<NetworkConfig> configs
+    ) throws Exception {
+        var refs = new HashMap<String, String>();
+        var created = new JSONArray();
+        if (networkMode.equals("skip")) {
+            remapNetworks(vm, refs);
+            return created;
+        }
+        var store = server.getContext().getNetworks();
+        for (var source : configs) {
+            var ref = source.item.optString("pkg_network_ref", "");
+            if (ref.isEmpty()) continue;
+            if (networkMode.equals("existing")) {
+                var existing = store.findByName(source.getName());
+                if (existing != null) refs.put(ref, existing.getId().toString());
+                continue;
+            }
+            var cfg = new NetworkConfig(source.toJson());
+            cfg.item.remove("pkg_network_ref");
+            cfg.setId(UUID.randomUUID());
+            cfg.setName(uniqueNetworkName(cfg.getName()));
+            makeBridgeNameUnique(cfg);
+            var id = store.createNetwork(cfg);
+            if (id == null || id.isEmpty()) continue;
+            refs.put(ref, id);
+            created.put(cfg.toJson());
+        }
+        remapNetworks(vm, refs);
+        return created;
+    }
+
+    private void remapNetworks(
+        @NonNull VMConfig vm,
+        @NonNull HashMap<String, String> refs
+    ) {
+        var nets = vm.item.opt("networks", null);
+        if (nets == null || !nets.is(DataItem.Type.ARRAY)) return;
+        for (var nic : nets.asArray()) {
+            if (!nic.is(DataItem.Type.OBJECT)) continue;
+            var ref = nic.optString("pkg_network_ref", "");
+            nic.remove("pkg_network_ref");
+            var id = refs.get(ref);
+            if (id == null || id.isEmpty()) nic.remove("network_id");
+            else nic.set("network_id", id);
+        }
+    }
+
+    @NonNull
+    private String uniqueNetworkName(@NonNull String name) {
+        var store = server.getContext().getNetworks();
+        if (store.findByName(name) == null) return name;
+        int i = 1;
+        while (store.findByName(fmt("%s_%d", name, i)) != null) i++;
+        return fmt("%s_%d", name, i);
+    }
+
+    private void makeBridgeNameUnique(@NonNull NetworkConfig cfg) {
+        var bridge = cfg.getBridgeName();
+        if (bridge == null || bridge.isEmpty()) return;
+        if (isBridgeNameUnique(bridge)) return;
+        int i = 1;
+        while (!isBridgeNameUnique(fmt("%s%d", bridge, i))) i++;
+        cfg.setBridgeName(fmt("%s%d", bridge, i));
+    }
+
+    private boolean isBridgeNameUnique(@NonNull String bridgeName) {
+        var unique = new AtomicBoolean(true);
+        server.getContext().getNetworks().forEach((id, net) -> {
+            if (bridgeName.equals(net.getBridgeName())) unique.set(false);
+        });
+        return unique.get();
+    }
+
+    private void copyEntry(
+        @NonNull InputStream in,
+        @NonNull File out,
+        long size,
+        int doneItems,
+        int totalItems
+    ) throws IOException {
+        var data = DataItem.newObject();
+        data.set("done", doneItems);
+        data.set("total", totalItems);
+        data.set("file", basename(out.getPath()));
+        data.set("bytes_done", 0);
+        data.set("bytes_total", size);
+        emit(data, Phase.PACK);
+        try (var os = new FileOutputStream(out)) {
+            var buf = new byte[BUFFER];
+            long rem = size;
+            long written = 0;
+            long lastEmit = System.currentTimeMillis();
+            while (rem > 0) {
+                int toRead = (int) Math.min(buf.length, rem);
+                int n = in.read(buf, 0, toRead);
+                if (n <= 0) throw new IOException(fmt(
+                    "entry %s: short read", out.getName()
+                ));
+                os.write(buf, 0, n);
+                rem -= n;
+                written += n;
+                var now = System.currentTimeMillis();
+                if (now - lastEmit >= PROGRESS_INTERVAL_MS) {
+                    data.set("bytes_done", written);
+                    emit(data, Phase.PACK);
+                    lastEmit = now;
+                }
+            }
+        }
+        data.set("done", doneItems + 1);
+        data.set("bytes_done", size);
+        emit(data, Phase.PACK);
+    }
+
+    @NonNull
+    private String uniqueVMName(@NonNull String name) {
+        var store = server.getContext().getVMs();
+        if (store.findByName(name) == null) return name;
+        int i = 1;
+        while (store.findByName(fmt("%s (%d)", name, i)) != null) i++;
+        return fmt("%s (%d)", name, i);
+    }
+
+    private void emit(@NonNull DataItem item, @NonNull Phase phase) {
+        try {
+            var data = item.toJson();
+            data.put("event", "vm_import_status");
+            data.put("task_id", taskId.toString());
+            data.put("phase", phase.name().toLowerCase());
+            var ev = new JSONObject();
+            ev.put("type", "event");
+            ev.put("data", data);
+            server.broadcastEvent(ev);
+        } catch (Exception e) {
+            Log.w(TAG, fmt("Failed to emit import event for %s", taskId), e);
+        }
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/vm/pkg/VMImportUtils.java b/app/src/main/java/cn/classfun/droidvm/daemon/vm/pkg/VMImportUtils.java
new file mode 100644
index 000000000..4f47f12a3
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/vm/pkg/VMImportUtils.java
@@ -0,0 +1,67 @@
+package cn.classfun.droidvm.daemon.vm.pkg;
+
+import static java.util.Objects.requireNonNull;
+import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
+
+import androidx.annotation.NonNull;
+
+import java.io.File;
+import java.util.ArrayList;
+import java.util.HashMap;
+
+import cn.classfun.droidvm.lib.pkg.BootFile;
+import cn.classfun.droidvm.lib.pkg.DiskEntry;
+import cn.classfun.droidvm.lib.store.base.DataItem;
+import cn.classfun.droidvm.lib.store.vm.BootConfig;
+import cn.classfun.droidvm.lib.store.vm.VMConfig;
+
+public final class VMImportUtils {
+    private VMImportUtils() {
+    }
+
+    public static void remapDiskPaths(
+        @NonNull VMConfig vm,
+        @NonNull ArrayList<DiskEntry> placed
+    ) {
+        var disks = DataItem.newArray();
+        for (var disk : placed) {
+            if (disk.target == null || disk.ref == null) continue;
+            var item = DataItem.newObject();
+            item.set("path", disk.target.getPath());
+            item.set("readonly", disk.ref.readonly);
+            item.set("bus", disk.ref.bus);
+            disks.append(item);
+        }
+        vm.item.set("disks", disks);
+    }
+
+    public static void remapBootPaths(
+        @NonNull VMConfig vm,
+        @NonNull ArrayList<BootFile> placed
+    ) {
+        var byKind = new HashMap<String, String>();
+        for (var boot : placed)
+            byKind.put(boot.kind, boot.target.getPath());
+        var boot = BootConfig.of(vm);
+        if (byKind.containsKey("uefi"))
+            boot.setUefiFirmware(requireNonNull(byKind.get("uefi")));
+        if (byKind.containsKey("kernel"))
+            boot.setKernel(requireNonNull(byKind.get("kernel")));
+        if (byKind.containsKey("initrd"))
+            boot.setInitrd(requireNonNull(byKind.get("initrd")));
+    }
+
+    @NonNull
+    public static File uniqueFile(
+        @NonNull File dir,
+        @NonNull String name
+    ) {
+        var dot = name.lastIndexOf('.');
+        String stem = dot > 0 ? name.substring(0, dot) : name;
+        String ext = dot > 0 ? name.substring(dot) : "";
+        var f = new File(dir, name);
+        int i = 1;
+        while (f.exists()) f = new File(dir, fmt("%s_%d%s", stem, i++, ext));
+        return f;
+    }
+}

From dd6a447f2c3778fa4a792e2846bc9252b1327e08 Mon Sep 17 00:00:00 2001
From: BigfootACA <bigfoot@classfun.cn>
Date: Tue, 7 Jul 2026 15:40:28 +0800
Subject: [PATCH 114/182] ui: add VMPkgExportActivity and VMPkgImportActivity

Signed-off-by: BigfootACA <bigfoot@classfun.cn>
---
 app/src/main/AndroidManifest.xml              |  27 +
 .../ui/main/home/MainHomeFragment.java        |   3 +-
 .../droidvm/ui/main/vm/MainVMFragment.java    |   3 +
 .../vm/pkg/exports/VMPkgExportActivity.java   | 520 +++++++++++++++++
 .../pkg/exports/VMPkgExportDiskAdapter.java   |  89 +++
 .../ui/vm/pkg/imports/NetworkImportMode.java  |  28 +
 .../vm/pkg/imports/VMPkgImportActivity.java   | 532 ++++++++++++++++++
 .../pkg/imports/VMPkgImportDiskAdapter.java   |  50 ++
 .../imports/VMPkgImportNetworkAdapter.java    |  50 ++
 .../main/res/layout/activity_vmpkg_export.xml | 219 +++++++
 .../main/res/layout/activity_vmpkg_import.xml | 248 ++++++++
 app/src/main/res/menu/menu_vm_actions.xml     |   5 +
 app/src/main/res/values-zh-rCN/strings.xml    |  56 ++
 app/src/main/res/values-zh-rTW/strings.xml    |  56 ++
 app/src/main/res/values/colors.xml            |   2 +
 app/src/main/res/values/strings.xml           |  56 ++
 16 files changed, 1943 insertions(+), 1 deletion(-)
 create mode 100644 app/src/main/java/cn/classfun/droidvm/ui/vm/pkg/exports/VMPkgExportActivity.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/ui/vm/pkg/exports/VMPkgExportDiskAdapter.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/ui/vm/pkg/imports/NetworkImportMode.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/ui/vm/pkg/imports/VMPkgImportActivity.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/ui/vm/pkg/imports/VMPkgImportDiskAdapter.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/ui/vm/pkg/imports/VMPkgImportNetworkAdapter.java
 create mode 100644 app/src/main/res/layout/activity_vmpkg_export.xml
 create mode 100644 app/src/main/res/layout/activity_vmpkg_import.xml

diff --git a/app/src/main/AndroidManifest.xml b/app/src/main/AndroidManifest.xml
index 65cd1970c..195153a99 100644
--- a/app/src/main/AndroidManifest.xml
+++ b/app/src/main/AndroidManifest.xml
@@ -93,6 +93,33 @@
             android:theme="@style/Theme.DroidVM.NoActionBar.Dark"
             android:windowSoftInputMode="adjustResize" />
 
+        <activity
+            android:name=".ui.vm.pkg.exports.VMPkgExportActivity"
+            android:configChanges="orientation|screenSize|keyboardHidden|screenLayout|smallestScreenSize"
+            android:exported="false"
+            android:theme="@style/Theme.DroidVM.NoActionBar"
+            android:windowSoftInputMode="adjustResize" />
+
+        <activity
+            android:name=".ui.vm.pkg.imports.VMPkgImportActivity"
+            android:label="@string/vmpkg_import_title"
+            android:configChanges="orientation|screenSize|keyboardHidden|screenLayout|smallestScreenSize"
+            android:exported="true"
+            android:theme="@style/Theme.DroidVM.NoActionBar"
+            android:windowSoftInputMode="adjustResize">
+            <intent-filter android:label="@string/vmpkg_import_title">
+                <action android:name="android.intent.action.VIEW" />
+                <category android:name="android.intent.category.DEFAULT" />
+                <category android:name="android.intent.category.BROWSABLE" />
+                <data android:mimeType="*/*" />
+            </intent-filter>
+            <intent-filter android:label="@string/vmpkg_import_title">
+                <action android:name="android.intent.action.SEND" />
+                <category android:name="android.intent.category.DEFAULT" />
+                <data android:mimeType="*/*" />
+            </intent-filter>
+        </activity>
+
         <activity
             android:name=".ui.disk.lxc.ImportLxcImagesActivity"
             android:configChanges="orientation|screenSize|keyboardHidden|screenLayout|smallestScreenSize"
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/main/home/MainHomeFragment.java b/app/src/main/java/cn/classfun/droidvm/ui/main/home/MainHomeFragment.java
index 47e1261df..4eaedd551 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/main/home/MainHomeFragment.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/main/home/MainHomeFragment.java
@@ -44,6 +44,7 @@
 import cn.classfun.droidvm.ui.update.UpdateDialog;
 import cn.classfun.droidvm.ui.update.UpdateInfo;
 import cn.classfun.droidvm.ui.update.VersionCheck;
+import cn.classfun.droidvm.ui.vm.pkg.imports.VMPkgImportActivity;
 
 public final class MainHomeFragment extends MainBaseFragment
     implements DaemonConnection.EventListener {
@@ -342,7 +343,7 @@ private void openWizard() {
     }
 
     private void openImport() {
-        Toast.makeText(requireContext(), R.string.unimplement, LENGTH_SHORT).show();
+        startActivity(new Intent(requireContext(), VMPkgImportActivity.class));
     }
 
     private void openLink(String url) {
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/main/vm/MainVMFragment.java b/app/src/main/java/cn/classfun/droidvm/ui/main/vm/MainVMFragment.java
index e6b56d4e8..0d79233c3 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/main/vm/MainVMFragment.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/main/vm/MainVMFragment.java
@@ -31,6 +31,7 @@
 import cn.classfun.droidvm.ui.vm.console.VMConsoleRouter;
 import cn.classfun.droidvm.ui.vm.edit.VMEditActivity;
 import cn.classfun.droidvm.ui.vm.info.VMInfoActivity;
+import cn.classfun.droidvm.ui.vm.pkg.exports.VMPkgExportActivity;
 
 public final class MainVMFragment
     extends MainStatefulFragment<VMConfig, VMStore, VMAdapter, VMState>
@@ -102,6 +103,8 @@ protected boolean onMenuClicked(@NonNull VMConfig config, @NonNull MenuItem item
             startActivity(intent);
         } else if (id == R.id.menu_vm_delete) {
             confirmDeleteVM(config);
+        } else if (id == R.id.menu_vm_export) {
+            startActivity(VMPkgExportActivity.createIntent(ctx, config.getId()));
         }
         return true;
     }
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/pkg/exports/VMPkgExportActivity.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/pkg/exports/VMPkgExportActivity.java
new file mode 100644
index 000000000..0a88f7568
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/pkg/exports/VMPkgExportActivity.java
@@ -0,0 +1,520 @@
+package cn.classfun.droidvm.ui.vm.pkg.exports;
+
+import static android.view.View.GONE;
+import static android.view.View.VISIBLE;
+import static android.widget.Toast.LENGTH_LONG;
+import static cn.classfun.droidvm.lib.pkg.PackageConstants.EXTENSION;
+import static cn.classfun.droidvm.lib.size.SizeUtils.formatSize;
+import static cn.classfun.droidvm.lib.store.enums.Enums.optEnum;
+import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
+import static cn.classfun.droidvm.lib.utils.StringUtils.resolveUriPath;
+import static cn.classfun.droidvm.lib.utils.ThreadUtils.runOnPool;
+
+import android.annotation.SuppressLint;
+import android.app.Activity;
+import android.content.Context;
+import android.content.Intent;
+import android.net.Uri;
+import android.os.Bundle;
+import android.os.Handler;
+import android.os.Looper;
+import android.widget.TextView;
+import android.widget.Toast;
+
+import androidx.activity.OnBackPressedCallback;
+import androidx.activity.result.ActivityResultLauncher;
+import androidx.activity.result.contract.ActivityResultContracts.CreateDocument;
+import androidx.annotation.NonNull;
+import androidx.annotation.Nullable;
+import androidx.annotation.StringRes;
+import androidx.appcompat.app.AppCompatActivity;
+import androidx.recyclerview.widget.LinearLayoutManager;
+import androidx.recyclerview.widget.RecyclerView;
+
+import com.google.android.material.appbar.CollapsingToolbarLayout;
+import com.google.android.material.appbar.MaterialToolbar;
+import com.google.android.material.floatingactionbutton.ExtendedFloatingActionButton;
+import com.google.android.material.progressindicator.LinearProgressIndicator;
+
+import org.json.JSONArray;
+import org.json.JSONObject;
+
+import java.io.File;
+import java.util.UUID;
+
+import cn.classfun.droidvm.R;
+import cn.classfun.droidvm.lib.archive.Compression;
+import cn.classfun.droidvm.lib.daemon.DaemonConnection;
+import cn.classfun.droidvm.lib.pkg.DiskRef;
+import cn.classfun.droidvm.lib.pkg.Phase;
+import cn.classfun.droidvm.lib.pkg.PackageConstants;
+import cn.classfun.droidvm.lib.store.base.DataItem;
+import cn.classfun.droidvm.lib.store.vm.VMConfig;
+import cn.classfun.droidvm.lib.store.vm.VMStore;
+import cn.classfun.droidvm.lib.utils.ShareUtils;
+import cn.classfun.droidvm.ui.widgets.container.CollapsibleContainer;
+import cn.classfun.droidvm.ui.widgets.row.ChooseRowWidget;
+
+public final class VMPkgExportActivity extends AppCompatActivity
+    implements DaemonConnection.EventListener {
+    public static final String EXTRA_VM_ID = "vm_id";
+    private final Handler mainHandler = new Handler(Looper.getMainLooper());
+    private CollapsingToolbarLayout collapsingToolbar;
+    private CollapsibleContainer ccDisks;
+    private CollapsibleContainer ccOptions;
+    private MaterialToolbar toolbar;
+    private RecyclerView containerDisks;
+    private TextView tvVMName;
+    private TextView tvVMDetail;
+    private TextView tvNoDisks;
+    private TextView tvDiskSummary;
+    private ChooseRowWidget chooseCompression;
+    private TextView tvCompressionDesc;
+    private LinearProgressIndicator pbRun;
+    private TextView tvStatus;
+    private TextView tvFileName;
+    private TextView tvProgressDetail;
+    private ExtendedFloatingActionButton fabCreate;
+    private ExtendedFloatingActionButton fabShare;
+    private VMConfig config;
+    private Compression compression = PackageConstants.DEFAULT_COMPRESSION;
+    private VMPkgExportDiskAdapter adapter;
+    private String pendingTaskId = null;
+    private String path = null;
+    private boolean exporting = false;
+    private Phase phase = Phase.IDLE;
+    private final ActivityResultLauncher<String> createDocLauncher =
+        registerForActivityResult(new CreateDocument(PackageConstants.MIME), this::onDocPicked);
+
+    @NonNull
+    public static Intent createIntent(@NonNull Context ctx, @NonNull UUID vmId) {
+        var intent = new Intent(ctx, VMPkgExportActivity.class);
+        intent.putExtra(EXTRA_VM_ID, vmId.toString());
+        return intent;
+    }
+
+    @Override
+    protected void onCreate(@Nullable Bundle savedInstanceState) {
+        super.onCreate(savedInstanceState);
+        setContentView(R.layout.activity_vmpkg_export);
+        collapsingToolbar = findViewById(R.id.collapsing_toolbar);
+        ccDisks = findViewById(R.id.cc_disks);
+        ccOptions = findViewById(R.id.cc_options);
+        toolbar = findViewById(R.id.toolbar);
+        tvVMName = findViewById(R.id.tv_vm_name);
+        tvVMDetail = findViewById(R.id.tv_vm_detail);
+        containerDisks = findViewById(R.id.container_disks);
+        tvNoDisks = findViewById(R.id.tv_no_disks);
+        tvDiskSummary = findViewById(R.id.tv_disk_summary);
+        chooseCompression = findViewById(R.id.choose_compression);
+        tvCompressionDesc = findViewById(R.id.tv_compression_desc);
+        pbRun = findViewById(R.id.pb_run);
+        tvStatus = findViewById(R.id.tv_status);
+        tvFileName = findViewById(R.id.tv_filename);
+        tvProgressDetail = findViewById(R.id.tv_progress_detail);
+        fabCreate = findViewById(R.id.fab_create);
+        fabShare = findViewById(R.id.fab_share);
+        initialize();
+    }
+
+    private void initialize() {
+        var store = new VMStore();
+        store.load(this);
+        var id = getIntent().getStringExtra(EXTRA_VM_ID);
+        if (id == null) {
+            finish();
+            return;
+        }
+        var vmId = UUID.fromString(id);
+        config = store.findById(vmId);
+        if (config == null) {
+            finish();
+            return;
+        }
+        collapsingToolbar.setTitle(getString(R.string.vmpkg_export_title));
+        tvVMName.setText(config.getName());
+        tvVMDetail.setText(getString(
+            R.string.vm_item_info,
+            config.item.optLong("cpu_count", 0),
+            config.item.optLong("memory_mb", 0)
+        ));
+        adapter = new VMPkgExportDiskAdapter();
+        adapter.setOnSelectionChanged(this::updateDiskSummary);
+        containerDisks.setLayoutManager(new LinearLayoutManager(this));
+        containerDisks.setAdapter(adapter);
+        bindDisks();
+        bindCompression();
+        var handler = new VMPkgExportOnBackPressedCallback();
+        toolbar.setNavigationOnClickListener(v -> handler.handleOnBackPressed());
+        getOnBackPressedDispatcher().addCallback(this, handler);
+        fabCreate.setOnClickListener(v -> startPicker());
+        fabShare.setOnClickListener(v -> startShare());
+    }
+
+    private class VMPkgExportOnBackPressedCallback extends OnBackPressedCallback {
+        public VMPkgExportOnBackPressedCallback() {
+            super(true);
+        }
+
+        @Override
+        public void handleOnBackPressed() {
+            if (!exporting) finish();
+        }
+    }
+
+    private void startShare() {
+        if (path == null) return;
+        var f = new File(path);
+        if (!f.exists()) return;
+        ShareUtils.shareFile(
+            this, f, PackageConstants.MIME,
+            getString(R.string.vmpkg_export_share_title),
+            msg -> showToast(R.string.vmpkg_export_failed, msg)
+        );
+    }
+
+    private void bindCompression() {
+        chooseCompression.configure(
+            Compression.class,
+            PackageConstants.DEFAULT_COMPRESSION
+        );
+        chooseCompression.setOnValueChangedListener(
+            this::updateCompressionDesc
+        );
+        updateCompressionDesc();
+    }
+
+    private void updateCompressionDesc() {
+        compression = chooseCompression.getSelectedItem();
+        tvCompressionDesc.setText(compression.desc);
+    }
+
+    @SuppressLint("NotifyDataSetChanged")
+    private void bindDisks() {
+        adapter.disks.clear();
+        adapter.selected.clear();
+        var arr = config.item.opt("disks", DataItem.newArray());
+        for (int i = 0; i < arr.size(); i++) {
+            var e = arr.get(i);
+            if (!e.is(DataItem.Type.OBJECT)) continue;
+            var d = new DiskRef(i, e);
+            if (d.path == null || d.path.isEmpty()) continue;
+            adapter.disks.add(d);
+            if (!d.isCDROM()) adapter.selected.add(i);
+        }
+        adapter.notifyDataSetChanged();
+        tvNoDisks.setVisibility(adapter.disks.isEmpty() ? VISIBLE : GONE);
+        updateDiskSummary();
+    }
+
+    private void updateDiskSummary() {
+        int selectedCount = 0;
+        long totalSize = 0;
+        for (var disk : adapter.disks) {
+            if (!adapter.selected.contains(disk.index)) continue;
+            selectedCount++;
+            if (disk.path != null && !disk.path.isEmpty())
+                totalSize += new File(disk.path).length();
+        }
+        tvDiskSummary.setText(getString(
+            R.string.vmpkg_export_disk_summary,
+            selectedCount,
+            adapter.disks.size(),
+            formatSize(totalSize)
+        ));
+    }
+
+    @Override
+    protected void onStart() {
+        super.onStart();
+        DaemonConnection.getInstance().addListener(this);
+    }
+
+    @Override
+    protected void onStop() {
+        super.onStop();
+        DaemonConnection.getInstance().removeListener(this);
+    }
+
+    private void startPicker() {
+        if (config == null || exporting) return;
+        if (!validateSelectedDisks()) return;
+        var inst = DaemonConnection.getInstance();
+        DaemonConnection.OnError onError = e ->
+            onExportFailure(e.getMessage());
+        DaemonConnection.OnUnsuccessful onUnsuccessful = resp ->
+            onExportFailure(resp.optString("message", "request failed"));
+        DaemonConnection.OnResponse onStatus = resp -> mainHandler.post(() -> {
+            if (resp.optString("state").equals("stopped")) {
+                launchCreateDocument();
+            } else showToast(
+                R.string.vmpkg_export_failed,
+                getString(R.string.vmpkg_export_vm_must_stop)
+            );
+        });
+        DaemonConnection.OnResponse onExists = resp -> {
+            if (!resp.optBoolean("exists", false)) {
+                mainHandler.post(this::launchCreateDocument);
+                return;
+            }
+            inst.buildRequest("vm_status")
+                .put("vm_id", config.getId())
+                .onResponse(onStatus)
+                .onUnsuccessful(onUnsuccessful)
+                .onError(onError)
+                .invoke();
+        };
+        inst.buildRequest("vm_exists")
+            .put("vm_id", config.getId())
+            .onResponse(onExists)
+            .onUnsuccessful(onUnsuccessful)
+            .onError(onError)
+            .invoke();
+    }
+
+    private void launchCreateDocument() {
+        var base = config.getName();
+        var sb = new StringBuilder();
+        for (int i = 0; i < base.length(); i++) {
+            char ch = base.charAt(i);
+            if ("\\/:*?\"<>|".indexOf(ch) >= 0 || ch < 0x20) ch = '_';
+            sb.append(ch);
+        }
+        if (sb.length() == 0) sb.append("vm");
+        var name = sb.toString();
+        var ext = fmt(".%s", EXTENSION);
+        if (!name.endsWith(ext)) name += ext;
+        createDocLauncher.launch(name);
+    }
+
+    private boolean validateSelectedDisks() {
+        for (var disk : adapter.disks) {
+            if (!adapter.selected.contains(disk.index)) continue;
+            if (disk.path == null || disk.path.isEmpty() || !new File(disk.path).isFile()) {
+                showToast(R.string.vmpkg_export_failed, getString(
+                    R.string.vmpkg_export_disk_missing,
+                    disk.path == null ? "" : disk.path
+                ));
+                return false;
+            }
+        }
+        return true;
+    }
+
+    private void onDocPicked(@Nullable Uri uri) {
+        if (uri == null || exporting) return;
+        runOnPool(() -> startExport(uri));
+    }
+
+    private void startExport(@NonNull Uri uri) {
+        var destPath = resolveUriPath(this, uri);
+        if (destPath == null || destPath.isEmpty()) {
+            showToast(R.string.vmpkg_export_failed_path_resolve);
+            return;
+        }
+        this.path = destPath;
+        var diskIndices = new JSONArray();
+        for (int i = 0; i < adapter.disks.size(); i++) {
+            var idx = adapter.disks.get(i).index;
+            if (adapter.selected.contains(idx)) diskIndices.put(idx);
+        }
+        var inst = DaemonConnection.getInstance();
+        mainHandler.post(() -> {
+            setExporting(true);
+            fabCreate.setVisibility(GONE);
+            fabShare.setVisibility(GONE);
+            tvStatus.setText(R.string.vmpkg_export_running);
+            tvProgressDetail.setText("");
+            tvFileName.setText("");
+            ccDisks.setVisibility(GONE);
+            ccOptions.setVisibility(GONE);
+        });
+        phase = Phase.IDLE;
+        DaemonConnection.OnError err = e -> onExportFailure(e.getMessage());
+        DaemonConnection.OnUnsuccessful f = resp ->
+            onExportFailure(resp.optString("message", "request failed"));
+        DaemonConnection.OnResponse onExport = resp -> {
+            var tid = resp.optString("task_id");
+            if (!tid.isEmpty()) pendingTaskId = tid;
+            else onExportFailure(getString(R.string.vmpkg_export_failed_no_task));
+        };
+        DaemonConnection.OnResponse onCreateModify = resp ->
+            inst.buildRequest("vm_export")
+            .put("vm_id", config.getId())
+            .put("disks", diskIndices)
+            .put("dest_path", destPath)
+            .put("compression", compression)
+            .onResponse(onExport)
+            .onUnsuccessful(f)
+            .onError(err)
+            .invoke();
+        DaemonConnection.OnResponse onExists = resp ->
+            inst.buildRequest(resp.optBoolean("exists", false) ? "vm_modify" : "vm_create")
+            .put("config", config)
+            .onResponse(onCreateModify)
+            .onUnsuccessful(f)
+            .onError(err)
+            .invoke();
+        inst.buildRequest("vm_exists")
+            .put("vm_id", config.getId())
+            .onResponse(onExists)
+            .onUnsuccessful(f)
+            .onError(err)
+            .invoke();
+    }
+
+    @Override
+    public void onDaemonEvent(JSONObject msg) {
+        switch (phase) {
+            case DONE:
+            case ERROR:
+                return;
+        }
+        if (msg == null) return;
+        if (!msg.optString("type").equals("event")) return;
+        var data = msg.optJSONObject("data");
+        if (data == null) return;
+        if (!data.optString("event").equals("vm_export_status")) return;
+        var tid = data.optString("task_id");
+        if (pendingTaskId == null || !pendingTaskId.equals(tid)) return;
+        var phase = optEnum(data, "phase", Phase.SCAN);
+        var done = data.optInt("done");
+        var total = data.optInt("total");
+        var bytesDone = data.optLong("bytes_done");
+        var bytesTotal = data.optLong("bytes_total");
+        var file = data.optString("file");
+        var message = data.optString("message");
+        mainHandler.post(() -> onProgress(
+            phase, done, total, bytesDone, bytesTotal, file, message
+        ));
+    }
+
+    @Override
+    public void onDaemonConnected() {
+    }
+
+    @Override
+    public void onDaemonDisconnected() {
+        switch (phase) {
+            case IDLE:
+            case DONE:
+            case ERROR:
+                return;
+        }
+        onExportFailure(getString(
+            R.string.vmpkg_export_failed,
+            "daemon dead"
+        ));
+        pendingTaskId = null;
+    }
+
+    private void onProgress(
+        @NonNull Phase phase,
+        int done,
+        int total,
+        long bytesDone,
+        long bytesTotal,
+        @NonNull String file,
+        @NonNull String message
+    ) {
+        this.phase = phase;
+        switch (phase) {
+            case SCAN:
+                tvStatus.setText(R.string.vmpkg_export_scan);
+                applyProgress(done, total, bytesDone, bytesTotal);
+                break;
+            case PACK:
+                tvStatus.setText(R.string.vmpkg_export_pack);
+                applyProgress(done, total, bytesDone, bytesTotal);
+                applyProgressDetail(file, bytesDone, bytesTotal);
+                break;
+            case DONE:
+                pbRun.setVisibility(GONE);
+                tvProgressDetail.setText("");
+                tvFileName.setText("");
+                fabShare.setVisibility(VISIBLE);
+                tvStatus.setText(getString(
+                    R.string.vmpkg_export_success_path, path
+                ));
+                showToast(R.string.vmpkg_export_success);
+                pendingTaskId = null;
+                setExporting(false);
+                setResult(Activity.RESULT_OK);
+                break;
+            case ERROR:
+                onExportFailure(message);
+                pendingTaskId = null;
+                break;
+            default:
+                break;
+        }
+    }
+
+    private void onExportFailure(@Nullable String msg) {
+        if (msg == null) msg = getString(R.string.vmpkg_export_failed_no_task);
+        var finalMsg = msg;
+        mainHandler.post(() -> {
+            pbRun.setVisibility(GONE);
+            setExporting(false);
+            tvProgressDetail.setText("");
+            tvFileName.setText("");
+            fabCreate.setVisibility(VISIBLE);
+            tvStatus.setText(getString(R.string.vmpkg_export_failed, finalMsg));
+            ccDisks.setVisibility(VISIBLE);
+            ccOptions.setVisibility(VISIBLE);
+            showToast(R.string.vmpkg_export_failed, finalMsg);
+        });
+    }
+
+    private void setExporting(boolean exporting) {
+        this.exporting = exporting;
+        pbRun.setVisibility(exporting ? VISIBLE : GONE);
+        pbRun.setIndeterminate(exporting);
+        chooseCompression.setEnabled(!exporting);
+        containerDisks.setEnabled(!exporting);
+        adapter.setEnabled(!exporting);
+    }
+
+    private void applyProgressDetail(
+        @NonNull String file,
+        long bytesDone,
+        long bytesTotal
+    ) {
+        if (file.isEmpty() || bytesTotal <= 0 || bytesDone < 0) {
+            tvProgressDetail.setText("");
+            return;
+        }
+        var done = Math.min(bytesDone, bytesTotal);
+        tvProgressDetail.setText(getString(
+            R.string.vmpkg_export_progress_detail,
+            formatSize(done),
+            formatSize(bytesTotal),
+            done * 100 / bytesTotal
+        ));
+        tvFileName.setText(file);
+    }
+
+    private void showToast(@StringRes int id, Object... args) {
+        mainHandler.post(() -> Toast.makeText(
+            this, getString(id, args), LENGTH_LONG
+        ).show());
+    }
+
+    private void applyProgress(int done, int total, long bytesDone, long bytesTotal) {
+        if (total <= 0) return;
+        pbRun.setIndeterminate(false);
+        if (bytesTotal > 0 && bytesDone >= 0) {
+            int unit = 1000;
+            long clampedBytes = Math.min(bytesDone, bytesTotal);
+            int scaled = (int) ((clampedBytes * unit) / bytesTotal);
+            pbRun.setMax(total * unit);
+            pbRun.setProgress(Math.min(
+                done * unit + scaled,
+                total * unit
+            ));
+        } else {
+            pbRun.setMax(total);
+            pbRun.setProgress(done);
+        }
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/pkg/exports/VMPkgExportDiskAdapter.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/pkg/exports/VMPkgExportDiskAdapter.java
new file mode 100644
index 000000000..11d6522ce
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/pkg/exports/VMPkgExportDiskAdapter.java
@@ -0,0 +1,89 @@
+package cn.classfun.droidvm.ui.vm.pkg.exports;
+
+import static android.view.View.GONE;
+import static android.view.View.VISIBLE;
+import static cn.classfun.droidvm.lib.utils.StringUtils.basename;
+import static cn.classfun.droidvm.lib.utils.StringUtils.dirname;
+
+import android.annotation.SuppressLint;
+import android.view.LayoutInflater;
+import android.view.ViewGroup;
+
+import androidx.annotation.NonNull;
+import androidx.appcompat.content.res.AppCompatResources;
+import androidx.recyclerview.widget.RecyclerView;
+
+import com.google.android.material.color.MaterialColors;
+
+import java.util.ArrayList;
+import java.util.HashSet;
+import java.util.List;
+import java.util.Set;
+
+import cn.classfun.droidvm.R;
+import cn.classfun.droidvm.lib.pkg.DiskRef;
+import cn.classfun.droidvm.ui.main.base.BaseViewHolder;
+
+public final class VMPkgExportDiskAdapter extends RecyclerView.Adapter<BaseViewHolder> {
+    public final List<DiskRef> disks = new ArrayList<>();
+    public final Set<Integer> selected = new HashSet<>();
+    private boolean enabled = true;
+    private Runnable onSelectionChanged;
+
+    public void setOnSelectionChanged(@NonNull Runnable onSelectionChanged) {
+        this.onSelectionChanged = onSelectionChanged;
+    }
+
+    @SuppressLint("NotifyDataSetChanged")
+    public void setEnabled(boolean enabled) {
+        if (this.enabled == enabled) return;
+        this.enabled = enabled;
+        notifyDataSetChanged();
+    }
+
+    @NonNull
+    @Override
+    public BaseViewHolder onCreateViewHolder(@NonNull ViewGroup parent, int viewType) {
+        var inf = LayoutInflater.from(parent.getContext());
+        var v = inf.inflate(R.layout.item_main_list, parent, false);
+        return new BaseViewHolder(v);
+    }
+
+    @Override
+    public void onBindViewHolder(@NonNull BaseViewHolder h, int position) {
+        var disk = disks.get(position);
+        var ctx = h.itemView.getContext();
+        var isSel = selected.contains(disk.index);
+        h.itemName.setText(basename(disk.path));
+        h.itemInfo.setText(dirname(disk.path));
+        h.itemInfo.setVisibility(VISIBLE);
+        h.itemState.setVisibility(GONE);
+        h.itemAction.setVisibility(GONE);
+        h.itemIcon.setVisibility(VISIBLE);
+        var icon = disk.isCDROM() ? R.drawable.ic_cdrom : R.drawable.ic_nav_disk;
+        h.itemIcon.setImageDrawable(AppCompatResources.getDrawable(ctx, icon));
+        var bg = MaterialColors.getColor(h.itemCard, isSel
+            ? com.google.android.material.R.attr.colorSurfaceVariant
+            : com.google.android.material.R.attr.colorSurface);
+        h.itemCard.setCardBackgroundColor(bg);
+        h.itemCard.setEnabled(enabled);
+        h.itemCard.setAlpha(enabled ? 1f : 0.64f);
+        h.itemCard.setOnClickListener(enabled ? v -> toggleSelection(disk.index) : null);
+    }
+
+    @SuppressLint("NotifyDataSetChanged")
+    private void toggleSelection(int index) {
+        if (selected.contains(index)) {
+            selected.remove(index);
+        } else {
+            selected.add(index);
+        }
+        if (onSelectionChanged != null) onSelectionChanged.run();
+        notifyDataSetChanged();
+    }
+
+    @Override
+    public int getItemCount() {
+        return disks.size();
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/pkg/imports/NetworkImportMode.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/pkg/imports/NetworkImportMode.java
new file mode 100644
index 000000000..4b89116ef
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/pkg/imports/NetworkImportMode.java
@@ -0,0 +1,28 @@
+package cn.classfun.droidvm.ui.vm.pkg.imports;
+
+import androidx.annotation.NonNull;
+import androidx.annotation.StringRes;
+
+import cn.classfun.droidvm.R;
+import cn.classfun.droidvm.lib.store.enums.StringEnum;
+
+public enum NetworkImportMode implements StringEnum {
+    SKIP(R.string.vmpkg_import_network_skip, "skip"),
+    EXISTING(R.string.vmpkg_import_network_existing, "existing"),
+    AUTO(R.string.vmpkg_import_network_auto, "auto");
+
+    @StringRes
+    private final int stringId;
+    @NonNull
+    final String id;
+
+    NetworkImportMode(@StringRes int stringId, @NonNull String id) {
+        this.stringId = stringId;
+        this.id = id;
+    }
+
+    @Override
+    public int getStringId() {
+        return stringId;
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/pkg/imports/VMPkgImportActivity.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/pkg/imports/VMPkgImportActivity.java
new file mode 100644
index 000000000..e3283c07b
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/pkg/imports/VMPkgImportActivity.java
@@ -0,0 +1,532 @@
+package cn.classfun.droidvm.ui.vm.pkg.imports;
+
+import static android.view.View.GONE;
+import static android.view.View.VISIBLE;
+import static android.widget.Toast.LENGTH_LONG;
+import static android.widget.Toast.LENGTH_SHORT;
+import static cn.classfun.droidvm.lib.size.SizeUtils.formatSize;
+import static cn.classfun.droidvm.lib.store.enums.Enums.optEnum;
+import static cn.classfun.droidvm.lib.utils.FileUtils.externalPath;
+import static cn.classfun.droidvm.lib.utils.StringUtils.pathJoin;
+import static cn.classfun.droidvm.lib.utils.StringUtils.resolveUriPath;
+import static cn.classfun.droidvm.lib.utils.ThreadUtils.runOnPool;
+
+import android.annotation.SuppressLint;
+import android.app.Activity;
+import android.content.Intent;
+import android.net.Uri;
+import android.os.Bundle;
+import android.os.Handler;
+import android.os.Looper;
+import android.os.storage.StorageManager;
+import android.view.View;
+import android.widget.TextView;
+import android.widget.Toast;
+
+import androidx.activity.result.ActivityResultLauncher;
+import androidx.activity.result.contract.ActivityResultContracts.OpenDocument;
+import androidx.annotation.NonNull;
+import androidx.annotation.Nullable;
+import androidx.appcompat.app.AppCompatActivity;
+import androidx.recyclerview.widget.LinearLayoutManager;
+import androidx.recyclerview.widget.RecyclerView;
+
+import com.google.android.material.appbar.CollapsingToolbarLayout;
+import com.google.android.material.appbar.MaterialToolbar;
+import com.google.android.material.button.MaterialButton;
+import com.google.android.material.floatingactionbutton.ExtendedFloatingActionButton;
+import com.google.android.material.progressindicator.LinearProgressIndicator;
+
+import org.json.JSONArray;
+import org.json.JSONObject;
+
+import java.io.File;
+import java.io.IOException;
+import java.text.DateFormat;
+import java.util.Date;
+
+import cn.classfun.droidvm.R;
+import cn.classfun.droidvm.lib.daemon.DaemonConnection;
+import cn.classfun.droidvm.lib.pkg.PackageConstants;
+import cn.classfun.droidvm.lib.pkg.PackageInput;
+import cn.classfun.droidvm.lib.pkg.PackageManifest;
+import cn.classfun.droidvm.lib.pkg.Phase;
+import cn.classfun.droidvm.lib.store.disk.DiskConfig;
+import cn.classfun.droidvm.lib.store.disk.DiskStore;
+import cn.classfun.droidvm.lib.store.network.NetworkConfig;
+import cn.classfun.droidvm.lib.store.network.NetworkStore;
+import cn.classfun.droidvm.lib.store.vm.VMConfig;
+import cn.classfun.droidvm.lib.store.vm.VMStore;
+import cn.classfun.droidvm.ui.vm.info.VMInfoActivity;
+import cn.classfun.droidvm.ui.widgets.container.CollapsibleContainer;
+import cn.classfun.droidvm.ui.widgets.row.ChooseRowWidget;
+import cn.classfun.droidvm.ui.widgets.row.TextInputRowWidget;
+
+public final class VMPkgImportActivity extends AppCompatActivity
+    implements DaemonConnection.EventListener {
+    private final Handler mainHandler = new Handler(Looper.getMainLooper());
+    private final String defaultPath = pathJoin(externalPath(), "DroidVM");
+    private CollapsingToolbarLayout collapsingToolbar;
+    private MaterialToolbar toolbar;
+    private MaterialButton btnPick;
+    private ExtendedFloatingActionButton btnImport;
+    private LinearProgressIndicator pbRun;
+    private TextView tvError;
+    private TextView tvVmName;
+    private TextView tvVmDetail;
+    private TextView tvPackageMeta;
+    private TextView tvDiskSummary;
+    private TextInputRowWidget inputTarget;
+    private CollapsibleContainer ccNetworks;
+    private RecyclerView containerDisks;
+    private RecyclerView containerNetworks;
+    private ChooseRowWidget chooseNetworkMode;
+    private TextView tvStatus;
+    private TextView tvFile;
+    private TextView tvProgressDetail;
+    private View groupSummary;
+    private Uri pickedUri;
+    private PackageManifest preview;
+    private VMPkgImportDiskAdapter diskAdapter;
+    private VMPkgImportNetworkAdapter networkAdapter;
+    private String pendingTaskId = null;
+    private boolean importing = false;
+    private NetworkImportMode networkMode = NetworkImportMode.AUTO;
+    private final ActivityResultLauncher<String[]> openDocLauncher =
+        registerForActivityResult(new OpenDocument(), this::onDocPicked);
+
+    @Override
+    protected void onCreate(@Nullable Bundle savedInstanceState) {
+        super.onCreate(savedInstanceState);
+        setContentView(R.layout.activity_vmpkg_import);
+        collapsingToolbar = findViewById(R.id.collapsing_toolbar);
+        toolbar = findViewById(R.id.toolbar);
+        btnPick = findViewById(R.id.btn_pick);
+        btnImport = findViewById(R.id.btn_import);
+        pbRun = findViewById(R.id.pb_run);
+        tvError = findViewById(R.id.tv_error);
+        tvVmName = findViewById(R.id.tv_vm_name);
+        tvVmDetail = findViewById(R.id.tv_vm_detail);
+        tvPackageMeta = findViewById(R.id.tv_package_meta);
+        tvDiskSummary = findViewById(R.id.tv_disk_summary);
+        inputTarget = findViewById(R.id.input_target);
+        ccNetworks = findViewById(R.id.cc_networks);
+        containerDisks = findViewById(R.id.container_disks);
+        containerNetworks = findViewById(R.id.container_networks);
+        chooseNetworkMode = findViewById(R.id.choose_network_mode);
+        tvStatus = findViewById(R.id.tv_status);
+        tvFile = findViewById(R.id.tv_file);
+        tvProgressDetail = findViewById(R.id.tv_progress_detail);
+        groupSummary = findViewById(R.id.group_summary);
+        initialize();
+    }
+
+    private void initialize() {
+        collapsingToolbar.setTitle(getString(R.string.vmpkg_import_title));
+        toolbar.setNavigationOnClickListener(v -> {
+            if (!importing) finish();
+        });
+        btnImport.setOnClickListener(v -> doImport());
+        diskAdapter = new VMPkgImportDiskAdapter();
+        networkAdapter = new VMPkgImportNetworkAdapter();
+        containerDisks.setLayoutManager(new LinearLayoutManager(this));
+        containerDisks.setAdapter(diskAdapter);
+        containerNetworks.setLayoutManager(new LinearLayoutManager(this));
+        containerNetworks.setAdapter(networkAdapter);
+        inputTarget.setText(defaultPath);
+        chooseNetworkMode.configure(NetworkImportMode.class, NetworkImportMode.AUTO);
+        chooseNetworkMode.setOnValueChangedListener(() ->
+            networkMode = chooseNetworkMode.getSelectedItem());
+        var filter = new String[]{PackageConstants.MIME, "*/*"};
+        btnPick.setOnClickListener(v -> {
+            if (!importing) openDocLauncher.launch(filter);
+        });
+        var intentUri = resolveIntentUri(getIntent());
+        if (intentUri != null) {
+            onDocPicked(intentUri);
+        } else {
+            mainHandler.postDelayed(() -> openDocLauncher.launch(filter), 50);
+        }
+    }
+
+    @Override
+    protected void onNewIntent(@NonNull Intent intent) {
+        super.onNewIntent(intent);
+        setIntent(intent);
+        var uri = resolveIntentUri(intent);
+        if (uri != null) onDocPicked(uri);
+    }
+
+    @Nullable
+    private Uri resolveIntentUri(@Nullable Intent intent) {
+        if (intent == null) return null;
+        var data = intent.getData();
+        if (data != null) return data;
+        var stream = intent.getParcelableExtra(Intent.EXTRA_STREAM, Uri.class);
+        if (stream != null) return stream;
+        var clip = intent.getClipData();
+        if (clip == null || clip.getItemCount() <= 0) return null;
+        for (int i = 0; i < clip.getItemCount(); i++) {
+            var uri = clip.getItemAt(i).getUri();
+            if (uri != null) return uri;
+        }
+        return null;
+    }
+
+    @Override
+    protected void onStart() {
+        super.onStart();
+        DaemonConnection.getInstance().addListener(this);
+    }
+
+    @Override
+    protected void onStop() {
+        super.onStop();
+        DaemonConnection.getInstance().removeListener(this);
+    }
+
+    private void onDocPicked(@Nullable Uri uri) {
+        if (uri == null || importing) return;
+        pickedUri = uri;
+        tvError.setVisibility(GONE);
+        groupSummary.setVisibility(GONE);
+        btnImport.setEnabled(false);
+        tvStatus.setText(R.string.vmpkg_import_reading);
+        runOnPool(() -> {
+            try (var is = getContentResolver().openInputStream(uri)) {
+                if (is == null) throw new RuntimeException("Cannot open file");
+                try (var input = PackageInput.open(is)) {
+                    preview = input.manifest;
+                }
+                mainHandler.post(this::showPreview);
+            } catch (Exception e) {
+                mainHandler.post(() -> showError(getString(R.string.vmpkg_import_invalid, e.getMessage())));
+            }
+        });
+    }
+
+    @SuppressLint("NotifyDataSetChanged")
+    private void showPreview() {
+        if (preview == null) return;
+        tvVmName.setText(preview.vm.getName());
+        tvVmDetail.setText(getString(
+            R.string.vm_item_info,
+            preview.vm.item.optLong("cpu_count", 0),
+            preview.vm.item.optLong("memory_mb", 0)
+        ));
+        var df = DateFormat.getDateTimeInstance(DateFormat.MEDIUM, DateFormat.SHORT);
+        var appVer = preview.appVersion.isEmpty() ? "DroidVM" : preview.appVersion;
+        var dateStr = preview.createdAt > 0 ? df.format(new Date(preview.createdAt)) : "-";
+        var meta = getString(
+            R.string.vmpkg_import_meta,
+            appVer, dateStr,
+            preview.manifestVersion
+        );
+        tvPackageMeta.setText(meta.trim());
+        long totalSize = 0;
+        diskAdapter.disks.clear();
+        for (var d : preview.disks) {
+            totalSize += d.size;
+            diskAdapter.disks.add(d);
+        }
+        diskAdapter.notifyDataSetChanged();
+        networkAdapter.networks.clear();
+        networkAdapter.networks.addAll(preview.networks);
+        networkAdapter.notifyDataSetChanged();
+        var hasNetworks = !preview.networks.isEmpty();
+        ccNetworks.setVisibility(hasNetworks ? VISIBLE : GONE);
+        chooseNetworkMode.setVisibility(hasNetworks ? VISIBLE : GONE);
+        if (inputTarget.getText().trim().isEmpty())
+            inputTarget.setText(defaultPath);
+        tvDiskSummary.setText(getString(
+            R.string.vmpkg_import_disk_summary,
+            preview.disks.size(),
+            formatSize(totalSize)
+        ));
+        tvStatus.setText("");
+        btnPick.setVisibility(GONE);
+        groupSummary.setVisibility(VISIBLE);
+        btnImport.setVisibility(VISIBLE);
+        btnImport.setEnabled(true);
+    }
+
+    private void doImport() {
+        if (pickedUri == null || preview == null || importing) return;
+        var srcPath = resolveUriPath(this, pickedUri);
+        if (srcPath == null || srcPath.isEmpty()) {
+            showError(getString(
+                R.string.vmpkg_import_failed,
+                getString(R.string.vmpkg_export_failed_path_resolve)
+            ));
+            return;
+        }
+        try {
+            ensureTargetSpace(importRequiredBytes(), targetFolder());
+        } catch (IOException e) {
+            showError(getString(R.string.vmpkg_import_failed, e.getMessage()));
+            return;
+        }
+        setImporting(true);
+        tvError.setVisibility(GONE);
+        tvStatus.setText(R.string.vmpkg_import_running);
+        tvFile.setText("");
+        tvProgressDetail.setText("");
+        var conn = DaemonConnection.getInstance();
+        conn.buildRequest("vm_import")
+            .put("src_path", srcPath)
+            .put("target_dir", targetFolder().getPath())
+            .put("network_mode", networkMode.id)
+            .onResponse(resp -> {
+                var tid = resp.optString("task_id", "");
+                if (!tid.isEmpty()) pendingTaskId = tid;
+                else onImportFailure(getString(R.string.vmpkg_export_failed_no_task));
+            })
+            .onUnsuccessful(resp -> onImportFailure(resp.optString("message", "request failed")))
+            .onError(e -> onImportFailure(e.getMessage()))
+            .invoke();
+    }
+
+    @Override
+    public void onDaemonEvent(JSONObject msg) {
+        if (msg == null || !msg.optString("type", "").equals("event")) return;
+        var data = msg.optJSONObject("data");
+        if (data == null || !data.optString("event", "").equals("vm_import_status")) return;
+        var tid = data.optString("task_id", "");
+        if (pendingTaskId == null || !pendingTaskId.equals(tid)) return;
+        var phase = optEnum(data, "phase", Phase.SCAN);
+        var done = data.optInt("done", 0);
+        var total = data.optInt("total", 0);
+        var file = data.optString("file", "");
+        var bytesDone = data.optLong("bytes_done", -1);
+        var bytesTotal = data.optLong("bytes_total", -1);
+        var message = data.optString("message", "");
+        var vmId = data.optString("vm_id", "");
+        var disks = data.optJSONArray("disks");
+        var networks = data.optJSONArray("networks");
+        mainHandler.post(() -> onProgress(
+            phase, done, total, file,
+            bytesDone, bytesTotal,
+            message, vmId, disks, networks
+        ));
+    }
+
+    @Override
+    public void onDaemonConnected() {
+    }
+
+    @Override
+    public void onDaemonDisconnected() {
+    }
+
+    private void onProgress(
+        @NonNull Phase phase,
+        int done,
+        int total,
+        @NonNull String file,
+        long bytesDone,
+        long bytesTotal,
+        @NonNull String message,
+        @NonNull String vmId,
+        @Nullable JSONArray disks,
+        @Nullable JSONArray networks
+    ) {
+        switch (phase) {
+            case PACK:
+                tvStatus.setText(R.string.vmpkg_import_running);
+                applyProgress(done, total, bytesDone, bytesTotal);
+                applyProgressDetail(file, bytesDone, bytesTotal);
+                break;
+            case DONE:
+                if (vmId.isEmpty()) {
+                    onImportFailure("missing vm_id");
+                    return;
+                }
+                finishImport(
+                    vmId,
+                    disks == null ? new JSONArray() : disks,
+                    networks == null ? new JSONArray() : networks
+                );
+                break;
+            case ERROR:
+                onImportFailure(message);
+                break;
+            default:
+                break;
+        }
+    }
+
+    private void finishImport(
+        @NonNull String vmId,
+        @NonNull JSONArray disks,
+        @NonNull JSONArray networks
+    ) {
+        DaemonConnection.getInstance().buildRequest("vm_get")
+            .put("vm_id", vmId)
+            .onResponse(resp -> persistImport(resp.optJSONObject("data"), disks, networks))
+            .onUnsuccessful(resp -> onImportFailure(resp.optString("message", "request failed")))
+            .onError(e -> onImportFailure(e.getMessage()))
+            .invoke();
+    }
+
+    private void persistImport(
+        @Nullable JSONObject vmJson,
+        @NonNull JSONArray disks,
+        @NonNull JSONArray networks
+    ) {
+        try {
+            if (vmJson == null) throw new IllegalArgumentException("missing VM config");
+            var vm = new VMConfig(vmJson);
+            var vmStore = new VMStore();
+            vmStore.load(this);
+            if (vmStore.findById(vm.getId()) == null) vmStore.add(vm);
+            else vmStore.update(vm);
+            var diskStore = new DiskStore();
+            diskStore.load(this);
+            for (int i = 0; i < disks.length(); i++) {
+                var diskJson = disks.optJSONObject(i);
+                if (diskJson == null) continue;
+                var path = diskJson.optString("path");
+                var file = new File(path);
+                var parent = file.getParent();
+                var name = file.getName();
+                if (path.isEmpty()) {
+                    name = diskJson.optString("name", "");
+                    parent = diskJson.optString("folder", "");
+                    path = pathJoin(parent, name);
+                }
+                if (!path.isEmpty() && diskStore.findByPath(path) != null) continue;
+                var disk = new DiskConfig();
+                disk.setName(name);
+                disk.item.set("folder", parent == null ? "" : parent);
+                diskStore.add(disk);
+            }
+            var networkStore = new NetworkStore();
+            networkStore.load(this);
+            for (int i = 0; i < networks.length(); i++) {
+                var netJson = networks.optJSONObject(i);
+                if (netJson == null) continue;
+                var net = new NetworkConfig(netJson);
+                if (networkStore.findById(net.getId()) == null) networkStore.add(net);
+            }
+            vmStore.save(this);
+            diskStore.save(this);
+            networkStore.save(this);
+            mainHandler.post(() -> {
+                setImporting(false);
+                pendingTaskId = null;
+                tvStatus.setText(getString(R.string.vmpkg_import_success, vm.getName()));
+                Toast.makeText(this, R.string.vmpkg_import_done, LENGTH_SHORT).show();
+                setResult(Activity.RESULT_OK);
+                var intent = new Intent(this, VMInfoActivity.class);
+                intent.putExtra("target_id", vm.getId().toString());
+                startActivity(intent);
+                finish();
+            });
+        } catch (Exception e) {
+            onImportFailure(e.getMessage());
+        }
+    }
+
+    private void onImportFailure(@Nullable String msg) {
+        var message = msg == null ? "Unknown error" : msg;
+        mainHandler.post(() -> {
+            setImporting(false);
+            pendingTaskId = null;
+            tvStatus.setText(getString(R.string.vmpkg_import_failed, message));
+            showError(getString(R.string.vmpkg_import_failed, message));
+        });
+    }
+
+    private void showError(@NonNull String message) {
+        tvError.setText(message);
+        tvError.setVisibility(VISIBLE);
+        Toast.makeText(this, message, LENGTH_LONG).show();
+    }
+
+    private void setImporting(boolean importing) {
+        this.importing = importing;
+        btnPick.setEnabled(!importing);
+        btnImport.setEnabled(!importing && preview != null);
+        chooseNetworkMode.setEnabled(!importing);
+        pbRun.setVisibility(importing ? VISIBLE : GONE);
+        pbRun.setIndeterminate(importing);
+    }
+
+    private void applyProgress(
+        int done,
+        int total,
+        long bytesDone,
+        long bytesTotal
+    ) {
+        if (total <= 0) return;
+        pbRun.setIndeterminate(false);
+        if (bytesTotal > 0 && bytesDone >= 0) {
+            int unit = 1000;
+            long clampedBytes = Math.min(bytesDone, bytesTotal);
+            int scaled = (int) ((clampedBytes * unit) / bytesTotal);
+            pbRun.setMax(total * unit);
+            pbRun.setProgress(Math.min(done * unit + scaled, total * unit));
+        } else {
+            pbRun.setMax(total);
+            pbRun.setProgress(done);
+        }
+    }
+
+    private void applyProgressDetail(
+        @NonNull String file,
+        long bytesDone,
+        long bytesTotal
+    ) {
+        tvFile.setText(file);
+        if (bytesTotal <= 0 || bytesDone < 0) {
+            tvProgressDetail.setText("");
+            return;
+        }
+        var done = Math.min(bytesDone, bytesTotal);
+        tvProgressDetail.setText(getString(
+            R.string.vmpkg_export_progress_detail,
+            formatSize(done),
+            formatSize(bytesTotal),
+            done * 100 / bytesTotal
+        ));
+    }
+
+    @NonNull
+    private File targetFolder() {
+        var path = inputTarget.getText().trim();
+        if (path.isEmpty()) path = defaultPath;
+        return new File(path);
+    }
+
+    private long importRequiredBytes() {
+        long size = 0;
+        if (preview != null) {
+            for (var disk : preview.disks) size += disk.size;
+            for (var boot : preview.boots) size += boot.size;
+        }
+        return size;
+    }
+
+    private void ensureTargetSpace(long required, @NonNull File target) throws IOException {
+        if (required <= 0) return;
+        var parent = target.getParentFile();
+        var spacePath = target.exists() || parent == null ? target : parent;
+        var usable = spacePath.getUsableSpace();
+        if (usable >= required) return;
+        var storage = getSystemService(StorageManager.class);
+        if (storage != null) {
+            var uuid = storage.getUuidForPath(spacePath);
+            var allocatable = storage.getAllocatableBytes(uuid);
+            if (allocatable >= required) {
+                storage.allocateBytes(uuid, required);
+                if (spacePath.getUsableSpace() >= required) return;
+            }
+            usable = Math.max(usable, allocatable);
+        }
+        throw new IOException(getString(
+            R.string.vmpkg_import_no_space,
+            formatSize(required),
+            formatSize(usable)
+        ));
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/pkg/imports/VMPkgImportDiskAdapter.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/pkg/imports/VMPkgImportDiskAdapter.java
new file mode 100644
index 000000000..a7b67fab7
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/pkg/imports/VMPkgImportDiskAdapter.java
@@ -0,0 +1,50 @@
+package cn.classfun.droidvm.ui.vm.pkg.imports;
+
+import static android.view.View.GONE;
+import static android.view.View.VISIBLE;
+import static cn.classfun.droidvm.lib.size.SizeUtils.formatSize;
+
+import android.view.LayoutInflater;
+import android.view.ViewGroup;
+
+import androidx.annotation.NonNull;
+import androidx.appcompat.content.res.AppCompatResources;
+import androidx.recyclerview.widget.RecyclerView;
+
+import java.util.ArrayList;
+import java.util.List;
+
+import cn.classfun.droidvm.R;
+import cn.classfun.droidvm.lib.pkg.DiskEntry;
+import cn.classfun.droidvm.ui.main.base.BaseViewHolder;
+
+public final class VMPkgImportDiskAdapter extends RecyclerView.Adapter<BaseViewHolder> {
+    public final List<DiskEntry> disks = new ArrayList<>();
+
+    @NonNull
+    @Override
+    public BaseViewHolder onCreateViewHolder(@NonNull ViewGroup parent, int viewType) {
+        var inf = LayoutInflater.from(parent.getContext());
+        return new BaseViewHolder(inf.inflate(R.layout.item_main_list, parent, false));
+    }
+
+    @Override
+    public void onBindViewHolder(@NonNull BaseViewHolder h, int position) {
+        var disk = disks.get(position);
+        var ctx = h.itemView.getContext();
+        h.itemName.setText(disk.name);
+        h.itemInfo.setText(formatSize(disk.size));
+        h.itemInfo.setVisibility(VISIBLE);
+        h.itemState.setVisibility(GONE);
+        h.itemAction.setVisibility(GONE);
+        h.itemIcon.setVisibility(VISIBLE);
+        h.itemIcon.setImageDrawable(AppCompatResources.getDrawable(ctx, R.drawable.ic_nav_disk));
+        h.itemCard.setEnabled(false);
+        h.itemCard.setClickable(false);
+    }
+
+    @Override
+    public int getItemCount() {
+        return disks.size();
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/pkg/imports/VMPkgImportNetworkAdapter.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/pkg/imports/VMPkgImportNetworkAdapter.java
new file mode 100644
index 000000000..fc9a8d293
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/pkg/imports/VMPkgImportNetworkAdapter.java
@@ -0,0 +1,50 @@
+package cn.classfun.droidvm.ui.vm.pkg.imports;
+
+import static android.view.View.GONE;
+import static android.view.View.VISIBLE;
+
+import android.view.LayoutInflater;
+import android.view.ViewGroup;
+
+import androidx.annotation.NonNull;
+import androidx.appcompat.content.res.AppCompatResources;
+import androidx.recyclerview.widget.RecyclerView;
+
+import java.util.ArrayList;
+import java.util.List;
+
+import cn.classfun.droidvm.R;
+import cn.classfun.droidvm.lib.store.network.NetworkConfig;
+import cn.classfun.droidvm.ui.main.base.BaseViewHolder;
+
+public final class VMPkgImportNetworkAdapter extends RecyclerView.Adapter<BaseViewHolder> {
+    public final List<NetworkConfig> networks = new ArrayList<>();
+
+    @NonNull
+    @Override
+    public BaseViewHolder onCreateViewHolder(@NonNull ViewGroup parent, int viewType) {
+        var inf = LayoutInflater.from(parent.getContext());
+        return new BaseViewHolder(inf.inflate(R.layout.item_main_list, parent, false));
+    }
+
+    @Override
+    public void onBindViewHolder(@NonNull BaseViewHolder h, int position) {
+        var network = networks.get(position);
+        var ctx = h.itemView.getContext();
+        var bridge = network.getBridgeName();
+        h.itemName.setText(network.getName());
+        h.itemInfo.setText(bridge == null || bridge.isEmpty() ? network.getUplinkMode().key() : bridge);
+        h.itemInfo.setVisibility(VISIBLE);
+        h.itemState.setVisibility(GONE);
+        h.itemAction.setVisibility(GONE);
+        h.itemIcon.setVisibility(VISIBLE);
+        h.itemIcon.setImageDrawable(AppCompatResources.getDrawable(ctx, R.drawable.ic_nav_network));
+        h.itemCard.setEnabled(false);
+        h.itemCard.setClickable(false);
+    }
+
+    @Override
+    public int getItemCount() {
+        return networks.size();
+    }
+}
diff --git a/app/src/main/res/layout/activity_vmpkg_export.xml b/app/src/main/res/layout/activity_vmpkg_export.xml
new file mode 100644
index 000000000..f7a850bdb
--- /dev/null
+++ b/app/src/main/res/layout/activity_vmpkg_export.xml
@@ -0,0 +1,219 @@
+<?xml version="1.0" encoding="utf-8"?>
+<androidx.coordinatorlayout.widget.CoordinatorLayout xmlns:android="http://schemas.android.com/apk/res/android"
+    xmlns:app="http://schemas.android.com/apk/res-auto"
+    xmlns:tools="http://schemas.android.com/tools"
+    android:layout_width="match_parent"
+    android:layout_height="match_parent"
+    android:fitsSystemWindows="true"
+    tools:context=".ui.vm.pkg.exports.VMPkgExportActivity">
+
+    <com.google.android.material.appbar.AppBarLayout
+        android:layout_width="match_parent"
+        android:layout_height="wrap_content"
+        android:fitsSystemWindows="true">
+
+        <com.google.android.material.appbar.CollapsingToolbarLayout
+            android:id="@+id/collapsing_toolbar"
+            style="?attr/collapsingToolbarLayoutMediumStyle"
+            android:layout_width="match_parent"
+            android:layout_height="?attr/collapsingToolbarLayoutMediumSize"
+            app:layout_scrollFlags="scroll|exitUntilCollapsed"
+            app:title="@string/vmpkg_export_title">
+
+            <com.google.android.material.appbar.MaterialToolbar
+                android:id="@+id/toolbar"
+                android:layout_width="match_parent"
+                android:layout_height="?attr/actionBarSize"
+                app:layout_collapseMode="pin"
+                app:navigationIcon="?attr/homeAsUpIndicator" />
+
+        </com.google.android.material.appbar.CollapsingToolbarLayout>
+
+    </com.google.android.material.appbar.AppBarLayout>
+
+    <androidx.core.widget.NestedScrollView
+        android:layout_width="match_parent"
+        android:layout_height="match_parent"
+        app:layout_behavior="@string/appbar_scrolling_view_behavior">
+
+        <LinearLayout
+            android:layout_width="match_parent"
+            android:layout_height="wrap_content"
+            android:orientation="vertical"
+            android:paddingHorizontal="16dp"
+            android:paddingVertical="12dp">
+
+            <com.google.android.material.card.MaterialCardView
+                android:layout_width="match_parent"
+                android:layout_height="wrap_content"
+                app:cardCornerRadius="16dp"
+                app:cardElevation="0dp"
+                app:strokeColor="?attr/colorOutlineVariant"
+                app:strokeWidth="1dp">
+
+                <LinearLayout
+                    android:layout_width="match_parent"
+                    android:layout_height="wrap_content"
+                    android:gravity="center_vertical"
+                    android:orientation="horizontal"
+                    android:padding="16dp">
+
+                    <ImageView
+                        android:layout_width="48dp"
+                        android:layout_height="48dp"
+                        android:contentDescription="@string/vm_icon_desc"
+                        android:src="@drawable/ic_large_server" />
+
+                    <LinearLayout
+                        android:layout_width="0dp"
+                        android:layout_height="wrap_content"
+                        android:layout_marginStart="16dp"
+                        android:layout_weight="1"
+                        android:orientation="vertical">
+
+                        <TextView
+                            android:id="@+id/tv_vm_name"
+                            android:layout_width="wrap_content"
+                            android:layout_height="wrap_content"
+                            android:textSize="18sp"
+                            android:textStyle="bold" />
+
+                        <TextView
+                            android:id="@+id/tv_vm_detail"
+                            android:layout_width="wrap_content"
+                            android:layout_height="wrap_content"
+                            android:layout_marginTop="2dp"
+                            android:textColor="?attr/colorOnSurfaceVariant"
+                            android:textSize="13sp" />
+
+                    </LinearLayout>
+
+                </LinearLayout>
+
+            </com.google.android.material.card.MaterialCardView>
+
+            <cn.classfun.droidvm.ui.widgets.container.CollapsibleContainer
+                android:id="@+id/cc_disks"
+                android:layout_width="match_parent"
+                android:layout_height="wrap_content"
+                android:layout_marginTop="8dp"
+                android:title="@string/vmpkg_export_disk_hint"
+                app:cc_collapsible="false">
+
+                <androidx.recyclerview.widget.RecyclerView
+                    android:id="@+id/container_disks"
+                    android:layout_width="match_parent"
+                    android:layout_height="wrap_content"
+                    android:nestedScrollingEnabled="false"
+                    android:overScrollMode="never" />
+
+                <TextView
+                    android:id="@+id/tv_no_disks"
+                    android:layout_width="match_parent"
+                    android:layout_height="wrap_content"
+                    android:layout_marginTop="4dp"
+                    android:text="@string/vmpkg_export_no_disks"
+                    android:visibility="gone" />
+
+                <TextView
+                    android:id="@+id/tv_disk_summary"
+                    android:layout_width="match_parent"
+                    android:layout_height="wrap_content"
+                    android:layout_marginStart="16dp"
+                    android:layout_marginTop="8dp"
+                    android:layout_marginEnd="16dp"
+                    android:layout_marginBottom="12dp"
+                    android:textAppearance="?attr/textAppearanceBodySmall"
+                    android:textColor="?android:attr/textColorSecondary" />
+
+            </cn.classfun.droidvm.ui.widgets.container.CollapsibleContainer>
+
+            <cn.classfun.droidvm.ui.widgets.container.CollapsibleContainer
+                android:id="@+id/cc_options"
+                android:layout_width="match_parent"
+                android:layout_height="wrap_content"
+                android:layout_marginTop="8dp"
+                android:title="@string/vmpkg_export_other_options"
+                app:cc_collapsible="false">
+
+                <cn.classfun.droidvm.ui.widgets.row.ChooseRowWidget
+                    android:id="@+id/choose_compression"
+                    android:layout_width="match_parent"
+                    android:layout_height="wrap_content"
+                    android:icon="@drawable/ic_compress"
+                    android:text="@string/vmpkg_export_compression_hint" />
+
+                <TextView
+                    android:id="@+id/tv_compression_desc"
+                    android:layout_width="match_parent"
+                    android:layout_height="wrap_content"
+                    android:layout_marginStart="16dp"
+                    android:layout_marginEnd="16dp"
+                    android:layout_marginBottom="12dp"
+                    android:textAppearance="?attr/textAppearanceBodySmall"
+                    android:textColor="?android:attr/textColorSecondary" />
+
+            </cn.classfun.droidvm.ui.widgets.container.CollapsibleContainer>
+
+            <com.google.android.material.progressindicator.LinearProgressIndicator
+                android:id="@+id/pb_run"
+                android:layout_width="match_parent"
+                android:layout_height="wrap_content"
+                android:layout_marginTop="16dp"
+                android:indeterminate="false"
+                android:max="1000"
+                android:visibility="gone"
+                app:trackCornerRadius="2dp"
+                app:trackThickness="6dp" />
+
+            <TextView
+                android:id="@+id/tv_status"
+                android:layout_width="match_parent"
+                android:layout_height="wrap_content"
+                android:layout_marginTop="8dp"
+                android:textAppearance="?attr/textAppearanceBodyMedium" />
+
+            <TextView
+                android:id="@+id/tv_filename"
+                android:layout_width="match_parent"
+                android:layout_height="wrap_content"
+                android:layout_marginTop="4dp"
+                android:textAppearance="?attr/textAppearanceBodySmall"
+                android:textColor="?android:attr/textColorSecondary" />
+
+            <TextView
+                android:id="@+id/tv_progress_detail"
+                android:layout_width="match_parent"
+                android:layout_height="wrap_content"
+                android:layout_marginTop="4dp"
+                android:textAppearance="?attr/textAppearanceBodySmall"
+                android:textColor="?android:attr/textColorSecondary" />
+
+        </LinearLayout>
+
+    </androidx.core.widget.NestedScrollView>
+
+    <com.google.android.material.floatingactionbutton.ExtendedFloatingActionButton
+        android:id="@+id/fab_create"
+        android:layout_width="wrap_content"
+        android:layout_height="wrap_content"
+        android:layout_gravity="bottom|end"
+        android:layout_margin="24dp"
+        android:contentDescription="@string/vmpkg_export_create"
+        android:text="@string/vmpkg_export_create"
+        app:fabSize="normal"
+        app:icon="@drawable/ic_export_to" />
+
+    <com.google.android.material.floatingactionbutton.ExtendedFloatingActionButton
+        android:id="@+id/fab_share"
+        android:layout_width="wrap_content"
+        android:layout_height="wrap_content"
+        android:layout_gravity="bottom|end"
+        android:layout_margin="24dp"
+        android:contentDescription="@string/vmpkg_export_share"
+        android:text="@string/vmpkg_export_share"
+        android:visibility="gone"
+        app:fabSize="normal"
+        app:icon="@drawable/ic_share" />
+
+</androidx.coordinatorlayout.widget.CoordinatorLayout>
diff --git a/app/src/main/res/layout/activity_vmpkg_import.xml b/app/src/main/res/layout/activity_vmpkg_import.xml
new file mode 100644
index 000000000..a6779ba3f
--- /dev/null
+++ b/app/src/main/res/layout/activity_vmpkg_import.xml
@@ -0,0 +1,248 @@
+<?xml version="1.0" encoding="utf-8"?>
+<androidx.coordinatorlayout.widget.CoordinatorLayout xmlns:android="http://schemas.android.com/apk/res/android"
+    xmlns:app="http://schemas.android.com/apk/res-auto"
+    xmlns:tools="http://schemas.android.com/tools"
+    android:layout_width="match_parent"
+    android:layout_height="match_parent"
+    android:fitsSystemWindows="true"
+    tools:context=".ui.vm.pkg.imports.VMPkgImportActivity">
+
+    <com.google.android.material.appbar.AppBarLayout
+        android:layout_width="match_parent"
+        android:layout_height="wrap_content"
+        android:fitsSystemWindows="true">
+
+        <com.google.android.material.appbar.CollapsingToolbarLayout
+            android:id="@+id/collapsing_toolbar"
+            style="?attr/collapsingToolbarLayoutMediumStyle"
+            android:layout_width="match_parent"
+            android:layout_height="?attr/collapsingToolbarLayoutMediumSize"
+            app:layout_scrollFlags="scroll|exitUntilCollapsed"
+            app:title="@string/vmpkg_import_title">
+
+            <com.google.android.material.appbar.MaterialToolbar
+                android:id="@+id/toolbar"
+                android:layout_width="match_parent"
+                android:layout_height="?attr/actionBarSize"
+                app:layout_collapseMode="pin"
+                app:navigationIcon="?attr/homeAsUpIndicator" />
+
+        </com.google.android.material.appbar.CollapsingToolbarLayout>
+
+    </com.google.android.material.appbar.AppBarLayout>
+
+    <androidx.core.widget.NestedScrollView
+        android:layout_width="match_parent"
+        android:layout_height="match_parent"
+        android:clipToPadding="false"
+        android:paddingBottom="96dp"
+        app:layout_behavior="@string/appbar_scrolling_view_behavior">
+
+        <LinearLayout
+            android:layout_width="match_parent"
+            android:layout_height="wrap_content"
+            android:orientation="vertical"
+            android:paddingHorizontal="16dp"
+            android:paddingVertical="12dp">
+
+            <com.google.android.material.button.MaterialButton
+                android:id="@+id/btn_pick"
+                style="?attr/materialButtonOutlinedStyle"
+                android:layout_width="match_parent"
+                android:layout_height="wrap_content"
+                android:text="@string/vmpkg_import_pick" />
+
+            <TextView
+                android:id="@+id/tv_error"
+                android:layout_width="match_parent"
+                android:layout_height="wrap_content"
+                android:layout_marginTop="8dp"
+                android:textAppearance="?attr/textAppearanceBodyMedium"
+                android:textColor="?attr/colorError"
+                android:visibility="gone" />
+
+            <LinearLayout
+                android:id="@+id/group_summary"
+                android:layout_width="match_parent"
+                android:layout_height="wrap_content"
+                android:orientation="vertical"
+                android:visibility="gone">
+
+                <com.google.android.material.card.MaterialCardView
+                    android:layout_width="match_parent"
+                    android:layout_height="wrap_content"
+                    android:layout_marginTop="8dp"
+                    app:cardCornerRadius="16dp"
+                    app:cardElevation="0dp"
+                    app:strokeColor="?attr/colorOutlineVariant"
+                    app:strokeWidth="1dp">
+
+                    <LinearLayout
+                        android:layout_width="match_parent"
+                        android:layout_height="wrap_content"
+                        android:gravity="center_vertical"
+                        android:orientation="horizontal"
+                        android:padding="16dp">
+
+                        <ImageView
+                            android:layout_width="48dp"
+                            android:layout_height="48dp"
+                            android:contentDescription="@string/vm_icon_desc"
+                            android:src="@drawable/ic_large_server" />
+
+                        <LinearLayout
+                            android:layout_width="0dp"
+                            android:layout_height="wrap_content"
+                            android:layout_marginStart="16dp"
+                            android:layout_weight="1"
+                            android:orientation="vertical">
+
+                            <TextView
+                                android:id="@+id/tv_vm_name"
+                                android:layout_width="wrap_content"
+                                android:layout_height="wrap_content"
+                                android:textSize="18sp"
+                                android:textStyle="bold" />
+
+                            <TextView
+                                android:id="@+id/tv_vm_detail"
+                                android:layout_width="wrap_content"
+                                android:layout_height="wrap_content"
+                                android:layout_marginTop="2dp"
+                                android:textColor="?attr/colorOnSurfaceVariant"
+                                android:textSize="13sp" />
+
+                        </LinearLayout>
+
+                    </LinearLayout>
+
+                </com.google.android.material.card.MaterialCardView>
+
+                <TextView
+                    android:id="@+id/tv_package_meta"
+                    android:layout_width="match_parent"
+                    android:layout_height="wrap_content"
+                    android:layout_marginStart="16dp"
+                    android:layout_marginTop="8dp"
+                    android:layout_marginEnd="16dp"
+                    android:textAppearance="?attr/textAppearanceBodySmall"
+                    android:textColor="?android:attr/textColorSecondary" />
+
+                <cn.classfun.droidvm.ui.widgets.container.CollapsibleContainer
+                    android:id="@+id/cc_disks"
+                    android:layout_width="match_parent"
+                    android:layout_height="wrap_content"
+                    android:layout_marginTop="8dp"
+                    android:title="@string/vmpkg_import_disks"
+                    app:cc_collapsible="false">
+
+                    <androidx.recyclerview.widget.RecyclerView
+                        android:id="@+id/container_disks"
+                        android:layout_width="match_parent"
+                        android:layout_height="wrap_content"
+                        android:nestedScrollingEnabled="false"
+                        android:overScrollMode="never" />
+
+                    <TextView
+                        android:id="@+id/tv_disk_summary"
+                        android:layout_width="match_parent"
+                        android:layout_height="wrap_content"
+                        android:layout_marginStart="16dp"
+                        android:layout_marginTop="8dp"
+                        android:layout_marginEnd="16dp"
+                        android:layout_marginBottom="12dp"
+                        android:textAppearance="?attr/textAppearanceBodySmall"
+                        android:textColor="?android:attr/textColorSecondary" />
+
+                </cn.classfun.droidvm.ui.widgets.container.CollapsibleContainer>
+
+                <cn.classfun.droidvm.ui.widgets.container.CollapsibleContainer
+                    android:id="@+id/cc_networks"
+                    android:layout_width="match_parent"
+                    android:layout_height="wrap_content"
+                    android:layout_marginTop="8dp"
+                    android:title="@string/vmpkg_import_networks"
+                    app:cc_collapsible="false">
+
+                    <androidx.recyclerview.widget.RecyclerView
+                        android:id="@+id/container_networks"
+                        android:layout_width="match_parent"
+                        android:layout_height="wrap_content"
+                        android:nestedScrollingEnabled="false"
+                        android:overScrollMode="never" />
+
+                    <cn.classfun.droidvm.ui.widgets.row.ChooseRowWidget
+                        android:id="@+id/choose_network_mode"
+                        android:layout_width="match_parent"
+                        android:layout_height="wrap_content"
+                        android:layout_marginTop="4dp"
+                        android:layout_marginBottom="8dp"
+                        android:icon="@drawable/ic_nav_network"
+                        android:text="@string/vmpkg_import_network_mode" />
+
+                </cn.classfun.droidvm.ui.widgets.container.CollapsibleContainer>
+
+                <cn.classfun.droidvm.ui.widgets.row.TextInputRowWidget
+                    android:id="@+id/input_target"
+                    android:layout_width="match_parent"
+                    android:layout_height="wrap_content"
+                    android:layout_marginTop="12dp"
+                    android:hint="@string/vmpkg_import_target_folder"
+                    android:icon="@drawable/ic_folder"
+                    android:inputType="text" />
+
+            </LinearLayout>
+
+            <com.google.android.material.progressindicator.LinearProgressIndicator
+                android:id="@+id/pb_run"
+                android:layout_width="match_parent"
+                android:layout_height="wrap_content"
+                android:layout_marginTop="16dp"
+                android:indeterminate="true"
+                android:visibility="gone"
+                app:trackCornerRadius="2dp"
+                app:trackThickness="6dp" />
+
+            <TextView
+                android:id="@+id/tv_status"
+                android:layout_width="match_parent"
+                android:layout_height="wrap_content"
+                android:layout_marginTop="8dp"
+                android:textAppearance="?attr/textAppearanceBodyMedium" />
+
+            <TextView
+                android:id="@+id/tv_file"
+                android:layout_width="match_parent"
+                android:layout_height="wrap_content"
+                android:layout_marginTop="4dp"
+                android:ellipsize="middle"
+                android:maxLines="1"
+                android:textAppearance="?attr/textAppearanceBodySmall"
+                android:textColor="?android:attr/textColorSecondary" />
+
+            <TextView
+                android:id="@+id/tv_progress_detail"
+                android:layout_width="match_parent"
+                android:layout_height="wrap_content"
+                android:layout_marginTop="2dp"
+                android:textAppearance="?attr/textAppearanceBodySmall"
+                android:textColor="?android:attr/textColorSecondary" />
+
+        </LinearLayout>
+
+    </androidx.core.widget.NestedScrollView>
+
+    <com.google.android.material.floatingactionbutton.ExtendedFloatingActionButton
+        android:id="@+id/btn_import"
+        android:layout_width="wrap_content"
+        android:layout_height="wrap_content"
+        android:layout_gravity="bottom|end"
+        android:layout_margin="24dp"
+        android:contentDescription="@string/vmpkg_import_do"
+        android:enabled="false"
+        android:text="@string/vmpkg_import_do"
+        android:visibility="gone"
+        app:fabSize="normal"
+        app:icon="@drawable/ic_import" />
+
+</androidx.coordinatorlayout.widget.CoordinatorLayout>
diff --git a/app/src/main/res/menu/menu_vm_actions.xml b/app/src/main/res/menu/menu_vm_actions.xml
index 3c8836317..e4e6826f9 100644
--- a/app/src/main/res/menu/menu_vm_actions.xml
+++ b/app/src/main/res/menu/menu_vm_actions.xml
@@ -6,6 +6,11 @@
         android:icon="@drawable/ic_edit"
         android:title="@string/vm_edit" />
 
+    <item
+        android:id="@+id/menu_vm_export"
+        android:icon="@drawable/ic_export_to"
+        android:title="@string/vm_export_pkg" />
+
     <item
         android:id="@+id/menu_vm_delete"
         android:icon="@drawable/ic_delete"
diff --git a/app/src/main/res/values-zh-rCN/strings.xml b/app/src/main/res/values-zh-rCN/strings.xml
index 90fd075f8..477f2f46d 100644
--- a/app/src/main/res/values-zh-rCN/strings.xml
+++ b/app/src/main/res/values-zh-rCN/strings.xml
@@ -1032,4 +1032,60 @@
     <string name="hugepage_save_pool_size">保存</string>
     <string name="hugepage_stat_pool_used">已使用: %1$d (%2$s)</string>
     <string name="hugepage_view_processes">显示占用</string>
+
+    <string name="vm_export_pkg">导出为包</string>
+    <string name="vmpkg_export_title">导出虚拟机</string>
+    <string name="vmpkg_export_disk_hint">要包含的磁盘</string>
+    <string name="vmpkg_export_no_disks">此虚拟机没有挂载磁盘。</string>
+    <string name="vmpkg_export_disk_summary">已选 %1$d/%2$d，总计 %3$s</string>
+    <string name="vmpkg_export_create">创建包</string>
+    <string name="vmpkg_export_other_options">其它选项</string>
+    <string name="vmpkg_export_compression_hint">压缩方式</string>
+    <string name="vmpkg_export_compression_none">无</string>
+    <string name="vmpkg_export_compression_gzip">Gzip (Deflate)</string>
+    <string name="vmpkg_export_compression_xz">XZ (LZMA2)</string>
+    <string name="vmpkg_export_compression_zstd">Zstandard (ZSTD)</string>
+    <string name="vmpkg_export_compression_gzip_desc">Gzip 压缩速度快、CPU 占用低，但生成的包体积较大。</string>
+    <string name="vmpkg_export_compression_xz_desc">XZ (LZMA2) 压缩速度最慢、CPU 占用高，但生成的包体积最小。</string>
+    <string name="vmpkg_export_compression_zstd_desc">Zstandard 综合表现最佳：压缩快且压缩比良好。</string>
+    <string name="vmpkg_export_running">正在提交至守护进程\u2026</string>
+    <string name="vmpkg_export_scan">正在扫描磁盘\u2026</string>
+    <string name="vmpkg_export_pack">正在打包磁盘\u2026</string>
+    <string name="vmpkg_export_progress_detail">%1$s / %2$s %3$d%%</string>
+    <string name="vmpkg_export_success">包已创建</string>
+    <string name="vmpkg_export_success_path">包已创建：%1$s</string>
+    <string name="vmpkg_export_failed">导出失败：%1$s</string>
+    <string name="vmpkg_export_failed_path_resolve">无法解析目标路径</string>
+    <string name="vmpkg_export_failed_no_task">守护进程未返回任务 ID</string>
+    <string name="vmpkg_export_share">分享</string>
+    <string name="vmpkg_export_share_title">分享虚拟机包</string>
+    <string name="vmpkg_package_name">包名称</string>
+    <string name="vmpkg_package_version">包版本</string>
+    <string name="vmpkg_package_comment">注释</string>
+    <string name="vmpkg_export_vm_must_stop">导出前必须先停止虚拟机</string>
+    <string name="vmpkg_export_disk_missing">选中的磁盘不存在：%1$s</string>
+    <string name="vmpkg_import_title">导入虚拟机包</string>
+    <string name="vmpkg_import_pick">选择 .vmpkg 文件</string>
+    <string name="vmpkg_import_do">导入</string>
+    <string name="vmpkg_import_reading">正在读取包\u2026</string>
+    <string name="vmpkg_import_running">正在导入\u2026</string>
+    <string name="vmpkg_import_disks">磁盘</string>
+    <string name="vmpkg_import_networks">网络</string>
+    <string name="vmpkg_import_no_disks">此包中没有磁盘。</string>
+    <string name="vmpkg_import_meta">%1$s | %2$s | manifest v%3$d</string>
+    <string name="vmpkg_import_disk_line">%1$s（%2$s）</string>
+    <string name="vmpkg_import_disk_summary">%1$d 个磁盘，%2$s</string>
+    <string name="vmpkg_import_network_line">网络：%1$s</string>
+    <string name="vmpkg_import_no_networks">此包中没有绑定网络。</string>
+    <string name="vmpkg_import_network_mode">网络导入</string>
+    <string name="vmpkg_import_network_skip">跳过网络</string>
+    <string name="vmpkg_import_network_existing">按名称使用现有网络</string>
+    <string name="vmpkg_import_network_auto">自动创建网络</string>
+    <string name="vmpkg_import_no_space">目标空间不足。需要 %1$s，可用 %2$s。</string>
+    <string name="vmpkg_import_target_folder">导入目录</string>
+    <string name="vmpkg_import_target">磁盘将导入到：\n%1$s</string>
+    <string name="vmpkg_import_success">已导入虚拟机：%1$s</string>
+    <string name="vmpkg_import_done">导入完成</string>
+    <string name="vmpkg_import_failed">导入失败：%1$s</string>
+    <string name="vmpkg_import_invalid">不是有效的 vmpkg：%1$s</string>
 </resources>
diff --git a/app/src/main/res/values-zh-rTW/strings.xml b/app/src/main/res/values-zh-rTW/strings.xml
index cc5b40e81..1f2e25709 100644
--- a/app/src/main/res/values-zh-rTW/strings.xml
+++ b/app/src/main/res/values-zh-rTW/strings.xml
@@ -1032,4 +1032,60 @@
     <string name="log_helper_unsupported_gunyah_message">您的裝置上的 Gunyah 版本過舊（如驍龍 8 Gen 2），請嘗試更新系統或更換較新的裝置。</string>
     <string name="log_helper_unsupported_sandbox_title">沙箱模式不支援</string>
     <string name="log_helper_unsupported_sandbox_message">crosvm的沙箱模式在此平台不可用，請停用沙箱模式。</string>
+
+    <string name="vm_export_pkg">匯出為包</string>
+    <string name="vmpkg_export_title">匯出虛擬機器</string>
+    <string name="vmpkg_export_disk_hint">要包含的磁碟</string>
+    <string name="vmpkg_export_no_disks">此虛擬機器沒有掛載磁碟。</string>
+    <string name="vmpkg_export_disk_summary">已選 %1$d/%2$d，總計 %3$s</string>
+    <string name="vmpkg_export_create">建立包</string>
+    <string name="vmpkg_export_other_options">其它選項</string>
+    <string name="vmpkg_export_compression_hint">壓縮方式</string>
+    <string name="vmpkg_export_compression_none">無</string>
+    <string name="vmpkg_export_compression_gzip">Gzip (Deflate)</string>
+    <string name="vmpkg_export_compression_xz">XZ (LZMA2)</string>
+    <string name="vmpkg_export_compression_zstd">Zstandard (ZSTD)</string>
+    <string name="vmpkg_export_compression_gzip_desc">Gzip 壓縮速度快、CPU 佔用低，但產生的包體積較大。</string>
+    <string name="vmpkg_export_compression_xz_desc">XZ (LZMA2) 壓縮速度最慢、CPU 佔用高，但產生的包體積最小。</string>
+    <string name="vmpkg_export_compression_zstd_desc">Zstandard 綜合表現最佳：壓縮快且壓縮比良好。</string>
+    <string name="vmpkg_export_running">正在提交至守護行程\u2026</string>
+    <string name="vmpkg_export_scan">正在掃描磁碟\u2026</string>
+    <string name="vmpkg_export_pack">正在打包磁碟\u2026</string>
+    <string name="vmpkg_export_progress_detail">%1$s / %2$s %3$d%%</string>
+    <string name="vmpkg_export_success">包已建立</string>
+    <string name="vmpkg_export_success_path">包已建立：%1$s</string>
+    <string name="vmpkg_export_failed">匯出失敗：%1$s</string>
+    <string name="vmpkg_export_failed_path_resolve">無法解析目標路徑</string>
+    <string name="vmpkg_export_failed_no_task">守護行程未傳回工作 ID</string>
+    <string name="vmpkg_export_share">分享</string>
+    <string name="vmpkg_export_share_title">分享虛擬機器包</string>
+    <string name="vmpkg_package_name">包名稱</string>
+    <string name="vmpkg_package_version">包版本</string>
+    <string name="vmpkg_package_comment">註釋</string>
+    <string name="vmpkg_export_vm_must_stop">匯出前必須先停止虛擬機器</string>
+    <string name="vmpkg_export_disk_missing">選中的磁碟不存在：%1$s</string>
+    <string name="vmpkg_import_title">匯入虛擬機器包</string>
+    <string name="vmpkg_import_pick">選擇 .vmpkg 檔案</string>
+    <string name="vmpkg_import_do">匯入</string>
+    <string name="vmpkg_import_reading">正在讀取包\u2026</string>
+    <string name="vmpkg_import_running">正在匯入\u2026</string>
+    <string name="vmpkg_import_disks">磁碟</string>
+    <string name="vmpkg_import_networks">網路</string>
+    <string name="vmpkg_import_no_disks">此包中沒有磁碟。</string>
+    <string name="vmpkg_import_meta">%1$s | %2$s | manifest v%3$d</string>
+    <string name="vmpkg_import_disk_line">%1$s（%2$s）</string>
+    <string name="vmpkg_import_disk_summary">%1$d 個磁碟，%2$s</string>
+    <string name="vmpkg_import_network_line">網路：%1$s</string>
+    <string name="vmpkg_import_no_networks">此包中沒有綁定網路。</string>
+    <string name="vmpkg_import_network_mode">網路匯入</string>
+    <string name="vmpkg_import_network_skip">跳過網路</string>
+    <string name="vmpkg_import_network_existing">按名稱使用現有網路</string>
+    <string name="vmpkg_import_network_auto">自動建立網路</string>
+    <string name="vmpkg_import_no_space">目標空間不足。需要 %1$s，可用 %2$s。</string>
+    <string name="vmpkg_import_target_folder">匯入目錄</string>
+    <string name="vmpkg_import_target">磁碟將匯入到：\n%1$s</string>
+    <string name="vmpkg_import_success">已匯入虛擬機器：%1$s</string>
+    <string name="vmpkg_import_done">匯入完成</string>
+    <string name="vmpkg_import_failed">匯入失敗：%1$s</string>
+    <string name="vmpkg_import_invalid">不是有效的 vmpkg：%1$s</string>
 </resources>
diff --git a/app/src/main/res/values/colors.xml b/app/src/main/res/values/colors.xml
index 665b2beb4..e22a01568 100644
--- a/app/src/main/res/values/colors.xml
+++ b/app/src/main/res/values/colors.xml
@@ -29,4 +29,6 @@
     <!-- Inline supported/unsupported status icons (readable on light and dark). -->
     <color name="status_supported">#FF4CAF50</color>
     <color name="status_unsupported">#FFF44336</color>
+
+    <color name="vmpkg_export_disk_selected">#FF888888</color>
 </resources>
diff --git a/app/src/main/res/values/strings.xml b/app/src/main/res/values/strings.xml
index 8a2f24f09..0f264f433 100644
--- a/app/src/main/res/values/strings.xml
+++ b/app/src/main/res/values/strings.xml
@@ -1069,4 +1069,60 @@
     <string name="log_helper_unsupported_gunyah_message">The Gunyah version on your device is too old (for example, Snapdragon 8 Gen 2). Try updating the system or switching to a newer device.</string>
     <string name="log_helper_unsupported_sandbox_title">Sandbox is not supported</string>
     <string name="log_helper_unsupported_sandbox_message">crosvm\'s sandbox is not available on this platform. Please disable sandbox.</string>
+
+    <string name="vm_export_pkg">Export as package</string>
+    <string name="vmpkg_export_title">Export VM</string>
+    <string name="vmpkg_export_disk_hint">Disks to include</string>
+    <string name="vmpkg_export_no_disks">This VM has no attached disks.</string>
+    <string name="vmpkg_export_disk_summary">Selected %1$d/%2$d, total %3$s</string>
+    <string name="vmpkg_export_create">Create package</string>
+    <string name="vmpkg_export_other_options">Other options</string>
+    <string name="vmpkg_export_compression_hint">Compression</string>
+    <string name="vmpkg_export_compression_none">None</string>
+    <string name="vmpkg_export_compression_gzip">Gzip (Deflate)</string>
+    <string name="vmpkg_export_compression_xz">XZ (LZMA2)</string>
+    <string name="vmpkg_export_compression_zstd">Zstandard (ZSTD)</string>
+    <string name="vmpkg_export_compression_gzip_desc">Gzip is fast with low CPU usage but produces larger archives.</string>
+    <string name="vmpkg_export_compression_xz_desc">XZ (LZMA2) is slowest and CPU-heavy but produces the smallest archives.</string>
+    <string name="vmpkg_export_compression_zstd_desc">Zstandard offers the best balance: fast compression with good ratios.</string>
+    <string name="vmpkg_export_running">Submitting to daemon\u2026</string>
+    <string name="vmpkg_export_scan">Scanning disks\u2026</string>
+    <string name="vmpkg_export_pack">Packaging disks\u2026</string>
+    <string name="vmpkg_export_progress_detail">%1$s / %2$s %3$d%%</string>
+    <string name="vmpkg_export_success">Package created</string>
+    <string name="vmpkg_export_success_path">Package created: %1$s</string>
+    <string name="vmpkg_export_failed">Export failed: %1$s</string>
+    <string name="vmpkg_export_failed_path_resolve">Cannot resolve destination path</string>
+    <string name="vmpkg_export_failed_no_task">Daemon did not return a task id</string>
+    <string name="vmpkg_export_share">Share</string>
+    <string name="vmpkg_export_share_title">Share VM package</string>
+    <string name="vmpkg_package_name">Package name</string>
+    <string name="vmpkg_package_version">Package version</string>
+    <string name="vmpkg_package_comment">Comment</string>
+    <string name="vmpkg_export_vm_must_stop">The VM must be stopped before export</string>
+    <string name="vmpkg_export_disk_missing">Selected disk does not exist: %1$s</string>
+    <string name="vmpkg_import_title">Import VM package</string>
+    <string name="vmpkg_import_pick">Pick .vmpkg file</string>
+    <string name="vmpkg_import_do">Import</string>
+    <string name="vmpkg_import_reading">Reading package\u2026</string>
+    <string name="vmpkg_import_running">Importing\u2026</string>
+    <string name="vmpkg_import_disks">Disks</string>
+    <string name="vmpkg_import_networks">Networks</string>
+    <string name="vmpkg_import_no_disks">No disks in this package.</string>
+    <string name="vmpkg_import_meta">%1$s | %2$s | manifest v%3$d</string>
+    <string name="vmpkg_import_disk_line">%1$s (%2$s)</string>
+    <string name="vmpkg_import_disk_summary">%1$d disks, %2$s</string>
+    <string name="vmpkg_import_network_line">Network: %1$s</string>
+    <string name="vmpkg_import_no_networks">No bound networks in this package.</string>
+    <string name="vmpkg_import_network_mode">Network import</string>
+    <string name="vmpkg_import_network_skip">Skip networks</string>
+    <string name="vmpkg_import_network_existing">Use existing networks by name</string>
+    <string name="vmpkg_import_network_auto">Create networks automatically</string>
+    <string name="vmpkg_import_no_space">Not enough target space. Required %1$s, available %2$s.</string>
+    <string name="vmpkg_import_target_folder">Import folder</string>
+    <string name="vmpkg_import_target">Disks will be imported to:\n%1$s</string>
+    <string name="vmpkg_import_success">Imported VM: %1$s</string>
+    <string name="vmpkg_import_done">Import complete</string>
+    <string name="vmpkg_import_failed">Import failed: %1$s</string>
+    <string name="vmpkg_import_invalid">Not a valid vmpkg: %1$s</string>
 </resources>

From b4ccc68ed4dda03bf330555ad12687a9f89202ff Mon Sep 17 00:00:00 2001
From: BigfootACA <bigfoot@classfun.cn>
Date: Tue, 7 Jul 2026 17:33:54 +0800
Subject: [PATCH 115/182] HugePageActivity: add kernel module unload button

Signed-off-by: BigfootACA <bigfoot@classfun.cn>
---
 .../droidvm/ui/hugepage/HugePageActivity.java | 33 +++++++++++++++++++
 .../droidvm/ui/hugepage/HugePageModel.java    |  5 +++
 app/src/main/res/drawable/ic_addon_remove.xml |  9 +++++
 app/src/main/res/menu/menu_hugepage.xml       | 11 +++++++
 app/src/main/res/values-zh-rCN/strings.xml    |  4 +++
 app/src/main/res/values-zh-rTW/strings.xml    |  4 +++
 app/src/main/res/values/strings.xml           |  4 +++
 7 files changed, 70 insertions(+)
 create mode 100644 app/src/main/res/drawable/ic_addon_remove.xml
 create mode 100644 app/src/main/res/menu/menu_hugepage.xml

diff --git a/app/src/main/java/cn/classfun/droidvm/ui/hugepage/HugePageActivity.java b/app/src/main/java/cn/classfun/droidvm/ui/hugepage/HugePageActivity.java
index f562b72de..4433432ce 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/hugepage/HugePageActivity.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/hugepage/HugePageActivity.java
@@ -9,6 +9,7 @@
 import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
 import static cn.classfun.droidvm.lib.utils.StringUtils.pathJoin;
 import static cn.classfun.droidvm.lib.utils.ThreadUtils.runOnPool;
+import static cn.classfun.droidvm.lib.ui.MaterialMenu.setupToolbarMenu;
 
 import android.content.Context;
 import android.content.Intent;
@@ -146,6 +147,7 @@ protected void onCreate(@Nullable Bundle savedInstanceState) {
     private void initialize() {
         toolbar.setTitle(R.string.hugepage_title);
         toolbar.setNavigationOnClickListener(v -> finish());
+        setupToolbarMenu(toolbar, R.menu.menu_hugepage, this::onMenuItemClicked);
         btnSavePoolSize.setOnClickListener(v -> {
             if (moduleAcquiring) interruptAcquire();
             else savePoolSize();
@@ -703,6 +705,37 @@ private void confirmUnload() {
             .show();
     }
 
+    private boolean onMenuItemClicked(@NonNull android.view.MenuItem item) {
+        if (item.getItemId() == R.id.action_unload_module) {
+            confirmUnloadModule();
+            return true;
+        }
+        return false;
+    }
+
+    private void confirmUnloadModule() {
+        new MaterialAlertDialogBuilder(this)
+            .setTitle(R.string.hugepage_unload_module_title)
+            .setMessage(R.string.hugepage_unload_module_confirm)
+            .setPositiveButton(R.string.hugepage_unload_module, (d, w) -> doUnloadModule())
+            .setNegativeButton(android.R.string.cancel, null)
+            .show();
+    }
+
+    private void doUnloadModule() {
+        btnModuleToggle.setEnabled(false);
+        runOnPool(() -> {
+            stopAcquireAndWait();
+            var res = model.unload();
+            runOnUiThread(() -> {
+                Toast.makeText(this, res.ok()
+                    ? R.string.hugepage_unload_module_done
+                    : R.string.hugepage_unload_failed, LENGTH_SHORT).show();
+                refreshStatus();
+            });
+        });
+    }
+
     private void doDismissCrash() {
         runOnPool(() -> {
             runList("rm", "-f", CRASH_FILE);
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/hugepage/HugePageModel.java b/app/src/main/java/cn/classfun/droidvm/ui/hugepage/HugePageModel.java
index 8d9a92e39..30b7fb4b8 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/hugepage/HugePageModel.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/hugepage/HugePageModel.java
@@ -334,6 +334,11 @@ Result setRuntimeEnabled(boolean on) {
         return collapse(unloadLadder());
     }
 
+    @NonNull
+    Result unload() {
+        return collapse(unloadLadder());
+    }
+
     /**
      * Enable (true) or disable (false) the module for the <b>next boot</b> via the
      * Magisk {@code disable} marker file. Independent of the running module.
diff --git a/app/src/main/res/drawable/ic_addon_remove.xml b/app/src/main/res/drawable/ic_addon_remove.xml
new file mode 100644
index 000000000..7bccaacc7
--- /dev/null
+++ b/app/src/main/res/drawable/ic_addon_remove.xml
@@ -0,0 +1,9 @@
+<vector xmlns:android="http://schemas.android.com/apk/res/android"
+    android:width="24dp"
+    android:height="24dp"
+    android:viewportWidth="24"
+    android:viewportHeight="24">
+    <path
+        android:fillColor="?attr/colorOnSurface"
+        android:pathData="M19 6V5A2 2 0 0 0 17 3H15A2 2 0 0 0 13 5V6H11V5A2 2 0 0 0 9 3H7A2 2 0 0 0 5 5V6H3V20H13.09A5.47 5.47 0 0 1 13 19A6 6 0 0 1 21 13.34V6M22.54 16.88L20.41 19L22.54 21.12L21.12 22.54L19 20.41L16.88 22.54L15.46 21.12L17.59 19L15.46 16.88L16.88 15.46L19 17.59L21.12 15.46Z" />
+</vector>
diff --git a/app/src/main/res/menu/menu_hugepage.xml b/app/src/main/res/menu/menu_hugepage.xml
new file mode 100644
index 000000000..25a62ca27
--- /dev/null
+++ b/app/src/main/res/menu/menu_hugepage.xml
@@ -0,0 +1,11 @@
+<?xml version="1.0" encoding="utf-8"?>
+<menu xmlns:android="http://schemas.android.com/apk/res/android"
+    xmlns:app="http://schemas.android.com/apk/res-auto">
+
+    <item
+        android:id="@+id/action_unload_module"
+        android:icon="@drawable/ic_addon_remove"
+        android:title="@string/hugepage_unload_module"
+        app:showAsAction="never" />
+
+</menu>
diff --git a/app/src/main/res/values-zh-rCN/strings.xml b/app/src/main/res/values-zh-rCN/strings.xml
index 477f2f46d..b577e3fda 100644
--- a/app/src/main/res/values-zh-rCN/strings.xml
+++ b/app/src/main/res/values-zh-rCN/strings.xml
@@ -944,6 +944,10 @@
     <string name="hugepage_stop_confirm">确定要停止大页预留模块吗？这将释放所有预分配的页面，可能会影响正在运行的虚拟机。</string>
     <string name="hugepage_unloaded">模块已卸载</string>
     <string name="hugepage_unload_failed">卸载模块失败</string>
+    <string name="hugepage_unload_module">停止内核模块</string>
+    <string name="hugepage_unload_module_title">确定停止内核模块？</string>
+    <string name="hugepage_unload_module_confirm">强制从运行中的内核移除 .ko（rmmod）。这将释放所有预留页面，并丢失每虚拟机跟踪，直到下次加载模块。可能会影响正在运行的虚拟机。</string>
+    <string name="hugepage_unload_module_done">模块已卸载</string>
 
     <string name="notification_permission_title">允许通知？</string>
     <string name="notification_permission_message">DroidVM 会在后台下载磁盘镜像，并通过通知显示进度。请允许通知，以便随时查看下载进度。</string>
diff --git a/app/src/main/res/values-zh-rTW/strings.xml b/app/src/main/res/values-zh-rTW/strings.xml
index 1f2e25709..d6d5a0956 100644
--- a/app/src/main/res/values-zh-rTW/strings.xml
+++ b/app/src/main/res/values-zh-rTW/strings.xml
@@ -973,6 +973,10 @@
     <string name="hugepage_stop_confirm">確定要停止大頁預留模組嗎？這將釋放所有預分配的頁面，可能會影響正在執行的虛擬機器。</string>
     <string name="hugepage_unloaded">模組已解除安裝</string>
     <string name="hugepage_unload_failed">解除安裝模組失敗</string>
+    <string name="hugepage_unload_module">停止內核模組</string>
+    <string name="hugepage_unload_module_title">確定停止內核模組？</string>
+    <string name="hugepage_unload_module_confirm">強制從執行中的內核移除 .ko（rmmod）。這將釋放所有預留頁面，並丟失每虛擬機追蹤，直到下次載入模組。可能會影響正在執行的虛擬機器。</string>
+    <string name="hugepage_unload_module_done">模組已解除安裝</string>
 
     <string name="hugepage_view_processes">顯示占用</string>
     <string name="hugepage_proc_title_screen">Hugepage 集區占用</string>
diff --git a/app/src/main/res/values/strings.xml b/app/src/main/res/values/strings.xml
index 0f264f433..85f08a344 100644
--- a/app/src/main/res/values/strings.xml
+++ b/app/src/main/res/values/strings.xml
@@ -1010,6 +1010,10 @@
     <string name="hugepage_stop_confirm">Are you sure you want to unload the hugepage reserve module? This will release all pre-allocated pages and may affect running VMs.</string>
     <string name="hugepage_unloaded">Module unloaded</string>
     <string name="hugepage_unload_failed">Failed to unload module</string>
+    <string name="hugepage_unload_module">Unload module</string>
+    <string name="hugepage_unload_module_title">Unload module?</string>
+    <string name="hugepage_unload_module_confirm">Forcibly remove the .ko from the running kernel (rmmod). This releases all reserved pages and loses per-VM tracking until next load. May affect running VMs.</string>
+    <string name="hugepage_unload_module_done">Module unloaded</string>
 
     <string name="hugepage_view_processes">Show Usage</string>
     <string name="hugepage_proc_title_screen">Hugepage Pool Usage</string>

From 164cf26de8c3fbe669254a191bfc4e19f01fb575 Mon Sep 17 00:00:00 2001
From: HuJK <gh@hujk.org>
Date: Sun, 12 Jul 2026 23:51:27 +0800
Subject: [PATCH 116/182] SizeUtils: keep unit fallbacks inside the allowed
 unit list

When no unit fits exactly (findUnit) or is at least the value (findFloatUnit),
fall back to the smallest unit in the *provided* list rather than hardcoding
SizeUnit.B, so a restricted picker (e.g. a GiB-only list) never yields a unit
outside it. For the full list units[0] is B, so the classic behaviour is
unchanged.

Split out of the v10 CMA reservoir work as an independent change.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01ARourbDczkCYsKUUMC9EFv
---
 .../java/cn/classfun/droidvm/lib/size/SizeUtils.java | 12 ++++++++++--
 1 file changed, 10 insertions(+), 2 deletions(-)

diff --git a/app/src/main/java/cn/classfun/droidvm/lib/size/SizeUtils.java b/app/src/main/java/cn/classfun/droidvm/lib/size/SizeUtils.java
index 81cf70c8a..b5870fb2d 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/size/SizeUtils.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/size/SizeUtils.java
@@ -20,7 +20,12 @@ public static SizeNumber findUnit(
         for (int i = units.length - 1; i >= 0; i--)
             if (units[i].fitsExactly(bytes))
                 return units[i].calcPair(bytes);
-        return SizeUnit.B.calcPair(bytes);
+        // Nothing fits exactly: fall back to the smallest *allowed* unit so a
+        // restricted list (e.g. a GiB-only picker) never yields a unit outside
+        // it. For the full list units[0] is B - identical to the old fallback.
+        return units.length > 0
+            ? units[0].calcPair(new BigDecimal(bytes))
+            : SizeUnit.B.calcPair(bytes);
     }
 
     @NonNull
@@ -31,7 +36,10 @@ public static SizeNumber findFloatUnit(
         for (int i = units.length - 1; i >= 0; i--)
             if (units[i].isAtLeast(bytes))
                 return units[i].calcPair(bytes);
-        return SizeUnit.B.calcPair(bytes);
+        // See findUnit: keep the fallback inside the allowed list.
+        return units.length > 0
+            ? units[0].calcPair(bytes)
+            : SizeUnit.B.calcPair(bytes);
     }
 
     @NonNull

From 45d9155b720fedcd3d59b815d409ae44bd71771a Mon Sep 17 00:00:00 2001
From: HuJK <gh@hujk.org>
Date: Sun, 12 Jul 2026 23:51:27 +0800
Subject: [PATCH 117/182] SwitchRowWidget: propagate setEnabled to the child
 switch

FrameLayout.setEnabled alone left the child MaterialSwitch enabled and directly
draggable, so a "disabled" row could still fire its change listener. Override
setEnabled to propagate to the switch, and gate the row's click-to-toggle on
switchView.isEnabled() so a disabled switch can't be toggled by tapping the row.

Split out of the v10 CMA reservoir work as an independent change.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01ARourbDczkCYsKUUMC9EFv
---
 .../ui/widgets/row/SwitchRowWidget.java       | 19 +++++++++++++++++--
 1 file changed, 17 insertions(+), 2 deletions(-)

diff --git a/app/src/main/java/cn/classfun/droidvm/ui/widgets/row/SwitchRowWidget.java b/app/src/main/java/cn/classfun/droidvm/ui/widgets/row/SwitchRowWidget.java
index 5b4146671..5cd2dc8d6 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/widgets/row/SwitchRowWidget.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/widgets/row/SwitchRowWidget.java
@@ -57,7 +57,9 @@ private void init(@Nullable AttributeSet attrs) {
         switchView = findViewById(R.id.sw_switch);
         initAttrs(attrs);
         if (isInEditMode()) return;
-        setOnClickListener(v -> switchView.toggle());
+        setOnClickListener(v -> {
+            if (switchView.isEnabled()) switchView.toggle();
+        });
     }
 
     private void initAttrs(@Nullable AttributeSet attrs) {
@@ -94,10 +96,23 @@ public boolean isChecked() {
     @SuppressLint("ClickableViewAccessibility")
     public void setSwitchEnabled(boolean enabled) {
         switchView.setOnTouchListener(enabled ? null : (v, e) -> true);
-        setOnClickListener(enabled ? v -> switchView.toggle() : null);
+        setOnClickListener(!enabled ? null : v -> {
+            if (switchView.isEnabled()) switchView.toggle();
+        });
         setClickable(enabled);
     }
 
+    /**
+     * FrameLayout.setEnabled alone leaves the child MaterialSwitch enabled and
+     * directly draggable, so a "disabled" row could still fire its change
+     * listener. Propagate to the switch so disabling actually greys and locks it.
+     */
+    @Override
+    public void setEnabled(boolean enabled) {
+        super.setEnabled(enabled);
+        switchView.setEnabled(enabled);
+    }
+
     public void setChecked(boolean checked) {
         switchView.setChecked(checked);
     }

From fed2e083f7480ffd2a35a4abdd26db05104f82af Mon Sep 17 00:00:00 2001
From: HuJK <gh@hujk.org>
Date: Sun, 12 Jul 2026 23:51:54 +0800
Subject: [PATCH 118/182] TextInputRowWidget: add fixed-unit (ti_unit) and
 hide-unit (ti_showUnit)

Two new size-mode options:
  - ti_unit pins the picker to exactly one unit (e.g. "GiB"): values always
    display and are entered in it, no other unit is offered.
  - ti_showUnit hides the picker button in narrow layouts while the fixed/
    derived unit still applies to typed values; setUnitButtonVisible toggles
    it at runtime.

Split out of the v10 CMA reservoir work as an independent change.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01ARourbDczkCYsKUUMC9EFv
---
 .../ui/widgets/row/TextInputRowWidget.java    | 58 ++++++++++++++++++-
 app/src/main/res/values/attrs.xml             |  6 ++
 2 files changed, 62 insertions(+), 2 deletions(-)

diff --git a/app/src/main/java/cn/classfun/droidvm/ui/widgets/row/TextInputRowWidget.java b/app/src/main/java/cn/classfun/droidvm/ui/widgets/row/TextInputRowWidget.java
index f3951fbd6..03847de12 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/widgets/row/TextInputRowWidget.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/widgets/row/TextInputRowWidget.java
@@ -1,5 +1,7 @@
 package cn.classfun.droidvm.ui.widgets.row;
 
+import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
+
 import android.content.Context;
 import android.text.Editable;
 import android.text.InputFilter;
@@ -48,6 +50,9 @@ public final class TextInputRowWidget extends FrameLayout {
     private BigInteger minValue = BigInteger.ZERO;
     private BigInteger maxValue = BigInteger.valueOf(Long.MAX_VALUE);
     private BigInteger precision = BigInteger.ONE;
+    @Nullable
+    private SizeUnit fixedUnit = null;   // ti_unit: pin size mode to this one unit
+    private boolean showUnitButton = true;   // ti_showUnit: hide the picker button
     private final AtomicBoolean updatingValue = new AtomicBoolean(false);
     private Runnable onFocusLostListener;
 
@@ -134,6 +139,14 @@ private void initAttrs(@Nullable AttributeSet attrs) {
                 iconButtonView.setVisibility(GONE);
             }
             var tiMode = a.getInt(R.styleable.TextInputRowWidget_ti_mode, MODE_NORMAL);
+            var unit = a.getString(R.styleable.TextInputRowWidget_ti_unit);
+            if (unit != null) {
+                fixedUnit = SizeUnit.fromString(unit);
+                if (fixedUnit == null)
+                    throw new IllegalArgumentException(fmt("Unknown ti_unit: %s", unit));
+            }
+            showUnitButton = a.getBoolean(
+                R.styleable.TextInputRowWidget_ti_showUnit, true);
             var min = a.getString(R.styleable.TextInputRowWidget_ti_min);
             var max = a.getString(R.styleable.TextInputRowWidget_ti_max);
             if (!isInEditMode()) {
@@ -150,6 +163,33 @@ private void initAttrs(@Nullable AttributeSet attrs) {
         }
     }
 
+    /**
+     * Fixed-unit variant of {@link #setPickerByMinMax}: min/max still bound the
+     * byte value, but the picker offers exactly {@code fixedUnit} - the button
+     * degrades to a unit tag (ROTATE over one item is a no-op).
+     */
+    private void setPickerFixedUnit(
+        @NonNull SizeUnit unit,
+        @Nullable String min,
+        @Nullable String max
+    ) {
+        if (min != null) {
+            var parsed = SizeUtils.parseBigSize(min);
+            if (parsed.compareTo(BigInteger.ZERO) < 0)
+                throw new IllegalArgumentException("Min value must be non-negative");
+            minValue = parsed;
+        }
+        if (max != null) {
+            var parsed = SizeUtils.parseBigSize(max);
+            if (parsed.compareTo(BigInteger.ZERO) < 0)
+                throw new IllegalArgumentException("Max value must be non-negative");
+            maxValue = parsed;
+        }
+        if (minValue.compareTo(maxValue) > 0)
+            throw new IllegalArgumentException("Min value cannot be greater than max value");
+        buttonView.setItems(unit);
+    }
+
     private void setPickerByMinMax(
         @Nullable String min,
         @Nullable String max
@@ -196,10 +236,13 @@ private void applyMode(int mode, @Nullable String min, @Nullable String max) {
         } else if (mode == MODE_SIZE) {
             var flags = InputType.TYPE_CLASS_NUMBER;
             flags |= InputType.TYPE_NUMBER_FLAG_DECIMAL;
-            buttonView.setVisibility(VISIBLE);
+            // The picker is still configured when hidden - the (fixed) unit
+            // keeps applying to typed values; only the button goes away.
+            buttonView.setVisibility(showUnitButton ? VISIBLE : GONE);
             if (!isInEditMode()) {
                 buttonView.setMode(PickerButtonWidget.Mode.ROTATE);
-                setPickerByMinMax(min, max);
+                if (fixedUnit != null) setPickerFixedUnit(fixedUnit, min, max);
+                else setPickerByMinMax(min, max);
             }
             editText.setInputType(flags);
         }
@@ -320,6 +363,17 @@ public void setSelection(int index) {
         editText.setSelection(index);
     }
 
+    /**
+     * Show/hide the size-mode unit button at runtime (see {@code ti_showUnit}).
+     * The picker stays configured either way - the unit keeps applying to
+     * typed values; only the button's width comes and goes.
+     */
+    public void setUnitButtonVisible(boolean visible) {
+        showUnitButton = visible;
+        if (mode == MODE_SIZE)
+            buttonView.setVisibility(visible ? VISIBLE : GONE);
+    }
+
     public void setError(@Nullable CharSequence error) {
         textInputLayout.setError(error);
     }
diff --git a/app/src/main/res/values/attrs.xml b/app/src/main/res/values/attrs.xml
index e431d4cc5..48e7231a4 100644
--- a/app/src/main/res/values/attrs.xml
+++ b/app/src/main/res/values/attrs.xml
@@ -72,6 +72,12 @@
             <enum name="number" value="1" />
             <enum name="size" value="2" />
         </attr>
+        <!-- Pin the size-mode unit picker to exactly this unit (e.g. "GiB"):
+             values always display/enter in it, no other unit is offered. -->
+        <attr name="ti_unit" format="string" />
+        <!-- Hide the unit picker button in size mode (narrow layouts); the
+             fixed/derived unit still applies to typed values. -->
+        <attr name="ti_showUnit" format="boolean" />
         <attr name="ti_min" format="string" /> <!-- parse as long(number) or SizeUnit(size) -->
         <attr name="ti_max" format="string" /> <!-- parse as long(number) or SizeUnit(size) -->
         <attr name="ti_precision" format="string" /> <!-- parse as long(number) or SizeUnit(size) -->

From 7a61e668b87c12d2ba0ae101a3514f3981650009 Mon Sep 17 00:00:00 2001
From: HuJK <gh@hujk.org>
Date: Sun, 12 Jul 2026 23:59:06 +0800
Subject: [PATCH 119/182] hugepage: add v10 CMA reservoir management

Manage the module's CMA reservoir (pool_want_with_cma) from the hugepage
screen, and fix the pieces of the existing UI that the second target broke.

CMA switch + consumability probe:
  - A switch above "Enable Module" reads cma_probe_result from settings.prop:
    a recorded pass enables directly, anything else offers the probe.
  - The probe raises pool_want_with_cma (never lowers an existing bigger total
    - that would demolish reservoir the device is lending out), then empties
    the pool with a live pool_want=0 so its blocks flip straight into the
    reservoir, and lets a v3 acquire top it up as far as it can.
  - Coming up short is not a distinct failure: the reservoir is assembled out
    of the pool itself, so a fresh boot - unfragmented - simply succeeds.
  - pool_want is only ever written live, so an app killed mid-probe cannot
    leave the pool soft-disabled past a reboot; every exit restores it.
  - A pass pins the pool to 512 MB and keeps the rest as reservoir; a denial or
    unreadable result is put to the user. settings.prop writes became a locked
    read-modify-write so the probe thread and the pool-size save can't wipe
    each other's keys.

Runtime insmod now matches the boot-time one: prefer the module's own load.sh
(single source of truth for the preflight), else reconstruct only v9's
kapi_check ABI guard. insmod args are joined via StringUtils.joinNonEmpty.

Bar and captions: [VMs][available][CMA free][CMA lent][waiting], denominated
by pool_want_with_cma with the reservoir counted as filled. SegmentedBar's
storage bar takes a StorageSpec holder instead of an 18-argument call.

Snapshot parses a refill_stat key=value map in a dedicated constructor, with
field defaults standing in for the not-loaded view.

Acquire gating follows the module's own rule (acquire_set): work exists when
the pool is short OR the reservoir is short. A CMA-era grow kicks v3, not v1.

Pool size is a GiB-only input (ti_unit), split into pool / with-CMA total when
the reservoir is on, two-way linked so the pair keeps
pool_want <= pool_want_with_cma.

VM bar colours are keyed by rank among the live pids rather than by pid.

Co-Authored-By: lateautumn233 <lateautumn233@foxmail.com>
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01ARourbDczkCYsKUUMC9EFv
---
 .../droidvm/lib/utils/StringUtils.java        |  12 +
 .../droidvm/ui/hugepage/HugePageActivity.java | 994 +++++++++++++++++-
 .../droidvm/ui/hugepage/HugePageColor.java    |  65 +-
 .../droidvm/ui/hugepage/HugePageModel.java    | 521 +++++++--
 .../droidvm/ui/hugepage/HugePageProcess.java  |  27 +-
 .../ui/hugepage/HugePageProcessActivity.java  | 107 +-
 .../ui/hugepage/HugePageProcessAdapter.java   |  15 +-
 .../droidvm/ui/hugepage/SegmentedBar.java     | 123 ++-
 app/src/main/res/layout/activity_hugepage.xml |  51 +-
 app/src/main/res/values-night/colors.xml      |   3 +
 app/src/main/res/values-zh-rCN/strings.xml    |  49 +
 app/src/main/res/values-zh-rTW/strings.xml    |  49 +
 app/src/main/res/values/colors.xml            |   5 +
 app/src/main/res/values/strings.xml           |  49 +
 14 files changed, 1893 insertions(+), 177 deletions(-)

diff --git a/app/src/main/java/cn/classfun/droidvm/lib/utils/StringUtils.java b/app/src/main/java/cn/classfun/droidvm/lib/utils/StringUtils.java
index 3d49a8c9f..649dbc101 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/utils/StringUtils.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/utils/StringUtils.java
@@ -189,6 +189,18 @@ public static String pathJoin(@NonNull File base, @NonNull String... children) {
         return pathJoin(base.getAbsolutePath(), children);
     }
 
+    /** Join the non-empty parts with {@code sep}; empty parts are skipped. */
+    @NonNull
+    public static String joinNonEmpty(@NonNull String sep, @NonNull String... parts) {
+        var sb = new StringBuilder();
+        for (var p : parts) {
+            if (p.isEmpty()) continue;
+            if (sb.length() > 0) sb.append(sep);
+            sb.append(p);
+        }
+        return sb.toString();
+    }
+
     @NonNull
     public static String fmt(String fmt, Object... args) {
         return new Formatter(Locale.ROOT).format(fmt, args).toString();
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/hugepage/HugePageActivity.java b/app/src/main/java/cn/classfun/droidvm/ui/hugepage/HugePageActivity.java
index 4433432ce..66b7bd6ea 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/hugepage/HugePageActivity.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/hugepage/HugePageActivity.java
@@ -38,6 +38,10 @@
 import com.google.android.material.dialog.MaterialAlertDialogBuilder;
 import com.google.android.material.progressindicator.LinearProgressIndicator;
 
+import android.text.Editable;
+import android.widget.LinearLayout;
+import android.widget.ProgressBar;
+
 import java.math.BigInteger;
 import java.util.ArrayList;
 import java.util.LinkedHashMap;
@@ -45,10 +49,13 @@
 import java.util.Map;
 import java.util.concurrent.CountDownLatch;
 import java.util.concurrent.TimeUnit;
+import java.util.concurrent.atomic.AtomicBoolean;
+import java.util.concurrent.atomic.AtomicInteger;
 
 import cn.classfun.droidvm.R;
 import cn.classfun.droidvm.lib.daemon.DaemonConnection;
 import cn.classfun.droidvm.lib.size.SizeUtils;
+import cn.classfun.droidvm.lib.ui.SimpleTextWatcher;
 import cn.classfun.droidvm.ui.widgets.row.SwitchRowWidget;
 import cn.classfun.droidvm.ui.widgets.row.TextInputRowWidget;
 import cn.classfun.droidvm.ui.widgets.row.TextRowWidget;
@@ -102,6 +109,43 @@ public final class HugePageActivity extends AppCompatActivity {
     private TextView tvPoolTotal;
     private TextView tvPoolSize;
     private SwitchRowWidget rowModuleEnable;
+    // v10 CMA reservoir controls. The right input is the TOTAL with-CMA pool
+    // size (pool_want_with_cma), not the reservoir delta.
+    private TextInputRowWidget inputCmaSize;
+    private SwitchRowWidget rowCmaEnable;
+    private boolean cmaSwitchSyncing = false;   // programmatic setChecked guard
+    private boolean cmaInputLoaded = false;     // seed the CMA size input once per show
+    private boolean cmaBusy = false;            // a probe / toggle flow is in flight
+    // A reservoir target persisted with no verdict recorded = a probe that asked
+    // for a reboot and is now waiting to be finished. Offer it once per screen.
+    private boolean probePromptShown = false;
+    // Two-way size link (pool_want <= pool_want_with_cma): which input the
+    // user touched last decides who yields when they cross.
+    private static final int SIZE_EDIT_POOL = 1;
+    private static final int SIZE_EDIT_CMA = 2;
+    private int lastSizeEdit = SIZE_EDIT_POOL;
+    private boolean sizeLinkSyncing = false;    // programmatic setBigValue guard
+    /** Balloon floor (MB) for the consumability probe - `balloon 1536`. */
+    private static final long BALLOON_FLOOR_MB = 1536;
+    private static final long BALLOON_TIMEOUT_S = 600;
+    /**
+     * How much reservoir the probe wants to measure against:
+     * {@code max(RAM - 8G, RAM * 0.4)}. RAM here is MemTotal - physical pages
+     * only, so zram/swap capacity (SwapTotal) never inflates it. Advisory, not
+     * a precondition: a smaller reservoir still probes, it just makes the
+     * verdict less reliable, and the user is warned before continuing.
+     */
+    private static final long PROBE_KEEP_BYTES = 8L << 30;   // 8 GiB
+    private static final double PROBE_MIN_RAM_FRACTION = 0.4;
+    /**
+     * Pool size a passing probe leaves behind. The probe has just proved apps
+     * can consume the reservoir, so holding a large pool would waste memory the
+     * reservoir would otherwise lend out: pin the pool small and let
+     * pool_want_with_cma (kept at the size the probe assembled) carry the rest
+     * as reservoir. A VM start stages pages back in on demand.
+     */
+    private static final long PROBE_POOL_BYTES = 512L << 20;   // 512 MiB
+    private static final long PROBE_POOL_PAGES = PROBE_POOL_BYTES / PAGE_SIZE;
     private TextRowWidget rowStatState;
     private TextRowWidget rowStatTotalServed;
     private TextRowWidget rowStatTotalRefilled;
@@ -137,6 +181,8 @@ protected void onCreate(@Nullable Bundle savedInstanceState) {
         tvPoolTotal = findViewById(R.id.tv_pool_total);
         tvPoolSize = findViewById(R.id.tv_pool_size);
         rowModuleEnable = findViewById(R.id.row_module_enable);
+        inputCmaSize = findViewById(R.id.input_cma_size);
+        rowCmaEnable = findViewById(R.id.row_cma_enable);
         rowStatState = findViewById(R.id.row_stat_state);
         rowStatTotalServed = findViewById(R.id.row_stat_total_served);
         rowStatTotalRefilled = findViewById(R.id.row_stat_total_refilled);
@@ -153,6 +199,24 @@ private void initialize() {
             else savePoolSize();
         });
         rowModuleEnable.setOnCheckedChangeListener(this::doToggleModule);
+        rowCmaEnable.setOnCheckedChangeListener((btn, checked) -> onCmaSwitchChanged(checked));
+        // Two-way link between the pool size and the with-CMA total: track who
+        // was edited last, reconcile whenever a field is left (and again at
+        // save, since tapping Save doesn't steal the EditText's focus).
+        inputPoolSize.addTextChangedListener(new SimpleTextWatcher() {
+            @Override
+            public void afterTextChanged(Editable s) {
+                if (!sizeLinkSyncing) lastSizeEdit = SIZE_EDIT_POOL;
+            }
+        });
+        inputCmaSize.addTextChangedListener(new SimpleTextWatcher() {
+            @Override
+            public void afterTextChanged(Editable s) {
+                if (!sizeLinkSyncing) lastSizeEdit = SIZE_EDIT_CMA;
+            }
+        });
+        inputPoolSize.setOnFocusLostListener(this::reconcileSizeLink);
+        inputCmaSize.setOnFocusLostListener(this::reconcileSizeLink);
         // One button:
         //   not installed        -> Install (open releases page)
         //   installed, unloaded  -> Enable (insmod)
@@ -255,6 +319,42 @@ static void showAcquireInfo(@NonNull Context ctx, int mode, @NonNull Runnable on
             .show();
     }
 
+    /**
+     * The "acquire finished" bubble, shared by both hugepage screens: how much
+     * the pool reached of its target, and - while the v10 reservoir is on - the
+     * with-CMA total too. Both matter because acquire's own stop condition
+     * covers both (see {@link HugePageModel.Snapshot#deficit}): a pool that hit
+     * its target while the reservoir is still short is not "complete", and a
+     * grown pool_want is filled by staging reservoir pages in, which moves the
+     * pool number without moving the total.
+     */
+    @NonNull
+    static String acquireDoneMessage(
+        @NonNull Context ctx, @NonNull HugePageModel.Snapshot snap
+    ) {
+        long gotPool = snap.free + snap.lent;
+        long wantPool = snap.targetIdeal;
+        if (!snap.cmaActive()) {
+            return gotPool >= wantPool
+                ? ctx.getString(R.string.hugepage_proc_acquire_full, pageSize(wantPool))
+                : ctx.getString(R.string.hugepage_proc_acquire_partial,
+                    pageSize(gotPool), pageSize(wantPool));
+        }
+        long gotTotal = gotPool + snap.cmaPool;
+        long wantTotal = snap.wantWithCma;
+        return (gotPool >= wantPool && gotTotal >= wantTotal)
+            ? ctx.getString(R.string.hugepage_proc_acquire_full_cma,
+                pageSize(wantPool), pageSize(wantTotal))
+            : ctx.getString(R.string.hugepage_proc_acquire_partial_cma,
+                pageSize(gotPool), pageSize(wantPool),
+                pageSize(gotTotal), pageSize(wantTotal));
+    }
+
+    @NonNull
+    private static String pageSize(long pages) {
+        return SizeUtils.formatSize(pages * PAGE_SIZE);
+    }
+
     /** True once the user opted out of the acquire prompt (short-press runs directly). */
     static boolean skipAcquireConfirm(@NonNull Context ctx) {
         return ctx.getSharedPreferences(PREFS_NAME, Context.MODE_PRIVATE)
@@ -345,16 +445,29 @@ private void refreshStatus() {
             // Per-VM breakdown through the usage ladder (KO attribution, degrading
             // to a THP scan of running VMs), so this bar matches the usage screen.
             // Each segment is labelled with the friendly VM name from vmMap.
+            // allPids is the unfiltered owner list - the rank-based color map
+            // must see every pid (both screens derive ranks from the same list).
             List<long[]> owners = new ArrayList<>();
+            List<Integer> allPids = new ArrayList<>();
             if (snap.loaded) {
                 for (var e : model.usage(null).entries) {
+                    allPids.add(e.pid);
                     if (e.pages > 0) owners.add(new long[]{e.pid, e.pages});
                 }
             }
             // Only fetch VM names when there are rows to label.
             Map<Integer, String> vmMap = owners.isEmpty()
                 ? new LinkedHashMap<>() : model.vmNames(false);
-            runOnUiThread(() -> updateUI(snap, crashStamp, owners, vmMap));
+            // Reservoir occupancy for the two-tone CMA block (module caches ~1s).
+            var cmaUsage = snap.cmaActive() ? model.cmaUsage() : null;
+            // A reservoir built (or being built) toward a target nobody ever
+            // judged: the "save and reboot" branch of the probe left it here.
+            boolean probePending = !probePromptShown && !cmaBusy
+                && snap.cmaActive() && model.cmaProbeResult() == null;
+            runOnUiThread(() -> {
+                updateUI(snap, crashStamp, owners, allPids, vmMap, cmaUsage);
+                if (probePending) promptPendingProbe();
+            });
         });
     }
 
@@ -376,7 +489,9 @@ private void setPagesString(@NonNull TextView tv, @StringRes int str, long pages
     private void updateUI(
         @NonNull HugePageModel.Snapshot snap, boolean crashed,
         @NonNull List<long[]> owners,
-        @NonNull Map<Integer, String> vmMap
+        @NonNull List<Integer> allPids,
+        @NonNull Map<Integer, String> vmMap,
+        @Nullable HugePageModel.CmaUsage cmaUsage
     ) {
         if (isFinishing()) return;
         cardCrashWarning.setVisibility(crashed ? VISIBLE : GONE);
@@ -390,11 +505,16 @@ private void updateUI(
             // "total" shows the desired target - the model's version-unified
             // want (pool_want, else v6 pool_target, else current capacity).
             var poolWant = snap.targetIdeal;
+            boolean cmaOn = snap.cmaActive();
             // Apple-storage-bar style: one labelled colored block per VM
             // (used), then the available portion as a track-coloured gap,
-            // then the waiting-to-acquire (deficit) block pinned flush right.
-            // Each block draws its label inside if wide enough.
+            // then (v10) the CMA reservoir split into occupied-by-apps and
+            // free halves, then the waiting-to-acquire (deficit) block pinned
+            // flush right. Each block draws its label inside if wide enough.
             boolean dark = HugePageColor.isDark(this);
+            // Rank-based colors over the full owner list, so adjacent VM
+            // segments never land on near-identical hues (see HugePageColor).
+            var colorMap = HugePageColor.forPids(allPids, dark);
             int n = owners.size();
             int[] usedColors = new int[n];
             float[] usedValues = new float[n];
@@ -403,7 +523,8 @@ private void updateUI(
             for (int i = 0; i < n; i++) {
                 int pid = (int) owners.get(i)[0];
                 long ownerPages = owners.get(i)[1];
-                usedColors[i] = HugePageColor.forPid(pid, dark);
+                Integer color = colorMap.get(pid);
+                usedColors[i] = color != null ? color : HugePageColor.forRank(i, dark);
                 usedValues[i] = ownerPages;
                 String name = vmMap.get(pid);
                 if (name == null) name = getString(R.string.hugepage_proc_pid, pid);
@@ -417,21 +538,68 @@ private void updateUI(
             // orphaned owner-gone pages that have no segment; those surface in
             // the held/available gap rather than as an invisible caption delta.
             long used = seg;
-            long deficit = Math.max(0, poolWant - seg - poolAvail);
+            // With the reservoir on, the bar's denominator is the overall
+            // target pool_want_with_cma and the reservoir counts as filled.
+            long cmaPool = cmaOn ? snap.cmaPool : 0;
+            long barWant = cmaOn ? snap.wantWithCma : poolWant;
+            long deficit = Math.max(0, barWant - seg - poolAvail - cmaPool);
+            // Reservoir occupancy split (pages): still-free vs held by other
+            // apps right now; unknown occupancy shows one undivided free block.
+            boolean cmaUsageOk = cmaOn && cmaUsage != null && cmaUsage.ok;
+            long cmaOther = cmaUsageOk
+                ? Math.min(cmaPool, cmaUsage.usedMb / (PAGE_SIZE / (1024 * 1024)))
+                : 0;
+            long cmaFree = cmaPool - cmaOther;
+            // Avail sub-split: pages flippable to CMA as whole pageblocks vs
+            // not (pool_avail_cma_able); -1 = unreported, no split shown.
+            long availCmaAble = (cmaOn && snap.availCmaAble >= 0)
+                ? Math.min(poolAvail, snap.availCmaAble) : -1;
+            long availNonCma = availCmaAble >= 0 ? poolAvail - availCmaAble : 0;
             // 2x2 caption: used / available on top, total / pool-size below.
-            // Total = real held reserve (used + avail), shown raw - no clamp
-            // to the pool size, so a kernel that fails to release on shrink
-            // shows up as total > the size you set.
+            // With the reservoir on, the pool-size cell shows both targets as
+            // pool_want/pool_want_with_cma; the detailed cma-able and
+            // free/other-apps breakdowns live on the usage screen's synthetic
+            // available/CMA rows. Total = real held reserve (used + avail),
+            // shown raw - no clamp to the pool size, so a kernel that fails
+            // to release on shrink shows up as total > the size you set.
             var held = used + poolAvail;
             setPagesString(tvPoolUsed, R.string.hugepage_stat_pool_used, used);
             setPagesString(tvPoolAvail, R.string.hugepage_stat_pool_available, poolAvail);
             setPagesString(tvPoolTotal, R.string.hugepage_stat_pool_total, held);
-            setPagesString(tvPoolSize, R.string.hugepage_stat_pool_size, poolWant);
-            segPoolBar.setStorage(usedColors, usedValues, usedLabels,
-                poolAvail, fmt("%s\n%s", getString(R.string.hugepage_bar_available), SizeUtils.formatSize(poolAvail * PAGE_SIZE)),
-                HugePageColor.pending(this), deficit,
-                fmt("%s\n%s", getString(R.string.hugepage_proc_deficit), SizeUtils.formatSize(deficit * PAGE_SIZE)),
-                poolWant);
+            if (cmaOn) {
+                tvPoolSize.setText(getString(R.string.hugepage_stat_pool_size_cma,
+                    poolWant, snap.wantWithCma,
+                    SizeUtils.formatSize(poolWant * PAGE_SIZE),
+                    SizeUtils.formatSize(snap.wantWithCma * PAGE_SIZE)));
+            } else {
+                setPagesString(tvPoolSize, R.string.hugepage_stat_pool_size, poolWant);
+            }
+            // Bar: [VMs][avail][CMA][CMA lent][waiting]. The CMA parts are two
+            // ordinary labelled segments; only the avail block keeps the
+            // single-label pure-color sub-split ([non-cma-able|normal]).
+            var spec = new SegmentedBar.StorageSpec();
+            spec.usedColors = usedColors;
+            spec.usedValues = usedValues;
+            spec.usedLabels = usedLabels;
+            spec.avail = poolAvail;
+            spec.availLabel = fmt("%s\n%s", getString(R.string.hugepage_bar_available),
+                SizeUtils.formatSize(poolAvail * PAGE_SIZE));
+            spec.availNonCma = Math.max(0, availNonCma);
+            spec.availNonCmaColor = HugePageColor.availNonCma(this);
+            spec.cmaFree = cmaFree;
+            spec.cmaFreeLabel = fmt("%s\n%s", getString(R.string.hugepage_bar_cma),
+                SizeUtils.formatSize(cmaFree * PAGE_SIZE));
+            spec.cmaFreeColor = HugePageColor.cmaFree(this);
+            spec.cmaOther = cmaOther;
+            spec.cmaOtherLabel = fmt("%s\n%s", getString(R.string.hugepage_bar_cma_lent),
+                SizeUtils.formatSize(cmaOther * PAGE_SIZE));
+            spec.cmaOtherColor = HugePageColor.cmaUsed(this);
+            spec.deficitColor = HugePageColor.pending(this);
+            spec.deficit = deficit;
+            spec.deficitLabel = fmt("%s\n%s", getString(R.string.hugepage_proc_deficit),
+                SizeUtils.formatSize(deficit * PAGE_SIZE));
+            spec.want = barWant;
+            segPoolBar.setStorage(spec);
         } else {
             rowStatState.setValue(getString(R.string.hugepage_stats_unavailable));
             rowStatTotalServed.setValue(null);
@@ -459,14 +627,7 @@ poolAvail, fmt("%s\n%s", getString(R.string.hugepage_bar_available), SizeUtils.f
         // which polls). Track the kernel flag, not the optimistic mainAcquiring, so
         // an acquire that never actually started can't fake a "done".
         if (wasAcquiring && !acquiring) {
-            long got = snap.free + snap.lent;
-            long want = snap.targetIdeal;
-            String msg = got >= want
-                    ? getString(R.string.hugepage_proc_acquire_full,
-                        SizeUtils.formatSize(want * PAGE_SIZE))
-                    : getString(R.string.hugepage_proc_acquire_partial,
-                        SizeUtils.formatSize(got * PAGE_SIZE),
-                        SizeUtils.formatSize(want * PAGE_SIZE));
+            String msg = acquireDoneMessage(this, snap);
             // Append why the acquire stopped (kernel free text from refill_stat's
             // acquire_stop_reason), so the user sees the reason in the bubble.
             String reason = snap.acquireStopReason;
@@ -511,6 +672,40 @@ poolAvail, fmt("%s\n%s", getString(R.string.hugepage_bar_available), SizeUtils.f
         // soft-disable (want 0), so there is no version branching here.
         acquireEnabled = snap.loaded && snap.deficit > 0;
         applyAcquireState();
+
+        // CMA switch: only meaningful on a loaded v10 module. While a probe /
+        // toggle flow runs, leave the switch and the size input alone - the flow
+        // owns them (the reservoir flips around mid-probe and would flicker).
+        rowCmaEnable.setEnabled(snap.loaded && snap.hasCma);
+        if (!cmaBusy) {
+            boolean cmaActive = snap.cmaActive();
+            if (rowCmaEnable.isChecked() != cmaActive) {
+                cmaSwitchSyncing = true;
+                rowCmaEnable.setChecked(cmaActive);
+                cmaSwitchSyncing = false;
+            }
+            // The size row shows exactly one GiB tag: on the right field while
+            // CMA is on (two fields, tight width), on the pool field otherwise.
+            inputPoolSize.setUnitButtonVisible(!cmaActive);
+            if (cmaActive) {
+                // Seed the with-CMA total input once per show (it maps 1:1 to
+                // pool_want_with_cma), then leave the user's typing be.
+                if (inputCmaSize.getVisibility() != VISIBLE || !cmaInputLoaded) {
+                    inputCmaSize.setVisibility(VISIBLE);
+                    sizeLinkSyncing = true;
+                    try {
+                        inputCmaSize.setBigValue(
+                            BigInteger.valueOf(snap.wantWithCma * PAGE_SIZE));
+                    } finally {
+                        sizeLinkSyncing = false;
+                    }
+                    cmaInputLoaded = true;
+                }
+            } else {
+                inputCmaSize.setVisibility(GONE);
+                cmaInputLoaded = false;
+            }
+        }
     }
 
     /**
@@ -599,7 +794,16 @@ private void loadPoolSize() {
             try {
                 var pages = Long.parseLong(cur);
                 var bytes = BigInteger.valueOf(pages * PAGE_SIZE);
-                runOnUiThread(() -> inputPoolSize.setBigValue(bytes));
+                runOnUiThread(() -> {
+                    // Programmatic seed - don't count it as a user edit for
+                    // the pool<->with-CMA size link.
+                    sizeLinkSyncing = true;
+                    try {
+                        inputPoolSize.setBigValue(bytes);
+                    } finally {
+                        sizeLinkSyncing = false;
+                    }
+                });
             } catch (NumberFormatException e) {
                 Log.w(TAG, "Failed to parse pool_want", e);
             }
@@ -643,10 +847,42 @@ private long runningVmMemMib() {
         return total[0];
     }
 
+    /**
+     * Keep the size pair consistent ({@code pool_want <= pool_want_with_cma}):
+     * when they cross, the field the user touched last wins - raising the pool
+     * above the total drags the total up; lowering the total under the pool
+     * shrinks the pool. Runs on focus-loss of either field and again at save.
+     */
+    private void reconcileSizeLink() {
+        if (inputCmaSize.getVisibility() != VISIBLE) return;
+        if (!inputPoolSize.isInputValid() || !inputCmaSize.isInputValid()) return;
+        var pool = inputPoolSize.getBigValue();
+        var withCma = inputCmaSize.getBigValue();
+        if (pool.compareTo(withCma) <= 0) return;
+        sizeLinkSyncing = true;
+        try {
+            if (lastSizeEdit == SIZE_EDIT_CMA) inputPoolSize.setBigValue(withCma);
+            else inputCmaSize.setBigValue(pool);
+        } finally {
+            sizeLinkSyncing = false;
+        }
+    }
+
     private void savePoolSize() {
+        reconcileSizeLink();
         if (!inputPoolSize.isInputValid()) return;
         var bytes = inputPoolSize.getBigValue();
         var pages = bytes.divide(BigInteger.valueOf(PAGE_SIZE));
+        // While the reservoir is on, the right field IS the with-CMA total
+        // (pool_want_with_cma); the link above already keeps it >= the pool.
+        final long cmaPages;
+        if (inputCmaSize.getVisibility() == VISIBLE) {
+            if (!inputCmaSize.isInputValid()) return;
+            cmaPages = inputCmaSize.getBigValue()
+                .divide(BigInteger.valueOf(PAGE_SIZE)).longValue();
+        } else {
+            cmaPages = -1;
+        }
         runOnPool(() -> {
             // The pool must be able to back every running VM's RAM, so it can't
             // be set below the sum of running VMs' configured memory.
@@ -661,12 +897,17 @@ private void savePoolSize() {
             }
             // Persist for the next load and apply to the running pool where the
             // live knob exists (v7); v6's read-only target only lands next boot.
-            var res = model.saveSize(pages.longValue());
-            // A grow leaves a deficit -> kick one v1 fill so the raised target
+            // One settings.prop rewrite carries the pool target and (while the
+            // reservoir is on) the with-CMA total together.
+            var res = model.saveTargets(pages.longValue(), cmaPages);
+            // A grow leaves a deficit -> kick one fill so the raised target
             // starts filling at once (a shrink is applied by the write itself).
-            // The GUI drives acquire; the model's saveSize deliberately doesn't.
+            // The GUI drives acquire; the model's save deliberately doesn't.
+            // Only the mode-2/3 sweep runs the reservoir-building Phase R
+            // ("mode 1 remains pool-only legacy"), so a CMA-era grow needs v3.
             var snap = model.state();
-            if (res.ok() && snap.loaded && snap.deficit > 0) model.acquire(1);
+            if (res.ok() && snap.loaded && snap.deficit > 0)
+                model.acquire(snap.cmaActive() ? 3 : 1);
             boolean okSaved = res.ok();
             boolean appliedNow = "pool_want".equals(res.impl);   // live write actually landed
             runOnUiThread(() -> {
@@ -696,6 +937,703 @@ private void doToggleModule() {
         });
     }
 
+    /* ================================================================== */
+    /*  v10 CMA reservoir: switch + consumability probe                   */
+    /* ================================================================== */
+
+    private void onCmaSwitchChanged(boolean checked) {
+        if (cmaSwitchSyncing) return;
+        if (cmaBusy) {                 // a flow already owns the switch
+            setCmaSwitch(!checked);
+            return;
+        }
+        if (checked) doCmaEnable();
+        else doCmaDisable();
+    }
+
+    /** Programmatic switch write that doesn't re-enter the change listener. */
+    private void setCmaSwitch(boolean checked) {
+        cmaSwitchSyncing = true;
+        rowCmaEnable.setChecked(checked);
+        cmaSwitchSyncing = false;
+    }
+
+    /** End an enable flow without enabling: release the busy lock, switch off. */
+    private void cancelCmaEnable() {
+        cmaBusy = false;
+        setCmaSwitch(false);
+        refreshStatus();
+    }
+
+    /** Switch off: demolish the reservoir now and persist off for next boot. */
+    private void doCmaDisable() {
+        cmaBusy = true;
+        runOnPool(() -> {
+            var res = model.saveCmaTarget(0);
+            runOnUiThread(() -> {
+                cmaBusy = false;
+                Toast.makeText(this, res.ok() ? R.string.hugepage_cma_disabled
+                    : R.string.hugepage_cma_toggle_failed, LENGTH_SHORT).show();
+                if (!res.ok()) setCmaSwitch(true);
+                refreshStatus();
+            });
+        });
+    }
+
+    /**
+     * Switch on. The magisk-side {@code cma_probe_result} (settings.prop) says
+     * whether the consumability probe ever ran:
+     * <ul>
+     *   <li>{@code 1} - apps can consume CMA: enable directly, no probe;</li>
+     *   <li>{@code 0} - probed unusable: offer a re-probe;</li>
+     *   <li>absent - never probed: explain and offer to run it.</li>
+     * </ul>
+     */
+    private void doCmaEnable() {
+        cmaBusy = true;
+        runOnPool(() -> {
+            var snap = model.state();
+            if (!snap.loaded || !snap.hasCma) {
+                runOnUiThread(() -> {
+                    cmaBusy = false;
+                    setCmaSwitch(false);
+                    Toast.makeText(this, R.string.hugepage_cma_not_supported,
+                        LENGTH_SHORT).show();
+                });
+                return;
+            }
+            var verdict = model.cmaProbeResult();
+            if (snap.cmaPbOrder < 0) {
+                // The module disabled its whole CMA side this boot (preflight /
+                // symbols / first-block verification) - no write can help now.
+                // A recorded denial is one of the causes (the boot script then
+                // hands the module -1 preflight values): drop it, so the next
+                // boot comes up CMA-capable and the probe can run again.
+                boolean stale = verdict != null && verdict == VERDICT_DENIED;
+                if (stale) model.clearCmaProbeResult();
+                runOnUiThread(() -> {
+                    cmaBusy = false;
+                    setCmaSwitch(false);
+                    if (isFinishing()) return;
+                    new MaterialAlertDialogBuilder(this)
+                        .setTitle(R.string.hugepage_cma_unavailable_title)
+                        .setMessage(stale ? R.string.hugepage_cma_unavailable_denied
+                            : R.string.hugepage_cma_unavailable_boot)
+                        .setPositiveButton(android.R.string.ok, null)
+                        .show();
+                });
+                return;
+            }
+            // The threshold only feeds the two dialog branches - don't pay the
+            // meminfo shell read when the verdict lets us enable directly.
+            var needBytes = (verdict != null && verdict == VERDICT_ALLOWED)
+                ? 0 : probeNeedBytes(model.memTotalKb());
+            runOnUiThread(() -> {
+                if (isFinishing()) {
+                    cmaBusy = false;
+                    return;
+                }
+                if (verdict != null && verdict == VERDICT_ALLOWED) {
+                    enableCmaDirect(snap);
+                } else if (verdict != null && verdict == VERDICT_DENIED) {
+                    new MaterialAlertDialogBuilder(this)
+                        .setTitle(R.string.hugepage_cma_probe_denied_title)
+                        .setMessage(R.string.hugepage_cma_probe_denied_msg)
+                        .setPositiveButton(R.string.hugepage_cma_probe_rerun,
+                            (d, w) -> startCmaProbe())
+                        .setNegativeButton(android.R.string.cancel,
+                            (d, w) -> cancelCmaEnable())
+                        .setOnCancelListener(d -> cancelCmaEnable())
+                        .show();
+                } else {
+                    new MaterialAlertDialogBuilder(this)
+                        .setTitle(R.string.hugepage_cma_probe_needed_title)
+                        .setMessage(getString(R.string.hugepage_cma_probe_needed_msg,
+                            SizeUtils.formatSize(Math.max(0, needBytes)),
+                            SizeUtils.formatSize(PROBE_POOL_BYTES)))
+                        .setPositiveButton(R.string.hugepage_cma_probe_start,
+                            (d, w) -> startCmaProbe())
+                        .setNegativeButton(android.R.string.cancel,
+                            (d, w) -> cancelCmaEnable())
+                        .setOnCancelListener(d -> cancelCmaEnable())
+                        .show();
+                }
+            });
+        });
+    }
+
+    /**
+     * Probe already passed: restore the remembered with-CMA total and let a v3
+     * acquire build the reservoir (only the mode-2/3 sweep runs Phase R; mode 1
+     * is pool-only legacy).
+     *
+     * <p>The target is clamped to the module's {@code pool_want <=
+     * pool_want_with_cma} invariant, so a remembered total at or below the pool
+     * size enables with an empty reservoir - that is a real state (the probe
+     * itself produces it when the pool already holds everything), and the user
+     * then raises the now-visible with-CMA field. Only {@code 0} is impossible:
+     * it is the off sentinel.
+     */
+    private void enableCmaDirect(@NonNull HugePageModel.Snapshot snap) {
+        runOnPool(() -> {
+            long target = Math.max(model.lastCmaTargetPages(), snap.targetIdeal);
+            if (target <= 0)   // pool soft-disabled: fall back to the probe floor
+                target = pagesFor(Math.max(0, probeNeedBytes(model.memTotalKb())));
+            boolean ok = target > 0 && model.saveCmaTarget(target).ok();
+            if (ok) {
+                var s2 = model.state();
+                if (s2.loaded && s2.deficit > 0) model.acquire(3);
+            }
+            boolean fOk = ok;
+            runOnUiThread(() -> {
+                cmaBusy = false;
+                Toast.makeText(this, fOk ? R.string.hugepage_cma_enabled
+                    : R.string.hugepage_cma_toggle_failed, LENGTH_SHORT).show();
+                if (!fOk) setCmaSwitch(false);
+                cmaInputLoaded = false;   // reseed the CMA size input
+                refreshStatus();
+            });
+        });
+    }
+
+    /* ---- probe orchestration ---- */
+
+    /** Progress dialog handle for the probe worker thread. */
+    private static final class ProbeUi {
+        @NonNull final androidx.appcompat.app.AlertDialog dialog;
+        @NonNull final TextView text;
+
+        ProbeUi(@NonNull androidx.appcompat.app.AlertDialog dialog, @NonNull TextView text) {
+            this.dialog = dialog;
+            this.text = text;
+        }
+    }
+
+    private static final int VERDICT_DENIED = 0;
+    private static final int VERDICT_ALLOWED = 1;
+    private static final int VERDICT_ABNORMAL = -1;
+
+    /** max(RAM - 8 GiB, RAM x 0.4) in bytes; -1 when meminfo is unreadable. */
+    private long probeNeedBytes(long memTotalKb) {
+        if (memTotalKb <= 0) return -1;
+        long total = memTotalKb * 1024;
+        return Math.max(total - PROBE_KEEP_BYTES, (long) (total * PROBE_MIN_RAM_FRACTION));
+    }
+
+    private static long pagesFor(long bytes) {
+        return (bytes + PAGE_SIZE - 1) / PAGE_SIZE;
+    }
+
+    /** Kick off the probe worker; the switch stays under the flow's control. */
+    private void startCmaProbe() {
+        new Thread(this::runCmaProbe, "hugepage-cma-probe").start();
+    }
+
+    /**
+     * The consumability probe (worker thread). Steps, per the module docs:
+     * precondition {@code avail >= max(RAM-7G, 40% RAM)} (guided acquire, else
+     * save-and-reboot); then {@code echo avail > pool_want_with_cma},
+     * {@code echo 0 > pool_want} (the freed blocks flip to the reservoir), run
+     * {@code balloon 1536} and judge from how much CmaFree the pressure consumed
+     * whether this vendor lets user apps allocate from CMA. {@code pool_want} is
+     * restored on every path.
+     *
+     * <p>Only a pass is written to settings.prop ({@code cma_probe_result=1}) -
+     * an unreadable result asks the user, and enabling counts as a pass. A
+     * failure (or a decline) records nothing and clears any stale verdict, so
+     * the next launch can simply probe again.
+     */
+    private void runCmaProbe() {
+        var cancelled = new AtomicBoolean(false);
+        ProbeUi ui = null;
+        boolean raised = false;    // pool_want_with_cma raised by us
+        boolean zeroed = false;    // pool_want emptied by us
+        long prevWant = -1;
+        try {
+            // Balloon pressure would squeeze (or LMK-kill) running VMs.
+            if (runningVmMemMib() > 0) {
+                probeFail(null, getString(R.string.hugepage_cma_vms_running));
+                return;
+            }
+            var snap = model.state();
+            prevWant = snap.targetIdeal;
+            long needBytes = probeNeedBytes(model.memTotalKb());
+            if (needBytes <= 0) {
+                probeFail(null, getString(R.string.hugepage_cma_probe_failed_generic));
+                return;
+            }
+            long needPages = pagesFor(needBytes);
+            // 1. How big a reservoir to measure against. It is NOT bounded by
+            //    the configured pool: the probe empties the pool into the
+            //    reservoir (pool_want=0 -> the module's shrink flips every avail
+            //    block to CMA, instantly), so the only ceiling is the module's
+            //    RAM-derived pool_size_max. A cap below what we want makes the
+            //    verdict shakier, not impossible: warn and let the user go on.
+            long cap = model.poolSizeMax();
+            long target = Math.max(needPages, Math.max(prevWant, snap.wantWithCma));
+            if (cap > 0) target = Math.min(target, cap);
+            long goal = Math.min(needPages, target);
+            if (goal < needPages && !probeAsk(
+                getString(R.string.hugepage_cma_small_reservoir_title),
+                getString(R.string.hugepage_cma_small_reservoir_msg,
+                    SizeUtils.formatSize(goal * PAGE_SIZE),
+                    SizeUtils.formatSize(needPages * PAGE_SIZE)),
+                getString(R.string.hugepage_cma_probe_anyway))) {
+                probeCancelled(null, false);
+                return;
+            }
+            ui = probeProgressShow(reservoirStage(snap.cmaPool, goal), cancelled);
+            if (ui == null) {
+                probeCancelled(null, false);
+                return;
+            }
+            // 2. Build the reservoir. Already there (a previous run persisted the
+            //    target and the module assembled it at boot) -> measure directly,
+            //    touching nothing.
+            boolean built = snap.cmaPool >= goal;
+            if (!built) {
+                // Raise the total first: pool_want=0 would otherwise soft-disable
+                // the pool and hand its pages back to the buddy allocator instead
+                // of flipping them into the reservoir. Never lower an existing
+                // bigger total - that demolishes reservoir the device is lending
+                // out right now.
+                if (snap.wantWithCma < target) {
+                    var w = model.writeWantWithCma(target);
+                    if (!w.ok()) {
+                        probeDismiss(ui);
+                        probeUnavailable(getString(R.string.hugepage_cma_unavailable_write,
+                            w.detail != null ? w.detail : "?"));
+                        return;
+                    }
+                }
+                raised = true;
+                // Empty the pool: its avail blocks flip to CMA at once (the fast
+                // path - a from-scratch sweep would hit the fragmentation wall).
+                // Only the live knob is written, so a reboot restores pool_want
+                // even if this app dies before the restore below.
+                var shrink = model.writeWant(0);
+                if (!shrink.ok()) {
+                    probeRollback();
+                    probeDismiss(ui);
+                    probeFail(null, getString(R.string.hugepage_cma_probe_failed_generic));
+                    return;
+                }
+                zeroed = true;
+                Thread.sleep(3000);          // let the flips land
+                model.acquire(3);            // best-effort top-up toward the target
+                built = waitReservoir(ui, goal, cancelled);
+            }
+            if (cancelled.get()) {
+                model.stopAcquire();
+                probeRestore(prevWant, zeroed);
+                probeRollback();
+                probeCancelled(ui, true);
+                return;
+            }
+            // Whatever actually assembled is what the balloon is judged against.
+            long reservoirPages = model.state().cmaPool;
+            if (reservoirPages <= 0) {
+                probeRestore(prevWant, zeroed);
+                probeRollback();
+                probeDismiss(ui);
+                probeUnavailable(getString(R.string.hugepage_cma_unavailable_reservoir));
+                return;
+            }
+            if (!built) {
+                // The runtime sweep hit the fragmentation wall. This is not a
+                // different failure from "it can't be built" - the module builds
+                // the reservoir first at init, on the cleanest memory there is,
+                // so the very same target simply works after a reboot. Persist
+                // it and pick the probe back up then (see the pending prompt) -
+                // or measure right now against the smaller reservoir that did
+                // get built, accepting a shakier verdict.
+                probeDismiss(ui);
+                ui = null;
+                int choice = probeAskChoice(
+                    getString(R.string.hugepage_cma_reservoir_short_title),
+                    getString(R.string.hugepage_cma_reservoir_short_msg,
+                        SizeUtils.formatSize(reservoirPages * PAGE_SIZE),
+                        SizeUtils.formatSize(goal * PAGE_SIZE)),
+                    getString(R.string.hugepage_cma_save_reboot),
+                    getString(R.string.hugepage_cma_probe_anyway));
+                if (choice != CHOICE_NEGATIVE) {
+                    // "I'll reboot, then probe", or dismissed. Nothing is saved:
+                    // the probe assembles the reservoir out of the pool itself,
+                    // so a fresh boot - where memory is unfragmented - simply
+                    // lets the same run succeed. Undo our live writes and go.
+                    probeRestore(prevWant, zeroed);
+                    probeRollback();
+                    if (choice == CHOICE_POSITIVE)
+                        probeToast(getString(R.string.hugepage_cma_reboot_hint));
+                    probeEndUi(false);
+                    return;
+                }
+                // Probe anyway: a fresh progress dialog for the pressure stage.
+                ui = probeProgressShow(
+                    getString(R.string.hugepage_cma_probe_running_balloon), cancelled);
+                if (ui == null) {
+                    probeRestore(prevWant, zeroed);
+                    probeRollback();
+                    probeCancelled(null, false);
+                    return;
+                }
+            }
+            // 3. Pressure + judgment, measured against the reservoir that exists.
+            probeStage(ui, getString(R.string.hugepage_cma_probe_running_balloon));
+            var out = model.runBalloon(BALLOON_FLOOR_MB, BALLOON_TIMEOUT_S);
+            if (cancelled.get()) {
+                probeRestore(prevWant, zeroed);
+                probeRollback();
+                probeCancelled(ui, true);
+                return;
+            }
+            int verdict = judgeBalloon(out, reservoirPages);
+            probeDismiss(ui);
+            ui = null;
+            // A pass enables straight away. Anything else - a denial, or numbers
+            // that match neither verdict - is put to the user, because a probe
+            // can be wrong (a small reservoir, a vendor that only lets some
+            // allocation classes in). Enabling either way counts as a pass and
+            // is recorded, so the switch stops probing from now on; declining
+            // records nothing and clears any stale verdict, leaving the probe
+            // available next launch.
+            if (verdict == VERDICT_ALLOWED) {
+                model.setCmaProbeAllowed();
+                probeEnableWithSmallPool(target);
+                probeToast(getString(R.string.hugepage_cma_probe_ok,
+                    SizeUtils.formatSize(PROBE_POOL_BYTES)));
+                probeEndUi(true);
+                return;
+            }
+            boolean enable = verdict == VERDICT_DENIED
+                ? probeAsk(getString(R.string.hugepage_cma_probe_denied_title),
+                    getString(R.string.hugepage_cma_probe_denied_result),
+                    getString(R.string.hugepage_cma_probe_enable))
+                : probeAskAbnormal(out, reservoirPages);
+            if (enable) {
+                model.setCmaProbeAllowed();
+                probeEnableWithSmallPool(target);   // also restores pool_want
+                probeToast(getString(R.string.hugepage_cma_enabled_pool,
+                    SizeUtils.formatSize(PROBE_POOL_BYTES)));
+                probeEndUi(true);
+            } else {
+                probeRestore(prevWant, zeroed);
+                model.clearCmaProbeResult();
+                model.saveCmaTarget(0);   // demolishes the reservoir
+                if (zeroed) model.acquire(1);   // refill the restored pool
+                probeEndUi(false);
+            }
+        } catch (InterruptedException e) {
+            probeRestore(prevWant, zeroed);
+            if (raised) probeRollback();
+            probeCancelled(ui, ui != null);
+        } catch (Exception e) {
+            // Never leave the flow lock stuck: undo our writes and surface the
+            // error instead of a wedged switch.
+            Log.w(TAG, "CMA probe failed", e);
+            probeRestore(prevWant, zeroed);
+            if (raised) probeRollback();
+            probeDismiss(ui);
+            probeFail(null, getString(R.string.hugepage_cma_probe_failed_generic));
+        }
+    }
+
+    /** Put {@code pool_want} back if the probe emptied it (live knob only). */
+    private void probeRestore(long prevWant, boolean zeroed) {
+        if (zeroed && prevWant >= 0) model.writeWant(prevWant);
+    }
+
+    /**
+     * The reboot half of the probe: the reservoir target survived a reboot with
+     * no verdict recorded, so the module has now built it on clean memory and
+     * the measurement can finally run. Asked once per visit; declining leaves
+     * the reservoir in place (it is still lent to apps) and the switch on.
+     */
+    private void promptPendingProbe() {
+        if (probePromptShown || cmaBusy || isFinishing() || isDestroyed()) return;
+        probePromptShown = true;
+        new MaterialAlertDialogBuilder(this)
+            .setTitle(R.string.hugepage_cma_probe_pending_title)
+            .setMessage(R.string.hugepage_cma_probe_pending_msg)
+            .setPositiveButton(R.string.hugepage_cma_probe_continue, (d, w) -> {
+                cmaBusy = true;
+                startCmaProbe();
+            })
+            .setNegativeButton(android.R.string.cancel, null)
+            .show();
+    }
+
+    /** Undo the probe's only write: the raised total demolishes its reservoir. */
+    private void probeRollback() {
+        model.writeWantWithCma(0);
+    }
+
+    @NonNull
+    private String reservoirStage(long got, long goal) {
+        return getString(R.string.hugepage_cma_building,
+            SizeUtils.formatSize(got * PAGE_SIZE), SizeUtils.formatSize(goal * PAGE_SIZE));
+    }
+
+    /**
+     * The end state of an enabled probe: a {@value #PROBE_POOL_BYTES}-byte pool
+     * and the with-CMA total the probe assembled, persisted in one settings.prop
+     * rewrite so the next boot comes up the same way. This is the probe's first
+     * and only {@code pool_want} write: shrinking the pool hands its pages to
+     * the reservoir (the module's shrink path), and the v3 acquire then stages
+     * 512 MB back in and tops the reservoir up toward the total.
+     */
+    private void probeEnableWithSmallPool(long total) {
+        model.saveTargets(PROBE_POOL_PAGES, total);
+        // v3: only the mode-2/3 sweep runs the reservoir-building Phase R.
+        model.acquire(3);
+    }
+
+    /**
+     * Poll the reservoir toward {@code goal} pages, narrating progress. Returns
+     * true once {@code pool_cma} reaches it; false on stop/timeout/cancel.
+     */
+    private boolean waitReservoir(@NonNull ProbeUi ui, long goal,
+                                  @NonNull AtomicBoolean cancelled)
+        throws InterruptedException {
+        for (int i = 0; i < 1800; i++) {   // 30 min hard bound
+            if (cancelled.get()) return false;
+            var s = model.state();
+            probeStage(ui, reservoirStage(s.cmaPool, goal));
+            if (s.cmaPool >= goal) return true;
+            // Give the worker a few seconds to raise acquire_active before
+            // treating "not acquiring" as done-short.
+            if (!s.acquiring && i > 5) return false;
+            Thread.sleep(1000);
+        }
+        return false;
+    }
+
+    /**
+     * Judge the balloon output against the reservoir that was built: pressure
+     * that consumed at least half of it means apps allocate from CMA; a tenth
+     * or less means they can't; anything between (or unparsable output) is
+     * unreadable and goes to the user.
+     */
+    private int judgeBalloon(@Nullable Map<String, String> out, long reservoirPages) {
+        if (out == null) return VERDICT_ABNORMAL;
+        long diffKb;
+        long heldMb;
+        try {
+            diffKb = Long.parseLong(out.getOrDefault("cma_diff_kb", "").trim());
+            heldMb = Long.parseLong(out.getOrDefault("held_mb", "").trim());
+        } catch (NumberFormatException e) {
+            return VERDICT_ABNORMAL;
+        }
+        long reservoirKb = reservoirPages * (PAGE_SIZE / 1024);
+        if (reservoirKb <= 0 || heldMb <= 0) return VERDICT_ABNORMAL;
+        if (diffKb >= reservoirKb / 2) return VERDICT_ALLOWED;
+        if (diffKb <= reservoirKb / 10) return VERDICT_DENIED;
+        return VERDICT_ABNORMAL;
+    }
+
+    /* ---- probe worker <-> UI plumbing (all blocking helpers) ---- */
+
+    /** Blocking two-choice dialog; false on cancel/back/finish. */
+    private boolean probeAsk(@NonNull String title, @NonNull String message,
+                             @NonNull String positive) throws InterruptedException {
+        return probeAskChoice(title, message, positive,
+            getString(android.R.string.cancel)) == CHOICE_POSITIVE;
+    }
+
+    /** {@link #probeAskChoice} outcomes; {@code CHOICE_NONE} = back/dismiss/gone. */
+    private static final int CHOICE_NONE = 0;
+    private static final int CHOICE_POSITIVE = 1;
+    private static final int CHOICE_NEGATIVE = 2;
+
+    /**
+     * Blocking dialog offering two named actions, with back/outside-tap as a
+     * third "neither" outcome. Both buttons are real choices - which is why
+     * neither is labelled Cancel by callers that need three ways out.
+     */
+    private int probeAskChoice(@NonNull String title, @NonNull String message,
+                               @NonNull String positive, @NonNull String negative)
+        throws InterruptedException {
+        var choice = new AtomicInteger(CHOICE_NONE);
+        var latch = new CountDownLatch(1);
+        runOnUiThread(() -> {
+            // isDestroyed covers rotation teardown (isFinishing stays false);
+            // the catch covers a window torn down mid-post - either way the
+            // latch MUST be counted or the worker blocks forever.
+            if (isFinishing() || isDestroyed()) {
+                latch.countDown();
+                return;
+            }
+            try {
+                new MaterialAlertDialogBuilder(this)
+                    .setTitle(title)
+                    .setMessage(message)
+                    .setPositiveButton(positive, (d, w) -> choice.set(CHOICE_POSITIVE))
+                    .setNegativeButton(negative, (d, w) -> choice.set(CHOICE_NEGATIVE))
+                    .setOnDismissListener(d -> latch.countDown())
+                    .show();
+            } catch (Exception e) {
+                latch.countDown();
+            }
+        });
+        latch.await();
+        return choice.get();
+    }
+
+    /** The "result unreadable - enable anyway?" dialog, with the raw numbers. */
+    private boolean probeAskAbnormal(@Nullable Map<String, String> out, long reservoirPages)
+        throws InterruptedException {
+        long diffKb = 0;
+        long heldMb = 0;
+        String stop = "?";
+        if (out != null) {
+            try {
+                diffKb = Long.parseLong(out.getOrDefault("cma_diff_kb", "0").trim());
+            } catch (NumberFormatException ignored) {
+            }
+            try {
+                heldMb = Long.parseLong(out.getOrDefault("held_mb", "0").trim());
+            } catch (NumberFormatException ignored) {
+            }
+            stop = out.getOrDefault("stop_reason", "?");
+        }
+        var choice = new AtomicInteger(0);
+        var latch = new CountDownLatch(1);
+        long fDiffKb = diffKb;
+        long fHeldMb = heldMb;
+        String fStop = stop;
+        runOnUiThread(() -> {
+            if (isFinishing() || isDestroyed()) {
+                latch.countDown();
+                return;
+            }
+            try {
+                new MaterialAlertDialogBuilder(this)
+                    .setTitle(R.string.hugepage_cma_probe_abnormal_title)
+                    .setMessage(getString(R.string.hugepage_cma_probe_abnormal_msg,
+                        SizeUtils.formatSize(fDiffKb * 1024),
+                        SizeUtils.formatSize(reservoirPages * PAGE_SIZE),
+                        SizeUtils.formatSize(fHeldMb * 1024 * 1024),
+                        fStop))
+                    .setPositiveButton(R.string.hugepage_cma_probe_enable,
+                        (d, w) -> choice.set(1))
+                    .setNegativeButton(R.string.hugepage_cma_probe_keep_off, null)
+                    .setOnDismissListener(d -> latch.countDown())
+                    .show();
+            } catch (Exception e) {
+                latch.countDown();
+            }
+        });
+        latch.await();
+        return choice.get() == 1;
+    }
+
+    /** Show the cancellable progress dialog; null when the activity is gone. */
+    @Nullable
+    private ProbeUi probeProgressShow(@NonNull String initial,
+                                      @NonNull AtomicBoolean cancelled)
+        throws InterruptedException {
+        var holder = new java.util.concurrent.atomic.AtomicReference<ProbeUi>();
+        var latch = new CountDownLatch(1);
+        runOnUiThread(() -> {
+            try {
+                if (isFinishing() || isDestroyed()) return;
+                float density = getResources().getDisplayMetrics().density;
+                var text = new TextView(this);
+                text.setText(initial);
+                var box = new LinearLayout(this);
+                box.setOrientation(LinearLayout.HORIZONTAL);
+                box.setGravity(android.view.Gravity.CENTER_VERTICAL);
+                int pad = Math.round(24 * density);
+                box.setPaddingRelative(pad, Math.round(16 * density), pad, 0);
+                var spinner = new ProgressBar(this);
+                box.addView(spinner, Math.round(32 * density), Math.round(32 * density));
+                var lp = new LinearLayout.LayoutParams(
+                    LinearLayout.LayoutParams.MATCH_PARENT,
+                    LinearLayout.LayoutParams.WRAP_CONTENT);
+                lp.setMarginStart(Math.round(16 * density));
+                box.addView(text, lp);
+                var dialog = new MaterialAlertDialogBuilder(this)
+                    .setTitle(R.string.hugepage_enable_cma)
+                    .setView(box)
+                    .setCancelable(false)
+                    .setNegativeButton(android.R.string.cancel, null)
+                    .create();
+                dialog.show();
+                // Cancel requests cooperative interruption; the worker decides
+                // when it is safe to stop, so the button must not dismiss the
+                // dialog. A running balloon ignores flags, so also kill it -
+                // its run() then returns quickly and the worker sees the flag.
+                var btn = dialog.getButton(android.content.DialogInterface.BUTTON_NEGATIVE);
+                if (btn != null) btn.setOnClickListener(v -> {
+                    cancelled.set(true);
+                    v.setEnabled(false);
+                    runOnPool(() -> runList("pkill", "-f",
+                        "gh-hugepage-reserve/balloon"));
+                });
+                holder.set(new ProbeUi(dialog, text));
+            } catch (Exception ignored) {
+                // window torn down mid-post: holder stays null = "activity gone"
+            } finally {
+                latch.countDown();
+            }
+        });
+        latch.await();
+        return holder.get();
+    }
+
+    private void probeStage(@NonNull ProbeUi ui, @NonNull String msg) {
+        runOnUiThread(() -> ui.text.setText(msg));
+    }
+
+    private void probeDismiss(@Nullable ProbeUi ui) {
+        if (ui != null) runOnUiThread(ui.dialog::dismiss);
+    }
+
+    private void probeToast(@NonNull String msg) {
+        runOnUiThread(() -> Toast.makeText(this, msg, Toast.LENGTH_LONG).show());
+    }
+
+    /** Wind the flow down: dismiss, switch off. Callers own the rollback. */
+    private void probeCancelled(@Nullable ProbeUi ui, boolean toast) {
+        probeDismiss(ui);
+        if (toast) probeToast(getString(R.string.hugepage_cma_probe_cancelled));
+        probeEndUi(false);
+    }
+
+    /** Failure with a message dialog (or toast when {@code title} is null). */
+    private void probeFail(@Nullable String title, @NonNull String message) {
+        runOnUiThread(() -> {
+            cmaBusy = false;
+            setCmaSwitch(false);
+            if (isFinishing()) return;
+            if (title == null) {
+                Toast.makeText(this, message, Toast.LENGTH_LONG).show();
+            } else {
+                new MaterialAlertDialogBuilder(this)
+                    .setTitle(title)
+                    .setMessage(message)
+                    .setPositiveButton(android.R.string.ok, null)
+                    .show();
+            }
+            refreshStatus();
+        });
+    }
+
+    private void probeUnavailable(@NonNull String detail) {
+        probeFail(getString(R.string.hugepage_cma_unavailable_title), detail);
+    }
+
+    /** Release the flow lock and settle the switch to the final state. */
+    private void probeEndUi(boolean enabled) {
+        runOnUiThread(() -> {
+            cmaBusy = false;
+            setCmaSwitch(enabled);
+            cmaInputLoaded = false;   // reseed the with-CMA total field
+            loadPoolSize();           // a passing probe pins pool_want to 512 MB
+            refreshStatus();
+        });
+    }
+
     private void confirmUnload() {
         new MaterialAlertDialogBuilder(this)
             .setTitle(R.string.hugepage_stop)
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/hugepage/HugePageColor.java b/app/src/main/java/cn/classfun/droidvm/ui/hugepage/HugePageColor.java
index 19f71c334..7287fbef9 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/hugepage/HugePageColor.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/hugepage/HugePageColor.java
@@ -7,15 +7,32 @@
 import androidx.annotation.NonNull;
 import androidx.core.content.ContextCompat;
 
+import java.util.Collection;
+import java.util.LinkedHashMap;
+import java.util.Map;
+import java.util.TreeSet;
+
 import cn.classfun.droidvm.R;
 
 /**
  * Deterministic per-process colors for the hugepage usage bar and list icons.
- * The same pid always maps to the same hue (stable across refreshes); in dark
- * mode colors are light, in light mode they are dark, so they read against the
- * surface either way.
+ * In dark mode colors are light, in light mode they are dark, so they read
+ * against the surface either way.
+ *
+ * <p>Hues are assigned by golden-angle steps over each pid's <b>rank among the
+ * pids currently shown</b> (ascending pid order), not over the raw pid. Keying
+ * the angle by pid could land two live VMs almost on the same hue (any pid
+ * difference near a multiple of 360/137.508 - e.g. 34 - wraps to within a few
+ * degrees), whereas consecutive ranks are always 137.5&deg; apart, so no two of
+ * up to ~7 VMs come closer than ~32&deg; (&ge;52&deg; for four or fewer). Ranks
+ * are stable while the same VMs run - new pids are usually larger and append at
+ * the end - and both hugepage screens derive the map from the same owner list,
+ * so a VM keeps one color everywhere until the set of VMs itself changes.
  */
 final class HugePageColor {
+    /** Golden angle in degrees: consecutive ranks land maximally apart. */
+    private static final float GOLDEN_ANGLE = 137.508f;
+
     private HugePageColor() {
     }
 
@@ -25,9 +42,22 @@ static boolean isDark(Context ctx) {
         return mode == Configuration.UI_MODE_NIGHT_YES;
     }
 
-    /** Golden-angle hue spread keyed by pid, theme-aware saturation/value. */
-    static int forPid(int pid, boolean dark) {
-        float hue = ((pid * 137.508f) % 360f + 360f) % 360f;
+    /**
+     * Assign a color to every pid in {@code pids} (duplicates collapse), keyed
+     * by ascending-pid rank. Pass the <b>full</b> pid list of the screen (not a
+     * filtered subset) so both hugepage screens agree on the ranks.
+     */
+    @NonNull
+    static Map<Integer, Integer> forPids(@NonNull Collection<Integer> pids, boolean dark) {
+        var map = new LinkedHashMap<Integer, Integer>();
+        int rank = 0;
+        for (var pid : new TreeSet<>(pids)) map.put(pid, forRank(rank++, dark));
+        return map;
+    }
+
+    /** Golden-angle hue for one rank, theme-aware saturation/value. */
+    static int forRank(int rank, boolean dark) {
+        float hue = ((rank * GOLDEN_ANGLE) % 360f + 360f) % 360f;
         float[] hsv = {hue, dark ? 0.50f : 0.72f, dark ? 0.90f : 0.55f};
         return Color.HSVToColor(hsv);
     }
@@ -36,4 +66,27 @@ static int forPid(int pid, boolean dark) {
     static int pending(@NonNull Context ctx) {
         return ContextCompat.getColor(ctx, R.color.hugepage_pending);
     }
+
+    /** Reservoir portion currently occupied by other apps' allocations. */
+    static int cmaUsed(@NonNull Context ctx) {
+        return ContextCompat.getColor(ctx, R.color.hugepage_cma_used);
+    }
+
+    /** Reservoir portion still free in buddy. */
+    static int cmaFree(@NonNull Context ctx) {
+        return ContextCompat.getColor(ctx, R.color.hugepage_cma_free);
+    }
+
+    /** Available-pool portion not flippable to CMA as whole pageblocks. */
+    static int availNonCma(@NonNull Context ctx) {
+        return ContextCompat.getColor(ctx, R.color.hugepage_avail_non_cma);
+    }
+
+    /**
+     * Opaque gray for the synthetic "available" list row's icon - the bar's
+     * translucent track color is too faint as an icon tint.
+     */
+    static int availIcon(boolean dark) {
+        return dark ? 0xFFB5B5B5 : 0xFF8A8A8A;
+    }
 }
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/hugepage/HugePageModel.java b/app/src/main/java/cn/classfun/droidvm/ui/hugepage/HugePageModel.java
index 30b7fb4b8..350283e91 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/hugepage/HugePageModel.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/hugepage/HugePageModel.java
@@ -6,6 +6,7 @@
 import static cn.classfun.droidvm.lib.utils.RunUtils.run;
 import static cn.classfun.droidvm.lib.utils.RunUtils.runList;
 import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
+import static cn.classfun.droidvm.lib.utils.StringUtils.joinNonEmpty;
 import static cn.classfun.droidvm.lib.utils.StringUtils.pathJoin;
 
 import android.os.SystemClock;
@@ -21,6 +22,7 @@
 import java.util.concurrent.CountDownLatch;
 import java.util.concurrent.TimeUnit;
 import java.util.concurrent.atomic.AtomicReference;
+import java.util.function.LongSupplier;
 import java.util.function.Supplier;
 import java.util.regex.Pattern;
 
@@ -56,6 +58,12 @@ final class HugePageModel {
     private static final String DISABLE_FILE = pathJoin(MAGISK_BASE, "disable");
     private static final String SETTINGS_PROP = pathJoin(MAGISK_BASE, "settings.prop");
     private static final String KO_PATH = pathJoin(MAGISK_BASE, "gh_hugepage_reserve.ko");
+    /** The module's own preflight+insmod script (v10.1+); preferred load path. */
+    private static final String LOAD_SCRIPT = pathJoin(MAGISK_BASE, "load.sh");
+    /** ABI/BTF preflight helper the boot script feeds into insmod. */
+    private static final String KAPI_CHECK = pathJoin(MAGISK_BASE, "kapi_check");
+    /** insmod params are pasted into a shell line: allow only inert characters. */
+    private static final Pattern SAFE_PARAM = Pattern.compile("[A-Za-z0-9_,.-]+");
     /** A THP huge page is 2 MiB = 2048 KiB. */
     private static final long KB_PER_PAGE = 2048;
     /** Default target if settings.prop has none (pages): 1024 x 2 MB = 2 GB. */
@@ -159,55 +167,117 @@ static final class UsageEntry {
     /**
      * Version-unified snapshot of module + pool state. {@code targetIdeal} is the
      * one "target" concept across versions: v7's {@code pool_want}, else v6's
-     * read-only {@code pool_target}, else current capacity. {@code deficit} is what
-     * is still missing toward it ({@code targetIdeal - free - lent}); the acquire
-     * buttons are usable exactly when {@code loaded && deficit > 0}.
+     * read-only {@code pool_target}, else current capacity. {@code deficit} is the
+     * work acquire still has - the larger of the pool shortfall and the reservoir
+     * shortfall (see {@link #state()}); the acquire buttons are usable exactly when
+     * {@code loaded && deficit > 0}. It is <b>not</b> the bar's waiting-to-acquire
+     * block, which each screen derives from its own segments.
      */
     static final class Snapshot {
-        final boolean installed;      // Magisk module files present
-        final boolean loaded;         // insmod'd (sysfs node exists)
-        final boolean statsOk;        // refill_stat was readable (false on a transient failure)
-        final boolean bootEnabled;    // will load next boot (no Magisk disable file)
-        final long targetIdeal;       // unified target (want): pool_want ?? pool_target ?? built
-        final long built;             // pool_total (capacity assembled)
-        final long free;              // pool_avail (in the pool now)
-        final long lent;              // served (out to VMs); 0 if the module can't report it (v6)
-        final long deficit;           // max(0, targetIdeal - free - lent)
-        final boolean acquiring;      // an acquire worker is running
-        final int acquireMode;        // which mode (1/2/3), or -1 if the module can't report it
-        final boolean hasPoolWant;    // pool_want knob reported (v7 runtime-resizable)
-        final boolean softDisabled;   // v7 pool_want <= 1 (reserve released, module stays loaded)
+        // Field defaults double as the not-loaded snapshot (the short ctor
+        // touches only installed/bootEnabled and leaves the rest as declared).
+        boolean installed = false;    // Magisk module files present
+        boolean loaded = false;       // insmod'd (sysfs node exists)
+        boolean statsOk = false;      // refill_stat was readable (false on a transient failure)
+        boolean bootEnabled = false;  // will load next boot (no Magisk disable file)
+        long targetIdeal = 0;         // unified target (want): pool_want ?? pool_target ?? built
+        long built = 0;               // pool_total (capacity assembled)
+        long free = 0;                // pool_avail (in the pool now)
+        long lent = 0;                // served (out to VMs); 0 if the module can't report it (v6)
+        long deficit = 0;             // toward want-with-cma (v10 on) or targetIdeal
+        boolean acquiring = false;    // an acquire worker is running
+        int acquireMode = -1;         // which mode (1/2/3), or -1 if the module can't report it
+        boolean hasPoolWant = false;  // pool_want knob reported (v7 runtime-resizable)
+        boolean softDisabled = false; // v7 pool_want <= 1 (reserve released, module stays loaded)
+        // v10 CMA reservoir (refill_stat additions); all -1 / 0 on pre-v10 modules.
+        boolean hasCma = false;       // refill_stat reports pool_want_with_cma (v10 module)
+        long wantWithCma = 0;         // total target incl. reservoir (pages); 0 = CMA off
+        long cmaPool = 0;             // reservoir size (2 MB-page equivalents)
+        long availCmaAble = -1;       // avail pages flippable as whole pageblocks; -1 unreported
+        int cmaPbOrder = -1;          // pageblock order; -1 = CMA side off this boot
         // Raw display strings from refill_stat (pass-through, "-" when absent).
-        @NonNull final String state;
-        @NonNull final String totalServed;
-        @NonNull final String totalRefilled;
-        @NonNull final String activeVms;
-        @NonNull final String acquireStopReason;   // why the last acquire stopped ("-" if unreported)
-
-        private Snapshot(boolean installed, boolean loaded, boolean statsOk, boolean bootEnabled,
-                         long targetIdeal, long built, long free, long lent, long deficit,
-                         boolean acquiring, int acquireMode, boolean hasPoolWant,
-                         boolean softDisabled, @NonNull String state, @NonNull String totalServed,
-                         @NonNull String totalRefilled, @NonNull String activeVms,
-                         @NonNull String acquireStopReason) {
+        @NonNull String state = "-";
+        @NonNull String totalServed = "-";
+        @NonNull String totalRefilled = "-";
+        @NonNull String activeVms = "-";
+        @NonNull String acquireStopReason = "-";   // why the last acquire stopped ("-" if unreported)
+
+        /**
+         * Not-loaded snapshot: only the install + next-boot flags are known;
+         * every pool field keeps its default (the {@code loaded == false} view).
+         */
+        Snapshot(boolean installed, boolean bootEnabled) {
             this.installed = installed;
-            this.loaded = loaded;
-            this.statsOk = statsOk;
             this.bootEnabled = bootEnabled;
-            this.targetIdeal = targetIdeal;
-            this.built = built;
-            this.free = free;
-            this.lent = lent;
-            this.deficit = deficit;
-            this.acquiring = acquiring;
-            this.acquireMode = acquireMode;
-            this.hasPoolWant = hasPoolWant;
-            this.softDisabled = softDisabled;
-            this.state = state;
-            this.totalServed = totalServed;
-            this.totalRefilled = totalRefilled;
-            this.activeVms = activeVms;
-            this.acquireStopReason = acquireStopReason;
+        }
+
+        /**
+         * Loaded snapshot parsed straight from a {@code refill_stat} key=value
+         * map. {@code poolTargetFn} supplies v6's read-only {@code pool_target}
+         * lazily - it is only consulted when {@code pool_want} is absent.
+         */
+        Snapshot(@NonNull Map<String, String> s, boolean installed, boolean bootEnabled,
+                 @NonNull LongSupplier poolTargetFn) {
+            this.installed = installed;
+            this.bootEnabled = bootEnabled;
+            this.loaded = true;
+            this.statsOk = !s.isEmpty();   // empty == the read failed transiently
+            this.hasPoolWant = s.containsKey("pool_want");
+            this.built = getLong(s, "pool_total", 0);
+            this.free = getLong(s, "pool_avail", 0);
+            this.lent = getLong(s, "served", 0);
+            long rawWant = getLong(s, "pool_want", -1);
+            long want = rawWant;
+            if (want < 0) want = poolTargetFn.getAsLong();   // v6: separate read-only knob
+            if (want < 0) want = built;                       // last resort: current capacity
+            this.targetIdeal = want;
+            // v10 reservoir state; pre-v10 modules report none of these keys.
+            this.hasCma = s.containsKey("pool_want_with_cma");
+            this.wantWithCma = getLong(s, "pool_want_with_cma", 0);
+            this.cmaPool = getLong(s, "pool_cma", 0);
+            this.availCmaAble = getLong(s, "pool_avail_cma_able", -1);
+            this.cmaPbOrder = (int) getLong(s, "cma_pb_order", -1);
+            // What acquire still has to do, mirroring the module's own "already at
+            // target" test (acquire_set): it runs when the POOL is short
+            // (avail + served < pool_want) OR the RESERVOIR is short
+            // (avail + served + pool_cma < pool_want_with_cma). Those are separate
+            // shortfalls: raising pool_want while the reservoir already covers the
+            // total leaves no total deficit, yet acquire must still stage pages in
+            // from the reservoir to fill the pool. Reporting only the total would
+            // grey out the acquire buttons exactly then.
+            long poolDeficit = Math.max(0, want - free - lent);
+            long reservoirDeficit = wantWithCma > 0
+                ? Math.max(0, wantWithCma - free - lent - cmaPool) : 0;
+            this.deficit = Math.max(poolDeficit, reservoirDeficit);
+            this.acquiring = "1".equals(s.get("acquire_active"));
+            this.acquireMode = (int) getLong(s, "acquire_mode", -1);
+            this.softDisabled = hasPoolWant && rawWant <= 1;
+            this.state = s.getOrDefault("state", "-");
+            this.totalServed = s.getOrDefault("total_served", "-");
+            this.totalRefilled = s.getOrDefault("total_refilled", "-");
+            this.activeVms = s.getOrDefault("active_vms", "-");
+            this.acquireStopReason = s.getOrDefault("acquire_stop_reason", "-");
+        }
+
+        /** The v10 reservoir is on right now (module tracks a with-CMA total). */
+        boolean cmaActive() {
+            return hasCma && wantWithCma > 0;
+        }
+    }
+
+    /**
+     * Reservoir occupancy snapshot from the {@code cma_usage} knob (~1 s cache in
+     * the module). {@code ok == false} when the knob is absent/unreadable - the
+     * caller then shows the reservoir as one undivided block. Only the occupied
+     * amount is carried: the free part is derived from {@code pool_cma}.
+     */
+    static final class CmaUsage {
+        final boolean ok;
+        final long usedMb;
+
+        private CmaUsage(boolean ok, long usedMb) {
+            this.ok = ok;
+            this.usedMb = usedMb;
         }
     }
 
@@ -224,29 +294,25 @@ Snapshot state() {
         boolean installed = existsSticky(MODULE_PROP);
         boolean bootEnabled = !shellCheckExists(DISABLE_FILE);
         boolean loaded = existsSticky(SYSFS_BASE);
-        if (!loaded) {
-            return new Snapshot(installed, false, false, bootEnabled,
-                0, 0, 0, 0, 0, false, -1, false, false, "-", "-", "-", "-", "-");
-        }
+        if (!loaded) return new Snapshot(installed, bootEnabled);
         var s = parseProp(safeRead(pathJoin(SYSFS_PARAMS, "refill_stat")));
-        boolean statsOk = !s.isEmpty();   // empty == the read failed transiently
-        boolean hasWant = s.containsKey("pool_want");
-        long built = getLong(s, "pool_total", 0);
-        long free = getLong(s, "pool_avail", 0);
-        long lent = getLong(s, "served", 0);
-        long rawWant = getLong(s, "pool_want", -1);
-        long want = rawWant;
-        if (want < 0) want = poolTarget();   // v6: separate read-only knob
-        if (want < 0) want = built;           // last resort: current capacity
-        long deficit = Math.max(0, want - free - lent);
-        boolean acquiring = "1".equals(s.get("acquire_active"));
-        int mode = (int) getLong(s, "acquire_mode", -1);
-        boolean softDisabled = hasWant && rawWant <= 1;
-        return new Snapshot(installed, true, statsOk, bootEnabled,
-            want, built, free, lent, deficit, acquiring, mode, hasWant, softDisabled,
-            s.getOrDefault("state", "-"), s.getOrDefault("total_served", "-"),
-            s.getOrDefault("total_refilled", "-"), s.getOrDefault("active_vms", "-"),
-            s.getOrDefault("acquire_stop_reason", "-"));
+        return new Snapshot(s, installed, bootEnabled, this::poolTarget);
+    }
+
+    /** Reservoir occupancy from {@code cma_usage}; {@code ok=false} when absent. */
+    @NonNull
+    CmaUsage cmaUsage() {
+        var raw = safeRead(pathJoin(SYSFS_PARAMS, "cma_usage"));
+        if (raw.trim().isEmpty()) return new CmaUsage(false, 0);
+        // Tokens are key=value but not strictly one per line (blocks_* share a
+        // line), so scan word-wise instead of reusing the line parser.
+        var map = new LinkedHashMap<String, String>();
+        for (var tok : raw.split("[\\s\\n]+")) {
+            var parts = tok.split("=", 2);
+            if (parts.length == 2) map.put(parts[0].trim(), parts[1].trim());
+        }
+        if (!map.containsKey("reservoir_mb")) return new CmaUsage(false, 0);
+        return new CmaUsage(true, getLong(map, "used_mb", 0));
     }
 
     /**
@@ -278,26 +344,6 @@ boolean koAvailable() {
         return existsSticky(pathJoin(SYSFS_PARAMS, "served_summary"));
     }
 
-    /**
-     * Save a new pool target of {@code pages}. Persists it to settings.prop (for
-     * the next boot) and applies it to the running pool if the live {@code pool_want}
-     * knob exists; on v6 (read-only {@code pool_target}) only the persist takes
-     * effect. Does <b>not</b> fire an acquire -- the caller drives that from the
-     * resulting {@link Snapshot#deficit}.
-     */
-    @NonNull
-    Result saveSize(long pages) {
-        var persisted = writeSettings(pages);
-        if (!persisted.ok()) return Result.failed("settings", persisted.error);
-        // Best-effort live apply; the impl reports whether it actually took effect
-        // on the running pool ("pool_want") or only persisted for next boot
-        // ("settings" - v6's read-only target, or a rejected write).
-        var live = writeKnob("pool_want", Long.toString(pages));
-        // Degraded when the live write didn't land (v6 read-only target, or a
-        // rejected write): only the next-boot persist took effect.
-        return Result.ok(live.ok() ? "pool_want" : "settings", !live.ok());
-    }
-
     /**
      * Bring the running pool up (true) or down (false), choosing the deepest action
      * the module supports:
@@ -393,12 +439,211 @@ Result stopAcquire() {
         return t.ok() ? Result.ok("acquire") : Result.unsupported(t.error);
     }
 
+    /* ================================================================== */
+    /*  v10 CMA reservoir + consumability probe                           */
+    /* ================================================================== */
+
+    /**
+     * The app-side probe verdict recorded in settings.prop as
+     * {@code cma_probe_result}: {@code 1} = apps can consume the reservoir,
+     * {@code 0} = they can't (the boot script then keeps the whole CMA side
+     * cold), {@code null} = the probe never ran.
+     */
+    @Nullable
+    Integer cmaProbeResult() {
+        var v = parseProp(safeRead(SETTINGS_PROP)).get("cma_probe_result");
+        if (v == null) return null;
+        try {
+            return Integer.parseInt(v.trim());
+        } catch (NumberFormatException e) {
+            return null;
+        }
+    }
+
+    /**
+     * Record a <b>passed</b> probe (see {@link #cmaProbeResult}). Only success
+     * is ever persisted: a failed or inconclusive probe leaves no verdict, so
+     * the next app launch can simply probe again.
+     */
+    @NonNull
+    Result setCmaProbeAllowed() {
+        var changes = new LinkedHashMap<String, String>();
+        changes.put("cma_probe_result", "1");
+        var t = updateSettings(changes);
+        return t.ok() ? Result.ok("settings") : Result.failed("settings", t.error);
+    }
+
+    /**
+     * Drop any recorded verdict. Beyond "forget a failure", this un-sticks a
+     * legacy {@code cma_probe_result=0}: the boot script hands the module -1
+     * preflight values while that key is 0, which kills the CMA side for the
+     * whole boot and makes a re-probe impossible until it is gone.
+     */
+    @NonNull
+    Result clearCmaProbeResult() {
+        var changes = new LinkedHashMap<String, String>();
+        changes.put("cma_probe_result", null);   // null value = remove the key
+        var t = updateSettings(changes);
+        return t.ok() ? Result.ok("settings") : Result.failed("settings", t.error);
+    }
+
+    /**
+     * The last non-zero with-CMA total (pages) the user ran with, kept under an
+     * app-owned settings.prop key so switching CMA off (which must persist
+     * {@code pool_want_with_cma=0} for the boot script) doesn't forget the size.
+     */
+    long lastCmaTargetPages() {
+        var s = parseProp(safeRead(SETTINGS_PROP));
+        var v = s.get("pool_want_with_cma_last");
+        if (v != null) try {
+            return Long.parseLong(v.trim());
+        } catch (NumberFormatException ignored) {
+        }
+        return 0;
+    }
+
+    /**
+     * Persist the with-CMA total for the next boot and best-effort apply it to
+     * the running module. A non-zero target is also remembered under the
+     * {@code _last} key for the next re-enable. Like {@link #saveTargets}, the
+     * result reports whether the live write landed ({@code degraded} when only
+     * the persist took effect).
+     */
+    @NonNull
+    Result saveCmaTarget(long pages) {
+        var persisted = updateSettings(cmaTargetChanges(pages));
+        if (!persisted.ok()) return Result.failed("settings", persisted.error);
+        var live = writeKnob("pool_want_with_cma", Long.toString(pages));
+        return Result.ok(live.ok() ? "pool_want_with_cma" : "settings", !live.ok());
+    }
+
+    /**
+     * Persist pool target and with-CMA total in ONE settings.prop rewrite, then
+     * apply both live knobs ({@code pool_want} first - a value above the old
+     * with-CMA total drags it up, and the second write then pins it exact).
+     * {@code withCma < 0} leaves the CMA keys untouched and only sets the pool
+     * target (persisted under both {@code pool_want} and legacy
+     * {@code pool_target}; on v6 only the persist takes effect). Does <b>not</b>
+     * fire an acquire -- the caller drives that from {@link Snapshot#deficit}.
+     */
+    @NonNull
+    Result saveTargets(long pages, long withCma) {
+        // Invariant (module plan.md sec.1): pool_want <= pool_want_with_cma. The kernel
+        // clamps a low live write itself, but the persisted pair must agree
+        // too or the next boot would insmod inconsistent targets.
+        if (withCma >= 0) withCma = Math.max(withCma, pages);
+        var changes = new LinkedHashMap<String, String>();
+        changes.put("pool_want", Long.toString(pages));
+        changes.put("pool_target", Long.toString(pages));
+        if (withCma >= 0) changes.putAll(cmaTargetChanges(withCma));
+        var persisted = updateSettings(changes);
+        if (!persisted.ok()) return Result.failed("settings", persisted.error);
+        var live = writeKnob("pool_want", Long.toString(pages));
+        boolean liveOk = live.ok();
+        if (withCma >= 0)
+            liveOk &= writeKnob("pool_want_with_cma", Long.toString(withCma)).ok();
+        return Result.ok(liveOk ? "pool_want" : "settings", !liveOk);
+    }
+
+    @NonNull
+    private static Map<String, String> cmaTargetChanges(long pages) {
+        var changes = new LinkedHashMap<String, String>();
+        changes.put("pool_want_with_cma", Long.toString(pages));
+        if (pages > 0) changes.put("pool_want_with_cma_last", Long.toString(pages));
+        return changes;
+    }
+
+    /** Live {@code pool_want_with_cma} write only - the probe's first step. */
+    @NonNull
+    Result writeWantWithCma(long pages) {
+        var t = writeKnob("pool_want_with_cma", Long.toString(pages));
+        return t.ok() ? Result.ok("pool_want_with_cma")
+            : Result.failed("pool_want_with_cma", t.error);
+    }
+
+    /**
+     * Live {@code pool_want} write only (no settings.prop persist), so a value
+     * written here is undone by a reboot. The probe uses it to empty the pool
+     * into the reservoir and to put it back afterwards.
+     */
+    @NonNull
+    Result writeWant(long pages) {
+        var t = writeKnob("pool_want", Long.toString(pages));
+        return t.ok() ? Result.ok("pool_want") : Result.failed("pool_want", t.error);
+    }
+
+    /** MemTotal from /proc/meminfo in KiB, or -1 if unreadable. */
+    long memTotalKb() {
+        return meminfoKb("MemTotal");
+    }
+
+    /**
+     * The module's RAM-derived cap on the targets (pages), read-only:
+     * {@code min(ram - min(ram/2, 6G), 24G)}. Both {@code pool_want} and
+     * {@code pool_want_with_cma} are clamped to it, so it bounds how much
+     * reservoir can sit on top of a given pool. -1 when unreadable (pre-v7).
+     */
+    long poolSizeMax() {
+        try {
+            var v = shellReadFile(pathJoin(SYSFS_PARAMS, "pool_size_max")).trim();
+            if (!v.isEmpty()) return Long.parseLong(v);
+        } catch (Exception ignored) {
+        }
+        return -1;
+    }
+
+    private long meminfoKb(@NonNull String key) {
+        var prefix = fmt("%s:", key);
+        for (var line : safeRead("/proc/meminfo").split("\n")) {
+            if (!line.startsWith(prefix)) continue;
+            var digits = NON_DIGITS.matcher(line).replaceAll("");
+            if (!digits.isEmpty()) try {
+                return Long.parseLong(digits);
+            } catch (NumberFormatException ignored) {
+            }
+        }
+        return -1;
+    }
+
+    /**
+     * Run the module-shipped {@code balloon} pressure tool (see tools/balloon.c):
+     * it anon-balloons until MemAvailable drops under {@code floorMb} and prints
+     * {@code cma_before_kb / cma_after_kb / cma_diff_kb / held_mb / stop_reason}.
+     * Supervised with {@code timeout} (falling back to unsupervised where the
+     * command is missing) because on a kernel that does NOT let anon consume CMA
+     * the floor can fire very late or never. Returns the parsed key=value output,
+     * or {@code null} when the tool is absent, was killed, or printed nothing
+     * usable - the caller treats that as an unreadable verdict.
+     */
+    @Nullable
+    Map<String, String> runBalloon(long floorMb, long timeoutSec) {
+        var bin = pathJoin(MAGISK_BASE, "balloon");
+        if (!existsSticky(bin)) return null;
+        var r = run("chmod 755 %s && timeout %d %s %d",
+            escapedString(bin), timeoutSec, escapedString(bin), floorMb);
+        if (r.getCode() == 127)   // no timeout applet on this ROM
+            r = run("%s %d", escapedString(bin), floorMb);
+        if (!r.isSuccess()) return null;
+        var map = parseProp(r.getOutString());
+        return map.containsKey("cma_diff_kb") ? map : null;
+    }
+
     /* ================================================================== */
     /*  Ladder plumbing (internal)                                        */
     /* ================================================================== */
 
-    /** insmod ladder: both keys, then {@code pool_want=} (v7), {@code pool_target=} (v6), bare. */
-    private enum LoadImpl { BOTH, POOL_WANT, POOL_TARGET, BARE }
+    /**
+     * insmod ladder, richest first. {@code load.sh} is the module's own
+     * preflight+insmod (v10+) and needs nothing from us. The remaining rungs
+     * exist only for the released modules that predate it: v9 wants its ABI
+     * guard, v6..v8 take size keys alone. Each rung drops the parameter group an
+     * older module wouldn't recognise.
+     */
+    private enum LoadImpl {
+        SCRIPT,
+        GUARD_BOTH, GUARD_WANT, GUARD_TARGET,   // ABI guard (v9)
+        BOTH, POOL_WANT, POOL_TARGET, BARE      // no guard (v6/v7/v8)
+    }
 
     /** Marker for single-implementation actions. */
     private enum Only { DEFAULT }
@@ -440,8 +685,32 @@ private static Usage usageOf(@NonNull List<Try<Source, List<UsageEntry>>> log) {
     @NonNull
     private List<Try<LoadImpl, Void>> loadLadder(long pages) {
         var log = new ArrayList<Try<LoadImpl, Void>>();
+        // Best rung: the module's own load.sh - the exact preflight+insmod the
+        // boot script performs, so a runtime enable reproduces the boot-time
+        // configuration and future preflight changes need no app change. It
+        // reads the size from settings.prop, which is where `pages` came from.
+        if (existsSticky(LOAD_SCRIPT) && rung(null, log, LoadImpl.SCRIPT, () -> {
+            var r = run("sh %s", escapedString(LOAD_SCRIPT));
+            return (r.isSuccess() && existsSticky(SYSFS_BASE))
+                ? Try.<LoadImpl, Void>ok(LoadImpl.SCRIPT, null)
+                : Try.<LoadImpl, Void>fail(LoadImpl.SCRIPT, reason(r, "load.sh"));
+        })) return log;
         var w = fmt("pool_want=\"%d\"", pages);
         var t = fmt("pool_target=\"%d\"", pages);
+        // No load.sh: a released module that predates it (v6..v9). Those have no
+        // CMA parameters at all, so there is nothing to reconstruct here - only
+        // v9's ABI guard, without which an ABI-drifted symbol can kCFI-panic on
+        // first call. Every v10+ preflight lives in load.sh alone, so it can
+        // never drift from what this app passes.
+        var guard = kapiGuardArg();
+        if (!guard.isEmpty()) {
+            if (rung(null, log, LoadImpl.GUARD_BOTH,
+                () -> insmod(LoadImpl.GUARD_BOTH, joinNonEmpty(" ", guard, w, t)))) return log;
+            if (rung(null, log, LoadImpl.GUARD_WANT,
+                () -> insmod(LoadImpl.GUARD_WANT, joinNonEmpty(" ", guard, w)))) return log;
+            if (rung(null, log, LoadImpl.GUARD_TARGET,
+                () -> insmod(LoadImpl.GUARD_TARGET, joinNonEmpty(" ", guard, t)))) return log;
+        }
         // Pass BOTH size params first. A lenient kernel silently ignores the param
         // the module doesn't have, so it still gets the right size via the one it
         // does - pool_want (v7) or pool_target (v6). This is essential: on a v6
@@ -450,7 +719,7 @@ private List<Try<LoadImpl, Void>> loadLadder(long pages) {
         // Strict kernels reject the unknown param, so fall back to each key alone,
         // then a bare (default-size) load.
         if (rung(null, log, LoadImpl.BOTH,
-            () -> insmod(LoadImpl.BOTH, fmt("%s %s", w, t)))) return log;
+            () -> insmod(LoadImpl.BOTH, joinNonEmpty(" ", w, t)))) return log;
         if (rung(null, log, LoadImpl.POOL_WANT,
             () -> insmod(LoadImpl.POOL_WANT, w))) return log;
         if (rung(null, log, LoadImpl.POOL_TARGET,
@@ -459,6 +728,29 @@ private List<Try<LoadImpl, Void>> loadLadder(long pages) {
         return log;
     }
 
+    /**
+     * v9's ABI guard, read from the module's {@code kapi_check} helper: it
+     * compares the running kernel's real symbol signatures (from vmlinux BTF)
+     * against what this .ko expects and names the drifted ones, which insmod
+     * then leaves unresolved (their feature returns -ENOSYS) instead of
+     * kCFI-panicking on first call. "" when the helper is absent (v6..v8) or
+     * nothing drifted - fail-open, exactly like the v9 boot script.
+     */
+    @NonNull
+    private String kapiGuardArg() {
+        if (!existsSticky(KAPI_CHECK)) return "";
+        var out = run("%s /sys/kernel/btf/vmlinux", escapedString(KAPI_CHECK));
+        for (var line : out.getOutString().split("\n")) {
+            line = line.trim();
+            if (!line.startsWith("disable=")) continue;
+            var v = line.substring("disable=".length()).trim();
+            // A symbol-name list, pasted into a shell line: refuse anything else.
+            if (!v.isEmpty() && SAFE_PARAM.matcher(v).matches())
+                return fmt("disable_kapi=%s", v);
+        }
+        return "";
+    }
+
     private static Try<LoadImpl, Void> insmod(@NonNull LoadImpl impl, @Nullable String arg) {
         var r = (arg == null)
             ? run("insmod %s", escapedString(KO_PATH))
@@ -512,11 +804,52 @@ private static <I> Try<I, Void> writeKnobTry(
 
     /** Persist the target to settings.prop under both keys (whichever loader reads). */
     private static Try<Only, Void> writeSettings(long pages) {
-        var a = run("echo 'pool_want=%s' > %s", pages, SETTINGS_PROP);
-        var b = run("echo 'pool_target=%s' >> %s", pages, SETTINGS_PROP);
-        return (a.isSuccess() && b.isSuccess())
-            ? Try.<Only, Void>ok(Only.DEFAULT, null)
-            : Try.<Only, Void>fail(Only.DEFAULT, reason(a.isSuccess() ? b : a, "settings.prop"));
+        var changes = new LinkedHashMap<String, String>();
+        changes.put("pool_want", Long.toString(pages));
+        changes.put("pool_target", Long.toString(pages));
+        return updateSettings(changes);
+    }
+
+    /** Serializes settings.prop read-modify-write cycles within this process. */
+    private static final Object SETTINGS_LOCK = new Object();
+
+    /**
+     * Read-modify-write settings.prop: apply {@code changes} (a null value
+     * <b>removes</b> that key) and keep every other key (the file also carries
+     * app-owned CMA state - {@code pool_want_with_cma}, {@code cma_probe_result}
+     * - that a blind rewrite would wipe). The boot script {@code source}s the
+     * file, so lines stay plain {@code key=value}. Locked so concurrent writers
+     * (the probe worker vs a pool-size save) can't interleave their read/write
+     * pairs and drop each other's keys.
+     */
+    private static Try<Only, Void> updateSettings(@NonNull Map<String, String> changes) {
+        synchronized (SETTINGS_LOCK) {
+            String raw;
+            try {
+                raw = shellReadFile(SETTINGS_PROP);
+            } catch (Exception e) {
+                // A missing file legitimately starts empty; an EXISTING file that
+                // failed to read must abort - rewriting from an empty map would
+                // silently drop every other persisted key (probe verdict, CMA
+                // targets) on a transient root hiccup.
+                if (existsSticky(SETTINGS_PROP))
+                    return Try.fail(Only.DEFAULT, "settings.prop: read failed");
+                raw = "";
+            }
+            var s = parseProp(raw);
+            for (var e : changes.entrySet()) {
+                if (e.getValue() == null) s.remove(e.getKey());
+                else s.put(e.getKey(), e.getValue());
+            }
+            var content = new StringBuilder();
+            for (var e : s.entrySet())
+                content.append(e.getKey()).append('=').append(e.getValue()).append('\n');
+            var r = run("printf '%%s' %s > %s",
+                escapedString(content.toString()), SETTINGS_PROP);
+            return r.isSuccess()
+                ? Try.<Only, Void>ok(Only.DEFAULT, null)
+                : Try.<Only, Void>fail(Only.DEFAULT, reason(r, "settings.prop"));
+        }
     }
 
     @NonNull
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/hugepage/HugePageProcess.java b/app/src/main/java/cn/classfun/droidvm/ui/hugepage/HugePageProcess.java
index c8ebec89f..406faec50 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/hugepage/HugePageProcess.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/hugepage/HugePageProcess.java
@@ -35,13 +35,36 @@ public final class HugePageProcess {
     public final int color;
     /** True for the synthetic "unattributed" pool usage row (no actions). */
     public final boolean unknown;
-    /** True for the synthetic "waiting for acquire" deficit row (acquire btn). */
+    /** True for the synthetic "waiting for acquire" deficit row. */
     public final boolean acquire;
+    /**
+     * Free-text detail line for synthetic rows (e.g. the available row's
+     * cma-able/non-cma-able breakdown); null hides the line.
+     */
+    @Nullable
+    public final String detail;
+    /**
+     * Draw the three acquire buttons on this row. Normally the deficit row owns
+     * them, but that row is hidden once nothing is waiting to be acquired - and
+     * acquire can still have work (staging reservoir pages into a grown pool),
+     * so the CMA row picks them up then.
+     */
+    public final boolean acquireSlots;
 
     public HugePageProcess(
         int pid, @NonNull String comm, long servedPages,
         long thpKb, char state, @Nullable String vmName, boolean alive,
         int color, boolean unknown, boolean acquire
+    ) {
+        this(pid, comm, servedPages, thpKb, state, vmName, alive,
+            color, unknown, acquire, null, acquire);
+    }
+
+    public HugePageProcess(
+        int pid, @NonNull String comm, long servedPages,
+        long thpKb, char state, @Nullable String vmName, boolean alive,
+        int color, boolean unknown, boolean acquire, @Nullable String detail,
+        boolean acquireSlots
     ) {
         this.pid = pid;
         this.comm = comm;
@@ -53,6 +76,8 @@ public HugePageProcess(
         this.color = color;
         this.unknown = unknown;
         this.acquire = acquire;
+        this.detail = detail;
+        this.acquireSlots = acquireSlots;
     }
 
     /** THP occupancy expressed in 2MiB pages (-1 if unknown). */
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/hugepage/HugePageProcessActivity.java b/app/src/main/java/cn/classfun/droidvm/ui/hugepage/HugePageProcessActivity.java
index 20a47990e..53f4e9809 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/hugepage/HugePageProcessActivity.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/hugepage/HugePageProcessActivity.java
@@ -51,6 +51,10 @@ public final class HugePageProcessActivity extends AppCompatActivity
     private static final long ACQUIRE_POLL_MS = 500;
     private static final int ACQUIRE_POLL_MAX = 1200;   // ~10 min ceiling
     private static final long HUGE_PAGE_BYTES = 2L * 1024 * 1024;
+    // Fake pids for the synthetic list rows (adapter uses pid as a stable id;
+    // pid 0 already belongs to the "waiting for acquire" row).
+    private static final int PID_AVAIL = -2;
+    private static final int PID_CMA = -3;
 
     private final Handler handler = new Handler(Looper.getMainLooper());
     private final HugePageModel model = new HugePageModel();
@@ -218,7 +222,49 @@ private void refresh() {
             int kernelMode = snap.acquireMode;
             long holdKb = snap.loaded ? snap.free * 2048 : 0;                // avail
             long wantKb = snap.loaded ? snap.targetIdeal * 2048 : tracedKb;  // want
-            long deficitKb = wantKb - holdKb - tracedKb;
+            // v10 reservoir: mirror the status screen - the bar's denominator
+            // becomes pool_want_with_cma and the reservoir counts as filled.
+            boolean cmaOn = snap.loaded && snap.cmaActive();
+            var cmaUsage = cmaOn ? model.cmaUsage() : null;
+            long cmaKb = cmaOn ? snap.cmaPool * 2048 : 0;
+            long cmaOtherKb = (cmaUsage != null && cmaUsage.ok)
+                ? Math.min(cmaKb, cmaUsage.usedMb * 1024) : 0;
+            long cmaFreeKb = cmaKb - cmaOtherKb;
+            long availCmaAbleKb = (cmaOn && snap.availCmaAble >= 0)
+                ? Math.min(holdKb, snap.availCmaAble * 2048) : -1;
+            long availNonCmaKb = availCmaAbleKb >= 0 ? holdKb - availCmaAbleKb : 0;
+            long barWantKb = cmaOn ? snap.wantWithCma * 2048 : wantKb;
+            long deficitKb = barWantKb - holdKb - tracedKb - cmaKb;
+            // Synthetic rows mirroring the bar blocks: available (with its
+            // cma-able / non-cma-able breakdown) and the CMA reservoir
+            // (free / other apps). Distinct negative pids keep the adapter's
+            // stable ids unique (the deficit row already owns pid 0).
+            // The deficit row owns the acquire buttons; when it is hidden but
+            // acquire still has work (a grown pool_want the reservoir can stage
+            // in, so nothing is "waiting to be acquired"), the CMA row shows them.
+            boolean acquireOnCma = cmaOn && deficitKb <= 0 && snap.deficit > 0;
+            if (snap.loaded) {
+                list.add(new HugePageProcess(
+                    PID_AVAIL, getString(R.string.hugepage_bar_available), -1,
+                    holdKb, '?', null, true, HugePageColor.availIcon(dark),
+                    true, false,
+                    availCmaAbleKb >= 0 ? getString(
+                        R.string.hugepage_proc_avail_detail,
+                        SizeUtils.formatSize(availCmaAbleKb * 1024),
+                        SizeUtils.formatSize(availNonCmaKb * 1024)) : null,
+                    false));
+            }
+            if (cmaOn) {
+                list.add(new HugePageProcess(
+                    PID_CMA, getString(R.string.hugepage_bar_cma), -1,
+                    cmaKb, '?', null, true, HugePageColor.cmaFree(this),
+                    true, false,
+                    (cmaUsage != null && cmaUsage.ok) ? getString(
+                        R.string.hugepage_proc_cma_detail,
+                        SizeUtils.formatSize(cmaFreeKb * 1024),
+                        SizeUtils.formatSize(cmaOtherKb * 1024)) : null,
+                    acquireOnCma));
+            }
             if (deficitKb > 0) {
                 list.add(new HugePageProcess(
                     0, getString(R.string.hugepage_proc_deficit), -1, deficitKb,
@@ -230,6 +276,10 @@ private void refresh() {
             var fKoNow = koNow;
             var fTraced = tracedKb;
             var fHold = holdKb;
+            var fAvailNonCma = availCmaAbleKb >= 0 ? availNonCmaKb : 0;
+            var fCma = cmaKb;
+            var fCmaFree = cmaFreeKb;
+            var fBarWant = barWantKb;
             var fWant = wantKb;
             var fAcquiring = kernelAcquiring;
             var fMode = kernelMode;
@@ -249,7 +299,8 @@ private void refresh() {
                 int uiMode = fAcquiring ? fMode
                     : (acquireWatching ? acquireWatchMode : -1);
                 adapter.setAcquireState(fAcquiring || acquireWatching, uiMode);
-                showResult(finalList, fTraced, fHold, fWant, finalEmpty);
+                showResult(finalList, fTraced, fHold, fAvailNonCma,
+                    fCma, fCmaFree, fBarWant, fWant, finalEmpty);
             });
         });
     }
@@ -262,12 +313,18 @@ private List<HugePageProcess> buildFromEntries(
         // Best-effort pid -> VM name (running VMs only); for KO rows this labels
         // the process, for scan rows it echoes the name the entry already carries.
         var vmMap = model.vmNames(false);
+        // Rank-based colors over the full entry list (see HugePageColor).
+        var pids = new ArrayList<Integer>();
+        for (var e : entries) pids.add(e.pid);
+        var colorMap = HugePageColor.forPids(pids, dark);
         var result = new ArrayList<HugePageProcess>();
         for (var e : entries) {
+            Integer color = colorMap.get(e.pid);
             result.add(new HugePageProcess(
                 e.pid, e.comm, -1, e.pages * 2048, e.state,
                 vmMap.getOrDefault(e.pid, e.comm), e.alive,
-                HugePageColor.forPid(e.pid, dark), false, false));
+                color != null ? color : HugePageColor.forRank(0, dark),
+                false, false));
         }
         result.sort((a, b) -> Long.compare(b.thpKb, a.thpKb));
         return result;
@@ -275,17 +332,21 @@ private List<HugePageProcess> buildFromEntries(
 
     private void showResult(
         @NonNull List<HugePageProcess> list, long usedKb, long availKb,
+        long availNonCmaKb, long cmaKb, long cmaFreeKb, long barWantKb,
         long wantKb, @NonNull String emptyText
     ) {
         if (isFinishing()) return;
         firstRefresh = false;
         adapter.submit(list);
 
-        // Segmented bar (shared builder): VM segments (used), then the available
-        // portion as a track-coloured gap, then the "waiting for acquire" deficit
-        // pinned flush right. This screen's bar is a plain unlabelled meter.
+        // Segmented bar, synced with the status screen: VM segments (used), the
+        // available block (with its non-cma-able left sub-split), the CMA
+        // reservoir block ([free|other apps] sub-split), then the "waiting for
+        // acquire" deficit flush right. Still a plain unlabelled meter here.
+        // The synthetic available/CMA rows ("unknown") are drawn via those
+        // dedicated blocks, not as used segments.
         int used = 0;
-        for (var p : list) if (!p.acquire) used++;
+        for (var p : list) if (!p.acquire && !p.unknown) used++;
         int[] usedColors = new int[used];
         float[] usedValues = new float[used];
         int deficitColor = HugePageColor.pending(this);
@@ -295,14 +356,26 @@ private void showResult(
             if (p.acquire) {                       // deficit rows: colour + value
                 deficitColor = p.color;
                 deficit += Math.max(0, p.thpKb);
-            } else {                               // used: one segment per VM
+            } else if (!p.unknown) {               // used: one segment per VM
                 usedColors[u] = p.color;
                 usedValues[u] = Math.max(0, p.thpKb);
                 u++;
             }
         }
-        segBar.setStorage(usedColors, usedValues, null,
-            availKb, null, deficitColor, deficit, null, wantKb);
+        var spec = new SegmentedBar.StorageSpec();
+        spec.usedColors = usedColors;
+        spec.usedValues = usedValues;
+        spec.avail = availKb;
+        spec.availNonCma = availNonCmaKb;
+        spec.availNonCmaColor = HugePageColor.availNonCma(this);
+        spec.cmaFree = cmaFreeKb;
+        spec.cmaFreeColor = HugePageColor.cmaFree(this);
+        spec.cmaOther = cmaKb - cmaFreeKb;
+        spec.cmaOtherColor = HugePageColor.cmaUsed(this);
+        spec.deficitColor = deficitColor;
+        spec.deficit = deficit;
+        spec.want = barWantKb;
+        segBar.setStorage(spec);
 
         // 2x2 caption: used / available on top, total / pool-size below.
         // Total = the real held reserve (used + avail = owned + traced), shown
@@ -417,15 +490,11 @@ public void onAcquire(int mode) {
                 if (finalSnap != null && finalSnap.loaded) {
                     // Achieved = owned + traced (pool_avail + served), NOT
                     // pool_total: after a shrink that left served pages out,
-                    // pool_total under-counts the pages VMs already hold.
-                    long got = finalSnap.free + finalSnap.lent;
-                    long want = finalSnap.targetIdeal;
-                    String msg = got >= want
-                        ? getString(R.string.hugepage_proc_acquire_full,
-                            fmtPages(want))
-                        : getString(R.string.hugepage_proc_acquire_partial,
-                            fmtPages(got), fmtPages(want));
-                    Toast.makeText(this, msg, LENGTH_LONG).show();
+                    // pool_total under-counts the pages VMs already hold. With
+                    // the reservoir on the message reports the with-CMA total too.
+                    Toast.makeText(this,
+                        HugePageActivity.acquireDoneMessage(this, finalSnap),
+                        LENGTH_LONG).show();
                 } else {
                     Toast.makeText(this, R.string.hugepage_proc_acquire_done,
                         LENGTH_SHORT).show();
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/hugepage/HugePageProcessAdapter.java b/app/src/main/java/cn/classfun/droidvm/ui/hugepage/HugePageProcessAdapter.java
index 39f138899..1e3206493 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/hugepage/HugePageProcessAdapter.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/hugepage/HugePageProcessAdapter.java
@@ -111,17 +111,24 @@ public void onBindViewHolder(@NonNull Holder holder, int position) {
         }
 
         if (p.unknown || p.acquire) {
-            // Synthetic rows: "unattributed" (no action) and "waiting for
-            // acquire" (deficit, with an Acquire button).
+            // Synthetic rows: "available"/"CMA"/"unattributed" (no action) and
+            // "waiting for acquire" (deficit, with an Acquire button). The
+            // served line doubles as their free-text detail (breakdowns).
             holder.title.setText(p.comm);
-            holder.served.setVisibility(GONE);
+            if (p.detail != null) {
+                holder.served.setVisibility(VISIBLE);
+                holder.served.setText(p.detail);
+            } else {
+                holder.served.setVisibility(GONE);
+            }
             holder.stateView.setVisibility(GONE);
             holder.btnStack.setVisibility(GONE);
             holder.btnStack.setOnClickListener(null);
             holder.itemView.setAlpha(1f);
             holder.btnKill.setVisibility(GONE);
             holder.btnKill.setOnClickListener(null);
-            if (p.acquire) {
+            // Usually the deficit row; the CMA row when that one is hidden.
+            if (p.acquireSlots) {
                 bindAcquireSlot(holder.btnAcquireV1, holder.progressAcquireV1, 1);
                 bindAcquireSlot(holder.btnAcquireV2, holder.progressAcquireV2, 2);
                 bindAcquireSlot(holder.btnAcquireV3, holder.progressAcquireV3, 3);
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/hugepage/SegmentedBar.java b/app/src/main/java/cn/classfun/droidvm/ui/hugepage/SegmentedBar.java
index a5c864ffd..e81bcd868 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/hugepage/SegmentedBar.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/hugepage/SegmentedBar.java
@@ -30,6 +30,13 @@
 public final class SegmentedBar extends View {
     private int[] colors = new int[0];
     private float[] values = new float[0];
+    // Optional per-segment sub-split: the LEFT subLeftValues[i] share of segment
+    // i is drawn in subLeftColors[i], the rest in colors[i]. Pure color detail -
+    // the segment stays ONE logical block with ONE (centred) label.
+    @Nullable
+    private float[] subLeftValues = null;
+    @Nullable
+    private int[] subLeftColors = null;
     @Nullable
     private String[] labels = null;
     // Per-segment label data pre-split, pre-measured and pre-coloured in setData,
@@ -78,9 +85,19 @@ public void setData(@NonNull int[] colors, @NonNull float[] values, float total)
     /** Apple-style: each wide-enough segment draws {@code labels[i]} inside it. */
     public void setData(@NonNull int[] colors, @NonNull float[] values,
                         @Nullable String[] labels, float total) {
+        setData(colors, values, labels, null, null, total);
+    }
+
+    /** Full form: labels plus optional per-segment left sub-splits (see fields). */
+    public void setData(@NonNull int[] colors, @NonNull float[] values,
+                        @Nullable String[] labels,
+                        @Nullable float[] subLeftValues, @Nullable int[] subLeftColors,
+                        float total) {
         this.colors = colors;
         this.values = values;
         this.labels = labels;
+        this.subLeftValues = subLeftValues;
+        this.subLeftColors = subLeftColors;
         this.total = total;
         prepareLabels();
         invalidate();
@@ -116,6 +133,36 @@ private void prepareLabels() {
         }
     }
 
+    /**
+     * Parameters for the storage-style bar - one holder instead of the long
+     * positional argument list. Only {@code usedColors}/{@code usedValues}/
+     * {@code want} are always meaningful; the CMA and {@code availNonCma} fields
+     * stay 0 for the classic [used][available][waiting] bar.
+     */
+    public static final class StorageSpec {
+        /** one colour per used segment */
+        @NonNull public int[] usedColors = new int[0];
+        /** one value per used segment (same length as usedColors) */
+        @NonNull public float[] usedValues = new float[0];
+        /** per-segment labels, or {@code null} for the plain (unlabelled) meter */
+        @Nullable public String[] usedLabels;
+        public float avail;
+        @Nullable public String availLabel;
+        /** left sub-split of the available block (non-cma-able share) */
+        public float availNonCma;
+        public int availNonCmaColor;
+        public float cmaFree;
+        @Nullable public String cmaFreeLabel;
+        public int cmaFreeColor;
+        public float cmaOther;
+        @Nullable public String cmaOtherLabel;
+        public int cmaOtherColor;
+        public int deficitColor;
+        public float deficit;
+        @Nullable public String deficitLabel;
+        public float want;
+    }
+
     /**
      * Assemble and set a storage-style bar shared by both hugepage screens:
      * the {@code used} segments, then the available portion as a track-coloured
@@ -135,26 +182,59 @@ public void setStorage(
         int deficitColor, float deficit, @Nullable String deficitLabel,
         float want
     ) {
-        int n = usedValues.length;
-        boolean withLabels = usedLabels != null;
-        int[] c = new int[n + 2];
-        float[] v = new float[n + 2];
-        String[] l = withLabels ? new String[n + 2] : null;
+        var s = new StorageSpec();
+        s.usedColors = usedColors;
+        s.usedValues = usedValues;
+        s.usedLabels = usedLabels;
+        s.avail = avail;
+        s.availLabel = availLabel;
+        s.deficitColor = deficitColor;
+        s.deficit = deficit;
+        s.deficitLabel = deficitLabel;
+        s.want = want;
+        setStorage(s);
+    }
+
+    /**
+     * v10 variant of {@link #setStorage}: the bar reads
+     * [VMs][available][CMA free][CMA lent][waiting]. The two CMA parts are
+     * ordinary labelled segments; only <b>available</b> carries the pure-color
+     * left sub-split [non-cma-able | normal] (its left {@code availNonCma}
+     * share draws in {@code availNonCmaColor}) under a single label. Leave the
+     * CMA values and {@code availNonCma} at 0 for the classic bar (the plain
+     * overload does exactly that).
+     */
+    public void setStorage(@NonNull StorageSpec s) {
+        int n = s.usedValues.length;
+        boolean withLabels = s.usedLabels != null;
+        int[] c = new int[n + 4];
+        float[] v = new float[n + 4];
+        String[] l = withLabels ? new String[n + 4] : null;
+        float[] sv = new float[n + 4];
+        int[] sc = new int[n + 4];
         float seg = 0;
         for (int i = 0; i < n; i++) {
-            c[i] = usedColors[i];
-            v[i] = Math.max(0, usedValues[i]);
-            if (withLabels) l[i] = usedLabels[i];
+            c[i] = s.usedColors[i];
+            v[i] = Math.max(0, s.usedValues[i]);
+            if (withLabels) l[i] = s.usedLabels[i];
             seg += v[i];
         }
-        float a = Math.max(0, avail);
-        c[n] = trackColor;                       // available gap
+        float a = Math.max(0, s.avail);
+        c[n] = trackColor;                       // available: [non-cma-able|normal]
         v[n] = a;
-        if (withLabels) l[n] = availLabel;
-        c[n + 1] = deficitColor;                 // deficit, flush right
-        v[n + 1] = Math.max(0, deficit);
-        if (withLabels) l[n + 1] = deficitLabel;
-        setData(c, v, l, Math.max(want, seg + a));
+        sv[n] = Math.min(a, Math.max(0, s.availNonCma));
+        sc[n] = s.availNonCmaColor;
+        if (withLabels) l[n] = s.availLabel;
+        c[n + 1] = s.cmaFreeColor;               // CMA free in buddy
+        v[n + 1] = Math.max(0, s.cmaFree);
+        if (withLabels) l[n + 1] = s.cmaFreeLabel;
+        c[n + 2] = s.cmaOtherColor;              // CMA lent to other apps
+        v[n + 2] = Math.max(0, s.cmaOther);
+        if (withLabels) l[n + 2] = s.cmaOtherLabel;
+        c[n + 3] = s.deficitColor;               // deficit, flush right
+        v[n + 3] = Math.max(0, s.deficit);
+        if (withLabels) l[n + 3] = s.deficitLabel;
+        setData(c, v, l, sv, sc, Math.max(s.want, seg + a + v[n + 1] + v[n + 2]));
     }
 
     @Override
@@ -181,8 +261,19 @@ protected void onDraw(@NonNull Canvas canvas) {
             float segW = w * (values[i] / total);
             if (segW <= 0f) continue;
             float segRight = Math.min(x + segW, w);
+            // Optional left sub-split: same logical segment, two fill colors.
+            float subW = 0f;
+            if (subLeftValues != null && subLeftColors != null
+                && i < subLeftValues.length && i < subLeftColors.length
+                && subLeftValues[i] > 0f && values[i] > 0f) {
+                subW = Math.min(segW, segW * (subLeftValues[i] / values[i]));
+            }
+            if (subW > 0f) {
+                paint.setColor(subLeftColors[i]);
+                canvas.drawRect(x, 0, Math.min(x + subW, segRight), h, paint);
+            }
             paint.setColor(colors[i]);
-            canvas.drawRect(x, 0, segRight, h, paint);
+            canvas.drawRect(Math.min(x + subW, segRight), 0, segRight, h, paint);
             drawLabel(canvas, i, x, segRight, h);
             x += segW;
         }
diff --git a/app/src/main/res/layout/activity_hugepage.xml b/app/src/main/res/layout/activity_hugepage.xml
index 44b571294..c8191a597 100644
--- a/app/src/main/res/layout/activity_hugepage.xml
+++ b/app/src/main/res/layout/activity_hugepage.xml
@@ -113,17 +113,42 @@
                 </LinearLayout>
             </com.google.android.material.card.MaterialCardView>
 
-            <cn.classfun.droidvm.ui.widgets.row.TextInputRowWidget
-                android:id="@+id/input_pool_size"
+            <!-- Pool size (left) + CMA pool size (right, only while CMA is on).
+                 Both are GiB-only inputs (ti_unit): no MB/KB/B stops. -->
+            <LinearLayout
                 android:layout_width="match_parent"
                 android:layout_height="wrap_content"
-                android:hint="@string/hugepage_pool_size"
-                android:icon="@drawable/ic_resize"
-                android:inputType="number"
-                app:ti_max="16GiB"
-                app:ti_min="0MiB"
-                app:ti_mode="size"
-                app:ti_precision="2MiB" />
+                android:orientation="horizontal">
+
+                <cn.classfun.droidvm.ui.widgets.row.TextInputRowWidget
+                    android:id="@+id/input_pool_size"
+                    android:layout_width="0dp"
+                    android:layout_height="wrap_content"
+                    android:layout_weight="1"
+                    android:hint="@string/hugepage_pool_size"
+                    android:icon="@drawable/ic_resize"
+                    android:inputType="number"
+                    app:ti_max="16GiB"
+                    app:ti_min="0MiB"
+                    app:ti_mode="size"
+                    app:ti_precision="2MiB"
+                    app:ti_unit="GiB" />
+
+                <cn.classfun.droidvm.ui.widgets.row.TextInputRowWidget
+                    android:id="@+id/input_cma_size"
+                    android:layout_width="0dp"
+                    android:layout_height="wrap_content"
+                    android:layout_weight="1"
+                    android:hint="@string/hugepage_cma_pool_size"
+                    android:inputType="number"
+                    android:visibility="gone"
+                    app:ti_max="24GiB"
+                    app:ti_min="0MiB"
+                    app:ti_mode="size"
+                    app:ti_precision="2MiB"
+                    app:ti_unit="GiB"
+                    tools:visibility="visible" />
+            </LinearLayout>
 
             <LinearLayout
                 android:layout_width="match_parent"
@@ -291,6 +316,14 @@
                 <include layout="@layout/acquire_buttons" />
             </LinearLayout>
 
+            <cn.classfun.droidvm.ui.widgets.row.SwitchRowWidget
+                android:id="@+id/row_cma_enable"
+                android:layout_width="match_parent"
+                android:layout_height="wrap_content"
+                android:icon="@drawable/ic_memory"
+                android:subtitle="@string/hugepage_enable_cma_sub"
+                android:text="@string/hugepage_enable_cma" />
+
             <cn.classfun.droidvm.ui.widgets.row.SwitchRowWidget
                 android:id="@+id/row_module_enable"
                 android:layout_width="match_parent"
diff --git a/app/src/main/res/values-night/colors.xml b/app/src/main/res/values-night/colors.xml
index aecd225e4..6decc8c76 100644
--- a/app/src/main/res/values-night/colors.xml
+++ b/app/src/main/res/values-night/colors.xml
@@ -7,4 +7,7 @@
     <color name="kernel_analysis_title">#FF64B5F6</color>
 
     <color name="hugepage_pending">#80BFAF7C</color>
+    <color name="hugepage_cma_used">#80D9A06B</color>
+    <color name="hugepage_cma_free">#807CC7BD</color>
+    <color name="hugepage_avail_non_cma">#5995A7B8</color>
 </resources>
diff --git a/app/src/main/res/values-zh-rCN/strings.xml b/app/src/main/res/values-zh-rCN/strings.xml
index b577e3fda..5019615d3 100644
--- a/app/src/main/res/values-zh-rCN/strings.xml
+++ b/app/src/main/res/values-zh-rCN/strings.xml
@@ -929,8 +929,11 @@
     <string name="hugepage_stat_total_refilled">已回收次数</string>
     <string name="hugepage_stat_active_vms">活动虚拟机</string>
     <string name="hugepage_stat_pool_available">可用: %1$d (%2$s)</string>
+    <string name="hugepage_proc_avail_detail">可转换CMA %1$s、不可转换CMA %2$s</string>
+    <string name="hugepage_proc_cma_detail">空闲 %1$s、其他 App %2$s</string>
     <string name="hugepage_stat_pool_total">总共: %1$d (%2$s)</string>
     <string name="hugepage_stat_pool_size">池大小: %1$d (%2$s)</string>
+    <string name="hugepage_stat_pool_size_cma">池大小:%1$d/%2$d(%3$s / %4$s)</string>
     <string name="hugepage_stats_unavailable">模块未加载</string>
     <string name="hugepage_manual_refill">回收</string>
     <string name="hugepage_refill_triggered">回收已触发</string>
@@ -994,12 +997,58 @@
     <string name="hugepage_proc_acquire_stop">停止获取</string>
     <string name="hugepage_proc_acquire_full">获取完成:已达成 %1$s</string>
     <string name="hugepage_proc_acquire_partial">获取结束:达成 %1$s / 目标 %2$s(系统目前无法再凑出更多)</string>
+    <string name="hugepage_proc_acquire_full_cma">获取完成:池 %1$s、含 CMA %2$s</string>
+    <string name="hugepage_proc_acquire_partial_cma">获取停止:池 %1$s / %2$s,含 CMA %3$s / %4$s(系统目前无法再搬移)</string>
     <string name="hugepage_proc_acquire_running">获取大页中…</string>
     <string name="hugepage_proc_acquire_userspace">模块不足,尝试 userspace 协助…</string>
     <string name="hugepage_proc_anon">占用:%1$d 页 (%2$s)</string>
     <string name="hugepage_proc_deficit">等待获取</string>
     <string name="hugepage_proc_pid">pid %1$d</string>
     <string name="hugepage_bar_available">可用</string>
+
+    <!-- v10 CMA 池 -->
+    <string name="hugepage_enable_cma">启用 CMA</string>
+    <string name="hugepage_enable_cma_sub">闲置保留以 CMA 形式借给 App 使用,通过获取取回</string>
+    <string name="hugepage_cma_pool_size">含 CMA 池大小</string>
+    <string name="hugepage_cma_not_supported">模块未加载或不支持 CMA(需 v10+)</string>
+    <string name="hugepage_cma_unavailable_title">CMA 不可用</string>
+    <string name="hugepage_cma_unavailable_boot">本次开机模块已停用 CMA 功能(内核预检/符号解析/首块验证未通过)。</string>
+    <string name="hugepage_cma_unavailable_denied">先前探测曾判定 CMA 不可用,该记录会让模块整个开机期间关闭 CMA。记录已清除,请重启后再次开启 CMA 以重新探测。</string>
+    <string name="hugepage_cma_unavailable_write">写入 pool_want_with_cma 被拒:%1$s</string>
+    <string name="hugepage_cma_unavailable_reservoir">无法组出任何 CMA 料场(headroom floor 拒绝,或区块翻转失败)。</string>
+    <string name="hugepage_cma_probe_needed_title">需要先进行 CMA 探测</string>
+    <string name="hugepage_cma_probe_needed_msg">首次使用前需探测该厂商内核是否允许 App 使用 CMA 内存。\n\n探测会暂时清空池、把它整块转成 CMA 料场(目标约 %1$s),用 balloon 工具施加内存压力,再按 CMA 消耗量判读。结束后会还原池,进行前所有 VM 需先关闭。\n\n探测通过后,池大小会设为 %2$s,其余保留为料场借给 App,直到 VM 需要时才取回。</string>
+    <string name="hugepage_cma_probe_start">开始探测</string>
+    <string name="hugepage_cma_probe_anyway">直接进行探测</string>
+    <string name="hugepage_cma_probe_continue">完成探测</string>
+    <string name="hugepage_cma_small_reservoir_title">料场会偏小</string>
+    <string name="hugepage_cma_small_reservoir_msg">该模块总共只能监护 %1$s,少于探测想要的 %2$s,判读结果可能不准确。仍要探测吗?</string>
+    <string name="hugepage_cma_probe_pending_title">尚未完成的 CMA 探测</string>
+    <string name="hugepage_cma_probe_pending_msg">已建立 CMA 料场但还没判读。要现在执行 balloon 测量,确认 App 是否真的用得到吗?</string>
+    <string name="hugepage_cma_building">建立 CMA 料场中\u2026 %1$s / %2$s</string>
+    <string name="hugepage_cma_reservoir_short_title">料场未达目标</string>
+    <string name="hugepage_cma_reservoir_short_msg">只组出 %1$s / %2$s,运行期的 sweep 撞到碎片墙。刚开机时内存没有碎片,同一个流程就会成功;可以重启后再次开启 CMA。或者直接用已组出的 %1$s 进行判读(可能较不准确)。</string>
+    <string name="hugepage_cma_probe_denied_title">CMA 已标记为不可用</string>
+    <string name="hugepage_cma_probe_denied_msg">先前探测结果:该设备的 App 无法使用 CMA,启用只会浪费保留池。要重新探测吗?</string>
+    <string name="hugepage_cma_probe_rerun">重新探测</string>
+    <string name="hugepage_cma_vms_running">请先关闭所有运行中的 VM 再探测</string>
+    <string name="hugepage_cma_save_reboot">我重启后再探测</string>
+    <string name="hugepage_cma_reboot_hint">未变更任何设置。请重启后再次开启 CMA:刚开机时内存没有碎片,料场就组得起来。</string>
+    <string name="hugepage_cma_probe_running_balloon">正在施加内存压力(balloon)\u2026 可能需要数分钟</string>
+    <string name="hugepage_cma_probe_ok">探测通过:App 可使用 CMA。已启用,池大小设为 %1$s,其余作为料场借出。</string>
+    <string name="hugepage_cma_probe_denied_result">探测结果:该设备的 App 无法使用 CMA,启用只会浪费保留池。仍要启用吗?您的选择会被记录,之后不再探测。</string>
+    <string name="hugepage_cma_probe_abnormal_title">判读结果异常</string>
+    <string name="hugepage_cma_probe_abnormal_msg">压力共消耗 CMA %1$s / 池 %2$s(balloon 持有 %3$s,停止原因:%4$s),无法明确判读。仍要启用 CMA 吗?</string>
+    <string name="hugepage_cma_probe_enable">启用</string>
+    <string name="hugepage_cma_probe_keep_off">保持关闭</string>
+    <string name="hugepage_cma_probe_cancelled">已取消探测</string>
+    <string name="hugepage_cma_probe_failed_generic">CMA 探测无法运行</string>
+    <string name="hugepage_cma_enabled">CMA 已启用</string>
+    <string name="hugepage_cma_enabled_pool">CMA 已启用,池大小设为 %1$s,其余作为料场借出。</string>
+    <string name="hugepage_cma_disabled">CMA 已停用</string>
+    <string name="hugepage_cma_toggle_failed">写入 CMA 目标失败</string>
+    <string name="hugepage_bar_cma">CMA</string>
+    <string name="hugepage_bar_cma_lent">CMA(借出)</string>
     <string name="hugepage_proc_empty">目前没有线程占用保留的 hugepage 池。</string>
     <string name="hugepage_proc_kill">终止</string>
     <string name="hugepage_proc_kill_failed">发送信号失败</string>
diff --git a/app/src/main/res/values-zh-rTW/strings.xml b/app/src/main/res/values-zh-rTW/strings.xml
index d6d5a0956..5300dd504 100644
--- a/app/src/main/res/values-zh-rTW/strings.xml
+++ b/app/src/main/res/values-zh-rTW/strings.xml
@@ -929,9 +929,12 @@
     <string name="hugepage_stat_total_refilled">已回收次數</string>
     <string name="hugepage_stat_active_vms">活動虛擬機器</string>
     <string name="hugepage_stat_pool_available">可用: %1$d (%2$s)</string>
+    <string name="hugepage_proc_avail_detail">可轉換CMA %1$s、不可轉換CMA %2$s</string>
+    <string name="hugepage_proc_cma_detail">空閒 %1$s、其他 App %2$s</string>
     <string name="hugepage_stat_pool_used">已使用: %1$d (%2$s)</string>
     <string name="hugepage_stat_pool_total">總共: %1$d (%2$s)</string>
     <string name="hugepage_stat_pool_size">池大小: %1$d (%2$s)</string>
+    <string name="hugepage_stat_pool_size_cma">池大小:%1$d/%2$d(%3$s / %4$s)</string>
     <string name="hugepage_stats_unavailable">模組未載入</string>
     <string name="hugepage_manual_refill">獲取大頁</string>
     <string name="hugepage_refill_triggered">獲取已觸發</string>
@@ -951,6 +954,8 @@
     <string name="hugepage_proc_acquire_stop">停止獲取</string>
     <string name="hugepage_proc_acquire_full">獲取完成:已達成 %1$s</string>
     <string name="hugepage_proc_acquire_partial">獲取結束:達成 %1$s / 目標 %2$s(系統目前無法再湊出更多)</string>
+    <string name="hugepage_proc_acquire_full_cma">獲取完成:池 %1$s、含 CMA %2$s</string>
+    <string name="hugepage_proc_acquire_partial_cma">獲取停止:池 %1$s / %2$s,含 CMA %3$s / %4$s(系統目前無法再搬移)</string>
     <string name="hugepage_proc_acquire_userspace">模組不足,嘗試 userspace 協助…</string>
     <string name="hugepage_refill_failed">觸發獲取失敗</string>
     <string name="hugepage_acquire_pages_title">獲取大頁</string>
@@ -988,6 +993,50 @@
     <string name="hugepage_proc_deficit">等待獲取</string>
     <string name="hugepage_proc_pid">pid %1$d</string>
     <string name="hugepage_bar_available">可用</string>
+
+    <!-- v10 CMA 料場 -->
+    <string name="hugepage_enable_cma">啟用 CMA</string>
+    <string name="hugepage_enable_cma_sub">閒置保留以 CMA 形式借給 App 使用,透過獲取取回</string>
+    <string name="hugepage_cma_pool_size">含 CMA 池大小</string>
+    <string name="hugepage_cma_not_supported">模組未載入或不支援 CMA(需 v10+)</string>
+    <string name="hugepage_cma_unavailable_title">CMA 不可用</string>
+    <string name="hugepage_cma_unavailable_boot">本次開機模組已停用 CMA 功能(kernel 預檢/符號解析/首塊驗證未通過)。</string>
+    <string name="hugepage_cma_unavailable_denied">先前探測曾判定 CMA 不可用,該紀錄會讓模組整個開機期間關閉 CMA。紀錄已清除,請重新開機後再次開啟 CMA 以重新探測。</string>
+    <string name="hugepage_cma_unavailable_write">寫入 pool_want_with_cma 被拒:%1$s</string>
+    <string name="hugepage_cma_unavailable_reservoir">無法組出任何 CMA 料場(headroom floor 拒絕,或區塊翻轉失敗)。</string>
+    <string name="hugepage_cma_probe_needed_title">需要先進行 CMA 探測</string>
+    <string name="hugepage_cma_probe_needed_msg">首次使用前需探測此廠商核心是否允許 App 使用 CMA 記憶體。\n\n探測會暫時清空池、把它整塊轉成 CMA 料場(目標約 %1$s),用 balloon 工具施加記憶體壓力,再依 CMA 消耗量判讀。結束後會還原池,進行前所有 VM 需先關閉。\n\n探測通過後,池大小會設為 %2$s,其餘保留為料場借給 App,直到 VM 需要時才取回。</string>
+    <string name="hugepage_cma_probe_start">開始探測</string>
+    <string name="hugepage_cma_probe_anyway">直接進行探測</string>
+    <string name="hugepage_cma_probe_continue">完成探測</string>
+    <string name="hugepage_cma_small_reservoir_title">料場會偏小</string>
+    <string name="hugepage_cma_small_reservoir_msg">此模組總共只能監護 %1$s,少於探測想要的 %2$s,判讀結果可能不準確。仍要探測嗎?</string>
+    <string name="hugepage_cma_probe_pending_title">尚未完成的 CMA 探測</string>
+    <string name="hugepage_cma_probe_pending_msg">已建立 CMA 料場但還沒判讀。要現在執行 balloon 量測,確認 App 是否真的用得到嗎?</string>
+    <string name="hugepage_cma_building">建立 CMA 料場中\u2026 %1$s / %2$s</string>
+    <string name="hugepage_cma_reservoir_short_title">料場未達目標</string>
+    <string name="hugepage_cma_reservoir_short_msg">只組出 %1$s / %2$s,執行期的 sweep 撞到碎片牆。剛開機時記憶體沒有碎片,同一個流程就會成功;可以重新開機後再次開啟 CMA。或者直接用已組出的 %1$s 進行判讀(可能較不準確)。</string>
+    <string name="hugepage_cma_probe_denied_title">CMA 已標記為不可用</string>
+    <string name="hugepage_cma_probe_denied_msg">先前探測結果:此裝置的 App 無法使用 CMA,啟用只會浪費保留池。要重新探測嗎?</string>
+    <string name="hugepage_cma_probe_rerun">重新探測</string>
+    <string name="hugepage_cma_vms_running">請先關閉所有執行中的 VM 再探測</string>
+    <string name="hugepage_cma_save_reboot">我重開機後再探測</string>
+    <string name="hugepage_cma_reboot_hint">未變更任何設定。請重新開機後再次開啟 CMA:剛開機時記憶體沒有碎片,料場就組得起來。</string>
+    <string name="hugepage_cma_probe_running_balloon">正在施加記憶體壓力(balloon)\u2026 可能需要數分鐘</string>
+    <string name="hugepage_cma_probe_ok">探測通過:App 可使用 CMA。已啟用,池大小設為 %1$s,其餘作為料場借出。</string>
+    <string name="hugepage_cma_probe_denied_result">探測結果:此裝置的 App 無法使用 CMA,啟用只會浪費保留池。仍要啟用嗎?您的選擇會被記錄,之後不再探測。</string>
+    <string name="hugepage_cma_probe_abnormal_title">判讀結果異常</string>
+    <string name="hugepage_cma_probe_abnormal_msg">壓力共消耗 CMA %1$s / 料場 %2$s(balloon 持有 %3$s,停止原因:%4$s),無法明確判讀。仍要啟用 CMA 嗎?</string>
+    <string name="hugepage_cma_probe_enable">啟用</string>
+    <string name="hugepage_cma_probe_keep_off">維持關閉</string>
+    <string name="hugepage_cma_probe_cancelled">已取消探測</string>
+    <string name="hugepage_cma_probe_failed_generic">CMA 探測無法執行</string>
+    <string name="hugepage_cma_enabled">CMA 已啟用</string>
+    <string name="hugepage_cma_enabled_pool">CMA 已啟用,池大小設為 %1$s,其餘作為料場借出。</string>
+    <string name="hugepage_cma_disabled">CMA 已停用</string>
+    <string name="hugepage_cma_toggle_failed">寫入 CMA 目標失敗</string>
+    <string name="hugepage_bar_cma">CMA</string>
+    <string name="hugepage_bar_cma_lent">CMA(借出)</string>
     <string name="hugepage_proc_vm">虛擬機器:%1$s</string>
     <string name="hugepage_proc_no_vm">非追蹤中的虛擬機器</string>
     <string name="hugepage_proc_state">狀態:%1$c (%2$s)</string>
diff --git a/app/src/main/res/values/colors.xml b/app/src/main/res/values/colors.xml
index e22a01568..c01c22999 100644
--- a/app/src/main/res/values/colors.xml
+++ b/app/src/main/res/values/colors.xml
@@ -25,6 +25,11 @@
 
     <color name="hugepage_bar_track">#33808080</color>
     <color name="hugepage_pending">#807D9CB3</color>
+    <!-- v10 CMA reservoir: the part apps currently occupy vs the free part. -->
+    <color name="hugepage_cma_used">#80C98B5E</color>
+    <color name="hugepage_cma_free">#805FA79E</color>
+    <!-- Avail sub-split: pages NOT flippable to CMA as whole pageblocks. -->
+    <color name="hugepage_avail_non_cma">#59708090</color>
 
     <!-- Inline supported/unsupported status icons (readable on light and dark). -->
     <color name="status_supported">#FF4CAF50</color>
diff --git a/app/src/main/res/values/strings.xml b/app/src/main/res/values/strings.xml
index 85f08a344..59d01665c 100644
--- a/app/src/main/res/values/strings.xml
+++ b/app/src/main/res/values/strings.xml
@@ -966,9 +966,12 @@
     <string name="hugepage_stat_total_refilled">Total Refilled</string>
     <string name="hugepage_stat_active_vms">Active VMs</string>
     <string name="hugepage_stat_pool_available">Available: %1$d (%2$s)</string>
+    <string name="hugepage_proc_avail_detail">CMA convertible %1$s, non-convertible %2$s</string>
+    <string name="hugepage_proc_cma_detail">free %1$s, other apps %2$s</string>
     <string name="hugepage_stat_pool_used">Used: %1$d (%2$s)</string>
     <string name="hugepage_stat_pool_total">Total: %1$d (%2$s)</string>
     <string name="hugepage_stat_pool_size">Pool size: %1$d (%2$s)</string>
+    <string name="hugepage_stat_pool_size_cma">Pool size: %1$d/%2$d (%3$s / %4$s)</string>
     <string name="hugepage_stats_unavailable">Module not loaded</string>
     <string name="hugepage_manual_refill">Acquire Pages</string>
     <string name="hugepage_refill_triggered">Acquire triggered</string>
@@ -989,6 +992,8 @@
     <string name="hugepage_proc_acquire_stop">Stop acquiring</string>
     <string name="hugepage_proc_acquire_full">Acquire complete: reached %1$s</string>
     <string name="hugepage_proc_acquire_partial">Acquire stopped: got %1$s of %2$s (system can\'t migrate more right now)</string>
+    <string name="hugepage_proc_acquire_full_cma">Acquire complete: pool %1$s, with CMA %2$s</string>
+    <string name="hugepage_proc_acquire_partial_cma">Acquire stopped: pool %1$s of %2$s, with CMA %3$s of %4$s (system can\'t migrate more right now)</string>
     <string name="hugepage_proc_acquire_userspace">Module short; trying userspace assist...</string>
     <string name="hugepage_acquire_pages_title">Acquire huge pages</string>
     <string name="hugepage_pool_size">Pool Size</string>
@@ -1025,6 +1030,50 @@
     <string name="hugepage_proc_deficit">Waiting for acquire</string>
     <string name="hugepage_proc_pid">pid %1$d</string>
     <string name="hugepage_bar_available">Available</string>
+
+    <!-- v10 CMA reservoir -->
+    <string name="hugepage_enable_cma">Enable CMA</string>
+    <string name="hugepage_enable_cma_sub">Lend the idle reserve to apps as CMA; reclaimed by acquire</string>
+    <string name="hugepage_cma_pool_size">Pool Size with CMA</string>
+    <string name="hugepage_cma_not_supported">Module not loaded or has no CMA support (v10+)</string>
+    <string name="hugepage_cma_unavailable_title">CMA unavailable</string>
+    <string name="hugepage_cma_unavailable_boot">The module disabled its CMA side this boot (kernel preflight / symbol resolution / first-block verification failed).</string>
+    <string name="hugepage_cma_unavailable_denied">A previous probe recorded CMA as unusable, which keeps the module\'s CMA side off for the whole boot. That record has been cleared - reboot, then enable CMA again to re-probe.</string>
+    <string name="hugepage_cma_unavailable_write">Writing pool_want_with_cma was rejected: %1$s</string>
+    <string name="hugepage_cma_unavailable_reservoir">No CMA reservoir could be assembled (the headroom floor refused it, or block flipping failed).</string>
+    <string name="hugepage_cma_probe_needed_title">CMA probe required</string>
+    <string name="hugepage_cma_probe_needed_msg">Before first use, a probe must verify this vendor kernel lets apps allocate from CMA.\n\nIt temporarily empties the pool into a CMA reservoir (aiming for %1$s), applies memory pressure with the balloon tool, then judges from how much CMA got consumed. The pool is restored afterwards, and all VMs must be stopped first.\n\nOn success the pool is set to %2$s and the rest is kept as reservoir, lent to apps until a VM needs it.</string>
+    <string name="hugepage_cma_probe_start">Start probe</string>
+    <string name="hugepage_cma_probe_anyway">Probe anyway</string>
+    <string name="hugepage_cma_probe_continue">Finish probe</string>
+    <string name="hugepage_cma_small_reservoir_title">Reservoir will be small</string>
+    <string name="hugepage_cma_small_reservoir_msg">This module can only guard %1$s in total, less than the %2$s the probe wants to measure against, so the verdict may be unreliable. Probe anyway?</string>
+    <string name="hugepage_cma_probe_pending_title">Unfinished CMA probe</string>
+    <string name="hugepage_cma_probe_pending_msg">A CMA reservoir was set up but never measured. Run the balloon measurement now to decide whether apps can really use it?</string>
+    <string name="hugepage_cma_building">Building the CMA reservoir\u2026 %1$s / %2$s</string>
+    <string name="hugepage_cma_reservoir_short_title">Reservoir came up short</string>
+    <string name="hugepage_cma_reservoir_short_msg">Assembled %1$s of %2$s - the runtime sweep hit the fragmentation wall. On a fresh boot memory is unfragmented, so the same run succeeds; reboot and turn CMA on again. Or measure right now against the %1$s that did assemble (the verdict may be less reliable).</string>
+    <string name="hugepage_cma_probe_denied_title">CMA marked unusable</string>
+    <string name="hugepage_cma_probe_denied_msg">A previous probe found apps cannot use CMA on this device, so enabling it would only waste the reserve. Run the probe again?</string>
+    <string name="hugepage_cma_probe_rerun">Re-probe</string>
+    <string name="hugepage_cma_vms_running">Stop all running VMs before probing</string>
+    <string name="hugepage_cma_save_reboot">I\'ll reboot, then probe</string>
+    <string name="hugepage_cma_reboot_hint">Nothing was changed. Reboot, then turn CMA on again - on a fresh boot memory is unfragmented and the reservoir assembles.</string>
+    <string name="hugepage_cma_probe_running_balloon">Applying memory pressure (balloon)\u2026 this can take several minutes</string>
+    <string name="hugepage_cma_probe_ok">Probe passed: apps can use CMA. CMA enabled and the pool set to %1$s - the rest is lent out as reservoir.</string>
+    <string name="hugepage_cma_probe_denied_result">Probe result: apps could not use CMA on this device, so enabling it would only waste the reserve. Enable anyway? Your choice is recorded and the probe will not run again.</string>
+    <string name="hugepage_cma_probe_abnormal_title">Probe result unreadable</string>
+    <string name="hugepage_cma_probe_abnormal_msg">Pressure consumed %1$s of the %2$s reservoir (balloon held %3$s, stopped: %4$s). This matches neither verdict. Enable CMA anyway?</string>
+    <string name="hugepage_cma_probe_enable">Enable</string>
+    <string name="hugepage_cma_probe_keep_off">Keep off</string>
+    <string name="hugepage_cma_probe_cancelled">Probe cancelled</string>
+    <string name="hugepage_cma_probe_failed_generic">CMA probe could not run</string>
+    <string name="hugepage_cma_enabled">CMA enabled</string>
+    <string name="hugepage_cma_enabled_pool">CMA enabled and the pool set to %1$s - the rest is lent out as reservoir.</string>
+    <string name="hugepage_cma_disabled">CMA disabled</string>
+    <string name="hugepage_cma_toggle_failed">Failed to write the CMA target</string>
+    <string name="hugepage_bar_cma">CMA</string>
+    <string name="hugepage_bar_cma_lent">CMA (lent)</string>
     <string name="hugepage_proc_vm">VM: %1$s</string>
     <string name="hugepage_proc_no_vm">Not a tracked VM</string>
     <string name="hugepage_proc_state">State: %1$c (%2$s)</string>

From d70c4456fb3f15f94346b15758cfae1d7e193eac Mon Sep 17 00:00:00 2001
From: HuJK <gh@hujk.org>
Date: Mon, 13 Jul 2026 00:17:21 +0800
Subject: [PATCH 120/182] hugepage: adapt to v11 module (movable->CMA levers,
 drop probe)

The v11 gh_hugepage_reserve module can open the movable->CMA redirect
directly, so the app no longer needs the balloon consumability probe to
decide whether apps can use the reservoir.

Remove the probe subsystem entirely: runCmaProbe and all of its dialog/worker
plumbing, the balloon runner, the cma_probe_result verdict, and the
reboot-to-finish pending prompt.

New flow when the CMA switch is turned on:
  - if moveable_to_cma_vender_already_allowed reads 1, the vendor kernel
    already redirects movable->CMA: enable directly, no risk;
    otherwise warn, then offer two named actions:
      * "Remove CMA Restriction" arms a lever LIVE ONLY (can crash/reboot the
        phone). On 6.1 the restrict_cma_redirect flag is side-effect-free so it
        is tried first (falling back to the gfp hook); on 6.6/6.12 the same key
        also backs cma_has_pcplist(), so the narrower gfp hook is used directly;
      * "Module CMA" builds the reservoir without arming any lever - no crash
        risk; the reserve still serves VMs via stage-in, and apps consume it
        only where the vendor kernel already allows movable->CMA;
  - once it is running, offer to save the setting to settings.prop for next
    boot. Splitting apply from save is the safety net: a live apply that
    crashes leaves nothing persisted, so the next boot comes up clean. The
    persisted key (cma_movable_lever) is app-owned; a future load.sh reads it.

Disabling reverts whichever lever was armed (the module no-ops these when the
vendor already redirects) and forgets the saved choice.

Pool-size UI: the pool size and the with-CMA total are now two stacked rows
instead of a cramped side-by-side pair; the with-CMA row is greyed and
non-editable while CMA is off.

A stale cma_probe_result from an older app version is cleared on screen load
so the unchanged boot script doesn't keep the module's CMA side cold.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01ARourbDczkCYsKUUMC9EFv
---
 .../droidvm/ui/hugepage/HugePageActivity.java | 772 ++++--------------
 .../droidvm/ui/hugepage/HugePageModel.java    | 199 ++---
 app/src/main/res/layout/activity_hugepage.xml |  18 +-
 app/src/main/res/values-zh-rCN/strings.xml    |  40 +-
 app/src/main/res/values-zh-rTW/strings.xml    |  40 +-
 app/src/main/res/values/strings.xml           |  40 +-
 6 files changed, 291 insertions(+), 818 deletions(-)

diff --git a/app/src/main/java/cn/classfun/droidvm/ui/hugepage/HugePageActivity.java b/app/src/main/java/cn/classfun/droidvm/ui/hugepage/HugePageActivity.java
index 66b7bd6ea..261e1c59f 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/hugepage/HugePageActivity.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/hugepage/HugePageActivity.java
@@ -39,8 +39,6 @@
 import com.google.android.material.progressindicator.LinearProgressIndicator;
 
 import android.text.Editable;
-import android.widget.LinearLayout;
-import android.widget.ProgressBar;
 
 import java.math.BigInteger;
 import java.util.ArrayList;
@@ -49,8 +47,6 @@
 import java.util.Map;
 import java.util.concurrent.CountDownLatch;
 import java.util.concurrent.TimeUnit;
-import java.util.concurrent.atomic.AtomicBoolean;
-import java.util.concurrent.atomic.AtomicInteger;
 
 import cn.classfun.droidvm.R;
 import cn.classfun.droidvm.lib.daemon.DaemonConnection;
@@ -115,37 +111,13 @@ public final class HugePageActivity extends AppCompatActivity {
     private SwitchRowWidget rowCmaEnable;
     private boolean cmaSwitchSyncing = false;   // programmatic setChecked guard
     private boolean cmaInputLoaded = false;     // seed the CMA size input once per show
-    private boolean cmaBusy = false;            // a probe / toggle flow is in flight
-    // A reservoir target persisted with no verdict recorded = a probe that asked
-    // for a reboot and is now waiting to be finished. Offer it once per screen.
-    private boolean probePromptShown = false;
+    private boolean cmaBusy = false;            // an enable/disable flow is in flight
     // Two-way size link (pool_want <= pool_want_with_cma): which input the
     // user touched last decides who yields when they cross.
     private static final int SIZE_EDIT_POOL = 1;
     private static final int SIZE_EDIT_CMA = 2;
     private int lastSizeEdit = SIZE_EDIT_POOL;
     private boolean sizeLinkSyncing = false;    // programmatic setBigValue guard
-    /** Balloon floor (MB) for the consumability probe - `balloon 1536`. */
-    private static final long BALLOON_FLOOR_MB = 1536;
-    private static final long BALLOON_TIMEOUT_S = 600;
-    /**
-     * How much reservoir the probe wants to measure against:
-     * {@code max(RAM - 8G, RAM * 0.4)}. RAM here is MemTotal - physical pages
-     * only, so zram/swap capacity (SwapTotal) never inflates it. Advisory, not
-     * a precondition: a smaller reservoir still probes, it just makes the
-     * verdict less reliable, and the user is warned before continuing.
-     */
-    private static final long PROBE_KEEP_BYTES = 8L << 30;   // 8 GiB
-    private static final double PROBE_MIN_RAM_FRACTION = 0.4;
-    /**
-     * Pool size a passing probe leaves behind. The probe has just proved apps
-     * can consume the reservoir, so holding a large pool would waste memory the
-     * reservoir would otherwise lend out: pin the pool small and let
-     * pool_want_with_cma (kept at the size the probe assembled) carry the rest
-     * as reservoir. A VM start stages pages back in on demand.
-     */
-    private static final long PROBE_POOL_BYTES = 512L << 20;   // 512 MiB
-    private static final long PROBE_POOL_PAGES = PROBE_POOL_BYTES / PAGE_SIZE;
     private TextRowWidget rowStatState;
     private TextRowWidget rowStatTotalServed;
     private TextRowWidget rowStatTotalRefilled;
@@ -253,6 +225,10 @@ public void afterTextChanged(Editable s) {
         applyAcquireState();
         cardCrashWarning.setOnClickListener(v -> doDismissCrash());
         loadPoolSize();
+        // One-time migration: drop a stale cma_probe_result from the removed
+        // probe, which the shipped boot script would otherwise treat as a denial
+        // and keep the module's CMA side cold.
+        runOnPool(model::clearLegacyProbeKey);
     }
 
     /**
@@ -460,14 +436,8 @@ private void refreshStatus() {
                 ? new LinkedHashMap<>() : model.vmNames(false);
             // Reservoir occupancy for the two-tone CMA block (module caches ~1s).
             var cmaUsage = snap.cmaActive() ? model.cmaUsage() : null;
-            // A reservoir built (or being built) toward a target nobody ever
-            // judged: the "save and reboot" branch of the probe left it here.
-            boolean probePending = !probePromptShown && !cmaBusy
-                && snap.cmaActive() && model.cmaProbeResult() == null;
-            runOnUiThread(() -> {
-                updateUI(snap, crashStamp, owners, allPids, vmMap, cmaUsage);
-                if (probePending) promptPendingProbe();
-            });
+            runOnUiThread(() ->
+                updateUI(snap, crashStamp, owners, allPids, vmMap, cmaUsage));
         });
     }
 
@@ -673,9 +643,9 @@ private void updateUI(
         acquireEnabled = snap.loaded && snap.deficit > 0;
         applyAcquireState();
 
-        // CMA switch: only meaningful on a loaded v10 module. While a probe /
-        // toggle flow runs, leave the switch and the size input alone - the flow
-        // owns them (the reservoir flips around mid-probe and would flicker).
+        // CMA switch: only meaningful on a loaded v10+ module. While an enable/
+        // disable flow runs, leave the switch and the size inputs alone - the
+        // flow owns them (the reservoir flips around mid-flow and would flicker).
         rowCmaEnable.setEnabled(snap.loaded && snap.hasCma);
         if (!cmaBusy) {
             boolean cmaActive = snap.cmaActive();
@@ -684,14 +654,12 @@ private void updateUI(
                 rowCmaEnable.setChecked(cmaActive);
                 cmaSwitchSyncing = false;
             }
-            // The size row shows exactly one GiB tag: on the right field while
-            // CMA is on (two fields, tight width), on the pool field otherwise.
-            inputPoolSize.setUnitButtonVisible(!cmaActive);
+            // Two stacked size rows: the with-CMA total is editable only while
+            // the reservoir is on, greyed and non-editable otherwise. Seed it
+            // from pool_want_with_cma once each time CMA turns on.
+            inputCmaSize.setEnabled(cmaActive);
             if (cmaActive) {
-                // Seed the with-CMA total input once per show (it maps 1:1 to
-                // pool_want_with_cma), then leave the user's typing be.
-                if (inputCmaSize.getVisibility() != VISIBLE || !cmaInputLoaded) {
-                    inputCmaSize.setVisibility(VISIBLE);
+                if (!cmaInputLoaded) {
                     sizeLinkSyncing = true;
                     try {
                         inputCmaSize.setBigValue(
@@ -702,7 +670,6 @@ private void updateUI(
                     cmaInputLoaded = true;
                 }
             } else {
-                inputCmaSize.setVisibility(GONE);
                 cmaInputLoaded = false;
             }
         }
@@ -854,7 +821,7 @@ private long runningVmMemMib() {
      * shrinks the pool. Runs on focus-loss of either field and again at save.
      */
     private void reconcileSizeLink() {
-        if (inputCmaSize.getVisibility() != VISIBLE) return;
+        if (!inputCmaSize.isEnabled()) return;   // only linked while CMA is on
         if (!inputPoolSize.isInputValid() || !inputCmaSize.isInputValid()) return;
         var pool = inputPoolSize.getBigValue();
         var withCma = inputCmaSize.getBigValue();
@@ -873,10 +840,10 @@ private void savePoolSize() {
         if (!inputPoolSize.isInputValid()) return;
         var bytes = inputPoolSize.getBigValue();
         var pages = bytes.divide(BigInteger.valueOf(PAGE_SIZE));
-        // While the reservoir is on, the right field IS the with-CMA total
+        // While the reservoir is on, the with-CMA row IS the with-CMA total
         // (pool_want_with_cma); the link above already keeps it >= the pool.
         final long cmaPages;
-        if (inputCmaSize.getVisibility() == VISIBLE) {
+        if (inputCmaSize.isEnabled()) {
             if (!inputCmaSize.isInputValid()) return;
             cmaPages = inputCmaSize.getBigValue()
                 .divide(BigInteger.valueOf(PAGE_SIZE)).longValue();
@@ -938,7 +905,7 @@ private void doToggleModule() {
     }
 
     /* ================================================================== */
-    /*  v10 CMA reservoir: switch + consumability probe                   */
+    /*  v11 CMA reservoir: switch + movable->CMA levers                   */
     /* ================================================================== */
 
     private void onCmaSwitchChanged(boolean checked) {
@@ -965,10 +932,18 @@ private void cancelCmaEnable() {
         refreshStatus();
     }
 
-    /** Switch off: demolish the reservoir now and persist off for next boot. */
+    /**
+     * Switch off: revert whichever movable->CMA lever we armed (the module
+     * no-ops these writes when the vendor kernel already redirects, so this is
+     * safe in every case), demolish the reservoir now, and forget the saved
+     * lever so a future boot doesn't re-apply it.
+     */
     private void doCmaDisable() {
         cmaBusy = true;
         runOnPool(() -> {
+            model.setGfpHook(false);
+            model.setRestrictFlip(false);
+            model.clearCmaLever();
             var res = model.saveCmaTarget(0);
             runOnUiThread(() -> {
                 cmaBusy = false;
@@ -981,12 +956,15 @@ private void doCmaDisable() {
     }
 
     /**
-     * Switch on. The magisk-side {@code cma_probe_result} (settings.prop) says
-     * whether the consumability probe ever ran:
+     * Switch on. Plain movable allocations only reach the reservoir if the
+     * kernel redirects movable->CMA:
      * <ul>
-     *   <li>{@code 1} - apps can consume CMA: enable directly, no probe;</li>
-     *   <li>{@code 0} - probed unusable: offer a re-probe;</li>
-     *   <li>absent - never probed: explain and offer to run it.</li>
+     *   <li>the vendor kernel already redirects - enable directly, no risk;</li>
+     *   <li>otherwise a lever must be armed, which can destabilise the kernel -
+     *       warn, then arm it <b>live only</b> ({@link #tryCmaLever}); on success
+     *       offer to save it ({@link #promptSaveLever}). Splitting arm from save
+     *       is the safety net: if arming crashes the phone, nothing was saved and
+     *       the next boot comes up clean.</li>
      * </ul>
      */
     private void doCmaEnable() {
@@ -1002,83 +980,57 @@ private void doCmaEnable() {
                 });
                 return;
             }
-            var verdict = model.cmaProbeResult();
             if (snap.cmaPbOrder < 0) {
-                // The module disabled its whole CMA side this boot (preflight /
-                // symbols / first-block verification) - no write can help now.
-                // A recorded denial is one of the causes (the boot script then
-                // hands the module -1 preflight values): drop it, so the next
-                // boot comes up CMA-capable and the probe can run again.
-                boolean stale = verdict != null && verdict == VERDICT_DENIED;
-                if (stale) model.clearCmaProbeResult();
+                // The module turned its whole CMA side off this boot (preflight /
+                // symbols / first-block verification) - no lever can help now.
                 runOnUiThread(() -> {
                     cmaBusy = false;
                     setCmaSwitch(false);
                     if (isFinishing()) return;
                     new MaterialAlertDialogBuilder(this)
                         .setTitle(R.string.hugepage_cma_unavailable_title)
-                        .setMessage(stale ? R.string.hugepage_cma_unavailable_denied
-                            : R.string.hugepage_cma_unavailable_boot)
+                        .setMessage(R.string.hugepage_cma_unavailable_boot)
                         .setPositiveButton(android.R.string.ok, null)
                         .show();
                 });
                 return;
             }
-            // The threshold only feeds the two dialog branches - don't pay the
-            // meminfo shell read when the verdict lets us enable directly.
-            var needBytes = (verdict != null && verdict == VERDICT_ALLOWED)
-                ? 0 : probeNeedBytes(model.memTotalKb());
+            if (model.mtcVenderAllowed() == 1) {
+                // Vendor already redirects movable->CMA: nothing to arm, no risk.
+                enableCmaDirect(snap);
+                return;
+            }
+            // A lever is required, and arming it can crash the device: warn first.
             runOnUiThread(() -> {
                 if (isFinishing()) {
                     cmaBusy = false;
                     return;
                 }
-                if (verdict != null && verdict == VERDICT_ALLOWED) {
-                    enableCmaDirect(snap);
-                } else if (verdict != null && verdict == VERDICT_DENIED) {
-                    new MaterialAlertDialogBuilder(this)
-                        .setTitle(R.string.hugepage_cma_probe_denied_title)
-                        .setMessage(R.string.hugepage_cma_probe_denied_msg)
-                        .setPositiveButton(R.string.hugepage_cma_probe_rerun,
-                            (d, w) -> startCmaProbe())
-                        .setNegativeButton(android.R.string.cancel,
-                            (d, w) -> cancelCmaEnable())
-                        .setOnCancelListener(d -> cancelCmaEnable())
-                        .show();
-                } else {
-                    new MaterialAlertDialogBuilder(this)
-                        .setTitle(R.string.hugepage_cma_probe_needed_title)
-                        .setMessage(getString(R.string.hugepage_cma_probe_needed_msg,
-                            SizeUtils.formatSize(Math.max(0, needBytes)),
-                            SizeUtils.formatSize(PROBE_POOL_BYTES)))
-                        .setPositiveButton(R.string.hugepage_cma_probe_start,
-                            (d, w) -> startCmaProbe())
-                        .setNegativeButton(android.R.string.cancel,
-                            (d, w) -> cancelCmaEnable())
-                        .setOnCancelListener(d -> cancelCmaEnable())
-                        .show();
-                }
+                new MaterialAlertDialogBuilder(this)
+                    .setTitle(R.string.hugepage_cma_warn_title)
+                    .setMessage(R.string.hugepage_cma_warn_msg)
+                    .setPositiveButton(R.string.hugepage_cma_remove_restriction,
+                        (d, w) -> tryCmaLever(snap))
+                    .setNeutralButton(R.string.hugepage_cma_module_cma,
+                        (d, w) -> enableCmaReservoirOnly(snap))
+                    .setNegativeButton(android.R.string.cancel,
+                        (d, w) -> cancelCmaEnable())
+                    .setOnCancelListener(d -> cancelCmaEnable())
+                    .show();
             });
         });
     }
 
     /**
-     * Probe already passed: restore the remembered with-CMA total and let a v3
-     * acquire build the reservoir (only the mode-2/3 sweep runs Phase R; mode 1
-     * is pool-only legacy).
-     *
-     * <p>The target is clamped to the module's {@code pool_want <=
-     * pool_want_with_cma} invariant, so a remembered total at or below the pool
-     * size enables with an empty reservoir - that is a real state (the probe
-     * itself produces it when the pool already holds everything), and the user
-     * then raises the now-visible with-CMA field. Only {@code 0} is impossible:
-     * it is the off sentinel.
+     * Vendor already redirects movable->CMA (or a saved lever is already live):
+     * just set the with-CMA total and let a v3 acquire build the reservoir (only
+     * the mode-2/3 sweep runs Phase R; mode 1 is pool-only legacy). This path
+     * carries no crash risk, so the target is persisted and there is no separate
+     * save step.
      */
     private void enableCmaDirect(@NonNull HugePageModel.Snapshot snap) {
         runOnPool(() -> {
-            long target = Math.max(model.lastCmaTargetPages(), snap.targetIdeal);
-            if (target <= 0)   // pool soft-disabled: fall back to the probe floor
-                target = pagesFor(Math.max(0, probeNeedBytes(model.memTotalKb())));
+            long target = reservoirTarget(snap);
             boolean ok = target > 0 && model.saveCmaTarget(target).ok();
             if (ok) {
                 var s2 = model.state();
@@ -1096,541 +1048,123 @@ private void enableCmaDirect(@NonNull HugePageModel.Snapshot snap) {
         });
     }
 
-    /* ---- probe orchestration ---- */
-
-    /** Progress dialog handle for the probe worker thread. */
-    private static final class ProbeUi {
-        @NonNull final androidx.appcompat.app.AlertDialog dialog;
-        @NonNull final TextView text;
-
-        ProbeUi(@NonNull androidx.appcompat.app.AlertDialog dialog, @NonNull TextView text) {
-            this.dialog = dialog;
-            this.text = text;
-        }
-    }
-
-    private static final int VERDICT_DENIED = 0;
-    private static final int VERDICT_ALLOWED = 1;
-    private static final int VERDICT_ABNORMAL = -1;
-
-    /** max(RAM - 8 GiB, RAM x 0.4) in bytes; -1 when meminfo is unreadable. */
-    private long probeNeedBytes(long memTotalKb) {
-        if (memTotalKb <= 0) return -1;
-        long total = memTotalKb * 1024;
-        return Math.max(total - PROBE_KEEP_BYTES, (long) (total * PROBE_MIN_RAM_FRACTION));
-    }
-
-    private static long pagesFor(long bytes) {
-        return (bytes + PAGE_SIZE - 1) / PAGE_SIZE;
-    }
-
-    /** Kick off the probe worker; the switch stays under the flow's control. */
-    private void startCmaProbe() {
-        new Thread(this::runCmaProbe, "hugepage-cma-probe").start();
-    }
-
     /**
-     * The consumability probe (worker thread). Steps, per the module docs:
-     * precondition {@code avail >= max(RAM-7G, 40% RAM)} (guided acquire, else
-     * save-and-reboot); then {@code echo avail > pool_want_with_cma},
-     * {@code echo 0 > pool_want} (the freed blocks flip to the reservoir), run
-     * {@code balloon 1536} and judge from how much CmaFree the pressure consumed
-     * whether this vendor lets user apps allocate from CMA. {@code pool_want} is
-     * restored on every path.
-     *
-     * <p>Only a pass is written to settings.prop ({@code cma_probe_result=1}) -
-     * an unreadable result asks the user, and enabling counts as a pass. A
-     * failure (or a decline) records nothing and clears any stale verdict, so
-     * the next launch can simply probe again.
+     * Arm a movable->CMA lever <b>live only</b> - nothing is persisted yet. On
+     * 6.1 the {@code restrict_cma_redirect} flag is side-effect-free, so try it
+     * first and fall back to the gfp hook; on 6.6/6.12 that same key also backs
+     * {@code cma_has_pcplist()}, so arm the narrower hook directly (and only try
+     * the flag as a last resort). Then build the reservoir toward a target so the
+     * user can watch it fill, and offer to save the lever for next boot.
      */
-    private void runCmaProbe() {
-        var cancelled = new AtomicBoolean(false);
-        ProbeUi ui = null;
-        boolean raised = false;    // pool_want_with_cma raised by us
-        boolean zeroed = false;    // pool_want emptied by us
-        long prevWant = -1;
-        try {
-            // Balloon pressure would squeeze (or LMK-kill) running VMs.
-            if (runningVmMemMib() > 0) {
-                probeFail(null, getString(R.string.hugepage_cma_vms_running));
-                return;
-            }
-            var snap = model.state();
-            prevWant = snap.targetIdeal;
-            long needBytes = probeNeedBytes(model.memTotalKb());
-            if (needBytes <= 0) {
-                probeFail(null, getString(R.string.hugepage_cma_probe_failed_generic));
-                return;
-            }
-            long needPages = pagesFor(needBytes);
-            // 1. How big a reservoir to measure against. It is NOT bounded by
-            //    the configured pool: the probe empties the pool into the
-            //    reservoir (pool_want=0 -> the module's shrink flips every avail
-            //    block to CMA, instantly), so the only ceiling is the module's
-            //    RAM-derived pool_size_max. A cap below what we want makes the
-            //    verdict shakier, not impossible: warn and let the user go on.
-            long cap = model.poolSizeMax();
-            long target = Math.max(needPages, Math.max(prevWant, snap.wantWithCma));
-            if (cap > 0) target = Math.min(target, cap);
-            long goal = Math.min(needPages, target);
-            if (goal < needPages && !probeAsk(
-                getString(R.string.hugepage_cma_small_reservoir_title),
-                getString(R.string.hugepage_cma_small_reservoir_msg,
-                    SizeUtils.formatSize(goal * PAGE_SIZE),
-                    SizeUtils.formatSize(needPages * PAGE_SIZE)),
-                getString(R.string.hugepage_cma_probe_anyway))) {
-                probeCancelled(null, false);
-                return;
-            }
-            ui = probeProgressShow(reservoirStage(snap.cmaPool, goal), cancelled);
-            if (ui == null) {
-                probeCancelled(null, false);
-                return;
-            }
-            // 2. Build the reservoir. Already there (a previous run persisted the
-            //    target and the module assembled it at boot) -> measure directly,
-            //    touching nothing.
-            boolean built = snap.cmaPool >= goal;
-            if (!built) {
-                // Raise the total first: pool_want=0 would otherwise soft-disable
-                // the pool and hand its pages back to the buddy allocator instead
-                // of flipping them into the reservoir. Never lower an existing
-                // bigger total - that demolishes reservoir the device is lending
-                // out right now.
-                if (snap.wantWithCma < target) {
-                    var w = model.writeWantWithCma(target);
-                    if (!w.ok()) {
-                        probeDismiss(ui);
-                        probeUnavailable(getString(R.string.hugepage_cma_unavailable_write,
-                            w.detail != null ? w.detail : "?"));
-                        return;
-                    }
-                }
-                raised = true;
-                // Empty the pool: its avail blocks flip to CMA at once (the fast
-                // path - a from-scratch sweep would hit the fragmentation wall).
-                // Only the live knob is written, so a reboot restores pool_want
-                // even if this app dies before the restore below.
-                var shrink = model.writeWant(0);
-                if (!shrink.ok()) {
-                    probeRollback();
-                    probeDismiss(ui);
-                    probeFail(null, getString(R.string.hugepage_cma_probe_failed_generic));
-                    return;
-                }
-                zeroed = true;
-                Thread.sleep(3000);          // let the flips land
-                model.acquire(3);            // best-effort top-up toward the target
-                built = waitReservoir(ui, goal, cancelled);
-            }
-            if (cancelled.get()) {
-                model.stopAcquire();
-                probeRestore(prevWant, zeroed);
-                probeRollback();
-                probeCancelled(ui, true);
-                return;
-            }
-            // Whatever actually assembled is what the balloon is judged against.
-            long reservoirPages = model.state().cmaPool;
-            if (reservoirPages <= 0) {
-                probeRestore(prevWant, zeroed);
-                probeRollback();
-                probeDismiss(ui);
-                probeUnavailable(getString(R.string.hugepage_cma_unavailable_reservoir));
-                return;
-            }
-            if (!built) {
-                // The runtime sweep hit the fragmentation wall. This is not a
-                // different failure from "it can't be built" - the module builds
-                // the reservoir first at init, on the cleanest memory there is,
-                // so the very same target simply works after a reboot. Persist
-                // it and pick the probe back up then (see the pending prompt) -
-                // or measure right now against the smaller reservoir that did
-                // get built, accepting a shakier verdict.
-                probeDismiss(ui);
-                ui = null;
-                int choice = probeAskChoice(
-                    getString(R.string.hugepage_cma_reservoir_short_title),
-                    getString(R.string.hugepage_cma_reservoir_short_msg,
-                        SizeUtils.formatSize(reservoirPages * PAGE_SIZE),
-                        SizeUtils.formatSize(goal * PAGE_SIZE)),
-                    getString(R.string.hugepage_cma_save_reboot),
-                    getString(R.string.hugepage_cma_probe_anyway));
-                if (choice != CHOICE_NEGATIVE) {
-                    // "I'll reboot, then probe", or dismissed. Nothing is saved:
-                    // the probe assembles the reservoir out of the pool itself,
-                    // so a fresh boot - where memory is unfragmented - simply
-                    // lets the same run succeed. Undo our live writes and go.
-                    probeRestore(prevWant, zeroed);
-                    probeRollback();
-                    if (choice == CHOICE_POSITIVE)
-                        probeToast(getString(R.string.hugepage_cma_reboot_hint));
-                    probeEndUi(false);
-                    return;
-                }
-                // Probe anyway: a fresh progress dialog for the pressure stage.
-                ui = probeProgressShow(
-                    getString(R.string.hugepage_cma_probe_running_balloon), cancelled);
-                if (ui == null) {
-                    probeRestore(prevWant, zeroed);
-                    probeRollback();
-                    probeCancelled(null, false);
-                    return;
-                }
-            }
-            // 3. Pressure + judgment, measured against the reservoir that exists.
-            probeStage(ui, getString(R.string.hugepage_cma_probe_running_balloon));
-            var out = model.runBalloon(BALLOON_FLOOR_MB, BALLOON_TIMEOUT_S);
-            if (cancelled.get()) {
-                probeRestore(prevWant, zeroed);
-                probeRollback();
-                probeCancelled(ui, true);
-                return;
-            }
-            int verdict = judgeBalloon(out, reservoirPages);
-            probeDismiss(ui);
-            ui = null;
-            // A pass enables straight away. Anything else - a denial, or numbers
-            // that match neither verdict - is put to the user, because a probe
-            // can be wrong (a small reservoir, a vendor that only lets some
-            // allocation classes in). Enabling either way counts as a pass and
-            // is recorded, so the switch stops probing from now on; declining
-            // records nothing and clears any stale verdict, leaving the probe
-            // available next launch.
-            if (verdict == VERDICT_ALLOWED) {
-                model.setCmaProbeAllowed();
-                probeEnableWithSmallPool(target);
-                probeToast(getString(R.string.hugepage_cma_probe_ok,
-                    SizeUtils.formatSize(PROBE_POOL_BYTES)));
-                probeEndUi(true);
+    private void tryCmaLever(@NonNull HugePageModel.Snapshot snap) {
+        cmaBusy = true;
+        runOnPool(() -> {
+            boolean is61 = model.kernelIs61();
+            String lever = null;
+            if (is61 && flipFlagWorks()) lever = HugePageModel.LEVER_FLAG;
+            else if (model.setGfpHook(true).ok()) lever = HugePageModel.LEVER_HOOK;
+            else if (!is61 && flipFlagWorks()) lever = HugePageModel.LEVER_FLAG;
+            if (lever == null) {
+                runOnUiThread(() -> {
+                    cmaBusy = false;
+                    setCmaSwitch(false);
+                    Toast.makeText(this, R.string.hugepage_cma_lever_failed,
+                        LENGTH_SHORT).show();
+                    refreshStatus();
+                });
                 return;
             }
-            boolean enable = verdict == VERDICT_DENIED
-                ? probeAsk(getString(R.string.hugepage_cma_probe_denied_title),
-                    getString(R.string.hugepage_cma_probe_denied_result),
-                    getString(R.string.hugepage_cma_probe_enable))
-                : probeAskAbnormal(out, reservoirPages);
-            if (enable) {
-                model.setCmaProbeAllowed();
-                probeEnableWithSmallPool(target);   // also restores pool_want
-                probeToast(getString(R.string.hugepage_cma_enabled_pool,
-                    SizeUtils.formatSize(PROBE_POOL_BYTES)));
-                probeEndUi(true);
-            } else {
-                probeRestore(prevWant, zeroed);
-                model.clearCmaProbeResult();
-                model.saveCmaTarget(0);   // demolishes the reservoir
-                if (zeroed) model.acquire(1);   // refill the restored pool
-                probeEndUi(false);
-            }
-        } catch (InterruptedException e) {
-            probeRestore(prevWant, zeroed);
-            if (raised) probeRollback();
-            probeCancelled(ui, ui != null);
-        } catch (Exception e) {
-            // Never leave the flow lock stuck: undo our writes and surface the
-            // error instead of a wedged switch.
-            Log.w(TAG, "CMA probe failed", e);
-            probeRestore(prevWant, zeroed);
-            if (raised) probeRollback();
-            probeDismiss(ui);
-            probeFail(null, getString(R.string.hugepage_cma_probe_failed_generic));
-        }
-    }
-
-    /** Put {@code pool_want} back if the probe emptied it (live knob only). */
-    private void probeRestore(long prevWant, boolean zeroed) {
-        if (zeroed && prevWant >= 0) model.writeWant(prevWant);
-    }
-
-    /**
-     * The reboot half of the probe: the reservoir target survived a reboot with
-     * no verdict recorded, so the module has now built it on clean memory and
-     * the measurement can finally run. Asked once per visit; declining leaves
-     * the reservoir in place (it is still lent to apps) and the switch on.
-     */
-    private void promptPendingProbe() {
-        if (probePromptShown || cmaBusy || isFinishing() || isDestroyed()) return;
-        probePromptShown = true;
-        new MaterialAlertDialogBuilder(this)
-            .setTitle(R.string.hugepage_cma_probe_pending_title)
-            .setMessage(R.string.hugepage_cma_probe_pending_msg)
-            .setPositiveButton(R.string.hugepage_cma_probe_continue, (d, w) -> {
-                cmaBusy = true;
-                startCmaProbe();
-            })
-            .setNegativeButton(android.R.string.cancel, null)
-            .show();
-    }
-
-    /** Undo the probe's only write: the raised total demolishes its reservoir. */
-    private void probeRollback() {
-        model.writeWantWithCma(0);
-    }
-
-    @NonNull
-    private String reservoirStage(long got, long goal) {
-        return getString(R.string.hugepage_cma_building,
-            SizeUtils.formatSize(got * PAGE_SIZE), SizeUtils.formatSize(goal * PAGE_SIZE));
-    }
-
-    /**
-     * The end state of an enabled probe: a {@value #PROBE_POOL_BYTES}-byte pool
-     * and the with-CMA total the probe assembled, persisted in one settings.prop
-     * rewrite so the next boot comes up the same way. This is the probe's first
-     * and only {@code pool_want} write: shrinking the pool hands its pages to
-     * the reservoir (the module's shrink path), and the v3 acquire then stages
-     * 512 MB back in and tops the reservoir up toward the total.
-     */
-    private void probeEnableWithSmallPool(long total) {
-        model.saveTargets(PROBE_POOL_PAGES, total);
-        // v3: only the mode-2/3 sweep runs the reservoir-building Phase R.
-        model.acquire(3);
+            buildReservoirAndPromptSave(snap, lever);
+        });
     }
 
     /**
-     * Poll the reservoir toward {@code goal} pages, narrating progress. Returns
-     * true once {@code pool_cma} reaches it; false on stop/timeout/cancel.
+     * Reservoir-only: build the reservoir <b>without</b> arming any lever, so
+     * there is no crash risk. Useful on a device where the vendor kernel already
+     * lets apps consume CMA even though it reads as not-allowed; elsewhere the
+     * reserve still serves VMs via stage-in. Offers the same save step (which
+     * persists the target but no lever).
      */
-    private boolean waitReservoir(@NonNull ProbeUi ui, long goal,
-                                  @NonNull AtomicBoolean cancelled)
-        throws InterruptedException {
-        for (int i = 0; i < 1800; i++) {   // 30 min hard bound
-            if (cancelled.get()) return false;
-            var s = model.state();
-            probeStage(ui, reservoirStage(s.cmaPool, goal));
-            if (s.cmaPool >= goal) return true;
-            // Give the worker a few seconds to raise acquire_active before
-            // treating "not acquiring" as done-short.
-            if (!s.acquiring && i > 5) return false;
-            Thread.sleep(1000);
-        }
-        return false;
+    private void enableCmaReservoirOnly(@NonNull HugePageModel.Snapshot snap) {
+        cmaBusy = true;
+        runOnPool(() -> buildReservoirAndPromptSave(snap, null));
     }
 
     /**
-     * Judge the balloon output against the reservoir that was built: pressure
-     * that consumed at least half of it means apps allocate from CMA; a tenth
-     * or less means they can't; anything between (or unparsable output) is
-     * unreadable and goes to the user.
+     * Build the reservoir toward a target with a live (non-persisted) write so
+     * the user can watch it fill, then offer to save. {@code lever} is the lever
+     * the caller armed, or {@code null} for the reservoir-only path. Runs on the
+     * pool thread.
      */
-    private int judgeBalloon(@Nullable Map<String, String> out, long reservoirPages) {
-        if (out == null) return VERDICT_ABNORMAL;
-        long diffKb;
-        long heldMb;
-        try {
-            diffKb = Long.parseLong(out.getOrDefault("cma_diff_kb", "").trim());
-            heldMb = Long.parseLong(out.getOrDefault("held_mb", "").trim());
-        } catch (NumberFormatException e) {
-            return VERDICT_ABNORMAL;
+    private void buildReservoirAndPromptSave(@NonNull HugePageModel.Snapshot snap,
+                                             @Nullable String lever) {
+        long target = reservoirTarget(snap);
+        if (target > 0) {
+            model.writeWantWithCma(target);
+            var s2 = model.state();
+            if (s2.loaded && s2.deficit > 0) model.acquire(3);
         }
-        long reservoirKb = reservoirPages * (PAGE_SIZE / 1024);
-        if (reservoirKb <= 0 || heldMb <= 0) return VERDICT_ABNORMAL;
-        if (diffKb >= reservoirKb / 2) return VERDICT_ALLOWED;
-        if (diffKb <= reservoirKb / 10) return VERDICT_DENIED;
-        return VERDICT_ABNORMAL;
-    }
-
-    /* ---- probe worker <-> UI plumbing (all blocking helpers) ---- */
-
-    /** Blocking two-choice dialog; false on cancel/back/finish. */
-    private boolean probeAsk(@NonNull String title, @NonNull String message,
-                             @NonNull String positive) throws InterruptedException {
-        return probeAskChoice(title, message, positive,
-            getString(android.R.string.cancel)) == CHOICE_POSITIVE;
-    }
-
-    /** {@link #probeAskChoice} outcomes; {@code CHOICE_NONE} = back/dismiss/gone. */
-    private static final int CHOICE_NONE = 0;
-    private static final int CHOICE_POSITIVE = 1;
-    private static final int CHOICE_NEGATIVE = 2;
-
-    /**
-     * Blocking dialog offering two named actions, with back/outside-tap as a
-     * third "neither" outcome. Both buttons are real choices - which is why
-     * neither is labelled Cancel by callers that need three ways out.
-     */
-    private int probeAskChoice(@NonNull String title, @NonNull String message,
-                               @NonNull String positive, @NonNull String negative)
-        throws InterruptedException {
-        var choice = new AtomicInteger(CHOICE_NONE);
-        var latch = new CountDownLatch(1);
         runOnUiThread(() -> {
-            // isDestroyed covers rotation teardown (isFinishing stays false);
-            // the catch covers a window torn down mid-post - either way the
-            // latch MUST be counted or the worker blocks forever.
-            if (isFinishing() || isDestroyed()) {
-                latch.countDown();
-                return;
-            }
-            try {
-                new MaterialAlertDialogBuilder(this)
-                    .setTitle(title)
-                    .setMessage(message)
-                    .setPositiveButton(positive, (d, w) -> choice.set(CHOICE_POSITIVE))
-                    .setNegativeButton(negative, (d, w) -> choice.set(CHOICE_NEGATIVE))
-                    .setOnDismissListener(d -> latch.countDown())
-                    .show();
-            } catch (Exception e) {
-                latch.countDown();
-            }
-        });
-        latch.await();
-        return choice.get();
-    }
-
-    /** The "result unreadable - enable anyway?" dialog, with the raw numbers. */
-    private boolean probeAskAbnormal(@Nullable Map<String, String> out, long reservoirPages)
-        throws InterruptedException {
-        long diffKb = 0;
-        long heldMb = 0;
-        String stop = "?";
-        if (out != null) {
-            try {
-                diffKb = Long.parseLong(out.getOrDefault("cma_diff_kb", "0").trim());
-            } catch (NumberFormatException ignored) {
-            }
-            try {
-                heldMb = Long.parseLong(out.getOrDefault("held_mb", "0").trim());
-            } catch (NumberFormatException ignored) {
-            }
-            stop = out.getOrDefault("stop_reason", "?");
-        }
-        var choice = new AtomicInteger(0);
-        var latch = new CountDownLatch(1);
-        long fDiffKb = diffKb;
-        long fHeldMb = heldMb;
-        String fStop = stop;
-        runOnUiThread(() -> {
-            if (isFinishing() || isDestroyed()) {
-                latch.countDown();
+            cmaInputLoaded = false;
+            refreshStatus();
+            if (isFinishing()) {
+                cmaBusy = false;
                 return;
             }
-            try {
-                new MaterialAlertDialogBuilder(this)
-                    .setTitle(R.string.hugepage_cma_probe_abnormal_title)
-                    .setMessage(getString(R.string.hugepage_cma_probe_abnormal_msg,
-                        SizeUtils.formatSize(fDiffKb * 1024),
-                        SizeUtils.formatSize(reservoirPages * PAGE_SIZE),
-                        SizeUtils.formatSize(fHeldMb * 1024 * 1024),
-                        fStop))
-                    .setPositiveButton(R.string.hugepage_cma_probe_enable,
-                        (d, w) -> choice.set(1))
-                    .setNegativeButton(R.string.hugepage_cma_probe_keep_off, null)
-                    .setOnDismissListener(d -> latch.countDown())
-                    .show();
-            } catch (Exception e) {
-                latch.countDown();
-            }
-        });
-        latch.await();
-        return choice.get() == 1;
-    }
-
-    /** Show the cancellable progress dialog; null when the activity is gone. */
-    @Nullable
-    private ProbeUi probeProgressShow(@NonNull String initial,
-                                      @NonNull AtomicBoolean cancelled)
-        throws InterruptedException {
-        var holder = new java.util.concurrent.atomic.AtomicReference<ProbeUi>();
-        var latch = new CountDownLatch(1);
-        runOnUiThread(() -> {
-            try {
-                if (isFinishing() || isDestroyed()) return;
-                float density = getResources().getDisplayMetrics().density;
-                var text = new TextView(this);
-                text.setText(initial);
-                var box = new LinearLayout(this);
-                box.setOrientation(LinearLayout.HORIZONTAL);
-                box.setGravity(android.view.Gravity.CENTER_VERTICAL);
-                int pad = Math.round(24 * density);
-                box.setPaddingRelative(pad, Math.round(16 * density), pad, 0);
-                var spinner = new ProgressBar(this);
-                box.addView(spinner, Math.round(32 * density), Math.round(32 * density));
-                var lp = new LinearLayout.LayoutParams(
-                    LinearLayout.LayoutParams.MATCH_PARENT,
-                    LinearLayout.LayoutParams.WRAP_CONTENT);
-                lp.setMarginStart(Math.round(16 * density));
-                box.addView(text, lp);
-                var dialog = new MaterialAlertDialogBuilder(this)
-                    .setTitle(R.string.hugepage_enable_cma)
-                    .setView(box)
-                    .setCancelable(false)
-                    .setNegativeButton(android.R.string.cancel, null)
-                    .create();
-                dialog.show();
-                // Cancel requests cooperative interruption; the worker decides
-                // when it is safe to stop, so the button must not dismiss the
-                // dialog. A running balloon ignores flags, so also kill it -
-                // its run() then returns quickly and the worker sees the flag.
-                var btn = dialog.getButton(android.content.DialogInterface.BUTTON_NEGATIVE);
-                if (btn != null) btn.setOnClickListener(v -> {
-                    cancelled.set(true);
-                    v.setEnabled(false);
-                    runOnPool(() -> runList("pkill", "-f",
-                        "gh-hugepage-reserve/balloon"));
-                });
-                holder.set(new ProbeUi(dialog, text));
-            } catch (Exception ignored) {
-                // window torn down mid-post: holder stays null = "activity gone"
-            } finally {
-                latch.countDown();
-            }
+            promptSaveLever(lever, target);
         });
-        latch.await();
-        return holder.get();
-    }
-
-    private void probeStage(@NonNull ProbeUi ui, @NonNull String msg) {
-        runOnUiThread(() -> ui.text.setText(msg));
     }
 
-    private void probeDismiss(@Nullable ProbeUi ui) {
-        if (ui != null) runOnUiThread(ui.dialog::dismiss);
+    /** Flip the restrict flag on and confirm the kernel actually opened it. */
+    private boolean flipFlagWorks() {
+        return model.setRestrictFlip(true).ok() && model.readRestrictState() == 1;
     }
 
-    private void probeToast(@NonNull String msg) {
-        runOnUiThread(() -> Toast.makeText(this, msg, Toast.LENGTH_LONG).show());
+    /** With-CMA target to build: the last saved total, else the pool size. */
+    private long reservoirTarget(@NonNull HugePageModel.Snapshot snap) {
+        return Math.max(model.lastCmaTargetPages(),
+            Math.max(snap.targetIdeal, snap.built));
     }
 
-    /** Wind the flow down: dismiss, switch off. Callers own the rollback. */
-    private void probeCancelled(@Nullable ProbeUi ui, boolean toast) {
-        probeDismiss(ui);
-        if (toast) probeToast(getString(R.string.hugepage_cma_probe_cancelled));
-        probeEndUi(false);
+    /**
+     * Step 2: the live setting didn't crash the phone. Offer to persist it so it
+     * re-applies at the next boot (written into Magisk's settings.prop).
+     * Declining keeps it running now but leaves the next boot clean - the safety
+     * net, in case it destabilises the device after all. {@code lever} is null on
+     * the reservoir-only path (only the target is persisted).
+     */
+    private void promptSaveLever(@Nullable String lever, long target) {
+        new MaterialAlertDialogBuilder(this)
+            .setTitle(R.string.hugepage_cma_save_title)
+            .setMessage(R.string.hugepage_cma_save_msg)
+            .setPositiveButton(R.string.hugepage_cma_save_yes,
+                (d, w) -> finishCmaEnable(lever, target, true))
+            .setNegativeButton(R.string.hugepage_cma_save_no,
+                (d, w) -> finishCmaEnable(lever, target, false))
+            .setOnCancelListener(d -> finishCmaEnable(lever, target, false))
+            .show();
     }
 
-    /** Failure with a message dialog (or toast when {@code title} is null). */
-    private void probeFail(@Nullable String title, @NonNull String message) {
-        runOnUiThread(() -> {
-            cmaBusy = false;
-            setCmaSwitch(false);
-            if (isFinishing()) return;
-            if (title == null) {
-                Toast.makeText(this, message, Toast.LENGTH_LONG).show();
-            } else {
-                new MaterialAlertDialogBuilder(this)
-                    .setTitle(title)
-                    .setMessage(message)
-                    .setPositiveButton(android.R.string.ok, null)
-                    .show();
+    /**
+     * Settle an enabled reservoir: switch on and reseed the size input. When
+     * {@code save}, persist the with-CMA target and the lever choice so the next
+     * boot comes up the same way (a null lever clears the key = reservoir-only);
+     * otherwise everything stays live-only.
+     */
+    private void finishCmaEnable(@Nullable String lever, long target, boolean save) {
+        runOnPool(() -> {
+            if (save) {
+                if (lever != null) model.saveCmaLever(lever);
+                else model.clearCmaLever();
+                if (target > 0) model.saveCmaTarget(target);
             }
-            refreshStatus();
-        });
-    }
-
-    private void probeUnavailable(@NonNull String detail) {
-        probeFail(getString(R.string.hugepage_cma_unavailable_title), detail);
-    }
-
-    /** Release the flow lock and settle the switch to the final state. */
-    private void probeEndUi(boolean enabled) {
-        runOnUiThread(() -> {
-            cmaBusy = false;
-            setCmaSwitch(enabled);
-            cmaInputLoaded = false;   // reseed the with-CMA total field
-            loadPoolSize();           // a passing probe pins pool_want to 512 MB
-            refreshStatus();
+            runOnUiThread(() -> {
+                cmaBusy = false;
+                setCmaSwitch(true);
+                Toast.makeText(this, R.string.hugepage_cma_enabled, LENGTH_SHORT).show();
+                cmaInputLoaded = false;
+                refreshStatus();
+            });
         });
     }
 
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/hugepage/HugePageModel.java b/app/src/main/java/cn/classfun/droidvm/ui/hugepage/HugePageModel.java
index 350283e91..aef1fb615 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/hugepage/HugePageModel.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/hugepage/HugePageModel.java
@@ -440,53 +440,122 @@ Result stopAcquire() {
     }
 
     /* ================================================================== */
-    /*  v10 CMA reservoir + consumability probe                           */
+    /*  v11 movable->CMA levers + CMA reservoir persistence               */
     /* ================================================================== */
 
+    /** settings.prop values recording which movable->CMA lever the user saved. */
+    static final String LEVER_HOOK = "hook";
+    static final String LEVER_FLAG = "flag";
+    private static final String CMA_LEVER_KEY = "cma_movable_lever";
+
+    private static final String MTC_VENDER = "moveable_to_cma_vender_already_allowed";
+    private static final String MTC_RESTRICT = "moveable_to_cma_restrict_cma_redirect_disabled";
+    private static final String MTC_GFP_HOOK = "moveable_to_cma_gfp_cma_hook";
+
     /**
-     * The app-side probe verdict recorded in settings.prop as
-     * {@code cma_probe_result}: {@code 1} = apps can consume the reservoir,
-     * {@code 0} = they can't (the boot script then keeps the whole CMA side
-     * cold), {@code null} = the probe never ran.
+     * Whether the running kernel is 6.1. On 6.1 the {@code restrict_cma_redirect}
+     * static key is side-effect-free, so the enable flow prefers flipping it (a
+     * clean global switch); on 6.6/6.12 the same key also backs
+     * {@code cma_has_pcplist()}, so the narrower gfp hook is used instead. Fails
+     * safe to {@code false} (the hook path) when {@code uname} is unreadable.
      */
-    @Nullable
-    Integer cmaProbeResult() {
-        var v = parseProp(safeRead(SETTINGS_PROP)).get("cma_probe_result");
-        if (v == null) return null;
+    boolean kernelIs61() {
         try {
-            return Integer.parseInt(v.trim());
-        } catch (NumberFormatException e) {
-            return null;
+            var r = runList("uname", "-r").getOutString().trim();
+            return r.equals("6.1") || r.startsWith("6.1.");
+        } catch (Exception e) {
+            return false;
         }
     }
 
     /**
-     * Record a <b>passed</b> probe (see {@link #cmaProbeResult}). Only success
-     * is ever persisted: a failed or inconclusive probe leaves no verdict, so
-     * the next app launch can simply probe again.
+     * Read {@code moveable_to_cma_vender_already_allowed}: {@code 1} = the
+     * vendor kernel already redirects every movable allocation into CMA, so the
+     * reservoir is consumable without touching either lever; {@code 0} = it does
+     * not; {@code -1} = the param is absent (pre-v11 module, no lever support).
+     */
+    int mtcVenderAllowed() {
+        return readIntParam(MTC_VENDER, -1);
+    }
+
+    /**
+     * The "flag" lever: flip the kernel {@code restrict_cma_redirect} static key
+     * (write 1 = open movable->CMA globally). Live only - not persisted here.
+     */
+    @NonNull
+    Result setRestrictFlip(boolean on) {
+        var t = writeKnob(MTC_RESTRICT, on ? "1" : "0");
+        return t.ok() ? Result.ok(MTC_RESTRICT) : Result.failed(MTC_RESTRICT, t.error);
+    }
+
+    /** Read the flag state: 1 = redirect open, 0 = blocked, -1 = unresolvable. */
+    int readRestrictState() {
+        return readIntParam(MTC_RESTRICT, -1);
+    }
+
+    /**
+     * The "hook" lever: arm the {@code __GFP_CMA} bypass hook (write 1 = let page
+     * cache / mTHP anon consume the reservoir). Live only - not persisted here.
      */
     @NonNull
-    Result setCmaProbeAllowed() {
+    Result setGfpHook(boolean on) {
+        var t = writeKnob(MTC_GFP_HOOK, on ? "1" : "0");
+        return t.ok() ? Result.ok(MTC_GFP_HOOK) : Result.failed(MTC_GFP_HOOK, t.error);
+    }
+
+    /** Read the gfp hook arm state: 1 = armed, 0 = disarmed, -1 = absent. */
+    int readGfpHook() {
+        return readIntParam(MTC_GFP_HOOK, -1);
+    }
+
+    /**
+     * Persist the chosen movable->CMA lever ({@link #LEVER_HOOK} /
+     * {@link #LEVER_FLAG}) under an app-owned settings.prop key, so a future
+     * boot script can re-apply it as an insmod param. The shipped load.sh does
+     * not read it yet, so this only records intent - deliberate: the lever is
+     * applied live and only saved once it has proven it doesn't crash the boot.
+     */
+    @NonNull
+    Result saveCmaLever(@NonNull String lever) {
         var changes = new LinkedHashMap<String, String>();
-        changes.put("cma_probe_result", "1");
+        changes.put(CMA_LEVER_KEY, lever);
         var t = updateSettings(changes);
         return t.ok() ? Result.ok("settings") : Result.failed("settings", t.error);
     }
 
-    /**
-     * Drop any recorded verdict. Beyond "forget a failure", this un-sticks a
-     * legacy {@code cma_probe_result=0}: the boot script hands the module -1
-     * preflight values while that key is 0, which kills the CMA side for the
-     * whole boot and makes a re-probe impossible until it is gone.
-     */
+    /** Forget the persisted lever (CMA switched off, or the user declined save). */
     @NonNull
-    Result clearCmaProbeResult() {
+    Result clearCmaLever() {
         var changes = new LinkedHashMap<String, String>();
-        changes.put("cma_probe_result", null);   // null value = remove the key
+        changes.put(CMA_LEVER_KEY, null);   // null value = remove the key
         var t = updateSettings(changes);
         return t.ok() ? Result.ok("settings") : Result.failed("settings", t.error);
     }
 
+    /**
+     * Drop a stale {@code cma_probe_result} left by an older app version. The
+     * shipped boot script still cold-starts the whole CMA side on
+     * {@code cma_probe_result=0}, so a leftover denial from the removed probe
+     * would keep v11's reservoir off; remove it on sight. No-op when absent.
+     */
+    void clearLegacyProbeKey() {
+        if (!parseProp(safeRead(SETTINGS_PROP)).containsKey("cma_probe_result")) return;
+        var changes = new LinkedHashMap<String, String>();
+        changes.put("cma_probe_result", null);
+        updateSettings(changes);
+    }
+
+    /** Read an integer sysfs param, or {@code def} when absent/unparseable. */
+    private int readIntParam(@NonNull String name, int def) {
+        var v = safeRead(pathJoin(SYSFS_PARAMS, name)).trim();
+        if (v.isEmpty()) return def;
+        try {
+            return Integer.parseInt(v);
+        } catch (NumberFormatException e) {
+            return def;
+        }
+    }
+
     /**
      * The last non-zero with-CMA total (pages) the user ran with, kept under an
      * app-owned settings.prop key so switching CMA off (which must persist
@@ -553,7 +622,12 @@ private static Map<String, String> cmaTargetChanges(long pages) {
         return changes;
     }
 
-    /** Live {@code pool_want_with_cma} write only - the probe's first step. */
+    /**
+     * Live {@code pool_want_with_cma} write only (no settings.prop persist), so
+     * the reservoir target set here is undone by a reboot. The enable flow uses
+     * it to build the reservoir at runtime before the user decides whether to
+     * save the movable->CMA lever.
+     */
     @NonNull
     Result writeWantWithCma(long pages) {
         var t = writeKnob("pool_want_with_cma", Long.toString(pages));
@@ -561,73 +635,6 @@ Result writeWantWithCma(long pages) {
             : Result.failed("pool_want_with_cma", t.error);
     }
 
-    /**
-     * Live {@code pool_want} write only (no settings.prop persist), so a value
-     * written here is undone by a reboot. The probe uses it to empty the pool
-     * into the reservoir and to put it back afterwards.
-     */
-    @NonNull
-    Result writeWant(long pages) {
-        var t = writeKnob("pool_want", Long.toString(pages));
-        return t.ok() ? Result.ok("pool_want") : Result.failed("pool_want", t.error);
-    }
-
-    /** MemTotal from /proc/meminfo in KiB, or -1 if unreadable. */
-    long memTotalKb() {
-        return meminfoKb("MemTotal");
-    }
-
-    /**
-     * The module's RAM-derived cap on the targets (pages), read-only:
-     * {@code min(ram - min(ram/2, 6G), 24G)}. Both {@code pool_want} and
-     * {@code pool_want_with_cma} are clamped to it, so it bounds how much
-     * reservoir can sit on top of a given pool. -1 when unreadable (pre-v7).
-     */
-    long poolSizeMax() {
-        try {
-            var v = shellReadFile(pathJoin(SYSFS_PARAMS, "pool_size_max")).trim();
-            if (!v.isEmpty()) return Long.parseLong(v);
-        } catch (Exception ignored) {
-        }
-        return -1;
-    }
-
-    private long meminfoKb(@NonNull String key) {
-        var prefix = fmt("%s:", key);
-        for (var line : safeRead("/proc/meminfo").split("\n")) {
-            if (!line.startsWith(prefix)) continue;
-            var digits = NON_DIGITS.matcher(line).replaceAll("");
-            if (!digits.isEmpty()) try {
-                return Long.parseLong(digits);
-            } catch (NumberFormatException ignored) {
-            }
-        }
-        return -1;
-    }
-
-    /**
-     * Run the module-shipped {@code balloon} pressure tool (see tools/balloon.c):
-     * it anon-balloons until MemAvailable drops under {@code floorMb} and prints
-     * {@code cma_before_kb / cma_after_kb / cma_diff_kb / held_mb / stop_reason}.
-     * Supervised with {@code timeout} (falling back to unsupervised where the
-     * command is missing) because on a kernel that does NOT let anon consume CMA
-     * the floor can fire very late or never. Returns the parsed key=value output,
-     * or {@code null} when the tool is absent, was killed, or printed nothing
-     * usable - the caller treats that as an unreadable verdict.
-     */
-    @Nullable
-    Map<String, String> runBalloon(long floorMb, long timeoutSec) {
-        var bin = pathJoin(MAGISK_BASE, "balloon");
-        if (!existsSticky(bin)) return null;
-        var r = run("chmod 755 %s && timeout %d %s %d",
-            escapedString(bin), timeoutSec, escapedString(bin), floorMb);
-        if (r.getCode() == 127)   // no timeout applet on this ROM
-            r = run("%s %d", escapedString(bin), floorMb);
-        if (!r.isSuccess()) return null;
-        var map = parseProp(r.getOutString());
-        return map.containsKey("cma_diff_kb") ? map : null;
-    }
-
     /* ================================================================== */
     /*  Ladder plumbing (internal)                                        */
     /* ================================================================== */
@@ -816,10 +823,10 @@ private static Try<Only, Void> writeSettings(long pages) {
     /**
      * Read-modify-write settings.prop: apply {@code changes} (a null value
      * <b>removes</b> that key) and keep every other key (the file also carries
-     * app-owned CMA state - {@code pool_want_with_cma}, {@code cma_probe_result}
+     * app-owned CMA state - {@code pool_want_with_cma}, {@code cma_movable_lever}
      * - that a blind rewrite would wipe). The boot script {@code source}s the
      * file, so lines stay plain {@code key=value}. Locked so concurrent writers
-     * (the probe worker vs a pool-size save) can't interleave their read/write
+     * (a lever/CMA save vs a pool-size save) can't interleave their read/write
      * pairs and drop each other's keys.
      */
     private static Try<Only, Void> updateSettings(@NonNull Map<String, String> changes) {
@@ -830,7 +837,7 @@ private static Try<Only, Void> updateSettings(@NonNull Map<String, String> chang
             } catch (Exception e) {
                 // A missing file legitimately starts empty; an EXISTING file that
                 // failed to read must abort - rewriting from an empty map would
-                // silently drop every other persisted key (probe verdict, CMA
+                // silently drop every other persisted key (lever choice, CMA
                 // targets) on a transient root hiccup.
                 if (existsSticky(SETTINGS_PROP))
                     return Try.fail(Only.DEFAULT, "settings.prop: read failed");
diff --git a/app/src/main/res/layout/activity_hugepage.xml b/app/src/main/res/layout/activity_hugepage.xml
index c8191a597..98a6e5c87 100644
--- a/app/src/main/res/layout/activity_hugepage.xml
+++ b/app/src/main/res/layout/activity_hugepage.xml
@@ -113,18 +113,18 @@
                 </LinearLayout>
             </com.google.android.material.card.MaterialCardView>
 
-            <!-- Pool size (left) + CMA pool size (right, only while CMA is on).
-                 Both are GiB-only inputs (ti_unit): no MB/KB/B stops. -->
+            <!-- Pool size and (below) the with-CMA total, stacked so neither is
+                 cramped. Both are GiB-only inputs (ti_unit): no MB/KB/B stops.
+                 The with-CMA row is enabled only while the reservoir is on. -->
             <LinearLayout
                 android:layout_width="match_parent"
                 android:layout_height="wrap_content"
-                android:orientation="horizontal">
+                android:orientation="vertical">
 
                 <cn.classfun.droidvm.ui.widgets.row.TextInputRowWidget
                     android:id="@+id/input_pool_size"
-                    android:layout_width="0dp"
+                    android:layout_width="match_parent"
                     android:layout_height="wrap_content"
-                    android:layout_weight="1"
                     android:hint="@string/hugepage_pool_size"
                     android:icon="@drawable/ic_resize"
                     android:inputType="number"
@@ -136,18 +136,16 @@
 
                 <cn.classfun.droidvm.ui.widgets.row.TextInputRowWidget
                     android:id="@+id/input_cma_size"
-                    android:layout_width="0dp"
+                    android:layout_width="match_parent"
                     android:layout_height="wrap_content"
-                    android:layout_weight="1"
                     android:hint="@string/hugepage_cma_pool_size"
+                    android:icon="@drawable/ic_resize"
                     android:inputType="number"
-                    android:visibility="gone"
                     app:ti_max="24GiB"
                     app:ti_min="0MiB"
                     app:ti_mode="size"
                     app:ti_precision="2MiB"
-                    app:ti_unit="GiB"
-                    tools:visibility="visible" />
+                    app:ti_unit="GiB" />
             </LinearLayout>
 
             <LinearLayout
diff --git a/app/src/main/res/values-zh-rCN/strings.xml b/app/src/main/res/values-zh-rCN/strings.xml
index 5019615d3..3d1956e01 100644
--- a/app/src/main/res/values-zh-rCN/strings.xml
+++ b/app/src/main/res/values-zh-rCN/strings.xml
@@ -1013,38 +1013,16 @@
     <string name="hugepage_cma_not_supported">模块未加载或不支持 CMA(需 v10+)</string>
     <string name="hugepage_cma_unavailable_title">CMA 不可用</string>
     <string name="hugepage_cma_unavailable_boot">本次开机模块已停用 CMA 功能(内核预检/符号解析/首块验证未通过)。</string>
-    <string name="hugepage_cma_unavailable_denied">先前探测曾判定 CMA 不可用,该记录会让模块整个开机期间关闭 CMA。记录已清除,请重启后再次开启 CMA 以重新探测。</string>
-    <string name="hugepage_cma_unavailable_write">写入 pool_want_with_cma 被拒:%1$s</string>
-    <string name="hugepage_cma_unavailable_reservoir">无法组出任何 CMA 料场(headroom floor 拒绝,或区块翻转失败)。</string>
-    <string name="hugepage_cma_probe_needed_title">需要先进行 CMA 探测</string>
-    <string name="hugepage_cma_probe_needed_msg">首次使用前需探测该厂商内核是否允许 App 使用 CMA 内存。\n\n探测会暂时清空池、把它整块转成 CMA 料场(目标约 %1$s),用 balloon 工具施加内存压力,再按 CMA 消耗量判读。结束后会还原池,进行前所有 VM 需先关闭。\n\n探测通过后,池大小会设为 %2$s,其余保留为料场借给 App,直到 VM 需要时才取回。</string>
-    <string name="hugepage_cma_probe_start">开始探测</string>
-    <string name="hugepage_cma_probe_anyway">直接进行探测</string>
-    <string name="hugepage_cma_probe_continue">完成探测</string>
-    <string name="hugepage_cma_small_reservoir_title">料场会偏小</string>
-    <string name="hugepage_cma_small_reservoir_msg">该模块总共只能监护 %1$s,少于探测想要的 %2$s,判读结果可能不准确。仍要探测吗?</string>
-    <string name="hugepage_cma_probe_pending_title">尚未完成的 CMA 探测</string>
-    <string name="hugepage_cma_probe_pending_msg">已建立 CMA 料场但还没判读。要现在执行 balloon 测量,确认 App 是否真的用得到吗?</string>
-    <string name="hugepage_cma_building">建立 CMA 料场中\u2026 %1$s / %2$s</string>
-    <string name="hugepage_cma_reservoir_short_title">料场未达目标</string>
-    <string name="hugepage_cma_reservoir_short_msg">只组出 %1$s / %2$s,运行期的 sweep 撞到碎片墙。刚开机时内存没有碎片,同一个流程就会成功;可以重启后再次开启 CMA。或者直接用已组出的 %1$s 进行判读(可能较不准确)。</string>
-    <string name="hugepage_cma_probe_denied_title">CMA 已标记为不可用</string>
-    <string name="hugepage_cma_probe_denied_msg">先前探测结果:该设备的 App 无法使用 CMA,启用只会浪费保留池。要重新探测吗?</string>
-    <string name="hugepage_cma_probe_rerun">重新探测</string>
-    <string name="hugepage_cma_vms_running">请先关闭所有运行中的 VM 再探测</string>
-    <string name="hugepage_cma_save_reboot">我重启后再探测</string>
-    <string name="hugepage_cma_reboot_hint">未变更任何设置。请重启后再次开启 CMA:刚开机时内存没有碎片,料场就组得起来。</string>
-    <string name="hugepage_cma_probe_running_balloon">正在施加内存压力(balloon)\u2026 可能需要数分钟</string>
-    <string name="hugepage_cma_probe_ok">探测通过:App 可使用 CMA。已启用,池大小设为 %1$s,其余作为料场借出。</string>
-    <string name="hugepage_cma_probe_denied_result">探测结果:该设备的 App 无法使用 CMA,启用只会浪费保留池。仍要启用吗?您的选择会被记录,之后不再探测。</string>
-    <string name="hugepage_cma_probe_abnormal_title">判读结果异常</string>
-    <string name="hugepage_cma_probe_abnormal_msg">压力共消耗 CMA %1$s / 池 %2$s(balloon 持有 %3$s,停止原因:%4$s),无法明确判读。仍要启用 CMA 吗?</string>
-    <string name="hugepage_cma_probe_enable">启用</string>
-    <string name="hugepage_cma_probe_keep_off">保持关闭</string>
-    <string name="hugepage_cma_probe_cancelled">已取消探测</string>
-    <string name="hugepage_cma_probe_failed_generic">CMA 探测无法运行</string>
+    <string name="hugepage_cma_warn_title">如何启用 CMA</string>
+    <string name="hugepage_cma_warn_msg">该厂商内核默认不让 App 使用 CMA 保留区,请选择启用方式:\n\n• 模块 CMA:只建立保留区,不改动内核,没有崩溃风险。只有在该内核本来就允许时 App 才用得到;无论如何保留区仍能服务 VM。\n\n• 移除 CMA 限制:额外解除内核限制,让任何 App 都能使用保留区,但在部分设备上这可能导致手机崩溃并重启。会先应用但「不」保存:成功的话可再选择保存让每次开机都应用,崩溃的话直接重启即可,因为没有保存。</string>
+    <string name="hugepage_cma_remove_restriction">移除 CMA 限制</string>
+    <string name="hugepage_cma_module_cma">模块 CMA</string>
+    <string name="hugepage_cma_lever_failed">移除 CMA 限制失败:该内核没有可用的开关或挂钩。</string>
+    <string name="hugepage_cma_save_title">每次开机都应用?</string>
+    <string name="hugepage_cma_save_msg">目前运行正常。要保存让它每次开机都自动应用吗?\n\n若不保存,它只会维持到下次重启为止 —— 作为安全网,以防它之后才导致设备不稳。</string>
+    <string name="hugepage_cma_save_yes">保存</string>
+    <string name="hugepage_cma_save_no">仅此一次</string>
     <string name="hugepage_cma_enabled">CMA 已启用</string>
-    <string name="hugepage_cma_enabled_pool">CMA 已启用,池大小设为 %1$s,其余作为料场借出。</string>
     <string name="hugepage_cma_disabled">CMA 已停用</string>
     <string name="hugepage_cma_toggle_failed">写入 CMA 目标失败</string>
     <string name="hugepage_bar_cma">CMA</string>
diff --git a/app/src/main/res/values-zh-rTW/strings.xml b/app/src/main/res/values-zh-rTW/strings.xml
index 5300dd504..288034e21 100644
--- a/app/src/main/res/values-zh-rTW/strings.xml
+++ b/app/src/main/res/values-zh-rTW/strings.xml
@@ -1001,38 +1001,16 @@
     <string name="hugepage_cma_not_supported">模組未載入或不支援 CMA(需 v10+)</string>
     <string name="hugepage_cma_unavailable_title">CMA 不可用</string>
     <string name="hugepage_cma_unavailable_boot">本次開機模組已停用 CMA 功能(kernel 預檢/符號解析/首塊驗證未通過)。</string>
-    <string name="hugepage_cma_unavailable_denied">先前探測曾判定 CMA 不可用,該紀錄會讓模組整個開機期間關閉 CMA。紀錄已清除,請重新開機後再次開啟 CMA 以重新探測。</string>
-    <string name="hugepage_cma_unavailable_write">寫入 pool_want_with_cma 被拒:%1$s</string>
-    <string name="hugepage_cma_unavailable_reservoir">無法組出任何 CMA 料場(headroom floor 拒絕,或區塊翻轉失敗)。</string>
-    <string name="hugepage_cma_probe_needed_title">需要先進行 CMA 探測</string>
-    <string name="hugepage_cma_probe_needed_msg">首次使用前需探測此廠商核心是否允許 App 使用 CMA 記憶體。\n\n探測會暫時清空池、把它整塊轉成 CMA 料場(目標約 %1$s),用 balloon 工具施加記憶體壓力,再依 CMA 消耗量判讀。結束後會還原池,進行前所有 VM 需先關閉。\n\n探測通過後,池大小會設為 %2$s,其餘保留為料場借給 App,直到 VM 需要時才取回。</string>
-    <string name="hugepage_cma_probe_start">開始探測</string>
-    <string name="hugepage_cma_probe_anyway">直接進行探測</string>
-    <string name="hugepage_cma_probe_continue">完成探測</string>
-    <string name="hugepage_cma_small_reservoir_title">料場會偏小</string>
-    <string name="hugepage_cma_small_reservoir_msg">此模組總共只能監護 %1$s,少於探測想要的 %2$s,判讀結果可能不準確。仍要探測嗎?</string>
-    <string name="hugepage_cma_probe_pending_title">尚未完成的 CMA 探測</string>
-    <string name="hugepage_cma_probe_pending_msg">已建立 CMA 料場但還沒判讀。要現在執行 balloon 量測,確認 App 是否真的用得到嗎?</string>
-    <string name="hugepage_cma_building">建立 CMA 料場中\u2026 %1$s / %2$s</string>
-    <string name="hugepage_cma_reservoir_short_title">料場未達目標</string>
-    <string name="hugepage_cma_reservoir_short_msg">只組出 %1$s / %2$s,執行期的 sweep 撞到碎片牆。剛開機時記憶體沒有碎片,同一個流程就會成功;可以重新開機後再次開啟 CMA。或者直接用已組出的 %1$s 進行判讀(可能較不準確)。</string>
-    <string name="hugepage_cma_probe_denied_title">CMA 已標記為不可用</string>
-    <string name="hugepage_cma_probe_denied_msg">先前探測結果:此裝置的 App 無法使用 CMA,啟用只會浪費保留池。要重新探測嗎?</string>
-    <string name="hugepage_cma_probe_rerun">重新探測</string>
-    <string name="hugepage_cma_vms_running">請先關閉所有執行中的 VM 再探測</string>
-    <string name="hugepage_cma_save_reboot">我重開機後再探測</string>
-    <string name="hugepage_cma_reboot_hint">未變更任何設定。請重新開機後再次開啟 CMA:剛開機時記憶體沒有碎片,料場就組得起來。</string>
-    <string name="hugepage_cma_probe_running_balloon">正在施加記憶體壓力(balloon)\u2026 可能需要數分鐘</string>
-    <string name="hugepage_cma_probe_ok">探測通過:App 可使用 CMA。已啟用,池大小設為 %1$s,其餘作為料場借出。</string>
-    <string name="hugepage_cma_probe_denied_result">探測結果:此裝置的 App 無法使用 CMA,啟用只會浪費保留池。仍要啟用嗎?您的選擇會被記錄,之後不再探測。</string>
-    <string name="hugepage_cma_probe_abnormal_title">判讀結果異常</string>
-    <string name="hugepage_cma_probe_abnormal_msg">壓力共消耗 CMA %1$s / 料場 %2$s(balloon 持有 %3$s,停止原因:%4$s),無法明確判讀。仍要啟用 CMA 嗎?</string>
-    <string name="hugepage_cma_probe_enable">啟用</string>
-    <string name="hugepage_cma_probe_keep_off">維持關閉</string>
-    <string name="hugepage_cma_probe_cancelled">已取消探測</string>
-    <string name="hugepage_cma_probe_failed_generic">CMA 探測無法執行</string>
+    <string name="hugepage_cma_warn_title">如何啟用 CMA</string>
+    <string name="hugepage_cma_warn_msg">此廠商核心預設不讓 App 使用 CMA 保留區,請選擇啟用方式:\n\n• 模組 CMA:只建立保留區,不改動核心,沒有崩潰風險。只有在此核心本來就允許時 App 才用得到;無論如何保留區仍能服務 VM。\n\n• 移除 CMA 限制:額外解除核心限制,讓任何 App 都能使用保留區,但在部分裝置上這可能造成手機崩潰並重新開機。會先套用但「不」存檔:成功的話可再選擇存檔讓每次開機都套用,崩潰的話直接重新開機即可,因為沒有存檔。</string>
+    <string name="hugepage_cma_remove_restriction">移除 CMA 限制</string>
+    <string name="hugepage_cma_module_cma">模組 CMA</string>
+    <string name="hugepage_cma_lever_failed">移除 CMA 限制失敗:此核心沒有可用的開關或掛鉤。</string>
+    <string name="hugepage_cma_save_title">每次開機都套用?</string>
+    <string name="hugepage_cma_save_msg">目前運作正常。要存檔讓它每次開機都自動套用嗎?\n\n若不存檔,它只會維持到下次重新開機為止 —— 作為安全網,以防它之後才造成裝置不穩。</string>
+    <string name="hugepage_cma_save_yes">存檔</string>
+    <string name="hugepage_cma_save_no">僅此一次</string>
     <string name="hugepage_cma_enabled">CMA 已啟用</string>
-    <string name="hugepage_cma_enabled_pool">CMA 已啟用,池大小設為 %1$s,其餘作為料場借出。</string>
     <string name="hugepage_cma_disabled">CMA 已停用</string>
     <string name="hugepage_cma_toggle_failed">寫入 CMA 目標失敗</string>
     <string name="hugepage_bar_cma">CMA</string>
diff --git a/app/src/main/res/values/strings.xml b/app/src/main/res/values/strings.xml
index 59d01665c..165aa357a 100644
--- a/app/src/main/res/values/strings.xml
+++ b/app/src/main/res/values/strings.xml
@@ -1038,38 +1038,16 @@
     <string name="hugepage_cma_not_supported">Module not loaded or has no CMA support (v10+)</string>
     <string name="hugepage_cma_unavailable_title">CMA unavailable</string>
     <string name="hugepage_cma_unavailable_boot">The module disabled its CMA side this boot (kernel preflight / symbol resolution / first-block verification failed).</string>
-    <string name="hugepage_cma_unavailable_denied">A previous probe recorded CMA as unusable, which keeps the module\'s CMA side off for the whole boot. That record has been cleared - reboot, then enable CMA again to re-probe.</string>
-    <string name="hugepage_cma_unavailable_write">Writing pool_want_with_cma was rejected: %1$s</string>
-    <string name="hugepage_cma_unavailable_reservoir">No CMA reservoir could be assembled (the headroom floor refused it, or block flipping failed).</string>
-    <string name="hugepage_cma_probe_needed_title">CMA probe required</string>
-    <string name="hugepage_cma_probe_needed_msg">Before first use, a probe must verify this vendor kernel lets apps allocate from CMA.\n\nIt temporarily empties the pool into a CMA reservoir (aiming for %1$s), applies memory pressure with the balloon tool, then judges from how much CMA got consumed. The pool is restored afterwards, and all VMs must be stopped first.\n\nOn success the pool is set to %2$s and the rest is kept as reservoir, lent to apps until a VM needs it.</string>
-    <string name="hugepage_cma_probe_start">Start probe</string>
-    <string name="hugepage_cma_probe_anyway">Probe anyway</string>
-    <string name="hugepage_cma_probe_continue">Finish probe</string>
-    <string name="hugepage_cma_small_reservoir_title">Reservoir will be small</string>
-    <string name="hugepage_cma_small_reservoir_msg">This module can only guard %1$s in total, less than the %2$s the probe wants to measure against, so the verdict may be unreliable. Probe anyway?</string>
-    <string name="hugepage_cma_probe_pending_title">Unfinished CMA probe</string>
-    <string name="hugepage_cma_probe_pending_msg">A CMA reservoir was set up but never measured. Run the balloon measurement now to decide whether apps can really use it?</string>
-    <string name="hugepage_cma_building">Building the CMA reservoir\u2026 %1$s / %2$s</string>
-    <string name="hugepage_cma_reservoir_short_title">Reservoir came up short</string>
-    <string name="hugepage_cma_reservoir_short_msg">Assembled %1$s of %2$s - the runtime sweep hit the fragmentation wall. On a fresh boot memory is unfragmented, so the same run succeeds; reboot and turn CMA on again. Or measure right now against the %1$s that did assemble (the verdict may be less reliable).</string>
-    <string name="hugepage_cma_probe_denied_title">CMA marked unusable</string>
-    <string name="hugepage_cma_probe_denied_msg">A previous probe found apps cannot use CMA on this device, so enabling it would only waste the reserve. Run the probe again?</string>
-    <string name="hugepage_cma_probe_rerun">Re-probe</string>
-    <string name="hugepage_cma_vms_running">Stop all running VMs before probing</string>
-    <string name="hugepage_cma_save_reboot">I\'ll reboot, then probe</string>
-    <string name="hugepage_cma_reboot_hint">Nothing was changed. Reboot, then turn CMA on again - on a fresh boot memory is unfragmented and the reservoir assembles.</string>
-    <string name="hugepage_cma_probe_running_balloon">Applying memory pressure (balloon)\u2026 this can take several minutes</string>
-    <string name="hugepage_cma_probe_ok">Probe passed: apps can use CMA. CMA enabled and the pool set to %1$s - the rest is lent out as reservoir.</string>
-    <string name="hugepage_cma_probe_denied_result">Probe result: apps could not use CMA on this device, so enabling it would only waste the reserve. Enable anyway? Your choice is recorded and the probe will not run again.</string>
-    <string name="hugepage_cma_probe_abnormal_title">Probe result unreadable</string>
-    <string name="hugepage_cma_probe_abnormal_msg">Pressure consumed %1$s of the %2$s reservoir (balloon held %3$s, stopped: %4$s). This matches neither verdict. Enable CMA anyway?</string>
-    <string name="hugepage_cma_probe_enable">Enable</string>
-    <string name="hugepage_cma_probe_keep_off">Keep off</string>
-    <string name="hugepage_cma_probe_cancelled">Probe cancelled</string>
-    <string name="hugepage_cma_probe_failed_generic">CMA probe could not run</string>
+    <string name="hugepage_cma_warn_title">How to enable CMA</string>
+    <string name="hugepage_cma_warn_msg">This vendor kernel does not let apps use the CMA reserve on its own, so choose how to enable it:\n\n- Module CMA: builds the reserve without changing the kernel, so there is no crash risk. Apps can use it only where the vendor kernel already allows it; either way the reserve still serves VMs.\n\n- Remove CMA Restriction: also lifts the kernel restriction so any app can use the reserve, but on some devices this can crash the phone and force a reboot. It is applied WITHOUT saving first; if it works you can then save it for every boot, and if it crashes just reboot - nothing was saved.</string>
+    <string name="hugepage_cma_remove_restriction">Remove CMA Restriction</string>
+    <string name="hugepage_cma_module_cma">Module CMA</string>
+    <string name="hugepage_cma_lever_failed">Remove CMA Restriction failed: this kernel has no usable switch or hook.</string>
+    <string name="hugepage_cma_save_title">Apply on every boot?</string>
+    <string name="hugepage_cma_save_msg">It is working now. Save this so it comes back automatically at every boot?\n\nIf you don\'t save, it stays active only until the next reboot - a safety net in case it destabilises the device.</string>
+    <string name="hugepage_cma_save_yes">Save</string>
+    <string name="hugepage_cma_save_no">Just this time</string>
     <string name="hugepage_cma_enabled">CMA enabled</string>
-    <string name="hugepage_cma_enabled_pool">CMA enabled and the pool set to %1$s - the rest is lent out as reservoir.</string>
     <string name="hugepage_cma_disabled">CMA disabled</string>
     <string name="hugepage_cma_toggle_failed">Failed to write the CMA target</string>
     <string name="hugepage_bar_cma">CMA</string>

From 403c69247ebd109b1bf4cd019116d0975ab515f2 Mon Sep 17 00:00:00 2001
From: BigfootACA <bigfoot@classfun.cn>
Date: Fri, 10 Jul 2026 15:57:49 +0800
Subject: [PATCH 121/182] libcompat: move missing
 setTransactionCodeToFunctionNameMap to a15

Signed-off-by: BigfootACA <bigfoot@classfun.cn>
---
 app/src/main/cpp/compat/a14.cpp | 6 ------
 app/src/main/cpp/compat/a15.cpp | 6 ++++++
 2 files changed, 6 insertions(+), 6 deletions(-)

diff --git a/app/src/main/cpp/compat/a14.cpp b/app/src/main/cpp/compat/a14.cpp
index 84a8775b3..5669679ad 100644
--- a/app/src/main/cpp/compat/a14.cpp
+++ b/app/src/main/cpp/compat/a14.cpp
@@ -1,5 +1,4 @@
 #include "a15.cpp"
-#include <cstdint>
 #include <cstdarg>
 #include <cstdio>
 #include <cstdlib>
@@ -11,11 +10,6 @@
 
 static std::ofstream ofs;
 
-__attribute__((weak))
-extern "C" void AIBinder_Class_setTransactionCodeToFunctionNameMap(void*, const char* const*, size_t) {
-
-}
-
 __attribute__((weak))
 void __libcpp_verbose_abort(char const* format, ...) __asm("_ZNSt3__122__libcpp_verbose_abortEPKcz");
 
diff --git a/app/src/main/cpp/compat/a15.cpp b/app/src/main/cpp/compat/a15.cpp
index b7c6b1aac..eaf54a51b 100644
--- a/app/src/main/cpp/compat/a15.cpp
+++ b/app/src/main/cpp/compat/a15.cpp
@@ -1 +1,7 @@
 #include "a16.cpp"
+#include <cstdint>
+
+__attribute__((weak))
+extern "C" void AIBinder_Class_setTransactionCodeToFunctionNameMap(void*, const char* const*, size_t) {
+
+}

From 6e6bf51e3dde6c1ffe80eabc89b8d674d3237365 Mon Sep 17 00:00:00 2001
From: XiaoYeZi <qaz6750@outlook.com>
Date: Wed, 12 Aug 2026 01:28:12 +0800
Subject: [PATCH 122/182] qemu: enable multithreaded TCG translation

---
 .../classfun/droidvm/daemon/vm/backend/QemuBackendInstance.java | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/QemuBackendInstance.java b/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/QemuBackendInstance.java
index 8cff0bcd5..47a4fc447 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/QemuBackendInstance.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/QemuBackendInstance.java
@@ -147,7 +147,7 @@ private List<String> buildCommand() {
                 defProtectedMode = ProtectedVM.PROTECTED_WITHOUT_FIRMWARE;
                 break;
             case SOFT:
-                args.add("tcg");
+                args.add("tcg,thread=multi,tb-size=128");
                 break;
             default:throw new IllegalArgumentException(fmt("Unsupported hypervisor: %s", hypervisor));
         }

From 699b579287d7005b60f0967f7a07e0ba5ac3905c Mon Sep 17 00:00:00 2001
From: XiaoYeZi <qaz6750@outlook.com>
Date: Wed, 12 Aug 2026 01:29:15 +0800
Subject: [PATCH 123/182] qemu: preserve configured vCPU count with SMT

---
 .../droidvm/daemon/vm/backend/QemuBackendInstance.java      | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/QemuBackendInstance.java b/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/QemuBackendInstance.java
index 47a4fc447..5580c7461 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/QemuBackendInstance.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/QemuBackendInstance.java
@@ -171,10 +171,10 @@ private List<String> buildCommand() {
         args.add(cpu);
         long cpuCount = Math.max(item.optLong("cpu_count", 1), 1);
         boolean smt = item.optBoolean("smt", true);
-        long threads = smt ? 2 : 1;
-        long cores = Math.max(cpuCount / threads, 1);
+        long threads = smt && cpuCount % 2 == 0 ? 2 : 1;
+        long cores = cpuCount / threads;
         args.add("-smp");
-        args.add(fmt("%d,sockets=1,cores=%d,threads=%d", cores * threads, cores, threads));
+        args.add(fmt("%d,sockets=1,cores=%d,threads=%d", cpuCount, cores, threads));
         long memMb = Math.max(item.optLong("memory_mb", 512), 64);
         args.add("-m");
         args.add(fmt("%dM", memMb));

From 43fcc7a79edb31c0ef6f2457e7d788590ce58f24 Mon Sep 17 00:00:00 2001
From: lateautumn233 <lateautumn233@foxmail.com>
Date: Wed, 15 Jul 2026 12:24:10 +0800
Subject: [PATCH 124/182] feat: add multi-volume split for vm package
 export/import

- split compressed stream into fixed-size .001/.002 sub-volumes with a metadata master holding header + manifest + volume index
- verify sub-volume size and CRC32 on import and rebuild the logical byte stream
- add volume_size input to export UI, default off (single file)
- clean up partial and stale sub-volumes on export failure/re-run
- reset volume status fields between operations to avoid stale UI
---
 .../droidvm/daemon/ipc/vm/ExportHandler.java  |   7 +
 .../droidvm/daemon/vm/pkg/VMExportTask.java   |  87 +++++++
 .../droidvm/daemon/vm/pkg/VMExportUtils.java  |  11 +
 .../droidvm/daemon/vm/pkg/VMImportTask.java   |  63 +++--
 .../droidvm/lib/archive/ZeroInputStream.java  |  31 +++
 .../droidvm/lib/pkg/PackageConstants.java     |  11 +
 .../droidvm/lib/pkg/PackageHeader.java        |   4 +
 .../droidvm/lib/pkg/PackageInput.java         |  34 +++
 .../classfun/droidvm/lib/pkg/VolumeIndex.java |  94 ++++++++
 .../classfun/droidvm/lib/pkg/VolumeSet.java   | 220 ++++++++++++++++++
 .../lib/pkg/VolumeSplitOutputStream.java      | 134 +++++++++++
 .../droidvm/lib/utils/BinaryUtils.java        |  10 +
 .../vm/pkg/exports/VMPkgExportActivity.java   |  33 ++-
 .../vm/pkg/imports/VMPkgImportActivity.java   |  46 +++-
 .../main/res/layout/activity_vmpkg_export.xml |  21 ++
 app/src/main/res/values-zh-rCN/strings.xml    |   5 +
 app/src/main/res/values-zh-rTW/strings.xml    |   5 +
 app/src/main/res/values/strings.xml           |   5 +
 18 files changed, 797 insertions(+), 24 deletions(-)
 create mode 100644 app/src/main/java/cn/classfun/droidvm/lib/archive/ZeroInputStream.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/lib/pkg/VolumeIndex.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/lib/pkg/VolumeSet.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/lib/pkg/VolumeSplitOutputStream.java

diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/ipc/vm/ExportHandler.java b/app/src/main/java/cn/classfun/droidvm/daemon/ipc/vm/ExportHandler.java
index 28cf88ea9..dab0c1323 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/ipc/vm/ExportHandler.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/ipc/vm/ExportHandler.java
@@ -8,6 +8,7 @@
 import cn.classfun.droidvm.daemon.server.RequestException;
 import cn.classfun.droidvm.daemon.server.RequestHandler;
 import cn.classfun.droidvm.daemon.vm.pkg.VMExportTask;
+import cn.classfun.droidvm.lib.pkg.PackageConstants;
 
 @AutoService(RequestHandler.class)
 public final class ExportHandler extends RequestHandler {
@@ -25,6 +26,12 @@ public void handle(@NonNull ClientRequest request) throws Exception {
             throw new RequestException("missing vm_id");
         if (destPath.isEmpty())
             throw new RequestException("missing dest_path");
+        var volumeSize = params.optLong("volume_size", 0);
+        if (volumeSize > 0 && volumeSize < PackageConstants.MIN_VOLUME_SIZE)
+            throw new RequestException(String.format(
+                "volume_size too small: %d (min %d)",
+                volumeSize, PackageConstants.MIN_VOLUME_SIZE
+            ));
         var store = request.getContext().getExportTaskStore();
         var server = request.getClient().getServer();
         var task = new VMExportTask(server, params);
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/vm/pkg/VMExportTask.java b/app/src/main/java/cn/classfun/droidvm/daemon/vm/pkg/VMExportTask.java
index b40674956..8a8520c39 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/vm/pkg/VMExportTask.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/vm/pkg/VMExportTask.java
@@ -36,6 +36,8 @@
 import cn.classfun.droidvm.lib.pkg.PackageConstants;
 import cn.classfun.droidvm.lib.pkg.PackageManifest;
 import cn.classfun.droidvm.lib.pkg.Phase;
+import cn.classfun.droidvm.lib.pkg.VolumeIndex;
+import cn.classfun.droidvm.lib.pkg.VolumeSplitOutputStream;
 import cn.classfun.droidvm.lib.store.base.DataItem;
 
 public final class VMExportTask {
@@ -47,6 +49,9 @@ public final class VMExportTask {
     private final UUID sourceVMId;
     private final int totalItems;
     private final String destPath;
+    private final long volumeSize;
+    private VolumeSplitOutputStream vout = null;
+    private int finalVolumeCount = 0;
 
     public VMExportTask(
         @NonNull Server server,
@@ -56,6 +61,7 @@ public VMExportTask(
         destPath = request.optString("dest_path");
         if (!destPath.startsWith("/"))
             throw new IllegalArgumentException("missing dest_path");
+        volumeSize = request.optLong("volume_size", 0);
         var vmId = UUID.fromString(request.optString("vm_id"));
         sourceVMId = vmId;
         var vm = server.getContext().getVMs().findById(vmId);
@@ -91,6 +97,10 @@ public void startAsync() {
             try {
                 startWrite();
                 data.set("done", totalItems);
+                if (finalVolumeCount > 0) {
+                    data.set("volume_index", finalVolumeCount);
+                    data.set("volume_total", finalVolumeCount);
+                }
                 emit(data, Phase.DONE);
             } catch (Exception e) {
                 Log.w(TAG, fmt("Export task %s failed", taskId), e);
@@ -105,6 +115,11 @@ public void startAsync() {
     }
 
     private void startWrite() throws Exception {
+        if (volumeSize > 0) startWriteSplit();
+        else startWriteSingle();
+    }
+
+    private void startWriteSingle() throws Exception {
         var outFile = new File(destPath);
         var manifestBytes = manifest.toJson().toString(4).getBytes(UTF_8);
         if (manifestBytes.length > 0xffff)
@@ -132,6 +147,75 @@ private void startWrite() throws Exception {
         }
     }
 
+    // Multi-volume path: (1) slice the compressed data stream into <dest>.001,
+    // .002, ... sub-volumes, then (2) write the metadata master <dest> holding
+    // header + manifest + volume index (no data). The picked SAF file is reused
+    // as the master, so it is not deleted.
+    private void startWriteSplit() throws Exception {
+        var manifestBytes = manifest.toJson().toString(4).getBytes(UTF_8);
+        if (manifestBytes.length > 0xffff)
+            throw new IOException(fmt("manifest too large: %d bytes", manifestBytes.length));
+        var subOut = new VolumeSplitOutputStream(destPath, volumeSize);
+        vout = subOut;
+        try {
+            try (
+                var compressed = wrapCompressionOutput(subOut, manifest.compression);
+                var tar = new TarWriter(compressed)
+            ) {
+                tar.entry(PackageConstants.MANIFEST_NAME, manifestBytes);
+                pack(tar);
+            }
+            subOut.finish();
+        } catch (Exception e) {
+            subOut.abort();
+            deleteQuietly(subOut.files());
+            throw e;
+        } finally {
+            vout = null;
+        }
+        long dataSize = subOut.dataSize();
+        finalVolumeCount = subOut.volumeCount();
+        writeMaster(manifestBytes, dataSize, subOut);
+        // Remove any higher-numbered sub-volumes left by a previous, larger
+        // export to the same base path, so the on-disk set matches the index.
+        for (int i = finalVolumeCount + 1; i <= PackageConstants.VOLUME_MAX_COUNT; i++) {
+            var stale = new File(VolumeSplitOutputStream.volumeName(destPath, i));
+            if (!stale.exists()) break;
+            //noinspection ResultOfMethodCallIgnored
+            stale.delete();
+        }
+    }
+
+    private static void deleteQuietly(@NonNull java.util.List<File> files) {
+        for (var f : files) {
+            //noinspection ResultOfMethodCallIgnored
+            f.delete();
+        }
+    }
+
+    private void writeMaster(
+        @NonNull byte[] manifestBytes,
+        long dataSize,
+        @NonNull VolumeSplitOutputStream subOut
+    ) throws Exception {
+        var index = new VolumeIndex();
+        index.dataSize = dataSize;
+        index.volumes.addAll(subOut.entries());
+        var indexBytes = index.toJson().toString().getBytes(UTF_8);
+        try (var raf = new RandomAccessFile(new File(destPath), "rw")) {
+            raf.setLength(0);
+            raf.write(new byte[PackageConstants.HEADER_SIZE]);
+            writeZero(raf, alignUp(raf.getFilePointer()) - raf.getFilePointer());
+            raf.write(manifestBytes);
+            writeZero(raf, alignUpStrict(raf.getFilePointer()) - raf.getFilePointer());
+            raf.write(indexBytes);
+            raf.seek(0);
+            raf.write(buildHeader(
+                manifest, manifestBytes.length, dataSize, finalVolumeCount
+            ));
+        }
+    }
+
     private void pack(@NonNull TarWriter tar) throws Exception {
         int done;
         var data = DataItem.newObject();
@@ -209,6 +293,9 @@ private void emit(@NonNull DataItem item, @NonNull Phase phase) {
             data.put("phase", phase.name().toLowerCase());
             data.put("vm_id", sourceVMId.toString());
             data.put("vm_name", manifest.vm.getName());
+            var out = vout;
+            if (out != null && !data.has("volume_index"))
+                data.put("volume_index", out.currentIndex());
             var ev = new JSONObject();
             ev.put("type", "event");
             ev.put("data", data);
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/vm/pkg/VMExportUtils.java b/app/src/main/java/cn/classfun/droidvm/daemon/vm/pkg/VMExportUtils.java
index 2ed8a7934..83f382244 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/vm/pkg/VMExportUtils.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/vm/pkg/VMExportUtils.java
@@ -58,6 +58,16 @@ public static byte[] buildHeader(
         @NonNull PackageManifest manifest,
         int manifestSize,
         long dataSize
+    ) throws IOException {
+        return buildHeader(manifest, manifestSize, dataSize, 0);
+    }
+
+    @NonNull
+    public static byte[] buildHeader(
+        @NonNull PackageManifest manifest,
+        int manifestSize,
+        long dataSize,
+        int volumeCount
     ) throws IOException {
         var hdr = new byte[PackageConstants.HEADER_SIZE];
         var magic = PackageConstants.MAGIC.getBytes(UTF_8);
@@ -66,6 +76,7 @@ public static byte[] buildHeader(
         putUInt16LE(hdr, 8, BuildConfig.VERSION_CODE);
         putUInt16LE(hdr, 10, manifestSize);
         putUInt16LE(hdr, 12, manifest.compression.type);
+        putUInt16LE(hdr, 14, volumeCount);
         putInt64LE(hdr, 16, dataSize);
         return hdr;
     }
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/vm/pkg/VMImportTask.java b/app/src/main/java/cn/classfun/droidvm/daemon/vm/pkg/VMImportTask.java
index dcf56b774..9f7926007 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/vm/pkg/VMImportTask.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/vm/pkg/VMImportTask.java
@@ -4,6 +4,7 @@
 import static cn.classfun.droidvm.daemon.vm.pkg.VMImportUtils.remapDiskPaths;
 import static cn.classfun.droidvm.daemon.vm.pkg.VMImportUtils.uniqueFile;
 import static cn.classfun.droidvm.lib.pkg.PackageConstants.BUFFER;
+import static cn.classfun.droidvm.lib.utils.BinaryUtils.readFully;
 import static cn.classfun.droidvm.lib.utils.JsonUtils.listToJSONArray;
 import static cn.classfun.droidvm.lib.utils.StringUtils.basename;
 import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
@@ -31,9 +32,12 @@
 import cn.classfun.droidvm.lib.archive.TarReader;
 import cn.classfun.droidvm.lib.pkg.BootFile;
 import cn.classfun.droidvm.lib.pkg.DiskEntry;
+import cn.classfun.droidvm.lib.pkg.PackageConstants;
+import cn.classfun.droidvm.lib.pkg.PackageHeader;
 import cn.classfun.droidvm.lib.pkg.PackageInput;
 import cn.classfun.droidvm.lib.pkg.PackageManifest;
 import cn.classfun.droidvm.lib.pkg.Phase;
+import cn.classfun.droidvm.lib.pkg.VolumeSet;
 import cn.classfun.droidvm.lib.store.base.DataItem;
 import cn.classfun.droidvm.lib.store.network.NetworkConfig;
 import cn.classfun.droidvm.lib.store.vm.VMConfig;
@@ -47,6 +51,7 @@ public final class VMImportTask {
     private final File targetDir;
     private final String networkMode;
     private int totalItems;
+    private int volumeTotal = 0;
     public VMConfig importedVM = null;
     public PackageManifest importedManifest = null;
     public final ArrayList<DiskEntry> placedDisks = new ArrayList<>();
@@ -125,22 +130,24 @@ private void onTarItem(
     private void unpack() throws Exception {
         if (!targetDir.exists() && !targetDir.mkdirs())
             throw new IOException(fmt("Cannot create target dir: %s", targetDir));
-        try (
-            var in = new FileInputStream(srcPath);
-            var pkg = PackageInput.open(in)
-        ) {
-            importedManifest = pkg.manifest;
-            totalItems = importedManifest.disks.size() + importedManifest.boots.size();
-            var data = DataItem.newObject();
-            data.set("done", 0);
-            data.set("total", totalItems);
-            emit(data, Phase.PACK);
-            var tar = new TarReader(pkg.data);
-            tar.forEach(this::onTarItem);
-            var buf = new byte[BUFFER];
-            //noinspection StatementWithEmptyBody
-            while (pkg.data.read(buf) >= 0);
-            pkg.validateDataConsumed();
+        // Any picked path maps to its metadata master (strip a .NNN suffix).
+        var masterPath = VolumeSet.masterOf(srcPath);
+        if (readVolumeCount(masterPath) > 0) {
+            var set = VolumeSet.discover(masterPath);
+            volumeTotal = set.count();
+            try (
+                var in = set.openLogicalStream();
+                var pkg = PackageInput.open(in, set.dataSize())
+            ) {
+                extract(pkg);
+            }
+        } else {
+            try (
+                var in = new FileInputStream(masterPath);
+                var pkg = PackageInput.open(in)
+            ) {
+                extract(pkg);
+            }
         }
         var vm = new VMConfig(importedManifest.vm.toJson());
         vm.setId(UUID.randomUUID());
@@ -149,6 +156,29 @@ private void unpack() throws Exception {
         importedVM = vm;
     }
 
+    private int readVolumeCount(@NonNull String masterPath) throws Exception {
+        try (var in = new FileInputStream(masterPath)) {
+            var hdr = new byte[PackageConstants.HEADER_SIZE];
+            readFully(in, hdr);
+            return PackageHeader.fromBytes(hdr).volumeCount;
+        }
+    }
+
+    private void extract(@NonNull PackageInput pkg) throws Exception {
+        importedManifest = pkg.manifest;
+        totalItems = importedManifest.disks.size() + importedManifest.boots.size();
+        var data = DataItem.newObject();
+        data.set("done", 0);
+        data.set("total", totalItems);
+        emit(data, Phase.PACK);
+        var tar = new TarReader(pkg.data);
+        tar.forEach(this::onTarItem);
+        var buf = new byte[BUFFER];
+        //noinspection StatementWithEmptyBody
+        while (pkg.data.read(buf) >= 0);
+        pkg.validateDataConsumed();
+    }
+
     @NonNull
     private JSONArray importNetworks(
         @NonNull VMConfig vm,
@@ -281,6 +311,7 @@ private void emit(@NonNull DataItem item, @NonNull Phase phase) {
             data.put("event", "vm_import_status");
             data.put("task_id", taskId.toString());
             data.put("phase", phase.name().toLowerCase());
+            if (volumeTotal > 0) data.put("volume_total", volumeTotal);
             var ev = new JSONObject();
             ev.put("type", "event");
             ev.put("data", data);
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/archive/ZeroInputStream.java b/app/src/main/java/cn/classfun/droidvm/lib/archive/ZeroInputStream.java
new file mode 100644
index 000000000..00e899a6b
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/lib/archive/ZeroInputStream.java
@@ -0,0 +1,31 @@
+package cn.classfun.droidvm.lib.archive;
+
+import androidx.annotation.NonNull;
+
+import java.io.InputStream;
+import java.util.Arrays;
+
+/** A bounded stream of zero bytes, used to reproduce trailing alignment padding. */
+public final class ZeroInputStream extends InputStream {
+    private long remaining;
+
+    public ZeroInputStream(long count) {
+        this.remaining = Math.max(0, count);
+    }
+
+    @Override
+    public int read() {
+        if (remaining <= 0) return -1;
+        remaining--;
+        return 0;
+    }
+
+    @Override
+    public int read(@NonNull byte[] b, int off, int len) {
+        if (remaining <= 0) return -1;
+        int n = (int) Math.min(len, remaining);
+        Arrays.fill(b, off, off + n, (byte) 0);
+        remaining -= n;
+        return n;
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/pkg/PackageConstants.java b/app/src/main/java/cn/classfun/droidvm/lib/pkg/PackageConstants.java
index bca0dadfd..c45a8af77 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/pkg/PackageConstants.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/pkg/PackageConstants.java
@@ -12,6 +12,17 @@ public final class PackageConstants {
     public static final String MANIFEST_NAME = "manifest.json";
     public static final Compression DEFAULT_COMPRESSION = Compression.ZSTD;
 
+    // Multi-volume split. The picked file <base> stays as a small metadata
+    // master (header + manifest + volume index); the compressed data stream is
+    // sliced across <base>.001, <base>.002, ... sub-volumes. volume_size <= 0
+    // keeps the legacy single self-contained file (volumeCount == 0).
+    public static final long DEFAULT_VOLUME_SIZE = 500L * 1024 * 1024;
+    public static final long MIN_VOLUME_SIZE = 16L * 1024 * 1024;
+    public static final String VOLUME_MAGIC = "VMPV";
+    public static final int VOLUME_VERSION = 1;
+    public static final int VOLUME_MAX_COUNT = 999;
+    public static final int VOLUME_SUFFIX_DIGITS = 3;
+
     private PackageConstants() {
     }
 }
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/pkg/PackageHeader.java b/app/src/main/java/cn/classfun/droidvm/lib/pkg/PackageHeader.java
index 08d934b12..64956cf52 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/pkg/PackageHeader.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/pkg/PackageHeader.java
@@ -18,6 +18,9 @@ public final class PackageHeader {
     public int appVersionCode = 0;
     public int manifestSize = 0;
     public int compression = 0;
+    // 0 = single self-contained file; > 0 = split package whose data lives in
+    // that many <base>.NNN sub-volumes (this file is the metadata master).
+    public int volumeCount = 0;
     public long dataSize = 0;
 
     public PackageHeader() {
@@ -32,6 +35,7 @@ public void parseFromData(@NonNull byte[] hdr) throws IOException {
         appVersionCode = getUInt16LE(hdr, 8);
         manifestSize = getUInt16LE(hdr, 10);
         compression = getUInt16LE(hdr, 12);
+        volumeCount = getUInt16LE(hdr, 14);
         dataSize = getInt64LE(hdr, 16);
     }
 
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/pkg/PackageInput.java b/app/src/main/java/cn/classfun/droidvm/lib/pkg/PackageInput.java
index 7a35024ad..397c2b1e5 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/pkg/PackageInput.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/pkg/PackageInput.java
@@ -55,6 +55,39 @@ public void close() throws IOException {
 
     @NonNull
     public static PackageInput open(@NonNull InputStream raw) throws Exception {
+        return open(raw, -1);
+    }
+
+    /**
+     * Reads just the header and manifest for preview, without setting up the
+     * data/decompression stream. Safe on a metadata master (whose bytes after
+     * the manifest are the volume index, not compressed data).
+     */
+    @NonNull
+    public static PackageManifest peekManifest(@NonNull InputStream raw) throws Exception {
+        var pkgHeader = PackageHeader.fromStream(raw);
+        var manifest = PackageManifest.fromStream(raw, pkgHeader);
+        if (pkgHeader.manifestVersion != manifest.manifestVersion)
+            throw new IOException("vmpkg manifest_version mismatch");
+        if (pkgHeader.appVersionCode != manifest.appVersionCode)
+            throw new IOException("vmpkg app_version_code mismatch");
+        if (pkgHeader.compression != manifest.compression.type)
+            throw new IOException("vmpkg compression mismatch");
+        return manifest;
+    }
+
+    /**
+     * Opens a package, optionally overriding the data-region size. Multi-volume
+     * packages write a placeholder {@code dataSize} of 0 in the inline header
+     * (it is only known after streaming) and carry the real value in the volume
+     * trailer; pass it here as {@code dataSizeOverride}. Use -1 for the legacy
+     * single-file layout that patches its header in place.
+     */
+    @NonNull
+    public static PackageInput open(
+        @NonNull InputStream raw,
+        long dataSizeOverride
+    ) throws Exception {
         var pkgHeader = PackageHeader.fromStream(raw);
         var manifest = PackageManifest.fromStream(raw, pkgHeader);
         if (pkgHeader.manifestVersion != manifest.manifestVersion)
@@ -63,6 +96,7 @@ public static PackageInput open(@NonNull InputStream raw) throws Exception {
             throw new IOException("vmpkg app_version_code mismatch");
         if (pkgHeader.compression != manifest.compression.type)
             throw new IOException("vmpkg compression mismatch");
+        if (dataSizeOverride >= 0) pkgHeader.dataSize = dataSizeOverride;
         long pos = alignUp(PackageConstants.HEADER_SIZE) + pkgHeader.manifestSize;
         readZeroPadding(raw, alignUpStrict(pos) - pos);
         var stream = new LimitedInputStream(raw, pkgHeader.dataSize);
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/pkg/VolumeIndex.java b/app/src/main/java/cn/classfun/droidvm/lib/pkg/VolumeIndex.java
new file mode 100644
index 000000000..bb6ad12eb
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/lib/pkg/VolumeIndex.java
@@ -0,0 +1,94 @@
+package cn.classfun.droidvm.lib.pkg;
+
+import static cn.classfun.droidvm.lib.utils.JsonUtils.arrayToList;
+import static cn.classfun.droidvm.lib.utils.JsonUtils.listToJSONArray;
+import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
+
+import androidx.annotation.NonNull;
+
+import org.json.JSONException;
+import org.json.JSONObject;
+
+import java.io.IOException;
+import java.util.ArrayList;
+import java.util.List;
+
+import cn.classfun.droidvm.lib.store.base.JSONSerialize;
+
+/**
+ * Volume list embedded in the metadata master ({@code <base>.vmpkg}) right
+ * after the manifest. It records the total data size and, for each sub-volume,
+ * its logical size and CRC32 so a reader can verify the set is complete and
+ * intact before unpacking. Plain JSON -- its length is master-file-size minus
+ * the data-region offset, so no framing/magic footer is needed.
+ */
+public final class VolumeIndex implements JSONSerialize {
+    public static final class Entry implements JSONSerialize {
+        public final int index;
+        public final long size;
+        public final long crc32;
+
+        public Entry(int index, long size, long crc32) {
+            this.index = index;
+            this.size = size;
+            this.crc32 = crc32;
+        }
+
+        public Entry(@NonNull JSONObject o) {
+            index = o.optInt("index");
+            size = o.optLong("size");
+            crc32 = o.optLong("crc32");
+        }
+
+        @NonNull
+        @Override
+        public JSONObject toJson() throws JSONException {
+            var o = new JSONObject();
+            o.put("index", index);
+            o.put("size", size);
+            o.put("crc32", crc32);
+            return o;
+        }
+
+        @NonNull
+        public static Entry from(Object o) throws JSONException {
+            if (o instanceof JSONObject)
+                return new Entry((JSONObject) o);
+            throw new JSONException("object is not json");
+        }
+    }
+
+    public int version = PackageConstants.VOLUME_VERSION;
+    public long dataSize = 0;
+    public final List<Entry> volumes = new ArrayList<>();
+
+    public VolumeIndex() {
+    }
+
+    public VolumeIndex(@NonNull JSONObject o) throws IOException, JSONException {
+        if (!PackageConstants.VOLUME_MAGIC.equals(o.optString("magic")))
+            throw new IOException("missing volume index magic");
+        version = o.optInt("version");
+        if (version != PackageConstants.VOLUME_VERSION)
+            throw new IOException(fmt("unsupported volume version: %d", version));
+        dataSize = o.optLong("data_size");
+        volumes.addAll(arrayToList(o, "volumes", Entry::from));
+        if (volumes.isEmpty())
+            throw new IOException("volume index has no volumes");
+    }
+
+    public VolumeIndex(@NonNull String json) throws IOException, JSONException {
+        this(new JSONObject(json));
+    }
+
+    @NonNull
+    @Override
+    public JSONObject toJson() throws JSONException {
+        var o = new JSONObject();
+        o.put("magic", PackageConstants.VOLUME_MAGIC);
+        o.put("version", version);
+        o.put("data_size", dataSize);
+        o.put("volumes", listToJSONArray(volumes));
+        return o;
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/pkg/VolumeSet.java b/app/src/main/java/cn/classfun/droidvm/lib/pkg/VolumeSet.java
new file mode 100644
index 000000000..afd1b1ce8
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/lib/pkg/VolumeSet.java
@@ -0,0 +1,220 @@
+package cn.classfun.droidvm.lib.pkg;
+
+import static java.nio.charset.StandardCharsets.UTF_8;
+import static cn.classfun.droidvm.lib.utils.BinaryUtils.alignUp;
+import static cn.classfun.droidvm.lib.utils.BinaryUtils.alignUpStrict;
+import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
+
+import androidx.annotation.NonNull;
+
+import org.json.JSONException;
+
+import java.io.BufferedInputStream;
+import java.io.ByteArrayInputStream;
+import java.io.File;
+import java.io.FileInputStream;
+import java.io.IOException;
+import java.io.InputStream;
+import java.io.SequenceInputStream;
+import java.util.ArrayList;
+import java.util.Arrays;
+import java.util.List;
+import java.util.Vector;
+import java.util.zip.CRC32;
+
+import cn.classfun.droidvm.lib.archive.ZeroInputStream;
+
+/**
+ * Reader-side view of a multi-volume vmpkg. Given the metadata master
+ * ({@code <base>.vmpkg}), it parses the embedded {@link VolumeIndex}, locates
+ * and validates the {@code <base>.001 ..} sub-volumes, then rebuilds the exact
+ * single-file byte stream -- {@code [master head][sub-volume data][tail padding]}
+ * -- so the unchanged {@link PackageInput} can consume it. Sub-volume CRC32s are
+ * verified as their boundaries are crossed.
+ */
+public final class VolumeSet {
+    private final byte[] masterHead;
+    private final long dataStart;
+    private final VolumeIndex index;
+    private final List<File> subVolumes;
+
+    private VolumeSet(
+        @NonNull byte[] masterHead,
+        long dataStart,
+        @NonNull VolumeIndex index,
+        @NonNull List<File> subVolumes
+    ) {
+        this.masterHead = masterHead;
+        this.dataStart = dataStart;
+        this.index = index;
+        this.subVolumes = subVolumes;
+    }
+
+    /** True when {@code path} looks like a sub-volume member ({@code ....NNN}). */
+    public static boolean isSubVolume(@NonNull String path) {
+        return path.matches(fmt(".*\\.\\d{%d}", PackageConstants.VOLUME_SUFFIX_DIGITS));
+    }
+
+    /** Maps any picked path to its metadata master: strips a {@code .NNN}
+     * sub-volume suffix, or returns the path unchanged for the master itself. */
+    @NonNull
+    public static String masterOf(@NonNull String path) {
+        if (!isSubVolume(path)) return path;
+        return path.substring(0, path.length() - PackageConstants.VOLUME_SUFFIX_DIGITS - 1);
+    }
+
+    public long dataSize() {
+        return index.dataSize;
+    }
+
+    public int count() {
+        return subVolumes.size();
+    }
+
+    /**
+     * Parses and validates the whole set from the master path. Throws with a
+     * clear message when a sub-volume is missing or a size does not match.
+     */
+    @NonNull
+    public static VolumeSet discover(@NonNull String masterPath) throws IOException {
+        var master = new File(masterPath);
+        var all = readAllBytes(master);
+        if (all.length < PackageConstants.HEADER_SIZE)
+            throw new IOException("master too small");
+        PackageHeader hdr;
+        try {
+            hdr = PackageHeader.fromBytes(Arrays.copyOf(all, PackageConstants.HEADER_SIZE));
+        } catch (IOException e) {
+            throw e;
+        } catch (Exception e) {
+            throw new IOException("invalid master header", e);
+        }
+        if (hdr.volumeCount <= 0)
+            throw new IOException("not a multi-volume package");
+        long dataStart = alignUpStrict(alignUp(PackageConstants.HEADER_SIZE) + hdr.manifestSize);
+        if (all.length < dataStart)
+            throw new IOException("truncated master");
+        var indexJson = new String(all, (int) dataStart, all.length - (int) dataStart, UTF_8);
+        VolumeIndex index;
+        try {
+            index = new VolumeIndex(indexJson);
+        } catch (JSONException e) {
+            throw new IOException("failed to parse volume index", e);
+        }
+        if (index.volumes.size() != hdr.volumeCount)
+            throw new IOException(fmt(
+                "volume count mismatch: header %d, index %d",
+                hdr.volumeCount, index.volumes.size()
+            ));
+        var subs = new ArrayList<File>();
+        for (int i = 0; i < index.volumes.size(); i++) {
+            var entry = index.volumes.get(i);
+            var f = new File(VolumeSplitOutputStream.volumeName(masterPath, i + 1));
+            if (!f.isFile())
+                throw new IOException(fmt("missing sub-volume %d (%s)", i + 1, f.getName()));
+            if (f.length() != entry.size)
+                throw new IOException(fmt(
+                    "sub-volume %d size mismatch: on-disk %d, expected %d",
+                    i + 1, f.length(), entry.size
+                ));
+            subs.add(f);
+        }
+        var head = Arrays.copyOf(all, (int) dataStart);
+        return new VolumeSet(head, dataStart, index, subs);
+    }
+
+    /**
+     * Rebuilds the single-file byte stream: master head (header + manifest +
+     * padding) ++ concatenated sub-volume data (CRC-checked) ++ trailing
+     * alignment zeros. Feed to {@link PackageInput#open(InputStream, long)}.
+     */
+    @NonNull
+    public InputStream openLogicalStream() {
+        long dataEnd = dataStart + index.dataSize;
+        long tailPad = alignUp(dataEnd) - dataEnd;
+        var streams = new Vector<InputStream>();
+        streams.add(new ByteArrayInputStream(masterHead));
+        streams.add(new SubVolumeConcatStream());
+        streams.add(new ZeroInputStream(tailPad));
+        return new SequenceInputStream(streams.elements());
+    }
+
+    @NonNull
+    private static byte[] readAllBytes(@NonNull File f) throws IOException {
+        long len = f.length();
+        if (len <= 0 || len > (16L << 20))
+            throw new IOException(fmt("unexpected master size: %d", len));
+        var buf = new byte[(int) len];
+        try (var in = new FileInputStream(f)) {
+            int off = 0;
+            while (off < buf.length) {
+                int n = in.read(buf, off, buf.length - off);
+                if (n < 0) throw new IOException("short read on master");
+                off += n;
+            }
+        }
+        return buf;
+    }
+
+    private final class SubVolumeConcatStream extends InputStream {
+        private int idx = -1;
+        private InputStream cur;
+        private CRC32 crc;
+        private long remaining;
+
+        private boolean advance() throws IOException {
+            if (cur != null) {
+                verify();
+                cur.close();
+                cur = null;
+            }
+            idx++;
+            if (idx >= subVolumes.size()) return false;
+            cur = new BufferedInputStream(
+                new FileInputStream(subVolumes.get(idx)), PackageConstants.BUFFER
+            );
+            crc = new CRC32();
+            remaining = index.volumes.get(idx).size;
+            return true;
+        }
+
+        private void verify() throws IOException {
+            if (remaining != 0)
+                throw new IOException(fmt("sub-volume %d truncated", idx + 1));
+            if (crc.getValue() != index.volumes.get(idx).crc32)
+                throw new IOException(fmt("sub-volume %d checksum mismatch", idx + 1));
+        }
+
+        @Override
+        public int read() throws IOException {
+            var one = new byte[1];
+            int n = read(one, 0, 1);
+            return n < 0 ? -1 : (one[0] & 0xff);
+        }
+
+        @Override
+        public int read(@NonNull byte[] b, int off, int len) throws IOException {
+            while (true) {
+                if (cur == null || remaining == 0) {
+                    if (!advance()) return -1;
+                    continue;
+                }
+                int toRead = (int) Math.min(len, remaining);
+                int n = cur.read(b, off, toRead);
+                if (n < 0)
+                    throw new IOException(fmt("sub-volume %d ended early", idx + 1));
+                crc.update(b, off, n);
+                remaining -= n;
+                return n;
+            }
+        }
+
+        @Override
+        public void close() throws IOException {
+            if (cur != null) {
+                cur.close();
+                cur = null;
+            }
+        }
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/pkg/VolumeSplitOutputStream.java b/app/src/main/java/cn/classfun/droidvm/lib/pkg/VolumeSplitOutputStream.java
new file mode 100644
index 000000000..77a216f83
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/lib/pkg/VolumeSplitOutputStream.java
@@ -0,0 +1,134 @@
+package cn.classfun.droidvm.lib.pkg;
+
+import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
+
+import androidx.annotation.NonNull;
+
+import java.io.BufferedOutputStream;
+import java.io.File;
+import java.io.FileOutputStream;
+import java.io.IOException;
+import java.io.OutputStream;
+import java.util.ArrayList;
+import java.util.List;
+import java.util.zip.CRC32;
+
+/**
+ * Slices the compressed data stream across fixed-size sub-volumes
+ * {@code <base>.001, <base>.002, ...}. Pure data: no header, manifest or magic
+ * -- those live in the metadata master ({@link VolumeIndex}). Tracks each
+ * sub-volume's size and CRC32. {@link #close()} is a no-op so an upstream
+ * compression stream can be closed without ending the volume set; finalize
+ * explicitly with {@link #finish()} and read {@link #entries()}/{@link #dataSize()}.
+ */
+public final class VolumeSplitOutputStream extends OutputStream {
+    private final String basePath;
+    private final long volumeSize;
+    private final List<VolumeIndex.Entry> entries = new ArrayList<>();
+    private final List<File> files = new ArrayList<>();
+    private OutputStream current;
+    private CRC32 currentCrc;
+    private long currentBytes;
+    private int index;
+    private long position;
+    private boolean finished;
+
+    public VolumeSplitOutputStream(@NonNull String basePath, long volumeSize) {
+        this.basePath = basePath;
+        this.volumeSize = volumeSize;
+    }
+
+    @NonNull
+    public static String volumeName(@NonNull String basePath, int index) {
+        return fmt("%s.%0" + PackageConstants.VOLUME_SUFFIX_DIGITS + "d", basePath, index); // concat-ok
+    }
+
+    @Override
+    public void write(int b) throws IOException {
+        write(new byte[]{(byte) b}, 0, 1);
+    }
+
+    @Override
+    public void write(@NonNull byte[] b, int off, int len) throws IOException {
+        if (finished) throw new IOException("volume stream already finished");
+        while (len > 0) {
+            if (current == null || currentBytes >= volumeSize) rollVolume();
+            int chunk = (int) Math.min(len, volumeSize - currentBytes);
+            current.write(b, off, chunk);
+            currentCrc.update(b, off, chunk);
+            currentBytes += chunk;
+            position += chunk;
+            off += chunk;
+            len -= chunk;
+        }
+    }
+
+    private void rollVolume() throws IOException {
+        if (current != null) closeCurrent();
+        index++;
+        if (index > PackageConstants.VOLUME_MAX_COUNT)
+            throw new IOException(fmt(
+                "too many volumes (> %d); use a larger volume size",
+                PackageConstants.VOLUME_MAX_COUNT
+            ));
+        var file = new File(volumeName(basePath, index));
+        files.add(file);
+        current = new BufferedOutputStream(new FileOutputStream(file), PackageConstants.BUFFER);
+        currentCrc = new CRC32();
+        currentBytes = 0;
+    }
+
+    private void closeCurrent() throws IOException {
+        entries.add(new VolumeIndex.Entry(index, currentBytes, currentCrc.getValue()));
+        current.flush();
+        current.close();
+        current = null;
+    }
+
+    /** Closes the final sub-volume and records its entry. */
+    public void finish() throws IOException {
+        if (finished) return;
+        if (current != null) closeCurrent();
+        finished = true;
+    }
+
+    /** Total bytes written across all sub-volumes (the compressed data size). */
+    public long dataSize() {
+        return position;
+    }
+
+    public int currentIndex() {
+        return index;
+    }
+
+    public int volumeCount() {
+        return entries.size();
+    }
+
+    @NonNull
+    public List<VolumeIndex.Entry> entries() {
+        return entries;
+    }
+
+    @NonNull
+    public List<File> files() {
+        return files;
+    }
+
+    /** No-op: mirrors RandomAccessFileOutputStream so upstream close() cannot
+     * end the volume set prematurely. Use {@link #finish()} to finalize. */
+    @Override
+    public void close() {
+    }
+
+    /** Closes any open sub-volume without recording it, for error cleanup. */
+    public void abort() {
+        if (current != null) {
+            try {
+                current.close();
+            } catch (IOException ignored) {
+            }
+            current = null;
+        }
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/utils/BinaryUtils.java b/app/src/main/java/cn/classfun/droidvm/lib/utils/BinaryUtils.java
index 38a7c7d7f..fb1039c63 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/utils/BinaryUtils.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/utils/BinaryUtils.java
@@ -8,6 +8,7 @@
 import java.io.EOFException;
 import java.io.IOException;
 import java.io.InputStream;
+import java.io.OutputStream;
 import java.io.RandomAccessFile;
 import java.nio.ByteBuffer;
 import java.nio.charset.CodingErrorAction;
@@ -45,6 +46,15 @@ public static void writeZero(@NonNull RandomAccessFile raf, long count) throws I
         }
     }
 
+    public static void writeZero(@NonNull OutputStream out, long count) throws IOException {
+        long rem = count;
+        while (rem > 0) {
+            int n = (int) Math.min(ZERO.length, rem);
+            out.write(ZERO, 0, n);
+            rem -= n;
+        }
+    }
+
     @NonNull
     public static String decodeUtf8(@NonNull byte[] bytes) throws IOException {
         var decoder = UTF_8.newDecoder()
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/pkg/exports/VMPkgExportActivity.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/pkg/exports/VMPkgExportActivity.java
index 0a88f7568..74650153b 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/pkg/exports/VMPkgExportActivity.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/pkg/exports/VMPkgExportActivity.java
@@ -54,6 +54,7 @@
 import cn.classfun.droidvm.lib.utils.ShareUtils;
 import cn.classfun.droidvm.ui.widgets.container.CollapsibleContainer;
 import cn.classfun.droidvm.ui.widgets.row.ChooseRowWidget;
+import cn.classfun.droidvm.ui.widgets.row.TextInputRowWidget;
 
 public final class VMPkgExportActivity extends AppCompatActivity
     implements DaemonConnection.EventListener {
@@ -70,6 +71,7 @@ public final class VMPkgExportActivity extends AppCompatActivity
     private TextView tvDiskSummary;
     private ChooseRowWidget chooseCompression;
     private TextView tvCompressionDesc;
+    private TextInputRowWidget inputVolumeSize;
     private LinearProgressIndicator pbRun;
     private TextView tvStatus;
     private TextView tvFileName;
@@ -78,9 +80,11 @@ public final class VMPkgExportActivity extends AppCompatActivity
     private ExtendedFloatingActionButton fabShare;
     private VMConfig config;
     private Compression compression = PackageConstants.DEFAULT_COMPRESSION;
+    private long volumeSize = 0;
     private VMPkgExportDiskAdapter adapter;
     private String pendingTaskId = null;
     private String path = null;
+    private int exportVolumeIndex = 0;
     private boolean exporting = false;
     private Phase phase = Phase.IDLE;
     private final ActivityResultLauncher<String> createDocLauncher =
@@ -108,6 +112,7 @@ protected void onCreate(@Nullable Bundle savedInstanceState) {
         tvDiskSummary = findViewById(R.id.tv_disk_summary);
         chooseCompression = findViewById(R.id.choose_compression);
         tvCompressionDesc = findViewById(R.id.tv_compression_desc);
+        inputVolumeSize = findViewById(R.id.input_volume_size);
         pbRun = findViewById(R.id.pb_run);
         tvStatus = findViewById(R.id.tv_status);
         tvFileName = findViewById(R.id.tv_filename);
@@ -144,6 +149,9 @@ private void initialize() {
         containerDisks.setAdapter(adapter);
         bindDisks();
         bindCompression();
+        // Volume split defaults off: leave the input empty so export produces a
+        // single self-contained file unless the user enters a size.
+        inputVolumeSize.setText("");
         var handler = new VMPkgExportOnBackPressedCallback();
         toolbar.setNavigationOnClickListener(v -> handler.handleOnBackPressed());
         getOnBackPressedDispatcher().addCallback(this, handler);
@@ -303,6 +311,23 @@ private boolean validateSelectedDisks() {
 
     private void onDocPicked(@Nullable Uri uri) {
         if (uri == null || exporting) return;
+        // Clear any stale volume index from a previous export so a following
+        // single-file export does not inherit its "volume N" status.
+        exportVolumeIndex = 0;
+        // Read the (empty = single file) volume size on the UI thread before
+        // handing off to the worker pool.
+        var vsText = inputVolumeSize.getText().trim();
+        if (vsText.isEmpty()) {
+            volumeSize = 0;
+        } else if (!inputVolumeSize.isInputValid()) {
+            showToast(R.string.vmpkg_export_failed, getString(
+                R.string.vmpkg_export_volume_size_invalid,
+                PackageConstants.MIN_VOLUME_SIZE / (1024 * 1024)
+            ));
+            return;
+        } else {
+            volumeSize = inputVolumeSize.getValue();
+        }
         runOnPool(() -> startExport(uri));
     }
 
@@ -344,6 +369,7 @@ private void startExport(@NonNull Uri uri) {
             .put("disks", diskIndices)
             .put("dest_path", destPath)
             .put("compression", compression)
+            .put("volume_size", volumeSize)
             .onResponse(onExport)
             .onUnsuccessful(f)
             .onError(err)
@@ -384,6 +410,7 @@ public void onDaemonEvent(JSONObject msg) {
         var bytesTotal = data.optLong("bytes_total");
         var file = data.optString("file");
         var message = data.optString("message");
+        exportVolumeIndex = data.optInt("volume_index", exportVolumeIndex);
         mainHandler.post(() -> onProgress(
             phase, done, total, bytesDone, bytesTotal, file, message
         ));
@@ -424,7 +451,10 @@ private void onProgress(
                 applyProgress(done, total, bytesDone, bytesTotal);
                 break;
             case PACK:
-                tvStatus.setText(R.string.vmpkg_export_pack);
+                if (exportVolumeIndex > 0) tvStatus.setText(getString(
+                    R.string.vmpkg_export_pack_volume, exportVolumeIndex
+                ));
+                else tvStatus.setText(R.string.vmpkg_export_pack);
                 applyProgress(done, total, bytesDone, bytesTotal);
                 applyProgressDetail(file, bytesDone, bytesTotal);
                 break;
@@ -471,6 +501,7 @@ private void setExporting(boolean exporting) {
         pbRun.setVisibility(exporting ? VISIBLE : GONE);
         pbRun.setIndeterminate(exporting);
         chooseCompression.setEnabled(!exporting);
+        inputVolumeSize.setEnabled(!exporting);
         containerDisks.setEnabled(!exporting);
         adapter.setEnabled(!exporting);
     }
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/pkg/imports/VMPkgImportActivity.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/pkg/imports/VMPkgImportActivity.java
index e3283c07b..9689b5501 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/pkg/imports/VMPkgImportActivity.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/pkg/imports/VMPkgImportActivity.java
@@ -41,6 +41,7 @@
 import org.json.JSONObject;
 
 import java.io.File;
+import java.io.FileInputStream;
 import java.io.IOException;
 import java.text.DateFormat;
 import java.util.Date;
@@ -51,6 +52,7 @@
 import cn.classfun.droidvm.lib.pkg.PackageInput;
 import cn.classfun.droidvm.lib.pkg.PackageManifest;
 import cn.classfun.droidvm.lib.pkg.Phase;
+import cn.classfun.droidvm.lib.pkg.VolumeSet;
 import cn.classfun.droidvm.lib.store.disk.DiskConfig;
 import cn.classfun.droidvm.lib.store.disk.DiskStore;
 import cn.classfun.droidvm.lib.store.network.NetworkConfig;
@@ -86,10 +88,14 @@ public final class VMPkgImportActivity extends AppCompatActivity
     private TextView tvProgressDetail;
     private View groupSummary;
     private Uri pickedUri;
+    // Real filesystem path of the metadata master, resolved at pick time when a
+    // sub-volume (.NNN) is chosen so preview/import target the master directly.
+    private String masterRealPath;
     private PackageManifest preview;
     private VMPkgImportDiskAdapter diskAdapter;
     private VMPkgImportNetworkAdapter networkAdapter;
     private String pendingTaskId = null;
+    private int importVolumeTotal = 0;
     private boolean importing = false;
     private NetworkImportMode networkMode = NetworkImportMode.AUTO;
     private final ActivityResultLauncher<String[]> openDocLauncher =
@@ -188,16 +194,15 @@ protected void onStop() {
     private void onDocPicked(@Nullable Uri uri) {
         if (uri == null || importing) return;
         pickedUri = uri;
+        masterRealPath = null;
+        importVolumeTotal = 0;
         tvError.setVisibility(GONE);
         groupSummary.setVisibility(GONE);
         btnImport.setEnabled(false);
         tvStatus.setText(R.string.vmpkg_import_reading);
         runOnPool(() -> {
-            try (var is = getContentResolver().openInputStream(uri)) {
-                if (is == null) throw new RuntimeException("Cannot open file");
-                try (var input = PackageInput.open(is)) {
-                    preview = input.manifest;
-                }
+            try {
+                preview = readPreviewManifest(uri);
                 mainHandler.post(this::showPreview);
             } catch (Exception e) {
                 mainHandler.post(() -> showError(getString(R.string.vmpkg_import_invalid, e.getMessage())));
@@ -205,6 +210,26 @@ private void onDocPicked(@Nullable Uri uri) {
         });
     }
 
+    @NonNull
+    private PackageManifest readPreviewManifest(@NonNull Uri uri) throws Exception {
+        // A picked sub-volume (.NNN) has no header/manifest; redirect to its
+        // metadata master in the same folder (needs MANAGE_EXTERNAL_STORAGE).
+        var real = resolveUriPath(this, uri);
+        if (real != null && !real.isEmpty() && VolumeSet.isSubVolume(real)) {
+            masterRealPath = VolumeSet.masterOf(real);
+            try (var is = new FileInputStream(masterRealPath)) {
+                return PackageInput.peekManifest(is);
+            }
+        }
+        // Master or single file: SAF stream is enough. Remember the resolved
+        // master path (may be null) so import can reuse it.
+        masterRealPath = real == null || real.isEmpty() ? null : VolumeSet.masterOf(real);
+        try (var is = getContentResolver().openInputStream(uri)) {
+            if (is == null) throw new RuntimeException("Cannot open file");
+            return PackageInput.peekManifest(is);
+        }
+    }
+
     @SuppressLint("NotifyDataSetChanged")
     private void showPreview() {
         if (preview == null) return;
@@ -252,7 +277,10 @@ private void showPreview() {
 
     private void doImport() {
         if (pickedUri == null || preview == null || importing) return;
-        var srcPath = resolveUriPath(this, pickedUri);
+        // Prefer the master path resolved at pick time; the daemon maps any
+        // .NNN sub-volume to its master anyway.
+        var srcPath = masterRealPath;
+        if (srcPath == null || srcPath.isEmpty()) srcPath = resolveUriPath(this, pickedUri);
         if (srcPath == null || srcPath.isEmpty()) {
             showError(getString(
                 R.string.vmpkg_import_failed,
@@ -296,6 +324,7 @@ public void onDaemonEvent(JSONObject msg) {
         var phase = optEnum(data, "phase", Phase.SCAN);
         var done = data.optInt("done", 0);
         var total = data.optInt("total", 0);
+        importVolumeTotal = data.optInt("volume_total", importVolumeTotal);
         var file = data.optString("file", "");
         var bytesDone = data.optLong("bytes_done", -1);
         var bytesTotal = data.optLong("bytes_total", -1);
@@ -332,7 +361,10 @@ private void onProgress(
     ) {
         switch (phase) {
             case PACK:
-                tvStatus.setText(R.string.vmpkg_import_running);
+                if (importVolumeTotal > 0) tvStatus.setText(getString(
+                    R.string.vmpkg_import_running_volume, importVolumeTotal
+                ));
+                else tvStatus.setText(R.string.vmpkg_import_running);
                 applyProgress(done, total, bytesDone, bytesTotal);
                 applyProgressDetail(file, bytesDone, bytesTotal);
                 break;
diff --git a/app/src/main/res/layout/activity_vmpkg_export.xml b/app/src/main/res/layout/activity_vmpkg_export.xml
index f7a850bdb..7d47d8e14 100644
--- a/app/src/main/res/layout/activity_vmpkg_export.xml
+++ b/app/src/main/res/layout/activity_vmpkg_export.xml
@@ -153,6 +153,27 @@
                     android:textAppearance="?attr/textAppearanceBodySmall"
                     android:textColor="?android:attr/textColorSecondary" />
 
+                <cn.classfun.droidvm.ui.widgets.row.TextInputRowWidget
+                    android:id="@+id/input_volume_size"
+                    android:layout_width="match_parent"
+                    android:layout_height="wrap_content"
+                    android:hint="@string/vmpkg_export_volume_size_hint"
+                    android:icon="@drawable/ic_sd"
+                    app:ti_max="1TiB"
+                    app:ti_min="16MiB"
+                    app:ti_mode="size" />
+
+                <TextView
+                    android:id="@+id/tv_volume_desc"
+                    android:layout_width="match_parent"
+                    android:layout_height="wrap_content"
+                    android:layout_marginStart="16dp"
+                    android:layout_marginEnd="16dp"
+                    android:layout_marginBottom="12dp"
+                    android:text="@string/vmpkg_export_volume_size_desc"
+                    android:textAppearance="?attr/textAppearanceBodySmall"
+                    android:textColor="?android:attr/textColorSecondary" />
+
             </cn.classfun.droidvm.ui.widgets.container.CollapsibleContainer>
 
             <com.google.android.material.progressindicator.LinearProgressIndicator
diff --git a/app/src/main/res/values-zh-rCN/strings.xml b/app/src/main/res/values-zh-rCN/strings.xml
index b577e3fda..8663b524d 100644
--- a/app/src/main/res/values-zh-rCN/strings.xml
+++ b/app/src/main/res/values-zh-rCN/strings.xml
@@ -1056,6 +1056,11 @@
     <string name="vmpkg_export_scan">正在扫描磁盘\u2026</string>
     <string name="vmpkg_export_pack">正在打包磁盘\u2026</string>
     <string name="vmpkg_export_progress_detail">%1$s / %2$s %3$d%%</string>
+    <string name="vmpkg_export_volume_size_hint">分卷大小</string>
+    <string name="vmpkg_export_volume_size_desc">将包拆分为固定大小的分卷（.001、.002…）。留空则导出为单个文件。</string>
+    <string name="vmpkg_export_volume_size_invalid">分卷大小不能小于 %1$d MB</string>
+    <string name="vmpkg_export_pack_volume">正在打包磁盘（分卷 %1$d）…</string>
+    <string name="vmpkg_import_running_volume">正在导入（共 %1$d 卷）…</string>
     <string name="vmpkg_export_success">包已创建</string>
     <string name="vmpkg_export_success_path">包已创建：%1$s</string>
     <string name="vmpkg_export_failed">导出失败：%1$s</string>
diff --git a/app/src/main/res/values-zh-rTW/strings.xml b/app/src/main/res/values-zh-rTW/strings.xml
index d6d5a0956..785db36f6 100644
--- a/app/src/main/res/values-zh-rTW/strings.xml
+++ b/app/src/main/res/values-zh-rTW/strings.xml
@@ -1056,6 +1056,11 @@
     <string name="vmpkg_export_scan">正在掃描磁碟\u2026</string>
     <string name="vmpkg_export_pack">正在打包磁碟\u2026</string>
     <string name="vmpkg_export_progress_detail">%1$s / %2$s %3$d%%</string>
+    <string name="vmpkg_export_volume_size_hint">分卷大小</string>
+    <string name="vmpkg_export_volume_size_desc">將封裝包拆分為固定大小的分卷（.001、.002…）。留空則匯出為單一檔案。</string>
+    <string name="vmpkg_export_volume_size_invalid">分卷大小不能小於 %1$d MB</string>
+    <string name="vmpkg_export_pack_volume">正在打包磁碟（分卷 %1$d）…</string>
+    <string name="vmpkg_import_running_volume">正在匯入（共 %1$d 卷）…</string>
     <string name="vmpkg_export_success">包已建立</string>
     <string name="vmpkg_export_success_path">包已建立：%1$s</string>
     <string name="vmpkg_export_failed">匯出失敗：%1$s</string>
diff --git a/app/src/main/res/values/strings.xml b/app/src/main/res/values/strings.xml
index 85f08a344..954a15f63 100644
--- a/app/src/main/res/values/strings.xml
+++ b/app/src/main/res/values/strings.xml
@@ -1089,9 +1089,13 @@
     <string name="vmpkg_export_compression_gzip_desc">Gzip is fast with low CPU usage but produces larger archives.</string>
     <string name="vmpkg_export_compression_xz_desc">XZ (LZMA2) is slowest and CPU-heavy but produces the smallest archives.</string>
     <string name="vmpkg_export_compression_zstd_desc">Zstandard offers the best balance: fast compression with good ratios.</string>
+    <string name="vmpkg_export_volume_size_hint">Volume size</string>
+    <string name="vmpkg_export_volume_size_desc">Split the package into fixed-size volumes (.001, .002, \u2026). Leave empty for a single file.</string>
+    <string name="vmpkg_export_volume_size_invalid">Volume size must be at least %1$d MB</string>
     <string name="vmpkg_export_running">Submitting to daemon\u2026</string>
     <string name="vmpkg_export_scan">Scanning disks\u2026</string>
     <string name="vmpkg_export_pack">Packaging disks\u2026</string>
+    <string name="vmpkg_export_pack_volume">Packaging disks (volume %1$d)\u2026</string>
     <string name="vmpkg_export_progress_detail">%1$s / %2$s %3$d%%</string>
     <string name="vmpkg_export_success">Package created</string>
     <string name="vmpkg_export_success_path">Package created: %1$s</string>
@@ -1110,6 +1114,7 @@
     <string name="vmpkg_import_do">Import</string>
     <string name="vmpkg_import_reading">Reading package\u2026</string>
     <string name="vmpkg_import_running">Importing\u2026</string>
+    <string name="vmpkg_import_running_volume">Importing (%1$d volumes)\u2026</string>
     <string name="vmpkg_import_disks">Disks</string>
     <string name="vmpkg_import_networks">Networks</string>
     <string name="vmpkg_import_no_disks">No disks in this package.</string>

From 05d6a5aba23ef42f7c84588d0872d45dd45d6cc3 Mon Sep 17 00:00:00 2001
From: Kancy Joe <54024877+sunflower2333@users.noreply.github.com>
Date: Sun, 16 Aug 2026 14:35:00 +0000
Subject: [PATCH 125/182] feat(uefi): move pflash to UEFI vars under boot
 section

- Add UEFI vars (pflash) config under boot.uefi: vars path + vars_enabled
  switch; empty vars = built-in edk2-gunyah.vars.fd (shared crosvm/QEMU)
- crosvm backend: attach --pflash with auto block size when vars enabled;
  QEMU backend: attach -drive if=pflash with the same vars file
- Boot tab UI: enable switch + vars path row (empty = built-in), browse
  dialog for custom vars file; hint text moved above the switch
- Storage tab: PFLASH bus hidden while UEFI vars pflash is enabled; only
  one PFLASH disk allowed (mutual exclusion), auto-downgrade to VIRTIO
- Validate pflash image size (8 MiB crosvm limit) on save for both the
  boot vars file and storage PFLASH disks; QEMU backend exempt
- Add VMBackend accessor on the basic tab for cross-tab backend checks
---
 .../classfun/droidvm/daemon/vm/BootPlan.java  | 27 +++++--
 .../vm/backend/CrosvmBackendInstance.java     | 17 +++-
 .../vm/backend/QemuBackendInstance.java       |  6 ++
 .../cn/classfun/droidvm/lib/Constants.java    |  3 +
 .../droidvm/lib/store/vm/BootConfig.java      | 21 ++++-
 .../ui/vm/edit/basic/VMEditBasicTab.java      |  7 ++
 .../ui/vm/edit/boot/VMEditBootTab.java        | 81 +++++++++++++++++++
 .../ui/vm/edit/storage/VMEditStorageTab.java  | 46 ++++++++++-
 .../edit/storage/disk/VMDiskEditAdapter.java  | 63 ++++++++++++++-
 .../main/res/layout/partial_vm_edit_boot.xml  | 19 +++++
 app/src/main/res/values-zh-rCN/strings.xml    |  5 ++
 app/src/main/res/values-zh-rTW/strings.xml    |  5 ++
 app/src/main/res/values/strings.xml           |  5 ++
 13 files changed, 287 insertions(+), 18 deletions(-)

diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/vm/BootPlan.java b/app/src/main/java/cn/classfun/droidvm/daemon/vm/BootPlan.java
index 87f10bd7b..39a097b8b 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/vm/BootPlan.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/vm/BootPlan.java
@@ -60,6 +60,11 @@ public final class BootPlan {
     /** Custom UEFI firmware path; empty = builtin (QEMU honors, crosvm ignores). */
     @NonNull
     public final String firmware;
+    /** Custom UEFI vars path; empty = builtin EDK2 vars. */
+    @NonNull
+    public final String vars;
+    /** Whether the UEFI vars pflash is attached. */
+    public final boolean varsEnabled;
     @NonNull
     public final String kernel;
     @NonNull
@@ -73,12 +78,14 @@ public final class BootPlan {
     public final boolean entryFallback;
 
     private BootPlan(
-        boolean uefi, @NonNull String firmware, @NonNull String kernel,
-        @NonNull String initrd, @NonNull String cmdline,
-        @Nullable String entryTitle, boolean entryFallback
+        boolean uefi, @NonNull String firmware, @NonNull String vars,
+        boolean varsEnabled, @NonNull String kernel, @NonNull String initrd,
+        @NonNull String cmdline, @Nullable String entryTitle, boolean entryFallback
     ) {
         this.uefi = uefi;
         this.firmware = firmware;
+        this.vars = vars;
+        this.varsEnabled = varsEnabled;
         this.kernel = kernel;
         this.initrd = initrd;
         this.cmdline = cmdline;
@@ -116,14 +123,18 @@ public static BootPlan resolve(
         if (BootConfig.BUILTIN_ENTRY_KEY.equals(entryOverrideId))
             return resolveBuiltin(config, boot);
         if (boot.getProtocol() == BootConfig.Protocol.UEFI)
-            return new BootPlan(true, boot.getUefiFirmware(), "", "", "", null, false);
+            return new BootPlan(
+                true, boot.getUefiFirmware(), boot.getUefiVars(),
+                boot.isUefiVarsEnabled(), "", "", "", null, false
+            );
         if (boot.getLinuxSource() == BootConfig.LinuxSource.MANUAL) {
             var kernel = boot.getKernel();
             // pre-boot{} configs stored the EDK2 path as the kernel
             if (kernel.equals(PATH_EDK2_FIRMWARE))
-                return new BootPlan(true, "", "", "", "", null, false);
+                return new BootPlan(true, "", "", false, "", "", "", null, false);
             return new BootPlan(
-                false, "", kernel, boot.getInitrd(), boot.getCmdline(), null, false
+                false, "", "", false, kernel, boot.getInitrd(),
+                boot.getCmdline(), null, false
             );
         }
         return resolveImage(config, boot, entryOverrideId);
@@ -142,7 +153,7 @@ public static BootPlan resolve(
     private static BootPlan resolveBuiltin(
         @NonNull VMConfig config, @NonNull BootConfig boot) {
         return new BootPlan(
-            false, "", PATH_BUILTIN_KERNEL, PATH_BUILTIN_INITRD,
+            false, "", "", false, PATH_BUILTIN_KERNEL, PATH_BUILTIN_INITRD,
             builtinCmdline(config, boot), "DroidVM built-in kernel", false
         );
     }
@@ -214,7 +225,7 @@ else if (pinned != null)
         var initrd = new File(cacheDir, "initrd");
         var title = optStr(entry, "title");
         return new BootPlan(
-            false, "",
+            false, "", "", false,
             new File(cacheDir, "kernel").getAbsolutePath(),
             initrd.exists() ? initrd.getAbsolutePath() : "",
             cmdline,
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/CrosvmBackendInstance.java b/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/CrosvmBackendInstance.java
index f38b1320b..af3050084 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/CrosvmBackendInstance.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/CrosvmBackendInstance.java
@@ -4,6 +4,7 @@
 import static java.nio.charset.StandardCharsets.UTF_8;
 import static cn.classfun.droidvm.lib.Constants.DATA_DIR;
 import static cn.classfun.droidvm.lib.Constants.PATH_EDK2_FIRMWARE;
+import static cn.classfun.droidvm.lib.Constants.PATH_EDK2_VARS;
 import static cn.classfun.droidvm.lib.store.enums.Enums.optEnum;
 import static cn.classfun.droidvm.lib.store.vm.DisplayBackend.SIMPLEFB;
 import static cn.classfun.droidvm.lib.store.vm.DisplayBackend.VIRTIO_GPU;
@@ -230,12 +231,24 @@ private List<String> buildCommand() {
         if (boot.uefi) {
             // crosvm has no custom-firmware support; always builtin EDK2
             args.add(PATH_EDK2_FIRMWARE);
+            if (boot.varsEnabled) {
+                var vars = boot.vars.isEmpty() ? PATH_EDK2_VARS : boot.vars;
+                args.add("--pflash");
+                args.add(fmt("path=%s,block_size=%d", vars, pflashBlockSize(vars)));
+            }
         } else if (!boot.kernel.isEmpty()) {
             args.add(boot.kernel);
         }
         return args;
     }
 
+    private static long pflashBlockSize(@NonNull String path) {
+        long size = new File(path).length();
+        for (long blockSize : new long[]{262144, 65536, 4096})
+            if (size > 0 && size % blockSize == 0) return blockSize;
+        return 262144;
+    }
+
     private void buildDiskCommand(@NonNull List<String> args) {
         var disks = config.item.opt("disks", null);
         if (disks == null) return;
@@ -259,10 +272,6 @@ private void buildDiskCommand(@NonNull List<String> args) {
                     args.add("--pmem");
                     args.add(arg.toString());
                     break;
-                case PFLASH:
-                    args.add("--pflash");
-                    args.add(arg.toString());
-                    break;
                 case CDROM:
                     args.add("--scsi-block");
                     arg.append(",ro=true,type=cdrom,lock=false");
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/QemuBackendInstance.java b/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/QemuBackendInstance.java
index 5580c7461..c8e33c794 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/QemuBackendInstance.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/QemuBackendInstance.java
@@ -4,6 +4,7 @@
 import static java.nio.charset.StandardCharsets.UTF_8;
 import static cn.classfun.droidvm.lib.Constants.DATA_DIR;
 import static cn.classfun.droidvm.lib.Constants.PATH_EDK2_QEMU_FIRMWARE;
+import static cn.classfun.droidvm.lib.Constants.PATH_EDK2_VARS;
 import static cn.classfun.droidvm.lib.store.enums.Enums.optEnum;
 import static cn.classfun.droidvm.lib.utils.AssetUtils.getPrebuiltBinaryPath;
 import static cn.classfun.droidvm.lib.utils.FileUtils.deleteFile;
@@ -190,6 +191,11 @@ private List<String> buildCommand() {
         if (boot.uefi) {
             args.add("-bios");
             args.add(boot.firmware.isEmpty() ? PATH_EDK2_QEMU_FIRMWARE : boot.firmware);
+            if (boot.varsEnabled) {
+                var vars = boot.vars.isEmpty() ? PATH_EDK2_VARS : boot.vars;
+                args.add("-drive");
+                args.add(fmt("file=%s,if=pflash,format=raw", vars));
+            }
         }
         if (!boot.kernel.isEmpty()) {
             args.add("-kernel");
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/Constants.java b/app/src/main/java/cn/classfun/droidvm/lib/Constants.java
index 5ce2353db..852e863f8 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/Constants.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/Constants.java
@@ -18,6 +18,9 @@ public final class Constants {
     public static final String PATH_BUILTIN_INITRD = pathJoin(DATA_DIR, "/usr/share/droidvm/initramfs.img");
     public static final String PATH_EDK2_FIRMWARE = pathJoin(DATA_DIR, "/usr/share/droidvm/edk2-gunyah.fd");
     public static final String PATH_EDK2_QEMU_FIRMWARE = pathJoin(DATA_DIR, "/usr/share/droidvm/edk2-qemu.fd");
+    public static final String PATH_EDK2_VARS = pathJoin(DATA_DIR, "/usr/share/droidvm/edk2-gunyah.vars.fd");
+    /** crosvm arm64 pflash window: AARCH64_PLATFORM_MMIO_SIZE (8 MiB). */
+    public static final long PFLASH_MAX_SIZE = 8L * 1024 * 1024;
     public static final String GITHUB_ISSUE_URL = "https://github.com/Droid-VM/DroidVM/issues";
     // droidvm + daemon are CMake-built and shipped as APK assets. The
     // third-party daemons (gvswitch/pbridge/bridgedhcp/netbox) and lbx now
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/store/vm/BootConfig.java b/app/src/main/java/cn/classfun/droidvm/lib/store/vm/BootConfig.java
index b15e03af6..97a0f551b 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/store/vm/BootConfig.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/store/vm/BootConfig.java
@@ -17,7 +17,7 @@
  * <pre>
  * boot: {
  *   protocol: "uefi" | "linux",
- *   uefi:  { firmware },                       // empty = builtin EDK2
+ *   uefi:  { firmware, vars },                 // empty = builtin EDK2
  *   linux: {
  *     source: "manual" | "image",
  *     kernel, initrd, cmdline,                 // manual-source fields
@@ -136,6 +136,25 @@ public void setUefiFirmware(@NonNull String firmware) {
         uefi().set("firmware", firmware);
     }
 
+    /** Custom UEFI vars path; empty = builtin EDK2 vars. */
+    @NonNull
+    public String getUefiVars() {
+        return uefi().optString("vars", "");
+    }
+
+    public void setUefiVars(@NonNull String vars) {
+        uefi().set("vars", vars);
+    }
+
+    /** Whether the UEFI vars pflash is attached; off = no pflash. */
+    public boolean isUefiVarsEnabled() {
+        return uefi().optBoolean("vars_enabled", true);
+    }
+
+    public void setUefiVarsEnabled(boolean enabled) {
+        uefi().set("vars_enabled", enabled);
+    }
+
     // --- linux branch ---
 
     @NonNull
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/basic/VMEditBasicTab.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/basic/VMEditBasicTab.java
index 4d5f4173b..31ce2dc2c 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/basic/VMEditBasicTab.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/basic/VMEditBasicTab.java
@@ -241,4 +241,11 @@ public void saveConfig(@NonNull VMConfig config) {
     public ProtectedVM getCurrentProtectedVm() {
         return chooseProtectedVm.getSelectedItem();
     }
+
+    /** The backend as currently selected */
+    @NonNull
+    public VMBackend getCurrentBackend() {
+        var backend = chooseBackend.<VMBackend>getSelectedItem();
+        return backend == null ? VMBackend.DEFAULT : backend;
+    }
 }
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/boot/VMEditBootTab.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/boot/VMEditBootTab.java
index ace779d7b..0d3cbde55 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/boot/VMEditBootTab.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/boot/VMEditBootTab.java
@@ -2,6 +2,7 @@
 
 import static android.view.View.GONE;
 import static android.view.View.VISIBLE;
+import static cn.classfun.droidvm.lib.Constants.PFLASH_MAX_SIZE;
 import static cn.classfun.droidvm.lib.Constants.PATH_BUILTIN_INITRD;
 import static cn.classfun.droidvm.lib.Constants.PATH_BUILTIN_KERNEL;
 import static cn.classfun.droidvm.lib.Constants.PATH_MICRODROID_INITRD;
@@ -31,6 +32,7 @@
 import com.google.android.material.dialog.MaterialAlertDialogBuilder;
 import com.google.android.material.materialswitch.MaterialSwitch;
 
+import java.io.File;
 import java.util.ArrayList;
 import java.util.regex.Pattern;
 
@@ -38,6 +40,7 @@
 import cn.classfun.droidvm.lib.store.base.DataItem;
 import cn.classfun.droidvm.lib.store.vm.BootConfig;
 import cn.classfun.droidvm.lib.store.vm.ProtectedVM;
+import cn.classfun.droidvm.lib.store.vm.VMBackend;
 import cn.classfun.droidvm.lib.store.vm.VMConfig;
 import cn.classfun.droidvm.lib.store.vm.VMStore;
 import cn.classfun.droidvm.lib.ui.CopyableField;
@@ -63,6 +66,8 @@ public final class VMEditBootTab extends VMEditBaseTab {
     private DropdownRowWidget ddProtocol;
     private CollapsibleContainer containerUefi;
     private TextInputRowWidget inputUefiFirmware;
+    private SwitchRowWidget swUefiVarsEnabled;
+    private TextInputRowWidget inputUefiVars;
     private CollapsibleContainer containerKernel;
     private DropdownRowWidget ddSource;
     private View layoutImage;
@@ -105,6 +110,8 @@ public void initView() {
         ddProtocol = view.findViewById(R.id.dd_boot_protocol);
         containerUefi = view.findViewById(R.id.container_uefi);
         inputUefiFirmware = view.findViewById(R.id.input_uefi_firmware);
+        swUefiVarsEnabled = view.findViewById(R.id.sw_uefi_vars_enabled);
+        inputUefiVars = view.findViewById(R.id.input_uefi_vars);
         containerKernel = view.findViewById(R.id.container_kernel);
         ddSource = view.findViewById(R.id.dd_kernel_source);
         layoutImage = view.findViewById(R.id.layout_kernel_image);
@@ -157,6 +164,11 @@ public void initValue() {
             if (isImageMode() && scanned == null) rescan();
         });
         inputUefiFirmware.setIconButtonOnClickListener(this::showFirmwareBrowseDialog);
+        inputUefiVars.setIconButtonOnClickListener(this::showVarsBrowseDialog);
+        swUefiVarsEnabled.setOnCheckedChangeListener((btn, checked) -> {
+            inputUefiVars.setVisibility(checked ? VISIBLE : GONE);
+            refreshStoragePflash();
+        });
         inputKernel.setIconButtonOnClickListener(this::showKernelBrowseDialog);
         inputInitrd.setIconButtonOnClickListener(this::showInitrdBrowseDialog);
         btnRescan.setOnClickListener(v -> rescan());
@@ -192,6 +204,30 @@ private boolean isImageMode() {
             && source == BootConfig.LinuxSource.IMAGE;
     }
 
+    /** Live value of the UEFI vars (pflash) enable switch. */
+    public boolean isVarsEnabledLive() {
+        return protocol == BootConfig.Protocol.UEFI
+            && swUefiVarsEnabled != null && swUefiVarsEnabled.isChecked();
+    }
+
+    /** Re-render the storage tab's disk list so PFLASH availability updates. */
+    private void refreshStoragePflash() {
+        try {
+            var storage = (VMEditStorageTab) parent.getTab(VMEditTab.TAB_STORAGE);
+            if (storage != null) storage.refreshDisks();
+        } catch (Exception ignored) {
+        }
+    }
+    /** The backend as currently selected in the basic tab (before save). */
+    @NonNull
+    private VMBackend currentBackend() {
+        try {
+            var basic = (VMEditBasicTab) parent.getTab(VMEditTab.TAB_BASIC);
+            if (basic != null) return basic.getCurrentBackend();
+        } catch (Exception ignored) {
+        }
+        return VMBackend.DEFAULT;
+    }
     private void applyVisibility() {
         boolean uefi = protocol == BootConfig.Protocol.UEFI;
         containerUefi.setVisibility(uefi ? VISIBLE : GONE);
@@ -199,6 +235,9 @@ private void applyVisibility() {
         boolean image = source == BootConfig.LinuxSource.IMAGE;
         layoutImage.setVisibility(image ? VISIBLE : GONE);
         layoutManual.setVisibility(image ? GONE : VISIBLE);
+        if (uefi) {
+            inputUefiVars.setVisibility(isVarsEnabledLive() ? VISIBLE : GONE);
+        }
     }
 
     @Override
@@ -210,6 +249,8 @@ public void loadConfig(@NonNull VMConfig config) {
         ddProtocol.setText(protocol.getDisplayString(parent));
         ddSource.setText(source.getDisplayString(parent));
         inputUefiFirmware.setTextAndMoveCursor(boot.getUefiFirmware());
+        swUefiVarsEnabled.setChecked(boot.isUefiVarsEnabled());
+        inputUefiVars.setTextAndMoveCursor(boot.getUefiVars());
         inputKernel.setTextAndMoveCursor(boot.getKernel());
         inputInitrd.setTextAndMoveCursor(boot.getInitrd());
         bootDiskIndex = boot.getImageDisk();
@@ -234,6 +275,21 @@ public boolean validateInput(@NonNull VMStore store) {
                 inputUefiFirmware.setError(parent.getString(R.string.create_vm_error_path_invalid));
                 return false;
             }
+            var vars = inputUefiVars.getText();
+            inputUefiVars.setError(null);
+            if (isVarsEnabledLive() && !vars.isEmpty()) {
+                if (!checkFilePath(vars, true)) {
+                    inputUefiVars.setError(parent.getString(R.string.create_vm_error_path_invalid));
+                    return false;
+                }
+                // crosvm-only pflash size limit
+                if (currentBackend() == VMBackend.CROSVM
+                    && new File(vars).length() > PFLASH_MAX_SIZE) {
+                    inputUefiVars.setError(parent.getString(
+                        R.string.edit_vm_uefi_vars_too_large, PFLASH_MAX_SIZE / (1024 * 1024)));
+                    return false;
+                }
+            }
             return true;
         }
         if (source == BootConfig.LinuxSource.IMAGE) {
@@ -271,6 +327,8 @@ public void saveConfig(@NonNull VMConfig config) {
         var boot = BootConfig.of(config);
         boot.setProtocol(protocol);
         boot.setUefiFirmware(inputUefiFirmware.getText());
+        boot.setUefiVarsEnabled(isVarsEnabledLive());
+        boot.setUefiVars(inputUefiVars.getText());
         boot.setLinuxSource(source);
         boot.setKernel(inputKernel.getText());
         boot.setInitrd(inputInitrd.getText());
@@ -588,6 +646,29 @@ private void showFirmwareBrowseDialog() {
         );
     }
 
+    private void showVarsBrowseDialog() {
+        MenuItem.OnMenuItemClickListener listener = item -> {
+            var id = item.getItemId();
+            if (id == R.id.menu_firmware_builtin) {
+                inputUefiVars.setText("");
+            } else if (id == R.id.menu_firmware_external) {
+                parent.currentPicker = uri -> {
+                    if (uri != null)
+                        inputUefiVars.setTextAndMoveCursor(resolveUriPath(parent, uri));
+                    parent.currentPicker = null;
+                };
+                parent.filePickerLauncher.launch(new String[]{"*/*"});
+            }
+            return true;
+        };
+        MenuDialogBuilder.showSimple(
+            parent,
+            R.string.edit_vm_uefi_vars_browse_title,
+            R.menu.menu_vm_firmware_browse,
+            listener
+        );
+    }
+
     private void showKernelBrowseDialog() {
         MenuItem.OnMenuItemClickListener listener = item -> {
             onKernelBrowseClick(item);
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/storage/VMEditStorageTab.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/storage/VMEditStorageTab.java
index 9033e035c..5c516aa55 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/storage/VMEditStorageTab.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/storage/VMEditStorageTab.java
@@ -1,6 +1,7 @@
 package cn.classfun.droidvm.ui.vm.edit.storage;
 
 import static android.app.Activity.RESULT_OK;
+import static cn.classfun.droidvm.lib.Constants.PFLASH_MAX_SIZE;
 import static cn.classfun.droidvm.lib.utils.FileUtils.checkFileName;
 import static cn.classfun.droidvm.lib.utils.FileUtils.checkFilePath;
 import static cn.classfun.droidvm.lib.utils.StringUtils.resolveUriPath;
@@ -14,15 +15,22 @@
 import androidx.annotation.NonNull;
 import androidx.annotation.Nullable;
 
+import java.io.File;
 import java.util.HashSet;
 
 import cn.classfun.droidvm.R;
 import cn.classfun.droidvm.lib.store.base.DataItem;
+import cn.classfun.droidvm.lib.store.disk.DiskBus;
+import cn.classfun.droidvm.lib.store.enums.Enums;
+import cn.classfun.droidvm.lib.store.vm.VMBackend;
 import cn.classfun.droidvm.lib.store.vm.VMConfig;
 import cn.classfun.droidvm.lib.store.vm.VMStore;
 import cn.classfun.droidvm.ui.disk.action.DiskActionDialog;
 import cn.classfun.droidvm.ui.vm.edit.VMEditActivity;
 import cn.classfun.droidvm.ui.vm.edit.base.VMEditBaseTab;
+import cn.classfun.droidvm.ui.vm.edit.base.VMEditTab;
+import cn.classfun.droidvm.ui.vm.edit.basic.VMEditBasicTab;
+import cn.classfun.droidvm.ui.vm.edit.boot.VMEditBootTab;
 import cn.classfun.droidvm.ui.vm.edit.storage.dir.VMSharedDirEditAdapter;
 import cn.classfun.droidvm.ui.vm.edit.storage.disk.VMDiskEditAdapter;
 import cn.classfun.droidvm.ui.widgets.container.CardItemListView;
@@ -53,10 +61,24 @@ public void initValue() {
         diskAdapter = listDisks.setAdapter(VMDiskEditAdapter.class);
         diskAdapter.setOnBrowseFileListener(this::diskAdapterOnBrowseFile);
         diskAdapter.setOnImportOrCreateListener(this::diskAdapterOnImportOrCreate);
+        // no PFLASH while the boot tab's UEFI vars pflash is enabled
+        diskAdapter.setUefiVarsEnabledProvider(() -> {
+            try {
+                var boot = (VMEditBootTab) parent.getTab(VMEditTab.TAB_BOOT);
+                return boot == null || boot.isVarsEnabledLive();
+            } catch (Exception e) {
+                return true;
+            }
+        });
         sharedDirAdapter = listSharedDirs.setAdapter(VMSharedDirEditAdapter.class);
         sharedDirAdapter.setOnBrowseListener(this::sharedDirAdapterOnBrowse);
     }
 
+    // Refresh disk rows; PFLASH availability may have changed.
+    public void refreshDisks() {
+        if (diskAdapter != null) diskAdapter.notifyDataSetChanged();
+    }
+
     private void diskAdapterOnImportOrCreate(int pos) {
         Runnable onImportPickerUi = () -> parent.runOnUiThread(this::onImportPicker);
         pendingBrowsePosition = pos;
@@ -128,9 +150,18 @@ public void loadConfig(@NonNull VMConfig config) {
 
     @Override
     public boolean validateInput(@NonNull VMStore store) {
-        for (var disk : diskAdapter.getItems())
-            if (!checkFilePath(disk.getValue().optString("path", ""), true))
+        var crosvm = currentBackend() == VMBackend.CROSVM;
+        for (var disk : diskAdapter.getItems()) {
+            var d = disk.getValue();
+            var path = d.optString("path", "");
+            if (!checkFilePath(path, true))
                 return showValidateFailed(R.string.edit_vm_target_disk_path_invalid);
+            // crosvm-only pflash size limit
+            if (crosvm && Enums.optEnum(d, "bus", DiskBus.VIRTIO) == DiskBus.PFLASH
+                && new File(path).length() > PFLASH_MAX_SIZE)
+                return showValidateFailed(parent.getString(
+                    R.string.edit_vm_uefi_vars_too_large, PFLASH_MAX_SIZE / (1024 * 1024)));
+        }
         var set = new HashSet<String>();
         for (var dir : sharedDirAdapter.getItems()) {
             var d = dir.getValue();
@@ -146,6 +177,17 @@ public boolean validateInput(@NonNull VMStore store) {
         return true;
     }
 
+    /** The backend as currently selected in the basic tab (before save). */
+    @NonNull
+    private VMBackend currentBackend() {
+        try {
+            var basic = (VMEditBasicTab) parent.getTab(VMEditTab.TAB_BASIC);
+            if (basic != null) return basic.getCurrentBackend();
+        } catch (Exception ignored) {
+        }
+        return VMBackend.DEFAULT;
+    }
+
     @Override
     public void saveConfig(@NonNull VMConfig config) {
         config.item.set("disks", listDisks.getItems());
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/storage/disk/VMDiskEditAdapter.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/storage/disk/VMDiskEditAdapter.java
index f39dd4102..c8271fdc6 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/storage/disk/VMDiskEditAdapter.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/storage/disk/VMDiskEditAdapter.java
@@ -16,6 +16,7 @@
 import com.google.android.material.dialog.MaterialAlertDialogBuilder;
 
 import cn.classfun.droidvm.R;
+import cn.classfun.droidvm.lib.store.base.DataItem;
 import cn.classfun.droidvm.lib.store.disk.DiskBus;
 import cn.classfun.droidvm.lib.store.disk.DiskStore;
 import cn.classfun.droidvm.lib.store.enums.Enums;
@@ -25,8 +26,14 @@
 import cn.classfun.droidvm.ui.widgets.container.CardItemAdapter;
 
 public final class VMDiskEditAdapter extends CardItemAdapter<VMDiskEditViewHolder> {
+    @FunctionalInterface
+    public interface UefiVarsEnabledProvider {
+        boolean isEnabled();
+    }
+
     private OnItemClickListener browseFileListener;
     private OnItemClickListener importOrCreateListener;
+    private UefiVarsEnabledProvider uefiVarsEnabledProvider = () -> true;
     private boolean readonlyChanged = false;
     private boolean updatingViews = false;
 
@@ -47,6 +54,35 @@ public void setOnImportOrCreateListener(OnItemClickListener l) {
         this.importOrCreateListener = l;
     }
 
+    public void setUefiVarsEnabledProvider(@NonNull UefiVarsEnabledProvider provider) {
+        this.uefiVarsEnabledProvider = provider;
+    }
+
+    private boolean pflashAllowed(int position) {
+        if (uefiVarsEnabledProvider.isEnabled()) return false;
+        for (int i = 0; i < items.size(); i++) {
+            if (i == position) continue;
+            var d = items.get(i);
+            if (d.is(DataItem.Type.OBJECT)
+                && Enums.optEnum(d, "bus", DiskBus.VIRTIO) == DiskBus.PFLASH)
+                return false;
+        }
+        return true;
+    }
+
+    @NonNull
+    private DiskBus[] busOptions(int position) {
+        if (!pflashAllowed(position))
+            return new DiskBus[]{DiskBus.VIRTIO, DiskBus.SCSI, DiskBus.PMEM, DiskBus.CDROM};
+        return new DiskBus[]{DiskBus.VIRTIO, DiskBus.SCSI, DiskBus.PMEM, DiskBus.CDROM, DiskBus.PFLASH};
+    }
+
+    private static boolean containsPflash(@NonNull DiskBus[] options) {
+        for (var bus : options)
+            if (bus == DiskBus.PFLASH) return true;
+        return false;
+    }
+
     public void setPathAt(int position, String path) {
         if (position < 0 || position >= items.size()) return;
         var disk = items.get(position);
@@ -98,7 +134,15 @@ public void onBindViewHolder(@NonNull VMDiskEditViewHolder holder, int position)
         holder.unbindWatcher();
         holder.etPath.setText(disk.optString("path", ""));
         holder.switchReadonly.setChecked(disk.optBoolean("readonly", false));
-        holder.btnBus.configure(DiskBus.class, Enums.optEnum(disk, "bus", DiskBus.VIRTIO));
+        // unselectable PFLASH and fallback to VIRTIO.
+        var bus = Enums.optEnum(disk, "bus", DiskBus.VIRTIO);
+        var options = busOptions(position);
+        if (bus == DiskBus.PFLASH && !containsPflash(options)) {
+            bus = DiskBus.VIRTIO;
+            if (!updatingViews) disk.set("bus", bus);
+        }
+        holder.btnBus.setItems(options);
+        holder.btnBus.setSelectedItem(bus);
         holder.btnBus.setOnValueChangedListener((oldVal, newVal) -> {
             if (updatingViews) return;
             int pos = holder.getBindingAdapterPosition();
@@ -108,7 +152,14 @@ public void onBindViewHolder(@NonNull VMDiskEditViewHolder holder, int position)
             if (!readonlyChanged)
                 item.set("readonly", newVal == DiskBus.CDROM);
             try {
-                notifyItemChanged(pos);
+                // PFLASH exclusivity changes other rows' options, so a
+                // PFLASH switch needs a full refresh; any other
+                // bus change only affects this row.
+                if (oldVal == DiskBus.PFLASH || newVal == DiskBus.PFLASH) {
+                    notifyDataSetChanged();
+                } else {
+                    notifyItemChanged(pos);
+                }
             } catch (Exception ignored) {
             }
         });
@@ -135,8 +186,14 @@ public void afterTextChanged(Editable s) {
         });
         holder.btnDelete.setOnClickListener(v -> {
             int pos = holder.getBindingAdapterPosition();
-            if (pos != RecyclerView.NO_POSITION)
+            if (pos != RecyclerView.NO_POSITION) {
                 removeItem(pos);
+                // re-enable PFLASH for the remaining rows if it was the only one
+                try {
+                    notifyDataSetChanged();
+                } catch (Exception ignored) {
+                }
+            }
         });
     }
 
diff --git a/app/src/main/res/layout/partial_vm_edit_boot.xml b/app/src/main/res/layout/partial_vm_edit_boot.xml
index 47a7f6bef..016ba0f00 100644
--- a/app/src/main/res/layout/partial_vm_edit_boot.xml
+++ b/app/src/main/res/layout/partial_vm_edit_boot.xml
@@ -36,6 +36,25 @@
             app:ti_iconButtonHint="@string/edit_vm_disk_browse"
             app:ti_iconButtonIcon="@drawable/ic_open_in" />
 
+        <cn.classfun.droidvm.ui.widgets.row.SwitchRowWidget
+            android:id="@+id/sw_uefi_vars_enabled"
+            android:layout_width="match_parent"
+            android:layout_height="wrap_content"
+            android:checked="true"
+            android:icon="@drawable/ic_nav_disk"
+            android:text="@string/edit_vm_uefi_vars_enabled"
+            android:subtitle="@string/edit_vm_uefi_vars_enabled_subtitle" />
+
+        <cn.classfun.droidvm.ui.widgets.row.TextInputRowWidget
+            android:id="@+id/input_uefi_vars"
+            android:layout_width="match_parent"
+            android:layout_height="wrap_content"
+            android:hint="@string/edit_vm_uefi_vars"
+            android:icon="@drawable/ic_nav_disk"
+            android:inputType="text"
+            app:ti_iconButtonHint="@string/edit_vm_disk_browse"
+            app:ti_iconButtonIcon="@drawable/ic_open_in" />
+
         <TextView
             android:id="@+id/tv_uefi_hint"
             android:layout_width="match_parent"
diff --git a/app/src/main/res/values-zh-rCN/strings.xml b/app/src/main/res/values-zh-rCN/strings.xml
index 49185c03d..7b1bca2c0 100644
--- a/app/src/main/res/values-zh-rCN/strings.xml
+++ b/app/src/main/res/values-zh-rCN/strings.xml
@@ -298,6 +298,11 @@
     <string name="edit_vm_uefi_firmware_builtin">内置 EDK2</string>
     <string name="edit_vm_uefi_firmware_browse_title">选择 UEFI 固件</string>
     <string name="edit_vm_uefi_firmware_hint">自定义固件仅对 QEMU 后端生效\ncrosvm 始终使用内置 EDK2\nUEFI 引导 Linux 适配中,尚不可用;如需引导 Linux,请选择 Linux 内核引导方式</string>
+    <string name="edit_vm_uefi_vars">UEFI 变量(留空 = 内置 EDK2 变量)</string>
+    <string name="edit_vm_uefi_vars_browse_title">选择 UEFI 变量文件</string>
+    <string name="edit_vm_uefi_vars_too_large">对于 crosvm,pflash 镜像大小不能超过 %1$d MiB</string>
+    <string name="edit_vm_uefi_vars_enabled">启用 UEFI 变量(pflash)</string>
+    <string name="edit_vm_uefi_vars_enabled_subtitle">挂载 UEFI 变量存储。启用后,存储分区中不可再选择 PFLASH 总线。</string>
     <string name="edit_vm_kernel_source">内核来源</string>
     <string name="edit_vm_kernel_source_image">磁盘镜像</string>
     <string name="edit_vm_kernel_source_manual">手动指定</string>
diff --git a/app/src/main/res/values-zh-rTW/strings.xml b/app/src/main/res/values-zh-rTW/strings.xml
index 39c94825e..8e6e89cf6 100644
--- a/app/src/main/res/values-zh-rTW/strings.xml
+++ b/app/src/main/res/values-zh-rTW/strings.xml
@@ -298,6 +298,11 @@
     <string name="edit_vm_uefi_firmware_builtin">內建 EDK2</string>
     <string name="edit_vm_uefi_firmware_browse_title">選擇 UEFI 韌體</string>
     <string name="edit_vm_uefi_firmware_hint">自定義韌體僅對 QEMU 後端生效\ncrosvm 始終使用內建 EDK2\nUEFI 引導 Linux 適配中,尚不可用;如需引導 Linux,請選擇 Linux 核心引導方式</string>
+    <string name="edit_vm_uefi_vars">UEFI 變數(留空 = 內建 EDK2 變數)</string>
+    <string name="edit_vm_uefi_vars_browse_title">選擇 UEFI 變數檔案</string>
+    <string name="edit_vm_uefi_vars_too_large">對於 crosvm,pflash 鏡像大小不能超過 %1$d MiB</string>
+    <string name="edit_vm_uefi_vars_enabled">啟用 UEFI 變數(pflash)</string>
+    <string name="edit_vm_uefi_vars_enabled_subtitle">掛載 UEFI 變數儲存。啟用後,儲存區中不可再選擇 PFLASH 匯流排。</string>
     <string name="edit_vm_kernel_source">核心來源</string>
     <string name="edit_vm_kernel_source_image">磁碟映像</string>
     <string name="edit_vm_kernel_source_manual">手動指定</string>
diff --git a/app/src/main/res/values/strings.xml b/app/src/main/res/values/strings.xml
index 4532fc13b..3b406d53e 100644
--- a/app/src/main/res/values/strings.xml
+++ b/app/src/main/res/values/strings.xml
@@ -300,6 +300,11 @@
     <string name="edit_vm_uefi_firmware_builtin">Built-in EDK2</string>
     <string name="edit_vm_uefi_firmware_browse_title">Select UEFI firmware</string>
     <string name="edit_vm_uefi_firmware_hint">Custom firmware only takes effect on the QEMU backend\ncrosvm always uses the built-in EDK2\nBooting Linux via UEFI is still being adapted and is not usable yet -- to boot Linux, choose the Linux kernel boot protocol</string>
+    <string name="edit_vm_uefi_vars">UEFI vars (empty = built-in EDK2 vars)</string>
+    <string name="edit_vm_uefi_vars_browse_title">Select UEFI vars</string>
+    <string name="edit_vm_uefi_vars_too_large">For crosvm, pflash image size must not exceed %1$d MiB</string>
+    <string name="edit_vm_uefi_vars_enabled">Enable UEFI vars (pflash)</string>
+    <string name="edit_vm_uefi_vars_enabled_subtitle">Attach the UEFI variable store. While enabled, the PFLASH bus is unavailable in the storage section.</string>
     <string name="edit_vm_kernel_source">Kernel source</string>
     <string name="edit_vm_kernel_source_image">Disk image</string>
     <string name="edit_vm_kernel_source_manual">Manual</string>

From 0f2393704038664ed493afcbb55a8e188eb70ceb Mon Sep 17 00:00:00 2001
From: HuJK <gh@hujk.org>
Date: Sun, 30 Aug 2026 13:37:07 +0800
Subject: [PATCH 126/182] licensing: say the GPLv3 out loud, and allow an
 upstream relicense

LICENSE.txt has always been the full GPLv3, but not one source file said so:
397 Java files with no header at all, so the licence of a file could only be
inferred from the repository around it. Every source file now carries an
SPDX-License-Identifier line.

ADDITIONAL-PERMISSIONS is the part that is new rather than merely written
down. It lets anyone relicense this material under the terms an upstream
project requires, for the purpose of getting it merged there and only for
that -- which is what these changes exist for, and what a plain GPLv3 file
cannot do when the project it is aimed at is Apache-2.0 or BSD. Contributions
carry the permission because they are made under the project licence;
CONTRIBUTING.md asks for a DCO sign-off rather than a CLA, so nobody signs
away anything to hold it.

LICENSE.txt itself is left alone. It is reflowed rather than hard-wrapped the
way the FSF renders it, which is a cosmetic difference in a file that should
not be churned.
---
 ADDITIONAL-PERMISSIONS                        |  61 ++
 CONTRIBUTING.md                               |  32 +
 LICENSING.md                                  |  31 +
 .../java/cn/classfun/droidvm/DroidVMApp.java  |   3 +
 .../cn/classfun/droidvm/daemon/Daemon.java    |   3 +
 .../droidvm/daemon/console/ConsoleStream.java |   3 +
 .../daemon/console/FDPipeConsoleStream.java   |   3 +
 .../daemon/console/FDSocketConsoleStream.java |   3 +
 .../daemon/console/InputConsoleStream.java    |   3 +
 .../console/LocalSocketConsoleStream.java     |   3 +
 .../daemon/console/SimpleConsoleStream.java   |   3 +
 .../daemon/display/DaemonSystemContext.java   |   3 +
 .../daemon/display/NativeDisplayBinder.java   |   3 +
 .../droidvm/daemon/ipc/basic/AuthHandler.java |   3 +
 .../droidvm/daemon/ipc/basic/PingHandler.java |   3 +
 .../daemon/ipc/basic/SetAppConfig.java        |   3 +
 .../daemon/ipc/basic/VersionHandler.java      |   3 +
 .../daemon/ipc/network/AddAddressHandler.java |   3 +
 .../ipc/network/AddInterfaceHandler.java      |   3 +
 .../daemon/ipc/network/CreateHandler.java     |   3 +
 .../daemon/ipc/network/DeleteHandler.java     |   3 +
 .../daemon/ipc/network/ExistsHandler.java     |   3 +
 .../daemon/ipc/network/InfoHandler.java       |   3 +
 .../daemon/ipc/network/ListHandler.java       |   3 +
 .../ipc/network/ListInterfacesHandler.java    |   3 +
 .../ipc/network/ListUplinksHandler.java       |   3 +
 .../daemon/ipc/network/ModifyHandler.java     |   3 +
 .../daemon/ipc/network/PdReleaseHandler.java  |   3 +
 .../daemon/ipc/network/PdRenewHandler.java    |   3 +
 .../ipc/network/RemoveAddressHandler.java     |   3 +
 .../ipc/network/RemoveInterfaceHandler.java   |   3 +
 .../daemon/ipc/network/StartHandler.java      |   3 +
 .../daemon/ipc/network/StatusHandler.java     |   3 +
 .../daemon/ipc/network/StopHandler.java       |   3 +
 .../daemon/ipc/network/ToolLogHandler.java    |   3 +
 .../daemon/ipc/vm/BootScanHandler.java        |   3 +
 .../daemon/ipc/vm/ConsoleClearHandler.java    |   3 +
 .../daemon/ipc/vm/ConsoleHistoryHandler.java  |   3 +
 .../daemon/ipc/vm/ConsoleInfoHandler.java     |   3 +
 .../daemon/ipc/vm/ConsoleListHandler.java     |   3 +
 .../daemon/ipc/vm/ConsoleWriteHandler.java    |   3 +
 .../droidvm/daemon/ipc/vm/ControlHandler.java |   3 +
 .../droidvm/daemon/ipc/vm/CreateHandler.java  |   3 +
 .../droidvm/daemon/ipc/vm/DeleteHandler.java  |   3 +
 .../daemon/ipc/vm/DisplayAttachHandler.java   |   3 +
 .../droidvm/daemon/ipc/vm/ExistsHandler.java  |   3 +
 .../droidvm/daemon/ipc/vm/ExportHandler.java  |   3 +
 .../droidvm/daemon/ipc/vm/GetHandler.java     |   3 +
 .../droidvm/daemon/ipc/vm/ImportHandler.java  |   3 +
 .../droidvm/daemon/ipc/vm/InputHandler.java   |   3 +
 .../droidvm/daemon/ipc/vm/ListHandler.java    |   3 +
 .../droidvm/daemon/ipc/vm/ModifyHandler.java  |   3 +
 .../droidvm/daemon/ipc/vm/RebootHandler.java  |   3 +
 .../droidvm/daemon/ipc/vm/ResumeHandler.java  |   3 +
 .../droidvm/daemon/ipc/vm/StartHandler.java   |   3 +
 .../droidvm/daemon/ipc/vm/StatusHandler.java  |   3 +
 .../droidvm/daemon/ipc/vm/StopAllHandler.java |   3 +
 .../droidvm/daemon/ipc/vm/StopHandler.java    |   3 +
 .../droidvm/daemon/ipc/vm/SuspendHandler.java |   3 +
 .../droidvm/daemon/ipc/vm/VncInfoHandler.java |   3 +
 .../daemon/network/NetworkInstance.java       |   3 +
 .../daemon/network/NetworkInstanceStore.java  |   3 +
 .../daemon/network/NetworkWatchdog.java       |   3 +
 .../daemon/network/backend/BackendBase.java   |   3 +
 .../daemon/network/backend/BridgeBackend.java |   3 +
 .../daemon/network/backend/BridgeDhcp.java    |   3 +
 .../network/backend/DefaultRouterWatcher.java |   3 +
 .../network/backend/FirewallHelper.java       |   3 +
 .../network/backend/LinuxBridgeBackend.java   |   3 +
 .../daemon/network/backend/LinuxNetwork.java  |   3 +
 .../network/backend/ManagedProcess.java       |   3 +
 .../daemon/network/backend/Netbox.java        |   3 +
 .../daemon/network/backend/Pbridge.java       |   3 +
 .../network/backend/UplinkResolver.java       |   3 +
 .../backend/gvisor/GvisorBridgeBackend.java   |   3 +
 .../backend/gvisor/GvswitchClient.java        |   3 +
 .../backend/gvisor/GvswitchConfigBuilder.java |   3 +
 .../network/backend/iptables/ChainInfo.java   |   3 +
 .../backend/iptables/IptablesBackend.java     |   3 +
 .../iptables/IptablesNetworkInstance.java     |   3 +
 .../daemon/network/backend/pd/Duid.java       |   3 +
 .../droidvm/daemon/server/ClientHandler.java  |   3 +
 .../droidvm/daemon/server/ClientRequest.java  |   3 +
 .../droidvm/daemon/server/ClientResponse.java |   3 +
 .../daemon/server/RequestException.java       |   3 +
 .../droidvm/daemon/server/RequestHandler.java |   3 +
 .../daemon/server/RequestHandlerStore.java    |   3 +
 .../droidvm/daemon/server/Server.java         |   3 +
 .../droidvm/daemon/server/ServerContext.java  |   3 +
 .../classfun/droidvm/daemon/vm/BootPlan.java  |   3 +
 .../droidvm/daemon/vm/SerialPipe.java         |   3 +
 .../droidvm/daemon/vm/VMBackendInstance.java  |   3 +
 .../droidvm/daemon/vm/VMInstance.java         |   3 +
 .../droidvm/daemon/vm/VMInstanceStore.java    |   3 +
 .../droidvm/daemon/vm/VMStartResult.java      |   3 +
 .../daemon/vm/backend/BackendBase.java        |   3 +
 .../daemon/vm/backend/CrosvmBackend.java      |   3 +
 .../vm/backend/CrosvmBackendInstance.java     |   3 +
 .../vm/backend/NativeDisplayInputBridge.java  |   3 +
 .../daemon/vm/backend/QemuBackend.java        |   3 +
 .../vm/backend/QemuBackendInstance.java       | 186 +++-
 .../droidvm/daemon/vm/pkg/VMExportTask.java   |   3 +
 .../droidvm/daemon/vm/pkg/VMExportUtils.java  |   3 +
 .../droidvm/daemon/vm/pkg/VMImportTask.java   |   3 +
 .../droidvm/daemon/vm/pkg/VMImportUtils.java  |   3 +
 .../cn/classfun/droidvm/lib/Constants.java    |   3 +
 .../cn/classfun/droidvm/lib/api/ApiInfo.java  |   3 +
 .../classfun/droidvm/lib/api/ApiManager.java  |   3 +
 .../droidvm/lib/api/ApiServiceInfo.java       |   3 +
 .../cn/classfun/droidvm/lib/api/Privacy.java  |   3 +
 .../droidvm/lib/archive/Compression.java      |   3 +
 .../lib/archive/LimitedInputStream.java       |   3 +
 .../lib/archive/OutputStreamLimiter.java      |   3 +
 .../archive/RandomAccessFileOutputStream.java |   3 +
 .../droidvm/lib/archive/TarReader.java        |   3 +
 .../droidvm/lib/archive/TarWriter.java        |   3 +
 .../classfun/droidvm/lib/crypt/HashFile.java  |   3 +
 .../classfun/droidvm/lib/crypt/HashItem.java  |   3 +
 .../droidvm/lib/daemon/DaemonClient.java      |   3 +
 .../droidvm/lib/daemon/DaemonConnection.java  |   3 +
 .../droidvm/lib/daemon/DaemonHelper.java      |   3 +
 .../lib/daemon/ForegroundCallback.java        |   3 +
 .../droidvm/lib/daemon/PendingRequest.java    |   3 +
 .../classfun/droidvm/lib/daemon/Protocol.java |   3 +
 .../droidvm/lib/daemon/RequestContext.java    |   3 +
 .../droidvm/lib/daemon/VMEventHandler.java    |   3 +
 .../classfun/droidvm/lib/data/CrosvmExit.java |   3 +
 .../cn/classfun/droidvm/lib/data/Images.java  |   3 +
 .../classfun/droidvm/lib/data/Language.java   |   3 +
 .../cn/classfun/droidvm/lib/data/License.java |   3 +
 .../droidvm/lib/data/QcomChipName.java        |   3 +
 .../droidvm/lib/data/QcomGunyahSupports.java  |   3 +
 .../cn/classfun/droidvm/lib/data/Repos.java   |   3 +
 .../classfun/droidvm/lib/diag/LogHelper.java  |   3 +
 .../droidvm/lib/diag/LogHelperHandler.java    |   3 +
 .../handler/BadSM8650HostKernelHandler.java   |   3 +
 .../diag/handler/HugePageFaultHandler.java    |   3 +
 .../OsKernelWithoutRestrictPoolHandler.java   |   3 +
 .../UnsupportedGunyahVersionHandler.java      |   3 +
 .../handler/UnsupportedSandboxHandler.java    |   3 +
 .../lib/download/DiskDownloadManager.java     |   3 +
 .../lib/download/DiskDownloadService.java     |   3 +
 .../droidvm/lib/natives/NativeProcess.java    |   3 +
 .../droidvm/lib/natives/UnixHelper.java       |   3 +
 .../droidvm/lib/network/FDSocket.java         |   3 +
 .../droidvm/lib/network/IPAddress.java        |   3 +
 .../droidvm/lib/network/IPNetwork.java        |   3 +
 .../droidvm/lib/network/IPv4Address.java      |   3 +
 .../droidvm/lib/network/IPv4Network.java      |   3 +
 .../droidvm/lib/network/IPv6Address.java      |   3 +
 .../droidvm/lib/network/IPv6Network.java      |   3 +
 .../cn/classfun/droidvm/lib/pkg/BootFile.java |   3 +
 .../classfun/droidvm/lib/pkg/DiskEntry.java   |   3 +
 .../cn/classfun/droidvm/lib/pkg/DiskRef.java  |   3 +
 .../droidvm/lib/pkg/PackageConstants.java     |   3 +
 .../droidvm/lib/pkg/PackageHeader.java        |   3 +
 .../droidvm/lib/pkg/PackageInput.java         |   3 +
 .../droidvm/lib/pkg/PackageManifest.java      |   3 +
 .../cn/classfun/droidvm/lib/pkg/Phase.java    |   3 +
 .../classfun/droidvm/lib/run/RunContext.java  |   3 +
 .../classfun/droidvm/lib/run/RunResult.java   |   3 +
 .../droidvm/lib/run/root/RootRunContext.java  |   3 +
 .../droidvm/lib/run/root/RootRunResult.java   |   3 +
 .../lib/run/system/SystemRunContext.java      |   3 +
 .../lib/run/system/SystemRunResult.java       |   3 +
 .../classfun/droidvm/lib/size/SizeNumber.java |   3 +
 .../classfun/droidvm/lib/size/SizeUnit.java   |   3 +
 .../classfun/droidvm/lib/size/SizeUtils.java  |   3 +
 .../droidvm/lib/store/base/DataConfig.java    |   3 +
 .../droidvm/lib/store/base/DataItem.java      |   3 +
 .../droidvm/lib/store/base/DataStore.java     |   3 +
 .../droidvm/lib/store/base/JSONSerialize.java |   3 +
 .../droidvm/lib/store/base/RingBuffer.java    |   3 +
 .../droidvm/lib/store/disk/DiskBus.java       |   3 +
 .../droidvm/lib/store/disk/DiskConfig.java    |   3 +
 .../droidvm/lib/store/disk/DiskStore.java     |   3 +
 .../droidvm/lib/store/enums/ColorEnum.java    |   3 +
 .../droidvm/lib/store/enums/EnumPicker.java   |   3 +
 .../droidvm/lib/store/enums/Enums.java        |   3 +
 .../droidvm/lib/store/enums/StringEnum.java   |   3 +
 .../droidvm/lib/store/network/BridgeType.java |   3 +
 .../droidvm/lib/store/network/Ipv6Source.java |   3 +
 .../lib/store/network/NetworkConfig.java      |   3 +
 .../store/network/NetworkConfigValidator.java |   3 +
 .../lib/store/network/NetworkState.java       |   3 +
 .../lib/store/network/NetworkStore.java       |   3 +
 .../droidvm/lib/store/network/UplinkMode.java |   3 +
 .../droidvm/lib/store/network/VlanConfig.java |   3 +
 .../droidvm/lib/store/vm/BootConfig.java      |   3 +
 .../droidvm/lib/store/vm/DisplayBackend.java  |   3 +
 .../classfun/droidvm/lib/store/vm/GpuApi.java |   3 +
 .../droidvm/lib/store/vm/GpuBackend.java      |   3 +
 .../droidvm/lib/store/vm/LendMthpMode.java    |   3 +
 .../droidvm/lib/store/vm/NativeDisplay.java   |   3 +
 .../droidvm/lib/store/vm/PortProtocol.java    |   3 +
 .../droidvm/lib/store/vm/ProtectedVM.java     |   3 +
 .../droidvm/lib/store/vm/SharedDirCache.java  |   3 +
 .../droidvm/lib/store/vm/SharedDirType.java   |   3 +
 .../droidvm/lib/store/vm/VMBackend.java       |   3 +
 .../droidvm/lib/store/vm/VMConfig.java        | 110 ++
 .../droidvm/lib/store/vm/VMHypervisor.java    |   3 +
 .../droidvm/lib/store/vm/VMNicConfig.java     |   3 +
 .../droidvm/lib/store/vm/VMState.java         |   3 +
 .../droidvm/lib/store/vm/VMStore.java         |   3 +
 .../droidvm/lib/ui/BackAskHelper.java         |   3 +
 .../droidvm/lib/ui/CopyableField.java         |   3 +
 .../droidvm/lib/ui/DragTouchListener.java     |   3 +
 .../droidvm/lib/ui/IconItemAdapter.java       |   3 +
 .../droidvm/lib/ui/ImeInsetsApplier.java      |   3 +
 .../droidvm/lib/ui/ImeInsetsExempt.java       |   3 +
 .../classfun/droidvm/lib/ui/MaterialMenu.java |   3 +
 .../droidvm/lib/ui/MenuDialogBuilder.java     |   3 +
 .../lib/ui/NotificationPermission.java        |   3 +
 .../lib/ui/SimpleAdapterDataObserver.java     |   3 +
 .../droidvm/lib/ui/SimpleTextWatcher.java     |   3 +
 .../droidvm/lib/ui/SwipeableTabActivity.java  |   3 +
 .../droidvm/lib/ui/TabSwipeHelper.java        |   3 +
 .../cn/classfun/droidvm/lib/ui/UIContext.java |   3 +
 .../termux/SimpleTerminalSessionClient.java   |   3 +
 .../ui/termux/SimpleTerminalViewClient.java   |   3 +
 .../droidvm/lib/ui/termux/TerminalFonts.java  |   3 +
 .../droidvm/lib/utils/AssetUtils.java         |  23 +
 .../droidvm/lib/utils/BinaryUtils.java        |   3 +
 .../classfun/droidvm/lib/utils/CpuUtils.java  |   3 +
 .../classfun/droidvm/lib/utils/FileUtils.java |   3 +
 .../droidvm/lib/utils/ImageUtils.java         |   3 +
 .../classfun/droidvm/lib/utils/JsonUtils.java |   3 +
 .../classfun/droidvm/lib/utils/NetUtils.java  |   3 +
 .../droidvm/lib/utils/ProcessUtils.java       |   3 +
 .../classfun/droidvm/lib/utils/RunUtils.java  |   3 +
 .../droidvm/lib/utils/ShareUtils.java         |   3 +
 .../droidvm/lib/utils/StringUtils.java        |   3 +
 .../droidvm/lib/utils/ThreadUtils.java        |   3 +
 .../cn/classfun/droidvm/lib/utils/Try.java    |   3 +
 .../classfun/droidvm/ui/SplashActivity.java   |   3 +
 .../ui/agent/AgentOperationActivity.java      |   3 +
 .../droidvm/ui/agent/base/AgentVM.java        |   3 +
 .../droidvm/ui/agent/base/BaseAction.java     |   3 +
 .../password/ChangePasswordActivity.java      |   3 +
 .../ui/agent/password/PasswordAction.java     |   3 +
 .../ui/disk/action/DiskActionDialog.java      |   3 +
 .../ui/disk/action/DiskCloneDialog.java       |   3 +
 .../ui/disk/action/DiskResizeDialog.java      |   3 +
 .../ui/disk/action/DiskSetFormatDialog.java   |   3 +
 .../droidvm/ui/disk/create/DiskCompress.java  |   3 +
 .../ui/disk/create/DiskCreateActivity.java    |   3 +
 .../droidvm/ui/disk/create/DiskFormat.java    |   3 +
 .../ui/disk/download/ImportURLActivity.java   |   3 +
 .../droidvm/ui/disk/images/FlatImage.java     |   3 +
 .../droidvm/ui/disk/images/ImageAdapter.java  |   3 +
 .../ui/disk/images/ImagePickerDialog.java     |   3 +
 .../ui/disk/images/ImageViewHolder.java       |   3 +
 .../ui/disk/images/ImportImagesActivity.java  |   3 +
 .../ui/disk/info/DiskInfoActivity.java        |   3 +
 .../ui/disk/info/base/DiskInfoBaseTab.java    |   3 +
 .../ui/disk/info/base/DiskInfoTab.java        |   3 +
 .../ui/disk/info/info/DiskInfoInfoTab.java    |   3 +
 .../info/snapshot/DiskInfoSnapshotTab.java    |   3 +
 .../snapshot/DiskSnapshotEntryAdapter.java    |   3 +
 .../snapshot/DiskSnapshotEntryViewHolder.java |   3 +
 .../ui/disk/info/tree/DiskInfoTreeTab.java    |   3 +
 .../disk/info/tree/DiskTreeEntryAdapter.java  |   3 +
 .../info/tree/DiskTreeEntryViewHolder.java    |   3 +
 .../ui/disk/lxc/ImportLxcImagesActivity.java  |   3 +
 .../droidvm/ui/disk/lxc/LxcImage.java         |   3 +
 .../droidvm/ui/disk/lxc/LxcImageParser.java   |   3 +
 .../disk/operation/DiskOperationActivity.java |   3 +
 .../disk/operation/ImageCommandGenerate.java  |   3 +
 .../ui/hugepage/AcquireContainerView.java     |   3 +
 .../droidvm/ui/hugepage/HugePageActivity.java |   3 +
 .../droidvm/ui/hugepage/HugePageColor.java    |   3 +
 .../droidvm/ui/hugepage/HugePageModel.java    |   3 +
 .../droidvm/ui/hugepage/HugePageProcess.java  |   3 +
 .../ui/hugepage/HugePageProcessActivity.java  |   3 +
 .../ui/hugepage/HugePageProcessAdapter.java   |   3 +
 .../droidvm/ui/hugepage/SegmentedBar.java     |   3 +
 .../classfun/droidvm/ui/logs/LogAdapter.java  |   3 +
 .../droidvm/ui/logs/LogViewHolder.java        |   3 +
 .../droidvm/ui/logs/LogsActivity.java         |   3 +
 .../droidvm/ui/main/MainActivity.java         |   3 +
 .../droidvm/ui/main/base/BaseViewHolder.java  |   3 +
 .../ui/main/base/MainBaseFragment.java        |   3 +
 .../ui/main/base/MainFragmentEnum.java        |   3 +
 .../ui/main/base/list/DataAdapter.java        |   3 +
 .../ui/main/base/list/MainListFragment.java   |   3 +
 .../base/stateful/MainStatefulFragment.java   |   3 +
 .../main/base/stateful/StatefulAdapter.java   |   3 +
 .../droidvm/ui/main/disk/DiskAdapter.java     |   3 +
 .../droidvm/ui/main/disk/ImageInfo.java       |   3 +
 .../ui/main/disk/MainDiskFragment.java        |   3 +
 .../ui/main/home/MainHomeFragment.java        |   3 +
 .../ui/main/network/MainNetworkFragment.java  |   3 +
 .../ui/main/network/NetworkAdapter.java       |   3 +
 .../ui/main/settings/ApiManagerDialog.java    |   3 +
 .../ui/main/settings/ApiServiceAdapter.java   |   3 +
 .../main/settings/ApiServiceViewHolder.java   |   3 +
 .../ui/main/settings/LicenseListAdapter.java  |   3 +
 .../main/settings/MainSettingsFragment.java   |   3 +
 .../main/settings/SoftwareLicenseDialog.java  |   3 +
 .../droidvm/ui/main/vm/MainVMFragment.java    |   3 +
 .../droidvm/ui/main/vm/VMAdapter.java         |   3 +
 .../droidvm/ui/network/NetworkActions.java    |   3 +
 .../ui/network/edit/NetworkEditActivity.java  |   3 +
 .../ui/network/edit/VlanCardBinder.java       |   3 +
 .../ui/network/info/NetworkInfoActivity.java  |   3 +
 .../network/info/NetworkToolLogActivity.java  |   3 +
 .../droidvm/ui/setup/SetupActivity.java       |   3 +
 .../ui/setup/base/BaseCheckStepFragment.java  |  19 +
 .../ui/setup/base/BaseStepFragment.java       |   3 +
 .../ui/setup/step/DoneStepFragment.java       |   3 +
 .../ui/setup/step/ExtractStepFragment.java    |   3 +
 .../ui/setup/step/PrivacyStepFragment.java    |   3 +
 .../ui/setup/step/RootStepFragment.java       |   3 +
 .../ui/setup/step/SocStepFragment.java        |   3 +
 .../ui/setup/step/StartStepFragment.java      |   3 +
 .../ui/setup/step/StorageStepFragment.java    |   3 +
 .../step/VirtualizationStepFragment.java      |   3 +
 .../droidvm/ui/update/UpdateDialog.java       |   3 +
 .../droidvm/ui/update/UpdateInfo.java         |   3 +
 .../droidvm/ui/update/VersionCheck.java       |   3 +
 .../droidvm/ui/vm/NicLeaseAllocator.java      |   3 +
 .../cn/classfun/droidvm/ui/vm/VMActions.java  |   3 +
 .../droidvm/ui/vm/boot/BootEntries.java       |   3 +
 .../droidvm/ui/vm/boot/BootMenuDialog.java    |   3 +
 .../ui/vm/console/VMConsoleActivity.java      |   3 +
 .../ui/vm/console/VMConsoleRouter.java        |   3 +
 .../vm/display/base/BaseExtraKeysAdapter.java |   3 +
 .../display/base/DisplayExtraKeysPanel.java   |   3 +
 .../vm/display/base/DisplayPresentation.java  |   3 +
 .../vm/display/base/DisplayTouchPadPanel.java |   3 +
 .../ui/vm/display/base/KeyListener.java       |   3 +
 .../ui/vm/display/base/UsbHidInput.java       |   3 +
 .../droidvm/ui/vm/display/base/X11Keymap.java |   3 +
 .../display/DisplayProvider.java              |   3 +
 .../display/VMNativeDisplayActivity.java      |   3 +
 .../nativedisplay/input/DirectInputSink.java  |   3 +
 .../nativedisplay/input/EvdevEncoder.java     |   3 +
 .../nativedisplay/input/InputForwarder.java   |   3 +
 .../nativedisplay/input/KeyCodeMapper.java    |   3 +
 .../input/NativeExtraKeysPanel.java           |   3 +
 .../input/NativeKeyboardEditText.java         |   3 +
 .../input/TouchScaleCalculator.java           |   3 +
 .../vm/display/vnc/base/BaseVncActivity.java  |   3 +
 .../ui/vm/display/vnc/base/VncClient.java     |   3 +
 .../vm/display/vnc/base/VncDisplayView.java   |   3 +
 .../vnc/display/VMVncDisplayActivity.java     |   3 +
 .../display/VMVncPresentationActivity.java    |   3 +
 .../display/vnc/input/VncExtraKeysPanel.java  |   3 +
 .../display/vnc/input/VncTouchPadPanel.java   |   3 +
 .../droidvm/ui/vm/edit/VMEditActivity.java    |  49 +-
 .../ui/vm/edit/base/VMEditBaseTab.java        |   3 +
 .../droidvm/ui/vm/edit/base/VMEditTab.java    |   3 +
 .../ui/vm/edit/basic/VMEditBasicTab.java      | 292 +++++-
 .../ui/vm/edit/boot/VMEditBootTab.java        |   3 +
 .../vm/edit/graphics/VMEditGraphicsTab.java   | 980 +++++++++++++++---
 .../ui/vm/edit/network/VMEditNetworkTab.java  |   3 +
 .../ui/vm/edit/network/VMNetEditAdapter.java  |   3 +
 .../vm/edit/network/VMNetEditViewHolder.java  |   3 +
 .../ui/vm/edit/storage/VMEditStorageTab.java  |   3 +
 .../storage/dir/VMSharedDirEditAdapter.java   |   3 +
 .../dir/VMSharedDirEditViewHolder.java        |   3 +
 .../edit/storage/disk/VMDiskEditAdapter.java  |   3 +
 .../storage/disk/VMDiskEditViewHolder.java    |   3 +
 .../droidvm/ui/vm/info/ConsoleButton.java     |   3 +
 .../droidvm/ui/vm/info/VMInfoActivity.java    |   3 +
 .../vm/pkg/exports/VMPkgExportActivity.java   |   3 +
 .../pkg/exports/VMPkgExportDiskAdapter.java   |   3 +
 .../ui/vm/pkg/imports/NetworkImportMode.java  |   3 +
 .../vm/pkg/imports/VMPkgImportActivity.java   |   3 +
 .../pkg/imports/VMPkgImportDiskAdapter.java   |   3 +
 .../imports/VMPkgImportNetworkAdapter.java    |   3 +
 .../ui/widgets/container/CardItemAdapter.java |   3 +
 .../widgets/container/CardItemListView.java   |   3 +
 .../container/CollapsibleContainer.java       |   3 +
 .../ui/widgets/row/ChooseRowWidget.java       |   3 +
 .../ui/widgets/row/DropdownRowWidget.java     |   3 +
 .../ui/widgets/row/SwitchRowWidget.java       |   3 +
 .../ui/widgets/row/TextInputRowWidget.java    |   3 +
 .../droidvm/ui/widgets/row/TextRowWidget.java |   3 +
 .../ui/widgets/tools/DownloadWidget.java      |   3 +
 .../widgets/tools/KernelAnalysisWidget.java   |   3 +
 .../ui/widgets/tools/PickerButtonWidget.java  |   3 +
 .../res/layout/partial_vm_edit_graphics.xml   | 674 +++++++-----
 383 files changed, 3112 insertions(+), 461 deletions(-)
 create mode 100644 ADDITIONAL-PERMISSIONS
 create mode 100644 CONTRIBUTING.md
 create mode 100644 LICENSING.md

diff --git a/ADDITIONAL-PERMISSIONS b/ADDITIONAL-PERMISSIONS
new file mode 100644
index 000000000..987ba2602
--- /dev/null
+++ b/ADDITIONAL-PERMISSIONS
@@ -0,0 +1,61 @@
+Additional permissions under GNU GPL version 3, section 7
+=========================================================
+
+These additional permissions apply to the parts of this work copyrighted by
+the Droid-VM organization and by contributors to this project. They do not
+apply to material copyrighted by others -- in particular, material inherited
+from the upstream project this repository is derived from, which remains under
+its own terms and is not affected by anything below.
+
+
+1. Upstream contribution
+------------------------
+
+You may modify this material and distribute the result under the license terms
+that an Upstream Project requires of contributions to it, for the sole purpose
+of having that material included in the Upstream Project's official repository.
+
+This permission takes effect only for material that the Upstream Project
+accepts and publishes. Proposing material to an Upstream Project -- opening a
+merge request, posting a patch, or any other act of submission -- does not by
+itself place that material under any license other than the GNU GPL. Material
+that is not accepted remains under the GNU GPL alone.
+
+Once an Upstream Project has published material under its own license, that
+license governs the copy the Upstream Project published. Nothing in this
+document restricts what anyone may do with that copy.
+
+This permission does not authorise distribution under any other license for any
+other purpose. In particular, it does not authorise distributing this material
+under a permissive license to the public at large, to a fork, or to a
+redistributor, whether or not an Upstream Project was also asked to take it.
+
+
+2. Upstream Projects
+--------------------
+
+"Upstream Project" means one of the following, and no others:
+
+
+
+An Upstream Project's "official repository" is the repository named above, or a
+repository that project's own maintainers designate as its successor. A fork,
+a mirror, a vendored copy, and a redistribution are not official repositories.
+
+
+3. Notes
+--------
+
+Under GPL version 3 section 7, a recipient may remove these additional
+permissions from a copy they convey. Doing so does not affect the terms on
+which the permissions are offered here, and does not withdraw them from anyone
+who received them.
+
+Adding permissions on top of the GNU GPL does not restrict any freedom the GPL
+grants. Every recipient keeps the full GPL grant regardless of whether they use
+anything in this document.
+
+Contributions to this project are made under this project's license, which
+includes these additional permissions. A contributor therefore does not need to
+sign a separate agreement for their contribution to be eligible for upstream
+submission under section 1. See CONTRIBUTING.md.
diff --git a/CONTRIBUTING.md b/CONTRIBUTING.md
new file mode 100644
index 000000000..903a743a9
--- /dev/null
+++ b/CONTRIBUTING.md
@@ -0,0 +1,32 @@
+# Contributing
+
+## Sign-off
+
+Every commit must carry a `Signed-off-by:` line certifying the
+[Developer Certificate of Origin 1.1](https://developercertificate.org/):
+
+    git commit -s
+
+## What signing off means here
+
+The DCO asks you to certify that you have the right to submit your work under
+the license this project uses. For this project that license is the GNU GPL
+**plus the additional permissions in `ADDITIONAL-PERMISSIONS`**, so a
+contribution made under it carries those permissions too.
+
+That is deliberate, and it is why this project asks for a DCO rather than a
+CLA. The additional permissions let anyone relicense material from this project
+in order to get it accepted into the upstream project it belongs in. If
+contributions did not carry those permissions, every contribution would become
+a piece of the tree that could never be sent upstream, and the permission would
+quietly stop meaning anything as the project grew.
+
+You keep your copyright. Nothing is assigned to anyone.
+
+## Do not sign off on someone else's license
+
+If you are contributing material you did not write -- code ported from another
+project, a header copied from a kernel, a function translated from elsewhere --
+say so in the file and keep that material under its own license. Do not put a
+project SPDX tag on it. Several files in these repositories are in exactly that
+position and are marked accordingly.
diff --git a/LICENSING.md b/LICENSING.md
new file mode 100644
index 000000000..bedb16593
--- /dev/null
+++ b/LICENSING.md
@@ -0,0 +1,31 @@
+# Licensing
+
+This repository holds two kinds of material and they are licensed differently.
+
+## Material inherited from upstream
+
+
+
+Every file that came from an upstream project stays under that project's
+license. Nothing here relicenses it, and modifications to those files do not
+relicense them either — a patched upstream file is still an upstream file.
+
+## Material written for DroidVM
+
+Files carrying `SPDX-License-Identifier: GPL-3.0-or-later` are DroidVM work
+and are licensed under the GNU GPL, version 3 or later, **with the
+additional permissions in `ADDITIONAL-PERMISSIONS`**.
+
+Those permissions exist so this work can go upstream. They let anyone
+relicense it under the terms an upstream project requires, for the purpose of
+getting it merged there — and only for that purpose. Once upstream publishes
+it, upstream's license governs that copy.
+
+## Third-party material that is neither
+
+None. The app is DroidVM work throughout; `app/src/main/java/cn/classfun/droidvm`
+is the only source tree and nothing is vendored into it.
+
+## Contributing
+
+See `CONTRIBUTING.md`. Sign-off is required; there is no CLA.
diff --git a/app/src/main/java/cn/classfun/droidvm/DroidVMApp.java b/app/src/main/java/cn/classfun/droidvm/DroidVMApp.java
index 4d6a266eb..eaa088420 100644
--- a/app/src/main/java/cn/classfun/droidvm/DroidVMApp.java
+++ b/app/src/main/java/cn/classfun/droidvm/DroidVMApp.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm;
 
 import android.app.Application;
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/Daemon.java b/app/src/main/java/cn/classfun/droidvm/daemon/Daemon.java
index 6db9c1229..8389dfb5e 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/Daemon.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/Daemon.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.daemon;
 
 import static android.os.Process.myPid;
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/console/ConsoleStream.java b/app/src/main/java/cn/classfun/droidvm/daemon/console/ConsoleStream.java
index 023fbe257..ca69dbb76 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/console/ConsoleStream.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/console/ConsoleStream.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.daemon.console;
 
 import static java.nio.charset.StandardCharsets.UTF_8;
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/console/FDPipeConsoleStream.java b/app/src/main/java/cn/classfun/droidvm/daemon/console/FDPipeConsoleStream.java
index 3525a905e..d1ed98317 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/console/FDPipeConsoleStream.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/console/FDPipeConsoleStream.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.daemon.console;
 
 import android.os.ParcelFileDescriptor;
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/console/FDSocketConsoleStream.java b/app/src/main/java/cn/classfun/droidvm/daemon/console/FDSocketConsoleStream.java
index 7e4fe5be8..0dd9d22c5 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/console/FDSocketConsoleStream.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/console/FDSocketConsoleStream.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.daemon.console;
 
 import androidx.annotation.NonNull;
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/console/InputConsoleStream.java b/app/src/main/java/cn/classfun/droidvm/daemon/console/InputConsoleStream.java
index bb04720e6..15d3fd4ab 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/console/InputConsoleStream.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/console/InputConsoleStream.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.daemon.console;
 
 import androidx.annotation.NonNull;
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/console/LocalSocketConsoleStream.java b/app/src/main/java/cn/classfun/droidvm/daemon/console/LocalSocketConsoleStream.java
index 5aa42749b..dc51f3817 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/console/LocalSocketConsoleStream.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/console/LocalSocketConsoleStream.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.daemon.console;
 
 import android.net.LocalSocket;
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/console/SimpleConsoleStream.java b/app/src/main/java/cn/classfun/droidvm/daemon/console/SimpleConsoleStream.java
index 1f268d986..6b63881cc 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/console/SimpleConsoleStream.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/console/SimpleConsoleStream.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.daemon.console;
 
 import androidx.annotation.NonNull;
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/display/DaemonSystemContext.java b/app/src/main/java/cn/classfun/droidvm/daemon/display/DaemonSystemContext.java
index e5e4c1f07..c6bc56678 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/display/DaemonSystemContext.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/display/DaemonSystemContext.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.daemon.display;
 
 import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/display/NativeDisplayBinder.java b/app/src/main/java/cn/classfun/droidvm/daemon/display/NativeDisplayBinder.java
index 6b866490b..65056c6c1 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/display/NativeDisplayBinder.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/display/NativeDisplayBinder.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.daemon.display;
 
 import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/ipc/basic/AuthHandler.java b/app/src/main/java/cn/classfun/droidvm/daemon/ipc/basic/AuthHandler.java
index c918cbf48..400d8bb94 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/ipc/basic/AuthHandler.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/ipc/basic/AuthHandler.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.daemon.ipc.basic;
 
 import static cn.classfun.droidvm.lib.daemon.DaemonHelper.getTokenFile;
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/ipc/basic/PingHandler.java b/app/src/main/java/cn/classfun/droidvm/daemon/ipc/basic/PingHandler.java
index 989d4377e..3e9761807 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/ipc/basic/PingHandler.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/ipc/basic/PingHandler.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.daemon.ipc.basic;
 
 import androidx.annotation.NonNull;
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/ipc/basic/SetAppConfig.java b/app/src/main/java/cn/classfun/droidvm/daemon/ipc/basic/SetAppConfig.java
index 33db76b3b..20e5a375f 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/ipc/basic/SetAppConfig.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/ipc/basic/SetAppConfig.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.daemon.ipc.basic;
 
 import androidx.annotation.NonNull;
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/ipc/basic/VersionHandler.java b/app/src/main/java/cn/classfun/droidvm/daemon/ipc/basic/VersionHandler.java
index 007335536..b5d64b903 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/ipc/basic/VersionHandler.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/ipc/basic/VersionHandler.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.daemon.ipc.basic;
 
 import static cn.classfun.droidvm.daemon.Daemon.daemonHash;
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/ipc/network/AddAddressHandler.java b/app/src/main/java/cn/classfun/droidvm/daemon/ipc/network/AddAddressHandler.java
index 2fd9bb10e..231612495 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/ipc/network/AddAddressHandler.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/ipc/network/AddAddressHandler.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.daemon.ipc.network;
 
 import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/ipc/network/AddInterfaceHandler.java b/app/src/main/java/cn/classfun/droidvm/daemon/ipc/network/AddInterfaceHandler.java
index e2df64f31..640a10979 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/ipc/network/AddInterfaceHandler.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/ipc/network/AddInterfaceHandler.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.daemon.ipc.network;
 
 import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/ipc/network/CreateHandler.java b/app/src/main/java/cn/classfun/droidvm/daemon/ipc/network/CreateHandler.java
index e1ac41fca..924f77319 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/ipc/network/CreateHandler.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/ipc/network/CreateHandler.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.daemon.ipc.network;
 
 import androidx.annotation.NonNull;
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/ipc/network/DeleteHandler.java b/app/src/main/java/cn/classfun/droidvm/daemon/ipc/network/DeleteHandler.java
index 37b3e465b..adb641a53 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/ipc/network/DeleteHandler.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/ipc/network/DeleteHandler.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.daemon.ipc.network;
 
 import static java.util.UUID.fromString;
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/ipc/network/ExistsHandler.java b/app/src/main/java/cn/classfun/droidvm/daemon/ipc/network/ExistsHandler.java
index 5278a1113..52e54d063 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/ipc/network/ExistsHandler.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/ipc/network/ExistsHandler.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.daemon.ipc.network;
 
 import androidx.annotation.NonNull;
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/ipc/network/InfoHandler.java b/app/src/main/java/cn/classfun/droidvm/daemon/ipc/network/InfoHandler.java
index 33e194943..2db683ed7 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/ipc/network/InfoHandler.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/ipc/network/InfoHandler.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.daemon.ipc.network;
 
 import androidx.annotation.NonNull;
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/ipc/network/ListHandler.java b/app/src/main/java/cn/classfun/droidvm/daemon/ipc/network/ListHandler.java
index aeefda1a5..262a314d1 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/ipc/network/ListHandler.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/ipc/network/ListHandler.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.daemon.ipc.network;
 
 import androidx.annotation.NonNull;
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/ipc/network/ListInterfacesHandler.java b/app/src/main/java/cn/classfun/droidvm/daemon/ipc/network/ListInterfacesHandler.java
index 1bda4ec2d..a4f11da1e 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/ipc/network/ListInterfacesHandler.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/ipc/network/ListInterfacesHandler.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.daemon.ipc.network;
 
 import androidx.annotation.NonNull;
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/ipc/network/ListUplinksHandler.java b/app/src/main/java/cn/classfun/droidvm/daemon/ipc/network/ListUplinksHandler.java
index 98c286258..772d2d258 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/ipc/network/ListUplinksHandler.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/ipc/network/ListUplinksHandler.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.daemon.ipc.network;
 
 import androidx.annotation.NonNull;
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/ipc/network/ModifyHandler.java b/app/src/main/java/cn/classfun/droidvm/daemon/ipc/network/ModifyHandler.java
index e3569534e..8cbf9fa35 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/ipc/network/ModifyHandler.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/ipc/network/ModifyHandler.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.daemon.ipc.network;
 
 import androidx.annotation.NonNull;
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/ipc/network/PdReleaseHandler.java b/app/src/main/java/cn/classfun/droidvm/daemon/ipc/network/PdReleaseHandler.java
index 93bc9245d..a13c8f498 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/ipc/network/PdReleaseHandler.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/ipc/network/PdReleaseHandler.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.daemon.ipc.network;
 
 import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/ipc/network/PdRenewHandler.java b/app/src/main/java/cn/classfun/droidvm/daemon/ipc/network/PdRenewHandler.java
index 1a253a94a..14f775746 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/ipc/network/PdRenewHandler.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/ipc/network/PdRenewHandler.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.daemon.ipc.network;
 
 import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/ipc/network/RemoveAddressHandler.java b/app/src/main/java/cn/classfun/droidvm/daemon/ipc/network/RemoveAddressHandler.java
index e4b9c6234..62a4bc21f 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/ipc/network/RemoveAddressHandler.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/ipc/network/RemoveAddressHandler.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.daemon.ipc.network;
 
 import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/ipc/network/RemoveInterfaceHandler.java b/app/src/main/java/cn/classfun/droidvm/daemon/ipc/network/RemoveInterfaceHandler.java
index be458a26e..c98e0f02f 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/ipc/network/RemoveInterfaceHandler.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/ipc/network/RemoveInterfaceHandler.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.daemon.ipc.network;
 
 import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/ipc/network/StartHandler.java b/app/src/main/java/cn/classfun/droidvm/daemon/ipc/network/StartHandler.java
index bec5959d9..e0e920a6f 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/ipc/network/StartHandler.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/ipc/network/StartHandler.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.daemon.ipc.network;
 
 import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/ipc/network/StatusHandler.java b/app/src/main/java/cn/classfun/droidvm/daemon/ipc/network/StatusHandler.java
index 712e10ee9..ff0cb6cd4 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/ipc/network/StatusHandler.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/ipc/network/StatusHandler.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.daemon.ipc.network;
 
 import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/ipc/network/StopHandler.java b/app/src/main/java/cn/classfun/droidvm/daemon/ipc/network/StopHandler.java
index fe81b8008..8fef1942f 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/ipc/network/StopHandler.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/ipc/network/StopHandler.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.daemon.ipc.network;
 
 import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/ipc/network/ToolLogHandler.java b/app/src/main/java/cn/classfun/droidvm/daemon/ipc/network/ToolLogHandler.java
index bbd4399e7..86dd97779 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/ipc/network/ToolLogHandler.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/ipc/network/ToolLogHandler.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.daemon.ipc.network;
 
 import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/ipc/vm/BootScanHandler.java b/app/src/main/java/cn/classfun/droidvm/daemon/ipc/vm/BootScanHandler.java
index 1d09eb7dd..07fd26cc1 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/ipc/vm/BootScanHandler.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/ipc/vm/BootScanHandler.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.daemon.ipc.vm;
 
 import androidx.annotation.NonNull;
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/ipc/vm/ConsoleClearHandler.java b/app/src/main/java/cn/classfun/droidvm/daemon/ipc/vm/ConsoleClearHandler.java
index e75e2d680..a966ff706 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/ipc/vm/ConsoleClearHandler.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/ipc/vm/ConsoleClearHandler.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.daemon.ipc.vm;
 
 import androidx.annotation.NonNull;
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/ipc/vm/ConsoleHistoryHandler.java b/app/src/main/java/cn/classfun/droidvm/daemon/ipc/vm/ConsoleHistoryHandler.java
index 2a8460c14..70c8bbb0d 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/ipc/vm/ConsoleHistoryHandler.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/ipc/vm/ConsoleHistoryHandler.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.daemon.ipc.vm;
 
 import androidx.annotation.NonNull;
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/ipc/vm/ConsoleInfoHandler.java b/app/src/main/java/cn/classfun/droidvm/daemon/ipc/vm/ConsoleInfoHandler.java
index d3ab3bae9..fb571fa6d 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/ipc/vm/ConsoleInfoHandler.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/ipc/vm/ConsoleInfoHandler.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.daemon.ipc.vm;
 
 import androidx.annotation.NonNull;
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/ipc/vm/ConsoleListHandler.java b/app/src/main/java/cn/classfun/droidvm/daemon/ipc/vm/ConsoleListHandler.java
index 7eceecba2..ccbbeb51c 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/ipc/vm/ConsoleListHandler.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/ipc/vm/ConsoleListHandler.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.daemon.ipc.vm;
 
 import androidx.annotation.NonNull;
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/ipc/vm/ConsoleWriteHandler.java b/app/src/main/java/cn/classfun/droidvm/daemon/ipc/vm/ConsoleWriteHandler.java
index c3694081b..2ce19763e 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/ipc/vm/ConsoleWriteHandler.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/ipc/vm/ConsoleWriteHandler.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.daemon.ipc.vm;
 
 import androidx.annotation.NonNull;
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/ipc/vm/ControlHandler.java b/app/src/main/java/cn/classfun/droidvm/daemon/ipc/vm/ControlHandler.java
index d5616a46c..82a8d62e2 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/ipc/vm/ControlHandler.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/ipc/vm/ControlHandler.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.daemon.ipc.vm;
 
 import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/ipc/vm/CreateHandler.java b/app/src/main/java/cn/classfun/droidvm/daemon/ipc/vm/CreateHandler.java
index 6373cd38f..3a97efed3 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/ipc/vm/CreateHandler.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/ipc/vm/CreateHandler.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.daemon.ipc.vm;
 
 import androidx.annotation.NonNull;
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/ipc/vm/DeleteHandler.java b/app/src/main/java/cn/classfun/droidvm/daemon/ipc/vm/DeleteHandler.java
index 4ca0bd72d..4e30e5c8f 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/ipc/vm/DeleteHandler.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/ipc/vm/DeleteHandler.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.daemon.ipc.vm;
 
 import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/ipc/vm/DisplayAttachHandler.java b/app/src/main/java/cn/classfun/droidvm/daemon/ipc/vm/DisplayAttachHandler.java
index 043f1dd5f..e20c94e55 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/ipc/vm/DisplayAttachHandler.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/ipc/vm/DisplayAttachHandler.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.daemon.ipc.vm;
 
 import androidx.annotation.NonNull;
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/ipc/vm/ExistsHandler.java b/app/src/main/java/cn/classfun/droidvm/daemon/ipc/vm/ExistsHandler.java
index 2bd6c5703..63fdea58a 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/ipc/vm/ExistsHandler.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/ipc/vm/ExistsHandler.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.daemon.ipc.vm;
 
 import androidx.annotation.NonNull;
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/ipc/vm/ExportHandler.java b/app/src/main/java/cn/classfun/droidvm/daemon/ipc/vm/ExportHandler.java
index dab0c1323..a915e0e8f 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/ipc/vm/ExportHandler.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/ipc/vm/ExportHandler.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.daemon.ipc.vm;
 
 import androidx.annotation.NonNull;
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/ipc/vm/GetHandler.java b/app/src/main/java/cn/classfun/droidvm/daemon/ipc/vm/GetHandler.java
index 44be4febf..f7ae0c49c 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/ipc/vm/GetHandler.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/ipc/vm/GetHandler.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.daemon.ipc.vm;
 
 import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/ipc/vm/ImportHandler.java b/app/src/main/java/cn/classfun/droidvm/daemon/ipc/vm/ImportHandler.java
index caac7fe4f..388293442 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/ipc/vm/ImportHandler.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/ipc/vm/ImportHandler.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.daemon.ipc.vm;
 
 import androidx.annotation.NonNull;
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/ipc/vm/InputHandler.java b/app/src/main/java/cn/classfun/droidvm/daemon/ipc/vm/InputHandler.java
index 15f771e40..0bcc6c209 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/ipc/vm/InputHandler.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/ipc/vm/InputHandler.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.daemon.ipc.vm;
 
 import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/ipc/vm/ListHandler.java b/app/src/main/java/cn/classfun/droidvm/daemon/ipc/vm/ListHandler.java
index 83eaf1e4f..ef049838e 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/ipc/vm/ListHandler.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/ipc/vm/ListHandler.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.daemon.ipc.vm;
 
 import androidx.annotation.NonNull;
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/ipc/vm/ModifyHandler.java b/app/src/main/java/cn/classfun/droidvm/daemon/ipc/vm/ModifyHandler.java
index 8d7b92200..dd8e9ab67 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/ipc/vm/ModifyHandler.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/ipc/vm/ModifyHandler.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.daemon.ipc.vm;
 
 import androidx.annotation.NonNull;
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/ipc/vm/RebootHandler.java b/app/src/main/java/cn/classfun/droidvm/daemon/ipc/vm/RebootHandler.java
index fb3af10a8..1d131dd73 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/ipc/vm/RebootHandler.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/ipc/vm/RebootHandler.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.daemon.ipc.vm;
 
 import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/ipc/vm/ResumeHandler.java b/app/src/main/java/cn/classfun/droidvm/daemon/ipc/vm/ResumeHandler.java
index dfd9991dd..aca06f6d1 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/ipc/vm/ResumeHandler.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/ipc/vm/ResumeHandler.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.daemon.ipc.vm;
 
 import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/ipc/vm/StartHandler.java b/app/src/main/java/cn/classfun/droidvm/daemon/ipc/vm/StartHandler.java
index 99922c352..b7bb2ccb5 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/ipc/vm/StartHandler.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/ipc/vm/StartHandler.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.daemon.ipc.vm;
 
 import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/ipc/vm/StatusHandler.java b/app/src/main/java/cn/classfun/droidvm/daemon/ipc/vm/StatusHandler.java
index 650af3562..7aaaf6867 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/ipc/vm/StatusHandler.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/ipc/vm/StatusHandler.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.daemon.ipc.vm;
 
 import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/ipc/vm/StopAllHandler.java b/app/src/main/java/cn/classfun/droidvm/daemon/ipc/vm/StopAllHandler.java
index 305d89168..174f69c34 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/ipc/vm/StopAllHandler.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/ipc/vm/StopAllHandler.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.daemon.ipc.vm;
 
 import androidx.annotation.NonNull;
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/ipc/vm/StopHandler.java b/app/src/main/java/cn/classfun/droidvm/daemon/ipc/vm/StopHandler.java
index 06af66173..1a072c5b6 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/ipc/vm/StopHandler.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/ipc/vm/StopHandler.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.daemon.ipc.vm;
 
 import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/ipc/vm/SuspendHandler.java b/app/src/main/java/cn/classfun/droidvm/daemon/ipc/vm/SuspendHandler.java
index a70a1c98f..24d5b3a06 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/ipc/vm/SuspendHandler.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/ipc/vm/SuspendHandler.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.daemon.ipc.vm;
 
 import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/ipc/vm/VncInfoHandler.java b/app/src/main/java/cn/classfun/droidvm/daemon/ipc/vm/VncInfoHandler.java
index 30c366e28..21329dd48 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/ipc/vm/VncInfoHandler.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/ipc/vm/VncInfoHandler.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.daemon.ipc.vm;
 
 import androidx.annotation.NonNull;
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/network/NetworkInstance.java b/app/src/main/java/cn/classfun/droidvm/daemon/network/NetworkInstance.java
index 87715f4fd..fccaf77f3 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/network/NetworkInstance.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/network/NetworkInstance.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.daemon.network;
 
 import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/network/NetworkInstanceStore.java b/app/src/main/java/cn/classfun/droidvm/daemon/network/NetworkInstanceStore.java
index e69a9975d..cecfb4ff8 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/network/NetworkInstanceStore.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/network/NetworkInstanceStore.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.daemon.network;
 
 import static cn.classfun.droidvm.lib.store.network.NetworkState.RUNNING;
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/network/NetworkWatchdog.java b/app/src/main/java/cn/classfun/droidvm/daemon/network/NetworkWatchdog.java
index 40c08c566..cd7e5ad47 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/network/NetworkWatchdog.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/network/NetworkWatchdog.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.daemon.network;
 
 import android.util.Log;
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/BackendBase.java b/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/BackendBase.java
index 1786d6c42..82c4c1bce 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/BackendBase.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/BackendBase.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.daemon.network.backend;
 
 import androidx.annotation.NonNull;
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/BridgeBackend.java b/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/BridgeBackend.java
index 522ec52d7..a9bf3996c 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/BridgeBackend.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/BridgeBackend.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.daemon.network.backend;
 
 import androidx.annotation.NonNull;
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/BridgeDhcp.java b/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/BridgeDhcp.java
index b9d5c41a9..f7bf966df 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/BridgeDhcp.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/BridgeDhcp.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.daemon.network.backend;
 
 import static cn.classfun.droidvm.lib.Constants.DATA_DIR;
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/DefaultRouterWatcher.java b/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/DefaultRouterWatcher.java
index c6b8e59b2..4f5a86474 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/DefaultRouterWatcher.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/DefaultRouterWatcher.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.daemon.network.backend;
 
 import static cn.classfun.droidvm.lib.utils.FileUtils.shellReadFile;
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/FirewallHelper.java b/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/FirewallHelper.java
index 9d383b580..4f973d9e6 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/FirewallHelper.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/FirewallHelper.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.daemon.network.backend;
 
 import androidx.annotation.NonNull;
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/LinuxBridgeBackend.java b/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/LinuxBridgeBackend.java
index f33e4e408..c35df5588 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/LinuxBridgeBackend.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/LinuxBridgeBackend.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.daemon.network.backend;
 
 import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/LinuxNetwork.java b/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/LinuxNetwork.java
index 0ae109da8..5ace9abd3 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/LinuxNetwork.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/LinuxNetwork.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.daemon.network.backend;
 
 import static cn.classfun.droidvm.lib.utils.RunUtils.run;
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/ManagedProcess.java b/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/ManagedProcess.java
index 59b7952cd..379c8ea92 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/ManagedProcess.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/ManagedProcess.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.daemon.network.backend;
 
 import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/Netbox.java b/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/Netbox.java
index 3d08b0783..0a0e58ba3 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/Netbox.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/Netbox.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.daemon.network.backend;
 
 import static cn.classfun.droidvm.lib.utils.AssetUtils.getAssetBinaryPath;
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/Pbridge.java b/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/Pbridge.java
index 2d91c8b7f..5a2684bd7 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/Pbridge.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/Pbridge.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.daemon.network.backend;
 
 import static cn.classfun.droidvm.lib.Constants.*;
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/UplinkResolver.java b/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/UplinkResolver.java
index 402f8ab4c..00744e255 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/UplinkResolver.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/UplinkResolver.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.daemon.network.backend;
 
 import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/gvisor/GvisorBridgeBackend.java b/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/gvisor/GvisorBridgeBackend.java
index e6c8bb6cf..95e42cc53 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/gvisor/GvisorBridgeBackend.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/gvisor/GvisorBridgeBackend.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.daemon.network.backend.gvisor;
 
 import static cn.classfun.droidvm.lib.Constants.DATA_DIR;
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/gvisor/GvswitchClient.java b/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/gvisor/GvswitchClient.java
index 23b598f08..379107f35 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/gvisor/GvswitchClient.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/gvisor/GvswitchClient.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.daemon.network.backend.gvisor;
 
 import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/gvisor/GvswitchConfigBuilder.java b/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/gvisor/GvswitchConfigBuilder.java
index 01e16c223..e48a55773 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/gvisor/GvswitchConfigBuilder.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/gvisor/GvswitchConfigBuilder.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.daemon.network.backend.gvisor;
 
 import androidx.annotation.NonNull;
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/iptables/ChainInfo.java b/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/iptables/ChainInfo.java
index 053e81876..37db8748f 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/iptables/ChainInfo.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/iptables/ChainInfo.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.daemon.network.backend.iptables;
 
 import androidx.annotation.NonNull;
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/iptables/IptablesBackend.java b/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/iptables/IptablesBackend.java
index f98e19dec..0df24ede0 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/iptables/IptablesBackend.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/iptables/IptablesBackend.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.daemon.network.backend.iptables;
 
 import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/iptables/IptablesNetworkInstance.java b/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/iptables/IptablesNetworkInstance.java
index a8224c476..b8e8424dc 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/iptables/IptablesNetworkInstance.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/iptables/IptablesNetworkInstance.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.daemon.network.backend.iptables;
 
 import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/pd/Duid.java b/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/pd/Duid.java
index 844e0ba29..3ee600f2a 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/pd/Duid.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/pd/Duid.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.daemon.network.backend.pd;
 
 import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/server/ClientHandler.java b/app/src/main/java/cn/classfun/droidvm/daemon/server/ClientHandler.java
index c5474f241..bd0a01b82 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/server/ClientHandler.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/server/ClientHandler.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.daemon.server;
 
 import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/server/ClientRequest.java b/app/src/main/java/cn/classfun/droidvm/daemon/server/ClientRequest.java
index c5286302b..273b21dab 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/server/ClientRequest.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/server/ClientRequest.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.daemon.server;
 
 import androidx.annotation.NonNull;
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/server/ClientResponse.java b/app/src/main/java/cn/classfun/droidvm/daemon/server/ClientResponse.java
index b57ba0ddc..4fafb2262 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/server/ClientResponse.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/server/ClientResponse.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.daemon.server;
 
 import androidx.annotation.NonNull;
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/server/RequestException.java b/app/src/main/java/cn/classfun/droidvm/daemon/server/RequestException.java
index bb5bbde8d..39a68e4f9 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/server/RequestException.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/server/RequestException.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.daemon.server;
 
 public final class RequestException extends RuntimeException {
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/server/RequestHandler.java b/app/src/main/java/cn/classfun/droidvm/daemon/server/RequestHandler.java
index 5e0a1b6b2..373938c16 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/server/RequestHandler.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/server/RequestHandler.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.daemon.server;
 
 import androidx.annotation.NonNull;
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/server/RequestHandlerStore.java b/app/src/main/java/cn/classfun/droidvm/daemon/server/RequestHandlerStore.java
index 0aa60ebc9..516cc8dfa 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/server/RequestHandlerStore.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/server/RequestHandlerStore.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.daemon.server;
 
 import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/server/Server.java b/app/src/main/java/cn/classfun/droidvm/daemon/server/Server.java
index 061b554e6..294084fce 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/server/Server.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/server/Server.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.daemon.server;
 
 import static android.system.Os.stat;
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/server/ServerContext.java b/app/src/main/java/cn/classfun/droidvm/daemon/server/ServerContext.java
index 30607aab8..82c8e9c54 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/server/ServerContext.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/server/ServerContext.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.daemon.server;
 
 import static cn.classfun.droidvm.lib.Constants.DATA_DIR;
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/vm/BootPlan.java b/app/src/main/java/cn/classfun/droidvm/daemon/vm/BootPlan.java
index 39a097b8b..2a14a3806 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/vm/BootPlan.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/vm/BootPlan.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.daemon.vm;
 
 import static java.util.concurrent.TimeUnit.MILLISECONDS;
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/vm/SerialPipe.java b/app/src/main/java/cn/classfun/droidvm/daemon/vm/SerialPipe.java
index 935fc3193..f0ffe4559 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/vm/SerialPipe.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/vm/SerialPipe.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.daemon.vm;
 
 import java.io.Closeable;
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/vm/VMBackendInstance.java b/app/src/main/java/cn/classfun/droidvm/daemon/vm/VMBackendInstance.java
index 28f4b4ea9..79a8d3caa 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/vm/VMBackendInstance.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/vm/VMBackendInstance.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.daemon.vm;
 
 import static cn.classfun.droidvm.lib.Constants.DATA_DIR;
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/vm/VMInstance.java b/app/src/main/java/cn/classfun/droidvm/daemon/vm/VMInstance.java
index 9da40e025..e54d1790f 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/vm/VMInstance.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/vm/VMInstance.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.daemon.vm;
 
 import static java.util.Objects.requireNonNull;
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/vm/VMInstanceStore.java b/app/src/main/java/cn/classfun/droidvm/daemon/vm/VMInstanceStore.java
index b8523620e..00f05dd59 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/vm/VMInstanceStore.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/vm/VMInstanceStore.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.daemon.vm;
 
 import static cn.classfun.droidvm.daemon.vm.VMInstance.getVMInstance;
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/vm/VMStartResult.java b/app/src/main/java/cn/classfun/droidvm/daemon/vm/VMStartResult.java
index 4d292d0f9..8284786ff 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/vm/VMStartResult.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/vm/VMStartResult.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.daemon.vm;
 
 import cn.classfun.droidvm.lib.natives.NativeProcess;
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/BackendBase.java b/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/BackendBase.java
index 41de65647..85c3b4ba5 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/BackendBase.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/BackendBase.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.daemon.vm.backend;
 
 import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/CrosvmBackend.java b/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/CrosvmBackend.java
index 37185f3c0..b42f15202 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/CrosvmBackend.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/CrosvmBackend.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.daemon.vm.backend;
 
 import androidx.annotation.NonNull;
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/CrosvmBackendInstance.java b/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/CrosvmBackendInstance.java
index af3050084..6f62a1819 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/CrosvmBackendInstance.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/CrosvmBackendInstance.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.daemon.vm.backend;
 
 import static android.net.LocalSocketAddress.Namespace.FILESYSTEM;
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/NativeDisplayInputBridge.java b/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/NativeDisplayInputBridge.java
index af5a3c9ba..a6707065c 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/NativeDisplayInputBridge.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/NativeDisplayInputBridge.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.daemon.vm.backend;
 
 import static cn.classfun.droidvm.lib.utils.FileUtils.deleteFile;
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/QemuBackend.java b/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/QemuBackend.java
index 6479786d8..4bb9fde00 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/QemuBackend.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/QemuBackend.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.daemon.vm.backend;
 
 import androidx.annotation.NonNull;
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/QemuBackendInstance.java b/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/QemuBackendInstance.java
index c8e33c794..0fef5f5ea 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/QemuBackendInstance.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/QemuBackendInstance.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.daemon.vm.backend;
 
 import static android.net.LocalSocketAddress.Namespace.FILESYSTEM;
@@ -37,13 +40,16 @@
 import cn.classfun.droidvm.lib.natives.NativeProcess;
 import cn.classfun.droidvm.lib.store.base.DataItem;
 import cn.classfun.droidvm.lib.store.disk.DiskBus;
-import cn.classfun.droidvm.lib.store.vm.DisplayBackend;
+import cn.classfun.droidvm.lib.store.vm.DisplayExporter;
+import cn.classfun.droidvm.lib.store.vm.VMScreenConfig;
 import cn.classfun.droidvm.lib.store.vm.GpuBackend;
+import cn.classfun.droidvm.lib.store.vm.PeripheralType;
 import cn.classfun.droidvm.lib.store.vm.ProtectedVM;
 import cn.classfun.droidvm.lib.store.vm.SharedDirCache;
 import cn.classfun.droidvm.lib.store.vm.VMBackend;
 import cn.classfun.droidvm.lib.store.vm.VMConfig;
 import cn.classfun.droidvm.lib.store.vm.VMHypervisor;
+import cn.classfun.droidvm.lib.store.vm.VMPeripheralConfig;
 
 @SuppressWarnings("FieldCanBeLocal")
 public final class QemuBackendInstance extends VMBackendInstance {
@@ -51,9 +57,13 @@ public final class QemuBackendInstance extends VMBackendInstance {
     private static final String RUN_PATH = pathJoin(DATA_DIR, "run");
     private String qmpSocketPath = null;
     private String uartSocketPath = null;
+    private String agentSocketPath = null;
     private int ioThreadCounter = 0;
     private int driveCounter = 0;
+    private final boolean agentMode;
     private final LocalSocketConsoleStream uartStream;
+    @Nullable
+    private final LocalSocketConsoleStream agentStream;
     private final InputConsoleStream stdoutStream;
     private final InputConsoleStream stderrStream;
     private final SimpleConsoleStream stdioStream;
@@ -63,7 +73,12 @@ public QemuBackendInstance(
         @NonNull VMConfig config
     ) {
         super(context, config);
+        agentMode = config.item.optBoolean("agent_mode", false);
         uartStream = new LocalSocketConsoleStream(config, "uart", null);
+        agentStream = agentMode
+            ? new LocalSocketConsoleStream(config, "agent", null) : null;
+        if (agentStream != null)
+            agentStream.setPersistentLogEnabled(false);
         stdoutStream = new InputConsoleStream(config, "stdout", null);
         stderrStream = new InputConsoleStream(config, "stderr", null);
         stdioStream = new SimpleConsoleStream(config, "stdio");
@@ -71,6 +86,7 @@ public QemuBackendInstance(
         addStream(stderrStream);
         addStream(stdioStream);
         addStream(uartStream);
+        if (agentStream != null) addStream(agentStream);
     }
 
     @NonNull
@@ -83,6 +99,10 @@ public VMStartResult start() {
         deleteFile(qmpSocketPath);
         uartSocketPath = pathJoin(RUN_PATH, fmt("%s-uart.sock", config.getName()));
         deleteFile(uartSocketPath);
+        if (agentMode) {
+            agentSocketPath = pathJoin(RUN_PATH, fmt("%s-agent.sock", config.getName()));
+            deleteFile(agentSocketPath);
+        }
         Log.i(TAG, fmt("QMP socket path: %s", qmpSocketPath));
         var args = buildCommand();
         Log.i(TAG, fmt("Executing: %s", String.join(" ", args)));
@@ -97,23 +117,32 @@ public VMStartResult start() {
             Log.e(TAG, "Failed to start qemu process", e);
             return result;
         }
-        waitForUartClient();
+        // agent0 is declared before the blocking UART chardev. Connect it first, then release
+        // QEMU's UART wait so no hvc0 boot output can race ahead of the daemon reader.
+        if (agentStream != null)
+            waitForSocketClient("agent", agentSocketPath, agentStream);
+        waitForSocketClient("UART", uartSocketPath, uartStream);
         return result;
     }
 
-    private void waitForUartClient() {
+    private void waitForSocketClient(
+        @NonNull String label,
+        @NonNull String socketPath,
+        @NonNull LocalSocketConsoleStream stream
+    ) {
         int i = 0;
-        Log.i(TAG, fmt("UART socket path: %s", uartSocketPath));
+        Log.i(TAG, fmt("%s socket path: %s", label, socketPath));
         while (true) {
             try {
-                var uart = new LocalSocket(LocalSocket.SOCKET_STREAM);
-                uart.connect(new LocalSocketAddress(uartSocketPath, FILESYSTEM));
-                Log.i(TAG, "UART client connected");
-                uartStream.setSocket(uart);
+                var socket = new LocalSocket(LocalSocket.SOCKET_STREAM);
+                socket.connect(new LocalSocketAddress(socketPath, FILESYSTEM));
+                Log.i(TAG, fmt("%s client connected", label));
+                stream.setSocket(socket);
                 return;
             } catch (Exception e) {
                 if (i >= 50) {
-                    Log.e(TAG, "failed to create UART socket after multiple attempts, giving up");
+                    Log.e(TAG, fmt(
+                        "failed to connect %s socket after multiple attempts, giving up", label));
                     throw new RuntimeException(e);
                 }
                 i++;
@@ -134,8 +163,7 @@ private List<String> buildCommand() {
         args.add(pathJoin(DATA_DIR, "usr", "share", "qemu"));
         var hyp = item.optString("hypervisor", "auto");
         var hypervisor = VMHypervisor.valueOf(hyp.toUpperCase());
-        if (hypervisor == VMHypervisor.AUTO)
-            hypervisor = VMHypervisor.findPreferredHypervisor(VMBackend.QEMU);
+        hypervisor = VMHypervisor.resolveConfigured(VMBackend.QEMU, hypervisor);
         if (hypervisor == null) throw new RuntimeException("No supported hypervisor found for QEMU backend");
         args.add("-accel");
         var defProtectedMode = ProtectedVM.PROTECTED_NORMAL;
@@ -182,7 +210,7 @@ private List<String> buildCommand() {
         switch (protectedVm) {
             case PROTECTED_PROTECTED:
             case PROTECTED_WITHOUT_FIRMWARE:
-                long swiotlbMb = Math.max(item.optLong("swiotlb_mb", 64), 1);
+                long swiotlbMb = Math.max(item.optLong("swiotlb_mb", 256), 1);
                 args.add("-object");
                 args.add(fmt("arm-confidential-guest,id=prot0,swiotlb-size=%dM", swiotlbMb));
                 break;
@@ -211,7 +239,7 @@ private List<String> buildCommand() {
         }
         if (item.optBoolean("hugepages", true))
             args.add("-mem-prealloc");
-        if (item.optBoolean("rng", true)) {
+        if (!agentMode && item.optBoolean("rng", true)) {
             args.add("-object");
             args.add("rng-random,filename=/dev/urandom,id=rng0");
             args.add("-device");
@@ -221,14 +249,25 @@ private List<String> buildCommand() {
             args.add("-device");
             args.add("virtio-balloon-pci,disable-legacy=on,disable-modern=off");
         }
-        buildInputCommand(args);
-        buildUsbCommand(args);
+        if (!agentMode) buildInputCommand(args);
+        if (!agentMode) buildUsbCommand(args);
         buildDiskCommand(args);
-        buildNetCommand(args);
-        buildSharedDirCommand(args);
-        buildAudioCommand(args);
-        buildGpuCommand(args);
-        buildVncCommand(args);
+        if (!agentMode) {
+            buildNetCommand(args);
+            buildSharedDirCommand(args);
+            buildAudioCommand(args);
+            buildGpuCommand(args);
+            buildVncCommand(args);
+        }
+        if (agentMode) {
+            args.add("-chardev");
+            args.add(fmt(
+                "socket,id=agent0,path=%s,server=on,wait=off", agentSocketPath));
+            args.add("-device");
+            args.add("virtio-serial-pci,id=agent-bus,disable-legacy=on,disable-modern=off");
+            args.add("-device");
+            args.add("virtconsole,chardev=agent0,name=org.droidvm.agent");
+        }
         args.add("-chardev");
         args.add(fmt("socket,id=uart0,path=%s,server=on,wait=on", uartSocketPath));
         args.add("-serial");
@@ -308,7 +347,9 @@ private void buildDiskCommand(@NonNull List<String> args) {
                     args.add(fmt("iothread,id=%s", ioId));
                     var driveArg = new StringBuilder();
                     driveArg.append(fmt("file=%s,if=none,id=%s", path, drId));
-                    driveArg.append(",cache=unsafe,aio=threads,discard=unmap");
+                    driveArg.append(agentMode
+                        ? ",cache=writeback,aio=threads,discard=unmap"
+                        : ",cache=unsafe,aio=threads,discard=unmap");
                     if (readonly) driveArg.append(",readonly=on");
                     args.add("-drive");
                     args.add(driveArg.toString());
@@ -323,7 +364,7 @@ private void buildDiskCommand(@NonNull List<String> args) {
     }
 
     private void buildInputCommand(@NonNull List<String> args) {
-        if (!config.item.optBoolean("display_enabled", false)) return;
+        if (!hasAnyScreen()) return;
         args.add("-device");
         args.add("virtio-multitouch-pci,disable-legacy=on,disable-modern=off");
         args.add("-device");
@@ -334,7 +375,7 @@ private void buildUsbCommand(@NonNull List<String> args) {
         if (!config.item.optBoolean("usb", true)) return;
         args.add("-device");
         args.add("qemu-xhci,id=usb-bus,p2=15,p3=15");
-        if (config.item.optBoolean("display_enabled", false)) {
+        if (hasAnyScreen()) {
             args.add("-device");
             args.add("usb-tablet,bus=usb-bus.0");
             args.add("-device");
@@ -368,9 +409,27 @@ private void buildSharedDirCommand(@NonNull List<String> args) {
         }
     }
 
+    /**
+     * One virtio-sound-pci card on QEMU's aaudio driver, present when the VM has any audio
+     * peripheral.
+     *
+     * <p>Only the on/off decision is plumbed here. The mode, host endpoint, buffer and underrun
+     * settings of a VirtIO Sound peripheral are all crosvm-side concepts -- QEMU's aaudio driver
+     * opens whatever the platform routes to, in one process, as whatever uid QEMU runs as -- so
+     * they are ignored rather than half-honoured. Intel HDA is ignored here too, even though
+     * this QEMU does emulate one: wiring it would be a separate piece of work with its own
+     * verification. A config that predates the peripheral tab still works through the old
+     * {@code audio_enabled} key, which also stays available as an override.</p>
+     */
     private void buildAudioCommand(@NonNull List<String> args) {
-        var displayEnabled = config.item.optBoolean("display_enabled", false);
-        if (!config.item.optBoolean("audio_enabled", displayEnabled)) return;
+        boolean anyAudio = false;
+        for (var peripheral : VMPeripheralConfig.listOf(config.item)) {
+            if (peripheral.getType() == PeripheralType.VIRTIO_SOUND)
+                anyAudio = true;
+        }
+        if (!anyAudio) {
+            if (!config.item.optBoolean("audio_enabled", hasAnyScreen())) return;
+        }
         args.add("-audiodev");
         args.add("aaudio,id=snd0");
         args.add("-device");
@@ -411,13 +470,20 @@ private void buildNetCommand(@NonNull List<String> args) {
         }
     }
 
+    /**
+     * The virtio-gpu device (with its renderer, if any) and QEMU's nearest thing to simplefb.
+     *
+     * <p>The virtio-gpu screen's switch is the device, exactly as on crosvm; the renderer only
+     * decides which QEMU device model implements it. The geometry is that screen's own, so a VM
+     * with both screens no longer has to give them one size.</p>
+     */
     private void buildGpuCommand(@NonNull List<String> args) {
         var item = config.item;
-        var useGpu = item.optBoolean("gpu_enabled", false);
-        var useDisplay = item.optBoolean("display_enabled", false);
-        if (!useGpu && !useDisplay) return;
-        var backend = optEnum(item, "display_backend", DisplayBackend.NONE);
-        if (useGpu) {
+        var gpuScreen = isScreenEnabled(VMScreenConfig.ID_GPU0);
+        var fbScreen = isScreenEnabled(VMScreenConfig.ID_SIMPLEFB);
+        if (!gpuScreen && !fbScreen) return;
+        if (gpuScreen) {
+            var gpu0 = VMScreenConfig.of(item, VMScreenConfig.ID_GPU0);
             var gpuBackend = optEnum(item, "gpu_backend", GpuBackend.NONE);
             var gpuArg = new StringBuilder();
             boolean use3d = false;
@@ -431,16 +497,14 @@ private void buildGpuCommand(@NonNull List<String> args) {
                     use3d = true;
                     break;
                 default:
+                    // 2D, or a config that never named a renderer: the plain device, which is what
+                    // "display without acceleration" is on this backend too.
                     gpuArg.append("virtio-gpu-pci");
                     break;
             }
             gpuArg.append(",disable-legacy=on,disable-modern=off");
-            if (useDisplay && backend == DisplayBackend.VIRTIO_GPU) {
-                long width = item.optLong("display_width", 1280);
-                long height = item.optLong("display_height", 720);
-                gpuArg.append(fmt(",xres=%d,yres=%d", width, height));
-                gpuArg.append(",edid=on");
-            }
+            gpuArg.append(fmt(",xres=%d,yres=%d", gpu0.getWidth(), gpu0.getHeight()));
+            gpuArg.append(",edid=on");
             if (use3d) {
                 gpuArg.append(",blob=on");
                 args.add("-display");
@@ -448,30 +512,51 @@ private void buildGpuCommand(@NonNull List<String> args) {
             }
             args.add("-device");
             args.add(gpuArg.toString());
-        } else if (backend == DisplayBackend.VIRTIO_GPU) {
-            long width = item.optLong("display_width", 1280);
-            long height = item.optLong("display_height", 720);
-            args.add("-device");
-            args.add(fmt("virtio-gpu-pci,disable-legacy=on,disable-modern=off,xres=%d,yres=%d,edid=on",
-                width, height));
         }
-        if (useDisplay && backend == DisplayBackend.SIMPLEFB) {
+        // ramfb takes no size: QEMU's firmware-programmed framebuffer gets its geometry from the
+        // guest, so the simplefb screen's width and height have nowhere to go here.
+        if (fbScreen) {
             args.add("-device");
             args.add("ramfb");
         }
     }
 
+    /**
+     * Whether the config asks for [screenId]'s display device.
+     *
+     * <p>QEMU has no {@code screen=} to bind an exporter to -- one {@code -vnc} serves whatever
+     * the machine displays -- so the per-screen model only reaches this far: the screen switches
+     * decide which devices exist, and the first screen exporting over VNC supplies the server's
+     * settings. Native display is refused for this backend in the editor, so it never appears
+     * here at all.</p>
+     */
+    private boolean hasAnyScreen() {
+        for (var screen : VMScreenConfig.listOf(config.item))
+            if (screen.isEnabled()) return true;
+        return false;
+    }
+
+    private boolean isScreenEnabled(@NonNull String screenId) {
+        var screen = VMScreenConfig.find(config.item, screenId);
+        return screen != null && screen.isEnabled();
+    }
+
     private void buildVncCommand(@NonNull List<String> args) {
-        var item = config.item;
-        if (!item.optBoolean("vnc_enabled", false)) return;
-        var host = item.optString("vnc_host", "0.0.0.0");
+        VMScreenConfig bound = null;
+        for (var screen : VMScreenConfig.listOf(config.item))
+            if (screen.isEnabled() && screen.getExporter() == DisplayExporter.VNC) {
+                bound = screen;
+                break;
+            }
+        if (bound == null) return;
+        var host = bound.getVncHost();
         if (host.isEmpty()) host = "0.0.0.0";
-        long port = Math.max(item.optLong("vnc_port", 5900), 1);
+        long port = Math.max(bound.getVncPort(), 1);
         long displayNum = port - 5900;
         if (displayNum < 0) displayNum = 0;
         var vncArg = new StringBuilder();
         vncArg.append(fmt("%s:%d", host, displayNum));
-        var password = item.optString("vnc_password", "");
+        var password = bound.getVncPassword();
         if (!password.isEmpty()) {
             args.add("-object");
             args.add(fmt("secret,id=vnc-password,data=%s", password));
@@ -575,6 +660,7 @@ public boolean hasControlSocket() {
     @Override
     public void cleanup() {
         uartStream.close();
+        if (agentStream != null) agentStream.close();
         if (qmpSocketPath != null) {
             deleteFile(qmpSocketPath);
             qmpSocketPath = null;
@@ -583,5 +669,9 @@ public void cleanup() {
             deleteFile(uartSocketPath);
             uartSocketPath = null;
         }
+        if (agentSocketPath != null) {
+            deleteFile(agentSocketPath);
+            agentSocketPath = null;
+        }
     }
 }
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/vm/pkg/VMExportTask.java b/app/src/main/java/cn/classfun/droidvm/daemon/vm/pkg/VMExportTask.java
index 8a8520c39..7addc1cb7 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/vm/pkg/VMExportTask.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/vm/pkg/VMExportTask.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.daemon.vm.pkg;
 
 import static java.nio.charset.StandardCharsets.UTF_8;
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/vm/pkg/VMExportUtils.java b/app/src/main/java/cn/classfun/droidvm/daemon/vm/pkg/VMExportUtils.java
index 83f382244..1611d9cda 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/vm/pkg/VMExportUtils.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/vm/pkg/VMExportUtils.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.daemon.vm.pkg;
 
 import static java.nio.charset.StandardCharsets.UTF_8;
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/vm/pkg/VMImportTask.java b/app/src/main/java/cn/classfun/droidvm/daemon/vm/pkg/VMImportTask.java
index 9f7926007..fb8b043f3 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/vm/pkg/VMImportTask.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/vm/pkg/VMImportTask.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.daemon.vm.pkg;
 
 import static cn.classfun.droidvm.daemon.vm.pkg.VMImportUtils.remapBootPaths;
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/vm/pkg/VMImportUtils.java b/app/src/main/java/cn/classfun/droidvm/daemon/vm/pkg/VMImportUtils.java
index 4f47f12a3..e175a65ed 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/vm/pkg/VMImportUtils.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/vm/pkg/VMImportUtils.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.daemon.vm.pkg;
 
 import static java.util.Objects.requireNonNull;
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/Constants.java b/app/src/main/java/cn/classfun/droidvm/lib/Constants.java
index 852e863f8..6a082d818 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/Constants.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/Constants.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.lib;
 
 import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/api/ApiInfo.java b/app/src/main/java/cn/classfun/droidvm/lib/api/ApiInfo.java
index 47fdde35b..c6725f772 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/api/ApiInfo.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/api/ApiInfo.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.lib.api;
 
 import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/api/ApiManager.java b/app/src/main/java/cn/classfun/droidvm/lib/api/ApiManager.java
index b1f1cabd9..753b8c6e1 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/api/ApiManager.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/api/ApiManager.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.lib.api;
 
 import static java.util.Objects.requireNonNull;
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/api/ApiServiceInfo.java b/app/src/main/java/cn/classfun/droidvm/lib/api/ApiServiceInfo.java
index cd35cee58..e5f90dc0e 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/api/ApiServiceInfo.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/api/ApiServiceInfo.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.lib.api;
 
 import androidx.annotation.NonNull;
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/api/Privacy.java b/app/src/main/java/cn/classfun/droidvm/lib/api/Privacy.java
index 118fe5181..7de20ecd4 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/api/Privacy.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/api/Privacy.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.lib.api;
 
 import static cn.classfun.droidvm.lib.utils.AssetUtils.loadFromAssets;
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/archive/Compression.java b/app/src/main/java/cn/classfun/droidvm/lib/archive/Compression.java
index 059234a2c..fb0c732e8 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/archive/Compression.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/archive/Compression.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.lib.archive;
 
 import android.content.Context;
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/archive/LimitedInputStream.java b/app/src/main/java/cn/classfun/droidvm/lib/archive/LimitedInputStream.java
index 451ccfa0c..3b3a26485 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/archive/LimitedInputStream.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/archive/LimitedInputStream.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.lib.archive;
 
 import androidx.annotation.NonNull;
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/archive/OutputStreamLimiter.java b/app/src/main/java/cn/classfun/droidvm/lib/archive/OutputStreamLimiter.java
index 8abc2991d..bd6ff1f9a 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/archive/OutputStreamLimiter.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/archive/OutputStreamLimiter.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.lib.archive;
 
 import androidx.annotation.NonNull;
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/archive/RandomAccessFileOutputStream.java b/app/src/main/java/cn/classfun/droidvm/lib/archive/RandomAccessFileOutputStream.java
index 6d32422cf..4a968d59a 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/archive/RandomAccessFileOutputStream.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/archive/RandomAccessFileOutputStream.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.lib.archive;
 
 import androidx.annotation.NonNull;
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/archive/TarReader.java b/app/src/main/java/cn/classfun/droidvm/lib/archive/TarReader.java
index 34f9b55e5..71ca38108 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/archive/TarReader.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/archive/TarReader.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.lib.archive;
 
 import static java.nio.charset.StandardCharsets.UTF_8;
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/archive/TarWriter.java b/app/src/main/java/cn/classfun/droidvm/lib/archive/TarWriter.java
index c47f01209..59ee04be9 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/archive/TarWriter.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/archive/TarWriter.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.lib.archive;
 
 import static java.nio.charset.StandardCharsets.US_ASCII;
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/crypt/HashFile.java b/app/src/main/java/cn/classfun/droidvm/lib/crypt/HashFile.java
index 1e81355e8..4ffd92ec8 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/crypt/HashFile.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/crypt/HashFile.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.lib.crypt;
 
 import static cn.classfun.droidvm.lib.utils.FileUtils.loadJSONFile;
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/crypt/HashItem.java b/app/src/main/java/cn/classfun/droidvm/lib/crypt/HashItem.java
index eba503a79..97b8b0781 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/crypt/HashItem.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/crypt/HashItem.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.lib.crypt;
 
 import androidx.annotation.NonNull;
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/daemon/DaemonClient.java b/app/src/main/java/cn/classfun/droidvm/lib/daemon/DaemonClient.java
index fcd02dfbb..d05767353 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/daemon/DaemonClient.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/daemon/DaemonClient.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.lib.daemon;
 
 import static cn.classfun.droidvm.lib.daemon.Protocol.IPC_REQUEST_TIMEOUT_MS;
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/daemon/DaemonConnection.java b/app/src/main/java/cn/classfun/droidvm/lib/daemon/DaemonConnection.java
index 3fb894f41..3588af707 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/daemon/DaemonConnection.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/daemon/DaemonConnection.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.lib.daemon;
 
 import static cn.classfun.droidvm.lib.daemon.DaemonHelper.getPortFile;
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/daemon/DaemonHelper.java b/app/src/main/java/cn/classfun/droidvm/lib/daemon/DaemonHelper.java
index 3668efab7..50a8d69b6 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/daemon/DaemonHelper.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/daemon/DaemonHelper.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.lib.daemon;
 
 import static android.widget.Toast.LENGTH_LONG;
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/daemon/ForegroundCallback.java b/app/src/main/java/cn/classfun/droidvm/lib/daemon/ForegroundCallback.java
index a210ab140..bc782b65e 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/daemon/ForegroundCallback.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/daemon/ForegroundCallback.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.lib.daemon;
 
 import org.json.JSONObject;
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/daemon/PendingRequest.java b/app/src/main/java/cn/classfun/droidvm/lib/daemon/PendingRequest.java
index 768d3eaf5..afcd7ef7a 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/daemon/PendingRequest.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/daemon/PendingRequest.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.lib.daemon;
 
 import org.json.JSONObject;
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/daemon/Protocol.java b/app/src/main/java/cn/classfun/droidvm/lib/daemon/Protocol.java
index 5668a2c64..46407334c 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/daemon/Protocol.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/daemon/Protocol.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.lib.daemon;
 
 import static java.nio.ByteOrder.LITTLE_ENDIAN;
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/daemon/RequestContext.java b/app/src/main/java/cn/classfun/droidvm/lib/daemon/RequestContext.java
index a8f893202..497f8d9f5 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/daemon/RequestContext.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/daemon/RequestContext.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.lib.daemon;
 
 import android.util.Log;
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/daemon/VMEventHandler.java b/app/src/main/java/cn/classfun/droidvm/lib/daemon/VMEventHandler.java
index da8923c46..19f32545d 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/daemon/VMEventHandler.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/daemon/VMEventHandler.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.lib.daemon;
 
 import static android.content.Context.MODE_PRIVATE;
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/data/CrosvmExit.java b/app/src/main/java/cn/classfun/droidvm/lib/data/CrosvmExit.java
index db4920b34..15913e50e 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/data/CrosvmExit.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/data/CrosvmExit.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.lib.data;
 
 /**
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/data/Images.java b/app/src/main/java/cn/classfun/droidvm/lib/data/Images.java
index 29985ee44..d5c84de1a 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/data/Images.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/data/Images.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.lib.data;
 
 import static android.os.Build.SUPPORTED_ABIS;
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/data/Language.java b/app/src/main/java/cn/classfun/droidvm/lib/data/Language.java
index 1305c2a63..bd62411ac 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/data/Language.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/data/Language.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.lib.data;
 
 import static cn.classfun.droidvm.lib.utils.AssetUtils.loadYAMLFromAssets;
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/data/License.java b/app/src/main/java/cn/classfun/droidvm/lib/data/License.java
index 51726f2a0..2bae82c72 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/data/License.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/data/License.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.lib.data;
 
 import static cn.classfun.droidvm.lib.utils.AssetUtils.loadYAMLFromAssets;
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/data/QcomChipName.java b/app/src/main/java/cn/classfun/droidvm/lib/data/QcomChipName.java
index 851f814ee..135490392 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/data/QcomChipName.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/data/QcomChipName.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.lib.data;
 
 import static cn.classfun.droidvm.lib.utils.RunUtils.runListQuiet;
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/data/QcomGunyahSupports.java b/app/src/main/java/cn/classfun/droidvm/lib/data/QcomGunyahSupports.java
index e1a5fff38..f15f06613 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/data/QcomGunyahSupports.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/data/QcomGunyahSupports.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.lib.data;
 
 import static cn.classfun.droidvm.lib.utils.AssetUtils.loadYAMLFromAssets;
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/data/Repos.java b/app/src/main/java/cn/classfun/droidvm/lib/data/Repos.java
index bf7577f87..c31177db6 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/data/Repos.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/data/Repos.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.lib.data;
 
 import static java.util.Objects.requireNonNull;
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/diag/LogHelper.java b/app/src/main/java/cn/classfun/droidvm/lib/diag/LogHelper.java
index 35c61338d..e0bf52f89 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/diag/LogHelper.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/diag/LogHelper.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.lib.diag;
 
 import android.os.Handler;
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/diag/LogHelperHandler.java b/app/src/main/java/cn/classfun/droidvm/lib/diag/LogHelperHandler.java
index e551bbcc7..96f95ace6 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/diag/LogHelperHandler.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/diag/LogHelperHandler.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.lib.diag;
 
 import static android.content.Intent.ACTION_VIEW;
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/diag/handler/BadSM8650HostKernelHandler.java b/app/src/main/java/cn/classfun/droidvm/lib/diag/handler/BadSM8650HostKernelHandler.java
index 31f220796..a38248bf9 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/diag/handler/BadSM8650HostKernelHandler.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/diag/handler/BadSM8650HostKernelHandler.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.lib.diag.handler;
 
 import android.content.Context;
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/diag/handler/HugePageFaultHandler.java b/app/src/main/java/cn/classfun/droidvm/lib/diag/handler/HugePageFaultHandler.java
index cc69844f7..7bc35bedf 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/diag/handler/HugePageFaultHandler.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/diag/handler/HugePageFaultHandler.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.lib.diag.handler;
 
 import android.content.Context;
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/diag/handler/OsKernelWithoutRestrictPoolHandler.java b/app/src/main/java/cn/classfun/droidvm/lib/diag/handler/OsKernelWithoutRestrictPoolHandler.java
index 5316f4840..2dc9b2bda 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/diag/handler/OsKernelWithoutRestrictPoolHandler.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/diag/handler/OsKernelWithoutRestrictPoolHandler.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.lib.diag.handler;
 
 import android.content.Context;
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/diag/handler/UnsupportedGunyahVersionHandler.java b/app/src/main/java/cn/classfun/droidvm/lib/diag/handler/UnsupportedGunyahVersionHandler.java
index 8c55a0d60..72e1147cf 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/diag/handler/UnsupportedGunyahVersionHandler.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/diag/handler/UnsupportedGunyahVersionHandler.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.lib.diag.handler;
 
 import android.content.Context;
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/diag/handler/UnsupportedSandboxHandler.java b/app/src/main/java/cn/classfun/droidvm/lib/diag/handler/UnsupportedSandboxHandler.java
index 8a870273e..85c64734a 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/diag/handler/UnsupportedSandboxHandler.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/diag/handler/UnsupportedSandboxHandler.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.lib.diag.handler;
 
 import android.content.Context;
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/download/DiskDownloadManager.java b/app/src/main/java/cn/classfun/droidvm/lib/download/DiskDownloadManager.java
index 0d2ff6b21..85b3ccdd1 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/download/DiskDownloadManager.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/download/DiskDownloadManager.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.lib.download;
 
 import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/download/DiskDownloadService.java b/app/src/main/java/cn/classfun/droidvm/lib/download/DiskDownloadService.java
index 6ea6a7022..494c8c20a 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/download/DiskDownloadService.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/download/DiskDownloadService.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.lib.download;
 
 import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/natives/NativeProcess.java b/app/src/main/java/cn/classfun/droidvm/lib/natives/NativeProcess.java
index 9d43a59cb..9781a3c8f 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/natives/NativeProcess.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/natives/NativeProcess.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.lib.natives;
 
 import static java.lang.Thread.sleep;
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/natives/UnixHelper.java b/app/src/main/java/cn/classfun/droidvm/lib/natives/UnixHelper.java
index ce3616769..787f07201 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/natives/UnixHelper.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/natives/UnixHelper.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.lib.natives;
 
 import static cn.classfun.droidvm.lib.Constants.DATA_DIR;
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/network/FDSocket.java b/app/src/main/java/cn/classfun/droidvm/lib/network/FDSocket.java
index 731ab3745..894617d44 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/network/FDSocket.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/network/FDSocket.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.lib.network;
 
 import android.os.ParcelFileDescriptor;
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/network/IPAddress.java b/app/src/main/java/cn/classfun/droidvm/lib/network/IPAddress.java
index 283c03bef..090e9a994 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/network/IPAddress.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/network/IPAddress.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.lib.network;
 
 import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/network/IPNetwork.java b/app/src/main/java/cn/classfun/droidvm/lib/network/IPNetwork.java
index ad3ac87d6..6df9a3587 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/network/IPNetwork.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/network/IPNetwork.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.lib.network;
 
 import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/network/IPv4Address.java b/app/src/main/java/cn/classfun/droidvm/lib/network/IPv4Address.java
index 90c58aa39..0e05fd4b0 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/network/IPv4Address.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/network/IPv4Address.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.lib.network;
 
 import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/network/IPv4Network.java b/app/src/main/java/cn/classfun/droidvm/lib/network/IPv4Network.java
index e293d2663..8f81d1ac3 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/network/IPv4Network.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/network/IPv4Network.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.lib.network;
 
 import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/network/IPv6Address.java b/app/src/main/java/cn/classfun/droidvm/lib/network/IPv6Address.java
index 21b6c52cc..3fe34f9e8 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/network/IPv6Address.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/network/IPv6Address.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.lib.network;
 
 import static java.lang.System.arraycopy;
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/network/IPv6Network.java b/app/src/main/java/cn/classfun/droidvm/lib/network/IPv6Network.java
index 34b0918f7..6d154c003 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/network/IPv6Network.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/network/IPv6Network.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.lib.network;
 
 import static cn.classfun.droidvm.lib.network.IPv6Address.MAX_VALUE;
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/pkg/BootFile.java b/app/src/main/java/cn/classfun/droidvm/lib/pkg/BootFile.java
index 70ece34ec..8b22d0d1d 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/pkg/BootFile.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/pkg/BootFile.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.lib.pkg;
 
 import androidx.annotation.NonNull;
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/pkg/DiskEntry.java b/app/src/main/java/cn/classfun/droidvm/lib/pkg/DiskEntry.java
index 0017d0e6c..24c57c5e5 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/pkg/DiskEntry.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/pkg/DiskEntry.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.lib.pkg;
 
 import static cn.classfun.droidvm.lib.store.enums.Enums.optEnum;
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/pkg/DiskRef.java b/app/src/main/java/cn/classfun/droidvm/lib/pkg/DiskRef.java
index 768b98763..94f0de5bd 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/pkg/DiskRef.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/pkg/DiskRef.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.lib.pkg;
 
 import static java.util.Objects.requireNonNull;
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/pkg/PackageConstants.java b/app/src/main/java/cn/classfun/droidvm/lib/pkg/PackageConstants.java
index c45a8af77..bda4ca68e 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/pkg/PackageConstants.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/pkg/PackageConstants.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.lib.pkg;
 
 import cn.classfun.droidvm.lib.archive.Compression;
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/pkg/PackageHeader.java b/app/src/main/java/cn/classfun/droidvm/lib/pkg/PackageHeader.java
index 64956cf52..2e2b69ae8 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/pkg/PackageHeader.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/pkg/PackageHeader.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.lib.pkg;
 
 import static java.nio.charset.StandardCharsets.UTF_8;
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/pkg/PackageInput.java b/app/src/main/java/cn/classfun/droidvm/lib/pkg/PackageInput.java
index 397c2b1e5..daac35f29 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/pkg/PackageInput.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/pkg/PackageInput.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.lib.pkg;
 
 import static cn.classfun.droidvm.lib.archive.TarWriter.wrapCompressionInput;
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/pkg/PackageManifest.java b/app/src/main/java/cn/classfun/droidvm/lib/pkg/PackageManifest.java
index eaa900961..b20ece300 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/pkg/PackageManifest.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/pkg/PackageManifest.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.lib.pkg;
 
 import static cn.classfun.droidvm.lib.store.enums.Enums.optEnum;
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/pkg/Phase.java b/app/src/main/java/cn/classfun/droidvm/lib/pkg/Phase.java
index 41646fe3b..ce3400d61 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/pkg/Phase.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/pkg/Phase.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.lib.pkg;
 
 public enum Phase {
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/run/RunContext.java b/app/src/main/java/cn/classfun/droidvm/lib/run/RunContext.java
index 86c806445..2ede507e4 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/run/RunContext.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/run/RunContext.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.lib.run;
 
 import static cn.classfun.droidvm.lib.utils.RunUtils.escapedString;
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/run/RunResult.java b/app/src/main/java/cn/classfun/droidvm/lib/run/RunResult.java
index 4c42bfdfb..f95a1a683 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/run/RunResult.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/run/RunResult.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.lib.run;
 
 import android.util.Log;
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/run/root/RootRunContext.java b/app/src/main/java/cn/classfun/droidvm/lib/run/root/RootRunContext.java
index 9fd450b1e..d9f156917 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/run/root/RootRunContext.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/run/root/RootRunContext.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.lib.run.root;
 
 import androidx.annotation.NonNull;
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/run/root/RootRunResult.java b/app/src/main/java/cn/classfun/droidvm/lib/run/root/RootRunResult.java
index 038492599..e2e350ac6 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/run/root/RootRunResult.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/run/root/RootRunResult.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.lib.run.root;
 
 import com.topjohnwu.superuser.Shell;
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/run/system/SystemRunContext.java b/app/src/main/java/cn/classfun/droidvm/lib/run/system/SystemRunContext.java
index 72e5ed5c6..0325cccf1 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/run/system/SystemRunContext.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/run/system/SystemRunContext.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.lib.run.system;
 
 import static java.util.Objects.requireNonNullElse;
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/run/system/SystemRunResult.java b/app/src/main/java/cn/classfun/droidvm/lib/run/system/SystemRunResult.java
index 0a8a3e64a..103fe830f 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/run/system/SystemRunResult.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/run/system/SystemRunResult.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.lib.run.system;
 
 import static cn.classfun.droidvm.lib.utils.RunUtils.outStringToList;
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/size/SizeNumber.java b/app/src/main/java/cn/classfun/droidvm/lib/size/SizeNumber.java
index bc3ef75da..8cf230d58 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/size/SizeNumber.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/size/SizeNumber.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.lib.size;
 
 import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/size/SizeUnit.java b/app/src/main/java/cn/classfun/droidvm/lib/size/SizeUnit.java
index 4e482d881..50f627ad9 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/size/SizeUnit.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/size/SizeUnit.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.lib.size;
 
 import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/size/SizeUtils.java b/app/src/main/java/cn/classfun/droidvm/lib/size/SizeUtils.java
index b5870fb2d..19e334289 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/size/SizeUtils.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/size/SizeUtils.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.lib.size;
 
 import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/store/base/DataConfig.java b/app/src/main/java/cn/classfun/droidvm/lib/store/base/DataConfig.java
index 09ea8351b..cf6d63950 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/store/base/DataConfig.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/store/base/DataConfig.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.lib.store.base;
 
 import androidx.annotation.NonNull;
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/store/base/DataItem.java b/app/src/main/java/cn/classfun/droidvm/lib/store/base/DataItem.java
index e1de91471..18bda4f29 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/store/base/DataItem.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/store/base/DataItem.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.lib.store.base;
 
 import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/store/base/DataStore.java b/app/src/main/java/cn/classfun/droidvm/lib/store/base/DataStore.java
index 87a1949a1..4284dee3b 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/store/base/DataStore.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/store/base/DataStore.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.lib.store.base;
 
 import static cn.classfun.droidvm.lib.utils.FileUtils.loadJSONFile;
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/store/base/JSONSerialize.java b/app/src/main/java/cn/classfun/droidvm/lib/store/base/JSONSerialize.java
index 89625af07..fff224285 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/store/base/JSONSerialize.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/store/base/JSONSerialize.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.lib.store.base;
 
 import androidx.annotation.NonNull;
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/store/base/RingBuffer.java b/app/src/main/java/cn/classfun/droidvm/lib/store/base/RingBuffer.java
index 95e541104..1b65fd1ef 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/store/base/RingBuffer.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/store/base/RingBuffer.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.lib.store.base;
 
 import androidx.annotation.NonNull;
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/store/disk/DiskBus.java b/app/src/main/java/cn/classfun/droidvm/lib/store/disk/DiskBus.java
index f9bd3b99b..0491b8c37 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/store/disk/DiskBus.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/store/disk/DiskBus.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.lib.store.disk;
 
 import androidx.annotation.NonNull;
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/store/disk/DiskConfig.java b/app/src/main/java/cn/classfun/droidvm/lib/store/disk/DiskConfig.java
index cc8ac0fda..79b9cdf06 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/store/disk/DiskConfig.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/store/disk/DiskConfig.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.lib.store.disk;
 
 import static cn.classfun.droidvm.lib.utils.StringUtils.pathJoin;
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/store/disk/DiskStore.java b/app/src/main/java/cn/classfun/droidvm/lib/store/disk/DiskStore.java
index 1dce22b4b..17c1cdf8c 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/store/disk/DiskStore.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/store/disk/DiskStore.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.lib.store.disk;
 
 import android.content.Context;
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/store/enums/ColorEnum.java b/app/src/main/java/cn/classfun/droidvm/lib/store/enums/ColorEnum.java
index 4832cc1d6..28d2abd14 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/store/enums/ColorEnum.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/store/enums/ColorEnum.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.lib.store.enums;
 
 import android.content.Context;
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/store/enums/EnumPicker.java b/app/src/main/java/cn/classfun/droidvm/lib/store/enums/EnumPicker.java
index 11af07116..e8cd851db 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/store/enums/EnumPicker.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/store/enums/EnumPicker.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.lib.store.enums;
 
 import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/store/enums/Enums.java b/app/src/main/java/cn/classfun/droidvm/lib/store/enums/Enums.java
index 5918898f3..251a0969a 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/store/enums/Enums.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/store/enums/Enums.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.lib.store.enums;
 
 import android.widget.TextView;
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/store/enums/StringEnum.java b/app/src/main/java/cn/classfun/droidvm/lib/store/enums/StringEnum.java
index dea25264f..72d419283 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/store/enums/StringEnum.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/store/enums/StringEnum.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.lib.store.enums;
 
 import android.content.Context;
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/store/network/BridgeType.java b/app/src/main/java/cn/classfun/droidvm/lib/store/network/BridgeType.java
index bd8f10da2..1fa5e26bd 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/store/network/BridgeType.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/store/network/BridgeType.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.lib.store.network;
 
 import androidx.annotation.NonNull;
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/store/network/Ipv6Source.java b/app/src/main/java/cn/classfun/droidvm/lib/store/network/Ipv6Source.java
index e27728bb2..fae941086 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/store/network/Ipv6Source.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/store/network/Ipv6Source.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.lib.store.network;
 
 import androidx.annotation.NonNull;
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/store/network/NetworkConfig.java b/app/src/main/java/cn/classfun/droidvm/lib/store/network/NetworkConfig.java
index d44e27afc..9ce832721 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/store/network/NetworkConfig.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/store/network/NetworkConfig.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.lib.store.network;
 
 import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/store/network/NetworkConfigValidator.java b/app/src/main/java/cn/classfun/droidvm/lib/store/network/NetworkConfigValidator.java
index 8ba24cfc8..7b31d5b4d 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/store/network/NetworkConfigValidator.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/store/network/NetworkConfigValidator.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.lib.store.network;
 
 import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/store/network/NetworkState.java b/app/src/main/java/cn/classfun/droidvm/lib/store/network/NetworkState.java
index e46628c1c..ff565547c 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/store/network/NetworkState.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/store/network/NetworkState.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.lib.store.network;
 
 import androidx.annotation.ColorRes;
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/store/network/NetworkStore.java b/app/src/main/java/cn/classfun/droidvm/lib/store/network/NetworkStore.java
index b2b7f7d83..6e160edbb 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/store/network/NetworkStore.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/store/network/NetworkStore.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.lib.store.network;
 
 import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/store/network/UplinkMode.java b/app/src/main/java/cn/classfun/droidvm/lib/store/network/UplinkMode.java
index b5a6d0136..cd0468e32 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/store/network/UplinkMode.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/store/network/UplinkMode.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.lib.store.network;
 
 import androidx.annotation.NonNull;
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/store/network/VlanConfig.java b/app/src/main/java/cn/classfun/droidvm/lib/store/network/VlanConfig.java
index 8bf15f154..ca4161439 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/store/network/VlanConfig.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/store/network/VlanConfig.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.lib.store.network;
 
 import androidx.annotation.NonNull;
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/store/vm/BootConfig.java b/app/src/main/java/cn/classfun/droidvm/lib/store/vm/BootConfig.java
index 97a0f551b..d0f79e194 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/store/vm/BootConfig.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/store/vm/BootConfig.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.lib.store.vm;
 
 import androidx.annotation.NonNull;
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/store/vm/DisplayBackend.java b/app/src/main/java/cn/classfun/droidvm/lib/store/vm/DisplayBackend.java
index c8d912409..6e1ed58e5 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/store/vm/DisplayBackend.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/store/vm/DisplayBackend.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.lib.store.vm;
 
 import androidx.annotation.StringRes;
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/store/vm/GpuApi.java b/app/src/main/java/cn/classfun/droidvm/lib/store/vm/GpuApi.java
index fb4494118..49cc5d623 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/store/vm/GpuApi.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/store/vm/GpuApi.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.lib.store.vm;
 
 import androidx.annotation.StringRes;
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/store/vm/GpuBackend.java b/app/src/main/java/cn/classfun/droidvm/lib/store/vm/GpuBackend.java
index c8628da8c..cb5eb7ccc 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/store/vm/GpuBackend.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/store/vm/GpuBackend.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.lib.store.vm;
 
 import androidx.annotation.StringRes;
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/store/vm/LendMthpMode.java b/app/src/main/java/cn/classfun/droidvm/lib/store/vm/LendMthpMode.java
index d45676c48..2cf7e70d9 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/store/vm/LendMthpMode.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/store/vm/LendMthpMode.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.lib.store.vm;
 
 import static cn.classfun.droidvm.lib.store.enums.Enums.optEnum;
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/store/vm/NativeDisplay.java b/app/src/main/java/cn/classfun/droidvm/lib/store/vm/NativeDisplay.java
index b04457605..4e211b600 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/store/vm/NativeDisplay.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/store/vm/NativeDisplay.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.lib.store.vm;
 
 import static cn.classfun.droidvm.lib.Constants.DATA_DIR;
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/store/vm/PortProtocol.java b/app/src/main/java/cn/classfun/droidvm/lib/store/vm/PortProtocol.java
index edca416f7..0f39edfd4 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/store/vm/PortProtocol.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/store/vm/PortProtocol.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.lib.store.vm;
 
 import androidx.annotation.NonNull;
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/store/vm/ProtectedVM.java b/app/src/main/java/cn/classfun/droidvm/lib/store/vm/ProtectedVM.java
index 49f2866b0..95632dd33 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/store/vm/ProtectedVM.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/store/vm/ProtectedVM.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.lib.store.vm;
 
 import androidx.annotation.StringRes;
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/store/vm/SharedDirCache.java b/app/src/main/java/cn/classfun/droidvm/lib/store/vm/SharedDirCache.java
index 03baec596..da921faff 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/store/vm/SharedDirCache.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/store/vm/SharedDirCache.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.lib.store.vm;
 
 import androidx.annotation.NonNull;
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/store/vm/SharedDirType.java b/app/src/main/java/cn/classfun/droidvm/lib/store/vm/SharedDirType.java
index 9f34edfd8..ec6bf2890 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/store/vm/SharedDirType.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/store/vm/SharedDirType.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.lib.store.vm;
 
 import androidx.annotation.NonNull;
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/store/vm/VMBackend.java b/app/src/main/java/cn/classfun/droidvm/lib/store/vm/VMBackend.java
index f40c452d7..96fd0e77d 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/store/vm/VMBackend.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/store/vm/VMBackend.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.lib.store.vm;
 
 import androidx.annotation.StringRes;
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/store/vm/VMConfig.java b/app/src/main/java/cn/classfun/droidvm/lib/store/vm/VMConfig.java
index 4ef282125..deff965f4 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/store/vm/VMConfig.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/store/vm/VMConfig.java
@@ -1,6 +1,13 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.lib.store.vm;
 
 import static cn.classfun.droidvm.lib.Constants.PATH_EDK2_FIRMWARE;
+import static cn.classfun.droidvm.lib.Constants.PATH_BUILTIN_INITRD;
+import static cn.classfun.droidvm.lib.Constants.PATH_BUILTIN_KERNEL;
+
+import android.content.Context;
 
 import androidx.annotation.NonNull;
 
@@ -15,6 +22,14 @@
 import cn.classfun.droidvm.lib.store.base.DataItem;
 
 public class VMConfig extends DataConfig {
+    public static final boolean NEW_VM_DEFAULT_HUGEPAGES = true;
+    public static final boolean NEW_VM_DEFAULT_PMU = true;
+    public static final boolean NEW_VM_DEFAULT_RNG = true;
+    public static final boolean NEW_VM_DEFAULT_SMT = true;
+    public static final boolean NEW_VM_DEFAULT_USB = true;
+    public static final ProtectedVM NEW_VM_DEFAULT_PROTECTED_VM =
+        ProtectedVM.PSEUDO_UNPROTECTED;
+
     public VMConfig() {
         setId(UUID.randomUUID());
         item.set("created_at", System.currentTimeMillis());
@@ -28,6 +43,101 @@ public VMConfig(@NonNull JSONObject obj) throws JSONException {
         }
         migrateBoot();
         migrateNicForwards();
+        // Configs from before "screens" describe one display chosen by an either/or backend
+        // enum; fold that into the per-screen bindings, dropping the legacy keys so nothing
+        // downstream can read a second, disagreeing answer.
+        VMScreenConfig.migrate(item);
+        // Configs from before "serial_ports" implicitly meant "COM1 = app console, rest sinks";
+        // make that explicit so every reader sees the same list.
+        VMSerialConfig.ensureDefaults(item);
+    }
+
+    /**
+     * Materializes the values shown by every tab when Customize opens for a new VM. Quick
+     * creation starts here and only replaces the fields it exposes, so both creation paths keep
+     * the same defaults as those defaults evolve.
+     */
+    @NonNull
+    public static VMConfig createWithCustomizeDefaults(@NonNull Context context) {
+        var config = new VMConfig();
+        var item = config.item;
+        item.set("memory_mb", 512L);
+        item.set("cpu_count", 1L);
+        item.set("swiotlb_mb", 256L);
+        item.set("balloon", false);
+        item.set("pmu", NEW_VM_DEFAULT_PMU);
+        item.set("rng", NEW_VM_DEFAULT_RNG);
+        item.set("smt", NEW_VM_DEFAULT_SMT);
+        item.set("usb", NEW_VM_DEFAULT_USB);
+        item.set("sandbox", false);
+        item.set("hugepages", NEW_VM_DEFAULT_HUGEPAGES);
+        item.set("strace", false);
+        item.set("gpu_vram_folio_threshold_kb", 1024L);
+        item.set(LendMthpMode.KEY, LendMthpMode.defaultForDevice(context));
+        item.set("protected_vm", NEW_VM_DEFAULT_PROTECTED_VM);
+        item.set("backend", VMBackend.DEFAULT);
+        item.set("hypervisor", VMHypervisor.defaultForNewVm(VMBackend.DEFAULT));
+        item.set("extra_options", DataItem.newArray());
+        item.set("environment_variables", DataItem.newArray());
+        item.set(CpuPlacementPlan.KEY_AFFINITY, "");
+        item.set(CpuPlacementPlan.KEY_AUTO, true);
+        item.set(CpuPlacementPlan.KEY_CAPACITY, "");
+        item.set(CpuPlacementPlan.KEY_CLUSTERS, "");
+
+        var boot = BootConfig.of(config);
+        boot.setProtocol(BootConfig.Protocol.UEFI);
+        boot.setUefiFirmware("");
+        boot.setUefiVarsEnabled(true);
+        boot.setUefiVars("");
+        boot.setLinuxSource(BootConfig.LinuxSource.MANUAL);
+        boot.setKernel(PATH_BUILTIN_KERNEL);
+        boot.setInitrd(PATH_BUILTIN_INITRD);
+        boot.setCmdline(BootConfig.DEFAULT_MANUAL_CMDLINE);
+        boot.setImageCmdline("");
+        boot.setImageDisk(0);
+        boot.setVdafix(true);
+        boot.setBootWait(BootConfig.DEFAULT_BOOT_WAIT);
+        item.set("auto_up", false);
+
+        item.set("disks", DataItem.newArray());
+        item.set("shared_dirs", DataItem.newArray());
+        item.set("networks", DataItem.newArray());
+
+        var gpu = VMScreenConfig.of(item, VMScreenConfig.ID_GPU0);
+        gpu.setEnabled(false);
+        gpu.setExporter(DisplayExporter.NONE);
+        gpu.setTransportCap(DisplayTransportCap.defaultFor(
+            VMScreenConfig.ID_GPU0, DisplayExporter.NATIVE));
+        gpu.setInputEnabled(true);
+        gpu.setWidth(VMScreenConfig.DEFAULT_WIDTH);
+        gpu.setHeight(VMScreenConfig.DEFAULT_HEIGHT);
+        gpu.setRefreshRate(VMScreenConfig.DEFAULT_REFRESH_RATE);
+        gpu.setDpiH(VMScreenConfig.DEFAULT_DPI);
+        gpu.setDpiV(VMScreenConfig.DEFAULT_DPI);
+
+        var simpleFb = VMScreenConfig.of(item, VMScreenConfig.ID_SIMPLEFB);
+        simpleFb.setEnabled(true);
+        simpleFb.setExporter(DisplayExporter.NATIVE);
+        simpleFb.setTransportCap(DisplayTransportCap.defaultFor(
+            VMScreenConfig.ID_SIMPLEFB, DisplayExporter.NATIVE));
+        simpleFb.setInputEnabled(true);
+        simpleFb.setWidth(VMScreenConfig.DEFAULT_WIDTH);
+        simpleFb.setHeight(VMScreenConfig.DEFAULT_HEIGHT);
+        simpleFb.setPollHz(VMScreenConfig.NEW_VM_DEFAULT_POLL_HZ);
+        item.set("display_blit_provider", GpuBlitProvider.TURNIP);
+        item.set(CpuPlacementPlan.KEY_GPU_CGROUP, false);
+        item.set(CpuPlacementPlan.KEY_GPU_CGROUP_PATH,
+            CpuPlacementPlan.DEFAULT_GPU_CGROUP_PATH);
+        item.set(CpuPlacementPlan.KEY_GPU_CGROUP_CPUS, "");
+        VpuConfig.setEnabled(item, false);
+        VpuConfig.setHostPoolMb(item, VpuConfig.DEFAULT_HOST_POOL_MB);
+        VpuConfig.setGuestPoolMb(item, VpuConfig.DEFAULT_GUEST_POOL_MB);
+
+        var peripherals = DataItem.newArray();
+        peripherals.append(VMPeripheralConfig.createDefaultVirtioSound().item);
+        item.set("peripherals", peripherals);
+        VMSerialConfig.ensureDefaults(item);
+        return config;
     }
 
     /**
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/store/vm/VMHypervisor.java b/app/src/main/java/cn/classfun/droidvm/lib/store/vm/VMHypervisor.java
index e592d5007..8b91dc74b 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/store/vm/VMHypervisor.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/store/vm/VMHypervisor.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.lib.store.vm;
 
 import static cn.classfun.droidvm.lib.utils.FileUtils.shellCheckExists;
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/store/vm/VMNicConfig.java b/app/src/main/java/cn/classfun/droidvm/lib/store/vm/VMNicConfig.java
index d3be02f9a..44cfc51f9 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/store/vm/VMNicConfig.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/store/vm/VMNicConfig.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.lib.store.vm;
 
 import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/store/vm/VMState.java b/app/src/main/java/cn/classfun/droidvm/lib/store/vm/VMState.java
index 291ff6859..7c127e266 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/store/vm/VMState.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/store/vm/VMState.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.lib.store.vm;
 
 import androidx.annotation.ColorRes;
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/store/vm/VMStore.java b/app/src/main/java/cn/classfun/droidvm/lib/store/vm/VMStore.java
index 06dd953d1..dcf25f41d 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/store/vm/VMStore.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/store/vm/VMStore.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.lib.store.vm;
 
 import android.content.Context;
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/ui/BackAskHelper.java b/app/src/main/java/cn/classfun/droidvm/lib/ui/BackAskHelper.java
index e725862ed..1e422b989 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/ui/BackAskHelper.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/ui/BackAskHelper.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.lib.ui;
 
 import androidx.activity.OnBackPressedCallback;
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/ui/CopyableField.java b/app/src/main/java/cn/classfun/droidvm/lib/ui/CopyableField.java
index 2c7dcb84d..ae48272ae 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/ui/CopyableField.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/ui/CopyableField.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.lib.ui;
 
 import android.content.ClipData;
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/ui/DragTouchListener.java b/app/src/main/java/cn/classfun/droidvm/lib/ui/DragTouchListener.java
index 67c2d5e76..34e46dd31 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/ui/DragTouchListener.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/ui/DragTouchListener.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.lib.ui;
 
 import static java.lang.Math.hypot;
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/ui/IconItemAdapter.java b/app/src/main/java/cn/classfun/droidvm/lib/ui/IconItemAdapter.java
index 2a62a972c..51ecc3a2c 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/ui/IconItemAdapter.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/ui/IconItemAdapter.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.lib.ui;
 
 import android.content.Context;
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/ui/ImeInsetsApplier.java b/app/src/main/java/cn/classfun/droidvm/lib/ui/ImeInsetsApplier.java
index 948b49525..20532c39b 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/ui/ImeInsetsApplier.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/ui/ImeInsetsApplier.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.lib.ui;
 
 import android.app.Activity;
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/ui/ImeInsetsExempt.java b/app/src/main/java/cn/classfun/droidvm/lib/ui/ImeInsetsExempt.java
index a78ec638e..c20b7b6e6 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/ui/ImeInsetsExempt.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/ui/ImeInsetsExempt.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.lib.ui;
 
 /**
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/ui/MaterialMenu.java b/app/src/main/java/cn/classfun/droidvm/lib/ui/MaterialMenu.java
index 2ac024dea..c3b32e6fc 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/ui/MaterialMenu.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/ui/MaterialMenu.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.lib.ui;
 
 import android.content.Context;
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/ui/MenuDialogBuilder.java b/app/src/main/java/cn/classfun/droidvm/lib/ui/MenuDialogBuilder.java
index f7abdbf2b..f2e6dc21d 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/ui/MenuDialogBuilder.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/ui/MenuDialogBuilder.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.lib.ui;
 
 import android.content.Context;
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/ui/NotificationPermission.java b/app/src/main/java/cn/classfun/droidvm/lib/ui/NotificationPermission.java
index 1d7d4878d..64ecbb2e8 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/ui/NotificationPermission.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/ui/NotificationPermission.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.lib.ui;
 
 import android.Manifest;
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/ui/SimpleAdapterDataObserver.java b/app/src/main/java/cn/classfun/droidvm/lib/ui/SimpleAdapterDataObserver.java
index 314e58b84..e7c73a188 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/ui/SimpleAdapterDataObserver.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/ui/SimpleAdapterDataObserver.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.lib.ui;
 
 import androidx.annotation.NonNull;
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/ui/SimpleTextWatcher.java b/app/src/main/java/cn/classfun/droidvm/lib/ui/SimpleTextWatcher.java
index 2fcaae356..6bb3b4e6e 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/ui/SimpleTextWatcher.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/ui/SimpleTextWatcher.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.lib.ui;
 
 import android.text.Editable;
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/ui/SwipeableTabActivity.java b/app/src/main/java/cn/classfun/droidvm/lib/ui/SwipeableTabActivity.java
index 2cd6710db..dc4042043 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/ui/SwipeableTabActivity.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/ui/SwipeableTabActivity.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.lib.ui;
 
 import android.view.MotionEvent;
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/ui/TabSwipeHelper.java b/app/src/main/java/cn/classfun/droidvm/lib/ui/TabSwipeHelper.java
index ff415d81c..48ef75cd5 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/ui/TabSwipeHelper.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/ui/TabSwipeHelper.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.lib.ui;
 
 import android.app.Activity;
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/ui/UIContext.java b/app/src/main/java/cn/classfun/droidvm/lib/ui/UIContext.java
index b7cd64bf3..f070de281 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/ui/UIContext.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/ui/UIContext.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.lib.ui;
 
 import android.app.Activity;
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/ui/termux/SimpleTerminalSessionClient.java b/app/src/main/java/cn/classfun/droidvm/lib/ui/termux/SimpleTerminalSessionClient.java
index 07e471c3e..1c612c02d 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/ui/termux/SimpleTerminalSessionClient.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/ui/termux/SimpleTerminalSessionClient.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.lib.ui.termux;
 
 import android.content.ClipboardManager;
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/ui/termux/SimpleTerminalViewClient.java b/app/src/main/java/cn/classfun/droidvm/lib/ui/termux/SimpleTerminalViewClient.java
index 0bcbf66a9..9e6d101f0 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/ui/termux/SimpleTerminalViewClient.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/ui/termux/SimpleTerminalViewClient.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.lib.ui.termux;
 
 import android.util.Log;
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/ui/termux/TerminalFonts.java b/app/src/main/java/cn/classfun/droidvm/lib/ui/termux/TerminalFonts.java
index d6b64d9e2..3ec7c0157 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/ui/termux/TerminalFonts.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/ui/termux/TerminalFonts.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.lib.ui.termux;
 
 import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/utils/AssetUtils.java b/app/src/main/java/cn/classfun/droidvm/lib/utils/AssetUtils.java
index 6ca1f30f1..e1604e0a1 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/utils/AssetUtils.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/utils/AssetUtils.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.lib.utils;
 
 import static android.os.Build.SUPPORTED_ABIS;
@@ -292,8 +295,28 @@ public static void cleanupPrebuilt(@NonNull Context context) {
         }
     }
 
+    /**
+     * Serialises extraction. This writes into the data dir, so two callers at once are two
+     * writers interleaving mkdir and file creation on the same tree -- observed as one thread
+     * failing on "Failed to mkdir .../usr/bin" while the other completed, two milliseconds
+     * apart. The up-to-date check inside the lock is what makes the second caller cheap: by the
+     * time it gets in, the work is done and it returns immediately.
+     *
+     * <p>Held here rather than at each call site because "only one extraction at a time" is a
+     * property of the operation, not something every caller should have to remember.
+     */
+    private static final Object EXTRACT_LOCK = new Object();
+
     public static void extractPrebuilt(
         @NonNull Context context
+    ) throws IOException, JSONException {
+        synchronized (EXTRACT_LOCK) {
+            extractPrebuiltLocked(context);
+        }
+    }
+
+    private static void extractPrebuiltLocked(
+        @NonNull Context context
     ) throws IOException, JSONException {
         if (!needsExtractPrebuilt(context)) {
             Log.d(TAG, "Prebuilt archive is up to date, skipping extraction");
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/utils/BinaryUtils.java b/app/src/main/java/cn/classfun/droidvm/lib/utils/BinaryUtils.java
index fb1039c63..2c1869654 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/utils/BinaryUtils.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/utils/BinaryUtils.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.lib.utils;
 
 import static java.nio.charset.StandardCharsets.UTF_8;
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/utils/CpuUtils.java b/app/src/main/java/cn/classfun/droidvm/lib/utils/CpuUtils.java
index 571414a45..155a34137 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/utils/CpuUtils.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/utils/CpuUtils.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.lib.utils;
 
 import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/utils/FileUtils.java b/app/src/main/java/cn/classfun/droidvm/lib/utils/FileUtils.java
index 6f9075f46..69d017c8d 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/utils/FileUtils.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/utils/FileUtils.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.lib.utils;
 
 import static cn.classfun.droidvm.lib.utils.RunUtils.escapedString;
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/utils/ImageUtils.java b/app/src/main/java/cn/classfun/droidvm/lib/utils/ImageUtils.java
index ba4d3042c..4e48ff6d6 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/utils/ImageUtils.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/utils/ImageUtils.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.lib.utils;
 
 import static cn.classfun.droidvm.lib.utils.AssetUtils.getPrebuiltBinaryPath;
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/utils/JsonUtils.java b/app/src/main/java/cn/classfun/droidvm/lib/utils/JsonUtils.java
index 86d11638e..58d9319b0 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/utils/JsonUtils.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/utils/JsonUtils.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.lib.utils;
 
 import androidx.annotation.NonNull;
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/utils/NetUtils.java b/app/src/main/java/cn/classfun/droidvm/lib/utils/NetUtils.java
index f4506352c..313594019 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/utils/NetUtils.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/utils/NetUtils.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.lib.utils;
 
 import static org.yaml.snakeyaml.util.UriEncoder.encode;
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/utils/ProcessUtils.java b/app/src/main/java/cn/classfun/droidvm/lib/utils/ProcessUtils.java
index 698e3da14..7e99eec03 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/utils/ProcessUtils.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/utils/ProcessUtils.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.lib.utils;
 
 import static java.lang.Integer.parseInt;
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/utils/RunUtils.java b/app/src/main/java/cn/classfun/droidvm/lib/utils/RunUtils.java
index 31b56dfa4..c30f1476e 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/utils/RunUtils.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/utils/RunUtils.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.lib.utils;
 
 import static java.util.Objects.requireNonNullElse;
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/utils/ShareUtils.java b/app/src/main/java/cn/classfun/droidvm/lib/utils/ShareUtils.java
index ee824e39a..1f94c1a53 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/utils/ShareUtils.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/utils/ShareUtils.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.lib.utils;
 
 import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/utils/StringUtils.java b/app/src/main/java/cn/classfun/droidvm/lib/utils/StringUtils.java
index 649dbc101..3b6608c40 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/utils/StringUtils.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/utils/StringUtils.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.lib.utils;
 
 import static java.nio.charset.StandardCharsets.UTF_8;
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/utils/ThreadUtils.java b/app/src/main/java/cn/classfun/droidvm/lib/utils/ThreadUtils.java
index 3c47dbe7d..a77adbb6a 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/utils/ThreadUtils.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/utils/ThreadUtils.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.lib.utils;
 
 import static java.util.concurrent.Executors.newCachedThreadPool;
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/utils/Try.java b/app/src/main/java/cn/classfun/droidvm/lib/utils/Try.java
index ed195bbb4..c6a030239 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/utils/Try.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/utils/Try.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.lib.utils;
 
 import androidx.annotation.Nullable;
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/SplashActivity.java b/app/src/main/java/cn/classfun/droidvm/ui/SplashActivity.java
index efaf37367..9300c8ef4 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/SplashActivity.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/SplashActivity.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.ui;
 
 import static cn.classfun.droidvm.lib.utils.AssetUtils.extractBinaries;
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/agent/AgentOperationActivity.java b/app/src/main/java/cn/classfun/droidvm/ui/agent/AgentOperationActivity.java
index 83f4b35be..8b600e21d 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/agent/AgentOperationActivity.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/agent/AgentOperationActivity.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.ui.agent;
 
 import static android.view.View.GONE;
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/agent/base/AgentVM.java b/app/src/main/java/cn/classfun/droidvm/ui/agent/base/AgentVM.java
index 0b4ca11e5..95eb357f7 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/agent/base/AgentVM.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/agent/base/AgentVM.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.ui.agent.base;
 
 import static cn.classfun.droidvm.lib.Constants.DATA_DIR;
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/agent/base/BaseAction.java b/app/src/main/java/cn/classfun/droidvm/ui/agent/base/BaseAction.java
index 61e75783f..9a112ac55 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/agent/base/BaseAction.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/agent/base/BaseAction.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.ui.agent.base;
 
 import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/agent/password/ChangePasswordActivity.java b/app/src/main/java/cn/classfun/droidvm/ui/agent/password/ChangePasswordActivity.java
index 0e68865af..93194d372 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/agent/password/ChangePasswordActivity.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/agent/password/ChangePasswordActivity.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.ui.agent.password;
 
 import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/agent/password/PasswordAction.java b/app/src/main/java/cn/classfun/droidvm/ui/agent/password/PasswordAction.java
index 5c0683c16..f5475ac33 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/agent/password/PasswordAction.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/agent/password/PasswordAction.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.ui.agent.password;
 
 import androidx.annotation.NonNull;
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/disk/action/DiskActionDialog.java b/app/src/main/java/cn/classfun/droidvm/ui/disk/action/DiskActionDialog.java
index 99d717265..d0c37defa 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/disk/action/DiskActionDialog.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/disk/action/DiskActionDialog.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.ui.disk.action;
 
 import static android.widget.Toast.LENGTH_SHORT;
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/disk/action/DiskCloneDialog.java b/app/src/main/java/cn/classfun/droidvm/ui/disk/action/DiskCloneDialog.java
index e64c8100f..24406b1c6 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/disk/action/DiskCloneDialog.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/disk/action/DiskCloneDialog.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.ui.disk.action;
 
 import static cn.classfun.droidvm.lib.utils.FileUtils.shellCheckExists;
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/disk/action/DiskResizeDialog.java b/app/src/main/java/cn/classfun/droidvm/ui/disk/action/DiskResizeDialog.java
index d4a2b9c82..d0f14d0a3 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/disk/action/DiskResizeDialog.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/disk/action/DiskResizeDialog.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.ui.disk.action;
 
 import static cn.classfun.droidvm.lib.utils.ThreadUtils.runOnPool;
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/disk/action/DiskSetFormatDialog.java b/app/src/main/java/cn/classfun/droidvm/ui/disk/action/DiskSetFormatDialog.java
index 358f48696..98688864d 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/disk/action/DiskSetFormatDialog.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/disk/action/DiskSetFormatDialog.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.ui.disk.action;
 
 import static android.widget.Toast.LENGTH_LONG;
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/disk/create/DiskCompress.java b/app/src/main/java/cn/classfun/droidvm/ui/disk/create/DiskCompress.java
index 855fb1106..ce409a809 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/disk/create/DiskCompress.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/disk/create/DiskCompress.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.ui.disk.create;
 
 import androidx.annotation.StringRes;
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/disk/create/DiskCreateActivity.java b/app/src/main/java/cn/classfun/droidvm/ui/disk/create/DiskCreateActivity.java
index b372f6bc2..fa3a0b82b 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/disk/create/DiskCreateActivity.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/disk/create/DiskCreateActivity.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.ui.disk.create;
 
 import static android.view.View.GONE;
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/disk/create/DiskFormat.java b/app/src/main/java/cn/classfun/droidvm/ui/disk/create/DiskFormat.java
index 7d1945d7b..7a45f26ea 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/disk/create/DiskFormat.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/disk/create/DiskFormat.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.ui.disk.create;
 
 import static cn.classfun.droidvm.lib.utils.StringUtils.extensionLower;
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/disk/download/ImportURLActivity.java b/app/src/main/java/cn/classfun/droidvm/ui/disk/download/ImportURLActivity.java
index a6cacee16..b81133c85 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/disk/download/ImportURLActivity.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/disk/download/ImportURLActivity.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.ui.disk.download;
 
 import static android.view.View.GONE;
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/disk/images/FlatImage.java b/app/src/main/java/cn/classfun/droidvm/ui/disk/images/FlatImage.java
index cbf01d2a2..ff56efea5 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/disk/images/FlatImage.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/disk/images/FlatImage.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.ui.disk.images;
 
 import static cn.classfun.droidvm.lib.size.SizeUtils.formatSize;
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/disk/images/ImageAdapter.java b/app/src/main/java/cn/classfun/droidvm/ui/disk/images/ImageAdapter.java
index c6ab065ec..cf1ac9f13 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/disk/images/ImageAdapter.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/disk/images/ImageAdapter.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.ui.disk.images;
 
 import android.annotation.SuppressLint;
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/disk/images/ImagePickerDialog.java b/app/src/main/java/cn/classfun/droidvm/ui/disk/images/ImagePickerDialog.java
index c2de92862..7285257cc 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/disk/images/ImagePickerDialog.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/disk/images/ImagePickerDialog.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.ui.disk.images;
 
 import static android.view.View.GONE;
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/disk/images/ImageViewHolder.java b/app/src/main/java/cn/classfun/droidvm/ui/disk/images/ImageViewHolder.java
index e975d0061..5720ddee3 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/disk/images/ImageViewHolder.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/disk/images/ImageViewHolder.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.ui.disk.images;
 
 import android.view.View;
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/disk/images/ImportImagesActivity.java b/app/src/main/java/cn/classfun/droidvm/ui/disk/images/ImportImagesActivity.java
index 389b809e4..213f354e9 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/disk/images/ImportImagesActivity.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/disk/images/ImportImagesActivity.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.ui.disk.images;
 
 import static android.view.View.GONE;
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/disk/info/DiskInfoActivity.java b/app/src/main/java/cn/classfun/droidvm/ui/disk/info/DiskInfoActivity.java
index d48909210..7e4b17f85 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/disk/info/DiskInfoActivity.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/disk/info/DiskInfoActivity.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.ui.disk.info;
 
 import static cn.classfun.droidvm.lib.utils.AssetUtils.getPrebuiltBinaryPath;
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/disk/info/base/DiskInfoBaseTab.java b/app/src/main/java/cn/classfun/droidvm/ui/disk/info/base/DiskInfoBaseTab.java
index 3df8212de..2b7e27fec 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/disk/info/base/DiskInfoBaseTab.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/disk/info/base/DiskInfoBaseTab.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.ui.disk.info.base;
 
 import static android.view.ViewGroup.LayoutParams.MATCH_PARENT;
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/disk/info/base/DiskInfoTab.java b/app/src/main/java/cn/classfun/droidvm/ui/disk/info/base/DiskInfoTab.java
index 19997997d..3c65236cb 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/disk/info/base/DiskInfoTab.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/disk/info/base/DiskInfoTab.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.ui.disk.info.base;
 
 import android.widget.FrameLayout;
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/disk/info/info/DiskInfoInfoTab.java b/app/src/main/java/cn/classfun/droidvm/ui/disk/info/info/DiskInfoInfoTab.java
index f819a5845..40e1e49bd 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/disk/info/info/DiskInfoInfoTab.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/disk/info/info/DiskInfoInfoTab.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.ui.disk.info.info;
 
 import static android.view.View.GONE;
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/disk/info/snapshot/DiskInfoSnapshotTab.java b/app/src/main/java/cn/classfun/droidvm/ui/disk/info/snapshot/DiskInfoSnapshotTab.java
index 465057d97..55eba1e6a 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/disk/info/snapshot/DiskInfoSnapshotTab.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/disk/info/snapshot/DiskInfoSnapshotTab.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.ui.disk.info.snapshot;
 
 import static android.content.DialogInterface.BUTTON_POSITIVE;
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/disk/info/snapshot/DiskSnapshotEntryAdapter.java b/app/src/main/java/cn/classfun/droidvm/ui/disk/info/snapshot/DiskSnapshotEntryAdapter.java
index 0066b2da1..2499caffb 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/disk/info/snapshot/DiskSnapshotEntryAdapter.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/disk/info/snapshot/DiskSnapshotEntryAdapter.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.ui.disk.info.snapshot;
 
 import static android.view.View.GONE;
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/disk/info/snapshot/DiskSnapshotEntryViewHolder.java b/app/src/main/java/cn/classfun/droidvm/ui/disk/info/snapshot/DiskSnapshotEntryViewHolder.java
index fc492c61e..63e160732 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/disk/info/snapshot/DiskSnapshotEntryViewHolder.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/disk/info/snapshot/DiskSnapshotEntryViewHolder.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.ui.disk.info.snapshot;
 
 import android.view.View;
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/disk/info/tree/DiskInfoTreeTab.java b/app/src/main/java/cn/classfun/droidvm/ui/disk/info/tree/DiskInfoTreeTab.java
index 39e3dce05..08bf40046 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/disk/info/tree/DiskInfoTreeTab.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/disk/info/tree/DiskInfoTreeTab.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.ui.disk.info.tree;
 
 import static android.view.View.GONE;
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/disk/info/tree/DiskTreeEntryAdapter.java b/app/src/main/java/cn/classfun/droidvm/ui/disk/info/tree/DiskTreeEntryAdapter.java
index 45c1f8d69..f78a2c7dc 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/disk/info/tree/DiskTreeEntryAdapter.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/disk/info/tree/DiskTreeEntryAdapter.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.ui.disk.info.tree;
 
 import static android.view.View.GONE;
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/disk/info/tree/DiskTreeEntryViewHolder.java b/app/src/main/java/cn/classfun/droidvm/ui/disk/info/tree/DiskTreeEntryViewHolder.java
index 8a62760e7..0f341cbd7 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/disk/info/tree/DiskTreeEntryViewHolder.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/disk/info/tree/DiskTreeEntryViewHolder.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.ui.disk.info.tree;
 
 import android.view.View;
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/disk/lxc/ImportLxcImagesActivity.java b/app/src/main/java/cn/classfun/droidvm/ui/disk/lxc/ImportLxcImagesActivity.java
index ebe80ea9b..6e0ea17a7 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/disk/lxc/ImportLxcImagesActivity.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/disk/lxc/ImportLxcImagesActivity.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.ui.disk.lxc;
 
 import static android.R.attr.colorError;
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/disk/lxc/LxcImage.java b/app/src/main/java/cn/classfun/droidvm/ui/disk/lxc/LxcImage.java
index 6054d46b5..28a17a620 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/disk/lxc/LxcImage.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/disk/lxc/LxcImage.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.ui.disk.lxc;
 
 import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/disk/lxc/LxcImageParser.java b/app/src/main/java/cn/classfun/droidvm/ui/disk/lxc/LxcImageParser.java
index c5159e512..0f2392c0a 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/disk/lxc/LxcImageParser.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/disk/lxc/LxcImageParser.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.ui.disk.lxc;
 
 import static android.os.Build.SUPPORTED_ABIS;
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/disk/operation/DiskOperationActivity.java b/app/src/main/java/cn/classfun/droidvm/ui/disk/operation/DiskOperationActivity.java
index 6edf43ac9..7c0e51f99 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/disk/operation/DiskOperationActivity.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/disk/operation/DiskOperationActivity.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.ui.disk.operation;
 
 import static android.view.View.GONE;
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/disk/operation/ImageCommandGenerate.java b/app/src/main/java/cn/classfun/droidvm/ui/disk/operation/ImageCommandGenerate.java
index 825285c46..87df93805 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/disk/operation/ImageCommandGenerate.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/disk/operation/ImageCommandGenerate.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.ui.disk.operation;
 
 import static cn.classfun.droidvm.lib.utils.AssetUtils.getPrebuiltBinaryPath;
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/hugepage/AcquireContainerView.java b/app/src/main/java/cn/classfun/droidvm/ui/hugepage/AcquireContainerView.java
index 1a56bf0a5..ea0d5fa1c 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/hugepage/AcquireContainerView.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/hugepage/AcquireContainerView.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.ui.hugepage;
 
 import android.content.Context;
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/hugepage/HugePageActivity.java b/app/src/main/java/cn/classfun/droidvm/ui/hugepage/HugePageActivity.java
index 261e1c59f..1ccc5bfc5 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/hugepage/HugePageActivity.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/hugepage/HugePageActivity.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.ui.hugepage;
 
 import static android.view.View.GONE;
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/hugepage/HugePageColor.java b/app/src/main/java/cn/classfun/droidvm/ui/hugepage/HugePageColor.java
index 7287fbef9..a19f34a9d 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/hugepage/HugePageColor.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/hugepage/HugePageColor.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.ui.hugepage;
 
 import android.content.Context;
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/hugepage/HugePageModel.java b/app/src/main/java/cn/classfun/droidvm/ui/hugepage/HugePageModel.java
index aef1fb615..fc331b324 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/hugepage/HugePageModel.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/hugepage/HugePageModel.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.ui.hugepage;
 
 import static cn.classfun.droidvm.lib.utils.FileUtils.shellCheckExists;
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/hugepage/HugePageProcess.java b/app/src/main/java/cn/classfun/droidvm/ui/hugepage/HugePageProcess.java
index 406faec50..e953bce18 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/hugepage/HugePageProcess.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/hugepage/HugePageProcess.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.ui.hugepage;
 
 import androidx.annotation.NonNull;
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/hugepage/HugePageProcessActivity.java b/app/src/main/java/cn/classfun/droidvm/ui/hugepage/HugePageProcessActivity.java
index 53f4e9809..dccc4d350 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/hugepage/HugePageProcessActivity.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/hugepage/HugePageProcessActivity.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.ui.hugepage;
 
 import static android.view.View.GONE;
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/hugepage/HugePageProcessAdapter.java b/app/src/main/java/cn/classfun/droidvm/ui/hugepage/HugePageProcessAdapter.java
index 1e3206493..51fe99236 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/hugepage/HugePageProcessAdapter.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/hugepage/HugePageProcessAdapter.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.ui.hugepage;
 
 import static android.view.View.GONE;
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/hugepage/SegmentedBar.java b/app/src/main/java/cn/classfun/droidvm/ui/hugepage/SegmentedBar.java
index e81bcd868..5888c11df 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/hugepage/SegmentedBar.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/hugepage/SegmentedBar.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.ui.hugepage;
 
 import android.content.Context;
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/logs/LogAdapter.java b/app/src/main/java/cn/classfun/droidvm/ui/logs/LogAdapter.java
index 94ba80d7c..23b1468a3 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/logs/LogAdapter.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/logs/LogAdapter.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.ui.logs;
 
 import android.view.LayoutInflater;
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/logs/LogViewHolder.java b/app/src/main/java/cn/classfun/droidvm/ui/logs/LogViewHolder.java
index 3b39c8755..7cfbb66c4 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/logs/LogViewHolder.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/logs/LogViewHolder.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.ui.logs;
 
 import android.view.View;
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/logs/LogsActivity.java b/app/src/main/java/cn/classfun/droidvm/ui/logs/LogsActivity.java
index 0292a8946..5b10d255d 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/logs/LogsActivity.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/logs/LogsActivity.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.ui.logs;
 
 import static java.nio.charset.StandardCharsets.UTF_8;
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/main/MainActivity.java b/app/src/main/java/cn/classfun/droidvm/ui/main/MainActivity.java
index 26144f4f5..85cdb2630 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/main/MainActivity.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/main/MainActivity.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.ui.main;
 
 import static android.content.Intent.ACTION_VIEW;
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/main/base/BaseViewHolder.java b/app/src/main/java/cn/classfun/droidvm/ui/main/base/BaseViewHolder.java
index e99d11f94..fe9e9c611 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/main/base/BaseViewHolder.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/main/base/BaseViewHolder.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.ui.main.base;
 
 import android.view.View;
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/main/base/MainBaseFragment.java b/app/src/main/java/cn/classfun/droidvm/ui/main/base/MainBaseFragment.java
index d746e1a99..583012f58 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/main/base/MainBaseFragment.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/main/base/MainBaseFragment.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.ui.main.base;
 
 import android.os.Bundle;
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/main/base/MainFragmentEnum.java b/app/src/main/java/cn/classfun/droidvm/ui/main/base/MainFragmentEnum.java
index 6f8f0a1d5..c5ed53159 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/main/base/MainFragmentEnum.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/main/base/MainFragmentEnum.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.ui.main.base;
 
 import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/main/base/list/DataAdapter.java b/app/src/main/java/cn/classfun/droidvm/ui/main/base/list/DataAdapter.java
index 4aa236459..c4c882500 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/main/base/list/DataAdapter.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/main/base/list/DataAdapter.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.ui.main.base.list;
 
 import android.annotation.SuppressLint;
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/main/base/list/MainListFragment.java b/app/src/main/java/cn/classfun/droidvm/ui/main/base/list/MainListFragment.java
index b64ac47e8..7b673f056 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/main/base/list/MainListFragment.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/main/base/list/MainListFragment.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.ui.main.base.list;
 
 import static android.view.View.GONE;
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/main/base/stateful/MainStatefulFragment.java b/app/src/main/java/cn/classfun/droidvm/ui/main/base/stateful/MainStatefulFragment.java
index 3e6cb949d..d76b3c9d5 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/main/base/stateful/MainStatefulFragment.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/main/base/stateful/MainStatefulFragment.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.ui.main.base.stateful;
 
 import static cn.classfun.droidvm.lib.store.enums.Enums.optEnum;
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/main/base/stateful/StatefulAdapter.java b/app/src/main/java/cn/classfun/droidvm/ui/main/base/stateful/StatefulAdapter.java
index 15392970c..3fd4f5344 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/main/base/stateful/StatefulAdapter.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/main/base/stateful/StatefulAdapter.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.ui.main.base.stateful;
 
 import static android.view.View.VISIBLE;
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/main/disk/DiskAdapter.java b/app/src/main/java/cn/classfun/droidvm/ui/main/disk/DiskAdapter.java
index e97e932b4..e2355af39 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/main/disk/DiskAdapter.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/main/disk/DiskAdapter.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.ui.main.disk;
 
 import static android.view.View.VISIBLE;
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/main/disk/ImageInfo.java b/app/src/main/java/cn/classfun/droidvm/ui/main/disk/ImageInfo.java
index 3085297ff..f1f64f5ea 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/main/disk/ImageInfo.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/main/disk/ImageInfo.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.ui.main.disk;
 
 final class ImageInfo {
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/main/disk/MainDiskFragment.java b/app/src/main/java/cn/classfun/droidvm/ui/main/disk/MainDiskFragment.java
index f4174e07b..a472f6689 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/main/disk/MainDiskFragment.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/main/disk/MainDiskFragment.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.ui.main.disk;
 
 import android.app.Activity;
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/main/home/MainHomeFragment.java b/app/src/main/java/cn/classfun/droidvm/ui/main/home/MainHomeFragment.java
index 4eaedd551..3bb466986 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/main/home/MainHomeFragment.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/main/home/MainHomeFragment.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.ui.main.home;
 
 import static android.content.Intent.ACTION_VIEW;
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/main/network/MainNetworkFragment.java b/app/src/main/java/cn/classfun/droidvm/ui/main/network/MainNetworkFragment.java
index c340258f6..4f13bdaf3 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/main/network/MainNetworkFragment.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/main/network/MainNetworkFragment.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.ui.main.network;
 
 import static android.widget.Toast.LENGTH_LONG;
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/main/network/NetworkAdapter.java b/app/src/main/java/cn/classfun/droidvm/ui/main/network/NetworkAdapter.java
index 5aeb08da1..d02eb48bd 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/main/network/NetworkAdapter.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/main/network/NetworkAdapter.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.ui.main.network;
 
 import static android.view.View.VISIBLE;
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/main/settings/ApiManagerDialog.java b/app/src/main/java/cn/classfun/droidvm/ui/main/settings/ApiManagerDialog.java
index e70b43af9..f2e565cdb 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/main/settings/ApiManagerDialog.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/main/settings/ApiManagerDialog.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.ui.main.settings;
 
 import android.content.Context;
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/main/settings/ApiServiceAdapter.java b/app/src/main/java/cn/classfun/droidvm/ui/main/settings/ApiServiceAdapter.java
index 7632fe3a7..48d1ab6ad 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/main/settings/ApiServiceAdapter.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/main/settings/ApiServiceAdapter.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.ui.main.settings;
 
 import android.view.LayoutInflater;
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/main/settings/ApiServiceViewHolder.java b/app/src/main/java/cn/classfun/droidvm/ui/main/settings/ApiServiceViewHolder.java
index 8b35ee3cb..4ffd0c272 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/main/settings/ApiServiceViewHolder.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/main/settings/ApiServiceViewHolder.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.ui.main.settings;
 
 import android.view.View;
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/main/settings/LicenseListAdapter.java b/app/src/main/java/cn/classfun/droidvm/ui/main/settings/LicenseListAdapter.java
index 5f7949bb3..434a1328f 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/main/settings/LicenseListAdapter.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/main/settings/LicenseListAdapter.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.ui.main.settings;
 
 
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/main/settings/MainSettingsFragment.java b/app/src/main/java/cn/classfun/droidvm/ui/main/settings/MainSettingsFragment.java
index 617628e24..0ae19e041 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/main/settings/MainSettingsFragment.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/main/settings/MainSettingsFragment.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.ui.main.settings;
 
 import static android.content.Intent.ACTION_VIEW;
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/main/settings/SoftwareLicenseDialog.java b/app/src/main/java/cn/classfun/droidvm/ui/main/settings/SoftwareLicenseDialog.java
index 3ef82c42d..c6442c8b3 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/main/settings/SoftwareLicenseDialog.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/main/settings/SoftwareLicenseDialog.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.ui.main.settings;
 
 import static android.content.Intent.ACTION_VIEW;
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/main/vm/MainVMFragment.java b/app/src/main/java/cn/classfun/droidvm/ui/main/vm/MainVMFragment.java
index 0d79233c3..dc8f0a984 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/main/vm/MainVMFragment.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/main/vm/MainVMFragment.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.ui.main.vm;
 
 import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/main/vm/VMAdapter.java b/app/src/main/java/cn/classfun/droidvm/ui/main/vm/VMAdapter.java
index 29a66d326..06fcb5b8e 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/main/vm/VMAdapter.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/main/vm/VMAdapter.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.ui.main.vm;
 
 import static android.view.View.VISIBLE;
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/network/NetworkActions.java b/app/src/main/java/cn/classfun/droidvm/ui/network/NetworkActions.java
index 4e8a43830..8329e2233 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/network/NetworkActions.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/network/NetworkActions.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.ui.network;
 
 import static android.widget.Toast.LENGTH_LONG;
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/network/edit/NetworkEditActivity.java b/app/src/main/java/cn/classfun/droidvm/ui/network/edit/NetworkEditActivity.java
index 4ba17b646..71d6a5053 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/network/edit/NetworkEditActivity.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/network/edit/NetworkEditActivity.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.ui.network.edit;
 
 import static android.view.View.GONE;
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/network/edit/VlanCardBinder.java b/app/src/main/java/cn/classfun/droidvm/ui/network/edit/VlanCardBinder.java
index 5e640ea7d..3c5080032 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/network/edit/VlanCardBinder.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/network/edit/VlanCardBinder.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.ui.network.edit;
 
 import static android.view.View.GONE;
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/network/info/NetworkInfoActivity.java b/app/src/main/java/cn/classfun/droidvm/ui/network/info/NetworkInfoActivity.java
index 3e4149902..f6262f680 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/network/info/NetworkInfoActivity.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/network/info/NetworkInfoActivity.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.ui.network.info;
 
 import static android.view.View.GONE;
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/network/info/NetworkToolLogActivity.java b/app/src/main/java/cn/classfun/droidvm/ui/network/info/NetworkToolLogActivity.java
index 2659a6a23..dd0b4665c 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/network/info/NetworkToolLogActivity.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/network/info/NetworkToolLogActivity.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.ui.network.info;
 
 import android.os.Bundle;
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/setup/SetupActivity.java b/app/src/main/java/cn/classfun/droidvm/ui/setup/SetupActivity.java
index b419f57b8..b470c09b5 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/setup/SetupActivity.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/setup/SetupActivity.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.ui.setup;
 
 import static android.view.View.GONE;
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/setup/base/BaseCheckStepFragment.java b/app/src/main/java/cn/classfun/droidvm/ui/setup/base/BaseCheckStepFragment.java
index cbd35647c..99e907573 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/setup/base/BaseCheckStepFragment.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/setup/base/BaseCheckStepFragment.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.ui.setup.base;
 
 import static android.view.View.GONE;
@@ -33,9 +36,25 @@ public void onViewCreated(@NonNull View view, @Nullable Bundle savedInstanceStat
         runCheck();
     }
 
+    /**
+     * onViewCreated has already run the check by the time the first onResume arrives, and every
+     * runCheck() here starts a worker thread. Re-running it immediately means two workers doing
+     * the same job: harmless for the read-only steps, but the extract step writes files, and two
+     * of those racing produced "extraction failed" followed by "extraction succeeded" -- the
+     * loser tripping over the directories the winner was creating.
+     *
+     * <p>Later resumes still re-check, which is the point of doing it here at all: the user
+     * leaves to grant root or a permission and comes back expecting the step to notice.
+     */
+    private boolean resumedBefore;
+
     @Override
     public void onResume() {
         super.onResume();
+        if (!resumedBefore) {
+            resumedBefore = true;
+            return;
+        }
         runCheck();
     }
 
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/setup/base/BaseStepFragment.java b/app/src/main/java/cn/classfun/droidvm/ui/setup/base/BaseStepFragment.java
index e24414663..c0f750734 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/setup/base/BaseStepFragment.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/setup/base/BaseStepFragment.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.ui.setup.base;
 
 import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/setup/step/DoneStepFragment.java b/app/src/main/java/cn/classfun/droidvm/ui/setup/step/DoneStepFragment.java
index 226ea9d82..699a52e6c 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/setup/step/DoneStepFragment.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/setup/step/DoneStepFragment.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.ui.setup.step;
 
 import static android.content.Context.MODE_PRIVATE;
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/setup/step/ExtractStepFragment.java b/app/src/main/java/cn/classfun/droidvm/ui/setup/step/ExtractStepFragment.java
index 23afa2efb..18a5d0951 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/setup/step/ExtractStepFragment.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/setup/step/ExtractStepFragment.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.ui.setup.step;
 
 import static cn.classfun.droidvm.lib.utils.AssetUtils.extractPrebuilt;
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/setup/step/PrivacyStepFragment.java b/app/src/main/java/cn/classfun/droidvm/ui/setup/step/PrivacyStepFragment.java
index 2c61ab2b2..d9400c569 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/setup/step/PrivacyStepFragment.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/setup/step/PrivacyStepFragment.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.ui.setup.step;
 
 import android.os.Bundle;
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/setup/step/RootStepFragment.java b/app/src/main/java/cn/classfun/droidvm/ui/setup/step/RootStepFragment.java
index a03eb10f7..f1193f7b7 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/setup/step/RootStepFragment.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/setup/step/RootStepFragment.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.ui.setup.step;
 
 import static cn.classfun.droidvm.lib.utils.RunUtils.runList;
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/setup/step/SocStepFragment.java b/app/src/main/java/cn/classfun/droidvm/ui/setup/step/SocStepFragment.java
index 4e5f20ce9..454bc4a1e 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/setup/step/SocStepFragment.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/setup/step/SocStepFragment.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.ui.setup.step;
 
 import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/setup/step/StartStepFragment.java b/app/src/main/java/cn/classfun/droidvm/ui/setup/step/StartStepFragment.java
index 3457dd9dc..788bf5b5f 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/setup/step/StartStepFragment.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/setup/step/StartStepFragment.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.ui.setup.step;
 
 import static android.view.View.GONE;
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/setup/step/StorageStepFragment.java b/app/src/main/java/cn/classfun/droidvm/ui/setup/step/StorageStepFragment.java
index 1a81188bf..0a910f4ed 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/setup/step/StorageStepFragment.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/setup/step/StorageStepFragment.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.ui.setup.step;
 
 import static android.view.View.GONE;
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/setup/step/VirtualizationStepFragment.java b/app/src/main/java/cn/classfun/droidvm/ui/setup/step/VirtualizationStepFragment.java
index 5003a803b..46c07a99b 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/setup/step/VirtualizationStepFragment.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/setup/step/VirtualizationStepFragment.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.ui.setup.step;
 
 import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/update/UpdateDialog.java b/app/src/main/java/cn/classfun/droidvm/ui/update/UpdateDialog.java
index 907b0df57..24a47af0e 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/update/UpdateDialog.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/update/UpdateDialog.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.ui.update;
 
 import android.content.Context;
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/update/UpdateInfo.java b/app/src/main/java/cn/classfun/droidvm/ui/update/UpdateInfo.java
index b3544e101..39b3cc5d9 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/update/UpdateInfo.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/update/UpdateInfo.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.ui.update;
 
 import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/update/VersionCheck.java b/app/src/main/java/cn/classfun/droidvm/ui/update/VersionCheck.java
index e9e0ea393..9a13bfc8b 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/update/VersionCheck.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/update/VersionCheck.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.ui.update;
 
 import static cn.classfun.droidvm.lib.utils.ThreadUtils.runOnPool;
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/NicLeaseAllocator.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/NicLeaseAllocator.java
index 018fb1b34..208175004 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/NicLeaseAllocator.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/NicLeaseAllocator.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.ui.vm;
 
 import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/VMActions.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/VMActions.java
index 8804b5a88..ab59a5748 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/VMActions.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/VMActions.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.ui.vm;
 
 import static android.widget.Toast.LENGTH_LONG;
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/boot/BootEntries.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/boot/BootEntries.java
index de833127f..7728040bc 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/boot/BootEntries.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/boot/BootEntries.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.ui.vm.boot;
 
 import static cn.classfun.droidvm.lib.utils.StringUtils.pathJoin;
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/boot/BootMenuDialog.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/boot/BootMenuDialog.java
index cd84b5bb4..6d919be51 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/boot/BootMenuDialog.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/boot/BootMenuDialog.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.ui.vm.boot;
 
 import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/console/VMConsoleActivity.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/console/VMConsoleActivity.java
index 12fcaba1a..2dec5a72a 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/console/VMConsoleActivity.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/console/VMConsoleActivity.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.ui.vm.console;
 
 import static android.view.HapticFeedbackConstants.KEYBOARD_TAP;
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/console/VMConsoleRouter.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/console/VMConsoleRouter.java
index a8a014634..b23567a87 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/console/VMConsoleRouter.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/console/VMConsoleRouter.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.ui.vm.console;
 
 import android.content.Context;
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/display/base/BaseExtraKeysAdapter.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/base/BaseExtraKeysAdapter.java
index f0cc647e3..295d48b2f 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/display/base/BaseExtraKeysAdapter.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/base/BaseExtraKeysAdapter.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.ui.vm.display.base;
 
 import static android.view.KeyEvent.KEYCODE_ALT_LEFT;
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/display/base/DisplayExtraKeysPanel.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/base/DisplayExtraKeysPanel.java
index 6cd012460..2152723e4 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/display/base/DisplayExtraKeysPanel.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/base/DisplayExtraKeysPanel.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.ui.vm.display.base;
 
 import static android.view.HapticFeedbackConstants.KEYBOARD_TAP;
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/display/base/DisplayPresentation.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/base/DisplayPresentation.java
index 434f28478..d0f76954f 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/display/base/DisplayPresentation.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/base/DisplayPresentation.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.ui.vm.display.base;
 
 import android.app.Presentation;
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/display/base/DisplayTouchPadPanel.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/base/DisplayTouchPadPanel.java
index 5f8233bdb..30526ae63 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/display/base/DisplayTouchPadPanel.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/base/DisplayTouchPadPanel.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.ui.vm.display.base;
 
 import static android.view.HapticFeedbackConstants.KEYBOARD_TAP;
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/display/base/KeyListener.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/base/KeyListener.java
index 79433a4f9..48dc5a234 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/display/base/KeyListener.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/base/KeyListener.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.ui.vm.display.base;
 
 public interface KeyListener {
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/display/base/UsbHidInput.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/base/UsbHidInput.java
index d034ee04a..d445fd231 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/display/base/UsbHidInput.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/base/UsbHidInput.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.ui.vm.display.base;
 
 import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/display/base/X11Keymap.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/base/X11Keymap.java
index 22921d5e1..37c5e8457 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/display/base/X11Keymap.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/base/X11Keymap.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.ui.vm.display.base;
 
 import android.view.KeyEvent;
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/display/nativedisplay/display/DisplayProvider.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/nativedisplay/display/DisplayProvider.java
index 524e5db1b..f5e85ea4e 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/display/nativedisplay/display/DisplayProvider.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/nativedisplay/display/DisplayProvider.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.ui.vm.display.nativedisplay.display;
 
 import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/display/nativedisplay/display/VMNativeDisplayActivity.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/nativedisplay/display/VMNativeDisplayActivity.java
index 12f0622f2..a6209ade8 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/display/nativedisplay/display/VMNativeDisplayActivity.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/nativedisplay/display/VMNativeDisplayActivity.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.ui.vm.display.nativedisplay.display;
 
 import static android.view.Gravity.CENTER;
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/display/nativedisplay/input/DirectInputSink.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/nativedisplay/input/DirectInputSink.java
index 523c758a5..f03f98155 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/display/nativedisplay/input/DirectInputSink.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/nativedisplay/input/DirectInputSink.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.ui.vm.display.nativedisplay.input;
 
 import static cn.classfun.droidvm.lib.store.vm.NativeDisplay.CHANNEL_COUNT;
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/display/nativedisplay/input/EvdevEncoder.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/nativedisplay/input/EvdevEncoder.java
index a78b2d2b8..9f3d6bc5c 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/display/nativedisplay/input/EvdevEncoder.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/nativedisplay/input/EvdevEncoder.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.ui.vm.display.nativedisplay.input;
 
 import android.view.MotionEvent;
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/display/nativedisplay/input/InputForwarder.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/nativedisplay/input/InputForwarder.java
index ce192c4a7..ef001df42 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/display/nativedisplay/input/InputForwarder.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/nativedisplay/input/InputForwarder.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.ui.vm.display.nativedisplay.input;
 
 import static cn.classfun.droidvm.lib.store.vm.NativeDisplay.KEYBOARD;
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/display/nativedisplay/input/KeyCodeMapper.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/nativedisplay/input/KeyCodeMapper.java
index 644eaf138..22b3a0e24 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/display/nativedisplay/input/KeyCodeMapper.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/nativedisplay/input/KeyCodeMapper.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.ui.vm.display.nativedisplay.input;
 
 import android.view.KeyEvent;
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/display/nativedisplay/input/NativeExtraKeysPanel.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/nativedisplay/input/NativeExtraKeysPanel.java
index 3cbe10f8b..f85f30eff 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/display/nativedisplay/input/NativeExtraKeysPanel.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/nativedisplay/input/NativeExtraKeysPanel.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.ui.vm.display.nativedisplay.input;
 
 import static android.view.KeyEvent.KEYCODE_CAPS_LOCK;
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/display/nativedisplay/input/NativeKeyboardEditText.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/nativedisplay/input/NativeKeyboardEditText.java
index d7ef0de4e..68abe6f8c 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/display/nativedisplay/input/NativeKeyboardEditText.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/nativedisplay/input/NativeKeyboardEditText.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.ui.vm.display.nativedisplay.input;
 
 import android.content.Context;
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/display/nativedisplay/input/TouchScaleCalculator.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/nativedisplay/input/TouchScaleCalculator.java
index 85a91bc43..e677bf071 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/display/nativedisplay/input/TouchScaleCalculator.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/nativedisplay/input/TouchScaleCalculator.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.ui.vm.display.nativedisplay.input;
 
 /**
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/display/vnc/base/BaseVncActivity.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/vnc/base/BaseVncActivity.java
index e5447a5d7..4b44ca8ee 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/display/vnc/base/BaseVncActivity.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/vnc/base/BaseVncActivity.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.ui.vm.display.vnc.base;
 
 import static android.content.DialogInterface.BUTTON_NEUTRAL;
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/display/vnc/base/VncClient.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/vnc/base/VncClient.java
index 3975fc088..4e490374d 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/display/vnc/base/VncClient.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/vnc/base/VncClient.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.ui.vm.display.vnc.base;
 
 import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/display/vnc/base/VncDisplayView.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/vnc/base/VncDisplayView.java
index 863a8d86f..fefb4c29e 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/display/vnc/base/VncDisplayView.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/vnc/base/VncDisplayView.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.ui.vm.display.vnc.base;
 
 import android.content.Context;
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/display/vnc/display/VMVncDisplayActivity.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/vnc/display/VMVncDisplayActivity.java
index e177de753..135310e7d 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/display/vnc/display/VMVncDisplayActivity.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/vnc/display/VMVncDisplayActivity.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.ui.vm.display.vnc.display;
 
 import static android.view.Gravity.BOTTOM;
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/display/vnc/display/VMVncPresentationActivity.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/vnc/display/VMVncPresentationActivity.java
index f76cfa08a..1f7231175 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/display/vnc/display/VMVncPresentationActivity.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/vnc/display/VMVncPresentationActivity.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.ui.vm.display.vnc.display;
 
 import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/display/vnc/input/VncExtraKeysPanel.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/vnc/input/VncExtraKeysPanel.java
index 0f2c440dd..2bc4c3649 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/display/vnc/input/VncExtraKeysPanel.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/vnc/input/VncExtraKeysPanel.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.ui.vm.display.vnc.input;
 
 import static android.view.KeyEvent.KEYCODE_CAPS_LOCK;
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/display/vnc/input/VncTouchPadPanel.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/vnc/input/VncTouchPadPanel.java
index b9e99b1bc..925170a28 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/display/vnc/input/VncTouchPadPanel.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/vnc/input/VncTouchPadPanel.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.ui.vm.display.vnc.input;
 
 import static java.lang.Math.max;
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/VMEditActivity.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/VMEditActivity.java
index acb06d0f9..c540d5d1d 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/VMEditActivity.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/VMEditActivity.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.ui.vm.edit;
 
 import static java.util.Objects.requireNonNull;
@@ -27,11 +30,14 @@
 
 import cn.classfun.droidvm.R;
 import cn.classfun.droidvm.lib.ui.BackAskHelper;
+import cn.classfun.droidvm.lib.ui.CameraPermission;
+import cn.classfun.droidvm.lib.ui.RecordAudioPermission;
 import cn.classfun.droidvm.lib.ui.SwipeableTabActivity;
 import cn.classfun.droidvm.lib.store.vm.VMConfig;
 import cn.classfun.droidvm.lib.store.vm.VMStore;
 import cn.classfun.droidvm.ui.vm.edit.base.VMEditBaseTab;
 import cn.classfun.droidvm.ui.vm.edit.base.VMEditTab;
+import cn.classfun.droidvm.ui.vm.edit.peripheral.VMEditPeripheralTab;
 
 public final class VMEditActivity extends SwipeableTabActivity {
     private static final String TAG = "VMEditActivity";
@@ -47,6 +53,10 @@ public final class VMEditActivity extends SwipeableTabActivity {
     public Consumer<Uri> currentPicker = null;
     public boolean editMode = false;
     public UUID editVMId = null;
+    private RecordAudioPermission recordAudioPermission;
+    private CameraPermission cameraPermission;
+    /** A microphone permission choice has already been offered during this edit session. */
+    private boolean micPermissionHandled = false;
     private final Map<String, Object> sharedData = new HashMap<>();
 
 
@@ -59,6 +69,25 @@ public <T> T get(@NonNull String key, T def) {
         return (T) sharedData.getOrDefault(key, def);
     }
 
+    /** Host mic permission gate, shared with the peripheral tab. */
+    @NonNull
+    public RecordAudioPermission getRecordAudioPermission() {
+        return recordAudioPermission;
+    }
+
+    /** Shares one microphone permission prompt between adding a device and saving the VM. */
+    public void ensureRecordAudioThen(@NonNull Runnable action) {
+        micPermissionHandled = true;
+        recordAudioPermission.ensureThen(action);
+    }
+
+    /** Host camera permission gate, shared with the peripheral tab. Unlike the mic one, a
+     *  refusal here stops the peripheral being added -- see {@link CameraPermission}. */
+    @NonNull
+    public CameraPermission getCameraPermission() {
+        return cameraPermission;
+    }
+
     private void pickerResult(Uri uri) {
         if (currentPicker != null && uri != null)
             currentPicker.accept(uri);
@@ -75,6 +104,10 @@ private void folderPickerResult(Uri uri) {
     protected void onCreate(Bundle savedInstanceState) {
         super.onCreate(savedInstanceState);
         setContentView(R.layout.activity_vm_edit);
+        // Registered here, ahead of the tabs: an ActivityResultLauncher can only be created
+        // before the activity reaches STARTED.
+        recordAudioPermission = new RecordAudioPermission(this);
+        cameraPermission = new CameraPermission(this);
         tabs = createTabInstances();
         collapsingToolbar = findViewById(R.id.collapsing_toolbar);
         tabLayout = findViewById(R.id.tab_layout);
@@ -159,7 +192,14 @@ private void initialize() {
         fab.setOnClickListener(v -> doSave());
         setupTabs();
         tabs.forEach(VMEditBaseTab::initValue);
+        // Both paths load a config. Without this a new VM showed whatever android:text the
+        // layout happened to carry, so every numeric field had two defaults -- the XML one the
+        // user actually got, and the optLong fallback that only applied when editing an older
+        // VM missing that key. They had already drifted: the DRM pool offered 1024 in the form
+        // while the code said 8, and nothing could notice, because each is only reachable from
+        // a path the other never takes.
         if (editMode) loadExistingConfig();
+        else tabs.forEach(tab -> tab.loadConfig(VMConfig.createWithCustomizeDefaults(this)));
     }
 
     private void loadExistingConfig() {
@@ -182,6 +222,13 @@ public List<VMEditBaseTab> createTabInstances() {
     }
 
     private void doSave() {
+        var peripheralTab = getTab(VMEditTab.TAB_PERIPHERAL);
+        if (!micPermissionHandled
+            && peripheralTab instanceof VMEditPeripheralTab
+            && ((VMEditPeripheralTab) peripheralTab).hasMicrophone()) {
+            ensureRecordAudioThen(this::doSave);
+            return;
+        }
         // Commit any field still being edited: NIC MAC/offset/forward inputs
         // write back to the model on focus loss, so flush the focused view
         // before reading the tabs' config.
@@ -220,7 +267,7 @@ private void doSave() {
                 return;
             }
         } else {
-            config = new VMConfig();
+            config = VMConfig.createWithCustomizeDefaults(this);
         }
         for (var tab : tabs) {
             try {
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/base/VMEditBaseTab.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/base/VMEditBaseTab.java
index a5fba6a9c..90b1f82d3 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/base/VMEditBaseTab.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/base/VMEditBaseTab.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.ui.vm.edit.base;
 
 import android.view.View;
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/base/VMEditTab.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/base/VMEditTab.java
index 93a936821..5668040a5 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/base/VMEditTab.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/base/VMEditTab.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.ui.vm.edit.base;
 
 import static java.util.Objects.requireNonNull;
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/basic/VMEditBasicTab.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/basic/VMEditBasicTab.java
index 31ce2dc2c..a20aa4cbb 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/basic/VMEditBasicTab.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/basic/VMEditBasicTab.java
@@ -1,12 +1,17 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.ui.vm.edit.basic;
 
+import static android.view.View.GONE;
+import static android.view.View.VISIBLE;
+import static java.lang.Integer.parseInt;
 import static cn.classfun.droidvm.lib.utils.FileUtils.checkFileName;
 import static cn.classfun.droidvm.lib.store.enums.Enums.optEnum;
 import static cn.classfun.droidvm.lib.store.vm.ProtectedVM.PROTECTED_WITHOUT_FIRMWARE;
 import static cn.classfun.droidvm.lib.utils.StringUtils.getEditText;
 
 import android.text.TextUtils;
-import android.util.Log;
 import android.view.View;
 
 import androidx.annotation.NonNull;
@@ -14,10 +19,15 @@
 
 import com.google.android.material.textfield.TextInputEditText;
 
+import java.util.Collection;
+import java.util.List;
+import java.util.Map;
+import java.util.TreeMap;
+
 import cn.classfun.droidvm.R;
-import cn.classfun.droidvm.lib.data.QcomChipName;
-import cn.classfun.droidvm.lib.data.QcomGunyahSupports;
 import cn.classfun.droidvm.lib.store.base.DataItem;
+import cn.classfun.droidvm.lib.store.vm.CpuPlacementDraft;
+import cn.classfun.droidvm.lib.store.vm.CpuPlacementPlan;
 import cn.classfun.droidvm.lib.store.vm.LendMthpMode;
 import cn.classfun.droidvm.lib.store.vm.ProtectedVM;
 import cn.classfun.droidvm.lib.store.vm.VMBackend;
@@ -25,14 +35,17 @@
 import cn.classfun.droidvm.lib.store.vm.VMConfig;
 import cn.classfun.droidvm.lib.store.vm.VMHypervisor;
 import cn.classfun.droidvm.lib.store.vm.VMStore;
+import cn.classfun.droidvm.lib.utils.CpuUtils;
 import cn.classfun.droidvm.ui.vm.edit.VMEditActivity;
 import cn.classfun.droidvm.ui.vm.edit.base.VMEditBaseTab;
 import cn.classfun.droidvm.ui.widgets.row.ChooseRowWidget;
 import cn.classfun.droidvm.ui.widgets.row.SwitchRowWidget;
 import cn.classfun.droidvm.ui.widgets.row.TextInputRowWidget;
+import cn.classfun.droidvm.ui.widgets.tools.CpuCorePickerDialog;
 
 public final class VMEditBasicTab extends VMEditBaseTab {
-    private final String TAG = "VMEditBasicTab";
+    /** Matches the ti_max on input_cpu in partial_vm_edit_basic.xml. */
+    private static final int MAX_VCPUS = 64;
     private TextInputRowWidget inputName;
     private TextInputRowWidget inputMemory;
     private TextInputRowWidget inputCpu;
@@ -50,6 +63,21 @@ public final class VMEditBasicTab extends VMEditBaseTab {
     private ChooseRowWidget chooseBackend;
     private ChooseRowWidget chooseHypervisor;
     private TextInputEditText etExtraOptions;
+    private TextInputEditText etEnvironmentVariables;
+
+    /** Host cores as reported by sysfs; read once, drives the cpuset picker. */
+    private List<CpuUtils.CpuCore> hostCores = List.of();
+    /**
+     * vCPU affinity held for the editor dialog and for save: vCPU index to host
+     * cores. Only vCPUs the user actually bound appear, matching crosvm's
+     * "absent means no mask". Edited through {@link VMCpuAffinityDialog}.
+     */
+    private final Map<Integer, List<Integer>> affinity = new TreeMap<>();
+    /** Auto-derive capacity/cluster; the dialog owns this, the tab persists it. */
+    private boolean cpuTopologyAuto = true;
+    /** Manual capacity/cluster overrides, only meaningful when auto is off. */
+    private String manualCapacity = "";
+    private String manualClusters = "";
 
     public VMEditBasicTab(VMEditActivity parent, View view) {
         super(parent, view);
@@ -74,6 +102,7 @@ public void initView() {
         chooseBackend = view.findViewById(R.id.choose_backend);
         chooseHypervisor = view.findViewById(R.id.choose_hypervisor);
         etExtraOptions = view.findViewById(R.id.et_extra_options);
+        etEnvironmentVariables = view.findViewById(R.id.et_environment_variables);
     }
 
     @Override
@@ -81,27 +110,28 @@ public void initValue() {
         inputMemory.setValue(512, SizeUnit.MB);
         inputCpu.setValue(1);
         inputSwiotlb.setValue(64, SizeUnit.MB);
+        swBalloon.setChecked(false);
+        swPmu.setChecked(VMConfig.NEW_VM_DEFAULT_PMU);
+        swRng.setChecked(VMConfig.NEW_VM_DEFAULT_RNG);
+        swSmt.setChecked(VMConfig.NEW_VM_DEFAULT_SMT);
+        swUsb.setChecked(VMConfig.NEW_VM_DEFAULT_USB);
+        swSandbox.setChecked(false);
+        swHugepages.setChecked(VMConfig.NEW_VM_DEFAULT_HUGEPAGES);
         swDebug.setChecked(false);
-        chooseProtectedVm.configure(ProtectedVM.class, PROTECTED_WITHOUT_FIRMWARE);
+        chooseProtectedVm.configure(
+            ProtectedVM.class, VMConfig.NEW_VM_DEFAULT_PROTECTED_VM);
         chooseBackend.configure(VMBackend.class, VMBackend.DEFAULT);
-        chooseHypervisor.configure(VMHypervisor.class, VMHypervisor.DEFAULT);
-        choosePrepareLendMthp.configure(LendMthpMode.class, LendMthpMode.CHUNKED);
+        chooseHypervisor.configure(
+            VMHypervisor.class, VMHypervisor.defaultForNewVm(VMBackend.DEFAULT));
+        choosePrepareLendMthp.configure(
+            LendMthpMode.class, LendMthpMode.defaultForDevice(parent));
         parent.put("backend", VMBackend.DEFAULT);
-        parent.put("hypervisor", VMHypervisor.DEFAULT);
+        parent.put("hypervisor", chooseHypervisor.getSelectedItem());
         chooseBackend.setOnValueChangedListener((oldValue, newValue) -> parent.put("backend", newValue));
         chooseHypervisor.setOnValueChangedListener((oldValue, newValue) -> parent.put("hypervisor", newValue));
-        try {
-            var socModel = QcomChipName.getCurrentSoC();
-            var gunyah = new QcomGunyahSupports(parent);
-            if (gunyah.isCapacitySupported(socModel, "no_mthp"))
-                choosePrepareLendMthp.setSelectedItem(LendMthpMode.DISABLED);
-            if (gunyah.isCapacitySupported(socModel, "mthp_chunked"))
-                choosePrepareLendMthp.setSelectedItem(LendMthpMode.CHUNKED);
-            if (gunyah.isCapacitySupported(socModel, "mthp_single"))
-                choosePrepareLendMthp.setSelectedItem(LendMthpMode.SINGLE);
-        } catch (Exception e) {
-            Log.w(TAG, "failed to load soc capacity", e);
-        }
+        chooseProtectedVm.setOnValueChangedListener((oldValue, newValue) -> updateProtectedVisibility());
+        updateProtectedVisibility();
+        initCpuTopology();
     }
 
     @Override
@@ -110,7 +140,7 @@ public void loadConfig(@NonNull VMConfig config) {
         inputName.setText(config.getName());
         inputMemory.setValue(item.optLong("memory_mb", 512), SizeUnit.MB);
         inputCpu.setValue(item.optLong("cpu_count", 1));
-        inputSwiotlb.setValue(item.optLong("swiotlb_mb", 64), SizeUnit.MB);
+        inputSwiotlb.setValue(item.optLong("swiotlb_mb", 256), SizeUnit.MB);
         swBalloon.setChecked(item.optBoolean("balloon", false));
         swPmu.setChecked(item.optBoolean("pmu", false));
         swRng.setChecked(item.optBoolean("rng", false));
@@ -122,7 +152,11 @@ public void loadConfig(@NonNull VMConfig config) {
         choosePrepareLendMthp.setSelectedItem(LendMthpMode.fromItem(item));
         chooseProtectedVm.setSelectedItem(optEnum(item, "protected_vm", PROTECTED_WITHOUT_FIRMWARE));
         chooseBackend.setSelectedItem(optEnum(item, "backend", VMBackend.DEFAULT));
-        chooseHypervisor.setSelectedItem(optEnum(item, "hypervisor", VMHypervisor.DEFAULT));
+        var backend = optEnum(item, "backend", VMBackend.DEFAULT);
+        var configuredHypervisor = optEnum(item, "hypervisor", VMHypervisor.DEFAULT);
+        var hypervisor = VMHypervisor.resolveConfigured(backend, configuredHypervisor);
+        chooseHypervisor.setSelectedItem(hypervisor != null
+            ? hypervisor : VMHypervisor.defaultForNewVm(backend));
         var extraOpts = item.opt("extra_options", null);
         if (extraOpts != null && extraOpts.is(DataItem.Type.ARRAY)) {
             var sb = new StringBuilder();
@@ -132,6 +166,123 @@ public void loadConfig(@NonNull VMConfig config) {
             }
             etExtraOptions.setText(sb.toString());
         }
+        var environmentVariables = item.opt("environment_variables", null);
+        if (environmentVariables != null && environmentVariables.is(DataItem.Type.ARRAY)) {
+            var sb = new StringBuilder();
+            for (int i = 0; i < environmentVariables.size(); i++) {
+                if (i > 0) sb.append('\n');
+                sb.append(environmentVariables.optString(i, ""));
+            }
+            etEnvironmentVariables.setText(sb.toString());
+        } else {
+            etEnvironmentVariables.setText("");
+        }
+        loadCpuTopology(item);
+        updateProtectedVisibility();
+    }
+
+    private void loadCpuTopology(@NonNull DataItem item) {
+        affinity.clear();
+        affinity.putAll(CpuPlacementPlan.parseAffinity(
+            item.optString(CpuPlacementPlan.KEY_AFFINITY, "")));
+        cpuTopologyAuto = item.optBoolean(CpuPlacementPlan.KEY_AUTO, true);
+        manualCapacity = item.optString(CpuPlacementPlan.KEY_CAPACITY, "");
+        manualClusters = item.optString(CpuPlacementPlan.KEY_CLUSTERS, "");
+    }
+
+    /**
+     * Wires up CPU placement: the vCPU affinity editor behind the CPU count field's
+     * icon button. The affinity, capacity and cluster flags are one decision from
+     * three sides -- affinity pins vCPU threads to host cores, capacity and cluster
+     * describe that placement to the guest via the FDT -- so they are edited together
+     * in {@link VMCpuAffinityDialog}.
+     */
+    private void initCpuTopology() {
+        hostCores = CpuUtils.getCores();
+        inputCpu.setIconButtonOnClickListener(this::showAffinityDialog);
+    }
+
+    /**
+     * Opens the affinity editor for the vCPU count as currently entered. Reading
+     * the count here rather than tracking edits is the point of the dialog: the
+     * row list cannot disagree with the field.
+     *
+     * <p>The count travels back the same way, because the dialog's simple mode
+     * derives it from the host cores that were checked -- one vCPU each.
+     */
+    private void showAffinityDialog() {
+        var draft = new CpuPlacementDraft(affinity, currentVcpuCount(),
+            cpuTopologyAuto, manualCapacity, manualClusters);
+        new VMCpuAffinityDialog(parent, draft, accepted -> {
+            affinity.clear();
+            affinity.putAll(accepted.affinity);
+            cpuTopologyAuto = accepted.auto;
+            manualCapacity = accepted.manualCapacity;
+            manualClusters = accepted.manualClusters;
+            if (accepted.vcpuCount != currentVcpuCount())
+                inputCpu.setValue(accepted.vcpuCount);
+        });
+    }
+
+    // Gunyah dynamic memory sharing is a hypervisor-level memory-sharing mechanism (the GPU is
+    // just its first user), so it sits with the other lend/share options rather than in the
+    // graphics tab where it used to live.
+    /**
+     * Show the SWIOTLB size only where a VM can use one.
+     *
+     * A bounce pool exists because the hypervisor has taken the guest's memory away from the
+     * host: virtio has to hand the host buffers it can still reach. An unprotected VM never lost
+     * that access, and a pseudo-unprotected one gets it back before the payload runs, so in both
+     * the field would ask for memory nothing would ever bounce through -- and in the second it
+     * would actively hurt, putting a restricted-dma-pool node in the tree of a guest kernel that
+     * was never built to honour one. The backend ignores the stored value in those modes; this
+     * keeps the field from claiming otherwise.
+     */
+    private void updateProtectedVisibility() {
+        var pvm = chooseProtectedVm.getSelectedItem();
+        boolean bounces = pvm == ProtectedVM.PROTECTED_PROTECTED
+            || pvm == ProtectedVM.PROTECTED_WITHOUT_FIRMWARE;
+        inputSwiotlb.setVisibility(bounces ? VISIBLE : GONE);
+    }
+
+    /** vCPU count as currently typed, clamped to the field's own 1..64 range. */
+    private int currentVcpuCount() {
+        try {
+            var text = inputCpu.getText().trim();
+            if (text.isEmpty()) return 1;
+            return Math.max(1, Math.min(parseInt(text), MAX_VCPUS));
+        } catch (Exception ignored) {
+            return 1;
+        }
+    }
+
+    @NonNull
+    private static String joinCsv(@NonNull Collection<Integer> values) {
+        var sb = new StringBuilder();
+        for (var value : values) {
+            if (sb.length() > 0) sb.append(',');
+            sb.append(value);
+        }
+        return sb.toString();
+    }
+
+    @SuppressWarnings("BooleanMethodIsAlwaysInverted")
+    private boolean checkInputField(
+        @NonNull TextInputEditText field,
+        boolean allowEmpty, int min, int max
+    ) {
+        field.setError(null);
+        try {
+            var text = getEditText(field);
+            if (text.isEmpty() && allowEmpty) return true;
+            var ret = parseInt(text);
+            if (ret < min || ret > max)
+                throw new IllegalArgumentException();
+            return true;
+        } catch (Exception ignored) {
+            field.setError(parent.getString(R.string.create_vm_error_invalid_number));
+            return false;
+        }
     }
 
     private boolean validateInputName(@NonNull VMStore store) {
@@ -190,12 +341,81 @@ private boolean validateHypervisor(@NonNull VMStore ignored) {
         return true;
     }
 
+    private boolean validateEnvironmentVariables() {
+        etEnvironmentVariables.setError(null);
+        for (var line : getEditText(etEnvironmentVariables).split("\n")) {
+            var trimmed = line.trim();
+            if (trimmed.isEmpty()) continue;
+            var separator = trimmed.indexOf('=');
+            if (separator <= 0 || trimmed.substring(0, separator).trim().isEmpty()) {
+                etEnvironmentVariables.setError(
+                    parent.getString(R.string.create_vm_error_invalid_environment_variable));
+                return false;
+            }
+        }
+        return true;
+    }
+
     @Override
     public boolean validateInput(@NonNull VMStore store) {
         if (!validateInputName(store)) return false;
         if (!validateInputMemory(store)) return false;
         if (!validateInputCpu(store)) return false;
         if (!validateHypervisor(store)) return false;
+        if (!validateEnvironmentVariables()) return false;
+        if (!validateCpuTopology()) return false;
+        return true;
+    }
+
+    /**
+     * The affinity dialog already keeps its own edits in range, so this mostly
+     * guards a stored config that was hand-edited, or a CPU count lowered after
+     * the affinity was set.
+     */
+    private boolean validateCpuTopology() {
+        if (!affinity.isEmpty()) {
+            int count = currentVcpuCount();
+            var hostIdx = CpuCorePickerDialog.hostCoreIndices(hostCores);
+            for (var entry : affinity.entrySet()) {
+                if (entry.getKey() >= count)
+                    return showValidateFailed(R.string.create_vm_error_cpu_affinity_vcpu_oob);
+                for (var host : entry.getValue())
+                    if (!hostIdx.contains(host))
+                        return showValidateFailed(parent.getString(
+                            R.string.create_vm_error_cpu_affinity_host_oob, host));
+            }
+            if (!cpuTopologyAuto && !validateManualTopology(count)) return false;
+        }
+        return true;
+    }
+
+    /**
+     * Hand-written capacity/cluster strings. Capacity is only range-checked;
+     * clusters additionally must not repeat a vCPU, which crosvm rejects
+     * ("CPU index must be unique").
+     */
+    private boolean validateManualTopology(int vcpuCount) {
+        var capacityText = manualCapacity.trim();
+        if (!capacityText.isEmpty()) {
+            var capacity = CpuPlacementPlan.parseCapacity(capacityText);
+            if (capacity.isEmpty())
+                return showValidateFailed(R.string.create_vm_error_cpu_capacity_invalid);
+            for (var entry : capacity.entrySet()) {
+                if (entry.getKey() >= vcpuCount)
+                    return showValidateFailed(R.string.create_vm_error_cpu_affinity_vcpu_oob);
+                if (entry.getValue() > CpuUtils.MAX_CAPACITY)
+                    return showValidateFailed(R.string.create_vm_error_cpu_capacity_invalid);
+            }
+        }
+        var clusters = CpuPlacementPlan.parseClusters(manualClusters.trim());
+        var overlaps = CpuPlacementPlan.findClusterOverlaps(clusters);
+        if (!overlaps.isEmpty())
+            return showValidateFailed(parent.getString(
+                R.string.create_vm_error_cpu_clusters_overlap, joinCsv(overlaps)));
+        for (var cluster : clusters)
+            for (var vcpu : cluster)
+                if (vcpu >= vcpuCount)
+                    return showValidateFailed(R.string.create_vm_error_cpu_affinity_vcpu_oob);
         return true;
     }
 
@@ -230,6 +450,34 @@ public void saveConfig(@NonNull VMConfig config) {
                 arr.append(DataItem.newString(trimmed));
         }
         item.set("extra_options", arr);
+
+        var environmentVariables = DataItem.newArray();
+        var environmentText = getEditText(etEnvironmentVariables);
+        for (var line : environmentText.split("\n")) {
+            var trimmed = line.trim();
+            if (!trimmed.isEmpty())
+                environmentVariables.append(DataItem.newString(trimmed));
+        }
+        item.set("environment_variables", environmentVariables);
+        saveCpuTopology(item);
+    }
+
+    private void saveCpuTopology(@NonNull DataItem item) {
+        // An empty affinity string is how CpuPlacementPlan is told to emit no CPU
+        // placement flags at all; the dialog returns an empty map when turned off.
+        item.set(CpuPlacementPlan.KEY_AFFINITY, CpuPlacementPlan.formatAffinity(affinity));
+        item.set(CpuPlacementPlan.KEY_AUTO, cpuTopologyAuto);
+        item.set(CpuPlacementPlan.KEY_CAPACITY, manualCapacity);
+        item.set(CpuPlacementPlan.KEY_CLUSTERS, manualClusters);
+    }
+
+    /**
+     * The vCPU affinity as currently edited, so the graphics tab can warn when the
+     * GPU worker cpuset overlaps it. Read-only view: the dialog owns the edits.
+     */
+    @NonNull
+    public Map<Integer, List<Integer>> getCurrentAffinity() {
+        return affinity;
     }
 
     /**
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/boot/VMEditBootTab.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/boot/VMEditBootTab.java
index 0d3cbde55..5749d2bf8 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/boot/VMEditBootTab.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/boot/VMEditBootTab.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.ui.vm.edit.boot;
 
 import static android.view.View.GONE;
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/graphics/VMEditGraphicsTab.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/graphics/VMEditGraphicsTab.java
index 3b8d9e6ee..57ee908b8 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/graphics/VMEditGraphicsTab.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/graphics/VMEditGraphicsTab.java
@@ -1,58 +1,103 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.ui.vm.edit.graphics;
 
 import static android.view.View.GONE;
 import static android.view.View.VISIBLE;
 import static java.lang.Integer.parseInt;
 import static cn.classfun.droidvm.lib.store.enums.Enums.optEnum;
-import static cn.classfun.droidvm.lib.store.vm.DisplayBackend.SIMPLEFB;
 import static cn.classfun.droidvm.lib.store.vm.GpuBackend.GPU_GFXSTREAM;
-import static cn.classfun.droidvm.lib.utils.StringUtils.generateRandomPassword;
 import static cn.classfun.droidvm.lib.utils.StringUtils.getEditText;
 
 import android.view.View;
+import android.view.ViewGroup;
+import android.widget.Toast;
 
 import androidx.annotation.NonNull;
+import androidx.annotation.Nullable;
 
-import com.google.android.material.button.MaterialButton;
 import com.google.android.material.textfield.TextInputEditText;
 
 import cn.classfun.droidvm.R;
+import cn.classfun.droidvm.lib.natives.VulkanBlitProbe;
 import cn.classfun.droidvm.lib.store.vm.VMBackend;
 import cn.classfun.droidvm.lib.store.vm.VMConfig;
 import cn.classfun.droidvm.lib.store.vm.VMStore;
-import cn.classfun.droidvm.lib.store.vm.DisplayBackend;
+import cn.classfun.droidvm.lib.store.vm.DisplayExporter;
+import cn.classfun.droidvm.lib.store.vm.VMScreenConfig;
+import cn.classfun.droidvm.lib.store.vm.VpuConfig;
 import cn.classfun.droidvm.lib.store.vm.GpuApi;
 import cn.classfun.droidvm.lib.store.vm.GpuBackend;
+import cn.classfun.droidvm.lib.store.vm.GpuBlitProvider;
+import cn.classfun.droidvm.lib.store.vm.GpuMode;
+import cn.classfun.droidvm.lib.store.vm.GpuProvider;
+import cn.classfun.droidvm.lib.store.vm.ProtectedVM;
+import cn.classfun.droidvm.lib.store.vm.CpuPlacementPlan;
+import cn.classfun.droidvm.lib.utils.CpuUtils;
 import cn.classfun.droidvm.ui.vm.edit.VMEditActivity;
 import cn.classfun.droidvm.ui.vm.edit.base.VMEditBaseTab;
+import cn.classfun.droidvm.ui.vm.edit.base.VMEditTab;
+import cn.classfun.droidvm.ui.vm.edit.basic.VMEditBasicTab;
 import cn.classfun.droidvm.ui.widgets.row.ChooseRowWidget;
 import cn.classfun.droidvm.ui.widgets.row.SwitchRowWidget;
+import cn.classfun.droidvm.ui.widgets.row.TextRowWidget;
+import cn.classfun.droidvm.ui.widgets.tools.CpuCorePickerDialog;
+
+import java.util.ArrayList;
+import java.util.List;
+import java.util.Map;
 
 public final class VMEditGraphicsTab extends VMEditBaseTab {
-    private static final int VNC_PASSWORD_LENGTH = 8;
+    /** Set while loadConfig() is applying stored values, so enforcement stays silent. */
+    private boolean loadingConfig = false;
+    /** The config this tab was loaded with; the protection mode is read back out of it. */
+    @Nullable
+    private VMConfig loadedConfig;
     private View gpuOptions;
-    private View displayOptions;
-    private View displayDpiOptions;
-    private View vncOptions;
-    private View vncPasswordOptions;
-    private SwitchRowWidget swGpuEnabled;
-    private SwitchRowWidget swVncEnabled;
-    private SwitchRowWidget swVncPasswordAuth;
-    private SwitchRowWidget swDisplayEnabled;
-    private SwitchRowWidget swNativeDisplayEnabled;
+    private View rendererSection;
+    private View vramSettings;
+    private View tilGpuDrm2KgslPoolMb;
+    private View tilGpuHostPoolMb;
+    private View tilGpuVenusPoolMb;
+    private TextInputEditText etGpuDrm2KgslPoolMb;
+    private TextInputEditText etGpuVenusPoolMb;
+    private View dynamicVramOptions;
+    private View tilGpuGuestPoolMb;
+    private SwitchRowWidget swGpuUdmabuf;
+    private SwitchRowWidget swGpuRtPrio;
+    private SwitchRowWidget swGpuDynamicVram;
+    private TextInputEditText etGpuHostPoolMb;
+    private TextInputEditText etGpuVramQuotaMb;
+    private TextInputEditText etGpuVramFolioThresholdKb;
+    private TextInputEditText etGpuGuestPoolMb;
+    private View dynamicVramHostOptions;
+    private View dynamicVramGuestOptions;
+    private TextInputEditText etGpuGuestPreallocMb;
+    private TextInputEditText etGpuGuestStepMb;
+    private TextInputEditText etGpuGuestMaxGrants;
+    private TextInputEditText etGpuPoolBlobMaxKb;
     private ChooseRowWidget chooseGpuBackend;
-    private ChooseRowWidget chooseGpuApi;
-    private ChooseRowWidget chooseDisplayBackend;
-    private TextInputEditText etDisplayWidth;
-    private TextInputEditText etDisplayHeight;
-    private TextInputEditText etDisplayRefreshRate;
-    private TextInputEditText etDisplayDpiH;
-    private TextInputEditText etDisplayDpiV;
-    private TextInputEditText etVncHost;
-    private TextInputEditText etVncPort;
-    private TextInputEditText etVncPassword;
-    private MaterialButton btnVncPasswordClear;
-    private MaterialButton btnVncPasswordGenerate;
+    private ChooseRowWidget chooseGpuMode;
+    private ChooseRowWidget chooseGpuProvider;
+    private ChooseRowWidget chooseDisplayBlitProvider;
+    /** One block per screen, in VMScreenConfig.IDS order. */
+    private ScreenBindingRow screenGpu0;
+    private ScreenBindingRow screenFb;
+    private SwitchRowWidget swGpuCgroup;
+    private SwitchRowWidget swVpuEnabled;
+    private View vpuOptions;
+    private View mediaGuestPoolOptions;
+    private TextInputEditText etMediaHostPoolMb;
+    private TextInputEditText etMediaGuestPoolMb;
+    private View gpuCgroupOptions;
+    private TextInputEditText etGpuCgroupPath;
+    private TextRowWidget rowGpuCgroupCpus;
+
+    /** Host cores in the GPU worker cpuset, as a CPUSET string. */
+    private String gpuCgroupCpus = "";
+    /** Host cores as reported by sysfs; read once, drives the cpuset picker. */
+    private List<CpuUtils.CpuCore> hostCores = List.of();
 
     public VMEditGraphicsTab(VMEditActivity parent, View view) {
         super(parent, view);
@@ -60,89 +105,328 @@ public VMEditGraphicsTab(VMEditActivity parent, View view) {
 
     @Override
     public void initView() {
-        swGpuEnabled = view.findViewById(R.id.sw_gpu_enabled);
         chooseGpuBackend = view.findViewById(R.id.choose_gpu_backend);
-        chooseGpuApi = view.findViewById(R.id.choose_gpu_api);
+        chooseGpuMode = view.findViewById(R.id.choose_gpu_mode);
+        chooseGpuProvider = view.findViewById(R.id.choose_gpu_provider);
         gpuOptions = view.findViewById(R.id.gpu_options);
-        swDisplayEnabled = view.findViewById(R.id.sw_display_enabled);
-        swNativeDisplayEnabled = view.findViewById(R.id.sw_native_display_enabled);
-        chooseDisplayBackend = view.findViewById(R.id.choose_display_backend);
-        displayOptions = view.findViewById(R.id.display_options);
-        etDisplayWidth = view.findViewById(R.id.et_display_width);
-        etDisplayHeight = view.findViewById(R.id.et_display_height);
-        etDisplayRefreshRate = view.findViewById(R.id.et_display_refresh_rate);
-        etDisplayDpiH = view.findViewById(R.id.et_display_dpi_h);
-        etDisplayDpiV = view.findViewById(R.id.et_display_dpi_v);
-        displayDpiOptions = view.findViewById(R.id.display_dpi_options);
-        swVncEnabled = view.findViewById(R.id.sw_vnc_enabled);
-        swVncPasswordAuth = view.findViewById(R.id.sw_vnc_password_auth);
-        vncOptions = view.findViewById(R.id.vnc_options);
-        vncPasswordOptions = view.findViewById(R.id.vnc_password_options);
-        etVncHost = view.findViewById(R.id.et_vnc_host);
-        etVncPort = view.findViewById(R.id.et_vnc_port);
-        etVncPassword = view.findViewById(R.id.et_vnc_password);
-        btnVncPasswordClear = view.findViewById(R.id.btn_vnc_password_clear);
-        btnVncPasswordGenerate = view.findViewById(R.id.btn_vnc_password_generate);
+        rendererSection = view.findViewById(R.id.renderer_section);
+        swGpuUdmabuf = view.findViewById(R.id.sw_gpu_udmabuf);
+        swGpuRtPrio = view.findViewById(R.id.sw_gpu_rt_prio);
+        vramSettings = view.findViewById(R.id.vram_settings);
+        swGpuDynamicVram = view.findViewById(R.id.sw_gpu_dynamic_vram);
+        dynamicVramOptions = view.findViewById(R.id.dynamic_vram_options);
+        tilGpuGuestPoolMb = view.findViewById(R.id.til_gpu_guest_pool_mb);
+        tilGpuDrm2KgslPoolMb = view.findViewById(R.id.til_gpu_drm2kgsl_pool_mb);
+        tilGpuHostPoolMb = view.findViewById(R.id.til_gpu_host_pool_mb);
+        tilGpuVenusPoolMb = view.findViewById(R.id.til_gpu_venus_pool_mb);
+        etGpuDrm2KgslPoolMb = view.findViewById(R.id.et_gpu_drm2kgsl_pool_mb);
+        etGpuHostPoolMb = view.findViewById(R.id.et_gpu_host_pool_mb);
+        etGpuVenusPoolMb = view.findViewById(R.id.et_gpu_venus_pool_mb);
+        etGpuVramQuotaMb = view.findViewById(R.id.et_gpu_vram_quota_mb);
+        etGpuVramFolioThresholdKb =
+            view.findViewById(R.id.et_gpu_vram_folio_threshold_kb);
+        etGpuGuestPoolMb = view.findViewById(R.id.et_gpu_guest_pool_mb);
+        dynamicVramHostOptions = view.findViewById(R.id.dynamic_vram_host_options);
+        dynamicVramGuestOptions = view.findViewById(R.id.dynamic_vram_guest_options);
+        etGpuGuestPreallocMb = view.findViewById(R.id.et_gpu_guest_prealloc_mb);
+        etGpuGuestStepMb = view.findViewById(R.id.et_gpu_guest_step_mb);
+        etGpuGuestMaxGrants = view.findViewById(R.id.et_gpu_guest_max_grants);
+        etGpuPoolBlobMaxKb = view.findViewById(R.id.et_gpu_pool_blob_max_kb);
+        chooseDisplayBlitProvider = view.findViewById(R.id.choose_display_blit_provider);
+        // A new VM comes up with the simplefb screen on and no virtio-gpu device at all until the
+        // user asks for one. This is where a new screen's exporter default lives -- the stored
+        // config's fallback is a separate question and stays at NONE, see
+        // VMScreenConfig.getExporter -- and it is NATIVE rather than the VNC it used to be: the
+        // viewer for that one is this app, already installed, so it is the only exporter whose
+        // first boot can be looked at without setting something up first. The gpu-0 row's default
+        // is inert while its screen is off (save() writes NONE for a screen that is off) and is
+        // there for the moment the user turns the device on.
+        screenGpu0 = new ScreenBindingRow(VMScreenConfig.ID_GPU0,
+            view.findViewById(R.id.screen_gpu0_block),
+            view.findViewById(R.id.sw_screen_gpu0_enabled),
+            false, DisplayExporter.NATIVE);
+        screenFb = new ScreenBindingRow(VMScreenConfig.ID_SIMPLEFB,
+            view.findViewById(R.id.screen_fb_block),
+            view.findViewById(R.id.sw_screen_fb_enabled),
+            true, DisplayExporter.NATIVE);
+        swGpuCgroup = view.findViewById(R.id.sw_gpu_cgroup);
+        swVpuEnabled = view.findViewById(R.id.sw_vpu_enabled);
+        vpuOptions = view.findViewById(R.id.vpu_options);
+        mediaGuestPoolOptions = view.findViewById(R.id.media_guest_pool_options);
+        etMediaHostPoolMb = view.findViewById(R.id.et_media_host_pool_mb);
+        etMediaGuestPoolMb = view.findViewById(R.id.et_media_guest_pool_mb);
+        gpuCgroupOptions = view.findViewById(R.id.gpu_cgroup_options);
+        etGpuCgroupPath = view.findViewById(R.id.et_gpu_cgroup_path);
+        rowGpuCgroupCpus = view.findViewById(R.id.row_gpu_cgroup_cpus);
     }
 
     @Override
     public void initValue() {
-        swGpuEnabled.setOnCheckedChangeListener(this::updateGpuVisibility);
-        swDisplayEnabled.setOnCheckedChangeListener(this::updateDisplayVisibility);
-        swVncEnabled.setOnCheckedChangeListener(this::updateVncVisibility);
-        chooseGpuBackend.configure(GpuBackend.class, GPU_GFXSTREAM);
-        chooseGpuApi.configure(GpuApi.class, GpuApi.OPENGLES);
-        chooseDisplayBackend.configure(DisplayBackend.class, SIMPLEFB);
-        chooseDisplayBackend.setOnValueChangedListener((o, n) -> {
-            if (n == DisplayBackend.VIRTIO_GPU && !swGpuEnabled.isChecked()) {
-                chooseDisplayBackend.setSelectedItem(SIMPLEFB);
-                return;
+        screenGpu0.init(this::updateDisplayVisibility);
+        screenFb.init(this::updateDisplayVisibility);
+        // PanVK (Mali) is listed but not wired yet: toast + revert to the previous choice.
+        // Acceleration decides which host drivers make sense and which memory knobs exist,
+        // so it drives both of the rows under it.
+        chooseGpuMode.setOnValueChangedListener((o, n) -> {
+            // Vulkan on virglrenderer is venus (guest Vulkan proxied to the host over virtio-gpu);
+            // its provider row is the host ICD, same as gfxstream's, so this is just a normal mode
+            // change like NATIVE/OPENGL.
+            updateGpuProviderOptions();
+            updateVramAllocVisibility();
+        });
+        // PanVK (Mali) is listed but not wired yet: toast + revert to the previous choice.
+        chooseGpuProvider.setOnValueChangedListener((o, n) -> {
+            if (n == GpuProvider.VK_PANVK) {
+                Toast.makeText(parent, R.string.create_vm_gpu_api_not_implemented,
+                    Toast.LENGTH_SHORT).show();
+                chooseGpuProvider.setSelectedItem(
+                    o instanceof GpuProvider ? (GpuProvider) o : GpuProvider.VK_TURNIP);
+            }
+        });
+        // The GPU API set depends on the backend: gfxstream picks a host Vulkan driver,
+        // virgl/2d picks a guest GL/Vulkan translation API or the drm2kgsl native context.
+        chooseGpuBackend.setOnValueChangedListener((o, n) -> {
+            updateGpuModeOptions();
+            updateGpuProviderOptions();
+            updateVramAllocVisibility();
+        });
+        chooseGpuBackend.configure(GpuBackend.class, GpuBackend.GPU_VIRGLRENDERER);
+        // GPU-blit provider for the native display's scanout composite -- a peer set of Vulkan
+        // drivers plus an Off (CPU copy) escape. TURNIP/SYSTEM/OFF are wired (SYSTEM points the
+        // bridge at the SoC's vendor Vulkan and degrades to the CPU copy if it lacks the extensions);
+        // only PANVK is not built yet, so it toasts + reverts like the render provider's PanVK.
+        chooseDisplayBlitProvider.configure(GpuBlitProvider.class, GpuBlitProvider.TURNIP);
+        chooseDisplayBlitProvider.setOnValueChangedListener((o, n) -> {
+            if (n == GpuBlitProvider.PANVK) {
+                Toast.makeText(parent, R.string.create_vm_gpu_api_not_implemented,
+                    Toast.LENGTH_SHORT).show();
+                chooseDisplayBlitProvider.setSelectedItem(
+                    o instanceof GpuBlitProvider ? (GpuBlitProvider) o : GpuBlitProvider.TURNIP);
+            } else if (n == GpuBlitProvider.SYSTEM) {
+                // The system driver is a peer, gated by the same rule as the others: it is usable
+                // only if it exposes the blit's extensions. Probe the real driver and, if it is
+                // short, say which -- the choice is still allowed (crosvm then degrades to a CPU
+                // copy), the user just gets told instead of quietly getting the fallback.
+                warnIfSystemBlitIncapable();
             }
-            updateDisplayDpiVisibility();
         });
-        btnVncPasswordClear.setOnClickListener(v -> etVncPassword.setText(""));
-        btnVncPasswordGenerate.setOnClickListener(v ->
-            etVncPassword.setText(generateRandomPassword(VNC_PASSWORD_LENGTH)));
-        swVncPasswordAuth.setOnCheckedChangeListener((b, checked) ->
-            updateVncPasswordVisibility());
-        updateGpuVisibility();
+        swGpuUdmabuf.setOnCheckedChangeListener(this::updateVramAllocVisibility);
+        swGpuDynamicVram.setOnCheckedChangeListener(this::updateVramAllocVisibility);
+        // The backend chooser's configure() above does not fire its listener, so seed the two
+        // rows under it before the first paint; loadConfig() then restores over the top.
+        updateGpuModeOptions();
+        updateGpuProviderOptions();
+        updateVramAllocVisibility();
         updateDisplayVisibility();
-        updateDisplayDpiVisibility();
-        updateVncVisibility();
-        updateVncPasswordVisibility();
+        updateVramAllocVisibility();
+        initGpuCgroup();
+    }
+
+    private void initGpuCgroup() {
+        hostCores = CpuUtils.getCores();
+        etGpuCgroupPath.setText(CpuPlacementPlan.DEFAULT_GPU_CGROUP_PATH);
+        swGpuCgroup.setOnCheckedChangeListener(() -> {
+            // Default to the top (usually prime) core, the one worth keeping vCPUs off.
+            if (swGpuCgroup.isChecked() && gpuCgroupCpus.trim().isEmpty()
+                && !hostCores.isEmpty())
+                setGpuCgroupCpus(String.valueOf(hostCores.get(hostCores.size() - 1).index));
+            updateGpuCgroupVisibility();
+        });
+        rowGpuCgroupCpus.setOnClickListener(v -> showGpuCpusPicker());
+        swVpuEnabled.setOnCheckedChangeListener(() -> updateVpuVisibility());
+        // RT is only offered on top of a cpuset with cores in it. The switch is inside the
+        // cpuset block, so it is already hidden when the block is off; this catches the one
+        // reachable gap -- the block on, but every core cleared in the picker.
+        //
+        // Not while loading: loadConfig() restores this switch before the cpuset rows below it,
+        // so the guard would see an empty core list for every VM and clear a legitimately stored
+        // RT setting. The updateGpuCgroupVisibility() at the end of the load enforces the same
+        // rule once both halves are in place.
+        swGpuRtPrio.setOnCheckedChangeListener(() -> {
+            if (loadingConfig) return;
+            if (swGpuRtPrio.isChecked() && !hasGpuCgroupCpus()) {
+                swGpuRtPrio.setChecked(false);
+                showHint(parent.getString(
+                    R.string.create_vm_error_gpu_rt_prio_needs_cpuset));
+            }
+        });
+        // Unconditionally, so the row always carries a value label ("none selected"
+        // when empty) rather than a bare title with a blank right-hand side.
+        setGpuCgroupCpus(gpuCgroupCpus);
+        updateGpuCgroupVisibility();
+    }
+
+    private void updateGpuCgroupVisibility() {
+        boolean enabled = swGpuCgroup.isChecked();
+        gpuCgroupOptions.setVisibility(enabled ? VISIBLE : GONE);
+        // RT lives inside the block, so turning the cpuset off hides it. Clear it rather than
+        // leaving a checked-but-invisible switch: without the cpuset, SCHED_FIFO 97 GPU threads
+        // are free to take every host core above everything else on the phone. Same for a
+        // stored config that has RT on with the block on but no cores named -- the cpuset would
+        // never be set up (the daemon skips an empty cpus list), so the confinement is absent.
+        if (!enabled || !hasGpuCgroupCpus()) swGpuRtPrio.setChecked(false);
+    }
+
+    /** Whether the cpuset actually names cores; RT is refused without them. */
+    private boolean hasGpuCgroupCpus() {
+        return !gpuCgroupCpus.trim().isEmpty();
+    }
+
+    private void showGpuCpusPicker() {
+        CpuCorePickerDialog.show(
+            parent, R.string.create_vm_gpu_cgroup_cpus, gpuCgroupCpus,
+            picked -> {
+                setGpuCgroupCpus(picked);
+                // Clearing the last core takes RT down with it, for the same reason the switch
+                // refuses to come up without cores.
+                if (!hasGpuCgroupCpus() && swGpuRtPrio.isChecked()) {
+                    swGpuRtPrio.setChecked(false);
+                    showHint(parent.getString(
+                        R.string.create_vm_error_gpu_rt_prio_needs_cpuset));
+                }
+                warnOnGpuCgroupOverlap();
+            });
+    }
+
+    private void setGpuCgroupCpus(@NonNull String cpuSet) {
+        gpuCgroupCpus = cpuSet;
+        var compact = CpuUtils.compactRanges(cpuSet);
+        rowGpuCgroupCpus.setValue(compact.isEmpty()
+            ? parent.getString(R.string.create_vm_gpu_cgroup_cpus_none)
+            : parent.getString(R.string.create_vm_gpu_cgroup_cpus_summary_fmt, compact));
+    }
+
+    /**
+     * Sharing a core between vCPUs and the GPU worker is allowed -- on a host with
+     * few big cores it is often the only workable split -- but it defeats the point
+     * of the cpuset, so say so instead of silently accepting it. The affinity lives
+     * in the basic tab, so it is read from there rather than held here.
+     */
+    private void warnOnGpuCgroupOverlap() {
+        if (!swGpuCgroup.isChecked()) return;
+        Map<Integer, List<Integer>> affinity = Map.of();
+        try {
+            var basic = (VMEditBasicTab) parent.getTab(VMEditTab.TAB_BASIC);
+            affinity = basic.getCurrentAffinity();
+        } catch (Exception ignored) {
+        }
+        if (affinity.isEmpty()) return;
+        var shared = CpuPlacementPlan.findHostOverlaps(affinity, gpuCgroupCpus);
+        if (shared.isEmpty()) return;
+        var sb = new StringBuilder();
+        for (var core : shared) {
+            if (sb.length() > 0) sb.append(',');
+            sb.append(core);
+        }
+        showHint(parent.getString(
+            R.string.create_vm_cpu_affinity_host_overlap, sb.toString()));
     }
 
     @Override
     public void loadConfig(@NonNull VMConfig config) {
+        loadedConfig = config;
+        loadingConfig = true;
+        try {
+            loadConfigLocked(config);
+        } finally {
+            loadingConfig = false;
+        }
+    }
+
+    private void loadConfigLocked(@NonNull VMConfig config) {
         var item = config.item;
-        swGpuEnabled.setChecked(item.optBoolean("gpu_enabled", false));
-        swDisplayEnabled.setChecked(item.optBoolean("display_enabled", false));
-        swNativeDisplayEnabled.setChecked(item.optBoolean("native_display_enabled", false));
-        etDisplayWidth.setText(String.valueOf(item.optLong("display_width", 1280)));
-        etDisplayHeight.setText(String.valueOf(item.optLong("display_height", 720)));
-        etDisplayRefreshRate.setText(String.valueOf(item.optLong("display_refresh_rate", 60)));
-        etDisplayDpiH.setText(String.valueOf(item.optLong("display_dpi_h", 160)));
-        etDisplayDpiV.setText(String.valueOf(item.optLong("display_dpi_v", 160)));
-        swVncEnabled.setChecked(item.optBoolean("vnc_enabled", false));
-        swVncPasswordAuth.setChecked(item.optBoolean("vnc_password_auth", false));
-        etVncHost.setText(item.optString("vnc_host", ""));
-        var vncPort = item.optLong("vnc_port", -1);
-        etVncPort.setText(vncPort > 0 ? String.valueOf(vncPort) : "");
-        etVncPassword.setText(item.optString("vnc_password", ""));
-        var gpuApi = optEnum(item, "gpu_api", GpuApi.NONE);
+        swGpuUdmabuf.setChecked(item.optBoolean("gpu_udmabuf", true));
+        // SCHED_FIFO on the GPU worker; gpu_rt_prio holds the level as a string ("" by default),
+        // and "" means "do not set RT at all". Off (the default) -> normal scheduling, which avoids
+        // the gfxstream render-thread priority inversion that starves the present path. The cpuset
+        // rows are restored at the end of this method; updateGpuCgroupVisibility() there clears
+        // this again if the config carries RT without a cpuset to confine it.
+        swGpuRtPrio.setChecked(!item.optString("gpu_rt_prio", "").isEmpty());
+        // The two host pools hold very different things, so they are sized very differently.
+        //
+        // The DRM route's host pool holds only the per-context msm shmem rings: 16 KiB each,
+        // 192 KiB measured across a desktop plus Minecraft, on top of the 2 MiB the RM base guard
+        // takes at the head of the pool -- so the need is single-digit MB and 64 MiB is a wide
+        // margin, matching what the gfxstream pool below reserves for the same kind of traffic.
+        etGpuDrm2KgslPoolMb.setText(String.valueOf(item.optLong("gpu_drm2kgsl_pool_mb", 64)));
+        // gfxstream's holds its ASG rings, one per guest context, at 1036 KiB each -- a desktop
+        // plus Minecraft was 16 of them, 18.2 MiB including the guard. 64 MiB is room for ~61
+        // contexts, and this is mlocked physical memory, so the spare is not free.
+        //
+        // It is a floor rather than a cap: with guest-alloc off, host-visible VkDeviceMemory
+        // comes from here too and whatever does not fit falls back to runtime SHARE, which is
+        // what the dynamic-VRAM switch below governs. So a pool that is too small costs speed,
+        // not correctness -- 64 MiB leaves ~46 MiB of that fast path once the rings are in.
+        etGpuHostPoolMb.setText(String.valueOf(item.optLong("gpu_host_pool_mb", 64)));
+        // venus's holds its per-instance transport shmems (ring 128K + CS pool >=8M + reply pool
+        // >=1M); vkr sub-allocates them here and the guest maps pool-relative with no runtime SHARE.
+        // Bigger avoids a memfd fallback under KDE's several Vulkan instances; but on a small-
+        // reservoir device (e.g. the 8gen3's 5.5 GB cap) it competes with guest RAM + the guest
+        // pool, so it is exposed here to tune per device rather than hard-wired to the daemon default.
+        etGpuVenusPoolMb.setText(String.valueOf(item.optLong("gpu_venus_pool_mb", 256)));
+        // A quota, not an allocation: crosvm meters host-visible memory against this rather
+        // than reserving any. Only read when guest-alloc is off.
+        etGpuVramQuotaMb.setText(String.valueOf(item.optLong("gpu_vram_quota_mb", 2048)));
+        etGpuVramFolioThresholdKb.setText(String.valueOf(
+            item.optLong("gpu_vram_folio_threshold_kb", 1024)));
+        long guestPool = item.optLong("gpu_guest_pool_mb", 1024);
+        etGpuGuestPoolMb.setText(String.valueOf(guestPool));
+        etGpuGuestPreallocMb.setText(String.valueOf(
+            item.optLong("gpu_guest_prealloc_mb", guestPool)));
+        etGpuGuestStepMb.setText(String.valueOf(item.optLong("gpu_guest_step_mb", 0)));
+        etGpuGuestMaxGrants.setText(String.valueOf(item.optLong("gpu_guest_max_grants", 0)));
+        // Defaults to on: before it had a switch, a vram limit was always handed to crosvm. Over
+        // a guest pool "on" just exposes the three growth fields above -- their own defaults
+        // (prealloc = pool, step 0) still describe a fully pre-shared pool, so an older config
+        // loads with the same behaviour it had.
+        swGpuDynamicVram.setChecked(item.optBoolean("gpu_dynamic_vram", false));
+        etGpuPoolBlobMaxKb.setText(String.valueOf(item.optLong("gpu_pool_blob_max_kb", 4096)));
+        screenGpu0.load(item);
+        screenFb.load(item);
         var gpuBackend = optEnum(item, "gpu_backend", GpuBackend.NONE);
-        var displayBackend = optEnum(item, "display_backend", DisplayBackend.NONE);
-        if (gpuApi != GpuApi.NONE)
-            chooseGpuApi.setSelectedItem(gpuApi);
+        // Configs written before acceleration and host driver were separate rows carry a single
+        // gpu_api whose meaning depended on the renderer. Derive both from it when the new keys
+        // are absent; gpu_api is left in place, so an older build still reads the VM.
+        var legacyApi = optEnum(item, "gpu_api", GpuApi.NONE);
+        var gpuMode = optEnum(item, "gpu_mode", GpuMode.NONE);
+        var gpuProvider = optEnum(item, "gpu_provider", GpuProvider.NONE);
+        if (gpuMode == GpuMode.NONE) gpuMode = GpuMode.fromLegacyApi(legacyApi);
+        if (gpuProvider == GpuProvider.NONE) gpuProvider = GpuProvider.fromLegacyApi(legacyApi);
+        // Backend first: its listener rebuilds the option sets below it (and their defaults).
         if (gpuBackend != GpuBackend.NONE)
             chooseGpuBackend.setSelectedItem(gpuBackend);
-        if (displayBackend != DisplayBackend.NONE)
-            chooseDisplayBackend.setSelectedItem(displayBackend);
-        updateGpuVisibility();
+        // Restore each saved choice only if the backend still offers it; otherwise keep the
+        // default updateGpuModeOptions()/updateGpuProviderOptions() just picked.
+        boolean gfx = chooseGpuBackend.getSelectedItem() == GPU_GFXSTREAM;
+        // gfxstream only offers VULKAN; virglrenderer offers OPENGL/NATIVE/VULKAN(venus). Restore
+        // any mode the current backend actually lists, or the picker keeps the default and a saved
+        // venus VM silently reloads as something else.
+        boolean modeOk = gfx ? (gpuMode == GpuMode.VULKAN)
+            : (gpuMode == GpuMode.OPENGL || gpuMode == GpuMode.NATIVE || gpuMode == GpuMode.VULKAN);
+        if (gpuMode != GpuMode.NONE && modeOk)
+            chooseGpuMode.setSelectedItem(gpuMode);
+        updateGpuProviderOptions();
+        // The VK_* providers belong to VULKAN mode on either renderer (gfxstream, or venus on
+        // virglrenderer); everything else is virglrenderer-only. Restore only what the row lists.
+        // (Read the mode picker only under virglrenderer: 2D leaves it unset.)
+        boolean vkMode = gfx
+            || (chooseGpuBackend.getSelectedItem() == GpuBackend.GPU_VIRGLRENDERER
+                && chooseGpuMode.getSelectedItem() == GpuMode.VULKAN);
+        if (gpuProvider != GpuProvider.NONE && vkMode == isVulkanProvider(gpuProvider))
+            chooseGpuProvider.setSelectedItem(gpuProvider);
+        chooseDisplayBlitProvider.setSelectedItem(
+            optEnum(item, "display_blit_provider", GpuBlitProvider.TURNIP));
         updateDisplayVisibility();
-        updateDisplayDpiVisibility();
-        updateVncVisibility();
-        updateVncPasswordVisibility();
+        updateVramAllocVisibility();
+        swGpuCgroup.setChecked(item.optBoolean(CpuPlacementPlan.KEY_GPU_CGROUP, false));
+        swVpuEnabled.setChecked(VpuConfig.isEnabled(item));
+        etMediaHostPoolMb.setText(String.valueOf(VpuConfig.getHostPoolMb(item)));
+        etMediaGuestPoolMb.setText(String.valueOf(VpuConfig.getGuestPoolMb(item)));
+        updateVpuVisibility();
+        etGpuCgroupPath.setText(item.optString(CpuPlacementPlan.KEY_GPU_CGROUP_PATH,
+            CpuPlacementPlan.DEFAULT_GPU_CGROUP_PATH));
+        setGpuCgroupCpus(item.optString(CpuPlacementPlan.KEY_GPU_CGROUP_CPUS, ""));
+        updateGpuCgroupVisibility();
     }
 
     @SuppressWarnings("BooleanMethodIsAlwaysInverted")
@@ -166,92 +450,482 @@ private boolean checkInputField(
 
     @Override
     public boolean validateInput(@NonNull VMStore store) {
-        if (!checkInputField(etDisplayWidth, false, 320, 8192)) return false;
-        if (!checkInputField(etDisplayHeight, false, 320, 8192)) return false;
-        if (!checkInputField(etDisplayRefreshRate, false, 1, 400)) return false;
-        if (!checkInputField(etDisplayDpiH, false, 100, 800)) return false;
-        if (!checkInputField(etDisplayDpiV, false, 100, 800)) return false;
-        if (!checkInputField(etVncPort, true, 1024, 65535)) return false;
-        if (parent.get("backend", VMBackend.DEFAULT) != VMBackend.CROSVM && swNativeDisplayEnabled.isChecked())
-            return showValidateFailed(R.string.create_vm_error_native_display_only_crosvm);
-        if (swNativeDisplayEnabled.isChecked() && swVncEnabled.isChecked())
-            return showValidateFailed(R.string.create_vm_error_native_display_vnc_cannot_enabled);
+        if (!validateScreenGeometry()) return false;
+        if (!checkInputField(etGpuHostPoolMb, false, 0, 65536)) return false;
+        if (!checkInputField(etGpuVramQuotaMb, false, 0, 65536)) return false;
+        if (!checkInputField(etGpuVramFolioThresholdKb, false, 0, 1048576)) return false;
+        if (!checkInputField(etGpuGuestPoolMb, false, 0, 65536)) return false;
+        if (!checkInputField(etGpuPoolBlobMaxKb, false, 0, 1048576)) return false;
+        if (swVpuEnabled.isChecked()) {
+            if (!checkInputField(etMediaHostPoolMb, false, 0, 65536)) return false;
+            // Checked only when it is offered: a hidden field holds whatever the config carried
+            // over from another protection mode, and rejecting a value nobody can see or edit
+            // would make the VM unsaveable for a reason the screen does not show.
+            if (VpuConfig.guestPoolApplies(currentProtectedVm())
+                && !checkInputField(etMediaGuestPoolMb, false, 0, 65536)) return false;
+        }
+        // The growth fields are only read (and only shown) with dynamic vram on over a guest
+        // pool; otherwise saveConfig() writes the fully pre-shared values in their place, so a
+        // stale entry in a hidden field must not block the save.
+        if (isGuestPoolDynamic()) {
+            if (!checkInputField(etGpuGuestPreallocMb, false, 0, 65536)) return false;
+            if (!checkInputField(etGpuGuestStepMb, false, 0, 65536)) return false;
+            if (!checkInputField(etGpuGuestMaxGrants, false, 0, 65536)) return false;
+            if (!validateGuestPoolOptions()) return false;
+        }
+        if (!validateScreens()) return false;
+        if (swGpuCgroup.isChecked()) {
+            var path = getEditText(etGpuCgroupPath).trim();
+            if (path.isEmpty() || !path.startsWith("/"))
+                return showValidateFailed(R.string.create_vm_error_gpu_cgroup_path);
+            if (gpuCgroupCpus.trim().isEmpty())
+                return showValidateFailed(R.string.create_vm_error_gpu_cgroup_cpus_empty);
+        }
+        return true;
+    }
+
+    /**
+     * Each screen's own geometry, checked on each screen's own rows.
+     *
+     * <p>Size and rate are picked from menus, so the row itself holds their bounds -- including the
+     * one that differs by device: a virtio-gpu mode's refresh rate is what the guest is told to
+     * drive, while simplefb's poll rate is how often the host looks at a block of memory (linear
+     * host cost, no guest involvement), so it is bounded by what the bridge accepts rather than by
+     * what a panel could show. The DPI is still typed, and is still checked here.</p>
+     */
+    private boolean validateScreenGeometry() {
+        for (var row : new ScreenBindingRow[]{screenGpu0, screenFb}) {
+            if (!row.validateGeometry()) return false;
+            if (row.isGpuScreen()) {
+                if (!checkInputField(row.dpiHField(), false, 100, 800)) return false;
+                if (!checkInputField(row.dpiVField(), false, 100, 800)) return false;
+            }
+        }
+        return true;
+    }
+
+    private boolean validateGuestPoolOptions() {
+        int guestPool = parseInt(getEditText(etGpuGuestPoolMb));
+        int prealloc = parseInt(getEditText(etGpuGuestPreallocMb));
+        int step = parseInt(getEditText(etGpuGuestStepMb));
+        if (prealloc > guestPool) {
+            etGpuGuestPreallocMb.setError(
+                parent.getString(R.string.create_vm_error_gpu_guest_prealloc_exceeds_pool));
+            return false;
+        }
+        if (step > 0 && prealloc >= guestPool) {
+            etGpuGuestPreallocMb.setError(
+                parent.getString(R.string.create_vm_error_gpu_guest_dynamic_requires_room));
+            return false;
+        }
+        if (step > 0 && (step < 2 || (step & (step - 1)) != 0)) {
+            etGpuGuestStepMb.setError(
+                parent.getString(R.string.create_vm_error_gpu_guest_step_invalid));
+            return false;
+        }
         return true;
     }
 
+    private boolean usesGuestPool() {
+        boolean gfxstream = chooseGpuBackend.getSelectedItem() == GPU_GFXSTREAM;
+        // Read the mode only under virglrenderer: 2D clears the mode picker and reading it would
+        // throw "Items not set". drm2kgsl only exists as virglrenderer's NATIVE mode anyway.
+        boolean drm2kgsl = chooseGpuBackend.getSelectedItem() == GpuBackend.GPU_VIRGLRENDERER
+            && chooseGpuMode.getSelectedItem() == GpuMode.NATIVE;
+        // Venus (virglrenderer + VULKAN) allocates its BOs from the same guest pool.
+        boolean venus = chooseGpuBackend.getSelectedItem() == GpuBackend.GPU_VIRGLRENDERER
+            && chooseGpuMode.getSelectedItem() == GpuMode.VULKAN;
+        return drm2kgsl || venus || (gfxstream && swGpuUdmabuf.isChecked());
+    }
+
+    /** Whether the VRAM block applies at all: gfxstream (either alloc path), drm2kgsl or venus. */
+    private boolean usesVramSettings() {
+        boolean gfxstream = chooseGpuBackend.getSelectedItem() == GPU_GFXSTREAM;
+        return gfxstream || usesGuestPool();
+    }
+
+    /**
+     * Whether the guest pool grows at runtime: guest-alloc with the dynamic-vram switch on. Off
+     * means the whole pool is SHARE'd at boot (prealloc = pool, step 0, no grants), which is
+     * what saveConfig() writes and what crosvm's own defaults produce for the three keys.
+     */
+    private boolean isGuestPoolDynamic() {
+        return usesGuestPool() && swGpuDynamicVram.isChecked();
+    }
+
+    @Override
+    public void onTabShown() {
+        // The protection mode is chosen on the basic tab, and it decides whether the guest-alloc
+        // pool is offered at all. Nothing tells this tab when that changes, so ask on the way in.
+        updateVramAllocVisibility();
+        // Same reason: the media guest pool is only offered to a VM whose memory the host cannot
+        // read, which is also decided over there.
+        updateVpuVisibility();
+    }
+
+    /**
+     * Whether the host can reach this VM's RAM without being handed it.
+     *
+     * The guest-alloc pool is a region the host is given access to so that buffers the guest
+     * allocates are reachable at all -- in an ordinary protected VM they otherwise are not. An
+     * unprotected VM never had that problem, and a pseudo-unprotected one has its whole RAM
+     * shared back to the host before the payload runs, so in both the pool is a slice of memory
+     * carved out of the guest to solve something that is not happening. virtio-gpu with no pool
+     * to find falls back to allocating from system RAM, which is the stock behaviour and works
+     * here for exactly the same reason.
+     *
+     * Live from the basic tab so a just-changed selection counts, then the stored config, then
+     * the backend default -- the same order {@code VMEditBootTab.isProtectedVm} reads it in.
+     */
+    private boolean hostVisibleRam() {
+        var pvm = currentProtectedVm();
+        return pvm == ProtectedVM.PROTECTED_NORMAL || pvm == ProtectedVM.PSEUDO_UNPROTECTED;
+    }
+
+    /**
+     * The protection mode this VM will start with: live from the basic tab so a just-changed
+     * selection counts, then the stored config, then the backend default.
+     */
+    @NonNull
+    private ProtectedVM currentProtectedVm() {
+        ProtectedVM pvm = null;
+        try {
+            var basic = (VMEditBasicTab) parent.getTab(VMEditTab.TAB_BASIC);
+            pvm = basic.getCurrentProtectedVm();
+        } catch (Exception ignored) {
+        }
+        if (pvm == null && loadedConfig != null)
+            pvm = optEnum(loadedConfig.item, "protected_vm", ProtectedVM.PROTECTED_WITHOUT_FIRMWARE);
+        return pvm == null ? ProtectedVM.PROTECTED_WITHOUT_FIRMWARE : pvm;
+    }
+
+    /**
+     * The pool fields only exist while the device does, and the guest one only while the host
+     * cannot read guest memory. Hiding it is not cosmetic: with no field there is no
+     * {@code media_guest} node, and with no node in /reserved-memory the guest driver stays on
+     * its stock path of allocating from system RAM.
+     */
+    private void updateVpuVisibility() {
+        boolean enabled = swVpuEnabled.isChecked();
+        vpuOptions.setVisibility(enabled ? VISIBLE : GONE);
+        mediaGuestPoolOptions.setVisibility(
+            enabled && VpuConfig.guestPoolApplies(currentProtectedVm()) ? VISIBLE : GONE);
+    }
+
     @Override
     public void saveConfig(@NonNull VMConfig config) {
         var item = config.item;
-        var gpuEnabled = swGpuEnabled.isChecked();
-        var displayEnabled = swDisplayEnabled.isChecked();
-        var vncEnabled = swVncEnabled.isChecked();
-        item.set("gpu_enabled", gpuEnabled);
-        item.set("display_enabled", displayEnabled);
-        item.set("vnc_enabled", vncEnabled);
-        if (gpuEnabled) {
+        // One binding per screen, written straight through: the pair of VM-level booleans that
+        // used to stand in for it could not say which screen either one meant, and could say
+        // "both" -- which is the combination crosvm now refuses to start. The geometry rides
+        // along inside each block for the same reason -- one width could not be two -- and so
+        // does the virtio-gpu device's own existence, which no longer has a switch of its own.
+        screenGpu0.save(item);
+        screenFb.save(item);
+        // The renderer settings describe a device that is only there when the screen is: with the
+        // block off they are left exactly as they were, so switching the device off and back on
+        // finds the renderer it had rather than a default.
+        if (screenGpu0.isScreenEnabled()) {
             GpuBackend gb = chooseGpuBackend.getSelectedItem();
-            GpuApi ga = chooseGpuApi.getSelectedItem();
+            // 2D clears the mode/provider pickers, so reading them would throw "Items not set".
+            // Persist NONE for both in that case.
+            boolean accel = gb == GPU_GFXSTREAM || gb == GpuBackend.GPU_VIRGLRENDERER;
+            GpuMode gm = accel ? chooseGpuMode.getSelectedItem() : GpuMode.NONE;
+            GpuProvider gp = accel ? chooseGpuProvider.getSelectedItem() : GpuProvider.NONE;
             item.set("gpu_backend", gb);
-            item.set("gpu_api", ga);
-        }
-        if (displayEnabled) {
-            DisplayBackend displayBackend = chooseDisplayBackend.getSelectedItem();
-            item.set("display_backend", displayBackend);
-            // Native display only applies to virtio-gpu + GPU enabled.
-            item.set("native_display_enabled", gpuEnabled
-                && displayBackend == DisplayBackend.VIRTIO_GPU
-                && swNativeDisplayEnabled.isChecked());
-            item.set("display_width", parseInt(getEditText(etDisplayWidth)));
-            item.set("display_height", parseInt(getEditText(etDisplayHeight)));
-            item.set("display_refresh_rate", parseInt(getEditText(etDisplayRefreshRate)));
-            if (displayBackend != DisplayBackend.NONE && displayBackend != SIMPLEFB) {
-                item.set("display_dpi_h", parseInt(getEditText(etDisplayDpiH)));
-                item.set("display_dpi_v", parseInt(getEditText(etDisplayDpiV)));
+            item.set("gpu_mode", gm);
+            item.set("gpu_provider", gp);
+            // Keep gpu_api written too: the daemon and an older build still read it, and it is
+            // exactly recoverable from the pair.
+            item.set("gpu_api", toLegacyApi(gm, gp));
+            item.set("gpu_udmabuf", swGpuUdmabuf.isChecked());
+            // "97" only with a cpuset holding cores under it -- the editor cannot produce any
+            // other combination, and writing "" for the rest keeps a config that was edited with
+            // the cpuset turned off from carrying unconfined RT forward.
+            boolean rtPrio = swGpuRtPrio.isChecked()
+                && swGpuCgroup.isChecked() && hasGpuCgroupCpus();
+            item.set("gpu_rt_prio", rtPrio ? "97" : "");
+            item.set("gpu_drm2kgsl_pool_mb", parseInt(getEditText(etGpuDrm2KgslPoolMb)));
+            item.set("gpu_host_pool_mb", parseInt(getEditText(etGpuHostPoolMb)));
+            item.set("gpu_venus_pool_mb", parseInt(getEditText(etGpuVenusPoolMb)));
+            item.set("gpu_vram_quota_mb", parseInt(getEditText(etGpuVramQuotaMb)));
+            item.set("gpu_vram_folio_threshold_kb",
+                parseInt(getEditText(etGpuVramFolioThresholdKb)));
+            int guestPool = parseInt(getEditText(etGpuGuestPoolMb));
+            item.set("gpu_guest_pool_mb", guestPool);
+            // With dynamic vram off over a guest pool the growth knobs collapse to "fully
+            // pre-shared": preallocate the whole pool, no step, no grants. That is also what an
+            // older daemon assumes when the keys are absent, so the stored config stays honest
+            // even though the fields keep their last typed values while hidden.
+            if (isGuestPoolDynamic()) {
+                item.set("gpu_guest_prealloc_mb", parseInt(getEditText(etGpuGuestPreallocMb)));
+                item.set("gpu_guest_step_mb", parseInt(getEditText(etGpuGuestStepMb)));
+                item.set("gpu_guest_max_grants", parseInt(getEditText(etGpuGuestMaxGrants)));
+            } else {
+                item.set("gpu_guest_prealloc_mb", guestPool);
+                item.set("gpu_guest_step_mb", 0);
+                item.set("gpu_guest_max_grants", 0);
             }
+            item.set("gpu_dynamic_vram", swGpuDynamicVram.isChecked());
+            item.set("gpu_pool_blob_max_kb", parseInt(getEditText(etGpuPoolBlobMaxKb)));
+        }
+        // Which host Vulkan composites frames into the native display's Surface. Written outside
+        // the virtio-gpu block since the simplefb screen's GPU-copy path: it is the native sink's
+        // driver choice, and a simplefb-only VM loads it too (the daemon's env predicate is
+        // any-native-binding for the same reason).
+        item.set("display_blit_provider", chooseDisplayBlitProvider.getSelectedItem());
+        item.set(CpuPlacementPlan.KEY_GPU_CGROUP, swGpuCgroup.isChecked());
+        VpuConfig.setEnabled(item, swVpuEnabled.isChecked());
+        VpuConfig.setHostPoolMb(item, parseInt(getEditText(etMediaHostPoolMb)));
+        // Stored even while hidden, so flipping the protection mode back does not lose it. What
+        // decides whether a media_guest pool is created is VpuConfig.guestPoolMbFor, not whether
+        // the field was on screen.
+        VpuConfig.setGuestPoolMb(item, parseInt(getEditText(etMediaGuestPoolMb)));
+        item.set(CpuPlacementPlan.KEY_GPU_CGROUP_PATH, getEditText(etGpuCgroupPath).trim());
+        item.set(CpuPlacementPlan.KEY_GPU_CGROUP_CPUS, gpuCgroupCpus.trim());
+    }
+
+    // What the selected renderer can actually proxy.
+    //
+    // gfxstream is Vulkan-only here (its GLES and composer capsets are not used, and the guest
+    // reaches GL through zink on top of Vulkan). virglrenderer offers OpenGL (capset virgl2),
+    // Native (capset drm) and Vulkan (capset venus -- "Vulkan on virglrenderer" is venus by
+    // definition, so the mode row is where venus lives; the provider row below picks its ICD).
+    private void updateGpuModeOptions() {
+        var backend = chooseGpuBackend.getSelectedItem();
+        if (backend == GPU_GFXSTREAM) {
+            // gfxstream proxies Vulkan and nothing else here.
+            chooseGpuMode.setVisibility(VISIBLE);
+            chooseGpuMode.setItems(GpuMode.VULKAN);
+            chooseGpuMode.setSelectedItem(GpuMode.VULKAN);
+        } else if (backend == GpuBackend.GPU_VIRGLRENDERER) {
+            // virglrenderer has all three capsets: OPENGL (virgl2), NATIVE (drm2kgsl), VULKAN
+            // (venus). Only two of them are wired here -- the GL path is listed and refused rather
+            // than hidden, so the menu says what virglrenderer is for and where this build stands
+            // in it, and a VM stored with OPENGL still shows what it is set to.
+            chooseGpuMode.setVisibility(VISIBLE);
+            chooseGpuMode.setItems(GpuMode.NATIVE, GpuMode.OPENGL, GpuMode.VULKAN);
+            chooseGpuMode.setDisabledItems(
+                parent.getString(R.string.create_vm_option_not_implemented), GpuMode.OPENGL);
+            // setItems already lands on the first of them (Native Context), which is what a new
+            // VM comes up with; a stored mode is restored by load() afterwards. This only catches
+            // a selection left over from a set that no longer applies.
+            Object cur = chooseGpuMode.getSelectedItem();
+            if (cur != GpuMode.OPENGL && cur != GpuMode.NATIVE && cur != GpuMode.VULKAN)
+                chooseGpuMode.setSelectedItem(GpuMode.NATIVE);
+        } else {
+            // 2D has no acceleration to choose. setItems() rejects an empty list, so hide the row
+            // rather than clearing it; its stale items are never read for 2D (the reads below are
+            // all gated on the backend being gfxstream or virglrenderer).
+            chooseGpuMode.setVisibility(GONE);
+        }
+    }
+
+    // Which host driver serves the proxied calls. Native has none -- the DRM backend is
+    // compiled into virglrenderer for the device it runs on (KGSL on Adreno).
+    private void updateGpuProviderOptions() {
+        var backend = chooseGpuBackend.getSelectedItem();
+        boolean gfxstream = backend == GPU_GFXSTREAM;
+        boolean twoD = backend != GPU_GFXSTREAM && backend != GpuBackend.GPU_VIRGLRENDERER;
+        if (twoD) {
+            // 2D has no host driver. setItems() rejects an empty list, so just hide the row (its
+            // stale items are never read for 2D). Bail before the mode read below, which would be
+            // reading the hidden mode picker.
+            chooseGpuProvider.setVisibility(GONE);
+            return;
         }
-        if (vncEnabled) {
-            var passwordAuth = swVncPasswordAuth.isChecked();
-            item.set("vnc_password_auth", passwordAuth);
-            if (passwordAuth)
-                item.set("vnc_password", getEditText(etVncPassword));
-            item.set("vnc_host", getEditText(etVncHost));
-            var vncPortStr = getEditText(etVncPort);
-            item.set("vnc_port", vncPortStr.isEmpty() ? -1 : parseInt(vncPortStr));
+        GpuMode mode = chooseGpuMode.getSelectedItem();
+        if (gfxstream || mode == GpuMode.VULKAN) {
+            // Host Vulkan ICD. gfxstream is always in this mode; on virglrenderer it is venus.
+            // Both dlopen whatever ANDROID_EMU_VK_LOADER_PATH names (or the system loader when it
+            // is unset), so the choice is identical: bundled turnip, PanVK, or the SoC's stock HAL.
+            chooseGpuProvider.setItems(
+                GpuProvider.VK_TURNIP, GpuProvider.VK_PANVK, GpuProvider.VK_SYSTEM);
+            if (!isVulkanProvider(chooseGpuProvider.getSelectedItem()))
+                chooseGpuProvider.setSelectedItem(GpuProvider.VK_TURNIP);
+        } else if (mode == GpuMode.OPENGL) {
+            chooseGpuProvider.setItems(GpuProvider.EGL, GpuProvider.GLES);
+            if (isVulkanProvider(chooseGpuProvider.getSelectedItem())
+                || chooseGpuProvider.getSelectedItem() == GpuProvider.NONE)
+                chooseGpuProvider.setSelectedItem(GpuProvider.GLES);
+        } else if (mode == GpuMode.NATIVE) {
+            // One backend today, but the row stays: it is what makes the config say WHICH DRM
+            // driver the host answers with, and it is the key the launcher branches on.
+            chooseGpuProvider.setItems(GpuProvider.DRM2KGSL);
+            chooseGpuProvider.setSelectedItem(GpuProvider.DRM2KGSL);
         }
+        chooseGpuProvider.setVisibility(
+            gfxstream || mode == GpuMode.OPENGL || mode == GpuMode.NATIVE
+                || mode == GpuMode.VULKAN ? VISIBLE : GONE);
     }
 
-    private void updateGpuVisibility() {
-        gpuOptions.setVisibility(swGpuEnabled.isChecked() ? VISIBLE : GONE);
-        if (!swGpuEnabled.isChecked()) {
-            if (chooseDisplayBackend.getSelectedItem() == DisplayBackend.VIRTIO_GPU)
-                chooseDisplayBackend.setSelectedItem(SIMPLEFB);
+    // The single value the daemon still reads. Every (mode, provider) pair the UI can produce
+    // maps onto one of the old names, so nothing is lost by keeping both written.
+    @NonNull
+    private static GpuApi toLegacyApi(GpuMode mode, GpuProvider provider) {
+        if (mode == GpuMode.NATIVE) return GpuApi.DRM2KGSL;
+        if (provider == null) return GpuApi.NONE;
+        switch (provider) {
+            case EGL:       return GpuApi.EGL;
+            case GLES:      return GpuApi.OPENGLES;
+
+            // VULKAN mode on either renderer: gfxstream and venus both read the host ICD choice
+            // from these three (CrosvmBackendInstance.applyGfxstreamEnv).
+            case VK_SYSTEM: return GpuApi.VULKAN_SYSTEM;
+            case VK_TURNIP: return GpuApi.VULKAN_TURNIP;
+            case VK_PANVK:  return GpuApi.VULKAN_PANVK;
+            default:        return mode == GpuMode.VULKAN ? GpuApi.VULKAN : GpuApi.NONE;
         }
-        updateNativeDisplayVisibility();
     }
 
+    private static boolean isVulkanProvider(Object p) {
+        return p == GpuProvider.VK_SYSTEM || p == GpuProvider.VK_TURNIP
+            || p == GpuProvider.VK_PANVK;
+    }
+
+    /**
+     * The two screen blocks' visibility pass, run from every switch and picker under them.
+     *
+     * <p>One pass rather than one per row: the renderer section belongs to the virtio-gpu switch
+     * above it and the blit row to that screen's exporter below it, so each row asking only about
+     * itself is how a stale combination stays on screen.</p>
+     */
     private void updateDisplayVisibility() {
-        displayOptions.setVisibility(swDisplayEnabled.isChecked() ? VISIBLE : GONE);
+        boolean gpuDevice = screenGpu0.isScreenEnabled();
+        screenGpu0.updateVisibility();
+        screenFb.updateVisibility();
+        // Device off = the whole block folds to its enable switch: renderer, display and export
+        // sections all hide (the screen row hides its own two; the renderer section is ours).
+        rendererSection.setVisibility(gpuDevice ? VISIBLE : GONE);
+        // The GPU blit is no longer the native sink's step alone: the VNC sink dlopens the same
+        // driver for a headless blit of its own, so the row follows any binding that could climb
+        // to the GPU rung -- which for VNC means one whose ceiling has not been dropped to the CPU
+        // copy. With none of those, the row would name a driver nothing loads. It stays the same
+        // question the daemon's env predicate asks, asked of the live rows.
+        boolean anyBlitBinding = screenGpu0.isGpuBlitBinding() || screenFb.isGpuBlitBinding();
+        chooseDisplayBlitProvider.setVisibility(anyBlitBinding ? VISIBLE : GONE);
+    }
+
+    /**
+     * Enables or disables every control under [root].
+     *
+     * <p>Recursive because setEnabled on a ViewGroup does not reach its children: a block left
+     * looking greyed but still tappable is worse than one that was never greyed, since it takes
+     * input for a device that does not exist.</p>
+     */
+    private static void setRowsEnabled(@NonNull View root, boolean enabled) {
+        root.setEnabled(enabled);
+        if (!(root instanceof ViewGroup)) return;
+        var group = (ViewGroup) root;
+        for (int i = 0; i < group.getChildCount(); i++)
+            setRowsEnabled(group.getChildAt(i), enabled);
     }
 
-    private void updateDisplayDpiVisibility() {
-        var backend = chooseDisplayBackend.getSelectedItem();
-        displayDpiOptions.setVisibility(backend != SIMPLEFB ? VISIBLE : GONE);
-        updateNativeDisplayVisibility();
+    /**
+     * The rules crosvm would otherwise refuse the command line for, checked here so the refusal
+     * is a message in the editor rather than a VM that will not start.
+     *
+     * <p>"One exporter per screen" needs no check: the schema keys the binding by screen, so it
+     * cannot be said twice. Two listeners on one port can be, and crosvm compares the effective
+     * ports -- so ports left unnamed are fine (the daemon hands out distinct ones), but two that
+     * name the same one are not. One listener per VNC binding again, now that the H.264 stream is
+     * served on the RFB port instead of beside it.</p>
+     */
+    private boolean validateScreens() {
+        var crosvm = parent.get("backend", VMBackend.DEFAULT) == VMBackend.CROSVM;
+        for (var row : new ScreenBindingRow[]{screenGpu0, screenFb}) {
+            if (!row.isScreenEnabled()) continue;
+            if (row.getExporter() == DisplayExporter.NATIVE && !crosvm)
+                return showValidateFailed(R.string.create_vm_error_native_display_only_crosvm);
+            if (row.getExporter() != DisplayExporter.VNC) continue;
+            if (!checkInputField(row.portField(), true, 1024, 65535)) return false;
+        }
+        return validateNoPortCollision();
     }
 
-    private void updateNativeDisplayVisibility() {
-        // Native display rides on virtio-gpu (gfxstream) only.
-        boolean ok = swGpuEnabled.isChecked()
-            && chooseDisplayBackend.getSelectedItem() == DisplayBackend.VIRTIO_GPU;
-        swNativeDisplayEnabled.setVisibility(ok ? VISIBLE : GONE);
-        if (!ok) swNativeDisplayEnabled.setChecked(false);
+    /**
+     * The named ports, checked pairwise. Reported on the field that repeats one already claimed, so
+     * the error lands on the number the user would change rather than on the first one they typed.
+     */
+    private boolean validateNoPortCollision() {
+        var fields = new ArrayList<TextInputEditText>();
+        var ports = new ArrayList<Integer>();
+        for (var row : new ScreenBindingRow[]{screenGpu0, screenFb}) {
+            if (!row.isScreenEnabled() || row.getExporter() != DisplayExporter.VNC) continue;
+            fields.add(row.portField());
+            ports.add(row.typedVncPort());
+        }
+        for (var i = 0; i < ports.size(); i++) {
+            if (ports.get(i) <= 0) continue;
+            for (var j = 0; j < i; j++)
+                if (ports.get(j).equals(ports.get(i))) {
+                    fields.get(i).setError(
+                        parent.getString(R.string.create_vm_error_vnc_port_conflict));
+                    return false;
+                }
+        }
+        return true;
     }
 
-    private void updateVncVisibility() {
-        vncOptions.setVisibility(swVncEnabled.isChecked() ? VISIBLE : GONE);
+    // Probing Vulkan touches a driver, so do it off the UI thread and report once via a hint.
+    // SYSTEM stays selected regardless of the outcome -- a miss just means crosvm will fall back
+    // to a CPU copy, which we tell the user about instead of letting it happen silently. A null
+    // result (no Vulkan / no device to ask) is treated as "unknown" and says nothing.
+    private void warnIfSystemBlitIncapable() {
+        new Thread(() -> {
+            String[] missing = VulkanBlitProbe.missingBlitExtensions();
+            if (missing == null || missing.length == 0) return;
+            view.post(() -> {
+                if (chooseDisplayBlitProvider.getSelectedItem() == GpuBlitProvider.SYSTEM)
+                    showHint(parent.getString(R.string.display_blit_system_missing_ext,
+                        String.join("\n  ", missing)));
+            });
+        }, "vkprobe-blit").start();
     }
 
-    private void updateVncPasswordVisibility() {
-        vncPasswordOptions.setVisibility(swVncPasswordAuth.isChecked() ? VISIBLE : GONE);
+    // VRAM allocation split: with guest-alloc (udmabuf) the guest owns a pre-sized pool
+    // (gpu_guest_pool_mb); otherwise host-visible memory is shared in at runtime, metered
+    // against gpu_vram_quota_mb.
+    // The host pool stays visible in both modes.
+    //
+    // The dynamic-vram switch is offered on both paths and gates a different set of fields on
+    // each: host-alloc grows host-visible memory past the pre-alloc pool (quota + fusion gate);
+    // guest-alloc grows the guest pool past its boot preallocation (prealloc / step / max
+    // grants). Both ultimately use normal RegisterMemory; Gunyah supplies SHARE/accept as its
+    // backend implementation rather than through a separate UI switch.
+    private void updateVramAllocVisibility() {
+        boolean gfxstream = chooseGpuBackend.getSelectedItem() == GPU_GFXSTREAM;
+        // The DRM native context has two: a guest pool every BO is allocated from, and a small
+        // host pool left holding only the per-context msm shmem rings. None of gfxstream's other
+        // plumbing applies -- vram-limit and the fusion size gate have gfxstream-only consumers.
+        // Read the mode only under virglrenderer: 2D clears the mode picker and reading it would
+        // throw "Items not set". drm2kgsl only exists as virglrenderer's NATIVE mode anyway.
+        boolean drm2kgsl = chooseGpuBackend.getSelectedItem() == GpuBackend.GPU_VIRGLRENDERER
+            && chooseGpuMode.getSelectedItem() == GpuMode.NATIVE;
+        // Venus (virglrenderer + VULKAN) also allocates every BO from the guest pool; its host
+        // pool (venus-host-mb) holds the venus transport shmems and is tunable via its own field.
+        boolean venus = chooseGpuBackend.getSelectedItem() == GpuBackend.GPU_VIRGLRENDERER
+            && chooseGpuMode.getSelectedItem() == GpuMode.VULKAN;
+        boolean udmabuf = gfxstream && swGpuUdmabuf.isChecked();
+        vramSettings.setVisibility(gfxstream || drm2kgsl || venus ? VISIBLE : GONE);
+        // The three host pools each hold only a renderer's command-stream/transport buffers, so the
+        // UI labels them all "command buffer pool size"; exactly one is shown for the active mode.
+        tilGpuDrm2KgslPoolMb.setVisibility(drm2kgsl ? VISIBLE : GONE);
+        swGpuUdmabuf.setVisibility(gfxstream ? VISIBLE : GONE);
+        tilGpuHostPoolMb.setVisibility(gfxstream ? VISIBLE : GONE);
+        tilGpuVenusPoolMb.setVisibility(venus ? VISIBLE : GONE);
+        // The guest-allocated pool is the same region and the same flag for both renderers -- the
+        // guest driver keeps one allocator -- so it is offered wherever guest-alloc is in use:
+        // gfxstream with udmabuf on, and the DRM native context always (every BO comes from it).
+        boolean guestAlloc = (udmabuf || drm2kgsl || venus) && !hostVisibleRam();
+        tilGpuGuestPoolMb.setVisibility(guestAlloc ? VISIBLE : GONE);
+        boolean hostAlloc = gfxstream && !udmabuf;
+        // One of the two is always true whenever the VRAM block itself is shown, so the switch
+        // sits under the pool sizes on every path.
+        swGpuDynamicVram.setVisibility(hostAlloc || guestAlloc ? VISIBLE : GONE);
+        dynamicVramOptions.setVisibility(
+            (hostAlloc || guestAlloc) && swGpuDynamicVram.isChecked() ? VISIBLE : GONE);
+        dynamicVramHostOptions.setVisibility(hostAlloc ? VISIBLE : GONE);
+        dynamicVramGuestOptions.setVisibility(guestAlloc ? VISIBLE : GONE);
     }
 }
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/network/VMEditNetworkTab.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/network/VMEditNetworkTab.java
index c1b775d84..687461dd4 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/network/VMEditNetworkTab.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/network/VMEditNetworkTab.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.ui.vm.edit.network;
 
 import static java.util.Objects.requireNonNull;
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/network/VMNetEditAdapter.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/network/VMNetEditAdapter.java
index fcb55ebbc..38cbabb99 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/network/VMNetEditAdapter.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/network/VMNetEditAdapter.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.ui.vm.edit.network;
 
 import static android.view.View.GONE;
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/network/VMNetEditViewHolder.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/network/VMNetEditViewHolder.java
index 32d0721c4..7845e915f 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/network/VMNetEditViewHolder.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/network/VMNetEditViewHolder.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.ui.vm.edit.network;
 
 import android.view.View;
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/storage/VMEditStorageTab.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/storage/VMEditStorageTab.java
index 5c516aa55..d843746bc 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/storage/VMEditStorageTab.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/storage/VMEditStorageTab.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.ui.vm.edit.storage;
 
 import static android.app.Activity.RESULT_OK;
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/storage/dir/VMSharedDirEditAdapter.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/storage/dir/VMSharedDirEditAdapter.java
index ee99894f2..3a7175781 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/storage/dir/VMSharedDirEditAdapter.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/storage/dir/VMSharedDirEditAdapter.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.ui.vm.edit.storage.dir;
 
 import static cn.classfun.droidvm.lib.store.enums.Enums.optEnum;
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/storage/dir/VMSharedDirEditViewHolder.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/storage/dir/VMSharedDirEditViewHolder.java
index fa8588127..2cdf88710 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/storage/dir/VMSharedDirEditViewHolder.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/storage/dir/VMSharedDirEditViewHolder.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.ui.vm.edit.storage.dir;
 
 import android.text.TextWatcher;
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/storage/disk/VMDiskEditAdapter.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/storage/disk/VMDiskEditAdapter.java
index c8271fdc6..157c056d9 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/storage/disk/VMDiskEditAdapter.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/storage/disk/VMDiskEditAdapter.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.ui.vm.edit.storage.disk;
 
 import static android.widget.Toast.LENGTH_SHORT;
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/storage/disk/VMDiskEditViewHolder.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/storage/disk/VMDiskEditViewHolder.java
index b3fcbe2c8..e5917b52c 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/storage/disk/VMDiskEditViewHolder.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/storage/disk/VMDiskEditViewHolder.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.ui.vm.edit.storage.disk;
 
 import android.text.TextWatcher;
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/info/ConsoleButton.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/info/ConsoleButton.java
index 5cfda47be..ff2c28684 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/info/ConsoleButton.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/info/ConsoleButton.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.ui.vm.info;
 
 import static android.widget.Toast.LENGTH_SHORT;
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/info/VMInfoActivity.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/info/VMInfoActivity.java
index c5b822933..0afa0fffd 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/info/VMInfoActivity.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/info/VMInfoActivity.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.ui.vm.info;
 
 import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/pkg/exports/VMPkgExportActivity.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/pkg/exports/VMPkgExportActivity.java
index 74650153b..f173cc23d 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/pkg/exports/VMPkgExportActivity.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/pkg/exports/VMPkgExportActivity.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.ui.vm.pkg.exports;
 
 import static android.view.View.GONE;
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/pkg/exports/VMPkgExportDiskAdapter.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/pkg/exports/VMPkgExportDiskAdapter.java
index 11d6522ce..2c40e6ccf 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/pkg/exports/VMPkgExportDiskAdapter.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/pkg/exports/VMPkgExportDiskAdapter.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.ui.vm.pkg.exports;
 
 import static android.view.View.GONE;
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/pkg/imports/NetworkImportMode.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/pkg/imports/NetworkImportMode.java
index 4b89116ef..c41205e16 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/pkg/imports/NetworkImportMode.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/pkg/imports/NetworkImportMode.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.ui.vm.pkg.imports;
 
 import androidx.annotation.NonNull;
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/pkg/imports/VMPkgImportActivity.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/pkg/imports/VMPkgImportActivity.java
index 9689b5501..9db922c36 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/pkg/imports/VMPkgImportActivity.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/pkg/imports/VMPkgImportActivity.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.ui.vm.pkg.imports;
 
 import static android.view.View.GONE;
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/pkg/imports/VMPkgImportDiskAdapter.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/pkg/imports/VMPkgImportDiskAdapter.java
index a7b67fab7..9d06d3f02 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/pkg/imports/VMPkgImportDiskAdapter.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/pkg/imports/VMPkgImportDiskAdapter.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.ui.vm.pkg.imports;
 
 import static android.view.View.GONE;
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/pkg/imports/VMPkgImportNetworkAdapter.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/pkg/imports/VMPkgImportNetworkAdapter.java
index fc9a8d293..f3aa62a9c 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/pkg/imports/VMPkgImportNetworkAdapter.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/pkg/imports/VMPkgImportNetworkAdapter.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.ui.vm.pkg.imports;
 
 import static android.view.View.GONE;
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/widgets/container/CardItemAdapter.java b/app/src/main/java/cn/classfun/droidvm/ui/widgets/container/CardItemAdapter.java
index 733ba3906..621c14b88 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/widgets/container/CardItemAdapter.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/widgets/container/CardItemAdapter.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.ui.widgets.container;
 
 import android.annotation.SuppressLint;
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/widgets/container/CardItemListView.java b/app/src/main/java/cn/classfun/droidvm/ui/widgets/container/CardItemListView.java
index d65d41b45..5df93d365 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/widgets/container/CardItemListView.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/widgets/container/CardItemListView.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.ui.widgets.container;
 
 import android.content.Context;
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/widgets/container/CollapsibleContainer.java b/app/src/main/java/cn/classfun/droidvm/ui/widgets/container/CollapsibleContainer.java
index 616138e49..13f8c2297 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/widgets/container/CollapsibleContainer.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/widgets/container/CollapsibleContainer.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.ui.widgets.container;
 
 import android.content.Context;
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/widgets/row/ChooseRowWidget.java b/app/src/main/java/cn/classfun/droidvm/ui/widgets/row/ChooseRowWidget.java
index 1a5e4b0c8..f3291123d 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/widgets/row/ChooseRowWidget.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/widgets/row/ChooseRowWidget.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.ui.widgets.row;
 
 import android.content.Context;
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/widgets/row/DropdownRowWidget.java b/app/src/main/java/cn/classfun/droidvm/ui/widgets/row/DropdownRowWidget.java
index 8bb604fa2..448497ad3 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/widgets/row/DropdownRowWidget.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/widgets/row/DropdownRowWidget.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.ui.widgets.row;
 
 import android.content.Context;
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/widgets/row/SwitchRowWidget.java b/app/src/main/java/cn/classfun/droidvm/ui/widgets/row/SwitchRowWidget.java
index 5cd2dc8d6..272f260a8 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/widgets/row/SwitchRowWidget.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/widgets/row/SwitchRowWidget.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.ui.widgets.row;
 
 import android.annotation.SuppressLint;
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/widgets/row/TextInputRowWidget.java b/app/src/main/java/cn/classfun/droidvm/ui/widgets/row/TextInputRowWidget.java
index 03847de12..29349ec43 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/widgets/row/TextInputRowWidget.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/widgets/row/TextInputRowWidget.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.ui.widgets.row;
 
 import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/widgets/row/TextRowWidget.java b/app/src/main/java/cn/classfun/droidvm/ui/widgets/row/TextRowWidget.java
index c6d7fc085..d064b3308 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/widgets/row/TextRowWidget.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/widgets/row/TextRowWidget.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.ui.widgets.row;
 
 import android.content.Context;
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/widgets/tools/DownloadWidget.java b/app/src/main/java/cn/classfun/droidvm/ui/widgets/tools/DownloadWidget.java
index 8e56fa275..da7870f82 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/widgets/tools/DownloadWidget.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/widgets/tools/DownloadWidget.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.ui.widgets.tools;
 
 import static cn.classfun.droidvm.lib.utils.StringUtils.formatDuration;
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/widgets/tools/KernelAnalysisWidget.java b/app/src/main/java/cn/classfun/droidvm/ui/widgets/tools/KernelAnalysisWidget.java
index 7bcffd49c..ca8936e95 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/widgets/tools/KernelAnalysisWidget.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/widgets/tools/KernelAnalysisWidget.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.ui.widgets.tools;
 
 import static android.view.View.GONE;
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/widgets/tools/PickerButtonWidget.java b/app/src/main/java/cn/classfun/droidvm/ui/widgets/tools/PickerButtonWidget.java
index 6547b76bc..597abc709 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/widgets/tools/PickerButtonWidget.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/widgets/tools/PickerButtonWidget.java
@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.ui.widgets.tools;
 
 import android.content.Context;
diff --git a/app/src/main/res/layout/partial_vm_edit_graphics.xml b/app/src/main/res/layout/partial_vm_edit_graphics.xml
index 1f66ed78d..2c62c8006 100644
--- a/app/src/main/res/layout/partial_vm_edit_graphics.xml
+++ b/app/src/main/res/layout/partial_vm_edit_graphics.xml
@@ -1,4 +1,15 @@
-<?xml version="1.0" encoding="utf-8"?>
+<?xml version="1.0" encoding="utf-8"?><!--
+     Two display devices, side by side, each block shaped the same way: the switch that says the VM
+     has the device, then what that device is made of, then its geometry, then who exports it.
+     They are peers (a VM can have both, neither, or either), which is why neither block is
+     nested in the other and there is no VM-level "display" section above them any more.
+
+     The virtio-gpu block has one thing simplefb does not: a renderer. It is a setting inside the
+     device, not a switch beside it. There was a second switch here once, and the two could
+     disagree: a renderer with the display off was meant to be a GPU that accelerates and scans out
+     nothing, and no guest desktop ever came up on such a VM. So the display switch is the device,
+     renderer included, and the section below it says what the device is made of.
+-->
 <LinearLayout xmlns:android="http://schemas.android.com/apk/res/android"
     xmlns:app="http://schemas.android.com/apk/res-auto"
     xmlns:tools="http://schemas.android.com/tools"
@@ -9,319 +20,508 @@
     <cn.classfun.droidvm.ui.widgets.container.CollapsibleContainer
         android:layout_width="match_parent"
         android:layout_height="wrap_content"
-        android:title="@string/create_vm_category_gpu">
+        android:title="@string/create_vm_category_screen_gpu0">
 
         <cn.classfun.droidvm.ui.widgets.row.SwitchRowWidget
-            android:id="@+id/sw_gpu_enabled"
+            android:id="@+id/sw_screen_gpu0_enabled"
             android:layout_width="match_parent"
             android:layout_height="wrap_content"
-            android:icon="@drawable/ic_gpu"
-            android:text="@string/create_vm_gpu_enabled" />
-
-        <LinearLayout
-            android:id="@+id/gpu_options"
-            android:layout_width="match_parent"
-            android:layout_height="wrap_content"
-            android:orientation="vertical"
-            android:visibility="gone">
-
-            <cn.classfun.droidvm.ui.widgets.row.ChooseRowWidget
-                android:id="@+id/choose_gpu_backend"
-                android:layout_width="match_parent"
-                android:layout_height="wrap_content"
-                android:icon="@drawable/ic_drawing"
-                android:text="@string/create_vm_gpu_backend" />
-
-            <cn.classfun.droidvm.ui.widgets.row.ChooseRowWidget
-                android:id="@+id/choose_gpu_api"
-                android:layout_width="match_parent"
-                android:layout_height="wrap_content"
-                android:icon="@drawable/ic_application_cog"
-                android:text="@string/create_vm_gpu_api" />
-
-        </LinearLayout>
-
-    </cn.classfun.droidvm.ui.widgets.container.CollapsibleContainer>
-
-    <cn.classfun.droidvm.ui.widgets.container.CollapsibleContainer
-        android:layout_width="match_parent"
-        android:layout_height="wrap_content"
-        android:title="@string/create_vm_category_display">
-
-        <cn.classfun.droidvm.ui.widgets.row.SwitchRowWidget
-            android:id="@+id/sw_display_enabled"
-            android:layout_width="match_parent"
-            android:layout_height="wrap_content"
-            android:checked="true"
             android:icon="@drawable/ic_monitor"
-            android:text="@string/create_vm_display_enabled" />
+            android:text="@string/create_vm_screen_enabled" />
 
-        <LinearLayout
-            android:id="@+id/display_options"
+        <cn.classfun.droidvm.ui.widgets.container.CollapsibleContainer
             android:layout_width="match_parent"
             android:layout_height="wrap_content"
-            android:orientation="vertical">
-
-            <cn.classfun.droidvm.ui.widgets.row.ChooseRowWidget
-                android:id="@+id/choose_display_backend"
-                android:layout_width="match_parent"
-                android:layout_height="wrap_content"
-                android:icon="@drawable/ic_connection"
-                android:text="@string/create_vm_display_backend" />
-
-            <cn.classfun.droidvm.ui.widgets.row.SwitchRowWidget
-                android:id="@+id/sw_native_display_enabled"
-                android:layout_width="match_parent"
-                android:layout_height="wrap_content"
-                android:icon="@drawable/ic_monitor"
-                android:text="@string/create_vm_native_display_enabled" />
+            android:id="@+id/renderer_section"
+            android:title="@string/create_vm_category_renderer"
+            app:cc_expanded="true">
 
+            <!-- Greyed rather than hidden while the device is off: it is what the device would be
+                 made of, and a section that disappears reads as one that does not exist. -->
             <LinearLayout
+                android:id="@+id/gpu_options"
                 android:layout_width="match_parent"
                 android:layout_height="wrap_content"
-                android:layout_marginStart="16dp"
-                android:layout_marginTop="8dp"
-                android:layout_marginEnd="16dp"
-                android:layout_marginBottom="8dp"
-                android:baselineAligned="false"
-                android:orientation="horizontal">
+                android:orientation="vertical">
 
-                <com.google.android.material.textfield.TextInputLayout
-                    android:id="@+id/til_display_width"
-                    style="@style/Widget.Material3.TextInputLayout.OutlinedBox"
-                    android:layout_width="wrap_content"
+                <cn.classfun.droidvm.ui.widgets.row.ChooseRowWidget
+                    android:id="@+id/choose_gpu_backend"
+                    android:layout_width="match_parent"
+                    android:layout_height="wrap_content"
+                    android:icon="@drawable/ic_drawing"
+                    android:text="@string/create_vm_gpu_backend" />
+
+                <!-- The two axes rutabaga actually has, in order: what gets proxied (the capset /
+                     context type), then which host driver serves it. The old single "GPU API" row
+                     conflated them, so its options meant three different things depending on the
+                     renderer above. -->
+                <cn.classfun.droidvm.ui.widgets.row.ChooseRowWidget
+                    android:id="@+id/choose_gpu_mode"
+                    android:layout_width="match_parent"
                     android:layout_height="wrap_content"
-                    android:layout_marginEnd="8dp"
-                    android:layout_weight="1"
-                    android:hint="@string/create_vm_display_width">
+                    android:icon="@drawable/ic_application_cog"
+                    android:text="@string/create_vm_gpu_mode" />
 
-                    <com.google.android.material.textfield.TextInputEditText
-                        android:id="@+id/et_display_width"
-                        android:layout_width="match_parent"
-                        android:layout_height="wrap_content"
-                        android:inputType="number"
-                        android:text="1280"
-                        tools:ignore="HardcodedText,VisualLintTextFieldSize" />
+                <cn.classfun.droidvm.ui.widgets.row.ChooseRowWidget
+                    android:id="@+id/choose_gpu_provider"
+                    android:layout_width="match_parent"
+                    android:layout_height="wrap_content"
+                    android:icon="@drawable/ic_memory"
+                    android:text="@string/create_vm_gpu_provider" />
 
-                </com.google.android.material.textfield.TextInputLayout>
 
-                <com.google.android.material.textfield.TextInputLayout
-                    android:id="@+id/til_display_height"
-                    style="@style/Widget.Material3.TextInputLayout.OutlinedBox"
-                    android:layout_width="wrap_content"
+                <cn.classfun.droidvm.ui.widgets.container.CollapsibleContainer
+                    android:id="@+id/vram_settings"
+                    android:layout_width="match_parent"
                     android:layout_height="wrap_content"
-                    android:layout_marginStart="8dp"
-                    android:layout_marginEnd="8dp"
-                    android:layout_weight="1"
-                    android:hint="@string/create_vm_display_height">
+                    android:title="@string/create_vm_category_vram"
+                    app:cc_expanded="true">
 
-                    <com.google.android.material.textfield.TextInputEditText
-                        android:id="@+id/et_display_height"
+                    <cn.classfun.droidvm.ui.widgets.row.SwitchRowWidget
+                        android:id="@+id/sw_gpu_udmabuf"
                         android:layout_width="match_parent"
                         android:layout_height="wrap_content"
-                        android:inputType="number"
-                        android:text="720"
-                        tools:ignore="HardcodedText,VisualLintTextFieldSize" />
+                        android:icon="@drawable/ic_memory"
+                        android:text="@string/create_vm_gpu_udmabuf" />
 
-                </com.google.android.material.textfield.TextInputLayout>
+                    <LinearLayout
+                        android:id="@+id/vram_alloc_options"
+                        android:layout_width="match_parent"
+                        android:layout_height="wrap_content"
+                        android:layout_marginStart="16dp"
+                        android:layout_marginTop="8dp"
+                        android:layout_marginEnd="16dp"
+                        android:layout_marginBottom="8dp"
+                        android:orientation="vertical">
+
+                        <com.google.android.material.textfield.TextInputLayout
+                            android:id="@+id/til_gpu_drm2kgsl_pool_mb"
+                            style="@style/Widget.Material3.TextInputLayout.OutlinedBox"
+                            android:layout_width="match_parent"
+                            android:layout_height="wrap_content"
+                            android:layout_marginBottom="8dp"
+                            android:hint="@string/create_vm_gpu_drm2kgsl_pool_mb">
+
+                            <com.google.android.material.textfield.TextInputEditText
+                                android:id="@+id/et_gpu_drm2kgsl_pool_mb"
+                                android:layout_width="match_parent"
+                                android:layout_height="wrap_content"
+                                android:inputType="number"
+                                android:text="64"
+                                tools:ignore="HardcodedText,VisualLintTextFieldSize" />
+
+                        </com.google.android.material.textfield.TextInputLayout>
+
+                        <com.google.android.material.textfield.TextInputLayout
+                            android:id="@+id/til_gpu_host_pool_mb"
+                            style="@style/Widget.Material3.TextInputLayout.OutlinedBox"
+                            android:layout_width="match_parent"
+                            android:layout_height="wrap_content"
+                            android:layout_marginBottom="8dp"
+                            android:hint="@string/create_vm_gpu_host_pool_mb">
+
+                            <com.google.android.material.textfield.TextInputEditText
+                                android:id="@+id/et_gpu_host_pool_mb"
+                                android:layout_width="match_parent"
+                                android:layout_height="wrap_content"
+                                android:inputType="number"
+                                android:text="64"
+                                tools:ignore="HardcodedText,VisualLintTextFieldSize" />
+
+                        </com.google.android.material.textfield.TextInputLayout>
+
+                        <com.google.android.material.textfield.TextInputLayout
+                            android:id="@+id/til_gpu_venus_pool_mb"
+                            style="@style/Widget.Material3.TextInputLayout.OutlinedBox"
+                            android:layout_width="match_parent"
+                            android:layout_height="wrap_content"
+                            android:layout_marginBottom="8dp"
+                            android:hint="@string/create_vm_gpu_venus_pool_mb">
+
+                            <com.google.android.material.textfield.TextInputEditText
+                                android:id="@+id/et_gpu_venus_pool_mb"
+                                android:layout_width="match_parent"
+                                android:layout_height="wrap_content"
+                                android:inputType="number"
+                                android:text="256"
+                                tools:ignore="HardcodedText,VisualLintTextFieldSize" />
+
+                        </com.google.android.material.textfield.TextInputLayout>
+
+                        <com.google.android.material.textfield.TextInputLayout
+                            android:id="@+id/til_gpu_guest_pool_mb"
+                            style="@style/Widget.Material3.TextInputLayout.OutlinedBox"
+                            android:layout_width="match_parent"
+                            android:layout_height="wrap_content"
+                            android:layout_marginBottom="8dp"
+                            android:hint="@string/create_vm_gpu_guest_pool_mb">
+
+                            <com.google.android.material.textfield.TextInputEditText
+                                android:id="@+id/et_gpu_guest_pool_mb"
+                                android:layout_width="match_parent"
+                                android:layout_height="wrap_content"
+                                android:inputType="number"
+                                android:text="1024"
+                                tools:ignore="HardcodedText,VisualLintTextFieldSize" />
+
+                        </com.google.android.material.textfield.TextInputLayout>
+
+                    </LinearLayout>
+
+                    <cn.classfun.droidvm.ui.widgets.row.SwitchRowWidget
+                        android:id="@+id/sw_gpu_dynamic_vram"
+                        android:layout_width="match_parent"
+                        android:layout_height="wrap_content"
+                        android:icon="@drawable/ic_share"
+                        android:text="@string/create_vm_gpu_dynamic_vram" />
 
-                <com.google.android.material.textfield.TextInputLayout
-                    android:id="@+id/til_display_refresh_rate"
-                    style="@style/Widget.Material3.TextInputLayout.OutlinedBox"
-                    android:layout_width="wrap_content"
+                    <LinearLayout
+                        android:id="@+id/dynamic_vram_options"
+                        android:layout_width="match_parent"
+                        android:layout_height="wrap_content"
+                        android:layout_marginStart="16dp"
+                        android:layout_marginTop="8dp"
+                        android:layout_marginEnd="16dp"
+                        android:layout_marginBottom="8dp"
+                        android:orientation="vertical">
+
+                        <!-- Host-alloc (gfxstream without udmabuf): host-visible memory past the
+                             pre-alloc pool is runtime-SHARE'd, metered against the quota. -->
+                        <LinearLayout
+                            android:id="@+id/dynamic_vram_host_options"
+                            android:layout_width="match_parent"
+                            android:layout_height="wrap_content"
+                            android:orientation="vertical">
+
+                            <com.google.android.material.textfield.TextInputLayout
+                                android:id="@+id/til_gpu_vram_quota_mb"
+                                style="@style/Widget.Material3.TextInputLayout.OutlinedBox"
+                                android:layout_width="match_parent"
+                                android:layout_height="wrap_content"
+                                android:layout_marginBottom="8dp"
+                                android:hint="@string/create_vm_gpu_vram_quota_mb">
+
+                                <com.google.android.material.textfield.TextInputEditText
+                                    android:id="@+id/et_gpu_vram_quota_mb"
+                                    android:layout_width="match_parent"
+                                    android:layout_height="wrap_content"
+                                    android:inputType="number"
+                                    android:text="2048"
+                                    tools:ignore="HardcodedText,VisualLintTextFieldSize" />
+
+                            </com.google.android.material.textfield.TextInputLayout>
+
+                            <com.google.android.material.textfield.TextInputLayout
+                                android:id="@+id/til_gpu_vram_folio_threshold_kb"
+                                style="@style/Widget.Material3.TextInputLayout.OutlinedBox"
+                                android:layout_width="match_parent"
+                                android:layout_height="wrap_content"
+                                android:layout_marginBottom="8dp"
+                                android:hint="@string/create_vm_gpu_vram_folio_threshold_kb">
+
+                                <com.google.android.material.textfield.TextInputEditText
+                                    android:id="@+id/et_gpu_vram_folio_threshold_kb"
+                                    android:layout_width="match_parent"
+                                    android:layout_height="wrap_content"
+                                    android:inputType="number"
+                                    android:text="1024"
+                                    tools:ignore="HardcodedText,VisualLintTextFieldSize" />
+
+                            </com.google.android.material.textfield.TextInputLayout>
+
+                            <com.google.android.material.textfield.TextInputLayout
+                                android:id="@+id/til_gpu_pool_blob_max_kb"
+                                style="@style/Widget.Material3.TextInputLayout.OutlinedBox"
+                                android:layout_width="match_parent"
+                                android:layout_height="wrap_content"
+                                android:hint="@string/create_vm_gpu_pool_blob_max_kb">
+
+                                <com.google.android.material.textfield.TextInputEditText
+                                    android:id="@+id/et_gpu_pool_blob_max_kb"
+                                    android:layout_width="match_parent"
+                                    android:layout_height="wrap_content"
+                                    android:inputType="number"
+                                    android:text="4096"
+                                    tools:ignore="HardcodedText,VisualLintTextFieldSize" />
+
+                            </com.google.android.material.textfield.TextInputLayout>
+
+                        </LinearLayout>
+
+                        <!-- Guest-alloc (udmabuf / drm2kgsl / venus): the guest pool is declared at
+                             its full size but only the preallocation is SHARE'd at boot; the guest
+                             grows and shrinks the rest at runtime, one memparcel per step. -->
+                        <LinearLayout
+                            android:id="@+id/dynamic_vram_guest_options"
+                            android:layout_width="match_parent"
+                            android:layout_height="wrap_content"
+                            android:orientation="vertical">
+
+                            <com.google.android.material.textfield.TextInputLayout
+                                android:id="@+id/til_gpu_guest_prealloc_mb"
+                                style="@style/Widget.Material3.TextInputLayout.OutlinedBox"
+                                android:layout_width="match_parent"
+                                android:layout_height="wrap_content"
+                                android:layout_marginBottom="8dp"
+                                android:hint="@string/create_vm_gpu_guest_prealloc_mb">
+
+                                <com.google.android.material.textfield.TextInputEditText
+                                    android:id="@+id/et_gpu_guest_prealloc_mb"
+                                    android:layout_width="match_parent"
+                                    android:layout_height="wrap_content"
+                                    android:inputType="number"
+                                    android:text="1024"
+                                    tools:ignore="HardcodedText,VisualLintTextFieldSize" />
+
+                            </com.google.android.material.textfield.TextInputLayout>
+
+                            <com.google.android.material.textfield.TextInputLayout
+                                android:id="@+id/til_gpu_guest_step_mb"
+                                style="@style/Widget.Material3.TextInputLayout.OutlinedBox"
+                                android:layout_width="match_parent"
+                                android:layout_height="wrap_content"
+                                android:layout_marginBottom="8dp"
+                                android:hint="@string/create_vm_gpu_guest_step_mb">
+
+                                <com.google.android.material.textfield.TextInputEditText
+                                    android:id="@+id/et_gpu_guest_step_mb"
+                                    android:layout_width="match_parent"
+                                    android:layout_height="wrap_content"
+                                    android:inputType="number"
+                                    android:text="0"
+                                    tools:ignore="HardcodedText,VisualLintTextFieldSize" />
+
+                            </com.google.android.material.textfield.TextInputLayout>
+
+                            <com.google.android.material.textfield.TextInputLayout
+                                android:id="@+id/til_gpu_guest_max_grants"
+                                style="@style/Widget.Material3.TextInputLayout.OutlinedBox"
+                                android:layout_width="match_parent"
+                                android:layout_height="wrap_content"
+                                android:hint="@string/create_vm_gpu_guest_max_grants">
+
+                                <com.google.android.material.textfield.TextInputEditText
+                                    android:id="@+id/et_gpu_guest_max_grants"
+                                    android:layout_width="match_parent"
+                                    android:layout_height="wrap_content"
+                                    android:inputType="number"
+                                    android:text="0"
+                                    tools:ignore="HardcodedText,VisualLintTextFieldSize" />
+
+                            </com.google.android.material.textfield.TextInputLayout>
+
+                        </LinearLayout>
+
+                    </LinearLayout>
+
+                </cn.classfun.droidvm.ui.widgets.container.CollapsibleContainer>
+
+
+                <!-- The GPU worker cpuset. The per-vCPU affinity that pairs with it lives in
+                     VMCpuAffinityDialog, reached from the CPU count field, since its rows are
+                     a function of that count. This block is not: it is a plain host cpuset. -->
+                <cn.classfun.droidvm.ui.widgets.container.CollapsibleContainer
+                    android:layout_width="match_parent"
                     android:layout_height="wrap_content"
-                    android:layout_marginStart="8dp"
-                    android:layout_weight="1"
-                    android:hint="@string/create_vm_display_refresh_rate">
+                    android:title="@string/create_vm_category_gpu_cgroup">
 
-                    <com.google.android.material.textfield.TextInputEditText
-                        android:id="@+id/et_display_refresh_rate"
+                    <cn.classfun.droidvm.ui.widgets.row.SwitchRowWidget
+                        android:id="@+id/sw_gpu_cgroup"
                         android:layout_width="match_parent"
                         android:layout_height="wrap_content"
-                        android:inputType="number"
-                        android:text="30"
-                        tools:ignore="HardcodedText,VisualLintTextFieldSize" />
+                        android:icon="@drawable/ic_gpu"
+                        android:text="@string/create_vm_gpu_cgroup" />
 
-                </com.google.android.material.textfield.TextInputLayout>
+                    <LinearLayout
+                        android:id="@+id/gpu_cgroup_options"
+                        android:layout_width="match_parent"
+                        android:layout_height="wrap_content"
+                        android:layout_marginStart="16dp"
+                        android:layout_marginTop="8dp"
+                        android:layout_marginEnd="16dp"
+                        android:layout_marginBottom="8dp"
+                        android:orientation="vertical"
+                        android:visibility="gone">
+
+                        <com.google.android.material.textfield.TextInputLayout
+                            android:id="@+id/til_gpu_cgroup_path"
+                            style="@style/Widget.Material3.TextInputLayout.OutlinedBox"
+                            android:layout_width="match_parent"
+                            android:layout_height="wrap_content"
+                            android:hint="@string/create_vm_gpu_cgroup_path_hint">
+
+                            <com.google.android.material.textfield.TextInputEditText
+                                android:id="@+id/et_gpu_cgroup_path"
+                                android:layout_width="match_parent"
+                                android:layout_height="wrap_content"
+                                android:inputType="text"
+                                android:textSize="14sp" />
+
+                        </com.google.android.material.textfield.TextInputLayout>
+
+                        <!-- Tapping opens a multi-choice host-core picker. -->
+                        <cn.classfun.droidvm.ui.widgets.row.TextRowWidget
+                            android:id="@+id/row_gpu_cgroup_cpus"
+                            android:layout_width="match_parent"
+                            android:layout_height="wrap_content"
+                            android:icon="@drawable/ic_cpu"
+                            android:text="@string/create_vm_gpu_cgroup_cpus" />
+
+                        <!-- The virtio-gpu worker runs SCHED_FIFO when this is on; on gfxstream its
+                             per-context render threads all inherit the same priority. It belongs inside the
+                             cpuset block, as a peer of the core picker rather than a sibling of the block,
+                             because the two only make sense together: confined to the picked cores, RT
+                             threads contend for those and can spin-starve the vCPUs (priority inversion ->
+                             low native-display present fps), which is a tradeoff; unconfined, the same
+                             threads are free to take every core at a priority above everything else on the
+                             phone, which is not. Off (the default) leaves them on normal scheduling. -->
+                        <cn.classfun.droidvm.ui.widgets.row.SwitchRowWidget
+                            android:id="@+id/sw_gpu_rt_prio"
+                            android:layout_width="match_parent"
+                            android:layout_height="wrap_content"
+                            android:icon="@drawable/ic_application_cog"
+                            android:text="@string/create_vm_gpu_rt_prio" />
+
+                    </LinearLayout>
+
+                </cn.classfun.droidvm.ui.widgets.container.CollapsibleContainer>
 
             </LinearLayout>
 
-            <LinearLayout
-                android:id="@+id/display_dpi_options"
-                android:layout_width="match_parent"
-                android:layout_height="wrap_content"
-                android:layout_marginStart="16dp"
-                android:layout_marginTop="8dp"
-                android:layout_marginEnd="16dp"
-                android:layout_marginBottom="8dp"
-                android:baselineAligned="false"
-                android:orientation="horizontal">
-
-                <com.google.android.material.textfield.TextInputLayout
-                    android:id="@+id/til_display_dpi_h"
-                    style="@style/Widget.Material3.TextInputLayout.OutlinedBox"
-                    android:layout_width="wrap_content"
-                    android:layout_height="wrap_content"
-                    android:layout_marginEnd="8dp"
-                    android:layout_weight="1"
-                    android:hint="@string/create_vm_display_dpi_h">
+        </cn.classfun.droidvm.ui.widgets.container.CollapsibleContainer>
 
-                    <com.google.android.material.textfield.TextInputEditText
-                        android:id="@+id/et_display_dpi_h"
-                        android:layout_width="match_parent"
-                        android:layout_height="wrap_content"
-                        android:inputType="number"
-                        android:text="320"
-                        tools:ignore="HardcodedText,VisualLintTextFieldSize" />
+        <include
+            android:id="@+id/screen_gpu0_block"
+            layout="@layout/partial_vm_screen_binding"
+            android:layout_width="match_parent"
+            android:layout_height="wrap_content" />
 
-                </com.google.android.material.textfield.TextInputLayout>
+    </cn.classfun.droidvm.ui.widgets.container.CollapsibleContainer>
 
-                <com.google.android.material.textfield.TextInputLayout
-                    android:id="@+id/til_display_dpi_v"
-                    style="@style/Widget.Material3.TextInputLayout.OutlinedBox"
-                    android:layout_width="wrap_content"
-                    android:layout_height="wrap_content"
-                    android:layout_marginStart="8dp"
-                    android:layout_weight="1"
-                    android:hint="@string/create_vm_display_dpi_v">
+    <cn.classfun.droidvm.ui.widgets.container.CollapsibleContainer
+        android:layout_width="match_parent"
+        android:layout_height="wrap_content"
+        android:title="@string/create_vm_category_screen_simplefb">
 
-                    <com.google.android.material.textfield.TextInputEditText
-                        android:id="@+id/et_display_dpi_v"
-                        android:layout_width="match_parent"
-                        android:layout_height="wrap_content"
-                        android:inputType="number"
-                        android:text="320"
-                        tools:ignore="HardcodedText,VisualLintTextFieldSize" />
+        <cn.classfun.droidvm.ui.widgets.row.SwitchRowWidget
+            android:id="@+id/sw_screen_fb_enabled"
+            android:layout_width="match_parent"
+            android:layout_height="wrap_content"
+            android:icon="@drawable/ic_monitor"
+            android:text="@string/create_vm_screen_enabled" />
 
-                </com.google.android.material.textfield.TextInputLayout>
-            </LinearLayout>
+        <!-- No renderer section: this device is a block of memory the guest writes pixels into.
+             It is 2D by construction, which is also why its "refresh rate" is a poll rate. -->
 
-        </LinearLayout>
+        <include
+            android:id="@+id/screen_fb_block"
+            layout="@layout/partial_vm_screen_binding"
+            android:layout_width="match_parent"
+            android:layout_height="wrap_content" />
 
     </cn.classfun.droidvm.ui.widgets.container.CollapsibleContainer>
 
+    <!-- Which host Vulkan composites frames into the native display's Surface. Top-level rather
+         than a renderer sub-setting: since the simplefb GPU copy landed, a simplefb-only VM with
+         a native binding loads this driver too, so it must survive the Virtio-GPU device (and its
+         renderer section) being off. Visibility follows any-native-binding in the tab. -->
+    <cn.classfun.droidvm.ui.widgets.row.ChooseRowWidget
+        android:id="@+id/choose_display_blit_provider"
+        android:layout_width="match_parent"
+        android:layout_height="wrap_content"
+        android:icon="@drawable/ic_connection"
+        android:text="@string/create_vm_display_blit_provider" />
+
+
     <cn.classfun.droidvm.ui.widgets.container.CollapsibleContainer
         android:layout_width="match_parent"
         android:layout_height="wrap_content"
-        android:title="@string/create_vm_category_vnc">
+        android:title="@string/create_vm_category_vpu">
 
+        <!-- One switch, and it attaches both directions. Decode and encode are separate
+             virtio-media devices in the guest (a device is one V4L2 node is one function), but
+             they are one piece of hardware to a user, and a VM given half of a VPU is a VM whose
+             video editor exports on the CPU for no reason anyone could see. Split it only if a
+             host ever turns out to serve one direction and not the other. -->
         <cn.classfun.droidvm.ui.widgets.row.SwitchRowWidget
-            android:id="@+id/sw_vnc_enabled"
+            android:id="@+id/sw_vpu_enabled"
             android:layout_width="match_parent"
             android:layout_height="wrap_content"
-            android:checked="true"
-            android:icon="@drawable/ic_remote_desktop"
-            android:text="@string/create_vm_vnc_enabled" />
+            android:icon="@drawable/ic_video"
+            android:text="@string/create_vm_vpu_enabled" />
 
         <LinearLayout
-            android:id="@+id/vnc_options"
+            android:id="@+id/vpu_options"
             android:layout_width="match_parent"
             android:layout_height="wrap_content"
-            android:orientation="vertical">
-
-            <LinearLayout
+            android:layout_marginStart="16dp"
+            android:layout_marginEnd="16dp"
+            android:orientation="vertical"
+            android:visibility="gone"
+            tools:visibility="visible">
+
+            <!-- Where the host puts the buffers it allocates. The guest maps them at
+                 pool base + the offset the host returns, which is what virtio-media's mmap
+                 command already does, so this is the whole of the protected-VM story for
+                 host-allocated buffers. -->
+            <com.google.android.material.textfield.TextInputLayout
+                android:id="@+id/til_media_host_pool_mb"
+                style="@style/Widget.Material3.TextInputLayout.OutlinedBox"
                 android:layout_width="match_parent"
                 android:layout_height="wrap_content"
-                android:layout_marginStart="16dp"
-                android:layout_marginTop="8dp"
-                android:layout_marginEnd="16dp"
                 android:layout_marginBottom="8dp"
-                android:baselineAligned="false"
-                android:orientation="horizontal">
+                android:hint="@string/create_vm_vpu_host_pool_mb">
 
-                <com.google.android.material.textfield.TextInputLayout
-                    android:id="@+id/til_vnc_host"
-                    style="@style/Widget.Material3.TextInputLayout.OutlinedBox"
-                    android:layout_width="0dp"
+                <com.google.android.material.textfield.TextInputEditText
+                    android:id="@+id/et_media_host_pool_mb"
+                    android:layout_width="match_parent"
                     android:layout_height="wrap_content"
-                    android:layout_marginEnd="8dp"
-                    android:layout_weight="2"
-                    android:hint="@string/create_vm_vnc_host">
+                    android:inputType="number"
+                    android:text="256"
+                    tools:ignore="HardcodedText,VisualLintTextFieldSize" />
 
-                    <com.google.android.material.textfield.TextInputEditText
-                        android:id="@+id/et_vnc_host"
-                        android:layout_width="match_parent"
-                        android:layout_height="wrap_content"
-                        android:inputType="text"
-                        android:text="127.0.0.1"
-                        tools:ignore="HardcodedText,VisualLintTextFieldSize" />
+            </com.google.android.material.textfield.TextInputLayout>
 
-                </com.google.android.material.textfield.TextInputLayout>
+            <!-- Only for a VM whose memory the host cannot read. Hidden otherwise, and no
+                 media_guest pool is passed, which leaves the guest driver on its stock path of
+                 allocating from system RAM. -->
+            <LinearLayout
+                android:id="@+id/media_guest_pool_options"
+                android:layout_width="match_parent"
+                android:layout_height="wrap_content"
+                android:orientation="vertical">
 
                 <com.google.android.material.textfield.TextInputLayout
-                    android:id="@+id/til_vnc_port"
+                    android:id="@+id/til_media_guest_pool_mb"
                     style="@style/Widget.Material3.TextInputLayout.OutlinedBox"
-                    android:layout_width="0dp"
+                    android:layout_width="match_parent"
                     android:layout_height="wrap_content"
-                    android:layout_marginStart="8dp"
-                    android:layout_weight="1"
-                    android:hint="@string/create_vm_vnc_port">
+                    android:layout_marginBottom="8dp"
+                    android:hint="@string/create_vm_vpu_guest_pool_mb">
 
                     <com.google.android.material.textfield.TextInputEditText
-                        android:id="@+id/et_vnc_port"
+                        android:id="@+id/et_media_guest_pool_mb"
                         android:layout_width="match_parent"
                         android:layout_height="wrap_content"
                         android:inputType="number"
-                        tools:ignore="TextContrastCheck,VisualLintTextFieldSize" />
+                        android:text="128"
+                        tools:ignore="HardcodedText,VisualLintTextFieldSize" />
+
                 </com.google.android.material.textfield.TextInputLayout>
 
             </LinearLayout>
 
-            <cn.classfun.droidvm.ui.widgets.row.SwitchRowWidget
-                android:id="@+id/sw_vnc_password_auth"
+            <TextView
+                android:id="@+id/tv_vpu_note"
                 android:layout_width="match_parent"
                 android:layout_height="wrap_content"
-                android:icon="@drawable/ic_lock"
-                android:text="@string/create_vm_vnc_password_auth" />
-
-            <LinearLayout
-                android:id="@+id/vnc_password_options"
-                android:layout_width="match_parent"
-                android:layout_height="wrap_content"
-                android:layout_marginStart="16dp"
-                android:layout_marginEnd="16dp"
                 android:layout_marginBottom="8dp"
-                android:gravity="center_vertical"
-                android:orientation="horizontal"
-                android:visibility="gone">
-
-                <com.google.android.material.textfield.TextInputLayout
-                    android:id="@+id/til_vnc_password"
-                    style="@style/Widget.Material3.TextInputLayout.OutlinedBox"
-                    android:layout_width="0dp"
-                    android:layout_height="wrap_content"
-                    android:layout_weight="1"
-                    android:hint="@string/create_vm_vnc_password"
-                    app:endIconMode="password_toggle">
-
-                    <com.google.android.material.textfield.TextInputEditText
-                        android:id="@+id/et_vnc_password"
-                        android:layout_width="match_parent"
-                        android:layout_height="wrap_content"
-                        android:inputType="textPassword" />
-                </com.google.android.material.textfield.TextInputLayout>
-
-                <com.google.android.material.button.MaterialButton
-                    android:id="@+id/btn_vnc_password_clear"
-                    style="@style/Widget.Material3.Button.IconButton"
-                    android:layout_width="wrap_content"
-                    android:layout_height="wrap_content"
-                    android:layout_marginStart="4dp"
-                    android:contentDescription="@string/create_vm_vnc_password_clear"
-                    app:icon="@drawable/ic_close" />
-
-                <com.google.android.material.button.MaterialButton
-                    android:id="@+id/btn_vnc_password_generate"
-                    style="@style/Widget.Material3.Button.IconButton"
-                    android:layout_width="wrap_content"
-                    android:layout_height="wrap_content"
-                    android:contentDescription="@string/create_vm_vnc_password_generate"
-                    app:icon="@drawable/ic_refresh" />
-
-            </LinearLayout>
+                android:text="@string/create_vm_vpu_note"
+                android:textSize="12sp" />
 
         </LinearLayout>
 
     </cn.classfun.droidvm.ui.widgets.container.CollapsibleContainer>
 
+
 </LinearLayout>

From d8eb93cd2b8bb295f06c3ed4f310140e3e0a336d Mon Sep 17 00:00:00 2001
From: HuJK <gh@hujk.org>
Date: Sun, 30 Aug 2026 13:37:07 +0800
Subject: [PATCH 127/182] ci: three source checks, and a build that can
 unit-test a class that logs

check_arity.py walls off the constructors and methods that had grown past the
point where a caller can be read: a positional list long enough that swapping
two arguments of the same type still compiles. check_vector_icons.py holds the
drawables to one shape so an icon added in a hurry does not arrive at a
different optical size than the row it sits in. check_string_concat gets
stricter, and the two allow-lists carry the deliberate exceptions rather than
leaving the checks off.

isReturnDefaultValues lets a unit test cover a class that logs. Keeping every
testable class free of android.util.Log stopped being tenable once the classes
worth testing were the ones whose whole subject is a socket and a thread
outliving the object that owned them, and which say so out loud when they do.
Nothing asserts on a stub's return value; the stubs only let the class under
test be built.
---
 .github/workflows/checks.yml      |   6 +
 .gitignore                        |   4 +
 app/build.gradle.kts              |  10 ++
 app/src/main/assets/prebuilts     |   2 +-
 scripts/ci/arity_allow.txt        |  22 ++++
 scripts/ci/ascii_allow.txt        |   3 +
 scripts/ci/check_arity.py         | 192 ++++++++++++++++++++++++++++++
 scripts/ci/check_string_concat.py |  21 ++--
 scripts/ci/check_vector_icons.py  |  73 ++++++++++++
 9 files changed, 325 insertions(+), 8 deletions(-)
 create mode 100644 scripts/ci/arity_allow.txt
 create mode 100755 scripts/ci/check_arity.py
 create mode 100755 scripts/ci/check_vector_icons.py

diff --git a/.github/workflows/checks.yml b/.github/workflows/checks.yml
index 78e71579d..0318d0833 100644
--- a/.github/workflows/checks.yml
+++ b/.github/workflows/checks.yml
@@ -33,3 +33,9 @@ jobs:
 
       - name: Use fmt() instead of string concatenation
         run: python3 scripts/ci/check_string_concat.py
+
+      - name: Icons are vector drawables
+        run: python3 scripts/ci/check_vector_icons.py
+
+      - name: No signature over the parameter limit
+        run: python3 scripts/ci/check_arity.py
diff --git a/.gitignore b/.gitignore
index 2625919c3..478500f90 100644
--- a/.gitignore
+++ b/.gitignore
@@ -28,3 +28,7 @@ local.properties
 # Terminal font: build.sh fetches the ~2.3MB Maple Mono NL NF TTF on first
 # build; only the OFL license text under app/src/main/assets/fonts is committed.
 /app/src/main/assets/fonts/*.ttf
+
+# Python bytecode from the scripts/ci checks.
+__pycache__/
+*.pyc
diff --git a/app/build.gradle.kts b/app/build.gradle.kts
index aac83d6e7..8e334528c 100644
--- a/app/build.gradle.kts
+++ b/app/build.gradle.kts
@@ -98,6 +98,16 @@ android {
         aidl = true
         buildConfig = true
     }
+    testOptions {
+        unitTests {
+            // Lets a unit test cover a class that logs. The alternative -- keeping every testable
+            // class free of android.util.Log -- stopped being tenable at the H.264 side channel,
+            // whose whole subject is a socket and a thread outliving the object that owned them,
+            // and which says so out loud when they do. Nothing here asserts on a stub's return
+            // value; the stubs are only there so the class under test can be built at all.
+            isReturnDefaultValues = true
+        }
+    }
     packaging {
         jniLibs {
             // Extract native libs to a real on-disk dir so lbx (shipped as
diff --git a/app/src/main/assets/prebuilts b/app/src/main/assets/prebuilts
index 2c31cecde..8631ea61e 160000
--- a/app/src/main/assets/prebuilts
+++ b/app/src/main/assets/prebuilts
@@ -1 +1 @@
-Subproject commit 2c31cecdedb5110e8861b8b698ba5b538725cfb7
+Subproject commit 8631ea61eb07acd3ebfd17553b65797fc28d5149
diff --git a/scripts/ci/arity_allow.txt b/scripts/ci/arity_allow.txt
new file mode 100644
index 000000000..31e437b51
--- /dev/null
+++ b/scripts/ci/arity_allow.txt
@@ -0,0 +1,22 @@
+# Signatures that already exceeded check_arity.py's parameter limit when the
+# check was introduced. This is a debt list, not a blessing: new code must not
+# grow it, and an entry should be deleted the moment its signature is reworked
+# (group the related parameters into an object, or split the method).
+#
+# One "<repo-relative path>:<method or constructor name>" per line; the entry
+# covers every overload of that name in that file. Blank lines and '#' comments
+# are ignored.
+
+# A DNAT rule passed as eight positional values; wants a rule object.
+app/src/main/java/cn/classfun/droidvm/daemon/network/backend/FirewallHelper.java:applyDnat
+app/src/main/java/cn/classfun/droidvm/daemon/network/backend/FirewallHelper.java:removeDnat
+app/src/main/java/cn/classfun/droidvm/daemon/network/backend/iptables/IptablesBackend.java:applyDnat
+app/src/main/java/cn/classfun/droidvm/daemon/network/backend/iptables/IptablesBackend.java:removeDnat
+
+# Huge-page process rows: a data holder built positionally (10 and 12 wide).
+app/src/main/java/cn/classfun/droidvm/ui/hugepage/HugePageProcess.java:HugePageProcess
+app/src/main/java/cn/classfun/droidvm/ui/hugepage/HugePageProcessActivity.java:showResult
+app/src/main/java/cn/classfun/droidvm/ui/hugepage/SegmentedBar.java:setStorage
+
+# Import progress reported as ten loose counters.
+app/src/main/java/cn/classfun/droidvm/ui/vm/pkg/imports/VMPkgImportActivity.java:onProgress
diff --git a/scripts/ci/ascii_allow.txt b/scripts/ci/ascii_allow.txt
index 503a8e61a..6774fb8e4 100644
--- a/scripts/ci/ascii_allow.txt
+++ b/scripts/ci/ascii_allow.txt
@@ -13,6 +13,9 @@ app/src/main/res/values-*/strings.xml
 # Privacy policy, one file per language.
 app/src/main/assets/privacy/*.txt
 
+# In-app description pages: prose, with an en/zh-CN/zh-TW block per page.
+app/src/main/assets/descr/*.html
+
 # Localized data: repo-listing display names and language endonyms.
 app/src/main/assets/data/repo.yaml
 app/src/main/assets/data/languages.yaml
diff --git a/scripts/ci/check_arity.py b/scripts/ci/check_arity.py
new file mode 100755
index 000000000..0141a9bf4
--- /dev/null
+++ b/scripts/ci/check_arity.py
@@ -0,0 +1,192 @@
+#!/usr/bin/env python3
+"""Fail if a Java method or constructor declares too many parameters.
+
+A call site cannot pass more arguments than the signature declares, so the
+place to hold the line is the declaration -- and only there. Checking call
+sites too would flag every varargs helper (`fmt("%s %s ...", a, b, c, d, e)`,
+`runList("ip", "addr", "add", ...)`), where a long argument list is the point
+and the signature is still two parameters wide.
+
+The limit is 7, Checkstyle's ParameterNumber default. Past that, callers
+start passing arguments positionally by luck: bundle the related ones into a
+small object, or split the method.
+
+Two escape hatches:
+  - a trailing `// arity-ok` comment on the line the signature starts on, for a
+    deliberate exception in new code;
+  - scripts/ci/arity_allow.txt, one `path:name` per line, for signatures that
+    predate this check. That file is a debt list, not a blessing: new code must
+    not grow it, and an entry should disappear when its signature is reworked.
+
+Not a full parser: it masks comments and string/char literals, then reads the
+`name(` sites whose text before them looks like `<type-or-modifier> name` and
+whose text after them starts a body (`{`, `;`, or `throws ...`). Generic
+parameter types (`Map<String, Integer>`) are counted as one parameter.
+
+Exit status is 0 when clean, 1 when any violation is found. Run from the repo
+root, or pass the repo root as argv[1].
+"""
+import os
+import re
+import subprocess
+import sys
+
+LIMIT = 7
+SUPPRESS = "arity-ok"
+ALLOWLIST = "scripts/ci/arity_allow.txt"
+SOURCES = "app/src"
+
+# Control-flow keywords that also read as `name(`.
+KEYWORDS = {"if", "for", "while", "switch", "catch", "synchronized", "return",
+            "assert", "do", "else", "try", "case", "new", "throw", "yield",
+            "instanceof"}
+# Words that can precede `name(` and still leave it an expression, not a signature.
+NOT_A_TYPE = {"new", "return", "throw", "else", "instanceof", "case", "assert", "yield"}
+DECL_BEFORE = re.compile(r"[\w>\]]\s+$")
+# A constructor with no modifier has no type before it, only the end of the
+# previous member -- recognised by the capitalised name in member position.
+CTOR_BEFORE = re.compile(r"[{};]\s+$")
+LAST_WORD = re.compile(r"(\w+)\s+$")
+TAIL_IS_BODY = re.compile(r"\s*(throws [\w.,\s]+)?[{;]")
+CALL_SITE = re.compile(r"\b([A-Za-z_$][\w$]*)\s*\(")
+
+
+def mask(src):
+    """Blank out comments and string/char literals, keeping every offset and
+    newline in place so line numbers and slices stay true to the original."""
+    out = list(src)
+    i, n = 0, len(src)
+    while i < n:
+        two = src[i:i + 2]
+        if two == "//":
+            j = src.find("\n", i)
+            j = n if j < 0 else j
+            for k in range(i, j):
+                out[k] = " "
+            i = j
+        elif two == "/*":
+            j = src.find("*/", i + 2)
+            j = n if j < 0 else j + 2
+            for k in range(i, min(j, n)):
+                if src[k] != "\n":
+                    out[k] = " "
+            i = j
+        elif src[i] in "\"'":
+            quote, j = src[i], i + 1
+            while j < n:
+                if src[j] == "\\":
+                    j += 2
+                    continue
+                if src[j] == quote:
+                    j += 1
+                    break
+                j += 1
+            for k in range(i, min(j, n)):
+                out[k] = " "
+            i = j
+        else:
+            i += 1
+    return "".join(out)
+
+
+def count_params(text):
+    """Top-level commas + 1. Nested (), [], {} and generics all shield commas."""
+    if not text.strip():
+        return 0
+    count, depth = 1, 0
+    for ch in text:
+        if ch in "([{<":
+            depth += 1
+        elif ch in ")]}>":
+            depth = max(0, depth - 1)
+        elif ch == "," and depth == 0:
+            count += 1
+    return count
+
+
+def declarations(src):
+    """Yield (line, name, param_count) for every method/constructor signature."""
+    masked = mask(src)
+    for m in CALL_SITE.finditer(masked):
+        name = m.group(1)
+        if name in KEYWORDS:
+            continue
+        before = masked[:m.start()]
+        if not DECL_BEFORE.search(before):
+            if not (name[:1].isupper() and CTOR_BEFORE.search(before)):
+                continue
+        word = LAST_WORD.search(before)
+        if word and word.group(1) in NOT_A_TYPE:
+            continue
+        start = m.end() - 1
+        depth, i = 0, start
+        while i < len(masked):
+            if masked[i] == "(":
+                depth += 1
+            elif masked[i] == ")":
+                depth -= 1
+                if depth == 0:
+                    break
+            i += 1
+        else:
+            continue
+        if not TAIL_IS_BODY.match(masked[i + 1:i + 120]):
+            continue
+        yield masked.count("\n", 0, m.start()) + 1, name, count_params(masked[start + 1:i])
+
+
+def load_allowlist(root):
+    path = os.path.join(root, ALLOWLIST)
+    allowed = set()
+    if not os.path.exists(path):
+        return allowed
+    with open(path, encoding="utf-8") as f:
+        for line in f:
+            line = line.split("#", 1)[0].strip()
+            if line:
+                allowed.add(line)
+    return allowed
+
+
+def java_files(root):
+    out = subprocess.run(
+        ["git", "-C", root, "ls-files", SOURCES],
+        capture_output=True, text=True, check=True).stdout
+    return [line for line in out.splitlines() if line.endswith(".java")]
+
+
+def check(root):
+    allowed = load_allowlist(root)
+    problems = []
+    for rel in java_files(root):
+        with open(os.path.join(root, rel), encoding="utf-8") as f:
+            src = f.read()
+        lines = src.split("\n")
+        for line, name, count in declarations(src):
+            if count <= LIMIT:
+                continue
+            if SUPPRESS in lines[line - 1]:
+                continue
+            if "%s:%s" % (rel, name) in allowed:
+                continue
+            problems.append((rel, line, name, count))
+    return problems
+
+
+def main(argv):
+    root = argv[1] if len(argv) > 1 else "."
+    problems = check(root)
+    for rel, line, name, count in problems:
+        print("%s:%d: %s() declares %d parameters (limit %d)"
+              % (rel, line, name, count, LIMIT))
+    if problems:
+        print("\nFAIL: %d signature(s) over the parameter limit." % len(problems))
+        print("Group the related parameters into an object, or split the method.")
+        print("For a deliberate exception, add a trailing '// arity-ok' comment.")
+        return 1
+    print("OK: no signature declares more than %d parameters." % LIMIT)
+    return 0
+
+
+if __name__ == "__main__":
+    sys.exit(main(sys.argv))
diff --git a/scripts/ci/check_string_concat.py b/scripts/ci/check_string_concat.py
index e6354feef..9e95bd619 100644
--- a/scripts/ci/check_string_concat.py
+++ b/scripts/ci/check_string_concat.py
@@ -5,6 +5,9 @@
 a runtime expression (`"x=" + v`, `v + " done"`), which reads better as
 `fmt("x=%s", v)`. Deliberately NOT flagged:
   - `+` inside a string literal ("wlan+", "%s+", "\\s+") -- masked out first;
+  - char literals: `(char) ('a' + i)` is integer arithmetic, not string building,
+    so a char literal is masked to its own sentinel and never counts as "the
+    string side" of a `+`;
   - literal + literal ("a" + "b") -- a compile-time constant, fmt adds nothing;
   - `++` and numeric `+` with no string operand;
   - a `+=` append with a SINGLE `+` (`s += "x" + y`) -- appending one piece to
@@ -32,11 +35,14 @@
 
 
 def mask(src):
-    """Replace comments with spaces and each string/char literal with one STR
-    sentinel (\x01), preserving newlines so line numbers stay accurate."""
+    """Replace comments with spaces, each string literal with one STR sentinel
+    (\x01) and each char literal with a CHR sentinel (\x02), preserving newlines
+    so line numbers stay accurate. The two differ because only a string literal
+    makes a `+` string building: `'a' + i` is arithmetic on code points."""
     out = []
     i, n = 0, len(src)
     STR = "\x01"
+    CHR = "\x02"
     while i < n:
         c = src[i]
         two = src[i:i + 2]
@@ -60,7 +66,7 @@ def mask(src):
                     j += 1
                     break
                 j += 1
-            out.append(STR)
+            out.append(STR if c == '"' else CHR)
             i = j
         else:
             out.append(c)
@@ -68,11 +74,12 @@ def mask(src):
     return "".join(out)
 
 
-# Significant tokens: a string literal (\x01), '+=' (marks an append statement),
-# a value (identifier / number / closing bracket = end of a sub-expression), a
-# '+', or a statement boundary (; { }) that scopes the '+=' exemption.
+# Significant tokens: a string literal (\x01), a char literal (\x02, a value like
+# any other), '+=' (marks an append statement), a value (identifier / number /
+# closing bracket = end of a sub-expression), a '+', or a statement boundary
+# (; { }) that scopes the '+=' exemption.
 TOKEN = re.compile(r"""
-      \x01                                   # string literal
+      \x01 | \x02                            # string literal / char literal
     | \+\+ | \+=                             # compound operators (+= = append)
     | \+                                     # the concatenation operator
     | [A-Za-z_$][A-Za-z0-9_$]* | [0-9][\w.]* # identifier / number
diff --git a/scripts/ci/check_vector_icons.py b/scripts/ci/check_vector_icons.py
new file mode 100755
index 000000000..b0a58bbb0
--- /dev/null
+++ b/scripts/ci/check_vector_icons.py
@@ -0,0 +1,73 @@
+#!/usr/bin/env python3
+"""Fail if an icon ships as a bitmap instead of a vector drawable.
+
+Every icon the app draws must be an XML vector: it stays sharp at any density,
+tints from the theme (`?attr/colorOnSurface`), and costs one small file instead
+of five PNG buckets. So `res/drawable*` may hold XML only -- vectors, shapes,
+selectors, layer-lists -- and no XML in there may wrap a raster through
+`<bitmap>` either, which would smuggle one in the back door.
+
+The one exception is the launcher icon: Android still hands `res/mipmap-*` to
+legacy launchers as a bitmap, and the adaptive-icon foreground/background are
+generated with it. So `mipmap-*` may carry raster files, but only ones named
+`ic_launcher*`; anything else belongs in `drawable/` as a vector.
+
+Scope is the git index (`git ls-files`), so build outputs never count. Exit
+status is 0 when clean, 1 when any violation is found.
+
+Usage: run from the repo root, or pass the repo root as argv[1].
+"""
+import os
+import re
+import subprocess
+import sys
+
+RES = "app/src/main/res"
+RASTER_EXT = {".png", ".webp", ".jpg", ".jpeg", ".gif", ".bmp", ".9.png"}
+LAUNCHER_PREFIX = "ic_launcher"
+# <bitmap src="@drawable/foo"> and friends: an XML wrapper around a raster.
+BITMAP_TAG = re.compile(r"<\s*bitmap\b")
+
+
+def tracked_files(root):
+    out = subprocess.run(
+        ["git", "-C", root, "ls-files", RES],
+        capture_output=True, text=True, check=True).stdout
+    return [line for line in out.splitlines() if line.strip()]
+
+
+def check(root):
+    problems = []
+    for rel in tracked_files(root):
+        parts = rel.split("/")
+        if len(parts) < 2:
+            continue
+        folder, name = parts[-2], parts[-1]
+        ext = os.path.splitext(name)[1].lower()
+        if folder.startswith("drawable"):
+            if ext != ".xml":
+                problems.append((rel, "raster in drawable/; ship an XML vector"))
+                continue
+            with open(os.path.join(root, rel), encoding="utf-8", errors="replace") as f:
+                if BITMAP_TAG.search(f.read()):
+                    problems.append((rel, "<bitmap> wraps a raster; ship an XML vector"))
+        elif folder.startswith("mipmap"):
+            if ext in RASTER_EXT and not name.startswith(LAUNCHER_PREFIX):
+                problems.append((rel, "only ic_launcher* may be a raster in mipmap/"))
+    return problems
+
+
+def main(argv):
+    root = argv[1] if len(argv) > 1 else "."
+    problems = check(root)
+    for rel, why in problems:
+        print("%s: %s" % (rel, why))
+    if problems:
+        print("\nFAIL: %d non-vector icon(s)." % len(problems))
+        return 1
+    print("OK: every icon is a vector drawable.")
+    return 0
+
+
+if __name__ == "__main__":
+    sys.exit(main(sys.argv))

From 2c42bcbc152e3804bd6fa03241cf10b38394adef Mon Sep 17 00:00:00 2001
From: HuJK <gh@hujk.org>
Date: Sun, 30 Aug 2026 13:37:09 +0800
Subject: [PATCH 128/182] display: one framework behind the VNC and native
 screens

The two display screens had grown the same features twice and disagreed about
half of them. A DisplaySource interface now names what a screen consumes (a
Surface for the native path, a bitmap for VNC), and the viewport and chrome
controllers hold the parts that were duplicated: the fit/zoom/pan arithmetic,
the toolbar and its auto-hide, the resolution-follow that resizes the guest to
the window it is being shown in.

Input is routed once. Pointer motion is coalesced before it reaches the guest,
gestures are translated in one place with an explicit mode (touch, mouse,
tablet) instead of each screen guessing, and the keyboard grew what a keyboard
needs: real key holds rather than tap-to-toggle, a laptop layout, a physical
keyboard view, and an extra-keys row that fits on a phone. Scan codes are
generated from one table -- the letters used to be wrong, so typing produced
different characters than the key that was pressed.

Two failure modes are fixed here because they belong to the framework rather
than to either screen. The binder wait for the display root service could leak
threads and retried without a cap, so a VM that had already stopped left the
app spinning; it now waits once and gives up with the VM. And a crosvm that
restarts under a live display used to leave the surfaces pointing at a dead
process -- the reconnect rebuilds them.

Co-authored-by: lateautumn233 <lateautumn233@foxmail.com>
---
 .../daemon/display/NativeDisplayBinder.java   |  73 +-
 .../vm/backend/CrosvmBackendInstance.java     |  30 +-
 .../droidvm/lib/perf/SystemGestureGuard.java  |  94 ++
 .../droidvm/lib/store/vm/NativeDisplay.java   |  10 +-
 .../classfun/droidvm/lib/ui/MaterialMenu.java |  23 +
 .../vm/display/base/BaseExtraKeysAdapter.java |  24 +-
 .../vm/display/base/DaemonDisplayAttach.java  | 147 +++
 .../display/base/DisplayChromeController.java | 153 +++
 .../display/base/DisplayExtraKeysPanel.java   | 316 +++---
 .../vm/display/base/DisplayInputBackend.java  |  36 +
 .../display/base/DisplayKeyboardMenuRow.java  |  61 ++
 .../base/DisplayPhysicalKeyboardView.java     | 330 ++++++
 .../ui/vm/display/base/DisplaySource.java     |  68 ++
 .../base/DisplayViewportController.java       | 262 +++++
 .../ui/vm/display/base/HoldKeyGroup.java      | 142 +++
 .../droidvm/ui/vm/display/base/InputMode.java |  51 +
 .../ui/vm/display/base/KeyListener.java       |  16 +-
 .../ui/vm/display/base/KeyboardMode.java      |  48 +
 .../base/PointerGestureTranslator.java        | 467 +++++++++
 .../vm/display/base/ViewHeightAnimator.java   |  97 ++
 .../droidvm/ui/vm/display/base/X11Keymap.java |   7 +-
 .../display/CursorPositionStream.java         | 137 +++
 .../display/DisplayProvider.java              | 293 +++++-
 .../display/NativeSurfaceSource.java          |  74 ++
 .../display/VMNativeDisplayActivity.java      | 857 +++++++++++++---
 .../nativedisplay/input/EvdevEncoder.java     | 146 +++
 .../nativedisplay/input/InputForwarder.java   | 312 +++++-
 .../nativedisplay/input/KeyCodeMapper.java    |  66 ++
 .../input/NativeExtraKeysPanel.java           |  26 +-
 .../input/TouchScaleCalculator.java           |  22 +-
 .../vm/display/vnc/base/BaseVncActivity.java  |  40 +-
 .../vnc/display/VMVncDisplayActivity.java     | 963 +++++++++---------
 .../display/vnc/display/VncBitmapSource.java  |  51 +
 .../display/vnc/input/VncExtraKeysPanel.java  |  39 +-
 app/src/main/res/drawable/extra_key_bg.xml    |   8 +
 .../main/res/drawable/ic_key_backspace.xml    |  10 +
 app/src/main/res/drawable/ic_key_enter.xml    |  10 +
 app/src/main/res/drawable/ic_key_keyboard.xml |  13 +
 app/src/main/res/drawable/ic_key_shift.xml    |  10 +
 app/src/main/res/drawable/ic_key_space.xml    |  10 +
 app/src/main/res/drawable/ic_key_tab.xml      |  10 +
 app/src/main/res/drawable/ic_key_windows.xml  |  10 +
 .../main/res/drawable/ic_keyboard_close.xml   |  10 +
 app/src/main/res/drawable/ic_keyboard_phy.xml |   9 +
 .../main/res/drawable/ic_tablet_stylus.xml    |  21 +
 app/src/main/res/drawable/ic_touchscreen.xml  |  21 +
 .../res/layout/activity_vm_native_display.xml |  32 +-
 .../res/layout/activity_vm_vnc_display.xml    |   7 +
 .../res/layout/view_input_mode_toggle.xml     |  56 +
 .../res/layout/view_keyboard_mode_toggle.xml  |  57 ++
 .../res/layout/widget_display_extra_keys.xml  | 301 +++---
 .../res/menu/menu_native_display_menu.xml     |  15 +-
 .../main/res/menu/menu_vnc_display_menu.xml   |  15 -
 app/src/main/res/values-zh-rCN/strings.xml    |   9 +
 app/src/main/res/values-zh-rTW/strings.xml    |   9 +
 app/src/main/res/values/colors.xml            |   2 +
 app/src/main/res/values/ids.xml               |   5 +
 app/src/main/res/values/strings.xml           |  23 +-
 app/src/main/res/values/themes.xml            |  14 +-
 .../base/DisplayChromeControllerTest.java     | 211 ++++
 .../base/DisplayViewportControllerTest.java   | 238 +++++
 61 files changed, 5463 insertions(+), 1154 deletions(-)
 create mode 100644 app/src/main/java/cn/classfun/droidvm/lib/perf/SystemGestureGuard.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/ui/vm/display/base/DaemonDisplayAttach.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/ui/vm/display/base/DisplayChromeController.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/ui/vm/display/base/DisplayInputBackend.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/ui/vm/display/base/DisplayKeyboardMenuRow.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/ui/vm/display/base/DisplayPhysicalKeyboardView.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/ui/vm/display/base/DisplaySource.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/ui/vm/display/base/DisplayViewportController.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/ui/vm/display/base/HoldKeyGroup.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/ui/vm/display/base/InputMode.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/ui/vm/display/base/KeyboardMode.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/ui/vm/display/base/PointerGestureTranslator.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/ui/vm/display/base/ViewHeightAnimator.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/ui/vm/display/nativedisplay/display/CursorPositionStream.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/ui/vm/display/nativedisplay/display/NativeSurfaceSource.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/ui/vm/display/vnc/display/VncBitmapSource.java
 create mode 100644 app/src/main/res/drawable/extra_key_bg.xml
 create mode 100644 app/src/main/res/drawable/ic_key_backspace.xml
 create mode 100644 app/src/main/res/drawable/ic_key_enter.xml
 create mode 100644 app/src/main/res/drawable/ic_key_keyboard.xml
 create mode 100644 app/src/main/res/drawable/ic_key_shift.xml
 create mode 100644 app/src/main/res/drawable/ic_key_space.xml
 create mode 100644 app/src/main/res/drawable/ic_key_tab.xml
 create mode 100644 app/src/main/res/drawable/ic_key_windows.xml
 create mode 100644 app/src/main/res/drawable/ic_keyboard_close.xml
 create mode 100644 app/src/main/res/drawable/ic_keyboard_phy.xml
 create mode 100644 app/src/main/res/drawable/ic_tablet_stylus.xml
 create mode 100644 app/src/main/res/drawable/ic_touchscreen.xml
 create mode 100644 app/src/main/res/layout/view_input_mode_toggle.xml
 create mode 100644 app/src/main/res/layout/view_keyboard_mode_toggle.xml
 create mode 100644 app/src/main/res/values/ids.xml
 create mode 100644 app/src/test/java/cn/classfun/droidvm/ui/vm/display/base/DisplayChromeControllerTest.java
 create mode 100644 app/src/test/java/cn/classfun/droidvm/ui/vm/display/base/DisplayViewportControllerTest.java

diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/display/NativeDisplayBinder.java b/app/src/main/java/cn/classfun/droidvm/daemon/display/NativeDisplayBinder.java
index 65056c6c1..25b54b144 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/display/NativeDisplayBinder.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/display/NativeDisplayBinder.java
@@ -18,6 +18,7 @@
 import cn.classfun.droidvm.daemon.server.ServerContext;
 import cn.classfun.droidvm.display.INativeDisplayRootService;
 import cn.classfun.droidvm.lib.store.vm.NativeDisplay;
+import cn.classfun.droidvm.lib.store.vm.VMState;
 
 /**
  * Daemon-hosted native-display broker. The daemon already runs as root, so it does both jobs the
@@ -36,6 +37,10 @@
 public final class NativeDisplayBinder {
     private static final String TAG = "NativeDisplayBinder";
 
+    /** How long one lookup keeps looking, and how often it looks. */
+    private static final long WAIT_TOTAL_MS = 5000;
+    private static final long WAIT_POLL_MS = 200;
+
     private static INativeDisplayRootService.Stub binder;
 
     private NativeDisplayBinder() {
@@ -54,7 +59,7 @@ private static INativeDisplayRootService.Stub createBinder(@NonNull ServerContex
         return new INativeDisplayRootService.Stub() {
             @Override
             public IBinder waitForDisplayBinder(String serviceName) {
-                return doWaitForDisplayBinder(serviceName);
+                return doWaitForDisplayBinder(ctx, serviceName);
             }
 
             @Override
@@ -96,32 +101,62 @@ private static IBinder smCall(@NonNull String method, @NonNull String name) {
         }
     }
 
-    private static IBinder waitForServiceWithTimeout(@NonNull String name, long timeoutMs) {
-        var holder = new IBinder[1];
-        var t = new Thread(() -> holder[0] = smCall("waitForService", name), fmt("WaitSvc-%s", name));
-        t.setDaemon(true);
-        t.start();
-        try {
-            t.join(timeoutMs);
-        } catch (InterruptedException ignored) {
+    /**
+     * Look for [name] until it turns up or [WAIT_TOTAL_MS] passes.
+     *
+     * Polls {@code checkService} rather than calling {@code waitForService}, which blocks until
+     * the service appears and cannot be cancelled. A caller-side timeout around it does not stop
+     * it: the thread carrying it stays blocked for the life of the process, and while it waits,
+     * servicemanager's client logs a line a second, from every thread. For a VM that has stopped
+     * -- the display console left open after the VM exits, retrying -- the service never appears
+     * at all, so every attempt leaked another permanently-waiting, permanently-logging thread.
+     * Measured: 315884 log lines and 77 MB of daemon.log in four minutes, ending with the daemon
+     * dying and taking a different, running VM's crosvm down with it.
+     */
+    private static IBinder pollForService(@NonNull String name) {
+        long deadline = System.nanoTime() + WAIT_TOTAL_MS * 1_000_000L;
+        while (System.nanoTime() < deadline) {
+            try {
+                Thread.sleep(WAIT_POLL_MS);
+            } catch (InterruptedException e) {
+                Thread.currentThread().interrupt();
+                return null;
+            }
+            var binder = smCall("checkService", name);
+            if (binder != null) return binder;
         }
-        return holder[0];
+        return null;
     }
 
-    private static IBinder doWaitForDisplayBinder(@NonNull String serviceName) {
-        Log.i(TAG, fmt("waitForDisplayBinder('%s')", serviceName));
+    /**
+     * Whether the VM behind [serviceName] is in a state where crosvm could still register it.
+     *
+     * A stopped VM will never register, so waiting for it is time the caller spends learning
+     * nothing -- and the caller is a console that retries. Unknown names are not ours to judge,
+     * so they wait as before.
+     */
+    private static boolean vmCouldRegister(@NonNull ServerContext ctx, @NonNull String serviceName) {
+        if (inst == null) return true;
+        var state = inst.getState();
+        return state == VMState.RUNNING || state == VMState.STARTING || state == VMState.REBOOTING;
+    }
+
+    private static IBinder doWaitForDisplayBinder(@NonNull ServerContext ctx,
+                                                  @NonNull String serviceName) {
         var direct = smCall("checkService", serviceName);
-        if (direct != null) {
-            Log.i(TAG, "OK: got display binder directly from ServiceManager");
-            return direct;
+        if (direct != null) return direct;
+        if (!vmCouldRegister(ctx, serviceName)) {
+            Log.i(TAG, fmt("'%s': VM not running, nothing to wait for", serviceName));
+            return null;
         }
-        Log.i(TAG, "Not found, waiting up to 5s...");
-        var waited = waitForServiceWithTimeout(serviceName, 5000L);
+        Log.i(TAG, fmt("waitForDisplayBinder('%s'): not registered yet, looking for %d ms",
+            serviceName, WAIT_TOTAL_MS));
+        var waited = pollForService(serviceName);
         if (waited != null) {
-            Log.i(TAG, "OK: got display binder via waitForService");
+            Log.i(TAG, "OK: got display binder");
             return waited;
         }
-        Log.e(TAG, fmt("'%s' not found - is crosvm running with "
+        Log.w(TAG, fmt("'%s' not found - is crosvm running with "
             + "--android-display-service %s?", serviceName, serviceName));
         return null;
     }
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/CrosvmBackendInstance.java b/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/CrosvmBackendInstance.java
index 6f62a1819..7312bd6c3 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/CrosvmBackendInstance.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/CrosvmBackendInstance.java
@@ -105,9 +105,11 @@ public VMStartResult start() {
         // the VM is up - so the daemon is the only process that can both bind the socket before
         // crosvm starts and stay alive to feed it. We pre-bind + accept here; the UI forwards evdev
         // to us via the vm_input IPC command (see InputHandler). Server fds released on cleanup().
-        if (isNativeDisplayEnabled()) {
             if (!inputBridge.startListening(NativeDisplay.serviceName(config))) {
-                Log.e(TAG, "Native display input sockets unavailable; crosvm will likely fail");
+        // Single source of truth: isInputBridgeNeeded() gates both this pre-bind and the --input
+        if (isInputBridgeNeeded()) {
+                    Log.e(TAG, "Display input sockets unavailable; crosvm will likely fail");
+                }
             }
         }
         var args = buildCommand();
@@ -228,6 +230,12 @@ private List<String> buildCommand() {
         buildSharedDirCommand(args);
         buildGpuCommand(args);
         buildVncCommand(args);
+        // The evdev --input devices ride along whenever any app display path is active: the native
+        // display routes everything through them; the VNC display routes its MOUSE (relative) and
+        // TOUCH (multi-touch) modes here while the tablet pointer + keyboard stay on RFB.
+        if (isInputBridgeNeeded()) {
+            buildInputDevicesCommand(args);
+        }
         buildSerialCommand(args);
         item.opt("extra_options", DataItem.newArray())
             .forEach(arg -> args.add(arg.getValue().asString()));
@@ -387,6 +395,7 @@ private void buildGpuCommand(@NonNull List<String> args) {
         // socket pre-bind in start(), so the two must never diverge.
         if (isNativeDisplayEnabled()) {
             buildNativeDisplayCommand(args);
+                    args.add("--android-display-service");
         }
     }
 
@@ -395,8 +404,6 @@ private void buildNativeDisplayCommand(@NonNull List<String> args) {
         var serviceName = NativeDisplay.serviceName(config);
         var width = item.optLong("display_width", 1280);
         var height = item.optLong("display_height", 720);
-        args.add("--android-display-service");
-        args.add(serviceName);
         // multi-touch ABS range must equal the guest resolution so view coords scale straight onto
         // ABS_X/ABS_Y (see EvdevEncoder / TouchScaleCalculator).
         args.add("--input");
@@ -404,11 +411,19 @@ private void buildNativeDisplayCommand(@NonNull List<String> args) {
             "multi-touch[path=%s,width=%d,height=%d]",
             NativeDisplay.inputSocketPath(serviceName, NativeDisplay.MULTITOUCH), width, height
         ));
+    private void buildInputDevicesCommand(@NonNull List<String> args) {
+        // Relative-pointer mouse (REL_X/Y + buttons + wheel) for InputMode.MOUSE; the guest renders
+        // the cursor, which is what relative-motion consumers (FPS games) need.
         args.add("--input");
         args.add(fmt(
             "keyboard[path=%s]",
             NativeDisplay.inputSocketPath(serviceName, NativeDisplay.KEYBOARD)
+            "mouse[path=%s]",
         ));
+            ));
+            args.add("--input");
+            args.add(fmt(
+            ));
     }
 
     /** True iff the per-VM crosvm command will reference native-display input sockets. */
@@ -424,6 +439,13 @@ private boolean isNativeDisplayEnabled() {
     private void buildVncCommand(@NonNull List<String> args) {
         var item = config.item;
         if (!item.optBoolean("vnc_enabled", false)) return;
+    /**
+     * The evdev input bridge (and matching --input devices) is needed by both app display paths:
+     * native uses it for every input; the VNC display uses it for MOUSE/TOUCH modes (tablet
+     */
+    private boolean isInputBridgeNeeded() {
+    }
+
         var vncArg = new StringBuilder();
         var host = item.optString("vnc_host", "");
         if (!host.isEmpty()) {
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/perf/SystemGestureGuard.java b/app/src/main/java/cn/classfun/droidvm/lib/perf/SystemGestureGuard.java
new file mode 100644
index 000000000..52db9bceb
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/lib/perf/SystemGestureGuard.java
@@ -0,0 +1,94 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
+package cn.classfun.droidvm.lib.perf;
+
+import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
+
+import android.util.Log;
+
+import androidx.annotation.NonNull;
+
+import java.util.ArrayList;
+import java.util.List;
+import java.util.concurrent.ExecutorService;
+import java.util.concurrent.Executors;
+
+import cn.classfun.droidvm.lib.run.RunContext;
+import cn.classfun.droidvm.lib.run.RunResult;
+import cn.classfun.droidvm.lib.run.root.RootRunContext;
+
+/**
+ * Suppresses OEM full-screen touch gestures while a VM display is in the foreground, so
+ * multi-finger input reaches the guest instead of the host system.
+ *
+ * <p>Why this exists: ColorOS/OxygenOS intercepts three-finger touches globally -- swipe-down
+ * takes a screenshot, touch-and-hold starts a partial screenshot -- and unlike the navigation
+ * back gesture there is NO public per-app opt-out ({@code setSystemGestureExclusionRects} only
+ * covers screen-edge gestures, and the game-mode declaration in {@link GamePerfHint} does not
+ * suppress it either). A guest desktop, however, has its own three-finger gestures (pinch zoom,
+ * workspace switch), which the host eats before the guest ever sees a pointer event.
+ *
+ * <p>So: while (and only while) the native display is foreground, the OEM toggles below are
+ * turned off through the root shell, and restored to their previous values on exit. On devices
+ * without these keys (`settings get` prints "null") this is a no-op, so calling it
+ * unconditionally on every device is safe.
+ *
+ * <p>If the app process dies while the display is up, the exit path never runs and the user's
+ * gesture setting stays off until the next display session restores it on entry -- an accepted
+ * trade-off for not persisting state; the keys are re-read (not assumed) on every enter.
+ */
+public final class SystemGestureGuard {
+    private static final String TAG = "SystemGestureGuard";
+
+    /** OEM gesture toggles (system namespace) that swallow multi-finger touches. */
+    private static final String[] KEYS = {
+        // ColorOS/OxygenOS "smart apperceive" screenshot: three-finger swipe & touch-and-hold.
+        "oplus_customize_smart_apperceive_screen_capture",
+        // Three-finger sideways swipe to switch apps.
+        "oplus_customize_three_fingers_switch_app",
+    };
+
+    /** Serializes enter/exit so a fast pause/resume cannot interleave get and put. */
+    private static final ExecutorService executor = Executors.newSingleThreadExecutor();
+
+    /** Keys that were "1" on enter and must go back to "1" on exit. */
+    private static final List<String> suppressed = new ArrayList<>();
+
+    private SystemGestureGuard() {
+    }
+
+    /** Turns the OEM gestures off; call when the VM display becomes foreground. */
+    public static void enterDisplay() {
+        executor.execute(() -> {
+            RunContext shell = RootRunContext.getContext();
+            synchronized (suppressed) {
+                // A re-enter without exit (activity recreation) must not re-read "0" as the
+                // value to restore, so the restore list only grows from a clean slate.
+                if (!suppressed.isEmpty()) return;
+                for (String key : KEYS) {
+                    RunResult get = shell.runQuiet(fmt("settings get system %s", key));
+                    if (!get.isSuccess() || !"1".equals(get.getOutString())) continue;
+                    if (shell.runQuiet(fmt("settings put system %s 0", key)).isSuccess()) {
+                        suppressed.add(key);
+                        Log.i(TAG, fmt("suppressed host gesture: %s", key));
+                    }
+                }
+            }
+        });
+    }
+
+    /** Restores whatever {@link #enterDisplay} turned off; call when the display leaves. */
+    public static void exitDisplay() {
+        executor.execute(() -> {
+            RunContext shell = RootRunContext.getContext();
+            synchronized (suppressed) {
+                for (String key : suppressed) {
+                    shell.runQuiet(fmt("settings put system %s 1", key));
+                    Log.i(TAG, fmt("restored host gesture: %s", key));
+                }
+                suppressed.clear();
+            }
+        });
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/store/vm/NativeDisplay.java b/app/src/main/java/cn/classfun/droidvm/lib/store/vm/NativeDisplay.java
index 4e211b600..04be7e303 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/store/vm/NativeDisplay.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/store/vm/NativeDisplay.java
@@ -19,10 +19,15 @@
  * registers (--android-display-service) and the VM's input-socket set.
  */
 public final class NativeDisplay {
-    /** Input channels (MVP: multi-touch + keyboard). */
+    /**
+     * Input channels. Each maps to one crosvm {@code --input <kind>} virtio-input device and one
+     * channel ids shared with the daemon's InputHandler; append new channels, never renumber.
+     */
     public static final int MULTITOUCH = 0;
     public static final int KEYBOARD = 1;
-    public static final int CHANNEL_COUNT = 2;
+    public static final int MOUSE = 2;
+    public static final int TABLET = 3;
+    public static final int CHANNEL_COUNT = 4;
 
     /**
      * Broadcast the daemon (running as root) sends to hand its INativeDisplayRootService binder to
@@ -38,7 +43,6 @@ public final class NativeDisplay {
     /** Per-attach random token; the UI only accepts a broadcast carrying the nonce it requested. */
     public static final String EXTRA_NONCE = "nonce";
 
-    private static final String[] KINDS = {"multitouch", "keyboard"};
     private static final String RUN_PATH = pathJoin(DATA_DIR, "run");
 
     private NativeDisplay() {
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/ui/MaterialMenu.java b/app/src/main/java/cn/classfun/droidvm/lib/ui/MaterialMenu.java
index c3b32e6fc..fc4e6e1bf 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/ui/MaterialMenu.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/ui/MaterialMenu.java
@@ -42,6 +42,7 @@ public final class MaterialMenu {
     private final ListPopupWindow popup;
     private MenuItem.OnMenuItemClickListener listener;
     private int gravity = Gravity.NO_GRAVITY;
+    private View headerView;
 
     public MaterialMenu(@NonNull Context context, @NonNull View anchor) {
         this.context = context;
@@ -74,6 +75,19 @@ public void setOnMenuItemClickListener(
         this.listener = listener;
     }
 
+    /**
+     * Custom view rendered above the menu list inside the popup (ListPopupWindow prompt view) -
+     * e.g. a segmented input-mode selector. Set before {@link #show()}.
+     */
+    public void setHeaderView(@Nullable View header) {
+        this.headerView = header;
+    }
+
+    /** Closes the popup; header-view controls use this after handling a selection. */
+    public void dismiss() {
+        popup.dismiss();
+    }
+
     @SuppressWarnings("unused")
     public void setGravity(int gravity) {
         this.gravity = gravity;
@@ -107,6 +121,15 @@ private int preparePopup() {
         var adapter = new MenuAdapter(context, items, hasIcons);
         popup.setAdapter(adapter);
         var size = measureContent(adapter);
+        if (headerView != null) {
+            // Rendered above the list; grow the popup to fit it.
+            int spec = View.MeasureSpec.makeMeasureSpec(0, View.MeasureSpec.UNSPECIFIED);
+            headerView.measure(spec, spec);
+            size.x = Math.max(size.x, headerView.getMeasuredWidth());
+            size.y += headerView.getMeasuredHeight();
+            popup.setPromptPosition(ListPopupWindow.POSITION_PROMPT_ABOVE);
+            popup.setPromptView(headerView);
+        }
         popup.setContentWidth(size.x);
         popup.setHeight(size.y);
         popup.setBackgroundDrawable(createMaterial3Background());
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/display/base/BaseExtraKeysAdapter.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/base/BaseExtraKeysAdapter.java
index 295d48b2f..8a742154e 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/display/base/BaseExtraKeysAdapter.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/base/BaseExtraKeysAdapter.java
@@ -21,6 +21,10 @@ public abstract class BaseExtraKeysAdapter implements KeyListener {
     protected final DisplayExtraKeysPanel panel;
 
     private boolean ctrlSticky, altSticky, shiftSticky, winSticky;
+    // Keys currently held via onKey(). One-shot modifiers wrap the whole hold group (applied on
+    // the first key down, released after the last key up) so simultaneous holds like W+A don't
+    // lose their modifiers halfway through.
+    private int heldKeys;
 
     protected BaseExtraKeysAdapter(@NonNull DisplayExtraKeysPanel panel) {
         this.panel = panel;
@@ -57,13 +61,19 @@ public void applyModifiers(boolean down) {
         }
     }
 
-    /** Taps a key with the active modifiers wrapped around it. */
-    protected void tapKey(int androidKeyCode) {
-        if (!isReady()) return;
-        applyModifiers(true);
-        emitKey(androidKeyCode, true);
-        emitKey(androidKeyCode, false);
-        applyModifiers(false);
+    @Override
+    public void onKey(int androidKeyCode, boolean down) {
+        if (!isReady()) {
+            heldKeys = 0;
+            return;
+        }
+        if (down) {
+            if (heldKeys++ == 0) applyModifiers(true);
+            emitKey(androidKeyCode, true);
+        } else {
+            emitKey(androidKeyCode, false);
+            if (heldKeys > 0 && --heldKeys == 0) applyModifiers(false);
+        }
     }
 
     @Override
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/display/base/DaemonDisplayAttach.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/base/DaemonDisplayAttach.java
new file mode 100644
index 000000000..2d347c85b
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/base/DaemonDisplayAttach.java
@@ -0,0 +1,147 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
+package cn.classfun.droidvm.ui.vm.display.base;
+
+import android.app.Activity;
+import android.content.BroadcastReceiver;
+import android.content.Context;
+import android.content.Intent;
+import android.content.IntentFilter;
+import android.os.Handler;
+import android.os.IBinder;
+import android.os.RemoteException;
+import android.util.Log;
+
+import androidx.annotation.NonNull;
+import androidx.annotation.Nullable;
+
+import java.util.UUID;
+
+import cn.classfun.droidvm.display.INativeDisplayRootService;
+import cn.classfun.droidvm.lib.store.vm.NativeDisplay;
+
+/**
+ * Acquires the daemon's broker binder ({@link INativeDisplayRootService}) for a display activity.
+ * The binder can't ride the JSON-RPC channel, so the flow is: send {@code display_attach} with a
+ * per-attach random nonce, and the daemon (uid=0) broadcasts the binder back; only the broadcast
+ * carrying our nonce is accepted, so another app spoofing the exported action can't slip us a
+ * fake broker. Retries while the daemon connection is still coming up. Shared by the native and
+ * VNC display activities, which use the binder for the direct evdev input sink (and the native
+ * path additionally for the per-VM display binder lookup).
+ */
+public final class DaemonDisplayAttach {
+    private static final String TAG = "DaemonDisplayAttach";
+    private static final int MAX_ATTEMPTS = 10;
+    private static final long RETRY_DELAY_MS = 500;
+
+    public interface Listener {
+        /** The broker binder arrived (fired once, on the main thread). */
+        void onAttached(@NonNull INativeDisplayRootService service);
+
+        /** The daemon died after attach; direct paths must fall back (main thread). */
+        void onLost();
+    }
+
+    private final Activity activity;
+    private final Handler mainHandler;
+    private final Listener listener;
+    private final String nonce = UUID.randomUUID().toString();
+    @Nullable
+    private INativeDisplayRootService service;
+    private boolean receiverRegistered;
+    private boolean attached;
+
+    private final BroadcastReceiver receiver = new BroadcastReceiver() {
+        @Override
+        public void onReceive(Context context, Intent intent) {
+            var bundle = intent.getBundleExtra(NativeDisplay.EXTRA_BUNDLE);
+            if (bundle == null || !nonce.equals(bundle.getString(NativeDisplay.EXTRA_NONCE))) {
+                return;
+            }
+            var binder = bundle.getBinder(NativeDisplay.EXTRA_BINDER);
+            if (binder != null) {
+                onBinderReceived(binder);
+            }
+        }
+    };
+
+    private final IBinder.DeathRecipient deathRecipient;
+
+    public DaemonDisplayAttach(@NonNull Activity activity, @NonNull Handler mainHandler,
+                               @NonNull Listener listener) {
+        this.activity = activity;
+        this.mainHandler = mainHandler;
+        this.listener = listener;
+        this.deathRecipient = () -> mainHandler.post(() -> {
+            Log.w(TAG, "daemon broker binder died");
+            service = null;
+            listener.onLost();
+        });
+    }
+
+    /** Registers the nonce-matched broadcast receiver and requests the broker binder. */
+    public void start() {
+        activity.registerReceiver(receiver,
+            new IntentFilter(NativeDisplay.BINDER_BROADCAST_ACTION), Context.RECEIVER_EXPORTED);
+        receiverRegistered = true;
+        request(MAX_ATTEMPTS);
+    }
+
+    /** The broker binder, or null before attach / after the daemon died. */
+    @Nullable
+    public INativeDisplayRootService getService() {
+        return service;
+    }
+
+    public void stop() {
+        if (receiverRegistered) {
+            try {
+                activity.unregisterReceiver(receiver);
+            } catch (Exception ignored) {
+            }
+            receiverRegistered = false;
+        }
+        if (service != null) {
+            try {
+                service.asBinder().unlinkToDeath(deathRecipient, 0);
+            } catch (Exception ignored) {
+            }
+        }
+        service = null;
+    }
+
+    private void request(int attemptsLeft) {
+        if (attached || activity.isFinishing()) {
+            return;
+        }
+        cn.classfun.droidvm.lib.daemon.DaemonConnection.getInstance().buildRequest("display_attach")
+            .put("nonce", nonce)
+            .onError(e -> retry(attemptsLeft))
+            .onUnsuccessful(r -> retry(attemptsLeft))
+            .invoke();
+    }
+
+    private void retry(int attemptsLeft) {
+        if (attemptsLeft <= 0) {
+            Log.w(TAG, "display_attach exhausted retries; daemon broker unavailable");
+            return;
+        }
+        mainHandler.postDelayed(() -> request(attemptsLeft - 1), RETRY_DELAY_MS);
+    }
+
+    private void onBinderReceived(@NonNull IBinder binder) {
+        if (attached) {
+            return; // ignore duplicate broadcasts
+        }
+        attached = true;
+        var svc = INativeDisplayRootService.Stub.asInterface(binder);
+        service = svc;
+        try {
+            binder.linkToDeath(deathRecipient, 0);
+        } catch (RemoteException e) {
+            Log.w(TAG, "linkToDeath failed", e);
+        }
+        listener.onAttached(svc);
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/display/base/DisplayChromeController.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/base/DisplayChromeController.java
new file mode 100644
index 000000000..46f3395c5
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/base/DisplayChromeController.java
@@ -0,0 +1,153 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
+package cn.classfun.droidvm.ui.vm.display.base;
+
+import androidx.annotation.NonNull;
+import androidx.annotation.Nullable;
+
+/**
+ * Single source of truth for the display chrome: toolbar / status bar / system bars, and which
+ * parts of the on-screen keyboard are up. Everything that used to flip view visibility directly
+ * (fullscreen toggle, menu items, keyboard buttons) mutates this state instead, and the one
+ * {@link Host#applyChrome} callback writes the whole set atomically - so the pieces can never
+ * drift apart.
+ *
+ * Rules:
+ * <ul>
+ *   <li>The keyboard mode picks the Main zone: nothing, the one-row companion to the system IME,
+ *       or the laptop keyboard.</li>
+ *   <li>The Extra zone is the point of the system-IME mode - the keys an IME cannot send - so
+ *       it is always up there; only the laptop mode, whose Main block already carries most of
+ *       them, lets it be toggled off. FNx is a toggle in both. Both keep their values through
+ *       {@link KeyboardMode#NONE}: hiding the keyboard is not the same as turning its zones
+ *       off.</li>
+ *   <li>Fullscreen hides toolbar + status bar + system bars + the whole keyboard. The state
+ *       before entering is remembered and restored on exit; changes made while fullscreen show
+ *       on top of it and are not persisted.</li>
+ *   <li>No auto-hide: bar visibility is a pure function of this state. Transient system bars
+ *       swiped in during fullscreen are the system's overlay and don't touch it.</li>
+ * </ul>
+ */
+public final class DisplayChromeController {
+    public interface Host {
+        /**
+         * Write the whole chrome set: toolbar/status bar/system bars shown iff
+         * {@code !fullscreen}; the keyboard's Main zone per {@code mode}; the Extra and FNx
+         * zones shown iff their flag is set and {@code mode} shows a keyboard at all. The host
+         * should re-request insets after applying so the display area updates in one pass.
+         */
+        void applyChrome(
+            boolean fullscreen,
+            @NonNull KeyboardMode mode,
+            boolean extraVisible,
+            boolean fnxVisible);
+    }
+
+    /** Persistence hook: fired after a (non-fullscreen) user action changes the state. */
+    public interface StateListener {
+        void onUserStateChanged(
+            @NonNull KeyboardMode mode, boolean extraVisible, boolean fnxVisible);
+    }
+
+    private final Host host;
+    @Nullable
+    private StateListener stateListener;
+    private boolean fullscreen;
+    private KeyboardMode mode;
+    private boolean extraVisible;
+    private boolean fnxVisible;
+    // Pre-fullscreen memory.
+    private KeyboardMode savedMode;
+    private boolean savedExtra, savedFnx;
+
+    public DisplayChromeController(
+        @NonNull KeyboardMode mode,
+        boolean extraVisible,
+        boolean fnxVisible,
+        @NonNull Host host
+    ) {
+        this.host = host;
+        this.mode = mode;
+        this.extraVisible = extraVisible;
+        this.fnxVisible = fnxVisible;
+    }
+
+    public void setStateListener(@Nullable StateListener listener) {
+        this.stateListener = listener;
+    }
+
+    /** Push the initial state to the host once its views are ready. */
+    public void applyInitial() {
+        apply();
+    }
+
+    public void toggleFullscreen() {
+        setFullscreen(!fullscreen);
+    }
+
+    public void setFullscreen(boolean enabled) {
+        if (fullscreen == enabled) {
+            return;
+        }
+        fullscreen = enabled;
+        if (enabled) {
+            savedMode = mode;
+            savedExtra = extraVisible;
+            savedFnx = fnxVisible;
+            mode = KeyboardMode.NONE;
+        } else {
+            mode = savedMode == null ? KeyboardMode.NONE : savedMode;
+            extraVisible = savedExtra;
+            fnxVisible = savedFnx;
+        }
+        apply();
+    }
+
+    public void setKeyboardMode(@NonNull KeyboardMode newMode) {
+        if (mode == newMode) return;
+        mode = newMode;
+        notifyState();
+        apply();
+    }
+
+    public void toggleExtraZone() {
+        extraVisible = !extraVisible;
+        notifyState();
+        apply();
+    }
+
+    public void toggleFnxZone() {
+        fnxVisible = !fnxVisible;
+        notifyState();
+        apply();
+    }
+
+    public boolean isFullscreen() {
+        return fullscreen;
+    }
+
+    @NonNull
+    public KeyboardMode getKeyboardMode() {
+        return mode;
+    }
+
+    public boolean isExtraVisible() {
+        return extraVisible;
+    }
+
+    public boolean isFnxVisible() {
+        return fnxVisible;
+    }
+
+    private void notifyState() {
+        if (stateListener != null && !fullscreen)
+            stateListener.onUserStateChanged(mode, extraVisible, fnxVisible);
+    }
+
+    private void apply() {
+        boolean showing = mode.showsKeyboard();
+        boolean extra = mode == KeyboardMode.SYSTEM || (showing && extraVisible);
+        host.applyChrome(fullscreen, mode, extra, showing && fnxVisible);
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/display/base/DisplayExtraKeysPanel.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/base/DisplayExtraKeysPanel.java
index 2152723e4..18ae8b526 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/display/base/DisplayExtraKeysPanel.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/base/DisplayExtraKeysPanel.java
@@ -5,20 +5,15 @@
 
 import static android.view.HapticFeedbackConstants.KEYBOARD_TAP;
 
-import android.animation.Animator;
-import android.animation.AnimatorListenerAdapter;
-import android.animation.ValueAnimator;
 import android.annotation.SuppressLint;
 import android.content.Context;
-import android.os.Handler;
-import android.os.Looper;
+import android.content.res.ColorStateList;
 import android.util.AttributeSet;
 import android.view.KeyEvent;
 import android.view.LayoutInflater;
-import android.view.MotionEvent;
 import android.view.View;
-import android.view.ViewGroup;
 import android.widget.Button;
+import android.widget.ImageButton;
 import android.widget.LinearLayout;
 
 import androidx.annotation.NonNull;
@@ -26,20 +21,43 @@
 
 import cn.classfun.droidvm.R;
 
+/**
+ * The keyboard panel's shared zones: Extra (nav cluster and the keys no soft keyboard sends),
+ * FNx (function keys, shared by both keyboard modes), and the Main row used in system-IME mode.
+ * The laptop keyboard is {@link DisplayPhysicalKeyboardView}, docked below this and supplying
+ * its own Main - so whichever mode is up, Extra and FNx look and behave identically.
+ *
+ * Non-modifier keys send real key down/up ({@link HoldKeyGroup}: press = down, sliding onto
+ * another key presses that one, release = up), so the guest sees holds and does its own
+ * auto-repeat. Shift/Ctrl/Alt/Win are sticky - tap for one-shot, long-press to lock - with
+ * {@link BaseExtraKeysAdapter} owning that state and this panel rendering it.
+ */
 public final class DisplayExtraKeysPanel extends LinearLayout {
-    private static final long ANIM_DURATION = 200;
-    private static final long KEY_REPEAT_DELAY_MS = 400;
-    private static final long KEY_REPEAT_INTERVAL_MS = 50;
-    private final Handler handler = new Handler(Looper.getMainLooper());
-    private Runnable activeRepeatRunnable;
-    private LinearLayout fnKeysContainer;
-    private boolean capsActive = false;
-    private boolean fnxActive = false;
+    /** Zone toggle and IME summon live on the keys themselves, not in a menu. */
+    public interface ZoneListener {
+        void onToggleFnxZone();
+
+        void onShowSystemKeyboard();
+    }
+
+    private View extraZone;
+    private View fnxZone;
+    private View systemMainRow;
     @Nullable
     private KeyListener keyListener;
+    @Nullable
+    private ZoneListener zoneListener;
+    // Notified whenever the modifier toggle state repaints, so a second view of the same state
+    // (the laptop keyboard's modifier keys) can repaint too.
+    @Nullable
+    private Runnable modifierStateObserver;
 
     private boolean ctrlDown, altDown, shiftDown, winDown;
 
+    private final HoldKeyGroup holdKeys = new HoldKeyGroup((code, down) -> {
+        if (keyListener != null) keyListener.onKey(code, down);
+    });
+
     public DisplayExtraKeysPanel(@NonNull Context context) {
         super(context);
         init(context);
@@ -50,7 +68,8 @@ public DisplayExtraKeysPanel(@NonNull Context context, @Nullable AttributeSet at
         init(context);
     }
 
-    public DisplayExtraKeysPanel(@NonNull Context context, @Nullable AttributeSet attrs, int defStyleAttr) {
+    public DisplayExtraKeysPanel(
+        @NonNull Context context, @Nullable AttributeSet attrs, int defStyleAttr) {
         super(context, attrs, defStyleAttr);
         init(context);
     }
@@ -58,7 +77,9 @@ public DisplayExtraKeysPanel(@NonNull Context context, @Nullable AttributeSet at
     private void init(@NonNull Context context) {
         setOrientation(VERTICAL);
         LayoutInflater.from(context).inflate(R.layout.widget_display_extra_keys, this, true);
-        fnKeysContainer = findViewById(R.id.fn_keys_container);
+        extraZone = findViewById(R.id.extra_zone);
+        fnxZone = findViewById(R.id.fnx_zone);
+        systemMainRow = findViewById(R.id.system_main_row);
         setupKeys();
     }
 
@@ -66,31 +87,30 @@ public void setKeyListener(@Nullable KeyListener listener) {
         this.keyListener = listener;
     }
 
-    @SuppressWarnings("unused")
+    public void setZoneListener(@Nullable ZoneListener listener) {
+        this.zoneListener = listener;
+    }
+
+    public void setModifierStateObserver(@Nullable Runnable observer) {
+        this.modifierStateObserver = observer;
+    }
+
     public boolean isCtrlDown() {
         return ctrlDown;
     }
 
-    @SuppressWarnings("unused")
     public boolean isAltDown() {
         return altDown;
     }
 
-    @SuppressWarnings("unused")
     public boolean isShiftDown() {
         return shiftDown;
     }
 
-    @SuppressWarnings("unused")
     public boolean isWinDown() {
         return winDown;
     }
 
-    @SuppressWarnings("unused")
-    public boolean isCapsActive() {
-        return capsActive;
-    }
-
     public void setCtrlDown(boolean v) {
         ctrlDown = v;
         updateToggleButtons();
@@ -116,107 +136,94 @@ public void updateToggleButtons() {
         setToggleStyle(findViewById(R.id.btn_alt), altDown);
         setToggleStyle(findViewById(R.id.btn_shift), shiftDown);
         setToggleStyle(findViewById(R.id.btn_win), winDown);
-        setToggleStyle(findViewById(R.id.btn_cap), capsActive);
-        setToggleStyle(findViewById(R.id.btn_fnx), fnxActive);
+        if (modifierStateObserver != null) modifierStateObserver.run();
     }
 
-    private void setToggleStyle(@Nullable Button btn, boolean active) {
-        if (btn == null) return;
-        if (active) {
-            btn.setBackgroundColor(getContext().getColor(R.color.extra_key_bg_active));
-            btn.setTextColor(getContext().getColor(R.color.extra_key_text_active));
-        } else {
-            btn.setBackground(null);
-            btn.setTextColor(getContext().getColor(R.color.extra_key_text));
-        }
+    /** Repaint the Fn toggle to match the zone actually on screen. */
+    public void setZoneToggleState(boolean fnxOn) {
+        setToggleStyle(findViewById(R.id.btn_zone_fnx), fnxOn);
+    }
+
+    /**
+     * Which key owns the Main row's last slot. The IME's own visibility decides: while it is up
+     * the slot toggles the Fn zone, and while it is dismissed it summons the IME back - the
+     * other key would do nothing in each case. The Fn zone itself keeps its state throughout;
+     * only the way to toggle it goes away with the IME.
+     */
+    public void setImeVisible(boolean imeVisible) {
+        findViewById(R.id.btn_zone_fnx).setVisibility(imeVisible ? VISIBLE : GONE);
+        findViewById(R.id.btn_show_ime).setVisibility(imeVisible ? GONE : VISIBLE);
+    }
+
+    /** Works for both kinds of key: a text {@link Button} and an icon-only {@link ImageButton}. */
+    private void setToggleStyle(@Nullable View key, boolean active) {
+        if (key == null) return;
+        int color = getContext().getColor(
+            active ? R.color.extra_key_text_active : R.color.extra_key_text);
+        if (active) key.setBackgroundColor(getContext().getColor(R.color.extra_key_bg_active));
+        else key.setBackgroundResource(R.drawable.extra_key_bg);
+        if (key instanceof Button) ((Button) key).setTextColor(color);
+        else if (key instanceof ImageButton)
+            ((ImageButton) key).setImageTintList(ColorStateList.valueOf(color));
     }
 
     private void setupKeys() {
-        setKeyRepeat(R.id.btn_esc, () -> fireKeyRepeat(KeyEvent.KEYCODE_ESCAPE));
-        setKeyRepeat(R.id.btn_slash, () -> fireCharRepeat('/'));
-        setKeyRepeat(R.id.btn_dash, () -> fireCharRepeat('-'));
-        setKeyRepeat(R.id.btn_home, () -> fireKeyRepeat(KeyEvent.KEYCODE_MOVE_HOME));
-        setKeyRepeat(R.id.btn_up, () -> fireKeyRepeat(KeyEvent.KEYCODE_DPAD_UP));
-        setKeyRepeat(R.id.btn_end, () -> fireKeyRepeat(KeyEvent.KEYCODE_MOVE_END));
-        setKeyRepeat(R.id.btn_pgup, () -> fireKeyRepeat(KeyEvent.KEYCODE_PAGE_UP));
-        setKeyRepeat(R.id.btn_tab, () -> fireKeyRepeat(KeyEvent.KEYCODE_TAB));
+        setupHoldKey(R.id.btn_esc, KeyEvent.KEYCODE_ESCAPE);
+        setupHoldKey(R.id.btn_slash, KeyEvent.KEYCODE_SLASH);
+        setupHoldKey(R.id.btn_dash, KeyEvent.KEYCODE_MINUS);
+        setupHoldKey(R.id.btn_home, KeyEvent.KEYCODE_MOVE_HOME);
+        setupHoldKey(R.id.btn_up, KeyEvent.KEYCODE_DPAD_UP);
+        setupHoldKey(R.id.btn_end, KeyEvent.KEYCODE_MOVE_END);
+        setupHoldKey(R.id.btn_pgup, KeyEvent.KEYCODE_PAGE_UP);
+        setupHoldKey(R.id.btn_bksp, KeyEvent.KEYCODE_DEL);
+        setupHoldKey(R.id.btn_del, KeyEvent.KEYCODE_FORWARD_DEL);
+        setupHoldKey(R.id.btn_ins, KeyEvent.KEYCODE_INSERT);
+        setupHoldKey(R.id.btn_left, KeyEvent.KEYCODE_DPAD_LEFT);
+        setupHoldKey(R.id.btn_down, KeyEvent.KEYCODE_DPAD_DOWN);
+        setupHoldKey(R.id.btn_right, KeyEvent.KEYCODE_DPAD_RIGHT);
+        setupHoldKey(R.id.btn_pgdn, KeyEvent.KEYCODE_PAGE_DOWN);
+        setupHoldKey(R.id.btn_f1, KeyEvent.KEYCODE_F1);
+        setupHoldKey(R.id.btn_f2, KeyEvent.KEYCODE_F2);
+        setupHoldKey(R.id.btn_f3, KeyEvent.KEYCODE_F3);
+        setupHoldKey(R.id.btn_f4, KeyEvent.KEYCODE_F4);
+        setupHoldKey(R.id.btn_f5, KeyEvent.KEYCODE_F5);
+        setupHoldKey(R.id.btn_f6, KeyEvent.KEYCODE_F6);
+        setupHoldKey(R.id.btn_prtsc, KeyEvent.KEYCODE_SYSRQ);
+        setupHoldKey(R.id.btn_f7, KeyEvent.KEYCODE_F7);
+        setupHoldKey(R.id.btn_f8, KeyEvent.KEYCODE_F8);
+        setupHoldKey(R.id.btn_f9, KeyEvent.KEYCODE_F9);
+        setupHoldKey(R.id.btn_f10, KeyEvent.KEYCODE_F10);
+        setupHoldKey(R.id.btn_f11, KeyEvent.KEYCODE_F11);
+        setupHoldKey(R.id.btn_f12, KeyEvent.KEYCODE_F12);
+        setupHoldKey(R.id.btn_pause, KeyEvent.KEYCODE_BREAK);
+        setupHoldKey(R.id.btn_tab, KeyEvent.KEYCODE_TAB);
+        setupHoldKey(R.id.btn_enter, KeyEvent.KEYCODE_ENTER);
         setupModifierKey(R.id.btn_ctrl, KeyEvent.KEYCODE_CTRL_LEFT);
-        setupModifierKey(R.id.btn_alt, KeyEvent.KEYCODE_ALT_LEFT);
-        setKeyRepeat(R.id.btn_left, () -> fireKeyRepeat(KeyEvent.KEYCODE_DPAD_LEFT));
-        setKeyRepeat(R.id.btn_down, () -> fireKeyRepeat(KeyEvent.KEYCODE_DPAD_DOWN));
-        setKeyRepeat(R.id.btn_right, () -> fireKeyRepeat(KeyEvent.KEYCODE_DPAD_RIGHT));
-        setKeyRepeat(R.id.btn_pgdn, () -> fireKeyRepeat(KeyEvent.KEYCODE_PAGE_DOWN));
+        setupModifierKey(R.id.btn_shift, KeyEvent.KEYCODE_SHIFT_LEFT);
         setupModifierKey(R.id.btn_win, KeyEvent.KEYCODE_META_LEFT);
-        setKeyClick(R.id.btn_cap, v -> {
-            capsActive = !capsActive;
-            if (keyListener != null) keyListener.onCapsToggle(capsActive);
-            updateToggleButtons();
+        setupModifierKey(R.id.btn_alt, KeyEvent.KEYCODE_ALT_LEFT);
+        setupTapKey(R.id.btn_zone_fnx, () -> {
+            if (zoneListener != null) zoneListener.onToggleFnxZone();
         });
-        setupModifierKey(R.id.btn_shift, KeyEvent.KEYCODE_SHIFT_LEFT);
-        setKeyRepeat(R.id.btn_del, () -> fireKeyRepeat(KeyEvent.KEYCODE_FORWARD_DEL));
-        setKeyRepeat(R.id.btn_ins, () -> fireKeyRepeat(KeyEvent.KEYCODE_INSERT));
-        setKeyRepeat(R.id.btn_enter, () -> fireKeyRepeat(KeyEvent.KEYCODE_ENTER));
-        setKeyClick(R.id.btn_fnx, v -> {
-            fnxActive = !fnxActive;
-            setRowVisible(fnKeysContainer, fnxActive);
-            updateToggleButtons();
+        setupTapKey(R.id.btn_show_ime, () -> {
+            if (zoneListener != null) zoneListener.onShowSystemKeyboard();
         });
-        setKeyRepeat(R.id.btn_f1, () -> fireKeyRepeat(KeyEvent.KEYCODE_F1));
-        setKeyRepeat(R.id.btn_f2, () -> fireKeyRepeat(KeyEvent.KEYCODE_F2));
-        setKeyRepeat(R.id.btn_f3, () -> fireKeyRepeat(KeyEvent.KEYCODE_F3));
-        setKeyRepeat(R.id.btn_f4, () -> fireKeyRepeat(KeyEvent.KEYCODE_F4));
-        setKeyRepeat(R.id.btn_f5, () -> fireKeyRepeat(KeyEvent.KEYCODE_F5));
-        setKeyRepeat(R.id.btn_f6, () -> fireKeyRepeat(KeyEvent.KEYCODE_F6));
-        setKeyRepeat(R.id.btn_f7, () -> fireKeyRepeat(KeyEvent.KEYCODE_F7));
-        setKeyRepeat(R.id.btn_f8, () -> fireKeyRepeat(KeyEvent.KEYCODE_F8));
-        setKeyRepeat(R.id.btn_f9, () -> fireKeyRepeat(KeyEvent.KEYCODE_F9));
-        setKeyRepeat(R.id.btn_f10, () -> fireKeyRepeat(KeyEvent.KEYCODE_F10));
-        setKeyRepeat(R.id.btn_f11, () -> fireKeyRepeat(KeyEvent.KEYCODE_F11));
-        setKeyRepeat(R.id.btn_f12, () -> fireKeyRepeat(KeyEvent.KEYCODE_F12));
     }
 
-    private void fireKeyRepeat(int keyCode) {
-        if (keyListener != null) keyListener.onKeyRepeat(keyCode);
+    private void setupHoldKey(int id, int keyCode) {
+        holdKeys.register(findViewById(id), keyCode);
     }
 
-    private void fireCharRepeat(char ch) {
-        if (keyListener != null) keyListener.onCharRepeat(ch);
-    }
-
-    private void setKeyClick(int id, OnClickListener listener) {
+    private void setupTapKey(int id, @NonNull Runnable action) {
         findViewById(id).setOnClickListener(v -> {
             v.performHapticFeedback(KEYBOARD_TAP);
-            listener.onClick(v);
+            action.run();
         });
     }
 
     @SuppressLint("ClickableViewAccessibility")
-    private void setKeyRepeat(int id, Runnable action) {
-        findViewById(id).setOnTouchListener((v, event) -> {
-            switch (event.getActionMasked()) {
-                case MotionEvent.ACTION_DOWN:
-                    v.setPressed(true);
-                    v.performHapticFeedback(KEYBOARD_TAP);
-                    action.run();
-                    stopKeyRepeat();
-                    activeRepeatRunnable = () -> {
-                        action.run();
-                        handler.postDelayed(activeRepeatRunnable, KEY_REPEAT_INTERVAL_MS);
-                    };
-                    handler.postDelayed(activeRepeatRunnable, KEY_REPEAT_DELAY_MS);
-                    return true;
-                case MotionEvent.ACTION_UP:
-                case MotionEvent.ACTION_CANCEL:
-                    v.setPressed(false);
-                    stopKeyRepeat();
-                    return true;
-            }
-            return false;
-        });
-    }
-
     private void setupModifierKey(int btnId, int keyCode) {
-        View btn = findViewById(btnId);
+        var btn = findViewById(btnId);
         btn.setOnClickListener(v -> {
             v.performHapticFeedback(KEYBOARD_TAP);
             if (keyListener != null) keyListener.onModifierClick(keyCode);
@@ -228,77 +235,30 @@ private void setupModifierKey(int btnId, int keyCode) {
         });
     }
 
-    public void stopKeyRepeat() {
-        if (activeRepeatRunnable != null) {
-            handler.removeCallbacks(activeRepeatRunnable);
-            activeRepeatRunnable = null;
+    /**
+     * Show the zones the chrome state calls for. The panel itself is visible whenever any zone
+     * is - an empty panel would otherwise leave a blank strip over the display.
+     */
+    public void applyZones(boolean extraOn, boolean fnxOn, boolean systemMainOn) {
+        setZoneToggleState(fnxOn);
+        boolean any = extraOn || fnxOn || systemMainOn;
+        if (!any) {
+            // Slide the whole panel away; the zones keep their own states for the way back.
+            ViewHeightAnimator.hide(this);
+            return;
         }
-    }
-
-    public void animateIn() {
-        animateRowIn(this);
-    }
-
-    public void animateOut() {
-        animateRowOut(this);
-    }
-
-    public void setVisibleAnimated(boolean visible) {
-        if (visible) animateIn();
-        else animateOut();
-    }
-
-    private void animateRowIn(@NonNull View row) {
-        if (row.getVisibility() == VISIBLE) return;
-        row.setVisibility(VISIBLE);
-        row.measure(
-            MeasureSpec.makeMeasureSpec(
-                ((View) row.getParent()).getWidth(), MeasureSpec.EXACTLY),
-            MeasureSpec.makeMeasureSpec(0, MeasureSpec.UNSPECIFIED)
-        );
-        int target = row.getMeasuredHeight();
-        var lp = row.getLayoutParams();
-        lp.height = 0;
-        row.requestLayout();
-        var anim = ValueAnimator.ofInt(0, target);
-        anim.setDuration(ANIM_DURATION);
-        anim.addUpdateListener(a -> {
-            lp.height = (int) a.getAnimatedValue();
-            row.requestLayout();
-        });
-        anim.addListener(new AnimatorListenerAdapter() {
-            @Override
-            public void onAnimationEnd(Animator a) {
-                lp.height = ViewGroup.LayoutParams.WRAP_CONTENT;
-                row.requestLayout();
-            }
-        });
-        anim.start();
-    }
-
-    private void animateRowOut(@NonNull View row) {
-        if (row.getVisibility() == GONE) return;
-        int start = row.getHeight();
-        var lp = row.getLayoutParams();
-        var anim = ValueAnimator.ofInt(start, 0);
-        anim.setDuration(ANIM_DURATION);
-        anim.addUpdateListener(a -> {
-            lp.height = (int) a.getAnimatedValue();
-            row.requestLayout();
-        });
-        anim.addListener(new AnimatorListenerAdapter() {
-            @Override
-            public void onAnimationEnd(Animator a) {
-                row.setVisibility(GONE);
-                lp.height = ViewGroup.LayoutParams.WRAP_CONTENT;
-                row.requestLayout();
-            }
-        });
-        anim.start();
-    }
-
-    private void setRowVisible(@NonNull View row, boolean visible) {
-        if (visible) animateRowIn(row);
-        else animateRowOut(row);
+        if (getVisibility() != VISIBLE) {
+            // Panel arriving: put the zones in place first, then animate the panel as a whole,
+            // so its slide-in is one movement rather than several nested ones.
+            extraZone.setVisibility(extraOn ? VISIBLE : GONE);
+            fnxZone.setVisibility(fnxOn ? VISIBLE : GONE);
+            systemMainRow.setVisibility(systemMainOn ? VISIBLE : GONE);
+            ViewHeightAnimator.show(this);
+            return;
+        }
+        // Panel already up: animate each zone so Ex/FNx slide open and shut.
+        ViewHeightAnimator.setVisible(extraZone, extraOn);
+        ViewHeightAnimator.setVisible(fnxZone, fnxOn);
+        ViewHeightAnimator.setVisible(systemMainRow, systemMainOn);
     }
 }
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/display/base/DisplayInputBackend.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/base/DisplayInputBackend.java
new file mode 100644
index 000000000..3b7d38eb3
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/base/DisplayInputBackend.java
@@ -0,0 +1,36 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
+package cn.classfun.droidvm.ui.vm.display.base;
+
+import androidx.annotation.NonNull;
+
+/**
+ * The seam between the shared display control bar (system keyboard, extra keys, input-mode selector,
+ * fullscreen, rotate) and a concrete display backend. Both backends implement this so the control
+ * bar is backend-agnostic:
+ *
+ * <ul>
+ *       scan codes, pointer to the mode-appropriate virtio-input device.</li>
+ * </ul>
+ *
+ * Only event delivery lives here. Fullscreen and screen rotation are window-level concerns the
+ * control bar drives on the host Activity directly, not through the backend.
+ */
+public interface DisplayInputBackend {
+    /** Sends a key by Android key code; the backend translates to its wire representation. */
+    void sendKey(int androidKeyCode, boolean down);
+
+    /**
+     * Sends a printable character, synthesizing whatever the guest needs for it (e.g. Shift-wrapping
+     * uppercase and shifted symbols on the evdev backend). Used by the soft keyboard's commit path.
+     */
+    void sendChar(char c);
+
+    /**
+     * The pointer input mode changed. The backend adjusts how it turns subsequent on-screen touches
+     * into guest input (multi-touch, relative mouse, or absolute single-pointer tablet). Backends
+     * that route to distinct guest input devices switch the target device here.
+     */
+    void setInputMode(@NonNull InputMode mode);
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/display/base/DisplayKeyboardMenuRow.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/base/DisplayKeyboardMenuRow.java
new file mode 100644
index 000000000..a25b953dd
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/base/DisplayKeyboardMenuRow.java
@@ -0,0 +1,61 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
+package cn.classfun.droidvm.ui.vm.display.base;
+
+import android.view.LayoutInflater;
+import android.view.View;
+
+import androidx.annotation.NonNull;
+
+import com.google.android.material.button.MaterialButtonToggleGroup;
+
+import java.util.function.Consumer;
+
+import cn.classfun.droidvm.R;
+
+/**
+ * The keyboard row of the display fab-menu header: pick the typing surface - none, the system
+ * IME plus its companion row, or the laptop keyboard. Only the surface is chosen here; the
+ * Extra and FNx zones are toggled from keys on the keyboard itself, where they are visible.
+ */
+public final class DisplayKeyboardMenuRow {
+    private DisplayKeyboardMenuRow() {
+    }
+
+    @NonNull
+    public static View build(
+        @NonNull LayoutInflater inflater,
+        @NonNull KeyboardMode current,
+        @NonNull Consumer<KeyboardMode> onPick,
+        @NonNull Runnable dismiss
+    ) {
+        var group = (MaterialButtonToggleGroup)
+            inflater.inflate(R.layout.view_keyboard_mode_toggle, null);
+        group.check(buttonFor(current));
+        group.addOnButtonCheckedListener((g, checkedId, isChecked) -> {
+            if (!isChecked) return;
+            onPick.accept(modeFor(checkedId));
+            dismiss.run();
+        });
+        return group;
+    }
+
+    private static int buttonFor(@NonNull KeyboardMode mode) {
+        switch (mode) {
+            case NONE:
+                return R.id.mode_kb_none;
+            case LAPTOP:
+                return R.id.mode_kb_laptop;
+            default:
+                return R.id.mode_kb_system;
+        }
+    }
+
+    @NonNull
+    private static KeyboardMode modeFor(int buttonId) {
+        if (buttonId == R.id.mode_kb_none) return KeyboardMode.NONE;
+        if (buttonId == R.id.mode_kb_laptop) return KeyboardMode.LAPTOP;
+        return KeyboardMode.SYSTEM;
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/display/base/DisplayPhysicalKeyboardView.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/base/DisplayPhysicalKeyboardView.java
new file mode 100644
index 000000000..205b54542
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/base/DisplayPhysicalKeyboardView.java
@@ -0,0 +1,330 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
+package cn.classfun.droidvm.ui.vm.display.base;
+
+import static android.view.HapticFeedbackConstants.KEYBOARD_TAP;
+
+import android.content.Context;
+import android.content.res.ColorStateList;
+import android.util.AttributeSet;
+import android.util.TypedValue;
+import android.view.KeyEvent;
+import android.view.View;
+import android.widget.Button;
+import android.widget.ImageButton;
+import android.widget.ImageView;
+import android.widget.LinearLayout;
+
+import androidx.annotation.DrawableRes;
+import androidx.annotation.NonNull;
+import androidx.annotation.Nullable;
+
+import java.util.ArrayList;
+import java.util.HashMap;
+import java.util.List;
+import java.util.Locale;
+import java.util.Map;
+
+import cn.classfun.droidvm.R;
+
+/**
+ * The laptop keyboard: the Main zone of {@link KeyboardMode#LAPTOP}. Only the ANSI main block
+ * lives here - the function keys are the panel's shared FNx zone and the navigation cluster its
+ * Extra zone, so both modes show the same rows above whichever Main is up. The bottom row ends
+ * with the zone toggles and a button that puts the whole keyboard away.
+ *
+ * Non-modifier keys send real key down/up ({@link HoldKeyGroup}: press = down, sliding onto
+ * another key presses that one, release = up), so holds (WASD movement, held arrows) reach the
+ * guest and several keys can be held at once. Shift/Ctrl/Alt/Win are sticky, sharing their state
+ * with the panel through the adapter; {@link #refreshModifiers} repaints it here.
+ */
+public final class DisplayPhysicalKeyboardView extends LinearLayout {
+    /** The keys that act on the keyboard itself rather than sending anything to the guest. */
+    public interface ZoneListener {
+        void onToggleExtraZone();
+
+        void onToggleFnxZone();
+
+        void onCloseKeyboard();
+    }
+
+    private static final int ROW_HEIGHT_DP = 40;
+    private static final float TEXT_SIZE_SP = 10f;
+
+    private static final int KIND_NORMAL = 0;
+    private static final int KIND_MODIFIER = 1;
+    private static final int KIND_ZONE_EXTRA = 2;
+    private static final int KIND_ZONE_FNX = 3;
+    private static final int KIND_CLOSE = 4;
+
+    private static final class Key {
+        final String label;
+        /** What the key reads while Shift is held; same as {@link #label} when it doesn't shift. */
+        final String shiftLabel;
+        final int code;
+        final float weight;
+        final int kind;
+        final @DrawableRes int icon;
+
+        Key(String label, String shiftLabel, int code, float weight, int kind,
+            @DrawableRes int icon) {
+            this.label = label;
+            this.shiftLabel = shiftLabel;
+            this.code = code;
+            this.weight = weight;
+            this.kind = kind;
+            this.icon = icon;
+        }
+    }
+
+    /** Letter: lower case unshifted, upper case shifted, like the key it stands for. */
+    private static Key a(String lower, int code) {
+        return new Key(lower, lower.toUpperCase(Locale.ROOT), code, 1f, KIND_NORMAL, 0);
+    }
+
+    /** Key whose face changes under Shift (number row, punctuation). */
+    private static Key k(String label, String shiftLabel, int code) {
+        return k(label, shiftLabel, code, 1f);
+    }
+
+    private static Key k(String label, String shiftLabel, int code, float weight) {
+        return new Key(label, shiftLabel, code, weight, KIND_NORMAL, 0);
+    }
+
+    private static Key k(String label, int code, float weight) {
+        return new Key(label, label, code, weight, KIND_NORMAL, 0);
+    }
+
+    /** Key drawn as an icon; glyphs like tab and return come out thin and tiny in the font. */
+    private static Key kIcon(@DrawableRes int icon, int code, float weight) {
+        return new Key("", "", code, weight, KIND_NORMAL, icon);
+    }
+
+    private static Key m(String label, int code, float weight) {
+        return new Key(label, label, code, weight, KIND_MODIFIER, 0);
+    }
+
+    private static Key mIcon(@DrawableRes int icon, int code, float weight) {
+        return new Key("", "", code, weight, KIND_MODIFIER, icon);
+    }
+
+    private static Key special(String label, int kind, float weight, @DrawableRes int icon) {
+        return new Key(label, label, 0, weight, kind, icon);
+    }
+
+    // Every row totals 15 weight units, so the columns line up down the block.
+    private static final Key[][] ROWS = {
+        {
+            k("`", "~", KeyEvent.KEYCODE_GRAVE),
+            k("1", "!", KeyEvent.KEYCODE_1), k("2", "@", KeyEvent.KEYCODE_2),
+            k("3", "#", KeyEvent.KEYCODE_3), k("4", "$", KeyEvent.KEYCODE_4),
+            k("5", "%", KeyEvent.KEYCODE_5), k("6", "^", KeyEvent.KEYCODE_6),
+            k("7", "&", KeyEvent.KEYCODE_7), k("8", "*", KeyEvent.KEYCODE_8),
+            k("9", "(", KeyEvent.KEYCODE_9), k("0", ")", KeyEvent.KEYCODE_0),
+            k("-", "_", KeyEvent.KEYCODE_MINUS), k("=", "+", KeyEvent.KEYCODE_EQUALS),
+            kIcon(R.drawable.ic_key_backspace, KeyEvent.KEYCODE_DEL, 2f),
+        },
+        {
+            kIcon(R.drawable.ic_key_tab, KeyEvent.KEYCODE_TAB, 1.5f),
+            a("q", KeyEvent.KEYCODE_Q), a("w", KeyEvent.KEYCODE_W),
+            a("e", KeyEvent.KEYCODE_E), a("r", KeyEvent.KEYCODE_R),
+            a("t", KeyEvent.KEYCODE_T), a("y", KeyEvent.KEYCODE_Y),
+            a("u", KeyEvent.KEYCODE_U), a("i", KeyEvent.KEYCODE_I),
+            a("o", KeyEvent.KEYCODE_O), a("p", KeyEvent.KEYCODE_P),
+            k("[", "{", KeyEvent.KEYCODE_LEFT_BRACKET),
+            k("]", "}", KeyEvent.KEYCODE_RIGHT_BRACKET),
+            k("\\", "|", KeyEvent.KEYCODE_BACKSLASH, 1.5f),
+        },
+        {
+            k("CAPS", KeyEvent.KEYCODE_CAPS_LOCK, 1.75f),
+            a("a", KeyEvent.KEYCODE_A), a("s", KeyEvent.KEYCODE_S),
+            a("d", KeyEvent.KEYCODE_D), a("f", KeyEvent.KEYCODE_F),
+            a("g", KeyEvent.KEYCODE_G), a("h", KeyEvent.KEYCODE_H),
+            a("j", KeyEvent.KEYCODE_J), a("k", KeyEvent.KEYCODE_K),
+            a("l", KeyEvent.KEYCODE_L),
+            k(";", ":", KeyEvent.KEYCODE_SEMICOLON),
+            k("'", "\"", KeyEvent.KEYCODE_APOSTROPHE),
+            kIcon(R.drawable.ic_key_enter, KeyEvent.KEYCODE_ENTER, 2.25f),
+        },
+        {
+            mIcon(R.drawable.ic_key_shift, KeyEvent.KEYCODE_SHIFT_LEFT, 2.25f),
+            a("z", KeyEvent.KEYCODE_Z), a("x", KeyEvent.KEYCODE_X),
+            a("c", KeyEvent.KEYCODE_C), a("v", KeyEvent.KEYCODE_V),
+            a("b", KeyEvent.KEYCODE_B), a("n", KeyEvent.KEYCODE_N),
+            a("m", KeyEvent.KEYCODE_M),
+            k(",", "<", KeyEvent.KEYCODE_COMMA), k(".", ">", KeyEvent.KEYCODE_PERIOD),
+            k("/", "?", KeyEvent.KEYCODE_SLASH),
+            mIcon(R.drawable.ic_key_shift, KeyEvent.KEYCODE_SHIFT_LEFT, 2.75f),
+        },
+        {
+            m("CTRL", KeyEvent.KEYCODE_CTRL_LEFT, 1.5f),
+            mIcon(R.drawable.ic_key_windows, KeyEvent.KEYCODE_META_LEFT, 1.5f),
+            m("ALT", KeyEvent.KEYCODE_ALT_LEFT, 1.5f),
+            kIcon(R.drawable.ic_key_space, KeyEvent.KEYCODE_SPACE, 4.5f),
+            m("ALT", KeyEvent.KEYCODE_ALT_LEFT, 1.5f),
+            m("CTRL", KeyEvent.KEYCODE_CTRL_LEFT, 1.5f),
+            special("Ex", KIND_ZONE_EXTRA, 1f, 0),
+            special("Fn", KIND_ZONE_FNX, 1f, 0),
+            special("", KIND_CLOSE, 1f, R.drawable.ic_keyboard_close),
+        },
+    };
+
+    @Nullable
+    private KeyListener keyListener;
+    @Nullable
+    private ZoneListener zoneListener;
+    private final Map<Integer, List<View>> modifierButtons = new HashMap<>();
+    private final List<View> extraZoneButtons = new ArrayList<>();
+    private final List<View> fnxZoneButtons = new ArrayList<>();
+    // Keys whose face changes under Shift, so the keyboard reads like what it will type.
+    private final Map<Button, Key> shiftableKeys = new HashMap<>();
+    private final HoldKeyGroup holdKeys = new HoldKeyGroup((code, down) -> {
+        if (keyListener != null) keyListener.onKey(code, down);
+    });
+
+    public DisplayPhysicalKeyboardView(@NonNull Context context) {
+        super(context);
+        init(context);
+    }
+
+    public DisplayPhysicalKeyboardView(@NonNull Context context, @Nullable AttributeSet attrs) {
+        super(context, attrs);
+        init(context);
+    }
+
+    public DisplayPhysicalKeyboardView(
+        @NonNull Context context, @Nullable AttributeSet attrs, int defStyleAttr) {
+        super(context, attrs, defStyleAttr);
+        init(context);
+    }
+
+    private void init(@NonNull Context context) {
+        setOrientation(VERTICAL);
+        for (Key[] rowSpec : ROWS) addView(buildRow(context, rowSpec));
+    }
+
+    @NonNull
+    private LinearLayout buildRow(@NonNull Context context, @NonNull Key[] rowSpec) {
+        int rowHeight = Math.round(
+            ROW_HEIGHT_DP * context.getResources().getDisplayMetrics().density);
+        var row = new LinearLayout(context);
+        row.setOrientation(HORIZONTAL);
+        row.setBackgroundColor(context.getColor(R.color.extra_keys_background));
+        for (Key key : rowSpec) row.addView(buildKey(context, key));
+        row.setLayoutParams(new LayoutParams(LayoutParams.MATCH_PARENT, rowHeight));
+        return row;
+    }
+
+    @NonNull
+    private View buildKey(@NonNull Context context, @NonNull Key key) {
+        View view;
+        if (key.icon != 0) {
+            // An ImageButton centres its drawable; a Button's compound drawable does not, and at
+            // these key sizes the offset is obvious.
+            var img = new ImageButton(context);
+            img.setImageResource(key.icon);
+            img.setScaleType(ImageView.ScaleType.CENTER);
+            img.setBackgroundResource(R.drawable.extra_key_bg);
+            img.setImageTintList(ColorStateList.valueOf(
+                context.getColor(R.color.extra_key_text)));
+            img.setPadding(0, 0, 0, 0);
+            view = img;
+        } else {
+            // Same visual as the extra-keys strip; denser text since these rows fit up to 14 keys.
+            var btn = new Button(context, null, 0, R.style.ExtraKey);
+            btn.setText(key.label);
+            btn.setTextSize(TypedValue.COMPLEX_UNIT_SP, TEXT_SIZE_SP);
+            if (!key.label.equals(key.shiftLabel)) shiftableKeys.put(btn, key);
+            view = btn;
+        }
+        view.setLayoutParams(new LayoutParams(0, LayoutParams.MATCH_PARENT, key.weight));
+        switch (key.kind) {
+            case KIND_MODIFIER:
+                modifierButtons.computeIfAbsent(key.code, c -> new ArrayList<>()).add(view);
+                view.setOnClickListener(v -> {
+                    v.performHapticFeedback(KEYBOARD_TAP);
+                    if (keyListener != null) keyListener.onModifierClick(key.code);
+                });
+                view.setOnLongClickListener(v -> {
+                    v.performHapticFeedback(KEYBOARD_TAP);
+                    if (keyListener != null) keyListener.onModifierLongClick(key.code);
+                    return true;
+                });
+                break;
+            case KIND_ZONE_EXTRA:
+                extraZoneButtons.add(view);
+                setTapAction(view, () -> {
+                    if (zoneListener != null) zoneListener.onToggleExtraZone();
+                });
+                break;
+            case KIND_ZONE_FNX:
+                fnxZoneButtons.add(view);
+                setTapAction(view, () -> {
+                    if (zoneListener != null) zoneListener.onToggleFnxZone();
+                });
+                break;
+            case KIND_CLOSE:
+                setTapAction(view, () -> {
+                    if (zoneListener != null) zoneListener.onCloseKeyboard();
+                });
+                break;
+            default:
+                holdKeys.register(view, key.code);
+                break;
+        }
+        return view;
+    }
+
+    private void setTapAction(@NonNull View btn, @NonNull Runnable action) {
+        btn.setOnClickListener(v -> {
+            v.performHapticFeedback(KEYBOARD_TAP);
+            action.run();
+        });
+    }
+
+    public void setKeyListener(@Nullable KeyListener listener) {
+        this.keyListener = listener;
+    }
+
+    public void setZoneListener(@Nullable ZoneListener listener) {
+        this.zoneListener = listener;
+    }
+
+    /** Repaint the sticky-modifier keys, and the key faces Shift changes, from adapter state. */
+    public void refreshModifiers(boolean ctrl, boolean alt, boolean shift, boolean win) {
+        paintModifier(KeyEvent.KEYCODE_CTRL_LEFT, ctrl);
+        paintModifier(KeyEvent.KEYCODE_ALT_LEFT, alt);
+        paintModifier(KeyEvent.KEYCODE_SHIFT_LEFT, shift);
+        paintModifier(KeyEvent.KEYCODE_META_LEFT, win);
+        for (var entry : shiftableKeys.entrySet())
+            entry.getKey().setText(shift ? entry.getValue().shiftLabel : entry.getValue().label);
+    }
+
+    /** Repaint the Extra/FNx toggles to match the zones actually on screen. */
+    public void setZoneToggleState(boolean extraOn, boolean fnxOn) {
+        for (var btn : extraZoneButtons) paintToggle(btn, extraOn);
+        for (var btn : fnxZoneButtons) paintToggle(btn, fnxOn);
+    }
+
+    private void paintModifier(int keyCode, boolean active) {
+        var buttons = modifierButtons.get(keyCode);
+        if (buttons == null) return;
+        for (var btn : buttons) paintToggle(btn, active);
+    }
+
+    /** Works for both kinds of key: a text {@link Button} and an icon-only {@link ImageButton}. */
+    private void paintToggle(@NonNull View key, boolean active) {
+        int color = getContext().getColor(
+            active ? R.color.extra_key_text_active : R.color.extra_key_text);
+        if (active) key.setBackgroundColor(getContext().getColor(R.color.extra_key_bg_active));
+        else key.setBackgroundResource(R.drawable.extra_key_bg);
+        if (key instanceof Button) ((Button) key).setTextColor(color);
+        else if (key instanceof ImageButton)
+            ((ImageButton) key).setImageTintList(ColorStateList.valueOf(color));
+    }
+
+    public void setVisibleAnimated(boolean visible) {
+        ViewHeightAnimator.setVisible(this, visible);
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/display/base/DisplaySource.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/base/DisplaySource.java
new file mode 100644
index 000000000..ef4adfe2a
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/base/DisplaySource.java
@@ -0,0 +1,68 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
+package cn.classfun.droidvm.ui.vm.display.base;
+
+import androidx.annotation.NonNull;
+
+/**
+ * Pluggable VM display source: the thing that puts guest pixels on screen. The display activities
+ * only talk to this interface plus {@link DisplayViewportController}/{@link
+ * DisplayChromeController}, so a new source (e.g. a zero-copy AHardwareBuffer shared straight
+ * into the guest so it draws without a CPU copy) slots in without touching the console logic.
+ *
+ * Implementations today: {@code NativeSurfaceSource} (crosvm renders into an Android Surface via
+ * the per-VM ICrosvmAndroidDisplayService) and {@code VncBitmapSource} (RFB framebuffer copies
+ * into a bitmap-backed view).
+ */
+public interface DisplaySource {
+    enum State {
+        CONNECTING,
+        CONNECTED,
+        ERROR
+    }
+
+    interface Callbacks {
+        /**
+         * Guest/framebuffer resolution known or changed - feed
+         * {@link DisplayViewportController#setContentSize}. In auto-resize mode this is also the
+         * ack of a {@link #requestGuestResize} request.
+         */
+        void onContentSize(int width, int height);
+
+        /** Connection-level state for the status bar / connecting overlay. */
+        void onStateChanged(@NonNull State state);
+    }
+
+    /** Start producing frames. Idempotent; sources that connect on their own may no-op. */
+    void start();
+
+    /** Stop producing frames and release resources; the source is not reusable afterwards. */
+    void shutdown();
+
+    /**
+     * Whether the guest display resolution can be changed at runtime (Auto-resize Guest
+     * Display). Sources without a resize channel return false and {@link #requestGuestResize}
+     * is a no-op; {@link DisplayViewportController#setAutoResize} must not be enabled for them.
+     */
+    boolean supportsGuestResize();
+
+    /** Ask the guest display to switch to width x height; the ack arrives via onContentSize. */
+    void requestGuestResize(int width, int height);
+
+    /**
+     * Give this source a view to host the guest's HARDWARE cursor, or null for none.
+     *
+     * Only meaningful where the transport carries the cursor plane separately from the scanout
+     * (the native crosvm path does; VNC composites it server-side), so the default ignores it.
+     */
+    default void setCursorView(android.view.SurfaceView cursorView) {
+    }
+
+    /**
+     * Observe the guest's cursor position, in GUEST framebuffer coordinates, on the main thread.
+     * Default: no such channel, never called.
+     */
+    default void setCursorListener(java.util.function.BiConsumer<Integer, Integer> listener) {
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/display/base/DisplayViewportController.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/base/DisplayViewportController.java
new file mode 100644
index 000000000..9f0a04313
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/base/DisplayViewportController.java
@@ -0,0 +1,262 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
+package cn.classfun.droidvm.ui.vm.display.base;
+
+import androidx.annotation.NonNull;
+
+/**
+ * Single source of truth for the VM display viewport: where the guest image sits inside the
+ * display area, at what scale, under every combination of chrome (toolbar/status bar/extra
+ * keys/IME/system bars) visibility. Pure math, no Android view types, so the rules are unit
+ * testable; the owning activity feeds it sizes and gestures and applies the emitted geometry.
+ *
+ * State model: {@code scale} is absolute (screen px per content px) and {@code offset} is the
+ * content center relative to the display-area center. The invariant rules:
+ *
+ * <ul>
+ *   <li>Fitted (scale at the letterbox fit): any display-area change re-fits automatically, so
+ *       a "fit to window" view always stays fit-to-window.</li>
+ *   <li>Zoomed: a display-area change keeps the absolute scale and the center offset - the image
+ *       does not change size on screen, its center just follows the area center - then the offset
+ *       is clamped back into the pan bounds. If the area grew enough that the fit scale catches
+ *       up with the current scale, it snaps back to fitted.</li>
+ *   <li>Degenerate area (e.g. landscape with a tall IME squeezing the container below
+ *       {@code minAreaPx}, possibly to zero or negative): freeze. No geometry is recomputed or
+ *       emitted, everything holds its last good position until the area recovers.</li>
+ *   <li>Auto-resize mode (guest display follows the area): zoom gestures are disabled, every
+ *       accepted area change re-fits and asks the listener to resize the guest. Debouncing the
+ *       guest resize request is the caller's job.</li>
+ * </ul>
+ *
+ * The emitted geometry maps onto the existing view mechanics: lay the content view out at
+ * {@code baseW x baseH} centered in the container (the letterbox fit), then apply
+ * {@code viewScale} and translate by {@code offset}.
+ */
+public final class DisplayViewportController {
+    /** Maximum zoom, relative to the letterbox fit scale. */
+    public static final float MAX_ZOOM = 5f;
+    // A scale within 0.1% of the fit scale counts as fitted (float noise + snap-to-fit).
+    private static final float FIT_SNAP = 1.001f;
+
+    public interface Listener {
+        /**
+         * Apply the viewport: content view laid out at baseW x baseH centered in the area, then
+         * scaled by viewScale (1 = fitted) and translated by offset px.
+         */
+        void onViewportChanged(int baseW, int baseH, float viewScale, float offsetX, float offsetY);
+
+        /** Auto-resize mode only: the area changed; ask the guest display to match it. */
+        void onGuestResizeWanted(int areaW, int areaH);
+    }
+
+    private final int minAreaPx;
+    private final Listener listener;
+
+    private int contentW, contentH; // guest/framebuffer resolution
+    private int areaW, areaH;       // last accepted (non-degenerate) display area
+    private float scale;            // absolute: screen px per content px
+    private float offsetX, offsetY; // content center relative to area center, screen px
+    private boolean autoResize;
+    private boolean frozen;
+
+    /**
+     * @param minAreaPx area dimensions below this freeze the viewport instead of re-laying out.
+     */
+    public DisplayViewportController(int minAreaPx, @NonNull Listener listener) {
+        this.minAreaPx = Math.max(1, minAreaPx);
+        this.listener = listener;
+    }
+
+    /** Guest/framebuffer resolution known or changed. Always re-fits (a resolution change is a
+     *  content-level event; in auto-resize mode it is the ack of a resize request). */
+    public void setContentSize(int w, int h) {
+        if (w <= 0 || h <= 0 || (w == contentW && h == contentH)) {
+            return;
+        }
+        contentW = w;
+        contentH = h;
+        if (areaW <= 0 || areaH <= 0) {
+            // No display area yet (content size can arrive before the first layout pass, e.g.
+            // from the launch intent in onCreate): fitScale() would be 0 and the emitted
+            // viewScale NaN. Hold; the first setArea() re-fits and emits.
+            return;
+        }
+        fit();
+        emit();
+    }
+
+    /** Display-area (container) size changed. This is the single entry point for every chrome/IME/
+     *  rotation-driven layout change; the caller does not need to know what caused it. */
+    public void setArea(int w, int h) {
+        if (w < minAreaPx || h < minAreaPx) {
+            // Degenerate (possibly zero/negative under an oversized IME): hold everything.
+            frozen = true;
+            return;
+        }
+        frozen = false;
+        if (w == areaW && h == areaH) {
+            return; // no-op; layout listeners re-fire liberally
+        }
+        boolean hadArea = areaW > 0 && areaH > 0;
+        boolean wasFitted = hadArea && ready() && scale <= fitScale() * FIT_SNAP;
+        areaW = w;
+        areaH = h;
+        if (!ready()) {
+            return;
+        }
+        if (autoResize) {
+            fit();
+            emit();
+            listener.onGuestResizeWanted(w, h);
+            return;
+        }
+        if (!hadArea || wasFitted || scale <= fitScale() * FIT_SNAP) {
+            // Was fit-to-window, or the area grew past the current zoom: back to fit.
+            fit();
+        } else {
+            // Zoomed: same on-screen size, same center offset, clamped into the new bounds.
+            clampOffset();
+        }
+        emit();
+    }
+
+    /**
+     * Three-finger zoom/pan gesture step. {@code scaleFactor} is relative to the current scale;
+     * dx/dy are pan deltas in screen px. Ignored while frozen or in auto-resize mode.
+     */
+    public void onZoomPan(float scaleFactor, float dxPx, float dyPx) {
+        if (!ready() || areaW == 0 || frozen || autoResize) {
+            return;
+        }
+        float fit = fitScale();
+        float next = clamp(scale * scaleFactor, fit, fit * MAX_ZOOM);
+        if (next <= fit * FIT_SNAP) {
+            fit(); // snap back to fit; a fitted view has nothing to pan
+        } else {
+            scale = next;
+            offsetX += dxPx;
+            offsetY += dyPx;
+            clampOffset();
+        }
+        emit();
+    }
+
+    /**
+     * Pan the smallest amount that brings a GUEST-space point back inside the visible area, with
+     * {@code marginPx} of screen-space breathing room around it. No-op unless zoomed in.
+     *
+     * This is what makes the view follow the guest's pointer while zoomed: the cursor can leave
+     * the visible rectangle without the user ever touching the edge of the screen, because in
+     * relative-pointer mode a small finger drag can move the guest cursor a long way.
+     *
+     * Deliberately the SMALLEST correction rather than re-centring on the point: re-centring turns
+     * every cursor movement near an edge into a large view jump, which is far more disorienting
+     * than the pointer briefly reaching the edge. When the view is fitted there is nothing
+     * off-screen to reveal, and clampOffset would undo any pan anyway, so it returns early.
+     *
+     * @return true if the viewport actually moved.
+     */
+    public boolean panToShowContentPoint(float gx, float gy, float marginPx) {
+        if (!ready() || areaW == 0 || frozen || autoResize || isFitted()) {
+            return false;
+        }
+        // Content is drawn centred on the area, then displaced by offset.
+        float sx = areaW / 2f + offsetX + (gx - contentW / 2f) * scale;
+        float sy = areaH / 2f + offsetY + (gy - contentH / 2f) * scale;
+
+        // A margin wider than half the area would fight itself on both edges at once.
+        float mx = Math.min(marginPx, areaW / 2f);
+        float my = Math.min(marginPx, areaH / 2f);
+
+        float beforeX = offsetX, beforeY = offsetY;
+        if (sx < mx) {
+            offsetX += mx - sx;
+        } else if (sx > areaW - mx) {
+            offsetX -= sx - (areaW - mx);
+        }
+        if (sy < my) {
+            offsetY += my - sy;
+        } else if (sy > areaH - my) {
+            offsetY -= sy - (areaH - my);
+        }
+        if (offsetX == beforeX && offsetY == beforeY) {
+            return false;
+        }
+        clampOffset();
+        if (offsetX == beforeX && offsetY == beforeY) {
+            return false; // the pan was entirely clamped away; do not emit a no-change frame
+        }
+        emit();
+        return true;
+    }
+
+    /** Back to fit-to-window (e.g. on input-mode switch). */
+    public void resetToFit() {
+        if (!ready() || areaW == 0) {
+            return;
+        }
+        fit();
+        emit();
+    }
+
+    /** Guest display follows the area: zoom disabled, area changes request a guest resize. */
+    public void setAutoResize(boolean enabled) {
+        if (autoResize == enabled) {
+            return;
+        }
+        autoResize = enabled;
+        if (enabled && ready() && areaW > 0) {
+            fit();
+            emit();
+            listener.onGuestResizeWanted(areaW, areaH);
+        }
+    }
+
+    public boolean isFitted() {
+        return ready() && areaW > 0 && scale <= fitScale() * FIT_SNAP;
+    }
+
+    public boolean isFrozen() {
+        return frozen;
+    }
+
+    /** Absolute scale, screen px per content px. */
+    public float getScale() {
+        return scale;
+    }
+
+    private boolean ready() {
+        return contentW > 0 && contentH > 0;
+    }
+
+    private float fitScale() {
+        return Math.min(areaW / (float) contentW, areaH / (float) contentH);
+    }
+
+    private void fit() {
+        scale = fitScale();
+        offsetX = 0;
+        offsetY = 0;
+    }
+
+    // Pan bounds: the image may only pan along an axis where it overflows the area, and never far
+    // enough to pull its edge inside the area (no gaps while zoomed). Letterboxed axes lock to 0.
+    private void clampOffset() {
+        float halfGapX = Math.max(0, (contentW * scale - areaW) / 2f);
+        float halfGapY = Math.max(0, (contentH * scale - areaH) / 2f);
+        offsetX = clamp(offsetX, -halfGapX, halfGapX);
+        offsetY = clamp(offsetY, -halfGapY, halfGapY);
+    }
+
+    private void emit() {
+        float fit = fitScale();
+        int baseW = Math.round(contentW * fit);
+        int baseH = Math.round(contentH * fit);
+        listener.onViewportChanged(baseW, baseH, scale / fit, offsetX, offsetY);
+    }
+
+    private static float clamp(float v, float lo, float hi) {
+        return Math.max(lo, Math.min(v, hi));
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/display/base/HoldKeyGroup.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/base/HoldKeyGroup.java
new file mode 100644
index 000000000..e3ae38e08
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/base/HoldKeyGroup.java
@@ -0,0 +1,142 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
+package cn.classfun.droidvm.ui.vm.display.base;
+
+import static android.view.HapticFeedbackConstants.KEYBOARD_TAP;
+
+import android.annotation.SuppressLint;
+import android.graphics.Rect;
+import android.view.MotionEvent;
+import android.view.View;
+
+import androidx.annotation.NonNull;
+import androidx.annotation.Nullable;
+
+import java.util.ArrayList;
+import java.util.HashMap;
+import java.util.List;
+import java.util.Map;
+
+/**
+ * Hold-to-press keys with glide, for one keyboard widget: finger down on a key sends its key-down;
+ * sliding onto another registered key while held sends that key's down and the previous key's up
+ * (down-before-up, so a W-to-A roll never has a gap); release - or sliding off every key - sends
+ * key-up. The guest sees real holds, so auto-repeat and hold semantics are its own, and several
+ * pointers can hold several keys at once (each pointer's stream stays with its origin view; this
+ * group just retargets which key that pointer currently presses).
+ *
+ * Sticky modifiers are deliberately NOT registered here: gliding across one must not toggle it.
+ */
+public final class HoldKeyGroup {
+    public interface Sink {
+        void onKey(int androidKeyCode, boolean down);
+    }
+
+    private static final class Entry {
+        final View view;
+        final int keyCode;
+
+        Entry(View view, int keyCode) {
+            this.view = view;
+            this.keyCode = keyCode;
+        }
+    }
+
+    private final List<Entry> entries = new ArrayList<>();
+    @NonNull
+    private final Sink sink;
+
+    public HoldKeyGroup(@NonNull Sink sink) {
+        this.sink = sink;
+    }
+
+    @SuppressLint("ClickableViewAccessibility")
+    public void register(@NonNull View view, int keyCode) {
+        var entry = new Entry(view, keyCode);
+        entries.add(entry);
+        view.setOnTouchListener(new PointerTracker(entry));
+    }
+
+    private void press(@NonNull Entry e) {
+        e.view.setPressed(true);
+        e.view.performHapticFeedback(KEYBOARD_TAP);
+        sink.onKey(e.keyCode, true);
+    }
+
+    private void release(@NonNull Entry e) {
+        e.view.setPressed(false);
+        sink.onKey(e.keyCode, false);
+    }
+
+    /** Tracks the single pointer whose ACTION_DOWN landed on one origin key. */
+    private final class PointerTracker implements View.OnTouchListener {
+        private final Entry origin;
+        // Screen-space bounds of every visible registered key, cached per gesture (layout does
+        // not change mid-touch).
+        private final Map<Entry, Rect> bounds = new HashMap<>();
+        @Nullable
+        private Entry current;
+
+        PointerTracker(@NonNull Entry origin) {
+            this.origin = origin;
+        }
+
+        @Override
+        public boolean onTouch(View v, MotionEvent event) {
+            switch (event.getActionMasked()) {
+                case MotionEvent.ACTION_DOWN:
+                    cacheBounds();
+                    current = origin;
+                    press(origin);
+                    return true;
+                case MotionEvent.ACTION_MOVE:
+                    onMove(event.getRawX(), event.getRawY());
+                    return true;
+                case MotionEvent.ACTION_UP:
+                case MotionEvent.ACTION_CANCEL:
+                    if (current != null) {
+                        release(current);
+                        current = null;
+                    }
+                    return true;
+            }
+            return false;
+        }
+
+        private void onMove(float rawX, float rawY) {
+            int x = Math.round(rawX), y = Math.round(rawY);
+            if (current != null) {
+                var rect = bounds.get(current);
+                if (rect != null && rect.contains(x, y)) return;
+            }
+            var target = hitTest(x, y);
+            if (target == current) return;
+            // Down-before-up on a roll so the guest never sees a hold gap.
+            if (target != null) press(target);
+            if (current != null) release(current);
+            current = target;
+        }
+
+        @Nullable
+        private Entry hitTest(int x, int y) {
+            for (var e : entries) {
+                var rect = bounds.get(e);
+                // A key another pointer is holding can't be glided onto.
+                if (rect != null && rect.contains(x, y) && !e.view.isPressed()) return e;
+            }
+            return null;
+        }
+
+        private void cacheBounds() {
+            bounds.clear();
+            int[] loc = new int[2];
+            for (var e : entries) {
+                if (!e.view.isShown()) continue;
+                e.view.getLocationOnScreen(loc);
+                bounds.put(e, new Rect(
+                    loc[0], loc[1], loc[0] + e.view.getWidth(), loc[1] + e.view.getHeight()));
+            }
+        }
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/display/base/InputMode.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/base/InputMode.java
new file mode 100644
index 000000000..dd031b6eb
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/base/InputMode.java
@@ -0,0 +1,51 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
+package cn.classfun.droidvm.ui.vm.display.base;
+
+import androidx.annotation.NonNull;
+import androidx.annotation.StringRes;
+
+import cn.classfun.droidvm.R;
+
+/**
+ * Pointer input mode shared by both display backends (VNC and native). The control bar exposes a
+ * selector; each {@link DisplayInputBackend} interprets the current mode when it turns on-screen
+ * touches into guest input:
+ *
+ * <ul>
+ *       contacts preserved (the default; what a touchscreen guest expects).</li>
+ *       emulation. Android has no absolute-mouse concept, so this is the only faithful mouse path
+ *       for guests that want relative motion (FPS games, desktops with pointer acceleration).</li>
+ *       absolute guest coordinates, no multi-finger gestures.</li>
+ * </ul>
+ *
+ * The ordinal is persisted (SharedPreferences {@code display_input_mode}); TOUCH/MOUSE keep their
+ * historical 0/1 values so existing settings stay valid, TABLET is appended as 2.
+ */
+public enum InputMode {
+    TOUCH(R.string.vnc_menu_input_mode_touch),
+    MOUSE(R.string.vnc_menu_input_mode_mouse),
+    TABLET(R.string.vnc_menu_input_mode_tablet);
+
+    @StringRes
+    public final int labelResId;
+
+    InputMode(@StringRes int labelResId) {
+        this.labelResId = labelResId;
+    }
+
+    /** Persisted-ordinal lookup that never throws; unknown/out-of-range values fall back to TOUCH. */
+    @NonNull
+    public static InputMode fromOrdinal(int ordinal) {
+        InputMode[] values = values();
+        return (ordinal >= 0 && ordinal < values.length) ? values[ordinal] : TOUCH;
+    }
+
+    /** The next mode in the cycle, for a single toggle button that rotates TOUCH -> MOUSE -> TABLET. */
+    @NonNull
+    public InputMode next() {
+        InputMode[] values = values();
+        return values[(ordinal() + 1) % values.length];
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/display/base/KeyListener.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/base/KeyListener.java
index 48dc5a234..462883e45 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/display/base/KeyListener.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/base/KeyListener.java
@@ -4,18 +4,14 @@
 package cn.classfun.droidvm.ui.vm.display.base;
 
 public interface KeyListener {
-    @SuppressWarnings("unused")
-    void onKeyRepeat(int androidKeyCode);
+    /**
+     * A non-modifier key went down ({@code down=true}) or up. The guest sees the real hold, so
+     * auto-repeat and hold semantics (e.g. WASD movement) are the guest's own; several keys may
+     * be held at once.
+     */
+    void onKey(int androidKeyCode, boolean down);
 
-    @SuppressWarnings("unused")
-    void onCharRepeat(char ch);
-
-    @SuppressWarnings("unused")
-    void onCapsToggle(boolean active);
-
-    @SuppressWarnings("unused")
     void onModifierClick(int androidKeyCode);
 
-    @SuppressWarnings("unused")
     void onModifierLongClick(int androidKeyCode);
 }
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/display/base/KeyboardMode.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/base/KeyboardMode.java
new file mode 100644
index 000000000..fd34c92c1
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/base/KeyboardMode.java
@@ -0,0 +1,48 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
+package cn.classfun.droidvm.ui.vm.display.base;
+
+import androidx.annotation.NonNull;
+import androidx.annotation.Nullable;
+import androidx.annotation.StringRes;
+
+import cn.classfun.droidvm.R;
+
+/**
+ * Which typing surface the display shows. Exactly one is active, and it decides what the Main
+ * zone of the on-screen keyboard is; the Extra and FNx zones are independent toggles that only
+ * apply while a keyboard is up ({@link #NONE} hides everything without forgetting them).
+ */
+public enum KeyboardMode {
+    /** Nothing shown - the display gets the whole screen. */
+    NONE(R.string.keyboard_mode_none),
+    /** Main is one row of the keys a soft keyboard lacks; text comes from the system IME. */
+    SYSTEM(R.string.keyboard_mode_system),
+    /** Main is the on-screen laptop keyboard; no IME involved. */
+    LAPTOP(R.string.keyboard_mode_laptop);
+
+    private final @StringRes int stringId;
+
+    KeyboardMode(@StringRes int stringId) {
+        this.stringId = stringId;
+    }
+
+    @StringRes
+    public int getStringId() {
+        return stringId;
+    }
+
+    public boolean showsKeyboard() {
+        return this != NONE;
+    }
+
+    @NonNull
+    public static KeyboardMode fromName(@Nullable String name) {
+        if (name != null) {
+            for (var m : values())
+                if (m.name().equals(name)) return m;
+        }
+        return SYSTEM;
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/display/base/PointerGestureTranslator.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/base/PointerGestureTranslator.java
new file mode 100644
index 000000000..8387d7fc9
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/base/PointerGestureTranslator.java
@@ -0,0 +1,467 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
+package cn.classfun.droidvm.ui.vm.display.base;
+
+import android.graphics.RectF;
+import android.os.Handler;
+import android.view.MotionEvent;
+
+import androidx.annotation.NonNull;
+
+/**
+ * Unified pointer-gesture state machine for the MOUSE and TABLET input modes, shared by the VNC and
+ * native display paths. The activity feeds raw touch {@link MotionEvent}s in the coordinates of the
+ * gesture surface (the whole display container, letterbox included) together with the rectangle the
+ * guest frame is actually rendered into; the translator classifies them and emits semantic
+ * callbacks; each display backend maps those onto its wire format (evdev via crosvm --input, or RFB
+ * pointer events).
+ *
+ * Gestures:
+ * <ul>
+ *       = left click, tap-and-a-half (tap, then touch-and-move within the tap-drag window) = left
+ *       drag with no leading click, libinput-style. TABLET: press is committed as a left-button-down
+ *       at the absolute position after a short defer window (so a second finger can still turn it
+ *       into a right-click), then drag draws; quick tap = left click.</li>
+ *       time &lt; threshold and it barely moved) = right click, positioned at finger 1 (tablet).
+ *       Two fingers panning together = scroll-wheel notches.</li>
+ *       the display view only, never sent to the guest.</li>
+ * </ul>
+ *
+ * Active area: the whole gesture surface is usable; only gestures that carry a coordinate to the
+ * guest are pinned to the display rect. MOUSE (relative) is never pinned. TABLET pins on where
+ * finger 1 went down: press/drag/tap, the right-click anchor and the scroll anchor (the scroll's
+ * coordinate is sampled at press time; the panning after it may leave the rect freely). The
+ * second finger of a right-click and the three-finger zoom/pan are position-free and work
+ * anywhere, letterbox included.
+ *
+ * TOUCH (multi-touch) mode bypasses this class entirely.
+ *
+ * All methods run on the UI thread (touch dispatch). The tablet press-defer uses the supplied
+ * {@link Handler} (main looper).
+ */
+public final class PointerGestureTranslator {
+    public interface Listener {
+        /** MOUSE mode: relative cursor motion, already scaled to guest pixels. */
+        void onRelativeMove(float dxGuest, float dyGuest);
+
+        /** TABLET mode: absolute pointer position (no button change), guest pixels. */
+        void onAbsoluteMove(float xGuest, float yGuest);
+
+        /** Left button transition. TABLET uses the coordinates; MOUSE may ignore them. */
+        void onLeftButton(boolean down, float xGuest, float yGuest);
+
+        /** Quick single-finger tap = left click (down+up). */
+        void onLeftTap(float xGuest, float yGuest);
+
+        /** Two-finger quick tap = right click; coordinates are finger 1's position (tablet). */
+        void onRightClick(float xGuest, float yGuest);
+
+        /** Two-finger pan, quantized to wheel notches (+v = scroll up, +h = scroll right). */
+        void onScroll(int vNotches, int hNotches);
+
+        /**
+         * Three-finger pinch/pan: local display transform. scaleFactor is relative to the previous
+         * event; pan/focus are view pixels. Never forwarded to the guest.
+         */
+        void onZoomPan(float scaleFactor, float dxView, float dyView, float focusX, float focusY);
+    }
+
+    private static final long TAP_MS = 250;            // max press duration for a tap
+    private static final long RIGHT_TAP_MS = 300;      // max finger-2 press duration for right click
+    // Mouse tap-and-drag window (libinput-style): after a tap the left button is held DOWN, and its
+    // release is deferred this long. A finger returning within the window continues the SAME press
+    // -- moving it drags (one clean press, no leading click); a second quick tap becomes a
+    // double-click; nothing means a plain click completes. Kept short so single clicks feel
+    // immediate; the tradeoff is the tap-drag re-touch must be quick.
+    private static final long TAP_DRAG_MS = 100;
+    private static final long TABLET_DEFER_MS = 60;    // tablet: defer left-down so 2nd finger can veto
+    private static final float TAP_SLOP = 18f;         // view px of travel before a press is a drag
+    private static final float SCROLL_NOTCH_PX = 64f;  // view px of two-finger pan per wheel notch
+
+    // TAP_WAIT: mouse tap done, left button held, waiting out the tap-drag window for a return
+    // touch. DRAG_HELD: a finger returned within the window, button still held, not yet moved far
+    // enough to be a drag (vs a double-tap).
+    private enum State {IDLE, PENDING1, DRAG_MOVE, DRAG_LEFT, TAP_WAIT, DRAG_HELD, TWO, SCROLL2,
+        THREE, DEAD}
+
+    private final Handler handler;
+    private final Listener listener;
+    private boolean absolute; // tablet=true, mouse=false
+
+    private State state = State.IDLE;
+    // display rect + surface->guest scale, refreshed on every event so layout changes are picked up
+    private final RectF dispRect = new RectF(0, 0, 1, 1);
+    private float guestW = 1f, guestH = 1f;
+    private float scaleX = 1f, scaleY = 1f;
+
+    private int finger1Id = -1;
+    private float f1DownX, f1DownY, f1LastX, f1LastY;
+    private long f1DownTime;
+    // Finger 1 went down inside the display rect: TABLET coordinate ops (press/tap/drag,
+    // right-click anchor, scroll anchor) are only valid then. Irrelevant in MOUSE mode.
+    private boolean f1InDisplay;
+
+    private int finger2Id = -1;
+    private float f2DownX, f2DownY;
+    private long f2DownTime;
+    private boolean twoMoved;
+    private float scrollAccumV, scrollAccumH;
+    private float twoLastMidX, twoLastMidY;
+
+    private float threeLastCx, threeLastCy, threeLastSpread;
+
+    private final Runnable tabletCommit = this::commitTabletPress;
+    private final Runnable tapRelease = this::commitTapRelease;
+
+    public PointerGestureTranslator(@NonNull Handler handler, @NonNull Listener listener) {
+        this.handler = handler;
+        this.listener = listener;
+    }
+
+    /** Switch between TABLET (absolute) and MOUSE (relative) semantics. Resets in-flight state. */
+    public void setAbsolute(boolean absolute) {
+        if (this.absolute != absolute) reset();
+        this.absolute = absolute;
+    }
+
+    public void reset() {
+        handler.removeCallbacks(tabletCommit);
+        handler.removeCallbacks(tapRelease);
+        // Never leave the guest's left button stuck down if we tear down mid-press.
+        if (state == State.DRAG_LEFT || state == State.DRAG_HELD || state == State.TAP_WAIT)
+            listener.onLeftButton(false, guestX(f1LastX), guestY(f1LastY));
+        state = State.IDLE;
+        finger1Id = -1;
+        finger2Id = -1;
+    }
+
+    /**
+     * Feeds one touch event. Returns true if consumed.
+     *
+     * @param displayRect where the guest frame is rendered, in the event's coordinate space (the
+     *                    letterbox-fitted display view under any local zoom/pan transform)
+     * @param guestWidth  guest coordinate range the display rect maps onto (fb px or the
+     *                    normalized evdev ABS range, whatever the backend's wire format wants)
+     * @param guestHeight guest coordinate range the display rect maps onto
+     */
+    public boolean onTouchEvent(@NonNull MotionEvent ev, @NonNull RectF displayRect,
+                                float guestWidth, float guestHeight) {
+        if (displayRect.width() <= 0f || displayRect.height() <= 0f) return false;
+        dispRect.set(displayRect);
+        guestW = guestWidth;
+        guestH = guestHeight;
+        scaleX = guestWidth / displayRect.width();
+        scaleY = guestHeight / displayRect.height();
+        switch (ev.getActionMasked()) {
+            case MotionEvent.ACTION_DOWN:
+                onFirstDown(ev);
+                return true;
+            case MotionEvent.ACTION_POINTER_DOWN:
+                onExtraDown(ev);
+                return true;
+            case MotionEvent.ACTION_MOVE:
+                onMove(ev);
+                return true;
+            case MotionEvent.ACTION_POINTER_UP:
+                onPointerUp(ev);
+                return true;
+            case MotionEvent.ACTION_UP:
+                onLastUp(ev);
+                return true;
+            case MotionEvent.ACTION_CANCEL:
+                cancel();
+                return true;
+            default:
+                return false;
+        }
+    }
+
+    /** Maps a gesture-surface coordinate to guest px, clamped to the guest bounds. */
+    private float guestX(float x) {
+        return Math.max(0f, Math.min((x - dispRect.left) * scaleX, guestW - 1f));
+    }
+
+    private float guestY(float y) {
+        return Math.max(0f, Math.min((y - dispRect.top) * scaleY, guestH - 1f));
+    }
+
+    /** Whether TABLET coordinate ops are valid for this gesture (always true for MOUSE). */
+    private boolean coordOps() {
+        return !absolute || f1InDisplay;
+    }
+
+    private void onFirstDown(MotionEvent ev) {
+        finger1Id = ev.getPointerId(0);
+        f1DownX = f1LastX = ev.getX(0);
+        f1DownY = f1LastY = ev.getY(0);
+        f1DownTime = ev.getEventTime();
+        // Mouse: a finger returning while the previous tap's release is still deferred continues
+        // the SAME held press. Moving it becomes a drag (no leading click); a quick lift is the
+        // second half of a double-click. See onLastUp/onMove for the split.
+        if (!absolute && state == State.TAP_WAIT) {
+            handler.removeCallbacks(tapRelease);
+            state = State.DRAG_HELD;
+            return;
+        }
+        f1InDisplay = dispRect.contains(f1DownX, f1DownY);
+        state = State.PENDING1;
+        if (absolute && f1InDisplay) {
+            // Tablet: commit the press after the defer window unless a second finger vetoes it.
+            // A press outside the display rect has no guest coordinate and never commits; the
+            // fingers are still tracked so multi-finger gestures can form from the letterbox.
+            handler.postDelayed(tabletCommit, TABLET_DEFER_MS);
+        }
+    }
+
+    private void commitTabletPress() {
+        if (state != State.PENDING1 || !absolute) return;
+        state = State.DRAG_LEFT;
+        listener.onLeftButton(true, guestX(f1LastX), guestY(f1LastY));
+    }
+
+    // Mouse tap-drag window expired with no return touch: the deferred tap is just a click.
+    private void commitTapRelease() {
+        if (state != State.TAP_WAIT) return;
+        listener.onLeftButton(false, guestX(f1LastX), guestY(f1LastY));
+        state = State.IDLE;
+        finger1Id = -1;
+    }
+
+    private void onExtraDown(MotionEvent ev) {
+        int count = ev.getPointerCount();
+        if (count == 2 && (state == State.PENDING1 || state == State.DRAG_MOVE
+            || state == State.DRAG_LEFT || state == State.DRAG_HELD)) {
+            handler.removeCallbacks(tabletCommit);
+            if (state == State.DRAG_LEFT || state == State.DRAG_HELD) {
+                // The press was already committed (or held from a tap); release it before
+                // switching to the two-finger gesture.
+                listener.onLeftButton(false, guestX(f1LastX), guestY(f1LastY));
+            }
+            int idx = ev.getActionIndex();
+            finger2Id = ev.getPointerId(idx);
+            f2DownX = ev.getX(idx);
+            f2DownY = ev.getY(idx);
+            f2DownTime = ev.getEventTime();
+            twoMoved = false;
+            scrollAccumV = 0;
+            scrollAccumH = 0;
+            twoLastMidX = (f1LastX + f2DownX) / 2f;
+            twoLastMidY = (f1LastY + f2DownY) / 2f;
+            state = State.TWO;
+        } else if (count == 3 && (state == State.TWO || state == State.SCROLL2)) {
+            state = State.THREE;
+            threeLastCx = centroidX(ev);
+            threeLastCy = centroidY(ev);
+            threeLastSpread = spread(ev);
+        } else {
+            // 4+ fingers or unexpected ordering: bail until all fingers lift.
+            handler.removeCallbacks(tabletCommit);
+            state = State.DEAD;
+        }
+    }
+
+    private void onMove(MotionEvent ev) {
+        switch (state) {
+            case PENDING1: {
+                int idx = ev.findPointerIndex(finger1Id);
+                if (idx < 0) return;
+                float x = ev.getX(idx), y = ev.getY(idx);
+                if (Math.abs(x - f1DownX) > TAP_SLOP || Math.abs(y - f1DownY) > TAP_SLOP) {
+                    handler.removeCallbacks(tabletCommit);
+                    if (absolute) {
+                        if (f1InDisplay) {
+                            // Commit press at the original touch point, then drag from there.
+                            listener.onLeftButton(true, guestX(f1DownX), guestY(f1DownY));
+                            state = State.DRAG_LEFT;
+                        }
+                        // Outside the display rect a tablet drag has no coordinate; stay
+                        // PENDING1 so extra fingers can still form the multi-finger gestures.
+                    } else {
+                        state = State.DRAG_MOVE;
+                    }
+                }
+                if (coordOps()) emitPointerMove(x, y);
+                f1LastX = x;
+                f1LastY = y;
+                break;
+            }
+            case DRAG_MOVE:
+            case DRAG_LEFT: {
+                int idx = ev.findPointerIndex(finger1Id);
+                if (idx < 0) return;
+                float x = ev.getX(idx), y = ev.getY(idx);
+                emitPointerMove(x, y);
+                f1LastX = x;
+                f1LastY = y;
+                break;
+            }
+            case DRAG_HELD: {
+                // Return touch of a tap-drag: the left button is already held. Once it travels
+                // past the slop it's a drag; a lift before that (in onLastUp) is a double-click.
+                int idx = ev.findPointerIndex(finger1Id);
+                if (idx < 0) return;
+                float x = ev.getX(idx), y = ev.getY(idx);
+                if (Math.abs(x - f1DownX) > TAP_SLOP || Math.abs(y - f1DownY) > TAP_SLOP)
+                    state = State.DRAG_LEFT;
+                if (state == State.DRAG_LEFT) emitPointerMove(x, y);
+                f1LastX = x;
+                f1LastY = y;
+                break;
+            }
+            case TWO:
+            case SCROLL2: {
+                int i1 = ev.findPointerIndex(finger1Id);
+                int i2 = ev.findPointerIndex(finger2Id);
+                if (i1 < 0 || i2 < 0) return;
+                float midX = (ev.getX(i1) + ev.getX(i2)) / 2f;
+                float midY = (ev.getY(i1) + ev.getY(i2)) / 2f;
+                float dx = midX - twoLastMidX;
+                float dy = midY - twoLastMidY;
+                if (state == State.TWO
+                    && (Math.abs(midX - (f1DownX + f2DownX) / 2f) > TAP_SLOP
+                        || Math.abs(midY - (f1DownY + f2DownY) / 2f) > TAP_SLOP)) {
+                    twoMoved = true;
+                    if (coordOps()) {
+                        state = State.SCROLL2;
+                        // The scroll's coordinate is taken at press time: pin the guest pointer
+                        // to finger 1's down position so the wheel lands under the fingers; the
+                        // panning after this is position-free and may leave the display rect.
+                        if (absolute)
+                            listener.onAbsoluteMove(guestX(f1DownX), guestY(f1DownY));
+                    }
+                }
+                if (state == State.SCROLL2) {
+                    // Natural scrolling: content follows the fingers (pan down = wheel up).
+                    scrollAccumV += dy;
+                    scrollAccumH += dx;
+                    int v = (int) (scrollAccumV / SCROLL_NOTCH_PX);
+                    int h = (int) (scrollAccumH / SCROLL_NOTCH_PX);
+                    if (v != 0 || h != 0) {
+                        scrollAccumV -= v * SCROLL_NOTCH_PX;
+                        scrollAccumH -= h * SCROLL_NOTCH_PX;
+                        listener.onScroll(v, -h);
+                    }
+                }
+                twoLastMidX = midX;
+                twoLastMidY = midY;
+                f1LastX = ev.getX(i1);
+                f1LastY = ev.getY(i1);
+                break;
+            }
+            case THREE: {
+                if (ev.getPointerCount() < 3) return;
+                float cx = centroidX(ev), cy = centroidY(ev);
+                float sp = spread(ev);
+                float factor = threeLastSpread > 1f ? sp / threeLastSpread : 1f;
+                listener.onZoomPan(factor, cx - threeLastCx, cy - threeLastCy, cx, cy);
+                threeLastCx = cx;
+                threeLastCy = cy;
+                threeLastSpread = sp;
+                break;
+            }
+            default:
+                break;
+        }
+    }
+
+    private void emitPointerMove(float x, float y) {
+        if (absolute) {
+            listener.onAbsoluteMove(guestX(x), guestY(y));
+        } else {
+            listener.onRelativeMove((x - f1LastX) * scaleX, (y - f1LastY) * scaleY);
+        }
+    }
+
+    private void onPointerUp(MotionEvent ev) {
+        int id = ev.getPointerId(ev.getActionIndex());
+        if ((state == State.TWO || state == State.SCROLL2) && id == finger2Id) {
+            long held = ev.getEventTime() - f2DownTime;
+            if (state == State.TWO && !twoMoved && held <= RIGHT_TAP_MS && coordOps()) {
+                // 1 -> 2 -> 1 with a quick second finger: right click at finger 1's position
+                // (finger 2 is position-free and may sit outside the display rect).
+                listener.onRightClick(guestX(f1LastX), guestY(f1LastY));
+            }
+            // Whatever remains of the gesture is spent; ignore finger 1 until it lifts.
+            state = State.DEAD;
+            finger2Id = -1;
+        } else if ((state == State.TWO || state == State.SCROLL2) && id == finger1Id) {
+            // Finger 1 left first; treat the same as gesture end.
+            state = State.DEAD;
+        } else if (state == State.THREE && ev.getPointerCount() - 1 < 3) {
+            state = State.DEAD;
+        }
+    }
+
+    private void onLastUp(MotionEvent ev) {
+        handler.removeCallbacks(tabletCommit);
+        switch (state) {
+            case PENDING1: {
+                long held = ev.getEventTime() - f1DownTime;
+                if (held <= TAP_MS) {
+                    if (absolute) {
+                        if (f1InDisplay) listener.onLeftTap(guestX(f1DownX), guestY(f1DownY));
+                    } else {
+                        // Mouse tap: press now but defer the release, so a finger returning within
+                        // the window continues it as a drag (no leading click) or a double-click.
+                        listener.onLeftButton(true, guestX(f1DownX), guestY(f1DownY));
+                        state = State.TAP_WAIT;
+                        handler.postDelayed(tapRelease, TAP_DRAG_MS);
+                        return; // keep TAP_WAIT; don't fall through to the IDLE reset
+                    }
+                } else if (absolute && f1InDisplay) {
+                    // Long still hold that never got committed: emit press+release at the position.
+                    listener.onLeftButton(true, guestX(f1DownX), guestY(f1DownY));
+                    listener.onLeftButton(false, guestX(f1DownX), guestY(f1DownY));
+                }
+                break;
+            }
+            case DRAG_HELD:
+                // Return touch lifted without dragging: it was a double-tap. Release the held
+                // press (completes click 1), then emit a second click.
+                listener.onLeftButton(false, guestX(f1LastX), guestY(f1LastY));
+                listener.onLeftButton(true, guestX(f1LastX), guestY(f1LastY));
+                listener.onLeftButton(false, guestX(f1LastX), guestY(f1LastY));
+                break;
+            case DRAG_LEFT:
+                listener.onLeftButton(false, guestX(f1LastX), guestY(f1LastY));
+                break;
+            default:
+                break;
+        }
+        state = State.IDLE;
+        finger1Id = -1;
+        finger2Id = -1;
+    }
+
+    private void cancel() {
+        handler.removeCallbacks(tabletCommit);
+        handler.removeCallbacks(tapRelease);
+        if (state == State.DRAG_LEFT || state == State.DRAG_HELD || state == State.TAP_WAIT)
+            listener.onLeftButton(false, guestX(f1LastX), guestY(f1LastY));
+        state = State.IDLE;
+        finger1Id = -1;
+        finger2Id = -1;
+    }
+
+    private static float centroidX(MotionEvent ev) {
+        float s = 0;
+        for (int i = 0; i < ev.getPointerCount(); i++) s += ev.getX(i);
+        return s / ev.getPointerCount();
+    }
+
+    private static float centroidY(MotionEvent ev) {
+        float s = 0;
+        for (int i = 0; i < ev.getPointerCount(); i++) s += ev.getY(i);
+        return s / ev.getPointerCount();
+    }
+
+    /** Mean distance of the pointers from their centroid; pinch ratio = spread/lastSpread. */
+    private static float spread(MotionEvent ev) {
+        float cx = centroidX(ev), cy = centroidY(ev);
+        float s = 0;
+        for (int i = 0; i < ev.getPointerCount(); i++)
+            s += Math.hypot(ev.getX(i) - cx, ev.getY(i) - cy);
+        return s / ev.getPointerCount();
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/display/base/ViewHeightAnimator.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/base/ViewHeightAnimator.java
new file mode 100644
index 000000000..7174ec4a7
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/base/ViewHeightAnimator.java
@@ -0,0 +1,97 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
+package cn.classfun.droidvm.ui.vm.display.base;
+
+import android.animation.Animator;
+import android.animation.AnimatorListenerAdapter;
+import android.animation.ValueAnimator;
+import android.view.View;
+
+import androidx.annotation.NonNull;
+
+import cn.classfun.droidvm.R;
+
+/**
+ * Slide a bottom-docked row/panel open or closed by animating its layout height. The view's
+ * pre-animation layout height (fixed dp or WRAP_CONTENT) is remembered on first use and restored
+ * when the animation finishes - blindly resetting to WRAP_CONTENT would permanently squash rows
+ * whose height comes from their own fixed layout_height (their match_parent children then wrap to
+ * text height).
+ */
+public final class ViewHeightAnimator {
+    private static final long DURATION = 200;
+
+    private ViewHeightAnimator() {
+    }
+
+    public static void setVisible(@NonNull View view, boolean visible) {
+        if (visible) show(view);
+        else hide(view);
+    }
+
+    /** The view's own layout height before any animation touched it. */
+    private static int originalHeight(@NonNull View view) {
+        Object tag = view.getTag(R.id.view_height_animator_original);
+        if (tag instanceof Integer) return (Integer) tag;
+        int height = view.getLayoutParams().height;
+        view.setTag(R.id.view_height_animator_original, height);
+        return height;
+    }
+
+    public static void show(@NonNull View view) {
+        if (view.getVisibility() == View.VISIBLE) return;
+        int original = originalHeight(view);
+        view.setVisibility(View.VISIBLE);
+        int target;
+        if (original > 0) {
+            target = original;
+        } else {
+            view.measure(
+                View.MeasureSpec.makeMeasureSpec(
+                    ((View) view.getParent()).getWidth(), View.MeasureSpec.EXACTLY),
+                View.MeasureSpec.makeMeasureSpec(0, View.MeasureSpec.UNSPECIFIED)
+            );
+            target = view.getMeasuredHeight();
+        }
+        var lp = view.getLayoutParams();
+        lp.height = 0;
+        view.requestLayout();
+        var anim = ValueAnimator.ofInt(0, target);
+        anim.setDuration(DURATION);
+        anim.addUpdateListener(a -> {
+            lp.height = (int) a.getAnimatedValue();
+            view.requestLayout();
+        });
+        anim.addListener(new AnimatorListenerAdapter() {
+            @Override
+            public void onAnimationEnd(Animator a) {
+                lp.height = original;
+                view.requestLayout();
+            }
+        });
+        anim.start();
+    }
+
+    public static void hide(@NonNull View view) {
+        if (view.getVisibility() == View.GONE) return;
+        int original = originalHeight(view);
+        int start = view.getHeight();
+        var lp = view.getLayoutParams();
+        var anim = ValueAnimator.ofInt(start, 0);
+        anim.setDuration(DURATION);
+        anim.addUpdateListener(a -> {
+            lp.height = (int) a.getAnimatedValue();
+            view.requestLayout();
+        });
+        anim.addListener(new AnimatorListenerAdapter() {
+            @Override
+            public void onAnimationEnd(Animator a) {
+                view.setVisibility(View.GONE);
+                lp.height = original;
+                view.requestLayout();
+            }
+        });
+        anim.start();
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/display/base/X11Keymap.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/base/X11Keymap.java
index 37c5e8457..7f905be0f 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/display/base/X11Keymap.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/base/X11Keymap.java
@@ -11,6 +11,7 @@ public final class X11Keymap {
     public static final int XK_Tab =                              0xff09;  /* U+0009 CHARACTER TABULATION */
     public static final int XK_Clear =                            0xff0b;  /* U+000B LINE TABULATION */
     public static final int XK_Return =                           0xff0d;  /* U+000D CARRIAGE RETURN */
+    public static final int XK_Pause =                            0xff13;
     public static final int XK_Scroll_Lock =                      0xff14;
     public static final int XK_Sys_Req =                          0xff15;
     public static final int XK_Escape =                           0xff1b;  /* U+001B ESCAPE */
@@ -235,10 +236,12 @@ public static int androidKeyToXKeysym(int keyCode) {
                 return XK_Num_Lock;
             case KeyEvent.KEYCODE_FUNCTION:
                 return XF86XK_Fn;
+            // The unmodified keys: X servers derive Sys_Req/Break themselves when Alt/Ctrl is
+            // held, and VNC-server keymaps often only know the unmodified symbols.
             case KeyEvent.KEYCODE_SYSRQ:
-                return XK_Sys_Req;
+                return XK_Print;
             case KeyEvent.KEYCODE_BREAK:
-                return XK_Break;
+                return XK_Pause;
             case KeyEvent.KEYCODE_SPACE:
                 return XK_space;
             case KeyEvent.KEYCODE_GRAVE:
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/display/nativedisplay/display/CursorPositionStream.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/nativedisplay/display/CursorPositionStream.java
new file mode 100644
index 000000000..4afb7718c
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/nativedisplay/display/CursorPositionStream.java
@@ -0,0 +1,137 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
+package cn.classfun.droidvm.ui.vm.display.nativedisplay.display;
+
+import android.crosvm.ICrosvmAndroidDisplayService;
+import android.os.Handler;
+import android.os.Looper;
+import android.os.ParcelFileDescriptor;
+import android.util.Log;
+
+import androidx.annotation.NonNull;
+
+import java.io.DataInputStream;
+import java.io.IOException;
+import java.io.InputStream;
+
+/**
+ * The guest cursor's position, straight from virtio-gpu.
+ *
+ * crosvm's Android display backend already writes every cursor move to a pipe -- see
+ * set_android_surface_position() in crosvm_android_display_client.cpp, which does nothing but
+ * write(fd, {x, y}). Until now nothing ever called setCursorStream, so that fd stayed -1 and the
+ * backend logged "cursor position stream is not attached; dropping position updates" once and
+ * threw every update away. This class is the missing other end.
+ *
+ * WHY THIS AND NOT THE APP'S OWN TOUCH COORDINATES
+ *
+ * The app knows where the user touched, which is not where the guest's pointer is:
+ *   - in relative-pointer mode the app sends DELTAS, so it has no absolute position at all;
+ *   - the guest warps the pointer on its own (games grabbing it, dialogs centring it);
+ *   - while zoomed there is a scale factor between the two, so any app-side dead reckoning drifts.
+ * These x/y come from the guest's own cursor plane, which is the only authoritative source.
+ *
+ * Values are little-endian u32 pairs in GUEST framebuffer coordinates.
+ */
+final class CursorPositionStream implements AutoCloseable {
+
+    /** Delivered on the main thread. */
+    interface Listener {
+        void onCursorMoved(int guestX, int guestY);
+    }
+
+    private static final String TAG = "CursorPositionStream";
+
+    private final Handler mainHandler = new Handler(Looper.getMainLooper());
+    private final Listener listener;
+    private ParcelFileDescriptor readSide;
+    private Thread reader;
+    private volatile boolean closed;
+
+    private CursorPositionStream(@NonNull Listener listener) {
+        this.listener = listener;
+    }
+
+    /**
+     * Creates the pipe, hands the WRITE end to crosvm and starts reading the other end.
+     * Returns null if the service refuses it, in which case the caller simply has no cursor
+     * position -- everything else keeps working.
+     */
+    static CursorPositionStream attach(@NonNull ICrosvmAndroidDisplayService service,
+                                       @NonNull Listener listener) {
+        ParcelFileDescriptor[] pipe;
+        try {
+            pipe = ParcelFileDescriptor.createPipe();
+        } catch (IOException e) {
+            Log.w(TAG, "could not create cursor pipe", e);
+            return null;
+        }
+        var self = new CursorPositionStream(listener);
+        self.readSide = pipe[0];
+        try {
+            // The binder call dups the fd, so our copy must be closed either way -- crosvm keeps
+            // its own. Leaving it open here would mean the reader never sees EOF when crosvm exits.
+            service.setCursorStream(pipe[1]);
+        } catch (Exception e) {
+            Log.w(TAG, "setCursorStream failed; cursor position unavailable", e);
+            closeQuietly(pipe[0]);
+            closeQuietly(pipe[1]);
+            return null;
+        } finally {
+            closeQuietly(pipe[1]);
+        }
+
+        self.reader = new Thread(self::readLoop, "CursorPositionStream");
+        self.reader.setDaemon(true);
+        self.reader.start();
+        Log.i(TAG, "cursor position stream attached");
+        return self;
+    }
+
+    private void readLoop() {
+        try (InputStream in = new ParcelFileDescriptor.AutoCloseInputStream(readSide)) {
+            var din = new DataInputStream(in);
+            byte[] buf = new byte[8];
+            while (!closed) {
+                // readFully, not read: the writer emits 8-byte records and a short read would
+                // desynchronise the stream permanently, turning every later position into noise.
+                din.readFully(buf);
+                int x = le32(buf, 0);
+                int y = le32(buf, 4);
+                mainHandler.post(() -> {
+                    if (!closed) {
+                        listener.onCursorMoved(x, y);
+                    }
+                });
+            }
+        } catch (IOException e) {
+            if (!closed) {
+                // Normal at VM shutdown: crosvm exits and the write end closes.
+            }
+        }
+    }
+
+    private static int le32(byte[] b, int off) {
+        return (b[off] & 0xFF)
+             | ((b[off + 1] & 0xFF) << 8)
+             | ((b[off + 2] & 0xFF) << 16)
+             | ((b[off + 3] & 0xFF) << 24);
+    }
+
+    @Override
+    public void close() {
+        closed = true;
+        closeQuietly(readSide);   // unblocks readFully
+        readSide = null;
+    }
+
+    private static void closeQuietly(ParcelFileDescriptor pfd) {
+        if (pfd == null) return;
+        try {
+            pfd.close();
+        } catch (IOException ignored) {
+            // Nothing useful to do; the fd is going away either way.
+        }
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/display/nativedisplay/display/DisplayProvider.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/nativedisplay/display/DisplayProvider.java
index f5e85ea4e..3e068ec13 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/display/nativedisplay/display/DisplayProvider.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/nativedisplay/display/DisplayProvider.java
@@ -20,6 +20,7 @@
 
 import java.util.concurrent.ExecutorService;
 import java.util.concurrent.Executors;
+import java.util.concurrent.atomic.AtomicBoolean;
 import java.util.function.Consumer;
 import java.util.function.Supplier;
 
@@ -35,9 +36,30 @@
  */
 final class DisplayProvider {
     private static final String TAG = "NativeDisplayProvider";
-    // Stop polling for the display binder after this many 1s rounds (the daemon-side
-    // waitForService already blocks up to 5s each), so a dead broker doesn't spin forever.
-    private static final int MAX_BINDER_ATTEMPTS = 30;
+    // Keep looking for the display binder for as long as this console is open, backing off from
+    // BINDER_RETRY_MIN_MS to BINDER_RETRY_MAX_MS between rounds.
+    //
+    // There used to be a cap of 30 rounds, because each round could cost the daemon a leaked,
+    // permanently-blocked thread (see NativeDisplayBinder) and spinning was genuinely expensive.
+    // It no longer is -- a round is one cheap ServiceManager lookup, answered instantly when the
+    // VM is not running -- and a cap is the wrong shape anyway: the thing being waited for is a
+    // guest booting, which has no upper bound. A guest that took longer than the cap left the
+    // console blank for the rest of its life with nothing left to retry it.
+    //
+    // Two things end the wait instead of a counter: the binder turning up, and the console
+    // closing (shutdown() interrupts this thread). A VM that exits while the console is open
+    // closes the console itself, so "the VM is never coming back" ends it too.
+    private static final long BINDER_RETRY_MIN_MS = 1000;
+    private static final long BINDER_RETRY_MAX_MS = 5000;
+    // Interval for re-reading the guest display size. crosvm's binder is pull-only (no resize
+    // push callback, and SELinux blocks crosvm from calling back into an untrusted_app), so the
+    // receiver polls the single source of truth -- getDisplayConfig() reflects the current scanout
+    // size, updated by C++ configure() on EVERY resolution change (UEFI modeset, Linux boot, and
+    // Linux runtime xrandr all flow through it). This is what lets the aspect ratio follow a guest
+    // resolution change mid-session. A resize is rare and user-driven, so 1s lag is fine.
+    private static final long CONFIG_POLL_MS = 1000;
+    /** virtio-gpu's cursor plane size; a smaller cursor image lands in its top-left. */
+    static final int CURSOR_PLANE_PX = 64;
 
     private final SurfaceView mainView;
     private int width;
@@ -54,8 +76,15 @@ final class DisplayProvider {
     private ICrosvmAndroidDisplayService displayService;
     private boolean needsSend = false;
     private boolean hasSavedFrame = false;
+    private boolean hasSavedCursorFrame = false;
+    private CursorPositionStream cursorStream;
+    private CursorPositionStream.Listener cursorListener;
+    private SurfaceView cursorView;
+    private boolean cursorSurfaceSent = false;
 
     private final IBinder.DeathRecipient deathRecipient;
+    /** One binder hunt at a time: both the death path and surfaceCreated ask for one. */
+    private final AtomicBoolean fetching = new AtomicBoolean();
 
     DisplayProvider(@NonNull SurfaceView mainView, int width, int height,
                     @NonNull Supplier<IBinder> binderProvider,
@@ -71,7 +100,36 @@ final class DisplayProvider {
             Log.w(TAG, "display service died - connection lost");
             onConnected.accept(false);
             displayService = null;
+            // The display service lives in crosvm. When the guest reboots (or crosvm otherwise
+            // restarts) the daemon relaunches crosvm, which registers a NEW display service under
+            // the same name -- but nothing re-fetches it, so the activity sat on "waiting for the
+            // VM screen" until the user closed and reopened it (seen on every provisioning reboot).
+            // Re-arm: the surface we hold is still valid, so mark it for re-delivery and poll for
+            // the new binder the same way the first attach did. shutdown() has already stopped
+            // the executor when the activity is going away, so a real teardown does not re-poll.
+            if (executor.isShutdown()) {
+                needsSend = false;
+                return;
+            }
             needsSend = false;
+            cursorSurfaceSent = false;
+            hasSavedFrame = false;
+            hasSavedCursorFrame = false;
+            if (cursorStream != null) {
+                cursorStream.close();
+                cursorStream = null;
+            }
+            // Do NOT hand the old Surface to the new crosvm. Its BufferQueue still carries the
+            // state the dead producer left behind (buffers dequeued and never returned): the CPU
+            // console path can still post to it, but the GPU-blit scanout path silently stops --
+            // observed as the early-boot console frozen on screen with a live cursor. Closing and
+            // reopening the activity fixed it because that creates fresh surfaces, so do exactly
+            // that here: bounce both SurfaceViews so surfaceDestroyed/surfaceCreated run and the
+            // usual send-once-per-surface path delivers brand-new surfaces once the binder is back.
+            recreateSurface(mainView);
+            if (cursorView != null) recreateSurface(cursorView);
+            Log.i(TAG, "re-fetching the display binder for the restarted VM (fresh surfaces)");
+            fetchBinder();
         });
 
         mainView.setSurfaceLifecycle(SurfaceView.SURFACE_LIFECYCLE_FOLLOWS_ATTACHMENT);
@@ -85,35 +143,56 @@ final class DisplayProvider {
         fetchBinder();
     }
 
+    private void recreateSurface(@NonNull SurfaceView view) {
+        var parent = view.getParent();
+        if (!(parent instanceof android.view.ViewGroup)) {
+            Log.w(TAG, "recreateSurface: view has no ViewGroup parent");
+            return;
+        }
+        var group = (android.view.ViewGroup) parent;
+        int idx = group.indexOfChild(view);
+        var lp = view.getLayoutParams();
+        Log.i(TAG, fmt("recreateSurface: detaching and re-attaching %s",
+            view.getClass().getSimpleName()));
+        group.removeView(view);
+        group.addView(view, idx, lp);
+    }
+
     private void fetchBinder() {
+        if (!fetching.compareAndSet(false, true)) return;
         executor.submit(() -> {
-            IBinder binder = null;
-            int attempts = 0;
-            while (!Thread.currentThread().isInterrupted() && attempts < MAX_BINDER_ATTEMPTS) {
-                try {
-                    binder = binderProvider.get();
-                } catch (Exception e) {
-                    Log.e(TAG, "binderProvider threw", e);
-                    binder = null;
-                }
-                if (binder != null) break;
-                attempts++;
-                try {
-                    Thread.sleep(1000);
-                } catch (InterruptedException e) {
-                    Thread.currentThread().interrupt();
-                    return;
+            try {
+                long backoff = BINDER_RETRY_MIN_MS;
+                int rounds = 0;
+                while (!Thread.currentThread().isInterrupted()) {
+                    IBinder binder;
+                    try {
+                        binder = binderProvider.get();
+                    } catch (Exception e) {
+                        Log.e(TAG, "binderProvider threw", e);
+                        binder = null;
+                    }
+                    if (binder != null) {
+                        final IBinder got = binder;
+                        mainHandler.post(() -> onBinderReady(got));
+                        return;
+                    }
+                    // One line early and then one a minute: a slow guest is normal and must not
+                    // be the reason a log is unreadable.
+                    if (rounds == 0 || rounds % 60 == 0)
+                        Log.i(TAG, fmt("display binder not there yet (round %d)", rounds + 1));
+                    rounds++;
+                    try {
+                        Thread.sleep(backoff);
+                    } catch (InterruptedException e) {
+                        Thread.currentThread().interrupt();
+                        return;
+                    }
+                    backoff = Math.min(backoff * 2, BINDER_RETRY_MAX_MS);
                 }
+            } finally {
+                fetching.set(false);
             }
-            final IBinder got = binder;
-            if (got == null) {
-                // Give up rather than poll forever: the daemon broker may have died (the supplier
-                // returns null once rootService is dropped), so the display can't be reached.
-                Log.e(TAG, fmt("display binder unavailable after %d attempts", MAX_BINDER_ATTEMPTS));
-                mainHandler.post(() -> onConnected.accept(false));
-                return;
-            }
-            mainHandler.post(() -> onBinderReady(got));
         });
     }
 
@@ -136,8 +215,53 @@ private void onBinderReady(@NonNull IBinder binder) {
         } catch (Exception e) {
             Log.w(TAG, fmt("getDisplayConfig unavailable, using default %dx%d", width, height));
         }
+        // Attach the cursor position pipe, if anybody wants it. crosvm has always written guest
+        // cursor moves to this fd; nothing ever read it, so the backend dropped them all.
+        attachCursorStream();
+        if (cursorView != null) {
+            trySendCursorSurface(cursorView.getHolder());
+        }
+
         onConnected.accept(true);
         applyPendingSurface();
+        startConfigPoll(displayService);
+    }
+
+    // Watches for guest resolution changes: crosvm has no push channel, so re-read the current
+    // scanout size on the bg thread and, when it changes, re-lay-out the surface. Runs on the
+    // single background executor; a getDisplayConfig() failure (dead service) ends the loop.
+    private void startConfigPoll(@NonNull ICrosvmAndroidDisplayService svc) {
+        executor.submit(() -> {
+            while (!Thread.currentThread().isInterrupted()) {
+                try {
+                    Thread.sleep(CONFIG_POLL_MS);
+                } catch (InterruptedException e) {
+                    Thread.currentThread().interrupt();
+                    return;
+                }
+                DisplayConfig config;
+                try {
+                    config = svc.getDisplayConfig();
+                } catch (Exception e) {
+                    return; // service gone; deathRecipient handles teardown
+                }
+                if (config == null || config.width <= 0 || config.height <= 0) continue;
+                mainHandler.post(() -> applyConfigIfChanged(config));
+            }
+        });
+    }
+
+    // Main thread: apply a newly observed guest size. width/height stay main-thread-only.
+    private void applyConfigIfChanged(@NonNull DisplayConfig config) {
+        if (config.width == width && config.height == height) return;
+        Log.i(TAG, fmt("guest display size changed %dx%d -> %dx%d",
+            width, height, config.width, config.height));
+        width = config.width;
+        height = config.height;
+        // Keep the app-side buffer size in step with crosvm's setBuffersGeometry; guarded by
+        // needsSend, so the layout-driven surfaceChanged this triggers won't re-send the surface.
+        mainView.getHolder().setFixedSize(width, height);
+        onDisplayConfig.accept(config);
     }
 
     private void applyPendingSurface() {
@@ -215,6 +339,115 @@ public void surfaceDestroyed(@NonNull SurfaceHolder holder) {
         }
     }
 
+    /**
+     * Ask for guest cursor positions. Safe to call before or after the display binder arrives:
+     * whichever happens second does the attaching, so a caller does not have to know which.
+     */
+    void setCursorListener(CursorPositionStream.Listener listener) {
+        cursorListener = listener;
+        attachCursorStream();
+    }
+
+    private void attachCursorStream() {
+        if (cursorListener == null || displayService == null || cursorStream != null) {
+            return;
+        }
+        cursorStream = CursorPositionStream.attach(displayService, cursorListener);
+    }
+
+    /**
+     * Give crosvm a Surface for the guest's HARDWARE cursor.
+     *
+     * Until something calls setSurface(_, forCursor=true), the native backend's cursor surface has
+     * no native window: lock() hands crosvm a sink buffer whose own comment says it "is never
+     * displayed on the physical screen", and unlockAndPost() returns without posting. The pointer
+     * is rendered perfectly and thrown away.
+     *
+     * Linux guests can be told to draw the pointer into the framebuffer instead, which is why this
+     * went unnoticed; Windows' virtio-gpu driver and UEFI have no equivalent and use the cursor
+     * plane unconditionally, so without this they have no visible pointer at all.
+     */
+    void setCursorView(SurfaceView view) {
+        cursorView = view;
+        if (view == null) {
+            return;
+        }
+        // Above the scanout SurfaceView. Both are surfaces in their own layers, so ordinary view
+        // z-order does not apply -- without this the cursor is composited BEHIND the display.
+        view.setZOrderMediaOverlay(true);
+        // Same rule as the scanout: this Surface must outlive a visibility change. The guest hides
+        // and re-shows its pointer constantly -- KDE drops to a software cursor whenever the
+        // hardware plane cannot keep up with a fast move and hands the plane straight back -- and
+        // the image comes back in ONE UPDATE_CURSOR, whose pixels are flushed microseconds after
+        // the position that tells the app to show the overlay again. Re-creating a destroyed
+        // Surface takes a frame plus a binder round trip, so those pixels land in the backend's
+        // sink buffer and are dropped, and every later MOVE_CURSOR carries a position and no image
+        // -- the pointer stays blank until the guest happens to change its shape. The activity
+        // therefore parks the overlay off-screen rather than setting it GONE; on Android 14+ this
+        // makes the Surface immune to visibility for good measure.
+        if (Build.VERSION.SDK_INT >= Build.VERSION_CODES.UPSIDE_DOWN_CAKE) {
+            view.setSurfaceLifecycle(SurfaceView.SURFACE_LIFECYCLE_FOLLOWS_ATTACHMENT);
+        }
+        view.getHolder().setFormat(android.graphics.PixelFormat.TRANSLUCENT);
+        view.getHolder().setFixedSize(CURSOR_PLANE_PX, CURSOR_PLANE_PX);
+        view.getHolder().addCallback(new SurfaceHolder.Callback() {
+            @Override public void surfaceCreated(@NonNull SurfaceHolder h) {
+                cursorSurfaceSent = false;
+                trySendCursorSurface(h);
+            }
+            @Override public void surfaceChanged(@NonNull SurfaceHolder h, int f, int w, int hh) {
+                // Same rule as the main surface: setSurface at most once per surface lifetime.
+                trySendCursorSurface(h);
+            }
+            @Override public void surfaceDestroyed(@NonNull SurfaceHolder h) {
+                cursorSurfaceSent = false;
+                var svc = displayService;
+                if (svc == null) return;
+                // Keep the last pointer image the same way the scanout keeps its last frame. A
+                // cursor surface that really did die (the activity left the foreground, or the
+                // death path bounced it) comes back empty otherwise, and nothing repaints it: only
+                // UPDATE_CURSOR carries pixels, and a pointer that merely moves sends MOVE_CURSOR.
+                try {
+                    svc.saveFrameForSurface(true);
+                    hasSavedCursorFrame = true;
+                } catch (Exception e) {
+                    Log.w(TAG, "saveFrameForSurface(cursor) failed", e);
+                }
+                try {
+                    svc.removeSurface(true);
+                } catch (Exception e) {
+                    Log.w(TAG, "removeSurface(cursor) failed", e);
+                }
+            }
+        });
+        trySendCursorSurface(view.getHolder());
+    }
+
+    private void trySendCursorSurface(@NonNull SurfaceHolder holder) {
+        var svc = displayService;
+        if (svc == null || cursorSurfaceSent) return;
+        Surface surface = holder.getSurface();
+        if (surface == null || !surface.isValid()) return;
+        try {
+            svc.setSurface(surface, true);
+            cursorSurfaceSent = true;
+            Log.i(TAG, "cursor surface delivered");
+        } catch (IllegalArgumentException e) {
+            // Same known/benign binder reply behaviour as the main surface.
+            cursorSurfaceSent = true;
+        } catch (Exception e) {
+            Log.w(TAG, "setSurface(cursor) failed", e);
+            return;
+        }
+        if (hasSavedCursorFrame) {
+            try {
+                svc.drawSavedFrameForSurface(true);
+            } catch (Exception e) {
+                Log.w(TAG, "drawSavedFrameForSurface(cursor) failed", e);
+            }
+        }
+    }
+
     void shutdown() {
         if (displayService != null) {
             try {
@@ -222,6 +455,10 @@ void shutdown() {
             } catch (Exception ignored) {
             }
         }
+        if (cursorStream != null) {
+            cursorStream.close();
+            cursorStream = null;
+        }
         executor.shutdownNow();
         displayService = null;
         needsSend = false;
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/display/nativedisplay/display/NativeSurfaceSource.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/nativedisplay/display/NativeSurfaceSource.java
new file mode 100644
index 000000000..6a839f1b5
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/nativedisplay/display/NativeSurfaceSource.java
@@ -0,0 +1,74 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
+package cn.classfun.droidvm.ui.vm.display.nativedisplay.display;
+
+import android.os.Handler;
+import android.os.IBinder;
+import android.view.SurfaceView;
+
+import androidx.annotation.NonNull;
+
+import java.util.function.Supplier;
+
+import cn.classfun.droidvm.ui.vm.display.base.DisplaySource;
+
+/**
+ * {@link DisplaySource} for the native display path: crosvm renders straight into the
+ * SurfaceView's Surface via the per-VM ICrosvmAndroidDisplayService. Wraps {@link DisplayProvider}
+ * behind the pluggable source interface, so a future source (e.g. zero-copy AHardwareBuffer)
+ * slots into the same console. Frames start flowing as soon as the display-binder supplier can
+ * resolve the service, so {@link #start()} is a no-op. No guest-resize channel on this path yet.
+ */
+public final class NativeSurfaceSource implements DisplaySource {
+    private final DisplayProvider provider;
+
+    /**
+     * @param displayBinderSupplier resolves the per-VM display binder (blocking, called off the
+     *                              main thread); null while the daemon broker isn't attached yet.
+     */
+    public NativeSurfaceSource(@NonNull SurfaceView surfaceView, int guestWidth, int guestHeight,
+                               @NonNull Supplier<IBinder> displayBinderSupplier,
+                               @NonNull Handler mainHandler, @NonNull Callbacks callbacks) {
+        provider = new DisplayProvider(surfaceView, guestWidth, guestHeight, displayBinderSupplier,
+            connected -> mainHandler.post(() -> callbacks.onStateChanged(
+                connected ? State.CONNECTED : State.CONNECTING)),
+            config -> mainHandler.post(() -> callbacks.onContentSize(config.width, config.height)));
+    }
+
+    /**
+     * Follow the guest cursor. Positions are GUEST framebuffer coordinates, delivered on the main
+     * thread, and arrive only on this display path -- the VNC path has no such channel.
+     *
+     * The caller decides what to do with them, and in particular whether to act at all: a cursor
+     * move caused by a remote desktop session is indistinguishable here from one the user made,
+     * so gating on "the user is currently driving the pointer" belongs to the consumer.
+     */
+    @Override
+    public void setCursorView(android.view.SurfaceView cursorView) {
+        provider.setCursorView(cursorView);
+    }
+
+    @Override
+    public void setCursorListener(java.util.function.BiConsumer<Integer, Integer> listener) {
+        provider.setCursorListener(listener == null ? null : listener::accept);
+    }
+
+    @Override
+    public void start() {
+    }
+
+    @Override
+    public void shutdown() {
+        provider.shutdown();
+    }
+
+    @Override
+    public boolean supportsGuestResize() {
+        return false;
+    }
+
+    @Override
+    public void requestGuestResize(int width, int height) {
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/display/nativedisplay/display/VMNativeDisplayActivity.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/nativedisplay/display/VMNativeDisplayActivity.java
index a6209ade8..2e9c70b6e 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/display/nativedisplay/display/VMNativeDisplayActivity.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/nativedisplay/display/VMNativeDisplayActivity.java
@@ -10,16 +10,12 @@
 import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
 
 import android.annotation.SuppressLint;
-import android.content.BroadcastReceiver;
 import android.content.Context;
-import android.content.Intent;
-import android.content.IntentFilter;
+import android.graphics.RectF;
 import android.graphics.drawable.GradientDrawable;
 import android.os.Bundle;
 import android.os.Handler;
-import android.os.IBinder;
 import android.os.Looper;
-import android.os.RemoteException;
 import android.util.Base64;
 import android.util.Log;
 import android.view.KeyCharacterMap;
@@ -38,6 +34,10 @@
 import androidx.annotation.NonNull;
 import androidx.annotation.Nullable;
 import androidx.appcompat.app.AppCompatActivity;
+import androidx.core.graphics.Insets;
+import androidx.core.view.ViewCompat;
+import androidx.core.view.WindowCompat;
+import androidx.core.view.WindowInsetsCompat;
 
 import com.google.android.material.appbar.MaterialToolbar;
 import com.google.android.material.button.MaterialButton;
@@ -49,13 +49,27 @@
 
 import cn.classfun.droidvm.R;
 import cn.classfun.droidvm.display.INativeDisplayRootService;
+import cn.classfun.droidvm.DroidVMApp;
 import cn.classfun.droidvm.lib.daemon.DaemonConnection;
+import cn.classfun.droidvm.lib.daemon.ForegroundCallback;
 import cn.classfun.droidvm.lib.store.vm.NativeDisplay;
 import cn.classfun.droidvm.lib.ui.DragTouchListener;
+import cn.classfun.droidvm.lib.ui.ImeInsetsExempt;
 import cn.classfun.droidvm.lib.ui.MaterialMenu;
+import cn.classfun.droidvm.ui.vm.display.base.DaemonDisplayAttach;
+import cn.classfun.droidvm.ui.vm.display.base.DisplayChromeController;
 import cn.classfun.droidvm.ui.vm.display.base.DisplayExtraKeysPanel;
+import cn.classfun.droidvm.ui.vm.display.base.DisplayKeyboardMenuRow;
+import cn.classfun.droidvm.ui.vm.display.base.KeyboardMode;
+import cn.classfun.droidvm.ui.vm.display.base.DisplayPhysicalKeyboardView;
+import cn.classfun.droidvm.ui.vm.display.base.DisplaySource;
+import cn.classfun.droidvm.ui.vm.display.base.DisplayViewportController;
+import cn.classfun.droidvm.ui.vm.display.base.InputMode;
+import cn.classfun.droidvm.ui.vm.display.base.PointerGestureTranslator;
+import cn.classfun.droidvm.ui.vm.display.nativedisplay.input.EvdevEncoder;
 import cn.classfun.droidvm.ui.vm.display.nativedisplay.input.DirectInputSink;
 import cn.classfun.droidvm.ui.vm.display.nativedisplay.input.InputForwarder;
+import cn.classfun.droidvm.lib.perf.SystemGestureGuard;
 import cn.classfun.droidvm.ui.vm.display.nativedisplay.input.NativeExtraKeysPanel;
 import cn.classfun.droidvm.ui.vm.display.nativedisplay.input.NativeKeyboardEditText;
 import cn.classfun.droidvm.ui.vm.display.nativedisplay.input.TouchScaleCalculator;
@@ -72,13 +86,15 @@
  * The binder can't ride the daemon's TCP/JSON-RPC channel, so it arrives via a broadcast the daemon
  * sends in response to the {@code display_attach} request below.
  */
-public final class VMNativeDisplayActivity extends AppCompatActivity {
+// ImeInsetsExempt: the display area handles the IME inset itself (root insets listener below);
+// without the exemption the app-wide ImeInsetsApplier would pad the content view a second time.
+public final class VMNativeDisplayActivity extends AppCompatActivity
+    implements ImeInsetsExempt, ForegroundCallback {
     private static final String TAG = "VMNativeDisplay";
     public static final String EXTRA_VM_NAME = "vm_name";
     public static final String EXTRA_VM_ID = "vm_id";
     public static final String EXTRA_WIDTH = "display_width";
     public static final String EXTRA_HEIGHT = "display_height";
-    private static final long AUTO_HIDE_DELAY_MS = 3000;
 
     private final Handler mainHandler = new Handler(Looper.getMainLooper());
     // Converts committed IME text into key events (handles Shift for upper-case/symbols).
@@ -93,10 +109,24 @@ public final class VMNativeDisplayActivity extends AppCompatActivity {
     private TextView tvConnectingMessage;
     private FrameLayout displayContainer;
     private SurfaceView surfaceView;
+    private SurfaceView cursorView;
+
+    // Last viewport transform, mirrored so the cursor overlay can be placed without asking the
+    // controller to recompute it. Written only by onViewportChanged, read only on the main thread.
+    private float vpBaseW, vpBaseH, vpViewScale = 1f, vpOffsetX, vpOffsetY;
+
+    // True while a finger is on the container in relative-pointer mode. This is the gate for
+    // viewport follow: a cursor move from a REMOTE DESKTOP session is byte-identical to one the
+    // user made -- the position stream cannot tell them apart -- so only the input layer, which
+    // knows whether this device is currently driving, may decide to pan.
+    private boolean pointerDriveActive = false;
+    private int lastCursorX = -1;
+    private int lastCursorY = -1;
     private NativeKeyboardEditText keyboardInput;
     private FloatingActionButton fabMenu;
     private MaterialButton btnFullscreen;
     private DisplayExtraKeysPanel extraKeysPanel;
+    private DisplayPhysicalKeyboardView phyKeyboard;
 
     private String vmName = "";
     private String vmId = "";
@@ -104,37 +134,116 @@ public final class VMNativeDisplayActivity extends AppCompatActivity {
     private int guestWidth = 1280;
     private int guestHeight = 720;
 
-    private INativeDisplayRootService rootService;
-    private DisplayProvider displayProvider;
+    private DisplaySource displaySource;
     private InputForwarder inputForwarder;
     private DirectInputSink directSink;
     private NativeExtraKeysPanel nativeExtraKeys;
-    private boolean isFullscreen = false;
     private boolean connected = false;
+    // Pointer input mode, shared with the VNC path via the "display_input_mode" pref; applied to the
+    // InputForwarder so on-screen touches route to the multi-touch / mouse / tablet virtio device.
+    private InputMode inputMode = InputMode.TOUCH;
+    private static final String INPUT_PREFS = "droidvm_prefs";
+    private static final String KEY_INPUT_MODE = "display_input_mode";
+    // Chrome memory, shared with the VNC path: extra-keys on/off per typing surface + whether
+    // the physical keyboard is up.
+    private static final String KEY_KEYBOARD_MODE = "display_keyboard_mode";
+    private static final String KEY_ZONE_EXTRA = "display_keyboard_zone_extra";
+    private static final String KEY_ZONE_FNX = "display_keyboard_zone_fnx";
+    // Unified MOUSE/TABLET gesture layer (two-finger tap = right click, two-finger pan = scroll,
+    // three-finger = local zoom/pan). TOUCH mode bypasses it and stays raw multi-touch.
+    private PointerGestureTranslator gestureTranslator;
+    // Fractional remainders of relative mouse motion so slow drags aren't rounded away.
+    private float mouseRemX, mouseRemY;
+    // Last mouse right/middle-button activity: any BACK arriving shortly after is the framework's
+    // (or OEM's) right-click fallback, regardless of what source it claims - swallow it.
+    private long lastMouseButtonMs;
+    private static final long MOUSE_BACK_SUPPRESS_MS = 800;
+    // Single sources of truth for viewport geometry (fit/zoom/pan across display-area changes)
+    // and chrome visibility (fullscreen / extra keys). See the controller classes for the rules.
+    private DisplayViewportController viewport;
+    private DisplayChromeController chrome;
+    // Display areas smaller than this (e.g. landscape with a tall IME) freeze the viewport
+    // instead of re-laying it out; see DisplayViewportController.
+    private static final int MIN_AREA_DP = 96;
+    /** Screen-space breathing room kept around the guest cursor when the view follows it. */
+    private static final float CURSOR_FOLLOW_MARGIN_PX = 96f;
+    /**
+     * Where the cursor overlay goes while the guest's pointer is hidden.
+     *
+     * NOT setVisibility(GONE). A SurfaceView's Surface follows its visibility, so GONE destroys it
+     * and the app hands crosvm a removeSurface(cursor). The guest hides and re-shows the pointer
+     * all the time -- KDE drops to a software cursor whenever the hardware plane cannot keep up
+     * with a fast move, then hands the plane straight back -- and the image comes back in ONE
+     * UPDATE_CURSOR, which writes the position down the pipe and flushes the pixels in the same
+     * breath. Re-creating a Surface takes a frame plus a binder round trip, so those pixels land
+     * in the backend's sink buffer and are dropped; every later MOVE_CURSOR carries a position and
+     * no image, leaving the pointer blank until the guest happens to change its shape. Parking the
+     * view keeps the Surface alive, so the flush has somewhere to land. Far enough off-screen to
+     * be outside any panel, small enough to stay well clear of float/int overflow in the layer.
+     */
+    private static final float CURSOR_PARKED_PX = -10000f;
 
-    // Per-attach random token: we only accept the binder broadcast carrying the nonce we requested,
-    // so another app spoofing the (exported) action can't slip us a fake broker binder.
-    private final String attachNonce = UUID.randomUUID().toString();
-    private boolean binderReceiverRegistered = false;
-    private boolean rootConnected = false;
-
-    // The daemon broadcasts its broker binder here in response to our display_attach request.
-    private final BroadcastReceiver binderReceiver = new BroadcastReceiver() {
-        @Override
-        public void onReceive(Context context, Intent intent) {
-            var bundle = intent.getBundleExtra(NativeDisplay.EXTRA_BUNDLE);
-            if (bundle == null || !attachNonce.equals(bundle.getString(NativeDisplay.EXTRA_NONCE)))
-                return;
-            var binder = bundle.getBinder(NativeDisplay.EXTRA_BINDER);
-            if (binder != null) onBinderReceived(binder);
-        }
-    };
+    // Maps the unified gestures onto the crosvm --input evdev channels via InputForwarder.
+    private final PointerGestureTranslator.Listener gestureListener =
+        new PointerGestureTranslator.Listener() {
+            @Override
+            public void onRelativeMove(float dxGuest, float dyGuest) {
+                if (inputForwarder == null) return;
+                mouseRemX += dxGuest;
+                mouseRemY += dyGuest;
+                int dx = (int) mouseRemX, dy = (int) mouseRemY;
+                if (dx == 0 && dy == 0) return;
+                mouseRemX -= dx;
+                mouseRemY -= dy;
+                inputForwarder.sendMouseMove(dx, dy);
+            }
+
+            @Override
+            public void onAbsoluteMove(float xGuest, float yGuest) {
+                if (inputForwarder != null)
+                    inputForwarder.sendAbsMove(Math.round(xGuest), Math.round(yGuest));
+            }
+
+            @Override
+            public void onLeftButton(boolean down, float xGuest, float yGuest) {
+                if (inputForwarder == null) return;
+                if (inputMode == InputMode.TABLET) {
+                    inputForwarder.sendAbsLeftButton(down, Math.round(xGuest), Math.round(yGuest));
+                } else {
+                    inputForwarder.sendPointerButton(EvdevEncoder.BTN_LEFT, down);
+                }
+            }
+
+            @Override
+            public void onLeftTap(float xGuest, float yGuest) {
+                onLeftButton(true, xGuest, yGuest);
+                onLeftButton(false, xGuest, yGuest);
+            }
+
+            @Override
+            public void onRightClick(float xGuest, float yGuest) {
+                if (inputForwarder == null) return;
+                if (inputMode == InputMode.TABLET)
+                    inputForwarder.sendAbsMove(Math.round(xGuest), Math.round(yGuest));
+                inputForwarder.sendPointerButton(EvdevEncoder.BTN_RIGHT, true);
+                inputForwarder.sendPointerButton(EvdevEncoder.BTN_RIGHT, false);
+            }
+
+            @Override
+            public void onScroll(int vNotches, int hNotches) {
+                if (inputForwarder != null) inputForwarder.sendScroll(vNotches, hNotches);
+            }
+
+            @Override
+            public void onZoomPan(float scaleFactor, float dxView, float dyView,
+                                  float focusX, float focusY) {
+                if (viewport != null) viewport.onZoomPan(scaleFactor, dxView, dyView);
+            }
+        };
 
-    // Daemon died (e.g. restart): drop the broker binder so writes fall back to the vm_input IPC.
-    private final IBinder.DeathRecipient deathRecipient = () -> mainHandler.post(() -> {
-        Log.w(TAG, "daemon broker binder died");
-        rootService = null;
-    });
+    // Daemon broker binder acquisition (display_attach -> nonce-matched broadcast), shared with
+    // the VNC display path.
+    private DaemonDisplayAttach displayAttach;
 
     @Override
     protected void onCreate(@Nullable Bundle savedInstanceState) {
@@ -153,6 +262,7 @@ protected void onCreate(@Nullable Bundle savedInstanceState) {
         toolbar.setTitle(vmName.isEmpty() ? getString(R.string.native_display_title) : vmName);
         toolbar.setNavigationOnClickListener(v -> finish());
         setupViews();
+        setupLayoutControllers();
         setStatus(getString(R.string.native_display_connecting), R.color.vnc_status_connecting);
         showOverlay(getString(R.string.native_display_waiting));
 
@@ -161,52 +271,29 @@ protected void onCreate(@Nullable Bundle savedInstanceState) {
             showOverlay(getString(R.string.native_display_failed));
             return;
         }
-        // Ask the daemon (uid=0) for its broker binder. It can't ride the JSON-RPC channel, so the
-        // daemon broadcasts it back to binderReceiver (matched by attachNonce).
-        registerReceiver(binderReceiver,
-            new IntentFilter(NativeDisplay.BINDER_BROADCAST_ACTION), Context.RECEIVER_EXPORTED);
-        binderReceiverRegistered = true;
-        requestDisplayBinder(10);
-    }
-
-    // Sends display_attach; the daemon answers with a broadcast. Retries while the daemon connection
-    // is still coming up, since the Activity can open just before DaemonConnection authenticates.
-    private void requestDisplayBinder(int attemptsLeft) {
-        if (rootConnected || isFinishing()) return;
-        DaemonConnection.getInstance().buildRequest("display_attach")
-            .put("nonce", attachNonce)
-            .onError(e -> retryDisplayBinder(attemptsLeft))
-            .onUnsuccessful(r -> retryDisplayBinder(attemptsLeft))
-            .invoke();
-    }
-
-    private void retryDisplayBinder(int attemptsLeft) {
-        if (attemptsLeft <= 0) {
-            Log.w(TAG, "display_attach exhausted retries; daemon unavailable");
-            return;
-        }
-        mainHandler.postDelayed(() -> requestDisplayBinder(attemptsLeft - 1), 500);
-    }
+        displayAttach = new DaemonDisplayAttach(this, mainHandler,
+            new DaemonDisplayAttach.Listener() {
+                @Override
+                public void onAttached(@NonNull INativeDisplayRootService service) {
+                    onRootConnected(service);
+                }
 
-    private void onBinderReceived(@NonNull IBinder binder) {
-        if (rootConnected) return; // ignore duplicate broadcasts
-        rootConnected = true;
-        rootService = INativeDisplayRootService.Stub.asInterface(binder);
-        try {
-            binder.linkToDeath(deathRecipient, 0);
-        } catch (RemoteException e) {
-            Log.w(TAG, "linkToDeath failed", e);
-        }
-        onRootConnected();
+                @Override
+                public void onLost() {
+                    // DirectInputSink falls back to the vm_input RPC per write on a dead binder.
+                }
+            });
+        displayAttach.start();
     }
 
-    private void onRootConnected() {
-        if (rootService == null) return;
+    private void onRootConnected(@NonNull INativeDisplayRootService service) {
         // Try a direct unix-socket sink to the daemon (one write per evdev frame, no IPC
         // round-trip); on any failure it falls back to the vm_input JSON-RPC path below.
-        directSink = new DirectInputSink(vmId, rootService, this::sendInputToDaemon);
         inputForwarder = new InputForwarder(directSink);
         if (nativeExtraKeys != null) nativeExtraKeys.setForwarder(inputForwarder);
+        // A forwarder is built fresh on every attach and starts in TOUCH, so it has to be told
+        // the mode this session is actually in (restored in setupViews, or since changed).
+        inputForwarder.setInputMode(inputMode);
 
         // Start the VM now that listeners are up (no-op if already running).
         DaemonConnection.getInstance().buildRequest("vm_start")
@@ -217,10 +304,10 @@ private void onRootConnected() {
             .invoke();
 
         // Display binder is looked up via the root service (servicemanager) on a bg thread.
-        displayProvider = new DisplayProvider(
+        displaySource = new NativeSurfaceSource(
             surfaceView, guestWidth, guestHeight,
             () -> {
-                var svc = rootService;
+                var svc = displayAttach.getService();
                 if (svc == null) return null;
                 try {
                     return svc.waitForDisplayBinder(vmKey);
@@ -228,22 +315,40 @@ private void onRootConnected() {
                     return null;
                 }
             },
-            isConnected -> mainHandler.post(() -> onDisplayConnected(isConnected)),
-            config -> mainHandler.post(() -> {
-                guestWidth = config.width;
-                guestHeight = config.height;
-                updateAspectRatio(displayContainer.getWidth(), displayContainer.getHeight());
-            })
-        );
-    }
-
-    private void onDisplayConnected(boolean isConnected) {
-        connected = isConnected;
-        if (isConnected) {
+            mainHandler,
+            new DisplaySource.Callbacks() {
+                @Override
+                public void onContentSize(int width, int height) {
+                    guestWidth = width;
+                    guestHeight = height;
+                    viewport.setContentSize(width, height);
+                    // Keep the status-bar resolution label in step with a live resize.
+                    if (connected)
+                        setStatus(fmt(getString(R.string.native_display_connected),
+                            guestWidth, guestHeight), R.color.vnc_status_connected);
+                }
+
+                @Override
+                public void onStateChanged(@NonNull DisplaySource.State state) {
+                    onDisplayStateChanged(state);
+                }
+            });
+        // Hardware cursor: give crosvm a Surface for the guest's cursor plane and follow the
+        // positions it reports. Both are no-ops on a guest that never uses the cursor plane.
+        // This must run here, on the main thread with displaySource assigned -- it used to sit
+        // inside the binder-supplier lambda above, where the first invocation raced the field
+        // assignment on a background thread and the cursor layer was wired only by luck.
+        displaySource.setCursorView(cursorView);
+        displaySource.setCursorListener(this::onGuestCursorMoved);
+        displaySource.start();
+    }
+
+    private void onDisplayStateChanged(@NonNull DisplaySource.State state) {
+        connected = state == DisplaySource.State.CONNECTED;
+        if (connected) {
             setStatus(fmt(getString(R.string.native_display_connected), guestWidth, guestHeight),
                 R.color.vnc_status_connected);
             hideOverlay();
-            updateAspectRatio(displayContainer.getWidth(), displayContainer.getHeight());
         } else {
             setStatus(getString(R.string.native_display_connecting), R.color.vnc_status_connecting);
             showOverlay(getString(R.string.native_display_waiting));
@@ -258,24 +363,91 @@ private void bindViews() {
         overlayConnecting = findViewById(R.id.overlay_connecting);
         tvConnectingMessage = findViewById(R.id.tv_connecting_message);
         displayContainer = findViewById(R.id.display_container);
+        cursorView = findViewById(R.id.cursor_view);
+        // Visible from the start, parked off-screen: the Surface exists before the guest's first
+        // UPDATE_CURSOR, which is the only message that carries pointer pixels. Laid out GONE, the
+        // first pointer image was flushed into a Surface that did not exist yet and the pointer
+        // stayed blank until the next shape change -- the same hole the hide path used to open.
+        cursorView.setVisibility(VISIBLE);
+        parkCursorOverlay();
         surfaceView = findViewById(R.id.surface_view);
         keyboardInput = findViewById(R.id.keyboard_input);
         fabMenu = findViewById(R.id.fab_menu);
         btnFullscreen = findViewById(R.id.btn_fullscreen);
         extraKeysPanel = findViewById(R.id.extra_keys_panel);
         nativeExtraKeys = new NativeExtraKeysPanel(extraKeysPanel);
+        phyKeyboard = findViewById(R.id.phy_keyboard);
+        phyKeyboard.setKeyListener(nativeExtraKeys);
+        // The physical keyboard's Shift/Ctrl/Alt/Win mirror the panel's sticky-modifier state.
+        extraKeysPanel.setModifierStateObserver(() -> phyKeyboard.refreshModifiers(
+            extraKeysPanel.isCtrlDown(), extraKeysPanel.isAltDown(),
+            extraKeysPanel.isShiftDown(), extraKeysPanel.isWinDown()));
+        extraKeysPanel.setZoneListener(new DisplayExtraKeysPanel.ZoneListener() {
+            @Override
+            public void onToggleFnxZone() {
+                chrome.toggleFnxZone();
+            }
+
+            @Override
+            public void onShowSystemKeyboard() {
+                toggleSoftKeyboard();
+            }
+        });
+        phyKeyboard.setZoneListener(new DisplayPhysicalKeyboardView.ZoneListener() {
+            @Override
+            public void onToggleExtraZone() {
+                chrome.toggleExtraZone();
+            }
+
+            @Override
+            public void onToggleFnxZone() {
+                chrome.toggleFnxZone();
+            }
+
+            @Override
+            public void onCloseKeyboard() {
+                chrome.setKeyboardMode(KeyboardMode.NONE);
+            }
+        });
     }
 
     @SuppressLint("ClickableViewAccessibility")
     private void setupViews() {
         btnFullscreen.setOnClickListener(v -> toggleFullscreen());
+        // The container's layout size IS the display area: chrome visibility, IME and rotation
+        // all funnel into it through normal layout. The viewport handles degenerate sizes itself.
         displayContainer.addOnLayoutChangeListener((
             v, l, t, r, b, ol, ot, or2, ob
         ) -> {
             int cw = r - l, ch = b - t;
-            if (cw > 0 && ch > 0) v.post(() -> updateAspectRatio(cw, ch));
+            v.post(() -> viewport.setArea(cw, ch));
         });
         surfaceView.setOnTouchListener(this::onSurfaceTouch);
+        // MOUSE/TABLET gestures live on the container: the whole display area (letterbox included)
+        // is gesture surface; the translator pins coordinate ops to the rendered surface rect.
+        // In TOUCH mode this listener declines and raw multi-touch stays on the surface view.
+        displayContainer.setOnTouchListener(this::onContainerTouch);
+        // Host mouse/stylus: scroll wheel + right/middle buttons come as generic-motion events,
+        // hover comes as hover events; both feed the pointer device so right-click/scroll/hover
+        // pass through to the guest (tablet mode gives absolute hover).
+        surfaceView.setOnGenericMotionListener(this::onSurfaceGenericMotion);
+        // Also on the container: a right-click over the letterbox area (outside the surface) must
+        // still be consumed or the framework synthesizes BACK from it.
+        displayContainer.setOnGenericMotionListener(this::onSurfaceGenericMotion);
+        surfaceView.setOnHoverListener(this::onSurfaceHover);
+        // Restore the persisted mode here rather than on the daemon attach: the FAB menu is
+        // reachable before the binder arrives, and a menu built on a stale TOUCH would write that
+        // back over the stored mode.
+        inputMode = InputMode.fromOrdinal(
+            getSharedPreferences(INPUT_PREFS, MODE_PRIVATE).getInt(KEY_INPUT_MODE, 0));
+        gestureTranslator = new PointerGestureTranslator(mainHandler, gestureListener);
+        gestureTranslator.setAbsolute(inputMode == InputMode.TABLET);
+        // Keep the display area out of the system-gesture zones so multi-finger gestures
+        // (two-finger right-click/scroll, three-finger zoom) don't trip OEM gestures like
+        // three-finger screenshot or edge-back.
+        displayContainer.addOnLayoutChangeListener((v, l, t, r, b, ol, ot, or2, ob) ->
+            v.setSystemGestureExclusionRects(
+                java.util.Collections.singletonList(new android.graphics.Rect(0, 0, r - l, b - t))));
         keyboardInput.setTextInputListener(new NativeKeyboardEditText.TextInputListener() {
             @Override
             public void onCommitText(@NonNull CharSequence text) {
@@ -293,18 +465,26 @@ public void onDeleteSurrounding(int beforeLength, int afterLength) {
     }
 
     // Soft keyboards that commit text (instead of sending key events) land here; translate each
-    // character to its key event sequence and forward as evdev.
+    // character to its evdev key sequence and forward it. Each char is resolved on its own so one
+    // unrepresentable character can't drop the whole commit. Uppercase letters and shifted symbols
+    // go through the deterministic US-layout table (Shift synthesized around the key); anything it
+    // doesn't cover falls back to the framework key character map.
     private void forwardText(@NonNull CharSequence text) {
         if (inputForwarder == null || !connected) return;
-        KeyEvent[] events = keyCharacterMap.getEvents(text.toString().toCharArray());
-        if (events == null) return;
         // Wrap with the extra-keys panel modifiers so e.g. Ctrl+(typed key) reaches the guest.
         nativeExtraKeys.applyModifiers(true);
-        for (KeyEvent e : events) {
-            if (e.getAction() == KeyEvent.ACTION_DOWN) {
-                inputForwarder.sendKeyEvent(e.getKeyCode(), true);
-            } else if (e.getAction() == KeyEvent.ACTION_UP) {
-                inputForwarder.sendKeyEvent(e.getKeyCode(), false);
+        String s = text.toString();
+        for (int i = 0; i < s.length(); i++) {
+            char c = s.charAt(i);
+            if (inputForwarder.sendChar(c)) continue;
+            KeyEvent[] events = keyCharacterMap.getEvents(new char[]{c});
+            if (events == null) continue;
+            for (KeyEvent e : events) {
+                if (e.getAction() == KeyEvent.ACTION_DOWN) {
+                    inputForwarder.sendKeyEvent(e.getKeyCode(), true);
+                } else if (e.getAction() == KeyEvent.ACTION_UP) {
+                    inputForwarder.sendKeyEvent(e.getKeyCode(), false);
+                }
             }
         }
         nativeExtraKeys.applyModifiers(false);
@@ -318,15 +498,199 @@ private void tapKey(int keyCode) {
         nativeExtraKeys.applyModifiers(false);
     }
 
+    // TOUCH mode only: raw multi-touch stays on the surface view, which is sized to the guest
+    // aspect ratio, so offsets are zero and view coords normalize straight to the multi-touch
+    // device's fixed ABS range. (Touch coords stay in view-local space even when the three-finger
+    // zoom transform is applied - Android inverse-maps them.) MOUSE/TABLET decline here so the
+    // event bubbles up to the container.
     private boolean onSurfaceTouch(View v, MotionEvent event) {
+        if (inputMode != InputMode.TOUCH) return false;
         if (inputForwarder == null || v.getWidth() <= 0 || v.getHeight() <= 0) return false;
-        // The SurfaceView is sized to the guest aspect ratio, so offsets are zero and scale is
-        // simply guest/view per axis.
-        var tf = TouchScaleCalculator.compute(guestWidth, guestHeight, v.getWidth(), v.getHeight());
+        if (isMouseButtonTouch(event)) return true;
+        var tf = TouchScaleCalculator.compute(v.getWidth(), v.getHeight());
         inputForwarder.sendTouchEvent(event, tf.scaleX, tf.scaleY);
         return true;
     }
 
+    // MOUSE/TABLET gesture surface: the whole container is active; the translator pins gestures
+    // that carry guest coordinates to the rendered surface rect.
+    private boolean onContainerTouch(View v, MotionEvent event) {
+        if (inputMode == InputMode.TOUCH) return false;
+        if (inputForwarder == null || gestureTranslator == null) return false;
+        if (isMouseButtonTouch(event)) return true;
+        // TABLET absolute coords go to the normalized-range evdev absolute-mouse device; MOUSE
+        // REL deltas are guest px, so they scale against the guest resolution instead.
+        float unitW = inputMode == InputMode.TABLET
+            ? EvdevEncoder.NORMALIZED_ABS_MAX : guestWidth;
+        float unitH = inputMode == InputMode.TABLET
+            ? EvdevEncoder.NORMALIZED_ABS_MAX : guestHeight;
+        switch (event.getActionMasked()) {
+            case MotionEvent.ACTION_DOWN:
+                pointerDriveActive = true;
+                break;
+            case MotionEvent.ACTION_UP:
+            case MotionEvent.ACTION_CANCEL:
+                pointerDriveActive = false;
+                break;
+            default:
+                break;
+        }
+        return gestureTranslator.onTouchEvent(event, displayRectInContainer(), unitW, unitH);
+    }
+
+    /**
+     * The guest moved its hardware cursor. Places the overlay and, only while the user is actually
+     * driving the pointer with a finger in relative mode, pans a zoomed view to keep it visible.
+     *
+     * The gate is deliberately narrow. In relative mode a short drag can send the guest pointer a
+     * long way, so it can leave a zoomed viewport without the finger ever nearing the screen edge
+     * -- that is the case worth following. A remote desktop session driving the same guest cursor
+     * must NOT drag this device's view around under someone else's hand.
+     */
+    private void onGuestCursorMoved(int gx, int gy) {
+        // crosvm sends u32::MAX,MAX when the guest hides its pointer (UPDATE_CURSOR resource_id=0,
+        // which is what switching to a text console does). Without acting on it the overlay keeps
+        // showing the last cursor image on a console that should have none. A real position is a
+        // framebuffer coordinate, so this value can never be a genuine one.
+        if (gx == -1 && gy == -1) {   // u32::MAX arrives as -1 in Java's signed int
+            lastCursorX = -1;
+            lastCursorY = -1;
+            parkCursorOverlay();
+            return;
+        }
+        lastCursorX = gx;
+        lastCursorY = gy;
+        positionCursorOverlay();
+        if (pointerDriveActive && inputMode == InputMode.MOUSE && viewport != null) {
+            viewport.panToShowContentPoint(gx, gy, CURSOR_FOLLOW_MARGIN_PX);
+        }
+    }
+
+    /**
+     * Take the pointer off screen without letting go of its Surface. See {@link #CURSOR_PARKED_PX}.
+     */
+    private void parkCursorOverlay() {
+        if (cursorView == null) {
+            return;
+        }
+        cursorView.setTranslationX(CURSOR_PARKED_PX);
+        cursorView.setTranslationY(CURSOR_PARKED_PX);
+    }
+
+    /**
+     * Put the 64x64 cursor overlay where the guest says its pointer is.
+     *
+     * Same transform the scanout gets: content is centred in the container, scaled about its
+     * centre, then displaced by the pan offset. The overlay is scaled too -- the guest's cursor is
+     * in guest pixels, so at 2x zoom it has to double like everything else, or the pointer shrinks
+     * relative to what it is pointing at. Pivot goes to (0,0) so scaling grows the image away from
+     * the hotspot corner instead of around its middle.
+     */
+    private void positionCursorOverlay() {
+        if (cursorView == null || vpBaseW <= 0 || guestWidth <= 0 || guestHeight <= 0) {
+            return;
+        }
+        if (lastCursorX < 0) {
+            return; // no position yet
+        }
+        View area = (View) surfaceView.getParent();
+        if (area == null || area.getWidth() <= 0) {
+            return;
+        }
+        float vx = lastCursorX * vpBaseW / guestWidth;
+        float vy = lastCursorY * vpBaseH / guestHeight;
+        float cx = area.getWidth() / 2f + vpOffsetX + (vx - vpBaseW / 2f) * vpViewScale;
+        float cy = area.getHeight() / 2f + vpOffsetY + (vy - vpBaseH / 2f) * vpViewScale;
+        float pxPerGuestPx = (vpBaseW / (float) guestWidth) * vpViewScale;
+
+        cursorView.setPivotX(0f);
+        cursorView.setPivotY(0f);
+        cursorView.setScaleX(pxPerGuestPx);
+        cursorView.setScaleY(pxPerGuestPx);
+        cursorView.setTranslationX(cx);
+        cursorView.setTranslationY(cy);
+        if (cursorView.getVisibility() != VISIBLE) {
+            cursorView.setVisibility(VISIBLE);
+        }
+    }
+
+    // A hardware-mouse right/middle press also arrives on the touch stream (ACTION_DOWN with the
+    // button in buttonState). Those are delivered by the generic-motion handler; keep them out of
+    // the tap/gesture path (else right-click doubles as a left tap) but consume them so the
+    // framework doesn't synthesize a BACK key from an unhandled right-click.
+    private boolean isMouseButtonTouch(@NonNull MotionEvent event) {
+        if ((event.getSource() & android.view.InputDevice.SOURCE_MOUSE) != 0
+            && (event.getButtonState() & (MotionEvent.BUTTON_SECONDARY
+                | MotionEvent.BUTTON_TERTIARY | MotionEvent.BUTTON_STYLUS_PRIMARY)) != 0) {
+            lastMouseButtonMs = android.os.SystemClock.uptimeMillis();
+            return true;
+        }
+        return false;
+    }
+
+    // Where the guest frame is rendered, in container coordinates: the letterbox-fitted surface
+    // bounds mapped through the viewport's current zoom/pan transform.
+    @NonNull
+    private RectF displayRectInContainer() {
+        var rect = new RectF(0, 0, surfaceView.getWidth(), surfaceView.getHeight());
+        surfaceView.getMatrix().mapRect(rect);
+        rect.offset(surfaceView.getLeft(), surfaceView.getTop());
+        return rect;
+    }
+
+    // Host mouse/stylus scroll wheel and right/middle buttons (left stays on the touch/tap path).
+    // Button presses are ALWAYS consumed - an unhandled BUTTON_SECONDARY press is what makes the
+    // framework synthesize a BACK key, which must never fire inside the VM display.
+    private boolean onSurfaceGenericMotion(View v, MotionEvent event) {
+        switch (event.getActionMasked()) {
+            case MotionEvent.ACTION_SCROLL:
+                if (inputForwarder != null) {
+                    inputForwarder.sendScroll(
+                        Math.round(event.getAxisValue(MotionEvent.AXIS_VSCROLL)),
+                        Math.round(event.getAxisValue(MotionEvent.AXIS_HSCROLL)));
+                }
+                return true;
+            case MotionEvent.ACTION_BUTTON_PRESS:
+            case MotionEvent.ACTION_BUTTON_RELEASE: {
+                lastMouseButtonMs = android.os.SystemClock.uptimeMillis();
+                short btn = mapActionButton(event.getActionButton());
+                if (btn != 0 && inputForwarder != null) {
+                    inputForwarder.sendPointerButton(btn,
+                        event.getActionMasked() == MotionEvent.ACTION_BUTTON_PRESS);
+                }
+                return true;
+            }
+            default:
+                return false;
+        }
+    }
+
+    // Host pointer hover (no button): TABLET mode only - absolute hover on the guest tablet.
+    // MOUSE/TOUCH modes deliberately ignore Android-side hover.
+    private boolean onSurfaceHover(View v, MotionEvent event) {
+        if (inputForwarder == null || v.getWidth() <= 0 || v.getHeight() <= 0) return false;
+        if (inputMode != InputMode.TABLET) return false;
+        int action = event.getActionMasked();
+        if (action == MotionEvent.ACTION_HOVER_MOVE || action == MotionEvent.ACTION_HOVER_ENTER) {
+            var tf = TouchScaleCalculator.compute(v.getWidth(), v.getHeight());
+            inputForwarder.sendHover(event.getX(), event.getY(), tf.scaleX, tf.scaleY);
+            return true;
+        }
+        return false;
+    }
+
+    private static short mapActionButton(int actionButton) {
+        switch (actionButton) {
+            case MotionEvent.BUTTON_SECONDARY:
+            case MotionEvent.BUTTON_STYLUS_PRIMARY:
+                return EvdevEncoder.BTN_RIGHT;
+            case MotionEvent.BUTTON_TERTIARY:
+                return EvdevEncoder.BTN_MIDDLE;
+            default:
+                return 0;
+        }
+    }
+
     // Sink for InputForwarder: ships encoded evdev to the daemon, which owns the crosvm input
     // sockets and writes them to the guest. Called on the (single) InputForwarder worker thread, so
     // the synchronous request keeps events ordered and back-pressured.
@@ -347,6 +711,15 @@ private boolean sendInputToDaemon(int channel, @NonNull byte[] data) {
     @Override
     public boolean dispatchKeyEvent(@NonNull KeyEvent event) {
         int keyCode = event.getKeyCode();
+        // A hardware-mouse right-click the framework (or OEM ROM) failed to see consumed gets
+        // synthesized as a BACK key - sometimes mouse-sourced, sometimes (OEM injection) claiming
+        // a keyboard/virtual source. Swallow BACK when it's mouse-sourced OR arrives right after
+        // any mouse right/middle-button activity; the click itself already went to the guest.
+        if (keyCode == KeyEvent.KEYCODE_BACK
+            && ((event.getSource() & android.view.InputDevice.SOURCE_MOUSE) != 0
+                || android.os.SystemClock.uptimeMillis() - lastMouseButtonMs
+                    < MOUSE_BACK_SUPPRESS_MS))
+            return true;
         if (keyCode == KeyEvent.KEYCODE_VOLUME_UP || keyCode == KeyEvent.KEYCODE_VOLUME_DOWN)
             return super.dispatchKeyEvent(event);
         if (inputForwarder != null && connected) {
@@ -386,19 +759,83 @@ private static boolean isModifierKey(int keyCode) {
         }
     }
 
-    private void updateAspectRatio(int containerW, int containerH) {
-        if (containerW <= 0 || containerH <= 0 || guestWidth <= 0 || guestHeight <= 0) return;
-        float vmAspect = (float) guestWidth / guestHeight;
-        float containerAspect = (float) containerW / containerH;
-        int viewW, viewH;
-        if (vmAspect > containerAspect) {
-            viewW = containerW;
-            viewH = Math.round(containerW / vmAspect);
-        } else {
-            viewH = containerH;
-            viewW = Math.round(containerH * vmAspect);
-        }
-        surfaceView.setLayoutParams(new FrameLayout.LayoutParams(viewW, viewH, CENTER));
+    // Wires the viewport controller (single writer of the SurfaceView geometry), the chrome
+    // controller (single writer of toolbar/status bar/extra keys/system bars visibility) and the
+    // window-insets listener that turns system bars + IME into root padding, which in turn sizes
+    // the display container.
+    private void setupLayoutControllers() {
+        int minAreaPx = Math.round(MIN_AREA_DP * getResources().getDisplayMetrics().density);
+        viewport = new DisplayViewportController(minAreaPx,
+            new DisplayViewportController.Listener() {
+                @Override
+                public void onViewportChanged(int baseW, int baseH, float viewScale,
+                                              float offsetX, float offsetY) {
+                    surfaceView.setLayoutParams(new FrameLayout.LayoutParams(baseW, baseH, CENTER));
+                    surfaceView.setScaleX(viewScale);
+                    surfaceView.setScaleY(viewScale);
+                    surfaceView.setTranslationX(offsetX);
+                    surfaceView.setTranslationY(offsetY);
+                    vpBaseW = baseW;
+                    vpBaseH = baseH;
+                    vpViewScale = viewScale;
+                    vpOffsetX = offsetX;
+                    vpOffsetY = offsetY;
+                    positionCursorOverlay();
+                }
+
+                @Override
+                public void onGuestResizeWanted(int areaW, int areaH) {
+                    // Auto-resize Guest Display: no guest-side channel on this path yet.
+                }
+            });
+        viewport.setContentSize(guestWidth, guestHeight);
+
+        var inputPrefs = getSharedPreferences(INPUT_PREFS, MODE_PRIVATE);
+        chrome = new DisplayChromeController(
+            KeyboardMode.fromName(inputPrefs.getString(KEY_KEYBOARD_MODE, null)),
+            inputPrefs.getBoolean(KEY_ZONE_EXTRA, true),
+            inputPrefs.getBoolean(KEY_ZONE_FNX, false),
+            (fullscreen, mode, extraVisible, fnxVisible) -> {
+                toolbar.setVisibility(fullscreen ? GONE : VISIBLE);
+                statusBar.setVisibility(fullscreen ? GONE : VISIBLE);
+                extraKeysPanel.applyZones(
+                    extraVisible, fnxVisible, mode == KeyboardMode.SYSTEM);
+                phyKeyboard.setZoneToggleState(extraVisible, fnxVisible);
+                phyKeyboard.setVisibleAnimated(mode == KeyboardMode.LAPTOP);
+                var controller = getWindow().getInsetsController();
+                if (controller != null) {
+                    if (fullscreen) {
+                        controller.hide(WindowInsets.Type.systemBars());
+                        controller.setSystemBarsBehavior(BEHAVIOR_SHOW_TRANSIENT_BARS_BY_SWIPE);
+                    } else {
+                        controller.show(WindowInsets.Type.systemBars());
+                    }
+                }
+                // Re-request insets so the root padding (and thus the display area) updates in the
+                // same pass as the visibility changes.
+                ViewCompat.requestApplyInsets(findViewById(R.id.main));
+            });
+        chrome.setStateListener((mode, extraVisible, fnxVisible) -> inputPrefs.edit()
+            .putString(KEY_KEYBOARD_MODE, mode.name())
+            .putBoolean(KEY_ZONE_EXTRA, extraVisible)
+            .putBoolean(KEY_ZONE_FNX, fnxVisible)
+            .apply());
+        chrome.applyInitial();
+
+        View root = findViewById(R.id.main);
+        ViewCompat.setOnApplyWindowInsetsListener(root, (v, insets) -> {
+            Insets sysBars = insets.getInsets(WindowInsetsCompat.Type.systemBars());
+            Insets ime = insets.getInsets(WindowInsetsCompat.Type.ime());
+            // The Main row's shared slot follows the IME: Fn while it is up, "show IME" while
+            // it is down. The system owns that visibility, so read it rather than track it.
+            extraKeysPanel.setImeVisible(insets.isVisible(WindowInsetsCompat.Type.ime()));
+            boolean fullscreen = chrome != null && chrome.isFullscreen();
+            int top = fullscreen ? 0 : sysBars.top;
+            int bottom = Math.max(fullscreen ? 0 : sysBars.bottom, ime.bottom);
+            v.setPadding(0, top, 0, bottom);
+            return insets;
+        });
+        ViewCompat.requestApplyInsets(root);
     }
 
     private void setStatus(String text, int colorRes) {
@@ -420,69 +857,181 @@ private void hideOverlay() {
 
     private void toggleSoftKeyboard() {
         var imm = getSystemService(InputMethodManager.class);
-        if (imm != null) tryShowKeyboard(imm, 10);
+        if (imm == null) return;
+        // Post so the fab-menu popup has finished tearing down: it still owns the touch-driven
+        // focus transition synchronously after the item click, so requesting focus + showing the
+        // IME inline lands before our editor is the served view and does nothing.
+        mainHandler.post(() -> tryShowKeyboard(imm, 15));
     }
 
     // Drive a real (invisible) EditText: a SurfaceView is an unreliable IME target on some ROMs.
-    // The popup menu relinquishes window focus right before this runs, so the editor isn't yet
-    // "served" by the IMM and showSoftInput() is silently ignored (no ResultReceiver callback
-    // either). Retry on a short delay until the input connection is established; force as a last
-    // resort.
+    // showSoftInput() can return true for a view the IMM isn't serving yet and show nothing, so the
+    // success test is imm.isActive(editor), retried on a short delay until the input connection is
+    // live. The last few rounds force the IME (some ROMs ignore the implicit request).
     private void tryShowKeyboard(@NonNull InputMethodManager imm, int attemptsLeft) {
+        if (attemptsLeft <= 0 || isFinishing()) return;
+        keyboardInput.requestFocusFromTouch();
         keyboardInput.requestFocus();
-        if (imm.showSoftInput(keyboardInput, 0)) return;
-        if (attemptsLeft > 0) {
-            mainHandler.postDelayed(() -> tryShowKeyboard(imm, attemptsLeft - 1), 60);
-        }
+        int flag = attemptsLeft <= 3
+            ? InputMethodManager.SHOW_FORCED : InputMethodManager.SHOW_IMPLICIT;
+        imm.showSoftInput(keyboardInput, flag);
+        if (keyboardInput.isFocused() && imm.isActive(keyboardInput)) return;
+        mainHandler.postDelayed(() -> tryShowKeyboard(imm, attemptsLeft - 1), 60);
     }
 
     private void toggleFullscreen() {
-        isFullscreen = !isFullscreen;
-        var controller = getWindow().getInsetsController();
-        if (controller == null) return;
-        if (isFullscreen) {
-            toolbar.setVisibility(GONE);
-            statusBar.setVisibility(GONE);
-            extraKeysPanel.setVisibility(GONE);
-            controller.hide(WindowInsets.Type.systemBars());
-            controller.setSystemBarsBehavior(BEHAVIOR_SHOW_TRANSIENT_BARS_BY_SWIPE);
-        } else {
-            toolbar.setVisibility(VISIBLE);
-            statusBar.setVisibility(VISIBLE);
-            extraKeysPanel.animateIn();
-            controller.show(WindowInsets.Type.systemBars());
-        }
+        chrome.toggleFullscreen();
     }
 
     private void showFabMenu() {
         var popup = new MaterialMenu(this, fabMenu);
         popup.inflate(R.menu.menu_native_display_menu);
+        var header = new LinearLayout(this);
+        header.setOrientation(LinearLayout.VERTICAL);
+        header.addView(buildInputModeHeader(popup));
+        header.addView(DisplayKeyboardMenuRow.build(
+            getLayoutInflater(), chrome.getKeyboardMode(), this::applyKeyboardMode,
+            popup::dismiss));
+        popup.setHeaderView(header);
         popup.setOnMenuItemClickListener(this::onMenuItemClicked);
         popup.show();
     }
 
+    // Menu header: one row of three icon buttons (touch / tablet / mouse), active mode checked.
+    private View buildInputModeHeader(MaterialMenu popup) {
+        var group = (com.google.android.material.button.MaterialButtonToggleGroup)
+            getLayoutInflater().inflate(R.layout.view_input_mode_toggle, null);
+        group.check(inputMode == InputMode.MOUSE ? R.id.mode_mouse
+            : inputMode == InputMode.TABLET ? R.id.mode_tablet : R.id.mode_touch);
+        group.addOnButtonCheckedListener((g, checkedId, isChecked) -> {
+            if (!isChecked) return;
+            setInputModeTo(checkedId == R.id.mode_mouse ? InputMode.MOUSE
+                : checkedId == R.id.mode_tablet ? InputMode.TABLET : InputMode.TOUCH);
+            popup.dismiss();
+        });
+        return group;
+    }
+
+    // Selecting the system keyboard summons the IME; anything else puts it away, so the mode
+    // and what is actually on screen agree.
+    private void applyKeyboardMode(@NonNull KeyboardMode mode) {
+        chrome.setKeyboardMode(mode);
+        if (mode == KeyboardMode.SYSTEM) toggleSoftKeyboard();
+        else hideSoftKeyboard();
+    }
+
+    // Dropping the editor's focus first matters: it is what the IME is attached to, and some
+    // ROMs re-show the keyboard for a still-focused editor right after a hide request.
+    private void hideSoftKeyboard() {
+        keyboardInput.clearFocus();
+        var controller = WindowCompat.getInsetsController(getWindow(), keyboardInput);
+        controller.hide(WindowInsetsCompat.Type.ime());
+        var imm = getSystemService(InputMethodManager.class);
+        if (imm != null)
+            imm.hideSoftInputFromWindow(findViewById(R.id.main).getWindowToken(), 0);
+    }
+
     private boolean onMenuItemClicked(@NonNull MenuItem item) {
         int id = item.getItemId();
-        if (id == R.id.menu_keyboard) {
-            toggleSoftKeyboard();
-            return true;
-        } else if (id == R.id.menu_extra_keys) {
-            extraKeysPanel.setVisibleAnimated(extraKeysPanel.getVisibility() != VISIBLE);
-            return true;
-        } else if (id == R.id.menu_fullscreen) {
+        if (id == R.id.menu_fullscreen) {
             toggleFullscreen();
             return true;
+        } else if (id == R.id.menu_rotate) {
+            toggleOrientation();
+            return true;
         }
         return false;
     }
 
+    // Select TOUCH/MOUSE/TABLET: persist (shared with VNC) and route the InputForwarder + gesture
+    // translator to the matching virtio-input device. The segmented header shows the active mode.
+    private void setInputModeTo(@NonNull InputMode mode) {
+        if (inputMode == mode) return;
+        inputMode = mode;
+        getSharedPreferences(INPUT_PREFS, MODE_PRIVATE).edit()
+            .putInt(KEY_INPUT_MODE, inputMode.ordinal()).apply();
+        if (inputForwarder != null) inputForwarder.setInputMode(inputMode);
+        if (gestureTranslator != null) {
+            gestureTranslator.setAbsolute(inputMode == InputMode.TABLET);
+            gestureTranslator.reset();
+        }
+    }
+
+    private void toggleOrientation() {
+        boolean landscape = getResources().getConfiguration().orientation
+            == android.content.res.Configuration.ORIENTATION_LANDSCAPE;
+        setRequestedOrientation(landscape
+            ? android.content.pm.ActivityInfo.SCREEN_ORIENTATION_PORTRAIT
+            : android.content.pm.ActivityInfo.SCREEN_ORIENTATION_LANDSCAPE);
+    }
+
+    /**
+     * Registry key for the VM-event callback, unique per instance.
+     *
+     * Not the tag: this activity is recreated (the orientation flip on entry does it), and the
+     * incoming instance's onStart() runs before the outgoing one's onStop() -- so a key shared by
+     * both has the one leaving unregister the one arriving, and the console then never hears that
+     * its VM exited.
+     */
+    private final String eventKey =
+        fmt("%s@%s", TAG, Integer.toHexString(System.identityHashCode(this)));
+
+    @Override
+    protected void onStart() {
+        super.onStart();
+        var handler = ((DroidVMApp) getApplication()).getVMEventHandler();
+        if (handler != null) handler.addForegroundCallback(eventKey, this);
+    }
+
+    @Override
+    protected void onStop() {
+        super.onStop();
+        var handler = ((DroidVMApp) getApplication()).getVMEventHandler();
+        if (handler != null) handler.removeForegroundCallback(eventKey);
+    }
+
+    /**
+     * The VM this console is attached to has gone. Close with it: what is left otherwise is a
+     * console that cannot reconnect, retrying a display service that will never be registered
+     * again (which used to cost the daemon dearly -- see NativeDisplayBinder).
+     *
+     * This is the exit event, not the absence of a crosvm process, and the difference is the
+     * point: a VM waiting for the huge-page reserve -- after a start, or between a guest reboot
+     * and its relaunch -- has no process either, and must not be mistaken for one that is gone.
+     * The daemon fires "rebooting" for that case and holds the exit event back until the VM
+     * really is not coming back, so there is nothing to second-guess here.
+     *
+     * A VM that crashed is the one case worth staying open for. VMEventHandler answers a non-zero
+     * exit by putting up the exit dialog -- the tail of the log, and a way into the full one --
+     * on whatever activity is in front, and closing that activity out from under it would take
+     * the explanation with it. So the console holds; the user closes it after reading. The toast
+     * is that handler's job either way, so there is none here.
+     */
+    @Override
+    public void onVMExited(UUID id, String vmName, int exitCode, JSONObject data) {
+        if (id == null || !id.toString().equals(vmId)) return;
+        if (exitCode != 0) {
+            Log.i(TAG, fmt("VM exited with %d -- keeping the console up for the exit dialog",
+                exitCode));
+            return;
+        }
+        mainHandler.post(() -> {
+            if (isFinishing()) return;
+            Log.i(TAG, "VM stopped; closing the display");
+            finish();
+        });
+    }
+
+        // And keep the host's full-screen touch gestures (OEM three-finger screenshot etc.)
+        // from eating multi-finger input meant for the guest (see SystemGestureGuard).
+        SystemGestureGuard.enterDisplay();
+        SystemGestureGuard.exitDisplay();
     @Override
     protected void onDestroy() {
         super.onDestroy();
-        extraKeysPanel.stopKeyRepeat();
-        if (displayProvider != null) {
-            displayProvider.shutdown();
-            displayProvider = null;
+        if (displaySource != null) {
+            displaySource.shutdown();
+            displaySource = null;
         }
         if (inputForwarder != null) {
             inputForwarder.close();
@@ -492,20 +1041,10 @@ protected void onDestroy() {
             directSink.close();
             directSink = null;
         }
-        if (binderReceiverRegistered) {
-            try {
-                unregisterReceiver(binderReceiver);
-            } catch (Exception ignored) {
-            }
-            binderReceiverRegistered = false;
-        }
-        if (rootService != null) {
-            try {
-                rootService.asBinder().unlinkToDeath(deathRecipient, 0);
-            } catch (Exception ignored) {
-            }
+        if (displayAttach != null) {
+            displayAttach.stop();
+            displayAttach = null;
         }
-        rootService = null;
     }
 
     @NonNull
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/display/nativedisplay/input/EvdevEncoder.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/nativedisplay/input/EvdevEncoder.java
index 9f3d6bc5c..f43cb89dc 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/display/nativedisplay/input/EvdevEncoder.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/nativedisplay/input/EvdevEncoder.java
@@ -41,10 +41,32 @@ public final class EvdevEncoder {
     private static final short ABS_MT_POSITION_Y = 0x36;
     private static final short ABS_MT_TRACKING_ID = 0x39;
 
+    /**
+     * Fixed ABS_X/ABS_Y (and ABS_MT_POSITION_X/Y) maximum the guest absolute-mouse / multi-touch
+     * devices advertise when the daemon omits an explicit resolution ({@code --input
+     * absolute-mouse}/{@code multi-touch} with no width/height). View coordinates are scaled to this
+     * range against the on-screen view size, so the guest maps them 1:1 to its screen at any
+     * resolution -- resolution-independent and auto-resize-proof. MUST equal crosvm's
+     * {@code NORMALIZED_ABS_MAX} (config.rs) and {@code VNC_ABS_MAX} (gpu_display_vnc.rs).
+     */
+    public static final int NORMALIZED_ABS_MAX = 0x7FFF;
+
     private static final short BTN_TOUCH = 0x14a;
 
+    // Relative mouse (InputMode.MOUSE).
+    private static final short EV_REL = 0x02;
+    private static final short REL_X = 0x00;
+    private static final short REL_Y = 0x01;
+    private static final short REL_WHEEL = 0x08;
+    private static final short REL_HWHEEL = 0x06;
+    public static final short BTN_LEFT = 0x110;
+    public static final short BTN_RIGHT = 0x111;
+    public static final short BTN_MIDDLE = 0x112;
+
     /** Live Android pointer id -> evdev MT slot. Touched only on the worker thread. */
     private final Map<Integer, Integer> pointerSlots = new HashMap<>();
+    /** Last guest-space position sent per live pointer id, for the keepalive re-send. */
+    private final Map<Integer, int[]> pointerPos = new HashMap<>();
 
     public EvdevEncoder() {
     }
@@ -86,6 +108,93 @@ public static byte[] encodeKey(short scanCode, boolean down) {
         return encode(events);
     }
 
+    /** Relative pointer motion for {@code InputMode.MOUSE}; null if there is no movement. */
+    @Nullable
+    public static byte[] encodeMouseMove(int dx, int dy) {
+        if (dx == 0 && dy == 0) return null;
+        var events = new ArrayList<Event>(3);
+        if (dx != 0) events.add(new Event(EV_REL, REL_X, dx));
+        if (dy != 0) events.add(new Event(EV_REL, REL_Y, dy));
+        events.add(new Event(EV_SYN, SYN_REPORT, 0));
+        return encode(events);
+    }
+
+    /** Mouse button ({@link #BTN_LEFT}/{@link #BTN_RIGHT}/{@link #BTN_MIDDLE}) press or release. */
+    @NonNull
+    public static byte[] encodeMouseButton(short button, boolean down) {
+        var events = new ArrayList<Event>(2);
+        events.add(new Event(EV_KEY, button, down ? 1 : 0));
+        events.add(new Event(EV_SYN, SYN_REPORT, 0));
+        return encode(events);
+    }
+
+    /** Scroll wheel: vertical (REL_WHEEL, +up/-down) and horizontal (REL_HWHEEL) notches; null if 0. */
+    @Nullable
+    public static byte[] encodeMouseWheel(int vNotches, int hNotches) {
+        if (vNotches == 0 && hNotches == 0) return null;
+        var events = new ArrayList<Event>(3);
+        if (vNotches != 0) events.add(new Event(EV_REL, REL_WHEEL, vNotches));
+        if (hNotches != 0) events.add(new Event(EV_REL, REL_HWHEEL, hNotches));
+        events.add(new Event(EV_SYN, SYN_REPORT, 0));
+        return encode(events);
+    }
+
+    /**
+     * Absolute-mouse "tablet" ({@code InputMode.TABLET}): the primary pointer mapped onto the guest
+     * absolute mouse's ABS_X/ABS_Y, with BTN_LEFT for the touch/click. Because the guest device is an
+     * absolute pointer (qemu usb-tablet), not a BTN_TOUCH touchscreen, the same device also carries
+     * hover ({@link #encodeAbsMove}), right/middle click ({@link #encodeMouseButton}) and scroll
+     * ({@link #encodeMouseWheel}). ABS range must equal the guest resolution
+     * ({@code --input absolute-mouse[width=guestW,height=guestH]}).
+     *
+     * @param scaleX guestWidth / viewWidth
+     * @param scaleY guestHeight / viewHeight
+     */
+    @Nullable
+    public byte[] encodeTablet(@NonNull MotionEvent event, float scaleX, float scaleY) {
+        int x = (int) (event.getX() * scaleX);
+        int y = (int) (event.getY() * scaleY);
+        switch (event.getActionMasked()) {
+            case MotionEvent.ACTION_DOWN: {
+                var events = new ArrayList<Event>(4);
+                events.add(new Event(EV_ABS, ABS_X, x));
+                events.add(new Event(EV_ABS, ABS_Y, y));
+                events.add(new Event(EV_KEY, BTN_LEFT, 1));
+                events.add(new Event(EV_SYN, SYN_REPORT, 0));
+                return encode(events);
+            }
+            case MotionEvent.ACTION_MOVE: {
+                var events = new ArrayList<Event>(3);
+                events.add(new Event(EV_ABS, ABS_X, x));
+                events.add(new Event(EV_ABS, ABS_Y, y));
+                events.add(new Event(EV_SYN, SYN_REPORT, 0));
+                return encode(events);
+            }
+            case MotionEvent.ACTION_UP:
+            case MotionEvent.ACTION_CANCEL: {
+                var events = new ArrayList<Event>(2);
+                events.add(new Event(EV_KEY, BTN_LEFT, 0));
+                events.add(new Event(EV_SYN, SYN_REPORT, 0));
+                return encode(events);
+            }
+            default:
+                return null;
+        }
+    }
+
+    /**
+     * Absolute pointer position with no button held (hover) for the absolute-mouse/tablet device.
+     * Coordinates are already in guest space.
+     */
+    @NonNull
+    public static byte[] encodeAbsMove(int x, int y) {
+        var events = new ArrayList<Event>(3);
+        events.add(new Event(EV_ABS, ABS_X, x));
+        events.add(new Event(EV_ABS, ABS_Y, y));
+        events.add(new Event(EV_SYN, SYN_REPORT, 0));
+        return encode(events);
+    }
+
     /**
      * Encodes a touch {@link MotionEvent} into multi-touch evdev records, or null if there is
      * nothing to send. The multi-touch device's ABS range must equal the guest resolution passed
@@ -106,6 +215,7 @@ public byte[] encodeTouch(@NonNull MotionEvent event, float scaleX, float scaleY
                     if (slot == null) continue; // no DOWN seen for this pointer; ignore
                     int x = (int) (event.getX(i) * scaleX);
                     int y = (int) (event.getY(i) * scaleY);
+                    pointerPos.put(id, new int[]{x, y});
                     events.add(new Event(EV_ABS, ABS_MT_SLOT, slot));
                     events.add(new Event(EV_ABS, ABS_MT_POSITION_X, x));
                     events.add(new Event(EV_ABS, ABS_MT_POSITION_Y, y));
@@ -125,6 +235,7 @@ public byte[] encodeTouch(@NonNull MotionEvent event, float scaleX, float scaleY
                 int slot = allocSlot(id);
                 int x = (int) (event.getX(idx) * scaleX);
                 int y = (int) (event.getY(idx) * scaleY);
+                pointerPos.put(id, new int[]{x, y});
                 var events = new ArrayList<Event>(8);
                 // Only the first contact toggles BTN_TOUCH; further fingers must not re-assert it.
                 if (pointerSlots.size() == 1)
@@ -145,6 +256,7 @@ public byte[] encodeTouch(@NonNull MotionEvent event, float scaleX, float scaleY
                 int id = event.getPointerId(event.getActionIndex());
                 Integer slot = pointerSlots.remove(id);
                 if (slot == null) return null;
+                pointerPos.remove(id);
                 var events = new ArrayList<Event>(4);
                 events.add(new Event(EV_ABS, ABS_MT_SLOT, slot));
                 events.add(new Event(EV_ABS, ABS_MT_TRACKING_ID, -1));
@@ -163,6 +275,7 @@ public byte[] encodeTouch(@NonNull MotionEvent event, float scaleX, float scaleY
                     events.add(new Event(EV_ABS, ABS_MT_TRACKING_ID, -1));
                 }
                 pointerSlots.clear();
+                pointerPos.clear();
                 events.add(new Event(EV_KEY, BTN_TOUCH, 0));
                 events.add(new Event(EV_SYN, SYN_REPORT, 0));
                 return encode(events);
@@ -172,6 +285,39 @@ public byte[] encodeTouch(@NonNull MotionEvent event, float scaleX, float scaleY
         }
     }
 
+    /** Whether any touch contact is currently down (keepalive needed while true). */
+    public boolean hasTouchContacts() {
+        return !pointerSlots.isEmpty();
+    }
+
+    /**
+     * Re-sends every live contact at its last position, or null if there are no contacts. Real
+     * touch hardware reports at scan rate for as long as a finger is on the glass, even when
+     * nothing changes, and guests rely on that: the Windows touch stack ages out a contact whose
+     * reports stop (a stationary finger otherwise reads as a lift, then its next micro-movement
+     * as a fresh touchdown). This frame is what a quiet scan cycle would have produced.
+     */
+    @Nullable
+    public byte[] encodeTouchKeepalive() {
+        if (pointerSlots.isEmpty()) return null;
+        var events = new ArrayList<Event>(pointerSlots.size() * 3 + 3);
+        for (var entry : pointerSlots.entrySet()) {
+            int[] pos = pointerPos.get(entry.getKey());
+            if (pos == null) continue;
+            int slot = entry.getValue();
+            events.add(new Event(EV_ABS, ABS_MT_SLOT, slot));
+            events.add(new Event(EV_ABS, ABS_MT_POSITION_X, pos[0]));
+            events.add(new Event(EV_ABS, ABS_MT_POSITION_Y, pos[1]));
+            if (slot == 0) {
+                events.add(new Event(EV_ABS, ABS_X, pos[0]));
+                events.add(new Event(EV_ABS, ABS_Y, pos[1]));
+            }
+        }
+        if (events.isEmpty()) return null;
+        events.add(new Event(EV_SYN, SYN_REPORT, 0));
+        return encode(events);
+    }
+
     /** Maps a pointer id to a stable slot, allocating the lowest free slot index if new. */
     private int allocSlot(int pointerId) {
         Integer existing = pointerSlots.get(pointerId);
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/display/nativedisplay/input/InputForwarder.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/nativedisplay/input/InputForwarder.java
index ef001df42..9b4c8f5db 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/display/nativedisplay/input/InputForwarder.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/nativedisplay/input/InputForwarder.java
@@ -4,17 +4,21 @@
 package cn.classfun.droidvm.ui.vm.display.nativedisplay.input;
 
 import static cn.classfun.droidvm.lib.store.vm.NativeDisplay.KEYBOARD;
+import static cn.classfun.droidvm.lib.store.vm.NativeDisplay.MOUSE;
 import static cn.classfun.droidvm.lib.store.vm.NativeDisplay.MULTITOUCH;
+import static cn.classfun.droidvm.lib.store.vm.NativeDisplay.TABLET;
 import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
 
-import android.os.SystemClock;
+import cn.classfun.droidvm.ui.vm.display.base.InputMode;
+
 import android.util.Log;
 import android.view.MotionEvent;
 
 import androidx.annotation.NonNull;
 
-import java.util.concurrent.ExecutorService;
 import java.util.concurrent.Executors;
+import java.util.concurrent.ScheduledExecutorService;
+import java.util.concurrent.TimeUnit;
 import java.util.concurrent.atomic.AtomicReference;
 
 /**
@@ -24,10 +28,14 @@
  * serialized on one background thread; MotionEvents are copied first because the framework recycles
  * the originals.
  *
- * ACTION_MOVE is coalesced: the synchronous per-event IPC round-trip is far slower than the touch
- * sample rate, so unbounded moves would pile up in the worker queue and the on-screen pointer would
- * fall seconds behind the finger. Only the newest pending move is kept; discrete DOWN/UP/POINTER_*
- * events are never dropped and stay ordered. MVP scope: touch + keyboard.
+ * Pointer motion is coalesced: the synchronous per-event IPC round-trip is far slower than the
+ * touch sample rate, so unbounded moves would pile up in the worker queue and the on-screen pointer
+ * would fall seconds behind the finger. Each motion stream keeps one pending slot with at most one
+ * drain task in the queue: touch ACTION_MOVE keeps the newest frame, relative mouse deltas sum up
+ * (a sum of deltas is one correct larger delta), tablet/hover positions keep the newest position.
+ * Discrete events (buttons, wheel, DOWN/UP) are never dropped. FIFO keeps a discrete event behind
+ * all motion submitted before it; motion submitted after it may fold into an older pending slot
+ * and arrive up to one frame early, the same tradeoff the touch path already makes.
  */
 public final class InputForwarder {
     private static final String TAG = "InputForwarder";
@@ -40,15 +48,43 @@ public interface InputSink {
     private final InputSink sink;
     // Stateful touch encoder (pointer-id -> slot, contact count); single-threaded on the worker.
     private final EvdevEncoder encoder = new EvdevEncoder();
-    private final ExecutorService worker = Executors.newSingleThreadExecutor(r -> {
+
+    // Current pointer mode; set from the UI thread, read on the worker. Volatile suffices: a change
+    // just takes effect on the next event. TOUCH -> multi-touch, MOUSE -> relative, TABLET -> single.
+    private volatile InputMode inputMode = InputMode.TOUCH;
+    // Mouse-mode gesture state (InputMode.MOUSE); touched only on the worker thread.
+    private float mouseLastX, mouseLastY, mouseDownX, mouseDownY;
+    private long mouseDownTime;
+    private boolean mouseDragging;
+    private static final float MOUSE_TAP_SLOP = 16f;   // guest px of travel before a press is a drag
+    private static final long MOUSE_TAP_MS = 250;      // max press duration still treated as a tap
+    // Touch keepalive period. Real touch hardware reports at scan rate while a finger is on the
+    // glass; the Windows touch stack ages out a contact whose reports stop, so a stationary finger
+    // (Android sends MOVE only on change) reads as lift + fresh touchdown on its next twitch. Well
+    // under any plausible aging threshold (real digitizers scan at 60Hz+), still only ~20 frames/s.
+    private static final long TOUCH_KEEPALIVE_MS = 50;
+    private final ScheduledExecutorService worker = Executors.newSingleThreadScheduledExecutor(r -> {
         var t = new Thread(r, "InputForwarder");
         t.setDaemon(true);
         return t;
     });
+    // Whether a keepalive tick is scheduled; touched only on the worker thread.
+    private boolean keepaliveScheduled;
 
     // Newest pending ACTION_MOVE, coalesced so a fast finger can't outrun the synchronous IPC.
     private final AtomicReference<TouchFrame> pendingMove = new AtomicReference<>();
 
+    // Pending-motion slots for the MOUSE/TABLET gesture paths, guarded by motionLock. Each slot
+    // has at most one drain task in the worker queue (the *Pending flag); producers on the UI
+    // thread fold into the slot while a drain is queued instead of submitting more tasks.
+    private final Object motionLock = new Object();
+    private int pendMouseDx, pendMouseDy;   // relative mouse motion, summed (guest px)
+    private boolean mouseMovePending;
+    private int pendAbsX, pendAbsY;         // tablet absolute position, newest wins (guest px)
+    private boolean absMovePending;
+    private int pendHoverX, pendHoverY;     // hover position, newest wins (guest px)
+    private boolean hoverPending;
+
     private static final class TouchFrame {
         final MotionEvent event;
         final float scaleX;
@@ -65,6 +101,142 @@ public InputForwarder(@NonNull InputSink sink) {
         this.sink = sink;
     }
 
+    /** Switches pointer mode at runtime; takes effect on the next touch event. */
+    public void setInputMode(@NonNull InputMode mode) {
+        this.inputMode = mode;
+    }
+
+    /** The guest pointer device the current mode routes host mouse/stylus events to. */
+    private int pointerChannel() {
+        return inputMode == InputMode.TABLET ? TABLET : MOUSE;
+    }
+
+    /**
+     * A pointer button ({@link EvdevEncoder#BTN_RIGHT}/{@link EvdevEncoder#BTN_MIDDLE}) press/release
+     * from a host mouse or stylus. Left-click still rides the touch/tap path. Routed to the tablet
+     * (absolute mouse) in TABLET mode, otherwise the relative mouse.
+     */
+    public void sendPointerButton(short button, boolean down) {
+        submit("pointerButton", () -> sink.write(pointerChannel(),
+            EvdevEncoder.encodeMouseButton(button, down)));
+    }
+
+    /**
+     * Relative cursor motion (guest px) on the relative-mouse device; the guest renders the cursor.
+     * Deltas are summed into the pending slot, so any number of calls between two worker turns
+     * still costs one IPC round-trip and the pointer can't fall behind the finger.
+     */
+    public void sendMouseMove(int dxGuest, int dyGuest) {
+        if (dxGuest == 0 && dyGuest == 0) return;
+        boolean schedule;
+        synchronized (motionLock) {
+            pendMouseDx += dxGuest;
+            pendMouseDy += dyGuest;
+            schedule = !mouseMovePending;
+            mouseMovePending = true;
+        }
+        if (schedule) submit("mouseMove", this::drainMouseMove);
+    }
+
+    /** Absolute pointer position (guest px, no button change) on the tablet device; newest wins. */
+    public void sendAbsMove(int xGuest, int yGuest) {
+        boolean schedule;
+        synchronized (motionLock) {
+            pendAbsX = xGuest;
+            pendAbsY = yGuest;
+            schedule = !absMovePending;
+            absMovePending = true;
+        }
+        if (schedule) submit("absMove", this::drainAbsMove);
+    }
+
+    /** Left button on the tablet device, positioned first so the press lands at (x, y) guest px. */
+    public void sendAbsLeftButton(boolean down, int xGuest, int yGuest) {
+        submit("absLeft", () -> {
+            sink.write(TABLET, EvdevEncoder.encodeAbsMove(xGuest, yGuest));
+            sink.write(TABLET, EvdevEncoder.encodeMouseButton(EvdevEncoder.BTN_LEFT, down));
+        });
+    }
+
+    /** Host scroll wheel (vertical, horizontal notches) routed to the active pointer device. */
+    public void sendScroll(int vNotches, int hNotches) {
+        submit("scroll", () -> {
+            byte[] data = EvdevEncoder.encodeMouseWheel(vNotches, hNotches);
+            if (data != null) sink.write(pointerChannel(), data);
+        });
+    }
+
+    /**
+     * Host pointer hover (no button held). In TABLET mode it becomes an absolute position on the
+     * guest tablet (native hover); otherwise a relative delta so the guest mouse cursor follows.
+     * Coordinates are view pixels; scale maps them to guest space.
+     */
+    public void sendHover(float viewX, float viewY, float scaleX, float scaleY) {
+        int gx = (int) (viewX * scaleX);
+        int gy = (int) (viewY * scaleY);
+        boolean schedule;
+        synchronized (motionLock) {
+            pendHoverX = gx;
+            pendHoverY = gy;
+            schedule = !hoverPending;
+            hoverPending = true;
+        }
+        if (schedule) submit("hover", this::drainHover);
+    }
+
+    // The drains below run on the worker thread only. Between a drain's read-and-clear and its
+    // sink.write, a producer may refill the slot and queue the next drain task; nothing is lost
+    // and the queue still holds at most one task per stream.
+
+    private void drainMouseMove() {
+        int dx, dy;
+        synchronized (motionLock) {
+            dx = pendMouseDx;
+            dy = pendMouseDy;
+            pendMouseDx = 0;
+            pendMouseDy = 0;
+            mouseMovePending = false;
+        }
+        // dx/dy may legitimately sum to zero (back-and-forth motion); encode returns null then.
+        byte[] data = EvdevEncoder.encodeMouseMove(dx, dy);
+        if (data != null) sink.write(MOUSE, data);
+    }
+
+    private void drainAbsMove() {
+        int x, y;
+        boolean had;
+        synchronized (motionLock) {
+            had = absMovePending;
+            x = pendAbsX;
+            y = pendAbsY;
+            absMovePending = false;
+        }
+        if (!had) return;
+        sink.write(TABLET, EvdevEncoder.encodeAbsMove(x, y));
+    }
+
+    private void drainHover() {
+        int gx, gy;
+        boolean had;
+        synchronized (motionLock) {
+            had = hoverPending;
+            gx = pendHoverX;
+            gy = pendHoverY;
+            hoverPending = false;
+        }
+        if (!had) return;
+        if (inputMode == InputMode.TABLET) {
+            sink.write(TABLET, EvdevEncoder.encodeAbsMove(gx, gy));
+        } else {
+            int dx = Math.round(gx - mouseLastX);
+            int dy = Math.round(gy - mouseLastY);
+            mouseLastX = gx;
+            mouseLastY = gy;
+            byte[] data = EvdevEncoder.encodeMouseMove(dx, dy);
+            if (data != null) sink.write(MOUSE, data);
+        }
+    }
+
     private void submit(@NonNull String name, @NonNull Runnable block) {
         try {
             worker.execute(() -> {
@@ -107,29 +279,100 @@ private void drainMove() {
     }
 
     private void sendTouchNow(@NonNull MotionEvent event, float scaleX, float scaleY) {
-        // eventTime is on the SystemClock.uptimeMillis() timebase, so the diff below is the full
-        // finger-to-sink latency (kernel input -> framework dispatch -> our worker -> sink). Read it
-        // before recycle() since the framework reuses the MotionEvent afterwards.
-        long eventTimeMs = event.getEventTime();
-        byte[] data;
         try {
-            data = encoder.encodeTouch(event, scaleX, scaleY);
+            switch (inputMode) {
+                case MOUSE:
+                    sendMouseNow(event, scaleX, scaleY);
+                    break;
+                case TABLET: {
+                    byte[] data = encoder.encodeTablet(event, scaleX, scaleY);
+                    if (data != null) sink.write(TABLET, data);
+                    break;
+                }
+                case TOUCH:
+                default: {
+                    byte[] data = encoder.encodeTouch(event, scaleX, scaleY);
+                    if (data != null) sink.write(MULTITOUCH, data);
+                    scheduleTouchKeepalive();
+                    break;
+                }
+            }
         } catch (Exception e) {
-            Log.e(TAG, "encode touch failed", e);
-            return;
+            Log.e(TAG, "encode/send pointer failed", e);
         } finally {
             event.recycle();
         }
-        if (data == null) return; // nothing to send for this event
-        long sinkStartNs = System.nanoTime();
-        boolean ok = sink.write(MULTITOUCH, data);
-        double sinkMs = (System.nanoTime() - sinkStartNs) / 1_000_000.0;
-        long e2eMs = SystemClock.uptimeMillis() - eventTimeMs;
-        // direct=false means the write fell back to the vm_input JSON-RPC IPC path (~40ms) instead
-        // of the direct unix socket (<1ms) - i.e. the UI couldn't reach the daemon's UI input socket.
-        boolean direct = sink instanceof DirectInputSink && ((DirectInputSink) sink).wasLastWriteDirect();
-        Log.d(TAG, fmt("touch latency: sink=%.2fms e2e=%dms direct=%b delivered=%b",
-            sinkMs, e2eMs, direct, ok));
+    }
+
+    // Worker thread only. One tick in flight at a time; the chain ends itself when the last
+    // contact lifts (encodeTouchKeepalive returns null) or the mode leaves TOUCH, and any touch
+    // event while contacts are down restarts it.
+    private void scheduleTouchKeepalive() {
+        if (keepaliveScheduled || !encoder.hasTouchContacts()) return;
+        keepaliveScheduled = true;
+        try {
+            worker.schedule(this::touchKeepaliveTick, TOUCH_KEEPALIVE_MS, TimeUnit.MILLISECONDS);
+        } catch (Exception e) {
+            keepaliveScheduled = false;
+        }
+    }
+
+    private void touchKeepaliveTick() {
+        keepaliveScheduled = false;
+        try {
+            if (inputMode != InputMode.TOUCH) return;
+            byte[] data = encoder.encodeTouchKeepalive();
+            if (data == null) return;
+            sink.write(MULTITOUCH, data);
+        } catch (Exception e) {
+            Log.e(TAG, "touch keepalive failed", e);
+        }
+        scheduleTouchKeepalive();
+    }
+
+    // Relative-mouse translation (InputMode.MOUSE): a drag becomes REL_X/REL_Y motion, a quick tap
+    // without travel becomes a left click. Runs on the worker thread, so the mouse state needs no
+    // locking. Move coalescing upstream is fine here: the delta is measured from the last position
+    // we actually sent, so dropped intermediate samples just fold into one larger (correct) delta.
+    private void sendMouseNow(@NonNull MotionEvent event, float scaleX, float scaleY) {
+        float gx = event.getX() * scaleX;
+        float gy = event.getY() * scaleY;
+        switch (event.getActionMasked()) {
+            case MotionEvent.ACTION_DOWN:
+                mouseLastX = gx;
+                mouseLastY = gy;
+                mouseDownX = gx;
+                mouseDownY = gy;
+                mouseDownTime = event.getEventTime();
+                mouseDragging = false;
+                break;
+            case MotionEvent.ACTION_MOVE: {
+                int dx = Math.round(gx - mouseLastX);
+                int dy = Math.round(gy - mouseLastY);
+                if (dx == 0 && dy == 0) break;
+                mouseLastX = gx;
+                mouseLastY = gy;
+                if (!mouseDragging
+                    && (Math.abs(gx - mouseDownX) > MOUSE_TAP_SLOP
+                        || Math.abs(gy - mouseDownY) > MOUSE_TAP_SLOP)) {
+                    mouseDragging = true;
+                }
+                byte[] data = EvdevEncoder.encodeMouseMove(dx, dy);
+                if (data != null) sink.write(MOUSE, data);
+                break;
+            }
+            case MotionEvent.ACTION_UP: {
+                boolean tap = !mouseDragging
+                    && (event.getEventTime() - mouseDownTime) <= MOUSE_TAP_MS;
+                if (tap) {
+                    sink.write(MOUSE, EvdevEncoder.encodeMouseButton(EvdevEncoder.BTN_LEFT, true));
+                    sink.write(MOUSE, EvdevEncoder.encodeMouseButton(EvdevEncoder.BTN_LEFT, false));
+                }
+                break;
+            }
+            default:
+                break;
+        }
     }
 
     /**
@@ -157,6 +400,25 @@ public boolean sendKeyEvent(int keyCode, boolean pressed) {
         return true;
     }
 
+    /**
+     * Sends a printable character as a US-layout evdev key tap, wrapping it in LEFTSHIFT down/up
+     * when the character requires Shift (uppercase letters, {@code !@#...}). This is the path for
+     * soft keyboards that commit text rather than emitting key events, so uppercase and symbols
+     * reach the guest correctly instead of being lost or arriving lowercase.
+     *
+     * @return true if the character is mapped to a US-layout key; false if the caller should fall
+     * back to the framework key character map.
+     */
+    public boolean sendChar(char c) {
+        KeyCodeMapper.CharKey key = KeyCodeMapper.charToKey(c);
+        if (key == null) return false;
+        if (key.shift) sendRawKeyEvent(KeyCodeMapper.KEY_LEFTSHIFT, true);
+        sendRawKeyEvent(key.scanCode, true);
+        sendRawKeyEvent(key.scanCode, false);
+        if (key.shift) sendRawKeyEvent(KeyCodeMapper.KEY_LEFTSHIFT, false);
+        return true;
+    }
+
     /** Sends a raw Linux evdev KEY_* scan code. */
     public void sendRawKeyEvent(int scanCode, boolean pressed) {
         submit("sendRawKeyEvent", () -> {
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/display/nativedisplay/input/KeyCodeMapper.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/nativedisplay/input/KeyCodeMapper.java
index 22b3a0e24..f3a9114c9 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/display/nativedisplay/input/KeyCodeMapper.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/nativedisplay/input/KeyCodeMapper.java
@@ -152,4 +152,70 @@ public static int shiftSynthBase(int keyCode) {
                 return -1;
         }
     }
+
+    /**
+     * A printable character resolved to a US-QWERTY evdev key plus whether Shift must be held.
+     * The guest keymap is assumed US; the caller wraps {@link #scanCode} with LEFTSHIFT when
+     * {@link #shift} is set (see InputForwarder.sendChar), which is the "insert shift up/down"
+     * behaviour needed for uppercase letters and shifted symbols the soft keyboard commits as text.
+     */
+    public static final class CharKey {
+        public final short scanCode;
+        public final boolean shift;
+
+        CharKey(int scanCode, boolean shift) {
+            this.scanCode = (short) scanCode;
+            this.shift = shift;
+        }
+    }
+
+    private static final Map<Character, CharKey> CHAR_MAP = new HashMap<>();
+
+    private static void ch(char c, int scanCode, boolean shift) {
+        CHAR_MAP.put(c, new CharKey(scanCode, shift));
+    }
+
+    static {
+        // Letters: lowercase unshifted, uppercase shifted. evdev scan codes follow the physical
+        // QWERTY layout, NOT the alphabet, so map each letter to its own KEY_* (KEY_A + (c-'a')
+        // would send e.g. 'q' as KEY_C).
+        int[] letterKeys = {
+            KEY_A, KEY_B, KEY_C, KEY_D, KEY_E, KEY_F, KEY_G, KEY_H, KEY_I, KEY_J, KEY_K, KEY_L,
+            KEY_M, KEY_N, KEY_O, KEY_P, KEY_Q, KEY_R, KEY_S, KEY_T, KEY_U, KEY_V, KEY_W, KEY_X,
+            KEY_Y, KEY_Z,
+        };
+        for (int i = 0; i < 26; i++) {
+            ch((char) ('a' + i), letterKeys[i], false);
+            ch((char) ('A' + i), letterKeys[i], true);
+        }
+        // Digit row, unshifted.
+        int[] digitKeys = {KEY_0, KEY_1, KEY_2, KEY_3, KEY_4, KEY_5, KEY_6, KEY_7, KEY_8, KEY_9};
+        for (int d = 0; d <= 9; d++) ch((char) ('0' + d), digitKeys[d], false);
+        // Digit row, shifted symbols (US layout).
+        ch(')', KEY_0, true); ch('!', KEY_1, true); ch('@', KEY_2, true); ch('#', KEY_3, true);
+        ch('$', KEY_4, true); ch('%', KEY_5, true); ch('^', KEY_6, true); ch('&', KEY_7, true);
+        ch('*', KEY_8, true); ch('(', KEY_9, true);
+        // Punctuation pairs (unshifted / shifted).
+        ch('-', KEY_MINUS, false); ch('_', KEY_MINUS, true);
+        ch('=', KEY_EQUAL, false); ch('+', KEY_EQUAL, true);
+        ch('[', KEY_LEFTBRACE, false); ch('{', KEY_LEFTBRACE, true);
+        ch(']', KEY_RIGHTBRACE, false); ch('}', KEY_RIGHTBRACE, true);
+        ch('\\', KEY_BACKSLASH, false); ch('|', KEY_BACKSLASH, true);
+        ch(';', KEY_SEMICOLON, false); ch(':', KEY_SEMICOLON, true);
+        ch('\'', KEY_APOSTROPHE, false); ch('"', KEY_APOSTROPHE, true);
+        ch('`', KEY_GRAVE, false); ch('~', KEY_GRAVE, true);
+        ch(',', KEY_COMMA, false); ch('<', KEY_COMMA, true);
+        ch('.', KEY_DOT, false); ch('>', KEY_DOT, true);
+        ch('/', KEY_SLASH, false); ch('?', KEY_SLASH, true);
+        // Whitespace.
+        ch(' ', KEY_SPACE, false); ch('\t', KEY_TAB, false); ch('\n', KEY_ENTER, false);
+    }
+
+    /**
+     * Resolves a printable character to a US-QWERTY evdev key (+ Shift flag), or null if the
+     * character has no direct US-layout key (caller should fall back to the framework keymap).
+     */
+    public static CharKey charToKey(char c) {
+        return CHAR_MAP.get(c);
+    }
 }
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/display/nativedisplay/input/NativeExtraKeysPanel.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/nativedisplay/input/NativeExtraKeysPanel.java
index f85f30eff..aeed31bf1 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/display/nativedisplay/input/NativeExtraKeysPanel.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/nativedisplay/input/NativeExtraKeysPanel.java
@@ -3,10 +3,6 @@
 // Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.ui.vm.display.nativedisplay.input;
 
-import static android.view.KeyEvent.KEYCODE_CAPS_LOCK;
-import static android.view.KeyEvent.KEYCODE_MINUS;
-import static android.view.KeyEvent.KEYCODE_SLASH;
-
 import androidx.annotation.NonNull;
 import androidx.annotation.Nullable;
 
@@ -15,8 +11,8 @@
 
 /**
  * Adapts the shared {@link DisplayExtraKeysPanel} to the native backend, emitting evdev key events
- * through {@link InputForwarder}. The sticky-modifier handling lives in {@link BaseExtraKeysAdapter};
- * only the emit/ready hooks and the repeat/caps key mapping are backend-specific.
+ * through {@link InputForwarder}. The sticky-modifier and key down/up handling live in
+ * {@link BaseExtraKeysAdapter}; only the emit/ready hooks are backend-specific.
  */
 public final class NativeExtraKeysPanel extends BaseExtraKeysAdapter {
     @Nullable
@@ -39,22 +35,4 @@ protected void emitKey(int androidKeyCode, boolean down) {
     protected boolean isReady() {
         return forwarder != null;
     }
-
-    @Override
-    public void onKeyRepeat(int androidKeyCode) {
-        tapKey(androidKeyCode);
-    }
-
-    @Override
-    public void onCharRepeat(char ch) {
-        if (ch == '/') tapKey(KEYCODE_SLASH);
-        else if (ch == '-') tapKey(KEYCODE_MINUS);
-    }
-
-    @Override
-    public void onCapsToggle(boolean active) {
-        if (!isReady()) return;
-        emitKey(KEYCODE_CAPS_LOCK, true);
-        emitKey(KEYCODE_CAPS_LOCK, false);
-    }
 }
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/display/nativedisplay/input/TouchScaleCalculator.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/nativedisplay/input/TouchScaleCalculator.java
index e677bf071..23ca2aee0 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/display/nativedisplay/input/TouchScaleCalculator.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/nativedisplay/input/TouchScaleCalculator.java
@@ -4,10 +4,11 @@
 package cn.classfun.droidvm.ui.vm.display.nativedisplay.input;
 
 /**
- * Computes per-axis touch scale from view size to guest resolution. The touch listener is attached
- * to the SurfaceView, which is itself sized to the guest aspect ratio (see
- * {@code VMNativeDisplayActivity#updateAspectRatio}), so its bounds carry no letterbox/pillarbox
- * bars: there is no offset and scale is simply guest/view per axis.
+ * Computes per-axis touch scale from view size to the guest device's fixed normalized ABS range
+ * guest auto-resize. The touch listener is attached to the SurfaceView, which is itself sized to
+ * the guest aspect ratio (see {@code VMNativeDisplayActivity#updateAspectRatio}), so its bounds
+ * carry no letterbox/pillarbox bars: there is no offset and scale is simply NORMALIZED_ABS_MAX/view
+ * per axis.
  */
 public final class TouchScaleCalculator {
     private TouchScaleCalculator() {
@@ -23,12 +24,15 @@ public static final class TouchTransform {
         }
     }
 
-    public static TouchTransform compute(int guestWidth, int guestHeight,
-                                         int viewWidth, int viewHeight) {
-        if (viewWidth <= 0 || viewHeight <= 0 || guestWidth <= 0 || guestHeight <= 0) {
+    public static TouchTransform compute(int viewWidth, int viewHeight) {
+        if (viewWidth <= 0 || viewHeight <= 0) {
             return new TouchTransform(1f, 1f);
         }
-        return new TouchTransform((float) guestWidth / viewWidth,
-            (float) guestHeight / viewHeight);
+        // Normalize view coords to the fixed ABS range (EvdevEncoder.NORMALIZED_ABS_MAX): the guest
+        // then maps them 1:1 to its screen at ANY resolution, so no guest resolution is needed here.
+        // Auto-resize just changes the view size, which this already tracks per call.
+        return new TouchTransform(
+            (float) EvdevEncoder.NORMALIZED_ABS_MAX / viewWidth,
+            (float) EvdevEncoder.NORMALIZED_ABS_MAX / viewHeight);
     }
 }
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/display/vnc/base/BaseVncActivity.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/vnc/base/BaseVncActivity.java
index 4b44ca8ee..5004071d0 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/display/vnc/base/BaseVncActivity.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/vnc/base/BaseVncActivity.java
@@ -147,8 +147,10 @@ protected void onCreate(Bundle savedInstanceState) {
         if (vmId == null) vmId = "";
         bindViews();
         setupToolbar();
-        onSetupActivity();
+        // Before onSetupActivity() so subclasses can wire views (e.g. the physical keyboard)
+        // to the adapter during their setup.
         vncExtraKeys = new VncExtraKeysPanel(extraKeysPanel);
+        onSetupActivity();
         fetchVncInfoAndConnect();
     }
 
@@ -156,7 +158,6 @@ protected void onCreate(Bundle savedInstanceState) {
     protected void onDestroy() {
         super.onDestroy();
         onDestroyExtra();
-        extraKeysPanel.stopKeyRepeat();
         running = false;
         if (vncClient != null) vncClient.requestStop();
         executor.shutdown();
@@ -421,6 +422,12 @@ protected void hideConnectingOverlay() {
     @Override
     public boolean dispatchKeyEvent(@NonNull KeyEvent event) {
         int keyCode = event.getKeyCode();
+        // A hardware-mouse right-click the framework (or OEM ROM) failed to see consumed gets
+        // synthesized as a mouse-sourced BACK key. Inside the VM display that must never navigate
+        // back - the right-click itself is delivered to the guest by the pointer handlers.
+        if (keyCode == android.view.KeyEvent.KEYCODE_BACK
+            && (event.getSource() & android.view.InputDevice.SOURCE_MOUSE) != 0)
+            return true;
         if (keyCode == KEYCODE_VOLUME_UP || keyCode == KEYCODE_VOLUME_DOWN)
             return super.dispatchKeyEvent(event);
         int keysym = androidKeyToXKeysym(keyCode);
@@ -540,10 +547,26 @@ protected static boolean isModifierKey(int keyCode) {
 
     protected void toggleSoftKeyboard() {
         var imm = getSystemService(InputMethodManager.class);
-        if (imm != null && ivDisplay != null) {
-            ivDisplay.requestFocus();
-            imm.showSoftInput(ivDisplay, 0);
-        }
+        if (imm == null || ivDisplay == null) return;
+        // Post so the fab-menu popup has finished tearing down: called inline right after the item
+        // click, the popup still owns the focus transition and showSoftInput lands before ivDisplay
+        // is the served view and does nothing. (The letterbox onClick path already has focus, but
+        // routing both through the same retry keeps them consistent.)
+        mainHandler.post(() -> tryShowKeyboard(imm, 15));
+    }
+
+    // showSoftInput() can return true for a view the IMM isn't serving yet and show nothing, so the
+    // success test is imm.isActive(view), retried on a short delay until the input connection is
+    // live. The last few rounds force the IME (some ROMs ignore the implicit request).
+    private void tryShowKeyboard(@NonNull InputMethodManager imm, int attemptsLeft) {
+        if (attemptsLeft <= 0 || isFinishing() || ivDisplay == null) return;
+        ivDisplay.requestFocusFromTouch();
+        ivDisplay.requestFocus();
+        int flag = attemptsLeft <= 3
+            ? InputMethodManager.SHOW_FORCED : InputMethodManager.SHOW_IMPLICIT;
+        imm.showSoftInput(ivDisplay, flag);
+        if (ivDisplay.isFocused() && imm.isActive(ivDisplay)) return;
+        mainHandler.postDelayed(() -> tryShowKeyboard(imm, attemptsLeft - 1), 60);
     }
 
     protected VncDisplayView.TextCommitListener createTextCommitListener() {
@@ -727,10 +750,7 @@ protected void reconnect() {
 
     protected boolean onMenuItemClicked(@NonNull MenuItem item) {
         int id = item.getItemId();
-        if (id == R.id.menu_keyboard) {
-            toggleSoftKeyboard();
-            return true;
-        } else if (id == R.id.menu_rotate) {
+        if (id == R.id.menu_rotate) {
             rotateScreen();
             return true;
         } else if (id == R.id.menu_reconnect) {
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/display/vnc/display/VMVncDisplayActivity.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/vnc/display/VMVncDisplayActivity.java
index 135310e7d..ff39f1f1c 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/display/vnc/display/VMVncDisplayActivity.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/vnc/display/VMVncDisplayActivity.java
@@ -20,6 +20,7 @@
 import android.content.Context;
 import android.content.SharedPreferences;
 import android.graphics.Bitmap;
+import android.graphics.RectF;
 import android.graphics.drawable.GradientDrawable;
 import android.util.TypedValue;
 import android.view.MenuItem;
@@ -36,68 +37,199 @@
 import androidx.annotation.NonNull;
 import androidx.core.graphics.Insets;
 import androidx.core.view.ViewCompat;
+import androidx.core.view.WindowCompat;
 import androidx.core.view.WindowInsetsCompat;
 
 import com.google.android.material.button.MaterialButton;
 import com.google.android.material.floatingactionbutton.FloatingActionButton;
 
+import org.json.JSONObject;
+
 import cn.classfun.droidvm.R;
+import cn.classfun.droidvm.display.INativeDisplayRootService;
+import cn.classfun.droidvm.lib.daemon.DaemonConnection;
 import cn.classfun.droidvm.lib.ui.DragTouchListener;
 import cn.classfun.droidvm.lib.ui.MaterialMenu;
+import cn.classfun.droidvm.ui.vm.display.base.DaemonDisplayAttach;
+import cn.classfun.droidvm.ui.vm.display.base.DisplayChromeController;
+import cn.classfun.droidvm.ui.vm.display.base.DisplayExtraKeysPanel;
+import cn.classfun.droidvm.ui.vm.display.base.DisplayKeyboardMenuRow;
+import cn.classfun.droidvm.ui.vm.display.base.KeyboardMode;
+import cn.classfun.droidvm.ui.vm.display.base.DisplayPhysicalKeyboardView;
+import cn.classfun.droidvm.ui.vm.display.base.DisplaySource;
+import cn.classfun.droidvm.ui.vm.display.base.DisplayViewportController;
+import cn.classfun.droidvm.ui.vm.display.base.InputMode;
+import cn.classfun.droidvm.ui.vm.display.base.PointerGestureTranslator;
+import cn.classfun.droidvm.ui.vm.display.nativedisplay.input.DirectInputSink;
+import cn.classfun.droidvm.ui.vm.display.nativedisplay.input.EvdevEncoder;
+import cn.classfun.droidvm.ui.vm.display.nativedisplay.input.InputForwarder;
 import cn.classfun.droidvm.ui.vm.display.vnc.base.BaseVncActivity;
 
 public final class VMVncDisplayActivity extends BaseVncActivity {
-    private static final long AUTO_HIDE_DELAY_MS = 3000;
     private static final long OP_LABEL_HIDE_DELAY_MS = 2000;
     private static final String PREFS_NAME = "droidvm_prefs";
     private static final String KEY_INPUT_MODE = "display_input_mode";
-    private static final float TAP_SLOP = 20f;
-    private static final long TAP_TIMEOUT = 250;
-    private static final long DOUBLE_TAP_TIMEOUT = 300;
-    private static final float DEFAULT_ZOOM = 1f;
-    private static final float MIN_ZOOM = 0.5f;
-    private static final float MAX_ZOOM = 5f;
-    private static final float SNAP_THRESHOLD = 15f;
-    private static final float MIN_SCALE_DIST = 24f;
-    private static final float SCROLL_THRESHOLD = 8f;
+    // Chrome memory, shared with the native path: extra-keys on/off per typing surface + whether
+    // the physical keyboard is up.
+    private static final String KEY_KEYBOARD_MODE = "display_keyboard_mode";
+    private static final String KEY_ZONE_EXTRA = "display_keyboard_zone_extra";
+    private static final String KEY_ZONE_FNX = "display_keyboard_zone_fnx";
+    // RFB pointer button-mask bits (the crosvm VNC server is fixed to tablet mode: an absolute
+    // pointer with these buttons plus scroll pulses).
     private static final int MASK_LEFT = 1;
     private static final int MASK_MIDDLE = 2;
     private static final int MASK_RIGHT = 4;
     private static final int MASK_SCROLL_UP = 8;
     private static final int MASK_SCROLL_DOWN = 16;
 
-    private enum InputMode {TOUCH, MOUSE}
     private LinearLayout statusBar;
     private MaterialButton btnFullscreen;
     private FrameLayout displayContainer;
     private FloatingActionButton fabMenu;
     private TextView operationLabel;
-    private boolean isFullscreen = false;
-    private boolean extraKeysVisible = true;
+    private DisplayPhysicalKeyboardView phyKeyboard;
+    // Per-mode input routing: whatever the VNC channel natively has goes over RFB (TABLET's
+    // absolute pointer + the keyboard); the rest goes to the crosvm --input evdev devices via the
+    // daemon (MOUSE = relative motion the guest renders a cursor for, TOUCH = raw multi-touch).
+    // Seeded from the shared pref in onSetupActivity(); TOUCH only until that read.
     private InputMode inputMode = InputMode.TOUCH;
     private SharedPreferences prefs;
-    private float cursorX, cursorY;
-    private int baseViewW, baseViewH;
-    private float zoom = DEFAULT_ZOOM;
-    private float panX, panY;
-    private int gestureMaxPointers;
-    private boolean gestureMoved;
-    private long gestureStartTime;
-    private float gestureStartMidX, gestureStartMidY;
-    private long lastTapTime;
-    private int lastTapFingerCount;
-    private float lastTouchX, lastTouchY;
-    private float lastMidX, lastMidY;
-    private float initialAngle;
-    private float rotationBase;
-    private float initialDist;
-    private float initialZoom;
-    private float lastScrollMidY;
+
+    private InputForwarder inputForwarder;
+    private PointerGestureTranslator gestureTranslator;
+    private int rfbMask;                 // current RFB button mask (tablet mode)
+    private int rfbLastX, rfbLastY;      // last absolute pointer position sent, fb px
+    private float mouseRemX, mouseRemY;  // fractional remainders of relative mouse motion
+    // Single sources of truth for viewport geometry (fit/zoom/pan across display-area changes)
+    // and chrome visibility (fullscreen / extra keys). See the controller classes for the rules.
+    private DisplayViewportController viewport;
+    private DisplayChromeController chrome;
+    // Display areas smaller than this (e.g. landscape with a tall IME) freeze the viewport
+    // instead of re-laying it out; see DisplayViewportController.
+    private static final int MIN_AREA_DP = 96;
+    // Last mouse right/middle-button activity: any BACK key arriving shortly after is the
+    // framework's (or OEM's) right-click fallback and must not navigate away from the VM.
+    private long lastMouseButtonMs;
+    private static final long MOUSE_BACK_SUPPRESS_MS = 800;
+
+    // Daemon broker binder plumbing (shared DaemonDisplayAttach): the direct sink turns each
+    // evdev frame into one binder call instead of the (much slower) vm_input JSON-RPC round-trip.
+    // Input works immediately on the RPC fallback and upgrades in place once the binder arrives;
+    // written on the main thread, read on the InputForwarder worker (hence volatile).
+    private volatile DirectInputSink directSink;
+    private DaemonDisplayAttach displayAttach;
+    // Display-source adapter: framebuffer events flow through the shared DisplaySource interface.
+    private VncBitmapSource displaySource;
 
     private final Runnable hideOperationLabel = () -> {
         if (operationLabel != null) operationLabel.setVisibility(GONE);
     };
 
+    // absolute-tablet pointer); MOUSE lands on the crosvm relative-mouse device via vm_input.
+    private final PointerGestureTranslator.Listener gestureListener =
+        new PointerGestureTranslator.Listener() {
+            @Override
+            public void onRelativeMove(float dxGuest, float dyGuest) {
+                if (inputForwarder == null) return;
+                mouseRemX += dxGuest;
+                mouseRemY += dyGuest;
+                int dx = (int) mouseRemX, dy = (int) mouseRemY;
+                if (dx == 0 && dy == 0) return;
+                mouseRemX -= dx;
+                mouseRemY -= dy;
+                inputForwarder.sendMouseMove(dx, dy);
+            }
+
+            @Override
+            public void onAbsoluteMove(float xGuest, float yGuest) {
+                rfbMove(Math.round(xGuest), Math.round(yGuest));
+            }
+
+            @Override
+            public void onLeftButton(boolean down, float xGuest, float yGuest) {
+                if (inputMode == InputMode.TABLET) {
+                    rfbButton(MASK_LEFT, down, Math.round(xGuest), Math.round(yGuest));
+                } else if (inputForwarder != null) {
+                    inputForwarder.sendPointerButton(EvdevEncoder.BTN_LEFT, down);
+                }
+            }
+
+            @Override
+            public void onLeftTap(float xGuest, float yGuest) {
+                onLeftButton(true, xGuest, yGuest);
+                onLeftButton(false, xGuest, yGuest);
+            }
+
+            @Override
+            public void onRightClick(float xGuest, float yGuest) {
+                if (inputMode == InputMode.TABLET) {
+                    int x = Math.round(xGuest), y = Math.round(yGuest);
+                    rfbButton(MASK_RIGHT, true, x, y);
+                    rfbButton(MASK_RIGHT, false, x, y);
+                } else if (inputForwarder != null) {
+                    inputForwarder.sendPointerButton(EvdevEncoder.BTN_RIGHT, true);
+                    inputForwarder.sendPointerButton(EvdevEncoder.BTN_RIGHT, false);
+                }
+            }
+
+            @Override
+            public void onScroll(int vNotches, int hNotches) {
+                if (inputMode == InputMode.TABLET) {
+                    rfbScroll(vNotches);
+                } else if (inputForwarder != null) {
+                    inputForwarder.sendScroll(vNotches, hNotches);
+                }
+            }
+
+            @Override
+            public void onZoomPan(float scaleFactor, float dxView, float dyView,
+                                  float focusX, float focusY) {
+                if (viewport != null) viewport.onZoomPan(scaleFactor, dxView, dyView);
+            }
+        };
+
+    // ---- RFB tablet-pointer helpers (absolute position + button mask) ----
+
+    private void rfbMove(int x, int y) {
+        if (vncClient == null || !vncClient.isConnected() || fbWidth <= 0) return;
+        rfbLastX = max(0, min(x, fbWidth - 1));
+        rfbLastY = max(0, min(y, fbHeight - 1));
+        vncClient.sendPointer(rfbLastX, rfbLastY, rfbMask);
+    }
+
+    private void rfbButton(int maskBit, boolean down, int x, int y) {
+        if (vncClient == null || !vncClient.isConnected() || fbWidth <= 0) return;
+        rfbLastX = max(0, min(x, fbWidth - 1));
+        rfbLastY = max(0, min(y, fbHeight - 1));
+        rfbMask = down ? (rfbMask | maskBit) : (rfbMask & ~maskBit);
+        vncClient.sendPointer(rfbLastX, rfbLastY, rfbMask);
+    }
+
+    /** RFB has no wheel axis; each notch is a scroll-button press/release pulse. */
+    private void rfbScroll(int vNotches) {
+        if (vncClient == null || !vncClient.isConnected() || vNotches == 0) return;
+        int bit = vNotches > 0 ? MASK_SCROLL_UP : MASK_SCROLL_DOWN;
+        for (int i = 0; i < Math.abs(vNotches); i++) {
+            vncClient.sendPointer(rfbLastX, rfbLastY, rfbMask | bit);
+            vncClient.sendPointer(rfbLastX, rfbLastY, rfbMask);
+        }
+    }
+
+    // Ships evdev records for MOUSE/TOUCH modes to the daemon, which owns the crosvm --input
+    // sockets. Runs on the InputForwarder worker thread (synchronous request keeps ordering).
+    private boolean sendInputToDaemon(int channel, @NonNull byte[] data) {
+        try {
+            var req = new JSONObject();
+            req.put("command", "vm_input");
+            req.put("vm_id", vmId);
+            req.put("channel", channel);
+            req.put("data", android.util.Base64.encodeToString(data, android.util.Base64.NO_WRAP));
+            var resp = DaemonConnection.getInstance().request(req);
+            return resp.optBoolean("delivered", false);
+        } catch (Exception e) {
+            return false;
+        }
+    }
 
     @Override
     protected int getContentLayoutId() {
@@ -116,25 +248,165 @@ protected void onBindExtraViews() {
         displayContainer = findViewById(R.id.display_container);
         fabMenu = findViewById(R.id.fab_menu);
         operationLabel = findViewById(R.id.tv_operation);
+        phyKeyboard = findViewById(R.id.phy_keyboard);
     }
 
     @Override
     protected void onSetupActivity() {
         prefs = getSharedPreferences(PREFS_NAME, Context.MODE_PRIVATE);
-        inputMode = InputMode.values()[prefs.getInt(KEY_INPUT_MODE, 0)];
+        inputMode = InputMode.fromOrdinal(prefs.getInt(KEY_INPUT_MODE, 0));
+        phyKeyboard.setKeyListener(vncExtraKeys);
+        // The physical keyboard's Shift/Ctrl/Alt/Win mirror the panel's sticky-modifier state.
+        extraKeysPanel.setModifierStateObserver(() -> phyKeyboard.refreshModifiers(
+            extraKeysPanel.isCtrlDown(), extraKeysPanel.isAltDown(),
+            extraKeysPanel.isShiftDown(), extraKeysPanel.isWinDown()));
+        extraKeysPanel.setZoneListener(new DisplayExtraKeysPanel.ZoneListener() {
+            @Override
+            public void onToggleFnxZone() {
+                chrome.toggleFnxZone();
+            }
+
+            @Override
+            public void onShowSystemKeyboard() {
+                toggleSoftKeyboard();
+            }
+        });
+        phyKeyboard.setZoneListener(new DisplayPhysicalKeyboardView.ZoneListener() {
+            @Override
+            public void onToggleExtraZone() {
+                chrome.toggleExtraZone();
+            }
+
+            @Override
+            public void onToggleFnxZone() {
+                chrome.toggleFnxZone();
+            }
+
+            @Override
+            public void onCloseKeyboard() {
+                chrome.setKeyboardMode(KeyboardMode.NONE);
+            }
+        });
         setupCutoutMode();
-        setupWindowInsets();
+        setupLayoutControllers();
         btnFullscreen.setOnClickListener(v -> toggleFullscreen());
+        // The container's layout size IS the display area: chrome visibility, IME and rotation
+        // all funnel into it through normal layout. The viewport handles degenerate sizes itself.
         displayContainer.addOnLayoutChangeListener((
             v, left, top, right, bottom, oldLeft, oldTop, oldRight, oldBottom
         ) -> {
             int cw = right - left, ch = bottom - top;
-            if (cw > 0 && ch > 0) v.post(() -> updateAspectRatio(cw, ch));
+            v.post(() -> viewport.setArea(cw, ch));
         });
         setupOperationLabel();
         setupDisplayTouch();
         setupFab();
+        // Delegating sink: the direct daemon-binder path once attached, the vm_input JSON-RPC
+        // until then (and again if the binder dies). DirectInputSink falls back internally on
+        // any per-write failure, so input never drops during the upgrade.
+        inputForwarder = new InputForwarder((channel, data) -> {
+            var sink = directSink;
+            return sink != null ? sink.write(channel, data) : sendInputToDaemon(channel, data);
+        });
+        gestureTranslator = new PointerGestureTranslator(mainHandler, gestureListener);
+        // Hardware mouse/stylus: hover is TABLET-only (RFB absolute move); wheel and right/middle
+        // buttons route per mode (tablet -> RFB mask, mouse -> crosvm mouse device).
+        ivDisplay.setOnHoverListener(this::onDisplayHover);
+        ivDisplay.setOnGenericMotionListener(this::onDisplayGenericMotion);
+        // Also on the container: a right-click over the letterbox area (outside the image) must
+        // still be consumed or the framework synthesizes BACK from it.
+        displayContainer.setOnGenericMotionListener(this::onDisplayGenericMotion);
+        // Keep the display area out of the system-gesture zones so multi-finger gestures
+        // (two-finger right-click/scroll, three-finger zoom) don't trip OEM gestures.
+        displayContainer.addOnLayoutChangeListener((v, l, t, r, b, ol, ot, or2, ob) ->
+            v.setSystemGestureExclusionRects(java.util.Collections.singletonList(
+                new android.graphics.Rect(0, 0, r - l, b - t))));
         applyInputMode();
+
+        if (!vmId.isEmpty()) {
+            displayAttach = new DaemonDisplayAttach(this, mainHandler,
+                new DaemonDisplayAttach.Listener() {
+                    @Override
+                    public void onAttached(@NonNull INativeDisplayRootService service) {
+                    }
+
+                    @Override
+                    public void onLost() {
+                        // Drop the direct sink so writes go back to the vm_input RPC.
+                        directSink = null;
+                    }
+                });
+            displayAttach.start();
+        }
+    }
+
+    private boolean onDisplayHover(View v, MotionEvent event) {
+        if (inputMode != InputMode.TABLET) return false;
+        if (fbWidth <= 0 || v.getWidth() <= 0 || v.getHeight() <= 0) return false;
+        int action = event.getActionMasked();
+        if (action == MotionEvent.ACTION_HOVER_MOVE || action == MotionEvent.ACTION_HOVER_ENTER) {
+            rfbMove(Math.round(event.getX() * fbWidth / v.getWidth()),
+                Math.round(event.getY() * fbHeight / v.getHeight()));
+            return true;
+        }
+        return false;
+    }
+
+    // Button presses are ALWAYS consumed (every mode, letterbox included) - an unhandled
+    // BUTTON_SECONDARY press is what makes the framework synthesize a BACK key.
+    private boolean onDisplayGenericMotion(View v, MotionEvent event) {
+        switch (event.getActionMasked()) {
+            case MotionEvent.ACTION_SCROLL: {
+                int vN = Math.round(event.getAxisValue(MotionEvent.AXIS_VSCROLL));
+                int hN = Math.round(event.getAxisValue(MotionEvent.AXIS_HSCROLL));
+                if (inputMode == InputMode.TABLET) rfbScroll(vN);
+                else if (inputForwarder != null) inputForwarder.sendScroll(vN, hN);
+                return true;
+            }
+            case MotionEvent.ACTION_BUTTON_PRESS:
+            case MotionEvent.ACTION_BUTTON_RELEASE: {
+                lastMouseButtonMs = android.os.SystemClock.uptimeMillis();
+                boolean down = event.getActionMasked() == MotionEvent.ACTION_BUTTON_PRESS;
+                // Map view coords to fb px; events from the container carry the letterbox offset.
+                float lx = event.getX(), ly = event.getY();
+                if (v == displayContainer) {
+                    lx -= ivDisplay.getLeft();
+                    ly -= ivDisplay.getTop();
+                }
+                int ivW = ivDisplay.getWidth(), ivH = ivDisplay.getHeight();
+                int x = ivW > 0 && fbWidth > 0 ? Math.round(lx * fbWidth / ivW) : rfbLastX;
+                int y = ivH > 0 && fbHeight > 0 ? Math.round(ly * fbHeight / ivH) : rfbLastY;
+                switch (event.getActionButton()) {
+                    case MotionEvent.BUTTON_SECONDARY:
+                    case MotionEvent.BUTTON_STYLUS_PRIMARY:
+                        if (inputMode == InputMode.TABLET) rfbButton(MASK_RIGHT, down, x, y);
+                        else if (inputForwarder != null)
+                            inputForwarder.sendPointerButton(EvdevEncoder.BTN_RIGHT, down);
+                        break;
+                    case MotionEvent.BUTTON_TERTIARY:
+                        if (inputMode == InputMode.TABLET) rfbButton(MASK_MIDDLE, down, x, y);
+                        else if (inputForwarder != null)
+                            inputForwarder.sendPointerButton(EvdevEncoder.BTN_MIDDLE, down);
+                        break;
+                    default:
+                        break;
+                }
+                return true;
+            }
+            default:
+                return false;
+        }
+    }
+
+    @Override
+    public boolean dispatchKeyEvent(@NonNull android.view.KeyEvent event) {
+        // OEM-injected right-click fallback BACK may claim a keyboard/virtual source, which the
+        // base class's mouse-source check misses; the timestamp catches it regardless.
+        if (event.getKeyCode() == android.view.KeyEvent.KEYCODE_BACK
+            && android.os.SystemClock.uptimeMillis() - lastMouseButtonMs
+                < MOUSE_BACK_SUPPRESS_MS)
+            return true;
+        return super.dispatchKeyEvent(event);
     }
 
     private void setupCutoutMode() {
@@ -144,13 +416,78 @@ private void setupCutoutMode() {
         getWindow().setAttributes(params);
     }
 
-    private void setupWindowInsets() {
+    // Wires the viewport controller (single writer of the display-image geometry), the chrome
+    // controller (single writer of toolbar/status bar/extra keys/system bars visibility) and the
+    // window-insets listener that turns system bars + IME into content padding, which in turn
+    // sizes the display container.
+    private void setupLayoutControllers() {
+        int minAreaPx = Math.round(MIN_AREA_DP * getResources().getDisplayMetrics().density);
+        viewport = new DisplayViewportController(minAreaPx,
+            new DisplayViewportController.Listener() {
+                @Override
+                public void onViewportChanged(int baseW, int baseH, float viewScale,
+                                              float offsetX, float offsetY) {
+                }
+
+                @Override
+                public void onGuestResizeWanted(int areaW, int areaH) {
+                    // Auto-resize Guest Display: no guest-side channel on this path yet.
+                }
+            });
+
+        displaySource = new VncBitmapSource(new DisplaySource.Callbacks() {
+            @Override
+            public void onContentSize(int width, int height) {
+                viewport.setContentSize(width, height);
+            }
+
+            @Override
+            public void onStateChanged(@NonNull DisplaySource.State state) {
+                // Status text and overlay are handled by BaseVncActivity's own status plumbing.
+            }
+        });
+
+        chrome = new DisplayChromeController(
+            KeyboardMode.fromName(prefs.getString(KEY_KEYBOARD_MODE, null)),
+            prefs.getBoolean(KEY_ZONE_EXTRA, true),
+            prefs.getBoolean(KEY_ZONE_FNX, false),
+            (fullscreen, mode, extraVisible, fnxVisible) -> {
+                toolbar.setVisibility(fullscreen ? GONE : VISIBLE);
+                statusBar.setVisibility(fullscreen ? GONE : VISIBLE);
+                extraKeysPanel.applyZones(
+                    extraVisible, fnxVisible, mode == KeyboardMode.SYSTEM);
+                phyKeyboard.setZoneToggleState(extraVisible, fnxVisible);
+                phyKeyboard.setVisibleAnimated(mode == KeyboardMode.LAPTOP);
+                var controller = getWindow().getInsetsController();
+                if (controller != null) {
+                    if (fullscreen) {
+                        controller.hide(WindowInsets.Type.systemBars());
+                        controller.setSystemBarsBehavior(BEHAVIOR_SHOW_TRANSIENT_BARS_BY_SWIPE);
+                    } else {
+                        controller.show(WindowInsets.Type.systemBars());
+                    }
+                }
+                // Re-request insets so the content padding (and thus the display area) updates in
+                // the same pass as the visibility changes.
+                ViewCompat.requestApplyInsets(findViewById(android.R.id.content));
+            });
+        chrome.setStateListener((mode, extraVisible, fnxVisible) -> prefs.edit()
+            .putString(KEY_KEYBOARD_MODE, mode.name())
+            .putBoolean(KEY_ZONE_EXTRA, extraVisible)
+            .putBoolean(KEY_ZONE_FNX, fnxVisible)
+            .apply());
+        chrome.applyInitial();
+
         var content = (ViewGroup) findViewById(android.R.id.content);
         ViewCompat.setOnApplyWindowInsetsListener(content, (v, insets) -> {
             Insets sysBars = insets.getInsets(WindowInsetsCompat.Type.systemBars());
             Insets ime = insets.getInsets(WindowInsetsCompat.Type.ime());
-            int top = isFullscreen ? 0 : sysBars.top;
-            int bottom = ime.bottom;
+            // The Main row's shared slot follows the IME: Fn while it is up, "show IME" while
+            // it is down. The system owns that visibility, so read it rather than track it.
+            extraKeysPanel.setImeVisible(insets.isVisible(WindowInsetsCompat.Type.ime()));
+            boolean fullscreen = chrome != null && chrome.isFullscreen();
+            int top = fullscreen ? 0 : sysBars.top;
+            int bottom = Math.max(fullscreen ? 0 : sysBars.bottom, ime.bottom);
             v.setPadding(0, top, 0, bottom);
             return insets;
         });
@@ -172,12 +509,7 @@ private void setupOperationLabel() {
 
     @Override
     protected void onFramebufferReady(int width, int height) {
-        updateAspectRatio(displayContainer.getWidth(), displayContainer.getHeight());
-        if (inputMode == InputMode.MOUSE) {
-            if (cursorX < 0 || cursorX >= width) cursorX = width / 2f;
-            if (cursorY < 0 || cursorY >= height) cursorY = height / 2f;
-            ensureCursorVisible();
-        }
+        displaySource.dispatchContentSize(width, height);
     }
 
     @Override
@@ -185,56 +517,65 @@ protected void onBitmapUpdated(@NonNull Bitmap bitmap) {
         ivDisplay.setImageBitmap(bitmap);
     }
 
-    @Override
-    protected void onStatusChanged(String text, VncStatus status) {
-        mainHandler.removeCallbacks(this::hideBars);
-        if (!isFullscreen) showBars();
-    }
-
     @Override
     protected void onDestroyExtra() {
-        mainHandler.removeCallbacks(this::hideBars);
         mainHandler.removeCallbacks(hideOperationLabel);
+        if (inputForwarder != null) inputForwarder.close();
+        var sink = directSink;
+        directSink = null;
+        if (sink != null) sink.close();
+        if (displayAttach != null) {
+            displayAttach.stop();
+            displayAttach = null;
+        }
     }
 
+    // Routes on-screen touches by input mode. TOUCH listens on ivDisplay, which is laid out to
+    // the framebuffer's aspect (DisplayViewportController), so view coords scale straight to the
+    // wire range. MOUSE/TABLET listen on the whole container; the gesture translator pins the
+    // coordinate-carrying gestures to the rendered image rect.
     private boolean onDisplayTouch(View v, MotionEvent event) {
-        if (vncClient == null || !vncClient.isConnected()) return false;
         if (fbWidth <= 0 || fbHeight <= 0) return false;
-        float viewX = event.getX(), viewY = event.getY();
-        float ivW = v.getWidth(), ivH = v.getHeight();
-        float imgAspect = (float) fbWidth / fbHeight;
-        float viewAspect = ivW / max(ivH, 1);
-        float drawnW, drawnH, offsetX, offsetY;
-        if (imgAspect > viewAspect) {
-            drawnW = ivW;
-            drawnH = ivW / imgAspect;
-            offsetX = 0;
-            offsetY = (ivH - drawnH) / 2;
-        } else {
-            drawnH = ivH;
-            drawnW = ivH * imgAspect;
-            offsetX = (ivW - drawnW) / 2;
-            offsetY = 0;
+        int ivW = ivDisplay.getWidth(), ivH = ivDisplay.getHeight();
+        if (ivW <= 0 || ivH <= 0) return false;
+        // A hardware-mouse right/middle press also arrives on the touch stream (ACTION_DOWN with
+        // the button in buttonState). Those are delivered by the generic-motion handler; keep them
+        // out of the tap/gesture path (else right-click doubles as a left tap) but consume them so
+        // the framework doesn't synthesize a BACK key from an unhandled right-click.
+        if ((event.getSource() & android.view.InputDevice.SOURCE_MOUSE) != 0
+            && (event.getButtonState() & (MotionEvent.BUTTON_SECONDARY
+                | MotionEvent.BUTTON_TERTIARY | MotionEvent.BUTTON_STYLUS_PRIMARY)) != 0) {
+            lastMouseButtonMs = android.os.SystemClock.uptimeMillis();
+            return true;
         }
-        int vncX = (int) ((viewX - offsetX) / drawnW * fbWidth);
-        int vncY = (int) ((viewY - offsetY) / drawnH * fbHeight);
-        vncX = max(0, min(vncX, fbWidth - 1));
-        vncY = max(0, min(vncY, fbHeight - 1));
-        int mask;
-        switch (event.getActionMasked()) {
-            case MotionEvent.ACTION_DOWN:
-            case MotionEvent.ACTION_MOVE:
-                mask = 1;
-                break;
-            case MotionEvent.ACTION_UP:
-            case MotionEvent.ACTION_CANCEL:
-                mask = 0;
-                break;
+        switch (inputMode) {
+            case TABLET:
+            case MOUSE:
+                // TABLET rides RFB, whose pointer coordinates are framebuffer px (crosvm's VNC
+                // server normalizes them itself); MOUSE REL deltas are guest px. Both therefore
+                // map the display rect onto the framebuffer size, NOT the normalized ABS range.
+                return gestureTranslator != null && gestureTranslator.onTouchEvent(
+                    event, displayRectInContainer(), fbWidth, fbHeight);
+            case TOUCH:
             default:
-                return false;
+                if (inputForwarder == null) return false;
+                // The evdev multi-touch device advertises the fixed normalized ABS range
+                // (--input multi-touch with no width/height); scale view coords to that range.
+                inputForwarder.sendTouchEvent(event,
+                    (float) EvdevEncoder.NORMALIZED_ABS_MAX / ivW,
+                    (float) EvdevEncoder.NORMALIZED_ABS_MAX / ivH);
+                return true;
         }
-        vncClient.sendPointer(vncX, vncY, mask);
-        return true;
+    }
+
+    // Where the framebuffer is rendered, in container coordinates: the letterbox-fitted image
+    // bounds mapped through the viewport's current zoom/pan transform.
+    @NonNull
+    private RectF displayRectInContainer() {
+        var rect = new RectF(0, 0, ivDisplay.getWidth(), ivDisplay.getHeight());
+        ivDisplay.getMatrix().mapRect(rect);
+        rect.offset(ivDisplay.getLeft(), ivDisplay.getTop());
+        return rect;
     }
 
     @SuppressLint("ClickableViewAccessibility")
@@ -244,359 +585,44 @@ private void setupDisplayTouch() {
 
     @SuppressLint("ClickableViewAccessibility")
     private void applyInputMode() {
-        if (inputMode == InputMode.MOUSE) {
-            ivDisplay.setScaleType(ImageView.ScaleType.FIT_CENTER);
+        ivDisplay.setScaleType(ImageView.ScaleType.FIT_CENTER);
+        if (operationLabel != null) operationLabel.setVisibility(GONE);
+        if (inputMode == InputMode.MOUSE || inputMode == InputMode.TABLET) {
+            // Whole-container gesture surface: MOUSE is a borderless touchpad; TABLET pins the
+            // coordinate-carrying gestures to the rendered image inside the translator, so
+            // multi-finger gestures still work from the letterbox.
             ivDisplay.setClickable(false);
             ivDisplay.setOnTouchListener(null);
             displayContainer.setClickable(true);
             displayContainer.setOnClickListener(null);
-            displayContainer.setOnTouchListener(this::onMouseTouch);
-            if (operationLabel != null) operationLabel.setVisibility(GONE);
-            applyViewSize();
-            applyViewTransform();
-            ensureCursorVisible();
+            displayContainer.setOnTouchListener(this::onDisplayTouch);
         } else {
-            ivDisplay.setScaleType(ImageView.ScaleType.FIT_CENTER);
             ivDisplay.setClickable(true);
             ivDisplay.setOnTouchListener(this::onDisplayTouch);
             displayContainer.setOnTouchListener(null);
             displayContainer.setClickable(true);
+            // Tap-to-summon-IME, unless the physical keyboard is the active typing surface.
             displayContainer.setOnClickListener(v -> {
-                showBars();
-                toggleSoftKeyboard();
+                if (chrome == null || chrome.getKeyboardMode() != KeyboardMode.LAPTOP)
+                    toggleSoftKeyboard();
             });
-            if (operationLabel != null) operationLabel.setVisibility(GONE);
         }
+        if (gestureTranslator != null) {
+            gestureTranslator.setAbsolute(inputMode == InputMode.TABLET);
+            gestureTranslator.reset();
+        }
+        if (inputForwarder != null)
+            inputForwarder.setInputMode(inputMode);
     }
 
     private void setInputMode(InputMode mode) {
         if (inputMode == mode) return;
         inputMode = mode;
         prefs.edit().putInt(KEY_INPUT_MODE, mode.ordinal()).apply();
-        resetViewTransform();
-        if (mode == InputMode.MOUSE) {
-            if (fbWidth > 0) cursorX = fbWidth / 2f;
-            if (fbHeight > 0) cursorY = fbHeight / 2f;
-        }
-        applyViewSize();
+        viewport.resetToFit();
         applyInputMode();
     }
 
-    private void resetViewTransform() {
-        zoom = DEFAULT_ZOOM;
-        panX = 0;
-        panY = 0;
-        ivDisplay.setTranslationX(0);
-        ivDisplay.setTranslationY(0);
-        ivDisplay.setRotation(0);
-    }
-
-    private int currentViewW() {
-        return inputMode == InputMode.MOUSE
-            ? Math.round(baseViewW * zoom) : baseViewW;
-    }
-
-    private int currentViewH() {
-        return inputMode == InputMode.MOUSE
-            ? Math.round(baseViewH * zoom) : baseViewH;
-    }
-
-    private void applyViewSize() {
-        if (baseViewW <= 0 || baseViewH <= 0) return;
-        int w = currentViewW(), h = currentViewH();
-        var lp = ivDisplay.getLayoutParams();
-        if (lp instanceof FrameLayout.LayoutParams) {
-            ((FrameLayout.LayoutParams) lp).gravity = CENTER;
-            lp.width = w;
-            lp.height = h;
-        } else {
-            lp = new FrameLayout.LayoutParams(w, h, CENTER);
-        }
-        ivDisplay.setLayoutParams(lp);
-    }
-
-    private void applyViewTransform() {
-        ivDisplay.setTranslationX(panX);
-        ivDisplay.setTranslationY(panY);
-    }
-
-    private float midX(@NonNull MotionEvent e) {
-        float s = 0;
-        for (int i = 0; i < e.getPointerCount(); i++) s += e.getX(i);
-        return s / e.getPointerCount();
-    }
-
-    private float midY(@NonNull MotionEvent e) {
-        float s = 0;
-        for (int i = 0; i < e.getPointerCount(); i++) s += e.getY(i);
-        return s / e.getPointerCount();
-    }
-
-    @SuppressLint("ClickableViewAccessibility")
-    private boolean onMouseTouch(View v, MotionEvent event) {
-        if (vncClient == null || !vncClient.isConnected()) return false;
-        if (fbWidth <= 0 || fbHeight <= 0) return false;
-        int pc = event.getPointerCount();
-        switch (event.getActionMasked()) {
-            case MotionEvent.ACTION_DOWN:
-                gestureMaxPointers = 1;
-                gestureMoved = false;
-                gestureStartTime = System.currentTimeMillis();
-                gestureStartMidX = event.getX();
-                gestureStartMidY = event.getY();
-                lastTouchX = event.getX();
-                lastTouchY = event.getY();
-                return true;
-            case MotionEvent.ACTION_POINTER_DOWN:
-                gestureMaxPointers = max(gestureMaxPointers, pc);
-                // Re-anchor the tap reference to the multi-finger midpoint and
-                // restart the tap window. The ACTION_DOWN anchor was a single
-                // finger position, so the two-finger midpoint sits ~half a
-                // finger-spread away and would instantly trip gestureMoved,
-                // making a still two-finger tap (right click) impossible.
-                gestureStartMidX = midX(event);
-                gestureStartMidY = midY(event);
-                gestureStartTime = System.currentTimeMillis();
-                gestureMoved = false;
-                if (pc == 2) initTwoFinger(event);
-                if (pc >= 3) lastScrollMidY = midY(event);
-                return true;
-            case MotionEvent.ACTION_MOVE: {
-                float mx = midX(event), my = midY(event);
-                float dist = (float) Math.hypot(
-                    mx - gestureStartMidX, my - gestureStartMidY);
-                if (dist > TAP_SLOP) gestureMoved = true;
-                if (gestureMaxPointers >= 3 && pc >= 3) {
-                    float dy = my - lastScrollMidY;
-                    if (Math.abs(dy) > SCROLL_THRESHOLD) {
-                        boolean up = dy < 0;
-                        vncClient.sendPointer((int) cursorX, (int) cursorY,
-                            up ? MASK_SCROLL_UP : MASK_SCROLL_DOWN);
-                        vncClient.sendPointer((int) cursorX, (int) cursorY, 0);
-                        showOperation(up
-                            ? R.string.vnc_op_scroll_up
-                            : R.string.vnc_op_scroll_down);
-                        lastScrollMidY = my;
-                    }
-                } else if (gestureMaxPointers >= 2 && pc >= 2) {
-                    handleTwoFinger(event);
-                } else if (gestureMaxPointers <= 1 && pc == 1) {
-                    float dx = event.getX() - lastTouchX;
-                    float dy = event.getY() - lastTouchY;
-                    lastTouchX = event.getX();
-                    lastTouchY = event.getY();
-                    if (dx != 0 || dy != 0) {
-                        moveCursor(dx, dy);
-                        showOperation(R.string.vnc_op_mouse_move);
-                    }
-                }
-                return true;
-            }
-            case MotionEvent.ACTION_UP:
-                if (gestureMaxPointers >= 2) {
-                    ivDisplay.setRotation(snapRotation(ivDisplay.getRotation()));
-                    clampPan();
-                    ivDisplay.setTranslationX(panX);
-                    ivDisplay.setTranslationY(panY);
-                    updateOperationLabelPosition();
-                } else {
-                    ensureCursorVisible();
-                }
-                if (!gestureMoved
-                    && System.currentTimeMillis() - gestureStartTime < TAP_TIMEOUT) {
-                    boolean dbl = lastTapFingerCount == gestureMaxPointers
-                        && System.currentTimeMillis() - lastTapTime < DOUBLE_TAP_TIMEOUT;
-                    handleTap(gestureMaxPointers, dbl);
-                    lastTapTime = System.currentTimeMillis();
-                    lastTapFingerCount = gestureMaxPointers;
-                } else {
-                    lastTapFingerCount = 0;
-                }
-                gestureMaxPointers = 0;
-                return true;
-            case MotionEvent.ACTION_CANCEL:
-                gestureMaxPointers = 0;
-                lastTapFingerCount = 0;
-                return true;
-            case MotionEvent.ACTION_POINTER_UP:
-                if (gestureMaxPointers == 2 && pc <= 2)
-                    ivDisplay.setRotation(snapRotation(ivDisplay.getRotation()));
-                return true;
-        }
-        return false;
-    }
-
-    private void handleTap(int fingerCount, boolean dbl) {
-        switch (fingerCount) {
-            case 1:
-                sendClick(MASK_LEFT);
-                if (dbl) sendClick(MASK_LEFT);
-                showOperation(dbl
-                    ? R.string.vnc_op_left_double_click
-                    : R.string.vnc_op_left_click);
-                break;
-            case 2:
-                sendClick(MASK_RIGHT);
-                if (dbl) sendClick(MASK_RIGHT);
-                showOperation(dbl
-                    ? R.string.vnc_op_right_double_click
-                    : R.string.vnc_op_right_click);
-                break;
-            default:
-                sendClick(MASK_MIDDLE);
-                if (dbl) sendClick(MASK_MIDDLE);
-                showOperation(dbl
-                    ? R.string.vnc_op_middle_double_click
-                    : R.string.vnc_op_middle_click);
-                break;
-        }
-    }
-
-    private void sendClick(int mask) {
-        vncClient.sendPointer((int) cursorX, (int) cursorY, mask);
-        vncClient.sendPointer((int) cursorX, (int) cursorY, 0);
-    }
-
-    private void initTwoFinger(@NonNull MotionEvent event) {
-        lastMidX = (event.getX(0) + event.getX(1)) / 2f;
-        lastMidY = (event.getY(0) + event.getY(1)) / 2f;
-        initialAngle = twoFingerAngle(event);
-        rotationBase = ivDisplay.getRotation();
-        initialDist = twoFingerDistance(event);
-        initialZoom = zoom;
-    }
-
-    private void handleTwoFinger(@NonNull MotionEvent event) {
-        float mx = (event.getX(0) + event.getX(1)) / 2f;
-        float my = (event.getY(0) + event.getY(1)) / 2f;
-        panX += mx - lastMidX;
-        panY += my - lastMidY;
-        lastMidX = mx;
-        lastMidY = my;
-        clampPan();
-        ivDisplay.setTranslationX(panX);
-        ivDisplay.setTranslationY(panY);
-        float angle = twoFingerAngle(event);
-        float dAngle = normalizeAngle(angle - initialAngle);
-        ivDisplay.setRotation(snapNear(rotationBase + dAngle));
-        float dist = twoFingerDistance(event);
-        if (initialDist > MIN_SCALE_DIST) {
-            float nz = max(MIN_ZOOM, min(initialZoom * dist / initialDist, MAX_ZOOM));
-            if (nz != zoom) {
-                zoom = nz;
-                applyViewSize();
-            }
-        }
-        updateOperationLabelPosition();
-    }
-
-    private void clampPan() {
-        int cW = displayContainer.getWidth();
-        int cH = displayContainer.getHeight();
-        int vW = currentViewW();
-        int vH = currentViewH();
-        panX = max(-(cW + vW) / 2f, min(panX, (cW + vW) / 2f));
-        panY = max(-(cH + vH) / 2f, min(panY, (cH + vH) / 2f));
-    }
-
-    private float twoFingerAngle(@NonNull MotionEvent e) {
-        float dx = e.getX(1) - e.getX(0);
-        float dy = e.getY(1) - e.getY(0);
-        return (float) Math.toDegrees(Math.atan2(dy, dx));
-    }
-
-    private float twoFingerDistance(@NonNull MotionEvent e) {
-        float dx = e.getX(1) - e.getX(0);
-        float dy = e.getY(1) - e.getY(0);
-        return (float) Math.hypot(dx, dy);
-    }
-
-    private float normalizeAngle(float a) {
-        while (a > 180) a -= 360;
-        while (a < -180) a += 360;
-        return a;
-    }
-
-    private float snapNear(float deg) {
-        float snapped = Math.round(deg / 90f) * 90f;
-        if (Math.abs(deg - snapped) <= SNAP_THRESHOLD) return snapped;
-        return deg;
-    }
-
-    private float snapRotation(float deg) {
-        return Math.round(deg / 90f) * 90f;
-    }
-
-    private void moveCursor(float dx, float dy) {
-        if (fbWidth <= 0 || fbHeight <= 0) return;
-        double rad = Math.toRadians(ivDisplay.getRotation());
-        float cos = (float) Math.cos(rad), sin = (float) Math.sin(rad);
-        float vncDx = dx * cos + dy * sin;
-        float vncDy = -dx * sin + dy * cos;
-        cursorX = max(0, min(cursorX + vncDx, fbWidth - 1));
-        cursorY = max(0, min(cursorY + vncDy, fbHeight - 1));
-        vncClient.sendPointer((int) cursorX, (int) cursorY, 0);
-        ensureCursorVisible();
-    }
-
-    private void ensureCursorVisible() {
-        if (fbWidth <= 0 || fbHeight <= 0) return;
-        int cW = displayContainer.getWidth();
-        int cH = displayContainer.getHeight();
-        int viewW = currentViewW();
-        int viewH = currentViewH();
-        if (cW <= 0 || cH <= 0 || viewW <= 0 || viewH <= 0) return;
-        double rad = Math.toRadians(ivDisplay.getRotation());
-        float cos = (float) Math.cos(rad), sin = (float) Math.sin(rad);
-        float localX = cursorX * viewW / (float) fbWidth;
-        float localY = cursorY * viewH / (float) fbHeight;
-        float relX = localX - viewW / 2f;
-        float relY = localY - viewH / 2f;
-        float rotX = relX * cos - relY * sin;
-        float rotY = relX * sin + relY * cos;
-        float screenX = cW / 2f + panX + rotX;
-        float screenY = cH / 2f + panY + rotY;
-        if (screenX < 0) panX -= screenX;
-        else if (screenX > cW) panX -= (screenX - cW);
-        if (screenY < 0) panY -= screenY;
-        else if (screenY > cH) panY -= (screenY - cH);
-        clampPan();
-        ivDisplay.setTranslationX(panX);
-        ivDisplay.setTranslationY(panY);
-        updateOperationLabelPosition();
-    }
-
-    private void updateOperationLabelPosition() {
-        if (operationLabel == null) return;
-        int cW = displayContainer.getWidth();
-        int cH = displayContainer.getHeight();
-        if (cW <= 0 || cH <= 0) return;
-        float r = ivDisplay.getRotation();
-        operationLabel.setRotation(r);
-        int deg = ((Math.round(r / 90f) % 4) + 4) % 4;
-        var lp = (FrameLayout.LayoutParams) operationLabel.getLayoutParams();
-        int m = (int) dp(8);
-        switch (deg) {
-            case 0:
-                lp.gravity = TOP | CENTER_HORIZONTAL;
-                lp.setMargins(0, m, 0, 0);
-                break;
-            case 1:
-                lp.gravity = END | CENTER_VERTICAL;
-                lp.setMargins(0, 0, m, 0);
-                break;
-            case 2:
-                lp.gravity = BOTTOM | CENTER_HORIZONTAL;
-                lp.setMargins(0, 0, 0, m);
-                break;
-            default:
-                lp.gravity = START | CENTER_VERTICAL;
-                lp.setMargins(m, 0, 0, 0);
-                break;
-        }
-        operationLabel.setLayoutParams(lp);
-    }
-
     private void showOperation(int resId) {
         if (operationLabel == null) return;
         operationLabel.setText(resId);
@@ -605,56 +631,8 @@ private void showOperation(int resId) {
         mainHandler.postDelayed(hideOperationLabel, OP_LABEL_HIDE_DELAY_MS);
     }
 
-    private void updateAspectRatio(int containerW, int containerH) {
-        if (containerW <= 0 || containerH <= 0 || fbWidth <= 0 || fbHeight <= 0) return;
-        float vmAspect = (float) fbWidth / fbHeight;
-        float containerAspect = (float) containerW / containerH;
-        if (vmAspect > containerAspect) {
-            baseViewW = containerW;
-            baseViewH = Math.round(containerW / vmAspect);
-        } else {
-            baseViewH = containerH;
-            baseViewW = Math.round(containerH * vmAspect);
-        }
-        applyViewSize();
-        if (inputMode == InputMode.MOUSE) ensureCursorVisible();
-    }
-
-    private void showBars() {
-        toolbar.setVisibility(VISIBLE);
-        statusBar.setVisibility(VISIBLE);
-        if (status == VncStatus.CONNECTED)
-            mainHandler.postDelayed(this::hideBars, AUTO_HIDE_DELAY_MS);
-    }
-
-    private void hideBars() {
-        if (isFullscreen) return;
-        toolbar.setVisibility(GONE);
-        statusBar.setVisibility(GONE);
-    }
-
     private void toggleFullscreen() {
-        isFullscreen = !isFullscreen;
-        var controller = getWindow().getInsetsController();
-        if (controller == null) return;
-        if (isFullscreen) {
-            mainHandler.removeCallbacks(this::hideBars);
-            toolbar.setVisibility(GONE);
-            statusBar.setVisibility(GONE);
-            extraKeysPanel.setVisibility(GONE);
-            controller.hide(WindowInsets.Type.systemBars());
-            controller.setSystemBarsBehavior(BEHAVIOR_SHOW_TRANSIENT_BARS_BY_SWIPE);
-        } else {
-            showBars();
-            if (extraKeysVisible) extraKeysPanel.animateIn();
-            controller.show(WindowInsets.Type.systemBars());
-        }
-        ViewCompat.requestApplyInsets(findViewById(android.R.id.content));
-    }
-
-    private void toggleExtraKeys() {
-        extraKeysVisible = !extraKeysVisible;
-        extraKeysPanel.setVisibleAnimated(extraKeysVisible);
+        chrome.toggleFullscreen();
     }
 
     @SuppressLint("ClickableViewAccessibility")
@@ -666,32 +644,57 @@ private void setupFab() {
     private void showFabMenu() {
         var popup = new MaterialMenu(this, fabMenu);
         popup.inflate(R.menu.menu_vnc_display_menu);
-        var item = popup.getMenu().findItem(R.id.menu_input_mode);
-        if (item != null) {
-            if (inputMode == InputMode.TOUCH) {
-                item.setTitle(R.string.vnc_menu_input_mode_mouse);
-                item.setIcon(R.drawable.ic_mouse);
-            } else {
-                item.setTitle(R.string.vnc_menu_input_mode_touch);
-                item.setIcon(R.drawable.ic_touchpad);
-            }
-        }
+        var header = new LinearLayout(this);
+        header.setOrientation(LinearLayout.VERTICAL);
+        header.addView(buildInputModeHeader(popup));
+        header.addView(DisplayKeyboardMenuRow.build(
+            getLayoutInflater(), chrome.getKeyboardMode(), this::applyKeyboardMode,
+            popup::dismiss));
+        popup.setHeaderView(header);
         popup.setOnMenuItemClickListener(this::onMenuItemClicked);
         popup.show();
     }
 
+    // Menu header: one row of three icon buttons (touch / tablet / mouse), active mode checked.
+    private View buildInputModeHeader(MaterialMenu popup) {
+        var group = (com.google.android.material.button.MaterialButtonToggleGroup)
+            getLayoutInflater().inflate(R.layout.view_input_mode_toggle, null);
+        group.check(inputMode == InputMode.MOUSE ? R.id.mode_mouse
+            : inputMode == InputMode.TABLET ? R.id.mode_tablet : R.id.mode_touch);
+        group.addOnButtonCheckedListener((g, checkedId, isChecked) -> {
+            if (!isChecked) return;
+            setInputMode(checkedId == R.id.mode_mouse ? InputMode.MOUSE
+                : checkedId == R.id.mode_tablet ? InputMode.TABLET : InputMode.TOUCH);
+            popup.dismiss();
+        });
+        return group;
+    }
+
+    // Selecting the system keyboard summons the IME; anything else puts it away, so the mode
+    // and what is actually on screen agree.
+    private void applyKeyboardMode(@NonNull KeyboardMode mode) {
+        chrome.setKeyboardMode(mode);
+        if (mode == KeyboardMode.SYSTEM) toggleSoftKeyboard();
+        else hideSoftKeyboard();
+    }
+
+    // Dropping the display view's focus first matters: it is what the IME is attached to, and
+    // some ROMs re-show the keyboard for a still-focused target right after a hide request.
+    private void hideSoftKeyboard() {
+        ivDisplay.clearFocus();
+        var controller = WindowCompat.getInsetsController(getWindow(), ivDisplay);
+        controller.hide(WindowInsetsCompat.Type.ime());
+        var imm = getSystemService(android.view.inputmethod.InputMethodManager.class);
+        if (imm != null)
+            imm.hideSoftInputFromWindow(displayContainer.getWindowToken(), 0);
+    }
+
     @Override
     protected boolean onMenuItemClicked(@NonNull MenuItem item) {
         int id = item.getItemId();
-        if (id == R.id.menu_extra_keys) {
-            toggleExtraKeys();
-            return true;
-        } else if (id == R.id.menu_fullscreen) {
+        if (id == R.id.menu_fullscreen) {
             toggleFullscreen();
             return true;
-        } else if (id == R.id.menu_input_mode) {
-            setInputMode(inputMode == InputMode.TOUCH
-                ? InputMode.MOUSE : InputMode.TOUCH);
             return true;
         }
         return super.onMenuItemClicked(item);
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/display/vnc/display/VncBitmapSource.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/vnc/display/VncBitmapSource.java
new file mode 100644
index 000000000..d73be2a93
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/vnc/display/VncBitmapSource.java
@@ -0,0 +1,51 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
+package cn.classfun.droidvm.ui.vm.display.vnc.display;
+
+import androidx.annotation.NonNull;
+
+import cn.classfun.droidvm.ui.vm.display.base.DisplaySource;
+
+/**
+ * {@link DisplaySource} adapter for the VNC display path. The RFB connection, framebuffer bitmap
+ * and reconnect logic live in BaseVncActivity (which owns the whole connection lifecycle, so
+ * {@link #start()}/{@link #shutdown()} are no-ops here); the activity feeds framebuffer events in
+ * through the dispatch methods. This keeps the VNC console speaking the same source language as
+ * the native path until the connection plumbing itself moves in here with the base-activity
+ * unification. No guest-resize channel (would be RFB desktop-size) yet.
+ */
+public final class VncBitmapSource implements DisplaySource {
+    private final Callbacks callbacks;
+
+    public VncBitmapSource(@NonNull Callbacks callbacks) {
+        this.callbacks = callbacks;
+    }
+
+    /** BaseVncActivity's onFramebufferReady hook lands here. */
+    public void dispatchContentSize(int width, int height) {
+        callbacks.onContentSize(width, height);
+    }
+
+    /** BaseVncActivity's status hook lands here (currently informational only). */
+    public void dispatchState(@NonNull State state) {
+        callbacks.onStateChanged(state);
+    }
+
+    @Override
+    public void start() {
+    }
+
+    @Override
+    public void shutdown() {
+    }
+
+    @Override
+    public boolean supportsGuestResize() {
+        return false;
+    }
+
+    @Override
+    public void requestGuestResize(int width, int height) {
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/display/vnc/input/VncExtraKeysPanel.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/vnc/input/VncExtraKeysPanel.java
index 2bc4c3649..f9dbbcf65 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/display/vnc/input/VncExtraKeysPanel.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/vnc/input/VncExtraKeysPanel.java
@@ -3,7 +3,6 @@
 // Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.ui.vm.display.vnc.input;
 
-import static android.view.KeyEvent.KEYCODE_CAPS_LOCK;
 import static cn.classfun.droidvm.ui.vm.display.base.X11Keymap.androidKeyToXKeysym;
 
 import androidx.annotation.NonNull;
@@ -15,8 +14,8 @@
 
 /**
  * Adapts the shared {@link DisplayExtraKeysPanel} to a VNC backend, emitting X keysyms through
- * {@link VncClient}. The sticky-modifier handling lives in {@link BaseExtraKeysAdapter}; only the
- * emit/ready hooks and the keysym-level send helpers are backend-specific.
+ * {@link VncClient}. The sticky-modifier and key down/up handling live in
+ * {@link BaseExtraKeysAdapter}; only the emit/ready hooks are backend-specific.
  */
 public final class VncExtraKeysPanel extends BaseExtraKeysAdapter {
     @Nullable
@@ -38,42 +37,12 @@ public DisplayExtraKeysPanel getPanel() {
 
     @Override
     protected void emitKey(int androidKeyCode, boolean down) {
-        if (vncClient != null) vncClient.sendKey(androidKeyToXKeysym(androidKeyCode), down);
+        int keysym = androidKeyToXKeysym(androidKeyCode);
+        if (keysym != 0 && vncClient != null) vncClient.sendKey(keysym, down);
     }
 
     @Override
     protected boolean isReady() {
         return vncClient != null && vncClient.isConnected();
     }
-
-    public void sendKeysym(int keysym) {
-        if (!isReady() || keysym == 0) return;
-        applyModifiers(true);
-        vncClient.sendKey(keysym, true);
-        vncClient.sendKey(keysym, false);
-        applyModifiers(false);
-    }
-
-    public void sendKey(int androidKeyCode) {
-        sendKeysym(androidKeyToXKeysym(androidKeyCode));
-    }
-
-    public void sendChar(char ch) {
-        sendKeysym(ch);
-    }
-
-    @Override
-    public void onKeyRepeat(int androidKeyCode) {
-        sendKey(androidKeyCode);
-    }
-
-    @Override
-    public void onCharRepeat(char ch) {
-        sendChar(ch);
-    }
-
-    @Override
-    public void onCapsToggle(boolean active) {
-        sendKey(KEYCODE_CAPS_LOCK);
-    }
 }
diff --git a/app/src/main/res/drawable/extra_key_bg.xml b/app/src/main/res/drawable/extra_key_bg.xml
new file mode 100644
index 000000000..e89794c07
--- /dev/null
+++ b/app/src/main/res/drawable/extra_key_bg.xml
@@ -0,0 +1,8 @@
+<?xml version="1.0" encoding="utf-8"?>
+<!-- Key background for the display keyboards: pressed lightens instantly (the key surface is
+     always dark); on release the highlight fades back out instead of snapping. -->
+<selector xmlns:android="http://schemas.android.com/apk/res/android"
+    android:exitFadeDuration="200">
+    <item android:state_pressed="true" android:drawable="@color/extra_key_bg_pressed" />
+    <item android:drawable="@android:color/transparent" />
+</selector>
diff --git a/app/src/main/res/drawable/ic_key_backspace.xml b/app/src/main/res/drawable/ic_key_backspace.xml
new file mode 100644
index 000000000..e1fec3b7d
--- /dev/null
+++ b/app/src/main/res/drawable/ic_key_backspace.xml
@@ -0,0 +1,10 @@
+<vector xmlns:android="http://schemas.android.com/apk/res/android"
+    android:width="18dp"
+    android:height="18dp"
+    android:viewportWidth="24"
+    android:viewportHeight="24"
+    android:tint="?attr/colorOnSurface">
+    <path
+        android:fillColor="@android:color/white"
+        android:pathData="M19,3H8L1,12L8,21H19A2,2 0 0,0 21,19V5A2,2 0 0,0 19,3M18.3,16.3L16.9,17.7L14,14.8L11.1,17.7L9.7,16.3L12.6,13.4L9.7,10.5L11.1,9.1L14,12L16.9,9.1L18.3,10.5L15.4,13.4L18.3,16.3Z" />
+</vector>
diff --git a/app/src/main/res/drawable/ic_key_enter.xml b/app/src/main/res/drawable/ic_key_enter.xml
new file mode 100644
index 000000000..11ba80158
--- /dev/null
+++ b/app/src/main/res/drawable/ic_key_enter.xml
@@ -0,0 +1,10 @@
+<vector xmlns:android="http://schemas.android.com/apk/res/android"
+    android:width="18dp"
+    android:height="18dp"
+    android:viewportWidth="24"
+    android:viewportHeight="24"
+    android:tint="?attr/colorOnSurface">
+    <path
+        android:fillColor="@android:color/white"
+        android:pathData="M19,5V13H7.83L10.91,9.91L9.5,8.5L4,14L9.5,19.5L10.92,18.09L7.83,15H21V5H19Z" />
+</vector>
diff --git a/app/src/main/res/drawable/ic_key_keyboard.xml b/app/src/main/res/drawable/ic_key_keyboard.xml
new file mode 100644
index 000000000..63ec2dc4e
--- /dev/null
+++ b/app/src/main/res/drawable/ic_key_keyboard.xml
@@ -0,0 +1,13 @@
+<!-- Extra-keys bar variant of ic_keyboard: 18dp like its ic_key_* siblings so
+     the row's glyphs are one size, and a white fill for the ImageView tint the
+     ExtraKeyIcon style applies. -->
+<vector xmlns:android="http://schemas.android.com/apk/res/android"
+    android:width="18dp"
+    android:height="18dp"
+    android:viewportWidth="24"
+    android:viewportHeight="24"
+    android:tint="?attr/colorOnSurface">
+    <path
+        android:fillColor="@android:color/white"
+        android:pathData="M4,5A2,2 0 0,0 2,7V17A2,2 0 0,0 4,19H20A2,2 0 0,0 22,17V7A2,2 0 0,0 20,5H4M4,7H20V17H4V7M5,8V10H7V8H5M8,8V10H10V8H8M11,8V10H13V8H11M14,8V10H16V8H14M17,8V10H19V8H17M5,11V13H7V11H5M8,11V13H10V11H8M11,11V13H13V11H11M14,11V13H16V11H14M17,11V13H19V11H17M8,14V16H16V14H8Z" />
+</vector>
diff --git a/app/src/main/res/drawable/ic_key_shift.xml b/app/src/main/res/drawable/ic_key_shift.xml
new file mode 100644
index 000000000..ba38f1bb5
--- /dev/null
+++ b/app/src/main/res/drawable/ic_key_shift.xml
@@ -0,0 +1,10 @@
+<vector xmlns:android="http://schemas.android.com/apk/res/android"
+    android:width="18dp"
+    android:height="18dp"
+    android:viewportWidth="24"
+    android:viewportHeight="24"
+    android:tint="?attr/colorOnSurface">
+    <path
+        android:fillColor="@android:color/white"
+        android:pathData="M12,3L4,11H8V17H16V11H20L12,3M8,19V21H16V19H8Z" />
+</vector>
diff --git a/app/src/main/res/drawable/ic_key_space.xml b/app/src/main/res/drawable/ic_key_space.xml
new file mode 100644
index 000000000..5648c2635
--- /dev/null
+++ b/app/src/main/res/drawable/ic_key_space.xml
@@ -0,0 +1,10 @@
+<vector xmlns:android="http://schemas.android.com/apk/res/android"
+    android:width="22dp"
+    android:height="22dp"
+    android:viewportWidth="24"
+    android:viewportHeight="24"
+    android:tint="?attr/colorOnSurface">
+    <path
+        android:fillColor="@android:color/white"
+        android:pathData="M5,9V15H19V9H17.4V13.4H6.6V9H5Z" />
+</vector>
diff --git a/app/src/main/res/drawable/ic_key_tab.xml b/app/src/main/res/drawable/ic_key_tab.xml
new file mode 100644
index 000000000..756d47ca4
--- /dev/null
+++ b/app/src/main/res/drawable/ic_key_tab.xml
@@ -0,0 +1,10 @@
+<vector xmlns:android="http://schemas.android.com/apk/res/android"
+    android:width="18dp"
+    android:height="18dp"
+    android:viewportWidth="24"
+    android:viewportHeight="24"
+    android:tint="?attr/colorOnSurface">
+    <path
+        android:fillColor="@android:color/white"
+        android:pathData="M2,6H4V18H2V6M19,12L13,7V11H6V13H13V17L19,12M20,6H22V18H20V6Z" />
+</vector>
diff --git a/app/src/main/res/drawable/ic_key_windows.xml b/app/src/main/res/drawable/ic_key_windows.xml
new file mode 100644
index 000000000..b6064b368
--- /dev/null
+++ b/app/src/main/res/drawable/ic_key_windows.xml
@@ -0,0 +1,10 @@
+<vector xmlns:android="http://schemas.android.com/apk/res/android"
+    android:width="16dp"
+    android:height="16dp"
+    android:viewportWidth="24"
+    android:viewportHeight="24"
+    android:tint="?attr/colorOnSurface">
+    <path
+        android:fillColor="@android:color/white"
+        android:pathData="M3,5.5L10.5,4.47V11.25H3V5.5M3,18.5L10.5,19.53V12.82H3V18.5M11.5,19.66L21,21V12.82H11.5V19.66M11.5,4.34V11.25H21V3L11.5,4.34Z" />
+</vector>
diff --git a/app/src/main/res/drawable/ic_keyboard_close.xml b/app/src/main/res/drawable/ic_keyboard_close.xml
new file mode 100644
index 000000000..b463b6dab
--- /dev/null
+++ b/app/src/main/res/drawable/ic_keyboard_close.xml
@@ -0,0 +1,10 @@
+<vector xmlns:android="http://schemas.android.com/apk/res/android"
+    android:width="18dp"
+    android:height="18dp"
+    android:viewportWidth="24"
+    android:viewportHeight="24"
+    android:tint="?attr/colorOnSurface">
+    <path
+        android:fillColor="@android:color/white"
+        android:pathData="M19,3H5A2,2 0 0,0 3,5V13A2,2 0 0,0 5,15H19A2,2 0 0,0 21,13V5A2,2 0 0,0 19,3M19,13H5V5H19V13M6,6H8V8H6V6M9,6H11V8H9V6M12,6H14V8H12V6M15,6H17V8H15V6M6,9H8V11H6V9M9,9H15V11H9V9M16,9H18V11H16V9M12,22L8.5,18H15.5L12,22Z" />
+</vector>
diff --git a/app/src/main/res/drawable/ic_keyboard_phy.xml b/app/src/main/res/drawable/ic_keyboard_phy.xml
new file mode 100644
index 000000000..81990c40a
--- /dev/null
+++ b/app/src/main/res/drawable/ic_keyboard_phy.xml
@@ -0,0 +1,9 @@
+<vector xmlns:android="http://schemas.android.com/apk/res/android"
+    android:width="24dp"
+    android:height="24dp"
+    android:viewportWidth="24"
+    android:viewportHeight="24">
+    <path
+        android:fillColor="?attr/colorOnSurface"
+        android:pathData="M4,6H20V16H4M20,18A2,2 0 0,0 22,16V6A2,2 0 0,0 20,4H4C2.89,4 2,4.89 2,6V16A2,2 0 0,0 4,18H0V20H24V18H20Z" />
+</vector>
diff --git a/app/src/main/res/drawable/ic_tablet_stylus.xml b/app/src/main/res/drawable/ic_tablet_stylus.xml
new file mode 100644
index 000000000..9b685a839
--- /dev/null
+++ b/app/src/main/res/drawable/ic_tablet_stylus.xml
@@ -0,0 +1,21 @@
+<?xml version="1.0" encoding="utf-8"?>
+<!-- Tablet input mode: a board with a stylus drawing on it (frame + material edit glyph). -->
+<vector xmlns:android="http://schemas.android.com/apk/res/android"
+    android:width="24dp"
+    android:height="24dp"
+    android:viewportWidth="24"
+    android:viewportHeight="24"
+    android:tint="?attr/colorControlNormal">
+    <path
+        android:fillColor="@android:color/white"
+        android:pathData="M4,3C2.9,3 2,3.9 2,5v14c0,1.1 0.9,2 2,2h16c1.1,0 2,-0.9 2,-2V5c0,-1.1 -0.9,-2 -2,-2H4zM4,5h16v14H4V5z" />
+    <group
+        android:scaleX="0.6"
+        android:scaleY="0.6"
+        android:translateX="4.8"
+        android:translateY="4.8">
+        <path
+            android:fillColor="@android:color/white"
+            android:pathData="M3,17.25V21h3.75L17.81,9.94l-3.75,-3.75L3,17.25zM20.71,7.04c0.39,-0.39 0.39,-1.02 0,-1.41l-2.34,-2.34c-0.39,-0.39 -1.02,-0.39 -1.41,0l-1.83,1.83 3.75,3.75 1.83,-1.83z" />
+    </group>
+</vector>
diff --git a/app/src/main/res/drawable/ic_touchscreen.xml b/app/src/main/res/drawable/ic_touchscreen.xml
new file mode 100644
index 000000000..09a8fde68
--- /dev/null
+++ b/app/src/main/res/drawable/ic_touchscreen.xml
@@ -0,0 +1,21 @@
+<?xml version="1.0" encoding="utf-8"?>
+<!-- Touch input mode: a screen with a finger tapping it (frame + material touch_app glyph). -->
+<vector xmlns:android="http://schemas.android.com/apk/res/android"
+    android:width="24dp"
+    android:height="24dp"
+    android:viewportWidth="24"
+    android:viewportHeight="24"
+    android:tint="?attr/colorControlNormal">
+    <path
+        android:fillColor="@android:color/white"
+        android:pathData="M4,3C2.9,3 2,3.9 2,5v14c0,1.1 0.9,2 2,2h16c1.1,0 2,-0.9 2,-2V5c0,-1.1 -0.9,-2 -2,-2H4zM4,5h16v14H4V5z" />
+    <group
+        android:scaleX="0.6"
+        android:scaleY="0.6"
+        android:translateX="4.65"
+        android:translateY="4.6">
+        <path
+            android:fillColor="@android:color/white"
+            android:pathData="M9,11.24V7.5C9,6.12 10.12,5 11.5,5S14,6.12 14,7.5v3.74c1.21,-0.81 2,-2.18 2,-3.74C16,5.01 13.99,3 11.5,3S7,5.01 7,7.5C7,9.06 7.79,10.43 9,11.24zM18.84,15.87l-4.54,-2.26c-0.17,-0.07 -0.35,-0.11 -0.54,-0.11H13v-6C13,6.67 12.33,6 11.5,6S10,6.67 10,7.5v10.74c-3.6,-0.76 -3.54,-0.75 -3.67,-0.75c-0.31,0 -0.59,0.13 -0.79,0.33l-0.79,0.8l4.94,4.94C9.96,23.83 10.34,24 10.75,24h6.79c0.75,0 1.33,-0.55 1.44,-1.28l0.75,-5.27c0.01,-0.07 0.02,-0.14 0.02,-0.2C19.75,16.63 19.37,16.09 18.84,15.87z" />
+    </group>
+</vector>
diff --git a/app/src/main/res/layout/activity_vm_native_display.xml b/app/src/main/res/layout/activity_vm_native_display.xml
index 46f492380..413d24268 100644
--- a/app/src/main/res/layout/activity_vm_native_display.xml
+++ b/app/src/main/res/layout/activity_vm_native_display.xml
@@ -6,7 +6,6 @@
     android:layout_width="match_parent"
     android:layout_height="match_parent"
     android:background="@color/vnc_background"
-    android:fitsSystemWindows="true"
     android:orientation="vertical"
     tools:context=".ui.vm.display.nativedisplay.display.VMNativeDisplayActivity">
 
@@ -69,6 +68,30 @@
             android:layout_height="match_parent"
             android:layout_gravity="center" />
 
+        <!-- The guest's HARDWARE cursor, composited by Android on top of the scanout.
+             virtio-gpu delivers the pointer on a separate cursor plane and crosvm hands it to us
+             as a second Surface; without this view those pixels go to a sink buffer that is never
+             displayed and the guest has no visible pointer.
+
+             Not optional dressing: a Linux compositor can be told to draw the pointer into the
+             framebuffer instead (KWIN_FORCE_SW_CURSOR and friends), but Windows' virtio-gpu driver
+             and UEFI have no such knob, and only ever use the cursor plane.
+
+             64x64 is virtio-gpu's cursor plane size; a smaller cursor image arrives in the
+             top-left with the rest transparent. Positioned from the guest's own cursor stream, so
+             layout_gravity is only the origin that the translation is applied from.
+
+             Laid out GONE only so nothing flashes at the top-left corner before the first
+             position: bindViews() makes it VISIBLE and parks it off-screen immediately, and it
+             stays visible from then on. Hiding the pointer is a park, never a GONE; see
+             CURSOR_PARKED_PX in VMNativeDisplayActivity for why the Surface must not die. -->
+        <SurfaceView
+            android:id="@+id/cursor_view"
+            android:layout_width="64px"
+            android:layout_height="64px"
+            android:layout_gravity="top|start"
+            android:visibility="gone" />
+
         <!-- Editor that hosts the IME; SurfaceView is an unreliable keyboard target. Kept visually
              imperceptible (1px, transparent text/background, no cursor) rather than alpha=0, because
              some ROMs (e.g. OPlus) refuse to show the keyboard for a fully invisible editor. -->
@@ -141,4 +164,11 @@
         android:gravity="bottom"
         android:orientation="vertical" />
 
+    <cn.classfun.droidvm.ui.vm.display.base.DisplayPhysicalKeyboardView
+        android:id="@+id/phy_keyboard"
+        android:layout_width="match_parent"
+        android:layout_height="wrap_content"
+        android:orientation="vertical"
+        android:visibility="gone" />
+
 </LinearLayout>
diff --git a/app/src/main/res/layout/activity_vm_vnc_display.xml b/app/src/main/res/layout/activity_vm_vnc_display.xml
index 90672de5d..38de37dde 100644
--- a/app/src/main/res/layout/activity_vm_vnc_display.xml
+++ b/app/src/main/res/layout/activity_vm_vnc_display.xml
@@ -140,4 +140,11 @@
         android:gravity="bottom"
         android:orientation="vertical" />
 
+    <cn.classfun.droidvm.ui.vm.display.base.DisplayPhysicalKeyboardView
+        android:id="@+id/phy_keyboard"
+        android:layout_width="match_parent"
+        android:layout_height="wrap_content"
+        android:orientation="vertical"
+        android:visibility="gone" />
+
 </LinearLayout>
diff --git a/app/src/main/res/layout/view_input_mode_toggle.xml b/app/src/main/res/layout/view_input_mode_toggle.xml
new file mode 100644
index 000000000..60ff859b5
--- /dev/null
+++ b/app/src/main/res/layout/view_input_mode_toggle.xml
@@ -0,0 +1,56 @@
+<?xml version="1.0" encoding="utf-8"?>
+<!-- Segmented input-mode selector shown as the display fab-menu header: one row of three
+     icon buttons (touch / tablet / mouse), single-selection, the active mode checked. -->
+<com.google.android.material.button.MaterialButtonToggleGroup
+    xmlns:android="http://schemas.android.com/apk/res/android"
+    xmlns:app="http://schemas.android.com/apk/res-auto"
+    android:id="@+id/input_mode_group"
+    android:layout_width="wrap_content"
+    android:layout_height="wrap_content"
+    android:paddingStart="12dp"
+    android:paddingEnd="12dp"
+    android:paddingTop="10dp"
+    android:paddingBottom="2dp"
+    app:singleSelection="true"
+    app:selectionRequired="true">
+
+    <com.google.android.material.button.MaterialButton
+        android:id="@+id/mode_touch"
+        style="?attr/materialButtonOutlinedStyle"
+        android:layout_width="wrap_content"
+        android:layout_height="wrap_content"
+        android:minWidth="60dp"
+        android:paddingStart="16dp"
+        android:paddingEnd="16dp"
+        android:contentDescription="@string/vnc_menu_input_mode_touch"
+        app:icon="@drawable/ic_touchscreen"
+        app:iconGravity="textStart"
+        app:iconPadding="0dp" />
+
+    <com.google.android.material.button.MaterialButton
+        android:id="@+id/mode_tablet"
+        style="?attr/materialButtonOutlinedStyle"
+        android:layout_width="wrap_content"
+        android:layout_height="wrap_content"
+        android:minWidth="60dp"
+        android:paddingStart="16dp"
+        android:paddingEnd="16dp"
+        android:contentDescription="@string/vnc_menu_input_mode_tablet"
+        app:icon="@drawable/ic_tablet_stylus"
+        app:iconGravity="textStart"
+        app:iconPadding="0dp" />
+
+    <com.google.android.material.button.MaterialButton
+        android:id="@+id/mode_mouse"
+        style="?attr/materialButtonOutlinedStyle"
+        android:layout_width="wrap_content"
+        android:layout_height="wrap_content"
+        android:minWidth="60dp"
+        android:paddingStart="16dp"
+        android:paddingEnd="16dp"
+        android:contentDescription="@string/vnc_menu_input_mode_mouse"
+        app:icon="@drawable/ic_mouse"
+        app:iconGravity="textStart"
+        app:iconPadding="0dp" />
+
+</com.google.android.material.button.MaterialButtonToggleGroup>
diff --git a/app/src/main/res/layout/view_keyboard_mode_toggle.xml b/app/src/main/res/layout/view_keyboard_mode_toggle.xml
new file mode 100644
index 000000000..9b3133b1d
--- /dev/null
+++ b/app/src/main/res/layout/view_keyboard_mode_toggle.xml
@@ -0,0 +1,57 @@
+<?xml version="1.0" encoding="utf-8"?>
+<!-- Keyboard row of the display fab-menu header: one single-selection group choosing the typing
+     surface. The Extra/FNx zone toggles are not here - they live on the keyboard itself, since
+     they only mean anything while one is up. -->
+<com.google.android.material.button.MaterialButtonToggleGroup
+    xmlns:android="http://schemas.android.com/apk/res/android"
+    xmlns:app="http://schemas.android.com/apk/res-auto"
+    android:id="@+id/keyboard_mode_group"
+    android:layout_width="wrap_content"
+    android:layout_height="wrap_content"
+    android:paddingStart="12dp"
+    android:paddingEnd="12dp"
+    android:paddingTop="2dp"
+    android:paddingBottom="10dp"
+    app:selectionRequired="true"
+    app:singleSelection="true">
+
+    <com.google.android.material.button.MaterialButton
+        android:id="@+id/mode_kb_none"
+        style="?attr/materialButtonOutlinedStyle"
+        android:layout_width="wrap_content"
+        android:layout_height="wrap_content"
+        android:contentDescription="@string/keyboard_mode_none"
+        android:minWidth="60dp"
+        android:paddingStart="16dp"
+        android:paddingEnd="16dp"
+        app:icon="@drawable/ic_keyboard_close"
+        app:iconGravity="textStart"
+        app:iconPadding="0dp" />
+
+    <com.google.android.material.button.MaterialButton
+        android:id="@+id/mode_kb_system"
+        style="?attr/materialButtonOutlinedStyle"
+        android:layout_width="wrap_content"
+        android:layout_height="wrap_content"
+        android:contentDescription="@string/keyboard_mode_system"
+        android:minWidth="60dp"
+        android:paddingStart="16dp"
+        android:paddingEnd="16dp"
+        app:icon="@drawable/ic_keyboard"
+        app:iconGravity="textStart"
+        app:iconPadding="0dp" />
+
+    <com.google.android.material.button.MaterialButton
+        android:id="@+id/mode_kb_laptop"
+        style="?attr/materialButtonOutlinedStyle"
+        android:layout_width="wrap_content"
+        android:layout_height="wrap_content"
+        android:contentDescription="@string/keyboard_mode_laptop"
+        android:minWidth="60dp"
+        android:paddingStart="16dp"
+        android:paddingEnd="16dp"
+        app:icon="@drawable/ic_keyboard_phy"
+        app:iconGravity="textStart"
+        app:iconPadding="0dp" />
+
+</com.google.android.material.button.MaterialButtonToggleGroup>
diff --git a/app/src/main/res/layout/widget_display_extra_keys.xml b/app/src/main/res/layout/widget_display_extra_keys.xml
index cb3db1159..0aeee3fe9 100644
--- a/app/src/main/res/layout/widget_display_extra_keys.xml
+++ b/app/src/main/res/layout/widget_display_extra_keys.xml
@@ -1,162 +1,124 @@
 <?xml version="1.0" encoding="utf-8"?>
+<!-- The keyboard panel's shared zones, stacked bottom-up so the Main row never moves under the
+     fingers: Extra on top, then FNx, then the Main row used in system-IME mode (the laptop
+     keyboard is a separate view docked below this one and supplies its own Main). -->
 <merge xmlns:android="http://schemas.android.com/apk/res/android"
     xmlns:tools="http://schemas.android.com/tools"
     tools:orientation="vertical"
     tools:parentTag="android.widget.LinearLayout">
 
     <LinearLayout
+        android:id="@+id/extra_zone"
         android:layout_width="match_parent"
-        android:layout_height="40dp"
-        android:background="@color/extra_keys_background"
-        android:orientation="horizontal">
-
-        <Button
-            android:id="@+id/btn_esc"
-            style="@style/ExtraKey"
-            android:text="@string/key_esc"
-            tools:ignore="TouchTargetSizeCheck" />
-
-        <Button
-            android:id="@+id/btn_slash"
-            style="@style/ExtraKey"
-            android:text="@string/key_slash"
-            tools:ignore="TouchTargetSizeCheck" />
-
-        <Button
-            android:id="@+id/btn_dash"
-            style="@style/ExtraKey"
-            android:text="@string/key_dash"
-            tools:ignore="TouchTargetSizeCheck" />
-
-        <Button
-            android:id="@+id/btn_home"
-            style="@style/ExtraKey"
-            android:text="@string/key_home"
-            tools:ignore="TouchTargetSizeCheck" />
-
-        <Button
-            android:id="@+id/btn_up"
-            style="@style/ExtraKey"
-            android:text="@string/key_up"
-            tools:ignore="TouchTargetSizeCheck" />
-
-        <Button
-            android:id="@+id/btn_end"
-            style="@style/ExtraKey"
-            android:text="@string/key_end"
-            tools:ignore="TouchTargetSizeCheck" />
+        android:layout_height="wrap_content"
+        android:orientation="vertical">
 
-        <Button
-            android:id="@+id/btn_pgup"
-            style="@style/ExtraKey"
-            android:text="@string/key_pgup"
-            tools:ignore="TouchTargetSizeCheck" />
-    </LinearLayout>
+        <LinearLayout
+            android:layout_width="match_parent"
+            android:layout_height="40dp"
+            android:background="@color/extra_keys_background"
+            android:orientation="horizontal">
 
-    <LinearLayout
-        android:layout_width="match_parent"
-        android:layout_height="40dp"
-        android:background="@color/extra_keys_background"
-        android:orientation="horizontal">
+            <Button
+                android:id="@+id/btn_esc"
+                style="@style/ExtraKey"
+                android:text="@string/key_esc"
+                tools:ignore="TouchTargetSizeCheck" />
 
-        <Button
-            android:id="@+id/btn_tab"
-            style="@style/ExtraKey"
-            android:text="@string/key_tab"
-            tools:ignore="TouchTargetSizeCheck" />
+            <Button
+                android:id="@+id/btn_slash"
+                style="@style/ExtraKey"
+                android:text="@string/key_slash"
+                tools:ignore="TouchTargetSizeCheck" />
 
-        <Button
-            android:id="@+id/btn_ctrl"
-            style="@style/ExtraKey"
-            android:text="@string/key_ctrl"
-            tools:ignore="TouchTargetSizeCheck" />
+            <Button
+                android:id="@+id/btn_dash"
+                style="@style/ExtraKey"
+                android:text="@string/key_dash"
+                tools:ignore="TouchTargetSizeCheck" />
 
-        <Button
-            android:id="@+id/btn_alt"
-            style="@style/ExtraKey"
-            android:text="@string/key_alt"
-            tools:ignore="TouchTargetSizeCheck" />
+            <Button
+                android:id="@+id/btn_home"
+                style="@style/ExtraKey"
+                android:text="@string/key_home"
+                tools:ignore="TouchTargetSizeCheck" />
 
-        <Button
-            android:id="@+id/btn_left"
-            style="@style/ExtraKey"
-            android:text="@string/key_left"
-            tools:ignore="TouchTargetSizeCheck" />
+            <Button
+                android:id="@+id/btn_up"
+                style="@style/ExtraKey"
+                android:text="@string/key_up"
+                tools:ignore="TouchTargetSizeCheck" />
 
-        <Button
-            android:id="@+id/btn_down"
-            style="@style/ExtraKey"
-            android:text="@string/key_down"
-            tools:ignore="TouchTargetSizeCheck" />
+            <Button
+                android:id="@+id/btn_end"
+                style="@style/ExtraKey"
+                android:text="@string/key_end"
+                tools:ignore="TouchTargetSizeCheck" />
 
-        <Button
-            android:id="@+id/btn_right"
-            style="@style/ExtraKey"
-            android:text="@string/key_right"
-            tools:ignore="TouchTargetSizeCheck" />
+            <Button
+                android:id="@+id/btn_pgup"
+                style="@style/ExtraKey"
+                android:text="@string/key_pgup"
+                tools:ignore="TouchTargetSizeCheck" />
+        </LinearLayout>
 
-        <Button
-            android:id="@+id/btn_pgdn"
-            style="@style/ExtraKey"
-            android:text="@string/key_pgdn"
-            tools:ignore="TouchTargetSizeCheck" />
-    </LinearLayout>
+        <LinearLayout
+            android:layout_width="match_parent"
+            android:layout_height="40dp"
+            android:background="@color/extra_keys_background"
+            android:orientation="horizontal">
 
-    <LinearLayout
-        android:layout_width="match_parent"
-        android:layout_height="40dp"
-        android:background="@color/extra_keys_background"
-        android:orientation="horizontal">
+            <ImageButton
+                android:id="@+id/btn_bksp"
+                style="@style/ExtraKeyIcon"
+                android:contentDescription="@string/key_desc_backspace"
+                android:src="@drawable/ic_key_backspace"
+                tools:ignore="TouchTargetSizeCheck" />
 
-        <Button
-            android:id="@+id/btn_win"
-            style="@style/ExtraKey"
-            android:text="@string/key_win"
-            tools:ignore="TouchTargetSizeCheck" />
+            <Button
+                android:id="@+id/btn_del"
+                style="@style/ExtraKey"
+                android:text="@string/key_del"
+                tools:ignore="TouchTargetSizeCheck" />
 
-        <Button
-            android:id="@+id/btn_cap"
-            style="@style/ExtraKey"
-            android:text="@string/key_cap"
-            tools:ignore="TouchTargetSizeCheck" />
+            <Button
+                android:id="@+id/btn_ins"
+                style="@style/ExtraKey"
+                android:text="@string/key_ins"
+                tools:ignore="TouchTargetSizeCheck" />
 
-        <Button
-            android:id="@+id/btn_shift"
-            style="@style/ExtraKey"
-            android:text="@string/key_shift"
-            tools:ignore="TouchTargetSizeCheck" />
+            <Button
+                android:id="@+id/btn_left"
+                style="@style/ExtraKey"
+                android:text="@string/key_left"
+                tools:ignore="TouchTargetSizeCheck" />
 
-        <Button
-            android:id="@+id/btn_del"
-            style="@style/ExtraKey"
-            android:text="@string/key_del"
-            tools:ignore="TouchTargetSizeCheck" />
+            <Button
+                android:id="@+id/btn_down"
+                style="@style/ExtraKey"
+                android:text="@string/key_down"
+                tools:ignore="TouchTargetSizeCheck" />
 
-        <Button
-            android:id="@+id/btn_ins"
-            style="@style/ExtraKey"
-            android:text="@string/key_ins"
-            tools:ignore="TouchTargetSizeCheck" />
+            <Button
+                android:id="@+id/btn_right"
+                style="@style/ExtraKey"
+                android:text="@string/key_right"
+                tools:ignore="TouchTargetSizeCheck" />
 
-        <Button
-            android:id="@+id/btn_enter"
-            style="@style/ExtraKey"
-            android:text="@string/key_enter"
-            tools:ignore="TouchTargetSizeCheck" />
+            <Button
+                android:id="@+id/btn_pgdn"
+                style="@style/ExtraKey"
+                android:text="@string/key_pgdn"
+                tools:ignore="TouchTargetSizeCheck" />
+        </LinearLayout>
 
-        <Button
-            android:id="@+id/btn_fnx"
-            style="@style/ExtraKey"
-            android:text="@string/key_fnx"
-            tools:ignore="TouchTargetSizeCheck" />
     </LinearLayout>
 
     <LinearLayout
-        android:id="@+id/fn_keys_container"
+        android:id="@+id/fnx_zone"
         android:layout_width="match_parent"
         android:layout_height="wrap_content"
-        android:orientation="vertical"
-        android:visibility="gone">
+        android:orientation="vertical">
 
         <LinearLayout
             android:layout_width="match_parent"
@@ -199,6 +161,12 @@
                 style="@style/ExtraKey"
                 android:text="@string/key_f6"
                 tools:ignore="TouchTargetSizeCheck" />
+
+            <Button
+                android:id="@+id/btn_prtsc"
+                style="@style/ExtraKey"
+                android:text="@string/key_prtsc"
+                tools:ignore="TouchTargetSizeCheck" />
         </LinearLayout>
 
         <LinearLayout
@@ -242,8 +210,83 @@
                 style="@style/ExtraKey"
                 android:text="@string/key_f12"
                 tools:ignore="TouchTargetSizeCheck" />
+
+            <Button
+                android:id="@+id/btn_pause"
+                style="@style/ExtraKey"
+                android:text="@string/key_pause"
+                tools:ignore="TouchTargetSizeCheck" />
         </LinearLayout>
 
     </LinearLayout>
 
+    <!-- Main zone for system-IME mode: the keys a soft keyboard has no way to send, plus the
+         zone toggles and a button to summon the IME again after the system dismissed it. -->
+    <LinearLayout
+        android:id="@+id/system_main_row"
+        android:layout_width="match_parent"
+        android:layout_height="40dp"
+        android:background="@color/extra_keys_background"
+        android:orientation="horizontal">
+
+        <ImageButton
+            android:id="@+id/btn_tab"
+            style="@style/ExtraKeyIcon"
+            android:contentDescription="@string/key_desc_tab"
+            android:src="@drawable/ic_key_tab"
+            tools:ignore="TouchTargetSizeCheck" />
+
+        <Button
+            android:id="@+id/btn_ctrl"
+            style="@style/ExtraKey"
+            android:text="@string/key_ctrl"
+            tools:ignore="TouchTargetSizeCheck" />
+
+        <ImageButton
+            android:id="@+id/btn_shift"
+            style="@style/ExtraKeyIcon"
+            android:contentDescription="@string/key_desc_shift"
+            android:src="@drawable/ic_key_shift"
+            tools:ignore="TouchTargetSizeCheck" />
+
+        <ImageButton
+            android:id="@+id/btn_win"
+            style="@style/ExtraKeyIcon"
+            android:contentDescription="@string/key_desc_win"
+            android:src="@drawable/ic_key_windows"
+            tools:ignore="TouchTargetSizeCheck" />
+
+        <Button
+            android:id="@+id/btn_alt"
+            style="@style/ExtraKey"
+            android:text="@string/key_alt"
+            tools:ignore="TouchTargetSizeCheck" />
+
+        <ImageButton
+            android:id="@+id/btn_enter"
+            style="@style/ExtraKeyIcon"
+            android:contentDescription="@string/key_desc_enter"
+            android:src="@drawable/ic_key_enter"
+            tools:ignore="TouchTargetSizeCheck" />
+
+        <!-- One slot, two mutually exclusive keys: with the IME up there is nothing to summon,
+             so it becomes the Fn toggle; with the IME dismissed the toggle has no zone to sit
+             above, so it becomes the button that brings the IME back. Keeping the row at seven
+             keys is why they share. -->
+        <Button
+            android:id="@+id/btn_zone_fnx"
+            style="@style/ExtraKey"
+            android:text="@string/key_fnx"
+            tools:ignore="TouchTargetSizeCheck" />
+
+        <ImageButton
+            android:id="@+id/btn_show_ime"
+            style="@style/ExtraKeyIcon"
+            android:contentDescription="@string/key_desc_ime"
+            android:src="@drawable/ic_key_keyboard"
+            android:visibility="gone"
+            tools:ignore="TouchTargetSizeCheck" />
+
+    </LinearLayout>
+
 </merge>
diff --git a/app/src/main/res/menu/menu_native_display_menu.xml b/app/src/main/res/menu/menu_native_display_menu.xml
index b90c8afc6..5d8e51f75 100644
--- a/app/src/main/res/menu/menu_native_display_menu.xml
+++ b/app/src/main/res/menu/menu_native_display_menu.xml
@@ -1,19 +1,14 @@
 <?xml version="1.0" encoding="utf-8"?>
 <menu xmlns:android="http://schemas.android.com/apk/res/android">
 
-    <item
-        android:id="@+id/menu_keyboard"
-        android:icon="@drawable/ic_keyboard"
-        android:title="@string/vnc_menu_keyboard" />
-
-    <item
-        android:id="@+id/menu_extra_keys"
-        android:icon="@drawable/ic_keyboard_esc"
-        android:title="@string/vnc_menu_extra_keys" />
-
     <item
         android:id="@+id/menu_fullscreen"
         android:icon="@drawable/ic_fullscreen"
         android:title="@string/vnc_menu_fullscreen" />
 
+    <item
+        android:id="@+id/menu_rotate"
+        android:icon="@drawable/ic_rotate"
+        android:title="@string/vnc_menu_rotate" />
+
 </menu>
diff --git a/app/src/main/res/menu/menu_vnc_display_menu.xml b/app/src/main/res/menu/menu_vnc_display_menu.xml
index 14619bd85..9cd3cb96e 100644
--- a/app/src/main/res/menu/menu_vnc_display_menu.xml
+++ b/app/src/main/res/menu/menu_vnc_display_menu.xml
@@ -1,21 +1,6 @@
 <?xml version="1.0" encoding="utf-8"?>
 <menu xmlns:android="http://schemas.android.com/apk/res/android">
 
-    <item
-        android:id="@+id/menu_keyboard"
-        android:icon="@drawable/ic_keyboard"
-        android:title="@string/vnc_menu_keyboard" />
-
-    <item
-        android:id="@+id/menu_extra_keys"
-        android:icon="@drawable/ic_keyboard_esc"
-        android:title="@string/vnc_menu_extra_keys" />
-
-    <item
-        android:id="@+id/menu_input_mode"
-        android:icon="@drawable/ic_touchpad"
-        android:title="@string/vnc_menu_input_mode_mouse" />
-
     <item
         android:id="@+id/menu_fullscreen"
         android:icon="@drawable/ic_fullscreen"
diff --git a/app/src/main/res/values-zh-rCN/strings.xml b/app/src/main/res/values-zh-rCN/strings.xml
index 7b1bca2c0..11d0d982a 100644
--- a/app/src/main/res/values-zh-rCN/strings.xml
+++ b/app/src/main/res/values-zh-rCN/strings.xml
@@ -215,6 +215,10 @@
     <string name="create_vm_display_backend">显示后端</string>
     <string name="create_vm_display_backend_simplefb">SimpleFB</string>
     <string name="create_vm_display_backend_virtio_gpu">Virtio-GPU</string>
+    <string name="create_vm_gpu_api_vulkan_system">Vulkan(系统原生)</string>
+    <string name="create_vm_gpu_api_vulkan_turnip">Vulkan(Turnip)</string>
+    <string name="create_vm_gpu_api_vulkan_panvk">Vulkan(PanVK)</string>
+    <string name="create_vm_gpu_api_not_implemented">此 GPU 驱动尚未实现</string>
     <string name="create_vm_display_width">显示宽度</string>
     <string name="create_vm_display_height">显示高度</string>
     <string name="create_vm_display_refresh_rate">刷新率 (Hz)</string>
@@ -393,6 +397,7 @@
     <string name="settings_category_update">更新</string>
     <string name="settings_auto_check_update_title">自动检查更新</string>
     <string name="settings_auto_check_update_summary">启动应用时自动检查更新</string>
+    <string name="key_desc_ime">显示键盘</string>
     <string name="settings_check_update_title">检查更新</string>
     <string name="settings_check_update_summary">立即检查新版本</string>
     <string name="settings_check_update_checking">正在检查更新\u2026</string>
@@ -836,9 +841,13 @@
 
     <string name="vnc_menu_keyboard">软键盘</string>
     <string name="vnc_menu_extra_keys">额外按键</string>
+    <string name="keyboard_mode_none">无键盘</string>
+    <string name="keyboard_mode_system">系统键盘</string>
+    <string name="keyboard_mode_laptop">笔记本键盘</string>
     <string name="vnc_menu_fullscreen">全屏</string>
     <string name="vnc_menu_input_mode_touch">触摸模式</string>
     <string name="vnc_menu_input_mode_mouse">鼠标模式</string>
+    <string name="vnc_menu_input_mode_tablet">手写板模式</string>
     <string name="usb_input_no_device">未找到USB键盘或鼠标</string>
     <string name="usb_input_status">USB输入：%1$d个键盘，%2$d个鼠标</string>
     <string name="vnc_menu_rotate">旋转屏幕</string>
diff --git a/app/src/main/res/values-zh-rTW/strings.xml b/app/src/main/res/values-zh-rTW/strings.xml
index 8e6e89cf6..740e99bd7 100644
--- a/app/src/main/res/values-zh-rTW/strings.xml
+++ b/app/src/main/res/values-zh-rTW/strings.xml
@@ -215,6 +215,10 @@
     <string name="create_vm_display_backend">顯示後端</string>
     <string name="create_vm_display_backend_simplefb">SimpleFB</string>
     <string name="create_vm_display_backend_virtio_gpu">Virtio-GPU</string>
+    <string name="create_vm_gpu_api_vulkan_system">Vulkan(系統原生)</string>
+    <string name="create_vm_gpu_api_vulkan_turnip">Vulkan(Turnip)</string>
+    <string name="create_vm_gpu_api_vulkan_panvk">Vulkan(PanVK)</string>
+    <string name="create_vm_gpu_api_not_implemented">此 GPU 驅動尚未實現</string>
     <string name="create_vm_display_width">顯示寬度</string>
     <string name="create_vm_display_height">顯示高度</string>
     <string name="create_vm_display_refresh_rate">重新整理率 (Hz)</string>
@@ -393,6 +397,7 @@
     <string name="settings_category_update">更新</string>
     <string name="settings_auto_check_update_title">自動檢查更新</string>
     <string name="settings_auto_check_update_summary">啟動應用時自動檢查更新</string>
+    <string name="key_desc_ime">顯示鍵盤</string>
     <string name="settings_check_update_title">檢查更新</string>
     <string name="settings_check_update_summary">立即檢查新版本</string>
     <string name="settings_check_update_checking">正在檢查更新\u2026</string>
@@ -836,9 +841,13 @@
 
     <string name="vnc_menu_keyboard">軟鍵盤</string>
     <string name="vnc_menu_extra_keys">額外按鍵</string>
+    <string name="keyboard_mode_none">無鍵盤</string>
+    <string name="keyboard_mode_system">系統鍵盤</string>
+    <string name="keyboard_mode_laptop">筆電鍵盤</string>
     <string name="vnc_menu_fullscreen">全屏</string>
     <string name="vnc_menu_input_mode_touch">觸控模式</string>
     <string name="vnc_menu_input_mode_mouse">滑鼠模式</string>
+    <string name="vnc_menu_input_mode_tablet">手寫板模式</string>
     <string name="usb_input_no_device">未找到USB鍵盤或滑鼠</string>
     <string name="usb_input_status">USB輸入：%1$d個鍵盤，%2$d個滑鼠</string>
     <string name="vnc_menu_rotate">旋轉螢幕</string>
diff --git a/app/src/main/res/values/colors.xml b/app/src/main/res/values/colors.xml
index c01c22999..f5265a3e0 100644
--- a/app/src/main/res/values/colors.xml
+++ b/app/src/main/res/values/colors.xml
@@ -13,6 +13,8 @@
     <color name="extra_key_text">#FFCCCCCC</color>
     <color name="extra_key_text_active">#FF4FC3F7</color>
     <color name="extra_key_bg_active">#FF37474F</color>
+    <!-- Pressed key feedback: the key surface is always dark, so pressed always lightens. -->
+    <color name="extra_key_bg_pressed">#FF777777</color>
 
     <color name="vnc_fab_background">#FF4FC3F7</color>
     <color name="vnc_touchpad_background">#FF2A2A2A</color>
diff --git a/app/src/main/res/values/ids.xml b/app/src/main/res/values/ids.xml
new file mode 100644
index 000000000..32ae7c5c6
--- /dev/null
+++ b/app/src/main/res/values/ids.xml
@@ -0,0 +1,5 @@
+<?xml version="1.0" encoding="utf-8"?>
+<resources>
+    <!-- View-tag key: the pre-animation layout height ViewHeightAnimator restores on finish. -->
+    <item name="view_height_animator_original" type="id" />
+</resources>
diff --git a/app/src/main/res/values/strings.xml b/app/src/main/res/values/strings.xml
index 3b406d53e..132774d46 100644
--- a/app/src/main/res/values/strings.xml
+++ b/app/src/main/res/values/strings.xml
@@ -217,6 +217,10 @@
     <string name="create_vm_display_backend">Display Backend</string>
     <string name="create_vm_display_backend_simplefb">SimpleFB</string>
     <string name="create_vm_display_backend_virtio_gpu">Virtio-GPU</string>
+    <string name="create_vm_gpu_api_vulkan_system">Vulkan (System)</string>
+    <string name="create_vm_gpu_api_vulkan_turnip">Vulkan (Turnip)</string>
+    <string name="create_vm_gpu_api_vulkan_panvk">Vulkan (PanVK)</string>
+    <string name="create_vm_gpu_api_not_implemented">This GPU driver is not implemented yet</string>
     <string name="create_vm_display_width">Width</string>
     <string name="create_vm_display_height">Height</string>
     <string name="create_vm_display_refresh_rate">Rate (Hz)</string>
@@ -414,20 +418,23 @@
     <string name="key_up" translatable="false">\u2191</string>
     <string name="key_end" translatable="false">END</string>
     <string name="key_pgup" translatable="false">PGUP</string>
+    <!-- Still a text key on the console screen, which has its own key row. -->
     <string name="key_tab" translatable="false">TAB</string>
+    <string name="key_desc_tab">Tab</string>
     <string name="key_ctrl" translatable="false">CTRL</string>
     <string name="key_alt" translatable="false">ALT</string>
     <string name="key_left" translatable="false">\u2190</string>
     <string name="key_down" translatable="false">\u2193</string>
     <string name="key_right" translatable="false">\u2192</string>
     <string name="key_pgdn" translatable="false">PGDN</string>
-    <string name="key_win" translatable="false">WIN</string>
-    <string name="key_cap" translatable="false">CAPS</string>
+    <string name="key_desc_backspace">Backspace</string>
+    <string name="key_desc_win">Windows key</string>
     <string name="key_del" translatable="false">DEL</string>
     <string name="key_ins" translatable="false">INS</string>
-    <string name="key_shift" translatable="false">SHIFT</string>
-    <string name="key_enter" translatable="false">ENTER</string>
-    <string name="key_fnx" translatable="false">FNx</string>
+    <string name="key_desc_shift">Shift</string>
+    <string name="key_desc_enter">Enter</string>
+    <string name="key_desc_ime">Show keyboard</string>
+    <string name="key_fnx" translatable="false">Fn</string>
     <string name="key_f1" translatable="false">F1</string>
     <string name="key_f2" translatable="false">F2</string>
     <string name="key_f3" translatable="false">F3</string>
@@ -440,6 +447,8 @@
     <string name="key_f10" translatable="false">F10</string>
     <string name="key_f11" translatable="false">F11</string>
     <string name="key_f12" translatable="false">F12</string>
+    <string name="key_prtsc" translatable="false">PRTSC</string>
+    <string name="key_pause" translatable="false">PAUSE</string>
 
     <string name="vm_daemon_error">Failed to communicate with daemon.</string>
     <string name="vm_compressed_disk_title">Compressed disk image</string>
@@ -873,9 +882,13 @@
 
     <string name="vnc_menu_keyboard">Soft Keyboard</string>
     <string name="vnc_menu_extra_keys">Extra Keys</string>
+    <string name="keyboard_mode_none">No keyboard</string>
+    <string name="keyboard_mode_system">System keyboard</string>
+    <string name="keyboard_mode_laptop">Laptop keyboard</string>
     <string name="vnc_menu_fullscreen">Fullscreen</string>
     <string name="vnc_menu_input_mode_touch">Touch Mode</string>
     <string name="vnc_menu_input_mode_mouse">Mouse Mode</string>
+    <string name="vnc_menu_input_mode_tablet">Tablet Mode</string>
     <string name="usb_input_no_device">No USB keyboard or mouse found</string>
     <string name="usb_input_status">USB input: %1$d keyboard(s), %2$d mouse(es)</string>
     <string name="vnc_menu_rotate">Rotate Screen</string>
diff --git a/app/src/main/res/values/themes.xml b/app/src/main/res/values/themes.xml
index c34d653bb..f9b759958 100644
--- a/app/src/main/res/values/themes.xml
+++ b/app/src/main/res/values/themes.xml
@@ -30,6 +30,18 @@
         <item name="android:windowLightNavigationBar">false</item>
     </style>
 
+    <!-- Icon-only key: an ImageButton centres its drawable, which a Button's compound drawable
+         does not do reliably at these sizes. -->
+    <style name="ExtraKeyIcon">
+        <item name="android:layout_width">0dp</item>
+        <item name="android:layout_height">match_parent</item>
+        <item name="android:layout_weight">1</item>
+        <item name="android:padding">0dp</item>
+        <item name="android:scaleType">center</item>
+        <item name="android:background">@drawable/extra_key_bg</item>
+        <item name="android:tint">@color/extra_key_text</item>
+    </style>
+
     <style name="ExtraKey" parent="Widget.Material3.Button.TextButton">
         <item name="android:layout_width">0dp</item>
         <item name="android:layout_height">match_parent</item>
@@ -42,7 +54,7 @@
         <item name="android:textSize">11sp</item>
         <item name="android:textColor">@color/extra_key_text</item>
         <item name="android:textAllCaps">false</item>
-        <item name="android:background">?attr/selectableItemBackground</item>
+        <item name="android:background">@drawable/extra_key_bg</item>
         <item name="backgroundTint">@null</item>
     </style>
 
diff --git a/app/src/test/java/cn/classfun/droidvm/ui/vm/display/base/DisplayChromeControllerTest.java b/app/src/test/java/cn/classfun/droidvm/ui/vm/display/base/DisplayChromeControllerTest.java
new file mode 100644
index 000000000..a84fbb922
--- /dev/null
+++ b/app/src/test/java/cn/classfun/droidvm/ui/vm/display/base/DisplayChromeControllerTest.java
@@ -0,0 +1,211 @@
+package cn.classfun.droidvm.ui.vm.display.base;
+
+import static org.junit.Assert.assertEquals;
+import static org.junit.Assert.assertFalse;
+import static org.junit.Assert.assertNull;
+import static org.junit.Assert.assertTrue;
+
+import org.junit.Test;
+
+public class DisplayChromeControllerTest {
+    /** Records the last chrome set the controller pushed. */
+    private static final class Cap implements DisplayChromeController.Host {
+        boolean fullscreen, extra, fnx;
+        KeyboardMode mode;
+        int applyCount;
+
+        @Override
+        public void applyChrome(
+            boolean fullscreen, KeyboardMode mode, boolean extraVisible, boolean fnxVisible) {
+            this.fullscreen = fullscreen;
+            this.mode = mode;
+            this.extra = extraVisible;
+            this.fnx = fnxVisible;
+            applyCount++;
+        }
+    }
+
+    /** Records what the persistence hook was told, and how often. */
+    private static final class Listener implements DisplayChromeController.StateListener {
+        KeyboardMode mode;
+        Boolean extra, fnx;
+        int calls;
+
+        @Override
+        public void onUserStateChanged(KeyboardMode mode, boolean extraVisible, boolean fnxVisible) {
+            this.mode = mode;
+            this.extra = extraVisible;
+            this.fnx = fnxVisible;
+            calls++;
+        }
+    }
+
+    private final Cap cap = new Cap();
+
+    private DisplayChromeController laptop(boolean extra, boolean fnx) {
+        return new DisplayChromeController(KeyboardMode.LAPTOP, extra, fnx, cap);
+    }
+
+    @Test
+    public void initialStatePushesEverythingAtOnce() {
+        laptop(true, true).applyInitial();
+        assertFalse(cap.fullscreen);
+        assertEquals(KeyboardMode.LAPTOP, cap.mode);
+        assertTrue(cap.extra);
+        assertTrue(cap.fnx);
+    }
+
+    @Test
+    public void fullscreenHidesKeyboardAndExitRestoresIt() {
+        var chrome = laptop(true, true);
+        chrome.applyInitial();
+
+        chrome.toggleFullscreen();
+        assertTrue(cap.fullscreen);
+        // Fullscreen hides the whole keyboard, not just the bars.
+        assertEquals(KeyboardMode.NONE, cap.mode);
+        assertFalse(cap.extra);
+        assertFalse(cap.fnx);
+
+        chrome.toggleFullscreen();
+        assertFalse(cap.fullscreen);
+        assertEquals(KeyboardMode.LAPTOP, cap.mode);
+        assertTrue(cap.extra); // restored to the pre-fullscreen state
+        assertTrue(cap.fnx);
+    }
+
+    @Test
+    public void zonesTurnedOffBeforeFullscreenStayOffAfterExit() {
+        var chrome = laptop(true, true);
+        chrome.toggleExtraZone();
+        chrome.toggleFnxZone();
+        chrome.toggleFullscreen();
+        chrome.toggleFullscreen();
+        assertFalse(cap.extra);
+        assertFalse(cap.fnx);
+    }
+
+    /**
+     * Fullscreen-scoped changes are scoped: the remembered pre-fullscreen state
+     * wins on exit, whatever was toggled in between.
+     */
+    @Test
+    public void zoneChangesDuringFullscreenDoNotSurviveExit() {
+        var chrome = laptop(true, true);
+        chrome.toggleFullscreen();
+        chrome.toggleExtraZone();
+        chrome.toggleFnxZone();
+        chrome.toggleFullscreen();
+        assertTrue(cap.extra);
+        assertTrue(cap.fnx);
+    }
+
+    /**
+     * The Extra zone is the whole point of the system-IME mode -- it carries the
+     * keys an IME cannot send -- so it stays up there even when its flag is off.
+     */
+    @Test
+    public void systemModeAlwaysShowsExtraZone() {
+        var chrome = new DisplayChromeController(KeyboardMode.SYSTEM, false, false, cap);
+        chrome.applyInitial();
+        assertTrue(cap.extra);
+
+        chrome.toggleExtraZone();
+        assertTrue(cap.extra); // cannot be toggled away in this mode
+    }
+
+    /** The laptop Main block already carries most of those keys, so Extra is optional. */
+    @Test
+    public void laptopModeCanToggleExtraZoneOff() {
+        var chrome = laptop(true, true);
+        chrome.applyInitial();
+        assertTrue(cap.extra);
+        chrome.toggleExtraZone();
+        assertFalse(cap.extra);
+        chrome.toggleExtraZone();
+        assertTrue(cap.extra);
+    }
+
+    /** Hiding the keyboard is not the same as turning its zones off. */
+    @Test
+    public void noneModeHidesZonesWithoutForgettingThem() {
+        var chrome = laptop(true, true);
+        chrome.setKeyboardMode(KeyboardMode.NONE);
+        assertFalse(cap.extra);
+        assertFalse(cap.fnx);
+        assertTrue(chrome.isExtraVisible()); // flag kept
+        assertTrue(chrome.isFnxVisible());
+
+        chrome.setKeyboardMode(KeyboardMode.LAPTOP);
+        assertTrue(cap.extra);
+        assertTrue(cap.fnx);
+    }
+
+    @Test
+    public void fnxTogglesIndependentlyOfExtra() {
+        var chrome = laptop(true, true);
+        chrome.toggleFnxZone();
+        assertFalse(cap.fnx);
+        assertTrue(cap.extra);
+    }
+
+    @Test
+    public void redundantSetFullscreenDoesNotReapply() {
+        var chrome = laptop(true, true);
+        chrome.setFullscreen(true);
+        int count = cap.applyCount;
+        chrome.setFullscreen(true);
+        assertEquals(count, cap.applyCount);
+    }
+
+    @Test
+    public void redundantSetKeyboardModeDoesNotReapply() {
+        var chrome = laptop(true, true);
+        chrome.setKeyboardMode(KeyboardMode.SYSTEM);
+        int count = cap.applyCount;
+        chrome.setKeyboardMode(KeyboardMode.SYSTEM);
+        assertEquals(count, cap.applyCount);
+    }
+
+    @Test
+    public void stateListenerSeesUserActionsButNotFullscreen() {
+        var chrome = laptop(true, true);
+        var listener = new Listener();
+        chrome.setStateListener(listener);
+
+        chrome.toggleExtraZone();
+        assertEquals(1, listener.calls);
+        assertEquals(KeyboardMode.LAPTOP, listener.mode);
+        assertEquals(Boolean.FALSE, listener.extra);
+
+        // Entering fullscreen is not a persistable user preference, and neither are
+        // the zone toggles made while inside it.
+        chrome.toggleFullscreen();
+        chrome.toggleExtraZone();
+        chrome.toggleFnxZone();
+        assertEquals(1, listener.calls);
+    }
+
+    @Test
+    public void listenerNotCalledBeforeItIsSet() {
+        var chrome = laptop(true, true);
+        var listener = new Listener();
+        chrome.toggleExtraZone();
+        chrome.setStateListener(listener);
+        assertEquals(0, listener.calls);
+        assertNull(listener.mode);
+    }
+
+    @Test
+    public void gettersTrackTheAppliedState() {
+        var chrome = laptop(true, false);
+        assertFalse(chrome.isFullscreen());
+        assertEquals(KeyboardMode.LAPTOP, chrome.getKeyboardMode());
+        assertTrue(chrome.isExtraVisible());
+        assertFalse(chrome.isFnxVisible());
+
+        chrome.toggleFullscreen();
+        assertTrue(chrome.isFullscreen());
+        assertEquals(KeyboardMode.NONE, chrome.getKeyboardMode());
+    }
+}
diff --git a/app/src/test/java/cn/classfun/droidvm/ui/vm/display/base/DisplayViewportControllerTest.java b/app/src/test/java/cn/classfun/droidvm/ui/vm/display/base/DisplayViewportControllerTest.java
new file mode 100644
index 000000000..ae07687a6
--- /dev/null
+++ b/app/src/test/java/cn/classfun/droidvm/ui/vm/display/base/DisplayViewportControllerTest.java
@@ -0,0 +1,238 @@
+package cn.classfun.droidvm.ui.vm.display.base;
+
+import static org.junit.Assert.assertEquals;
+import static org.junit.Assert.assertFalse;
+import static org.junit.Assert.assertTrue;
+
+import org.junit.Test;
+
+import java.util.ArrayList;
+import java.util.List;
+
+public class DisplayViewportControllerTest {
+    private static final float EPS = 1e-3f;
+
+    /** Captures every emission so tests can assert both the latest geometry and emission counts. */
+    private static final class Cap implements DisplayViewportController.Listener {
+        int baseW, baseH;
+        float viewScale, offsetX, offsetY;
+        int viewportCount;
+        final List<int[]> guestResizes = new ArrayList<>();
+
+        @Override
+        public void onViewportChanged(int baseW, int baseH, float viewScale,
+                                      float offsetX, float offsetY) {
+            this.baseW = baseW;
+            this.baseH = baseH;
+            this.viewScale = viewScale;
+            this.offsetX = offsetX;
+            this.offsetY = offsetY;
+            viewportCount++;
+        }
+
+        @Override
+        public void onGuestResizeWanted(int areaW, int areaH) {
+            guestResizes.add(new int[]{areaW, areaH});
+        }
+
+        /** On-screen content width: base letterbox size x view scale. */
+        float onScreenW() {
+            return baseW * viewScale;
+        }
+    }
+
+    private final Cap cap = new Cap();
+    private final DisplayViewportController vp = new DisplayViewportController(100, cap);
+
+    private void setup1000x500Content800x800Area() {
+        vp.setContentSize(1000, 500);
+        vp.setArea(800, 800);
+    }
+
+    @Test
+    public void fitsOnFirstLayout() {
+        setup1000x500Content800x800Area();
+        // fit = min(800/1000, 800/500) = 0.8 -> letterbox 800x400, no zoom, centered
+        assertEquals(800, cap.baseW);
+        assertEquals(400, cap.baseH);
+        assertEquals(1f, cap.viewScale, EPS);
+        assertEquals(0f, cap.offsetX, EPS);
+        assertEquals(0f, cap.offsetY, EPS);
+        assertTrue(vp.isFitted());
+    }
+
+    @Test
+    public void noEmissionBeforeBothSizesKnown() {
+        vp.setArea(800, 800);
+        assertEquals(0, cap.viewportCount);
+        vp.setContentSize(1000, 500);
+        assertEquals(1, cap.viewportCount);
+    }
+
+    @Test
+    public void refitsWhenFittedAndAreaChanges() {
+        setup1000x500Content800x800Area();
+        vp.setArea(400, 800); // fit = 0.4
+        assertEquals(400, cap.baseW);
+        assertEquals(200, cap.baseH);
+        assertEquals(1f, cap.viewScale, EPS);
+        assertTrue(vp.isFitted());
+    }
+
+    @Test
+    public void sameAreaDoesNotReemit() {
+        setup1000x500Content800x800Area();
+        int count = cap.viewportCount;
+        vp.setArea(800, 800);
+        assertEquals(count, cap.viewportCount);
+    }
+
+    @Test
+    public void zoomedAreaChangeKeepsOnScreenSizeAndOffset() {
+        setup1000x500Content800x800Area();
+        vp.onZoomPan(2f, 50f, 0f); // scale 0.8 -> 1.6, pan +50 x
+        assertEquals(2f, cap.viewScale, EPS);
+        assertEquals(50f, cap.offsetX, EPS);
+        // content 500*1.6 = 800 = areaH -> no vertical overflow, y locked to 0
+        assertEquals(0f, cap.offsetY, EPS);
+        float sizeBefore = cap.onScreenW(); // 1600
+
+        vp.setArea(800, 600); // shrink: zoomed -> absolute size and offset preserved
+        assertEquals(sizeBefore, cap.onScreenW(), EPS);
+        assertEquals(50f, cap.offsetX, EPS);
+        assertFalse(vp.isFitted());
+    }
+
+    @Test
+    public void snapsBackToFitWhenAreaGrowsPastZoom() {
+        vp.setContentSize(1000, 500);
+        vp.setArea(500, 500); // fit = 0.5
+        vp.onZoomPan(1.5f, 0f, 0f); // scale 0.75
+        vp.setArea(1000, 1000); // fit = 1.0 > 0.75 -> snap to fit
+        assertEquals(1f, cap.viewScale, EPS);
+        assertEquals(0f, cap.offsetX, EPS);
+        assertEquals(0f, cap.offsetY, EPS);
+        assertTrue(vp.isFitted());
+    }
+
+    @Test
+    public void panClampsToOverflowAndLocksLetterboxedAxis() {
+        setup1000x500Content800x800Area();
+        vp.onZoomPan(2f, 10000f, 10000f); // scale 1.6
+        // x overflow: 1000*1.6 - 800 = 800 -> half 400; y overflow: 500*1.6 - 800 = 0 -> locked
+        assertEquals(400f, cap.offsetX, EPS);
+        assertEquals(0f, cap.offsetY, EPS);
+    }
+
+    @Test
+    public void maxZoomIsClamped() {
+        setup1000x500Content800x800Area();
+        vp.onZoomPan(100f, 0f, 0f);
+        assertEquals(DisplayViewportController.MAX_ZOOM, cap.viewScale, EPS);
+    }
+
+    @Test
+    public void pinchOutSnapsBackToFit() {
+        setup1000x500Content800x800Area();
+        vp.onZoomPan(1.2f, 30f, 0f);
+        vp.onZoomPan(1f / 1.25f, 0f, 0f); // 0.96x of fit -> clamped to fit -> snap
+        assertEquals(1f, cap.viewScale, EPS);
+        assertEquals(0f, cap.offsetX, EPS);
+        assertTrue(vp.isFitted());
+    }
+
+    @Test
+    public void degenerateAreaFreezesInsteadOfRelayout() {
+        setup1000x500Content800x800Area();
+        vp.onZoomPan(2f, 50f, 0f);
+        int count = cap.viewportCount;
+
+        vp.setArea(800, 50); // below minAreaPx=100 -> freeze
+        assertTrue(vp.isFrozen());
+        assertEquals(count, cap.viewportCount); // nothing emitted, geometry held
+
+        vp.onZoomPan(2f, 0f, 0f); // gestures ignored while frozen
+        assertEquals(count, cap.viewportCount);
+
+        vp.setArea(800, 600); // recover: zoomed rules apply against last good state
+        assertFalse(vp.isFrozen());
+        assertEquals(2f, cap.viewScale, EPS);
+        assertEquals(50f, cap.offsetX, EPS);
+    }
+
+    @Test
+    public void zeroOrNegativeAreaDoesNotCrashOrEmit() {
+        setup1000x500Content800x800Area();
+        int count = cap.viewportCount;
+        vp.setArea(0, 0);
+        vp.setArea(-100, 600);
+        assertTrue(vp.isFrozen());
+        assertEquals(count, cap.viewportCount);
+    }
+
+    @Test
+    public void recoveringToTheSameAreaUnfreezesWithoutReemit() {
+        setup1000x500Content800x800Area();
+        int count = cap.viewportCount;
+        vp.setArea(800, 20);
+        vp.setArea(800, 800); // same as last good -> nothing changed
+        assertFalse(vp.isFrozen());
+        assertEquals(count, cap.viewportCount);
+    }
+
+    @Test
+    public void autoResizeRefitsAndRequestsGuestResize() {
+        setup1000x500Content800x800Area();
+        vp.setAutoResize(true);
+        assertEquals(1, cap.guestResizes.size());
+        assertEquals(800, cap.guestResizes.get(0)[0]);
+        assertEquals(800, cap.guestResizes.get(0)[1]);
+
+        vp.setArea(600, 400);
+        assertEquals(2, cap.guestResizes.size());
+        assertEquals(600, cap.guestResizes.get(1)[0]);
+        assertEquals(400, cap.guestResizes.get(1)[1]);
+        assertEquals(1f, cap.viewScale, EPS); // always fitted
+
+        vp.onZoomPan(2f, 10f, 10f); // zoom disabled in auto-resize
+        assertEquals(1f, cap.viewScale, EPS);
+        assertEquals(0f, cap.offsetX, EPS);
+
+        // guest applied the resize -> content size ack re-fits 1:1
+        vp.setContentSize(600, 400);
+        assertEquals(600, cap.baseW);
+        assertEquals(400, cap.baseH);
+        assertEquals(1f, cap.viewScale, EPS);
+    }
+
+    @Test
+    public void autoResizeFrozenAreaRequestsNothing() {
+        setup1000x500Content800x800Area();
+        vp.setAutoResize(true);
+        int requests = cap.guestResizes.size();
+        vp.setArea(800, 30); // degenerate -> frozen, no guest resize spam
+        assertEquals(requests, cap.guestResizes.size());
+    }
+
+    @Test
+    public void contentSizeChangeRefits() {
+        setup1000x500Content800x800Area();
+        vp.onZoomPan(2f, 50f, 0f);
+        vp.setContentSize(1920, 1080); // guest resolution change -> back to fit
+        assertEquals(1f, cap.viewScale, EPS);
+        assertEquals(0f, cap.offsetX, EPS);
+        // fit = min(800/1920, 800/1080) = 0.41667 -> base 800x450
+        assertEquals(800, cap.baseW);
+        assertEquals(450, cap.baseH);
+    }
+
+    @Test
+    public void resetToFitFromZoomed() {
+        setup1000x500Content800x800Area();
+        vp.onZoomPan(3f, 100f, 0f);
+        vp.resetToFit();
+        assertEquals(1f, cap.viewScale, EPS);
+        assertEquals(0f, cap.offsetX, EPS);
+        assertTrue(vp.isFitted());
+    }
+}

From f6a7aae509e102a5a1e642bd029ada450fcbbfc5 Mon Sep 17 00:00:00 2001
From: HuJK <gh@hujk.org>
Date: Sun, 30 Aug 2026 13:37:10 +0800
Subject: [PATCH 129/182] disk: a Linux VM you can create, and overlays you can
 branch

Importing an LXC rootfs and turning it into a bootable VM used to be a
sequence of steps a user had to know: import, create a disk, size it, write a
config, hope the compression was one crosvm can boot. It is one flow now, and
the pieces it needs are here -- the image picker, the create-Linux-VM screen,
the command generation, and the deletion path that takes the disks with it.

Overlays become a tree rather than a list. A qcow2 with a backing file is a
node with a parent, and the tree is what makes branch, switch and collapse
expressible at all; the backing chain linker and the dependency updater are
what keep the chain honest when a node moves. Disk maintenance -- resize,
recompression, auto-grow -- hangs off the same tree.

The rules that used to bite late now bite early. crosvm refuses to boot a
compressed qcow2 cluster it cannot decompress, so there is one definition of
what "compressed" means and imports stop re-compressing what is already right;
it refuses a disk with a snapshot, and the editor says so before the VM is
started rather than after; and a disk that has not finished importing cannot
be selected as a boot device.

Co-authored-by: lateautumn233 <lateautumn233@foxmail.com>
---
 app/src/main/AndroidManifest.xml              |   58 +-
 .../droidvm/daemon/console/ConsoleStream.java |   22 +-
 .../droidvm/daemon/ipc/vm/DeleteHandler.java  |   10 +-
 .../daemon/ipc/vm/DiskCompatHandler.java      |   42 -
 .../classfun/droidvm/daemon/vm/BootPlan.java  |   18 -
 .../vm/backend/CrosvmBackendInstance.java     |    4 +-
 .../droidvm/lib/archive/TarWriter.java        |    9 +-
 .../lib/download/DiskDownloadManager.java     |   40 +-
 .../droidvm/lib/store/disk/DiskConfig.java    |   22 +
 .../droidvm/lib/store/disk/DiskStore.java     |   32 +
 .../droidvm/lib/store/vm/LendMthpMode.java    |   30 +
 .../droidvm/lib/store/vm/VMHypervisor.java    |   27 +
 .../lib/store/vm/VMPeripheralConfig.java      |   18 +
 .../droidvm/lib/store/vm/VMScreenConfig.java  |    2 +
 .../droidvm/lib/ui/CopyableField.java         |   15 +
 .../droidvm/lib/ui/ImeInsetsApplier.java      |    5 +
 .../droidvm/lib/utils/ImageUtils.java         |   46 +
 .../droidvm/lib/utils/StringUtils.java        |   70 +
 .../ui/disk/action/BackingChainLinker.java    |  318 ++++
 .../ui/disk/action/DiskActionDialog.java      |  519 +++++-
 .../ui/disk/action/DiskDependencyUpdater.java |   94 ++
 .../disk/action/DiskOverlayCreateDialog.java  |  312 ++++
 .../ui/disk/action/DiskResizeDialog.java      |   50 +-
 .../droidvm/ui/disk/create/DiskCompress.java  |   52 +
 .../ui/disk/create/DiskCreateActivity.java    |   13 +
 .../ui/disk/download/ImportURLActivity.java   |   14 +-
 .../ui/disk/images/ImportImagesActivity.java  |   14 +-
 .../ui/disk/info/info/DiskInfoInfoTab.java    |  116 +-
 .../info/snapshot/DiskInfoSnapshotTab.java    |   83 +-
 .../ui/disk/lxc/CreateLinuxVmActivity.java    |   12 +
 .../ui/disk/lxc/ImportLxcImagesActivity.java  | 1413 +++++++++++++++--
 .../disk/operation/DiskOperationActivity.java |  290 +++-
 .../disk/operation/ImageCommandGenerate.java  |   33 +-
 .../disk/operation/OptimizeCompression.java   |   82 +
 .../ui/disk/tree/AttachmentCursor.java        |  114 ++
 .../ui/disk/tree/AttachmentCursors.java       |  156 ++
 .../droidvm/ui/disk/tree/CursorPlan.java      |  182 +++
 .../droidvm/ui/disk/tree/CursorPlanText.java  |   77 +
 .../droidvm/ui/disk/tree/DiskBranchPanel.java |  383 +++++
 .../droidvm/ui/disk/tree/DiskTree.java        |  165 ++
 .../ui/disk/tree/DiskTreeCollapse.java        |   49 +
 .../droidvm/ui/disk/tree/DiskTreeView.java    |  254 +++
 .../droidvm/ui/disk/tree/TreeShape.java       |  192 +++
 .../ui/main/base/list/DataAdapter.java        |   14 +-
 .../ui/main/base/list/MainListFragment.java   |    5 +
 .../droidvm/ui/main/disk/DiskAdapter.java     |  101 +-
 .../ui/main/disk/MainDiskFragment.java        |   19 +-
 .../ui/main/home/MainHomeFragment.java        |    5 +-
 .../main/settings/MainSettingsFragment.java   |   68 +-
 .../droidvm/ui/main/vm/MainVMFragment.java    |   24 +-
 .../cn/classfun/droidvm/ui/vm/VMActions.java  |  292 +++-
 .../classfun/droidvm/ui/vm/VMCreateMenu.java  |   64 +
 .../cn/classfun/droidvm/ui/vm/VMDeletion.java |  256 +++
 .../droidvm/ui/vm/VmRunningQuery.java         |   59 +
 .../display/DisplayProvider.java              |   11 +-
 .../ui/vm/edit/boot/VMEditBootTab.java        |   13 +
 .../ui/vm/edit/graphics/ScreenBindingRow.java |    1 +
 .../edit/peripheral/VMEditPeripheralTab.java  |   14 +
 .../peripheral/VMPeripheralEditAdapter.java   |    6 +
 .../ui/vm/edit/storage/VMEditStorageTab.java  |   36 +-
 .../edit/storage/disk/VMDiskEditAdapter.java  |  260 ++-
 .../storage/disk/VMDiskEditViewHolder.java    |    3 +
 .../droidvm/ui/vm/info/VMInfoActivity.java    |   34 +-
 .../ui/widgets/container/CardItemAdapter.java |   40 +-
 .../widgets/container/CardItemListView.java   |   70 +
 .../ui/widgets/row/TextInputRowWidget.java    |   21 +
 app/src/main/res/drawable/ic_eye.xml          |   10 +
 app/src/main/res/drawable/ic_eye_off.xml      |   10 +
 .../res/layout/activity_import_lxc_images.xml |  101 +-
 .../main/res/layout/dialog_disk_resize.xml    |   16 +
 .../res/layout/dialog_optimize_compress.xml   |   26 +
 .../main/res/layout/dialog_overlay_create.xml |   28 +
 .../res/layout/fragment_main_settings.xml     |    9 +-
 .../main/res/layout/item_disk_info_action.xml |   11 +
 .../main/res/layout/item_disk_tree_row.xml    |   89 ++
 app/src/main/res/layout/item_vm_disk_edit.xml |    8 +
 .../res/layout/partial_disk_info_content.xml  |  107 +-
 .../res/layout/partial_vm_edit_network.xml    |    2 +
 .../res/layout/partial_vm_edit_storage.xml    |    3 +
 .../res/menu/menu_disk_actions_overlay.xml    |   61 +
 app/src/main/res/menu/menu_disk_tree_node.xml |   30 +
 app/src/main/res/menu/menu_vm_create.xml      |   24 +
 app/src/main/res/menu/menu_vm_disk_browse.xml |    5 -
 app/src/main/res/values-zh-rCN/strings.xml    |  448 +++++-
 app/src/main/res/values-zh-rTW/strings.xml    |  448 +++++-
 app/src/main/res/values/attrs.xml             |    3 +
 app/src/main/res/values/strings.xml           |  448 +++++-
 .../lib/store/vm/VMCreationDefaultsTest.java  |   28 +
 .../lib/utils/ShellSafePasswordTest.java      |   71 +
 .../ui/disk/action/DiskActionPolicyTest.java  |   31 +
 .../action/DiskDependencyUpdaterTest.java     |  131 ++
 .../droidvm/ui/disk/tree/CursorPlanTest.java  |  297 ++++
 92 files changed, 8656 insertions(+), 662 deletions(-)
 delete mode 100644 app/src/main/java/cn/classfun/droidvm/daemon/ipc/vm/DiskCompatHandler.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/lib/store/vm/VMPeripheralConfig.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/lib/store/vm/VMScreenConfig.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/ui/disk/action/BackingChainLinker.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/ui/disk/action/DiskDependencyUpdater.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/ui/disk/action/DiskOverlayCreateDialog.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/ui/disk/lxc/CreateLinuxVmActivity.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/ui/disk/operation/OptimizeCompression.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/ui/disk/tree/AttachmentCursor.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/ui/disk/tree/AttachmentCursors.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/ui/disk/tree/CursorPlan.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/ui/disk/tree/CursorPlanText.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/ui/disk/tree/DiskBranchPanel.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/ui/disk/tree/DiskTree.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/ui/disk/tree/DiskTreeCollapse.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/ui/disk/tree/DiskTreeView.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/ui/disk/tree/TreeShape.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/ui/vm/VMCreateMenu.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/ui/vm/VMDeletion.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/ui/vm/VmRunningQuery.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/ui/vm/edit/graphics/ScreenBindingRow.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/ui/vm/edit/peripheral/VMEditPeripheralTab.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/ui/vm/edit/peripheral/VMPeripheralEditAdapter.java
 create mode 100644 app/src/main/res/drawable/ic_eye.xml
 create mode 100644 app/src/main/res/drawable/ic_eye_off.xml
 create mode 100644 app/src/main/res/layout/dialog_optimize_compress.xml
 create mode 100644 app/src/main/res/layout/dialog_overlay_create.xml
 create mode 100644 app/src/main/res/layout/item_disk_info_action.xml
 create mode 100644 app/src/main/res/layout/item_disk_tree_row.xml
 create mode 100644 app/src/main/res/menu/menu_disk_actions_overlay.xml
 create mode 100644 app/src/main/res/menu/menu_disk_tree_node.xml
 create mode 100644 app/src/main/res/menu/menu_vm_create.xml
 create mode 100644 app/src/test/java/cn/classfun/droidvm/lib/store/vm/VMCreationDefaultsTest.java
 create mode 100644 app/src/test/java/cn/classfun/droidvm/lib/utils/ShellSafePasswordTest.java
 create mode 100644 app/src/test/java/cn/classfun/droidvm/ui/disk/action/DiskActionPolicyTest.java
 create mode 100644 app/src/test/java/cn/classfun/droidvm/ui/disk/action/DiskDependencyUpdaterTest.java
 create mode 100644 app/src/test/java/cn/classfun/droidvm/ui/disk/tree/CursorPlanTest.java

diff --git a/app/src/main/AndroidManifest.xml b/app/src/main/AndroidManifest.xml
index 195153a99..6b8fb04e8 100644
--- a/app/src/main/AndroidManifest.xml
+++ b/app/src/main/AndroidManifest.xml
@@ -30,7 +30,7 @@
             android:name=".ui.SplashActivity"
             android:exported="true"
             android:theme="@style/Theme.DroidVM.Splash"
-            android:windowSoftInputMode="adjustResize">
+            android:windowSoftInputMode="adjustNothing">
             <intent-filter>
                 <action android:name="android.intent.action.MAIN" />
                 <category android:name="android.intent.category.LAUNCHER" />
@@ -42,63 +42,63 @@
             android:configChanges="orientation|screenSize|keyboardHidden|screenLayout|smallestScreenSize"
             android:exported="false"
             android:theme="@style/Theme.DroidVM.NoActionBar"
-            android:windowSoftInputMode="adjustResize" />
+            android:windowSoftInputMode="adjustNothing" />
 
         <activity
             android:name=".ui.main.MainActivity"
             android:configChanges="orientation|screenSize|keyboardHidden|screenLayout|smallestScreenSize"
             android:exported="false"
             android:theme="@style/Theme.DroidVM.NoActionBar"
-            android:windowSoftInputMode="adjustResize" />
+            android:windowSoftInputMode="adjustNothing" />
 
         <activity
             android:name=".ui.vm.edit.VMEditActivity"
             android:configChanges="orientation|screenSize|keyboardHidden|screenLayout|smallestScreenSize"
             android:exported="false"
             android:theme="@style/Theme.DroidVM.NoActionBar"
-            android:windowSoftInputMode="adjustResize" />
+            android:windowSoftInputMode="adjustNothing" />
 
         <activity
             android:name=".ui.vm.info.VMInfoActivity"
             android:configChanges="orientation|screenSize|keyboardHidden|screenLayout|smallestScreenSize"
             android:exported="false"
             android:theme="@style/Theme.DroidVM.NoActionBar"
-            android:windowSoftInputMode="adjustResize" />
+            android:windowSoftInputMode="adjustNothing" />
 
         <activity
             android:name=".ui.vm.console.VMConsoleActivity"
             android:configChanges="orientation|screenSize|keyboardHidden|screenLayout|smallestScreenSize"
             android:exported="false"
             android:theme="@style/Theme.DroidVM.NoActionBar.Dark"
-            android:windowSoftInputMode="adjustResize" />
+            android:windowSoftInputMode="adjustNothing" />
 
         <activity
             android:name=".ui.vm.display.vnc.display.VMVncDisplayActivity"
             android:configChanges="orientation|screenSize|keyboardHidden|screenLayout|smallestScreenSize"
             android:exported="false"
             android:theme="@style/Theme.DroidVM.NoActionBar.Dark"
-            android:windowSoftInputMode="adjustResize" />
+            android:windowSoftInputMode="adjustNothing" />
 
         <activity
             android:name=".ui.vm.display.vnc.display.VMVncPresentationActivity"
             android:configChanges="orientation|screenSize|keyboardHidden|screenLayout|smallestScreenSize"
             android:exported="false"
             android:theme="@style/Theme.DroidVM.NoActionBar.Dark"
-            android:windowSoftInputMode="adjustResize" />
+            android:windowSoftInputMode="adjustNothing" />
 
         <activity
             android:name=".ui.vm.display.nativedisplay.display.VMNativeDisplayActivity"
             android:configChanges="orientation|screenSize|keyboardHidden|screenLayout|smallestScreenSize"
             android:exported="false"
             android:theme="@style/Theme.DroidVM.NoActionBar.Dark"
-            android:windowSoftInputMode="adjustResize" />
+            android:windowSoftInputMode="adjustNothing" />
 
         <activity
             android:name=".ui.vm.pkg.exports.VMPkgExportActivity"
             android:configChanges="orientation|screenSize|keyboardHidden|screenLayout|smallestScreenSize"
             android:exported="false"
             android:theme="@style/Theme.DroidVM.NoActionBar"
-            android:windowSoftInputMode="adjustResize" />
+            android:windowSoftInputMode="adjustNothing" />
 
         <activity
             android:name=".ui.vm.pkg.imports.VMPkgImportActivity"
@@ -106,7 +106,7 @@
             android:configChanges="orientation|screenSize|keyboardHidden|screenLayout|smallestScreenSize"
             android:exported="true"
             android:theme="@style/Theme.DroidVM.NoActionBar"
-            android:windowSoftInputMode="adjustResize">
+            android:windowSoftInputMode="adjustNothing">
             <intent-filter android:label="@string/vmpkg_import_title">
                 <action android:name="android.intent.action.VIEW" />
                 <category android:name="android.intent.category.DEFAULT" />
@@ -125,98 +125,106 @@
             android:configChanges="orientation|screenSize|keyboardHidden|screenLayout|smallestScreenSize"
             android:exported="false"
             android:theme="@style/Theme.DroidVM.NoActionBar"
-            android:windowSoftInputMode="adjustResize" />
+            android:windowSoftInputMode="adjustNothing" />
+
+        <activity
+            android:name=".ui.disk.lxc.CreateLinuxVmActivity"
+            android:configChanges="orientation|screenSize|keyboardHidden|screenLayout|smallestScreenSize"
+            android:exported="false"
+            android:theme="@style/Theme.DroidVM.NoActionBar"
+            android:windowSoftInputMode="adjustNothing" />
 
         <activity
             android:name=".ui.disk.images.ImportImagesActivity"
             android:configChanges="orientation|screenSize|keyboardHidden|screenLayout|smallestScreenSize"
             android:exported="false"
             android:theme="@style/Theme.DroidVM.NoActionBar"
-            android:windowSoftInputMode="adjustResize" />
+            android:windowSoftInputMode="adjustNothing" />
 
         <activity
             android:name=".ui.disk.download.ImportURLActivity"
             android:configChanges="orientation|screenSize|keyboardHidden|screenLayout|smallestScreenSize"
             android:exported="false"
             android:theme="@style/Theme.DroidVM.NoActionBar"
-            android:windowSoftInputMode="adjustResize" />
+            android:windowSoftInputMode="adjustNothing" />
 
         <activity
             android:name=".ui.disk.operation.DiskOperationActivity"
             android:configChanges="orientation|screenSize|keyboardHidden|screenLayout|smallestScreenSize"
             android:exported="false"
             android:theme="@style/Theme.DroidVM.NoActionBar.Dark"
-            android:windowSoftInputMode="adjustResize" />
+            android:windowSoftInputMode="adjustNothing" />
 
         <activity
             android:name=".ui.agent.password.ChangePasswordActivity"
             android:configChanges="orientation|screenSize|keyboardHidden|screenLayout|smallestScreenSize"
             android:exported="false"
             android:theme="@style/Theme.DroidVM.NoActionBar"
-            android:windowSoftInputMode="adjustResize" />
+            android:windowSoftInputMode="adjustNothing" />
 
         <activity
             android:name=".ui.agent.AgentOperationActivity"
             android:configChanges="orientation|screenSize|keyboardHidden|screenLayout|smallestScreenSize"
             android:exported="false"
             android:theme="@style/Theme.DroidVM.NoActionBar.Dark"
-            android:windowSoftInputMode="adjustResize" />
+            android:windowSoftInputMode="adjustNothing" />
 
         <activity
             android:name=".ui.disk.create.DiskCreateActivity"
             android:configChanges="orientation|screenSize|keyboardHidden|screenLayout|smallestScreenSize"
             android:exported="false"
             android:theme="@style/Theme.DroidVM.NoActionBar"
-            android:windowSoftInputMode="adjustResize" />
+            android:windowSoftInputMode="adjustNothing" />
 
         <activity
             android:name=".ui.disk.info.DiskInfoActivity"
             android:configChanges="orientation|screenSize|keyboardHidden|screenLayout|smallestScreenSize"
             android:exported="false"
             android:theme="@style/Theme.DroidVM.NoActionBar"
-            android:windowSoftInputMode="adjustResize" />
+            android:windowSoftInputMode="adjustNothing" />
 
         <activity
             android:name=".ui.network.edit.NetworkEditActivity"
             android:configChanges="orientation|screenSize|keyboardHidden|screenLayout|smallestScreenSize"
             android:exported="false"
             android:theme="@style/Theme.DroidVM.NoActionBar"
-            android:windowSoftInputMode="adjustResize" />
+            android:windowSoftInputMode="adjustNothing" />
 
         <activity
             android:name=".ui.network.info.NetworkInfoActivity"
             android:configChanges="orientation|screenSize|keyboardHidden|screenLayout|smallestScreenSize"
             android:exported="false"
             android:theme="@style/Theme.DroidVM.NoActionBar"
-            android:windowSoftInputMode="adjustResize" />
+            android:windowSoftInputMode="adjustNothing" />
 
         <activity
             android:name=".ui.network.info.NetworkToolLogActivity"
             android:configChanges="orientation|screenSize|keyboardHidden|screenLayout|smallestScreenSize"
             android:exported="false"
             android:theme="@style/Theme.DroidVM.NoActionBar"
-            android:windowSoftInputMode="adjustResize" />
+            android:windowSoftInputMode="adjustNothing" />
 
         <activity
             android:name=".ui.logs.LogsActivity"
             android:configChanges="orientation|screenSize|keyboardHidden|screenLayout|smallestScreenSize"
             android:exported="false"
             android:theme="@style/Theme.DroidVM.NoActionBar"
-            android:windowSoftInputMode="adjustResize" />
+            android:windowSoftInputMode="adjustNothing" />
 
         <activity
             android:name=".ui.hugepage.HugePageActivity"
             android:configChanges="orientation|screenSize|keyboardHidden|screenLayout|smallestScreenSize"
             android:exported="true"
             android:theme="@style/Theme.DroidVM.NoActionBar"
-            android:windowSoftInputMode="adjustResize" />
+            android:windowSoftInputMode="adjustNothing" />
+
 
         <activity
             android:name=".ui.hugepage.HugePageProcessActivity"
             android:configChanges="orientation|screenSize|keyboardHidden|screenLayout|smallestScreenSize"
             android:exported="false"
             android:theme="@style/Theme.DroidVM.NoActionBar"
-            android:windowSoftInputMode="adjustResize" />
+            android:windowSoftInputMode="adjustNothing" />
 
         <provider
             android:name="androidx.core.content.FileProvider"
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/console/ConsoleStream.java b/app/src/main/java/cn/classfun/droidvm/daemon/console/ConsoleStream.java
index ca69dbb76..d5ab73077 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/console/ConsoleStream.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/console/ConsoleStream.java
@@ -40,6 +40,7 @@ public abstract class ConsoleStream implements Closeable, JSONSerialize {
     private Thread readerThread;
     private OutputStream logWriter = null;
     private boolean disableSave = false;
+    private boolean persistentLogEnabled = true;
 
     public ConsoleStream(@NonNull VMConfig config, @NonNull String name) {
         this.config = config;
@@ -86,7 +87,7 @@ public void appendBuffer(@NonNull byte[] data) {
 
     public void appendBuffer(@NonNull byte[] data, int off, int len) {
         buffer.adds(data, off, len);
-        if (disableSave) return;
+        if (disableSave || !persistentLogEnabled) return;
         try {
             if (logWriter == null) {
                 var path = getPersistentPath();
@@ -110,6 +111,25 @@ public void appendBuffer(@NonNull byte[] data, int off, int len) {
         }
     }
 
+    /**
+     * Controls whether future output is copied to the persistent console log.
+     *
+     * <p>Agent control channels can carry credentials on their input side and protocol chatter
+     * on their output side. They still need the small in-memory ring buffer for normal stream
+     * handling, but have no useful history to retain on disk.</p>
+     */
+    public synchronized void setPersistentLogEnabled(boolean enabled) {
+        persistentLogEnabled = enabled;
+        if (!enabled && logWriter != null) {
+            try {
+                logWriter.close();
+            } catch (Exception e) {
+                Log.w(TAG, "Failed to close disabled console log", e);
+            }
+            logWriter = null;
+        }
+    }
+
     public void clear() {
         buffer.clear();
         disableSave = false;
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/ipc/vm/DeleteHandler.java b/app/src/main/java/cn/classfun/droidvm/daemon/ipc/vm/DeleteHandler.java
index 4e30e5c8f..b10cb148b 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/ipc/vm/DeleteHandler.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/ipc/vm/DeleteHandler.java
@@ -30,10 +30,16 @@ public void handle(@NonNull ClientRequest request) throws Exception {
             throw new RequestException("missing vm_id");
         var vms = request.getContext().getVMs();
         var inst = vms.findById(vmId);
-        if (inst == null)
-            throw new RequestException(fmt("VM not found: %s", vmId));
+        // A VM the daemon never managed (created in the app but never started) has nothing to
+        // stop and nothing to remove: deleting it is a no-op, not an error - the app deletes
+        // its disks on our word that no process of ours holds them.
+        if (inst == null) {
+            request.res().put("existed", false);
+            return;
+        }
         if (inst.getState() != VMState.STOPPED && inst.stop())
             throw new RequestException(fmt("Failed to stop VM: %s", vmId));
         vms.removeById(inst.getId());
+        request.res().put("existed", true);
     }
 }
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/ipc/vm/DiskCompatHandler.java b/app/src/main/java/cn/classfun/droidvm/daemon/ipc/vm/DiskCompatHandler.java
deleted file mode 100644
index d6805942f..000000000
--- a/app/src/main/java/cn/classfun/droidvm/daemon/ipc/vm/DiskCompatHandler.java
+++ /dev/null
@@ -1,42 +0,0 @@
-package cn.classfun.droidvm.daemon.ipc.vm;
-
-import androidx.annotation.NonNull;
-
-import com.google.auto.service.AutoService;
-
-import org.json.JSONArray;
-
-import cn.classfun.droidvm.daemon.server.ClientRequest;
-import cn.classfun.droidvm.daemon.server.RequestHandler;
-import cn.classfun.droidvm.daemon.vm.BootPlan;
-
-/**
- * Reports which of the given disk images use qcow2 features the crosvm
- * backend can't read (zlib-compressed clusters) for the UI's pre-start
- * guard: such an image boots to a dead end (vda I/O errors, no partition
- * table, root device never appears). lbx already runs in the daemon for
- * boot scans, and disk images are usually only readable here, so the check
- * lives daemon-side. This is never used on the URL-analysis path.
- */
-@AutoService(RequestHandler.class)
-public final class DiskCompatHandler extends RequestHandler {
-    @NonNull
-    @Override
-    public String getName() {
-        return "disk_compat";
-    }
-
-    @Override
-    public void handle(@NonNull ClientRequest request) throws Exception {
-        var images = request.getParams().optJSONArray("images");
-        var compressed = new JSONArray();
-        if (images != null) {
-            for (int i = 0; i < images.length(); i++) {
-                var path = images.optString(i, "");
-                if (!path.isEmpty() && BootPlan.hasCompressedClusters(path))
-                    compressed.put(path);
-            }
-        }
-        request.res().put("compressed", compressed);
-    }
-}
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/vm/BootPlan.java b/app/src/main/java/cn/classfun/droidvm/daemon/vm/BootPlan.java
index 2a14a3806..1edd152c1 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/vm/BootPlan.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/vm/BootPlan.java
@@ -266,24 +266,6 @@ public static JSONArray scanEntries(@NonNull String image) throws IOException {
         }
     }
 
-    /**
-     * Whether {@code image} stores zlib-compressed qcow2 clusters, which the
-     * crosvm backend cannot read: the guest gets I/O errors and an
-     * unreadable partition table, so every {@code root=} form hangs waiting
-     * for a root device that never appears. Runs {@code lbx compat --json};
-     * any lbx failure returns {@code false} so a scan hiccup never blocks a
-     * start (a real boot would surface the problem anyway).
-     */
-    public static boolean hasCompressedClusters(@NonNull String image) {
-        try {
-            var out = runLbx("compat", image, "--json").trim();
-            return new JSONObject(out).optBoolean("compressed_clusters", false);
-        } catch (Exception e) {
-            Log.w(TAG, fmt("compat check failed for %s: %s", image, e.getMessage()));
-            return false;
-        }
-    }
-
     @Nullable
     private static JSONObject matchEntry(
         @NonNull JSONArray entries,
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/CrosvmBackendInstance.java b/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/CrosvmBackendInstance.java
index 7312bd6c3..b3ac0b841 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/CrosvmBackendInstance.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/CrosvmBackendInstance.java
@@ -158,8 +158,7 @@ private List<String> buildCommand() {
         args.add(String.valueOf(Math.max(item.optLong("cpu_count", 1), 1)));
         var hyp = item.optString("hypervisor", "auto");
         var hypervisor = VMHypervisor.valueOf(hyp.toUpperCase());
-        if (hypervisor == VMHypervisor.AUTO)
-            hypervisor = VMHypervisor.findPreferredHypervisor(VMBackend.CROSVM);
+        hypervisor = VMHypervisor.resolveConfigured(VMBackend.CROSVM, hypervisor);
         if (hypervisor == null) throw new RuntimeException("No supported hypervisor found for CROSVM backend");
         args.add("--hypervisor");
         var defProtectedMode = ProtectedVM.PROTECTED_NORMAL;
@@ -342,6 +341,7 @@ private void buildSharedDirCommand(@NonNull List<String> args) {
         }
     }
 
+        hypervisor = VMHypervisor.resolveConfigured(VMBackend.CROSVM, hypervisor);
     private void buildGpuCommand(@NonNull List<String> args) {
         var item = config.item;
         var useGpu = item.optBoolean("gpu_enabled", false);
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/archive/TarWriter.java b/app/src/main/java/cn/classfun/droidvm/lib/archive/TarWriter.java
index 59ee04be9..c58a1614e 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/archive/TarWriter.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/archive/TarWriter.java
@@ -26,6 +26,9 @@
 
 public final class TarWriter implements AutoCloseable {
     private static final int BLOCK = 512;
+    // Fixed zstd worker count: each one costs roughly jobSize * 2 of extra
+    // memory, and the export runs next to whatever else the host is doing.
+    private static final int ZSTD_WORKERS = 4;
     private final OutputStream out;
     private boolean closed = false;
 
@@ -159,7 +162,11 @@ public static OutputStream wrapCompressionOutput(
             case XZ:
                 return new XZOutputStream(out, new LZMA2Options());
             case ZSTD:
-                return new ZstdOutputStream(out, 3);
+                // setWorkers must be called before the first write, otherwise
+                // zstd-jni rejects it with IllegalStateException. Workers only
+                // affect encoder internals: the output stays a single standard
+                // zstd frame that any reader can decode.
+                return new ZstdOutputStream(out, 3).setWorkers(ZSTD_WORKERS);
             default:
                 throw new IllegalArgumentException(fmt("unknown compression: %s", c));
         }
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/download/DiskDownloadManager.java b/app/src/main/java/cn/classfun/droidvm/lib/download/DiskDownloadManager.java
index 85b3ccdd1..3758fd0b8 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/download/DiskDownloadManager.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/download/DiskDownloadManager.java
@@ -63,6 +63,7 @@ public final class DiskDownloadManager {
 
     private static final AtomicLong NEXT_ID = new AtomicLong(1);
     private static final ConcurrentHashMap<Long, Download> JOBS = new ConcurrentHashMap<>();
+    private static final java.util.Set<Long> RETAINED = ConcurrentHashMap.newKeySet();
 
     private DiskDownloadManager() {
     }
@@ -127,7 +128,9 @@ public static final class Result {
 
     /**
      * Registers a download and returns its id. Drops any earlier job for the same
-     * destination and purges finished jobs. The caller then starts
+     * destination and purges failed/cancelled jobs. Successful jobs stay available
+     * until their source Activity consumes them, so a completed background download
+     * can still continue its import workflow. The caller then starts
      * {@link DiskDownloadService} for this id, which runs the download.
      */
     public static long enqueue(
@@ -188,6 +191,31 @@ public static Result getResult(long id) {
         return new Result(d.folder, d.name, d.diskId);
     }
 
+    /**
+     * Keeps a successful background result until its source screen has resumed and
+     * consumed it. This is opt-in so ordinary one-shot download screens retain
+     * their existing cleanup behaviour.
+     */
+    public static void retainUntilReleased(long id) {
+        if (JOBS.containsKey(id)) RETAINED.add(id);
+    }
+
+    /** Atomically consumes a successful result so two Activity instances cannot process it twice. */
+    @Nullable
+    public static Result consumeResult(long id) {
+        var d = JOBS.get(id);
+        if (d == null || d.state != STATE_SUCCESS || !JOBS.remove(id, d)) return null;
+        RETAINED.remove(id);
+        return new Result(d.folder, d.name, d.diskId);
+    }
+
+    /** Releases a terminal job after its source Activity has consumed the result. */
+    public static void release(long id) {
+        RETAINED.remove(id);
+        var d = JOBS.get(id);
+        if (d != null && (d.cancelled.get() || isTerminal(id))) JOBS.remove(id, d);
+    }
+
     /** Ids of all known (in-flight or just-finished) downloads. */
     @NonNull
     public static long[] activeIds() {
@@ -444,15 +472,19 @@ private static void copyFile(File src, File dest) throws IOException {
         }
     }
 
-    /** Drops finished jobs and any earlier job aimed at the same destination. */
+    /** Drops failed/cancelled jobs and any earlier job aimed at the same destination. */
     private static void purgeFinishedAndDuplicates(String folder, String name) {
         for (var e : JOBS.entrySet()) {
             var d = e.getValue();
             boolean duplicate = d.folder.equals(folder) && d.name.equals(name);
-            boolean finished = d.state == STATE_SUCCESS
+            boolean terminal = d.state == STATE_SUCCESS
                 || d.state == STATE_FAILED || d.state == STATE_CANCELLED;
+            boolean finished = terminal && !RETAINED.contains(d.id);
             if (duplicate) d.cancelled.set(true);
-            if (duplicate || finished) JOBS.remove(e.getKey());
+            if (duplicate || finished) {
+                JOBS.remove(e.getKey());
+                RETAINED.remove(e.getKey());
+            }
         }
     }
 
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/store/disk/DiskConfig.java b/app/src/main/java/cn/classfun/droidvm/lib/store/disk/DiskConfig.java
index 79b9cdf06..139d97f19 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/store/disk/DiskConfig.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/store/disk/DiskConfig.java
@@ -6,6 +6,7 @@
 import static cn.classfun.droidvm.lib.utils.StringUtils.pathJoin;
 
 import androidx.annotation.NonNull;
+import androidx.annotation.Nullable;
 
 import org.json.JSONException;
 import org.json.JSONObject;
@@ -30,6 +31,27 @@ public String getFullPath() {
         return pathJoin(item.optString("folder", ""), getName());
     }
 
+    /**
+     * The registered disk this one is an overlay of (mirrors the qcow2 header's backing file;
+     * the header stays the ground truth, this link is what the UI trees and lock rules read).
+     * Null for a standalone disk or when the parent isn't registered.
+     */
+    @Nullable
+    public UUID getParentId() {
+        var s = item.optString("parent", "");
+        if (s.isEmpty()) return null;
+        try {
+            return UUID.fromString(s);
+        } catch (IllegalArgumentException e) {
+            return null;
+        }
+    }
+
+    public void setParentId(@Nullable UUID id) {
+        if (id == null) item.remove("parent");
+        else item.set("parent", id.toString());
+    }
+
     @NonNull
     public DiskFormat getFormat() {
         return DiskFormat.fromFilename(getName());
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/store/disk/DiskStore.java b/app/src/main/java/cn/classfun/droidvm/lib/store/disk/DiskStore.java
index 17c1cdf8c..bb70d7e30 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/store/disk/DiskStore.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/store/disk/DiskStore.java
@@ -12,6 +12,9 @@
 import org.json.JSONObject;
 
 import java.io.File;
+import java.util.ArrayList;
+import java.util.List;
+import java.util.UUID;
 
 import cn.classfun.droidvm.lib.store.base.DataStore;
 
@@ -74,4 +77,33 @@ public DiskConfig findByPath(@NonNull String path) {
         }
         return null;
     }
+
+    // Overlay-tree helpers. Linear scans: the registry holds tens of entries, so scanning IS the
+    // fast lookup, and unlike a cached index it can never go stale. Full-tree construction
+    // (cycle guard, depth cap, flattening) lives in DiskTree.
+
+    /** Whether any registered disk is an overlay of {@code id} - the disk is then locked. */
+    public boolean hasChildren(@NonNull UUID id) {
+        for (int i = 0; i < size(); i++)
+            if (id.equals(get(i).getParentId())) return true;
+        return false;
+    }
+
+    /** All direct overlays of {@code id}, in registry order. */
+    @NonNull
+    public List<DiskConfig> childrenOf(@NonNull UUID id) {
+        var out = new ArrayList<DiskConfig>();
+        for (int i = 0; i < size(); i++) {
+            var cfg = get(i);
+            if (id.equals(cfg.getParentId())) out.add(cfg);
+        }
+        return out;
+    }
+
+    /** The registered parent of {@code config}, or null (standalone / broken link). */
+    @Nullable
+    public DiskConfig parentOf(@NonNull DiskConfig config) {
+        var parentId = config.getParentId();
+        return parentId == null ? null : findById(parentId);
+    }
 }
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/store/vm/LendMthpMode.java b/app/src/main/java/cn/classfun/droidvm/lib/store/vm/LendMthpMode.java
index 2cf7e70d9..2c4a8e63e 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/store/vm/LendMthpMode.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/store/vm/LendMthpMode.java
@@ -5,10 +5,15 @@
 
 import static cn.classfun.droidvm.lib.store.enums.Enums.optEnum;
 
+import android.content.Context;
+import android.util.Log;
+
 import androidx.annotation.NonNull;
 import androidx.annotation.StringRes;
 
 import cn.classfun.droidvm.R;
+import cn.classfun.droidvm.lib.data.QcomChipName;
+import cn.classfun.droidvm.lib.data.QcomGunyahSupports;
 import cn.classfun.droidvm.lib.store.base.DataItem;
 import cn.classfun.droidvm.lib.store.enums.StringEnum;
 
@@ -19,6 +24,7 @@ public enum LendMthpMode implements StringEnum {
 
     public static final String KEY = "prepare_lend_mthp";
     public static final LendMthpMode DEFAULT = CHUNKED;
+    private static final String TAG = "LendMthpMode";
 
     private final @StringRes int stringId;
 
@@ -41,4 +47,28 @@ public static LendMthpMode fromItem(@NonNull DataItem item) {
             return raw.asBoolean() ? CHUNKED : DISABLED;
         return optEnum(item, KEY, DEFAULT);
     }
+
+    /**
+     * Device-aware default used by every new-VM path. Keep the priority identical to the
+     * capability table: a more specific supported mode later in the list wins. In particular,
+     * Snapdragon 8 Gen 3 advertises only {@code mthp_single} and must never default to chunked
+     * preallocation.
+     */
+    @NonNull
+    public static LendMthpMode defaultForDevice(@NonNull Context context) {
+        var mode = DEFAULT;
+        try {
+            var socModel = QcomChipName.getCurrentSoC();
+            var gunyah = new QcomGunyahSupports(context);
+            if (gunyah.isCapacitySupported(socModel, "no_mthp"))
+                mode = DISABLED;
+            if (gunyah.isCapacitySupported(socModel, "mthp_chunked"))
+                mode = CHUNKED;
+            if (gunyah.isCapacitySupported(socModel, "mthp_single"))
+                mode = SINGLE;
+        } catch (Exception e) {
+            Log.w(TAG, "Failed to resolve device MTHP default", e);
+        }
+        return mode;
+    }
 }
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/store/vm/VMHypervisor.java b/app/src/main/java/cn/classfun/droidvm/lib/store/vm/VMHypervisor.java
index 8b91dc74b..88acb9511 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/store/vm/VMHypervisor.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/store/vm/VMHypervisor.java
@@ -37,6 +37,12 @@ public int getStringId() {
         return stringId;
     }
 
+    /** AUTO remains readable for old configs, but is no longer offered for new edits. */
+    @Override
+    public boolean isDisplay() {
+        return this != AUTO;
+    }
+
     @Nullable
     public String getDevicePath() {
         return devicePath;
@@ -85,4 +91,25 @@ public static VMHypervisor findPreferredHypervisor(
     public static VMHypervisor findPreferredHypervisor(@Nullable VMBackend backend) {
         return findPreferredHypervisor(backend, List.of(values()));
     }
+
+    /** Resolves the legacy AUTO value at the one shared backend/device decision point. */
+    @Nullable
+    public static VMHypervisor resolveConfigured(
+        @Nullable VMBackend backend, @Nullable VMHypervisor configured
+    ) {
+        return configured == null || configured == AUTO
+            ? findPreferredHypervisor(backend) : configured;
+    }
+
+    /**
+     * Concrete value written for a new VM. The fallback preserves the old failure mode on a
+     * device with no usable hardware node (crosvm has no software accelerator), while avoiding
+     * an AUTO value that can silently change meaning after the config is created.
+     */
+    @NonNull
+    public static VMHypervisor defaultForNewVm(@NonNull VMBackend backend) {
+        var resolved = findPreferredHypervisor(backend);
+        if (resolved != null) return resolved;
+        return backend == VMBackend.QEMU ? SOFT : KVM;
+    }
 }
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/store/vm/VMPeripheralConfig.java b/app/src/main/java/cn/classfun/droidvm/lib/store/vm/VMPeripheralConfig.java
new file mode 100644
index 000000000..2c4092eb4
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/lib/store/vm/VMPeripheralConfig.java
@@ -0,0 +1,18 @@
+import cn.classfun.droidvm.lib.data.HostAudioDevices;
+    /**
+     * Creates the sound card offered by default for a new VM: one playback and one capture
+     * endpoint, both left to Android's current system routing.
+     */
+    @NonNull
+    public static VMPeripheralConfig createDefaultVirtioSound() {
+        var config = new VMPeripheralConfig(DataItem.newObject());
+        config.setType(PeripheralType.VIRTIO_SOUND);
+        var speaker = config.addEndpoint();
+        speaker.setMode(SoundMode.SPEAKER);
+        speaker.setHostDevice(HostAudioDevices.SYSTEM_DEFAULT_KEY, "");
+        var microphone = config.addEndpoint();
+        microphone.setMode(SoundMode.MICROPHONE);
+        microphone.setHostDevice(HostAudioDevices.SYSTEM_DEFAULT_KEY, "");
+        return config;
+    }
+
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/store/vm/VMScreenConfig.java b/app/src/main/java/cn/classfun/droidvm/lib/store/vm/VMScreenConfig.java
new file mode 100644
index 000000000..6a4aa7755
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/lib/store/vm/VMScreenConfig.java
@@ -0,0 +1,2 @@
+    /** Initial SimpleFB polling rate shown when creating a VM. */
+    public static final long NEW_VM_DEFAULT_POLL_HZ = 60;
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/ui/CopyableField.java b/app/src/main/java/cn/classfun/droidvm/lib/ui/CopyableField.java
index ae48272ae..988c8c899 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/ui/CopyableField.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/ui/CopyableField.java
@@ -4,8 +4,10 @@
 package cn.classfun.droidvm.lib.ui;
 
 import android.content.ClipData;
+import android.content.ClipDescription;
 import android.content.ClipboardManager;
 import android.content.Context;
+import android.os.PersistableBundle;
 import android.view.View;
 import android.view.ViewParent;
 import android.widget.EditText;
@@ -72,6 +74,19 @@ public static void copy(
         Toast.makeText(ctx, R.string.field_copied, Toast.LENGTH_SHORT).show();
     }
 
+    /** Like {@link #copy}, but flags the clip sensitive so previews stay masked. */
+    public static void copySensitive(
+        @NonNull Context ctx, @NonNull CharSequence text, @NonNull CharSequence label) {
+        var cm = ctx.getSystemService(ClipboardManager.class);
+        if (cm == null) return;
+        var clip = ClipData.newPlainText(label, text);
+        var extras = new PersistableBundle();
+        extras.putBoolean(ClipDescription.EXTRA_IS_SENSITIVE, true);
+        clip.getDescription().setExtras(extras);
+        cm.setPrimaryClip(clip);
+        Toast.makeText(ctx, R.string.field_copied, Toast.LENGTH_SHORT).show();
+    }
+
     @Nullable
     private static TextInputLayout enclosingLayout(@NonNull View v) {
         ViewParent p = v.getParent();
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/ui/ImeInsetsApplier.java b/app/src/main/java/cn/classfun/droidvm/lib/ui/ImeInsetsApplier.java
index 20532c39b..29d99f825 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/ui/ImeInsetsApplier.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/ui/ImeInsetsApplier.java
@@ -24,6 +24,11 @@
  * applies the system bar insets, so without this the keyboard covers whatever
  * the user is typing into.
  *
+ * <p>Activities use {@code windowSoftInputMode="adjustNothing"}: allowing the
+ * framework to resize the window as well as applying this inset can move the
+ * content twice on devices that still honor {@code adjustResize} under
+ * edge-to-edge.
+ *
  * <p>This applier pads the bottom of every activity's content view by the IME
  * inset, lifting the content (and any scroll container within it) above the
  * keyboard for every activity uniformly. Activities that handle the keyboard
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/utils/ImageUtils.java b/app/src/main/java/cn/classfun/droidvm/lib/utils/ImageUtils.java
index 4e48ff6d6..8c88bd795 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/utils/ImageUtils.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/utils/ImageUtils.java
@@ -64,4 +64,50 @@ public static boolean hasCompressedClusters(String path) {
             return false;
         }
     }
+
+    /** Whether the image declares a backing file (i.e. it is an overlay). Failures read false. */
+    public static boolean hasBackingFile(String path) {
+        try {
+            return !getImageInfo(path).optString("backing-filename", "").isEmpty();
+        } catch (Exception e) {
+            return false;
+        }
+    }
+
+    /**
+     * Whether the image carries qcow2 internal snapshots ({@code qemu-img snapshot -c}). crosvm
+     * refuses to open such an image for writing - it has no snapshot support, and writing would
+     * damage the snapshots rather than ignore them - so a VM disk must be flattened first.
+     * Detection failures return {@code false}: an image we can't read tells us nothing, and a
+     * real start would surface the problem anyway.
+     */
+    public static boolean hasInternalSnapshots(String path) {
+        try {
+            var snapshots = getImageInfo(path).optJSONArray("snapshots");
+            return snapshots != null && snapshots.length() > 0;
+        } catch (Exception e) {
+            return false;
+        }
+    }
+
+    /**
+     * The image's effective compression as qemu names it: {@code "none"} unless the image
+     * actually stores compressed clusters (see {@link #hasCompressedClusters}); the qcow2
+     * header's {@code compression-type} then picks {@code "zlib"} vs {@code "zstd"} (that header
+     * field alone can't - it reads "zlib" for every v3 image). Detection failures return
+     * {@code "none"}: an undetectable image is treated as uncompressed.
+     */
+    @NonNull
+    public static String detectCompression(String path) {
+        try {
+            if (!hasCompressedClusters(path)) return "none";
+            var info = getImageInfo(path);
+            var fmtSpecific = info.optJSONObject("format-specific");
+            var data = fmtSpecific == null ? null : fmtSpecific.optJSONObject("data");
+            var type = data == null ? "" : data.optString("compression-type", "");
+            return "zstd".equals(type) ? "zstd" : "zlib";
+        } catch (Exception e) {
+            return "none";
+        }
+    }
 }
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/utils/StringUtils.java b/app/src/main/java/cn/classfun/droidvm/lib/utils/StringUtils.java
index 3b6608c40..c67750b04 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/utils/StringUtils.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/utils/StringUtils.java
@@ -15,6 +15,7 @@
 import android.net.Uri;
 import android.provider.DocumentsContract;
 import android.system.Os;
+import android.text.InputFilter;
 import android.widget.EditText;
 
 import androidx.annotation.NonNull;
@@ -226,6 +227,75 @@ public static String generateRandomPassword(int length) {
         return sb.toString();
     }
 
+    /**
+     * The only symbols allowed in passwords that ride through the temp rescue
+     * VM's generated chpasswd script. Everything quoting- or expansion-related
+     * (' " \ $ `), whitespace, and shell/script metacharacters stay out, so a
+     * password cannot break the script even if an escaping layer regresses.
+     */
+    public static final String SHELL_SAFE_PASSWORD_SYMBOLS = "!@#%^*+-=_.,:?";
+
+    public static final String GROUPED_PASSWORD_UPPER = "ABCDEFGHJKLMNPQRSTUVWXYZ";
+    public static final String GROUPED_PASSWORD_LOWER = "abcdefghijkmnpqrstuvwxyz";
+    public static final String GROUPED_PASSWORD_DIGITS = "23456789";
+    public static final String GROUPED_PASSWORD_SYMBOLS = "!@#%*+-=?";
+
+    public static boolean isShellSafePasswordChar(char c) {
+        return (c >= 'A' && c <= 'Z') || (c >= 'a' && c <= 'z')
+            || (c >= '0' && c <= '9')
+            || SHELL_SAFE_PASSWORD_SYMBOLS.indexOf(c) >= 0;
+    }
+
+    /** Gate for the rescue-VM password path: letters, digits and the safe symbols only. */
+    public static boolean isShellSafePassword(@NonNull CharSequence password) {
+        for (int i = 0; i < password.length(); i++)
+            if (!isShellSafePasswordChar(password.charAt(i))) return false;
+        return true;
+    }
+
+    /** Whitelist filter for password fields feeding {@link #isShellSafePassword}. */
+    @NonNull
+    public static InputFilter shellSafePasswordFilter() {
+        return (source, start, end, dest, dstart, dend) -> {
+            boolean clean = true;
+            for (int i = start; i < end && clean; i++)
+                clean = isShellSafePasswordChar(source.charAt(i));
+            if (clean) return null; // accept unchanged
+            var sb = new StringBuilder(end - start);
+            for (int i = start; i < end; i++)
+                if (isShellSafePasswordChar(source.charAt(i)))
+                    sb.append(source.charAt(i));
+            return sb.toString();
+        };
+    }
+
+    /**
+     * Grouped as 2 uppercase + 3 lowercase + 4 digits + 2 symbols, so the value
+     * stays strong yet easy to read back and retype on a VM console. Glyphs that
+     * are ambiguous on screen (I/O vs l/o vs 0/1) are left out of every group,
+     * and each group draws only from the shell-safe whitelist above.
+     */
+    @NonNull
+    public static String generateGroupedPassword() {
+        var random = new SecureRandom();
+        var sb = new StringBuilder(11);
+        appendRandomChars(sb, random, GROUPED_PASSWORD_UPPER, 2);
+        appendRandomChars(sb, random, GROUPED_PASSWORD_LOWER, 3);
+        appendRandomChars(sb, random, GROUPED_PASSWORD_DIGITS, 4);
+        appendRandomChars(sb, random, GROUPED_PASSWORD_SYMBOLS, 2);
+        return sb.toString();
+    }
+
+    private static void appendRandomChars(
+        @NonNull StringBuilder sb,
+        @NonNull SecureRandom random,
+        @NonNull String charset,
+        int count
+    ) {
+        for (int i = 0; i < count; i++)
+            sb.append(charset.charAt(random.nextInt(charset.length())));
+    }
+
     @NonNull
     @SuppressWarnings("unused")
     public static String base64Encode(@NonNull byte[] data) {
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/disk/action/BackingChainLinker.java b/app/src/main/java/cn/classfun/droidvm/ui/disk/action/BackingChainLinker.java
new file mode 100644
index 000000000..a0ac0afe8
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/ui/disk/action/BackingChainLinker.java
@@ -0,0 +1,318 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
+package cn.classfun.droidvm.ui.disk.action;
+
+import static cn.classfun.droidvm.lib.utils.AssetUtils.getPrebuiltBinaryPath;
+import static cn.classfun.droidvm.lib.utils.RunUtils.runListQuiet;
+import static cn.classfun.droidvm.lib.utils.StringUtils.basename;
+import static cn.classfun.droidvm.lib.utils.StringUtils.dirname;
+import static cn.classfun.droidvm.lib.utils.StringUtils.pathJoin;
+import static cn.classfun.droidvm.lib.utils.ThreadUtils.runOnPool;
+
+import android.content.Context;
+import android.os.Handler;
+import android.os.Looper;
+import android.util.Log;
+
+import androidx.annotation.NonNull;
+import androidx.annotation.Nullable;
+
+import com.google.android.material.dialog.MaterialAlertDialogBuilder;
+
+import java.io.File;
+import java.util.ArrayList;
+import java.util.HashSet;
+import java.util.List;
+import java.util.UUID;
+
+import cn.classfun.droidvm.R;
+import cn.classfun.droidvm.lib.store.disk.DiskConfig;
+import cn.classfun.droidvm.lib.store.disk.DiskStore;
+import cn.classfun.droidvm.lib.utils.ImageUtils;
+import cn.classfun.droidvm.ui.disk.tree.DiskTree;
+
+/**
+ * Post-import chain resolution for a just-registered qcow2. The whole backing chain is walked
+ * FIRST (headers only, fast), then at most one dialog asks about everything found:
+ * <ul>
+ *   <li>relative backing paths are rewritten absolute in the header ({@code qemu-img rebase -u},
+ *       instant, header-only) - qemu resolves them against the overlay's directory but crosvm
+ *       does not, and the registry requires absolute paths anyway;</li>
+ *   <li>parents already registered are linked ({@code parent} field);</li>
+ *   <li>parents that exist on disk but aren't registered are listed in one dialog and, on
+ *       confirmation, registered and linked in chain order;</li>
+ *   <li>a missing parent file stops the walk with a warning - the overlay is registered but
+ *       unusable until the file returns.</li>
+ * </ul>
+ */
+public final class BackingChainLinker {
+    private static final String TAG = "BackingChainLinker";
+
+    private BackingChainLinker() {
+    }
+
+    /** One hop of the walked chain, child-first order. */
+    private static final class Hop {
+        final String childPath;
+        final String parentPath;
+        @Nullable
+        final UUID registeredParent;
+
+        Hop(String childPath, String parentPath, @Nullable UUID registeredParent) {
+            this.childPath = childPath;
+            this.parentPath = parentPath;
+            this.registeredParent = registeredParent;
+        }
+    }
+
+    /**
+     * Lazily reconcile one disk's {@code parent} links with its qcow2 headers, walking upward
+     * from the disk itself. Registers parents that exist but aren't in the registry and fills in
+     * missing links for ones that are - silently, with no dialog, because this runs on paths
+     * where the answer is never in doubt: an image whose backing files are all present is
+     * exactly the case where linking is correct, and one with a missing backing file cannot be
+     * used at all (the VM start guard reports that separately).
+     *
+     * <p>Registries predating the overlay tree, and images rebased outside the app, converge the
+     * first time they're started or opened in branch management. {@code onDone} always runs on
+     * the main thread.
+     */
+    public static void repair(
+        @NonNull Context context, @NonNull UUID diskId, @Nullable Runnable onDone) {
+        var main = new Handler(Looper.getMainLooper());
+        runOnPool(() -> {
+            try {
+                var store = new DiskStore();
+                store.load(context);
+                var config = store.findById(diskId);
+                if (config != null) {
+                    var hops = new ArrayList<Hop>();
+                    walkChain(store, config.getFullPath(), hops);
+                    if (!hops.isEmpty()) {
+                        var pending = new ArrayList<Hop>();
+                        for (var hop : hops)
+                            if (hop.registeredParent == null) pending.add(hop);
+                        if (!pending.isEmpty())
+                            registerParents(context, pending, null);
+                        applyKnownLinks(context, hops);
+                    }
+                }
+            } catch (Exception e) {
+                Log.w(TAG, "chain repair failed", e);
+            }
+            if (onDone != null) main.post(onDone);
+        });
+    }
+
+    /** Write the {@code parent} links for hops whose parent is (now) registered. */
+    private static void applyKnownLinks(@NonNull Context context, @NonNull List<Hop> hops) {
+        try {
+            var store = new DiskStore();
+            store.load(context);
+            boolean changed = false;
+            for (var hop : hops) {
+                var child = store.findByPath(hop.childPath);
+                var parent = store.findByPath(hop.parentPath);
+                if (child == null || parent == null) continue;
+                if (!parent.getId().equals(child.getParentId())) {
+                    child.setParentId(parent.getId());
+                    changed = true;
+                }
+            }
+            if (changed) store.save(context);
+        } catch (Exception e) {
+            Log.w(TAG, "link write-back failed", e);
+        }
+    }
+
+    /** {@code onUpdate} runs on the main thread on every outcome, so callers can chain on it. */
+    public static void link(
+        @NonNull Context context, @NonNull UUID diskId, @Nullable Runnable onUpdate) {
+        Runnable done = () -> {
+            if (onUpdate != null)
+                new Handler(Looper.getMainLooper()).post(onUpdate);
+        };
+        runOnPool(() -> {
+            try {
+                var store = new DiskStore();
+                store.load(context);
+                var config = store.findById(diskId);
+                if (config == null) {
+                    done.run();
+                    return;
+                }
+                var hops = new ArrayList<Hop>();
+                String missingParent = walkChain(store, config.getFullPath(), hops);
+                if (hops.isEmpty() && missingParent == null) {
+                    done.run();
+                    return;
+                }
+
+                // Apply links that need no confirmation (parent already registered).
+                boolean changed = false;
+                for (var hop : hops) {
+                    if (hop.registeredParent == null) continue;
+                    var child = store.findByPath(hop.childPath);
+                    if (child != null
+                        && !hop.registeredParent.equals(child.getParentId())) {
+                        child.setParentId(hop.registeredParent);
+                        changed = true;
+                    }
+                }
+                if (changed) store.save(context);
+
+                var toImport = new ArrayList<Hop>();
+                for (var hop : hops)
+                    if (hop.registeredParent == null) toImport.add(hop);
+
+                final var missing = missingParent;
+                new Handler(Looper.getMainLooper()).post(() -> {
+                    if (missing != null) {
+                        new MaterialAlertDialogBuilder(context)
+                            .setTitle(R.string.disk_tree_broken_parent)
+                            .setMessage(context.getString(
+                                R.string.disk_chain_missing_parent, missing))
+                            .setPositiveButton(android.R.string.ok, null)
+                            .show();
+                    }
+                    if (toImport.isEmpty()) {
+                        if (onUpdate != null) onUpdate.run();
+                        return;
+                    }
+                    var names = new StringBuilder();
+                    for (var hop : toImport)
+                        names.append("\n- ").append(basename(hop.parentPath));
+                    new MaterialAlertDialogBuilder(context)
+                        .setTitle(R.string.disk_chain_import_title)
+                        .setMessage(context.getString(
+                            R.string.disk_chain_import_message, names.toString()))
+                        .setPositiveButton(R.string.disk_chain_import_confirm, (d, w) ->
+                            runOnPool(() -> registerParents(context, toImport, onUpdate)))
+                        .setNegativeButton(android.R.string.cancel, (d, w) -> {
+                            if (onUpdate != null) onUpdate.run();
+                        })
+                        .show();
+                });
+            } catch (Exception e) {
+                Log.w(TAG, "backing chain link failed", e);
+                done.run();
+            }
+        });
+    }
+
+    /**
+     * Walk the chain upward from {@code startPath}, absolutizing headers as it goes. Fills
+     * {@code hops} child-first; returns the path of a missing parent file, or null.
+     */
+    @Nullable
+    private static String walkChain(
+        @NonNull DiskStore store, @NonNull String startPath, @NonNull List<Hop> hops) {
+        var current = startPath;
+        var seen = new HashSet<String>();
+        for (int depth = 0; depth < DiskTree.MAX_DEPTH && seen.add(current); depth++) {
+            String backing;
+            String backingRaw;
+            try {
+                var info = ImageUtils.getImageInfo(current);
+                backingRaw = info.optString("backing-filename", "");
+                if (backingRaw.isEmpty()) return null;
+                backing = info.optString("full-backing-filename", backingRaw);
+            } catch (Exception e) {
+                return null; // unreadable image - nothing to link
+            }
+            if (!backing.startsWith("/"))
+                backing = pathJoin(dirname(current), backing);
+            if (!backingRaw.equals(backing))
+                rebaseAbsolute(current, backing);
+            if (!new File(backing).exists())
+                return backing;
+            var parent = store.findByPath(backing);
+            hops.add(new Hop(current, backing,
+                parent == null ? null : parent.getId()));
+            current = backing;
+        }
+        return null;
+    }
+
+    /** Header-only rewrite to an absolute backing path; content-identical, so -u is correct. */
+    private static void rebaseAbsolute(@NonNull String overlay, @NonNull String absBacking) {
+        try {
+            var format = ImageUtils.getImageInfo(absBacking).optString("format", "qcow2");
+            var result = runListQuiet(
+                getPrebuiltBinaryPath("qemu-img"), "rebase",
+                "-u", "-b", absBacking, "-F", format, overlay);
+            if (!result.isSuccess()) result.printLog(TAG);
+        } catch (Exception e) {
+        }
+    }
+
+    /**
+     * Repair every registered disk's chain links, for a whole-VM pre-start pass. Blocking; call
+     * off the main thread.
+     */
+    public static void repairAllBlocking(
+        @NonNull Context context, @NonNull List<String> paths) {
+        try {
+            var store = new DiskStore();
+            store.load(context);
+            var hops = new ArrayList<Hop>();
+            for (var path : paths) {
+                var config = store.findByPath(path);
+                if (config != null) walkChain(store, config.getFullPath(), hops);
+            }
+            if (hops.isEmpty()) return;
+            var pending = new ArrayList<Hop>();
+            for (var hop : hops)
+                if (hop.registeredParent == null) pending.add(hop);
+            if (!pending.isEmpty()) registerParents(context, pending, null);
+            applyKnownLinks(context, hops);
+        } catch (Exception e) {
+            Log.w(TAG, "bulk chain repair failed", e);
+        }
+    }
+
+    /** Register the unregistered parents (root-first so links resolve) and connect the chain. */
+    private static void registerParents(
+        @NonNull Context context, @NonNull List<Hop> toImport, @Nullable Runnable onUpdate) {
+        try {
+            var store = new DiskStore();
+            store.load(context);
+            for (int i = toImport.size() - 1; i >= 0; i--) {
+                var hop = toImport.get(i);
+                var parent = store.findByPath(hop.parentPath);
+                if (parent == null) {
+                    parent = new DiskConfig();
+                    parent.setName(basename(hop.parentPath));
+                    parent.item.set("folder", dirname(hop.parentPath));
+                    // The parent may itself be an overlay whose own parent was walked later
+                    // in the chain (i.e. earlier in this loop, since we go root-first).
+                    var grand = store.findByPath(grandparentOf(hop.parentPath));
+                    if (grand != null) parent.setParentId(grand.getId());
+                    store.add(parent);
+                }
+                var child = store.findByPath(hop.childPath);
+                if (child != null) child.setParentId(parent.getId());
+            }
+            store.save(context);
+        } catch (Exception e) {
+            Log.w(TAG, "parent registration failed", e);
+        }
+        if (onUpdate != null)
+            new Handler(Looper.getMainLooper()).post(onUpdate);
+    }
+
+    @NonNull
+    private static String grandparentOf(@NonNull String path) {
+        try {
+            var info = ImageUtils.getImageInfo(path);
+            var backing = info.optString("full-backing-filename",
+                info.optString("backing-filename", ""));
+            if (!backing.isEmpty() && !backing.startsWith("/"))
+                backing = pathJoin(dirname(path), backing);
+            return backing;
+        } catch (Exception e) {
+            return "";
+        }
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/disk/action/DiskActionDialog.java b/app/src/main/java/cn/classfun/droidvm/ui/disk/action/DiskActionDialog.java
index d0c37defa..400b772e3 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/disk/action/DiskActionDialog.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/disk/action/DiskActionDialog.java
@@ -3,6 +3,8 @@
 // Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.ui.disk.action;
 
+import static cn.classfun.droidvm.lib.utils.StringUtils.bulletList;
+
 import static android.widget.Toast.LENGTH_SHORT;
 import static cn.classfun.droidvm.lib.utils.AssetUtils.getPrebuiltBinaryPath;
 import static cn.classfun.droidvm.lib.utils.RunUtils.runList;
@@ -30,6 +32,7 @@
 
 import androidx.activity.result.ActivityResultLauncher;
 import androidx.annotation.IdRes;
+import androidx.annotation.MenuRes;
 import androidx.annotation.NonNull;
 import androidx.annotation.Nullable;
 
@@ -37,18 +40,33 @@
 
 import org.json.JSONObject;
 
+import java.io.File;
+import java.util.ArrayList;
+import java.util.List;
+import java.util.Set;
+import java.util.UUID;
 import java.util.function.Consumer;
 
 import cn.classfun.droidvm.R;
 import cn.classfun.droidvm.lib.store.disk.DiskConfig;
 import cn.classfun.droidvm.lib.store.disk.DiskStore;
+import cn.classfun.droidvm.lib.store.vm.VMStore;
+import cn.classfun.droidvm.ui.disk.tree.AttachmentCursor;
+import cn.classfun.droidvm.ui.disk.tree.AttachmentCursors;
+import cn.classfun.droidvm.ui.disk.tree.AttachmentCursors.LiveRows;
+import cn.classfun.droidvm.ui.disk.tree.CursorPlan;
+import cn.classfun.droidvm.ui.disk.tree.CursorPlanText;
+import cn.classfun.droidvm.ui.disk.tree.TreeShape;
+import cn.classfun.droidvm.ui.vm.VmRunningQuery;
 import cn.classfun.droidvm.lib.ui.MenuDialogBuilder;
 import cn.classfun.droidvm.lib.utils.ImageUtils;
 import cn.classfun.droidvm.ui.agent.password.ChangePasswordActivity;
+import cn.classfun.droidvm.ui.disk.create.DiskCompress;
 import cn.classfun.droidvm.ui.disk.create.DiskCreateActivity;
 import cn.classfun.droidvm.ui.disk.download.ImportURLActivity;
 import cn.classfun.droidvm.ui.disk.images.ImportImagesActivity;
 import cn.classfun.droidvm.ui.disk.lxc.ImportLxcImagesActivity;
+import cn.classfun.droidvm.ui.disk.operation.OptimizeCompression;
 
 public final class DiskActionDialog {
     private final static String TAG = "DiskActionDialog";
@@ -78,39 +96,414 @@ public DiskActionDialog(
         this.activityLauncher = activityLauncher;
     }
 
+    /** Source menu for the disk list and the disk-info action grid derived from it. */
+    @MenuRes
+    public static int getMenuResId(@NonNull DiskConfig config) {
+        if (!DiskConfig.supportsExtraOperations(config.getFormat()))
+            return R.menu.menu_disk_actions_simple;
+        if (config.getParentId() != null)
+            return R.menu.menu_disk_actions_overlay;
+        return R.menu.menu_disk_actions;
+    }
+
+    /** Actions that rewrite bytes in the selected image and are unsafe while it has overlays. */
+    public static boolean modifiesDiskContent(@IdRes int id) {
+        return id == R.id.menu_disk_resize
+            || id == R.id.menu_disk_convert
+            || id == R.id.menu_disk_optimize
+            || id == R.id.menu_disk_change_password;
+    }
+
     public boolean diskMenuOnClick(@NonNull DiskConfig config, @IdRes int id) {
+        if (!isDiskAction(id)) return false;
+        Runnable action = () -> performDiskAction(config, id);
+        if (modifiesDiskContent(id))
+            guardUnlocked(config, action);
+        else
+            action.run();
+        return true;
+    }
+
+    private static boolean isDiskAction(@IdRes int id) {
+        return modifiesDiskContent(id)
+            || id == R.id.menu_disk_delete
+            || id == R.id.menu_disk_create_increment
+            || id == R.id.menu_disk_merge
+            || id == R.id.menu_disk_flatten
+            || id == R.id.menu_disk_reset
+            || id == R.id.menu_disk_show_info
+            || id == R.id.menu_disk_clone;
+    }
+
+    private void performDiskAction(@NonNull DiskConfig config, @IdRes int id) {
         if (id == R.id.menu_disk_resize) {
             new DiskResizeDialog(context, config);
-            return true;
         } else if (id == R.id.menu_disk_convert) {
-            var convert = new DiskSetFormatDialog(context, config);
-            convert.show();
+            new DiskSetFormatDialog(context, config).show();
         } else if (id == R.id.menu_disk_optimize) {
             tryOptimize(config);
-            return true;
         } else if (id == R.id.menu_disk_delete) {
-            confirmDelete(config);
-            return true;
+            confirmDelete(config, null, null);
         } else if (id == R.id.menu_disk_create_increment) {
-            var intent = new Intent(context, DiskCreateActivity.class);
-            intent.putExtra(DiskCreateActivity.EXTRA_BACKING_ID, config.getId().toString());
-            launchActivity(intent);
-            return true;
+            // Snapshot-feel path: one name field, instant create. Advanced (size, compression,
+            // encryption) falls through to the full create screen in backing mode.
+            new DiskOverlayCreateDialog(context, config, onUpdate, () -> {
+                var intent = new Intent(context, DiskCreateActivity.class);
+                intent.putExtra(DiskCreateActivity.EXTRA_BACKING_ID, config.getId().toString());
+                launchActivity(intent);
+            }).show();
+        } else if (id == R.id.menu_disk_merge) {
+            tryMerge(config, null, null);
+        } else if (id == R.id.menu_disk_flatten) {
+            tryFlatten(config, null);
+        } else if (id == R.id.menu_disk_reset) {
+            tryReset(config, null, null);
         } else if (id == R.id.menu_disk_show_info) {
             showMoreInfo(config);
-            return true;
         } else if (id == R.id.menu_disk_clone) {
             new DiskCloneDialog(context, config).show();
-            return true;
         } else if (id == R.id.menu_disk_change_password) {
             var intent = ChangePasswordActivity.createIntent(context, config.getId());
             launchActivity(intent);
-            return true;
         }
-        return false;
+    }
+
+    /**
+     * One family, loaded fresh with everything a tree operation needs to decide and to explain
+     * itself: the registry, the VM store, the parent links as a {@link TreeShape}, and every
+     * attachment cursor on the family with its VM's run state. Blocking; build off the main
+     * thread.
+     */
+    private final class Family {
+        final DiskStore disks = new DiskStore();
+        final VMStore vms = new VMStore();
+        final DiskConfig self;
+        final TreeShape shape;
+        final Set<UUID> ids;
+        final List<AttachmentCursor> cursors;
+
+        Family(@NonNull DiskConfig config, @Nullable LiveRows live) {
+            if (!disks.load(context))
+                throw new IllegalStateException(
+                    context.getString(R.string.disk_dependency_update_failed));
+            var found = disks.findById(config.getId());
+            if (found == null)
+                throw new IllegalStateException(
+                    context.getString(R.string.disk_tree_not_registered));
+            self = found;
+            vms.load(vms, context); // a missing store just means no VMs yet
+            shape = TreeShape.of(disks);
+            ids = shape.familyOf(self.getId());
+            var inUse = VmRunningQuery.inUseAmong(
+                AttachmentCursors.allVmNames(vms, live == null ? null : live.vmName));
+            cursors = AttachmentCursors.collect(disks, vms, ids, live, inUse);
+        }
+
+        /** Names of VMs that are not stopped and attach anything in this family. */
+        @NonNull
+        List<String> inUseVmNames() {
+            return AttachmentCursors.pinnedVmNames(cursors);
+        }
+    }
+
+    /**
+     * Merge the overlay's changes down into its base ("delete the snapshot, keep the current
+     * state"). All conditions are checked and every consequence is stated in ONE confirmation
+     * before anything runs; the data merge and its registry/VM follow-up (children re-based
+     * onto the base, attachments re-pointed, overlay deleted last) then run unattended in
+     * {@code DiskOperationActivity}. Requires the overlay to be its base's only child - commit
+     * rewrites the base, which would corrupt sibling overlays - and the whole family's VMs off.
+     *
+     * @param live        the disk editor's unsaved rows when opened from one; their cursors move
+     *                    silently, and the editor's own saved slots are rewritten without being
+     *                    announced
+     * @param onConfirmed runs (main thread) only once the user confirms, never on cancel
+     */
+    public void tryMerge(
+        @NonNull DiskConfig config, @Nullable LiveRows live, @Nullable Runnable onConfirmed) {
+        runOnPool(() -> {
+            try {
+                var fam = new Family(config, live);
+                var self = fam.self;
+                var parentId = fam.shape.parentOf(self.getId());
+                var parent = parentId == null ? null : fam.disks.findById(parentId);
+                if (parent == null) {
+                    fail(context.getString(R.string.disk_merge_not_overlay));
+                    return;
+                }
+                if (fam.disks.childrenOf(parent.getId()).size() != 1) {
+                    fail(context.getString(R.string.disk_merge_siblings, parent.getName()));
+                    return;
+                }
+                var inUse = fam.inUseVmNames();
+                if (!inUse.isEmpty()) {
+                    fail(context.getString(R.string.disk_family_vm_running, bulletList(inUse)));
+                    return;
+                }
+                var plan = CursorPlan.reconcile(fam.cursors, List.of(),
+                    fam.shape, fam.shape.withMerged(self.getId()));
+                int childCount = fam.disks.childrenOf(self.getId()).size();
+                var message = new StringBuilder(context.getString(
+                    R.string.disk_merge_confirm, self.getName(), parent.getName()));
+                if (childCount > 0)
+                    message.append(context.getString(
+                        R.string.disk_merge_confirm_children, childCount, parent.getName()));
+                // Attachments on the base keep their path but get the overlay's content.
+                var rewritten = new ArrayList<String>();
+                for (var c : fam.cursors)
+                    if (c.isAnnounced() && parent.getId().equals(c.nodeId))
+                        rewritten.add(CursorPlanText.rewrittenLine(context, c, self.getName()));
+                message.append(CursorPlanText.describe(
+                    context, plan.announcedChanges(), rewritten));
+                mainLooper.post(() -> new MaterialAlertDialogBuilder(context)
+                    .setTitle(R.string.disk_merge)
+                    .setMessage(message)
+                    .setPositiveButton(android.R.string.ok, (d, w) -> {
+                        try {
+                            var obj = new JSONObject();
+                            obj.put("action", "commit");
+                            context.startActivity(createIntent(context, config.getId(), obj));
+                            if (onConfirmed != null) onConfirmed.run();
+                        } catch (Exception e) {
+                            Log.e(TAG, "Failed to start commit", e);
+                        }
+                    })
+                    .setNegativeButton(android.R.string.cancel, null)
+                    .show());
+            } catch (Exception e) {
+                Log.w(TAG, "merge pre-checks failed", e);
+                fail(String.valueOf(e.getMessage()));
+            }
+        });
+    }
+
+    /**
+     * Make the overlay standalone by copying its complete backing-chain view to a temporary image
+     * and replacing the overlay only after that copy succeeds ("take the branch with you").
+     * Sibling overlays never matter; the family's VMs must be off during the replacement. No
+     * attachment moves: the path and the children's backing headers stay valid.
+     *
+     * @param onConfirmed runs (main thread) only once the user confirms, never on cancel
+     */
+    public void tryFlatten(@NonNull DiskConfig config, @Nullable Runnable onConfirmed) {
+        runOnPool(() -> {
+            try {
+                var fam = new Family(config, null);
+                var self = fam.self;
+                var parentId = fam.shape.parentOf(self.getId());
+                var parent = parentId == null ? null : fam.disks.findById(parentId);
+                if (parent == null) {
+                    fail(context.getString(R.string.disk_merge_not_overlay));
+                    return;
+                }
+                var inUse = fam.inUseVmNames();
+                if (!inUse.isEmpty()) {
+                    fail(context.getString(R.string.disk_family_vm_running, bulletList(inUse)));
+                    return;
+                }
+                var message = context.getString(
+                    R.string.disk_flatten_confirm, self.getName(), parent.getName());
+                mainLooper.post(() -> new MaterialAlertDialogBuilder(context)
+                    .setTitle(R.string.disk_flatten)
+                    .setMessage(message)
+                    .setPositiveButton(android.R.string.ok, (d, w) -> {
+                        try {
+                            var obj = new JSONObject();
+                            obj.put("action", "flatten");
+                            context.startActivity(createIntent(context, config.getId(), obj));
+                            if (onConfirmed != null) onConfirmed.run();
+                        } catch (Exception e) {
+                            Log.e(TAG, "Failed to start flatten", e);
+                        }
+                    })
+                    .setNegativeButton(android.R.string.cancel, null)
+                    .show());
+            } catch (Exception e) {
+                Log.w(TAG, "flatten pre-checks failed", e);
+                fail(String.valueOf(e.getMessage()));
+            }
+        });
+    }
+
+    /**
+     * Throw away everything written into a leaf overlay and start it over as a fresh, empty
+     * overlay of the same base ("roll back to the snapshot"). qemu-img has no command for that,
+     * so the overlay is recreated: a new header-only image is written beside it, carrying the
+     * same backing link, virtual size, cluster size and compression type, and then renamed over
+     * the original - an atomic swap, so a failure leaves the old file untouched. The path never
+     * changes, so no VM slot moves and nothing is announced beyond "its content resets".
+     *
+     * <p>Only for a writable leaf: an overlay with overlays of its own is their base, and an
+     * encrypted one cannot be recreated without its key. The VMs attaching it must be off.
+     *
+     * @param onConfirmed runs (main thread) after the swap succeeded, never on cancel or failure
+     */
+    public void tryReset(
+        @NonNull DiskConfig config, @Nullable LiveRows live, @Nullable Runnable onConfirmed) {
+        runOnPool(() -> {
+            try {
+                var fam = new Family(config, live);
+                var self = fam.self;
+                var parentId = fam.shape.parentOf(self.getId());
+                var parent = parentId == null ? null : fam.disks.findById(parentId);
+                if (parent == null) {
+                    fail(context.getString(R.string.disk_merge_not_overlay));
+                    return;
+                }
+                if (fam.shape.hasChildren(self.getId())) {
+                    fail(context.getString(R.string.disk_reset_has_children, self.getName()));
+                    return;
+                }
+                var pinned = new ArrayList<AttachmentCursor>();
+                var rewritten = new ArrayList<String>();
+                for (var c : fam.cursors) {
+                    if (!self.getId().equals(c.nodeId)) continue;
+                    if (c.pinned) pinned.add(c);
+                    if (c.isAnnounced())
+                        rewritten.add(CursorPlanText.rewrittenLine(context, c, parent.getName()));
+                }
+                if (!pinned.isEmpty()) {
+                    fail(CursorPlanText.pinnedMessage(context, pinned));
+                    return;
+                }
+                var info = ImageUtils.getImageInfo(self.getFullPath());
+                if (info.optBoolean("encrypted", false)) {
+                    fail(context.getString(R.string.disk_reset_encrypted, self.getName()));
+                    return;
+                }
+                var message = context.getString(
+                    R.string.disk_reset_confirm, self.getName(), parent.getName())
+                    + CursorPlanText.describe(context, List.of(), rewritten);
+                mainLooper.post(() -> new MaterialAlertDialogBuilder(context)
+                    .setTitle(R.string.disk_reset)
+                    .setMessage(message)
+                    .setPositiveButton(android.R.string.ok, (d, w) ->
+                        runOnPool(() -> resetOverlay(self, parent, info, onConfirmed)))
+                    .setNegativeButton(android.R.string.cancel, null)
+                    .show());
+            } catch (Exception e) {
+                Log.w(TAG, "reset pre-checks failed", e);
+                fail(String.valueOf(e.getMessage()));
+            }
+        });
+    }
+
+    /** Recreate {@code self} empty on {@code parent} beside itself, then swap it into place. */
+    private void resetOverlay(
+        @NonNull DiskConfig self,
+        @NonNull DiskConfig parent,
+        @NonNull JSONObject info,
+        @Nullable Runnable onConfirmed
+    ) {
+        var path = self.getFullPath();
+        var tmp = fmt("%s.reset.tmp", path);
+        try {
+            var parentPath = parent.getFullPath();
+            String backingFormat;
+            try {
+                backingFormat = ImageUtils.getImageInfo(parentPath).optString("format", "qcow2");
+            } catch (Exception e) {
+                backingFormat = "qcow2";
+            }
+            var args = new ArrayList<String>(List.of(
+                getPrebuiltBinaryPath("qemu-img"), "create",
+                "--format", "qcow2",
+                "--backing", parentPath,
+                "--backing-format", backingFormat));
+            // Keep the image's own layout choices so the reset overlay behaves like the old one.
+            var opts = new ArrayList<String>();
+            long cluster = info.optLong("cluster-size", 0);
+            if (cluster > 0) opts.add(fmt("cluster_size=%d", cluster));
+            var specific = info.optJSONObject("format-specific");
+            var data = specific == null ? null : specific.optJSONObject("data");
+            var compression = data == null ? "" : data.optString("compression-type", "");
+            if (!compression.isEmpty()) opts.add(fmt("compression_type=%s", compression));
+            if (!opts.isEmpty()) {
+                args.add("-o");
+                args.add(String.join(",", opts));
+            }
+            args.add(tmp);
+            long size = info.optLong("virtual-size", 0);
+            if (size > 0) args.add(String.valueOf(size));
+            var result = runList(args.toArray(new String[0]));
+            if (!result.isSuccess()) {
+                result.printLog(TAG);
+                runList("rm", "-f", tmp);
+                fail(context.getString(R.string.disk_reset_failed));
+                return;
+            }
+            if (!new File(tmp).renameTo(new File(path))) {
+                var moved = runList("mv", "-f", tmp, path);
+                if (!moved.isSuccess()) {
+                    moved.printLog(TAG);
+                    runList("rm", "-f", tmp);
+                    fail(context.getString(R.string.disk_reset_failed));
+                    return;
+                }
+            }
+            mainLooper.post(() -> {
+                Toast.makeText(context,
+                    context.getString(R.string.disk_reset_done, self.getName()),
+                    LENGTH_SHORT).show();
+                if (onUpdate != null) onUpdate.run();
+                if (onConfirmed != null) onConfirmed.run();
+            });
+        } catch (Exception e) {
+            Log.e(TAG, "overlay reset failed", e);
+            runList("rm", "-f", tmp);
+            fail(context.getString(R.string.disk_reset_failed));
+        }
+    }
+
+    private void fail(@Nullable String message) {
+        mainLooper.post(() -> new MaterialAlertDialogBuilder(context)
+            .setMessage(message == null ? "?" : message)
+            .setPositiveButton(android.R.string.ok, null)
+            .show());
+    }
+
+    /**
+     * Rewriting a disk that other images overlay would shift the ground under those overlays.
+     * Tree-aware operations (create, merge, flatten and delete) deliberately remain available;
+     * only byte-mutating actions pass through this guard. The registry read happens off the main
+     * thread and fails closed.
+     */
+    private void guardUnlocked(@NonNull DiskConfig config, @NonNull Runnable action) {
+        runOnPool(() -> {
+            int children = -1;
+            try {
+                var store = new DiskStore();
+                if (store.load(context))
+                    children = store.childrenOf(config.getId()).size();
+            } catch (Exception e) {
+                Log.w(TAG, "Failed to check disk children", e);
+            }
+            final int n = children;
+            mainLooper.post(() -> {
+                if (n == 0) {
+                    action.run();
+                    return;
+                }
+                if (n < 0) {
+                    Toast.makeText(context, R.string.disk_info_load_failed, LENGTH_SHORT).show();
+                    return;
+                }
+                new MaterialAlertDialogBuilder(context)
+                    .setTitle(R.string.disk_locked_title)
+                    .setMessage(context.getString(
+                        R.string.disk_locked_message, config.getName(), n))
+                    .setPositiveButton(android.R.string.ok, null)
+                    .show();
+            });
+        });
     }
 
     public void tryOptimize(@NonNull DiskConfig config) {
+        // Target compression comes from the preferred-compression setting (or its ask prompt).
+        OptimizeCompression.resolve(context, () -> {}, compress -> tryOptimize(config, compress));
+    }
+
+    private void tryOptimize(@NonNull DiskConfig config, @NonNull DiskCompress compress) {
         Consumer<JSONObject> invoke = obj -> {
             try {
                 var intent = createIntent(context, config.getId(), obj);
@@ -124,7 +517,7 @@ public void tryOptimize(@NonNull DiskConfig config) {
             try {
                 var info = ImageUtils.getImageInfo(config.getFullPath());
                 obj.put("action", "convert");
-                obj.put("keep_compress", true); // preserve compression when optimizing
+                obj.put("compress", compress.value());
                 obj.put("format", info.getString("format"));
                 if (info.has("backing-filename"))
                     obj.put("backing_path", info.getString("backing-filename"));
@@ -258,6 +651,9 @@ public DiskConfig onFileImported(Uri uri) {
             });
             if (this.onUpdate != null)
                 this.onUpdate.run();
+            // Resolve the imported image's backing chain: link/offer-to-import parents,
+            // absolutize relative backing paths. Prompts (if any) come as a single dialog.
+            BackingChainLinker.link(context, config.getId(), this.onUpdate);
         });
         return config;
     }
@@ -269,28 +665,103 @@ private void launchActivity(@NonNull Intent intent) {
             context.startActivity(intent);
     }
 
-    public void confirmDelete(@NonNull DiskConfig config) {
+    /**
+     * Delete a disk and everything overlaying it. An overlay holds only differences against its
+     * base, so a base cannot go without taking its descendants with it - deleting is therefore
+     * always a whole-subtree operation (unlike merge, which preserves the data by writing it
+     * down into the base first and can re-link the survivors). The confirmation lists every disk
+     * that will go, says so as "delete the entire tree" when the target is a family root, and
+     * states where other VMs' attachments move (to the nearest surviving base, read-only when
+     * that base still has overlays or another VM holds it; removed when nothing is left).
+     *
+     * @param live        see {@link #tryMerge}
+     * @param onConfirmed runs (main thread) after the registry is written, never on cancel
+     */
+    public void confirmDelete(
+        @NonNull DiskConfig config, @Nullable LiveRows live, @Nullable Runnable onConfirmed) {
+        runOnPool(() -> {
+            try {
+                var fam = new Family(config, live);
+                var self = fam.self;
+                // BFS order, self first; deletion goes leaves-first, i.e. reversed.
+                var subtree = new ArrayList<>(fam.shape.subtreeOf(self.getId()));
+                var after = fam.shape.without(fam.shape.subtreeOf(self.getId()));
+                var plan = CursorPlan.reconcile(fam.cursors, List.of(), fam.shape, after);
+                if (plan.isRefused()) {
+                    fail(CursorPlanText.pinnedMessage(context, plan.refused));
+                    return;
+                }
+                boolean isRoot = fam.shape.parentOf(self.getId()) == null;
+                var names = new ArrayList<String>();
+                var paths = new ArrayList<String>();
+                for (var id : subtree) {
+                    names.add(String.valueOf(fam.shape.nameOf(id)));
+                    paths.add(String.valueOf(fam.shape.pathOf(id)));
+                }
+                mainLooper.post(() ->
+                    showDeleteDialog(subtree, names, paths, isRoot, plan, onConfirmed));
+            } catch (Exception e) {
+                Log.w(TAG, "delete pre-checks failed", e);
+                fail(String.valueOf(e.getMessage()));
+            }
+        });
+    }
+
+    private void showDeleteDialog(
+        @NonNull List<UUID> subtree,
+        @NonNull List<String> names,
+        @NonNull List<String> paths,
+        boolean isRoot,
+        @NonNull CursorPlan plan,
+        @Nullable Runnable onConfirmed
+    ) {
         var layout = new LinearLayout(context);
         var checkBox = new CheckBox(context);
         checkBox.setText(R.string.disk_delete_file);
         int pad = (int) (16 * context.getResources().getDisplayMetrics().density);
         layout.setPadding(pad, 0, pad, 0);
         layout.addView(checkBox);
+        var message = new StringBuilder();
+        if (subtree.size() > 1) {
+            message.append(context.getString(
+                isRoot ? R.string.disk_delete_tree_message
+                    : R.string.disk_delete_subtree_message, bulletList(names)));
+        } else {
+            message.append(context.getString(R.string.disk_delete_confirm));
+        }
+        message.append(CursorPlanText.describe(context, plan.announcedChanges()));
         DialogInterface.OnClickListener onclick = (d, w) -> {
             boolean isChecked = checkBox.isChecked();
-            var store = new DiskStore();
             runOnPool(() -> {
-                if (isChecked) runList("rm", "-f", config.getFullPath());
-                store.load(context);
-                store.removeById(config.getId());
-                store.save(context);
+                var store = new DiskStore();
+                if (!store.load(context) || !DiskDependencyUpdater.applyPlan(context, plan)) {
+                    fail(context.getString(R.string.disk_dependency_update_failed));
+                    return;
+                }
+                // Registry first, leaves first. Files stay present until both VM references and
+                // the registry have been saved, so an I/O failure cannot create dangling slots.
+                for (int i = subtree.size() - 1; i >= 0; i--)
+                    store.removeById(subtree.get(i));
+                if (!store.save(context)) {
+                    fail(context.getString(R.string.disk_dependency_update_failed));
+                    return;
+                }
+                if (isChecked) {
+                    for (int i = paths.size() - 1; i >= 0; i--)
+                        runList("rm", "-f", paths.get(i));
+                }
                 if (this.onUpdate != null)
-                    this.onUpdate.run();
+                    mainLooper.post(this.onUpdate);
+                // After the registry is written, so a listener re-reading it (e.g. to redo the
+                // lock state of a disk that just lost its last overlay) sees the new truth.
+                if (onConfirmed != null) mainLooper.post(onConfirmed);
             });
         };
         new MaterialAlertDialogBuilder(context)
-            .setTitle(config.getName())
-            .setMessage(R.string.disk_delete_confirm)
+            .setTitle(subtree.size() > 1 && isRoot
+                ? context.getString(R.string.disk_delete_tree_title)
+                : names.get(0))
+            .setMessage(message)
             .setView(layout)
             .setPositiveButton(R.string.vm_delete, onclick)
             .setNegativeButton(android.R.string.cancel, null)
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/disk/action/DiskDependencyUpdater.java b/app/src/main/java/cn/classfun/droidvm/ui/disk/action/DiskDependencyUpdater.java
new file mode 100644
index 000000000..075952a46
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/ui/disk/action/DiskDependencyUpdater.java
@@ -0,0 +1,94 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
+package cn.classfun.droidvm.ui.disk.action;
+
+import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
+
+import android.content.Context;
+import android.util.Log;
+
+import androidx.annotation.NonNull;
+
+import java.util.ArrayList;
+import java.util.HashMap;
+import java.util.List;
+import java.util.UUID;
+
+import cn.classfun.droidvm.lib.store.base.DataItem;
+import cn.classfun.droidvm.lib.store.vm.VMStore;
+import cn.classfun.droidvm.ui.disk.tree.CursorPlan;
+
+/**
+ * Writes the persisted half of a {@link CursorPlan} - the slots of other VMs, and the saved
+ * slots of the VM being edited - into the VM store. The editor applies its own in-memory rows
+ * separately, when its branch panel closes.
+ */
+public final class DiskDependencyUpdater {
+    private static final String TAG = "DiskDependencyUpdater";
+
+    private DiskDependencyUpdater() {
+    }
+
+    /**
+     * Returns only after the updated VMStore is durably saved; failures are fail-closed so the
+     * caller never deletes a file a slot still points at.
+     */
+    public static boolean applyPlan(@NonNull Context context, @NonNull CursorPlan plan) {
+        var changes = plan.persistedChanges();
+        if (changes.isEmpty()) return true;
+        var vmStore = new VMStore();
+        if (!vmStore.load(vmStore, context)) {
+            Log.e(TAG, "Failed to load VM store before updating disk dependencies");
+            return false;
+        }
+        var byVm = new HashMap<UUID, List<CursorPlan.Change>>();
+        for (var c : changes) {
+            if (c.from.vmId == null) continue;
+            byVm.computeIfAbsent(c.from.vmId, k -> new ArrayList<>()).add(c);
+        }
+        boolean changed = false;
+        for (var e : byVm.entrySet()) {
+            var vm = vmStore.findById(e.getKey());
+            if (vm == null) continue;
+            var disks = vm.item.opt("disks", null);
+            if (disks == null || !disks.is(DataItem.Type.ARRAY)) continue;
+            changed |= applyToDisks(disks, e.getValue());
+        }
+        if (!changed) return true;
+        if (vmStore.save(context)) return true;
+        Log.e(TAG, "Failed to save redirected VM disk dependencies");
+        return false;
+    }
+
+    /**
+     * Pure slot rewrite for one VM, kept separate for deterministic unit coverage. Highest slot
+     * first so a removal never shifts a slot still to be visited; a slot whose path no longer
+     * matches what the plan was computed from is left alone (something else changed it since).
+     * Read-only is only ever added, never taken away.
+     */
+    static boolean applyToDisks(@NonNull DataItem disks, @NonNull List<CursorPlan.Change> changes) {
+        var ordered = new ArrayList<>(changes);
+        ordered.sort((a, b) -> Integer.compare(b.from.slot, a.from.slot));
+        boolean changed = false;
+        for (var change : ordered) {
+            int slot = change.from.slot;
+            if (slot < 0 || slot >= disks.size()) continue;
+            var disk = disks.get(slot);
+            var path = disk.optString("path", "");
+            if (change.from.path == null || !change.from.path.equals(path)) {
+                Log.w(TAG, fmt("Slot %d of %s moved since planning (%s); skipped",
+                    slot, change.from.vmName, path));
+                continue;
+            }
+            if (change.cleared()) {
+                disks.remove(slot);
+            } else {
+                disk.set("path", change.to.path);
+                if (change.to.readonly) disk.set("readonly", true);
+            }
+            changed = true;
+        }
+        return changed;
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/disk/action/DiskOverlayCreateDialog.java b/app/src/main/java/cn/classfun/droidvm/ui/disk/action/DiskOverlayCreateDialog.java
new file mode 100644
index 000000000..129ea6e0f
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/ui/disk/action/DiskOverlayCreateDialog.java
@@ -0,0 +1,312 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
+package cn.classfun.droidvm.ui.disk.action;
+
+import static android.widget.Toast.LENGTH_SHORT;
+import static cn.classfun.droidvm.lib.utils.AssetUtils.getPrebuiltBinaryPath;
+import static cn.classfun.droidvm.lib.utils.RunUtils.runList;
+import static cn.classfun.droidvm.lib.utils.StringUtils.bulletList;
+import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
+import static cn.classfun.droidvm.lib.utils.StringUtils.pathJoin;
+import static cn.classfun.droidvm.lib.utils.ThreadUtils.runOnPool;
+
+import android.content.Context;
+import android.os.Handler;
+import android.os.Looper;
+import android.util.Log;
+import android.view.LayoutInflater;
+import android.widget.Toast;
+
+import androidx.annotation.NonNull;
+import androidx.annotation.Nullable;
+
+import com.google.android.material.dialog.MaterialAlertDialogBuilder;
+import com.google.android.material.textfield.TextInputEditText;
+import com.google.android.material.textfield.TextInputLayout;
+
+import java.io.File;
+import java.text.SimpleDateFormat;
+import java.util.ArrayList;
+import java.util.Date;
+import java.util.HashSet;
+import java.util.List;
+import java.util.Locale;
+import java.util.UUID;
+import java.util.regex.Pattern;
+
+import cn.classfun.droidvm.R;
+import cn.classfun.droidvm.lib.store.disk.DiskConfig;
+import cn.classfun.droidvm.lib.store.disk.DiskStore;
+import cn.classfun.droidvm.lib.store.vm.VMStore;
+import cn.classfun.droidvm.lib.utils.ImageUtils;
+import cn.classfun.droidvm.ui.disk.create.DiskFormat;
+import cn.classfun.droidvm.ui.disk.tree.AttachmentCursors;
+import cn.classfun.droidvm.ui.disk.tree.AttachmentCursors.LiveRows;
+import cn.classfun.droidvm.ui.disk.tree.CursorPlan;
+import cn.classfun.droidvm.ui.disk.tree.DiskTree;
+import cn.classfun.droidvm.ui.disk.tree.TreeShape;
+import cn.classfun.droidvm.ui.vm.VmRunningQuery;
+
+/**
+ * Snapshot-feel overlay creation: one name field, instant {@code qemu-img create} (an overlay is
+ * just a header), the base becomes a locked parent. Every decision is collected BEFORE anything
+ * executes: the {@link CursorPlan} says which VM slots would follow the new overlay down (the
+ * base's writable attachments - "took a snapshot, keep going") and the user picks, per the
+ * whole batch, whether they do or flip to read-only instead; a base held writable by a VM that
+ * isn't stopped blocks creation outright, since its writes would shift the base underneath the
+ * overlay. After confirmation the create, registry link and VM updates run unattended.
+ */
+public final class DiskOverlayCreateDialog {
+    private static final String TAG = "DiskOverlayCreate";
+    /**
+     * A name this dialog generated before, at the very end: {@code -ov-yyMMdd-HHmmss}, the older
+     * {@code -ov-yyyyMMdd-HHmm}, either with an optional {@code -N} collision bump.
+     */
+    private static final Pattern OVERLAY_SUFFIX =
+        Pattern.compile("-ov-(\\d{8}-\\d{4}|\\d{6}-\\d{6})(-\\d+)?$");
+    private final Handler mainLooper = new Handler(Looper.getMainLooper());
+    private final Context context;
+    private final DiskConfig parent;
+    @Nullable
+    private final Runnable onUpdate;
+    @Nullable
+    private final Runnable onAdvanced;
+    @Nullable
+    private LiveRows live;
+
+    public DiskOverlayCreateDialog(
+        @NonNull Context context,
+        @NonNull DiskConfig parent,
+        @Nullable Runnable onUpdate,
+        @Nullable Runnable onAdvanced
+    ) {
+        this.context = context;
+        this.parent = parent;
+        this.onUpdate = onUpdate;
+        this.onAdvanced = onAdvanced;
+    }
+
+    /**
+     * The disk editor's unsaved rows when opened from one. Their cursors are not written here
+     * (the editor applies them when its panel closes) and the editor's own saved slots are
+     * rewritten without being announced - the rows on screen stand in for them.
+     */
+    @NonNull
+    public DiskOverlayCreateDialog setLiveRows(@Nullable LiveRows live) {
+        this.live = live;
+        return this;
+    }
+
+    public void show() {
+        var view = LayoutInflater.from(context)
+            .inflate(R.layout.dialog_overlay_create, null);
+        TextInputLayout layout = view.findViewById(R.id.til_overlay_name);
+        TextInputEditText etName = view.findViewById(R.id.et_overlay_name);
+        etName.setText(defaultName());
+        var builder = new MaterialAlertDialogBuilder(context)
+            .setTitle(R.string.disk_create_increment)
+            .setMessage(context.getString(
+                R.string.disk_overlay_create_message, parent.getName()))
+            .setView(view)
+            .setPositiveButton(android.R.string.ok, null)
+            .setNegativeButton(android.R.string.cancel, null);
+        if (onAdvanced != null)
+            builder.setNeutralButton(R.string.disk_overlay_advanced,
+                (d, w) -> onAdvanced.run());
+        var dialog = builder.create();
+        dialog.show();
+        dialog.getButton(android.content.DialogInterface.BUTTON_POSITIVE)
+            .setOnClickListener(v -> {
+                var text = etName.getText();
+                var name = text != null ? text.toString().trim() : "";
+                if (name.isEmpty()) {
+                    layout.setError(context.getString(R.string.disk_create_error_name_invalid));
+                    return;
+                }
+                if (!name.toLowerCase(Locale.ROOT).endsWith(".qcow2")) name += ".qcow2";
+                layout.setError(null);
+                dialog.dismiss();
+                gather(name);
+            });
+    }
+
+    /**
+     * {@code <base>-ov-<yyMMdd-HHmmss>}, to the second so two overlays taken in quick
+     * succession don't collide, and bumped with {@code -2, -3, ...} if a file of that name is
+     * already there. Stacking overlays replaces a trailing stamp instead of growing another one -
+     * a chain would otherwise read {@code disk-ov-260101-000000-ov-260102-000000-...}.
+     */
+    @NonNull
+    private String defaultName() {
+        var base = parent.getName();
+        int dot = base.lastIndexOf('.');
+        if (dot > 0) base = base.substring(0, dot);
+        base = OVERLAY_SUFFIX.matcher(base).replaceFirst("");
+        var stamp = new SimpleDateFormat("yyMMdd-HHmmss", Locale.ROOT).format(new Date());
+        var folder = parent.item.optString("folder", "");
+        var candidate = fmt("%s-ov-%s", base, stamp);
+        var name = candidate;
+        for (int n = 2; new File(pathJoin(folder, fmt("%s.qcow2", name))).exists(); n++)
+            name = fmt("%s-%d", candidate, n);
+        return name;
+    }
+
+    // Phase 1, off the main thread: validate, plan where the base's attachments go.
+    private void gather(@NonNull String name) {
+        var folder = parent.item.optString("folder", "");
+        var overlayPath = pathJoin(folder, name);
+        runOnPool(() -> {
+            try {
+                var store = new DiskStore();
+                store.load(context);
+                if (store.findByName(name) != null || new File(overlayPath).exists()) {
+                    fail(context.getString(R.string.disk_create_error_exists));
+                    return;
+                }
+                if (chainDepth(store, parent) + 1 >= DiskTree.MAX_DEPTH) {
+                    fail(context.getString(
+                        R.string.disk_overlay_depth_error, DiskTree.MAX_DEPTH));
+                    return;
+                }
+                var vmStore = new VMStore();
+                vmStore.load(vmStore, context);
+                var shape = TreeShape.of(store);
+                var family = shape.familyOf(parent.getId());
+                var inUse = VmRunningQuery.inUseAmong(
+                    AttachmentCursors.allVmNames(vmStore, live == null ? null : live.vmName));
+                var cursors = AttachmentCursors.collect(store, vmStore, family, live, inUse);
+                // The overlay's id isn't known yet; the plan only needs its path and parent.
+                var after = shape.withChild(UUID.randomUUID(), overlayPath, name, parent.getId());
+                var plan = CursorPlan.reconcile(cursors, List.of(), shape, after);
+                if (plan.isRefused()) {
+                    fail(context.getString(R.string.disk_overlay_vm_running,
+                        bulletList(AttachmentCursors.vmNames(plan.refused))));
+                    return;
+                }
+                var announced = plan.announcedChanges();
+                if (announced.isEmpty()) {
+                    execute(name, overlayPath, plan, true);
+                    return;
+                }
+                mainLooper.post(() -> askVmChoice(name, overlayPath, plan));
+            } catch (Exception e) {
+                Log.w(TAG, "overlay pre-checks failed", e);
+                fail(String.valueOf(e.getMessage()));
+            }
+        });
+    }
+
+    // Phase 2, main thread: the one decision point - other VMs' writable attachments follow the
+    // overlay (default) or stay on the base read-only. Everything after runs unattended.
+    private void askVmChoice(
+        @NonNull String name, @NonNull String overlayPath, @NonNull CursorPlan plan) {
+        var lines = new ArrayList<String>();
+        for (var c : plan.announcedChanges())
+            lines.add(fmt("%s (#%d)", c.from.vmName, c.from.slot + 1));
+        new MaterialAlertDialogBuilder(context)
+            .setTitle(R.string.disk_overlay_vm_choice_title)
+            .setMessage(context.getString(
+                R.string.disk_overlay_vm_choice_message, parent.getName(), bulletList(lines)))
+            .setPositiveButton(R.string.disk_overlay_vm_switch, (d, w) ->
+                runOnPool(() -> execute(name, overlayPath, plan, true)))
+            .setNeutralButton(R.string.disk_overlay_vm_readonly, (d, w) ->
+                runOnPool(() -> execute(name, overlayPath, plan, false)))
+            .setNegativeButton(android.R.string.cancel, null)
+            .show();
+    }
+
+    // Phase 3, off the main thread, no further interaction: create, register, update VMs.
+    private void execute(
+        @NonNull String name,
+        @NonNull String overlayPath,
+        @NonNull CursorPlan plan,
+        boolean switchVmsToOverlay
+    ) {
+        try {
+            var parentPath = parent.getFullPath();
+            var backingFormat = detectFormat(parentPath);
+            var result = runList(
+                getPrebuiltBinaryPath("qemu-img"), "create",
+                "--format", "qcow2",
+                "--backing", parentPath,
+                "--backing-format", backingFormat,
+                overlayPath
+            );
+            if (!result.isSuccess()) {
+                result.printLog(TAG);
+                fail(result.getErrString());
+                return;
+            }
+            var store = new DiskStore();
+            store.load(context);
+            var overlay = new DiskConfig();
+            overlay.setName(name);
+            overlay.item.set("folder", parent.item.optString("folder", ""));
+            overlay.setParentId(parent.getId());
+            store.add(overlay);
+            store.save(context);
+            if (!DiskDependencyUpdater.applyPlan(context, vmPlan(plan, switchVmsToOverlay)))
+                Log.e(TAG, "overlay created but VM attachments could not be updated");
+            mainLooper.post(() -> {
+                Toast.makeText(context,
+                    context.getString(R.string.disk_overlay_created, name),
+                    LENGTH_SHORT).show();
+                if (onUpdate != null) onUpdate.run();
+            });
+        } catch (Exception e) {
+            Log.e(TAG, "overlay creation failed", e);
+            fail(String.valueOf(e.getMessage()));
+        }
+    }
+
+    /**
+     * The plan as the user chose it: with "make read-only", the announced slots stay on the base
+     * read-only instead of following the overlay. The editor's own saved slots (shadows) always
+     * follow - the rows on screen do, and a discarded edit must leave them consistent with what
+     * the user saw.
+     */
+    @NonNull
+    private static CursorPlan vmPlan(@NonNull CursorPlan plan, boolean switchVmsToOverlay) {
+        if (switchVmsToOverlay) return plan;
+        var alt = CursorPlan.reconcile(List.of(), List.of(), TreeShape.empty(), TreeShape.empty());
+        for (var c : plan.changes) {
+            if (c.from.isAnnounced() && c.moved())
+                alt.changes.add(new CursorPlan.Change(
+                    c.from, c.from.at(c.from.nodeId, c.from.path, true)));
+            else
+                alt.changes.add(c);
+        }
+        return alt;
+    }
+
+    private static int chainDepth(@NonNull DiskStore store, @NonNull DiskConfig config) {
+        int depth = 0;
+        var visited = new HashSet<UUID>();
+        var current = config;
+        while (current != null && visited.add(current.getId())) {
+            depth++;
+            current = store.parentOf(current);
+        }
+        return depth;
+    }
+
+    @NonNull
+    private static String detectFormat(@NonNull String path) {
+        try {
+            var info = ImageUtils.getImageInfo(path);
+            var f = info.optString("format", "");
+            if (!f.isEmpty()) return f;
+        } catch (Exception ignored) {
+        }
+        return DiskFormat.fromFilename(path).name().toLowerCase(Locale.ROOT);
+    }
+
+    private void fail(@Nullable String message) {
+        mainLooper.post(() -> new MaterialAlertDialogBuilder(context)
+            .setTitle(R.string.disk_create_increment)
+            .setMessage(message == null ? "?" : message)
+            .setPositiveButton(android.R.string.ok, null)
+            .show());
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/disk/action/DiskResizeDialog.java b/app/src/main/java/cn/classfun/droidvm/ui/disk/action/DiskResizeDialog.java
index d0f14d0a3..1dcf30de9 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/disk/action/DiskResizeDialog.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/disk/action/DiskResizeDialog.java
@@ -8,6 +8,7 @@
 
 import android.content.Context;
 import android.content.DialogInterface;
+import android.content.Intent;
 import android.os.Handler;
 import android.os.Looper;
 import android.util.Log;
@@ -16,14 +17,20 @@
 
 import androidx.annotation.NonNull;
 
+import com.google.android.material.checkbox.MaterialCheckBox;
 import com.google.android.material.dialog.MaterialAlertDialogBuilder;
 
 import org.json.JSONObject;
 
 import cn.classfun.droidvm.R;
+import cn.classfun.droidvm.lib.store.vm.VMBackend;
+import cn.classfun.droidvm.lib.store.vm.VMHypervisor;
 import cn.classfun.droidvm.lib.utils.ImageUtils;
 import cn.classfun.droidvm.lib.store.disk.DiskConfig;
 import cn.classfun.droidvm.lib.size.SizeUnit;
+import cn.classfun.droidvm.ui.agent.AgentOperationActivity;
+import cn.classfun.droidvm.ui.agent.autogrow.AutoGrowAction;
+import cn.classfun.droidvm.ui.agent.base.AgentVM;
 import cn.classfun.droidvm.ui.disk.operation.DiskOperationActivity;
 import cn.classfun.droidvm.ui.widgets.row.TextInputRowWidget;
 
@@ -37,6 +44,7 @@ public final class DiskResizeDialog {
     private final Handler handler;
     private final TextView tvFilename;
     private final TextView tvFolder;
+    private final MaterialCheckBox cbAutoGrow;
 
     public DiskResizeDialog(@NonNull Context context, @NonNull DiskConfig config) {
         this.context = context;
@@ -46,6 +54,7 @@ public DiskResizeDialog(@NonNull Context context, @NonNull DiskConfig config) {
         tvCurrent = view.findViewById(R.id.tv_current_size);
         tvFilename = view.findViewById(R.id.tv_filename);
         tvFolder = view.findViewById(R.id.tv_folder);
+        cbAutoGrow = view.findViewById(R.id.cb_autogrow);
         currentVirtualSize = -1;
         inputSize.setValue(1, SizeUnit.GB);
         tvCurrent.setText(R.string.disk_resize_loading);
@@ -55,10 +64,13 @@ public DiskResizeDialog(@NonNull Context context, @NonNull DiskConfig config) {
         var dialog = new MaterialAlertDialogBuilder(context)
             .setTitle(R.string.disk_resize_title)
             .setView(view)
-            .setPositiveButton(android.R.string.ok, this::dialogOkOnClick)
+            .setPositiveButton(android.R.string.ok, null)
             .setNegativeButton(android.R.string.cancel, null)
             .create();
         dialog.show();
+        // Override the positive listener so validation can keep the resize dialog open.
+        dialog.getButton(DialogInterface.BUTTON_POSITIVE).setOnClickListener(v ->
+            dialogOkOnClick(dialog, DialogInterface.BUTTON_POSITIVE));
         runOnPool(this::asyncOperation);
     }
 
@@ -103,36 +115,64 @@ private void dialogOkOnClick(DialogInterface dialog, int which) {
             }
             long newBytes = inputSize.getValue();
             inputSize.setError(null);
-            boolean isShrink = currentVirtualSize > 0 && newBytes <= currentVirtualSize;
+            cbAutoGrow.setError(null);
+            boolean isShrink = currentVirtualSize > 0 && newBytes < currentVirtualSize;
+            boolean isSameSize = currentVirtualSize > 0 && newBytes == currentVirtualSize;
+            boolean autoGrow = cbAutoGrow.isChecked();
+            if (isShrink && autoGrow) {
+                cbAutoGrow.setError(context.getString(
+                    R.string.disk_resize_error_autogrow_shrink));
+                return;
+            }
+            if (isSameSize) {
+                if (!autoGrow) {
+                    inputSize.setError(context.getString(R.string.disk_resize_error_no_action));
+                    return;
+                }
+                dialog.dismiss();
+                context.startActivity(createAutoGrowIntent());
+                return;
+            }
             if (isShrink) {
                 new MaterialAlertDialogBuilder(context)
                     .setTitle(R.string.disk_resize_shrink_title)
                     .setMessage(R.string.disk_resize_shrink_message)
                     .setPositiveButton(android.R.string.ok, (d, w) -> {
                         dialog.dismiss();
-                        doResize(newBytes, true);
+                        doResize(newBytes, true, false);
                     })
                     .setNegativeButton(android.R.string.cancel, null)
                     .show();
             } else {
                 dialog.dismiss();
-                doResize(newBytes, false);
+                doResize(newBytes, false, autoGrow);
             }
         } catch (Exception e) {
             inputSize.setError(context.getString(R.string.disk_resize_error_invalid));
         }
     }
 
-    private void doResize(long bytes, boolean shrink) {
+    private void doResize(long bytes, boolean shrink, boolean autoGrow) {
         try {
             var obj = new JSONObject();
             obj.put("action", "resize");
             obj.put("size", String.valueOf(bytes));
             if (shrink) obj.put("shrink", true);
             var intent = DiskOperationActivity.createIntent(context, config.getId(), obj);
+            if (autoGrow)
+                intent.putExtra(DiskOperationActivity.EXTRA_SUCCESS_INTENT,
+                    createAutoGrowIntent());
             context.startActivity(intent);
         } catch (Exception e) {
             Log.e(TAG, "Failed to start resize activity", e);
         }
     }
+
+    @NonNull
+    private Intent createAutoGrowIntent() {
+        var agentVM = new AgentVM(VMBackend.QEMU, VMHypervisor.SOFT);
+        new AutoGrowAction(agentVM);
+        agentVM.addDisk(config);
+        return AgentOperationActivity.createIntent(context, agentVM);
+    }
 }
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/disk/create/DiskCompress.java b/app/src/main/java/cn/classfun/droidvm/ui/disk/create/DiskCompress.java
index ce409a809..10564abe4 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/disk/create/DiskCompress.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/disk/create/DiskCompress.java
@@ -3,16 +3,32 @@
 // Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.ui.disk.create;
 
+import androidx.annotation.NonNull;
+import androidx.annotation.Nullable;
 import androidx.annotation.StringRes;
 
+import java.util.Collections;
+import java.util.EnumSet;
+import java.util.Locale;
+import java.util.Set;
+
 import cn.classfun.droidvm.R;
 import cn.classfun.droidvm.lib.store.enums.StringEnum;
+import cn.classfun.droidvm.lib.utils.ImageUtils;
 
 public enum DiskCompress implements StringEnum {
     NONE(R.string.disk_create_compress_disabled),
     DEFLATE(R.string.disk_create_compress_deflate),
     ZSTD(R.string.disk_create_compress_zstd);
 
+    /**
+     * qcow2 compression the crosvm backend can read. Currently only uncompressed images boot;
+     * when crosvm grows zlib (and later zstd) support, extend this set and every consumer -
+     * the post-import optimize skip and the pre-start convert prompt - follows.
+     */
+    public static final Set<DiskCompress> CROSVM_SUPPORTED =
+        Collections.unmodifiableSet(EnumSet.of(NONE));
+
     private final @StringRes int stringId;
 
     DiskCompress(int stringId) {
@@ -24,4 +40,40 @@ public enum DiskCompress implements StringEnum {
     public int getStringId() {
         return stringId;
     }
+
+    public boolean isCrosvmSupported() {
+        return CROSVM_SUPPORTED.contains(this);
+    }
+
+    /** The wire value used in disk-operation tasks and preferences: none / deflate / zstd. */
+    @NonNull
+    public String value() {
+        return name().toLowerCase(Locale.ROOT);
+    }
+
+    @Nullable
+    public static DiskCompress fromValue(@Nullable String value) {
+        if (value == null) return null;
+        for (var c : values()) {
+            if (c.value().equals(value)) return c;
+        }
+        return null;
+    }
+
+    /** Maps qemu's compression naming ({@code none}/{@code zlib}/{@code zstd}). */
+    @NonNull
+    public static DiskCompress fromQemuType(@Nullable String type) {
+        if ("zstd".equals(type)) return ZSTD;
+        if ("zlib".equals(type)) return DEFLATE;
+        return NONE;
+    }
+
+    /**
+     * The image's effective compression, via qemu-img ({@link ImageUtils#detectCompression}):
+     * NONE unless it really stores compressed clusters. Blocking - call off the main thread.
+     */
+    @NonNull
+    public static DiskCompress detect(@NonNull String path) {
+        return fromQemuType(ImageUtils.detectCompression(path));
+    }
 }
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/disk/create/DiskCreateActivity.java b/app/src/main/java/cn/classfun/droidvm/ui/disk/create/DiskCreateActivity.java
index fa3a0b82b..241ffc9c8 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/disk/create/DiskCreateActivity.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/disk/create/DiskCreateActivity.java
@@ -272,9 +272,18 @@ private void doCreate() {
             inputName.setError(R.string.disk_create_error_exists);
             return;
         }
+        // Link the overlay to its registered backing so the tree and lock rules see it. A
+        // manually-typed backing path counts too when it resolves to a registered disk.
+        var manualBacking = backing;
         runOnPool(() -> {
             var store = new DiskStore();
             store.load(this);
+            if (backingId != null) {
+                config.setParentId(backingId);
+            } else if (!manualBacking.isEmpty()) {
+                var registered = store.findByPath(manualBacking);
+                if (registered != null) config.setParentId(registered.getId());
+            }
             store.add(config);
             store.save(this);
         });
@@ -294,6 +303,10 @@ private void doCreate() {
             } else if (!backing.isEmpty() && format == DiskFormat.QCOW2)
                 obj.put("backing_path", backing);
             var intent = createIntent(this, config.getId(), obj);
+            // A create that worked needs no success screen: the new disk showing up (in the
+            // list, or in the VM row that asked for it) is the feedback. Failures still stay.
+            intent.putExtra(cn.classfun.droidvm.ui.disk.operation.DiskOperationActivity
+                .EXTRA_AUTOFINISH, true);
             startActivity(intent);
         } catch (Exception e) {
             Log.e(TAG, "Failed to start create activity", e);
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/disk/download/ImportURLActivity.java b/app/src/main/java/cn/classfun/droidvm/ui/disk/download/ImportURLActivity.java
index b81133c85..4b0097456 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/disk/download/ImportURLActivity.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/disk/download/ImportURLActivity.java
@@ -14,7 +14,7 @@
 import static cn.classfun.droidvm.lib.utils.StringUtils.resolveUriPath;
 import static cn.classfun.droidvm.lib.utils.ThreadUtils.runOnPool;
 import static cn.classfun.droidvm.lib.size.SizeUtils.formatSize;
-import static cn.classfun.droidvm.ui.disk.operation.DiskOperationActivity.startOptimize;
+import static cn.classfun.droidvm.ui.disk.operation.DiskOperationActivity.startOptimizeAfterImport;
 
 import android.content.Intent;
 import android.net.Uri;
@@ -52,6 +52,7 @@
 import cn.classfun.droidvm.lib.ui.NotificationPermission;
 import cn.classfun.droidvm.lib.ui.SimpleTextWatcher;
 import cn.classfun.droidvm.lib.utils.NetUtils.HttpException;
+import cn.classfun.droidvm.ui.disk.action.BackingChainLinker;
 import cn.classfun.droidvm.ui.disk.create.DiskFormat;
 import cn.classfun.droidvm.ui.widgets.tools.DownloadWidget;
 import cn.classfun.droidvm.ui.widgets.tools.KernelAnalysisWidget;
@@ -438,8 +439,15 @@ private void onDownloadSucceeded() {
         var resultData = new Intent();
         resultData.putExtra("result_disk_path", pathJoin(result.folder, result.name));
         setResult(RESULT_OK, resultData);
-        if (result.diskId != null && DiskFormat.fromFilename(result.name) == DiskFormat.QCOW2)
-            startOptimize(this, result.diskId);
+        if (result.diskId != null && DiskFormat.fromFilename(result.name) == DiskFormat.QCOW2) {
+            // Resolve the backing chain first (may prompt once), then rewrite only when the
+            // compression can't boot on crosvm; finish once everything is decided.
+            var diskId = result.diskId;
+            var diskPath = pathJoin(result.folder, result.name);
+            BackingChainLinker.link(this, diskId, () ->
+                startOptimizeAfterImport(this, diskId, diskPath, this::finish));
+            return;
+        }
         finish();
     }
 
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/disk/images/ImportImagesActivity.java b/app/src/main/java/cn/classfun/droidvm/ui/disk/images/ImportImagesActivity.java
index 213f354e9..98348c8d8 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/disk/images/ImportImagesActivity.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/disk/images/ImportImagesActivity.java
@@ -12,7 +12,7 @@
 import static cn.classfun.droidvm.lib.utils.StringUtils.pathJoin;
 import static cn.classfun.droidvm.lib.utils.StringUtils.resolveUriPath;
 import static cn.classfun.droidvm.lib.utils.ThreadUtils.runOnPool;
-import static cn.classfun.droidvm.ui.disk.operation.DiskOperationActivity.startOptimize;
+import static cn.classfun.droidvm.ui.disk.operation.DiskOperationActivity.startOptimizeAfterImport;
 
 import android.content.Intent;
 import android.net.Uri;
@@ -45,6 +45,7 @@
 import cn.classfun.droidvm.lib.download.DiskDownloadService;
 import cn.classfun.droidvm.lib.ui.IconItemAdapter;
 import cn.classfun.droidvm.lib.ui.NotificationPermission;
+import cn.classfun.droidvm.ui.disk.action.BackingChainLinker;
 import cn.classfun.droidvm.ui.disk.create.DiskFormat;
 import cn.classfun.droidvm.ui.widgets.row.DropdownRowWidget;
 import cn.classfun.droidvm.ui.widgets.row.TextInputRowWidget;
@@ -397,8 +398,15 @@ private void onDownloadSucceeded() {
         var resultData = new Intent();
         resultData.putExtra("result_disk_path", pathJoin(result.folder, result.name));
         setResult(RESULT_OK, resultData);
-        if (result.diskId != null && DiskFormat.fromFilename(result.name) == DiskFormat.QCOW2)
-            startOptimize(this, result.diskId);
+        if (result.diskId != null && DiskFormat.fromFilename(result.name) == DiskFormat.QCOW2) {
+            // Resolve the backing chain first (may prompt once), then rewrite only when the
+            // compression can't boot on crosvm; finish once everything is decided.
+            var diskId = result.diskId;
+            var diskPath = pathJoin(result.folder, result.name);
+            BackingChainLinker.link(this, diskId, () ->
+                startOptimizeAfterImport(this, diskId, diskPath, this::finish));
+            return;
+        }
         finish();
     }
 
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/disk/info/info/DiskInfoInfoTab.java b/app/src/main/java/cn/classfun/droidvm/ui/disk/info/info/DiskInfoInfoTab.java
index 40e1e49bd..96a58db67 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/disk/info/info/DiskInfoInfoTab.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/disk/info/info/DiskInfoInfoTab.java
@@ -12,10 +12,14 @@
 import android.content.Context;
 import android.content.DialogInterface;
 import android.util.Log;
+import android.view.LayoutInflater;
+import android.view.MenuItem;
 import android.widget.FrameLayout;
+import android.widget.LinearLayout;
+import android.widget.PopupMenu;
+import android.widget.Space;
 import android.widget.TextView;
 
-import androidx.annotation.IdRes;
 import androidx.annotation.NonNull;
 import androidx.annotation.Nullable;
 
@@ -24,12 +28,15 @@
 
 import org.json.JSONObject;
 
+import java.util.ArrayList;
+
 import cn.classfun.droidvm.R;
 import cn.classfun.droidvm.lib.store.disk.DiskConfig;
 import cn.classfun.droidvm.lib.store.disk.DiskStore;
 import cn.classfun.droidvm.ui.disk.action.DiskActionDialog;
 import cn.classfun.droidvm.ui.disk.info.DiskInfoActivity;
 import cn.classfun.droidvm.ui.disk.info.base.DiskInfoBaseTab;
+import cn.classfun.droidvm.ui.disk.tree.DiskBranchPanel;
 import cn.classfun.droidvm.ui.widgets.container.CollapsibleContainer;
 import cn.classfun.droidvm.ui.widgets.row.TextRowWidget;
 
@@ -50,12 +57,8 @@ public final class DiskInfoInfoTab extends DiskInfoBaseTab {
     private TextRowWidget rowEncryption;
     private TextRowWidget rowCompression;
     private TextRowWidget rowDirtyFlag;
-    private MaterialButton btnResize;
-    private MaterialButton btnConvert;
-    private MaterialButton btnOptimize;
-    private MaterialButton btnCreateIncrement;
-    private MaterialButton btnClone;
-    private MaterialButton btnDelete;
+    private LinearLayout actionsContainer;
+    private int actionsMenuResId;
     private DiskActionDialog dialog;
 
     public DiskInfoInfoTab(
@@ -87,23 +90,13 @@ public void onCreateView() {
         rowDirtyFlag = view.findViewById(R.id.row_dirty_flag);
         sectionRaw = view.findViewById(R.id.section_raw);
         tvRawOutput = view.findViewById(R.id.tv_raw_output);
-        btnResize = view.findViewById(R.id.btn_resize);
-        btnConvert = view.findViewById(R.id.btn_convert);
-        btnOptimize = view.findViewById(R.id.btn_optimize);
-        btnCreateIncrement = view.findViewById(R.id.btn_create_increment);
-        btnClone = view.findViewById(R.id.btn_clone);
-        btnDelete = view.findViewById(R.id.btn_delete);
+        actionsContainer = view.findViewById(R.id.disk_actions_container);
         initialize();
     }
 
     private void initialize() {
         dialog = new DiskActionDialog(activity, this::onDiskUpdated, null);
-        bindButton(btnResize, R.id.menu_disk_resize);
-        bindButton(btnConvert, R.id.menu_disk_convert);
-        bindButton(btnOptimize, R.id.menu_disk_optimize);
-        bindButton(btnCreateIncrement, R.id.menu_disk_create_increment);
-        bindButton(btnClone, R.id.menu_disk_clone);
-        bindButton(btnDelete, R.id.menu_disk_delete);
+        populateActions(activity.config);
         bindCopy(rowFilename);
         bindCopy(rowFolder);
         bindCopy(rowFormat);
@@ -114,15 +107,83 @@ private void initialize() {
         bindCopy(rowEncryption);
         bindCopy(rowCompression);
         bindCopy(rowDirtyFlag);
-        var rowExtra1 = view.findViewById(R.id.row_extra_1);
-        var rowExtra2 = view.findViewById(R.id.row_extra_2);
-        var fmt = activity.config.getFormat();
-        if (!DiskConfig.supportsExtraOperations(fmt)) {
-            rowExtra1.setVisibility(GONE);
-            rowExtra2.setVisibility(GONE);
+    }
+
+    /**
+     * Build from the list long-press menu, folding create/merge/flatten into the existing branch
+     * manager because the tree dialog owns those relationship-changing operations here.
+     */
+    private void populateActions(@Nullable DiskConfig config) {
+        if (config == null) return;
+        int menuResId = DiskActionDialog.getMenuResId(config);
+        if (menuResId == actionsMenuResId && actionsContainer.getChildCount() > 0) return;
+        actionsMenuResId = menuResId;
+        actionsContainer.removeAllViews();
+
+        var menuHost = new PopupMenu(activity, actionsContainer);
+        menuHost.getMenuInflater().inflate(menuResId, menuHost.getMenu());
+        var actions = new ArrayList<MenuItem>();
+        boolean branchesAdded = false;
+        for (int i = 0; i < menuHost.getMenu().size(); i++) {
+            var item = menuHost.getMenu().getItem(i);
+            if (!item.isVisible()) continue;
+            if (isBranchAction(item.getItemId())) {
+                if (!branchesAdded) {
+                    actions.add(null); // null is the synthetic "Manage overlays" action.
+                    branchesAdded = true;
+                }
+            } else {
+                actions.add(item);
+            }
+        }
+
+        LinearLayout row = null;
+        int visibleCount = 0;
+        for (var item : actions) {
+            if ((visibleCount & 1) == 0) {
+                row = new LinearLayout(activity);
+                row.setOrientation(LinearLayout.HORIZONTAL);
+                actionsContainer.addView(row, new LinearLayout.LayoutParams(
+                    LinearLayout.LayoutParams.MATCH_PARENT,
+                    LinearLayout.LayoutParams.WRAP_CONTENT));
+            }
+            var button = (MaterialButton) LayoutInflater.from(activity)
+                .inflate(R.layout.item_disk_info_action, row, false);
+            if (item == null) {
+                button.setText(R.string.disk_manage_branches);
+                button.setIconResource(R.drawable.ic_file_multiple);
+                button.setOnClickListener(v -> DiskBranchPanel.open(
+                    activity, activity.config.getFullPath(), null,
+                    // The panel stays up until Close, even after its own disk is deleted (it
+                    // shows an empty tree then); only closing it takes this page down with it.
+                    result -> {
+                        if (result.subjectGone) activity.finish();
+                        else onDiskUpdated();
+                    }));
+            } else {
+                button.setText(item.getTitle());
+                button.setIcon(item.getIcon());
+                int actionId = item.getItemId();
+                button.setOnClickListener(v ->
+                    dialog.diskMenuOnClick(activity.config, actionId));
+            }
+            row.addView(button);
+            visibleCount++;
+        }
+        if ((visibleCount & 1) != 0 && row != null) {
+            var spacer = new Space(activity);
+            row.addView(spacer, new LinearLayout.LayoutParams(
+                0, 0, 1));
         }
     }
 
+    private static boolean isBranchAction(int id) {
+        return id == R.id.menu_disk_create_increment
+            || id == R.id.menu_disk_merge
+            || id == R.id.menu_disk_flatten
+            || id == R.id.menu_disk_reset;
+    }
+
     private void onDiskUpdated() {
         try {
             var store = new DiskStore();
@@ -134,10 +195,6 @@ private void onDiskUpdated() {
         }
     }
 
-    private void bindButton(@NonNull MaterialButton btn, @IdRes int id) {
-        btn.setOnClickListener(v -> dialog.diskMenuOnClick(activity.config, id));
-    }
-
     private void bindCopy(@NonNull TextRowWidget tr) {
         tr.setOnClickListener(v -> showCopyDialog(tr.getTitle(), tr.getValue()));
     }
@@ -146,6 +203,7 @@ private void bindCopy(@NonNull TextRowWidget tr) {
     public void onConfigLoaded() {
         var config = activity.config;
         if (config == null) return;
+        populateActions(config);
         var name = config.getName();
         var folder = config.item.optString("folder", "");
         var format = config.getFormat();
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/disk/info/snapshot/DiskInfoSnapshotTab.java b/app/src/main/java/cn/classfun/droidvm/ui/disk/info/snapshot/DiskInfoSnapshotTab.java
index 55eba1e6a..19cc259bd 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/disk/info/snapshot/DiskInfoSnapshotTab.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/disk/info/snapshot/DiskInfoSnapshotTab.java
@@ -11,6 +11,7 @@
 import static java.text.DateFormat.SHORT;
 import static java.text.DateFormat.getDateTimeInstance;
 import static cn.classfun.droidvm.lib.size.SizeUtils.formatSize;
+import static cn.classfun.droidvm.lib.store.enums.Enums.optEnum;
 import static cn.classfun.droidvm.lib.utils.AssetUtils.getPrebuiltBinaryPath;
 import static cn.classfun.droidvm.lib.utils.RunUtils.runList;
 import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
@@ -39,7 +40,11 @@
 import java.util.Date;
 
 import cn.classfun.droidvm.R;
+import cn.classfun.droidvm.lib.store.base.DataItem;
 import cn.classfun.droidvm.lib.store.disk.DiskConfig;
+import cn.classfun.droidvm.lib.store.disk.DiskStore;
+import cn.classfun.droidvm.lib.store.vm.VMBackend;
+import cn.classfun.droidvm.lib.store.vm.VMStore;
 import cn.classfun.droidvm.lib.ui.MaterialMenu;
 import cn.classfun.droidvm.ui.disk.info.DiskInfoActivity;
 import cn.classfun.droidvm.ui.disk.info.base.DiskInfoBaseTab;
@@ -197,7 +202,58 @@ private void showCreateDialog() {
             }
             inputLayout.setError(null);
             dialog.dismiss();
-            runSnapshotCommand("-c", name);
+            warnIfUsedByCrosvm(() -> runSnapshotCommand("-c", name));
+        });
+    }
+
+    /**
+     * crosvm has no qcow2 snapshot support and refuses to open a snapshotted disk for writing,
+     * so a snapshot silently makes any crosvm VM holding this disk writable un-startable (until
+     * the pre-start prompt flattens it away again). Say so before creating one; QEMU-only and
+     * read-only users are unaffected and see no dialog. The store scan is off the main thread.
+     */
+    private void warnIfUsedByCrosvm(@NonNull Runnable proceed) {
+        var config = activity.config;
+        if (config == null) return;
+        var fullPath = config.getFullPath();
+        runOnPool(() -> {
+            String vmName = null;
+            try {
+                var store = new VMStore();
+                store.load(activity);
+                for (int i = 0; i < store.size() && vmName == null; i++) {
+                    var vm = store.get(i);
+                    if (optEnum(vm.item, "backend", VMBackend.DEFAULT) != VMBackend.CROSVM)
+                        continue;
+                    var disks = vm.item.opt("disks", null);
+                    if (disks == null || !disks.is(DataItem.Type.ARRAY)) continue;
+                    for (var disk : disks.asArray()) {
+                        if (fullPath.equals(disk.optString("path", ""))
+                            && !disk.optBoolean("readonly", false)) {
+                            vmName = vm.getName();
+                            break;
+                        }
+                    }
+                }
+            } catch (Exception e) {
+                Log.w(TAG, "Failed to scan VMs for this disk", e);
+            }
+            final var attachedTo = vmName;
+            activity.runOnUiThread(() -> {
+                if (activity.isFinishing()) return;
+                if (attachedTo == null) {
+                    proceed.run();
+                    return;
+                }
+                new MaterialAlertDialogBuilder(activity)
+                    .setTitle(R.string.disk_snapshot_crosvm_warning_title)
+                    .setMessage(activity.getString(
+                        R.string.disk_snapshot_crosvm_warning_message, attachedTo))
+                    .setPositiveButton(R.string.disk_snapshot_crosvm_warning_create,
+                        (d, w) -> proceed.run())
+                    .setNegativeButton(android.R.string.cancel, null)
+                    .show();
+            });
         });
     }
 
@@ -246,6 +302,30 @@ private void runSnapshotCommand(@NonNull String flag, @NonNull String snapshotNa
         if (config == null) return;
         var fullPath = config.getFullPath();
         runOnPool(() -> {
+            // Snapshot commands rewrite the image; a disk other images overlay is locked.
+            try {
+                var diskStore = new DiskStore();
+                if (!diskStore.load(activity)) {
+                    activity.runOnUiThread(() -> Toast.makeText(
+                        activity, R.string.disk_info_load_failed, LENGTH_SHORT).show());
+                    return;
+                }
+                int n = diskStore.childrenOf(config.getId()).size();
+                if (n > 0) {
+                    activity.runOnUiThread(() -> {
+                        if (activity.isFinishing()) return;
+                        new MaterialAlertDialogBuilder(activity)
+                            .setTitle(R.string.disk_locked_title)
+                            .setMessage(activity.getString(
+                                R.string.disk_locked_message, config.getName(), n))
+                            .setPositiveButton(android.R.string.ok, null)
+                            .show();
+                    });
+                    return;
+                }
+            } catch (Exception e) {
+                Log.w(TAG, "Failed to check disk children", e);
+            }
             try {
                 var result = runList(
                     getPrebuiltBinaryPath("qemu-img"),
@@ -283,4 +363,3 @@ private void showErrorDialog(@NonNull String message) {
         if (tvLog != null) tvLog.append(message.trim());
     }
 }
-
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/disk/lxc/CreateLinuxVmActivity.java b/app/src/main/java/cn/classfun/droidvm/ui/disk/lxc/CreateLinuxVmActivity.java
new file mode 100644
index 000000000..53204712c
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/ui/disk/lxc/CreateLinuxVmActivity.java
@@ -0,0 +1,12 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
+package cn.classfun.droidvm.ui.disk.lxc;
+
+/** Linux-VM entry point backed by the shared LXC image catalogue/download flow. */
+public final class CreateLinuxVmActivity extends ImportLxcImagesActivity {
+    @Override
+    protected boolean isLinuxVmMode() {
+        return true;
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/disk/lxc/ImportLxcImagesActivity.java b/app/src/main/java/cn/classfun/droidvm/ui/disk/lxc/ImportLxcImagesActivity.java
index 6e0ea17a7..e559f17dc 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/disk/lxc/ImportLxcImagesActivity.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/disk/lxc/ImportLxcImagesActivity.java
@@ -10,21 +10,31 @@
 import static com.google.android.material.R.attr.colorOnSurfaceVariant;
 import static java.util.Objects.requireNonNullElse;
 import static cn.classfun.droidvm.lib.size.SizeUtils.formatSize;
+import static cn.classfun.droidvm.lib.utils.FileUtils.checkFileName;
 import static cn.classfun.droidvm.lib.utils.FileUtils.externalPath;
 import static cn.classfun.droidvm.lib.utils.NetUtils.BROWSER_USER_AGENT;
 import static cn.classfun.droidvm.lib.utils.NetUtils.LXC_USER_AGENT;
 import static cn.classfun.droidvm.lib.utils.NetUtils.fetchJSON;
+import static cn.classfun.droidvm.lib.utils.NetUtils.generateRandomMac;
+import static cn.classfun.droidvm.lib.utils.StringUtils.SHELL_SAFE_PASSWORD_SYMBOLS;
 import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
+import static cn.classfun.droidvm.lib.utils.StringUtils.generateGroupedPassword;
+import static cn.classfun.droidvm.lib.utils.StringUtils.isShellSafePassword;
 import static cn.classfun.droidvm.lib.utils.StringUtils.pathJoin;
 import static cn.classfun.droidvm.lib.utils.StringUtils.resolveUriPath;
+import static cn.classfun.droidvm.lib.utils.StringUtils.shellSafePasswordFilter;
 import static cn.classfun.droidvm.lib.utils.ThreadUtils.runOnPool;
-import static cn.classfun.droidvm.ui.disk.operation.DiskOperationActivity.startOptimize;
+import static cn.classfun.droidvm.ui.disk.operation.DiskOperationActivity.startOptimizeAfterImport;
+import static cn.classfun.droidvm.ui.disk.operation.DiskOperationActivity.startOptimizeAfterImportForResult;
 
+import android.content.Context;
 import android.content.Intent;
+import android.content.SharedPreferences;
 import android.net.Uri;
 import android.os.Bundle;
 import android.os.Handler;
 import android.os.Looper;
+import android.text.Editable;
 import android.util.Log;
 import android.view.View;
 import android.widget.TextView;
@@ -45,6 +55,8 @@
 import com.google.android.material.floatingactionbutton.ExtendedFloatingActionButton;
 import com.google.android.material.progressindicator.CircularProgressIndicator;
 
+import org.json.JSONObject;
+
 import java.io.File;
 import java.util.ArrayList;
 import java.util.Comparator;
@@ -53,6 +65,11 @@
 import java.util.Map;
 import java.util.TreeMap;
 import java.util.TreeSet;
+import java.util.UUID;
+import java.util.concurrent.ConcurrentHashMap;
+import java.util.concurrent.CountDownLatch;
+import java.util.concurrent.atomic.AtomicBoolean;
+import java.util.concurrent.atomic.AtomicInteger;
 
 import cn.classfun.droidvm.R;
 import cn.classfun.droidvm.lib.api.ApiManager;
@@ -60,19 +77,58 @@
 import cn.classfun.droidvm.lib.data.Repos;
 import cn.classfun.droidvm.lib.download.DiskDownloadManager;
 import cn.classfun.droidvm.lib.download.DiskDownloadService;
+import cn.classfun.droidvm.lib.size.SizeUnit;
+import cn.classfun.droidvm.lib.store.base.DataItem;
+import cn.classfun.droidvm.lib.store.disk.DiskBus;
+import cn.classfun.droidvm.lib.store.disk.DiskStore;
+import cn.classfun.droidvm.lib.store.network.NetworkStore;
+import cn.classfun.droidvm.lib.store.vm.VMConfig;
+import cn.classfun.droidvm.lib.store.vm.VMBackend;
+import cn.classfun.droidvm.lib.store.vm.VMHypervisor;
+import cn.classfun.droidvm.lib.store.vm.VMStore;
+import cn.classfun.droidvm.lib.ui.CopyableField;
 import cn.classfun.droidvm.lib.ui.IconItemAdapter;
 import cn.classfun.droidvm.lib.ui.NotificationPermission;
+import cn.classfun.droidvm.lib.ui.SimpleTextWatcher;
+import cn.classfun.droidvm.ui.agent.AgentOperationActivity;
+import cn.classfun.droidvm.ui.agent.autogrow.AutoGrowAction;
+import cn.classfun.droidvm.ui.agent.base.AgentVM;
+import cn.classfun.droidvm.ui.agent.password.ChangePasswordActivity;
+import cn.classfun.droidvm.ui.agent.password.PasswordAction;
+import cn.classfun.droidvm.ui.disk.action.BackingChainLinker;
 import cn.classfun.droidvm.ui.disk.create.DiskFormat;
 import cn.classfun.droidvm.ui.widgets.row.DropdownRowWidget;
 import cn.classfun.droidvm.ui.widgets.row.TextInputRowWidget;
 import cn.classfun.droidvm.ui.widgets.tools.DownloadWidget;
 import cn.classfun.droidvm.ui.widgets.tools.KernelAnalysisWidget;
 
-public final class ImportLxcImagesActivity extends AppCompatActivity {
+public class ImportLxcImagesActivity extends AppCompatActivity {
     private static final String TAG = "ImportLxcImages";
     private static final String IMAGES_META_PATH = "/streams/v1/images.json";
     private static final long POLL_INTERVAL_MS = 500;
+    private static final String PREFS_NAME = "droidvm_prefs";
+    private static final String PREF_META_SOURCE = "lxc_meta_source";
+    private static final String PREF_DL_SOURCE = "lxc_download_source";
+    private static final String PREF_DL_SOURCE_NAME = "lxc_download_source_name";
+    private static final String PREF_DL_SOURCE_URL = "lxc_download_source_url";
+    private static final String PREF_CUSTOM_META_URL = "lxc_custom_meta_url";
+    private static final String PREF_CUSTOM_DL_URL = "lxc_custom_download_url";
+    private static final String SOURCE_OFFICIAL = "official";
+    private static final String SOURCE_CLASSFUN = "classfun";
+    private static final String SOURCE_CERNET = "cernet";
+    private static final String SOURCE_CUSTOM = "custom";
+    private static final String STATE_PENDING_PASSWORD_DISK_ID = "pending_password_disk_id";
+    private static final String STATE_PENDING_RESET_PASSWORD = "pending_reset_password";
+    private static final String STATE_PENDING_IMPORT_NAME = "pending_import_name";
+    private static final String STATE_PENDING_LINUX_DISK_ID = "pending_linux_disk_id";
+    private static final String STATE_PENDING_LINUX_VM_NAME = "pending_linux_vm_name";
+    private static final String STATE_PENDING_LINUX_ROOT_PASSWORD = "pending_linux_root_password";
+    private static final String STATE_PENDING_LINUX_NETWORK_ID = "pending_linux_network_id";
+    private static final String STATE_PENDING_LINUX_CPU = "pending_linux_cpu";
+    private static final String STATE_PENDING_LINUX_MEMORY_MB = "pending_linux_memory_mb";
+    private static final String STATE_PENDING_LINUX_DISK_BYTES = "pending_linux_disk_bytes";
     private final Map<String, String> displayVersionToRelease = new LinkedHashMap<>();
+    private Repos.Repo builtinLxcRepo;
     private Repos.Repo lxcRepo;
     private String[] metaSourceKeys;
     private String[] metaSourceLabels;
@@ -80,6 +136,7 @@ public final class ImportLxcImagesActivity extends AppCompatActivity {
     private TextInputRowWidget inputCustomMetaUrl;
     private String[] dlSourceKeys;
     private String[] dlSourceLabels;
+    private String[] dlSourceUrls;
     private DropdownRowWidget dropdownDlSource;
     private TextInputRowWidget inputCustomDlUrl;
     private TextView tvMetaStatus;
@@ -88,7 +145,14 @@ public final class ImportLxcImagesActivity extends AppCompatActivity {
     private View dividerImage, tvImageHeader;
     private DropdownRowWidget dropdownDistro, dropdownVersion, dropdownVariant, dropdownBuild;
     private View dividerOutput, tvOutputHeader;
-    private TextInputRowWidget inputFilename, inputFolder;
+    private TextInputRowWidget inputFilename, inputFolder, inputResetPassword;
+    private View dividerSettings, tvSettingsHeader;
+    private TextInputRowWidget inputVmName, inputVmCpu, inputVmMemory;
+    private TextInputRowWidget inputVmDiskSize, inputVmRootPassword;
+    private DropdownRowWidget dropdownVmNetwork;
+    private String[] vmNetworkIds = new String[0];
+    private String[] vmNetworkLabels = new String[0];
+    private String selectedVmNetworkId = "";
     private MaterialCardView cardInfo;
     private TextView tvInfoSize, tvInfoPath;
     private ExtendedFloatingActionButton fabImport;
@@ -102,20 +166,57 @@ public final class ImportLxcImagesActivity extends AppCompatActivity {
     private LxcImage selectedImage;
     private boolean isLoading = false;
     private boolean isDownloading = false;
-    private boolean isClassFunApiAvailable = false;
-    /** True once the user explicitly picks a source, so a background refresh
-     * won't override their choice (but may still upgrade an untouched default). */
-    private boolean userTouchedSource = false;
+    private boolean isProbingSources = false;
+    private volatile boolean isClassFunApiAvailable = false;
+    private String selectedMetaSourceKey = SOURCE_OFFICIAL;
+    private String selectedDlSourceKey = SOURCE_OFFICIAL;
+    private String rememberedDlSourceKey = "";
+    private String rememberedDlSourceName = "";
+    private String rememberedDlSourceUrl = "";
+    private boolean automaticMetadataRequest = false;
+    private SharedPreferences sourcePrefs;
+    /** Only the first valid response may settle the one-time source probe. */
+    private final AtomicBoolean sourceProbeSettled = new AtomicBoolean(false);
+    /** A manual selection always wins, including against an already queued probe callback. */
+    private final AtomicBoolean userOverrodeSourceProbe = new AtomicBoolean(false);
+    private final AtomicInteger sourceProbeFailures = new AtomicInteger(0);
+    private volatile int sourceProbeRequestCount = 0;
     private String downloadName = null;
     private String downloadFolder = null;
-    private ApiManager apiManager = null;
+    private volatile ApiManager apiManager = null;
     private ActivityResultLauncher<Uri> folderPickerLauncher;
+    private ActivityResultLauncher<Intent> optimizeLauncher;
+    private ActivityResultLauncher<Intent> passwordLauncher;
+    private ActivityResultLauncher<Intent> linuxOptimizeLauncher;
+    private ActivityResultLauncher<Intent> linuxResizeLauncher;
+    private ActivityResultLauncher<Intent> linuxMaintenanceLauncher;
+    private boolean linuxVmMode = false;
+    private boolean vmRootPasswordVisible = false;
+    @Nullable
+    private UUID pendingPasswordDiskId;
+    @NonNull
+    private String pendingResetPassword = "";
+    @NonNull
+    private String pendingImportName = "";
+    @Nullable
+    private UUID pendingLinuxDiskId;
+    @NonNull
+    private String pendingLinuxVmName = "";
+    @NonNull
+    private String pendingLinuxRootPassword = "";
+    @NonNull
+    private String pendingLinuxNetworkId = "";
+    private long pendingLinuxCpu = 1;
+    private long pendingLinuxMemoryMb = 512;
+    private long pendingLinuxDiskBytes = 16L * 1024 * 1024 * 1024;
     private long currentDownloadId = -1;
+    private boolean activityStarted = false;
     private final Handler pollHandler = new Handler(Looper.getMainLooper());
 
     @Override
     protected void onCreate(@Nullable Bundle savedInstanceState) {
         super.onCreate(savedInstanceState);
+        linuxVmMode = isLinuxVmMode();
         setContentView(R.layout.activity_import_lxc_images);
         notifPermission = new NotificationPermission(this);
         collapsingToolbar = findViewById(R.id.collapsing_toolbar);
@@ -137,6 +238,15 @@ protected void onCreate(@Nullable Bundle savedInstanceState) {
         tvOutputHeader = findViewById(R.id.tv_output_header);
         inputFilename = findViewById(R.id.input_filename);
         inputFolder = findViewById(R.id.input_folder);
+        inputResetPassword = findViewById(R.id.input_reset_password);
+        dividerSettings = findViewById(R.id.divider_settings);
+        tvSettingsHeader = findViewById(R.id.tv_settings_header);
+        inputVmName = findViewById(R.id.input_vm_name);
+        inputVmCpu = findViewById(R.id.input_vm_cpu);
+        inputVmMemory = findViewById(R.id.input_vm_memory);
+        inputVmDiskSize = findViewById(R.id.input_vm_disk_size);
+        inputVmRootPassword = findViewById(R.id.input_vm_root_password);
+        dropdownVmNetwork = findViewById(R.id.dropdown_vm_network);
         cardInfo = findViewById(R.id.card_info);
         tvInfoSize = findViewById(R.id.tv_info_size);
         tvInfoPath = findViewById(R.id.tv_info_path);
@@ -146,11 +256,78 @@ protected void onCreate(@Nullable Bundle savedInstanceState) {
         kernelAnalysis.setUrlProvider(() -> selectedImage == null
             ? null : pathJoin(getDownloadBaseUrl(), selectedImage.getDownloadPath()));
         scrollView = findViewById(R.id.scroll_view);
+        optimizeLauncher = registerForActivityResult(
+            new ActivityResultContracts.StartActivityForResult(), result -> {
+                if (result.getResultCode() == RESULT_OK) launchPasswordAfterImport();
+                else completePendingImport();
+            });
+        passwordLauncher = registerForActivityResult(
+            new ActivityResultContracts.StartActivityForResult(), result ->
+                completePendingImport());
+        linuxOptimizeLauncher = registerForActivityResult(
+            new ActivityResultContracts.StartActivityForResult(), result -> {
+                if (result.getResultCode() == RESULT_OK) launchLinuxResize();
+                else finishLinuxVmFlow(false);
+            });
+        linuxResizeLauncher = registerForActivityResult(
+            new ActivityResultContracts.StartActivityForResult(), result -> {
+                if (result.getResultCode() == RESULT_OK) launchLinuxMaintenance();
+                else finishLinuxVmFlow(false);
+            });
+        linuxMaintenanceLauncher = registerForActivityResult(
+            new ActivityResultContracts.StartActivityForResult(), result -> {
+                if (result.getResultCode() == RESULT_OK) createPendingLinuxVm();
+                else finishLinuxVmFlow(false);
+            });
+        if (savedInstanceState != null) {
+            var diskId = savedInstanceState.getString(STATE_PENDING_PASSWORD_DISK_ID);
+            if (diskId != null) {
+                try {
+                    pendingPasswordDiskId = UUID.fromString(diskId);
+                } catch (IllegalArgumentException e) {
+                    Log.w(TAG, "Invalid pending password disk ID", e);
+                }
+            }
+            pendingResetPassword = requireNonNullElse(
+                savedInstanceState.getString(STATE_PENDING_RESET_PASSWORD), "");
+            pendingImportName = requireNonNullElse(
+                savedInstanceState.getString(STATE_PENDING_IMPORT_NAME), "");
+            pendingLinuxDiskId = parseUuid(savedInstanceState.getString(
+                STATE_PENDING_LINUX_DISK_ID), "pending Linux disk");
+            pendingLinuxVmName = requireNonNullElse(
+                savedInstanceState.getString(STATE_PENDING_LINUX_VM_NAME), "");
+            pendingLinuxRootPassword = requireNonNullElse(
+                savedInstanceState.getString(STATE_PENDING_LINUX_ROOT_PASSWORD), "");
+            pendingLinuxNetworkId = requireNonNullElse(
+                savedInstanceState.getString(STATE_PENDING_LINUX_NETWORK_ID), "");
+            pendingLinuxCpu = savedInstanceState.getLong(STATE_PENDING_LINUX_CPU, 1);
+            pendingLinuxMemoryMb = savedInstanceState.getLong(
+                STATE_PENDING_LINUX_MEMORY_MB, 512);
+            pendingLinuxDiskBytes = savedInstanceState.getLong(
+                STATE_PENDING_LINUX_DISK_BYTES, 16L * 1024 * 1024 * 1024);
+        }
         initialize();
     }
 
+    /** Subclass entry point keeps download notifications mode-safe without duplicating logic. */
+    protected boolean isLinuxVmMode() {
+        return false;
+    }
+
+    @Nullable
+    private UUID parseUuid(@Nullable String value, @NonNull String label) {
+        if (value == null) return null;
+        try {
+            return UUID.fromString(value);
+        } catch (IllegalArgumentException e) {
+            Log.w(TAG, fmt("Invalid %s ID", label), e);
+            return null;
+        }
+    }
+
     private void initialize() {
-        collapsingToolbar.setTitle(getString(R.string.lxc_title));
+        collapsingToolbar.setTitle(getString(
+            linuxVmMode ? R.string.linux_vm_create_title : R.string.lxc_title));
         toolbar.setNavigationOnClickListener(v -> confirmExit());
         getOnBackPressedDispatcher().addCallback(this, new OnBackPressedCallback(true) {
             @Override
@@ -165,61 +342,189 @@ public void handleOnBackPressed() {
         inputFolder.setText(path);
         inputFolder.setIconButtonOnClickListener(() -> folderPickerLauncher.launch(null));
         fabImport.setOnClickListener(v -> doImport());
-        // show the built-in source list immediately (screen usable at once),
-        // then refresh from the API in the background and swap it in when ready
+        configureModeUi();
+        setupVmNetworkDropdown();
+        sourcePrefs = getSharedPreferences(PREFS_NAME, Context.MODE_PRIVATE);
+        boolean hasRememberedSources = loadRememberedSources();
+        loadRememberedCustomUrls();
+        setupCustomUrlPersistence();
+        // Show bundled download mirrors immediately. Metadata deliberately has
+        // only Official, ClassFun and Custom; mirrors remain download-only.
         loadBuiltinSources();
-        runOnPool(this::asyncRefreshSources);
         // If this screen was re-created while its download is still running,
         // restore the whole form; otherwise just re-attach the progress bar.
-        if (!restoreSession()) reattachActiveDownload();
+        boolean restoredSession = restoreSession();
+        if (!restoredSession) reattachActiveDownload();
+        boolean shouldProbe = !hasRememberedSources && !restoredSession && !isDownloading;
+        boolean shouldAutoLoad = hasRememberedSources && !restoredSession && !isDownloading;
+        automaticMetadataRequest = shouldProbe || shouldAutoLoad;
+        if (shouldProbe) {
+            isProbingSources = true;
+            isLoading = true;
+            setMetaLoading();
+        } else if (shouldAutoLoad) {
+            // loadImages() is posted after ClassFun initialization. Do not mark
+            // isLoading yet or that call would reject itself.
+            setMetaLoading();
+        } else if (!restoredSession && !isDownloading) {
+            setMetaRefreshing();
+        }
+        runOnPool(() -> asyncInitializeSources(shouldProbe, shouldAutoLoad));
+    }
+
+    private void configureModeUi() {
+        dividerOutput.setVisibility(linuxVmMode ? GONE : VISIBLE);
+        tvOutputHeader.setVisibility(linuxVmMode ? GONE : VISIBLE);
+        dividerSettings.setVisibility(linuxVmMode ? VISIBLE : GONE);
+        tvSettingsHeader.setVisibility(linuxVmMode ? VISIBLE : GONE);
+        // Both password fields ride through the temp rescue VM's chpasswd
+        // script; only characters that script may carry can be entered.
+        inputResetPassword.setFilters(shellSafePasswordFilter());
+        inputVmRootPassword.setFilters(shellSafePasswordFilter());
+        if (!linuxVmMode) return;
+        inputVmCpu.setValue(1);
+        inputVmMemory.setValue(512, SizeUnit.MB);
+        inputVmDiskSize.setValue(16, SizeUnit.GB);
+        inputVmRootPassword.setEndIconContentDescription(getString(R.string.field_copy));
+        inputVmRootPassword.setEndIconOnClickListener(v -> copyVmRootPassword());
+        inputVmRootPassword.setIconButtonOnClickListener(this::toggleVmRootPasswordVisible);
+        fabImport.setText(R.string.linux_vm_create_action);
+        setOutputEnabled(false);
+    }
+
+    private void copyVmRootPassword() {
+        var password = inputVmRootPassword.getText();
+        if (password.isEmpty()) return;
+        CopyableField.copySensitive(
+            this, password, getString(R.string.linux_vm_root_password_hint));
+    }
+
+    private void toggleVmRootPasswordVisible() {
+        vmRootPasswordVisible = !vmRootPasswordVisible;
+        inputVmRootPassword.setPasswordVisible(vmRootPasswordVisible);
+        inputVmRootPassword.setIconButtonIcon(
+            vmRootPasswordVisible ? R.drawable.ic_eye_off : R.drawable.ic_eye);
+    }
+
+    private void setupVmNetworkDropdown() {
+        var ids = new ArrayList<String>();
+        var labels = new ArrayList<String>();
+        ids.add("");
+        labels.add(getString(R.string.linux_vm_network_none));
+        var store = new NetworkStore();
+        store.load(this);
+        store.forEach((id, config) -> {
+            ids.add(id.toString());
+            labels.add(config.getName());
+        });
+        vmNetworkIds = ids.toArray(new String[0]);
+        vmNetworkLabels = labels.toArray(new String[0]);
+        dropdownVmNetwork.setAdapter(IconItemAdapter.create(
+            this, vmNetworkLabels, R.drawable.ic_nav_network));
+        dropdownVmNetwork.setOnItemClickListener((p, v, pos, id) ->
+            selectedVmNetworkId = vmNetworkIds[pos]);
+        // A fresh quick-create VM joins the first configured network. Keep the explicit
+        // no-network row as the fallback when the store is empty and as a manual choice.
+        if (selectedVmNetworkId.isEmpty() && vmNetworkIds.length > 1)
+            selectedVmNetworkId = vmNetworkIds[1];
+        applyVmNetworkSelection(selectedVmNetworkId);
+    }
+
+    private void applyVmNetworkSelection(@Nullable String networkId) {
+        var id = requireNonNullElse(networkId, "");
+        int index = indexOfSource(vmNetworkIds, id);
+        if (index < 0) index = 0;
+        selectedVmNetworkId = vmNetworkIds[index];
+        dropdownVmNetwork.setText(vmNetworkLabels[index]);
     }
 
     /** Snapshot of the form, kept across activity re-creation while a download runs. */
     private static final class Session {
+        boolean linuxVmMode;
+        long downloadId = -1;
         String metaSource, customMetaUrl, dlSource, customDlUrl;
         List<LxcImage> allImages;
         String distro, version, variant, build;
-        String filename, folder;
+        String filename, folder, resetPassword;
+        String vmName, vmRootPassword, vmNetworkId;
+        long vmCpu, vmMemoryMb, vmDiskBytes;
     }
 
-    /** The in-progress import (only one download runs at a time), or {@code null}. */
-    private static Session session;
+    /** Stable snapshot used to merge a remembered source with either repo list. */
+    private static final class DownloadSource {
+        final String key;
+        final String name;
+        final String baseUrl;
+
+        DownloadSource(@NonNull String key, @NonNull String name, @NonNull String baseUrl) {
+            this.key = key;
+            this.name = name;
+            this.baseUrl = baseUrl;
+        }
+    }
+
+    /**
+     * Form/download state is isolated by concrete entry Activity. Linux VM creation
+     * and plain LXC import share this implementation, but must never overwrite one
+     * another while either screen is in the background.
+     */
+    private static final Map<String, Session> sessions = new ConcurrentHashMap<>();
+
+    @NonNull
+    private String sessionKey() {
+        return getClass().getName();
+    }
+
+    @Nullable
+    private Session getSession() {
+        return sessions.get(sessionKey());
+    }
 
     private void captureSession() {
         var s = new Session();
-        s.metaSource = dropdownMetaSource.getText();
+        s.linuxVmMode = linuxVmMode;
+        s.metaSource = getSelectedMetaSourceKey();
         s.customMetaUrl = inputCustomMetaUrl.getText();
-        s.dlSource = dropdownDlSource.getText();
+        s.dlSource = getSelectedDlSourceKey();
         s.customDlUrl = inputCustomDlUrl.getText();
         s.allImages = new ArrayList<>(allImages);
         s.distro = dropdownDistro.getText();
         s.version = dropdownVersion.getText();
         s.variant = dropdownVariant.getText();
         s.build = dropdownBuild.getText();
-        s.filename = inputFilename.getText();
-        s.folder = inputFolder.getText();
-        session = s;
+        if (linuxVmMode) {
+            s.vmName = inputVmName.getText();
+            s.vmCpu = inputVmCpu.getValue();
+            s.vmMemoryMb = inputVmMemory.getValue(SizeUnit.MB);
+            s.vmDiskBytes = inputVmDiskSize.getValue();
+            s.vmRootPassword = inputVmRootPassword.getText();
+            s.vmNetworkId = selectedVmNetworkId;
+        } else {
+            s.filename = inputFilename.getText();
+            s.folder = inputFolder.getText();
+            s.resetPassword = inputResetPassword.getText();
+        }
+        sessions.put(sessionKey(), s);
     }
 
     /**
      * Rebuilds the form from the last saved session (replays the
      * distro->version->variant->build cascade) and re-attaches the progress bar if a
-     * download is still running. The session is kept after the download ends too,
-     * so reopening restores the last selections (hit Load to refresh). Returns
-     * false if there's nothing to restore.
+     * download is still running or its terminal result has not yet been consumed.
+     * The session is removed when the download succeeds, fails or is cancelled.
+     * Returns false if there's nothing to restore.
      */
     private boolean restoreSession() {
-        var s = session;
-        if (s == null) return false;
+        var s = getSession();
+        if (s == null || s.linuxVmMode != linuxVmMode) return false;
         if (lxcRepo == null) return false; // sources unavailable; can't rebuild
-        dropdownMetaSource.setText(s.metaSource);
+        applySourceSelection(s.metaSource, s.dlSource);
         inputCustomMetaUrl.setText(s.customMetaUrl);
         inputCustomMetaUrl.setVisibility(
-            getSelectedMetaSourceKey().equals("custom") ? VISIBLE : GONE);
-        dropdownDlSource.setText(s.dlSource);
+            getSelectedMetaSourceKey().equals(SOURCE_CUSTOM) ? VISIBLE : GONE);
         inputCustomDlUrl.setText(s.customDlUrl);
         inputCustomDlUrl.setVisibility(
-            getSelectedDlSourceKey().equals("custom") ? VISIBLE : GONE);
+            getSelectedDlSourceKey().equals(SOURCE_CUSTOM) ? VISIBLE : GONE);
         onImagesLoaded(s.allImages, s.allImages.size());
         dropdownDistro.setText(s.distro);
         onDistroSelected(s.distro);
@@ -229,16 +534,71 @@ private boolean restoreSession() {
         onVariantSelected(s.variant);
         dropdownBuild.setText(s.build);
         onBuildSelected(s.build);
-        inputFilename.setText(s.filename);
-        inputFolder.setText(s.folder);
-        reattachActiveDownload();
+        if (linuxVmMode) {
+            inputVmName.setText(s.vmName);
+            inputVmCpu.setValue(s.vmCpu);
+            inputVmMemory.setValue(s.vmMemoryMb, SizeUnit.MB);
+            inputVmDiskSize.setValue(s.vmDiskBytes);
+            inputVmRootPassword.setText(s.vmRootPassword);
+            applyVmNetworkSelection(s.vmNetworkId);
+            pendingLinuxVmName = requireNonNullElse(s.vmName, "");
+            pendingLinuxRootPassword = requireNonNullElse(s.vmRootPassword, "");
+            pendingLinuxNetworkId = requireNonNullElse(s.vmNetworkId, "");
+            pendingLinuxCpu = s.vmCpu;
+            pendingLinuxMemoryMb = s.vmMemoryMb;
+            pendingLinuxDiskBytes = s.vmDiskBytes;
+        } else {
+            inputFilename.setText(s.filename);
+            inputFolder.setText(s.folder);
+            inputResetPassword.setText(s.resetPassword);
+        }
+        reattachSessionDownload(s);
         return true;
     }
 
+    @Override
+    protected void onSaveInstanceState(@NonNull Bundle outState) {
+        super.onSaveInstanceState(outState);
+        if (pendingPasswordDiskId != null)
+            outState.putString(
+                STATE_PENDING_PASSWORD_DISK_ID, pendingPasswordDiskId.toString());
+        if (!pendingResetPassword.isEmpty())
+            outState.putString(STATE_PENDING_RESET_PASSWORD, pendingResetPassword);
+        if (!pendingImportName.isEmpty())
+            outState.putString(STATE_PENDING_IMPORT_NAME, pendingImportName);
+        if (pendingLinuxDiskId != null)
+            outState.putString(STATE_PENDING_LINUX_DISK_ID, pendingLinuxDiskId.toString());
+        if (!pendingLinuxVmName.isEmpty())
+            outState.putString(STATE_PENDING_LINUX_VM_NAME, pendingLinuxVmName);
+        if (!pendingLinuxRootPassword.isEmpty())
+            outState.putString(
+                STATE_PENDING_LINUX_ROOT_PASSWORD, pendingLinuxRootPassword);
+        if (!pendingLinuxNetworkId.isEmpty())
+            outState.putString(STATE_PENDING_LINUX_NETWORK_ID, pendingLinuxNetworkId);
+        outState.putLong(STATE_PENDING_LINUX_CPU, pendingLinuxCpu);
+        outState.putLong(STATE_PENDING_LINUX_MEMORY_MB, pendingLinuxMemoryMb);
+        outState.putLong(STATE_PENDING_LINUX_DISK_BYTES, pendingLinuxDiskBytes);
+    }
+
     /** Re-attaches just the progress bar to the running download (no form state). */
     private void reattachActiveDownload() {
         long id = DiskDownloadManager.activeDownloadId(getClass().getName());
         if (id < 0) return;
+        var s = getSession();
+        if (s != null) s.downloadId = id;
+        attachDownload(id);
+    }
+
+    /** Re-attaches to this form's exact job, including an unconsumed success. */
+    private void reattachSessionDownload(@NonNull Session s) {
+        if (s.downloadId < 0 || DiskDownloadManager.query(s.downloadId) == null) {
+            reattachActiveDownload();
+            return;
+        }
+        attachDownload(s.downloadId);
+    }
+
+    private void attachDownload(long id) {
         currentDownloadId = id;
         isDownloading = true;
         setInputsEnabled(false);
@@ -247,7 +607,62 @@ private void reattachActiveDownload() {
         var name = DiskDownloadManager.downloadName(id);
         downloadWidget.startExternal(name != null ? name : "", this::cancelDownload);
         scrollView.post(() -> scrollView.fullScroll(View.FOCUS_DOWN));
-        pollHandler.post(pollRunnable);
+        if (activityStarted) pollHandler.post(pollRunnable);
+    }
+
+    /** Returns true only when the complete, usable pair has already been remembered. */
+    private boolean loadRememberedSources() {
+        if (!sourcePrefs.contains(PREF_META_SOURCE) || !sourcePrefs.contains(PREF_DL_SOURCE))
+            return false;
+        var meta = sourcePrefs.getString(PREF_META_SOURCE, null);
+        var download = sourcePrefs.getString(PREF_DL_SOURCE, null);
+        if (!isAllowedMetadataSource(meta) || download == null || download.isEmpty()) {
+            sourcePrefs.edit()
+                .remove(PREF_META_SOURCE)
+                .remove(PREF_DL_SOURCE)
+                .remove(PREF_DL_SOURCE_NAME)
+                .remove(PREF_DL_SOURCE_URL)
+                .apply();
+            return false;
+        }
+        selectedMetaSourceKey = meta;
+        selectedDlSourceKey = download;
+        rememberedDlSourceKey = download;
+        rememberedDlSourceName = requireNonNullElse(
+            sourcePrefs.getString(PREF_DL_SOURCE_NAME, ""), "");
+        rememberedDlSourceUrl = requireNonNullElse(
+            sourcePrefs.getString(PREF_DL_SOURCE_URL, ""), "");
+        // No probe will be started, but marking it settled also protects the
+        // remembered pair from any stale callback left in the process.
+        sourceProbeSettled.set(true);
+        return true;
+    }
+
+    private boolean isAllowedMetadataSource(@Nullable String key) {
+        return SOURCE_OFFICIAL.equals(key) || SOURCE_CLASSFUN.equals(key)
+            || SOURCE_CUSTOM.equals(key);
+    }
+
+    private void loadRememberedCustomUrls() {
+        inputCustomMetaUrl.setText(sourcePrefs.getString(PREF_CUSTOM_META_URL, ""));
+        inputCustomDlUrl.setText(sourcePrefs.getString(PREF_CUSTOM_DL_URL, ""));
+    }
+
+    private void setupCustomUrlPersistence() {
+        inputCustomMetaUrl.addTextChangedListener(new SimpleTextWatcher() {
+            @Override
+            public void afterTextChanged(Editable s) {
+                sourcePrefs.edit().putString(PREF_CUSTOM_META_URL, s.toString()).apply();
+            }
+        });
+        inputCustomDlUrl.addTextChangedListener(new SimpleTextWatcher() {
+            @Override
+            public void afterTextChanged(Editable s) {
+                sourcePrefs.edit().putString(PREF_CUSTOM_DL_URL, s.toString()).apply();
+                if (SOURCE_CUSTOM.equals(selectedDlSourceKey))
+                    rememberSourcePair(selectedMetaSourceKey, selectedDlSourceKey);
+            }
+        });
     }
 
     /**
@@ -256,73 +671,170 @@ private void reattachActiveDownload() {
      */
     private void loadBuiltinSources() {
         var repos = Repos.loadYAML(this);
-        if (repos != null) lxcRepo = repos.getRepo().get("lxc-images");
+        if (repos != null) builtinLxcRepo = repos.getRepo().get("lxc-images");
+        lxcRepo = builtinLxcRepo;
         if (lxcRepo == null) {
             // bundled data missing/corrupt: fall back to a blocking load
             setMetaSourcesLoading();
             return;
         }
+        hydrateRememberedDownloadSource(lxcRepo);
         setupSourceDropdown();
         setupImageDropdowns();
-        setMetaRefreshing();
     }
 
     /**
-     * Background refresh: fetches the freshest repo/mirror list (and ClassFun
-     * availability) from the API, then swaps it into the dropdowns without
-     * disturbing a user who has already moved on to loading images.
+     * Resolves ClassFun first, starts the one-time race when needed, then refreshes
+     * the download mirror list. The two metadata GETs share a start gate so neither
+     * source gets an artificial scheduling head start.
      */
-    private void asyncRefreshSources() {
+    private void asyncInitializeSources(boolean shouldProbe, boolean shouldAutoLoad) {
         boolean classfun = false;
-        Repos.Repo freshRepo = null;
         try {
             if (Privacy.isPrivacyAgreed(this)) {
                 apiManager = ApiManager.create(this);
                 classfun = apiManager.isServiceEnabled("lxc_images_metadata");
             }
+        } catch (Exception e) {
+            Log.w(TAG, "Failed to initialize ClassFun metadata service", e);
+        }
+        final boolean classfunAvailable = classfun;
+        runOnUiThread(() -> {
+            isClassFunApiAvailable = classfunAvailable;
+            if (shouldAutoLoad && !isFinishing() && !isDestroyed()) loadImages();
+        });
+
+        if (shouldProbe && !sourceProbeSettled.get())
+            startSourceProbe(classfunAvailable);
+
+        Repos.Repo freshRepo = null;
+        try {
             var repos = Repos.load(this);
             if (repos != null) freshRepo = repos.getRepo().get("lxc-images");
         } catch (Exception e) {
-            Log.w(TAG, "Background source refresh failed; keeping built-in list", e);
+            Log.w(TAG, "Background mirror refresh failed; keeping built-in list", e);
         }
-        final boolean classfunAvailable = classfun;
         final Repos.Repo repo = freshRepo;
         runOnUiThread(() -> applyRefreshedSources(repo, classfunAvailable));
     }
 
     private void applyRefreshedSources(@Nullable Repos.Repo freshRepo, boolean classfunAvailable) {
-        if (isFinishing()) return;
+        if (isFinishing() || isDestroyed()) return;
         isClassFunApiAvailable = classfunAvailable;
         if (freshRepo != null) {
-            // capture any explicit choice before the list swap
-            var metaSel = getSelectedMetaSourceKey();
-            var dlSel = getSelectedDlSourceKey();
+            boolean sourcesWereMissing = lxcRepo == null;
+            // A second import screen may update the globally remembered preference while this
+            // screen's download is in the background. Keep the source labels from this exact
+            // session until its job is consumed; the new preference applies next time.
+            var metaSel = isDownloading ? getSelectedMetaSourceKey() : sourcePrefs.getString(
+                PREF_META_SOURCE, getSelectedMetaSourceKey());
+            var dlSel = isDownloading ? getSelectedDlSourceKey() : sourcePrefs.getString(
+                PREF_DL_SOURCE, getSelectedDlSourceKey());
             lxcRepo = freshRepo;
+            selectedMetaSourceKey = requireNonNullElse(metaSel, SOURCE_OFFICIAL);
+            selectedDlSourceKey = requireNonNullElse(dlSel, SOURCE_OFFICIAL);
+            hydrateRememberedDownloadSource(freshRepo);
             setupSourceDropdown();
-            // keep an explicit pick; otherwise take the fresh default
-            // (which now prefers ClassFun when it just became available)
-            if (userTouchedSource) restoreSourceSelection(metaSel, dlSel);
+            if (sourcesWereMissing) setupImageDropdowns();
         } else if (lxcRepo == null) {
             // both the bundled list and the refresh failed
             setMetaError("source list unavailable");
             btnLoad.setEnabled(false);
             return;
         }
-        // clear the "refreshing" spinner only if the user hasn't moved on
-        if (!isLoading && !isDownloading && allImages.isEmpty())
+        // Never replace an automatic load's progress/error with "load metadata".
+        if (!automaticMetadataRequest && !isLoading && !isDownloading && allImages.isEmpty())
             setMetaIdle();
+        automaticMetadataRequest = false;
     }
 
-    /** Re-applies a previously selected source key after the list is rebuilt. */
-    private void restoreSourceSelection(@NonNull String metaKey, @NonNull String dlKey) {
-        int mi = findSourceIndex(metaSourceKeys, metaKey);
-        dropdownMetaSource.setText(metaSourceLabels[mi]);
-        inputCustomMetaUrl.setVisibility(
-            metaSourceKeys[mi].equals("custom") ? VISIBLE : GONE);
-        int di = findSourceIndex(dlSourceKeys, dlKey);
-        dropdownDlSource.setText(dlSourceLabels[di]);
-        inputCustomDlUrl.setVisibility(
-            dlSourceKeys[di].equals("custom") ? VISIBLE : GONE);
+    private void startSourceProbe(boolean classfunAvailable) {
+        var repo = lxcRepo;
+        if (repo == null) {
+            if (sourceProbeSettled.compareAndSet(false, true))
+                finishSourceProbeFailure("Official LXC source unavailable");
+            return;
+        }
+        var officialUrl = pathJoin(repo.getUrl(), IMAGES_META_PATH);
+        String classfunUrl = null;
+        if (classfunAvailable && apiManager != null) {
+            try {
+                classfunUrl = apiManager.getApiUrl("lxc_images_metadata");
+            } catch (Exception e) {
+                Log.w(TAG, "ClassFun metadata probe unavailable", e);
+            }
+        }
+
+        sourceProbeFailures.set(0);
+        sourceProbeRequestCount = classfunUrl == null ? 1 : 2;
+        var startGate = new CountDownLatch(1);
+        runOnPool(() -> probeMetadataSource(
+            SOURCE_OFFICIAL, SOURCE_OFFICIAL, officialUrl, startGate));
+        if (classfunUrl != null) {
+            final var url = classfunUrl;
+            runOnPool(() -> probeMetadataSource(
+                SOURCE_CLASSFUN, SOURCE_CERNET, url, startGate));
+        }
+        startGate.countDown();
+    }
+
+    private void probeMetadataSource(
+        @NonNull String metadataSource,
+        @NonNull String downloadSource,
+        @NonNull String url,
+        @NonNull CountDownLatch startGate
+    ) {
+        try {
+            startGate.await();
+            if (sourceProbeSettled.get()) return;
+            var json = fetchJSON(url, BROWSER_USER_AGENT);
+            if (!sourceProbeSettled.compareAndSet(false, true)) return;
+            // fetchJSON has already validated the response. Settle the race at
+            // response completion; parsing time must not change which source won.
+            var images = LxcImageParser.parse(json);
+            Log.i(TAG, fmt("Initial metadata probe selected %s", metadataSource));
+            runOnUiThread(() -> applySourceProbeWinner(
+                metadataSource, downloadSource, images));
+        } catch (InterruptedException e) {
+            Thread.currentThread().interrupt();
+            recordSourceProbeFailure(metadataSource, e);
+        } catch (Exception e) {
+            recordSourceProbeFailure(metadataSource, e);
+        }
+    }
+
+    private void recordSourceProbeFailure(@NonNull String source, @NonNull Exception error) {
+        Log.w(TAG, fmt("Metadata probe failed for %s", source), error);
+        if (sourceProbeSettled.get()) return;
+        if (sourceProbeFailures.incrementAndGet() < sourceProbeRequestCount) return;
+        if (!sourceProbeSettled.compareAndSet(false, true)) return;
+        var message = error.getMessage();
+        finishSourceProbeFailure(message != null ? message : "Unknown error");
+    }
+
+    private void finishSourceProbeFailure(@NonNull String message) {
+        runOnUiThread(() -> {
+            if (isFinishing() || isDestroyed() || userOverrodeSourceProbe.get()) return;
+            isProbingSources = false;
+            isLoading = false;
+            setMetaError(message);
+        });
+    }
+
+    private void applySourceProbeWinner(
+        @NonNull String metadataSource,
+        @NonNull String downloadSource,
+        @NonNull List<LxcImage> images
+    ) {
+        if (isFinishing() || isDestroyed() || userOverrodeSourceProbe.get()) return;
+        rememberSourcePair(metadataSource, downloadSource);
+        // The refreshed repo may not contain the probe's CERNET entry. Rebuild
+        // from the remembered snapshot so the winning source is always selectable.
+        setupSourceDropdown();
+        applySourceSelection(metadataSource, downloadSource);
+        isProbingSources = false;
+        isLoading = false;
+        onImagesLoaded(images, images.size());
     }
 
     private void setMetaRefreshing() {
@@ -345,7 +857,24 @@ private void setMetaSourcesLoading() {
 
     private boolean sourcesReady() {
         return metaSourceKeys != null && metaSourceLabels != null
-            && dlSourceKeys != null && dlSourceLabels != null;
+            && dlSourceKeys != null && dlSourceLabels != null && dlSourceUrls != null;
+    }
+
+    @Override
+    protected void onStart() {
+        super.onStart();
+        activityStarted = true;
+        if (currentDownloadId >= 0) {
+            pollHandler.removeCallbacks(pollRunnable);
+            pollHandler.post(pollRunnable);
+        }
+    }
+
+    @Override
+    protected void onStop() {
+        activityStarted = false;
+        pollHandler.removeCallbacks(pollRunnable);
+        super.onStop();
     }
 
     @Override
@@ -414,62 +943,243 @@ private int resolveThemeColor(int attr) {
     }
 
     private void setupSourceDropdown() {
-        var keys = new ArrayList<String>();
-        var labels = new ArrayList<String>();
-        if (isClassFunApiAvailable) {
-            keys.add("classfun");
-            labels.add(getString(R.string.lxc_source_classfun));
-        }
-        keys.add("official");
-        labels.add(getString(R.string.lxc_source_official));
-        for (var mirror : lxcRepo.getMirrors()) {
-            keys.add(mirror.getId());
-            labels.add(mirror.getName());
-        }
-        keys.add("custom");
-        labels.add(getString(R.string.lxc_source_custom));
-        metaSourceKeys = keys.toArray(new String[0]);
-        metaSourceLabels = labels.toArray(new String[0]);
-        dlSourceKeys = keys.toArray(new String[0]);
-        dlSourceLabels = labels.toArray(new String[0]);
-        int metaDefaultIndex = findSourceIndex(metaSourceKeys,
-            isClassFunApiAvailable ? "classfun" : "official");
+        var metaKeys = new ArrayList<String>();
+        var metaLabels = new ArrayList<String>();
+        metaKeys.add(SOURCE_OFFICIAL);
+        metaLabels.add(getString(R.string.lxc_source_official));
+        metaKeys.add(SOURCE_CLASSFUN);
+        metaLabels.add(getString(R.string.lxc_source_classfun));
+        metaKeys.add(SOURCE_CUSTOM);
+        metaLabels.add(getString(R.string.lxc_source_custom));
+        metaSourceKeys = metaKeys.toArray(new String[0]);
+        metaSourceLabels = metaLabels.toArray(new String[0]);
+
+        var downloadSources = buildDownloadSources(lxcRepo);
+        dlSourceKeys = new String[downloadSources.size()];
+        dlSourceLabels = new String[downloadSources.size()];
+        dlSourceUrls = new String[downloadSources.size()];
+        int sourceIndex = 0;
+        for (var source : downloadSources.values()) {
+            dlSourceKeys[sourceIndex] = source.key;
+            dlSourceLabels[sourceIndex] = source.name;
+            dlSourceUrls[sourceIndex] = source.baseUrl;
+            sourceIndex++;
+        }
+
+        int metaDefaultIndex = findSourceIndex(metaSourceKeys, selectedMetaSourceKey);
         var aMeta = IconItemAdapter.create(this, metaSourceLabels, R.drawable.ic_nav_network);
         dropdownMetaSource.setAdapter(aMeta);
         dropdownMetaSource.setText(metaSourceLabels[metaDefaultIndex]);
+        selectedMetaSourceKey = metaSourceKeys[metaDefaultIndex];
         dropdownMetaSource.setOnItemClickListener((p, v, pos, id) -> {
-            userTouchedSource = true;
-            boolean isCustom = metaSourceKeys[pos].equals("custom");
+            selectedMetaSourceKey = metaSourceKeys[pos];
+            boolean isCustom = selectedMetaSourceKey.equals(SOURCE_CUSTOM);
             inputCustomMetaUrl.setVisibility(isCustom ? VISIBLE : GONE);
+            onUserChangedSource();
             setMetaIdle();
         });
         inputCustomMetaUrl.setVisibility(
-            metaSourceKeys[metaDefaultIndex].equals("custom") ? VISIBLE : GONE);
-        int downDefaultIndex = findSourceIndex(dlSourceKeys,
-            getString(R.string.lxc_default_download_source));
+            selectedMetaSourceKey.equals(SOURCE_CUSTOM) ? VISIBLE : GONE);
+
+        int downDefaultIndex = findSourceIndex(dlSourceKeys, selectedDlSourceKey);
         var aDown = IconItemAdapter.create(this, dlSourceLabels, R.drawable.ic_download);
         dropdownDlSource.setAdapter(aDown);
         dropdownDlSource.setText(dlSourceLabels[downDefaultIndex]);
+        selectedDlSourceKey = dlSourceKeys[downDefaultIndex];
         dropdownDlSource.setOnItemClickListener((p, v, pos, id) -> {
-            userTouchedSource = true;
-            boolean isCustom = dlSourceKeys[pos].equals("custom");
+            selectedDlSourceKey = dlSourceKeys[pos];
+            boolean isCustom = selectedDlSourceKey.equals(SOURCE_CUSTOM);
             inputCustomDlUrl.setVisibility(isCustom ? VISIBLE : GONE);
+            onUserChangedSource();
         });
         inputCustomDlUrl.setVisibility(
-            dlSourceKeys[downDefaultIndex].equals("custom") ? VISIBLE : GONE);
+            selectedDlSourceKey.equals(SOURCE_CUSTOM) ? VISIBLE : GONE);
     }
 
     private int findSourceIndex(@NonNull String[] keys, @NonNull String target) {
+        int index = indexOfSource(keys, target);
+        return index >= 0 ? index : 0;
+    }
+
+    private int indexOfSource(@Nullable String[] keys, @NonNull String target) {
+        if (keys == null) return -1;
         for (int i = 0; i < keys.length; i++)
             if (keys[i].equals(target)) return i;
-        return 0;
+        return -1;
+    }
+
+    /**
+     * Before Repos.load() completes this is the union of remembered and
+     * repo.yaml. Afterwards lxcRepo points at Repos.load(), so rebuilding
+     * produces the union of remembered and remote.
+     * putIfAbsent makes the exact remembered name/base URL win on key collisions.
+     */
+    @NonNull
+    private LinkedHashMap<String, DownloadSource> buildDownloadSources(
+        @Nullable Repos.Repo repo
+    ) {
+        var result = new LinkedHashMap<String, DownloadSource>();
+        if (!rememberedDlSourceKey.isEmpty()) {
+            var rememberedName = rememberedDlSourceName.isEmpty()
+                ? rememberedDlSourceKey : rememberedDlSourceName;
+            if (!rememberedDlSourceUrl.isEmpty() || SOURCE_CUSTOM.equals(rememberedDlSourceKey)) {
+                result.put(rememberedDlSourceKey, new DownloadSource(
+                    rememberedDlSourceKey, rememberedName, rememberedDlSourceUrl));
+            }
+        }
+        addRepoDownloadSources(result, repo);
+        result.putIfAbsent(SOURCE_CUSTOM, new DownloadSource(
+            SOURCE_CUSTOM,
+            getString(R.string.lxc_source_custom),
+            normalizeBaseUrl(inputCustomDlUrl.getText())
+        ));
+        return result;
+    }
+
+    private void addRepoDownloadSources(
+        @NonNull LinkedHashMap<String, DownloadSource> result,
+        @Nullable Repos.Repo repo
+    ) {
+        if (repo == null) return;
+        result.putIfAbsent(SOURCE_OFFICIAL, new DownloadSource(
+            SOURCE_OFFICIAL,
+            getString(R.string.lxc_source_official),
+            normalizeBaseUrl(repo.getUrl())
+        ));
+        for (var mirror : repo.getMirrors()) {
+            var url = normalizeBaseUrl(mirror.getRepoUrl(repo));
+            if (url.isEmpty()) continue;
+            result.putIfAbsent(mirror.getId(), new DownloadSource(
+                mirror.getId(), mirror.getName(), url));
+        }
+    }
+
+    @Nullable
+    private DownloadSource findDownloadSourceInRepo(
+        @NonNull String key,
+        @Nullable Repos.Repo repo
+    ) {
+        if (repo == null || SOURCE_CUSTOM.equals(key)) return null;
+        if (SOURCE_OFFICIAL.equals(key)) {
+            return new DownloadSource(
+                key,
+                getString(R.string.lxc_source_official),
+                normalizeBaseUrl(repo.getUrl())
+            );
+        }
+        var mirror = repo.getMirror(key);
+        if (mirror == null) return null;
+        var url = normalizeBaseUrl(mirror.getRepoUrl(repo));
+        if (url.isEmpty()) return null;
+        return new DownloadSource(key, mirror.getName(), url);
+    }
+
+    @Nullable
+    private DownloadSource findCurrentDownloadSource(@NonNull String key) {
+        int index = indexOfSource(dlSourceKeys, key);
+        if (index >= 0 && dlSourceLabels != null && dlSourceUrls != null) {
+            return new DownloadSource(
+                key, dlSourceLabels[index], dlSourceUrls[index]);
+        }
+        var source = findDownloadSourceInRepo(key, lxcRepo);
+        if (source == null && builtinLxcRepo != lxcRepo)
+            source = findDownloadSourceInRepo(key, builtinLxcRepo);
+        return source;
+    }
+
+    /** Migrates old key-only preferences, while never replacing a saved URL. */
+    private void hydrateRememberedDownloadSource(@Nullable Repos.Repo repo) {
+        if (rememberedDlSourceKey.isEmpty()) return;
+        String name = rememberedDlSourceName;
+        String url = rememberedDlSourceUrl;
+        DownloadSource fallback = findDownloadSourceInRepo(rememberedDlSourceKey, repo);
+        if (fallback == null && builtinLxcRepo != repo)
+            fallback = findDownloadSourceInRepo(rememberedDlSourceKey, builtinLxcRepo);
+        if (SOURCE_CUSTOM.equals(rememberedDlSourceKey)) {
+            if (name.isEmpty()) name = getString(R.string.lxc_source_custom);
+            var customUrl = normalizeBaseUrl(inputCustomDlUrl.getText());
+            if (!customUrl.isEmpty()) url = customUrl;
+        } else if (fallback != null) {
+            if (name.isEmpty()) name = fallback.name;
+            if (url.isEmpty()) url = fallback.baseUrl;
+        }
+        if (name.isEmpty()) name = rememberedDlSourceKey;
+        rememberedDlSourceName = name;
+        rememberedDlSourceUrl = url;
+        sourcePrefs.edit()
+            .putString(PREF_DL_SOURCE_NAME, name)
+            .putString(PREF_DL_SOURCE_URL, url)
+            .apply();
+    }
+
+    private void applySourceSelection(@NonNull String metaKey, @NonNull String dlKey) {
+        int mi = findSourceIndex(metaSourceKeys, metaKey);
+        selectedMetaSourceKey = metaSourceKeys[mi];
+        dropdownMetaSource.setText(metaSourceLabels[mi]);
+        inputCustomMetaUrl.setVisibility(
+            selectedMetaSourceKey.equals(SOURCE_CUSTOM) ? VISIBLE : GONE);
+        int di = findSourceIndex(dlSourceKeys, dlKey);
+        selectedDlSourceKey = dlSourceKeys[di];
+        dropdownDlSource.setText(dlSourceLabels[di]);
+        inputCustomDlUrl.setVisibility(
+            selectedDlSourceKey.equals(SOURCE_CUSTOM) ? VISIBLE : GONE);
+    }
+
+    private void onUserChangedSource() {
+        boolean wasProbing = isProbingSources;
+        automaticMetadataRequest = false;
+        userOverrodeSourceProbe.set(true);
+        sourceProbeSettled.set(true);
+        rememberSourcePair(getSelectedMetaSourceKey(), getSelectedDlSourceKey());
+        if (!wasProbing) return;
+        isProbingSources = false;
+        isLoading = false;
+        setMetaIdle();
+    }
+
+    private void rememberSourcePair(@NonNull String metadataSource, @NonNull String downloadSource) {
+        DownloadSource source;
+        if (SOURCE_CUSTOM.equals(downloadSource)) {
+            source = new DownloadSource(
+                SOURCE_CUSTOM,
+                getString(R.string.lxc_source_custom),
+                normalizeBaseUrl(inputCustomDlUrl.getText())
+            );
+        } else {
+            source = findCurrentDownloadSource(downloadSource);
+        }
+        if (source == null) {
+            String previousName = downloadSource.equals(rememberedDlSourceKey)
+                ? rememberedDlSourceName : downloadSource;
+            String previousUrl = downloadSource.equals(rememberedDlSourceKey)
+                ? rememberedDlSourceUrl : "";
+            source = new DownloadSource(downloadSource, previousName, previousUrl);
+        }
+        rememberedDlSourceKey = source.key;
+        rememberedDlSourceName = source.name;
+        rememberedDlSourceUrl = source.baseUrl;
+        sourcePrefs.edit()
+            .putString(PREF_META_SOURCE, metadataSource)
+            .putString(PREF_DL_SOURCE, downloadSource)
+            .putString(PREF_DL_SOURCE_NAME, source.name)
+            .putString(PREF_DL_SOURCE_URL, source.baseUrl)
+            .apply();
+    }
+
+    @NonNull
+    private String normalizeBaseUrl(@Nullable String url) {
+        if (url == null) return "";
+        var result = url.trim();
+        while (result.endsWith("/") && !result.endsWith("://"))
+            result = result.substring(0, result.length() - 1);
+        return result;
     }
 
     @Nullable
     private String resolveSourceUrl(@NonNull String key) {
         if (lxcRepo == null) return null;
-        if (key.equals("official")) return lxcRepo.getUrl();
-        if (key.equals("custom")) return null;
+        if (key.equals(SOURCE_OFFICIAL)) return lxcRepo.getUrl();
+        if (key.equals(SOURCE_CUSTOM)) return null;
         var mirror = lxcRepo.getMirror(key);
         if (mirror == null) return null;
         return mirror.getRepoUrl(lxcRepo);
@@ -478,15 +1188,13 @@ private String resolveSourceUrl(@NonNull String key) {
     @NonNull
     private String getMetaBaseUrl() {
         var key = getSelectedMetaSourceKey();
-        if (key.equals("custom")) {
-            var url = inputCustomMetaUrl.getText().trim();
-            while (url.endsWith("/")) url = url.substring(0, url.length() - 1);
-            return url;
+        if (key.equals(SOURCE_CUSTOM)) {
+            return normalizeBaseUrl(inputCustomMetaUrl.getText());
         }
-        if (key.equals("classfun")) {
-            if (isClassFunApiAvailable)
+        if (key.equals(SOURCE_CLASSFUN)) {
+            if (isClassFunApiAvailable && apiManager != null)
                 return apiManager.getApiUrl("lxc_images_metadata");
-            key = "official";
+            return "";
         }
         var base = resolveSourceUrl(key);
         if (base == null) return "";
@@ -496,20 +1204,23 @@ private String getMetaBaseUrl() {
     @NonNull
     private String getDownloadBaseUrl() {
         var key = getSelectedDlSourceKey();
-        if (key.equals("custom")) {
-            var url = inputCustomDlUrl.getText().trim();
-            while (url.endsWith("/")) url = url.substring(0, url.length() - 1);
-            return url;
+        if (key.equals(SOURCE_CUSTOM)) {
+            return normalizeBaseUrl(inputCustomDlUrl.getText());
         }
-        return requireNonNullElse(resolveSourceUrl(key), "");
+        int index = indexOfSource(dlSourceKeys, key);
+        if (index >= 0 && dlSourceUrls != null) return dlSourceUrls[index];
+        if (key.equals(rememberedDlSourceKey)) return rememberedDlSourceUrl;
+        return "";
     }
 
     private void loadImages() {
         if (isLoading || isDownloading || !sourcesReady()) return;
         var baseUrl = getMetaBaseUrl();
         if (baseUrl.isEmpty()) {
-            if (getSelectedMetaSourceKey().equals("custom"))
+            if (getSelectedMetaSourceKey().equals(SOURCE_CUSTOM))
                 inputCustomMetaUrl.setError(getString(R.string.lxc_error_custom_url));
+            else
+                setMetaError(getString(R.string.lxc_error_source_unavailable));
             return;
         }
         inputCustomMetaUrl.setError(null);
@@ -549,8 +1260,10 @@ private void onImagesLoaded(@NonNull List<LxcImage> images, int count) {
     }
 
     private void setupImageDropdowns() {
-        dropdownDistro.setOnItemClickListener((p, v, pos, id) ->
-            onDistroSelected(dropdownDistro.getText()));
+        dropdownDistro.setOnItemClickListener((p, v, pos, id) -> {
+            onDistroSelected(dropdownDistro.getText());
+            autoSelectNewestImage();
+        });
         dropdownVersion.setOnItemClickListener((p, v, pos, id) ->
             onVersionSelected(dropdownVersion.getText()));
         dropdownVariant.setOnItemClickListener((p, v, pos, id) ->
@@ -559,6 +1272,38 @@ private void setupImageDropdowns() {
             onBuildSelected(dropdownBuild.getText()));
     }
 
+    /**
+     * Quick-create convenience: tapping a distro completes the rest of the
+     * image choice in one go - newest version, cloud-first variant, newest
+     * build - and every dropdown stays manually changeable afterwards. Only a
+     * real distro tap triggers this; a session restore replays the cascade
+     * with its saved values instead.
+     */
+    private void autoSelectNewestImage() {
+        if (!linuxVmMode) return;
+        String version = null;
+        for (var v : displayVersionToRelease.keySet()) version = v; // ascending: last = newest
+        if (version == null) return;
+        dropdownVersion.setText(version);
+        var variants = onVersionSelected(version);
+        if (variants.length == 0) return;
+        var variant = pickAutoVariant(variants);
+        dropdownVariant.setText(variant);
+        var builds = onVariantSelected(variant);
+        if (builds.length == 0) return;
+        var build = builds[0]; // build list is reverse-sorted: first = newest
+        dropdownBuild.setText(build);
+        onBuildSelected(build);
+    }
+
+    /** cloud boots leanest for a VM, default is the stock image; else the list's last entry. */
+    @NonNull
+    private static String pickAutoVariant(@NonNull String[] variants) {
+        for (var v : variants) if (v.equalsIgnoreCase("cloud")) return v;
+        for (var v : variants) if (v.equalsIgnoreCase("default")) return v;
+        return variants[variants.length - 1];
+    }
+
     private void populateDistros() {
         var distros = new TreeSet<>(String.CASE_INSENSITIVE_ORDER);
         for (var img : allImages) distros.add(img.getDistro());
@@ -588,7 +1333,8 @@ private void onDistroSelected(String distro) {
         setOutputEnabled(false);
     }
 
-    private void onVersionSelected(String displayVersion) {
+    /** Populates the variant dropdown; returns its items for the auto-select chain. */
+    private String[] onVersionSelected(String displayVersion) {
         var distro = dropdownDistro.getText();
         var release = displayVersionToRelease.get(displayVersion);
         if (release == null) release = displayVersion;
@@ -596,14 +1342,17 @@ private void onVersionSelected(String displayVersion) {
         for (var img : allImages)
             if (img.getDistro().equals(distro) && img.getDistroVersion().equals(release))
                 variants.add(img.getVariant());
-        setDropdownItems(dropdownVariant, variants.toArray(new String[0]), R.drawable.ic_package);
+        var items = variants.toArray(new String[0]);
+        setDropdownItems(dropdownVariant, items, R.drawable.ic_package);
         dropdownVariant.setEnabled(true);
         clearDropdown(dropdownBuild, R.drawable.ic_wrench);
         dropdownBuild.setEnabled(false);
         setOutputEnabled(false);
+        return items;
     }
 
-    private void onVariantSelected(String variant) {
+    /** Populates the build dropdown (newest first); returns its items for auto-select. */
+    private String[] onVariantSelected(String variant) {
         var distro = dropdownDistro.getText();
         var displayVersion = dropdownVersion.getText();
         var release = displayVersionToRelease.get(displayVersion);
@@ -615,9 +1364,11 @@ private void onVariantSelected(String variant) {
                 img.getVariant().equals(variant)
             ) builds.add(img.getBuildSerial());
         }
-        setDropdownItems(dropdownBuild, builds.toArray(new String[0]), R.drawable.ic_wrench);
+        var items = builds.toArray(new String[0]);
+        setDropdownItems(dropdownBuild, items, R.drawable.ic_wrench);
         dropdownBuild.setEnabled(true);
         setOutputEnabled(false);
+        return items;
     }
 
     private void onBuildSelected(String build) {
@@ -641,6 +1392,17 @@ private void onBuildSelected(String build) {
 
     private void showOutput(@NonNull LxcImage img) {
         setOutputEnabled(true);
+        if (linuxVmMode) {
+            if (inputVmName.getText().isEmpty())
+                inputVmName.setText(defaultLinuxVmName(img));
+            // Offer a generated default, but never replace what the user typed
+            // (a session restore re-applies the saved password right after this).
+            if (inputVmRootPassword.getText().isEmpty())
+                inputVmRootPassword.setText(generateGroupedPassword());
+            kernelAnalysis.setVisibility(VISIBLE);
+            kernelAnalysis.reset();
+            return;
+        }
         inputFilename.setText(img.getDefaultFileName());
         tvInfoSize.setText(getString(R.string.lxc_info_size, formatSize(img.getSize())));
         var downloadUrl = pathJoin(getDownloadBaseUrl(), img.getDownloadPath());
@@ -651,6 +1413,19 @@ private void showOutput(@NonNull LxcImage img) {
         kernelAnalysis.reset();
     }
 
+    @NonNull
+    private String defaultLinuxVmName(@NonNull LxcImage image) {
+        var base = fmt("%s-%s", image.getDistro(), image.getDistroVersion())
+            .replace(":", "-");
+        if (!checkFileName(base)) base = "Linux-VM";
+        var store = new VMStore();
+        store.load(this);
+        if (store.isNameUnique(base)) return base;
+        int suffix = 2;
+        while (!store.isNameUnique(fmt("%s-%d", base, suffix))) suffix++;
+        return fmt("%s-%d", base, suffix);
+    }
+
     private void hideOutput() {
         selectedImage = null;
         setOutputEnabled(false);
@@ -669,6 +1444,10 @@ private void doImport() {
             ).show();
             return;
         }
+        if (linuxVmMode) {
+            doLinuxVmDownload();
+            return;
+        }
         var name = inputFilename.getText();
         if (name.isEmpty()) {
             inputFilename.setError(getString(R.string.lxc_error_name_empty));
@@ -681,9 +1460,16 @@ private void doImport() {
             return;
         }
         inputFolder.setError(null);
+        var resetPassword = inputResetPassword.getText();
+        if (!resetPassword.isEmpty() && !isShellSafePassword(resetPassword)) {
+            inputResetPassword.setError(getString(
+                R.string.change_password_error_unsafe, SHELL_SAFE_PASSWORD_SYMBOLS));
+            return;
+        }
+        inputResetPassword.setError(null);
         var downloadBaseUrl = getDownloadBaseUrl();
         if (downloadBaseUrl.isEmpty()) {
-            if (getSelectedDlSourceKey().equals("custom"))
+            if (getSelectedDlSourceKey().equals(SOURCE_CUSTOM))
                 inputCustomDlUrl.setError(getString(R.string.lxc_error_custom_url));
             return;
         }
@@ -699,6 +1485,96 @@ private void doImport() {
         notifPermission.ensureThen(() -> startDownload(downloadUrl));
     }
 
+    private void doLinuxVmDownload() {
+        var vmName = inputVmName.getText();
+        inputVmName.setError(null);
+        if (vmName.isEmpty()) {
+            inputVmName.setError(getString(R.string.create_vm_error_name_empty));
+            return;
+        }
+        if (!checkFileName(vmName)) {
+            inputVmName.setError(getString(R.string.create_vm_error_name_invalid));
+            return;
+        }
+        var vmStore = new VMStore();
+        vmStore.load(this);
+        if (!vmStore.isNameUnique(vmName)) {
+            inputVmName.setError(getString(R.string.create_vm_error_name_duplicate));
+            return;
+        }
+        inputVmCpu.setError(null);
+        inputVmMemory.setError(null);
+        inputVmDiskSize.setError(null);
+        final long cpu;
+        final long memoryMb;
+        final long diskBytes;
+        try {
+            if (!inputVmCpu.isInputValid() || !inputVmMemory.isInputValid()
+                || !inputVmDiskSize.isInputValid()) throw new NumberFormatException();
+            cpu = inputVmCpu.getValue();
+            memoryMb = inputVmMemory.getValue(SizeUnit.MB);
+            diskBytes = inputVmDiskSize.getValue();
+        } catch (Exception e) {
+            if (!inputVmCpu.isInputValid())
+                inputVmCpu.setError(getString(R.string.create_vm_error_invalid_number));
+            if (!inputVmMemory.isInputValid())
+                inputVmMemory.setError(getString(R.string.create_vm_error_invalid_number));
+            if (!inputVmDiskSize.isInputValid())
+                inputVmDiskSize.setError(getString(R.string.create_vm_error_invalid_number));
+            return;
+        }
+        var password = inputVmRootPassword.getText();
+        inputVmRootPassword.setError(null);
+        if (password.isEmpty()) {
+            inputVmRootPassword.setError(getString(R.string.change_password_error_empty));
+            return;
+        }
+        if (!isShellSafePassword(password)) {
+            inputVmRootPassword.setError(getString(
+                R.string.change_password_error_unsafe, SHELL_SAFE_PASSWORD_SYMBOLS));
+            return;
+        }
+        if (!selectedVmNetworkId.isEmpty()) {
+            try {
+                var networks = new NetworkStore();
+                networks.load(this);
+                if (networks.findById(UUID.fromString(selectedVmNetworkId)) == null)
+                    throw new IllegalArgumentException("network missing");
+            } catch (Exception e) {
+                Toast.makeText(
+                    this, R.string.linux_vm_network_unavailable, LENGTH_SHORT).show();
+                setupVmNetworkDropdown();
+                return;
+            }
+        }
+        var downloadBaseUrl = getDownloadBaseUrl();
+        if (downloadBaseUrl.isEmpty()) {
+            if (getSelectedDlSourceKey().equals(SOURCE_CUSTOM))
+                inputCustomDlUrl.setError(getString(R.string.lxc_error_custom_url));
+            return;
+        }
+        inputCustomDlUrl.setError(null);
+        var image = selectedImage;
+        if (image == null) return;
+        var name = image.getDefaultFileName();
+        var folder = pathJoin(externalPath(), "DroidVM", vmName);
+        var destPath = pathJoin(folder, name);
+        if (new File(destPath).exists()) {
+            inputVmName.setError(getString(R.string.import_url_error_file_exists));
+            return;
+        }
+        pendingLinuxVmName = vmName;
+        pendingLinuxRootPassword = password;
+        pendingLinuxNetworkId = selectedVmNetworkId;
+        pendingLinuxCpu = cpu;
+        pendingLinuxMemoryMb = memoryMb;
+        pendingLinuxDiskBytes = diskBytes;
+        downloadName = name;
+        downloadFolder = folder;
+        var downloadUrl = pathJoin(downloadBaseUrl, image.getDownloadPath());
+        notifPermission.ensureThen(() -> startDownload(downloadUrl));
+    }
+
     private void startDownload(String url) {
         isDownloading = true;
         captureSession();
@@ -712,7 +1588,7 @@ private void startDownload(String url) {
         // enqueue() resolves redirects (network I/O), so run it off the main thread.
         runOnPool(() -> {
             long id = DiskDownloadManager.enqueue(
-                this, url, LXC_USER_AGENT, folder, name, ImportLxcImagesActivity.class);
+                this, url, LXC_USER_AGENT, folder, name, getClass());
             runOnUiThread(() -> onDownloadEnqueued(id));
         });
     }
@@ -725,18 +1601,22 @@ private void onDownloadEnqueued(long id) {
         if (!isDownloading) {
             // Cancelled while still enqueueing.
             DiskDownloadManager.cancel(id);
+            DiskDownloadManager.release(id);
             return;
         }
         currentDownloadId = id;
+        var s = getSession();
+        if (s != null) s.downloadId = id;
+        DiskDownloadManager.retainUntilReleased(id);
         DiskDownloadService.start(this, id);
-        if (!isDestroyed()) pollHandler.post(pollRunnable);
+        if (activityStarted && !isDestroyed()) pollHandler.post(pollRunnable);
     }
 
     /** Mirrors the download's live state into the on-screen widget. */
     private final Runnable pollRunnable = new Runnable() {
         @Override
         public void run() {
-            if (currentDownloadId < 0) return;
+            if (!activityStarted || currentDownloadId < 0) return;
             var p = DiskDownloadManager.query(currentDownloadId);
             if (p == null) {
                 cancelDownload(); // job gone (cancelled elsewhere)
@@ -771,29 +1651,243 @@ private void onDownloadSucceeded() {
         currentDownloadId = -1;
         pollHandler.removeCallbacks(pollRunnable);
         downloadWidget.markExternalFinished();
-        var result = DiskDownloadManager.getResult(id);
+        var result = DiskDownloadManager.consumeResult(id);
         if (result == null) {
+            clearSessionDownloadId(id);
+            DiskDownloadManager.release(id);
             finish();
             return;
         }
-        Toast.makeText(
-            this,
-            getString(R.string.lxc_import_success, result.name),
-            LENGTH_SHORT
-        ).show();
+        clearSessionDownloadId(id);
+        if (linuxVmMode) {
+            onLinuxDownloadSucceeded(result);
+            return;
+        }
+        var resetPassword = inputResetPassword.getText();
+        inputResetPassword.setText("");
+        var s = getSession();
+        if (s != null) s.resetPassword = "";
         var resultData = new Intent();
         resultData.putExtra("result_disk_path", pathJoin(result.folder, result.name));
         setResult(RESULT_OK, resultData);
-        if (result.diskId != null && DiskFormat.fromFilename(result.name) == DiskFormat.QCOW2)
-            startOptimize(this, result.diskId);
+        boolean hasPasswordReset = result.diskId != null && !resetPassword.isEmpty();
+        if (hasPasswordReset) {
+            pendingPasswordDiskId = result.diskId;
+            pendingResetPassword = resetPassword;
+            pendingImportName = result.name;
+        } else {
+            showImportSuccess(result.name);
+        }
+        if (result.diskId != null && DiskFormat.fromFilename(result.name) == DiskFormat.QCOW2) {
+            // Resolve the backing chain first (may prompt once), then rewrite only when the
+            // compression can't boot on crosvm. A requested password reset waits for a successful
+            // rewrite before starting its visual operation.
+            var diskId = result.diskId;
+            var diskPath = pathJoin(result.folder, result.name);
+            if (!hasPasswordReset) {
+                BackingChainLinker.link(this, diskId, () ->
+                    startOptimizeAfterImport(this, diskId, diskPath, this::finish));
+            } else {
+                BackingChainLinker.link(this, diskId, () ->
+                    startOptimizeAfterImportForResult(
+                        this,
+                        diskId,
+                        diskPath,
+                        optimizeLauncher,
+                        this::launchPasswordAfterImport,
+                        this::completePendingImport));
+            }
+            return;
+        }
+        if (hasPasswordReset) {
+            launchPasswordAfterImport();
+            return;
+        }
+        finish();
+    }
+
+    private void onLinuxDownloadSucceeded(@NonNull DiskDownloadManager.Result result) {
+        if (result.diskId == null) {
+            finishLinuxVmFlow(false);
+            return;
+        }
+        pendingLinuxDiskId = result.diskId;
+        inputVmRootPassword.setText("");
+        var s = getSession();
+        if (s != null) s.vmRootPassword = "";
+        // Published images usually carry compressed clusters, but the VM this
+        // flow creates boots on crosvm, which reads only uncompressed qcow2.
+        // Link the chain and rewrite now, inside the wait the user already
+        // expects, instead of leaving it to the pre-start guard's "start
+        // anyway" countdown. Declining the rewrite prompt continues unconverted
+        // (that guard still stands); a rewrite that ran and failed aborts.
+        var diskId = result.diskId;
+        var diskPath = pathJoin(result.folder, result.name);
+        BackingChainLinker.link(this, diskId, () ->
+            startOptimizeAfterImportForResult(
+                this,
+                diskId,
+                diskPath,
+                linuxOptimizeLauncher,
+                this::launchLinuxResize,
+                this::launchLinuxResize));
+    }
+
+    private void launchLinuxResize() {
+        var diskId = pendingLinuxDiskId;
+        if (diskId == null) {
+            finishLinuxVmFlow(false);
+            return;
+        }
+        try {
+            var task = new JSONObject();
+            task.put("action", "resize");
+            task.put("size", String.valueOf(pendingLinuxDiskBytes));
+            var intent = cn.classfun.droidvm.ui.disk.operation.DiskOperationActivity.createIntent(
+                this, diskId, task);
+            intent.putExtra(
+                cn.classfun.droidvm.ui.disk.operation.DiskOperationActivity.EXTRA_AUTOFINISH,
+                true);
+            linuxResizeLauncher.launch(intent);
+        } catch (Exception e) {
+            Log.e(TAG, "Failed to start Linux VM disk resize", e);
+            finishLinuxVmFlow(false);
+        }
+    }
+
+    private void launchLinuxMaintenance() {
+        var diskId = pendingLinuxDiskId;
+        if (diskId == null || pendingLinuxRootPassword.isEmpty()) {
+            finishLinuxVmFlow(false);
+            return;
+        }
+        try {
+            var diskStore = new DiskStore();
+            diskStore.load(this);
+            var disk = diskStore.findById(diskId);
+            if (disk == null) throw new IllegalStateException("Downloaded disk is not registered");
+            var agentVM = new AgentVM(VMBackend.QEMU, VMHypervisor.SOFT);
+            agentVM.setOperationConsole("uart", "/dev/ttyAMA0");
+            var password = new PasswordAction(agentVM);
+            password.setPassword(pendingLinuxRootPassword);
+            password.setChangeNormalUsers(false);
+            new AutoGrowAction(agentVM);
+            agentVM.addDisk(disk);
+            var intent = AgentOperationActivity.createIntent(this, agentVM);
+            intent.putExtra(AgentOperationActivity.EXTRA_AUTOFINISH_ON_SUCCESS, true);
+            pendingLinuxRootPassword = "";
+            linuxMaintenanceLauncher.launch(intent);
+        } catch (Exception e) {
+            Log.e(TAG, "Failed to start Linux VM maintenance", e);
+            finishLinuxVmFlow(false);
+        }
+    }
+
+    private void createPendingLinuxVm() {
+        var diskId = pendingLinuxDiskId;
+        if (diskId == null || pendingLinuxVmName.isEmpty()) {
+            finishLinuxVmFlow(false);
+            return;
+        }
+        try {
+            var diskStore = new DiskStore();
+            diskStore.load(this);
+            var disk = diskStore.findById(diskId);
+            if (disk == null) throw new IllegalStateException("Downloaded disk is not registered");
+            var config = VMConfig.createWithCustomizeDefaults(this);
+            config.setName(pendingLinuxVmName);
+            config.item.set("cpu_count", pendingLinuxCpu);
+            config.item.set("memory_mb", pendingLinuxMemoryMb);
+            var disks = DataItem.newArray();
+            var diskItem = DataItem.newObject();
+            diskItem.set("path", disk.getFullPath());
+            diskItem.set("bus", DiskBus.VIRTIO);
+            diskItem.set("readonly", false);
+            disks.append(diskItem);
+            config.item.set("disks", disks);
+            var networks = DataItem.newArray();
+            if (!pendingLinuxNetworkId.isEmpty()) {
+                var network = DataItem.newObject();
+                network.set("network_id", pendingLinuxNetworkId);
+                network.set("mac_address", generateRandomMac());
+                networks.append(network);
+            }
+            config.item.set("networks", networks);
+            var vmStore = new VMStore();
+            vmStore.load(this);
+            vmStore.add(config);
+            if (!vmStore.save(this))
+                throw new IllegalStateException("Failed to save VM configuration");
+            var result = new Intent();
+            result.putExtra("result_vm_id", config.getId().toString());
+            result.putExtra("result_disk_path", disk.getFullPath());
+            setResult(RESULT_OK, result);
+            Toast.makeText(
+                this,
+                getString(R.string.linux_vm_create_success, config.getName()),
+                LENGTH_SHORT
+            ).show();
+            finishLinuxVmFlow(true);
+        } catch (Exception e) {
+            Log.e(TAG, "Failed to create Linux VM", e);
+            finishLinuxVmFlow(false);
+        }
+    }
+
+    private void finishLinuxVmFlow(boolean success) {
+        pendingLinuxDiskId = null;
+        pendingLinuxVmName = "";
+        pendingLinuxRootPassword = "";
+        pendingLinuxNetworkId = "";
+        if (!success && !isFinishing())
+            Toast.makeText(this, R.string.linux_vm_create_failed, LENGTH_SHORT).show();
+        finish();
+    }
+
+    private void launchPasswordAfterImport() {
+        var diskId = pendingPasswordDiskId;
+        var password = pendingResetPassword;
+        pendingPasswordDiskId = null;
+        pendingResetPassword = "";
+        if (diskId == null || password.isEmpty() || isFinishing()) {
+            completePendingImport();
+            return;
+        }
+        try {
+            passwordLauncher.launch(
+                ChangePasswordActivity.createQuickIntent(this, diskId, password));
+        } catch (Exception e) {
+            Log.e(TAG, "Failed to start quick password change", e);
+            completePendingImport();
+        }
+    }
+
+    private void completePendingImport() {
+        var name = pendingImportName;
+        pendingPasswordDiskId = null;
+        pendingResetPassword = "";
+        pendingImportName = "";
+        if (!name.isEmpty()) showImportSuccess(name);
         finish();
     }
 
+    private void showImportSuccess(@NonNull String name) {
+        Toast.makeText(
+            this,
+            getString(R.string.lxc_import_success, name),
+            LENGTH_SHORT
+        ).show();
+    }
+
     private void cancelDownload() {
         long id = currentDownloadId;
         currentDownloadId = -1;
         pollHandler.removeCallbacks(pollRunnable);
-        if (id >= 0) DiskDownloadManager.cancel(id);
+        if (id >= 0) {
+            DiskDownloadManager.cancel(id);
+            DiskDownloadManager.release(id);
+        }
+        clearSessionDownloadId(id);
         downloadWidget.markExternalCancelled();
         resetAfterDownloadStop();
     }
@@ -802,11 +1896,21 @@ private void onDownloadFailed(@Nullable String reason) {
         long id = currentDownloadId;
         currentDownloadId = -1;
         pollHandler.removeCallbacks(pollRunnable);
-        if (id >= 0) DiskDownloadManager.cancel(id);
+        if (id >= 0) {
+            DiskDownloadManager.cancel(id);
+            DiskDownloadManager.release(id);
+        }
+        clearSessionDownloadId(id);
         downloadWidget.markExternalFailed(reason);
         resetAfterDownloadStop();
     }
 
+    private void clearSessionDownloadId(long id) {
+        var s = getSession();
+        if (s != null && (id < 0 || s.downloadId == id))
+            sessions.remove(sessionKey(), s);
+    }
+
     private void resetAfterDownloadStop() {
         isDownloading = false;
         setInputsEnabled(true);
@@ -826,6 +1930,13 @@ private void setInputsEnabled(boolean enabled) {
         dropdownBuild.setEnabled(enabled);
         inputFilename.setEnabled(enabled);
         inputFolder.setEnabled(enabled);
+        inputResetPassword.setEnabled(enabled);
+        inputVmName.setEnabled(enabled);
+        inputVmCpu.setEnabled(enabled);
+        inputVmMemory.setEnabled(enabled);
+        inputVmDiskSize.setEnabled(enabled);
+        inputVmRootPassword.setEnabled(enabled);
+        dropdownVmNetwork.setEnabled(enabled);
         btnLoad.setEnabled(enabled);
     }
 
@@ -853,17 +1964,24 @@ private void setImageSectionEnabled(boolean enabled) {
     }
 
     private void setOutputEnabled(boolean enabled) {
+        if (linuxVmMode) {
+            setLinuxSettingsEnabled(enabled);
+            return;
+        }
         float alpha = enabled ? 1.0f : 0.38f;
         dividerOutput.setAlpha(alpha);
         tvOutputHeader.setAlpha(alpha);
         inputFilename.setAlpha(enabled ? 1.0f : alpha);
         inputFolder.setAlpha(enabled ? 1.0f : alpha);
+        inputResetPassword.setAlpha(enabled ? 1.0f : alpha);
         cardInfo.setAlpha(alpha);
         inputFilename.setEnabled(enabled);
         inputFolder.setEnabled(enabled);
+        inputResetPassword.setEnabled(enabled);
         fabImport.setVisibility(enabled ? VISIBLE : GONE);
         if (!enabled) {
             inputFilename.setText("");
+            inputResetPassword.setText("");
             tvInfoSize.setText("");
             tvInfoPath.setText("");
             cardInfo.setVisibility(GONE);
@@ -872,24 +1990,37 @@ private void setOutputEnabled(boolean enabled) {
         }
     }
 
+    private void setLinuxSettingsEnabled(boolean enabled) {
+        float alpha = enabled ? 1.0f : 0.38f;
+        dividerSettings.setAlpha(alpha);
+        tvSettingsHeader.setAlpha(alpha);
+        inputVmName.setAlpha(enabled ? 1.0f : alpha);
+        inputVmCpu.setAlpha(enabled ? 1.0f : alpha);
+        inputVmMemory.setAlpha(enabled ? 1.0f : alpha);
+        inputVmDiskSize.setAlpha(enabled ? 1.0f : alpha);
+        inputVmRootPassword.setAlpha(enabled ? 1.0f : alpha);
+        dropdownVmNetwork.setAlpha(enabled ? 1.0f : alpha);
+        inputVmName.setEnabled(enabled);
+        inputVmCpu.setEnabled(enabled);
+        inputVmMemory.setEnabled(enabled);
+        inputVmDiskSize.setEnabled(enabled);
+        inputVmRootPassword.setEnabled(enabled);
+        dropdownVmNetwork.setEnabled(enabled);
+        fabImport.setVisibility(enabled ? VISIBLE : GONE);
+        if (!enabled) {
+            inputVmName.setText("");
+            inputVmRootPassword.setText("");
+            kernelAnalysis.setVisibility(GONE);
+            selectedImage = null;
+        }
+    }
+
     private String getSelectedMetaSourceKey() {
-        if (metaSourceLabels == null || metaSourceKeys == null)
-            return isClassFunApiAvailable ? "classfun" : "official";
-        var label = dropdownMetaSource.getText();
-        for (int i = 0; i < metaSourceLabels.length; i++)
-            if (metaSourceLabels[i].equals(label))
-                return metaSourceKeys[i];
-        return isClassFunApiAvailable ? "classfun" : "official";
+        return selectedMetaSourceKey;
     }
 
     private String getSelectedDlSourceKey() {
-        if (dlSourceLabels == null || dlSourceKeys == null)
-            return "official";
-        var label = dropdownDlSource.getText();
-        for (int i = 0; i < dlSourceLabels.length; i++)
-            if (dlSourceLabels[i].equals(label))
-                return dlSourceKeys[i];
-        return "official";
+        return selectedDlSourceKey;
     }
 
     private void setDropdownItems(@NonNull DropdownRowWidget dropdown, String[] items, int icon) {
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/disk/operation/DiskOperationActivity.java b/app/src/main/java/cn/classfun/droidvm/ui/disk/operation/DiskOperationActivity.java
index 7c0e51f99..21c5d2d39 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/disk/operation/DiskOperationActivity.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/disk/operation/DiskOperationActivity.java
@@ -6,8 +6,7 @@
 import static android.view.View.GONE;
 import static android.view.View.VISIBLE;
 import static cn.classfun.droidvm.lib.utils.FileUtils.findExecute;
-import static cn.classfun.droidvm.lib.utils.ImageUtils.getImageInfo;
-import static cn.classfun.droidvm.lib.utils.ImageUtils.hasCompressedClusters;
+import static cn.classfun.droidvm.lib.utils.ImageUtils.hasBackingFile;
 import static cn.classfun.droidvm.lib.utils.ProcessUtils.SIGHUP;
 import static cn.classfun.droidvm.lib.utils.ProcessUtils.shellKillProcess;
 import static cn.classfun.droidvm.lib.utils.StringUtils.basename;
@@ -26,7 +25,9 @@
 import android.widget.TextView;
 
 import androidx.activity.OnBackPressedCallback;
+import androidx.activity.result.ActivityResultLauncher;
 import androidx.annotation.NonNull;
+import androidx.annotation.Nullable;
 import androidx.appcompat.app.AppCompatActivity;
 
 import com.google.android.material.appbar.MaterialToolbar;
@@ -44,9 +45,16 @@
 import cn.classfun.droidvm.R;
 import cn.classfun.droidvm.lib.store.disk.DiskConfig;
 import cn.classfun.droidvm.lib.store.disk.DiskStore;
+import cn.classfun.droidvm.lib.utils.RunUtils;
 import cn.classfun.droidvm.lib.ui.termux.SimpleTerminalSessionClient;
 import cn.classfun.droidvm.lib.ui.termux.TerminalFonts;
 import cn.classfun.droidvm.lib.ui.termux.SimpleTerminalViewClient;
+import cn.classfun.droidvm.ui.disk.create.DiskCompress;
+import cn.classfun.droidvm.lib.store.vm.VMStore;
+import cn.classfun.droidvm.ui.disk.action.DiskDependencyUpdater;
+import cn.classfun.droidvm.ui.disk.tree.AttachmentCursors;
+import cn.classfun.droidvm.ui.disk.tree.CursorPlan;
+import cn.classfun.droidvm.ui.disk.tree.TreeShape;
 import cn.classfun.droidvm.ui.main.settings.MainSettingsFragment;
 
 public final class DiskOperationActivity extends AppCompatActivity {
@@ -58,6 +66,8 @@ public final class DiskOperationActivity extends AppCompatActivity {
     public static final String EXTRA_DISK_NAME = "disk_name";
     /** On success, {@code setResult(RESULT_OK)} and finish so a launcher can chain. */
     public static final String EXTRA_AUTOFINISH = "autofinish";
+    /** Explicit in-app activity to launch only after this disk operation succeeds. */
+    public static final String EXTRA_SUCCESS_INTENT = "success_intent";
     private final Handler mainHandler = new Handler(Looper.getMainLooper());
     private TerminalView terminalView;
     private ProgressBar progressSpinner;
@@ -68,7 +78,9 @@ public final class DiskOperationActivity extends AppCompatActivity {
     private MaterialToolbar toolbar;
     private TerminalSession session;
     private boolean finished = false;
+    private boolean postProcessing = false;
     private boolean autoFinish = false;
+    private Intent successIntent = null;
     private String outputPath = null;
     private String taskAction = null;
     private DiskStore diskStore = null;
@@ -132,19 +144,81 @@ public static Intent optimizeForResultIntent(
         return intent;
     }
 
-    public static void startOptimize(
-        @NonNull Context context,
-        @NonNull UUID diskId
+    /**
+     * Post-import hook: optimize only when the imported image's compression isn't in
+     * {@link DiskCompress#CROSVM_SUPPORTED} (an image crosvm already boots needs no rewrite).
+     * The compression check runs off the main thread; {@code done} always runs on the main
+     * thread - after launching the optimize, after skipping it, or on prompt cancel.
+     */
+    public static void startOptimizeAfterImport(
+        @NonNull android.app.Activity activity,
+        @NonNull UUID diskId,
+        @NonNull String path,
+        @NonNull Runnable done
     ) {
-        try {
-            var obj = new JSONObject();
-            obj.put("action", "convert");
-            obj.put("keep_compress", true); // preserve compression when optimizing
-            var intent = createIntent(context, diskId, obj);
-            context.startActivity(intent);
-        } catch (Exception e) {
-            Log.e(TAG, "Failed to start optimize activity", e);
-        }
+        startOptimizeAfterImportImpl(activity, diskId, path, null, done, done);
+    }
+
+    /**
+     * Result-aware variant for callers that must continue only after optimization succeeds.
+     * {@code onSkipped} runs when the image already needs no rewrite; an optimization that is
+     * required is launched through {@code launcher} and reports its outcome there. Cancelling the
+     * compression prompt or failing to launch calls {@code onCancelled}.
+     */
+    public static void startOptimizeAfterImportForResult(
+        @NonNull android.app.Activity activity,
+        @NonNull UUID diskId,
+        @NonNull String path,
+        @NonNull ActivityResultLauncher<Intent> launcher,
+        @NonNull Runnable onSkipped,
+        @NonNull Runnable onCancelled
+    ) {
+        startOptimizeAfterImportImpl(
+            activity, diskId, path, launcher, onSkipped, onCancelled);
+    }
+
+    private static void startOptimizeAfterImportImpl(
+        @NonNull android.app.Activity activity,
+        @NonNull UUID diskId,
+        @NonNull String path,
+        @Nullable ActivityResultLauncher<Intent> launcher,
+        @NonNull Runnable onSkipped,
+        @NonNull Runnable onCancelled
+    ) {
+        runOnPool(() -> {
+            var supported = DiskCompress.detect(path).isCrosvmSupported();
+            // An imported overlay is skipped outright: it is mostly a header (nothing worth
+            // rewriting), and its chain gets checked by the pre-start guard instead.
+            var isOverlay = hasBackingFile(path);
+            activity.runOnUiThread(() -> {
+                if (activity.isFinishing()) {
+                    onCancelled.run();
+                    return;
+                }
+                if (supported || isOverlay) {
+                    onSkipped.run();
+                    return;
+                }
+                OptimizeCompression.resolve(activity, onCancelled, compress -> {
+                    try {
+                        var obj = new JSONObject();
+                        obj.put("action", "convert");
+                        obj.put("compress", compress.value());
+                        var intent = createIntent(activity, diskId, obj);
+                        if (launcher == null) {
+                            activity.startActivity(intent);
+                            onSkipped.run();
+                        } else {
+                            intent.putExtra(EXTRA_AUTOFINISH, true);
+                            launcher.launch(intent);
+                        }
+                    } catch (Exception e) {
+                        Log.e(TAG, "Failed to start optimize activity", e);
+                        onCancelled.run();
+                    }
+                });
+            });
+        });
     }
 
     public static void startConvert(
@@ -196,6 +270,7 @@ public void handleOnBackPressed() {
         var diskIdStr = intent.getStringExtra(EXTRA_DISK_ID);
         var taskJsonStr = intent.getStringExtra(EXTRA_TASK_JSON);
         autoFinish = intent.getBooleanExtra(EXTRA_AUTOFINISH, false);
+        successIntent = intent.getParcelableExtra(EXTRA_SUCCESS_INTENT, Intent.class);
         if (taskJsonStr == null) {
             Log.e(TAG, "Missing task JSON");
             finish();
@@ -231,7 +306,6 @@ public void handleOnBackPressed() {
             final String cmd;
             try {
                 var task = new JSONObject(taskJsonStr);
-                applyKeepCompress(getApplicationContext(), task, diskPath);
                 var gen = new ImageCommandGenerate(diskStore);
                 gen.setCpuAffinity(
                     MainSettingsFragment.getQemuImgCpuAffinity(getApplicationContext()));
@@ -249,38 +323,125 @@ public void handleOnBackPressed() {
     }
 
     /**
-     * When a task opts into keep-compress (the user-facing "optimize", not the
-     * pre-start decompress in {@link #optimizeForResultIntent}), re-compress the
-     * rewritten image with the algorithm the source uses instead of rewriting it
-     * uncompressed. Whether the source is compressed at all is decided by
-     * qemu-img's real {@code compressed-clusters} count
-     * ({@code ImageUtils.hasCompressedClusters}); the qcow2 header's
-     * {@code compression-type} is only read to pick zlib vs
-     * zstd, because that header field reads "zlib" for every v3 image and so
-     * cannot on its own distinguish an uncompressed disk from a compressed one.
-     * An uncompressed source (raw, or a v3 qcow2 with no compressed data) is left
-     * alone. An explicit {@code compress} in the task always wins, the user can
-     * turn this off globally in settings, and any detection failure falls through
-     * to the default (uncompressed) rewrite.
+     * After a successful {@code qemu-img commit}: the base's logical content now equals the
+     * overlay's, so re-pointing the overlay's children and VM attachments at the base is a
+     * lossless swap. Order matters only in that the overlay is deleted LAST - until then both
+     * "points at overlay" and "points at base" are valid views, so a failure at any step leaves
+     * a consistent, recoverable state.
      */
-    private static void applyKeepCompress(
-        @NonNull Context ctx, @NonNull JSONObject task, @NonNull String path) {
-        if (!task.optBoolean("keep_compress", false) || task.has("compress"))
-            return;
-        if (!MainSettingsFragment.isKeepCompressOnOptimizeEnabled(ctx))
-            return;
+    private boolean finishCommit() {
+        try {
+            var store = new DiskStore();
+            if (!store.load(this)) {
+                Log.e(TAG, "commit finished but disk registry could not be loaded; keeping overlay");
+                return false;
+            }
+            var overlay = store.findById(diskConfig.getId());
+            if (overlay == null) return false;
+            var parent = store.parentOf(overlay);
+            if (parent == null) {
+                Log.w(TAG, "commit finished but overlay has no registered parent");
+                return false;
+            }
+            var overlayPath = overlay.getFullPath();
+            var parentPath = parent.getFullPath();
+            var parentFormat = detectFormat(parentPath);
+            // Children of the committed overlay re-base onto the (now content-identical)
+            // parent: header-only rewrite, then the registry link. A partial failure is still
+            // consistent: already-moved children point at the parent and the overlay remains for
+            // children that were not moved.
+            for (var child : store.childrenOf(overlay.getId())) {
+                var result = RunUtils.runList(
+                    findQemuImg(), "rebase", "-u",
+                    "-b", parentPath, "-F", parentFormat, child.getFullPath());
+                if (!result.isSuccess()) {
+                    result.printLog(TAG);
+                    if (!store.save(this))
+                        Log.e(TAG, "Failed to persist completed child rebases");
+                    Log.e(TAG, fmt(
+                        "Keeping committed overlay after child rebase failure: %s",
+                        child.getFullPath()));
+                    return false;
+                }
+                child.setParentId(parent.getId());
+            }
+            // Persist child links before changing attachments or deleting the overlay file.
+            if (!store.save(this)) {
+                Log.e(TAG, "Keeping committed overlay: failed to save child links");
+                return false;
+            }
+            // Only slots pointing directly at the merged overlay move to its parent (the
+            // children were re-linked above, so their slots stay exactly where they are). A slot
+            // landing on a base that still has overlays, or joining another VM on the same
+            // disk, becomes read-only - the same rule the branch panel showed beforehand.
+            var vmStore = new VMStore();
+            vmStore.load(vmStore, this);
+            var shape = TreeShape.of(store);
+            var cursors = AttachmentCursors.collectPersisted(
+                store, vmStore, shape.familyOf(overlay.getId()), null, java.util.List.of());
+            var plan = CursorPlan.reconcile(cursors, java.util.List.of(),
+                shape, shape.withMerged(overlay.getId()));
+            if (!DiskDependencyUpdater.applyPlan(this, plan)) {
+                Log.e(TAG, "Keeping committed overlay: failed to save VM attachments");
+                return false;
+            }
+            store.removeById(overlay.getId());
+            if (!store.save(this)) {
+                Log.e(TAG, "Keeping committed overlay: failed to remove registry entry");
+                return false;
+            }
+            var removed = RunUtils.runList("rm", "-f", overlayPath);
+            if (!removed.isSuccess()) {
+                removed.printLog(TAG);
+                return false;
+            }
+            return true;
+        } catch (Exception e) {
+            Log.e(TAG, "commit follow-up failed", e);
+            return false;
+        }
+    }
+
+    /**
+     * After a successful flatten the replacement image uses the same path and contains the whole
+     * backing-chain view. Child backing headers and every VM slot therefore remain valid and must
+     * not move; only this image's parent registry link is cleared.
+     */
+    private boolean finishFlatten() {
         try {
-            if (!hasCompressedClusters(path))
-                return; // nothing actually compressed -- rewrite uncompressed
-            var info = getImageInfo(path);
-            var fmtSpecific = info.optJSONObject("format-specific");
-            var data = fmtSpecific == null ? null : fmtSpecific.optJSONObject("data");
-            var type = data == null ? "" : data.optString("compression-type", "");
-            // qemu compression-type zstd stays zstd; zlib (and anything else) -> deflate.
-            task.put("compress", "zstd".equals(type) ? "zstd" : "deflate");
+            var store = new DiskStore();
+            if (!store.load(this)) {
+                Log.e(TAG, "flatten finished but disk registry could not be loaded");
+                return false;
+            }
+            var overlay = store.findById(diskConfig.getId());
+            if (overlay == null) return false;
+            overlay.setParentId(null);
+            if (!store.save(this)) {
+                Log.e(TAG, "flatten finished but standalone registry link could not be saved");
+                return false;
+            }
+            return true;
         } catch (Exception e) {
-            Log.w(TAG, "keep-compress detection failed", e);
+            Log.e(TAG, "flatten follow-up failed", e);
+            return false;
+        }
+    }
+
+    @NonNull
+    private static String detectFormat(@NonNull String path) {
+        try {
+            var f = cn.classfun.droidvm.lib.utils.ImageUtils.getImageInfo(path)
+                .optString("format", "");
+            if (!f.isEmpty()) return f;
+        } catch (Exception ignored) {
         }
+        return "qcow2";
+    }
+
+    @NonNull
+    private static String findQemuImg() {
+        return cn.classfun.droidvm.lib.utils.AssetUtils.getPrebuiltBinaryPath("qemu-img");
     }
 
     private void startTerminalSession(String cmd) {
@@ -303,9 +464,20 @@ private void onProcessFinished() {
         if (finished) return;
         finished = true;
         int exitCode = session == null ? -1 : session.getExitStatus();
+        // Overlay-tree success includes its persisted relationship follow-up. Keep the progress
+        // UI up until that finishes; never report success while VMStore/DiskStore is still stale.
+        if (exitCode == 0 && diskConfig != null && "commit".equals(taskAction)) {
+            startTreePostProcessing(this::finishCommit);
+            return;
+        } else if (exitCode == 0 && diskConfig != null && "flatten".equals(taskAction)) {
+            startTreePostProcessing(this::finishFlatten);
+            return;
+        }
         // Path mode (no registered DiskConfig) is an in-place op, so there is
-        // nothing to persist -- skip the store update.
-        if (exitCode == 0 && outputPath != null && diskConfig != null) {
+        // nothing to persist -- skip the store update. commit/flatten did their own registry
+        // work above (their outputPath equals the disk path; nothing to rename either).
+        if (exitCode == 0 && outputPath != null && diskConfig != null
+            && !"commit".equals(taskAction) && !"flatten".equals(taskAction)) {
             if (taskAction.equals("clone")) {
                 var cloned = new DiskConfig();
                 if (outputPath.contains("/")) {
@@ -326,6 +498,11 @@ private void onProcessFinished() {
             }
             diskStore.save(this);
         }
+        if (exitCode == 0 && successIntent != null) {
+            startActivity(successIntent);
+            finish();
+            return;
+        }
         // Chained convert (e.g. pre-start decompress): hand control back to the
         // launcher, which starts the VM. No success screen -- the start is the
         // feedback.
@@ -346,6 +523,28 @@ private void onProcessFinished() {
         }
     }
 
+    private void startTreePostProcessing(@NonNull java.util.function.BooleanSupplier operation) {
+        postProcessing = true;
+        btnCancel.setVisibility(GONE);
+        tvStatus.setText(R.string.disk_operation_finalizing);
+        runOnPool(() -> {
+            boolean success = operation.getAsBoolean();
+            runOnUiThread(() -> {
+                if (isFinishing()) return;
+                postProcessing = false;
+                progressSpinner.setVisibility(GONE);
+                ivStatus.setVisibility(VISIBLE);
+                if (success) {
+                    ivStatus.setImageResource(R.drawable.ic_large_success);
+                    tvStatus.setText(R.string.disk_operation_success);
+                } else {
+                    ivStatus.setImageResource(R.drawable.ic_large_error);
+                    tvStatus.setText(R.string.disk_operation_dependency_failed);
+                }
+            });
+        });
+    }
+
     private void showFailed(String message) {
         finished = true;
         progressSpinner.setVisibility(GONE);
@@ -369,6 +568,7 @@ private void confirmCancel() {
     }
 
     private void confirmFinish() {
+        if (postProcessing) return;
         if (finished) {
             finish();
             return;
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/disk/operation/ImageCommandGenerate.java b/app/src/main/java/cn/classfun/droidvm/ui/disk/operation/ImageCommandGenerate.java
index 87df93805..20549f0e4 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/disk/operation/ImageCommandGenerate.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/disk/operation/ImageCommandGenerate.java
@@ -75,8 +75,9 @@ public String buildCommand(@NonNull JSONObject task, String diskPath) throws JSO
         appendAction();
         sb.append("; then ");
         if (useTempPath) {
-            sb.append(fmt("rm -vf %s; ", realPath));
-            sb.append(fmt("mv -v %s %s; ", tmpPath, realPath));
+            // tmp lives beside the destination, so mv replaces it with one same-filesystem
+            // rename. The old image remains intact until the new image is complete.
+            sb.append(fmt("mv -vf %s %s; ", tmpPath, realPath));
         } else if (!diskPath.equals(outputPath) && !action.equals("clone")) {
             sb.append(fmt("rm -vf %s; ", eDiskPath));
         }
@@ -104,11 +105,28 @@ private void appendAction() throws JSONException {
             case "convert":
                 appendConvert();
                 break;
+            case "commit":
+                appendCommit();
+                break;
+            case "flatten":
+                appendFlatten();
+                break;
             default:
                 throw new RuntimeException(fmt("Unknown action: %s", action));
         }
     }
 
+    /** Merge the overlay's changes down into its backing file (in place, both files). */
+    private void appendCommit() {
+        sb.append(" commit -p ").append(eDiskPath);
+    }
+
+    /** Copy the complete backing-chain view, then atomically replace the overlay on success. */
+    private void appendFlatten() throws JSONException {
+        task.put("drop_backing", true);
+        appendConvert();
+    }
+
     private void appendClone() throws JSONException {
         var pv = getPrebuiltBinaryPath("pv");
         sb.append(escapedString(pv));
@@ -138,6 +156,17 @@ private void appendConvert() throws JSONException {
             task.put("format", format);
         } else throw new RuntimeException("No format specified in task or image info");
         sb.append(" --target-format ").append(format);
+        // convert reads through the whole backing chain, so rewriting an overlay without
+        // re-declaring its backing silently flattens it into a standalone full image. Unless the
+        // task names a backing itself (or asks to drop it), carry the source's backing over.
+        if (!task.has("backing_id") && !task.has("backing_path")
+            && !task.optBoolean("drop_backing", false)
+            && info.has("backing-filename")
+            && "qcow2".equalsIgnoreCase(format)) {
+            var backing = info.optString("full-backing-filename",
+                info.getString("backing-filename"));
+            if (!backing.isEmpty()) task.put("backing_path", backing);
+        }
         if (task.has("output")) {
             outputPath = task.getString("output");
             // In-place re-compress (output == source): writing straight to the
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/disk/operation/OptimizeCompression.java b/app/src/main/java/cn/classfun/droidvm/ui/disk/operation/OptimizeCompression.java
new file mode 100644
index 000000000..336bf5613
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/ui/disk/operation/OptimizeCompression.java
@@ -0,0 +1,82 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
+package cn.classfun.droidvm.ui.disk.operation;
+
+import android.content.Context;
+import android.view.LayoutInflater;
+import android.view.View;
+import android.widget.RadioGroup;
+
+import androidx.annotation.NonNull;
+import androidx.annotation.StringRes;
+
+import com.google.android.material.checkbox.MaterialCheckBox;
+import com.google.android.material.dialog.MaterialAlertDialogBuilder;
+import com.google.android.material.radiobutton.MaterialRadioButton;
+
+import java.util.function.Consumer;
+
+import cn.classfun.droidvm.R;
+import cn.classfun.droidvm.ui.disk.create.DiskCompress;
+import cn.classfun.droidvm.ui.main.settings.MainSettingsFragment;
+
+/**
+ * Resolves the compression a disk optimize should target: the preferred-compression setting
+ * when it names one, otherwise (the "ask every time" default) a prompt whose "remember"
+ * checkbox writes the choice back to the setting. Only compressions crosvm can boot from
+ * ({@link DiskCompress#CROSVM_SUPPORTED}) are offered - the choices grow automatically as
+ * that set does. Call on the main thread with a UI context.
+ */
+public final class OptimizeCompression {
+    private OptimizeCompression() {
+    }
+
+    /** Display label: the shared enum label, except NONE which reads "uncompressed" here. */
+    @StringRes
+    public static int labelOf(@NonNull DiskCompress compress) {
+        return compress == DiskCompress.NONE
+            ? R.string.disk_compress_none : compress.getStringId();
+    }
+
+    public static void resolve(
+        @NonNull Context context,
+        @NonNull Runnable onCancel,
+        @NonNull Consumer<DiskCompress> onChosen
+    ) {
+        var preferred = DiskCompress.fromValue(
+            MainSettingsFragment.getOptimizeCompression(context));
+        if (preferred != null && preferred.isCrosvmSupported()) {
+            onChosen.accept(preferred);
+            return;
+        }
+        var view = LayoutInflater.from(context).inflate(
+            R.layout.dialog_optimize_compress, null);
+        RadioGroup group = view.findViewById(R.id.compress_group);
+        MaterialCheckBox remember = view.findViewById(R.id.compress_remember);
+        for (var compress : DiskCompress.CROSVM_SUPPORTED) {
+            var radio = new MaterialRadioButton(context);
+            radio.setId(View.generateViewId());
+            radio.setTag(compress);
+            radio.setText(labelOf(compress));
+            group.addView(radio);
+        }
+        // First (and today only) option pre-selected.
+        if (group.getChildCount() > 0)
+            group.check(group.getChildAt(0).getId());
+        new MaterialAlertDialogBuilder(context)
+            .setTitle(R.string.settings_optimize_compression_title)
+            .setView(view)
+            .setNegativeButton(android.R.string.cancel, (d, w) -> onCancel.run())
+            .setOnCancelListener(d -> onCancel.run())
+            .setPositiveButton(android.R.string.ok, (d, w) -> {
+                var checked = group.findViewById(group.getCheckedRadioButtonId());
+                var chosen = checked == null
+                    ? DiskCompress.NONE : (DiskCompress) checked.getTag();
+                if (remember.isChecked())
+                    MainSettingsFragment.setOptimizeCompression(context, chosen.value());
+                onChosen.accept(chosen);
+            })
+            .show();
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/disk/tree/AttachmentCursor.java b/app/src/main/java/cn/classfun/droidvm/ui/disk/tree/AttachmentCursor.java
new file mode 100644
index 000000000..ced9a5280
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/ui/disk/tree/AttachmentCursor.java
@@ -0,0 +1,114 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
+package cn.classfun.droidvm.ui.disk.tree;
+
+import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
+
+import androidx.annotation.NonNull;
+import androidx.annotation.Nullable;
+
+import java.util.UUID;
+
+/**
+ * Where one VM disk slot sits on an overlay tree. Every slot that points into a family has one;
+ * tree operations move them (a deleted node's cursors climb to the nearest surviving ancestor,
+ * a leaf's writable cursors follow its first overlay down) and the rules about which ones may
+ * move silently, which must be announced, and which must not move at all hang off {@link #kind}
+ * and {@link #pinned}.
+ */
+public final class AttachmentCursor {
+    public enum Kind {
+        /** The editor row this panel was opened from. In memory; applied when the panel closes. */
+        ACTIVE,
+        /** Another unsaved row of the same editor. In memory; follows silently. */
+        EDITOR,
+        /**
+         * A persisted slot of the VM being edited. Rewritten on disk like PERSISTED (a discarded
+         * edit must not leave it dangling) but never announced: the editor's rows shadow it.
+         */
+        SHADOW,
+        /** A persisted slot of any other VM. Rewritten on disk and announced before it happens. */
+        PERSISTED,
+    }
+
+    @NonNull
+    public final Kind kind;
+    /** Null for a VM that has never been saved. */
+    @Nullable
+    public final UUID vmId;
+    @NonNull
+    public final String vmName;
+    /** Index in the VM's disk list (or in the editor's rows). */
+    public final int slot;
+    /** Null once the whole tree under the cursor is gone. */
+    @Nullable
+    public final UUID nodeId;
+    @Nullable
+    public final String path;
+    public final boolean readonly;
+    /** The VM is not stopped: the slot's file is open, so the cursor must not change. */
+    public final boolean pinned;
+
+    public AttachmentCursor( // arity-ok: a value object; these parameters are its fields
+        @NonNull Kind kind,
+        @Nullable UUID vmId,
+        @NonNull String vmName,
+        int slot,
+        @Nullable UUID nodeId,
+        @Nullable String path,
+        boolean readonly,
+        boolean pinned
+    ) {
+        this.kind = kind;
+        this.vmId = vmId;
+        this.vmName = vmName;
+        this.slot = slot;
+        this.nodeId = nodeId;
+        this.path = path;
+        this.readonly = readonly;
+        this.pinned = pinned;
+    }
+
+    /** The same slot at another position. */
+    @NonNull
+    public AttachmentCursor at(@Nullable UUID nodeId, @Nullable String path, boolean readonly) {
+        return new AttachmentCursor(kind, vmId, vmName, slot, nodeId, path, readonly, pinned);
+    }
+
+    /** The same cursor with its VM's run state re-read. */
+    @NonNull
+    public AttachmentCursor withPinned(boolean pinned) {
+        return new AttachmentCursor(kind, vmId, vmName, slot, nodeId, path, readonly, pinned);
+    }
+
+    /** In-memory editor rows, applied by the editor when the panel closes. */
+    public boolean isLive() {
+        return kind == Kind.ACTIVE || kind == Kind.EDITOR;
+    }
+
+    /** Written to the VM store by the operation itself. */
+    public boolean isPersisted() {
+        return kind == Kind.SHADOW || kind == Kind.PERSISTED;
+    }
+
+    /** Listed in the confirmation before the operation runs. */
+    public boolean isAnnounced() {
+        return kind == Kind.PERSISTED;
+    }
+
+    /**
+     * Whether this cursor counts towards "two attachments on one disk". A shadow is the stale
+     * twin of an editor row and would double-count it.
+     */
+    public boolean countsForSharing() {
+        return kind != Kind.SHADOW;
+    }
+
+    @NonNull
+    @Override
+    public String toString() {
+        return fmt("%s:%s#%d@%s%s%s", kind, vmName, slot, path == null ? "-" : path,
+            readonly ? " ro" : " rw", pinned ? " pinned" : "");
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/disk/tree/AttachmentCursors.java b/app/src/main/java/cn/classfun/droidvm/ui/disk/tree/AttachmentCursors.java
new file mode 100644
index 000000000..ec43920ef
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/ui/disk/tree/AttachmentCursors.java
@@ -0,0 +1,156 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
+package cn.classfun.droidvm.ui.disk.tree;
+
+import androidx.annotation.NonNull;
+import androidx.annotation.Nullable;
+
+import java.util.ArrayList;
+import java.util.Collection;
+import java.util.LinkedHashSet;
+import java.util.List;
+import java.util.Set;
+import java.util.UUID;
+
+import cn.classfun.droidvm.lib.store.base.DataItem;
+import cn.classfun.droidvm.lib.store.disk.DiskStore;
+import cn.classfun.droidvm.lib.store.vm.VMConfig;
+import cn.classfun.droidvm.lib.store.vm.VMStore;
+
+/** Builds the cursor set of one family from the stores plus, optionally, an editor's rows. */
+public final class AttachmentCursors {
+    /** The disk rows of a VM editor as they are right now, unsaved. */
+    public static final class LiveRows {
+        /** Null for a VM that has never been saved. */
+        @Nullable
+        public final UUID vmId;
+        @NonNull
+        public final String vmName;
+        @NonNull
+        public final List<String> paths;
+        @NonNull
+        public final List<Boolean> readonly;
+        /** Index of the row the panel was opened from. */
+        public final int active;
+
+        public LiveRows(
+            @Nullable UUID vmId,
+            @NonNull String vmName,
+            @NonNull List<String> paths,
+            @NonNull List<Boolean> readonly,
+            int active
+        ) {
+            this.vmId = vmId;
+            this.vmName = vmName;
+            this.paths = paths;
+            this.readonly = readonly;
+            this.active = active;
+        }
+    }
+
+    private AttachmentCursors() {
+    }
+
+    /** Live rows first, then every persisted slot; see the two halves below. */
+    @NonNull
+    public static List<AttachmentCursor> collect(
+        @NonNull DiskStore disks,
+        @NonNull VMStore vms,
+        @NonNull Set<UUID> family,
+        @Nullable LiveRows live,
+        @NonNull Collection<String> inUseVmNames
+    ) {
+        var out = new ArrayList<AttachmentCursor>();
+        if (live != null) out.addAll(collectLive(disks, family, live, inUseVmNames));
+        out.addAll(collectPersisted(disks, vms, family,
+            live == null ? null : live.vmId, inUseVmNames));
+        return out;
+    }
+
+    /** The editor's rows that point at a disk in {@code family}: one ACTIVE, the rest EDITOR. */
+    @NonNull
+    public static List<AttachmentCursor> collectLive(
+        @NonNull DiskStore disks,
+        @NonNull Set<UUID> family,
+        @NonNull LiveRows live,
+        @NonNull Collection<String> inUseVmNames
+    ) {
+        var out = new ArrayList<AttachmentCursor>();
+        boolean pinned = live.vmId != null && inUseVmNames.contains(live.vmName);
+        for (int i = 0; i < live.paths.size(); i++) {
+            var cfg = disks.findByPath(live.paths.get(i));
+            if (cfg == null || !family.contains(cfg.getId())) continue;
+            var kind = i == live.active
+                ? AttachmentCursor.Kind.ACTIVE : AttachmentCursor.Kind.EDITOR;
+            out.add(new AttachmentCursor(kind, live.vmId, live.vmName, i, cfg.getId(),
+                cfg.getFullPath(), live.readonly.get(i), pinned));
+        }
+        return out;
+    }
+
+    /**
+     * Every saved slot pointing at a disk in {@code family}. Slots of {@code editingVmId} become
+     * SHADOW (an editor's rows stand in for them); all others PERSISTED. {@code inUseVmNames}
+     * marks cursors pinned.
+     */
+    @NonNull
+    public static List<AttachmentCursor> collectPersisted(
+        @NonNull DiskStore disks,
+        @NonNull VMStore vms,
+        @NonNull Set<UUID> family,
+        @Nullable UUID editingVmId,
+        @NonNull Collection<String> inUseVmNames
+    ) {
+        var out = new ArrayList<AttachmentCursor>();
+        for (int v = 0; v < vms.size(); v++) {
+            var vm = vms.get(v);
+            var kind = editingVmId != null && editingVmId.equals(vm.getId())
+                ? AttachmentCursor.Kind.SHADOW : AttachmentCursor.Kind.PERSISTED;
+            boolean pinned = inUseVmNames.contains(vm.getName());
+            var slots = diskSlots(vm);
+            for (int i = 0; i < slots.size(); i++) {
+                var slot = slots.get(i);
+                var path = slot.optString("path", "");
+                if (path.isEmpty()) continue;
+                var cfg = disks.findByPath(path);
+                if (cfg == null || !family.contains(cfg.getId())) continue;
+                out.add(new AttachmentCursor(kind, vm.getId(), vm.getName(), i, cfg.getId(),
+                    cfg.getFullPath(), slot.optBoolean("readonly", false), pinned));
+            }
+        }
+        return out;
+    }
+
+    /** Names of all VMs in the store (plus {@code extra}), the candidates for one in-use query. */
+    @NonNull
+    public static List<String> allVmNames(@NonNull VMStore vms, @Nullable String extra) {
+        var names = new ArrayList<String>();
+        for (int i = 0; i < vms.size(); i++) names.add(vms.get(i).getName());
+        if (extra != null && !extra.isEmpty() && !names.contains(extra)) names.add(extra);
+        return names;
+    }
+
+    /** Distinct VM names among {@code cursors}, in first-seen order. */
+    @NonNull
+    public static List<String> vmNames(@NonNull Collection<AttachmentCursor> cursors) {
+        var names = new LinkedHashSet<String>();
+        for (var c : cursors) names.add(c.vmName);
+        return new ArrayList<>(names);
+    }
+
+    /** Distinct names of the VMs whose cursors are pinned. */
+    @NonNull
+    public static List<String> pinnedVmNames(@NonNull Collection<AttachmentCursor> cursors) {
+        var pinned = new ArrayList<AttachmentCursor>();
+        for (var c : cursors) if (c.pinned) pinned.add(c);
+        return vmNames(pinned);
+    }
+
+    @NonNull
+    public static List<DataItem> diskSlots(@NonNull VMConfig vm) {
+        var disks = vm.item.opt("disks", null);
+        if (disks == null || !disks.is(DataItem.Type.ARRAY)) return List.of();
+        return disks.asArray();
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/disk/tree/CursorPlan.java b/app/src/main/java/cn/classfun/droidvm/ui/disk/tree/CursorPlan.java
new file mode 100644
index 000000000..a86af61dd
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/ui/disk/tree/CursorPlan.java
@@ -0,0 +1,182 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
+package cn.classfun.droidvm.ui.disk.tree;
+
+import androidx.annotation.NonNull;
+import androidx.annotation.Nullable;
+
+import java.util.ArrayList;
+import java.util.HashMap;
+import java.util.HashSet;
+import java.util.List;
+import java.util.Map;
+import java.util.Objects;
+import java.util.UUID;
+
+/**
+ * Where every attachment cursor ends up when the tree goes from one {@link TreeShape} to
+ * another. Pure: the same function predicts an operation (before it runs, for the confirmation
+ * and the persisted rewrite) and reconciles the editor's in-memory cursors after any refresh.
+ *
+ * <p>Rules, in order:
+ * <ol>
+ *   <li>a cursor whose node survives stays - unless the node was a leaf that just grew its first
+ *       overlay, in which case a writable cursor follows that overlay down (that is how "take a
+ *       snapshot, keep going" feels), while a read-only one stays on the now-locked base;</li>
+ *   <li>a cursor whose node is gone climbs the OLD ancestor chain to the nearest survivor
+ *       (subtree delete: the parent; merge: the base), or is cleared when there is none;</li>
+ *   <li>a cursor landing on a node with children, or on a node that another cursor also holds,
+ *       is forced read-only - a base under overlays must not be written, and neither may a
+ *       disk two writers share. Forcing only ever adds read-only; it never removes it.</li>
+ * </ol>
+ * A pinned cursor (its VM is not stopped) must not change at all; one that would is reported in
+ * {@link #refused} and left untouched, and callers refuse the whole operation.
+ */
+public final class CursorPlan {
+    public static final class Change {
+        @NonNull
+        public final AttachmentCursor from;
+        @NonNull
+        public final AttachmentCursor to;
+
+        public Change(@NonNull AttachmentCursor from, @NonNull AttachmentCursor to) {
+            this.from = from;
+            this.to = to;
+        }
+
+        public boolean moved() {
+            return !Objects.equals(from.nodeId, to.nodeId);
+        }
+
+        public boolean cleared() {
+            return to.nodeId == null;
+        }
+
+        public boolean readonlyForced() {
+            return to.readonly && !from.readonly;
+        }
+    }
+
+    /** Every input cursor at its new position (refused ones unchanged), input order kept. */
+    @NonNull
+    public final List<AttachmentCursor> cursors = new ArrayList<>();
+    /** The cursors that changed position or read-only state. */
+    @NonNull
+    public final List<Change> changes = new ArrayList<>();
+    /** Pinned cursors the operation would have changed; non-empty means "refuse". */
+    @NonNull
+    public final List<AttachmentCursor> refused = new ArrayList<>();
+
+    private CursorPlan() {
+    }
+
+    public boolean isRefused() {
+        return !refused.isEmpty();
+    }
+
+    /** Changes the operation writes to the VM store itself (shadow and other-VM slots). */
+    @NonNull
+    public List<Change> persistedChanges() {
+        var out = new ArrayList<Change>();
+        for (var c : changes) if (c.from.isPersisted()) out.add(c);
+        return out;
+    }
+
+    /** Changes that must be stated in the confirmation (other VMs' slots). */
+    @NonNull
+    public List<Change> announcedChanges() {
+        var out = new ArrayList<Change>();
+        for (var c : changes) if (c.from.isAnnounced()) out.add(c);
+        return out;
+    }
+
+    /** Changes the editor applies to its own rows when the panel closes. */
+    @NonNull
+    public List<Change> liveChanges() {
+        var out = new ArrayList<Change>();
+        for (var c : changes) if (c.from.isLive()) out.add(c);
+        return out;
+    }
+
+    /**
+     * @param moving cursors to reposition
+     * @param fixed  cursors already known to be correct for {@code after} (e.g. persisted slots
+     *               re-read from the store after an operation); they only count towards sharing
+     * @param before the shape the moving cursors refer to
+     * @param after  the shape they must refer to afterwards
+     */
+    @NonNull
+    public static CursorPlan reconcile(
+        @NonNull List<AttachmentCursor> moving,
+        @NonNull List<AttachmentCursor> fixed,
+        @NonNull TreeShape before,
+        @NonNull TreeShape after
+    ) {
+        var plan = new CursorPlan();
+        // A node that appeared under a surviving one is a freshly created overlay; the first
+        // one per parent is where that parent's writable cursors go (rule 1).
+        var createdUnder = new HashMap<UUID, UUID>();
+        for (var id : after.nodes()) {
+            if (before.contains(id)) continue;
+            var parent = after.parentOf(id);
+            if (parent != null && before.contains(parent)) createdUnder.putIfAbsent(parent, id);
+        }
+
+        var targets = new ArrayList<UUID>(moving.size());
+        for (var c : moving) targets.add(targetOf(c, before, after, createdUnder));
+
+        var holders = new HashMap<UUID, Integer>();
+        for (int i = 0; i < moving.size(); i++)
+            if (targets.get(i) != null && moving.get(i).countsForSharing())
+                holders.merge(targets.get(i), 1, Integer::sum);
+        for (var f : fixed)
+            if (f.nodeId != null && f.countsForSharing())
+                holders.merge(f.nodeId, 1, Integer::sum);
+
+        for (int i = 0; i < moving.size(); i++) {
+            var from = moving.get(i);
+            var target = targets.get(i);
+            AttachmentCursor to;
+            if (target == null) {
+                to = from.at(null, null, from.readonly);
+            } else {
+                boolean forced = after.hasChildren(target)
+                    || holders.getOrDefault(target, 0) >= 2;
+                to = from.at(target, after.pathOf(target), from.readonly || forced);
+            }
+            boolean changed = !Objects.equals(from.nodeId, to.nodeId)
+                || from.readonly != to.readonly;
+            if (changed && from.pinned) {
+                plan.refused.add(from);
+                plan.cursors.add(from);
+                continue;
+            }
+            plan.cursors.add(to);
+            if (changed) plan.changes.add(new Change(from, to));
+        }
+        return plan;
+    }
+
+    @Nullable
+    private static UUID targetOf(
+        @NonNull AttachmentCursor c,
+        @NonNull TreeShape before,
+        @NonNull TreeShape after,
+        @NonNull Map<UUID, UUID> createdUnder
+    ) {
+        if (c.nodeId == null) return null;
+        if (after.contains(c.nodeId)) {
+            var child = createdUnder.get(c.nodeId);
+            if (child != null && !before.hasChildren(c.nodeId) && !c.readonly) return child;
+            return c.nodeId;
+        }
+        var seen = new HashSet<UUID>();
+        var cur = before.parentOf(c.nodeId);
+        while (cur != null && seen.add(cur)) {
+            if (after.contains(cur)) return cur;
+            cur = before.parentOf(cur);
+        }
+        return null;
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/disk/tree/CursorPlanText.java b/app/src/main/java/cn/classfun/droidvm/ui/disk/tree/CursorPlanText.java
new file mode 100644
index 000000000..2336fb414
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/ui/disk/tree/CursorPlanText.java
@@ -0,0 +1,77 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
+package cn.classfun.droidvm.ui.disk.tree;
+
+import static cn.classfun.droidvm.lib.utils.StringUtils.basename;
+import static cn.classfun.droidvm.lib.utils.StringUtils.bulletList;
+
+import android.content.Context;
+
+import androidx.annotation.NonNull;
+
+import java.util.ArrayList;
+import java.util.List;
+
+import cn.classfun.droidvm.R;
+
+/** Renders the announced part of a {@link CursorPlan} into confirmation text. */
+public final class CursorPlanText {
+    private CursorPlanText() {
+    }
+
+    /** One line per change; slots are shown 1-based, as the editor numbers them. */
+    @NonNull
+    public static String line(@NonNull Context ctx, @NonNull CursorPlan.Change c) {
+        var vm = c.from.vmName;
+        int slot = c.from.slot + 1;
+        var from = c.from.path == null ? "" : basename(c.from.path);
+        if (c.cleared())
+            return ctx.getString(R.string.disk_tree_change_clear, vm, slot, from);
+        var to = c.to.path == null ? "" : basename(c.to.path);
+        if (!c.moved())
+            return ctx.getString(R.string.disk_tree_change_readonly, vm, slot, from);
+        return ctx.getString(c.readonlyForced()
+                ? R.string.disk_tree_change_move_readonly : R.string.disk_tree_change_move,
+            vm, slot, from, to);
+    }
+
+    /** A cursor whose disk keeps its path but has its content replaced (merge into base). */
+    @NonNull
+    public static String rewrittenLine(
+        @NonNull Context ctx, @NonNull AttachmentCursor c, @NonNull String byName) {
+        return ctx.getString(R.string.disk_tree_change_rewritten,
+            c.vmName, c.slot + 1, c.path == null ? "" : basename(c.path), byName);
+    }
+
+    /**
+     * The "other VMs' attachments change with it" paragraph, or an empty string when nothing
+     * needs announcing. {@code extraLines} are appended to the same list.
+     */
+    @NonNull
+    public static String describe(
+        @NonNull Context ctx,
+        @NonNull List<CursorPlan.Change> announced,
+        @NonNull List<String> extraLines
+    ) {
+        var lines = new ArrayList<String>();
+        for (var c : announced) lines.add(line(ctx, c));
+        lines.addAll(extraLines);
+        if (lines.isEmpty()) return "";
+        return ctx.getString(R.string.disk_tree_changes_header, bulletList(lines));
+    }
+
+    @NonNull
+    public static String describe(
+        @NonNull Context ctx, @NonNull List<CursorPlan.Change> announced) {
+        return describe(ctx, announced, List.of());
+    }
+
+    /** Refusal text naming the VMs whose pinned cursors the operation would have changed. */
+    @NonNull
+    public static String pinnedMessage(
+        @NonNull Context ctx, @NonNull List<AttachmentCursor> refused) {
+        return ctx.getString(R.string.disk_tree_pinned,
+            bulletList(AttachmentCursors.vmNames(refused)));
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/disk/tree/DiskBranchPanel.java b/app/src/main/java/cn/classfun/droidvm/ui/disk/tree/DiskBranchPanel.java
new file mode 100644
index 000000000..53a2ef60f
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/ui/disk/tree/DiskBranchPanel.java
@@ -0,0 +1,383 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
+package cn.classfun.droidvm.ui.disk.tree;
+
+import static android.widget.Toast.LENGTH_SHORT;
+import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
+import static cn.classfun.droidvm.lib.utils.ThreadUtils.runOnPool;
+
+import android.content.Context;
+import android.os.Handler;
+import android.os.Looper;
+import android.util.Log;
+import android.view.Gravity;
+import android.view.View;
+import android.view.ViewTreeObserver;
+import android.widget.FrameLayout;
+import android.widget.TextView;
+import android.widget.Toast;
+
+import androidx.annotation.NonNull;
+import androidx.annotation.Nullable;
+import androidx.appcompat.app.AlertDialog;
+
+import com.google.android.material.dialog.MaterialAlertDialogBuilder;
+
+import java.util.ArrayList;
+import java.util.HashMap;
+import java.util.LinkedHashMap;
+import java.util.List;
+import java.util.Map;
+import java.util.Objects;
+import java.util.Set;
+import java.util.UUID;
+
+import cn.classfun.droidvm.R;
+import cn.classfun.droidvm.lib.store.disk.DiskStore;
+import cn.classfun.droidvm.lib.store.vm.VMStore;
+import cn.classfun.droidvm.lib.ui.MaterialMenu;
+import cn.classfun.droidvm.ui.disk.action.BackingChainLinker;
+import cn.classfun.droidvm.ui.disk.action.DiskActionDialog;
+import cn.classfun.droidvm.ui.disk.action.DiskOverlayCreateDialog;
+import cn.classfun.droidvm.ui.disk.tree.AttachmentCursors.LiveRows;
+import cn.classfun.droidvm.ui.vm.VmRunningQuery;
+
+/**
+ * The branch-management panel: the whole overlay family of a disk, every attachment on it, and
+ * a per-node menu that creates/deletes/merges/flattens branches while the panel STAYS OPEN, so
+ * one snapshot can be followed by the next without re-entering it.
+ *
+ * <p>Opened from the VM disk editor it also carries that editor's unsaved rows as in-memory
+ * {@link AttachmentCursor}s. Those follow every operation by the rules in {@link CursorPlan} -
+ * the row that opened the panel is the active cursor - and are handed back in the
+ * {@link Result} when the panel closes: OK re-points the active row at whatever is selected,
+ * Back/Close at wherever its cursor drifted to (a cursor with nothing left under it removes the
+ * row). Other VMs' saved slots are rewritten by the operations themselves, after being announced
+ * in their confirmations; that part happens whether or not the editor is later saved.
+ *
+ * <p>Merge and flatten run in another activity; the panel waits underneath and refreshes when
+ * its window regains focus. After every refresh the view re-roots on the active cursor's node,
+ * so a flattened branch shows as its own family from then on.
+ */
+public final class DiskBranchPanel {
+    private static final String TAG = "DiskBranchPanel";
+
+    public interface Listener {
+        /** The registry changed under the panel (main thread); hosts refresh their own lists. */
+        default void onRegistryChanged() {
+        }
+
+        /** The panel closed (main thread). */
+        void onClosed(@NonNull Result result);
+    }
+
+    public static final class Result {
+        /** OK pressed (editor mode only); Back/Close/outside-tap otherwise. */
+        public final boolean confirmed;
+        /**
+         * Editor row index to its new path, only for rows that must change. A null value means
+         * the row's whole tree is gone and the row is to be removed.
+         */
+        @NonNull
+        public final Map<Integer, String> rows;
+        /** The disk the panel was opened for no longer exists. */
+        public final boolean subjectGone;
+
+        Result(boolean confirmed, @NonNull Map<Integer, String> rows, boolean subjectGone) {
+            this.confirmed = confirmed;
+            this.rows = rows;
+            this.subjectGone = subjectGone;
+        }
+    }
+
+    private final Context context;
+    private final UUID subjectId;
+    @Nullable
+    private final LiveRows live;
+    private final Listener listener;
+    private final Handler main = new Handler(Looper.getMainLooper());
+
+    // All written on the main thread; refresh() reads them from the pool only after being
+    // posted from the main thread, so it always sees the latest values.
+    private TreeShape shape = TreeShape.empty();
+    private List<AttachmentCursor> liveCursors = new ArrayList<>();
+    private boolean first = true;
+
+    /** Where the active cursor sat at the last render; a radio left on it follows its moves. */
+    @Nullable
+    private UUID lastActiveNode;
+
+    private DiskTreeView tree;
+    private TextView emptyView;
+    private AlertDialog dialog;
+    private ViewTreeObserver.OnWindowFocusChangeListener focusListener;
+    private boolean confirmed;
+    private boolean refreshOnFocus;
+    private boolean closed;
+
+    private DiskBranchPanel(
+        @NonNull Context context,
+        @NonNull UUID subjectId,
+        @Nullable LiveRows live,
+        @NonNull Listener listener
+    ) {
+        this.context = context;
+        this.subjectId = subjectId;
+        this.live = live;
+        this.listener = listener;
+    }
+
+    /**
+     * Branch management for the disk at {@code currentPath}. Always available, even for a disk
+     * with no relatives yet - creating the first overlay is one of the actions here.
+     *
+     * @param live the disk editor's rows when opened from one (selection enabled, OK/Back
+     *             buttons); null from the disk info screen (Close button only)
+     */
+    public static void open(
+        @NonNull Context context,
+        @NonNull String currentPath,
+        @Nullable LiveRows live,
+        @NonNull Listener listener
+    ) {
+        var main = new Handler(Looper.getMainLooper());
+        runOnPool(() -> {
+            var store = new DiskStore();
+            store.load(context);
+            var current = store.findByPath(currentPath);
+            if (current == null) {
+                main.post(() -> Toast.makeText(
+                    context, R.string.disk_tree_not_registered, LENGTH_SHORT).show());
+                return;
+            }
+            // Reconcile links from the images' headers before drawing: a disk whose parent was
+            // never linked (registry predating the tree, or an outside rebase) should show its
+            // real family the first time this opens.
+            BackingChainLinker.repair(context, current.getId(), () ->
+                new DiskBranchPanel(context, current.getId(), live, listener).refresh());
+        });
+    }
+
+    /** Reload both stores, move the in-memory cursors along, re-root and repaint. */
+    private void refresh() {
+        runOnPool(() -> {
+            try {
+                var disks = new DiskStore();
+                disks.load(context);
+                var vms = new VMStore();
+                vms.load(vms, context);
+                var newShape = TreeShape.of(disks);
+                var all = newShape.nodes();
+                var inUse = VmRunningQuery.inUseAmong(
+                    AttachmentCursors.allVmNames(vms, live == null ? null : live.vmName));
+                var persisted = AttachmentCursors.collectPersisted(
+                    disks, vms, all, live == null ? null : live.vmId, inUse);
+                List<AttachmentCursor> liveNow;
+                if (first) {
+                    liveNow = live == null ? List.of()
+                        : AttachmentCursors.collectLive(disks, all, live, inUse);
+                } else {
+                    var plan = CursorPlan.reconcile(liveCursors, persisted, shape, newShape);
+                    boolean pinned = live != null && live.vmId != null
+                        && inUse.contains(live.vmName);
+                    liveNow = new ArrayList<>();
+                    for (var c : plan.cursors) liveNow.add(c.withPinned(pinned));
+                }
+                UUID focus = null;
+                for (var c : liveNow)
+                    if (c.kind == AttachmentCursor.Kind.ACTIVE && c.nodeId != null)
+                        focus = c.nodeId;
+                if (focus == null && newShape.contains(subjectId)) focus = subjectId;
+                var family = focus == null ? null : DiskTree.buildFamily(disks, focus);
+                var familyIds = focus == null ? Set.<UUID>of() : newShape.familyOf(focus);
+                var labels = labels(familyIds, liveNow, persisted);
+                final var activeNode = focus == null ? null : activeNodeOf(liveNow);
+                final var finalLive = liveNow;
+                main.post(() -> {
+                    if (closed) return;
+                    shape = newShape;
+                    liveCursors = finalLive;
+                    boolean wasFirst = first;
+                    first = false;
+                    if (dialog == null) build();
+                    render(family, familyIds, labels, activeNode);
+                    if (!wasFirst) listener.onRegistryChanged();
+                });
+            } catch (Exception e) {
+                Log.w(TAG, "branch panel refresh failed", e);
+            }
+        });
+    }
+
+    @Nullable
+    private static UUID activeNodeOf(@NonNull List<AttachmentCursor> cursors) {
+        for (var c : cursors)
+            if (c.kind == AttachmentCursor.Kind.ACTIVE) return c.nodeId;
+        return null;
+    }
+
+    /** "Attached: vm (#1), other (#2, in use)" per node; the active row is marked separately. */
+    @NonNull
+    private Map<UUID, String> labels(
+        @NonNull Set<UUID> family,
+        @NonNull List<AttachmentCursor> liveNow,
+        @NonNull List<AttachmentCursor> persisted
+    ) {
+        var per = new HashMap<UUID, List<String>>();
+        var all = new ArrayList<AttachmentCursor>(liveNow);
+        all.addAll(persisted);
+        for (var c : all) {
+            if (c.nodeId == null || !family.contains(c.nodeId)) continue;
+            if (c.kind == AttachmentCursor.Kind.ACTIVE || c.kind == AttachmentCursor.Kind.SHADOW)
+                continue;
+            var who = c.vmName.isEmpty() ? fmt("#%d", c.slot + 1)
+                : fmt("%s (#%d)", c.vmName, c.slot + 1);
+            if (c.pinned) who = context.getString(R.string.disk_tree_in_use, who);
+            per.computeIfAbsent(c.nodeId, k -> new ArrayList<>()).add(who);
+        }
+        var out = new HashMap<UUID, String>();
+        for (var e : per.entrySet())
+            out.put(e.getKey(), context.getString(
+                R.string.disk_tree_attached_by, String.join(", ", e.getValue())));
+        return out;
+    }
+
+    private void build() {
+        boolean selectable = live != null;
+        tree = new DiskTreeView(context);
+        tree.configure(selectable, true, null, new DiskTreeView.Listener() {
+            @Override
+            public void onNodeMenu(@NonNull View anchor, @NonNull DiskTree.Node node) {
+                showNodeMenu(anchor, node);
+            }
+        });
+        emptyView = new TextView(context);
+        emptyView.setText(R.string.disk_tree_empty);
+        emptyView.setGravity(Gravity.CENTER);
+        int pad = Math.round(24 * context.getResources().getDisplayMetrics().density);
+        emptyView.setPadding(pad, pad, pad, pad);
+        emptyView.setVisibility(View.GONE);
+        var container = new FrameLayout(context);
+        container.addView(tree);
+        container.addView(emptyView);
+        var builder = new MaterialAlertDialogBuilder(context)
+            .setTitle(R.string.disk_manage_branches)
+            .setView(container);
+        if (selectable) {
+            builder.setPositiveButton(android.R.string.ok, (d, w) -> confirmed = true)
+                .setNegativeButton(R.string.disk_manage_branches_back, null);
+        } else {
+            builder.setPositiveButton(R.string.disk_manage_branches_close, null);
+        }
+        dialog = builder.create();
+        dialog.setOnDismissListener(d -> onDismissed());
+        dialog.show();
+        var window = dialog.getWindow();
+        if (window != null) {
+            focusListener = hasFocus -> {
+                if (hasFocus && refreshOnFocus) {
+                    refreshOnFocus = false;
+                    refresh();
+                }
+            };
+            window.getDecorView().getViewTreeObserver()
+                .addOnWindowFocusChangeListener(focusListener);
+        }
+    }
+
+    private void render(
+        @Nullable DiskTree.Node family,
+        @NonNull Set<UUID> familyIds,
+        @NonNull Map<UUID, String> labels,
+        @Nullable UUID activeNode
+    ) {
+        if (family == null) {
+            tree.setVisibility(View.GONE);
+            emptyView.setVisibility(View.VISIBLE);
+            tree.updateRoots(List.of());
+            lastActiveNode = null;
+            return;
+        }
+        tree.setVisibility(View.VISIBLE);
+        emptyView.setVisibility(View.GONE);
+        tree.updateRoots(List.of(family));
+        tree.setCursorLabels(labels);
+        tree.setCurrentId(activeNode);
+        if (live != null) {
+            // The radio tracks the active cursor as long as the user left it there (so OK after
+            // a snapshot lands on the new overlay, same as Back would); a radio moved elsewhere
+            // stays put unless that node is gone.
+            var selected = tree.getSelectedId();
+            if (selected == null || !familyIds.contains(selected)
+                || Objects.equals(selected, lastActiveNode))
+                tree.setSelectedId(activeNode != null ? activeNode : family.id());
+        }
+        lastActiveNode = activeNode;
+    }
+
+    /**
+     * Per-node actions. None of them closes the panel: create and delete report back when the
+     * registry is written, merge and flatten hand over to another activity and the panel
+     * refreshes on return. Each states up front, in its own confirmation, where other VMs'
+     * attachments go; the editor's rows follow silently and are applied when the panel closes.
+     */
+    private void showNodeMenu(@NonNull View anchor, @NonNull DiskTree.Node node) {
+        var popup = new MaterialMenu(context, anchor);
+        popup.inflate(R.menu.menu_disk_tree_node);
+        // Reset only makes sense for a writable leaf overlay: a base's content belongs to its
+        // overlays, and a root has nothing to reset to. Hide it rather than refuse it.
+        popup.setItemVisible(R.id.menu_disk_reset,
+            node.config.getParentId() != null && !node.hasChildren());
+        popup.setOnMenuItemClickListener(item -> {
+            var actions = new DiskActionDialog(context, null, null);
+            int id = item.getItemId();
+            if (id == R.id.menu_disk_create_increment) {
+                new DiskOverlayCreateDialog(context, node.config, this::refresh, null)
+                    .setLiveRows(live)
+                    .show();
+                return true;
+            } else if (id == R.id.menu_disk_merge) {
+                actions.tryMerge(node.config, live, () -> refreshOnFocus = true);
+                return true;
+            } else if (id == R.id.menu_disk_flatten) {
+                actions.tryFlatten(node.config, () -> refreshOnFocus = true);
+                return true;
+            } else if (id == R.id.menu_disk_reset) {
+                actions.tryReset(node.config, live, this::refresh);
+                return true;
+            } else if (id == R.id.menu_disk_delete) {
+                actions.confirmDelete(node.config, live, this::refresh);
+                return true;
+            }
+            return false;
+        });
+        popup.show();
+    }
+
+    private void onDismissed() {
+        if (closed) return;
+        closed = true;
+        var window = dialog.getWindow();
+        if (window != null && focusListener != null) {
+            var observer = window.getDecorView().getViewTreeObserver();
+            if (observer.isAlive()) observer.removeOnWindowFocusChangeListener(focusListener);
+        }
+        var rows = new LinkedHashMap<Integer, String>();
+        if (live != null) {
+            var selected = confirmed ? tree.getSelectedId() : null;
+            for (var c : liveCursors) {
+                String path;
+                if (c.kind == AttachmentCursor.Kind.ACTIVE
+                    && selected != null && shape.contains(selected)) {
+                    path = shape.pathOf(selected);
+                } else {
+                    path = c.path;
+                }
+                var original = c.slot < live.paths.size() ? live.paths.get(c.slot) : null;
+                if (path == null || !path.equals(original)) rows.put(c.slot, path);
+            }
+        }
+        listener.onClosed(new Result(confirmed, rows, !shape.contains(subjectId)));
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/disk/tree/DiskTree.java b/app/src/main/java/cn/classfun/droidvm/ui/disk/tree/DiskTree.java
new file mode 100644
index 000000000..d1c241615
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/ui/disk/tree/DiskTree.java
@@ -0,0 +1,165 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
+package cn.classfun.droidvm.ui.disk.tree;
+
+import androidx.annotation.NonNull;
+import androidx.annotation.Nullable;
+
+import java.util.ArrayList;
+import java.util.HashMap;
+import java.util.HashSet;
+import java.util.List;
+import java.util.Map;
+import java.util.Set;
+import java.util.UUID;
+
+import cn.classfun.droidvm.lib.store.disk.DiskConfig;
+import cn.classfun.droidvm.lib.store.disk.DiskStore;
+
+/**
+ * The overlay-relation forest, built fresh from a {@link DiskStore} snapshot (the registry's
+ * {@code parent} links; the qcow2 headers remain the ground truth those links mirror). Pure
+ * logic - the tree views and dialogs all render flattened output of this class.
+ *
+ * Malformed registries degrade instead of failing: a parent id that isn't registered marks the
+ * node {@code brokenParent} and promotes it to a root; cycle members are promoted the same way
+ * with the cycle edge cut. Depth is capped only visually by callers - {@link #MAX_DEPTH} matches
+ * crosvm's nesting limit and is what creation flows should enforce.
+ */
+public final class DiskTree {
+    /** crosvm's MAX_NESTING_DEPTH; creating an overlay deeper than this can't boot anyway. */
+    public static final int MAX_DEPTH = 10;
+
+    public static final class Node {
+        @NonNull
+        public final DiskConfig config;
+        public final int depth;
+        /** Parent link exists but the parent isn't registered, or a cycle was cut here. */
+        public final boolean brokenParent;
+        @NonNull
+        public final List<Node> children = new ArrayList<>();
+
+        Node(@NonNull DiskConfig config, int depth, boolean brokenParent) {
+            this.config = config;
+            this.depth = depth;
+            this.brokenParent = brokenParent;
+        }
+
+        @NonNull
+        public UUID id() {
+            return config.getId();
+        }
+
+        public boolean hasChildren() {
+            return !children.isEmpty();
+        }
+
+        /** Number of descendants (the "+N" a collapsed row shows). */
+        public int countDescendants() {
+            int n = 0;
+            for (var c : children) n += 1 + c.countDescendants();
+            return n;
+        }
+    }
+
+    private DiskTree() {
+    }
+
+    /** Every family in the registry: roots in registry order, children nested below them. */
+    @NonNull
+    public static List<Node> buildForest(@NonNull DiskStore store) {
+        var kids = new HashMap<UUID, List<DiskConfig>>();
+        var rootCfgs = new ArrayList<DiskConfig>();
+        var broken = new HashSet<UUID>();
+        for (int i = 0; i < store.size(); i++) {
+            var cfg = store.get(i);
+            var parentId = cfg.getParentId();
+            if (parentId == null) {
+                rootCfgs.add(cfg);
+            } else if (store.findById(parentId) != null) {
+                kids.computeIfAbsent(parentId, k -> new ArrayList<>()).add(cfg);
+            } else {
+                broken.add(cfg.getId());
+                rootCfgs.add(cfg);
+            }
+        }
+        var visited = new HashSet<UUID>();
+        var forest = new ArrayList<Node>();
+        for (var cfg : rootCfgs)
+            forest.add(buildNode(cfg, 0, kids, visited, broken, false));
+        // Cycle members are reachable from no root; promote each still-unvisited config (in
+        // registry order, so the promotion is deterministic) - the visited guard cuts the loop.
+        // Only the promoted node is marked broken; its descendants' links are intact.
+        for (int i = 0; i < store.size(); i++) {
+            var cfg = store.get(i);
+            if (!visited.contains(cfg.getId()))
+                forest.add(buildNode(cfg, 0, kids, visited, broken, true));
+        }
+        return forest;
+    }
+
+    /** The whole family tree containing {@code id} (walks up to the root, then expands). */
+    @Nullable
+    public static Node buildFamily(@NonNull DiskStore store, @NonNull UUID id) {
+        var rootId = rootOf(store, id);
+        for (var root : buildForest(store))
+            if (root.id().equals(rootId)) return root;
+        return null;
+    }
+
+    /** The root of {@code id}'s family; {@code id} itself on a broken link or cycle. */
+    @NonNull
+    public static UUID rootOf(@NonNull DiskStore store, @NonNull UUID id) {
+        var visited = new HashSet<UUID>();
+        var current = id;
+        while (visited.add(current)) {
+            var cfg = store.findById(current);
+            if (cfg == null) break;
+            var parentId = cfg.getParentId();
+            if (parentId == null || store.findById(parentId) == null) return current;
+            current = parentId;
+        }
+        return id; // cycle - treat the queried node as its own root
+    }
+
+    /**
+     * Depth-first flatten for list display. A node in {@code collapsedIds} is emitted but its
+     * descendants are skipped.
+     */
+    @NonNull
+    public static List<Node> flatten(
+        @NonNull List<Node> roots, @NonNull Set<UUID> collapsedIds) {
+        var out = new ArrayList<Node>();
+        for (var root : roots) flattenInto(root, collapsedIds, out);
+        return out;
+    }
+
+    private static void flattenInto(
+        @NonNull Node node, @NonNull Set<UUID> collapsedIds, @NonNull List<Node> out) {
+        out.add(node);
+        if (collapsedIds.contains(node.id())) return;
+        for (var child : node.children) flattenInto(child, collapsedIds, out);
+    }
+
+    @NonNull
+    private static Node buildNode(
+        @NonNull DiskConfig cfg,
+        int depth,
+        @NonNull Map<UUID, List<DiskConfig>> kids,
+        @NonNull Set<UUID> visited,
+        @NonNull Set<UUID> broken,
+        boolean cycleCut
+    ) {
+        visited.add(cfg.getId());
+        var node = new Node(cfg, depth, cycleCut || broken.contains(cfg.getId()));
+        var children = kids.get(cfg.getId());
+        if (children != null) {
+            for (var child : children) {
+                if (visited.contains(child.getId())) continue; // cycle edge - cut
+                node.children.add(buildNode(child, depth + 1, kids, visited, broken, false));
+            }
+        }
+        return node;
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/disk/tree/DiskTreeCollapse.java b/app/src/main/java/cn/classfun/droidvm/ui/disk/tree/DiskTreeCollapse.java
new file mode 100644
index 000000000..fdad323ec
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/ui/disk/tree/DiskTreeCollapse.java
@@ -0,0 +1,49 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
+package cn.classfun.droidvm.ui.disk.tree;
+
+import android.content.Context;
+
+import androidx.annotation.NonNull;
+
+import java.util.HashSet;
+import java.util.Set;
+import java.util.UUID;
+
+/**
+ * Which tree nodes the user collapsed on the main disk list, persisted so the list keeps its
+ * shape across sessions. Default is expanded - the point of the tree is seeing what stacks on
+ * what - so only explicitly collapsed ids are stored. Dialog trees keep their own in-memory
+ * state and don't touch this.
+ */
+public final class DiskTreeCollapse {
+    private static final String PREFS_NAME = "droidvm_prefs";
+    private static final String KEY = "disk_tree_collapsed";
+
+    private DiskTreeCollapse() {
+    }
+
+    @NonNull
+    public static Set<UUID> load(@NonNull Context context) {
+        var raw = context.getSharedPreferences(PREFS_NAME, Context.MODE_PRIVATE)
+            .getStringSet(KEY, null);
+        var out = new HashSet<UUID>();
+        if (raw != null) {
+            for (var s : raw) {
+                try {
+                    out.add(UUID.fromString(s));
+                } catch (IllegalArgumentException ignored) {
+                }
+            }
+        }
+        return out;
+    }
+
+    public static void save(@NonNull Context context, @NonNull Set<UUID> collapsed) {
+        var raw = new HashSet<String>();
+        for (var id : collapsed) raw.add(id.toString());
+        context.getSharedPreferences(PREFS_NAME, Context.MODE_PRIVATE)
+            .edit().putStringSet(KEY, raw).apply();
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/disk/tree/DiskTreeView.java b/app/src/main/java/cn/classfun/droidvm/ui/disk/tree/DiskTreeView.java
new file mode 100644
index 000000000..57bd14ef4
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/ui/disk/tree/DiskTreeView.java
@@ -0,0 +1,254 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
+package cn.classfun.droidvm.ui.disk.tree;
+
+import static android.view.View.GONE;
+import static android.view.View.VISIBLE;
+import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
+
+import android.annotation.SuppressLint;
+import android.content.Context;
+import android.util.AttributeSet;
+import android.view.LayoutInflater;
+import android.view.View;
+import android.view.ViewGroup;
+import android.widget.ImageButton;
+import android.widget.ImageView;
+import android.widget.TextView;
+
+import androidx.annotation.NonNull;
+import androidx.annotation.Nullable;
+import androidx.recyclerview.widget.LinearLayoutManager;
+import androidx.recyclerview.widget.RecyclerView;
+
+import com.google.android.material.radiobutton.MaterialRadioButton;
+
+import java.util.ArrayList;
+import java.util.HashMap;
+import java.util.HashSet;
+import java.util.List;
+import java.util.Map;
+import java.util.Set;
+import java.util.UUID;
+
+import cn.classfun.droidvm.R;
+import cn.classfun.droidvm.ui.disk.create.DiskFormat;
+
+/**
+ * Compact rendering of an overlay-relation tree, used inside dialogs (branch panel, disk
+ * picker) and info views. Feed it {@link DiskTree} roots; rows indent by depth, parents get a
+ * working collapse chevron (in-memory state - the main list's persisted collapse is separate),
+ * locked disks show the padlock, broken links a warning line, and an optional per-node label
+ * (which VMs attach it). Optional single-selection with a radio column and an optional per-node
+ * menu button. {@link #updateRoots} swaps the tree in place, keeping collapse and selection for
+ * nodes that survived.
+ */
+public final class DiskTreeView extends RecyclerView {
+    public interface Listener {
+        /** Row tapped in selectable mode (already reflected in the UI). */
+        default void onNodeSelected(@NonNull DiskTree.Node node) {
+        }
+
+        /** Node menu button tapped. */
+        default void onNodeMenu(@NonNull View anchor, @NonNull DiskTree.Node node) {
+        }
+    }
+
+    private static final int INDENT_DP = 16;
+    private static final int MAX_INDENT_STEPS = 4;
+
+    private final Adapter adapter = new Adapter();
+    private List<DiskTree.Node> roots = new ArrayList<>();
+    private final List<DiskTree.Node> flat = new ArrayList<>();
+    private final Set<UUID> collapsed = new HashSet<>();
+    private final Map<UUID, String> labels = new HashMap<>();
+    private boolean selectable = false;
+    private boolean showNodeMenu = false;
+    @Nullable
+    private UUID currentId;
+    @Nullable
+    private UUID selectedId;
+    @Nullable
+    private Listener listener;
+
+    public DiskTreeView(@NonNull Context context) {
+        super(context);
+        init();
+    }
+
+    public DiskTreeView(@NonNull Context context, @Nullable AttributeSet attrs) {
+        super(context, attrs);
+        init();
+    }
+
+    public DiskTreeView(@NonNull Context context, @Nullable AttributeSet attrs, int defStyle) {
+        super(context, attrs, defStyle);
+        init();
+    }
+
+    private void init() {
+        setLayoutManager(new LinearLayoutManager(getContext()));
+        setAdapter(adapter);
+    }
+
+    public void configure(
+        boolean selectable,
+        boolean showNodeMenu,
+        @Nullable UUID currentId,
+        @Nullable Listener listener
+    ) {
+        this.selectable = selectable;
+        this.showNodeMenu = showNodeMenu;
+        this.currentId = currentId;
+        this.listener = listener;
+        if (selectable) this.selectedId = currentId;
+    }
+
+    /** Replace the tree contents (fully expanded) and repaint. */
+    public void setRoots(@NonNull List<DiskTree.Node> roots) {
+        this.roots = roots;
+        collapsed.clear();
+        rebuild();
+    }
+
+    /** Replace the tree contents, keeping collapse state of nodes still present. */
+    public void updateRoots(@NonNull List<DiskTree.Node> roots) {
+        this.roots = roots;
+        var present = new HashSet<UUID>();
+        for (var n : DiskTree.flatten(roots, Set.of())) present.add(n.id());
+        collapsed.retainAll(present);
+        if (selectedId != null && !present.contains(selectedId)) selectedId = null;
+        rebuild();
+    }
+
+    /** The node marked "attached" (the caller's own attachment). */
+    public void setCurrentId(@Nullable UUID currentId) {
+        this.currentId = currentId;
+        adapter.notifyDataSetChanged();
+    }
+
+    public void setSelectedId(@Nullable UUID id) {
+        this.selectedId = id;
+        adapter.notifyDataSetChanged();
+    }
+
+    /** Per-node text shown under the name (e.g. which VMs attach it). */
+    public void setCursorLabels(@NonNull Map<UUID, String> labels) {
+        this.labels.clear();
+        this.labels.putAll(labels);
+        adapter.notifyDataSetChanged();
+    }
+
+    @Nullable
+    public UUID getSelectedId() {
+        return selectedId;
+    }
+
+    @Nullable
+    public DiskTree.Node getSelectedNode() {
+        if (selectedId == null) return null;
+        for (var n : DiskTree.flatten(roots, Set.of()))
+            if (n.id().equals(selectedId)) return n;
+        return null;
+    }
+
+    @SuppressLint("NotifyDataSetChanged")
+    private void rebuild() {
+        flat.clear();
+        flat.addAll(DiskTree.flatten(roots, collapsed));
+        adapter.notifyDataSetChanged();
+    }
+
+    private final class Adapter extends RecyclerView.Adapter<Holder> {
+        @NonNull
+        @Override
+        public Holder onCreateViewHolder(@NonNull ViewGroup parent, int viewType) {
+            var v = LayoutInflater.from(parent.getContext())
+                .inflate(R.layout.item_disk_tree_row, parent, false);
+            return new Holder(v);
+        }
+
+        @Override
+        public void onBindViewHolder(@NonNull Holder h, int position) {
+            h.bind(flat.get(position));
+        }
+
+        @Override
+        public int getItemCount() {
+            return flat.size();
+        }
+    }
+
+    private final class Holder extends RecyclerView.ViewHolder {
+        private final View root;
+        private final ImageButton chevron;
+        private final ImageView icon;
+        private final TextView name;
+        private final TextView sub;
+        private final ImageView lock;
+        private final MaterialRadioButton radio;
+        private final ImageButton menu;
+
+        Holder(@NonNull View v) {
+            super(v);
+            root = v.findViewById(R.id.tree_row_root);
+            chevron = v.findViewById(R.id.tree_chevron);
+            icon = v.findViewById(R.id.tree_icon);
+            name = v.findViewById(R.id.tree_name);
+            sub = v.findViewById(R.id.tree_sub);
+            lock = v.findViewById(R.id.tree_lock);
+            radio = v.findViewById(R.id.tree_radio);
+            menu = v.findViewById(R.id.tree_menu);
+        }
+
+        @SuppressLint("NotifyDataSetChanged")
+        void bind(@NonNull DiskTree.Node node) {
+            var ctx = root.getContext();
+            float density = ctx.getResources().getDisplayMetrics().density;
+            int steps = Math.min(node.depth, MAX_INDENT_STEPS);
+            root.setPaddingRelative(
+                Math.round(steps * INDENT_DP * density),
+                root.getPaddingTop(), root.getPaddingEnd(), root.getPaddingBottom());
+
+            name.setText(node.config.getName());
+            icon.setImageResource(node.config.getFormat() == DiskFormat.ISO
+                ? R.drawable.ic_cdrom : R.drawable.ic_nav_disk);
+
+            boolean isCollapsed = collapsed.contains(node.id());
+            chevron.setVisibility(node.hasChildren() ? VISIBLE : View.INVISIBLE);
+            chevron.setRotation(isCollapsed ? -90 : 0);
+            chevron.setOnClickListener(v -> {
+                if (!collapsed.remove(node.id())) collapsed.add(node.id());
+                rebuild();
+            });
+
+            lock.setVisibility(node.hasChildren() ? VISIBLE : GONE);
+
+            var parts = new ArrayList<String>();
+            if (node.brokenParent) parts.add(ctx.getString(R.string.disk_tree_broken_parent));
+            if (isCollapsed && node.hasChildren()) parts.add(fmt("+%d", node.countDescendants()));
+            if (currentId != null && currentId.equals(node.id()))
+                parts.add(ctx.getString(R.string.disk_tree_current_attached));
+            var label = labels.get(node.id());
+            if (label != null && !label.isEmpty()) parts.add(label);
+            sub.setVisibility(parts.isEmpty() ? GONE : VISIBLE);
+            sub.setText(String.join("  ", parts));
+
+            radio.setVisibility(selectable ? VISIBLE : GONE);
+            radio.setChecked(selectable && node.id().equals(selectedId));
+
+            menu.setVisibility(showNodeMenu ? VISIBLE : GONE);
+            menu.setOnClickListener(v -> {
+                if (listener != null) listener.onNodeMenu(v, node);
+            });
+
+            root.setOnClickListener(v -> {
+                if (!selectable) return;
+                selectedId = node.id();
+                adapter.notifyDataSetChanged();
+                if (listener != null) listener.onNodeSelected(node);
+            });
+        }
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/disk/tree/TreeShape.java b/app/src/main/java/cn/classfun/droidvm/ui/disk/tree/TreeShape.java
new file mode 100644
index 000000000..6f0c47d35
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/ui/disk/tree/TreeShape.java
@@ -0,0 +1,192 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
+package cn.classfun.droidvm.ui.disk.tree;
+
+import androidx.annotation.NonNull;
+import androidx.annotation.Nullable;
+
+import java.util.ArrayDeque;
+import java.util.ArrayList;
+import java.util.HashMap;
+import java.util.HashSet;
+import java.util.LinkedHashSet;
+import java.util.Map;
+import java.util.Set;
+import java.util.UUID;
+
+import cn.classfun.droidvm.lib.store.disk.DiskStore;
+
+/**
+ * The registry's parent links at one instant, plus each node's path and display name. Pure and
+ * immutable; the {@code with*} builders return the shape an operation WOULD leave behind, so a
+ * {@link CursorPlan} can be computed (and shown to the user) before anything runs, with the very
+ * same code that reconciles attachments after it ran.
+ */
+public final class TreeShape {
+    private final Set<UUID> nodes = new LinkedHashSet<>();
+    private final Map<UUID, UUID> parentOf = new HashMap<>();
+    private final Map<UUID, String> pathOf = new HashMap<>();
+    private final Map<UUID, String> nameOf = new HashMap<>();
+
+    private TreeShape() {
+    }
+
+    /** Snapshot of a whole registry; a parent id that isn't registered reads as "root". */
+    @NonNull
+    public static TreeShape of(@NonNull DiskStore store) {
+        var shape = new TreeShape();
+        for (int i = 0; i < store.size(); i++) {
+            var cfg = store.get(i);
+            shape.put(cfg.getId(), cfg.getFullPath(), cfg.getName(), null);
+        }
+        for (int i = 0; i < store.size(); i++) {
+            var cfg = store.get(i);
+            var parent = cfg.getParentId();
+            if (parent != null && shape.nodes.contains(parent))
+                shape.parentOf.put(cfg.getId(), parent);
+        }
+        return shape;
+    }
+
+    /** Empty shape for building by hand (tests, predictions). */
+    @NonNull
+    public static TreeShape empty() {
+        return new TreeShape();
+    }
+
+    /** Add or replace a node; a null parent makes it a root. Returns this for chaining. */
+    @NonNull
+    public TreeShape put(
+        @NonNull UUID id, @NonNull String path, @NonNull String name, @Nullable UUID parent) {
+        nodes.add(id);
+        pathOf.put(id, path);
+        nameOf.put(id, name);
+        if (parent == null) parentOf.remove(id);
+        else parentOf.put(id, parent);
+        return this;
+    }
+
+    public boolean contains(@NonNull UUID id) {
+        return nodes.contains(id);
+    }
+
+    @NonNull
+    public Set<UUID> nodes() {
+        return new LinkedHashSet<>(nodes);
+    }
+
+    @Nullable
+    public UUID parentOf(@NonNull UUID id) {
+        return parentOf.get(id);
+    }
+
+    @Nullable
+    public String pathOf(@NonNull UUID id) {
+        return pathOf.get(id);
+    }
+
+    @Nullable
+    public String nameOf(@NonNull UUID id) {
+        return nameOf.get(id);
+    }
+
+    public boolean hasChildren(@NonNull UUID id) {
+        return parentOf.containsValue(id);
+    }
+
+    /** {@code id} and every descendant, cycle-guarded; empty when {@code id} is unknown. */
+    @NonNull
+    public Set<UUID> subtreeOf(@NonNull UUID id) {
+        var out = new LinkedHashSet<UUID>();
+        if (!nodes.contains(id)) return out;
+        var queue = new ArrayDeque<UUID>();
+        queue.add(id);
+        while (!queue.isEmpty()) {
+            var cur = queue.poll();
+            if (!out.add(cur)) continue;
+            for (var e : parentOf.entrySet())
+                if (cur.equals(e.getValue())) queue.add(e.getKey());
+        }
+        return out;
+    }
+
+    /** Root of {@code id}'s family (itself on a cycle). */
+    @NonNull
+    public UUID rootOf(@NonNull UUID id) {
+        var seen = new HashSet<UUID>();
+        var cur = id;
+        while (seen.add(cur)) {
+            var p = parentOf.get(cur);
+            if (p == null) return cur;
+            cur = p;
+        }
+        return id;
+    }
+
+    /** All nodes sharing a root with {@code id}. */
+    @NonNull
+    public Set<UUID> familyOf(@NonNull UUID id) {
+        return subtreeOf(rootOf(id));
+    }
+
+    // ---- predictions -------------------------------------------------------------------------
+
+    @NonNull
+    private TreeShape copy() {
+        var s = new TreeShape();
+        s.nodes.addAll(nodes);
+        s.parentOf.putAll(parentOf);
+        s.pathOf.putAll(pathOf);
+        s.nameOf.putAll(nameOf);
+        return s;
+    }
+
+    /** After deleting {@code removed} (callers pass a whole subtree). */
+    @NonNull
+    public TreeShape without(@NonNull Set<UUID> removed) {
+        var s = copy();
+        for (var id : removed) {
+            s.nodes.remove(id);
+            s.parentOf.remove(id);
+            s.pathOf.remove(id);
+            s.nameOf.remove(id);
+        }
+        s.parentOf.values().removeIf(removed::contains);
+        return s;
+    }
+
+    /** After merging {@code node} into its parent: node gone, its children re-based onto it. */
+    @NonNull
+    public TreeShape withMerged(@NonNull UUID node) {
+        var s = copy();
+        var parent = parentOf.get(node);
+        var children = new ArrayList<UUID>();
+        for (var e : s.parentOf.entrySet())
+            if (node.equals(e.getValue())) children.add(e.getKey());
+        for (var child : children) {
+            if (parent == null) s.parentOf.remove(child);
+            else s.parentOf.put(child, parent);
+        }
+        s.nodes.remove(node);
+        s.parentOf.remove(node);
+        s.pathOf.remove(node);
+        s.nameOf.remove(node);
+        return s;
+    }
+
+    /** After creating overlay {@code newId} on top of {@code under}. */
+    @NonNull
+    public TreeShape withChild(
+        @NonNull UUID newId, @NonNull String path, @NonNull String name, @NonNull UUID under) {
+        return copy().put(newId, path, name, under);
+    }
+
+    /** After flattening {@code node}: it keeps its children but becomes a root of its own. */
+    @NonNull
+    public TreeShape withDetached(@NonNull UUID node) {
+        var s = copy();
+        s.parentOf.remove(node);
+        return s;
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/main/base/list/DataAdapter.java b/app/src/main/java/cn/classfun/droidvm/ui/main/base/list/DataAdapter.java
index c4c882500..8e168c567 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/main/base/list/DataAdapter.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/main/base/list/DataAdapter.java
@@ -54,9 +54,19 @@ public final BaseViewHolder onCreateViewHolder(@NonNull ViewGroup parent, int vi
         return new BaseViewHolder(v);
     }
 
+    /**
+     * The config shown at an adapter position. Defaults to store order; adapters that reorder
+     * or hide rows (e.g. the disk overlay tree) override this together with
+     * {@link #getItemCount()}.
+     */
+    @NonNull
+    protected D itemAt(int position) {
+        return items.get(position);
+    }
+
     @Override
     public void onBindViewHolder(@NonNull BaseViewHolder h, int position) {
-        var d = items.get(position);
+        var d = itemAt(position);
         var ctx = h.itemView.getContext();
         var drawable = AppCompatResources.getDrawable(ctx, getIconResId(d));
         h.itemIcon.setImageDrawable(drawable);
@@ -82,7 +92,7 @@ public void onItemsUpdated() {
     }
 
     @Override
-    public final int getItemCount() {
+    public int getItemCount() {
         return items.size();
     }
 
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/main/base/list/MainListFragment.java b/app/src/main/java/cn/classfun/droidvm/ui/main/base/list/MainListFragment.java
index 7b673f056..afb1385bf 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/main/base/list/MainListFragment.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/main/base/list/MainListFragment.java
@@ -68,11 +68,16 @@ private void onItemClick(@NonNull View v, @NonNull D config) {
     private boolean onItemLongClick(@NonNull View v, @NonNull D config) {
         var pop = new MaterialMenu(requireContext(), v);
         pop.inflate(getItemMenuResId(config));
+        onPrepareItemMenu(config, pop);
         pop.setOnMenuItemClickListener(item -> onMenuClicked(config, item));
         pop.showAtTouch(lastTouchX, 0);
         return true;
     }
 
+    /** Hook to hide or tweak items of the long-press menu for this particular {@code config}. */
+    protected void onPrepareItemMenu(@NonNull D config, @NonNull MaterialMenu menu) {
+    }
+
     @NonNull
     private A createAdapter() {
         try {
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/main/disk/DiskAdapter.java b/app/src/main/java/cn/classfun/droidvm/ui/main/disk/DiskAdapter.java
index e2355af39..354c6c824 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/main/disk/DiskAdapter.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/main/disk/DiskAdapter.java
@@ -3,17 +3,25 @@
 // Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.ui.main.disk;
 
+import static android.view.View.GONE;
 import static android.view.View.VISIBLE;
 import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
 import static cn.classfun.droidvm.lib.size.SizeUtils.formatSize;
 
+import android.annotation.SuppressLint;
 import android.content.Context;
 import android.util.Log;
 
 import androidx.annotation.NonNull;
+import androidx.annotation.Nullable;
 
+import java.util.ArrayList;
 import java.util.HashMap;
+import java.util.HashSet;
+import java.util.List;
 import java.util.Map;
+import java.util.Set;
+import java.util.UUID;
 import java.util.concurrent.ExecutorService;
 import java.util.concurrent.Executors;
 
@@ -22,21 +30,59 @@
 import cn.classfun.droidvm.lib.store.disk.DiskStore;
 import cn.classfun.droidvm.lib.utils.ImageUtils;
 import cn.classfun.droidvm.ui.disk.create.DiskFormat;
+import cn.classfun.droidvm.ui.disk.tree.DiskTree;
+import cn.classfun.droidvm.ui.disk.tree.DiskTreeCollapse;
 import cn.classfun.droidvm.ui.main.base.BaseViewHolder;
 import cn.classfun.droidvm.ui.main.base.list.DataAdapter;
 
 public final class DiskAdapter extends DataAdapter<DiskConfig, DiskStore> {
+    private static final int INDENT_DP = 16;
+    private static final int MAX_INDENT_STEPS = 4;
+
     private final Map<String, ImageInfo> infoCache = new HashMap<>();
     private final ExecutorService executor = Executors.newSingleThreadExecutor();
+    // The overlay forest flattened for display: rows follow tree order, collapsed subtrees are
+    // hidden. Rebuilt from the store on every refresh; collapse choices persist via
+    // DiskTreeCollapse (injected context - the reflective adapter construction has none).
+    private final List<DiskTree.Node> flat = new ArrayList<>();
+    private final Set<UUID> collapsed = new HashSet<>();
+    @Nullable
+    private Context appContext;
 
     public DiskAdapter() {
         super(DiskStore.class);
     }
 
+    /** Called once by the fragment; enables collapse persistence. */
+    public void attachContext(@NonNull Context context) {
+        appContext = context.getApplicationContext();
+        collapsed.clear();
+        collapsed.addAll(DiskTreeCollapse.load(appContext));
+        rebuildFlat();
+    }
+
     @Override
     public void onItemsUpdated() {
-        super.onItemsUpdated();
         infoCache.clear();
+        rebuildFlat();
+        super.onItemsUpdated();
+    }
+
+    @SuppressLint("NotifyDataSetChanged")
+    private void rebuildFlat() {
+        flat.clear();
+        flat.addAll(DiskTree.flatten(DiskTree.buildForest(items), collapsed));
+    }
+
+    @NonNull
+    @Override
+    protected DiskConfig itemAt(int position) {
+        return flat.get(position).config;
+    }
+
+    @Override
+    public int getItemCount() {
+        return flat.size();
     }
 
     @Override
@@ -48,7 +94,8 @@ public int getIconResId(@NonNull DiskConfig disk) {
 
     @Override
     public void onBindViewHolder(@NonNull BaseViewHolder h, int position) {
-        var d = items.get(position);
+        var node = flat.get(position);
+        var d = node.config;
         h.itemCenter.setVisibility(VISIBLE);
         h.itemCenter.setText(d.item.optString("folder", ""));
         final Context ctx = h.itemView.getContext();
@@ -71,6 +118,53 @@ public void onBindViewHolder(@NonNull BaseViewHolder h, int position) {
             d.getFormat().name()
         ));
         super.onBindViewHolder(h, position);
+        bindTreeChrome(h, node, ctx);
+    }
+
+    // Overlay-tree adornments: indent by depth, padlock start-drawable on a locked (has-children)
+    // name, chevron on the action button toggling collapse, "+N" state badge while collapsed,
+    // warning badge on a broken parent link.
+    private void bindTreeChrome(
+        @NonNull BaseViewHolder h, @NonNull DiskTree.Node node, @NonNull Context ctx) {
+        float density = ctx.getResources().getDisplayMetrics().density;
+        int steps = Math.min(node.depth, MAX_INDENT_STEPS);
+        h.itemView.setPaddingRelative(
+            Math.round((8 + steps * INDENT_DP) * density),
+            h.itemView.getPaddingTop(),
+            Math.round(8 * density),
+            h.itemView.getPaddingBottom());
+
+        h.itemName.setCompoundDrawablesRelativeWithIntrinsicBounds(
+            0, 0, node.hasChildren() ? R.drawable.ic_lock : 0, 0);
+
+        boolean isCollapsed = collapsed.contains(node.id());
+        if (node.hasChildren()) {
+            h.itemAction.setVisibility(VISIBLE);
+            h.itemAction.setImageResource(R.drawable.ic_expand_more);
+            h.itemAction.setRotation(isCollapsed ? -90 : 0);
+            h.itemAction.setOnClickListener(v -> toggleCollapse(node.id()));
+        } else {
+            h.itemAction.setVisibility(GONE);
+            h.itemAction.setOnClickListener(null);
+        }
+
+        if (node.brokenParent) {
+            h.itemState.setVisibility(VISIBLE);
+            h.itemState.setText(R.string.disk_tree_broken_parent);
+        } else if (isCollapsed && node.hasChildren()) {
+            h.itemState.setVisibility(VISIBLE);
+            h.itemState.setText(fmt("+%d", node.countDescendants()));
+        } else {
+            h.itemState.setVisibility(GONE);
+        }
+    }
+
+    @SuppressLint("NotifyDataSetChanged")
+    private void toggleCollapse(@NonNull UUID id) {
+        if (!collapsed.remove(id)) collapsed.add(id);
+        if (appContext != null) DiskTreeCollapse.save(appContext, collapsed);
+        rebuildFlat();
+        notifyDataSetChanged();
     }
 
     private void loadImageInfoAsync(String path, int position) {
@@ -86,7 +180,8 @@ private void loadImageInfoAsync(String path, int position) {
             var result = new ImageInfo(virtualSize, actualSize);
             mainHandler.post(() -> {
                 infoCache.put(path, result);
-                if (position < items.size() && path.equals(items.get(position).getFullPath())) {
+                if (position < flat.size()
+                    && path.equals(flat.get(position).config.getFullPath())) {
                     try {
                         notifyItemChanged(position);
                     } catch (Exception ignored) {
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/main/disk/MainDiskFragment.java b/app/src/main/java/cn/classfun/droidvm/ui/main/disk/MainDiskFragment.java
index a472f6689..842817143 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/main/disk/MainDiskFragment.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/main/disk/MainDiskFragment.java
@@ -61,10 +61,14 @@ protected Class<? extends Activity> getInfoActivity() {
 
     @Override
     protected int getItemMenuResId(@NonNull DiskConfig config) {
-        var fmt = config.getFormat();
-        if (!DiskConfig.supportsExtraOperations(fmt))
-            return R.menu.menu_disk_actions_simple;
-        return R.menu.menu_disk_actions;
+        return DiskActionDialog.getMenuResId(config);
+    }
+
+    @Override
+    protected void onPrepareItemMenu(@NonNull DiskConfig config, @NonNull MaterialMenu menu) {
+        // Reset is for writable leaf overlays only; a base with overlays never shows it.
+        menu.setItemVisible(R.id.menu_disk_reset,
+            config.getParentId() != null && !adapter.items.hasChildren(config.getId()));
     }
 
     @Override
@@ -81,4 +85,11 @@ public void onCreate(@Nullable Bundle savedInstanceState) {
             new OpenDocument(), uri -> dialog.onFileImported(uri)
         );
     }
+
+    @Override
+    public void onViewCreated(@NonNull View view, @Nullable Bundle savedInstanceState) {
+        super.onViewCreated(view, savedInstanceState);
+        // Enables collapse persistence for the overlay tree.
+        adapter.attachContext(requireContext());
+    }
 }
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/main/home/MainHomeFragment.java b/app/src/main/java/cn/classfun/droidvm/ui/main/home/MainHomeFragment.java
index 3bb466986..272cd4469 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/main/home/MainHomeFragment.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/main/home/MainHomeFragment.java
@@ -4,7 +4,6 @@
 package cn.classfun.droidvm.ui.main.home;
 
 import static android.content.Intent.ACTION_VIEW;
-import static android.widget.Toast.LENGTH_SHORT;
 import static cn.classfun.droidvm.lib.Constants.GITHUB_ISSUE_URL;
 import static cn.classfun.droidvm.lib.size.SizeUtils.formatSize;
 import static cn.classfun.droidvm.lib.utils.ThreadUtils.runOnPool;
@@ -17,7 +16,6 @@
 import android.view.View;
 import android.widget.ImageView;
 import android.widget.TextView;
-import android.widget.Toast;
 
 import androidx.annotation.MenuRes;
 import androidx.annotation.NonNull;
@@ -47,6 +45,7 @@
 import cn.classfun.droidvm.ui.update.UpdateDialog;
 import cn.classfun.droidvm.ui.update.UpdateInfo;
 import cn.classfun.droidvm.ui.update.VersionCheck;
+import cn.classfun.droidvm.ui.vm.VMCreateMenu;
 import cn.classfun.droidvm.ui.vm.pkg.imports.VMPkgImportActivity;
 
 public final class MainHomeFragment extends MainBaseFragment
@@ -342,7 +341,7 @@ private void navigateToTab(int navId) {
     }
 
     private void openWizard() {
-        Toast.makeText(requireContext(), R.string.unimplement, LENGTH_SHORT).show();
+        VMCreateMenu.show(requireContext());
     }
 
     private void openImport() {
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/main/settings/MainSettingsFragment.java b/app/src/main/java/cn/classfun/droidvm/ui/main/settings/MainSettingsFragment.java
index 0ae19e041..fd2201256 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/main/settings/MainSettingsFragment.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/main/settings/MainSettingsFragment.java
@@ -25,6 +25,7 @@
 import androidx.activity.result.contract.ActivityResultContracts;
 import androidx.annotation.MenuRes;
 import androidx.annotation.NonNull;
+import androidx.annotation.StringRes;
 import androidx.annotation.Nullable;
 import androidx.appcompat.app.AppCompatDelegate;
 import androidx.core.os.LocaleListCompat;
@@ -38,6 +39,7 @@
 import java.io.InputStreamReader;
 import java.nio.charset.StandardCharsets;
 import java.text.SimpleDateFormat;
+import java.util.ArrayList;
 import java.util.Date;
 import java.util.HashSet;
 import java.util.Locale;
@@ -57,6 +59,8 @@
 import cn.classfun.droidvm.lib.store.vm.VMStore;
 import cn.classfun.droidvm.lib.ui.UIContext;
 import cn.classfun.droidvm.lib.utils.CpuUtils;
+import cn.classfun.droidvm.ui.disk.create.DiskCompress;
+import cn.classfun.droidvm.ui.disk.operation.OptimizeCompression;
 import cn.classfun.droidvm.ui.hugepage.HugePageActivity;
 import cn.classfun.droidvm.ui.main.base.MainBaseFragment;
 import cn.classfun.droidvm.ui.setup.SetupActivity;
@@ -72,7 +76,9 @@ public final class MainSettingsFragment extends MainBaseFragment {
     private static final String PREFS_NAME = "droidvm_prefs";
     public static final String KEY_VM_AUTO_CONSOLE = "vm_auto_console";
     public static final String KEY_VM_CLEAR_LOGS_BEFORE_START = "vm_clear_logs_before_start";
-    public static final String KEY_VM_KEEP_COMPRESS_ON_OPTIMIZE = "vm_keep_compress_on_optimize";
+    public static final String KEY_VM_OPTIMIZE_COMPRESSION = "vm_optimize_compression";
+    /** Sentinel for {@link #KEY_VM_OPTIMIZE_COMPRESSION}: prompt on every optimize. */
+    public static final String OPTIMIZE_COMPRESSION_ASK = "ask";
     public static final String KEY_QEMU_IMG_CPU_AFFINITY = "qemu_img_cpu_affinity";
     public static final String KEY_OPTIMIZE_SDCARD = "optimize_sdcard";
     public static final String KEY_AUTO_CHECK_UPDATE = "auto_check_update";
@@ -88,7 +94,7 @@ public final class MainSettingsFragment extends MainBaseFragment {
     private TextRowWidget itemDaemonRestart;
     private SwitchRowWidget itemVMAutoConsole;
     private SwitchRowWidget itemVMClearLogsBeforeStart;
-    private SwitchRowWidget itemVMKeepCompressOnOptimize;
+    private TextRowWidget itemVMOptimizeCompression;
     private SwitchRowWidget itemOptimizeSdcard;
     private TextRowWidget itemCpuAffinity;
     private TextRowWidget itemLicense;
@@ -145,7 +151,7 @@ public void onViewCreated(@NonNull View view, @Nullable Bundle savedInstanceStat
         itemDaemonRestart = view.findViewById(R.id.item_daemon_restart);
         itemVMAutoConsole = view.findViewById(R.id.item_vm_auto_console);
         itemVMClearLogsBeforeStart = view.findViewById(R.id.item_vm_clear_logs_before_start);
-        itemVMKeepCompressOnOptimize = view.findViewById(R.id.item_vm_keep_compress_on_optimize);
+        itemVMOptimizeCompression = view.findViewById(R.id.item_vm_optimize_compression);
         itemOptimizeSdcard = view.findViewById(R.id.item_optimize_sdcard);
         itemCpuAffinity = view.findViewById(R.id.item_cpu_affinity);
         itemLicense = view.findViewById(R.id.item_license);
@@ -178,7 +184,8 @@ private void initSettings() {
         bindOnClick(itemDaemonRestart, daemon::asyncRestartDaemon);
         bindOnChecked(itemVMAutoConsole, KEY_VM_AUTO_CONSOLE, false);
         bindOnChecked(itemVMClearLogsBeforeStart, KEY_VM_CLEAR_LOGS_BEFORE_START, false);
-        bindOnChecked(itemVMKeepCompressOnOptimize, KEY_VM_KEEP_COMPRESS_ON_OPTIMIZE, false);
+        bindOnClick(itemVMOptimizeCompression, this::showOptimizeCompressionDialog);
+        refreshOptimizeCompressionSummary();
         bindOnClick(itemCpuAffinity, this::showCpuAffinityDialog);
         refreshCpuAffinitySummary();
         bindOnChecked(itemOptimizeSdcard, KEY_OPTIMIZE_SDCARD, true);
@@ -225,9 +232,58 @@ public static boolean isClearLogsBeforeStartEnabled(@NonNull Context context) {
         return prefs.getBoolean(KEY_VM_CLEAR_LOGS_BEFORE_START, false);
     }
 
-    public static boolean isKeepCompressOnOptimizeEnabled(@NonNull Context context) {
+    /**
+     * The compression a disk optimize should target: the wire value of a member of
+     * {@link DiskCompress#CROSVM_SUPPORTED}, or {@link #OPTIMIZE_COMPRESSION_ASK} to prompt
+     * each time (the prompt's "remember" writes this back). A stored value that isn't (or is
+     * no longer) crosvm-supported reads as ask.
+     */
+    @NonNull
+    public static String getOptimizeCompression(@NonNull Context context) {
+        var prefs = context.getSharedPreferences(PREFS_NAME, Context.MODE_PRIVATE);
+        var value = prefs.getString(KEY_VM_OPTIMIZE_COMPRESSION, OPTIMIZE_COMPRESSION_ASK);
+        var compress = DiskCompress.fromValue(value);
+        if (compress != null && compress.isCrosvmSupported()) return value;
+        return OPTIMIZE_COMPRESSION_ASK;
+    }
+
+    public static void setOptimizeCompression(@NonNull Context context, @NonNull String value) {
+        context.getSharedPreferences(PREFS_NAME, Context.MODE_PRIVATE)
+            .edit().putString(KEY_VM_OPTIMIZE_COMPRESSION, value).apply();
+    }
+
+    @StringRes
+    private static int optimizeCompressionLabel(@NonNull String value) {
+        var compress = DiskCompress.fromValue(value);
+        if (compress != null) return OptimizeCompression.labelOf(compress);
+        return R.string.settings_optimize_compression_ask;
+    }
+
+    private void refreshOptimizeCompressionSummary() {
+        itemVMOptimizeCompression.setSubtitle(
+            optimizeCompressionLabel(getOptimizeCompression(requireContext())));
+    }
+
         var prefs = context.getSharedPreferences(PREFS_NAME, Context.MODE_PRIVATE);
-        return prefs.getBoolean(KEY_VM_KEEP_COMPRESS_ON_OPTIMIZE, false);
+    // Ask + every crosvm-supported compression; the list grows as CROSVM_SUPPORTED does.
+    private void showOptimizeCompressionDialog() {
+        var values = new ArrayList<String>();
+        values.add(OPTIMIZE_COMPRESSION_ASK);
+        for (var compress : DiskCompress.CROSVM_SUPPORTED) values.add(compress.value());
+        var labels = new String[values.size()];
+        for (int i = 0; i < values.size(); i++)
+            labels[i] = getString(optimizeCompressionLabel(values.get(i)));
+        var current = getOptimizeCompression(requireContext());
+        int checked = Math.max(0, values.indexOf(current));
+        new MaterialAlertDialogBuilder(requireContext())
+            .setTitle(R.string.settings_optimize_compression_title)
+            .setSingleChoiceItems(labels, checked, (d, which) -> {
+                setOptimizeCompression(requireContext(), values.get(which));
+                refreshOptimizeCompressionSummary();
+                d.dismiss();
+            })
+            .setNegativeButton(android.R.string.cancel, null)
+            .show();
     }
 
     public static boolean isAutoCheckUpdateEnabled(@NonNull Context context) {
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/main/vm/MainVMFragment.java b/app/src/main/java/cn/classfun/droidvm/ui/main/vm/MainVMFragment.java
index dc8f0a984..f4da8344e 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/main/vm/MainVMFragment.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/main/vm/MainVMFragment.java
@@ -17,24 +17,25 @@
 import androidx.annotation.NonNull;
 import androidx.annotation.Nullable;
 
-import com.google.android.material.dialog.MaterialAlertDialogBuilder;
 
 import java.util.UUID;
 import java.util.concurrent.atomic.AtomicBoolean;
 
 import cn.classfun.droidvm.DroidVMApp;
 import cn.classfun.droidvm.R;
-import cn.classfun.droidvm.lib.daemon.DaemonConnection;
 import cn.classfun.droidvm.lib.daemon.ForegroundCallback;
 import cn.classfun.droidvm.lib.store.vm.VMConfig;
 import cn.classfun.droidvm.lib.store.vm.VMState;
 import cn.classfun.droidvm.lib.store.vm.VMStore;
 import cn.classfun.droidvm.ui.main.base.stateful.MainStatefulFragment;
 import cn.classfun.droidvm.ui.vm.VMActions;
+import cn.classfun.droidvm.ui.vm.VMCreateMenu;
+import cn.classfun.droidvm.ui.vm.VMDeletion;
 import cn.classfun.droidvm.ui.vm.console.VMConsoleRouter;
 import cn.classfun.droidvm.ui.vm.edit.VMEditActivity;
 import cn.classfun.droidvm.ui.vm.info.VMInfoActivity;
 import cn.classfun.droidvm.ui.vm.pkg.exports.VMPkgExportActivity;
+import cn.classfun.droidvm.ui.vm.pkg.imports.VMPkgImportActivity;
 
 public final class MainVMFragment
     extends MainStatefulFragment<VMConfig, VMStore, VMAdapter, VMState>
@@ -76,7 +77,7 @@ public int getTitleResId() {
 
     @Override
     public void onFabClick(@NonNull View v) {
-        startActivity(new Intent(requireContext(), VMEditActivity.class));
+        VMCreateMenu.show(requireContext());
     }
 
     @NonNull
@@ -155,23 +156,16 @@ protected void onActionClicked(VMConfig config, VMState currentState) {
         }
     }
 
-    private void deleteVM(@NonNull VMConfig config) {
+    private void deleteVM(@NonNull VMConfig config, boolean deleteDisks) {
         var ctx = requireContext();
         adapter.items.removeById(config.getId());
-        adapter.items.save(ctx);
+        boolean saved = adapter.items.save(ctx);
         refreshView();
-        DaemonConnection.getInstance().buildRequest("vm_delete")
-            .put("vm_id", config.getId().toString())
-            .invoke();
+        VMDeletion.releaseDaemonAndMaybeDeleteDisks(ctx, config, deleteDisks, saved);
     }
 
     private void confirmDeleteVM(@NonNull VMConfig config) {
-        var ctx = requireContext();
-        new MaterialAlertDialogBuilder(ctx)
-            .setTitle(config.getName())
-            .setMessage(R.string.vm_delete_confirm)
-            .setPositiveButton(R.string.vm_delete, (d, w) -> deleteVM(config))
-            .setNegativeButton(android.R.string.cancel, null)
-            .show();
+        VMDeletion.confirm(requireContext(), config,
+            deleteDisks -> deleteVM(config, deleteDisks));
     }
 }
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/VMActions.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/VMActions.java
index ab59a5748..9e74906ae 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/VMActions.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/VMActions.java
@@ -7,7 +7,11 @@
 import static cn.classfun.droidvm.lib.Constants.PATH_BUILTIN_INITRD;
 import static cn.classfun.droidvm.lib.Constants.PATH_BUILTIN_KERNEL;
 import static cn.classfun.droidvm.lib.store.enums.Enums.optEnum;
+import static cn.classfun.droidvm.lib.utils.ImageUtils.hasInternalSnapshots;
 import static cn.classfun.droidvm.lib.utils.StringUtils.basename;
+import static cn.classfun.droidvm.lib.utils.StringUtils.dirname;
+import static cn.classfun.droidvm.lib.utils.StringUtils.pathJoin;
+import static cn.classfun.droidvm.lib.utils.ThreadUtils.runOnPool;
 import static cn.classfun.droidvm.ui.main.settings.MainSettingsFragment.isAutoConsoleEnabled;
 import static cn.classfun.droidvm.ui.main.settings.MainSettingsFragment.isClearLogsBeforeStartEnabled;
 
@@ -27,6 +31,7 @@
 import org.json.JSONArray;
 
 import java.util.ArrayList;
+import java.util.HashSet;
 import java.util.List;
 import java.util.UUID;
 import java.util.concurrent.atomic.AtomicBoolean;
@@ -34,11 +39,16 @@
 import cn.classfun.droidvm.R;
 import cn.classfun.droidvm.lib.daemon.DaemonConnection;
 import cn.classfun.droidvm.lib.store.base.DataItem;
+import cn.classfun.droidvm.lib.store.disk.DiskStore;
 import cn.classfun.droidvm.lib.store.vm.BootConfig;
+import cn.classfun.droidvm.lib.utils.ImageUtils;
+import cn.classfun.droidvm.ui.disk.action.BackingChainLinker;
+import cn.classfun.droidvm.ui.disk.tree.DiskTree;
 import cn.classfun.droidvm.lib.store.vm.VMBackend;
 import cn.classfun.droidvm.lib.store.vm.VMConfig;
 import cn.classfun.droidvm.lib.store.vm.VMStore;
 import cn.classfun.droidvm.lib.ui.UIContext;
+import cn.classfun.droidvm.ui.disk.create.DiskCompress;
 import cn.classfun.droidvm.ui.disk.create.DiskFormat;
 import cn.classfun.droidvm.ui.disk.operation.DiskOperationActivity;
 import cn.classfun.droidvm.ui.vm.boot.BootMenuDialog;
@@ -66,11 +76,10 @@ public static void createAndStart(
         @NonNull AtomicBoolean wantOpenConsole,
         @Nullable ConvertLauncher convertLauncher
     ) {
-        // crosvm can't read compressed qcow2 (the guest gets vda I/O errors
-        // and an unreadable partition table, so any root= hangs). Catch it
-        // before start and offer to convert; everything else starts normally.
-        guardCompressedDisks(config, mainHandler, ui, convertLauncher,
-            () -> startAfterGuard(config, mainHandler, ui, wantOpenConsole));
+        // Pre-start guards, in order: internal snapshots (crosvm refuses the disk), a base
+        guardSnapshotDisks(config, mainHandler, ui, convertLauncher,
+            () -> guardLockedParents(config, mainHandler, ui,
+                () -> guardCompressedDisks(config, mainHandler, ui, convertLauncher,
     }
 
     private static void startAfterGuard(
@@ -99,12 +108,200 @@ private static void startAfterGuard(
     }
 
     /**
-     * Pre-start check: for a crosvm VM with qcow2 disks, ask the daemon
-     * (lbx) which are zlib-compressed and therefore unreadable by crosvm. If
-     * any are, prompt to convert (decompress) them, then {@code proceed};
-     * otherwise {@code proceed} straight away. A check failure never blocks a
-     * start -- a real boot would surface the problem. Callbacks arrive on the
-     * daemon thread, so UI work is posted to {@code mainHandler}.
+     * Pre-start check: a disk attached writable while registered overlays build on it must not
+     * be written - the overlays' copy-on-write base would shift under them - and neither may a
+     * disk another VM also attaches; so offer to flip those attachments to read-only (persisted)
+     * and start. Backend-independent, unlike the crosvm-specific guards. Registry state and other
+     * VMs' configs can change after this VM was configured, which is why the disk editor's
+     * forced-readonly alone isn't enough.
+     */
+    private static void guardLockedParents(
+        @NonNull VMConfig config,
+        @NonNull Handler mainHandler,
+        @NonNull UIContext ui,
+        @NonNull Runnable proceed
+    ) {
+        if (!ui.isAlive()) {
+            proceed.run();
+            return;
+        }
+        var appContext = ui.getContext().getApplicationContext();
+        runOnPool(() -> {
+            // Reconcile parent links from the images' own headers first, so registries predating
+            // the overlay tree (or images rebased outside the app) lock correctly from here on.
+            // Cheap and unambiguous at this point: a chain whose members are all present is
+            // exactly the case where linking is right, and a broken one can't boot anyway.
+            BackingChainLinker.repairAllBlocking(appContext, qcow2DiskPaths(config));
+            var lockedPaths = new ArrayList<String>();
+            var sharedPaths = new ArrayList<String>();
+            try {
+                var diskStore = new DiskStore();
+                diskStore.load(appContext);
+                // Disks any OTHER VM attaches, in any mode: two writers corrupt a disk, and a
+                // reader under a writer sees it change - so a shared disk is read-only for all.
+                var others = new HashSet<String>();
+                var vmStore = new VMStore();
+                if (vmStore.load(vmStore, appContext)) {
+                    for (int i = 0; i < vmStore.size(); i++) {
+                        var other = vmStore.get(i);
+                        if (other.getId().equals(config.getId())) continue;
+                        var otherDisks = other.item.opt("disks", null);
+                        if (otherDisks == null || !otherDisks.is(DataItem.Type.ARRAY)) continue;
+                        for (var disk : otherDisks.asArray()) {
+                            var path = disk.optString("path", "");
+                            if (!path.isEmpty()) others.add(path);
+                        }
+                    }
+                }
+                var disks = config.item.opt("disks", null);
+                if (disks != null && disks.is(DataItem.Type.ARRAY)) {
+                    for (var disk : disks.asArray()) {
+                        var path = disk.optString("path", "");
+                        if (path.isEmpty() || disk.optBoolean("readonly", false)) continue;
+                        var registered = diskStore.findByPath(path);
+                        if (registered != null && diskStore.hasChildren(registered.getId()))
+                            lockedPaths.add(path);
+                        else if (others.contains(path))
+                            sharedPaths.add(path);
+                    }
+                }
+            } catch (Exception e) {
+                Log.w(TAG, "locked-parent check failed", e);
+            }
+            if (lockedPaths.isEmpty() && sharedPaths.isEmpty()) {
+                mainHandler.post(proceed);
+                return;
+            }
+            mainHandler.post(() -> {
+                if (!ui.isAlive()) return;
+                var ctx = ui.getContext();
+                var message = new StringBuilder();
+                if (!lockedPaths.isEmpty()) {
+                    var files = new StringBuilder();
+                    for (var p : lockedPaths) files.append("\n- ").append(basename(p));
+                    message.append(ctx.getString(R.string.vm_locked_disk_message, files));
+                }
+                if (!sharedPaths.isEmpty()) {
+                    if (message.length() > 0) message.append("\n\n");
+                    var files = new StringBuilder();
+                    for (var p : sharedPaths) files.append("\n- ").append(basename(p));
+                    message.append(ctx.getString(R.string.vm_shared_disk_message, files));
+                }
+                var all = new ArrayList<>(lockedPaths);
+                all.addAll(sharedPaths);
+                new MaterialAlertDialogBuilder(ctx)
+                    .setTitle(lockedPaths.isEmpty()
+                        ? R.string.vm_shared_disk_title : R.string.vm_locked_disk_title)
+                    .setMessage(message)
+                    .setPositiveButton(R.string.vm_locked_disk_readonly_start, (d, w) ->
+                        runOnPool(() -> {
+                            applyReadonly(appContext, config, all);
+                            mainHandler.post(proceed);
+                        }))
+                    .setNegativeButton(android.R.string.cancel, null)
+                    .show();
+            });
+        });
+    }
+
+    /** Flip the given attachments to read-only on the live config and the persisted VM store. */
+    private static void applyReadonly(
+        @NonNull Context context,
+        @NonNull VMConfig config,
+        @NonNull List<String> paths
+    ) {
+        setReadonlyOnDisks(config, paths);
+        try {
+            var store = new VMStore();
+            if (store.load(store, context)) {
+                var stored = store.findById(config.getId());
+                if (stored != null) {
+                    setReadonlyOnDisks(stored, paths);
+                    store.save(context);
+                }
+            }
+        } catch (Exception e) {
+            Log.w(TAG, "Failed to persist read-only flip", e);
+        }
+    }
+
+    private static void setReadonlyOnDisks(@NonNull VMConfig config, @NonNull List<String> paths) {
+        var disks = config.item.opt("disks", null);
+        if (disks == null || !disks.is(DataItem.Type.ARRAY)) return;
+        for (var disk : disks.asArray()) {
+            if (paths.contains(disk.optString("path", "")))
+                disk.set("readonly", true);
+        }
+    }
+
+    /**
+     * Pre-start check: crosvm refuses to open a qcow2 with internal snapshots for writing (it
+     * has no snapshot support, and writing would corrupt them), so a writable disk carrying
+     * snapshots means the VM cannot start at all. Offer to flatten it - the same convert the
+     * compression guard uses, which keeps the active state and drops the snapshots - and say so
+     * plainly, since that is destructive in a way the compression convert is not. There is no
+     * "start anyway": crosvm would just fail to open the disk. Read-only disks are skipped;
+     * crosvm accepts snapshots there.
+     */
+    private static void guardSnapshotDisks(
+        @NonNull VMConfig config,
+        @NonNull Handler mainHandler,
+        @NonNull UIContext ui,
+        @Nullable ConvertLauncher convertLauncher,
+        @NonNull Runnable proceed
+    ) {
+        if (convertLauncher == null
+            || optEnum(config.item, "backend", VMBackend.DEFAULT) != VMBackend.CROSVM) {
+            proceed.run();
+            return;
+        }
+        var qcow2 = qcow2DiskPaths(config, true);
+        if (qcow2.isEmpty()) {
+            proceed.run();
+            return;
+        }
+        runOnPool(() -> {
+            var snapshotted = new JSONArray();
+            for (var p : qcow2)
+                if (hasInternalSnapshots(p)) snapshotted.put(p);
+            if (snapshotted.length() == 0)
+                mainHandler.post(proceed);
+            else
+                mainHandler.post(() ->
+                    promptFlattenSnapshots(ui, convertLauncher, snapshotted, proceed));
+        });
+    }
+
+    private static void promptFlattenSnapshots(
+        @NonNull UIContext ui,
+        @NonNull ConvertLauncher convertLauncher,
+        @NonNull JSONArray snapshotted,
+        @NonNull Runnable proceed
+    ) {
+        if (!ui.isAlive()) return;
+        var ctx = ui.getContext();
+        var files = new StringBuilder();
+        for (int i = 0; i < snapshotted.length(); i++) {
+            var p = snapshotted.optString(i, "");
+            if (!p.isEmpty()) files.append("\n- ").append(basename(p));
+        }
+        new MaterialAlertDialogBuilder(ctx)
+            .setTitle(R.string.vm_snapshot_disk_title)
+            .setMessage(ctx.getString(R.string.vm_snapshot_disk_message, files.toString()))
+            .setPositiveButton(R.string.vm_snapshot_disk_flatten,
+                (d, w) -> convertNext(ctx, convertLauncher, snapshotted, 0, proceed))
+            .setNegativeButton(android.R.string.cancel, null)
+            .show();
+    }
+
+    /**
+     * Pre-start check: for a crosvm VM with qcow2 disks, detect each disk's compression via
+     * qemu-img ({@link DiskCompress#detect}; ImageUtils runs it through the root run-context,
+     * so daemon-owned paths read fine) and prompt to convert any whose compression isn't in
+     * {@link DiskCompress#CROSVM_SUPPORTED} - the convert rewrites uncompressed, which is
+     * always supported - then {@code proceed}; otherwise {@code proceed} straight away. A
+     * detection failure reads as uncompressed, so a check hiccup never blocks a start (a real
+     * boot would surface the problem anyway).
      */
     private static void guardCompressedDisks(
         @NonNull VMConfig config,
@@ -123,24 +320,46 @@ private static void guardCompressedDisks(
             proceed.run();
             return;
         }
-        var images = new JSONArray();
-        for (var p : qcow2) images.put(p);
-        DaemonConnection.getInstance().buildRequest("disk_compat")
-            .put("images", images)
-            .onResponse(resp -> {
-                var compressed = resp.optJSONArray("compressed");
-                if (compressed == null || compressed.length() == 0)
-                    mainHandler.post(proceed);
-                else
-                    mainHandler.post(() ->
-                        promptConvert(config, ui, convertLauncher, compressed, proceed));
-            })
-            .onUnsuccessful(resp -> mainHandler.post(proceed))
-            .onError(e -> {
-                Log.w(TAG, "disk_compat check failed", e);
+        runOnPool(() -> {
+            // Walk each disk's whole backing chain: crosvm reads the base images too, so a
+            // compressed cluster anywhere in the chain gives the guest the same I/O errors.
+            // The convert preserves an overlay's backing (appendConvert carries it), so
+            // decompressing a chain member never flattens it.
+            var unsupported = new JSONArray();
+            var seen = new HashSet<String>();
+            for (var top : qcow2)
+                for (var p : backingChainOf(top))
+                    if (seen.add(p) && !DiskCompress.detect(p).isCrosvmSupported())
+                        unsupported.put(p);
+            if (unsupported.length() == 0)
                 mainHandler.post(proceed);
-            })
-            .invoke();
+            else
+                mainHandler.post(() ->
+                    promptConvert(config, ui, convertLauncher, unsupported, proceed));
+        });
+    }
+
+    /** {@code path} plus every backing file under it (header walk, cycle- and depth-guarded). */
+    @NonNull
+    private static List<String> backingChainOf(@NonNull String path) {
+        var out = new ArrayList<String>();
+        var seen = new HashSet<String>();
+        var current = path;
+        for (int i = 0; i < DiskTree.MAX_DEPTH && seen.add(current); i++) {
+            out.add(current);
+            try {
+                var info = ImageUtils.getImageInfo(current);
+                var backing = info.optString("full-backing-filename",
+                    info.optString("backing-filename", ""));
+                if (backing.isEmpty()) break;
+                if (!backing.startsWith("/"))
+                    backing = pathJoin(dirname(current), backing);
+                current = backing;
+            } catch (Exception e) {
+                break; // unreadable member - the boot itself will surface it
+            }
+        }
+        return out;
     }
 
     private static void promptConvert(
@@ -216,13 +435,26 @@ private static void convertNext(
     /** Absolute paths of the VM's qcow2 disks (the ones crosvm reads as blocks). */
     @NonNull
     private static List<String> qcow2DiskPaths(@NonNull VMConfig config) {
+        return qcow2DiskPaths(config, false);
+    }
+
+    /**
+     * Absolute paths of the VM's qcow2 disks; with {@code writableOnly}, skips the ones attached
+     * read-only ({@code ro=true}), which crosvm opens under rules of their own - notably it
+     * accepts internal snapshots there, since reading never touches them.
+     */
+    @NonNull
+    private static List<String> qcow2DiskPaths(@NonNull VMConfig config, boolean writableOnly) {
         var out = new ArrayList<String>();
         var disks = config.item.opt("disks", null);
         if (disks != null && disks.is(DataItem.Type.ARRAY)) {
             for (var disk : disks.asArray()) {
                 var path = disk.optString("path", "");
-                if (!path.isEmpty() && DiskFormat.fromFilename(path) == DiskFormat.QCOW2)
-                    out.add(path);
+                if (path.isEmpty() || DiskFormat.fromFilename(path) != DiskFormat.QCOW2)
+                    continue;
+                if (writableOnly && disk.optBoolean("readonly", false))
+                    continue;
+                out.add(path);
             }
         }
         return out;
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/VMCreateMenu.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/VMCreateMenu.java
new file mode 100644
index 000000000..b1058d8a4
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/VMCreateMenu.java
@@ -0,0 +1,64 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
+package cn.classfun.droidvm.ui.vm;
+
+import android.content.Context;
+import android.content.Intent;
+import android.net.Uri;
+
+import androidx.annotation.NonNull;
+
+import com.google.android.material.dialog.MaterialAlertDialogBuilder;
+
+import cn.classfun.droidvm.R;
+import cn.classfun.droidvm.lib.ui.MenuDialogBuilder;
+import cn.classfun.droidvm.ui.disk.lxc.CreateLinuxVmActivity;
+import cn.classfun.droidvm.ui.vm.edit.VMEditActivity;
+import cn.classfun.droidvm.ui.vm.pkg.imports.VMPkgImportActivity;
+
+/**
+ * The "create a VM" chooser - Linux from a distro image, Windows (pointer to the image builder),
+ * import a package, or the full editor. One entry for the VM list's + button and the home
+ * screen's wizard card, so both offer exactly the same paths.
+ */
+public final class VMCreateMenu {
+    private VMCreateMenu() {
+    }
+
+    public static void show(@NonNull Context context) {
+        MenuDialogBuilder.showSimple(
+            context,
+            R.string.vm_create_mode_title,
+            R.menu.menu_vm_create,
+            item -> {
+                var id = item.getItemId();
+                if (id == R.id.menu_vm_create_linux) {
+                    context.startActivity(new Intent(context, CreateLinuxVmActivity.class));
+                } else if (id == R.id.menu_vm_create_windows) {
+                    showWindowsVmUnavailableDialog(context);
+                } else if (id == R.id.menu_vm_create_import) {
+                    context.startActivity(new Intent(context, VMPkgImportActivity.class));
+                } else if (id == R.id.menu_vm_create_customize) {
+                    context.startActivity(new Intent(context, VMEditActivity.class));
+                } else {
+                    return false;
+                }
+                return true;
+            }
+        );
+    }
+
+    private static void showWindowsVmUnavailableDialog(@NonNull Context context) {
+        new MaterialAlertDialogBuilder(context)
+            .setTitle(R.string.windows_vm_unavailable_title)
+            .setMessage(R.string.windows_vm_unavailable_message)
+            .setPositiveButton(R.string.windows_vm_open_script, (dialog, which) ->
+                context.startActivity(new Intent(
+                    Intent.ACTION_VIEW,
+                    Uri.parse("https://github.com/Droid-VM/win11-arm64-image-builder/blob/master/windows_build.ps1")
+                )))
+            .setNegativeButton(android.R.string.cancel, null)
+            .show();
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/VMDeletion.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/VMDeletion.java
new file mode 100644
index 000000000..fec869a0c
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/VMDeletion.java
@@ -0,0 +1,256 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
+package cn.classfun.droidvm.ui.vm;
+
+import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
+import static cn.classfun.droidvm.lib.utils.ThreadUtils.runOnPool;
+
+import android.content.Context;
+import android.os.Handler;
+import android.os.Looper;
+import android.util.Log;
+import android.widget.CheckBox;
+import android.widget.LinearLayout;
+import android.widget.Toast;
+
+import androidx.annotation.NonNull;
+
+import com.google.android.material.dialog.MaterialAlertDialogBuilder;
+
+import java.io.File;
+import java.util.ArrayList;
+import java.util.HashSet;
+import java.util.LinkedHashSet;
+import java.util.List;
+import java.util.Set;
+import java.util.function.Consumer;
+
+import cn.classfun.droidvm.R;
+import cn.classfun.droidvm.lib.daemon.DaemonConnection;
+import cn.classfun.droidvm.lib.store.base.DataItem;
+import cn.classfun.droidvm.lib.store.disk.DiskConfig;
+import cn.classfun.droidvm.lib.store.disk.DiskStore;
+import cn.classfun.droidvm.lib.store.vm.VMConfig;
+import cn.classfun.droidvm.lib.store.vm.VMStore;
+
+/** Shared confirmation and optional writable-disk cleanup for deleting a VM. */
+public final class VMDeletion {
+    private static final String TAG = "VMDeletion";
+
+    private VMDeletion() {
+    }
+
+    /** Shows the same delete options from both the VM list and VM details page. */
+    public static void confirm(
+        @NonNull Context context,
+        @NonNull VMConfig config,
+        @NonNull Consumer<Boolean> onConfirmed
+    ) {
+        var paths = writableDiskPaths(config);
+        var layout = new LinearLayout(context);
+        var deleteDisks = new CheckBox(context);
+        deleteDisks.setText(context.getString(
+            R.string.vm_delete_writable_disks, paths.size()));
+        deleteDisks.setEnabled(!paths.isEmpty());
+        int pad = (int) (16 * context.getResources().getDisplayMetrics().density);
+        layout.setPadding(pad, 0, pad, 0);
+        layout.addView(deleteDisks);
+
+        new MaterialAlertDialogBuilder(context)
+            .setTitle(config.getName())
+            .setMessage(R.string.vm_delete_confirm)
+            .setView(layout)
+            .setPositiveButton(R.string.vm_delete,
+                (dialog, which) -> onConfirmed.accept(deleteDisks.isChecked()))
+            .setNegativeButton(android.R.string.cancel, null)
+            .show();
+    }
+
+    /**
+     * Releases the VM from the daemon, then optionally removes the disk registry entries and
+     * files that belonged to writable attachments. The caller must remove and save the VM store
+     * first so a fresh-store scan can reliably identify references from other VMs.
+     *
+     * <p>{@code vm_delete} is idempotent on the daemon side: a VM it never managed (created but
+     * never started) is a successful no-op, so the only failure that keeps the files is a VM it
+     * could not stop.
+     */
+    public static void releaseDaemonAndMaybeDeleteDisks(
+        @NonNull Context context,
+        @NonNull VMConfig config,
+        boolean deleteDisks,
+        boolean vmStoreSaved
+    ) {
+        var appContext = context.getApplicationContext();
+        var paths = writableDiskPaths(config);
+        Runnable cleanup = () -> runOnPool(() -> cleanupDisks(appContext, paths));
+        Runnable skipped = () -> showResult(appContext, new Outcome(0, 0, 0, paths.size()));
+
+        var request = DaemonConnection.getInstance().buildRequest("vm_delete")
+            .put("vm_id", config.getId().toString());
+        if (deleteDisks && !paths.isEmpty()) {
+            if (!vmStoreSaved) {
+                skipped.run();
+            } else {
+                // A successful response means DeleteHandler has stopped and removed the VM (or
+                // never had it). If the daemon cannot be reached, its owned VM processes cannot
+                // still be running either, matching the disk-operation run-state guard's
+                // semantics.
+                request
+                    .onResponse(response -> cleanup.run())
+                    .onUnsuccessful(response -> {
+                        Log.w(TAG, fmt("daemon refused vm_delete; keeping disk files: %s",
+                            response.optString("message", "")));
+                        skipped.run();
+                    })
+                    .onError(error -> cleanup.run());
+            }
+        }
+        request.invoke();
+    }
+
+    @NonNull
+    private static LinkedHashSet<String> writableDiskPaths(@NonNull VMConfig config) {
+        var paths = new LinkedHashSet<String>();
+        var disks = config.item.opt("disks", null);
+        if (disks == null || !disks.is(DataItem.Type.ARRAY)) return paths;
+        for (var disk : disks.asArray()) {
+            var path = disk.optString("path", "");
+            if (!path.isEmpty() && !disk.optBoolean("readonly", false)) paths.add(path);
+        }
+        return paths;
+    }
+
+    /** What happened to the requested files, by reason, for the one toast at the end. */
+    private static final class Outcome {
+        final int deleted;
+        final int attachedByOthers;
+        final int basesOfOverlays;
+        final int failed;
+
+        Outcome(int deleted, int attachedByOthers, int basesOfOverlays, int failed) {
+            this.deleted = deleted;
+            this.attachedByOthers = attachedByOthers;
+            this.basesOfOverlays = basesOfOverlays;
+            this.failed = failed;
+        }
+    }
+
+    private static void cleanupDisks(
+        @NonNull Context context,
+        @NonNull LinkedHashSet<String> requestedPaths
+    ) {
+        if (requestedPaths.isEmpty()) return;
+        try {
+            var vmStore = new VMStore();
+            if (!vmStore.load(context)) {
+                showResult(context, new Outcome(0, 0, 0, requestedPaths.size()));
+                return;
+            }
+
+            // A writable disk must still be retained when any remaining VM references it,
+            // including through a read-only attachment.
+            var referencedPaths = new HashSet<String>();
+            vmStore.forEach((id, vm) -> collectAllDiskPaths(vm, referencedPaths));
+            var candidates = new LinkedHashSet<String>();
+            int attachedByOthers = 0;
+            for (var path : requestedPaths) {
+                if (referencedPaths.contains(path)) attachedByOthers++;
+                else candidates.add(path);
+            }
+
+            var diskStore = new DiskStore();
+            if (!diskStore.load(context)) {
+                showResult(context, new Outcome(0, attachedByOthers, 0, candidates.size()));
+                return;
+            }
+
+            var safePaths = new ArrayList<String>();
+            int bases = 0;
+            int failed = 0;
+            boolean registryChanged = false;
+            boolean madeProgress;
+            do {
+                madeProgress = false;
+                for (var path : new ArrayList<>(candidates)) {
+                    var registrations = registrationsForPath(diskStore, path);
+                    if (registrations.size() > 1) {
+                        // Duplicate registry entries are ambiguous; leave both the registry and
+                        // file untouched instead of choosing one arbitrarily.
+                        candidates.remove(path);
+                        failed++;
+                        continue;
+                    }
+                    if (registrations.isEmpty()) {
+                        safePaths.add(path);
+                        candidates.remove(path);
+                        madeProgress = true;
+                        continue;
+                    }
+                    var disk = registrations.get(0);
+                    if (diskStore.hasChildren(disk.getId())) continue;
+                    diskStore.removeById(disk.getId());
+                    safePaths.add(path);
+                    candidates.remove(path);
+                    registryChanged = true;
+                    madeProgress = true;
+                }
+            } while (madeProgress);
+            // Whatever is left is a base of overlays this VM did not own (or a base whose
+            // overlays are themselves bases): those stay, with their registry entries.
+            bases = candidates.size();
+
+            // Persist the registry first. A save failure must never leave a registry entry that
+            // points at a file already removed from storage.
+            if (registryChanged && !diskStore.save(context)) {
+                showResult(context, new Outcome(
+                    0, attachedByOthers, bases, failed + safePaths.size()));
+                return;
+            }
+
+            int deleted = 0;
+            for (var path : safePaths) {
+                var file = new File(path);
+                if (!file.exists() || file.isFile() && file.delete()) deleted++;
+                else failed++;
+            }
+            showResult(context, new Outcome(deleted, attachedByOthers, bases, failed));
+        } catch (Exception e) {
+            Log.w(TAG, "Failed to clean up disks after VM deletion", e);
+            showResult(context, new Outcome(0, 0, 0, requestedPaths.size()));
+        }
+    }
+
+    private static void collectAllDiskPaths(
+        @NonNull VMConfig config,
+        @NonNull Set<String> paths
+    ) {
+        var disks = config.item.opt("disks", null);
+        if (disks == null || !disks.is(DataItem.Type.ARRAY)) return;
+        for (var disk : disks.asArray()) {
+            var path = disk.optString("path", "");
+            if (!path.isEmpty()) paths.add(path);
+        }
+    }
+
+    @NonNull
+    private static List<DiskConfig> registrationsForPath(
+        @NonNull DiskStore store,
+        @NonNull String path
+    ) {
+        var registrations = new ArrayList<DiskConfig>();
+        for (int i = 0; i < store.size(); i++) {
+            var disk = store.get(i);
+            if (path.equals(disk.getFullPath())) registrations.add(disk);
+        }
+        return registrations;
+    }
+
+    private static void showResult(@NonNull Context context, @NonNull Outcome outcome) {
+        var message = context.getString(R.string.vm_delete_disks_result,
+            outcome.deleted, outcome.attachedByOthers, outcome.basesOfOverlays, outcome.failed);
+        new Handler(Looper.getMainLooper()).post(() ->
+            Toast.makeText(context, message, Toast.LENGTH_LONG).show());
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/VmRunningQuery.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/VmRunningQuery.java
new file mode 100644
index 000000000..01f4ec85f
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/VmRunningQuery.java
@@ -0,0 +1,59 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
+package cn.classfun.droidvm.ui.vm;
+
+import androidx.annotation.NonNull;
+
+import java.util.ArrayList;
+import java.util.Collection;
+import java.util.HashSet;
+import java.util.List;
+import java.util.concurrent.CountDownLatch;
+import java.util.concurrent.TimeUnit;
+
+import cn.classfun.droidvm.lib.daemon.DaemonConnection;
+
+/** One-shot daemon queries about VM run state, for pre-operation checks. */
+public final class VmRunningQuery {
+    private VmRunningQuery() {
+    }
+
+    /**
+     * Names among {@code candidates} whose VM is anything but stopped - starting, running,
+     * suspended, stopping or rebooting all hold the disk files open. Blocking (up to 5s) - call
+     * off the main thread. Daemon errors read as "none in use": these checks guard disk
+     * operations, and with the daemon down no VM can be running anyway.
+     */
+    @NonNull
+    public static List<String> inUseAmong(@NonNull Collection<String> candidates) {
+        var inUse = new HashSet<String>();
+        var latch = new CountDownLatch(1);
+        DaemonConnection.getInstance().buildRequest("vm_list")
+            .onResponse(resp -> {
+                var arr = resp.optJSONArray("data");
+                if (arr != null) {
+                    for (int i = 0; i < arr.length(); i++) {
+                        var obj = arr.optJSONObject(i);
+                        if (obj != null
+                            && !obj.optString("state").equalsIgnoreCase("stopped"))
+                            inUse.add(obj.optString("name", ""));
+                    }
+                }
+                latch.countDown();
+            })
+            .onUnsuccessful(resp -> latch.countDown())
+            .onError(e -> latch.countDown())
+            .invoke();
+        try {
+            //noinspection ResultOfMethodCallIgnored
+            latch.await(5, TimeUnit.SECONDS);
+        } catch (InterruptedException e) {
+            Thread.currentThread().interrupt();
+        }
+        var out = new ArrayList<String>();
+        for (var name : candidates)
+            if (inUse.contains(name)) out.add(name);
+        return out;
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/display/nativedisplay/display/DisplayProvider.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/nativedisplay/display/DisplayProvider.java
index 3e068ec13..351b52b29 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/display/nativedisplay/display/DisplayProvider.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/nativedisplay/display/DisplayProvider.java
@@ -6,6 +6,7 @@
 import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
 import android.crosvm.DisplayConfig;
 import android.crosvm.ICrosvmAndroidDisplayService;
+import android.os.Build;
 import android.os.DeadObjectException;
 import android.os.Handler;
 import android.os.IBinder;
@@ -132,7 +133,9 @@ final class DisplayProvider {
             fetchBinder();
         });
 
-        mainView.setSurfaceLifecycle(SurfaceView.SURFACE_LIFECYCLE_FOLLOWS_ATTACHMENT);
+        if (Build.VERSION.SDK_INT >= Build.VERSION_CODES.UPSIDE_DOWN_CAKE) {
+            mainView.setSurfaceLifecycle(SurfaceView.SURFACE_LIFECYCLE_FOLLOWS_ATTACHMENT);
+        }
         mainView.getHolder().addCallback(new Callback());
 
         var surface = mainView.getHolder().getSurface();
@@ -143,6 +146,12 @@ final class DisplayProvider {
         fetchBinder();
     }
 
+    /* Tear down and re-create a SurfaceView's surface (fresh BufferQueue). On Android 14+ the main
+     * view uses SURFACE_LIFECYCLE_FOLLOWS_ATTACHMENT, so visibility does not govern the surface (a
+     * GONE/VISIBLE bounce was seen to do nothing, or to destroy the surface tens of seconds later
+     * and never bring it back). Android 13 keeps the platform's default lifecycle, but detaching is
+     * still the reliable way to force surfaceDestroyed. Re-adding then creates a brand-new surface
+     * and the usual send-once-per-surface path delivers it once the binder is back. */
     private void recreateSurface(@NonNull SurfaceView view) {
         var parent = view.getParent();
         if (!(parent instanceof android.view.ViewGroup)) {
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/boot/VMEditBootTab.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/boot/VMEditBootTab.java
index 5749d2bf8..549ab46e4 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/boot/VMEditBootTab.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/boot/VMEditBootTab.java
@@ -401,6 +401,19 @@ private static String basename(@NonNull String path) {
         return path.substring(path.lastIndexOf('/') + 1);
     }
 
+    /**
+     * The storage tab moved a disk row from {@code from} to {@code to}: keep pointing at the
+     * same disk, whichever position it now has (rows between them shift by one).
+     */
+    public void onDiskMoved(int from, int to) {
+        int idx = bootDiskIndex;
+        if (idx == from) idx = to;
+        else if (from < idx && idx <= to) idx--;
+        else if (to <= idx && idx < from) idx++;
+        bootDiskIndex = idx;
+        if (ddBootDisk != null) updateDiskDropdown();
+    }
+
     private void updateDiskDropdown() {
         var paths = diskPaths();
         var labels = new ArrayList<String>();
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/graphics/ScreenBindingRow.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/graphics/ScreenBindingRow.java
new file mode 100644
index 000000000..e52ac8818
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/graphics/ScreenBindingRow.java
@@ -0,0 +1 @@
+            ? VMScreenConfig.DEFAULT_REFRESH_RATE : VMScreenConfig.NEW_VM_DEFAULT_POLL_HZ);
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/peripheral/VMEditPeripheralTab.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/peripheral/VMEditPeripheralTab.java
new file mode 100644
index 000000000..0dcc70a53
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/peripheral/VMEditPeripheralTab.java
@@ -0,0 +1,14 @@
+        adapter.setMicPermissionGate(parent::ensureRecordAudioThen);
+        if (!parent.editMode) {
+            var peripherals = DataItem.newArray();
+            peripherals.append(VMPeripheralConfig.createDefaultVirtioSound().item);
+            listPeripherals.setItems(peripherals);
+        }
+    /** Whether the unsaved peripheral rows give the guest a host microphone. */
+    public boolean hasMicrophone() {
+        for (var peripheral : VMPeripheralConfig.listOf(wrap()))
+            for (var endpoint : peripheral.getEndpoints())
+                if (endpoint.getMode().isInput()) return true;
+        return false;
+    }
+
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/peripheral/VMPeripheralEditAdapter.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/peripheral/VMPeripheralEditAdapter.java
new file mode 100644
index 000000000..4ab631c5b
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/peripheral/VMPeripheralEditAdapter.java
@@ -0,0 +1,6 @@
+                // Keep manually added cards identical to the one a new VM starts with.
+                appendItem(VMPeripheralConfig.createDefaultVirtioSound().item);
+                return;
+            var config = new VMPeripheralConfig(DataItem.newObject());
+            config.setType(type);
+            appendItem(config.item);
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/storage/VMEditStorageTab.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/storage/VMEditStorageTab.java
index d843746bc..6d588d018 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/storage/VMEditStorageTab.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/storage/VMEditStorageTab.java
@@ -62,8 +62,15 @@ public void initValue() {
         var act = new ActivityResultContracts.StartActivityForResult();
         diskActivityLauncher = parent.registerForActivityResult(act, this::activityResult);
         diskAdapter = listDisks.setAdapter(VMDiskEditAdapter.class);
-        diskAdapter.setOnBrowseFileListener(this::diskAdapterOnBrowseFile);
         diskAdapter.setOnImportOrCreateListener(this::diskAdapterOnImportOrCreate);
+        // The boot tab points at a disk by its position in this list.
+        diskAdapter.setOnItemMovedListener((from, to) -> {
+            try {
+                var boot = (VMEditBootTab) parent.getTab(VMEditTab.TAB_BOOT);
+                if (boot != null) boot.onDiskMoved(from, to);
+            } catch (Exception ignored) {
+            }
+        });
         // no PFLASH while the boot tab's UEFI vars pflash is enabled
         diskAdapter.setUefiVarsEnabledProvider(() -> {
             try {
@@ -82,6 +89,13 @@ public void refreshDisks() {
         if (diskAdapter != null) diskAdapter.notifyDataSetChanged();
     }
 
+    @Override
+    public void onTabShown() {
+        // Merges and flattens run in other screens; re-derive which disks are overlay bases so
+        // a row's read-only lock reflects the tree as it is now.
+        if (diskAdapter != null) diskAdapter.reloadLockedPaths();
+    }
+
     private void diskAdapterOnImportOrCreate(int pos) {
         Runnable onImportPickerUi = () -> parent.runOnUiThread(this::onImportPicker);
         pendingBrowsePosition = pos;
@@ -91,20 +105,6 @@ private void diskAdapterOnImportOrCreate(int pos) {
         pendingImportDialog.showImportDialog();
     }
 
-    private void diskAdapterOnBrowseFile(int pos) {
-        pendingBrowsePosition = pos;
-        if (parent.currentPicker != null) return;
-        parent.currentPicker = uri -> {
-            if (uri != null && pendingBrowsePosition >= 0) {
-                var path = resolveUriPath(parent, uri);
-                diskAdapter.setPathAt(pendingBrowsePosition, path);
-            }
-            pendingBrowsePosition = -1;
-            parent.currentPicker = null;
-        };
-        parent.filePickerLauncher.launch(new String[]{"*/*"});
-    }
-
     private void sharedDirAdapterOnBrowse(int pos) {
         if (parent.currentPicker != null) return;
         parent.currentPicker = uri -> {
@@ -147,6 +147,9 @@ public DataItem getCurrentDisks() {
 
     @Override
     public void loadConfig(@NonNull VMConfig config) {
+        // The rows stand in for this VM's own saved slots: those must not count as "another
+        // VM attaches this disk" when deriving forced read-only.
+        diskAdapter.setEditingVm(parent.editMode ? config.getId() : null, config.getName());
         listDisks.setItems(config.item.opt("disks", DataItem.newArray()));
         listSharedDirs.setItems(config.item.opt("shared_dirs", DataItem.newArray()));
     }
@@ -193,6 +196,9 @@ private VMBackend currentBackend() {
 
     @Override
     public void saveConfig(@NonNull VMConfig config) {
+        // Effective read-only (forced by overlays/sharing, or chosen) for every row, including
+        // ones never bound since their disk's situation last changed.
+        diskAdapter.commitReadonly();
         config.item.set("disks", listDisks.getItems());
         config.item.set("shared_dirs", listSharedDirs.getItems());
     }
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/storage/disk/VMDiskEditAdapter.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/storage/disk/VMDiskEditAdapter.java
index 157c056d9..a0cc07d43 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/storage/disk/VMDiskEditAdapter.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/storage/disk/VMDiskEditAdapter.java
@@ -7,41 +7,178 @@
 import static android.widget.Toast.makeText;
 import static cn.classfun.droidvm.lib.utils.ThreadUtils.runOnPool;
 
+import android.annotation.SuppressLint;
 import android.content.Context;
 import android.text.Editable;
 import android.view.MenuItem;
 import android.view.View;
 
 import androidx.annotation.NonNull;
+import androidx.annotation.Nullable;
+import androidx.annotation.StringRes;
 import androidx.recyclerview.widget.LinearLayoutManager;
 import androidx.recyclerview.widget.RecyclerView;
 
 import com.google.android.material.dialog.MaterialAlertDialogBuilder;
 
+import java.util.ArrayList;
+import java.util.HashSet;
+import java.util.IdentityHashMap;
+import java.util.Map;
+import java.util.Set;
+import java.util.UUID;
+
 import cn.classfun.droidvm.R;
 import cn.classfun.droidvm.lib.store.base.DataItem;
 import cn.classfun.droidvm.lib.store.disk.DiskBus;
 import cn.classfun.droidvm.lib.store.disk.DiskStore;
 import cn.classfun.droidvm.lib.store.enums.Enums;
+import cn.classfun.droidvm.lib.store.vm.VMStore;
 import cn.classfun.droidvm.lib.ui.MenuDialogBuilder;
 import cn.classfun.droidvm.lib.ui.SimpleTextWatcher;
+import cn.classfun.droidvm.ui.disk.tree.AttachmentCursors;
+import cn.classfun.droidvm.ui.disk.tree.DiskBranchPanel;
 import cn.classfun.droidvm.ui.main.disk.DiskAdapter;
 import cn.classfun.droidvm.ui.widgets.container.CardItemAdapter;
 
+/**
+ * The VM's disk rows. A row's read-only switch has two layers: what the user chose, and what
+ * the disk's situation forces - a base that has overlays must not be written, and neither may a
+ * disk another VM (or another row here) also attaches. Forced state is derived on every bind
+ * from the registry and the other VMs' slots; it only ever adds read-only, and the user's own
+ * choice comes back once the force is gone (overlays deleted, other attachment removed).
+ */
 public final class VMDiskEditAdapter extends CardItemAdapter<VMDiskEditViewHolder> {
     @FunctionalInterface
     public interface UefiVarsEnabledProvider {
         boolean isEnabled();
     }
 
-    private OnItemClickListener browseFileListener;
+    @FunctionalInterface
+    public interface OnItemMovedListener {
+        void onItemMoved(int from, int to);
+    }
+
     private OnItemClickListener importOrCreateListener;
+    @Nullable
+    private OnItemMovedListener itemMovedListener;
     private UefiVarsEnabledProvider uefiVarsEnabledProvider = () -> true;
     private boolean readonlyChanged = false;
     private boolean updatingViews = false;
+    // Full paths of registered disks that have overlays, and of disks any OTHER VM attaches.
+    // Loaded async; rows re-check on bind.
+    private final Set<String> baseOfOverlays = new HashSet<>();
+    private final Set<String> attachedByOtherVms = new HashSet<>();
+    // The user's own read-only choice per row, kept apart from the forced value written into
+    // the item. Identity-keyed: the row DataItems are stable objects for the adapter's life.
+    private final Map<DataItem, Boolean> userReadonly = new IdentityHashMap<>();
+    @Nullable
+    private UUID editingVmId;
+    @NonNull
+    private String editingVmName = "";
 
     public VMDiskEditAdapter(@NonNull Context context) {
         super(context);
+        reloadLocks(null);
+    }
+
+    /**
+     * Which VM this editor belongs to (null id for one never saved). Its own saved slots are
+     * not "another VM's" attachments - the rows here stand in for them.
+     */
+    public void setEditingVm(@Nullable UUID id, @Nullable String name) {
+        editingVmId = id;
+        editingVmName = name == null ? "" : name;
+        reloadLocks(null);
+    }
+
+    public void reloadLockedPaths() {
+        reloadLocks(null);
+    }
+
+    /** @param onDone runs on the main thread once the caches reflect the current stores. */
+    @SuppressLint("NotifyDataSetChanged")
+    public void reloadLocks(@Nullable Runnable onDone) {
+        var editing = editingVmId;
+        runOnPool(() -> {
+            var bases = new HashSet<String>();
+            var others = new HashSet<String>();
+            try {
+                var store = new DiskStore();
+                store.load(context);
+                for (int i = 0; i < store.size(); i++) {
+                    var cfg = store.get(i);
+                    if (store.hasChildren(cfg.getId()))
+                        bases.add(cfg.getFullPath());
+                }
+                var vms = new VMStore();
+                if (vms.load(vms, context)) {
+                    for (int i = 0; i < vms.size(); i++) {
+                        var vm = vms.get(i);
+                        if (editing != null && editing.equals(vm.getId())) continue;
+                        for (var slot : AttachmentCursors.diskSlots(vm)) {
+                            var path = slot.optString("path", "");
+                            if (!path.isEmpty()) others.add(path);
+                        }
+                    }
+                }
+            } catch (Exception ignored) {
+            }
+            mainHandler.post(() -> {
+                baseOfOverlays.clear();
+                baseOfOverlays.addAll(bases);
+                attachedByOtherVms.clear();
+                attachedByOtherVms.addAll(others);
+                try {
+                    notifyDataSetChanged();
+                } catch (Exception ignored) {
+                }
+                if (onDone != null) onDone.run();
+            });
+        });
+    }
+
+    /** The string explaining why {@code path} is forced read-only, or 0 when it isn't. */
+    @StringRes
+    private int forcedReason(@NonNull String path, int position) {
+        if (path.isEmpty()) return 0;
+        if (baseOfOverlays.contains(path)) return R.string.edit_vm_disk_locked_readonly;
+        if (attachedByOtherVms.contains(path)) return R.string.edit_vm_disk_shared_readonly;
+        for (int i = 0; i < items.size(); i++) {
+            if (i == position) continue;
+            var d = items.get(i);
+            if (d.is(DataItem.Type.OBJECT) && path.equals(d.optString("path", "")))
+                return R.string.edit_vm_disk_shared_readonly;
+        }
+        return 0;
+    }
+
+    private boolean isForced(@NonNull String path, int position) {
+        return forcedReason(path, position) != 0;
+    }
+
+    private boolean userReadonly(@NonNull DataItem disk) {
+        var v = userReadonly.get(disk);
+        if (v == null) {
+            v = disk.optBoolean("readonly", false);
+            userReadonly.put(disk, v);
+        }
+        return v;
+    }
+
+    /** Write the effective read-only (forced or chosen) into the row; returns whether forced. */
+    private boolean applyReadonly(@NonNull DataItem disk, int position) {
+        boolean forced = isForced(disk.optString("path", ""), position);
+        disk.set("readonly", forced || userReadonly(disk));
+        return forced;
+    }
+
+    /** Recompute every row's effective read-only; call before the rows are saved. */
+    public void commitReadonly() {
+        for (int i = 0; i < items.size(); i++) {
+            var d = items.get(i);
+            if (d.is(DataItem.Type.OBJECT)) applyReadonly(d, i);
+        }
     }
 
     @SuppressWarnings("unused")
@@ -49,14 +186,20 @@ public interface OnItemClickListener {
         void onItemClick(int position);
     }
 
-    public void setOnBrowseFileListener(OnItemClickListener l) {
-        this.browseFileListener = l;
-    }
-
     public void setOnImportOrCreateListener(OnItemClickListener l) {
         this.importOrCreateListener = l;
     }
 
+    /** Drag reorder happened; the boot tab's disk index has to follow the same disk. */
+    public void setOnItemMovedListener(@Nullable OnItemMovedListener l) {
+        this.itemMovedListener = l;
+    }
+
+    @Override
+    protected void onItemMoved(int from, int to) {
+        if (itemMovedListener != null) itemMovedListener.onItemMoved(from, to);
+    }
+
     public void setUefiVarsEnabledProvider(@NonNull UefiVarsEnabledProvider provider) {
         this.uefiVarsEnabledProvider = provider;
     }
@@ -86,16 +229,22 @@ private static boolean containsPflash(@NonNull DiskBus[] options) {
         return false;
     }
 
+    @SuppressLint("NotifyDataSetChanged")
     public void setPathAt(int position, String path) {
         if (position < 0 || position >= items.size()) return;
         var disk = items.get(position);
         if (path.toLowerCase().endsWith(".iso")) {
-            disk.set("readonly", true);
+            userReadonly.put(disk, true);
             disk.set("bus", DiskBus.CDROM);
         }
+        boolean wasForced = isForced(disk.optString("path", ""), position);
         disk.set("path", path);
+        boolean forced = applyReadonly(disk, position);
+        if (forced && !wasForced)
+            makeText(context, forcedReason(path, position), LENGTH_SHORT).show();
         try {
-            notifyItemChanged(position);
+            // Another row sharing this path changes its forced state too.
+            notifyDataSetChanged();
         } catch (Exception ignored) {
         }
     }
@@ -107,16 +256,19 @@ private void onPathTyped(VMDiskEditViewHolder holder, int position, String path)
         if (position < 0 || position >= items.size()) return;
         var disk = items.get(position);
         disk.set("path", path);
-        if (path.toLowerCase().endsWith(".iso")) {
-            disk.set("readonly", true);
+        boolean iso = path.toLowerCase().endsWith(".iso");
+        if (iso) {
+            userReadonly.put(disk, true);
             disk.set("bus", DiskBus.CDROM);
-            updatingViews = true;
-            try {
-                holder.switchReadonly.setChecked(true);
-                holder.btnBus.setSelectedItem(DiskBus.CDROM);
-            } finally {
-                updatingViews = false;
-            }
+        }
+        boolean forced = applyReadonly(disk, position);
+        updatingViews = true;
+        try {
+            holder.switchReadonly.setChecked(disk.optBoolean("readonly", false));
+            holder.switchReadonly.setEnabled(!forced);
+            if (iso) holder.btnBus.setSelectedItem(DiskBus.CDROM);
+        } finally {
+            updatingViews = false;
         }
     }
 
@@ -135,8 +287,14 @@ protected int getLayoutRes() {
     public void onBindViewHolder(@NonNull VMDiskEditViewHolder holder, int position) {
         var disk = items.get(position);
         holder.unbindWatcher();
-        holder.etPath.setText(disk.optString("path", ""));
+        var path = disk.optString("path", "");
+        holder.etPath.setText(path);
+        boolean forced = applyReadonly(disk, position);
+        // A recycled holder still carries the previous bind's listener: detach it first, or the
+        // programmatic setChecked below would be recorded as the user's own choice.
+        holder.switchReadonly.setOnCheckedChangeListener(null);
         holder.switchReadonly.setChecked(disk.optBoolean("readonly", false));
+        holder.switchReadonly.setEnabled(!forced);
         // unselectable PFLASH and fallback to VIRTIO.
         var bus = Enums.optEnum(disk, "bus", DiskBus.VIRTIO);
         var options = busOptions(position);
@@ -152,8 +310,8 @@ public void onBindViewHolder(@NonNull VMDiskEditViewHolder holder, int position)
             if (pos == RecyclerView.NO_POSITION) return;
             var item = items.get(pos);
             item.set("bus", newVal);
-            if (!readonlyChanged)
-                item.set("readonly", newVal == DiskBus.CDROM);
+            if (!readonlyChanged) userReadonly.put(item, newVal == DiskBus.CDROM);
+            applyReadonly(item, pos);
             try {
                 // PFLASH exclusivity changes other rows' options, so a
                 // PFLASH switch needs a full refresh; any other
@@ -179,8 +337,11 @@ public void afterTextChanged(Editable s) {
             if (updatingViews) return;
             int pos = holder.getBindingAdapterPosition();
             readonlyChanged = true;
-            if (pos != RecyclerView.NO_POSITION)
-                items.get(pos).set("readonly", checked);
+            if (pos != RecyclerView.NO_POSITION) {
+                var item = items.get(pos);
+                userReadonly.put(item, checked);
+                item.set("readonly", checked);
+            }
         });
         holder.btnBrowse.setOnClickListener(v -> {
             int pos = holder.getBindingAdapterPosition();
@@ -191,22 +352,25 @@ public void afterTextChanged(Editable s) {
             int pos = holder.getBindingAdapterPosition();
             if (pos != RecyclerView.NO_POSITION) {
                 removeItem(pos);
-                // re-enable PFLASH for the remaining rows if it was the only one
+                // re-enable PFLASH for the remaining rows if it was the only one, and re-derive
+                // sharing for a row that pointed at the same disk
                 try {
                     notifyDataSetChanged();
                 } catch (Exception ignored) {
                 }
             }
         });
+        holder.btnBranches.setOnClickListener(v -> {
+            int pos = holder.getBindingAdapterPosition();
+            if (pos != RecyclerView.NO_POSITION)
+                showBranches(pos);
+        });
     }
 
     private void showBrowseDialog(int position) {
         MenuItem.OnMenuItemClickListener listener = item -> {
             var id = item.getItemId();
-            if (id == R.id.menu_disk_browse_file) {
-                if (browseFileListener != null)
-                    browseFileListener.onItemClick(position);
-            } else if (id == R.id.menu_disk_browse_registered) {
+            if (id == R.id.menu_disk_browse_registered) {
                 showRegisteredDiskDialog(position);
             } else if (id == R.id.menu_disk_browse_import_create) {
                 if (importOrCreateListener != null)
@@ -222,6 +386,50 @@ private void showBrowseDialog(int position) {
         );
     }
 
+    /**
+     * Branch management for this row's disk: the whole overlay family, where another node can be
+     * picked, and branches can be created/deleted/merged/flattened in place while the panel
+     * stays open. The rows here travel with the panel as in-memory cursors and come back when it
+     * closes: OK applies the pick to this row, Back applies where each row's cursor ended up,
+     * and a row whose whole tree is gone is removed. The lock caches reload BEFORE the rows are
+     * re-pointed, so a base that just lost its last overlay is not re-forced read-only.
+     */
+    private void showBranches(int position) {
+        if (position < 0 || position >= items.size()) return;
+        var path = items.get(position).optString("path", "");
+        if (path.isEmpty()) {
+            makeText(context, R.string.disk_tree_not_registered, LENGTH_SHORT).show();
+            return;
+        }
+        var paths = new ArrayList<String>();
+        var readonly = new ArrayList<Boolean>();
+        for (int i = 0; i < items.size(); i++) {
+            var d = items.get(i);
+            paths.add(d.optString("path", ""));
+            readonly.add(d.optBoolean("readonly", false));
+        }
+        var live = new AttachmentCursors.LiveRows(
+            editingVmId, editingVmName, paths, readonly, position);
+        DiskBranchPanel.open(context, path, live, result ->
+            reloadLocks(() -> applyPanelResult(result)));
+    }
+
+    @SuppressLint("NotifyDataSetChanged")
+    private void applyPanelResult(@NonNull DiskBranchPanel.Result result) {
+        var removals = new ArrayList<Integer>();
+        for (var e : result.rows.entrySet()) {
+            if (e.getValue() == null) removals.add(e.getKey());
+            else if (e.getKey() < items.size()) setPathAt(e.getKey(), e.getValue());
+        }
+        removals.sort((a, b) -> Integer.compare(b, a));
+        for (int idx : removals)
+            if (idx < items.size()) removeItem(idx);
+        try {
+            notifyDataSetChanged();
+        } catch (Exception ignored) {
+        }
+    }
+
     private void showRegisteredDiskDialog(int position) {
         var store = new DiskStore();
         Runnable done = () -> {
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/storage/disk/VMDiskEditViewHolder.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/storage/disk/VMDiskEditViewHolder.java
index e5917b52c..c8c953ae0 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/storage/disk/VMDiskEditViewHolder.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/storage/disk/VMDiskEditViewHolder.java
@@ -10,6 +10,7 @@
 import androidx.annotation.NonNull;
 import androidx.recyclerview.widget.RecyclerView;
 
+import com.google.android.material.button.MaterialButton;
 import com.google.android.material.materialswitch.MaterialSwitch;
 import com.google.android.material.textfield.TextInputEditText;
 
@@ -22,6 +23,7 @@ public final class VMDiskEditViewHolder extends RecyclerView.ViewHolder {
     final MaterialSwitch switchReadonly;
     final ImageButton btnBrowse;
     final ImageButton btnDelete;
+    final MaterialButton btnBranches;
     TextWatcher pathWatcher;
 
     VMDiskEditViewHolder(@NonNull View itemView) {
@@ -31,6 +33,7 @@ public final class VMDiskEditViewHolder extends RecyclerView.ViewHolder {
         switchReadonly = itemView.findViewById(R.id.switch_readonly);
         btnBrowse = itemView.findViewById(R.id.btn_browse);
         btnDelete = itemView.findViewById(R.id.btn_delete);
+        btnBranches = itemView.findViewById(R.id.btn_branches);
     }
 
     void unbindWatcher() {
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/info/VMInfoActivity.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/info/VMInfoActivity.java
index 0afa0fffd..609e38072 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/info/VMInfoActivity.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/info/VMInfoActivity.java
@@ -58,6 +58,7 @@
 import cn.classfun.droidvm.lib.store.vm.VMStore;
 import cn.classfun.droidvm.lib.ui.UIContext;
 import cn.classfun.droidvm.ui.vm.VMActions;
+import cn.classfun.droidvm.ui.vm.VMDeletion;
 import cn.classfun.droidvm.ui.vm.edit.VMEditActivity;
 import cn.classfun.droidvm.ui.widgets.container.CollapsibleContainer;
 import cn.classfun.droidvm.ui.widgets.row.TextRowWidget;
@@ -453,22 +454,23 @@ private void openEdit() {
     }
 
     private void doDelete() {
-        DialogInterface.OnClickListener cb = (d, w) -> {
+        VMDeletion.confirm(this, config, deleteDisks -> {
             store.removeById(vmId);
-            runOnPool(() -> store.save(this));
-            Toast.makeText(
-                this,
-                R.string.vm_info_delete_success,
-                LENGTH_SHORT
-            ).show();
-            setResult(RESULT_OK);
-            finish();
-        };
-        new MaterialAlertDialogBuilder(this)
-            .setTitle(config.getName())
-            .setMessage(R.string.vm_delete_confirm)
-            .setPositiveButton(R.string.vm_delete, cb)
-            .setNegativeButton(android.R.string.cancel, null)
-            .show();
+            var appContext = getApplicationContext();
+            runOnPool(() -> {
+                boolean saved = store.save(appContext);
+                VMDeletion.releaseDaemonAndMaybeDeleteDisks(
+                    appContext, config, deleteDisks, saved);
+                mainHandler.post(() -> {
+                    Toast.makeText(
+                        this,
+                        R.string.vm_info_delete_success,
+                        LENGTH_SHORT
+                    ).show();
+                    setResult(RESULT_OK);
+                    finish();
+                });
+            });
+        });
     }
 }
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/widgets/container/CardItemAdapter.java b/app/src/main/java/cn/classfun/droidvm/ui/widgets/container/CardItemAdapter.java
index 621c14b88..cac44db87 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/widgets/container/CardItemAdapter.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/widgets/container/CardItemAdapter.java
@@ -43,10 +43,48 @@ public final DataItem getItems() {
     }
 
     public final void createItem() {
-        items.append(DataItem.newObject());
+        appendItem(DataItem.newObject());
+    }
+
+    /** Appends one prepared item, for adapters whose rows are not blank to begin with. */
+    protected final void appendItem(@NonNull DataItem item) {
+        items.append(item);
         notifyItemInserted(items.size() - 1);
     }
 
+    /**
+     * The list's + button was pressed, with {@code anchor} the button itself. Appends one blank
+     * item; adapters whose rows need something decided first (a type, a target) override this
+     * and call {@link #appendItem} once they have it.
+     */
+    public void onAddRequested(@NonNull View anchor) {
+        createItem();
+    }
+
+    /**
+     * Drag reorder step: the item at {@code from} now sits at {@code to}. Rows are looked up
+     * by binding position at event time, so nothing else needs rebinding until the drop.
+     */
+    public final void moveItem(int from, int to) {
+        if (from == to || from < 0 || to < 0 || from >= items.size() || to >= items.size())
+            return;
+        var list = items.asArray();
+        var moved = list.remove(from);
+        list.add(to, moved);
+        notifyItemMoved(from, to);
+        onItemMoved(from, to);
+    }
+
+    /** Called after {@link #moveItem}; adapters whose neighbours index into the list hook it. */
+    protected void onItemMoved(int from, int to) {
+    }
+
+    /** The drag ended: positions shifted for a whole range, so rebind everything. */
+    @SuppressLint("NotifyDataSetChanged")
+    public void onReorderFinished() {
+        notifyDataSetChanged();
+    }
+
     public final void removeItem(int position) {
         if (position < 0 || position >= items.size()) return;
         items.remove(position);
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/widgets/container/CardItemListView.java b/app/src/main/java/cn/classfun/droidvm/ui/widgets/container/CardItemListView.java
index 5df93d365..b395daa42 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/widgets/container/CardItemListView.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/widgets/container/CardItemListView.java
@@ -5,12 +5,14 @@
 
 import android.content.Context;
 import android.util.AttributeSet;
+import android.view.HapticFeedbackConstants;
 import android.view.LayoutInflater;
 import android.widget.LinearLayout;
 import android.widget.TextView;
 
 import androidx.annotation.NonNull;
 import androidx.annotation.Nullable;
+import androidx.recyclerview.widget.ItemTouchHelper;
 import androidx.recyclerview.widget.LinearLayoutManager;
 import androidx.recyclerview.widget.RecyclerView;
 
@@ -26,6 +28,8 @@ public final class CardItemListView extends LinearLayout {
     private RecyclerView listView;
     private MaterialButton addButton;
     private CardItemAdapter<?> adapter;
+    private boolean reorderable = false;
+    private boolean dragging = false;
 
     public CardItemListView(@NonNull Context context) {
         super(context);
@@ -78,7 +82,73 @@ private void initAttrs(@Nullable AttributeSet attrs) {
             if (text != null) addButton.setText(text);
             var icon = a.getDrawable(R.styleable.CardItemListView_android_icon);
             if (icon != null) addButton.setIcon(icon);
+            reorderable = a.getBoolean(R.styleable.CardItemListView_reorderable, false);
         }
+        if (reorderable) attachReorder();
+    }
+
+    /**
+     * Long-press a card to lift it, drag up or down to reorder, release to drop. The helper
+     * asks the enclosing scroll view not to intercept once a drag starts, so the page stays
+     * still under the finger; a single card has nowhere to go and is not liftable.
+     */
+    private void attachReorder() {
+        var callback = new ItemTouchHelper.SimpleCallback(
+            ItemTouchHelper.UP | ItemTouchHelper.DOWN, 0) {
+            @Override
+            public boolean onMove(
+                @NonNull RecyclerView rv,
+                @NonNull RecyclerView.ViewHolder vh,
+                @NonNull RecyclerView.ViewHolder target
+            ) {
+                if (adapter == null) return false;
+                int from = vh.getBindingAdapterPosition();
+                int to = target.getBindingAdapterPosition();
+                if (from == RecyclerView.NO_POSITION || to == RecyclerView.NO_POSITION)
+                    return false;
+                adapter.moveItem(from, to);
+                return true;
+            }
+
+            @Override
+            public void onSwiped(@NonNull RecyclerView.ViewHolder vh, int direction) {
+            }
+
+            @Override
+            public boolean isLongPressDragEnabled() {
+                return adapter != null && adapter.getItemCount() > 1;
+            }
+
+            @Override
+            public boolean isItemViewSwipeEnabled() {
+                return false;
+            }
+
+            @Override
+            public void onSelectedChanged(@Nullable RecyclerView.ViewHolder vh, int state) {
+                super.onSelectedChanged(vh, state);
+                if (state == ItemTouchHelper.ACTION_STATE_DRAG && vh != null) {
+                    dragging = true;
+                    vh.itemView.performHapticFeedback(HapticFeedbackConstants.LONG_PRESS);
+                    vh.itemView.setAlpha(0.85f);
+                    vh.itemView.setScaleX(1.02f);
+                    vh.itemView.setScaleY(1.02f);
+                }
+            }
+
+            @Override
+            public void clearView(@NonNull RecyclerView rv, @NonNull RecyclerView.ViewHolder vh) {
+                super.clearView(rv, vh);
+                vh.itemView.setAlpha(1f);
+                vh.itemView.setScaleX(1f);
+                vh.itemView.setScaleY(1f);
+                if (dragging) {
+                    dragging = false;
+                    if (adapter != null) adapter.onReorderFinished();
+                }
+            }
+        };
+        new ItemTouchHelper(callback).attachToRecyclerView(listView);
     }
 
     public void setAdapter(@Nullable CardItemAdapter<?> adapter) {
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/widgets/row/TextInputRowWidget.java b/app/src/main/java/cn/classfun/droidvm/ui/widgets/row/TextInputRowWidget.java
index 29349ec43..d342e7969 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/widgets/row/TextInputRowWidget.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/widgets/row/TextInputRowWidget.java
@@ -10,11 +10,13 @@
 import android.text.InputFilter;
 import android.text.InputType;
 import android.text.TextWatcher;
+import android.text.method.PasswordTransformationMethod;
 import android.util.AttributeSet;
 import android.view.LayoutInflater;
 import android.widget.FrameLayout;
 import android.widget.ImageView;
 
+import androidx.annotation.DrawableRes;
 import androidx.annotation.NonNull;
 import androidx.annotation.Nullable;
 import androidx.annotation.StringRes;
@@ -406,6 +408,25 @@ public void setEndIconOnClickListener(
         textInputLayout.setEndIconOnClickListener(listener);
     }
 
+    /** Accessibility label for the in-field end icon (see {@code ti_endIcon}). */
+    public void setEndIconContentDescription(@Nullable CharSequence description) {
+        textInputLayout.setEndIconContentDescription(description);
+    }
+
+    /** Swaps the outside icon button's image (e.g. a show/hide password toggle). */
+    public void setIconButtonIcon(@DrawableRes int icon) {
+        iconButtonView.setIconResource(icon);
+    }
+
+    /** Shows or hides a password field's characters, keeping the selection. */
+    public void setPasswordVisible(boolean visible) {
+        int start = editText.getSelectionStart();
+        int end = editText.getSelectionEnd();
+        editText.setTransformationMethod(
+            visible ? null : PasswordTransformationMethod.getInstance());
+        if (start >= 0 && end >= 0) editText.setSelection(start, end);
+    }
+
     public void addTextChangedListener(@NonNull TextWatcher watcher) {
         editText.addTextChangedListener(watcher);
     }
diff --git a/app/src/main/res/drawable/ic_eye.xml b/app/src/main/res/drawable/ic_eye.xml
new file mode 100644
index 000000000..5dc6e47e8
--- /dev/null
+++ b/app/src/main/res/drawable/ic_eye.xml
@@ -0,0 +1,10 @@
+<vector xmlns:android="http://schemas.android.com/apk/res/android"
+    android:width="24dp"
+    android:height="24dp"
+    android:viewportWidth="24"
+    android:viewportHeight="24"
+    android:tint="?attr/colorControlNormal">
+    <path
+        android:fillColor="@android:color/white"
+        android:pathData="M12,4.5C7,4.5 2.73,7.61 1,12c1.73,4.39 6,7.5 11,7.5s9.27,-3.11 11,-7.5c-1.73,-4.39 -6,-7.5 -11,-7.5zM12,17c-2.76,0 -5,-2.24 -5,-5s2.24,-5 5,-5 5,2.24 5,5 -2.24,5 -5,5zM12,9c-1.66,0 -3,1.34 -3,3s1.34,3 3,3 3,-1.34 3,-3 -1.34,-3 -3,-3z" />
+</vector>
diff --git a/app/src/main/res/drawable/ic_eye_off.xml b/app/src/main/res/drawable/ic_eye_off.xml
new file mode 100644
index 000000000..49d626eae
--- /dev/null
+++ b/app/src/main/res/drawable/ic_eye_off.xml
@@ -0,0 +1,10 @@
+<vector xmlns:android="http://schemas.android.com/apk/res/android"
+    android:width="24dp"
+    android:height="24dp"
+    android:viewportWidth="24"
+    android:viewportHeight="24"
+    android:tint="?attr/colorControlNormal">
+    <path
+        android:fillColor="@android:color/white"
+        android:pathData="M12,7c2.76,0 5,2.24 5,5 0,0.65 -0.13,1.26 -0.36,1.83l2.92,2.92c1.51,-1.26 2.7,-2.89 3.43,-4.75 -1.73,-4.39 -6,-7.5 -11,-7.5 -1.4,0 -2.74,0.25 -3.98,0.7l2.16,2.16C10.74,7.13 11.35,7 12,7zM2,4.27l2.28,2.28 0.46,0.46C3.08,8.3 1.78,10.02 1,12c1.73,4.39 6,7.5 11,7.5 1.55,0 3.03,-0.3 4.38,-0.84l0.42,0.42L19.73,22 21,20.73 3.27,3 2,4.27zM7.53,9.8l1.55,1.55c-0.05,0.21 -0.08,0.43 -0.08,0.65 0,1.66 1.34,3 3,3 0.22,0 0.44,-0.03 0.65,-0.08l1.55,1.55c-0.67,0.33 -1.41,0.53 -2.2,0.53 -2.76,0 -5,-2.24 -5,-5 0,-0.79 0.2,-1.53 0.53,-2.2zM11.84,9.02l3.15,3.15 0.02,-0.16c0,-1.66 -1.34,-3 -3,-3l-0.17,0.01z" />
+</vector>
diff --git a/app/src/main/res/layout/activity_import_lxc_images.xml b/app/src/main/res/layout/activity_import_lxc_images.xml
index 06f51f6ab..e7a34977c 100644
--- a/app/src/main/res/layout/activity_import_lxc_images.xml
+++ b/app/src/main/res/layout/activity_import_lxc_images.xml
@@ -211,6 +211,14 @@
                     app:ti_iconButtonHint="@string/disk_create_browse"
                     app:ti_iconButtonIcon="@drawable/ic_open_in" />
 
+                <cn.classfun.droidvm.ui.widgets.row.TextInputRowWidget
+                    android:id="@+id/input_reset_password"
+                    android:layout_width="match_parent"
+                    android:layout_height="wrap_content"
+                    android:hint="@string/lxc_reset_password_hint"
+                    android:icon="@drawable/ic_lock"
+                    android:inputType="textPassword" />
+
                 <com.google.android.material.card.MaterialCardView
                     android:id="@+id/card_info"
                     style="?attr/materialCardViewFilledStyle"
@@ -247,17 +255,98 @@
 
                 </com.google.android.material.card.MaterialCardView>
 
-                <cn.classfun.droidvm.ui.widgets.tools.DownloadWidget
-                    android:id="@+id/download_widget"
+            </cn.classfun.droidvm.ui.widgets.container.CollapsibleContainer>
+
+            <com.google.android.material.divider.MaterialDivider
+                android:id="@+id/divider_settings"
+                android:layout_width="match_parent"
+                android:layout_height="wrap_content"
+                android:layout_marginStart="16dp"
+                android:layout_marginEnd="16dp"
+                android:visibility="gone" />
+
+            <cn.classfun.droidvm.ui.widgets.container.CollapsibleContainer
+                android:id="@+id/tv_settings_header"
+                android:layout_width="match_parent"
+                android:layout_height="wrap_content"
+                android:title="@string/linux_vm_category_settings"
+                android:visibility="gone"
+                app:cc_collapsible="false">
+
+                <cn.classfun.droidvm.ui.widgets.row.TextInputRowWidget
+                    android:id="@+id/input_vm_name"
                     android:layout_width="match_parent"
                     android:layout_height="wrap_content"
-                    android:layout_marginStart="16dp"
-                    android:layout_marginTop="12dp"
-                    android:layout_marginEnd="16dp"
-                    android:visibility="gone" />
+                    android:hint="@string/create_vm_name_hint"
+                    android:icon="@drawable/ic_edit"
+                    android:inputType="text" />
+
+                <cn.classfun.droidvm.ui.widgets.row.TextInputRowWidget
+                    android:id="@+id/input_vm_cpu"
+                    android:layout_width="match_parent"
+                    android:layout_height="wrap_content"
+                    android:hint="@string/create_vm_cpu_hint"
+                    android:icon="@drawable/ic_cpu"
+                    android:inputType="number"
+                    app:ti_max="64"
+                    app:ti_min="1"
+                    app:ti_mode="number" />
+
+                <cn.classfun.droidvm.ui.widgets.row.TextInputRowWidget
+                    android:id="@+id/input_vm_memory"
+                    android:layout_width="match_parent"
+                    android:layout_height="wrap_content"
+                    android:hint="@string/create_vm_memory_hint"
+                    android:icon="@drawable/ic_memory"
+                    android:inputType="number"
+                    app:ti_max="64GiB"
+                    app:ti_min="32MiB"
+                    app:ti_mode="size"
+                    app:ti_precision="1MiB" />
+
+                <cn.classfun.droidvm.ui.widgets.row.TextInputRowWidget
+                    android:id="@+id/input_vm_disk_size"
+                    android:layout_width="match_parent"
+                    android:layout_height="wrap_content"
+                    android:hint="@string/linux_vm_disk_size_hint"
+                    android:icon="@drawable/ic_nav_disk"
+                    android:inputType="number"
+                    app:ti_max="256TiB"
+                    app:ti_min="4MiB"
+                    app:ti_mode="size"
+                    app:ti_precision="1MiB" />
+
+                <cn.classfun.droidvm.ui.widgets.row.TextInputRowWidget
+                    android:id="@+id/input_vm_root_password"
+                    android:layout_width="match_parent"
+                    android:layout_height="wrap_content"
+                    android:hint="@string/linux_vm_root_password_hint"
+                    android:icon="@drawable/ic_lock"
+                    android:inputType="textPassword"
+                    app:ti_endIcon="@drawable/ic_content_copy"
+                    app:ti_iconButtonHint="@string/linux_vm_root_password_toggle"
+                    app:ti_iconButtonIcon="@drawable/ic_eye" />
+
+                <cn.classfun.droidvm.ui.widgets.row.DropdownRowWidget
+                    android:id="@+id/dropdown_vm_network"
+                    android:layout_width="match_parent"
+                    android:layout_height="wrap_content"
+                    android:hint="@string/linux_vm_network_hint"
+                    android:icon="@drawable/ic_nav_network" />
 
             </cn.classfun.droidvm.ui.widgets.container.CollapsibleContainer>
 
+            <!-- Shared by LXC import and Linux VM creation; it must remain visible
+                 when either mode hides its mode-specific section. -->
+            <cn.classfun.droidvm.ui.widgets.tools.DownloadWidget
+                android:id="@+id/download_widget"
+                android:layout_width="match_parent"
+                android:layout_height="wrap_content"
+                android:layout_marginStart="16dp"
+                android:layout_marginTop="12dp"
+                android:layout_marginEnd="16dp"
+                android:visibility="gone" />
+
             <Space
                 android:layout_width="0dp"
                 android:layout_height="64dp" />
diff --git a/app/src/main/res/layout/dialog_disk_resize.xml b/app/src/main/res/layout/dialog_disk_resize.xml
index 87a83472a..d50513850 100644
--- a/app/src/main/res/layout/dialog_disk_resize.xml
+++ b/app/src/main/res/layout/dialog_disk_resize.xml
@@ -46,4 +46,20 @@
         app:ti_mode="size"
         app:ti_precision="1MiB" />
 
+    <com.google.android.material.checkbox.MaterialCheckBox
+        android:id="@+id/cb_autogrow"
+        android:layout_width="match_parent"
+        android:layout_height="wrap_content"
+        android:layout_marginTop="8dp"
+        android:text="@string/disk_resize_autogrow" />
+
+    <TextView
+        android:layout_width="match_parent"
+        android:layout_height="wrap_content"
+        android:paddingStart="48dp"
+        android:paddingEnd="12dp"
+        android:text="@string/disk_resize_autogrow_description"
+        android:textColor="?attr/colorOnSurfaceVariant"
+        android:textSize="12sp" />
+
 </LinearLayout>
diff --git a/app/src/main/res/layout/dialog_optimize_compress.xml b/app/src/main/res/layout/dialog_optimize_compress.xml
new file mode 100644
index 000000000..950a62727
--- /dev/null
+++ b/app/src/main/res/layout/dialog_optimize_compress.xml
@@ -0,0 +1,26 @@
+<?xml version="1.0" encoding="utf-8"?>
+<!-- Optimize-compression prompt: one radio per crosvm-supported compression (populated from
+     DiskCompress.CROSVM_SUPPORTED); "remember" persists the choice as the preferred-compression
+     setting (changeable later in settings). -->
+<LinearLayout xmlns:android="http://schemas.android.com/apk/res/android"
+    android:layout_width="match_parent"
+    android:layout_height="wrap_content"
+    android:orientation="vertical"
+    android:paddingStart="24dp"
+    android:paddingEnd="24dp"
+    android:paddingTop="8dp">
+
+    <RadioGroup
+        android:id="@+id/compress_group"
+        android:layout_width="match_parent"
+        android:layout_height="wrap_content"
+        android:orientation="vertical" />
+
+    <com.google.android.material.checkbox.MaterialCheckBox
+        android:id="@+id/compress_remember"
+        android:layout_width="match_parent"
+        android:layout_height="wrap_content"
+        android:layout_marginTop="8dp"
+        android:text="@string/disk_optimize_compress_remember" />
+
+</LinearLayout>
diff --git a/app/src/main/res/layout/dialog_overlay_create.xml b/app/src/main/res/layout/dialog_overlay_create.xml
new file mode 100644
index 000000000..673115be4
--- /dev/null
+++ b/app/src/main/res/layout/dialog_overlay_create.xml
@@ -0,0 +1,28 @@
+<?xml version="1.0" encoding="utf-8"?>
+<!-- Snapshot-feel overlay creation: just a name (prefilled); everything else is derived from
+     the parent. Advanced needs go through the full DiskCreateActivity via the neutral button. -->
+<LinearLayout xmlns:android="http://schemas.android.com/apk/res/android"
+    android:layout_width="match_parent"
+    android:layout_height="wrap_content"
+    android:orientation="vertical"
+    android:paddingStart="24dp"
+    android:paddingEnd="24dp"
+    android:paddingTop="8dp">
+
+    <com.google.android.material.textfield.TextInputLayout
+        android:id="@+id/til_overlay_name"
+        style="@style/Widget.Material3.TextInputLayout.OutlinedBox"
+        android:layout_width="match_parent"
+        android:layout_height="wrap_content"
+        android:hint="@string/disk_overlay_name_hint">
+
+        <com.google.android.material.textfield.TextInputEditText
+            android:id="@+id/et_overlay_name"
+            android:layout_width="match_parent"
+            android:layout_height="wrap_content"
+            android:inputType="text"
+            android:maxLines="1" />
+
+    </com.google.android.material.textfield.TextInputLayout>
+
+</LinearLayout>
diff --git a/app/src/main/res/layout/fragment_main_settings.xml b/app/src/main/res/layout/fragment_main_settings.xml
index ed546d586..bae60fe20 100644
--- a/app/src/main/res/layout/fragment_main_settings.xml
+++ b/app/src/main/res/layout/fragment_main_settings.xml
@@ -63,13 +63,14 @@
                     android:subtitle="@string/settings_vm_clear_logs_before_start_summary"
                     android:text="@string/settings_vm_clear_logs_before_start_title" />
 
-                <cn.classfun.droidvm.ui.widgets.row.SwitchRowWidget
-                    android:id="@+id/item_vm_keep_compress_on_optimize"
+                <cn.classfun.droidvm.ui.widgets.row.TextRowWidget
+                    android:id="@+id/item_vm_optimize_compression"
                     android:layout_width="match_parent"
                     android:layout_height="wrap_content"
                     android:icon="@drawable/ic_wand"
-                    android:subtitle="@string/settings_vm_keep_compress_on_optimize_summary"
-                    android:text="@string/settings_vm_keep_compress_on_optimize_title" />
+                    android:subtitle="@string/settings_optimize_compression_ask"
+                    android:text="@string/settings_optimize_compression_title" />
+
 
                 <cn.classfun.droidvm.ui.widgets.row.SwitchRowWidget
                     android:id="@+id/item_optimize_sdcard"
diff --git a/app/src/main/res/layout/item_disk_info_action.xml b/app/src/main/res/layout/item_disk_info_action.xml
new file mode 100644
index 000000000..8ac3bb092
--- /dev/null
+++ b/app/src/main/res/layout/item_disk_info_action.xml
@@ -0,0 +1,11 @@
+<?xml version="1.0" encoding="utf-8"?>
+<com.google.android.material.button.MaterialButton xmlns:android="http://schemas.android.com/apk/res/android"
+    xmlns:app="http://schemas.android.com/apk/res-auto"
+    style="@style/Widget.Material3.Button.TonalButton"
+    android:layout_width="0dp"
+    android:layout_height="wrap_content"
+    android:layout_margin="4dp"
+    android:layout_weight="1"
+    android:maxLines="2"
+    android:minHeight="56dp"
+    app:iconGravity="textStart" />
diff --git a/app/src/main/res/layout/item_disk_tree_row.xml b/app/src/main/res/layout/item_disk_tree_row.xml
new file mode 100644
index 000000000..309635097
--- /dev/null
+++ b/app/src/main/res/layout/item_disk_tree_row.xml
@@ -0,0 +1,89 @@
+<?xml version="1.0" encoding="utf-8"?>
+<!-- Compact row of the overlay-relation tree (dialogs: switch-branch, disk picker).
+     Indent is applied programmatically on tree_row_root's paddingStart. -->
+<LinearLayout xmlns:android="http://schemas.android.com/apk/res/android"
+    xmlns:app="http://schemas.android.com/apk/res-auto"
+    xmlns:tools="http://schemas.android.com/tools"
+    android:id="@+id/tree_row_root"
+    android:layout_width="match_parent"
+    android:layout_height="wrap_content"
+    android:background="?attr/selectableItemBackground"
+    android:gravity="center_vertical"
+    android:minHeight="52dp"
+    android:orientation="horizontal"
+    android:paddingEnd="4dp"
+    tools:ignore="RtlSymmetry">
+
+    <ImageButton
+        android:id="@+id/tree_chevron"
+        android:layout_width="36dp"
+        android:layout_height="36dp"
+        android:background="?attr/selectableItemBackgroundBorderless"
+        android:contentDescription="@string/disk_tree_collapse"
+        android:src="@drawable/ic_expand_more"
+        app:tint="?android:attr/textColorSecondary" />
+
+    <ImageView
+        android:id="@+id/tree_icon"
+        android:layout_width="24dp"
+        android:layout_height="24dp"
+        android:layout_marginEnd="12dp"
+        app:tint="?attr/colorPrimary"
+        tools:ignore="ContentDescription" />
+
+    <LinearLayout
+        android:layout_width="0dp"
+        android:layout_height="wrap_content"
+        android:layout_weight="1"
+        android:orientation="vertical"
+        android:paddingVertical="8dp">
+
+        <TextView
+            android:id="@+id/tree_name"
+            android:layout_width="wrap_content"
+            android:layout_height="wrap_content"
+            android:ellipsize="middle"
+            android:maxLines="1"
+            android:textSize="15sp" />
+
+        <TextView
+            android:id="@+id/tree_sub"
+            android:layout_width="wrap_content"
+            android:layout_height="wrap_content"
+            android:maxLines="2"
+            android:textColor="?android:attr/textColorSecondary"
+            android:textSize="12sp"
+            android:visibility="gone" />
+
+    </LinearLayout>
+
+    <ImageView
+        android:id="@+id/tree_lock"
+        android:layout_width="16dp"
+        android:layout_height="16dp"
+        android:layout_marginStart="8dp"
+        android:src="@drawable/ic_lock"
+        android:visibility="gone"
+        app:tint="?android:attr/textColorSecondary"
+        tools:ignore="ContentDescription" />
+
+    <com.google.android.material.radiobutton.MaterialRadioButton
+        android:id="@+id/tree_radio"
+        android:layout_width="wrap_content"
+        android:layout_height="wrap_content"
+        android:layout_marginStart="4dp"
+        android:clickable="false"
+        android:focusable="false"
+        android:visibility="gone" />
+
+    <ImageButton
+        android:id="@+id/tree_menu"
+        android:layout_width="40dp"
+        android:layout_height="40dp"
+        android:background="?attr/selectableItemBackgroundBorderless"
+        android:contentDescription="@string/menu"
+        android:src="@drawable/ic_more_vert"
+        android:visibility="gone"
+        app:tint="?android:attr/textColorSecondary" />
+
+</LinearLayout>
diff --git a/app/src/main/res/layout/item_vm_disk_edit.xml b/app/src/main/res/layout/item_vm_disk_edit.xml
index 3b6f93b60..c63b362f7 100644
--- a/app/src/main/res/layout/item_vm_disk_edit.xml
+++ b/app/src/main/res/layout/item_vm_disk_edit.xml
@@ -89,6 +89,14 @@
                 android:title="@string/edit_vm_disk_bus"
                 app:pb_mode="dialog" />
 
+            <com.google.android.material.button.MaterialButton
+                android:id="@+id/btn_branches"
+                style="@style/Widget.Material3.Button.TextButton"
+                android:layout_width="wrap_content"
+                android:layout_height="48dp"
+                android:layout_marginStart="4dp"
+                android:text="@string/disk_branches_button" />
+
             <Space
                 android:layout_width="0dp"
                 android:layout_height="wrap_content"
diff --git a/app/src/main/res/layout/partial_disk_info_content.xml b/app/src/main/res/layout/partial_disk_info_content.xml
index 4f6b236d4..dd0dc3742 100644
--- a/app/src/main/res/layout/partial_disk_info_content.xml
+++ b/app/src/main/res/layout/partial_disk_info_content.xml
@@ -56,109 +56,15 @@
 
     </com.google.android.material.card.MaterialCardView>
 
+    <!-- Derived from the disk-list menu; branch actions are folded into Manage overlays. -->
     <LinearLayout
-        android:id="@+id/row_extra_1"
+        android:id="@+id/disk_actions_container"
         android:layout_width="match_parent"
         android:layout_height="wrap_content"
-        android:gravity="center"
-        android:orientation="horizontal"
-        android:paddingStart="16dp"
-        android:paddingEnd="16dp"
-        android:paddingBottom="8dp">
-
-        <com.google.android.material.button.MaterialButton
-            android:id="@+id/btn_resize"
-            style="@style/Widget.Material3.Button.TonalButton"
-            android:layout_width="0dp"
-            android:layout_height="wrap_content"
-            android:layout_marginEnd="4dp"
-            android:layout_weight="1"
-            android:text="@string/disk_resize"
-            app:icon="@drawable/ic_resize"
-            tools:ignore="VisualLintButtonSize" />
-
-        <com.google.android.material.button.MaterialButton
-            android:id="@+id/btn_convert"
-            style="@style/Widget.Material3.Button.TonalButton"
-            android:layout_width="0dp"
-            android:layout_height="wrap_content"
-            android:layout_marginStart="4dp"
-            android:layout_weight="1"
-            android:text="@string/disk_set_format"
-            app:icon="@drawable/ic_disk_format"
-            tools:ignore="VisualLintButtonSize" />
-
-    </LinearLayout>
-
-    <LinearLayout
-        android:id="@+id/row_extra_2"
-        android:layout_width="match_parent"
-        android:layout_height="wrap_content"
-        android:gravity="center"
-        android:orientation="horizontal"
-        android:paddingStart="16dp"
-        android:paddingEnd="16dp"
-        android:paddingBottom="8dp">
-
-        <com.google.android.material.button.MaterialButton
-            android:id="@+id/btn_optimize"
-            style="@style/Widget.Material3.Button.TonalButton"
-            android:layout_width="0dp"
-            android:layout_height="wrap_content"
-            android:layout_marginEnd="4dp"
-            android:layout_weight="1"
-            android:text="@string/disk_optimize"
-            app:icon="@drawable/ic_speedometer"
-            tools:ignore="VisualLintButtonSize" />
-
-        <com.google.android.material.button.MaterialButton
-            android:id="@+id/btn_create_increment"
-            style="@style/Widget.Material3.Button.TonalButton"
-            android:layout_width="0dp"
-            android:layout_height="wrap_content"
-            android:layout_marginStart="4dp"
-            android:layout_weight="1"
-            android:text="@string/disk_create_increment"
-            app:icon="@drawable/ic_file_multiple"
-            tools:ignore="VisualLintButtonSize" />
-
-    </LinearLayout>
-
-    <LinearLayout
-        android:layout_width="match_parent"
-        android:layout_height="wrap_content"
-        android:gravity="center"
-        android:orientation="horizontal"
-        android:paddingStart="16dp"
-        android:paddingEnd="16dp"
-        android:paddingBottom="8dp">
-
-        <com.google.android.material.button.MaterialButton
-            android:id="@+id/btn_clone"
-            style="@style/Widget.Material3.Button.OutlinedButton"
-            android:layout_width="0dp"
-            android:layout_height="wrap_content"
-            android:layout_marginEnd="4dp"
-            android:layout_weight="1"
-            android:text="@string/disk_clone"
-            app:icon="@drawable/ic_card_multiple"
-            tools:ignore="VisualLintButtonSize" />
-
-        <com.google.android.material.button.MaterialButton
-            android:id="@+id/btn_delete"
-            style="@style/Widget.Material3.Button.OutlinedButton"
-            android:layout_width="0dp"
-            android:layout_height="wrap_content"
-            android:layout_marginStart="4dp"
-            android:layout_weight="1"
-            android:text="@string/disk_delete"
-            android:textColor="?attr/colorError"
-            app:icon="@drawable/ic_delete"
-            app:iconTint="?attr/colorError"
-            app:strokeColor="?attr/colorError"
-            tools:ignore="VisualLintButtonSize" />
-
-    </LinearLayout>
+        android:orientation="vertical"
+        android:paddingStart="12dp"
+        android:paddingEnd="12dp"
+        android:paddingBottom="8dp" />
 
     <com.google.android.material.divider.MaterialDivider
         android:layout_width="match_parent"
@@ -290,4 +196,3 @@
         tools:ignore="VisualLintBounds" />
 
 </LinearLayout>
-
diff --git a/app/src/main/res/layout/partial_vm_edit_network.xml b/app/src/main/res/layout/partial_vm_edit_network.xml
index b68aaab07..99ef9405f 100644
--- a/app/src/main/res/layout/partial_vm_edit_network.xml
+++ b/app/src/main/res/layout/partial_vm_edit_network.xml
@@ -1,5 +1,6 @@
 <?xml version="1.0" encoding="utf-8"?>
 <LinearLayout xmlns:android="http://schemas.android.com/apk/res/android"
+    xmlns:app="http://schemas.android.com/apk/res-auto"
     android:layout_width="match_parent"
     android:layout_height="wrap_content"
     android:orientation="vertical">
@@ -11,6 +12,7 @@
 
         <cn.classfun.droidvm.ui.widgets.container.CardItemListView
             android:id="@+id/list_nets"
+            app:reorderable="true"
             android:layout_width="match_parent"
             android:layout_height="wrap_content"
             android:hint="@string/edit_vm_net_empty"
diff --git a/app/src/main/res/layout/partial_vm_edit_storage.xml b/app/src/main/res/layout/partial_vm_edit_storage.xml
index 23e18e055..40e292dc6 100644
--- a/app/src/main/res/layout/partial_vm_edit_storage.xml
+++ b/app/src/main/res/layout/partial_vm_edit_storage.xml
@@ -1,5 +1,6 @@
 <?xml version="1.0" encoding="utf-8"?>
 <LinearLayout xmlns:android="http://schemas.android.com/apk/res/android"
+    xmlns:app="http://schemas.android.com/apk/res-auto"
     android:layout_width="match_parent"
     android:layout_height="wrap_content"
     android:orientation="vertical">
@@ -11,6 +12,7 @@
 
         <cn.classfun.droidvm.ui.widgets.container.CardItemListView
             android:id="@+id/list_disks"
+            app:reorderable="true"
             android:layout_width="match_parent"
             android:layout_height="wrap_content"
             android:hint="@string/edit_vm_disk_empty"
@@ -26,6 +28,7 @@
 
         <cn.classfun.droidvm.ui.widgets.container.CardItemListView
             android:id="@+id/list_shared_dirs"
+            app:reorderable="true"
             android:layout_width="match_parent"
             android:layout_height="wrap_content"
             android:hint="@string/edit_vm_shared_dir_empty"
diff --git a/app/src/main/res/menu/menu_disk_actions_overlay.xml b/app/src/main/res/menu/menu_disk_actions_overlay.xml
new file mode 100644
index 000000000..16b78906c
--- /dev/null
+++ b/app/src/main/res/menu/menu_disk_actions_overlay.xml
@@ -0,0 +1,61 @@
+<?xml version="1.0" encoding="utf-8"?>
+<!-- Actions for a disk that IS an overlay (registered parent link): the full set plus the
+     tree operations merge-into-base and flatten-standalone. -->
+<menu xmlns:android="http://schemas.android.com/apk/res/android">
+
+    <item
+        android:id="@+id/menu_disk_resize"
+        android:icon="@drawable/ic_resize"
+        android:title="@string/disk_resize" />
+
+    <item
+        android:id="@+id/menu_disk_convert"
+        android:icon="@drawable/ic_file_swap"
+        android:title="@string/disk_set_format" />
+
+    <item
+        android:id="@+id/menu_disk_optimize"
+        android:icon="@drawable/ic_wand"
+        android:title="@string/disk_optimize" />
+
+    <item
+        android:id="@+id/menu_disk_create_increment"
+        android:icon="@drawable/ic_file_multiple"
+        android:title="@string/disk_create_increment" />
+
+    <item
+        android:id="@+id/menu_disk_merge"
+        android:icon="@drawable/ic_card_multiple"
+        android:title="@string/disk_merge" />
+
+    <item
+        android:id="@+id/menu_disk_flatten"
+        android:icon="@drawable/ic_file_swap"
+        android:title="@string/disk_flatten" />
+
+    <item
+        android:id="@+id/menu_disk_reset"
+        android:icon="@drawable/ic_eraser"
+        android:title="@string/disk_reset" />
+
+    <item
+        android:id="@+id/menu_disk_show_info"
+        android:icon="@drawable/ic_info"
+        android:title="@string/disk_show_info" />
+
+    <item
+        android:id="@+id/menu_disk_change_password"
+        android:icon="@drawable/ic_lock"
+        android:title="@string/disk_change_password" />
+
+    <item
+        android:id="@+id/menu_disk_clone"
+        android:icon="@drawable/ic_card_multiple"
+        android:title="@string/disk_clone" />
+
+    <item
+        android:id="@+id/menu_disk_delete"
+        android:icon="@drawable/ic_delete"
+        android:title="@string/disk_delete" />
+
+</menu>
diff --git a/app/src/main/res/menu/menu_disk_tree_node.xml b/app/src/main/res/menu/menu_disk_tree_node.xml
new file mode 100644
index 000000000..e9309bee6
--- /dev/null
+++ b/app/src/main/res/menu/menu_disk_tree_node.xml
@@ -0,0 +1,30 @@
+<?xml version="1.0" encoding="utf-8"?>
+<!-- Per-node actions inside the branch tree dialog. -->
+<menu xmlns:android="http://schemas.android.com/apk/res/android">
+
+    <item
+        android:id="@+id/menu_disk_create_increment"
+        android:icon="@drawable/ic_file_multiple"
+        android:title="@string/disk_create_increment" />
+
+    <item
+        android:id="@+id/menu_disk_merge"
+        android:icon="@drawable/ic_card_multiple"
+        android:title="@string/disk_merge" />
+
+    <item
+        android:id="@+id/menu_disk_flatten"
+        android:icon="@drawable/ic_file_swap"
+        android:title="@string/disk_flatten" />
+
+    <item
+        android:id="@+id/menu_disk_reset"
+        android:icon="@drawable/ic_eraser"
+        android:title="@string/disk_reset" />
+
+    <item
+        android:id="@+id/menu_disk_delete"
+        android:icon="@drawable/ic_delete"
+        android:title="@string/disk_delete" />
+
+</menu>
diff --git a/app/src/main/res/menu/menu_vm_create.xml b/app/src/main/res/menu/menu_vm_create.xml
new file mode 100644
index 000000000..7fa52ad1d
--- /dev/null
+++ b/app/src/main/res/menu/menu_vm_create.xml
@@ -0,0 +1,24 @@
+<?xml version="1.0" encoding="utf-8"?>
+<menu xmlns:android="http://schemas.android.com/apk/res/android">
+
+    <item
+        android:id="@+id/menu_vm_create_linux"
+        android:icon="@drawable/ic_linux"
+        android:title="@string/vm_create_linux" />
+
+    <item
+        android:id="@+id/menu_vm_create_windows"
+        android:icon="@drawable/ic_key_windows"
+        android:title="@string/vm_create_windows" />
+
+    <item
+        android:id="@+id/menu_vm_create_import"
+        android:icon="@drawable/ic_import"
+        android:title="@string/vm_create_import" />
+
+    <item
+        android:id="@+id/menu_vm_create_customize"
+        android:icon="@drawable/ic_tune"
+        android:title="@string/vm_create_customize" />
+
+</menu>
diff --git a/app/src/main/res/menu/menu_vm_disk_browse.xml b/app/src/main/res/menu/menu_vm_disk_browse.xml
index da4f22b2f..5a92bfc0b 100644
--- a/app/src/main/res/menu/menu_vm_disk_browse.xml
+++ b/app/src/main/res/menu/menu_vm_disk_browse.xml
@@ -1,11 +1,6 @@
 <?xml version="1.0" encoding="utf-8"?>
 <menu xmlns:android="http://schemas.android.com/apk/res/android">
 
-    <item
-        android:id="@+id/menu_disk_browse_file"
-        android:icon="@drawable/ic_open_in"
-        android:title="@string/edit_vm_disk_browse_file" />
-
     <item
         android:id="@+id/menu_disk_browse_registered"
         android:icon="@drawable/ic_nav_disk"
diff --git a/app/src/main/res/values-zh-rCN/strings.xml b/app/src/main/res/values-zh-rCN/strings.xml
index 11d0d982a..7d0e8213b 100644
--- a/app/src/main/res/values-zh-rCN/strings.xml
+++ b/app/src/main/res/values-zh-rCN/strings.xml
@@ -55,6 +55,17 @@
     <string name="setup_extract_uptodate">\u2705 预构建文件已是最新。</string>
     <string name="setup_extract_fail">\u274C 解压预构建文件失败，请重试。</string>
 
+    <string name="setup_network_title">创建网络</string>
+    <string name="setup_network_desc">虚拟机必须接上网络才会有连接。请先选一种创建起来；之后可以在“网络”分页添加或修改。</string>
+    <string name="setup_network_opt_wifi">Wi-Fi 伪桥接</string>
+    <string name="setup_network_opt_linux">Linux 网桥（IPv4 NAT + DHCP）</string>
+    <string name="setup_network_opt_gvisor">gVisor 网桥（IPv4 + IPv6 NAT + DHCP）</string>
+    <string name="setup_network_info_wifi">名称：%1$s\n上行：Wi-Fi，第二层伪桥接\n地址：由 Wi-Fi 路由器分配\nNAT：不使用\nDHCP：由路由器提供</string>
+    <string name="setup_network_info_linux">名称：%1$s\n上行：经由主机路由\nIPv4：%2$s\nIPv6：%3$s（静态，仅主机端）\nNAT：IPv4 已启用\nDHCP：IPv4 已启用</string>
+    <string name="setup_network_info_gvisor">名称：%1$s\n上行：经由主机路由，用户空间实现\nIPv4：%2$s\nIPv6：%3$s\nNAT：IPv4 与 IPv6 已启用\nDHCP：IPv4、IPv6 与 SLAAC 已启用</string>
+    <string name="setup_network_no_subnet">已无可用网段</string>
+    <string name="setup_network_created">已创建网络 %1$s</string>
+
     <string name="setup_done_title">设置完成</string>
     <string name="setup_done_desc">所有检查均已通过。\n您可以开始使用 DroidVM。</string>
 
@@ -103,6 +114,8 @@
     <string name="vm_edit">编辑</string>
     <string name="vm_delete">删除</string>
     <string name="vm_delete_confirm">确定要删除此虚拟机吗？</string>
+    <string name="vm_delete_writable_disks">同时删除关联的可写入磁盘文件（%1$d 个）</string>
+    <string name="vm_delete_disks_result">已删除 %1$d 个磁盘文件；保留 %2$d 个被其他虚拟机挂载、%3$d 个是增量基底、%4$d 个删除失败。</string>
     <string name="vm_state_stopped">已停止</string>
     <string name="vm_state_starting">启动中</string>
     <string name="vm_state_running">运行中</string>
@@ -139,6 +152,7 @@
     <string name="vm_info_console_text_select">文字控制台 %1$s</string>
     <string name="vm_info_console_vnc_select">VNC 控制台</string>
     <string name="vm_info_console_native_select">原生显示</string>
+    <string name="vm_info_console_screen_select">%1$s \u2013 %2$s</string>
     <string name="vm_info_console_vnc_ext_select">外部显示器的 VNC</string>
 
     <string name="vm_info_logs">日志</string>
@@ -171,10 +185,13 @@
     <string name="create_vm_error_name_duplicate">已存在同名虚拟机</string>
     <string name="create_vm_error_save">保存配置时发生错误</string>
     <string name="create_vm_error_invalid_number">无效数字</string>
+    <string name="create_vm_error_invalid_environment_variable">环境变量必须使用 KEY=VALUE 格式</string>
+    <string name="create_vm_error_gpu_guest_prealloc_exceeds_pool">Guest 启动预分配不能超过 Guest 显存池大小</string>
+    <string name="create_vm_error_gpu_guest_dynamic_requires_room">启用动态步长时，Guest 启动预分配必须小于 Guest 显存池大小</string>
+    <string name="create_vm_error_gpu_guest_step_invalid">Guest 动态步长必须为 0，或是不小于 2 MiB 的 2 次幂</string>
     <string name="create_vm_error_hypervisor_not_supported">所选后端不支持选中的虚拟化模式</string>
     <string name="create_vm_error_path_invalid">无效的绝对路径</string>
     <string name="create_vm_error_native_display_only_crosvm">原生显示只在使用CrosVM后端时有效</string>
-    <string name="create_vm_error_native_display_vnc_cannot_enabled">原生显示和VNC不能同时启用</string>
     <string name="create_vm_category_kernel">Linux 内核</string>
     <string name="create_vm_kernel_hint">内核</string>
     <string name="create_vm_initrd_hint">Initrd</string>
@@ -194,13 +211,51 @@
     <string name="create_vm_prepare_lend_mthp_disabled">禁用</string>
     <string name="create_vm_prepare_lend_mthp_single">单次 (整块借出)</string>
     <string name="create_vm_prepare_lend_mthp_chunked">分块 (≤256MiB)</string>
-    <string name="create_vm_protected_normal">普通</string>
+    <string name="create_vm_protected_normal">非保护</string>
     <string name="create_vm_protected_protected">保护</string>
     <string name="create_vm_protected_without_firmware">无固件保护</string>
+    <string name="create_vm_protected_pseudo_unprotected">伪非保护</string>
     <string name="create_vm_category_extra_options">额外选项</string>
     <string name="create_vm_extra_option_hint">额外选项（每行一个）</string>
-    <string name="create_vm_category_gpu">图形加速器</string>
-    <string name="create_vm_gpu_enabled">启用GPU</string>
+    <string name="create_vm_environment_variables_hint">环境变量（KEY=VALUE，每行一个）</string>
+
+    <string name="create_vm_category_gpu_cgroup">GPU Worker Cpuset</string>
+    <string name="create_vm_cpu_affinity_title">vCPU 亲和性</string>
+    <string name="create_vm_cpu_affinity">绑定 vCPU 到宿主核心</string>
+    <string name="create_vm_cpu_affinity_vcpu_fmt">vCPU %d</string>
+    <string name="create_vm_cpu_affinity_vcpu_range_fmt">vCPU %s</string>
+    <string name="create_vm_cpu_affinity_unbound">不绑定</string>
+    <string name="create_vm_cpu_affinity_cores_fmt">%d 个核心</string>
+    <string name="create_vm_cpu_affinity_advanced">高级模式</string>
+    <string name="create_vm_cpu_affinity_simple_vcpus">vCPU 核心数</string>
+    <string name="create_vm_cpu_affinity_simple_empty">至少要勾选一颗宿主核心。</string>
+    <string name="create_vm_cpu_affinity_discard_title">离开高级模式？</string>
+    <string name="create_vm_cpu_affinity_discard_message">简易模式只能让一颗 vCPU 绑定专属的一颗宿主核心。转换后只会留下 %1$d 颗 vCPU（CPU %2$s）；多余的核心、未绑定的 vCPU，以及手动的 capacity/cluster 设置都会被舍弃。</string>
+    <string name="create_vm_cpu_affinity_section_vcpus">vCPU 到宿主核心</string>
+    <string name="create_vm_cpu_affinity_section_topology">客户机拓扑</string>
+    <string name="create_vm_cpu_topology_auto">自动推导 Capacity 和 Cluster</string>
+    <string name="create_vm_cpu_topology_unset">不传递给客户机</string>
+    <string name="create_vm_cpu_capacity">Capacity</string>
+    <string name="create_vm_cpu_capacity_group_fmt">vCPU %1$s：%2$d</string>
+    <string name="create_vm_cpu_capacity_hint">如 0=792,1=792,6=1024</string>
+    <string name="create_vm_cpu_cluster">Cluster</string>
+    <string name="create_vm_cpu_cluster_count_fmt">%d 个 Cluster</string>
+    <string name="create_vm_cpu_cluster_single">单个 Cluster（crosvm 默认）</string>
+    <string name="create_vm_cpu_clusters_hint">如 0-5;6（分号分隔）</string>
+    <string name="create_vm_cpu_affinity_big_only">仅大核</string>
+    <string name="create_vm_cpu_affinity_host_overlap">核心 %s 与 GPU Worker cpuset 重叠</string>
+    <string name="create_vm_gpu_cgroup">GPU Worker Cpuset</string>
+    <string name="create_vm_gpu_cgroup_path_hint">cpuset 路径（如 /dev/cpuset/gpuworker）</string>
+    <string name="create_vm_gpu_cgroup_cpus">cpuset 核心</string>
+    <string name="create_vm_gpu_cgroup_cpus_summary_fmt">核心：%s</string>
+    <string name="create_vm_gpu_cgroup_cpus_none">未选择</string>
+    <string name="create_vm_error_cpu_affinity_vcpu_oob">vCPU 索引超出范围（须小于 CPU 数量）</string>
+    <string name="create_vm_error_cpu_affinity_host_oob">宿主核 %d 在本机不存在</string>
+    <string name="create_vm_error_cpu_capacity_invalid">capacity 格式无效（应为 vcpu=1..1024,…）</string>
+    <string name="create_vm_error_cpu_clusters_overlap">cluster 中 vCPU %s 重复出现</string>
+    <string name="create_vm_error_gpu_cgroup_path">GPU cgroup 路径必须为绝对路径</string>
+    <string name="create_vm_error_gpu_cgroup_cpus_empty">请至少选择一个核心给 GPU Worker</string>
+    <string name="create_vm_error_gpu_rt_prio_needs_cpuset">实时调度需要先选择 cpuset 核心，否则会占满所有核心饿死其他进程。</string>
     <string name="create_vm_gpu_backend">渲染器</string>
     <string name="create_vm_gpu_backend_2d">2D (软件)</string>
     <string name="create_vm_gpu_backend_virglrenderer">VirGL</string>
@@ -210,24 +265,71 @@
     <string name="create_vm_gpu_api_egl">EGL</string>
     <string name="create_vm_gpu_api_opengles">OpenGL ES</string>
     <string name="create_vm_gpu_api_angle">ANGLE</string>
-    <string name="create_vm_category_display">显示</string>
-    <string name="create_vm_display_enabled">启用显示器</string>
-    <string name="create_vm_display_backend">显示后端</string>
-    <string name="create_vm_display_backend_simplefb">SimpleFB</string>
-    <string name="create_vm_display_backend_virtio_gpu">Virtio-GPU</string>
     <string name="create_vm_gpu_api_vulkan_system">Vulkan(系统原生)</string>
     <string name="create_vm_gpu_api_vulkan_turnip">Vulkan(Turnip)</string>
+    <string name="create_vm_gpu_api_drm2kgsl">DRM to KGSL</string>
+    <string name="create_vm_gpu_mode_opengl">OpenGL</string>
+    <string name="create_vm_gpu_mode_vulkan">Vulkan</string>
+    <string name="create_vm_gpu_mode_native">Native Context</string>
+    <string name="create_vm_gpu_provider_drm2kgsl">DRM to KGSL</string>
+    <string name="create_vm_gpu_mode">图形 API</string>
+    <string name="create_vm_gpu_provider">主机驱动</string>
     <string name="create_vm_gpu_api_vulkan_panvk">Vulkan(PanVK)</string>
+    <string name="create_vm_display_blit_provider">GPU 合成驱动</string>
+    <string name="create_vm_display_blit_off">关闭（CPU 拷贝）</string>
+    <string name="display_blit_system_missing_ext">系统 Vulkan 驱动缺少 GPU 合成所需的扩展：\n  %1$s\n原生显示将回退到 CPU 拷贝。</string>
     <string name="create_vm_gpu_api_not_implemented">此 GPU 驱动尚未实现</string>
+    <string name="create_vm_gpu_udmabuf">udmabuf(guest-alloc)</string>
+    <string name="create_vm_gpu_rt_prio">实时调度</string>
+    <string name="create_vm_gpu_host_pool_mb">命令缓冲池大小 (MB)</string>
+    <string name="create_vm_gpu_drm2kgsl_pool_mb">命令缓冲池大小 (MB)</string>
+    <string name="create_vm_gpu_venus_pool_mb">命令缓冲池大小 (MB)</string>
+    <string name="create_vm_gpu_dynamic_vram">启用动态显存</string>
+    <string name="create_vm_gpu_vram_quota_mb">动态显存配额 (MB)</string>
+    <string name="create_vm_gpu_vram_folio_threshold_kb">Host 分配大页阈值 (KB)</string>
+    <string name="create_vm_gpu_pool_blob_max_kb">blob 分流阈值 (KB)</string>
+    <string name="create_vm_gpu_guest_pool_mb">显存大小 (MB)</string>
+    <string name="create_vm_gpu_guest_prealloc_mb">Guest 启动预分配 (MB)</string>
+    <string name="create_vm_gpu_guest_step_mb">Guest 动态步长 (MB)</string>
+    <string name="create_vm_gpu_guest_max_grants">Guest 最大 memparcel 数 (0 = 不限)</string>
+    <string name="create_vm_category_vram">显存设置</string>
+    <string name="create_vm_category_screen_gpu0">Virtio-GPU</string>
+    <string name="create_vm_category_screen_simplefb">SimpleFB</string>
+    <string name="create_vm_category_renderer">渲染器</string>
+    <string name="create_vm_category_screen_display">显示设置</string>
+    <string name="create_vm_category_screen_export">导出设置</string>
+    <string name="create_vm_screen_gpu0">Virtio-GPU 屏幕</string>
+    <string name="create_vm_screen_simplefb">SimpleFB 屏幕</string>
+    <string name="create_vm_screen_enabled">启用显示设备</string>
     <string name="create_vm_display_width">显示宽度</string>
     <string name="create_vm_display_height">显示高度</string>
     <string name="create_vm_display_refresh_rate">刷新率 (Hz)</string>
+    <string name="create_vm_display_poll_hz">轮询率 (Hz)</string>
+    <string name="create_vm_display_resolution">分辨率</string>
+    <string name="create_vm_display_size_fmt">%1$d x %2$d</string>
+    <string name="create_vm_display_rate_fmt">%1$d Hz</string>
+    <string name="create_vm_display_custom">自定义…</string>
+    <string name="create_vm_display_custom_size_title">自定义分辨率</string>
     <string name="create_vm_display_dpi_h">水平DPI</string>
     <string name="create_vm_display_dpi_v">垂直DPI</string>
-    <string name="create_vm_category_vnc">VNC 服务器</string>
-    <string name="create_vm_vnc_enabled">启用 VNC</string>
-    <string name="create_vm_native_display_enabled">启用原生显示 (virtio-gpu)</string>
+    <string name="create_vm_screen_exporter">导出端</string>
+    <string name="create_vm_screen_exporter_none">Sink（丢弃）</string>
+    <string name="create_vm_screen_exporter_native">原生显示</string>
+    <string name="create_vm_screen_exporter_vnc">VNC</string>
+    <string name="create_vm_screen_transport">传输管线</string>
+    <string name="create_vm_screen_transport_cpu">CPU Copy</string>
+    <string name="create_vm_screen_transport_gpu">GPU Copy</string>
+    <string name="create_vm_screen_transport_zero">Zero Copy</string>
+    <string name="create_vm_screen_transport_gpu_hw">GPU Copy（硬件编码）</string>
+    <string name="create_vm_option_not_implemented">未实现</string>
+    <string name="create_vm_screen_width_cpu_fallback">此宽度下传输管线将使用 CPU Copy</string>
+    <string name="create_vm_screen_width_cpu_fallback_desc">GPU Copy 会把帧缓冲当成 linear dma-buf 导入，而驱动只收 row pitch 对齐 64 bytes 的缓冲。SimpleFB 的 pitch 就是宽度 x 4、没有任何补齐，所以 GPU Copy 需要 16 像素倍数的宽度 —— 例如 1408 而不是 1400。这个宽度本身没有问题，只是它的帧会走 CPU 复制。</string>
+    <string name="create_vm_screen_input_enabled">输入设备</string>
+    <string name="create_vm_error_vnc_port_conflict">两个监听端不能用同一个端口。</string>
     <string name="create_vm_vnc_host">主机地址</string>
+    <string name="create_vm_vnc_host_iface_fmt">%1$s (%2$s)</string>
+    <string name="create_vm_vnc_host_custom_title">自定义地址</string>
+    <string name="create_vm_error_invalid_host">地址不能包含空格、逗号、引号或方括号。</string>
     <string name="create_vm_vnc_port">端口</string>
     <string name="create_vm_vnc_password_auth">密码认证</string>
     <string name="create_vm_vnc_password">密码</string>
@@ -240,6 +342,7 @@
     <string name="create_vm_tab_storage">存储</string>
     <string name="create_vm_tab_network">网络</string>
     <string name="create_vm_tab_graphics">图形</string>
+    <string name="create_vm_tab_peripheral">外设</string>
     <string name="create_vm_network_label">网桥网络</string>
     <string name="create_vm_network_none">无</string>
     <string name="edit_vm_net_add">添加网络</string>
@@ -269,7 +372,6 @@
     <string name="edit_vm_disk_delete">移除磁盘</string>
     <string name="edit_vm_disk_browse">浏览</string>
     <string name="edit_vm_disk_browse_title">选择磁盘来源</string>
-    <string name="edit_vm_disk_browse_file">选择文件</string>
     <string name="edit_vm_disk_browse_registered">选择已注册的磁盘</string>
     <string name="edit_vm_disk_browse_import_create">导入或创建磁盘</string>
     <string name="edit_vm_disk_no_registered">未找到已注册的磁盘。</string>
@@ -285,7 +387,12 @@
     <string name="edit_vm_shared_dir_cache">缓存</string>
     <string name="edit_vm_shared_dir_writeback">回写</string>
     <string name="edit_vm_shared_dir_dax">DAX</string>
+    <string name="edit_vm_shared_dir_type_unavailable">9P 尚未实现，目前只接了 virtio-fs。</string>
+    <string name="edit_vm_shared_dir_dax_unavailable">DAX 在 arm64 尚未实现，主机端没有可供映射文件的共享内存窗口。</string>
     <string name="edit_vm_shared_dir_posix_acl">POSIX ACL</string>
+    <string name="edit_vm_shared_dir_root_access">Root 访问</string>
+    <string name="edit_vm_shared_dir_root_access_summary">关闭：以 DroidVM App 的身份读写主机文件。开启：以 root 身份。</string>
+    <string name="edit_vm_shared_dir_root_access_no_identity">无法获取 App 身份。请先打开一次 DroidVM，或为该目录开启 Root 访问。</string>
     <string name="edit_vm_shared_dir_delete">移除共享目录</string>
     <string name="edit_vm_shared_dir_browse">浏览</string>
 
@@ -301,7 +408,7 @@
     <string name="edit_vm_uefi_firmware">UEFI 固件(留空 = 内置 EDK2)</string>
     <string name="edit_vm_uefi_firmware_builtin">内置 EDK2</string>
     <string name="edit_vm_uefi_firmware_browse_title">选择 UEFI 固件</string>
-    <string name="edit_vm_uefi_firmware_hint">自定义固件仅对 QEMU 后端生效\ncrosvm 始终使用内置 EDK2\nUEFI 引导 Linux 适配中,尚不可用;如需引导 Linux,请选择 Linux 内核引导方式</string>
+    <string name="edit_vm_uefi_firmware_hint">自定义固件仅对 QEMU 后端生效\ncrosvm 始终使用内置 EDK2</string>
     <string name="edit_vm_uefi_vars">UEFI 变量(留空 = 内置 EDK2 变量)</string>
     <string name="edit_vm_uefi_vars_browse_title">选择 UEFI 变量文件</string>
     <string name="edit_vm_uefi_vars_too_large">对于 crosvm,pflash 镜像大小不能超过 %1$d MiB</string>
@@ -376,8 +483,10 @@
     <string name="settings_vm_auto_console_summary">启动虚拟机时自动打开控制台</string>
     <string name="settings_vm_clear_logs_before_start_title">启动前清理日志</string>
     <string name="settings_vm_clear_logs_before_start_summary">启动虚拟机前清理该虚拟机的所有控制台日志</string>
-    <string name="settings_vm_keep_compress_on_optimize_title">优化时保持压缩</string>
-    <string name="settings_vm_keep_compress_on_optimize_summary">优化磁盘时保留其原有压缩而非解压；关闭则重写为未压缩</string>
+    <string name="settings_optimize_compression_title">优化压缩格式</string>
+    <string name="settings_optimize_compression_ask">每次询问</string>
+    <string name="disk_compress_none">未压缩</string>
+    <string name="disk_optimize_compress_remember">记住此选择</string>
     <string name="settings_cpu_affinity_title">CPU 亲和性</string>
     <string name="settings_cpu_affinity_summary_fmt">磁盘操作运行于核心 %1$s</string>
     <string name="settings_cpu_affinity_all_cores">磁盘操作可使用全部核心</string>
@@ -397,6 +506,11 @@
     <string name="settings_category_update">更新</string>
     <string name="settings_auto_check_update_title">自动检查更新</string>
     <string name="settings_auto_check_update_summary">启动应用时自动检查更新</string>
+    <string name="key_desc_tab">Tab 键</string>
+    <string name="key_desc_backspace">退格键</string>
+    <string name="key_desc_win">Windows 键</string>
+    <string name="key_desc_shift">Shift 键</string>
+    <string name="key_desc_enter">Enter 键</string>
     <string name="key_desc_ime">显示键盘</string>
     <string name="settings_check_update_title">检查更新</string>
     <string name="settings_check_update_summary">立即检查新版本</string>
@@ -414,6 +528,71 @@
     <string name="vm_compressed_disk_title">压缩的磁盘镜像</string>
     <string name="vm_compressed_disk_message">crosvm 无法读取压缩的 qcow2 镜像——启动时会出现磁盘 I/O 错误且找不到分区表。要先转换成非压缩再启动吗？\n%1$s</string>
     <string name="vm_compressed_disk_convert">转换并启动</string>
+    <string name="vm_snapshot_disk_title">磁盘含内部快照</string>
+    <string name="vm_snapshot_disk_message">crosvm 不支持 qcow2 快照，也不会以可写方式打开含快照的磁盘，因此虚拟机无法启动。展平会保留磁盘当前的状态，并永久删除这些快照。若要保留快照，请将磁盘改为只读挂载，或改用 QEMU 后端启动。\n%1$s</string>
+    <string name="vm_snapshot_disk_flatten">删除快照并启动</string>
+    <string name="disk_snapshot_crosvm_warning_title">crosvm 无法使用快照</string>
+    <string name="disk_snapshot_crosvm_warning_message">此磁盘以可写方式挂载于 crosvm 虚拟机（%1$s），而 crosvm 不支持 qcow2 快照，磁盘含快照时该虚拟机将无法启动。在 crosvm 上请改用 backing file 增量镜像。仍要创建快照吗？</string>
+    <string name="disk_snapshot_crosvm_warning_create">仍要创建</string>
+    <string name="disk_tree_collapse">折叠</string>
+    <string name="disk_tree_broken_parent">找不到 parent 镜像</string>
+    <string name="disk_tree_current_attached">当前挂载</string>
+    <string name="disk_locked_title">磁盘为基底镜像</string>
+    <string name="disk_locked_message">「%1$s」是 %2$d 个增量镜像的基底，会变更它的操作已锁定。请先合并、展平或删除其增量。</string>
+    <string name="edit_vm_disk_locked_readonly">此磁盘有增量镜像，已改为只读挂载</string>
+    <string name="vm_locked_disk_title">基底镜像以可写方式挂载</string>
+    <string name="vm_locked_disk_message">以下磁盘是增量镜像的基底，写入会损坏其增量。改为只读挂载并启动？\n%1$s</string>
+    <string name="vm_locked_disk_readonly_start">改只读并启动</string>
+    <string name="disk_overlay_create_message">以「%1$s」为基底创建增量镜像。存在增量期间，基底将锁定为只读。</string>
+    <string name="disk_overlay_name_hint">文件名</string>
+    <string name="disk_overlay_advanced">高级…</string>
+    <string name="disk_overlay_depth_error">增量层数已达上限（%1$d）</string>
+    <string name="disk_overlay_vm_running">下列虚拟机正在使用基底磁盘，请先关机：%1$s</string>
+    <string name="disk_overlay_vm_choice_title">基底磁盘使用中</string>
+    <string name="disk_overlay_vm_choice_message">下列虚拟机磁盘以可写方式挂载「%1$s」：%2$s\n\n创建增量后基底将锁定。要让这些虚拟机改挂新增量（接续当前状态），还是保持挂载基底但改为只读？</string>
+    <string name="disk_overlay_vm_switch">改挂增量</string>
+    <string name="disk_overlay_vm_readonly">改为只读</string>
+    <string name="disk_overlay_created">已创建增量镜像：%1$s</string>
+    <string name="disk_chain_missing_parent">此镜像的 backing 文件缺失，在文件恢复前无法使用：\n%1$s</string>
+    <string name="disk_chain_import_title">检测到 backing 镜像</string>
+    <string name="disk_chain_import_message">此镜像建立在尚未登记的 backing 镜像之上。要一并登记吗？%1$s</string>
+    <string name="disk_chain_import_confirm">全部登记</string>
+    <string name="disk_merge">合并回基底</string>
+    <string name="disk_flatten">展平为独立磁盘</string>
+    <string name="disk_reset">清空增量</string>
+    <string name="disk_reset_confirm">“%1$s”自创建以来写入的所有更改都会被丢弃，它会重新变成“%2$s”的全新空增量。文件路径与大小不变，无法恢复。</string>
+    <string name="disk_reset_has_children">“%1$s”下面还有增量，请先合并、摊平或删除它们。</string>
+    <string name="disk_reset_encrypted">“%1$s”是加密磁盘，没有密钥无法重建。</string>
+    <string name="disk_reset_done">已清空增量：%1$s</string>
+    <string name="disk_reset_failed">清空增量失败，原文件已保留。</string>
+    <string name="disk_merge_not_overlay">此磁盘没有已登记的基底镜像。</string>
+    <string name="disk_merge_siblings">「%1$s」还有其他增量，合并会损坏它们。请先处理其他增量。</string>
+    <string name="disk_family_vm_running">此磁盘树上有虚拟机正在运行，请先关机：%1$s</string>
+    <string name="disk_merge_confirm">会将「%1$s」的变更写回「%2$s」，完成后「%1$s」将被删除，无法恢复。</string>
+    <string name="disk_merge_confirm_children">\n\n其 %1$d 个增量将改基于「%2$s」。</string>
+    <string name="disk_merge_confirm_vms">\n\n下列虚拟机将改挂「%2$s」：%1$s</string>
+    <string name="disk_flatten_confirm">会将基底数据复制进「%1$s」使其独立（文件将变大）；基底「%2$s」不受影响。</string>
+    <string name="disk_manage_branches">管理增量分支</string>
+    <string name="disk_branches_button">磁盘分支</string>
+    <string name="disk_delete_tree_title">删除整树</string>
+    <string name="disk_delete_tree_message">增量镜像只存放与基底的差异，因此整棵树会一并删除。下列磁盘将被移除：%1$s</string>
+    <string name="disk_delete_subtree_message">增量镜像只存放与基底的差异，因此其下游增量会一并删除。下列磁盘将被移除：%1$s</string>
+    <string name="disk_manage_branches_close">关闭</string>
+    <string name="disk_manage_branches_back">返回</string>
+    <string name="disk_tree_empty">这棵磁盘树已不存在。</string>
+    <string name="disk_tree_attached_by">挂载：%1$s</string>
+    <string name="disk_tree_in_use">%1$s（使用中）</string>
+    <string name="disk_tree_changes_header">\n\n其他虚拟机的挂载会一并变动：%1$s</string>
+    <string name="disk_tree_change_move">虚拟机“%1$s”磁盘 #%2$d：%3$s → %4$s</string>
+    <string name="disk_tree_change_move_readonly">虚拟机“%1$s”磁盘 #%2$d：%3$s → %4$s（改为只读）</string>
+    <string name="disk_tree_change_clear">虚拟机“%1$s”磁盘 #%2$d：%3$s 将从该虚拟机移除</string>
+    <string name="disk_tree_change_readonly">虚拟机“%1$s”磁盘 #%2$d：%3$s 改为只读</string>
+    <string name="disk_tree_change_rewritten">虚拟机“%1$s”磁盘 #%2$d：%3$s 的内容将被改写为 %4$s 的当前状态</string>
+    <string name="disk_tree_pinned">下列虚拟机尚未关机，其挂载的磁盘会受此操作影响，请先关机：%1$s</string>
+    <string name="edit_vm_disk_shared_readonly">此磁盘也被其他虚拟机挂载，已改为只读挂载</string>
+    <string name="vm_shared_disk_title">磁盘与其他虚拟机共用</string>
+    <string name="vm_shared_disk_message">下列磁盘也被其他虚拟机挂载，两边同时写入会损坏磁盘。要改为只读挂载并启动吗？\n%1$s</string>
+    <string name="disk_tree_not_registered">此磁盘未登记，无法使用分支功能</string>
     <string name="vm_compressed_disk_start_anyway">仍要启动</string>
     <string name="vm_compressed_disk_start_countdown">仍要启动 (%1$d)</string>
     <string name="field_copy">复制</string>
@@ -513,7 +692,27 @@
     <string name="disk_create_preview">预览：%1$s</string>
     <string name="disk_create_preview_desc">磁盘文件路径预览</string>
 
-    <string name="lxc_title">导入 LXC 镜像</string>
+    <string name="vm_create_mode_title">新增虚拟机</string>
+    <string name="vm_create_linux">Linux VM</string>
+    <string name="vm_create_windows">Windows VM</string>
+    <string name="vm_create_import">从 .vmpkg 导入</string>
+    <string name="vm_create_customize">自定义</string>
+    <string name="windows_vm_unavailable_title">Windows VM 尚不可用</string>
+    <string name="windows_vm_unavailable_message">此功能尚在实现中，目前不可用。请先使用 windows_build.ps1 脚本构建 Windows 镜像。</string>
+    <string name="windows_vm_open_script">打开构建脚本</string>
+    <string name="linux_vm_create_title">创建 Linux 虚拟机</string>
+    <string name="linux_vm_category_settings">设置</string>
+    <string name="linux_vm_disk_size_hint">磁盘大小</string>
+    <string name="linux_vm_root_password_hint">Root 密码</string>
+    <string name="linux_vm_root_password_toggle">显示或隐藏 Root 密码</string>
+    <string name="linux_vm_network_hint">网络</string>
+    <string name="linux_vm_network_none">不使用网络</string>
+    <string name="linux_vm_network_unavailable">选择的网络已不存在。</string>
+    <string name="linux_vm_create_action">创建</string>
+    <string name="linux_vm_create_success">虚拟机“%1$s”已创建。</string>
+    <string name="linux_vm_create_failed">Linux 虚拟机创建流程未完成。</string>
+
+    <string name="lxc_title">下载发行版 LXC 镜像</string>
     <string name="lxc_category_source">来源</string>
     <string name="lxc_meta_source_hint">元数据来源</string>
     <string name="lxc_download_source_hint">下载来源</string>
@@ -536,6 +735,7 @@
     <string name="lxc_variant_hint">构建类别</string>
     <string name="lxc_build_hint">构建版本</string>
     <string name="lxc_category_output">输出</string>
+    <string name="lxc_reset_password_hint">重置 root 密码（可选）</string>
     <string name="lxc_info_size">下载大小：%1$s</string>
     <string name="lxc_info_path">远程路径：%1$s</string>
     <string name="lxc_fab_import">导入</string>
@@ -545,9 +745,9 @@
     <string name="lxc_error_name_empty">文件名不能为空。</string>
     <string name="lxc_error_folder_empty">保存文件夹不能为空。</string>
     <string name="lxc_error_custom_url">请输入有效的镜像站 URL。</string>
+    <string name="lxc_error_source_unavailable">所选元数据源当前不可用。</string>
     <string name="lxc_no_images">未找到 disk-kvm 镜像。</string>
-    <string name="lxc_default_download_source">cernet</string>
-    <string name="disk_add_lxc">导入 LXC 镜像</string>
+    <string name="disk_add_lxc">下载发行版 LXC 镜像</string>
     <string name="disk_add_url">从 URL 下载</string>
     <string name="disk_add_images">下载发行版镜像</string>
 
@@ -599,11 +799,13 @@
     <string name="disk_operation_running">执行中\u2026</string>
     <string name="disk_operation_success">操作完成。</string>
     <string name="disk_operation_failed">操作失败（退出码 %1$d）。</string>
+    <string name="disk_operation_finalizing">正在保存磁盘依赖关系…</string>
+    <string name="disk_operation_dependency_failed">磁盘数据操作已完成，但无法保存 VM／磁盘依赖关系；可保留源镜像时已予以保留。</string>
     <string name="disk_operation_bad_task">无效的任务参数。</string>
     <string name="disk_operation_cancel_title">取消操作？</string>
     <string name="disk_operation_cancel_message">磁盘操作仍在进行中，确定要取消吗？</string>
 
-    <string name="disk_change_password">修改密码</string>
+    <string name="disk_change_password">修改客体 Linux 密码</string>
     <string name="change_password_title">修改密码</string>
     <string name="change_password_disk_label">磁盘：%1$s</string>
     <string name="change_password_hint">新密码</string>
@@ -612,6 +814,7 @@
     <string name="change_password_confirm">确认</string>
     <string name="change_password_error_empty">密码不能为空</string>
     <string name="change_password_error_mismatch">两次输入的密码不一致</string>
+    <string name="change_password_error_unsafe">仅支持字母、数字与以下符号：%1$s</string>
 
     <string name="agent_operation_title">代理操作</string>
     <string name="agent_operation_preparing">准备中\u2026</string>
@@ -619,6 +822,7 @@
     <string name="agent_operation_starting_vm">正在启动临时虚拟机\u2026</string>
     <string name="agent_operation_running">执行中\u2026</string>
     <string name="agent_operation_success">操作完成。</string>
+    <string name="agent_operation_success_skipped">操作完成；有操作不适用，未进行更改。</string>
     <string name="agent_operation_failed">操作失败（退出码 %1$d）。</string>
     <string name="agent_operation_failed_detail">操作失败：%1$s</string>
     <string name="agent_operation_prepare_failed">准备代理虚拟机失败。</string>
@@ -631,8 +835,26 @@
     <string name="agent_operation_log_creating_vm">正在守护进程上创建临时虚拟机\u2026\n</string>
     <string name="agent_operation_log_starting_vm">正在启动临时虚拟机\u2026\n</string>
     <string name="agent_operation_log_running">临时虚拟机正在运行\u2026\n</string>
-    <string name="agent_operation_log_success">\n密码修改成功。\n</string>
+    <string name="agent_operation_log_success">\n所有请求的操作均已完成。\n</string>
+    <string name="agent_operation_log_skipped">\n操作未发生错误，但至少有一个操作未进行更改。\n</string>
     <string name="agent_operation_log_failed">\n操作失败，请查看上方日志。\n</string>
+    <string name="agent_operation_logs">日志</string>
+    <string name="agent_operation_stopping">正在停止救援虚拟机…</string>
+    <string name="agent_operation_vm_stopped">救援虚拟机已停止。</string>
+    <string name="agent_operation_control_failed">救援虚拟机的控制通道已断开。</string>
+    <string name="agent_operation_error_root_not_found">找不到受支持的 Linux 根分区。</string>
+    <string name="agent_operation_error_password">无法更新密码数据库。</string>
+    <string name="agent_operation_error_unmount">密码已更新，但无法安全卸载目标文件系统。</string>
+    <string name="agent_operation_error_script">救援脚本意外失败。</string>
+    <string name="agent_operation_error_autogrow_disk">无法检查目标磁盘。</string>
+    <string name="agent_operation_error_autogrow_in_use">最后一个分区仍在挂载或使用中。</string>
+    <string name="agent_operation_error_partition_grow">无法扩展最后一个分区。</string>
+    <string name="agent_operation_error_partition_reread">分区表已更改，但内核无法重新加载。</string>
+    <string name="agent_operation_error_filesystem_check">文件系统检查失败，未执行文件系统扩展。</string>
+    <string name="agent_operation_error_filesystem_mount">无法挂载文件系统以进行扩展。</string>
+    <string name="agent_operation_error_filesystem_grow">分区已扩大，但文件系统扩展失败。</string>
+    <string name="agent_operation_error_filesystem_unmount">文件系统已扩展，但无法安全卸载。</string>
+    <string name="agent_operation_error_unknown">救援错误：%1$s</string>
 
     <string name="disk_resize">调整大小</string>
     <string name="disk_resize_title">调整磁盘大小</string>
@@ -645,6 +867,11 @@
     <string name="disk_resize_shrink_message">新大小小于当前大小，缩小磁盘可能会导致数据丢失。确定要继续吗？</string>
     <string name="disk_resize_error_invalid">请输入有效的大小</string>
     <string name="disk_resize_error_info">无法获取磁盘信息</string>
+    <string name="disk_resize_autogrow">分区大小扩容</string>
+    <string name="disk_resize_autogrow_description">支持 ext2/3/4、Btrfs、F2FS</string>
+    <string name="disk_resize_error_no_action">请选择不同大小，或启用文件系统扩展</string>
+    <string name="disk_resize_error_autogrow_shrink">缩小虚拟磁盘时不能同时扩展文件系统</string>
+    <string name="disk_dependency_update_failed">无法更新 VM 磁盘依赖关系；未删除任何磁盘。</string>
 
     <string name="disk_set_format">转换格式</string>
     <string name="disk_set_format_title">转换磁盘格式</string>
@@ -831,6 +1058,9 @@
     <string name="vnc_display_reconnecting">正在重连 (%1$d/%2$d)…</string>
     <string name="vnc_display_reconnect_failed">重连失败，已尝试 %1$d 次</string>
     <string name="vnc_display_connect_failed">无法连接到 VNC 服务器</string>
+    <string name="vnc_display_h264_active">H.264 串流</string>
+    <string name="vnc_display_h264_fallback">已退回 RFB</string>
+    <string name="vnc_display_h264_unavailable">H.264 不可用（此设备无编码器）</string>
     <string name="vnc_display_fullscreen">全屏</string>
 
     <string name="native_display_title">原生显示器</string>
@@ -848,6 +1078,7 @@
     <string name="vnc_menu_input_mode_touch">触摸模式</string>
     <string name="vnc_menu_input_mode_mouse">鼠标模式</string>
     <string name="vnc_menu_input_mode_tablet">手写板模式</string>
+    <string name="display_input_disabled_hint">这个屏幕没有启用输入设备。请到 VM 的图形设置开启，然后重新启动 VM。</string>
     <string name="usb_input_no_device">未找到USB键盘或鼠标</string>
     <string name="usb_input_status">USB输入：%1$d个键盘，%2$d个鼠标</string>
     <string name="vnc_menu_rotate">旋转屏幕</string>
@@ -863,15 +1094,15 @@
     <string name="vnc_op_scroll_down">滚轮下滚</string>
     <string name="vnc_menu_reconnect">重新连接</string>
     <string name="vnc_menu_external_app">使用外部程序连接</string>
-    <string name="vnc_menu_view_url">查看连接地址</string>
+    <string name="vnc_menu_project_external">投射到外部显示器</string>
     <string name="vnc_menu_no_vnc_app">未找到可处理 VNC 连接的应用</string>
-    <string name="vnc_menu_url_copied">已复制到剪贴板</string>
     <string name="vnc_presentation_title">触控板</string>
     <string name="vnc_presentation_title_with_name">%1$s - 触控板</string>
 
     <string name="vnc_external_title">使用外部程序连接</string>
     <string name="vnc_external_message">即将使用外部程序连接</string>
-    <string name="vnc_external_hint_target">目标</string>
+    <string name="vnc_external_hint_local">连接地址（本机）</string>
+    <string name="vnc_external_hint_remote">连接地址（其他设备）</string>
     <string name="vnc_external_hint_password">密码</string>
     <string name="vnc_external_cancel">取消</string>
     <string name="vnc_external_connect">连接</string>
@@ -904,6 +1135,12 @@
     <string name="logs_share">分享</string>
     <string name="logs_share_title">分享日志</string>
     <string name="logs_share_failed">分享日志失败：%1$s</string>
+    <string name="logs_filter">过滤</string>
+    <string name="logs_filter_title">过滤日志</string>
+    <string name="logs_filter_message">只显示包含这段文字的行。留空则显示全部。</string>
+    <string name="logs_filter_hint">要匹配的文字</string>
+    <string name="logs_filter_show_all">显示全部</string>
+    <string name="logs_title_filtered">%1$s - %2$s（过滤：%3$s）</string>
     <string name="logs_not_found_title">守护进程日志不可用</string>
     <string name="logs_not_found_message">找不到守护进程的日志文件，守护进程是否正在运行？</string>
 
@@ -949,6 +1186,14 @@
     <string name="hugepage_stat_pool_size">池大小: %1$d (%2$s)</string>
     <string name="hugepage_stat_pool_size_cma">池大小:%1$d/%2$d(%3$s / %4$s)</string>
     <string name="hugepage_stats_unavailable">模块未加载</string>
+    <string name="hugepage_advanced">高级设置</string>
+    <string name="hugepage_adv_hint">右侧为模块当前的读回值;点一列可编辑 settings.prop 的设置。</string>
+    <string name="hugepage_adv_unavailable">不可用</string>
+    <string name="hugepage_adv_unset">(default)</string>
+    <string name="hugepage_adv_warn_below_default">低于本机默认值 %1$d，系统可能不稳定</string>
+    <string name="hugepage_adv_invalid">数值无效</string>
+    <string name="hugepage_adv_saved">已保存</string>
+    <string name="hugepage_adv_save_failed">保存失败</string>
     <string name="hugepage_manual_refill">回收</string>
     <string name="hugepage_refill_triggered">回收已触发</string>
     <string name="hugepage_refill_failed">触发回收失败</string>
@@ -980,7 +1225,9 @@
     <string name="log_helper_huge_page_fault_message">虚拟机 %1$s 遇到了大页内存不足的情况。\n请尝试修改内存大小，或者使用预分配模块。\n打开浏览器查看更多信息。</string>
     <string name="log_helper_no_restrict_pool_url" formatted="false">https://github.com/Droid-VM/DroidVM/wiki/%E9%97%AE%E9%A2%98%EF%BC%9A%E8%99%9A%E6%8B%9F%E6%9C%BA%E7%9A%84%E7%B3%BB%E7%BB%9F%E4%B8%8D%E6%94%AF%E6%8C%81SWIOTLB-Restrict-DMA-Pool</string>
     <string name="log_helper_no_restrict_pool_title">虚拟机内核功能缺失</string>
-    <string name="log_helper_no_restrict_pool_message">虚拟机 %1$s 的内核不支持 Restricted DMA Pool。\n请更换内核或使用DroidVM内置内核。\n打开浏览器查看更多信息。</string>
+    <string name="log_helper_no_restrict_pool_devices">%1$s 的以下设备访问了保护区域内存：</string>
+    <string name="log_helper_no_restrict_pool_message"><![CDATA[可能是虚拟机的内核不支持 Restricted DMA Pool，请更换内核或使用 DroidVM 内置内核。<br><br>也可能是这些设备的驱动尚未移植，请安装以下 <a href="https://github.com/Droid-VM/gunyah-guest-drivers-windows">Windows 驱动</a> 或 <a href="https://github.com/Droid-VM/droidvm-guest-additions">Linux 驱动</a>。]]></string>
+    <string name="log_helper_open_log">打开日志</string>
     <string name="log_helper_unsupported_gunyah_title">不支持的Gunyah版本</string>
     <string name="log_helper_unsupported_gunyah_message">您的设备上的Gunyah版本过旧（如骁龙8 Gen 2），请尝试更新系统或更换新的设备。</string>
     <string name="log_helper_unsupported_sandbox_title">沙箱模式不支持</string>
@@ -1138,4 +1385,155 @@
     <string name="vmpkg_import_done">导入完成</string>
     <string name="vmpkg_import_failed">导入失败：%1$s</string>
     <string name="vmpkg_import_invalid">不是有效的 vmpkg：%1$s</string>
+    <string name="kernel_module_title">内核模块</string>
+    <string name="kernel_module_subtitle">加载主机内核模块、设置随守护进程自动加载</string>
+    <string name="kernel_module_loading">加载中…</string>
+    <string name="kernel_module_none">没有可用模块</string>
+    <string name="kernel_module_loaded">已加载</string>
+    <string name="kernel_module_unloaded">未加载</string>
+    <string name="kernel_module_load">加载</string>
+    <string name="kernel_module_unload">卸载</string>
+    <string name="kernel_module_autostart">自动加载</string>
+    <string name="kernel_module_autostart_needs_load">请先手动加载一次 — 只有在本机成功加载过的模块才能开启自动加载</string>
+    <string name="kernel_module_working">执行中…</string>
+    <string name="kernel_module_ok">完成</string>
+    <string name="kernel_module_fail">失败</string>
+    <string name="kernel_module_kmi">KMI: %1$s</string>
+    <string name="kernel_module_why">为什么需要？</string>
+    <string name="kernel_module_manage">管理</string>
+    <string name="setup_kmod_desc"><![CDATA[DroidVM 需要这些主机内核模块，缺少它们 VM 可能无法开机或无法使用 GPU 加速。模块仍在开发中，无法保证稳定性，可能会导致手机重启：请先尝试加载，确认没问题后再开启随守护进程自动加载。若遇到任何问题，请<a href="https://github.com/Droid-VM/DroidVM/issues">提交 Issue</a>。每张卡片都有各模块的用途说明。]]></string>
+    <string name="vm_hugepage_short_title">大页保留区不足</string>
+    <string name="vm_hugepage_short_message">大页保留区目前剩 %1$d MB，这台虚拟机大约需要 %2$d MB，差 %3$d MB。\n\n上一台虚拟机结束后，保留区通常两秒左右就会补回来。现在就开机的话，Hypervisor 只能改拿普通内存，而那必须先从 CMA 迁移出来；在内存吃紧的手机上，这一步曾造成整机停住数分钟、甚至直接重启。\n\n通常等一下再开就好了。</string>
+    <string name="vm_hugepage_short_settings">前往大页设置</string>
+    <string name="vm_hugepage_short_start_anyway">仍要启动</string>
+
+    <string name="create_vm_category_peripheral">外设</string>
+    <string name="edit_vm_peripheral_empty">没有外设</string>
+    <string name="edit_vm_peripheral_add">添加外设</string>
+    <string name="edit_vm_peripheral_add_title">外设类型</string>
+    <string name="edit_vm_peripheral_type">外设类型</string>
+    <string name="edit_vm_peripheral_delete">移除外设</string>
+    <string name="edit_vm_peripheral_host_device">主机设备</string>
+    <string name="edit_vm_peripheral_host_default">跟随系统</string>
+    <string name="edit_vm_peripheral_host_missing">当前未连接，VM 会改用系统默认路由。</string>
+    <string name="edit_vm_peripheral_host_missing_item">%1$s（未连接）</string>
+    <string name="edit_vm_peripheral_pick_output">播放到</string>
+    <string name="edit_vm_peripheral_pick_input">录音来源</string>
+    <string name="edit_vm_peripheral_duplicate_host">有两个同类型的外设指向同一个主机设备。</string>
+    <string name="audio_device_builtin_speaker">扬声器</string>
+    <string name="audio_device_builtin_earpiece">听筒</string>
+    <string name="audio_device_builtin_mic">内置麦克风</string>
+    <string name="audio_device_wired_headset">有线耳麦</string>
+    <string name="audio_device_wired_headphones">有线耳机</string>
+    <string name="audio_device_bluetooth">蓝牙音频</string>
+    <string name="audio_device_bluetooth_sco">蓝牙通话音频</string>
+    <string name="audio_device_usb">USB 音频</string>
+    <string name="audio_device_hdmi">HDMI</string>
+    <string name="audio_device_line">线路输出</string>
+    <string name="edit_vm_peripheral_type_virtio_camera">virtio-media 摄像头</string>
+    <string name="camera_permission_title">允许使用摄像头？</string>
+    <string name="camera_permission_message">摄像头外设会把这台手机的其中一个摄像头交给客户机。Android 只在本应用持有权限时才允许开启摄像头，没有权限时这个设备虽然会列出，却永远无法启动。</string>
+    <string name="camera_permission_allow">允许</string>
+    <string name="camera_permission_cancel">取消</string>
+    <string name="camera_permission_declined">未授予摄像头权限，因此没有添加摄像头设备。</string>
+    <string name="host_camera_default">主机默认</string>
+    <string name="host_camera_front">前置摄像头（%1$s）</string>
+    <string name="host_camera_back">后置摄像头（%1$s）</string>
+    <string name="host_camera_external">外接摄像头（%1$s）</string>
+    <string name="host_camera_unknown">摄像头 %1$s</string>
+    <string name="host_camera_none">此主机没有摄像头</string>
+    <string name="create_vm_category_vpu">视频加速 (VPU)</string>
+    <string name="create_vm_vpu_enabled">挂载硬件视频编码器与解码器</string>
+    <string name="create_vm_vpu_host_pool_mb">主机缓冲池大小 (MB)</string>
+    <string name="create_vm_vpu_guest_pool_mb">客户机缓冲池大小 (MB)</string>
+    <string name="create_vm_vpu_note">功能待实现：这些设置会随 VM 一起保存，但在功能完成前不会挂载任何视频设备。</string>
+    <string name="edit_vm_peripheral_camera_missing">这台手机没有这个摄像头，该设备不会启动。</string>
+    <string name="edit_vm_peripheral_host_camera">主机摄像头</string>
+    <string name="peripheral_fgs_title">外设使用中</string>
+    <string name="peripheral_fgs_text">正在运行的 VM 使用了需要 DroidVM 保持在前台的设备。</string>
+    <string name="notif_channel_peripheral_foreground">虚拟机外设</string>
+    <string name="notif_channel_peripheral_foreground_desc">当 VM 使用摄像头等 Android 只允许在前台使用的设备时显示。</string>
+    <string name="record_audio_permission_title">允许使用麦克风？</string>
+    <string name="record_audio_permission_message">这台 VM 加了麦克风，运行期间会录取手机的麦克风。允许麦克风权限，客户机才听得到。</string>
+    <string name="record_audio_permission_allow">继续</string>
+    <string name="record_audio_permission_skip">暂时不要</string>
+
+    <string name="edit_vm_peripheral_type_virtio_sound">VirtIO Sound</string>
+    <string name="edit_vm_peripheral_type_intel_hda">Intel HDA</string>
+    <string name="edit_vm_peripheral_unavailable">功能待实现，VM 启动时会跳过这个设备。</string>
+    <string name="edit_vm_sound_endpoint_add">新增设备</string>
+    <string name="edit_vm_sound_endpoint_remove">移除端点</string>
+    <string name="edit_vm_sound_purpose_usage">用途</string>
+    <string name="edit_vm_sound_purpose_content">内容类型</string>
+    <string name="edit_vm_sound_purpose_preset">麦克风用途</string>
+    <string name="edit_vm_sound_purpose_unset">跟随默认</string>
+    <string name="edit_vm_sound_usage_media">媒体</string>
+    <string name="edit_vm_sound_usage_voice_communication">通话</string>
+    <string name="edit_vm_sound_usage_voice_communication_signalling">信令</string>
+    <string name="edit_vm_sound_usage_game">游戏</string>
+    <string name="edit_vm_sound_usage_alarm">闹钟</string>
+    <string name="edit_vm_sound_usage_notification">通知</string>
+    <string name="edit_vm_sound_usage_notification_ringtone">铃声</string>
+    <string name="edit_vm_sound_usage_notification_event">事件</string>
+    <string name="edit_vm_sound_usage_assistant">助理</string>
+    <string name="edit_vm_sound_usage_assistance_accessibility">无障碍</string>
+    <string name="edit_vm_sound_usage_assistance_navigation_guidance">导航</string>
+    <string name="edit_vm_sound_usage_assistance_sonification">界面</string>
+    <string name="edit_vm_sound_content_speech">语音</string>
+    <string name="edit_vm_sound_content_music">音乐</string>
+    <string name="edit_vm_sound_content_movie">影片</string>
+    <string name="edit_vm_sound_content_sonification">音效</string>
+    <string name="edit_vm_sound_preset_generic">一般</string>
+    <string name="edit_vm_sound_preset_camcorder">录像</string>
+    <string name="edit_vm_sound_preset_voice_recognition">识别</string>
+    <string name="edit_vm_sound_preset_voice_communication">通讯</string>
+    <string name="edit_vm_sound_preset_unprocessed">未处理</string>
+    <string name="edit_vm_sound_preset_voice_performance">演出</string>
+    <string name="edit_vm_sound_mode_speaker">扬声器</string>
+    <string name="edit_vm_sound_mode_microphone">麦克风</string>
+    <string name="edit_vm_sound_buffer">缓冲</string>
+    <string name="edit_vm_sound_buffer_low">低延迟（2 缓冲）</string>
+    <string name="edit_vm_sound_buffer_normal">平衡档（6 缓冲）</string>
+    <string name="edit_vm_sound_buffer_safe">高音质（12 缓冲）</string>
+    <string name="edit_vm_sound_underrun">缓冲区欠载</string>
+    <string name="edit_vm_sound_underrun_silence">静音</string>
+    <string name="edit_vm_sound_underrun_repeat">重复</string>
+    <string name="edit_vm_sound_underrun_wsola">WSOLA</string>
+    <string name="edit_vm_sound_underrun_lpc">LPC</string>
+    <string name="edit_vm_peripheral_host_output">输出</string>
+    <string name="edit_vm_peripheral_host_input">输入</string>
+    <string name="vm_info_console_stdout_short">stdout</string>
+    <string name="vm_info_console_stderr_short">stderr</string>
+    <string name="create_vm_category_serial">串口</string>
+    <string name="edit_vm_serial_empty">没有串口</string>
+    <string name="edit_vm_serial_add">添加串口</string>
+    <string name="edit_vm_serial_add_title">串口硬件</string>
+    <string name="edit_vm_serial_delete">移除串口</string>
+    <string name="edit_vm_serial_hw_serial">Serial</string>
+    <string name="edit_vm_serial_hw_sbsa">SBSA</string>
+    <string name="edit_vm_serial_hw_virtio_console">Virtio Console</string>
+    <string name="edit_vm_serial_backend">后端</string>
+    <string name="edit_vm_serial_backend_sink">Sink（丢弃）</string>
+    <string name="edit_vm_serial_backend_app_console">APP 控制台</string>
+    <string name="edit_vm_serial_backend_file">文件</string>
+    <string name="edit_vm_serial_backend_unix">Unix socket（数据报）</string>
+    <string name="edit_vm_serial_backend_unix_stream">Unix socket（流）</string>
+    <string name="edit_vm_serial_backend_pty">PTY</string>
+    <string name="edit_vm_serial_backend_stdout">标准输出</string>
+    <string name="edit_vm_serial_backend_syslog">Syslog</string>
+    <string name="edit_vm_serial_backend_usb_acm">USB Gadget ACM</string>
+    <string name="edit_vm_serial_path">路径</string>
+    <string name="edit_vm_serial_path_pty_hint">可选：pty 的符号链接</string>
+    <string name="edit_vm_serial_path_required">这个串口后端需要填写路径。</string>
+    <string name="edit_vm_serial_console">作为 Guest 控制台（SPCR）</string>
+    <string name="edit_vm_serial_slot_duplicate">两个串口指向同一个 USB 槽位。</string>
+    <string name="edit_vm_serial_usb_slot">USB 槽位</string>
+    <string name="edit_vm_serial_usb_slot_item">槽位 %1$d</string>
+    <string name="settings_usb_acm_ports_title">USB 串口（ACM）</string>
+    <string name="settings_usb_acm_ports_summary">%1$d 个槽位</string>
+    <string name="settings_usb_acm_enable">启用 USB 串口</string>
+    <string name="settings_usb_acm_reenum_note">开启或关闭时，手机的 USB 连接会短暂重新连接。</string>
+    <string name="settings_usb_acm_disabled">已停用</string>
+    <string name="edit_vm_serial_usb_disabled_hint">USB 串口（ACM）未启用；请先到设置启用，否则此 VM 无法开机。</string>
+    <string name="edit_vm_serial_full">这种硬件的端口都已添加。</string>
 </resources>
diff --git a/app/src/main/res/values-zh-rTW/strings.xml b/app/src/main/res/values-zh-rTW/strings.xml
index 740e99bd7..35284ab5a 100644
--- a/app/src/main/res/values-zh-rTW/strings.xml
+++ b/app/src/main/res/values-zh-rTW/strings.xml
@@ -55,6 +55,17 @@
     <string name="setup_extract_uptodate">\u2705 預建置檔案已是最新。</string>
     <string name="setup_extract_fail">\u274C 解壓預建置檔案失敗，請重試。</string>
 
+    <string name="setup_network_title">建立網路</string>
+    <string name="setup_network_desc">虛擬機器必須接上網路才會有連線。請先選一種建立起來；之後可以在「網路」分頁新增或修改。</string>
+    <string name="setup_network_opt_wifi">Wi-Fi 偽橋接</string>
+    <string name="setup_network_opt_linux">Linux 網橋（IPv4 NAT + DHCP）</string>
+    <string name="setup_network_opt_gvisor">gVisor 網橋（IPv4 + IPv6 NAT + DHCP）</string>
+    <string name="setup_network_info_wifi">名稱：%1$s\n上行：Wi-Fi，第二層偽橋接\n位址：由 Wi-Fi 路由器指派\nNAT：不使用\nDHCP：由路由器提供</string>
+    <string name="setup_network_info_linux">名稱：%1$s\n上行：經由主機路由\nIPv4：%2$s\nIPv6：%3$s（靜態，僅主機端）\nNAT：IPv4 已啟用\nDHCP：IPv4 已啟用</string>
+    <string name="setup_network_info_gvisor">名稱：%1$s\n上行：經由主機路由，使用者空間實作\nIPv4：%2$s\nIPv6：%3$s\nNAT：IPv4 與 IPv6 已啟用\nDHCP：IPv4、IPv6 與 SLAAC 已啟用</string>
+    <string name="setup_network_no_subnet">已無可用網段</string>
+    <string name="setup_network_created">已建立網路 %1$s</string>
+
     <string name="setup_done_title">設定完成</string>
     <string name="setup_done_desc">所有檢查均已通過。\n您可以開始使用 DroidVM。</string>
 
@@ -103,6 +114,8 @@
     <string name="vm_edit">編輯</string>
     <string name="vm_delete">刪除</string>
     <string name="vm_delete_confirm">確定要刪除此虛擬機器嗎？</string>
+    <string name="vm_delete_writable_disks">同時刪除關聯的可寫入磁碟檔案（%1$d 個）</string>
+    <string name="vm_delete_disks_result">已刪除 %1$d 個磁碟檔案；保留 %2$d 個被其他虛擬機器掛載、%3$d 個是增量基底、%4$d 個刪除失敗。</string>
     <string name="vm_state_stopped">已停止</string>
     <string name="vm_state_starting">啟動中</string>
     <string name="vm_state_running">執行中</string>
@@ -139,6 +152,7 @@
     <string name="vm_info_console_text_select">文字控制台 %1$s</string>
     <string name="vm_info_console_vnc_select">VNC 控制台</string>
     <string name="vm_info_console_native_select">原生顯示</string>
+    <string name="vm_info_console_screen_select">%1$s \u2013 %2$s</string>
     <string name="vm_info_console_vnc_ext_select">外部顯示器的 VNC</string>
 
     <string name="vm_info_logs">日誌</string>
@@ -171,10 +185,13 @@
     <string name="create_vm_error_name_duplicate">已存在同名虛擬機器</string>
     <string name="create_vm_error_save">儲存配置時發生錯誤</string>
     <string name="create_vm_error_invalid_number">無效數字</string>
+    <string name="create_vm_error_invalid_environment_variable">環境變數必須使用 KEY=VALUE 格式</string>
+    <string name="create_vm_error_gpu_guest_prealloc_exceeds_pool">Guest 啟動預分配不能超過 Guest 顯存池大小</string>
+    <string name="create_vm_error_gpu_guest_dynamic_requires_room">啟用動態步長時，Guest 啟動預分配必須小於 Guest 顯存池大小</string>
+    <string name="create_vm_error_gpu_guest_step_invalid">Guest 動態步長必須為 0，或是不小於 2 MiB 的 2 次冪</string>
     <string name="create_vm_error_hypervisor_not_supported">所選後端不支援選取的虛擬化模式</string>
     <string name="create_vm_error_path_invalid">無效的絕對路徑</string>
     <string name="create_vm_error_native_display_only_crosvm">原生顯示只在使用CrosVM後端時有效</string>
-    <string name="create_vm_error_native_display_vnc_cannot_enabled">原生顯示和VNC不能同時啟用</string>
     <string name="create_vm_category_kernel">Linux 核心</string>
     <string name="create_vm_kernel_hint">核心</string>
     <string name="create_vm_initrd_hint">Initrd</string>
@@ -194,13 +211,51 @@
     <string name="create_vm_prepare_lend_mthp_disabled">停用</string>
     <string name="create_vm_prepare_lend_mthp_single">單次 (整塊借出)</string>
     <string name="create_vm_prepare_lend_mthp_chunked">分塊 (≤256MiB)</string>
-    <string name="create_vm_protected_normal">普通</string>
+    <string name="create_vm_protected_normal">非保護</string>
     <string name="create_vm_protected_protected">保護</string>
     <string name="create_vm_protected_without_firmware">無韌體保護</string>
+    <string name="create_vm_protected_pseudo_unprotected">偽非保護</string>
     <string name="create_vm_category_extra_options">額外選項</string>
     <string name="create_vm_extra_option_hint">額外選項（每行一個）</string>
-    <string name="create_vm_category_gpu">圖形加速器</string>
-    <string name="create_vm_gpu_enabled">啟用GPU</string>
+    <string name="create_vm_environment_variables_hint">環境變數（KEY=VALUE，每行一個）</string>
+
+    <string name="create_vm_category_gpu_cgroup">GPU Worker Cpuset</string>
+    <string name="create_vm_cpu_affinity_title">vCPU 親和性</string>
+    <string name="create_vm_cpu_affinity">綁定 vCPU 到宿主核心</string>
+    <string name="create_vm_cpu_affinity_vcpu_fmt">vCPU %d</string>
+    <string name="create_vm_cpu_affinity_vcpu_range_fmt">vCPU %s</string>
+    <string name="create_vm_cpu_affinity_unbound">不綁定</string>
+    <string name="create_vm_cpu_affinity_cores_fmt">%d 個核心</string>
+    <string name="create_vm_cpu_affinity_advanced">進階模式</string>
+    <string name="create_vm_cpu_affinity_simple_vcpus">vCPU 核心數</string>
+    <string name="create_vm_cpu_affinity_simple_empty">至少要勾選一顆宿主核心。</string>
+    <string name="create_vm_cpu_affinity_discard_title">離開進階模式？</string>
+    <string name="create_vm_cpu_affinity_discard_message">簡易模式只能讓一顆 vCPU 綁定專屬的一顆宿主核心。轉換後只會留下 %1$d 顆 vCPU（CPU %2$s）；多餘的核心、未綁定的 vCPU，以及手動的 capacity/cluster 設定都會被捨棄。</string>
+    <string name="create_vm_cpu_affinity_section_vcpus">vCPU 對應宿主核心</string>
+    <string name="create_vm_cpu_affinity_section_topology">客戶機拓撲</string>
+    <string name="create_vm_cpu_topology_auto">自動推導 Capacity 與 Cluster</string>
+    <string name="create_vm_cpu_topology_unset">不傳遞給客戶機</string>
+    <string name="create_vm_cpu_capacity">Capacity</string>
+    <string name="create_vm_cpu_capacity_group_fmt">vCPU %1$s：%2$d</string>
+    <string name="create_vm_cpu_capacity_hint">如 0=792,1=792,6=1024</string>
+    <string name="create_vm_cpu_cluster">Cluster</string>
+    <string name="create_vm_cpu_cluster_count_fmt">%d 個 Cluster</string>
+    <string name="create_vm_cpu_cluster_single">單一 Cluster（crosvm 預設）</string>
+    <string name="create_vm_cpu_clusters_hint">如 0-5;6（分號分隔）</string>
+    <string name="create_vm_cpu_affinity_big_only">僅大核心</string>
+    <string name="create_vm_cpu_affinity_host_overlap">核心 %s 與 GPU Worker cpuset 重疊</string>
+    <string name="create_vm_gpu_cgroup">GPU Worker Cpuset</string>
+    <string name="create_vm_gpu_cgroup_path_hint">cpuset 路徑（如 /dev/cpuset/gpuworker）</string>
+    <string name="create_vm_gpu_cgroup_cpus">cpuset 核心</string>
+    <string name="create_vm_gpu_cgroup_cpus_summary_fmt">核心：%s</string>
+    <string name="create_vm_gpu_cgroup_cpus_none">未選取</string>
+    <string name="create_vm_error_cpu_affinity_vcpu_oob">vCPU 索引超出範圍（須小於 CPU 數量）</string>
+    <string name="create_vm_error_cpu_affinity_host_oob">宿主核心 %d 在本機不存在</string>
+    <string name="create_vm_error_cpu_capacity_invalid">capacity 格式無效（應為 vcpu=1..1024,…）</string>
+    <string name="create_vm_error_cpu_clusters_overlap">cluster 中 vCPU %s 重複出現</string>
+    <string name="create_vm_error_gpu_cgroup_path">GPU cgroup 路徑必須為絕對路徑</string>
+    <string name="create_vm_error_gpu_cgroup_cpus_empty">請至少選取一個核心給 GPU Worker</string>
+    <string name="create_vm_error_gpu_rt_prio_needs_cpuset">即時排程需要先選取 cpuset 核心，否則會佔滿所有核心餓死其他程序。</string>
     <string name="create_vm_gpu_backend">渲染器</string>
     <string name="create_vm_gpu_backend_2d">2D (軟體)</string>
     <string name="create_vm_gpu_backend_virglrenderer">VirGL</string>
@@ -210,24 +265,71 @@
     <string name="create_vm_gpu_api_egl">EGL</string>
     <string name="create_vm_gpu_api_opengles">OpenGL ES</string>
     <string name="create_vm_gpu_api_angle">ANGLE</string>
-    <string name="create_vm_category_display">顯示</string>
-    <string name="create_vm_display_enabled">啟用顯示器</string>
-    <string name="create_vm_display_backend">顯示後端</string>
-    <string name="create_vm_display_backend_simplefb">SimpleFB</string>
-    <string name="create_vm_display_backend_virtio_gpu">Virtio-GPU</string>
     <string name="create_vm_gpu_api_vulkan_system">Vulkan(系統原生)</string>
     <string name="create_vm_gpu_api_vulkan_turnip">Vulkan(Turnip)</string>
+    <string name="create_vm_gpu_api_drm2kgsl">DRM to KGSL</string>
+    <string name="create_vm_gpu_mode_opengl">OpenGL</string>
+    <string name="create_vm_gpu_mode_vulkan">Vulkan</string>
+    <string name="create_vm_gpu_mode_native">Native Context</string>
+    <string name="create_vm_gpu_provider_drm2kgsl">DRM to KGSL</string>
+    <string name="create_vm_gpu_mode">圖形 API</string>
+    <string name="create_vm_gpu_provider">主機驅動</string>
     <string name="create_vm_gpu_api_vulkan_panvk">Vulkan(PanVK)</string>
+    <string name="create_vm_display_blit_provider">GPU 合成驅動</string>
+    <string name="create_vm_display_blit_off">關閉（CPU 拷貝）</string>
+    <string name="display_blit_system_missing_ext">系統 Vulkan 驅動缺少 GPU 合成所需的擴展：\n  %1$s\n原生顯示將回退到 CPU 拷貝。</string>
     <string name="create_vm_gpu_api_not_implemented">此 GPU 驅動尚未實現</string>
+    <string name="create_vm_gpu_udmabuf">udmabuf(guest-alloc)</string>
+    <string name="create_vm_gpu_rt_prio">即時排程</string>
+    <string name="create_vm_gpu_host_pool_mb">命令緩衝池大小 (MB)</string>
+    <string name="create_vm_gpu_drm2kgsl_pool_mb">命令緩衝池大小 (MB)</string>
+    <string name="create_vm_gpu_venus_pool_mb">命令緩衝池大小 (MB)</string>
+    <string name="create_vm_gpu_dynamic_vram">啟用動態顯存</string>
+    <string name="create_vm_gpu_vram_quota_mb">動態顯存配額 (MB)</string>
+    <string name="create_vm_gpu_vram_folio_threshold_kb">Host 配置大頁閾值 (KB)</string>
+    <string name="create_vm_gpu_pool_blob_max_kb">blob 分流閾值 (KB)</string>
+    <string name="create_vm_gpu_guest_pool_mb">顯存大小 (MB)</string>
+    <string name="create_vm_gpu_guest_prealloc_mb">Guest 啟動預分配 (MB)</string>
+    <string name="create_vm_gpu_guest_step_mb">Guest 動態步長 (MB)</string>
+    <string name="create_vm_gpu_guest_max_grants">Guest 最大 memparcel 數 (0 = 不限)</string>
+    <string name="create_vm_category_vram">顯存設定</string>
+    <string name="create_vm_category_screen_gpu0">Virtio-GPU</string>
+    <string name="create_vm_category_screen_simplefb">SimpleFB</string>
+    <string name="create_vm_category_renderer">渲染器</string>
+    <string name="create_vm_category_screen_display">顯示設定</string>
+    <string name="create_vm_category_screen_export">匯出設定</string>
+    <string name="create_vm_screen_gpu0">Virtio-GPU 螢幕</string>
+    <string name="create_vm_screen_simplefb">SimpleFB 螢幕</string>
+    <string name="create_vm_screen_enabled">啟用顯示設備</string>
     <string name="create_vm_display_width">顯示寬度</string>
     <string name="create_vm_display_height">顯示高度</string>
     <string name="create_vm_display_refresh_rate">重新整理率 (Hz)</string>
+    <string name="create_vm_display_poll_hz">輪詢率 (Hz)</string>
+    <string name="create_vm_display_resolution">解析度</string>
+    <string name="create_vm_display_size_fmt">%1$d x %2$d</string>
+    <string name="create_vm_display_rate_fmt">%1$d Hz</string>
+    <string name="create_vm_display_custom">自訂…</string>
+    <string name="create_vm_display_custom_size_title">自訂解析度</string>
     <string name="create_vm_display_dpi_h">水平DPI</string>
     <string name="create_vm_display_dpi_v">垂直DPI</string>
-    <string name="create_vm_category_vnc">VNC 伺服器</string>
-    <string name="create_vm_vnc_enabled">啟用 VNC</string>
-    <string name="create_vm_native_display_enabled">啟用原生顯示 (virtio-gpu)</string>
+    <string name="create_vm_screen_exporter">匯出端</string>
+    <string name="create_vm_screen_exporter_none">Sink（丟棄）</string>
+    <string name="create_vm_screen_exporter_native">原生顯示</string>
+    <string name="create_vm_screen_exporter_vnc">VNC</string>
+    <string name="create_vm_screen_transport">傳輸管線</string>
+    <string name="create_vm_screen_transport_cpu">CPU Copy</string>
+    <string name="create_vm_screen_transport_gpu">GPU Copy</string>
+    <string name="create_vm_screen_transport_zero">Zero Copy</string>
+    <string name="create_vm_screen_transport_gpu_hw">GPU Copy（硬體編碼）</string>
+    <string name="create_vm_option_not_implemented">未實作</string>
+    <string name="create_vm_screen_width_cpu_fallback">此寬度下傳輸管線將使用 CPU Copy</string>
+    <string name="create_vm_screen_width_cpu_fallback_desc">GPU Copy 會把畫格緩衝當成 linear dma-buf 匯入，而驅動只收 row pitch 對齊 64 bytes 的緩衝。SimpleFB 的 pitch 就是寬度 x 4、沒有任何補齊，所以 GPU Copy 需要 16 像素倍數的寬度 —— 例如 1408 而不是 1400。這個寬度本身沒有問題，只是它的畫格會走 CPU 複製。</string>
+    <string name="create_vm_screen_input_enabled">輸入裝置</string>
+    <string name="create_vm_error_vnc_port_conflict">兩個監聽端不能用同一個埠。</string>
     <string name="create_vm_vnc_host">主機地址</string>
+    <string name="create_vm_vnc_host_iface_fmt">%1$s (%2$s)</string>
+    <string name="create_vm_vnc_host_custom_title">自訂位址</string>
+    <string name="create_vm_error_invalid_host">位址不能包含空格、逗號、引號或方括號。</string>
     <string name="create_vm_vnc_port">埠</string>
     <string name="create_vm_vnc_password_auth">密碼認證</string>
     <string name="create_vm_vnc_password">密碼</string>
@@ -240,6 +342,7 @@
     <string name="create_vm_tab_storage">儲存</string>
     <string name="create_vm_tab_network">網路</string>
     <string name="create_vm_tab_graphics">圖形</string>
+    <string name="create_vm_tab_peripheral">外設</string>
     <string name="create_vm_network_label">網橋網路</string>
     <string name="create_vm_network_none">無</string>
     <string name="edit_vm_net_add">新增網路</string>
@@ -269,7 +372,6 @@
     <string name="edit_vm_disk_delete">移除磁碟</string>
     <string name="edit_vm_disk_browse">瀏覽</string>
     <string name="edit_vm_disk_browse_title">選擇磁碟來源</string>
-    <string name="edit_vm_disk_browse_file">選擇檔案</string>
     <string name="edit_vm_disk_browse_registered">選擇已註冊的磁碟</string>
     <string name="edit_vm_disk_browse_import_create">匯入或建立磁碟</string>
     <string name="edit_vm_disk_no_registered">未找到已註冊的磁碟。</string>
@@ -285,7 +387,12 @@
     <string name="edit_vm_shared_dir_cache">快取</string>
     <string name="edit_vm_shared_dir_writeback">回寫</string>
     <string name="edit_vm_shared_dir_dax">DAX</string>
+    <string name="edit_vm_shared_dir_type_unavailable">9P 尚未實作，目前只接了 virtio-fs。</string>
+    <string name="edit_vm_shared_dir_dax_unavailable">DAX 在 arm64 尚未實作，主機端沒有可供映射檔案的共享記憶體視窗。</string>
     <string name="edit_vm_shared_dir_posix_acl">POSIX ACL</string>
+    <string name="edit_vm_shared_dir_root_access">Root 存取</string>
+    <string name="edit_vm_shared_dir_root_access_summary">關閉：以 DroidVM App 的身分讀寫主機檔案。開啟：以 root 身分。</string>
+    <string name="edit_vm_shared_dir_root_access_no_identity">無法取得 App 身分。請先開啟一次 DroidVM，或為這個目錄開啟 Root 存取。</string>
     <string name="edit_vm_shared_dir_delete">移除共享目錄</string>
     <string name="edit_vm_shared_dir_browse">瀏覽</string>
 
@@ -301,7 +408,7 @@
     <string name="edit_vm_uefi_firmware">UEFI 韌體(留空 = 內建 EDK2)</string>
     <string name="edit_vm_uefi_firmware_builtin">內建 EDK2</string>
     <string name="edit_vm_uefi_firmware_browse_title">選擇 UEFI 韌體</string>
-    <string name="edit_vm_uefi_firmware_hint">自定義韌體僅對 QEMU 後端生效\ncrosvm 始終使用內建 EDK2\nUEFI 引導 Linux 適配中,尚不可用;如需引導 Linux,請選擇 Linux 核心引導方式</string>
+    <string name="edit_vm_uefi_firmware_hint">自定義韌體僅對 QEMU 後端生效\ncrosvm 始終使用內建 EDK2</string>
     <string name="edit_vm_uefi_vars">UEFI 變數(留空 = 內建 EDK2 變數)</string>
     <string name="edit_vm_uefi_vars_browse_title">選擇 UEFI 變數檔案</string>
     <string name="edit_vm_uefi_vars_too_large">對於 crosvm,pflash 鏡像大小不能超過 %1$d MiB</string>
@@ -376,8 +483,10 @@
     <string name="settings_vm_auto_console_summary">啟動虛擬機器時自動開啟控制台</string>
     <string name="settings_vm_clear_logs_before_start_title">啟動前清理日誌</string>
     <string name="settings_vm_clear_logs_before_start_summary">啟動虛擬機器前清理該虛擬機器的所有控制台日誌</string>
-    <string name="settings_vm_keep_compress_on_optimize_title">最佳化時保持壓縮</string>
-    <string name="settings_vm_keep_compress_on_optimize_summary">最佳化磁碟時保留其原有壓縮而非解壓縮；關閉則重寫為未壓縮</string>
+    <string name="settings_optimize_compression_title">最佳化壓縮格式</string>
+    <string name="settings_optimize_compression_ask">每次詢問</string>
+    <string name="disk_compress_none">未壓縮</string>
+    <string name="disk_optimize_compress_remember">記住此選擇</string>
     <string name="settings_cpu_affinity_title">CPU 親和性</string>
     <string name="settings_cpu_affinity_summary_fmt">磁碟操作執行於核心 %1$s</string>
     <string name="settings_cpu_affinity_all_cores">磁碟操作可使用全部核心</string>
@@ -397,6 +506,11 @@
     <string name="settings_category_update">更新</string>
     <string name="settings_auto_check_update_title">自動檢查更新</string>
     <string name="settings_auto_check_update_summary">啟動應用時自動檢查更新</string>
+    <string name="key_desc_tab">Tab 鍵</string>
+    <string name="key_desc_backspace">退格鍵</string>
+    <string name="key_desc_win">Windows 鍵</string>
+    <string name="key_desc_shift">Shift 鍵</string>
+    <string name="key_desc_enter">Enter 鍵</string>
     <string name="key_desc_ime">顯示鍵盤</string>
     <string name="settings_check_update_title">檢查更新</string>
     <string name="settings_check_update_summary">立即檢查新版本</string>
@@ -414,6 +528,71 @@
     <string name="vm_compressed_disk_title">壓縮的磁碟映像</string>
     <string name="vm_compressed_disk_message">crosvm 無法讀取壓縮的 qcow2 映像——啟動時會出現磁碟 I/O 錯誤且找不到分割槽表。要先轉換成非壓縮再啟動嗎？\n%1$s</string>
     <string name="vm_compressed_disk_convert">轉換並啟動</string>
+    <string name="vm_snapshot_disk_title">磁碟含內部快照</string>
+    <string name="vm_snapshot_disk_message">crosvm 不支援 qcow2 快照，也不會以可寫方式開啟含快照的磁碟，因此虛擬機器無法啟動。攤平會保留磁碟目前的狀態，並永久刪除這些快照。若要保留快照，請將磁碟改為唯讀掛載，或改用 QEMU 後端啟動。\n%1$s</string>
+    <string name="vm_snapshot_disk_flatten">刪除快照並啟動</string>
+    <string name="disk_snapshot_crosvm_warning_title">crosvm 無法使用快照</string>
+    <string name="disk_snapshot_crosvm_warning_message">此磁碟以可寫方式掛載於 crosvm 虛擬機器（%1$s），而 crosvm 不支援 qcow2 快照，磁碟含快照時該虛擬機器將無法啟動。在 crosvm 上請改用 backing file 增量映像。仍要建立快照嗎？</string>
+    <string name="disk_snapshot_crosvm_warning_create">仍要建立</string>
+    <string name="disk_tree_collapse">摺疊</string>
+    <string name="disk_tree_broken_parent">找不到 parent 映像</string>
+    <string name="disk_tree_current_attached">目前掛載</string>
+    <string name="disk_locked_title">磁碟為基底映像</string>
+    <string name="disk_locked_message">「%1$s」是 %2$d 個增量鏡像的基底，會變更它的操作已鎖定。請先合併、攤平或刪除其增量。</string>
+    <string name="edit_vm_disk_locked_readonly">此磁碟有增量鏡像，已改為唯讀掛載</string>
+    <string name="vm_locked_disk_title">基底映像以可寫方式掛載</string>
+    <string name="vm_locked_disk_message">以下磁碟是增量鏡像的基底，寫入會毀損其增量。改為唯讀掛載並啟動？\n%1$s</string>
+    <string name="vm_locked_disk_readonly_start">改唯讀並啟動</string>
+    <string name="disk_overlay_create_message">以「%1$s」為基底建立增量鏡像。存在增量期間，基底將鎖定為唯讀。</string>
+    <string name="disk_overlay_name_hint">檔名</string>
+    <string name="disk_overlay_advanced">進階…</string>
+    <string name="disk_overlay_depth_error">增量層數已達上限（%1$d）</string>
+    <string name="disk_overlay_vm_running">下列虛擬機器正在使用基底磁碟，請先關機：%1$s</string>
+    <string name="disk_overlay_vm_choice_title">基底磁碟使用中</string>
+    <string name="disk_overlay_vm_choice_message">下列虛擬機器磁碟以可寫方式掛載「%1$s」：%2$s\n\n建立增量後基底將鎖定。要讓這些虛擬機器改掛新增量（接續目前狀態），還是維持掛載基底但改為唯讀？</string>
+    <string name="disk_overlay_vm_switch">改掛增量</string>
+    <string name="disk_overlay_vm_readonly">改為唯讀</string>
+    <string name="disk_overlay_created">已建立增量鏡像：%1$s</string>
+    <string name="disk_chain_missing_parent">此映像的 backing 檔案遺失，在檔案復原前無法使用：\n%1$s</string>
+    <string name="disk_chain_import_title">偵測到 backing 映像</string>
+    <string name="disk_chain_import_message">此映像建立在尚未登記的 backing 映像之上。要一併登記嗎？%1$s</string>
+    <string name="disk_chain_import_confirm">全部登記</string>
+    <string name="disk_merge">合併回基底</string>
+    <string name="disk_flatten">攤平為獨立磁碟</string>
+    <string name="disk_reset">清空增量</string>
+    <string name="disk_reset_confirm">「%1$s」自建立以來寫入的所有變更都會被丟棄，它會重新變成「%2$s」的全新空增量。檔案路徑與大小不變，無法復原。</string>
+    <string name="disk_reset_has_children">「%1$s」下面還有增量，請先合併、攤平或刪除它們。</string>
+    <string name="disk_reset_encrypted">「%1$s」是加密磁碟，沒有金鑰無法重建。</string>
+    <string name="disk_reset_done">已清空增量：%1$s</string>
+    <string name="disk_reset_failed">清空增量失敗，原檔案已保留。</string>
+    <string name="disk_merge_not_overlay">此磁碟沒有已登記的基底映像。</string>
+    <string name="disk_merge_siblings">「%1$s」還有其他增量，合併會毀損它們。請先處理其他增量。</string>
+    <string name="disk_family_vm_running">此磁碟樹上有虛擬機器正在執行，請先關機：%1$s</string>
+    <string name="disk_merge_confirm">會將「%1$s」的變更寫回「%2$s」，完成後「%1$s」將被刪除，無法復原。</string>
+    <string name="disk_merge_confirm_children">\n\n其 %1$d 個增量將改基於「%2$s」。</string>
+    <string name="disk_merge_confirm_vms">\n\n下列虛擬機器將改掛「%2$s」：%1$s</string>
+    <string name="disk_flatten_confirm">會將基底資料複製進「%1$s」使其獨立（檔案將變大）；基底「%2$s」不受影響。</string>
+    <string name="disk_manage_branches">管理增量分支</string>
+    <string name="disk_branches_button">磁碟分支</string>
+    <string name="disk_delete_tree_title">刪除整樹</string>
+    <string name="disk_delete_tree_message">增量鏡像只存放與基底的差異，因此整棵樹會一併刪除。下列磁碟將被移除：%1$s</string>
+    <string name="disk_delete_subtree_message">增量鏡像只存放與基底的差異，因此其下游增量會一併刪除。下列磁碟將被移除：%1$s</string>
+    <string name="disk_manage_branches_close">關閉</string>
+    <string name="disk_manage_branches_back">返回</string>
+    <string name="disk_tree_empty">這棵磁碟樹已不存在。</string>
+    <string name="disk_tree_attached_by">掛載：%1$s</string>
+    <string name="disk_tree_in_use">%1$s（使用中）</string>
+    <string name="disk_tree_changes_header">\n\n其他虛擬機器的掛載會一併變動：%1$s</string>
+    <string name="disk_tree_change_move">虛擬機器「%1$s」磁碟 #%2$d：%3$s → %4$s</string>
+    <string name="disk_tree_change_move_readonly">虛擬機器「%1$s」磁碟 #%2$d：%3$s → %4$s（改為唯讀）</string>
+    <string name="disk_tree_change_clear">虛擬機器「%1$s」磁碟 #%2$d：%3$s 將從該虛擬機器移除</string>
+    <string name="disk_tree_change_readonly">虛擬機器「%1$s」磁碟 #%2$d：%3$s 改為唯讀</string>
+    <string name="disk_tree_change_rewritten">虛擬機器「%1$s」磁碟 #%2$d：%3$s 的內容將被改寫為 %4$s 的目前狀態</string>
+    <string name="disk_tree_pinned">下列虛擬機器尚未關機，其掛載的磁碟會受此操作影響，請先關機：%1$s</string>
+    <string name="edit_vm_disk_shared_readonly">此磁碟也被其他虛擬機器掛載，已改為唯讀掛載</string>
+    <string name="vm_shared_disk_title">磁碟與其他虛擬機器共用</string>
+    <string name="vm_shared_disk_message">下列磁碟也被其他虛擬機器掛載，兩邊同時寫入會毀損磁碟。要改為唯讀掛載並啟動嗎？\n%1$s</string>
+    <string name="disk_tree_not_registered">此磁碟未登記，無法使用分支功能</string>
     <string name="vm_compressed_disk_start_anyway">仍要啟動</string>
     <string name="vm_compressed_disk_start_countdown">仍要啟動 (%1$d)</string>
     <string name="field_copy">複製</string>
@@ -513,7 +692,27 @@
     <string name="disk_create_preview">預覽：%1$s</string>
     <string name="disk_create_preview_desc">磁碟檔案路徑預覽</string>
 
-    <string name="lxc_title">匯入 LXC 映像</string>
+    <string name="vm_create_mode_title">新增虛擬機器</string>
+    <string name="vm_create_linux">Linux VM</string>
+    <string name="vm_create_windows">Windows VM</string>
+    <string name="vm_create_import">從 .vmpkg 匯入</string>
+    <string name="vm_create_customize">自訂</string>
+    <string name="windows_vm_unavailable_title">Windows VM 尚不可用</string>
+    <string name="windows_vm_unavailable_message">此功能尚在實作中，目前不可用。請先使用 windows_build.ps1 腳本建置 Windows 映像。</string>
+    <string name="windows_vm_open_script">開啟建置腳本</string>
+    <string name="linux_vm_create_title">創建 Linux 虛擬機</string>
+    <string name="linux_vm_category_settings">設定</string>
+    <string name="linux_vm_disk_size_hint">磁碟大小</string>
+    <string name="linux_vm_root_password_hint">Root 密碼</string>
+    <string name="linux_vm_root_password_toggle">顯示或隱藏 Root 密碼</string>
+    <string name="linux_vm_network_hint">網路</string>
+    <string name="linux_vm_network_none">不使用網路</string>
+    <string name="linux_vm_network_unavailable">選取的網路已不存在。</string>
+    <string name="linux_vm_create_action">建立</string>
+    <string name="linux_vm_create_success">虛擬機器「%1$s」已建立。</string>
+    <string name="linux_vm_create_failed">Linux 虛擬機器建立流程未完成。</string>
+
+    <string name="lxc_title">下載發行版 LXC 映像</string>
     <string name="lxc_category_source">來源</string>
     <string name="lxc_meta_source_hint">後設資料來源</string>
     <string name="lxc_download_source_hint">下載來源</string>
@@ -536,6 +735,7 @@
     <string name="lxc_variant_hint">建置類別</string>
     <string name="lxc_build_hint">建置版本</string>
     <string name="lxc_category_output">輸出</string>
+    <string name="lxc_reset_password_hint">重設 root 密碼（選填）</string>
     <string name="lxc_info_size">下載大小：%1$s</string>
     <string name="lxc_info_path">遠端路徑：%1$s</string>
     <string name="lxc_fab_import">匯入</string>
@@ -545,9 +745,9 @@
     <string name="lxc_error_name_empty">檔名不能為空。</string>
     <string name="lxc_error_folder_empty">儲存資料夾不能為空。</string>
     <string name="lxc_error_custom_url">請輸入有效的映像站 URL。</string>
+    <string name="lxc_error_source_unavailable">所選後設資料來源目前無法使用。</string>
     <string name="lxc_no_images">未找到 disk-kvm 映像。</string>
-    <string name="lxc_default_download_source">cernet</string>
-    <string name="disk_add_lxc">匯入 LXC 映像</string>
+    <string name="disk_add_lxc">下載發行版 LXC 映像</string>
     <string name="disk_add_url">從 URL 下載</string>
     <string name="disk_add_images">下載發行版映像</string>
 
@@ -599,11 +799,13 @@
     <string name="disk_operation_running">執行中\u2026</string>
     <string name="disk_operation_success">操作完成。</string>
     <string name="disk_operation_failed">操作失敗（退出碼 %1$d）。</string>
+    <string name="disk_operation_finalizing">正在儲存磁碟相依關係…</string>
+    <string name="disk_operation_dependency_failed">磁碟資料操作已完成，但無法儲存 VM／磁碟相依關係；可保留來源映像時已予以保留。</string>
     <string name="disk_operation_bad_task">無效的任務引數。</string>
     <string name="disk_operation_cancel_title">取消操作？</string>
     <string name="disk_operation_cancel_message">磁碟操作仍在進行中，確定要取消嗎？</string>
 
-    <string name="disk_change_password">修改密碼</string>
+    <string name="disk_change_password">修改客體 Linux 密碼</string>
     <string name="change_password_title">修改密碼</string>
     <string name="change_password_disk_label">磁碟：%1$s</string>
     <string name="change_password_hint">新密碼</string>
@@ -612,6 +814,7 @@
     <string name="change_password_confirm">確認</string>
     <string name="change_password_error_empty">密碼不能為空</string>
     <string name="change_password_error_mismatch">兩次輸入的密碼不一致</string>
+    <string name="change_password_error_unsafe">僅支援字母、數字與以下符號：%1$s</string>
 
     <string name="agent_operation_title">代理操作</string>
     <string name="agent_operation_preparing">準備中\u2026</string>
@@ -619,6 +822,7 @@
     <string name="agent_operation_starting_vm">正在啟動臨時虛擬機器\u2026</string>
     <string name="agent_operation_running">執行中\u2026</string>
     <string name="agent_operation_success">操作完成。</string>
+    <string name="agent_operation_success_skipped">操作完成；有操作不適用，未進行變更。</string>
     <string name="agent_operation_failed">操作失敗（退出碼 %1$d）。</string>
     <string name="agent_operation_failed_detail">操作失敗：%1$s</string>
     <string name="agent_operation_prepare_failed">準備代理虛擬機器失敗。</string>
@@ -631,8 +835,26 @@
     <string name="agent_operation_log_creating_vm">正在守護程序上建立臨時虛擬機器\u2026\n</string>
     <string name="agent_operation_log_starting_vm">正在啟動臨時虛擬機器\u2026\n</string>
     <string name="agent_operation_log_running">臨時虛擬機器正在執行\u2026\n</string>
-    <string name="agent_operation_log_success">\n密碼修改成功。\n</string>
+    <string name="agent_operation_log_success">\n所有要求的操作皆已完成。\n</string>
+    <string name="agent_operation_log_skipped">\n操作未發生錯誤，但至少有一個操作未進行變更。\n</string>
     <string name="agent_operation_log_failed">\n操作失敗，請檢視上方日誌。\n</string>
+    <string name="agent_operation_logs">日誌</string>
+    <string name="agent_operation_stopping">正在停止救援虛擬機器…</string>
+    <string name="agent_operation_vm_stopped">救援虛擬機器已停止。</string>
+    <string name="agent_operation_control_failed">救援虛擬機器的控制通道已中斷。</string>
+    <string name="agent_operation_error_root_not_found">找不到支援的 Linux 根分割區。</string>
+    <string name="agent_operation_error_password">無法更新密碼資料庫。</string>
+    <string name="agent_operation_error_unmount">密碼已更新，但無法安全卸載目標檔案系統。</string>
+    <string name="agent_operation_error_script">救援腳本意外失敗。</string>
+    <string name="agent_operation_error_autogrow_disk">無法檢查目標磁碟。</string>
+    <string name="agent_operation_error_autogrow_in_use">最後一個分割區仍在掛載或使用中。</string>
+    <string name="agent_operation_error_partition_grow">無法擴充最後一個分割區。</string>
+    <string name="agent_operation_error_partition_reread">分割表已變更，但核心無法重新載入。</string>
+    <string name="agent_operation_error_filesystem_check">檔案系統檢查失敗，未執行檔案系統擴充。</string>
+    <string name="agent_operation_error_filesystem_mount">無法掛載檔案系統以進行擴充。</string>
+    <string name="agent_operation_error_filesystem_grow">分割區已擴大，但檔案系統擴充失敗。</string>
+    <string name="agent_operation_error_filesystem_unmount">檔案系統已擴充，但無法安全卸載。</string>
+    <string name="agent_operation_error_unknown">救援錯誤：%1$s</string>
 
     <string name="disk_resize">調整大小</string>
     <string name="disk_resize_title">調整磁碟大小</string>
@@ -645,6 +867,11 @@
     <string name="disk_resize_shrink_message">新大小小於當前大小，縮小磁碟可能會導致資料丟失。確定要繼續嗎？</string>
     <string name="disk_resize_error_invalid">請輸入有效的大小</string>
     <string name="disk_resize_error_info">無法獲取磁碟資訊</string>
+    <string name="disk_resize_autogrow">分區大小擴容</string>
+    <string name="disk_resize_autogrow_description">支援 ext2/3/4、Btrfs、F2FS</string>
+    <string name="disk_resize_error_no_action">請選擇不同大小，或啟用檔案系統擴充</string>
+    <string name="disk_resize_error_autogrow_shrink">縮小虛擬磁碟時不能同時擴充檔案系統</string>
+    <string name="disk_dependency_update_failed">無法更新 VM 磁碟相依關係；未刪除任何磁碟。</string>
 
     <string name="disk_set_format">轉換格式</string>
     <string name="disk_set_format_title">轉換磁碟格式</string>
@@ -831,6 +1058,9 @@
     <string name="vnc_display_reconnecting">正在重連 (%1$d/%2$d)…</string>
     <string name="vnc_display_reconnect_failed">重連失敗，已嘗試 %1$d 次</string>
     <string name="vnc_display_connect_failed">無法連線到 VNC 伺服器</string>
+    <string name="vnc_display_h264_active">H.264 串流</string>
+    <string name="vnc_display_h264_fallback">已退回 RFB</string>
+    <string name="vnc_display_h264_unavailable">H.264 不可用（此裝置無編碼器）</string>
     <string name="vnc_display_fullscreen">全屏</string>
 
     <string name="native_display_title">原生顯示器</string>
@@ -848,6 +1078,7 @@
     <string name="vnc_menu_input_mode_touch">觸控模式</string>
     <string name="vnc_menu_input_mode_mouse">滑鼠模式</string>
     <string name="vnc_menu_input_mode_tablet">手寫板模式</string>
+    <string name="display_input_disabled_hint">這個螢幕沒有啟用輸入裝置。請到 VM 的圖形設定開啟，然後重新啟動 VM。</string>
     <string name="usb_input_no_device">未找到USB鍵盤或滑鼠</string>
     <string name="usb_input_status">USB輸入：%1$d個鍵盤，%2$d個滑鼠</string>
     <string name="vnc_menu_rotate">旋轉螢幕</string>
@@ -863,15 +1094,15 @@
     <string name="vnc_op_scroll_down">滾輪下滾</string>
     <string name="vnc_menu_reconnect">重新連線</string>
     <string name="vnc_menu_external_app">使用外部程式連線</string>
-    <string name="vnc_menu_view_url">檢視連線地址</string>
+    <string name="vnc_menu_project_external">投射到外部顯示器</string>
     <string name="vnc_menu_no_vnc_app">未找到可處理 VNC 連線的應用</string>
-    <string name="vnc_menu_url_copied">已複製到剪貼簿</string>
     <string name="vnc_presentation_title">觸控板</string>
     <string name="vnc_presentation_title_with_name">%1$s - 觸控板</string>
 
     <string name="vnc_external_title">使用外部程式連線</string>
     <string name="vnc_external_message">即將使用外部程式連線</string>
-    <string name="vnc_external_hint_target">目標</string>
+    <string name="vnc_external_hint_local">連線網址（本機）</string>
+    <string name="vnc_external_hint_remote">連線網址（其他裝置）</string>
     <string name="vnc_external_hint_password">密碼</string>
     <string name="vnc_external_cancel">取消</string>
     <string name="vnc_external_connect">連線</string>
@@ -904,6 +1135,12 @@
     <string name="logs_share">分享</string>
     <string name="logs_share_title">分享日誌</string>
     <string name="logs_share_failed">分享日誌失敗：%1$s</string>
+    <string name="logs_filter">過濾</string>
+    <string name="logs_filter_title">過濾日誌</string>
+    <string name="logs_filter_message">只顯示包含這段文字的行。留空則顯示全部。</string>
+    <string name="logs_filter_hint">要比對的文字</string>
+    <string name="logs_filter_show_all">顯示全部</string>
+    <string name="logs_title_filtered">%1$s - %2$s（過濾：%3$s）</string>
     <string name="logs_not_found_title">守護程式日誌不可用</string>
     <string name="logs_not_found_message">找不到守護程式的日誌文件，守護程式是否正在執行？</string>
 
@@ -950,6 +1187,14 @@
     <string name="hugepage_stat_pool_size">池大小: %1$d (%2$s)</string>
     <string name="hugepage_stat_pool_size_cma">池大小:%1$d/%2$d(%3$s / %4$s)</string>
     <string name="hugepage_stats_unavailable">模組未載入</string>
+    <string name="hugepage_advanced">進階設定</string>
+    <string name="hugepage_adv_hint">右側為模組目前的讀回值;點一列可編輯 settings.prop 的設定。</string>
+    <string name="hugepage_adv_unavailable">不可用</string>
+    <string name="hugepage_adv_unset">(default)</string>
+    <string name="hugepage_adv_warn_below_default">低於本機預設值 %1$d，系統可能不穩定</string>
+    <string name="hugepage_adv_invalid">數值無效</string>
+    <string name="hugepage_adv_saved">已儲存</string>
+    <string name="hugepage_adv_save_failed">儲存失敗</string>
     <string name="hugepage_manual_refill">獲取大頁</string>
     <string name="hugepage_refill_triggered">獲取已觸發</string>
     <string name="hugepage_save_pool_size">儲存</string>
@@ -1072,7 +1317,9 @@
     <string name="log_helper_huge_page_fault_message">虛擬機器 %1$s 遇到了大頁記憶體不足的情況。\n請嘗試修改記憶體大小，或者使用預分配模組。\n開啟瀏覽器查看更多資訊。</string>
     <string name="log_helper_no_restrict_pool_url" formatted="false">https://github.com/Droid-VM/DroidVM/wiki/%E9%97%AE%E9%A2%98%EF%BC%9A%E8%99%9A%E6%8B%9F%E6%9C%BA%E7%9A%84%E7%B3%BB%E7%BB%9F%E4%B8%8D%E6%94%AF%E6%8C%81SWIOTLB-Restrict-DMA-Pool</string>
     <string name="log_helper_no_restrict_pool_title">虛擬機器核心功能缺失</string>
-    <string name="log_helper_no_restrict_pool_message">虛擬機器 %1$s 的核心不支援 Restricted DMA Pool。\n請更換核心或使用 DroidVM 內建核心。\n開啟瀏覽器查看更多資訊。</string>
+    <string name="log_helper_no_restrict_pool_devices">%1$s 的以下裝置存取了保護區域記憶體：</string>
+    <string name="log_helper_no_restrict_pool_message"><![CDATA[可能是虛擬機器的核心不支援 Restricted DMA Pool，請更換核心或使用 DroidVM 內建核心。<br><br>也可能是這些裝置的驅動尚未移植，請安裝以下 <a href="https://github.com/Droid-VM/gunyah-guest-drivers-windows">Windows 驅動</a> 或 <a href="https://github.com/Droid-VM/droidvm-guest-additions">Linux 驅動</a>。]]></string>
+    <string name="log_helper_open_log">開啟 Log</string>
     <string name="log_helper_unsupported_gunyah_title">不支援的 Gunyah 版本</string>
     <string name="log_helper_unsupported_gunyah_message">您的裝置上的 Gunyah 版本過舊（如驍龍 8 Gen 2），請嘗試更新系統或更換較新的裝置。</string>
     <string name="log_helper_unsupported_sandbox_title">沙箱模式不支援</string>
@@ -1138,4 +1385,155 @@
     <string name="vmpkg_import_done">匯入完成</string>
     <string name="vmpkg_import_failed">匯入失敗：%1$s</string>
     <string name="vmpkg_import_invalid">不是有效的 vmpkg：%1$s</string>
+    <string name="kernel_module_title">內核模組</string>
+    <string name="kernel_module_subtitle">載入主機內核模組、設定隨 daemon 自動載入</string>
+    <string name="kernel_module_loading">載入中…</string>
+    <string name="kernel_module_none">沒有可用模組</string>
+    <string name="kernel_module_loaded">已載入</string>
+    <string name="kernel_module_unloaded">未載入</string>
+    <string name="kernel_module_load">載入</string>
+    <string name="kernel_module_unload">卸載</string>
+    <string name="kernel_module_autostart">自動載入</string>
+    <string name="kernel_module_autostart_needs_load">請先手動載入一次 — 只有在本機成功載入過的模組才能開啟自動載入</string>
+    <string name="kernel_module_working">執行中…</string>
+    <string name="kernel_module_ok">完成</string>
+    <string name="kernel_module_fail">失敗</string>
+    <string name="kernel_module_kmi">KMI: %1$s</string>
+    <string name="kernel_module_why">為什麼需要？</string>
+    <string name="kernel_module_manage">管理</string>
+    <string name="setup_kmod_desc"><![CDATA[DroidVM 需要這些主機內核模組，缺少它們 VM 可能無法開機或無法使用 GPU 加速。模組仍在開發中，無法保證穩定性，可能會導致手機重啟：請先嘗試載入，確認沒問題後再開啟隨 daemon 自動載入。若遇到任何問題，請<a href="https://github.com/Droid-VM/DroidVM/issues">提交 Issue</a>。每張卡片都有各模組的用途說明。]]></string>
+    <string name="vm_hugepage_short_title">大頁保留區不足</string>
+    <string name="vm_hugepage_short_message">大頁保留區目前剩 %1$d MB，這台虛擬機大約需要 %2$d MB，差 %3$d MB。\n\n上一台虛擬機結束後，保留區通常兩秒左右就會補回來。現在就開機的話，Hypervisor 只能改拿一般記憶體，而那必須先從 CMA 搬出來；在記憶體吃緊的手機上，這一步曾造成整台停住數分鐘、甚至直接重開機。\n\n通常等一下再開就好了。</string>
+    <string name="vm_hugepage_short_settings">前往大頁設定</string>
+    <string name="vm_hugepage_short_start_anyway">仍要啟動</string>
+
+    <string name="create_vm_category_peripheral">外設</string>
+    <string name="edit_vm_peripheral_empty">沒有外設</string>
+    <string name="edit_vm_peripheral_add">新增外設</string>
+    <string name="edit_vm_peripheral_add_title">外設類型</string>
+    <string name="edit_vm_peripheral_type">外設類型</string>
+    <string name="edit_vm_peripheral_delete">移除外設</string>
+    <string name="edit_vm_peripheral_host_device">主機裝置</string>
+    <string name="edit_vm_peripheral_host_default">跟隨系統</string>
+    <string name="edit_vm_peripheral_host_missing">目前未連接，VM 會改用系統預設路由。</string>
+    <string name="edit_vm_peripheral_host_missing_item">%1$s（未連接）</string>
+    <string name="edit_vm_peripheral_pick_output">播放到</string>
+    <string name="edit_vm_peripheral_pick_input">錄音來源</string>
+    <string name="edit_vm_peripheral_duplicate_host">有兩個同類型的外設指向同一個主機裝置。</string>
+    <string name="audio_device_builtin_speaker">喇叭</string>
+    <string name="audio_device_builtin_earpiece">聽筒</string>
+    <string name="audio_device_builtin_mic">內建麥克風</string>
+    <string name="audio_device_wired_headset">有線耳麥</string>
+    <string name="audio_device_wired_headphones">有線耳機</string>
+    <string name="audio_device_bluetooth">藍牙音訊</string>
+    <string name="audio_device_bluetooth_sco">藍牙通話音訊</string>
+    <string name="audio_device_usb">USB 音訊</string>
+    <string name="audio_device_hdmi">HDMI</string>
+    <string name="audio_device_line">線路輸出</string>
+    <string name="edit_vm_peripheral_type_virtio_camera">virtio-media 相機</string>
+    <string name="camera_permission_title">允許使用相機？</string>
+    <string name="camera_permission_message">相機外設會把這台手機的其中一個相機交給客體。Android 只在本應用程式持有權限時才允許開啟相機，沒有權限時這個裝置雖然會列出，卻永遠無法啟動。</string>
+    <string name="camera_permission_allow">允許</string>
+    <string name="camera_permission_cancel">取消</string>
+    <string name="camera_permission_declined">未授予相機權限，因此沒有新增相機裝置。</string>
+    <string name="host_camera_default">主機預設</string>
+    <string name="host_camera_front">前置相機（%1$s）</string>
+    <string name="host_camera_back">後置相機（%1$s）</string>
+    <string name="host_camera_external">外接相機（%1$s）</string>
+    <string name="host_camera_unknown">相機 %1$s</string>
+    <string name="host_camera_none">此主機沒有相機</string>
+    <string name="create_vm_category_vpu">視訊加速 (VPU)</string>
+    <string name="create_vm_vpu_enabled">掛載硬體視訊編碼器與解碼器</string>
+    <string name="create_vm_vpu_host_pool_mb">主機緩衝池大小 (MB)</string>
+    <string name="create_vm_vpu_guest_pool_mb">客戶機緩衝池大小 (MB)</string>
+    <string name="create_vm_vpu_note">功能待實現：這些設定會隨 VM 一起儲存，但在功能完成前不會掛載任何視訊裝置。</string>
+    <string name="edit_vm_peripheral_camera_missing">這台手機沒有這個相機，該裝置不會啟動。</string>
+    <string name="edit_vm_peripheral_host_camera">主機相機</string>
+    <string name="peripheral_fgs_title">外設使用中</string>
+    <string name="peripheral_fgs_text">執行中的 VM 使用了需要 DroidVM 保持在前景的裝置。</string>
+    <string name="notif_channel_peripheral_foreground">虛擬機器外設</string>
+    <string name="notif_channel_peripheral_foreground_desc">當 VM 使用相機等 Android 只允許在前景使用的裝置時顯示。</string>
+    <string name="record_audio_permission_title">允許使用麥克風？</string>
+    <string name="record_audio_permission_message">這台 VM 加了麥克風，執行期間會錄取手機的麥克風。允許麥克風權限，客體才聽得到。</string>
+    <string name="record_audio_permission_allow">繼續</string>
+    <string name="record_audio_permission_skip">暫時不要</string>
+
+    <string name="edit_vm_peripheral_type_virtio_sound">VirtIO Sound</string>
+    <string name="edit_vm_peripheral_type_intel_hda">Intel HDA</string>
+    <string name="edit_vm_peripheral_unavailable">功能待實現，VM 啟動時會略過這個裝置。</string>
+    <string name="edit_vm_sound_endpoint_add">新增設備</string>
+    <string name="edit_vm_sound_endpoint_remove">移除端點</string>
+    <string name="edit_vm_sound_purpose_usage">用途</string>
+    <string name="edit_vm_sound_purpose_content">內容類型</string>
+    <string name="edit_vm_sound_purpose_preset">麥克風用途</string>
+    <string name="edit_vm_sound_purpose_unset">跟隨預設</string>
+    <string name="edit_vm_sound_usage_media">媒體</string>
+    <string name="edit_vm_sound_usage_voice_communication">通話</string>
+    <string name="edit_vm_sound_usage_voice_communication_signalling">信令</string>
+    <string name="edit_vm_sound_usage_game">遊戲</string>
+    <string name="edit_vm_sound_usage_alarm">鬧鐘</string>
+    <string name="edit_vm_sound_usage_notification">通知</string>
+    <string name="edit_vm_sound_usage_notification_ringtone">鈴聲</string>
+    <string name="edit_vm_sound_usage_notification_event">事件</string>
+    <string name="edit_vm_sound_usage_assistant">助理</string>
+    <string name="edit_vm_sound_usage_assistance_accessibility">無障礙</string>
+    <string name="edit_vm_sound_usage_assistance_navigation_guidance">導航</string>
+    <string name="edit_vm_sound_usage_assistance_sonification">介面</string>
+    <string name="edit_vm_sound_content_speech">語音</string>
+    <string name="edit_vm_sound_content_music">音樂</string>
+    <string name="edit_vm_sound_content_movie">影片</string>
+    <string name="edit_vm_sound_content_sonification">音效</string>
+    <string name="edit_vm_sound_preset_generic">一般</string>
+    <string name="edit_vm_sound_preset_camcorder">錄影</string>
+    <string name="edit_vm_sound_preset_voice_recognition">識別</string>
+    <string name="edit_vm_sound_preset_voice_communication">通訊</string>
+    <string name="edit_vm_sound_preset_unprocessed">未處理</string>
+    <string name="edit_vm_sound_preset_voice_performance">演出</string>
+    <string name="edit_vm_sound_mode_speaker">喇叭</string>
+    <string name="edit_vm_sound_mode_microphone">麥克風</string>
+    <string name="edit_vm_sound_buffer">緩衝</string>
+    <string name="edit_vm_sound_buffer_low">低延遲（2 緩衝）</string>
+    <string name="edit_vm_sound_buffer_normal">平衡檔（6 緩衝）</string>
+    <string name="edit_vm_sound_buffer_safe">高音質（12 緩衝）</string>
+    <string name="edit_vm_sound_underrun">緩衝區欠載</string>
+    <string name="edit_vm_sound_underrun_silence">靜音</string>
+    <string name="edit_vm_sound_underrun_repeat">重複</string>
+    <string name="edit_vm_sound_underrun_wsola">WSOLA</string>
+    <string name="edit_vm_sound_underrun_lpc">LPC</string>
+    <string name="edit_vm_peripheral_host_output">輸出</string>
+    <string name="edit_vm_peripheral_host_input">輸入</string>
+    <string name="vm_info_console_stdout_short">stdout</string>
+    <string name="vm_info_console_stderr_short">stderr</string>
+    <string name="create_vm_category_serial">序列埠</string>
+    <string name="edit_vm_serial_empty">沒有序列埠</string>
+    <string name="edit_vm_serial_add">新增序列埠</string>
+    <string name="edit_vm_serial_add_title">序列埠硬體</string>
+    <string name="edit_vm_serial_delete">移除序列埠</string>
+    <string name="edit_vm_serial_hw_serial">Serial</string>
+    <string name="edit_vm_serial_hw_sbsa">SBSA</string>
+    <string name="edit_vm_serial_hw_virtio_console">Virtio Console</string>
+    <string name="edit_vm_serial_backend">後端</string>
+    <string name="edit_vm_serial_backend_sink">Sink（丟棄）</string>
+    <string name="edit_vm_serial_backend_app_console">APP 控制台</string>
+    <string name="edit_vm_serial_backend_file">檔案</string>
+    <string name="edit_vm_serial_backend_unix">Unix socket（資料報）</string>
+    <string name="edit_vm_serial_backend_unix_stream">Unix socket（串流）</string>
+    <string name="edit_vm_serial_backend_pty">PTY</string>
+    <string name="edit_vm_serial_backend_stdout">標準輸出</string>
+    <string name="edit_vm_serial_backend_syslog">Syslog</string>
+    <string name="edit_vm_serial_backend_usb_acm">USB Gadget ACM</string>
+    <string name="edit_vm_serial_path">路徑</string>
+    <string name="edit_vm_serial_path_pty_hint">選填：pty 的符號連結</string>
+    <string name="edit_vm_serial_path_required">這個序列埠後端需要填寫路徑。</string>
+    <string name="edit_vm_serial_console">作為 Guest 控制台（SPCR）</string>
+    <string name="edit_vm_serial_slot_duplicate">兩個序列埠指向同一個 USB 槽位。</string>
+    <string name="edit_vm_serial_usb_slot">USB 槽位</string>
+    <string name="edit_vm_serial_usb_slot_item">槽位 %1$d</string>
+    <string name="settings_usb_acm_ports_title">USB 序列埠（ACM）</string>
+    <string name="settings_usb_acm_ports_summary">%1$d 個槽位</string>
+    <string name="settings_usb_acm_enable">啟用 USB 序列埠</string>
+    <string name="settings_usb_acm_reenum_note">開啟或關閉時，手機的 USB 連線會短暫重新連線。</string>
+    <string name="settings_usb_acm_disabled">已停用</string>
+    <string name="edit_vm_serial_usb_disabled_hint">USB 序列埠（ACM）未啟用；請先到設定啟用，否則此 VM 無法開機。</string>
+    <string name="edit_vm_serial_full">這種硬體的埠都已新增。</string>
 </resources>
diff --git a/app/src/main/res/values/attrs.xml b/app/src/main/res/values/attrs.xml
index 48e7231a4..fa71ee631 100644
--- a/app/src/main/res/values/attrs.xml
+++ b/app/src/main/res/values/attrs.xml
@@ -42,6 +42,9 @@
         <attr name="android:hint" format="string|reference" />
         <attr name="android:text" format="string|reference" />
         <attr name="android:icon" format="reference" />
+        <!-- Long-press a card to drag it into a new position. Off unless the order means
+             something to the user (disk order = /dev/vdX, NIC order = eth index). -->
+        <attr name="reorderable" format="boolean" />
     </declare-styleable>
 
     <declare-styleable name="TextRowWidget">
diff --git a/app/src/main/res/values/strings.xml b/app/src/main/res/values/strings.xml
index 132774d46..c4b82804b 100644
--- a/app/src/main/res/values/strings.xml
+++ b/app/src/main/res/values/strings.xml
@@ -56,6 +56,17 @@
     <string name="setup_extract_uptodate">\u2705 Prebuilt files are up to date.</string>
     <string name="setup_extract_fail">\u274C Failed to extract prebuilt files. Please retry.</string>
 
+    <string name="setup_network_title">Create a Network</string>
+    <string name="setup_network_desc">A VM has no connectivity until a network is attached to it. Pick one to create now; you can add or change networks later in the Networks tab.</string>
+    <string name="setup_network_opt_wifi">Wi-Fi pseudo-bridge</string>
+    <string name="setup_network_opt_linux">Linux bridge (IPv4 NAT + DHCP)</string>
+    <string name="setup_network_opt_gvisor">gVisor bridge (IPv4 + IPv6 NAT + DHCP)</string>
+    <string name="setup_network_info_wifi">Name: %1$s\nUplink: Wi-Fi, layer 2 pseudo-bridge\nAddresses: from your Wi-Fi router\nNAT: not used\nDHCP: served by your router</string>
+    <string name="setup_network_info_linux">Name: %1$s\nUplink: routed through the host\nIPv4: %2$s\nIPv6: %3$s (static, host side only)\nNAT: IPv4 enabled\nDHCP: IPv4 enabled</string>
+    <string name="setup_network_info_gvisor">Name: %1$s\nUplink: routed through the host, in userspace\nIPv4: %2$s\nIPv6: %3$s\nNAT: IPv4 and IPv6 enabled\nDHCP: IPv4, IPv6 and SLAAC enabled</string>
+    <string name="setup_network_no_subnet">No free subnet left</string>
+    <string name="setup_network_created">Network %1$s created</string>
+
     <string name="setup_done_title">Setup Complete</string>
     <string name="setup_done_desc">All checks and prepares passed.\nYou are ready to use DroidVM.</string>
 
@@ -104,6 +115,8 @@
     <string name="vm_edit">Edit</string>
     <string name="vm_delete">Delete</string>
     <string name="vm_delete_confirm">Are you sure you want to delete this virtual machine?</string>
+    <string name="vm_delete_writable_disks">Also delete attached writable disk files (%1$d)</string>
+    <string name="vm_delete_disks_result">Deleted %1$d disk file(s); kept %2$d attached by other VMs, %3$d that are bases of overlays, %4$d that could not be deleted.</string>
     <string name="vm_state_stopped">Stopped</string>
     <string name="vm_state_starting">Starting</string>
     <string name="vm_state_running">Running</string>
@@ -139,9 +152,12 @@
     <string name="vm_info_state_active">Process active</string>
     <string name="vm_info_console_not_found">No any console found</string>
     <string name="vm_info_console_text_select">Text Console %1$s</string>
+    <!-- Backend process stdio, not a guest console: "CrosVM stdio" / "QEMU stdio". -->
+    <string name="vm_info_console_stdio_select" translatable="false">%1$s stdio</string>
     <string name="vm_info_console_vnc_select">VNC Console</string>
     <string name="vm_info_console_vnc_ext_select">VNC on external Display</string>
     <string name="vm_info_console_native_select">Native Display</string>
+    <string name="vm_info_console_screen_select">%1$s \u2013 %2$s</string>
 
     <string name="vm_info_logs">Logs</string>
     <string name="vm_info_logs_no_logs">No logs available.</string>
@@ -173,10 +189,13 @@
     <string name="create_vm_error_name_duplicate">A VM with this name already exists</string>
     <string name="create_vm_error_save">Error while saving config</string>
     <string name="create_vm_error_invalid_number">Invalid number</string>
+    <string name="create_vm_error_invalid_environment_variable">Environment variables must use KEY=VALUE format</string>
+    <string name="create_vm_error_gpu_guest_prealloc_exceeds_pool">Guest preallocation cannot exceed the guest pool size</string>
+    <string name="create_vm_error_gpu_guest_dynamic_requires_room">Guest preallocation must be smaller than the guest pool when the step is enabled</string>
+    <string name="create_vm_error_gpu_guest_step_invalid">Guest step must be 0 or a power of two of at least 2 MB</string>
     <string name="create_vm_error_hypervisor_not_supported">Selected hypervisor is not supported by selected backend</string>
     <string name="create_vm_error_path_invalid">Invalid absolute path</string>
     <string name="create_vm_error_native_display_only_crosvm">Native display only applies to CrosVM backend.</string>
-    <string name="create_vm_error_native_display_vnc_cannot_enabled">Native display and VNC cannot be enabled at the same time.</string>
     <string name="create_vm_category_kernel">Linux Kernel</string>
     <string name="create_vm_kernel_hint">Kernel</string>
     <string name="create_vm_initrd_hint">Initrd</string>
@@ -196,13 +215,51 @@
     <string name="create_vm_prepare_lend_mthp_disabled">Disabled</string>
     <string name="create_vm_prepare_lend_mthp_single">Single (whole region)</string>
     <string name="create_vm_prepare_lend_mthp_chunked">Chunked (&#8804;256MiB)</string>
-    <string name="create_vm_protected_normal">Normal</string>
+    <string name="create_vm_protected_normal">Unprotected</string>
     <string name="create_vm_protected_protected">Protected</string>
     <string name="create_vm_protected_without_firmware">Protected without firmware</string>
+    <string name="create_vm_protected_pseudo_unprotected">Pseudo Unprotected</string>
     <string name="create_vm_category_extra_options">Extra Options</string>
     <string name="create_vm_extra_option_hint">Extra arguments (one per line)</string>
-    <string name="create_vm_category_gpu">Graphics Accelerator</string>
-    <string name="create_vm_gpu_enabled">Enable GPU</string>
+    <string name="create_vm_environment_variables_hint">Environment variables (KEY=VALUE, one per line)</string>
+
+    <string name="create_vm_category_gpu_cgroup">GPU Worker Cpuset</string>
+    <string name="create_vm_cpu_affinity_title">vCPU Affinity</string>
+    <string name="create_vm_cpu_affinity">Bind vCPUs to host cores</string>
+    <string name="create_vm_cpu_affinity_vcpu_fmt">vCPU %d</string>
+    <string name="create_vm_cpu_affinity_vcpu_range_fmt">vCPU %s</string>
+    <string name="create_vm_cpu_affinity_unbound">Not bound</string>
+    <string name="create_vm_cpu_affinity_cores_fmt">%d cores</string>
+    <string name="create_vm_cpu_affinity_advanced">Advanced mode</string>
+    <string name="create_vm_cpu_affinity_simple_vcpus">vCPU cores</string>
+    <string name="create_vm_cpu_affinity_simple_empty">Check at least one host core.</string>
+    <string name="create_vm_cpu_affinity_discard_title">Leave advanced mode?</string>
+    <string name="create_vm_cpu_affinity_discard_message">Simple mode can only bind one vCPU to one host core of its own. What survives is %1$d vCPU on CPU %2$s; extra cores, unbound vCPUs and manual capacity/cluster values are discarded.</string>
+    <string name="create_vm_cpu_affinity_section_vcpus">vCPU to host cores</string>
+    <string name="create_vm_cpu_affinity_section_topology">Guest topology</string>
+    <string name="create_vm_cpu_topology_auto">Auto-derive Capacity &amp; Cluster</string>
+    <string name="create_vm_cpu_topology_unset">Not passed to the guest</string>
+    <string name="create_vm_cpu_capacity">Capacity</string>
+    <string name="create_vm_cpu_capacity_group_fmt">vCPU %1$s: %2$d</string>
+    <string name="create_vm_cpu_capacity_hint">e.g. 0=792,1=792,6=1024</string>
+    <string name="create_vm_cpu_cluster">Clusters</string>
+    <string name="create_vm_cpu_cluster_count_fmt">%d clusters</string>
+    <string name="create_vm_cpu_cluster_single">Single cluster (crosvm default)</string>
+    <string name="create_vm_cpu_clusters_hint">e.g. 0-5;6  (semicolon-separated)</string>
+    <string name="create_vm_cpu_affinity_big_only">Big cores</string>
+    <string name="create_vm_cpu_affinity_host_overlap">Core %s is shared with the GPU worker cpuset</string>
+    <string name="create_vm_gpu_cgroup">GPU Worker Cpuset</string>
+    <string name="create_vm_gpu_cgroup_path_hint">Cpuset path (e.g. /dev/cpuset/gpuworker)</string>
+    <string name="create_vm_gpu_cgroup_cpus">Cpuset cores</string>
+    <string name="create_vm_gpu_cgroup_cpus_summary_fmt">Cores: %s</string>
+    <string name="create_vm_gpu_cgroup_cpus_none">None selected</string>
+    <string name="create_vm_error_cpu_affinity_vcpu_oob">vCPU index out of range (must be &lt; CPU count)</string>
+    <string name="create_vm_error_cpu_affinity_host_oob">Host core %d not found on this device</string>
+    <string name="create_vm_error_cpu_capacity_invalid">Invalid capacity (expected vcpu=1..1024,&#8230;)</string>
+    <string name="create_vm_error_cpu_clusters_overlap">Cluster overlap at vCPU %s</string>
+    <string name="create_vm_error_gpu_cgroup_path">GPU cgroup path must be absolute</string>
+    <string name="create_vm_error_gpu_cgroup_cpus_empty">Select at least one core for the GPU worker</string>
+    <string name="create_vm_error_gpu_rt_prio_needs_cpuset">Real-time scheduling needs cpuset cores: unconfined, it can starve the phone.</string>
     <string name="create_vm_gpu_backend">Renderer</string>
     <string name="create_vm_gpu_backend_2d">2D (Software)</string>
     <string name="create_vm_gpu_backend_virglrenderer">VirGL</string>
@@ -212,24 +269,71 @@
     <string name="create_vm_gpu_api_egl">EGL</string>
     <string name="create_vm_gpu_api_opengles">OpenGL ES</string>
     <string name="create_vm_gpu_api_angle">ANGLE</string>
-    <string name="create_vm_category_display">Display</string>
-    <string name="create_vm_display_enabled">Enable Display</string>
-    <string name="create_vm_display_backend">Display Backend</string>
-    <string name="create_vm_display_backend_simplefb">SimpleFB</string>
-    <string name="create_vm_display_backend_virtio_gpu">Virtio-GPU</string>
     <string name="create_vm_gpu_api_vulkan_system">Vulkan (System)</string>
     <string name="create_vm_gpu_api_vulkan_turnip">Vulkan (Turnip)</string>
+    <string name="create_vm_gpu_api_drm2kgsl">DRM to KGSL</string>
+    <string name="create_vm_gpu_mode_opengl">OpenGL</string>
+    <string name="create_vm_gpu_mode_vulkan">Vulkan</string>
+    <string name="create_vm_gpu_mode_native">Native Context</string>
+    <string name="create_vm_gpu_provider_drm2kgsl">DRM to KGSL</string>
+    <string name="create_vm_gpu_mode">Graphics API</string>
+    <string name="create_vm_gpu_provider">Host driver</string>
     <string name="create_vm_gpu_api_vulkan_panvk">Vulkan (PanVK)</string>
+    <string name="create_vm_display_blit_provider">GPU-blit provider</string>
+    <string name="create_vm_display_blit_off">Off (CPU copy)</string>
+    <string name="display_blit_system_missing_ext">The system Vulkan driver lacks extensions the GPU blit needs:\n  %1$s\nThe native display will fall back to a CPU copy.</string>
     <string name="create_vm_gpu_api_not_implemented">This GPU driver is not implemented yet</string>
+    <string name="create_vm_gpu_udmabuf">udmabuf (guest-alloc)</string>
+    <string name="create_vm_gpu_rt_prio">Real-time scheduling</string>
+    <string name="create_vm_gpu_host_pool_mb">Command buffer pool size (MB)</string>
+    <string name="create_vm_gpu_drm2kgsl_pool_mb">Command buffer pool size (MB)</string>
+    <string name="create_vm_gpu_venus_pool_mb">Command buffer pool size (MB)</string>
+    <string name="create_vm_gpu_dynamic_vram">Dynamic vram</string>
+    <string name="create_vm_gpu_vram_quota_mb">Dynamic VRAM quota (MB)</string>
+    <string name="create_vm_gpu_vram_folio_threshold_kb">Host allocation hugepage threshold (KB)</string>
+    <string name="create_vm_gpu_pool_blob_max_kb">Blob routing threshold (KB)</string>
+    <string name="create_vm_gpu_guest_pool_mb">VRAM size (MB)</string>
+    <string name="create_vm_gpu_guest_prealloc_mb">Guest preallocation (MB)</string>
+    <string name="create_vm_gpu_guest_step_mb">Guest allocation step (MB)</string>
+    <string name="create_vm_gpu_guest_max_grants">Guest max grants (0 = unlimited)</string>
+    <string name="create_vm_category_vram">VRAM</string>
+    <string name="create_vm_category_screen_gpu0">Virtio-GPU</string>
+    <string name="create_vm_category_screen_simplefb">SimpleFB</string>
+    <string name="create_vm_category_renderer">Renderer</string>
+    <string name="create_vm_category_screen_display">Display settings</string>
+    <string name="create_vm_category_screen_export">Export settings</string>
+    <string name="create_vm_screen_gpu0">Virtio-GPU screen</string>
+    <string name="create_vm_screen_simplefb">SimpleFB screen</string>
+    <string name="create_vm_screen_enabled">Enable display device</string>
     <string name="create_vm_display_width">Width</string>
     <string name="create_vm_display_height">Height</string>
     <string name="create_vm_display_refresh_rate">Rate (Hz)</string>
+    <string name="create_vm_display_poll_hz">Poll (Hz)</string>
+    <string name="create_vm_display_resolution">Resolution</string>
+    <string name="create_vm_display_size_fmt">%1$d x %2$d</string>
+    <string name="create_vm_display_rate_fmt">%1$d Hz</string>
+    <string name="create_vm_display_custom">Custom...</string>
+    <string name="create_vm_display_custom_size_title">Custom resolution</string>
     <string name="create_vm_display_dpi_h">DPI Horizontal</string>
     <string name="create_vm_display_dpi_v">DPI Vertical</string>
-    <string name="create_vm_category_vnc">VNC Server</string>
-    <string name="create_vm_vnc_enabled">Enable VNC</string>
-    <string name="create_vm_native_display_enabled">Enable native display (virtio-gpu)</string>
+    <string name="create_vm_screen_exporter">Exporter</string>
+    <string name="create_vm_screen_exporter_none">Sink (discard)</string>
+    <string name="create_vm_screen_exporter_native">Native display</string>
+    <string name="create_vm_screen_exporter_vnc">VNC</string>
+    <string name="create_vm_screen_transport">Transport pipeline</string>
+    <string name="create_vm_screen_transport_cpu">CPU Copy</string>
+    <string name="create_vm_screen_transport_gpu">GPU Copy</string>
+    <string name="create_vm_screen_transport_zero">Zero Copy</string>
+    <string name="create_vm_screen_transport_gpu_hw">GPU Copy (hardware encode)</string>
+    <string name="create_vm_option_not_implemented">not implemented</string>
+    <string name="create_vm_screen_width_cpu_fallback">Transport pipeline will use CPU Copy at this width</string>
+    <string name="create_vm_screen_width_cpu_fallback_desc">GPU Copy imports the framebuffer as a linear dma-buf, and the driver takes one only when its row pitch is 64-byte aligned. SimpleFB\'s pitch is exactly width x 4 with nothing padding it, so GPU Copy needs a width that is a multiple of 16 -- 1408 rather than 1400. This width is fine; its frames just take the CPU copy.</string>
+    <string name="create_vm_screen_input_enabled">Input devices</string>
+    <string name="create_vm_error_vnc_port_conflict">Two listeners cannot share the same port.</string>
     <string name="create_vm_vnc_host">Host</string>
+    <string name="create_vm_vnc_host_iface_fmt">%1$s (%2$s)</string>
+    <string name="create_vm_vnc_host_custom_title">Custom address</string>
+    <string name="create_vm_error_invalid_host">Enter an address with no spaces, commas, quotes or brackets.</string>
     <string name="create_vm_vnc_port">Port</string>
     <string name="create_vm_vnc_password_auth">Password Auth</string>
     <string name="create_vm_vnc_password">Password</string>
@@ -242,6 +346,7 @@
     <string name="create_vm_tab_storage">Storage</string>
     <string name="create_vm_tab_network">Network</string>
     <string name="create_vm_tab_graphics">Graphics</string>
+    <string name="create_vm_tab_peripheral">Peripheral</string>
     <string name="create_vm_network_label">Bridge Network</string>
     <string name="create_vm_network_none">None</string>
     <string name="edit_vm_net_add">Add Network</string>
@@ -271,7 +376,6 @@
     <string name="edit_vm_disk_delete">Remove disk</string>
     <string name="edit_vm_disk_browse">Browse</string>
     <string name="edit_vm_disk_browse_title">Select disk source</string>
-    <string name="edit_vm_disk_browse_file">Select file</string>
     <string name="edit_vm_disk_browse_registered">Select registered disk</string>
     <string name="edit_vm_disk_browse_import_create">Import or create disk</string>
     <string name="edit_vm_disk_no_registered">No registered disks found.</string>
@@ -287,7 +391,12 @@
     <string name="edit_vm_shared_dir_cache">Cache</string>
     <string name="edit_vm_shared_dir_writeback">Writeback</string>
     <string name="edit_vm_shared_dir_dax">DAX</string>
+    <string name="edit_vm_shared_dir_type_unavailable">9P is not implemented. Only virtio-fs is wired up.</string>
+    <string name="edit_vm_shared_dir_dax_unavailable">DAX is not implemented on arm64. The host has no shared-memory window to map files into.</string>
     <string name="edit_vm_shared_dir_posix_acl">POSIX ACL</string>
+    <string name="edit_vm_shared_dir_root_access">Root access</string>
+    <string name="edit_vm_shared_dir_root_access_summary">Off: host files are read and written as the DroidVM app. On: as root.</string>
+    <string name="edit_vm_shared_dir_root_access_no_identity">Cannot determine the app identity. Open DroidVM once, or turn on root access for this directory.</string>
     <string name="edit_vm_shared_dir_delete">Remove shared directory</string>
     <string name="edit_vm_shared_dir_browse">Browse</string>
 
@@ -303,7 +412,7 @@
     <string name="edit_vm_uefi_firmware">UEFI firmware (empty = built-in EDK2)</string>
     <string name="edit_vm_uefi_firmware_builtin">Built-in EDK2</string>
     <string name="edit_vm_uefi_firmware_browse_title">Select UEFI firmware</string>
-    <string name="edit_vm_uefi_firmware_hint">Custom firmware only takes effect on the QEMU backend\ncrosvm always uses the built-in EDK2\nBooting Linux via UEFI is still being adapted and is not usable yet -- to boot Linux, choose the Linux kernel boot protocol</string>
+    <string name="edit_vm_uefi_firmware_hint">Custom firmware only takes effect on the QEMU backend\ncrosvm always uses the built-in EDK2</string>
     <string name="edit_vm_uefi_vars">UEFI vars (empty = built-in EDK2 vars)</string>
     <string name="edit_vm_uefi_vars_browse_title">Select UEFI vars</string>
     <string name="edit_vm_uefi_vars_too_large">For crosvm, pflash image size must not exceed %1$d MiB</string>
@@ -378,8 +487,10 @@
     <string name="settings_vm_auto_console_summary">Automatically open the console when a VM is started</string>
     <string name="settings_vm_clear_logs_before_start_title">Clear logs before start</string>
     <string name="settings_vm_clear_logs_before_start_summary">Clear all console logs for the VM before it starts</string>
-    <string name="settings_vm_keep_compress_on_optimize_title">Keep compression when optimizing</string>
-    <string name="settings_vm_keep_compress_on_optimize_summary">Preserve a disk\'s existing compression when optimizing instead of decompressing it; off rewrites the disk uncompressed</string>
+    <string name="settings_optimize_compression_title">Optimize compression</string>
+    <string name="settings_optimize_compression_ask">Ask every time</string>
+    <string name="disk_compress_none">Uncompressed</string>
+    <string name="disk_optimize_compress_remember">Remember this choice</string>
     <string name="settings_cpu_affinity_title">CPU affinity</string>
     <string name="settings_cpu_affinity_summary_fmt">Disk ops run on cores %1$s</string>
     <string name="settings_cpu_affinity_all_cores">Disk ops may use all cores</string>
@@ -454,6 +565,71 @@
     <string name="vm_compressed_disk_title">Compressed disk image</string>
     <string name="vm_compressed_disk_message">crosvm can\'t read compressed qcow2 images -- the VM would boot to disk I/O errors with no partition table. Convert it to uncompressed and start?\n%1$s</string>
     <string name="vm_compressed_disk_convert">Convert &amp; start</string>
+    <string name="vm_snapshot_disk_title">Disk has internal snapshots</string>
+    <string name="vm_snapshot_disk_message">crosvm has no qcow2 snapshot support and won\'t open a snapshotted disk for writing, so the VM can\'t start. Flattening keeps the current disk state and permanently deletes the snapshots. To keep them, attach the disk read-only or start this VM with the QEMU backend instead.\n%1$s</string>
+    <string name="vm_snapshot_disk_flatten">Delete snapshots &amp; start</string>
+    <string name="disk_snapshot_crosvm_warning_title">crosvm can\'t use snapshots</string>
+    <string name="disk_snapshot_crosvm_warning_message">This disk is attached writable to a crosvm VM (%1$s), which won\'t start while the disk has snapshots -- it has no qcow2 snapshot support. For crosvm, use a backing-file overlay instead. Create the snapshot anyway?</string>
+    <string name="disk_snapshot_crosvm_warning_create">Create anyway</string>
+    <string name="disk_tree_collapse">Collapse</string>
+    <string name="disk_tree_broken_parent">Parent image missing</string>
+    <string name="disk_tree_current_attached">Attached</string>
+    <string name="disk_locked_title">Disk is a base image</string>
+    <string name="disk_locked_message">%1$s is the base of %2$d overlay image(s), so operations that change it are locked. Merge, flatten or delete its overlays first.</string>
+    <string name="edit_vm_disk_locked_readonly">This disk has overlays; attached read-only</string>
+    <string name="vm_locked_disk_title">Base image attached writable</string>
+    <string name="vm_locked_disk_message">These disks are bases of overlay images; writing to them would corrupt the overlays. Attach them read-only and start?\n%1$s</string>
+    <string name="vm_locked_disk_readonly_start">Read-only &amp; start</string>
+    <string name="disk_overlay_create_message">Create an overlay image based on %1$s. The base becomes locked (read-only) while overlays exist.</string>
+    <string name="disk_overlay_name_hint">File name</string>
+    <string name="disk_overlay_advanced">Advanced&#8230;</string>
+    <string name="disk_overlay_depth_error">Overlay chain depth limit reached (%1$d)</string>
+    <string name="disk_overlay_vm_running">These VMs are using the base disk; shut them down first:%1$s</string>
+    <string name="disk_overlay_vm_choice_title">Base disk is in use</string>
+    <string name="disk_overlay_vm_choice_message">These VM disks attach %1$s writable:%2$s\n\nThe base locks once the overlay exists. Switch them to the new overlay (continue where they left off), or keep the base attached read-only?</string>
+    <string name="disk_overlay_vm_switch">Switch to overlay</string>
+    <string name="disk_overlay_vm_readonly">Make read-only</string>
+    <string name="disk_overlay_created">Overlay image created: %1$s</string>
+    <string name="disk_chain_missing_parent">This image\'s backing file is missing; it can\'t be used until the file is restored:\n%1$s</string>
+    <string name="disk_chain_import_title">Backing images detected</string>
+    <string name="disk_chain_import_message">This image builds on backing images that aren\'t registered yet. Register them too?%1$s</string>
+    <string name="disk_chain_import_confirm">Register all</string>
+    <string name="disk_merge">Merge into base</string>
+    <string name="disk_flatten">Flatten to standalone</string>
+    <string name="disk_reset">Reset overlay</string>
+    <string name="disk_reset_confirm">Every change written to %1$s since it was created is discarded: it becomes a fresh, empty overlay of %2$s again. The file keeps its path and size. This cannot be undone.</string>
+    <string name="disk_reset_has_children">%1$s has overlays of its own; merge, flatten or delete them first.</string>
+    <string name="disk_reset_encrypted">%1$s is encrypted; it can\'t be recreated without its key.</string>
+    <string name="disk_reset_done">Overlay reset: %1$s</string>
+    <string name="disk_reset_failed">Failed to reset the overlay; the original file was kept.</string>
+    <string name="disk_merge_not_overlay">This disk has no registered base image.</string>
+    <string name="disk_merge_siblings">%1$s has other overlays; merging would corrupt them. Merge or flatten the siblings first.</string>
+    <string name="disk_family_vm_running">VMs in this disk\'s tree are running; shut them down first:%1$s</string>
+    <string name="disk_merge_confirm">%1$s\'s changes will be written into %2$s; afterwards %1$s is deleted. This cannot be undone.</string>
+    <string name="disk_merge_confirm_children">\n\nIts %1$d overlay(s) will be re-based onto %2$s.</string>
+    <string name="disk_merge_confirm_vms">\n\nThese VMs will attach %2$s instead:%1$s</string>
+    <string name="disk_flatten_confirm">The base\'s data will be copied into %1$s so it stands alone (the file grows). The base %2$s is not affected.</string>
+    <string name="disk_manage_branches">Manage overlays</string>
+    <string name="disk_branches_button">Disk branches</string>
+    <string name="disk_delete_tree_title">Delete entire tree</string>
+    <string name="disk_delete_tree_message">An overlay only holds differences against its base, so the whole tree goes together. These disks will be removed:%1$s</string>
+    <string name="disk_delete_subtree_message">An overlay only holds differences against its base, so this disk\'s overlays go with it. These disks will be removed:%1$s</string>
+    <string name="disk_manage_branches_close">Close</string>
+    <string name="disk_manage_branches_back">Back</string>
+    <string name="disk_tree_empty">This disk tree no longer exists.</string>
+    <string name="disk_tree_attached_by">Attached: %1$s</string>
+    <string name="disk_tree_in_use">%1$s (in use)</string>
+    <string name="disk_tree_changes_header">\n\nOther VMs\' attachments change with it:%1$s</string>
+    <string name="disk_tree_change_move">VM %1$s, disk #%2$d: %3$s \u2192 %4$s</string>
+    <string name="disk_tree_change_move_readonly">VM %1$s, disk #%2$d: %3$s \u2192 %4$s (becomes read-only)</string>
+    <string name="disk_tree_change_clear">VM %1$s, disk #%2$d: %3$s is removed from the VM</string>
+    <string name="disk_tree_change_readonly">VM %1$s, disk #%2$d: %3$s becomes read-only</string>
+    <string name="disk_tree_change_rewritten">VM %1$s, disk #%2$d: %3$s\'s content is replaced by %4$s\'s state</string>
+    <string name="disk_tree_pinned">VMs that are not stopped hold disks this would change; shut them down first:%1$s</string>
+    <string name="edit_vm_disk_shared_readonly">This disk is attached by another VM too; attached read-only</string>
+    <string name="vm_shared_disk_title">Disk shared with another VM</string>
+    <string name="vm_shared_disk_message">These disks are attached by other VMs as well; two writers would corrupt them. Attach them read-only and start?\n%1$s</string>
+    <string name="disk_tree_not_registered">This disk isn\'t registered; branches unavailable</string>
     <string name="vm_compressed_disk_start_anyway">Start anyway</string>
     <string name="vm_compressed_disk_start_countdown">Start anyway (%1$d)</string>
     <string name="field_copy">Copy</string>
@@ -553,7 +729,27 @@
     <string name="disk_create_preview">Preview: %1$s</string>
     <string name="disk_create_preview_desc">Disk file path preview</string>
 
-    <string name="lxc_title">Import LXC Image</string>
+    <string name="vm_create_mode_title">Create virtual machine</string>
+    <string name="vm_create_linux">Linux VM</string>
+    <string name="vm_create_windows">Windows VM</string>
+    <string name="vm_create_import">Import from .vmpkg</string>
+    <string name="vm_create_customize">Customize</string>
+    <string name="windows_vm_unavailable_title">Windows VM is not available yet</string>
+    <string name="windows_vm_unavailable_message">This feature is still being implemented and is currently unavailable. For now, build a Windows image with the windows_build.ps1 script.</string>
+    <string name="windows_vm_open_script">Open build script</string>
+    <string name="linux_vm_create_title">Create Linux Virtual Machine</string>
+    <string name="linux_vm_category_settings">Settings</string>
+    <string name="linux_vm_disk_size_hint">Disk size</string>
+    <string name="linux_vm_root_password_hint">Root password</string>
+    <string name="linux_vm_root_password_toggle">Show or hide the root password</string>
+    <string name="linux_vm_network_hint">Network</string>
+    <string name="linux_vm_network_none">No network</string>
+    <string name="linux_vm_network_unavailable">The selected network is no longer available.</string>
+    <string name="linux_vm_create_action">Create</string>
+    <string name="linux_vm_create_success">Virtual machine "%1$s" created.</string>
+    <string name="linux_vm_create_failed">Linux virtual machine creation did not complete.</string>
+
+    <string name="lxc_title">Download LXC Distro Image</string>
     <string name="lxc_category_source">Source</string>
     <string name="lxc_meta_source_hint">Metadata source</string>
     <string name="lxc_download_source_hint">Download source</string>
@@ -577,6 +773,7 @@
     <string name="lxc_variant_hint">Variant</string>
     <string name="lxc_build_hint">Build</string>
     <string name="lxc_category_output">Output</string>
+    <string name="lxc_reset_password_hint">Reset root password (optional)</string>
     <string name="lxc_info_size">Download size: %1$s</string>
     <string name="lxc_info_path">Remote path: %1$s</string>
     <string name="lxc_fab_import">Import</string>
@@ -586,9 +783,9 @@
     <string name="lxc_error_name_empty">File name is required.</string>
     <string name="lxc_error_folder_empty">Save folder is required.</string>
     <string name="lxc_error_custom_url">Please enter a valid mirror URL.</string>
+    <string name="lxc_error_source_unavailable">The selected metadata source is unavailable.</string>
     <string name="lxc_no_images">No disk-kvm images found.</string>
-    <string name="lxc_default_download_source">official</string>
-    <string name="disk_add_lxc">Import LXC image</string>
+    <string name="disk_add_lxc">Download LXC distro image</string>
     <string name="disk_add_url">Download from URL</string>
     <string name="disk_add_images">Download distro image</string>
 
@@ -640,11 +837,13 @@
     <string name="disk_operation_running">Running\u2026</string>
     <string name="disk_operation_success">Completed successfully.</string>
     <string name="disk_operation_failed">Failed (exit code %1$d).</string>
+    <string name="disk_operation_finalizing">Saving disk dependencies...</string>
+    <string name="disk_operation_dependency_failed">The disk data operation finished, but its VM/disk dependencies could not be saved. The source image was kept when possible.</string>
     <string name="disk_operation_bad_task">Invalid task parameters.</string>
     <string name="disk_operation_cancel_title">Cancel operation?</string>
     <string name="disk_operation_cancel_message">The disk operation is still in progress. Are you sure you want to cancel?</string>
 
-    <string name="disk_change_password">Change Password</string>
+    <string name="disk_change_password">Change Guest Linux Password</string>
     <string name="change_password_title">Change Password</string>
     <string name="change_password_disk_label">Disk: %1$s</string>
     <string name="change_password_hint">New password</string>
@@ -653,6 +852,7 @@
     <string name="change_password_confirm">Confirm</string>
     <string name="change_password_error_empty">Password cannot be empty</string>
     <string name="change_password_error_mismatch">Passwords do not match</string>
+    <string name="change_password_error_unsafe">Only letters, digits and these symbols are supported: %1$s</string>
 
     <string name="agent_operation_title">Agent Operation</string>
     <string name="agent_operation_preparing">Preparing\u2026</string>
@@ -660,6 +860,7 @@
     <string name="agent_operation_starting_vm">Starting temporary VM\u2026</string>
     <string name="agent_operation_running">Running\u2026</string>
     <string name="agent_operation_success">Operation completed successfully.</string>
+    <string name="agent_operation_success_skipped">Operation completed; an action was not applicable.</string>
     <string name="agent_operation_failed">Operation failed (exit code %1$d).</string>
     <string name="agent_operation_failed_detail">Operation failed: %1$s</string>
     <string name="agent_operation_prepare_failed">Failed to prepare agent VM.</string>
@@ -672,8 +873,26 @@
     <string name="agent_operation_log_creating_vm">Creating temporary VM on daemon\u2026\n</string>
     <string name="agent_operation_log_starting_vm">Starting temporary VM\u2026\n</string>
     <string name="agent_operation_log_running">Temporary VM is running\u2026\n</string>
-    <string name="agent_operation_log_success">\nPassword changed successfully.\n</string>
+    <string name="agent_operation_log_success">\nAll requested operations completed.\n</string>
+    <string name="agent_operation_log_skipped">\nCompleted without error; at least one action made no changes.\n</string>
     <string name="agent_operation_log_failed">\nOperation failed. Please check the logs above.\n</string>
+    <string name="agent_operation_logs">Logs</string>
+    <string name="agent_operation_stopping">Stopping rescue VM...</string>
+    <string name="agent_operation_vm_stopped">The rescue VM has stopped.</string>
+    <string name="agent_operation_control_failed">Lost the rescue VM control channel.</string>
+    <string name="agent_operation_error_root_not_found">No supported Linux root partition was found.</string>
+    <string name="agent_operation_error_password">Failed to update the password database.</string>
+    <string name="agent_operation_error_unmount">The password was updated, but the target filesystem could not be unmounted safely.</string>
+    <string name="agent_operation_error_script">The rescue script failed unexpectedly.</string>
+    <string name="agent_operation_error_autogrow_disk">The target disk could not be inspected.</string>
+    <string name="agent_operation_error_autogrow_in_use">The last partition is still mounted or in use.</string>
+    <string name="agent_operation_error_partition_grow">Failed to grow the last partition.</string>
+    <string name="agent_operation_error_partition_reread">The partition table changed, but the kernel could not reload it.</string>
+    <string name="agent_operation_error_filesystem_check">The filesystem check failed; the filesystem was not grown.</string>
+    <string name="agent_operation_error_filesystem_mount">The filesystem could not be mounted for resizing.</string>
+    <string name="agent_operation_error_filesystem_grow">The partition was enlarged, but growing its filesystem failed.</string>
+    <string name="agent_operation_error_filesystem_unmount">The filesystem was grown, but it could not be unmounted safely.</string>
+    <string name="agent_operation_error_unknown">Rescue error: %1$s</string>
 
     <string name="disk_resize">Resize</string>
     <string name="disk_resize_title">Resize Disk</string>
@@ -686,6 +905,11 @@
     <string name="disk_resize_shrink_message">The new size is smaller than the current size. Shrinking the disk may cause data loss. Are you sure you want to continue?</string>
     <string name="disk_resize_error_invalid">Please enter a valid size</string>
     <string name="disk_resize_error_info">Failed to get disk info</string>
+    <string name="disk_resize_autogrow">Grow partition and filesystem</string>
+    <string name="disk_resize_autogrow_description">Supports ext2/3/4, Btrfs, F2FS</string>
+    <string name="disk_resize_error_no_action">Choose a different size or enable filesystem growth</string>
+    <string name="disk_resize_error_autogrow_shrink">Filesystem growth cannot be combined with shrinking the virtual disk</string>
+    <string name="disk_dependency_update_failed">Failed to update VM disk dependencies; no disk was deleted.</string>
 
     <string name="disk_set_format">Convert Format</string>
     <string name="disk_set_format_title">Convert Disk Format</string>
@@ -872,6 +1096,9 @@
     <string name="vnc_display_reconnecting">Reconnecting (%1$d/%2$d)\u2026</string>
     <string name="vnc_display_reconnect_failed">Reconnect failed after %1$d attempts</string>
     <string name="vnc_display_connect_failed">Failed to connect to VNC server</string>
+    <string name="vnc_display_h264_active">H.264 stream</string>
+    <string name="vnc_display_h264_fallback">fell back to RFB</string>
+    <string name="vnc_display_h264_unavailable">H.264 unavailable (this device has no encoder)</string>
     <string name="vnc_display_fullscreen">Fullscreen</string>
 
     <string name="native_display_title">Native Display</string>
@@ -889,6 +1116,7 @@
     <string name="vnc_menu_input_mode_touch">Touch Mode</string>
     <string name="vnc_menu_input_mode_mouse">Mouse Mode</string>
     <string name="vnc_menu_input_mode_tablet">Tablet Mode</string>
+    <string name="display_input_disabled_hint">Input devices are off for this screen. Turn them on in the graphics settings, then start the VM again.</string>
     <string name="usb_input_no_device">No USB keyboard or mouse found</string>
     <string name="usb_input_status">USB input: %1$d keyboard(s), %2$d mouse(es)</string>
     <string name="vnc_menu_rotate">Rotate Screen</string>
@@ -904,15 +1132,15 @@
     <string name="vnc_op_scroll_down">Scroll Down</string>
     <string name="vnc_menu_reconnect">Reconnect</string>
     <string name="vnc_menu_external_app">Open with External App</string>
-    <string name="vnc_menu_view_url">View Connection URL</string>
+    <string name="vnc_menu_project_external">Project to external display</string>
     <string name="vnc_menu_no_vnc_app">No app found to handle VNC connections</string>
-    <string name="vnc_menu_url_copied">Copied to clipboard</string>
     <string name="vnc_presentation_title">Touchpad</string>
     <string name="vnc_presentation_title_with_name">%1$s - Touchpad</string>
 
     <string name="vnc_external_title">Open with External App</string>
     <string name="vnc_external_message">About to open with an external app</string>
-    <string name="vnc_external_hint_target">Target</string>
+    <string name="vnc_external_hint_local">URL (this device)</string>
+    <string name="vnc_external_hint_remote">URL (other devices)</string>
     <string name="vnc_external_hint_password">Password</string>
     <string name="vnc_external_cancel">Cancel</string>
     <string name="vnc_external_connect">Connect</string>
@@ -945,6 +1173,12 @@
     <string name="logs_share">Share</string>
     <string name="logs_share_title">Share logs</string>
     <string name="logs_share_failed">Failed to share logs: %1$s</string>
+    <string name="logs_filter">Filter</string>
+    <string name="logs_filter_title">Filter the log</string>
+    <string name="logs_filter_message">Only lines containing this text are shown. Leave it empty to show everything.</string>
+    <string name="logs_filter_hint">Text to match</string>
+    <string name="logs_filter_show_all">Show all</string>
+    <string name="logs_title_filtered">%1$s - %2$s (filter: %3$s)</string>
     <string name="logs_not_found_title">Daemon log unavailable</string>
     <string name="logs_not_found_message">No daemon log file found, is daemon running?</string>
 
@@ -991,6 +1225,14 @@
     <string name="hugepage_stat_pool_size">Pool size: %1$d (%2$s)</string>
     <string name="hugepage_stat_pool_size_cma">Pool size: %1$d/%2$d (%3$s / %4$s)</string>
     <string name="hugepage_stats_unavailable">Module not loaded</string>
+    <string name="hugepage_advanced">Advanced</string>
+    <string name="hugepage_adv_hint">The value on the right is what the module is running; tap a row to edit what settings.prop asks for.</string>
+    <string name="hugepage_adv_unavailable">Unavailable</string>
+    <string name="hugepage_adv_unset">(default)</string>
+    <string name="hugepage_adv_warn_below_default">Below this device\'s default (%1$d); the system may become unstable</string>
+    <string name="hugepage_adv_invalid">Invalid value</string>
+    <string name="hugepage_adv_saved">Saved</string>
+    <string name="hugepage_adv_save_failed">Save failed</string>
     <string name="hugepage_manual_refill">Acquire Pages</string>
     <string name="hugepage_refill_triggered">Acquire triggered</string>
     <string name="hugepage_refill_failed">Failed to trigger acquire</string>
@@ -1113,7 +1355,9 @@
     <string name="log_helper_huge_page_fault_message">Virtual machine %s ran into insufficient huge page memory.\nTry changing the memory size, or use the pre-allocation module.\nOpen the browser for more information.</string>
     <string name="log_helper_no_restrict_pool_url" formatted="false">https://github.com/Droid-VM/DroidVM/wiki/Problem%3A-The-virtual-machine%27s-system-does-not-support-SWIOTLB-Restrict-DMA-Pool%2e</string>
     <string name="log_helper_no_restrict_pool_title">Missing virtual machine kernel functionality</string>
-    <string name="log_helper_no_restrict_pool_message">The kernel of virtual machine %s does not support Restricted DMA Pool.\nPlease replace the kernel or use the built-in DroidVM kernel.\nOpen the browser for more information.</string>
+    <string name="log_helper_no_restrict_pool_devices">The following devices of virtual machine %1$s accessed the protected memory region:</string>
+    <string name="log_helper_no_restrict_pool_message"><![CDATA[The guest kernel may not support the Restricted DMA Pool &#8212; replace the kernel or use the built-in DroidVM kernel.<br><br>Or the guest drivers for those devices are not ported yet &#8212; install the <a href="https://github.com/Droid-VM/gunyah-guest-drivers-windows">Windows drivers</a> or <a href="https://github.com/Droid-VM/droidvm-guest-additions">Linux drivers</a>.]]></string>
+    <string name="log_helper_open_log">Open log</string>
     <string name="log_helper_unsupported_gunyah_title">Unsupported Gunyah version</string>
     <string name="log_helper_unsupported_gunyah_message">The Gunyah version on your device is too old (for example, Snapdragon 8 Gen 2). Try updating the system or switching to a newer device.</string>
     <string name="log_helper_unsupported_sandbox_title">Sandbox is not supported</string>
@@ -1179,4 +1423,158 @@
     <string name="vmpkg_import_done">Import complete</string>
     <string name="vmpkg_import_failed">Import failed: %1$s</string>
     <string name="vmpkg_import_invalid">Not a valid vmpkg: %1$s</string>
+    <string name="kernel_module_title">Kernel Modules</string>
+    <string name="kernel_module_subtitle">Load host kernel modules, and load them with the daemon</string>
+    <string name="kernel_module_loading">Loading&#8230;</string>
+    <string name="kernel_module_none">No modules available</string>
+    <string name="kernel_module_loaded">Loaded</string>
+    <string name="kernel_module_unloaded">Not loaded</string>
+    <string name="kernel_module_load">Load</string>
+    <string name="kernel_module_unload">Unload</string>
+    <string name="kernel_module_autostart">Auto-load</string>
+    <string name="kernel_module_autostart_needs_load">Load it once first &#8212; auto-load is only offered for a module that has loaded on this device</string>
+    <string name="kernel_module_working">Working&#8230;</string>
+    <string name="kernel_module_ok">Done</string>
+    <string name="kernel_module_fail">Failed</string>
+    <string name="kernel_module_kmi">KMI: %1$s</string>
+    <string name="kernel_module_why">Why needed?</string>
+    <string name="kernel_module_manage">Manage</string>
+    <string name="kernel_module_hugepage_name" translatable="false">GH-Hugepage-Reserve</string>
+    <string name="setup_kmod_desc"><![CDATA[DroidVM needs these host kernel modules; without them VMs may fail to boot or lose GPU acceleration. The modules are still under development &#8212; stability is not guaranteed, and they may cause the phone to reboot: try loading them first, and enable load-with-daemon only after they prove stable. If you hit any problem, please <a href="https://github.com/Droid-VM/DroidVM/issues">file an issue</a>. Each card explains why its module is needed.]]></string>
+    <string name="vm_hugepage_short_title">Huge-page reserve is short</string>
+    <string name="vm_hugepage_short_message">The huge-page reserve has %1$d MB free, but this VM needs about %2$d MB &#8212; %3$d MB short.\n\nThe reserve normally refills a couple of seconds after another VM exits. Starting now makes the hypervisor take ordinary memory instead, which it has to migrate out of CMA first; on a phone with nothing spare that has stalled the whole system for minutes, or rebooted it.\n\nWaiting a moment and starting again usually clears it.</string>
+    <string name="vm_hugepage_short_settings">Huge-page settings</string>
+    <string name="vm_hugepage_short_start_anyway">Start anyway</string>
+
+    <string name="create_vm_category_peripheral">Peripherals</string>
+    <string name="edit_vm_peripheral_empty">No peripherals</string>
+    <string name="edit_vm_peripheral_add">Add peripheral</string>
+    <string name="edit_vm_peripheral_add_title">Peripheral type</string>
+    <string name="edit_vm_peripheral_type">Peripheral type</string>
+    <string name="edit_vm_peripheral_delete">Remove peripheral</string>
+    <string name="edit_vm_peripheral_host_device">Host device</string>
+    <string name="edit_vm_peripheral_host_default">Follow system</string>
+    <string name="edit_vm_peripheral_host_missing">Not connected right now; the VM will follow the system routing.</string>
+    <string name="edit_vm_peripheral_host_missing_item">%1$s (not connected)</string>
+    <string name="edit_vm_peripheral_pick_output">Play through</string>
+    <string name="edit_vm_peripheral_pick_input">Record from</string>
+    <string name="edit_vm_peripheral_duplicate_host">Two peripherals of the same type point at one host device.</string>
+    <string name="audio_device_builtin_speaker">Speaker</string>
+    <string name="audio_device_builtin_earpiece">Earpiece</string>
+    <string name="audio_device_builtin_mic">Built-in microphone</string>
+    <string name="audio_device_wired_headset">Wired headset</string>
+    <string name="audio_device_wired_headphones">Wired headphones</string>
+    <string name="audio_device_bluetooth">Bluetooth audio</string>
+    <string name="audio_device_bluetooth_sco">Bluetooth call audio</string>
+    <string name="audio_device_usb">USB audio</string>
+    <string name="audio_device_hdmi">HDMI</string>
+    <string name="audio_device_line">Line out</string>
+    <!-- Camera peripheral -->
+    <string name="edit_vm_peripheral_type_virtio_camera">virtio-media camera</string>
+    <string name="camera_permission_title">Allow camera access?</string>
+    <string name="camera_permission_message">A camera peripheral hands one of this phone\'s cameras to the guest. Android only lets the camera open while this app holds the permission, so without it the device would be listed but could never start.</string>
+    <string name="camera_permission_allow">Allow</string>
+    <string name="camera_permission_cancel">Cancel</string>
+    <string name="camera_permission_declined">Camera not allowed, so no camera device was added.</string>
+    <string name="host_camera_default">Host default</string>
+    <string name="host_camera_front">Front camera (%1$s)</string>
+    <string name="host_camera_back">Back camera (%1$s)</string>
+    <string name="host_camera_external">External camera (%1$s)</string>
+    <string name="host_camera_unknown">Camera %1$s</string>
+    <string name="host_camera_none">No camera on this host</string>
+    <string name="create_vm_category_vpu">Video acceleration (VPU)</string>
+    <string name="create_vm_vpu_enabled">Attach a hardware video encoder and decoder</string>
+    <string name="create_vm_vpu_host_pool_mb">Host pool size (MB)</string>
+    <string name="create_vm_vpu_guest_pool_mb">Guest pool size (MB)</string>
+    <string name="create_vm_vpu_note">Not implemented yet: these settings are saved with the VM, but no video device is attached until the feature lands.</string>
+    <string name="edit_vm_peripheral_camera_missing">This phone has no such camera; the device will not start.</string>
+    <string name="edit_vm_peripheral_host_camera">Host camera</string>
+    <string name="peripheral_fgs_title">Peripheral in use</string>
+    <string name="peripheral_fgs_text">A running VM is using a device that needs DroidVM in the foreground.</string>
+    <string name="notif_channel_peripheral_foreground">VM peripherals</string>
+    <string name="notif_channel_peripheral_foreground_desc">Shown while a VM uses a camera or another device that Android only allows in the foreground.</string>
+
+    <string name="record_audio_permission_title">Allow microphone access?</string>
+    <string name="record_audio_permission_message">This VM is being given a microphone, which records from the phone\'s mic while the VM runs. Allow microphone access so the guest can hear it.</string>
+    <string name="record_audio_permission_allow">Continue</string>
+    <string name="record_audio_permission_skip">Not now</string>
+
+    <string name="edit_vm_peripheral_type_virtio_sound">VirtIO Sound</string>
+    <string name="edit_vm_peripheral_type_intel_hda">Intel HDA</string>
+    <string name="edit_vm_peripheral_unavailable">Not implemented yet; the device is skipped when the VM starts.</string>
+    <string name="edit_vm_sound_endpoint_add">Add device</string>
+    <string name="edit_vm_sound_endpoint_remove">Remove endpoint</string>
+    <string name="edit_vm_sound_purpose_usage">Purpose</string>
+    <string name="edit_vm_sound_purpose_content">Content</string>
+    <string name="edit_vm_sound_purpose_preset">Microphone use</string>
+    <string name="edit_vm_sound_purpose_unset">Follow default</string>
+    <string name="edit_vm_sound_usage_media">Media</string>
+    <string name="edit_vm_sound_usage_voice_communication">Call</string>
+    <string name="edit_vm_sound_usage_voice_communication_signalling">Signalling</string>
+    <string name="edit_vm_sound_usage_game">Game</string>
+    <string name="edit_vm_sound_usage_alarm">Alarm</string>
+    <string name="edit_vm_sound_usage_notification">Notify</string>
+    <string name="edit_vm_sound_usage_notification_ringtone">Ringtone</string>
+    <string name="edit_vm_sound_usage_notification_event">Event</string>
+    <string name="edit_vm_sound_usage_assistant">Assistant</string>
+    <string name="edit_vm_sound_usage_assistance_accessibility">A11y</string>
+    <string name="edit_vm_sound_usage_assistance_navigation_guidance">Navigation</string>
+    <string name="edit_vm_sound_usage_assistance_sonification">UI</string>
+    <string name="edit_vm_sound_content_speech">Speech</string>
+    <string name="edit_vm_sound_content_music">Music</string>
+    <string name="edit_vm_sound_content_movie">Movie</string>
+    <string name="edit_vm_sound_content_sonification">Effects</string>
+    <string name="edit_vm_sound_preset_generic">General</string>
+    <string name="edit_vm_sound_preset_camcorder">Camcorder</string>
+    <string name="edit_vm_sound_preset_voice_recognition">Recognition</string>
+    <string name="edit_vm_sound_preset_voice_communication">Call</string>
+    <string name="edit_vm_sound_preset_unprocessed">Raw</string>
+    <string name="edit_vm_sound_preset_voice_performance">Performance</string>
+    <string name="edit_vm_sound_mode_speaker">Speaker</string>
+    <string name="edit_vm_sound_mode_microphone">Microphone</string>
+    <string name="edit_vm_sound_buffer">Buffer</string>
+    <string name="edit_vm_sound_buffer_low">Low latency (2 buffers)</string>
+    <string name="edit_vm_sound_buffer_normal">Balanced (6 buffers)</string>
+    <string name="edit_vm_sound_buffer_safe">High quality (12 buffers)</string>
+    <string name="edit_vm_sound_underrun">Buffer underrun</string>
+    <string name="edit_vm_sound_underrun_silence">Silence</string>
+    <string name="edit_vm_sound_underrun_repeat">Repeat</string>
+    <string name="edit_vm_sound_underrun_wsola">WSOLA</string>
+    <string name="edit_vm_sound_underrun_lpc">LPC</string>
+    <string name="edit_vm_peripheral_host_output">Output</string>
+    <string name="edit_vm_peripheral_host_input">Input</string>
+    <string name="vm_info_console_stdout_short">stdout</string>
+    <string name="vm_info_console_stderr_short">stderr</string>
+    <string name="create_vm_category_serial">Serial ports</string>
+    <string name="edit_vm_serial_empty">No serial ports</string>
+    <string name="edit_vm_serial_add">Add serial port</string>
+    <string name="edit_vm_serial_add_title">Serial port hardware</string>
+    <string name="edit_vm_serial_delete">Remove serial port</string>
+    <string name="edit_vm_serial_hw_serial">Serial</string>
+    <string name="edit_vm_serial_hw_sbsa">SBSA</string>
+    <string name="edit_vm_serial_hw_virtio_console">Virtio Console</string>
+    <string name="edit_vm_serial_backend">Backend</string>
+    <string name="edit_vm_serial_backend_sink">Sink (discard)</string>
+    <string name="edit_vm_serial_backend_app_console">App console</string>
+    <string name="edit_vm_serial_backend_file">File</string>
+    <string name="edit_vm_serial_backend_unix">Unix socket (datagram)</string>
+    <string name="edit_vm_serial_backend_unix_stream">Unix socket (stream)</string>
+    <string name="edit_vm_serial_backend_pty">PTY</string>
+    <string name="edit_vm_serial_backend_stdout">Standard output</string>
+    <string name="edit_vm_serial_backend_syslog">Syslog</string>
+    <string name="edit_vm_serial_backend_usb_acm">USB gadget ACM</string>
+    <string name="edit_vm_serial_path">Path</string>
+    <string name="edit_vm_serial_path_pty_hint">Optional symlink to the pty</string>
+    <string name="edit_vm_serial_path_required">A path is required for this serial port backend.</string>
+    <string name="edit_vm_serial_console">Guest console (SPCR)</string>
+    <string name="edit_vm_serial_slot_duplicate">Two serial ports point at one USB slot.</string>
+    <string name="edit_vm_serial_usb_slot">USB slot</string>
+    <string name="edit_vm_serial_usb_slot_item">Slot %1$d</string>
+    <string name="settings_usb_acm_ports_title">USB serial ports (ACM)</string>
+    <string name="settings_usb_acm_ports_summary">%1$d slots</string>
+    <string name="settings_usb_acm_enable">Enable USB serial</string>
+    <string name="settings_usb_acm_reenum_note">Turning this on or off re-enumerates the phone\'s USB connection for a moment.</string>
+    <string name="settings_usb_acm_disabled">Disabled</string>
+    <string name="edit_vm_serial_usb_disabled_hint">USB serial (ACM) is disabled; enable it in settings or this VM will not boot.</string>
+    <string name="edit_vm_serial_full">All ports of this hardware are already added.</string>
 </resources>
diff --git a/app/src/test/java/cn/classfun/droidvm/lib/store/vm/VMCreationDefaultsTest.java b/app/src/test/java/cn/classfun/droidvm/lib/store/vm/VMCreationDefaultsTest.java
new file mode 100644
index 000000000..8b7200fc7
--- /dev/null
+++ b/app/src/test/java/cn/classfun/droidvm/lib/store/vm/VMCreationDefaultsTest.java
@@ -0,0 +1,28 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
+package cn.classfun.droidvm.lib.store.vm;
+
+import static org.junit.Assert.assertEquals;
+
+import org.junit.Test;
+
+import cn.classfun.droidvm.lib.data.HostAudioDevices;
+
+public final class VMCreationDefaultsTest {
+    @Test
+    public void requestedCreateVmDefaultsAreStable() {
+        assertEquals(60, VMScreenConfig.NEW_VM_DEFAULT_POLL_HZ);
+
+        var sound = VMPeripheralConfig.createDefaultVirtioSound();
+        assertEquals(PeripheralType.VIRTIO_SOUND, sound.getType());
+        var endpoints = sound.getEndpoints();
+        assertEquals(2, endpoints.size());
+        assertEquals(SoundMode.SPEAKER, endpoints.get(0).getMode());
+        assertEquals(HostAudioDevices.SYSTEM_DEFAULT_KEY,
+            endpoints.get(0).getHostDevice());
+        assertEquals(SoundMode.MICROPHONE, endpoints.get(1).getMode());
+        assertEquals(HostAudioDevices.SYSTEM_DEFAULT_KEY,
+            endpoints.get(1).getHostDevice());
+    }
+}
diff --git a/app/src/test/java/cn/classfun/droidvm/lib/utils/ShellSafePasswordTest.java b/app/src/test/java/cn/classfun/droidvm/lib/utils/ShellSafePasswordTest.java
new file mode 100644
index 000000000..8abc09038
--- /dev/null
+++ b/app/src/test/java/cn/classfun/droidvm/lib/utils/ShellSafePasswordTest.java
@@ -0,0 +1,71 @@
+package cn.classfun.droidvm.lib.utils;
+
+import static org.junit.Assert.assertEquals;
+import static org.junit.Assert.assertFalse;
+import static org.junit.Assert.assertNull;
+import static org.junit.Assert.assertTrue;
+import static cn.classfun.droidvm.lib.utils.StringUtils.GROUPED_PASSWORD_DIGITS;
+import static cn.classfun.droidvm.lib.utils.StringUtils.GROUPED_PASSWORD_LOWER;
+import static cn.classfun.droidvm.lib.utils.StringUtils.GROUPED_PASSWORD_SYMBOLS;
+import static cn.classfun.droidvm.lib.utils.StringUtils.GROUPED_PASSWORD_UPPER;
+import static cn.classfun.droidvm.lib.utils.StringUtils.SHELL_SAFE_PASSWORD_SYMBOLS;
+import static cn.classfun.droidvm.lib.utils.StringUtils.generateGroupedPassword;
+import static cn.classfun.droidvm.lib.utils.StringUtils.isShellSafePassword;
+import static cn.classfun.droidvm.lib.utils.StringUtils.shellSafePasswordFilter;
+
+import org.junit.Test;
+
+public class ShellSafePasswordTest {
+    @Test
+    public void generatedPasswordFollowsGroupedPattern() {
+        for (int round = 0; round < 200; round++) {
+            var p = generateGroupedPassword();
+            assertEquals(11, p.length());
+            for (int i = 0; i < 2; i++)
+                assertTrue(GROUPED_PASSWORD_UPPER.indexOf(p.charAt(i)) >= 0);
+            for (int i = 2; i < 5; i++)
+                assertTrue(GROUPED_PASSWORD_LOWER.indexOf(p.charAt(i)) >= 0);
+            for (int i = 5; i < 9; i++)
+                assertTrue(GROUPED_PASSWORD_DIGITS.indexOf(p.charAt(i)) >= 0);
+            for (int i = 9; i < 11; i++)
+                assertTrue(GROUPED_PASSWORD_SYMBOLS.indexOf(p.charAt(i)) >= 0);
+            assertTrue(isShellSafePassword(p));
+        }
+    }
+
+    @Test
+    public void generatorCharsetsStayInsideShellSafeWhitelist() {
+        for (char c : GROUPED_PASSWORD_SYMBOLS.toCharArray())
+            assertTrue(SHELL_SAFE_PASSWORD_SYMBOLS.indexOf(c) >= 0);
+        // The grouped charsets deliberately omit ambiguous glyphs.
+        for (char c : "IOlo01".toCharArray()) {
+            assertFalse(GROUPED_PASSWORD_UPPER.indexOf(c) >= 0);
+            assertFalse(GROUPED_PASSWORD_LOWER.indexOf(c) >= 0);
+            assertFalse(GROUPED_PASSWORD_DIGITS.indexOf(c) >= 0);
+        }
+    }
+
+    @Test
+    public void gateRejectsShellMetacharacters() {
+        assertTrue(isShellSafePassword("KRvxz4821#%"));
+        assertTrue(isShellSafePassword(""));
+        for (var bad : new String[]{
+            "pass'word", "pass\"word", "pass\\word", "pass$word", "pass`word",
+            "pass word", "pass\nword", "pass\tword", "pass;word", "pass|word",
+            "pass&word", "pass<word", "pass>word", "pass(word)", "\u5bc6\u78bc"
+        }) assertFalse(bad, isShellSafePassword(bad));
+    }
+
+    @Test
+    public void filterStripsUnsafeCharactersOnly() {
+        var filter = shellSafePasswordFilter();
+        // Fully safe input passes through untouched (null = keep original).
+        assertNull(filter.filter("Ab1!@#%^*+-=_.,:?", 0, 17, null, 0, 0));
+        // Unsafe characters are dropped, safe ones kept, order preserved.
+        assertEquals("Ab1", filter.filter("A'b\"1$", 0, 6, null, 0, 0).toString());
+        assertEquals("", filter.filter("'\"`$\\", 0, 5, null, 0, 0).toString());
+        // Only the [start, end) slice is considered.
+        assertNull(filter.filter("$ab$", 1, 3, null, 0, 0));
+        assertEquals("ab", filter.filter("$a$b", 1, 4, null, 0, 0).toString());
+    }
+}
diff --git a/app/src/test/java/cn/classfun/droidvm/ui/disk/action/DiskActionPolicyTest.java b/app/src/test/java/cn/classfun/droidvm/ui/disk/action/DiskActionPolicyTest.java
new file mode 100644
index 000000000..716dfe1ef
--- /dev/null
+++ b/app/src/test/java/cn/classfun/droidvm/ui/disk/action/DiskActionPolicyTest.java
@@ -0,0 +1,31 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
+package cn.classfun.droidvm.ui.disk.action;
+
+import static org.junit.Assert.assertFalse;
+import static org.junit.Assert.assertTrue;
+
+import org.junit.Test;
+
+import cn.classfun.droidvm.R;
+
+public final class DiskActionPolicyTest {
+    @Test
+    public void contentMutationsRequireUnlockedImage() {
+        assertTrue(DiskActionDialog.modifiesDiskContent(R.id.menu_disk_resize));
+        assertTrue(DiskActionDialog.modifiesDiskContent(R.id.menu_disk_convert));
+        assertTrue(DiskActionDialog.modifiesDiskContent(R.id.menu_disk_optimize));
+        assertTrue(DiskActionDialog.modifiesDiskContent(R.id.menu_disk_change_password));
+    }
+
+    @Test
+    public void treeAwareAndReadSideActionsStayAvailable() {
+        assertFalse(DiskActionDialog.modifiesDiskContent(R.id.menu_disk_create_increment));
+        assertFalse(DiskActionDialog.modifiesDiskContent(R.id.menu_disk_merge));
+        assertFalse(DiskActionDialog.modifiesDiskContent(R.id.menu_disk_flatten));
+        assertFalse(DiskActionDialog.modifiesDiskContent(R.id.menu_disk_show_info));
+        assertFalse(DiskActionDialog.modifiesDiskContent(R.id.menu_disk_clone));
+        assertFalse(DiskActionDialog.modifiesDiskContent(R.id.menu_disk_delete));
+    }
+}
diff --git a/app/src/test/java/cn/classfun/droidvm/ui/disk/action/DiskDependencyUpdaterTest.java b/app/src/test/java/cn/classfun/droidvm/ui/disk/action/DiskDependencyUpdaterTest.java
new file mode 100644
index 000000000..d799900e1
--- /dev/null
+++ b/app/src/test/java/cn/classfun/droidvm/ui/disk/action/DiskDependencyUpdaterTest.java
@@ -0,0 +1,131 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
+package cn.classfun.droidvm.ui.disk.action;
+
+import static org.junit.Assert.assertEquals;
+import static org.junit.Assert.assertFalse;
+import static org.junit.Assert.assertTrue;
+
+import org.junit.Test;
+
+import java.util.List;
+import java.util.Set;
+import java.util.UUID;
+
+import cn.classfun.droidvm.lib.store.base.DataItem;
+import cn.classfun.droidvm.ui.disk.tree.AttachmentCursor;
+import cn.classfun.droidvm.ui.disk.tree.CursorPlan;
+import cn.classfun.droidvm.ui.disk.tree.TreeShape;
+
+public final class DiskDependencyUpdaterTest {
+    private static final UUID VM = UUID.randomUUID();
+    private static final UUID R = UUID.randomUUID();
+    private static final UUID C = UUID.randomUUID();
+    private static final UUID D = UUID.randomUUID();
+
+    private static DataItem slot(String path, boolean readOnly) {
+        var slot = DataItem.newObject();
+        slot.set("path", path);
+        slot.set("readonly", readOnly);
+        return slot;
+    }
+
+    /** R -> C -> D. */
+    private static TreeShape chain() {
+        return TreeShape.empty()
+            .put(R, "/r.qcow2", "r.qcow2", null)
+            .put(C, "/c.qcow2", "c.qcow2", R)
+            .put(D, "/d.qcow2", "d.qcow2", C);
+    }
+
+    private static AttachmentCursor at(int slot, TreeShape shape, UUID node, boolean ro) {
+        return new AttachmentCursor(AttachmentCursor.Kind.PERSISTED, VM, "vm", slot, node,
+            shape.pathOf(node), ro, false);
+    }
+
+    @Test
+    public void mergeMovesOnlyDirectOverlaySlotsAndLocksTheBase() {
+        var disks = DataItem.newArray();
+        disks.append(slot("/c.qcow2", false));
+        disks.append(slot("/d.qcow2", false));
+        var before = chain();
+        var plan = CursorPlan.reconcile(
+            List.of(at(0, before, C, false), at(1, before, D, false)),
+            List.of(), before, before.withMerged(C));
+
+        assertTrue(DiskDependencyUpdater.applyToDisks(disks, plan.persistedChanges()));
+
+        assertEquals("/r.qcow2", disks.get(0).optString("path", ""));
+        assertTrue("R now carries D", disks.get(0).optBoolean("readonly", false));
+        assertEquals("/d.qcow2", disks.get(1).optString("path", ""));
+        assertFalse(disks.get(1).optBoolean("readonly", false));
+    }
+
+    @Test
+    public void deleteRedirectsEverySubtreeSlotToSelectedNodesParent() {
+        var disks = DataItem.newArray();
+        disks.append(slot("/c.qcow2", false));
+        disks.append(slot("/d.qcow2", true));
+        disks.append(slot("/other.qcow2", false));
+        var before = chain();
+        var plan = CursorPlan.reconcile(
+            List.of(at(0, before, C, false), at(1, before, D, true)),
+            List.of(), before, before.without(before.subtreeOf(C)));
+
+        assertTrue(DiskDependencyUpdater.applyToDisks(disks, plan.persistedChanges()));
+
+        assertEquals("/r.qcow2", disks.get(0).optString("path", ""));
+        assertEquals("/r.qcow2", disks.get(1).optString("path", ""));
+        // Two slots on one disk: both read-only now.
+        assertTrue(disks.get(0).optBoolean("readonly", false));
+        assertTrue(disks.get(1).optBoolean("readonly", false));
+        assertEquals("/other.qcow2", disks.get(2).optString("path", ""));
+    }
+
+    @Test
+    public void deletingRootRemovesOnlyAffectedSlotsHighestFirst() {
+        var disks = DataItem.newArray();
+        disks.append(slot("/r.qcow2", false));
+        disks.append(slot("/keep.qcow2", true));
+        disks.append(slot("/d.qcow2", false));
+        var before = chain();
+        var plan = CursorPlan.reconcile(
+            List.of(at(0, before, R, false), at(2, before, D, false)),
+            List.of(), before, before.without(Set.of(R, C, D)));
+
+        assertTrue(DiskDependencyUpdater.applyToDisks(disks, plan.persistedChanges()));
+
+        assertEquals(1, disks.size());
+        assertEquals("/keep.qcow2", disks.get(0).optString("path", ""));
+    }
+
+    @Test
+    public void slotChangedSincePlanningIsLeftAlone() {
+        var disks = DataItem.newArray();
+        disks.append(slot("/somewhere-else.qcow2", false));
+        var before = chain();
+        var plan = CursorPlan.reconcile(
+            List.of(at(0, before, C, false)),
+            List.of(), before, before.without(before.subtreeOf(C)));
+
+        assertFalse(DiskDependencyUpdater.applyToDisks(disks, plan.persistedChanges()));
+
+        assertEquals("/somewhere-else.qcow2", disks.get(0).optString("path", ""));
+    }
+
+    @Test
+    public void readonlyIsNeverTakenAway() {
+        var disks = DataItem.newArray();
+        disks.append(slot("/c.qcow2", true));
+        var before = chain().without(Set.of(D)); // R -> C, C a leaf
+        var plan = CursorPlan.reconcile(
+            List.of(at(0, before, C, true)),
+            List.of(), before, before.without(Set.of(C)));
+
+        assertTrue(DiskDependencyUpdater.applyToDisks(disks, plan.persistedChanges()));
+
+        assertEquals("/r.qcow2", disks.get(0).optString("path", ""));
+        assertTrue(disks.get(0).optBoolean("readonly", false));
+    }
+}
diff --git a/app/src/test/java/cn/classfun/droidvm/ui/disk/tree/CursorPlanTest.java b/app/src/test/java/cn/classfun/droidvm/ui/disk/tree/CursorPlanTest.java
new file mode 100644
index 000000000..0b2c3245c
--- /dev/null
+++ b/app/src/test/java/cn/classfun/droidvm/ui/disk/tree/CursorPlanTest.java
@@ -0,0 +1,297 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
+package cn.classfun.droidvm.ui.disk.tree;
+
+import static org.junit.Assert.assertEquals;
+import static org.junit.Assert.assertFalse;
+import static org.junit.Assert.assertNull;
+import static org.junit.Assert.assertSame;
+import static org.junit.Assert.assertTrue;
+
+import org.junit.Test;
+
+import java.util.List;
+import java.util.Set;
+import java.util.UUID;
+
+import cn.classfun.droidvm.ui.disk.tree.AttachmentCursor.Kind;
+
+public final class CursorPlanTest {
+    private static final UUID R = UUID.randomUUID();
+    private static final UUID C1 = UUID.randomUUID();
+    private static final UUID C2 = UUID.randomUUID();
+    private static final UUID D1 = UUID.randomUUID();
+    private static final UUID N = UUID.randomUUID();
+
+    /** R -> C1 -> D1, R -> C2. */
+    private static TreeShape family() {
+        return TreeShape.empty()
+            .put(R, "/r.qcow2", "r.qcow2", null)
+            .put(C1, "/c1.qcow2", "c1.qcow2", R)
+            .put(D1, "/d1.qcow2", "d1.qcow2", C1)
+            .put(C2, "/c2.qcow2", "c2.qcow2", R);
+    }
+
+    private static AttachmentCursor cursor(
+        Kind kind, String vm, int slot, TreeShape shape, UUID node, boolean ro, boolean pinned) {
+        return new AttachmentCursor(kind, UUID.randomUUID(), vm, slot, node,
+            shape.pathOf(node), ro, pinned);
+    }
+
+    private static AttachmentCursor persisted(String vm, TreeShape s, UUID node, boolean ro) {
+        return cursor(Kind.PERSISTED, vm, 0, s, node, ro, false);
+    }
+
+    @Test
+    public void deleteClimbsToParentAndLocksUnderRemainingSibling() {
+        var before = family();
+        var after = before.without(before.subtreeOf(C2));
+        var a = persisted("a", before, C2, false);
+
+        var plan = CursorPlan.reconcile(List.of(a), List.of(), before, after);
+
+        assertFalse(plan.isRefused());
+        assertEquals(1, plan.changes.size());
+        var to = plan.changes.get(0).to;
+        assertEquals(R, to.nodeId);
+        assertEquals("/r.qcow2", to.path);
+        assertTrue("R still has C1 under it", to.readonly);
+        assertTrue(plan.changes.get(0).moved());
+    }
+
+    @Test
+    public void deleteOntoALeafParentKeepsWritable() {
+        var before = TreeShape.empty()
+            .put(R, "/r.qcow2", "r.qcow2", null)
+            .put(C1, "/c1.qcow2", "c1.qcow2", R);
+        var after = before.without(Set.of(C1));
+        var a = persisted("a", before, C1, false);
+
+        var plan = CursorPlan.reconcile(List.of(a), List.of(), before, after);
+
+        assertEquals(R, plan.cursors.get(0).nodeId);
+        assertFalse(plan.cursors.get(0).readonly);
+    }
+
+    @Test
+    public void climbsSeveralLevelsWhenIntermediatesAreGone() {
+        var before = family();
+        var after = before.without(before.subtreeOf(C1)); // C1 and D1 go
+        var a = persisted("a", before, D1, false);
+
+        var plan = CursorPlan.reconcile(List.of(a), List.of(), before, after);
+
+        assertEquals(R, plan.cursors.get(0).nodeId);
+    }
+
+    @Test
+    public void rootDeleteClearsEveryCursor() {
+        var before = family();
+        var after = before.without(before.familyOf(D1));
+        var a = persisted("a", before, D1, false);
+        var b = persisted("b", before, R, true);
+
+        var plan = CursorPlan.reconcile(List.of(a, b), List.of(), before, after);
+
+        assertEquals(2, plan.changes.size());
+        for (var c : plan.changes) {
+            assertTrue(c.cleared());
+            assertNull(c.to.path);
+        }
+    }
+
+    @Test
+    public void twoCursorsMeetingOnOneNodeAreBothReadonly() {
+        // b already sits on R (read-only, R is a base); a arrives from C2 after its delete and
+        // R becomes a leaf - yet two holders means a is forced read-only too.
+        var before = TreeShape.empty()
+            .put(R, "/r.qcow2", "r.qcow2", null)
+            .put(C2, "/c2.qcow2", "c2.qcow2", R);
+        var after = before.without(Set.of(C2));
+        var a = persisted("a", before, C2, false);
+        var b = persisted("b", before, R, true);
+
+        var plan = CursorPlan.reconcile(List.of(a, b), List.of(), before, after);
+
+        assertEquals(1, plan.changes.size());
+        var change = plan.changes.get(0);
+        assertSame(a, change.from);
+        assertEquals(R, change.to.nodeId);
+        assertTrue(change.to.readonly);
+        assertTrue(change.readonlyForced());
+    }
+
+    @Test
+    public void twoWritersAlreadySharingAreForcedEvenWithoutAMove() {
+        var shape = TreeShape.empty().put(R, "/r.qcow2", "r.qcow2", null);
+        var a = persisted("a", shape, R, false);
+        var b = persisted("b", shape, R, false);
+
+        var plan = CursorPlan.reconcile(List.of(a, b), List.of(), shape, shape);
+
+        assertEquals(2, plan.changes.size());
+        for (var c : plan.changes) {
+            assertFalse(c.moved());
+            assertTrue(c.readonlyForced());
+        }
+    }
+
+    @Test
+    public void fixedCursorsCountTowardsSharing() {
+        var before = TreeShape.empty()
+            .put(R, "/r.qcow2", "r.qcow2", null)
+            .put(C2, "/c2.qcow2", "c2.qcow2", R);
+        var after = before.without(Set.of(C2));
+        var a = persisted("a", before, C2, false);
+        var fixedOnR = persisted("b", after, R, true);
+
+        var plan = CursorPlan.reconcile(List.of(a), List.of(fixedOnR), before, after);
+
+        assertTrue(plan.cursors.get(0).readonly);
+    }
+
+    @Test
+    public void shadowDoesNotDoubleCountItsEditorRow() {
+        var shape = TreeShape.empty().put(R, "/r.qcow2", "r.qcow2", null);
+        var vmId = UUID.randomUUID();
+        var live = new AttachmentCursor(Kind.ACTIVE, vmId, "a", 0, R, "/r.qcow2", false, false);
+        var shadow = new AttachmentCursor(Kind.SHADOW, vmId, "a", 0, R, "/r.qcow2", false, false);
+
+        var plan = CursorPlan.reconcile(List.of(live, shadow), List.of(), shape, shape);
+
+        assertTrue(plan.changes.isEmpty());
+    }
+
+    @Test
+    public void twoEditorRowsOnOneDiskAreBothForced() {
+        var shape = TreeShape.empty().put(R, "/r.qcow2", "r.qcow2", null);
+        var row0 = new AttachmentCursor(Kind.ACTIVE, null, "new", 0, R, "/r.qcow2", false, false);
+        var row1 = new AttachmentCursor(Kind.EDITOR, null, "new", 1, R, "/r.qcow2", false, false);
+
+        var plan = CursorPlan.reconcile(List.of(row0, row1), List.of(), shape, shape);
+
+        assertEquals(2, plan.liveChanges().size());
+        assertTrue(plan.persistedChanges().isEmpty());
+        assertTrue(plan.cursors.get(0).readonly);
+        assertTrue(plan.cursors.get(1).readonly);
+    }
+
+    @Test
+    public void mergeMovesOnlyDirectHoldersOntoTheBase() {
+        var before = TreeShape.empty()
+            .put(R, "/r.qcow2", "r.qcow2", null)
+            .put(C1, "/c1.qcow2", "c1.qcow2", R)
+            .put(D1, "/d1.qcow2", "d1.qcow2", C1);
+        var after = before.withMerged(C1);
+        var onC1 = persisted("a", before, C1, true);
+        var onD1 = persisted("b", before, D1, false);
+
+        var plan = CursorPlan.reconcile(List.of(onC1, onD1), List.of(), before, after);
+
+        assertEquals(1, plan.changes.size());
+        assertEquals(R, plan.changes.get(0).to.nodeId);
+        assertTrue("R now carries D1", plan.changes.get(0).to.readonly);
+        assertEquals(D1, plan.cursors.get(1).nodeId);
+        assertEquals(R, after.parentOf(D1));
+    }
+
+    @Test
+    public void firstOverlayUnderALeafTakesWritableCursorsAlong() {
+        var before = TreeShape.empty().put(R, "/r.qcow2", "r.qcow2", null);
+        var after = before.withChild(N, "/n.qcow2", "n.qcow2", R);
+        var a = persisted("a", before, R, false);
+
+        var plan = CursorPlan.reconcile(List.of(a), List.of(), before, after);
+
+        assertEquals(1, plan.changes.size());
+        var to = plan.changes.get(0).to;
+        assertEquals(N, to.nodeId);
+        assertEquals("/n.qcow2", to.path);
+        assertFalse("the new leaf is the cursor's alone", to.readonly);
+    }
+
+    @Test
+    public void readonlyCursorStaysOnTheNewBase() {
+        var before = TreeShape.empty().put(R, "/r.qcow2", "r.qcow2", null);
+        var after = before.withChild(N, "/n.qcow2", "n.qcow2", R);
+        var a = persisted("a", before, R, true);
+
+        var plan = CursorPlan.reconcile(List.of(a), List.of(), before, after);
+
+        assertTrue(plan.changes.isEmpty());
+        assertEquals(R, plan.cursors.get(0).nodeId);
+    }
+
+    @Test
+    public void anotherOverlayUnderABaseMovesNothing() {
+        var before = TreeShape.empty()
+            .put(R, "/r.qcow2", "r.qcow2", null)
+            .put(C1, "/c1.qcow2", "c1.qcow2", R);
+        var after = before.withChild(N, "/n.qcow2", "n.qcow2", R);
+        var a = persisted("a", before, R, true);
+
+        var plan = CursorPlan.reconcile(List.of(a), List.of(), before, after);
+
+        assertTrue(plan.changes.isEmpty());
+    }
+
+    @Test
+    public void flattenMovesNothing() {
+        var before = family();
+        var after = before.withDetached(C1);
+        var a = persisted("a", before, D1, false);
+        var b = persisted("b", before, C1, true);
+
+        var plan = CursorPlan.reconcile(List.of(a, b), List.of(), before, after);
+
+        assertTrue(plan.changes.isEmpty());
+        assertNull(after.parentOf(C1));
+    }
+
+    @Test
+    public void pinnedCursorThatWouldChangeRefusesThePlan() {
+        var before = family();
+        var after = before.without(before.subtreeOf(C2));
+        var a = cursor(Kind.PERSISTED, "a", 0, before, C2, false, true);
+
+        var plan = CursorPlan.reconcile(List.of(a), List.of(), before, after);
+
+        assertTrue(plan.isRefused());
+        assertSame(a, plan.refused.get(0));
+        assertSame("left untouched", a, plan.cursors.get(0));
+        assertTrue(plan.changes.isEmpty());
+    }
+
+    @Test
+    public void pinnedCursorElsewhereDoesNotRefuse() {
+        var before = family();
+        var after = before.without(before.subtreeOf(C2));
+        var pinnedOnD1 = cursor(Kind.PERSISTED, "a", 0, before, D1, false, true);
+        var b = persisted("b", before, C2, false);
+
+        var plan = CursorPlan.reconcile(List.of(pinnedOnD1, b), List.of(), before, after);
+
+        assertFalse(plan.isRefused());
+        assertEquals(1, plan.changes.size());
+        assertSame(b, plan.changes.get(0).from);
+    }
+
+    @Test
+    public void announcedAndPersistedSplitByKind() {
+        var before = family();
+        var after = before.without(before.subtreeOf(C2));
+        var vmId = UUID.randomUUID();
+        var active = new AttachmentCursor(Kind.ACTIVE, vmId, "a", 0, C2, "/c2.qcow2", false, false);
+        var shadow = new AttachmentCursor(Kind.SHADOW, vmId, "a", 0, C2, "/c2.qcow2", false, false);
+        var other = persisted("b", before, C2, false);
+
+        var plan = CursorPlan.reconcile(List.of(active, shadow, other), List.of(), before, after);
+
+        assertEquals(3, plan.changes.size());
+        assertEquals(1, plan.liveChanges().size());
+        assertEquals(2, plan.persistedChanges().size());
+        assertEquals(1, plan.announcedChanges().size());
+        assertSame(other, plan.announcedChanges().get(0).from);
+    }
+}

From d54b9e0ae07f10cfa6fbebbd4968e0c8a762c082 Mon Sep 17 00:00:00 2001
From: HuJK <gh@hujk.org>
Date: Sun, 30 Aug 2026 13:37:10 +0800
Subject: [PATCH 130/182] vm: the platform odds -- host CPU name, game mode,
 per-VM environment, boot plans

Four small things that share nothing except the VM they configure.

The guest is told the real host CPU. crosvm forwards --smbios processor-version
through FDT /chosen and EDK2 publishes it as SMBIOS Type 4, so a UEFI guest
shows "Qualcomm Snapdragon 8 Elite" rather than the firmware default "Gunyah
vCPU". Game mode is declared so the platform raises CPU and GPU clocks for a
running VM instead of treating it as a background app. Per-VM environment
variables are read out of the config and applied to the crosvm process.

BootPlan stops being one constructor with nine positional arguments where four
of them are always empty. There are two kinds of plan -- UEFI firmware plus
vars, or a kernel plus initrd plus cmdline -- and each now has a constructor
that takes only its own fields, so a plan cannot be built half in one mode and
half in the other. The swiotlb size travels with the plan for the same reason:
it is a property of how the VM boots, not of the display or the GPU.

Co-authored-by: lateautumn233 <lateautumn233@foxmail.com>
---
 app/src/main/AndroidManifest.xml              |  1 +
 .../droidvm/daemon/server/ServerContext.java  |  7 ++-
 .../classfun/droidvm/daemon/vm/BootPlan.java  | 46 +++++++++-----
 .../droidvm/daemon/vm/VMBackendInstance.java  | 22 +++++++
 .../droidvm/daemon/vm/VMInstanceStore.java    |  9 ++-
 .../vm/backend/CrosvmBackendInstance.java     | 13 ++++
 .../daemon/vm/backend/HostSocName.java        | 53 ++++++++++++++++
 .../droidvm/lib/perf/GamePerfHint.java        | 63 +++++++++++++++++++
 .../display/VMNativeDisplayActivity.java      | 15 +++++
 .../vm/display/vnc/base/BaseVncActivity.java  | 15 +++++
 .../main/res/layout/partial_vm_edit_basic.xml | 20 ++++++
 11 files changed, 244 insertions(+), 20 deletions(-)
 create mode 100644 app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/HostSocName.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/lib/perf/GamePerfHint.java

diff --git a/app/src/main/AndroidManifest.xml b/app/src/main/AndroidManifest.xml
index 6b8fb04e8..3d0396203 100644
--- a/app/src/main/AndroidManifest.xml
+++ b/app/src/main/AndroidManifest.xml
@@ -16,6 +16,7 @@
     <application
         android:name=".DroidVMApp"
         android:allowBackup="true"
+        android:appCategory="game"
         android:dataExtractionRules="@xml/data_extraction_rules"
         android:fullBackupContent="@xml/backup_rules"
         android:icon="@mipmap/ic_launcher"
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/server/ServerContext.java b/app/src/main/java/cn/classfun/droidvm/daemon/server/ServerContext.java
index 82c8e9c54..e810f3198 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/server/ServerContext.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/server/ServerContext.java
@@ -37,10 +37,13 @@ public final class ServerContext {
     public ServerContext() {
         Log.i(TAG, "loading config files...");
         var filesDir = pathJoin(DATA_DIR, "files");
-        vms.load(new File(filesDir, vms.getFileName()));
+        // Networks first, and wire the store in BEFORE loading VMs: loading builds each VMInstance
+        // against a throwaway store (see VMInstanceStore.createEmpty), so the link has to exist by
+        // then or the instances never see it.
         networks.load(new File(filesDir, networks.getFileName()));
-        Log.i(TAG, fmt("config files loaded: %d VMs, %d networks", vms.size(), networks.size()));
         vms.setNetworkStore(networks);
+        vms.load(new File(filesDir, vms.getFileName()));
+        Log.i(TAG, fmt("config files loaded: %d VMs, %d networks", vms.size(), networks.size()));
         // Strays survive a daemon crash or a forced (SIGKILL) takeover: the
         // children are orphaned, not killed. Reap any left over from a previous
         // daemon before we start fresh and auto-up. VM backends are matched by
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/vm/BootPlan.java b/app/src/main/java/cn/classfun/droidvm/daemon/vm/BootPlan.java
index 1edd152c1..aec2be1f9 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/vm/BootPlan.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/vm/BootPlan.java
@@ -80,15 +80,33 @@ public final class BootPlan {
     /** Image mode: a pinned/override entry was not found, default used. */
     public final boolean entryFallback;
 
-    private BootPlan(
-        boolean uefi, @NonNull String firmware, @NonNull String vars,
-        boolean varsEnabled, @NonNull String kernel, @NonNull String initrd,
-        @NonNull String cmdline, @Nullable String entryTitle, boolean entryFallback
-    ) {
-        this.uefi = uefi;
+    /**
+     * A UEFI plan: firmware and vars, and nothing to direct-boot. Empty paths mean the builtins.
+     */
+    private BootPlan(@NonNull String firmware, @NonNull String vars, boolean varsEnabled) {
+        this.uefi = true;
         this.firmware = firmware;
         this.vars = vars;
         this.varsEnabled = varsEnabled;
+        this.kernel = "";
+        this.initrd = "";
+        this.cmdline = "";
+        this.entryTitle = null;
+        this.entryFallback = false;
+    }
+
+    /**
+     * A direct-boot plan: a kernel, an initrd and a cmdline, and no firmware. The entry fields are
+     * image mode's, and stay null/false for a manual or built-in-kernel boot.
+     */
+    private BootPlan(
+        @NonNull String kernel, @NonNull String initrd, @NonNull String cmdline,
+        @Nullable String entryTitle, boolean entryFallback
+    ) {
+        this.uefi = false;
+        this.firmware = "";
+        this.vars = "";
+        this.varsEnabled = false;
         this.kernel = kernel;
         this.initrd = initrd;
         this.cmdline = cmdline;
@@ -127,18 +145,13 @@ public static BootPlan resolve(
             return resolveBuiltin(config, boot);
         if (boot.getProtocol() == BootConfig.Protocol.UEFI)
             return new BootPlan(
-                true, boot.getUefiFirmware(), boot.getUefiVars(),
-                boot.isUefiVarsEnabled(), "", "", "", null, false
-            );
+                boot.getUefiFirmware(), boot.getUefiVars(), boot.isUefiVarsEnabled());
         if (boot.getLinuxSource() == BootConfig.LinuxSource.MANUAL) {
             var kernel = boot.getKernel();
             // pre-boot{} configs stored the EDK2 path as the kernel
             if (kernel.equals(PATH_EDK2_FIRMWARE))
-                return new BootPlan(true, "", "", false, "", "", "", null, false);
-            return new BootPlan(
-                false, "", "", false, kernel, boot.getInitrd(),
-                boot.getCmdline(), null, false
-            );
+                return new BootPlan("", "", false);
+            return new BootPlan(kernel, boot.getInitrd(), boot.getCmdline(), null, false);
         }
         return resolveImage(config, boot, entryOverrideId);
     }
@@ -156,8 +169,8 @@ public static BootPlan resolve(
     private static BootPlan resolveBuiltin(
         @NonNull VMConfig config, @NonNull BootConfig boot) {
         return new BootPlan(
-            false, "", "", false, PATH_BUILTIN_KERNEL, PATH_BUILTIN_INITRD,
-            builtinCmdline(config, boot), "DroidVM built-in kernel", false
+            PATH_BUILTIN_KERNEL, PATH_BUILTIN_INITRD, builtinCmdline(config, boot),
+            "DroidVM built-in kernel", false
         );
     }
 
@@ -228,7 +241,6 @@ else if (pinned != null)
         var initrd = new File(cacheDir, "initrd");
         var title = optStr(entry, "title");
         return new BootPlan(
-            false, "", "", false,
             new File(cacheDir, "kernel").getAbsolutePath(),
             initrd.exists() ? initrd.getAbsolutePath() : "",
             cmdline,
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/vm/VMBackendInstance.java b/app/src/main/java/cn/classfun/droidvm/daemon/vm/VMBackendInstance.java
index 79a8d3caa..879bd282e 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/vm/VMBackendInstance.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/vm/VMBackendInstance.java
@@ -24,6 +24,7 @@
 import cn.classfun.droidvm.daemon.console.ConsoleStream;
 import cn.classfun.droidvm.daemon.server.ServerContext;
 import cn.classfun.droidvm.lib.natives.NativeProcess;
+import cn.classfun.droidvm.lib.store.base.DataItem;
 import cn.classfun.droidvm.lib.store.vm.VMConfig;
 import cn.classfun.droidvm.lib.utils.FileUtils;
 
@@ -74,6 +75,26 @@ private void cleanUpMemory() {
         run("echo 1 > /proc/sys/vm/compact_memory");
     }
 
+    private void applyConfiguredEnvironment(@NonNull NativeProcess.Builder builder) {
+        var environment = config.item.opt("environment_variables", DataItem.newArray());
+        if (environment == null || !environment.is(DataItem.Type.ARRAY)) return;
+        for (var entry : environment.asArray()) {
+            if (entry == null || !entry.is(DataItem.Type.STRING)) continue;
+            var raw = entry.asString().trim();
+            var separator = raw.indexOf('=');
+            if (separator <= 0) {
+                Log.w(TAG, "Ignoring invalid VM environment variable entry");
+                continue;
+            }
+            var key = raw.substring(0, separator).trim();
+            if (key.isEmpty()) {
+                Log.w(TAG, "Ignoring VM environment variable with an empty name");
+                continue;
+            }
+            builder.environment(key, raw.substring(separator + 1));
+        }
+    }
+
     protected void prepareProcess(@NonNull NativeProcess.Builder builder) {
         String[] preload = {
             pathJoin(DATA_DIR, "lib", "libsimpledump.so"),
@@ -81,6 +102,7 @@ protected void prepareProcess(@NonNull NativeProcess.Builder builder) {
         };
         builder.environment("LD_PRELOAD", String.join(":", preload));
         builder.environment("LD_LIBRARY_PATH", pathJoin(DATA_DIR, "usr", "lib"));
+        applyConfiguredEnvironment(builder);
         builder.maxOpenFiles(65536);
         builder.maxLockedMemory(RLIM_INFINITY);
         cleanUpMemory();
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/vm/VMInstanceStore.java b/app/src/main/java/cn/classfun/droidvm/daemon/vm/VMInstanceStore.java
index 00f05dd59..a0f8a7649 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/vm/VMInstanceStore.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/vm/VMInstanceStore.java
@@ -167,7 +167,14 @@ protected VMInstance create(@NonNull JSONObject obj) throws JSONException {
     @NonNull
     @Override
     protected DataStore<VMInstance> createEmpty() {
-        return new VMInstanceStore(context);
+        var store = new VMInstanceStore(context);
+        // DataStore.load() parses into this throwaway store and then replace()s the items over,
+        // but each VMInstance keeps the store it was constructed with -- so whatever the loaded
+        // instances need to reach through their store has to be inherited here, or it is null for
+        // the rest of their life. That is how a VM with NICs ended up failing to start with
+        // "has networks but no network store".
+        store.networkStore = networkStore;
+        return store;
     }
 
     @NonNull
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/CrosvmBackendInstance.java b/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/CrosvmBackendInstance.java
index b3ac0b841..b356f9c71 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/CrosvmBackendInstance.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/CrosvmBackendInstance.java
@@ -211,6 +211,11 @@ private List<String> buildCommand() {
             default:
                 break;
         }
+        var swiotlbMb = item.optLong("swiotlb_mb", 0);
+        if (swiotlbMb > 0) {
+            args.add("--swiotlb");
+            args.add(String.valueOf(swiotlbMb));
+        }
         var boot = BootPlan.of(config);
         if (!boot.initrd.isEmpty()) {
             args.add("--initrd");
@@ -224,6 +229,14 @@ private List<String> buildCommand() {
             args.add("--socket");
             args.add(controlSocketPath);
         }
+        // Real host CPU name for the guest: crosvm forwards it via FDT /chosen and EDK2 publishes
+        // it as SMBIOS Type 4 processor version, so UEFI guests (Windows) show e.g.
+        // "Qualcomm Snapdragon 8 Elite" instead of the firmware default "Gunyah vCPU".
+        var socName = HostSocName.get();
+        if (socName != null) {
+            args.add("--smbios");
+            args.add(fmt("processor-version=%s", socName));
+        }
         buildDiskCommand(args);
         buildNetCommand(args);
         buildSharedDirCommand(args);
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/HostSocName.java b/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/HostSocName.java
new file mode 100644
index 000000000..3f45bc7da
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/HostSocName.java
@@ -0,0 +1,53 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
+package cn.classfun.droidvm.daemon.vm.backend;
+
+import android.util.Log;
+
+import androidx.annotation.Nullable;
+
+import cn.classfun.droidvm.BuildConfig;
+import cn.classfun.droidvm.daemon.display.DaemonSystemContext;
+import cn.classfun.droidvm.lib.data.QcomChipName;
+
+/**
+ * Resolves the host SoC marketing name (e.g. "Qualcomm Snapdragon 8 Elite") inside the daemon so
+ * VM backends can forward it to guest firmware ({@code crosvm --smbios processor-version=...} ->
+ * FDT /chosen -> EDK2 SMBIOS Type 4), letting Windows show the real CPU name instead of the
+ * firmware's built-in "Gunyah vCPU".
+ *
+ * The lookup table lives in the app's {@code res/xml/qcom.xml}; the daemon reaches it through a
+ * package context created from its system context. Falls back to the raw SoC model string
+ * (e.g. "SM8750P") when resources are unavailable, and to null when even getprop yields nothing.
+ */
+public final class HostSocName {
+    private static final String TAG = "HostSocName";
+    private static String cached;
+    private static boolean resolved;
+
+    private HostSocName() {
+    }
+
+    @Nullable
+    public static synchronized String get() {
+        if (resolved) return cached;
+        resolved = true;
+        try {
+            var soc = QcomChipName.getCurrentSoC();
+            if (soc == null || soc.trim().isEmpty()) return cached = null;
+            soc = soc.trim();
+            cached = soc;
+            var sys = DaemonSystemContext.get();
+            if (sys != null) {
+                var appCtx = sys.createPackageContext(BuildConfig.APPLICATION_ID, 0);
+                var name = new QcomChipName(appCtx).lookupChipName(soc);
+                if (name != null && !name.trim().isEmpty())
+                    cached = name.trim();
+            }
+        } catch (Throwable t) {
+            Log.w(TAG, "failed to resolve host SoC name", t);
+        }
+        return cached;
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/perf/GamePerfHint.java b/app/src/main/java/cn/classfun/droidvm/lib/perf/GamePerfHint.java
new file mode 100644
index 000000000..bdc0a0736
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/lib/perf/GamePerfHint.java
@@ -0,0 +1,63 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
+package cn.classfun.droidvm.lib.perf;
+
+import android.app.GameManager;
+import android.app.GameState;
+import android.content.Context;
+import android.os.Build;
+import android.util.Log;
+
+import androidx.annotation.NonNull;
+
+/**
+ * Declares a heavy, uninterruptible 3D workload to the platform while a VM display is in the
+ * foreground, so the device's own power policy raises CPU/GPU clocks -- the sanctioned way.
+ *
+ * <p>Why this exists: the Adreno {@code msm-adreno-tz} governor parks the GPU at its minimum clock
+ * under the bursty, latency-coupled gfxstream render pattern. Measured on an 8 Elite: a guest 3D
+ * workload registers only ~55% GPU busy at 160MHz (of 1100MHz), so the throughput-oriented
+ * governor never ramps up -- the GPU runs ~7x slower than it could, and a guest benchmark scores
+ * ~1800 instead of ~3900. Writing {@code /sys/class/kgsl/kgsl-3d0/devfreq/min_freq} fixes it, but
+ * that needs root and leaves a device-wide clock override that must be restored by hand. The
+ * platform path is a *declaration* instead: {@code android:appCategory="game"} in the manifest
+ * plus the {@link GameState} below, which feeds the OEM's game power profile.
+ *
+ * <p>Note on ADPF: the finer-grained {@link android.os.PerformanceHintManager} is deliberately not
+ * used here. It only accepts thread ids owned by the caller's uid, but crosvm is spawned by the
+ * root daemon (uid 0) while this code runs in the normal app process, so its threads cannot be
+ * registered. {@code GameState} is a device-level declaration, so the root-owned crosvm process
+ * still benefits from it. (A future option is for crosvm itself to open an ADPF session over its
+ * own render threads and report real frame durations, which is where per-frame accuracy would
+ * come from.)
+ */
+public final class GamePerfHint {
+    private static final String TAG = "GamePerfHint";
+
+    private GamePerfHint() {
+    }
+
+    /** Declares sustained heavy gameplay (a VM display is in the foreground and rendering). */
+    public static void enterGameplay(@NonNull Context context) {
+        setState(context, GameState.MODE_GAMEPLAY_UNINTERRUPTIBLE, "gameplay");
+    }
+
+    /** Clears the declaration when no VM display is in the foreground anymore. */
+    public static void exitGameplay(@NonNull Context context) {
+        setState(context, GameState.MODE_NONE, "none");
+    }
+
+    private static void setState(@NonNull Context context, int mode, @NonNull String what) {
+        // GameState landed in API 33, which is also our minSdk; keep the guard so a lower-API
+        // build (or a stripped OEM image without the service) degrades to a no-op.
+        if (Build.VERSION.SDK_INT < Build.VERSION_CODES.TIRAMISU) return;
+        try {
+            var manager = context.getSystemService(GameManager.class);
+            if (manager == null) return;
+            manager.setGameState(new GameState(false, mode));
+        } catch (Exception e) {
+            // Not fatal: without it we simply run at whatever clocks the governor picks.
+        }
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/display/nativedisplay/display/VMNativeDisplayActivity.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/nativedisplay/display/VMNativeDisplayActivity.java
index 2e9c70b6e..eb137a773 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/display/nativedisplay/display/VMNativeDisplayActivity.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/nativedisplay/display/VMNativeDisplayActivity.java
@@ -69,6 +69,7 @@
 import cn.classfun.droidvm.ui.vm.display.nativedisplay.input.EvdevEncoder;
 import cn.classfun.droidvm.ui.vm.display.nativedisplay.input.DirectInputSink;
 import cn.classfun.droidvm.ui.vm.display.nativedisplay.input.InputForwarder;
+import cn.classfun.droidvm.lib.perf.GamePerfHint;
 import cn.classfun.droidvm.lib.perf.SystemGestureGuard;
 import cn.classfun.droidvm.ui.vm.display.nativedisplay.input.NativeExtraKeysPanel;
 import cn.classfun.droidvm.ui.vm.display.nativedisplay.input.NativeKeyboardEditText;
@@ -1022,10 +1023,24 @@ public void onVMExited(UUID id, String vmName, int exitCode, JSONObject data) {
         });
     }
 
+    @Override
+    protected void onResume() {
+        super.onResume();
+        // A VM display is on screen and rendering: tell the platform this is sustained heavy
+        // gameplay so its power policy raises clocks (see GamePerfHint).
+        GamePerfHint.enterGameplay(this);
         // And keep the host's full-screen touch gestures (OEM three-finger screenshot etc.)
         // from eating multi-finger input meant for the guest (see SystemGestureGuard).
         SystemGestureGuard.enterDisplay();
+    }
+
+    @Override
+    protected void onPause() {
+        super.onPause();
+        GamePerfHint.exitGameplay(this);
         SystemGestureGuard.exitDisplay();
+    }
+
     @Override
     protected void onDestroy() {
         super.onDestroy();
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/display/vnc/base/BaseVncActivity.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/vnc/base/BaseVncActivity.java
index 5004071d0..158f353bc 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/display/vnc/base/BaseVncActivity.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/vnc/base/BaseVncActivity.java
@@ -49,6 +49,7 @@
 
 import cn.classfun.droidvm.R;
 import cn.classfun.droidvm.lib.daemon.DaemonConnection;
+import cn.classfun.droidvm.lib.perf.GamePerfHint;
 import cn.classfun.droidvm.lib.ui.ImeInsetsExempt;
 import cn.classfun.droidvm.ui.vm.display.base.DisplayExtraKeysPanel;
 import cn.classfun.droidvm.ui.vm.display.vnc.input.VncExtraKeysPanel;
@@ -154,6 +155,20 @@ protected void onCreate(Bundle savedInstanceState) {
         fetchVncInfoAndConnect();
     }
 
+    @Override
+    protected void onResume() {
+        super.onResume();
+        // A VM display is on screen and rendering: tell the platform this is sustained heavy
+        // gameplay so its power policy raises clocks (see GamePerfHint).
+        GamePerfHint.enterGameplay(this);
+    }
+
+    @Override
+    protected void onPause() {
+        super.onPause();
+        GamePerfHint.exitGameplay(this);
+    }
+
     @Override
     protected void onDestroy() {
         super.onDestroy();
diff --git a/app/src/main/res/layout/partial_vm_edit_basic.xml b/app/src/main/res/layout/partial_vm_edit_basic.xml
index 4489f872f..9a1319d4d 100644
--- a/app/src/main/res/layout/partial_vm_edit_basic.xml
+++ b/app/src/main/res/layout/partial_vm_edit_basic.xml
@@ -177,6 +177,26 @@
 
         </com.google.android.material.textfield.TextInputLayout>
 
+        <com.google.android.material.textfield.TextInputLayout
+            android:id="@+id/til_environment_variables"
+            style="@style/Widget.Material3.TextInputLayout.OutlinedBox"
+            android:layout_width="match_parent"
+            android:layout_height="wrap_content"
+            android:hint="@string/create_vm_environment_variables_hint">
+
+            <com.google.android.material.textfield.TextInputEditText
+                android:id="@+id/et_environment_variables"
+                android:layout_width="match_parent"
+                android:layout_height="wrap_content"
+                android:gravity="top"
+                android:inputType="text|textMultiLine"
+                android:minLines="3"
+                android:textSize="14sp"
+                android:layout_marginStart="24dp"
+                android:layout_marginEnd="24dp" />
+
+        </com.google.android.material.textfield.TextInputLayout>
+
     </cn.classfun.droidvm.ui.widgets.container.CollapsibleContainer>
 
 </LinearLayout>

From ba7030b0a7b4c197786fec240735b321fdb80eed Mon Sep 17 00:00:00 2001
From: HuJK <gh@hujk.org>
Date: Sun, 30 Aug 2026 13:37:11 +0800
Subject: [PATCH 131/182] settings: a kernel module manager, and a huge-page
 panel that admits what it drives

The modules this app ships have to be matched to the kernel that is running
before they can be loaded, and the matching is not a substring test: KMI
directories are picked by exact version token, because 6.1 matching 6.12 loads
a module built for the wrong ABI and the failure arrives later, as a kernel
oops. match.json holds the rules and SocIdentity supplies the SoC half.
Autostart is only armed for a module that has actually been seen loaded, so a
module that fails once does not fail on every boot from then on. Each module
gets a description page, shipped with the module rather than written into the
app, so the answer to "what is this and why would I load it" is in one place.

The huge-page panel is a front end for gh-hugepage-reserve, an external Magisk
module, and that is worth saying plainly: it reads and writes that project's
settings.prop and its sysfs, branches on its v6/v7 differences, and links to
its releases page. When the module is absent the whole panel is off -- nothing
here fabricates a reserve. The advanced screen exposes the five knobs the GUI
cannot decide on the user's behalf, and an empty field means the module's own
default rather than zero.

PoolPreflight is the reason the panel matters to a VM that is starting.
Starting into the reserve's refill gap makes the hypervisor take movable memory
and migrate it out of CMA instead, which has been seen as a multi-minute
whole-host stall ending in the kernel OOM-killing crosvm, and as "qcom_scm:
Assign memory protection call failed -22", which resets the device. The
preflight sizes a VM against the free pool -- guest RAM, swiotlb, and the
route's GPU pools -- in the module's own unit of 2 MB pages, and refuses before
any of that can happen.
---
 app/src/main/AndroidManifest.xml              |   6 +
 .../assets/descr/gh_hugepage_reserve.html     | 211 ++++++++++++
 app/src/main/assets/descr/style.css           | 326 ++++++++++++++++++
 app/src/main/assets/match.json                |  18 +
 .../java/cn/classfun/droidvm/DroidVMApp.java  |   6 +
 .../droidvm/daemon/server/ServerContext.java  |   9 +
 .../droidvm/daemon/vm/VMInstance.java         |  54 ++-
 .../droidvm/daemon/vm/VMInstanceStore.java    |  13 +-
 .../droidvm/lib/data/SocIdentity.java         | 129 +++++++
 .../droidvm/lib/hugepage/PoolPreflight.java   | 215 ++++++++++++
 .../droidvm/ui/hugepage/HugePageActivity.java |  82 +++--
 .../ui/hugepage/HugePageAdvancedActivity.java | 258 ++++++++++++++
 .../droidvm/ui/hugepage/HugePageModel.java    | 144 +++++++-
 .../settings/KernelModuleDescriptions.java    | 213 ++++++++++++
 .../ui/main/settings/KernelModuleDialog.java  | 102 ++++++
 .../settings/KernelModuleListController.java  | 212 ++++++++++++
 .../ui/main/settings/KernelModuleManager.java | 216 ++++++++++++
 .../ui/main/settings/KernelModuleMatch.java   | 267 ++++++++++++++
 .../main/settings/KernelModuleWhyDialog.java  |  86 +++++
 .../main/settings/MainSettingsFragment.java   |   7 +
 .../droidvm/ui/setup/SetupActivity.java       |  37 +-
 .../setup/step/KernelModuleStepFragment.java  |  90 +++++
 .../cn/classfun/droidvm/ui/vm/VMActions.java  |  59 ++++
 .../ui/widgets/row/RowTouchFeedback.java      |  37 ++
 .../ui/widgets/row/ShrinkToFitRow.java        |  95 +++++
 .../ui/widgets/row/SwitchRowWidget.java       |  11 +
 .../droidvm/ui/widgets/row/TextRowWidget.java |   1 +
 app/src/main/res/layout/activity_hugepage.xml |  11 +
 .../res/layout/activity_hugepage_advanced.xml |  74 ++++
 .../res/layout/dialog_hugepage_advanced.xml   |  56 +++
 .../main/res/layout/dialog_kernel_modules.xml |  44 +++
 .../main/res/layout/dialog_module_descr.xml   |  16 +
 .../res/layout/fragment_main_settings.xml     |   8 +
 .../res/layout/fragment_setup_step_kmod.xml   |  33 ++
 .../main/res/layout/item_kernel_module.xml    | 137 ++++++++
 35 files changed, 3232 insertions(+), 51 deletions(-)
 create mode 100644 app/src/main/assets/descr/gh_hugepage_reserve.html
 create mode 100644 app/src/main/assets/descr/style.css
 create mode 100644 app/src/main/assets/match.json
 create mode 100644 app/src/main/java/cn/classfun/droidvm/lib/data/SocIdentity.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/lib/hugepage/PoolPreflight.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/ui/hugepage/HugePageAdvancedActivity.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/ui/main/settings/KernelModuleDescriptions.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/ui/main/settings/KernelModuleDialog.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/ui/main/settings/KernelModuleListController.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/ui/main/settings/KernelModuleManager.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/ui/main/settings/KernelModuleMatch.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/ui/main/settings/KernelModuleWhyDialog.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/ui/setup/step/KernelModuleStepFragment.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/ui/widgets/row/RowTouchFeedback.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/ui/widgets/row/ShrinkToFitRow.java
 create mode 100644 app/src/main/res/layout/activity_hugepage_advanced.xml
 create mode 100644 app/src/main/res/layout/dialog_hugepage_advanced.xml
 create mode 100644 app/src/main/res/layout/dialog_kernel_modules.xml
 create mode 100644 app/src/main/res/layout/dialog_module_descr.xml
 create mode 100644 app/src/main/res/layout/fragment_setup_step_kmod.xml
 create mode 100644 app/src/main/res/layout/item_kernel_module.xml

diff --git a/app/src/main/AndroidManifest.xml b/app/src/main/AndroidManifest.xml
index 3d0396203..8610d4788 100644
--- a/app/src/main/AndroidManifest.xml
+++ b/app/src/main/AndroidManifest.xml
@@ -219,6 +219,12 @@
             android:theme="@style/Theme.DroidVM.NoActionBar"
             android:windowSoftInputMode="adjustNothing" />
 
+        <activity
+            android:name=".ui.hugepage.HugePageAdvancedActivity"
+            android:configChanges="orientation|screenSize|keyboardHidden|screenLayout|smallestScreenSize"
+            android:exported="false"
+            android:theme="@style/Theme.DroidVM.NoActionBar"
+            android:windowSoftInputMode="adjustNothing" />
 
         <activity
             android:name=".ui.hugepage.HugePageProcessActivity"
diff --git a/app/src/main/assets/descr/gh_hugepage_reserve.html b/app/src/main/assets/descr/gh_hugepage_reserve.html
new file mode 100644
index 000000000..824a7191c
--- /dev/null
+++ b/app/src/main/assets/descr/gh_hugepage_reserve.html
@@ -0,0 +1,211 @@
+<!doctype html>
+<html>
+<head>
+<meta charset="utf-8">
+<meta name="viewport" content="width=device-width, initial-scale=1">
+<link rel="stylesheet" href="style.css">
+<title>GH-Hugepage-Reserve</title>
+</head>
+<body>
+
+<!-- The figure closes each language's "why" section, so it is written once per
+     language block. Keep the three SVG copies identical; only the caption differs.
+     The circled numbers in the drawing are the caption list's numbers. -->
+
+<div class="i18n" data-lang="en">
+    <section>
+        <h2>Why it's needed</h2>
+        <p>A Gunyah VM's memory has to be supplied as 2MB huge pages — each one a single contiguous block. The system, though, normally hands out memory in 4KB small pages, many of which can never be moved once placed.</p>
+        <p>The longer the phone runs, the more those small pages scatter, and the fewer places remain where a full 2MB block can still be assembled. By the time a VM boots there are often not enough huge pages left, and it fails with Out of memory.</p>
+        <figure>
+            <svg viewBox="0 0 300 106" role="img">
+                <circle class="edge" cx="8" cy="13" r="7"/>
+                <text class="lbl" x="8" y="16.5" text-anchor="middle">1</text>
+                <rect class="free" x="20" y="4" width="280" height="18" rx="3"/>
+                <rect class="used" x="20" y="4" width="70" height="18"/>
+                <rect class="want" x="104" y="2" width="56" height="22" rx="3"/>
+
+                <circle class="edge" cx="8" cy="51" r="7"/>
+                <text class="lbl" x="8" y="54.5" text-anchor="middle">2</text>
+                <rect class="free" x="20" y="42" width="280" height="18" rx="3"/>
+                <g class="used">
+                    <rect x="20" y="42" width="28" height="18"/>
+                    <rect x="60" y="42" width="6" height="18"/>
+                    <rect x="96" y="42" width="6" height="18"/>
+                    <rect x="132" y="42" width="6" height="18"/>
+                    <rect x="168" y="42" width="6" height="18"/>
+                    <rect x="204" y="42" width="6" height="18"/>
+                    <rect x="240" y="42" width="6" height="18"/>
+                    <rect x="276" y="42" width="6" height="18"/>
+                </g>
+                <rect class="miss" x="104" y="40" width="56" height="22" rx="3"/>
+
+                <circle class="edge" cx="8" cy="89" r="7"/>
+                <text class="lbl" x="8" y="92.5" text-anchor="middle">3</text>
+                <rect class="free" x="20" y="80" width="280" height="18" rx="3"/>
+                <rect class="pool" x="104" y="80" width="56" height="18"/>
+                <g class="used">
+                    <rect x="20" y="80" width="42" height="18"/>
+                    <rect x="74" y="80" width="4" height="18"/>
+                    <rect x="88" y="80" width="4" height="18"/>
+                    <rect x="170" y="80" width="4" height="18"/>
+                    <rect x="196" y="80" width="4" height="18"/>
+                    <rect x="222" y="80" width="4" height="18"/>
+                    <rect x="248" y="80" width="4" height="18"/>
+                    <rect x="274" y="80" width="4" height="18"/>
+                </g>
+                <rect class="hold" x="104" y="78" width="56" height="22" rx="3"/>
+            </svg>
+            <figcaption>
+                The dashed frame is the same 2MB huge page in all three rows, and all three have the same amount of memory in use — only its layout differs.
+                <ol>
+                    <li>Fresh boot: what is in use sits packed at the left, so that stretch is whole. Blue: the VM gets its page.</li>
+                    <li>Later: only part of it is still packed, the rest has crumbled into slivers spread across everything. Orange: no 2MB fits anywhere.</li>
+                    <li>With the reserve: memory is just as broken up, but the reserve keeps that stretch whole. Green: the page was set aside before the crumbling started.</li>
+                </ol>
+                <span class="legend"><span><i class="sw-used"></i>in use</span><span><i class="sw-free"></i>free</span><span><i class="sw-pool"></i>reserve</span></span>
+            </figcaption>
+        </figure>
+    </section>
+    <section>
+        <h2>What it does</h2>
+        <p>Right after boot, while memory is still whole, it takes and holds a batch of 2MB huge pages — the amount is adjustable on the management screen. A booting VM is served straight from that reserve, and when the VM shuts down the pages are recovered into the pool for reuse.</p>
+    </section>
+    <section>
+        <h2>Note</h2>
+        <p>This module has to load very early in boot, before memory fragments, so it is installed separately as a Magisk / KernelSU / APatch module rather than being loaded by this app.</p>
+    </section>
+</div>
+
+<div class="i18n" data-lang="zh-CN">
+    <section>
+        <h2>原因</h2>
+        <p>Gunyah VM 的内存必须以 2MB 的大页来供应，每一个都是一整块连续的内存。但系统平常是以 4KB 的小页在分配内存，而且其中不少一旦放下就不能再搬动。</p>
+        <p>开机越久，这些小页越是四处散落，能凑出完整 2MB 的位置就越来越少；到 VM 要开机时，往往已经凑不齐足够的大页，只能失败并显示 Out of memory。</p>
+        <figure>
+            <svg viewBox="0 0 300 106" role="img">
+                <circle class="edge" cx="8" cy="13" r="7"/>
+                <text class="lbl" x="8" y="16.5" text-anchor="middle">1</text>
+                <rect class="free" x="20" y="4" width="280" height="18" rx="3"/>
+                <rect class="used" x="20" y="4" width="70" height="18"/>
+                <rect class="want" x="104" y="2" width="56" height="22" rx="3"/>
+
+                <circle class="edge" cx="8" cy="51" r="7"/>
+                <text class="lbl" x="8" y="54.5" text-anchor="middle">2</text>
+                <rect class="free" x="20" y="42" width="280" height="18" rx="3"/>
+                <g class="used">
+                    <rect x="20" y="42" width="28" height="18"/>
+                    <rect x="60" y="42" width="6" height="18"/>
+                    <rect x="96" y="42" width="6" height="18"/>
+                    <rect x="132" y="42" width="6" height="18"/>
+                    <rect x="168" y="42" width="6" height="18"/>
+                    <rect x="204" y="42" width="6" height="18"/>
+                    <rect x="240" y="42" width="6" height="18"/>
+                    <rect x="276" y="42" width="6" height="18"/>
+                </g>
+                <rect class="miss" x="104" y="40" width="56" height="22" rx="3"/>
+
+                <circle class="edge" cx="8" cy="89" r="7"/>
+                <text class="lbl" x="8" y="92.5" text-anchor="middle">3</text>
+                <rect class="free" x="20" y="80" width="280" height="18" rx="3"/>
+                <rect class="pool" x="104" y="80" width="56" height="18"/>
+                <g class="used">
+                    <rect x="20" y="80" width="42" height="18"/>
+                    <rect x="74" y="80" width="4" height="18"/>
+                    <rect x="88" y="80" width="4" height="18"/>
+                    <rect x="170" y="80" width="4" height="18"/>
+                    <rect x="196" y="80" width="4" height="18"/>
+                    <rect x="222" y="80" width="4" height="18"/>
+                    <rect x="248" y="80" width="4" height="18"/>
+                    <rect x="274" y="80" width="4" height="18"/>
+                </g>
+                <rect class="hold" x="104" y="78" width="56" height="22" rx="3"/>
+            </svg>
+            <figcaption>
+                虚线框在三行都是同一个 2MB 大页，三行的已使用总量也一样多，差别只在分布。
+                <ol>
+                    <li>刚开机：已使用的都挤在左边，这一段是完整的。蓝色：VM 要得到。</li>
+                    <li>用久了：只剩一部分还集中，其余碎成细条散落各处。橙色：哪里都塞不下 2MB。</li>
+                    <li>有保留池：内存一样零碎，但保留池把这一段整块留住。绿色：这个大页在碎掉之前就先留下来了。</li>
+                </ol>
+                <span class="legend"><span><i class="sw-used"></i>已使用</span><span><i class="sw-free"></i>空闲</span><span><i class="sw-pool"></i>保留池</span></span>
+            </figcaption>
+        </figure>
+    </section>
+    <section>
+        <h2>功能</h2>
+        <p>趁刚开机、内存还完整的时候，先抢下一批 2MB 大页并保留起来（数量可在管理页调整）。VM 开机时直接从保留池供应；VM 关机归还后，页面回收回池中，重复使用。</p>
+    </section>
+    <section>
+        <h2>备注</h2>
+        <p>这个模块必须在开机很早期就加载（否则内存已经碎了），所以以 Magisk / KernelSU / APatch 模块的形式另外安装，而不是由本 App 加载。</p>
+    </section>
+</div>
+
+<div class="i18n" data-lang="zh-TW">
+    <section>
+        <h2>原因</h2>
+        <p>Gunyah VM 的記憶體必須以 2MB 的大頁來供應，每一個都是一整塊連續的記憶體。但系統平常是以 4KB 的小頁在配置記憶體，而且其中不少一旦放下就不能再搬動。</p>
+        <p>開機越久，這些小頁越是四處散落，能湊出完整 2MB 的位置就越來越少；到 VM 要開機時，往往已經湊不齊足夠的大頁，只能失敗並顯示 Out of memory。</p>
+        <figure>
+            <svg viewBox="0 0 300 106" role="img">
+                <circle class="edge" cx="8" cy="13" r="7"/>
+                <text class="lbl" x="8" y="16.5" text-anchor="middle">1</text>
+                <rect class="free" x="20" y="4" width="280" height="18" rx="3"/>
+                <rect class="used" x="20" y="4" width="70" height="18"/>
+                <rect class="want" x="104" y="2" width="56" height="22" rx="3"/>
+
+                <circle class="edge" cx="8" cy="51" r="7"/>
+                <text class="lbl" x="8" y="54.5" text-anchor="middle">2</text>
+                <rect class="free" x="20" y="42" width="280" height="18" rx="3"/>
+                <g class="used">
+                    <rect x="20" y="42" width="28" height="18"/>
+                    <rect x="60" y="42" width="6" height="18"/>
+                    <rect x="96" y="42" width="6" height="18"/>
+                    <rect x="132" y="42" width="6" height="18"/>
+                    <rect x="168" y="42" width="6" height="18"/>
+                    <rect x="204" y="42" width="6" height="18"/>
+                    <rect x="240" y="42" width="6" height="18"/>
+                    <rect x="276" y="42" width="6" height="18"/>
+                </g>
+                <rect class="miss" x="104" y="40" width="56" height="22" rx="3"/>
+
+                <circle class="edge" cx="8" cy="89" r="7"/>
+                <text class="lbl" x="8" y="92.5" text-anchor="middle">3</text>
+                <rect class="free" x="20" y="80" width="280" height="18" rx="3"/>
+                <rect class="pool" x="104" y="80" width="56" height="18"/>
+                <g class="used">
+                    <rect x="20" y="80" width="42" height="18"/>
+                    <rect x="74" y="80" width="4" height="18"/>
+                    <rect x="88" y="80" width="4" height="18"/>
+                    <rect x="170" y="80" width="4" height="18"/>
+                    <rect x="196" y="80" width="4" height="18"/>
+                    <rect x="222" y="80" width="4" height="18"/>
+                    <rect x="248" y="80" width="4" height="18"/>
+                    <rect x="274" y="80" width="4" height="18"/>
+                </g>
+                <rect class="hold" x="104" y="78" width="56" height="22" rx="3"/>
+            </svg>
+            <figcaption>
+                虛線框在三行都是同一個 2MB 大頁，三行的已使用總量也一樣多，差別只在分布。
+                <ol>
+                    <li>剛開機：已使用的都擠在左邊，這一段是完整的。藍色：VM 要得到。</li>
+                    <li>用久了：只剩一部分還集中，其餘碎成細條散落各處。橘色：哪裡都塞不下 2MB。</li>
+                    <li>有保留池：記憶體一樣零碎，但保留池把這一段整塊留住。綠色：這個大頁在碎掉之前就先留下來了。</li>
+                </ol>
+                <span class="legend"><span><i class="sw-used"></i>已使用</span><span><i class="sw-free"></i>空閒</span><span><i class="sw-pool"></i>保留池</span></span>
+            </figcaption>
+        </figure>
+    </section>
+    <section>
+        <h2>功能</h2>
+        <p>趁剛開機、記憶體還完整的時候，先搶下一批 2MB 大頁並保留起來（數量可在管理頁調整）。VM 開機時直接從保留池供應；VM 關機歸還後，頁面回收回池中，重複使用。</p>
+    </section>
+    <section>
+        <h2>備註</h2>
+        <p>這個模組必須在開機很早期就載入（否則記憶體已經碎了），所以以 Magisk / KernelSU / APatch 模組的形式另外安裝，而不是由本 App 載入。</p>
+    </section>
+</div>
+
+</body>
+</html>
diff --git a/app/src/main/assets/descr/style.css b/app/src/main/assets/descr/style.css
new file mode 100644
index 000000000..7e0bfe9b4
--- /dev/null
+++ b/app/src/main/assets/descr/style.css
@@ -0,0 +1,326 @@
+/*
+ * Shared stylesheet for the module description pages.
+ *
+ * THIS FILE IS THE AUTHORITY. 6_build_apk_prepare.sh copies it into the app at
+ * DroidVM/app/src/main/assets/descr/style.css, which is what actually renders on
+ * device (the app injects it inline; nothing is fetched at runtime). The copy is
+ * checked in so the app still builds without this repo -- edit it here, not there.
+ *
+ * The app injects, ahead of this file:
+ *   :root { --surface, --on-surface, --on-surface-variant, --primary, --error,
+ *           --outline, --surface-variant }   <- the live Material theme, so pages
+ *                                               follow dark mode and Material You
+ *   html[data-theme="dark"|"light"]
+ *   .i18n display rules selecting one language
+ *
+ * Opening a page straight in a browser therefore shows ALL languages stacked and
+ * the fallback palette below -- which is what you want when proofreading.
+ */
+
+:root {
+    --surface: #fdfcff;
+    --on-surface: #1a1c1e;
+    --on-surface-variant: #43474e;
+    --surface-variant: #e0e2ec;
+    --primary: #345ca8;
+    --error: #ba1a1a;
+    --outline: #74777f;
+}
+
+/*
+ * Traffic-light colours for what a request met: available / unavailable / held.
+ * Deliberately NOT taken from the app's palette -- under Material You --primary
+ * can be any hue, and "blue means you get it, orange means you don't" has to
+ * survive that. Only the greys and surfaces follow the theme.
+ */
+:root {
+    --fit: #1565c0;
+    --nofit: #b45309;
+    --held: #2e7d32;
+}
+
+/* Browser-preview only: on device the app states the theme outright, below. */
+@media (prefers-color-scheme: dark) {
+    :root {
+        --surface: #1a1c1e;
+        --on-surface: #e2e2e6;
+        --on-surface-variant: #c3c6cf;
+        --surface-variant: #43474e;
+        --primary: #adc6ff;
+        --error: #ffb4ab;
+        --outline: #8d9199;
+        --fit: #9fc5ff;
+        --nofit: #ffb877;
+        --held: #7edb96;
+    }
+}
+
+/*
+ * The app stamps data-theme on <html>, and that is the authority: a WebView's own
+ * idea of dark need not match the app's. Both directions are spelled out because
+ * either has to beat the media query above. Theme colours are absent here on
+ * purpose -- the app injects those as :root variables, and an attribute selector
+ * would outrank them and undo Material You.
+ */
+html[data-theme="dark"] {
+    --fit: #9fc5ff;
+    --nofit: #ffb877;
+    --held: #7edb96;
+}
+
+html[data-theme="light"] {
+    --fit: #1565c0;
+    --nofit: #b45309;
+    --held: #2e7d32;
+}
+
+* {
+    box-sizing: border-box;
+}
+
+body {
+    margin: 0;
+    padding: 0 2px 8px;
+    background: var(--surface);
+    color: var(--on-surface);
+    font-family: system-ui, sans-serif;
+    font-size: 15px;
+    line-height: 1.65;
+    /* The dialog is narrow; never let a long token push a sideways scrollbar. */
+    overflow-wrap: anywhere;
+}
+
+h2 {
+    margin: 18px 0 6px;
+    font-size: 15px;
+    font-weight: 600;
+    color: var(--primary);
+}
+
+section:first-of-type h2 {
+    margin-top: 2px;
+}
+
+p {
+    margin: 0 0 10px;
+}
+
+code {
+    font-family: ui-monospace, monospace;
+    font-size: 0.92em;
+    padding: 1px 4px;
+    border-radius: 4px;
+    background: var(--surface-variant);
+}
+
+/* Anything the text enumerates is a list, not a run-on sentence with numbers in it.
+   In a caption the list is what maps the drawing's rows to words, so it inherits the
+   caption's smaller type rather than resetting it. */
+ol, ul {
+    margin: 0 0 10px;
+    padding-left: 1.4em;
+}
+
+li {
+    margin-bottom: 5px;
+}
+
+li:last-child {
+    margin-bottom: 0;
+}
+
+/* ---- figures ---------------------------------------------------------- */
+
+/* Figures close a "why" section: the words first, then the picture that settles them. */
+figure {
+    margin: 14px 0 4px;
+    padding: 12px;
+    border: 1px solid var(--outline);
+    border-radius: 12px;
+}
+
+figure svg {
+    display: block;
+    width: 100%;
+    height: auto;
+}
+
+figcaption {
+    margin-top: 8px;
+    font-size: 13px;
+    line-height: 1.5;
+    color: var(--on-surface-variant);
+}
+
+/* SVG text and shape roles. Diagrams are drawn in theme colours only -- no
+   hardcoded ink -- so they stay legible when the app flips to dark. */
+svg .lbl {
+    font: 500 9px system-ui, sans-serif;
+    fill: var(--on-surface-variant);
+}
+
+svg .lbl-strong {
+    font: 600 9.5px system-ui, sans-serif;
+    fill: var(--on-surface);
+}
+
+svg .used {
+    fill: var(--on-surface-variant);
+}
+
+svg .free {
+    fill: var(--surface-variant);
+}
+
+svg .keep {
+    fill: var(--primary);
+}
+
+svg .bad {
+    fill: var(--error);
+}
+
+svg .edge {
+    fill: none;
+    stroke: var(--outline);
+    stroke-width: 1;
+}
+
+svg .edge-strong {
+    fill: none;
+    stroke: var(--primary);
+    stroke-width: 1.5;
+}
+
+/* A request that cannot be satisfied, drawn over the memory it would need. */
+svg .miss {
+    fill: none;
+    stroke: var(--nofit);
+    stroke-width: 1.5;
+    stroke-dasharray: 4 3;
+}
+
+/* A request already covered by memory set aside for it, and that memory. */
+svg .hold {
+    fill: none;
+    stroke: var(--held);
+    stroke-width: 1.5;
+    stroke-dasharray: 4 3;
+}
+
+svg .pool {
+    fill: var(--held);
+    fill-opacity: 0.3;
+}
+
+/* A request that can be satisfied, drawn over the memory it will use. */
+svg .want {
+    fill: none;
+    stroke: var(--fit);
+    stroke-width: 1.5;
+    stroke-dasharray: 4 3;
+}
+
+svg .dash {
+    fill: none;
+    stroke: var(--outline);
+    stroke-width: 1.2;
+    stroke-dasharray: 4 3;
+}
+
+svg .x-mark {
+    fill: none;
+    stroke: var(--nofit);
+    stroke-width: 2;
+    stroke-linecap: round;
+}
+
+svg .ok-mark {
+    fill: none;
+    stroke: var(--fit);
+    stroke-width: 2;
+    stroke-linecap: round;
+    stroke-linejoin: round;
+}
+
+svg .arrow {
+    fill: var(--primary);
+}
+
+svg .box {
+    fill: var(--surface-variant);
+}
+
+/* ---- three-mode table (udmabuf) --------------------------------------- */
+
+table {
+    width: 100%;
+    margin: 10px 0;
+    border-collapse: collapse;
+    font-size: 13.5px;
+}
+
+th, td {
+    padding: 6px 8px;
+    text-align: left;
+    vertical-align: top;
+    border-bottom: 1px solid var(--outline);
+}
+
+th {
+    font-weight: 600;
+    color: var(--on-surface-variant);
+}
+
+tr:last-child td {
+    border-bottom: none;
+}
+
+/* ---- language sections ------------------------------------------------ */
+
+.i18n + .i18n {
+    margin-top: 28px;
+    padding-top: 20px;
+    border-top: 2px dashed var(--outline);
+}
+
+/* What the shades in a figure mean. Swatches are the same variables the SVG uses,
+   so a legend cannot drift from the drawing it explains. */
+.legend {
+    display: flex;
+    flex-wrap: wrap;
+    gap: 4px 14px;
+    margin-top: 8px;
+    font-size: 12.5px;
+}
+
+.legend span {
+    white-space: nowrap;
+}
+
+.legend i {
+    display: inline-block;
+    width: 12px;
+    height: 12px;
+    margin-right: 5px;
+    border-radius: 3px;
+    vertical-align: -1px;
+}
+
+.legend .sw-used {
+    background: var(--on-surface-variant);
+}
+
+.legend .sw-free {
+    background: var(--surface-variant);
+}
+
+.legend .sw-keep {
+    background: var(--primary);
+}
+
+.legend .sw-pool {
+    background: var(--held);
+    opacity: 0.5;
+}
+
diff --git a/app/src/main/assets/match.json b/app/src/main/assets/match.json
new file mode 100644
index 000000000..cc28fa025
--- /dev/null
+++ b/app/src/main/assets/match.json
@@ -0,0 +1,18 @@
+{
+  "version": 1,
+  "modules": {
+    "gh_hugepage_reserve": { "soc_vendor": ["qualcomm"] },
+    "gunyah_host_share": { "soc_vendor": ["qualcomm"] },
+    "gunyah_kvcalloc": { "soc_vendor": ["qualcomm"] },
+    "gh_unmovable": { "soc_vendor": ["qualcomm"] },
+    "udmabuf": { "comment": "generic dma-buf provider/repair, nothing Gunyah about it: any SoC" },
+    "nproc_guard": { "comment": "no-reboot rescue for the per-uid RLIMIT_NPROC ucounts desync that wedges the app; loaded by the daemon with uid=<app uid>. Any SoC." }
+  },
+  "names": {
+    "gunyah_host_share": "Gunyah Host Share",
+    "gunyah_kvcalloc": "Gunyah kvcalloc Fix",
+    "gh_unmovable": "GH Unmovable",
+    "udmabuf": "Udmabuf Fix",
+    "nproc_guard": "NPROC Guard"
+  }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/DroidVMApp.java b/app/src/main/java/cn/classfun/droidvm/DroidVMApp.java
index eaa088420..c913ca39a 100644
--- a/app/src/main/java/cn/classfun/droidvm/DroidVMApp.java
+++ b/app/src/main/java/cn/classfun/droidvm/DroidVMApp.java
@@ -16,6 +16,7 @@
 import cn.classfun.droidvm.lib.store.vm.VMStore;
 import cn.classfun.droidvm.lib.ui.ImeInsetsApplier;
 import cn.classfun.droidvm.lib.utils.ThreadUtils;
+import cn.classfun.droidvm.ui.main.settings.KernelModuleManager;
 
 public final class DroidVMApp extends Application {
     private static final String TAG = "DroidVMApp";
@@ -33,6 +34,11 @@ public void onCreate() {
             initializeStore(new VMStore());
             initializeStore(new DiskStore());
             initializeStore(new NetworkStore());
+            try {
+                KernelModuleManager.applyAutostart(this);
+            } catch (Exception e) {
+                Log.w(TAG, "kernel module autostart failed", e);
+            }
         });
     }
 
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/server/ServerContext.java b/app/src/main/java/cn/classfun/droidvm/daemon/server/ServerContext.java
index e810f3198..89114e21a 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/server/ServerContext.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/server/ServerContext.java
@@ -20,6 +20,7 @@
 
 import cn.classfun.droidvm.daemon.network.NetworkInstanceStore;
 import cn.classfun.droidvm.daemon.network.backend.DefaultRouterWatcher;
+import cn.classfun.droidvm.daemon.vm.VMInstance;
 import cn.classfun.droidvm.daemon.vm.VMInstanceStore;
 import cn.classfun.droidvm.daemon.vm.pkg.VMExportTask;
 import cn.classfun.droidvm.daemon.vm.pkg.VMImportTask;
@@ -33,6 +34,14 @@ public final class ServerContext {
     private final Map<UUID, VMExportTask> exportTasks = new ConcurrentHashMap<>();
     private final Map<UUID, VMImportTask> importTasks = new ConcurrentHashMap<>();
     public DataItem appConfig = DataItem.newObject();
+    /**
+     * Where VM events go. Here rather than on the store because loading vms.json builds every
+     * VMInstance against a throwaway store (see VMInstanceStore.createEmpty) and the callback is
+     * installed after the load -- so a store-owned field reached none of the VMs that existed at
+     * startup, which is all of them, and every state change, reboot and exit was fired into a
+     * null. The context is the one object both stores share, so putting it here cannot go stale.
+     */
+    public volatile VMInstance.VMEventCallback vmEventCallback = null;
 
     public ServerContext() {
         Log.i(TAG, "loading config files...");
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/vm/VMInstance.java b/app/src/main/java/cn/classfun/droidvm/daemon/vm/VMInstance.java
index e54d1790f..0a45c3ce9 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/vm/VMInstance.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/vm/VMInstance.java
@@ -27,6 +27,7 @@
 import cn.classfun.droidvm.daemon.console.ConsoleStream;
 import cn.classfun.droidvm.daemon.vm.backend.BackendBase;
 import cn.classfun.droidvm.lib.data.CrosvmExit;
+import cn.classfun.droidvm.lib.hugepage.PoolPreflight;
 import cn.classfun.droidvm.lib.natives.NativeProcess;
 import cn.classfun.droidvm.lib.natives.UnixHelper;
 import cn.classfun.droidvm.lib.store.base.DataItem;
@@ -50,6 +51,10 @@ public final class VMInstance extends VMConfig {
     private BootPlan bootPlan;
     private String bootEntryOverride;
     private volatile boolean rebootRequested = false;
+    /** Set while a start that failed on unpinnable memory is being tried a second time. */
+    private volatile boolean pinRetryUsed = false;
+    /** A run this long counts as "the VM started", re-arming the one-shot pin retry. */
+    private static final long PIN_RETRY_RESET_MS = 60_000;
 
     // Delay before relaunching on reboot: lets the kernel settle same-name TAP
     // teardown/recreate and throttles a guest reboot-loop (no restart cap).
@@ -116,7 +121,7 @@ private void setState(@NonNull VMState newState) {
     }
 
     private void fireEvent(@NonNull String event, @Nullable JSONObject extra) {
-        var cb = store.eventCallback;
+        var cb = store.context.vmEventCallback;
         if (cb == null) return;
         try {
             var data = new JSONObject();
@@ -412,7 +417,9 @@ private void runVM() {
                 startReaderThread(vmId, stream);
         }
         setState(VMState.RUNNING);
+        long ranFrom = System.currentTimeMillis();
         int code = process.waitFor();
+        long ranForMs = System.currentTimeMillis() - ranFrom;
         for (var stream : inst.streams.values()) {
             var reader = stream.getReaderThread();
             if (reader != null && reader.isAlive()) {
@@ -433,6 +440,24 @@ private void runVM() {
         // A guest-requested reset (crosvm exit 32) or a host-issued reboot both
         // relaunch the VM; an explicit user stop never does and wins over both.
         boolean wantRestart = !stoppedByUser && (code == CrosvmExit.RESET.getCode() || rebootRequested);
+        // ... and so does a start that died because the memory it was given could not be pinned.
+        // That is the VMM refusing to hand the hypervisor pages the host may still move, and it
+        // is worth exactly one more attempt: the condition is a moment in time (the reserve had
+        // not finished taking the previous VM's pages back, or the allocation drew from CMA), and
+        // measured on device the identical configuration started cleanly on the retry. Beyond one
+        // attempt it is not a moment, it is a shortage, and repeating would only hide it.
+        // RUNNING is set the moment the process is spawned, so it says nothing about whether the
+        // VM got off the ground: a pin refusal happens inside VM creation, seconds later. A start
+        // that lasted is what clears the one-shot, so a VM that ran for an hour and then died can
+        // still be retried, while a VM failing in three seconds cannot loop.
+        if (code == 0 || ranForMs > PIN_RETRY_RESET_MS) pinRetryUsed = false;
+        boolean pinFailure = !stoppedByUser && !wantRestart && code != 0 && !pinRetryUsed
+            && exitLogSuggestsPinFailure();
+        if (pinFailure) {
+            pinRetryUsed = true;
+            wantRestart = true;
+            Log.w(TAG, fmt("VM %s exited on unpinnable memory; retrying once", getName()));
+        }
         if (stoppedByUser && code != 0) {
             Log.i(TAG, fmt("VM %s stopped by user", getName()));
             exitCode = 0;
@@ -459,6 +484,22 @@ private void runVM() {
 
     // Relaunch off the worker thread: start() joins workerThread (this thread),
     // and the short sleep settles same-name TAP recreation before re-setup.
+    /**
+     * Whether this exit was the VMM refusing memory it could not pin (see crosvm's pin.rs).
+     *
+     * Read off the console rather than the exit code, because there is no distinct code for it:
+     * crosvm reports a plain failure to create the VM. The two lines below are the ones that
+     * distinguish it from every other start failure -- a bad disk path, a missing kernel -- which
+     * must not be retried.
+     */
+    private boolean exitLogSuggestsPinFailure() {
+        var stream = getStream("stdio");
+        if (stream == null) return false;
+        var log = stream.getBuffer();
+        if (log == null) return false;
+        return log.contains("GH-PIN[") && log.contains("cannot be long-term pinned");
+    }
+
     private void scheduleRelaunch() {
         var t = new Thread(() -> {
             try {
@@ -467,6 +508,17 @@ private void scheduleRelaunch() {
                 return;
             }
             if (state != VMState.REBOOTING) return; // user changed state meanwhile
+            // The VM we are relaunching has only just let go of its memory, and the huge-page
+            // reserve takes a few seconds to get it back. Relaunching into that gap is the one
+            // way a reboot turns into a dead VM: the pages come from ordinary movable memory
+            // instead, the VMM refuses to hand memory it cannot pin to the hypervisor, and the
+            // relaunch exits with ENOMEM (measured: reserve at 526 of 2542 pages when the
+            // relaunch started, full again nine seconds later). Nobody is watching a reboot, so
+            // it waits like any other background start -- see PoolPreflight.waitForPool.
+            if (!PoolPreflight.waitForPool(item, PoolPreflight.RELAUNCH_ATTEMPTS,
+                PoolPreflight.BACKGROUND_INTERVAL_MS, PoolPreflight.BACKGROUND_ACQUIRE_AT))
+                Log.w(TAG, fmt("VM %s relaunching with the reserve still short", getName()));
+            if (state != VMState.REBOOTING) return; // stopped while we waited
             if (!start()) {
                 Log.w(TAG, fmt("VM %s relaunch failed", getName()));
                 // Surface the failure as a real exit so attached consoles / UI stop
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/vm/VMInstanceStore.java b/app/src/main/java/cn/classfun/droidvm/daemon/vm/VMInstanceStore.java
index a0f8a7649..e42f589c4 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/vm/VMInstanceStore.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/vm/VMInstanceStore.java
@@ -17,6 +17,7 @@
 
 import java.util.ArrayList;
 
+import cn.classfun.droidvm.lib.hugepage.PoolPreflight;
 import cn.classfun.droidvm.daemon.network.NetworkInstanceStore;
 import cn.classfun.droidvm.daemon.server.ServerContext;
 import cn.classfun.droidvm.daemon.vm.backend.BackendBase;
@@ -28,7 +29,6 @@
 public final class VMInstanceStore extends DataStore<VMInstance> {
     private static final String TAG = "VMInstanceStore";
     public final ServerContext context;
-    volatile VMInstance.VMEventCallback eventCallback = null;
     NetworkInstanceStore networkStore;
 
     public VMInstanceStore(@NonNull ServerContext context) {
@@ -39,7 +39,7 @@ public VMInstanceStore(@NonNull ServerContext context) {
     }
 
     public void setEventCallback(@Nullable VMInstance.VMEventCallback cb) {
-        this.eventCallback = cb;
+        context.vmEventCallback = cb;
     }
 
     public void setNetworkStore(@Nullable NetworkInstanceStore networkStore) {
@@ -146,6 +146,15 @@ public void stopAll() {
     public void autoUp() {
         forEach((id, inst) -> {
             if (!inst.item.optBoolean("auto_up", false) || inst.getState() != VMState.STOPPED) return;
+            // Nobody is watching a background start, so instead of asking (which is what the GUI
+            // does) we wait for the huge-page reserve to cover this VM: a pool that is short only
+            // because the previous VM has just exited recovers in about two seconds, and starting
+            // into the gap is what makes the hypervisor migrate memory out of CMA -- observed to
+            // stall the whole host for minutes, or reset the phone. Half way through the wait we
+            // ask the module to go and fetch more. If it never gets there we start regardless:
+            // an auto-start that silently does not happen is worse than a slow one, and the VMM
+            // checks again at the point where it actually hands the memory over.
+            PoolPreflight.waitForPool(inst.item);
             Log.i(TAG, fmt("Auto-starting VM %s [%s]", inst.getName(), id));
             if (!inst.start())
                 Log.w(TAG, fmt("Failed to auto-start VM %s [%s]", inst.getName(), id));
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/data/SocIdentity.java b/app/src/main/java/cn/classfun/droidvm/lib/data/SocIdentity.java
new file mode 100644
index 000000000..7d7d5c822
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/lib/data/SocIdentity.java
@@ -0,0 +1,129 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
+package cn.classfun.droidvm.lib.data;
+
+import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
+
+import static cn.classfun.droidvm.lib.utils.RunUtils.runListQuiet;
+
+import android.os.Build;
+import android.util.Log;
+
+import androidx.annotation.NonNull;
+
+import java.util.Locale;
+
+/**
+ * Who made this device's SoC, as a stable token, plus its model string.
+ *
+ * <p>Used to decide which host kernel modules even apply here: a Gunyah module is meaningless on a
+ * MediaTek phone, and a future MediaTek module would be meaningless on a Snapdragon one. The token
+ * is the vocabulary the module match rules are written against, so it must stay stable ({@code
+ * qualcomm}, {@code mediatek}, {@code google}, {@code samsung}, {@code unisoc}, {@code hisilicon},
+ * or {@code unknown}) even as the detection below grows more fallbacks.
+ *
+ * <p>Detection starts with the framework's own answer, which needs no shell and no root, and only
+ * then falls back to properties and {@code /proc/cpuinfo} -- vendors do leave {@code
+ * ro.soc.manufacturer} unset. Results are cached: an SoC does not change under a running process.
+ */
+public final class SocIdentity {
+    private static final String TAG = "SocIdentity";
+
+    public static final String QUALCOMM = "qualcomm";
+    public static final String MEDIATEK = "mediatek";
+    public static final String GOOGLE = "google";
+    public static final String SAMSUNG = "samsung";
+    public static final String UNISOC = "unisoc";
+    public static final String HISILICON = "hisilicon";
+    public static final String UNKNOWN = "unknown";
+
+    private static String vendor;
+    private static String model;
+
+    private SocIdentity() {
+    }
+
+    /** Vendor token for this device, never null. May run a shell: call off the main thread. */
+    @NonNull
+    public static synchronized String vendor() {
+        if (vendor == null) {
+            vendor = detectVendor();
+            Log.i(TAG, fmt("SoC vendor: %s (model %s)", vendor, model()));
+        }
+        return vendor;
+    }
+
+    /** Raw SoC model (e.g. "SM8650", "MT6989", "gs201"), or "" when nothing reports one. */
+    @NonNull
+    public static synchronized String model() {
+        if (model == null) {
+            var m = QcomChipName.getCurrentSoC();  // falls back to Build.SOC_MODEL
+            model = m == null ? "" : m.trim();
+        }
+        return model;
+    }
+
+    @NonNull
+    private static String detectVendor() {
+        var fromBuild = fromName(Build.SOC_MANUFACTURER);
+        if (!UNKNOWN.equals(fromBuild)) return fromBuild;
+
+        var fromProp = fromName(prop("ro.soc.manufacturer"));
+        if (!UNKNOWN.equals(fromProp)) return fromProp;
+
+        // QTI-only property: its mere presence identifies the vendor.
+        if (!prop("ro.vendor.qti.soc_model").isEmpty()) return QUALCOMM;
+
+        var hw = prop("ro.hardware").toLowerCase(Locale.ROOT);
+        if (hw.equals("qcom") || hw.startsWith("qcom")) return QUALCOMM;
+        if (hw.startsWith("mt")) return MEDIATEK;
+
+        var fromCpuinfo = fromName(hardwareLine());
+        if (!UNKNOWN.equals(fromCpuinfo)) return fromCpuinfo;
+
+        // Last resort: the model string's own family prefix.
+        var m = model().toUpperCase(Locale.ROOT);
+        if (m.matches("^(SM|SDM|QCS|QCM|MSM|APQ)\\d.*")) return QUALCOMM;
+        if (m.startsWith("MT")) return MEDIATEK;
+        if (m.startsWith("GS") || m.startsWith("ZUMA")) return GOOGLE;
+        if (m.startsWith("EXYNOS") || m.startsWith("S5E")) return SAMSUNG;
+        return UNKNOWN;
+    }
+
+    /** Map whatever a vendor calls itself onto our token. */
+    @NonNull
+    private static String fromName(String raw) {
+        if (raw == null) return UNKNOWN;
+        var s = raw.trim().toLowerCase(Locale.ROOT);
+        if (s.isEmpty() || s.equals("unknown")) return UNKNOWN;
+        if (s.contains("qualcomm") || s.equals("qti") || s.contains("qti ")) return QUALCOMM;
+        if (s.contains("mediatek") || s.contains("mtk")) return MEDIATEK;
+        if (s.contains("google")) return GOOGLE;
+        if (s.contains("samsung") || s.contains("exynos")) return SAMSUNG;
+        if (s.contains("unisoc") || s.contains("spreadtrum")) return UNISOC;
+        if (s.contains("hisilicon") || s.contains("kirin") || s.contains("huawei"))
+            return HISILICON;
+        return UNKNOWN;
+    }
+
+    @NonNull
+    private static String prop(@NonNull String key) {
+        try {
+            return runListQuiet("getprop", key).getOutString().trim();
+        } catch (Exception e) {
+            return "";
+        }
+    }
+
+    /** The {@code Hardware :} line of /proc/cpuinfo, which often names the vendor outright. */
+    @NonNull
+    private static String hardwareLine() {
+        try {
+            var r = runListQuiet("grep", "-m1", "^Hardware", "/proc/cpuinfo");
+            return r.getOutString().trim();
+        } catch (Exception e) {
+            return "";
+        }
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/hugepage/PoolPreflight.java b/app/src/main/java/cn/classfun/droidvm/lib/hugepage/PoolPreflight.java
new file mode 100644
index 000000000..f0180be50
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/lib/hugepage/PoolPreflight.java
@@ -0,0 +1,215 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
+package cn.classfun.droidvm.lib.hugepage;
+
+import static cn.classfun.droidvm.lib.utils.FileUtils.shellCheckExists;
+import static cn.classfun.droidvm.lib.utils.FileUtils.shellReadFile;
+import static cn.classfun.droidvm.lib.utils.RunUtils.run;
+import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
+import static cn.classfun.droidvm.lib.utils.StringUtils.pathJoin;
+
+import android.util.Log;
+
+import androidx.annotation.NonNull;
+
+import cn.classfun.droidvm.lib.store.base.DataItem;
+
+/**
+ * Is the huge-page reserve able to back this VM <em>right now</em>?
+ *
+ * <p>Every region a Gunyah VM gets at boot -- guest RAM, the GPU pools, swiotlb -- is served
+ * from {@code gh_hugepage_reserve} as isolated 2 MB folios, which the hypervisor can take
+ * without moving anything. When the pool is short the shortfall comes from ordinary movable
+ * memory instead, and that memory cannot be handed over without migrating it out of CMA first.
+ * On a phone with nothing spare that migration is where things end badly: measured outcomes were
+ * a multi-minute whole-host stall that ended with the kernel OOM-killing crosvm, and a
+ * {@code qcom_scm: Assign memory protection call failed -22} that reset the device.
+ *
+ * <p>The pool refills within a couple of seconds of a VM exiting, so the common way to hit this
+ * is simply starting the next VM too soon. That makes the fix cheap: look before starting, and
+ * either wait (background starts) or say so (foreground starts).
+ *
+ * <p>Everything here is context-free and does shell I/O -- call it off the UI thread.
+ */
+public final class PoolPreflight {
+    private static final String TAG = "PoolPreflight";
+    private static final String SYSFS_PARAMS = "/sys/module/gh_hugepage_reserve/parameters";
+
+    /** The reserve deals in 2 MB pages; every count here is in those. */
+    public static final long PAGE_MB = 2;
+
+    /**
+     * The waiting policy for a start nobody is watching -- auto-start at daemon boot, and the
+     * relaunch that follows a guest reboot. Ten looks a second apart, asking the module to fetch
+     * more half way through, and start anyway at the end. See {@link #waitForPool}.
+     */
+    public static final int BACKGROUND_ATTEMPTS = 10;
+    public static final long BACKGROUND_INTERVAL_MS = 1000;
+    public static final int BACKGROUND_ACQUIRE_AT = 5;
+
+    /**
+     * The same policy, with more room, for the relaunch after a guest reboot. That start races
+     * the reserve taking back the memory the same VM has only just released, and measured on
+     * device that takes about ten seconds (drm2kgsl: enough again at ~9 s, full at ~16 s; venus:
+     * enough at ~9 s, full at ~13 s) -- too close to the ten of a plain background start to leave
+     * it there. Twice the measured worst case, and still bounded.
+     */
+    public static final int RELAUNCH_ATTEMPTS = 20;
+
+    private PoolPreflight() {
+    }
+
+    /** What the pool can serve versus what this VM will ask of it. */
+    public static final class Status {
+        /** The module is loaded, so the numbers below mean something. */
+        public final boolean applicable;
+        /** {@code pool_avail}: 2 MB pages sitting in the reserve, free. */
+        public final long availPages;
+        /** Estimated 2 MB pages this VM's boot-time regions will take. */
+        public final long neededPages;
+
+        Status(boolean applicable, long availPages, long neededPages) {
+            this.applicable = applicable;
+            this.availPages = availPages;
+            this.neededPages = neededPages;
+        }
+
+        public boolean isEnough() {
+            return !applicable || availPages >= neededPages;
+        }
+
+        public long availMb() {
+            return availPages * PAGE_MB;
+        }
+
+        public long neededMb() {
+            return neededPages * PAGE_MB;
+        }
+
+        public long shortMb() {
+            return Math.max(0, neededPages - availPages) * PAGE_MB;
+        }
+
+        @NonNull
+        @Override
+        public String toString() {
+            return fmt("pool_avail=%d need=%d (%d MB / %d MB)",
+                availPages, neededPages, availMb(), neededMb());
+        }
+    }
+
+    /** Reads the reserve and sizes this VM against it. Never throws. */
+    @NonNull
+    public static Status check(@NonNull DataItem item) {
+        long avail = readPages("pool_avail", -1);
+        if (avail < 0)
+            return new Status(false, 0, 0);
+        return new Status(true, avail, neededPages(item));
+    }
+
+    /**
+     * The 2 MB pages this VM's <em>boot-time</em> regions will take out of the reserve.
+     *
+     * <p>The memory size plus the guest pool, and nothing else. Everything else the backend passes
+     * is already inside {@code --mem}: crosvm carves the swiotlb and the framebuffer out of it, and
+     * as of the per-pool {@code consume_system_mem} tag so are the three renderer host pools --
+     * whichever of them a route uses, the VM still costs what its memory field says. Only the guest
+     * pool is added on top, because it is video memory the user asked for beside the RAM rather
+     * than out of it.
+     *
+     * <p>Growth grants (the runtime SHARE path) are deliberately not counted -- they happen later,
+     * one blob at a time, and a VM that cannot grow still boots. That is also why the guest pool
+     * contributes its pre-allocation and not its window.
+     */
+    public static long neededPages(@NonNull DataItem item) {
+        long mb = Math.max(item.optLong("memory_mb", 512), 64);
+            var backend = item.optString("gpu_backend", "");
+            long guestPool = item.optLong("gpu_guest_pool_mb", 0);
+            long guestPrealloc = guestPool > 0
+                ? item.optLong("gpu_guest_prealloc_mb", guestPool)
+                : 0;
+            if ("gpu_gfxstream".equals(backend)) {
+                // The guest pool is only pre-allocated when the guest can create its own
+                // handles, which is what udmabuf gates.
+                if (item.optBoolean("gpu_udmabuf", false))
+                    mb += guestPrealloc;
+            } else if ("gpu_virglrenderer".equals(backend)) {
+                mb += guestPrealloc;
+            }
+        }
+        return (mb + PAGE_MB - 1) / PAGE_MB;
+    }
+
+    /**
+     * Waits for the reserve to cover this VM, for background starts (auto-start, and the daemon
+     * re-launching VMs after a reboot) where there is nobody to ask.
+     *
+     * <p>One second between looks, because a normal refill lands in about two. Half way through
+     * it asks the module to go and get more; that is worth one shot and no more, since a reserve
+     * that cannot be filled will not be filled by asking twice. If the wait runs out we start
+     * anyway: refusing to boot a VM the user asked to auto-start is worse than a boot that may
+     * be slow, and the VMM has its own guard at the point where it actually hands memory over.
+     *
+     * @return true if the pool covered the VM before the attempts ran out
+     */
+    /** {@link #waitForPool} with the shared background policy. */
+    public static boolean waitForPool(@NonNull DataItem item) {
+        return waitForPool(item, BACKGROUND_ATTEMPTS, BACKGROUND_INTERVAL_MS, BACKGROUND_ACQUIRE_AT);
+    }
+
+    public static boolean waitForPool(@NonNull DataItem item, int attempts, long sleepMs, int acquireAt) {
+        var status = check(item);
+        if (!status.applicable || status.isEnough())
+            return true;
+        Log.i(TAG, fmt("waiting for the huge-page reserve: %s", status));
+        for (int i = 1; i <= attempts; i++) {
+            if (i == acquireAt) {
+                Log.i(TAG, fmt("reserve still short at attempt %d; asking it to acquire", i));
+                acquire(2);
+            }
+            try {
+                Thread.sleep(sleepMs);
+            } catch (InterruptedException e) {
+                Thread.currentThread().interrupt();
+                return false;
+            }
+            status = check(item);
+            if (status.isEnough()) {
+                Log.i(TAG, fmt("reserve recovered after %d attempt(s): %s", i, status));
+                return true;
+            }
+        }
+        Log.w(TAG, fmt("reserve still short after %d attempt(s): %s -- starting anyway",
+            attempts, status));
+        return false;
+    }
+
+    /**
+     * Asks the module to grow the reserve ({@code acquire=<mode>}), falling back to the older
+     * {@code manual_refill} knob. Best-effort: the caller carries on either way.
+     */
+    public static boolean acquire(int mode) {
+        if (writeKnob("acquire", Integer.toString(mode)))
+            return true;
+        return writeKnob("manual_refill", "1");
+    }
+
+    private static boolean writeKnob(@NonNull String knob, @NonNull String value) {
+        var path = pathJoin(SYSFS_PARAMS, knob);
+        if (!shellCheckExists(path))
+            return false;
+        return run("echo %s > %s", value, path).isSuccess();
+    }
+
+    private static long readPages(@NonNull String knob, long fallback) {
+        var path = pathJoin(SYSFS_PARAMS, knob);
+        try {
+            if (!shellCheckExists(path))
+                return fallback;
+            return Long.parseLong(shellReadFile(path).trim());
+        } catch (Exception e) {
+            return fallback;
+        }
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/hugepage/HugePageActivity.java b/app/src/main/java/cn/classfun/droidvm/ui/hugepage/HugePageActivity.java
index 1ccc5bfc5..b98594c45 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/hugepage/HugePageActivity.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/hugepage/HugePageActivity.java
@@ -96,6 +96,7 @@ public final class HugePageActivity extends AppCompatActivity {
     // to fill (avail+served < want); disabled at target, unloaded, or soft-disabled.
     private boolean acquireEnabled = false;
     private MaterialButton btnViewProcesses;
+    private TextRowWidget rowAdvanced;
     private View btnAcquireV1;
     private View btnAcquireV2;
     private View btnAcquireV3;
@@ -162,6 +163,7 @@ protected void onCreate(@Nullable Bundle savedInstanceState) {
         rowStatTotalServed = findViewById(R.id.row_stat_total_served);
         rowStatTotalRefilled = findViewById(R.id.row_stat_total_refilled);
         rowStatActiveVms = findViewById(R.id.row_stat_active_vms);
+        rowAdvanced = findViewById(R.id.row_advanced);
         initialize();
     }
 
@@ -207,6 +209,10 @@ public void afterTextChanged(Editable s) {
         });
         btnViewProcesses.setOnClickListener(v -> startActivity(
             new Intent(this, HugePageProcessActivity.class)));
+        // The loader-fed knobs live on their own screen: they are insmod-time
+        // policy, not something this dashboard should invite a tap on.
+        rowAdvanced.setOnClickListener(v -> startActivity(
+            new Intent(this, HugePageAdvancedActivity.class)));
         // Acquire-mode slots: each button starts its mode; each spinner (shown
         // while a run is in flight) interrupts it. Listeners are static -- the
         // slots aren't recycled -- and the idle/running visibility toggle is
@@ -749,34 +755,46 @@ private void stopAcquireAndWait() {
 
     private void loadPoolSize() {
         runOnPool(() -> {
-            Map<String, String> settings;
-            try {
-                var result = shellReadFile(SETTINGS_PROP);
-                settings = parseProp(result);
-            } catch (Exception e) {
-                Log.w(TAG, "Failed to read settings.prop", e);
-                return;
-            }
-            // Prefer pool_want; fall back to legacy pool_target.
-            var cur = settings.getOrDefault("pool_want",
-                settings.getOrDefault("pool_target", "1024"));
-            if (cur == null || cur.isEmpty()) cur = "1024";
-            try {
-                var pages = Long.parseLong(cur);
-                var bytes = BigInteger.valueOf(pages * PAGE_SIZE);
-                runOnUiThread(() -> {
-                    // Programmatic seed - don't count it as a user edit for
-                    // the pool<->with-CMA size link.
-                    sizeLinkSyncing = true;
-                    try {
-                        inputPoolSize.setBigValue(bytes);
-                    } finally {
-                        sizeLinkSyncing = false;
-                    }
-                });
-            } catch (NumberFormatException e) {
-                Log.w(TAG, "Failed to parse pool_want", e);
+            // Seed from the MODULE's live readback first: the kernel clamps an
+            // oversized write to pool_size_max, so settings.prop may say 10G
+            // while the target actually in force is 8.71G. The prop keeps the
+            // bigger wish (insmod re-clamps it every boot); the input must show
+            // the effective value. settings.prop is only the fallback while the
+            // module is not loaded (nothing to read back from).
+            long pages = -1;
+            var snap = model.state();
+            if (snap.loaded && snap.statsOk) pages = snap.targetIdeal;
+            if (pages < 0) {
+                Map<String, String> settings;
+                try {
+                    var result = shellReadFile(SETTINGS_PROP);
+                    settings = parseProp(result);
+                } catch (Exception e) {
+                    Log.w(TAG, "Failed to read settings.prop", e);
+                    return;
+                }
+                // Prefer pool_want; fall back to legacy pool_target.
+                var cur = settings.getOrDefault("pool_want",
+                    settings.getOrDefault("pool_target", "1024"));
+                if (cur == null || cur.isEmpty()) cur = "1024";
+                try {
+                    pages = Long.parseLong(cur.trim());
+                } catch (NumberFormatException e) {
+                    Log.w(TAG, "Failed to parse pool_want", e);
+                    return;
+                }
             }
+            var bytes = BigInteger.valueOf(pages * PAGE_SIZE);
+            runOnUiThread(() -> {
+                // Programmatic seed - don't count it as a user edit for
+                // the pool<->with-CMA size link.
+                sizeLinkSyncing = true;
+                try {
+                    inputPoolSize.setBigValue(bytes);
+                } finally {
+                    sizeLinkSyncing = false;
+                }
+            });
         });
     }
 
@@ -885,7 +903,15 @@ private void savePoolSize() {
                     : appliedNow ? R.string.hugepage_pool_size_applied
                     : R.string.hugepage_pool_size_saved;
                 Toast.makeText(this, msg, LENGTH_SHORT).show();
-                refreshStatus();
+                // Re-seed BOTH inputs from the module's readback, because the
+                // pair is coupled (sec. 4): the kernel clamps each to pool_size_max
+                // AND links them - writing pool_want up drags pool_want_with_cma
+                // up with it; a with-CMA total below the pool is lifted back to
+                // it; both round up to a multiple of S. So one save can move the
+                // OTHER field too - show what actually stuck on each.
+                cmaInputLoaded = false;   // updateUI reseeds the CMA total from
+                refreshStatus();          //   snap.wantWithCma on its next pass
+                loadPoolSize();           // reseed the pool input (clamped want)
             });
         });
     }
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/hugepage/HugePageAdvancedActivity.java b/app/src/main/java/cn/classfun/droidvm/ui/hugepage/HugePageAdvancedActivity.java
new file mode 100644
index 000000000..4ac03a085
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/ui/hugepage/HugePageAdvancedActivity.java
@@ -0,0 +1,258 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
+package cn.classfun.droidvm.ui.hugepage;
+
+import static android.view.View.GONE;
+import static android.view.View.VISIBLE;
+import static android.widget.Toast.LENGTH_SHORT;
+import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
+import static cn.classfun.droidvm.lib.utils.ThreadUtils.runOnPool;
+
+import android.os.Bundle;
+import android.os.SystemClock;
+import android.text.Editable;
+import android.widget.EditText;
+import android.widget.TextView;
+import android.widget.Toast;
+
+import androidx.annotation.NonNull;
+import androidx.annotation.Nullable;
+import androidx.appcompat.app.AlertDialog;
+import androidx.appcompat.app.AppCompatActivity;
+
+import com.google.android.material.appbar.MaterialToolbar;
+import com.google.android.material.dialog.MaterialAlertDialogBuilder;
+import com.google.android.material.textfield.TextInputLayout;
+
+import java.util.LinkedHashMap;
+import java.util.Map;
+
+import cn.classfun.droidvm.R;
+import cn.classfun.droidvm.lib.ui.SimpleTextWatcher;
+import cn.classfun.droidvm.ui.widgets.row.TextRowWidget;
+
+/**
+ * The advanced knobs: the settings.prop keys {@code load.sh} feeds the module at
+ * insmod, which the main screen has no business guessing for the user.
+ *
+ * <p>Everything here is deliberately <b>raw</b>. Each row is labelled with the
+ * parameter's own name, shows the settings.prop value, and carries the module's
+ * current readback underneath. Nothing is renamed into friendlier language: the
+ * only people who should be on this screen are reading the module's own
+ * documentation, and a second vocabulary would just stand between them and it.
+ *
+ * <p>Showing both numbers is the point. They disagree while a saved value waits
+ * for the next load, and also when the insmod ladder degraded past the rung that
+ * carries that parameter - a single number would hide both cases.
+ *
+ * <p>All reads and writes go through {@link HugePageModel}; this screen never
+ * touches sysfs itself.
+ */
+public final class HugePageAdvancedActivity extends AppCompatActivity {
+    /**
+     * The one key with no edit affordance. Lowering the reserve is how a phone is
+     * made unstable, so its row stays a label and the editor sits behind a
+     * deliberate gesture - anyone who reaches it went looking for it.
+     */
+    private static final String KEY_SYSTEM_RESERVE = "system_reserve_mb";
+    private static final int RESERVE_TAPS = 10;
+    /** Taps further apart than this start the count over ("consecutive"). */
+    private static final long RESERVE_TAP_WINDOW_MS = 1500;
+
+    private final HugePageModel model = new HugePageModel();
+    /** Rows keyed by parameter name, in {@link HugePageModel#ADVANCED_KEYS} order. */
+    private final Map<String, TextRowWidget> rows = new LinkedHashMap<>();
+    /** Last read of the knobs, so opening an editor needs no shell I/O. */
+    private Map<String, HugePageModel.Knob> knobs = Map.of();
+    /** This device's default reserve (MB), or -1 when the module can't say. */
+    private int reserveDefaultMb = -1;
+    private int reserveTapCount;
+    private long reserveLastTapMs;
+
+    @Override
+    protected void onCreate(@Nullable Bundle savedInstanceState) {
+        super.onCreate(savedInstanceState);
+        setContentView(R.layout.activity_hugepage_advanced);
+        MaterialToolbar toolbar = findViewById(R.id.toolbar);
+        toolbar.setTitle(R.string.hugepage_advanced);
+        toolbar.setNavigationOnClickListener(v -> finish());
+
+        rows.put(KEY_SYSTEM_RESERVE, findViewById(R.id.row_adv_system_reserve));
+        rows.put("cma_reservoir_floor_mb", findViewById(R.id.row_adv_cma_floor));
+        rows.put("boot_acquire", findViewById(R.id.row_adv_boot_acquire));
+        rows.put("boot_acquire_runs", findViewById(R.id.row_adv_boot_acquire_runs));
+        rows.put("boot_acquire_wait", findViewById(R.id.row_adv_boot_acquire_wait));
+        for (var e : rows.entrySet()) {
+            var key = e.getKey();
+            e.getValue().setText(key);          // the raw name, never a translation
+            if (KEY_SYSTEM_RESERVE.equals(key))
+                e.getValue().setOnClickListener(v -> onReserveTap());
+            else
+                e.getValue().setOnClickListener(v -> showEditor(key));
+        }
+    }
+
+    @Override
+    protected void onResume() {
+        super.onResume();
+        load();
+    }
+
+    /**
+     * Ten taps in a row open the {@code system_reserve_mb} editor, and nothing
+     * before the tenth acknowledges them. The silence is the design: a stray
+     * double-tap must not offer to shrink the reserve that keeps the phone alive.
+     */
+    private void onReserveTap() {
+        var now = SystemClock.uptimeMillis();
+        reserveTapCount = now - reserveLastTapMs > RESERVE_TAP_WINDOW_MS
+            ? 1 : reserveTapCount + 1;
+        reserveLastTapMs = now;
+        if (reserveTapCount < RESERVE_TAPS) return;
+        reserveTapCount = 0;
+        showEditor(KEY_SYSTEM_RESERVE);
+    }
+
+    /**
+     * Re-read every knob. The list shows one number per row: what the module is
+     * <b>actually running</b>. What settings.prop asks for is a different fact -
+     * it may be waiting for the next load, or have been dropped by the insmod
+     * ladder - and it belongs where it can be explained and changed, which is
+     * the editor, not a column.
+     */
+    private void load() {
+        runOnPool(() -> {
+            var read = model.advancedKnobs();
+            var def = model.systemReserveDefaultMb();
+            runOnUiThread(() -> {
+                if (isFinishing()) return;
+                knobs = read;
+                reserveDefaultMb = def;
+                for (var e : rows.entrySet()) {
+                    var knob = read.get(e.getKey());
+                    e.getValue().setValue(knob == null || knob.live == null
+                        ? getString(R.string.hugepage_adv_unavailable) : knob.live);
+                }
+            });
+        });
+    }
+
+    /**
+     * Edit one key: save a value, or clear it back to the module default. The
+     * header repeats the module's own readback (plus, for the reserve, this
+     * device's default) so the number being changed sits next to the number in
+     * force. Values come from the last {@link #load()} - opening an editor must
+     * not do shell I/O on the UI thread.
+     */
+    private void showEditor(@NonNull String key) {
+        var view = getLayoutInflater().inflate(R.layout.dialog_hugepage_advanced, null);
+        TextView liveView = view.findViewById(R.id.tv_adv_live);
+        TextInputLayout til = view.findViewById(R.id.til_adv_value);
+        EditText input = view.findViewById(R.id.et_adv_value);
+        TextView warning = view.findViewById(R.id.tv_adv_warning);
+
+        var knob = knobs.get(key);
+        var unavailable = getString(R.string.hugepage_adv_unavailable);
+        var header = new StringBuilder(fmt("sysfs = %s",
+            knob == null || knob.live == null ? unavailable : knob.live));
+        if (KEY_SYSTEM_RESERVE.equals(key))
+            header.append(fmt("\nsystem_reserve_mb_default = %s", reserveDefaultMb < 0
+                ? unavailable : Integer.toString(reserveDefaultMb)));
+        liveView.setText(header);
+        til.setHint(key);
+        // Empty field = no settings.prop key = the module's own default. The
+        // placeholder says so in the one place the state can be acted on.
+        til.setPlaceholderText(getString(R.string.hugepage_adv_unset));
+        if (knob != null && knob.saved != null) {
+            input.setText(knob.saved);
+            input.setSelection(input.getText().length());
+        }
+
+        var dialog = new MaterialAlertDialogBuilder(this)
+            .setTitle(key)
+            .setView(view)
+            // Empty field = no key = the module default, so Save covers clearing
+            // too and there is no second button to explain the difference.
+            .setPositiveButton(R.string.hugepage_save_pool_size, (d, w) -> {
+                var raw = input.getText().toString().trim();
+                save(key, raw.isEmpty() ? null : raw);
+            })
+            .setNegativeButton(android.R.string.cancel, null)
+            .create();
+        dialog.setOnShowListener(d -> {
+            var ok = dialog.getButton(AlertDialog.BUTTON_POSITIVE);
+            Runnable validate = () -> {
+                var raw = input.getText().toString().trim();
+                var value = parse(key, raw);
+                ok.setEnabled(raw.isEmpty() || value != null);   // empty = clear
+                til.setError(value == null && !raw.isEmpty()
+                    ? getString(R.string.hugepage_adv_invalid) : null);
+                // Only the reserve has a "too low". The module hands back THIS
+                // device's default, so the threshold is right even where RAM/2
+                // already caps the built-in one and lowering to it is a no-op.
+                var low = value != null && KEY_SYSTEM_RESERVE.equals(key)
+                    && reserveDefaultMb > 0 && value < reserveDefaultMb;
+                if (low)
+                    warning.setText(getString(
+                        R.string.hugepage_adv_warn_below_default, reserveDefaultMb));
+                warning.setVisibility(low ? VISIBLE : GONE);
+            };
+            input.addTextChangedListener(new SimpleTextWatcher() {
+                @Override
+                public void afterTextChanged(Editable e) {
+                    validate.run();
+                }
+            });
+            validate.run();
+        });
+        dialog.show();
+    }
+
+    /** Parse and range-check one knob; null = don't let it be saved. */
+    @Nullable
+    private static Long parse(@NonNull String key, @NonNull String raw) {
+        long value;
+        try {
+            value = Long.parseLong(raw.trim());
+        } catch (NumberFormatException e) {
+            return null;
+        }
+        long min, max;
+        switch (key) {
+            case KEY_SYSTEM_RESERVE:
+                min = 64;                 // the module's own floor
+                max = 1024L * 1024;
+                break;
+            case "boot_acquire":
+                min = 0;
+                max = 3;                  // the acquire knob's modes
+                break;
+            case "boot_acquire_runs":
+                min = 1;
+                max = 99;
+                break;
+            case "boot_acquire_wait":
+                min = 0;
+                max = 3600;
+                break;
+            default:                      // cma_reservoir_floor_mb
+                min = 0;
+                max = 1024L * 1024;
+        }
+        return value < min || value > max ? null : value;
+    }
+
+    /** Persist one key ({@code null} clears it) and re-read what stuck. */
+    private void save(@NonNull String key, @Nullable String value) {
+        runOnPool(() -> {
+            var res = model.saveAdvanced(key, value);
+            runOnUiThread(() -> {
+                Toast.makeText(this, res.ok()
+                    ? R.string.hugepage_adv_saved
+                    : R.string.hugepage_adv_save_failed, LENGTH_SHORT).show();
+                load();
+            });
+        });
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/hugepage/HugePageModel.java b/app/src/main/java/cn/classfun/droidvm/ui/hugepage/HugePageModel.java
index fc331b324..ca3a6abdc 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/hugepage/HugePageModel.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/hugepage/HugePageModel.java
@@ -548,6 +548,99 @@ void clearLegacyProbeKey() {
         updateSettings(changes);
     }
 
+    /* ================================================================== */
+    /*  Advanced knobs: loader-fed settings.prop keys                     */
+    /* ================================================================== */
+
+    /**
+     * The keys the advanced screen edits, in display order. All five are read by
+     * {@code load.sh} out of settings.prop and handed to the module at insmod;
+     * none of them is something the GUI can decide for the user, which is why
+     * they live behind an advanced section that shows raw key/value.
+     */
+    static final List<String> ADVANCED_KEYS = List.of(
+        "system_reserve_mb", "cma_reservoir_floor_mb",
+        "boot_acquire", "boot_acquire_runs", "boot_acquire_wait");
+
+    /**
+     * Knobs whose module param is writable at runtime (0600), so a save shows up
+     * without waiting for the next load. Two different reasons to be on this
+     * list: {@code cma_reservoir_floor_mb} is consulted on every flip, so writing
+     * it actually takes effect; the {@code boot_acquire} trio is writable
+     * precisely because the module never reads it - the write changes nothing and
+     * exists so a saved setting is visible somewhere the user can see it.
+     *
+     * <p>{@code system_reserve_mb} is deliberately absent: it sizes a table built
+     * once at insmod, so a later write would only lie about what is in force. An
+     * older module has these as 0400 and the write simply fails - the value still
+     * persisted, it just waits for the next load.
+     */
+    private static final List<String> LIVE_WRITABLE = List.of(
+        "cma_reservoir_floor_mb", "boot_acquire", "boot_acquire_runs", "boot_acquire_wait");
+
+    /** Module param carrying THIS device's default reserve, {@code min(RAM/2, 6144)}. */
+    private static final String SYSTEM_RESERVE_DEFAULT = "system_reserve_mb_default";
+
+    /**
+     * One advanced knob, as the two facts that can disagree: what settings.prop
+     * asks for and what the module is actually running. They differ while a save
+     * awaits the next load, and also when the insmod ladder degraded past the rung
+     * carrying that param - which is exactly the case a single number would hide.
+     */
+    static final class Knob {
+        /** settings.prop value, or null when the key is absent (module default). */
+        @Nullable final String saved;
+        /** Module readback, or null when unavailable (not loaded, or older .ko). */
+        @Nullable final String live;
+
+        private Knob(@Nullable String saved, @Nullable String live) {
+            this.saved = saved;
+            this.live = live;
+        }
+    }
+
+    /** Read every advanced knob: one settings.prop parse plus one read per param. */
+    @NonNull
+    Map<String, Knob> advancedKnobs() {
+        var saved = parseProp(safeRead(SETTINGS_PROP));
+        var out = new LinkedHashMap<String, Knob>();
+        for (var key : ADVANCED_KEYS) {
+            var live = safeRead(pathJoin(SYSFS_PARAMS, key)).trim();
+            out.put(key, new Knob(saved.get(key), live.isEmpty() ? null : live));
+        }
+        return out;
+    }
+
+    /**
+     * This device's default reserve in MB, or -1 when the module can't say. It is
+     * NOT the built-in 6144: the module caps the request at half of RAM, so an
+     * 8 GB phone defaults to 4096 and anything above that is a no-op there. A
+     * configured value overwrites {@code system_reserve_mb}, so this param is the
+     * only place the default survives once the user has set one.
+     */
+    int systemReserveDefaultMb() {
+        return readIntParam(SYSTEM_RESERVE_DEFAULT, -1);
+    }
+
+    /**
+     * Persist one advanced key ({@code null} removes it, restoring the module
+     * default), and apply it live when the param allows it. Persisting is the
+     * operation that matters - these keys exist to survive a reload - so a failed
+     * live write is not a failure, just a value that waits for the next load.
+     */
+    @NonNull
+    Result saveAdvanced(@NonNull String key, @Nullable String value) {
+        var changes = new LinkedHashMap<String, String>();
+        changes.put(key, value);
+        var t = updateSettings(changes);
+        if (!t.ok()) return Result.failed("settings", t.error);
+        if (value != null && LIVE_WRITABLE.contains(key)
+            && existsSticky(pathJoin(SYSFS_PARAMS, key))
+            && writeKnob(key, value).ok())
+            return Result.ok(key);
+        return Result.ok("settings");
+    }
+
     /** Read an integer sysfs param, or {@code def} when absent/unparseable. */
     private int readIntParam(@NonNull String name, int def) {
         var v = safeRead(pathJoin(SYSFS_PARAMS, name)).trim();
@@ -600,9 +693,33 @@ Result saveCmaTarget(long pages) {
      */
     @NonNull
     Result saveTargets(long pages, long withCma) {
-        // Invariant (module plan.md sec.1): pool_want <= pool_want_with_cma. The kernel
-        // clamps a low live write itself, but the persisted pair must agree
-        // too or the next boot would insmod inconsistent targets.
+        // Persist the EFFECTIVE targets, not the raw input. The module is the
+        // single source of truth for clamping (to pool_size_max), coupling
+        // (pool_want <= pool_want_with_cma, sec. 4) and S-alignment. So when it is
+        // loaded: write the user's values to sysfs, read the pair BACK, and
+        // persist what actually stuck. settings.prop, the running pool and the
+        // UI then all agree, and the coupling/clamp/align rules are never
+        // reimplemented here (they drift - this once did its own Math.max yet
+        // still missed size_max and S-alignment).
+        if (existsSticky(pathJoin(SYSFS_PARAMS, "pool_want"))) {
+            var live = writeKnob("pool_want", Long.toString(pages));
+            boolean liveOk = live.ok();
+            if (withCma >= 0)
+                liveOk &= writeKnob("pool_want_with_cma", Long.toString(withCma)).ok();
+            long effWant = readKnobLong("pool_want", pages);
+            long effCma = withCma >= 0 ? readKnobLong("pool_want_with_cma", withCma) : -1;
+            var changes = new LinkedHashMap<String, String>();
+            changes.put("pool_want", Long.toString(effWant));
+            changes.put("pool_target", Long.toString(effWant));
+            if (effCma >= 0) changes.putAll(cmaTargetChanges(effCma));
+            var persisted = updateSettings(changes);
+            if (!persisted.ok()) return Result.failed("settings", persisted.error);
+            return Result.ok(liveOk ? "pool_want" : "settings", !liveOk);
+        }
+        // Not loaded: no sysfs to clamp against. Persist the raw values (with the
+        // minimal want<=with_cma coupling so the prop is self-consistent); insmod
+        // clamps/aligns them next boot, and the UI reads the effective pair back
+        // once the module is up.
         if (withCma >= 0) withCma = Math.max(withCma, pages);
         var changes = new LinkedHashMap<String, String>();
         changes.put("pool_want", Long.toString(pages));
@@ -610,11 +727,17 @@ Result saveTargets(long pages, long withCma) {
         if (withCma >= 0) changes.putAll(cmaTargetChanges(withCma));
         var persisted = updateSettings(changes);
         if (!persisted.ok()) return Result.failed("settings", persisted.error);
-        var live = writeKnob("pool_want", Long.toString(pages));
-        boolean liveOk = live.ok();
-        if (withCma >= 0)
-            liveOk &= writeKnob("pool_want_with_cma", Long.toString(withCma)).ok();
-        return Result.ok(liveOk ? "pool_want" : "settings", !liveOk);
+        return Result.ok("settings", false);   // saved for next boot, not applied now
+    }
+
+    /** Read a single-value sysfs knob as a long; fallback if absent/unparseable. */
+    private static long readKnobLong(@NonNull String knob, long fallback) {
+        var t = safeRead(pathJoin(SYSFS_PARAMS, knob)).trim();
+        if (!t.isEmpty()) try {
+            return Long.parseLong(t);
+        } catch (NumberFormatException ignored) {
+        }
+        return fallback;
     }
 
     @NonNull
@@ -942,7 +1065,10 @@ private long poolTarget() {
     private Try<Source, List<UsageEntry>> usageFromKo() {
         if (!koAvailable()) return Try.fail(Source.KO, "KO attribution knobs absent");
         try {
-            // Reconcile, then read reconciled per-owner live page counts.
+            // Reconcile, then read the per-owner live page counts. One code
+            // path spans both module generations: the pre-v12 module computes
+            // these stats inside the reconcile pass (the write is required),
+            // while v12 keeps them live and accepts reconcile as a no-op.
             run("echo 1 > %s/reconcile", SYSFS_PARAMS);
             var livePages = new LinkedHashMap<Integer, Long>();
             for (var ln : safeRead(pathJoin(SYSFS_PARAMS, "served_summary")).split("\n")) {
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/main/settings/KernelModuleDescriptions.java b/app/src/main/java/cn/classfun/droidvm/ui/main/settings/KernelModuleDescriptions.java
new file mode 100644
index 000000000..db53c1213
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/ui/main/settings/KernelModuleDescriptions.java
@@ -0,0 +1,213 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
+package cn.classfun.droidvm.ui.main.settings;
+
+import static cn.classfun.droidvm.lib.Constants.DATA_DIR;
+import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
+import static cn.classfun.droidvm.lib.utils.StringUtils.pathJoin;
+
+import android.content.Context;
+
+import androidx.annotation.NonNull;
+import androidx.annotation.Nullable;
+
+import com.google.android.material.color.MaterialColors;
+
+import java.io.File;
+import java.io.FileInputStream;
+import java.nio.charset.StandardCharsets;
+import java.util.HashMap;
+import java.util.Map;
+import java.util.regex.Pattern;
+
+import cn.classfun.droidvm.R;
+
+/**
+ * The "why is this needed" pages behind each Kernel Module card.
+ *
+ * <p>A page is one self-contained HTML file per module, carrying <b>every</b> language and no
+ * colours of its own; this class picks the language and paints in the live Material palette at
+ * display time, by injecting CSS ahead of the page's own stylesheet. That is why the shipped
+ * files are neither per-language nor per-theme -- see {@code gunyah_host_mod/descr/}.
+ *
+ * <p>Pages for the shipped {@code .ko} modules come from {@code usr/lib/modules/descr/}, staged
+ * next to the modules themselves; GH-Hugepage-Reserve is a separately installed Magisk module
+ * with no prebuilt to ride on, so its page ships in the APK assets. Both are read once into
+ * memory ({@link #preload()}, off the main thread) -- they are a few KB each, and the card's
+ * why-button must know whether a page exists before it can decide to show itself.
+ */
+final class KernelModuleDescriptions {
+    private static final String DESCR_DIR = pathJoin(DATA_DIR, "usr", "lib", "modules", "descr");
+    private static final String ASSET_DIR = "descr";
+    private static final String HUGEPAGE_PAGE = "gh_hugepage_reserve";
+    /** The app's stylesheet replaces this line; see the build's matching check. */
+    private static final Pattern CSS_LINK = Pattern.compile("<link[^>]+style\\.css[^>]*>");
+    /** Pages tag their per-language blocks with this; used to test a language is present. */
+    private static final String LANG_ATTR = "data-lang=\"%s\"";
+    private static final String FALLBACK_LANG = "en";
+
+    /** module-name prefix -> raw page HTML. Populated once by {@link #preload()}. */
+    private static final Map<String, String> PAGES = new HashMap<>();
+    @Nullable
+    private static volatile String css;
+    private static volatile boolean loadTried;
+
+    private KernelModuleDescriptions() {
+    }
+
+    /** Read the pages and stylesheet once. Does file I/O: call off the main thread. */
+    static synchronized void preload(@NonNull Context ctx) {
+        if (loadTried) return;
+        loadTried = true;
+        css = readAsset(ctx, fmt("%s/style.css", ASSET_DIR));
+        var hugepage = readAsset(ctx, fmt("%s/%s.html", ASSET_DIR, HUGEPAGE_PAGE));
+        if (hugepage != null) PAGES.put(HUGEPAGE_PAGE, hugepage);
+        var files = new File(DESCR_DIR).listFiles((d, n) -> n.endsWith(".html"));
+        if (files == null) return; // prebuilts not extracted yet -- why-buttons just stay hidden
+        for (var f : files) {
+            var html = readFile(f);
+            if (html != null)
+                PAGES.put(f.getName().substring(0, f.getName().length() - 5), html);
+        }
+    }
+
+    /** Is there a page for this module? Cheap; safe on the main thread after preload. */
+    static boolean hasModulePage(@NonNull String moduleName) {
+        return matchModule(moduleName) != null;
+    }
+
+    static boolean hasHugepagePage() {
+        return PAGES.containsKey(HUGEPAGE_PAGE);
+    }
+
+    /**
+     * Display-ready HTML for a module named as the card names it (normalized .ko basename, e.g.
+     * {@code udmabuf_gki_6.6}), or null if no page covers it.
+     */
+    @Nullable
+    static String modulePage(@NonNull Context ctx, @NonNull String moduleName) {
+        var raw = matchModule(moduleName);
+        return raw == null ? null : prepare(ctx, raw);
+    }
+
+    @Nullable
+    static String hugepagePage(@NonNull Context ctx) {
+        var raw = PAGES.get(HUGEPAGE_PAGE);
+        return raw == null ? null : prepare(ctx, raw);
+    }
+
+    /**
+     * Page whose file name is the longest prefix of this module's name -- so a family page
+     * ({@code udmabuf.html}) covers every KMI build of it, and a page named for a specific
+     * build would still win over the family one.
+     */
+    @Nullable
+    private static String matchModule(@NonNull String moduleName) {
+        String best = null;
+        int bestLen = -1;
+        for (var e : PAGES.entrySet()) {
+            var key = e.getKey();
+            if (key.length() > bestLen && !HUGEPAGE_PAGE.equals(key) && moduleName.startsWith(key)) {
+                best = e.getValue();
+                bestLen = key.length();
+            }
+        }
+        return best;
+    }
+
+    /**
+     * Swap the page's stylesheet link for: the app's copy of that stylesheet, then the live
+     * theme as CSS variables and the rule that reveals one language. Everything the page needs
+     * is inside the document, so the WebView loads no subresources at all.
+     *
+     * <p>Order matters. The app's block comes <b>after</b> the stylesheet because the stylesheet
+     * carries a standalone fallback palette (so a page can be proofread in a browser) -- injected
+     * first, that fallback would win and the page would ignore the app's real theme.
+     */
+    @NonNull
+    private static String prepare(@NonNull Context ctx, @NonNull String rawHtml) {
+        boolean dark = isDark(ctx);
+        int ink = dark ? 0xFFE2E2E6 : 0xFF1A1C1E;
+        int paper = dark ? 0xFF1A1C1E : 0xFFFDFCFF;
+        var injected = new StringBuilder("<style>");
+        injected.append(css == null ? "" : css)
+            .append("</style>\n<style>\n:root{\n")
+            .append(colorVar(ctx, "--surface", com.google.android.material.R.attr.colorSurface, paper))
+            .append(colorVar(ctx, "--on-surface", com.google.android.material.R.attr.colorOnSurface, ink))
+            .append(colorVar(ctx, "--on-surface-variant",
+                com.google.android.material.R.attr.colorOnSurfaceVariant, ink))
+            .append(colorVar(ctx, "--surface-variant",
+                com.google.android.material.R.attr.colorSurfaceVariant, paper))
+            .append(colorVar(ctx, "--primary", androidx.appcompat.R.attr.colorPrimary, ink))
+            .append(colorVar(ctx, "--error", androidx.appcompat.R.attr.colorError, ink))
+            .append(colorVar(ctx, "--outline", com.google.android.material.R.attr.colorOutline, ink))
+            .append(fmt("color-scheme:%s;\n}\n", dark ? "dark" : "light"))
+            .append(".i18n{display:none}\n")
+            .append(fmt(".i18n[data-lang=\"%s\"]{display:block}\n", pageLang(ctx, rawHtml)))
+            // The stylesheet rules a divider between language blocks, for the all-languages
+            // browser view. Here only one is shown, and an adjacent-sibling selector still
+            // matches across the hidden ones -- leaving a stray rule above the page. Same
+            // selector, not a plainer one: two classes outrank one whatever the order.
+            .append(".i18n + .i18n{margin-top:0;padding-top:0;border-top:none}\n")
+            .append("</style>");
+        var html = CSS_LINK.matcher(rawHtml).replaceFirst(java.util.regex.Matcher
+            .quoteReplacement(injected.toString()));
+        // Structural dark-mode branching for anything colours alone cannot express.
+        return html.replaceFirst("<html", fmt("<html data-theme=\"%s\"", dark ? "dark" : "light"));
+    }
+
+    /** {@code --name:#rrggbb;} from a theme attribute, so pages match the app exactly. */
+    @NonNull
+    private static String colorVar(@NonNull Context ctx, @NonNull String name, int attr,
+                                   int fallback) {
+        int c = MaterialColors.getColor(ctx, attr, fallback);
+        return fmt("%s:#%06X;\n", name, c & 0xFFFFFF);
+    }
+
+    private static boolean isDark(@NonNull Context ctx) {
+        return (ctx.getResources().getConfiguration().uiMode
+            & android.content.res.Configuration.UI_MODE_NIGHT_MASK)
+            == android.content.res.Configuration.UI_MODE_NIGHT_YES;
+    }
+
+    /**
+     * The app language if this page has it, else English. The fallback is for an older prebuilt
+     * whose pages predate a language the app has since gained -- the build refuses to ship a
+     * page that is missing one.
+     */
+    @NonNull
+    private static String pageLang(@NonNull Context ctx, @NonNull String rawHtml) {
+        var want = appLang(ctx);
+        return rawHtml.contains(fmt(LANG_ATTR, want)) ? want : FALLBACK_LANG;
+    }
+
+    /** Device language as the pages tag it: zh-TW / zh-CN / en. */
+    @NonNull
+    private static String appLang(@NonNull Context ctx) {
+        var loc = ctx.getResources().getConfiguration().getLocales().get(0);
+        if (!"zh".equals(loc.getLanguage())) return FALLBACK_LANG;
+        if ("Hant".equals(loc.getScript())) return "zh-TW";
+        if ("Hans".equals(loc.getScript())) return "zh-CN";
+        var c = loc.getCountry();
+        return "TW".equals(c) || "HK".equals(c) || "MO".equals(c) ? "zh-TW" : "zh-CN";
+    }
+
+    @Nullable
+    private static String readAsset(@NonNull Context ctx, @NonNull String path) {
+        try (var in = ctx.getAssets().open(path)) {
+            return new String(in.readAllBytes(), StandardCharsets.UTF_8);
+        } catch (Exception e) {
+            return null;
+        }
+    }
+
+    @Nullable
+    private static String readFile(@NonNull File f) {
+        try (var in = new FileInputStream(f)) {
+            return new String(in.readAllBytes(), StandardCharsets.UTF_8);
+        } catch (Exception e) {
+            return null;
+        }
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/main/settings/KernelModuleDialog.java b/app/src/main/java/cn/classfun/droidvm/ui/main/settings/KernelModuleDialog.java
new file mode 100644
index 000000000..4ca7684a4
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/ui/main/settings/KernelModuleDialog.java
@@ -0,0 +1,102 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
+package cn.classfun.droidvm.ui.main.settings;
+
+import android.app.Dialog;
+import android.content.res.Configuration;
+import android.os.Bundle;
+import android.view.LayoutInflater;
+import android.view.Window;
+import android.view.WindowManager;
+
+import androidx.annotation.NonNull;
+import androidx.annotation.Nullable;
+import androidx.fragment.app.DialogFragment;
+import androidx.fragment.app.FragmentManager;
+
+import com.google.android.material.dialog.MaterialAlertDialogBuilder;
+
+import cn.classfun.droidvm.R;
+
+/**
+ * The settings entry to the kernel module list: shows {@link KernelModuleListController}'s view
+ * in a dialog. The first-run setup wizard shows the same list as a step instead.
+ *
+ * <p>A {@link DialogFragment}, not a bare {@code AlertDialog.show()}: the fragment manager owns
+ * it, so it is dismissed and reshown cleanly with the settings screen rather than leaking on a
+ * back-stack change.
+ *
+ * <h3>Fitting the window to the orientation</h3>
+ * The list is tall; a phone held sideways has little height, and M3's fixed 80dp top+bottom
+ * background inset then leaves the scrolling area a single row. The activities here all set
+ * {@code android:configChanges="orientation|screenSize|..."}, so a rotation does <b>not</b>
+ * recreate the activity or rebuild this dialog -- it arrives as {@link #onConfigurationChanged}.
+ * A build-time inset (set once in {@link #onCreateDialog}) would therefore keep its original
+ * orientation's value forever. So the height is driven from {@link #applyWindowMetrics}, called
+ * both when the dialog first shows and on every configuration change: landscape gives the window
+ * almost the whole screen height (the list scrolls within it), portrait lets it wrap.
+ */
+public final class KernelModuleDialog extends DialogFragment {
+    private static final String TAG = "kernel_modules";
+    /** Landscape: fraction of screen height the dialog takes; the rest is a thin margin. */
+    private static final float LANDSCAPE_HEIGHT_FRACTION = 0.94f;
+
+    /** Show the dialog, or do nothing if it is already showing (e.g. a double tap). */
+    public static void show(@NonNull FragmentManager fm) {
+        if (fm.findFragmentByTag(TAG) == null) new KernelModuleDialog().show(fm, TAG);
+    }
+
+    @NonNull
+    @Override
+    public Dialog onCreateDialog(@Nullable Bundle savedInstanceState) {
+        var ctx = requireContext();
+        var content = LayoutInflater.from(ctx).inflate(R.layout.dialog_kernel_modules, null);
+
+        var dialog = new MaterialAlertDialogBuilder(ctx)
+            .setTitle(R.string.kernel_module_title)
+            .setView(content)
+            .setPositiveButton(android.R.string.ok, null)
+            .create();
+
+        // The view is inflated; refresh can find its ids. Runs off the main thread and posts
+        // back, so it is fine to kick off before the dialog is shown -- same as a fresh open.
+        new KernelModuleListController(ctx, content).refresh();
+        return dialog;
+    }
+
+    @Override
+    public void onStart() {
+        super.onStart();
+        applyWindowMetrics();
+    }
+
+    @Override
+    public void onConfigurationChanged(@NonNull Configuration newConfig) {
+        super.onConfigurationChanged(newConfig);
+        // A rotation lands here (configChanges keeps the activity alive), not in onCreateDialog.
+        applyWindowMetrics();
+    }
+
+    /**
+     * Size the dialog window to the current orientation. Only the height is touched -- the width
+     * keeps whatever M3 chose (centred, its own horizontal insets). Landscape claims nearly the
+     * full height so the module list is not squeezed to a row; portrait wraps its content as a
+     * dialog normally would. Runs on show and on every configuration change, so a rotate with
+     * the dialog open re-fits it instead of leaving a stale portrait/landscape size.
+     */
+    private void applyWindowMetrics() {
+        var dialog = getDialog();
+        if (dialog == null) return;
+        Window window = dialog.getWindow();
+        if (window == null) return;
+        var res = getResources();
+        boolean landscape =
+            res.getConfiguration().orientation == Configuration.ORIENTATION_LANDSCAPE;
+        var lp = window.getAttributes();
+        lp.height = landscape
+            ? Math.round(res.getDisplayMetrics().heightPixels * LANDSCAPE_HEIGHT_FRACTION)
+            : WindowManager.LayoutParams.WRAP_CONTENT;
+        window.setAttributes(lp);
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/main/settings/KernelModuleListController.java b/app/src/main/java/cn/classfun/droidvm/ui/main/settings/KernelModuleListController.java
new file mode 100644
index 000000000..6b5aa24a2
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/ui/main/settings/KernelModuleListController.java
@@ -0,0 +1,212 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
+package cn.classfun.droidvm.ui.main.settings;
+
+import static cn.classfun.droidvm.lib.utils.FileUtils.shellCheckExists;
+import static cn.classfun.droidvm.lib.utils.ThreadUtils.runOnPool;
+
+import android.content.Context;
+import android.content.Intent;
+import android.content.res.ColorStateList;
+import android.graphics.Typeface;
+import android.net.Uri;
+import android.os.Handler;
+import android.os.Looper;
+import android.view.LayoutInflater;
+import android.view.View;
+import android.widget.Button;
+import android.widget.ImageView;
+import android.widget.LinearLayout;
+import android.widget.TextView;
+import android.widget.Toast;
+
+import androidx.annotation.NonNull;
+import androidx.annotation.Nullable;
+
+import com.google.android.material.color.MaterialColors;
+import com.google.android.material.dialog.MaterialAlertDialogBuilder;
+import com.google.android.material.materialswitch.MaterialSwitch;
+
+import java.util.List;
+import java.util.function.Supplier;
+
+import cn.classfun.droidvm.R;
+import cn.classfun.droidvm.ui.hugepage.HugePageActivity;
+
+/**
+ * Renders the host kernel module list into any view carrying {@code km_kmi}/{@code km_state}/
+ * {@code km_list} (the {@code dialog_kernel_modules} layout) -- the settings dialog and the
+ * first-run setup step both show the same list through this. Each shipped module
+ * ({@link KernelModuleManager}) gets a card with load/unload and an auto-load-at-app-start
+ * switch; a GH-Hugepage-Reserve entry is always pinned first: that module is a separately
+ * installed Magisk/KernelSU package (it must load at early boot), so its card offers
+ * Download/Manage instead. Every card has a "why is this needed" button showing the
+ * plain-language description from {@link KernelModuleDescriptions}. The module scan and
+ * insmod/rmmod all touch root, so they run on a background pool; the view is (re)built on the
+ * main thread.
+ */
+public final class KernelModuleListController {
+    private static final String HUGEPAGE_PROP = "/data/adb/modules/gh-hugepage-reserve/module.prop";
+    private static final String HUGEPAGE_SYSFS = "/sys/module/gh_hugepage_reserve";
+    private static final String HUGEPAGE_RELEASES =
+        "https://github.com/Droid-VM/gh-hugepage-reserve/releases";
+
+    private final Context ctx;
+    private final Handler main = new Handler(Looper.getMainLooper());
+    private final LayoutInflater inflater;
+    private final TextView kmi, state;
+    private final LinearLayout list;
+
+    public KernelModuleListController(@NonNull Context ctx, @NonNull View content) {
+        this.ctx = ctx;
+        this.inflater = LayoutInflater.from(ctx);
+        kmi = content.findViewById(R.id.km_kmi);
+        state = content.findViewById(R.id.km_state);
+        list = content.findViewById(R.id.km_list);
+    }
+
+    public void refresh() {
+        runOnPool(() -> {
+            // Explicitly, not via list(): with no modules directory list() returns before it
+            // would have loaded the rules, and the hugepage card still needs them.
+            KernelModuleMatch.preload(ctx);
+            var kmiName = KernelModuleManager.deviceKmi();
+            var mods = KernelModuleManager.list(ctx);
+            KernelModuleDescriptions.preload(ctx);
+            // GH-Hugepage-Reserve is matched like any other module; on a device it does not
+            // apply to, the card is absent rather than offering a download that cannot help.
+            boolean hpApplies = KernelModuleMatch.allowsHugepage();
+            // Failing to see /data/adb (no root, no Magisk) reads as false -> Download,
+            // which is the wanted "can't tell whether it's installed" answer.
+            boolean hpInstalled = hpApplies && shellCheckExists(HUGEPAGE_PROP);
+            boolean hpLoaded = hpApplies && shellCheckExists(HUGEPAGE_SYSFS);
+            main.post(() -> render(kmiName, mods, hpApplies, hpInstalled, hpLoaded));
+        });
+    }
+
+    private void render(@Nullable String kmiName, @NonNull List<KernelModuleManager.Module> mods,
+                        boolean hpApplies, boolean hpInstalled, boolean hpLoaded) {
+        if (list == null) return;
+        if (kmiName != null) {
+            kmi.setText(ctx.getString(R.string.kernel_module_kmi, kmiName));
+            kmi.setVisibility(View.VISIBLE);
+        }
+        list.removeAllViews();
+        if (hpApplies) list.addView(buildHugepageCard(hpInstalled, hpLoaded));
+        for (var mod : mods) list.addView(buildCard(mod));
+        // "None" means nothing at all applies to this device (a non-Qualcomm phone, say), not
+        // merely that the .ko list under an applicable hugepage card happens to be empty.
+        boolean empty = mods.isEmpty() && !hpApplies;
+        state.setText(R.string.kernel_module_none);
+        state.setVisibility(empty ? View.VISIBLE : View.GONE);
+    }
+
+    @NonNull
+    private View buildCard(@NonNull KernelModuleManager.Module mod) {
+        var card = inflater.inflate(R.layout.item_kernel_module, list, false);
+        TextView name = card.findViewById(R.id.km_name);
+        Button toggle = card.findViewById(R.id.km_toggle);
+        MaterialSwitch autostart = card.findViewById(R.id.km_autostart);
+
+        name.setText(mod.display);
+        bindStatus(card, mod.loaded);
+        bindWhy(card, mod.display, KernelModuleDescriptions.hasModulePage(mod.name),
+            () -> KernelModuleDescriptions.modulePage(ctx, mod.name));
+
+        toggle.setText(mod.loaded ? R.string.kernel_module_unload : R.string.kernel_module_load);
+        toggle.setOnClickListener(v -> {
+            v.setEnabled(false);
+            doToggle(mod);
+        });
+
+        // Arming autostart requires the module to have been seen loaded. The switch stays
+        // pressable so the refusal can explain itself -- a greyed-out control just looks broken.
+        // Rejected flips it back to off, and that second callback is a no-op (disarming is
+        // always allowed), so there is no loop.
+        autostart.setChecked(KernelModuleManager.isAutostart(ctx, mod.name)
+            && KernelModuleManager.isVerified(mod.name));
+        autostart.setOnCheckedChangeListener((b, checked) -> {
+            if (!KernelModuleManager.setAutostart(ctx, mod.name, checked)) {
+                b.setChecked(false);
+                Toast.makeText(ctx, R.string.kernel_module_autostart_needs_load,
+                    Toast.LENGTH_SHORT).show();
+            }
+        });
+
+        return card;
+    }
+
+    /**
+     * GH-Hugepage-Reserve is not one of the shipped .ko files: it installs as a Magisk/KernelSU
+     * module so it can load at early boot, before memory fragments. Its card therefore has no
+     * load/unload or autostart -- just Download (releases page) or, once installed, Manage
+     * (the dedicated management screen, which owns enable/pool-size/attribution).
+     */
+    @NonNull
+    private View buildHugepageCard(boolean installed, boolean loaded) {
+        var card = inflater.inflate(R.layout.item_kernel_module, list, false);
+        TextView name = card.findViewById(R.id.km_name);
+        Button action = card.findViewById(R.id.km_toggle);
+
+        name.setText(R.string.kernel_module_hugepage_name);
+        bindStatus(card, loaded);
+        bindWhy(card, ctx.getString(R.string.kernel_module_hugepage_name),
+            KernelModuleDescriptions.hasHugepagePage(),
+            () -> KernelModuleDescriptions.hugepagePage(ctx));
+
+        action.setText(installed ? R.string.kernel_module_manage : R.string.hugepage_download);
+        action.setOnClickListener(installed
+            ? v -> ctx.startActivity(new Intent(ctx, HugePageActivity.class))
+            : v -> ctx.startActivity(new Intent(Intent.ACTION_VIEW, Uri.parse(HUGEPAGE_RELEASES))));
+
+        card.findViewById(R.id.km_auto_row).setVisibility(View.GONE);
+        return card;
+    }
+
+    /** Status line: loaded = theme primary, not loaded = bold in the theme's error red. */
+    private void bindStatus(@NonNull View card, boolean loaded) {
+        TextView status = card.findViewById(R.id.km_status);
+        ImageView dot = card.findViewById(R.id.km_dot);
+        status.setText(loaded ? R.string.kernel_module_loaded : R.string.kernel_module_unloaded);
+        status.setTypeface(null, loaded ? Typeface.NORMAL : Typeface.BOLD);
+        int tint = MaterialColors.getColor(card, loaded
+            ? androidx.appcompat.R.attr.colorPrimary
+            : androidx.appcompat.R.attr.colorError);
+        status.setTextColor(tint);
+        dot.setImageTintList(ColorStateList.valueOf(tint));
+    }
+
+    /**
+     * "Why is this needed" opens the module's description page; with no page shipped for this
+     * module (an older prebuilt, or one not extracted yet) the button hides instead of opening
+     * an empty dialog. The page itself is only assembled on click -- {@code hasPage} is the
+     * cheap check the card can afford while building the list.
+     */
+    private void bindWhy(@NonNull View card, @NonNull String title, boolean hasPage,
+                         @NonNull Supplier<String> page) {
+        Button why = card.findViewById(R.id.km_why);
+        if (!hasPage) {
+            why.setVisibility(View.GONE);
+            return;
+        }
+        why.setOnClickListener(v -> {
+            var html = page.get();
+            if (html != null) KernelModuleWhyDialog.show(ctx, title, html);
+        });
+    }
+
+    private void doToggle(@NonNull KernelModuleManager.Module mod) {
+        Toast.makeText(ctx, R.string.kernel_module_working, Toast.LENGTH_SHORT).show();
+        runOnPool(() -> {
+            boolean ok = mod.loaded
+                ? KernelModuleManager.unload(mod.name)
+                : KernelModuleManager.loadAndVerify(mod);
+            main.post(() -> {
+                Toast.makeText(ctx, ok ? R.string.kernel_module_ok : R.string.kernel_module_fail,
+                    Toast.LENGTH_SHORT).show();
+                refresh();
+            });
+        });
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/main/settings/KernelModuleManager.java b/app/src/main/java/cn/classfun/droidvm/ui/main/settings/KernelModuleManager.java
new file mode 100644
index 000000000..cd0779d1d
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/ui/main/settings/KernelModuleManager.java
@@ -0,0 +1,216 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
+package cn.classfun.droidvm.ui.main.settings;
+
+import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
+
+import static cn.classfun.droidvm.lib.Constants.DATA_DIR;
+import static cn.classfun.droidvm.lib.utils.StringUtils.pathJoin;
+
+import android.content.Context;
+import android.content.SharedPreferences;
+
+import androidx.annotation.NonNull;
+import androidx.annotation.Nullable;
+
+import java.io.File;
+import java.util.ArrayList;
+import java.util.HashSet;
+import java.util.List;
+import java.util.Set;
+import java.util.concurrent.ConcurrentHashMap;
+import java.util.regex.Pattern;
+
+import cn.classfun.droidvm.lib.utils.RunUtils;
+
+/**
+ * Manages the host kernel modules the app ships under {@code usr/lib/modules/<kmi>/} (currently the
+ * gunyah_share SHARE-blob module used by GuestAccept). Selects the {@code .ko} whose KMI directory
+ * matches the running kernel, loads/unloads it via root {@code insmod}/{@code rmmod}, and can
+ * auto-load a user-chosen set at app start. All exec goes through {@link RunUtils} (root/libsu), so
+ * every method here touches root and must be called off the main thread.
+ */
+public final class KernelModuleManager {
+    private static final String PREFS = "droidvm_prefs";
+    private static final String KEY_AUTOSTART = "kernel_module_autostart";
+    private static final String MODULES_ROOT = pathJoin(DATA_DIR, "usr", "lib", "modules");
+    // Leading major.minor of `uname -r` (e.g. "6.6.30-android15-..." -> "6.6"), matched against the
+    // KMI dir names ("android15-6.6", "android16-6.12") to pick the right build for this kernel.
+    private static final Pattern KVER = Pattern.compile("^(\\d+\\.\\d+)");
+
+    /**
+     * Modules seen loaded on this device this session -- the gate on arming autostart.
+     *
+     * Deliberately in memory only. It is a hint, not a setting: the point is that a module must
+     * have demonstrably loaded before it is put in the daemon's startup path, and a fresh process
+     * can re-establish that for free from /proc/modules (see list()). Persisting it would outlive
+     * the kernel it was true for -- an OTA changes the KMI and the claim silently stops holding.
+     */
+    private static final Set<String> VERIFIED = ConcurrentHashMap.newKeySet();
+
+    private KernelModuleManager() {
+    }
+
+    public static final class Module {
+        public final String name;    // normalized module name, e.g. "gunyah_host_share_gki_6.6"
+        public final String display; // human title for the card; name stays the load/prefs key
+        public final String path;    // absolute .ko path for this device's KMI
+        public final boolean loaded;
+
+        Module(@NonNull String name, @NonNull String display, @NonNull String path,
+               boolean loaded) {
+            this.name = name;
+            this.display = display;
+            this.path = path;
+            this.loaded = loaded;
+        }
+    }
+
+    // The per-KMI suffix disambiguates the .ko files and /sys/module entries, nothing more.
+    // The list header already states the KMI, so a module nobody named still displays without it.
+    private static final Pattern GKI_SUFFIX = Pattern.compile("_gki_\\d+\\.\\d+$");
+
+    /** Card title: the {@code names} entry from match.json, else the name minus its KMI tag. */
+    @NonNull
+    private static String displayNameFor(@NonNull String name) {
+        var explicit = KernelModuleMatch.displayName(name);
+        return explicit != null ? explicit : GKI_SUFFIX.matcher(name).replaceFirst("");
+    }
+
+    /** The {@code modules/<kmi>} dir whose name embeds the running kernel's major.minor, else null. */
+    @Nullable
+    private static File deviceKmiDir() {
+        var subs = new File(MODULES_ROOT).listFiles(File::isDirectory);
+        if (subs == null || subs.length == 0) return null;
+        var m = KVER.matcher(RunUtils.runList("uname", "-r").getOutString().trim());
+        if (m.find()) {
+            String mmver = m.group(1);
+            // Match the version as a whole "-<major.minor>" token, not a substring: a plain
+            // contains() would let a 6.1 kernel match an "android16-6.12" dir ("6.12" contains
+            // "6.1"). Require the char after the version to be a non-digit or end-of-name.
+            var quoted = Pattern.quote(fmt("-%s", mmver));
+            var tok = Pattern.compile(fmt("%s(\\D|$)", quoted));
+            for (var d : subs)
+                if (tok.matcher(d.getName()).find()) return d;
+        }
+        return subs[0]; // fallback: single/first KMI dir
+    }
+
+    /** Name of the KMI dir picked for this device (e.g. "android15-6.6"), or null. Runs root exec. */
+    @Nullable
+    public static String deviceKmi() {
+        var d = deviceKmiDir();
+        return d == null ? null : d.getName();
+    }
+
+    /** Names of currently-loaded modules, from {@code /proc/modules} (needs root). */
+    @NonNull
+    private static Set<String> loadedNames() {
+        var set = new HashSet<String>();
+        var r = RunUtils.run("cat /proc/modules");
+        if (r.isSuccess()) {
+            for (var line : r.getOutString().split("\n")) {
+                int sp = line.indexOf(' ');
+                if (sp > 0) set.add(line.substring(0, sp).trim());
+            }
+        }
+        return set;
+    }
+
+    /**
+     * Shipped modules that apply to this device: the KMI directory selects the ones built for this
+     * kernel, {@link KernelModuleMatch} then drops the ones built for a different SoC. Both halves
+     * are needed -- a Gunyah module is a matching KMI and a wrong device on a MediaTek phone.
+     */
+    @NonNull
+    public static List<Module> list(@NonNull Context ctx) {
+        var out = new ArrayList<Module>();
+        var dir = deviceKmiDir();
+        if (dir == null) return out;
+        var kos = dir.listFiles((d, n) -> n.endsWith(".ko"));
+        if (kos == null) return out;
+        KernelModuleMatch.preload(ctx);
+        var loaded = loadedNames();
+        for (var ko : kos) {
+            String base = ko.getName().substring(0, ko.getName().length() - 3);
+            String name = base.replace('-', '_'); // /proc/modules uses underscores
+            if (!KernelModuleMatch.allows(name)) continue;
+            boolean isLoaded = loaded.contains(name);
+            // Already loaded -- however it got there, autostart is answerable for it now.
+            if (isLoaded) VERIFIED.add(name);
+            out.add(new Module(name, displayNameFor(name), ko.getAbsolutePath(), isLoaded));
+        }
+        return out;
+    }
+
+    /** {@code insmod} the module; true on success. */
+    public static boolean load(@NonNull String path) {
+    }
+
+    /**
+     * {@code insmod} and, on success, record that this module loads on this device -- which is
+     * what {@link #setAutostart} requires before it will arm one. Use this for user-initiated
+     * loads; {@link #applyAutostart} deliberately does not, since a module can only get there by
+     * having been verified already.
+     */
+    public static boolean loadAndVerify(@NonNull Module mod) {
+        if (!load(mod.path)) return false;
+        VERIFIED.add(mod.name);
+        return true;
+    }
+
+    /** Has this module been seen loaded this session? Arming autostart requires it. */
+    public static boolean isVerified(@NonNull String name) {
+        return VERIFIED.contains(name);
+    }
+
+    /** {@code rmmod} the module by name; true on success. */
+    public static boolean unload(@NonNull String name) {
+        return RunUtils.run("rmmod %s", name).isSuccess();
+    }
+
+    // ---- autostart persistence ----
+
+    @NonNull
+    private static SharedPreferences prefs(@NonNull Context ctx) {
+        return ctx.getSharedPreferences(PREFS, Context.MODE_PRIVATE);
+    }
+
+    @NonNull
+    private static Set<String> autostartSet(@NonNull Context ctx) {
+        // getStringSet's result must not be mutated; copy it.
+        return new HashSet<>(prefs(ctx).getStringSet(KEY_AUTOSTART, new HashSet<>()));
+    }
+
+    public static boolean isAutostart(@NonNull Context ctx, @NonNull String name) {
+        return autostartSet(ctx).contains(name);
+    }
+
+    /**
+     * Arm or disarm autostart. Arming is refused for a module that has never loaded here: the
+     * caller is expected to have greyed the control out, and this is the backstop that keeps an
+     * unverified module out of the boot path regardless. Returns false when refused.
+     */
+    public static boolean setAutostart(@NonNull Context ctx, @NonNull String name, boolean enabled) {
+        if (enabled && !isVerified(name)) return false;
+        var set = autostartSet(ctx);
+        if (enabled) set.add(name);
+        else set.remove(name);
+        prefs(ctx).edit().putStringSet(KEY_AUTOSTART, set).apply();
+        return true;
+    }
+
+    /**
+     * Loads every autostart-enabled module that isn't already loaded. Call off the main thread.
+     * Safe to call repeatedly (skips already-loaded modules).
+     */
+    public static void applyAutostart(@NonNull Context ctx) {
+        var enabled = autostartSet(ctx);
+        if (enabled.isEmpty()) return;
+        for (var mod : list(ctx)) {
+            if (enabled.contains(mod.name) && !mod.loaded)
+                load(mod.path);
+        }
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/main/settings/KernelModuleMatch.java b/app/src/main/java/cn/classfun/droidvm/ui/main/settings/KernelModuleMatch.java
new file mode 100644
index 000000000..f362bbd2e
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/ui/main/settings/KernelModuleMatch.java
@@ -0,0 +1,267 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
+package cn.classfun.droidvm.ui.main.settings;
+
+import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
+
+import static cn.classfun.droidvm.lib.Constants.DATA_DIR;
+import static cn.classfun.droidvm.lib.utils.StringUtils.pathJoin;
+
+import android.content.Context;
+import android.util.Log;
+
+import androidx.annotation.NonNull;
+import androidx.annotation.Nullable;
+
+import org.json.JSONArray;
+import org.json.JSONObject;
+
+import java.io.FileInputStream;
+import java.nio.charset.StandardCharsets;
+import java.util.Locale;
+
+import cn.classfun.droidvm.lib.data.SocIdentity;
+
+/**
+ * Decides which host kernel modules apply to <b>this</b> device.
+ *
+ * <p>The KMI directory already answers "which kernel", and that is only half the question: every
+ * module shipped so far is Gunyah/Qualcomm work that does nothing on a MediaTek or Tensor phone,
+ * and a module written for those later would be just as wrong here. So each module carries a match
+ * rule, and only modules whose rule passes are listed at all.
+ *
+ * <h3>Rules</h3>
+ * Rules live in {@code usr/lib/modules/match.json}, shipped next to the {@code .ko} files by the
+ * repo that builds them, so a new module for a new vendor needs no app change:
+ * <pre>
+ * { "version": 1,
+ *   "modules": {
+ *     "gunyah_host_share": { "soc_vendor": ["qualcomm"] },
+ *     "mtk_whatever":      { "soc_vendor": ["mediatek"], "soc_model_prefix": ["MT69"] } },
+ *   "names": {
+ *     "gunyah_host_share": "Gunyah Host Share" } }
+ * </pre>
+ * The key is a module-name <b>prefix</b> (so {@code udmabuf} covers {@code udmabuf_gki_6.6}) and
+ * the longest matching key wins. Within a field the values are alternatives (OR); across fields
+ * every field must pass (AND). An empty rule matches everything.
+ *
+ * <p>{@code names} maps the same prefixes to the human title the module's card shows
+ * ({@link #displayName}). It is a top-level section, not a rule field, on purpose: an unknown
+ * field <em>inside</em> a rule makes the rule fail (below), so an older app reading a newer
+ * file would stop listing every named module -- whereas it never looks at extra top-level keys.
+ *
+ * <p>Supported fields: {@code soc_vendor} (tokens from {@link SocIdentity}), {@code soc_model}
+ * (exact, case-insensitive), {@code soc_model_prefix}. <b>A field this app does not know makes the
+ * rule fail</b>, rather than being skipped: a newer rule file narrowing a module by something we
+ * cannot evaluate must not end up listing it anyway -- an insmod on the wrong device is a kernel
+ * panic, so the safe default is to say no.
+ *
+ * <p>The app also ships {@code assets/match.json} in the same format. It carries the rule for
+ * GH-Hugepage-Reserve -- which has no {@code .ko} and so no prebuilt to ride on -- and doubles as
+ * the answer for prebuilts older than {@code match.json}, which only ever contained Qualcomm
+ * modules. The device file wins where both describe a module.
+ */
+public final class KernelModuleMatch {
+    private static final String TAG = "KernelModuleMatch";
+    private static final String DEVICE_RULES =
+        pathJoin(DATA_DIR, "usr", "lib", "modules", "match.json");
+    private static final String BUILTIN_RULES = "match.json";
+    /** GH-Hugepage-Reserve's key in the built-in rules; it ships no .ko to name it. */
+    static final String HUGEPAGE = "gh_hugepage_reserve";
+
+    @Nullable
+    private static volatile JSONObject deviceRules;
+    @Nullable
+    private static volatile JSONObject builtinRules;
+    @Nullable
+    private static volatile JSONObject deviceNames;
+    @Nullable
+    private static volatile JSONObject builtinNames;
+    private static volatile boolean loadTried;
+
+    private KernelModuleMatch() {
+    }
+
+    /** Read both rule files once. Does file I/O and getprop: call off the main thread. */
+    static synchronized void preload(@NonNull Context ctx) {
+        if (!loadTried) {
+            loadTried = true;
+            var builtin = parse(readAsset(ctx));
+            builtinRules = builtin == null ? null : builtin.optJSONObject("modules");
+            builtinNames = builtin == null ? null : builtin.optJSONObject("names");
+            SocIdentity.vendor(); // warm the cache while we are off the main thread anyway
+        }
+        // The device file is retried until it is actually read, and only then latched. It lives
+        // in the extracted payload, so "not there" and "not there YET" are the same failure at
+        // this level -- readDeviceFile's own comment says so -- and latching the first attempt
+        // makes a temporary state permanent for the life of the process. That is what happened:
+        // something asked before the payload finished extracting, the rules stayed null, and
+        // every later call fell back to the built-in copy, which silently dropped nproc_guard
+        // from the module list because the built-in had no rule for it.
+        //
+        // The asset above is different and stays a one-shot: it ships inside the APK, so a
+        // failure there is real and will not fix itself by being asked again.
+        if (deviceRules == null) {
+            var device = parse(readDeviceFile());
+            if (device != null) {
+                deviceRules = device.optJSONObject("modules");
+                deviceNames = device.optJSONObject("names");
+            }
+        }
+    }
+
+    /** Does this module (normalized .ko basename) apply to this device? */
+    static boolean allows(@NonNull String moduleName) {
+        var rule = ruleFor(moduleName);
+        if (rule == null) {
+            // Every shipped module has a rule (the build refuses otherwise), so this is a .ko we
+            // know nothing about. Saying no keeps a stray file out of a list whose buttons insmod.
+            Log.w(TAG, fmt("no match rule for %s; not listing it", moduleName));
+            return false;
+        }
+        return eval(rule, moduleName);
+    }
+
+    /** GH-Hugepage-Reserve is a Magisk module, not a .ko, but the same rules decide it. */
+    static boolean allowsHugepage() {
+        var rule = ruleFor(HUGEPAGE);
+        return rule != null && eval(rule, HUGEPAGE);
+    }
+
+    /**
+     * Is there anything here for this device at all? The setup wizard skips its kernel-module page
+     * entirely when there is not -- on a phone none of these modules were written for, the page
+     * would be a list of nothing with instructions to load it. Settings still opens the list; it
+     * just shows the empty state. Does I/O: call off the main thread.
+     */
+    public static boolean anyApplicable(@NonNull Context ctx) {
+        preload(ctx);
+        return allowsHugepage() || !KernelModuleManager.list(ctx).isEmpty();
+    }
+
+    /**
+     * Human title for this module from the files' {@code names} sections, resolved like the
+     * rules (longest prefix, device file first), or null when neither file names it -- the
+     * caller then falls back to something derived from the module name itself.
+     */
+    @Nullable
+    static String displayName(@NonNull String moduleName) {
+        var fromDevice = longestPrefixString(deviceNames, moduleName);
+        return fromDevice != null ? fromDevice : longestPrefixString(builtinNames, moduleName);
+    }
+
+    /** Longest-prefix rule for this module: device file first, then the app's built-in. */
+    @Nullable
+    private static JSONObject ruleFor(@NonNull String moduleName) {
+        var fromDevice = longestPrefix(deviceRules, moduleName);
+        return fromDevice != null ? fromDevice : longestPrefix(builtinRules, moduleName);
+    }
+
+    @Nullable
+    private static String longestPrefixString(@Nullable JSONObject names, @NonNull String name) {
+        if (names == null) return null;
+        String best = null;
+        int bestLen = -1;
+        for (var it = names.keys(); it.hasNext(); ) {
+            var key = it.next();
+            if (key.length() > bestLen && name.startsWith(key)) {
+                var value = names.optString(key);
+                if (!value.isEmpty()) {
+                    best = value;
+                    bestLen = key.length();
+                }
+            }
+        }
+        return best;
+    }
+
+    @Nullable
+    private static JSONObject longestPrefix(@Nullable JSONObject rules, @NonNull String name) {
+        if (rules == null) return null;
+        JSONObject best = null;
+        int bestLen = -1;
+        for (var it = rules.keys(); it.hasNext(); ) {
+            var key = it.next();
+            if (key.length() > bestLen && name.startsWith(key)) {
+                var rule = rules.optJSONObject(key);
+                if (rule != null) {
+                    best = rule;
+                    bestLen = key.length();
+                }
+            }
+        }
+        return best;
+    }
+
+    private static boolean eval(@NonNull JSONObject rule, @NonNull String moduleName) {
+        for (var it = rule.keys(); it.hasNext(); ) {
+            var field = it.next();
+            switch (field) {
+                case "soc_vendor":
+                    if (!anyEquals(rule.optJSONArray(field), SocIdentity.vendor())) return false;
+                    break;
+                case "soc_model":
+                    if (!anyEquals(rule.optJSONArray(field), SocIdentity.model())) return false;
+                    break;
+                case "soc_model_prefix":
+                    if (!anyPrefixOf(rule.optJSONArray(field), SocIdentity.model())) return false;
+                    break;
+                case "comment":
+                    break;
+                default:
+                    Log.w(TAG, fmt("rule for %s uses unknown field '%s'; this app cannot"
+                        + " judge it, so not listing the module", moduleName, field));
+                    return false;
+            }
+        }
+        return true;
+    }
+
+    private static boolean anyEquals(@Nullable JSONArray values, @NonNull String actual) {
+        if (values == null) return false;
+        for (int i = 0; i < values.length(); i++)
+            if (actual.equalsIgnoreCase(values.optString(i))) return true;
+        return false;
+    }
+
+    private static boolean anyPrefixOf(@Nullable JSONArray values, @NonNull String actual) {
+        if (values == null) return false;
+        var lower = actual.toLowerCase(Locale.ROOT);
+        for (int i = 0; i < values.length(); i++) {
+            var p = values.optString(i);
+            if (!p.isEmpty() && lower.startsWith(p.toLowerCase(Locale.ROOT))) return true;
+        }
+        return false;
+    }
+
+    @Nullable
+    private static JSONObject parse(@Nullable String json) {
+        if (json == null) return null;
+        try {
+            return new JSONObject(json);
+        } catch (Exception e) {
+            Log.w(TAG, "unparseable match rules", e);
+            return null;
+        }
+    }
+
+    @Nullable
+    private static String readAsset(@NonNull Context ctx) {
+        try (var in = ctx.getAssets().open(BUILTIN_RULES)) {
+            return new String(in.readAllBytes(), StandardCharsets.UTF_8);
+        } catch (Exception e) {
+            Log.w(TAG, "no built-in match rules", e);
+            return null;
+        }
+    }
+
+    @Nullable
+    private static String readDeviceFile() {
+        try (var in = new FileInputStream(DEVICE_RULES)) {
+            return new String(in.readAllBytes(), StandardCharsets.UTF_8);
+        } catch (Exception e) {
+            return null; // prebuilt predates match.json, or is not extracted yet
+        }
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/main/settings/KernelModuleWhyDialog.java b/app/src/main/java/cn/classfun/droidvm/ui/main/settings/KernelModuleWhyDialog.java
new file mode 100644
index 000000000..4020370f0
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/ui/main/settings/KernelModuleWhyDialog.java
@@ -0,0 +1,86 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
+package cn.classfun.droidvm.ui.main.settings;
+
+import android.annotation.SuppressLint;
+import android.content.Context;
+import android.view.LayoutInflater;
+import android.webkit.WebResourceRequest;
+import android.webkit.WebResourceResponse;
+import android.webkit.WebView;
+import android.webkit.WebViewClient;
+
+import androidx.annotation.NonNull;
+
+import com.google.android.material.color.MaterialColors;
+import com.google.android.material.dialog.MaterialAlertDialogBuilder;
+
+import java.io.ByteArrayInputStream;
+
+import cn.classfun.droidvm.R;
+
+/**
+ * Shows a module's "why is this needed" page ({@link KernelModuleDescriptions}) in a WebView, so
+ * the explanation can use real layout and inline SVG rather than the handful of tags a TextView
+ * understands.
+ *
+ * <p>The page arrives as one self-contained document -- stylesheet inlined, theme and language
+ * already resolved -- so the WebView has nothing to fetch. Everything that could fetch is
+ * therefore turned off: no JavaScript, no file or content access, network loads blocked, and any
+ * request that still gets issued is answered with nothing.
+ */
+final class KernelModuleWhyDialog {
+    /** Tallest the page gets before it scrolls, as a fraction of the screen. */
+    private static final float MAX_HEIGHT_FRACTION = 0.62f;
+
+    private KernelModuleWhyDialog() {
+    }
+
+    @SuppressLint("SetJavaScriptEnabled") // turning it OFF; lint flags the setter either way
+    static void show(@NonNull Context ctx, @NonNull String title, @NonNull String html) {
+        var content = LayoutInflater.from(ctx).inflate(R.layout.dialog_module_descr, null);
+        WebView web = content.findViewById(R.id.descr_web);
+
+        var s = web.getSettings();
+        s.setJavaScriptEnabled(false);
+        s.setAllowFileAccess(false);
+        s.setAllowContentAccess(false);
+        s.setBlockNetworkLoads(true);
+        s.setGeolocationEnabled(false);
+        // The page is authored for this width; don't let the WebView zoom out to a desktop one.
+        s.setLoadWithOverviewMode(false);
+        s.setUseWideViewPort(false);
+
+        // A WebView starts white, which flashes against a dark dialog before the page paints.
+        web.setBackgroundColor(MaterialColors.getColor(content,
+            com.google.android.material.R.attr.colorSurface));
+        web.setWebViewClient(new WebViewClient() {
+            @Override
+            public WebResourceResponse shouldInterceptRequest(WebView view,
+                                                              WebResourceRequest request) {
+                return new WebResourceResponse("text/plain", "utf-8",
+                    new ByteArrayInputStream(new byte[0]));
+            }
+
+            @Override
+            public boolean shouldOverrideUrlLoading(WebView view, WebResourceRequest request) {
+                return true; // these pages have no links; never navigate away from the document
+            }
+        });
+
+        var lp = web.getLayoutParams();
+        lp.height = (int) (ctx.getResources().getDisplayMetrics().heightPixels
+            * MAX_HEIGHT_FRACTION);
+        web.setLayoutParams(lp);
+
+        web.loadDataWithBaseURL(null, html, "text/html", "utf-8", null);
+
+        new MaterialAlertDialogBuilder(ctx)
+            .setTitle(title)
+            .setView(content)
+            .setPositiveButton(android.R.string.ok, null)
+            .setOnDismissListener(d -> web.destroy())
+            .show();
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/main/settings/MainSettingsFragment.java b/app/src/main/java/cn/classfun/droidvm/ui/main/settings/MainSettingsFragment.java
index fd2201256..0c283312f 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/main/settings/MainSettingsFragment.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/main/settings/MainSettingsFragment.java
@@ -103,6 +103,7 @@ public final class MainSettingsFragment extends MainBaseFragment {
     private TextRowWidget itemPrivacy;
     private TextRowWidget itemApiManager;
     private TextRowWidget itemHugepageReserve;
+    private TextRowWidget itemKernelModules;
     private TextRowWidget itemExportConfig;
     private TextRowWidget itemImportConfig;
     private DaemonHelper daemon;
@@ -160,6 +161,7 @@ public void onViewCreated(@NonNull View view, @Nullable Bundle savedInstanceStat
         itemPrivacy = view.findViewById(R.id.item_privacy);
         itemApiManager = view.findViewById(R.id.item_api_manager);
         itemHugepageReserve = view.findViewById(R.id.item_hugepage_reserve);
+        itemKernelModules = view.findViewById(R.id.item_kernel_modules);
         itemExportConfig = view.findViewById(R.id.item_export_config);
         itemImportConfig = view.findViewById(R.id.item_import_config);
         exportConfigLauncher = registerForActivityResult(
@@ -194,6 +196,7 @@ private void initSettings() {
         bindOnClick(itemPrivacy, this::showPrivacyPolicy);
         bindOnClick(itemApiManager, this::showApiManager);
         bindOnClick(itemHugepageReserve, this::showHugePageReserve);
+        bindOnClick(itemKernelModules, this::showKernelModules);
         bindOnClick(itemExportConfig, this::exportConfig);
         bindOnClick(itemImportConfig, this::importConfig);
         itemDaemonStatus.setSubtitle(R.string.settings_daemon_checking);
@@ -512,6 +515,10 @@ private void showHugePageReserve() {
         startActivity(new Intent(requireContext(), HugePageActivity.class));
     }
 
+    private void showKernelModules() {
+        KernelModuleDialog.show(getChildFragmentManager());
+    }
+
     private void exportConfig() {
         var sdf = new SimpleDateFormat("yyyyMMdd_HHmmss", Locale.getDefault());
         var timestamp = sdf.format(new Date());
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/setup/SetupActivity.java b/app/src/main/java/cn/classfun/droidvm/ui/setup/SetupActivity.java
index b470c09b5..a9ada1231 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/setup/SetupActivity.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/setup/SetupActivity.java
@@ -29,6 +29,7 @@
 import cn.classfun.droidvm.ui.setup.base.BaseStepFragment;
 import cn.classfun.droidvm.ui.setup.step.DoneStepFragment;
 import cn.classfun.droidvm.ui.setup.step.ExtractStepFragment;
+import cn.classfun.droidvm.ui.setup.step.KernelModuleStepFragment;
 import cn.classfun.droidvm.ui.setup.step.PrivacyStepFragment;
 import cn.classfun.droidvm.ui.setup.step.RootStepFragment;
 import cn.classfun.droidvm.ui.setup.step.SocStepFragment;
@@ -82,6 +83,8 @@ protected void onCreate(Bundle savedInstanceState) {
             new StorageStepFragment(this),
             new PrivacyStepFragment(this),
             new ExtractStepFragment(this),
+            // After extract: the module list reads the .ko files extract just put in place.
+            new KernelModuleStepFragment(this),
             new DoneStepFragment(this),
         };
         var targetStep = getIntent().getStringExtra(EXTRA_TARGET_STEP);
@@ -117,24 +120,36 @@ private BaseStepFragment findStepByClassName(@NonNull String className) {
         return null;
     }
 
+    /**
+     * Advance to the next step that wants to be shown, or leave the wizard when none does.
+     *
+     * <p>The bounds check has to come before the {@code get}, and "everything after this is
+     * hidden" has to end the wizard rather than fall off the end: a step can hide itself for
+     * reasons that hold on a whole class of devices (the kernel-module page does, on a phone
+     * none of the modules were written for), so a run of hidden steps at the tail is a normal
+     * outcome, not an impossible one.
+     */
     public void onStepCompleted() {
-        if (currentStep < steps.size() - 1) {
-            do currentStep++;
-            while (steps.get(currentStep).isHiddenStep() && currentStep < steps.size());
-            hideFab();
-            showStep(true, true);
-        } else {
+        int next = currentStep + 1;
+        while (next < steps.size() && steps.get(next).isHiddenStep()) next++;
+        if (next >= steps.size()) {
             startActivity(new Intent(this, MainActivity.class));
             finish();
+            return;
         }
+        currentStep = next;
+        hideFab();
+        showStep(true, true);
     }
 
+    /** Back to the previous shown step; a hidden one is skipped here too, not landed on. */
     public void onStepBack() {
-        if (currentStep > 0) {
-            currentStep--;
-            hideFab();
-            showStep(true, false);
-        }
+        int prev = currentStep - 1;
+        while (prev >= 0 && steps.get(prev).isHiddenStep()) prev--;
+        if (prev < 0) return;
+        currentStep = prev;
+        hideFab();
+        showStep(true, false);
     }
 
     public void showFab(int iconRes, Runnable action) {
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/setup/step/KernelModuleStepFragment.java b/app/src/main/java/cn/classfun/droidvm/ui/setup/step/KernelModuleStepFragment.java
new file mode 100644
index 000000000..9160eb7ef
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/ui/setup/step/KernelModuleStepFragment.java
@@ -0,0 +1,90 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
+package cn.classfun.droidvm.ui.setup.step;
+
+import static cn.classfun.droidvm.lib.utils.ThreadUtils.runOnPool;
+
+import android.os.Bundle;
+import android.text.Html;
+import android.text.method.LinkMovementMethod;
+import android.view.LayoutInflater;
+import android.view.View;
+import android.view.ViewGroup;
+import android.widget.TextView;
+
+import androidx.annotation.NonNull;
+import androidx.annotation.Nullable;
+
+import cn.classfun.droidvm.R;
+import cn.classfun.droidvm.ui.main.settings.KernelModuleListController;
+import cn.classfun.droidvm.ui.main.settings.KernelModuleMatch;
+import cn.classfun.droidvm.ui.setup.SetupActivity;
+import cn.classfun.droidvm.ui.setup.base.BaseStepFragment;
+
+/**
+ * Setup step reminding the user the host kernel modules must be loaded: shows the same list the
+ * settings' Kernel Module dialog shows ({@link KernelModuleListController}), right after the
+ * extract step put the .ko files in place. Loading here is optional (each card explains itself),
+ * so the continue FAB is always available.
+ *
+ * <p>Skipped entirely on a device none of the modules were written for -- every module shipped so
+ * far is Qualcomm/Gunyah work, and on a MediaTek or Tensor phone this page would be an empty list
+ * telling the user to load it. Settings still opens the same list there; it just shows nothing.
+ */
+public final class KernelModuleStepFragment extends BaseStepFragment {
+    /**
+     * Whether anything applies here. Answered off the main thread when the root check lands (the
+     * same signal the extract step waits for), because {@link #isHiddenStep()} is asked during a
+     * step transition and cannot go and find out then. Defaults to showing the page: an answer
+     * that never arrived is not evidence that the page is useless.
+     */
+    private volatile boolean applicable = true;
+
+    public KernelModuleStepFragment(SetupActivity activity) {
+        this.activity = activity;
+        // Registered here, not in onAttach: a step is attached only once it is shown, and the
+        // question "should this step be shown at all" is settled several steps earlier. Its own
+        // slot key, because the event map is keyed by slot and another step already listens for
+        // this event -- reusing the key would silently unregister that one.
+        addEventListener("rootCheckDone.kmod", this::onEvent);
+    }
+
+    @Override
+    public void onDestroy() {
+        removeEventListener("rootCheckDone.kmod");
+        super.onDestroy();
+    }
+
+    private void onEvent(@NonNull String type) {
+        if (!type.equals("rootCheckDone")) return;
+        var ctx = activity.getApplicationContext();
+        runOnPool(() -> applicable = KernelModuleMatch.anyApplicable(ctx));
+    }
+
+    @Override
+    public boolean isHiddenStep() {
+        return !applicable;
+    }
+
+    @Nullable
+    @Override
+    public View onCreateView(
+        @NonNull LayoutInflater inflater,
+        @Nullable ViewGroup container,
+        @Nullable Bundle savedInstanceState
+    ) {
+        return inflater.inflate(R.layout.fragment_setup_step_kmod, container, false);
+    }
+
+    @Override
+    public void onViewCreated(@NonNull View view, @Nullable Bundle savedInstanceState) {
+        super.onViewCreated(view, savedInstanceState);
+        TextView desc = view.findViewById(R.id.kmod_desc);
+        desc.setText(Html.fromHtml(getString(R.string.setup_kmod_desc),
+            Html.FROM_HTML_MODE_COMPACT));
+        desc.setMovementMethod(LinkMovementMethod.getInstance());
+        new KernelModuleListController(requireContext(), view).refresh();
+        activity.showFab(R.drawable.ic_arrow_forward, activity::onStepCompleted);
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/VMActions.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/VMActions.java
index 9e74906ae..d9928e3e5 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/VMActions.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/VMActions.java
@@ -45,6 +45,8 @@
 import cn.classfun.droidvm.ui.disk.action.BackingChainLinker;
 import cn.classfun.droidvm.ui.disk.tree.DiskTree;
 import cn.classfun.droidvm.lib.store.vm.VMBackend;
+import cn.classfun.droidvm.lib.hugepage.PoolPreflight;
+import cn.classfun.droidvm.ui.hugepage.HugePageActivity;
 import cn.classfun.droidvm.lib.store.vm.VMConfig;
 import cn.classfun.droidvm.lib.store.vm.VMStore;
 import cn.classfun.droidvm.lib.ui.UIContext;
@@ -77,9 +79,66 @@ public static void createAndStart(
         @Nullable ConvertLauncher convertLauncher
     ) {
         // Pre-start guards, in order: internal snapshots (crosvm refuses the disk), a base
+        // image attached writable (writing would corrupt its overlays - any backend),
+        // compressed clusters (crosvm boots to I/O errors), and a huge-page reserve too small
+        // to back this VM. Each prompts with its fix and chains to the next; everything else
+        // starts normally.
         guardSnapshotDisks(config, mainHandler, ui, convertLauncher,
             () -> guardLockedParents(config, mainHandler, ui,
                 () -> guardCompressedDisks(config, mainHandler, ui, convertLauncher,
+                    () -> guardHugePagePool(config, mainHandler, ui,
+                        () -> startAfterGuard(config, mainHandler, ui, wantOpenConsole)))));
+    }
+
+    /**
+     * Pre-start check: can the huge-page reserve back this VM right now?
+     *
+     * <p>When it cannot, the memory crosvm hands the hypervisor comes from ordinary movable
+     * memory instead of the reserve's isolated folios, and handing that over means migrating it
+     * out of CMA first -- which on a tight phone has stalled the whole host for minutes or reset
+     * it outright. The pool refills a couple of seconds after a VM exits, so the usual cause is
+     * simply starting again too soon, and the usual fix is to wait a moment and retry.
+     *
+     * <p>Foreground starts ask rather than wait: someone is looking at the screen, and they may
+     * well know something we do not (a smaller VM about to be shut down, a deliberate
+     * experiment). Background starts wait instead -- see {@code PoolPreflight.waitForPool}.
+     */
+    private static void guardHugePagePool(
+        @NonNull VMConfig config,
+        @NonNull Handler mainHandler,
+        @NonNull UIContext ui,
+        @NonNull Runnable proceed
+    ) {
+        runOnPool(() -> {
+            var status = PoolPreflight.check(config.item);
+            if (status.isEnough()) {
+                mainHandler.post(proceed);
+                return;
+            }
+            mainHandler.post(() -> promptHugePageShort(ui, status, proceed));
+        });
+    }
+
+    private static void promptHugePageShort(
+        @NonNull UIContext ui,
+        @NonNull PoolPreflight.Status status,
+        @NonNull Runnable proceed
+    ) {
+        if (!ui.isAlive()) {
+            // Nobody to ask: the start was requested, so honour it.
+            proceed.run();
+            return;
+        }
+        var ctx = ui.getContext();
+        new MaterialAlertDialogBuilder(ctx)
+            .setTitle(R.string.vm_hugepage_short_title)
+            .setMessage(ctx.getString(R.string.vm_hugepage_short_message,
+                status.availMb(), status.neededMb(), status.shortMb()))
+            .setPositiveButton(R.string.vm_hugepage_short_settings, (d, w) ->
+                ctx.startActivity(new Intent(ctx, HugePageActivity.class)))
+            .setNeutralButton(R.string.vm_hugepage_short_start_anyway, (d, w) -> proceed.run())
+            .setNegativeButton(android.R.string.cancel, null)
+            .show();
     }
 
     private static void startAfterGuard(
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/widgets/row/RowTouchFeedback.java b/app/src/main/java/cn/classfun/droidvm/ui/widgets/row/RowTouchFeedback.java
new file mode 100644
index 000000000..bf17c0c73
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/ui/widgets/row/RowTouchFeedback.java
@@ -0,0 +1,37 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
+package cn.classfun.droidvm.ui.widgets.row;
+
+import android.view.View;
+
+import androidx.annotation.NonNull;
+
+/**
+ * Ripple for rows that actually do something when tapped.
+ *
+ * <p>The row widgets made themselves clickable but drew nothing on touch, so a
+ * settings list looked identical whether a row navigated somewhere or was a
+ * read-only readout - the affordance existed only in the developer's head.
+ *
+ * <p>It lands on the <b>foreground</b>, not the background: a caller may have
+ * given the row a background in XML, and the ripple has to draw over the row's
+ * content rather than replace what is behind it. Applied from the row's own
+ * {@code setOnClickListener}, so the ripple appears and disappears with the
+ * listener and can never outlive it.
+ */
+final class RowTouchFeedback {
+    private RowTouchFeedback() {
+    }
+
+    static void apply(@NonNull View row, boolean clickable) {
+        if (!clickable) {
+            row.setForeground(null);
+            return;
+        }
+        try (var a = row.getContext().obtainStyledAttributes(
+            new int[]{android.R.attr.selectableItemBackground})) {
+            row.setForeground(a.getDrawable(0));
+        }
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/widgets/row/ShrinkToFitRow.java b/app/src/main/java/cn/classfun/droidvm/ui/widgets/row/ShrinkToFitRow.java
new file mode 100644
index 000000000..973f49532
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/ui/widgets/row/ShrinkToFitRow.java
@@ -0,0 +1,95 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
+package cn.classfun.droidvm.ui.widgets.row;
+
+import android.content.Context;
+import android.util.AttributeSet;
+import android.view.View;
+import android.widget.LinearLayout;
+
+import androidx.annotation.NonNull;
+import androidx.annotation.Nullable;
+
+/**
+ * A horizontal LinearLayout whose children shrink instead of clipping when the row is too
+ * narrow for them. With room to spare it behaves exactly like its parent class (weights
+ * expand, gravity applies); once the children's natural widths overflow the row, every
+ * child is scaled down by the one factor that just makes the row fit -- the same ratio for
+ * all of them, dictated by the overflow, so the row reads as itself at a smaller size
+ * rather than as a different layout.
+ *
+ * <p>The shrink path measures children at their natural size and applies the factor as a
+ * draw-time scale ({@code scaleX/scaleY}), laying each child at its scaled position by
+ * hand. Touch targets follow the transform (Android hit-tests through it), so controls
+ * stay tappable at their visual location; they do get smaller, which is the point.
+ *
+ * <p>Weighted children get their leftover-space share only on the roomy path -- in the
+ * shrunk row there is no leftover, so a weighted {@code Space} collapses and the row
+ * packs left-to-right. Children keep their measured (unscaled) sizes, so anything that
+ * depends on post-layout pixel sizes inside a shrunk row would see pre-scale values.
+ */
+public final class ShrinkToFitRow extends LinearLayout {
+    private float fit = 1f;
+
+    public ShrinkToFitRow(@NonNull Context ctx, @Nullable AttributeSet attrs) {
+        super(ctx, attrs);
+    }
+
+    @Override
+    protected void onMeasure(int widthMeasureSpec, int heightMeasureSpec) {
+        // Natural pass: what the row wants with no width limit (weights get nothing).
+        int un = MeasureSpec.makeMeasureSpec(0, MeasureSpec.UNSPECIFIED);
+        super.onMeasure(un, un);
+        int needed = getMeasuredWidth();
+        int avail = MeasureSpec.getSize(widthMeasureSpec);
+        if (MeasureSpec.getMode(widthMeasureSpec) == MeasureSpec.UNSPECIFIED
+            || needed <= avail) {
+            fit = 1f;
+            super.onMeasure(widthMeasureSpec, heightMeasureSpec);
+            return;
+        }
+        int padH = getPaddingLeft() + getPaddingRight();
+        int padV = getPaddingTop() + getPaddingBottom();
+        fit = needed - padH <= 0 ? 1f : (avail - padH) / (float) (needed - padH);
+        // Children keep the natural measurement; the row reports the scaled footprint
+        // (its height shrinks with the content -- same ratio vertically as horizontally).
+        int h = padV + Math.round((getMeasuredHeight() - padV) * fit);
+        setMeasuredDimension(avail, resolveSize(h, heightMeasureSpec));
+    }
+
+    @Override
+    protected void onLayout(boolean changed, int l, int t, int r, int b) {
+        if (fit >= 1f) {
+            // Coming back from a shrunk state (rotation, text change) the transforms
+            // must not linger.
+            for (int i = 0; i < getChildCount(); i++) {
+                var c = getChildAt(i);
+                c.setScaleX(1f);
+                c.setScaleY(1f);
+            }
+            super.onLayout(changed, l, t, r, b);
+            return;
+        }
+        float x = getPaddingLeft();
+        int contentH = b - t - getPaddingTop() - getPaddingBottom();
+        for (int i = 0; i < getChildCount(); i++) {
+            var c = getChildAt(i);
+            if (c.getVisibility() == GONE) continue;
+            var lp = (LayoutParams) c.getLayoutParams();
+            int w = c.getMeasuredWidth();
+            int h = c.getMeasuredHeight();
+            x += lp.leftMargin * fit;
+            int cl = Math.round(x);
+            // Center the SCALED height; the transform pivots at the child's top-left, so
+            // the layout position is where the visual ends up.
+            int ct = getPaddingTop() + Math.round((contentH - h * fit) / 2f);
+            c.layout(cl, ct, cl + w, ct + h);
+            c.setPivotX(0f);
+            c.setPivotY(0f);
+            c.setScaleX(fit);
+            c.setScaleY(fit);
+            x += (w + lp.rightMargin) * fit;
+        }
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/widgets/row/SwitchRowWidget.java b/app/src/main/java/cn/classfun/droidvm/ui/widgets/row/SwitchRowWidget.java
index 272f260a8..f917f46a1 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/widgets/row/SwitchRowWidget.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/widgets/row/SwitchRowWidget.java
@@ -91,6 +91,17 @@ public boolean isChecked() {
         return switchView.isChecked();
     }
 
+    /**
+     * The row is clickable from {@code init} (tapping anywhere toggles the
+     * switch) and stops being so under {@link #setSwitchEnabled}; routing both
+     * through one override keeps the ripple honest about which it is.
+     */
+    @Override
+    public void setOnClickListener(@Nullable OnClickListener l) {
+        super.setOnClickListener(l);
+        RowTouchFeedback.apply(this, l != null);
+    }
+
     /**
      * Locks interaction without greying the switch: it keeps its normal
      * on/off colour (so a forced-on state reads as on, not disabled) but
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/widgets/row/TextRowWidget.java b/app/src/main/java/cn/classfun/droidvm/ui/widgets/row/TextRowWidget.java
index d064b3308..9dfe24fd4 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/widgets/row/TextRowWidget.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/widgets/row/TextRowWidget.java
@@ -128,6 +128,7 @@ public void setOnClickListener(@Nullable OnClickListener l) {
         super.setOnClickListener(l);
         setClickable(l != null);
         setFocusable(l != null);
+        RowTouchFeedback.apply(this, l != null);
     }
 }
 
diff --git a/app/src/main/res/layout/activity_hugepage.xml b/app/src/main/res/layout/activity_hugepage.xml
index 98a6e5c87..5443caf6d 100644
--- a/app/src/main/res/layout/activity_hugepage.xml
+++ b/app/src/main/res/layout/activity_hugepage.xml
@@ -357,6 +357,17 @@
                 android:icon="@drawable/ic_nav_vm"
                 android:text="@string/hugepage_stat_active_vms" />
 
+            <!-- Last on the screen, and the only row here that goes anywhere.
+                 The ripple that separates it from the read-only status rows
+                 above comes from the widget itself, once a click listener is
+                 attached (see RowTouchFeedback). -->
+            <cn.classfun.droidvm.ui.widgets.row.TextRowWidget
+                android:id="@+id/row_advanced"
+                android:layout_width="match_parent"
+                android:layout_height="wrap_content"
+                android:icon="@drawable/ic_info"
+                android:text="@string/hugepage_advanced" />
+
         </LinearLayout>
     </androidx.core.widget.NestedScrollView>
 </androidx.coordinatorlayout.widget.CoordinatorLayout>
diff --git a/app/src/main/res/layout/activity_hugepage_advanced.xml b/app/src/main/res/layout/activity_hugepage_advanced.xml
new file mode 100644
index 000000000..6db1b6efc
--- /dev/null
+++ b/app/src/main/res/layout/activity_hugepage_advanced.xml
@@ -0,0 +1,74 @@
+<?xml version="1.0" encoding="utf-8"?><!--
+  The advanced knobs, one row per settings.prop key. Rows carry no android:text:
+  the label IS the raw parameter name and is set in code, so no translation can
+  ever come between these rows and the module documentation they belong to.
+-->
+<LinearLayout xmlns:android="http://schemas.android.com/apk/res/android"
+    xmlns:app="http://schemas.android.com/apk/res-auto"
+    xmlns:tools="http://schemas.android.com/tools"
+    android:layout_width="match_parent"
+    android:layout_height="match_parent"
+    android:fitsSystemWindows="true"
+    android:orientation="vertical"
+    tools:context=".ui.hugepage.HugePageAdvancedActivity">
+
+    <com.google.android.material.appbar.MaterialToolbar
+        android:id="@+id/toolbar"
+        android:layout_width="match_parent"
+        android:layout_height="?attr/actionBarSize"
+        app:navigationIcon="?attr/homeAsUpIndicator" />
+
+    <androidx.core.widget.NestedScrollView
+        android:layout_width="match_parent"
+        android:layout_height="match_parent">
+
+        <LinearLayout
+            android:layout_width="match_parent"
+            android:layout_height="wrap_content"
+            android:paddingBottom="16dp"
+            android:orientation="vertical">
+
+            <TextView
+                android:layout_width="match_parent"
+                android:layout_height="wrap_content"
+                android:layout_marginStart="16dp"
+                android:layout_marginTop="8dp"
+                android:layout_marginEnd="16dp"
+                android:layout_marginBottom="8dp"
+                android:text="@string/hugepage_adv_hint"
+                android:textColor="?attr/colorOnSurfaceVariant"
+                android:textSize="13sp" />
+
+            <cn.classfun.droidvm.ui.widgets.row.TextRowWidget
+                android:id="@+id/row_adv_system_reserve"
+                android:layout_width="match_parent"
+                android:layout_height="wrap_content"
+                android:icon="@drawable/ic_info" />
+
+            <cn.classfun.droidvm.ui.widgets.row.TextRowWidget
+                android:id="@+id/row_adv_cma_floor"
+                android:layout_width="match_parent"
+                android:layout_height="wrap_content"
+                android:icon="@drawable/ic_info" />
+
+            <cn.classfun.droidvm.ui.widgets.row.TextRowWidget
+                android:id="@+id/row_adv_boot_acquire"
+                android:layout_width="match_parent"
+                android:layout_height="wrap_content"
+                android:icon="@drawable/ic_info" />
+
+            <cn.classfun.droidvm.ui.widgets.row.TextRowWidget
+                android:id="@+id/row_adv_boot_acquire_runs"
+                android:layout_width="match_parent"
+                android:layout_height="wrap_content"
+                android:icon="@drawable/ic_info" />
+
+            <cn.classfun.droidvm.ui.widgets.row.TextRowWidget
+                android:id="@+id/row_adv_boot_acquire_wait"
+                android:layout_width="match_parent"
+                android:layout_height="wrap_content"
+                android:icon="@drawable/ic_info" />
+
+        </LinearLayout>
+    </androidx.core.widget.NestedScrollView>
+</LinearLayout>
diff --git a/app/src/main/res/layout/dialog_hugepage_advanced.xml b/app/src/main/res/layout/dialog_hugepage_advanced.xml
new file mode 100644
index 000000000..581215a93
--- /dev/null
+++ b/app/src/main/res/layout/dialog_hugepage_advanced.xml
@@ -0,0 +1,56 @@
+<?xml version="1.0" encoding="utf-8"?><!--
+  One advanced settings.prop key. Deliberately raw: the header line is the
+  module's own key=value readback, not prose - this dialog is reached by people
+  reading the module documentation, and translating the keys would only put a
+  second vocabulary between them and it. The warning below the field is the one
+  piece of prose, because "lower than this device's default" is a judgement the
+  raw numbers cannot make on their own.
+-->
+<LinearLayout xmlns:android="http://schemas.android.com/apk/res/android"
+    xmlns:tools="http://schemas.android.com/tools"
+    android:layout_width="match_parent"
+    android:layout_height="wrap_content"
+    android:orientation="vertical"
+    android:paddingStart="8dp"
+    android:paddingTop="16dp"
+    android:paddingEnd="8dp"
+    android:paddingBottom="8dp">
+
+    <TextView
+        android:id="@+id/tv_adv_live"
+        android:layout_width="match_parent"
+        android:layout_height="wrap_content"
+        android:paddingStart="12dp"
+        android:paddingEnd="12dp"
+        android:paddingBottom="12dp"
+        android:textColor="?attr/colorOnSurfaceVariant"
+        android:textIsSelectable="true"
+        android:textSize="14sp" />
+
+    <com.google.android.material.textfield.TextInputLayout
+        android:id="@+id/til_adv_value"
+        android:layout_width="match_parent"
+        android:layout_height="wrap_content">
+
+        <com.google.android.material.textfield.TextInputEditText
+            android:id="@+id/et_adv_value"
+            android:layout_width="match_parent"
+            android:layout_height="wrap_content"
+            android:importantForAutofill="no"
+            android:inputType="number"
+            android:maxLength="9" />
+    </com.google.android.material.textfield.TextInputLayout>
+
+    <TextView
+        android:id="@+id/tv_adv_warning"
+        android:layout_width="match_parent"
+        android:layout_height="wrap_content"
+        android:paddingStart="12dp"
+        android:paddingTop="8dp"
+        android:paddingEnd="12dp"
+        android:textColor="?attr/colorError"
+        android:textSize="13sp"
+        android:visibility="gone"
+        tools:visibility="visible" />
+
+</LinearLayout>
diff --git a/app/src/main/res/layout/dialog_kernel_modules.xml b/app/src/main/res/layout/dialog_kernel_modules.xml
new file mode 100644
index 000000000..f873b9eb0
--- /dev/null
+++ b/app/src/main/res/layout/dialog_kernel_modules.xml
@@ -0,0 +1,44 @@
+<?xml version="1.0" encoding="utf-8"?>
+<ScrollView xmlns:android="http://schemas.android.com/apk/res/android"
+    xmlns:tools="http://schemas.android.com/tools"
+    android:layout_width="match_parent"
+    android:layout_height="wrap_content">
+
+    <LinearLayout
+        android:layout_width="match_parent"
+        android:layout_height="wrap_content"
+        android:orientation="vertical"
+        android:paddingHorizontal="16dp"
+        android:paddingTop="8dp"
+        android:paddingBottom="8dp">
+
+        <TextView
+            android:id="@+id/km_kmi"
+            android:layout_width="match_parent"
+            android:layout_height="wrap_content"
+            android:paddingBottom="12dp"
+            android:textAppearance="?attr/textAppearanceBodySmall"
+            android:textColor="?attr/colorOnSurfaceVariant"
+            android:visibility="gone"
+            tools:text="KMI: android15-6.6"
+            tools:visibility="visible" />
+
+        <LinearLayout
+            android:id="@+id/km_list"
+            android:layout_width="match_parent"
+            android:layout_height="wrap_content"
+            android:orientation="vertical" />
+
+        <!-- Below the list: the GH-Hugepage-Reserve card is always pinned first, so
+             "loading" / "no modules" refers to the shipped-.ko list under it. -->
+        <TextView
+            android:id="@+id/km_state"
+            android:layout_width="match_parent"
+            android:layout_height="wrap_content"
+            android:paddingVertical="16dp"
+            android:text="@string/kernel_module_loading"
+            android:textAppearance="?attr/textAppearanceBodyMedium" />
+
+    </LinearLayout>
+
+</ScrollView>
diff --git a/app/src/main/res/layout/dialog_module_descr.xml b/app/src/main/res/layout/dialog_module_descr.xml
new file mode 100644
index 000000000..cf91e61c5
--- /dev/null
+++ b/app/src/main/res/layout/dialog_module_descr.xml
@@ -0,0 +1,16 @@
+<?xml version="1.0" encoding="utf-8"?><!--
+  Host for a module description page. The WebView's height is set in code to a
+  fraction of the screen: a WebView cannot measure its own content before it has
+  laid it out, and resizing the dialog afterwards would make it jump.
+-->
+<FrameLayout xmlns:android="http://schemas.android.com/apk/res/android"
+    android:layout_width="match_parent"
+    android:layout_height="match_parent"
+    android:paddingHorizontal="20dp">
+
+    <WebView
+        android:id="@+id/descr_web"
+        android:layout_width="match_parent"
+        android:layout_height="300dp" />
+
+</FrameLayout>
diff --git a/app/src/main/res/layout/fragment_main_settings.xml b/app/src/main/res/layout/fragment_main_settings.xml
index bae60fe20..bfccba464 100644
--- a/app/src/main/res/layout/fragment_main_settings.xml
+++ b/app/src/main/res/layout/fragment_main_settings.xml
@@ -39,6 +39,14 @@
                     android:subtitle="@string/hugepage_subtitle"
                     android:text="@string/hugepage_title" />
 
+                <cn.classfun.droidvm.ui.widgets.row.TextRowWidget
+                    android:id="@+id/item_kernel_modules"
+                    android:layout_width="match_parent"
+                    android:layout_height="wrap_content"
+                    android:icon="@drawable/ic_memory"
+                    android:subtitle="@string/kernel_module_subtitle"
+                    android:text="@string/kernel_module_title" />
+
             </cn.classfun.droidvm.ui.widgets.container.CollapsibleContainer>
 
             <cn.classfun.droidvm.ui.widgets.container.CollapsibleContainer
diff --git a/app/src/main/res/layout/fragment_setup_step_kmod.xml b/app/src/main/res/layout/fragment_setup_step_kmod.xml
new file mode 100644
index 000000000..9c7ea2177
--- /dev/null
+++ b/app/src/main/res/layout/fragment_setup_step_kmod.xml
@@ -0,0 +1,33 @@
+<?xml version="1.0" encoding="utf-8"?>
+<LinearLayout xmlns:android="http://schemas.android.com/apk/res/android"
+    android:layout_width="match_parent"
+    android:layout_height="match_parent"
+    android:orientation="vertical"
+    android:paddingHorizontal="8dp"
+    android:paddingTop="32dp">
+
+    <TextView
+        android:layout_width="match_parent"
+        android:layout_height="wrap_content"
+        android:gravity="center"
+        android:text="@string/kernel_module_title"
+        android:textSize="24sp"
+        android:textStyle="bold" />
+
+    <!-- Text set in code: the string is HTML (contains the file-an-issue link). -->
+    <TextView
+        android:id="@+id/kmod_desc"
+        android:layout_width="match_parent"
+        android:layout_height="wrap_content"
+        android:layout_marginTop="12dp"
+        android:paddingHorizontal="24dp"
+        android:textSize="14sp" />
+
+    <include
+        layout="@layout/dialog_kernel_modules"
+        android:layout_width="match_parent"
+        android:layout_height="0dp"
+        android:layout_marginTop="12dp"
+        android:layout_weight="1" />
+
+</LinearLayout>
diff --git a/app/src/main/res/layout/item_kernel_module.xml b/app/src/main/res/layout/item_kernel_module.xml
new file mode 100644
index 000000000..2cd706661
--- /dev/null
+++ b/app/src/main/res/layout/item_kernel_module.xml
@@ -0,0 +1,137 @@
+<?xml version="1.0" encoding="utf-8"?><!--
+  Two rows, two anchors each, so neither row crowds at a phone dialog's width: the long
+  auto-load control pairs with the name up top, the short load/unload button with the
+  status line below. Both rows are ShrinkToFitRow: in a dialog too narrow for a row's
+  natural width (the English status row already overflows at 360dp; a long name plus the
+  Auto-load control overflows the top row too), the whole row scales down uniformly (name
+  and switch together) so the name stays one line and nothing clips or collapses, rather
+  than the name wrapping to two lines while the switch keeps full size. Each row's
+  weighted Space is what pins its right-hand control to the edge when there IS room; under
+  scaling that Space collapses and the row packs tight before shrinking. The why-button is
+  outlined rather than plain text so it reads as a control, not part of the status line.
+-->
+<com.google.android.material.card.MaterialCardView xmlns:android="http://schemas.android.com/apk/res/android"
+    xmlns:app="http://schemas.android.com/apk/res-auto"
+    xmlns:tools="http://schemas.android.com/tools"
+    android:layout_width="match_parent"
+    android:layout_height="wrap_content"
+    android:layout_marginBottom="8dp"
+    app:cardCornerRadius="12dp"
+    app:cardElevation="0dp"
+    app:strokeColor="?attr/colorOutlineVariant"
+    app:strokeWidth="1dp">
+
+    <LinearLayout
+        android:layout_width="match_parent"
+        android:layout_height="wrap_content"
+        android:orientation="vertical"
+        android:paddingHorizontal="14dp"
+        android:paddingVertical="10dp">
+
+        <cn.classfun.droidvm.ui.widgets.row.ShrinkToFitRow
+            android:layout_width="match_parent"
+            android:layout_height="wrap_content"
+            android:gravity="center_vertical"
+            android:orientation="horizontal">
+
+            <!-- One line: the row scales the whole line down before the name would wrap,
+                 so wrap_content here measures the name's full single-line width. -->
+            <TextView
+                android:id="@+id/km_name"
+                android:layout_width="wrap_content"
+                android:layout_height="wrap_content"
+                android:ellipsize="end"
+                android:maxLines="1"
+                android:textAppearance="?attr/textAppearanceTitleMedium"
+                tools:text="Gunyah Host Share" />
+
+            <Space
+                android:layout_width="0dp"
+                android:layout_height="wrap_content"
+                android:layout_weight="1" />
+
+            <LinearLayout
+                android:id="@+id/km_auto_row"
+                android:layout_width="wrap_content"
+                android:layout_height="wrap_content"
+                android:layout_marginStart="8dp"
+                android:gravity="center_vertical"
+                android:orientation="horizontal">
+
+                <TextView
+                    android:layout_width="wrap_content"
+                    android:layout_height="wrap_content"
+                    android:text="@string/kernel_module_autostart"
+                    android:textAppearance="?attr/textAppearanceBodyMedium" />
+
+                <com.google.android.material.materialswitch.MaterialSwitch
+                    android:id="@+id/km_autostart"
+                    android:layout_width="wrap_content"
+                    android:layout_height="wrap_content"
+                    android:layout_marginStart="8dp"
+                    tools:ignore="TouchTargetSizeCheck" />
+
+            </LinearLayout>
+
+        </cn.classfun.droidvm.ui.widgets.row.ShrinkToFitRow>
+
+        <cn.classfun.droidvm.ui.widgets.row.ShrinkToFitRow
+            android:layout_width="match_parent"
+            android:layout_height="wrap_content"
+            android:layout_marginTop="2dp"
+            android:gravity="center_vertical"
+            android:orientation="horizontal">
+
+            <ImageView
+                android:id="@+id/km_dot"
+                android:layout_width="12dp"
+                android:layout_height="12dp"
+                android:importantForAccessibility="no"
+                android:src="@drawable/ic_circle_filled" />
+
+            <TextView
+                android:id="@+id/km_status"
+                android:layout_width="wrap_content"
+                android:layout_height="wrap_content"
+                android:layout_marginStart="6dp"
+                android:textAppearance="?attr/textAppearanceTitleSmall"
+                tools:text="@string/kernel_module_loaded" />
+
+            <!-- Compact metrics: stock Material button padding and its 48dp min height
+                 would leave the status stranded in a tall, mostly empty row. -->
+            <Button
+                android:id="@+id/km_why"
+                style="@style/Widget.Material3.Button.OutlinedButton"
+                android:layout_width="wrap_content"
+                android:layout_height="wrap_content"
+                android:layout_marginStart="10dp"
+                android:insetTop="0dp"
+                android:insetBottom="0dp"
+                android:minWidth="0dp"
+                android:minHeight="36dp"
+                android:paddingHorizontal="12dp"
+                android:text="@string/kernel_module_why"
+                android:textSize="13sp"
+                tools:ignore="TouchTargetSizeCheck" />
+
+            <Space
+                android:layout_width="0dp"
+                android:layout_height="wrap_content"
+                android:layout_weight="1" />
+
+            <Button
+                android:id="@+id/km_toggle"
+                style="@style/Widget.Material3.Button.OutlinedButton"
+                android:layout_width="wrap_content"
+                android:layout_height="wrap_content"
+                android:layout_marginStart="8dp"
+                android:insetTop="0dp"
+                android:insetBottom="0dp"
+                android:minHeight="40dp"
+                tools:text="@string/kernel_module_load" />
+
+        </cn.classfun.droidvm.ui.widgets.row.ShrinkToFitRow>
+
+    </LinearLayout>
+
+</com.google.android.material.card.MaterialCardView>

From 3c3d1a01b63372f89ca03b67321ed4ab8f98978f Mon Sep 17 00:00:00 2001
From: HuJK <gh@hujk.org>
Date: Sun, 30 Aug 2026 13:37:11 +0800
Subject: [PATCH 132/182] modules: nproc_guard is loaded with this app's uid,
 and reset after a VM exits

Symptom: after a few VM runs the app will not start any more and only a reboot
fixes it. Cause: setuid()'s set_user() -- which updates cred->user, the field
commit_creds() looks at to decide whether to move the NPROC charge -- sits
behind the CAP_SETUID branch. On the saved-uid path only cred->ucounts is
updated, so the process's NPROC charge is never added but is still subtracted
when it exits. Once the counter goes negative, is_rlimit_overlimit() fails
every fork for that uid and Zygote can no longer start anything.

The fix is setresuid() where the switching happens. This is the rescue for the
machines that have already drifted: nproc_guard takes the uid as an insmod
parameter, so the module is loaded with this app's uid, and the VM lifecycle
nudges a reset once a VM has exited. There is no hard dependency in either
direction -- with the module absent its sysfs node does not exist and this side
is a no-op.
---
 .../droidvm/daemon/vm/VMInstance.java         | 24 +++++++++++++++++++
 .../ui/main/settings/KernelModuleManager.java | 23 ++++++++++++++++++
 2 files changed, 47 insertions(+)

diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/vm/VMInstance.java b/app/src/main/java/cn/classfun/droidvm/daemon/vm/VMInstance.java
index 0a45c3ce9..b8ff468e1 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/vm/VMInstance.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/vm/VMInstance.java
@@ -20,6 +20,8 @@
 import org.json.JSONException;
 import org.json.JSONObject;
 
+import java.io.File;
+import java.io.FileOutputStream;
 import java.util.ArrayList;
 import java.util.List;
 import java.util.UUID;
@@ -478,10 +480,32 @@ private void runVM() {
             scheduleRelaunch();
             return;
         }
+        nprocGuardResetBestEffort();
         setState(VMState.STOPPED);
         fireEvent("exited", null);
     }
 
+    /**
+     * Best-effort, run by the daemon once a VM's process has fully exited: ask nproc_guard to
+     * recompute the app uid's RLIMIT_NPROC ucounts counter back to its true live count. crosvm
+     * drops its real uid to the app's (setresuid, to reach the camera/mic/app-scoped files), and
+     * on some kernels that real-uid switching leaves the per-uid NPROC accounting slightly off;
+     * left to drift across many VM runs it eventually blocks the app from launching until a
+     * reboot. Doing it here -- process gone, uid idle -- is the exact, race-free moment to correct
+     * it. The guard module is loaded with this app's uid, so a bare "1" is enough; if it is not
+     * loaded the sysfs node is absent and this is a no-op.
+     */
+    private static void nprocGuardResetBestEffort() {
+        var reset = new File("/sys/kernel/nproc_guard/reset");
+        if (!reset.exists())
+            return;
+        try (var os = new FileOutputStream(reset)) {
+            os.write('1');
+        } catch (Exception e) {
+            Log.d(TAG, "nproc_guard reset skipped", e);
+        }
+    }
+
     // Relaunch off the worker thread: start() joins workerThread (this thread),
     // and the short sleep settles same-name TAP recreation before re-setup.
     /**
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/main/settings/KernelModuleManager.java b/app/src/main/java/cn/classfun/droidvm/ui/main/settings/KernelModuleManager.java
index cd0779d1d..a089d1c03 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/main/settings/KernelModuleManager.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/main/settings/KernelModuleManager.java
@@ -146,6 +146,23 @@ public static List<Module> list(@NonNull Context ctx) {
 
     /** {@code insmod} the module; true on success. */
     public static boolean load(@NonNull String path) {
+        return RunUtils.run("insmod %s%s", RunUtils.escapedString(path), insmodArgsFor(path))
+                .isSuccess();
+    }
+
+    /**
+     * Extra {@code insmod} parameters for modules that need per-device runtime configuration.
+     *
+     * nproc_guard must be told which app uid to guard: it differs per device (and per user
+     * profile), so it is not hardcoded, and a bare insmod leaves the module inert. Pass this
+     * app's own uid -- the same uid crosvm and Zygote run the app's processes as, and the one
+     * whose RLIMIT_NPROC ucounts counter can wedge.
+     */
+    @NonNull
+    private static String insmodArgsFor(@NonNull String path) {
+        if (new File(path).getName().startsWith("nproc-guard"))
+            return fmt(" uid=%d", android.os.Process.myUid());
+        return "";
     }
 
     /**
@@ -204,6 +221,12 @@ public static boolean setAutostart(@NonNull Context ctx, @NonNull String name, b
     /**
      * Loads every autostart-enabled module that isn't already loaded. Call off the main thread.
      * Safe to call repeatedly (skips already-loaded modules).
+     *
+     * nproc_guard (the no-reboot rescue for the app-launch wedge) is opt-in like any other module:
+     * not every device exhibits the RLIMIT_NPROC drift, so it is loaded only when the user enables
+     * it in the Kernel Module tab. That single toggle is the whole opt-in -- while it is loaded the
+     * daemon also nudges its reset after each VM stop; while it is not, that reset is a no-op
+     * (the sysfs node is absent), so the default is to do nothing.
      */
     public static void applyAutostart(@NonNull Context ctx) {
         var enabled = autostartSet(ctx);

From 36c3e667aed9608f1894ce7315229cde8f01dedf Mon Sep 17 00:00:00 2001
From: HuJK <gh@hujk.org>
Date: Sun, 30 Aug 2026 13:37:12 +0800
Subject: [PATCH 133/182] network: ready-made networks, and a setup step that
 makes one

A VM with no network is not much of a VM, and the network editor asks for a
bridge type, an uplink mode, a subnet and a VLAN before it will produce one.
NetworkPresets answers those questions for the two cases that cover almost
everybody: a Wi-Fi pseudo-bridge, where the VM sits on the phone's own segment
and takes its address from the upstream router (Wi-Fi in station mode cannot be
enslaved into a Linux bridge, hence pseudo), and a routed network with one
untagged VLAN, NAT to whatever uplink the host has, and DHCP.

The editor builds its blank form from the same helpers, so a network created in
one tap and one typed out by hand pick their subnets from the same pool and
avoid the same conflicts. The setup wizard gains a step that makes one, because
first run is exactly when the user does not yet have an opinion about bridge
types.
---
 .../droidvm/ui/network/NetworkPresets.java    | 225 ++++++++++++++++++
 .../ui/network/edit/NetworkEditActivity.java  |  98 +-------
 .../droidvm/ui/setup/SetupActivity.java       |   3 +
 .../ui/setup/step/NetworkStepFragment.java    | 168 +++++++++++++
 .../main/res/drawable/ic_large_network.xml    |  28 +++
 .../layout/fragment_setup_step_network.xml    |  91 +++++++
 6 files changed, 524 insertions(+), 89 deletions(-)
 create mode 100644 app/src/main/java/cn/classfun/droidvm/ui/network/NetworkPresets.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/ui/setup/step/NetworkStepFragment.java
 create mode 100644 app/src/main/res/drawable/ic_large_network.xml
 create mode 100644 app/src/main/res/layout/fragment_setup_step_network.xml

diff --git a/app/src/main/java/cn/classfun/droidvm/ui/network/NetworkPresets.java b/app/src/main/java/cn/classfun/droidvm/ui/network/NetworkPresets.java
new file mode 100644
index 000000000..b6d4518d4
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/ui/network/NetworkPresets.java
@@ -0,0 +1,225 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
+package cn.classfun.droidvm.ui.network;
+
+import static cn.classfun.droidvm.lib.utils.NetUtils.generateRandomMac;
+import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
+
+import androidx.annotation.NonNull;
+import androidx.annotation.Nullable;
+
+import java.util.List;
+import java.util.Random;
+import java.util.UUID;
+
+import cn.classfun.droidvm.daemon.network.backend.UplinkResolver;
+import cn.classfun.droidvm.lib.network.IPv4Network;
+import cn.classfun.droidvm.lib.network.IPv6Network;
+import cn.classfun.droidvm.lib.store.base.DataItem;
+import cn.classfun.droidvm.lib.store.network.BridgeType;
+import cn.classfun.droidvm.lib.store.network.Ipv6Source;
+import cn.classfun.droidvm.lib.store.network.NetworkConfig;
+import cn.classfun.droidvm.lib.store.network.NetworkStore;
+import cn.classfun.droidvm.lib.store.network.UplinkMode;
+import cn.classfun.droidvm.lib.store.network.VlanConfig;
+
+/**
+ * Ready-made network configs, and the address picking they share with the network editor.
+ *
+ * <p>The editor builds its blank form from the same helpers, so a network created here in one
+ * tap and one typed out by hand pick their subnets from the same pool and avoid the same
+ * conflicts. Everything is static: none of it needs a live screen.
+ */
+public final class NetworkPresets {
+    /** bridge + "v"/"." + 2-char VLAN code must fit IFNAMSIZ (15 usable). */
+    public static final int MAX_BRIDGE_NAME_LEN = 12;
+    private static final Random RANDOM = new Random();
+
+    private NetworkPresets() {
+    }
+
+    /**
+     * A Wi-Fi pseudo-bridge: the VM sits on the phone's own Wi-Fi segment and takes its address
+     * from the upstream router, so there is nothing for us to address, NAT or serve DHCP on.
+     * Wi-Fi in station mode cannot be enslaved into a Linux bridge, hence pseudo-bridging.
+     *
+     * @param name used as both the network name and the bridge interface name
+     */
+    @NonNull
+    public static NetworkConfig wifiPseudoBridge(@NonNull String name) {
+        var config = newConfig(name, BridgeType.LINUX, UplinkMode.L2);
+        config.l2().set("uplink", UplinkResolver.ID_WIFI);
+        config.l2().set("pseudo_bridge", true);
+        return config;
+    }
+
+    /**
+     * A routed network with one untagged VLAN: NAT to whatever uplink the host has, and DHCP for
+     * the VMs on it. Which address families that covers depends on the bridge type -- see
+     * {@link #newVlan}.
+     *
+     * @param name used as both the network name and the bridge interface name
+     * @param pair primary IPv4 and IPv6 CIDRs from {@link #pickFreeCidrPair}, or null to leave
+     *             the VLAN unaddressed
+     */
+    @NonNull
+    public static NetworkConfig routedNat(
+        @NonNull BridgeType type, @NonNull String name, @Nullable String[] pair
+    ) {
+        var config = newConfig(name, type, UplinkMode.L3);
+        config.l3().set("mac_address", generateRandomMac());
+        var vlans = DataItem.newArray();
+        vlans.append(newVlan(0, type, pair).item);
+        config.l3().set("vlans", vlans);
+        return config;
+    }
+
+    /**
+     * The shell both presets fill in. {@code auto_up} is on because a preset exists to spare the
+     * user the setup: the daemon reads networks.json on start and brings it up from there, which
+     * is also the only way a network created before the daemon runs ever starts.
+     */
+    @NonNull
+    private static NetworkConfig newConfig(
+        @NonNull String name, @NonNull BridgeType type, @NonNull UplinkMode mode
+    ) {
+        var config = new NetworkConfig();
+        config.setName(name);
+        config.setBridgeName(name);
+        config.item.set("auto_up", true);
+        config.item.set("stp", false);
+        config.setBridgeType(type);
+        config.setUplinkMode(mode);
+        return config;
+    }
+
+    /** A new VLAN entry with the given paired networks applied (unaddressed when null). */
+    @NonNull
+    public static VlanConfig newVlan(
+        int vlanId, @NonNull BridgeType type, @Nullable String[] pair
+    ) {
+        var vlan = VlanConfig.createDefault(vlanId);
+        if (pair != null) {
+            vlan.ipv4().set("cidr", pair[0]);
+            vlan.ipv6().set("cidr", pair[1]);
+        }
+        var ipv6 = vlan.ipv6();
+        if (type == BridgeType.GVISOR) {
+            // gVisor has IPv6 SNAT, so the ULA prefix is routable: default on
+            ipv6.set("snat", true);
+        } else {
+            // a Linux bridge has no IPv6 NAT and Android rarely holds a
+            // routed prefix, so serving the ULA via DHCPv6/SLAAC hands VMs
+            // addresses with no connectivity: default to a static ULA CIDR
+            // with serving off, and pre-fill the Wi-Fi PD uplink for when the
+            // user switches the source to DHCP-PD
+            ipv6.set("snat", false);
+            ipv6.set("source", Ipv6Source.STATIC.key());
+            var pd = DataItem.newObject();
+            pd.set("uplink", UplinkResolver.ID_WIFI);
+            ipv6.set("pd", pd);
+            ipv6.get("dhcp").set("enabled", false);
+            ipv6.get("slaac").set("enabled", false);
+        }
+        return vlan;
+    }
+
+    /**
+     * Picks N in 50-250 so that 192.168.N.1/24 and fd00:N::1/64 are both free of overlaps with
+     * everything in {@code used4}/{@code used6}. Returns null when no N fits.
+     */
+    @Nullable
+    public static String[] pickFreeCidrPair(
+        @NonNull List<IPv4Network> used4, @NonNull List<IPv6Network> used6
+    ) {
+        for (int attempt = 0; attempt < 400; attempt++) {
+            int n = 50 + RANDOM.nextInt(201); // 50-250
+            IPv4Network cand4;
+            IPv6Network cand6;
+            try {
+                cand4 = IPv4Network.parse(fmt("192.168.%d.1/24", n));
+                cand6 = IPv6Network.parse(fmt("fd00:%d::1/64", n));
+            } catch (Exception e) {
+                continue;
+            }
+            boolean conflicts = false;
+            for (var ex : used4)
+                if (cand4.overlaps(ex)) {
+                    conflicts = true;
+                    break;
+                }
+            if (!conflicts) for (var ex : used6)
+                if (cand6.overlaps(ex)) {
+                    conflicts = true;
+                    break;
+                }
+            if (!conflicts) return new String[]{cand4.toString(), cand6.toString()};
+        }
+        return null;
+    }
+
+    /** Appends every subnet these VLANs hold, primary and secondary, to the given lists. */
+    public static void collectNetworks(
+        @NonNull Iterable<VlanConfig> vlans,
+        @NonNull List<IPv4Network> out4, @NonNull List<IPv6Network> out6
+    ) {
+        for (var vlan : vlans) {
+            var net4 = vlan.getIpv4Network();
+            if (net4 != null) out4.add(net4);
+            for (var cidr : vlan.getIpv4Secondary()) {
+                try {
+                    out4.add(IPv4Network.parse(cidr));
+                } catch (Exception ignored) {
+                }
+            }
+            var net6 = vlan.getIpv6Network();
+            if (net6 != null) out6.add(net6);
+            for (var cidr : vlan.getIpv6Secondary()) {
+                try {
+                    out6.add(IPv6Network.parse(cidr));
+                } catch (Exception ignored) {
+                }
+            }
+        }
+    }
+
+    /** The same, over every network in the store bar {@code exclude}. */
+    public static void collectStoreNetworks(
+        @NonNull NetworkStore store, @Nullable UUID exclude,
+        @NonNull List<IPv4Network> out4, @NonNull List<IPv6Network> out6
+    ) {
+        store.forEach((id, cfg) -> {
+            if (exclude != null && exclude.equals(id)) return;
+            collectNetworks(cfg.getVlans(), out4, out6);
+        });
+    }
+
+    /**
+     * {@code base}, or the first free variant of it, as a name no other network uses for either
+     * its display name or its bridge. Falls back to {@code base} when nothing fits, leaving the
+     * duplicate for the caller's validation to reject.
+     */
+    @NonNull
+    public static String uniqueName(@NonNull NetworkStore store, @NonNull String base) {
+        if (isNameFree(store, base)) return base;
+        var prefix = base.replaceAll("\\d+$", "");
+        var digits = base.substring(prefix.length());
+        long n;
+        try {
+            n = digits.isEmpty() ? 0 : Long.parseLong(digits);
+        } catch (NumberFormatException e) {
+            n = 0;
+        }
+        for (int i = 0; i < 1000; i++) {
+            var candidate = fmt("%s%d", prefix, ++n);
+            if (candidate.length() <= MAX_BRIDGE_NAME_LEN && isNameFree(store, candidate))
+                return candidate;
+        }
+        return base;
+    }
+
+    private static boolean isNameFree(@NonNull NetworkStore store, @NonNull String name) {
+        return store.isNameUnique(name) && store.isBridgeNameUnique(name, null);
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/network/edit/NetworkEditActivity.java b/app/src/main/java/cn/classfun/droidvm/ui/network/edit/NetworkEditActivity.java
index 71d6a5053..423776a80 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/network/edit/NetworkEditActivity.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/network/edit/NetworkEditActivity.java
@@ -32,7 +32,6 @@
 import java.util.ArrayList;
 import java.util.HashSet;
 import java.util.List;
-import java.util.Random;
 import java.util.UUID;
 
 import cn.classfun.droidvm.R;
@@ -42,7 +41,6 @@
 import cn.classfun.droidvm.lib.store.base.DataItem;
 import cn.classfun.droidvm.daemon.network.backend.UplinkResolver;
 import cn.classfun.droidvm.lib.store.network.BridgeType;
-import cn.classfun.droidvm.lib.store.network.Ipv6Source;
 import cn.classfun.droidvm.lib.store.network.NetworkConfig;
 import cn.classfun.droidvm.lib.store.network.NetworkConfigValidator;
 import cn.classfun.droidvm.lib.store.network.NetworkStore;
@@ -50,19 +48,17 @@
 import cn.classfun.droidvm.lib.store.network.VlanConfig;
 import cn.classfun.droidvm.lib.ui.BackAskHelper;
 import cn.classfun.droidvm.lib.ui.IconItemAdapter;
+import cn.classfun.droidvm.ui.network.NetworkPresets;
 import cn.classfun.droidvm.ui.widgets.row.DropdownRowWidget;
 import cn.classfun.droidvm.ui.widgets.row.SwitchRowWidget;
 import cn.classfun.droidvm.ui.widgets.row.TextInputRowWidget;
 
 public final class NetworkEditActivity extends AppCompatActivity {
     public static final String EXTRA_NETWORK_ID = "network_id";
-    /** bridge + "v"/"." + 2-char VLAN code must fit IFNAMSIZ (15 usable). */
-    private static final int MAX_BRIDGE_NAME_LEN = 12;
     /** Interface-name charset: ASCII letters, digits, hyphen, underscore. */
     private static final InputFilter BRIDGE_NAME_CHARSET = (src, start, end, dst, ds, de) ->
         src.subSequence(start, end).toString().matches("[A-Za-z0-9_-]*") ? null : "";
     private final Handler mainHandler = new Handler(Looper.getMainLooper());
-    private final Random random = new Random();
     private final List<VlanConfig> vlans = new ArrayList<>();
     private final List<VlanCardBinder> binders = new ArrayList<>();
     // parallel uplink picker entries: display label, stored value (logical id
@@ -143,7 +139,7 @@ private void initialize() {
         btnAddVlan.setOnClickListener(v -> onAddVlan());
         inputMac.setEndIconOnClickListener(v -> inputMac.setText(generateRandomMac()));
         inputBridge.setFilters(
-            new InputFilter.LengthFilter(MAX_BRIDGE_NAME_LEN),
+            new InputFilter.LengthFilter(NetworkPresets.MAX_BRIDGE_NAME_LEN),
             BRIDGE_NAME_CHARSET
         );
         fab.setOnClickListener(v -> onSaveClicked());
@@ -337,97 +333,21 @@ private void generateDefaults() {
     /** A new VLAN entry with paired random networks (empty when exhausted). */
     @NonNull
     private VlanConfig newVlan(int vlanId) {
-        var vlan = VlanConfig.createDefault(vlanId);
-        var pair = generatePairedCidrs();
-        if (pair != null) {
-            vlan.ipv4().set("cidr", pair[0]);
-            vlan.ipv6().set("cidr", pair[1]);
-        }
-        var ipv6 = vlan.ipv6();
-        if (bridgeType == BridgeType.GVISOR) {
-            // gVisor has IPv6 SNAT, so the ULA prefix is routable: default on
-            ipv6.set("snat", true);
-        } else {
-            // a Linux bridge has no IPv6 NAT and Android rarely holds a
-            // routed prefix, so serving the ULA via DHCPv6/SLAAC hands VMs
-            // addresses with no connectivity: default to a static ULA CIDR
-            // with serving off, and pre-fill the Wi-Fi PD uplink for when the
-            // user switches the source to DHCP-PD
-            ipv6.set("snat", false);
-            ipv6.set("source", Ipv6Source.STATIC.key());
-            var pd = DataItem.newObject();
-            pd.set("uplink", UplinkResolver.ID_WIFI);
-            ipv6.set("pd", pd);
-            ipv6.get("dhcp").set("enabled", false);
-            ipv6.get("slaac").set("enabled", false);
-        }
-        return vlan;
+        return NetworkPresets.newVlan(vlanId, bridgeType, generatePairedCidrs());
     }
 
     /**
-     * Picks N in 50-250 so that 192.168.N.1/24 and fd00:N::1/64 are both
-     * free of overlaps with every other network and this network's other
-     * VLANs. Returns null when no N fits.
+     * A free subnet pair, avoiding every other network and this network's own
+     * VLAN cards. Null when nothing in the pool fits.
      */
     @Nullable
     private String[] generatePairedCidrs() {
         var used4 = new ArrayList<IPv4Network>();
         var used6 = new ArrayList<IPv6Network>();
-        collectUsedNetworks(used4, used6);
-        for (int attempt = 0; attempt < 400; attempt++) {
-            int n = 50 + random.nextInt(201); // 50-250
-            IPv4Network cand4;
-            IPv6Network cand6;
-            try {
-                cand4 = IPv4Network.parse(fmt("192.168.%d.1/24", n));
-                cand6 = IPv6Network.parse(fmt("fd00:%d::1/64", n));
-            } catch (Exception e) {
-                continue;
-            }
-            boolean conflicts = false;
-            for (var ex : used4)
-                if (cand4.overlaps(ex)) {
-                    conflicts = true;
-                    break;
-                }
-            if (!conflicts) for (var ex : used6)
-                if (cand6.overlaps(ex)) {
-                    conflicts = true;
-                    break;
-                }
-            if (!conflicts) return new String[]{cand4.toString(), cand6.toString()};
-        }
-        return null;
-    }
-
-    /** Subnets in use by other networks and by this network's VLAN cards. */
-    private void collectUsedNetworks(
-        @NonNull List<IPv4Network> out4, @NonNull List<IPv6Network> out6
-    ) {
         storeAllBinders();
-        var sources = new ArrayList<>(vlans);
-        store.forEach((id, cfg) -> {
-            if (id.equals(editNetworkId)) return;
-            sources.addAll(cfg.getVlans());
-        });
-        for (var vlan : sources) {
-            var net4 = vlan.getIpv4Network();
-            if (net4 != null) out4.add(net4);
-            for (var cidr : vlan.getIpv4Secondary()) {
-                try {
-                    out4.add(IPv4Network.parse(cidr));
-                } catch (Exception ignored) {
-                }
-            }
-            var net6 = vlan.getIpv6Network();
-            if (net6 != null) out6.add(net6);
-            for (var cidr : vlan.getIpv6Secondary()) {
-                try {
-                    out6.add(IPv6Network.parse(cidr));
-                } catch (Exception ignored) {
-                }
-            }
-        }
+        NetworkPresets.collectNetworks(vlans, used4, used6);
+        NetworkPresets.collectStoreNetworks(store, editNetworkId, used4, used6);
+        return NetworkPresets.pickFreeCidrPair(used4, used6);
     }
 
     private void loadExistingConfig() {
@@ -534,7 +454,7 @@ private void onSaveClicked() {
             return;
         }
         if (!bridgeName.matches("[a-zA-Z][a-zA-Z0-9_-]*")
-            || bridgeName.length() > MAX_BRIDGE_NAME_LEN) {
+            || bridgeName.length() > NetworkPresets.MAX_BRIDGE_NAME_LEN) {
             inputBridge.setError(getString(R.string.network_edit_error_bridge_invalid));
             return;
         }
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/setup/SetupActivity.java b/app/src/main/java/cn/classfun/droidvm/ui/setup/SetupActivity.java
index a9ada1231..70488a82a 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/setup/SetupActivity.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/setup/SetupActivity.java
@@ -30,6 +30,7 @@
 import cn.classfun.droidvm.ui.setup.step.DoneStepFragment;
 import cn.classfun.droidvm.ui.setup.step.ExtractStepFragment;
 import cn.classfun.droidvm.ui.setup.step.KernelModuleStepFragment;
+import cn.classfun.droidvm.ui.setup.step.NetworkStepFragment;
 import cn.classfun.droidvm.ui.setup.step.PrivacyStepFragment;
 import cn.classfun.droidvm.ui.setup.step.RootStepFragment;
 import cn.classfun.droidvm.ui.setup.step.SocStepFragment;
@@ -85,6 +86,8 @@ protected void onCreate(Bundle savedInstanceState) {
             new ExtractStepFragment(this),
             // After extract: the module list reads the .ko files extract just put in place.
             new KernelModuleStepFragment(this),
+            // Before Done, so the user leaves the wizard with a network to attach a VM to.
+            new NetworkStepFragment(this),
             new DoneStepFragment(this),
         };
         var targetStep = getIntent().getStringExtra(EXTRA_TARGET_STEP);
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/setup/step/NetworkStepFragment.java b/app/src/main/java/cn/classfun/droidvm/ui/setup/step/NetworkStepFragment.java
new file mode 100644
index 000000000..73c63ac41
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/ui/setup/step/NetworkStepFragment.java
@@ -0,0 +1,168 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
+package cn.classfun.droidvm.ui.setup.step;
+
+import static android.widget.Toast.LENGTH_LONG;
+import static android.widget.Toast.LENGTH_SHORT;
+
+import android.os.Bundle;
+import android.util.Log;
+import android.view.LayoutInflater;
+import android.view.View;
+import android.view.ViewGroup;
+import android.widget.RadioGroup;
+import android.widget.TextView;
+import android.widget.Toast;
+
+import androidx.annotation.NonNull;
+import androidx.annotation.Nullable;
+
+import java.util.ArrayList;
+
+import cn.classfun.droidvm.R;
+import cn.classfun.droidvm.lib.network.IPv4Network;
+import cn.classfun.droidvm.lib.network.IPv6Network;
+import cn.classfun.droidvm.lib.store.network.BridgeType;
+import cn.classfun.droidvm.lib.store.network.NetworkConfig;
+import cn.classfun.droidvm.lib.store.network.NetworkConfigValidator;
+import cn.classfun.droidvm.lib.store.network.NetworkStore;
+import cn.classfun.droidvm.ui.network.NetworkPresets;
+import cn.classfun.droidvm.ui.setup.SetupActivity;
+import cn.classfun.droidvm.ui.setup.base.BaseStepFragment;
+
+/**
+ * Setup step that creates the user's first network.
+ *
+ * <p>A VM with no NIC attached comes up with no connectivity and nothing on screen says why, so
+ * people reach the VM list without ever visiting the Networks tab and conclude networking is
+ * broken. This page makes one exist before that can happen: three presets, the addresses shown up
+ * front, and the wizard's forward button creates the chosen one.
+ *
+ * <p>The network is only written to networks.json here, never started. The daemon is launched by
+ * the main screen, which the wizard has not reached yet, so the preset carries {@code auto_up}
+ * and the daemon brings it up when it reads the file on start.
+ */
+public final class NetworkStepFragment extends BaseStepFragment {
+    private static final String TAG = "NetworkStepFragment";
+    /** Preset names, doubling as bridge interface names. */
+    private static final String NAME_WIFI = "br-wifi";
+    private static final String NAME_LINUX = "br-net0";
+    private static final String NAME_GVISOR = "br-gv0";
+
+    private final NetworkStore store = new NetworkStore();
+    private boolean storeLoaded = false;
+    private boolean created = false;
+    private RadioGroup rgPreset;
+    private TextView tvInfo;
+    /**
+     * The 192.168.N.1/24 and fd00:N::1/64 pair the routed presets will use. Picked once, when the
+     * page is first shown, because the page prints it: re-rolling it per redraw would show the
+     * user addresses other than the ones they are about to get.
+     */
+    @Nullable
+    private String[] cidrPair;
+
+    public NetworkStepFragment(SetupActivity activity) {
+        this.activity = activity;
+    }
+
+    @NonNull
+    private NetworkStore store() {
+        if (!storeLoaded) {
+            store.load(activity.getApplicationContext());
+            storeLoaded = true;
+        }
+        return store;
+    }
+
+    /**
+     * Shown only when the user has no network at all. Anyone who already has one either built it
+     * themselves or came through this page already, and neither wants a second one appended on a
+     * re-run of the wizard.
+     */
+    @Override
+    public boolean isHiddenStep() {
+        return created || !store().isEmpty();
+    }
+
+    @Nullable
+    @Override
+    public View onCreateView(
+        @NonNull LayoutInflater inflater,
+        @Nullable ViewGroup container,
+        @Nullable Bundle savedInstanceState
+    ) {
+        return inflater.inflate(R.layout.fragment_setup_step_network, container, false);
+    }
+
+    @Override
+    public void onViewCreated(@NonNull View view, @Nullable Bundle savedInstanceState) {
+        super.onViewCreated(view, savedInstanceState);
+        rgPreset = view.findViewById(R.id.rg_net_preset);
+        tvInfo = view.findViewById(R.id.tv_net_info);
+        if (cidrPair == null) {
+            var used4 = new ArrayList<IPv4Network>();
+            var used6 = new ArrayList<IPv6Network>();
+            NetworkPresets.collectStoreNetworks(store(), null, used4, used6);
+            cidrPair = NetworkPresets.pickFreeCidrPair(used4, used6);
+        }
+        rgPreset.setOnCheckedChangeListener((g, id) -> updateInfo());
+        updateInfo();
+        activity.showFab(R.drawable.ic_arrow_forward, this::onNext);
+    }
+
+    /** Name the selected preset would take, with a suffix if that one is somehow taken. */
+    @NonNull
+    private String presetName(int checkedId) {
+        String base;
+        if (checkedId == R.id.rb_net_wifi) base = NAME_WIFI;
+        else if (checkedId == R.id.rb_net_gvisor) base = NAME_GVISOR;
+        else base = NAME_LINUX;
+        return NetworkPresets.uniqueName(store(), base);
+    }
+
+    private void updateInfo() {
+        int checkedId = rgPreset.getCheckedRadioButtonId();
+        var name = presetName(checkedId);
+        if (checkedId == R.id.rb_net_wifi) {
+            tvInfo.setText(getString(R.string.setup_network_info_wifi, name));
+            return;
+        }
+        var unavailable = getString(R.string.setup_network_no_subnet);
+        var v4 = cidrPair != null ? cidrPair[0] : unavailable;
+        var v6 = cidrPair != null ? cidrPair[1] : unavailable;
+        tvInfo.setText(getString(checkedId == R.id.rb_net_gvisor
+            ? R.string.setup_network_info_gvisor
+            : R.string.setup_network_info_linux, name, v4, v6));
+    }
+
+    private void onNext() {
+        int checkedId = rgPreset.getCheckedRadioButtonId();
+        NetworkConfig config;
+        if (checkedId == R.id.rb_net_wifi) {
+            config = NetworkPresets.wifiPseudoBridge(presetName(checkedId));
+        } else {
+            if (cidrPair == null) {
+                Toast.makeText(activity, R.string.setup_network_no_subnet, LENGTH_LONG).show();
+                return;
+            }
+            var type = checkedId == R.id.rb_net_gvisor ? BridgeType.GVISOR : BridgeType.LINUX;
+            config = NetworkPresets.routedNat(type, presetName(checkedId), cidrPair);
+        }
+        try {
+            NetworkConfigValidator.validate(config);
+        } catch (IllegalArgumentException e) {
+            Log.e(TAG, "Preset network failed validation", e);
+            Toast.makeText(activity, e.getMessage(), LENGTH_LONG).show();
+            return;
+        }
+        store().add(config);
+        store().save(activity);
+        created = true;
+        Toast.makeText(activity,
+            getString(R.string.setup_network_created, config.getName()),
+            LENGTH_SHORT).show();
+        activity.onStepCompleted();
+    }
+}
diff --git a/app/src/main/res/drawable/ic_large_network.xml b/app/src/main/res/drawable/ic_large_network.xml
new file mode 100644
index 000000000..0546acb4f
--- /dev/null
+++ b/app/src/main/res/drawable/ic_large_network.xml
@@ -0,0 +1,28 @@
+<?xml version="1.0" encoding="utf-8"?>
+<vector xmlns:android="http://schemas.android.com/apk/res/android"
+    android:width="128dp"
+    android:height="128dp"
+    android:viewportWidth="24"
+    android:viewportHeight="24">
+
+    <path
+        android:fillAlpha="0.2"
+        android:fillColor="#FF000000"
+        android:pathData="M1.6,12.6a10.4,10.4 0 1,0 20.8,0a10.4,10.4 0 1,0 -20.8,0Z"
+        android:strokeAlpha="0.2" />
+
+    <path
+        android:fillColor="#5294e2"
+        android:pathData="M1.6,12a10.4,10.4 0 1,0 20.8,0a10.4,10.4 0 1,0 -20.8,0Z" />
+
+    <group
+        android:pivotX="12"
+        android:pivotY="13"
+        android:scaleX="0.62"
+        android:scaleY="0.62">
+        <path
+            android:fillColor="#ffffff"
+            android:pathData="M15,9H13V7H15V9M22,20V22H15A1,1 0 0,1 14,23H10A1,1 0 0,1 9,22H2V20H9A1,1 0 0,1 10,19H11V17H7A2,2 0 0,1 5,15V5A2,2 0 0,1 7,3H17A2,2 0 0,1 19,5V15A2,2 0 0,1 17,17H13V19H14A1,1 0 0,1 15,20H22M9,5H7V15H9V5M11,15H13V11H15A2,2 0 0,0 17,9V7A2,2 0 0,0 15,5H11V15Z" />
+    </group>
+
+</vector>
diff --git a/app/src/main/res/layout/fragment_setup_step_network.xml b/app/src/main/res/layout/fragment_setup_step_network.xml
new file mode 100644
index 000000000..ddeac4001
--- /dev/null
+++ b/app/src/main/res/layout/fragment_setup_step_network.xml
@@ -0,0 +1,91 @@
+<?xml version="1.0" encoding="utf-8"?>
+<!-- Setup step that creates the user's first network. The three radios map to the presets in
+     NetworkPresets; the card below spells out what the selected one will actually create, so the
+     addresses are visible before the network exists. -->
+<ScrollView xmlns:android="http://schemas.android.com/apk/res/android"
+    xmlns:tools="http://schemas.android.com/tools"
+    android:layout_width="match_parent"
+    android:layout_height="match_parent"
+    android:fillViewport="true">
+
+    <LinearLayout
+        android:layout_width="match_parent"
+        android:layout_height="wrap_content"
+        android:gravity="center_horizontal"
+        android:orientation="vertical"
+        android:paddingHorizontal="32dp"
+        android:paddingTop="32dp"
+        android:paddingBottom="96dp">
+
+        <ImageView
+            android:layout_width="96dp"
+            android:layout_height="96dp"
+            android:layout_marginBottom="24dp"
+            android:contentDescription="@string/setup_step_icon_desc"
+            android:src="@drawable/ic_large_network"
+            tools:ignore="ImageContrastCheck" />
+
+        <TextView
+            android:layout_width="wrap_content"
+            android:layout_height="wrap_content"
+            android:gravity="center"
+            android:text="@string/setup_network_title"
+            android:textSize="24sp"
+            android:textStyle="bold" />
+
+        <TextView
+            android:layout_width="match_parent"
+            android:layout_height="wrap_content"
+            android:layout_marginTop="16dp"
+            android:gravity="center"
+            android:text="@string/setup_network_desc"
+            android:textSize="15sp"
+            tools:ignore="VisualLintLongText" />
+
+        <RadioGroup
+            android:id="@+id/rg_net_preset"
+            android:layout_width="match_parent"
+            android:layout_height="wrap_content"
+            android:layout_marginTop="24dp"
+            android:orientation="vertical">
+
+            <com.google.android.material.radiobutton.MaterialRadioButton
+                android:id="@+id/rb_net_wifi"
+                android:layout_width="match_parent"
+                android:layout_height="wrap_content"
+                android:checked="true"
+                android:text="@string/setup_network_opt_wifi" />
+
+            <com.google.android.material.radiobutton.MaterialRadioButton
+                android:id="@+id/rb_net_linux"
+                android:layout_width="match_parent"
+                android:layout_height="wrap_content"
+                android:text="@string/setup_network_opt_linux" />
+
+            <com.google.android.material.radiobutton.MaterialRadioButton
+                android:id="@+id/rb_net_gvisor"
+                android:layout_width="match_parent"
+                android:layout_height="wrap_content"
+                android:text="@string/setup_network_opt_gvisor" />
+
+        </RadioGroup>
+
+        <com.google.android.material.card.MaterialCardView
+            style="?attr/materialCardViewOutlinedStyle"
+            android:layout_width="match_parent"
+            android:layout_height="wrap_content"
+            android:layout_marginTop="16dp">
+
+            <TextView
+                android:id="@+id/tv_net_info"
+                android:layout_width="match_parent"
+                android:layout_height="wrap_content"
+                android:lineSpacingExtra="4dp"
+                android:padding="16dp"
+                android:textSize="14sp"
+                tools:text="Name: br-net0" />
+
+        </com.google.android.material.card.MaterialCardView>
+
+    </LinearLayout>
+</ScrollView>

From 11fd8802ef2862f337f726d7dd2963a57f22ffef Mon Sep 17 00:00:00 2001
From: HuJK <gh@hujk.org>
Date: Sun, 30 Aug 2026 13:37:12 +0800
Subject: [PATCH 134/182] agent: a headless VM that runs rescue actions, on one
 shared terminal panel

Some things can only be done from inside the guest -- changing a root password
whose value nobody remembers, growing a filesystem to match a disk that was
just resized. The agent runs the guest headless with an extra agent0 chardev on
the QEMU backend, drives it through a queue of actions with a declared spec
each, and shows what it is doing. The queue is ordinary enough to unit-test,
and is.

The password is typed rather than embedded. Building it into the script that
runs inside the guest puts it in a command line, a log and a config file; it is
sent over the agent channel instead, and the payload is chunked because a
console is not a pipe and a long line does not survive one.

The console, the agent screen and the disk operation screen were three copies
of the same terminal, and only one of them could be typed into. They share
TerminalPanelView now. The console and the disk screen are the refactor's
passengers; the agent screen is the change -- a rescue shell you can see is
worth much less than one you can answer.
---
 .../droidvm/lib/ui/ImeInsetsExempt.java       |   2 +-
 .../lib/ui/termux/TerminalPanelView.java      | 244 ++++++
 .../ui/agent/AgentOperationActivity.java      | 694 ++++++++++++++----
 .../ui/agent/autogrow/AutoGrowAction.java     | 156 ++++
 .../ui/agent/base/AgentActionSpec.java        |  71 ++
 .../ui/agent/base/AgentPayloadChunks.java     |  27 +
 .../droidvm/ui/agent/base/AgentVM.java        | 203 ++---
 .../droidvm/ui/agent/base/BaseAction.java     | 102 ++-
 .../password/ChangePasswordActivity.java      |  76 +-
 .../ui/agent/password/PasswordAction.java     |  99 ++-
 .../ui/disk/action/DiskResizeDialog.java      |   1 +
 .../disk/operation/DiskOperationActivity.java |  22 +-
 .../ui/vm/console/VMConsoleActivity.java      | 154 +---
 .../res/layout/activity_agent_operation.xml   |   7 +-
 .../res/layout/activity_disk_operation.xml    |   8 +-
 .../main/res/layout/activity_vm_console.xml   | 105 +--
 .../main/res/layout/view_terminal_panel.xml   | 114 +++
 .../ui/agent/base/AgentActionQueueTest.java   |  87 +++
 18 files changed, 1625 insertions(+), 547 deletions(-)
 create mode 100644 app/src/main/java/cn/classfun/droidvm/lib/ui/termux/TerminalPanelView.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/ui/agent/autogrow/AutoGrowAction.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/ui/agent/base/AgentActionSpec.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/ui/agent/base/AgentPayloadChunks.java
 create mode 100644 app/src/main/res/layout/view_terminal_panel.xml
 create mode 100644 app/src/test/java/cn/classfun/droidvm/ui/agent/base/AgentActionQueueTest.java

diff --git a/app/src/main/java/cn/classfun/droidvm/lib/ui/ImeInsetsExempt.java b/app/src/main/java/cn/classfun/droidvm/lib/ui/ImeInsetsExempt.java
index c20b7b6e6..c01cd2b86 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/ui/ImeInsetsExempt.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/ui/ImeInsetsExempt.java
@@ -5,7 +5,7 @@
 
 /**
  * Marker for activities that manage the soft keyboard themselves (e.g. the
- * terminal/serial console and VNC display, where the IME must overlay the
+ * VNC and native display activities, where the IME must overlay the
  * full-screen surface rather than resize it).
  *
  * <p>{@link ImeInsetsApplier} skips any activity implementing this interface.
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/ui/termux/TerminalPanelView.java b/app/src/main/java/cn/classfun/droidvm/lib/ui/termux/TerminalPanelView.java
new file mode 100644
index 000000000..69d3dc95f
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/lib/ui/termux/TerminalPanelView.java
@@ -0,0 +1,244 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
+package cn.classfun.droidvm.lib.ui.termux;
+
+import static android.content.Context.MODE_PRIVATE;
+import static android.view.HapticFeedbackConstants.KEYBOARD_TAP;
+import static android.view.KeyEvent.ACTION_DOWN;
+import static android.view.KeyEvent.ACTION_UP;
+import static android.view.KeyEvent.KEYCODE_DPAD_DOWN;
+import static android.view.KeyEvent.KEYCODE_DPAD_LEFT;
+import static android.view.KeyEvent.KEYCODE_DPAD_RIGHT;
+import static android.view.KeyEvent.KEYCODE_DPAD_UP;
+import static android.view.KeyEvent.KEYCODE_ESCAPE;
+import static android.view.KeyEvent.KEYCODE_MOVE_END;
+import static android.view.KeyEvent.KEYCODE_MOVE_HOME;
+import static android.view.KeyEvent.KEYCODE_PAGE_DOWN;
+import static android.view.KeyEvent.KEYCODE_PAGE_UP;
+import static android.view.KeyEvent.KEYCODE_TAB;
+import static android.view.View.GONE;
+import static android.view.View.VISIBLE;
+
+import android.content.Context;
+import android.util.AttributeSet;
+import android.view.KeyEvent;
+import android.view.LayoutInflater;
+import android.view.MotionEvent;
+import android.view.View;
+import android.view.inputmethod.InputMethodManager;
+import android.widget.Button;
+import android.widget.LinearLayout;
+
+import androidx.annotation.NonNull;
+import androidx.annotation.Nullable;
+
+import com.termux.terminal.TerminalSession;
+import com.termux.view.TerminalView;
+import com.termux.view.TerminalViewClient;
+
+import cn.classfun.droidvm.R;
+
+/** Shared terminal presentation: font, zoom, soft keyboard and extra keys. */
+public final class TerminalPanelView extends LinearLayout {
+    private static final String PREFS_NAME = "droidvm_prefs";
+    private static final String KEY_FONT_SIZE = "console_font_size";
+    private static final float MIN_FONT_SIZE = 2;
+    private static final float MAX_FONT_SIZE = 48;
+    private static final float DEFAULT_FONT_SIZE = 5;
+
+    private final TerminalView terminalView;
+    private final View extraKeysRow1;
+    private final View extraKeysRow2;
+    private TerminalSession terminalSession;
+    private float currentFontSize;
+    private boolean interactive = false;
+    private boolean ctrlDown = false;
+    private boolean altDown = false;
+
+    private final TerminalViewClient viewClient = new SimpleTerminalViewClient() {
+        @Override
+        public float onScale(float scale) {
+            var dampened = 1.0f + (scale - 1.0f) * 0.1f;
+            currentFontSize = clampFontSize(currentFontSize * dampened);
+            applyFontSize();
+            return dampened;
+        }
+
+        @Override
+        public void onSingleTapUp(MotionEvent e) {
+            if (!interactive) return;
+            var imm = getContext().getSystemService(InputMethodManager.class);
+            if (imm == null) return;
+            terminalView.requestFocus();
+            imm.showSoftInput(terminalView, 0);
+        }
+
+        @Override
+        public boolean readControlKey() {
+            if (!ctrlDown) return false;
+            ctrlDown = false;
+            updateToggleButtons();
+            return true;
+        }
+
+        @Override
+        public boolean readAltKey() {
+            if (!altDown) return false;
+            altDown = false;
+            updateToggleButtons();
+            return true;
+        }
+    };
+
+    public TerminalPanelView(@NonNull Context context) {
+        this(context, null);
+    }
+
+    public TerminalPanelView(@NonNull Context context, @Nullable AttributeSet attrs) {
+        this(context, attrs, 0);
+    }
+
+    public TerminalPanelView(
+        @NonNull Context context,
+        @Nullable AttributeSet attrs,
+        int defStyleAttr
+    ) {
+        super(context, attrs, defStyleAttr);
+        setOrientation(VERTICAL);
+        setBackgroundColor(context.getColor(android.R.color.black));
+        LayoutInflater.from(context).inflate(R.layout.view_terminal_panel, this, true);
+        terminalView = findViewById(R.id.terminal_view);
+        extraKeysRow1 = findViewById(R.id.extra_keys_row1);
+        extraKeysRow2 = findViewById(R.id.extra_keys_row2);
+        terminalView.setTerminalViewClient(viewClient);
+        currentFontSize = loadFontSize();
+        applyFontSize();
+        TerminalFonts.apply(terminalView);
+        setupExtraKeys();
+        applyInteractionState();
+    }
+
+    /** Attaches a session owned and stopped by the host activity. */
+    public void attachSession(@NonNull TerminalSession session) {
+        terminalSession = session;
+        terminalView.attachSession(session);
+    }
+
+    /** Drops the input reference when the host stops the attached session. */
+    public void clearSession(@Nullable TerminalSession session) {
+        if (terminalSession == session) terminalSession = null;
+    }
+
+    /** Allows input and reveals the terminal extra-key rows. Zoom always remains available. */
+    public void setInteractive(boolean value) {
+        if (interactive == value) return;
+        interactive = value;
+        if (!interactive) {
+            ctrlDown = false;
+            altDown = false;
+        }
+        applyInteractionState();
+    }
+
+    public void refresh() {
+        terminalView.onScreenUpdated();
+    }
+
+    private void applyInteractionState() {
+        int visibility = interactive ? VISIBLE : GONE;
+        extraKeysRow1.setVisibility(visibility);
+        extraKeysRow2.setVisibility(visibility);
+        terminalView.setFocusable(interactive);
+        terminalView.setFocusableInTouchMode(interactive);
+        if (interactive) terminalView.requestFocus();
+        updateToggleButtons();
+    }
+
+    private float loadFontSize() {
+        var saved = getContext().getSharedPreferences(PREFS_NAME, MODE_PRIVATE)
+            .getFloat(KEY_FONT_SIZE, DEFAULT_FONT_SIZE);
+        return clampFontSize(saved);
+    }
+
+    private static float clampFontSize(float value) {
+        return Math.max(MIN_FONT_SIZE, Math.min(MAX_FONT_SIZE, value));
+    }
+
+    private void applyFontSize() {
+        var density = getResources().getDisplayMetrics().density;
+        terminalView.setTextSize((int) (currentFontSize * density));
+    }
+
+    private void saveFontSize() {
+        getContext().getSharedPreferences(PREFS_NAME, MODE_PRIVATE)
+            .edit()
+            .putFloat(KEY_FONT_SIZE, currentFontSize)
+            .apply();
+    }
+
+    @Override
+    protected void onDetachedFromWindow() {
+        saveFontSize();
+        super.onDetachedFromWindow();
+    }
+
+    private void sendKey(int keyCode) {
+        if (!interactive || terminalSession == null) return;
+        var down = new KeyEvent(ACTION_DOWN, keyCode);
+        var up = new KeyEvent(ACTION_UP, keyCode);
+        terminalView.onKeyDown(keyCode, down);
+        terminalView.onKeyUp(keyCode, up);
+    }
+
+    private void sendChar(char ch) {
+        if (interactive && terminalSession != null)
+            terminalSession.write(String.valueOf(ch));
+    }
+
+    private void updateToggleButtons() {
+        setToggleStyle(findViewById(R.id.btn_ctrl), ctrlDown);
+        setToggleStyle(findViewById(R.id.btn_alt), altDown);
+    }
+
+    private void setToggleStyle(Button button, boolean active) {
+        if (active) {
+            button.setBackgroundColor(getContext().getColor(R.color.extra_key_bg_active));
+            button.setTextColor(getContext().getColor(R.color.extra_key_text_active));
+        } else {
+            button.setBackground(null);
+            button.setTextColor(getContext().getColor(R.color.extra_key_text));
+        }
+    }
+
+    private void setupExtraKeys() {
+        setExtraKeyClick(R.id.btn_esc, v -> sendKey(KEYCODE_ESCAPE));
+        setExtraKeyClick(R.id.btn_slash, v -> sendChar('/'));
+        setExtraKeyClick(R.id.btn_dash, v -> sendChar('-'));
+        setExtraKeyClick(R.id.btn_home, v -> sendKey(KEYCODE_MOVE_HOME));
+        setExtraKeyClick(R.id.btn_up, v -> sendKey(KEYCODE_DPAD_UP));
+        setExtraKeyClick(R.id.btn_end, v -> sendKey(KEYCODE_MOVE_END));
+        setExtraKeyClick(R.id.btn_pgup, v -> sendKey(KEYCODE_PAGE_UP));
+        setExtraKeyClick(R.id.btn_tab, v -> sendKey(KEYCODE_TAB));
+        setExtraKeyClick(R.id.btn_ctrl, v -> {
+            ctrlDown = !ctrlDown;
+            updateToggleButtons();
+        });
+        setExtraKeyClick(R.id.btn_alt, v -> {
+            altDown = !altDown;
+            updateToggleButtons();
+        });
+        setExtraKeyClick(R.id.btn_left, v -> sendKey(KEYCODE_DPAD_LEFT));
+        setExtraKeyClick(R.id.btn_down, v -> sendKey(KEYCODE_DPAD_DOWN));
+        setExtraKeyClick(R.id.btn_right, v -> sendKey(KEYCODE_DPAD_RIGHT));
+        setExtraKeyClick(R.id.btn_pgdn, v -> sendKey(KEYCODE_PAGE_DOWN));
+    }
+
+    private void setExtraKeyClick(int id, OnClickListener listener) {
+        findViewById(id).setOnClickListener(v -> {
+            if (!interactive) return;
+            v.performHapticFeedback(KEYBOARD_TAP);
+            listener.onClick(v);
+        });
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/agent/AgentOperationActivity.java b/app/src/main/java/cn/classfun/droidvm/ui/agent/AgentOperationActivity.java
index 8b600e21d..278f532bc 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/agent/AgentOperationActivity.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/agent/AgentOperationActivity.java
@@ -5,17 +5,21 @@
 
 import static android.view.View.GONE;
 import static android.view.View.VISIBLE;
+import static cn.classfun.droidvm.lib.utils.AssetUtils.getAssetBinaryPath;
 import static cn.classfun.droidvm.lib.utils.FileUtils.findExecute;
 import static cn.classfun.droidvm.lib.utils.ProcessUtils.SIGHUP;
 import static cn.classfun.droidvm.lib.utils.ProcessUtils.shellKillProcess;
+import static cn.classfun.droidvm.lib.utils.RunUtils.escapedString;
 import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
 import static cn.classfun.droidvm.lib.utils.ThreadUtils.runOnPool;
+import static cn.classfun.droidvm.lib.utils.ThreadUtils.threadSleep;
 
 import android.content.Context;
 import android.content.Intent;
 import android.os.Bundle;
 import android.os.Handler;
 import android.os.Looper;
+import android.util.Base64;
 import android.util.Log;
 import android.widget.ImageView;
 import android.widget.ProgressBar;
@@ -29,12 +33,16 @@
 import com.google.android.material.button.MaterialButton;
 import com.google.android.material.dialog.MaterialAlertDialogBuilder;
 import com.termux.terminal.TerminalSession;
-import com.termux.view.TerminalView;
 
 import org.json.JSONObject;
 
 import java.net.URLDecoder;
 import java.nio.charset.StandardCharsets;
+import java.util.Collections;
+import java.util.List;
+import java.util.Map;
+import java.util.concurrent.ConcurrentHashMap;
+import java.util.concurrent.atomic.AtomicBoolean;
 
 import cn.classfun.droidvm.DroidVMApp;
 import cn.classfun.droidvm.R;
@@ -42,41 +50,83 @@
 import cn.classfun.droidvm.lib.daemon.ForegroundCallback;
 import cn.classfun.droidvm.lib.store.disk.DiskStore;
 import cn.classfun.droidvm.lib.ui.termux.SimpleTerminalSessionClient;
-import cn.classfun.droidvm.lib.ui.termux.TerminalFonts;
-import cn.classfun.droidvm.lib.ui.termux.SimpleTerminalViewClient;
+import cn.classfun.droidvm.lib.ui.termux.TerminalPanelView;
+import cn.classfun.droidvm.ui.agent.base.AgentPayloadChunks;
 import cn.classfun.droidvm.ui.agent.base.AgentVM;
 import cn.classfun.droidvm.ui.agent.base.BaseAction;
+import cn.classfun.droidvm.ui.agent.password.PasswordAction;
 
+/** Runs maintenance actions through one visible rescue console. */
 public final class AgentOperationActivity extends AppCompatActivity
     implements DaemonConnection.EventListener, ForegroundCallback {
     private static final String TAG = "AgentOperationActivity";
     public static final String EXTRA_AGENT_VM_JSON = "agent_vm_json";
+    public static final String EXTRA_AUTOFINISH_ON_SUCCESS = "autofinish_on_success";
+    private static final String AGENT_MARKER = "__DROIDVM_AGENT__:";
+    private static final String TTY_READY_MARKER = AGENT_MARKER + "TTY:READY"; // concat-ok: compile-time constant
+    private static final String READY_MARKER = AGENT_MARKER + "READY"; // concat-ok: compile-time constant
+    private static final String STAGE_READY_MARKER = AGENT_MARKER + "STAGE:READY"; // concat-ok: compile-time constant
+    private static final String STAGE_CHUNK_MARKER = AGENT_MARKER + "STAGE:CHUNK:"; // concat-ok: compile-time constant
+    private static final String SCRIPT_READY_MARKER = AGENT_MARKER + "SCRIPT:READY"; // concat-ok: compile-time constant
+    private static final String SHELL_READY_MARKER = AGENT_MARKER + "SHELL:READY"; // concat-ok: compile-time constant
+    private static final String RESULT_OK_MARKER = AGENT_MARKER + "RESULT:OK"; // concat-ok: compile-time constant
+    private static final String RESULT_ERROR_MARKER = AGENT_MARKER + "RESULT:ERROR:"; // concat-ok: compile-time constant
+    private static final String ACTION_START_MARKER = AGENT_MARKER + "ACTION:START:"; // concat-ok: compile-time constant
+    private static final String ACTION_OK_MARKER = AGENT_MARKER + "ACTION:OK:"; // concat-ok: compile-time constant
+    private static final String ACTION_ERROR_MARKER = AGENT_MARKER + "ACTION:ERROR:"; // concat-ok: compile-time constant
+    private static final String ACTION_SKIPPED_MARKER = AGENT_MARKER + "ACTION:SKIPPED:"; // concat-ok: compile-time constant
+    private static final String[] PASSWORD_PROMPTS = new String[]{
+        "New password:",
+        "Re-enter new password:",
+        "Retype new password:",
+        "Enter new UNIX password:",
+        "Retype new UNIX password:",
+    };
+    private static final int AGENT_BUFFER_LIMIT = 64 * 1024;
+    private static final int PASSWORD_PROMPT_TAIL_LIMIT = 128;
+
     private final Handler mainHandler = new Handler(Looper.getMainLooper());
+    private final StringBuilder agentOutput = new StringBuilder();
+    private final Map<Integer, String> actionPasswords = new ConcurrentHashMap<>();
+    private final AtomicBoolean cleanupStarted = new AtomicBoolean(false);
     private ProgressBar progressSpinner;
     private ImageView ivStatus;
     private TextView tvTitle;
     private TextView tvStatus;
-    private TerminalView terminalView;
+    private TerminalPanelView terminalPanel;
     private TerminalSession terminalSession;
     private MaterialButton btnCancel;
     private MaterialToolbar toolbar;
-    private boolean finished = false;
+    private volatile boolean ttyShellRequested = false;
+    private volatile boolean bootstrapSent = false;
+    private volatile boolean payloadStageStarted = false;
+    private volatile boolean payloadDecodeSent = false;
+    private volatile boolean actionSent = false;
+    private volatile boolean resultShown = false;
+    private volatile boolean handoffRequested = false;
+    private volatile boolean handoffComplete = false;
+    private volatile boolean actionSkipped = false;
+    private volatile boolean closing = false;
+    private volatile boolean activityDone = false;
+    private volatile boolean vmExited = false;
+    private boolean autoFinishOnSuccess = false;
     private String vmId = null;
     private AgentVM agentVM = null;
-    private BaseAction action = null;
+    private volatile List<String> actionPayloadChunks = Collections.emptyList();
+    private int nextPayloadChunk = 0;
+    private String activePassword = null;
+    private String passwordPromptTail = "";
+    private int activeActionIndex = -1;
 
     private final SimpleTerminalSessionClient sessionClient = new SimpleTerminalSessionClient(this) {
         @Override
         public void onTextChanged(@NonNull TerminalSession s) {
             mainHandler.post(() -> {
-                if (terminalView != null) terminalView.onScreenUpdated();
+                if (terminalPanel != null) terminalPanel.refresh();
             });
         }
     };
 
-    private final SimpleTerminalViewClient viewClient = new SimpleTerminalViewClient() {
-    };
-
     @NonNull
     public static Intent createIntent(
         @NonNull Context context,
@@ -100,7 +150,8 @@ protected void onCreate(Bundle savedInstanceState) {
         ivStatus = findViewById(R.id.iv_status);
         tvTitle = findViewById(R.id.tv_title);
         tvStatus = findViewById(R.id.tv_status);
-        terminalView = findViewById(R.id.terminal_view);
+        terminalPanel = findViewById(R.id.terminal_panel);
+        terminalPanel.setInteractive(false);
         btnCancel = findViewById(R.id.btn_cancel);
         btnCancel.setOnClickListener(v -> confirmCancel());
         initialize();
@@ -116,6 +167,7 @@ public void handleOnBackPressed() {
             }
         });
         var intent = getIntent();
+        autoFinishOnSuccess = intent.getBooleanExtra(EXTRA_AUTOFINISH_ON_SUCCESS, false);
         var agentVmJson = intent.getStringExtra(EXTRA_AGENT_VM_JSON);
         if (agentVmJson == null) {
             Log.e(TAG, "Missing agent_vm_json extra");
@@ -126,58 +178,88 @@ public void handleOnBackPressed() {
             var diskStore = new DiskStore();
             diskStore.load(this);
             agentVM = new AgentVM(diskStore, new JSONObject(agentVmJson));
-            action = BaseAction.createAction(agentVM);
+            var actions = BaseAction.createActions(agentVM);
+            for (int i = 0; i < actions.size(); i++)
+                if (actions.get(i) instanceof PasswordAction)
+                    actionPasswords.put(i, ((PasswordAction) actions.get(i)).getPassword());
+            var script = BaseAction.buildRescueScript(actions);
+            for (var action : actions) action.clearSecrets();
+            var actionPayload = Base64.encodeToString(
+                script.getBytes(StandardCharsets.UTF_8), Base64.NO_WRAP);
+            actionPayloadChunks = AgentPayloadChunks.split(actionPayload);
+            // Do not retain the JSON copy containing the password for the Activity lifetime.
+            intent.removeExtra(EXTRA_AGENT_VM_JSON);
         } catch (Exception e) {
-            Log.e(TAG, "Failed to parse AgentVM", e);
+            Log.e(TAG, "Failed to prepare AgentVM action", e);
             finish();
             return;
         }
-        terminalView.setTerminalViewClient(viewClient);
-        initTerminal();
         tvTitle.setText(R.string.agent_operation_title);
         tvStatus.setText(R.string.agent_operation_preparing);
-        appendLog(getString(R.string.agent_operation_log_preparing));
         runOnPool(this::startAgent);
     }
 
-    private void initTerminal() {
-        var shell = findExecute("sh");
+    /** Connects the embedded panel to the operation console without enabling user input yet. */
+    private void startConsoleSession(@NonNull String stream) {
+        stopConsoleSession();
+        if (vmId == null || vmId.isEmpty() || closing || vmExited) return;
+        var shell = findExecute("su", "/system/bin/su");
         var cwd = getFilesDir().getAbsolutePath();
-        var args = new String[]{"sh", "-c", "while true; do sleep 86400; done"};
+        var command = fmt(
+            "exec %s console --raw %s %s",
+            escapedString(getAssetBinaryPath("droidvm")),
+            escapedString(vmId),
+            escapedString(stream)
+        );
+        var args = new String[]{"su", "-c", command};
         var env = new String[]{
             "TERM=xterm-256color",
             "PATH=/system/bin",
             fmt("HOME=%s", cwd),
         };
         terminalSession = new TerminalSession(shell, cwd, args, env, null, sessionClient);
-        float density = getResources().getDisplayMetrics().density;
-        terminalView.setTextSize((int) (4 * density));
-        TerminalFonts.apply(terminalView);
-        terminalView.attachSession(terminalSession);
+        terminalPanel.attachSession(terminalSession);
     }
 
-    private void appendLog(@NonNull String text) {
-        if (terminalSession == null) return;
-        var emulator = terminalSession.getEmulator();
-        if (emulator == null) return;
-        if (text.contains("\n") && !text.contains("\r"))
-            text = text.replace("\n", "\r\n");
-        var bytes = text.getBytes(StandardCharsets.UTF_8);
-        emulator.append(bytes, bytes.length);
-        terminalView.onScreenUpdated();
+    /** Waits for the explicitly configured console without blocking control or auto-finish. */
+    private void startConsoleWhenReady() {
+        var stream = agentVM.getOperationConsoleStream();
+        if (stream == null) return;
+        runOnPool(() -> {
+            for (int i = 0; i < 50 && !closing && !vmExited; i++) {
+                if (isOperationConsoleReadable(stream)) {
+                    runOnUiThread(() -> {
+                        if (!closing && !vmExited && terminalSession == null)
+                            startConsoleSession(stream);
+                    });
+                    return;
+                }
+                threadSleep(100);
+            }
+            if (!closing && !vmExited)
+                Log.w(TAG, "Operation console did not become readable");
+        });
     }
 
-    private void startAgent() {
+    private boolean isOperationConsoleReadable(@NonNull String stream) {
         try {
-            agentVM.prepareVars();
+            var infoReq = new JSONObject();
+            infoReq.put("command", "vm_console_info");
+            infoReq.put("vm_id", vmId);
+            infoReq.put("stream", stream);
+            var infoResp = DaemonConnection.getInstance().request(infoReq);
+            var data = infoResp.optJSONObject("data");
+            return infoResp.optBoolean("success", false)
+                && data != null && data.optBoolean("readable", false);
         } catch (Exception e) {
-            Log.e(TAG, "Failed to prepare agent", e);
-            runOnUiThread(() -> showFailed(getString(R.string.agent_operation_prepare_failed)));
-            return;
+            if (!closing && !vmExited) Log.d(TAG, "Operation console is not ready", e);
         }
+        return false;
+    }
+
+    private void startAgent() {
         runOnUiThread(() -> {
             tvStatus.setText(R.string.agent_operation_creating_vm);
-            appendLog(getString(R.string.agent_operation_log_creating_vm));
         });
         var vmConfig = agentVM.buildVM();
         var conn = DaemonConnection.getInstance();
@@ -195,7 +277,6 @@ private void startAgent() {
             if (vmId.isEmpty()) throw new RuntimeException("vm_create returned empty vm_id");
             runOnUiThread(() -> {
                 tvStatus.setText(R.string.agent_operation_starting_vm);
-                appendLog(getString(R.string.agent_operation_log_starting_vm));
             });
             var startReq = new JSONObject();
             startReq.put("command", "vm_start");
@@ -205,16 +286,12 @@ private void startAgent() {
                 var msg = startResp.optString("message", "unknown error");
                 throw new RuntimeException(fmt("vm_start failed: %s", msg));
             }
-            runOnUiThread(() -> {
-                tvStatus.setText(R.string.agent_operation_running);
-                appendLog(getString(R.string.agent_operation_log_running));
-            });
+            runOnUiThread(() -> tvStatus.setText(R.string.agent_operation_running));
+            startConsoleWhenReady();
         } catch (Exception e) {
             Log.e(TAG, "Failed to create/start agent VM", e);
             runOnUiThread(() -> showFailed(
-                getString(R.string.agent_operation_start_failed, e.getMessage())
-            ));
-            cleanupVM();
+                getString(R.string.agent_operation_start_failed, e.getMessage()), false));
         }
     }
 
@@ -240,165 +317,480 @@ public void onDaemonEvent(@NonNull JSONObject msg) {
         if (!eventVmId.equals(vmId)) return;
         var event = data.optString("event", "");
         if (event.equals("output")) {
-            var text = URLDecoder.decode(data.optString("data", ""), StandardCharsets.UTF_8);
             var stream = data.optString("stream", "");
-            if (!text.isEmpty() && (stream.equals("stdio") || stream.equals("uart")))
-                mainHandler.post(() -> appendLog(text));
+            var operationStream = agentVM.getOperationConsoleStream();
+            if (operationStream == null || !stream.equals(operationStream)) return;
+            var text = URLDecoder.decode(data.optString("data", ""), StandardCharsets.UTF_8);
+            if (text.isEmpty()) return;
+            handleAgentOutput(text);
         } else if (event.equals("exited")) {
             int exitCode = data.optInt("exit_code", -1);
             mainHandler.post(() -> onVMFinished(exitCode));
         }
     }
 
-    @Override
-    public void onDaemonConnected() {
+    private void handleAgentOutput(@NonNull String text) {
+        String snapshot;
+        synchronized (agentOutput) {
+            agentOutput.append(text);
+            if (agentOutput.length() > AGENT_BUFFER_LIMIT)
+                agentOutput.delete(0, agentOutput.length() - AGENT_BUFFER_LIMIT);
+            snapshot = agentOutput.toString();
+        }
+        updateActivePassword(snapshot);
+        handlePasswordPrompts(text);
+        if (snapshot.contains(ACTION_SKIPPED_MARKER))
+            actionSkipped = true;
+        if (!ttyShellRequested && (snapshot.contains("~ #")
+            || snapshot.contains("Run /bin/sh as init process"))) {
+            ttyShellRequested = true;
+            sendOperationCommand(
+                "busybox setsid -c sh -c 'printf \"\\n__DROIDVM_%s:TTY:READY\\n\" "
+                    + "AGENT__; exec sh'",
+                true);
+        }
+        if (ttyShellRequested && !bootstrapSent && snapshot.contains(TTY_READY_MARKER)) {
+            bootstrapSent = true;
+            sendOperationCommand("stty -echo 2>/dev/null; "
+                + "mount -t proc proc /proc 2>/dev/null || true; "
+                + "mount -t sysfs sysfs /sys 2>/dev/null || true; "
+                + "mount -t devtmpfs devtmpfs /dev 2>/dev/null || true; "
+                + "busybox mdev -s; "
+                + "printf '\\n__DROIDVM_%s:READY\\n' AGENT__", true);
+        }
+        if (bootstrapSent && !payloadStageStarted && snapshot.contains(READY_MARKER)) {
+            payloadStageStarted = true;
+            nextPayloadChunk = 0;
+            if (actionPayloadChunks.isEmpty()) {
+                mainHandler.post(() -> showFailed(
+                    getString(R.string.agent_operation_prepare_failed), true));
+                return;
+            }
+            sendOperationCommand(
+                "rm -f /run/droidvm-rescue.b64 /run/droidvm-rescue.sh; "
+                    + "if : > /run/droidvm-rescue.b64; then "
+                    + "printf '\\n__DROIDVM_%s:STAGE:READY\\n' AGENT__; "
+                    + "else stty echo; "
+                    + "printf '\\n__DROIDVM_%s:RESULT:ERROR:SCRIPT_FAILED\\n' AGENT__; fi",
+                true);
+        }
+        continuePayloadStage(snapshot);
+        if (payloadDecodeSent && !actionSent && snapshot.contains(SCRIPT_READY_MARKER)) {
+            actionSent = true;
+            sendOperationCommand(
+                "busybox sh /run/droidvm-rescue.sh; rc=$?; "
+                    + "rm -f /run/droidvm-rescue.sh; "
+                    + "[ $rc -eq 0 ] || "
+                    + "printf '\\n__DROIDVM_%s:RESULT:ERROR:SCRIPT_FAILED\\n' AGENT__",
+                true);
+        }
+        if (handoffRequested && !handoffComplete && snapshot.contains(SHELL_READY_MARKER)) {
+            handoffComplete = true;
+            mainHandler.post(() -> {
+                if (!closing && !vmExited) terminalPanel.setInteractive(true);
+            });
+        }
+        if (!resultShown && snapshot.contains(RESULT_OK_MARKER)) {
+            clearPasswords();
+            mainHandler.post(this::showSuccess);
+            return;
+        }
+        if (!resultShown && snapshot.contains(RESULT_ERROR_MARKER)) {
+            clearPasswords();
+            var start = snapshot.lastIndexOf(RESULT_ERROR_MARKER) + RESULT_ERROR_MARKER.length();
+            var end = snapshot.indexOf('\n', start);
+            if (end < 0) end = snapshot.length();
+            var code = snapshot.substring(start, end).replace("\r", "").trim();
+            mainHandler.post(() -> showFailed(describeAgentError(code), true));
+        }
     }
 
-    @Override
-    public void onDaemonDisconnected() {
-        if (!finished) {
-            mainHandler.post(() -> showFailed(getString(R.string.agent_operation_daemon_disconnected)));
+    private void continuePayloadStage(@NonNull String snapshot) {
+        if (!payloadStageStarted || payloadDecodeSent) return;
+        if (nextPayloadChunk == 0) {
+            if (!snapshot.contains(STAGE_READY_MARKER)) return;
+        } else {
+            var expectedMarker = fmt(
+                "%s%d:OK", STAGE_CHUNK_MARKER, nextPayloadChunk - 1);
+            if (!snapshot.contains(expectedMarker)) return;
         }
+        var chunks = actionPayloadChunks;
+        if (nextPayloadChunk < chunks.size()) {
+            int index = nextPayloadChunk;
+            nextPayloadChunk++;
+            var command = fmt(
+                "if printf '%%s' '%s' >> /run/droidvm-rescue.b64; then "
+                    + "printf '\\n__DROIDVM_%%s:STAGE:CHUNK:%d:OK\\n' AGENT__; "
+                    + "else stty echo; "
+                    + "printf '\\n__DROIDVM_%%s:RESULT:ERROR:SCRIPT_FAILED\\n' AGENT__; fi",
+                chunks.get(index), index);
+            sendOperationCommand(command, true);
+            return;
+        }
+        payloadDecodeSent = true;
+        actionPayloadChunks = Collections.emptyList();
+        sendOperationCommand(
+            "if busybox base64 -d < /run/droidvm-rescue.b64 "
+                + "> /run/droidvm-rescue.sh "
+                + "&& busybox sh -n /run/droidvm-rescue.sh; then "
+                + "rm -f /run/droidvm-rescue.b64; stty echo; "
+                + "printf '\\n__DROIDVM_%s:SCRIPT:READY\\n' AGENT__; "
+                + "else rm -f /run/droidvm-rescue.b64 /run/droidvm-rescue.sh; "
+                + "stty echo; "
+                + "printf '\\n__DROIDVM_%s:RESULT:ERROR:SCRIPT_FAILED\\n' AGENT__; fi",
+            true);
     }
 
-    private void onVMFinished(int exitCode) {
-        if (finished) return;
-        finished = true;
-        appendLog(fmt(
-            "\n--- %s (exit code: %d) ---\n",
-            getString(R.string.agent_operation_vm_exited), exitCode
-        ));
+    private void updateActivePassword(@NonNull String snapshot) {
+        int start = snapshot.lastIndexOf(ACTION_START_MARKER);
+        int finished = Math.max(snapshot.lastIndexOf(ACTION_OK_MARKER),
+            Math.max(snapshot.lastIndexOf(ACTION_ERROR_MARKER),
+                snapshot.lastIndexOf(ACTION_SKIPPED_MARKER)));
+        if (finished > start) {
+            if (activeActionIndex >= 0) actionPasswords.remove(activeActionIndex);
+            activeActionIndex = -1;
+            activePassword = null;
+            passwordPromptTail = "";
+            return;
+        }
+        if (start < 0) return;
+        int valueStart = start + ACTION_START_MARKER.length();
+        int lineEnd = snapshot.indexOf('\n', valueStart);
+        if (lineEnd < 0) return;
+        var marker = snapshot.substring(valueStart, lineEnd).replace("\r", "").trim();
+        int separator = marker.indexOf(':');
+        if (separator <= 0) return;
+        try {
+            int index = Integer.parseInt(marker.substring(0, separator));
+            if (index == activeActionIndex) return;
+            activeActionIndex = index;
+            activePassword = actionPasswords.get(index);
+            passwordPromptTail = "";
+        } catch (NumberFormatException ignored) {
+        }
+    }
+
+    private void handlePasswordPrompts(@NonNull String text) {
+        var password = activePassword;
+        if (password == null) return;
+        passwordPromptTail = passwordPromptTail + text;
+        while (true) {
+            int first = -1;
+            int promptLength = 0;
+            for (var prompt : PASSWORD_PROMPTS) {
+                int index = passwordPromptTail.indexOf(prompt);
+                if (index >= 0 && (first < 0 || index < first)) {
+                    first = index;
+                    promptLength = prompt.length();
+                }
+            }
+            if (first < 0) {
+                if (passwordPromptTail.length() > PASSWORD_PROMPT_TAIL_LIMIT)
+                    passwordPromptTail = passwordPromptTail.substring(
+                        passwordPromptTail.length() - PASSWORD_PROMPT_TAIL_LIMIT);
+                return;
+            }
+            passwordPromptTail = passwordPromptTail.substring(first + promptLength);
+            sendPasswordInput(password);
+        }
+    }
+
+    private void sendPasswordInput(@NonNull String password) {
         runOnPool(() -> {
-            String resultMessage = null;
-            boolean success = false;
             try {
-                if (action != null) {
-                    action.checkResult();
-                    success = true;
-                }
+                writeOperationConsole(fmt("%s\n", password));
             } catch (Exception e) {
-                Log.e(TAG, "Agent result check failed", e);
-                resultMessage = e.getMessage();
+                Log.e(TAG, "Failed to write password input", e);
+                mainHandler.post(() -> showFailed(
+                    getString(R.string.agent_operation_control_failed), false));
             }
-            killTerminalSession();
-            cleanupVM();
-            final boolean finalSuccess = success;
-            final String finalMsg = resultMessage;
-            runOnUiThread(() -> {
-                progressSpinner.setVisibility(GONE);
-                ivStatus.setVisibility(VISIBLE);
-                btnCancel.setText(android.R.string.ok);
-                btnCancel.setOnClickListener(v -> finish());
-                if (finalSuccess) {
-                    ivStatus.setImageResource(R.drawable.ic_large_success);
-                    tvStatus.setText(R.string.agent_operation_success);
-                    appendLog(getString(R.string.agent_operation_log_success));
-                } else {
-                    ivStatus.setImageResource(R.drawable.ic_large_error);
-                    if (finalMsg != null) {
-                        tvStatus.setText(getString(R.string.agent_operation_failed_detail, finalMsg));
-                    } else {
-                        tvStatus.setText(getString(R.string.agent_operation_failed, exitCode));
-                    }
-                    appendLog(getString(R.string.agent_operation_log_failed));
-                }
-            });
         });
     }
 
-    private void killTerminalSession() {
-        if (terminalSession != null) {
+    private void clearPasswords() {
+        actionPasswords.clear();
+        activeActionIndex = -1;
+        activePassword = null;
+        passwordPromptTail = "";
+    }
+
+    private void sendOperationCommand(@NonNull String command, boolean failOnError) {
+        runOnPool(() -> {
             try {
-                if (terminalSession.isRunning())
-                    shellKillProcess(terminalSession.getPid(), SIGHUP);
-            } catch (Exception ignored) {
+                writeOperationConsole(fmt("%s\n", command));
+            } catch (Exception e) {
+                Log.e(TAG, "Failed to write operation console", e);
+                if (failOnError) mainHandler.post(() -> showFailed(
+                    getString(R.string.agent_operation_control_failed), false));
             }
-            terminalSession = null;
+        });
+    }
+
+    private void writeOperationConsole(@NonNull String data) throws Exception {
+        var stream = agentVM.getOperationConsoleStream();
+        if (stream == null) throw new IllegalStateException("Operation console is not configured");
+        writeConsole(stream, data);
+    }
+
+    private void writeConsole(@NonNull String stream, @NonNull String data) throws Exception {
+        if (vmId == null || vmId.isEmpty()) throw new IllegalStateException("VM is not ready");
+        var req = new JSONObject();
+        req.put("command", "vm_console_write");
+        req.put("vm_id", vmId);
+        req.put("stream", stream);
+        req.put("data", data);
+        var resp = DaemonConnection.getInstance().request(req);
+        if (!resp.optBoolean("success", false))
+            throw new RuntimeException(resp.optString("message", "console write failed"));
+    }
+
+    @NonNull
+    private String describeAgentError(@NonNull String code) {
+        switch (code) {
+            case "ROOT_NOT_FOUND":
+                return getString(R.string.agent_operation_error_root_not_found);
+            case "PASSWD_FAILED":
+                return getString(R.string.agent_operation_error_password);
+            case "UNMOUNT_FAILED":
+                return getString(R.string.agent_operation_error_unmount);
+            case "SCRIPT_FAILED":
+                return getString(R.string.agent_operation_error_script);
+            case "AUTOGROW_DISK_NOT_FOUND":
+            case "AUTOGROW_PROBE_FAILED":
+                return getString(R.string.agent_operation_error_autogrow_disk);
+            case "AUTOGROW_PARTITION_IN_USE":
+                return getString(R.string.agent_operation_error_autogrow_in_use);
+            case "PARTITION_GROW_FAILED":
+                return getString(R.string.agent_operation_error_partition_grow);
+            case "PARTITION_REREAD_FAILED":
+                return getString(R.string.agent_operation_error_partition_reread);
+            case "FILESYSTEM_CHECK_FAILED":
+                return getString(R.string.agent_operation_error_filesystem_check);
+            case "FILESYSTEM_MOUNT_FAILED":
+                return getString(R.string.agent_operation_error_filesystem_mount);
+            case "FILESYSTEM_GROW_FAILED":
+                return getString(R.string.agent_operation_error_filesystem_grow);
+            case "FILESYSTEM_UNMOUNT_FAILED":
+                return getString(R.string.agent_operation_error_filesystem_unmount);
+            default:
+                return getString(R.string.agent_operation_error_unknown, code);
         }
     }
 
+    private void showSuccess() {
+        if (resultShown || closing) return;
+        resultShown = true;
+        progressSpinner.setVisibility(GONE);
+        ivStatus.setVisibility(VISIBLE);
+        ivStatus.setImageResource(R.drawable.ic_large_success);
+        tvStatus.setText(actionSkipped
+            ? R.string.agent_operation_success_skipped
+            : R.string.agent_operation_success);
+        if (autoFinishOnSuccess) {
+            // The Linux VM creation chain must return immediately. Never start the optional
+            // rescue shell on this path or wait for terminal interaction.
+            finishAgent(true);
+            return;
+        }
+        showResultButtons();
+        requestConsoleHandoff();
+    }
+
+    private void showFailed(@NonNull String message, boolean logsAvailable) {
+        if (resultShown || closing) return;
+        resultShown = true;
+        progressSpinner.setVisibility(GONE);
+        ivStatus.setVisibility(VISIBLE);
+        ivStatus.setImageResource(R.drawable.ic_large_error);
+        tvStatus.setText(getString(R.string.agent_operation_failed_detail, message));
+        btnCancel.setText(android.R.string.ok);
+        btnCancel.setOnClickListener(v -> finishAgent());
+        if (logsAvailable && !vmExited) requestConsoleHandoff();
+    }
+
+    private void showResultButtons() {
+        btnCancel.setText(android.R.string.ok);
+        btnCancel.setOnClickListener(v -> finishAgent());
+    }
+
+    /** Returns the controlling operation shell after the action script has exited. */
+    private void requestConsoleHandoff() {
+        if (vmExited || vmId == null || closing) return;
+        if (handoffComplete) {
+            terminalPanel.setInteractive(true);
+            return;
+        }
+        if (handoffRequested) return;
+        handoffRequested = true;
+        sendOperationCommand(
+            "ROOT_DEVICE=$(cat /run/droidvm-root-device 2>/dev/null); "
+                + "if [ -n \"$ROOT_DEVICE\" ] && ! mountpoint -q /mnt; then "
+                + "mount -o rw \"$ROOT_DEVICE\" /mnt >/dev/null 2>&1 || true; fi; "
+                + "if mountpoint -q /mnt; then "
+                + "printf '\\nDroidVM rescue shell; target root: /mnt\\n'; "
+                + "else printf '\\nDroidVM rescue shell\\n'; fi; "
+                + "PS1='droidvm-rescue # '; stty echo; "
+                + "printf '\\n__DROIDVM_%s:SHELL:READY\\n' AGENT__",
+            true);
+    }
+
+    private void finishAgent() {
+        finishAgent(false);
+    }
+
+    private void finishAgent(boolean returnSuccess) {
+        if (closing) return;
+        closing = true;
+        btnCancel.setEnabled(false);
+        terminalPanel.setInteractive(false);
+        stopConsoleSession();
+        tvStatus.setText(R.string.agent_operation_stopping);
+        runOnPool(() -> {
+            if (!vmExited) {
+                try {
+                    writeOperationConsole("stty -echo; sync; "
+                        + "umount /mnt/proc >/dev/null 2>&1 || true; "
+                        + "umount /mnt/dev >/dev/null 2>&1 || true; "
+                        + "umount /mnt >/dev/null 2>&1 || "
+                        + "umount -l /mnt >/dev/null 2>&1 || true; poweroff -f\n");
+                } catch (Exception e) {
+                    Log.w(TAG, "Guest shutdown command failed", e);
+                }
+                threadSleep(800);
+                requestStop();
+            }
+            cleanupVM();
+            runOnUiThread(() -> finishActivity(returnSuccess));
+        });
+    }
+
+    private void requestStop() {
+        if (vmId == null || vmId.isEmpty()) return;
+        try {
+            var req = new JSONObject();
+            req.put("command", "vm_stop");
+            req.put("vm_id", vmId);
+            DaemonConnection.getInstance().request(req);
+        } catch (Exception e) {
+            Log.d(TAG, "VM was already stopped or stop request failed", e);
+        }
+    }
+
+    private void onVMFinished(int exitCode) {
+        if (activityDone) return;
+        vmExited = true;
+        terminalPanel.setInteractive(false);
+        stopConsoleSession();
+        if (closing) return;
+        if (resultShown) {
+            tvStatus.setText(R.string.agent_operation_vm_stopped);
+            return;
+        }
+        showFailed(getString(R.string.agent_operation_failed, exitCode), false);
+    }
+
+    @Override
+    public void onDaemonConnected() {
+    }
+
+    @Override
+    public void onDaemonDisconnected() {
+        if (!activityDone && !closing)
+            mainHandler.post(() -> showFailed(
+                getString(R.string.agent_operation_daemon_disconnected), false));
+    }
+
+    private void stopConsoleSession() {
+        if (terminalSession == null) return;
+        var session = terminalSession;
+        terminalSession = null;
+        try {
+            if (session.isRunning()) shellKillProcess(session.getPid(), SIGHUP);
+        } catch (Exception ignored) {
+        }
+        session.finishIfRunning();
+        terminalPanel.clearSession(session);
+    }
+
     private void cleanupVM() {
+        if (!cleanupStarted.compareAndSet(false, true)) return;
         unregisterEventListeners();
-        if (vmId != null && !vmId.isEmpty()) {
+        var id = vmId;
+        if (id == null || id.isEmpty()) return;
+        requestStop();
+        var conn = DaemonConnection.getInstance();
+        boolean stopped = false;
+        for (int i = 0; i < 50; i++) {
             try {
-                var conn = DaemonConnection.getInstance();
-                var destroyReq = new JSONObject();
-                destroyReq.put("command", "vm_delete");
-                destroyReq.put("vm_id", vmId);
-                conn.request(destroyReq);
-                Log.i(TAG, fmt("Temporary VM %s destroyed", vmId));
+                var statusReq = new JSONObject();
+                statusReq.put("command", "vm_status");
+                statusReq.put("vm_id", id);
+                var status = conn.request(statusReq);
+                if (status.optBoolean("success", false)
+                    && status.optString("state", "").equals("stopped")) {
+                    stopped = true;
+                    break;
+                }
             } catch (Exception e) {
-                Log.w(TAG, fmt("Failed to destroy temporary VM %s", vmId), e);
+                break;
             }
+            threadSleep(100);
         }
-        if (agentVM != null) {
-            try {
-                agentVM.cleanupVars();
-            } catch (Exception e) {
-                Log.w(TAG, "Failed to cleanup vars", e);
-            }
+        if (!stopped) {
+            Log.w(TAG, fmt("Temporary VM %s did not stop; leaving its daemon record intact", id));
+            return;
         }
+        try {
+            var destroyReq = new JSONObject();
+            destroyReq.put("command", "vm_delete");
+            destroyReq.put("vm_id", id);
+            var response = conn.request(destroyReq);
+            if (!response.optBoolean("success", false))
+                Log.w(TAG, fmt("Failed to destroy temporary VM %s: %s",
+                    id, response.optString("message", "unknown error")));
+            else
+                Log.i(TAG, fmt("Temporary VM %s destroyed", id));
+        } catch (Exception e) {
+            Log.w(TAG, fmt("Failed to destroy temporary VM %s", id), e);
+        }
+        vmId = null;
     }
 
-    private void showFailed(@NonNull String message) {
-        finished = true;
-        progressSpinner.setVisibility(GONE);
-        ivStatus.setVisibility(VISIBLE);
-        ivStatus.setImageResource(R.drawable.ic_large_error);
-        tvStatus.setText(message);
-        btnCancel.setText(android.R.string.ok);
-        btnCancel.setOnClickListener(v -> finish());
+    private void finishActivity(boolean returnSuccess) {
+        if (activityDone) return;
+        activityDone = true;
+        stopConsoleSession();
+        if (returnSuccess) setResult(RESULT_OK);
+        finish();
     }
 
     private void confirmCancel() {
-        if (finished) {
-            finish();
+        if (resultShown) {
+            finishAgent();
             return;
         }
         new MaterialAlertDialogBuilder(this)
             .setTitle(R.string.agent_operation_cancel_title)
             .setMessage(R.string.agent_operation_cancel_message)
-            .setPositiveButton(android.R.string.ok, (d, w) -> {
-                finished = true;
-                runOnPool(() -> {
-                    killTerminalSession();
-                    cleanupVM();
-                });
-                finish();
-            })
+            .setPositiveButton(android.R.string.ok, (d, w) -> finishAgent())
             .setNegativeButton(android.R.string.cancel, null)
             .show();
     }
 
     private void confirmFinish() {
-        if (finished) {
-            finish();
-            return;
-        }
-        new MaterialAlertDialogBuilder(this)
-            .setTitle(R.string.agent_operation_cancel_title)
-            .setMessage(R.string.agent_operation_cancel_message)
-            .setPositiveButton(android.R.string.ok, (d, w) -> {
-                finished = true;
-                runOnPool(() -> {
-                    killTerminalSession();
-                    cleanupVM();
-                });
-                finish();
-            })
-            .setNegativeButton(android.R.string.cancel, null)
-            .show();
+        confirmCancel();
     }
 
     @Override
     protected void onDestroy() {
         super.onDestroy();
-        if (!finished) {
+        clearPasswords();
+        if (!activityDone) {
+            closing = true;
             runOnPool(() -> {
-                killTerminalSession();
                 cleanupVM();
+                stopConsoleSession();
             });
         }
     }
 }
-
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/agent/autogrow/AutoGrowAction.java b/app/src/main/java/cn/classfun/droidvm/ui/agent/autogrow/AutoGrowAction.java
new file mode 100644
index 000000000..8688e5f5c
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/ui/agent/autogrow/AutoGrowAction.java
@@ -0,0 +1,156 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
+package cn.classfun.droidvm.ui.agent.autogrow;
+
+import static cn.classfun.droidvm.lib.utils.RunUtils.escapedString;
+import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
+
+import androidx.annotation.NonNull;
+
+import cn.classfun.droidvm.ui.agent.base.AgentActionSpec;
+import cn.classfun.droidvm.ui.agent.base.AgentVM;
+import cn.classfun.droidvm.ui.agent.base.BaseAction;
+
+/** Grows the physical last data partition and its supported filesystem into trailing space. */
+public final class AutoGrowAction extends BaseAction {
+    public static final String TYPE = "autogrow";
+
+    /** Appends an autogrow step targeting the first AgentVM disk (/dev/vda). */
+    public AutoGrowAction(@NonNull AgentVM vm) {
+        this(vm, vm.addAction(TYPE));
+    }
+
+    public AutoGrowAction(@NonNull AgentVM vm, @NonNull AgentActionSpec spec) {
+        super(vm, spec);
+        if (!spec.hasParam("device")) spec.setParam("device", "/dev/vda");
+    }
+
+    public void setDevice(@NonNull String device) {
+        spec.setParam("device", device);
+    }
+
+    @NonNull
+    @Override
+    protected String buildActionScript() {
+        var device = spec.getParam("device", "/dev/vda");
+        var script = String.join("\n",
+            "DISK=%s",
+            "DISK_NAME=${DISK##*/}",
+            "SYS_DISK=/sys/class/block/$DISK_NAME",
+            "[ -b \"$DISK\" ] && [ -d \"$SYS_DISK\" ] || fail AUTOGROW_DISK_NOT_FOUND",
+            // DOS extended partitions are containers, not data partitions. Ignore the container
+            // when selecting the physical last partition, but extend it before a logical child.
+            "EXTENDED_DEVICE=$(sfdisk -d \"$DISK\" 2>/dev/null | grep -Ei 'type=(0x)?(5|f|85)(,|$)' | head -n 1 | cut -d' ' -f1)",
+            "LAST_PART=",
+            "LAST_SYS=",
+            "LAST_END=0",
+            "for SYS_PART in /sys/class/block/\"$DISK_NAME\"*; do",
+            "    [ -f \"$SYS_PART/partition\" ] || continue",
+            "    PART_NAME=${SYS_PART##*/}",
+            "    PART_DEVICE=/dev/$PART_NAME",
+            "    [ \"$PART_DEVICE\" = \"$EXTENDED_DEVICE\" ] && continue",
+            "    PART_START=$(cat \"$SYS_PART/start\") || fail AUTOGROW_PROBE_FAILED",
+            "    PART_SIZE=$(cat \"$SYS_PART/size\") || fail AUTOGROW_PROBE_FAILED",
+            "    PART_END=$((PART_START + PART_SIZE))",
+            "    if [ \"$PART_END\" -gt \"$LAST_END\" ]; then",
+            "        LAST_END=$PART_END",
+            "        LAST_PART=$PART_DEVICE",
+            "        LAST_SYS=$SYS_PART",
+            "    fi",
+            "done",
+            "if [ -z \"$LAST_PART\" ]; then",
+            "    skip_action NO_PARTITION",
+            "    return 0",
+            "fi",
+            "PART_NUM=$(cat \"$LAST_SYS/partition\") || fail AUTOGROW_PROBE_FAILED",
+            "BLKID_LINE=$(blkid \"$LAST_PART\" 2>/dev/null || true)",
+            "FS_TYPE=$(printf '%%s\\n' \"$BLKID_LINE\" | sed -n 's/.* TYPE=\"\\([^\"]*\\)\".*/\\1/p')",
+            "case \"$FS_TYPE\" in",
+            "    ext2|ext3|ext4|btrfs|f2fs) ;;",
+            "    '') skip_action UNKNOWN_FILESYSTEM; return 0 ;;",
+            "    *) skip_action \"UNSUPPORTED_FILESYSTEM:$FS_TYPE\"; return 0 ;;",
+            "esac",
+            "DISK_SECTORS=$(cat \"$SYS_DISK/size\") || fail AUTOGROW_PROBE_FAILED",
+            "FREE_SECTORS=$((DISK_SECTORS - LAST_END))",
+            // Ignore alignment and GPT-backup-header sized gaps. sysfs sizes are 512-byte sectors.
+            "if [ \"$FREE_SECTORS\" -lt 2048 ]; then",
+            "    skip_action NO_TRAILING_SPACE",
+            "    return 0",
+            "fi",
+            "if awk -v dev=\"$LAST_PART\" '$1 == dev { found=1 } END { exit !found }' /proc/mounts; then",
+            "    fail AUTOGROW_PARTITION_IN_USE",
+            "fi",
+            "OLD_PART_SIZE=$(cat \"$LAST_SYS/size\") || fail AUTOGROW_PROBE_FAILED",
+            "marker \"AUTOGROW:PARTITION:$LAST_PART:$FS_TYPE:$FREE_SECTORS\"",
+            "if [ -n \"$EXTENDED_DEVICE\" ] && [ \"$PART_NUM\" -ge 5 ]; then",
+            "    EXTENDED_NAME=${EXTENDED_DEVICE##*/}",
+            "    EXTENDED_NUM=$(cat \"/sys/class/block/$EXTENDED_NAME/partition\") || fail AUTOGROW_PROBE_FAILED",
+            "    command_log \"parted -s -f $DISK resizepart $EXTENDED_NUM 100%%\"",
+            "    parted -s -f \"$DISK\" resizepart \"$EXTENDED_NUM\" 100%%",
+            "    rc=$?",
+            "    marker \"COMMAND:RC:PARTED_EXTENDED:$rc\"",
+            "    [ \"$rc\" -eq 0 ] || fail PARTITION_GROW_FAILED",
+            "fi",
+            "command_log \"parted -s -f $DISK resizepart $PART_NUM 100%%\"",
+            "parted -s -f \"$DISK\" resizepart \"$PART_NUM\" 100%%",
+            "rc=$?",
+            "marker \"COMMAND:RC:PARTED:$rc\"",
+            "[ \"$rc\" -eq 0 ] || fail PARTITION_GROW_FAILED",
+            "command_log \"partprobe $DISK\"",
+            "partprobe \"$DISK\"",
+            "rc=$?",
+            "marker \"COMMAND:RC:PARTPROBE:$rc\"",
+            "[ \"$rc\" -eq 0 ] || fail PARTITION_REREAD_FAILED",
+            "NEW_PART_SIZE=$OLD_PART_SIZE",
+            "for wait_count in $(seq 1 20); do",
+            "    NEW_PART_SIZE=$(cat \"$LAST_SYS/size\" 2>/dev/null || echo 0)",
+            "    [ \"$NEW_PART_SIZE\" -gt \"$OLD_PART_SIZE\" ] && break",
+            "    sleep 0.1",
+            "done",
+            "[ \"$NEW_PART_SIZE\" -gt \"$OLD_PART_SIZE\" ] || fail PARTITION_REREAD_FAILED",
+            "case \"$FS_TYPE\" in",
+            "    ext2|ext3|ext4)",
+            "        command_log \"e2fsck -pf $LAST_PART\"",
+            "        e2fsck -pf \"$LAST_PART\"",
+            "        FSCK_RC=$?",
+            "        marker \"COMMAND:RC:E2FSCK:$FSCK_RC\"",
+            "        [ \"$FSCK_RC\" -le 1 ] || fail FILESYSTEM_CHECK_FAILED",
+            "        command_log \"resize2fs $LAST_PART\"",
+            "        resize2fs \"$LAST_PART\"",
+            "        rc=$?",
+            "        marker \"COMMAND:RC:RESIZE2FS:$rc\"",
+            "        [ \"$rc\" -eq 0 ] || fail FILESYSTEM_GROW_FAILED",
+            "        ;;",
+            "    btrfs)",
+            "        modprobe btrfs >/dev/null 2>&1 || true",
+            "        mount -t btrfs -o rw \"$LAST_PART\" /mnt-autogrow || fail FILESYSTEM_MOUNT_FAILED",
+            "        command_log \"btrfs filesystem resize max /mnt-autogrow\"",
+            "        btrfs filesystem resize max /mnt-autogrow",
+            "        rc=$?",
+            "        marker \"COMMAND:RC:BTRFS_RESIZE:$rc\"",
+            "        [ \"$rc\" -eq 0 ] || fail FILESYSTEM_GROW_FAILED",
+            "        sync",
+            "        umount /mnt-autogrow || fail FILESYSTEM_UNMOUNT_FAILED",
+            "        ;;",
+            "    f2fs)",
+            "        modprobe f2fs >/dev/null 2>&1 || true",
+            "        command_log \"fsck.f2fs -f $LAST_PART\"",
+            "        fsck.f2fs -f \"$LAST_PART\"",
+            "        rc=$?",
+            "        marker \"COMMAND:RC:F2FS_FSCK:$rc\"",
+            "        [ \"$rc\" -eq 0 ] || fail FILESYSTEM_CHECK_FAILED",
+            "        command_log \"resize.f2fs $LAST_PART\"",
+            "        resize.f2fs \"$LAST_PART\"",
+            "        rc=$?",
+            "        marker \"COMMAND:RC:F2FS_RESIZE:$rc\"",
+            "        [ \"$rc\" -eq 0 ] || fail FILESYSTEM_GROW_FAILED",
+            "        ;;",
+            "esac",
+            "sync",
+            "marker \"AUTOGROW:GROWN:$LAST_PART:$FS_TYPE:$OLD_PART_SIZE:$NEW_PART_SIZE\"",
+            ""
+        );
+        return fmt(script, escapedString(device));
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/agent/base/AgentActionSpec.java b/app/src/main/java/cn/classfun/droidvm/ui/agent/base/AgentActionSpec.java
new file mode 100644
index 000000000..7488eff27
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/ui/agent/base/AgentActionSpec.java
@@ -0,0 +1,71 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
+package cn.classfun.droidvm.ui.agent.base;
+
+import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
+
+import androidx.annotation.NonNull;
+import androidx.annotation.Nullable;
+
+import org.json.JSONException;
+import org.json.JSONObject;
+
+import java.util.HashMap;
+import java.util.Map;
+
+import cn.classfun.droidvm.lib.store.base.JSONSerialize;
+import cn.classfun.droidvm.lib.utils.JsonUtils;
+
+/** One ordered, serializable operation executed by an {@link AgentVM}. */
+public final class AgentActionSpec implements JSONSerialize {
+    private final String type;
+    private final Map<String, String> params = new HashMap<>();
+
+    public AgentActionSpec(@NonNull String type) {
+        var normalized = type.trim().toLowerCase(java.util.Locale.ROOT);
+        if (!normalized.matches("[a-z][a-z0-9_-]*"))
+            throw new IllegalArgumentException(fmt("Invalid agent action type: %s", type));
+        this.type = normalized;
+    }
+
+    public AgentActionSpec(@NonNull JSONObject jo) throws JSONException {
+        this(jo.getString("type"));
+        if (jo.has("params")) params.putAll(JsonUtils.objectToStringMap(jo, "params"));
+    }
+
+    @NonNull
+    public String getType() {
+        return type;
+    }
+
+    public void setParam(@NonNull String key, @NonNull String value) {
+        params.put(key, value);
+    }
+
+    public boolean hasParam(@NonNull String key) {
+        return params.containsKey(key);
+    }
+
+    @Nullable
+    public String getParam(@NonNull String key, @Nullable String def) {
+        var value = params.getOrDefault(key, def);
+        return value == null || value.isEmpty() ? def : value;
+    }
+
+    public void clearParam(@NonNull String key) {
+        params.remove(key);
+    }
+
+    @NonNull
+    @Override
+    public JSONObject toJson() throws JSONException {
+        var out = new JSONObject();
+        out.put("type", type);
+        var paramsObject = new JSONObject();
+        for (var entry : params.entrySet())
+            paramsObject.put(entry.getKey(), entry.getValue());
+        out.put("params", paramsObject);
+        return out;
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/agent/base/AgentPayloadChunks.java b/app/src/main/java/cn/classfun/droidvm/ui/agent/base/AgentPayloadChunks.java
new file mode 100644
index 000000000..e589ea95f
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/ui/agent/base/AgentPayloadChunks.java
@@ -0,0 +1,27 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
+package cn.classfun.droidvm.ui.agent.base;
+
+import androidx.annotation.NonNull;
+
+import java.util.ArrayList;
+import java.util.List;
+
+/** Splits an encoded rescue payload into lines safely below the TTY canonical limit. */
+public final class AgentPayloadChunks {
+    public static final int MAX_CHUNK_LENGTH = 1024;
+
+    private AgentPayloadChunks() {
+    }
+
+    @NonNull
+    public static List<String> split(@NonNull String payload) {
+        var chunks = new ArrayList<String>();
+        for (int start = 0; start < payload.length(); start += MAX_CHUNK_LENGTH) {
+            int end = Math.min(start + MAX_CHUNK_LENGTH, payload.length());
+            chunks.add(payload.substring(start, end));
+        }
+        return chunks;
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/agent/base/AgentVM.java b/app/src/main/java/cn/classfun/droidvm/ui/agent/base/AgentVM.java
index 95eb357f7..708dc962d 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/agent/base/AgentVM.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/agent/base/AgentVM.java
@@ -3,13 +3,9 @@
 // Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.ui.agent.base;
 
-import static cn.classfun.droidvm.lib.Constants.DATA_DIR;
 import static cn.classfun.droidvm.lib.Constants.PATH_BUILTIN_INITRD;
 import static cn.classfun.droidvm.lib.Constants.PATH_BUILTIN_KERNEL;
-import static cn.classfun.droidvm.lib.utils.FileUtils.shellRemoveTree;
-import static cn.classfun.droidvm.lib.utils.RunUtils.escapedString;
 import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
-import static cn.classfun.droidvm.lib.utils.StringUtils.pathJoin;
 
 import androidx.annotation.NonNull;
 import androidx.annotation.Nullable;
@@ -18,13 +14,14 @@
 import org.json.JSONException;
 import org.json.JSONObject;
 
-import java.io.File;
-import java.io.IOException;
 import java.util.ArrayList;
+import java.util.Collections;
 import java.util.HashMap;
 import java.util.List;
+import java.util.Locale;
 import java.util.Map;
 import java.util.Random;
+import java.util.regex.Pattern;
 
 import cn.classfun.droidvm.lib.store.base.DataItem;
 import cn.classfun.droidvm.lib.store.base.JSONSerialize;
@@ -33,24 +30,46 @@
 import cn.classfun.droidvm.lib.store.disk.DiskStore;
 import cn.classfun.droidvm.lib.store.vm.BootConfig;
 import cn.classfun.droidvm.lib.store.vm.LendMthpMode;
-import cn.classfun.droidvm.lib.store.vm.SharedDirType;
+import cn.classfun.droidvm.lib.store.vm.VMBackend;
 import cn.classfun.droidvm.lib.store.vm.VMConfig;
-import cn.classfun.droidvm.lib.utils.FileUtils;
+import cn.classfun.droidvm.lib.store.vm.VMHypervisor;
 import cn.classfun.droidvm.lib.utils.JsonUtils;
 
 public final class AgentVM implements JSONSerialize {
-    private final static String AGENT_DIR = pathJoin(DATA_DIR, "/usr/share/droidvm/agent");
+    private static final Pattern CONSOLE_STREAM_PATTERN =
+        Pattern.compile("[A-Za-z0-9._-]+");
+    private static final Pattern CONSOLE_DEVICE_PATTERN =
+        Pattern.compile("/dev/[A-Za-z0-9._/-]+");
     private List<DiskConfig> disks = new ArrayList<>();
+    private List<AgentActionSpec> actions = new ArrayList<>();
     private Map<String, String> vars = new HashMap<>();
-    private Map<String, String> result = null;
     private String randomId = null;
+    private String operationConsoleStream = null;
+    private String operationConsoleDevice = null;
+    private VMBackend backend;
+    private VMHypervisor hypervisor;
 
     public AgentVM() {
+        this(VMBackend.DEFAULT, VMHypervisor.AUTO);
+    }
+
+    public AgentVM(
+        @NonNull VMBackend backend,
+        @NonNull VMHypervisor hypervisor
+    ) {
+        this.backend = backend;
+        this.hypervisor = hypervisor;
     }
 
     public AgentVM(@NonNull DiskStore store, @NonNull JSONObject jo) throws JSONException {
+        this();
         if (jo.has("id"))
             randomId = jo.getString("id");
+        if (jo.has("backend"))
+            backend = VMBackend.valueOf(jo.getString("backend").toUpperCase(Locale.ROOT));
+        if (jo.has("hypervisor"))
+            hypervisor = VMHypervisor.valueOf(
+                jo.getString("hypervisor").toUpperCase(Locale.ROOT));
         if (jo.has("disks")) this.disks = JsonUtils.arrayToList(jo, "disks", v -> {
             var disk = store.findById((String) v);
             if (disk == null) throw new JSONException(fmt(
@@ -58,8 +77,16 @@ public AgentVM(@NonNull DiskStore store, @NonNull JSONObject jo) throws JSONExce
             ));
             return disk;
         });
+        if (jo.has("actions")) this.actions = JsonUtils.arrayToList(
+            jo, "actions", v -> new AgentActionSpec((JSONObject) v));
         if (jo.has("vars"))
             this.vars = JsonUtils.objectToStringMap(jo, "vars");
+        var operationConsole = jo.optJSONObject("operation_console");
+        if (operationConsole != null)
+            setOperationConsole(
+                operationConsole.getString("stream"),
+                operationConsole.getString("device")
+            );
     }
 
     @NonNull
@@ -68,14 +95,26 @@ public JSONObject toJson() throws JSONException {
         var jo = new JSONObject();
         if (randomId != null)
             jo.put("id", randomId);
+        jo.put("backend", backend.name().toLowerCase(Locale.ROOT));
+        jo.put("hypervisor", hypervisor.name().toLowerCase(Locale.ROOT));
         var disksArr = new JSONArray();
         for (var disk : disks)
             disksArr.put(disk.getId().toString());
         jo.put("disks", disksArr);
+        var actionsArr = new JSONArray();
+        for (var action : actions)
+            actionsArr.put(action.toJson());
+        jo.put("actions", actionsArr);
         var varsObj = new JSONObject();
         for (var entry : vars.entrySet())
             varsObj.put(entry.getKey(), entry.getValue());
         jo.put("vars", varsObj);
+        if (operationConsoleStream != null && operationConsoleDevice != null) {
+            var operationConsole = new JSONObject();
+            operationConsole.put("stream", operationConsoleStream);
+            operationConsole.put("device", operationConsoleDevice);
+            jo.put("operation_console", operationConsole);
+        }
         return jo;
     }
 
@@ -96,13 +135,62 @@ private String getName() {
         return fmt("agent-%s", getRandomId());
     }
 
+    public void addDisk(@NonNull DiskConfig disk) {
+        disks.add(disk);
+    }
+
+    /** Appends an operation; list order is execution order inside the same rescue VM. */
     @NonNull
-    private String getVarsDir() {
-        return pathJoin(DATA_DIR, "run", getName());
+    public AgentActionSpec addAction(@NonNull String type) {
+        var action = new AgentActionSpec(type);
+        actions.add(action);
+        return action;
     }
 
-    public void addDisk(@NonNull DiskConfig disk) {
-        disks.add(disk);
+    @NonNull
+    public List<AgentActionSpec> getActions() {
+        return Collections.unmodifiableList(actions);
+    }
+
+    @NonNull
+    public VMBackend getBackend() {
+        return backend;
+    }
+
+    public void setBackend(@NonNull VMBackend backend) {
+        this.backend = backend;
+    }
+
+    @NonNull
+    public VMHypervisor getHypervisor() {
+        return hypervisor;
+    }
+
+    public void setHypervisor(@NonNull VMHypervisor hypervisor) {
+        this.hypervisor = hypervisor;
+    }
+
+    /**
+     * Declares the one host stream and matching guest tty shared by automation and the user.
+     * The operation owner chooses both values because neither one can be inferred from a backend.
+     */
+    public void setOperationConsole(@NonNull String stream, @NonNull String device) {
+        if (!CONSOLE_STREAM_PATTERN.matcher(stream).matches())
+            throw new IllegalArgumentException("Invalid operation console stream");
+        if (!CONSOLE_DEVICE_PATTERN.matcher(device).matches())
+            throw new IllegalArgumentException("Invalid operation console device");
+        operationConsoleStream = stream;
+        operationConsoleDevice = device;
+    }
+
+    @Nullable
+    public String getOperationConsoleStream() {
+        return operationConsoleStream;
+    }
+
+    @Nullable
+    public String getOperationConsoleDevice() {
+        return operationConsoleDevice;
     }
 
     @NonNull
@@ -110,15 +198,28 @@ public VMConfig buildVM() {
         var vm = new VMConfig();
         vm.setName(getName());
         vm.item.set("temporary", true);
+        vm.item.set("agent_mode", false);
+        vm.item.set("backend", backend);
+        vm.item.set("hypervisor", hypervisor);
         vm.item.set("cpu_count", 1);
-        vm.item.set("memory_mb", 384);
+        // The existing general-purpose initramfs expands to roughly 113 MiB. 320 MiB is the
+        // measured reliable floor on TCG while keeping a useful margin for filesystem modules.
+        vm.item.set("memory_mb", 320);
+        vm.item.set("hugepages", false);
+        vm.item.set("rng", false);
+        vm.item.set("balloon", false);
+        vm.item.set("usb", false);
+        vm.item.set("audio_enabled", false);
         vm.item.set(LendMthpMode.KEY, LendMthpMode.DISABLED);
         var boot = BootConfig.of(vm);
         boot.setProtocol(BootConfig.Protocol.LINUX);
         boot.setLinuxSource(BootConfig.LinuxSource.MANUAL);
         boot.setKernel(PATH_BUILTIN_KERNEL);
         boot.setInitrd(PATH_BUILTIN_INITRD);
-        boot.setCmdline("rd.systemd.unit=host-agent.target");
+        if (operationConsoleStream == null || operationConsoleDevice == null)
+            throw new IllegalStateException("Operation console is not configured");
+        var console = operationConsoleDevice.substring("/dev/".length());
+        boot.setCmdline(fmt("console=%s rdinit=/bin/sh panic=-1", console));
         var diskItems = DataItem.newArray();
         for (var disk : disks) {
             var item = DataItem.newObject();
@@ -127,18 +228,7 @@ public VMConfig buildVM() {
             diskItems.append(item);
         }
         vm.item.set("disks", diskItems);
-        var dirItems = DataItem.newArray();
-        var hostDir = DataItem.newObject();
-        hostDir.set("path", AGENT_DIR);
-        hostDir.set("tag", "host");
-        hostDir.set("type", SharedDirType.FS);
-        dirItems.append(hostDir);
-        var varsDir = DataItem.newObject();
-        varsDir.set("path", getVarsDir());
-        varsDir.set("tag", "vars");
-        varsDir.set("type", SharedDirType.FS);
-        dirItems.append(varsDir);
-        vm.item.set("shared_dirs", dirItems);
+        vm.item.set("networks", DataItem.newArray());
         return vm;
     }
 
@@ -158,60 +248,7 @@ public String getActionVar(@NonNull String key, @Nullable String def) {
         return val;
     }
 
-    public void cleanupVars() {
-        shellRemoveTree(getVarsDir());
-    }
-
-    public void prepareVars() throws IOException {
-        var varsDir = getVarsDir();
-        if (!new File(varsDir).mkdirs())
-            throw new IOException("Failed to create vars dir");
-        var sb = new StringBuilder();
-        vars.forEach((k, v) -> sb.append(fmt("%s=%s\n", k, escapedString(v))));
-        var actionFile = pathJoin(varsDir, "actions.txt");
-        FileUtils.writeFile(actionFile, sb.toString());
-    }
-
-    @NonNull
-    private Map<String, String> readResult() throws IOException {
-        var resultFile = pathJoin(getVarsDir(), "result.txt");
-        var result = new HashMap<String, String>();
-        if (!new File(resultFile).exists())
-            throw new IOException("Result file does not exist");
-        var lines = FileUtils.readFile(resultFile);
-        for (var line : lines.split("\n")) {
-            var idx = line.indexOf('=');
-            if (idx <= 0) continue;
-            var key = line.substring(0, idx).trim();
-            var value = line.substring(idx + 1).trim();
-            result.put(key, value);
-        }
-        return result;
-    }
-
-    @NonNull
-    private Map<String, String> getResult() {
-        if (result == null) {
-            try {
-                result = readResult();
-            } catch (IOException e) {
-                throw new RuntimeException("Failed to read result", e);
-            }
-        }
-        return result;
-    }
-
-    @NonNull
-    public String getResultItem(@NonNull String key, @NonNull String def) {
-        var res = getResult();
-        if (!res.containsKey(key)) return def;
-        var val = res.getOrDefault(key, def);
-        if (val == null || val.isEmpty()) return def;
-        return val;
-    }
-
-    public boolean isResultValue(@NonNull String key, @NonNull String expected) {
-        var val = getResultItem(key, "");
-        return val.equals(expected);
+    public void clearActionVar(@NonNull String key) {
+        vars.remove(key);
     }
 }
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/agent/base/BaseAction.java b/app/src/main/java/cn/classfun/droidvm/ui/agent/base/BaseAction.java
index 9a112ac55..ad413f0fa 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/agent/base/BaseAction.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/agent/base/BaseAction.java
@@ -7,13 +7,19 @@
 
 import androidx.annotation.NonNull;
 
+import java.util.ArrayList;
+import java.util.List;
+
+import cn.classfun.droidvm.ui.agent.autogrow.AutoGrowAction;
 import cn.classfun.droidvm.ui.agent.password.PasswordAction;
 
 public abstract class BaseAction {
     protected final AgentVM vm;
+    protected final AgentActionSpec spec;
 
-    public BaseAction(@NonNull AgentVM vm) {
+    protected BaseAction(@NonNull AgentVM vm, @NonNull AgentActionSpec spec) {
         this.vm = vm;
+        this.spec = spec;
     }
 
     @NonNull
@@ -22,18 +28,94 @@ public AgentVM getVM() {
         return vm;
     }
 
-    public abstract void checkResult();
+    /** Shell function body executed as one step of the ordered rescue action list. */
+    @NonNull
+    protected abstract String buildActionScript();
+
+    /** Drops credentials once the command payload has been built. */
+    public void clearSecrets() {
+    }
 
     @NonNull
-    public static BaseAction createAction(@NonNull AgentVM vm) {
-        var action = vm.getActionVar("ACTION", null);
-        if (action == null)
-            throw new IllegalArgumentException("VM: No action specified");
-        switch (action) {
-            case "passwd":
-                return new PasswordAction(vm);
+    private static BaseAction createAction(
+        @NonNull AgentVM vm,
+        @NonNull AgentActionSpec spec
+    ) {
+        switch (spec.getType()) {
+            case PasswordAction.TYPE:
+            case "passwd": // Early AgentVM prototype spelling.
+                return new PasswordAction(vm, spec);
+            case AutoGrowAction.TYPE:
+                return new AutoGrowAction(vm, spec);
             default:
-                throw new IllegalArgumentException(fmt("VM: Unknown action: %s", action));
+                throw new IllegalArgumentException(fmt(
+                    "VM: Unknown action: %s", spec.getType()));
+        }
+    }
+
+    /** Restores the ordered action queue, including the old vars/ACTION format. */
+    @NonNull
+    public static List<BaseAction> createActions(@NonNull AgentVM vm) {
+        var out = new ArrayList<BaseAction>();
+        for (var spec : vm.getActions()) out.add(createAction(vm, spec));
+        if (!out.isEmpty()) return out;
+
+        var legacyType = vm.getActionVar("ACTION", null);
+        if (legacyType == null)
+            throw new IllegalArgumentException("VM: No action specified");
+        var legacy = new AgentActionSpec(legacyType);
+        if (legacyType.equals("passwd")) {
+            legacy.setParam("password", vm.getActionVar("PASSWORD", ""));
+            legacy.setParam("normal_users", vm.getActionVar("PASSWD_NORMAL_USERS", "false"));
+        }
+        out.add(createAction(vm, legacy));
+        return out;
+    }
+
+    /** Builds one rescue script that runs every action without rebooting between steps. */
+    @NonNull
+    public static String buildRescueScript(@NonNull List<BaseAction> actions) {
+        if (actions.isEmpty()) throw new IllegalArgumentException("VM: No action specified");
+        var script = new StringBuilder(String.join("\n",
+            "#!/bin/sh",
+            "marker() { printf '\\n__DROIDVM_AGENT__:%s\\n' \"$1\"; }",
+            "command_log() { printf '\\n[droidvm] $ %s\\n' \"$1\"; }",
+            "fail() {",
+            "    code=$1",
+            "    sync",
+            "    umount /mnt/proc >/dev/null 2>&1 || true",
+            "    umount /mnt/dev >/dev/null 2>&1 || true",
+            "    umount /mnt >/dev/null 2>&1 || true",
+            "    umount /mnt-autogrow >/dev/null 2>&1 || true",
+            "    marker \"ACTION:ERROR:$ACTION_INDEX:$ACTION_TYPE:$code\"",
+            "    marker \"RESULT:ERROR:$code\"",
+            "    exit 0",
+            "}",
+            "skip_action() {",
+            "    ACTION_SKIPPED=true",
+            "    marker \"ACTION:SKIPPED:$ACTION_INDEX:$ACTION_TYPE:$1\"",
+            "}",
+            "mkdir -p /mnt /mnt-autogrow /run",
+            ""
+        ));
+        for (int i = 0; i < actions.size(); i++) {
+            var action = actions.get(i);
+            var body = action.buildActionScript();
+            script.append(fmt("ACTION_INDEX=%d\n", i));
+            script.append(fmt("ACTION_TYPE=%s\n", action.spec.getType()));
+            script.append("ACTION_SKIPPED=false\n");
+            script.append("marker \"ACTION:START:$ACTION_INDEX:$ACTION_TYPE\"\n");
+            script.append(fmt("agent_action_%d() {\n", i));
+            script.append(body);
+            if (!body.endsWith("\n")) script.append('\n');
+            script.append("}\n");
+            script.append(fmt("agent_action_%d\n", i));
+            script.append("rc=$?\n");
+            script.append("[ $rc -eq 0 ] || fail SCRIPT_FAILED\n");
+            script.append("[ \"$ACTION_SKIPPED\" = true ] || ")
+                .append("marker \"ACTION:OK:$ACTION_INDEX:$ACTION_TYPE\"\n\n");
         }
+        script.append("sync\nmarker RESULT:OK\n");
+        return script.toString();
     }
 }
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/agent/password/ChangePasswordActivity.java b/app/src/main/java/cn/classfun/droidvm/ui/agent/password/ChangePasswordActivity.java
index 93194d372..d1d7efe80 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/agent/password/ChangePasswordActivity.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/agent/password/ChangePasswordActivity.java
@@ -3,14 +3,20 @@
 // Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.ui.agent.password;
 
+import static cn.classfun.droidvm.lib.utils.StringUtils.SHELL_SAFE_PASSWORD_SYMBOLS;
 import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
+import static cn.classfun.droidvm.lib.utils.StringUtils.isShellSafePassword;
+import static cn.classfun.droidvm.lib.utils.StringUtils.shellSafePasswordFilter;
 
 import android.content.Context;
 import android.content.Intent;
 import android.os.Bundle;
+import android.text.InputFilter;
 import android.util.Log;
 import android.widget.TextView;
 
+import androidx.activity.result.ActivityResultLauncher;
+import androidx.activity.result.contract.ActivityResultContracts;
 import androidx.annotation.NonNull;
 import androidx.appcompat.app.AppCompatActivity;
 
@@ -25,12 +31,15 @@
 
 import cn.classfun.droidvm.R;
 import cn.classfun.droidvm.lib.store.disk.DiskStore;
+import cn.classfun.droidvm.lib.store.vm.VMBackend;
+import cn.classfun.droidvm.lib.store.vm.VMHypervisor;
 import cn.classfun.droidvm.ui.agent.AgentOperationActivity;
 import cn.classfun.droidvm.ui.agent.base.AgentVM;
 
 public final class ChangePasswordActivity extends AppCompatActivity {
     private static final String TAG = "ChangePasswordActivity";
     public static final String EXTRA_DISK_ID = "disk_id";
+    private static final String EXTRA_QUICK_PASSWORD = "quick_password";
     private TextInputLayout tilPassword;
     private TextInputEditText etPassword;
     private TextInputLayout tilConfirmPassword;
@@ -41,6 +50,7 @@ public final class ChangePasswordActivity extends AppCompatActivity {
     private TextView tvDiskName;
     private MaterialSwitch swNormalUsers;
     private UUID diskId;
+    private ActivityResultLauncher<Intent> operationLauncher;
 
     @NonNull
     public static Intent createIntent(@NonNull Context context, @NonNull UUID diskId) {
@@ -49,6 +59,18 @@ public static Intent createIntent(@NonNull Context context, @NonNull UUID diskId
         return intent;
     }
 
+    /** Skips the confirmation form and immediately changes only the root password. */
+    @NonNull
+    public static Intent createQuickIntent(
+        @NonNull Context context,
+        @NonNull UUID diskId,
+        @NonNull String password
+    ) {
+        var intent = createIntent(context, diskId);
+        intent.putExtra(EXTRA_QUICK_PASSWORD, password);
+        return intent;
+    }
+
     @Override
     protected void onCreate(Bundle savedInstanceState) {
         super.onCreate(savedInstanceState);
@@ -62,10 +84,15 @@ protected void onCreate(Bundle savedInstanceState) {
         etConfirmPassword = findViewById(R.id.et_confirm_password);
         swNormalUsers = findViewById(R.id.sw_normal_users);
         fabConfirm = findViewById(R.id.fab_confirm);
-        initialize();
+        operationLauncher = registerForActivityResult(
+            new ActivityResultContracts.StartActivityForResult(), result -> {
+                setResult(result.getResultCode());
+                finish();
+            });
+        initialize(savedInstanceState == null);
     }
 
-    private void initialize() {
+    private void initialize(boolean isFreshStart) {
         collapsingToolbar.setTitle(getString(R.string.change_password_title));
         toolbar.setNavigationOnClickListener(v -> finish());
         var diskIdStr = getIntent().getStringExtra(EXTRA_DISK_ID);
@@ -84,6 +111,23 @@ private void initialize() {
             return;
         }
         tvDiskName.setText(getString(R.string.change_password_disk_label, diskConfig.getName()));
+        // The password rides through the rescue VM's chpasswd shell script;
+        // only characters that script may carry can be entered.
+        etPassword.setFilters(new InputFilter[]{shellSafePasswordFilter()});
+        etConfirmPassword.setFilters(new InputFilter[]{shellSafePasswordFilter()});
+        var quickPassword = getIntent().getStringExtra(EXTRA_QUICK_PASSWORD);
+        // Do not retain the password in this Activity's explicit intent.
+        getIntent().removeExtra(EXTRA_QUICK_PASSWORD);
+        if (isFreshStart && quickPassword != null && !quickPassword.isEmpty()) {
+            if (isShellSafePassword(quickPassword)) {
+                startPasswordChange(quickPassword, false, true);
+                return;
+            }
+            // Never hand an unvetted password to the script; fall back to the form.
+            Log.w(TAG, "Quick password contains unsupported characters; showing form");
+            tilPassword.setError(getString(
+                R.string.change_password_error_unsafe, SHELL_SAFE_PASSWORD_SYMBOLS));
+        }
         fabConfirm.setOnClickListener(v -> onConfirm());
     }
 
@@ -97,11 +141,23 @@ private void onConfirm() {
             tilPassword.setError(getString(R.string.change_password_error_empty));
             return;
         }
+        if (!isShellSafePassword(password)) {
+            tilPassword.setError(getString(
+                R.string.change_password_error_unsafe, SHELL_SAFE_PASSWORD_SYMBOLS));
+            return;
+        }
         if (!password.equals(confirmPassword)) {
             tilConfirmPassword.setError(getString(R.string.change_password_error_mismatch));
             return;
         }
-        boolean changeNormalUsers = swNormalUsers.isChecked();
+        startPasswordChange(password, swNormalUsers.isChecked(), false);
+    }
+
+    private void startPasswordChange(
+        @NonNull String password,
+        boolean changeNormalUsers,
+        boolean quickMode
+    ) {
         var diskStore = new DiskStore();
         diskStore.load(this);
         var diskConfig = diskStore.findById(diskId);
@@ -110,13 +166,21 @@ private void onConfirm() {
             finish();
             return;
         }
-        var agentVM = new AgentVM();
+        // Password rescue deliberately selects QEMU TCG and its human UART. AgentVM carries the
+        // explicit console mapping so other operations can select a different backend and tty.
+        var agentVM = new AgentVM(VMBackend.QEMU, VMHypervisor.SOFT);
+        agentVM.setOperationConsole("uart", "/dev/ttyAMA0");
         var action = new PasswordAction(agentVM);
         action.setPassword(password);
         action.setChangeNormalUsers(changeNormalUsers);
         agentVM.addDisk(diskConfig);
         var intent = AgentOperationActivity.createIntent(this, agentVM);
-        startActivity(intent);
-        finish();
+        if (quickMode) {
+            intent.putExtra(AgentOperationActivity.EXTRA_AUTOFINISH_ON_SUCCESS, true);
+            operationLauncher.launch(intent);
+        } else {
+            startActivity(intent);
+            finish();
+        }
     }
 }
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/agent/password/PasswordAction.java b/app/src/main/java/cn/classfun/droidvm/ui/agent/password/PasswordAction.java
index f5475ac33..dd56b7292 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/agent/password/PasswordAction.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/agent/password/PasswordAction.java
@@ -3,45 +3,96 @@
 // Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.ui.agent.password;
 
+import static cn.classfun.droidvm.lib.utils.RunUtils.escapedString;
+import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
+
 import androidx.annotation.NonNull;
 
+import cn.classfun.droidvm.ui.agent.base.AgentActionSpec;
 import cn.classfun.droidvm.ui.agent.base.AgentVM;
 import cn.classfun.droidvm.ui.agent.base.BaseAction;
 
 public final class PasswordAction extends BaseAction {
+    public static final String TYPE = "chpasswd";
+
+    /** Appends a chpasswd step to the VM's ordered action queue. */
     public PasswordAction(@NonNull AgentVM vm) {
-        super(vm);
-        if (!vm.hasActionVar("MOUNT_ROOT"))
-            vm.setActionVar("MOUNT_ROOT", "true");
-        if (!vm.hasActionVar("ACTION"))
-            vm.setActionVar("ACTION", "passwd");
-        if (!vm.hasActionVar("PASSWORD"))
-            vm.setActionVar("PASSWORD", "");
-        if (!vm.hasActionVar("PASSWD_NORMAL_USERS"))
-            vm.setActionVar("PASSWD_NORMAL_USERS", "false");
+        this(vm, vm.addAction(TYPE));
+    }
+
+    public PasswordAction(@NonNull AgentVM vm, @NonNull AgentActionSpec spec) {
+        super(vm, spec);
+        if (!spec.hasParam("password")) spec.setParam("password", "");
+        if (!spec.hasParam("normal_users")) spec.setParam("normal_users", "false");
     }
 
     public void setPassword(@NonNull String password) {
-        vm.setActionVar("PASSWORD", password);
+        spec.setParam("password", password);
     }
 
     public void setChangeNormalUsers(boolean change) {
-        vm.setActionVar("PASSWD_NORMAL_USERS", String.valueOf(change));
+        spec.setParam("normal_users", String.valueOf(change));
+    }
+
+    @NonNull
+    public String getPassword() {
+        return spec.getParam("password", "");
+    }
+
+    @NonNull
+    @Override
+    protected String buildActionScript() {
+        var changeNormalUsers = spec.getParam("normal_users", "false");
+        var script = String.join("\n",
+            "CHANGE_NORMAL_USERS=%s",
+            "FILESYSTEMS=$(blkid)",
+            "echo \"$FILESYSTEMS\" | grep -q 'TYPE=\"btrfs\"' && modprobe btrfs >/dev/null 2>&1 || true",
+            "echo \"$FILESYSTEMS\" | grep -q 'TYPE=\"xfs\"' && modprobe xfs >/dev/null 2>&1 || true",
+            "echo \"$FILESYSTEMS\" | grep -q 'TYPE=\"f2fs\"' && modprobe f2fs >/dev/null 2>&1 || true",
+            "TARGET_DEVICE=\"\"",
+            "for dev in $(echo \"$FILESYSTEMS\" | grep -E 'TYPE=\"(ext2|ext3|ext4|btrfs|xfs|f2fs)\"' | cut -d: -f1); do",
+            "    marker \"PROBE:$dev\"",
+            "    if mount -o rw \"$dev\" /mnt >/dev/null 2>&1; then",
+            "        if [ -f /mnt/etc/passwd ]; then",
+            "            TARGET_DEVICE=\"$dev\"",
+            "            break",
+            "        fi",
+            "        umount /mnt >/dev/null 2>&1 || true",
+            "    fi",
+            "done",
+            "[ -n \"$TARGET_DEVICE\" ] || fail ROOT_NOT_FOUND",
+            "printf '%%s\\n' \"$TARGET_DEVICE\" > /run/droidvm-root-device",
+            "marker \"ROOT:$TARGET_DEVICE\"",
+            "[ -d /mnt/dev ] || fail PASSWD_FAILED",
+            "[ -d /mnt/proc ] || fail PASSWD_FAILED",
+            "mount -o bind /dev /mnt/dev || fail PASSWD_FAILED",
+            "mount -t proc proc /mnt/proc || fail PASSWD_FAILED",
+            "change_password() {",
+            "    marker \"PASSWD:$1\"",
+            "    command_log \"LC_ALL=C busybox chroot /mnt /usr/bin/passwd $1\"",
+            "    LC_ALL=C busybox chroot /mnt /usr/bin/passwd \"$1\"",
+            "    rc=$?",
+            "    marker \"COMMAND:RC:PASSWD:$1:$rc\"",
+            "    [ \"$rc\" -eq 0 ] || fail PASSWD_FAILED",
+            "}",
+            "change_password root",
+            "if [ \"$CHANGE_NORMAL_USERS\" = true ]; then",
+            "    for user in $(awk -F: '$3 >= 1000 && $3 < 2000 {print $1}' /mnt/etc/passwd); do",
+            "        change_password \"$user\"",
+            "    done",
+            "fi",
+            "sync",
+            "umount /mnt/proc >/dev/null 2>&1 || fail UNMOUNT_FAILED",
+            "umount /mnt/dev >/dev/null 2>&1 || fail UNMOUNT_FAILED",
+            "umount /mnt >/dev/null 2>&1 || fail UNMOUNT_FAILED",
+            ""
+        );
+        return fmt(script, escapedString(changeNormalUsers));
     }
 
     @Override
-    public void checkResult() {
-        if (!vm.isResultValue("STARTED", "true"))
-            throw new RuntimeException("VM: Agent script failed to start");
-        if (vm.isResultValue("ROOT_NOT_FOUND", "true"))
-            throw new RuntimeException("VM: Root partition not found");
-        if (!vm.isResultValue("ROOT_FOUND", "true"))
-            throw new RuntimeException("VM: Root partition mount failed");
-        if (vm.isResultValue("PASSWD_FAILED", "true"))
-            throw new RuntimeException("VM: Failed to change password");
-        if (!vm.isResultValue("PASSWD_SUCCESS", "true"))
-            throw new RuntimeException("VM: Unknown error during password change");
-        if (!vm.isResultValue("ALL_SUCCESS", "true"))
-            throw new RuntimeException("VM: Not all operations completed successfully");
+    public void clearSecrets() {
+        spec.clearParam("password");
+        vm.clearActionVar("PASSWORD"); // Also scrub a deserialized legacy action.
     }
 }
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/disk/action/DiskResizeDialog.java b/app/src/main/java/cn/classfun/droidvm/ui/disk/action/DiskResizeDialog.java
index 1dcf30de9..6432d261e 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/disk/action/DiskResizeDialog.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/disk/action/DiskResizeDialog.java
@@ -171,6 +171,7 @@ private void doResize(long bytes, boolean shrink, boolean autoGrow) {
     @NonNull
     private Intent createAutoGrowIntent() {
         var agentVM = new AgentVM(VMBackend.QEMU, VMHypervisor.SOFT);
+        agentVM.setOperationConsole("uart", "/dev/ttyAMA0");
         new AutoGrowAction(agentVM);
         agentVM.addDisk(config);
         return AgentOperationActivity.createIntent(context, agentVM);
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/disk/operation/DiskOperationActivity.java b/app/src/main/java/cn/classfun/droidvm/ui/disk/operation/DiskOperationActivity.java
index 21c5d2d39..8ca9069de 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/disk/operation/DiskOperationActivity.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/disk/operation/DiskOperationActivity.java
@@ -35,8 +35,6 @@
 import com.google.android.material.dialog.MaterialAlertDialogBuilder;
 import com.termux.terminal.TerminalSession;
 import com.termux.terminal.TerminalSessionClient;
-import com.termux.view.TerminalView;
-import com.termux.view.TerminalViewClient;
 
 import org.json.JSONObject;
 
@@ -47,8 +45,7 @@
 import cn.classfun.droidvm.lib.store.disk.DiskStore;
 import cn.classfun.droidvm.lib.utils.RunUtils;
 import cn.classfun.droidvm.lib.ui.termux.SimpleTerminalSessionClient;
-import cn.classfun.droidvm.lib.ui.termux.TerminalFonts;
-import cn.classfun.droidvm.lib.ui.termux.SimpleTerminalViewClient;
+import cn.classfun.droidvm.lib.ui.termux.TerminalPanelView;
 import cn.classfun.droidvm.ui.disk.create.DiskCompress;
 import cn.classfun.droidvm.lib.store.vm.VMStore;
 import cn.classfun.droidvm.ui.disk.action.DiskDependencyUpdater;
@@ -69,7 +66,7 @@ public final class DiskOperationActivity extends AppCompatActivity {
     /** Explicit in-app activity to launch only after this disk operation succeeds. */
     public static final String EXTRA_SUCCESS_INTENT = "success_intent";
     private final Handler mainHandler = new Handler(Looper.getMainLooper());
-    private TerminalView terminalView;
+    private TerminalPanelView terminalPanel;
     private ProgressBar progressSpinner;
     private ImageView ivStatus;
     private TextView tvFilename;
@@ -90,8 +87,7 @@ public final class DiskOperationActivity extends AppCompatActivity {
         @Override
         public void onTextChanged(@NonNull TerminalSession s) {
             mainHandler.post(() -> {
-                if (terminalView != null)
-                    terminalView.onScreenUpdated();
+                if (terminalPanel != null) terminalPanel.refresh();
             });
         }
 
@@ -101,9 +97,6 @@ public void onSessionFinished(@NonNull TerminalSession s) {
         }
     };
 
-    private final TerminalViewClient viewClient = new SimpleTerminalViewClient() {
-    };
-
     @NonNull
     public static Intent createIntent(
         @NonNull Context context,
@@ -251,8 +244,8 @@ protected void onCreate(Bundle savedInstanceState) {
         tvFilename = findViewById(R.id.tv_filename);
         tvStatus = findViewById(R.id.tv_status);
         btnCancel = findViewById(R.id.btn_cancel);
-        terminalView = findViewById(R.id.terminal_view);
-        terminalView.setTerminalViewClient(viewClient);
+        terminalPanel = findViewById(R.id.terminal_panel);
+        terminalPanel.setInteractive(false);
         btnCancel.setOnClickListener(v -> confirmCancel());
         initialize();
     }
@@ -454,10 +447,7 @@ private void startTerminalSession(String cmd) {
             fmt("HOME=%s", cwd),
         };
         session = new TerminalSession(shell, cwd, args, env, null, sessionClient);
-        float density = getResources().getDisplayMetrics().density;
-        terminalView.setTextSize((int) (10 * density));
-        TerminalFonts.apply(terminalView);
-        terminalView.attachSession(session);
+        terminalPanel.attachSession(session);
     }
 
     private void onProcessFinished() {
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/console/VMConsoleActivity.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/console/VMConsoleActivity.java
index 2dec5a72a..e062382d4 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/console/VMConsoleActivity.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/console/VMConsoleActivity.java
@@ -3,8 +3,6 @@
 // Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.ui.vm.console;
 
-import static android.view.HapticFeedbackConstants.KEYBOARD_TAP;
-import static android.view.KeyEvent.*;
 import static android.widget.Toast.LENGTH_SHORT;
 import static java.util.Objects.requireNonNull;
 import static cn.classfun.droidvm.lib.ui.MaterialMenu.setupToolbarMenu;
@@ -24,12 +22,7 @@
 import android.os.Handler;
 import android.os.Looper;
 import android.util.Log;
-import android.view.KeyEvent;
 import android.view.MenuItem;
-import android.view.MotionEvent;
-import android.view.View;
-import android.view.inputmethod.InputMethodManager;
-import android.widget.Button;
 import android.widget.Toast;
 
 import androidx.activity.result.ActivityResultLauncher;
@@ -41,8 +34,6 @@
 import com.google.android.material.appbar.MaterialToolbar;
 import com.termux.terminal.TerminalSession;
 import com.termux.terminal.TerminalSessionClient;
-import com.termux.view.TerminalView;
-import com.termux.view.TerminalViewClient;
 
 import java.net.URLDecoder;
 import java.nio.charset.StandardCharsets;
@@ -53,30 +44,21 @@
 
 import cn.classfun.droidvm.R;
 import cn.classfun.droidvm.lib.daemon.DaemonConnection;
-import cn.classfun.droidvm.lib.ui.ImeInsetsExempt;
 import cn.classfun.droidvm.lib.ui.termux.SimpleTerminalSessionClient;
-import cn.classfun.droidvm.lib.ui.termux.TerminalFonts;
-import cn.classfun.droidvm.lib.ui.termux.SimpleTerminalViewClient;
+import cn.classfun.droidvm.lib.ui.termux.TerminalPanelView;
 import cn.classfun.droidvm.lib.utils.ShareUtils;
 
-public final class VMConsoleActivity extends AppCompatActivity implements ImeInsetsExempt {
+public final class VMConsoleActivity extends AppCompatActivity {
     private static final String TAG = "VMConsoleActivity";
     public static final String EXTRA_VM_ID = "vm_id";
     public static final String EXTRA_VM_NAME = "vm_name";
     public static final String EXTRA_STREAM = "stream";
     public static final String EXTRA_LOGS = "logs";
     private static final String DEFAULT_STREAM = "uart";
-    private static final String PREFS_NAME = "droidvm_prefs";
-    private static final String KEY_FONT_SIZE = "console_font_size";
-    private static final float MIN_FONT_SIZE = 2;
-    private static final float MAX_FONT_SIZE = 48;
-    private static final float DEFAULT_FONT_SIZE = 5;
     private final Handler mainHandler = new Handler(Looper.getMainLooper());
     private ActivityResultLauncher<String> saveLogLauncher;
-    private TerminalView terminalView;
+    private TerminalPanelView terminalPanel;
     private TerminalSession terminalSession;
-    private boolean ctrlDown = false;
-    private boolean altDown = false;
     public String vmId;
     public String vmName;
     public String streamName;
@@ -85,55 +67,11 @@ public final class VMConsoleActivity extends AppCompatActivity implements ImeIns
         @Override
         public void onTextChanged(@NonNull TerminalSession s) {
             mainHandler.post(() -> {
-                if (terminalView != null)
-                    terminalView.onScreenUpdated();
+                if (terminalPanel != null) terminalPanel.refresh();
             });
         }
     };
 
-    private float currentFontSize = DEFAULT_FONT_SIZE;
-    private final TerminalViewClient viewClient = new SimpleTerminalViewClient() {
-        @Override
-        public float onScale(float scale) {
-            var dampened = 1.0f + (scale - 1.0f) * 0.1f;
-            currentFontSize = Math.max(MIN_FONT_SIZE, Math.min(MAX_FONT_SIZE, currentFontSize * dampened));
-            if (terminalView != null) {
-                var density = getResources().getDisplayMetrics().density;
-                terminalView.setTextSize((int) (currentFontSize * density));
-            }
-            return dampened;
-        }
-
-        @Override
-        public void onSingleTapUp(MotionEvent e) {
-            var imm = getSystemService(InputMethodManager.class);
-            if (imm != null && terminalView != null) {
-                terminalView.requestFocus();
-                imm.showSoftInput(terminalView, 0);
-            }
-        }
-
-        @Override
-        public boolean readControlKey() {
-            if (ctrlDown) {
-                ctrlDown = false;
-                updateToggleButtons();
-                return true;
-            }
-            return false;
-        }
-
-        @Override
-        public boolean readAltKey() {
-            if (altDown) {
-                altDown = false;
-                updateToggleButtons();
-                return true;
-            }
-            return false;
-        }
-    };
-
     @Override
     protected void onCreate(Bundle savedInstanceState) {
         super.onCreate(savedInstanceState);
@@ -154,14 +92,14 @@ protected void onCreate(Bundle savedInstanceState) {
         var item = setupToolbarMenu(toolbar, R.menu.menu_vm_console, this::onMenuItemClicked);
         item.setIconTintList(ColorStateList.valueOf(Color.WHITE));
         item.setIconTintMode(PorterDuff.Mode.SRC_IN);
-        terminalView = findViewById(R.id.terminal_view);
-        terminalView.setTerminalViewClient(viewClient);
         var consoleBin = getAssetBinaryPath("droidvm");
         var shell = findExecute("su", "/system/bin/su");
         var cwd = getFilesDir().getAbsolutePath();
         var cmd = fmt(
             logs ? "%s logs %s %s; sleep 2" : "exec %s console --raw %s %s",
             escapedString(consoleBin),
+        terminalPanel = findViewById(R.id.terminal_panel);
+        terminalPanel.setInteractive(true);
             escapedString(vmId),
             escapedString(streamName)
         );
@@ -175,13 +113,14 @@ protected void onCreate(Bundle savedInstanceState) {
         var density = getResources().getDisplayMetrics().density;
         var session = new TerminalSession(shell, cwd, args, env, null, sessionClient);
         terminalSession = session;
-        terminalView.attachSession(session);
         terminalView.setTextSize((int) (currentFontSize * density));
         TerminalFonts.apply(terminalView);
         terminalView.setFocusable(true);
         terminalView.setFocusableInTouchMode(true);
         terminalView.requestFocus();
         setupExtraKeys();
+        terminalPanel.attachSession(session);
+        terminalPanel.clearSession(terminalSession);
     }
 
     private boolean onMenuItemClicked(@NonNull MenuItem item) {
@@ -199,25 +138,6 @@ private boolean onMenuItemClicked(@NonNull MenuItem item) {
         return false;
     }
 
-    @Override
-    protected void onPause() {
-        super.onPause();
-        saveFontSize();
-    }
-
-    private float loadFontSize() {
-        var saved = getSharedPreferences(PREFS_NAME, MODE_PRIVATE)
-            .getFloat(KEY_FONT_SIZE, DEFAULT_FONT_SIZE);
-        return Math.max(MIN_FONT_SIZE, Math.min(MAX_FONT_SIZE, saved));
-    }
-
-    private void saveFontSize() {
-        getSharedPreferences(PREFS_NAME, MODE_PRIVATE)
-            .edit()
-            .putFloat(KEY_FONT_SIZE, currentFontSize)
-            .apply();
-    }
-
     @Override
     protected void onDestroy() {
         super.onDestroy();
@@ -229,64 +149,6 @@ protected void onDestroy() {
         terminalSession = null;
     }
 
-    private void sendKey(int keyCode) {
-        if (terminalSession != null) {
-            var down = new KeyEvent(ACTION_DOWN, keyCode);
-            var up = new KeyEvent(ACTION_UP, keyCode);
-            terminalView.onKeyDown(keyCode, down);
-            terminalView.onKeyUp(keyCode, up);
-        }
-    }
-
-    private void sendChar(char ch) {
-        if (terminalSession != null)
-            terminalSession.write(String.valueOf(ch));
-    }
-
-    private void updateToggleButtons() {
-        setToggleStyle(findViewById(R.id.btn_ctrl), ctrlDown);
-        setToggleStyle(findViewById(R.id.btn_alt), altDown);
-    }
-
-    private void setToggleStyle(Button btn, boolean active) {
-        if (btn == null) return;
-        if (active) {
-            btn.setBackgroundColor(getColor(R.color.extra_key_bg_active));
-            btn.setTextColor(getColor(R.color.extra_key_text_active));
-        } else {
-            btn.setBackground(null);
-            btn.setTextColor(getColor(R.color.extra_key_text));
-        }
-    }
-
-    private void setupExtraKeys() {
-        setExtraKeyClick(R.id.btn_esc, v -> sendKey(KEYCODE_ESCAPE));
-        setExtraKeyClick(R.id.btn_slash, v -> sendChar('/'));
-        setExtraKeyClick(R.id.btn_dash, v -> sendChar('-'));
-        setExtraKeyClick(R.id.btn_home, v -> sendKey(KEYCODE_MOVE_HOME));
-        setExtraKeyClick(R.id.btn_up, v -> sendKey(KEYCODE_DPAD_UP));
-        setExtraKeyClick(R.id.btn_end, v -> sendKey(KEYCODE_MOVE_END));
-        setExtraKeyClick(R.id.btn_pgup, v -> sendKey(KEYCODE_PAGE_UP));
-        setExtraKeyClick(R.id.btn_tab, v -> sendKey(KEYCODE_TAB));
-        setExtraKeyClick(R.id.btn_ctrl, v -> {
-            ctrlDown = !ctrlDown;
-            updateToggleButtons();
-        });
-        setExtraKeyClick(R.id.btn_alt, v -> {
-            altDown = !altDown;
-            updateToggleButtons();
-        });
-        setExtraKeyClick(R.id.btn_left, v -> sendKey(KEYCODE_DPAD_LEFT));
-        setExtraKeyClick(R.id.btn_down, v -> sendKey(KEYCODE_DPAD_DOWN));
-        setExtraKeyClick(R.id.btn_right, v -> sendKey(KEYCODE_DPAD_RIGHT));
-        setExtraKeyClick(R.id.btn_pgdn, v -> sendKey(KEYCODE_PAGE_DOWN));
-    }
-
-    private void setExtraKeyClick(int id, View.OnClickListener listener) {
-        findViewById(id).setOnClickListener(v -> {
-            v.performHapticFeedback(KEYBOARD_TAP);
-            listener.onClick(v);
-        });
     }
 
     private void saveLogToFile() {
diff --git a/app/src/main/res/layout/activity_agent_operation.xml b/app/src/main/res/layout/activity_agent_operation.xml
index 174f81666..be93c7329 100644
--- a/app/src/main/res/layout/activity_agent_operation.xml
+++ b/app/src/main/res/layout/activity_agent_operation.xml
@@ -81,10 +81,11 @@
             android:textColor="#FF6B6B" />
     </LinearLayout>
 
-    <com.termux.view.TerminalView
-        android:id="@+id/terminal_view"
+    <cn.classfun.droidvm.lib.ui.termux.TerminalPanelView
+        android:id="@+id/terminal_panel"
         android:layout_width="match_parent"
-        android:layout_height="match_parent"
+        android:layout_height="0dp"
+        android:layout_weight="1"
         android:layout_margin="8dp"
         android:background="@android:color/black" />
 
diff --git a/app/src/main/res/layout/activity_disk_operation.xml b/app/src/main/res/layout/activity_disk_operation.xml
index 6df4e0c1f..dfb75ab5a 100644
--- a/app/src/main/res/layout/activity_disk_operation.xml
+++ b/app/src/main/res/layout/activity_disk_operation.xml
@@ -81,12 +81,12 @@
             android:textColor="#FF6B6B" />
     </LinearLayout>
 
-    <com.termux.view.TerminalView
-        android:id="@+id/terminal_view"
+    <cn.classfun.droidvm.lib.ui.termux.TerminalPanelView
+        android:id="@+id/terminal_panel"
         android:layout_width="match_parent"
-        android:layout_height="match_parent"
+        android:layout_height="0dp"
+        android:layout_weight="1"
         android:layout_margin="8dp"
         android:background="@android:color/black" />
 
 </LinearLayout>
-
diff --git a/app/src/main/res/layout/activity_vm_console.xml b/app/src/main/res/layout/activity_vm_console.xml
index f87ee65d8..aacf4ca2b 100644
--- a/app/src/main/res/layout/activity_vm_console.xml
+++ b/app/src/main/res/layout/activity_vm_console.xml
@@ -16,112 +16,11 @@
         app:navigationIcon="?attr/homeAsUpIndicator"
         app:titleTextColor="@android:color/white" />
 
-    <com.termux.view.TerminalView
-        android:id="@+id/terminal_view"
+    <cn.classfun.droidvm.lib.ui.termux.TerminalPanelView
+        android:id="@+id/terminal_panel"
         android:layout_width="match_parent"
         android:layout_height="0dp"
         android:layout_weight="1"
         android:background="@android:color/black" />
 
-    <LinearLayout
-        android:id="@+id/extra_keys_row1"
-        android:layout_width="match_parent"
-        android:layout_height="40dp"
-        android:background="@color/extra_keys_background"
-        android:orientation="horizontal">
-
-        <Button
-            android:id="@+id/btn_esc"
-            style="@style/ExtraKey"
-            android:text="@string/key_esc"
-            tools:ignore="TouchTargetSizeCheck" />
-
-        <Button
-            android:id="@+id/btn_slash"
-            style="@style/ExtraKey"
-            android:text="@string/key_slash"
-            tools:ignore="TouchTargetSizeCheck" />
-
-        <Button
-            android:id="@+id/btn_dash"
-            style="@style/ExtraKey"
-            android:text="@string/key_dash"
-            tools:ignore="TouchTargetSizeCheck" />
-
-        <Button
-            android:id="@+id/btn_home"
-            style="@style/ExtraKey"
-            android:text="@string/key_home"
-            tools:ignore="TouchTargetSizeCheck" />
-
-        <Button
-            android:id="@+id/btn_up"
-            style="@style/ExtraKey"
-            android:text="@string/key_up"
-            tools:ignore="TouchTargetSizeCheck" />
-
-        <Button
-            android:id="@+id/btn_end"
-            style="@style/ExtraKey"
-            android:text="@string/key_end"
-            tools:ignore="TouchTargetSizeCheck" />
-
-        <Button
-            android:id="@+id/btn_pgup"
-            style="@style/ExtraKey"
-            android:text="@string/key_pgup"
-            tools:ignore="TouchTargetSizeCheck" />
-    </LinearLayout>
-
-    <LinearLayout
-        android:id="@+id/extra_keys_row2"
-        android:layout_width="match_parent"
-        android:layout_height="40dp"
-        android:background="@color/extra_keys_background"
-        android:orientation="horizontal">
-
-        <Button
-            android:id="@+id/btn_tab"
-            style="@style/ExtraKey"
-            android:text="@string/key_tab"
-            tools:ignore="TouchTargetSizeCheck" />
-
-        <Button
-            android:id="@+id/btn_ctrl"
-            style="@style/ExtraKey"
-            android:text="@string/key_ctrl"
-            tools:ignore="TouchTargetSizeCheck" />
-
-        <Button
-            android:id="@+id/btn_alt"
-            style="@style/ExtraKey"
-            android:text="@string/key_alt"
-            tools:ignore="TouchTargetSizeCheck" />
-
-        <Button
-            android:id="@+id/btn_left"
-            style="@style/ExtraKey"
-            android:text="@string/key_left"
-            tools:ignore="TouchTargetSizeCheck" />
-
-        <Button
-            android:id="@+id/btn_down"
-            style="@style/ExtraKey"
-            android:text="@string/key_down"
-            tools:ignore="TouchTargetSizeCheck" />
-
-        <Button
-            android:id="@+id/btn_right"
-            style="@style/ExtraKey"
-            android:text="@string/key_right"
-            tools:ignore="TouchTargetSizeCheck" />
-
-        <Button
-            android:id="@+id/btn_pgdn"
-            style="@style/ExtraKey"
-            android:text="@string/key_pgdn"
-            tools:ignore="TouchTargetSizeCheck" />
-    </LinearLayout>
-
 </LinearLayout>
-
diff --git a/app/src/main/res/layout/view_terminal_panel.xml b/app/src/main/res/layout/view_terminal_panel.xml
new file mode 100644
index 000000000..3909e49b9
--- /dev/null
+++ b/app/src/main/res/layout/view_terminal_panel.xml
@@ -0,0 +1,114 @@
+<?xml version="1.0" encoding="utf-8"?>
+<merge xmlns:android="http://schemas.android.com/apk/res/android"
+    xmlns:tools="http://schemas.android.com/tools">
+
+    <com.termux.view.TerminalView
+        android:id="@+id/terminal_view"
+        android:layout_width="match_parent"
+        android:layout_height="0dp"
+        android:layout_weight="1"
+        android:background="@android:color/black" />
+
+    <LinearLayout
+        android:id="@+id/extra_keys_row1"
+        android:layout_width="match_parent"
+        android:layout_height="40dp"
+        android:background="@color/extra_keys_background"
+        android:orientation="horizontal"
+        android:visibility="gone">
+
+        <Button
+            android:id="@+id/btn_esc"
+            style="@style/ExtraKey"
+            android:text="@string/key_esc"
+            tools:ignore="TouchTargetSizeCheck" />
+
+        <Button
+            android:id="@+id/btn_slash"
+            style="@style/ExtraKey"
+            android:text="@string/key_slash"
+            tools:ignore="TouchTargetSizeCheck" />
+
+        <Button
+            android:id="@+id/btn_dash"
+            style="@style/ExtraKey"
+            android:text="@string/key_dash"
+            tools:ignore="TouchTargetSizeCheck" />
+
+        <Button
+            android:id="@+id/btn_home"
+            style="@style/ExtraKey"
+            android:text="@string/key_home"
+            tools:ignore="TouchTargetSizeCheck" />
+
+        <Button
+            android:id="@+id/btn_up"
+            style="@style/ExtraKey"
+            android:text="@string/key_up"
+            tools:ignore="TouchTargetSizeCheck" />
+
+        <Button
+            android:id="@+id/btn_end"
+            style="@style/ExtraKey"
+            android:text="@string/key_end"
+            tools:ignore="TouchTargetSizeCheck" />
+
+        <Button
+            android:id="@+id/btn_pgup"
+            style="@style/ExtraKey"
+            android:text="@string/key_pgup"
+            tools:ignore="TouchTargetSizeCheck" />
+    </LinearLayout>
+
+    <LinearLayout
+        android:id="@+id/extra_keys_row2"
+        android:layout_width="match_parent"
+        android:layout_height="40dp"
+        android:background="@color/extra_keys_background"
+        android:orientation="horizontal"
+        android:visibility="gone">
+
+        <Button
+            android:id="@+id/btn_tab"
+            style="@style/ExtraKey"
+            android:text="@string/key_tab"
+            tools:ignore="TouchTargetSizeCheck" />
+
+        <Button
+            android:id="@+id/btn_ctrl"
+            style="@style/ExtraKey"
+            android:text="@string/key_ctrl"
+            tools:ignore="TouchTargetSizeCheck" />
+
+        <Button
+            android:id="@+id/btn_alt"
+            style="@style/ExtraKey"
+            android:text="@string/key_alt"
+            tools:ignore="TouchTargetSizeCheck" />
+
+        <Button
+            android:id="@+id/btn_left"
+            style="@style/ExtraKey"
+            android:text="@string/key_left"
+            tools:ignore="TouchTargetSizeCheck" />
+
+        <Button
+            android:id="@+id/btn_down"
+            style="@style/ExtraKey"
+            android:text="@string/key_down"
+            tools:ignore="TouchTargetSizeCheck" />
+
+        <Button
+            android:id="@+id/btn_right"
+            style="@style/ExtraKey"
+            android:text="@string/key_right"
+            tools:ignore="TouchTargetSizeCheck" />
+
+        <Button
+            android:id="@+id/btn_pgdn"
+            style="@style/ExtraKey"
+            android:text="@string/key_pgdn"
+            tools:ignore="TouchTargetSizeCheck" />
+    </LinearLayout>
+
+</merge>
diff --git a/app/src/test/java/cn/classfun/droidvm/ui/agent/base/AgentActionQueueTest.java b/app/src/test/java/cn/classfun/droidvm/ui/agent/base/AgentActionQueueTest.java
new file mode 100644
index 000000000..cd3d0fd64
--- /dev/null
+++ b/app/src/test/java/cn/classfun/droidvm/ui/agent/base/AgentActionQueueTest.java
@@ -0,0 +1,87 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+package cn.classfun.droidvm.ui.agent.base;
+
+import static org.junit.Assert.assertEquals;
+import static org.junit.Assert.assertFalse;
+import static org.junit.Assert.assertTrue;
+
+import org.junit.Test;
+
+import java.nio.charset.StandardCharsets;
+
+import cn.classfun.droidvm.lib.store.vm.BootConfig;
+import cn.classfun.droidvm.lib.store.vm.VMBackend;
+import cn.classfun.droidvm.lib.store.vm.VMHypervisor;
+import cn.classfun.droidvm.ui.agent.autogrow.AutoGrowAction;
+import cn.classfun.droidvm.ui.agent.password.PasswordAction;
+
+public final class AgentActionQueueTest {
+    @Test
+    public void encodedPayloadIsSplitBelowTheCanonicalTtyLimit() {
+        var payload = "A".repeat(AgentPayloadChunks.MAX_CHUNK_LENGTH * 3 + 17);
+        var chunks = AgentPayloadChunks.split(payload);
+        var rebuilt = new StringBuilder();
+
+        assertEquals(4, chunks.size());
+        for (var chunk : chunks) {
+            assertTrue(chunk.length() <= AgentPayloadChunks.MAX_CHUNK_LENGTH);
+            rebuilt.append(chunk);
+        }
+        assertEquals(payload, rebuilt.toString());
+    }
+
+    @Test
+    public void operationConsoleIsSelectedByOperationOwner() {
+        var vm = new AgentVM(VMBackend.CROSVM, VMHypervisor.AUTO);
+        vm.setOperationConsole("serial1", "/dev/ttyS0");
+
+        assertEquals("serial1", vm.getOperationConsoleStream());
+        assertEquals("/dev/ttyS0", vm.getOperationConsoleDevice());
+        assertEquals("console=ttyS0 rdinit=/bin/sh panic=-1",
+            BootConfig.of(vm.buildVM()).getCmdline());
+    }
+
+    @Test
+    public void actionsKeepInsertionOrderAndBuildOneShellScript() throws Exception {
+        var vm = new AgentVM(VMBackend.QEMU, VMHypervisor.SOFT);
+        var password = new PasswordAction(vm);
+        password.setPassword("quote-'-$-password");
+        password.setChangeNormalUsers(true);
+        new AutoGrowAction(vm);
+
+        assertEquals(2, vm.getActions().size());
+        assertEquals("chpasswd", vm.getActions().get(0).getType());
+        assertEquals("autogrow", vm.getActions().get(1).getType());
+
+        var actions = BaseAction.createActions(vm);
+        var script = BaseAction.buildRescueScript(actions);
+        assertTrue(script.indexOf("ACTION_TYPE=chpasswd")
+            < script.indexOf("ACTION_TYPE=autogrow"));
+        assertEquals(1, occurrences(script, "marker RESULT:OK"));
+        assertTrue(script.contains("busybox chroot /mnt /usr/bin/passwd"));
+        assertTrue(script.contains("mount -t proc proc /mnt/proc"));
+        assertFalse(script.contains("passwd --root"));
+        assertTrue(script.contains("COMMAND:RC:PASSWD"));
+        assertTrue(script.contains("COMMAND:RC:RESIZE2FS"));
+        assertFalse(script.contains("quote-'-$-password"));
+
+        var shell = new ProcessBuilder("sh", "-n").start();
+        shell.getOutputStream().write(script.getBytes(StandardCharsets.UTF_8));
+        shell.getOutputStream().close();
+        assertEquals(new String(shell.getErrorStream().readAllBytes(), StandardCharsets.UTF_8),
+            0, shell.waitFor());
+
+        for (var action : actions) action.clearSecrets();
+        assertFalse(vm.getActions().get(0).hasParam("password"));
+    }
+
+    private static int occurrences(String value, String needle) {
+        int count = 0;
+        int offset = 0;
+        while ((offset = value.indexOf(needle, offset)) >= 0) {
+            count++;
+            offset += needle.length();
+        }
+        return count;
+    }
+}

From ab496b2c7c52d6ad37c54bc539ba8ddc102b1dda Mon Sep 17 00:00:00 2001
From: HuJK <gh@hujk.org>
Date: Sun, 30 Aug 2026 13:37:13 +0800
Subject: [PATCH 135/182] cpu: a vCPU placement plan -- affinity, capacity and
 cluster, picked in the editor

Scheduling a VM's vCPUs onto a big.LITTLE phone by hand is the difference
between a desktop that responds and one that does not, and crosvm already
takes --cpu-affinity, --cpu-capacity and --cpu-cluster for it. What was missing
was a way to say what you wanted. CpuPlacementPlan holds the answer -- per-vCPU
core sets, capacities and clusters -- validates it, and turns it into those
three arguments; the editor picks it with a core picker rather than a text
field that accepts anything.

The GPU worker cpuset comes with it, because it is the same kind of setting
made of the same host cores, and because what depends on it comes later: the
cgroup path is created before crosvm starts, since crosvm opens <cgroup>/tasks
itself and a path that appears afterwards is a path it never saw.

Co-authored-by: lateautumn233 <lateautumn233@foxmail.com>
---
 .../vm/backend/CrosvmBackendInstance.java     |  84 +++
 .../lib/store/vm/CpuPlacementDraft.java       |  50 ++
 .../lib/store/vm/CpuPlacementPlan.java        | 411 +++++++++++++
 .../classfun/droidvm/lib/utils/CpuUtils.java  |  66 ++-
 .../main/settings/MainSettingsFragment.java   |  77 +--
 .../ui/vm/edit/basic/VMCpuAffinityDialog.java | 548 ++++++++++++++++++
 .../droidvm/ui/widgets/row/TextRowWidget.java |  41 +-
 .../ui/widgets/tools/CpuCorePickerDialog.java | 141 +++++
 .../res/layout/dialog_vm_cpu_affinity.xml     | 183 ++++++
 .../main/res/layout/partial_vm_edit_basic.xml |   5 +
 app/src/main/res/layout/widget_text_row.xml   |   9 +-
 .../lib/store/vm/CpuPlacementPlanTest.java    | 284 +++++++++
 12 files changed, 1814 insertions(+), 85 deletions(-)
 create mode 100644 app/src/main/java/cn/classfun/droidvm/lib/store/vm/CpuPlacementDraft.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/lib/store/vm/CpuPlacementPlan.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/ui/vm/edit/basic/VMCpuAffinityDialog.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/ui/widgets/tools/CpuCorePickerDialog.java
 create mode 100644 app/src/main/res/layout/dialog_vm_cpu_affinity.xml
 create mode 100644 app/src/test/java/cn/classfun/droidvm/lib/store/vm/CpuPlacementPlanTest.java

diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/CrosvmBackendInstance.java b/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/CrosvmBackendInstance.java
index b356f9c71..1de290898 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/CrosvmBackendInstance.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/CrosvmBackendInstance.java
@@ -41,6 +41,7 @@
 import cn.classfun.droidvm.lib.store.base.DataItem;
 import cn.classfun.droidvm.lib.store.disk.DiskBus;
 import cn.classfun.droidvm.lib.store.vm.DisplayBackend;
+import cn.classfun.droidvm.lib.store.vm.CpuPlacementPlan;
 import cn.classfun.droidvm.lib.store.vm.GpuApi;
 import cn.classfun.droidvm.lib.store.vm.GpuBackend;
 import cn.classfun.droidvm.lib.store.vm.LendMthpMode;
@@ -58,6 +59,8 @@ public final class CrosvmBackendInstance extends VMBackendInstance {
     private static final String RUN_PATH = pathJoin(DATA_DIR, "run");
     private SerialPipe uart = null;
     private String controlSocketPath = null;
+    /** Set by prepareGpuCgroup() once the cpuset exists and holds cores; else null. */
+    private String gpuCgroupPath = null;
     /** Owns the per-VM native-display input sockets (crosvm-facing + UI-facing); see start(). */
     private final NativeDisplayInputBridge inputBridge = new NativeDisplayInputBridge();
     private final FDPipeConsoleStream uartStream;
@@ -112,6 +115,9 @@ public VMStartResult start() {
                 }
             }
         }
+        // Must happen before buildCommand(): crosvm opens <cgroup>/tasks and never
+        // creates the directory, and buildCommand() only passes the flag if this worked.
+        prepareGpuCgroup();
         var args = buildCommand();
         Log.i(TAG, fmt("Executing: %s", String.join(" ", args)));
         try {
@@ -156,6 +162,7 @@ private List<String> buildCommand() {
         args.add(String.valueOf(Math.max(item.optLong("memory_mb", 512), 64)));
         args.add("--cpus");
         args.add(String.valueOf(Math.max(item.optLong("cpu_count", 1), 1)));
+        buildCpuPlacementCommand(args);
         var hyp = item.optString("hypervisor", "auto");
         var hypervisor = VMHypervisor.valueOf(hyp.toUpperCase());
         hypervisor = VMHypervisor.resolveConfigured(VMBackend.CROSVM, hypervisor);
@@ -272,6 +279,83 @@ private static long pflashBlockSize(@NonNull String path) {
         return 262144;
     }
 
+    /**
+     * Creates and configures the gpuworker cpuset cgroup before crosvm starts.
+     * crosvm opens {@code <path>/tasks} without creating the directory; the cpuset
+     * requires non-empty {@code cpus}/{@code mems} before threads can join it.
+     *
+     * <p>Soft-fail: any error is logged and {@link #gpuCgroupPath} stays null so
+     * {@link #buildCpuPlacementCommand} simply omits the flag. Better to run
+     * without GPU thread isolation than to refuse to start the VM.
+     */
+    private void prepareGpuCgroup() {
+        gpuCgroupPath = null;
+        var item = config.item;
+        // The switch and the device both: the threads this cpuset exists to hold are the
+        // virtio-gpu device's workers, so with no device there is nobody to put in it.
+        if (!CpuPlacementPlan.wantsGpuCgroup(item)) return;
+        var path = item.optString(CpuPlacementPlan.KEY_GPU_CGROUP_PATH,
+            CpuPlacementPlan.DEFAULT_GPU_CGROUP_PATH).trim();
+        var cpus = item.optString(CpuPlacementPlan.KEY_GPU_CGROUP_CPUS, "").trim();
+        if (path.isEmpty() || !path.startsWith("/")) {
+            Log.w(TAG, fmt("gpu-cgroup-path is not an absolute path: '%s'; skipping", path));
+            return;
+        }
+        if (cpus.isEmpty()) {
+            Log.w(TAG, "gpu_cgroup_cpus is empty; cannot set up cpuset, skipping");
+            return;
+        }
+        // Parent dir for inheriting cpuset.mems (single NUMA node = "0" on all
+        // Android devices, but copy the parent rather than hard-coding it).
+        var parent = new java.io.File(path).getParent();
+        if (parent == null) parent = "/dev/cpuset";
+        var ep = RunUtils.escapedString(path);
+        var ec = RunUtils.escapedString(cpus);
+        var eq = RunUtils.escapedString(parent);
+        // Shell.cmd feeds the whole string to the persistent root shell; newlines work.
+        // The three paths go in as shell variables, so the body below stays a plain
+        // literal instead of interleaving quoting with concatenation.
+        var script = fmt(
+            "p=%s\n" +
+            "c=%s\n" +
+            "q=%s\n" +
+            "mkdir -p \"$p\" || exit 1\n" +
+            // mems first: some kernels validate cpus against a non-empty mems
+            "for n in mems cpuset.mems; do\n" +
+            "  if [ -e \"$p/$n\" ] && [ ! -s \"$p/$n\" ]; then\n" +
+            "    v=$(cat \"$q/$n\" 2>/dev/null); [ -n \"$v\" ] || v=0\n" +
+            "    echo \"$v\" > \"$p/$n\"\n" +
+            "  fi\n" +
+            "done\n" +
+            // cpuset v1 (noprefix) uses 'cpus'; v2 uses 'cpuset.cpus' -- try both
+            "for n in cpus cpuset.cpus; do\n" +
+            "  if [ -e \"$p/$n\" ]; then echo \"$c\" > \"$p/$n\"; fi\n" +
+            "done\n" +
+            // Last line output verifies the write; also becomes the script exit code
+            "cat \"$p/cpus\" 2>/dev/null || cat \"$p/cpuset.cpus\" 2>/dev/null",
+            ep, ec, eq);
+        var result = RunUtils.run(script);
+        if (!result.isSuccess() || result.getOutString().trim().isEmpty()) {
+            Log.e(TAG, fmt("Failed to set up gpuworker cpuset at %s (cpus=%s): %s",
+                path, cpus, result.getErrString()));
+            return;
+        }
+        Log.i(TAG, fmt("gpuworker cpuset ready: %s (cpus=%s)", path, result.getOutString().trim()));
+        gpuCgroupPath = path;
+    }
+
+    /**
+     * Appends CPU placement flags: per-vCPU host affinity, guest capacity, guest
+     * clusters, and (when the cpuset was successfully prepared) the GPU cgroup.
+     */
+    private void buildCpuPlacementCommand(@NonNull List<String> args) {
+        CpuPlacementPlan.of(config.item).appendArgs(args);
+        if (gpuCgroupPath != null) {
+            args.add("--gpu-cgroup-path");
+            args.add(gpuCgroupPath);
+        }
+    }
+
     private void buildDiskCommand(@NonNull List<String> args) {
         var disks = config.item.opt("disks", null);
         if (disks == null) return;
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/store/vm/CpuPlacementDraft.java b/app/src/main/java/cn/classfun/droidvm/lib/store/vm/CpuPlacementDraft.java
new file mode 100644
index 000000000..15ef0ab82
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/lib/store/vm/CpuPlacementDraft.java
@@ -0,0 +1,50 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
+package cn.classfun.droidvm.lib.store.vm;
+
+import androidx.annotation.NonNull;
+
+import java.util.List;
+import java.util.Map;
+
+/**
+ * A vCPU placement as the editor holds it, before it becomes a
+ * {@link CpuPlacementPlan}: the affinity map, the CPU count it is keyed
+ * against, and the guest topology fields that describe it.
+ *
+ * <p>These five travel together everywhere -- they are one decision seen from
+ * several sides, which {@link CpuPlacementPlan} explains -- so they cross the
+ * editor/dialog boundary as one value instead of five positional arguments.
+ * The affinity map is copied in, so a draft cannot be edited through the map
+ * the caller still holds.
+ */
+public final class CpuPlacementDraft {
+    /** vCPU index to the host cores it may run on; ordered, never null. */
+    @NonNull
+    public final Map<Integer, List<Integer>> affinity;
+    /** The VM's CPU count. Simple mode derives it from the bound host cores. */
+    public final int vcpuCount;
+    /** Derive guest capacity/cluster from the affinity instead of the fields below. */
+    public final boolean auto;
+    /** Hand-written {@code --cpu-capacity}, only meaningful when {@link #auto} is off. */
+    @NonNull
+    public final String manualCapacity;
+    /** Hand-written {@code --cpu-cluster}, only meaningful when {@link #auto} is off. */
+    @NonNull
+    public final String manualClusters;
+
+    public CpuPlacementDraft(
+        @NonNull Map<Integer, List<Integer>> affinity,
+        int vcpuCount,
+        boolean auto,
+        @NonNull String manualCapacity,
+        @NonNull String manualClusters
+    ) {
+        this.affinity = CpuPlacementPlan.orderedCopy(affinity);
+        this.vcpuCount = Math.max(1, vcpuCount);
+        this.auto = auto;
+        this.manualCapacity = manualCapacity;
+        this.manualClusters = manualClusters;
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/store/vm/CpuPlacementPlan.java b/app/src/main/java/cn/classfun/droidvm/lib/store/vm/CpuPlacementPlan.java
new file mode 100644
index 000000000..1fe878312
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/lib/store/vm/CpuPlacementPlan.java
@@ -0,0 +1,411 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
+package cn.classfun.droidvm.lib.store.vm;
+
+import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
+
+import androidx.annotation.NonNull;
+
+import java.util.ArrayList;
+import java.util.Collection;
+import java.util.LinkedHashMap;
+import java.util.List;
+import java.util.Map;
+import java.util.NavigableMap;
+import java.util.TreeMap;
+import java.util.TreeSet;
+
+import cn.classfun.droidvm.lib.store.base.DataItem;
+import cn.classfun.droidvm.lib.utils.CpuUtils;
+
+/**
+ * Where a VM's vCPUs run on the host, and what the guest is told about it.
+ *
+ * <p>The three crosvm flags this resolves are one decision seen from three
+ * sides, not independent knobs:
+ * <ul>
+ *   <li>{@code --cpu-affinity} pins each vCPU thread to host cores.
+ *   <li>{@code --cpu-capacity} writes {@code capacity-dmips-mhz} into the guest
+ *       device tree, so the guest scheduler knows how strong each vCPU is.
+ *   <li>{@code --cpu-cluster} writes the guest {@code cpu-map}, so the guest
+ *       sees the same big/little split as the host.
+ * </ul>
+ * The last two are keyed by <em>guest</em> vCPU index and their correct values
+ * follow from the first plus host topology, which is why {@link #KEY_AUTO}
+ * (default on) derives them and the manual fields only exist as an override.
+ *
+ * <p>Syntax matters here: crosvm's per-vCPU affinity form separates assignments
+ * with {@code ':'} and uses {@code ','} only inside one assignment's host set,
+ * i.e. {@code 0=4,5:1=6} means vCPU0 floats over host cores 4 and 5 while vCPU1
+ * is pinned to core 6. A vCPU absent from the map gets no mask at all.
+ */
+public final class CpuPlacementPlan {
+    public static final String KEY_AFFINITY = "cpu_affinity";
+    public static final String KEY_AUTO = "cpu_topology_auto";
+    public static final String KEY_CAPACITY = "cpu_capacity";
+    public static final String KEY_CLUSTERS = "cpu_clusters";
+    public static final String KEY_GPU_CGROUP = "gpu_cgroup_enabled";
+    public static final String KEY_GPU_CGROUP_PATH = "gpu_cgroup_path";
+    public static final String KEY_GPU_CGROUP_CPUS = "gpu_cgroup_cpus";
+
+    public static final String DEFAULT_GPU_CGROUP_PATH = "/dev/cpuset/gpuworker";
+    /** Separates clusters in the stored {@link #KEY_CLUSTERS} string. */
+    private static final String CLUSTER_SEP = ";";
+
+    /** vCPU index to the host cores it may run on; ascending, never null. */
+    @NonNull
+    public final Map<Integer, List<Integer>> affinity;
+    /** vCPU index to guest-visible capacity; only for vCPUs that have one. */
+    @NonNull
+    public final Map<Integer, Long> capacity;
+    /** Guest cluster membership, each entry a set of vCPU indices. */
+    @NonNull
+    public final List<List<Integer>> clusters;
+
+    private CpuPlacementPlan(
+        @NonNull Map<Integer, List<Integer>> affinity,
+        @NonNull Map<Integer, Long> capacity,
+        @NonNull List<List<Integer>> clusters
+    ) {
+        this.affinity = affinity;
+        this.capacity = capacity;
+        this.clusters = clusters;
+    }
+
+    /**
+     * Resolve a stored config into the placement actually to be applied. An
+     * empty affinity string yields an empty plan: capacity and clusters are
+     * dropped along with it, since without knowing which host core backs a vCPU
+     * there is nothing truthful to tell the guest.
+     */
+    @NonNull
+    public static CpuPlacementPlan of(@NonNull DataItem item) {
+        var affinity = parseAffinity(item.optString(KEY_AFFINITY, ""));
+        if (affinity.isEmpty())
+            return new CpuPlacementPlan(affinity, new TreeMap<>(), new ArrayList<>());
+        if (item.optBoolean(KEY_AUTO, true)) {
+            var cap = deriveCapacity(affinity, CpuUtils.getCores());
+            int vcpuCount = (int) Math.max(item.optLong("cpu_count", 1), 1);
+            return new CpuPlacementPlan(affinity, cap, deriveClusters(cap, vcpuCount));
+        }
+        return new CpuPlacementPlan(
+            affinity,
+            parseCapacity(item.optString(KEY_CAPACITY, "")),
+            parseClusters(item.optString(KEY_CLUSTERS, ""))
+        );
+    }
+
+    /** Appends the crosvm flags for this plan; a no-op when no vCPU is pinned. */
+    public void appendArgs(@NonNull List<String> args) {
+        if (affinity.isEmpty()) return;
+        args.add("--cpu-affinity");
+        args.add(formatAffinity(affinity));
+        if (!capacity.isEmpty()) {
+            args.add("--cpu-capacity");
+            args.add(formatCapacity(capacity));
+        }
+        // One flag per cluster; a lone cluster is what crosvm does by default
+        // anyway, so it is not worth an FDT cpu-map.
+        if (clusters.size() > 1) {
+            for (var cluster : clusters) {
+                if (cluster.isEmpty()) continue;
+                args.add("--cpu-cluster");
+                args.add(CpuUtils.compactRanges(joinCsv(cluster)));
+            }
+        }
+    }
+
+    /**
+     * Whether this VM's GPU worker cpuset should be built and named at all.
+     *
+     * <p>Two conditions, because the switch alone was never the whole question: what
+     * {@code --gpu-cgroup-path} moves into the cpuset is the virtio-gpu device's worker threads,
+     * and a VM without that device has none. Emitting it there handed crosvm a flag with nothing
+     * to put in the group and left a directory on the host that no thread would ever join. The
+     * editor says the same thing in its own way -- the rows live inside the renderer section, so
+     * they grey out with the device -- but the stored switch outlives that, both from a config
+     * written before the device was turned off and from a file edited by hand.</p>
+     */
+    public static boolean wantsGpuCgroup(@NonNull DataItem item) {
+        return item.optBoolean(KEY_GPU_CGROUP, false) && VMScreenConfig.hasGpuDevice(item);
+    }
+
+    // --- affinity ---
+
+    /**
+     * Parse the per-vCPU affinity form. Assignments are {@code ':'}-separated
+     * and each maps one vCPU to a CPUSET; malformed assignments and empty host
+     * sets are dropped. The plain global-CPUSET form crosvm also accepts is not
+     * represented here -- the editor always writes per-vCPU assignments -- so a
+     * hand-written global mask parses to empty and is simply not carried over.
+     */
+    @NonNull
+    public static Map<Integer, List<Integer>> parseAffinity(@NonNull String spec) {
+        var out = new TreeMap<Integer, List<Integer>>();
+        if (spec.trim().isEmpty()) return out;
+        for (var assignment : spec.split(":")) {
+            assignment = assignment.trim();
+            if (assignment.isEmpty()) continue;
+            int eq = assignment.indexOf('=');
+            if (eq <= 0) continue;
+            int vcpu;
+            try {
+                vcpu = Integer.parseInt(assignment.substring(0, eq).trim());
+            } catch (NumberFormatException e) {
+                continue;
+            }
+            if (vcpu < 0) continue;
+            var hosts = CpuUtils.parseCpuSet(assignment.substring(eq + 1));
+            if (hosts.isEmpty()) continue;
+            out.put(vcpu, hosts);
+        }
+        return out;
+    }
+
+    @NonNull
+    public static String formatAffinity(@NonNull Map<Integer, List<Integer>> affinity) {
+        var sb = new StringBuilder();
+        for (var entry : new TreeMap<>(affinity).entrySet()) {
+            if (entry.getValue().isEmpty()) continue;
+            if (sb.length() > 0) sb.append(':');
+            sb.append(entry.getKey()).append('=')
+                .append(CpuUtils.compactRanges(joinCsv(entry.getValue())));
+        }
+        return sb.toString();
+    }
+
+    /**
+     * True when {@code affinity} is exactly what the editor's simple mode can
+     * express: every vCPU below {@code vcpuCount} bound to one host core of its
+     * own, no core shared, and nothing bound past the count. A vCPU floating
+     * over several cores, an unbound vCPU or two vCPUs on one core all need the
+     * per-vCPU editor to be described, and answer false here.
+     */
+    public static boolean isOneToOne(
+        @NonNull Map<Integer, List<Integer>> affinity, int vcpuCount
+    ) {
+        if (vcpuCount <= 0 || affinity.size() != vcpuCount) return false;
+        var hosts = new TreeSet<Integer>();
+        for (int vcpu = 0; vcpu < vcpuCount; vcpu++) {
+            var bound = affinity.get(vcpu);
+            if (bound == null || bound.size() != 1) return false;
+            if (!hosts.add(bound.get(0))) return false;
+        }
+        return true;
+    }
+
+    /**
+     * The 1:1 map over {@code hostCores}: lowest core index becomes vCPU 0, the
+     * next vCPU 1, and so on. Inverse of {@link #oneToOneHosts}.
+     */
+    @NonNull
+    public static Map<Integer, List<Integer>> oneToOne(@NonNull Collection<Integer> hostCores) {
+        var out = new TreeMap<Integer, List<Integer>>();
+        int vcpu = 0;
+        for (var host : new TreeSet<>(hostCores))
+            out.put(vcpu++, new ArrayList<>(List.of(host)));
+        return out;
+    }
+
+    /**
+     * The host cores a 1:1 map pins, ascending; empty when the map is not 1:1
+     * over {@code vcpuCount} vCPUs.
+     */
+    @NonNull
+    public static List<Integer> oneToOneHosts(
+        @NonNull Map<Integer, List<Integer>> affinity, int vcpuCount
+    ) {
+        if (!isOneToOne(affinity, vcpuCount)) return new ArrayList<>();
+        var hosts = new TreeSet<Integer>();
+        for (var bound : affinity.values()) hosts.add(bound.get(0));
+        return new ArrayList<>(hosts);
+    }
+
+    /**
+     * The 1:1 selection closest to an arbitrary map, for the advanced-to-simple
+     * switch: each vCPU in turn keeps the lowest core it is bound to that an
+     * earlier vCPU has not already claimed; its remaining cores, and a vCPU left
+     * with nothing to claim, are dropped. Ascending, so the result can be handed
+     * straight to {@link #oneToOne} -- which is why the vCPU a core ends up on
+     * need not be the one it came from.
+     */
+    @NonNull
+    public static List<Integer> flattenToOneToOne(
+        @NonNull Map<Integer, List<Integer>> affinity
+    ) {
+        var taken = new TreeSet<Integer>();
+        for (var entry : new TreeMap<>(affinity).entrySet()) {
+            for (var host : entry.getValue())
+                if (taken.add(host)) break;
+        }
+        return new ArrayList<>(taken);
+    }
+
+    // --- capacity ---
+
+    /** Parse {@code 0=792,6=1024}; unparsable pairs are dropped. */
+    @NonNull
+    public static Map<Integer, Long> parseCapacity(@NonNull String spec) {
+        var out = new TreeMap<Integer, Long>();
+        for (var pair : spec.split(",")) {
+            pair = pair.trim();
+            if (pair.isEmpty()) continue;
+            int eq = pair.indexOf('=');
+            if (eq <= 0) continue;
+            try {
+                var vcpu = Integer.parseInt(pair.substring(0, eq).trim());
+                var cap = Long.parseLong(pair.substring(eq + 1).trim());
+                if (vcpu >= 0 && cap > 0) out.put(vcpu, cap);
+            } catch (NumberFormatException ignored) {
+            }
+        }
+        return out;
+    }
+
+    @NonNull
+    public static String formatCapacity(@NonNull Map<Integer, Long> capacity) {
+        var sb = new StringBuilder();
+        for (var entry : new TreeMap<>(capacity).entrySet()) {
+            if (sb.length() > 0) sb.append(',');
+            sb.append(fmt("%d=%d", entry.getKey(), entry.getValue()));
+        }
+        return sb.toString();
+    }
+
+    /**
+     * Capacity of each pinned vCPU: the weakest host core it can land on. Taking
+     * the minimum rather than the maximum keeps the guest scheduler honest -- a
+     * vCPU floating across a little and a big core can end up on the little one,
+     * and promising the big core's capacity would make the guest over-commit it.
+     */
+    @NonNull
+    public static Map<Integer, Long> deriveCapacity(
+        @NonNull Map<Integer, List<Integer>> affinity,
+        @NonNull List<CpuUtils.CpuCore> cores
+    ) {
+        var byIndex = new TreeMap<Integer, Long>();
+        for (var core : cores) byIndex.put(core.index, core.capacity);
+        var out = new TreeMap<Integer, Long>();
+        for (var entry : affinity.entrySet()) {
+            long min = 0;
+            for (var host : entry.getValue()) {
+                var cap = byIndex.get(host);
+                if (cap == null || cap <= 0) continue;
+                min = min == 0 ? cap : Math.min(min, cap);
+            }
+            if (min > 0) out.put(entry.getKey(), min);
+        }
+        return out;
+    }
+
+    // --- clusters ---
+
+    /** Parse {@code 0-5;6} into one vCPU list per cluster. */
+    @NonNull
+    public static List<List<Integer>> parseClusters(@NonNull String spec) {
+        var out = new ArrayList<List<Integer>>();
+        for (var group : spec.split(CLUSTER_SEP)) {
+            var members = CpuUtils.parseCpuSet(group);
+            if (!members.isEmpty()) out.add(members);
+        }
+        return out;
+    }
+
+    @NonNull
+    public static String formatClusters(@NonNull List<List<Integer>> clusters) {
+        var sb = new StringBuilder();
+        for (var cluster : clusters) {
+            if (cluster.isEmpty()) continue;
+            if (sb.length() > 0) sb.append(CLUSTER_SEP);
+            sb.append(CpuUtils.compactRanges(joinCsv(cluster)));
+        }
+        return sb.toString();
+    }
+
+    /**
+     * The vCPUs sharing each capacity value, weakest capacity first. Both the
+     * cluster split and the UI's capacity summary are views of this grouping.
+     */
+    @NonNull
+    public static NavigableMap<Long, List<Integer>> groupByCapacity(
+        @NonNull Map<Integer, Long> capacity) {
+        var byCapacity = new TreeMap<Long, List<Integer>>();
+        for (var entry : new TreeMap<>(capacity).entrySet()) {
+            byCapacity.computeIfAbsent(entry.getValue(), k -> new ArrayList<>())
+                .add(entry.getKey());
+        }
+        return byCapacity;
+    }
+
+    /**
+     * Group vCPUs of equal capacity into one cluster each, weakest first, which
+     * reproduces the host's big/little split on the guest side.
+     *
+     * <p>Every vCPU below {@code vcpuCount} lands in exactly one cluster: crosvm
+     * builds the guest {@code cpu-map} all-or-nothing, so a vCPU left out of the
+     * cluster list would get no topology placement at all while its siblings do.
+     * An unpinned vCPU floats across every host core, so the weakest cluster is
+     * both the truthful and the conservative home for it.
+     */
+    @NonNull
+    public static List<List<Integer>> deriveClusters(
+        @NonNull Map<Integer, Long> capacity, int vcpuCount) {
+        var byCapacity = groupByCapacity(capacity);
+        if (byCapacity.isEmpty()) return new ArrayList<>();
+        var weakest = byCapacity.firstEntry().getValue();
+        for (int vcpu = 0; vcpu < vcpuCount; vcpu++) {
+            if (!capacity.containsKey(vcpu)) weakest.add(vcpu);
+        }
+        weakest.sort(Integer::compareTo);
+        return new ArrayList<>(byCapacity.values());
+    }
+
+    // --- shared helpers ---
+
+    /** vCPU indices that appear in more than one cluster (crosvm rejects those). */
+    @NonNull
+    public static List<Integer> findClusterOverlaps(@NonNull List<List<Integer>> clusters) {
+        var seen = new TreeSet<Integer>();
+        var dupes = new TreeSet<Integer>();
+        for (var cluster : clusters)
+            for (var vcpu : cluster)
+                if (!seen.add(vcpu)) dupes.add(vcpu);
+        return new ArrayList<>(dupes);
+    }
+
+    /** Host cores shared between a vCPU affinity map and a CPUSET spec. */
+    @NonNull
+    public static List<Integer> findHostOverlaps(
+        @NonNull Map<Integer, List<Integer>> affinity,
+        @NonNull String cpuSet
+    ) {
+        var other = new TreeSet<>(CpuUtils.parseCpuSet(cpuSet));
+        var shared = new TreeSet<Integer>();
+        for (var hosts : affinity.values())
+            for (var host : hosts)
+                if (other.contains(host)) shared.add(host);
+        return new ArrayList<>(shared);
+    }
+
+    /** Ordered copy keyed by vCPU, so callers can edit without losing order. */
+    @NonNull
+    public static Map<Integer, List<Integer>> orderedCopy(
+        @NonNull Map<Integer, List<Integer>> affinity
+    ) {
+        var out = new LinkedHashMap<Integer, List<Integer>>();
+        for (var entry : new TreeMap<>(affinity).entrySet())
+            out.put(entry.getKey(), new ArrayList<>(entry.getValue()));
+        return out;
+    }
+
+    @NonNull
+    private static String joinCsv(@NonNull List<Integer> values) {
+        var sb = new StringBuilder();
+        for (var value : values) {
+            if (sb.length() > 0) sb.append(',');
+            sb.append(value);
+        }
+        return sb.toString();
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/utils/CpuUtils.java b/app/src/main/java/cn/classfun/droidvm/lib/utils/CpuUtils.java
index 155a34137..026dc495f 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/utils/CpuUtils.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/utils/CpuUtils.java
@@ -36,12 +36,20 @@ public static final class CpuCore {
         public final long maxFreqKHz; // 0 when unknown
         public final int tier;        // 0 = lowest-freq cluster, ascending
         public final boolean big;     // true when not in the lowest-freq cluster
+        /**
+         * Scheduler capacity on the kernel's 1024-per-biggest-core scale, as
+         * crosvm's {@code --cpu-capacity} wants it. Read from sysfs when the
+         * kernel exports it, otherwise derived from the frequency ratio; 0 only
+         * when neither is available.
+         */
+        public final long capacity;
 
-        CpuCore(int index, long maxFreqKHz, int tier, boolean big) {
+        CpuCore(int index, long maxFreqKHz, int tier, boolean big, long capacity) {
             this.index = index;
             this.maxFreqKHz = maxFreqKHz;
             this.tier = tier;
             this.big = big;
+            this.capacity = capacity;
         }
     }
 
@@ -54,21 +62,34 @@ public static final class CpuCore {
     public static List<CpuCore> getCores() {
         var indices = listCoreIndices();
         var freqs = new long[indices.size()];
+        var caps = new long[indices.size()];
         var distinct = new TreeSet<Long>();
+        long maxFreq = 0;
         for (int i = 0; i < indices.size(); i++) {
             freqs[i] = readMaxFreqKHz(indices.get(i));
+            caps[i] = readCapacity(indices.get(i));
             if (freqs[i] > 0) distinct.add(freqs[i]);
+            maxFreq = Math.max(maxFreq, freqs[i]);
         }
         // Ascending tier index per distinct frequency; unknown (0) stays tier 0.
         var tierOf = new ArrayList<>(distinct);
         var cores = new ArrayList<CpuCore>(indices.size());
         for (int i = 0; i < indices.size(); i++) {
             int tier = freqs[i] > 0 ? tierOf.indexOf(freqs[i]) : 0;
-            cores.add(new CpuCore(indices.get(i), freqs[i], tier, tier > 0));
+            // No cpu_capacity in sysfs (common outside big.LITTLE-aware kernels):
+            // fall back to the frequency ratio against the fastest core, which is
+            // what the arm64 kernel itself does when the DT omits capacities.
+            long cap = caps[i];
+            if (cap <= 0 && freqs[i] > 0 && maxFreq > 0)
+                cap = Math.max(1, Math.round(MAX_CAPACITY * (double) freqs[i] / maxFreq));
+            cores.add(new CpuCore(indices.get(i), freqs[i], tier, tier > 0, cap));
         }
         return cores;
     }
 
+    /** Capacity of the biggest core on the kernel's scale. */
+    public static final long MAX_CAPACITY = 1024;
+
     /** Number of distinct frequency clusters (1 when frequencies are unknown). */
     public static int tierCount(@NonNull List<CpuCore> cores) {
         int max = 0;
@@ -151,19 +172,38 @@ public static String coresCsvToHexMask(@NonNull String csv) {
         return mask.signum() == 0 ? "" : mask.toString(16);
     }
 
+    /**
+     * Parse a crosvm CPUSET spec -- a comma-separated list of indices and
+     * {@code low-high} ranges, e.g. {@code "0,1-3,5"} -- into ascending unique
+     * indices. Unparsable or reversed parts are skipped rather than throwing,
+     * matching the best-effort style of the rest of this class; callers that
+     * need to reject bad input compare the result against the input instead.
+     */
     @NonNull
-    private static List<Integer> parseCsv(@NonNull String csv) {
-        var out = new ArrayList<Integer>();
-        if (csv.isEmpty()) return out;
-        for (var part : csv.split(",")) {
+    public static List<Integer> parseCpuSet(@NonNull String spec) {
+        var set = new TreeSet<Integer>();
+        for (var part : spec.split(",")) {
             part = part.trim();
             if (part.isEmpty()) continue;
+            int dash = part.indexOf('-', 1);
             try {
-                out.add(Integer.parseInt(part));
+                if (dash < 0) {
+                    set.add(Integer.parseInt(part));
+                    continue;
+                }
+                int lo = Integer.parseInt(part.substring(0, dash).trim());
+                int hi = Integer.parseInt(part.substring(dash + 1).trim());
+                if (lo > hi) continue;
+                for (int i = lo; i <= hi; i++) set.add(i);
             } catch (NumberFormatException ignored) {
             }
         }
-        return out;
+        return new ArrayList<>(set);
+    }
+
+    @NonNull
+    private static List<Integer> parseCsv(@NonNull String csv) {
+        return parseCpuSet(csv);
     }
 
     @NonNull
@@ -190,16 +230,20 @@ private static List<Integer> listCoreIndices() {
         return out;
     }
 
+    private static long readCapacity(int index) {
+        return tryReadLong(fmt("%s/cpu%d/cpu_capacity", CPU_ROOT, index));
+    }
+
     private static long readMaxFreqKHz(int index) {
         // cpuinfo_max_freq is the hardware ceiling; scaling_max_freq is the
         // policy ceiling (usually equal). Try the direct read first, then a
         // root-backed read, before giving up on this core.
-        long v = tryReadFreq(fmt("%s/cpu%d/cpufreq/cpuinfo_max_freq", CPU_ROOT, index));
+        long v = tryReadLong(fmt("%s/cpu%d/cpufreq/cpuinfo_max_freq", CPU_ROOT, index));
         if (v > 0) return v;
-        return tryReadFreq(fmt("%s/cpu%d/cpufreq/scaling_max_freq", CPU_ROOT, index));
+        return tryReadLong(fmt("%s/cpu%d/cpufreq/scaling_max_freq", CPU_ROOT, index));
     }
 
-    private static long tryReadFreq(@NonNull String path) {
+    private static long tryReadLong(@NonNull String path) {
         String raw = null;
         try {
             raw = FileUtils.readFile(path);
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/main/settings/MainSettingsFragment.java b/app/src/main/java/cn/classfun/droidvm/ui/main/settings/MainSettingsFragment.java
index 0c283312f..e4ecf85d1 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/main/settings/MainSettingsFragment.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/main/settings/MainSettingsFragment.java
@@ -41,9 +41,7 @@
 import java.text.SimpleDateFormat;
 import java.util.ArrayList;
 import java.util.Date;
-import java.util.HashSet;
 import java.util.Locale;
-import java.util.Set;
 
 import cn.classfun.droidvm.BuildConfig;
 import cn.classfun.droidvm.R;
@@ -70,6 +68,7 @@
 import cn.classfun.droidvm.ui.update.VersionCheck;
 import cn.classfun.droidvm.ui.widgets.row.SwitchRowWidget;
 import cn.classfun.droidvm.ui.widgets.row.TextRowWidget;
+import cn.classfun.droidvm.ui.widgets.tools.CpuCorePickerDialog;
 
 public final class MainSettingsFragment extends MainBaseFragment {
     private static final long DAEMON_REFRESH_INTERVAL_MS = 1000L;
@@ -376,78 +375,16 @@ private void refreshCpuAffinitySummary() {
 
     private void showCpuAffinityDialog() {
         var ctx = requireContext();
-        var cores = CpuUtils.getCores();
-        int tiers = CpuUtils.tierCount(cores);
-        var labels = new String[cores.size()];
-        for (int i = 0; i < cores.size(); i++)
-            labels[i] = cpuCoreLabel(cores.get(i), tiers);
-
         // Saved selection, or the "filter out little cores" default when unset.
         var savedCsv = getQemuImgCpuAffinity(ctx);
-        var selectedIdx = parseCsvToSet(
-            savedCsv.isEmpty() ? CpuUtils.defaultBigCoresCsv() : savedCsv);
-        var checked = new boolean[cores.size()];
-        for (int i = 0; i < cores.size(); i++)
-            checked[i] = selectedIdx.contains(cores.get(i).index);
-
-        var dialog = new MaterialAlertDialogBuilder(ctx)
-            .setTitle(R.string.settings_cpu_affinity_title)
-            .setMultiChoiceItems(labels, checked, (d, which, isChecked) ->
-                checked[which] = isChecked)
-            .setNeutralButton(R.string.settings_cpu_affinity_big_only, null)
-            .setNegativeButton(android.R.string.cancel, null)
-            .setPositiveButton(android.R.string.ok, (d, w) -> {
-                var sb = new StringBuilder();
-                for (int i = 0; i < cores.size(); i++) {
-                    if (!checked[i]) continue;
-                    if (sb.length() > 0) sb.append(',');
-                    sb.append(cores.get(i).index);
-                }
+        CpuCorePickerDialog.show(
+            ctx, R.string.settings_cpu_affinity_title,
+            savedCsv.isEmpty() ? CpuUtils.defaultBigCoresCsv() : savedCsv,
+            picked -> {
                 ctx.getSharedPreferences(PREFS_NAME, Context.MODE_PRIVATE)
-                    .edit().putString(KEY_QEMU_IMG_CPU_AFFINITY, sb.toString()).apply();
+                    .edit().putString(KEY_QEMU_IMG_CPU_AFFINITY, picked).apply();
                 refreshCpuAffinitySummary();
-            })
-            .create();
-        dialog.show();
-        // Re-check only the big cores without dismissing the dialog.
-        dialog.getButton(android.app.AlertDialog.BUTTON_NEUTRAL).setOnClickListener(v -> {
-            var bigIdx = parseCsvToSet(CpuUtils.defaultBigCoresCsv());
-            var list = dialog.getListView();
-            for (int i = 0; i < cores.size(); i++) {
-                checked[i] = bigIdx.contains(cores.get(i).index);
-                list.setItemChecked(i, checked[i]);
-            }
-        });
-    }
-
-    @NonNull
-    private String cpuCoreLabel(@NonNull CpuUtils.CpuCore core, int tiers) {
-        var freq = CpuUtils.formatFreq(core.maxFreqKHz);
-        int tierRes;
-        if (tiers <= 1) tierRes = 0;
-        else if (core.tier == 0) tierRes = R.string.settings_cpu_affinity_tier_little;
-        else if (tiers >= 3 && core.tier == tiers - 1)
-            tierRes = R.string.settings_cpu_affinity_tier_prime;
-        else tierRes = R.string.settings_cpu_affinity_tier_big;
-        var sb = new StringBuilder(fmt("CPU%d", core.index));
-        if (!freq.isEmpty()) sb.append("    ").append(freq);
-        if (tierRes != 0) sb.append("    ").append(getString(tierRes));
-        return sb.toString();
-    }
-
-    @NonNull
-    private static Set<Integer> parseCsvToSet(@NonNull String csv) {
-        var set = new HashSet<Integer>();
-        if (csv.isEmpty()) return set;
-        for (var part : csv.split(",")) {
-            part = part.trim();
-            if (part.isEmpty()) continue;
-            try {
-                set.add(Integer.parseInt(part));
-            } catch (NumberFormatException ignored) {
-            }
-        }
-        return set;
+            });
     }
 
     private void showLicenseDialog() {
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/basic/VMCpuAffinityDialog.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/basic/VMCpuAffinityDialog.java
new file mode 100644
index 000000000..a9c73d2eb
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/basic/VMCpuAffinityDialog.java
@@ -0,0 +1,548 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
+package cn.classfun.droidvm.ui.vm.edit.basic;
+
+import static android.view.View.GONE;
+import static android.view.View.VISIBLE;
+import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
+import static cn.classfun.droidvm.lib.utils.StringUtils.getEditText;
+import static cn.classfun.droidvm.lib.utils.StringUtils.joinNonEmpty;
+
+import android.content.Context;
+import android.view.LayoutInflater;
+import android.view.View;
+import android.widget.CheckBox;
+import android.widget.LinearLayout;
+
+import androidx.annotation.NonNull;
+import androidx.annotation.Nullable;
+import androidx.appcompat.app.AlertDialog;
+
+import com.google.android.material.dialog.MaterialAlertDialogBuilder;
+import com.google.android.material.textfield.TextInputEditText;
+
+import java.util.ArrayList;
+import java.util.Collection;
+import java.util.List;
+import java.util.Map;
+import java.util.TreeMap;
+import java.util.TreeSet;
+
+import cn.classfun.droidvm.R;
+import cn.classfun.droidvm.lib.store.vm.CpuPlacementDraft;
+import cn.classfun.droidvm.lib.store.vm.CpuPlacementPlan;
+import cn.classfun.droidvm.lib.utils.CpuUtils;
+import cn.classfun.droidvm.ui.widgets.row.SwitchRowWidget;
+import cn.classfun.droidvm.ui.widgets.row.TextRowWidget;
+import cn.classfun.droidvm.ui.widgets.tools.CpuCorePickerDialog;
+
+/**
+ * Editor for where a VM's vCPUs run, and for the derived-or-manual guest
+ * capacity/cluster values that describe that placement to the guest.
+ *
+ * <p>Two modes over the same stored fields. Simple mode is one checkbox per
+ * host core: a checked core gets a vCPU of its own and the VM's CPU count is
+ * whatever the checked list adds up to -- which is the placement almost every
+ * VM wants and the only one whose CPU count cannot end up disagreeing with the
+ * bindings. Advanced mode is the per-vCPU editor: one row per vCPU, each
+ * picking any set of host cores, plus the topology section.
+ *
+ * <p>The mode is not stored. Which one opens is read back off the stored
+ * placement ({@link CpuPlacementPlan#isOneToOne}): simple mode can only say
+ * "one vCPU per host core", so anything it cannot express -- a vCPU floating
+ * over several cores, an unbound vCPU, hand-written capacity/cluster values --
+ * opens in advanced mode rather than being silently rewritten. Going the other
+ * way is lossy by construction, so it asks first.
+ *
+ * <p>It hangs off the CPU count field's icon button rather than sitting inline
+ * in the tab, because the row list is a function of that count: opening the
+ * dialog reads the count once, so the rows can never disagree with it. (The
+ * inline version had to rebuild on focus-loss, which a user could sidestep.)
+ *
+ * <p>Edits apply on OK only -- the working state is a copy, so Cancel is a real
+ * cancel.
+ */
+public final class VMCpuAffinityDialog {
+    /** Receives the accepted state; nothing is called on cancel. */
+    public interface Callback {
+        /**
+         * @param draft the placement as edited. Its {@code vcpuCount} is the CPU
+         *              count the field should now hold: simple mode derives it
+         *              from the checked cores, every other path hands back the
+         *              count the dialog was opened with.
+         */
+        void onAccepted(@NonNull CpuPlacementDraft draft);
+    }
+
+    private final Context context;
+    private final List<CpuUtils.CpuCore> hostCores;
+    /** Distinct host frequency tiers; 1 means little/big says nothing here. */
+    private final int hostTiers;
+    /** Working copy; the caller's map is untouched until OK. */
+    private final Map<Integer, List<Integer>> affinity;
+    private final Callback callback;
+
+    /** The count the CPU field held on open; restored when nothing is pinned. */
+    private final int initialVcpuCount;
+    /** Working count: simple mode derives it from the checked host cores. */
+    private int vcpuCount;
+    /** Checked host cores in simple mode, ascending; one vCPU each. */
+    private final TreeSet<Integer> simpleHosts = new TreeSet<>();
+    private boolean advanced;
+
+    private final SwitchRowWidget swAffinity;
+    private final View affinityOptions;
+    private final SwitchRowWidget swAdvanced;
+    private final View simpleSection;
+    private final TextRowWidget rowSimpleSummary;
+    private final LinearLayout coreRowsContainer;
+    private final View advancedSection;
+    private final LinearLayout rowsContainer;
+    private final SwitchRowWidget swAuto;
+    private final View autoPreview;
+    private final View manualInputs;
+    private final TextRowWidget rowCapacityPreview;
+    private final TextRowWidget rowClusterPreview;
+    private final TextInputEditText etCapacity;
+    private final TextInputEditText etClusters;
+
+    private AlertDialog dialog;
+    private int builtVcpuCount = -1;
+    /** Set while code, not the user, moves a switch or checkbox. */
+    private boolean updatingChecks;
+
+    public VMCpuAffinityDialog(
+        @NonNull Context context,
+        @NonNull CpuPlacementDraft draft,
+        @NonNull Callback callback
+    ) {
+        this.context = context;
+        this.initialVcpuCount = draft.vcpuCount;
+        this.vcpuCount = this.initialVcpuCount;
+        this.hostCores = CpuUtils.getCores();
+        this.hostTiers = CpuUtils.tierCount(this.hostCores);
+        this.affinity = CpuPlacementPlan.orderedCopy(draft.affinity);
+        this.callback = callback;
+
+        var view = LayoutInflater.from(context)
+            .inflate(R.layout.dialog_vm_cpu_affinity, null);
+        swAffinity = view.findViewById(R.id.sw_cpu_affinity);
+        affinityOptions = view.findViewById(R.id.cpu_affinity_options);
+        swAdvanced = view.findViewById(R.id.sw_cpu_affinity_advanced);
+        simpleSection = view.findViewById(R.id.cpu_affinity_simple);
+        rowSimpleSummary = view.findViewById(R.id.row_cpu_affinity_simple_summary);
+        coreRowsContainer = view.findViewById(R.id.host_core_rows_container);
+        advancedSection = view.findViewById(R.id.cpu_affinity_advanced);
+        rowsContainer = view.findViewById(R.id.vcpu_rows_container);
+        swAuto = view.findViewById(R.id.sw_cpu_topology_auto);
+        autoPreview = view.findViewById(R.id.cpu_topology_auto_preview);
+        manualInputs = view.findViewById(R.id.cpu_topology_manual);
+        rowCapacityPreview = view.findViewById(R.id.row_cpu_capacity_preview);
+        rowClusterPreview = view.findViewById(R.id.row_cpu_cluster_preview);
+        etCapacity = view.findViewById(R.id.et_cpu_capacity);
+        etClusters = view.findViewById(R.id.et_cpu_clusters);
+
+        // Drop bindings for vCPUs that no longer exist (count lowered since last edit).
+        this.affinity.keySet().removeIf(vcpu -> vcpu >= this.vcpuCount);
+        advanced = !simpleFits(draft.auto);
+        if (!advanced)
+            simpleHosts.addAll(CpuPlacementPlan.oneToOneHosts(this.affinity, this.vcpuCount));
+
+        swAffinity.setChecked(!this.affinity.isEmpty());
+        swAdvanced.setChecked(advanced);
+        swAuto.setChecked(draft.auto);
+        etCapacity.setText(draft.manualCapacity);
+        etClusters.setText(draft.manualClusters);
+        buildCoreRows();
+
+        swAffinity.setOnCheckedChangeListener(() -> {
+            if (swAffinity.isChecked()) prefillIfEmpty();
+            updateVisibility();
+        });
+        swAdvanced.setOnCheckedChangeListener(() -> {
+            if (updatingChecks) return;
+            if (swAdvanced.isChecked()) enterAdvanced();
+            else leaveAdvanced();
+        });
+        swAuto.setOnCheckedChangeListener(() -> {
+            if (updatingChecks) return;
+            // Going manual with empty fields: seed them with what auto produced, so
+            // the user edits a working baseline instead of reconstructing it by hand.
+            if (!swAuto.isChecked()) seedManualIfEmpty();
+            updateVisibility();
+        });
+        updateVisibility();
+
+        dialog = new MaterialAlertDialogBuilder(context)
+            .setTitle(R.string.create_vm_cpu_affinity_title)
+            .setView(view)
+            .setPositiveButton(android.R.string.ok, (d, w) -> accept())
+            .setNegativeButton(android.R.string.cancel, null)
+            .create();
+        dialog.show();
+        updateOkEnabled();
+    }
+
+    private void accept() {
+        boolean on = swAffinity.isChecked();
+        Map<Integer, List<Integer>> result;
+        if (!on) result = new TreeMap<>();
+        else if (advanced) result = affinity;
+        else result = CpuPlacementPlan.oneToOne(simpleHosts);
+        callback.onAccepted(new CpuPlacementDraft(
+            result,
+            on ? vcpuCount : initialVcpuCount,
+            // Simple mode hides the topology section, so it can only mean auto:
+            // reporting a stale manual override it never showed would be a lie.
+            !advanced || swAuto.isChecked(),
+            getEditText(etCapacity).trim(),
+            getEditText(etClusters).trim()));
+    }
+
+    // --- mode ---
+
+    /**
+     * Whether the working placement is one simple mode can express without
+     * losing anything: a 1:1 binding onto cores this device actually has, with
+     * the guest topology left to auto. Nothing pinned qualifies too -- with an
+     * empty affinity the capacity/cluster values are dropped anyway.
+     */
+    private boolean simpleFits(boolean auto) {
+        if (affinity.isEmpty()) return true;
+        if (!auto) return false;
+        var hosts = CpuPlacementPlan.oneToOneHosts(affinity, vcpuCount);
+        if (hosts.isEmpty()) return false;
+        return CpuCorePickerDialog.hostCoreIndices(hostCores).containsAll(hosts);
+    }
+
+    /** Simple -> advanced: the checked cores become the 1:1 map to edit. */
+    private void enterAdvanced() {
+        advanced = true;
+        if (!simpleHosts.isEmpty()) {
+            affinity.clear();
+            affinity.putAll(CpuPlacementPlan.oneToOne(simpleHosts));
+            builtVcpuCount = -1;
+        }
+        updateVisibility();
+    }
+
+    /**
+     * Advanced -> simple. A map simple mode cannot express has to be flattened,
+     * which throws away bindings the user typed, so that path confirms first --
+     * and says what will be left, since "one vCPU per core" can also change the
+     * VM's CPU count.
+     */
+    private void leaveAdvanced() {
+        if (simpleFits(swAuto.isChecked())) {
+            applySimple(CpuPlacementPlan.oneToOneHosts(affinity, vcpuCount), false);
+            return;
+        }
+        var hosts = CpuPlacementPlan.flattenToOneToOne(affinity);
+        new MaterialAlertDialogBuilder(context)
+            .setTitle(R.string.create_vm_cpu_affinity_discard_title)
+            .setMessage(context.getString(
+                R.string.create_vm_cpu_affinity_discard_message,
+                hosts.size(), CpuUtils.compactRanges(joinCsv(hosts))))
+            .setPositiveButton(android.R.string.ok, (d, w) -> applySimple(hosts, true))
+            .setNegativeButton(android.R.string.cancel, (d, w) -> restoreAdvancedSwitch())
+            .setOnCancelListener(d -> restoreAdvancedSwitch())
+            .show();
+    }
+
+    private void applySimple(@NonNull List<Integer> hosts, boolean dropTopology) {
+        advanced = false;
+        simpleHosts.clear();
+        simpleHosts.addAll(hosts);
+        syncSimpleCount();
+        if (dropTopology) {
+            // The confirmation said these are gone; leaving them in the fields
+            // would resurrect them on the next trip back to advanced mode.
+            updatingChecks = true;
+            swAuto.setChecked(true);
+            updatingChecks = false;
+            etCapacity.setText("");
+            etClusters.setText("");
+        }
+        updateVisibility();
+    }
+
+    private void restoreAdvancedSwitch() {
+        updatingChecks = true;
+        swAdvanced.setChecked(true);
+        updatingChecks = false;
+    }
+
+    /**
+     * First enable with nothing bound. Either mode starts from the identity
+     * (vCPU i -> host i), the mapping whose derived capacity/cluster mirror the
+     * host exactly; simple mode checks as many cores as the CPU count asks for,
+     * so turning the switch on does not change the count by itself.
+     */
+    private void prefillIfEmpty() {
+        if (advanced) {
+            if (affinity.isEmpty()) prefillIdentity();
+            return;
+        }
+        if (!simpleHosts.isEmpty()) return;
+        int count = Math.min(vcpuCount, hostCores.size());
+        for (int i = 0; i < count; i++) simpleHosts.add(hostCores.get(i).index);
+        syncSimpleCount();
+    }
+
+    /** In simple mode the CPU count is the checked list's length, nothing else. */
+    private void syncSimpleCount() {
+        if (!simpleHosts.isEmpty()) vcpuCount = simpleHosts.size();
+    }
+
+    private void updateVisibility() {
+        boolean on = swAffinity.isChecked();
+        affinityOptions.setVisibility(on ? VISIBLE : GONE);
+        simpleSection.setVisibility(advanced ? GONE : VISIBLE);
+        advancedSection.setVisibility(advanced ? VISIBLE : GONE);
+        boolean auto = swAuto.isChecked();
+        autoPreview.setVisibility(auto ? VISIBLE : GONE);
+        manualInputs.setVisibility(auto ? GONE : VISIBLE);
+        if (on) {
+            if (advanced) rebuildRows();
+            else refreshCoreRows();
+        }
+        updateOkEnabled();
+    }
+
+    /** Simple mode with nothing checked asks for a zero-vCPU VM; refuse it. */
+    private void updateOkEnabled() {
+        if (dialog == null) return;
+        var ok = dialog.getButton(AlertDialog.BUTTON_POSITIVE);
+        if (ok == null) return;
+        ok.setEnabled(!(swAffinity.isChecked() && !advanced && simpleHosts.isEmpty()));
+    }
+
+    // --- simple mode ---
+
+    private void buildCoreRows() {
+        coreRowsContainer.removeAllViews();
+        for (var core : hostCores) {
+            var box = new CheckBox(context);
+            box.setOnCheckedChangeListener((b, checked) -> {
+                if (updatingChecks) return;
+                if (checked) simpleHosts.add(core.index);
+                else simpleHosts.remove(core.index);
+                syncSimpleCount();
+                // Unchecking a core renumbers every vCPU after it, so the whole
+                // list is relabelled rather than just the row that was tapped.
+                refreshCoreRows();
+                updateOkEnabled();
+            });
+            coreRowsContainer.addView(box);
+        }
+    }
+
+    /**
+     * Which vCPU a core ends up as is not written on the row: the mapping is
+     * simply the checked cores in order, and the label it would take does not
+     * fit next to the frequency and tier on a phone-width dialog. The count
+     * above the list carries the only part that is not implied by the checkbox.
+     */
+    private void refreshCoreRows() {
+        for (int i = 0; i < hostCores.size(); i++) {
+            var box = (CheckBox) coreRowsContainer.getChildAt(i);
+            if (box == null) continue;
+            var core = hostCores.get(i);
+            boolean checked = simpleHosts.contains(core.index);
+            if (box.isChecked() != checked) {
+                updatingChecks = true;
+                box.setChecked(checked);
+                updatingChecks = false;
+            }
+            box.setText(CpuCorePickerDialog.label(context, core, hostTiers));
+        }
+        rowSimpleSummary.setValue(String.valueOf(simpleHosts.size()));
+        // Only the state that blocks OK gets a subtitle; the rest speaks for itself.
+        rowSimpleSummary.setSubtitle(simpleHosts.isEmpty()
+            ? context.getString(R.string.create_vm_cpu_affinity_simple_empty)
+            : null);
+    }
+
+    // --- advanced mode ---
+
+    private void prefillIdentity() {
+        affinity.clear();
+        int count = Math.min(vcpuCount, hostCores.size());
+        for (int i = 0; i < count; i++)
+            affinity.put(i, new ArrayList<>(List.of(hostCores.get(i).index)));
+    }
+
+    /**
+     * Rows are recreated only when the count changed; otherwise just their values
+     * refresh, so a picker result does not flicker the whole list.
+     */
+    private void rebuildRows() {
+        if (vcpuCount != builtVcpuCount) {
+            builtVcpuCount = vcpuCount;
+            rowsContainer.removeAllViews();
+            for (int i = 0; i < vcpuCount; i++) {
+                final int vcpu = i;
+                var row = new TextRowWidget(context);
+                row.setIcon(R.drawable.ic_cpu);
+                row.setText(context.getString(
+                    R.string.create_vm_cpu_affinity_vcpu_fmt, vcpu));
+                row.setOnClickListener(v -> showCorePicker(vcpu));
+                rowsContainer.addView(row);
+            }
+        }
+        for (int i = 0; i < vcpuCount; i++) {
+            var row = (TextRowWidget) rowsContainer.getChildAt(i);
+            if (row == null) continue;
+            row.setValue(describeBinding(i));
+            row.setSubtitle(describeHosts(i));
+        }
+        refreshPreview();
+    }
+
+    /** {@code "CPU4-6"} for a bound vCPU, or the "not bound" label. */
+    @NonNull
+    private String describeBinding(int vcpu) {
+        var hosts = affinity.get(vcpu);
+        if (hosts == null || hosts.isEmpty())
+            return context.getString(R.string.create_vm_cpu_affinity_unbound);
+        // Ranges keep a wide selection inside the value column's one line, and
+        // match the form the stored flag uses anyway.
+        return fmt("CPU%s", CpuUtils.compactRanges(joinCsv(hosts)));
+    }
+
+    /**
+     * What the binding means for the guest: the weakest core it can land on, since
+     * that is the one {@link CpuPlacementPlan#deriveCapacity} reports. Null (no
+     * subtitle) when unbound or when the host's tiers are unknown.
+     */
+    @Nullable
+    private String describeHosts(int vcpu) {
+        var hosts = affinity.get(vcpu);
+        if (hosts == null || hosts.isEmpty()) return null;
+        var weakest = weakestCore(hosts);
+        if (weakest == null) return null;
+        var count = hosts.size() > 1
+            ? context.getString(R.string.create_vm_cpu_affinity_cores_fmt, hosts.size())
+            : "";
+        var text = joinNonEmpty(CpuCorePickerDialog.LABEL_SEP,
+            count,
+            CpuUtils.formatFreq(weakest.maxFreqKHz),
+            CpuCorePickerDialog.tierLabel(context, weakest, hostTiers));
+        // A single core on a host with no readable frequency has nothing to add;
+        // an empty subtitle would still take a line, so drop it entirely.
+        return text.isEmpty() ? null : text;
+    }
+
+    /**
+     * The lowest-capacity host core among {@code hosts}, mirroring the minimum
+     * {@link CpuPlacementPlan#deriveCapacity} takes. Null when none of them exists
+     * on this host, which a config carried over from another device can do.
+     */
+    @Nullable
+    private CpuUtils.CpuCore weakestCore(@NonNull List<Integer> hosts) {
+        CpuUtils.CpuCore found = null;
+        CpuUtils.CpuCore weakest = null;
+        for (var core : hostCores) {
+            if (!hosts.contains(core.index)) continue;
+            if (found == null) found = core;
+            if (core.capacity <= 0) continue;
+            if (weakest == null || core.capacity < weakest.capacity) weakest = core;
+        }
+        return weakest != null ? weakest : found;
+    }
+
+    private void showCorePicker(int vcpu) {
+        var hosts = affinity.get(vcpu);
+        CpuCorePickerDialog.show(
+            context,
+            context.getString(R.string.create_vm_cpu_affinity_vcpu_fmt, vcpu),
+            hosts == null ? "" : joinCsv(hosts),
+            picked -> {
+                // Empty selection means "no mask for this vCPU", which crosvm
+                // expresses by leaving it out of the map entirely.
+                if (picked.trim().isEmpty()) affinity.remove(vcpu);
+                else affinity.put(vcpu, CpuUtils.parseCpuSet(picked));
+                rebuildRows();
+            });
+    }
+
+    private void seedManualIfEmpty() {
+        var capacity = CpuPlacementPlan.deriveCapacity(affinity, hostCores);
+        if (getEditText(etCapacity).trim().isEmpty())
+            etCapacity.setText(CpuPlacementPlan.formatCapacity(capacity));
+        if (getEditText(etClusters).trim().isEmpty()) {
+            var clusters = CpuPlacementPlan.deriveClusters(capacity, vcpuCount);
+            if (clusters.size() > 1)
+                etClusters.setText(CpuPlacementPlan.formatClusters(clusters));
+        }
+    }
+
+    /**
+     * The derived values go in the subtitle, not the value column: the raw
+     * {@code 0=792,1=792,...} form outgrows the value column's one ellipsized line
+     * on any real core count, and the subtitle spans the row and wraps. The value
+     * column keeps only what stays short.
+     */
+    private void refreshPreview() {
+        if (!swAuto.isChecked()) return;
+        var capacity = CpuPlacementPlan.deriveCapacity(affinity, hostCores);
+        var clusters = CpuPlacementPlan.deriveClusters(capacity, vcpuCount);
+        if (capacity.isEmpty()) {
+            // No host capacity readable, so neither flag can be emitted truthfully.
+            var unset = context.getString(R.string.create_vm_cpu_topology_unset);
+            rowCapacityPreview.setSubtitle(unset);
+            rowClusterPreview.setSubtitle(unset);
+            rowClusterPreview.setValue((CharSequence) null);
+            return;
+        }
+        rowCapacityPreview.setSubtitle(describeCapacity(capacity));
+        // A lone cluster is crosvm's default, so nothing is emitted for it.
+        if (clusters.size() > 1) {
+            rowClusterPreview.setValue(context.getString(
+                R.string.create_vm_cpu_cluster_count_fmt, clusters.size()));
+            rowClusterPreview.setSubtitle(describeClusters(clusters));
+        } else {
+            rowClusterPreview.setValue((CharSequence) null);
+            rowClusterPreview.setSubtitle(
+                context.getString(R.string.create_vm_cpu_cluster_single));
+        }
+    }
+
+    /** {@code "vCPU 0-5: 792    vCPU 6: 1024"} -- one group per distinct capacity. */
+    @NonNull
+    private String describeCapacity(@NonNull Map<Integer, Long> capacity) {
+        var sb = new StringBuilder();
+        for (var group : CpuPlacementPlan.groupByCapacity(capacity).entrySet()) {
+            if (sb.length() > 0) sb.append(CpuCorePickerDialog.LABEL_SEP);
+            sb.append(context.getString(
+                R.string.create_vm_cpu_capacity_group_fmt,
+                CpuUtils.compactRanges(joinCsv(group.getValue())), group.getKey()));
+        }
+        return sb.toString();
+    }
+
+    /** {@code "vCPU 0-5    vCPU 6"} -- the guest-visible cluster membership. */
+    @NonNull
+    private String describeClusters(@NonNull List<List<Integer>> clusters) {
+        var sb = new StringBuilder();
+        for (var cluster : clusters) {
+            if (cluster.isEmpty()) continue;
+            if (sb.length() > 0) sb.append(CpuCorePickerDialog.LABEL_SEP);
+            sb.append(context.getString(
+                R.string.create_vm_cpu_affinity_vcpu_range_fmt,
+                CpuUtils.compactRanges(joinCsv(cluster))));
+        }
+        return sb.toString();
+    }
+
+    @NonNull
+    private static String joinCsv(@NonNull Collection<Integer> values) {
+        var sb = new StringBuilder();
+        for (var value : values) {
+            if (sb.length() > 0) sb.append(',');
+            sb.append(value);
+        }
+        return sb.toString();
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/widgets/row/TextRowWidget.java b/app/src/main/java/cn/classfun/droidvm/ui/widgets/row/TextRowWidget.java
index 9dfe24fd4..d5eb46914 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/widgets/row/TextRowWidget.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/widgets/row/TextRowWidget.java
@@ -8,8 +8,10 @@
 import android.view.LayoutInflater;
 import android.widget.FrameLayout;
 import android.widget.ImageView;
+import android.widget.LinearLayout;
 import android.widget.TextView;
 
+import androidx.annotation.DrawableRes;
 import androidx.annotation.NonNull;
 import androidx.annotation.Nullable;
 import androidx.annotation.StringRes;
@@ -19,6 +21,7 @@
 public final class TextRowWidget extends FrameLayout {
     private final Context context;
     private ImageView iconView;
+    private LinearLayout textContainer;
     private TextView textView;
     private TextView subtitleView;
     private TextView valueView;
@@ -52,6 +55,7 @@ private void init(@Nullable AttributeSet attrs) {
         var inf = LayoutInflater.from(context);
         inf.inflate(R.layout.widget_text_row, this, true);
         iconView = findViewById(R.id.ti_icon);
+        textContainer = findViewById(R.id.ti_text_container);
         textView = findViewById(R.id.ti_text);
         subtitleView = findViewById(R.id.ti_subtitle);
         valueView = findViewById(R.id.ti_value);
@@ -62,7 +66,15 @@ private void initAttrs(@Nullable AttributeSet attrs) {
         if (attrs == null) return;
         try (var a = context.obtainStyledAttributes(attrs, R.styleable.TextRowWidget)) {
             var icon = a.getDrawable(R.styleable.TextRowWidget_android_icon);
-            if (icon != null) iconView.setImageDrawable(icon);
+            if (icon != null) {
+                iconView.setImageDrawable(icon);
+                iconView.setVisibility(VISIBLE);
+            } else {
+                iconView.setVisibility(GONE);
+            }
+            // The slot starts hidden with no indent, so an icon from XML has to
+            // claim both -- same as setIcon() does for a row built in code.
+            updateTextMargin();
             var text = a.getString(R.styleable.TextRowWidget_android_text);
             if (text != null) {
                 textView.setText(text);
@@ -87,7 +99,7 @@ private void initAttrs(@Nullable AttributeSet attrs) {
 
     public void setValue(@StringRes int resId) {
         valueView.setText(resId);
-        subtitleView.setVisibility(VISIBLE);
+        valueView.setVisibility(VISIBLE);
     }
 
     public void setValue(@Nullable CharSequence text) {
@@ -123,6 +135,31 @@ public String getTitle() {
         return textView.getText().toString();
     }
 
+    public void setText(@NonNull CharSequence text) {
+        textView.setText(text);
+        iconView.setContentDescription(text);
+    }
+
+    /**
+     * Shows the 24dp icon slot and indents the title to clear it. A row with no
+     * icon keeps the slot hidden and its title starts at the row's own padding.
+     */
+    public void setIcon(@DrawableRes int resId) {
+        iconView.setImageResource(resId);
+        iconView.setVisibility(VISIBLE);
+        updateTextMargin();
+    }
+
+    private void updateTextMargin() {
+        var lp = (LinearLayout.LayoutParams) textContainer.getLayoutParams();
+        lp.setMarginStart(iconView.getVisibility() == VISIBLE ? dpToPx(32) : 0);
+        textContainer.setLayoutParams(lp);
+    }
+
+    private int dpToPx(int dp) {
+        return (int) (dp * getResources().getDisplayMetrics().density);
+    }
+
     @Override
     public void setOnClickListener(@Nullable OnClickListener l) {
         super.setOnClickListener(l);
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/widgets/tools/CpuCorePickerDialog.java b/app/src/main/java/cn/classfun/droidvm/ui/widgets/tools/CpuCorePickerDialog.java
new file mode 100644
index 000000000..c43fac7e2
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/ui/widgets/tools/CpuCorePickerDialog.java
@@ -0,0 +1,141 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
+package cn.classfun.droidvm.ui.widgets.tools;
+
+import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
+import static cn.classfun.droidvm.lib.utils.StringUtils.joinNonEmpty;
+
+import android.content.Context;
+
+import androidx.annotation.NonNull;
+import androidx.annotation.Nullable;
+import androidx.annotation.StringRes;
+
+import com.google.android.material.dialog.MaterialAlertDialogBuilder;
+
+import java.util.HashSet;
+import java.util.List;
+import java.util.Set;
+import java.util.function.Consumer;
+
+import cn.classfun.droidvm.R;
+import cn.classfun.droidvm.lib.utils.CpuUtils;
+
+/**
+ * Multi-choice host CPU core picker: one checkbox per core labelled with its
+ * max frequency and little/big/prime tier, plus a neutral button that re-checks
+ * just the big cores. Shared by the qemu-img affinity setting and the per-vCPU
+ * / GPU-cpuset pickers in the VM editor, which all need the same list.
+ *
+ * <p>Selections are exchanged as crosvm CPUSET strings ({@code "0,1-3,5"}) so
+ * callers can hand the value straight to a flag or store it as-is.
+ */
+public final class CpuCorePickerDialog {
+    private CpuCorePickerDialog() {
+    }
+
+    /**
+     * @param selected cores to check initially, as a CPUSET string
+     * @param onPicked receives the new selection as a CPUSET string; may be empty
+     */
+    public static void show(
+        @NonNull Context context,
+        @StringRes int titleRes,
+        @NonNull String selected,
+        @NonNull Consumer<String> onPicked
+    ) {
+        show(context, context.getString(titleRes), selected, onPicked);
+    }
+
+    public static void show(
+        @NonNull Context context,
+        @NonNull CharSequence title,
+        @NonNull String selected,
+        @NonNull Consumer<String> onPicked
+    ) {
+        var cores = CpuUtils.getCores();
+        int tiers = CpuUtils.tierCount(cores);
+        var labels = new String[cores.size()];
+        for (int i = 0; i < cores.size(); i++)
+            labels[i] = label(context, cores.get(i), tiers);
+
+        var selectedIdx = toSet(selected);
+        var checked = new boolean[cores.size()];
+        for (int i = 0; i < cores.size(); i++)
+            checked[i] = selectedIdx.contains(cores.get(i).index);
+
+        var dialog = new MaterialAlertDialogBuilder(context)
+            .setTitle(title)
+            .setMultiChoiceItems(labels, checked, (d, which, isChecked) ->
+                checked[which] = isChecked)
+            .setNeutralButton(R.string.settings_cpu_affinity_big_only, null)
+            .setNegativeButton(android.R.string.cancel, null)
+            .setPositiveButton(android.R.string.ok, (d, w) -> {
+                var sb = new StringBuilder();
+                for (int i = 0; i < cores.size(); i++) {
+                    if (!checked[i]) continue;
+                    if (sb.length() > 0) sb.append(',');
+                    sb.append(cores.get(i).index);
+                }
+                onPicked.accept(sb.toString());
+            })
+            .create();
+        dialog.show();
+        // Re-check only the big cores without dismissing the dialog.
+        dialog.getButton(android.app.AlertDialog.BUTTON_NEUTRAL).setOnClickListener(v -> {
+            var bigIdx = toSet(CpuUtils.defaultBigCoresCsv());
+            var list = dialog.getListView();
+            for (int i = 0; i < cores.size(); i++) {
+                checked[i] = bigIdx.contains(cores.get(i).index);
+                list.setItemChecked(i, checked[i]);
+            }
+        });
+    }
+
+    /**
+     * Gap between the columns of a core label. Callers that describe a core
+     * outside this list use it too, so the wording lines up wherever it appears.
+     */
+    public static final String LABEL_SEP = "    ";
+
+    /**
+     * Localised tier name ("little"/"big"/"prime") for a core, or empty when the
+     * host has a single tier and the distinction says nothing.
+     */
+    @NonNull
+    public static String tierLabel(
+        @NonNull Context context, @NonNull CpuUtils.CpuCore core, int tiers) {
+        int tierRes;
+        if (tiers <= 1) tierRes = 0;
+        else if (core.tier == 0) tierRes = R.string.settings_cpu_affinity_tier_little;
+        else if (tiers >= 3 && core.tier == tiers - 1)
+            tierRes = R.string.settings_cpu_affinity_tier_prime;
+        else tierRes = R.string.settings_cpu_affinity_tier_big;
+        return tierRes == 0 ? "" : context.getString(tierRes);
+    }
+
+    /** {@code "CPU4    2.80 GHz    Big"} -- frequency and tier omitted when unknown. */
+    @NonNull
+    public static String label(
+        @NonNull Context context, @NonNull CpuUtils.CpuCore core, int tiers) {
+        return joinNonEmpty(LABEL_SEP,
+            fmt("CPU%d", core.index),
+            CpuUtils.formatFreq(core.maxFreqKHz),
+            tierLabel(context, core, tiers));
+    }
+
+    @NonNull
+    public static Set<Integer> toSet(@Nullable String cpuSet) {
+        return cpuSet == null
+            ? new HashSet<>() : new HashSet<>(CpuUtils.parseCpuSet(cpuSet));
+    }
+
+    /** Host core indices present on this device. */
+    @NonNull
+    public static Set<Integer> hostCoreIndices(@NonNull List<CpuUtils.CpuCore> cores) {
+        var out = new HashSet<Integer>();
+        for (var core : cores) out.add(core.index);
+        return out;
+    }
+}
diff --git a/app/src/main/res/layout/dialog_vm_cpu_affinity.xml b/app/src/main/res/layout/dialog_vm_cpu_affinity.xml
new file mode 100644
index 000000000..25bfc7a1d
--- /dev/null
+++ b/app/src/main/res/layout/dialog_vm_cpu_affinity.xml
@@ -0,0 +1,183 @@
+<?xml version="1.0" encoding="utf-8"?>
+<LinearLayout xmlns:android="http://schemas.android.com/apk/res/android"
+    android:layout_width="match_parent"
+    android:layout_height="wrap_content"
+    android:orientation="vertical"
+    android:paddingStart="8dp"
+    android:paddingTop="16dp"
+    android:paddingEnd="8dp"
+    android:paddingBottom="8dp">
+
+    <!-- Master switch stays pinned; everything it reveals scrolls, since the row
+         list can reach the vCPU cap (64). Weight resolves against the height the
+         dialog grants its custom view (same shape as dialog_boot_menu.xml). -->
+    <cn.classfun.droidvm.ui.widgets.row.SwitchRowWidget
+        android:id="@+id/sw_cpu_affinity"
+        android:layout_width="match_parent"
+        android:layout_height="wrap_content"
+        android:icon="@drawable/ic_cpu"
+        android:text="@string/create_vm_cpu_affinity" />
+
+    <ScrollView
+        android:layout_width="match_parent"
+        android:layout_height="0dp"
+        android:layout_weight="1">
+
+        <LinearLayout
+            android:id="@+id/cpu_affinity_options"
+            android:layout_width="match_parent"
+            android:layout_height="wrap_content"
+            android:orientation="vertical"
+            android:visibility="gone">
+
+            <!-- Mode switch, not a stored setting: which side is shown on open is
+                 read back off the placement itself (see VMCpuAffinityDialog). -->
+            <cn.classfun.droidvm.ui.widgets.row.SwitchRowWidget
+                android:id="@+id/sw_cpu_affinity_advanced"
+                android:layout_width="match_parent"
+                android:layout_height="wrap_content"
+                android:icon="@drawable/ic_wrench"
+                android:text="@string/create_vm_cpu_affinity_advanced" />
+
+            <!-- Simple mode: one checkbox per host core, one vCPU per checked
+                 core. No topology section: with a 1:1 binding the derived
+                 capacity and clusters mirror the host, which is what auto does. -->
+            <LinearLayout
+                android:id="@+id/cpu_affinity_simple"
+                android:layout_width="match_parent"
+                android:layout_height="wrap_content"
+                android:orientation="vertical">
+
+                <cn.classfun.droidvm.ui.widgets.row.TextRowWidget
+                    android:id="@+id/row_cpu_affinity_simple_summary"
+                    android:layout_width="match_parent"
+                    android:layout_height="wrap_content"
+                    android:icon="@drawable/ic_cpu"
+                    android:text="@string/create_vm_cpu_affinity_simple_vcpus" />
+
+                <!-- One checkbox per host core, added in Java. -->
+                <LinearLayout
+                    android:id="@+id/host_core_rows_container"
+                    android:layout_width="match_parent"
+                    android:layout_height="wrap_content"
+                    android:layout_marginStart="16dp"
+                    android:layout_marginEnd="12dp"
+                    android:orientation="vertical" />
+
+            </LinearLayout>
+
+            <LinearLayout
+                android:id="@+id/cpu_affinity_advanced"
+                android:layout_width="match_parent"
+                android:layout_height="wrap_content"
+                android:orientation="vertical"
+                android:visibility="gone">
+
+                <!-- Collapsible, because the row list below can reach 64 entries and
+                     folding it is the only way to reach the topology section without
+                     a long scroll. Its 72dp header indent lands on the same column as
+                     the row titles inside it. -->
+                <cn.classfun.droidvm.ui.widgets.container.CollapsibleContainer
+                    android:layout_width="match_parent"
+                    android:layout_height="wrap_content"
+                    android:title="@string/create_vm_cpu_affinity_section_vcpus">
+
+                    <!-- One row per vCPU, added in Java. -->
+                    <LinearLayout
+                        android:id="@+id/vcpu_rows_container"
+                        android:layout_width="match_parent"
+                        android:layout_height="wrap_content"
+                        android:orientation="vertical" />
+
+                </cn.classfun.droidvm.ui.widgets.container.CollapsibleContainer>
+
+                <cn.classfun.droidvm.ui.widgets.container.CollapsibleContainer
+                    android:layout_width="match_parent"
+                    android:layout_height="wrap_content"
+                    android:title="@string/create_vm_cpu_affinity_section_topology">
+
+                    <cn.classfun.droidvm.ui.widgets.row.SwitchRowWidget
+                        android:id="@+id/sw_cpu_topology_auto"
+                        android:layout_width="match_parent"
+                        android:layout_height="wrap_content"
+                        android:checked="true"
+                        android:icon="@drawable/ic_refresh_auto"
+                        android:text="@string/create_vm_cpu_topology_auto" />
+
+                    <!-- Read-only preview of the derived values; shown when auto is on. -->
+                    <LinearLayout
+                        android:id="@+id/cpu_topology_auto_preview"
+                        android:layout_width="match_parent"
+                        android:layout_height="wrap_content"
+                        android:orientation="vertical"
+                        android:visibility="gone">
+
+                        <cn.classfun.droidvm.ui.widgets.row.TextRowWidget
+                            android:id="@+id/row_cpu_capacity_preview"
+                            android:layout_width="match_parent"
+                            android:layout_height="wrap_content"
+                            android:icon="@drawable/ic_speedometer"
+                            android:text="@string/create_vm_cpu_capacity" />
+
+                        <cn.classfun.droidvm.ui.widgets.row.TextRowWidget
+                            android:id="@+id/row_cpu_cluster_preview"
+                            android:layout_width="match_parent"
+                            android:layout_height="wrap_content"
+                            android:icon="@drawable/ic_card_multiple"
+                            android:text="@string/create_vm_cpu_cluster" />
+
+                    </LinearLayout>
+
+                    <!-- Manual capacity / cluster inputs; shown when auto is off. -->
+                    <LinearLayout
+                        android:id="@+id/cpu_topology_manual"
+                        android:layout_width="match_parent"
+                        android:layout_height="wrap_content"
+                        android:layout_marginStart="12dp"
+                        android:layout_marginEnd="12dp"
+                        android:orientation="vertical"
+                        android:visibility="gone">
+
+                        <com.google.android.material.textfield.TextInputLayout
+                            android:id="@+id/til_cpu_capacity"
+                            style="@style/Widget.Material3.TextInputLayout.OutlinedBox"
+                            android:layout_width="match_parent"
+                            android:layout_height="wrap_content"
+                            android:hint="@string/create_vm_cpu_capacity_hint">
+
+                            <com.google.android.material.textfield.TextInputEditText
+                                android:id="@+id/et_cpu_capacity"
+                                android:layout_width="match_parent"
+                                android:layout_height="wrap_content"
+                                android:inputType="text"
+                                android:textSize="14sp" />
+
+                        </com.google.android.material.textfield.TextInputLayout>
+
+                        <com.google.android.material.textfield.TextInputLayout
+                            android:id="@+id/til_cpu_clusters"
+                            style="@style/Widget.Material3.TextInputLayout.OutlinedBox"
+                            android:layout_width="match_parent"
+                            android:layout_height="wrap_content"
+                            android:hint="@string/create_vm_cpu_clusters_hint">
+
+                            <com.google.android.material.textfield.TextInputEditText
+                                android:id="@+id/et_cpu_clusters"
+                                android:layout_width="match_parent"
+                                android:layout_height="wrap_content"
+                                android:inputType="text"
+                                android:textSize="14sp" />
+
+                        </com.google.android.material.textfield.TextInputLayout>
+
+                    </LinearLayout>
+
+                </cn.classfun.droidvm.ui.widgets.container.CollapsibleContainer>
+
+            </LinearLayout>
+
+        </LinearLayout>
+
+    </ScrollView>
+
+</LinearLayout>
diff --git a/app/src/main/res/layout/partial_vm_edit_basic.xml b/app/src/main/res/layout/partial_vm_edit_basic.xml
index 9a1319d4d..44a4509c2 100644
--- a/app/src/main/res/layout/partial_vm_edit_basic.xml
+++ b/app/src/main/res/layout/partial_vm_edit_basic.xml
@@ -30,6 +30,9 @@
             app:ti_mode="size"
             app:ti_precision="1MiB" />
 
+        <!-- The icon button opens the per-vCPU affinity editor: its row list is a
+             function of this field's value, so it reads the count on open instead
+             of tracking edits to it. -->
         <cn.classfun.droidvm.ui.widgets.row.TextInputRowWidget
             android:id="@+id/input_cpu"
             android:layout_width="match_parent"
@@ -37,6 +40,8 @@
             android:hint="@string/create_vm_cpu_hint"
             android:icon="@drawable/ic_cpu"
             android:inputType="number"
+            app:ti_iconButtonHint="@string/create_vm_cpu_affinity_title"
+            app:ti_iconButtonIcon="@drawable/ic_tune"
             app:ti_max="64"
             app:ti_min="1"
             app:ti_mode="number" />
diff --git a/app/src/main/res/layout/widget_text_row.xml b/app/src/main/res/layout/widget_text_row.xml
index 7c9195140..7cb1960a8 100644
--- a/app/src/main/res/layout/widget_text_row.xml
+++ b/app/src/main/res/layout/widget_text_row.xml
@@ -15,12 +15,17 @@
         android:id="@+id/ti_icon"
         android:layout_width="24dp"
         android:layout_height="24dp"
-        android:contentDescription="@null" />
+        android:layout_gravity="center_vertical"
+        android:visibility="gone"
+        android:contentDescription="@null"
+        tools:src="@drawable/ic_cpu"
+        tools:visibility="visible" />
 
     <LinearLayout
+        android:id="@+id/ti_text_container"
         android:layout_width="0dp"
         android:layout_height="wrap_content"
-        android:layout_marginStart="32dp"
+        android:layout_marginStart="0dp"
         android:layout_weight="1"
         android:orientation="vertical">
 
diff --git a/app/src/test/java/cn/classfun/droidvm/lib/store/vm/CpuPlacementPlanTest.java b/app/src/test/java/cn/classfun/droidvm/lib/store/vm/CpuPlacementPlanTest.java
new file mode 100644
index 000000000..e52469e37
--- /dev/null
+++ b/app/src/test/java/cn/classfun/droidvm/lib/store/vm/CpuPlacementPlanTest.java
@@ -0,0 +1,284 @@
+package cn.classfun.droidvm.lib.store.vm;
+
+import static org.junit.Assert.assertEquals;
+import static org.junit.Assert.assertFalse;
+import static org.junit.Assert.assertTrue;
+
+import org.junit.Test;
+
+import java.util.List;
+import java.util.Map;
+import java.util.TreeMap;
+
+import cn.classfun.droidvm.lib.store.base.DataItem;
+import cn.classfun.droidvm.lib.utils.CpuUtils;
+
+public class CpuPlacementPlanTest {
+    /**
+     * crosvm separates per-vCPU assignments with ':' and uses ',' only inside one
+     * assignment's host set. A comma-separated assignment list is what the flag
+     * rejects as "invalid VCPU assignment syntax", so it must not round-trip.
+     */
+    @Test
+    public void affinityUsesColonBetweenAssignments() {
+        var parsed = CpuPlacementPlan.parseAffinity("0=0:1=1:6=6");
+        assertEquals(List.of(0), parsed.get(0));
+        assertEquals(List.of(1), parsed.get(1));
+        assertEquals(List.of(6), parsed.get(6));
+        assertEquals("0=0:1=1:6=6", CpuPlacementPlan.formatAffinity(parsed));
+    }
+
+    @Test
+    public void affinityCommaBindsOneVcpuToManyHosts() {
+        var parsed = CpuPlacementPlan.parseAffinity("0=4,5:1=6");
+        assertEquals(List.of(4, 5), parsed.get(0));
+        assertEquals(List.of(6), parsed.get(1));
+    }
+
+    @Test
+    public void affinityAcceptsHostRanges() {
+        var parsed = CpuPlacementPlan.parseAffinity("0=0-3");
+        assertEquals(List.of(0, 1, 2, 3), parsed.get(0));
+        // Ranges collapse back on the way out.
+        assertEquals("0=0-3", CpuPlacementPlan.formatAffinity(parsed));
+    }
+
+    @Test
+    public void affinityDropsMalformedAssignments() {
+        var parsed = CpuPlacementPlan.parseAffinity("0=0:garbage:2=:3=3");
+        assertEquals(2, parsed.size());
+        assertTrue(parsed.containsKey(0));
+        assertTrue(parsed.containsKey(3));
+    }
+
+    /** A hand-written global CPUSET has no per-vCPU info, so it parses to empty. */
+    @Test
+    public void affinityIgnoresGlobalCpusetForm() {
+        assertTrue(CpuPlacementPlan.parseAffinity("0,1-3,5").isEmpty());
+    }
+
+    @Test
+    public void capacityRoundTrips() {
+        var parsed = CpuPlacementPlan.parseCapacity("0=792,6=1024");
+        assertEquals(Long.valueOf(792), parsed.get(0));
+        assertEquals(Long.valueOf(1024), parsed.get(6));
+        assertEquals("0=792,6=1024", CpuPlacementPlan.formatCapacity(parsed));
+    }
+
+    /** A vCPU floating over two tiers gets the weaker core's capacity. */
+    @Test
+    public void deriveCapacityTakesWeakestPinnedCore() {
+        var cores = fakeCores(new long[]{792, 792, 1024});
+        var affinity = new TreeMap<Integer, List<Integer>>();
+        affinity.put(0, List.of(2));
+        affinity.put(1, List.of(0, 2));
+        var capacity = CpuPlacementPlan.deriveCapacity(affinity, cores);
+        assertEquals(Long.valueOf(1024), capacity.get(0));
+        assertEquals(Long.valueOf(792), capacity.get(1));
+    }
+
+    @Test
+    public void deriveClustersGroupsByCapacityWeakestFirst() {
+        var capacity = new TreeMap<Integer, Long>();
+        for (int i = 0; i < 6; i++) capacity.put(i, 792L);
+        capacity.put(6, 1024L);
+        var clusters = CpuPlacementPlan.deriveClusters(capacity, 7);
+        assertEquals(2, clusters.size());
+        assertEquals(List.of(0, 1, 2, 3, 4, 5), clusters.get(0));
+        assertEquals(List.of(6), clusters.get(1));
+        assertEquals("0-5;6", CpuPlacementPlan.formatClusters(clusters));
+    }
+
+    /**
+     * crosvm builds the guest cpu-map all-or-nothing, so an unpinned vCPU must
+     * still land in a cluster -- the weakest one, since it floats everywhere.
+     */
+    @Test
+    public void deriveClustersCoversUnpinnedVcpus() {
+        var capacity = new TreeMap<Integer, Long>();
+        capacity.put(0, 792L);
+        capacity.put(6, 1024L);
+        var clusters = CpuPlacementPlan.deriveClusters(capacity, 7);
+        assertEquals(List.of(0, 1, 2, 3, 4, 5), clusters.get(0));
+        assertEquals(List.of(6), clusters.get(1));
+    }
+
+    /** The grouping the dialog's capacity summary renders, weakest tier first. */
+    @Test
+    public void groupByCapacityOrdersWeakestFirst() {
+        var capacity = new TreeMap<Integer, Long>();
+        capacity.put(0, 792L);
+        capacity.put(6, 1024L);
+        capacity.put(1, 792L);
+        var grouped = CpuPlacementPlan.groupByCapacity(capacity);
+        assertEquals(List.of(792L, 1024L), List.copyOf(grouped.keySet()));
+        assertEquals(List.of(0, 1), grouped.get(792L));
+        assertEquals(List.of(6), grouped.get(1024L));
+    }
+
+    @Test
+    public void clusterOverlapIsReported() {
+        var clusters = CpuPlacementPlan.parseClusters("0-3;3-5");
+        assertEquals(List.of(3), CpuPlacementPlan.findClusterOverlaps(clusters));
+    }
+
+    @Test
+    public void hostOverlapWithGpuCpusetIsReported() {
+        var affinity = new TreeMap<Integer, List<Integer>>();
+        affinity.put(0, List.of(6, 7));
+        assertEquals(List.of(7), CpuPlacementPlan.findHostOverlaps(affinity, "7"));
+        assertTrue(CpuPlacementPlan.findHostOverlaps(affinity, "5").isEmpty());
+    }
+
+    /** The user's 7-vCPU example, end to end. */
+    @Test
+    public void sevenVcpuBigLittleExample() {
+        var cores = fakeCores(new long[]{792, 792, 792, 792, 792, 792, 1024});
+        var affinity = new TreeMap<Integer, List<Integer>>();
+        for (int i = 0; i < 7; i++) affinity.put(i, List.of(i));
+        var capacity = CpuPlacementPlan.deriveCapacity(affinity, cores);
+        var clusters = CpuPlacementPlan.deriveClusters(capacity, 7);
+        assertEquals("0=0:1=1:2=2:3=3:4=4:5=5:6=6",
+            CpuPlacementPlan.formatAffinity(affinity));
+        assertEquals("0=792,1=792,2=792,3=792,4=792,5=792,6=1024",
+            CpuPlacementPlan.formatCapacity(capacity));
+        assertEquals("0-5;6", CpuPlacementPlan.formatClusters(clusters));
+    }
+
+    @Test
+    public void parseCpuSetHandlesRangesAndJunk() {
+        assertEquals(List.of(0, 1, 2, 3, 5), CpuUtils.parseCpuSet("0,1-3,5"));
+        assertEquals(List.of(4), CpuUtils.parseCpuSet(" 4 , , x"));
+        // Reversed range is dropped rather than throwing.
+        assertTrue(CpuUtils.parseCpuSet("5-2").isEmpty());
+    }
+
+    /** CpuCore has no public constructor; build the list through the same math. */
+    private static List<CpuUtils.CpuCore> fakeCores(long[] capacities) {
+        var cores = new java.util.ArrayList<CpuUtils.CpuCore>();
+        for (int i = 0; i < capacities.length; i++)
+            cores.add(newCore(i, capacities[i]));
+        return cores;
+    }
+
+    private static CpuUtils.CpuCore newCore(int index, long capacity) {
+        try {
+            var ctor = CpuUtils.CpuCore.class.getDeclaredConstructor(
+                int.class, long.class, int.class, boolean.class, long.class);
+            ctor.setAccessible(true);
+            return ctor.newInstance(index, 0L, 0, false, capacity);
+        } catch (ReflectiveOperationException e) {
+            throw new AssertionError(e);
+        }
+    }
+
+    // --- simple vs advanced mode in the affinity editor ---
+
+    /** What the editor opens simple mode for: one vCPU, one core of its own. */
+    @Test
+    public void oneToOneRecognisesTheSimpleModeShape() {
+        var affinity = CpuPlacementPlan.parseAffinity("0=0:1=1:2=2");
+        assertTrue(CpuPlacementPlan.isOneToOne(affinity, 3));
+        assertEquals(List.of(0, 1, 2), CpuPlacementPlan.oneToOneHosts(affinity, 3));
+    }
+
+    /** Host cores need not be contiguous, or start at 0, to stay 1:1. */
+    @Test
+    public void oneToOneAcceptsAnyDistinctCores() {
+        var affinity = CpuPlacementPlan.parseAffinity("0=4:1=7");
+        assertTrue(CpuPlacementPlan.isOneToOne(affinity, 2));
+        assertEquals(List.of(4, 7), CpuPlacementPlan.oneToOneHosts(affinity, 2));
+    }
+
+    /** Everything simple mode cannot say, and so has to open advanced for. */
+    @Test
+    public void oneToOneRejectsWhatSimpleModeCannotSay() {
+        // A vCPU floating over two cores.
+        assertFalse(CpuPlacementPlan.isOneToOne(
+            CpuPlacementPlan.parseAffinity("0=4,5:1=6"), 2));
+        // Two vCPUs sharing a core.
+        assertFalse(CpuPlacementPlan.isOneToOne(
+            CpuPlacementPlan.parseAffinity("0=4:1=4"), 2));
+        // A vCPU with no binding at all.
+        assertFalse(CpuPlacementPlan.isOneToOne(
+            CpuPlacementPlan.parseAffinity("0=0:2=2"), 3));
+        // Bound vCPUs the count no longer covers.
+        assertFalse(CpuPlacementPlan.isOneToOne(
+            CpuPlacementPlan.parseAffinity("0=0:1=1:2=2"), 2));
+        // Nothing pinned is not 1:1 either; the dialog treats it separately.
+        assertFalse(CpuPlacementPlan.isOneToOne(new TreeMap<>(), 2));
+        assertTrue(CpuPlacementPlan.oneToOneHosts(
+            CpuPlacementPlan.parseAffinity("0=4,5:1=6"), 2).isEmpty());
+    }
+
+    /** Checking cores in simple mode: core order decides the vCPU numbering. */
+    @Test
+    public void oneToOneBuildsTheMapFromCheckedCores() {
+        var affinity = CpuPlacementPlan.oneToOne(List.of(7, 4, 5));
+        assertEquals("0=4:1=5:2=7", CpuPlacementPlan.formatAffinity(affinity));
+        assertTrue(CpuPlacementPlan.isOneToOne(affinity, 3));
+    }
+
+    /**
+     * Advanced to simple: each vCPU keeps the lowest core no earlier vCPU took,
+     * and the rest of its cores are dropped.
+     */
+    @Test
+    public void flattenKeepsOneCorePerVcpu() {
+        assertEquals(List.of(4, 6),
+            CpuPlacementPlan.flattenToOneToOne(
+                CpuPlacementPlan.parseAffinity("0=4,5:1=6")));
+        // A vCPU whose every core is already taken keeps nothing.
+        assertEquals(List.of(4),
+            CpuPlacementPlan.flattenToOneToOne(
+                CpuPlacementPlan.parseAffinity("0=4:1=4")));
+        // An already-1:1 map survives the trip unchanged.
+        var oneToOne = CpuPlacementPlan.parseAffinity("0=0:1=1:2=2");
+        assertEquals(List.of(0, 1, 2), CpuPlacementPlan.flattenToOneToOne(oneToOne));
+    }
+
+    /**
+     * The GPU worker cpuset needs a GPU worker. The switch used to be the whole gate, so a VM with
+     * no virtio-gpu device still had the directory made for it and still got
+     * {@code --gpu-cgroup-path} on the command line -- a group whose only members would have been
+     * the threads that device does not have.
+     */
+    @Test
+    public void theGpuCpusetNeedsTheDeviceAndNotJustTheSwitch() {
+        var item = DataItem.newObject();
+        item.set(CpuPlacementPlan.KEY_GPU_CGROUP, true);
+        // The switch alone, with no screens object at all: the shape a config has before anything
+        // said whether this VM has the device.
+        assertFalse(CpuPlacementPlan.wantsGpuCgroup(item));
+
+        var gpu0 = VMScreenConfig.of(item, VMScreenConfig.ID_GPU0);
+        gpu0.setEnabled(true);
+        assertTrue(CpuPlacementPlan.wantsGpuCgroup(item));
+
+        // The switch is still the user's answer, and it still comes first.
+        item.set(CpuPlacementPlan.KEY_GPU_CGROUP, false);
+        assertFalse(CpuPlacementPlan.wantsGpuCgroup(item));
+
+        // The device going away takes the cpuset with it, without the stored switch being
+        // rewritten -- the editor greys the rows, but a config saved before that does not change.
+        item.set(CpuPlacementPlan.KEY_GPU_CGROUP, true);
+        gpu0.setEnabled(false);
+        assertFalse(CpuPlacementPlan.wantsGpuCgroup(item));
+        assertTrue(item.optBoolean(CpuPlacementPlan.KEY_GPU_CGROUP, false));
+
+        // A simplefb screen is a display device, not the one with worker threads to pin.
+        var fb = VMScreenConfig.of(item, VMScreenConfig.ID_SIMPLEFB);
+        fb.setEnabled(true);
+        assertFalse(CpuPlacementPlan.wantsGpuCgroup(item));
+    }
+
+    /** Guards the map type the UI relies on for stable row ordering. */
+    @Test
+    public void orderedCopyIsSortedByVcpu() {
+        Map<Integer, List<Integer>> in = new TreeMap<>();
+        in.put(3, List.of(3));
+        in.put(0, List.of(0));
+        var out = CpuPlacementPlan.orderedCopy(in);
+        assertEquals(List.of(0, 3), List.copyOf(out.keySet()));
+    }
+}

From a1fb2cafd7aa4b616c3081f37cc050e25c639d85 Mon Sep 17 00:00:00 2001
From: HuJK <gh@hujk.org>
Date: Sun, 30 Aug 2026 13:37:13 +0800
Subject: [PATCH 136/182] serial: ports as a peripheral category, with a USB
 ACM gadget pool behind them

A VM had one console and no way to ask for another. Serial ports are now a
peripheral category of their own: each port names its hardware (SBSA UART or
virtio-console) and its backend (stdio, a pty, a file, or a USB ACM function),
and the crosvm arguments are generated from that rather than from a special
case for the console.

The USB ACM backend is the one with a host side. The gadget's ACM functions are
a shared pool -- there is one USB device on the phone and every VM that wants a
port takes a slot out of it -- so UsbAcmPool reconciles the configfs gadget to
the number of ports configured, and keeps track of who holds which slot.
Unbinding the gadget needs a newline written to UDC and a moment for USB to
settle; without the wait the rebind lands on a controller that has not finished
tearing down and the whole gadget stops enumerating.

The VM info screen stops calling a stdio port a "text console" and names it
after the backend it actually is, because with a list of ports that is now an
answerable question.
---
 .../daemon/ipc/basic/SetAppConfig.java        |   4 +
 .../droidvm/daemon/vm/UsbAcmPool.java         | 350 ++++++++++++++++++
 .../vm/backend/CrosvmBackendInstance.java     | 246 ++++++++++--
 .../droidvm/lib/store/vm/SerialBackend.java   |  71 ++++
 .../droidvm/lib/store/vm/SerialHardware.java  |  73 ++++
 .../droidvm/lib/store/vm/VMSerialConfig.java  | 182 +++++++++
 .../main/settings/MainSettingsFragment.java   |  71 ++++
 .../ui/vm/console/VMConsoleActivity.java      |   5 +-
 .../ui/vm/console/VMConsoleRouter.java        |  11 +-
 .../edit/peripheral/VMEditPeripheralTab.java  |  30 ++
 .../edit/peripheral/VMSerialEditAdapter.java  | 247 ++++++++++++
 .../peripheral/VMSerialEditViewHolder.java    |  49 +++
 .../droidvm/ui/vm/info/ConsoleButton.java     | 166 +++++++--
 .../main/res/layout/dialog_usb_acm_ports.xml  |  47 +++
 .../res/layout/fragment_main_settings.xml     |   6 +
 .../main/res/layout/item_console_stdio.xml    |  53 +++
 .../main/res/layout/item_vm_serial_edit.xml   | 102 +++++
 .../res/layout/partial_vm_edit_peripheral.xml |  15 +
 18 files changed, 1674 insertions(+), 54 deletions(-)
 create mode 100644 app/src/main/java/cn/classfun/droidvm/daemon/vm/UsbAcmPool.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/lib/store/vm/SerialBackend.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/lib/store/vm/SerialHardware.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/lib/store/vm/VMSerialConfig.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/ui/vm/edit/peripheral/VMSerialEditAdapter.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/ui/vm/edit/peripheral/VMSerialEditViewHolder.java
 create mode 100644 app/src/main/res/layout/dialog_usb_acm_ports.xml
 create mode 100644 app/src/main/res/layout/item_console_stdio.xml
 create mode 100644 app/src/main/res/layout/item_vm_serial_edit.xml
 create mode 100644 app/src/main/res/layout/partial_vm_edit_peripheral.xml

diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/ipc/basic/SetAppConfig.java b/app/src/main/java/cn/classfun/droidvm/daemon/ipc/basic/SetAppConfig.java
index 20e5a375f..ace7d77e0 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/ipc/basic/SetAppConfig.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/ipc/basic/SetAppConfig.java
@@ -9,6 +9,7 @@
 
 import cn.classfun.droidvm.daemon.server.ClientRequest;
 import cn.classfun.droidvm.daemon.server.RequestHandler;
+import cn.classfun.droidvm.daemon.vm.UsbAcmPool;
 import cn.classfun.droidvm.lib.store.base.DataItem;
 
 @AutoService(RequestHandler.class)
@@ -28,5 +29,8 @@ public void handle(@NonNull ClientRequest request) throws Exception {
         var data = DataItem.fromJson(cfg);
         var ctx = request.getContext();
         ctx.appConfig = data;
+        // The ACM pool is standing daemon state driven by this config: build or tear down
+        // right away so toggling the setting acts without waiting for a VM start.
+        UsbAcmPool.applyConfig(data);
     }
 }
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/vm/UsbAcmPool.java b/app/src/main/java/cn/classfun/droidvm/daemon/vm/UsbAcmPool.java
new file mode 100644
index 000000000..7e595dd7f
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/vm/UsbAcmPool.java
@@ -0,0 +1,350 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
+package cn.classfun.droidvm.daemon.vm;
+
+import static cn.classfun.droidvm.lib.utils.FileUtils.deleteFile;
+import static cn.classfun.droidvm.lib.utils.FileUtils.readFile;
+import static cn.classfun.droidvm.lib.utils.FileUtils.writeFile;
+import static cn.classfun.droidvm.lib.utils.RunUtils.runListQuiet;
+import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
+import static cn.classfun.droidvm.lib.utils.StringUtils.pathJoin;
+import static cn.classfun.droidvm.lib.utils.ThreadUtils.threadSleep;
+
+import android.system.Os;
+import android.util.Log;
+
+import androidx.annotation.NonNull;
+
+import java.io.File;
+import java.io.IOException;
+import java.util.HashMap;
+import java.util.Map;
+
+import cn.classfun.droidvm.lib.store.base.DataItem;
+
+/**
+ * A fixed pool of CDC-ACM functions on the device's USB gadget, shared by every VM serial
+ * port with the USB_ACM backend. crosvm opens the pool member's {@code /dev/ttyGSn} with its
+ * {@code type=dev} serial; the external host enumerates one USB serial port per member
+ * (Windows usbser.sys / Linux cdc_acm, both in-box).
+ *
+ * <p>Why a pool instead of one function per VM: adding or removing a gadget function only
+ * takes effect through a UDC rebind, and a rebind re-enumerates the whole gadget -- every
+ * other ACM port and a USB-cable adb connection drop with it. So the pool is built once, in
+ * one rebind, and VM starts/stops merely attach and release members -- zero rebinds, and the
+ * host's COM numbering stays stable (usbser remembers ports per interface). An idle member
+ * is just a quiet COM port on the host. Only a pool rebuild (size change, or the framework
+ * wiping the config on a USB mode switch) rebinds again.</p>
+ *
+ * <p>Android's init mounts configfs at {@code /config} with labels this root daemon can use,
+ * and the framework's gadget lives at {@code g1}, so members are grafted onto that gadget (a
+ * UDC binds only one gadget at a time). configfs refuses config-link edits while the UDC is
+ * bound (EINVAL), and the vendor USB HAL races to grab the UDC back within about a second of
+ * an unbind -- so unbind, edit, bind runs as one uninterrupted sequence. The framework owns
+ * g1: a USB mode switch or cable event may silently drop the members; the next acquire
+ * notices and rebuilds.</p>
+ */
+public final class UsbAcmPool {
+    private static final String TAG = "UsbAcmPool";
+    private static final String GADGET = "/config/usb_gadget/g1";
+    private static final String FUNCTIONS_DIR = pathJoin(GADGET, "functions");
+    private static final String CONFIG_DIR = pathJoin(GADGET, "configs", "b.1");
+    private static final String UDC_FILE = pathJoin(GADGET, "UDC");
+    private static final String UDC_CLASS_DIR = "/sys/class/udc";
+    private static final String INSTANCE_PREFIX = "dvmpool";
+    private static final int NODE_WAIT_MS = 3000;
+    private static final int NODE_POLL_MS = 50;
+    // The vendor USB HAL owns this gadget and re-grabs the UDC around unbinds -- and for a
+    // while after boot it churns the whole stack, which is exactly when the daemon first
+    // reconciles. Rather than fighting it with blind retries (every lost round re-enumerates
+    // USB for the host), each attempt first waits for the stack to look settled: boot
+    // completed and the UDC holding one steady non-empty value across a probe interval.
+    // sys.usb.state is empty on this vendor, so the UDC file itself is the settle signal.
+    private static final int UDC_RETRIES = 3;
+    private static final int SETTLE_PROBE_MS = 300;
+    private static final int SETTLE_POLL_MS = 500;
+    private static final int SETTLE_TIMEOUT_MS = 15000;
+    /** Same keys the settings screen writes; they flow to the daemon via set_app_config. */
+    public static final String KEY_USB_ACM_ENABLE = "usb_acm_enable";
+    public static final String KEY_USB_ACM_PORTS = "usb_acm_ports";
+    /** Off by default: the pool is a standing gadget change every daemon start would replay
+     *  (USB re-enumeration plus host COM ports nobody may be using). */
+    public static final boolean DEFAULT_ENABLE = false;
+    public static final int DEFAULT_PORTS = 4;
+    // u_serial tops out around 8 ports, and the gadget's endpoint budget (after mtp+adb)
+    // fits 4-6 ACMs comfortably.
+    public static final int MAX_PORTS = 6;
+
+    /** Pool member instance name -> owner token; entries only exist while attached. */
+    private static final Map<String, String> owners = new HashMap<>();
+
+    private UsbAcmPool() {
+    }
+
+    /** A configfs edit that must run while the UDC is unbound. */
+    private interface GadgetOp {
+        void run() throws Exception;
+    }
+
+    /**
+     * A slot that exists but cannot be attached right now: held by another running VM, or
+     * outside the configured pool. Callers refuse the VM start (a silently reassigned COM
+     * port on the host is worse than not booting) instead of degrading to a sink.
+     */
+    public static final class SlotUnavailableException extends IOException {
+        SlotUnavailableException(@NonNull String message) {
+            super(message);
+        }
+    }
+
+    /** Whether the feature is switched on at all; without it every acquire refuses. */
+    public static boolean enabledOf(@NonNull DataItem appConfig) {
+        return appConfig.optBoolean(KEY_USB_ACM_ENABLE, DEFAULT_ENABLE);
+    }
+
+    /** The configured pool size, clamped to what the gadget can actually carry. */
+    public static int portsOf(@NonNull DataItem appConfig) {
+        var n = (int) appConfig.optLong(KEY_USB_ACM_PORTS, DEFAULT_PORTS);
+        return Math.max(1, Math.min(MAX_PORTS, n));
+    }
+
+    /**
+     * Brings the pool in line with the app config: builds it when the feature is enabled,
+     * tears the unowned members down when it is not. Called whenever the daemon receives the
+     * app config, so toggling the setting takes effect without a VM start. Failures only log:
+     * the config write itself must not fail over gadget trouble.
+     */
+    public static synchronized void applyConfig(@NonNull DataItem appConfig) {
+        try {
+            reconcile(enabledOf(appConfig) ? portsOf(appConfig) : 0);
+        } catch (IOException e) {
+            Log.w(TAG, "USB ACM pool reconcile failed", e);
+        }
+    }
+
+    /**
+     * Attaches pool slot {@code slot} to {@code owner} and returns its {@code /dev/ttyGSn}.
+     * The slot is part of the VM config, not first-free: boot order must never decide which
+     * host COM port a VM lands on. Builds or repairs the pool first -- the only paths that
+     * rebind the UDC. Throws {@link SlotUnavailableException} when the slot is taken or out
+     * of range (refuse the boot), plain {@link IOException} when the gadget itself is
+     * unusable (degrade to sink).
+     */
+    @NonNull
+    public static synchronized String acquire(
+        int slot, @NonNull String owner, @NonNull DataItem appConfig
+    ) throws IOException {
+        if (!enabledOf(appConfig))
+            throw new SlotUnavailableException(
+                "USB serial (ACM) is disabled; enable it in the app settings first");
+        var poolSize = portsOf(appConfig);
+        if (slot < 0 || slot >= poolSize)
+            throw new SlotUnavailableException(fmt(
+                "USB serial slot %d is outside the pool (size %d); raise the USB serial"
+                    + " ports setting or pick a lower slot", slot, poolSize));
+        var instance = fmt("%s%d", INSTANCE_PREFIX, slot);
+        var holder = owners.get(instance);
+        if (holder != null)
+            throw new SlotUnavailableException(fmt(
+                "USB serial slot %d is busy (held by %s)", slot, holder));
+        reconcile(poolSize);
+        var devPath = devPathOf(instance);
+        waitForNode(devPath);
+        owners.put(instance, owner);
+        Log.i(TAG, fmt("acm slot %d (%s) -> %s", slot, devPath, owner));
+        return devPath;
+    }
+
+    /** Releases every slot {@code owner} holds. Never rebinds; the member just idles. */
+    public static synchronized void release(@NonNull String owner) {
+        owners.values().removeIf(owner::equals);
+    }
+
+    /**
+     * Brings the gadget to exactly {@code poolSize} pool members (0 = feature off): members
+     * below the size exist and are linked, members at or above it are removed -- except ones a
+     * running VM holds, which are left alone (yanking a function under an open crosvm fd
+     * hangs the port up). All link edits share a single unbind/bind window; when nothing has
+     * to change there is no rebind at all. Only functions named {@code acm.dvmpool*} are ever
+     * touched: another app's (or the vendor's) acm/gser functions share the ttyGS number
+     * space, and grabbing whatever exists would fight them -- ownership is by name, always.
+     */
+    private static void reconcile(int poolSize) throws IOException {
+        var toRemove = new java.util.ArrayList<File>();
+        var namePrefix = fmt("acm.%s", INSTANCE_PREFIX);
+        var existing = new File(FUNCTIONS_DIR)
+            .listFiles(f -> f.getName().startsWith(namePrefix));
+        if (existing != null) for (var funcDir : existing) {
+            var instance = funcDir.getName().substring("acm.".length());
+            int index;
+            try {
+                index = Integer.parseInt(instance.substring(INSTANCE_PREFIX.length()));
+            } catch (NumberFormatException e) {
+                continue;
+            }
+            if (index >= poolSize && !owners.containsKey(instance))
+                toRemove.add(funcDir);
+        }
+        var missingLink = false;
+        for (int i = 0; i < poolSize; i++) {
+            var funcDir = funcDirOf(fmt("%s%d", INSTANCE_PREFIX, i));
+            // mkdir works while bound; only the config links need the unbound window.
+            if (!funcDir.isDirectory() && !funcDir.mkdir())
+                throw new IOException(fmt("cannot create %s", funcDir));
+            if (!new File(CONFIG_DIR, funcDir.getName()).exists())
+                missingLink = true;
+        }
+        if (!missingLink && toRemove.isEmpty()) return;
+        IOException lastFailure = null;
+        for (int attempt = 1; attempt <= UDC_RETRIES; attempt++) {
+            awaitUsbSettled();
+            try {
+                withUdcUnbound(() -> {
+                    for (int i = 0; i < poolSize; i++) {
+                        var funcDir = funcDirOf(fmt("%s%d", INSTANCE_PREFIX, i));
+                        var link = new File(CONFIG_DIR, funcDir.getName());
+                        if (!link.exists())
+                            Os.symlink(funcDir.getAbsolutePath(), link.getAbsolutePath());
+                    }
+                    for (var funcDir : toRemove) {
+                        deleteFile(new File(CONFIG_DIR, funcDir.getName()).getAbsolutePath());
+                        if (funcDir.isDirectory() && !funcDir.delete())
+                            Log.w(TAG, fmt("cannot remove %s", funcDir));
+                    }
+                });
+                lastFailure = null;
+                break;
+            } catch (IOException e) {
+                lastFailure = e;
+                Log.w(TAG, fmt("gadget reconcile attempt %d/%d lost the UDC race",
+                    attempt, UDC_RETRIES), e);
+            }
+        }
+        if (lastFailure != null) throw lastFailure;
+        Log.i(TAG, fmt("USB ACM pool reconciled to %d members", poolSize));
+    }
+
+    @NonNull
+    private static File funcDirOf(@NonNull String instance) {
+        return new File(FUNCTIONS_DIR, fmt("acm.%s", instance));
+    }
+
+    /**
+     * The member's character device. The kernel assigns the ttyGS index at function creation
+     * and reports it in port_num -- the instance name says nothing about it (gser/acm share
+     * one number space, and other functions may hold lower indexes).
+     */
+    @NonNull
+    private static String devPathOf(@NonNull String instance) throws IOException {
+        try {
+            var portNum = readFile(new File(funcDirOf(instance), "port_num")).trim();
+            return fmt("/dev/ttyGS%d", Integer.parseInt(portNum));
+        } catch (NumberFormatException e) {
+            throw new IOException("cannot parse acm port_num", e);
+        }
+    }
+
+    /** The node only appears after the gadget binds, not at function-creation time. */
+    private static void waitForNode(@NonNull String devPath) throws IOException {
+        var node = new File(devPath);
+        for (int waited = 0; !node.exists(); waited += NODE_POLL_MS) {
+            if (waited >= NODE_WAIT_MS)
+                throw new IOException(fmt("%s did not appear after bind", devPath));
+            threadSleep(NODE_POLL_MS);
+        }
+    }
+
+    /**
+     * True when the USB stack looks idle: boot is done and the UDC binding holds one steady
+     * non-empty value across a short probe. An unbound UDC means the HAL is mid-transition
+     * (or about to be) -- exactly the moment an edit window would race it.
+     */
+    private static boolean usbSettled() {
+        if (!"1".equals(getprop("sys.boot_completed"))) return false;
+        String first;
+        try {
+            first = readFile(UDC_FILE).trim();
+        } catch (IOException e) {
+            return false;
+        }
+        if (first.isEmpty()) return false;
+        threadSleep(SETTLE_PROBE_MS);
+        try {
+            return first.equals(readFile(UDC_FILE).trim());
+        } catch (IOException e) {
+            return false;
+        }
+    }
+
+    /** Waits for {@link #usbSettled()}, but never forever: a stack that will not settle gets
+     *  one polite attempt anyway rather than a pool that silently never appears. */
+    private static void awaitUsbSettled() {
+        var deadline = System.currentTimeMillis() + SETTLE_TIMEOUT_MS;
+        while (System.currentTimeMillis() < deadline) {
+            if (usbSettled()) return;
+            threadSleep(SETTLE_POLL_MS);
+        }
+        Log.w(TAG, "USB stack did not settle in time; attempting the gadget edit anyway");
+    }
+
+    @NonNull
+    private static String getprop(@NonNull String key) {
+        return runListQuiet("getprop", key).getOutString().trim();
+    }
+
+    /**
+     * Runs a configfs edit inside an unbind/bind window, back-to-back with no waiting in
+     * between, and with the bind in a finally so a failed edit never strands the gadget
+     * unbound (which would kill adb-over-USB for good).
+     */
+    private static void withUdcUnbound(@NonNull GadgetOp op) throws IOException {
+        var udc = "";
+        try {
+            udc = readFile(UDC_FILE).trim();
+        } catch (IOException ignored) {
+        }
+        if (udc.isEmpty()) {
+            var names = new File(UDC_CLASS_DIR).list();
+            if (names == null || names.length == 0)
+                throw new IOException("no UDC available");
+            udc = names[0];
+        }
+        try {
+            // A newline, not an empty string: zero bytes never reach the kernel's UDC store
+            // at all (the write is dropped at the VFS), so "" silently leaves the gadget
+            // bound -- and every config edit below then fails with EINVAL. echo does the
+            // same thing; the store strips the newline and treats it as unbind.
+            writeFile(UDC_FILE, "\n");
+        } catch (IOException ignored) {
+            // Already unbound; the readback below decides.
+        }
+        var check = "";
+        try {
+            check = readFile(UDC_FILE).trim();
+        } catch (IOException ignored) {
+        }
+        if (!check.isEmpty())
+            throw new IOException(fmt("gadget did not unbind (UDC still %s)", check));
+        try {
+            op.run();
+        } catch (Exception e) {
+            throw e instanceof IOException ? (IOException) e : new IOException(e);
+        } finally {
+            try {
+                writeFile(UDC_FILE, udc);
+            } catch (IOException e) {
+                // EBUSY here means the racing HAL bound it first. If our edits landed before
+                // that bind the gadget is up with them anyway, so only propagate a rebind
+                // failure when the UDC is genuinely left unbound.
+                var now = "";
+                try {
+                    now = readFile(UDC_FILE).trim();
+                } catch (IOException ignored) {
+                }
+                if (now.isEmpty()) throw e;
+            }
+        }
+    }
+
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/CrosvmBackendInstance.java b/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/CrosvmBackendInstance.java
index 1de290898..319521b0d 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/CrosvmBackendInstance.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/CrosvmBackendInstance.java
@@ -27,7 +27,9 @@
 import java.io.File;
 import java.io.IOException;
 import java.util.ArrayList;
+import java.util.LinkedHashMap;
 import java.util.List;
+import java.util.Map;
 
 import cn.classfun.droidvm.daemon.console.FDPipeConsoleStream;
 import cn.classfun.droidvm.daemon.console.InputConsoleStream;
@@ -35,6 +37,7 @@
 import cn.classfun.droidvm.daemon.server.ServerContext;
 import cn.classfun.droidvm.daemon.vm.BootPlan;
 import cn.classfun.droidvm.daemon.vm.SerialPipe;
+import cn.classfun.droidvm.daemon.vm.UsbAcmPool;
 import cn.classfun.droidvm.daemon.vm.VMBackendInstance;
 import cn.classfun.droidvm.daemon.vm.VMStartResult;
 import cn.classfun.droidvm.lib.natives.NativeProcess;
@@ -46,6 +49,9 @@
 import cn.classfun.droidvm.lib.store.vm.GpuBackend;
 import cn.classfun.droidvm.lib.store.vm.LendMthpMode;
 import cn.classfun.droidvm.lib.store.vm.NativeDisplay;
+import cn.classfun.droidvm.lib.store.vm.SerialBackend;
+import cn.classfun.droidvm.lib.store.vm.SerialHardware;
+import cn.classfun.droidvm.lib.store.vm.VMSerialConfig;
 import cn.classfun.droidvm.lib.store.vm.ProtectedVM;
 import cn.classfun.droidvm.lib.store.vm.SharedDirCache;
 import cn.classfun.droidvm.lib.store.vm.SharedDirType;
@@ -57,30 +63,57 @@
 public final class CrosvmBackendInstance extends VMBackendInstance {
     private static final String TAG = "CrosvmBackendInstance";
     private static final String RUN_PATH = pathJoin(DATA_DIR, "run");
-    private SerialPipe uart = null;
     private String controlSocketPath = null;
     /** Set by prepareGpuCgroup() once the cpuset exists and holds cores; else null. */
     private String gpuCgroupPath = null;
     /** Owns the per-VM native-display input sockets (crosvm-facing + UI-facing); see start(). */
     private final NativeDisplayInputBridge inputBridge = new NativeDisplayInputBridge();
-    private final FDPipeConsoleStream uartStream;
     private final InputConsoleStream stdoutStream;
     private final InputConsoleStream stderrStream;
     private final SimpleConsoleStream stdioStream;
 
+    /**
+     * One configured serial port resolved for a run: its config plus whatever host resource
+     * backs it this time. The daemon owns every resource here; the UI only ever sees the
+     * config and the console stream. The pty backend holds nothing -- that is crosvm's own
+     * serial type.
+     */
+    private static final class ResolvedSerial {
+        final VMSerialConfig port;
+        SerialPipe pipe;   // APP_CONSOLE
+        String acmDevPath; // USB_ACM: pool member's ttyGSn that crosvm opens
+
+        ResolvedSerial(@NonNull VMSerialConfig port) {
+            this.port = port;
+        }
+    }
+
+    private final List<ResolvedSerial> resolvedSerials = new ArrayList<>();
+    /** Console streams for APP_CONSOLE ports, keyed by stream name; registered once. */
+    private final Map<String, FDPipeConsoleStream> serialStreams = new LinkedHashMap<>();
+
     public CrosvmBackendInstance(
         @NonNull ServerContext context,
         @NonNull VMConfig config
     ) {
         super(context, config);
-        uartStream = new FDPipeConsoleStream(config, "uart", -1, -1);
         stdoutStream = new InputConsoleStream(config, "stdout", null);
         stderrStream = new InputConsoleStream(config, "stderr", null);
         stdioStream = new SimpleConsoleStream(config, "stdio");
         addStream(stdoutStream);
         addStream(stderrStream);
         addStream(stdioStream);
-        addStream(uartStream);
+        // One text console per app-console serial port. Registered here, like the old fixed
+        // "uart" stream, so the stream list is stable across VM restarts.
+        VMSerialConfig.ensureDefaults(config.item);
+        for (var port : VMSerialConfig.listOf(config.item)) {
+            if (port.getBackend() != SerialBackend.APP_CONSOLE) continue;
+            var name = port.getStreamName();
+            if (serialStreams.containsKey(name)) continue;
+            var stream = new FDPipeConsoleStream(config, name, -1, -1);
+            serialStreams.put(name, stream);
+            addStream(stream);
+        }
     }
 
     @NonNull
@@ -90,15 +123,14 @@ public VMStartResult start() {
         if (!new File(RUN_PATH).mkdirs())
             Log.w(TAG, fmt("Failed to create run directory: %s", RUN_PATH));
         try {
-            uart = new SerialPipe(uartStream, "uart");
-            if (!uart.isReady()) {
-                Log.w(TAG, "UART pipe not ready, discarding");
-                uart.close();
-                uart = null;
-            }
-        } catch (Exception e) {
-            Log.w(TAG, "Failed to create UART pipe", e);
-            uart = null;
+            resolveSerialPorts();
+        } catch (IOException e) {
+            // A refused serial slot fails the whole start; the reason lands on the stdio
+            // console where every other boot failure already goes.
+            Log.e(TAG, "Serial setup refused", e);
+            stdioStream.appendBuffer(fmt("serial setup failed: %s\n", e.getMessage()));
+            closeSerialPorts();
+            return result;
         }
         controlSocketPath = pathJoin(RUN_PATH, fmt("%s.sock", config.getName()));
         deleteFile(controlSocketPath);
@@ -123,22 +155,21 @@ public VMStartResult start() {
         try {
             var builder = new NativeProcess.Builder(args.toArray(new String[0]));
             prepareProcess(builder);
-            if (uart != null) {
-                builder.preserveFd(uart.getOutputRemoteFd());
-                builder.preserveFd(uart.getInputRemoteFd());
+            for (var rs : resolvedSerials) {
+                if (rs.pipe != null) {
+                    builder.preserveFd(rs.pipe.getOutputRemoteFd());
+                    builder.preserveFd(rs.pipe.getInputRemoteFd());
+                }
             }
             var process = builder.start();
-            if (uart != null)
-                uart.closeRemoteFd();
+            for (var rs : resolvedSerials)
+                if (rs.pipe != null) rs.pipe.closeRemoteFd();
             result.setProcess(process);
             stdoutStream.setInputStream(process.getInputStream());
             stderrStream.setInputStream(process.getErrorStream());
         } catch (IOException e) {
             Log.e(TAG, "Failed to start crosvm process", e);
-            if (uart != null) {
-                uart.close();
-                uart = null;
-            }
+            closeSerialPorts();
             controlSocketPath = null;
             inputBridge.release();
             return result;
@@ -146,6 +177,66 @@ public VMStartResult start() {
         return result;
     }
 
+    /**
+     * Turns the config's serial list into live host resources for this run: a daemon pipe pair
+     * per app-console port. A port whose pipes cannot be opened degrades to a sink in
+     * buildSerialCommand rather than failing the start.
+     */
+    private void resolveSerialPorts() throws IOException {
+        closeSerialPorts();
+        for (var port : VMSerialConfig.listOf(config.item)) {
+            var rs = new ResolvedSerial(port);
+            var backend = port.getBackend();
+            if (backend == SerialBackend.APP_CONSOLE) {
+                var stream = serialStreams.get(port.getStreamName());
+                if (stream != null) {
+                    try {
+                        var pipe = new SerialPipe(stream, port.getStreamName());
+                        if (pipe.isReady()) {
+                            rs.pipe = pipe;
+                        } else {
+                            Log.w(TAG, fmt("Serial pipe %s not ready, discarding",
+                                port.getStreamName()));
+                            pipe.close();
+                        }
+                    } catch (Exception e) {
+                        Log.w(TAG, fmt("Failed to create serial pipe %s",
+                            port.getStreamName()), e);
+                    }
+                }
+            } else if (backend == SerialBackend.USB_ACM) {
+                // Attaches the configured slot of the daemon-wide ACM pool; only the pool's
+                // first-time build rebinds USB. A busy or out-of-range slot aborts the start
+                // (SlotUnavailableException propagates): a VM silently landing on another
+                // host COM port -- or stealing one -- is worse than not booting. Only a
+                // broken gadget degrades to a sink.
+                try {
+                    rs.acmDevPath = UsbAcmPool.acquire(port.getUsbSlot(),
+                        acmOwnerToken(port), context.appConfig);
+                } catch (UsbAcmPool.SlotUnavailableException e) {
+                    throw e;
+                } catch (IOException e) {
+                    Log.w(TAG, fmt("USB ACM for %s unavailable; port degrades to sink",
+                        port.getStreamName()), e);
+                }
+            }
+            resolvedSerials.add(rs);
+        }
+    }
+
+    @NonNull
+    private String acmOwnerToken(@NonNull VMSerialConfig port) {
+        return fmt("%s/%s", config.getId(), port.getStreamName());
+    }
+
+    private void closeSerialPorts() {
+        for (var rs : resolvedSerials) {
+            if (rs.pipe != null) rs.pipe.close();
+            if (rs.acmDevPath != null) UsbAcmPool.release(acmOwnerToken(rs.port));
+        }
+        resolvedSerials.clear();
+    }
+
     @NonNull
     private List<String> buildCommand() {
         var item = config.item;
@@ -559,16 +650,112 @@ private boolean isInputBridgeNeeded() {
         }
         args.add("--vnc-server");
         args.add(vncArg.toString());
+    /** One port's crosvm argument pieces, resolved from its backend. */
+    private static final class SerialArg {
+        String type = "sink";
+        String path;
+        String input;
+        boolean interactive;
+    }
+
+    @NonNull
+    private SerialArg serialArgOf(@NonNull ResolvedSerial rs) {
+        var arg = new SerialArg();
+        var port = rs.port;
+        switch (port.getBackend()) {
+            case APP_CONSOLE:
+                if (rs.pipe != null) {
+                    arg.type = "file";
+                    arg.path = fmt("/proc/self/fd/%d", rs.pipe.getOutputRemoteFd());
+                    arg.input = fmt("/proc/self/fd/%d", rs.pipe.getInputRemoteFd());
+                    arg.interactive = true;
+                }
+                break;
+            case PTY:
+                // crosvm's own pty type: it holds the master; the optional path becomes
+                // a symlink to the slave for external consumers.
+                arg.type = "pty";
+                if (!port.getPath().isEmpty()) arg.path = port.getPath();
+                arg.interactive = true;
+                break;
+            case FILE:
+                arg.type = "file";
+                arg.path = port.getPath();
+                break;
+            case UNIX:
+                arg.type = "unix";
+                arg.path = port.getPath();
+                break;
+            case UNIX_STREAM:
+                // crosvm is the connecting side: the consumer must already listen there.
+                arg.type = "unix-stream";
+                arg.path = port.getPath();
+                arg.interactive = true;
+                break;
+            case STDOUT:
+                arg.type = "stdout";
+                break;
+            case SYSLOG:
+                arg.type = "syslog";
+                break;
+            case USB_ACM:
+                // A pool member was attached in resolveSerialPorts; crosvm opens the
+                // ttyGSn raw and non-blocking (drops output when the external host is
+                // not draining, so the guest console never stalls).
+                if (rs.acmDevPath != null) {
+                    arg.type = "dev";
+                    arg.path = rs.acmDevPath;
+                    arg.interactive = true;
+                }
+                break;
+            case SINK:
+            default:
+                break;
+        }
+        return arg;
     }
 
+    /**
+     * One --serial per configured port. Exactly one port carries console+earlycon -- that is
+     * what crosvm's FDT stdout-path (and so EDK2's SPCR, and so Windows EMS/SAC) points at.
+     * The port the user marked as console wins, whatever its backend: a sink console is a
+     * deliberate "discard the guest console". Only configs from before the explicit flag
+     * fall back to the historical rule, the first port that can carry a conversation.
+     */
     private void buildSerialCommand(@NonNull List<String> args) {
-        if (uart == null) return;
-        var serial = fmt(
-            "type=file,hardware=serial,num=1,earlycon,console,path=/proc/self/fd/%d,input=/proc/self/fd/%d",
-            uart.getOutputRemoteFd(), uart.getInputRemoteFd()
-        );
-        args.add("--serial");
-        args.add(serial);
+        var serialArgs = new ArrayList<SerialArg>(resolvedSerials.size());
+        for (var rs : resolvedSerials)
+            serialArgs.add(serialArgOf(rs));
+        var consoleIdx = -1;
+        for (int i = 0; i < resolvedSerials.size(); i++)
+            if (resolvedSerials.get(i).port.isConsole()) {
+                consoleIdx = i;
+                break;
+            }
+        if (consoleIdx < 0)
+            for (int i = 0; i < serialArgs.size(); i++)
+                if (serialArgs.get(i).interactive) {
+                    consoleIdx = i;
+                    break;
+                }
+        for (int i = 0; i < resolvedSerials.size(); i++) {
+            var port = resolvedSerials.get(i).port;
+            var arg = serialArgs.get(i);
+            var serial = new StringBuilder(fmt(
+                "type=%s,hardware=%s,num=%d",
+                arg.type, port.getHardware().getCrosvmName(), port.getNum()
+            ));
+            if (arg.path != null) serial.append(fmt(",path=%s", arg.path));
+            if (arg.input != null) serial.append(fmt(",input=%s", arg.input));
+            if (i == consoleIdx) {
+                serial.append(",console");
+                // earlycon is a UART notion; a virtio-console has no early MMIO registers.
+                if (port.getHardware() != SerialHardware.VIRTIO_CONSOLE)
+                    serial.append(",earlycon");
+            }
+            args.add("--serial");
+            args.add(serial.toString());
+        }
     }
 
     @Nullable
@@ -645,5 +832,6 @@ public void cleanup() {
             controlSocketPath = null;
         }
         inputBridge.release();
+        closeSerialPorts();
     }
 }
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/store/vm/SerialBackend.java b/app/src/main/java/cn/classfun/droidvm/lib/store/vm/SerialBackend.java
new file mode 100644
index 000000000..641e598c2
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/lib/store/vm/SerialBackend.java
@@ -0,0 +1,71 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
+package cn.classfun.droidvm.lib.store.vm;
+
+import androidx.annotation.StringRes;
+
+import cn.classfun.droidvm.R;
+
+import cn.classfun.droidvm.lib.store.enums.StringEnum;
+
+/**
+ * Where a serial port's bytes go on the host -- one per "serial_ports" entry.
+ *
+ * <p>Most map 1:1 onto a crosvm {@code --serial type=}. The exception is {@code APP_CONSOLE}:
+ * crosvm's {@code file} type pointed at a pipe pair the daemon keeps, which is what shows up
+ * as a text console in the app.</p>
+ */
+public enum SerialBackend implements StringEnum {
+    /** Bytes are discarded; input is never delivered. crosvm {@code type=sink}. */
+    SINK(R.string.edit_vm_serial_backend_sink, false, true),
+    /** Wired to a daemon pipe pair and shown as an interactive text console in the app. */
+    APP_CONSOLE(R.string.edit_vm_serial_backend_app_console, false, true),
+    /** Output appended to a file on the host; no input. crosvm {@code type=file}. */
+    FILE(R.string.edit_vm_serial_backend_file, true, true),
+    /** Output datagrams to an existing unix socket; no input. crosvm {@code type=unix}. */
+    UNIX(R.string.edit_vm_serial_backend_unix, true, true),
+    /** Bidirectional unix stream socket (crosvm connects). crosvm {@code type=unix-stream}. */
+    UNIX_STREAM(R.string.edit_vm_serial_backend_unix_stream, true, true),
+    /**
+     * crosvm-opened pty ({@code type=pty}); the path field, when set, becomes a symlink to the
+     * slave so consumers find it at a stable name.
+     */
+    PTY(R.string.edit_vm_serial_backend_pty, true, true),
+    /** crosvm's stdout (ends up in the daemon log). crosvm {@code type=stdout}. */
+    STDOUT(R.string.edit_vm_serial_backend_stdout, false, true),
+    /** Host syslog. crosvm {@code type=syslog}. */
+    SYSLOG(R.string.edit_vm_serial_backend_syslog, false, true),
+    /**
+     * USB gadget CDC-ACM port towards an external host: the daemon grafts an acm function
+     * onto the gadget and crosvm opens the resulting ttyGSn ({@code type=dev}). Binding
+     * re-enumerates USB for a moment, and the port lives on whichever USB connection is
+     * currently active.
+     */
+    USB_ACM(R.string.edit_vm_serial_backend_usb_acm, false, true);
+
+    private final @StringRes int titleId;
+    private final boolean usesPath;
+    private final boolean available;
+
+    SerialBackend(@StringRes int titleId, boolean usesPath, boolean available) {
+        this.titleId = titleId;
+        this.usesPath = usesPath;
+        this.available = available;
+    }
+
+    @Override
+    public int getStringId() {
+        return titleId;
+    }
+
+    /** True when the row shows the path field (mandatory except for {@link #PTY}). */
+    public boolean usesPath() {
+        return usesPath;
+    }
+
+    /** False when nothing on the host can serve this backend yet; the daemon degrades to sink. */
+    public boolean isAvailable() {
+        return available;
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/store/vm/SerialHardware.java b/app/src/main/java/cn/classfun/droidvm/lib/store/vm/SerialHardware.java
new file mode 100644
index 000000000..c9d7e1573
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/lib/store/vm/SerialHardware.java
@@ -0,0 +1,73 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
+package cn.classfun.droidvm.lib.store.vm;
+
+import androidx.annotation.DrawableRes;
+import androidx.annotation.StringRes;
+
+import cn.classfun.droidvm.R;
+
+import cn.classfun.droidvm.lib.store.enums.StringEnum;
+
+/**
+ * Kind of serial port hardware the guest sees -- one entry of a VM's "serial_ports" array names
+ * one of these.
+ *
+ * <p>The four PC-style 16550 COM ports are special: crosvm creates all four unconditionally
+ * (unconfigured ones are sinks), so they exist as fixed rows that can only change backend, and
+ * {@link #isAddable()} is false. The other kinds are standalone devices the user adds.</p>
+ */
+public enum SerialHardware implements StringEnum {
+    /** PC-style 8250/16550 COM port. Always four of them (num 1-4); fixed, not addable. */
+    SERIAL(R.string.edit_vm_serial_hw_serial, R.drawable.ic_serial_port, false, 4),
+    /**
+     * ARM SBSA UART (PL011 subset). The one serial device Windows-on-ARM has an in-box driver
+     * for (SerPL011.sys); crosvm wires a single instance.
+     */
+    SBSA(R.string.edit_vm_serial_hw_sbsa, R.drawable.ic_serial_port, true, 1),
+    /** virtio-console port; needs a virtio driver in the guest (hvcN on Linux). */
+    VIRTIO_CONSOLE(R.string.edit_vm_serial_hw_virtio_console, R.drawable.ic_serial_port, true, 4);
+
+    private final @StringRes int titleId;
+    private final @DrawableRes int iconId;
+    private final boolean addable;
+    private final int maxPorts;
+
+    SerialHardware(@StringRes int titleId, @DrawableRes int iconId, boolean addable, int maxPorts) {
+        this.titleId = titleId;
+        this.iconId = iconId;
+        this.addable = addable;
+        this.maxPorts = maxPorts;
+    }
+
+    @Override
+    public int getStringId() {
+        return titleId;
+    }
+
+    @DrawableRes
+    public int getIconId() {
+        return iconId;
+    }
+
+    /** False for the fixed 16550 quartet, which exists whether configured or not. */
+    public boolean isAddable() {
+        return addable;
+    }
+
+    /** Highest port number (1-based) the backend wires for this hardware. */
+    public int getMaxPorts() {
+        return maxPorts;
+    }
+
+    /** The value crosvm's {@code --serial hardware=} option expects. */
+    public String getCrosvmName() {
+        switch (this) {
+            case SBSA: return "sbsa";
+            case VIRTIO_CONSOLE: return "virtio-console";
+            case SERIAL:
+            default: return "serial";
+        }
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/store/vm/VMSerialConfig.java b/app/src/main/java/cn/classfun/droidvm/lib/store/vm/VMSerialConfig.java
new file mode 100644
index 000000000..5dd8b299c
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/lib/store/vm/VMSerialConfig.java
@@ -0,0 +1,182 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
+package cn.classfun.droidvm.lib.store.vm;
+
+import android.content.Context;
+
+import androidx.annotation.NonNull;
+
+import java.util.ArrayList;
+import java.util.List;
+
+import cn.classfun.droidvm.lib.store.base.DataItem;
+import cn.classfun.droidvm.lib.store.enums.Enums;
+
+import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
+
+/**
+ * Wrapper over one entry of a VM config's "serial_ports" array -- one entry, one guest serial
+ * port.
+ *
+ * <p>Configs from before this array existed carry no entries at all, and their VMs behaved as
+ * "COM1 is the app console, COM2-4 are sinks" (that was hard-coded in the backend). So that is
+ * exactly what {@link #ensureDefaults} materializes: readers must call it (or accept the same
+ * defaults) rather than treating a missing array as "no serial ports".</p>
+ */
+public final class VMSerialConfig {
+    /** Key of the array on the VM config. */
+    public static final String KEY = "serial_ports";
+
+    public final DataItem item;
+
+    public VMSerialConfig(@NonNull DataItem item) {
+        this.item = item;
+    }
+
+    @NonNull
+    public SerialHardware getHardware() {
+        return Enums.optEnum(item, "hardware", SerialHardware.SERIAL);
+    }
+
+    public void setHardware(@NonNull SerialHardware hardware) {
+        item.set("hardware", hardware);
+    }
+
+    /** 1-based port number within its hardware kind (crosvm's {@code num=}). */
+    public int getNum() {
+        return (int) item.optLong("num", 1);
+    }
+
+    public void setNum(int num) {
+        item.set("num", num);
+    }
+
+    @NonNull
+    public SerialBackend getBackend() {
+        return Enums.optEnum(item, "backend", SerialBackend.SINK);
+    }
+
+    public void setBackend(@NonNull SerialBackend backend) {
+        item.set("backend", backend);
+    }
+
+    /** Host path for path-based backends; for PTY, the optional stable symlink to the slave. */
+    @NonNull
+    public String getPath() {
+        var v = item.optString("path", "");
+        return v == null ? "" : v;
+    }
+
+    public void setPath(@NonNull String path) {
+        item.set("path", path);
+    }
+
+    /**
+     * Whether this port is the guest console -- the one the firmware's SPCR points at (which
+     * is what Windows EMS/SAC attaches to) and the one earlycon lands on. Explicit and
+     * single-select in the UI, because "first interactive port wins" made the fixed COM
+     * quartet unbeatable: an SBSA port could never take the console without sinking COM1 and
+     * losing its firmware-log tab. Configs from before this key have it on no port; readers
+     * fall back to the historical first-interactive rule so their behavior is unchanged.
+     */
+    public boolean isConsole() {
+        return item.optBoolean("console", false);
+    }
+
+    public void setConsole(boolean console) {
+        item.set("console", console);
+    }
+
+    /**
+     * Which USB ACM pool slot this port attaches to ({@link SerialBackend#USB_ACM} only).
+     * Part of the config on purpose: first-free allocation would let boot order decide which
+     * host COM port a VM lands on.
+     */
+    public int getUsbSlot() {
+        return (int) item.optLong("usb_slot", 0);
+    }
+
+    public void setUsbSlot(int slot) {
+        item.set("usb_slot", slot);
+    }
+
+    /** True for the built-in 16550 quartet: backend is editable, the row is not removable. */
+    public boolean isFixed() {
+        return item.optBoolean("fixed", false);
+    }
+
+    public void setFixed(boolean fixed) {
+        item.set("fixed", fixed);
+    }
+
+    /**
+     * Console-stream name for this port when its backend is {@link SerialBackend#APP_CONSOLE}.
+     * Doubles as the stable identity the console UI shows, so it is defined here rather than in
+     * the daemon.
+     */
+    @NonNull
+    public String getStreamName() {
+        switch (getHardware()) {
+            case SBSA: return fmt("sbsa%d", getNum());
+            case VIRTIO_CONSOLE: return fmt("vcon%d", getNum());
+            case SERIAL:
+            default: return fmt("serial%d", getNum());
+        }
+    }
+
+    /** Human-facing name of the port itself: "Serial 1", "SBSA 1", ... */
+    @NonNull
+    public String getDisplayName(@NonNull Context ctx) {
+        return fmt("%s %d", getHardware().getDisplayString(ctx), getNum());
+    }
+
+    /** Wraps every entry of {@code config}'s "serial_ports" array, in order. */
+    @NonNull
+    public static List<VMSerialConfig> listOf(@NonNull DataItem config) {
+        var out = new ArrayList<VMSerialConfig>();
+        var arr = config.opt(KEY, (DataItem) null);
+        if (arr == null || !arr.is(DataItem.Type.ARRAY)) return out;
+        for (var iter : arr)
+            out.add(new VMSerialConfig(iter.getValue()));
+        return out;
+    }
+
+    /**
+     * Makes {@code config}'s serial list explicit, preserving what older configs meant.
+     *
+     * <p>A missing/invalid array becomes the historical layout: COM1 as the app console, COM2-4
+     * as sinks. An array that exists but is missing one of the fixed COM ports (a config saved
+     * by a build with fewer of them, or hand-edited) gets the missing ones appended as sinks.
+     * Existing entries are never touched.</p>
+     */
+    public static void ensureDefaults(@NonNull DataItem config) {
+        var arr = config.opt(KEY, (DataItem) null);
+        if (arr == null || !arr.is(DataItem.Type.ARRAY)) {
+            config.set(KEY, DataItem.newArray());
+            arr = config.opt(KEY, (DataItem) null);
+        }
+        var have = new boolean[SerialHardware.SERIAL.getMaxPorts() + 1];
+        var haveConsole = false;
+        for (var iter : arr) {
+            var port = new VMSerialConfig(iter.getValue());
+            var num = port.getNum();
+            if (port.getHardware() == SerialHardware.SERIAL
+                && num >= 1 && num < have.length) have[num] = true;
+            if (port.isConsole()) haveConsole = true;
+        }
+        for (int num = 1; num < have.length; num++) {
+            if (have[num]) continue;
+            var entry = DataItem.newObject();
+            arr.append(entry);
+            var port = new VMSerialConfig(entry);
+            port.setHardware(SerialHardware.SERIAL);
+            port.setNum(num);
+            port.setBackend(num == 1 ? SerialBackend.APP_CONSOLE : SerialBackend.SINK);
+            // The console is single-select: a config that already names one -- a shipped
+            // template whose SBSA carries it -- must not gain a second flag here.
+            if (num == 1 && !haveConsole) port.setConsole(true);
+            port.setFixed(true);
+        }
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/main/settings/MainSettingsFragment.java b/app/src/main/java/cn/classfun/droidvm/ui/main/settings/MainSettingsFragment.java
index e4ecf85d1..092f8817b 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/main/settings/MainSettingsFragment.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/main/settings/MainSettingsFragment.java
@@ -30,7 +30,11 @@
 import androidx.appcompat.app.AppCompatDelegate;
 import androidx.core.os.LocaleListCompat;
 
+import android.widget.RadioGroup;
+
 import com.google.android.material.dialog.MaterialAlertDialogBuilder;
+import com.google.android.material.materialswitch.MaterialSwitch;
+import com.google.android.material.radiobutton.MaterialRadioButton;
 
 import org.json.JSONException;
 import org.json.JSONObject;
@@ -47,6 +51,7 @@
 import cn.classfun.droidvm.R;
 import cn.classfun.droidvm.lib.api.ApiManager;
 import cn.classfun.droidvm.lib.api.Privacy;
+import cn.classfun.droidvm.daemon.vm.UsbAcmPool;
 import cn.classfun.droidvm.lib.daemon.DaemonHelper;
 import cn.classfun.droidvm.lib.daemon.VMEventHandler;
 import cn.classfun.droidvm.lib.data.Language;
@@ -95,6 +100,7 @@ public final class MainSettingsFragment extends MainBaseFragment {
     private SwitchRowWidget itemVMClearLogsBeforeStart;
     private TextRowWidget itemVMOptimizeCompression;
     private SwitchRowWidget itemOptimizeSdcard;
+    private TextRowWidget itemUsbAcmPorts;
     private TextRowWidget itemCpuAffinity;
     private TextRowWidget itemLicense;
     private SwitchRowWidget itemAutoCheckUpdate;
@@ -153,6 +159,7 @@ public void onViewCreated(@NonNull View view, @Nullable Bundle savedInstanceStat
         itemVMClearLogsBeforeStart = view.findViewById(R.id.item_vm_clear_logs_before_start);
         itemVMOptimizeCompression = view.findViewById(R.id.item_vm_optimize_compression);
         itemOptimizeSdcard = view.findViewById(R.id.item_optimize_sdcard);
+        itemUsbAcmPorts = view.findViewById(R.id.item_usb_acm_ports);
         itemCpuAffinity = view.findViewById(R.id.item_cpu_affinity);
         itemLicense = view.findViewById(R.id.item_license);
         itemAutoCheckUpdate = view.findViewById(R.id.item_auto_check_update);
@@ -190,6 +197,8 @@ private void initSettings() {
         bindOnClick(itemCpuAffinity, this::showCpuAffinityDialog);
         refreshCpuAffinitySummary();
         bindOnChecked(itemOptimizeSdcard, KEY_OPTIMIZE_SDCARD, true);
+        bindOnClick(itemUsbAcmPorts, this::showUsbAcmPortsDialog);
+        refreshUsbAcmPortsSummary();
         bindOnChecked(itemAutoCheckUpdate, KEY_AUTO_CHECK_UPDATE, true);
         bindOnClick(itemCheckUpdate, this::checkUpdate);
         bindOnClick(itemPrivacy, this::showPrivacyPolicy);
@@ -266,7 +275,69 @@ private void refreshOptimizeCompressionSummary() {
             optimizeCompressionLabel(getOptimizeCompression(requireContext())));
     }
 
+    /** Whether the USB ACM feature is switched on; VMs with an ACM port refuse to boot
+     *  without it, so the serial editor uses this to warn at configuration time. */
+    public static boolean isUsbAcmEnabled(@NonNull Context context) {
+        var prefs = context.getSharedPreferences(PREFS_NAME, Context.MODE_PRIVATE);
+        return prefs.getBoolean(UsbAcmPool.KEY_USB_ACM_ENABLE, UsbAcmPool.DEFAULT_ENABLE);
+    }
+
+    /**
+     * USB ACM pool size the daemon pre-binds; the same clamp the daemon applies, so the
+     * serial-port slot picker never offers a slot the pool will refuse.
+     */
+    public static int getUsbAcmPorts(@NonNull Context context) {
         var prefs = context.getSharedPreferences(PREFS_NAME, Context.MODE_PRIVATE);
+        var n = prefs.getInt(UsbAcmPool.KEY_USB_ACM_PORTS, UsbAcmPool.DEFAULT_PORTS);
+        return Math.max(1, Math.min(UsbAcmPool.MAX_PORTS, n));
+    }
+
+    private void refreshUsbAcmPortsSummary() {
+        itemUsbAcmPorts.setSubtitle(isUsbAcmEnabled(requireContext())
+            ? getString(R.string.settings_usb_acm_ports_summary, getUsbAcmPorts(requireContext()))
+            : getString(R.string.settings_usb_acm_disabled));
+    }
+
+    // One dialog for the whole feature: the enable toggle on top (the daemon builds or tears
+    // the pool down as soon as the config lands), pool sizes below. The re-enumeration note
+    // sits under the toggle permanently instead of nagging through a second dialog.
+    private void showUsbAcmPortsDialog() {
+        var context = requireContext();
+        var prefs = context.getSharedPreferences(PREFS_NAME, Context.MODE_PRIVATE);
+        var view = getLayoutInflater().inflate(R.layout.dialog_usb_acm_ports, null);
+        MaterialSwitch enable = view.findViewById(R.id.switch_acm_enable);
+        RadioGroup group = view.findViewById(R.id.group_acm_ports);
+        for (int i = 1; i <= UsbAcmPool.MAX_PORTS; i++) {
+            var radio = new MaterialRadioButton(context);
+            radio.setId(i);
+            radio.setText(getString(R.string.settings_usb_acm_ports_summary, i));
+            radio.setMinHeight(48);
+            group.addView(radio);
+        }
+        enable.setChecked(isUsbAcmEnabled(context));
+        group.check(getUsbAcmPorts(context));
+        for (int i = 0; i < group.getChildCount(); i++)
+            group.getChildAt(i).setEnabled(enable.isChecked());
+        enable.setOnCheckedChangeListener((btn, checked) -> {
+            prefs.edit().putBoolean(UsbAcmPool.KEY_USB_ACM_ENABLE, checked).apply();
+            VMEventHandler.sendAppConfig(requireActivity());
+            for (int i = 0; i < group.getChildCount(); i++)
+                group.getChildAt(i).setEnabled(checked);
+            refreshUsbAcmPortsSummary();
+        });
+        group.setOnCheckedChangeListener((g, checkedId) -> {
+            if (checkedId <= 0) return;
+            prefs.edit().putInt(UsbAcmPool.KEY_USB_ACM_PORTS, checkedId).apply();
+            VMEventHandler.sendAppConfig(requireActivity());
+            refreshUsbAcmPortsSummary();
+        });
+        new MaterialAlertDialogBuilder(context)
+            .setTitle(R.string.settings_usb_acm_ports_title)
+            .setView(view)
+            .setPositiveButton(android.R.string.ok, null)
+            .show();
+    }
+
     // Ask + every crosvm-supported compression; the list grows as CROSVM_SUPPORTED does.
     private void showOptimizeCompressionDialog() {
         var values = new ArrayList<String>();
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/console/VMConsoleActivity.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/console/VMConsoleActivity.java
index e062382d4..d339e6b82 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/console/VMConsoleActivity.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/console/VMConsoleActivity.java
@@ -54,7 +54,10 @@ public final class VMConsoleActivity extends AppCompatActivity {
     public static final String EXTRA_VM_NAME = "vm_name";
     public static final String EXTRA_STREAM = "stream";
     public static final String EXTRA_LOGS = "logs";
-    private static final String DEFAULT_STREAM = "uart";
+    // Every backend registers stdio; "uart" only exists on the QEMU backend these days, and
+    // the crosvm serial streams are named per port (serialN/sbsaN/vconN) so none is a safe
+    // universal fallback.
+    private static final String DEFAULT_STREAM = "stdio";
     private final Handler mainHandler = new Handler(Looper.getMainLooper());
     private ActivityResultLauncher<String> saveLogLauncher;
     private TerminalPanelView terminalPanel;
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/console/VMConsoleRouter.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/console/VMConsoleRouter.java
index b23567a87..8ba60ac98 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/console/VMConsoleRouter.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/console/VMConsoleRouter.java
@@ -46,7 +46,8 @@ public static void openDefault(@NonNull Context ctx, @NonNull UUID vmId,
             openVnc(ctx, vmId, config);
             return;
         }
-        // Serial console: ask the daemon which streams exist, prefer uart then stdio.
+        // Serial console: ask the daemon which streams exist. Prefer a real guest serial port
+        // (the app-console serial streams, or QEMU's legacy "uart") over the process stdio.
         DaemonConnection.getInstance().buildRequest("vm_console_list")
             .put("vm_id", vmId.toString())
             .onResponse(resp -> {
@@ -59,7 +60,13 @@ public static void openDefault(@NonNull Context ctx, @NonNull UUID vmId,
                         if (!n.isEmpty()) names.add(n);
                     }
                     if (names.contains("uart")) stream = "uart";
-                    else if (names.contains("stdio")) stream = "stdio";
+                    if (stream == null)
+                        for (var n : names)
+                            if (n.matches("(serial|sbsa|vcon)[0-9]+")) {
+                                stream = n;
+                                break;
+                            }
+                    if (stream == null && names.contains("stdio")) stream = "stdio";
                 }
                 if (stream == null) return;
                 final var s = stream;
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/peripheral/VMEditPeripheralTab.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/peripheral/VMEditPeripheralTab.java
index 0dcc70a53..4071020c0 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/peripheral/VMEditPeripheralTab.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/peripheral/VMEditPeripheralTab.java
@@ -1,9 +1,19 @@
+import cn.classfun.droidvm.lib.store.vm.SerialBackend;
+import cn.classfun.droidvm.lib.store.vm.VMSerialConfig;
+    private CardItemListView listSerialPorts;
+        listSerialPorts = view.findViewById(R.id.list_serial_ports);
         adapter.setMicPermissionGate(parent::ensureRecordAudioThen);
+        listSerialPorts.setAdapter(VMSerialEditAdapter.class);
         if (!parent.editMode) {
             var peripherals = DataItem.newArray();
             peripherals.append(VMPeripheralConfig.createDefaultVirtioSound().item);
             listPeripherals.setItems(peripherals);
         }
+        // A brand-new VM never goes through loadConfig, but its serial list is not empty:
+        // the fixed COM quartet exists either way, so show it (COM1 as the app console).
+        var scratch = DataItem.newObject();
+        VMSerialConfig.ensureDefaults(scratch);
+        listSerialPorts.setItems(scratch.opt(VMSerialConfig.KEY, DataItem.newArray()));
     /** Whether the unsaved peripheral rows give the guest a host microphone. */
     public boolean hasMicrophone() {
         for (var peripheral : VMPeripheralConfig.listOf(wrap()))
@@ -12,3 +22,23 @@ public boolean hasMicrophone() {
         return false;
     }
 
+        // VMConfig's constructor already materialized the fixed quartet for configs from
+        // before "serial_ports"; ensureDefaults here only covers configs built by hand.
+        VMSerialConfig.ensureDefaults(config.item);
+        listSerialPorts.setItems(config.item.opt(VMSerialConfig.KEY, DataItem.newArray()));
+        // A path-based serial backend without a path has nowhere to put the bytes. PTY is the
+        // exception: its path is an optional convenience symlink. Two USB ACM ports on one
+        // slot would be a guaranteed busy-refusal at boot, so it fails here instead.
+        var usbSlots = new ArrayList<Integer>();
+        for (var iter : requireNonNull(listSerialPorts.getItems())) {
+            var port = new VMSerialConfig(iter.getValue());
+            var backend = port.getBackend();
+            if (backend.usesPath() && backend != SerialBackend.PTY && port.getPath().isEmpty())
+                return showValidateFailed(R.string.edit_vm_serial_path_required);
+            if (backend == SerialBackend.USB_ACM) {
+                if (usbSlots.contains(port.getUsbSlot()))
+                    return showValidateFailed(R.string.edit_vm_serial_slot_duplicate);
+                usbSlots.add(port.getUsbSlot());
+            }
+        }
+        config.item.set(VMSerialConfig.KEY, requireNonNull(listSerialPorts.getItems()));
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/peripheral/VMSerialEditAdapter.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/peripheral/VMSerialEditAdapter.java
new file mode 100644
index 000000000..3d74cd97a
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/peripheral/VMSerialEditAdapter.java
@@ -0,0 +1,247 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
+package cn.classfun.droidvm.ui.vm.edit.peripheral;
+
+import static android.widget.Toast.LENGTH_SHORT;
+import static android.widget.Toast.makeText;
+import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
+
+import android.annotation.SuppressLint;
+import android.content.Context;
+import android.text.Editable;
+import android.view.Menu;
+import android.view.View;
+import android.widget.PopupMenu;
+
+import androidx.annotation.NonNull;
+import androidx.recyclerview.widget.RecyclerView;
+
+import java.util.ArrayList;
+
+import cn.classfun.droidvm.R;
+import cn.classfun.droidvm.lib.store.base.DataItem;
+import cn.classfun.droidvm.lib.store.vm.SerialBackend;
+import cn.classfun.droidvm.lib.store.vm.SerialHardware;
+import cn.classfun.droidvm.lib.store.vm.VMSerialConfig;
+import cn.classfun.droidvm.lib.ui.MenuDialogBuilder;
+import cn.classfun.droidvm.lib.ui.SimpleTextWatcher;
+import cn.classfun.droidvm.ui.main.settings.MainSettingsFragment;
+import cn.classfun.droidvm.ui.widgets.container.CardItemAdapter;
+
+/**
+ * The serial-port list's rows. The fixed 16550 quartet is always present (crosvm creates those
+ * ports whether asked to or not, so hiding them would misrepresent the guest) and can only
+ * change backend; added rows -- SBSA, virtio-console -- carry a delete button. The + button asks
+ * for the hardware kind first, because the kind decides how many can exist and what the row
+ * shows.
+ */
+public final class VMSerialEditAdapter extends CardItemAdapter<VMSerialEditViewHolder> {
+    // True while onBindViewHolder is programmatically setting view values. The backend picker
+    // fires its value-changed listener from setSelectedItem() inside configure(), and on a
+    // recycled row that hits the PREVIOUS bind's listener -- which calls notifyItemChanged and
+    // starts an every-frame rebind loop (flickering row, untypeable path field, and finally
+    // "parameter must be a descendant of this view" when layout chases the replaced focused
+    // view). Same idiom as VMDiskEditAdapter.
+    private boolean updatingViews = false;
+
+    public VMSerialEditAdapter(@NonNull Context context) {
+        super(context);
+    }
+
+    @Override
+    public void onAddRequested(@NonNull View anchor) {
+        var kinds = new ArrayList<SerialHardware>();
+        for (var hw : SerialHardware.values()) {
+            if (!hw.isAddable()) continue;
+            if (countOf(hw) >= hw.getMaxPorts()) continue;
+            kinds.add(hw);
+        }
+        if (kinds.isEmpty()) {
+            makeText(context, R.string.edit_vm_serial_full, LENGTH_SHORT).show();
+            return;
+        }
+        var menu = new PopupMenu(context, null).getMenu();
+        for (int i = 0; i < kinds.size(); i++) {
+            var hw = kinds.get(i);
+            var item = menu.add(Menu.NONE, hw.ordinal(), i, hw.getDisplayString(context));
+            item.setIcon(hw.getIconId());
+        }
+        new MenuDialogBuilder(context)
+            .setTitle(R.string.edit_vm_serial_add_title)
+            .setMenu(menu)
+            .setListener(item -> {
+                addPort(SerialHardware.values()[item.getItemId()]);
+                return true;
+            })
+            .show();
+    }
+
+    private int countOf(@NonNull SerialHardware hw) {
+        int n = 0;
+        for (var iter : items)
+            if (new VMSerialConfig(iter.getValue()).getHardware() == hw) n++;
+        return n;
+    }
+
+    /** Smallest unused 1-based port number for {@code hw}, so removals leave no permanent gap. */
+    private int nextNum(@NonNull SerialHardware hw) {
+        var used = new boolean[hw.getMaxPorts() + 1];
+        for (var iter : items) {
+            var port = new VMSerialConfig(iter.getValue());
+            if (port.getHardware() != hw) continue;
+            var num = port.getNum();
+            if (num >= 1 && num < used.length) used[num] = true;
+        }
+        for (int num = 1; num < used.length; num++)
+            if (!used[num]) return num;
+        return hw.getMaxPorts();
+    }
+
+    private void addPort(@NonNull SerialHardware hw) {
+        var entry = DataItem.newObject();
+        var port = new VMSerialConfig(entry);
+        port.setHardware(hw);
+        port.setNum(nextNum(hw));
+        // A port someone bothered to add is a port they want to talk to.
+        port.setBackend(SerialBackend.APP_CONSOLE);
+        appendItem(entry);
+    }
+
+    @NonNull
+    @Override
+    protected VMSerialEditViewHolder createViewHolderInstance(@NonNull View view) {
+        return new VMSerialEditViewHolder(view);
+    }
+
+    @Override
+    protected int getLayoutRes() {
+        return R.layout.item_vm_serial_edit;
+    }
+
+    @Override
+    public void onBindViewHolder(@NonNull VMSerialEditViewHolder holder, int position) {
+        holder.unbindWatchers();
+        var port = new VMSerialConfig(items.get(position));
+        var backend = port.getBackend();
+
+        updatingViews = true;
+        try {
+            // The suffix follows the radio so its meaning is self-explaining: the checked
+            // port is the one SPCR points at.
+            holder.tvTitle.setText(port.isConsole()
+                ? fmt("%s (SPCR)", port.getDisplayName(context))
+                : port.getDisplayName(context));
+            holder.btnDelete.setVisibility(port.isFixed() ? View.GONE : View.VISIBLE);
+            holder.btnBackend.configure(SerialBackend.class, backend);
+
+            var showPath = backend.usesPath();
+            holder.tilPath.setVisibility(showPath ? View.VISIBLE : View.GONE);
+            if (showPath) {
+                holder.tilPath.setHint(context.getString(backend == SerialBackend.PTY
+                    ? R.string.edit_vm_serial_path_pty_hint : R.string.edit_vm_serial_path));
+                holder.etPath.setText(port.getPath());
+            }
+
+            // No baud/settings group: every backend of a virtual wire ignores line speed, so
+            // the row does not pretend otherwise. USB ACM does carry one choice -- which pool
+            // slot to attach, so the host COM a VM lands on never depends on boot order.
+            var usb = backend == SerialBackend.USB_ACM;
+            holder.btnUsbSlot.setVisibility(usb ? View.VISIBLE : View.GONE);
+            if (usb)
+                holder.btnUsbSlot.setText(fmt("%s: %s",
+                    context.getString(R.string.edit_vm_serial_usb_slot),
+                    context.getString(R.string.edit_vm_serial_usb_slot_item,
+                        port.getUsbSlot())));
+
+            // Single-select across every row: this is the port SPCR/stdout-path names, and
+            // there is exactly one of those per machine. Any backend qualifies -- a sink
+            // console is a deliberate "discard the guest console" and is the user's call.
+            holder.radioConsole.setChecked(port.isConsole());
+        } finally {
+            updatingViews = false;
+        }
+
+        holder.radioConsole.setOnClickListener(v -> {
+            if (updatingViews) return;
+            int pos = holder.getBindingAdapterPosition();
+            if (pos == RecyclerView.NO_POSITION) return;
+            for (int i = 0; i < items.size(); i++)
+                new VMSerialConfig(items.get(i)).setConsole(i == pos);
+            notifyDataSetChangedSafe();
+        });
+
+        holder.btnDelete.setOnClickListener(v -> {
+            int pos = holder.getBindingAdapterPosition();
+            if (pos != RecyclerView.NO_POSITION)
+                removeItem(pos);
+        });
+        holder.btnBackend.setOnValueChangedListener((oldVal, newVal) -> {
+            if (updatingViews) return;
+            int pos = holder.getBindingAdapterPosition();
+            if (pos == RecyclerView.NO_POSITION) return;
+            new VMSerialConfig(items.get(pos)).setBackend((SerialBackend) newVal);
+            // Configuring is allowed either way, but a VM with an ACM port refuses to boot
+            // until the feature is switched on -- say so now, not at boot time.
+            if (newVal == SerialBackend.USB_ACM
+                && !MainSettingsFragment.isUsbAcmEnabled(context))
+                makeText(context, R.string.edit_vm_serial_usb_disabled_hint, LENGTH_SHORT)
+                    .show();
+            notifyItemChangedSafe(pos);
+        });
+        if (backend.usesPath()) {
+            holder.pathWatcher = new SimpleTextWatcher() {
+                @Override
+                public void afterTextChanged(Editable s) {
+                    if (updatingViews) return;
+                    int pos = holder.getBindingAdapterPosition();
+                    if (pos != RecyclerView.NO_POSITION)
+                        new VMSerialConfig(items.get(pos)).setPath(s.toString());
+                }
+            };
+            holder.etPath.addTextChangedListener(holder.pathWatcher);
+        }
+        if (backend == SerialBackend.USB_ACM) {
+            holder.btnUsbSlot.setOnClickListener(v -> {
+                int pos = holder.getBindingAdapterPosition();
+                if (pos != RecyclerView.NO_POSITION)
+                    showUsbSlotPicker(pos);
+            });
+        }
+    }
+
+    /** Slots come from the app-wide pool-size setting; each is one stable host COM port. */
+    private void showUsbSlotPicker(int position) {
+        var slots = MainSettingsFragment.getUsbAcmPorts(context);
+        var menu = new PopupMenu(context, null).getMenu();
+        for (int i = 0; i < slots; i++)
+            menu.add(Menu.NONE, i, i,
+                context.getString(R.string.edit_vm_serial_usb_slot_item, i));
+        new MenuDialogBuilder(context)
+            .setTitle(R.string.edit_vm_serial_usb_slot)
+            .setMenu(menu)
+            .setListener(item -> {
+                new VMSerialConfig(items.get(position)).setUsbSlot(item.getItemId());
+                notifyItemChangedSafe(position);
+                return true;
+            })
+            .show();
+    }
+
+    private void notifyItemChangedSafe(int position) {
+        try {
+            notifyItemChanged(position);
+        } catch (Exception ignored) {
+            mainHandler.post(() -> notifyItemChanged(position));
+        }
+    }
+
+    @SuppressLint("NotifyDataSetChanged")
+    private void notifyDataSetChangedSafe() {
+        try {
+            notifyDataSetChanged();
+        } catch (Exception ignored) {
+            mainHandler.post(this::notifyDataSetChanged);
+        }
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/peripheral/VMSerialEditViewHolder.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/peripheral/VMSerialEditViewHolder.java
new file mode 100644
index 000000000..15bcdc739
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/peripheral/VMSerialEditViewHolder.java
@@ -0,0 +1,49 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
+package cn.classfun.droidvm.ui.vm.edit.peripheral;
+
+import android.text.TextWatcher;
+import android.view.View;
+import android.widget.ImageButton;
+import android.widget.TextView;
+
+import androidx.annotation.NonNull;
+import androidx.recyclerview.widget.RecyclerView;
+
+import com.google.android.material.button.MaterialButton;
+import com.google.android.material.radiobutton.MaterialRadioButton;
+import com.google.android.material.textfield.TextInputEditText;
+import com.google.android.material.textfield.TextInputLayout;
+
+import cn.classfun.droidvm.R;
+import cn.classfun.droidvm.ui.widgets.tools.PickerButtonWidget;
+
+public final class VMSerialEditViewHolder extends RecyclerView.ViewHolder {
+    final TextView tvTitle;
+    final ImageButton btnDelete;
+    final PickerButtonWidget btnBackend;
+    final TextInputLayout tilPath;
+    final TextInputEditText etPath;
+    final MaterialRadioButton radioConsole;
+    final MaterialButton btnUsbSlot;
+    TextWatcher pathWatcher;
+
+    VMSerialEditViewHolder(@NonNull View itemView) {
+        super(itemView);
+        tvTitle = itemView.findViewById(R.id.tv_serial_title);
+        btnDelete = itemView.findViewById(R.id.btn_serial_delete);
+        btnBackend = itemView.findViewById(R.id.btn_serial_backend);
+        tilPath = itemView.findViewById(R.id.til_serial_path);
+        etPath = itemView.findViewById(R.id.et_serial_path);
+        radioConsole = itemView.findViewById(R.id.radio_serial_console);
+        btnUsbSlot = itemView.findViewById(R.id.btn_serial_usb_slot);
+    }
+
+    void unbindWatchers() {
+        if (pathWatcher != null) {
+            etPath.removeTextChangedListener(pathWatcher);
+            pathWatcher = null;
+        }
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/info/ConsoleButton.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/info/ConsoleButton.java
index ff2c28684..1df7105ca 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/info/ConsoleButton.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/info/ConsoleButton.java
@@ -4,27 +4,39 @@
 package cn.classfun.droidvm.ui.vm.info;
 
 import static android.widget.Toast.LENGTH_SHORT;
+import static cn.classfun.droidvm.lib.store.enums.Enums.optEnum;
+import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
 
+import android.content.Context;
 import android.content.DialogInterface;
 import android.os.Handler;
 import android.os.Looper;
 import android.util.Log;
+import android.view.LayoutInflater;
+import android.view.View;
+import android.view.ViewGroup;
+import android.widget.BaseAdapter;
+import android.widget.ImageView;
+import android.widget.TextView;
 import android.widget.Toast;
 
 import androidx.annotation.NonNull;
 import androidx.annotation.Nullable;
+import androidx.appcompat.app.AlertDialog;
 
 import com.google.android.material.dialog.MaterialAlertDialogBuilder;
 
 import org.json.JSONArray;
 
 import java.util.ArrayList;
+import java.util.List;
+import java.util.function.Consumer;
 
 import cn.classfun.droidvm.R;
 import cn.classfun.droidvm.lib.daemon.DaemonConnection;
 import cn.classfun.droidvm.lib.store.base.DataItem;
+import cn.classfun.droidvm.lib.store.vm.VMBackend;
 import cn.classfun.droidvm.lib.store.vm.VMState;
-import cn.classfun.droidvm.lib.ui.IconItemAdapter;
 import cn.classfun.droidvm.ui.vm.console.VMConsoleRouter;
 
 public final class ConsoleButton {
@@ -59,46 +71,156 @@ void openDefaultConsole() {
             parent.currentState != VMState.STOPPED);
     }
 
+    private static final class Row {
+        final String title;
+        final String name;
+        final int icon;
+        final boolean stdio;
+
+        Row(String title, String name, int icon, boolean stdio) {
+            this.title = title;
+            this.name = name;
+            this.icon = icon;
+            this.stdio = stdio;
+        }
+    }
+
+    /**
+     * The chooser's list. Two row shapes: the plain icon+label row, and the stdio row whose
+     * trailing stdout/stderr buttons open the split views the row itself folds together.
+     */
+    private static final class ChooserAdapter extends BaseAdapter {
+        private final Context context;
+        private final List<Row> rows;
+        private final Consumer<String> onSubStream;
+
+        ChooserAdapter(Context context, List<Row> rows, Consumer<String> onSubStream) {
+            this.context = context;
+            this.rows = rows;
+            this.onSubStream = onSubStream;
+        }
+
+        @Override
+        public int getCount() {
+            return rows.size();
+        }
+
+        @Override
+        public Object getItem(int position) {
+            return rows.get(position);
+        }
+
+        @Override
+        public long getItemId(int position) {
+            return position;
+        }
+
+        @Override
+        public int getViewTypeCount() {
+            return 2;
+        }
+
+        @Override
+        public int getItemViewType(int position) {
+            return rows.get(position).stdio ? 1 : 0;
+        }
+
+        @Override
+        public View getView(int position, View convertView, ViewGroup parent) {
+            var row = rows.get(position);
+            if (convertView == null) {
+                convertView = LayoutInflater.from(context).inflate(
+                    row.stdio ? R.layout.item_console_stdio : R.layout.item_icon_text,
+                    parent, false);
+            }
+            ImageView iv = convertView.findViewById(R.id.iv_icon);
+            TextView tv = convertView.findViewById(R.id.tv_label);
+            iv.setImageResource(row.icon);
+            tv.setText(row.title);
+            if (row.stdio) {
+                convertView.<View>findViewById(R.id.btn_stdout)
+                    .setOnClickListener(v -> onSubStream.accept("stdout"));
+                convertView.<View>findViewById(R.id.btn_stderr)
+                    .setOnClickListener(v -> onSubStream.accept("stderr"));
+            }
+            return convertView;
+        }
+    }
+
+    /**
+     * Pretty title for a text-console stream. Names minted by the serial-port config
+     * (serialN/sbsaN/vconN) are shown the way the editor names the port; anything else --
+     * QEMU's legacy "uart" -- shows its raw name, as before.
+     *
+     * <p>stdio is the exception, and is named after the backend process instead: it is
+     * not a console the guest ever writes to, it is crosvm's or QEMU's own stdout and
+     * stderr. Calling it a text console promised a guest terminal that isn't there.
+     */
+    @NonNull
+    private String streamTitle(@NonNull String name) {
+        if (name.equals("stdio"))
+            return parent.getString(R.string.vm_info_console_stdio_select,
+                parent.getString(backend().getStringId()));
+        var pretty = name;
+        if (name.matches("serial[0-9]+"))
+            pretty = fmt("%s %s",
+                parent.getString(R.string.edit_vm_serial_hw_serial), name.substring(6));
+        else if (name.matches("sbsa[0-9]+"))
+            pretty = fmt("%s %s",
+                parent.getString(R.string.edit_vm_serial_hw_sbsa), name.substring(4));
+        else if (name.matches("vcon[0-9]+"))
+            pretty = fmt("%s %s",
+                parent.getString(R.string.edit_vm_serial_hw_virtio_console), name.substring(4));
+        return parent.getString(R.string.vm_info_console_text_select, pretty);
+    }
+
+    /** The configured backend, defaulting the way the rest of the app defaults it. */
+    @NonNull
+    private VMBackend backend() {
+        return optEnum(parent.config == null ? DataItem.newObject() : parent.config.item,
+            "backend", VMBackend.DEFAULT);
+    }
+
     private void buildConsoleChooserDialog(@Nullable JSONArray streams) {
         if (parent.isFinishing()) return;
-        var titles = new ArrayList<String>();
-        var names = new ArrayList<String>();
-        var icons = new ArrayList<Integer>();
+        var rows = new ArrayList<Row>();
+        var sawStd = false;
         if (streams != null) for (int i = 0; i < streams.length(); i++) {
             var name = streams.optString(i, "");
             if (name.isEmpty()) continue;
-            names.add(name);
-            titles.add(parent.getString(R.string.vm_info_console_text_select, name));
-            icons.add(R.drawable.ic_serial_port);
+            // stdout/stderr fold into the stdio row's side buttons instead of rows of their own.
+            if (name.equals("stdout") || name.equals("stderr")) {
+                sawStd = true;
+                continue;
+            }
+            if (name.equals("stdio")) {
+                rows.add(new Row(streamTitle(name), name, R.drawable.ic_serial_port, true));
+                continue;
+            }
+            rows.add(new Row(streamTitle(name), name, R.drawable.ic_serial_port, false));
         }
         var running = parent.currentState != VMState.STOPPED;
         var cfg = parent.config == null ? DataItem.newObject() : parent.config.item;
         var hasVnc = running && cfg.optBoolean("vnc_enabled", false);
         var hasNative = running && cfg.optBoolean("native_display_enabled", false);
         if (hasNative) {
-            names.add("native");
-            titles.add(parent.getString(R.string.vm_info_console_native_select));
-            icons.add(R.drawable.ic_monitor);
         }
         if (hasVnc) {
-            names.add("vnc");
-            titles.add(parent.getString(R.string.vm_info_console_vnc_select));
-            icons.add(R.drawable.ic_remote_desktop);
-            names.add("vnc-ext");
-            titles.add(parent.getString(R.string.vm_info_console_vnc_ext_select));
-            icons.add(R.drawable.ic_monitor);
         }
-        if (titles.isEmpty()) {
+        if (rows.isEmpty() && !sawStd) {
             Toast.makeText(parent, R.string.vm_info_console_not_found, LENGTH_SHORT).show();
             return;
         }
-        if (names.size() == 1 && !hasVnc && !hasNative) {
-            openConsole(names.get(0));
+            openConsole(rows.get(0).name);
             return;
         }
-        var adapter = IconItemAdapter.create(parent, titles, icons);
+        var dialogHolder = new AlertDialog[1];
+        Consumer<String> onSubStream = stream -> {
+            if (dialogHolder[0] != null) dialogHolder[0].dismiss();
+            openConsole(stream);
+        };
+        var adapter = new ChooserAdapter(parent, rows, onSubStream);
         DialogInterface.OnClickListener callback = (dialog, which) -> {
-            var selected = names.get(which);
             if (selected.equals("native")) {
                 openNativeDisplay();
             } else if (selected.equals("vnc")) {
@@ -109,7 +231,7 @@ private void buildConsoleChooserDialog(@Nullable JSONArray streams) {
                 openConsole(selected);
             }
         };
-        new MaterialAlertDialogBuilder(parent)
+        dialogHolder[0] = new MaterialAlertDialogBuilder(parent)
             .setTitle(R.string.vm_info_console_chooser_title)
             .setAdapter(adapter, callback)
             .show();
diff --git a/app/src/main/res/layout/dialog_usb_acm_ports.xml b/app/src/main/res/layout/dialog_usb_acm_ports.xml
new file mode 100644
index 000000000..5245edbf5
--- /dev/null
+++ b/app/src/main/res/layout/dialog_usb_acm_ports.xml
@@ -0,0 +1,47 @@
+<?xml version="1.0" encoding="utf-8"?>
+<LinearLayout xmlns:android="http://schemas.android.com/apk/res/android"
+    android:layout_width="match_parent"
+    android:layout_height="wrap_content"
+    android:orientation="vertical"
+    android:paddingStart="24dp"
+    android:paddingTop="8dp"
+    android:paddingEnd="24dp">
+
+    <LinearLayout
+        android:layout_width="match_parent"
+        android:layout_height="wrap_content"
+        android:gravity="center_vertical"
+        android:minHeight="48dp"
+        android:orientation="horizontal">
+
+        <TextView
+            android:layout_width="0dp"
+            android:layout_height="wrap_content"
+            android:layout_weight="1"
+            android:labelFor="@id/switch_acm_enable"
+            android:text="@string/settings_usb_acm_enable"
+            android:textColor="?attr/colorOnSurface"
+            android:textSize="16sp" />
+
+        <com.google.android.material.materialswitch.MaterialSwitch
+            android:id="@+id/switch_acm_enable"
+            android:layout_width="wrap_content"
+            android:layout_height="wrap_content" />
+
+    </LinearLayout>
+
+    <TextView
+        android:layout_width="match_parent"
+        android:layout_height="wrap_content"
+        android:text="@string/settings_usb_acm_reenum_note"
+        android:textColor="?attr/colorOnSurfaceVariant"
+        android:textSize="12sp" />
+
+    <RadioGroup
+        android:id="@+id/group_acm_ports"
+        android:layout_width="match_parent"
+        android:layout_height="wrap_content"
+        android:layout_marginTop="8dp"
+        android:orientation="vertical" />
+
+</LinearLayout>
diff --git a/app/src/main/res/layout/fragment_main_settings.xml b/app/src/main/res/layout/fragment_main_settings.xml
index bfccba464..5427d6097 100644
--- a/app/src/main/res/layout/fragment_main_settings.xml
+++ b/app/src/main/res/layout/fragment_main_settings.xml
@@ -79,6 +79,12 @@
                     android:subtitle="@string/settings_optimize_compression_ask"
                     android:text="@string/settings_optimize_compression_title" />
 
+                <cn.classfun.droidvm.ui.widgets.row.TextRowWidget
+                    android:id="@+id/item_usb_acm_ports"
+                    android:layout_width="match_parent"
+                    android:layout_height="wrap_content"
+                    android:icon="@drawable/ic_serial_port"
+                    android:text="@string/settings_usb_acm_ports_title" />
 
                 <cn.classfun.droidvm.ui.widgets.row.SwitchRowWidget
                     android:id="@+id/item_optimize_sdcard"
diff --git a/app/src/main/res/layout/item_console_stdio.xml b/app/src/main/res/layout/item_console_stdio.xml
new file mode 100644
index 000000000..5184d9b0a
--- /dev/null
+++ b/app/src/main/res/layout/item_console_stdio.xml
@@ -0,0 +1,53 @@
+<?xml version="1.0" encoding="utf-8"?>
+<LinearLayout xmlns:android="http://schemas.android.com/apk/res/android"
+    xmlns:app="http://schemas.android.com/apk/res-auto"
+    xmlns:tools="http://schemas.android.com/tools"
+    android:layout_width="match_parent"
+    android:layout_height="wrap_content"
+    android:gravity="center_vertical"
+    android:minHeight="48dp"
+    android:orientation="horizontal"
+    android:paddingStart="24dp"
+    android:paddingTop="4dp"
+    android:paddingEnd="12dp"
+    android:paddingBottom="4dp"
+    tools:ignore="UseCompoundDrawables">
+
+    <ImageView
+        android:id="@+id/iv_icon"
+        android:layout_width="24dp"
+        android:layout_height="24dp"
+        android:contentDescription="@null"
+        android:src="@drawable/ic_serial_port"
+        app:tint="?attr/colorOnSurfaceVariant" />
+
+    <TextView
+        android:id="@+id/tv_label"
+        android:layout_width="0dp"
+        android:layout_height="wrap_content"
+        android:layout_marginStart="16dp"
+        android:layout_weight="1"
+        android:textColor="?attr/colorOnSurface"
+        android:textSize="16sp" />
+
+    <com.google.android.material.button.MaterialButton
+        android:id="@+id/btn_stdout"
+        style="@style/Widget.Material3.Button.TextButton"
+        android:layout_width="wrap_content"
+        android:layout_height="40dp"
+        android:focusable="false"
+        android:minWidth="0dp"
+        android:text="@string/vm_info_console_stdout_short"
+        android:textSize="12sp" />
+
+    <com.google.android.material.button.MaterialButton
+        android:id="@+id/btn_stderr"
+        style="@style/Widget.Material3.Button.TextButton"
+        android:layout_width="wrap_content"
+        android:layout_height="40dp"
+        android:focusable="false"
+        android:minWidth="0dp"
+        android:text="@string/vm_info_console_stderr_short"
+        android:textSize="12sp" />
+
+</LinearLayout>
diff --git a/app/src/main/res/layout/item_vm_serial_edit.xml b/app/src/main/res/layout/item_vm_serial_edit.xml
new file mode 100644
index 000000000..3b6040889
--- /dev/null
+++ b/app/src/main/res/layout/item_vm_serial_edit.xml
@@ -0,0 +1,102 @@
+<?xml version="1.0" encoding="utf-8"?>
+<com.google.android.material.card.MaterialCardView xmlns:android="http://schemas.android.com/apk/res/android"
+    xmlns:app="http://schemas.android.com/apk/res-auto"
+    xmlns:tools="http://schemas.android.com/tools"
+    android:layout_width="match_parent"
+    android:layout_height="wrap_content"
+    android:layout_marginStart="16dp"
+    android:layout_marginEnd="16dp"
+    android:layout_marginBottom="8dp"
+    app:cardCornerRadius="12dp"
+    app:cardElevation="0dp"
+    app:strokeColor="?attr/colorOutlineVariant"
+    app:strokeWidth="1dp">
+
+    <LinearLayout
+        android:layout_width="match_parent"
+        android:layout_height="wrap_content"
+        android:orientation="vertical"
+        android:padding="12dp">
+
+        <LinearLayout
+            android:layout_width="match_parent"
+            android:layout_height="wrap_content"
+            android:gravity="center_vertical"
+            android:orientation="horizontal">
+
+            <ImageView
+                android:layout_width="24dp"
+                android:layout_height="24dp"
+                android:contentDescription="@string/create_vm_category_serial"
+                android:src="@drawable/ic_serial_port"
+                app:tint="?attr/colorOnSurfaceVariant" />
+
+            <com.google.android.material.radiobutton.MaterialRadioButton
+                android:id="@+id/radio_serial_console"
+                android:layout_width="wrap_content"
+                android:layout_height="wrap_content"
+                android:layout_marginStart="4dp"
+                android:contentDescription="@string/edit_vm_serial_console"
+                android:minWidth="0dp"
+                android:minHeight="0dp"
+                tools:ignore="TouchTargetSizeCheck" />
+
+            <TextView
+                android:id="@+id/tv_serial_title"
+                android:layout_width="0dp"
+                android:layout_height="wrap_content"
+                android:layout_marginStart="4dp"
+                android:layout_weight="1"
+                android:textAppearance="?attr/textAppearanceTitleSmall"
+                tools:text="Serial 1 (SPCR)" />
+
+            <cn.classfun.droidvm.ui.widgets.tools.PickerButtonWidget
+                android:id="@+id/btn_serial_backend"
+                android:layout_width="wrap_content"
+                android:layout_height="48dp"
+                android:title="@string/edit_vm_serial_backend"
+                app:pb_mode="dialog" />
+
+            <ImageButton
+                android:id="@+id/btn_serial_delete"
+                android:layout_width="36dp"
+                android:layout_height="36dp"
+                android:layout_marginStart="4dp"
+                android:background="?attr/selectableItemBackgroundBorderless"
+                android:contentDescription="@string/edit_vm_serial_delete"
+                android:src="@drawable/ic_delete"
+                app:tint="?attr/colorError"
+                tools:ignore="TouchTargetSizeCheck" />
+
+        </LinearLayout>
+
+        <com.google.android.material.textfield.TextInputLayout
+            android:id="@+id/til_serial_path"
+            style="@style/Widget.Material3.TextInputLayout.OutlinedBox.Dense"
+            android:layout_width="match_parent"
+            android:layout_height="wrap_content"
+            android:layout_marginTop="8dp"
+            android:hint="@string/edit_vm_serial_path">
+
+            <com.google.android.material.textfield.TextInputEditText
+                android:id="@+id/et_serial_path"
+                android:layout_width="match_parent"
+                android:layout_height="wrap_content"
+                android:inputType="text"
+                android:maxLines="1"
+                android:textSize="14sp"
+                tools:ignore="TextContrastCheck,VisualLintTextFieldSize" />
+
+        </com.google.android.material.textfield.TextInputLayout>
+
+        <com.google.android.material.button.MaterialButton
+            android:id="@+id/btn_serial_usb_slot"
+            style="@style/Widget.Material3.Button.TextButton"
+            android:layout_width="wrap_content"
+            android:layout_height="48dp"
+            tools:text="@string/edit_vm_serial_usb_slot" />
+
+
+    </LinearLayout>
+
+</com.google.android.material.card.MaterialCardView>
diff --git a/app/src/main/res/layout/partial_vm_edit_peripheral.xml b/app/src/main/res/layout/partial_vm_edit_peripheral.xml
new file mode 100644
index 000000000..031540d2d
--- /dev/null
+++ b/app/src/main/res/layout/partial_vm_edit_peripheral.xml
@@ -0,0 +1,15 @@
+    <cn.classfun.droidvm.ui.widgets.container.CollapsibleContainer
+        android:layout_width="match_parent"
+        android:layout_height="wrap_content"
+        android:title="@string/create_vm_category_serial">
+
+        <cn.classfun.droidvm.ui.widgets.container.CardItemListView
+            android:id="@+id/list_serial_ports"
+            android:layout_width="match_parent"
+            android:layout_height="wrap_content"
+            android:hint="@string/edit_vm_serial_empty"
+            android:icon="@drawable/ic_add"
+            android:text="@string/edit_vm_serial_add" />
+
+    </cn.classfun.droidvm.ui.widgets.container.CollapsibleContainer>
+

From 26c00deaa8966690c9763caa07437d299b1fc3ea Mon Sep 17 00:00:00 2001
From: HuJK <gh@hujk.org>
Date: Sun, 30 Aug 2026 13:37:14 +0800
Subject: [PATCH 137/182] sound: a virtio-snd card whose endpoints are named,
 and each one has a purpose

The card is one device with a list of endpoints rather than one anonymous
stream. Each endpoint carries a direction, a purpose, a buffer size and an
underrun policy, and names a host device to open. Endpoints are grouped by
direction in the editor so a playback and a capture endpoint are not two rows
that look identical.

The host devices are enumerated and published rather than guessed. AAudio
reports device ids that are reassigned on every boot, so an endpoint stores a
type and an address and resolves that to an id at start time; a device that
cannot be opened is not offered at all, which is a better answer than an
endpoint that fails when the guest first touches it. Recording needs
RECORD_AUDIO, and the permission is asked for where the endpoint is configured
rather than at the point where the failure would be silent.
---
 app/src/main/AndroidManifest.xml              |   6 +
 .../cn/classfun/droidvm/daemon/Daemon.java    |   5 +
 .../droidvm/daemon/audio/HostAudioTable.java  | 176 ++++++
 .../droidvm/daemon/vm/backend/AppGroups.java  | 165 ++++++
 .../vm/backend/CrosvmBackendInstance.java     | 212 +++++++-
 .../daemon/vm/backend/HostSocName.java        |   3 +
 .../droidvm/lib/data/HostAudioDevices.java    | 385 +++++++++++++
 .../droidvm/lib/perf/GamePerfHint.java        |   4 +
 .../classfun/droidvm/lib/store/vm/GpuApi.java |   1 +
 .../droidvm/lib/store/vm/GpuMode.java         |   6 +
 .../droidvm/lib/store/vm/PeripheralType.java  |  54 ++
 .../droidvm/lib/store/vm/SoundBuffer.java     |  50 ++
 .../droidvm/lib/store/vm/SoundMode.java       |  29 +
 .../droidvm/lib/store/vm/SoundPurpose.java    | 126 +++++
 .../droidvm/lib/store/vm/SoundUnderrun.java   |  57 ++
 .../lib/store/vm/VMPeripheralConfig.java      | 208 +++++++
 .../droidvm/lib/ui/RecordAudioPermission.java |  75 +++
 .../droidvm/lib/utils/StringUtils.java        |  13 +
 .../ui/disk/action/BackingChainLinker.java    |   3 +
 .../vm/display/base/DisplayInputBackend.java  |   2 +
 .../droidvm/ui/vm/display/base/InputMode.java |   3 +
 .../base/PointerGestureTranslator.java        |   3 +
 .../display/CursorPositionStream.java         |   3 +
 .../input/TouchScaleCalculator.java           |   1 +
 .../droidvm/ui/vm/edit/base/VMEditTab.java    |   6 +
 .../edit/peripheral/VMEditPeripheralTab.java  |  96 ++++
 .../peripheral/VMPeripheralEditAdapter.java   | 509 ++++++++++++++++++
 .../VMPeripheralEditViewHolder.java           |  55 ++
 .../storage/dir/VMSharedDirEditAdapter.java   |  37 +-
 .../dir/VMSharedDirEditViewHolder.java        |   2 +
 .../widgets/container/CardItemListView.java   |   2 +-
 .../ui/widgets/tools/PickerButtonWidget.java  |  18 +
 app/src/main/res/drawable/ic_microphone.xml   |   9 +
 app/src/main/res/drawable/ic_speaker.xml      |   9 +
 app/src/main/res/layout/activity_vm_edit.xml  |   7 +
 .../main/res/layout/item_sound_endpoint.xml   |  54 ++
 .../res/layout/item_vm_peripheral_edit.xml    | 216 ++++++++
 .../res/layout/item_vm_shared_dir_edit.xml    |  36 ++
 .../res/layout/partial_vm_edit_peripheral.xml |  22 +
 39 files changed, 2653 insertions(+), 15 deletions(-)
 create mode 100644 app/src/main/java/cn/classfun/droidvm/daemon/audio/HostAudioTable.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/AppGroups.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/lib/data/HostAudioDevices.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/lib/store/vm/GpuMode.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/lib/store/vm/PeripheralType.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/lib/store/vm/SoundBuffer.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/lib/store/vm/SoundMode.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/lib/store/vm/SoundPurpose.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/lib/store/vm/SoundUnderrun.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/lib/ui/RecordAudioPermission.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/ui/vm/edit/peripheral/VMPeripheralEditViewHolder.java
 create mode 100644 app/src/main/res/drawable/ic_microphone.xml
 create mode 100644 app/src/main/res/drawable/ic_speaker.xml
 create mode 100644 app/src/main/res/layout/item_sound_endpoint.xml
 create mode 100644 app/src/main/res/layout/item_vm_peripheral_edit.xml

diff --git a/app/src/main/AndroidManifest.xml b/app/src/main/AndroidManifest.xml
index 8610d4788..798d4da23 100644
--- a/app/src/main/AndroidManifest.xml
+++ b/app/src/main/AndroidManifest.xml
@@ -8,6 +8,12 @@
     <uses-permission android:name="android.permission.POST_NOTIFICATIONS" />
     <uses-permission android:name="android.permission.INTERNET" />
     <uses-permission android:name="android.permission.ACCESS_NETWORK_STATE" />
+    <!-- A VM given a microphone peripheral records the host mic. crosvm itself is forked by
+         the root daemon and reaches AudioFlinger as uid 0, which is checked separately, but the
+         app asks anyway: it is what the user-visible consent for that ought to look like, and
+         it is the prerequisite for proxying capture through an unprivileged helper if the
+         root path turns out not to work. -->
+    <uses-permission android:name="android.permission.RECORD_AUDIO" />
     <uses-permission android:name="android.permission.FOREGROUND_SERVICE"
         tools:ignore="ForegroundServicesPolicy" />
     <uses-permission android:name="android.permission.FOREGROUND_SERVICE_DATA_SYNC" />
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/Daemon.java b/app/src/main/java/cn/classfun/droidvm/daemon/Daemon.java
index 8389dfb5e..65527212f 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/Daemon.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/Daemon.java
@@ -32,6 +32,7 @@
 import java.util.UUID;
 import java.util.concurrent.atomic.AtomicBoolean;
 
+import cn.classfun.droidvm.daemon.audio.HostAudioTable;
 import cn.classfun.droidvm.daemon.display.DaemonSystemContext;
 import cn.classfun.droidvm.daemon.server.Server;
 import cn.classfun.droidvm.lib.natives.UnixHelper;
@@ -272,6 +273,10 @@ public static void main(String... args) {
             System.out.print("Another DroidVM Daemon is already running.\n");
             System.exit(1);
         }
+        // Publish the host's audio endpoints before any VM starts, and keep them current: a VM
+        // pinned to a headset needs to find it again by name after it is reconnected, and the
+        // number it had before will not be the number it has after.
+        HostAudioTable.start(DaemonSystemContext.get());
         daemonHash = getMyHash();
         Log.i(TAG, fmt("DroidVM Daemon hash: %s", daemonHash));
         writePidFile();
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/audio/HostAudioTable.java b/app/src/main/java/cn/classfun/droidvm/daemon/audio/HostAudioTable.java
new file mode 100644
index 000000000..32d9ba340
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/audio/HostAudioTable.java
@@ -0,0 +1,176 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
+package cn.classfun.droidvm.daemon.audio;
+
+import static cn.classfun.droidvm.lib.Constants.DATA_DIR;
+import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
+import static cn.classfun.droidvm.lib.utils.StringUtils.pathJoin;
+
+import android.content.Context;
+import android.media.AudioDeviceCallback;
+import android.media.AudioDeviceInfo;
+import android.media.AudioManager;
+import android.os.Handler;
+import android.os.HandlerThread;
+import android.util.Log;
+
+import androidx.annotation.NonNull;
+import androidx.annotation.Nullable;
+
+import java.io.File;
+import java.io.FileOutputStream;
+import java.io.IOException;
+import java.nio.charset.StandardCharsets;
+
+import cn.classfun.droidvm.lib.data.HostAudioDevices;
+
+/**
+ * Publishes the host's audio endpoints where crosvm's audio backend can read them.
+ *
+ * <p>AAudio names a device with an integer the platform hands out per connection: unplug a headset
+ * and plug it back in and the number is different, though it is plainly the same headset. A VM
+ * pinned to an endpoint therefore cannot hold on to the number -- it has to hold the name and look
+ * the number up again, every time it opens a stream.</p>
+ *
+ * <p>Only Java can enumerate the devices: AAudio has no API for it and {@link AudioManager} is not
+ * reachable from the backend, which is a native process running unprivileged. So the list is
+ * written out here and re-read there. The matching happens on the crosvm side rather than the id
+ * being pushed to it, so a device coming back needs no round trip -- the file changes, and the
+ * name the backend is holding is still the same name.</p>
+ */
+public final class HostAudioTable {
+    private static final String TAG = "HostAudioTable";
+
+    /** Where the table lives. One per daemon, not per VM: it describes the host, not a guest. */
+    public static final String PATH = pathJoin(DATA_DIR, "run", "audio_devices");
+
+    private static @Nullable HostAudioTable instance;
+
+    private final Context context;
+    private final AudioDeviceCallback callback;
+
+    private HostAudioTable(@NonNull Context context) {
+        this.context = context;
+        this.callback = new AudioDeviceCallback() {
+            @Override
+            public void onAudioDevicesAdded(AudioDeviceInfo[] added) {
+                write();
+            }
+
+            @Override
+            public void onAudioDevicesRemoved(AudioDeviceInfo[] removed) {
+                write();
+            }
+        };
+    }
+
+    /**
+     * Starts publishing, and keeps publishing until the daemon exits. Safe to call more than
+     * once; only the first call does anything.
+     */
+    public static synchronized void start(@Nullable Context context) {
+        try {
+            startOrThrow(context);
+        } catch (Throwable t) {
+            // Never take the daemon down over this. Without the table a VM pinned to an endpoint
+            // falls back to the platform's routing, which is a worse configuration than the user
+            // asked for; a daemon that will not start is no configuration at all.
+            Log.w(TAG, "failed to start publishing host audio endpoints", t);
+        }
+    }
+
+    private static void startOrThrow(@Nullable Context context) {
+        if (instance != null || context == null) return;
+        var am = context.getSystemService(AudioManager.class);
+        if (am == null) {
+            Log.w(TAG, "AudioManager unavailable; host audio endpoints will not be published");
+            return;
+        }
+        var table = new HostAudioTable(context);
+        // Its own thread, rather than Looper.getMainLooper(): the daemon is not an app process
+        // and has no main looper, so asking for one returns null and constructing a Handler on
+        // it throws. Writing the table is a few hundred bytes and happens only when something is
+        // plugged or unplugged, so a thread of its own costs nothing.
+        var thread = new HandlerThread("HostAudioTable");
+        thread.start();
+        am.registerAudioDeviceCallback(table.callback, new Handler(thread.getLooper()));
+        table.write();
+        instance = table;
+        Log.i(TAG, fmt("publishing host audio endpoints to %s", PATH));
+    }
+
+    /**
+     * Writes the current endpoints.
+     *
+     * <p>Lines are {@code <id>\t<in|out>\t<TYPE|address>}. Written to a neighbouring file and
+     * renamed, so a reader never sees half a table -- half a table resolves an endpoint to
+     * nothing, and the backend would fall back to the platform's routing for no reason.</p>
+     */
+    /**
+     * Rewrites the table, and never lets a failure escape.
+     *
+     * <p>This runs on the device-callback thread, where an uncaught exception takes the whole
+     * daemon down with it -- which is how a failure to describe the audio devices came to stop
+     * VMs from starting at all.</p>
+     */
+    private void write() {
+        try {
+            writeOrThrow();
+        } catch (Throwable t) {
+            Log.w(TAG, "failed to publish host audio endpoints", t);
+        }
+    }
+
+    private void writeOrThrow() {
+        var text = new StringBuilder();
+        int lines = appendAll(text, false) + appendAll(text, true);
+
+        var target = new File(PATH);
+        var staging = new File(fmt("%s.new", PATH));
+        try {
+            var parent = target.getParentFile();
+            if (parent != null && !parent.isDirectory() && !parent.mkdirs()) {
+                Log.w(TAG, fmt("cannot create %s", parent));
+                return;
+            }
+            try (var out = new FileOutputStream(staging)) {
+                out.write(text.toString().getBytes(StandardCharsets.UTF_8));
+                out.getFD().sync();
+            }
+            // The backend runs as this app's uid, so the default mode already lets it read.
+            if (!staging.renameTo(target)) {
+                Log.w(TAG, "failed to replace the host audio table");
+                //noinspection ResultOfMethodCallIgnored
+                staging.delete();
+                return;
+            }
+            Log.i(TAG, fmt("host audio endpoints published: %d", lines));
+        } catch (IOException e) {
+            Log.w(TAG, "failed to write the host audio table", e);
+        }
+    }
+
+    private int appendAll(@NonNull StringBuilder text, boolean input) {
+        // The platform's own routing, as an ordinary row against AAUDIO_DEVICE_UNSPECIFIED.
+        // Listing it means "follow the platform" resolves through the same lookup as everything
+        // else, instead of being an absence that every reader has to recognise separately.
+        // Rate and channels are left at 0 -- following the platform means whatever it routes to
+        // today, and naming a format for it would be describing one particular device. The kind
+        // is knowable regardless: the direction decides it.
+        text.append(fmt("%d\t%s\t%s\t0\t0\t%d\n", HostAudioDevices.DEVICE_UNSPECIFIED,
+            input ? "in" : "out", HostAudioDevices.SYSTEM_DEFAULT_KEY, input ? 6 : 1));
+        // Deliberately not HostAudioDevices.list: that builds a label for the picker, and a label
+        // needs the app's string resources, which the daemon's context does not have.
+        var keys = new java.util.ArrayList<String>();
+        var ids = HostAudioDevices.idsAndKeys(context, input, keys);
+        for (int i = 0; i < ids.size() && i < keys.size(); i++) {
+            var row = ids.get(i);
+            // id, direction, name, then what the endpoint itself is: native rate, channel count,
+            // and kind. A reader that only wants the id stops after the third column.
+            text.append(fmt("%d\t%s\t%s\t%d\t%d\t%d\n", row[0], input ? "in" : "out",
+                keys.get(i), row[1], row[2], row[3]));
+        }
+        return keys.size();
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/AppGroups.java b/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/AppGroups.java
new file mode 100644
index 000000000..4243d73e4
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/AppGroups.java
@@ -0,0 +1,165 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
+package cn.classfun.droidvm.daemon.vm.backend;
+
+import static cn.classfun.droidvm.lib.Constants.DATA_DIR;
+import static cn.classfun.droidvm.lib.utils.FileUtils.readFile;
+import static cn.classfun.droidvm.lib.utils.FileUtils.writeFile;
+import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
+import static cn.classfun.droidvm.lib.utils.StringUtils.pathJoin;
+
+import android.util.Log;
+
+import androidx.annotation.Nullable;
+
+import java.io.File;
+import java.util.ArrayList;
+import java.util.List;
+
+import cn.classfun.droidvm.BuildConfig;
+
+/**
+ * The app's supplementary groups, for a device the VMM runs as the app instead of as root.
+ *
+ * <p>Why they are needed at all: measured on device, a process that drops to the app's uid but
+ * carries no supplementary groups cannot even {@code stat()} a directory under
+ * {@code /storage/emulated/0} -- traversing the MediaProvider FUSE mount needs AID_EVERYBODY
+ * (9997), which every app process carries and no permission grants. The permission-derived
+ * groups (ext_data_rw and friends) turned out <em>not</em> to be the ones that gate it. Rather
+ * than hardcode a number whose meaning was inferred from one device, take the app's own list:
+ * whatever the platform decided the app is, the file server should look the same.
+ *
+ * <p>Which is why this reads the running app process rather than asking PackageManager.
+ * {@code getPackageGids()} knows only the permission-derived half; the framework-assigned half
+ * (the everybody gid, the cache gid, the shared gid) is added by Zygote at spawn time and exists
+ * assembled only in {@code /proc/<pid>/status}. The daemon runs as root, so it can read it.
+ *
+ * <p>And why it is cached to disk: a VM can be started over the daemon's IPC long after the UI
+ * process has gone away, and there would then be nothing to read. A stale list is not a hazard
+ * here -- these groups change only when the user changes a permission, and the failure mode of a
+ * stale one is a shared directory that cannot see its files, not one that sees too much.
+ */
+public final class AppGroups {
+    private static final String TAG = "AppGroups";
+    private static final String CACHE_PATH = pathJoin(DATA_DIR, "run", "app-gids");
+
+    @Nullable
+    private static volatile int[] cached;
+
+    private AppGroups() {
+    }
+
+    /**
+     * The app's supplementary groups, or {@code null} if they cannot be determined.
+     *
+     * <p>A {@code null} is not a reason to fall back to root: a caller that asked for the app's
+     * identity and cannot be given it should say so and stop, or the switch that requested the
+     * drop would silently mean its opposite.
+     */
+    @Nullable
+    public static int[] resolve(int appUid) {
+        var hit = cached;
+        if (hit != null) return hit;
+        synchronized (AppGroups.class) {
+            if (cached != null) return cached;
+            var live = readFromAppProcess(appUid);
+            if (live != null) {
+                cached = live;
+                persist(live);
+                Log.i(TAG, fmt("app groups from the running app process: %s", join(live)));
+                return live;
+            }
+            var stored = readCache();
+            if (stored != null) {
+                cached = stored;
+                Log.i(TAG, fmt("app groups from cache (app not running): %s", join(stored)));
+                return stored;
+            }
+        }
+        Log.w(TAG, "app groups unknown: the app is not running and nothing was cached");
+        return null;
+    }
+
+    /** Formats the list the way crosvm's `supp_gids=` key expects. */
+    public static String join(int[] gids) {
+        var sb = new StringBuilder();
+        for (int i = 0; i < gids.length; i++) {
+            if (i > 0) sb.append(',');
+            sb.append(gids[i]);
+        }
+        return sb.toString();
+    }
+
+    @Nullable
+    private static int[] readFromAppProcess(int appUid) {
+        var proc = new File("/proc").listFiles();
+        if (proc == null) return null;
+        for (var entry : proc) {
+            var name = entry.getName();
+            if (name.isEmpty() || !Character.isDigit(name.charAt(0))) continue;
+            try {
+                // Both checks matter: the daemon itself runs the app's code out of the app's
+                // CLASSPATH, so a name match alone would happily find a process running as root.
+                if (android.system.Os.stat(entry.getPath()).st_uid != appUid) continue;
+                var cmdline = readFile(new File(entry, "cmdline"));
+                int nul = cmdline.indexOf('\0');
+                if (nul >= 0) cmdline = cmdline.substring(0, nul);
+                if (!BuildConfig.APPLICATION_ID.equals(cmdline)) continue;
+                var gids = parseGroups(readFile(new File(entry, "status")));
+                if (gids != null) return gids;
+            } catch (Throwable ignored) {
+                // A pid that went away between listing and reading is ordinary, not an error.
+            }
+        }
+        return null;
+    }
+
+    /** Pulls the {@code Groups:} line out of {@code /proc/<pid>/status}. */
+    @Nullable
+    private static int[] parseGroups(String status) {
+        for (var line : status.split("\n")) {
+            if (!line.startsWith("Groups:")) continue;
+            var out = new ArrayList<Integer>();
+            for (var field : line.substring("Groups:".length()).trim().split("\\s+")) {
+                if (field.isEmpty()) continue;
+                try {
+                    out.add(Integer.parseInt(field));
+                } catch (NumberFormatException ignored) {
+                }
+            }
+            return toArray(out);
+        }
+        return null;
+    }
+
+    private static int[] toArray(List<Integer> list) {
+        var out = new int[list.size()];
+        for (int i = 0; i < out.length; i++) out[i] = list.get(i);
+        return out;
+    }
+
+    private static void persist(int[] gids) {
+        try {
+            writeFile(CACHE_PATH, join(gids));
+        } catch (Throwable t) {
+            Log.w(TAG, "could not cache the app groups", t);
+        }
+    }
+
+    @Nullable
+    private static int[] readCache() {
+        try {
+            var text = readFile(CACHE_PATH).trim();
+            if (text.isEmpty()) return null;
+            var out = new ArrayList<Integer>();
+            for (var field : text.split(",")) {
+                field = field.trim();
+                if (!field.isEmpty()) out.add(Integer.parseInt(field));
+            }
+            return out.isEmpty() ? null : toArray(out);
+        } catch (Throwable t) {
+            return null;
+        }
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/CrosvmBackendInstance.java b/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/CrosvmBackendInstance.java
index 319521b0d..b29c0f7e1 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/CrosvmBackendInstance.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/CrosvmBackendInstance.java
@@ -16,6 +16,7 @@
 import static cn.classfun.droidvm.lib.utils.FileUtils.deleteFile;
 import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
 import static cn.classfun.droidvm.lib.utils.StringUtils.pathJoin;
+import static cn.classfun.droidvm.lib.utils.ThreadUtils.threadSleep;
 
 import android.net.LocalSocket;
 import android.net.LocalSocketAddress;
@@ -31,15 +32,19 @@
 import java.util.List;
 import java.util.Map;
 
+import cn.classfun.droidvm.BuildConfig;
 import cn.classfun.droidvm.daemon.console.FDPipeConsoleStream;
 import cn.classfun.droidvm.daemon.console.InputConsoleStream;
 import cn.classfun.droidvm.daemon.console.SimpleConsoleStream;
+import cn.classfun.droidvm.daemon.display.DaemonSystemContext;
 import cn.classfun.droidvm.daemon.server.ServerContext;
 import cn.classfun.droidvm.daemon.vm.BootPlan;
 import cn.classfun.droidvm.daemon.vm.SerialPipe;
 import cn.classfun.droidvm.daemon.vm.UsbAcmPool;
 import cn.classfun.droidvm.daemon.vm.VMBackendInstance;
 import cn.classfun.droidvm.daemon.vm.VMStartResult;
+import cn.classfun.droidvm.daemon.audio.HostAudioTable;
+import cn.classfun.droidvm.lib.data.HostAudioDevices;
 import cn.classfun.droidvm.lib.natives.NativeProcess;
 import cn.classfun.droidvm.lib.store.base.DataItem;
 import cn.classfun.droidvm.lib.store.disk.DiskBus;
@@ -49,15 +54,18 @@
 import cn.classfun.droidvm.lib.store.vm.GpuBackend;
 import cn.classfun.droidvm.lib.store.vm.LendMthpMode;
 import cn.classfun.droidvm.lib.store.vm.NativeDisplay;
+import cn.classfun.droidvm.lib.store.vm.PeripheralType;
 import cn.classfun.droidvm.lib.store.vm.SerialBackend;
 import cn.classfun.droidvm.lib.store.vm.SerialHardware;
 import cn.classfun.droidvm.lib.store.vm.VMSerialConfig;
+import cn.classfun.droidvm.lib.store.vm.SoundMode;
 import cn.classfun.droidvm.lib.store.vm.ProtectedVM;
 import cn.classfun.droidvm.lib.store.vm.SharedDirCache;
 import cn.classfun.droidvm.lib.store.vm.SharedDirType;
 import cn.classfun.droidvm.lib.store.vm.VMBackend;
 import cn.classfun.droidvm.lib.store.vm.VMConfig;
 import cn.classfun.droidvm.lib.store.vm.VMHypervisor;
+import cn.classfun.droidvm.lib.store.vm.VMPeripheralConfig;
 
 @SuppressWarnings("FieldCanBeLocal")
 public final class CrosvmBackendInstance extends VMBackendInstance {
@@ -346,6 +354,7 @@ private List<String> buildCommand() {
         if (isInputBridgeNeeded()) {
             buildInputDevicesCommand(args);
         }
+        buildPeripheralCommand(args);
         buildSerialCommand(args);
         item.opt("extra_options", DataItem.newArray())
             .forEach(arg -> args.add(arg.getValue().asString()));
@@ -513,19 +522,49 @@ private void buildSharedDirCommand(@NonNull List<String> args) {
             var path = dir.optString("path", "");
             var tag = dir.optString("tag", "");
             if (path.isEmpty() || tag.isEmpty()) continue;
-            var type = optEnum(dir, "type", SharedDirType.FS);
+            // Only virtio-fs is wired up. The editor forces it, but a hand-edited vms.json can
+            // still say p9 -- and that is not a degraded mode, it is a VM that will not start:
+            // crosvm's 9p config accepts `ascii_casefold` and nothing else, so every key below
+            // makes the whole `--shared-dir` argument fail to parse.
+            if (optEnum(dir, "type", SharedDirType.FS) != SharedDirType.FS)
+                Log.w(TAG, fmt("Shared dir '%s': 9P is not implemented, using virtio-fs", tag));
+            // `dax` is deliberately absent: the fs device gates DAX on cfg!(target_arch =
+            // "x86_64"), so on this platform the key would only describe something that cannot
+            // happen.
             var cache = optEnum(dir, "cache", SharedDirCache.AUTO);
-            args.add("--shared-dir");
-            args.add(fmt(
-                "%s:%s:type=%s:cache=%s:timeout=%d:writeback=%s:dax=%s:posix_acl=%s",
+            var arg = new StringBuilder(fmt(
+                "%s:%s:type=fs:cache=%s:timeout=%d:writeback=%s:posix_acl=%s",
                 path, tag,
-                type.name().toLowerCase(),
                 cache.name().toLowerCase(),
                 dir.optLong("timeout", 5),
                 dir.optBoolean("writeback", false),
-                dir.optBoolean("dax", false),
                 dir.optBoolean("posix_acl", true)
             ));
+            // Root access off -- the default -- means the file server serves as the app rather
+            // than as the VMM. crosvm forks and pivot_roots this device either way; these keys
+            // only decide who it is once it gets there. Left as root it reaches every file root
+            // can, which under /storage/emulated/0 is every other app's data as well.
+            if (!dir.optBoolean("root_access", false)) {
+                int uid = getAppUid();
+                var gids = uid > 0 ? AppGroups.resolve(uid) : null;
+                if (gids == null) {
+                    // Quietly serving as root instead would make the switch mean its opposite.
+                    // That is the one outcome worth losing a shared directory over.
+                    Log.e(TAG, fmt(
+                        "Shared dir '%s': cannot resolve the app identity (uid=%d); skipped. "
+                            + "Open DroidVM once, or turn on root access for this directory.",
+                        tag, uid
+                    ));
+                    continue;
+                }
+                // An Android app's primary group is its uid. Say so rather than leaving gid
+                // unset, which would leave the process in root's group with the app's uid.
+                arg.append(fmt(":uid=%d:gid=%d", uid, uid));
+                if (gids.length > 0)
+                    arg.append(fmt(":supp_gids=%s", AppGroups.join(gids)));
+            }
+            args.add("--shared-dir");
+            args.add(arg.toString());
         }
     }
 
@@ -650,6 +689,167 @@ private boolean isInputBridgeNeeded() {
         }
         args.add("--vnc-server");
         args.add(vncArg.toString());
+    /**
+     * Attaches the VM's peripherals. One peripheral is one guest device.
+     *
+     * <p>A VIRTIO_SOUND peripheral is `--virtio-snd` with a `uid`: the audio has to leave
+     * the root process to be heard at all, because Android silences AAudio playback from uid 0
+     * outright and hands back zeroed buffers for capture. Measured on device with the same probe
+     * under different uids -- root muted both ways, shell, system and the app's own uid all fine.
+     * crosvm does the moving itself, re-execing its own `device snd` backend under that uid and
+     * reaching it over a socketpair. The daemon deliberately does not spawn that process: it did
+     * once, and every part of doing so -- `su`, a rendezvous socket to wait for, a pid to kill on
+     * teardown -- was a way to get it wrong.</p>
+     *
+     * <p>INTEL_HDA is accepted by the model and skipped here: crosvm emulates no HDA controller,
+     * and starting a VM that claims hardware nothing can serve is worse than starting without
+     * it. The UI says the same thing on the row.</p>
+     */
+    private void buildPeripheralCommand(@NonNull List<String> args) {
+        var peripherals = VMPeripheralConfig.listOf(config.item);
+        int appUid = getAppUid();
+        for (var peripheral : peripherals) {
+            var type = peripheral.getType();
+            if (type != PeripheralType.VIRTIO_SOUND) {
+                Log.w(TAG, fmt("peripheral %s skipped: no host backend", type));
+                continue;
+            }
+            if (appUid <= 0) {
+                Log.e(TAG, "cannot resolve app uid; sound device skipped");
+                continue;
+            }
+            if (peripheral.getEndpoints().isEmpty()) {
+                // A card with no endpoints is a device the guest would enumerate and find
+                // nothing behind, which is worse than not offering it.
+                Log.w(TAG, "virtio-snd card has no endpoints; skipped");
+                continue;
+            }
+            args.add("--virtio-snd");
+            args.add(buildSoundConfig(peripheral, appUid));
+        }
+    }
+
+    /**
+     * The `--virtio-snd` configuration for one peripheral.
+     *
+     * <p>The `uid` is what makes this audible at all. Android decides whether a stream can be
+     * heard from the uid that opened it and silences uid 0 in both directions, and crosvm runs as
+     * root -- so crosvm re-execs itself under this uid and serves the device over a socketpair.
+     * Using the app's own uid rather than any other non-root one is what makes Android attribute
+     * the audio, and the microphone indicator, to DroidVM instead of to an anonymous process.</p>
+     */
+    @NonNull
+    private String buildSoundConfig(@NonNull VMPeripheralConfig peripheral, int appUid) {
+        var endpoints = peripheral.getEndpoints();
+        var outputs = new ArrayList<VMPeripheralConfig.Endpoint>();
+        var inputs = new ArrayList<VMPeripheralConfig.Endpoint>();
+        for (var endpoint : endpoints) {
+            (endpoint.getMode().isInput() ? inputs : outputs).add(endpoint);
+        }
+
+        // A diagnostic escape hatch: with this marker present the card writes the periods it
+        // receives to stream-N.out instead of playing them, which is the only way to see what
+        // actually crossed the virtqueue rather than what everyone reports having sent. Gated on
+        // a file rather than a build so it can be turned off without shipping anything.
+        var dump = new java.io.File("/data/local/tmp/viosnd_dump");
+        var cfg = new StringBuilder(dump.exists() ? "backend=file" : "backend=aaudio");
+        if (dump.exists()) {
+            cfg.append(fmt(",playback_path=%s,playback_size=%d",
+                "/data/data/cn.classfun.droidvm/cache", 4 * 1024 * 1024));
+        }
+        // capture= is the card's own flag for whether it has any input at all.
+        cfg.append(fmt(",capture=%b", !inputs.isEmpty()));
+        cfg.append(fmt(",num_output_devices=%d", outputs.size()));
+        cfg.append(fmt(",num_input_devices=%d", inputs.size()));
+        // The endpoints go over by name, not by number. A number is only what the platform calls
+        // an endpoint today: reconnect a headset and it has a different one, while the name is
+        // unchanged -- so crosvm looks each one up in the table for itself, every time it opens a
+        // stream, and finds a returning device without being told.
+        cfg.append(fmt(",device_table=%s", HostAudioTable.PATH));
+        appendEndpoints(cfg, "output_device_config", outputs);
+        appendEndpoints(cfg, "input_device_config", inputs);
+        // Shared by every endpoint on the card, because they describe the device's queues rather
+        // than any one endpoint: one underrun policy, one buffer depth. Separate cards keep their
+        // own.
+        cfg.append(fmt(",underrun=%s", peripheral.getUnderrun().name().toLowerCase()));
+        // The latency knob. crosvm publishes it in the device's vendor config block; a driver
+        // that does not read the block keeps its own default, which is why this can be a hint.
+        cfg.append(fmt(",guest_outstanding_packets=%d", peripheral.getBuffer().getPackets()));
+        // Same field name as --shared-dir and --pmem-ext2 use for the process a device runs as.
+        // No supplementary groups: the VMM's are root's, and audio needs none -- recording was
+        // measured working with an empty group list.
+        cfg.append(fmt(",uid=%d", appUid));
+        Log.i(TAG, fmt("sound device: %s", cfg));
+        return cfg.toString();
+    }
+
+    /**
+     * Appends one direction's endpoints as a list of per-device settings.
+     *
+     * <p>Their order here is their `hda_fn_nid` on the other side, which is what ties a stream to
+     * the endpoint it belongs to -- so it has to match the order the counts were taken in.</p>
+     */
+    private void appendEndpoints(
+        @NonNull StringBuilder cfg, @NonNull String field,
+        @NonNull List<VMPeripheralConfig.Endpoint> endpoints
+    ) {
+        if (endpoints.isEmpty()) return;
+        cfg.append(fmt(",%s=[", field));
+        for (int i = 0; i < endpoints.size(); i++) {
+            var endpoint = endpoints.get(i);
+            // An unset field is what older configs stored for "follow the platform"; it names the
+            // same endpoint now, so everything downstream sees a device rather than an absence.
+            var hostKey = endpoint.getHostDevice();
+            if (hostKey.isEmpty()) hostKey = HostAudioDevices.SYSTEM_DEFAULT_KEY;
+            // Quoted, because a key is TYPE|address and the bar would otherwise read as a
+            // separator to the option parser.
+            cfg.append(fmt("%s[host_device=\"%s\"]", i == 0 ? "" : ",", hostKey));
+            // Only to say in the log which endpoint that name means right now.
+            resolveHostDevice(hostKey, endpoint.getMode().isInput(), endpoint.getMode());
+        }
+        cfg.append("]");
+    }
+
+    /** The app's uid, which the daemon can reach through its system context. */
+    private int getAppUid() {
+        try {
+            var sys = DaemonSystemContext.get();
+            if (sys != null) {
+                return sys.getPackageManager()
+                    .getApplicationInfo(BuildConfig.APPLICATION_ID, 0).uid;
+            }
+        } catch (Throwable t) {
+            Log.w(TAG, "package manager lookup failed; falling back to the data dir owner", t);
+        }
+        // Fallback: the data directory belongs to the app uid by construction.
+        try {
+            return android.system.Os.stat(DATA_DIR).st_uid;
+        } catch (Throwable t) {
+            Log.w(TAG, "stat of the data dir failed", t);
+            return -1;
+        }
+    }
+
+    /**
+     * Live AAudio device id for a stored host endpoint, or 0 (AAUDIO_UNSPECIFIED) when it asked
+     * to follow the system or names something that is not connected right now. The ids are
+     * per-boot, which is why the config stores a descriptor and this happens at start.
+     */
+    private int resolveHostDevice(
+        @NonNull String key, boolean input, @NonNull SoundMode mode
+    ) {
+        if (key.isEmpty()) return HostAudioDevices.DEVICE_UNSPECIFIED;
+        var sys = DaemonSystemContext.get();
+        if (sys == null) {
+            Log.w(TAG, fmt("no system context; %s falls back to default audio routing", key));
+            return HostAudioDevices.DEVICE_UNSPECIFIED;
+        }
+        int id = HostAudioDevices.resolve(sys, input, key);
+        Log.i(TAG, fmt("%s -> host device %s (id=%d)", mode, key, id));
+        return id;
+    }
+
+
     /** One port's crosvm argument pieces, resolved from its backend. */
     private static final class SerialArg {
         String type = "sink";
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/HostSocName.java b/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/HostSocName.java
index 3f45bc7da..cc74f7248 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/HostSocName.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/HostSocName.java
@@ -3,6 +3,8 @@
 // Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.daemon.vm.backend;
 
+import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
+
 import android.util.Log;
 
 import androidx.annotation.Nullable;
@@ -45,6 +47,7 @@ public static synchronized String get() {
                 if (name != null && !name.trim().isEmpty())
                     cached = name.trim();
             }
+            Log.i(TAG, fmt("host SoC name: %s", cached));
         } catch (Throwable t) {
             Log.w(TAG, "failed to resolve host SoC name", t);
         }
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/data/HostAudioDevices.java b/app/src/main/java/cn/classfun/droidvm/lib/data/HostAudioDevices.java
new file mode 100644
index 000000000..2d83b2c30
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/lib/data/HostAudioDevices.java
@@ -0,0 +1,385 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
+package cn.classfun.droidvm.lib.data;
+
+import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
+
+import android.content.Context;
+import android.media.AudioDeviceInfo;
+import android.media.AudioManager;
+import android.util.Log;
+
+import androidx.annotation.NonNull;
+import androidx.annotation.Nullable;
+
+import java.util.ArrayList;
+import java.util.List;
+
+import cn.classfun.droidvm.R;
+
+/**
+ * Host audio endpoints, as Android reports them, in a form that survives a reboot.
+ *
+ * <p>{@link AudioDeviceInfo#getId()} is what AAudio wants ({@code AAudioStreamBuilder_setDeviceId},
+ * which is how crosvm's virtio-snd pins a PCM device to one endpoint), but the ids are handed out
+ * per boot and change when something is plugged or paired. So a VM config stores the stable
+ * {@link #keyOf key} instead -- device type plus routing address -- and the backend
+ * {@link #resolve resolves} it to a live id when the VM starts.</p>
+ *
+ * <p>Usable from the daemon as well as the UI: the lookup only needs a Context that can reach
+ * AudioManager, which the daemon's system context can.</p>
+ */
+public final class HostAudioDevices {
+    private static final String TAG = "HostAudioDevices";
+    /** AAUDIO_UNSPECIFIED: let the platform route the stream itself. */
+    public static final int DEVICE_UNSPECIFIED = 0;
+
+    /**
+     * The endpoint that means "whatever the platform would route to", named rather than left
+     * blank.
+     *
+     * <p>An unset field said the same thing until now, and saying it by omission turned out to
+     * be worse in every direction: the config held a device with nothing in it, the command line
+     * carried an entry with no fields, and the option parser has no use for either. It also
+     * cannot be told apart from a field nobody filled in.</p>
+     *
+     * <p>It is shaped like any other key so nothing has to special-case it -- and it appears in
+     * the published device table against id 0, which is `AAUDIO_DEVICE_UNSPECIFIED`, so
+     * resolving it produces the platform's own routing by the ordinary path rather than by an
+     * exception to it. `DEFAULT` is not an AudioDeviceInfo type name, so a real endpoint can
+     * never collide with it.</p>
+     */
+    public static final String SYSTEM_DEFAULT_KEY = "DEFAULT|system default";
+
+    /** One live host endpoint. */
+    public static final class Entry {
+        /** Stable descriptor stored in the VM config; see {@link #keyOf}. */
+        public final String key;
+        /** Human-readable name for the picker. */
+        public final String label;
+        /** Live AudioDeviceInfo id, valid only for this boot. */
+        public final int id;
+
+        Entry(@NonNull String key, @NonNull String label, int id) {
+            this.key = key;
+            this.label = label;
+            this.id = id;
+        }
+    }
+
+    private HostAudioDevices() {
+    }
+
+    /**
+     * Live output ({@code input == false}) or input endpoints, deduplicated by key. Empty when
+     * AudioManager is unreachable -- callers fall back to "platform default" routing.
+     */
+    @NonNull
+    public static List<Entry> list(@NonNull Context context, boolean input) {
+        var out = new ArrayList<Entry>();
+        var devices = query(context, input);
+        if (devices == null) return out;
+        for (var device : devices) {
+            // A sink that can't be targeted is noise in the picker (telephony, the guest's own
+            // loopback, ...); AAudio can only open real endpoints anyway.
+            if (!isSelectable(device, input)) continue;
+            var key = keyOf(device);
+            boolean dup = false;
+            for (var seen : out)
+                if (seen.key.equals(key)) dup = true;
+            if (dup) continue;
+            out.add(new Entry(key, labelOf(context, device), device.getId()));
+        }
+        return out;
+    }
+
+    /**
+     * The same endpoints as {@link #list}, as {@code id -> key} pairs and nothing else.
+     *
+     * <p>Separate from {@code list} because that one builds a label for the picker, and a label
+     * needs the app's string resources. The daemon's context has none -- asking it for one throws
+     * {@code Resources$NotFoundException} -- and it has no use for a label anyway: it is
+     * publishing the endpoints for crosvm to match against, not showing them to anyone.</p>
+     */
+    @NonNull
+    public static List<int[]> idsAndKeys(@NonNull Context context, boolean input,
+                                         @NonNull List<String> keysOut) {
+        var ids = new ArrayList<int[]>();
+        var devices = query(context, input);
+        if (devices == null) return ids;
+        for (var device : devices) {
+            if (!isSelectable(device, input)) continue;
+            var key = keyOf(device);
+            if (keysOut.contains(key)) continue;
+            keysOut.add(key);
+            ids.add(new int[] {
+                device.getId(), soleValue(device.getSampleRates()),
+                soleValue(device.getChannelCounts()), kindOf(device, input)
+            });
+        }
+        return ids;
+    }
+
+    /**
+     * The one value in a capability list, or 0 when there is more than one.
+     *
+     * <p>These lists say what an endpoint will accept, not what it runs at, and the two are only
+     * the same thing when there is a single entry. Picking a favourite out of several would be a
+     * guess, and a guessed hint is worse than none: the guest treats a hint as the format to
+     * default to, and would then default to something the platform converts. An empty list means
+     * the platform declined to say, which is the same answer.</p>
+     */
+    private static int soleValue(int[] values) {
+        return values != null && values.length == 1 ? values[0] : 0;
+    }
+
+    /**
+     * What kind of thing the endpoint is, in the numbering the guest driver uses: 1 speaker,
+     * 2 headphones, 3 headset, 4 line out, 5 digital, 6 microphone, 7 telephony.
+     *
+     * <p>This is what decides the name and icon Windows shows beside the endpoint, so an
+     * approximate answer is still much better than none.</p>
+     */
+    public static int kindOf(@NonNull AudioDeviceInfo device, boolean input) {
+        switch (device.getType()) {
+            case AudioDeviceInfo.TYPE_TELEPHONY:
+                return 7;
+            case AudioDeviceInfo.TYPE_WIRED_HEADPHONES:
+                return 2;
+            case AudioDeviceInfo.TYPE_WIRED_HEADSET:
+            case AudioDeviceInfo.TYPE_USB_HEADSET:
+            case AudioDeviceInfo.TYPE_BLUETOOTH_SCO:
+            case AudioDeviceInfo.TYPE_BLE_HEADSET:
+                return 3;
+            case AudioDeviceInfo.TYPE_LINE_ANALOG:
+            case AudioDeviceInfo.TYPE_AUX_LINE:
+                return 4;
+            case AudioDeviceInfo.TYPE_HDMI:
+            case AudioDeviceInfo.TYPE_HDMI_ARC:
+            case AudioDeviceInfo.TYPE_LINE_DIGITAL:
+            case AudioDeviceInfo.TYPE_USB_DEVICE:
+            case AudioDeviceInfo.TYPE_USB_ACCESSORY:
+            case AudioDeviceInfo.TYPE_BLUETOOTH_A2DP:
+            case AudioDeviceInfo.TYPE_BLE_SPEAKER:
+                return 5;
+            default:
+                // Everything left is a built-in transducer of one kind or the other, and which
+                // one is decided by the direction rather than by the type.
+                return input ? 6 : 1;
+        }
+    }
+
+    /**
+     * Live AudioDeviceInfo id for a stored key, or {@link #DEVICE_UNSPECIFIED} when the key is
+     * empty (follow the platform) or names a device that is not currently present.
+     */
+    public static int resolve(@NonNull Context context, boolean input, @Nullable String key) {
+        // "" is what older configs stored for the same thing.
+        if (key == null || key.isEmpty() || SYSTEM_DEFAULT_KEY.equals(key)) {
+            return DEVICE_UNSPECIFIED;
+        }
+        var devices = query(context, input);
+        if (devices == null) return DEVICE_UNSPECIFIED;
+        for (var device : devices)
+            if (keyOf(device).equals(key)) return device.getId();
+        Log.w(TAG, fmt("host audio device %s is not present; falling back to default routing", key));
+        return DEVICE_UNSPECIFIED;
+    }
+
+    /**
+     * Separates the endpoint's name from what the stream is for.
+     *
+     * <p>An address already contains most of the punctuation worth choosing: a Bluetooth address
+     * is a MAC with colons, a USB one looks like {@code card=1;device=0}. So the separator has to
+     * be something none of them use.</p>
+     */
+    public static final char ATTR_SEPARATOR = '#';
+
+    /** The part of a stored key that names the endpoint, without what it is to be used for. */
+    @NonNull
+    public static String deviceOf(@NonNull String key) {
+        int at = key.indexOf(ATTR_SEPARATOR);
+        return at < 0 ? key : key.substring(0, at);
+    }
+
+    /** The {@code attr=value,...} part of a stored key, or "" when it carries none. */
+    @NonNull
+    public static String attrsOf(@NonNull String key) {
+        int at = key.indexOf(ATTR_SEPARATOR);
+        return at < 0 ? "" : key.substring(at + 1);
+    }
+
+    /** One attribute out of the {@code attr=value,...} part, or "" when it is not set. */
+    @NonNull
+    public static String attrOf(@NonNull String key, @NonNull String name) {
+        for (var pair : attrsOf(key).split(",")) {
+            int eq = pair.indexOf('=');
+            if (eq > 0 && pair.substring(0, eq).trim().equals(name)) {
+                return pair.substring(eq + 1).trim();
+            }
+        }
+        return "";
+    }
+
+    /** Rebuilds a key from an endpoint and its attributes; empty attributes are left out. */
+    @NonNull
+    public static String withAttrs(@NonNull String device, @NonNull List<String> names,
+                                   @NonNull List<String> values) {
+        var parts = new ArrayList<String>();
+        for (int i = 0; i < names.size() && i < values.size(); i++) {
+            if (!values.get(i).isEmpty()) {
+                parts.add(fmt("%s=%s", names.get(i), values.get(i)));
+            }
+        }
+        return parts.isEmpty() ? device : device + ATTR_SEPARATOR + String.join(",", parts);
+    }
+
+    /**
+     * Stable descriptor for one endpoint: {@code "<TYPE>|<address>"}. The type name (not its
+     * numeric constant) keeps the config readable, and the address separates one paired headset
+     * or USB card from another of the same type.
+     */
+    @NonNull
+    public static String keyOf(@NonNull AudioDeviceInfo device) {
+        var address = "";
+        try {
+            address = device.getAddress();
+        } catch (Throwable ignored) {
+            // getAddress() is @SystemApi-adjacent on some builds; the type alone still works
+        }
+        return fmt("%s|%s", typeName(device.getType()), address == null ? "" : address);
+    }
+
+    /** Localized type name, with the product name or address appended when it disambiguates. */
+    @NonNull
+    public static String labelOf(@NonNull Context context, @NonNull AudioDeviceInfo device) {
+        var name = typeLabel(context, device.getType());
+        var product = String.valueOf(device.getProductName()).trim();
+        var address = "";
+        try {
+            address = device.getAddress();
+        } catch (Throwable ignored) {
+        }
+        if (address != null && !address.isEmpty())
+            return fmt("%s (%s)", name, address);
+        if (!product.isEmpty() && !product.equalsIgnoreCase(name))
+            return fmt("%s (%s)", name, product);
+        return name;
+    }
+
+    @Nullable
+    private static AudioDeviceInfo[] query(@NonNull Context context, boolean input) {
+        try {
+            var am = context.getSystemService(AudioManager.class);
+            if (am == null) {
+                Log.w(TAG, "AudioManager unavailable");
+                return null;
+            }
+            return am.getDevices(input
+                ? AudioManager.GET_DEVICES_INPUTS
+                : AudioManager.GET_DEVICES_OUTPUTS);
+        } catch (Throwable t) {
+            Log.w(TAG, "failed to enumerate host audio devices", t);
+            return null;
+        }
+    }
+
+    /**
+     * The echo reference: the output mix, fed back so a capture path can subtract it. Android
+     * exposes it in the device list but only opens it for system callers, so an endpoint pinned
+     * to it appears in the guest and never produces a sample -- measured: PREPARE comes back
+     * VIRTIO_SND_S_IO_ERR, "Failed to open stream".
+     *
+     * <p>By number because there is no public constant for it -- the SDK's list goes 25, 26, 27,
+     * 29 -- and a name that does not exist cannot be compiled against.</p>
+     */
+    private static final int TYPE_ECHO_REFERENCE = 28;
+
+    /** Endpoints that make no sense as a VM's speaker or microphone. */
+    private static boolean isSelectable(@NonNull AudioDeviceInfo device, boolean input) {
+        switch (device.getType()) {
+            case TYPE_ECHO_REFERENCE:
+            case AudioDeviceInfo.TYPE_TELEPHONY:
+            case AudioDeviceInfo.TYPE_REMOTE_SUBMIX:
+            case AudioDeviceInfo.TYPE_FM:
+            case AudioDeviceInfo.TYPE_FM_TUNER:
+            case AudioDeviceInfo.TYPE_TV_TUNER:
+                return false;
+            default:
+                return input ? device.isSource() : device.isSink();
+        }
+    }
+
+    /** Stable, config-visible name for an AudioDeviceInfo type constant. */
+    @NonNull
+    private static String typeName(int type) {
+        switch (type) {
+            case AudioDeviceInfo.TYPE_BUILTIN_EARPIECE: return "BUILTIN_EARPIECE";
+            case AudioDeviceInfo.TYPE_BUILTIN_SPEAKER: return "BUILTIN_SPEAKER";
+            case AudioDeviceInfo.TYPE_BUILTIN_SPEAKER_SAFE: return "BUILTIN_SPEAKER_SAFE";
+            case AudioDeviceInfo.TYPE_WIRED_HEADSET: return "WIRED_HEADSET";
+            case AudioDeviceInfo.TYPE_WIRED_HEADPHONES: return "WIRED_HEADPHONES";
+            case AudioDeviceInfo.TYPE_LINE_ANALOG: return "LINE_ANALOG";
+            case AudioDeviceInfo.TYPE_LINE_DIGITAL: return "LINE_DIGITAL";
+            case AudioDeviceInfo.TYPE_BLUETOOTH_SCO: return "BLUETOOTH_SCO";
+            case AudioDeviceInfo.TYPE_BLUETOOTH_A2DP: return "BLUETOOTH_A2DP";
+            case AudioDeviceInfo.TYPE_BLE_HEADSET: return "BLE_HEADSET";
+            case AudioDeviceInfo.TYPE_BLE_SPEAKER: return "BLE_SPEAKER";
+            case AudioDeviceInfo.TYPE_HDMI: return "HDMI";
+            case AudioDeviceInfo.TYPE_HDMI_ARC: return "HDMI_ARC";
+            case AudioDeviceInfo.TYPE_USB_DEVICE: return "USB_DEVICE";
+            case AudioDeviceInfo.TYPE_USB_ACCESSORY: return "USB_ACCESSORY";
+            case AudioDeviceInfo.TYPE_USB_HEADSET: return "USB_HEADSET";
+            case AudioDeviceInfo.TYPE_DOCK: return "DOCK";
+            case AudioDeviceInfo.TYPE_AUX_LINE: return "AUX_LINE";
+            case AudioDeviceInfo.TYPE_IP: return "IP";
+            case AudioDeviceInfo.TYPE_BUS: return "BUS";
+            case AudioDeviceInfo.TYPE_BUILTIN_MIC: return "BUILTIN_MIC";
+            case AudioDeviceInfo.TYPE_REMOTE_SUBMIX: return "REMOTE_SUBMIX";
+            case AudioDeviceInfo.TYPE_TELEPHONY: return "TELEPHONY";
+            case AudioDeviceInfo.TYPE_FM: return "FM";
+            case AudioDeviceInfo.TYPE_FM_TUNER: return "FM_TUNER";
+            case AudioDeviceInfo.TYPE_TV_TUNER: return "TV_TUNER";
+            default: return fmt("TYPE_%d", type);
+        }
+    }
+
+    /** Localized name for the picker; unlisted types fall back to the stable name. */
+    @NonNull
+    private static String typeLabel(@NonNull Context context, int type) {
+        switch (type) {
+            case AudioDeviceInfo.TYPE_BUILTIN_EARPIECE:
+                return context.getString(R.string.audio_device_builtin_earpiece);
+            case AudioDeviceInfo.TYPE_BUILTIN_SPEAKER:
+            case AudioDeviceInfo.TYPE_BUILTIN_SPEAKER_SAFE:
+                return context.getString(R.string.audio_device_builtin_speaker);
+            case AudioDeviceInfo.TYPE_WIRED_HEADSET:
+                return context.getString(R.string.audio_device_wired_headset);
+            case AudioDeviceInfo.TYPE_WIRED_HEADPHONES:
+                return context.getString(R.string.audio_device_wired_headphones);
+            case AudioDeviceInfo.TYPE_BLUETOOTH_SCO:
+                return context.getString(R.string.audio_device_bluetooth_sco);
+            case AudioDeviceInfo.TYPE_BLUETOOTH_A2DP:
+            case AudioDeviceInfo.TYPE_BLE_HEADSET:
+            case AudioDeviceInfo.TYPE_BLE_SPEAKER:
+                return context.getString(R.string.audio_device_bluetooth);
+            case AudioDeviceInfo.TYPE_USB_DEVICE:
+            case AudioDeviceInfo.TYPE_USB_ACCESSORY:
+            case AudioDeviceInfo.TYPE_USB_HEADSET:
+                return context.getString(R.string.audio_device_usb);
+            case AudioDeviceInfo.TYPE_HDMI:
+            case AudioDeviceInfo.TYPE_HDMI_ARC:
+                return context.getString(R.string.audio_device_hdmi);
+            case AudioDeviceInfo.TYPE_DOCK:
+            case AudioDeviceInfo.TYPE_AUX_LINE:
+            case AudioDeviceInfo.TYPE_LINE_ANALOG:
+            case AudioDeviceInfo.TYPE_LINE_DIGITAL:
+                return context.getString(R.string.audio_device_line);
+            case AudioDeviceInfo.TYPE_BUILTIN_MIC:
+                return context.getString(R.string.audio_device_builtin_mic);
+            default:
+                return typeName(type);
+        }
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/perf/GamePerfHint.java b/app/src/main/java/cn/classfun/droidvm/lib/perf/GamePerfHint.java
index bdc0a0736..0ba6e6d9b 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/perf/GamePerfHint.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/perf/GamePerfHint.java
@@ -3,6 +3,8 @@
 // Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.lib.perf;
 
+import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
+
 import android.app.GameManager;
 import android.app.GameState;
 import android.content.Context;
@@ -56,8 +58,10 @@ private static void setState(@NonNull Context context, int mode, @NonNull String
             var manager = context.getSystemService(GameManager.class);
             if (manager == null) return;
             manager.setGameState(new GameState(false, mode));
+            Log.i(TAG, fmt("declared game state: %s", what));
         } catch (Exception e) {
             // Not fatal: without it we simply run at whatever clocks the governor picks.
+            Log.w(TAG, fmt("failed to declare game state %s", what), e);
         }
     }
 }
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/store/vm/GpuApi.java b/app/src/main/java/cn/classfun/droidvm/lib/store/vm/GpuApi.java
index 49cc5d623..cf6d4cf01 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/store/vm/GpuApi.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/store/vm/GpuApi.java
@@ -14,6 +14,7 @@ public enum GpuApi implements StringEnum {
     EGL(2, "egl", R.string.create_vm_gpu_api_egl),
     OPENGLES(3, "gles", R.string.create_vm_gpu_api_opengles),
     ANGLE(4, "angle", R.string.create_vm_gpu_api_angle);
+    // Vulkan HAL; TURNIP = bundled Mesa turnip (Adreno); PANVK = Mesa PanVK (Mali) -- not yet wired.
 
     private final int value;
     private final String name;
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/store/vm/GpuMode.java b/app/src/main/java/cn/classfun/droidvm/lib/store/vm/GpuMode.java
new file mode 100644
index 000000000..ac5f7c185
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/lib/store/vm/GpuMode.java
@@ -0,0 +1,6 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
+ *   <li>{@link #OPENGL} -- GL calls are proxied. Guest runs mesa's virgl gallium driver;
+ *   <li>{@link #VULKAN} -- Vulkan calls are proxied. On gfxstream that is its Vulkan
+ *   <li>{@link #NATIVE} -- only kernel ioctls are proxied. The guest runs its REAL driver
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/store/vm/PeripheralType.java b/app/src/main/java/cn/classfun/droidvm/lib/store/vm/PeripheralType.java
new file mode 100644
index 000000000..70f2aa605
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/lib/store/vm/PeripheralType.java
@@ -0,0 +1,54 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
+package cn.classfun.droidvm.lib.store.vm;
+
+import androidx.annotation.DrawableRes;
+import androidx.annotation.StringRes;
+
+import cn.classfun.droidvm.R;
+import cn.classfun.droidvm.lib.store.enums.StringEnum;
+
+/**
+ * Kind of virtual peripheral attached to a VM -- one entry here is one device the guest sees.
+ *
+ * <p>The list deliberately names hardware rather than roles. An earlier version offered
+ * "Speaker" and "Microphone", which reads well but does not survive contact with the devices:
+ * a virtio-snd card is one direction with one host endpoint, while an Intel HDA codec is a
+ * single card carrying both. Anything that maps roles onto devices has to guess, and the guess
+ * is wrong for one of the two. Naming the device and putting the role inside it keeps the UI
+ * and the command line the same shape.</p>
+ */
+public enum PeripheralType implements StringEnum {
+    /** virtio-snd, one PCM direction per device. Served by an unprivileged vhost-user helper. */
+    /**
+     * Intel HD Audio codec: one card, playback and capture together. Present so the model is
+     * honest about what a guest could have -- Windows has an in-box driver for it, which
+     * virtio-snd does not -- but crosvm emulates no HDA controller, so nothing can serve it yet.
+     */
+
+    private final @StringRes int titleId;
+    private final @DrawableRes int iconId;
+    private final boolean available;
+
+        this.titleId = titleId;
+        this.iconId = iconId;
+        this.available = available;
+    }
+
+    @Override
+    public int getStringId() {
+        return titleId;
+    }
+
+    @DrawableRes
+    public int getIconId() {
+        return iconId;
+    }
+
+    /** False when nothing on the host can serve this device yet; the UI says so and the
+     *  backends skip it rather than starting a VM that lies about its hardware. */
+    public boolean isAvailable() {
+        return available;
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/store/vm/SoundBuffer.java b/app/src/main/java/cn/classfun/droidvm/lib/store/vm/SoundBuffer.java
new file mode 100644
index 000000000..ceb1fbdb8
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/lib/store/vm/SoundBuffer.java
@@ -0,0 +1,50 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
+package cn.classfun.droidvm.lib.store.vm;
+
+import cn.classfun.droidvm.R;
+import cn.classfun.droidvm.lib.store.enums.StringEnum;
+
+/**
+ * How much audio the guest driver should keep queued ahead of the device.
+ *
+ * <p>This is the latency knob, and it is a real trade rather than a tuning detail. Every period
+ * the guest has not queued in time is a hole the device has to fill, and a hole is a click. On a
+ * VM with no display driver -- where compositing and video decode run on the CPU -- scheduling
+ * gaps of tens of milliseconds are ordinary, so a shallow queue clicks on exactly the content
+ * that loads the guest hardest.</p>
+ *
+ * <p>The value reaches the driver through the device's vendor config block; a driver that does
+ * not read it keeps its own default. It is counted in periods rather than milliseconds because
+ * a period's duration is not known until the format is negotiated -- 2048 bytes is about 10.7ms
+ * at 48kHz stereo 16-bit, and something else at any other rate, so a figure in milliseconds
+ * could only ever be approximate while the count is exact.</p>
+ *
+ * <p>The deepest setting matches the driver's IO pool, which is what bounds how many periods it
+ * can have in flight at once. Asking for more than the pool holds is quietly clamped, so the two
+ * numbers are kept equal deliberately.</p>
+ */
+public enum SoundBuffer implements StringEnum {
+    LOW(2, R.string.edit_vm_sound_buffer_low),
+    NORMAL(6, R.string.edit_vm_sound_buffer_normal),
+    SAFE(12, R.string.edit_vm_sound_buffer_safe);
+
+    private final int packets;
+    private final int titleId;
+
+    SoundBuffer(int packets, int titleId) {
+        this.packets = packets;
+        this.titleId = titleId;
+    }
+
+    @Override
+    public int getStringId() {
+        return titleId;
+    }
+
+    /** Periods the guest should try to keep in flight. */
+    public int getPackets() {
+        return packets;
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/store/vm/SoundMode.java b/app/src/main/java/cn/classfun/droidvm/lib/store/vm/SoundMode.java
new file mode 100644
index 000000000..47ecfed84
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/lib/store/vm/SoundMode.java
@@ -0,0 +1,29 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
+package cn.classfun.droidvm.lib.store.vm;
+
+import cn.classfun.droidvm.R;
+import cn.classfun.droidvm.lib.store.enums.StringEnum;
+
+/** Which direction a virtio-snd device carries. One device is one direction. */
+public enum SoundMode implements StringEnum {
+    SPEAKER(R.string.edit_vm_sound_mode_speaker),
+    MICROPHONE(R.string.edit_vm_sound_mode_microphone);
+
+    private final int titleId;
+
+    SoundMode(int titleId) {
+        this.titleId = titleId;
+    }
+
+    @Override
+    public int getStringId() {
+        return titleId;
+    }
+
+    /** True when the host device feeds the guest rather than the other way round. */
+    public boolean isInput() {
+        return this == MICROPHONE;
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/store/vm/SoundPurpose.java b/app/src/main/java/cn/classfun/droidvm/lib/store/vm/SoundPurpose.java
new file mode 100644
index 000000000..3a864d976
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/lib/store/vm/SoundPurpose.java
@@ -0,0 +1,126 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
+package cn.classfun.droidvm.lib.store.vm;
+
+import androidx.annotation.NonNull;
+import androidx.annotation.Nullable;
+import androidx.annotation.StringRes;
+
+import java.util.ArrayList;
+import java.util.List;
+
+import cn.classfun.droidvm.R;
+
+/**
+ * What a stream is for, as distinct from which endpoint it is on.
+ *
+ * <p>Android decides two things from this that the endpoint alone does not settle: which
+ * microphone it picks when none was named, and what processing it applies to one that was --
+ * echo cancellation and noise suppression are properties of the purpose, not of the microphone.
+ * On the output side it decides which volume stream the audio belongs to and how it ducks
+ * against other audio.</p>
+ *
+ * <p>These are AAudio's own values, named as AAudio names them. The two system presets
+ * (SYSTEM_HOTWORD, SYSTEM_ECHO_REFERENCE) are deliberately absent: they exist, but need
+ * privileges an ordinary application does not have, so offering them would only produce a
+ * stream that fails to open.</p>
+ */
+public final class SoundPurpose {
+    private SoundPurpose() {
+    }
+
+    /** One selectable value of one attribute. */
+    public static final class Choice {
+        /** As it appears in the stored key; matches AAudio's own name, lowercased. */
+        public final String value;
+        @StringRes
+        public final int titleId;
+
+        Choice(@NonNull String value, @StringRes int titleId) {
+            this.value = value;
+            this.titleId = titleId;
+        }
+    }
+
+    /** Attribute name in the stored key: {@code TYPE|address#usage=media,content=music}. */
+    public static final String ATTR_USAGE = "usage";
+    public static final String ATTR_CONTENT = "content";
+    public static final String ATTR_PRESET = "preset";
+
+    private static final Choice[] USAGE = {
+        new Choice("media", R.string.edit_vm_sound_usage_media),
+        new Choice("voice_communication", R.string.edit_vm_sound_usage_voice_communication),
+        new Choice("voice_communication_signalling",
+            R.string.edit_vm_sound_usage_voice_communication_signalling),
+        new Choice("game", R.string.edit_vm_sound_usage_game),
+        new Choice("alarm", R.string.edit_vm_sound_usage_alarm),
+        new Choice("notification", R.string.edit_vm_sound_usage_notification),
+        new Choice("notification_ringtone", R.string.edit_vm_sound_usage_notification_ringtone),
+        new Choice("notification_event", R.string.edit_vm_sound_usage_notification_event),
+        new Choice("assistant", R.string.edit_vm_sound_usage_assistant),
+        new Choice("assistance_accessibility",
+            R.string.edit_vm_sound_usage_assistance_accessibility),
+        new Choice("assistance_navigation_guidance",
+            R.string.edit_vm_sound_usage_assistance_navigation_guidance),
+        new Choice("assistance_sonification",
+            R.string.edit_vm_sound_usage_assistance_sonification),
+    };
+
+    private static final Choice[] CONTENT = {
+        new Choice("speech", R.string.edit_vm_sound_content_speech),
+        new Choice("music", R.string.edit_vm_sound_content_music),
+        new Choice("movie", R.string.edit_vm_sound_content_movie),
+        new Choice("sonification", R.string.edit_vm_sound_content_sonification),
+    };
+
+    private static final Choice[] PRESET = {
+        new Choice("generic", R.string.edit_vm_sound_preset_generic),
+        new Choice("camcorder", R.string.edit_vm_sound_preset_camcorder),
+        new Choice("voice_recognition", R.string.edit_vm_sound_preset_voice_recognition),
+        new Choice("voice_communication", R.string.edit_vm_sound_preset_voice_communication),
+        new Choice("unprocessed", R.string.edit_vm_sound_preset_unprocessed),
+        new Choice("voice_performance", R.string.edit_vm_sound_preset_voice_performance),
+    };
+
+    /** The attributes offered for one direction, in the order they are asked about. */
+    @NonNull
+    public static List<String> attributesFor(boolean input) {
+        var out = new ArrayList<String>();
+        if (input) {
+            out.add(ATTR_PRESET);
+        } else {
+            out.add(ATTR_USAGE);
+            out.add(ATTR_CONTENT);
+        }
+        return out;
+    }
+
+    @NonNull
+    public static Choice[] choicesFor(@NonNull String attribute) {
+        switch (attribute) {
+            case ATTR_USAGE: return USAGE;
+            case ATTR_CONTENT: return CONTENT;
+            case ATTR_PRESET: return PRESET;
+            default: return new Choice[0];
+        }
+    }
+
+    @StringRes
+    public static int titleFor(@NonNull String attribute) {
+        switch (attribute) {
+            case ATTR_USAGE: return R.string.edit_vm_sound_purpose_usage;
+            case ATTR_CONTENT: return R.string.edit_vm_sound_purpose_content;
+            default: return R.string.edit_vm_sound_purpose_preset;
+        }
+    }
+
+    /** The label for a stored value, or null when it is not one this build offers. */
+    @Nullable
+    public static Choice find(@NonNull String attribute, @NonNull String value) {
+        for (var choice : choicesFor(attribute)) {
+            if (choice.value.equals(value)) return choice;
+        }
+        return null;
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/store/vm/SoundUnderrun.java b/app/src/main/java/cn/classfun/droidvm/lib/store/vm/SoundUnderrun.java
new file mode 100644
index 000000000..f9ec6144d
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/lib/store/vm/SoundUnderrun.java
@@ -0,0 +1,57 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
+package cn.classfun.droidvm.lib.store.vm;
+
+import cn.classfun.droidvm.R;
+import cn.classfun.droidvm.lib.store.enums.StringEnum;
+
+/**
+ * What the host device plays when the guest has not queued a period in time.
+ *
+ * <p>Silence is honest and maximally audible; continuing the waveform hides short holes, which
+ * is the trade a shallow queue wants to make. Pairs with {@link SoundBuffer}: the lower the
+ * latency, the more often there is something to conceal.</p>
+ */
+public enum SoundUnderrun implements StringEnum {
+    /** A period of zeroes. Honest, and the most audible thing there is. */
+    SILENCE(R.string.edit_vm_sound_underrun_silence, true),
+    /**
+     * Repeats the last pitch period. crosvm finds the period by autocorrelation over the tail of
+     * the previous audio, repeats it in phase, fades it out across a few periods, and crossfades
+     * real audio back in. Only 16-bit PCM is concealed; anything else falls back to silence.
+     */
+    REPEAT(R.string.edit_vm_sound_underrun_repeat, true),
+    /**
+     * Waveform Similarity Overlap-Add: searches for the best-matching window at each splice and
+     * overlap-adds, rather than repeating one period unchanged. Costs more and does not lock to
+     * a single pitch, so a long hole does not turn into a held note.
+     */
+    WSOLA(R.string.edit_vm_sound_underrun_wsola, true),
+    /**
+     * Linear-predictive extrapolation: fits an all-pole filter to the previous audio and excites
+     * it to continue the signal, rather than reusing samples. What VoIP codecs do: the formants
+     * come from the filter, so what does get repeated is the excitation, which loops far less
+     * audibly than a waveform does.
+     */
+    LPC(R.string.edit_vm_sound_underrun_lpc, true);
+
+    private final int titleId;
+    private final boolean implemented;
+
+    SoundUnderrun(int titleId, boolean implemented) {
+        this.titleId = titleId;
+        this.implemented = implemented;
+    }
+
+    @Override
+    public int getStringId() {
+        return titleId;
+    }
+
+    /** Hides the unimplemented modes from the picker; see {@code EnumPicker}. */
+    @Override
+    public boolean isDisplay() {
+        return implemented;
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/store/vm/VMPeripheralConfig.java b/app/src/main/java/cn/classfun/droidvm/lib/store/vm/VMPeripheralConfig.java
index 2c4092eb4..170df6f28 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/store/vm/VMPeripheralConfig.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/store/vm/VMPeripheralConfig.java
@@ -1,4 +1,42 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
+package cn.classfun.droidvm.lib.store.vm;
+
+import androidx.annotation.NonNull;
+
+import java.util.ArrayList;
+import java.util.List;
+
 import cn.classfun.droidvm.lib.data.HostAudioDevices;
+import cn.classfun.droidvm.lib.store.base.DataItem;
+import cn.classfun.droidvm.lib.store.enums.Enums;
+
+/**
+ * Wrapper over one entry of a VM config's "peripherals" array -- one entry, one guest device.
+ *
+ * <p>Host endpoints are stored as the stable descriptor from {@code HostAudioDevices}
+ * ({@code "<TYPE>|<address>"}) rather than the numeric AudioDeviceInfo id, because those ids are
+ * handed out per boot: the same number means a different endpoint, or none, after a reboot or a
+ * pairing. The label alongside it is only so a row can still name a device that is currently
+ * unplugged. Resolution to a live id happens in the daemon at VM start.</p>
+ */
+public final class VMPeripheralConfig {
+    public final DataItem item;
+
+    public VMPeripheralConfig(@NonNull DataItem item) {
+        this.item = item;
+    }
+
+    @NonNull
+    public PeripheralType getType() {
+        return Enums.optEnum(item, "type", PeripheralType.VIRTIO_SOUND);
+    }
+
+    public void setType(@NonNull PeripheralType type) {
+        item.set("type", type);
+    }
+
     /**
      * Creates the sound card offered by default for a new VM: one playback and one capture
      * endpoint, both left to Android's current system routing.
@@ -16,3 +54,173 @@ public static VMPeripheralConfig createDefaultVirtioSound() {
         return config;
     }
 
+    // ---- virtio-snd ----
+
+    /**
+     * One host endpoint on the card: a direction, and the host device it is pinned to.
+     *
+     * <p>A card can carry several. What is shared between them lives on the card -- the buffer
+     * depth and what to do about an underrun are properties of the device's queues, not of any
+     * one endpoint -- and what distinguishes them lives here.</p>
+     */
+    public static final class Endpoint {
+        public final DataItem item;
+
+        Endpoint(@NonNull DataItem item) {
+            this.item = item;
+        }
+
+        @NonNull
+        public SoundMode getMode() {
+            return Enums.optEnum(item, "mode", SoundMode.SPEAKER);
+        }
+
+        public void setMode(@NonNull SoundMode mode) {
+            item.set("mode", mode);
+        }
+
+        /** Stable host-device descriptor; see {@code HostAudioDevices.keyOf}. */
+        @NonNull
+        public String getHostDevice() {
+            var v = item.opt("host_device", (DataItem) null);
+            return v == null ? "" : v.asString();
+        }
+
+        @NonNull
+        public String getHostLabel() {
+            var v = item.opt("host_label", (DataItem) null);
+            return v == null ? "" : v.asString();
+        }
+
+        public void setHostDevice(@NonNull String key, @NonNull String label) {
+            item.set("host_device", key);
+            item.set("host_label", label);
+        }
+    }
+
+    /** The card's endpoints, in the order they are shown and numbered. */
+    @NonNull
+    public List<Endpoint> getEndpoints() {
+        var out = new ArrayList<Endpoint>();
+        var list = item.opt("endpoints", (DataItem) null);
+        if (list == null) return out;
+        for (int i = 0; i < list.size(); i++) {
+            out.add(new Endpoint(list.opt(i, DataItem.newObject())));
+        }
+        return out;
+    }
+
+    /**
+     * Appends an endpoint and returns it.
+     *
+     * <p>The list is re-read after it is created rather than kept from the local variable:
+     * {@code set} stores a copy, so appending to the value that was handed to it would build a
+     * list nothing else can see -- which is what silently swallowed the first endpoint of every
+     * new card.</p>
+     */
+    @NonNull
+    public Endpoint addEndpoint() {
+        var list = item.opt("endpoints", (DataItem) null);
+        if (list == null || !list.is(DataItem.Type.ARRAY)) {
+            item.set("endpoints", DataItem.newArray());
+            list = item.opt("endpoints", (DataItem) null);
+        }
+        var endpoint = DataItem.newObject();
+        list.append(endpoint);
+        return new Endpoint(endpoint);
+    }
+
+    public void removeEndpoint(int index) {
+        var list = item.opt("endpoints", (DataItem) null);
+        if (list == null || index < 0 || index >= list.size()) return;
+        list.remove(index);
+    }
+
+    @NonNull
+    public SoundBuffer getBuffer() {
+        return Enums.optEnum(item, "buffer", SoundBuffer.NORMAL);
+    }
+
+    public void setBuffer(@NonNull SoundBuffer buffer) {
+        item.set("buffer", buffer);
+    }
+
+    @NonNull
+    public SoundUnderrun getUnderrun() {
+        return Enums.optEnum(item, "underrun", SoundUnderrun.SILENCE);
+    }
+
+    public void setUnderrun(@NonNull SoundUnderrun underrun) {
+        item.set("underrun", underrun);
+    }
+
+    // ---- host endpoints ----
+
+    /**
+     * Stable host-device descriptor for the single endpoint of a one-direction device, or ""
+     * for "whatever the host would route to anyway".
+     */
+    @NonNull
+    public String getHostDevice() {
+        return str("host_device");
+    }
+
+    @NonNull
+    public String getHostLabel() {
+        return str("host_label");
+    }
+
+    public void setHostDevice(@NonNull String key, @NonNull String label) {
+        item.set("host_device", key);
+        item.set("host_label", label);
+    }
+
+    /** Output endpoint of a device that carries both directions (Intel HDA). */
+    @NonNull
+    public String getHostOutDevice() {
+        return str("host_out_device");
+    }
+
+    @NonNull
+    public String getHostOutLabel() {
+        return str("host_out_label");
+    }
+
+    public void setHostOutDevice(@NonNull String key, @NonNull String label) {
+        item.set("host_out_device", key);
+        item.set("host_out_label", label);
+    }
+
+    /** Input endpoint of a device that carries both directions (Intel HDA). */
+    @NonNull
+    public String getHostInDevice() {
+        return str("host_in_device");
+    }
+
+    @NonNull
+    public String getHostInLabel() {
+        return str("host_in_label");
+    }
+
+    public void setHostInDevice(@NonNull String key, @NonNull String label) {
+        item.set("host_in_device", key);
+        item.set("host_in_label", label);
+    }
+
+    @NonNull
+    private String str(@NonNull String key) {
+        var v = item.optString(key, "");
+        return v == null ? "" : v;
+    }
+
+    /** Wraps every entry of {@code config}'s "peripherals" array, in order. */
+    @NonNull
+    public static List<VMPeripheralConfig> listOf(@NonNull DataItem config) {
+        var out = new ArrayList<VMPeripheralConfig>();
+        var arr = config.opt("peripherals", null);
+        if (arr == null || !arr.is(DataItem.Type.ARRAY)) return out;
+        for (var iter : arr)
+            out.add(new VMPeripheralConfig(iter.getValue()));
+        return out;
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/ui/RecordAudioPermission.java b/app/src/main/java/cn/classfun/droidvm/lib/ui/RecordAudioPermission.java
new file mode 100644
index 000000000..d7f554f61
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/lib/ui/RecordAudioPermission.java
@@ -0,0 +1,75 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
+package cn.classfun.droidvm.lib.ui;
+
+import android.Manifest;
+import android.content.pm.PackageManager;
+
+import androidx.activity.result.ActivityResultLauncher;
+import androidx.activity.result.contract.ActivityResultContracts;
+import androidx.annotation.NonNull;
+import androidx.appcompat.app.AppCompatActivity;
+import androidx.core.content.ContextCompat;
+
+import com.google.android.material.dialog.MaterialAlertDialogBuilder;
+
+import cn.classfun.droidvm.R;
+
+/**
+ * Asks for RECORD_AUDIO when a VM is given a microphone peripheral.
+ *
+ * <p>Whether this is what actually unlocks the mic is not certain: crosvm is forked by the root
+ * daemon, so its capture streams reach AudioFlinger as uid 0, which is checked separately from
+ * (and more leniently than) an app's runtime grant -- RECORD_AUDIO is an appops/uid permission,
+ * not one of the few that map to a supplementary GID, so it cannot be handed to a child process
+ * by putting it in a group. We ask anyway: it costs one dialog, it is what a user-visible
+ * "this VM listens to your mic" ought to look like, and it is the prerequisite for the fallback
+ * of proxying capture through an unprivileged app-side helper.</p>
+ *
+ * <p>Construct from an activity's {@code onCreate}: the result launcher has to be registered
+ * before the activity reaches STARTED. The pending action runs either way -- a denied permission
+ * is not a reason to refuse to save the config.</p>
+ */
+public final class RecordAudioPermission {
+    private final AppCompatActivity activity;
+    private final ActivityResultLauncher<String> launcher;
+    private Runnable pending;
+
+    public RecordAudioPermission(@NonNull AppCompatActivity activity) {
+        this.activity = activity;
+        this.launcher = activity.registerForActivityResult(
+            new ActivityResultContracts.RequestPermission(), granted -> runPending());
+    }
+
+    /**
+     * Runs {@code action} immediately when the mic is already allowed; otherwise shows a
+     * rationale, requests the permission, and runs it once the user has responded.
+     */
+    public void ensureThen(@NonNull Runnable action) {
+        if (granted()) {
+            action.run();
+            return;
+        }
+        pending = action;
+        new MaterialAlertDialogBuilder(activity)
+            .setTitle(R.string.record_audio_permission_title)
+            .setMessage(R.string.record_audio_permission_message)
+            .setPositiveButton(R.string.record_audio_permission_allow,
+                (d, w) -> launcher.launch(Manifest.permission.RECORD_AUDIO))
+            .setNegativeButton(R.string.record_audio_permission_skip, (d, w) -> runPending())
+            .setOnCancelListener(d -> runPending())
+            .show();
+    }
+
+    private void runPending() {
+        var action = pending;
+        pending = null;
+        if (action != null) action.run();
+    }
+
+    public boolean granted() {
+        return ContextCompat.checkSelfPermission(activity,
+            Manifest.permission.RECORD_AUDIO) == PackageManager.PERMISSION_GRANTED;
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/utils/StringUtils.java b/app/src/main/java/cn/classfun/droidvm/lib/utils/StringUtils.java
index c67750b04..d3f36fcc6 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/utils/StringUtils.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/utils/StringUtils.java
@@ -26,6 +26,7 @@
 import java.io.IOException;
 import java.io.InputStream;
 import java.security.SecureRandom;
+import java.util.Collection;
 import java.util.Formatter;
 import java.util.Locale;
 
@@ -205,6 +206,18 @@ public static String joinNonEmpty(@NonNull String sep, @NonNull String... parts)
         return sb.toString();
     }
 
+    /**
+     * A {@code "\n- a\n- b"} bullet list, the shape the disk and VM dialogs paste
+     * into a message resource. The leading newline is part of it: the list always
+     * follows a sentence, and every caller was writing that newline by hand.
+     */
+    @NonNull
+    public static String bulletList(@NonNull Collection<String> items) {
+        var sb = new StringBuilder();
+        for (var item : items) sb.append("\n- ").append(item);
+        return sb.toString();
+    }
+
     @NonNull
     public static String fmt(String fmt, Object... args) {
         return new Formatter(Locale.ROOT).format(fmt, args).toString();
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/disk/action/BackingChainLinker.java b/app/src/main/java/cn/classfun/droidvm/ui/disk/action/BackingChainLinker.java
index a0ac0afe8..a92c14aa8 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/disk/action/BackingChainLinker.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/disk/action/BackingChainLinker.java
@@ -3,6 +3,8 @@
 // Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.ui.disk.action;
 
+import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
+
 import static cn.classfun.droidvm.lib.utils.AssetUtils.getPrebuiltBinaryPath;
 import static cn.classfun.droidvm.lib.utils.RunUtils.runListQuiet;
 import static cn.classfun.droidvm.lib.utils.StringUtils.basename;
@@ -244,6 +246,7 @@ private static void rebaseAbsolute(@NonNull String overlay, @NonNull String absB
                 "-u", "-b", absBacking, "-F", format, overlay);
             if (!result.isSuccess()) result.printLog(TAG);
         } catch (Exception e) {
+            Log.w(TAG, fmt("rebase -u failed for %s", overlay), e);
         }
     }
 
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/display/base/DisplayInputBackend.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/base/DisplayInputBackend.java
index 3b7d38eb3..a796c4cb4 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/display/base/DisplayInputBackend.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/base/DisplayInputBackend.java
@@ -11,6 +11,8 @@
  * bar is backend-agnostic:
  *
  * <ul>
+ *   <li>VNC -- maps to {@code VncClient}: Android key codes to X11 keysyms, pointer to RFB events.</li>
+ *   <li>Native -- maps to {@code InputForwarder}/{@code EvdevEncoder}: key codes to Linux evdev
  *       scan codes, pointer to the mode-appropriate virtio-input device.</li>
  * </ul>
  *
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/display/base/InputMode.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/base/InputMode.java
index dd031b6eb..4fc5ea667 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/display/base/InputMode.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/base/InputMode.java
@@ -14,9 +14,12 @@
  * touches into guest input:
  *
  * <ul>
+ *   <li>{@link #TOUCH} -- absolute multi-touch: fingers map straight to guest coordinates, multiple
  *       contacts preserved (the default; what a touchscreen guest expects).</li>
+ *   <li>{@link #MOUSE} -- relative pointer: drags become REL_X/REL_Y deltas with button/wheel
  *       emulation. Android has no absolute-mouse concept, so this is the only faithful mouse path
  *       for guests that want relative motion (FPS games, desktops with pointer acceleration).</li>
+ *   <li>{@link #TABLET} -- absolute single pointer (stylus/graphics-tablet): one contact mapped to
  *       absolute guest coordinates, no multi-finger gestures.</li>
  * </ul>
  *
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/display/base/PointerGestureTranslator.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/base/PointerGestureTranslator.java
index 8387d7fc9..18a3af0d7 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/display/base/PointerGestureTranslator.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/base/PointerGestureTranslator.java
@@ -19,12 +19,15 @@
  *
  * Gestures:
  * <ul>
+ *   <li>One finger -- MOUSE: drag = relative cursor motion (the guest renders the cursor), quick tap
  *       = left click, tap-and-a-half (tap, then touch-and-move within the tap-drag window) = left
  *       drag with no leading click, libinput-style. TABLET: press is committed as a left-button-down
  *       at the absolute position after a short defer window (so a second finger can still turn it
  *       into a right-click), then drag draws; quick tap = left click.</li>
+ *   <li>Two fingers -- a quick second-finger tap (contact count 1-&gt;2-&gt;1 where finger 2's press
  *       time &lt; threshold and it barely moved) = right click, positioned at finger 1 (tablet).
  *       Two fingers panning together = scroll-wheel notches.</li>
+ *   <li>Three fingers -- local display zoom/pan: emitted as view-space transform deltas, applied to
  *       the display view only, never sent to the guest.</li>
  * </ul>
  *
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/display/nativedisplay/display/CursorPositionStream.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/nativedisplay/display/CursorPositionStream.java
index 4afb7718c..c11900494 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/display/nativedisplay/display/CursorPositionStream.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/nativedisplay/display/CursorPositionStream.java
@@ -3,6 +3,8 @@
 // Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.ui.vm.display.nativedisplay.display;
 
+import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
+
 import android.crosvm.ICrosvmAndroidDisplayService;
 import android.os.Handler;
 import android.os.Looper;
@@ -108,6 +110,7 @@ private void readLoop() {
         } catch (IOException e) {
             if (!closed) {
                 // Normal at VM shutdown: crosvm exits and the write end closes.
+                Log.i(TAG, fmt("cursor position stream ended: %s", e.getMessage()));
             }
         }
     }
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/display/nativedisplay/input/TouchScaleCalculator.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/nativedisplay/input/TouchScaleCalculator.java
index 23ca2aee0..d7e072ef5 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/display/nativedisplay/input/TouchScaleCalculator.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/nativedisplay/input/TouchScaleCalculator.java
@@ -5,6 +5,7 @@
 
 /**
  * Computes per-axis touch scale from view size to the guest device's fixed normalized ABS range
+ * ({@link EvdevEncoder#NORMALIZED_ABS_MAX}) -- independent of the guest resolution, so it survives
  * guest auto-resize. The touch listener is attached to the SurfaceView, which is itself sized to
  * the guest aspect ratio (see {@code VMNativeDisplayActivity#updateAspectRatio}), so its bounds
  * carry no letterbox/pillarbox bars: there is no offset and scale is simply NORMALIZED_ABS_MAX/view
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/base/VMEditTab.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/base/VMEditTab.java
index 5668040a5..219b71ad5 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/base/VMEditTab.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/base/VMEditTab.java
@@ -20,6 +20,7 @@
 import cn.classfun.droidvm.ui.vm.edit.boot.VMEditBootTab;
 import cn.classfun.droidvm.ui.vm.edit.graphics.VMEditGraphicsTab;
 import cn.classfun.droidvm.ui.vm.edit.network.VMEditNetworkTab;
+import cn.classfun.droidvm.ui.vm.edit.peripheral.VMEditPeripheralTab;
 import cn.classfun.droidvm.ui.vm.edit.storage.VMEditStorageTab;
 
 public enum VMEditTab implements StringEnum {
@@ -47,6 +48,11 @@ public enum VMEditTab implements StringEnum {
         R.string.create_vm_tab_graphics,
         R.id.tab_content_graphics,
         VMEditGraphicsTab.class
+    ),
+    TAB_PERIPHERAL(
+        R.string.create_vm_tab_peripheral,
+        R.id.tab_content_peripheral,
+        VMEditPeripheralTab.class
     );
 
     public static final VMEditTab DEFAULT = TAB_BASIC;
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/peripheral/VMEditPeripheralTab.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/peripheral/VMEditPeripheralTab.java
index 4071020c0..9d7f09d50 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/peripheral/VMEditPeripheralTab.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/peripheral/VMEditPeripheralTab.java
@@ -1,7 +1,52 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
+package cn.classfun.droidvm.ui.vm.edit.peripheral;
+
+import static java.util.Objects.requireNonNull;
+import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
+
+import android.view.View;
+
+import androidx.annotation.NonNull;
+import java.util.ArrayList;
+
+import cn.classfun.droidvm.R;
+import cn.classfun.droidvm.lib.store.base.DataItem;
+import cn.classfun.droidvm.lib.data.HostAudioDevices;
+import cn.classfun.droidvm.lib.store.vm.PeripheralType;
 import cn.classfun.droidvm.lib.store.vm.SerialBackend;
+import cn.classfun.droidvm.lib.store.vm.VMConfig;
+import cn.classfun.droidvm.lib.store.vm.VMPeripheralConfig;
 import cn.classfun.droidvm.lib.store.vm.VMSerialConfig;
+import cn.classfun.droidvm.lib.store.vm.VMStore;
+import cn.classfun.droidvm.ui.vm.edit.VMEditActivity;
+import cn.classfun.droidvm.ui.vm.edit.base.VMEditBaseTab;
+import cn.classfun.droidvm.ui.widgets.container.CardItemListView;
+
+/**
+ * Peripherals attached to the VM. Today that means audio endpoints, which the crosvm backend
+ * turns into one virtio-snd card: speakers become its output PCM devices, microphones its input
+ * ones, each pinned to the host endpoint picked here.
+ */
+public final class VMEditPeripheralTab extends VMEditBaseTab {
+    private CardItemListView listPeripherals;
     private CardItemListView listSerialPorts;
+    private VMPeripheralEditAdapter adapter;
+
+    public VMEditPeripheralTab(VMEditActivity parent, View view) {
+        super(parent, view);
+    }
+
+    @Override
+    public void initView() {
+        listPeripherals = view.findViewById(R.id.list_peripherals);
         listSerialPorts = view.findViewById(R.id.list_serial_ports);
+    }
+
+    @Override
+    public void initValue() {
+        adapter = listPeripherals.setAdapter(VMPeripheralEditAdapter.class);
         adapter.setMicPermissionGate(parent::ensureRecordAudioThen);
         listSerialPorts.setAdapter(VMSerialEditAdapter.class);
         if (!parent.editMode) {
@@ -14,6 +59,15 @@
         var scratch = DataItem.newObject();
         VMSerialConfig.ensureDefaults(scratch);
         listSerialPorts.setItems(scratch.opt(VMSerialConfig.KEY, DataItem.newArray()));
+    }
+
+    @Override
+    public void onTabShown() {
+        // The host device list is live: something may have been plugged in or paired since the
+        // rows were last bound.
+        if (adapter != null) adapter.refreshHostDevices();
+    }
+
     /** Whether the unsaved peripheral rows give the guest a host microphone. */
     public boolean hasMicrophone() {
         for (var peripheral : VMPeripheralConfig.listOf(wrap()))
@@ -22,10 +76,36 @@ public boolean hasMicrophone() {
         return false;
     }
 
+    @Override
+    public void loadConfig(@NonNull VMConfig config) {
+        listPeripherals.setItems(config.item.opt("peripherals", DataItem.newArray()));
         // VMConfig's constructor already materialized the fixed quartet for configs from
         // before "serial_ports"; ensureDefaults here only covers configs built by hand.
         VMSerialConfig.ensureDefaults(config.item);
         listSerialPorts.setItems(config.item.opt(VMSerialConfig.KEY, DataItem.newArray()));
+    }
+
+    @Override
+    public boolean validateInput(@NonNull VMStore store) {
+        // Two endpoints pointed at one host device in the same direction would open two AAudio
+        // streams onto it: allowed by the platform, but never what someone meant to configure.
+        // The direction is part of the identity, so a microphone and a speaker cannot collide.
+        // Checked across every card, not within one: two cards aimed at the same speaker is the
+        // same mistake as one card aimed at it twice.
+        var seen = new ArrayList<String>();
+        for (var peripheral : VMPeripheralConfig.listOf(wrap())) {
+            if (peripheral.getType() != PeripheralType.VIRTIO_SOUND) continue;
+            for (var endpoint : peripheral.getEndpoints()) {
+                var key = endpoint.getHostDevice();
+                // Unset, or the platform's own routing, can be chosen as often as one likes:
+                // it does not name a device, so there is nothing to collide over.
+                if (key.isEmpty() || HostAudioDevices.SYSTEM_DEFAULT_KEY.equals(key)) continue;
+                var identity = fmt("%s|%s", endpoint.getMode().isInput() ? "in" : "out", key);
+                if (seen.contains(identity))
+                    return showValidateFailed(R.string.edit_vm_peripheral_duplicate_host);
+                seen.add(identity);
+            }
+        }
         // A path-based serial backend without a path has nowhere to put the bytes. PTY is the
         // exception: its path is an optional convenience symlink. Two USB ACM ports on one
         // slot would be a guaranteed busy-refusal at boot, so it fails here instead.
@@ -41,4 +121,20 @@ public boolean hasMicrophone() {
                 usbSlots.add(port.getUsbSlot());
             }
         }
+        return true;
+    }
+
+    @Override
+    public void saveConfig(@NonNull VMConfig config) {
+        config.item.set("peripherals", requireNonNull(listPeripherals.getItems()));
         config.item.set(VMSerialConfig.KEY, requireNonNull(listSerialPorts.getItems()));
+    }
+
+    /** The unsaved rows, shaped like a VM config so {@link VMPeripheralConfig} can read them. */
+    @NonNull
+    private DataItem wrap() {
+        var wrapper = DataItem.newObject();
+        wrapper.set("peripherals", requireNonNull(listPeripherals.getItems()));
+        return wrapper;
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/peripheral/VMPeripheralEditAdapter.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/peripheral/VMPeripheralEditAdapter.java
index 4ab631c5b..19b61cb95 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/peripheral/VMPeripheralEditAdapter.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/peripheral/VMPeripheralEditAdapter.java
@@ -1,6 +1,515 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
+package cn.classfun.droidvm.ui.vm.edit.peripheral;
+
+import static android.view.View.GONE;
+import static android.view.View.VISIBLE;
+import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
+
+import android.annotation.SuppressLint;
+import android.content.Context;
+import android.content.DialogInterface;
+import android.view.Menu;
+import android.view.View;
+import android.view.LayoutInflater;
+import android.widget.LinearLayout;
+import android.widget.PopupMenu;
+import android.widget.TextView;
+
+import androidx.annotation.NonNull;
+import androidx.annotation.Nullable;
+import androidx.recyclerview.widget.RecyclerView;
+
+import com.google.android.material.button.MaterialButton;
+import com.google.android.material.dialog.MaterialAlertDialogBuilder;
+
+import java.util.ArrayList;
+import java.util.List;
+import java.util.function.Consumer;
+
+import cn.classfun.droidvm.R;
+import cn.classfun.droidvm.lib.data.HostAudioDevices;
+import cn.classfun.droidvm.lib.store.base.DataItem;
+import cn.classfun.droidvm.lib.store.vm.PeripheralType;
+import cn.classfun.droidvm.lib.store.vm.SoundBuffer;
+import cn.classfun.droidvm.lib.store.vm.SoundMode;
+import cn.classfun.droidvm.lib.store.vm.SoundPurpose;
+import cn.classfun.droidvm.lib.store.vm.SoundUnderrun;
+import cn.classfun.droidvm.lib.store.vm.VMPeripheralConfig;
+import cn.classfun.droidvm.lib.ui.MenuDialogBuilder;
+import cn.classfun.droidvm.ui.widgets.container.CardItemAdapter;
+
+/**
+ * The peripheral list's rows. The + button asks which device first, because the device decides
+ * what the rest of the row means -- a virtio-snd card carries a list of endpoints grouped by
+ * direction, an Intel HDA codec carries exactly one of each -- so the row shows one field group
+ * or the other rather than a lowest common denominator.
+ *
+ * <p>Host endpoints come from what the phone reports right now ({@link HostAudioDevices}); the
+ * row stores the stable descriptor, not the live id, and says so when the stored device is not
+ * currently connected.</p>
+ */
+public final class VMPeripheralEditAdapter extends CardItemAdapter<VMPeripheralEditViewHolder> {
+    /**
+     * Endpoints one card may carry in one direction. The guest driver registers this many
+     * subdevices per direction and ignores the rest, so offering more would offer endpoints that
+     * never appear in the guest.
+     */
+    private static final int MAX_PER_DIRECTION = 4;
+
+    /** Asks for RECORD_AUDIO before a capture-capable device is added; set by the tab. */
+    private Consumer<Runnable> micPermissionGate;
+    // What the phone reported last time we looked, so binding a row is not a binder call each
+    // time it scrolls past. Dropped by refreshHostDevices().
+    private List<HostAudioDevices.Entry> outputCache;
+    private List<HostAudioDevices.Entry> inputCache;
+
+    public VMPeripheralEditAdapter(@NonNull Context context) {
+        super(context);
+    }
+
+    public void setMicPermissionGate(@Nullable Consumer<Runnable> gate) {
+        this.micPermissionGate = gate;
+    }
+
+    @NonNull
+    @Override
+    protected VMPeripheralEditViewHolder createViewHolderInstance(@NonNull View view) {
+        return new VMPeripheralEditViewHolder(view);
+    }
+
+    @Override
+    protected int getLayoutRes() {
+        return R.layout.item_vm_peripheral_edit;
+    }
+
+    @Override
+    public void onAddRequested(@NonNull View anchor) {
+        // Built from the enum rather than a menu resource, so a new device kind shows up here
+        // the moment it is added to PeripheralType.
+        var menu = new PopupMenu(context, null).getMenu();
+        for (var type : PeripheralType.values()) {
+            var item = menu.add(Menu.NONE, type.ordinal(), type.ordinal(),
+                type.getDisplayString(context));
+            item.setIcon(type.getIconId());
+        }
+        new MenuDialogBuilder(context)
+            .setTitle(R.string.edit_vm_peripheral_add_title)
+            .setMenu(menu)
+            .setListener(item -> {
+                addPeripheral(PeripheralType.values()[item.getItemId()]);
+                return true;
+            })
+            .show();
+    }
+
+    private void addPeripheral(@NonNull PeripheralType type) {
+        Runnable add = () -> {
+            if (type == PeripheralType.VIRTIO_SOUND) {
                 // Keep manually added cards identical to the one a new VM starts with.
                 appendItem(VMPeripheralConfig.createDefaultVirtioSound().item);
                 return;
+            }
             var config = new VMPeripheralConfig(DataItem.newObject());
             config.setType(type);
             appendItem(config.item);
+        };
+        // Anything that can capture needs the host mic permission asked for, and both kinds now
+        // start with a microphone on them.
+        if (micPermissionGate != null) {
+            micPermissionGate.accept(add);
+            return;
+        }
+        add.run();
+    }
+
+    @Override
+    public void onBindViewHolder(@NonNull VMPeripheralEditViewHolder holder, int position) {
+        var peripheral = new VMPeripheralConfig(items.get(position));
+        var type = peripheral.getType();
+        holder.ivIcon.setImageResource(type.getIconId());
+        holder.tvType.setText(type.getDisplayString(context));
+        holder.tvUnavailable.setVisibility(type.isAvailable() ? GONE : VISIBLE);
+
+
+                bindVirtioSound(holder, peripheral);
+                bindIntelHda(holder, peripheral);
+        }
+
+        holder.btnDelete.setOnClickListener(v -> {
+            int pos = holder.getBindingAdapterPosition();
+            if (pos != RecyclerView.NO_POSITION)
+                removeItem(pos);
+        });
+    }
+
+    private void bindVirtioSound(
+        @NonNull VMPeripheralEditViewHolder holder, @NonNull VMPeripheralConfig peripheral
+    ) {
+        // Shared by every endpoint on the card: they describe the device's queues rather than any
+        // one endpoint, so there is one of each per card and not one per endpoint.
+        holder.btnBuffer.configure(SoundBuffer.class, peripheral.getBuffer());
+        holder.btnBuffer.setOnValueChangedListener((oldVal, newVal) -> {
+            int pos = holder.getBindingAdapterPosition();
+            if (pos != RecyclerView.NO_POSITION)
+                new VMPeripheralConfig(items.get(pos)).setBuffer((SoundBuffer) newVal);
+        });
+
+        // Underruns are a playback failure: the guest was late with a period and the endpoint has
+        // nothing to play, so something has to be played instead. Capture fails the other way
+        // round -- the host recorded audio and the guest left nowhere to put it -- and there is no
+        // equivalent choice to offer, because audio the microphone did not hear cannot be
+        // invented. A card with no playback endpoint has nothing to decide.
+        boolean anyOutput = false;
+        for (var endpoint : peripheral.getEndpoints()) {
+            if (!endpoint.getMode().isInput()) anyOutput = true;
+        }
+        holder.btnUnderrun.setVisibility(anyOutput ? VISIBLE : GONE);
+        holder.btnUnderrun.configure(SoundUnderrun.class, peripheral.getUnderrun());
+        holder.btnUnderrun.setOnValueChangedListener((oldVal, newVal) -> {
+            int pos = holder.getBindingAdapterPosition();
+            if (pos != RecyclerView.NO_POSITION)
+                new VMPeripheralConfig(items.get(pos)).setUnderrun((SoundUnderrun) newVal);
+        });
+
+        // Playback above the rule, capture below. A card with neither is legal and starts a card
+        // with no streams, which is why both groups go down to nothing.
+        bindEndpointGroup(holder, peripheral, SoundMode.SPEAKER, holder.soundOutEndpoints);
+        bindEndpointGroup(holder, peripheral, SoundMode.MICROPHONE, holder.soundInEndpoints);
+
+        // One button for both directions, which then asks which one. A row's direction cannot be
+        // changed afterwards, so this is the only place the question is asked.
+        boolean anyRoom = false;
+        for (var mode : SoundMode.values())
+            if (countOf(peripheral, mode) < MAX_PER_DIRECTION) anyRoom = true;
+        holder.btnAddEndpoint.setEnabled(anyRoom);
+        holder.btnAddEndpoint.setOnClickListener(v -> {
+            int pos = holder.getBindingAdapterPosition();
+            if (pos == RecyclerView.NO_POSITION) return;
+            askDirectionAndAdd(new VMPeripheralConfig(items.get(pos)), pos);
+        });
+    }
+
+    /**
+     * Asks which direction to add, then adds it. A direction that is already full is left out of
+     * the list rather than shown and refused.
+     */
+    private void askDirectionAndAdd(@NonNull VMPeripheralConfig peripheral, int pos) {
+        var modes = new ArrayList<SoundMode>();
+        var labels = new ArrayList<String>();
+        for (var mode : SoundMode.values()) {
+            if (countOf(peripheral, mode) >= MAX_PER_DIRECTION) continue;
+            modes.add(mode);
+            labels.add(context.getString(mode.getStringId()));
+        }
+        if (modes.isEmpty()) return;
+        new MaterialAlertDialogBuilder(context)
+            .setTitle(R.string.edit_vm_sound_endpoint_add)
+            .setItems(labels.toArray(new String[0]), (dialog, which) -> {
+                var mode = modes.get(which);
+                Runnable append = () -> {
+                    var endpoint = peripheral.addEndpoint();
+                    endpoint.setMode(mode);
+                    endpoint.setHostDevice(HostAudioDevices.SYSTEM_DEFAULT_KEY, "");
+                    notifyItemChangedSafe(pos);
+                };
+                if (mode.isInput() && micPermissionGate != null) micPermissionGate.accept(append);
+                else append.run();
+            })
+            .show();
+    }
+
+    /**
+     * Rebuilds one direction's rows. There are a handful at most, so they are laid out directly.
+     *
+     * <p>Endpoints are stored as one list for the whole card, so a row's position in its group is
+     * not its position in the config; the stored index is what the row's buttons carry.</p>
+     */
+    private void bindEndpointGroup(
+        @NonNull VMPeripheralEditViewHolder holder, @NonNull VMPeripheralConfig peripheral,
+        @NonNull SoundMode mode, @NonNull LinearLayout container
+    ) {
+        container.removeAllViews();
+        var inflater = LayoutInflater.from(container.getContext());
+        var endpoints = peripheral.getEndpoints();
+        boolean input = mode.isInput();
+
+        for (int i = 0; i < endpoints.size(); i++) {
+            var endpoint = endpoints.get(i);
+            if (endpoint.getMode() != mode) continue;
+            final int index = i;
+            var row = inflater.inflate(R.layout.item_sound_endpoint, container, false);
+            TextView tvMode = row.findViewById(R.id.tv_endpoint_mode);
+            MaterialButton btnHost = row.findViewById(R.id.btn_peripheral_host);
+            MaterialButton btnRemove = row.findViewById(R.id.btn_endpoint_remove);
+
+            tvMode.setText(mode.getStringId());
+            bindHostButton(holder, btnHost, endpoint.getHostDevice(), endpoint.getHostLabel(),
+                input);
+            btnHost.setOnClickListener(v -> {
+                int pos = holder.getBindingAdapterPosition();
+                if (pos == RecyclerView.NO_POSITION) return;
+                var cfg = new VMPeripheralConfig(items.get(pos));
+                if (index >= cfg.getEndpoints().size()) return;
+                var target = cfg.getEndpoints().get(index);
+                showHostPicker(input, target.getHostDevice(), target.getHostLabel(),
+                    (key, label) -> {
+                        target.setHostDevice(key, label);
+                        notifyItemChangedSafe(pos);
+                    });
+            });
+
+            btnRemove.setOnClickListener(v -> {
+                int pos = holder.getBindingAdapterPosition();
+                if (pos == RecyclerView.NO_POSITION) return;
+                new VMPeripheralConfig(items.get(pos)).removeEndpoint(index);
+                notifyItemChangedSafe(pos);
+            });
+
+            container.addView(row);
+        }
+    }
+
+    private static int countOf(@NonNull VMPeripheralConfig peripheral, @NonNull SoundMode mode) {
+        int n = 0;
+        for (var endpoint : peripheral.getEndpoints())
+            if (endpoint.getMode() == mode) n++;
+        return n;
+    }
+
+    private void bindIntelHda(
+        @NonNull VMPeripheralEditViewHolder holder, @NonNull VMPeripheralConfig peripheral
+    ) {
+        bindHostButton(holder, holder.btnHdaOut, peripheral.getHostOutDevice(),
+            peripheral.getHostOutLabel(), false);
+        bindHostButton(holder, holder.btnHdaIn, peripheral.getHostInDevice(),
+            peripheral.getHostInLabel(), true);
+        holder.btnHdaOut.setOnClickListener(v -> {
+            int pos = holder.getBindingAdapterPosition();
+            if (pos == RecyclerView.NO_POSITION) return;
+            var cfg = new VMPeripheralConfig(items.get(pos));
+            showHostPicker(false, cfg.getHostOutDevice(), cfg.getHostOutLabel(), (key, label) -> {
+                cfg.setHostOutDevice(key, label);
+                notifyItemChangedSafe(pos);
+            });
+        });
+        holder.btnHdaIn.setOnClickListener(v -> {
+            int pos = holder.getBindingAdapterPosition();
+            if (pos == RecyclerView.NO_POSITION) return;
+            var cfg = new VMPeripheralConfig(items.get(pos));
+            showHostPicker(true, cfg.getHostInDevice(), cfg.getHostInLabel(), (key, label) -> {
+                cfg.setHostInDevice(key, label);
+                notifyItemChangedSafe(pos);
+            });
+        });
+    }
+
+    /**
+     * Names the chosen endpoint on the button, and says so when the config points at something
+     * that is not plugged in or paired right now -- the VM still starts, on the host's own
+     * routing.
+     */
+    private void bindHostButton(
+        @NonNull VMPeripheralEditViewHolder holder, @NonNull MaterialButton button,
+        @NonNull String key, @NonNull String storedLabel, boolean input
+    ) {
+        var device = HostAudioDevices.deviceOf(key);
+        if (device.isEmpty() || HostAudioDevices.SYSTEM_DEFAULT_KEY.equals(device)) {
+            button.setText(withPurpose(context.getString(R.string.edit_vm_peripheral_host_default),
+                key, input));
+            holder.tvWarning.setVisibility(GONE);
+            return;
+        }
+        var live = findLive(input, device);
+        var label = live != null ? live.label : storedLabel;
+        button.setText(withPurpose(label.isEmpty() ? device : label, key, input));
+        if (live == null) {
+            holder.tvWarning.setText(R.string.edit_vm_peripheral_host_missing);
+            holder.tvWarning.setVisibility(VISIBLE);
+        }
+    }
+
+    /** Called with (stableKey, label) once the user picks. */
+    private interface HostPicked {
+        void onPicked(@NonNull String key, @NonNull String label);
+    }
+
+    /**
+     * The endpoint's name with what it is used for after it, as {@code speaker (Media, Music)}.
+     *
+     * <p>The stored key is a machine-readable thing -- {@code BUILTIN_MIC|bottom#preset=voice_
+     * communication} -- and showing it would be both long and in the wrong language. Every
+     * attribute is an enumeration, so each value has a name worth reading; anything left at the
+     * platform's default contributes nothing rather than the word "default", because a list of
+     * defaults is noise.</p>
+     */
+    @NonNull
+    private String withPurpose(@NonNull String name, @NonNull String key, boolean input) {
+        var parts = new ArrayList<String>();
+        for (var attribute : SoundPurpose.attributesFor(input)) {
+            var value = HostAudioDevices.attrOf(key, attribute);
+            if (value.isEmpty()) continue;
+            var choice = SoundPurpose.find(attribute, value);
+            // An unknown value is shown as it was stored: it came from somewhere, and hiding it
+            // would make a setting that does nothing look like one that was never made.
+            parts.add(choice != null ? context.getString(choice.titleId) : value);
+        }
+        return parts.isEmpty() ? name : fmt("%s (%s)", name, String.join(", ", parts));
+    }
+
+    private void showHostPicker(
+        boolean input, @NonNull String current, @NonNull String storedLabel,
+        @NonNull HostPicked onPicked
+    ) {
+        var keys = new ArrayList<String>();
+        var labels = new ArrayList<String>();
+        // The platform's own routing: what to pick when the VM should follow whatever the phone
+        // is doing. Named rather than blank, so what gets stored is a device like any other.
+        keys.add(HostAudioDevices.SYSTEM_DEFAULT_KEY);
+        labels.add(context.getString(R.string.edit_vm_peripheral_host_default));
+        for (var entry : liveDevices(input)) {
+            keys.add(entry.key);
+            labels.add(entry.label);
+        }
+        // Matched on the endpoint alone: what the stream is used for does not change which
+        // device is meant, and comparing the whole key would make every configured purpose look
+        // like a device that had gone missing.
+        var currentDevice = HostAudioDevices.deviceOf(current);
+        // A configured-but-absent device stays selectable so opening the picker cannot silently
+        // drop it.
+        if (!currentDevice.isEmpty() && !keys.contains(currentDevice)) {
+            keys.add(currentDevice);
+            labels.add(context.getString(R.string.edit_vm_peripheral_host_missing_item,
+                storedLabel.isEmpty() ? currentDevice : storedLabel));
+        }
+        int checked = Math.max(0, keys.indexOf(currentDevice));
+        DialogInterface.OnClickListener onClick = (dialog, which) -> {
+            dialog.dismiss();
+            // Then what it is for. Asked separately because it is a separate question: the same
+            // microphone recorded for a call and for transcription is the same microphone, with
+            // different processing.
+            showPurposePicker(input, keys.get(which), which == 0 ? "" : labels.get(which),
+                current, onPicked);
+        };
+        new MaterialAlertDialogBuilder(context)
+            .setTitle(input
+                ? R.string.edit_vm_peripheral_pick_input
+                : R.string.edit_vm_peripheral_pick_output)
+            .setSingleChoiceItems(labels.toArray(new String[0]), checked, onClick)
+            .show();
+    }
+
+    /**
+     * Asks what the stream is for, one attribute at a time, and hands back the whole key.
+     *
+     * <p>Only the values an ordinary application may ask for are offered. The rest exist in the
+     * platform, and a stream that names one simply fails to open, so a picker that listed them
+     * would be offering choices it knows cannot be honoured.</p>
+     */
+    private void showPurposePicker(
+        boolean input, @NonNull String device, @NonNull String deviceLabel,
+        @NonNull String previous, @NonNull HostPicked onPicked
+    ) {
+        var attributes = SoundPurpose.attributesFor(input);
+        var values = new ArrayList<String>();
+        for (int i = 0; i < attributes.size(); i++) values.add("");
+        askPurpose(new PurposeWalk(device, deviceLabel, previous, attributes, values, onPicked), 0);
+    }
+
+    /**
+     * One walk through one endpoint's attributes. Everything but the position is settled before
+     * the first dialog opens, so the position is the only thing each dialog passes to the next.
+     */
+    private static final class PurposeWalk {
+        /** The device the key is being built for, and the label to hand back with it. */
+        final String device;
+        final String deviceLabel;
+        /** The key configured before this walk, which each question defaults to. */
+        final String previous;
+        /** The attributes to ask about, in order, and the answers so far -- one slot each. */
+        final List<String> attributes;
+        final ArrayList<String> values;
+        final HostPicked onPicked;
+
+        PurposeWalk(
+            @NonNull String device, @NonNull String deviceLabel, @NonNull String previous,
+            @NonNull List<String> attributes, @NonNull ArrayList<String> values,
+            @NonNull HostPicked onPicked
+        ) {
+            this.device = device;
+            this.deviceLabel = deviceLabel;
+            this.previous = previous;
+            this.attributes = attributes;
+            this.values = values;
+            this.onPicked = onPicked;
+        }
+    }
+
+    private void askPurpose(@NonNull PurposeWalk walk, int at) {
+        if (at >= walk.attributes.size()) {
+            walk.onPicked.onPicked(
+                HostAudioDevices.withAttrs(walk.device, walk.attributes, walk.values),
+                walk.deviceLabel);
+            return;
+        }
+        var attribute = walk.attributes.get(at);
+        var choices = SoundPurpose.choicesFor(attribute);
+        var labels = new ArrayList<String>();
+        var stored = new ArrayList<String>();
+        // Leaving it to the platform is a real answer, and the first one: most endpoints want
+        // exactly that.
+        labels.add(context.getString(R.string.edit_vm_sound_purpose_unset));
+        stored.add("");
+        for (var choice : choices) {
+            labels.add(context.getString(choice.titleId));
+            stored.add(choice.value);
+        }
+        // Carried over from what was configured before, so re-picking a device does not quietly
+        // discard how it was set up.
+        int checked = Math.max(0,
+            stored.indexOf(HostAudioDevices.attrOf(walk.previous, attribute)));
+        new MaterialAlertDialogBuilder(context)
+            .setTitle(SoundPurpose.titleFor(attribute))
+            .setSingleChoiceItems(labels.toArray(new String[0]), checked, (dialog, which) -> {
+                dialog.dismiss();
+                walk.values.set(at, stored.get(which));
+                askPurpose(walk, at + 1);
+            })
+            .show();
+    }
+
+    @Nullable
+    private HostAudioDevices.Entry findLive(boolean input, @NonNull String key) {
+        for (var entry : liveDevices(input))
+            if (entry.key.equals(key)) return entry;
+        return null;
+    }
+
+    @NonNull
+    private List<HostAudioDevices.Entry> liveDevices(boolean input) {
+        if (input) {
+            if (inputCache == null) inputCache = HostAudioDevices.list(context, true);
+            return inputCache;
+        }
+        if (outputCache == null) outputCache = HostAudioDevices.list(context, false);
+        return outputCache;
+    }
+
+    private void notifyItemChangedSafe(int position) {
+        try {
+            notifyItemChanged(position);
+        } catch (Exception ignored) {
+            // RecyclerView refuses changes while it is computing a layout; the next bind picks
+            // the value up from the model anyway.
+        }
+    }
+
+    /** Re-reads the live device list, e.g. after the user plugged something in. */
+    @SuppressLint("NotifyDataSetChanged")
+    public void refreshHostDevices() {
+        outputCache = null;
+        inputCache = null;
+        notifyDataSetChanged();
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/peripheral/VMPeripheralEditViewHolder.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/peripheral/VMPeripheralEditViewHolder.java
new file mode 100644
index 000000000..c96eb4130
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/peripheral/VMPeripheralEditViewHolder.java
@@ -0,0 +1,55 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
+package cn.classfun.droidvm.ui.vm.edit.peripheral;
+
+import android.view.View;
+import android.widget.LinearLayout;
+import android.widget.ImageButton;
+import android.widget.ImageView;
+import android.widget.TextView;
+
+import androidx.annotation.NonNull;
+import androidx.recyclerview.widget.RecyclerView;
+
+import com.google.android.material.button.MaterialButton;
+
+import cn.classfun.droidvm.R;
+import cn.classfun.droidvm.ui.widgets.tools.PickerButtonWidget;
+
+public final class VMPeripheralEditViewHolder extends RecyclerView.ViewHolder {
+    final ImageView ivIcon;
+    final TextView tvType;
+    final TextView tvUnavailable;
+    final TextView tvWarning;
+    final ImageButton btnDelete;
+    // virtio-snd
+    final View groupVirtioSound;
+    final LinearLayout soundOutEndpoints;
+    final LinearLayout soundInEndpoints;
+    final MaterialButton btnAddEndpoint;
+    final PickerButtonWidget btnBuffer;
+    final PickerButtonWidget btnUnderrun;
+    // intel hda
+    final View groupIntelHda;
+    final MaterialButton btnHdaOut;
+    final MaterialButton btnHdaIn;
+
+    VMPeripheralEditViewHolder(@NonNull View itemView) {
+        super(itemView);
+        ivIcon = itemView.findViewById(R.id.iv_peripheral_icon);
+        tvType = itemView.findViewById(R.id.tv_peripheral_type);
+        tvUnavailable = itemView.findViewById(R.id.tv_peripheral_unavailable);
+        tvWarning = itemView.findViewById(R.id.tv_peripheral_warning);
+        btnDelete = itemView.findViewById(R.id.btn_peripheral_delete);
+        groupVirtioSound = itemView.findViewById(R.id.group_virtio_sound);
+        soundOutEndpoints = itemView.findViewById(R.id.sound_out_endpoints);
+        soundInEndpoints = itemView.findViewById(R.id.sound_in_endpoints);
+        btnAddEndpoint = itemView.findViewById(R.id.btn_sound_endpoint_add);
+        btnBuffer = itemView.findViewById(R.id.btn_sound_buffer);
+        btnUnderrun = itemView.findViewById(R.id.btn_sound_underrun);
+        groupIntelHda = itemView.findViewById(R.id.group_intel_hda);
+        btnHdaOut = itemView.findViewById(R.id.btn_hda_out);
+        btnHdaIn = itemView.findViewById(R.id.btn_hda_in);
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/storage/dir/VMSharedDirEditAdapter.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/storage/dir/VMSharedDirEditAdapter.java
index 3a7175781..acc5b86be 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/storage/dir/VMSharedDirEditAdapter.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/storage/dir/VMSharedDirEditAdapter.java
@@ -3,11 +3,13 @@
 // Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.ui.vm.edit.storage.dir;
 
+import static android.widget.Toast.LENGTH_LONG;
 import static cn.classfun.droidvm.lib.store.enums.Enums.optEnum;
 import static cn.classfun.droidvm.lib.ui.SimpleTextWatcher.simpleAfterTextWatcher;
 
 import android.content.Context;
 import android.view.View;
+import android.widget.Toast;
 
 import androidx.annotation.NonNull;
 import androidx.recyclerview.widget.RecyclerView;
@@ -60,11 +62,26 @@ public void onBindViewHolder(@NonNull VMSharedDirEditViewHolder holder, int posi
         holder.etPath.setText(dir.optString("path", ""));
         holder.etTag.setText(dir.optString("tag", ""));
         holder.etTimeout.setText(String.valueOf(dir.optLong("timeout", 5)));
-        holder.btnType.configure(SharedDirType.class, optEnum(dir, "type", SharedDirType.FS));
+        // 9P and DAX are keys the config format still carries but this build cannot honour: the
+        // P9 branch of crosvm's `--shared-dir` parser rejects every option the row writes, and the
+        // fs device compiles DAX out on arm64. Force both, and coerce the stored value too -- a row
+        // that reads "off" while the config says otherwise is the worse of the two lies.
+        holder.btnType.setOnValueChangedListener((Runnable) null);
+        dir.set("type", SharedDirType.FS);
+        holder.btnType.configure(SharedDirType.class, SharedDirType.FS);
+        holder.btnType.setUnavailable(() -> Toast.makeText(
+            holder.itemView.getContext(),
+            R.string.edit_vm_shared_dir_type_unavailable,
+            LENGTH_LONG
+        ).show());
         holder.btnCache.configure(SharedDirCache.class, optEnum(dir, "cache", SharedDirCache.AUTO));
         holder.switchWriteback.setChecked(dir.optBoolean("writeback", false));
-        holder.switchDax.setChecked(dir.optBoolean("dax", false));
+        dir.set("dax", false);
+        holder.switchDax.setOnCheckedChangeListener(null);
+        holder.switchDax.setChecked(false);
         holder.switchPosixAcl.setChecked(dir.optBoolean("posix_acl", true));
+        // Default off: a new share serves as the app, and asking for root is the deliberate act.
+        holder.switchRootAccess.setChecked(dir.optBoolean("root_access", false));
         holder.pathWatcher = simpleAfterTextWatcher(s -> {
             int pos = holder.getBindingAdapterPosition();
             if (pos == RecyclerView.NO_POSITION) return;
@@ -91,20 +108,24 @@ public void onBindViewHolder(@NonNull VMSharedDirEditViewHolder holder, int posi
             if (pos == RecyclerView.NO_POSITION) return;
             items.get(pos).set("writeback", checked);
         });
-        holder.switchDax.setOnCheckedChangeListener((btn, checked) -> {
-            int pos = holder.getBindingAdapterPosition();
-            if (pos == RecyclerView.NO_POSITION) return;
-            items.get(pos).set("dax", checked);
+        // A CompoundButton reports the click after the state has already flipped, so put it back.
+        holder.switchDax.setOnClickListener(v -> {
+            holder.switchDax.setChecked(false);
+            Toast.makeText(
+                holder.itemView.getContext(),
+                R.string.edit_vm_shared_dir_dax_unavailable,
+                LENGTH_LONG
+            ).show();
         });
         holder.switchPosixAcl.setOnCheckedChangeListener((btn, checked) -> {
             int pos = holder.getBindingAdapterPosition();
             if (pos == RecyclerView.NO_POSITION) return;
             items.get(pos).set("posix_acl", checked);
         });
-        holder.btnType.setOnValueChangedListener((oldVal, newVal) -> {
+        holder.switchRootAccess.setOnCheckedChangeListener((btn, checked) -> {
             int pos = holder.getBindingAdapterPosition();
             if (pos == RecyclerView.NO_POSITION) return;
-            items.get(pos).set("type", newVal);
+            items.get(pos).set("root_access", checked);
         });
         holder.btnCache.setOnValueChangedListener((oldVal, newVal) -> {
             int pos = holder.getBindingAdapterPosition();
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/storage/dir/VMSharedDirEditViewHolder.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/storage/dir/VMSharedDirEditViewHolder.java
index 2cdf88710..67ad278c7 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/storage/dir/VMSharedDirEditViewHolder.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/storage/dir/VMSharedDirEditViewHolder.java
@@ -25,6 +25,7 @@ public final class VMSharedDirEditViewHolder extends RecyclerView.ViewHolder {
     final MaterialSwitch switchWriteback;
     final MaterialSwitch switchDax;
     final MaterialSwitch switchPosixAcl;
+    final MaterialSwitch switchRootAccess;
     final ImageButton btnBrowse;
     final ImageButton btnDelete;
     TextWatcher pathWatcher;
@@ -41,6 +42,7 @@ public final class VMSharedDirEditViewHolder extends RecyclerView.ViewHolder {
         switchWriteback = itemView.findViewById(R.id.switch_shared_dir_writeback);
         switchDax = itemView.findViewById(R.id.switch_shared_dir_dax);
         switchPosixAcl = itemView.findViewById(R.id.switch_shared_dir_posix_acl);
+        switchRootAccess = itemView.findViewById(R.id.switch_shared_dir_root_access);
         btnBrowse = itemView.findViewById(R.id.btn_shared_dir_browse);
         btnDelete = itemView.findViewById(R.id.btn_shared_dir_delete);
     }
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/widgets/container/CardItemListView.java b/app/src/main/java/cn/classfun/droidvm/ui/widgets/container/CardItemListView.java
index b395daa42..7d8db48fe 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/widgets/container/CardItemListView.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/widgets/container/CardItemListView.java
@@ -69,7 +69,7 @@ private void init(@Nullable AttributeSet attrs) {
         updateEmptyState();
         addButton.setOnClickListener(v -> {
             if (adapter != null)
-                adapter.createItem();
+                adapter.onAddRequested(v);
         });
     }
 
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/widgets/tools/PickerButtonWidget.java b/app/src/main/java/cn/classfun/droidvm/ui/widgets/tools/PickerButtonWidget.java
index 597abc709..b7c037ddb 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/widgets/tools/PickerButtonWidget.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/widgets/tools/PickerButtonWidget.java
@@ -25,6 +25,7 @@ public final class PickerButtonWidget extends RelativeLayout {
     private EnumPickerChanged<Enum<?>> listener = null;
     private String title = null;
     private Mode mode = Mode.DIALOG;
+    private Runnable unavailable = null;
 
     public enum Mode {
         DIALOG,
@@ -66,6 +67,10 @@ private void init(@Nullable AttributeSet attrs) {
         initAttrs(attrs);
         if (isInEditMode()) return;
         buttonView.setOnClickListener(v -> {
+            if (unavailable != null) {
+                unavailable.run();
+                return;
+            }
             if (picker == null) return;
             switch (mode) {
                 case DIALOG:
@@ -184,6 +189,19 @@ public void setTitle(@StringRes int title) {
         this.title = context.getString(title);
     }
 
+    /**
+     * Marks the control present but inert: the current value stays readable, the picker never
+     * opens, and a tap runs {@code onTap} instead -- for an option the config format still
+     * carries but this build cannot honour. {@code null} restores normal picker behaviour.
+     *
+     * <p>Deliberately not {@link #setEnabled(boolean)}: a disabled button swallows the tap, so
+     * there is nowhere left to explain why the option does nothing.
+     */
+    public void setUnavailable(@Nullable Runnable onTap) {
+        this.unavailable = onTap;
+        buttonView.setAlpha(onTap == null ? 1f : 0.5f);
+    }
+
     @Override
     public void setEnabled(boolean enabled) {
         super.setEnabled(enabled);
diff --git a/app/src/main/res/drawable/ic_microphone.xml b/app/src/main/res/drawable/ic_microphone.xml
new file mode 100644
index 000000000..79b1d24f7
--- /dev/null
+++ b/app/src/main/res/drawable/ic_microphone.xml
@@ -0,0 +1,9 @@
+<vector xmlns:android="http://schemas.android.com/apk/res/android"
+    android:width="24dp"
+    android:height="24dp"
+    android:viewportWidth="24"
+    android:viewportHeight="24">
+    <path
+        android:fillColor="?attr/colorOnSurface"
+        android:pathData="M12,2A3,3 0 0,1 15,5V11A3,3 0 0,1 12,14A3,3 0 0,1 9,11V5A3,3 0 0,1 12,2M19,11C19,14.53 16.39,17.44 13,17.93V21H11V17.93C7.61,17.44 5,14.53 5,11H7A5,5 0 0,0 12,16A5,5 0 0,0 17,11H19Z" />
+</vector>
diff --git a/app/src/main/res/drawable/ic_speaker.xml b/app/src/main/res/drawable/ic_speaker.xml
new file mode 100644
index 000000000..d2b16bc1a
--- /dev/null
+++ b/app/src/main/res/drawable/ic_speaker.xml
@@ -0,0 +1,9 @@
+<vector xmlns:android="http://schemas.android.com/apk/res/android"
+    android:width="24dp"
+    android:height="24dp"
+    android:viewportWidth="24"
+    android:viewportHeight="24">
+    <path
+        android:fillColor="?attr/colorOnSurface"
+        android:pathData="M14,3.23V5.29C16.89,6.15 19,8.83 19,12C19,15.17 16.89,17.84 14,18.7V20.77C18,19.86 21,16.28 21,12C21,7.72 18,4.14 14,3.23M16.5,12C16.5,10.23 15.5,8.71 14,7.97V16C15.5,15.29 16.5,13.76 16.5,12M3,9V15H7L12,20V4L7,9H3Z" />
+</vector>
diff --git a/app/src/main/res/layout/activity_vm_edit.xml b/app/src/main/res/layout/activity_vm_edit.xml
index b51364da8..ea3669010 100644
--- a/app/src/main/res/layout/activity_vm_edit.xml
+++ b/app/src/main/res/layout/activity_vm_edit.xml
@@ -88,6 +88,13 @@
                 android:layout_height="wrap_content"
                 android:visibility="gone" />
 
+            <include
+                android:id="@+id/tab_content_peripheral"
+                layout="@layout/partial_vm_edit_peripheral"
+                android:layout_width="match_parent"
+                android:layout_height="wrap_content"
+                android:visibility="gone" />
+
         </FrameLayout>
 
     </androidx.core.widget.NestedScrollView>
diff --git a/app/src/main/res/layout/item_sound_endpoint.xml b/app/src/main/res/layout/item_sound_endpoint.xml
new file mode 100644
index 000000000..14235aca5
--- /dev/null
+++ b/app/src/main/res/layout/item_sound_endpoint.xml
@@ -0,0 +1,54 @@
+<?xml version="1.0" encoding="utf-8"?>
+<!--
+  One host endpoint on a virtio-snd card: the device it is pinned to, and what the guest should
+  use it for. Which direction it carries is fixed rather than chosen: the label states it and the
+  row sits in that direction's group, so changing it means removing the row and adding the other
+  kind.
+
+  What the endpoints of a card share (the buffer depth, and what to do about an underrun) is not
+  here: those describe the device's queues rather than any one endpoint, so they live once on the
+  card above.
+-->
+<LinearLayout xmlns:android="http://schemas.android.com/apk/res/android"
+    xmlns:app="http://schemas.android.com/apk/res-auto"
+    xmlns:tools="http://schemas.android.com/tools"
+    android:layout_width="match_parent"
+    android:layout_height="wrap_content"
+    android:layout_marginTop="4dp"
+    android:gravity="center_vertical"
+    android:orientation="horizontal">
+
+    <TextView
+        android:id="@+id/tv_endpoint_mode"
+        android:layout_width="56dp"
+        android:layout_height="wrap_content"
+        android:textSize="12sp"
+        tools:text="@string/edit_vm_sound_mode_speaker" />
+
+    <com.google.android.material.button.MaterialButton
+        android:id="@+id/btn_peripheral_host"
+        style="@style/Widget.Material3.Button.TonalButton"
+        android:layout_width="0dp"
+        android:layout_height="36dp"
+        android:layout_weight="1"
+        android:minWidth="72dp"
+        android:text="@string/edit_vm_peripheral_host_default"
+        android:textSize="12sp"
+        tools:ignore="TouchTargetSizeCheck,VisualLintButtonSize" />
+
+    <!-- Same height as the device button beside it: a taller one would set the row's pitch and
+         put these rows out of step with the ones on an Intel HDA card. -->
+    <com.google.android.material.button.MaterialButton
+        android:id="@+id/btn_endpoint_remove"
+        style="@style/Widget.Material3.Button.IconButton"
+        android:layout_width="40dp"
+        android:layout_height="36dp"
+        android:layout_marginStart="4dp"
+        android:insetTop="0dp"
+        android:insetBottom="0dp"
+        android:contentDescription="@string/edit_vm_sound_endpoint_remove"
+        app:icon="@drawable/ic_close"
+        app:iconSize="18dp"
+        tools:ignore="TouchTargetSizeCheck" />
+
+</LinearLayout>
diff --git a/app/src/main/res/layout/item_vm_peripheral_edit.xml b/app/src/main/res/layout/item_vm_peripheral_edit.xml
new file mode 100644
index 000000000..05d9e4964
--- /dev/null
+++ b/app/src/main/res/layout/item_vm_peripheral_edit.xml
@@ -0,0 +1,216 @@
+<?xml version="1.0" encoding="utf-8"?>
+<com.google.android.material.card.MaterialCardView xmlns:android="http://schemas.android.com/apk/res/android"
+    xmlns:app="http://schemas.android.com/apk/res-auto"
+    xmlns:tools="http://schemas.android.com/tools"
+    android:layout_width="match_parent"
+    android:layout_height="wrap_content"
+    android:layout_marginStart="16dp"
+    android:layout_marginEnd="16dp"
+    android:layout_marginBottom="8dp"
+    app:cardCornerRadius="12dp"
+    app:cardElevation="0dp"
+    app:strokeColor="?attr/colorOutlineVariant"
+    app:strokeWidth="1dp">
+
+    <LinearLayout
+        android:layout_width="match_parent"
+        android:layout_height="wrap_content"
+        android:orientation="vertical"
+        android:padding="12dp">
+
+        <!-- header: device type + delete -->
+        <LinearLayout
+            android:layout_width="match_parent"
+            android:layout_height="wrap_content"
+            android:gravity="center_vertical"
+            android:orientation="horizontal">
+
+            <ImageView
+                android:id="@+id/iv_peripheral_icon"
+                android:layout_width="24dp"
+                android:layout_height="24dp"
+                android:contentDescription="@string/edit_vm_peripheral_type"
+                android:src="@drawable/ic_speaker"
+                app:tint="?attr/colorOnSurfaceVariant" />
+
+            <TextView
+                android:id="@+id/tv_peripheral_type"
+                android:layout_width="0dp"
+                android:layout_height="wrap_content"
+                android:layout_marginStart="12dp"
+                android:layout_weight="1"
+                android:textSize="14sp"
+                tools:text="VirtIO Sound" />
+
+            <ImageButton
+                android:id="@+id/btn_peripheral_delete"
+                android:layout_width="36dp"
+                android:layout_height="36dp"
+                android:layout_marginStart="4dp"
+                android:background="?attr/selectableItemBackgroundBorderless"
+                android:contentDescription="@string/edit_vm_peripheral_delete"
+                android:src="@drawable/ic_delete"
+                app:tint="?attr/colorError"
+                tools:ignore="TouchTargetSizeCheck" />
+
+        </LinearLayout>
+
+        <!-- unavailable notice (Intel HDA today) -->
+        <TextView
+            android:id="@+id/tv_peripheral_unavailable"
+            android:layout_width="match_parent"
+            android:layout_height="wrap_content"
+            android:layout_marginTop="4dp"
+            android:text="@string/edit_vm_peripheral_unavailable"
+            android:textColor="?attr/colorError"
+            android:textSize="12sp"
+            android:visibility="gone"
+            tools:visibility="visible" />
+
+        <!-- ===== VirtIO Sound: one card, endpoints grouped by direction ===== -->
+        <LinearLayout
+            android:id="@+id/group_virtio_sound"
+            android:layout_width="match_parent"
+            android:layout_height="wrap_content"
+            android:orientation="vertical">
+
+            <!--
+              Playback endpoints above the rule, capture ones below it. A row carries no direction
+              of its own: which side of the rule it is on is its direction, and its label states
+              which. The rule stays put when a group is empty, so an empty half still reads as a
+              half rather than as a missing one.
+            -->
+            <LinearLayout
+                android:id="@+id/sound_out_endpoints"
+                android:layout_width="match_parent"
+                android:layout_height="wrap_content"
+                android:orientation="vertical" />
+
+            <View
+                android:layout_width="match_parent"
+                android:layout_height="1dp"
+                android:layout_marginTop="8dp"
+                android:layout_marginBottom="4dp"
+                android:background="?attr/colorOutlineVariant" />
+
+            <LinearLayout
+                android:id="@+id/sound_in_endpoints"
+                android:layout_width="match_parent"
+                android:layout_height="wrap_content"
+                android:orientation="vertical" />
+
+            <!-- Adding an endpoint and the two card-wide settings: one row, because none of the
+                 three belongs to any endpoint above. -->
+            <LinearLayout
+                android:layout_width="match_parent"
+                android:layout_height="wrap_content"
+                android:layout_marginTop="4dp"
+                android:gravity="center_vertical"
+                android:orientation="horizontal">
+
+                <com.google.android.material.button.MaterialButton
+                    android:id="@+id/btn_sound_endpoint_add"
+                    style="@style/Widget.Material3.Button.TextButton"
+                    android:layout_width="wrap_content"
+                    android:layout_height="40dp"
+                    android:text="@string/edit_vm_sound_endpoint_add"
+                    android:textSize="12sp"
+                    app:icon="@drawable/ic_add"
+                    app:iconSize="18dp"
+                    tools:ignore="TouchTargetSizeCheck" />
+
+                <cn.classfun.droidvm.ui.widgets.tools.PickerButtonWidget
+                    android:id="@+id/btn_sound_buffer"
+                    android:layout_width="wrap_content"
+                    android:layout_height="48dp"
+                    android:layout_marginStart="8dp"
+                    android:title="@string/edit_vm_sound_buffer"
+                    app:pb_mode="dialog" />
+
+                <cn.classfun.droidvm.ui.widgets.tools.PickerButtonWidget
+                    android:id="@+id/btn_sound_underrun"
+                    android:layout_width="wrap_content"
+                    android:layout_height="48dp"
+                    android:layout_marginStart="8dp"
+                    android:title="@string/edit_vm_sound_underrun"
+                    app:pb_mode="dialog" />
+
+            </LinearLayout>
+
+        </LinearLayout>
+
+        <!-- ===== Intel HDA: one card, both directions ===== -->
+        <LinearLayout
+            android:id="@+id/group_intel_hda"
+            android:layout_width="match_parent"
+            android:layout_height="wrap_content"
+            android:orientation="vertical"
+            android:visibility="gone"
+            tools:visibility="visible">
+
+            <LinearLayout
+                android:layout_width="match_parent"
+                android:layout_height="wrap_content"
+                android:layout_marginTop="4dp"
+                android:gravity="center_vertical"
+                android:orientation="horizontal">
+
+                <TextView
+                    android:layout_width="56dp"
+                    android:layout_height="wrap_content"
+                    android:text="@string/edit_vm_peripheral_host_output"
+                    android:textSize="12sp" />
+
+                <com.google.android.material.button.MaterialButton
+                    android:id="@+id/btn_hda_out"
+                    style="@style/Widget.Material3.Button.TonalButton"
+                    android:layout_width="0dp"
+                    android:layout_height="36dp"
+                    android:layout_weight="1"
+                    android:text="@string/edit_vm_peripheral_host_default"
+                    android:textSize="12sp"
+                    tools:ignore="TouchTargetSizeCheck,VisualLintButtonSize" />
+
+            </LinearLayout>
+
+            <LinearLayout
+                android:layout_width="match_parent"
+                android:layout_height="wrap_content"
+                android:layout_marginTop="4dp"
+                android:gravity="center_vertical"
+                android:orientation="horizontal">
+
+                <TextView
+                    android:layout_width="56dp"
+                    android:layout_height="wrap_content"
+                    android:text="@string/edit_vm_peripheral_host_input"
+                    android:textSize="12sp" />
+
+                <com.google.android.material.button.MaterialButton
+                    android:id="@+id/btn_hda_in"
+                    style="@style/Widget.Material3.Button.TonalButton"
+                    android:layout_width="0dp"
+                    android:layout_height="36dp"
+                    android:layout_weight="1"
+                    android:text="@string/edit_vm_peripheral_host_default"
+                    android:textSize="12sp"
+                    tools:ignore="TouchTargetSizeCheck,VisualLintButtonSize" />
+
+            </LinearLayout>
+
+        </LinearLayout>
+
+        <TextView
+            android:id="@+id/tv_peripheral_warning"
+            android:layout_width="match_parent"
+            android:layout_height="wrap_content"
+            android:layout_marginTop="4dp"
+            android:textColor="?attr/colorError"
+            android:textSize="12sp"
+            android:visibility="gone"
+            tools:text="Not connected right now"
+            tools:visibility="visible" />
+
+    </LinearLayout>
+
+</com.google.android.material.card.MaterialCardView>
diff --git a/app/src/main/res/layout/item_vm_shared_dir_edit.xml b/app/src/main/res/layout/item_vm_shared_dir_edit.xml
index 211863984..6ebd151dd 100644
--- a/app/src/main/res/layout/item_vm_shared_dir_edit.xml
+++ b/app/src/main/res/layout/item_vm_shared_dir_edit.xml
@@ -174,6 +174,42 @@
 
         </LinearLayout>
 
+        <LinearLayout
+            android:layout_width="match_parent"
+            android:layout_height="wrap_content"
+            android:layout_marginTop="4dp"
+            android:gravity="center_vertical"
+            android:orientation="horizontal">
+
+            <LinearLayout
+                android:layout_width="0dp"
+                android:layout_height="wrap_content"
+                android:layout_weight="1"
+                android:orientation="vertical">
+
+                <TextView
+                    android:layout_width="wrap_content"
+                    android:layout_height="wrap_content"
+                    android:text="@string/edit_vm_shared_dir_root_access"
+                    android:textSize="13sp" />
+
+                <TextView
+                    android:layout_width="match_parent"
+                    android:layout_height="wrap_content"
+                    android:text="@string/edit_vm_shared_dir_root_access_summary"
+                    android:textColor="?attr/colorOnSurfaceVariant"
+                    android:textSize="11sp" />
+
+            </LinearLayout>
+
+            <com.google.android.material.materialswitch.MaterialSwitch
+                android:id="@+id/switch_shared_dir_root_access"
+                android:layout_width="wrap_content"
+                android:layout_height="wrap_content"
+                android:layout_marginStart="8dp" />
+
+        </LinearLayout>
+
     </LinearLayout>
 
 </com.google.android.material.card.MaterialCardView>
diff --git a/app/src/main/res/layout/partial_vm_edit_peripheral.xml b/app/src/main/res/layout/partial_vm_edit_peripheral.xml
index 031540d2d..6b3646da7 100644
--- a/app/src/main/res/layout/partial_vm_edit_peripheral.xml
+++ b/app/src/main/res/layout/partial_vm_edit_peripheral.xml
@@ -1,3 +1,24 @@
+<?xml version="1.0" encoding="utf-8"?>
+<LinearLayout xmlns:android="http://schemas.android.com/apk/res/android"
+    android:layout_width="match_parent"
+    android:layout_height="wrap_content"
+    android:orientation="vertical">
+
+    <cn.classfun.droidvm.ui.widgets.container.CollapsibleContainer
+        android:layout_width="match_parent"
+        android:layout_height="wrap_content"
+        android:title="@string/create_vm_category_peripheral">
+
+        <cn.classfun.droidvm.ui.widgets.container.CardItemListView
+            android:id="@+id/list_peripherals"
+            android:layout_width="match_parent"
+            android:layout_height="wrap_content"
+            android:hint="@string/edit_vm_peripheral_empty"
+            android:icon="@drawable/ic_add"
+            android:text="@string/edit_vm_peripheral_add" />
+
+    </cn.classfun.droidvm.ui.widgets.container.CollapsibleContainer>
+
     <cn.classfun.droidvm.ui.widgets.container.CollapsibleContainer
         android:layout_width="match_parent"
         android:layout_height="wrap_content"
@@ -13,3 +34,4 @@
 
     </cn.classfun.droidvm.ui.widgets.container.CollapsibleContainer>
 
+</LinearLayout>

From 43a7920cd3a36827c92c19f66da205a821f169f6 Mon Sep 17 00:00:00 2001
From: HuJK <gh@hujk.org>
Date: Sun, 30 Aug 2026 13:37:14 +0800
Subject: [PATCH 138/182] peripherals: camera and VPU entries for the
 virtio-media devices to come

The configuration half of virtio-media: a camera peripheral and a VPU
peripheral in the editor, their schema, the host camera enumeration behind the
picker, and the CAMERA permission. A foreground service holds the peripheral
open, because a camera that stops delivering frames the moment the app leaves
the foreground is not a camera a guest can use.

The devices themselves are not written yet. This is deliberately the half that
can land first -- it is what the crosvm side will be configured by -- but it
means the rows here describe hardware that does not answer yet.
---
 app/src/main/AndroidManifest.xml              |  15 ++
 .../vm/PeripheralForegroundControl.java       |  73 ++++++++++
 .../droidvm/daemon/vm/VMInstance.java         |   3 +
 .../droidvm/lib/data/HostCameraDevices.java   | 117 ++++++++++++++++
 .../PeripheralForegroundService.java          | 128 ++++++++++++++++++
 .../droidvm/lib/store/vm/PeripheralType.java  |  58 ++++++++
 .../droidvm/lib/store/vm/VpuConfig.java       |  88 ++++++++++++
 .../droidvm/lib/ui/CameraPermission.java      |  93 +++++++++++++
 .../edit/peripheral/VMEditPeripheralTab.java  |   1 +
 .../peripheral/VMPeripheralEditAdapter.java   |  88 ++++++++++++
 .../VMPeripheralEditViewHolder.java           |   4 +
 app/src/main/res/drawable/ic_camera.xml       |   9 ++
 app/src/main/res/drawable/ic_video.xml        |   9 ++
 .../res/layout/item_vm_peripheral_edit.xml    |  30 ++++
 14 files changed, 716 insertions(+)
 create mode 100644 app/src/main/java/cn/classfun/droidvm/daemon/vm/PeripheralForegroundControl.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/lib/data/HostCameraDevices.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/lib/peripheral/PeripheralForegroundService.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/lib/store/vm/VpuConfig.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/lib/ui/CameraPermission.java
 create mode 100644 app/src/main/res/drawable/ic_camera.xml
 create mode 100644 app/src/main/res/drawable/ic_video.xml

diff --git a/app/src/main/AndroidManifest.xml b/app/src/main/AndroidManifest.xml
index 798d4da23..fb6125399 100644
--- a/app/src/main/AndroidManifest.xml
+++ b/app/src/main/AndroidManifest.xml
@@ -14,6 +14,13 @@
          it is the prerequisite for proxying capture through an unprivileged helper if the
          root path turns out not to work. -->
     <uses-permission android:name="android.permission.RECORD_AUDIO" />
+    <!-- A camera peripheral needs both: the runtime grant to be allowed at all, and the normal
+         FOREGROUND_SERVICE_CAMERA so the app can raise a service typed "camera". Only the typed
+         service puts the uid in the state AppOps requires, and crosvm (forked by the root daemon,
+         invisible to ActivityManager) can never put itself there. -->
+    <uses-permission android:name="android.permission.CAMERA" />
+    <uses-permission android:name="android.permission.FOREGROUND_SERVICE_CAMERA" />
+    <uses-feature android:name="android.hardware.camera.any" android:required="false" />
     <uses-permission android:name="android.permission.FOREGROUND_SERVICE"
         tools:ignore="ForegroundServicesPolicy" />
     <uses-permission android:name="android.permission.FOREGROUND_SERVICE_DATA_SYNC" />
@@ -254,5 +261,13 @@
             android:exported="false"
             android:foregroundServiceType="dataSync" />
 
+        <!-- Raised while a running VM carries a peripheral that needs the app's uid to look
+             foreground. The type list is the union of every PeripheralType that asks for one;
+             the service picks which of them to declare at startForeground() time. -->
+        <service
+            android:name=".lib.peripheral.PeripheralForegroundService"
+            android:exported="false"
+            android:foregroundServiceType="camera" />
+
     </application>
 </manifest>
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/vm/PeripheralForegroundControl.java b/app/src/main/java/cn/classfun/droidvm/daemon/vm/PeripheralForegroundControl.java
new file mode 100644
index 000000000..df69958cc
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/vm/PeripheralForegroundControl.java
@@ -0,0 +1,73 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
+package cn.classfun.droidvm.daemon.vm;
+
+import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
+
+import android.util.Log;
+
+import androidx.annotation.NonNull;
+
+import cn.classfun.droidvm.daemon.display.DaemonSystemContext;
+import cn.classfun.droidvm.lib.peripheral.PeripheralForegroundService;
+import cn.classfun.droidvm.lib.store.vm.VMPeripheralConfig;
+import cn.classfun.droidvm.lib.store.vm.VMState;
+
+/**
+ * Keeps {@link PeripheralForegroundService} in step with what this daemon is running.
+ *
+ * <p>Driven from the daemon rather than the app process, even though the service lives in the app.
+ * The daemon is the only party that knows when a VM actually starts -- a VM can be started over
+ * IPC with no UI open at all -- and it is the only one allowed to raise the service at that
+ * moment: an app calling {@code startForegroundService} from the background is refused, while
+ * {@code ActiveServices} exempts a root caller by app id, and the background-start check seeds
+ * itself from that same verdict. The service still runs in the app process under the app's uid,
+ * which is the uid whose capability the guest needs, so who asked for it does not change what it
+ * grants.</p>
+ *
+ * <p>Nothing here names a kind of peripheral: the mask comes from
+ * {@code PeripheralType.getForegroundServiceType}.</p>
+ */
+final class PeripheralForegroundControl {
+    private static final String TAG = "PeripheralFgsControl";
+
+    /** Last mask handed to the service, so an unchanged state is not re-applied on every event. */
+    private static int applied = 0;
+
+    private PeripheralForegroundControl() {
+    }
+
+    /** Recomputes from every instance in {@code store} and starts, re-types or stops the service. */
+    static synchronized void refresh(@NonNull VMInstanceStore store) {
+        int wanted = 0;
+        try {
+            var mask = new int[1];
+            store.forEach((id, instance) -> {
+                if (instance.getState() == VMState.STOPPED) return;
+                for (var peripheral : VMPeripheralConfig.listOf(instance.item)) {
+                    var type = peripheral.getType();
+                    // A device the host cannot serve is not attached, so it needs nothing.
+                    if (!type.isAvailable()) continue;
+                    mask[0] |= type.getForegroundServiceType();
+                }
+            });
+            wanted = mask[0];
+        } catch (Exception e) {
+            Log.w(TAG, "could not work out which peripherals are running", e);
+            return;
+        }
+        if (wanted == applied) return;
+        var context = DaemonSystemContext.get();
+        if (context == null) {
+            // Without a Context there is no way to reach the service. Leave `applied` alone so a
+            // later call retries rather than believing it has already done this.
+            Log.w(TAG, "no system context; peripheral foreground service not updated");
+            return;
+        }
+        Log.i(TAG, fmt("peripheral foreground service types 0x%s -> 0x%s",
+            Integer.toHexString(applied), Integer.toHexString(wanted)));
+        PeripheralForegroundService.apply(context, wanted);
+        applied = wanted;
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/vm/VMInstance.java b/app/src/main/java/cn/classfun/droidvm/daemon/vm/VMInstance.java
index b8ff468e1..69c5c6a83 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/vm/VMInstance.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/vm/VMInstance.java
@@ -120,6 +120,9 @@ private void setState(@NonNull VMState newState) {
         this.state = newState;
         Log.i(TAG, fmt("VM %s [%s] -> %s", getName(), getId().toString(), newState.name()));
         fireEvent("state", null);
+        // The one place every transition passes through, so the foreground service a peripheral
+        // may need is raised and dropped from the same edge the guest device appears on.
+        PeripheralForegroundControl.refresh(store);
     }
 
     private void fireEvent(@NonNull String event, @Nullable JSONObject extra) {
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/data/HostCameraDevices.java b/app/src/main/java/cn/classfun/droidvm/lib/data/HostCameraDevices.java
new file mode 100644
index 000000000..6cbb68f3b
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/lib/data/HostCameraDevices.java
@@ -0,0 +1,117 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
+package cn.classfun.droidvm.lib.data;
+
+import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
+
+import android.content.Context;
+import android.hardware.camera2.CameraCharacteristics;
+import android.hardware.camera2.CameraManager;
+import android.util.Log;
+
+import androidx.annotation.NonNull;
+import androidx.annotation.Nullable;
+
+import java.util.ArrayList;
+import java.util.List;
+
+import cn.classfun.droidvm.R;
+
+/**
+ * The host cameras a camera peripheral can be pinned to.
+ *
+ * <p>Unlike {@link HostAudioDevices}, the key stored in the VM config is the platform's own camera
+ * id, because that one is already stable: AudioDeviceInfo ids are handed out per boot, camera ids
+ * are a property of the device. The label is kept alongside it only so a row can still name a
+ * camera the current phone does not have -- a config copied between phones, or an external USB
+ * camera that is unplugged.</p>
+ *
+ * <p>Enumeration needs no CAMERA permission (the platform lets any uid read characteristics;
+ * measured on device), so the picker can be populated before the grant is asked for. Opening one
+ * does need it, and needs the uid to be foreground besides -- see {@code CameraPermission} and
+ * {@code PeripheralType.needsForegroundService}.</p>
+ */
+public final class HostCameraDevices {
+    private static final String TAG = "HostCameraDevices";
+
+    /** "let the host pick", stored when no particular camera was chosen. */
+    public static final String DEFAULT_KEY = "";
+
+    public static final class Entry {
+        /** Platform camera id, stored in the VM config. */
+        public final String key;
+        /** Human-readable name for the picker. */
+        public final String label;
+        /** {@link CameraCharacteristics#LENS_FACING_FRONT} and friends, -1 when unknown. */
+        public final int facing;
+
+        Entry(@NonNull String key, @NonNull String label, int facing) {
+            this.key = key;
+            this.label = label;
+            this.facing = facing;
+        }
+    }
+
+    private HostCameraDevices() {
+    }
+
+    /** Every camera the platform reports, in its own order. Empty when CameraManager is
+     *  unreachable, which the picker shows as "no camera on this host". */
+    @NonNull
+    public static List<Entry> list(@NonNull Context context) {
+        var out = new ArrayList<Entry>();
+        var manager = context.getSystemService(CameraManager.class);
+        if (manager == null) return out;
+        try {
+            for (var id : manager.getCameraIdList()) {
+                int facing = -1;
+                try {
+                    var facingValue = manager.getCameraCharacteristics(id)
+                        .get(CameraCharacteristics.LENS_FACING);
+                    if (facingValue != null) facing = facingValue;
+                } catch (Exception e) {
+                    // A camera the platform lists but will not describe is usually one this uid
+                    // may not touch. Keep it in the list under its id rather than dropping it:
+                    // the guest may still be able to open it, and a missing row looks like a bug.
+                    Log.w(TAG, fmt("characteristics for camera %s unavailable", id), e);
+                }
+                out.add(new Entry(id, labelFor(context, id, facing), facing));
+            }
+        } catch (Exception e) {
+            Log.w(TAG, "camera enumeration failed", e);
+        }
+        return out;
+    }
+
+    /** The label to show for a stored key, falling back to the stored label for a camera this
+     *  host does not have. */
+    @NonNull
+    public static String labelOf(@NonNull Context context, @Nullable String key,
+                                 @NonNull String storedLabel) {
+        if (key == null || key.isEmpty()) return context.getString(R.string.host_camera_default);
+        for (var entry : list(context)) {
+            if (entry.key.equals(key)) return entry.label;
+        }
+        return storedLabel.isEmpty() ? key : storedLabel;
+    }
+
+    @NonNull
+    private static String labelFor(@NonNull Context context, @NonNull String id, int facing) {
+        int nameId;
+        switch (facing) {
+            case CameraCharacteristics.LENS_FACING_FRONT:
+                nameId = R.string.host_camera_front;
+                break;
+            case CameraCharacteristics.LENS_FACING_BACK:
+                nameId = R.string.host_camera_back;
+                break;
+            case CameraCharacteristics.LENS_FACING_EXTERNAL:
+                nameId = R.string.host_camera_external;
+                break;
+            default:
+                return context.getString(R.string.host_camera_unknown, id);
+        }
+        return context.getString(nameId, id);
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/peripheral/PeripheralForegroundService.java b/app/src/main/java/cn/classfun/droidvm/lib/peripheral/PeripheralForegroundService.java
new file mode 100644
index 000000000..546b4e2d9
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/lib/peripheral/PeripheralForegroundService.java
@@ -0,0 +1,128 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
+package cn.classfun.droidvm.lib.peripheral;
+
+import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
+
+import android.app.NotificationChannel;
+import android.app.NotificationManager;
+import android.app.PendingIntent;
+import android.app.Service;
+import android.content.Context;
+import android.content.Intent;
+import android.os.IBinder;
+import android.util.Log;
+
+import androidx.annotation.NonNull;
+import androidx.annotation.Nullable;
+import androidx.core.app.NotificationCompat;
+
+import cn.classfun.droidvm.R;
+import cn.classfun.droidvm.ui.main.MainActivity;
+
+/**
+ * Holds the app's uid in a foreground state while a running VM carries a peripheral that needs it.
+ *
+ * <p>It exists because of where crosvm lives. The VM is a child of the root daemon, which is an
+ * {@code app_process} started through su and completely outside the Android lifecycle --
+ * ActivityManager does not know it exists, so nothing it does can affect its uid's process state.
+ * But the host APIs those peripherals reach are gated on exactly that: AppOps resolves a
+ * foreground-only permission by asking whether the <em>uid</em> carries the matching
+ * {@code PROCESS_CAPABILITY_FOREGROUND_*}, which only a process ActivityManager manages can
+ * supply. crosvm runs setuid to the app's uid, so a foreground service in the app process is what
+ * lets it through -- measured: an unmanaged setuid'd process gets frames precisely while some
+ * other process of the same uid is foreground, and ERROR_CAMERA_DISABLED otherwise.</p>
+ *
+ * <p>Nothing here names a kind of peripheral. The type mask comes from
+ * {@code PeripheralType.getForegroundServiceType}, so a device that starts needing this only has
+ * to say so there.</p>
+ */
+public final class PeripheralForegroundService extends Service {
+    private static final String TAG = "PeripheralFgs";
+    private static final String CHANNEL_ID = "peripheral_foreground";
+    private static final int NOTIF_ID = 0x45_00_00_01;
+    private static final String EXTRA_TYPES = "types";
+
+    /**
+     * Brings the service in line with {@code typeMask}: starts or re-types it when non-zero,
+     * stops it when zero. Safe to call with the value it already has.
+     *
+     * <p>Called from the daemon, which is uid 0: {@code ActiveServices} exempts a root caller by
+     * app id, and the background-start check seeds itself from that same verdict, so this works
+     * with no app process in the foreground and no UI open. An app-process caller would be
+     * refused in exactly that case, which is why the decision does not live there.</p>
+     */
+    public static void apply(@NonNull Context context, int typeMask) {
+        var intent = new Intent(context, PeripheralForegroundService.class);
+        if (typeMask == 0) {
+            context.stopService(intent);
+            return;
+        }
+        intent.putExtra(EXTRA_TYPES, typeMask);
+        try {
+            context.startForegroundService(intent);
+        } catch (Exception e) {
+            // Background-start restrictions, or a missing FOREGROUND_SERVICE_* permission. The VM
+            // still runs; only the peripheral that wanted this is affected, and it will report its
+            // own failure to open.
+            Log.w(TAG, "could not raise the peripheral foreground service", e);
+        }
+    }
+
+    @Nullable
+    @Override
+    public IBinder onBind(Intent intent) {
+        return null;
+    }
+
+    @Override
+    public int onStartCommand(@Nullable Intent intent, int flags, int startId) {
+        int typeMask = intent == null ? 0 : intent.getIntExtra(EXTRA_TYPES, 0);
+        if (typeMask == 0) {
+            stopSelf();
+            return START_NOT_STICKY;
+        }
+        ensureChannel();
+        try {
+            startForeground(NOTIF_ID, buildNotification(), typeMask);
+        } catch (Exception e) {
+            // startForeground with a typed service throws when the matching runtime permission is
+            // not held -- the user declined CAMERA after the peripheral was added, say. Stopping
+            // is the honest outcome: a service that cannot carry the type it was raised for grants
+            // no capability, and leaving it up would show a notification that promises otherwise.
+            Log.w(TAG, fmt("startForeground rejected for types 0x%s",
+                Integer.toHexString(typeMask)), e);
+            stopSelf();
+            return START_NOT_STICKY;
+        }
+        // Not sticky: the policy re-applies from the live VM states, so a restart by the system
+        // with no VM running would raise a service nothing asked for.
+        return START_NOT_STICKY;
+    }
+
+    @NonNull
+    private android.app.Notification buildNotification() {
+        var open = PendingIntent.getActivity(this, 0, new Intent(this, MainActivity.class),
+            PendingIntent.FLAG_UPDATE_CURRENT | PendingIntent.FLAG_IMMUTABLE);
+        return new NotificationCompat.Builder(this, CHANNEL_ID)
+            .setSmallIcon(R.drawable.ic_camera)
+            .setContentTitle(getString(R.string.peripheral_fgs_title))
+            .setContentText(getString(R.string.peripheral_fgs_text))
+            .setOngoing(true)
+            .setOnlyAlertOnce(true)
+            .setContentIntent(open)
+            .build();
+    }
+
+    private void ensureChannel() {
+        var nm = getSystemService(NotificationManager.class);
+        if (nm == null) return;
+        var channel = new NotificationChannel(CHANNEL_ID,
+            getString(R.string.notif_channel_peripheral_foreground),
+            NotificationManager.IMPORTANCE_LOW);
+        channel.setDescription(getString(R.string.notif_channel_peripheral_foreground_desc));
+        channel.setShowBadge(false);
+        nm.createNotificationChannel(channel);
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/store/vm/PeripheralType.java b/app/src/main/java/cn/classfun/droidvm/lib/store/vm/PeripheralType.java
index 70f2aa605..ddf61c717 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/store/vm/PeripheralType.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/store/vm/PeripheralType.java
@@ -3,7 +3,10 @@
 // Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.lib.store.vm;
 
+import android.content.pm.ServiceInfo;
+
 import androidx.annotation.DrawableRes;
+import androidx.annotation.NonNull;
 import androidx.annotation.StringRes;
 
 import cn.classfun.droidvm.R;
@@ -21,19 +24,37 @@
  */
 public enum PeripheralType implements StringEnum {
     /** virtio-snd, one PCM direction per device. Served by an unprivileged vhost-user helper. */
+    VIRTIO_SOUND(R.string.edit_vm_peripheral_type_virtio_sound, R.drawable.ic_speaker, true, ServiceInfo.FOREGROUND_SERVICE_TYPE_NONE),
     /**
      * Intel HD Audio codec: one card, playback and capture together. Present so the model is
      * honest about what a guest could have -- Windows has an in-box driver for it, which
      * virtio-snd does not -- but crosvm emulates no HDA controller, so nothing can serve it yet.
      */
+    INTEL_HDA(R.string.edit_vm_peripheral_type_intel_hda, R.drawable.ic_microphone, false, ServiceInfo.FOREGROUND_SERVICE_TYPE_NONE),
+    /**
+     * virtio-media capture device: one host camera, seen by the guest as one {@code /dev/videoX}.
+     *
+     * <p>One entry is one camera, unlike the sound card above. That is the driver's shape rather
+     * than a UI choice: a virtio-media device registers exactly one {@code video_device} whose
+     * capabilities come from a single config word, so a second camera is a second device. A VM
+     * that wants front and back carries two of these.</p>
+     *
+     * <p>Unavailable until crosvm carries the device; the host half (Camera2 NDK through
+     * {@code android_camera}) exists, the virtio-media capture device on top of it does not.</p>
+     */
+    VIRTIO_CAMERA(R.string.edit_vm_peripheral_type_virtio_camera, R.drawable.ic_camera, false, ServiceInfo.FOREGROUND_SERVICE_TYPE_CAMERA);
 
     private final @StringRes int titleId;
     private final @DrawableRes int iconId;
     private final boolean available;
+    private final int foregroundServiceType;
 
+    PeripheralType(@StringRes int titleId, @DrawableRes int iconId, boolean available,
+                   int foregroundServiceType) {
         this.titleId = titleId;
         this.iconId = iconId;
         this.available = available;
+        this.foregroundServiceType = foregroundServiceType;
     }
 
     @Override
@@ -51,4 +72,41 @@ public int getIconId() {
     public boolean isAvailable() {
         return available;
     }
+
+    /**
+     * Whether a running VM carrying this device needs the app to hold a foreground service.
+     *
+     * <p>Some host APIs are only open to a uid the platform considers foreground, and the state
+     * is a property of the <em>uid</em>, not of the process that calls: crosvm is forked by the
+     * root daemon and ActivityManager does not know it exists, so nothing it does can put its uid
+     * in that state. Only a process ActivityManager manages -- the app's own -- can, and a
+     * foreground service is how it does so without a visible activity.</p>
+     *
+     * <p>Camera is the first such device: {@code CAMERA} is a foreground-only runtime permission,
+     * so AppOps resolves it to MODE_IGNORED unless the uid carries
+     * {@code PROCESS_CAPABILITY_FOREGROUND_CAMERA}, which comes from a foreground service typed
+     * {@code camera}. Microphone works the same way, through
+     * {@code PROCESS_CAPABILITY_FOREGROUND_MICROPHONE}, and will want a type here once anyone
+     * checks whether guest capture survives the app going background.</p>
+     *
+     * <p>A type rather than a yes/no, because a foreground service has to declare which kind it
+     * is and the two above need different ones -- a boolean would leave the service guessing.
+     * Naming the type here is still the whole switch: nothing else tests for a device kind, and
+     * the service unions the types of whatever is running.</p>
+     */
+    public int getForegroundServiceType() {
+        return foregroundServiceType;
+    }
+
+    /** Convenience for the common question; the type is the source of truth. */
+    public boolean needsForegroundService() {
+        return foregroundServiceType != ServiceInfo.FOREGROUND_SERVICE_TYPE_NONE;
+    }
+
+    /** The service types {@code types} need together, or 0 when none do. */
+    public static int foregroundServiceTypesOf(@NonNull Iterable<PeripheralType> types) {
+        int mask = ServiceInfo.FOREGROUND_SERVICE_TYPE_NONE;
+        for (var type : types) mask |= type.getForegroundServiceType();
+        return mask;
+    }
 }
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/store/vm/VpuConfig.java b/app/src/main/java/cn/classfun/droidvm/lib/store/vm/VpuConfig.java
new file mode 100644
index 000000000..5a0c53c07
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/lib/store/vm/VpuConfig.java
@@ -0,0 +1,88 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
+package cn.classfun.droidvm.lib.store.vm;
+
+import androidx.annotation.NonNull;
+import androidx.annotation.Nullable;
+
+import cn.classfun.droidvm.lib.store.base.DataItem;
+
+/**
+ * Whether a VM is given hardware video acceleration.
+ *
+ * <p>One switch for both directions. In the guest they are two devices -- a virtio-media device is
+ * one V4L2 node is one function, so a decoder and an encoder cannot share one -- but they are one
+ * piece of hardware to whoever ticks the box, and there is no host on which one would work and the
+ * other would not.</p>
+ *
+ * <p>Stored but not yet acted on: crosvm carries no virtio-media codec device, so the backends
+ * read this and attach nothing. It lives here rather than in the tab so that the day the device
+ * lands, the config it needs is already in every VM that asked for it.</p>
+ */
+public final class VpuConfig {
+    public static final String KEY_ENABLED = "vpu_enabled";
+    public static final String KEY_HOST_POOL_MB = "vpu_host_pool_mb";
+    public static final String KEY_GUEST_POOL_MB = "vpu_guest_pool_mb";
+
+    public static final int DEFAULT_HOST_POOL_MB = 256;
+    public static final int DEFAULT_GUEST_POOL_MB = 128;
+
+    private VpuConfig() {
+    }
+
+    public static boolean isEnabled(@NonNull DataItem config) {
+        return config.optBoolean(KEY_ENABLED, false);
+    }
+
+    public static void setEnabled(@NonNull DataItem config, boolean enabled) {
+        config.set(KEY_ENABLED, enabled);
+    }
+
+    /**
+     * Where the host puts the buffers it allocates for the guest to map.
+     *
+     * <p>Always present: host-allocated buffers are how virtio-media works on every hypervisor,
+     * and the pool is only a different base for the offset the host already returns.</p>
+     */
+    public static int getHostPoolMb(@NonNull DataItem config) {
+        return (int) config.optLong(KEY_HOST_POOL_MB, DEFAULT_HOST_POOL_MB);
+    }
+
+    public static void setHostPoolMb(@NonNull DataItem config, int mb) {
+        config.set(KEY_HOST_POOL_MB, mb);
+    }
+
+    /** The stored guest pool size, whether or not this VM can use one. */
+    public static int getGuestPoolMb(@NonNull DataItem config) {
+        return (int) config.optLong(KEY_GUEST_POOL_MB, DEFAULT_GUEST_POOL_MB);
+    }
+
+    public static void setGuestPoolMb(@NonNull DataItem config, int mb) {
+        config.set(KEY_GUEST_POOL_MB, mb);
+    }
+
+    /**
+     * Whether a guest-side pool means anything for {@code pvm}.
+     *
+     * <p>It only does when the host cannot read guest memory. Everywhere else the guest driver's
+     * ordinary allocation is already reachable, and declaring a pool would replace a working path
+     * with a bounded one for no gain. The value stays in the config either way, so switching the
+     * protection mode back does not lose it.</p>
+     */
+    public static boolean guestPoolApplies(@Nullable ProtectedVM pvm) {
+        return pvm == ProtectedVM.PROTECTED_PROTECTED
+            || pvm == ProtectedVM.PROTECTED_WITHOUT_FIRMWARE;
+    }
+
+    /**
+     * The guest pool size to pass to crosvm, or 0 for "do not create one".
+     *
+     * <p>0 is not a smaller pool, it is no {@code media_guest} node at all: with nothing in
+     * /reserved-memory to find, the guest driver falls back to its stock behaviour of allocating
+     * from system RAM.</p>
+     */
+    public static int guestPoolMbFor(@NonNull DataItem config, @Nullable ProtectedVM pvm) {
+        return guestPoolApplies(pvm) ? getGuestPoolMb(config) : 0;
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/ui/CameraPermission.java b/app/src/main/java/cn/classfun/droidvm/lib/ui/CameraPermission.java
new file mode 100644
index 000000000..c4ffede68
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/lib/ui/CameraPermission.java
@@ -0,0 +1,93 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
+package cn.classfun.droidvm.lib.ui;
+
+import android.Manifest;
+import android.content.pm.PackageManager;
+import android.widget.Toast;
+
+import androidx.activity.result.ActivityResultLauncher;
+import androidx.activity.result.contract.ActivityResultContracts;
+import androidx.annotation.NonNull;
+import androidx.appcompat.app.AppCompatActivity;
+import androidx.core.content.ContextCompat;
+
+import com.google.android.material.dialog.MaterialAlertDialogBuilder;
+
+import cn.classfun.droidvm.R;
+
+/**
+ * Asks for CAMERA before a VM is given a camera peripheral, and refuses to add one without it.
+ *
+ * <p>Unlike {@link RecordAudioPermission}, which runs its action whether or not the user agrees,
+ * a denial here stops the peripheral being added. That is not a policy preference, it is what the
+ * platform does: CAMERA is a foreground-only runtime permission, so without the grant AppOps
+ * resolves the camera op to MODE_IGNORED and {@code ACameraManager_openCamera} fails with
+ * ERROR_CAMERA_DISABLED -- measured, not assumed. A camera device added without the grant is a
+ * device that can only ever fail to open, and a VM whose config lists hardware it will never get
+ * is exactly what {@code PeripheralType.isAvailable} exists to avoid.</p>
+ *
+ * <p>The grant is necessary but not sufficient: the uid also has to be in a foreground state when
+ * the guest actually opens the camera, which is what the peripheral foreground service is for.
+ * See {@code PeripheralType.needsForegroundService}.</p>
+ *
+ * <p>Construct from an activity's {@code onCreate}: the result launcher has to be registered
+ * before the activity reaches STARTED.</p>
+ */
+public final class CameraPermission {
+    private final AppCompatActivity activity;
+    private final ActivityResultLauncher<String> launcher;
+    private Runnable pending;
+
+    public CameraPermission(@NonNull AppCompatActivity activity) {
+        this.activity = activity;
+        this.launcher = activity.registerForActivityResult(
+            new ActivityResultContracts.RequestPermission(), granted -> {
+                var action = pending;
+                pending = null;
+                if (granted && action != null) {
+                    action.run();
+                } else if (!granted) {
+                    // Nothing was added; say so, because an add that quietly does nothing reads
+                    // as a broken button rather than as a refusal being honoured.
+                    Toast.makeText(activity, R.string.camera_permission_declined,
+                        Toast.LENGTH_SHORT).show();
+                }
+            });
+    }
+
+    /**
+     * Runs {@code action} only once the camera is allowed: immediately when the grant is already
+     * held, after the user agrees otherwise, and never if they decline.
+     *
+     * <p>Straight to the platform dialog, with no rationale of our own in front of it. The
+     * platform's own wording already says which app is asking and for what, so a rationale first
+     * is two dialogs asking one question. It is shown only on a second attempt, where the user
+     * has declined once and the platform will not ask again unaided.</p>
+     */
+    public void requireThen(@NonNull Runnable action) {
+        if (granted()) {
+            action.run();
+            return;
+        }
+        pending = action;
+        if (activity.shouldShowRequestPermissionRationale(Manifest.permission.CAMERA)) {
+            new MaterialAlertDialogBuilder(activity)
+                .setTitle(R.string.camera_permission_title)
+                .setMessage(R.string.camera_permission_message)
+                .setPositiveButton(R.string.camera_permission_allow,
+                    (d, w) -> launcher.launch(Manifest.permission.CAMERA))
+                .setNegativeButton(R.string.camera_permission_cancel, (d, w) -> pending = null)
+                .setOnCancelListener(d -> pending = null)
+                .show();
+            return;
+        }
+        launcher.launch(Manifest.permission.CAMERA);
+    }
+
+    public boolean granted() {
+        return ContextCompat.checkSelfPermission(activity,
+            Manifest.permission.CAMERA) == PackageManager.PERMISSION_GRANTED;
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/peripheral/VMEditPeripheralTab.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/peripheral/VMEditPeripheralTab.java
index 9d7f09d50..b2f4e77bd 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/peripheral/VMEditPeripheralTab.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/peripheral/VMEditPeripheralTab.java
@@ -48,6 +48,7 @@ public void initView() {
     public void initValue() {
         adapter = listPeripherals.setAdapter(VMPeripheralEditAdapter.class);
         adapter.setMicPermissionGate(parent::ensureRecordAudioThen);
+        adapter.setCameraPermissionGate(parent.getCameraPermission()::requireThen);
         listSerialPorts.setAdapter(VMSerialEditAdapter.class);
         if (!parent.editMode) {
             var peripherals = DataItem.newArray();
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/peripheral/VMPeripheralEditAdapter.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/peripheral/VMPeripheralEditAdapter.java
index 19b61cb95..bb1b71c47 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/peripheral/VMPeripheralEditAdapter.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/peripheral/VMPeripheralEditAdapter.java
@@ -31,6 +31,7 @@
 import cn.classfun.droidvm.R;
 import cn.classfun.droidvm.lib.data.HostAudioDevices;
 import cn.classfun.droidvm.lib.store.base.DataItem;
+import cn.classfun.droidvm.lib.data.HostCameraDevices;
 import cn.classfun.droidvm.lib.store.vm.PeripheralType;
 import cn.classfun.droidvm.lib.store.vm.SoundBuffer;
 import cn.classfun.droidvm.lib.store.vm.SoundMode;
@@ -60,6 +61,8 @@ public final class VMPeripheralEditAdapter extends CardItemAdapter<VMPeripheralE
 
     /** Asks for RECORD_AUDIO before a capture-capable device is added; set by the tab. */
     private Consumer<Runnable> micPermissionGate;
+    /** Asks for CAMERA before a camera device is added, and drops the add if refused. */
+    private Consumer<Runnable> cameraPermissionGate;
     // What the phone reported last time we looked, so binding a row is not a binder call each
     // time it scrolls past. Dropped by refreshHostDevices().
     private List<HostAudioDevices.Entry> outputCache;
@@ -73,6 +76,10 @@ public void setMicPermissionGate(@Nullable Consumer<Runnable> gate) {
         this.micPermissionGate = gate;
     }
 
+    public void setCameraPermissionGate(@Nullable Consumer<Runnable> gate) {
+        this.cameraPermissionGate = gate;
+    }
+
     @NonNull
     @Override
     protected VMPeripheralEditViewHolder createViewHolderInstance(@NonNull View view) {
@@ -115,6 +122,14 @@ private void addPeripheral(@NonNull PeripheralType type) {
             config.setType(type);
             appendItem(config.item);
         };
+        // A camera is gated on consent rather than merely asking for it: without the grant the
+        // device could be listed but never opened, so adding one anyway would write a config that
+        // is guaranteed to disappoint.
+        if (type == PeripheralType.VIRTIO_CAMERA) {
+            if (cameraPermissionGate != null) cameraPermissionGate.accept(add);
+            else add.run();
+            return;
+        }
         // Anything that can capture needs the host mic permission asked for, and both kinds now
         // start with a microphone on them.
         if (micPermissionGate != null) {
@@ -132,9 +147,21 @@ public void onBindViewHolder(@NonNull VMPeripheralEditViewHolder holder, int pos
         holder.tvType.setText(type.getDisplayString(context));
         holder.tvUnavailable.setVisibility(type.isAvailable() ? GONE : VISIBLE);
 
+        holder.groupVirtioSound.setVisibility(type == PeripheralType.VIRTIO_SOUND ? VISIBLE : GONE);
+        holder.groupIntelHda.setVisibility(type == PeripheralType.INTEL_HDA ? VISIBLE : GONE);
+        holder.groupVirtioCamera.setVisibility(
+            type == PeripheralType.VIRTIO_CAMERA ? VISIBLE : GONE);
 
+        switch (type) {
+            case VIRTIO_SOUND:
                 bindVirtioSound(holder, peripheral);
+                break;
+            case INTEL_HDA:
                 bindIntelHda(holder, peripheral);
+                break;
+            case VIRTIO_CAMERA:
+                bindVirtioCamera(holder, peripheral);
+                break;
         }
 
         holder.btnDelete.setOnClickListener(v -> {
@@ -305,6 +332,67 @@ private void bindIntelHda(
         });
     }
 
+    private void bindVirtioCamera(
+        @NonNull VMPeripheralEditViewHolder holder, @NonNull VMPeripheralConfig peripheral
+    ) {
+        var key = peripheral.getHostDevice();
+        holder.btnCameraDevice.setText(
+            HostCameraDevices.labelOf(context, key, peripheral.getHostLabel()));
+        // Same warning as an audio endpoint that is unplugged: a config carried over from another
+        // phone can name a camera this one does not have.
+        boolean missing = !key.isEmpty() && !hasCamera(key);
+        holder.tvWarning.setVisibility(missing ? VISIBLE : GONE);
+        if (missing) holder.tvWarning.setText(R.string.edit_vm_peripheral_camera_missing);
+        holder.btnCameraDevice.setOnClickListener(v -> {
+            int pos = holder.getBindingAdapterPosition();
+            if (pos == RecyclerView.NO_POSITION) return;
+            var cfg = new VMPeripheralConfig(items.get(pos));
+            showCameraPicker(cfg.getHostDevice(), cfg.getHostLabel(), (chosen, label) -> {
+                cfg.setHostDevice(chosen, label);
+                notifyItemChangedSafe(pos);
+            });
+        });
+    }
+
+    private boolean hasCamera(@NonNull String key) {
+        for (var entry : HostCameraDevices.list(context)) {
+            if (entry.key.equals(key)) return true;
+        }
+        return false;
+    }
+
+    /**
+     * One camera out of the host's list, plus "host default".
+     *
+     * <p>No second question after it, unlike the audio picker: a camera has no equivalent of an
+     * audio stream's purpose -- what it is used for does not change which sensor is meant.</p>
+     */
+    private void showCameraPicker(
+        @NonNull String current, @NonNull String storedLabel, @NonNull HostPicked onPicked
+    ) {
+        var keys = new ArrayList<String>();
+        var labels = new ArrayList<String>();
+        keys.add(HostCameraDevices.DEFAULT_KEY);
+        labels.add(context.getString(R.string.host_camera_default));
+        for (var entry : HostCameraDevices.list(context)) {
+            keys.add(entry.key);
+            labels.add(entry.label);
+        }
+        if (!current.isEmpty() && !keys.contains(current)) {
+            keys.add(current);
+            labels.add(context.getString(R.string.edit_vm_peripheral_host_missing_item,
+                storedLabel.isEmpty() ? current : storedLabel));
+        }
+        int checked = Math.max(0, keys.indexOf(current));
+        new MaterialAlertDialogBuilder(context)
+            .setTitle(R.string.edit_vm_peripheral_host_camera)
+            .setSingleChoiceItems(labels.toArray(new String[0]), checked, (dialog, which) -> {
+                dialog.dismiss();
+                onPicked.onPicked(keys.get(which), which == 0 ? "" : labels.get(which));
+            })
+            .show();
+    }
+
     /**
      * Names the chosen endpoint on the button, and says so when the config points at something
      * that is not plugged in or paired right now -- the VM still starts, on the host's own
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/peripheral/VMPeripheralEditViewHolder.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/peripheral/VMPeripheralEditViewHolder.java
index c96eb4130..d5f60c58e 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/peripheral/VMPeripheralEditViewHolder.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/peripheral/VMPeripheralEditViewHolder.java
@@ -32,6 +32,8 @@ public final class VMPeripheralEditViewHolder extends RecyclerView.ViewHolder {
     final PickerButtonWidget btnUnderrun;
     // intel hda
     final View groupIntelHda;
+    final View groupVirtioCamera;
+    final MaterialButton btnCameraDevice;
     final MaterialButton btnHdaOut;
     final MaterialButton btnHdaIn;
 
@@ -49,6 +51,8 @@ public final class VMPeripheralEditViewHolder extends RecyclerView.ViewHolder {
         btnBuffer = itemView.findViewById(R.id.btn_sound_buffer);
         btnUnderrun = itemView.findViewById(R.id.btn_sound_underrun);
         groupIntelHda = itemView.findViewById(R.id.group_intel_hda);
+        groupVirtioCamera = itemView.findViewById(R.id.group_virtio_camera);
+        btnCameraDevice = itemView.findViewById(R.id.btn_camera_device);
         btnHdaOut = itemView.findViewById(R.id.btn_hda_out);
         btnHdaIn = itemView.findViewById(R.id.btn_hda_in);
     }
diff --git a/app/src/main/res/drawable/ic_camera.xml b/app/src/main/res/drawable/ic_camera.xml
new file mode 100644
index 000000000..19cc3c222
--- /dev/null
+++ b/app/src/main/res/drawable/ic_camera.xml
@@ -0,0 +1,9 @@
+<vector xmlns:android="http://schemas.android.com/apk/res/android"
+    android:width="24dp"
+    android:height="24dp"
+    android:viewportWidth="24"
+    android:viewportHeight="24">
+    <path
+        android:fillColor="?attr/colorOnSurface"
+        android:pathData="M4,4H7L9,2H15L17,4H20A2,2 0 0,1 22,6V18A2,2 0 0,1 20,20H4A2,2 0 0,1 2,18V6A2,2 0 0,1 4,4M12,7A5,5 0 0,0 7,12A5,5 0 0,0 12,17A5,5 0 0,0 17,12A5,5 0 0,0 12,7M12,9A3,3 0 0,1 15,12A3,3 0 0,1 12,15A3,3 0 0,1 9,12A3,3 0 0,1 12,9Z" />
+</vector>
diff --git a/app/src/main/res/drawable/ic_video.xml b/app/src/main/res/drawable/ic_video.xml
new file mode 100644
index 000000000..a5deb29c0
--- /dev/null
+++ b/app/src/main/res/drawable/ic_video.xml
@@ -0,0 +1,9 @@
+<vector xmlns:android="http://schemas.android.com/apk/res/android"
+    android:width="24dp"
+    android:height="24dp"
+    android:viewportWidth="24"
+    android:viewportHeight="24">
+    <path
+        android:fillColor="?attr/colorOnSurface"
+        android:pathData="M18,4L20,8H17L15,4H13L15,8H12L10,4H8L10,8H7L5,4H4A2,2 0 0,0 2,6V18A2,2 0 0,0 4,20H20A2,2 0 0,0 22,18V4H18Z" />
+</vector>
diff --git a/app/src/main/res/layout/item_vm_peripheral_edit.xml b/app/src/main/res/layout/item_vm_peripheral_edit.xml
index 05d9e4964..c648e38da 100644
--- a/app/src/main/res/layout/item_vm_peripheral_edit.xml
+++ b/app/src/main/res/layout/item_vm_peripheral_edit.xml
@@ -200,6 +200,36 @@
 
         </LinearLayout>
 
+        <!-- One camera device, one host camera: a virtio-media device registers exactly one
+             /dev/videoX, so there is nothing here to add rows to. -->
+        <LinearLayout
+            android:id="@+id/group_virtio_camera"
+            android:layout_width="match_parent"
+            android:layout_height="wrap_content"
+            android:layout_marginTop="4dp"
+            android:gravity="center_vertical"
+            android:orientation="horizontal"
+            android:visibility="gone"
+            tools:visibility="visible">
+
+            <TextView
+                android:layout_width="56dp"
+                android:layout_height="wrap_content"
+                android:text="@string/edit_vm_peripheral_host_camera"
+                android:textSize="12sp" />
+
+            <com.google.android.material.button.MaterialButton
+                android:id="@+id/btn_camera_device"
+                style="@style/Widget.Material3.Button.TonalButton"
+                android:layout_width="0dp"
+                android:layout_height="36dp"
+                android:layout_weight="1"
+                android:text="@string/host_camera_default"
+                android:textSize="12sp"
+                tools:ignore="TouchTargetSizeCheck,VisualLintButtonSize" />
+
+        </LinearLayout>
+
         <TextView
             android:id="@+id/tv_peripheral_warning"
             android:layout_width="match_parent"

From f0ab0ffdee4a170c311a00d4f066704d9245f661 Mon Sep 17 00:00:00 2001
From: HuJK <gh@hujk.org>
Date: Sun, 30 Aug 2026 13:37:15 +0800
Subject: [PATCH 139/182] vm: a protection mode whose guest RAM the host can
 still see

A protected VM has its memory lent to the guest, so every virtio buffer has to
travel through a bounce pool and the guest kernel needs
CONFIG_RESTRICTED_DMA_POOL to build one. No distribution ships that, which is
why every stock image failed to boot in the only mode that Gunyah's protected
path offered.

PSEUDO_UNPROTECTED is protected to the hypervisor, but the guest's window is
SHARE'd back before the payload runs, so the host can still reach it and there
is nothing to bounce through. A stock distribution kernel boots. Two
consequences are wired here rather than left to the user: the mode is not in
the list the boot tab warns about, because the warning would be false; and the
swiotlb size is ignored in this mode and hidden in the editor, because a
restricted-dma-pool node in the device tree of a guest that was never built to
honour one is the exact thing this mode exists to avoid.
---
 .../daemon/vm/backend/CrosvmBackendInstance.java    | 13 ++++++++++++-
 .../classfun/droidvm/lib/store/vm/ProtectedVM.java  | 13 ++++++++++++-
 .../classfun/droidvm/ui/vm/boot/BootMenuDialog.java |  5 +++++
 .../droidvm/ui/vm/edit/boot/VMEditBootTab.java      |  4 ++++
 4 files changed, 33 insertions(+), 2 deletions(-)

diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/CrosvmBackendInstance.java b/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/CrosvmBackendInstance.java
index b29c0f7e1..0292d6b66 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/CrosvmBackendInstance.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/CrosvmBackendInstance.java
@@ -281,13 +281,17 @@ private List<String> buildCommand() {
                 break;
             default:throw new IllegalArgumentException(fmt("Unsupported hypervisor: %s", hypervisor));
         }
-        switch (optEnum(item, "protected_vm", defProtectedMode)) {
+        var protectedVm = optEnum(item, "protected_vm", defProtectedMode);
+        switch (protectedVm) {
             case PROTECTED_PROTECTED:
                 args.add("--protected-vm");
                 break;
             case PROTECTED_WITHOUT_FIRMWARE:
                 args.add("--protected-vm-without-firmware");
                 break;
+            case PSEUDO_UNPROTECTED:
+                args.add("--protected-vm-pseudo-unprotected");
+                break;
             default:
                 break;
         }
@@ -318,6 +322,13 @@ private List<String> buildCommand() {
                 break;
         }
         var swiotlbMb = item.optLong("swiotlb_mb", 0);
+        // A pseudo-unprotected VM has nothing to bounce through -- its RAM is shared to it, so the
+        // host can already reach every buffer the guest hands a device. A pool here would do only
+        // harm: it puts a restricted-dma-pool node in the tree of a guest that was never built to
+        // honour one, which is the exact thing this mode exists to avoid. Ignore the stored value
+        // rather than asking everyone who switches to this mode to zero it by hand.
+        if (protectedVm == ProtectedVM.PSEUDO_UNPROTECTED)
+            swiotlbMb = 0;
         if (swiotlbMb > 0) {
             args.add("--swiotlb");
             args.add(String.valueOf(swiotlbMb));
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/store/vm/ProtectedVM.java b/app/src/main/java/cn/classfun/droidvm/lib/store/vm/ProtectedVM.java
index 95632dd33..a06e4d055 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/store/vm/ProtectedVM.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/store/vm/ProtectedVM.java
@@ -11,7 +11,18 @@
 public enum ProtectedVM implements StringEnum {
     PROTECTED_NORMAL(0, R.string.create_vm_protected_normal),
     PROTECTED_PROTECTED(1, R.string.create_vm_protected_protected),
-    PROTECTED_WITHOUT_FIRMWARE(2, R.string.create_vm_protected_without_firmware);
+    PROTECTED_WITHOUT_FIRMWARE(2, R.string.create_vm_protected_without_firmware),
+    /**
+     * Protected as far as the hypervisor is concerned, but the guest's RAM is SHARE'd to it at
+     * run time instead of lent before boot, so the host can still reach it. Gunyah only.
+     *
+     * <p>The difference the user sees is which guests boot: a protected VM needs a kernel built
+     * with {@code CONFIG_RESTRICTED_DMA_POOL}, because its memory is lent and every virtio buffer
+     * has to travel through a bounce pool. No distribution builds that. Here there is nothing to
+     * bounce through, so a stock distribution kernel boots -- which is why this mode is not one
+     * of the two the boot tab warns about.
+     */
+    PSEUDO_UNPROTECTED(3, R.string.create_vm_protected_pseudo_unprotected);
 
     private final int value;
     private final @StringRes int stringId;
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/boot/BootMenuDialog.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/boot/BootMenuDialog.java
index 6d919be51..0f50d9f8d 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/boot/BootMenuDialog.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/boot/BootMenuDialog.java
@@ -328,6 +328,11 @@ private static CharSequence warnedLabel(
      * protected-without-firmware) -- read from the stored config, where a
      * guest kernel without CONFIG_DMA_RESTRICTED_POOL cannot drive virtio.
      * Mirrors {@code VMEditBootTab.isProtectedVm}.
+     *
+     * <p>{@code PSEUDO_UNPROTECTED} is deliberately not in this list. It is a
+     * protected VM to the hypervisor, but its RAM is shared to it rather than
+     * lent, so there is no bounce pool and a stock kernel boots -- the warning
+     * would be false there.
      */
     private static boolean isProtectedVm(@NonNull VMConfig config) {
         var pvm = optEnum(config.item, "protected_vm",
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/boot/VMEditBootTab.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/boot/VMEditBootTab.java
index 549ab46e4..85647d2fb 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/boot/VMEditBootTab.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/boot/VMEditBootTab.java
@@ -568,6 +568,10 @@ private void updateDetectionCard() {
      * just-changed selection is reflected, then the stored config, then
      * the backend default. In such a VM a guest kernel without
      * CONFIG_DMA_RESTRICTED_POOL cannot drive virtio.
+     *
+     * <p>{@code PSEUDO_UNPROTECTED} is deliberately not in this list: its RAM is
+     * shared to the guest rather than lent, so there is no bounce pool and a
+     * stock kernel boots. Adding it here would warn about nothing.
      */
     private boolean isProtectedVm() {
         ProtectedVM pvm = null;

From 4df25e39e5e081c9cf543ae2b2d9c34b0d1d8df3 Mon Sep 17 00:00:00 2001
From: HuJK <gh@hujk.org>
Date: Sun, 30 Aug 2026 13:37:15 +0800
Subject: [PATCH 140/182] gunyah: features declare that they need dynamic
 memory sharing, and a lending fault names the device

Dynamic memory sharing is not a checkbox a user should have to find. Features
that need it -- the GPU pools, the host-visible blob paths -- declare it, and
the editor turns it on for them and moves it to the basic tab where a
VM-shaped setting belongs. Under Gunyah the RingBlob backing is pinned
(gunyah-pvm) so the permanent SHARE that maps it stays valid.

The tab strip changes because the sections moved. It spreads across the full
width when the tabs fit and scrolls when they do not, and it leaves its drags
to the tab strip rather than fighting the pager underneath.

The rest is the diagnostic, and it exists because the failure it explains is
unreadable without it. When lending fails the kernel reports a hypervisor
error and a config symbol, and neither says which device asked for the memory.
The handler now names the devices behind the fault and links to something a
reader can act on, and the console log can be filtered so the line is findable
in a boot's worth of output.
---
 .../vm/backend/CrosvmBackendInstance.java     |  25 ++--
 .../classfun/droidvm/lib/diag/LogHelper.java  |   7 +
 .../droidvm/lib/diag/LogHelperHandler.java    |  69 +++++++++-
 .../OsKernelWithoutRestrictPoolHandler.java   | 106 ++++++++++++++-
 .../droidvm/lib/ui/AdaptiveTabLayout.java     |  91 +++++++++++++
 .../droidvm/lib/ui/TabSwipeHelper.java        |  24 ++++
 .../ui/vm/console/VMConsoleActivity.java      | 127 ++++++++++++++----
 .../ui/vm/edit/base/VMEditBaseTab.java        |   6 +
 app/src/main/res/drawable/ic_filter.xml       |   9 ++
 .../main/res/layout/activity_disk_info.xml    |   4 +-
 .../main/res/layout/activity_network_info.xml |   4 +-
 app/src/main/res/layout/activity_vm_edit.xml  |   5 +-
 .../main/res/layout/dialog_console_filter.xml |  29 ++++
 .../main/res/layout/partial_vm_edit_basic.xml |   1 +
 app/src/main/res/menu/menu_vm_console.xml     |   5 +
 15 files changed, 462 insertions(+), 50 deletions(-)
 create mode 100644 app/src/main/java/cn/classfun/droidvm/lib/ui/AdaptiveTabLayout.java
 create mode 100644 app/src/main/res/drawable/ic_filter.xml
 create mode 100644 app/src/main/res/layout/dialog_console_filter.xml

diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/CrosvmBackendInstance.java b/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/CrosvmBackendInstance.java
index 0292d6b66..b176c688a 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/CrosvmBackendInstance.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/CrosvmBackendInstance.java
@@ -272,10 +272,12 @@ private List<String> buildCommand() {
             case KVM:
                 args.add("kvm");
                 break;
-            case GUNYAH:
+            case GUNYAH: {
+                    && optEnum(item, "gpu_backend", GpuBackend.NONE) == GpuBackend.GPU_GFXSTREAM;
                 args.add("gunyah");
                 defProtectedMode = ProtectedVM.PROTECTED_WITHOUT_FIRMWARE;
                 break;
+            }
             case GENIEZONE:
                 args.add("geniezone");
                 break;
@@ -579,7 +581,15 @@ private void buildSharedDirCommand(@NonNull List<String> args) {
         }
     }
 
+    // Resolve the effective hypervisor (mirrors buildCommand's --hypervisor logic) to gate
+    // Gunyah-only GPU behavior such as gunyah-pvm.
+    private boolean isGunyahHypervisor() {
+        var hyp = config.item.optString("hypervisor", "auto");
+        var hypervisor = VMHypervisor.valueOf(hyp.toUpperCase());
         hypervisor = VMHypervisor.resolveConfigured(VMBackend.CROSVM, hypervisor);
+        return hypervisor == VMHypervisor.GUNYAH;
+    }
+
     private void buildGpuCommand(@NonNull List<String> args) {
         var item = config.item;
         var useGpu = item.optBoolean("gpu_enabled", false);
@@ -613,6 +623,11 @@ private void buildGpuCommand(@NonNull List<String> args) {
                 case ANGLE:
                     gpuArg.append(",angle=true");
                     break;
+                // gunyah-pvm pins the RingBlob backing so the permanent Gunyah SHARE mapping
+                // stays stable. Only meaningful under the Gunyah hypervisor; other SoCs skip it.
+                if (isGunyahHypervisor()) {
+                    gpuArg.append(",gunyah-pvm=true");
+                }
             }
             args.add("--gpu");
             args.add(gpuArg.toString());
@@ -640,14 +655,8 @@ private void buildGpuCommand(@NonNull List<String> args) {
     private void buildNativeDisplayCommand(@NonNull List<String> args) {
         var item = config.item;
         var serviceName = NativeDisplay.serviceName(config);
-        var width = item.optLong("display_width", 1280);
-        var height = item.optLong("display_height", 720);
-        // multi-touch ABS range must equal the guest resolution so view coords scale straight onto
-        // ABS_X/ABS_Y (see EvdevEncoder / TouchScaleCalculator).
         args.add("--input");
         args.add(fmt(
-            "multi-touch[path=%s,width=%d,height=%d]",
-            NativeDisplay.inputSocketPath(serviceName, NativeDisplay.MULTITOUCH), width, height
         ));
     private void buildInputDevicesCommand(@NonNull List<String> args) {
         // Relative-pointer mouse (REL_X/Y + buttons + wheel) for InputMode.MOUSE; the guest renders
@@ -667,10 +676,8 @@ private void buildInputDevicesCommand(@NonNull List<String> args) {
     /** True iff the per-VM crosvm command will reference native-display input sockets. */
     private boolean isNativeDisplayEnabled() {
         var item = config.item;
-        if (!item.optBoolean("gpu_enabled", false)) return false;
         if (!item.optBoolean("display_enabled", false)) return false;
         var backend = optEnum(item, "display_backend", DisplayBackend.NONE);
-        if (backend != DisplayBackend.VIRTIO_GPU) return false;
         return item.optBoolean("native_display_enabled", false);
     }
 
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/diag/LogHelper.java b/app/src/main/java/cn/classfun/droidvm/lib/diag/LogHelper.java
index e0bf52f89..aa9196459 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/diag/LogHelper.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/diag/LogHelper.java
@@ -65,6 +65,10 @@ public void onDaemonEvent(@NonNull JSONObject msg) {
         var event = data.optString("event");
         if (event.equals("exited")) {
             vmLogContexts.remove(vmId);
+            // Dropping the context re-arms every once-handler for this vmId's next boot, so
+            // whatever they accumulated under it has to go at the same moment or the next boot
+            // inherits it -- the handlers are singletons, only their state is per VM.
+            for (var handler : handlers) handler.onLogContextReset(vmId);
             return;
         }
         var logs = vmLogContexts.computeIfAbsent(vmId, k -> new LogContext(vmId));
@@ -76,6 +80,9 @@ public void onDaemonEvent(@NonNull JSONObject msg) {
         buff.adds(text.getBytes(StandardCharsets.UTF_8));
         var full = new String(buff.peekAll(), StandardCharsets.UTF_8);
         for (var handler : handlers) {
+            // Before the disabled check, so a handler that reports what the log said keeps
+            // reading it after it has fired; match() below may rely on having been fed first.
+            handler.observe(vmId, stream, full);
             if (logs.disabled.contains(handler)) continue;
             if (!handler.match(vmId, stream, full)) continue;
             Runnable show = () -> vmEventHandler.queueActivityTask(act -> handler.show(act, vmId, vmName));
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/diag/LogHelperHandler.java b/app/src/main/java/cn/classfun/droidvm/lib/diag/LogHelperHandler.java
index 96f95ace6..ab5cb1ab1 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/diag/LogHelperHandler.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/diag/LogHelperHandler.java
@@ -9,8 +9,11 @@
 import android.content.DialogInterface.OnClickListener;
 import android.content.Intent;
 import android.net.Uri;
+import android.text.util.Linkify;
+import android.widget.TextView;
 
 import androidx.annotation.NonNull;
+import androidx.annotation.Nullable;
 import androidx.annotation.StringRes;
 
 import com.google.android.material.dialog.MaterialAlertDialogBuilder;
@@ -27,6 +30,28 @@ public boolean match(@NonNull UUID vmId, @NonNull String stream, @NonNull String
         return false;
     }
 
+    /**
+     * Every line, before {@link #match} and whether or not this handler has already fired.
+     *
+     * <p>For a handler that has to report what the log said rather than only that it said it:
+     * {@link #isOnce} takes the handler out of the match loop the moment it first matches, so
+     * match() cannot be where anything is gathered -- the lines that arrive during the show delay,
+     * and every line after it, would never be looked at.</p>
+     */
+    public void observe(@NonNull UUID vmId, @NonNull String stream, @NonNull String text) {
+    }
+
+    /**
+     * Called when [vmId]'s log context is dropped, which is when that VM exits.
+     *
+     * <p>Handler instances are process-wide singletons shared by every VM, so anything a handler
+     * accumulates is keyed by vmId and has to be forgotten here: the context takes the
+     * already-fired mark with it, so the next boot of the same VM re-arms this handler and must
+     * not inherit the last boot's findings.</p>
+     */
+    public void onLogContextReset(@NonNull UUID vmId) {
+    }
+
     public boolean isOnce() {
         return true;
     }
@@ -51,14 +76,54 @@ protected static void showDialog(
         @StringRes int titleId,
         @StringRes int messageId,
         Object... args
+    ) {
+        showDialog(ctx, urlId, titleId, ctx.getString(messageId, args), 0, null);
+    }
+
+    /**
+     * The same dialog with the message already built, and one extra action beside OK and the wiki
+     * link. A message that lists what the VM actually did is not one format string, which is why
+     * this takes the text rather than a resource id.
+     *
+     * <p>MaterialAlertDialog's three slots are all spoken for here: positive is OK, neutral is the
+     * wiki URL as everywhere else, so [actionId] takes negative. Pass 0 for no extra action.</p>
+     *
+     * <p>URLs left in the text are made tappable here because nothing else does it: the body is
+     * {@code @android:id/message} styled {@code materialAlertDialogBodyTextStyle}, and material
+     * 1.14.0 sets {@code autoLink} nowhere in the whole AAR, while AppCompat 1.7.0's
+     * AlertController only calls {@code setText} on it -- neither {@code setMovementMethod} nor
+     * {@code Linkify} appears in its bytecode. {@code Linkify.addLinks(TextView, int)} installs
+     * the movement method itself once it has a span to install it for.</p>
+     */
+    protected static void showDialog(
+        @NonNull Context ctx,
+        @StringRes int urlId,
+        @StringRes int titleId,
+        @NonNull CharSequence message,
+        @StringRes int actionId,
+        @Nullable OnClickListener action
     ) {
         var mab = new MaterialAlertDialogBuilder(ctx);
         mab.setTitle(titleId);
-        mab.setMessage(ctx.getString(messageId, args));
+        mab.setMessage(message);
         mab.setPositiveButton(android.R.string.ok, null);
+        if (actionId != 0) mab.setNegativeButton(actionId, action);
         var url = ctx.getString(urlId);
         OnClickListener cb = (d, w) -> ctx.startActivity(new Intent(ACTION_VIEW, Uri.parse(url)));
         if (!url.isEmpty()) mab.setNeutralButton(R.string.log_helper_open_url, cb);
-        mab.show();
+        var dialog = mab.show();
+        TextView body = dialog.findViewById(android.R.id.message);
+        if (body == null) return;
+        // A message built from HTML anchors already carries its URLSpans, and Linkify would strip
+        // them while hunting for raw URLs -- so anchors get the movement method only, and plain
+        // text keeps the old raw-URL pass.
+        boolean hasAnchors = message instanceof android.text.Spanned
+            && ((android.text.Spanned) message)
+                .getSpans(0, message.length(), android.text.style.URLSpan.class).length > 0;
+        if (hasAnchors) {
+            body.setMovementMethod(android.text.method.LinkMovementMethod.getInstance());
+        } else {
+            Linkify.addLinks(body, Linkify.WEB_URLS);
+        }
     }
 }
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/diag/handler/OsKernelWithoutRestrictPoolHandler.java b/app/src/main/java/cn/classfun/droidvm/lib/diag/handler/OsKernelWithoutRestrictPoolHandler.java
index 2dc9b2bda..0f8655d65 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/diag/handler/OsKernelWithoutRestrictPoolHandler.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/diag/handler/OsKernelWithoutRestrictPoolHandler.java
@@ -3,30 +3,126 @@
 // Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.lib.diag.handler;
 
+import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
+
 import android.content.Context;
+import android.content.Intent;
 
 import androidx.annotation.NonNull;
 
+import java.util.ArrayList;
+import java.util.Collections;
+import java.util.LinkedHashSet;
+import java.util.List;
+import java.util.Map;
+import java.util.Set;
 import java.util.UUID;
+import java.util.concurrent.ConcurrentHashMap;
+import java.util.regex.Pattern;
 
 import cn.classfun.droidvm.R;
 import cn.classfun.droidvm.lib.diag.LogHelperHandler;
+import cn.classfun.droidvm.ui.vm.console.VMConsoleActivity;
 
+/**
+ * A device could not reach memory the guest lent to the host in a protected VM.
+ *
+ * <p>Two different faults print this same line, which is why the dialog names both: the guest
+ * kernel may have no restricted DMA pool to put the device's buffers in, or the guest driver for
+ * that particular device may not be one of the ported ones and so never allocated from the pool it
+ * does have. The device names are the only thing in the log that separates "the whole VM has no
+ * pool" from "this one driver is wrong", so they are listed rather than summarised away.</p>
+ */
 public final class OsKernelWithoutRestrictPoolHandler extends LogHelperHandler {
+    /**
+     * What the log page is prefiltered with -- the marker without the address, since the address
+     * differs per line. {@link #MARKER} is the same text plus the start of the address, which is
+     * what makes a line one of these rather than a mention of the words.
+     */
+    private static final String FILTER = "host access to lent memory region at";
+    private static final String MARKER = fmt("%s 0x", FILTER);
+    /**
+     * The failing device, which crosvm puts before " activate failed" on the same line:
+     * {@code ... virtio_pci_device] pcivu-sound activate failed: failed to get host address: host
+     * access to lent memory region at 0x105600000 (purpose=GuestMemoryRegion) in protected VM}
+     */
+    private static final Pattern DEVICE = Pattern.compile("(\\S+) activate failed");
+    private static final String BULLET = "\u2022 ";  // U+2022, escaped to keep this file ASCII
+    private static final String STREAM = "stderr";
+
+    /**
+     * Distinct device names per VM, in the order the log named them. Keyed by vmId because one
+     * instance serves every VM, and emptied by {@link #onLogContextReset}.
+     */
+    private final Map<UUID, Set<String>> devices = new ConcurrentHashMap<>();
+
+    @Override
+    public void observe(@NonNull UUID vmId, @NonNull String stream, @NonNull String text) {
+        if (!stream.equals(STREAM) || !text.contains(MARKER)) return;
+        var found = devices.computeIfAbsent(
+            vmId, k -> Collections.synchronizedSet(new LinkedHashSet<>()));
+        for (var line : text.split("\n")) {
+            if (!line.contains(MARKER)) continue;
+            var m = DEVICE.matcher(line);
+            // A matching line that does not name a device goes in as it came: dropping it would
+            // report fewer devices than the log shows, which is the one thing this list is for.
+            found.add(m.find() ? m.group(1) : line.trim());
+        }
+    }
+
     @Override
     public boolean match(@NonNull UUID vmId, @NonNull String stream, @NonNull String text) {
-        return
-            stream.equals("stderr") &&
-            text.contains("host access to lent memory region at 0x");
+        // observe() has already read this same text; a non-empty list is exactly "a line with the
+        // marker was seen", so the buffer is not scanned a second time.
+        return stream.equals(STREAM) && !namesOf(vmId).isEmpty();
+    }
+
+    @Override
+    public void onLogContextReset(@NonNull UUID vmId) {
+        devices.remove(vmId);
     }
 
     @Override
     public void show(@NonNull Context ctx, @NonNull UUID vmId, @NonNull String vmName) {
+        var sb = new android.text.SpannableStringBuilder();
+        sb.append(ctx.getString(R.string.log_helper_no_restrict_pool_devices, vmName));
+        for (var device : namesOf(vmId)) sb.append('\n').append(BULLET).append(device);
+        sb.append("\n\n");
+        // The body carries its links as anchors with human labels, so it is HTML in the resource
+        // and spans here; a raw URL would be linkified downstream, but an <a> tag would not.
+        sb.append(android.text.Html.fromHtml(
+            ctx.getString(R.string.log_helper_no_restrict_pool_message),
+            android.text.Html.FROM_HTML_MODE_LEGACY));
         showDialog(ctx,
             R.string.log_helper_no_restrict_pool_url,
             R.string.log_helper_no_restrict_pool_title,
-            R.string.log_helper_no_restrict_pool_message,
-            vmName
+            sb,
+            R.string.log_helper_open_log,
+            (d, w) -> openLog(ctx, vmId, vmName)
         );
     }
+
+    /** A snapshot: observe() runs on the daemon's event thread and show() on the main one. */
+    @NonNull
+    private List<String> namesOf(@NonNull UUID vmId) {
+        var found = devices.get(vmId);
+        if (found == null) return List.of();
+        synchronized (found) {
+            return new ArrayList<>(found);
+        }
+    }
+
+    /**
+     * The log page, on stderr, prefiltered to the lines the list above was read from -- the point
+     * of opening it here is to see those lines, not to land in the whole boot log.
+     */
+    private static void openLog(@NonNull Context ctx, @NonNull UUID vmId, @NonNull String vmName) {
+        var intent = new Intent(ctx, VMConsoleActivity.class);
+        intent.putExtra(VMConsoleActivity.EXTRA_VM_ID, vmId.toString());
+        intent.putExtra(VMConsoleActivity.EXTRA_VM_NAME, vmName);
+        intent.putExtra(VMConsoleActivity.EXTRA_STREAM, STREAM);
+        intent.putExtra(VMConsoleActivity.EXTRA_LOGS, true);
+        intent.putExtra(VMConsoleActivity.EXTRA_FILTER, FILTER);
+        ctx.startActivity(intent);
+    }
 }
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/ui/AdaptiveTabLayout.java b/app/src/main/java/cn/classfun/droidvm/lib/ui/AdaptiveTabLayout.java
new file mode 100644
index 000000000..324fc741b
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/lib/ui/AdaptiveTabLayout.java
@@ -0,0 +1,91 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
+package cn.classfun.droidvm.lib.ui;
+
+import android.content.Context;
+import android.util.AttributeSet;
+import android.view.View;
+import android.view.ViewGroup;
+
+import androidx.annotation.NonNull;
+import androidx.annotation.Nullable;
+
+import com.google.android.material.tabs.TabLayout;
+
+/**
+ * A tab bar that spreads its tabs evenly across the full width while they fit, and falls back
+ * to natural-width scrollable tabs when they do not.
+ *
+ * <p>Material offers either behaviour but never both: {@code MODE_FIXED} always fills and never
+ * scrolls, so long labels get squeezed, while {@code MODE_AUTO} equalises the tabs to the widest
+ * one and centres them, leaving the rest of the bar empty. This picks between the two on every
+ * measure pass instead.
+ *
+ * <p>Set {@code app:tabMinWidth} in the layout: Material's own default is 72dp on phones but
+ * 160dp under {@code sw600dp}, which is wide enough to push a handful of short tabs off a tablet
+ * screen.
+ */
+public final class AdaptiveTabLayout extends TabLayout {
+
+    public AdaptiveTabLayout(@NonNull Context context) {
+        super(context);
+    }
+
+    public AdaptiveTabLayout(@NonNull Context context, @Nullable AttributeSet attrs) {
+        super(context, attrs);
+    }
+
+    public AdaptiveTabLayout(
+        @NonNull Context context,
+        @Nullable AttributeSet attrs,
+        int defStyleAttr
+    ) {
+        super(context, attrs, defStyleAttr);
+    }
+
+    @Override
+    protected void onMeasure(int widthMeasureSpec, int heightMeasureSpec) {
+        if (MeasureSpec.getMode(widthMeasureSpec) != MeasureSpec.UNSPECIFIED) {
+            int available =
+                MeasureSpec.getSize(widthMeasureSpec) - getPaddingLeft() - getPaddingRight();
+            int widest = widestTabWidth();
+            // Filling gives every tab the same width, so the widest label is what decides
+            // whether spreading them out would squeeze anything.
+            if (widest > 0 && available > 0)
+                setSpreadTabs(widest * getTabCount() <= available);
+        }
+        super.onMeasure(widthMeasureSpec, heightMeasureSpec);
+    }
+
+    /**
+     * Width of the widest tab at its natural size. Measured with an unspecified spec, so the
+     * answer does not depend on the mode currently in effect and the choice cannot oscillate.
+     */
+    private int widestTabWidth() {
+        View strip = getChildCount() > 0 ? getChildAt(0) : null;
+        if (!(strip instanceof ViewGroup)) return 0;
+        var tabs = (ViewGroup) strip;
+        int unspecified = MeasureSpec.makeMeasureSpec(0, MeasureSpec.UNSPECIFIED);
+        int widest = 0;
+        for (int i = 0; i < tabs.getChildCount(); i++) {
+            View tab = tabs.getChildAt(i);
+            if (tab.getVisibility() == GONE) continue;
+            tab.measure(unspecified, unspecified);
+            widest = Math.max(widest, tab.getMeasuredWidth());
+        }
+        return widest;
+    }
+
+    private void setSpreadTabs(boolean spread) {
+        int mode = spread ? MODE_FIXED : MODE_SCROLLABLE;
+        int gravity = spread ? GRAVITY_FILL : GRAVITY_START;
+        if (getTabMode() == mode && getTabGravity() == gravity) return;
+        // Material rejects MODE_SCROLLABLE + GRAVITY_FILL and MODE_FIXED + GRAVITY_START with a
+        // warning, and both setters apply the pair immediately. GRAVITY_CENTER is valid with
+        // either mode, so step through it to keep every intermediate state a supported one.
+        setTabGravity(GRAVITY_CENTER);
+        setTabMode(mode);
+        setTabGravity(gravity);
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/ui/TabSwipeHelper.java b/app/src/main/java/cn/classfun/droidvm/lib/ui/TabSwipeHelper.java
index 48ef75cd5..878699035 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/ui/TabSwipeHelper.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/ui/TabSwipeHelper.java
@@ -8,6 +8,7 @@
 import android.view.VelocityTracker;
 import android.view.View;
 import android.view.ViewConfiguration;
+import android.view.ViewGroup;
 
 import androidx.annotation.NonNull;
 import androidx.annotation.Nullable;
@@ -44,6 +45,7 @@ public interface TouchDispatcher {
     private float touchStartX, touchStartY;
     private boolean isDragging = false;
     private boolean touchDecided = false;
+    private boolean gestureDeclined = false;
     private boolean settling = false;
     private View dragPrevView, dragCurrentView, dragNextView;
     private Runnable animationEndCallback;
@@ -66,6 +68,8 @@ private boolean onMotionEventDown(
         touchStartY = ev.getY();
         isDragging = false;
         touchDecided = false;
+        gestureDeclined = touchesHorizontalScroller(
+            activity.getWindow().getDecorView(), ev.getRawX(), ev.getRawY());
         if (velocityTracker == null) velocityTracker = VelocityTracker.obtain();
         else velocityTracker.clear();
         velocityTracker.addMovement(ev);
@@ -76,6 +80,7 @@ private boolean onMotionEventMove(
         @NonNull MotionEvent ev,
         @NonNull TouchDispatcher superDispatch
     ) {
+        if (gestureDeclined) return false;
         if (velocityTracker != null)
             velocityTracker.addMovement(ev);
         if (!touchDecided) {
@@ -162,6 +167,25 @@ public boolean onDispatchTouchEvent(
         return false;
     }
 
+    /**
+     * True if the point is over a view that scrolls horizontally on its own, e.g. an
+     * overflowing tab bar. Those gestures belong to that view, not to tab switching.
+     */
+    private static boolean touchesHorizontalScroller(@NonNull View v, float rawX, float rawY) {
+        if (v.getVisibility() != View.VISIBLE) return false;
+        int[] loc = new int[2];
+        v.getLocationOnScreen(loc);
+        if (rawX < loc[0] || rawX >= loc[0] + v.getWidth() ||
+            rawY < loc[1] || rawY >= loc[1] + v.getHeight()) return false;
+        if (v.canScrollHorizontally(1) || v.canScrollHorizontally(-1)) return true;
+        if (v instanceof ViewGroup) {
+            var group = (ViewGroup) v;
+            for (int i = 0; i < group.getChildCount(); i++)
+                if (touchesHorizontalScroller(group.getChildAt(i), rawX, rawY)) return true;
+        }
+        return false;
+    }
+
     private int getWidth() {
         return activity.getWindow().getDecorView().getWidth();
     }
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/console/VMConsoleActivity.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/console/VMConsoleActivity.java
index d339e6b82..5f8cf03cf 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/console/VMConsoleActivity.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/console/VMConsoleActivity.java
@@ -12,6 +12,7 @@
 import static cn.classfun.droidvm.lib.utils.ProcessUtils.shellKillProcess;
 import static cn.classfun.droidvm.lib.utils.RunUtils.escapedString;
 import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
+import static cn.classfun.droidvm.lib.utils.StringUtils.getEditText;
 import static cn.classfun.droidvm.lib.utils.ThreadUtils.runOnPool;
 
 import android.content.res.ColorStateList;
@@ -32,6 +33,8 @@
 import androidx.appcompat.app.AppCompatActivity;
 
 import com.google.android.material.appbar.MaterialToolbar;
+import com.google.android.material.dialog.MaterialAlertDialogBuilder;
+import com.google.android.material.textfield.TextInputEditText;
 import com.termux.terminal.TerminalSession;
 import com.termux.terminal.TerminalSessionClient;
 
@@ -54,14 +57,21 @@ public final class VMConsoleActivity extends AppCompatActivity {
     public static final String EXTRA_VM_NAME = "vm_name";
     public static final String EXTRA_STREAM = "stream";
     public static final String EXTRA_LOGS = "logs";
+    /** Initial value of the filter; empty or absent opens the page unfiltered. */
+    public static final String EXTRA_FILTER = "filter";
     // Every backend registers stdio; "uart" only exists on the QEMU backend these days, and
     // the crosvm serial streams are named per port (serialN/sbsaN/vconN) so none is a safe
     // universal fallback.
     private static final String DEFAULT_STREAM = "stdio";
     private final Handler mainHandler = new Handler(Looper.getMainLooper());
     private ActivityResultLauncher<String> saveLogLauncher;
+    private MaterialToolbar toolbar;
     private TerminalPanelView terminalPanel;
     private TerminalSession terminalSession;
+    /** True for the history dump, false for the live console. Decides the command either way. */
+    private boolean logsMode = false;
+    /** The text every shown line must contain; empty is no filter. Never null. */
+    private String filter = "";
     public String vmId;
     public String vmName;
     public String streamName;
@@ -85,50 +95,120 @@ protected void onCreate(Bundle savedInstanceState) {
         vmId = intent.getStringExtra(EXTRA_VM_ID);
         vmName = intent.getStringExtra(EXTRA_VM_NAME);
         streamName = intent.getStringExtra(EXTRA_STREAM);
-        var logs = intent.getBooleanExtra(EXTRA_LOGS, false);
+        logsMode = intent.getBooleanExtra(EXTRA_LOGS, false);
+        filter = intent.getStringExtra(EXTRA_FILTER);
         if (vmId == null) vmId = "";
         if (vmName == null) vmName = "";
+        if (filter == null) filter = "";
         if (streamName == null || streamName.isEmpty()) streamName = DEFAULT_STREAM;
-        MaterialToolbar toolbar = findViewById(R.id.toolbar);
-        toolbar.setTitle(fmt("%s - %s", vmName, streamName));
+        toolbar = findViewById(R.id.toolbar);
+        updateTitle();
         toolbar.setNavigationOnClickListener(v -> finish());
         var item = setupToolbarMenu(toolbar, R.menu.menu_vm_console, this::onMenuItemClicked);
         item.setIconTintList(ColorStateList.valueOf(Color.WHITE));
         item.setIconTintMode(PorterDuff.Mode.SRC_IN);
-        var consoleBin = getAssetBinaryPath("droidvm");
-        var shell = findExecute("su", "/system/bin/su");
-        var cwd = getFilesDir().getAbsolutePath();
-        var cmd = fmt(
-            logs ? "%s logs %s %s; sleep 2" : "exec %s console --raw %s %s",
-            escapedString(consoleBin),
         terminalPanel = findViewById(R.id.terminal_panel);
         terminalPanel.setInteractive(true);
+        startSession();
+    }
+
+    /**
+     * The shell line the terminal runs, for the current mode and filter.
+     *
+     * <p>Filtering is a pipe because the page has nothing else to filter: what is on screen is a
+     * pty a subprocess writes to, not a buffer this activity holds. {@code grep -F} is toybox's,
+     * and {@code --} keeps a filter that starts with a dash from being read as an option.</p>
+     *
+     * <p>No {@code --line-buffered} on the live path. toybox 0.8.12-android does accept the
+     * option, but its grep already flushes each matching line as it produces it -- measured on
+     * device, a matching line was in a redirected file two seconds into a producer that had not
+     * exited, with and without the option -- so it would buy nothing here while breaking the page
+     * outright on any toybox whose grep lacks it, since an unknown long option is exit 2 rather
+     * than a warning.</p>
+     */
+    @NonNull
+    private String buildCommand() {
+        var base = fmt(
+            logsMode ? "%s logs %s %s" : "%s console --raw %s %s",
+            escapedString(getAssetBinaryPath("droidvm")),
             escapedString(vmId),
             escapedString(streamName)
         );
-        var args = new String[]{"su", "-c", cmd};
+        if (!filter.isEmpty())
+            base = fmt("%s | grep -F -- %s", base, escapedString(filter));
+        // The dump's `sleep 2` keeps the last lines on screen after the command ends. The live
+        // path replaces the shell instead, which it can only do while there is no pipeline for
+        // the shell to wait on.
+        if (logsMode) return fmt("%s; sleep 2", base);
+        return filter.isEmpty() ? fmt("exec %s", base) : base;
+    }
+
+    private void startSession() {
+        stopSession();
+        var shell = findExecute("su", "/system/bin/su");
+        var cwd = getFilesDir().getAbsolutePath();
+        var args = new String[]{"su", "-c", buildCommand()};
         var env = new String[]{
             "TERM=xterm-256color",
             "PATH=/system/bin",
             fmt("HOME=%s", cwd),
         };
-        currentFontSize = loadFontSize();
-        var density = getResources().getDisplayMetrics().density;
         var session = new TerminalSession(shell, cwd, args, env, null, sessionClient);
         terminalSession = session;
-        terminalView.setTextSize((int) (currentFontSize * density));
-        TerminalFonts.apply(terminalView);
-        terminalView.setFocusable(true);
-        terminalView.setFocusableInTouchMode(true);
-        terminalView.requestFocus();
-        setupExtraKeys();
         terminalPanel.attachSession(session);
+    }
+
+    private void stopSession() {
+        if (terminalSession == null) return;
+        try {
+            if (terminalSession.isRunning())
+                shellKillProcess(terminalSession.getPid(), SIGHUP);
+        } catch (Exception ignored) {
+        }
+        terminalSession.finishIfRunning();
         terminalPanel.clearSession(terminalSession);
+        terminalSession = null;
+    }
+
+    private void updateTitle() {
+        toolbar.setTitle(filter.isEmpty()
+            ? fmt("%s - %s", vmName, streamName)
+            : getString(R.string.logs_title_filtered, vmName, streamName, filter));
+    }
+
+    /**
+     * Applies a new filter, which means running the command again -- for the dump that re-reads
+     * the same history, for the live console it is a reconnect and the backlog it had on screen
+     * is not read again.
+     */
+    private void applyFilter(@NonNull String value) {
+        if (value.equals(filter)) return;
+        filter = value;
+        updateTitle();
+        startSession();
+    }
+
+    private void showFilterDialog() {
+        var view = getLayoutInflater().inflate(R.layout.dialog_console_filter, null);
+        TextInputEditText etFilter = view.findViewById(R.id.et_console_filter);
+        etFilter.setText(filter);
+        etFilter.setSelection(filter.length());
+        new MaterialAlertDialogBuilder(this)
+            .setTitle(R.string.logs_filter_title)
+            .setMessage(R.string.logs_filter_message)
+            .setView(view)
+            .setPositiveButton(android.R.string.ok, (d, w) -> applyFilter(getEditText(etFilter)))
+            .setNegativeButton(android.R.string.cancel, null)
+            .setNeutralButton(R.string.logs_filter_show_all, (d, w) -> applyFilter(""))
+            .show();
     }
 
     private boolean onMenuItemClicked(@NonNull MenuItem item) {
         int id = item.getItemId();
-        if (id == R.id.action_save_log) {
+        if (id == R.id.action_filter) {
+            showFilterDialog();
+            return true;
+        } else if (id == R.id.action_save_log) {
             saveLogToFile();
             return true;
         } else if (id == R.id.action_share_log) {
@@ -144,14 +224,7 @@ private boolean onMenuItemClicked(@NonNull MenuItem item) {
     @Override
     protected void onDestroy() {
         super.onDestroy();
-        if (terminalSession != null) try {
-            if (terminalSession.isRunning())
-                shellKillProcess(terminalSession.getPid(), SIGHUP);
-        } catch (Exception ignored) {
-        }
-        terminalSession = null;
-    }
-
+        stopSession();
     }
 
     private void saveLogToFile() {
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/base/VMEditBaseTab.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/base/VMEditBaseTab.java
index 90b1f82d3..0e9726302 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/base/VMEditBaseTab.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/base/VMEditBaseTab.java
@@ -41,6 +41,12 @@ protected final boolean showValidateFailed(@NonNull CharSequence message) {
         return false;
     }
 
+    /** Says something the user needs to know now, without failing anything -- e.g. that the
+     * option they just turned on depends on one in another tab. */
+    protected final void showHint(@NonNull CharSequence message) {
+        Snackbar.make(parent, view, message, Snackbar.LENGTH_LONG).show();
+    }
+
     public abstract void loadConfig(@NonNull VMConfig config);
 
     public abstract boolean validateInput(@NonNull VMStore store);
diff --git a/app/src/main/res/drawable/ic_filter.xml b/app/src/main/res/drawable/ic_filter.xml
new file mode 100644
index 000000000..b24f2fd19
--- /dev/null
+++ b/app/src/main/res/drawable/ic_filter.xml
@@ -0,0 +1,9 @@
+<vector xmlns:android="http://schemas.android.com/apk/res/android"
+    android:width="24dp"
+    android:height="24dp"
+    android:viewportWidth="24"
+    android:viewportHeight="24">
+    <path
+        android:fillColor="?attr/colorOnSurface"
+        android:pathData="M10,18h4v-2h-4v2zM3,6v2h18V6H3zM6,13h12v-2H6v2z" />
+</vector>
diff --git a/app/src/main/res/layout/activity_disk_info.xml b/app/src/main/res/layout/activity_disk_info.xml
index a8091da80..1c735db5a 100644
--- a/app/src/main/res/layout/activity_disk_info.xml
+++ b/app/src/main/res/layout/activity_disk_info.xml
@@ -28,11 +28,11 @@
 
         </com.google.android.material.appbar.CollapsingToolbarLayout>
 
-        <com.google.android.material.tabs.TabLayout
+        <cn.classfun.droidvm.lib.ui.AdaptiveTabLayout
             android:id="@+id/tab_layout"
             android:layout_width="match_parent"
             android:layout_height="wrap_content"
-            app:tabMode="fixed"
+            app:tabMinWidth="72dp"
             tools:ignore="SpeakableTextPresentCheck" />
 
     </com.google.android.material.appbar.AppBarLayout>
diff --git a/app/src/main/res/layout/activity_network_info.xml b/app/src/main/res/layout/activity_network_info.xml
index 31f00f0d8..7fa794e14 100644
--- a/app/src/main/res/layout/activity_network_info.xml
+++ b/app/src/main/res/layout/activity_network_info.xml
@@ -28,11 +28,11 @@
 
         </com.google.android.material.appbar.CollapsingToolbarLayout>
 
-        <com.google.android.material.tabs.TabLayout
+        <cn.classfun.droidvm.lib.ui.AdaptiveTabLayout
             android:id="@+id/tab_layout"
             android:layout_width="match_parent"
             android:layout_height="wrap_content"
-            app:tabMode="scrollable"
+            app:tabMinWidth="72dp"
             tools:ignore="SpeakableTextPresentCheck" />
 
     </com.google.android.material.appbar.AppBarLayout>
diff --git a/app/src/main/res/layout/activity_vm_edit.xml b/app/src/main/res/layout/activity_vm_edit.xml
index ea3669010..e44997a8d 100644
--- a/app/src/main/res/layout/activity_vm_edit.xml
+++ b/app/src/main/res/layout/activity_vm_edit.xml
@@ -30,12 +30,11 @@
 
         </com.google.android.material.appbar.CollapsingToolbarLayout>
 
-        <com.google.android.material.tabs.TabLayout
+        <cn.classfun.droidvm.lib.ui.AdaptiveTabLayout
             android:id="@+id/tab_layout"
             android:layout_width="match_parent"
             android:layout_height="wrap_content"
-            app:tabGravity="start"
-            app:tabMode="scrollable"
+            app:tabMinWidth="72dp"
             tools:ignore="SpeakableTextPresentCheck" />
 
     </com.google.android.material.appbar.AppBarLayout>
diff --git a/app/src/main/res/layout/dialog_console_filter.xml b/app/src/main/res/layout/dialog_console_filter.xml
new file mode 100644
index 000000000..3d73b5fbd
--- /dev/null
+++ b/app/src/main/res/layout/dialog_console_filter.xml
@@ -0,0 +1,29 @@
+<?xml version="1.0" encoding="utf-8"?>
+<LinearLayout xmlns:android="http://schemas.android.com/apk/res/android"
+    xmlns:tools="http://schemas.android.com/tools"
+    android:layout_width="match_parent"
+    android:layout_height="wrap_content"
+    android:orientation="vertical"
+    android:paddingStart="24dp"
+    android:paddingTop="16dp"
+    android:paddingEnd="24dp"
+    android:paddingBottom="8dp">
+
+    <com.google.android.material.textfield.TextInputLayout
+        android:id="@+id/til_console_filter"
+        style="@style/Widget.Material3.TextInputLayout.OutlinedBox"
+        android:layout_width="match_parent"
+        android:layout_height="wrap_content"
+        android:hint="@string/logs_filter_hint">
+
+        <com.google.android.material.textfield.TextInputEditText
+            android:id="@+id/et_console_filter"
+            android:layout_width="match_parent"
+            android:layout_height="wrap_content"
+            android:inputType="text"
+            android:maxLines="1"
+            tools:ignore="VisualLintTextFieldSize,TextContrastCheck" />
+
+    </com.google.android.material.textfield.TextInputLayout>
+
+</LinearLayout>
diff --git a/app/src/main/res/layout/partial_vm_edit_basic.xml b/app/src/main/res/layout/partial_vm_edit_basic.xml
index 44a4509c2..4318e8cd9 100644
--- a/app/src/main/res/layout/partial_vm_edit_basic.xml
+++ b/app/src/main/res/layout/partial_vm_edit_basic.xml
@@ -1,6 +1,7 @@
 <?xml version="1.0" encoding="utf-8"?>
 <LinearLayout xmlns:android="http://schemas.android.com/apk/res/android"
     xmlns:app="http://schemas.android.com/apk/res-auto"
+    xmlns:tools="http://schemas.android.com/tools"
     android:layout_width="match_parent"
     android:layout_height="wrap_content"
     android:orientation="vertical">
diff --git a/app/src/main/res/menu/menu_vm_console.xml b/app/src/main/res/menu/menu_vm_console.xml
index ef64a89d2..c27e5f385 100644
--- a/app/src/main/res/menu/menu_vm_console.xml
+++ b/app/src/main/res/menu/menu_vm_console.xml
@@ -1,6 +1,11 @@
 <?xml version="1.0" encoding="utf-8"?>
 <menu xmlns:android="http://schemas.android.com/apk/res/android">
 
+    <item
+        android:id="@+id/action_filter"
+        android:icon="@drawable/ic_filter"
+        android:title="@string/logs_filter" />
+
     <item
         android:id="@+id/action_save_log"
         android:icon="@drawable/ic_floppy"

From 16b2fc6d2a791c0f4d4241a351b667e41750699a Mon Sep 17 00:00:00 2001
From: HuJK <gh@hujk.org>
Date: Sun, 30 Aug 2026 13:37:15 +0800
Subject: [PATCH 141/182] gpu: pre-share the gfxstream host arena before the
 guest boots

Host-visible memory that gfxstream hands the guest has to be reachable from
both sides, and on a protected VM that means a Gunyah SHARE. Doing it per
allocation puts a hypervisor call on the allocation path, and on the fragile
sm8650 RM a stream of them is what precedes a SoC reset.

--pre-alloc gfx-host-mb= claims the arena once, before the guest is started,
and every host-visible allocation is sub-allocated out of it with no runtime
SHARE at all. The size is a field in the graphics tab rather than a constant,
because how much a guest needs is a property of what it runs.
---
 .../daemon/vm/backend/CrosvmBackendInstance.java      | 11 +++++++++++
 1 file changed, 11 insertions(+)

diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/CrosvmBackendInstance.java b/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/CrosvmBackendInstance.java
index b176c688a..12bbeb2e5 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/CrosvmBackendInstance.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/CrosvmBackendInstance.java
@@ -275,6 +275,17 @@ private List<String> buildCommand() {
             case GUNYAH: {
                     && optEnum(item, "gpu_backend", GpuBackend.NONE) == GpuBackend.GPU_GFXSTREAM;
                 args.add("gunyah");
+                // Pre-allocate the gfxstream host-visible pools (host arena + optional guest-alloc
+                // pool). Only meaningful for gfxstream on Gunyah.
+                if (gfxstreamGpu) {
+                    boolean udmabuf = item.optBoolean("gpu_udmabuf", true);
+                    long hostPool = item.optLong("gpu_host_pool_mb", 0);
+                    if (hostPool > 0 || udmabuf) {
+                        var preAlloc = new StringBuilder(fmt("gfx-host-mb=%d", hostPool));
+                        args.add("--pre-alloc");
+                        args.add(preAlloc.toString());
+                    }
+                }
                 defProtectedMode = ProtectedVM.PROTECTED_WITHOUT_FIRMWARE;
                 break;
             }

From a314739e6baa383a3d2559216d00b0260346fdd4 Mon Sep 17 00:00:00 2001
From: HuJK <gh@hujk.org>
Date: Sun, 30 Aug 2026 13:37:16 +0800
Subject: [PATCH 142/182] gpu: a guest-allocated VRAM pool, and none where the
 host can already see the RAM

The other half of the same problem, from the other end. Instead of the host
owning a pool and lending it to the guest, the guest owns one and hands the
host dma-bufs out of it -- udmabuf=true is what gates
VIRTIO_GPU_F_CREATE_GUEST_HANDLE, and gpu-guest-mb declares the region. The
guest driver keeps one allocator, so the same pool serves whichever renderer
is configured.

It is only worth anything where the host cannot otherwise reach the guest's
memory. In an unprotected VM, or a pseudo-unprotected one whose window is
shared back before the payload runs, the pool is memory taken from the guest to
solve a problem that is not happening -- and virtio-gpu with no pool node to
find allocates from system RAM instead, which the host can read for the same
reason. The editor hides the field in those modes, and the backend zeroes the
stored size rather than trusting it, because a config that arrives through the
daemon API or that was saved before the mode was switched still carries one.

Co-authored-by: lateautumn233 <lateautumn233@foxmail.com>
---
 .../vm/backend/CrosvmBackendInstance.java     | 709 ++++++++++++++++--
 .../droidvm/lib/hugepage/PoolPreflight.java   |  21 +-
 .../droidvm/lib/store/vm/GuestPoolSizing.java |  58 ++
 .../lib/hugepage/PoolPreflightTest.java       |  76 ++
 4 files changed, 785 insertions(+), 79 deletions(-)
 create mode 100644 app/src/main/java/cn/classfun/droidvm/lib/store/vm/GuestPoolSizing.java
 create mode 100644 app/src/test/java/cn/classfun/droidvm/lib/hugepage/PoolPreflightTest.java

diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/CrosvmBackendInstance.java b/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/CrosvmBackendInstance.java
index 12bbeb2e5..1db01aea9 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/CrosvmBackendInstance.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/CrosvmBackendInstance.java
@@ -9,8 +9,6 @@
 import static cn.classfun.droidvm.lib.Constants.PATH_EDK2_FIRMWARE;
 import static cn.classfun.droidvm.lib.Constants.PATH_EDK2_VARS;
 import static cn.classfun.droidvm.lib.store.enums.Enums.optEnum;
-import static cn.classfun.droidvm.lib.store.vm.DisplayBackend.SIMPLEFB;
-import static cn.classfun.droidvm.lib.store.vm.DisplayBackend.VIRTIO_GPU;
 import static cn.classfun.droidvm.lib.store.vm.GpuApi.VULKAN;
 import static cn.classfun.droidvm.lib.utils.AssetUtils.getPrebuiltBinaryPath;
 import static cn.classfun.droidvm.lib.utils.FileUtils.deleteFile;
@@ -46,12 +44,17 @@
 import cn.classfun.droidvm.daemon.audio.HostAudioTable;
 import cn.classfun.droidvm.lib.data.HostAudioDevices;
 import cn.classfun.droidvm.lib.natives.NativeProcess;
+import cn.classfun.droidvm.lib.utils.RunUtils;
 import cn.classfun.droidvm.lib.store.base.DataItem;
 import cn.classfun.droidvm.lib.store.disk.DiskBus;
-import cn.classfun.droidvm.lib.store.vm.DisplayBackend;
 import cn.classfun.droidvm.lib.store.vm.CpuPlacementPlan;
+import cn.classfun.droidvm.lib.store.vm.DisplayExporter;
+import cn.classfun.droidvm.lib.store.vm.DisplayTransportCap;
 import cn.classfun.droidvm.lib.store.vm.GpuApi;
+import cn.classfun.droidvm.lib.store.vm.GpuMode;
+import cn.classfun.droidvm.lib.store.vm.GuestPoolSizing;
 import cn.classfun.droidvm.lib.store.vm.GpuBackend;
+import cn.classfun.droidvm.lib.store.vm.GpuBlitProvider;
 import cn.classfun.droidvm.lib.store.vm.LendMthpMode;
 import cn.classfun.droidvm.lib.store.vm.NativeDisplay;
 import cn.classfun.droidvm.lib.store.vm.PeripheralType;
@@ -66,6 +69,7 @@
 import cn.classfun.droidvm.lib.store.vm.VMConfig;
 import cn.classfun.droidvm.lib.store.vm.VMHypervisor;
 import cn.classfun.droidvm.lib.store.vm.VMPeripheralConfig;
+import cn.classfun.droidvm.lib.store.vm.VMScreenConfig;
 
 @SuppressWarnings("FieldCanBeLocal")
 public final class CrosvmBackendInstance extends VMBackendInstance {
@@ -148,11 +152,28 @@ public VMStartResult start() {
         // the VM is up - so the daemon is the only process that can both bind the socket before
         // crosvm starts and stay alive to feed it. We pre-bind + accept here; the UI forwards evdev
         // to us via the vm_input IPC command (see InputHandler). Server fds released on cleanup().
-            if (!inputBridge.startListening(NativeDisplay.serviceName(config))) {
         // Single source of truth: isInputBridgeNeeded() gates both this pre-bind and the --input
+        // args in buildCommand(), and touchscreenScreens()/nativeInputScreens() decide which
+        // screens get which per-screen device in both places, so the sockets and devices never
+        // diverge. The two lists differ: a VNC-exported screen's tablet and keyboard are crosvm's,
+        // not ours.
         if (isInputBridgeNeeded()) {
+            try {
+                if (!inputBridge.startListening(config.getId().toString(),
+                    touchscreenScreens(), nativeInputScreens())) {
                     Log.e(TAG, "Display input sockets unavailable; crosvm will likely fail");
                 }
+            } catch (IllegalArgumentException e) {
+                // A socket path too long for sun_path. crosvm would refuse the command line and
+                // our own bind() would truncate it in silence, so there is no half-working start
+                // to attempt: fail here, with the path and its length on the console the user is
+                // already looking at, the way a refused serial slot does.
+                Log.e(TAG, "Display input socket path refused", e);
+                stdioStream.appendBuffer(fmt("display input setup failed: %s\n", e.getMessage()));
+                inputBridge.release();
+                closeSerialPorts();
+                controlSocketPath = null;
+                return result;
             }
         }
         // Must happen before buildCommand(): crosvm opens <cgroup>/tasks and never
@@ -163,6 +184,9 @@ public VMStartResult start() {
         try {
             var builder = new NativeProcess.Builder(args.toArray(new String[0]));
             prepareProcess(builder);
+            applyGfxstreamEnv(builder);
+            applyDisplayBlitEnv(builder);
+            applyGpuRtPrioEnv(builder);
             for (var rs : resolvedSerials) {
                 if (rs.pipe != null) {
                     builder.preserveFd(rs.pipe.getOutputRemoteFd());
@@ -245,6 +269,29 @@ private void closeSerialPorts() {
         resolvedSerials.clear();
     }
 
+    /**
+     * Appends the guest-owned VRAM pool settings. Older configs only have the total pool size;
+     * their defaults keep the whole pool preallocated and leave dynamic grants disabled. The
+     * editor writes exactly those values (prealloc = pool, step 0, no grants) whenever its
+     * dynamic-vram switch is off over a guest pool, so a non-zero step here means the user
+     * asked for runtime growth. Only called under Gunyah.
+     */
+    private static void appendGuestPoolOptions(
+        @NonNull StringBuilder preAlloc,
+        @NonNull DataItem item,
+        long guestPool
+    ) {
+        if (guestPool <= 0) return;
+        long step = item.optLong("gpu_guest_step_mb", 0);
+        if (preAlloc.length() > 0) preAlloc.append(',');
+        preAlloc.append(fmt("gpu-guest-mb=%d", guestPool));
+        preAlloc.append(fmt(",gpu-guest-prealloc-mb=%d",
+            item.optLong("gpu_guest_prealloc_mb", guestPool)));
+        preAlloc.append(fmt(",gpu-guest-step-mb=%d", step));
+        preAlloc.append(fmt(",gpu-guest-max-grants=%d",
+            item.optLong("gpu_guest_max_grants", 0)));
+    }
+
     @NonNull
     private List<String> buildCommand() {
         var item = config.item;
@@ -273,8 +320,30 @@ private List<String> buildCommand() {
                 args.add("kvm");
                 break;
             case GUNYAH: {
+                boolean hasGpu = VMScreenConfig.hasGpuDevice(item);
+                boolean gfxstreamGpu = hasGpu
                     && optEnum(item, "gpu_backend", GpuBackend.NONE) == GpuBackend.GPU_GFXSTREAM;
+                boolean drm2kgslGpu = hasGpu
+                    && optEnum(item, "gpu_backend", GpuBackend.NONE) == GpuBackend.GPU_VIRGLRENDERER
+                    && effectiveGpuMode(item) == GpuMode.NATIVE;
+                boolean venusGpu = hasGpu
+                    && optEnum(item, "gpu_backend", GpuBackend.NONE) == GpuBackend.GPU_VIRGLRENDERER
+                    && effectiveGpuMode(item) == GpuMode.VULKAN;
+                // Dynamic mappings keep the normal RegisterMemory interface. The Gunyah backend
+                // transparently supplies the protected-VM SHARE/accept transport.
                 args.add("gunyah");
+                // The guest-alloc pool buys the host access to buffers the guest allocated, which
+                // in an ordinary protected VM it does not otherwise have. When the host can
+                // already reach the guest's RAM -- an unprotected VM, or a pseudo-unprotected one
+                // whose window is shared back before the payload runs -- the pool is memory taken
+                // from the guest to solve a problem that is not happening, and virtio-gpu with no
+                // pool node to find allocates from system RAM instead, which the host can read
+                // for the same reason. The editor hides the field in those modes; a config from
+                // the daemon API, or one saved before switching mode, still arrives with a size
+                // in it, so it is zeroed here rather than trusted.
+                // GuestPoolSizing holds that rule, shared with the huge-page preflight so the
+                // reserve is budgeted for exactly what is passed here.
+                long guestPool = GuestPoolSizing.bootGuestPoolMb(item);
                 // Pre-allocate the gfxstream host-visible pools (host arena + optional guest-alloc
                 // pool). Only meaningful for gfxstream on Gunyah.
                 if (gfxstreamGpu) {
@@ -282,6 +351,48 @@ private List<String> buildCommand() {
                     long hostPool = item.optLong("gpu_host_pool_mb", 0);
                     if (hostPool > 0 || udmabuf) {
                         var preAlloc = new StringBuilder(fmt("gfx-host-mb=%d", hostPool));
+                        if (udmabuf)
+                            appendGuestPoolOptions(preAlloc, item, guestPool);
+                        args.add("--pre-alloc");
+                        args.add(preAlloc.toString());
+                    }
+                }
+                // DRM native context. Two pools, and they hold different things:
+                //   drm-host-mb  the host arena, now only the per-context msm shmem rings, so
+                //                single-digit MB rather than the gigabyte the BOs used to need.
+                //   gpu-guest-mb the guest's drm_buddy pool, where every BO comes from. Same
+                //                region and flag as the gfxstream guest pool -- the guest driver
+                //                keeps one allocator and cannot tell the renderers apart.
+                // The guest pool needs udmabuf=true as well; that is what gates
+                // VIRTIO_GPU_F_CREATE_GUEST_HANDLE, and without it guest mesa silently keeps a
+                // host-allocating path this host no longer implements.
+                if (drm2kgslGpu) {
+                    long drmHostPool = item.optLong("gpu_drm2kgsl_pool_mb", 0);
+                    var preAlloc = new StringBuilder();
+                    if (drmHostPool > 0)
+                        preAlloc.append(fmt("drm-host-mb=%d", drmHostPool));
+                    appendGuestPoolOptions(preAlloc, item, guestPool);
+                    if (preAlloc.length() > 0) {
+                        args.add("--pre-alloc");
+                        args.add(preAlloc.toString());
+                    }
+                }
+                // Venus host pool: the venus command-stream transport shmems (per-instance ring +
+                // CS/reply chunks) live here (venus-host-mb -> VenusPool). vkr sub-allocates every
+                // blob_id==0 shmem from this pre-shared region and the guest maps pool_base+offset
+                // with no runtime SHARE. venus's real VkDeviceMemory is separately guest-alloc and
+                // comes from the shared guest pool (gpu-guest-mb) -- the same region/flag drm2kgsl
+                // and gfxstream guest-alloc use; the guest driver keeps one allocator and cannot
+                // tell the renderers apart. Default sized for the KDE+vkmark transport peak (cs
+                // pool alone is >=8M/instance): too small forces a per-blob memfd fallback ->
+                // runtime SHARE, which SoC-resets the fragile sm8650 (8gen3) RM.
+                if (venusGpu) {
+                    long venusHostPool = item.optLong("gpu_venus_pool_mb", 256);
+                    var preAlloc = new StringBuilder();
+                    if (venusHostPool > 0)
+                        preAlloc.append(fmt("venus-host-mb=%d", venusHostPool));
+                    appendGuestPoolOptions(preAlloc, item, guestPool);
+                    if (preAlloc.length() > 0) {
                         args.add("--pre-alloc");
                         args.add(preAlloc.toString());
                     }
@@ -371,7 +482,7 @@ private List<String> buildCommand() {
         buildNetCommand(args);
         buildSharedDirCommand(args);
         buildGpuCommand(args);
-        buildVncCommand(args);
+        buildScreenExportersCommand(args);
         // The evdev --input devices ride along whenever any app display path is active: the native
         // display routes everything through them; the VNC display routes its MOUSE (relative) and
         // TOUCH (multi-touch) modes here while the tablet pointer + keyboard stay on RFB.
@@ -601,123 +712,593 @@ private boolean isGunyahHypervisor() {
         return hypervisor == VMHypervisor.GUNYAH;
     }
 
+    /**
+     * What the guest hands to the host: the {@code gpu_mode} row of the editor's three-level
+     * GPU section (renderer / mode / provider).
+     *
+     * <p>Configs written before that split carry only {@code gpu_api}, whose meaning depended on
+     * the renderer, so fall back to the same migration the editor shows. Reading {@code gpu_api}
+     * directly is what this replaces: a VM configured through the new rows stores
+     * {@code gpu_mode=native} and no longer sets {@code gpu_api=drm2kgsl}, so the drm2kgsl branch below
+     * would silently not fire and the VM would come up without context-types=drm.
+     */
+    @NonNull
+    private static GpuMode effectiveGpuMode(@NonNull DataItem item) {
+        var mode = optEnum(item, "gpu_mode", GpuMode.NONE);
+        if (mode != GpuMode.NONE) return mode;
+        return GpuMode.fromLegacyApi(optEnum(item, "gpu_api", GpuApi.NONE));
+    }
+
+    /**
+     * The two display devices: {@code --gpu} for the virtio-gpu screen, {@code --simplefb} for the
+     * simplefb screen, each emitted exactly when its own switch is on.
+     *
+     * <p>One predicate per device, which is the whole point of the split. The arbitration-era
+     * version emitted the GPU device's {@code displays=} for either screen, because back then the
+     * simplefb bridge had no display of its own and handed its frames to this device -- so a VM
+     * with only the simplefb screen on still got a virtio-gpu scanout, a Linux guest saw a
+     * virtio-gpu output, drew its desktop onto it, and nobody exported it. That bridge is gone
+     * (crosvm's simplefb screen opens its own sink), so the geometry belongs to the screen it
+     * describes and to nothing else.</p>
+     *
+     * <p>{@code --gpu} and its {@code displays=} are one thing, never two: a virtio-gpu device
+     * with no scanout was tried and no guest desktop ever came up on it, so it is not a
+     * configuration this emits.</p>
+     */
     private void buildGpuCommand(@NonNull List<String> args) {
         var item = config.item;
-        var useGpu = item.optBoolean("gpu_enabled", false);
-        var useDisplay = item.optBoolean("display_enabled", false);
-        var backend = optEnum(item, "display_backend", DisplayBackend.NONE);
+        var gpuScreen = isScreenEnabled(VMScreenConfig.ID_GPU0);
+        var fbScreen = isScreenEnabled(VMScreenConfig.ID_SIMPLEFB);
         var api = optEnum(item, "gpu_api", GpuApi.NONE);
-        if (!useGpu && !useDisplay) return;
-        if (useGpu) {
+        if (!gpuScreen && !fbScreen) return;
+        if (gpuScreen) {
+            var gpu0 = VMScreenConfig.of(item, VMScreenConfig.ID_GPU0);
             var gpuBackend = optEnum(item, "gpu_backend", GpuBackend.NONE);
+            var isGfxstream = gpuBackend == GpuBackend.GPU_GFXSTREAM;
             var gpuArg = new StringBuilder();
             gpuArg.append(gpuBackend.getName());
-            if (useDisplay && backend == VIRTIO_GPU) {
-                gpuArg.append(fmt(",displays=[[mode=windowed[%d,%d]",
-                    item.optLong("display_width", 1280),
-                    item.optLong("display_height", 720)));
-                gpuArg.append(fmt(",refresh-rate=%d",
-                    item.optLong("display_refresh_rate", 60)));
-                gpuArg.append(fmt(",dpi=[%d,%d]]]",
-                    item.optLong("display_dpi_h", 160),
-                    item.optLong("display_dpi_v", 160)));
+            // gfxstream host-visible Vulkan: the guest turnip (VK) + zink (GL-on-VK)
+            // stack needs the gfxstream-vulkan context type.
+            if (isGfxstream) {
+                gpuArg.append(",context-types=gfxstream-vulkan");
             }
+            // This screen's own geometry, unconditionally: the device and its scanout are emitted
+            // together or not at all. What the guest is told here is what it gets -- crosvm turns
+            // it into the EDID and the display-info a Linux guest picks its mode from -- and it no
+            // longer has anything to do with the simplefb screen, which now carries its own size
+            // to its own device below.
+            gpuArg.append(fmt(",displays=[[mode=windowed[%d,%d]",
+                gpu0.getWidth(), gpu0.getHeight()));
+            gpuArg.append(fmt(",refresh-rate=%d", gpu0.getRefreshRate()));
+            gpuArg.append(fmt(",dpi=[%d,%d]]]", gpu0.getDpiH(), gpu0.getDpiV()));
 
-            gpuArg.append(fmt(",vulkan=%s", String.valueOf(api == VULKAN)));
-            switch (api) {
-                case EGL:
-                    gpuArg.append(",egl=true");
-                    break;
-                case OPENGLES:
-                    gpuArg.append(",gles=true");
-                    break;
-                case ANGLE:
-                    gpuArg.append(",angle=true");
-                    break;
+            if (isGfxstream) {
+                // gfxstream serves both VK (turnip) and GL (zink) clients, so both
+                // capsets are on. pci-bar-size is the host-visible BAR window and
+                // doubles as the GPU memory ceiling (the guest has no
+                // device-local-only memory type); default 4 GiB.
+                gpuArg.append(",vulkan=true,gles=true");
+                gpuArg.append(fmt(",pci-bar-size=%d",
+                    item.optLong("gpu_pci_bar_size", 0x100000000L)));
+                // Dynamic vram: a defined vram-limit is what enables runtime-shared host-visible
+                // memory (and, with a pre-alloc pool, fusion routing); leaving it undefined keeps
+                // every allocation inside the pool. crosvm ignores it in guest-alloc mode, where
+                // the guest pool is the cap, so only send it for host-alloc.
+                boolean udmabufGpu = item.optBoolean("gpu_udmabuf", true);
+                boolean dynamicVram = !udmabufGpu && item.optBoolean("gpu_dynamic_vram", false);
+                if (dynamicVram) {
+                    // vram-limit supplies gfxstream's folio quota, the VK_EXT_memory_budget
+                    // capacity handed to the guest driver, and -- by being defined and non-zero
+                    // at all -- enables fusion routing. All are ignored under guest-alloc.
+                    gpuArg.append(
+                        fmt(",vram-limit=%d", item.optLong("gpu_vram_quota_mb", 2048)));
+                    // gfxstream allocation policy: only its fresh host-visible shmem is eligible
+                    // for folio backing. Driver-exported DMA-BUFs remain untouched.
+                    gpuArg.append(fmt(",vram-folio-threshold-kb=%d",
+                        item.optLong("gpu_vram_folio_threshold_kb", 1024)));
+                    // Fusion size gate: host-visible allocations up to this try the pre-alloc
+                    // pool first, larger ones go straight to the runtime-SHARE path.
+                    gpuArg.append(fmt(",pool-blob-max-kb=%d",
+                        item.optLong("gpu_pool_blob_max_kb", 4096)));
+                }
                 // gunyah-pvm pins the RingBlob backing so the permanent Gunyah SHARE mapping
                 // stays stable. Only meaningful under the Gunyah hypervisor; other SoCs skip it.
                 if (isGunyahHypervisor()) {
                     gpuArg.append(",gunyah-pvm=true");
                 }
+                // Guest-allocated blobs: the guest owns the host-visible pool and hands
+                // dma-bufs to gfxstream via udmabuf, instead of the host growing the arena.
+                if (udmabufGpu) {
+                    gpuArg.append(",udmabuf=true");
+                }
+            } else if (effectiveGpuMode(item) == GpuMode.NATIVE) {
+                // DRM native context: the guest runs its own turnip over vdrm and virglrenderer
+                // translates the msm protocol to KGSL ioctls, so nothing is remoted at the
+                // GL/VK level and the host exposes no Vulkan capset.
+                //
+                // Only the DRM capset is advertised. rutabaga now keeps vrend (classic 2D
+                // resources: fbcon, dumb buffers, llvmpipe scanout) initialised for every
+                // virglrenderer configuration, so "drm" alone no longer fails the first
+                // CREATE_2D. Not advertising VIRGL2 matters for a stock guest: with it, stock
+                // Mesa picks host-GL virgl and our CPU-copy scanout cannot read those frames
+                // back (black until the guest additions + mesa-guest-drm2kgsl are installed);
+                // without it stock Mesa falls back to llvmpipe, which displays fine.
+                gpuArg.append(",context-types=drm");
+                // No external-blob: create_gpu_device overwrites it with
+                // `is_sandboxed || fixed_blob_mapping` regardless of what the CLI said, so
+                // passing it would only suggest it does something.
+                gpuArg.append(",vulkan=false,egl=true,gles=true");
+                // udmabuf builds the dma-buf for a guest-allocated blob, and -- less obviously --
+                // it is what gates VIRTIO_GPU_F_CREATE_GUEST_HANDLE. Without it the feature is
+                // never offered, the guest reports has_create_guest_handle=0, and guest mesa
+                // falls back to a host-allocating path this host no longer implements. The VM
+                // boots and the desktop comes up; the failure waits for the first large buffer.
+                gpuArg.append(",udmabuf=true");
+                gpuArg.append(fmt(",pci-bar-size=%d",
+                    item.optLong("gpu_pci_bar_size", 0x100000000L)));
+            } else if (effectiveGpuMode(item) == GpuMode.VULKAN) {
+                // Venus: virglrenderer's Vulkan proxy (capset venus, guest-allocated blobs).
+                // Only the venus capset is advertised (see the drm branch above: rutabaga keeps
+                // vrend initialised for the classic 2D path regardless, and not advertising
+                // VIRGL2 keeps a stock guest on llvmpipe instead of an unreadable host-GL
+                // virgl). vulkan=true maps to use_venus on the virgl path; the venus capset also
+                // forces use_venus and use_guest_vram host-side, so this is belt-and-suspenders.
+                gpuArg.append(",context-types=venus");
+                gpuArg.append(",vulkan=true,egl=true,gles=true");
+                // udmabuf gates VIRTIO_GPU_F_CREATE_GUEST_HANDLE, the guest-alloc blob path venus
+                // uses (guest owns the pool, hands the host dma-bufs) -- same contract as drm2kgsl.
+                // No external-blob: create_gpu_device forces it from is_sandboxed||fixed_blob_mapping
+                // (false under --disable-sandbox), so passing the CLI key would be inert.
+                gpuArg.append(",udmabuf=true");
+                gpuArg.append(fmt(",pci-bar-size=%d",
+                    item.optLong("gpu_pci_bar_size", 0x100000000L)));
+            } else {
+                gpuArg.append(fmt(",vulkan=%s", String.valueOf(api == VULKAN)));
+                switch (api) {
+                    case EGL:
+                        gpuArg.append(",egl=true");
+                        break;
+                    case OPENGLES:
+                        gpuArg.append(",gles=true");
+                        break;
+                    case ANGLE:
+                        // crosvm has no `angle` --gpu key and rejects unknown ones outright, so
+                        // emitting it would stop the VM from starting. Treat a config that
+                        // still carries ANGLE as GLES, which is what the editor migrates it to.
+                        gpuArg.append(",gles=true");
+                        break;
+                }
             }
             args.add("--gpu");
             args.add(gpuArg.toString());
         }
-        if (useDisplay && backend == SIMPLEFB) {
+        // The simplefb device is its own screen, so it rides on its own switch and carries its own
+        // size -- which is no longer required to equal the GPU screen's, and usually should not be.
+        //
+        // poll-hz is this screen's whole answer to "how often is there a picture": nothing in the
+        // device announces a frame, the guest maps the region write-combining and no write traps,
+        // so the host's sampling rate is the frame rate. Sent explicitly rather than left to
+        // crosvm's default, because it is a value the user can see in the editor and a default
+        // that only one of the two sides knows is a value nobody can check.
+        if (fbScreen) {
+            var fb = VMScreenConfig.of(item, VMScreenConfig.ID_SIMPLEFB);
             args.add("--simplefb");
             args.add(fmt(
-                "width=%d,height=%d",
-                item.optLong("display_width", 1280),
-                item.optLong("display_height", 720)
+                "width=%d,height=%d,poll-hz=%d",
+                fb.getWidth(), fb.getHeight(), fb.getPollHz()
             ));
         }
-        // Native display: crosvm registers an ICrosvmAndroidDisplayService binder under a per-VM
-        // name and renders the gfxstream/virtio-gpu output straight into the Android Surface the UI
-        // hands it. Requires the GPU (virtio-gpu) path above. Touch/keyboard come back over the
-        // per-VM unix sockets the root service listens on; their paths must match NativeDisplay.
-        // Single source of truth for the enable check; isNativeDisplayEnabled() also gates the
-        // socket pre-bind in start(), so the two must never diverge.
-        if (isNativeDisplayEnabled()) {
-            buildNativeDisplayCommand(args);
+    }
+
+    /**
+     * One exporter per screen: {@code --android-display-service} or {@code --vnc-server}, each
+     * naming the screen it is bound to.
+     *
+     * <p>Native display means crosvm registers an ICrosvmAndroidDisplayService binder under that
+     * screen's name and renders its output straight into the Android Surface the UI hands it.
+     * Touch/keyboard come back over the VM's input sockets, whose paths must match NativeDisplay.
+     *
+     * <p>Every binding names its screen explicitly. crosvm still accepts an exporter with no
+     * {@code screen=} and resolves it to whichever screen a pre-screens command line would have
+     * landed on, but writing it out means the app and the VMM agree in the config file rather
+     * than in two copies of the same defaulting rule. crosvm rejects an exporter naming a screen
+     * whose device is not configured, which is why every binding here is gated on
+     * {@link #isScreenEnabled} -- the same predicate that decides whether {@code --gpu} and
+     * {@code --simplefb} are emitted at all.</p>
+     */
+    private void buildScreenExportersCommand(@NonNull List<String> args) {
+        for (var screen : VMScreenConfig.listOf(config.item)) {
+            if (!isScreenEnabled(screen.id)) continue;
+            switch (screen.getExporter()) {
+                case NATIVE:
                     args.add("--android-display-service");
+                    args.add(fmt("name=%s,screen=%s%s",
+                        NativeDisplay.serviceName(config, screen.id), screen.id,
+                        transportCapArg(screen)));
+                    break;
+                case VNC:
+                    args.add("--vnc-server");
+                    args.add(buildVncArg(screen) + transportCapArg(screen));
+                    break;
+                default:
+                    // A screen nobody is watching. Legal, and not the same thing as no screen.
+                    break;
+            }
         }
     }
 
-    private void buildNativeDisplayCommand(@NonNull List<String> args) {
-        var item = config.item;
-        var serviceName = NativeDisplay.serviceName(config);
-        args.add("--input");
-        args.add(fmt(
-        ));
+    /**
+     * The ceiling on this binding's transport, as a key-value fragment for its exporter flag --
+     * or nothing at all, which is what a default configuration gets.
+     *
+     * <p>A ceiling is emitted only where it asks for <em>less</em> than the pipeline would have
+     * given anyway; see {@link DisplayTransportCap#emittedToken}, which is where the rule lives so
+     * that a test can read the whole table off it. A flag whose presence and absence mean the same
+     * thing is worse than no flag, so the top rung of each ladder is spelt by saying nothing.</p>
+     *
+     * <p>VNC's ladder gained a middle now that the encoder is above it, and {@code gpu} is that
+     * middle: "blit this screen, but do not stand an encoder behind it". crosvm's
+     * {@code transport-cap} enum grew the same way -- new tokens added beside {@code cpu}, nothing
+     * re-spelt -- so this stays a lookup rather than a translation.</p>
+     */
+    @NonNull
+    private static String transportCapArg(@NonNull VMScreenConfig screen) {
+        var token = DisplayTransportCap.emittedToken(
+            screen.id, screen.getExporter(), screen.getTransportCap());
+        return token == null ? "" : fmt(",transport-cap=%s", token);
+    }
+
+    // The virtio-input devices the UI drives; the daemon pre-binds the matching sockets (see
+    // start()) and the UI ships evdev records to them via vm_input / the direct sink.
+    //
+    // One of them is the VM's and three are each screen's. Only the relative pointer has no output
+    // binding at all -- the guest compositor routes it by focus and it walks from one output to
+    // the next -- so there is one of it for the VM. An absolute coordinate is only meaningful
+    // against one output's geometry, so multi-touch and the absolute pointer exist once per screen
+    // that has them, and each carries a name= built from the screen id: evdev has no "I belong to
+    // output N" field, so the guest is told which touchscreen is which output by hand, keyed on
+    // that name, in every guest OS. That is why the name is derived and never allocated -- it has
+    // to come back identical after a reboot or the user's mapping quietly stops matching. The
+    // keyboard is per screen on different grounds: input belongs to the scanout, so the screen's
+    // switch has to be able to turn typing off on that screen and only that screen.
+    //
+    // The three per-screen devices do not cover the same screens. The touchscreen is ours on
+    // either exporter, because multi-touch has no RFB representation -- the app synthesises it
+    // and injects it into that screen's socket while its console is up. The absolute pointer and
+    // the keyboard are ours only where the screen is exported natively: crosvm builds a
+    // VNC-exported screen's pair itself, behind that screen's own VNC server, and drives them from
+    // that server's RFB pointer and key events (see buildVncArg). Emitting either here too would
+    // hand the guest two devices under one evdev name, and the socket one would be the half
+    // nothing ever writes to.
     private void buildInputDevicesCommand(@NonNull List<String> args) {
+        var vmId = config.getId().toString();
+        // No screen for this one, and the empty string says exactly that: its socket name does not
+        // take one, so there is no screen a console could name that would move it.
+        //
         // Relative-pointer mouse (REL_X/Y + buttons + wheel) for InputMode.MOUSE; the guest renders
         // the cursor, which is what relative-motion consumers (FPS games) need.
         args.add("--input");
         args.add(fmt(
-            "keyboard[path=%s]",
-            NativeDisplay.inputSocketPath(serviceName, NativeDisplay.KEYBOARD)
             "mouse[path=%s]",
+            NativeDisplay.inputSocketPath(vmId, "", NativeDisplay.MOUSE)
         ));
+        // multi-touch + absolute-mouse advertise a fixed normalized ABS range (crosvm
+        // NORMALIZED_ABS_MAX) because width/height are OMITTED here; the UI scales view coords to
+        // that range (EvdevEncoder.NORMALIZED_ABS_MAX / TouchScaleCalculator), so the mapping is
+        // resolution-independent and survives guest auto-resize -- no display size needed.
+        //
+        // crosvm's VM-global RFB device set is gone: --vnc-server no longer turns on
+        // display_window_mouse and no longer creates the "DroidVM VNC Touch"/Tablet/Mouse trio or
+        // the display-window keyboard. Those were one set for the whole VM, so with two VNC
+        // screens up both normalised into the same tablet and the guest had no way to tell which
+        // output a coordinate came from; and the set only ever reached the guest at all when no
+        // GPU device was configured. Each VNC binding now carries its own pair instead.
+        var nativeInputs = nativeInputScreens();
+        for (var screenId : touchscreenScreens()) {
+            args.add("--input");
+            args.add(fmt(
+                "multi-touch[path=%s,name=%s]",
+                NativeDisplay.inputSocketPath(vmId, screenId, NativeDisplay.MULTITOUCH),
+                NativeDisplay.touchDeviceName(screenId)
             ));
+            // Tablet = crosvm's absolute-pointing mouse (qemu usb-tablet): ABS position + buttons
+            // + wheel, so it gives the guest pointer hover, right-click and scroll -- which
+            // single-touch (a BTN_TOUCH touchscreen) can't. The UI maps a host mouse/stylus onto
+            // it in TABLET mode.
+            //
+            // The tablet and the keyboard below are only for the natively exported screens; that
+            // list is a subset of the one being walked, so the gate sits inside the loop rather
+            // than beside it.
+            //
+            // It carries a name= for the same reason the touchscreen does. It could not before:
+            // crosvm's AbsoluteMouse option had no name field and its enum is deny_unknown_fields,
+            // so `absolute-mouse[...,name=X]` was not a device with an odd name but a command line
+            // crosvm refuses, and this screen's tablet fell back to the generated "Crosvm Virtio
+            // Absolute Mouse <idx>" -- an idx that counts emission order here and so moves when
+            // another screen's input is switched off. Both devices of the pair are pinnable now.
+            if (!nativeInputs.contains(screenId)) continue;
             args.add("--input");
             args.add(fmt(
+                "absolute-mouse[path=%s,name=%s]",
+                NativeDisplay.inputSocketPath(vmId, screenId, NativeDisplay.TABLET),
+                NativeDisplay.tabletDeviceName(screenId)
             ));
+            // This screen's keyboard. There is no VM-wide one any more: a keyboard shared by every
+            // screen could not be switched off by any one of them, so a screen with its input off
+            // still typed, which is not what the switch says. Now typing on a console goes to that
+            // console's screen's keyboard and a screen with input off has none -- and the guest
+            // sees several keyboards, which costs it nothing, because unlike an absolute device a
+            // keyboard needs no output binding to be routed correctly: focus decides.
+            args.add("--input");
+            args.add(fmt(
+                "keyboard[path=%s,name=%s]",
+                NativeDisplay.inputSocketPath(vmId, screenId, NativeDisplay.KEYBOARD),
+                NativeDisplay.keyboardDeviceName(screenId)
+            ));
+        }
+    }
+
+    /**
+     * The screens that get their own multi-touch device, in schema order: the screen exists,
+     * something is watching it, and its input switch is on.
+     *
+     * <p>Both exporters, because multi-touch is not an RFB protocol event: the app is what turns
+     * finger contacts into evdev slots, on the VNC console exactly as on the native one, and
+     * injects them into this screen's socket while that console is up. So a VNC-exported screen
+     * keeps its touchscreen socket and its {@code --input multi-touch} on the same terms it
+     * always had.</p>
+     *
+     * <p>One list, read by both the socket pre-bind and the {@code --input} args, because a screen
+     * in one and not the other is either a device crosvm cannot connect to (the VM does not
+     * start) or a socket nothing ever opens.</p>
+     */
+    @NonNull
+    private List<String> touchscreenScreens() {
+        var out = new ArrayList<String>();
+        for (var screen : VMScreenConfig.absoluteInputOf(config.item))
+            out.add(screen.id);
+        return out;
+    }
+
+    /**
+     * The screens whose absolute pointer and keyboard are ours to bind -- a subset of
+     * {@link #touchscreenScreens}: the natively exported ones.
+     *
+     * <p>A VNC-exported screen has both of those too, but crosvm builds them behind that screen's
+     * VNC server and writes the RFB pointer and key events straight into them, which is what makes
+     * a coordinate land under the geometry of the binding it arrived on and a keystroke reach the
+     * screen the client is looking at. There is no socket for the daemon to bind and no
+     * {@code --input} for it to emit; the whole of the daemon's say in them is the
+     * {@code view-only} flag on that screen's exporter (see {@link #buildVncArg}).</p>
+     *
+     * <p>One list for the pair, because the pair has one rule: both are the screen's, both exist
+     * only where the screen's input switch is on, and both are crosvm's on a VNC binding. Read by
+     * the socket pre-bind and the {@code --input} args alike, for the same reason the touchscreen
+     * list is.</p>
+     */
+    @NonNull
+    private List<String> nativeInputScreens() {
+        var out = new ArrayList<String>();
+        for (var screen : VMScreenConfig.absoluteInputOf(config.item))
+            if (screen.getExporter() == DisplayExporter.NATIVE) out.add(screen.id);
+        return out;
     }
 
-    /** True iff the per-VM crosvm command will reference native-display input sockets. */
-    private boolean isNativeDisplayEnabled() {
+    // crosvm can promote the virtio-gpu worker to SCHED_FIFO (CROSVM_GPU_RT_PRIO). On gfxstream its
+    // per-context render threads inherit that policy and, spin-waiting on the guest command ring,
+    // can starve the normal-priority vCPU that feeds them -- a priority inversion that caps the
+    // native-display present rate. So RT is opt-in and off by default: the graphics tab's
+    // "real-time scheduling" switch (inside the GPU Worker Cpuset section) stores gpu_rt_prio
+    // ("97" on / "" off); pass it through only when set so crosvm leaves scheduling normal
+    // otherwise.
+    //
+    // Requires the cpuset: RT confined to the picked cores trades vCPU latency for render
+    // throughput on those cores, which is the point of the switch. RT with no cpuset is a
+    // different thing entirely -- FIFO 97 threads eligible for every host core, above everything
+    // else Android is running -- so it is refused rather than silently applied. Called after
+    // prepareGpuCgroup(), whose gpuCgroupPath is non-null only once the cpuset exists, holds
+    // cores and is about to be handed to crosvm.
+    private void applyGpuRtPrioEnv(@NonNull NativeProcess.Builder builder) {
         var item = config.item;
-        if (!item.optBoolean("display_enabled", false)) return false;
-        var backend = optEnum(item, "display_backend", DisplayBackend.NONE);
-        return item.optBoolean("native_display_enabled", false);
+        if (!VMScreenConfig.hasGpuDevice(item)) return;
+        // gpu_rt_prio is the SCHED_FIFO level as a string, "" (unset) by default. Empty means leave
+        // CROSVM_GPU_RT_PRIO unset so crosvm applies no real-time scheduling (RT is opt-in).
+        String prio = item.optString("gpu_rt_prio", "");
+        if (prio.isEmpty()) return;
+        // The editor cannot save this combination; a config built straight through the daemon
+        // API can still carry it, as can one whose cpuset setup soft-failed (no root, bad path).
+        if (gpuCgroupPath == null) {
+            Log.w(TAG, "gpu_rt_prio set without a GPU worker cpuset; skipping real-time "
+                + "scheduling rather than leaving FIFO GPU threads free on every core");
+            return;
+        }
+        builder.environment("CROSVM_GPU_RT_PRIO", prio);
+    }
+
+    /**
+     * The host-Vulkan renderers (gfxstream, and venus on virglrenderer) need their host ICD
+     * selected, gfxstream its host-visible folio/blob env, and both a raised udmabuf import cap.
+     * No-op for OpenGL, Native and 2D.
+     */
+    private void applyGfxstreamEnv(@NonNull NativeProcess.Builder builder) {
+        var item = config.item;
+        if (!VMScreenConfig.hasGpuDevice(item)) return;
+        var backend = optEnum(item, "gpu_backend", GpuBackend.NONE);
+        boolean gfxstream = backend == GpuBackend.GPU_GFXSTREAM;
+        // Venus is Vulkan-on-virglrenderer: it drives the host GPU through the same host ICD
+        // and the same guest-alloc udmabuf blobs as gfxstream, so it needs this env too.
+        boolean venus = backend == GpuBackend.GPU_VIRGLRENDERER
+            && effectiveGpuMode(item) == GpuMode.VULKAN;
+        if (!gfxstream && !venus) return;
+        // gfxstream-only: advertise a device-local memory type to the guest. The folio budget
+        // (vram-limit) and Gunyah RingBlob pin (gunyah-pvm) are on the --gpu line.
+        if (gfxstream)
+            builder.environment("GFXSTREAM_DEVICE_LOCAL_MEMORY_TYPE", "1");
+        // Host Vulkan driver, for gfxstream and venus alike (both dlopen ANDROID_EMU_VK_LOADER_PATH
+        // ahead of the system loader: gfxstream's VulkanDispatch, venus's vkr_library). It follows
+        // gpu_api, which the editor derives from the provider row: VULKAN_SYSTEM / VULKAN_PANVK use
+        // the SoC's stock HAL (leave the env unset so the system loader picks the vendor ICD),
+        // anything else -- VULKAN_TURNIP, or plain VULKAN from a pre-provider config -- the
+        // bundled turnip. Either way the env falls back to the system HAL if the turnip file is
+        // missing.
+        var api = optEnum(item, "gpu_api", GpuApi.NONE);
+        boolean systemDriver = api == GpuApi.VULKAN_SYSTEM || api == GpuApi.VULKAN_PANVK;
+        if (!systemDriver) {
+            var turnip = pathJoin(DATA_DIR, "usr", "lib", "libvulkan_freedreno.so");
+            if (new File(turnip).exists()) {
+                builder.environment("ANDROID_EMU_VK_LOADER_PATH", turnip);
+            }
+        }
+        // udmabuf's default 64MB/handle cap chokes large blob imports; raise it so a
+        // whole host-visible allocation can be wrapped as one dma-buf. The glob covers
+        // both the in-tree driver (/sys/module/udmabuf) and the app-shipped fallback
+        // module for kernels without CONFIG_UDMABUF (/sys/module/udmabuf_gki_6.1 etc.).
+        RunUtils.run("for p in /sys/module/udmabuf*/parameters/size_limit_mb; do " +
+                "echo %d > \"$p\"; done 2>/dev/null || true",
+            item.optLong("gpu_udmabuf_limit_mb", 4096));
     }
 
-    private void buildVncCommand(@NonNull List<String> args) {
+    /**
+     * Host Vulkan provider for the GPU blit ({@link GpuBlitProvider}) -- the dmabuf-import path
+     * every sink that does not memcpy goes through. It belongs to no one screen and to no one
+     * exporter: the same driver imports the virtio-gpu scanout and the simplefb framebuffer, and
+     * it is dlopened by the native bridge to blit into a Surface and by the VNC sink to blit into
+     * a headless target of its own. Any of those needs this pointed somewhere before it can use
+     * the GPU. This is a separate axis from the render host driver ({@link #applyGfxstreamEnv});
+     * the two can name the same turnip .so or differ.
+     *
+     * <p>TURNIP points the crosvm bridge at the bundled turnip. OFF -- and, until they are wired,
+     * PANVK/SYSTEM -- forces crosvm's CPU copy so a stale or hand-edited value degrades cleanly
+     * instead of half-loading a wrong driver. (SYSTEM will instead leave the library unset and let
+     * the bridge load the SoC driver once the capability probe that gates it exists.)
+     */
+    private void applyDisplayBlitEnv(@NonNull NativeProcess.Builder builder) {
         var item = config.item;
-        if (!item.optBoolean("vnc_enabled", false)) return;
+        // Any binding this VM actually has whose transport could be a GPU one -- not the native
+        // display's in particular. The env var is process-wide, so it is set from whether that
+        // path exists at all, and it exists for the VNC sink just as much since it grew a blit of
+        // its own: same driver, same dma-buf import, a headless target instead of a Surface.
+        // Naming the native display here was the rule from when it was the only sink that blitted.
+        if (!VMScreenConfig.hasGpuBlitBinding(item)) return;
+        var provider = optEnum(item, "display_blit_provider", GpuBlitProvider.TURNIP);
+        switch (provider) {
+            case TURNIP: {
+                var turnip = pathJoin(DATA_DIR, "usr", "lib", "libvulkan_freedreno.so");
+                if (new File(turnip).exists())
+                    builder.environment("CROSVM_DISPLAY_VULKAN_LIBRARY", turnip);
+                break;
+            }
+            case SYSTEM: {
+                // The SoC's stock Vulkan performs the blit. The bridge dlopens whatever it is
+                // pointed at as a hwvulkan HMI, and the vendor driver under /vendor/lib64/hw is one,
+                // so aim it there instead of turnip. The bridge's own extension probe drops to the
+                // CPU copy when the stock driver lacks raw-dmabuf import (as Qualcomm's does) or
+                // cannot be loaded -- so SYSTEM attempts the system Vulkan and degrades, it never
+                // forces the CPU path.
+                var sysVk = resolveSystemVulkanHal();
+                if (sysVk != null)
+                    builder.environment("CROSVM_DISPLAY_VULKAN_LIBRARY", sysVk);
+                break;
+            }
+            case OFF:
+            case PANVK:
+            default:
+                // OFF is explicit; PANVK is not built yet (and is bounced in the editor). Force the
+                // CPU copy rather than letting the bridge load the wrong driver.
+                builder.environment("GPU_DISPLAY_COPY_MODE", "cpu");
+                break;
+        }
+    }
+
+    /**
+     * The SoC's stock Vulkan hwvulkan HAL under {@code /vendor/lib64/hw} -- a real hwvulkan HMI the
+     * display bridge can dlopen -- or null if only a software rasteriser is present. Used by the
+     * SYSTEM {@link GpuBlitProvider}.
+     */
+    private static String resolveSystemVulkanHal() {
+        var files = new File("/vendor/lib64/hw").listFiles(
+            (d, name) -> name.startsWith("vulkan.") && name.endsWith(".so"));
+        if (files == null) return null;
+        for (var vf : files) {
+            var n = vf.getName();
+            // Skip the software fallbacks (lvp/swiftshader/pastel); we want the GPU driver.
+            if (n.contains("lvp") || n.contains("swiftshader") || n.contains("pastel")) continue;
+            return vf.getAbsolutePath();
+        }
+        return null;
+    }
+
+    /** Whether this VM has [screenId]'s display device -- the screen's own switch, and nothing else. */
+    private boolean isScreenEnabled(@NonNull String screenId) {
+        var screen = VMScreenConfig.find(config.item, screenId);
+        return screen != null && screen.isEnabled();
+    }
+
     /**
      * The evdev input bridge (and matching --input devices) is needed by both app display paths:
      * native uses it for every input; the VNC display uses it for MOUSE/TOUCH modes (tablet
+     * pointer + keyboard ride the RFB channel instead). So: any screen with any exporter on it.
+     *
+     * <p>Single source of truth: this gates both the socket pre-bind in start() and the --input
+     * args in buildCommand(), so the sockets and the devices never diverge. It is the gate on the
+     * VM-wide relative pointer; which screens additionally get a touchscreen is
+     * {@link #touchscreenScreens} and which get a socket tablet and keyboard is
+     * {@link #nativeInputScreens}, and a VM with every screen's input switched off still gets the
+     * relative pointer -- it is not a screen's to switch off. The keyboard used to be in that
+     * sentence and no longer is.</p>
      */
     private boolean isInputBridgeNeeded() {
+        for (var screen : VMScreenConfig.listOf(config.item)) {
+            if (!isScreenEnabled(screen.id)) continue;
+            if (screen.getExporter() != DisplayExporter.NONE) return true;
+        }
+        return false;
     }
 
+    @NonNull
+    private static String buildVncArg(@NonNull VMScreenConfig screen) {
         var vncArg = new StringBuilder();
-        var host = item.optString("vnc_host", "");
+        var host = screen.getVncHost();
         if (!host.isEmpty()) {
             vncArg.append("host=");
             vncArg.append(host);
             vncArg.append(",");
         }
         vncArg.append("port=");
-        vncArg.append(Math.max(item.optLong("vnc_port", -1), 1));
-        var password = item.optString("vnc_password", "");
+        vncArg.append(Math.max(screen.getVncPort(), 1));
+        var password = screen.getVncPassword();
         if (!password.isEmpty()) {
             vncArg.append(",password=");
             vncArg.append(password);
         }
-        args.add("--vnc-server");
-        args.add(vncArg.toString());
+        // No "h264-port=" here, and it must not come back: the hardware H.264 stream is served on
+        // the RFB port as encoding 50, so there is no second listener to place. crosvm now refuses
+        // to parse a command line that names the old key rather than ignoring it, which is what
+        // makes a mixed deploy fail loudly at start instead of running with a silently dropped
+        // flag. A config left over from before the change still carries the number; nothing reads
+        // it (see VMScreenConfig).
+        // This screen's input switch, spelt for the other side. false makes crosvm build one
+        // tablet and one keyboard for this binding and inject its RFB pointer/key events into
+        // them; true makes it build neither and drop both, which is the only way to say "watch,
+        // don't touch" now that the devices belong to the binding rather than to the VM.
+        //
+        // The devices are the binding's, so a coordinate is read against the geometry of the
+        // screen the client is actually looking at -- which is what the retired VM-global set
+        // could not do with two VNC screens up. Pointer semantics stay absolute-tablet for every
+        // client, third-party or the app's own console; the app's VNC console is an RFB client
+        // like any other for pointer and keys, and reaches around RFB only for its TOUCH mode
+        // (this screen's multi-touch socket) and its MOUSE mode (the VM's relative pointer).
+        //
+        // The old "input=tablet" key is not merely unused now: crosvm's VncConfig is
+        // deny_unknown_fields, so emitting it would be a command line it refuses rather than a
+        // flag it ignores. That is deliberate -- a half-updated pair fails at start.
+        vncArg.append(",view-only=");
+        vncArg.append(!screen.isInputEnabled());
+        vncArg.append(",screen=");
+        vncArg.append(screen.id);
+        return vncArg.toString();
+    }
+
     /**
      * Attaches the VM's peripherals. One peripheral is one guest device.
      *
@@ -1050,8 +1631,8 @@ public boolean hasControlSocket() {
     }
 
     @Override
-    public boolean writeNativeInput(int channel, @NonNull byte[] data) {
-        return inputBridge.writeNativeInput(channel, data);
+    public boolean writeNativeInput(@NonNull String screenId, int channel, @NonNull byte[] data) {
+        return inputBridge.writeNativeInput(screenId, channel, data);
     }
 
     @Override
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/hugepage/PoolPreflight.java b/app/src/main/java/cn/classfun/droidvm/lib/hugepage/PoolPreflight.java
index f0180be50..9e866afff 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/hugepage/PoolPreflight.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/hugepage/PoolPreflight.java
@@ -14,6 +14,7 @@
 import androidx.annotation.NonNull;
 
 import cn.classfun.droidvm.lib.store.base.DataItem;
+import cn.classfun.droidvm.lib.store.vm.GuestPoolSizing;
 
 /**
  * Is the huge-page reserve able to back this VM <em>right now</em>?
@@ -116,7 +117,8 @@ public static Status check(@NonNull DataItem item) {
      * as of the per-pool {@code consume_system_mem} tag so are the three renderer host pools --
      * whichever of them a route uses, the VM still costs what its memory field says. Only the guest
      * pool is added on top, because it is video memory the user asked for beside the RAM rather
-     * than out of it.
+     * than out of it - and only when the backend will actually pass one, which
+     * {@link GuestPoolSizing} decides for both sides.
      *
      * <p>Growth grants (the runtime SHARE path) are deliberately not counted -- they happen later,
      * one blob at a time, and a VM that cannot grow still boots. That is also why the guest pool
@@ -124,20 +126,9 @@ public static Status check(@NonNull DataItem item) {
      */
     public static long neededPages(@NonNull DataItem item) {
         long mb = Math.max(item.optLong("memory_mb", 512), 64);
-            var backend = item.optString("gpu_backend", "");
-            long guestPool = item.optLong("gpu_guest_pool_mb", 0);
-            long guestPrealloc = guestPool > 0
-                ? item.optLong("gpu_guest_prealloc_mb", guestPool)
-                : 0;
-            if ("gpu_gfxstream".equals(backend)) {
-                // The guest pool is only pre-allocated when the guest can create its own
-                // handles, which is what udmabuf gates.
-                if (item.optBoolean("gpu_udmabuf", false))
-                    mb += guestPrealloc;
-            } else if ("gpu_virglrenderer".equals(backend)) {
-                mb += guestPrealloc;
-            }
-        }
+        // Exactly what the backend will pre-allocate: nothing for a host-visible-RAM VM, and
+        // for gfxstream only with udmabuf. One rule, shared with the command builder.
+        mb += GuestPoolSizing.bootGuestPreallocMb(item);
         return (mb + PAGE_MB - 1) / PAGE_MB;
     }
 
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/store/vm/GuestPoolSizing.java b/app/src/main/java/cn/classfun/droidvm/lib/store/vm/GuestPoolSizing.java
new file mode 100644
index 000000000..10ffc1861
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/lib/store/vm/GuestPoolSizing.java
@@ -0,0 +1,58 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
+package cn.classfun.droidvm.lib.store.vm;
+
+import static cn.classfun.droidvm.lib.store.enums.Enums.optEnum;
+
+import androidx.annotation.NonNull;
+
+import cn.classfun.droidvm.lib.store.base.DataItem;
+
+/**
+ * How much guest-owned VRAM pool a VM actually gets at boot, as one rule shared by the crosvm
+ * command builder (which passes it) and the huge-page preflight (which budgets for it). The two
+ * drifted once: the daemon zeroed the pool for host-visible-RAM modes while the preflight still
+ * added it, so a 5 GB pseudo-unprotected VM was told it needed 6 GB of reserve.
+ *
+ * <p>The guest-alloc pool buys the host access to buffers the guest allocated, which in an
+ * ordinary protected VM it does not otherwise have. When the host can already reach the guest's
+ * RAM (an unprotected VM, or a pseudo-unprotected one whose window is shared back before the
+ * payload runs) the pool is memory taken from the guest to solve a problem that is not
+ * happening, so it is dropped. gfxstream additionally needs udmabuf, which is what gates
+ * guest-created handles; without it there is nothing to pre-allocate.
+ */
+public final class GuestPoolSizing {
+    private GuestPoolSizing() {
+    }
+
+    /** The host can read the guest's RAM directly, so no guest pool is passed. */
+    public static boolean hostVisibleRam(@NonNull DataItem item) {
+        var pvm = optEnum(item, "protected_vm", ProtectedVM.PROTECTED_WITHOUT_FIRMWARE);
+        return pvm == ProtectedVM.PROTECTED_NORMAL || pvm == ProtectedVM.PSEUDO_UNPROTECTED;
+    }
+
+    /** The pool window ({@code gpu-guest-mb}) crosvm will be given, 0 when none. */
+    public static long bootGuestPoolMb(@NonNull DataItem item) {
+        if (!VMScreenConfig.hasGpuDevice(item)) return 0;
+        if (hostVisibleRam(item)) return 0;
+        long pool = Math.max(item.optLong("gpu_guest_pool_mb", 0), 0);
+        var backend = optEnum(item, "gpu_backend", GpuBackend.NONE);
+        if (backend == GpuBackend.GPU_GFXSTREAM)
+            return item.optBoolean("gpu_udmabuf", true) ? pool : 0;
+        if (backend == GpuBackend.GPU_VIRGLRENDERER)
+            return pool;
+        return 0;
+    }
+
+    /**
+     * The part of that window pre-allocated at boot ({@code gpu-guest-prealloc-mb}) - what the
+     * huge-page reserve pays up front. Older configs carry no prealloc field and keep the whole
+     * pool preallocated; growth grants come later, one blob at a time, and are not counted.
+     */
+    public static long bootGuestPreallocMb(@NonNull DataItem item) {
+        long pool = bootGuestPoolMb(item);
+        if (pool <= 0) return 0;
+        return Math.max(Math.min(item.optLong("gpu_guest_prealloc_mb", pool), pool), 0);
+    }
+}
diff --git a/app/src/test/java/cn/classfun/droidvm/lib/hugepage/PoolPreflightTest.java b/app/src/test/java/cn/classfun/droidvm/lib/hugepage/PoolPreflightTest.java
new file mode 100644
index 000000000..2dd9f3da9
--- /dev/null
+++ b/app/src/test/java/cn/classfun/droidvm/lib/hugepage/PoolPreflightTest.java
@@ -0,0 +1,76 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
+package cn.classfun.droidvm.lib.hugepage;
+
+import static org.junit.Assert.assertEquals;
+
+import org.junit.Test;
+
+import cn.classfun.droidvm.lib.store.base.DataItem;
+import cn.classfun.droidvm.lib.store.vm.GuestPoolSizing;
+import cn.classfun.droidvm.lib.store.vm.VMConfig;
+import cn.classfun.droidvm.lib.store.vm.VMScreenConfig;
+
+/**
+ * The reserve is budgeted for exactly what the command builder passes: a 5 GB
+ * pseudo-unprotected VM with a 1 GB guest pool needs 5 GB, because that mode gets no pool.
+ */
+public final class PoolPreflightTest {
+    private static DataItem vm(String protectedVm, String backend, String mode, boolean gpu) {
+        var item = VMConfig.createWithCustomizeDefaults(null).item;
+        item.set("memory_mb", 5120L);
+        item.set("protected_vm", protectedVm);
+        item.set("gpu_backend", backend);
+        item.set("gpu_mode", mode);
+        item.set("gpu_guest_pool_mb", 1024L);
+        var gpu0 = VMScreenConfig.find(item, VMScreenConfig.ID_GPU0);
+        if (gpu0 != null) gpu0.setEnabled(gpu);
+        return item;
+    }
+
+    private static long neededMb(DataItem item) {
+        return PoolPreflight.neededPages(item) * PoolPreflight.PAGE_MB;
+    }
+
+    @Test
+    public void pseudoUnprotectedGetsNoGuestPool() {
+        var item = vm("pseudo_unprotected", "gpu_virglrenderer", "native", true);
+        assertEquals(0, GuestPoolSizing.bootGuestPoolMb(item));
+        assertEquals(5120, neededMb(item));
+    }
+
+    @Test
+    public void unprotectedGetsNoGuestPoolEither() {
+        assertEquals(5120, neededMb(vm("protected_normal", "gpu_virglrenderer", "native", true)));
+    }
+
+    @Test
+    public void protectedVmPaysForTheGuestPool() {
+        var item = vm("protected_without_firmware", "gpu_virglrenderer", "native", true);
+        assertEquals(1024, GuestPoolSizing.bootGuestPoolMb(item));
+        assertEquals(6144, neededMb(item));
+        assertEquals(6144, neededMb(vm("protected_protected", "gpu_virglrenderer", "vulkan", true)));
+    }
+
+    @Test
+    public void gfxstreamNeedsUdmabufForAPool() {
+        var item = vm("protected_without_firmware", "gpu_gfxstream", "vulkan", true);
+        assertEquals("udmabuf defaults on", 6144, neededMb(item));
+        item.set("gpu_udmabuf", false);
+        assertEquals(5120, neededMb(item));
+    }
+
+    @Test
+    public void noGpuDeviceMeansNoPool() {
+        assertEquals(5120, neededMb(vm("protected_without_firmware", "gpu_virglrenderer", "native", false)));
+    }
+
+    @Test
+    public void onlyThePreallocatedPartIsBudgeted() {
+        var item = vm("protected_without_firmware", "gpu_virglrenderer", "native", true);
+        item.set("gpu_guest_prealloc_mb", 512L);
+        assertEquals(512, GuestPoolSizing.bootGuestPreallocMb(item));
+        assertEquals(5632, neededMb(item));
+    }
+}

From bb237043e33a906f22730199783edb2941ae2119 Mon Sep 17 00:00:00 2001
From: HuJK <gh@hujk.org>
Date: Sun, 30 Aug 2026 13:37:16 +0800
Subject: [PATCH 143/182] gpu: the guest pool grows -- preallocation, step and
 a grant ceiling

Declaring the guest pool at the size of the worst case and SHARE'ing all of it
at boot costs that memory for the whole life of the VM, most of it never
touched. The pool is declared at full size but only the preallocation is
SHARE'd before boot; the guest grows and shrinks the rest at run time, one
memparcel per step, up to a ceiling on how many grants may be outstanding.

The three knobs are in the editor because none of them has a right answer: a
step too small makes a stall out of every allocation burst, a step too large
gives back the saving, and the grant ceiling is what keeps a runaway guest from
filling the hypervisor's table. Their defaults are the old behaviour --
preallocation equal to the pool, step zero, no grants -- so a config that says
nothing gets a pool that does not grow.

Co-authored-by: lateautumn233 <lateautumn233@foxmail.com>

From 46d1c8f85652f0133c720b4cfe7048507589a8b2 Mon Sep 17 00:00:00 2001
From: HuJK <gh@hujk.org>
Date: Sun, 30 Aug 2026 13:37:16 +0800
Subject: [PATCH 144/182] gpu: raise udmabuf's per-handle size limit, fallback
 module included

udmabuf defaults to a 64 MB cap per handle, and a whole host-visible allocation
is routinely larger than that, so the import fails and the blob path falls back
to something slower or not at all. The limit is raised at VM start.

The glob matters: kernels without CONFIG_UDMABUF get the fallback module this
app ships, which lands under a versioned name
(/sys/module/udmabuf_gki_6.1/...), so writing only to /sys/module/udmabuf would
raise the limit on exactly the kernels that did not need the fallback.

From 5e232feeb77545e937f9021041c97a0fd81d984f Mon Sep 17 00:00:00 2001
From: HuJK <gh@hujk.org>
Date: Sun, 30 Aug 2026 13:37:16 +0800
Subject: [PATCH 145/182] display: pick the Vulkan that blits, and ask it
 whether it can

Getting a frame from the VM to a Surface is either a memcpy or a dma-buf import
plus a GPU blit, and which one happens depends on a driver being loadable and
having the extensions for a raw dma-buf import. That is a separate axis from
the renderer: the same import path serves the virtio-gpu scanout and the
simplefb framebuffer, and it is used by the native bridge blitting into a
Surface and by the VNC sink blitting into a headless target of its own.

So the blit provider is its own setting -- the bundled turnip, the SoC's stock
Vulkan HAL, or off -- and vkprobe answers whether the choice will work before
it is offered, by opening the driver and looking for the extensions rather than
by hardcoding a vendor list. Qualcomm's stock driver lacks raw dma-buf import,
so SYSTEM degrades to the CPU copy instead of half-loading a driver that cannot
do the job. An unwired provider is listed and refused with a note rather than
silently treated as one of the others, because a silent downgrade is the
failure that looks like success.

simplefb gets the configured geometry rather than borrowing the GPU screen's,
which is what makes it a device the blit path can treat like any other source.
---
 app/src/main/cpp/CMakeLists.txt               |   7 +
 app/src/main/cpp/vkprobe/vkprobe.cpp          | 127 ++++++++++++++++++
 .../droidvm/lib/natives/VulkanBlitProbe.java  |  64 +++++++++
 .../lib/store/vm/DisplayTransportCap.java     |  33 +++++
 .../droidvm/lib/store/vm/GpuBlitProvider.java |  78 +++++++++++
 .../droidvm/lib/store/vm/VMScreenConfig.java  |  10 ++
 .../ui/vm/edit/graphics/ScreenBindingRow.java |  15 +++
 .../res/layout/partial_vm_screen_binding.xml  |  17 +++
 .../lib/store/vm/DisplayTransportCapTest.java |  53 ++++++++
 9 files changed, 404 insertions(+)
 create mode 100644 app/src/main/cpp/vkprobe/vkprobe.cpp
 create mode 100644 app/src/main/java/cn/classfun/droidvm/lib/natives/VulkanBlitProbe.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/lib/store/vm/DisplayTransportCap.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/lib/store/vm/GpuBlitProvider.java
 create mode 100644 app/src/main/res/layout/partial_vm_screen_binding.xml
 create mode 100644 app/src/test/java/cn/classfun/droidvm/lib/store/vm/DisplayTransportCapTest.java

diff --git a/app/src/main/cpp/CMakeLists.txt b/app/src/main/cpp/CMakeLists.txt
index d7a0eca90..709e377d9 100644
--- a/app/src/main/cpp/CMakeLists.txt
+++ b/app/src/main/cpp/CMakeLists.txt
@@ -121,6 +121,13 @@ add_library(unixhelper SHARED unixhelper/unixhelper.c unixhelper/native_process.
 target_link_libraries(unixhelper log)
 target_compile_options(unixhelper PRIVATE -Wall -Wextra -O2)
 
+# Capability probe for the native-display GPU-blit provider (GpuBlitProvider.SYSTEM). Loads the
+# platform Vulkan loader at runtime (dlopen, not linked) and reports which blit extensions the
+# stock driver lacks, so the UI can warn before the bridge silently degrades to a CPU copy.
+add_library(vkprobe SHARED vkprobe/vkprobe.cpp)
+target_link_libraries(vkprobe log)
+target_compile_options(vkprobe PRIVATE -Wall -Wextra -O2)
+
 
 add_executable(daemon unixhelper/daemon.c)
 target_compile_options(daemon PRIVATE -Wall -Wextra -O2)
diff --git a/app/src/main/cpp/vkprobe/vkprobe.cpp b/app/src/main/cpp/vkprobe/vkprobe.cpp
new file mode 100644
index 000000000..b63b93f94
--- /dev/null
+++ b/app/src/main/cpp/vkprobe/vkprobe.cpp
@@ -0,0 +1,127 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
+//
+// Capability probe for the native-display GPU-blit provider (GpuBlitProvider.SYSTEM).
+//
+// The crosvm display bridge (crosvm_android_display_client.cpp) imports the virtio-gpu
+// scanout dmabuf as a VkImage and blits it into the SurfaceControl buffer. To do so it
+// enables a fixed set of device extensions at vkCreateDevice; a driver that does not expose
+// them cannot run the blit and the bridge silently degrades to a CPU copy. This probe lets
+// the UI tell the user *before* they pick SYSTEM which of those extensions their platform's
+// stock Vulkan driver lacks.
+//
+// It is deliberately general: it enumerates the actual driver's extension list and compares
+// against the bridge's requirements, with no per-vendor ("Qualcomm fails") special-casing.
+// The list below must stay in sync with the bridge's device-creation extension set.
+
+#include <jni.h>
+#include <dlfcn.h>
+#include <android/log.h>
+
+#include <cstring>
+#include <string>
+#include <vector>
+
+#define VK_NO_PROTOTYPES
+#include <vulkan/vulkan.h>
+
+#define LOG_TAG "vkprobe"
+#define LOGW(...) __android_log_print(ANDROID_LOG_WARN, LOG_TAG, __VA_ARGS__)
+
+namespace {
+
+// Device extensions crosvm_android_display_client.cpp enables at vkCreateDevice. Keep in sync.
+const char* const kRequired[] = {
+    "VK_EXT_external_memory_dma_buf",
+    "VK_EXT_image_drm_format_modifier",
+    "VK_ANDROID_external_memory_android_hardware_buffer",
+    "VK_KHR_external_memory_fd",
+    "VK_EXT_queue_family_foreign",
+    "VK_KHR_external_semaphore",
+    "VK_KHR_external_semaphore_fd",
+};
+
+std::vector<std::string> deviceMissing(PFN_vkEnumerateDeviceExtensionProperties enumExt,
+                                       VkPhysicalDevice dev) {
+    uint32_t n = 0;
+    enumExt(dev, nullptr, &n, nullptr);
+    std::vector<VkExtensionProperties> props(n);
+    if (n) enumExt(dev, nullptr, &n, props.data());
+    std::vector<std::string> missing;
+    for (const char* req : kRequired) {
+        bool found = false;
+        for (const auto& p : props)
+            if (std::strcmp(p.extensionName, req) == 0) { found = true; break; }
+        if (!found) missing.emplace_back(req);
+    }
+    return missing;
+}
+
+}  // namespace
+
+// Returns a String[] of the required extensions the most-capable physical device is missing
+// (empty => some device supports all of them => SYSTEM blit is usable), or null if the probe
+// could not run at all (no loader / no instance / no device) so the caller can treat it as
+// "unknown" rather than "incapable".
+extern "C" JNIEXPORT jobjectArray JNICALL
+Java_cn_classfun_droidvm_lib_natives_VulkanBlitProbe_nativeMissingBlitExtensions(JNIEnv* env,
+                                                                                 jclass) {
+    void* lib = dlopen("libvulkan.so", RTLD_NOW | RTLD_LOCAL);
+    if (!lib) { LOGW("dlopen libvulkan.so: %s", dlerror()); return nullptr; }
+
+    auto gipa = reinterpret_cast<PFN_vkGetInstanceProcAddr>(dlsym(lib, "vkGetInstanceProcAddr"));
+    if (!gipa) { dlclose(lib); return nullptr; }
+    auto createInstance =
+        reinterpret_cast<PFN_vkCreateInstance>(gipa(VK_NULL_HANDLE, "vkCreateInstance"));
+    if (!createInstance) { dlclose(lib); return nullptr; }
+
+    VkApplicationInfo appInfo{};
+    appInfo.sType = VK_STRUCTURE_TYPE_APPLICATION_INFO;
+    appInfo.pApplicationName = "droidvm-vkprobe";
+    appInfo.apiVersion = VK_API_VERSION_1_0;  // widest acceptance; ext query is version-agnostic
+    VkInstanceCreateInfo ici{};
+    ici.sType = VK_STRUCTURE_TYPE_INSTANCE_CREATE_INFO;
+    ici.pApplicationInfo = &appInfo;
+
+    VkInstance inst = VK_NULL_HANDLE;
+    if (createInstance(&ici, nullptr, &inst) != VK_SUCCESS || inst == VK_NULL_HANDLE) {
+        dlclose(lib);
+        return nullptr;
+    }
+
+    auto enumPhys =
+        reinterpret_cast<PFN_vkEnumeratePhysicalDevices>(gipa(inst, "vkEnumeratePhysicalDevices"));
+    auto enumExt = reinterpret_cast<PFN_vkEnumerateDeviceExtensionProperties>(
+        gipa(inst, "vkEnumerateDeviceExtensionProperties"));
+    auto destroyInstance =
+        reinterpret_cast<PFN_vkDestroyInstance>(gipa(inst, "vkDestroyInstance"));
+
+    std::vector<std::string> best;
+    bool haveBest = false;
+    if (enumPhys && enumExt) {
+        uint32_t nDev = 0;
+        enumPhys(inst, &nDev, nullptr);
+        std::vector<VkPhysicalDevice> devs(nDev);
+        if (nDev) enumPhys(inst, &nDev, devs.data());
+        for (VkPhysicalDevice dev : devs) {
+            std::vector<std::string> miss = deviceMissing(enumExt, dev);
+            if (miss.empty()) { best.clear(); haveBest = true; break; }
+            if (!haveBest || miss.size() < best.size()) { best = std::move(miss); haveBest = true; }
+        }
+    }
+
+    if (destroyInstance) destroyInstance(inst, nullptr);
+    dlclose(lib);
+
+    if (!haveBest) return nullptr;  // no physical device answered -> unknown
+
+    jclass strCls = env->FindClass("java/lang/String");
+    jobjectArray out = env->NewObjectArray(static_cast<jsize>(best.size()), strCls, nullptr);
+    for (jsize i = 0; i < static_cast<jsize>(best.size()); i++) {
+        jstring s = env->NewStringUTF(best[i].c_str());
+        env->SetObjectArrayElement(out, i, s);
+        env->DeleteLocalRef(s);
+    }
+    return out;
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/natives/VulkanBlitProbe.java b/app/src/main/java/cn/classfun/droidvm/lib/natives/VulkanBlitProbe.java
new file mode 100644
index 000000000..23ea627d6
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/lib/natives/VulkanBlitProbe.java
@@ -0,0 +1,64 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
+package cn.classfun.droidvm.lib.natives;
+
+import androidx.annotation.Nullable;
+
+/**
+ * Probes the platform's stock Vulkan driver for the extensions the native-display GPU blit needs.
+ *
+ * <p>The crosvm display bridge enables a fixed set of device extensions to import the virtio-gpu
+ * scanout dmabuf and blit it into the SurfaceControl buffer; a driver missing them cannot run the
+ * blit and the bridge falls back to a CPU copy. {@link cn.classfun.droidvm.lib.store.vm.GpuBlitProvider#SYSTEM}
+ * points that bridge at the SoC's own driver, so this lets the editor tell the user up front which
+ * extensions (if any) their platform lacks. It is a general capability check -- it inspects the
+ * real driver's extension list, with no per-vendor assumptions.
+ *
+ * <p>The result is a property of the phone, not of any VM, so it is probed once and cached.
+ */
+public final class VulkanBlitProbe {
+    private static final boolean LOADED;
+
+    static {
+        boolean ok;
+        try {
+            System.loadLibrary("vkprobe");
+            ok = true;
+        } catch (Throwable t) {
+            ok = false;
+        }
+        LOADED = ok;
+    }
+
+    private static boolean probed;
+    @Nullable private static String[] cached;
+
+    private VulkanBlitProbe() {}
+
+    /**
+     * Required blit extensions the system Vulkan driver is missing.
+     *
+     * @return an empty array if a physical device supports all of them (SYSTEM blit is usable);
+     *     a non-empty array naming the missing extensions; or {@code null} if the probe could not
+     *     run at all (no loader / no device), i.e. capability is unknown.
+     */
+    @Nullable
+    public static synchronized String[] missingBlitExtensions() {
+        if (!probed) {
+            String[] r = null;
+            if (LOADED) {
+                try {
+                    r = nativeMissingBlitExtensions();
+                } catch (Throwable t) {
+                    r = null;
+                }
+            }
+            cached = r;
+            probed = true;
+        }
+        return cached == null ? null : cached.clone();
+    }
+
+    private static native String[] nativeMissingBlitExtensions();
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/store/vm/DisplayTransportCap.java b/app/src/main/java/cn/classfun/droidvm/lib/store/vm/DisplayTransportCap.java
new file mode 100644
index 000000000..86212e5eb
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/lib/store/vm/DisplayTransportCap.java
@@ -0,0 +1,33 @@
+    /**
+     * The width granularity a screen whose stride is exactly {@code width * 4} needs before the
+     * GPU copy can take it, in pixels.
+     *
+     * <p>The blit imports the frame as a LINEAR dma-buf and turnip accepts one only when its row
+     * pitch is 64-byte aligned. A virtio-gpu scanout is allocated by the host and rounded up to
+     * whatever the importer wants, so it never meets this rule by accident -- it meets it by
+     * construction. simplefb's framebuffer is a window of guest memory the device tree already
+     * described, {@code width * 4} bytes per row with nothing to pad it with, so there the whole
+     * rule collapses to {@code width * 4 % 64 == 0}, which is this. Measured on device: 1400 falls
+     * back to the CPU copy, 1408 does not.</p>
+     */
+    public static final long GPU_COPY_WIDTH_ALIGN = 16;
+
+    /**
+     * Whether a GPU-copy ceiling on this edge will settle on the CPU copy anyway, because the
+     * screen is [width] pixels wide and the blit cannot import a frame that shape.
+     *
+     * <p>This is the negotiation working exactly as designed -- the ceiling only restricts
+     * downward, so nothing here is a misconfiguration and nothing needs refusing. But it is the one
+     * downgrade whose cause is a number the user typed rather than a rung the build has not
+     * reached, so it is the one worth saying out loud in the editor: a width off by eight pixels
+     * costs the whole GPU path and there is no other way to find that out.</p>
+     *
+     */
+    public static boolean cpuFallbackFromWidth(@NonNull String screenId,
+                                               @NonNull DisplayExporter exporter,
+                                               @NonNull DisplayTransportCap ceiling,
+                                               long width) {
+        if (!VMScreenConfig.ID_SIMPLEFB.equals(screenId)) return false;
+        return width % GPU_COPY_WIDTH_ALIGN != 0;
+    }
+
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/store/vm/GpuBlitProvider.java b/app/src/main/java/cn/classfun/droidvm/lib/store/vm/GpuBlitProvider.java
new file mode 100644
index 000000000..a6e88f287
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/lib/store/vm/GpuBlitProvider.java
@@ -0,0 +1,78 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
+package cn.classfun.droidvm.lib.store.vm;
+
+import androidx.annotation.NonNull;
+import androidx.annotation.StringRes;
+
+import cn.classfun.droidvm.R;
+import cn.classfun.droidvm.lib.store.enums.StringEnum;
+
+/**
+ * WHICH host Vulkan driver performs the native display's GPU blit -- import the virtio-gpu scanout
+ * dmabuf as a VkImage and blit it into the SurfaceControl buffer (the "1-gpu-copy" path in
+ * devices/src/virtio/gpu). This is a separate axis from the render {@link GpuProvider}: the driver
+ * that executes the guest's proxied calls and the driver that composites the scanout need not be
+ * the same one. Only the accelerated scanout uses it at all -- VNC and simplefb present through
+ * crosvm's CPU copy and ignore this entirely.
+ *
+ * <p>The Vulkan providers are peers, chosen and gated by the same rule: a provider is usable when
+ * it exposes the raw-dmabuf-import extensions the blit needs (VK_EXT_external_memory_dma_buf et
+ * al.). Turnip is not special -- it is simply the provider that passes on Adreno; the current
+ * platforms just happen to all be Qualcomm. {@link #SYSTEM} defers to the SoC's stock driver
+ * (offered only where a capability probe passes) and {@link #PANVK} to Mesa PanVK on Mali (not
+ * wired yet). {@link #OFF} forces crosvm's CPU copy (GPU_DISPLAY_COPY_MODE=cpu), the universal
+ * path every compositor accepts.
+ *
+ * <p>On any Vulkan provider the crosvm bridge probes the extensions itself and falls back to the
+ * CPU copy if they are missing, so a wrong choice degrades rather than breaks.
+ *
+ * <p>Persisted as {@code display_blit_provider}; only meaningful with the native display on the
+ * virtio-gpu backend.
+ */
+public enum GpuBlitProvider implements StringEnum {
+    TURNIP(0, "turnip", R.string.create_vm_gpu_api_vulkan_turnip),
+    PANVK(1, "panvk", R.string.create_vm_gpu_api_vulkan_panvk),
+    SYSTEM(2, "system", R.string.create_vm_gpu_api_vulkan_system),
+    OFF(3, "off", R.string.create_vm_display_blit_off);
+
+    private final int value;
+    private final String name;
+    private final @StringRes int stringId;
+
+    GpuBlitProvider(int value, String name, @StringRes int stringId) {
+        this.value = value;
+        this.name = name;
+        this.stringId = stringId;
+    }
+
+    @SuppressWarnings("unused")
+    public int getValue() {
+        return value;
+    }
+
+    @SuppressWarnings("unused")
+    public String getName() {
+        return name;
+    }
+
+    @NonNull
+    @SuppressWarnings("unused")
+    public static GpuBlitProvider fromValue(int value) {
+        for (var v : values())
+            if (v.value == value) return v;
+        return TURNIP;
+    }
+
+    /** True for the providers that are wired today. Only PanVK is still unbuilt. */
+    public boolean isImplemented() {
+        return this != PANVK;
+    }
+
+    @Override
+    @StringRes
+    public int getStringId() {
+        return stringId;
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/store/vm/VMScreenConfig.java b/app/src/main/java/cn/classfun/droidvm/lib/store/vm/VMScreenConfig.java
index 6a4aa7755..1efe3543a 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/store/vm/VMScreenConfig.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/store/vm/VMScreenConfig.java
@@ -1,2 +1,12 @@
     /** Initial SimpleFB polling rate shown when creating a VM. */
     public static final long NEW_VM_DEFAULT_POLL_HZ = 60;
+    /**
+     *
+     * <p>For the host-process settings that belong to that path rather than to one screen -- the
+     * Vulkan library the display bridge dlopens is the one -- because an environment variable is
+     * process-wide and cannot be set per screen even when the thing it configures runs per screen.
+     */
+        for (var screen : boundOf(config))
+        return false;
+    }
+
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/graphics/ScreenBindingRow.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/graphics/ScreenBindingRow.java
index e52ac8818..d1bd7c30d 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/graphics/ScreenBindingRow.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/graphics/ScreenBindingRow.java
@@ -1 +1,16 @@
+import cn.classfun.droidvm.ui.widgets.row.TextRowWidget;
+    private final TextRowWidget rowWidthCpuFallback;
+        rowWidthCpuFallback = block.findViewById(R.id.row_screen_width_cpu_fallback);
             ? VMScreenConfig.DEFAULT_REFRESH_RATE : VMScreenConfig.NEW_VM_DEFAULT_POLL_HZ);
+        // The one thing the transport ceiling cannot promise: a width whose stride the blit's
+        // dma-buf import will not take settles a rung lower, silently, and the only clue is a line
+        // in the console. Say so beside the field that causes it. Nothing is refused and nothing is
+        // rounded -- the ceiling is honoured either way, it just lands on the CPU copy.
+        var transport = currentTransport();
+        rowWidthCpuFallback.setVisibility(
+            enabled && transport != null && DisplayTransportCap.cpuFallbackFromWidth(
+    }
+
+    /**
+     */
+        }
diff --git a/app/src/main/res/layout/partial_vm_screen_binding.xml b/app/src/main/res/layout/partial_vm_screen_binding.xml
new file mode 100644
index 000000000..19ee70554
--- /dev/null
+++ b/app/src/main/res/layout/partial_vm_screen_binding.xml
@@ -0,0 +1,17 @@
+        <!-- Not an error and not a refusal: the width above is a legal one, it just costs the GPU
+             copy. simplefb's stride is width*4 with nothing to pad it, and the blit's dma-buf
+             import wants a 64-byte pitch, so the transport quietly settles one rung lower for a
+             width that is not a multiple of 16. Shown in place rather than as a dialog, and the
+             value is never snapped for the user: moving somebody's resolution behind their back is
+             worse than the fallback it would avoid. ScreenBindingRow decides when it applies; only
+             the simplefb include ever shows it. -->
+        <cn.classfun.droidvm.ui.widgets.row.TextRowWidget
+            android:id="@+id/row_screen_width_cpu_fallback"
+            android:layout_width="match_parent"
+            android:layout_height="wrap_content"
+            android:icon="@drawable/ic_info"
+            android:subtitle="@string/create_vm_screen_width_cpu_fallback_desc"
+            android:text="@string/create_vm_screen_width_cpu_fallback"
+            android:visibility="gone"
+            tools:visibility="visible" />
+
diff --git a/app/src/test/java/cn/classfun/droidvm/lib/store/vm/DisplayTransportCapTest.java b/app/src/test/java/cn/classfun/droidvm/lib/store/vm/DisplayTransportCapTest.java
new file mode 100644
index 000000000..e7987bb13
--- /dev/null
+++ b/app/src/test/java/cn/classfun/droidvm/lib/store/vm/DisplayTransportCapTest.java
@@ -0,0 +1,53 @@
+ *
+ * <p>Two of the predicates below belong to the daemon and the editor rather than to this enum, and
+ * are held here for the same reason: they decide whether a rung the ladder offers is actually
+ * climbed at run time -- one from the VM's bindings, one from a number the user typed -- and
+ * neither of their owners can be stood up without a device.</p>
+
+    @Test
+        var item = DataItem.newObject();
+
+        var fb = VMScreenConfig.of(item, VMScreenConfig.ID_SIMPLEFB);
+        fb.setEnabled(true);
+        fb.setExporter(DisplayExporter.NATIVE);
+
+        // The switch is the device, so a binding on a screen the VM does not have is not one.
+        fb.setEnabled(false);
+
+        fb.setEnabled(true);
+        fb.setExporter(DisplayExporter.VNC);
+        var gpu0 = VMScreenConfig.of(item, VMScreenConfig.ID_GPU0);
+        gpu0.setEnabled(true);
+        gpu0.setExporter(DisplayExporter.VNC);
+        gpu0.setExporter(DisplayExporter.NATIVE);
+    }
+
+    @Test
+    public void aSimplefbWidthOffTheGrainSpendsTheGpuCopy() {
+        // The editor's warning condition. simplefb's pitch is width*4 with nothing padding it and
+        // the blit's LINEAR dma-buf import wants 64 bytes, so the rule is a width that is a
+        // multiple of 16. Measured on device: 1400 falls back to the CPU copy, 1408 does not.
+        assertTrue(DisplayTransportCap.cpuFallbackFromWidth(
+            FB, DisplayExporter.NATIVE, DisplayTransportCap.GPU, 1400));
+        assertFalse(DisplayTransportCap.cpuFallbackFromWidth(
+            FB, DisplayExporter.NATIVE, DisplayTransportCap.GPU, 1408));
+
+        // A ceiling already at the bottom rung loses nothing to the width, so there is nothing to
+        // tell the user -- the CPU copy is what was asked for.
+        assertFalse(DisplayTransportCap.cpuFallbackFromWidth(
+            FB, DisplayExporter.NATIVE, DisplayTransportCap.CPU, 1400));
+
+        // The virtio-gpu scanout is allocated on the host and rounded up to what the importer
+        // wants, so it meets the rule by construction and the same width costs it nothing.
+        assertFalse(DisplayTransportCap.cpuFallbackFromWidth(
+            GPU0, DisplayExporter.NATIVE, DisplayTransportCap.GPU, 1400));
+
+            FB, DisplayExporter.VNC, DisplayTransportCap.GPU, 1400));
+        assertFalse(DisplayTransportCap.cpuFallbackFromWidth(
+            FB, DisplayExporter.NONE, DisplayTransportCap.GPU, 1400));
+
+        // What the editor hands over for a field that is empty or half-typed: not yet a width, so
+        // not yet anything to warn about. The geometry validator is what has something to say.
+        assertFalse(DisplayTransportCap.cpuFallbackFromWidth(
+            FB, DisplayExporter.NATIVE, DisplayTransportCap.GPU, 0));
+    }

From c9274b8a86518902dfbcf3af3853a49452c3d0bf Mon Sep 17 00:00:00 2001
From: HuJK <gh@hujk.org>
Date: Sun, 30 Aug 2026 13:37:18 +0800
Subject: [PATCH 146/182] display: a VM has screens, and each screen names its
 own exporter

The graphics tab described one display with a GPU bolted to the side of it: one
width, one height, one refresh rate for whichever screen you happened to be
looking at, and a VM-wide input path underneath. Two display devices with one
geometry between them is one number answering two questions -- a 1400x1050
virtio-gpu mode and a 1280x720 framebuffer are an ordinary pair and the schema
could not say it.

A screen is now an object with its own size, its own rate, and the exporter
that shows it. The virtio-gpu screen takes a refresh rate because that is a
field of a mode the guest is told about; simplefb takes a poll rate instead,
because nothing in that device announces a frame -- the guest maps the region
write-combining and no write traps -- so the rate the host samples at is the
only thing that decides when a picture exists. Size and rate are picked from
menus of what the device can actually do rather than typed.

Input follows the scanout rather than the VM. A tablet and a keyboard belong to
the screen being exported, so two screens get two of each and the one you are
touching is the one that receives; the VM-wide input set retires with the
arbitration it belonged to. The transport between a screen and its exporter is
negotiated as a ceiling, not a demand: the source says what it can produce, the
sink what it can consume, the highest rung both reach wins, and a user's choice
only restricts downward -- so every value is honourable and nothing silently
downgrades. Rungs that are merely unbuilt are listed and refused with a note so
the ladder reads whole.
---
 .../display/INativeDisplayRootService.aidl    |   9 +-
 .../daemon/display/NativeDisplayBinder.java   |  15 +-
 .../ipc/network/ListHostAddressesHandler.java |  34 +
 .../droidvm/daemon/ipc/vm/InputHandler.java   |  10 +-
 .../droidvm/daemon/ipc/vm/VncInfoHandler.java |  22 +-
 .../network/backend/DefaultRouterWatcher.java |  17 +-
 .../network/backend/HostAddressScan.java      | 135 ++++
 .../droidvm/daemon/vm/VMBackendInstance.java  |   6 +-
 .../droidvm/daemon/vm/VMInstance.java         |  57 +-
 .../vm/backend/NativeDisplayInputBridge.java  | 262 ++++---
 .../vm/backend/QemuBackendInstance.java       |   4 +
 .../droidvm/lib/store/enums/EnumPicker.java   |  59 +-
 .../droidvm/lib/store/vm/DisplayBackend.java  |  52 +-
 .../droidvm/lib/store/vm/DisplayExporter.java |  69 ++
 .../lib/store/vm/DisplayTransportCap.java     | 181 +++++
 .../droidvm/lib/store/vm/NativeDisplay.java   | 276 ++++++-
 .../droidvm/lib/store/vm/VMConfig.java        |  21 +-
 .../droidvm/lib/store/vm/VMScreenConfig.java  | 624 ++++++++++++++++
 .../ui/vm/console/VMConsoleRouter.java        |  68 +-
 .../display/VMNativeDisplayActivity.java      |  38 +-
 .../nativedisplay/input/DirectInputSink.java  |  20 +-
 .../vm/display/vnc/base/BaseVncActivity.java  | 100 +--
 .../vnc/display/VMVncDisplayActivity.java     |  35 +
 .../ui/vm/edit/graphics/ScreenBindingRow.java | 687 ++++++++++++++++++
 .../graphics/ScreenResolutionOptions.java     |  95 +++
 .../vm/edit/graphics/VMEditGraphicsTab.java   |  49 +-
 .../ui/vm/edit/graphics/VncHostOptions.java   | 195 +++++
 .../droidvm/ui/vm/info/ConsoleButton.java     |  66 +-
 .../ui/widgets/row/ChooseRowWidget.java       |  12 +
 .../ui/widgets/row/SwitchRowWidget.java       |  10 +
 .../ui/widgets/tools/PickerButtonWidget.java  |  17 +
 .../main/res/layout/dialog_screen_rate.xml    |  30 +
 .../res/layout/dialog_screen_resolution.xml   |  48 ++
 .../main/res/layout/dialog_vnc_external.xml   |  28 +-
 app/src/main/res/layout/dialog_vnc_host.xml   |  30 +
 app/src/main/res/layout/dialog_vnc_url.xml    |  68 --
 .../res/layout/partial_vm_screen_binding.xml  | 296 ++++++++
 .../main/res/menu/menu_vnc_display_menu.xml   |  10 +-
 .../res/menu/menu_vnc_presentation_menu.xml   |   5 -
 .../lib/store/vm/DisplayTransportCapTest.java | 133 ++++
 .../lib/store/vm/VMCreationDefaultsTest.java  |  71 ++
 .../lib/store/vm/VMScreenMigrationTest.java   | 507 +++++++++++++
 .../graphics/ScreenResolutionOptionsTest.java |  83 +++
 .../vm/edit/graphics/VncHostOptionsTest.java  | 104 +++
 44 files changed, 4263 insertions(+), 395 deletions(-)
 create mode 100644 app/src/main/java/cn/classfun/droidvm/daemon/ipc/network/ListHostAddressesHandler.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/daemon/network/backend/HostAddressScan.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/lib/store/vm/DisplayExporter.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/ui/vm/edit/graphics/ScreenResolutionOptions.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/ui/vm/edit/graphics/VncHostOptions.java
 create mode 100644 app/src/main/res/layout/dialog_screen_rate.xml
 create mode 100644 app/src/main/res/layout/dialog_screen_resolution.xml
 create mode 100644 app/src/main/res/layout/dialog_vnc_host.xml
 delete mode 100644 app/src/main/res/layout/dialog_vnc_url.xml
 create mode 100644 app/src/test/java/cn/classfun/droidvm/lib/store/vm/VMScreenMigrationTest.java
 create mode 100644 app/src/test/java/cn/classfun/droidvm/ui/vm/edit/graphics/ScreenResolutionOptionsTest.java
 create mode 100644 app/src/test/java/cn/classfun/droidvm/ui/vm/edit/graphics/VncHostOptionsTest.java

diff --git a/app/src/main/aidl/cn/classfun/droidvm/display/INativeDisplayRootService.aidl b/app/src/main/aidl/cn/classfun/droidvm/display/INativeDisplayRootService.aidl
index 16ec92ff0..0ff74695d 100644
--- a/app/src/main/aidl/cn/classfun/droidvm/display/INativeDisplayRootService.aidl
+++ b/app/src/main/aidl/cn/classfun/droidvm/display/INativeDisplayRootService.aidl
@@ -22,6 +22,13 @@ interface INativeDisplayRootService {
      * sidestepping both the SELinux 'connectto' denial (app->su socket) and the 'fd use' denial (app
      * receiving an su-owned fd). Returns true if written, false on any failure so the caller can fall
      * back to the vm_input IPC path.
+     *
+     * [screenId] is the screen the console sending the bytes is showing. The absolute channels
+     * (multi-touch, tablet) have one device per screen, because their coordinates only mean
+     * anything under one output's geometry, so the screen is what picks the device; the keyboard
+     * and the relative pointer are VM-wide and ignore it. A screen whose absolute input is
+     * switched off has no such device, and this returns false rather than sending the events to
+     * some other screen.
      */
-    boolean writeInput(String vmId, int channel, in byte[] data);
+    boolean writeInput(String vmId, String screenId, int channel, in byte[] data);
 }
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/display/NativeDisplayBinder.java b/app/src/main/java/cn/classfun/droidvm/daemon/display/NativeDisplayBinder.java
index 25b54b144..649763cea 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/display/NativeDisplayBinder.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/display/NativeDisplayBinder.java
@@ -27,8 +27,9 @@
  *   <li>{@link INativeDisplayRootService#waitForDisplayBinder(String)} - look up the per-VM
  *       ICrosvmAndroidDisplayService binder crosvm registers via
  *       {@code --android-display-service <serviceName>} (an untrusted_app can't do this lookup).</li>
- *   <li>{@link INativeDisplayRootService#writeInput(String, int, byte[])} - write evdev straight to
- *       the crosvm input socket the daemon owns (no extra socket hop), by looking up the VM.</li>
+ *   <li>{@link INativeDisplayRootService#writeInput(String, String, int, byte[])} - write evdev
+ *       straight to the crosvm input socket the daemon owns (no extra socket hop), by looking up
+ *       the VM and the screen the console sending it is showing.</li>
  * </ul>
  *
  * The binder can't ride the daemon's TCP/JSON-RPC channel, so it is broadcast to the UI through
@@ -63,11 +64,11 @@ public IBinder waitForDisplayBinder(String serviceName) {
             }
 
             @Override
-            public boolean writeInput(String vmId, int channel, byte[] data) {
+            public boolean writeInput(String vmId, String screenId, int channel, byte[] data) {
                 if (vmId == null || data == null || data.length == 0) return false;
                 var inst = ctx.getVMs().findById(vmId);
                 if (inst == null) return false;
-                return inst.writeNativeInput(channel, data);
+                return inst.writeNativeInput(screenId == null ? "" : screenId, channel, data);
             }
         };
     }
@@ -136,6 +137,12 @@ private static IBinder pollForService(@NonNull String name) {
      * so they wait as before.
      */
     private static boolean vmCouldRegister(@NonNull ServerContext ctx, @NonNull String serviceName) {
+        // NativeDisplay owns both halves of the name -- the VM's channel root and the screen id
+        // appended to it -- so the reverse mapping lives there too rather than as a prefix strip
+        // written out again here, which is how it would silently stop matching.
+        var vmId = NativeDisplay.vmIdFromServiceName(serviceName);
+        if (vmId.isEmpty()) return true;
+        var inst = ctx.getVMs().findById(vmId);
         if (inst == null) return true;
         var state = inst.getState();
         return state == VMState.RUNNING || state == VMState.STARTING || state == VMState.REBOOTING;
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/ipc/network/ListHostAddressesHandler.java b/app/src/main/java/cn/classfun/droidvm/daemon/ipc/network/ListHostAddressesHandler.java
new file mode 100644
index 000000000..b056e965e
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/ipc/network/ListHostAddressesHandler.java
@@ -0,0 +1,34 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
+package cn.classfun.droidvm.daemon.ipc.network;
+
+import androidx.annotation.NonNull;
+
+import com.google.auto.service.AutoService;
+
+import cn.classfun.droidvm.daemon.network.backend.HostAddressScan;
+import cn.classfun.droidvm.daemon.server.ClientRequest;
+import cn.classfun.droidvm.daemon.server.RequestHandler;
+
+/**
+ * The phone's own addresses, for a UI offering somewhere to listen.
+ *
+ * <p>Asked of the daemon rather than enumerated in the app, because the two addresses that must
+ * not appear -- a pseudo-bridged guest's IP parked on the uplink, and the host-route-only shape
+ * pbridge parks it in -- are netlink details no unprivileged interface enumeration can see. See
+ * {@link HostAddressScan#list()} for the whole policy.</p>
+ */
+@AutoService(RequestHandler.class)
+public final class ListHostAddressesHandler extends RequestHandler {
+    @NonNull
+    @Override
+    public String getName() {
+        return "network_list_host_addresses";
+    }
+
+    @Override
+    public void handle(@NonNull ClientRequest request) throws Exception {
+        request.res().put("data", HostAddressScan.list());
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/ipc/vm/InputHandler.java b/app/src/main/java/cn/classfun/droidvm/daemon/ipc/vm/InputHandler.java
index 0bcc6c209..04e692143 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/ipc/vm/InputHandler.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/ipc/vm/InputHandler.java
@@ -19,7 +19,9 @@
  * Forwards native-display input from the UI to the per-VM crosvm process. The daemon is the only
  * listener on crosvm's --input sockets (it pre-binds them before exec'ing crosvm), so it is the
  * only process that can deliver evdev to the guest; the UI sends bytes here instead of writing a
- * socket directly. Params: vm_id, channel (NativeDisplay constants), data (base64 evdev records).
+ * socket directly. Params: vm_id, screen (the screen the sending console shows, which picks
+ * between two screens' absolute devices; ignored by the VM-wide keyboard and relative pointer),
+ * channel (NativeDisplay constants), data (base64 evdev records).
  */
 @AutoService(RequestHandler.class)
 public final class InputHandler extends RequestHandler {
@@ -35,13 +37,15 @@ public void handle(@NonNull ClientRequest request) throws Exception {
         var vmId = params.optString("vm_id", "");
         if (vmId.isEmpty())
             throw new RequestException("missing vm_id");
+        var screenId = params.optString("screen", "");
         var channel = params.optInt("channel", -1);
         var data = Base64.decode(params.optString("data", ""), Base64.NO_WRAP);
         var inst = request.getContext().getVMs().findById(vmId);
         if (inst == null)
             throw new RequestException(fmt("VM not found: %s", vmId));
         // Report whether the bytes actually reached crosvm so the UI can tell a silent drop (peer
-        // not connected yet, bad channel, VM not running) from a real delivery.
-        request.res().put("delivered", inst.writeNativeInput(channel, data));
+        // not connected yet, bad channel, no absolute device on that screen, VM not running) from
+        // a real delivery.
+        request.res().put("delivered", inst.writeNativeInput(screenId, channel, data));
     }
 }
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/ipc/vm/VncInfoHandler.java b/app/src/main/java/cn/classfun/droidvm/daemon/ipc/vm/VncInfoHandler.java
index 21329dd48..c3212cff2 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/ipc/vm/VncInfoHandler.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/ipc/vm/VncInfoHandler.java
@@ -10,6 +10,8 @@
 import cn.classfun.droidvm.daemon.server.ClientRequest;
 import cn.classfun.droidvm.daemon.server.RequestException;
 import cn.classfun.droidvm.daemon.server.RequestHandler;
+import cn.classfun.droidvm.lib.store.vm.DisplayExporter;
+import cn.classfun.droidvm.lib.store.vm.VMScreenConfig;
 
 @AutoService(RequestHandler.class)
 public final class VncInfoHandler extends RequestHandler {
@@ -28,13 +30,25 @@ public void handle(@NonNull ClientRequest request) throws Exception {
         var inst = request.getContext().getVMs().findById(vmId);
         if (inst == null)
             throw new RequestException("VM not found");
-        if (!inst.item.optBoolean("vnc_enabled", false))
+        // Which screen's server. A client that names none gets the first VNC-bound screen, which
+        // is the only one a single-screen VM has and the one its default view opens.
+        var screenId = params.optString("screen", "");
+        VMScreenConfig screen = null;
+        for (var candidate : VMScreenConfig.listOf(inst.item)) {
+            if (!candidate.isEnabled() || candidate.getExporter() != DisplayExporter.VNC) continue;
+            if (screenId.isEmpty() || screenId.equals(candidate.id)) {
+                screen = candidate;
+                break;
+            }
+        }
+        if (screen == null)
             throw new RequestException("VNC is not enabled for this VM");
         var res = request.res();
-        var host = inst.item.optString("vnc_host", "");
+        var host = screen.getVncHost();
+        res.put("screen", screen.id);
         res.put("host", !host.isEmpty() ? host : "127.0.0.1");
-        res.put("port", inst.item.optLong("vnc_port", -1));
-        res.put("password", inst.item.optString("vnc_password", ""));
+        res.put("port", screen.getVncPort());
+        res.put("password", screen.getVncPassword());
         // When VNC binds to the IPv4 wildcard, resolve the phone's own LAN
         // address here from the router watcher's filtered host-IP set, which
         // already drops pbridge offload-proxy addresses parked on the uplink.
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/DefaultRouterWatcher.java b/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/DefaultRouterWatcher.java
index 4f5a86474..38a2f5e21 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/DefaultRouterWatcher.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/DefaultRouterWatcher.java
@@ -43,17 +43,14 @@ public final class DefaultRouterWatcher {
      */
     private static final int RULE_PRIORITY_BASE = 9000;
     /**
-     * Interface-name prefixes whose IPv4 addresses count as the phone's own
-     * reachable IPs for port-forward DNAT scoping: Wi-Fi, cellular, VPN,
-     * ethernet, and hotspot/USB/BT tethering. Passed to netbox, which also
-     * drops bridge devices and pbridge-offload addresses. Cellular names other
-     * than rmnet_data (ccmni, pdp_ip...) are intentionally not matched -- same
-     * assumption the iptables EXT_IFACES list already makes.
+     * The prefixes whose addresses count as the phone's own, for port-forward
+     * DNAT scoping. Passed to netbox, which also drops bridge devices and
+     * pbridge-offload addresses. Shared with {@link HostAddressScan}, which
+     * answers the same question for the VNC listen-address picker and applies
+     * the rest of the same policy in Java; the list lives there.
      */
-    private static final List<String> HOST_IFACE_PREFIXES = List.of(
-        "wlan", "rmnet_data", "tun", "eth",
-        "ap", "swlan", "softap", "rndis", "usb", "bt-pan"
-    );
+    private static final List<String> HOST_IFACE_PREFIXES =
+        HostAddressScan.HOST_IFACE_PREFIXES;
     private final ServerContext context;
     private final List<Runnable> listeners = new CopyOnWriteArrayList<>();
     private final List<Runnable> hostIpListeners = new CopyOnWriteArrayList<>();
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/HostAddressScan.java b/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/HostAddressScan.java
new file mode 100644
index 000000000..a1964e9c4
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/network/backend/HostAddressScan.java
@@ -0,0 +1,135 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
+package cn.classfun.droidvm.daemon.network.backend;
+
+import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
+
+import android.util.Log;
+
+import androidx.annotation.NonNull;
+
+import org.json.JSONArray;
+import org.json.JSONObject;
+
+import java.util.HashSet;
+import java.util.List;
+import java.util.Set;
+
+import cn.classfun.droidvm.lib.Constants;
+
+/**
+ * The phone's own addresses, as a list something can be asked to listen on.
+ *
+ * <p>Both families, unlike {@link Netbox#hostIpv4}, and one shot rather than a watched set: this
+ * answers a picker that is open for a few seconds, not a firewall rule that has to follow the
+ * network. The policy is otherwise the same one, and lives here because the daemon is the only
+ * side that can apply it -- see the two exclusions below, neither of which
+ * {@code java.net.NetworkInterface} can see.</p>
+ */
+public final class HostAddressScan {
+    private static final String TAG = "HostAddressScan";
+
+    /**
+     * Interface-name prefixes whose addresses count as the phone's own reachable IPs: Wi-Fi,
+     * cellular, VPN, ethernet, and hotspot/USB/BT tethering. Cellular names other than
+     * {@code rmnet_data} (ccmni, pdp_ip...) are intentionally not matched -- the same assumption
+     * the iptables EXT_IFACES list already makes.
+     *
+     * <p>One list, two readers: the port-forward DNAT scoping this was written for (through
+     * netbox's own {@code host-ips} policy) and the VNC listen-address picker. They are asking the
+     * same question, so they must not answer it from two lists.</p>
+     */
+    public static final List<String> HOST_IFACE_PREFIXES = List.of(
+        "wlan", "rmnet_data", "tun", "eth",
+        "ap", "swlan", "softap", "rndis", "usb", "bt-pan"
+    );
+
+    private HostAddressScan() {
+    }
+
+    /**
+     * Every address the phone itself holds, as {@code [{addr, ifname, family}]} -- v4 and v6,
+     * global scope only, in netlink's dump order. Empty on any failure, which the caller shows as
+     * "nothing was found" rather than as an error: the picker's two fixed entries and its custom
+     * dialog work without this list.
+     *
+     * <p>Four things are dropped, and the first two are the whole reason this is not done in the
+     * app process:</p>
+     *
+     * <ul>
+     *   <li>pbridge's offload-proxy addresses. An L2 pseudo-bridged guest's IP is parked on the
+     *   phone's uplink so the Wi-Fi firmware answers ARP/NS for it, which makes it look exactly
+     *   like an address of the phone's own. It is tagged with {@link Constants#PBRIDGE_OFFLOAD_MAGIC}
+     *   as IFA_RT_PRIORITY for precisely this -- and that tag is netlink-only, invisible to
+     *   {@code java.net.NetworkInterface} and to OEM {@code ip -j} builds too old to emit it.</li>
+     *   <li>a host-route-only address ({@code noprefixroute} on a /32 or /128), which is the shape
+     *   pbridge parks, so a proxy address from a build that predates the tag is caught anyway. Both
+     *   halves are required: a plain /32 is how plenty of cellular interfaces are configured, and
+     *   dropping those would lose the phone's real address.</li>
+     *   <li>IPv6 privacy addresses ({@code temporary}). There are normally several at once --
+     *   the live one plus however many are still inside their valid lifetime and deprecated -- and
+     *   every one of them is replaced within hours, so naming one in a config is naming something
+     *   that will be gone. The address kept is the stable one the phone keeps alongside them. The
+     *   flag is IFA_F_SECONDARY, which on v4 means an ordinary secondary address and is not
+     *   dropped; netbox reports the v6 reading only.</li>
+     *   <li>bridge devices -- ours, holding a VM network's gateway address rather than the
+     *   phone's.</li>
+     *   <li>anything outside {@link #HOST_IFACE_PREFIXES}, and any address that is not global
+     *   scope: that is where link-local (fe80::/10, 169.254/16) and loopback go, neither of which
+     *   is an address the phone can be reached at.</li>
+     * </ul>
+     */
+    @NonNull
+    public static JSONArray list() {
+        var out = new JSONArray();
+        var bridges = bridgeNames();
+        var rows = Netbox.addrList(null, null);
+        for (int i = 0; i < rows.length(); i++) {
+            var r = rows.optJSONObject(i);
+            if (r == null) continue;
+            var addr = r.optString("local", "");
+            var ifname = r.optString("ifname", "");
+            if (addr.isEmpty() || ifname.isEmpty()) continue;
+            if (!"global".equals(r.optString("scope", ""))) continue;
+            if (bridges.contains(ifname)) continue;
+            if (!isHostIface(ifname)) continue;
+            if (r.optLong("metric", 0) == Constants.PBRIDGE_OFFLOAD_MAGIC) continue;
+            var family = r.optInt("family", 0);
+            if (family != 4 && family != 6) continue;
+            if (r.optBoolean("temporary", false)) continue;
+            var prefixlen = r.optInt("prefixlen", 0);
+            if (r.optBoolean("noprefixroute", false)
+                && prefixlen == (family == 4 ? 32 : 128)) continue;
+            try {
+                var entry = new JSONObject();
+                entry.put("addr", addr);
+                entry.put("ifname", ifname);
+                entry.put("family", family);
+                out.put(entry);
+            } catch (Exception e) {
+                Log.w(TAG, fmt("Failed to build host address entry for %s", addr), e);
+            }
+        }
+        return out;
+    }
+
+    private static boolean isHostIface(@NonNull String ifname) {
+        for (var prefix : HOST_IFACE_PREFIXES)
+            if (ifname.startsWith(prefix)) return true;
+        return false;
+    }
+
+    @NonNull
+    private static Set<String> bridgeNames() {
+        var names = new HashSet<String>();
+        var rows = Netbox.linkList(null, true);
+        for (int i = 0; i < rows.length(); i++) {
+            var r = rows.optJSONObject(i);
+            if (r == null) continue;
+            var name = r.optString("ifname", "");
+            if (!name.isEmpty()) names.add(name);
+        }
+        return names;
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/vm/VMBackendInstance.java b/app/src/main/java/cn/classfun/droidvm/daemon/vm/VMBackendInstance.java
index 879bd282e..6cb90ae30 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/vm/VMBackendInstance.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/vm/VMBackendInstance.java
@@ -51,9 +51,11 @@ protected VMBackendInstance(@NonNull ServerContext context, @NonNull VMConfig co
 
     /**
      * Writes pre-encoded evdev bytes to the running backend's native-display input channel on
-     * behalf of the UI. Only the crosvm backend implements this; others report not-delivered.
+     * behalf of the UI. [screenId] is the screen the console sending them is showing; it selects
+     * the device for the absolute channels and is ignored by the VM-wide ones. Only the crosvm
+     * backend implements this; others report not-delivered.
      */
-    public boolean writeNativeInput(int channel, @NonNull byte[] data) {
+    public boolean writeNativeInput(@NonNull String screenId, int channel, @NonNull byte[] data) {
         return false;
     }
 
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/vm/VMInstance.java b/app/src/main/java/cn/classfun/droidvm/daemon/vm/VMInstance.java
index 69c5c6a83..44bdfa1e6 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/vm/VMInstance.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/vm/VMInstance.java
@@ -34,6 +34,8 @@
 import cn.classfun.droidvm.lib.natives.UnixHelper;
 import cn.classfun.droidvm.lib.store.base.DataItem;
 import cn.classfun.droidvm.lib.store.network.NetworkState;
+import cn.classfun.droidvm.lib.store.vm.DisplayExporter;
+import cn.classfun.droidvm.lib.store.vm.VMScreenConfig;
 import cn.classfun.droidvm.lib.store.vm.VMBackend;
 import cn.classfun.droidvm.lib.store.vm.VMConfig;
 import cn.classfun.droidvm.lib.store.vm.VMNicConfig;
@@ -98,12 +100,16 @@ synchronized VMBackendInstance getBackendInstance() {
         return this.backendInstance;
     }
 
-    /** Forwards UI-sent evdev bytes to the running backend's native-display input channel. */
-    public boolean writeNativeInput(int channel, @NonNull byte[] data) {
+    /**
+     * Forwards UI-sent evdev bytes to the running backend's native-display input channel for
+     * [screenId] -- the screen the console that sent them is showing, which is what picks between
+     * two screens' absolute devices.
+     */
+    public boolean writeNativeInput(@NonNull String screenId, int channel, @NonNull byte[] data) {
         // Only a running VM has a backend with bound input sockets; skip otherwise so a stale or
         // spoofed input call can't lazily create an idle backend instance.
         if (state != VMState.RUNNING) return false;
-        return getBackendInstance().writeNativeInput(channel, data);
+        return getBackendInstance().writeNativeInput(screenId, channel, data);
     }
 
     @NonNull
@@ -175,7 +181,7 @@ public boolean start() {
         }
         joinThreads(1000);
         if (!setupTaps()) return false;
-        if (item.optBoolean("vnc_enabled", false)) resolveVncConfig();
+        resolveVncConfig();
         stoppedByUser = false;
         exitCode = -1;
         setState(VMState.STARTING);
@@ -261,20 +267,39 @@ private void detachNic(@NonNull VMNicConfig nic) {
         }
     }
 
+    /**
+     * Fills in whatever each VNC-bound screen left unset before the VM starts.
+     *
+     * <p>Per screen, not per VM: two screens exporting over VNC are two servers, and crosvm
+     * refuses to start when they land on the same port -- so an unset port is resolved once for
+     * each of them, and the one just handed out is held against the next lookup because it is not
+     * bound yet and would otherwise still look free.</p>
+     */
     private void resolveVncConfig() {
-        if (item.optLong("vnc_port", -1) <= 0) {
-            int port = generateRandomAvailablePort();
-            if (port > 0) {
-                item.set("vnc_port", port);
-                Log.i(TAG, fmt("VM %s: auto-assigned VNC port %d", getName(), port));
-            } else {
-                Log.e(TAG, fmt("VM %s: failed to find available VNC port", getName()));
+        var taken = new ArrayList<Long>();
+        for (var screen : VMScreenConfig.listOf(item)) {
+            if (!screen.isEnabled() || screen.getExporter() != DisplayExporter.VNC) continue;
+            var port = screen.getVncPort();
+            if (port <= 0 || taken.contains(port)) {
+                int fresh = generateRandomAvailablePort();
+                while (fresh > 0 && taken.contains((long) fresh))
+                    fresh = generateRandomAvailablePort();
+                if (fresh > 0) {
+                    screen.setVncPort(fresh);
+                    port = fresh;
+                    Log.i(TAG, fmt("VM %s: auto-assigned VNC port %d for screen %s",
+                        getName(), fresh, screen.id));
+                } else {
+                    Log.e(TAG, fmt("VM %s: failed to find available VNC port for screen %s",
+                        getName(), screen.id));
+                }
+            }
+            if (port > 0) taken.add(port);
+            if (screen.isVncPasswordAuth() && screen.getVncPassword().isEmpty()) {
+                screen.setVncPassword(generateRandomPassword(8));
+                Log.i(TAG, fmt("VM %s: auto-generated VNC password for screen %s",
+                    getName(), screen.id));
             }
-        }
-        if (item.optBoolean("vnc_password_auth", false) && item.optString("vnc_password", "").isEmpty()) {
-            var password = generateRandomPassword(8);
-            item.set("vnc_password", password);
-            Log.i(TAG, fmt("VM %s: auto-generated VNC password", getName()));
         }
     }
 
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/NativeDisplayInputBridge.java b/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/NativeDisplayInputBridge.java
index a6707065c..015a16a34 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/NativeDisplayInputBridge.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/NativeDisplayInputBridge.java
@@ -9,91 +9,172 @@
 import android.util.Log;
 
 import androidx.annotation.NonNull;
+import androidx.annotation.Nullable;
 
 import java.io.IOException;
+import java.util.LinkedHashMap;
+import java.util.List;
+import java.util.Map;
 
 import cn.classfun.droidvm.lib.natives.UnixHelper;
 import cn.classfun.droidvm.lib.network.FDSocket;
 import cn.classfun.droidvm.lib.store.vm.NativeDisplay;
 
 /**
- * Owns the per-VM native-display input sockets for one crosvm instance. crosvm's --input
+ * Owns the native-display input sockets for one crosvm instance. crosvm's --input
  * <kind>[path=...] connects to a unix socket whose inode must already exist (crosvm is the
  * *client*), so the daemon is the only process that can both bind the socket before crosvm starts
  * and stay alive to feed it. This bridge pre-binds + accepts the crosvm-facing sockets; evdev from
- * the UI arrives via {@link #writeNativeInput(int, byte[])} - called either on the daemon's
+ * the UI arrives via {@link #writeNativeInput(String, int, byte[])} - called either on the daemon's
  * native-display broker binder thread (touch hot path) or from the vm_input IPC handler - and is
  * written straight to the matching crosvm peer. {@link CrosvmBackendInstance} drives the lifecycle:
- * {@link #startListening(String)} from start() and {@link #release()} from cleanup().
+ * {@link #startListening(String, List, List)} from start() and {@link #release()} from cleanup().
+ *
+ * <p>The socket set is not one per channel: the relative pointer is VM-wide, while multi-touch,
+ * the absolute pointer and the keyboard exist once per screen that has them, so a slot is a
+ * (screen, channel) pair and the screens that get one are decided by the config. Everything here
+ * is therefore keyed rather than indexed -- a flat channel-indexed array cannot say which screen a
+ * write is for, and silently picking one would put touches, or typing, on the wrong output.</p>
+ *
+ * <p>The three per-screen channels do not cover the same screens, which is why they arrive as two
+ * lists rather than one. A VNC-exported screen's absolute pointer and keyboard are not ours:
+ * crosvm builds that screen's pair behind its own VNC server and feeds them from RFB pointer and
+ * key events, so there is no {@code --input} for either and a socket bound here would be an inode
+ * crosvm never connects to. Its touchscreen is still ours on the same terms as a native screen's,
+ * because multi-touch has no RFB event to arrive as.</p>
  */
 final class NativeDisplayInputBridge {
     private static final String TAG = "NativeDisplayInput";
 
-    /** Server fds for the per-VM native-display input sockets, kept while crosvm is running. */
-    private volatile int[] inputServerFds = null;
-    /** Paths of the input sockets we listened on, so {@link #release()} can unlink them. */
-    private volatile String[] inputSocketPaths = null;
     /**
-     * The crosvm-side connection accepted on each input channel. crosvm connects to OUR socket at
-     * startup (we are the only listener), so writing UI-forwarded evdev here is what actually
-     * reaches the guest. Indexed by NativeDisplay channel constants. Volatile because the accept
-     * threads, the write threads, and release() all touch it without a single shared lock.
+     * One crosvm-facing input socket: the inode we bound, the accepted crosvm connection, and the
+     * lock that keeps a write and a reconnect off each other. crosvm connects to OUR socket at
+     * startup (we are the only listener), so writing UI-forwarded evdev to {@link #peer} is what
+     * actually reaches the guest.
      */
-    private volatile FDSocket[] inputPeers = null;
-    /** Per-channel write lock; also guards swapping {@link #inputPeers} on reconnect. */
-    private volatile Object[] inputWriteLocks = null;
+    private static final class Slot {
+        final String key;
+        final String path;
+        final int serverFd;
+        final Object lock = new Object();
+        /** Volatile: accept threads, write threads and release() all touch it without one lock. */
+        volatile FDSocket peer;
+
+        Slot(@NonNull String key, @NonNull String path, int serverFd) {
+            this.key = key;
+            this.path = path;
+            this.serverFd = serverFd;
+        }
+    }
+
+    /**
+     * Live slots by {@link #slotKey}. Replaced wholesale on start and cleared on release, so a
+     * reader either sees the whole set or none of it. Null until the first start.
+     */
+    private volatile Map<String, Slot> slots = null;
     private volatile boolean inputClosed = false;
 
     /**
-     * Pre-creates the per-VM native-display input sockets as listening unix sockets. crosvm
-     * connects to these paths at startup, so a listener must exist before
-     * {@link CrosvmBackendInstance#start()} execs the crosvm process. nativeUnixListen unlinks any
-     * stale inode and re-binds, so a leftover socket file from a crashed run is replaced rather than
-     * blocking us. Returns true iff every channel ended up with a live listener. Server fds we open
-     * are tracked for release in {@link #release()}.
+     * Identity of one socket: the channel, plus the screen for the channels that have one per
+     * screen. The VM-wide channel collapses onto the empty screen so the same key comes out
+     * whatever screen the console that sent the bytes happens to be showing.
+     *
+     * <p>{@link NativeDisplay#isPerScreen} is the only place that split is decided, so a channel
+     * becoming per screen moves the socket name and this key together -- there is no second copy
+     * of the rule here to forget to update.</p>
      */
-    boolean startListening(@NonNull String serviceName) {
+    @NonNull
+    private static String slotKey(@NonNull String screenId, int channel) {
+        return fmt("%s/%d", NativeDisplay.isPerScreen(channel) ? screenId : "", channel);
+    }
+
+    /**
+     * Pre-creates the input sockets as listening unix sockets. crosvm connects to these paths at
+     * startup, so a listener must exist before {@link CrosvmBackendInstance#start()} execs the
+     * crosvm process. nativeUnixListen unlinks any stale inode and re-binds, so a leftover socket
+     * file from a crashed run is replaced rather than blocking us. Returns true iff every slot
+     * ended up with a live listener.
+     *
+     * <p>[touchScreens] are the screens that get a multi-touch device and [nativeScreens] the ones
+     * that get an absolute pointer and a keyboard -- the same two lists
+     * {@link CrosvmBackendInstance} emits {@code --input} devices from, so the sockets and the
+     * devices cannot diverge. They are not the same list: the second holds only the natively
+     * exported screens, because a VNC-exported screen's tablet and keyboard are crosvm's own. A
+     * screen left out of a list has no socket and no device on that channel; input aimed at it is
+     * refused rather than landing on some other screen's geometry, or on a screen whose user
+     * switched input off.</p>
+     *
+     * <p>Throws IllegalArgumentException if a path does not fit a unix socket address. That is the
+     * one failure here that is not survivable and not diagnosable after the fact: bind(2) truncates
+     * silently, so the daemon would report a live listener on an inode crosvm was never told about.
+     * The caller turns it into a refused start; see {@link NativeDisplay#requireBindablePath}.</p>
+     */
+    boolean startListening(@NonNull String vmId, @NonNull List<String> touchScreens,
+                           @NonNull List<String> nativeScreens) {
         if (!UnixHelper.isLoaded()) {
             Log.w(TAG, "UnixHelper not loaded; cannot pre-bind native-display input sockets");
             return false;
         }
-        var paths = new String[NativeDisplay.CHANNEL_COUNT];
-        var fds = new int[NativeDisplay.CHANNEL_COUNT];
         inputClosed = false;
-        inputPeers = new FDSocket[NativeDisplay.CHANNEL_COUNT];
-        inputWriteLocks = new Object[NativeDisplay.CHANNEL_COUNT];
+        var built = new LinkedHashMap<String, Slot>();
         boolean allListening = true;
         for (int ch = 0; ch < NativeDisplay.CHANNEL_COUNT; ch++) {
-            inputWriteLocks[ch] = new Object();
-            var path = NativeDisplay.inputSocketPath(serviceName, ch);
-            paths[ch] = path;
-            var fd = UnixHelper.nativeUnixListen(path);
-            if (fd < 0) {
-                Log.w(TAG, fmt("Failed to pre-listen on input socket: %s", path));
-                allListening = false;
-                fds[ch] = -1;
-            } else {
+            for (var screenId : screensFor(ch, touchScreens, nativeScreens)) {
+                // Before the syscall, not after: a path bind(2) cannot hold is truncated in
+                // silence and every check downstream then passes against the wrong inode.
+                var path = NativeDisplay.requireBindablePath(
+                    NativeDisplay.inputSocketPath(vmId, screenId, ch));
+                var fd = UnixHelper.nativeUnixListen(path);
+                if (fd < 0) {
+                    Log.w(TAG, fmt("Failed to pre-listen on input socket: %s", path));
+                    allListening = false;
+                    continue;
+                }
                 Log.i(TAG, fmt("Pre-listening on input socket: %s (fd=%d)", path, fd));
-                fds[ch] = fd;
+                var slot = new Slot(slotKey(screenId, ch), path, fd);
+                built.put(slot.key, slot);
                 // Accept crosvm's connection in the background. crosvm is the client and connects
                 // at its own startup, so a peer may not arrive until after start() execs it.
-                startInputAcceptThread(ch, fd);
+                startInputAcceptThread(slot);
             }
         }
-        inputSocketPaths = paths;
-        inputServerFds = fds;
+        slots = built;
         return allListening;
     }
 
     /**
-     * Accepts crosvm's connection on one input channel and keeps the live peer in
-     * {@link #inputPeers}. Loops so a crosvm restart (new connection on the same socket) replaces
-     * the dead peer; ends when {@link #release()} closes the server fd.
+     * The screens [channel] needs a socket for: its own list for the three per-screen channels, or
+     * just the VM itself for the relative pointer, which has no output binding.
+     *
+     * <p>Switched on the channel rather than on {@link NativeDisplay#isPerScreen} alone, because
+     * "is this per screen" and "which screens" stopped having one answer when the VNC bindings
+     * took over their own tablets and keyboards. The tablet and the keyboard share a list: both
+     * are the screen's, both exist only where its input switch is on, and both are crosvm's on a
+     * VNC binding.</p>
      */
-    private void startInputAcceptThread(int channel, int serverFd) {
+    @NonNull
+    private static List<String> screensFor(int channel, @NonNull List<String> touchScreens,
+                                           @NonNull List<String> nativeScreens) {
+        switch (channel) {
+            case NativeDisplay.MULTITOUCH:
+                return touchScreens;
+            case NativeDisplay.TABLET:
+            case NativeDisplay.KEYBOARD:
+                return nativeScreens;
+            default:
+                return List.of("");
+        }
+    }
+
+    /**
+     * Accepts crosvm's connection on one slot and keeps the live peer on it. Loops so a crosvm
+     * restart (new connection on the same socket) replaces the dead peer; ends when
+     * {@link #release()} closes the server fd.
+     */
+    private void startInputAcceptThread(@NonNull Slot slot) {
         var t = new Thread(() -> {
             while (!inputClosed) {
-                int peerFd = UnixHelper.nativeUnixAccept(serverFd);
+                int peerFd = UnixHelper.nativeUnixAccept(slot.serverFd);
                 if (peerFd < 0) {
                     if (inputClosed) break;
                     try {
@@ -104,46 +185,36 @@ private void startInputAcceptThread(int channel, int serverFd) {
                     continue;
                 }
                 var peer = new FDSocket(peerFd);
-                // Snapshot the lock/peer arrays: release() can null them concurrently.
-                var locks = inputWriteLocks;
-                if (locks == null) {
-                    peer.close();
-                    break;
-                }
-                synchronized (locks[channel]) {
-                    var peers = inputPeers;
-                    if (peers == null) {
+                synchronized (slot.lock) {
+                    if (inputClosed) {
                         peer.close();
                         break;
                     }
-                    var old = peers[channel];
-                    peers[channel] = peer;
+                    var old = slot.peer;
+                    slot.peer = peer;
                     if (old != null) old.close();
                 }
-                Log.i(TAG, fmt("crosvm input connected: channel %d", channel));
+                Log.i(TAG, fmt("crosvm input connected: %s", slot.path));
             }
-        }, fmt("CrosvmInputAccept-%d", channel));
+        }, fmt("CrosvmInputAccept-%s", slot.key));
         t.setDaemon(true);
         t.start();
     }
 
     /**
-     * Writes pre-encoded evdev bytes (8-byte records) to the crosvm connection for [channel].
-     * Called from the daemon IPC thread on behalf of the UI. Returns false if no crosvm peer is
-     * connected yet or the write fails.
+     * Writes pre-encoded evdev bytes (8-byte records) to the crosvm connection for [channel] on
+     * [screenId]. Called from the daemon IPC thread or the broker binder thread on behalf of the
+     * UI. Returns false if the VM has no such device (a per-screen channel -- touch, tablet or
+     * keyboard -- on a screen whose input is switched off, or on a VNC-exported screen whose
+     * tablet and keyboard are crosvm's), no crosvm peer is connected yet, or the write fails --
+     * the caller reports that as "not delivered" rather than pretending it landed somewhere.
      */
-    boolean writeNativeInput(int channel, @NonNull byte[] data) {
+    boolean writeNativeInput(@NonNull String screenId, int channel, @NonNull byte[] data) {
         if (channel < 0 || channel >= NativeDisplay.CHANNEL_COUNT || data.length == 0) return false;
-        // Snapshot the arrays once: release() nulls these fields concurrently, so dereferencing the
-        // live field after the guard could NPE. The lock object itself stays valid for the session.
-        var locks = inputWriteLocks;
-        if (locks == null) return false;
-        var lock = locks[channel];
-        if (lock == null) return false;
-        synchronized (lock) {
-            var peers = inputPeers;
-            if (peers == null) return false;
-            var peer = peers[channel];
+        var slot = findSlot(screenId, channel);
+        if (slot == null) return false;
+        synchronized (slot.lock) {
+            var peer = slot.peer;
             if (peer == null || !peer.isOpen()) return false;
             try {
                 var os = peer.getOutputStream();
@@ -151,47 +222,36 @@ boolean writeNativeInput(int channel, @NonNull byte[] data) {
                 os.flush();
                 return true;
             } catch (IOException e) {
-                Log.w(TAG, fmt("input write channel %d failed: %s", channel, e.getMessage()));
-                peers[channel] = null;
+                Log.w(TAG, fmt("input write to %s failed: %s", slot.path, e.getMessage()));
+                slot.peer = null;
                 peer.close();
                 return false;
             }
         }
     }
 
-    /**
-     * Closes the input server fds we opened and unlinks only the inodes we own. Channels that
-     * fell through to the UI's listener (fd == -1) are left untouched so we don't yank a socket
-     * the UI still holds.
-     */
+    @Nullable
+    private Slot findSlot(@NonNull String screenId, int channel) {
+        // Snapshot the map once: release() nulls the field concurrently.
+        var live = slots;
+        return live == null ? null : live.get(slotKey(screenId, channel));
+    }
+
+    /** Closes the input server fds we opened and unlinks the inodes we own. */
     void release() {
         inputClosed = true; // stop accept loops; closing the server fd below unblocks nativeUnixAccept
-        if (inputPeers != null) {
-            for (int ch = 0; ch < inputPeers.length; ch++) {
-                if (inputWriteLocks != null && inputWriteLocks[ch] != null) {
-                    synchronized (inputWriteLocks[ch]) {
-                        if (inputPeers[ch] != null) {
-                            inputPeers[ch].close();
-                            inputPeers[ch] = null;
-                        }
-                    }
+        var live = slots;
+        slots = null;
+        if (live == null) return;
+        for (var slot : live.values()) {
+            synchronized (slot.lock) {
+                if (slot.peer != null) {
+                    slot.peer.close();
+                    slot.peer = null;
                 }
             }
-            inputPeers = null;
-        }
-        inputWriteLocks = null;
-        if (inputServerFds == null) {
-            inputSocketPaths = null;
-            return;
-        }
-        for (int ch = 0; ch < inputServerFds.length; ch++) {
-            int fd = inputServerFds[ch];
-            if (fd < 0) continue;
-            UnixHelper.nativeCloseFd(fd);
-            if (inputSocketPaths != null && inputSocketPaths[ch] != null)
-                deleteFile(inputSocketPaths[ch]);
+            UnixHelper.nativeCloseFd(slot.serverFd);
+            deleteFile(slot.path);
         }
-        inputServerFds = null;
-        inputSocketPaths = null;
     }
 }
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/QemuBackendInstance.java b/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/QemuBackendInstance.java
index 0fef5f5ea..80efe55ef 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/QemuBackendInstance.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/QemuBackendInstance.java
@@ -555,6 +555,10 @@ private void buildVncCommand(@NonNull List<String> args) {
         long displayNum = port - 5900;
         if (displayNum < 0) displayNum = 0;
         var vncArg = new StringBuilder();
+        // "host:display", so an IPv6 literal has to be bracketed or its own colons are read as the
+        // separator. Reachable now that the host field offers the phone's own addresses and half of
+        // those are v6; an IPv4 address is untouched.
+        if (host.indexOf(':') >= 0) host = fmt("[%s]", host);
         vncArg.append(fmt("%s:%d", host, displayNum));
         var password = bound.getVncPassword();
         if (!password.isEmpty()) {
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/store/enums/EnumPicker.java b/app/src/main/java/cn/classfun/droidvm/lib/store/enums/EnumPicker.java
index e8cd851db..79bf89a75 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/store/enums/EnumPicker.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/store/enums/EnumPicker.java
@@ -16,12 +16,18 @@
 import com.google.android.material.dialog.MaterialAlertDialogBuilder;
 
 import java.util.ArrayList;
+import java.util.Collection;
+import java.util.LinkedHashSet;
 import java.util.List;
+import java.util.Set;
 
 public final class EnumPicker<E extends Enum<E>> {
     private final Context context;
     private final Class<E> enumClass;
     private final List<E> items = new ArrayList<>();
+    /** Items listed but refused; see {@link #setDisabledItems}. */
+    private final Set<E> disabled = new LinkedHashSet<>();
+    private CharSequence disabledNote = null;
     private EnumPickerChanged<E> onValueChanged = null;
     private int selectedIndex = -1;
 
@@ -41,19 +47,15 @@ public AlertDialog showDialog(@Nullable CharSequence title) {
         if (items.isEmpty())
             throw new IllegalStateException("Items cannot be empty");
         var labels = new String[items.size()];
-        for (int i = 0; i < items.size(); i++) {
-            var item = items.get(i);
-            var label = item.toString();
-            if (item instanceof StringEnum) {
-                var se = (StringEnum) item;
-                label = se.getDisplayString(context);
-            }
-            labels[i] = label;
-        }
+        for (int i = 0; i < items.size(); i++)
+            labels[i] = menuLabel(items.get(i));
         var b = new MaterialAlertDialogBuilder(context);
         if (title != null)
             b.setTitle(title);
         b.setSingleChoiceItems(labels, selectedIndex, (dialog, which) -> {
+            // A refused row leaves the dialog open rather than closing on a value it did not
+            // apply, which would read as having been accepted.
+            if (disabled.contains(items.get(which))) return;
             setSelectedIndex(which);
             dialog.dismiss();
         });
@@ -67,12 +69,9 @@ public void showPopup(@NonNull View anchor) {
         var menu = popup.getMenu();
         for (int i = 0; i < items.size(); i++) {
             var item = items.get(i);
-            var label = item.name();
-            if (item instanceof StringEnum) {
-                var se = (StringEnum) item;
-                label = se.getDisplayString(context);
-            }
-            menu.add(0, i, i, label);
+            // MaterialMenu's adapter already honours isEnabled(): it greys the row and swallows
+            // the tap, so nothing here has to re-check on the way back out.
+            menu.add(0, i, i, menuLabel(item)).setEnabled(!disabled.contains(item));
         }
         popup.setOnMenuItemClickListener(menuItem -> {
             setSelectedIndex(menuItem.getItemId());
@@ -81,8 +80,37 @@ public void showPopup(@NonNull View anchor) {
         popup.show();
     }
 
+    /** This item's label, plus the disabled note when it is one of the refused ones. */
+    @NonNull
+    private String menuLabel(@NonNull E item) {
+        var label = item instanceof StringEnum
+            ? ((StringEnum) item).getDisplayString(context) : item.name();
+        if (disabledNote == null || !disabled.contains(item)) return label;
+        return fmt("%s (%s)", label, disabledNote);
+    }
+
+    /**
+     * Items the picker lists but will not select.
+     *
+     * <p>For a set of choices that is easier to read whole than pruned -- a ladder whose upper
+     * rungs are designed but not built, say. Hiding them makes the remaining values look like the
+     * entire vocabulary and makes each one that lands later look like a feature out of nowhere;
+     * listing them greyed, with {@code note} saying why, says what the set is and where this build
+     * stands in it. A disabled item can still be the current value: that is how a choice stored
+     * before its rung was refused survives being looked at.</p>
+     *
+     * <p>Cleared by {@link #setItems} and {@link #autoItems}, since a new item set has its own
+     * answer -- the same constant can be reachable under one and not under another.</p>
+     */
+    public void setDisabledItems(@Nullable CharSequence note, @NonNull Collection<E> refused) {
+        disabled.clear();
+        disabled.addAll(refused);
+        disabledNote = note;
+    }
+
     public void autoItems() {
         items.clear();
+        disabled.clear();
         for (var item : getConstants()) {
             if (item instanceof StringEnum) {
                 var se = (StringEnum) item;
@@ -109,6 +137,7 @@ public void setItems(@NonNull List<E> constants) {
             throw new IllegalArgumentException("Constants cannot be empty");
         items.clear();
         items.addAll(constants);
+        disabled.clear();
         selectedIndex = -1;
         setSelectedIndex(0);
     }
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/store/vm/DisplayBackend.java b/app/src/main/java/cn/classfun/droidvm/lib/store/vm/DisplayBackend.java
index 6e1ed58e5..4735a92e3 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/store/vm/DisplayBackend.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/store/vm/DisplayBackend.java
@@ -3,44 +3,16 @@
 // Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.lib.store.vm;
 
-import androidx.annotation.StringRes;
-
-import cn.classfun.droidvm.R;
-import cn.classfun.droidvm.lib.store.enums.StringEnum;
-
-public enum DisplayBackend implements StringEnum {
-    NONE(0, "none", R.string.nullptr),
-    SIMPLEFB(1, "simple", R.string.create_vm_display_backend_simplefb),
-    VIRTIO_GPU(2, "virtio-gpu", R.string.create_vm_display_backend_virtio_gpu);
-
-    private final int value;
-    private final String name;
-    private final @StringRes int stringId;
-
-    DisplayBackend(int value, String name, @StringRes int stringId) {
-        this.value = value;
-        this.name = name;
-        this.stringId = stringId;
-    }
-
-    @SuppressWarnings("unused")
-    public int getValue() {
-        return value;
-    }
-
-    @SuppressWarnings("unused")
-    public String getName() {
-        return name;
-    }
-
-    @Override
-    @StringRes
-    public int getStringId() {
-        return stringId;
-    }
-
-    @Override
-    public boolean isDisplay() {
-        return stringId != R.string.nullptr;
-    }
+/**
+ * The legacy either/or display producer: one display, and this said which device made it.
+ *
+ * <p>Superseded by {@link VMScreenConfig} -- the two devices are independent screens now, and a
+ * VM can have both -- so nothing reads this except {@link VMScreenConfig#migrate}, which reads
+ * each old config's value exactly once and then drops the key. It is no longer a
+ * {@code StringEnum} and carries no labels: it is never shown, only decoded.</p>
+ */
+public enum DisplayBackend {
+    NONE,
+    SIMPLEFB,
+    VIRTIO_GPU,
 }
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/store/vm/DisplayExporter.java b/app/src/main/java/cn/classfun/droidvm/lib/store/vm/DisplayExporter.java
new file mode 100644
index 000000000..282802525
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/lib/store/vm/DisplayExporter.java
@@ -0,0 +1,69 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
+package cn.classfun.droidvm.lib.store.vm;
+
+import androidx.annotation.StringRes;
+
+import cn.classfun.droidvm.R;
+import cn.classfun.droidvm.lib.store.enums.StringEnum;
+
+/**
+ * Who consumes one screen's frames -- the export side of a {@link VMScreenConfig} binding.
+ * <p>
+ * A screen drives at most one exporter. That is a decision, not a limitation waiting to be
+ * lifted: the alternative to the old silent race (two sinks configured, VNC wins, the app's
+ * Surface never gets a binder) was either mirroring or an error, and this picks the error.
+ * crosvm enforces the same rule on its side and refuses to start a VM with two exporters on
+ * one screen, so the editor must never write one.
+ * <p>
+ * The names are persisted, so they are the stable part; they say nothing about which screen
+ * the binding is on, because that is the key the binding is stored under.
+ */
+public enum DisplayExporter implements StringEnum {
+    // Declaration order is the picker's row order: EnumPicker.autoItems() walks
+    // getEnumConstants() and appends, with no comparator anywhere. So the two exporters lead and
+    // the sink comes last. Reordering is safe because nothing here is ordinal-shaped -- the
+    // stored value is name().toLowerCase(), nothing in the tree reads ordinal() or getValue() on
+    // this enum, and the picker's initial selection is set by configure(cls, value) rather than
+    // by which constant happens to be first.
+    NATIVE(1, "native", R.string.create_vm_screen_exporter_native),
+    VNC(2, "vnc", R.string.create_vm_screen_exporter_vnc),
+    // Unlike the NONE sentinels of the other persisted enums, this one is a real, selectable
+    // choice: a screen nobody is watching is a state, not a fault -- crosvm accepts it too. So
+    // it carries a label instead of R.string.nullptr; a nullptr entry reports isDisplay() ==
+    // false and EnumPicker.autoItems() would drop it from the picker. The label says sink rather
+    // than none because the screen still exists and still produces frames; they go nowhere.
+    NONE(0, "none", R.string.create_vm_screen_exporter_none);
+
+    private final int value;
+    private final String name;
+    private final @StringRes int stringId;
+
+    DisplayExporter(int value, String name, @StringRes int stringId) {
+        this.value = value;
+        this.name = name;
+        this.stringId = stringId;
+    }
+
+    @SuppressWarnings("unused")
+    public int getValue() {
+        return value;
+    }
+
+    @SuppressWarnings("unused")
+    public String getName() {
+        return name;
+    }
+
+    @Override
+    @StringRes
+    public int getStringId() {
+        return stringId;
+    }
+
+    @Override
+    public boolean isDisplay() {
+        return stringId != R.string.nullptr;
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/store/vm/DisplayTransportCap.java b/app/src/main/java/cn/classfun/droidvm/lib/store/vm/DisplayTransportCap.java
index 86212e5eb..9de568a5a 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/store/vm/DisplayTransportCap.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/store/vm/DisplayTransportCap.java
@@ -1,3 +1,54 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
+package cn.classfun.droidvm.lib.store.vm;
+
+import androidx.annotation.NonNull;
+import androidx.annotation.Nullable;
+import androidx.annotation.StringRes;
+
+import cn.classfun.droidvm.R;
+import cn.classfun.droidvm.lib.store.enums.StringEnum;
+
+/**
+ * How far up the pipeline one screen's frames are allowed to travel to reach its exporter.
+ *
+ * <p>The transport is not a property of the screen or of the exporter but of the edge between
+ * them, and it is negotiated: the source says what it can produce (CPU bytes, a dmabuf), the
+ * exporter says what it can consume, and the highest rung both reach wins. So it is not a thing
+ * the user picks outright. What the user can have is a <em>ceiling</em>, and that distinction is
+ * the whole reason this enum reads the way it does.</p>
+ *
+ * <p><b>It only restricts downward.</b> The transport is settled at or below the rung named here,
+ * so every value is always satisfiable -- CPU copy is the bottom of the ladder and needs nothing
+ * from either end. "At least GPU copy" would not be: a source that cannot export a dmabuf leaves
+ * only a silent downgrade (which looks like success and is not) or a loud failure (a VM that
+ * refuses to start over a preference). A ceiling has neither failure mode. It is also why there is
+ * no separate "automatic" entry -- the top rung of the offered set already is automatic.</p>
+ *
+ * <p>The ladder is not the same on every edge, because the rung above a copy is a different
+ * mechanism on each. The native display can be lent a render target the guest draws straight into
+ * ({@link #ZERO}) -- but only when the guest's rendering can be aimed at it, which rules simplefb
+ * out: its framebuffer is a fixed window of guest memory named in the device tree, and no
+ * AHardwareBuffer can be made to wrap that. VNC has nowhere to lend a target at all, and its rung
+ * above a GPU blit is handing the frame to a hardware video encoder instead of an RFB rectangle
+ * ({@link #GPU_HW}). So the offered set is a function of both ends, and {@link #optionsFor} is
+ * where that lives.</p>
+ *
+ * <p>Rungs that are designed but not built are offered and refused rather than hidden: the ladder
+ * is easier to understand whole, and a value that appears later must not look like a new feature
+ * arriving out of nowhere. {@link #isImplemented} says which is which today.</p>
+ */
+public enum DisplayTransportCap implements StringEnum {
+    /** Always reachable: host memcpy into the sink's own buffer. The bottom of every ladder. */
+    CPU(0, "cpu", R.string.create_vm_screen_transport_cpu),
+    /** A Vulkan blit on the host, which gets a format conversion thrown in for free. */
+    GPU(1, "gpu", R.string.create_vm_screen_transport_gpu),
+    /** Native display only: the sink lends its render target and the content never crosses. */
+    ZERO(2, "zero", R.string.create_vm_screen_transport_zero),
+    /** VNC only: the blit's result goes to a hardware video encoder rather than into RFB. */
+    GPU_HW(3, "gpu-hw", R.string.create_vm_screen_transport_gpu_hw);
+
     /**
      * The width granularity a screen whose stride is exactly {@code width * 4} needs before the
      * GPU copy can take it, in pixels.
@@ -12,6 +63,118 @@
      */
     public static final long GPU_COPY_WIDTH_ALIGN = 16;
 
+    private final int value;
+    private final String token;
+    private final @StringRes int stringId;
+
+    DisplayTransportCap(int value, String token, @StringRes int stringId) {
+        this.value = value;
+        this.token = token;
+        this.stringId = stringId;
+    }
+
+    @SuppressWarnings("unused")
+    public int getValue() {
+        return value;
+    }
+
+    /**
+     * The stored spelling, which is also the token crosvm's {@code transport-cap=} takes. Lower
+     * case and hyphenated, unlike the other persisted enums, because this one is written onto a
+     * command line as well as into the config and one value must not have two spellings. That is
+     * also why it is parsed by {@link #fromToken} rather than by the generic enum helper, whose
+     * upper-casing cannot round-trip a hyphen.
+     */
+    @NonNull
+    public String getToken() {
+        return token;
+    }
+
+    @Override
+    @StringRes
+    public int getStringId() {
+        return stringId;
+    }
+
+    @Override
+    public boolean isDisplay() {
+        return stringId != R.string.nullptr;
+    }
+
+    /** The stored token back to a constant, or null for absent, empty or unrecognised. */
+    @Nullable
+    public static DisplayTransportCap fromToken(@Nullable String stored) {
+        if (stored == null || stored.isEmpty()) return null;
+        for (var cap : values())
+            if (cap.token.equalsIgnoreCase(stored)) return cap;
+        return null;
+    }
+
+    /**
+     * The ladder this (screen, exporter) edge has, bottom rung first.
+     *
+     * <p>Both ends decide it, which is why the screen is a parameter. The native display's top
+     * rung is a render target it lends the guest to draw into -- and simplefb cannot be drawn into
+     * that way at all: its framebuffer is a fixed window of guest memory the guest was told about
+     * in the device tree, and an AHardwareBuffer cannot be made to wrap it. That rung is not
+     * "unbuilt" there, it is unreachable, so it is absent rather than greyed. Offering it would be
+     * describing a choice nobody will ever be able to make.</p>
+     *
+     * <p>An exporter with no edge -- nobody is watching the screen -- has no ladder, and the empty
+     * array is how callers know not to offer one rather than having to ask the question twice.</p>
+     */
+    @NonNull
+    public static DisplayTransportCap[] optionsFor(@NonNull String screenId,
+                                                   @NonNull DisplayExporter exporter) {
+        switch (exporter) {
+            case NATIVE:
+                return VMScreenConfig.ID_GPU0.equals(screenId)
+                    ? new DisplayTransportCap[]{CPU, GPU, ZERO}
+                    : new DisplayTransportCap[]{CPU, GPU};
+            case VNC:
+                return new DisplayTransportCap[]{CPU, GPU, GPU_HW};
+            default:
+                return new DisplayTransportCap[0];
+        }
+    }
+
+    /** Whether [cap] is one of the rungs this edge has at all. */
+    public static boolean isOfferedFor(@NonNull String screenId,
+                                       @NonNull DisplayExporter exporter,
+                                       @NonNull DisplayTransportCap cap) {
+        for (var option : optionsFor(screenId, exporter))
+            if (option == cap) return true;
+        return false;
+    }
+
+    /**
+     * Whether this build can actually reach [cap] on this edge.
+     *
+     */
+    public static boolean isImplemented(@NonNull DisplayExporter exporter,
+                                        @NonNull DisplayTransportCap cap) {
+        switch (exporter) {
+            case NATIVE:
+            default:
+                return false;
+        }
+    }
+
+    /** The rungs this edge shows but cannot honour yet, in {@link #optionsFor} order. */
+    @NonNull
+    public static DisplayTransportCap[] unimplementedFor(@NonNull String screenId,
+                                                         @NonNull DisplayExporter exporter) {
+        var options = optionsFor(screenId, exporter);
+        var n = 0;
+        for (var option : options)
+            if (!isImplemented(exporter, option)) n++;
+        var out = new DisplayTransportCap[n];
+        var i = 0;
+        for (var option : options)
+            if (!isImplemented(exporter, option)) out[i++] = option;
+        return out;
+    }
+
     /**
      * Whether a GPU-copy ceiling on this edge will settle on the CPU copy anyway, because the
      * screen is [width] pixels wide and the blit cannot import a frame that shape.
@@ -31,3 +194,21 @@ public static boolean cpuFallbackFromWidth(@NonNull String screenId,
         return width % GPU_COPY_WIDTH_ALIGN != 0;
     }
 
+    /**
+     * The ceiling a screen gets when it has not named one: the highest rung this build can
+     * actually reach on that edge.
+     *
+     * <p>Not the highest rung offered -- that would default every VM to a ceiling nothing can
+     * satisfy today, which is a promise the negotiation would quietly break. It is the highest
+     * <em>implemented</em> one, so the default never restricts anything that works, and it rises
+     * on its own as the rungs land.</p>
+     */
+    @NonNull
+    public static DisplayTransportCap defaultFor(@NonNull String screenId,
+                                                 @NonNull DisplayExporter exporter) {
+        var best = CPU;
+        for (var option : optionsFor(screenId, exporter))
+            if (isImplemented(exporter, option)) best = option;
+        return best;
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/store/vm/NativeDisplay.java b/app/src/main/java/cn/classfun/droidvm/lib/store/vm/NativeDisplay.java
index 04be7e303..36df5f7ea 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/store/vm/NativeDisplay.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/store/vm/NativeDisplay.java
@@ -9,19 +9,55 @@
 
 import androidx.annotation.NonNull;
 
+import java.nio.charset.StandardCharsets;
+
 /**
  * Shared naming for the native (crosvm android-display) backend. The daemon (launching crosvm and
  * hosting the native-display binder) and the UI (looking up the display binder / sending input)
- * both derive the per-VM service name and socket paths from here, so they agree and different VMs
- * never collide.
+ * both derive the service names and socket paths from here, so they agree and different VMs never
+ * collide.
+ *
+ * The names the outside world sees hang off one per-VM root, {@link #channelKeyFromId}: a screen's
+ * display service is that root plus the screen's id. The root is a pure function of the VM's UUID,
+ * which is why a crosvm that died and restarted re-registers under exactly the name the app is
+ * still waiting on.
+ *
+ * A display service is per screen, not per VM: two screens exporting natively at once would
+ * otherwise want one servicemanager name for two Surfaces, and a service holds two slots (main +
+ * cursor), not N.
+ *
+ * The input sockets split the same way, but not all of them: the relative pointer alone stays on
+ * the VM root, because it has no output binding at all -- the guest compositor routes it by focus
+ * and it walks from one output to the next. The multi-touch and absolute-pointer devices are per
+ * screen because an absolute coordinate only means anything under one output's geometry; the
+ * keyboard is per screen for a different reason, which is that input belongs to the scanout. A
+ * screen's input switch has to be able to turn typing off on that screen, and a VM-wide keyboard
+ * could not be turned off by any one screen -- so a keyboard the console types into is the
+ * console's screen's keyboard, and a screen with input off has none at all.
  *
- * The service name doubles as the vmKey: it identifies both the servicemanager entry crosvm
- * registers (--android-display-service) and the VM's input-socket set.
+ * The socket <em>filenames</em> are the one set of names here that is not identity-bearing, and
+ * they are deliberately terse. A unix socket address holds 107 bytes of path plus a NUL, and this
+ * app's run directory already spends 35 of them ({@code /data/data/cn.classfun.droidvm/run/}); the
+ * old {@code droidvm_disp_<uuid>_input_multitouch.sock} came to 106 -- one byte of headroom -- so
+ * the moment the screen id joined it the per-screen names hit 115 and 111 and crosvm refused the
+ * whole command line with "path must be shorter than SUN_LEN". Nothing outside this process pair
+ * ever reads these names: the daemon binds the inode and crosvm is handed the path on the command
+ * line it is started with, so unlike the service name and the evdev names, which the guest and the
+ * user's saved mappings key on across reboots, a socket filename can be abbreviated freely.
+ * {@link #inputSocketPath} therefore builds {@code dvmin_<uuid>[_<screen>]_<channel>.sock} out of
+ * two-to-three-letter tags, worst case 90 bytes, and {@link #requireBindablePath} makes the
+ * remaining margin a wall rather than a hope -- see its note on what bind(2) does otherwise.
  */
 public final class NativeDisplay {
     /**
      * Input channels. Each maps to one crosvm {@code --input <kind>} virtio-input device and one
+     * unix socket, and the UI routes to whichever the current {@code InputMode} selects
+     * (multi-touch, relative mouse, or absolute single-touch tablet). Ordinals are the wire
      * channel ids shared with the daemon's InputHandler; append new channels, never renumber.
+     *
+     * <p>A channel is not by itself a device any more: {@link #isPerScreen} says whether the VM
+     * has one of them or one per screen, so the daemon binds a socket per (screen, channel) pair
+     * that exists rather than {@link #CHANNEL_COUNT} of them.</p>
      */
     public static final int MULTITOUCH = 0;
     public static final int KEYBOARD = 1;
@@ -43,27 +79,241 @@ public final class NativeDisplay {
     /** Per-attach random token; the UI only accepts a broadcast carrying the nonce it requested. */
     public static final String EXTRA_NONCE = "nonce";
 
+    // Socket filename tags per channel (index == channel constant). "ms"/"tab" are our tags; the
+    // crosvm device kinds they pair with are "mouse" (relative) and "absolute-mouse". Short
+    // because the whole path has to fit sun_path (see the class note); still self-describing,
+    // because the next person reading `ls run/` deserves to know which inode is the touchscreen.
+    private static final String[] CHANNEL_TAGS = {"mt", "kbd", "ms", "tab"};
+
+    /**
+     * Socket filename tag per screen, positionally paired with {@link VMScreenConfig#IDS}. A
+     * screen id is a word ("simplefb"); a socket name has a couple of bytes to spend on it. The
+     * static check below is the wall a third screen walks into: adding an id without adding its
+     * tag fails at class load rather than minting a name that overflows or collides.
+     */
+    private static final String[] SCREEN_TAGS = {"g0", "sfb"};
+
+    static {
+        if (SCREEN_TAGS.length != VMScreenConfig.IDS.length)
+            throw new IllegalStateException("every screen id needs an input-socket tag");
+    }
+
     private static final String RUN_PATH = pathJoin(DATA_DIR, "run");
 
+    /** Prefix every name built here starts with; {@link #vmIdFromServiceName} reads it back. */
+    private static final String NAME_PREFIX = "droidvm_disp_";
+
+    /** Prefix of the input socket filenames; short, and not a name anything looks up by. */
+    private static final String SOCKET_PREFIX = "dvmin_";
+
+    /**
+     * Bytes of {@code sockaddr_un.sun_path} on Linux -- 108, of which the last must be the NUL,
+     * so 107 is the longest bindable path. Not a tunable: it is the kernel's array size.
+     */
+    public static final int SUN_PATH_SIZE = 108;
+
+    /** The longest path {@link #requireBindablePath} will pass: {@link #SUN_PATH_SIZE} less NUL. */
+    public static final int MAX_UNIX_PATH = SUN_PATH_SIZE - 1;
+
     private NativeDisplay() {
     }
 
-    /** Per-VM crosvm display service name; also used as the vmKey for input sockets. */
+    /**
+     * The VM's display-channel root: the stem every per-screen service name is built on, and the
+     * name a pre-screens build registered on its own. Stable across boots because the VM's UUID
+     * is. Taken as a raw id rather than a config because half its callers only have the id, out
+     * of an Intent extra or a service name being read back.
+     */
+    @NonNull
+    public static String channelKeyFromId(@NonNull String vmId) {
+        return fmt("%s%s", NAME_PREFIX, sanitize(vmId));
+    }
+
+    /**
+     * The servicemanager name crosvm registers for one screen's native display -- the value of
+     * that screen's {@code --android-display-service name=}, and what the UI looks up.
+     *
+     * The screen id rides in the name rather than in a separate field because the name is the
+     * whole identity of a channel on both sides of the binder, and because it has to survive a
+     * crosvm restart unchanged: it is derived, never allocated. The charset stays the one
+     * {@link #sanitize} allows, so the name is legal both as a binder service name and inside a
+     * socket filename.
+     */
+    @NonNull
+    public static String serviceName(@NonNull VMConfig config, @NonNull String screenId) {
+        return serviceNameFromId(config.getId().toString(), screenId);
+    }
+
+    /** Same as {@link #serviceName(VMConfig, String)} but from a raw VM id. */
+    @NonNull
+    public static String serviceNameFromId(@NonNull String vmId, @NonNull String screenId) {
+        return fmt("%s_%s", channelKeyFromId(vmId), sanitize(screenId));
+    }
+
+    /**
+     * The VM id a name built here belongs to, or an empty string when the name is not ours.
+     *
+     * The daemon uses this to decide whether a display binder is worth waiting for, so it has to
+     * be the exact inverse of the two builders above -- which is why it lives next to them
+     * instead of being a prefix-strip written out again at the call site.
+     */
+    @NonNull
+    public static String vmIdFromServiceName(@NonNull String serviceName) {
+        if (!serviceName.startsWith(NAME_PREFIX)) return "";
+        var rest = serviceName.substring(NAME_PREFIX.length());
+        for (var screenId : VMScreenConfig.IDS) {
+            var suffix = fmt("_%s", sanitize(screenId));
+            if (rest.endsWith(suffix))
+                return rest.substring(0, rest.length() - suffix.length());
+        }
+        return rest;
+    }
+
+    /**
+     * Whether [channel]'s device belongs to one screen rather than to the whole VM.
+     *
+     * <p>The two absolute devices are: their coordinates are read against one output's geometry,
+     * so a VM with two screens needs two of each and the guest has to be told by hand which is
+     * which. The keyboard is too, on the different ground that input is a property of the scanout:
+     * the screen's input switch governs it, so it cannot be one device shared by screens that
+     * disagree about whether input is on. Only the relative pointer is left VM-wide -- it has no
+     * output binding, and the guest compositor sends it wherever focus is.</p>
+     *
+     * <p>This one predicate is what makes a channel per screen everywhere at once: it picks the
+     * socket filename ({@link #inputSocketPath}), the daemon's slot key, and therefore whether the
+     * screen the console names reaches the write at all. The UI already sends its screen id on
+     * every channel, so a channel moving across this line needs no change on that side.</p>
+     */
+    public static boolean isPerScreen(int channel) {
+        return channel == MULTITOUCH || channel == TABLET || channel == KEYBOARD;
+    }
+
+    /**
+     * The socket filename tag for [screenId], or the sanitized id itself if the screen is one
+     * {@link #SCREEN_TAGS} has never heard of -- a long name the length check will catch, which is
+     * the failure worth having over a short one that might collide with another screen's tag.
+     */
+    @NonNull
+    private static String screenTag(@NonNull String screenId) {
+        for (int i = 0; i < VMScreenConfig.IDS.length; i++)
+            if (VMScreenConfig.IDS[i].equals(screenId)) return SCREEN_TAGS[i];
+        return sanitize(screenId);
+    }
+
+    /**
+     * The socket path for [channel] on [screenId] of [vmId]: {@code dvmin_<uuid>_<sc>_<ch>.sock},
+     * with the screen tag left out entirely for the VM-wide channel -- so passing the empty
+     * screen id for the relative pointer is exact rather than a placeholder, and no screen a
+     * console could name reaches its inode.
+     *
+     * <p>The daemon binds these and crosvm's {@code --input ...[path=]} connects to them, and the
+     * two sides agree because they call this one function rather than each composing the name and
+     * the directory themselves.</p>
+     *
+     * <p>Terse on purpose, and safe to be terse: unlike the service name and the evdev names, this
+     * string is born and dies inside one VM start -- see the class note for what the long form
+     * cost. Worst case here is 90 bytes of the 107 a unix socket address holds; the margin is
+     * asserted in the tests and enforced by {@link #requireBindablePath} at the bind.</p>
+     */
+    @NonNull
+    public static String inputSocketPath(@NonNull String vmId, @NonNull String screenId,
+                                         int channel) {
+        var screen = isPerScreen(channel) ? fmt("_%s", screenTag(screenId)) : "";
+        return pathJoin(RUN_PATH, fmt("%s%s%s_%s.sock",
+            SOCKET_PREFIX, sanitize(vmId), screen, CHANNEL_TAGS[channel]));
+    }
+
+    /**
+     * Returns [path] if a unix socket can actually be bound to it, and throws naming the path and
+     * its length if not.
+     *
+     * <p>This exists because the two ends disagree about what to do with an over-long path, and
+     * both answers are bad. crosvm refuses the command line outright ("path must be shorter than
+     * SUN_LEN") and the VM never starts. bind(2) as this daemon reaches it does the opposite: the
+     * path is copied into a 108-byte {@code sun_path} and <em>silently truncated</em>, so the
+     * daemon binds some other inode, logs a successful pre-listen, and waits forever for a crosvm
+     * that was told the untruncated name -- run/ on the test phone still held two of those stubs,
+     * {@code ..._simplefb_input_multito} and {@code ..._simplefb_input_tablet.}, as the only trace
+     * that anything had gone wrong. So the length is checked here, before the syscall, and a name
+     * that grows past the limit hits a wall with the number in the message instead of a mystery.</p>
+     *
+     * <p>Measured in bytes, not chars: the kernel copies bytes, and {@link #sanitize} keeps the
+     * two equal only as long as every name it is fed is ASCII.</p>
+     */
     @NonNull
-    public static String serviceName(@NonNull VMConfig config) {
-        return serviceNameFromId(config.getId().toString());
+    public static String requireBindablePath(@NonNull String path) {
+        int len = path.getBytes(StandardCharsets.UTF_8).length;
+        if (len > MAX_UNIX_PATH)
+            throw new IllegalArgumentException(fmt(
+                "unix socket path is %d bytes, over the %d sun_path allows: %s",
+                len, MAX_UNIX_PATH, path));
+        return path;
     }
 
-    /** Same as {@link #serviceName(VMConfig)} but from a raw VM id (e.g. an Intent extra). */
+    /**
+     * The evdev name crosvm gives [screenId]'s multi-touch device -- what the guest sees as the
+     * touchscreen's name, and the whole of its identity there.
+     *
+     * <p>Neither evdev nor HID has a field for "I belong to output N", so every guest OS maps a
+     * touchscreen to an output by the device's <em>name</em>: kwin stores it by name,
+     * {@code xinput map-to-output} takes it by name, Windows' Tablet PC setup remembers the one
+     * it was pointed at. That makes the name the only lever there is, and it has to be a pure
+     * function of the screen and never change -- rename it and the user's mapping silently stops
+     * matching anything, with no error to notice.</p>
+     *
+     * <p>Its absolute-pointer sibling is named by {@link #tabletDeviceName} for the same reason
+     * and on the same terms.</p>
+     */
     @NonNull
-    public static String serviceNameFromId(@NonNull String vmId) {
-        return fmt("droidvm_disp_%s", sanitize(vmId));
+    public static String touchDeviceName(@NonNull String screenId) {
+        return fmt("DroidVM Touch (%s)", screenId);
     }
 
-    /** The socket path crosvm connects to for [vmKey]'s [channel]. Must match across all callers. */
+    /**
+     * The evdev name crosvm gives [screenId]'s absolute-pointer (tablet) device.
+     *
+     * <p>Everything {@link #touchDeviceName} says applies here unchanged -- an absolute pointer is
+     * as much a per-output device as a touchscreen, and the guest maps it to an output by name in
+     * exactly the same places. It used to have no name at all, because crosvm's
+     * {@code absolute-mouse} option had no {@code name} field and its option enum rejects unknown
+     * keys, so the device fell back to crosvm's generated "Crosvm Virtio Absolute Mouse &lt;idx&gt;"
+     * -- an index that counts emission order and therefore moves when another screen's input is
+     * switched off, which is the one thing a mapping key must never do. crosvm takes the field
+     * now, so the tablet is pinnable on the same terms as the touchscreen.</p>
+     *
+     * <p><b>Cross-repo seam.</b> This string is produced in two places. A natively exported screen's
+     * tablet is the {@code --input absolute-mouse} the daemon emits with this name. A VNC-exported
+     * screen's tablet is built by crosvm itself, behind that screen's VNC server, and crosvm names
+     * it by reproducing this format -- there is no command-line key carrying it, so the format is
+     * the contract. Changing the format here means changing crosvm's VNC device setup in the same
+     * breath; changing only one silently unpins every guest-side mapping on the other. Which
+     * screens get which is {@code CrosvmBackendInstance.nativeInputScreens}. The same seam applies
+     * to {@link #keyboardDeviceName}.</p>
+     */
+    @NonNull
+    public static String tabletDeviceName(@NonNull String screenId) {
+        return fmt("DroidVM Tablet (%s)", screenId);
+    }
+
+    /**
+     * The evdev name [screenId]'s keyboard carries.
+     *
+     * <p>A keyboard is not an absolute device and the guest binds no output to it, so unlike its
+     * two siblings this name is not what a mapping keys on. It is still derived per screen, for
+     * two reasons. The guest lists these side by side and a user looking at several identical
+     * "DroidVM Keyboard" entries cannot tell which screen's switch turns which one off; and the
+     * name is the only thing distinguishing them, since a keyboard advertises nothing else that
+     * differs.</p>
+     *
+     * <p><b>Cross-repo seam</b>, on the same terms as {@link #tabletDeviceName} and in both
+     * directions: the daemon emits this string in {@code --input keyboard[...,name=]} for a
+     * natively exported screen, and crosvm builds a VNC-exported screen's keyboard itself and
+     * names it by reproducing this format. Two producers, one format, and no command-line key
+     * carrying it between them.</p>
+     */
     @NonNull
-    public static String inputSocketPath(@NonNull String vmKey, int channel) {
-        return pathJoin(RUN_PATH, fmt("%s_input_%s.sock", sanitize(vmKey), KINDS[channel]));
+    public static String keyboardDeviceName(@NonNull String screenId) {
+        return fmt("DroidVM Keyboard (%s)", screenId);
     }
 
     /** Keep socket/service names to a filesystem- and binder-safe charset. */
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/store/vm/VMConfig.java b/app/src/main/java/cn/classfun/droidvm/lib/store/vm/VMConfig.java
index deff965f4..ec48412ad 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/store/vm/VMConfig.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/store/vm/VMConfig.java
@@ -105,10 +105,21 @@ public static VMConfig createWithCustomizeDefaults(@NonNull Context context) {
 
         var gpu = VMScreenConfig.of(item, VMScreenConfig.ID_GPU0);
         gpu.setEnabled(false);
-        gpu.setExporter(DisplayExporter.NONE);
+        // Set even though the screen is off, because this is what the editor shows the moment the
+        // user turns virtio-gpu on -- the row's own default stopped being reachable when a new VM
+        // started going through loadConfig like an existing one. Nothing is exported until the
+        // screen is enabled: save() writes NONE for a screen that is off, and the backend emits
+        // exporters only for enabled screens.
+        gpu.setExporter(VMScreenConfig.NEW_VM_DEFAULT_EXPORTER);
         gpu.setTransportCap(DisplayTransportCap.defaultFor(
-            VMScreenConfig.ID_GPU0, DisplayExporter.NATIVE));
+            VMScreenConfig.ID_GPU0, VMScreenConfig.NEW_VM_DEFAULT_EXPORTER));
         gpu.setInputEnabled(true);
+        // Written even though the screen is off and its exporter is not VNC, for the same reason
+        // the exporter above is: the editor loads this config over its rows, so what it shows the
+        // moment the user switches this screen to VNC is what is written here. The two screens get
+        // different ports because they can be exported at once and two servers may not share one.
+        gpu.setVncHost(VMScreenConfig.NEW_VM_DEFAULT_VNC_HOST);
+        gpu.setVncPort(VMScreenConfig.newVmDefaultVncPort(VMScreenConfig.ID_GPU0));
         gpu.setWidth(VMScreenConfig.DEFAULT_WIDTH);
         gpu.setHeight(VMScreenConfig.DEFAULT_HEIGHT);
         gpu.setRefreshRate(VMScreenConfig.DEFAULT_REFRESH_RATE);
@@ -117,10 +128,12 @@ public static VMConfig createWithCustomizeDefaults(@NonNull Context context) {
 
         var simpleFb = VMScreenConfig.of(item, VMScreenConfig.ID_SIMPLEFB);
         simpleFb.setEnabled(true);
-        simpleFb.setExporter(DisplayExporter.NATIVE);
+        simpleFb.setExporter(VMScreenConfig.NEW_VM_DEFAULT_EXPORTER);
         simpleFb.setTransportCap(DisplayTransportCap.defaultFor(
-            VMScreenConfig.ID_SIMPLEFB, DisplayExporter.NATIVE));
+            VMScreenConfig.ID_SIMPLEFB, VMScreenConfig.NEW_VM_DEFAULT_EXPORTER));
         simpleFb.setInputEnabled(true);
+        simpleFb.setVncHost(VMScreenConfig.NEW_VM_DEFAULT_VNC_HOST);
+        simpleFb.setVncPort(VMScreenConfig.newVmDefaultVncPort(VMScreenConfig.ID_SIMPLEFB));
         simpleFb.setWidth(VMScreenConfig.DEFAULT_WIDTH);
         simpleFb.setHeight(VMScreenConfig.DEFAULT_HEIGHT);
         simpleFb.setPollHz(VMScreenConfig.NEW_VM_DEFAULT_POLL_HZ);
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/store/vm/VMScreenConfig.java b/app/src/main/java/cn/classfun/droidvm/lib/store/vm/VMScreenConfig.java
index 1efe3543a..9e4b41d9d 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/store/vm/VMScreenConfig.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/store/vm/VMScreenConfig.java
@@ -1,5 +1,427 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
+package cn.classfun.droidvm.lib.store.vm;
+
+import android.content.Context;
+
+import androidx.annotation.NonNull;
+import androidx.annotation.Nullable;
+import androidx.annotation.StringRes;
+
+import java.util.ArrayList;
+import java.util.List;
+
+import cn.classfun.droidvm.R;
+import cn.classfun.droidvm.lib.store.base.DataItem;
+import cn.classfun.droidvm.lib.store.enums.Enums;
+
+/**
+ * One entry of a VM config's "screens" object -- one screen, and the one exporter bound to it.
+ *
+ * <p>A screen is a display device the VM has: {@code gpu-0} is the virtio-gpu device's screen,
+ * {@code simplefb} is the simplefb device's, and the two are independent devices rather than two
+ * settings of one. The ids are exactly the tokens crosvm's {@code screen=} takes, because they
+ * are handed to it verbatim; they are also the {@code stable_id} the app stores when the user
+ * picks a screen to open, so they must never be renamed.</p>
+ *
+ * <p>The entry is keyed by that id rather than sitting in an array, so "one binding per screen"
+ * -- which crosvm rejects a command line for violating -- cannot be expressed wrongly here in
+ * the first place.</p>
+ *
+ * <p>{@code enabled} says the VM has that display device at all -- for {@code gpu-0} that is the
+ * whole virtio-gpu device, renderer included, and the renderer is a setting inside it rather than
+ * a switch of its own. The exporter says who watches the screen; a screen with no exporter is a
+ * legal, ordinary state (the guest still has the device), and crosvm accepts it too.</p>
+ */
+public final class VMScreenConfig {
+    /** Key of the screens object on the VM config. */
+    public static final String KEY = "screens";
+
+    /** The virtio-gpu device's screen. Only exists when the VM has a GPU. */
+    public static final String ID_GPU0 = "gpu-0";
+    /** The simplefb device's screen; its geometry is fixed by the device tree. */
+    public static final String ID_SIMPLEFB = "simplefb";
+    /** Every screen id, in the order the UI lists them. Iteration order is part of the schema. */
+    public static final String[] IDS = {ID_GPU0, ID_SIMPLEFB};
+
+    /** Sub-object holding this screen's VNC server settings, when its exporter is VNC. */
+    private static final String KEY_VNC = "vnc";
+    /**
+     * Whether this screen gets its own absolute input devices. Absent means on, which is how
+     * every config written before this key existed keeps the devices it already had: the default
+     * carries the migration, so nothing on disk has to be rewritten to gain it.
+     */
+    private static final String KEY_INPUT_ENABLED = "input_enabled";
+    /** Ceiling on the transport negotiated between this screen and its exporter. */
+    private static final String KEY_TRANSPORT_CAP = "transport_cap";
+
+    // Geometry. Every screen has a size; only the virtio-gpu screen has a mode to put a refresh
+    // rate and a DPI in, and only simplefb has a poll rate, because that is the difference between
+    // a device the guest programs and a block of memory the host watches.
+    private static final String KEY_WIDTH = "width";
+    private static final String KEY_HEIGHT = "height";
+    private static final String KEY_REFRESH_RATE = "refresh_rate";
+    private static final String KEY_DPI_H = "dpi_h";
+    private static final String KEY_DPI_V = "dpi_v";
+    private static final String KEY_POLL_HZ = "poll_hz";
+
+    /** The VM-level keys {@link #migrateGeometry} folds into the screens, then drops. */
+    private static final String[] LEGACY_GEOMETRY = {
+        "display_width", "display_height", "display_refresh_rate", "display_dpi_h", "display_dpi_v"
+    };
+    /**
+     * The VM-level accelerator switch, folded into the gpu-0 screen's own switch by
+     * {@link #migrateGpuDevice} and then dropped.
+     */
+    private static final String LEGACY_GPU_ENABLED = "gpu_enabled";
+
+    public static final long DEFAULT_WIDTH = 1280;
+    public static final long DEFAULT_HEIGHT = 720;
+    public static final long DEFAULT_REFRESH_RATE = 120;
+    public static final long DEFAULT_DPI = 160;
+    /**
+     * What the simplefb bridge polled at for as long as the rate was not settable, so a screen
+     * that never names one behaves as it always did. Mirrors crosvm's DEFAULT_SIMPLEFB_POLL_HZ.
+     */
+    public static final long DEFAULT_POLL_HZ = 30;
     /** Initial SimpleFB polling rate shown when creating a VM. */
     public static final long NEW_VM_DEFAULT_POLL_HZ = 60;
+
+    /**
+     * What a screen on a brand-new VM is bound to, in the one place both writers can see it.
+     *
+     * <p>Two of them write it and they must agree: {@link VMConfig#createWithCustomizeDefaults}
+     * materialises the config the editor is then handed, and the editor's own screen rows carry a
+     * default for the case where that config says nothing. They disagreed once -- the config said
+     * NONE while the row said NATIVE -- and because the config is loaded over the row, turning
+     * virtio-gpu on showed a screen bound to nothing. Neither side is wrong to have a default; the
+     * fix is for there to be one value.
+     *
+     * <p>NATIVE rather than VNC because the viewer for it is this app, already installed: it is
+     * the only exporter whose first boot can be looked at without setting something up first. This
+     * is not {@link #getExporter}'s fallback, which answers a different question -- what a stored
+     * config that does not mention an exporter meant -- and stays NONE.
+     */
+    public static final DisplayExporter NEW_VM_DEFAULT_EXPORTER = DisplayExporter.NATIVE;
+    /**
+     * What a brand-new VM's VNC server is told to listen on, in the one place both writers can
+     * see it -- {@link VMConfig#createWithCustomizeDefaults} and the editor's own screen row --
+     * for exactly the reason {@link #NEW_VM_DEFAULT_EXPORTER} is shared: the config is loaded over
+     * the row, so a second opinion here would be the losing one and the disagreement invisible.
+     *
+     * <p>The loopback rather than the wildcard. A screen that is reachable from whatever network
+     * the phone is on the moment the VM first boots is not a default's decision to make; widening
+     * it is one pick in the host menu, and the app's own console dials the phone itself either
+     * way.</p>
+     */
+    public static final String NEW_VM_DEFAULT_VNC_HOST = "127.0.0.1";
+    /** The virtio-gpu screen's port on a new VM: RFB display :0, where a client looks first. */
+    public static final long NEW_VM_DEFAULT_VNC_PORT_GPU0 = 5900;
+    /**
+     * The simplefb screen's port on a new VM: RFB display :9.
+     *
+     * <p>Nine displays up rather than one, because the two are defaults and not assignments: both
+     * screens can be bound to VNC at once, crosvm refuses a command line whose servers share a
+     * port, and the editor refuses the save before that (see {@code validateNoPortCollision}). The
+     * gap also leaves :1..:8 to a user handing them out by hand.</p>
+     */
+    public static final long NEW_VM_DEFAULT_VNC_PORT_SIMPLEFB = 5909;
+    public static final long MIN_POLL_HZ = 1;
+    /**
+     * crosvm's MAX_SIMPLEFB_POLL_HZ. A sanity bound on a knob whose cost is linear in it, not a
+     * claim about what a panel can show -- above this the watcher asks for more work than anything
+     * downstream can use.
+     */
+    public static final long MAX_POLL_HZ = 240;
+    public final String id;
+    public final DataItem item;
+
+    public VMScreenConfig(@NonNull String id, @NonNull DataItem item) {
+        this.id = id;
+        this.item = item;
+    }
+
+    /** Whether this screen's display device is configured for the VM. */
+    public boolean isEnabled() {
+        return item.optBoolean("enabled", false);
+    }
+
+    public void setEnabled(boolean enabled) {
+        item.set("enabled", enabled);
+    }
+
+    /**
+     * Who watches this screen. Absent reads as NONE, and stays reading as NONE even though a new
+     * screen now comes up defaulted to NATIVE.
+     *
+     * <p>Those are two different questions and only one of them is here. What a new VM gets is the
+     * picker's default, set where the row is built; this is what a file that does not say means.
+     * Nothing this app writes leaves the key out -- {@code ScreenBindingRow.save} calls
+     * {@link #setExporter} unconditionally on the entry {@link #of} has just created, and
+     * {@link #migrateBindings} writes it for every config from before the screens split -- so
+     * moving the fallback would not change what any VM comes up with. It would only change how a
+     * hand-edited file, or a token this build cannot parse, is read, and it would change it into
+     * a display service and a pair of input devices bound to a screen whose file never asked for
+     * either, because everything downstream tests {@code != NONE}.</p>
+     */
+    @NonNull
+    public DisplayExporter getExporter() {
+        return Enums.optEnum(item, "exporter", DisplayExporter.NONE);
+    }
+
+    public void setExporter(@NonNull DisplayExporter exporter) {
+        item.set("exporter", exporter);
+    }
+
+    /**
+     * Whether this screen gets its own multi-touch and absolute-pointer devices.
+     *
+     * <p>Absolute coordinates only mean anything under one output's geometry, so those two
+     * devices are per screen; the VM-wide keyboard and relative pointer have no output binding at
+     * all and are unaffected by this switch. Turning it off is turning the two devices off: the
+     * set of {@code --input} devices is fixed when crosvm starts, so this takes effect on the
+     * VM's next start, not on the running one.</p>
+     *
+     * <p>Where the screen is exported over VNC the switch means one thing more, without meaning
+     * anything different: those two devices are half crosvm's now -- it builds that binding's
+     * tablet and its own keyboard itself -- so the daemon spells the same off/on as
+     * {@code view-only=true|false} on that screen's {@code --vnc-server}, and off makes crosvm
+     * build neither and drop RFB pointer and key events. Which is the answer the user was already
+     * asking for: a screen to watch and not touch, from the app's console and from a third-party
+     * client alike.</p>
+     *
+     * <p>Defaults to on, and to on for a config that predates the key -- the devices existed
+     * before it did.</p>
+     */
+    public boolean isInputEnabled() {
+        return item.optBoolean(KEY_INPUT_ENABLED, true);
+    }
+
+    public void setInputEnabled(boolean enabled) {
+        item.set(KEY_INPUT_ENABLED, enabled);
+    }
+
+    /**
+     * The ceiling on this screen's transport to its exporter; see {@link DisplayTransportCap}.
+     *
+     * <p>Read against the exporter, because the ladder is the exporter's: a value stored under one
+     * exporter and read back under another may name a rung that exporter does not have, and the
+     * answer then is that exporter's default rather than a rung nobody can climb. The stored value
+     * is left alone -- switching the exporter to look and back must not lose the choice.</p>
+     */
+    @NonNull
+    public DisplayTransportCap getTransportCap() {
+        var exporter = getExporter();
+        var stored = DisplayTransportCap.fromToken(item.optString(KEY_TRANSPORT_CAP, ""));
+        if (stored != null && DisplayTransportCap.isOfferedFor(id, exporter, stored)) return stored;
+        return DisplayTransportCap.defaultFor(id, exporter);
+    }
+
+    public void setTransportCap(@NonNull DisplayTransportCap cap) {
+        // The lower-case token, not the enum constant: this same string goes on crosvm's command
+        // line, and one value must not have two spellings.
+        item.set(KEY_TRANSPORT_CAP, cap.getToken());
+    }
+
+    /** This screen's width in pixels. */
+    public long getWidth() {
+        return item.optLong(KEY_WIDTH, DEFAULT_WIDTH);
+    }
+
+    public void setWidth(long width) {
+        item.set(KEY_WIDTH, width);
+    }
+
+    /** This screen's height in pixels. */
+    public long getHeight() {
+        return item.optLong(KEY_HEIGHT, DEFAULT_HEIGHT);
+    }
+
+    public void setHeight(long height) {
+        item.set(KEY_HEIGHT, height);
+    }
+
+    /**
+     * The mode's refresh rate, in Hz. Virtio-GPU only: it reaches the guest through the scanout's
+     * mode, and simplefb has no mode to carry one -- the device tree says nothing about time.
+     */
+    public long getRefreshRate() {
+        return item.optLong(KEY_REFRESH_RATE, DEFAULT_REFRESH_RATE);
+    }
+
+    public void setRefreshRate(long hz) {
+        item.set(KEY_REFRESH_RATE, hz);
+    }
+
+    /** Horizontal DPI of the mode. Virtio-GPU only, for the same reason as the refresh rate. */
+    public long getDpiH() {
+        return item.optLong(KEY_DPI_H, DEFAULT_DPI);
+    }
+
+    public void setDpiH(long dpi) {
+        item.set(KEY_DPI_H, dpi);
+    }
+
+    /** Vertical DPI of the mode. Virtio-GPU only. */
+    public long getDpiV() {
+        return item.optLong(KEY_DPI_V, DEFAULT_DPI);
+    }
+
+    public void setDpiV(long dpi) {
+        item.set(KEY_DPI_V, dpi);
+    }
+
+    /**
+     * How many times a second the host looks at the simplefb framebuffer -- this screen's answer
+     * to "refresh rate", and the only one it can give.
+     *
+     * <p>Nothing announces a frame here: the guest maps the region write-combining and no write
+     * traps, so the rate the host samples at is the only thing that decides when a picture exists.
+     * It is a property of the host's watcher, not of the device the guest sees -- the guest cannot
+     * tell what it is set to -- which is why it lives on this screen and the GPU screen's refresh
+     * rate, a real mode field the guest is told about, does not.</p>
+     */
+    public long getPollHz() {
+        return item.optLong(KEY_POLL_HZ, DEFAULT_POLL_HZ);
+    }
+
+    public void setPollHz(long hz) {
+        item.set(KEY_POLL_HZ, hz);
+    }
+
+    /** True for the screen the virtio-gpu device provides, as opposed to simplefb's. */
+    public boolean isGpu() {
+        return ID_GPU0.equals(id);
+    }
+
+    /** The port a brand-new VM's [id] screen is given; see the two constants it picks between. */
+    public static long newVmDefaultVncPort(@NonNull String id) {
+        return ID_GPU0.equals(id)
+            ? NEW_VM_DEFAULT_VNC_PORT_GPU0 : NEW_VM_DEFAULT_VNC_PORT_SIMPLEFB;
+    }
+
+    /** This screen's VNC sub-object, created if it is not there yet. */
+    @NonNull
+    public DataItem vnc() {
+        var vnc = item.opt(KEY_VNC, (DataItem) null);
+        if (vnc == null || !vnc.is(DataItem.Type.OBJECT)) {
+            item.set(KEY_VNC, DataItem.newObject());
+            vnc = item.get(KEY_VNC);
+        }
+        return vnc;
+    }
+
+    /** Listen address; empty means crosvm's own default (the IPv4 wildcard). */
+    @NonNull
+    public String getVncHost() {
+        return str(vnc().optString("host", ""));
+    }
+
+    public void setVncHost(@NonNull String host) {
+        vnc().set("host", host);
+    }
+
+    /** Listen port, or -1 when one has not been assigned yet (the daemon picks one on start). */
+    public long getVncPort() {
+        return vnc().optLong("port", -1);
+    }
+
+    public void setVncPort(long port) {
+        vnc().set("port", port);
+    }
+
+    public boolean isVncPasswordAuth() {
+        return vnc().optBoolean("password_auth", false);
+    }
+
+    public void setVncPasswordAuth(boolean auth) {
+        vnc().set("password_auth", auth);
+    }
+
+    @NonNull
+    public String getVncPassword() {
+        return str(vnc().optString("password", ""));
+    }
+
+    public void setVncPassword(@NonNull String password) {
+        vnc().set("password", password);
+    }
+
+    @StringRes
+    public int getNameStringId() {
+        return isGpu() ? R.string.create_vm_screen_gpu0 : R.string.create_vm_screen_simplefb;
+    }
+
+    /** Human-facing name of the screen: "Virtio-GPU screen", "SimpleFB screen". */
+    @NonNull
+    public String getDisplayName(@NonNull Context ctx) {
+        return ctx.getString(getNameStringId());
+    }
+
+    @NonNull
+    private static String str(@Nullable String s) {
+        return s == null ? "" : s;
+    }
+
+    /** The screens object on {@code config}, created if absent. */
+    @NonNull
+    private static DataItem screensOf(@NonNull DataItem config) {
+        var screens = config.opt(KEY, (DataItem) null);
+        if (screens == null || !screens.is(DataItem.Type.OBJECT)) {
+            config.set(KEY, DataItem.newObject());
+            screens = config.get(KEY);
+        }
+        return screens;
+    }
+
+    /** The entry for [id], created empty if the config has none yet. */
+    @NonNull
+    public static VMScreenConfig of(@NonNull DataItem config, @NonNull String id) {
+        var screens = screensOf(config);
+        var entry = screens.opt(id, (DataItem) null);
+        if (entry == null || !entry.is(DataItem.Type.OBJECT)) {
+            screens.set(id, DataItem.newObject());
+            entry = screens.get(id);
+        }
+        return new VMScreenConfig(id, entry);
+    }
+
+    /** The entry for [id], or null when the config does not describe that screen. */
+    @Nullable
+    public static VMScreenConfig find(@NonNull DataItem config, @NonNull String id) {
+        var screens = config.opt(KEY, (DataItem) null);
+        if (screens == null || !screens.is(DataItem.Type.OBJECT)) return null;
+        var entry = screens.opt(id, (DataItem) null);
+        if (entry == null || !entry.is(DataItem.Type.OBJECT)) return null;
+        return new VMScreenConfig(id, entry);
+    }
+
+    /**
+     * Whether the VM has the virtio-gpu device at all -- which is exactly the gpu-0 screen's
+     * switch, because the switch is the device.
+     *
+     * <p>There used to be a second answer, a VM-level {@code gpu_enabled}, and the pair could
+     * disagree: a GPU with the screen off was meant to be a renderer that scans out nothing. It
+     * never worked -- no desktop ever came up on it -- so the two collapsed into one, and the
+     * renderer became a setting inside the device rather than a switch beside it. Everything that
+     * used to ask "is there a GPU" asks here.</p>
+     */
+    public static boolean hasGpuDevice(@NonNull DataItem config) {
+        var gpu0 = find(config, ID_GPU0);
+        return gpu0 != null && gpu0.isEnabled();
+    }
+
+    /** Every screen that exists and has an exporter bound to it, in {@link #IDS} order. */
+    @NonNull
+    public static List<VMScreenConfig> boundOf(@NonNull DataItem config) {
+        var out = new ArrayList<VMScreenConfig>();
+        for (var screen : listOf(config))
+            if (screen.isEnabled() && screen.getExporter() != DisplayExporter.NONE)
+                out.add(screen);
+        return out;
+    }
+
     /**
      *
      * <p>For the host-process settings that belong to that path rather than to one screen -- the
@@ -10,3 +432,205 @@
         return false;
     }
 
+    /**
+     * Whether this screen gets its own {@code multi-touch} + absolute-pointer pair when the VM
+     * starts: the device has to exist, something has to be watching it, and the switch has to be
+     * on. A screen nobody exports has no console to send absolute input from, so devices for it
+     * would be devices nothing can ever write to.
+     *
+     * <p>Both devices, but not both from here: on a VNC-exported screen this is what the daemon
+     * turns into {@code view-only=false}, and crosvm builds the tablet. Which half is whose is
+     * {@code CrosvmBackendInstance.touchscreenScreens}/{@code socketTabletScreens}; this predicate
+     * is the same question for both and stays one.</p>
+     */
+    public boolean hasAbsoluteInput() {
+        return isEnabled() && getExporter() != DisplayExporter.NONE && isInputEnabled();
+    }
+
+    /** Every screen that gets its own absolute input devices, in {@link #IDS} order. */
+    @NonNull
+    public static List<VMScreenConfig> absoluteInputOf(@NonNull DataItem config) {
+        var out = new ArrayList<VMScreenConfig>();
+        for (var screen : listOf(config))
+            if (screen.hasAbsoluteInput()) out.add(screen);
+        return out;
+    }
+
+    /** Every screen the config describes, in {@link #IDS} order. */
+    @NonNull
+    public static List<VMScreenConfig> listOf(@NonNull DataItem config) {
+        var out = new ArrayList<VMScreenConfig>();
+        for (var id : IDS) {
+            var screen = find(config, id);
+            if (screen != null) out.add(screen);
+        }
+        return out;
+    }
+
+    /**
+     * Brings a config up to the current screens schema. Two folds, each gated on its own evidence
+     * that it has not run yet, so a config from any generation lands in the same place.
+     */
+    static void migrate(@NonNull DataItem config) {
+        // Asked before anything runs, because the first fold is what makes it false.
+        var preScreens = config.opt(KEY, (DataItem) null) == null;
+        migrateBindings(config);
+        migrateGeometry(config);
+        // Last, because the two above still read gpu_enabled to work out what the old config
+        // meant, and this is the one that takes it away.
+        migrateGpuDevice(config, preScreens);
+    }
+
+    /**
+     * Folds the legacy VM-level display keys into per-screen bindings, once, on load.
+     *
+     * <p>The old model had one display: {@code display_backend} chose which device produced it
+     * and {@code native_display_enabled} / {@code vnc_enabled} chose who consumed it, with the
+     * two consumers mutually exclusive because crosvm kept whichever sink opened first. The new
+     * model has two independent devices, each carrying its own binding, so the enum becomes two
+     * enables and the consumer booleans become one exporter per screen.</p>
+     *
+     * <p>Unlike {@link VMConfig#migrateBoot} this drops the legacy keys rather than leaving them
+     * for an older build to read: they no longer describe a state this schema can be in (two
+     * screens bound at once has no {@code display_backend} value), so leaving them would leave a
+     * second, disagreeing answer on disk for the same question.</p>
+     */
+    private static void migrateBindings(@NonNull DataItem config) {
+        if (config.opt(KEY, (DataItem) null) != null) return; // already the new shape
+
+        var displayEnabled = config.optBoolean("display_enabled", false);
+        var backend = Enums.optEnum(config, "display_backend", DisplayBackend.NONE);
+        var wantNative = config.optBoolean("native_display_enabled", false);
+        var wantVnc = config.optBoolean("vnc_enabled", false);
+        var gpuEnabled = config.optBoolean(LEGACY_GPU_ENABLED, false);
+
+        // Which screen the old config named. display_enabled gated everything, so a VM with it
+        // off named no screen no matter what the backend said.
+        String bound = null;
+        if (displayEnabled && backend == DisplayBackend.VIRTIO_GPU) bound = ID_GPU0;
+        else if (displayEnabled && backend == DisplayBackend.SIMPLEFB) bound = ID_SIMPLEFB;
+
+        // `--vnc-server` was emitted from vnc_enabled alone -- buildVncCommand never looked at
+        // display_enabled -- so "display off, VNC on, GPU on" was a working VM: crosvm gave the
+        // GPU device its default display and the VNC server showed it. Keep it working by
+        // binding to the screen crosvm's own compat rule would have picked for an exporter that
+        // named none: gpu-0 when there is a GPU. With no GPU there was no device to open and the
+        // server never served anything, so there is nothing to carry over.
+        if (bound == null && wantVnc && !wantNative && gpuEnabled) bound = ID_GPU0;
+
+        var gpu0 = of(config, ID_GPU0);
+        var fb = of(config, ID_SIMPLEFB);
+        gpu0.setEnabled(ID_GPU0.equals(bound));
+        fb.setEnabled(ID_SIMPLEFB.equals(bound));
+        gpu0.setExporter(DisplayExporter.NONE);
+        fb.setExporter(DisplayExporter.NONE);
+
+        var exporter = wantNative ? DisplayExporter.NATIVE
+            : wantVnc ? DisplayExporter.VNC : DisplayExporter.NONE;
+        if (bound != null && exporter != DisplayExporter.NONE)
+            of(config, bound).setExporter(exporter);
+
+        // The VNC settings follow the binding, and when nothing is bound they still have to land
+        // somewhere or a port and a password the user chose are lost. Park them on the screen the
+        // old backend named, or -- with no backend at all -- on the one crosvm would have
+        // defaulted an unscreened exporter to, so re-enabling the exporter finds them in place.
+        var vncHome = bound != null ? bound : gpuEnabled ? ID_GPU0 : ID_SIMPLEFB;
+        var home = of(config, vncHome);
+        home.setVncHost(str(config.optString("vnc_host", "")));
+        home.setVncPort(config.optLong("vnc_port", -1));
+        home.setVncPasswordAuth(config.optBoolean("vnc_password_auth", false));
+        home.setVncPassword(str(config.optString("vnc_password", "")));
+
+        config.remove("display_enabled");
+        config.remove("display_backend");
+        config.remove("native_display_enabled");
+        config.remove("vnc_enabled");
+        config.remove("vnc_host");
+        config.remove("vnc_port");
+        config.remove("vnc_password_auth");
+        config.remove("vnc_password");
+    }
+
+    /**
+     * Folds the five flat geometry keys onto the screens that have somewhere to put them.
+     *
+     * <p>The geometry was VM-level because the display was: one size, one refresh rate, one DPI,
+     * whichever device was producing the picture. With two devices that is one number answering
+     * two questions -- a 1400x1050 virtio-gpu mode and a 1280x720 framebuffer are an ordinary
+     * pair, and the old schema could not say it. Both screens inherit the old values, so a VM
+     * that is migrated and not touched comes up exactly as it did.</p>
+     *
+     * <p>What does not carry over is what the flat keys could not hold. simplefb gets a poll rate,
+     * written out at the rate the bridge used for as long as it was not settable; the refresh rate
+     * and DPI go only to the GPU screen, because simplefb's geometry is fixed by the device tree
+     * and the device tree describes neither.</p>
+     *
+     * <p>Gated on the legacy keys still being there rather than on the new ones being absent: the
+     * new ones have defaults equal to the old ones, so "absent" is indistinguishable from "folded
+     * and left at the default", and gating on that would re-run the fold over an edited screen.
+     * Dropping the keys is what makes this run once, for the same reason the bindings fold drops
+     * its own -- a second answer on disk for the same question is worse than no answer.</p>
+     */
+    private static void migrateGeometry(@NonNull DataItem config) {
+        var legacy = false;
+        for (var key : LEGACY_GEOMETRY)
+            if (config.opt(key, (DataItem) null) != null) {
+                legacy = true;
+                break;
+            }
+        if (!legacy) return;
+
+        var width = config.optLong("display_width", DEFAULT_WIDTH);
+        var height = config.optLong("display_height", DEFAULT_HEIGHT);
+
+        var gpu0 = of(config, ID_GPU0);
+        gpu0.setWidth(width);
+        gpu0.setHeight(height);
+        gpu0.setRefreshRate(config.optLong("display_refresh_rate", DEFAULT_REFRESH_RATE));
+        gpu0.setDpiH(config.optLong("display_dpi_h", DEFAULT_DPI));
+        gpu0.setDpiV(config.optLong("display_dpi_v", DEFAULT_DPI));
+
+        var fb = of(config, ID_SIMPLEFB);
+        fb.setWidth(width);
+        fb.setHeight(height);
+        // Written rather than left to the getter's default: this screen gaining a rate of its own
+        // is the visible half of the fold, and a value nobody can read out of the file is one the
+        // user cannot be shown having inherited.
+        fb.setPollHz(DEFAULT_POLL_HZ);
+
+        for (var key : LEGACY_GEOMETRY) config.remove(key);
+    }
+
+    /**
+     * Folds the VM-level {@code gpu_enabled} away: the gpu-0 switch is the virtio-gpu device now,
+     * and the renderer is a setting inside it.
+     *
+     * <p>The old pair was two answers to one question and they were allowed to disagree, so the
+     * fold has to decide what each disagreement meant.</p>
+     *
+     * <p><b>Accelerator on, screen off.</b> This was supposed to be a GPU that renders and scans
+     * out nothing, and it is the shape an acceleration test gets saved in. It never worked -- no
+     * desktop ever came up on such a VM -- so there is nothing to preserve: the device is off. A
+     * VM that was in that state was not doing anything, and saying so is more honest than carrying
+     * a configuration forward on the grounds that it was written down.</p>
+     *
+     * <p><b>Accelerator off, screen on.</b> The reverse disagreement was a real, ordinary VM in
+     * intent -- a display with no 3D -- and the old builder emitted no {@code --gpu} at all for
+     * it, so it had no display device either. The new model can say exactly what was meant, so it
+     * does: the device is on with the 2D renderer, which is also what repairs the VM.</p>
+     *
+     * <p>Runs for any config from before the screens split, key or no key: an absent
+     * {@code gpu_enabled} read as false is exactly the second case, and gating on the key alone
+     * would leave those configs with a virtio-gpu screen and no renderer named.</p>
+     */
+    private static void migrateGpuDevice(@NonNull DataItem config, boolean preScreens) {
+        if (!preScreens && config.opt(LEGACY_GPU_ENABLED, (DataItem) null) == null) return;
+        var accelerated = config.optBoolean(LEGACY_GPU_ENABLED, false);
+        var gpu0 = find(config, ID_GPU0);
+        if (!accelerated && gpu0 != null && gpu0.isEnabled())
+            // Whatever gpu_backend said was inert while the accelerator was off -- the old builder
+            // never read it -- so this is naming the renderer the VM actually ran, not losing one.
+            config.set("gpu_backend", GpuBackend.GPU_2D);
+        config.remove(LEGACY_GPU_ENABLED);
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/console/VMConsoleRouter.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/console/VMConsoleRouter.java
index 8ba60ac98..d3f33d86f 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/console/VMConsoleRouter.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/console/VMConsoleRouter.java
@@ -14,18 +14,24 @@
 import java.util.UUID;
 
 import cn.classfun.droidvm.lib.daemon.DaemonConnection;
+import cn.classfun.droidvm.lib.store.base.DataItem;
+import cn.classfun.droidvm.lib.store.vm.DisplayExporter;
 import cn.classfun.droidvm.lib.store.vm.VMConfig;
+import cn.classfun.droidvm.lib.store.vm.VMScreenConfig;
 import cn.classfun.droidvm.ui.vm.display.nativedisplay.display.VMNativeDisplayActivity;
 import cn.classfun.droidvm.ui.vm.display.vnc.base.BaseVncActivity;
 import cn.classfun.droidvm.ui.vm.display.vnc.display.VMVncDisplayActivity;
-import cn.classfun.droidvm.ui.vm.display.vnc.display.VMVncPresentationActivity;
 
 /**
  * Shared "open the VM's default view" routing, so the VM-info screen (a console
  * button) and the VM-list auto-open-after-start pick the <b>same</b> thing:
- * native display, else VNC, else the serial console (uart, then stdio). Keeping
+ * the first bound screen, else the serial console (uart, then stdio). Keeping
  * this in one place is why both paths agree instead of the list always opening
  * the UART console regardless of the VM's display.
+ *
+ * <p>Every display view is opened for one screen, named explicitly, because the VM can have two
+ * and they can be exported differently. The default picks the first one bound -- the only one a
+ * single-screen VM has; the chooser is where a two-screen VM is asked which.</p>
  */
 public final class VMConsoleRouter {
     private VMConsoleRouter() {
@@ -37,13 +43,13 @@ private VMConsoleRouter() {
      */
     public static void openDefault(@NonNull Context ctx, @NonNull UUID vmId,
                                    @NonNull VMConfig config, boolean running) {
-        var item = config.item;
-        if (item.optBoolean("native_display_enabled", false)) {
-            openNative(ctx, vmId, config);
-            return;
-        }
-        if (item.optBoolean("vnc_enabled", false)) {
-            openVnc(ctx, vmId, config);
+        var bound = VMScreenConfig.boundOf(config.item);
+        if (!bound.isEmpty()) {
+            var screen = bound.get(0);
+            if (screen.getExporter() == DisplayExporter.NATIVE)
+                openNative(ctx, vmId, config, screen.id);
+            else
+                openVnc(ctx, vmId, config, screen.id);
             return;
         }
         // Serial console: ask the daemon which streams exist. Prefer a real guest serial port
@@ -88,27 +94,51 @@ public static void openConsole(@NonNull Context ctx, @NonNull UUID vmId,
         ctx.startActivity(intent);
     }
 
-    public static void openNative(@NonNull Context ctx, @NonNull UUID vmId, @NonNull VMConfig config) {
+    /**
+     * Opens [screenId]'s native display. The screen id travels in the intent rather than being
+     * inferred here, because the display service name is derived from it and a wrong guess is a
+     * console that waits forever on a binder nobody registers.
+     */
+    public static void openNative(@NonNull Context ctx, @NonNull UUID vmId,
+                                  @NonNull VMConfig config, @NonNull String screenId) {
         var item = config.item;
         var intent = new Intent(ctx, VMNativeDisplayActivity.class);
         intent.putExtra(VMNativeDisplayActivity.EXTRA_VM_ID, vmId.toString());
         intent.putExtra(VMNativeDisplayActivity.EXTRA_VM_NAME, config.getName());
-        intent.putExtra(VMNativeDisplayActivity.EXTRA_WIDTH, item.optLong("display_width", 1280));
-        intent.putExtra(VMNativeDisplayActivity.EXTRA_HEIGHT, item.optLong("display_height", 720));
+        intent.putExtra(VMNativeDisplayActivity.EXTRA_SCREEN, screenId);
+        intent.putExtra(VMNativeDisplayActivity.EXTRA_INPUT_ENABLED, inputEnabled(item, screenId));
+        // The screen's own size, not the VM's: the two screens have different geometry now, and
+        // the console is showing exactly one of them.
+        var screen = VMScreenConfig.find(item, screenId);
+        intent.putExtra(VMNativeDisplayActivity.EXTRA_WIDTH,
+            screen != null ? screen.getWidth() : VMScreenConfig.DEFAULT_WIDTH);
+        intent.putExtra(VMNativeDisplayActivity.EXTRA_HEIGHT,
+            screen != null ? screen.getHeight() : VMScreenConfig.DEFAULT_HEIGHT);
         ctx.startActivity(intent);
     }
 
-    public static void openVnc(@NonNull Context ctx, @NonNull UUID vmId, @NonNull VMConfig config) {
-        var intent = new Intent(ctx, VMVncDisplayActivity.class);
-        intent.putExtra(BaseVncActivity.EXTRA_VM_ID, vmId.toString());
-        intent.putExtra(BaseVncActivity.EXTRA_VM_NAME, config.getName());
-        ctx.startActivity(intent);
+    /**
+     * Whether [screenId] was started with its own absolute input devices.
+     *
+     * <p>This is what the config says now, which is only the same as what the running VM has if
+     * nobody edited it since. The console uses it to explain dead touch input, never to decide
+     * where to send events -- that answer comes from the daemon, which knows which sockets it
+     * actually bound.</p>
+     */
+    private static boolean inputEnabled(@NonNull DataItem item, @NonNull String screenId) {
+        var screen = VMScreenConfig.find(item, screenId);
+        return screen == null || screen.isInputEnabled();
     }
 
-    public static void openVncExt(@NonNull Context ctx, @NonNull UUID vmId, @NonNull VMConfig config) {
-        var intent = new Intent(ctx, VMVncPresentationActivity.class);
+    public static void openVnc(@NonNull Context ctx, @NonNull UUID vmId,
+                               @NonNull VMConfig config, @NonNull String screenId) {
+        var intent = new Intent(ctx, VMVncDisplayActivity.class);
         intent.putExtra(BaseVncActivity.EXTRA_VM_ID, vmId.toString());
         intent.putExtra(BaseVncActivity.EXTRA_VM_NAME, config.getName());
+        intent.putExtra(BaseVncActivity.EXTRA_SCREEN, screenId);
+        intent.putExtra(BaseVncActivity.EXTRA_INPUT_ENABLED, inputEnabled(config.item, screenId));
         ctx.startActivity(intent);
     }
+    // openVncExt retired: projecting to an external display is now an action inside the VNC
+    // console's own menu (VMVncDisplayActivity#projectToExternalDisplay), not a chooser entry.
 }
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/display/nativedisplay/display/VMNativeDisplayActivity.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/nativedisplay/display/VMNativeDisplayActivity.java
index eb137a773..b83398d01 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/display/nativedisplay/display/VMNativeDisplayActivity.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/nativedisplay/display/VMNativeDisplayActivity.java
@@ -30,6 +30,7 @@
 import android.widget.FrameLayout;
 import android.widget.LinearLayout;
 import android.widget.TextView;
+import android.widget.Toast;
 
 import androidx.annotation.NonNull;
 import androidx.annotation.Nullable;
@@ -53,6 +54,7 @@
 import cn.classfun.droidvm.lib.daemon.DaemonConnection;
 import cn.classfun.droidvm.lib.daemon.ForegroundCallback;
 import cn.classfun.droidvm.lib.store.vm.NativeDisplay;
+import cn.classfun.droidvm.lib.store.vm.VMScreenConfig;
 import cn.classfun.droidvm.lib.ui.DragTouchListener;
 import cn.classfun.droidvm.lib.ui.ImeInsetsExempt;
 import cn.classfun.droidvm.lib.ui.MaterialMenu;
@@ -94,6 +96,17 @@ public final class VMNativeDisplayActivity extends AppCompatActivity
     private static final String TAG = "VMNativeDisplay";
     public static final String EXTRA_VM_NAME = "vm_name";
     public static final String EXTRA_VM_ID = "vm_id";
+    /**
+     * Which screen this console shows. The display service name is built from it, so it has to
+     * come from whoever opened the console -- a VM can have two screens and only one of them is
+     * registered under the name this activity waits on.
+     */
+    public static final String EXTRA_SCREEN = "screen";
+    /**
+     * Whether that screen was configured with its own absolute input devices. Used only to say
+     * why touch is doing nothing; where the events go is the daemon's answer, not this one.
+     */
+    public static final String EXTRA_INPUT_ENABLED = "input_enabled";
     public static final String EXTRA_WIDTH = "display_width";
     public static final String EXTRA_HEIGHT = "display_height";
 
@@ -132,6 +145,14 @@ public final class VMNativeDisplayActivity extends AppCompatActivity
     private String vmName = "";
     private String vmId = "";
     private String vmKey = "";
+    /**
+     * The screen this console shows. It picks the display service to wait on, and it picks which
+     * screen's absolute input devices the touches land on -- the two devices are per screen, so
+     * "the VM's touchscreen" is not a thing that can be addressed any more.
+     */
+    private String screenId = VMScreenConfig.ID_GPU0;
+    /** Whether that screen has absolute input devices at all; see {@link #EXTRA_INPUT_ENABLED}. */
+    private boolean screenInputEnabled = true;
     private int guestWidth = 1280;
     private int guestHeight = 720;
 
@@ -255,9 +276,12 @@ protected void onCreate(@Nullable Bundle savedInstanceState) {
         var intent = getIntent();
         vmName = orEmpty(intent.getStringExtra(EXTRA_VM_NAME));
         vmId = orEmpty(intent.getStringExtra(EXTRA_VM_ID));
+        screenId = orEmpty(intent.getStringExtra(EXTRA_SCREEN));
+        if (screenId.isEmpty()) screenId = VMScreenConfig.ID_GPU0;
+        screenInputEnabled = intent.getBooleanExtra(EXTRA_INPUT_ENABLED, true);
         guestWidth = (int) intent.getLongExtra(EXTRA_WIDTH, 1280);
         guestHeight = (int) intent.getLongExtra(EXTRA_HEIGHT, 720);
-        vmKey = NativeDisplay.serviceNameFromId(vmId);
+        vmKey = NativeDisplay.serviceNameFromId(vmId, screenId);
 
         bindViews();
         toolbar.setTitle(vmName.isEmpty() ? getString(R.string.native_display_title) : vmName);
@@ -290,6 +314,7 @@ public void onLost() {
     private void onRootConnected(@NonNull INativeDisplayRootService service) {
         // Try a direct unix-socket sink to the daemon (one write per evdev frame, no IPC
         // round-trip); on any failure it falls back to the vm_input JSON-RPC path below.
+        directSink = new DirectInputSink(vmId, () -> screenId, service, this::sendInputToDaemon);
         inputForwarder = new InputForwarder(directSink);
         if (nativeExtraKeys != null) nativeExtraKeys.setForwarder(inputForwarder);
         // A forwarder is built fresh on every attach and starts in TOUCH, so it has to be told
@@ -700,6 +725,7 @@ private boolean sendInputToDaemon(int channel, @NonNull byte[] data) {
             var req = new JSONObject();
             req.put("command", "vm_input");
             req.put("vm_id", vmId);
+            req.put("screen", screenId);
             req.put("channel", channel);
             req.put("data", Base64.encodeToString(data, Base64.NO_WRAP));
             var resp = DaemonConnection.getInstance().request(req);
@@ -948,6 +974,16 @@ private boolean onMenuItemClicked(@NonNull MenuItem item) {
     // translator to the matching virtio-input device. The segmented header shows the active mode.
     private void setInputModeTo(@NonNull InputMode mode) {
         if (inputMode == mode) return;
+        // Both absolute modes ride this screen's own devices, so with them switched off the mode
+        // is selectable and inert. Say so once, here, rather than leaving the user tapping a
+        // screen that answers nothing -- and say the true reason, which is a VM that has to be
+        // started again, not a setting that would take effect if they waited.
+        //
+        // The switch reaches typing too now, since the keyboard became this screen's rather than
+        // the VM's. The hint names no device, so it stays true of all three; MOUSE is still the
+        // one thing the switch does not touch, the relative pointer being the VM's.
+        if (!screenInputEnabled && mode != InputMode.MOUSE)
+            Toast.makeText(this, R.string.display_input_disabled_hint, Toast.LENGTH_LONG).show();
         inputMode = mode;
         getSharedPreferences(INPUT_PREFS, MODE_PRIVATE).edit()
             .putInt(KEY_INPUT_MODE, inputMode.ordinal()).apply();
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/display/nativedisplay/input/DirectInputSink.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/nativedisplay/input/DirectInputSink.java
index f03f98155..a7be181e9 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/display/nativedisplay/input/DirectInputSink.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/nativedisplay/input/DirectInputSink.java
@@ -11,6 +11,8 @@
 import androidx.annotation.NonNull;
 import androidx.annotation.Nullable;
 
+import java.util.function.Supplier;
+
 import cn.classfun.droidvm.display.INativeDisplayRootService;
 
 /**
@@ -20,11 +22,17 @@
  * {@code connectto} that su-domain socket nor receive its fd over binder, but it can hand the bytes
  * across binder. Falls back to {@code fallback} on any failure so the feature degrades to the
  * original IPC path instead of dropping input.
+ *
+ * <p>Every write carries the screen the owning console is showing, because the absolute devices
+ * are per screen. The screen is read from the console rather than copied in at construction: a
+ * VNC console opened without one named learns which screen it got only when the daemon answers
+ * {@code vm_vnc_info}, and that answer can arrive after the broker binder does.</p>
  */
 public final class DirectInputSink implements InputForwarder.InputSink {
     private static final String TAG = "DirectInputSink";
 
     private final String vmId;
+    private final Supplier<String> screenId;
     private final INativeDisplayRootService rootService;
     private final InputForwarder.InputSink fallback;
     private volatile boolean closed = false;
@@ -34,12 +42,19 @@ public final class DirectInputSink implements InputForwarder.InputSink {
 
     /**
      * @param vmId        the VM id, used by the daemon to find the running VM's input channel.
+     * @param screenId    the screen this console is currently showing; picks between two screens'
+     *                    absolute devices and their keyboards, and is ignored by the VM-wide
+     *                    relative pointer alone. Sent on every channel, so which channels are per
+     *                    screen stays {@link cn.classfun.droidvm.lib.store.vm.NativeDisplay}'s
+     *                    decision rather than something this side has to be taught.
      * @param rootService daemon broker binder that writes the bytes; null disables the direct path.
      * @param fallback    sink used when the direct path is unavailable or errors.
      */
-    public DirectInputSink(@NonNull String vmId, @Nullable INativeDisplayRootService rootService,
+    public DirectInputSink(@NonNull String vmId, @NonNull Supplier<String> screenId,
+                           @Nullable INativeDisplayRootService rootService,
                            @Nullable InputForwarder.InputSink fallback) {
         this.vmId = vmId;
+        this.screenId = screenId;
         this.rootService = rootService;
         this.fallback = fallback;
     }
@@ -49,7 +64,8 @@ public boolean write(int channel, @NonNull byte[] data) {
         if (closed || channel < 0 || channel >= CHANNEL_COUNT) return false;
         if (rootService != null) {
             try {
-                if (rootService.writeInput(vmId, channel, data)) {
+                var screen = screenId.get();
+                if (rootService.writeInput(vmId, screen == null ? "" : screen, channel, data)) {
                     lastWriteDirect = true;
                     return true;
                 }
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/display/vnc/base/BaseVncActivity.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/vnc/base/BaseVncActivity.java
index 158f353bc..533edd212 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/display/vnc/base/BaseVncActivity.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/vnc/base/BaseVncActivity.java
@@ -17,8 +17,6 @@
 
 import android.annotation.SuppressLint;
 import android.content.ActivityNotFoundException;
-import android.content.ClipData;
-import android.content.ClipboardManager;
 import android.content.DialogInterface;
 import android.content.Intent;
 import android.content.pm.ActivityInfo;
@@ -34,6 +32,7 @@
 import android.view.View;
 import android.view.WindowManager;
 import android.view.inputmethod.InputMethodManager;
+import android.widget.EditText;
 import android.widget.LinearLayout;
 import android.widget.TextView;
 import android.widget.Toast;
@@ -50,6 +49,7 @@
 import cn.classfun.droidvm.R;
 import cn.classfun.droidvm.lib.daemon.DaemonConnection;
 import cn.classfun.droidvm.lib.perf.GamePerfHint;
+import cn.classfun.droidvm.lib.ui.CopyableField;
 import cn.classfun.droidvm.lib.ui.ImeInsetsExempt;
 import cn.classfun.droidvm.ui.vm.display.base.DisplayExtraKeysPanel;
 import cn.classfun.droidvm.ui.vm.display.vnc.input.VncExtraKeysPanel;
@@ -58,6 +58,17 @@ public abstract class BaseVncActivity extends AppCompatActivity implements ImeIn
     protected final String TAG = getClass().getSimpleName();
     public static final String EXTRA_VM_NAME = "vm_name";
     public static final String EXTRA_VM_ID = "vm_id";
+    /**
+     * Which screen's VNC server to connect to. A VM can run one per screen on different ports,
+     * so the daemon is asked for that screen's settings rather than for "the VM's VNC".
+     */
+    public static final String EXTRA_SCREEN = "screen";
+    /**
+     * Whether that screen was configured with its own absolute input devices. Used only to say
+     * why an input mode is doing nothing; where the events go is the daemon's answer, not this
+     * one. Modes that ride RFB (the tablet pointer, the keyboard) are unaffected either way.
+     */
+    public static final String EXTRA_INPUT_ENABLED = "input_enabled";
     protected static final int DEFAULT_PORT = 5900;
     private static final int MAX_RECONNECT_ATTEMPTS = 5;
     private static final long RECONNECT_DELAY_MS = 2000;
@@ -74,6 +85,10 @@ public abstract class BaseVncActivity extends AppCompatActivity implements ImeIn
     protected VncExtraKeysPanel vncExtraKeys;
     protected String vmName = "";
     protected String vmId = "";
+    /** Screen whose VNC server this view shows; empty means "the VM's first bound one". */
+    protected String screenId = "";
+    /** Whether that screen has absolute input devices at all; see {@link #EXTRA_INPUT_ENABLED}. */
+    protected boolean screenInputEnabled = true;
     protected String vncHost = "127.0.0.1";
     // Phone LAN address the daemon resolved for an IPv4-wildcard bind (offload
     // proxy IPs already excluded); empty when not applicable. Preferred over
@@ -146,6 +161,9 @@ protected void onCreate(Bundle savedInstanceState) {
         if (vmName == null) vmName = "";
         vmId = intent.getStringExtra(EXTRA_VM_ID);
         if (vmId == null) vmId = "";
+        screenId = intent.getStringExtra(EXTRA_SCREEN);
+        if (screenId == null) screenId = "";
+        screenInputEnabled = intent.getBooleanExtra(EXTRA_INPUT_ENABLED, true);
         bindViews();
         setupToolbar();
         // Before onSetupActivity() so subclasses can wire views (e.g. the physical keyboard)
@@ -244,6 +262,12 @@ protected void fetchVncInfoAndConnect() {
             });
         };
         DaemonConnection.OnResponse res = resp -> {
+            // Adopt the screen the daemon resolved. Asking for "the VM's VNC" is answered with a
+            // particular screen's server, and input has to agree with that answer: the absolute
+            // devices are per screen, so a console still holding "" would have nowhere to send a
+            // touch even though it is showing a screen that has one.
+            var resolved = resp.optString("screen", "");
+            if (!resolved.isEmpty()) screenId = resolved;
             vncHost = resp.optString("host", "127.0.0.1");
             vncRemoteHost = resp.optString("remote_host", "");
             vncPort = resp.optInt("port", DEFAULT_PORT);
@@ -253,6 +277,7 @@ protected void fetchVncInfoAndConnect() {
         };
         DaemonConnection.getInstance().buildRequest("vm_vnc_info")
             .put("vm_id", vmId)
+            .put("screen", screenId)
             .onResponse(res)
             .onUnsuccessful(f)
             .onError(err)
@@ -667,23 +692,42 @@ protected String generateVncUri(boolean local) {
         return sb.toString();
     }
 
+    /**
+     * The one connection dialog: what to point a viewer at, and the handoff to one.
+     *
+     * <p>It shows the {@code vnc://} URI for this device and, when the server is bound wider than
+     * loopback, the one another machine on the network would use -- the pair the separate "view
+     * URL" dialog used to show, which is why there is no longer a separate dialog: a bare
+     * {@code host:port} said nothing the URI does not already say. Connect hands the network URI
+     * to whatever app claims {@code vnc://}; the password rides in it as a query parameter, and
+     * the copy button is there for the viewers that ignore it.</p>
+     */
     protected void openWithExternalApp() {
-        var url = generateVncUri(false);
-        var host = resolveVncHost(false);
-        var target = fmt("%s:%d", host, vncPort);
+        var localUrl = generateVncUri(true);
+        var remoteUrl = generateVncUri(false);
+        boolean sameUrl = localUrl.equals(remoteUrl);
         boolean hasPassword = vncPassword != null && !vncPassword.isEmpty();
         var view = getLayoutInflater().inflate(R.layout.dialog_vnc_external, null);
-        TextView etTarget = view.findViewById(R.id.et_target);
+        EditText etLocal = view.findViewById(R.id.et_local);
+        EditText etRemote = view.findViewById(R.id.et_remote);
         TextView etPassword = view.findViewById(R.id.et_password);
+        TextInputLayout tilRemote = view.findViewById(R.id.til_remote);
         TextInputLayout tilPassword = view.findViewById(R.id.til_password);
-        etTarget.setText(target);
+        etLocal.setText(localUrl);
+        CopyableField.setupReadOnly(etLocal, getString(R.string.vnc_external_hint_local));
+        if (sameUrl) {
+            tilRemote.setVisibility(GONE);
+        } else {
+            etRemote.setText(remoteUrl);
+            CopyableField.setupReadOnly(etRemote, getString(R.string.vnc_external_hint_remote));
+        }
         if (hasPassword) {
             etPassword.setText(vncPassword);
         } else {
             tilPassword.setVisibility(GONE);
         }
         DialogInterface.OnClickListener onConnect = (d, w) -> {
-            var intent = new Intent(Intent.ACTION_VIEW, Uri.parse(url));
+            var intent = new Intent(Intent.ACTION_VIEW, Uri.parse(remoteUrl));
             try {
                 startActivity(intent);
             } catch (ActivityNotFoundException e) {
@@ -698,41 +742,8 @@ protected void openWithExternalApp() {
         if (hasPassword)
             builder.setNeutralButton(R.string.vnc_external_copy_password, null);
         var dialog = builder.show();
-        if (hasPassword) dialog.getButton(BUTTON_NEUTRAL).setOnClickListener(v -> {
-            var cm = getSystemService(ClipboardManager.class);
-            if (cm == null) return;
-            cm.setPrimaryClip(ClipData.newPlainText("VNC Password", vncPassword));
-            Toast.makeText(this, R.string.vnc_menu_url_copied, Toast.LENGTH_SHORT).show();
-        });
-    }
-
-    protected void showVncUrl() {
-        var local = generateVncUri(true);
-        var remote = generateVncUri(false);
-        boolean sameUrl = local.equals(remote);
-        boolean hasPassword = vncPassword != null && !vncPassword.isEmpty();
-        var view = getLayoutInflater().inflate(R.layout.dialog_vnc_url, null);
-        TextView etLocal = view.findViewById(R.id.et_local);
-        TextView etRemote = view.findViewById(R.id.et_remote);
-        TextView etPassword = view.findViewById(R.id.et_password);
-        TextInputLayout tilPassword = view.findViewById(R.id.til_password);
-        TextInputLayout tilRemote = view.findViewById(R.id.til_remote);
-        etLocal.setText(local);
-        if (sameUrl) {
-            tilRemote.setVisibility(GONE);
-        } else {
-            etRemote.setText(remote);
-        }
-        if (hasPassword) {
-            etPassword.setText(vncPassword);
-        } else {
-            tilPassword.setVisibility(GONE);
-        }
-        new MaterialAlertDialogBuilder(this)
-            .setTitle(R.string.vnc_menu_view_url)
-            .setView(view)
-            .setPositiveButton(android.R.string.ok, null)
-            .show();
+        if (hasPassword) dialog.getButton(BUTTON_NEUTRAL).setOnClickListener(v ->
+            CopyableField.copy(this, vncPassword, getString(R.string.vnc_external_hint_password)));
     }
 
     protected void reconnect() {
@@ -774,9 +785,6 @@ protected boolean onMenuItemClicked(@NonNull MenuItem item) {
         } else if (id == R.id.menu_external) {
             openWithExternalApp();
             return true;
-        } else if (id == R.id.menu_view_url) {
-            showVncUrl();
-            return true;
         }
         return false;
     }
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/display/vnc/display/VMVncDisplayActivity.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/vnc/display/VMVncDisplayActivity.java
index ff39f1f1c..bfc4c21b5 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/display/vnc/display/VMVncDisplayActivity.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/vnc/display/VMVncDisplayActivity.java
@@ -33,6 +33,7 @@
 import android.widget.ImageView;
 import android.widget.LinearLayout;
 import android.widget.TextView;
+import android.widget.Toast;
 
 import androidx.annotation.NonNull;
 import androidx.core.graphics.Insets;
@@ -91,6 +92,11 @@ public final class VMVncDisplayActivity extends BaseVncActivity {
     // Per-mode input routing: whatever the VNC channel natively has goes over RFB (TABLET's
     // absolute pointer + the keyboard); the rest goes to the crosvm --input evdev devices via the
     // daemon (MOUSE = relative motion the guest renders a cursor for, TOUCH = raw multi-touch).
+    // What the RFB half lands on is this screen's own tablet and keyboard, built by crosvm behind
+    // this binding's VNC server -- so this console is an ordinary RFB client for those two, no
+    // different from TigerVNC on the same port, and the coordinate is read against this screen's
+    // geometry rather than some VM-wide pointer's. Both are absent when the screen's input switch
+    // is off (view-only); see setInputMode.
     // Seeded from the shared pref in onSetupActivity(); TOUCH only until that read.
     private InputMode inputMode = InputMode.TOUCH;
     private SharedPreferences prefs;
@@ -125,6 +131,7 @@ public final class VMVncDisplayActivity extends BaseVncActivity {
         if (operationLabel != null) operationLabel.setVisibility(GONE);
     };
 
+    // Unified MOUSE/TABLET gestures. TABLET lands on the RFB channel (this binding's own
     // absolute-tablet pointer); MOUSE lands on the crosvm relative-mouse device via vm_input.
     private final PointerGestureTranslator.Listener gestureListener =
         new PointerGestureTranslator.Listener() {
@@ -222,6 +229,7 @@ private boolean sendInputToDaemon(int channel, @NonNull byte[] data) {
             var req = new JSONObject();
             req.put("command", "vm_input");
             req.put("vm_id", vmId);
+            req.put("screen", screenId);
             req.put("channel", channel);
             req.put("data", android.util.Base64.encodeToString(data, android.util.Base64.NO_WRAP));
             var resp = DaemonConnection.getInstance().request(req);
@@ -328,6 +336,8 @@ public void onCloseKeyboard() {
                 new DaemonDisplayAttach.Listener() {
                     @Override
                     public void onAttached(@NonNull INativeDisplayRootService service) {
+                        directSink = new DirectInputSink(vmId, () -> screenId, service,
+                            VMVncDisplayActivity.this::sendInputToDaemon);
                     }
 
                     @Override
@@ -617,6 +627,16 @@ private void applyInputMode() {
 
     private void setInputMode(InputMode mode) {
         if (inputMode == mode) return;
+        // Both absolute modes are inert with the switch off, the same as on the native console.
+        // TOUCH because this screen's multi-touch device is not created; TABLET because the switch
+        // is what the daemon sends as view-only=true, and a view-only binding has no tablet and no
+        // keyboard behind it -- crosvm drops the RFB pointer and key events rather than injecting
+        // them. So RFB is no longer a way around this screen's switch, which it was while those
+        // devices belonged to the VM instead of to the binding. MOUSE is: the relative pointer has
+        // no output binding and is not a screen's to switch off. Say why once, here, rather than
+        // leaving the user tapping at nothing.
+        if (!screenInputEnabled && mode != InputMode.MOUSE)
+            Toast.makeText(this, R.string.display_input_disabled_hint, Toast.LENGTH_LONG).show();
         inputMode = mode;
         prefs.edit().putInt(KEY_INPUT_MODE, mode.ordinal()).apply();
         viewport.resetToFit();
@@ -695,8 +715,23 @@ protected boolean onMenuItemClicked(@NonNull MenuItem item) {
         if (id == R.id.menu_fullscreen) {
             toggleFullscreen();
             return true;
+        } else if (id == R.id.menu_project_external) {
+            projectToExternalDisplay();
             return true;
         }
         return super.onMenuItemClicked(item);
     }
+
+    // Projecting this screen onto an external display is the presentation console, reached from
+    // in here rather than from the VM's console chooser: it is an action on the screen already
+    // open, not a separate console to pick. The presentation activity puts up the display picker
+    // itself and shows nothing until one is chosen, so "pick a display, then land on it" is its
+    // own flow -- this only hands it the same vm/screen this console is already bound to.
+    private void projectToExternalDisplay() {
+        var intent = new android.content.Intent(this, VMVncPresentationActivity.class);
+        intent.putExtra(EXTRA_VM_ID, vmId);
+        intent.putExtra(EXTRA_VM_NAME, vmName);
+        intent.putExtra(EXTRA_SCREEN, screenId);
+        startActivity(intent);
+    }
 }
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/graphics/ScreenBindingRow.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/graphics/ScreenBindingRow.java
index d1bd7c30d..12d64b13b 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/graphics/ScreenBindingRow.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/graphics/ScreenBindingRow.java
@@ -1,7 +1,561 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
+package cn.classfun.droidvm.ui.vm.edit.graphics;
+
+import static android.content.DialogInterface.BUTTON_POSITIVE;
+import static android.view.View.GONE;
+import static android.view.View.VISIBLE;
+import static java.lang.Integer.parseInt;
+import static cn.classfun.droidvm.lib.utils.StringUtils.generateRandomPassword;
+import static cn.classfun.droidvm.lib.utils.StringUtils.getEditText;
+
+import android.content.Context;
+import android.view.LayoutInflater;
+import android.view.View;
+import android.view.WindowManager;
+import android.widget.AutoCompleteTextView;
+
+import androidx.annotation.NonNull;
+import androidx.annotation.Nullable;
+import androidx.annotation.StringRes;
+
+import com.google.android.material.button.MaterialButton;
+import com.google.android.material.dialog.MaterialAlertDialogBuilder;
+import com.google.android.material.textfield.TextInputEditText;
+import com.google.android.material.textfield.TextInputLayout;
+
+import java.util.ArrayList;
+import java.util.List;
+
+import cn.classfun.droidvm.R;
+import cn.classfun.droidvm.lib.ui.IconItemAdapter;
+import cn.classfun.droidvm.lib.store.base.DataItem;
+import cn.classfun.droidvm.lib.store.vm.DisplayExporter;
+import cn.classfun.droidvm.lib.store.vm.DisplayTransportCap;
+import cn.classfun.droidvm.lib.store.vm.VMScreenConfig;
+import cn.classfun.droidvm.ui.widgets.row.ChooseRowWidget;
+import cn.classfun.droidvm.ui.widgets.row.SwitchRowWidget;
 import cn.classfun.droidvm.ui.widgets.row.TextRowWidget;
+
+/**
+ * One screen's rows in the graphics tab: the switch that says the VM has the device, how big that
+ * screen is and how often it produces a picture, and who exports it over what.
+ *
+ * <p>The two screens have the same shape, so the wiring is written once here and the layout
+ * carries one block of ids per screen. The differences are both in "display settings" and both
+ * follow from what the device is: a virtio-gpu mode has a refresh rate and a DPI the guest is told
+ * about, and a framebuffer nobody announces frames for has a poll rate instead. Neither has the
+ * other's, so exactly one of the two is shown.</p>
+ *
+ * <p>The enable switch is passed in rather than found inside the block, because the renderer
+ * section sits between it and everything else on the virtio-gpu side, and an {@code <include>} has
+ * nowhere to put a section in the middle of itself.</p>
+ */
+final class ScreenBindingRow {
+    private static final int VNC_PASSWORD_LENGTH = 8;
+    /** The size bounds the editor saves within; the menu and its dialog both honour them. */
+    private static final int MIN_EDGE = ScreenResolutionOptions.MIN_EDGE;
+    private static final int MAX_EDGE = 8192;
+    /** A mode's rate is bounded by what a panel could show; the poll rate by what crosvm takes. */
+    private static final int MAX_REFRESH_RATE = 400;
+    /** The rates offered before "custom". Both screens take all three. */
+    private static final int[] RATE_OPTIONS = {30, 60, 120};
+
+    /** Screen id, as stored and as handed to crosvm's {@code screen=}. */
+    final String screenId;
+    /** True for {@code gpu-0}: it has a mode, so it has a refresh rate and a DPI. */
+    private final boolean gpuScreen;
+    private final boolean defaultEnabled;
+    private final DisplayExporter defaultExporter;
+
+    private final SwitchRowWidget swEnabled;
+    private final View options;
+    private final TextInputLayout tilResolution;
+    private final AutoCompleteTextView ddResolution;
+    private final TextInputLayout tilRate;
+    private final AutoCompleteTextView ddRate;
     private final TextRowWidget rowWidthCpuFallback;
+    private final View dpiOptions;
+    private final TextInputEditText etDpiH;
+    private final TextInputEditText etDpiV;
+    private final ChooseRowWidget chooseExporter;
+    private final ChooseRowWidget chooseTransport;
+    private final SwitchRowWidget swInputEnabled;
+    private final View vncOptions;
+    private final TextInputLayout tilHost;
+    private final AutoCompleteTextView ddHost;
+    private final TextInputEditText etPort;
+    private final SwitchRowWidget swPasswordAuth;
+    private final View passwordOptions;
+    private final TextInputEditText etPassword;
+
+    /**
+     * The geometry as picked, rather than as typed.
+     *
+     * <p>It lives here because the two fields that show it are menus now: what a menu carries is a
+     * label, and the label is written from these numbers rather than parsed back out of. What
+     * reaches the config is unchanged -- the same three numbers under the same keys -- so a config
+     * written before this row was a menu still loads into it.</p>
+     */
+    private int width = (int) VMScreenConfig.DEFAULT_WIDTH;
+    private int height = (int) VMScreenConfig.DEFAULT_HEIGHT;
+    private int rate;
+    /** The sizes this device offers, settled once in {@link #init}. */
+    @NonNull
+    private List<ScreenResolutionOptions.Option> sizes = List.of();
+    /**
+     * The listen address as picked, rather than as typed -- the host field is a menu now, for the
+     * same reason the two above it are.
+     *
+     * <p>May be "", which is not the same as {@link VncHostOptions#WILDCARD} even though it does
+     * the same thing: a config that names no host is one this app has never written, and rewriting
+     * it on a save the user made for some other reason is not this row's business. So the empty
+     * string survives a load and a save untouched, and only the menu's own label resolves it -- to
+     * the wildcard, because that is what both backends do with a host left unset.</p>
+     */
+    @NonNull
+    private String vncHost = VMScreenConfig.NEW_VM_DEFAULT_VNC_HOST;
+    /** The phone's own addresses, once the daemon has answered; see {@link #setScannedHosts}. */
+    @NonNull
+    private List<VncHostOptions.Option> scannedHosts = List.of();
+    /** The entries the host menu currently offers, in the order it offers them. */
+    @NonNull
+    private List<VncHostOptions.Option> hostOptions = List.of();
+
+    /**
+     * @param block  the root of this screen's {@code partial_vm_screen_binding} include, and also
+     *               the view whose visibility follows the switch. Every lookup below is scoped to
+     *               it, which is what keeps the two includes' identical ids apart -- an
+     *               activity-wide findViewById would always find the first.
+     * @param switch_ this screen's enable switch, which lives in the parent block.
+     */
+    ScreenBindingRow(@NonNull String screenId, @NonNull View block,
+                     @NonNull SwitchRowWidget switch_,
+                     boolean defaultEnabled, @NonNull DisplayExporter defaultExporter) {
+        this.screenId = screenId;
+        this.gpuScreen = VMScreenConfig.ID_GPU0.equals(screenId);
+        this.defaultEnabled = defaultEnabled;
+        this.defaultExporter = defaultExporter;
+        swEnabled = switch_;
+        options = block;
+        tilResolution = block.findViewById(R.id.til_screen_resolution);
+        ddResolution = block.findViewById(R.id.dd_screen_resolution);
+        tilRate = block.findViewById(R.id.til_screen_rate);
+        ddRate = block.findViewById(R.id.dd_screen_rate);
         rowWidthCpuFallback = block.findViewById(R.id.row_screen_width_cpu_fallback);
+        dpiOptions = block.findViewById(R.id.screen_dpi_options);
+        etDpiH = block.findViewById(R.id.et_screen_dpi_h);
+        etDpiV = block.findViewById(R.id.et_screen_dpi_v);
+        chooseExporter = block.findViewById(R.id.choose_screen_exporter);
+        chooseTransport = block.findViewById(R.id.choose_screen_transport);
+        swInputEnabled = block.findViewById(R.id.sw_screen_input_enabled);
+        vncOptions = block.findViewById(R.id.screen_vnc_options);
+        tilHost = block.findViewById(R.id.til_screen_vnc_host);
+        ddHost = block.findViewById(R.id.dd_screen_vnc_host);
+        etPort = block.findViewById(R.id.et_screen_vnc_port);
+        swPasswordAuth = block.findViewById(R.id.sw_screen_vnc_password_auth);
+        passwordOptions = block.findViewById(R.id.screen_vnc_password_options);
+        etPassword = block.findViewById(R.id.et_screen_vnc_password);
+        MaterialButton btnClear = block.findViewById(R.id.btn_screen_vnc_password_clear);
+        MaterialButton btnGenerate = block.findViewById(R.id.btn_screen_vnc_password_generate);
+        btnClear.setOnClickListener(v -> etPassword.setText(""));
+        btnGenerate.setOnClickListener(v ->
+            etPassword.setText(generateRandomPassword(VNC_PASSWORD_LENGTH)));
+        // Which rate this screen has -- and whether it has a DPI at all -- is a property of the
+        // device, not of anything the user can change, so both are settled once here rather than
+        // in the visibility pass. One rate row either way; only its hint and its bounds differ.
+        rate = (int) (gpuScreen
             ? VMScreenConfig.DEFAULT_REFRESH_RATE : VMScreenConfig.NEW_VM_DEFAULT_POLL_HZ);
+        tilRate.setHint(block.getContext().getString(rateHint()));
+        dpiOptions.setVisibility(gpuScreen ? VISIBLE : GONE);
+    }
+
+    /**
+     * Wires the listeners. {@code onChanged} runs after every change that another row can depend
+     * on -- the tab re-runs its whole visibility pass there rather than each row guessing what
+     * else moved.
+     */
+    void init(@NonNull Runnable onChanged) {
+        // Off is a real choice: a screen the VM has but nobody is watching is a state crosvm
+        // accepts, not a half-configured one. The default is what a brand-new VM comes up with,
+        // since only edit mode ever calls load().
+        chooseExporter.configure(DisplayExporter.class, defaultExporter);
+        applyTransportOptions(defaultExporter, null);
+        swEnabled.setChecked(defaultEnabled);
+        // The absolute devices are what a screen has unless the user says otherwise, so a new VM
+        // and a config written before the key both come up with them on.
+        swInputEnabled.setChecked(true);
+        swEnabled.setOnCheckedChangeListener(onChanged);
+        // The width decides whether the GPU copy can take this screen's frames at all, so picking
+        // a size is one of the changes another row depends on -- the only geometry one that is.
+        // Through the tab's whole pass like every other change, rather than poking the one row it
+        // moves.
+        bindSizeMenu(onChanged);
+        bindRateMenu(onChanged);
+        bindHostMenu();
+        chooseExporter.setOnValueChangedListener(() -> {
+            // The ladder belongs to the edge, so changing who is on the far end of it changes
+            // which rungs exist -- not just which are reachable.
+            applyTransportOptions(getExporter(), null);
+            onChanged.run();
+        });
+        swPasswordAuth.setOnCheckedChangeListener(onChanged);
+    }
+
+    /**
+     * The size menu: every size this device has a reason to offer, smallest first, then "custom".
+     *
+     * <p>Picking is the whole of the input path now, which is what turns the geometry check into a
+     * check on a stored value rather than on something half-typed: every entry above the last is
+     * in bounds by construction, and the last one validates before it hands anything back.</p>
+     */
+    private void bindSizeMenu(@NonNull Runnable onChanged) {
+        var ctx = ddResolution.getContext();
+        var panel = panelSize(ctx);
+        sizes = ScreenResolutionOptions.build(panel[0], panel[1]);
+        var labels = new ArrayList<String>(sizes.size() + 1);
+        for (var size : sizes) labels.add(sizeLabel(ctx, size.width, size.height));
+        labels.add(ctx.getString(R.string.create_vm_display_custom));
+        ddResolution.setAdapter(IconItemAdapter.create(ctx, labels, R.drawable.ic_monitor));
+        ddResolution.setOnItemClickListener((parent, view, pos, id) -> {
+            if (pos < sizes.size()) {
+                var size = sizes.get(pos);
+                width = size.width;
+                height = size.height;
+                tilResolution.setError(null);
+                onChanged.run();
+            } else {
+                askCustomSize(ctx, onChanged);
+            }
+            // The menu wrote the entry's own label into the field on its way out. Put the value
+            // back: after "custom" it would otherwise sit there reading "Custom..." while the
+            // dialog is still open, and after a pick the label is this row's to format.
+            applySizeText();
+        });
+        applySizeText();
+    }
+
+    /** The rate menu. Same shape as the size menu, and the same reason for it. */
+    private void bindRateMenu(@NonNull Runnable onChanged) {
+        var ctx = ddRate.getContext();
+        var labels = new ArrayList<String>(RATE_OPTIONS.length + 1);
+        for (var hz : RATE_OPTIONS) labels.add(rateLabel(ctx, hz));
+        labels.add(ctx.getString(R.string.create_vm_display_custom));
+        ddRate.setAdapter(IconItemAdapter.create(ctx, labels, R.drawable.ic_speedometer));
+        ddRate.setOnItemClickListener((parent, view, pos, id) -> {
+            if (pos < RATE_OPTIONS.length) {
+                rate = RATE_OPTIONS[pos];
+                tilRate.setError(null);
+                onChanged.run();
+            } else {
+                askCustomRate(ctx, onChanged);
+            }
+            applyRateText();
+        });
+        applyRateText();
+    }
+
+    /**
+     * The host menu: the two fixed addresses, the phone's own once they are known, then "custom".
+     *
+     * <p>Rebuilt rather than filtered when the scan lands, because the scan is what most of the
+     * list is. Nothing here calls {@code onChanged}: no other row depends on which address this
+     * screen listens on -- unlike the port, which the tab checks pairwise across screens.</p>
+     */
+    private void bindHostMenu() {
+        var ctx = ddHost.getContext();
+        hostOptions = VncHostOptions.build(scannedHosts, displayHost());
+        var labels = new ArrayList<String>(hostOptions.size() + 1);
+        for (var option : hostOptions) labels.add(hostLabel(ctx, option));
+        labels.add(ctx.getString(R.string.create_vm_display_custom));
+        ddHost.setAdapter(IconItemAdapter.create(ctx, labels, R.drawable.ic_ip_network));
+        ddHost.setOnItemClickListener((parent, view, pos, id) -> {
+            if (pos < hostOptions.size()) {
+                vncHost = hostOptions.get(pos).addr;
+                tilHost.setError(null);
+            } else {
+                askCustomHost(ctx);
+            }
+            // Same as the two menus above: the entry wrote its own label into the field on its way
+            // out, and after "custom" that label would sit there reading "Custom..." while the
+            // dialog is still open.
+            applyHostText();
+        });
+        applyHostText();
+    }
+
+    /**
+     * The phone's own addresses, from the daemon. Arrives after the row is built and possibly
+     * after a config has been loaded over it, so it rebuilds the menu and leaves the selection
+     * alone -- what was picked stays picked, and only gains the interface name beside it if the
+     * scan found the same address.
+     */
+    void setScannedHosts(@NonNull List<VncHostOptions.Option> scanned) {
+        scannedHosts = scanned;
+        bindHostMenu();
+    }
+
+    /**
+     * The address the menu shows as selected: the stored one, or the wildcard when nothing is
+     * stored, which is what a host left unset already means to both backends.
+     */
+    @NonNull
+    private String displayHost() {
+        return vncHost.isEmpty() ? VncHostOptions.WILDCARD : vncHost;
+    }
+
+    /** How one entry reads: the address, and the interface it was found on when there is one. */
+    @NonNull
+    private static String hostLabel(@NonNull Context ctx, @NonNull VncHostOptions.Option option) {
+        return option.ifname.isEmpty() ? option.addr
+            : ctx.getString(R.string.create_vm_vnc_host_iface_fmt, option.addr, option.ifname);
+    }
+
+    private void applyHostText() {
+        var host = displayHost();
+        var label = host;
+        for (var option : hostOptions)
+            if (option.addr.equals(host)) {
+                label = hostLabel(ddHost.getContext(), option);
+                break;
+            }
+        ddHost.setText(label, false);
+    }
+
+    /**
+     * The host menu's last entry: one address, checked for what would break the option string it
+     * ends up inside rather than for being reachable. Accepting it adds it to the list, so the
+     * field shows an entry rather than a value the menu cannot highlight.
+     */
+    private void askCustomHost(@NonNull Context ctx) {
+        var view = LayoutInflater.from(ctx).inflate(R.layout.dialog_vnc_host, null);
+        TextInputLayout til = view.findViewById(R.id.til_custom_vnc_host);
+        TextInputEditText etCustom = view.findViewById(R.id.et_custom_vnc_host);
+        etCustom.setText(displayHost());
+        var dialog = new MaterialAlertDialogBuilder(ctx)
+            .setTitle(R.string.create_vm_vnc_host_custom_title)
+            .setView(view)
+            .setNegativeButton(android.R.string.cancel, null)
+            .setPositiveButton(android.R.string.ok, null)
+            .show();
+        // Wired after show() for the same reason the size dialog is: a refused value has to stay
+        // on screen with its error, and the listener setPositiveButton takes dismisses regardless.
+        dialog.getButton(BUTTON_POSITIVE).setOnClickListener(v -> {
+            var host = getEditText(etCustom).trim();
+            if (!VncHostOptions.isLiteral(host)) {
+                til.setError(ctx.getString(R.string.create_vm_error_invalid_host));
+                return;
+            }
+            vncHost = host;
+            tilHost.setError(null);
+            bindHostMenu();
+            dialog.dismiss();
+        });
+    }
+
+    /** How a size reads, whether the menu offers it, a dialog produced it or a config carried it. */
+    @NonNull
+    private static String sizeLabel(@NonNull Context ctx, int w, int h) {
+        return ctx.getString(R.string.create_vm_display_size_fmt, w, h);
+    }
+
+    @NonNull
+    private static String rateLabel(@NonNull Context ctx, int hz) {
+        return ctx.getString(R.string.create_vm_display_rate_fmt, hz);
+    }
+
+    private void applySizeText() {
+        ddResolution.setText(sizeLabel(ddResolution.getContext(), width, height), false);
+    }
+
+    private void applyRateText() {
+        ddRate.setText(rateLabel(ddRate.getContext(), rate), false);
+    }
+
+    /** The size menu's last entry: two numbers, checked against the bounds the editor saves in. */
+    private void askCustomSize(@NonNull Context ctx, @NonNull Runnable onChanged) {
+        var view = LayoutInflater.from(ctx).inflate(R.layout.dialog_screen_resolution, null);
+        TextInputEditText etW = view.findViewById(R.id.et_custom_width);
+        TextInputEditText etH = view.findViewById(R.id.et_custom_height);
+        etW.setText(String.valueOf(width));
+        etH.setText(String.valueOf(height));
+        var dialog = new MaterialAlertDialogBuilder(ctx)
+            .setTitle(R.string.create_vm_display_custom_size_title)
+            .setView(view)
+            .setNegativeButton(android.R.string.cancel, null)
+            .setPositiveButton(android.R.string.ok, null)
+            .show();
+        // Wired after show() so a refused value can stay on screen with its error: the listener
+        // setPositiveButton takes dismisses the dialog whatever it decides.
+        dialog.getButton(BUTTON_POSITIVE).setOnClickListener(v -> {
+            var w = bounded(etW, MIN_EDGE, MAX_EDGE);
+            var h = bounded(etH, MIN_EDGE, MAX_EDGE);
+            if (w == 0 || h == 0) return;
+            width = w;
+            height = h;
+            tilResolution.setError(null);
+            applySizeText();
+            onChanged.run();
+            dialog.dismiss();
+        });
+    }
+
+    /** The rate menu's last entry, bounded by whichever rate this screen has. */
+    private void askCustomRate(@NonNull Context ctx, @NonNull Runnable onChanged) {
+        var view = LayoutInflater.from(ctx).inflate(R.layout.dialog_screen_rate, null);
+        TextInputLayout til = view.findViewById(R.id.til_custom_rate);
+        TextInputEditText etRate = view.findViewById(R.id.et_custom_rate);
+        til.setHint(ctx.getString(rateHint()));
+        etRate.setText(String.valueOf(rate));
+        var dialog = new MaterialAlertDialogBuilder(ctx)
+            .setTitle(rateHint())
+            .setView(view)
+            .setNegativeButton(android.R.string.cancel, null)
+            .setPositiveButton(android.R.string.ok, null)
+            .show();
+        dialog.getButton(BUTTON_POSITIVE).setOnClickListener(v -> {
+            var hz = bounded(etRate, rateMin(), rateMax());
+            if (hz == 0) return;
+            rate = hz;
+            tilRate.setError(null);
+            applyRateText();
+            onChanged.run();
+            dialog.dismiss();
+        });
+    }
+
+    /**
+     * The number typed into a dialog field, or 0 with the reason shown on the field -- the same
+     * reading, bounds and message the tab applies to every other number on this screen, since the
+     * value is bound for the same config.
+     */
+    private static int bounded(@NonNull TextInputEditText field, int min, int max) {
+        field.setError(null);
+        try {
+            var value = parseInt(getEditText(field));
+            if (value < min || value > max) throw new IllegalArgumentException();
+            return value;
+        } catch (Exception ignored) {
+            field.setError(field.getContext().getString(R.string.create_vm_error_invalid_number));
+            return 0;
+        }
+    }
+
+    @StringRes
+    private int rateHint() {
+        return gpuScreen
+            ? R.string.create_vm_display_refresh_rate : R.string.create_vm_display_poll_hz;
+    }
+
+    private int rateMin() {
+        return gpuScreen ? 1 : (int) VMScreenConfig.MIN_POLL_HZ;
+    }
+
+    private int rateMax() {
+        return gpuScreen ? MAX_REFRESH_RATE : (int) VMScreenConfig.MAX_POLL_HZ;
+    }
+
+    /** The panel this app is running on, in whatever rotation it is held, or 0x0 if it cannot be
+     * asked -- which offers the fixed sizes alone rather than inventing a device. */
+    @NonNull
+    private static int[] panelSize(@NonNull Context ctx) {
+        var wm = ctx.getSystemService(WindowManager.class);
+        if (wm == null) return new int[]{0, 0};
+        var bounds = wm.getMaximumWindowMetrics().getBounds();
+        return new int[]{bounds.width(), bounds.height()};
+    }
+
+    /**
+     * Rebuilds the transport menu for [exporter] and settles on a value.
+     *
+     * <p>Three things decide the menu, and all of them are the edge's rather than this row's: the
+     * rungs this (screen, exporter) pair has at all, which of them this build can honour, and what
+     * the highest honourable one is. Rungs that exist but are not built yet are listed and refused
+     * with a note, so the ladder reads whole; rungs that cannot exist on this pair are absent,
+     * because offering a choice nobody will ever be able to make is worse than not naming it.</p>
+     *
+     * @param want the stored ceiling to restore on load, if this edge still offers it; or null on
+     *             a fresh row or an exporter switch, which re-evaluates to the edge's default
+     *             instead of carrying the old pick across. Switching exporter is switching which
+     *             ladder this is, and each ladder's fastest rung is a different one, so the pick
+     *             follows the new edge rather than lingering on a value that was only best for the
+     *             old one. A restore that the edge no longer offers also falls back to the default.
+     */
+    private void applyTransportOptions(@NonNull DisplayExporter exporter,
+                                       @Nullable DisplayTransportCap want) {
+        // No exporter, no edge, no ladder. The row is hidden in that state; leave the menu as it
+        // was rather than emptying it, since the picker refuses an empty item list outright.
+        var options = DisplayTransportCap.optionsFor(screenId, exporter);
+        if (options.length == 0) return;
+        chooseTransport.setItems(options);
+        transportMenuBuilt = true;
+        chooseTransport.setDisabledItems(
+            chooseTransport.getContext().getString(
+            DisplayTransportCap.unimplementedFor(screenId, exporter));
+        // want != null is a load: restore the stored ceiling if this edge still offers it. want ==
+        // null is a fresh row or an exporter switch, and then the ceiling is re-evaluated to the
+        // new edge's default rather than carried over -- the fastest rung differs per exporter
+        // (GPU_HW on VNC, plain GPU on native), so carrying the old pick left a screen switched to
+        // VNC sitting at plain GPU copy when the hardware-encode rung is what it should default to.
+        var pick = want != null && DisplayTransportCap.isOfferedFor(screenId, exporter, want)
+            ? want : DisplayTransportCap.defaultFor(screenId, exporter);
+        chooseTransport.setSelectedItem(pick);
+    }
+
+    /** Set by the first applyTransportOptions; the picker cannot be read before it. */
+    private boolean transportMenuBuilt = false;
+
+    /** The transport currently selected, or null before the menu has ever been built. */
+    @Nullable
+    private DisplayTransportCap currentTransport() {
+        // Asking the widget before its first setItems is not an IllegalStateException, it is an
+        // NPE from deep inside (ChooseRowWidget.getSelectedItem -> getPicker() on nothing) --
+        // which is exactly how the editor crashed on first open while every unit test, none of
+        // which inflates the real widget, stayed green. Track the state ourselves instead of
+        // classifying the widget's failure modes.
+        if (!transportMenuBuilt) return null;
+        return chooseTransport.getSelectedItem();
+    }
+
+    /**
+     * Whether the listen address this row holds is one the VM can be started with, said on the row
+     * that holds it.
+     *
+     * <p>Nothing the menu offers can fail this and the custom dialog checks before it returns, so
+     * what it catches is a config that arrived with something else in it -- hand-edited, or written
+     * back when the field was free text. Worth catching rather than passing on: crosvm refuses a
+     * host it cannot parse, so the VM would fail to start with the reason only in a log.</p>
+     */
+    boolean validateVncHost() {
+        tilHost.setError(null);
+        // Empty is the config that names no host, which is legal and means every address; the row
+        // shows it as the wildcard and writes it back unchanged.
+        if (vncHost.isEmpty() || VncHostOptions.isLiteral(vncHost)) return true;
+        tilHost.setError(tilHost.getContext().getString(R.string.create_vm_error_invalid_host));
+        return false;
+    }
+
+    boolean isScreenEnabled() {
+        return swEnabled.isChecked();
+    }
+
+    @NonNull
+    DisplayExporter getExporter() {
+        return chooseExporter.getSelectedItem();
+    }
+
+    void updateVisibility() {
+        var enabled = swEnabled.isChecked();
+        var exporter = getExporter();
+        options.setVisibility(enabled ? VISIBLE : GONE);
+        // No exporter, no edge for a transport to run along, so the row would be a ceiling on
+        // nothing. Its value is kept while hidden, like the VNC block's.
+        chooseTransport.setVisibility(
+            enabled && exporter != DisplayExporter.NONE ? VISIBLE : GONE);
+        vncOptions.setVisibility(
+            enabled && exporter == DisplayExporter.VNC ? VISIBLE : GONE);
+        passwordOptions.setVisibility(swPasswordAuth.isChecked() ? VISIBLE : GONE);
         // The one thing the transport ceiling cannot promise: a width whose stride the blit's
         // dma-buf import will not take settles a rung lower, silently, and the only clue is a line
         // in the console. Say so beside the field that causes it. Nothing is refused and nothing is
@@ -9,8 +563,141 @@
         var transport = currentTransport();
         rowWidthCpuFallback.setVisibility(
             enabled && transport != null && DisplayTransportCap.cpuFallbackFromWidth(
+                screenId, exporter, transport, width) ? VISIBLE : GONE);
     }
 
     /**
+     * Whether the geometry this row holds is one the VM can be saved with, said on the row that
+     * holds it.
+     *
+     * <p>Nothing the two menus produce can fail this: every size and rate they offer is in bounds,
+     * and their dialogs check before they return. What it catches is a config that arrived out of
+     * bounds -- hand-edited, or written where the limits were different -- and it reports on a row
+     * that is on screen, because a save refused for a reason the screen does not show is a VM the
+     * user cannot fix.</p>
      */
+    boolean validateGeometry() {
+        tilResolution.setError(null);
+        tilRate.setError(null);
+        var ctx = tilResolution.getContext();
+        if (width < MIN_EDGE || width > MAX_EDGE || height < MIN_EDGE || height > MAX_EDGE) {
+            tilResolution.setError(ctx.getString(R.string.create_vm_error_invalid_number));
+            return false;
+        }
+        if (rate < rateMin() || rate > rateMax()) {
+            tilRate.setError(ctx.getString(R.string.create_vm_error_invalid_number));
+            return false;
+        }
+        return true;
+    }
+
+    void load(@NonNull DataItem config) {
+        var screen = VMScreenConfig.find(config, screenId);
+        if (screen == null) {
+            // No entry at all: the screen has never been configured, so the row answers with
+            // what a new one gets rather than with the sentinel for "watched by nobody".
+            swEnabled.setChecked(false);
+            chooseExporter.setSelectedItem(defaultExporter);
+            applyTransportOptions(defaultExporter, null);
+            return;
+        }
+        swEnabled.setChecked(screen.isEnabled());
+        chooseExporter.setSelectedItem(screen.getExporter());
+        applyTransportOptions(screen.getExporter(), screen.getTransportCap());
+        // Absent in the stored config means on, so an existing VM keeps the devices it had
+        // without its file being rewritten to say so.
+        swInputEnabled.setChecked(screen.isInputEnabled());
+        width = (int) screen.getWidth();
+        height = (int) screen.getHeight();
+        applySizeText();
+        if (gpuScreen) {
+            rate = (int) screen.getRefreshRate();
+            etDpiH.setText(String.valueOf(screen.getDpiH()));
+            etDpiV.setText(String.valueOf(screen.getDpiV()));
+        } else {
+            rate = (int) screen.getPollHz();
+        }
+        applyRateText();
+        // Straight through, empty included: see the field's own note. The menu is rebuilt because
+        // the entry list depends on what is selected -- a stored address the scan did not find is
+        // appended so it stays selectable.
+        vncHost = screen.getVncHost();
+        bindHostMenu();
+        var port = screen.getVncPort();
+        etPort.setText(port > 0 ? String.valueOf(port) : "");
+        swPasswordAuth.setChecked(screen.isVncPasswordAuth());
+        etPassword.setText(screen.getVncPassword());
+    }
+
+    void save(@NonNull DataItem config) {
+        var screen = VMScreenConfig.of(config, screenId);
+        // The switch stores the switch, and nothing else. It used to also write NONE over the
+        // exporter of a screen it was turning off, which read back as a choice the next time the
+        // editor opened: turning the device on again showed it bound to nobody, with the pick the
+        // user had made gone. Every reader already asks whether a screen is on before asking what
+        // it is bound to -- directly (isInputBridgeNeeded, buildScreenExportersCommand) or through
+        // a filter that does (boundOf, hasAbsoluteInput) -- so "off" needs no second spelling in
+        // the fields underneath, the same way the geometry below has never needed one.
+        var exporter = getExporter();
+        screen.setEnabled(swEnabled.isChecked());
+        screen.setExporter(exporter);
+        // Written whatever the exporter is, so a rung picked under one exporter is still there
+        // after a detour through another -- and so a rung that is refused today is remembered for
+        // the build that can honour it.
+        var transport = currentTransport();
+        if (transport != null) screen.setTransportCap(transport);
+        screen.setInputEnabled(swInputEnabled.isChecked());
+        // The geometry is written whether or not the screen is on, for the same reason the VNC
+        // block below keeps its values: a size typed once and then switched off should still be
+        // there when the switch comes back. Only the rows this screen actually has are written --
+        // a poll rate on the GPU screen would be a number nothing reads.
+        screen.setWidth(width);
+        screen.setHeight(height);
+        if (gpuScreen) {
+            screen.setRefreshRate(rate);
+            screen.setDpiH(parseInt(getEditText(etDpiH)));
+            screen.setDpiV(parseInt(getEditText(etDpiV)));
+        } else {
+            screen.setPollHz(rate);
         }
+        // The VNC block keeps its values even while hidden, so a screen switched to native and
+        // back finds its port and password where it left them. Only the auth switch is written
+        // from the live state, since it is what decides whether the password is used at all.
+        if (exporter == DisplayExporter.VNC) {
+            screen.setVncHost(vncHost);
+            var portStr = getEditText(etPort);
+            screen.setVncPort(portStr.isEmpty() ? -1 : parseInt(portStr));
+            var auth = swPasswordAuth.isChecked();
+            screen.setVncPasswordAuth(auth);
+            if (auth) screen.setVncPassword(getEditText(etPassword));
+        }
+    }
+
+    /** The port typed into this row, or -1 for "let the daemon pick one". */
+    int typedVncPort() {
+        try {
+            return portStr.isEmpty() ? -1 : parseInt(portStr);
+        } catch (Exception ignored) {
+            return -1;
+        }
+    }
+
+    @NonNull
+    TextInputEditText portField() {
+        return etPort;
+    }
+
+    @NonNull
+    TextInputEditText dpiHField() {
+        return etDpiH;
+    }
+
+    @NonNull
+    TextInputEditText dpiVField() {
+        return etDpiV;
+    }
+
+    boolean isGpuScreen() {
+        return gpuScreen;
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/graphics/ScreenResolutionOptions.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/graphics/ScreenResolutionOptions.java
new file mode 100644
index 000000000..86836ccd9
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/graphics/ScreenResolutionOptions.java
@@ -0,0 +1,95 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
+package cn.classfun.droidvm.ui.vm.edit.graphics;
+
+import androidx.annotation.NonNull;
+
+import java.util.ArrayList;
+import java.util.Collections;
+import java.util.List;
+
+/**
+ * The sizes the resolution dropdown offers, and the only part of that dropdown that can be decided
+ * without a device.
+ *
+ * <p>Two of them are fixed ({@code 1280x720}, {@code 1920x1080}) and two are the phone's own panel
+ * -- whole, and halved on each axis -- because a guest that matches the panel is the one case where
+ * nothing has to scale, and half of it is the one that costs a quarter as much to draw. All four are
+ * landscape: a VM's screen is a desktop's screen, so the larger number is always the width, however
+ * the phone reports its own.</p>
+ *
+ * <p>They are ordered by area rather than in the order they are named, since "smaller or larger
+ * than the one I have" is the only comparison between them a user can make at a glance, and the
+ * phone-derived pair lands in a different place on every device. A size that two rules produce
+ * appears once -- the list is of sizes, and where a size came from is not something it says.</p>
+ */
+final class ScreenResolutionOptions {
+    /** The floor the geometry validator enforces; a rule that would produce less offers nothing. */
+    static final int MIN_EDGE = 320;
+
+    private static final int[][] PRESETS = {{1280, 720}, {1920, 1080}};
+
+    static final class Option {
+        final int width;
+        final int height;
+
+        Option(int width, int height) {
+            this.width = width;
+            this.height = height;
+        }
+
+        long area() {
+            return (long) width * height;
+        }
+
+        boolean is(int w, int h) {
+            return width == w && height == h;
+        }
+    }
+
+    private ScreenResolutionOptions() {
+    }
+
+    /**
+     * The dropdown's sizes for a panel of {@code phoneWidth x phoneHeight}, smallest area first.
+     *
+     * @param phoneWidth  the panel's width in pixels, in whatever rotation it was read; 0 or less
+     *                    when there is no panel to ask, which yields the fixed sizes alone rather
+     *                    than inventing a device.
+     * @param phoneHeight the panel's height, likewise.
+     */
+    @NonNull
+    static List<Option> build(int phoneWidth, int phoneHeight) {
+        var out = new ArrayList<Option>(4);
+        for (var preset : PRESETS) add(out, preset[0], preset[1]);
+        if (phoneWidth > 0 && phoneHeight > 0) {
+            var longEdge = Math.max(phoneWidth, phoneHeight);
+            var shortEdge = Math.min(phoneWidth, phoneHeight);
+            // Halving can land on an odd number, and an odd width is a size no display pipeline
+            // wants; round down to even so the offered size is one the guest can actually use.
+            add(out, even(longEdge / 2), even(shortEdge / 2));
+            add(out, longEdge, shortEdge);
+        }
+        // Ascending area, and by width when two sizes cover the same area -- a total order, so the
+        // list does not depend on which rule happened to produce a size first.
+        Collections.sort(out, (a, b) -> a.area() != b.area()
+            ? Long.compare(a.area(), b.area()) : Integer.compare(a.width, b.width));
+        return Collections.unmodifiableList(out);
+    }
+
+    /**
+     * Adds one size, unless it is below the validator's floor -- offering a size the editor would
+     * then refuse to save is worse than not offering it -- or unless some other rule already
+     * produced it, since the list names sizes rather than the rules that found them.
+     */
+    private static void add(@NonNull List<Option> out, int width, int height) {
+        if (width < MIN_EDGE || height < MIN_EDGE) return;
+        for (var option : out) if (option.is(width, height)) return;
+        out.add(new Option(width, height));
+    }
+
+    private static int even(int v) {
+        return v - (v % 2);
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/graphics/VMEditGraphicsTab.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/graphics/VMEditGraphicsTab.java
index 57ee908b8..a70e8d8f4 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/graphics/VMEditGraphicsTab.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/graphics/VMEditGraphicsTab.java
@@ -20,6 +20,7 @@
 import com.google.android.material.textfield.TextInputEditText;
 
 import cn.classfun.droidvm.R;
+import cn.classfun.droidvm.lib.daemon.DaemonConnection;
 import cn.classfun.droidvm.lib.natives.VulkanBlitProbe;
 import cn.classfun.droidvm.lib.store.vm.VMBackend;
 import cn.classfun.droidvm.lib.store.vm.VMConfig;
@@ -134,21 +135,19 @@ public void initView() {
         etGpuPoolBlobMaxKb = view.findViewById(R.id.et_gpu_pool_blob_max_kb);
         chooseDisplayBlitProvider = view.findViewById(R.id.choose_display_blit_provider);
         // A new VM comes up with the simplefb screen on and no virtio-gpu device at all until the
-        // user asks for one. This is where a new screen's exporter default lives -- the stored
-        // config's fallback is a separate question and stays at NONE, see
-        // VMScreenConfig.getExporter -- and it is NATIVE rather than the VNC it used to be: the
-        // viewer for that one is this app, already installed, so it is the only exporter whose
-        // first boot can be looked at without setting something up first. The gpu-0 row's default
-        // is inert while its screen is off (save() writes NONE for a screen that is off) and is
-        // there for the moment the user turns the device on.
+        // user asks for one. The exporter a new screen gets is VMScreenConfig.NEW_VM_DEFAULT_EXPORTER,
+        // shared with the config VMConfig.createWithCustomizeDefaults hands us: that config is
+        // loaded over these rows, so a second opinion here would only ever be the losing one. The
+        // gpu-0 row's default is inert while its screen is off (save() writes NONE for a screen
+        // that is off) and is there for the moment the user turns the device on.
         screenGpu0 = new ScreenBindingRow(VMScreenConfig.ID_GPU0,
             view.findViewById(R.id.screen_gpu0_block),
             view.findViewById(R.id.sw_screen_gpu0_enabled),
-            false, DisplayExporter.NATIVE);
+            false, VMScreenConfig.NEW_VM_DEFAULT_EXPORTER);
         screenFb = new ScreenBindingRow(VMScreenConfig.ID_SIMPLEFB,
             view.findViewById(R.id.screen_fb_block),
             view.findViewById(R.id.sw_screen_fb_enabled),
-            true, DisplayExporter.NATIVE);
+            true, VMScreenConfig.NEW_VM_DEFAULT_EXPORTER);
         swGpuCgroup = view.findViewById(R.id.sw_gpu_cgroup);
         swVpuEnabled = view.findViewById(R.id.sw_vpu_enabled);
         vpuOptions = view.findViewById(R.id.vpu_options);
@@ -164,6 +163,7 @@ public void initView() {
     public void initValue() {
         screenGpu0.init(this::updateDisplayVisibility);
         screenFb.init(this::updateDisplayVisibility);
+        loadHostAddresses();
         // PanVK (Mali) is listed but not wired yet: toast + revert to the previous choice.
         // Acceleration decides which host drivers make sense and which memory knobs exist,
         // so it drives both of the rows under it.
@@ -222,6 +222,36 @@ public void initValue() {
         initGpuCgroup();
     }
 
+    /**
+     * Asks the daemon for the phone's own addresses and hands them to both screen rows, so the VNC
+     * host menu can offer somewhere real to listen.
+     *
+     * <p>Fired once when the tab is built and answered whenever it is answered: the rows come up
+     * with their two fixed entries and gain the rest when this lands, which is also what happens
+     * when it never does. A daemon that is not up is not an error to report here -- the picker
+     * works without it, and the editor has no business demanding root to show a menu.</p>
+     *
+     * <p>The daemon rather than {@code NetworkInterface} because the exclusions are netlink's; see
+     * {@code HostAddressScan}.</p>
+     */
+    private void loadHostAddresses() {
+        DaemonConnection.getInstance().buildRequest("network_list_host_addresses")
+            .onResponse(resp -> {
+                var scanned = VncHostOptions.parse(resp.optJSONArray("data"));
+                if (scanned.isEmpty()) return;
+                parent.runOnUiThread(() -> {
+                    if (parent.isFinishing() || parent.isDestroyed()) return;
+                    screenGpu0.setScannedHosts(scanned);
+                    screenFb.setScannedHosts(scanned);
+                });
+            })
+            .onUnsuccessful(r -> {
+            })
+            .onError(e -> {
+            })
+            .invoke();
+    }
+
     private void initGpuCgroup() {
         hostCores = CpuUtils.getCores();
         etGpuCgroupPath.setText(CpuPlacementPlan.DEFAULT_GPU_CGROUP_PATH);
@@ -838,6 +868,7 @@ private boolean validateScreens() {
             if (row.getExporter() == DisplayExporter.NATIVE && !crosvm)
                 return showValidateFailed(R.string.create_vm_error_native_display_only_crosvm);
             if (row.getExporter() != DisplayExporter.VNC) continue;
+            if (!row.validateVncHost()) return false;
             if (!checkInputField(row.portField(), true, 1024, 65535)) return false;
         }
         return validateNoPortCollision();
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/graphics/VncHostOptions.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/graphics/VncHostOptions.java
new file mode 100644
index 000000000..da29e3e68
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/graphics/VncHostOptions.java
@@ -0,0 +1,195 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
+package cn.classfun.droidvm.ui.vm.edit.graphics;
+
+import androidx.annotation.NonNull;
+import androidx.annotation.Nullable;
+
+import org.json.JSONArray;
+
+import java.util.ArrayList;
+import java.util.Collections;
+import java.util.List;
+
+/**
+ * The addresses the VNC host dropdown offers, and the only part of that dropdown that can be
+ * decided without a phone.
+ *
+ * <p>Two are fixed and are the ends of the range: {@link #LOOPBACK}, which is the phone talking to
+ * itself, and {@link #WILDCARD}, which is every address it has including ones it does not have yet.
+ * Between them come the addresses it actually holds right now, which is the answer a user wants
+ * when the point is "reachable from my laptop but not from the cafe" -- and which nobody can type
+ * without going to look them up first. Anything else is still reachable through the list's last
+ * entry, which the row turns into a dialog.</p>
+ *
+ * <p>The scanned half arrives from the daemon ({@code network_list_host_addresses}) and this class
+ * only orders and de-duplicates it; the policy that decides which addresses are the phone's own --
+ * and, in particular, which are a pseudo-bridged guest's parked on the uplink -- is netlink's to
+ * answer and lives in {@code HostAddressScan}.</p>
+ */
+final class VncHostOptions {
+    /** This device only. What a new VM is created with. */
+    static final String LOOPBACK = "127.0.0.1";
+    /**
+     * Every address the phone has. Also what both backends mean by a host left unset -- crosvm's
+     * {@code DEFAULT_VNC_HOST} and the qemu builder's own fallback are this string -- which is why
+     * the row can show it for a config that names no host without changing what that config does.
+     */
+    static final String WILDCARD = "0.0.0.0";
+
+    static final class Option {
+        /** The address, exactly as it is stored and handed to the backend. */
+        final String addr;
+        /** The interface it was found on, or "" for the two fixed entries. */
+        final String ifname;
+
+        Option(@NonNull String addr, @NonNull String ifname) {
+            this.addr = addr;
+            this.ifname = ifname;
+        }
+    }
+
+    private VncHostOptions() {
+    }
+
+    /**
+     * Parses the daemon's {@code data} array into scan results, dropping rows it cannot read.
+     * Order is netlink's dump order, which groups an interface's addresses together.
+     */
+    @NonNull
+    static List<Option> parse(@Nullable JSONArray data) {
+        var out = new ArrayList<Option>();
+        if (data == null) return out;
+        for (int i = 0; i < data.length(); i++) {
+            var row = data.optJSONObject(i);
+            if (row == null) continue;
+            var addr = row.optString("addr", "");
+            if (addr.isEmpty()) continue;
+            out.add(new Option(addr, row.optString("ifname", "")));
+        }
+        return out;
+    }
+
+    /**
+     * The dropdown's entries: the two fixed addresses, then whatever was scanned.
+     *
+     * @param scanned the phone's own addresses, or an empty list before the daemon has answered --
+     *                or when it cannot, which is not an error to report: the two fixed entries and
+     *                the custom dialog are a working picker on their own.
+     * @param current the address the row currently holds. Appended if no other rule produced it,
+     *                so a stored address stays selectable when the interface it was found on is
+     *                gone -- and so that what the field shows is always an entry of the list rather
+     *                than a value the menu would silently fail to highlight.
+     */
+    @NonNull
+    static List<Option> build(@NonNull List<Option> scanned, @NonNull String current) {
+        var out = new ArrayList<Option>(scanned.size() + 3);
+        add(out, new Option(LOOPBACK, ""));
+        add(out, new Option(WILDCARD, ""));
+        for (var option : scanned) add(out, option);
+        if (!current.isEmpty()) add(out, new Option(current, ""));
+        return Collections.unmodifiableList(out);
+    }
+
+    /**
+     * Adds one entry, unless the list already offers that address. An address a scan found on two
+     * interfaces, or one that is also the address the row holds, is one entry: the list names
+     * addresses, and where an address came from is not something the user is choosing between.
+     */
+    private static void add(@NonNull List<Option> out, @NonNull Option option) {
+        for (var existing : out) if (existing.addr.equals(option.addr)) return;
+        out.add(option);
+    }
+
+    /**
+     * Whether [host] is an address this screen can be told to listen on.
+     *
+     * <p>A numeric literal of either family, and nothing else. Not a name: an IPv4 listen address
+     * reaches LibVNCServer as an {@code in_addr} with nowhere for a resolver to run, so crosvm
+     * refuses a host it cannot parse rather than quietly listening on every address -- which means
+     * a name typed here is a VM that will not start, and the place to say so is the field. It also
+     * rules out the characters that would break the {@code host=...,port=...} option string the
+     * value ends up inside, where the damage would show up as a command line crosvm rejects at VM
+     * start rather than as a wrong address.</p>
+     *
+     * <p>Written out rather than handed to {@code InetAddresses.isNumericAddress}, because this is
+     * the sort of rule that wants a test more than it wants a platform call, and that one is not
+     * on the JVM the tests run on.</p>
+     */
+    static boolean isLiteral(@NonNull String host) {
+        return isIpv4(host) || isIpv6(host);
+    }
+
+    /** Four dot-separated decimal octets, each 0-255 and at most three digits. */
+    private static boolean isIpv4(@NonNull String s) {
+        var parts = s.split("\\.", -1);
+        if (parts.length != 4) return false;
+        for (var part : parts) {
+            if (part.isEmpty() || part.length() > 3) return false;
+            var value = 0;
+            for (var i = 0; i < part.length(); i++) {
+                var c = part.charAt(i);
+                if (c < '0' || c > '9') return false;
+                value = value * 10 + (c - '0');
+            }
+            if (value > 255) return false;
+        }
+        return true;
+    }
+
+    /**
+     * Eight 16-bit groups, with at most one {@code ::} standing in for a run of zero groups and an
+     * optional dotted-quad tail counting as the last two. No zone id: a scoped address is
+     * link-local, and those are not offered in the first place.
+     */
+    private static boolean isIpv6(@NonNull String s) {
+        if (s.indexOf('%') >= 0) return false;
+        var gap = s.indexOf("::");
+        if (gap != s.lastIndexOf("::")) return false;
+        String head, tail;
+        if (gap < 0) {
+            head = s;
+            tail = "";
+        } else {
+            head = s.substring(0, gap);
+            tail = s.substring(gap + 2);
+        }
+        var counted = new int[]{0};
+        // Only the half that ends the address may end in a dotted quad, and which half that is
+        // depends on whether there is a gap at all: without one there is only the head.
+        if (!countGroups(head, counted, gap < 0)) return false;
+        if (!countGroups(tail, counted, true)) return false;
+        // Without "::" the eight groups must all be spelled out; with it, the gap stands for at
+        // least one, so seven explicit groups is the most that can be left.
+        return gap < 0 ? counted[0] == 8 : counted[0] <= 7;
+    }
+
+    /**
+     * Adds the groups of one half to {@code counted}. {@code tailAllowed} says whether this half
+     * may end in a dotted quad -- only the half that ends the address may.
+     */
+    private static boolean countGroups(@NonNull String half, @NonNull int[] counted,
+                                       boolean tailAllowed) {
+        if (half.isEmpty()) return true;
+        var parts = half.split(":", -1);
+        for (var i = 0; i < parts.length; i++) {
+            var part = parts[i];
+            if (part.isEmpty()) return false;
+            if (part.indexOf('.') >= 0) {
+                // A dotted quad is the last two groups, and can only be the very last thing.
+                if (!tailAllowed || i != parts.length - 1 || !isIpv4(part)) return false;
+                counted[0] += 2;
+                continue;
+            }
+            if (part.length() > 4) return false;
+            for (var j = 0; j < part.length(); j++) {
+                var c = part.charAt(j);
+                var hex = (c >= '0' && c <= '9') || (c >= 'a' && c <= 'f') || (c >= 'A' && c <= 'F');
+                if (!hex) return false;
+            }
+            counted[0]++;
+        }
+        return true;
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/info/ConsoleButton.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/info/ConsoleButton.java
index 1df7105ca..e8b12a5a9 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/info/ConsoleButton.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/info/ConsoleButton.java
@@ -36,6 +36,8 @@
 import cn.classfun.droidvm.lib.daemon.DaemonConnection;
 import cn.classfun.droidvm.lib.store.base.DataItem;
 import cn.classfun.droidvm.lib.store.vm.VMBackend;
+import cn.classfun.droidvm.lib.store.vm.DisplayExporter;
+import cn.classfun.droidvm.lib.store.vm.VMScreenConfig;
 import cn.classfun.droidvm.lib.store.vm.VMState;
 import cn.classfun.droidvm.ui.vm.console.VMConsoleRouter;
 
@@ -71,15 +73,26 @@ void openDefaultConsole() {
             parent.currentState != VMState.STOPPED);
     }
 
+    /**
+     * One chooser row. The stdio row is special: it carries the stdout/stderr side buttons; a
+     * display row additionally carries the screen it opens, since a VM can have two of them
+     * exported different ways and the row is the point where the user picks one.
+     */
     private static final class Row {
         final String title;
         final String name;
+        final String screenId;
         final int icon;
         final boolean stdio;
 
         Row(String title, String name, int icon, boolean stdio) {
+            this(title, name, "", icon, stdio);
+        }
+
+        Row(String title, String name, String screenId, int icon, boolean stdio) {
             this.title = title;
             this.name = name;
+            this.screenId = screenId;
             this.icon = icon;
             this.stdio = stdio;
         }
@@ -201,16 +214,28 @@ private void buildConsoleChooserDialog(@Nullable JSONArray streams) {
         }
         var running = parent.currentState != VMState.STOPPED;
         var cfg = parent.config == null ? DataItem.newObject() : parent.config.item;
-        var hasVnc = running && cfg.optBoolean("vnc_enabled", false);
-        var hasNative = running && cfg.optBoolean("native_display_enabled", false);
-        if (hasNative) {
-        }
-        if (hasVnc) {
+        // One row per bound screen, not one row per exporter kind: which screen a row opens is
+        // exactly what the user is choosing once a VM can have two of them. The screen's name is
+        // only spelled out when there is more than one, so a single-screen VM reads as before.
+        var bound = running ? VMScreenConfig.boundOf(cfg) : List.<VMScreenConfig>of();
+        var named = bound.size() > 1;
+        var hasDisplay = !bound.isEmpty();
+        for (var screen : bound) {
+            if (screen.getExporter() == DisplayExporter.NATIVE) {
+                rows.add(new Row(displayTitle(R.string.vm_info_console_native_select, screen, named),
+                    "native", screen.id, R.drawable.ic_monitor, false));
+            } else if (screen.getExporter() == DisplayExporter.VNC) {
+                // No separate "external display" row here any more: projecting is an action inside
+                // the VNC console (its menu), not a console to pick from the chooser.
+                rows.add(new Row(displayTitle(R.string.vm_info_console_vnc_select, screen, named),
+                    "vnc", screen.id, R.drawable.ic_remote_desktop, false));
+            }
         }
         if (rows.isEmpty() && !sawStd) {
             Toast.makeText(parent, R.string.vm_info_console_not_found, LENGTH_SHORT).show();
             return;
         }
+        if (rows.size() == 1 && !rows.get(0).stdio && !hasDisplay) {
             openConsole(rows.get(0).name);
             return;
         }
@@ -221,14 +246,13 @@ private void buildConsoleChooserDialog(@Nullable JSONArray streams) {
         };
         var adapter = new ChooserAdapter(parent, rows, onSubStream);
         DialogInterface.OnClickListener callback = (dialog, which) -> {
-            if (selected.equals("native")) {
-                openNativeDisplay();
-            } else if (selected.equals("vnc")) {
-                openVncDisplay();
-            } else if (selected.equals("vnc-ext")) {
-                openVncExtDisplay();
+            var row = rows.get(which);
+            if (row.name.equals("native")) {
+                openNativeDisplay(row.screenId);
+            } else if (row.name.equals("vnc")) {
+                openVncDisplay(row.screenId);
             } else {
-                openConsole(selected);
+                openConsole(row.name);
             }
         };
         dialogHolder[0] = new MaterialAlertDialogBuilder(parent)
@@ -242,18 +266,22 @@ private void openConsole(@NonNull String stream) {
             parent.currentState == VMState.STOPPED);
     }
 
-    private void openNativeDisplay() {
-        if (parent.config == null) return;
-        VMConsoleRouter.openNative(parent, parent.vmId, parent.config);
+    /** "Native Display" on a one-screen VM; "Native Display \u2013 SimpleFB screen" on two. */
+    @NonNull
+    private String displayTitle(int titleRes, @NonNull VMScreenConfig screen, boolean named) {
+        var title = parent.getString(titleRes);
+        if (!named) return title;
+        return parent.getString(R.string.vm_info_console_screen_select,
+            title, screen.getDisplayName(parent));
     }
 
-    private void openVncDisplay() {
+    private void openNativeDisplay(@NonNull String screenId) {
         if (parent.config == null) return;
-        VMConsoleRouter.openVnc(parent, parent.vmId, parent.config);
+        VMConsoleRouter.openNative(parent, parent.vmId, parent.config, screenId);
     }
 
-    private void openVncExtDisplay() {
+    private void openVncDisplay(@NonNull String screenId) {
         if (parent.config == null) return;
-        VMConsoleRouter.openVncExt(parent, parent.vmId, parent.config);
+        VMConsoleRouter.openVnc(parent, parent.vmId, parent.config, screenId);
     }
 }
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/widgets/row/ChooseRowWidget.java b/app/src/main/java/cn/classfun/droidvm/ui/widgets/row/ChooseRowWidget.java
index f3291123d..b3bc59733 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/widgets/row/ChooseRowWidget.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/widgets/row/ChooseRowWidget.java
@@ -89,6 +89,18 @@ public final <E extends Enum<E>> void setItems(@NonNull E... items) {
         buttonView.setItems(items);
     }
 
+    /**
+     * Items the row lists but refuses, each shown greyed with {@code note} after its label. Call
+     * after the {@code setItems} that installs them: a new item set clears the refusals, because
+     * the same constant can be reachable under one set and not under another.
+     */
+    @SafeVarargs
+    public final <E extends Enum<E>> void setDisabledItems(
+        @Nullable CharSequence note, @NonNull E... refused
+    ) {
+        buttonView.setDisabledItems(note, refused);
+    }
+
     public void setOnValueChangedListener(@Nullable EnumPickerChanged<Enum<?>> listener) {
         buttonView.setOnValueChangedListener(listener);
     }
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/widgets/row/SwitchRowWidget.java b/app/src/main/java/cn/classfun/droidvm/ui/widgets/row/SwitchRowWidget.java
index f917f46a1..7ecbe1e67 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/widgets/row/SwitchRowWidget.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/widgets/row/SwitchRowWidget.java
@@ -14,6 +14,7 @@
 
 import androidx.annotation.NonNull;
 import androidx.annotation.Nullable;
+import androidx.annotation.StringRes;
 
 import com.google.android.material.materialswitch.MaterialSwitch;
 
@@ -87,6 +88,15 @@ private void initAttrs(@Nullable AttributeSet attrs) {
         }
     }
 
+    /**
+     * Sets the row's label after inflation, for a layout included more than once: the same block
+     * of rows appears for each screen, so the title cannot come from the XML attribute.
+     */
+    public void setText(@StringRes int textId) {
+        textView.setText(textId);
+        iconView.setContentDescription(context.getString(textId));
+    }
+
     public boolean isChecked() {
         return switchView.isChecked();
     }
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/widgets/tools/PickerButtonWidget.java b/app/src/main/java/cn/classfun/droidvm/ui/widgets/tools/PickerButtonWidget.java
index b7c037ddb..ed00c8808 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/widgets/tools/PickerButtonWidget.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/widgets/tools/PickerButtonWidget.java
@@ -18,6 +18,8 @@
 import cn.classfun.droidvm.lib.store.enums.EnumPicker;
 import cn.classfun.droidvm.lib.store.enums.EnumPicker.EnumPickerChanged;
 
+import java.util.List;
+
 public final class PickerButtonWidget extends RelativeLayout {
     private final Context context;
     private MaterialButton buttonView;
@@ -129,6 +131,21 @@ public final <E extends Enum<E>> void setItems(@NonNull E... items) {
         picker.setItems(items);
     }
 
+    /**
+     * Items the picker lists but refuses, annotated with {@code note}; see
+     * {@link EnumPicker#setDisabledItems}. Call after the {@code setItems} that installs them --
+     * a new item set clears the refusals, because the same constant can be reachable under one
+     * set and not under another.
+     */
+    @SafeVarargs
+    public final <E extends Enum<E>> void setDisabledItems(
+        @Nullable CharSequence note, @NonNull E... refused
+    ) {
+        if (picker == null)
+            throw new IllegalStateException("Items not set");
+        this.<E>getPicker().setDisabledItems(note, List.of(refused));
+    }
+
     private void onValueChanged(Enum<?> oldVal, Enum<?> newVal) {
         this.buttonView.setText(picker.getSelectedString());
         if (listener != null)
diff --git a/app/src/main/res/layout/dialog_screen_rate.xml b/app/src/main/res/layout/dialog_screen_rate.xml
new file mode 100644
index 000000000..7aab4363b
--- /dev/null
+++ b/app/src/main/res/layout/dialog_screen_rate.xml
@@ -0,0 +1,30 @@
+<?xml version="1.0" encoding="utf-8"?><!--
+     The rate dropdown's last entry. One number, bounded by what the screen this belongs to
+     accepts: a mode's refresh rate and a framebuffer's poll rate have different ceilings, so the
+     hint and the bounds are set by ScreenBindingRow rather than here.
+-->
+<LinearLayout xmlns:android="http://schemas.android.com/apk/res/android"
+    xmlns:tools="http://schemas.android.com/tools"
+    android:layout_width="match_parent"
+    android:layout_height="wrap_content"
+    android:orientation="vertical"
+    android:paddingHorizontal="24dp"
+    android:paddingTop="8dp">
+
+    <com.google.android.material.textfield.TextInputLayout
+        android:id="@+id/til_custom_rate"
+        style="@style/Widget.Material3.TextInputLayout.OutlinedBox"
+        android:layout_width="match_parent"
+        android:layout_height="wrap_content"
+        android:hint="@string/create_vm_display_refresh_rate">
+
+        <com.google.android.material.textfield.TextInputEditText
+            android:id="@+id/et_custom_rate"
+            android:layout_width="match_parent"
+            android:layout_height="wrap_content"
+            android:inputType="number"
+            tools:ignore="VisualLintTextFieldSize" />
+
+    </com.google.android.material.textfield.TextInputLayout>
+
+</LinearLayout>
diff --git a/app/src/main/res/layout/dialog_screen_resolution.xml b/app/src/main/res/layout/dialog_screen_resolution.xml
new file mode 100644
index 000000000..ba30d3e26
--- /dev/null
+++ b/app/src/main/res/layout/dialog_screen_resolution.xml
@@ -0,0 +1,48 @@
+<?xml version="1.0" encoding="utf-8"?><!--
+     The resolution dropdown's last entry. Two numbers, checked against the same bounds the editor
+     would check on save, so a size that gets past this dialog is one the VM can be saved with.
+-->
+<LinearLayout xmlns:android="http://schemas.android.com/apk/res/android"
+    xmlns:tools="http://schemas.android.com/tools"
+    android:layout_width="match_parent"
+    android:layout_height="wrap_content"
+    android:baselineAligned="false"
+    android:orientation="horizontal"
+    android:paddingHorizontal="24dp"
+    android:paddingTop="8dp">
+
+    <com.google.android.material.textfield.TextInputLayout
+        style="@style/Widget.Material3.TextInputLayout.OutlinedBox"
+        android:layout_width="0dp"
+        android:layout_height="wrap_content"
+        android:layout_marginEnd="8dp"
+        android:layout_weight="1"
+        android:hint="@string/create_vm_display_width">
+
+        <com.google.android.material.textfield.TextInputEditText
+            android:id="@+id/et_custom_width"
+            android:layout_width="match_parent"
+            android:layout_height="wrap_content"
+            android:inputType="number"
+            tools:ignore="VisualLintTextFieldSize" />
+
+    </com.google.android.material.textfield.TextInputLayout>
+
+    <com.google.android.material.textfield.TextInputLayout
+        style="@style/Widget.Material3.TextInputLayout.OutlinedBox"
+        android:layout_width="0dp"
+        android:layout_height="wrap_content"
+        android:layout_marginStart="8dp"
+        android:layout_weight="1"
+        android:hint="@string/create_vm_display_height">
+
+        <com.google.android.material.textfield.TextInputEditText
+            android:id="@+id/et_custom_height"
+            android:layout_width="match_parent"
+            android:layout_height="wrap_content"
+            android:inputType="number"
+            tools:ignore="VisualLintTextFieldSize" />
+
+    </com.google.android.material.textfield.TextInputLayout>
+
+</LinearLayout>
diff --git a/app/src/main/res/layout/dialog_vnc_external.xml b/app/src/main/res/layout/dialog_vnc_external.xml
index 9a76bec2a..494204887 100644
--- a/app/src/main/res/layout/dialog_vnc_external.xml
+++ b/app/src/main/res/layout/dialog_vnc_external.xml
@@ -16,20 +16,33 @@
         android:textSize="14sp" />
 
     <com.google.android.material.textfield.TextInputLayout
-        android:id="@+id/til_target"
+        android:id="@+id/til_local"
         style="@style/Widget.Material3.TextInputLayout.OutlinedBox"
         android:layout_width="match_parent"
         android:layout_height="wrap_content"
-        android:hint="@string/vnc_external_hint_target">
+        android:hint="@string/vnc_external_hint_local">
 
         <com.google.android.material.textfield.TextInputEditText
-            android:id="@+id/et_target"
+            android:id="@+id/et_local"
             android:layout_width="match_parent"
             android:layout_height="wrap_content"
-            android:clickable="false"
-            android:cursorVisible="false"
-            android:focusable="false"
-            tools:ignore="VisualLintTextFieldSize,TextContrastCheck" />
+            tools:ignore="SpeakableTextPresentCheck,VisualLintTextFieldSize,TextContrastCheck" />
+
+    </com.google.android.material.textfield.TextInputLayout>
+
+    <com.google.android.material.textfield.TextInputLayout
+        android:id="@+id/til_remote"
+        style="@style/Widget.Material3.TextInputLayout.OutlinedBox"
+        android:layout_width="match_parent"
+        android:layout_height="wrap_content"
+        android:layout_marginTop="12dp"
+        android:hint="@string/vnc_external_hint_remote">
+
+        <com.google.android.material.textfield.TextInputEditText
+            android:id="@+id/et_remote"
+            android:layout_width="match_parent"
+            android:layout_height="wrap_content"
+            tools:ignore="SpeakableTextPresentCheck,VisualLintTextFieldSize,TextContrastCheck" />
 
     </com.google.android.material.textfield.TextInputLayout>
 
@@ -55,4 +68,3 @@
     </com.google.android.material.textfield.TextInputLayout>
 
 </LinearLayout>
-
diff --git a/app/src/main/res/layout/dialog_vnc_host.xml b/app/src/main/res/layout/dialog_vnc_host.xml
new file mode 100644
index 000000000..7732f3e0a
--- /dev/null
+++ b/app/src/main/res/layout/dialog_vnc_host.xml
@@ -0,0 +1,30 @@
+<?xml version="1.0" encoding="utf-8"?><!--
+     The VNC host dropdown's last entry: one address, typed. Checked for the characters that would
+     break the option string it ends up inside rather than for being a reachable address, since a
+     name the phone will only resolve later is a legitimate thing to put here.
+-->
+<LinearLayout xmlns:android="http://schemas.android.com/apk/res/android"
+    xmlns:tools="http://schemas.android.com/tools"
+    android:layout_width="match_parent"
+    android:layout_height="wrap_content"
+    android:orientation="vertical"
+    android:paddingHorizontal="24dp"
+    android:paddingTop="8dp">
+
+    <com.google.android.material.textfield.TextInputLayout
+        android:id="@+id/til_custom_vnc_host"
+        style="@style/Widget.Material3.TextInputLayout.OutlinedBox"
+        android:layout_width="match_parent"
+        android:layout_height="wrap_content"
+        android:hint="@string/create_vm_vnc_host">
+
+        <com.google.android.material.textfield.TextInputEditText
+            android:id="@+id/et_custom_vnc_host"
+            android:layout_width="match_parent"
+            android:layout_height="wrap_content"
+            android:inputType="textNoSuggestions"
+            tools:ignore="VisualLintTextFieldSize" />
+
+    </com.google.android.material.textfield.TextInputLayout>
+
+</LinearLayout>
diff --git a/app/src/main/res/layout/dialog_vnc_url.xml b/app/src/main/res/layout/dialog_vnc_url.xml
deleted file mode 100644
index e73825721..000000000
--- a/app/src/main/res/layout/dialog_vnc_url.xml
+++ /dev/null
@@ -1,68 +0,0 @@
-<?xml version="1.0" encoding="utf-8"?>
-<LinearLayout xmlns:android="http://schemas.android.com/apk/res/android"
-    xmlns:app="http://schemas.android.com/apk/res-auto"
-    xmlns:tools="http://schemas.android.com/tools"
-    android:layout_width="match_parent"
-    android:layout_height="wrap_content"
-    android:orientation="vertical"
-    android:paddingHorizontal="24dp"
-    android:paddingTop="8dp">
-
-    <com.google.android.material.textfield.TextInputLayout
-        android:id="@+id/til_local"
-        style="@style/Widget.Material3.TextInputLayout.OutlinedBox"
-        android:layout_width="match_parent"
-        android:layout_height="wrap_content">
-
-        <com.google.android.material.textfield.TextInputEditText
-            android:id="@+id/et_local"
-            android:layout_width="match_parent"
-            android:layout_height="wrap_content"
-            android:clickable="false"
-            android:cursorVisible="false"
-            android:focusable="false"
-            tools:ignore="SpeakableTextPresentCheck,VisualLintTextFieldSize" />
-
-    </com.google.android.material.textfield.TextInputLayout>
-
-    <com.google.android.material.textfield.TextInputLayout
-        android:id="@+id/til_remote"
-        style="@style/Widget.Material3.TextInputLayout.OutlinedBox"
-        android:layout_width="match_parent"
-        android:layout_height="wrap_content"
-        android:layout_marginTop="12dp">
-
-        <com.google.android.material.textfield.TextInputEditText
-            android:id="@+id/et_remote"
-            android:layout_width="match_parent"
-            android:layout_height="wrap_content"
-            android:clickable="false"
-            android:cursorVisible="false"
-            android:focusable="false"
-            tools:ignore="SpeakableTextPresentCheck,VisualLintTextFieldSize" />
-
-    </com.google.android.material.textfield.TextInputLayout>
-
-    <com.google.android.material.textfield.TextInputLayout
-        android:id="@+id/til_password"
-        style="@style/Widget.Material3.TextInputLayout.OutlinedBox"
-        android:layout_width="match_parent"
-        android:layout_height="wrap_content"
-        android:layout_marginTop="12dp"
-        android:hint="@string/vnc_external_hint_password"
-        app:endIconMode="password_toggle">
-
-        <com.google.android.material.textfield.TextInputEditText
-            android:id="@+id/et_password"
-            android:layout_width="match_parent"
-            android:layout_height="wrap_content"
-            android:clickable="false"
-            android:cursorVisible="false"
-            android:focusable="false"
-            android:inputType="textPassword"
-            tools:ignore="TextContrastCheck,VisualLintTextFieldSize" />
-
-    </com.google.android.material.textfield.TextInputLayout>
-
-</LinearLayout>
-
diff --git a/app/src/main/res/layout/partial_vm_screen_binding.xml b/app/src/main/res/layout/partial_vm_screen_binding.xml
index 19ee70554..dfb788e55 100644
--- a/app/src/main/res/layout/partial_vm_screen_binding.xml
+++ b/app/src/main/res/layout/partial_vm_screen_binding.xml
@@ -1,3 +1,92 @@
+<?xml version="1.0" encoding="utf-8"?><!--
+     Everything one screen has once the VM has the display device: how big it is and how often it
+     produces a picture, and who is watching it. Included once per screen, so the ids here appear
+     twice at runtime and are only ever looked up scoped to one include's root (see
+     ScreenBindingRow).
+
+     What is NOT here is the switch that says the device exists, nor the virtio-gpu screen's
+     renderer section. Both sit in the parent block, because the renderer goes between them and an
+     included layout has no slot to put another block in the middle of itself.
+
+     The two screens differ only in which rows of "display settings" apply: a mode has a rate the
+     guest is told about and a DPI, a watched framebuffer has a poll rate and no DPI. The rate is
+     one row either way, hinted per screen; the DPI row is here and ScreenBindingRow hides it on
+     the framebuffer, so the wiring stays written once.
+-->
+<LinearLayout xmlns:android="http://schemas.android.com/apk/res/android"
+    xmlns:app="http://schemas.android.com/apk/res-auto"
+    xmlns:tools="http://schemas.android.com/tools"
+    android:layout_width="match_parent"
+    android:layout_height="wrap_content"
+    android:orientation="vertical"
+    android:visibility="gone"
+    tools:visibility="visible">
+
+    <cn.classfun.droidvm.ui.widgets.container.CollapsibleContainer
+        android:layout_width="match_parent"
+        android:layout_height="wrap_content"
+        android:title="@string/create_vm_category_screen_display"
+        app:cc_expanded="true">
+
+        <LinearLayout
+            android:layout_width="match_parent"
+            android:layout_height="wrap_content"
+            android:layout_marginStart="16dp"
+            android:layout_marginTop="8dp"
+            android:layout_marginEnd="16dp"
+            android:layout_marginBottom="8dp"
+            android:baselineAligned="false"
+            android:orientation="horizontal">
+
+            <!-- Size and rate are picked, not typed: every value either list offers is one the
+                 geometry validator accepts, and the two sizes that depend on the device are ones
+                 nobody could type without going to look them up. Anything else is still reachable
+                 through the last entry of either list, which opens a dialog that validates what it
+                 is given, so the only numbers that reach the config are checked ones. What is
+                 stored is unchanged: two sizes and a rate, as before. -->
+            <com.google.android.material.textfield.TextInputLayout
+                android:id="@+id/til_screen_resolution"
+                style="@style/Widget.Material3.TextInputLayout.OutlinedBox.ExposedDropdownMenu"
+                android:layout_width="0dp"
+                android:layout_height="wrap_content"
+                android:layout_marginEnd="8dp"
+                android:layout_weight="2"
+                android:hint="@string/create_vm_display_resolution">
+
+                <AutoCompleteTextView
+                    android:id="@+id/dd_screen_resolution"
+                    android:layout_width="match_parent"
+                    android:layout_height="wrap_content"
+                    android:focusable="false"
+                    android:inputType="none"
+                    tools:ignore="LabelFor,SpeakableTextPresentCheck,VisualLintTextFieldSize" />
+
+            </com.google.android.material.textfield.TextInputLayout>
+
+            <!-- One field for both screens, hinted by ScreenBindingRow: the mode's refresh rate on
+                 virtio-gpu, the poll rate on the framebuffer. They are different numbers about
+                 different things, but a screen has exactly one of them, so there is one field. -->
+            <com.google.android.material.textfield.TextInputLayout
+                android:id="@+id/til_screen_rate"
+                style="@style/Widget.Material3.TextInputLayout.OutlinedBox.ExposedDropdownMenu"
+                android:layout_width="0dp"
+                android:layout_height="wrap_content"
+                android:layout_marginStart="8dp"
+                android:layout_weight="1"
+                android:hint="@string/create_vm_display_refresh_rate">
+
+                <AutoCompleteTextView
+                    android:id="@+id/dd_screen_rate"
+                    android:layout_width="match_parent"
+                    android:layout_height="wrap_content"
+                    android:focusable="false"
+                    android:inputType="none"
+                    tools:ignore="LabelFor,SpeakableTextPresentCheck,VisualLintTextFieldSize" />
+
+            </com.google.android.material.textfield.TextInputLayout>
+
+        </LinearLayout>
+
         <!-- Not an error and not a refusal: the width above is a legal one, it just costs the GPU
              copy. simplefb's stride is width*4 with nothing to pad it, and the blit's dma-buf
              import wants a 64-byte pitch, so the transport quietly settles one rung lower for a
@@ -15,3 +104,210 @@
             android:visibility="gone"
             tools:visibility="visible" />
 
+        <LinearLayout
+            android:id="@+id/screen_dpi_options"
+            android:layout_width="match_parent"
+            android:layout_height="wrap_content"
+            android:layout_marginStart="16dp"
+            android:layout_marginEnd="16dp"
+            android:layout_marginBottom="8dp"
+            android:baselineAligned="false"
+            android:orientation="horizontal">
+
+            <com.google.android.material.textfield.TextInputLayout
+                android:id="@+id/til_screen_dpi_h"
+                style="@style/Widget.Material3.TextInputLayout.OutlinedBox"
+                android:layout_width="0dp"
+                android:layout_height="wrap_content"
+                android:layout_marginEnd="8dp"
+                android:layout_weight="1"
+                android:hint="@string/create_vm_display_dpi_h">
+
+                <com.google.android.material.textfield.TextInputEditText
+                    android:id="@+id/et_screen_dpi_h"
+                    android:layout_width="match_parent"
+                    android:layout_height="wrap_content"
+                    android:inputType="number"
+                    android:text="160"
+                    tools:ignore="HardcodedText,VisualLintTextFieldSize" />
+
+            </com.google.android.material.textfield.TextInputLayout>
+
+            <com.google.android.material.textfield.TextInputLayout
+                android:id="@+id/til_screen_dpi_v"
+                style="@style/Widget.Material3.TextInputLayout.OutlinedBox"
+                android:layout_width="0dp"
+                android:layout_height="wrap_content"
+                android:layout_marginStart="8dp"
+                android:layout_weight="1"
+                android:hint="@string/create_vm_display_dpi_v">
+
+                <com.google.android.material.textfield.TextInputEditText
+                    android:id="@+id/et_screen_dpi_v"
+                    android:layout_width="match_parent"
+                    android:layout_height="wrap_content"
+                    android:inputType="number"
+                    android:text="160"
+                    tools:ignore="HardcodedText,VisualLintTextFieldSize" />
+
+            </com.google.android.material.textfield.TextInputLayout>
+
+        </LinearLayout>
+
+    </cn.classfun.droidvm.ui.widgets.container.CollapsibleContainer>
+
+    <cn.classfun.droidvm.ui.widgets.container.CollapsibleContainer
+        android:layout_width="match_parent"
+        android:layout_height="wrap_content"
+        android:title="@string/create_vm_category_screen_export"
+        app:cc_expanded="true">
+
+        <cn.classfun.droidvm.ui.widgets.row.ChooseRowWidget
+            android:id="@+id/choose_screen_exporter"
+            android:layout_width="match_parent"
+            android:layout_height="wrap_content"
+            android:icon="@drawable/ic_export_to"
+            android:text="@string/create_vm_screen_exporter" />
+
+        <!-- A ceiling, never a request: the transport is negotiated on the edge between this
+             screen and its exporter, so the only setting that is always honourable is one that
+             restricts downward. The subtitle has to say so, because "choose GPU copy" is a promise
+             the source may be unable to keep and the failure would be a silent downgrade.
+             The rungs themselves depend on both ends, so ScreenBindingRow rebuilds the menu when
+             the exporter above changes. -->
+        <cn.classfun.droidvm.ui.widgets.row.ChooseRowWidget
+            android:id="@+id/choose_screen_transport"
+            android:layout_width="match_parent"
+            android:layout_height="wrap_content"
+            android:icon="@drawable/ic_connection"
+            android:text="@string/create_vm_screen_transport" />
+
+        <cn.classfun.droidvm.ui.widgets.row.SwitchRowWidget
+            android:id="@+id/sw_screen_input_enabled"
+            android:layout_width="match_parent"
+            android:layout_height="wrap_content"
+            android:checked="true"
+            android:icon="@drawable/ic_touchscreen"
+            android:text="@string/create_vm_screen_input_enabled" />
+
+        <LinearLayout
+            android:id="@+id/screen_vnc_options"
+            android:layout_width="match_parent"
+            android:layout_height="wrap_content"
+            android:orientation="vertical"
+            android:visibility="gone">
+
+            <LinearLayout
+                android:layout_width="match_parent"
+                android:layout_height="wrap_content"
+                android:layout_marginStart="16dp"
+                android:layout_marginTop="8dp"
+                android:layout_marginEnd="16dp"
+                android:layout_marginBottom="8dp"
+                android:baselineAligned="false"
+                android:orientation="horizontal">
+
+                <!-- Picked like the resolution above, and for the same reason: the addresses
+                     worth offering are the phone's own, and those are ones nobody could type
+                     without going to look them up. The two fixed entries are the ends of the range
+                     (this device only / everything the phone is on); the scanned ones come from
+                     the daemon, because the one address that must not be offered, a pseudo-bridged
+                     guest's IP parked on the uplink, is only distinguishable over netlink. The
+                     last entry still opens a dialog, so anything remains reachable. What is stored
+                     is unchanged: one address string, as before. -->
+                <com.google.android.material.textfield.TextInputLayout
+                    android:id="@+id/til_screen_vnc_host"
+                    style="@style/Widget.Material3.TextInputLayout.OutlinedBox.ExposedDropdownMenu"
+                    android:layout_width="0dp"
+                    android:layout_height="wrap_content"
+                    android:layout_marginEnd="8dp"
+                    android:layout_weight="2"
+                    android:hint="@string/create_vm_vnc_host">
+
+                    <AutoCompleteTextView
+                        android:id="@+id/dd_screen_vnc_host"
+                        android:layout_width="match_parent"
+                        android:layout_height="wrap_content"
+                        android:focusable="false"
+                        android:inputType="none"
+                        tools:ignore="LabelFor,SpeakableTextPresentCheck,VisualLintTextFieldSize" />
+
+                </com.google.android.material.textfield.TextInputLayout>
+
+                <com.google.android.material.textfield.TextInputLayout
+                    android:id="@+id/til_screen_vnc_port"
+                    style="@style/Widget.Material3.TextInputLayout.OutlinedBox"
+                    android:layout_width="0dp"
+                    android:layout_height="wrap_content"
+                    android:layout_marginStart="8dp"
+                    android:layout_weight="1"
+                    android:hint="@string/create_vm_vnc_port">
+
+                    <com.google.android.material.textfield.TextInputEditText
+                        android:id="@+id/et_screen_vnc_port"
+                        android:layout_width="match_parent"
+                        android:layout_height="wrap_content"
+                        android:inputType="number"
+                        tools:ignore="TextContrastCheck,VisualLintTextFieldSize" />
+                </com.google.android.material.textfield.TextInputLayout>
+
+            </LinearLayout>
+
+            <cn.classfun.droidvm.ui.widgets.row.SwitchRowWidget
+                android:id="@+id/sw_screen_vnc_password_auth"
+                android:layout_width="match_parent"
+                android:layout_height="wrap_content"
+                android:icon="@drawable/ic_lock"
+                android:text="@string/create_vm_vnc_password_auth" />
+
+            <LinearLayout
+                android:id="@+id/screen_vnc_password_options"
+                android:layout_width="match_parent"
+                android:layout_height="wrap_content"
+                android:layout_marginStart="16dp"
+                android:layout_marginEnd="16dp"
+                android:layout_marginBottom="8dp"
+                android:gravity="center_vertical"
+                android:orientation="horizontal"
+                android:visibility="gone">
+
+                <com.google.android.material.textfield.TextInputLayout
+                    android:id="@+id/til_screen_vnc_password"
+                    style="@style/Widget.Material3.TextInputLayout.OutlinedBox"
+                    android:layout_width="0dp"
+                    android:layout_height="wrap_content"
+                    android:layout_weight="1"
+                    android:hint="@string/create_vm_vnc_password"
+                    app:endIconMode="password_toggle">
+
+                    <com.google.android.material.textfield.TextInputEditText
+                        android:id="@+id/et_screen_vnc_password"
+                        android:layout_width="match_parent"
+                        android:layout_height="wrap_content"
+                        android:inputType="textPassword" />
+                </com.google.android.material.textfield.TextInputLayout>
+
+                <com.google.android.material.button.MaterialButton
+                    android:id="@+id/btn_screen_vnc_password_clear"
+                    style="@style/Widget.Material3.Button.IconButton"
+                    android:layout_width="wrap_content"
+                    android:layout_height="wrap_content"
+                    android:layout_marginStart="4dp"
+                    android:contentDescription="@string/create_vm_vnc_password_clear"
+                    app:icon="@drawable/ic_close" />
+
+                <com.google.android.material.button.MaterialButton
+                    android:id="@+id/btn_screen_vnc_password_generate"
+                    style="@style/Widget.Material3.Button.IconButton"
+                    android:layout_width="wrap_content"
+                    android:layout_height="wrap_content"
+                    android:contentDescription="@string/create_vm_vnc_password_generate"
+                    app:icon="@drawable/ic_refresh" />
+
+            </LinearLayout>
+
+        </LinearLayout>
+
+    </cn.classfun.droidvm.ui.widgets.container.CollapsibleContainer>
+
+</LinearLayout>
diff --git a/app/src/main/res/menu/menu_vnc_display_menu.xml b/app/src/main/res/menu/menu_vnc_display_menu.xml
index 9cd3cb96e..8d0657db4 100644
--- a/app/src/main/res/menu/menu_vnc_display_menu.xml
+++ b/app/src/main/res/menu/menu_vnc_display_menu.xml
@@ -16,14 +16,14 @@
         android:icon="@drawable/ic_refresh"
         android:title="@string/vnc_menu_reconnect" />
 
+    <item
+        android:id="@+id/menu_project_external"
+        android:icon="@drawable/ic_monitor"
+        android:title="@string/vnc_menu_project_external" />
+
     <item
         android:id="@+id/menu_external"
         android:icon="@drawable/ic_open_in"
         android:title="@string/vnc_menu_external_app" />
 
-    <item
-        android:id="@+id/menu_view_url"
-        android:icon="@drawable/ic_nav_network"
-        android:title="@string/vnc_menu_view_url" />
-
 </menu>
diff --git a/app/src/main/res/menu/menu_vnc_presentation_menu.xml b/app/src/main/res/menu/menu_vnc_presentation_menu.xml
index 78da6c1df..1a8c04893 100644
--- a/app/src/main/res/menu/menu_vnc_presentation_menu.xml
+++ b/app/src/main/res/menu/menu_vnc_presentation_menu.xml
@@ -16,9 +16,4 @@
         android:icon="@drawable/ic_open_in"
         android:title="@string/vnc_menu_external_app" />
 
-    <item
-        android:id="@+id/menu_view_url"
-        android:icon="@drawable/ic_nav_network"
-        android:title="@string/vnc_menu_view_url" />
-
 </menu>
diff --git a/app/src/test/java/cn/classfun/droidvm/lib/store/vm/DisplayTransportCapTest.java b/app/src/test/java/cn/classfun/droidvm/lib/store/vm/DisplayTransportCapTest.java
index e7987bb13..f0b42036b 100644
--- a/app/src/test/java/cn/classfun/droidvm/lib/store/vm/DisplayTransportCapTest.java
+++ b/app/src/test/java/cn/classfun/droidvm/lib/store/vm/DisplayTransportCapTest.java
@@ -1,8 +1,140 @@
+package cn.classfun.droidvm.lib.store.vm;
+
+import static org.junit.Assert.assertArrayEquals;
+import static org.junit.Assert.assertEquals;
+import static org.junit.Assert.assertFalse;
+import static org.junit.Assert.assertNull;
+import static org.junit.Assert.assertTrue;
+
+import org.junit.Test;
+
+import cn.classfun.droidvm.lib.store.base.DataItem;
+
+/**
+ * The transport ladder: which rungs each (screen, exporter) edge has, which of them this build can
+ * honour, and what the app therefore puts on crosvm's command line.
+ *
+ * <p>Both ends decide the set, which is why every case here names both. The distinction the tests
+ * are really holding is between a rung that is <em>unbuilt</em> (offered, refused, and expected to
+ * arrive) and one that is <em>unreachable</em> (absent, because it never will).</p>
  *
  * <p>Two of the predicates below belong to the daemon and the editor rather than to this enum, and
  * are held here for the same reason: they decide whether a rung the ladder offers is actually
  * climbed at run time -- one from the VM's bindings, one from a number the user typed -- and
  * neither of their owners can be stood up without a device.</p>
+ */
+public class DisplayTransportCapTest {
+    private static final String GPU0 = VMScreenConfig.ID_GPU0;
+    private static final String FB = VMScreenConfig.ID_SIMPLEFB;
+
+    @Test
+    public void everyLadderIsBottomRungFirstAndStartsAtCpuCopy() {
+        // CPU copy needs nothing from either end, so it is the one rung that is always there --
+        // and it is what makes a ceiling always satisfiable.
+        for (var screen : new String[]{GPU0, FB})
+            for (var exporter : new DisplayExporter[]{DisplayExporter.NATIVE, DisplayExporter.VNC})
+                assertEquals(DisplayTransportCap.CPU,
+                    DisplayTransportCap.optionsFor(screen, exporter)[0]);
+    }
+
+    @Test
+    public void theNativeDisplayCanBeLentARenderTargetOnlyByTheGpuScreen() {
+        // Zero copy is the sink lending a buffer for the guest's rendering to land in. simplefb's
+        // framebuffer is a fixed window of guest memory named in the device tree and no
+        // AHardwareBuffer can be made to wrap it, so that rung is not unbuilt there, it is
+        // unreachable -- absent from the menu rather than greyed in it.
+        assertArrayEquals(
+            new DisplayTransportCap[]{
+                DisplayTransportCap.CPU, DisplayTransportCap.GPU, DisplayTransportCap.ZERO},
+            DisplayTransportCap.optionsFor(GPU0, DisplayExporter.NATIVE));
+        assertArrayEquals(
+            new DisplayTransportCap[]{DisplayTransportCap.CPU, DisplayTransportCap.GPU},
+            DisplayTransportCap.optionsFor(FB, DisplayExporter.NATIVE));
+        assertFalse(DisplayTransportCap.isOfferedFor(
+            FB, DisplayExporter.NATIVE, DisplayTransportCap.ZERO));
+    }
+
+    @Test
+    public void vncsTopRungIsAnEncoderRatherThanALentBuffer() {
+        // There is nowhere to lend a render target to a remote client, so VNC's rung above a blit
+        // is handing the result to a hardware encoder instead of an RFB rectangle. Same ladder on
+        // both screens, because it is the exporter's end that supplies it.
+        for (var screen : new String[]{GPU0, FB})
+            assertArrayEquals(
+                new DisplayTransportCap[]{
+                    DisplayTransportCap.CPU, DisplayTransportCap.GPU, DisplayTransportCap.GPU_HW},
+                DisplayTransportCap.optionsFor(screen, DisplayExporter.VNC));
+    }
+
+    @Test
+    public void anUnwatchedScreenHasNoLadderAtAll() {
+        // No exporter, no edge; a ceiling on nothing is not a smaller menu, it is no menu.
+        for (var screen : new String[]{GPU0, FB})
+            assertEquals(0, DisplayTransportCap.optionsFor(screen, DisplayExporter.NONE).length);
+    }
+
+    @Test
+    public void whatThisBuildRefusesIsListedRatherThanHidden() {
+        // Offered and greyed, so the ladder reads whole and a rung landing later is recognisably
+        // the thing that was already there.
+        assertArrayEquals(new DisplayTransportCap[]{DisplayTransportCap.ZERO},
+            DisplayTransportCap.unimplementedFor(GPU0, DisplayExporter.NATIVE));
+        assertEquals(0,
+            DisplayTransportCap.unimplementedFor(FB, DisplayExporter.NATIVE).length);
+    }
+
+    @Test
+    public void theDefaultIsTheHighestRungThatActuallyWorks() {
+        // Not the highest offered: defaulting every VM to a ceiling nothing can satisfy is a
+        // promise the negotiation would quietly break. This one restricts nothing that works, and
+            assertEquals(DisplayTransportCap.GPU,
+    }
+
+    @Test
+    public void theStoredTokenIsTheOneCrosvmTakes() {
+        // Written into the config and onto a command line, so one value must not have two
+        // spellings. Read back case-insensitively, because a hand-edited file is still a file.
+        assertEquals("cpu", DisplayTransportCap.CPU.getToken());
+        assertEquals("gpu-hw", DisplayTransportCap.GPU_HW.getToken());
+        for (var cap : DisplayTransportCap.values())
+            assertEquals(cap, DisplayTransportCap.fromToken(cap.getToken()));
+        assertEquals(DisplayTransportCap.GPU_HW, DisplayTransportCap.fromToken("GPU-HW"));
+        assertNull(DisplayTransportCap.fromToken(""));
+        assertNull(DisplayTransportCap.fromToken(null));
+        assertNull(DisplayTransportCap.fromToken("zero-copy"));
+    }
+
+    @Test
+    public void aScreenWithNoStoredCeilingAnswersWithItsEdgeDefault() {
+        var item = DataItem.newObject();
+        var fb = VMScreenConfig.of(item, VMScreenConfig.ID_SIMPLEFB);
+        fb.setEnabled(true);
+        fb.setExporter(DisplayExporter.VNC);
+        fb.setExporter(DisplayExporter.NATIVE);
+        assertEquals(DisplayTransportCap.GPU, fb.getTransportCap());
+    }
+
+    @Test
+    public void aCeilingTheEdgeDoesNotHaveFallsBackWithoutBeingErased() {
+        // Reading under a different exporter must not lose the answer: the user is allowed to look
+        // at the other exporter's settings and come back.
+        var item = DataItem.newObject();
+        var gpu0 = VMScreenConfig.of(item, VMScreenConfig.ID_GPU0);
+        gpu0.setEnabled(true);
+        gpu0.setExporter(DisplayExporter.NATIVE);
+        gpu0.setTransportCap(DisplayTransportCap.ZERO);
+        assertEquals(DisplayTransportCap.ZERO, gpu0.getTransportCap());
+        gpu0.setExporter(DisplayExporter.VNC);
+        gpu0.setExporter(DisplayExporter.NATIVE);
+        assertEquals(DisplayTransportCap.ZERO, gpu0.getTransportCap());
+    }
+
+    @Test
+        var item = DataItem.newObject();
+
+    }
+
+    }
 
     @Test
         var item = DataItem.newObject();
@@ -51,3 +183,4 @@ public void aSimplefbWidthOffTheGrainSpendsTheGpuCopy() {
         assertFalse(DisplayTransportCap.cpuFallbackFromWidth(
             FB, DisplayExporter.NATIVE, DisplayTransportCap.GPU, 0));
     }
+}
diff --git a/app/src/test/java/cn/classfun/droidvm/lib/store/vm/VMCreationDefaultsTest.java b/app/src/test/java/cn/classfun/droidvm/lib/store/vm/VMCreationDefaultsTest.java
index 8b7200fc7..fc8ef635a 100644
--- a/app/src/test/java/cn/classfun/droidvm/lib/store/vm/VMCreationDefaultsTest.java
+++ b/app/src/test/java/cn/classfun/droidvm/lib/store/vm/VMCreationDefaultsTest.java
@@ -4,15 +4,23 @@
 package cn.classfun.droidvm.lib.store.vm;
 
 import static org.junit.Assert.assertEquals;
+import static org.junit.Assert.assertFalse;
+import static org.junit.Assert.assertNotNull;
+import static org.junit.Assert.assertTrue;
 
 import org.junit.Test;
 
+import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
+
 import cn.classfun.droidvm.lib.data.HostAudioDevices;
 
 public final class VMCreationDefaultsTest {
     @Test
     public void requestedCreateVmDefaultsAreStable() {
         assertEquals(60, VMScreenConfig.NEW_VM_DEFAULT_POLL_HZ);
+        assertEquals("127.0.0.1", VMScreenConfig.NEW_VM_DEFAULT_VNC_HOST);
+        assertEquals(5900, VMScreenConfig.newVmDefaultVncPort(VMScreenConfig.ID_GPU0));
+        assertEquals(5909, VMScreenConfig.newVmDefaultVncPort(VMScreenConfig.ID_SIMPLEFB));
 
         var sound = VMPeripheralConfig.createDefaultVirtioSound();
         assertEquals(PeripheralType.VIRTIO_SOUND, sound.getType());
@@ -25,4 +33,67 @@ public void requestedCreateVmDefaultsAreStable() {
         assertEquals(HostAudioDevices.SYSTEM_DEFAULT_KEY,
             endpoints.get(1).getHostDevice());
     }
+    /**
+     * What Customize opens with, against what the editor would fall back to on its own.
+     *
+     * <p>Every field the editor shows has up to three defaults behind it: the value this factory
+     * writes into the config, the fallback the editor passes to {@code optLong} when the config
+     * does not mention the key, and the {@code android:text} in the layout. They are read in that
+     * order, so the first one present wins and the ones below it are never seen. That is fine
+     * while they agree and invisible when they do not -- the config said the virtio-gpu screen was
+     * bound to nothing while the editor's own row said NATIVE, and because the config is loaded
+     * over the row, turning the device on showed "sink" with no way to tell which layer said so.
+     *
+     * <p>So: the screens' exporter comes from one shared constant, and the graphics pools are the
+     * editor's to default. A pool key appearing here means this test has to say what the editor
+     * should show for it -- which is the point, because that is the moment the two can disagree.
+     */
+    @Test
+    public void customizeDefaultsAgreeWithTheEditorsOwn() {
+        // Only LendMthpMode.defaultForDevice reads it, inside its own try/catch.
+        var item = VMConfig.createWithCustomizeDefaults(null).item;
+
+        var gpu = VMScreenConfig.find(item, VMScreenConfig.ID_GPU0);
+        assertNotNull(gpu);
+        // Off: a new VM has no virtio-gpu device until asked. Bound anyway, because this is what
+        // the editor shows the moment it is asked, and save() writes NONE while it stays off.
+        assertFalse(gpu.isEnabled());
+        assertEquals(VMScreenConfig.NEW_VM_DEFAULT_EXPORTER, gpu.getExporter());
+        // The ladder belongs to the edge, so the stored ceiling has to be the one computed for the
+        // exporter stored beside it. These two came apart once -- the cap was worked out for
+        // NATIVE while the exporter said NONE -- and nothing downstream could notice, because each
+        // is separately valid. Which rung that is per exporter is DisplayTransportCapTest's
+        // subject, including that switching to VNC moves it to the hardware encoder.
+        assertEquals(DisplayTransportCap.defaultFor(
+                VMScreenConfig.ID_GPU0, VMScreenConfig.NEW_VM_DEFAULT_EXPORTER),
+            gpu.getTransportCap());
+        // Written even while this screen is off and bound to something that is not VNC, for the
+        // same reason the exporter above it is: the editor loads this config over its rows, so
+        // this is what it shows the moment the user switches the screen to VNC. The two screens'
+        // ports differ because both can be exported at once and two servers may not share one.
+        assertEquals(VMScreenConfig.NEW_VM_DEFAULT_VNC_HOST, gpu.getVncHost());
+        assertEquals(VMScreenConfig.NEW_VM_DEFAULT_VNC_PORT_GPU0, gpu.getVncPort());
+
+        var fb = VMScreenConfig.find(item, VMScreenConfig.ID_SIMPLEFB);
+        assertNotNull(fb);
+        assertTrue(fb.isEnabled());
+        assertEquals(VMScreenConfig.NEW_VM_DEFAULT_EXPORTER, fb.getExporter());
+        assertEquals(DisplayTransportCap.defaultFor(
+                VMScreenConfig.ID_SIMPLEFB, VMScreenConfig.NEW_VM_DEFAULT_EXPORTER),
+            fb.getTransportCap());
+        assertEquals(VMScreenConfig.NEW_VM_DEFAULT_VNC_HOST, fb.getVncHost());
+        assertEquals(VMScreenConfig.NEW_VM_DEFAULT_VNC_PORT_SIMPLEFB, fb.getVncPort());
+
+        // The graphics pools: the editor owns these defaults (VMEditGraphicsTab.loadConfigLocked
+        // passes each one to optLong), and the layout repeats them. Writing one here would take
+        // that decision away silently, so if this list has to change, change the editor with it.
+        for (var key : new String[] {
+            "gpu_drm2kgsl_pool_mb", "gpu_host_pool_mb", "gpu_venus_pool_mb",
+            "gpu_guest_pool_mb", "gpu_guest_prealloc_mb", "gpu_guest_step_mb",
+            "gpu_guest_max_grants", "gpu_pool_blob_max_kb", "gpu_vram_quota_mb",
+        }) {
+            assertEquals(fmt("%s is the editor's default to make, not this factory's", key),
+                -1L, item.optLong(key, -1L));
+        }
+    }
 }
diff --git a/app/src/test/java/cn/classfun/droidvm/lib/store/vm/VMScreenMigrationTest.java b/app/src/test/java/cn/classfun/droidvm/lib/store/vm/VMScreenMigrationTest.java
new file mode 100644
index 000000000..c07e3237b
--- /dev/null
+++ b/app/src/test/java/cn/classfun/droidvm/lib/store/vm/VMScreenMigrationTest.java
@@ -0,0 +1,507 @@
+package cn.classfun.droidvm.lib.store.vm;
+
+import static org.junit.Assert.assertEquals;
+import static org.junit.Assert.assertFalse;
+import static org.junit.Assert.assertNotEquals;
+import static org.junit.Assert.assertNull;
+import static org.junit.Assert.assertThrows;
+import static org.junit.Assert.assertTrue;
+import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
+
+import org.junit.Test;
+
+import java.nio.charset.StandardCharsets;
+import java.util.HashSet;
+import java.util.UUID;
+
+import cn.classfun.droidvm.lib.store.base.DataItem;
+import cn.classfun.droidvm.lib.store.enums.Enums;
+
+/**
+ * The one-way fold of the legacy display keys into per-screen bindings. Every case here is a
+ * config shape the editor could actually write, including the two the old keys allowed by
+ * accident (display off with VNC on; a backend the GPU switch does not back).
+ */
+public class VMScreenMigrationTest {
+    private static DataItem legacy(boolean displayEnabled, DisplayBackend backend,
+                                   boolean nativeDisplay, boolean vnc) {
+        var item = DataItem.newObject();
+        item.set("display_enabled", displayEnabled);
+        item.set("display_backend", backend);
+        item.set("native_display_enabled", nativeDisplay);
+        item.set("vnc_enabled", vnc);
+        return item;
+    }
+
+    private static VMScreenConfig gpu0(DataItem item) {
+        return VMScreenConfig.find(item, VMScreenConfig.ID_GPU0);
+    }
+
+    private static VMScreenConfig fb(DataItem item) {
+        return VMScreenConfig.find(item, VMScreenConfig.ID_SIMPLEFB);
+    }
+
+    @Test
+    public void windowsStyleSimplefbNative() {
+        var item = legacy(true, DisplayBackend.SIMPLEFB, true, false);
+        VMScreenConfig.migrate(item);
+        assertFalse(gpu0(item).isEnabled());
+        assertEquals(DisplayExporter.NONE, gpu0(item).getExporter());
+        assertTrue(fb(item).isEnabled());
+        assertEquals(DisplayExporter.NATIVE, fb(item).getExporter());
+    }
+
+    @Test
+    public void linuxStyleVirtioGpuVnc() {
+        var item = legacy(true, DisplayBackend.VIRTIO_GPU, false, true);
+        item.set("gpu_enabled", true);
+        item.set("vnc_host", "0.0.0.0");
+        item.set("vnc_port", 5901);
+        item.set("vnc_password_auth", true);
+        item.set("vnc_password", "hunter2!");
+        VMScreenConfig.migrate(item);
+        assertTrue(gpu0(item).isEnabled());
+        assertEquals(DisplayExporter.VNC, gpu0(item).getExporter());
+        assertEquals("0.0.0.0", gpu0(item).getVncHost());
+        assertEquals(5901, gpu0(item).getVncPort());
+        assertTrue(gpu0(item).isVncPasswordAuth());
+        assertEquals("hunter2!", gpu0(item).getVncPassword());
+        assertFalse(fb(item).isEnabled());
+    }
+
+    @Test
+    public void nativeWinsOverVncOnTheSameScreen() {
+        // The old pair could say both; crosvm silently kept VNC and the app's Surface never got a
+        // binder. One exporter per screen means the fold has to choose, and it chooses what the
+        // editor's own read-back did.
+        var item = legacy(true, DisplayBackend.VIRTIO_GPU, true, true);
+        item.set("gpu_enabled", true);
+        VMScreenConfig.migrate(item);
+        assertEquals(DisplayExporter.NATIVE, gpu0(item).getExporter());
+        assertEquals(DisplayExporter.NONE, fb(item).getExporter());
+    }
+
+    @Test
+    public void backendNoneBindsNothing() {
+        var item = legacy(true, DisplayBackend.NONE, true, false);
+        VMScreenConfig.migrate(item);
+        assertFalse(gpu0(item).isEnabled());
+        assertFalse(fb(item).isEnabled());
+        assertEquals(DisplayExporter.NONE, gpu0(item).getExporter());
+        assertEquals(DisplayExporter.NONE, fb(item).getExporter());
+    }
+
+    @Test
+    public void displayOffWithVncOnKeepsWorking() {
+        // buildVncCommand never looked at display_enabled, so this VM had a working VNC server on
+        // the GPU device's default display. It keeps one, bound where crosvm's own compat rule
+        // for an unscreened exporter would have put it.
+        var item = legacy(false, DisplayBackend.NONE, false, true);
+        item.set("gpu_enabled", true);
+        item.set("vnc_port", 5902);
+        VMScreenConfig.migrate(item);
+        assertTrue(gpu0(item).isEnabled());
+        assertEquals(DisplayExporter.VNC, gpu0(item).getExporter());
+        assertEquals(5902, gpu0(item).getVncPort());
+    }
+
+    @Test
+    public void displayOffWithVncOnAndNoGpuBindsNothingButKeepsSettings() {
+        var item = legacy(false, DisplayBackend.NONE, false, true);
+        item.set("vnc_port", 5903);
+        item.set("vnc_password", "keepme12");
+        VMScreenConfig.migrate(item);
+        assertEquals(DisplayExporter.NONE, gpu0(item).getExporter());
+        assertEquals(DisplayExporter.NONE, fb(item).getExporter());
+        assertEquals(5903, fb(item).getVncPort());
+        assertEquals("keepme12", fb(item).getVncPassword());
+    }
+
+    @Test
+    public void legacyKeysAreGoneAfterTheFold() {
+        var item = legacy(true, DisplayBackend.SIMPLEFB, true, false);
+        item.set("vnc_port", 5900);
+        VMScreenConfig.migrate(item);
+        for (var key : new String[]{"display_enabled", "display_backend", "native_display_enabled",
+            "vnc_enabled", "vnc_host", "vnc_port", "vnc_password_auth", "vnc_password"})
+            assertNull(item.opt(key, (DataItem) null));
+    }
+
+    @Test
+    public void aConfigAlreadyInTheNewShapeIsLeftAlone() {
+        var item = DataItem.newObject();
+        var fb = VMScreenConfig.of(item, VMScreenConfig.ID_SIMPLEFB);
+        fb.setEnabled(true);
+        fb.setExporter(DisplayExporter.NATIVE);
+        // A stray legacy key next to it must not re-run the fold and overwrite the binding.
+        item.set("display_backend", DisplayBackend.VIRTIO_GPU);
+        VMScreenConfig.migrate(item);
+        assertTrue(fb(item).isEnabled());
+        assertEquals(DisplayExporter.NATIVE, fb(item).getExporter());
+    }
+
+    @Test
+    public void theGpuScreenSwitchIsTheDeviceAndNothingElseIsAsked() {
+        // There used to be a second answer to "does this VM have a GPU" sitting next to this one,
+        // and the pair could disagree. One switch means the question has one place to be asked.
+        var item = legacy(true, DisplayBackend.VIRTIO_GPU, true, false);
+        item.set("gpu_enabled", true);
+        VMScreenConfig.migrate(item);
+        assertTrue(gpu0(item).isEnabled());
+        assertTrue(VMScreenConfig.hasGpuDevice(item));
+        assertEquals(1, VMScreenConfig.boundOf(item).size());
+        assertNull(item.opt("gpu_enabled", (DataItem) null));
+        gpu0(item).setEnabled(false);
+        assertFalse(VMScreenConfig.hasGpuDevice(item));
+        assertTrue(VMScreenConfig.boundOf(item).isEmpty());
+    }
+
+    @Test
+    public void acceleratorOnWithTheScreenOffLeavesNoDevice() {
+        // The acceleration-test shape: a GPU meant to render while scanning out nothing. No guest
+        // desktop ever came up on one, so the fold does not carry it forward -- and a VM that was
+        // not doing anything is better described as off than preserved because it was written down.
+        var item = legacy(true, DisplayBackend.SIMPLEFB, true, false);
+        item.set("gpu_enabled", true);
+        item.set("gpu_backend", GpuBackend.GPU_GFXSTREAM);
+        VMScreenConfig.migrate(item);
+        assertFalse(gpu0(item).isEnabled());
+        assertFalse(VMScreenConfig.hasGpuDevice(item));
+        // The simplefb half of that VM is untouched: it is the half that was displaying anything.
+        assertTrue(fb(item).isEnabled());
+        assertEquals(DisplayExporter.NATIVE, fb(item).getExporter());
+        // The renderer choice stays on disk, unread, so turning the device back on in the editor
+        // finds it rather than a default.
+        assertEquals(GpuBackend.GPU_GFXSTREAM, Enums.optEnum(item, "gpu_backend", GpuBackend.NONE));
+    }
+
+    @Test
+    public void acceleratorOffWithTheScreenOnBecomesA2dDevice() {
+        // The reverse disagreement was an ordinary VM in intent -- a display, no 3D -- but the old
+        // builder emitted no --gpu at all for it, so it had no display device either. The new
+        // model can say what was meant, and saying it is also the repair.
+        var item = legacy(true, DisplayBackend.VIRTIO_GPU, false, true);
+        item.set("gpu_enabled", false);
+        VMScreenConfig.migrate(item);
+        assertTrue(gpu0(item).isEnabled());
+        assertEquals(GpuBackend.GPU_2D, Enums.optEnum(item, "gpu_backend", GpuBackend.NONE));
+        assertNull(item.opt("gpu_enabled", (DataItem) null));
+    }
+
+    @Test
+    public void aConfigThatNeverNamedAnAcceleratorAtAllStillGetsARenderer() {
+        // gpu_enabled absent reads as false, which is the same VM as the case above; gating the
+        // fold on the key alone would leave this one with a virtio-gpu screen and no renderer.
+        var item = legacy(true, DisplayBackend.VIRTIO_GPU, true, false);
+        assertNull(item.opt("gpu_enabled", (DataItem) null));
+        VMScreenConfig.migrate(item);
+        assertTrue(gpu0(item).isEnabled());
+        assertEquals(GpuBackend.GPU_2D, Enums.optEnum(item, "gpu_backend", GpuBackend.NONE));
+    }
+
+    @Test
+    public void theFlatGeometryLandsOnBothScreensAndTheOldKeysGo() {
+        // One width could not be two, so both screens inherit the single answer the old schema
+        // could give and are free to disagree from the next edit onwards.
+        var item = legacy(true, DisplayBackend.VIRTIO_GPU, true, false);
+        item.set("gpu_enabled", true);
+        item.set("display_width", 1400);
+        item.set("display_height", 1050);
+        item.set("display_refresh_rate", 60);
+        item.set("display_dpi_h", 220);
+        item.set("display_dpi_v", 210);
+        VMScreenConfig.migrate(item);
+
+        assertEquals(1400, gpu0(item).getWidth());
+        assertEquals(1050, gpu0(item).getHeight());
+        assertEquals(60, gpu0(item).getRefreshRate());
+        assertEquals(220, gpu0(item).getDpiH());
+        assertEquals(210, gpu0(item).getDpiV());
+
+        assertEquals(1400, fb(item).getWidth());
+        assertEquals(1050, fb(item).getHeight());
+        // simplefb gets what it can hold and no more: the device tree names no rate and no DPI,
+        // so the mode fields would be numbers nothing reads. What it gains instead is a poll rate.
+        assertEquals(VMScreenConfig.DEFAULT_POLL_HZ, fb(item).getPollHz());
+        assertNull(fb(item).item.opt("refresh_rate", (DataItem) null));
+        assertNull(fb(item).item.opt("dpi_h", (DataItem) null));
+
+        for (var key : new String[]{"display_width", "display_height", "display_refresh_rate",
+            "display_dpi_h", "display_dpi_v"})
+            assertNull(item.opt(key, (DataItem) null));
+    }
+
+    @Test
+    public void aPartialFlatGeometryFillsTheRestFromTheOldDefaults() {
+        // The old reads all carried defaults, so a config naming only some of the five was not a
+        // config with holes in it -- it was one that agreed with the defaults for the rest.
+        var item = legacy(true, DisplayBackend.SIMPLEFB, false, true);
+        item.set("display_width", 800);
+        VMScreenConfig.migrate(item);
+        assertEquals(800, fb(item).getWidth());
+        assertEquals(VMScreenConfig.DEFAULT_HEIGHT, fb(item).getHeight());
+        assertEquals(800, gpu0(item).getWidth());
+        assertEquals(VMScreenConfig.DEFAULT_REFRESH_RATE, gpu0(item).getRefreshRate());
+        assertEquals(VMScreenConfig.DEFAULT_DPI, gpu0(item).getDpiH());
+    }
+
+    @Test
+    public void theGeometryFoldDoesNotRunTwiceOverAnEditedScreen() {
+        // Gated on the legacy keys still being there, not on the new ones being absent: the new
+        // defaults equal the old values, so "absent" cannot be told from "folded and left alone",
+        // and gating on that would walk back over a size the user has since changed.
+        var item = legacy(true, DisplayBackend.VIRTIO_GPU, true, false);
+        item.set("gpu_enabled", true);
+        item.set("display_width", 1400);
+        VMScreenConfig.migrate(item);
+        gpu0(item).setWidth(2560);
+        VMScreenConfig.migrate(item);
+        assertEquals(2560, gpu0(item).getWidth());
+    }
+
+    @Test
+    public void aScreenWithNoPollRateStillAnswersWithTheRateTheBridgeUsed() {
+        var item = DataItem.newObject();
+        var fb = VMScreenConfig.of(item, VMScreenConfig.ID_SIMPLEFB);
+        assertEquals(30, VMScreenConfig.DEFAULT_POLL_HZ);
+        assertEquals(VMScreenConfig.DEFAULT_POLL_HZ, fb.getPollHz());
+        // The bounds are crosvm's: 1 is "look once a second at worst", and above 240 the watcher
+        // is asking for more work than anything downstream can use.
+        assertEquals(1, VMScreenConfig.MIN_POLL_HZ);
+        assertEquals(240, VMScreenConfig.MAX_POLL_HZ);
+        assertTrue(VMScreenConfig.DEFAULT_POLL_HZ >= VMScreenConfig.MIN_POLL_HZ);
+        assertTrue(VMScreenConfig.DEFAULT_POLL_HZ <= VMScreenConfig.MAX_POLL_HZ);
+        fb.setPollHz(10);
+        assertEquals(10, fb.getPollHz());
+    }
+
+    @Test
+    public void serviceNamesAreOnePerScreenAndReverseToTheVm() {
+        var vmId = "7f3c1c22-0a11-4d55-9f0e-2b0d5a6e1234";
+        var gpuName = NativeDisplay.serviceNameFromId(vmId, VMScreenConfig.ID_GPU0);
+        var fbName = NativeDisplay.serviceNameFromId(vmId, VMScreenConfig.ID_SIMPLEFB);
+        assertEquals("droidvm_disp_7f3c1c22-0a11-4d55-9f0e-2b0d5a6e1234_gpu-0", gpuName);
+        assertEquals("droidvm_disp_7f3c1c22-0a11-4d55-9f0e-2b0d5a6e1234_simplefb", fbName);
+        assertEquals(vmId, NativeDisplay.vmIdFromServiceName(gpuName));
+        assertEquals(vmId, NativeDisplay.vmIdFromServiceName(fbName));
+        // The pre-screens name still resolves, so a console left over from an older build does
+        // not make the daemon refuse to wait.
+        assertEquals(vmId, NativeDisplay.vmIdFromServiceName(NativeDisplay.channelKeyFromId(vmId)));
+        assertEquals("", NativeDisplay.vmIdFromServiceName("android.hardware.something"));
+    }
+
+    @Test
+    public void inputIsOnForAConfigThatNeverHeardOfTheKey() {
+        // The whole migration of this attribute is the default: a config written before the key
+        // existed had the devices, and reading it must not take them away. Nothing rewrites the
+        // file to say so, so the absent key has to answer for itself.
+        var item = legacy(true, DisplayBackend.SIMPLEFB, true, false);
+        VMScreenConfig.migrate(item);
+        assertTrue(fb(item).isInputEnabled());
+        assertNull(fb(item).item.opt("input_enabled", (DataItem) null));
+        assertTrue(fb(item).hasAbsoluteInput());
+        assertEquals(1, VMScreenConfig.absoluteInputOf(item).size());
+        assertEquals(VMScreenConfig.ID_SIMPLEFB, VMScreenConfig.absoluteInputOf(item).get(0).id);
+    }
+
+    @Test
+    public void switchingInputOffDropsOnlyThatScreensAbsoluteDevices() {
+        var item = DataItem.newObject();
+        for (var id : VMScreenConfig.IDS) {
+            var screen = VMScreenConfig.of(item, id);
+            screen.setEnabled(true);
+            screen.setExporter(DisplayExporter.NATIVE);
+        }
+        assertEquals(2, VMScreenConfig.absoluteInputOf(item).size());
+        VMScreenConfig.of(item, VMScreenConfig.ID_GPU0).setInputEnabled(false);
+        var left = VMScreenConfig.absoluteInputOf(item);
+        assertEquals(1, left.size());
+        assertEquals(VMScreenConfig.ID_SIMPLEFB, left.get(0).id);
+        // The screen is still a screen with an exporter -- only its two absolute devices went.
+        // The keyboard and the relative pointer are the VM's, so nothing here can speak for them.
+        assertTrue(VMScreenConfig.find(item, VMScreenConfig.ID_GPU0).isEnabled());
+        assertEquals(2, VMScreenConfig.boundOf(item).size());
+    }
+
+    @Test
+    public void aScreenNobodyWatchesGetsNoAbsoluteDevices() {
+        // Input on, device present, and still nothing to emit: with no exporter there is no
+        // console to send absolute events from, so the devices would be unreachable.
+        var item = DataItem.newObject();
+        var fb = VMScreenConfig.of(item, VMScreenConfig.ID_SIMPLEFB);
+        fb.setEnabled(true);
+        fb.setInputEnabled(true);
+        fb.setExporter(DisplayExporter.NONE);
+        assertFalse(fb.hasAbsoluteInput());
+        assertTrue(VMScreenConfig.absoluteInputOf(item).isEmpty());
+    }
+
+    @Test
+    public void scanoutSocketsAreOnePerScreenAndOnlyTheRelativePointerIgnoresTheScreen() {
+        var vmId = "7f3c1c22-0a11-4d55-9f0e-2b0d5a6e1234";
+        var run = fmt("/data/data/cn.classfun.droidvm/run/dvmin_%s", vmId);
+        // Exact names, because these are a contract between two processes: the daemon binds the
+        // inode and crosvm is handed the path on its command line. A rename that only one side
+        // learns about is a VM that does not start, so it should fail here first.
+        assertEquals(fmt("%s_sfb_mt.sock", run), NativeDisplay.inputSocketPath(
+            vmId, VMScreenConfig.ID_SIMPLEFB, NativeDisplay.MULTITOUCH));
+        assertEquals(fmt("%s_g0_tab.sock", run), NativeDisplay.inputSocketPath(
+            vmId, VMScreenConfig.ID_GPU0, NativeDisplay.TABLET));
+        assertEquals(fmt("%s_g0_kbd.sock", run), NativeDisplay.inputSocketPath(
+            vmId, VMScreenConfig.ID_GPU0, NativeDisplay.KEYBOARD));
+        assertEquals(fmt("%s_ms.sock", run),
+            NativeDisplay.inputSocketPath(vmId, "", NativeDisplay.MOUSE));
+        // Each screen's devices are its own inodes. For the two absolute ones that is because a
+        // coordinate only means anything under one output; for the keyboard it is because input
+        // belongs to the scanout, so the screen's switch has to be able to silence typing on that
+        // screen alone -- a shared keyboard could not be switched off by any one screen.
+        for (var ch : new int[]{
+            NativeDisplay.MULTITOUCH, NativeDisplay.TABLET, NativeDisplay.KEYBOARD}) {
+            assertTrue(NativeDisplay.isPerScreen(ch));
+            assertNotEquals(NativeDisplay.inputSocketPath(vmId, VMScreenConfig.ID_GPU0, ch),
+                NativeDisplay.inputSocketPath(vmId, VMScreenConfig.ID_SIMPLEFB, ch));
+        }
+        // The relative pointer is the one device with no output binding -- the guest routes it by
+        // focus and it walks between outputs -- so which screen the console is showing must not
+        // reach its socket name at all.
+        assertFalse(NativeDisplay.isPerScreen(NativeDisplay.MOUSE));
+        assertEquals(NativeDisplay.inputSocketPath(vmId, "", NativeDisplay.MOUSE),
+            NativeDisplay.inputSocketPath(vmId, VMScreenConfig.ID_GPU0, NativeDisplay.MOUSE));
+        assertEquals(
+            NativeDisplay.inputSocketPath(vmId, VMScreenConfig.ID_SIMPLEFB, NativeDisplay.MOUSE),
+            NativeDisplay.inputSocketPath(vmId, VMScreenConfig.ID_GPU0, NativeDisplay.MOUSE));
+        // Seven sockets for a two-screen VM -- three devices per screen plus the VM's pointer --
+        // and no two of them the same file.
+        var seen = new HashSet<String>();
+        for (int ch = 0; ch < NativeDisplay.CHANNEL_COUNT; ch++)
+            for (var id : VMScreenConfig.IDS)
+                seen.add(NativeDisplay.inputSocketPath(vmId, id, ch));
+        assertEquals(7, seen.size());
+    }
+
+    @Test
+    public void socketFilenamesAreCompactEnoughToBindWithMarginLeft() {
+        // The names this asserts on are short because the long ones did not work. sun_path holds
+        // 107 bytes plus a NUL; /data/data/cn.classfun.droidvm/run/ spends 35 of them before a
+        // name starts; the pre-screens droidvm_disp_<uuid>_input_multitouch.sock came to 106, one
+        // byte of headroom, so inserting the screen id made it 115 (111 for the tablet) and crosvm
+        // refused the command line with "path must be shorter than SUN_LEN".
+        //
+        // So measure against the real run directory rather than a stub -- half the budget is the
+        // base dir, and a test that supplies its own would not have caught this -- and hold the
+        // result to 100, well under the limit, so the next name that grows has somewhere to grow.
+        var vmId = UUID.randomUUID().toString();
+        assertEquals(36, vmId.length());
+        var sample = NativeDisplay.inputSocketPath(vmId, VMScreenConfig.ID_GPU0,
+            NativeDisplay.MULTITOUCH);
+        assertEquals("/data/data/cn.classfun.droidvm/run/",
+            sample.substring(0, sample.lastIndexOf('/') + 1));
+        var worst = "";
+        for (int ch = 0; ch < NativeDisplay.CHANNEL_COUNT; ch++) {
+            for (var id : VMScreenConfig.IDS) {
+                var path = NativeDisplay.inputSocketPath(vmId, id, ch);
+                if (bytes(path) > bytes(worst)) worst = path;
+            }
+        }
+        assertEquals(90, bytes(worst));
+        assertTrue(worst, bytes(worst) <= 100);
+        assertTrue(worst, bytes(worst) <= NativeDisplay.MAX_UNIX_PATH);
+        // And the check the daemon runs before binding agrees with all of them.
+        for (int ch = 0; ch < NativeDisplay.CHANNEL_COUNT; ch++)
+            for (var id : VMScreenConfig.IDS)
+                NativeDisplay.requireBindablePath(NativeDisplay.inputSocketPath(vmId, id, ch));
+    }
+
+    @Test
+    public void anOverlongSocketPathIsRefusedInsteadOfBeingTruncated() {
+        // bind(2) copies the path into a 108-byte sun_path and truncates without a word, so the
+        // daemon would listen on one inode while crosvm connects to the name it was given -- the
+        // two stubs the failing build left in run/, "..._simplefb_input_multito" and
+        // "..._simplefb_input_tablet.", were the only evidence it had happened. The check has to
+        // fire before the syscall, and it has to say which path and how long.
+        var longest = fmt("%sy", "/x".repeat(53));
+        assertEquals(NativeDisplay.MAX_UNIX_PATH, longest.length());
+        assertEquals(longest, NativeDisplay.requireBindablePath(longest));
+        var overlong = fmt("%sz", longest);
+        var e = assertThrows(IllegalArgumentException.class,
+            () -> NativeDisplay.requireBindablePath(overlong));
+        assertTrue(e.getMessage(), e.getMessage().contains(overlong));
+        assertTrue(e.getMessage(), e.getMessage().contains("108"));
+        // Bytes, not chars: sun_path is a byte array, and a name that is short in code points can
+        // still be too long for it.
+        var wide = "/" + "\u00e9".repeat(NativeDisplay.MAX_UNIX_PATH - 1);
+        assertEquals(NativeDisplay.MAX_UNIX_PATH, wide.length());
+        assertThrows(IllegalArgumentException.class,
+            () -> NativeDisplay.requireBindablePath(wide));
+    }
+
+    private static int bytes(String s) {
+        return s.getBytes(StandardCharsets.UTF_8).length;
+    }
+
+    @Test
+    public void touchDeviceNamesAreDerivedFromTheScreenAndNothingElse() {
+        // The guest maps a touchscreen to an output by this string and stores it by this string,
+        // so it must be a pure function of the screen id -- no VM, no index, no ordering.
+        assertEquals("DroidVM Touch (gpu-0)",
+            NativeDisplay.touchDeviceName(VMScreenConfig.ID_GPU0));
+        assertEquals("DroidVM Touch (simplefb)",
+            NativeDisplay.touchDeviceName(VMScreenConfig.ID_SIMPLEFB));
+        assertNotEquals(NativeDisplay.touchDeviceName(VMScreenConfig.ID_GPU0),
+            NativeDisplay.touchDeviceName(VMScreenConfig.ID_SIMPLEFB));
+    }
+
+    @Test
+    public void tabletDeviceNamesAreDerivedTooAndNeverCollideWithTheTouchscreen() {
+        // The tablet is as much a per-output device as the touchscreen, so it is derived the same
+        // way. It also has to be distinguishable from its own screen's touchscreen: the two sit
+        // side by side in the guest's device list and the user picks between them there.
+        assertEquals("DroidVM Tablet (gpu-0)",
+            NativeDisplay.tabletDeviceName(VMScreenConfig.ID_GPU0));
+        assertEquals("DroidVM Tablet (simplefb)",
+            NativeDisplay.tabletDeviceName(VMScreenConfig.ID_SIMPLEFB));
+        assertNotEquals(NativeDisplay.tabletDeviceName(VMScreenConfig.ID_GPU0),
+            NativeDisplay.tabletDeviceName(VMScreenConfig.ID_SIMPLEFB));
+        for (var id : new String[] {VMScreenConfig.ID_GPU0, VMScreenConfig.ID_SIMPLEFB}) {
+            assertNotEquals(NativeDisplay.touchDeviceName(id), NativeDisplay.tabletDeviceName(id));
+        }
+    }
+
+    @Test
+    public void keyboardDeviceNamesAreDerivedPerScreenAndMatchTheCrosvmSeamFormat() {
+        // Exact strings: crosvm builds a VNC-exported screen's keyboard itself and names it by
+        // reproducing this format, with no command-line key carrying it between the two repos. So
+        // the format IS the contract, and a change here that crosvm does not learn about leaves
+        // the guest with two differently-named keyboards for what the user thinks is one setup.
+        assertEquals("DroidVM Keyboard (gpu-0)",
+            NativeDisplay.keyboardDeviceName(VMScreenConfig.ID_GPU0));
+        assertEquals("DroidVM Keyboard (simplefb)",
+            NativeDisplay.keyboardDeviceName(VMScreenConfig.ID_SIMPLEFB));
+        assertNotEquals(NativeDisplay.keyboardDeviceName(VMScreenConfig.ID_GPU0),
+            NativeDisplay.keyboardDeviceName(VMScreenConfig.ID_SIMPLEFB));
+        // And it is distinguishable from the screen's other two devices, which sit beside it in
+        // the guest's device list.
+        for (var id : new String[] {VMScreenConfig.ID_GPU0, VMScreenConfig.ID_SIMPLEFB}) {
+            assertNotEquals(NativeDisplay.keyboardDeviceName(id), NativeDisplay.touchDeviceName(id));
+            assertNotEquals(NativeDisplay.keyboardDeviceName(id),
+                NativeDisplay.tabletDeviceName(id));
+        }
+    }
+
+    @Test
+    public void perScreenNamesCarryNoCommaThatWouldSplitAnInputOption() {
+        // Both names are interpolated into a crosvm `--input kind[path=...,name=...]` option, whose
+        // key-value parser runs an unquoted value to the next ',' or ']'. Spaces and parentheses
+        // survive that; a ',' or a bracket in a screen id would silently truncate the name into a
+        // different device, so assert the characters that would do it never appear.
+        for (var id : new String[] {VMScreenConfig.ID_GPU0, VMScreenConfig.ID_SIMPLEFB}) {
+            for (var name : new String[] {
+                NativeDisplay.touchDeviceName(id), NativeDisplay.tabletDeviceName(id),
+                NativeDisplay.keyboardDeviceName(id)}) {
+                assertEquals(-1, name.indexOf(','));
+                assertEquals(-1, name.indexOf('['));
+                assertEquals(-1, name.indexOf(']'));
+            }
+        }
+    }
+}
diff --git a/app/src/test/java/cn/classfun/droidvm/ui/vm/edit/graphics/ScreenResolutionOptionsTest.java b/app/src/test/java/cn/classfun/droidvm/ui/vm/edit/graphics/ScreenResolutionOptionsTest.java
new file mode 100644
index 000000000..4f8709c8f
--- /dev/null
+++ b/app/src/test/java/cn/classfun/droidvm/ui/vm/edit/graphics/ScreenResolutionOptionsTest.java
@@ -0,0 +1,83 @@
+package cn.classfun.droidvm.ui.vm.edit.graphics;
+
+import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
+import static org.junit.Assert.assertEquals;
+import static org.junit.Assert.assertTrue;
+
+import androidx.annotation.NonNull;
+
+import org.junit.Test;
+
+import java.util.List;
+
+import cn.classfun.droidvm.ui.vm.edit.graphics.ScreenResolutionOptions.Option;
+
+/**
+ * The resolution dropdown's list: what it offers on a given panel, and in what order.
+ *
+ * <p>The rules are all here rather than in the row because they are the half of that dropdown that
+ * does not need a device -- and because the two that depend on the panel land in a different place
+ * on every device, which is the sort of thing a test says once and a screenshot never settles.</p>
+ */
+public class ScreenResolutionOptionsTest {
+    @Test
+    public void ordersEverythingByArea() {
+        // 1080x2400 portrait panel: half of it (1200x540) is smaller than either fixed size, and
+        // the panel itself is larger than both -- so the two device sizes bracket the fixed ones.
+        assertSizes(ScreenResolutionOptions.build(1080, 2400),
+            new int[][]{{1200, 540}, {1280, 720}, {1920, 1080}, {2400, 1080}});
+    }
+
+    @Test
+    public void everySizeIsLandscape() {
+        for (var panel : new int[][]{{1080, 2400}, {2400, 1080}, {1440, 3200}, {800, 1280}})
+            for (var opt : ScreenResolutionOptions.build(panel[0], panel[1]))
+                assertTrue(fmt("%dx%d", opt.width, opt.height), opt.width >= opt.height);
+    }
+
+    @Test
+    public void readsThePanelTheSameInEitherRotation() {
+        assertSizes(ScreenResolutionOptions.build(2400, 1080),
+            new int[][]{{1200, 540}, {1280, 720}, {1920, 1080}, {2400, 1080}});
+    }
+
+    @Test
+    public void withoutAPanelOnlyTheFixedSizesAreOffered() {
+        assertSizes(ScreenResolutionOptions.build(0, 0), new int[][]{{1280, 720}, {1920, 1080}});
+        assertSizes(ScreenResolutionOptions.build(-1, 2400), new int[][]{{1280, 720}, {1920, 1080}});
+    }
+
+    @Test
+    public void aSizeTwoRulesProduceIsListedOnce() {
+        // A 1080p panel: "1920x1080" and "the phone's own" are the same size.
+        assertSizes(ScreenResolutionOptions.build(1920, 1080),
+            new int[][]{{960, 540}, {1280, 720}, {1920, 1080}});
+
+        // A 1440p panel halves to exactly 1280x720, which the fixed list already had.
+        assertSizes(ScreenResolutionOptions.build(1440, 2560),
+            new int[][]{{1280, 720}, {1920, 1080}, {2560, 1440}});
+    }
+
+    @Test
+    public void halvingAnOddPanelRoundsDownToEven() {
+        var opts = ScreenResolutionOptions.build(1179, 2556);
+        assertEquals(1278, opts.get(0).width);
+        assertEquals(588, opts.get(0).height);
+    }
+
+    @Test
+    public void aHalfBelowTheValidatorsFloorIsNotOffered() {
+        // 854x480 halves to 427x240, which the editor would refuse to save. The panel itself still
+        // stands: it is over the floor.
+        assertSizes(ScreenResolutionOptions.build(480, 854),
+            new int[][]{{854, 480}, {1280, 720}, {1920, 1080}});
+    }
+
+    private static void assertSizes(@NonNull List<Option> opts, @NonNull int[][] expected) {
+        var sb = new StringBuilder();
+        for (var opt : opts) sb.append(opt.width).append('x').append(opt.height).append(' ');
+        var want = new StringBuilder();
+        for (var e : expected) want.append(e[0]).append('x').append(e[1]).append(' ');
+        assertEquals(want.toString(), sb.toString());
+    }
+}
diff --git a/app/src/test/java/cn/classfun/droidvm/ui/vm/edit/graphics/VncHostOptionsTest.java b/app/src/test/java/cn/classfun/droidvm/ui/vm/edit/graphics/VncHostOptionsTest.java
new file mode 100644
index 000000000..82120e1e0
--- /dev/null
+++ b/app/src/test/java/cn/classfun/droidvm/ui/vm/edit/graphics/VncHostOptionsTest.java
@@ -0,0 +1,104 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
+package cn.classfun.droidvm.ui.vm.edit.graphics;
+
+import static org.junit.Assert.assertEquals;
+import static org.junit.Assert.assertFalse;
+import static org.junit.Assert.assertTrue;
+
+import androidx.annotation.NonNull;
+
+import org.junit.Test;
+
+import java.util.ArrayList;
+import java.util.List;
+
+import cn.classfun.droidvm.ui.vm.edit.graphics.VncHostOptions.Option;
+
+/**
+ * The VNC host dropdown's list: what it offers, in what order, and what it will not let through.
+ *
+ * <p>The half of that dropdown that needs neither a phone nor a daemon. Which addresses a scan
+ * finds is netlink's answer and the daemon's to filter; what the list does with the answer is
+ * here.</p>
+ */
+public class VncHostOptionsTest {
+    @Test
+    public void offersTheTwoFixedEntriesWithNothingScanned() {
+        assertAddrs(VncHostOptions.build(List.of(), "127.0.0.1"), "127.0.0.1", "0.0.0.0");
+    }
+
+    @Test
+    public void putsScannedAddressesAfterTheFixedOnes() {
+        var scanned = List.of(
+            new Option("192.168.66.87", "wlan0"),
+            new Option("2a0e:b107:1953:cc::1", "wlan0"));
+        assertAddrs(VncHostOptions.build(scanned, "127.0.0.1"),
+            "127.0.0.1", "0.0.0.0", "192.168.66.87", "2a0e:b107:1953:cc::1");
+    }
+
+    @Test
+    public void namesEachAddressOnce() {
+        // The same address on two interfaces, and one that repeats what a fixed entry already
+        // offers: the list is of addresses, not of the rules that produced them.
+        var scanned = List.of(
+            new Option("192.168.66.87", "wlan0"),
+            new Option("192.168.66.87", "wlan1"),
+            new Option("0.0.0.0", "eth0"));
+        assertAddrs(VncHostOptions.build(scanned, "127.0.0.1"),
+            "127.0.0.1", "0.0.0.0", "192.168.66.87");
+    }
+
+    @Test
+    public void keepsAStoredAddressTheScanDidNotFind() {
+        // The interface it was found on is gone, or it was typed. Either way the row shows it, so
+        // it has to be in the list -- otherwise the menu highlights nothing and a save that only
+        // meant to change the port would look like it had lost the address.
+        assertAddrs(VncHostOptions.build(List.of(), "10.0.0.5"),
+            "127.0.0.1", "0.0.0.0", "10.0.0.5");
+    }
+
+    @Test
+    public void addsNothingForAnEmptySelection() {
+        // "" is a config that names no host, which the row shows as the wildcard -- an entry the
+        // list already has. It must not become an entry of its own.
+        assertAddrs(VncHostOptions.build(List.of(), ""), "127.0.0.1", "0.0.0.0");
+    }
+
+    @Test
+    public void takesEveryShapeOfAddressLiteral() {
+        for (var ok : new String[]{
+            "0.0.0.0", "127.0.0.1", "192.168.66.87", "255.255.255.255",
+            "::", "::1", "2a0e:b107:1953:cc:436f:dd61:fb74:7c7f",
+            "2a0e:b107::1", "fe80::32d5:be4e:8bf0:9f41", "1:2:3:4:5:6:7:8",
+            "1:2:3:4:5:6:7::", "::ffff:192.168.66.87", "64:ff9b::192.0.2.1",
+        })
+            assertTrue(ok, VncHostOptions.isLiteral(ok));
+    }
+
+    @Test
+    public void refusesAnythingThatIsNotOne() {
+        for (var bad : new String[]{
+            // Not an address at all. A name is refused on purpose: crosvm hands an IPv4 listen
+            // address to LibVNCServer as an in_addr with nowhere to resolve one, so a name here is
+            // a VM that will not start.
+            "", " ", "phone.lan", "localhost",
+            // Would break the "host=...,port=..." option string it ends up inside.
+            "10.0.0.1,port=1", "10.0.0.1 ", "[::1]", "a\"b", "a'b",
+            // Malformed v4.
+            "1.2.3", "1.2.3.4.5", "256.0.0.1", "1.2.3.", "01234.0.0.1",
+            // Malformed v6: two gaps, too many groups, too few, a bad group, a zone id, and a
+            // dotted quad somewhere other than the end.
+            "1::2::3", "1:2:3:4:5:6:7:8:9", "1:2:3:4:5:6:7", "1:2:3:4:5:6:7:12345",
+            "fe80::1%wlan0", "::1.2.3.4:5", "1:2:3:4:5:6:7:8::",
+        })
+            assertFalse(bad, VncHostOptions.isLiteral(bad));
+    }
+
+    private static void assertAddrs(@NonNull List<Option> actual, @NonNull String... expected) {
+        var addrs = new ArrayList<String>(actual.size());
+        for (var option : actual) addrs.add(option.addr);
+        assertEquals(List.of(expected), addrs);
+    }
+}

From 59313c1da1199d3d4c99bccbc62dfc2ba7fe171b Mon Sep 17 00:00:00 2001
From: HuJK <gh@hujk.org>
Date: Sun, 30 Aug 2026 13:37:18 +0800
Subject: [PATCH 147/182] vnc: take the hardware H.264 stream off the RFB port

The console's VNC client advertises the Open H.264 encoding (50) and a private
DroidVM pseudo-encoding (DVH1), and reads the hardware stream off the one RFB
connection it already has for pixels and input. The separate side-channel port
is gone -- listener, config key, editor field, daemon argument and vnc_info
field. A third-party client that speaks encoding 50 gets the same stream; one
that does not still gets pixels.

Both rects are parsed in one place: encoding 50 as u32 length + u32 flags +
Annex-B honouring the reset flags, and the pseudo-encoding as a capabilities
and heartbeat payload. Those two are what RFB negotiation cannot express and
the reason the app speaks more than plain encoding 50 -- capabilities tell a
permanent "no encoder" apart from one that is still warming, and the heartbeat
tells a still screen apart from a dead stream.

Cold open is the case that decides the design. crosvm sends SPS/PPS once at
join and never again on a later bare IDR, but a TextureView's SurfaceTexture is
created a frame after the view is shown, so the first parameter-set-bearing
rect can arrive before any decoder exists to feed. The pipeline caches the
reset-flagged sync rect per coded geometry and replays it to a decoder that
attaches afterwards, which is what makes cold open, reconnect and a guest
resize all reach the decoder with parameter sets. The outgoing decoder is
released on resize; it used to leak its MediaCodec.
---
 app/src/main/cpp/vnc/vncclient_jni.c          | 188 ++++++++
 .../droidvm/daemon/ipc/vm/VncInfoHandler.java |   5 +
 .../lib/store/vm/DisplayTransportCap.java     |  64 +++
 .../droidvm/lib/store/vm/VMScreenConfig.java  |  45 ++
 .../vm/display/base/DisplayPresentation.java  |  57 +++
 .../vm/display/vnc/base/BaseVncActivity.java  | 269 +++++++++++-
 .../ui/vm/display/vnc/base/VncClient.java     |  37 ++
 .../vnc/display/VMVncDisplayActivity.java     |  20 +
 .../display/VMVncPresentationActivity.java    |  39 +-
 .../display/vnc/h264/H264ConsoleDecoder.java  | 275 ++++++++++++
 .../display/vnc/h264/H264ConsolePipeline.java | 401 ++++++++++++++++++
 .../vm/display/vnc/h264/H264ProbePolicy.java  | 224 ++++++++++
 .../vm/display/vnc/h264/H264RectProtocol.java | 178 ++++++++
 .../ui/vm/edit/graphics/ScreenBindingRow.java |  16 +
 .../res/layout/activity_vm_vnc_display.xml    |  14 +
 .../main/res/layout/presentation_display.xml  |  17 +
 .../lib/store/vm/DisplayTransportCapTest.java | 189 +++++++++
 .../display/vnc/h264/H264ProbePolicyTest.java | 244 +++++++++++
 .../vnc/h264/H264RectProtocolTest.java        | 215 ++++++++++
 19 files changed, 2490 insertions(+), 7 deletions(-)
 create mode 100644 app/src/main/java/cn/classfun/droidvm/ui/vm/display/vnc/h264/H264ConsoleDecoder.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/ui/vm/display/vnc/h264/H264ConsolePipeline.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/ui/vm/display/vnc/h264/H264ProbePolicy.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/ui/vm/display/vnc/h264/H264RectProtocol.java
 create mode 100644 app/src/test/java/cn/classfun/droidvm/ui/vm/display/vnc/h264/H264ProbePolicyTest.java
 create mode 100644 app/src/test/java/cn/classfun/droidvm/ui/vm/display/vnc/h264/H264RectProtocolTest.java

diff --git a/app/src/main/cpp/vnc/vncclient_jni.c b/app/src/main/cpp/vnc/vncclient_jni.c
index f2f06fb04..61b2bd3eb 100644
--- a/app/src/main/cpp/vnc/vncclient_jni.c
+++ b/app/src/main/cpp/vnc/vncclient_jni.c
@@ -13,6 +13,24 @@
 #define LOGW(...) __android_log_print(ANDROID_LOG_WARN,  TAG, __VA_ARGS__)
 #define LOGE(...) __android_log_print(ANDROID_LOG_ERROR, TAG, __VA_ARGS__)
 
+/* THE TWO ENCODINGS THAT CARRY THE HARDWARE H.264 STREAM, on the ordinary RFB port.
+ *
+ * 50 is rfbproto.rst's "Open H.264". 0x44564831 is "DVH1", DroidVM's private pseudo-encoding,
+ * whose fixed four-byte payload says the two things RFB negotiation cannot: whether the host has
+ * an encoder at all, and -- on an idle screen, where a live stream and a dead one look alike --
+ * that the connection is still there. Both numbers and the payload layout are pinned by
+ * plans/H264_SINGLE_PORT.md section 1 and are implemented here as written, not renegotiated. */
+#define VNC_ENCODING_H264 50
+#define VNC_ENCODING_DVH1 0x44564831
+/* An encoding-50 rect body opens with u32 BE length and u32 BE flags, then the Annex-B payload. */
+#define H264_RECT_HEADER_BYTES 8
+/* The whole of a DVH1 rect: version, kind, value, reserved. */
+#define DVH1_PAYLOAD_BYTES 4
+/* Above this the length prefix describes a stream that has lost its place rather than a frame, and
+ * the only thing left to do with the connection is end it. Mirrors the Java parser's own guard --
+ * both sides check because both sides allocate. */
+#define H264_RECT_MAX_PAYLOAD (16 * 1024 * 1024)
+
 typedef struct {
     JavaVM *jvm;
     jobject callback;
@@ -23,12 +41,163 @@ typedef struct {
     volatile int stop_requested;
     pthread_mutex_t lock;
     char *password;
+    /* Set by the rect handlers below and read-and-cleared by vnc_update. Neither of our rects
+     * touches the framebuffer, but libvncclient calls GotFrameBufferUpdate for every rect it
+     * dispatched -- and the Java side answers that by copying the whole framebuffer into a Bitmap.
+     * Without this the console would do a full-screen copy once per decoded frame, for pixels
+     * nothing is going to look at. */
+    int rect_was_ours;
 } VncContext;
 
 static VncContext *ctx_of(rfbClient *cl) {
     return (VncContext *) rfbClientGetClientData(cl, (void *) 0xDEAD);
 }
 
+static uint32_t be32(const uint8_t *p) {
+    return ((uint32_t) p[0] << 24) | ((uint32_t) p[1] << 16)
+           | ((uint32_t) p[2] << 8) | (uint32_t) p[3];
+}
+
+/**
+ * A JNIEnv for whichever thread is calling, and whether it had to be attached to get one.
+ *
+ * In practice every caller is the console's own message-loop thread, which is a Java thread and so
+ * already attached; the attach path is here because a JNIEnv borrowed from the wrong thread is
+ * undefined behaviour rather than an error, and that is not a thing to leave to a comment.
+ */
+static JNIEnv *env_for(VncContext *ctx, int *attached) {
+    JNIEnv *env = NULL;
+    *attached = 0;
+    if (!ctx->jvm || !ctx->callback) return NULL;
+    if ((*ctx->jvm)->GetEnv(ctx->jvm, (void **) &env, JNI_VERSION_1_6) != JNI_OK) {
+        if ((*ctx->jvm)->AttachCurrentThread(ctx->jvm, &env, NULL) != JNI_OK) return NULL;
+        *attached = 1;
+    }
+    return env;
+}
+
+/** Hands one rect's bytes to a Java callback taking (byte[], int, int). */
+static void deliver_rect(VncContext *ctx, const char *method, const char *sig,
+                         const uint8_t *data, size_t len, jint a, jint b, int with_size) {
+    int attached = 0;
+    JNIEnv *env = env_for(ctx, &attached);
+    if (!env) return;
+    jbyteArray arr = (*env)->NewByteArray(env, (jsize) len);
+    if (arr) {
+        (*env)->SetByteArrayRegion(env, arr, 0, (jsize) len, (const jbyte *) data);
+        jclass cls = (*env)->GetObjectClass(env, ctx->callback);
+        jmethodID mid = (*env)->GetMethodID(env, cls, method, sig);
+        if (mid) {
+            if (with_size) (*env)->CallVoidMethod(env, ctx->callback, mid, arr, a, b);
+            else (*env)->CallVoidMethod(env, ctx->callback, mid, arr);
+        }
+        (*env)->DeleteLocalRef(env, cls);
+        /* Deleted rather than left to the frame: a decoded second is sixty of these, and the
+         * native frame they would sit in is not unwound until nativeProcessMessages returns. */
+        (*env)->DeleteLocalRef(env, arr);
+    } else {
+        /* The allocation failed and the exception is pending; clearing it here keeps the rect
+         * loop's own error reporting intact instead of tripping over ours on the next JNI call. */
+        (*env)->ExceptionClear(env);
+    }
+    if (attached) (*ctx->jvm)->DetachCurrentThread(ctx->jvm);
+}
+
+/**
+ * Reads an encoding-50 rect and hands the whole body -- the eight-byte header included -- to Java.
+ *
+ * The header is passed on rather than consumed here so that the length and the flags are parsed in
+ * exactly one place, by the Java class the unit tests can feed the seam's literal bytes to. The
+ * length is read twice, which is unavoidable: a length-prefixed message cannot be read off a socket
+ * without reading its prefix. What that costs is checked rather than assumed -- the Java parser
+ * refuses a body whose declared length disagrees with the bytes it was given.
+ */
+static rfbBool read_h264_rect(rfbClient *cl, VncContext *ctx,
+                              rfbFramebufferUpdateRectHeader *rect) {
+    uint8_t head[H264_RECT_HEADER_BYTES];
+    uint32_t length;
+    uint8_t *body;
+
+    if (!ReadFromRFBServer(cl, (char *) head, H264_RECT_HEADER_BYTES)) return FALSE;
+    length = be32(head);
+    if (length > H264_RECT_MAX_PAYLOAD) {
+        LOGE("h264 rect claims %u bytes; the stream has lost its place", length);
+        return FALSE;
+    }
+    body = (uint8_t *) malloc(H264_RECT_HEADER_BYTES + (size_t) length);
+    if (!body) {
+        LOGE("out of memory for a %u-byte h264 rect", length);
+        return FALSE;
+    }
+    memcpy(body, head, H264_RECT_HEADER_BYTES);
+    if (length > 0 &&
+        !ReadFromRFBServer(cl, (char *) (body + H264_RECT_HEADER_BYTES), length)) {
+        free(body);
+        return FALSE;
+    }
+    deliver_rect(ctx, "onH264Rect", "([BII)V", body,
+                 H264_RECT_HEADER_BYTES + (size_t) length,
+                 rect->r.w, rect->r.h, 1);
+    free(body);
+    return TRUE;
+}
+
+/**
+ * The client half of the two encodings, called by libvncclient for any rect it does not know.
+ *
+ * Returning FALSE for a rect that IS ours (a short read, a length past the guard) is deliberate:
+ * libvncclient's rect loop treats an unhandled rect as a protocol failure and drops the
+ * connection, which is the only correct answer once the byte stream and the parser disagree about
+ * where the next rect begins. The reason is logged here first, because the loop's own message
+ * would blame the encoding number rather than the stream.
+ */
+static rfbBool handle_dvh_rect(rfbClient *cl, rfbFramebufferUpdateRectHeader *rect) {
+    VncContext *ctx = ctx_of(cl);
+    uint8_t payload[DVH1_PAYLOAD_BYTES];
+
+    if (!ctx) return FALSE;
+    if (rect->encoding == VNC_ENCODING_DVH1) {
+        if (!ReadFromRFBServer(cl, (char *) payload, DVH1_PAYLOAD_BYTES)) return FALSE;
+        ctx->rect_was_ours = 1;
+        deliver_rect(ctx, "onDvhRect", "([B)V", payload, DVH1_PAYLOAD_BYTES, 0, 0, 0);
+        return TRUE;
+    }
+    if (rect->encoding == VNC_ENCODING_H264) {
+        /* Set before the read, not after: a failure here ends the connection, and the framebuffer
+         * notification for a rect that was ours must not go out on the way down. */
+        ctx->rect_was_ours = 1;
+        return read_h264_rect(cl, ctx, rect);
+    }
+    return FALSE;
+}
+
+/* The encodings this client asks for, and the switch that stops it asking.
+ *
+ * libvncclient's extension list is process-global (rfbclient.c:105), so this array is read by
+ * every connection rather than by one. That is the right scope for the one thing that turns it
+ * off: a device with no video/avc decoder cannot decode this stream on any connection, and a
+ * console that stays enrolled on a stream it cannot decode is a console showing a frozen picture,
+ * because the server stops sending pixels to clients that asked for 50. Swapping the pointer
+ * rather than editing the array in place keeps the read side seeing one list or the other and
+ * never half of an edit. */
+static int dvh_encodings_on[] = {VNC_ENCODING_DVH1, VNC_ENCODING_H264, 0};
+static int dvh_encodings_off[] = {0};
+
+static rfbClientProtocolExtension dvh_extension = {
+    .encodings = dvh_encodings_on,
+    .handleEncoding = handle_dvh_rect,
+    .handleMessage = NULL,
+    .next = NULL,
+    .securityTypes = NULL,
+    .handleAuthentication = NULL,
+};
+
+static pthread_once_t dvh_registered = PTHREAD_ONCE_INIT;
+
+static void register_dvh_extension(void) {
+    rfbClientRegisterExtension(&dvh_extension);
+}
+
 static rfbBool vnc_resize(rfbClient *cl) {
     VncContext *ctx = ctx_of(cl);
     int w = cl->width;
@@ -71,6 +240,13 @@ static rfbBool vnc_resize(rfbClient *cl) {
 static void vnc_update(rfbClient *cl, int x, int y, int w, int h) {
     VncContext *ctx = ctx_of(cl);
     JNIEnv *env = NULL;
+    if (!ctx) return;
+    if (ctx->rect_was_ours) {
+        /* Cleared here rather than in the handler because this runs once per dispatched rect,
+         * which is the only place the flag can be retired without a second bookkeeping rule. */
+        ctx->rect_was_ours = 0;
+        return;
+    }
     if (!ctx->jvm || !ctx->callback) return;
     int attached = 0;
     if ((*ctx->jvm)->GetEnv(ctx->jvm, (void **) &env, JNI_VERSION_1_6) != JNI_OK) {
@@ -96,9 +272,21 @@ static char *vnc_get_password(rfbClient *cl) {
 #define JNI_PREFIX(name) \
     Java_cn_classfun_droidvm_ui_vm_display_vnc_base_VncClient_##name
 
+JNIEXPORT void JNICALL
+JNI_PREFIX(nativeSetH264Advertised)(JNIEnv *env, jclass cls, jboolean advertised) {
+    (void) env;
+    (void) cls;
+    dvh_extension.encodings = advertised ? dvh_encodings_on : dvh_encodings_off;
+    LOGI("H.264 encodings %s for connections made from now on",
+         advertised ? "advertised" : "withdrawn");
+}
+
 JNIEXPORT jlong JNICALL
 JNI_PREFIX(nativeCreate)(JNIEnv *env, jobject thiz) {
     (void) thiz;
+    /* Once per process: the list this joins is global, and registering twice would put both
+     * encoding numbers on the wire twice and run every rect through two identical handlers. */
+    pthread_once(&dvh_registered, register_dvh_extension);
     rfbClient *cl = rfbGetClient(8, 3, 4);
     if (!cl) {
         LOGE("rfbGetClient failed");
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/ipc/vm/VncInfoHandler.java b/app/src/main/java/cn/classfun/droidvm/daemon/ipc/vm/VncInfoHandler.java
index c3212cff2..abd6e86c8 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/ipc/vm/VncInfoHandler.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/ipc/vm/VncInfoHandler.java
@@ -49,6 +49,11 @@ public void handle(@NonNull ClientRequest request) throws Exception {
         res.put("host", !host.isEmpty() ? host : "127.0.0.1");
         res.put("port", screen.getVncPort());
         res.put("password", screen.getVncPassword());
+        // What this binding's transport ceiling permits. A permit and not a promise, which is why
+        // there is no port beside it any more: whether an encoder is actually standing there is
+        // answered on the RFB connection itself, by the capabilities rect, and a second port for
+        // the console to be told about is exactly what that change removed.
+        res.put("transport_cap", screen.getTransportCap().getToken());
         // When VNC binds to the IPv4 wildcard, resolve the phone's own LAN
         // address here from the router watcher's filtered host-IP set, which
         // already drops pbridge offload-proxy addresses parked on the uplink.
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/store/vm/DisplayTransportCap.java b/app/src/main/java/cn/classfun/droidvm/lib/store/vm/DisplayTransportCap.java
index 9de568a5a..8837fd446 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/store/vm/DisplayTransportCap.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/store/vm/DisplayTransportCap.java
@@ -150,11 +150,23 @@ public static boolean isOfferedFor(@NonNull String screenId,
     /**
      * Whether this build can actually reach [cap] on this edge.
      *
+     * <p>VNC's ladder is now built to the top: the same blit that feeds an RFB rectangle can feed a
+     * hardware H.264 encoder instead, and the app's own console reads the result off a side channel
+     * beside the RFB port. What is left unbuilt is zero copy on the native display. Unimplemented
+     * rungs are still offered -- see the class comment -- so this is what decides which of them the
+     * picker refuses.</p>
+     *
+     * <p>The two exporters no longer answer the same way, which is the point: they climbed to
+     * different heights by different mechanisms, and writing that as one shared list of caps would
+     * have made the day VNC overtook the native display look like a typo.</p>
      */
     public static boolean isImplemented(@NonNull DisplayExporter exporter,
                                         @NonNull DisplayTransportCap cap) {
         switch (exporter) {
             case NATIVE:
+                return cap == CPU || cap == GPU;
+            case VNC:
+                return cap == CPU || cap == GPU || cap == GPU_HW;
             default:
                 return false;
         }
@@ -185,12 +197,25 @@ public static DisplayTransportCap[] unimplementedFor(@NonNull String screenId,
      * reached, so it is the one worth saying out loud in the editor: a width off by eight pixels
      * costs the whole GPU path and there is no other way to find that out.</p>
      *
+     * <p>Only simplefb has the constraint, and only where the ceiling actually asks for a blit --
+     * see {@link #GPU_COPY_WIDTH_ALIGN}. Asking {@link #isImplemented} rather than naming the
+     * native display is what made VNC's GPU half inherit the rule the day it landed: it imports the
+     * same dma-buf under the same 64-byte pitch rule, and this condition did not have to be found
+     * and changed for the warning to start appearing there.</p>
+     *
+     * <p>The encoder rung asks for the same import -- it is the same blit with a different
+     * destination -- so it is named here too. It had to be: the moment VNC's default rose to it,
+     * a condition that only knew about {@link #GPU} would have gone quiet for exactly the
+     * configuration it was written for, and a warning that disappears when the default moves is
+     * indistinguishable from one that was never right.</p>
      */
     public static boolean cpuFallbackFromWidth(@NonNull String screenId,
                                                @NonNull DisplayExporter exporter,
                                                @NonNull DisplayTransportCap ceiling,
                                                long width) {
         if (!VMScreenConfig.ID_SIMPLEFB.equals(screenId)) return false;
+        if (ceiling != GPU && ceiling != GPU_HW) return false;
+        if (!isImplemented(exporter, ceiling)) return false;
         return width % GPU_COPY_WIDTH_ALIGN != 0;
     }
 
@@ -202,6 +227,13 @@ public static boolean cpuFallbackFromWidth(@NonNull String screenId,
      * satisfy today, which is a promise the negotiation would quietly break. It is the highest
      * <em>implemented</em> one, so the default never restricts anything that works, and it rises
      * on its own as the rungs land.</p>
+     *
+     * <p><b>Which is how VNC's default became the hardware encoder</b>, and that reads more
+     * expensive than it is. A ceiling is not a request: the encoder is built when a client opens
+     * the H.264 side channel and never otherwise, so a VM at this default that nobody watches over
+     * that channel does exactly what the same VM did at the GPU rung -- one blit, an RFB rectangle,
+     * no encoder. Every ordinary RFB client keeps working unchanged; what the top rung buys is that
+     * the app's own console can ask for H.264 instead of pixels.</p>
      */
     @NonNull
     public static DisplayTransportCap defaultFor(@NonNull String screenId,
@@ -211,4 +243,36 @@ public static DisplayTransportCap defaultFor(@NonNull String screenId,
             if (isImplemented(exporter, option)) best = option;
         return best;
     }
+
+    /**
+     * The token {@code transport-cap=} should carry for this binding, or null to send no flag.
+     *
+     * <p>A ceiling at the top of what this build can reach is the same instruction as no ceiling at
+     * all, so the flag is written only when it says something the host would not work out on its
+     * own: the user asked for <em>less</em> than the pipeline could have given. The absence of the
+     * flag is therefore not "unspecified", it is the top rung -- which is also what makes the
+     * default configuration emit nothing, on either exporter.</p>
+     *
+     * <p>Position in {@link #optionsFor}, not the enum's own order, decides what "below" means. The
+     * two ladders diverge above the blit -- {@link #ZERO} on one, {@link #GPU_HW} on the other --
+     * so an ordinal comparison would be comparing rungs from different ladders. It also keeps a
+     * ceiling stored under another exporter from ever being emitted: {@link VMScreenConfig} has
+     * already resolved such a value to this edge's default, and this refuses to name anything the
+     * edge does not offer.</p>
+     */
+    @Nullable
+    public static String emittedToken(@NonNull String screenId,
+                                      @NonNull DisplayExporter exporter,
+                                      @NonNull DisplayTransportCap ceiling) {
+        var options = optionsFor(screenId, exporter);
+        var top = defaultFor(screenId, exporter);
+        var ceilingAt = -1;
+        var topAt = -1;
+        for (var i = 0; i < options.length; i++) {
+            if (options[i] == ceiling) ceilingAt = i;
+            if (options[i] == top) topAt = i;
+        }
+        if (ceilingAt < 0 || ceilingAt >= topAt) return null;
+        return ceiling.token;
+    }
 }
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/store/vm/VMScreenConfig.java b/app/src/main/java/cn/classfun/droidvm/lib/store/vm/VMScreenConfig.java
index 9e4b41d9d..9dc67447b 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/store/vm/VMScreenConfig.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/store/vm/VMScreenConfig.java
@@ -47,6 +47,12 @@ public final class VMScreenConfig {
 
     /** Sub-object holding this screen's VNC server settings, when its exporter is VNC. */
     private static final String KEY_VNC = "vnc";
+    // The VNC sub-object used to carry an "h264_port" for the H.264 side channel. There is no side
+    // channel any more -- the stream rides the RFB connection as encoding 50 -- so nothing reads
+    // the key. A config written before the change still has it, and that is not a migration:
+    // DataItem returns what it is asked for, so a key nobody asks about is a key that costs
+    // nothing. What must not happen is the daemon passing it on; see CrosvmBackendInstance, where
+    // the flag is gone, because the new crosvm refuses to start on a command line that names it.
     /**
      * Whether this screen gets its own absolute input devices. Absent means on, which is how
      * every config written before this key existed keeps the devices it already had: the default
@@ -423,12 +429,51 @@ public static List<VMScreenConfig> boundOf(@NonNull DataItem config) {
     }
 
     /**
+     * Whether a binding to [exporter], capped at [ceiling], is one the host might blit for.
+     *
+     * <p>The two exporters answer differently, and it is not a leftover asymmetry. The native
+     * display's bridge is pointed at a driver whatever the ceiling says -- naming one for a VM
+     * that will not blit costs nothing, since a capped binding never dlopens it, while failing to
+     * name one costs the GPU path in silence. VNC's sink reaches the same driver only where its
+     * ceiling leaves the GPU rung available, because the CPU cap on a VNC binding is the one thing
+     * a user sets to mean "do not blit this screen at all".</p>
+     *
+     * <p>Which is why the test is "not the bottom rung" rather than a list of rungs: the encoder
+     * ceiling blits too -- it is the same blit with the encoder's input surface as its destination
+     * -- so it needed no clause of its own here, and would have been silently missed by a
+     * predicate that named {@link DisplayTransportCap#GPU} outright.</p>
+     */
+    public static boolean isGpuBlitBinding(@NonNull DisplayExporter exporter,
+                                           @NonNull DisplayTransportCap ceiling) {
+        switch (exporter) {
+            case NATIVE:
+                return true;
+            case VNC:
+                return ceiling != DisplayTransportCap.CPU;
+            default:
+                return false;
+        }
+    }
+
+    /** This screen's own answer: the device is there, something is watching it, and it may blit. */
+    public boolean hasGpuBlitBinding() {
+        return isEnabled() && isGpuBlitBinding(getExporter(), getTransportCap());
+    }
+
+    /**
+     * Whether any screen this VM has could run a GPU pipeline to its exporter.
      *
      * <p>For the host-process settings that belong to that path rather than to one screen -- the
      * Vulkan library the display bridge dlopens is the one -- because an environment variable is
      * process-wide and cannot be set per screen even when the thing it configures runs per screen.
+     * Which is why the question has to be asked of all of them, and why it is not "has this VM a
+     * native binding": both sinks dlopen that same driver now, the VNC one to blit into a headless
+     * target instead of a Surface, so a VM whose only binding is a VNC screen at the GPU rung needs
+     * the env exactly as much as one exported natively.</p>
      */
+    public static boolean hasGpuBlitBinding(@NonNull DataItem config) {
         for (var screen : boundOf(config))
+            if (screen.hasGpuBlitBinding()) return true;
         return false;
     }
 
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/display/base/DisplayPresentation.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/base/DisplayPresentation.java
index d0f76954f..908397577 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/display/base/DisplayPresentation.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/base/DisplayPresentation.java
@@ -9,10 +9,14 @@
 import android.hardware.display.DisplayManager;
 import android.os.Bundle;
 import android.view.Display;
+import android.view.Gravity;
+import android.view.TextureView;
+import android.widget.FrameLayout;
 import android.widget.ImageView;
 import android.widget.Toast;
 
 import androidx.annotation.NonNull;
+import androidx.annotation.Nullable;
 
 import com.google.android.material.dialog.MaterialAlertDialogBuilder;
 
@@ -22,6 +26,11 @@
 
 public final class DisplayPresentation extends Presentation {
     private ImageView ivDisplay;
+    private FrameLayout root;
+    private TextureView h264View;
+    /** The stream's size, kept so the fit can be redone when the window's own size changes. */
+    private int streamWidth;
+    private int streamHeight;
     private static final String DISPLAY_CATEGORY_ALL_INCLUDING_DISABLED =
         "android.hardware.display.category.ALL_INCLUDING_DISABLED";
 
@@ -34,6 +43,54 @@ protected void onCreate(Bundle savedInstanceState) {
         super.onCreate(savedInstanceState);
         setContentView(R.layout.presentation_display);
         ivDisplay = findViewById(R.id.iv_presentation_display);
+        root = findViewById(R.id.presentation_root);
+        h264View = findViewById(R.id.texture_h264);
+        // The external display can change size under a running stream -- a mode change, a
+        // projection that resizes -- and the decoder view is sized in pixels rather than by a
+        // scale type, so the fit has to be redone rather than merely re-measured.
+        root.addOnLayoutChangeListener((v, l, t, r, b, ol, ot, or2, ob) -> applyH264Fit());
+    }
+
+    /**
+     * The view the H.264 decoder draws into on this display, or null before the window is built.
+     *
+     * <p>It belongs to this window and not to the console activity, which is the whole difference
+     * between this path and the phone console's: the picture is on another display, so the decoder
+     * has to be pointed at a Surface that is also on it.</p>
+     */
+    @Nullable
+    public TextureView getH264View() {
+        return h264View;
+    }
+
+    /**
+     * Letterboxes the decoder view to a stream of [width]x[height], or clears the fit with zeroes.
+     *
+     * <p>This is what {@code fitCenter} does for the RFB {@link ImageView} beside it, done by hand
+     * because a {@link TextureView} has no scale type: it stretches its Surface to whatever bounds
+     * it is given. Left alone at {@code match_parent} it would show the guest's screen distorted on
+     * any display whose aspect differs from the guest's -- and the fallback to the ImageView
+     * underneath would then visibly change shape, which is the one thing the two views showing the
+     * same picture are supposed to make impossible.</p>
+     */
+    public void fitH264(int width, int height) {
+        streamWidth = width;
+        streamHeight = height;
+        applyH264Fit();
+    }
+
+    private void applyH264Fit() {
+        if (h264View == null || root == null) return;
+        if (streamWidth <= 0 || streamHeight <= 0) return;
+        var areaW = root.getWidth();
+        var areaH = root.getHeight();
+        if (areaW <= 0 || areaH <= 0) return;
+        var scale = Math.min(areaW / (float) streamWidth, areaH / (float) streamHeight);
+        var fitW = Math.max(1, Math.round(streamWidth * scale));
+        var fitH = Math.max(1, Math.round(streamHeight * scale));
+        var lp = h264View.getLayoutParams();
+        if (lp.width == fitW && lp.height == fitH) return;
+        h264View.setLayoutParams(new FrameLayout.LayoutParams(fitW, fitH, Gravity.CENTER));
     }
 
     public void updateBitmap(@NonNull Bitmap bitmap) {
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/display/vnc/base/BaseVncActivity.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/vnc/base/BaseVncActivity.java
index 533edd212..d0fbb51f2 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/display/vnc/base/BaseVncActivity.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/vnc/base/BaseVncActivity.java
@@ -26,9 +26,11 @@
 import android.os.Bundle;
 import android.os.Handler;
 import android.os.Looper;
+import android.os.SystemClock;
 import android.util.Log;
 import android.view.KeyEvent;
 import android.view.MenuItem;
+import android.view.TextureView;
 import android.view.View;
 import android.view.WindowManager;
 import android.view.inputmethod.InputMethodManager;
@@ -37,7 +39,9 @@
 import android.widget.TextView;
 import android.widget.Toast;
 
+import androidx.annotation.MainThread;
 import androidx.annotation.NonNull;
+import androidx.annotation.Nullable;
 import androidx.appcompat.app.AppCompatActivity;
 
 import com.google.android.material.appbar.MaterialToolbar;
@@ -52,6 +56,9 @@
 import cn.classfun.droidvm.lib.ui.CopyableField;
 import cn.classfun.droidvm.lib.ui.ImeInsetsExempt;
 import cn.classfun.droidvm.ui.vm.display.base.DisplayExtraKeysPanel;
+import cn.classfun.droidvm.ui.vm.display.vnc.h264.H264ConsolePipeline;
+import cn.classfun.droidvm.ui.vm.display.vnc.h264.H264ProbePolicy;
+import cn.classfun.droidvm.ui.vm.display.vnc.h264.H264RectProtocol;
 import cn.classfun.droidvm.ui.vm.display.vnc.input.VncExtraKeysPanel;
 
 public abstract class BaseVncActivity extends AppCompatActivity implements ImeInsetsExempt {
@@ -72,6 +79,14 @@ public abstract class BaseVncActivity extends AppCompatActivity implements ImeIn
     protected static final int DEFAULT_PORT = 5900;
     private static final int MAX_RECONNECT_ATTEMPTS = 5;
     private static final long RECONNECT_DELAY_MS = 2000;
+    /**
+     * How often the H.264 policy's two silence clocks are read.
+     *
+     * <p>Both of them are measured in seconds, so a second of granularity costs nothing and this is
+     * the only timer the console needs for the whole H.264 path: everything else about it is driven
+     * by rects arriving.</p>
+     */
+    private static final long H264_TICK_MS = 1000;
     protected final Handler mainHandler = new Handler(Looper.getMainLooper());
     protected final ExecutorService executor = newSingleThreadExecutor(this::msgLoopThread);
     protected VncClient vncClient;
@@ -98,6 +113,24 @@ public abstract class BaseVncActivity extends AppCompatActivity implements ImeIn
     protected String vncPassword = null;
     protected volatile boolean running = false;
     protected volatile boolean needsRefresh = false;
+    /**
+     * The decoder view, when this console has one; null leaves it RFB-only.
+     *
+     * <p>Null does not stop the stream arriving: the encodings are asked for by the RFB client
+     * itself, before any of this exists. What it means is that the rects have nowhere to go, which
+     * is only ever true of a presentation console that has not been given a display yet -- and that
+     * console shows nothing on the phone either, so there is no picture to freeze.</p>
+     */
+    protected TextureView h264View;
+    /** Read on the message-loop thread, written on the main one; see {@link #setH264View}. */
+    @Nullable
+    private volatile H264ConsolePipeline h264;
+    /** What this console is doing about H.264 and why. See {@link H264ProbePolicy}. */
+    private final H264ProbePolicy h264Probe = new H264ProbePolicy();
+    private final Runnable h264Tick = this::tickH264;
+    /** What {@link #setStatus} last put in the status line, and the note appended to it. */
+    private String statusText = "";
+    private String statusNote = "";
     private int reconnectAttempt = 0;
     protected int fbWidth, fbHeight;
     protected Bitmap displayBitmap;
@@ -179,6 +212,10 @@ protected void onResume() {
         // A VM display is on screen and rendering: tell the platform this is sustained heavy
         // gameplay so its power policy raises clocks (see GamePerfHint).
         GamePerfHint.enterGameplay(this);
+        // Nothing to restart here any more. Going to the background takes the decoder's surface
+        // with the window, and coming back gives it a new one -- which the pipeline hears about
+        // from the view itself. The stream never stopped: it rides the RFB connection, which stays
+        // up the whole time, so the next rect after the surface returns is the one that draws.
     }
 
     @Override
@@ -191,6 +228,10 @@ protected void onPause() {
     protected void onDestroy() {
         super.onDestroy();
         onDestroyExtra();
+        // First: it holds a codec, and the loop below waits for the message-loop thread that may
+        // be parked inside a submit to it.
+        mainHandler.removeCallbacks(h264Tick);
+        stopH264();
         running = false;
         if (vncClient != null) vncClient.requestStop();
         executor.shutdown();
@@ -221,6 +262,10 @@ private void bindViews() {
         tvConnectingMessage = findViewById(R.id.tv_connecting_message);
         overlayConnecting = findViewById(R.id.overlay_connecting);
         ivDisplay = findViewById(R.id.iv_display);
+        // Null for a layout that has no decoder view of its own, which is both how a console opts
+        // out of the H.264 path entirely and how the presentation defers the question until it
+        // knows which display it is putting the picture on.
+        setH264View(findViewById(R.id.texture_h264));
         extraKeysPanel = findViewById(R.id.extra_keys_panel);
         onBindExtraViews();
     }
@@ -271,6 +316,10 @@ protected void fetchVncInfoAndConnect() {
             vncHost = resp.optString("host", "127.0.0.1");
             vncRemoteHost = resp.optString("remote_host", "");
             vncPort = resp.optInt("port", DEFAULT_PORT);
+            // Nothing here about H.264 any more. There is no second port to be told about, and the
+            // binding's transport ceiling is not the answer either -- it says what the host is
+            // permitted to build, and what the console needs is whether it built one. That is
+            // answered on the connection itself, by the capabilities rect.
             vncPassword = resp.optString("password", "");
             if (vncPassword.isEmpty()) vncPassword = null;
             mainHandler.post(this::startVnc);
@@ -303,6 +352,10 @@ public void onFramebufferResized(int width, int height) {
                 setStatus(getString(R.string.vnc_display_connected, width, height), VncStatus.CONNECTED);
                 hideConnectingOverlay();
                 onFramebufferReady(width, height);
+                // Nothing to restart for the decoder: a guest resize reaches it as an
+                // encoding-50 rect at the new coded size with the reset flags set, which is a new
+                // decoder generation and a sync frame to start it on, arriving in that order
+                // because the server sends the DesktopSize rect first.
             });
         }
 
@@ -310,6 +363,33 @@ public void onFramebufferResized(int width, int height) {
         public void onFramebufferUpdated(int x, int y, int w, int h) {
             needsRefresh = true;
         }
+
+        @Override
+        public void onH264Rect(@NonNull byte[] rect, int width, int height) {
+            // On the message-loop thread. Both of these are told the time by the caller rather
+            // than reading a clock of their own, which is what lets the schedule be tested.
+            h264Probe.onStreamRect(SystemClock.elapsedRealtime());
+            var pipeline = h264;
+            if (pipeline != null) pipeline.submitStreamRect(rect, width, height);
+        }
+
+        @Override
+        public void onDvhRect(@NonNull byte[] payload) {
+            var dvh = H264RectProtocol.parseDvhRect(payload);
+            // A rect this build cannot read is ignored rather than reported: that is what the
+            // version byte is for, and dropping the connection over a newer host's vocabulary
+            // would turn a gap into an outage.
+            if (dvh == null) return;
+            var now = SystemClock.elapsedRealtime();
+            if (dvh.isHeartbeat()) {
+                h264Probe.onHeartbeat(now);
+                return;
+            }
+            if (!dvh.isCapabilities()) return;
+            Log.i(TAG, fmt("H.264 capabilities rect: value %d", dvh.value));
+            h264Probe.onCapsRect(dvh.value, now);
+            mainHandler.post(BaseVncActivity.this::applyH264Mode);
+        }
     }
 
     private void startVnc() {
@@ -338,6 +418,11 @@ private void startVnc() {
             }
             running = true;
             reconnectAttempt = 0;
+            // The five-second capabilities clock starts at the connection, not at the first
+            // picture: the server answers the client's first request with the capabilities rect,
+            // so a server that is going to say anything has said it by then.
+            h264Probe.onConnected(SystemClock.elapsedRealtime());
+            mainHandler.post(this::startH264Ticks);
             mainHandler.post(() -> {
                 int w = vncClient.getWidth();
                 int h = vncClient.getHeight();
@@ -350,6 +435,16 @@ private void startVnc() {
         });
     }
 
+    /**
+     * Reads whatever the server has to say, for as long as this console is up.
+     *
+     * <p>It no longer stops reading while a decoder is painting the screen, and it cannot: the
+     * H.264 stream arrives on this connection, as rects, so a loop that stopped handling messages
+     * would stop the picture it was trying to make room for. Suppressing the pixel work is the
+     * server's job now -- it empties an enrolled client's modified region rather than encoding it
+     * -- and the framebuffer copy on this side stops on its own, because the rect handlers say the
+     * framebuffer did not move.</p>
+     */
     private void messageLoop() {
         var client = vncClient;
         while (running && client != null && client.isConnected()) {
@@ -361,6 +456,7 @@ private void messageLoop() {
         }
         boolean wasRunning = running;
         running = false;
+        h264Probe.onDisconnected();
         Log.i(TAG, "message loop ended");
         if (wasRunning) {
             mainHandler.post(this::scheduleAutoReconnect);
@@ -372,6 +468,9 @@ private void scheduleAutoReconnect() {
             Log.w(TAG, "Executor already shut down, skipping reconnect");
             return;
         }
+        // The decoder belongs to the RFB session that just ended -- the stream rode it -- so it
+        // goes with it. The reconnected session enrols itself and starts a new one.
+        stopH264();
         reconnectAttempt++;
         if (reconnectAttempt > MAX_RECONNECT_ATTEMPTS) {
             var msg = getString(R.string.vnc_display_reconnect_failed,
@@ -425,6 +524,172 @@ private void refreshDisplay() {
         });
     }
 
+    /**
+     * Binds the view the decoder draws into, or unbinds it with null.
+     *
+     * <p>Here rather than only in {@link #bindViews} because one console's decoder surface is not
+     * in its own layout: the presentation puts the guest's picture on another display entirely, in
+     * a window that does not exist until a display has been chosen and can be dismissed and rebuilt
+     * while the console stays open. Rebinding is a whole new pipeline, since the view a pipeline
+     * draws into is the one thing about it that cannot change underneath.</p>
+     *
+     * <p>Binding does not ask for anything. Nothing has to be asked for any more: the encodings go
+     * out with the connection, and a pipeline bound halfway through a stream starts decoding at the
+     * next rect that reaches it.</p>
+     */
+    protected void setH264View(@Nullable TextureView view) {
+        if (h264View == view) return;
+        stopH264();
+        h264View = view;
+        h264 = view == null ? null : new H264ConsolePipeline(view, mainHandler, new H264Listener());
+    }
+
+    /**
+     * Takes the H.264 path down.
+     *
+     * <p>Deliberately does not stop the policy's tick. One of the callers is
+     * {@link #setH264View}, which runs while the connection is perfectly alive -- the presentation
+     * console rebinds its decoder view when a display is chosen -- and a tick cancelled there would
+     * never be posted again, leaving the console with no clock for the rest of its life. The tick
+     * stops on its own when the message loop does, because that is the thing it is about.</p>
+     */
+    private void stopH264() {
+        var pipeline = h264;
+        if (pipeline != null) pipeline.stop();
+    }
+
+    /** Starts the once-a-second read of the policy's two silence clocks. Idempotent. */
+    @MainThread
+    private void startH264Ticks() {
+        mainHandler.removeCallbacks(h264Tick);
+        mainHandler.postDelayed(h264Tick, H264_TICK_MS);
+    }
+
+    /**
+     * One read of the policy's clocks, and whatever it asks for as a result.
+     *
+     * <p>This is the whole of the timing half of {@code H264_SINGLE_PORT.md} section 1: five
+     * seconds of no capabilities rect means the server is not one that knows about them, and ten
+     * seconds of neither frame nor heartbeat while decoding means the stream is dead however alive
+     * the socket looks. Everything else on the H.264 path is driven by rects arriving.</p>
+     */
+    @MainThread
+    private void tickH264() {
+        if (isFinishing() || isDestroyed()) return;
+        var order = h264Probe.tick(SystemClock.elapsedRealtime());
+        applyH264Mode();
+        if (order == H264ProbePolicy.Order.RECONNECT) {
+            // The stream is dead and the connection is where enrolment happens, so the only way to
+            // ask for a new one is a new connection. Nothing else here reconnects on its own: the
+            // message loop only does so when the socket itself failed, and this failure is a
+            // socket that is fine and a picture that stopped.
+            Log.w(TAG, "the H.264 stream went silent; reconnecting");
+            reconnect();
+            return;
+        }
+        if (running) mainHandler.postDelayed(h264Tick, H264_TICK_MS);
+    }
+
+    /**
+     * Makes the console show what the policy says it should be showing.
+     *
+     * <p>Only ever takes the decoder down, never puts it up: a pipeline is started by a rect
+     * arriving, not by a decision here. What this settles is the two things a decision can settle
+     * on its own -- whether a pipeline that is up should stay up, and what the status line says.</p>
+     */
+    @MainThread
+    private void applyH264Mode() {
+        var pipeline = h264;
+        if (h264Probe.mode() != H264ProbePolicy.Mode.DECODING && pipeline != null) {
+            if (h264Probe.isPermanent()) pipeline.disable();
+            else pipeline.stop();
+        }
+        // Said only for the host that answered "no encoder", which is the one case where this
+        // console can never do better and the user might otherwise wonder why. Silence is not that
+        // case: an ordinary VNC server never offered a stream, and telling its user that H.264 is
+        // unavailable would be noise on every screen that was never going to have one.
+        if (h264Probe.saidNoEncoder())
+            setStatusNote(getString(R.string.vnc_display_h264_unavailable));
+    }
+
+    /** Whether the H.264 decoder is what is currently painting this console. */
+    protected boolean isH264Live() {
+        var pipeline = h264;
+        return pipeline != null && pipeline.isLive();
+    }
+
+    /** The console's own view of the H.264 path, on the main thread. */
+    private final class H264Listener implements H264ConsolePipeline.Listener {
+        @Override
+        public void onStreamLive(int width, int height) {
+            setStatusNote(getString(R.string.vnc_display_h264_active));
+            onH264StreamChanged(true, width, height);
+        }
+
+        @Override
+        public void onStreamGone(boolean wasLive, @Nullable Exception cause) {
+            onH264StreamChanged(false, 0, 0);
+            if (cause == null) {
+                // Nothing went wrong: the console is closing, or its window went away, and the
+                // rects are still arriving on a connection that is still up.
+                setStatusNote(null);
+                return;
+            }
+            if (cause instanceof H264ConsolePipeline.NoDecoderException) {
+                // The one failure the console has to act on rather than merely report. A client
+                // that asked for encoding 50 is served no pixels, so a console that cannot decode
+                // has to stop asking before it can have a picture at all -- and since the ask is
+                // made by the RFB client at connect time, that means withdrawing the encodings and
+                // opening a new connection.
+                Log.w(TAG, "this device has no H.264 decoder; falling back to the pixel path");
+                h264Probe.onDecoderUnsupported();
+                VncClient.setH264Advertised(false);
+                // Latched here rather than left to the next tick: the connection being torn down
+                // can still deliver a rect on its way out, and one that reached a pipeline still
+                // willing to try would fail the same way and ask for another reconnect.
+                var pipeline = h264;
+                if (pipeline != null) pipeline.disable();
+                setStatusNote(getString(R.string.vnc_display_h264_fallback));
+                reconnect();
+                return;
+            }
+            Log.w(TAG, "the console's H.264 stream ended", cause);
+            // A downgrade the user watched happen is the only one worth naming as one. Anything
+            // that failed before there was ever a picture is noise about a thing nobody saw.
+            setStatusNote(wasLive ? getString(R.string.vnc_display_h264_fallback) : null);
+        }
+    }
+
+    /**
+     * Hook for subclasses that have to move something when the decoder view appears or goes away.
+     * The default console has nothing to do here -- the two views share one geometry, written by
+     * the same viewport controller. [width] and [height] are the stream's, and zero when it is not
+     * live, for the console whose decoder view has to be letterboxed by hand.
+     */
+    @SuppressWarnings("unused")
+    protected void onH264StreamChanged(boolean live, int width, int height) {
+    }
+
+    /**
+     * Appends a note to the status line, or clears it. Kept beside the status text rather than
+     * replacing it: which transport is carrying the picture is a second fact about the same
+     * connection, and losing "connected 1280x720" to say it would be a worse trade.
+     */
+    protected void setStatusNote(@Nullable String note) {
+        var next = note == null ? "" : note;
+        // A note that has not changed is not written again. The H.264 policy is read once a second
+        // and re-states its verdict every time, which without this would be a setText per second
+        // for the whole life of a console that has settled on the pixel path.
+        if (statusNote.equals(next)) return;
+        statusNote = next;
+        applyStatusText();
+    }
+
+    private void applyStatusText() {
+        tvStatus.setText(statusNote.isEmpty()
+            ? statusText : fmt("%s  \u00b7  %s", statusText, statusNote));
+    }
+
     protected void setStatus(String text, VncStatus newStatus) {
         int color;
         if (newStatus == this.status) return;
@@ -441,7 +706,8 @@ protected void setStatus(String text, VncStatus newStatus) {
             default:
                 return;
         }
-        tvStatus.setText(text);
+        statusText = text;
+        applyStatusText();
         this.status = newStatus;
         var indicator = new GradientDrawable();
         indicator.setShape(OVAL);
@@ -751,6 +1017,7 @@ protected void reconnect() {
             Log.w(TAG, "Executor already shut down, skipping reconnect");
             return;
         }
+        stopH264();
         running = false;
         reconnectAttempt = 0;
         if (vncClient != null) vncClient.requestStop();
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/display/vnc/base/VncClient.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/vnc/base/VncClient.java
index 4e490374d..a2dbcc6a0 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/display/vnc/base/VncClient.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/vnc/base/VncClient.java
@@ -24,6 +24,41 @@ public interface NativeCallback {
 
         @SuppressWarnings("unused")
         void onFramebufferUpdated(int x, int y, int w, int h);
+
+        /**
+         * One encoding-50 rect, whole: the eight-byte header (u32 BE length, u32 BE flags) and the
+         * Annex-B payload behind it. Parsed on this side rather than in C so that there is one
+         * parser and a test can feed it the seam's literal bytes.
+         *
+         * <p>[width] and [height] are the rect's, which for this encoding is the coded size of the
+         * picture inside it. Called on the message-loop thread, and blocking here is how
+         * backpressure reaches the server: the socket stops being drained.</p>
+         */
+        @SuppressWarnings("unused")
+        void onH264Rect(@NonNull byte[] rect, int width, int height);
+
+        /**
+         * One 0x44564831 rect payload: the fixed four bytes of H264_SINGLE_PORT.md section 1.
+         * Called on the message-loop thread.
+         */
+        @SuppressWarnings("unused")
+        void onDvhRect(@NonNull byte[] payload);
+    }
+
+    /**
+     * Stops this process asking for the H.264 encodings on connections made from here on.
+     *
+     * <p>Process-wide because libvncclient's extension list is, and because the one fact that
+     * justifies withdrawing them is process-wide too: a device with no {@code video/avc} decoder
+     * has none for any console. It matters that the withdrawal happens rather than being merely
+     * noted -- a client that asks for encoding 50 is served no pixels, so a console that cannot
+     * decode and keeps asking is a console showing a frozen picture.</p>
+     *
+     * <p>Takes effect at the next {@link #connect}; a connection already up keeps what it
+     * negotiated.</p>
+     */
+    public static void setH264Advertised(boolean advertised) {
+        nativeSetH264Advertised(advertised);
     }
 
     private long nativeHandle;
@@ -90,6 +125,8 @@ public void disconnect() {
         }
     }
 
+    private static native void nativeSetH264Advertised(boolean advertised);
+
     private static native long nativeCreate();
 
     private static native boolean nativeConnect(long handle, String host, int port, String password, NativeCallback cb);
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/display/vnc/display/VMVncDisplayActivity.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/vnc/display/VMVncDisplayActivity.java
index bfc4c21b5..cc7913b64 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/display/vnc/display/VMVncDisplayActivity.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/vnc/display/VMVncDisplayActivity.java
@@ -437,6 +437,12 @@ private void setupLayoutControllers() {
                 @Override
                 public void onViewportChanged(int baseW, int baseH, float viewScale,
                                               float offsetX, float offsetY) {
+                    place(ivDisplay, baseW, baseH, viewScale, offsetX, offsetY);
+                    // The decoder view is the same rectangle, because it is showing the same
+                    // screen. Applied here rather than mirrored later so that the two cannot drift
+                    // apart across a rotation or an IME: there is one viewport and it writes both.
+                    if (h264View != null)
+                        place(h264View, baseW, baseH, viewScale, offsetX, offsetY);
                 }
 
                 @Override
@@ -504,6 +510,20 @@ public void onStateChanged(@NonNull DisplaySource.State state) {
         ViewCompat.requestApplyInsets(content);
     }
 
+    /**
+     * Puts one view where the viewport says the guest's picture goes. A fresh LayoutParams per
+     * view, because two views sharing one instance is a layout that silently follows whichever was
+     * measured last.
+     */
+    private static void place(@NonNull View target, int baseW, int baseH, float viewScale,
+                              float offsetX, float offsetY) {
+        target.setLayoutParams(new FrameLayout.LayoutParams(baseW, baseH, CENTER));
+        target.setScaleX(viewScale);
+        target.setScaleY(viewScale);
+        target.setTranslationX(offsetX);
+        target.setTranslationY(offsetY);
+    }
+
     private float dp(float v) {
         return TypedValue.applyDimension(
             TypedValue.COMPLEX_UNIT_DIP, v, getResources().getDisplayMetrics());
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/display/vnc/display/VMVncPresentationActivity.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/vnc/display/VMVncPresentationActivity.java
index 1f7231175..c19a6b23c 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/display/vnc/display/VMVncPresentationActivity.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/vnc/display/VMVncPresentationActivity.java
@@ -51,13 +51,27 @@ public void onDisplayChanged(int displayId) {
     @Override
     public void onDisplayRemoved(int displayId) {
         if (pres != null && pres.getDisplayId() == displayId) {
-            pres.dismiss();
-            pres = null;
+            dismissPresentation();
             Toast.makeText(this, R.string.display_lost, Toast.LENGTH_SHORT).show();
             finish();
         }
     }
 
+    /**
+     * Drops the presentation window, and the decoder that was drawing into it first.
+     *
+     * <p>Order matters and only in this direction: the decoder's Surface belongs to a view in that
+     * window, so dismissing first would leave the pipeline holding a Surface whose window is gone
+     * and a socket the server still counts as its one client.</p>
+     */
+    private void dismissPresentation() {
+        setH264View(null);
+        if (pres != null) {
+            pres.dismiss();
+            pres = null;
+        }
+    }
+
     @Override
     protected int getContentLayoutId() {
         return R.layout.activity_vm_vnc_presentation;
@@ -174,14 +188,22 @@ protected void onClearDisplay() {
     @Override
     protected void onDestroyExtra() {
         stopInputCapture();
-        if (pres != null) {
-            pres.dismiss();
-            pres = null;
-        }
+        dismissPresentation();
         if (displayManager != null)
             displayManager.unregisterDisplayListener(this);
     }
 
+    /**
+     * The stream's picture is the presentation's picture, so the decoder view is fitted to it the
+     * way the RFB {@link android.widget.ImageView} beneath is fitted by its scale type. Nothing
+     * else about the H.264 path is different here -- the probe, the fallback, the retry ladder and
+     * the liveness timeout are all the base console's, working against a view on another display.
+     */
+    @Override
+    protected void onH264StreamChanged(boolean live, int width, int height) {
+        if (pres != null) pres.fitH264(live ? width : 0, live ? height : 0);
+    }
+
     @Override
     protected void onVncClientCreated() {
         vncTouchPad.setVncClient(vncClient);
@@ -208,6 +230,11 @@ private void startPresentationOnTarget() {
             return;
         }
         startInputCapture();
+        // The decoder's view exists only now, with the window that holds it -- which is why this is
+        // not in onSetupActivity: until a display has been chosen there is nowhere for a decoded
+        // frame to go. Nothing to ask for afterwards: the stream, if there is one, has been
+        // arriving on the RFB connection all along, and the next rect finds this pipeline.
+        setH264View(pres.getH264View());
         synchronized (bitmapLock) {
             if (displayBitmap != null && !displayBitmap.isRecycled())
                 pres.updateBitmap(displayBitmap);
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/display/vnc/h264/H264ConsoleDecoder.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/vnc/h264/H264ConsoleDecoder.java
new file mode 100644
index 000000000..6b094d09b
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/vnc/h264/H264ConsoleDecoder.java
@@ -0,0 +1,275 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
+package cn.classfun.droidvm.ui.vm.display.vnc.h264;
+
+import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
+
+import android.media.MediaCodec;
+import android.media.MediaFormat;
+import android.os.HandlerThread;
+import android.util.Log;
+import android.view.Surface;
+
+import androidx.annotation.NonNull;
+
+import java.io.IOException;
+import java.util.ArrayDeque;
+
+/**
+ * The stream's frames, decoded straight onto a Surface.
+ *
+ * <p>This is a live screen, not a recording, so every decision here trades smoothness for latency.
+ * Output buffers are released for display the moment they exist rather than at a presentation time,
+ * the format asks for the platform's low-latency mode, and timestamps are a counter in arrival
+ * order -- there is no clock to be faithful to when the thing being shown is happening now.</p>
+ *
+ * <p>Asynchronous mode, so that a decoder holding a frame back does not also stop the reader from
+ * pulling the next one off the socket, and so that a finished frame reaches the screen without
+ * anything having to come back and ask for it. That last part is what a synchronous read-feed-drain
+ * loop gets wrong on exactly the case this pipeline is built for: with the guest idle, the last
+ * frame before the silence would sit undrained until the silence ended.</p>
+ */
+public final class H264ConsoleDecoder {
+    private static final String TAG = "H264ConsoleDecoder";
+    private static final String MIME = "video/avc";
+    /**
+     * How many frames may wait for an input buffer before the submitting thread blocks. Small: the
+     * queue exists to cover a momentary hiccup, and anything longer is latency being accumulated
+     * rather than absorbed. Blocking is what pushes the backpressure back down the socket.
+     */
+    private static final int MAX_PENDING = 8;
+    /** How long a submit may block before the stream is declared beyond saving. */
+    private static final long SUBMIT_TIMEOUT_MS = 2000;
+    /** Timestamp step, in microseconds. Only its monotonicity matters. */
+    private static final long PTS_STEP_US = 1000;
+
+    /**
+     * Reported on the codec's own thread, or on whichever thread was feeding it when it broke, and
+     * possibly while this decoder's lock is held -- so implementations post the news somewhere and
+     * return rather than tearing anything down inline.
+     */
+    public interface Listener {
+        void onDecoderFailed(@NonNull Exception cause);
+    }
+
+    private final Listener listener;
+    private final Object lock = new Object();
+    private final ArrayDeque<Integer> freeInputs = new ArrayDeque<>();
+    private final ArrayDeque<byte[]> pending = new ArrayDeque<>();
+    private HandlerThread codecThread;
+    private MediaCodec codec;
+    private long nextPtsUs;
+    private boolean released;
+    private boolean failed;
+
+    public H264ConsoleDecoder(@NonNull Listener listener) {
+        this.listener = listener;
+    }
+
+    /**
+     * Configures and starts the decoder against [surface]. False means this device could not stand
+     * one up at all, which is a fallback to RFB rather than an error to show.
+     */
+    public boolean start(@NonNull Surface surface, int width, int height) {
+        synchronized (lock) {
+            if (released) return false;
+        }
+        try {
+            var format = MediaFormat.createVideoFormat(MIME, width, height);
+            // The decoder's own guess at a maximum input size is derived from the resolution and a
+            // compression ratio no encoder promises. A sync frame of a busy desktop can beat it,
+            // and the symptom is one overflowing frame rather than a refusal, so ask for room.
+            format.setInteger(MediaFormat.KEY_MAX_INPUT_SIZE,
+                Math.max(width * height, 1 << 20));
+            // Ask the decoder not to build a reordering pipeline it would have to fill before
+            // emitting anything. The stream has no B frames to reorder, and on this path a frame
+            // held back for smoothness is a frame the user is waiting on.
+            format.setInteger(MediaFormat.KEY_LOW_LATENCY, 1);
+            codecThread = new HandlerThread("h264-decoder");
+            codecThread.start();
+            codec = MediaCodec.createDecoderByType(MIME);
+            codec.setCallback(new Callback(), new android.os.Handler(codecThread.getLooper()));
+            codec.configure(format, surface, null, 0);
+            codec.start();
+            Log.i(TAG, fmt("decoder up for %dx%d", width, height));
+            return true;
+        } catch (Exception e) {
+            Log.w(TAG, "could not start the H.264 decoder", e);
+            release();
+            return false;
+        }
+    }
+
+    /**
+     * Hands one frame to the decoder, blocking while the queue is full.
+     *
+     * <p>Called from the RFB message loop, and the blocking is the point: a stalled decoder stops
+     * that loop, the loop stops draining the socket, and the server stops being asked for frames.
+     * That chain is what keeps a slow device showing late frames rather than wrong ones.</p>
+     *
+     * @throws IOException when the decoder has failed or stopped keeping up, which the caller turns
+     *                     into the end of the stream and thus a fallback to RFB.
+     */
+    public void submit(@NonNull byte[] frame) throws IOException {
+        synchronized (lock) {
+            var deadline = System.currentTimeMillis() + SUBMIT_TIMEOUT_MS;
+            while (!released && !failed && pending.size() >= MAX_PENDING) {
+                var left = deadline - System.currentTimeMillis();
+                if (left <= 0) throw new IOException("the H.264 decoder stopped keeping up");
+                try {
+                    lock.wait(left);
+                } catch (InterruptedException e) {
+                    Thread.currentThread().interrupt();
+                    throw new IOException("interrupted while feeding the H.264 decoder");
+                }
+            }
+            if (failed) throw new IOException("the H.264 decoder failed");
+            if (released) throw new IOException("the H.264 decoder is gone");
+            pending.add(frame);
+            pump();
+        }
+    }
+
+    /**
+     * Throws away everything the codec was holding, so the next frame starts a picture rather than
+     * continuing one.
+     *
+     * <p>What the reset flags on an encoding-50 rect ask for. A viewer that keeps one decoder
+     * context per rectangle has several things to throw away; this console has one codec, so both
+     * flags mean this. The frames already queued go with it on purpose: they belong to the stream
+     * that was, and the bytes arriving behind the flag are a sync frame that does not need them.
+     *
+     * <p>{@code start()} after {@code flush()} is not optional in asynchronous mode -- a flushed
+     * codec stops calling back until it is started again, and every input buffer index handed out
+     * before the flush is invalid, which is why both queues are emptied here rather than drained.
+     */
+    public void reset() {
+        synchronized (lock) {
+            if (released || failed || codec == null) return;
+            try {
+                codec.flush();
+                freeInputs.clear();
+                pending.clear();
+                codec.start();
+                nextPtsUs = 0;
+                lock.notifyAll();
+            } catch (Exception e) {
+                fail(e);
+            }
+        }
+    }
+
+    /** Tears the decoder down. Safe to call more than once, and from any thread. */
+    public void release() {
+        MediaCodec doomed;
+        HandlerThread thread;
+        synchronized (lock) {
+            if (released) return;
+            released = true;
+            doomed = codec;
+            thread = codecThread;
+            codec = null;
+            codecThread = null;
+            pending.clear();
+            freeInputs.clear();
+            lock.notifyAll();
+        }
+        if (doomed != null) {
+            try {
+                doomed.stop();
+            } catch (Exception ignored) {
+                // A codec that already failed refuses to stop; it still has to be released.
+            }
+            try {
+                doomed.release();
+            } catch (Exception ignored) {
+                // Nothing left to do about a codec that will not let go.
+            }
+        }
+        if (thread != null) thread.quitSafely();
+    }
+
+    /**
+     * Moves whatever can move. Always called holding [lock].
+     *
+     * <p>Both queues are peeked and only dropped once the frame is actually in the codec's hands,
+     * so a buffer index cannot be lost on the way past a failure -- the decoder is given a fixed
+     * number of them and a leaked one never comes back.</p>
+     */
+    private void pump() {
+        while (!released && !pending.isEmpty() && !freeInputs.isEmpty()) {
+            var index = freeInputs.peek();
+            var frame = pending.peek();
+            if (index == null || frame == null) return;
+            try {
+                var buffer = codec.getInputBuffer(index);
+                if (buffer == null) return;
+                buffer.clear();
+                buffer.put(frame);
+                codec.queueInputBuffer(index, 0, frame.length, nextPtsUs, 0);
+                nextPtsUs += PTS_STEP_US;
+                freeInputs.poll();
+                pending.poll();
+                lock.notifyAll();
+            } catch (Exception e) {
+                fail(e);
+                return;
+            }
+        }
+    }
+
+    private void fail(@NonNull Exception cause) {
+        synchronized (lock) {
+            if (failed || released) return;
+            failed = true;
+            lock.notifyAll();
+        }
+        Log.w(TAG, "H.264 decode failed", cause);
+        listener.onDecoderFailed(cause);
+    }
+
+    private final class Callback extends MediaCodec.Callback {
+        @Override
+        public void onInputBufferAvailable(@NonNull MediaCodec codec, int index) {
+            synchronized (lock) {
+                if (released) return;
+                freeInputs.add(index);
+                pump();
+            }
+        }
+
+        @Override
+        public void onOutputBufferAvailable(@NonNull MediaCodec codec, int index,
+                                            @NonNull MediaCodec.BufferInfo info) {
+            try {
+                // true: hand it to the Surface now. There is no presentation schedule to keep --
+                // the frame describes the guest's screen as of when it was encoded, so the only
+                // right time to show it is immediately.
+                codec.releaseOutputBuffer(index, true);
+            } catch (Exception e) {
+                fail(e);
+            }
+        }
+
+        @Override
+        public void onError(@NonNull MediaCodec codec, @NonNull MediaCodec.CodecException e) {
+            fail(e);
+        }
+
+        @Override
+        public void onOutputFormatChanged(@NonNull MediaCodec codec, @NonNull MediaFormat format) {
+            // The guest resized, or the decoder settled on a size of its own. Nothing to do: the
+            // Surface is scaled by the view, and the RFB side is what notices a resize and restarts
+            // this channel so the header is read again.
+            Log.i(TAG, fmt("decoder output format now %s", format));
+        }
+    }
+
+    /** Whether this decoder is still usable. */
+    public boolean isAlive() {
+        synchronized (lock) {
+            return !released && !failed;
+        }
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/display/vnc/h264/H264ConsolePipeline.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/vnc/h264/H264ConsolePipeline.java
new file mode 100644
index 000000000..67344e318
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/vnc/h264/H264ConsolePipeline.java
@@ -0,0 +1,401 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
+package cn.classfun.droidvm.ui.vm.display.vnc.h264;
+
+import static android.view.View.GONE;
+import static android.view.View.VISIBLE;
+import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
+
+import android.graphics.SurfaceTexture;
+import android.os.Handler;
+import android.util.Log;
+import android.view.Surface;
+import android.view.TextureView;
+
+import androidx.annotation.AnyThread;
+import androidx.annotation.MainThread;
+import androidx.annotation.NonNull;
+import androidx.annotation.Nullable;
+
+import java.io.IOException;
+import java.util.concurrent.CountDownLatch;
+import java.util.concurrent.TimeUnit;
+
+/**
+ * The console's H.264 half: encoding-50 rects in, a picture on a {@link TextureView} out.
+ *
+ * <p>There is no socket here any more. The frames arrive on the ordinary RFB connection as rects,
+ * so what this owns is the two pieces that still have to agree with each other -- the codec and the
+ * view it draws into -- under the same rule as before: <b>this only ever runs on top of a live RFB
+ * connection</b>. The RFB client stays up whatever happens here, input keeps riding it, and the
+ * failure of anything in this file is a view being hidden again rather than a console that stops
+ * working.</p>
+ *
+ * <p>A {@link TextureView} rather than a {@link android.view.SurfaceView}: the decoder's picture has
+ * to land exactly where the RFB canvas was, and the canvas is positioned by a layout pass plus a
+ * scale and a translation that the viewport controller recomputes on every chrome, IME and rotation
+ * change. A TextureView is an ordinary view in that pass, so "exactly where the canvas is" is the
+ * same three property assignments applied twice. A SurfaceView is composited outside it, and would
+ * have made the alignment a second, separately-wrong geometry calculation. It is not clickable and
+ * not focusable, so touches fall through it to the canvas underneath and every input mode keeps
+ * working while it is up.</p>
+ *
+ * <p><b>Every callback names the generation it came from.</b> A decoder's failure, or its surface
+ * going away, arrives on the main thread some time after the object it describes was replaced --
+ * which is not a rare interleaving but the ordinary one, because a guest resize replaces the
+ * decoder while frames for both sizes are in flight. Without the name, the dying generation's
+ * farewell tore down the one that had replaced it.</p>
+ *
+ * <p><b>A geometry is a generation, and a generation is a decoder.</b> MediaCodec is configured for
+ * one size, so a rect at a new one cannot be fed to the codec that was standing; the rect carries
+ * the coded size for exactly this reason, and the server sets the reset flags on the first rect at
+ * a new geometry so that the bytes behind it are a sync frame rather than a continuation.</p>
+ */
+public final class H264ConsolePipeline {
+    private static final String TAG = "H264ConsolePipeline";
+    /**
+     * How long a frame waits for the main thread to answer a new geometry with a decoder.
+     *
+     * <p>Normally microseconds -- the console has been on screen showing RFB, so the view is
+     * already available and the answer is one main-thread post away. The wait exists so that the
+     * first rect of a stream, which is the sync frame the whole stream is built on, is not the one
+     * frame that gets dropped. It is bounded because a wedged main thread must not park the RFB
+     * message loop, which is also what carries the keyboard.</p>
+     */
+    private static final long CONFIGURE_WAIT_MS = 1500;
+
+    /** This device has no {@code video/avc} decoder, so no connection here can ever show one. */
+    public static final class NoDecoderException extends IOException {
+        NoDecoderException() {
+            super("no H.264 decoder on this device");
+        }
+    }
+
+    /** Called on the main thread. */
+    public interface Listener {
+        /** The decoder is rendering. The RFB canvas underneath is now redundant. */
+        void onStreamLive(int width, int height);
+
+        /**
+         * The pipeline is down and the RFB canvas is what shows the screen again.
+         *
+         * @param wasLive whether it had ever been on screen.
+         * @param cause   what ended it, or null when nothing went wrong -- a deliberate close, or
+         *                the window going away underneath it, which is what backgrounding the
+         *                console looks like and is not a fault to report.
+         */
+        void onStreamGone(boolean wasLive, @Nullable Exception cause);
+    }
+
+    /**
+     * One decoder, for one coded geometry, and the latch that says whether it exists yet.
+     *
+     * <p>The latch is settled rather than signalled: it counts down once the main thread has
+     * decided, whether the decision was a decoder or "there is nowhere to draw". A frame arriving
+     * while there is nowhere to draw has to be dropped immediately rather than waited on, because
+     * the alternative is the message loop stalling for a second and a half per frame for as long as
+     * the console is in the background.</p>
+     */
+    private static final class Generation {
+        final int width;
+        final int height;
+        final CountDownLatch settled = new CountDownLatch(1);
+        @Nullable
+        volatile H264ConsoleDecoder decoder;
+
+        /**
+         * The Annex-B bytes of the most recent reset-flagged rect at this geometry -- SPS, PPS and
+         * an IDR concatenated -- or null before one has been seen.
+         *
+         * <p>This is the whole reason a black screen was possible. The server sends the parameter
+         * sets exactly once, on the reset-flagged rect that starts the stream, and never again on
+         * the bare IDRs that follow; a decoder attached even one frame later than that rect --
+         * which is the ordinary case on a cold open, because the TextureView's SurfaceTexture is
+         * created a frame after the view is made visible -- would never see an SPS and would buffer
+         * every later frame forever with nothing to decode them against. Held here so that a
+         * decoder standing up after the sync rect can still be handed it.</p>
+         *
+         * <p>Written and read only on the message-loop thread; see {@link #submitStreamRect}.</p>
+         */
+        @Nullable
+        byte[] syncFrame;
+        /** Whether this generation's decoder has been fed yet. Message-loop thread only. */
+        boolean decoderFed;
+
+        Generation(int width, int height) {
+            this.width = width;
+            this.height = height;
+        }
+    }
+
+    private final TextureView view;
+    private final Handler main;
+    private final Listener listener;
+
+    /** Written on the main thread; read by the message loop to find out what it may feed. */
+    @Nullable
+    private volatile Generation generation;
+    /** Set once this console has decided it will not decode again; see {@link #disable}. */
+    private volatile boolean disabled;
+    @Nullable
+    private Surface surface;
+    /**
+     * The decoder currently attached to the surface, whatever generation stood it up. Tracked
+     * beside the generation because a new generation replaces the surface and the decoder together
+     * -- a guest resize builds a second decoder while the first is still attached -- and the one
+     * being replaced has to be released without a reference to the generation that owns it.
+     */
+    @Nullable
+    private H264ConsoleDecoder attachedDecoder;
+    private boolean live;
+    private boolean stopping;
+
+    public H264ConsolePipeline(@NonNull TextureView view, @NonNull Handler main,
+                               @NonNull Listener listener) {
+        this.view = view;
+        this.main = main;
+        this.listener = listener;
+    }
+
+    public boolean isLive() {
+        return live;
+    }
+
+    /**
+     * Feeds one encoding-50 rect body, header and all.
+     *
+     * <p>Called on the RFB message-loop thread, and the blocking inside is the point: a stalled
+     * decoder stops this thread, this thread stops draining the socket, and the server -- which
+     * only sends what an outstanding request asked for -- stops being asked. That chain is what
+     * keeps a slow device showing late frames rather than wrong ones.</p>
+     *
+     * <p>Nothing thrown, ever. A body that will not parse is a disagreement between the reader that
+     * pulled it off the socket and the parser here, not a desynchronised socket -- the reader took
+     * exactly the bytes the length declared -- so the connection is fine and only this pipeline has
+     * to come down.</p>
+     */
+    @AnyThread
+    public void submitStreamRect(@NonNull byte[] rectBody, int width, int height) {
+        if (disabled) return;
+        H264RectProtocol.StreamRect rect;
+        try {
+            rect = H264RectProtocol.parseStreamRect(rectBody);
+            if (width <= 0 || height <= 0)
+                throw new IOException(fmt("h264 rect at %dx%d has no picture in it", width, height));
+        } catch (IOException e) {
+            var doomed = generation;
+            main.post(() -> teardown(doomed, e));
+            return;
+        }
+        var gen = generation;
+        if (gen == null || gen.width != width || gen.height != height) {
+            var fresh = new Generation(width, height);
+            // Published before the post, so that a rect arriving on the heels of this one finds the
+            // generation it is about to be told to wait for rather than making a second one.
+            generation = fresh;
+            gen = fresh;
+            main.post(() -> configure(fresh));
+        }
+        // Cached before the latch, so that a reset-flagged rect dropped now -- because the surface
+        // is not ready this instant -- is still on hand to prime the decoder that stands up a frame
+        // later. The reset flag is exactly what marks the rect that carries the parameter sets.
+        // decoderFed is not disturbed: it is per-generation, and a mid-stream reset of a decoder
+        // that has already been fed must go through the reset path in feed(), not the prime path.
+        if (rect.resetsDecoder()) gen.syncFrame = rect.annexB;
+        try {
+            if (!gen.settled.await(CONFIGURE_WAIT_MS, TimeUnit.MILLISECONDS)) {
+                Log.w(TAG, "the main thread did not answer a new stream geometry in time");
+                return;
+            }
+        } catch (InterruptedException e) {
+            Thread.currentThread().interrupt();
+            return;
+        }
+        var decoder = gen.decoder;
+        // Null is the ordinary "there is no window for this picture" -- a backgrounded console, or
+        // one whose presentation window has not been built yet. The frame is dropped rather than
+        // held, but the sync frame it may have carried is not: it is in gen.syncFrame, and the next
+        // frame to reach a live decoder replays it first.
+        if (decoder == null || generation != gen) return;
+        try {
+            feed(gen, decoder, rect);
+        } catch (IOException e) {
+            var doomed = gen;
+            main.post(() -> teardown(doomed, e));
+        }
+    }
+
+    /**
+     * Hands one rect to the decoder, priming it with the cached sync frame the first time.
+     *
+     * <p>The priming is what closes the black-screen hole. When a decoder is fed for the first
+     * time it may be one that stood up after the sync rect went by -- so if this rect is not itself
+     * a sync (it does not reset), the cached {@link Generation#syncFrame} goes in ahead of it, and
+     * the decoder gets its SPS/PPS before the delta that would otherwise mean nothing. A rect that
+     * is a sync needs none of this: it carries its own parameter sets, and a decoder this fresh has
+     * no prior context to reset.</p>
+     *
+     * <p>All on the message-loop thread, so {@code decoderFed} and {@code syncFrame} need no
+     * guarding: the one thread that reads them is the one that writes them.</p>
+     */
+    private void feed(@NonNull Generation gen, @NonNull H264ConsoleDecoder decoder,
+                      @NonNull H264RectProtocol.StreamRect rect) throws IOException {
+        if (!gen.decoderFed) {
+            gen.decoderFed = true;
+            if (rect.resetsDecoder()) {
+                decoder.submit(rect.annexB);
+                return;
+            }
+            if (gen.syncFrame != null) decoder.submit(gen.syncFrame);
+            decoder.submit(rect.annexB);
+            return;
+        }
+        if (rect.resetsDecoder()) decoder.reset();
+        decoder.submit(rect.annexB);
+    }
+
+    /** Takes the pipeline down deliberately: no reason, no notice beyond the state change. */
+    @MainThread
+    public void stop() {
+        teardown(generation, null);
+    }
+
+    /**
+     * Takes it down and keeps it down, for a console that has decided it is not going to decode.
+     *
+     * <p>Needed because the frames keep arriving whatever this object thinks: the stream rides the
+     * RFB connection now, so there is no socket to close to make it stop. Only the server can stop
+     * sending, and the only thing that makes it stop is a connection that never asked.</p>
+     */
+    @MainThread
+    public void disable() {
+        disabled = true;
+        stop();
+    }
+
+    /**
+     * Stands a decoder up for [gen]'s geometry, or arranges to hear about it when one can exist.
+     *
+     * <p>The surface listener goes on before the availability check and stays on for the whole
+     * generation, because the case it exists for is not only "the surface does not exist yet" but
+     * also "the surface stopped existing" -- and the second one arrives on a view that was
+     * available when this ran.</p>
+     */
+    @MainThread
+    private void configure(@NonNull Generation gen) {
+        if (generation != gen || stopping) {
+            gen.settled.countDown();
+            return;
+        }
+        // Releases the decoder and surface of the generation this one replaces -- a guest resize
+        // reaches here with the previous decoder still attached, and without this it would run on
+        // against a surface about to be released and never be freed.
+        releaseDecoderAndSurface();
+        view.setSurfaceTextureListener(new SurfaceListener(gen));
+        view.setVisibility(VISIBLE);
+        var texture = view.getSurfaceTexture();
+        if (view.isAvailable() && texture != null) attach(gen, texture);
+        else gen.settled.countDown();
+    }
+
+    @MainThread
+    private void attach(@NonNull Generation gen, @NonNull SurfaceTexture texture) {
+        if (generation != gen || stopping || gen.decoder != null) return;
+        // The decoder writes frames at the coded size the rect announced; the view scales whatever
+        // it is given, so the two never have to be made equal.
+        texture.setDefaultBufferSize(gen.width, gen.height);
+        var target = new Surface(texture);
+        surface = target;
+        var started = new H264ConsoleDecoder(cause -> main.post(() -> teardown(gen, cause)));
+        if (!started.start(target, gen.width, gen.height)) {
+            gen.settled.countDown();
+            teardown(gen, new NoDecoderException());
+            return;
+        }
+        gen.decoder = started;
+        attachedDecoder = started;
+        live = true;
+        // Counted down only now: a frame waiting on this must find the decoder published, not the
+        // latch open and the field still empty. The message loop primes it with the generation's
+        // cached sync frame on the first submit, so a decoder that stood up after the sync rect
+        // still gets its parameter sets.
+        gen.settled.countDown();
+        Log.i(TAG, fmt("decoding the console at %dx%d", gen.width, gen.height));
+        listener.onStreamLive(gen.width, gen.height);
+    }
+
+    /**
+     * Puts everything back the way it was, once. Idempotent because it is reached from five places
+     * -- the console closing, a rect that would not parse, the decoder failing, a submit that timed
+     * out and the surface going away -- and two of them can happen at the same moment.
+     *
+     * <p>[gen] is the generation the caller believes it is ending. A teardown for one that is no
+     * longer current is a message from a decoder that has already been replaced, and doing its
+     * bidding would tear down the decoder that replaced it.</p>
+     */
+    @MainThread
+    private void teardown(@Nullable Generation gen, @Nullable Exception cause) {
+        if (stopping || generation == null || generation != gen) return;
+        stopping = true;
+        var wasLive = live;
+        live = false;
+        if (cause != null) Log.w(TAG, "the console's H.264 stream is down", cause);
+        generation = null;
+        // Anything parked on this generation is waiting for a decoder that is not coming.
+        gen.settled.countDown();
+        gen.decoder = null;
+        releaseDecoderAndSurface();
+        view.setSurfaceTextureListener(null);
+        view.setVisibility(GONE);
+        stopping = false;
+        listener.onStreamGone(wasLive, cause);
+    }
+
+    /** Releases whatever decoder is attached to the surface, and the surface, if any. */
+    @MainThread
+    private void releaseDecoderAndSurface() {
+        if (attachedDecoder != null) {
+            attachedDecoder.release();
+            attachedDecoder = null;
+        }
+        if (surface != null) {
+            surface.release();
+            surface = null;
+        }
+    }
+
+    /** The decoder's window, watched for the whole life of the generation that asked for it. */
+    private final class SurfaceListener implements TextureView.SurfaceTextureListener {
+        private final Generation gen;
+
+        SurfaceListener(@NonNull Generation gen) {
+            this.gen = gen;
+        }
+
+        @Override
+        public void onSurfaceTextureAvailable(@NonNull SurfaceTexture st, int w, int h) {
+            attach(gen, st);
+        }
+
+        @Override
+        public void onSurfaceTextureSizeChanged(@NonNull SurfaceTexture st, int w, int h) {
+            // The view moved or resized. The decoder writes at the stream's coded size and the view
+            // scales it, so there is nothing to reconfigure.
+        }
+
+        @Override
+        public boolean onSurfaceTextureDestroyed(@NonNull SurfaceTexture st) {
+            // The window went away underneath the decoder, which is what backgrounding the console
+            // looks like. Reported without a cause because nothing is wrong: the rects keep
+            // arriving on a connection that is still up, and the generation they build when the
+            // window comes back is what puts the picture on screen again.
+            teardown(gen, null);
+            return true;
+        }
+
+        @Override
+        public void onSurfaceTextureUpdated(@NonNull SurfaceTexture st) {
+        }
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/display/vnc/h264/H264ProbePolicy.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/vnc/h264/H264ProbePolicy.java
new file mode 100644
index 000000000..4deec9cbb
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/vnc/h264/H264ProbePolicy.java
@@ -0,0 +1,224 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
+package cn.classfun.droidvm.ui.vm.display.vnc.h264;
+
+import androidx.annotation.NonNull;
+
+/**
+ * Whether this console is decoding, waiting for something to decode, or on the pixel path -- and
+ * what has to happen to move it between the three.
+ *
+ * <p>The rules are {@code plans/H264_SINGLE_PORT.md} section 1's client half, and they are here
+ * rather than in the activity so that they can be read off a test instead of a stopwatch: this
+ * class has no Android in it and no clock of its own. Every method takes the current time; the
+ * activity's only job is to say what time it is and to do what {@link #tick} returns.</p>
+ *
+ * <p><b>Three things end the waiting, and only one of them is a message.</b> A capabilities rect
+ * saying {@link H264RectProtocol#CAPS_NO_ENCODER} is a fact about the host, and the host does not
+ * grow an encoder while the VM runs, so it ends the question for good. Silence is the other two.
+ * Five seconds with no capabilities rect at all means the server is not one that knows this
+ * pseudo-encoding -- an old crosvm, or a still-running VM started before the change -- and the
+ * console simply stays on pixels, which is what that server is already serving it. Ten seconds
+ * with neither a frame nor a heartbeat, while decoding, means the stream is dead however alive the
+ * connection looks, because the heartbeat exists precisely so that a still screen and a dead host
+ * stop looking alike.</p>
+ *
+ * <p><b>The silence verdict is revocable and the refusal is not.</b> Guessing from silence is a
+ * guess: a capabilities rect, a frame or a heartbeat arriving afterwards is direct evidence and
+ * takes the console back off the pixel path. A host that answered "no encoder" said so, and
+ * nothing short of a new connection reopens it. Keeping those two apart is also what keeps the
+ * status line honest -- an ordinary VNC screen must not tell every user that H.264 is unavailable
+ * merely because nobody ever offered it one.</p>
+ */
+public final class H264ProbePolicy {
+    /**
+     * How long after connecting a capabilities rect may take before its absence is the answer.
+     *
+     * <p>The server sends it as the first answer to the first request, so anything that is going to
+     * arrive arrives in one round trip on a loopback socket. The rest of this is slack for a VM
+     * whose first framebuffer is still being composed.</p>
+     */
+    public static final long CAPS_GRACE_MS = 5_000;
+    /**
+     * How long a decoding console may hear nothing before the stream is declared dead.
+     *
+     * <p>The host beats every three seconds it has nothing else to send, so this is three intervals
+     * plus change: long enough that a late beat under load is not a funeral, short enough that a
+     * frozen console is measured in seconds.</p>
+     */
+    public static final long SILENCE_MS = 10_000;
+    /**
+     * How many times a dead stream is answered by reconnecting before it is answered by giving up.
+     *
+     * <p>One. A reconnect fixes the case this is for -- a connection or a broker that wedged with
+     * the picture frozen on it -- and a second dead stream says the fault is not the sort that a
+     * reconnect fixes. Retrying past that is a console that spends its life reconnecting instead of
+     * showing the screen the pixel path would have shown it all along.</p>
+     */
+    public static final int DEAD_STREAM_RECONNECTS = 1;
+
+    /** What the console should be showing, and therefore what its views should be doing. */
+    public enum Mode {
+        /** Pixels for now; a stream may yet arrive. Nothing to tell the user. */
+        WAITING,
+        /** The decoder is what paints this console. */
+        DECODING,
+        /** Pixels, and this console is not expecting to leave them. */
+        PIXELS
+    }
+
+    /** What {@link #tick} asks the console to do, beyond whatever {@link #mode} now says. */
+    public enum Order {
+        NOTHING,
+        /** The stream is dead. Drop the RFB session and open another; enrolment starts there. */
+        RECONNECT
+    }
+
+    private Mode mode = Mode.WAITING;
+    private boolean connected;
+    private long connectedAtMs;
+    /** When a frame or a heartbeat last arrived, and what the ten seconds are measured from. */
+    private long lastSignalMs;
+    private boolean sawCaps;
+    /** The five-second verdict. A guess from silence, and so revocable by any later evidence. */
+    private boolean assumedNoCaps;
+    /** The host answered {@link H264RectProtocol#CAPS_NO_ENCODER}. Never revoked. */
+    private boolean saidNoEncoder;
+    /** This device could not stand up a decoder. Never revoked, and not about the host at all. */
+    private boolean decoderUnsupported;
+    private int deadStreams;
+    private boolean deadStreamsExhausted;
+
+    /** An RFB session came up. The five-second clock starts here. */
+    public synchronized void onConnected(long nowMs) {
+        connected = true;
+        connectedAtMs = nowMs;
+        lastSignalMs = nowMs;
+        sawCaps = false;
+        assumedNoCaps = false;
+        // deadStreams deliberately survives: the reconnect that follows a dead stream is this
+        // policy's own doing, and a counter reset by it would ask for reconnects forever.
+        mode = isPermanent() ? Mode.PIXELS : Mode.WAITING;
+    }
+
+    /** The RFB session ended. Nothing is decided until another one comes up. */
+    public synchronized void onDisconnected() {
+        connected = false;
+        if (mode == Mode.DECODING) mode = Mode.WAITING;
+    }
+
+    /**
+     * A capabilities rect arrived. [value] is the section 1 {@code value} byte, whatever it holds.
+     */
+    public synchronized void onCapsRect(int value, long nowMs) {
+        sawCaps = true;
+        assumedNoCaps = false;
+        if (value == H264RectProtocol.CAPS_NO_ENCODER) {
+            saidNoEncoder = true;
+            mode = Mode.PIXELS;
+            return;
+        }
+        if (isPermanent()) return;
+        // CAPS_AVAILABLE, CAPS_WARMING, and anything this build cannot read. An unread value is
+        // treated as warming rather than as a refusal, for the reason every unknown token is: a
+        // newer host's new vocabulary must not permanently downgrade an old client.
+        if (value == H264RectProtocol.CAPS_AVAILABLE) enterDecoding(nowMs);
+        else mode = Mode.WAITING;
+    }
+
+    /** A frame arrived. The strongest evidence there is, and it outranks any guess from silence. */
+    public synchronized void onStreamRect(long nowMs) {
+        lastSignalMs = nowMs;
+        assumedNoCaps = false;
+        if (!isPermanent()) enterDecoding(nowMs);
+    }
+
+    /**
+     * A heartbeat arrived.
+     *
+     * <p>Liveness, and not a reason to start decoding: a heartbeat is exactly what a still screen
+     * looks like, and there is nothing in one to put on screen. It does revoke a guess made from
+     * silence, because a server that beats is a server that knew about the pseudo-encoding.</p>
+     */
+    public synchronized void onHeartbeat(long nowMs) {
+        lastSignalMs = nowMs;
+        assumedNoCaps = false;
+    }
+
+    /**
+     * This device could not stand up an H.264 decoder at all.
+     *
+     * <p>Not a fact about the host, and the only one of the permanent verdicts the console has to
+     * act on beyond changing what it shows: a client that has asked for encoding 50 is served no
+     * pixels, so one that cannot decode has to stop asking before it can have a picture again.</p>
+     */
+    public synchronized void onDecoderUnsupported() {
+        decoderUnsupported = true;
+        mode = Mode.PIXELS;
+    }
+
+    /**
+     * Advances the two silence clocks.
+     *
+     * @return what the console has to do about it. The mode may have changed either way.
+     */
+    @NonNull
+    public synchronized Order tick(long nowMs) {
+        if (!connected) return Order.NOTHING;
+        if (!sawCaps && !assumedNoCaps && !isPermanent()
+            && nowMs - connectedAtMs >= CAPS_GRACE_MS) {
+            assumedNoCaps = true;
+            mode = Mode.PIXELS;
+        }
+        if (mode == Mode.DECODING && nowMs - lastSignalMs >= SILENCE_MS) {
+            // Rearmed whichever branch is taken, so that a console that gave up does not re-report
+            // the same dead stream on every tick for the rest of its life.
+            lastSignalMs = nowMs;
+            deadStreams++;
+            if (deadStreams > DEAD_STREAM_RECONNECTS) {
+                deadStreamsExhausted = true;
+                mode = Mode.PIXELS;
+                return Order.NOTHING;
+            }
+            mode = Mode.WAITING;
+            return Order.RECONNECT;
+        }
+        return Order.NOTHING;
+    }
+
+    @NonNull
+    public synchronized Mode mode() {
+        return mode;
+    }
+
+    /** Whether nothing that can still happen on this console would put it back on the decoder. */
+    public synchronized boolean isPermanent() {
+        return saidNoEncoder || decoderUnsupported || deadStreamsExhausted;
+    }
+
+    /**
+     * Whether the host itself answered "no encoder".
+     *
+     * <p>Told apart from every other way of ending up on pixels because it is the only one worth
+     * saying out loud: it is the case where the console can never do better and the user might
+     * otherwise wonder why. Silence is not this -- an ordinary VNC server has never claimed to
+     * offer a stream, and telling its user that H.264 is unavailable would be noise.</p>
+     */
+    public synchronized boolean saidNoEncoder() {
+        return saidNoEncoder;
+    }
+
+    /** Whether this device turned out to have no decoder, which is what stops the advertisement. */
+    public synchronized boolean isDecoderUnsupported() {
+        return decoderUnsupported;
+    }
+
+    private void enterDecoding(long nowMs) {
+        // The ten seconds are measured from when frames started being expected, not from the last
+        // thing that happened to arrive. Without this a stream that warmed for a minute would be
+        // declared dead on the tick after it was finally announced.
+        if (mode != Mode.DECODING) lastSignalMs = nowMs;
+        mode = Mode.DECODING;
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/display/vnc/h264/H264RectProtocol.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/vnc/h264/H264RectProtocol.java
new file mode 100644
index 000000000..bdd669634
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/vnc/h264/H264RectProtocol.java
@@ -0,0 +1,178 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
+package cn.classfun.droidvm.ui.vm.display.vnc.h264;
+
+import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
+
+import androidx.annotation.NonNull;
+import androidx.annotation.Nullable;
+
+import java.io.IOException;
+import java.util.Arrays;
+
+/**
+ * The two rect bodies the H.264 console reads off the ordinary RFB connection, and the only part of
+ * the decoder path that can be tested without a device.
+ *
+ * <p>Both layouts are pinned by {@code plans/H264_SINGLE_PORT.md} section 1 and are implemented
+ * here as written. Neither is negotiated, neither is derived from anything, and this class is the
+ * one place either is read -- the JNI layer hands up whole rect bodies rather than parsed ones
+ * precisely so that a unit test can feed this the same literal bytes the server-side test
+ * asserts.</p>
+ *
+ * <p><b>Encoding 50</b> ("Open H.264", rfbproto.rst): {@code u32} big-endian length, {@code u32}
+ * big-endian flags, then that many bytes of Annex-B NAL units. The flags say whether the decoder's
+ * context is to be thrown away first, which is how a resize arrives: the picture behind a
+ * reset-flagged rect is a sync frame at a geometry the previous one did not have.</p>
+ *
+ * <p><b>Encoding 0x44564831</b> ("DVH1"): four bytes, always, on a rect that is always 0x0 at 0,0 --
+ * version, kind, value, reserved. It exists because RFB negotiation can say "I understand encoding
+ * 50" and cannot say either of the two things a client actually has to know: whether there is an
+ * encoder behind the server at all, and -- on a screen nobody is changing, where no frames is the
+ * correct amount of frames -- whether the connection is still alive. Bytes past the fourth and
+ * kinds this build does not know are ignored rather than refused, because the alternative is a
+ * newer host's new vocabulary dropping an old client's connection.</p>
+ *
+ * <p>Both parsers refuse rather than guess when the bytes and the lengths disagree. The length in
+ * an encoding-50 body is read twice -- once in C, to know how much to pull off the socket, and once
+ * here -- and the check that the two readings agreed is what keeps that duplication from being a
+ * place the seam can quietly come apart.</p>
+ */
+public final class H264RectProtocol {
+    /** rfbproto.rst's "Open H.264" encoding number. */
+    public static final int ENCODING_H264 = 50;
+    /** "DVH1" in ASCII: DroidVM's pseudo-encoding, in the unassigned vendor-style positive space. */
+    public static final int ENCODING_DVH1 = 0x44564831;
+
+    /** u32 BE length + u32 BE flags, ahead of the Annex-B payload. */
+    public static final int RECT_HEADER_BYTES = 8;
+    /** Throw away the decoder context this rect's geometry names, then decode. */
+    public static final int FLAG_RESET_CONTEXT = 0x1;
+    /** Throw away every decoder context, then decode. Never set together with the above. */
+    public static final int FLAG_RESET_ALL_CONTEXTS = 0x2;
+    /**
+     * The largest payload this client will allocate for. An IDR of a desktop-sized screen is orders
+     * of magnitude below it; above it the only readings are a stream that has lost its place or a
+     * malicious one, and both are better answered by ending the connection than by allocating what
+     * the number asked for.
+     */
+    public static final int MAX_PAYLOAD_BYTES = 16 * 1024 * 1024;
+
+    /** The whole of a DVH1 rect: version, kind, value, reserved. */
+    public static final int DVH_PAYLOAD_BYTES = 4;
+    /** The only version this build reads. Anything else is ignored, not refused. */
+    public static final int DVH_VERSION = 1;
+    /** {@code kind}: what the host can do. */
+    public static final int KIND_CAPABILITIES = 0;
+    /** {@code kind}: the stream is quiet, not dead. */
+    public static final int KIND_HEARTBEAT = 1;
+    /** {@code value} of a capabilities rect: an encoder is up, or is expected to come up. */
+    public static final int CAPS_AVAILABLE = 0;
+    /** {@code value}: no encoder on this host. Permanent -- stop waiting for one. */
+    public static final int CAPS_NO_ENCODER = 1;
+    /** {@code value}: asked for, not producing yet. Wait; another caps rect will say when. */
+    public static final int CAPS_WARMING = 2;
+
+    private H264RectProtocol() {
+    }
+
+    /** One encoding-50 rect: the flags it carried and the coded bytes behind them. */
+    public static final class StreamRect {
+        public final int flags;
+        @NonNull
+        public final byte[] annexB;
+
+        StreamRect(int flags, @NonNull byte[] annexB) {
+            this.flags = flags;
+            this.annexB = annexB;
+        }
+
+        /**
+         * Whether the decoder must be put back to nothing before these bytes go in.
+         *
+         * <p>The two flags are separate on the wire because a viewer that keeps one decoder context
+         * per rectangle has two different things to throw away. This console has exactly one
+         * decoder, so they are the same instruction to it, and reading them as alternatives is what
+         * the server does too -- it never sets both.</p>
+         */
+        public boolean resetsDecoder() {
+            return (flags & (FLAG_RESET_CONTEXT | FLAG_RESET_ALL_CONTEXTS)) != 0;
+        }
+    }
+
+    /**
+     * Parses one encoding-50 rect body, header included.
+     *
+     * @throws IOException when the body cannot be read as one -- too short for its own header, a
+     *                     length past the guard, or a length that disagrees with the bytes present.
+     *                     Every one of those means the stream and the parser no longer agree about
+     *                     where the next rect begins, which the caller ends the connection over.
+     */
+    @NonNull
+    public static StreamRect parseStreamRect(@Nullable byte[] rect) throws IOException {
+        if (rect == null || rect.length < RECT_HEADER_BYTES)
+            throw new IOException(fmt("h264 rect of %d bytes has no room for its header",
+                rect == null ? 0 : rect.length));
+        var length = u32(rect, 0);
+        var flags = u32(rect, 4);
+        if (length > MAX_PAYLOAD_BYTES)
+            throw new IOException(fmt(
+                "h264 rect declares %d bytes, past the %d-byte guard", length, MAX_PAYLOAD_BYTES));
+        // The reader that pulled these bytes off the socket read the same length to know how many
+        // to ask for, so a disagreement here is the two readings having diverged rather than a
+        // short frame -- and a decoder fed the difference produces rubbish rather than an error.
+        var carried = rect.length - RECT_HEADER_BYTES;
+        if (length != carried)
+            throw new IOException(fmt(
+                "h264 rect declares %d bytes and carries %d", length, carried));
+        return new StreamRect((int) flags,
+            Arrays.copyOfRange(rect, RECT_HEADER_BYTES, rect.length));
+    }
+
+    /** One DVH1 rect, as far as this build reads it. */
+    public static final class DvhRect {
+        public final int version;
+        public final int kind;
+        public final int value;
+
+        DvhRect(int version, int kind, int value) {
+            this.version = version;
+            this.kind = kind;
+            this.value = value;
+        }
+
+        public boolean isCapabilities() {
+            return kind == KIND_CAPABILITIES;
+        }
+
+        public boolean isHeartbeat() {
+            return kind == KIND_HEARTBEAT;
+        }
+    }
+
+    /**
+     * Parses one DVH1 rect payload, or returns null for one this build cannot read.
+     *
+     * <p>Null rather than an exception, and that is the whole point of the encoding: an unknown
+     * version is a newer host saying something, and a client that dropped the connection over it
+     * would turn a vocabulary gap into an outage. Bytes past the fourth are ignored for the same
+     * reason -- v1 has none, and a later version's extra ones must not make a v1 field unreadable.
+     * Short is different: fewer than four bytes is not a longer message, it is a broken one.</p>
+     */
+    @Nullable
+    public static DvhRect parseDvhRect(@Nullable byte[] payload) {
+        if (payload == null || payload.length < DVH_PAYLOAD_BYTES) return null;
+        var version = payload[0] & 0xFF;
+        if (version != DVH_VERSION) return null;
+        return new DvhRect(version, payload[1] & 0xFF, payload[2] & 0xFF);
+    }
+
+    /** Big-endian, into a long, so that the high bit is a large number and not a negative one. */
+    private static long u32(@NonNull byte[] buf, int at) {
+        return ((buf[at] & 0xFFL) << 24)
+            | ((buf[at + 1] & 0xFFL) << 16)
+            | ((buf[at + 2] & 0xFFL) << 8)
+            | (buf[at + 3] & 0xFFL);
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/graphics/ScreenBindingRow.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/graphics/ScreenBindingRow.java
index 12d64b13b..932dfde84 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/graphics/ScreenBindingRow.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/graphics/ScreenBindingRow.java
@@ -540,6 +540,17 @@ boolean isScreenEnabled() {
         return swEnabled.isChecked();
     }
 
+    /**
+     * Whether this row currently describes a binding the host might blit for -- the same question
+     * the daemon asks the stored config before it names a blit driver, asked of the live widgets
+     * so the row that names that driver appears while the user is still choosing.
+     */
+    boolean isGpuBlitBinding() {
+        var transport = currentTransport();
+        return swEnabled.isChecked() && transport != null
+            && VMScreenConfig.isGpuBlitBinding(getExporter(), transport);
+    }
+
     @NonNull
     DisplayExporter getExporter() {
         return chooseExporter.getSelectedItem();
@@ -675,7 +686,12 @@ void save(@NonNull DataItem config) {
 
     /** The port typed into this row, or -1 for "let the daemon pick one". */
     int typedVncPort() {
+        return typedPort(etPort);
+    }
+
+    private static int typedPort(@NonNull TextInputEditText field) {
         try {
+            var portStr = getEditText(field);
             return portStr.isEmpty() ? -1 : parseInt(portStr);
         } catch (Exception ignored) {
             return -1;
diff --git a/app/src/main/res/layout/activity_vm_vnc_display.xml b/app/src/main/res/layout/activity_vm_vnc_display.xml
index 38de37dde..30fc08fd3 100644
--- a/app/src/main/res/layout/activity_vm_vnc_display.xml
+++ b/app/src/main/res/layout/activity_vm_vnc_display.xml
@@ -74,6 +74,20 @@
             android:importantForAccessibility="no"
             android:scaleType="fitCenter" />
 
+        <!--
+            The H.264 decoder's output, laid over the RFB canvas and given the same geometry by
+            DisplayViewportController. Not clickable and not focusable so every touch, hover and
+            button event falls straight through to the canvas beneath it: the RFB connection is
+            still what carries input while this is up.
+        -->
+        <TextureView
+            android:id="@+id/texture_h264"
+            android:layout_width="match_parent"
+            android:layout_height="match_parent"
+            android:layout_gravity="center"
+            android:importantForAccessibility="no"
+            android:visibility="gone" />
+
         <LinearLayout
             android:id="@+id/overlay_connecting"
             android:layout_width="wrap_content"
diff --git a/app/src/main/res/layout/presentation_display.xml b/app/src/main/res/layout/presentation_display.xml
index 468223146..6fb90c0eb 100644
--- a/app/src/main/res/layout/presentation_display.xml
+++ b/app/src/main/res/layout/presentation_display.xml
@@ -1,5 +1,6 @@
 <?xml version="1.0" encoding="utf-8"?>
 <FrameLayout xmlns:android="http://schemas.android.com/apk/res/android"
+    android:id="@+id/presentation_root"
     android:layout_width="match_parent"
     android:layout_height="match_parent"
     android:background="@android:color/black">
@@ -12,4 +13,20 @@
         android:contentDescription="@string/vnc_display_title"
         android:scaleType="fitCenter" />
 
+    <!--
+        The H.264 decoder's output, over the RFB canvas and showing the same screen. Unlike the
+        phone console's, this one is not laid out by a viewport controller (there is no zoom, no
+        pan and no chrome on a presentation display), so it is sized to the stream's aspect by
+        DisplayPresentation instead, which is what the ImageView above gets for free from
+        fitCenter. Not clickable and not focusable: this window carries no input at all. Input
+        arrives through the console activity's touchpad on the phone.
+    -->
+    <TextureView
+        android:id="@+id/texture_h264"
+        android:layout_width="match_parent"
+        android:layout_height="match_parent"
+        android:layout_gravity="center"
+        android:importantForAccessibility="no"
+        android:visibility="gone" />
+
 </FrameLayout>
diff --git a/app/src/test/java/cn/classfun/droidvm/lib/store/vm/DisplayTransportCapTest.java b/app/src/test/java/cn/classfun/droidvm/lib/store/vm/DisplayTransportCapTest.java
index f0b42036b..233d72703 100644
--- a/app/src/test/java/cn/classfun/droidvm/lib/store/vm/DisplayTransportCapTest.java
+++ b/app/src/test/java/cn/classfun/droidvm/lib/store/vm/DisplayTransportCapTest.java
@@ -6,6 +6,8 @@
 import static org.junit.Assert.assertNull;
 import static org.junit.Assert.assertTrue;
 
+import androidx.annotation.Nullable;
+
 import org.junit.Test;
 
 import cn.classfun.droidvm.lib.store.base.DataItem;
@@ -81,13 +83,54 @@ public void whatThisBuildRefusesIsListedRatherThanHidden() {
             DisplayTransportCap.unimplementedFor(GPU0, DisplayExporter.NATIVE));
         assertEquals(0,
             DisplayTransportCap.unimplementedFor(FB, DisplayExporter.NATIVE).length);
+        // Nothing is greyed on VNC's ladder any more: the encoder above its blit was the last rung
+        // it had left, and it is built on both screens because it is the exporter's rung rather
+        // than either screen's.
+        for (var screen : new String[]{GPU0, FB})
+            assertEquals(0,
+                DisplayTransportCap.unimplementedFor(screen, DisplayExporter.VNC).length);
+    }
+
+    @Test
+    public void vncIsBuiltToTheTopOfItsLadderAndTheNativeDisplayIsNot() {
+        // The two exporters shared a set of implemented rungs for exactly as long as they were the
+        // same height. VNC's encoder landing is what separated them, so this is where the two
+        // ladders stop being interchangeable -- and it is the reason isImplemented takes the
+        // exporter rather than answering for both at once.
+        for (var exporter : new DisplayExporter[]{DisplayExporter.NATIVE, DisplayExporter.VNC}) {
+            assertTrue(DisplayTransportCap.isImplemented(exporter, DisplayTransportCap.CPU));
+            assertTrue(DisplayTransportCap.isImplemented(exporter, DisplayTransportCap.GPU));
+        }
+        assertTrue(DisplayTransportCap.isImplemented(
+            DisplayExporter.VNC, DisplayTransportCap.GPU_HW));
+        assertFalse(DisplayTransportCap.isImplemented(
+            DisplayExporter.NATIVE, DisplayTransportCap.ZERO));
+        // Rungs from the other ladder are still not this one's, whatever this build reached: the
+        // native display has no encoder to hand a frame to and VNC has nowhere to lend a buffer.
+        assertFalse(DisplayTransportCap.isImplemented(
+            DisplayExporter.NATIVE, DisplayTransportCap.GPU_HW));
+        assertFalse(DisplayTransportCap.isImplemented(
+            DisplayExporter.VNC, DisplayTransportCap.ZERO));
+        // A screen nobody watches has no edge, so there is nothing for a build to have reached.
+        for (var cap : DisplayTransportCap.values())
+            assertFalse(DisplayTransportCap.isImplemented(DisplayExporter.NONE, cap));
     }
 
     @Test
     public void theDefaultIsTheHighestRungThatActuallyWorks() {
         // Not the highest offered: defaulting every VM to a ceiling nothing can satisfy is a
         // promise the negotiation would quietly break. This one restricts nothing that works, and
+        // it rises on its own as the rungs land -- which is what VNC's just did for the second
+        // time. Nothing here was edited to make that happen; the rule produced it.
+        for (var screen : new String[]{GPU0, FB}) {
             assertEquals(DisplayTransportCap.GPU,
+                DisplayTransportCap.defaultFor(screen, DisplayExporter.NATIVE));
+            // And the expensive-sounding one is free: a ceiling is a permit, and the encoder is
+            // built only when a client opens the side channel, so this default costs a VM nobody
+            // watches over H.264 exactly what the GPU rung cost it.
+            assertEquals(DisplayTransportCap.GPU_HW,
+                DisplayTransportCap.defaultFor(screen, DisplayExporter.VNC));
+        }
     }
 
     @Test
@@ -110,10 +153,33 @@ public void aScreenWithNoStoredCeilingAnswersWithItsEdgeDefault() {
         var fb = VMScreenConfig.of(item, VMScreenConfig.ID_SIMPLEFB);
         fb.setEnabled(true);
         fb.setExporter(DisplayExporter.VNC);
+        assertEquals(DisplayTransportCap.GPU_HW, fb.getTransportCap());
         fb.setExporter(DisplayExporter.NATIVE);
         assertEquals(DisplayTransportCap.GPU, fb.getTransportCap());
     }
 
+    @Test
+    public void onlyTheUnsaidCeilingFollowsTheDefaultUp() {
+        // The default rising is for screens that never named one. A config that says "cpu" said it
+        // on purpose -- to keep a screen off the blit -- and reads back the same after two rungs
+        // above it were built, which is also what keeps the flag being written for it. Nothing
+        // rewrites the file, so this holds for a config saved by any older build.
+        var item = DataItem.newObject();
+        var fb = VMScreenConfig.of(item, VMScreenConfig.ID_SIMPLEFB);
+        fb.setEnabled(true);
+        fb.setExporter(DisplayExporter.VNC);
+        fb.setTransportCap(DisplayTransportCap.CPU);
+        assertEquals(DisplayTransportCap.CPU, fb.getTransportCap());
+        assertEquals("cpu", emittedToken(fb));
+        // The same holds one rung up, and that one is new: a config written when the GPU rung was
+        // VNC's top named nothing, and reads back as the encoder today -- while a config that
+        // named "gpu" outright keeps meaning "blit, but no encoder", which is now a thing the
+        // command line has a word for.
+        fb.setTransportCap(DisplayTransportCap.GPU);
+        assertEquals(DisplayTransportCap.GPU, fb.getTransportCap());
+        assertEquals("gpu", emittedToken(fb));
+    }
+
     @Test
     public void aCeilingTheEdgeDoesNotHaveFallsBackWithoutBeingErased() {
         // Reading under a different exporter must not lose the answer: the user is allowed to look
@@ -124,34 +190,134 @@ public void aCeilingTheEdgeDoesNotHaveFallsBackWithoutBeingErased() {
         gpu0.setExporter(DisplayExporter.NATIVE);
         gpu0.setTransportCap(DisplayTransportCap.ZERO);
         assertEquals(DisplayTransportCap.ZERO, gpu0.getTransportCap());
+        // Zero copy is a rung VNC's ladder does not have at all, so under that exporter the
+        // stored value is not a ceiling but a word from another ladder, and the answer is VNC's
+        // own default.
         gpu0.setExporter(DisplayExporter.VNC);
+        assertEquals(DisplayTransportCap.GPU_HW, gpu0.getTransportCap());
         gpu0.setExporter(DisplayExporter.NATIVE);
         assertEquals(DisplayTransportCap.ZERO, gpu0.getTransportCap());
     }
 
     @Test
+    public void theCommandLineNamesACeilingOnlyWhereItGivesSomethingUp() {
+        // The whole emission table. A ceiling at the top of what the build can reach says nothing
+        // the host would not have worked out, and a flag whose presence and absence mean the same
+        // thing is worse than no flag -- so the top rung of each ladder is spelt by silence, and
+        // the absence of the flag is therefore not "unspecified".
+        for (var screen : new String[]{GPU0, FB}) {
+            // Native: the blit is the top, so only the rung below it is worth naming. Unchanged by
+            // this round, which is the point of checking it here.
+            assertEquals("cpu", token(screen, DisplayExporter.NATIVE, DisplayTransportCap.CPU));
+            assertNull(token(screen, DisplayExporter.NATIVE, DisplayTransportCap.GPU));
+            // A ceiling above what is built restricts nothing, so it is not named either -- and it
+            // must not be, since crosvm has no word for a rung it has not got.
+            assertNull(token(screen, DisplayExporter.NATIVE, DisplayTransportCap.ZERO));
+
+            // VNC gained a middle when the encoder landed above the blit, and "gpu" is what that
+            // middle is called: blit this screen, but do not stand an encoder behind it.
+            assertEquals("cpu", token(screen, DisplayExporter.VNC, DisplayTransportCap.CPU));
+            assertEquals("gpu", token(screen, DisplayExporter.VNC, DisplayTransportCap.GPU));
+            assertNull(token(screen, DisplayExporter.VNC, DisplayTransportCap.GPU_HW));
+
+            // Words from the other ladder are refused rather than passed through: this edge does
+            // not offer them, so there is no ceiling here for them to name.
+            assertNull(token(screen, DisplayExporter.VNC, DisplayTransportCap.ZERO));
+            assertNull(token(screen, DisplayExporter.NATIVE, DisplayTransportCap.GPU_HW));
+
+            // And a screen nobody watches has no exporter flag for a fragment to ride on.
+            for (var cap : DisplayTransportCap.values())
+                assertNull(token(screen, DisplayExporter.NONE, cap));
+        }
+    }
+
+    @Test
+    public void aDefaultConfigurationNamesNoCeilingOnEitherExporter() {
+        // What a brand-new VM puts on the command line, which is nothing -- on either exporter and
+        // on either screen. The VNC half of this is new: its default rose a rung, and the flag it
+        // was written out with two builds ago is gone from every default configuration.
         var item = DataItem.newObject();
+        for (var id : VMScreenConfig.IDS) {
+            var screen = VMScreenConfig.of(item, id);
+            screen.setEnabled(true);
+            for (var exporter : new DisplayExporter[]{DisplayExporter.NATIVE, DisplayExporter.VNC}) {
+                screen.setExporter(exporter);
+                assertNull(emittedToken(screen));
+            }
+        }
+    }
 
+    /** What {@code CrosvmBackendInstance.transportCapArg} looks up for a screen. */
+    @Nullable
+    private static String emittedToken(VMScreenConfig screen) {
+        return DisplayTransportCap.emittedToken(
+            screen.id, screen.getExporter(), screen.getTransportCap());
     }
 
+    @Nullable
+    private static String token(String screenId, DisplayExporter exporter,
+                                DisplayTransportCap ceiling) {
+        return DisplayTransportCap.emittedToken(screenId, exporter, ceiling);
     }
 
     @Test
+    public void theBlitDriverIsPointedAtAnyBindingThatCouldClimbToIt() {
+        // CROSVM_DISPLAY_VULKAN_LIBRARY is process-wide and both sinks dlopen it now -- the native
+        // bridge to blit into a Surface, the VNC sink into a headless target -- so the question it
+        // is set from is "could any binding this VM has blit", not "has this VM a native binding".
+        // Asking the narrower one left a VNC-only VM with no driver to load, which is a CPU copy
+        // for a config whose ceiling says otherwise.
         var item = DataItem.newObject();
+        assertFalse(VMScreenConfig.hasGpuBlitBinding(item));
 
         var fb = VMScreenConfig.of(item, VMScreenConfig.ID_SIMPLEFB);
         fb.setEnabled(true);
         fb.setExporter(DisplayExporter.NATIVE);
+        assertTrue(VMScreenConfig.hasGpuBlitBinding(item));
 
         // The switch is the device, so a binding on a screen the VM does not have is not one.
         fb.setEnabled(false);
+        assertFalse(VMScreenConfig.hasGpuBlitBinding(item));
 
+        // A VNC binding at its default ceiling is one of them, which is the whole change: this is
+        // the ordinary VM a new config comes up as. The default is the encoder rung now, and it
+        // still answers yes for the same reason -- the encoder is fed by the same blit, so the
+        // predicate needed no clause of its own for it. This is that, checked rather than assumed.
         fb.setEnabled(true);
         fb.setExporter(DisplayExporter.VNC);
+        assertEquals(DisplayTransportCap.GPU_HW, fb.getTransportCap());
+        assertTrue(VMScreenConfig.hasGpuBlitBinding(item));
+        assertTrue(VMScreenConfig.isGpuBlitBinding(
+            DisplayExporter.VNC, DisplayTransportCap.GPU_HW));
+
+        // Named outright rather than defaulted to, in case a later default moves off it.
+        fb.setTransportCap(DisplayTransportCap.GPU_HW);
+        assertTrue(VMScreenConfig.hasGpuBlitBinding(item));
+        fb.setTransportCap(DisplayTransportCap.GPU);
+        assertTrue(VMScreenConfig.hasGpuBlitBinding(item));
+
+        // Capped at the CPU copy on purpose, it is not: crosvm skips the blit outright there, so
+        // naming a driver would be describing a load that never happens.
+        fb.setTransportCap(DisplayTransportCap.CPU);
+        assertFalse(VMScreenConfig.hasGpuBlitBinding(item));
+
+        // One capped screen does not answer for the VM. The env is process-wide, so any one
+        // binding that could blit is enough to need it.
         var gpu0 = VMScreenConfig.of(item, VMScreenConfig.ID_GPU0);
         gpu0.setEnabled(true);
         gpu0.setExporter(DisplayExporter.VNC);
+        assertTrue(VMScreenConfig.hasGpuBlitBinding(item));
+
+        // A native binding answers yes whatever its ceiling says: the bridge is pointed at a
+        // driver it may not dlopen, which costs nothing, where the reverse mistake costs the GPU
+        // path in silence. So the widened question still contains the one it used to ask.
         gpu0.setExporter(DisplayExporter.NATIVE);
+        gpu0.setTransportCap(DisplayTransportCap.CPU);
+        assertTrue(VMScreenConfig.hasGpuBlitBinding(item));
+
+        // And a screen nobody watches is not a binding at all, whatever ceiling it remembers.
+        gpu0.setExporter(DisplayExporter.NONE);
+        assertFalse(VMScreenConfig.hasGpuBlitBinding(item));
     }
 
     @Test
@@ -174,7 +340,30 @@ public void aSimplefbWidthOffTheGrainSpendsTheGpuCopy() {
         assertFalse(DisplayTransportCap.cpuFallbackFromWidth(
             GPU0, DisplayExporter.NATIVE, DisplayTransportCap.GPU, 1400));
 
+        // VNC's GPU half imports the same dma-buf under the same rule, so the warning appeared on
+        // that edge the moment the rung was implemented -- the condition asks isImplemented rather
+        // than naming the native display, and was not touched to make this true.
+        assertTrue(DisplayTransportCap.cpuFallbackFromWidth(
             FB, DisplayExporter.VNC, DisplayTransportCap.GPU, 1400));
+        assertFalse(DisplayTransportCap.cpuFallbackFromWidth(
+            FB, DisplayExporter.VNC, DisplayTransportCap.GPU, 1408));
+        assertFalse(DisplayTransportCap.cpuFallbackFromWidth(
+            FB, DisplayExporter.VNC, DisplayTransportCap.CPU, 1400));
+
+        // And on the encoder rung, which is where it matters most now: that is VNC's default, so a
+        // condition that only knew about the GPU rung would have gone quiet for exactly the
+        // configuration this warning exists for, on the same day the default moved. The width
+        // costs the blit whatever the blit was going to feed.
+        assertTrue(DisplayTransportCap.cpuFallbackFromWidth(
+            FB, DisplayExporter.VNC, DisplayTransportCap.GPU_HW, 1400));
+        assertFalse(DisplayTransportCap.cpuFallbackFromWidth(
+            FB, DisplayExporter.VNC, DisplayTransportCap.GPU_HW, 1408));
+        // The virtio-gpu scanout still meets the rule by construction, encoder or not.
+        assertFalse(DisplayTransportCap.cpuFallbackFromWidth(
+            GPU0, DisplayExporter.VNC, DisplayTransportCap.GPU_HW, 1400));
+
+        // A screen nobody is watching has no edge for a transport to run along at all, so there is
+        // no rung for a width to cost it.
         assertFalse(DisplayTransportCap.cpuFallbackFromWidth(
             FB, DisplayExporter.NONE, DisplayTransportCap.GPU, 1400));
 
diff --git a/app/src/test/java/cn/classfun/droidvm/ui/vm/display/vnc/h264/H264ProbePolicyTest.java b/app/src/test/java/cn/classfun/droidvm/ui/vm/display/vnc/h264/H264ProbePolicyTest.java
new file mode 100644
index 000000000..a575beb31
--- /dev/null
+++ b/app/src/test/java/cn/classfun/droidvm/ui/vm/display/vnc/h264/H264ProbePolicyTest.java
@@ -0,0 +1,244 @@
+package cn.classfun.droidvm.ui.vm.display.vnc.h264;
+
+import static org.junit.Assert.assertEquals;
+import static org.junit.Assert.assertFalse;
+import static org.junit.Assert.assertTrue;
+
+import org.junit.Test;
+
+import cn.classfun.droidvm.ui.vm.display.vnc.h264.H264ProbePolicy.Mode;
+import cn.classfun.droidvm.ui.vm.display.vnc.h264.H264ProbePolicy.Order;
+
+/**
+ * The client rules of {@code plans/H264_SINGLE_PORT.md} section 1, read off the policy rather than
+ * off a stopwatch.
+ *
+ * <p>What is being pinned is a set of statements about the future -- "give up after five seconds of
+ * this", "declare it dead after ten seconds of that" -- which is otherwise only observable by
+ * sitting in front of a console with a VM in the right state. So the rules live in a class with no
+ * clock and no Android in it, and the time is a parameter every one of these tests supplies.</p>
+ */
+public class H264ProbePolicyTest {
+    private static final long T0 = 100_000;
+
+    @Test
+    public void aCapabilitiesRectSayingAvailablePutsTheConsoleOnTheDecoder() {
+        var p = connected();
+        assertEquals(Mode.WAITING, p.mode());
+        p.onCapsRect(H264RectProtocol.CAPS_AVAILABLE, T0 + 40);
+        assertEquals(Mode.DECODING, p.mode());
+        assertFalse(p.isPermanent());
+    }
+
+    @Test
+    public void warmingIsAWaitAndNotAnAnswer() {
+        var p = connected();
+        p.onCapsRect(H264RectProtocol.CAPS_WARMING, T0 + 40);
+        assertEquals(Mode.WAITING, p.mode());
+        // And the five seconds do not run out underneath it: the server said it would say more, so
+        // there is no silence to draw a conclusion from.
+        assertEquals(Order.NOTHING, p.tick(T0 + 60_000));
+        assertEquals(Mode.WAITING, p.mode());
+        assertFalse(p.isPermanent());
+
+        // Minutes later the encoder comes up, and the console is not still waiting for a timer.
+        p.onCapsRect(H264RectProtocol.CAPS_AVAILABLE, T0 + 90_000);
+        assertEquals(Mode.DECODING, p.mode());
+        // The ten seconds are measured from here, not from the connect: a stream announced after a
+        // long warm-up must not be declared dead on the tick after it was announced.
+        assertEquals(Order.NOTHING, p.tick(T0 + 95_000));
+        assertEquals(Mode.DECODING, p.mode());
+    }
+
+    @Test
+    public void aHostWithNoEncoderEndsTheQuestionForGood() {
+        var p = connected();
+        p.onCapsRect(H264RectProtocol.CAPS_NO_ENCODER, T0 + 40);
+        assertEquals(Mode.PIXELS, p.mode());
+        assertTrue(p.isPermanent());
+        assertTrue(p.saidNoEncoder());
+        // Nothing reopens it while this console is open -- not a later capabilities rect, not
+        // frames. The host does not grow an encoder while the VM runs.
+        p.onCapsRect(H264RectProtocol.CAPS_AVAILABLE, T0 + 5_000);
+        assertEquals(Mode.PIXELS, p.mode());
+        p.onStreamRect(T0 + 6_000);
+        assertEquals(Mode.PIXELS, p.mode());
+        // Not even a reconnection: it is a fact about the host, not about the connection.
+        p.onConnected(T0 + 20_000);
+        assertEquals(Mode.PIXELS, p.mode());
+        assertTrue(p.saidNoEncoder());
+    }
+
+    @Test
+    public void anUnreadableCapabilitiesValueIsAWaitAndNotARefusal() {
+        // A newer host's new vocabulary must not permanently downgrade an old client, which is the
+        // same rule the version byte follows on the wire.
+        var p = connected();
+        p.onCapsRect(9, T0 + 40);
+        assertEquals(Mode.WAITING, p.mode());
+        assertFalse(p.isPermanent());
+        assertFalse(p.saidNoEncoder());
+    }
+
+    @Test
+    public void anOldServerIsFiveSecondsOfSilenceAndThenThePixelPath() {
+        // The server ignored both encodings and is serving pixels. There is no capabilities rect
+        // coming, and the console must not sit in "warming" for the rest of its life.
+        var p = connected();
+        assertEquals(Order.NOTHING, p.tick(T0 + 4_999));
+        assertEquals(Mode.WAITING, p.mode());
+        assertEquals(Order.NOTHING, p.tick(T0 + H264ProbePolicy.CAPS_GRACE_MS));
+        assertEquals(Mode.PIXELS, p.mode());
+    }
+
+    @Test
+    public void theSilenceVerdictIsAGuessAndEvidenceOverturnsIt() {
+        var p = connected();
+        p.tick(T0 + H264ProbePolicy.CAPS_GRACE_MS);
+        assertEquals(Mode.PIXELS, p.mode());
+        // Never permanent, and never announced: an ordinary VNC server has not refused anything,
+        // so there is nothing to tell the user and nothing to stop asking about.
+        assertFalse(p.isPermanent());
+        assertFalse(p.saidNoEncoder());
+
+        // A capabilities rect that merely arrived late outranks a conclusion drawn from its
+        // absence.
+        p.onCapsRect(H264RectProtocol.CAPS_AVAILABLE, T0 + 8_000);
+        assertEquals(Mode.DECODING, p.mode());
+    }
+
+    @Test
+    public void framesAlsoOverturnTheSilenceVerdict() {
+        var p = connected();
+        p.tick(T0 + H264ProbePolicy.CAPS_GRACE_MS);
+        assertEquals(Mode.PIXELS, p.mode());
+        p.onStreamRect(T0 + 6_000);
+        assertEquals(Mode.DECODING, p.mode());
+    }
+
+    @Test
+    public void aHeartbeatIsLivenessAndNotAReasonToDecode() {
+        var p = connected();
+        p.onCapsRect(H264RectProtocol.CAPS_WARMING, T0 + 40);
+        // There is nothing in a heartbeat to put on screen, so it must not flip the console onto a
+        // decoder that would have no frames to show.
+        p.onHeartbeat(T0 + 3_000);
+        assertEquals(Mode.WAITING, p.mode());
+        // It does say the server knows about the pseudo-encoding, so the five seconds are off.
+        assertEquals(Order.NOTHING, p.tick(T0 + 30_000));
+        assertEquals(Mode.WAITING, p.mode());
+    }
+
+    @Test
+    public void heartbeatsKeepAnIdleStreamAlive() {
+        var p = connected();
+        p.onCapsRect(H264RectProtocol.CAPS_AVAILABLE, T0);
+        // A still screen produces no frames, which is why the host beats every three seconds. Half
+        // a minute of that is a console that is fine, not one that is frozen.
+        for (var t = T0 + 3_000; t <= T0 + 30_000; t += 3_000) {
+            p.onHeartbeat(t);
+            assertEquals(Order.NOTHING, p.tick(t + 1_000));
+        }
+        assertEquals(Mode.DECODING, p.mode());
+    }
+
+    @Test
+    public void tenSecondsOfNothingAtAllIsADeadStream() {
+        var p = connected();
+        p.onCapsRect(H264RectProtocol.CAPS_AVAILABLE, T0);
+        p.onStreamRect(T0 + 1_000);
+        assertEquals(Order.NOTHING, p.tick(T0 + 1_000 + H264ProbePolicy.SILENCE_MS - 1));
+        assertEquals(Mode.DECODING, p.mode());
+        // No frame and no beat: the host is gone or wedged, however alive the socket looks.
+        assertEquals(Order.RECONNECT, p.tick(T0 + 1_000 + H264ProbePolicy.SILENCE_MS));
+        assertEquals(Mode.WAITING, p.mode());
+        assertFalse(p.isPermanent());
+    }
+
+    @Test
+    public void theSameDeadStreamIsNotReportedOnEveryTick() {
+        var p = connected();
+        p.onCapsRect(H264RectProtocol.CAPS_AVAILABLE, T0);
+        assertEquals(Order.RECONNECT, p.tick(T0 + H264ProbePolicy.SILENCE_MS));
+        // The mode left DECODING, so there is nothing for the silence clock to be about until a
+        // stream comes back.
+        assertEquals(Order.NOTHING, p.tick(T0 + H264ProbePolicy.SILENCE_MS + 1_000));
+        assertEquals(Order.NOTHING, p.tick(T0 + 120_000));
+    }
+
+    @Test
+    public void aSecondDeadStreamIsThePixelPathForGood() {
+        var p = connected();
+        p.onCapsRect(H264RectProtocol.CAPS_AVAILABLE, T0);
+        assertEquals(Order.RECONNECT, p.tick(T0 + H264ProbePolicy.SILENCE_MS));
+
+        // The reconnect this asked for. The counter deliberately survives it -- reset there, the
+        // console would ask for reconnects forever.
+        var t = T0 + 20_000;
+        p.onConnected(t);
+        p.onCapsRect(H264RectProtocol.CAPS_AVAILABLE, t);
+        assertEquals(Mode.DECODING, p.mode());
+        assertEquals(Order.NOTHING, p.tick(t + H264ProbePolicy.SILENCE_MS));
+        assertEquals(Mode.PIXELS, p.mode());
+        assertTrue(p.isPermanent());
+        // And not announced as a host refusal, because it was not one.
+        assertFalse(p.saidNoEncoder());
+        // A third connection inherits the verdict rather than starting the cycle again.
+        p.onConnected(t + 60_000);
+        assertEquals(Mode.PIXELS, p.mode());
+    }
+
+    @Test
+    public void aDeviceWithNoDecoderIsPermanentAndIsNotTheHostsFault() {
+        var p = connected();
+        p.onCapsRect(H264RectProtocol.CAPS_AVAILABLE, T0);
+        assertEquals(Mode.DECODING, p.mode());
+        p.onDecoderUnsupported();
+        assertEquals(Mode.PIXELS, p.mode());
+        assertTrue(p.isPermanent());
+        assertTrue(p.isDecoderUnsupported());
+        // Told apart from the host having no encoder: the console withdraws the encodings for this
+        // one, and says nothing about the host.
+        assertFalse(p.saidNoEncoder());
+        p.onConnected(T0 + 30_000);
+        assertEquals(Mode.PIXELS, p.mode());
+        p.onCapsRect(H264RectProtocol.CAPS_AVAILABLE, T0 + 30_100);
+        assertEquals(Mode.PIXELS, p.mode());
+    }
+
+    @Test
+    public void nothingIsDecidedBeforeAConnectionOrAfterOneEnds() {
+        var p = new H264ProbePolicy();
+        // No connection, no clocks: an un-started policy that timed out would put a console on the
+        // pixel path before it had asked anything.
+        assertEquals(Order.NOTHING, p.tick(T0 + 600_000));
+        assertEquals(Mode.WAITING, p.mode());
+
+        p.onConnected(T0);
+        p.onCapsRect(H264RectProtocol.CAPS_AVAILABLE, T0);
+        assertEquals(Mode.DECODING, p.mode());
+        p.onDisconnected();
+        assertEquals(Mode.WAITING, p.mode());
+        assertEquals(Order.NOTHING, p.tick(T0 + 600_000));
+    }
+
+    @Test
+    public void aReconnectionRestartsTheFiveSecondClock() {
+        var p = connected();
+        p.onCapsRect(H264RectProtocol.CAPS_AVAILABLE, T0);
+        p.onDisconnected();
+        var t = T0 + 60_000;
+        p.onConnected(t);
+        assertEquals(Mode.WAITING, p.mode());
+        assertEquals(Order.NOTHING, p.tick(t + H264ProbePolicy.CAPS_GRACE_MS - 1));
+        assertEquals(Mode.WAITING, p.mode());
+        assertEquals(Order.NOTHING, p.tick(t + H264ProbePolicy.CAPS_GRACE_MS));
+        assertEquals(Mode.PIXELS, p.mode());
+    }
+
+    private static H264ProbePolicy connected() {
+        var p = new H264ProbePolicy();
+        p.onConnected(T0);
+        return p;
+    }
+}
diff --git a/app/src/test/java/cn/classfun/droidvm/ui/vm/display/vnc/h264/H264RectProtocolTest.java b/app/src/test/java/cn/classfun/droidvm/ui/vm/display/vnc/h264/H264RectProtocolTest.java
new file mode 100644
index 000000000..f7a9151f4
--- /dev/null
+++ b/app/src/test/java/cn/classfun/droidvm/ui/vm/display/vnc/h264/H264RectProtocolTest.java
@@ -0,0 +1,215 @@
+package cn.classfun.droidvm.ui.vm.display.vnc.h264;
+
+import static org.junit.Assert.assertArrayEquals;
+import static org.junit.Assert.assertEquals;
+import static org.junit.Assert.assertFalse;
+import static org.junit.Assert.assertNotNull;
+import static org.junit.Assert.assertNull;
+import static org.junit.Assert.assertThrows;
+import static org.junit.Assert.assertTrue;
+
+import org.junit.Test;
+
+import java.io.IOException;
+
+/**
+ * The seam, in bytes.
+ *
+ * <p>Every fixture here is written from {@code plans/H264_SINGLE_PORT.md} section 1 rather than
+ * from the parser, and is meant to be diffed literally against the bytes the server-side test
+ * asserts. That is the whole point of them: two agents implementing one contract from one document
+ * is exactly the arrangement in which each can be internally consistent and the pair still not
+ * meet, and the only check that catches it is the same literal bytes appearing on both sides.</p>
+ *
+ * <p>The hex is spelt out rather than built, for the same reason. A fixture assembled by a helper
+ * that shares its idea of byte order with the code under test asserts that the code agrees with
+ * itself.</p>
+ */
+public class H264RectProtocolTest {
+    /**
+     * Twenty-four bytes of Annex-B: three NAL units behind four-byte start codes, typed 7 (SPS),
+     * 8 (PPS) and 5 (IDR). Synthetic past the type byte -- what is being pinned is the framing
+     * around it, not the coded picture, and a decoder never sees this.
+     */
+    private static final String SYNC_ANNEX_B =
+        "000000016742001E" + "0000000168CE3C80" + "0000000165888421";
+
+    /** Eight bytes of Annex-B: one NAL unit typed 1, a non-IDR slice -- an ordinary later frame. */
+    private static final String DELTA_ANNEX_B = "00000001419A1234";
+
+    // ---- Encoding 50: u32 BE length, u32 BE flags, then that many bytes of Annex-B. ----
+
+    @Test
+    public void aSyncRectCarriesItsLengthItsResetFlagAndItsPayload() {
+        // length 0x00000018 = 24, flags 0x00000002 = ResetAllContexts, then the 24 bytes.
+        var body = hex("00000018", "00000002", SYNC_ANNEX_B);
+        assertEquals(H264RectProtocol.RECT_HEADER_BYTES + 24, body.length);
+
+        var rect = parse(body);
+        assertEquals(H264RectProtocol.FLAG_RESET_ALL_CONTEXTS, rect.flags);
+        assertTrue(rect.resetsDecoder());
+        assertArrayEquals(hex(SYNC_ANNEX_B), rect.annexB);
+    }
+
+    @Test
+    public void anOrdinaryRectResetsNothing() {
+        var body = hex("00000008", "00000000", DELTA_ANNEX_B);
+        var rect = parse(body);
+        assertEquals(0, rect.flags);
+        assertFalse(rect.resetsDecoder());
+        assertArrayEquals(hex(DELTA_ANNEX_B), rect.annexB);
+    }
+
+    @Test
+    public void theOtherResetFlagIsAlsoAReset() {
+        // 0x1 is ResetContext: a viewer keeping one context per rectangle has two different things
+        // to throw away, and this console has one codec, so both flags reach it as the same order.
+        var body = hex("00000008", "00000001", DELTA_ANNEX_B);
+        var rect = parse(body);
+        assertEquals(H264RectProtocol.FLAG_RESET_CONTEXT, rect.flags);
+        assertTrue(rect.resetsDecoder());
+    }
+
+    @Test
+    public void theLengthIsBigEndianAndNotTheOtherWay() {
+        // The one byte that separates 24 from 402653184. Little-endian here would read the flags
+        // word as the length and walk off the end of every frame after the first.
+        var body = hex("00000018", "00000000", SYNC_ANNEX_B);
+        assertEquals(24, parse(body).annexB.length);
+        var swapped = hex("18000000", "00000000", SYNC_ANNEX_B);
+        assertThrows(IOException.class, () -> H264RectProtocol.parseStreamRect(swapped));
+    }
+
+    @Test
+    public void aLengthThatDisagreesWithTheBytesIsRefused() {
+        // The reader that pulled these off the socket read the same length to know how many to
+        // ask for, so this is the two readings having diverged. Refusing is what keeps that
+        // duplication from being a place the seam can quietly come apart.
+        var short_ = hex("00000018", "00000000", DELTA_ANNEX_B);
+        assertThrows(IOException.class, () -> H264RectProtocol.parseStreamRect(short_));
+        var long_ = hex("00000004", "00000000", DELTA_ANNEX_B);
+        assertThrows(IOException.class, () -> H264RectProtocol.parseStreamRect(long_));
+    }
+
+    @Test
+    public void aBodyTooShortForItsOwnHeaderIsRefused() {
+        assertThrows(IOException.class, () -> H264RectProtocol.parseStreamRect(hex("00000000")));
+        assertThrows(IOException.class, () -> H264RectProtocol.parseStreamRect(new byte[0]));
+        assertThrows(IOException.class, () -> H264RectProtocol.parseStreamRect(null));
+    }
+
+    @Test
+    public void aLengthPastTheGuardIsRefusedWithoutAllocating() {
+        // 0x7FFFFFFF. Read into a long, so the high bit is a large number and not a negative one --
+        // a signed read would make this a negative length and sail past the guard.
+        var body = hex("7FFFFFFF", "00000000", DELTA_ANNEX_B);
+        assertThrows(IOException.class, () -> H264RectProtocol.parseStreamRect(body));
+        var high = hex("FFFFFFFF", "00000000", DELTA_ANNEX_B);
+        assertThrows(IOException.class, () -> H264RectProtocol.parseStreamRect(high));
+    }
+
+    @Test
+    public void anEmptyPayloadIsAWellFormedRectWithNothingInIt() {
+        var rect = parse(hex("00000000" + "00000002"));
+        assertEquals(0, rect.annexB.length);
+        assertTrue(rect.resetsDecoder());
+    }
+
+    // ---- 0x44564831: version, kind, value, reserved. Four bytes, always. ----
+
+    @Test
+    public void theCapabilitiesRectSaysWhetherThereIsAnEncoder() {
+        // 01 00 00 00 -- v1, kind 0 (capabilities), value 0 (h264 stream available), reserved 0.
+        var available = H264RectProtocol.parseDvhRect(hex("01000000"));
+        assertNotNull(available);
+        assertEquals(H264RectProtocol.DVH_VERSION, available.version);
+        assertTrue(available.isCapabilities());
+        assertFalse(available.isHeartbeat());
+        assertEquals(H264RectProtocol.CAPS_AVAILABLE, available.value);
+
+        // 01 00 01 00 -- value 1: no encoder on this host, permanent, stop waiting.
+        var none = H264RectProtocol.parseDvhRect(hex("01000100"));
+        assertNotNull(none);
+        assertTrue(none.isCapabilities());
+        assertEquals(H264RectProtocol.CAPS_NO_ENCODER, none.value);
+
+        // 01 00 02 00 -- value 2: warming. Asked for, not producing yet.
+        var warming = H264RectProtocol.parseDvhRect(hex("01000200"));
+        assertNotNull(warming);
+        assertTrue(warming.isCapabilities());
+        assertEquals(H264RectProtocol.CAPS_WARMING, warming.value);
+    }
+
+    @Test
+    public void theHeartbeatRectIsKindOneAndCarriesNothing() {
+        // 01 01 00 00 -- v1, kind 1 (heartbeat), value 0, reserved 0.
+        var beat = H264RectProtocol.parseDvhRect(hex("01010000"));
+        assertNotNull(beat);
+        assertTrue(beat.isHeartbeat());
+        assertFalse(beat.isCapabilities());
+        assertEquals(0, beat.value);
+    }
+
+    @Test
+    public void anUnknownKindParsesAndIsNeitherOfTheTwo() {
+        // Section 1: a client must ignore unknown kinds. Ignoring is the caller's job, so what
+        // this side owes is a rect that answers "no" to both questions rather than one that
+        // throws.
+        var odd = H264RectProtocol.parseDvhRect(hex("01070000"));
+        assertNotNull(odd);
+        assertEquals(7, odd.kind);
+        assertFalse(odd.isCapabilities());
+        assertFalse(odd.isHeartbeat());
+    }
+
+    @Test
+    public void anUnknownVersionIsIgnoredRatherThanRefused() {
+        // A newer host saying something. Dropping the connection over it would turn a vocabulary
+        // gap into an outage, which is the failure this whole encoding exists to avoid.
+        assertNull(H264RectProtocol.parseDvhRect(hex("02000000")));
+        assertNull(H264RectProtocol.parseDvhRect(hex("00000000")));
+    }
+
+    @Test
+    public void bytesPastTheFourthAreIgnored() {
+        // v1 has none. A later version's extra ones must not make a v1 field unreadable.
+        var beat = H264RectProtocol.parseDvhRect(hex("01010000DEADBEEF"));
+        assertNotNull(beat);
+        assertTrue(beat.isHeartbeat());
+    }
+
+    @Test
+    public void aShortPayloadIsNotALongerMessage() {
+        assertNull(H264RectProtocol.parseDvhRect(hex("010100")));
+        assertNull(H264RectProtocol.parseDvhRect(new byte[0]));
+        assertNull(H264RectProtocol.parseDvhRect(null));
+    }
+
+    @Test
+    public void theEncodingNumbersAreTheOnesTheServerWasToldToUse() {
+        assertEquals(50, H264RectProtocol.ENCODING_H264);
+        // "DVH1" in ASCII, which is how it reads in a packet dump on either side.
+        assertEquals(0x44564831, H264RectProtocol.ENCODING_DVH1);
+        assertArrayEquals(new byte[]{'D', 'V', 'H', '1'}, hex("44564831"));
+    }
+
+    private static H264RectProtocol.StreamRect parse(byte[] body) {
+        try {
+            return H264RectProtocol.parseStreamRect(body);
+        } catch (IOException e) {
+            throw new AssertionError("fixture should have parsed", e);
+        }
+    }
+
+    /**
+     * The fixture bytes. Each wire field is its own argument rather than a '+' away from the next,
+     * so the header words stay visible as the separate things they are.
+     */
+    private static byte[] hex(String... parts) {
+        var s = String.join("", parts);
+        var out = new byte[s.length() / 2];
+        for (var i = 0; i < out.length; i++)
+            out[i] = (byte) Integer.parseInt(s.substring(i * 2, i * 2 + 2), 16);
+        return out;
+    }
+}

From 42767d317f89b39a8c4c443d2afdab85becfa967 Mon Sep 17 00:00:00 2001
From: HuJK <gh@hujk.org>
Date: Sun, 30 Aug 2026 13:37:19 +0800
Subject: [PATCH 148/182] gpu: a worker cpuset, and real-time scheduling only
 on top of it

crosvm can promote the virtio-gpu worker to SCHED_FIFO. On gfxstream its
per-context render threads inherit that policy and spin-wait on the guest
command ring, which lets them starve the normal-priority vCPU that feeds them
-- a priority inversion that caps the present rate rather than raising it. So
real-time is opt-in and off by default.

It is also refused without the cpuset, rather than silently applied. RT
confined to the picked cores trades vCPU latency for render throughput on those
cores, which is the point of the switch; RT with no cpuset is a different thing
entirely -- FIFO 97 threads eligible for every core on the phone, above
everything else Android is running. The editor cannot save that combination and
the backend logs and skips it, because a config built through the daemon API,
or one whose cpuset setup soft-failed, can still arrive carrying it.

From 85e7fcf7f859c889aa9091e0b3539f342ba817de Mon Sep 17 00:00:00 2001
From: HuJK <gh@hujk.org>
Date: Sun, 30 Aug 2026 13:37:19 +0800
Subject: [PATCH 149/182] gpu: the drm2kgsl route -- native context, its own
 pools, no host Vulkan capset

The guest runs its own turnip over vdrm and virglrenderer translates the msm
protocol into KGSL ioctls, so nothing is remoted at the GL or VK level and the
host advertises no Vulkan capset at all. Only the DRM capset goes out: not
advertising VIRGL2 is what keeps a stock guest on llvmpipe, which displays
correctly, instead of on host-GL virgl, whose buffers the CPU scanout cannot
read back -- black until the guest additions are installed.

The route needs two pools and they hold different things. drm-host-mb is the
host arena, now only the per-context msm shmem rings, so single-digit MB rather
than the gigabyte the buffer objects used to need; the guest's drm_buddy pool,
where every BO actually comes from, is the shared guest pool. That pool needs
udmabuf=true, which is what gates VIRTIO_GPU_F_CREATE_GUEST_HANDLE -- without
it guest mesa silently keeps a host-allocating path this host no longer
implements, the VM boots, the desktop comes up, and the failure waits for the
first large allocation.

The editor's GPU section splits into what is proxied and who serves it, because
"renderer" was answering both and the answers are not the same axis. A config
written before the split carries only gpu_api, so gpu_mode falls back to the
same migration the editor shows, and the ANGLE option is gone: crosvm has no
angle key and rejects unknown ones, so selecting it stopped the VM from
starting at all.
---
 .../classfun/droidvm/lib/store/vm/GpuApi.java | 11 ++-
 .../droidvm/lib/store/vm/GpuMode.java         | 80 +++++++++++++++++
 .../droidvm/lib/store/vm/GpuProvider.java     | 89 +++++++++++++++++++
 3 files changed, 179 insertions(+), 1 deletion(-)
 create mode 100644 app/src/main/java/cn/classfun/droidvm/lib/store/vm/GpuProvider.java

diff --git a/app/src/main/java/cn/classfun/droidvm/lib/store/vm/GpuApi.java b/app/src/main/java/cn/classfun/droidvm/lib/store/vm/GpuApi.java
index cf6d4cf01..a5f7ff79e 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/store/vm/GpuApi.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/store/vm/GpuApi.java
@@ -13,8 +13,17 @@ public enum GpuApi implements StringEnum {
     VULKAN(1, "vulkan", R.string.create_vm_gpu_api_vulkan),
     EGL(2, "egl", R.string.create_vm_gpu_api_egl),
     OPENGLES(3, "gles", R.string.create_vm_gpu_api_opengles),
-    ANGLE(4, "angle", R.string.create_vm_gpu_api_angle);
+    ANGLE(4, "angle", R.string.create_vm_gpu_api_angle),
+    // gfxstream host Vulkan driver (ANDROID_EMU_VK_LOADER_PATH). SYSTEM = the SoC's stock
     // Vulkan HAL; TURNIP = bundled Mesa turnip (Adreno); PANVK = Mesa PanVK (Mali) -- not yet wired.
+    VULKAN_SYSTEM(5, "vulkan-system", R.string.create_vm_gpu_api_vulkan_system),
+    VULKAN_TURNIP(6, "vulkan-turnip", R.string.create_vm_gpu_api_vulkan_turnip),
+    VULKAN_PANVK(7, "vulkan-panvk", R.string.create_vm_gpu_api_vulkan_panvk),
+    // virglrenderer DRM native context: the guest runs its own turnip over vdrm and
+    // virglrenderer translates the msm protocol to KGSL ioctls. Not a translation API like the
+    // others -- nothing is remoted at the GL/VK level -- but it is the same choice for the user:
+    // how the guest reaches the GPU.
+    DRM2KGSL(8, "drm2kgsl", R.string.create_vm_gpu_api_drm2kgsl);
 
     private final int value;
     private final String name;
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/store/vm/GpuMode.java b/app/src/main/java/cn/classfun/droidvm/lib/store/vm/GpuMode.java
index ac5f7c185..100590245 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/store/vm/GpuMode.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/store/vm/GpuMode.java
@@ -1,6 +1,86 @@
 // SPDX-License-Identifier: GPL-3.0-or-later
 // Copyright DroidVM contributors
 // Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
+package cn.classfun.droidvm.lib.store.vm;
+
+import androidx.annotation.NonNull;
+import androidx.annotation.StringRes;
+
+import cn.classfun.droidvm.R;
+import cn.classfun.droidvm.lib.store.enums.StringEnum;
+
+/**
+ * WHERE the guest is intercepted -- the virtio-gpu context type, in plain terms.
+ *
+ * <p>This is the axis rutabaga actually has: a capset belongs to a renderer component, and the
+ * component decides how much of the guest's graphics work crosses the boundary.
+ *
+ * <ul>
  *   <li>{@link #OPENGL} -- GL calls are proxied. Guest runs mesa's virgl gallium driver;
+ *       virglrenderer replays the command stream on a host GL context. Capset virgl2.
  *   <li>{@link #VULKAN} -- Vulkan calls are proxied. On gfxstream that is its Vulkan
  *   <li>{@link #NATIVE} -- only kernel ioctls are proxied. The guest runs its REAL driver
+ *       (turnip over vdrm here) and the host translates the DRM uAPI. Capset drm; which DRM
+ *       backend answers is a property of the device, KGSL on Adreno.
+ * </ul>
+ *
+ * <p>Persisted as {@code gpu_mode}; older configs carry the pre-split {@code gpu_api} and are
+ * migrated by {@link #fromLegacyApi}.
+ */
+public enum GpuMode implements StringEnum {
+    NONE(0, "none", R.string.nullptr),
+    OPENGL(1, "opengl", R.string.create_vm_gpu_mode_opengl),
+    VULKAN(2, "vulkan", R.string.create_vm_gpu_mode_vulkan),
+    NATIVE(3, "native", R.string.create_vm_gpu_mode_native);
+
+    private final int value;
+    private final String name;
+    private final @StringRes int stringId;
+
+    GpuMode(int value, String name, @StringRes int stringId) {
+        this.value = value;
+        this.name = name;
+        this.stringId = stringId;
+    }
+
+    @SuppressWarnings("unused")
+    public int getValue() {
+        return value;
+    }
+
+    @SuppressWarnings("unused")
+    public String getName() {
+        return name;
+    }
+
+    /** The mode implied by a pre-split {@code gpu_api} value. */
+    @NonNull
+    public static GpuMode fromLegacyApi(@NonNull GpuApi api) {
+        switch (api) {
+            case EGL:
+            case OPENGLES:
+            case ANGLE:
+                return OPENGL;
+            case VULKAN:
+            case VULKAN_SYSTEM:
+            case VULKAN_TURNIP:
+            case VULKAN_PANVK:
+                return VULKAN;
+            case DRM2KGSL:
+                return NATIVE;
+            default:
+                return NONE;
+        }
+    }
+
+    @Override
+    @StringRes
+    public int getStringId() {
+        return stringId;
+    }
+
+    @Override
+    public boolean isDisplay() {
+        return stringId != R.string.nullptr;
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/store/vm/GpuProvider.java b/app/src/main/java/cn/classfun/droidvm/lib/store/vm/GpuProvider.java
new file mode 100644
index 000000000..b8bc441ee
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/lib/store/vm/GpuProvider.java
@@ -0,0 +1,89 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
+package cn.classfun.droidvm.lib.store.vm;
+
+import androidx.annotation.NonNull;
+import androidx.annotation.StringRes;
+
+import cn.classfun.droidvm.R;
+import cn.classfun.droidvm.lib.store.enums.StringEnum;
+
+/**
+ * WHICH host driver serves the proxied calls, once {@link GpuMode} has decided what is proxied.
+ *
+ * <p>The two halves are the same question asked of two renderers, which is why they share a
+ * control: with {@link GpuMode#OPENGL} virglrenderer needs a host GL context, and with
+ *
+ * <p>{@link GpuMode#NATIVE} has one entry today, {@link #DRM2KGSL}. The row is still shown for
+ * it: which DRM backend answers is a real axis (msm on a drm/msm kernel, KGSL on Adreno's
+ * downstream one), this device just has a single answer, and leaving the row visible keeps the
+ * three levels legible instead of making NATIVE look like it has no host driver at all.
+ *
+ * <p>Persisted as {@code gpu_provider}; older configs carry the pre-split {@code gpu_api} and
+ * are migrated by {@link #fromLegacyApi}.
+ */
+public enum GpuProvider implements StringEnum {
+    NONE(0, "none", R.string.nullptr),
+    // Host GL, for virglrenderer's OpenGL mode. Passed through as --gpu egl= / gles=.
+    //
+    // There is deliberately no ANGLE. GpuParameters carries no `angle` field and is declared
+    // #[serde(deny_unknown_fields)], so `--gpu ...,angle=true` does not enable anything -- it
+    // makes crosvm reject the whole --gpu argument and the VM never starts.
+    EGL(1, "egl", R.string.create_vm_gpu_api_egl),
+    GLES(2, "gles", R.string.create_vm_gpu_api_opengles),
+    VK_SYSTEM(4, "vulkan-system", R.string.create_vm_gpu_api_vulkan_system),
+    VK_TURNIP(5, "vulkan-turnip", R.string.create_vm_gpu_api_vulkan_turnip),
+    VK_PANVK(6, "vulkan-panvk", R.string.create_vm_gpu_api_vulkan_panvk),
+    // The DRM backend for GpuMode.NATIVE. virglrenderer receives the msm wire protocol and
+    // re-synthesises it as KGSL ioctls against the host's /dev/kgsl-3d0; the guest never sees
+    // a KGSL device of its own. Selects --gpu context-types=virgl2:drm.
+
+    private final int value;
+    private final String name;
+    private final @StringRes int stringId;
+
+    GpuProvider(int value, String name, @StringRes int stringId) {
+        this.value = value;
+        this.name = name;
+        this.stringId = stringId;
+    }
+
+    @SuppressWarnings("unused")
+    public int getValue() {
+        return value;
+    }
+
+    @SuppressWarnings("unused")
+    public String getName() {
+        return name;
+    }
+
+    /** The provider implied by a pre-split {@code gpu_api} value. */
+    @NonNull
+    public static GpuProvider fromLegacyApi(@NonNull GpuApi api) {
+        switch (api) {
+            case EGL:           return EGL;
+            case OPENGLES:      return GLES;
+            // A saved ANGLE could never have booted (see above); land it on GLES rather than
+            // carrying a value that only fails.
+            case ANGLE:         return GLES;
+            case VULKAN_SYSTEM: return VK_SYSTEM;
+            case VULKAN_TURNIP: return VK_TURNIP;
+            case VULKAN_PANVK:  return VK_PANVK;
+            case DRM2KGSL:      return DRM2KGSL;
+            default:            return NONE;
+        }
+    }
+
+    @Override
+    @StringRes
+    public int getStringId() {
+        return stringId;
+    }
+
+    @Override
+    public boolean isDisplay() {
+        return stringId != R.string.nullptr;
+    }
+}

From 446a4d07c02d019433591c7d35cf9a1b7e62c9c8 Mon Sep 17 00:00:00 2001
From: HuJK <gh@hujk.org>
Date: Sun, 30 Aug 2026 13:37:19 +0800
Subject: [PATCH 150/182] gpu: the gfxstream route -- context type, BAR window
 and its VRAM knobs

gfxstream serves both VK (turnip) and GL-on-VK (zink) clients from one host
process, so the guest gets the gfxstream-vulkan context type with both capsets
on. pci-bar-size is the host-visible BAR window and doubles as the GPU memory
ceiling, because the guest has no device-local-only memory type to bound it
some other way.

Dynamic VRAM is the host-alloc branch, and vram-limit is what turns it on: a
defined, non-zero limit supplies gfxstream's folio quota, the
VK_EXT_memory_budget capacity handed to the guest driver, and -- by being
defined at all -- enables fusion routing. Leaving it undefined keeps every
allocation inside the pre-allocated pool. It is only sent for host-alloc,
because under a guest-owned pool the pool is already the cap and crosvm ignores
it. The folio threshold and the fusion size gate are the two knobs that decide
which allocations are worth routing which way.

The host ICD is chosen here too. gfxstream dlopens ANDROID_EMU_VK_LOADER_PATH
ahead of the system loader, so the bundled turnip is pointed at unless the
provider row asks for the SoC's stock HAL, and it falls back to the system HAL
if the turnip file is missing.
---
 .../cn/classfun/droidvm/lib/store/vm/GpuBackend.java | 12 ++++++++++--
 .../ui/vm/edit/graphics/ScreenBindingRow.java        |  1 +
 .../droidvm/lib/store/vm/VMCreationDefaultsTest.java |  1 +
 3 files changed, 12 insertions(+), 2 deletions(-)

diff --git a/app/src/main/java/cn/classfun/droidvm/lib/store/vm/GpuBackend.java b/app/src/main/java/cn/classfun/droidvm/lib/store/vm/GpuBackend.java
index cb5eb7ccc..d17b0cc9b 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/store/vm/GpuBackend.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/store/vm/GpuBackend.java
@@ -8,11 +8,19 @@
 import cn.classfun.droidvm.R;
 import cn.classfun.droidvm.lib.store.enums.StringEnum;
 
+/**
+ * Which renderer serves the guest's graphics, listed in the order the editor offers them: software
+ * 2D first, then the two proxying renderers.
+ *
+ * <p>Declaration order is menu order (the picker walks the constants), so it is a UI decision, not
+ * a storage one -- the config carries the constant's name ({@code Enums.optEnum}), never its
+ * position, so reordering here does not touch a stored VM.</p>
+ */
 public enum GpuBackend implements StringEnum {
     NONE(0, "none", R.string.nullptr),
     GPU_2D(1, "2d", R.string.create_vm_gpu_backend_2d),
-    GPU_VIRGLRENDERER(2, "virglrenderer", R.string.create_vm_gpu_backend_virglrenderer),
-    GPU_GFXSTREAM(3, "gfxstream", R.string.create_vm_gpu_backend_gfxstream);
+    GPU_GFXSTREAM(3, "gfxstream", R.string.create_vm_gpu_backend_gfxstream),
+    GPU_VIRGLRENDERER(2, "virglrenderer", R.string.create_vm_gpu_backend_virglrenderer);
 
     private final int value;
     private final String name;
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/graphics/ScreenBindingRow.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/graphics/ScreenBindingRow.java
index 932dfde84..ba0390da8 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/graphics/ScreenBindingRow.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/graphics/ScreenBindingRow.java
@@ -492,6 +492,7 @@ private void applyTransportOptions(@NonNull DisplayExporter exporter,
         transportMenuBuilt = true;
         chooseTransport.setDisabledItems(
             chooseTransport.getContext().getString(
+                R.string.create_vm_option_not_implemented),
             DisplayTransportCap.unimplementedFor(screenId, exporter));
         // want != null is a load: restore the stored ceiling if this edge still offers it. want ==
         // null is a fresh row or an exporter switch, and then the ceiling is re-evaluated to the
diff --git a/app/src/test/java/cn/classfun/droidvm/lib/store/vm/VMCreationDefaultsTest.java b/app/src/test/java/cn/classfun/droidvm/lib/store/vm/VMCreationDefaultsTest.java
index fc8ef635a..39d6bca71 100644
--- a/app/src/test/java/cn/classfun/droidvm/lib/store/vm/VMCreationDefaultsTest.java
+++ b/app/src/test/java/cn/classfun/droidvm/lib/store/vm/VMCreationDefaultsTest.java
@@ -33,6 +33,7 @@ public void requestedCreateVmDefaultsAreStable() {
         assertEquals(HostAudioDevices.SYSTEM_DEFAULT_KEY,
             endpoints.get(1).getHostDevice());
     }
+
     /**
      * What Customize opens with, against what the editor would fall back to on its own.
      *

From 4b29ad895272632ce2356d7b9b5e0557e95c74e4 Mon Sep 17 00:00:00 2001
From: HuJK <gh@hujk.org>
Date: Sun, 30 Aug 2026 13:37:20 +0800
Subject: [PATCH 151/182] gpu: the venus route -- virglrenderer's Vulkan proxy
 and its transport pool

Venus is Vulkan proxied through virglrenderer: capset venus, guest-allocated
blobs, and the same host ICD and udmabuf import path gfxstream uses, which is
why it shares that env rather than getting one of its own. vulkan=true maps to
use_venus on the virgl path, and the capset forces use_venus and use_guest_vram
host-side, so the two together are belt and braces.

venus-host-mb is the pool the command-stream transport lives in: the
per-instance ring and the CS and reply chunks, every blob_id==0 shmem
sub-allocated out of one pre-shared region that the guest maps at pool_base
plus offset with no runtime SHARE. Sizing it too small is not a slowdown, it is
a hazard -- each blob that does not fit falls back to a per-blob memfd, which
means a runtime SHARE, and a stream of those SoC-resets the sm8650 RM. The
default is sized for the KDE-plus-vkmark transport peak, where the CS pool
alone is 8 MB or more per instance.

The provider row for this route names the host Vulkan ICD rather than "Venus",
because Venus is the route and the ICD is the choice.
---
 .../classfun/droidvm/lib/store/vm/GpuMode.java   |  2 ++
 .../droidvm/lib/store/vm/GpuProvider.java        | 16 ++++++++++++++++
 2 files changed, 18 insertions(+)

diff --git a/app/src/main/java/cn/classfun/droidvm/lib/store/vm/GpuMode.java b/app/src/main/java/cn/classfun/droidvm/lib/store/vm/GpuMode.java
index 100590245..caa75e591 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/store/vm/GpuMode.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/store/vm/GpuMode.java
@@ -19,6 +19,8 @@
  *   <li>{@link #OPENGL} -- GL calls are proxied. Guest runs mesa's virgl gallium driver;
  *       virglrenderer replays the command stream on a host GL context. Capset virgl2.
  *   <li>{@link #VULKAN} -- Vulkan calls are proxied. On gfxstream that is its Vulkan
+ *       component (capset gfxstream-vulkan); on virglrenderer it is venus (capset venus). Either
+ *       way the host side needs an ICD, which is what {@link GpuProvider}'s VK_* row picks.
  *   <li>{@link #NATIVE} -- only kernel ioctls are proxied. The guest runs its REAL driver
  *       (turnip over vdrm here) and the host translates the DRM uAPI. Capset drm; which DRM
  *       backend answers is a property of the device, KGSL on Adreno.
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/store/vm/GpuProvider.java b/app/src/main/java/cn/classfun/droidvm/lib/store/vm/GpuProvider.java
index b8bc441ee..be2a18dcd 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/store/vm/GpuProvider.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/store/vm/GpuProvider.java
@@ -14,6 +14,9 @@
  *
  * <p>The two halves are the same question asked of two renderers, which is why they share a
  * control: with {@link GpuMode#OPENGL} virglrenderer needs a host GL context, and with
+ * {@link GpuMode#VULKAN} both gfxstream and virglrenderer (venus) need a host Vulkan driver.
+ * "Vulkan on virglrenderer" IS venus -- the mode already says so -- so this row never names
+ * venus; it names the ICD venus dlopens: turnip, PanVK, or the SoC's stock HAL.
  *
  * <p>{@link GpuMode#NATIVE} has one entry today, {@link #DRM2KGSL}. The row is still shown for
  * it: which DRM backend answers is a real axis (msm on a drm/msm kernel, KGSL on Adreno's
@@ -32,12 +35,21 @@ public enum GpuProvider implements StringEnum {
     // makes crosvm reject the whole --gpu argument and the VM never starts.
     EGL(1, "egl", R.string.create_vm_gpu_api_egl),
     GLES(2, "gles", R.string.create_vm_gpu_api_opengles),
+    // Host Vulkan, for GpuMode.VULKAN on either renderer (gfxstream, or venus on virglrenderer).
+    // Selects ANDROID_EMU_VK_LOADER_PATH, which both gfxstream's VulkanDispatch and venus's
+    // vkr_library honour: the SoC's stock Vulkan HAL, the bundled Mesa turnip (Adreno), or Mesa
+    // PanVK (Mali) -- PanVK is not wired yet.
     VK_SYSTEM(4, "vulkan-system", R.string.create_vm_gpu_api_vulkan_system),
     VK_TURNIP(5, "vulkan-turnip", R.string.create_vm_gpu_api_vulkan_turnip),
     VK_PANVK(6, "vulkan-panvk", R.string.create_vm_gpu_api_vulkan_panvk),
     // The DRM backend for GpuMode.NATIVE. virglrenderer receives the msm wire protocol and
     // re-synthesises it as KGSL ioctls against the host's /dev/kgsl-3d0; the guest never sees
     // a KGSL device of its own. Selects --gpu context-types=virgl2:drm.
+    DRM2KGSL(7, "drm2kgsl", R.string.create_vm_gpu_provider_drm2kgsl);
+    // Value 8 was a short-lived "venus" entry that put the proxy, not the host driver, in this
+    // row. Retired: venus is implied by virglrenderer + GpuMode.VULKAN, and configs that still
+    // carry gpu_provider=venus fall back through fromLegacyApi(VULKAN) to VK_TURNIP -- the
+    // driver they always ran on.
 
     private final int value;
     private final String name;
@@ -72,6 +84,10 @@ public static GpuProvider fromLegacyApi(@NonNull GpuApi api) {
             case VULKAN_TURNIP: return VK_TURNIP;
             case VULKAN_PANVK:  return VK_PANVK;
             case DRM2KGSL:      return DRM2KGSL;
+            // Plain VULKAN is what the retired "venus" provider wrote as gpu_api (and what the
+            // pre-venus virglrenderer `vulkan=true` did). Both ran on the bundled turnip -- the
+            // launcher's non-SYSTEM/PANVK default -- so name that explicitly.
+            case VULKAN:        return VK_TURNIP;
             default:            return NONE;
         }
     }

From 3fdc4525a3195e15c8ea551a6eca9ba5a65e60e7 Mon Sep 17 00:00:00 2001
From: HuJK <gh@hujk.org>
Date: Mon, 31 Aug 2026 21:19:40 +0800
Subject: [PATCH 152/182] compat: provide path::__filename() on Android 14

A customer's a14 device cannot link crosvm: libgfxstream_backend.so
(built against the a16 soong libc++) imports
_ZNKSt3__14__fs10filesystem4path10__filenameEv and a14's platform
libc++ predates the out-of-line path parsers. A scan of every payload
binary shows it is the only __fs::filesystem import, so one jump alias
into the c++_static __ndk1 implementation covers it -- same pattern as
the filebuf shims next to it; path is {basic_string} and the return is
a string_view in both namespaces.

The paired report, CANNOT LINK against our own libnativewindow.so
(GraphicBuffer::getDataspace missing from a14's libui), needs no app
change: the meta repo stopped shipping the platform-shadow libraries
and cleanupPrebuilt() already deletes them on upgrade.
---
 app/src/main/cpp/compat/a14.S | 10 ++++++++++
 1 file changed, 10 insertions(+)

diff --git a/app/src/main/cpp/compat/a14.S b/app/src/main/cpp/compat/a14.S
index b3f50afb3..c7a06eac6 100644
--- a/app/src/main/cpp/compat/a14.S
+++ b/app/src/main/cpp/compat/a14.S
@@ -25,4 +25,14 @@ _ZNSt3__113basic_filebufIcNS_11char_traitsIcEEEC1Ev:
 .type _ZNSt3__113basic_filebufIcNS_11char_traitsIcEEE5closeEv, %function
 _ZNSt3__113basic_filebufIcNS_11char_traitsIcEEE5closeEv:
     b _ZNSt6__ndk113basic_filebufIcNS_11char_traitsIcEEE5closeEv
+
+// std::__1::__fs::filesystem::path::__filename() const
+// a14's platform libc++ predates the out-of-line path parsers; libgfxstream_backend.so
+// (built against the a16 soong libc++) is the one importer in the payload. path is
+// {basic_string} and the return is a string_view in both namespaces, so the __ndk1
+// implementation baked in by c++_static is layout-compatible.
+.globl _ZNKSt3__14__fs10filesystem4path10__filenameEv
+.type _ZNKSt3__14__fs10filesystem4path10__filenameEv, %function
+_ZNKSt3__14__fs10filesystem4path10__filenameEv:
+    b _ZNKSt6__ndk14__fs10filesystem4path10__filenameEv
 #endif

From dfab30ba3e8072cf42a485a2cd0a2cc4e472937b Mon Sep 17 00:00:00 2001
From: HuJK <gh@hujk.org>
Date: Thu, 3 Sep 2026 00:39:49 +0800
Subject: [PATCH 153/182] vmpkg v2, add qcow2 backing tree support

---
 .../droidvm/daemon/ipc/vm/ExportHandler.java  |  12 +-
 .../droidvm/daemon/vm/pkg/VMExportTask.java   |  19 +-
 .../droidvm/daemon/vm/pkg/VMExportUtils.java  |  41 +++-
 .../droidvm/daemon/vm/pkg/VMImportTask.java   |  77 +++++++-
 .../droidvm/daemon/vm/pkg/VMImportUtils.java  |  18 +-
 .../droidvm/lib/pkg/DiskChainPlan.java        | 171 ++++++++++++++++
 .../classfun/droidvm/lib/pkg/DiskEntry.java   |  49 +++--
 .../cn/classfun/droidvm/lib/pkg/DiskRef.java  |   9 +
 .../droidvm/lib/pkg/ManifestFeature.java      |  53 +++++
 .../droidvm/lib/pkg/PackageConstants.java     |   8 +-
 .../droidvm/lib/pkg/PackageHeader.java        |   4 +-
 .../droidvm/lib/pkg/PackageManifest.java      |  21 +-
 .../classfun/droidvm/lib/utils/FileUtils.java |  14 ++
 .../droidvm/lib/utils/ImageUtils.java         |  69 +++++++
 .../droidvm/lib/utils/StringUtils.java        |  20 ++
 .../ui/disk/action/BackingChainLinker.java    |   8 +-
 .../vm/pkg/exports/VMPkgExportActivity.java   |  90 ++++++++-
 .../pkg/exports/VMPkgExportDiskAdapter.java   |  44 ++++-
 .../vm/pkg/imports/VMPkgImportActivity.java   |  44 ++++-
 .../pkg/imports/VMPkgImportDiskAdapter.java   |   6 +-
 .../main/res/layout/activity_vmpkg_import.xml |  11 ++
 app/src/main/res/values-zh-rCN/strings.xml    |   5 +
 app/src/main/res/values-zh-rTW/strings.xml    |   5 +
 app/src/main/res/values/strings.xml           |   5 +
 .../droidvm/lib/pkg/DiskChainPlanTest.java    | 185 ++++++++++++++++++
 .../droidvm/lib/pkg/ManifestFeatureTest.java  |  60 ++++++
 26 files changed, 990 insertions(+), 58 deletions(-)
 create mode 100644 app/src/main/java/cn/classfun/droidvm/lib/pkg/DiskChainPlan.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/lib/pkg/ManifestFeature.java
 create mode 100644 app/src/test/java/cn/classfun/droidvm/lib/pkg/DiskChainPlanTest.java
 create mode 100644 app/src/test/java/cn/classfun/droidvm/lib/pkg/ManifestFeatureTest.java

diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/ipc/vm/ExportHandler.java b/app/src/main/java/cn/classfun/droidvm/daemon/ipc/vm/ExportHandler.java
index a915e0e8f..43f13bcef 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/ipc/vm/ExportHandler.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/ipc/vm/ExportHandler.java
@@ -7,6 +7,8 @@
 
 import com.google.auto.service.AutoService;
 
+import java.io.IOException;
+
 import cn.classfun.droidvm.daemon.server.ClientRequest;
 import cn.classfun.droidvm.daemon.server.RequestException;
 import cn.classfun.droidvm.daemon.server.RequestHandler;
@@ -37,7 +39,15 @@ public void handle(@NonNull ClientRequest request) throws Exception {
             ));
         var store = request.getContext().getExportTaskStore();
         var server = request.getClient().getServer();
-        var task = new VMExportTask(server, params);
+        VMExportTask task;
+        try {
+            task = new VMExportTask(server, params);
+        } catch (IOException e) {
+            // Building the task walks the disks' backing chains, and the reason one cannot be
+            // walked (which image, which missing base) is the whole answer for the caller -
+            // a plain exception here would reach it as "internal error".
+            throw new RequestException(e.getMessage());
+        }
         store.put(task.taskId, task);
         task.startAsync();
         request.res().put("task_id", task.taskId.toString());
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/vm/pkg/VMExportTask.java b/app/src/main/java/cn/classfun/droidvm/daemon/vm/pkg/VMExportTask.java
index 7addc1cb7..bee629697 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/vm/pkg/VMExportTask.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/vm/pkg/VMExportTask.java
@@ -6,6 +6,7 @@
 import static java.nio.charset.StandardCharsets.UTF_8;
 import static cn.classfun.droidvm.daemon.vm.pkg.VMExportUtils.buildHeader;
 import static cn.classfun.droidvm.daemon.vm.pkg.VMExportUtils.collectBootFiles;
+import static cn.classfun.droidvm.daemon.vm.pkg.VMExportUtils.collectDisks;
 import static cn.classfun.droidvm.daemon.vm.pkg.VMExportUtils.collectNetworks;
 import static cn.classfun.droidvm.daemon.vm.pkg.VMExportUtils.sanitizeVM;
 import static cn.classfun.droidvm.lib.archive.TarWriter.wrapCompressionOutput;
@@ -34,8 +35,6 @@
 import cn.classfun.droidvm.daemon.server.Server;
 import cn.classfun.droidvm.lib.archive.RandomAccessFileOutputStream;
 import cn.classfun.droidvm.lib.archive.TarWriter;
-import cn.classfun.droidvm.lib.pkg.DiskEntry;
-import cn.classfun.droidvm.lib.pkg.DiskRef;
 import cn.classfun.droidvm.lib.pkg.PackageConstants;
 import cn.classfun.droidvm.lib.pkg.PackageManifest;
 import cn.classfun.droidvm.lib.pkg.Phase;
@@ -59,7 +58,7 @@ public final class VMExportTask {
     public VMExportTask(
         @NonNull Server server,
         @NonNull JSONObject request
-    ) {
+    ) throws Exception {
         this.server = server;
         destPath = request.optString("dest_path");
         if (!destPath.startsWith("/"))
@@ -78,18 +77,14 @@ public VMExportTask(
         var wantedSet = new HashSet<Integer>();
         if (wanted != null) for (int i = 0; i < wanted.length(); i++)
             wantedSet.add(wanted.optInt(i, -1));
-        var arr = vm.item.opt("disks", DataItem.newArray());
-        for (int i = 0; i < arr.size(); i++) {
-            var e = arr.get(i);
-            if (!e.is(DataItem.Type.OBJECT)) continue;
-            if (!wantedSet.isEmpty() && !wantedSet.contains(i)) continue;
-            var disk = new DiskEntry(new DiskRef(i, e));
-            disk.build();
-            manifest.disks.add(disk);
-        }
+        // Walks the backing chains, so it can fail on an image whose base is gone. Doing it
+        // here, before the destination file is touched, keeps that a plain request error.
+        collectDisks(manifest, vm, wantedSet);
         collectBootFiles(manifest);
         collectNetworks(manifest, server.getContext().getNetworks(), vm);
         manifest.vm.item.remove("disks");
+        // Stamp last: the version is the highest any collected part needs.
+        manifest.manifestVersion = manifest.resolveVersion();
         totalItems = manifest.disks.size() + manifest.boots.size();
     }
 
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/vm/pkg/VMExportUtils.java b/app/src/main/java/cn/classfun/droidvm/daemon/vm/pkg/VMExportUtils.java
index 1611d9cda..dd4b13864 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/vm/pkg/VMExportUtils.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/vm/pkg/VMExportUtils.java
@@ -13,6 +13,7 @@
 import static cn.classfun.droidvm.lib.Constants.PATH_MICRODROID_KERNEL;
 import static cn.classfun.droidvm.lib.utils.BinaryUtils.putInt64LE;
 import static cn.classfun.droidvm.lib.utils.BinaryUtils.putUInt16LE;
+import static cn.classfun.droidvm.lib.utils.FileUtils.canonicalPath;
 import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
 
 import android.util.Log;
@@ -20,6 +21,7 @@
 import androidx.annotation.NonNull;
 
 import java.io.IOException;
+import java.util.ArrayList;
 import java.util.HashMap;
 import java.util.HashSet;
 import java.util.LinkedHashSet;
@@ -28,12 +30,16 @@
 import cn.classfun.droidvm.BuildConfig;
 import cn.classfun.droidvm.daemon.network.NetworkInstanceStore;
 import cn.classfun.droidvm.lib.pkg.BootFile;
+import cn.classfun.droidvm.lib.pkg.DiskChainPlan;
+import cn.classfun.droidvm.lib.pkg.DiskEntry;
+import cn.classfun.droidvm.lib.pkg.DiskRef;
 import cn.classfun.droidvm.lib.pkg.PackageConstants;
 import cn.classfun.droidvm.lib.pkg.PackageManifest;
 import cn.classfun.droidvm.lib.store.base.DataItem;
 import cn.classfun.droidvm.lib.store.network.NetworkConfig;
 import cn.classfun.droidvm.lib.store.vm.BootConfig;
 import cn.classfun.droidvm.lib.store.vm.VMConfig;
+import cn.classfun.droidvm.lib.utils.ImageUtils;
 
 public final class VMExportUtils {
     private static final String TAG = "VMExportUtils";
@@ -75,7 +81,7 @@ public static byte[] buildHeader(
         var hdr = new byte[PackageConstants.HEADER_SIZE];
         var magic = PackageConstants.MAGIC.getBytes(UTF_8);
         System.arraycopy(magic, 0, hdr, 0, magic.length);
-        putUInt16LE(hdr, 6, PackageConstants.MANIFEST_VERSION);
+        putUInt16LE(hdr, 6, manifest.manifestVersion);
         putUInt16LE(hdr, 8, BuildConfig.VERSION_CODE);
         putUInt16LE(hdr, 10, manifestSize);
         putUInt16LE(hdr, 12, manifest.compression.type);
@@ -102,6 +108,39 @@ private static void addBootFile(
         manifest.boots.add(file);
     }
 
+    /**
+     * The files the package must carry for the chosen disks: each selected VM disk plus, when it
+     * is a qcow2 overlay, every backing image under it. Packing the overlay alone was the whole
+     * bug - the guest reads the base too, and the copied header points at a path that only ever
+     * existed on the exporting phone.
+     *
+     * <p>Reads the source images (headers only) and never writes to them; the exporting phone's
+     * disks and their registered parent links come out of an export exactly as they went in.
+     *
+     * @param wanted VM disk indices to include; empty means every disk.
+     */
+    public static void collectDisks(
+        @NonNull PackageManifest manifest,
+        @NonNull VMConfig vm,
+        @NonNull Set<Integer> wanted
+    ) throws Exception {
+        var tops = new ArrayList<DiskRef>();
+        var disks = vm.item.opt("disks", DataItem.newArray());
+        for (int i = 0; i < disks.size(); i++) {
+            var item = disks.get(i);
+            if (!item.is(DataItem.Type.OBJECT)) continue;
+            if (!wanted.isEmpty() && !wanted.contains(i)) continue;
+            var ref = new DiskRef(i, item);
+            if (ref.path.isEmpty()) continue;
+            // Canonical so that a base image reached both as a disk and as another disk's
+            // parent is recognised as the same file and packed once.
+            ref.path = canonicalPath(ref.path);
+            tops.add(ref);
+        }
+        for (var member : DiskChainPlan.build(tops, ImageUtils::backingOf))
+            manifest.disks.add(DiskEntry.of(member));
+    }
+
     public static void collectBootFiles(@NonNull PackageManifest manifest) {
         var builtins = new HashSet<String>();
         builtins.add(PATH_BUILTIN_KERNEL);
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/vm/pkg/VMImportTask.java b/app/src/main/java/cn/classfun/droidvm/daemon/vm/pkg/VMImportTask.java
index fb8b043f3..eda9759af 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/vm/pkg/VMImportTask.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/vm/pkg/VMImportTask.java
@@ -11,6 +11,7 @@
 import static cn.classfun.droidvm.lib.utils.JsonUtils.listToJSONArray;
 import static cn.classfun.droidvm.lib.utils.StringUtils.basename;
 import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
+import static cn.classfun.droidvm.lib.utils.StringUtils.safeFileName;
 import static cn.classfun.droidvm.lib.utils.ThreadUtils.runOnPool;
 
 import android.util.Log;
@@ -44,6 +45,7 @@
 import cn.classfun.droidvm.lib.store.base.DataItem;
 import cn.classfun.droidvm.lib.store.network.NetworkConfig;
 import cn.classfun.droidvm.lib.store.vm.VMConfig;
+import cn.classfun.droidvm.lib.utils.ImageUtils;
 
 public final class VMImportTask {
     private static final String TAG = "VMImportTask";
@@ -53,6 +55,10 @@ public final class VMImportTask {
     private final String srcPath;
     private final File targetDir;
     private final String networkMode;
+    /** This package's own folder under {@link #targetDir}; created before the first file lands. */
+    private File vmDir = null;
+    private String vmName = "";
+    private boolean registered = false;
     private int totalItems;
     private int volumeTotal = 0;
     public VMConfig importedVM = null;
@@ -80,10 +86,10 @@ private void run() {
         var data = DataItem.newObject();
         try {
             unpack();
-            importedVM.setName(uniqueVMName(importedVM.getName()));
             var networks = importNetworks(importedVM, importedManifest.networks);
             var vmId = server.getContext().getVMs().createVM(importedVM);
             if (vmId == null || vmId.isEmpty()) throw new IOException("failed to register VM");
+            registered = true;
             data.set("done", totalItems);
             data.set("total", totalItems);
             data.set("vm_id", vmId);
@@ -94,6 +100,7 @@ private void run() {
             emit(data, Phase.DONE);
         } catch (Exception e) {
             Log.w(TAG, fmt("Import task %s failed", taskId), e);
+            discardPlacedFiles();
             data.set("done", 0);
             data.set("total", totalItems);
             data.set("message", e.getMessage());
@@ -111,7 +118,7 @@ private void onTarItem(
     ) throws Exception{
         var disk = importedManifest.findDisk(name);
         if (disk != null) {
-            var target = uniqueFile(targetDir, disk.name);
+            var target = uniqueFile(vmDir, disk.name);
             copyEntry(content, target, size, placedDisks.size(), totalItems);
             disk.target = target;
             placedDisks.add(disk);
@@ -119,7 +126,7 @@ private void onTarItem(
         }
         var boot = importedManifest.findBoot(name);
         if (boot != null) {
-            var dir = new File(targetDir, "boot");
+            var dir = new File(vmDir, "boot");
             if (!dir.exists() && !dir.mkdirs())
                 throw new IOException(fmt("Cannot create %s", dir));
             var target = uniqueFile(dir, boot.name);
@@ -154,11 +161,71 @@ private void unpack() throws Exception {
         }
         var vm = new VMConfig(importedManifest.vm.toJson());
         vm.setId(UUID.randomUUID());
+        vm.setName(vmName);
+        relinkBackingChains();
         remapDiskPaths(vm, placedDisks);
         remapBootPaths(vm, placedBoots);
         importedVM = vm;
     }
 
+    /**
+     * Re-point each imported overlay at the copy of its backing image that travelled with it.
+     * The packed header still names the exporting phone's path - exporting reads the source
+     * images and never rewrites them - so this is where a chain becomes usable again. Header
+     * only: the data is already there, the files just live somewhere else now.
+     */
+    private void relinkBackingChains() throws IOException {
+        var byArchive = new HashMap<String, DiskEntry>();
+        for (var disk : placedDisks) byArchive.put(disk.archivePath, disk);
+        for (var disk : placedDisks) {
+            if (disk.backingArchive.isEmpty() || disk.target == null) continue;
+            var parent = byArchive.get(disk.backingArchive);
+            if (parent == null || parent.target == null) throw new IOException(fmt(
+                "package is missing the backing image %s needed by %s",
+                disk.backingArchive, disk.archivePath
+            ));
+            ImageUtils.rebaseBacking(disk.target.getPath(), parent.target.getPath());
+        }
+    }
+
+    /**
+     * Drop what a failed import wrote. Safe to do bluntly because everything it wrote is inside
+     * one folder this import created for itself; nothing else has ever been in there.
+     */
+    private void discardPlacedFiles() {
+        var dir = vmDir;
+        if (dir == null || registered) return;
+        vmDir = null;
+        try {
+            deleteTree(dir);
+        } catch (Exception e) {
+            Log.w(TAG, fmt("Failed to clean up %s", dir), e);
+        }
+    }
+
+    private static void deleteTree(@NonNull File file) {
+        var children = file.listFiles();
+        if (children != null) for (var child : children) deleteTree(child);
+        //noinspection ResultOfMethodCallIgnored
+        file.delete();
+    }
+
+    /**
+     * The folder this package's files go in: named after the VM, unique within the chosen
+     * import folder. One package's disks - a backing chain can be several - stay together
+     * instead of piling into a folder shared with every other VM's images.
+     */
+    @NonNull
+    private File createVMDir(@NonNull String name) throws IOException {
+        var base = safeFileName(name, "vm");
+        var dir = new File(targetDir, base);
+        for (int i = 1; dir.exists(); i++)
+            dir = new File(targetDir, fmt("%s_%d", base, i));
+        if (!dir.mkdirs())
+            throw new IOException(fmt("Cannot create %s", dir));
+        return dir;
+    }
+
     private int readVolumeCount(@NonNull String masterPath) throws Exception {
         try (var in = new FileInputStream(masterPath)) {
             var hdr = new byte[PackageConstants.HEADER_SIZE];
@@ -169,6 +236,10 @@ private int readVolumeCount(@NonNull String masterPath) throws Exception {
 
     private void extract(@NonNull PackageInput pkg) throws Exception {
         importedManifest = pkg.manifest;
+        // Settle the name and make the folder before any byte lands in it, so the files are
+        // together from the start and a failure has exactly one thing to clean up.
+        vmName = uniqueVMName(importedManifest.vm.getName());
+        vmDir = createVMDir(vmName);
         totalItems = importedManifest.disks.size() + importedManifest.boots.size();
         var data = DataItem.newObject();
         data.set("done", 0);
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/vm/pkg/VMImportUtils.java b/app/src/main/java/cn/classfun/droidvm/daemon/vm/pkg/VMImportUtils.java
index e175a65ed..df6ba2733 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/vm/pkg/VMImportUtils.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/vm/pkg/VMImportUtils.java
@@ -10,6 +10,7 @@
 
 import java.io.File;
 import java.util.ArrayList;
+import java.util.Comparator;
 import java.util.HashMap;
 
 import cn.classfun.droidvm.lib.pkg.BootFile;
@@ -22,13 +23,26 @@ public final class VMImportUtils {
     private VMImportUtils() {
     }
 
+    /**
+     * Rebuild the VM's disk list from the files the import placed. Only entries that fill a disk
+     * slot go in: a backing image is on disk for the overlay above it to read, not for the guest
+     * to see. Slot order comes from the manifest rather than from the order the tar happened to
+     * store the files in, which no longer matches once a chain is interleaved with its disks.
+     */
     public static void remapDiskPaths(
         @NonNull VMConfig vm,
         @NonNull ArrayList<DiskEntry> placed
     ) {
-        var disks = DataItem.newArray();
+        var attached = new ArrayList<DiskEntry>();
         for (var disk : placed) {
-            if (disk.target == null || disk.ref == null) continue;
+            if (disk.target == null || disk.ref == null || !disk.attached) continue;
+            attached.add(disk);
+        }
+        // Stable: packages written before the slot index existed carry 0 for every entry, and
+        // keep the order they were packed in.
+        attached.sort(Comparator.comparingInt((DiskEntry disk) -> disk.ref.index));
+        var disks = DataItem.newArray();
+        for (var disk : attached) {
             var item = DataItem.newObject();
             item.set("path", disk.target.getPath());
             item.set("readonly", disk.ref.readonly);
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/pkg/DiskChainPlan.java b/app/src/main/java/cn/classfun/droidvm/lib/pkg/DiskChainPlan.java
new file mode 100644
index 000000000..8bf5393ee
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/lib/pkg/DiskChainPlan.java
@@ -0,0 +1,171 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
+package cn.classfun.droidvm.lib.pkg;
+
+import static cn.classfun.droidvm.lib.utils.StringUtils.basename;
+import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
+import static cn.classfun.droidvm.lib.utils.StringUtils.safeFileName;
+
+import androidx.annotation.NonNull;
+import androidx.annotation.Nullable;
+
+import java.io.IOException;
+import java.util.ArrayList;
+import java.util.HashMap;
+import java.util.HashSet;
+import java.util.List;
+import java.util.Map;
+import java.util.Set;
+
+/**
+ * Which files a package must carry for one VM's disks. A qcow2 overlay is only half a disk: the
+ * guest reads its backing image too, so a package holding the overlay alone imports as a VM that
+ * cannot boot - the copied header still names a path that exists only on the machine it came
+ * from. This walks each selected disk down its backing chain and returns every file involved,
+ * child before parent, with:
+ * <ul>
+ *   <li>one entry per file, so two disks sharing a base image ship it once;</li>
+ *   <li>unique archive names, so two disks named {@code disk.qcow2} in different folders do not
+ *       collide inside the tar (they did before backing images made that likely);</li>
+ *   <li>the parent link recorded as an archive name, which is what the importer can act on -
+ *       the on-disk path is meaningless once the files land somewhere else.</li>
+ * </ul>
+ *
+ * <p>Pure by design: it reads no files itself. The caller supplies the {@link BackingLookup},
+ * which is what makes the whole plan testable and lets the export UI predict, with the same
+ * code, exactly what the daemon will pack.
+ */
+public final class DiskChainPlan {
+    /**
+     * Chain length cap. Far above the depth the overlay UI allows (see {@code DiskTree}); this
+     * is only here so a corrupt header cannot spin the walk forever, hence the loud failure
+     * rather than a silent truncation - a truncated chain is exactly the broken package this
+     * class exists to prevent.
+     */
+    public static final int MAX_CHAIN = 64;
+
+    private DiskChainPlan() {
+    }
+
+    /** Resolves one image's backing file to an absolute path, or null when it has none. */
+    public interface BackingLookup {
+        @Nullable
+        String backingOf(@NonNull String path) throws Exception;
+    }
+
+    /** One file the package has to carry. */
+    public static final class Member {
+        /** Absolute path on the exporting device. */
+        public final String path;
+        /** Name inside the archive; unique across the package. */
+        public final String archivePath;
+        /**
+         * The VM disk slot this file fills, or null when it is in the package only because
+         * something else backs onto it. A file can start out as a backing image and turn out to
+         * be an attached disk as well, which is why this is not final.
+         */
+        @Nullable
+        public DiskRef attachment = null;
+        /** {@link #archivePath} of this file's own backing image, or "" when it has none. */
+        public String backingArchive = "";
+
+        private Member(@NonNull String path, @NonNull String archivePath) {
+            this.path = path;
+            this.archivePath = archivePath;
+        }
+    }
+
+    /**
+     * Expand {@code tops} - the VM disks the user chose, in slot order - into every file the
+     * package needs.
+     *
+     * @throws IOException when a chain loops or runs deeper than {@link #MAX_CHAIN}; whatever
+     *     {@code lookup} throws for an unreadable image or a missing backing file propagates as
+     *     it is, so the export fails with the path that caused it.
+     */
+    @NonNull
+    public static List<Member> build(
+        @NonNull List<DiskRef> tops,
+        @NonNull BackingLookup lookup
+    ) throws Exception {
+        var order = new ArrayList<Member>();
+        var byPath = new HashMap<String, Member>();
+        var archives = new HashSet<String>();
+        for (var top : tops) {
+            if (top.path == null || top.path.isEmpty()) continue;
+            var known = byPath.get(top.path);
+            Member member;
+            if (known == null) {
+                member = add(order, byPath, archives, top.path);
+            } else if (known.attachment == null) {
+                member = known; // already packed as a backing image; it is a disk of its own too
+            } else {
+                // The same file in two slots. Give the second slot its own copy rather than
+                // dropping it: a package that silently loses a disk is worse than a duplicate.
+                member = new Member(top.path, uniqueArchive(archives, basename(top.path)));
+                order.add(member);
+            }
+            member.attachment = top;
+            walkUp(order, byPath, archives, member, lookup);
+        }
+        return order;
+    }
+
+    /** Follow {@code start}'s backing chain upward, adding each file it reaches. */
+    private static void walkUp(
+        @NonNull List<Member> order,
+        @NonNull Map<String, Member> byPath,
+        @NonNull Set<String> archives,
+        @NonNull Member start,
+        @NonNull BackingLookup lookup
+    ) throws Exception {
+        var seen = new HashSet<String>();
+        seen.add(start.path);
+        var child = start;
+        for (int depth = 0; depth < MAX_CHAIN; depth++) {
+            var backing = lookup.backingOf(child.path);
+            if (backing == null || backing.isEmpty()) return;
+            if (!seen.add(backing)) throw new IOException(fmt(
+                "backing chain of %s loops at %s", basename(start.path), backing
+            ));
+            var known = byPath.get(backing);
+            var parent = known != null ? known : add(order, byPath, archives, backing);
+            child.backingArchive = parent.archivePath;
+            // A file already in the plan brought its own parents with it when it was added,
+            // so there is nothing above this point left to walk.
+            if (known != null) return;
+            child = parent;
+        }
+        throw new IOException(fmt(
+            "backing chain of %s is deeper than %d images", basename(start.path), MAX_CHAIN
+        ));
+    }
+
+    @NonNull
+    private static Member add(
+        @NonNull List<Member> order,
+        @NonNull Map<String, Member> byPath,
+        @NonNull Set<String> archives,
+        @NonNull String path
+    ) {
+        var member = new Member(path, uniqueArchive(archives, basename(path)));
+        order.add(member);
+        byPath.put(path, member);
+        return member;
+    }
+
+    /** {@code name} as an archive entry name no other member has taken. */
+    @NonNull
+    private static String uniqueArchive(@NonNull Set<String> taken, @NonNull String name) {
+        var base = safeFileName(name, "disk.img");
+        if (taken.add(base)) return base;
+        int dot = base.lastIndexOf('.');
+        var stem = dot > 0 ? base.substring(0, dot) : base;
+        var ext = dot > 0 ? base.substring(dot) : "";
+        for (int i = 1; ; i++) {
+            var candidate = fmt("%s_%d%s", stem, i, ext);
+            if (taken.add(candidate)) return candidate;
+        }
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/pkg/DiskEntry.java b/app/src/main/java/cn/classfun/droidvm/lib/pkg/DiskEntry.java
index 24c57c5e5..933c17014 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/pkg/DiskEntry.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/pkg/DiskEntry.java
@@ -11,16 +11,29 @@
 import org.json.JSONObject;
 
 import java.io.File;
+import java.util.Set;
 
 import cn.classfun.droidvm.lib.store.base.JSONSerialize;
 import cn.classfun.droidvm.ui.disk.create.DiskFormat;
 
-public final class DiskEntry implements JSONSerialize {
+public final class DiskEntry implements JSONSerialize, ManifestFeature.Carrier {
+    /** {@link DiskRef#index} of a file that fills no VM disk slot. */
+    public static final int INDEX_BACKING = -1;
+
     public DiskRef ref;
     public String name = null;
     public DiskFormat format = null;
     public long size = 0;
     public String archivePath = null;
+    /**
+     * Whether this file fills a VM disk slot. False for a file the package carries only because
+     * another one backs onto it: the importer has to restore it, but must not hand it to the
+     * guest as a disk of its own. Absent in packages written before backing chains were packed,
+     * where every entry was a disk, hence the default.
+     */
+    public boolean attached = true;
+    /** {@link #archivePath} of this file's backing image inside the package, or "". */
+    public String backingArchive = "";
     public File target = null;
 
     public DiskEntry(DiskRef ref) {
@@ -28,11 +41,13 @@ public DiskEntry(DiskRef ref) {
     }
 
     public DiskEntry(@NonNull JSONObject o) {
-        ref = new DiskRef(0, o);
+        ref = new DiskRef(o.optInt("index", 0), o);
         name = o.optString("name", "disk.img");
         format = optEnum(o, "format", DiskFormat.RAW);
         size = o.optLong("size");
         archivePath = o.optString("archive_path");
+        attached = o.optBoolean("attached", true);
+        backingArchive = o.optString("backing_archive", "");
     }
 
     @NonNull
@@ -48,27 +63,37 @@ public JSONObject toJson() throws JSONException {
         o.put("format", format.name().toLowerCase());
         o.put("size", size);
         o.put("archive_path", archivePath);
+        o.put("attached", attached);
+        if (!backingArchive.isEmpty()) o.put("backing_archive", backingArchive);
         return o;
     }
 
-    private static @NonNull String sanitize(@NonNull String name) {
-        var sb = new StringBuilder();
-        for (int i = 0; i < name.length(); i++) {
-            char c = name.charAt(i);
-            if (c == '/' || c == '\\' || c < 0x20) c = '_';
-            sb.append(c);
-        }
-        return sb.toString();
+    @Override
+    public void collectFeatures(@NonNull Set<ManifestFeature> into) {
+        if (!attached || !backingArchive.isEmpty()) into.add(ManifestFeature.BACKING_CHAIN);
     }
 
-    public void build() {
+    public void build(@NonNull String archivePath) {
         var file = new File(ref.path);
         name = file.getName();
-        archivePath = sanitize(name);
+        this.archivePath = archivePath;
         format = DiskFormat.fromFilename(name);
         size = file.length();
     }
 
+    /** The manifest entry for one file of a {@link DiskChainPlan}. */
+    @NonNull
+    public static DiskEntry of(@NonNull DiskChainPlan.Member member) {
+        var attachment = member.attachment;
+        var entry = new DiskEntry(attachment != null
+            ? attachment
+            : new DiskRef(INDEX_BACKING, member.path));
+        entry.attached = attachment != null;
+        entry.backingArchive = member.backingArchive;
+        entry.build(member.archivePath);
+        return entry;
+    }
+
     @NonNull
     public static DiskEntry from(Object o) throws JSONException {
         if (o instanceof JSONObject)
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/pkg/DiskRef.java b/app/src/main/java/cn/classfun/droidvm/lib/pkg/DiskRef.java
index 94f0de5bd..37adca620 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/pkg/DiskRef.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/pkg/DiskRef.java
@@ -29,6 +29,14 @@ public DiskRef(int index, @NonNull JSONObject jo) {
         this.bus = optEnum(jo, "bus", DiskBus.VIRTIO);
     }
 
+    /** A file with no VM disk slot of its own - a backing image the package carries. */
+    public DiskRef(int index, @NonNull String path) {
+        this.index = index;
+        this.path = path;
+        this.readonly = true;
+        this.bus = DiskBus.VIRTIO;
+    }
+
     public DiskRef(int index, @NonNull DataItem o) {
         this.index = index;
         this.path = o.optString("path", "");
@@ -49,6 +57,7 @@ public boolean isCDROM() {
     @Override
     public JSONObject toJson() throws JSONException {
         var d = new JSONObject();
+        d.put("index", index);
         d.put("readonly", readonly);
         d.put("bus", bus);
         d.put("path", path);
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/pkg/ManifestFeature.java b/app/src/main/java/cn/classfun/droidvm/lib/pkg/ManifestFeature.java
new file mode 100644
index 000000000..981330d6c
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/lib/pkg/ManifestFeature.java
@@ -0,0 +1,53 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
+package cn.classfun.droidvm.lib.pkg;
+
+import androidx.annotation.NonNull;
+
+import java.util.EnumSet;
+import java.util.Set;
+
+/**
+ * Everything a package can contain that a reader from before it would misread, each with the
+ * manifest version that introduced it. A package is stamped with the highest {@link #since} among
+ * the features it actually uses ({@link #versionFor}), so one that uses none stays readable by
+ * every build that ever wrote a package, and what a build can read is simply {@link #latest()}.
+ *
+ * <p>Adding a feature is one constant here plus the {@link Carrier} that reports using it. The
+ * version arithmetic never changes and no feature has to know about any other, which is the
+ * point: a chain of "if this then 3, else if that then 2" would have to be kept in the right
+ * order by hand, and a wrong order silently stamps a package lower than it needs.
+ */
+public enum ManifestFeature {
+    /**
+     * Files the VM does not attach, and overlay-to-base links ({@code attached} and
+     * {@code backing_archive} on a disk entry). A reader without it attaches every file as a
+     * disk and never re-points the overlays at their copied bases.
+     */
+    BACKING_CHAIN(2);
+
+    /** The manifest version that introduced the feature. */
+    public final int since;
+
+    ManifestFeature(int since) {
+        this.since = since;
+    }
+
+    /** A part of a manifest that can use features; it says which ones it actually does. */
+    public interface Carrier {
+        void collectFeatures(@NonNull Set<ManifestFeature> into);
+    }
+
+    /** The version a package using exactly {@code used} must be stamped with. */
+    public static int versionFor(@NonNull Set<ManifestFeature> used) {
+        int version = PackageConstants.MANIFEST_VERSION_BASE;
+        for (var feature : used) version = Math.max(version, feature.since);
+        return version;
+    }
+
+    /** The newest version any feature needs: the most a build with this list can read. */
+    public static int latest() {
+        return versionFor(EnumSet.allOf(ManifestFeature.class));
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/pkg/PackageConstants.java b/app/src/main/java/cn/classfun/droidvm/lib/pkg/PackageConstants.java
index bda4ca68e..43e1f6241 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/pkg/PackageConstants.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/pkg/PackageConstants.java
@@ -11,7 +11,13 @@ public final class PackageConstants {
     public static final String MAGIC = "VMPKG";
     public static final int HEADER_SIZE = 24;
     public static final int BUFFER = 64 * 1024;
-    public static final int MANIFEST_VERSION = 1;
+    // BASE is the manifest of a package that uses none of the ManifestFeatures - the original
+    // one-file-per-disk layout. Every later addition is a ManifestFeature carrying the version
+    // that introduced it; a package is stamped with the highest one it uses, and what this
+    // build can read follows from the list rather than from a constant kept in step by hand.
+    // Readers accept anything up to MANIFEST_VERSION and refuse what is newer.
+    public static final int MANIFEST_VERSION_BASE = 1;
+    public static final int MANIFEST_VERSION = ManifestFeature.latest();
     public static final String MANIFEST_NAME = "manifest.json";
     public static final Compression DEFAULT_COMPRESSION = Compression.ZSTD;
 
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/pkg/PackageHeader.java b/app/src/main/java/cn/classfun/droidvm/lib/pkg/PackageHeader.java
index 2e2b69ae8..4f89a879b 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/pkg/PackageHeader.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/pkg/PackageHeader.java
@@ -43,7 +43,9 @@ public void parseFromData(@NonNull byte[] hdr) throws IOException {
     }
 
     public void validate() throws IOException {
-        if (manifestVersion != PackageConstants.MANIFEST_VERSION)
+        // Older packages still import; newer ones are refused rather than half-understood.
+        if (manifestVersion < PackageConstants.MANIFEST_VERSION_BASE
+            || manifestVersion > PackageConstants.MANIFEST_VERSION)
             throw new IOException(fmt("unsupported vmpkg manifest version: %d", manifestVersion));
         if (Compression.fromType(compression) == null)
             throw new IOException(fmt("unsupported vmpkg compression: %d", compression));
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/pkg/PackageManifest.java b/app/src/main/java/cn/classfun/droidvm/lib/pkg/PackageManifest.java
index b20ece300..8f906f8fa 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/pkg/PackageManifest.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/pkg/PackageManifest.java
@@ -19,7 +19,9 @@
 
 import java.io.InputStream;
 import java.util.ArrayList;
+import java.util.EnumSet;
 import java.util.List;
+import java.util.Set;
 
 import cn.classfun.droidvm.BuildConfig;
 import cn.classfun.droidvm.lib.archive.Compression;
@@ -28,7 +30,7 @@
 import cn.classfun.droidvm.lib.store.vm.VMConfig;
 
 public final class PackageManifest implements JSONSerialize {
-    public int manifestVersion = PackageConstants.MANIFEST_VERSION;
+    public int manifestVersion = PackageConstants.MANIFEST_VERSION_BASE;
     public String format = PackageConstants.EXTENSION;
     public long createdAt = System.currentTimeMillis();
     public String appVersion = BuildConfig.VERSION_NAME;
@@ -58,6 +60,23 @@ public JSONObject toJson() throws JSONException{
         return o;
     }
 
+    /** The {@link ManifestFeature}s this package's contents actually use. */
+    @NonNull
+    public Set<ManifestFeature> features() {
+        var used = EnumSet.noneOf(ManifestFeature.class);
+        for (var disk : disks) disk.collectFeatures(used);
+        return used;
+    }
+
+    /**
+     * The oldest manifest version that can describe this package - the highest any feature in
+     * it needs - so a plain one-disk export stays importable by builds that predate the rest.
+     * Ask only once everything is collected: the answer is a function of all of it.
+     */
+    public int resolveVersion() {
+        return ManifestFeature.versionFor(features());
+    }
+
     @Nullable
     public DiskEntry findDisk(@NonNull String archivePath) {
         for (var disk : disks)
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/utils/FileUtils.java b/app/src/main/java/cn/classfun/droidvm/lib/utils/FileUtils.java
index 69d017c8d..648e0ec61 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/utils/FileUtils.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/utils/FileUtils.java
@@ -330,6 +330,20 @@ public static String externalPath() {
         return Environment.getExternalStorageDirectory().getPath();
     }
 
+    /**
+     * {@code path} with {@code //}, {@code ..} and symlinks resolved, so two spellings of the
+     * same file compare equal; the original string when the filesystem will not say (an
+     * unreadable parent directory, say), which is no worse than not having asked.
+     */
+    @NonNull
+    public static String canonicalPath(@NonNull String path) {
+        try {
+            return new File(path).getCanonicalPath();
+        } catch (Exception e) {
+            return path;
+        }
+    }
+
     public static boolean deleteFile(@NonNull String path) {
         try {
             return new File(path).delete();
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/utils/ImageUtils.java b/app/src/main/java/cn/classfun/droidvm/lib/utils/ImageUtils.java
index 8c88bd795..8ccd0c5c3 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/utils/ImageUtils.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/utils/ImageUtils.java
@@ -4,14 +4,24 @@
 package cn.classfun.droidvm.lib.utils;
 
 import static cn.classfun.droidvm.lib.utils.AssetUtils.getPrebuiltBinaryPath;
+import static cn.classfun.droidvm.lib.utils.FileUtils.canonicalPath;
 import static cn.classfun.droidvm.lib.utils.RunUtils.runListQuiet;
+import static cn.classfun.droidvm.lib.utils.StringUtils.basename;
+import static cn.classfun.droidvm.lib.utils.StringUtils.dirname;
 import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
+import static cn.classfun.droidvm.lib.utils.StringUtils.pathJoin;
 
 import androidx.annotation.NonNull;
+import androidx.annotation.Nullable;
 
 import org.json.JSONException;
 import org.json.JSONObject;
 
+import java.io.File;
+import java.io.IOException;
+
+import cn.classfun.droidvm.ui.disk.create.DiskFormat;
+
 public final class ImageUtils {
     private ImageUtils() {
     }
@@ -74,6 +84,65 @@ public static boolean hasBackingFile(String path) {
         }
     }
 
+    /**
+     * The absolute, canonical path of {@code path}'s backing image, or null when it has none.
+     * Relative headers are resolved against the overlay's own directory, the way qemu does it.
+     *
+     * <p>Unlike {@link #hasBackingFile}, this refuses to guess: a caller that has to reproduce
+     * the whole chain (packaging, above all) cannot treat "cannot tell" as "no parent", because
+     * the file it would then leave behind is the one the guest needs. So an unreadable qcow2
+     * throws - qemu-img failing on one usually means its backing file is already gone - and so
+     * does a header naming a file that is not there. Any other format has no chain to lose:
+     * qemu-img not reading it says nothing, and refusing it would break exports that work.
+     */
+    @Nullable
+    public static String backingOf(@NonNull String path) throws IOException {
+        JSONObject info;
+        try {
+            info = getImageInfo(path);
+        } catch (Exception e) {
+            if (DiskFormat.fromFilename(path) != DiskFormat.QCOW2) return null;
+            throw new IOException(fmt(
+                "cannot read %s - its backing image may be missing", path
+            ), e);
+        }
+        var backing = info.optString("full-backing-filename",
+            info.optString("backing-filename", ""));
+        if (backing.isEmpty()) return null;
+        if (!backing.startsWith("/")) backing = pathJoin(dirname(path), backing);
+        backing = canonicalPath(backing);
+        if (!new File(backing).isFile())
+            throw new IOException(fmt("missing backing image: %s", backing));
+        return backing;
+    }
+
+    /**
+     * Point {@code overlay}'s header at {@code backing} without touching a cluster
+     * ({@code qemu-img rebase -u}). Correct only when the two images already describe the same
+     * data and just the path changed - a copy of a whole chain landing in a new folder, which
+     * is what importing a package is.
+     */
+    public static void rebaseBacking(
+        @NonNull String overlay,
+        @NonNull String backing
+    ) throws IOException {
+        String format;
+        try {
+            format = getImageInfo(backing).optString("format", "qcow2");
+        } catch (Exception e) {
+            format = "qcow2";
+        }
+        var result = runListQuiet(
+            getPrebuiltBinaryPath("qemu-img"), "rebase",
+            "-u", "-b", backing, "-F", format, overlay
+        );
+        if (result.isSuccess()) return;
+        result.printLog("qemu-img");
+        throw new IOException(fmt(
+            "qemu-img rebase failed for %s: %d", basename(overlay), result.getCode()
+        ));
+    }
+
     /**
      * Whether the image carries qcow2 internal snapshots ({@code qemu-img snapshot -c}). crosvm
      * refuses to open such an image for writing - it has no snapshot support, and writing would
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/utils/StringUtils.java b/app/src/main/java/cn/classfun/droidvm/lib/utils/StringUtils.java
index d3f36fcc6..b9b6c8147 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/utils/StringUtils.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/utils/StringUtils.java
@@ -170,6 +170,26 @@ public static String extensionLower(@NonNull String path) {
         return extension(path).toLowerCase(Locale.ROOT);
     }
 
+    /**
+     * {@code name} reduced to one path component that is safe to create on disk and to name an
+     * entry inside a package: path separators, control characters and the punctuation Windows
+     * reserves all become {@code _}. Falls back to {@code fallback} when nothing usable is left
+     * (an empty name, or one that would name a directory rather than a file in it), so callers
+     * never have to handle the degenerate case themselves.
+     */
+    @NonNull
+    public static String safeFileName(@NonNull String name, @NonNull String fallback) {
+        var sb = new StringBuilder(name.length());
+        for (int i = 0; i < name.length(); i++) {
+            char c = name.charAt(i);
+            if (c < 0x20 || c == 0x7f || "\\/:*?\"<>|".indexOf(c) >= 0) c = '_';
+            sb.append(c);
+        }
+        var out = sb.toString().trim();
+        if (out.isEmpty() || out.equals(".") || out.equals("..")) return fallback;
+        return out;
+    }
+
     @NonNull
     public static String pathJoin(@NonNull String base, @NonNull String child) {
         if (base.endsWith("/")) base = base.substring(0, base.length() - 1);
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/disk/action/BackingChainLinker.java b/app/src/main/java/cn/classfun/droidvm/ui/disk/action/BackingChainLinker.java
index a92c14aa8..66d966de6 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/disk/action/BackingChainLinker.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/disk/action/BackingChainLinker.java
@@ -5,8 +5,6 @@
 
 import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
 
-import static cn.classfun.droidvm.lib.utils.AssetUtils.getPrebuiltBinaryPath;
-import static cn.classfun.droidvm.lib.utils.RunUtils.runListQuiet;
 import static cn.classfun.droidvm.lib.utils.StringUtils.basename;
 import static cn.classfun.droidvm.lib.utils.StringUtils.dirname;
 import static cn.classfun.droidvm.lib.utils.StringUtils.pathJoin;
@@ -240,11 +238,7 @@ private static String walkChain(
     /** Header-only rewrite to an absolute backing path; content-identical, so -u is correct. */
     private static void rebaseAbsolute(@NonNull String overlay, @NonNull String absBacking) {
         try {
-            var format = ImageUtils.getImageInfo(absBacking).optString("format", "qcow2");
-            var result = runListQuiet(
-                getPrebuiltBinaryPath("qemu-img"), "rebase",
-                "-u", "-b", absBacking, "-F", format, overlay);
-            if (!result.isSuccess()) result.printLog(TAG);
+            ImageUtils.rebaseBacking(overlay, absBacking);
         } catch (Exception e) {
             Log.w(TAG, fmt("rebase -u failed for %s", overlay), e);
         }
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/pkg/exports/VMPkgExportActivity.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/pkg/exports/VMPkgExportActivity.java
index f173cc23d..791d0e96e 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/pkg/exports/VMPkgExportActivity.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/pkg/exports/VMPkgExportActivity.java
@@ -11,6 +11,7 @@
 import static cn.classfun.droidvm.lib.store.enums.Enums.optEnum;
 import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
 import static cn.classfun.droidvm.lib.utils.StringUtils.resolveUriPath;
+import static cn.classfun.droidvm.lib.utils.StringUtils.safeFileName;
 import static cn.classfun.droidvm.lib.utils.ThreadUtils.runOnPool;
 
 import android.annotation.SuppressLint;
@@ -43,17 +44,24 @@
 import org.json.JSONObject;
 
 import java.io.File;
+import java.util.ArrayList;
+import java.util.HashMap;
+import java.util.HashSet;
+import java.util.List;
+import java.util.Map;
 import java.util.UUID;
 
 import cn.classfun.droidvm.R;
 import cn.classfun.droidvm.lib.archive.Compression;
 import cn.classfun.droidvm.lib.daemon.DaemonConnection;
+import cn.classfun.droidvm.lib.pkg.DiskChainPlan;
 import cn.classfun.droidvm.lib.pkg.DiskRef;
 import cn.classfun.droidvm.lib.pkg.Phase;
 import cn.classfun.droidvm.lib.pkg.PackageConstants;
 import cn.classfun.droidvm.lib.store.base.DataItem;
 import cn.classfun.droidvm.lib.store.vm.VMConfig;
 import cn.classfun.droidvm.lib.store.vm.VMStore;
+import cn.classfun.droidvm.lib.utils.ImageUtils;
 import cn.classfun.droidvm.lib.utils.ShareUtils;
 import cn.classfun.droidvm.ui.widgets.container.CollapsibleContainer;
 import cn.classfun.droidvm.ui.widgets.row.ChooseRowWidget;
@@ -85,6 +93,12 @@ public final class VMPkgExportActivity extends AppCompatActivity
     private Compression compression = PackageConstants.DEFAULT_COMPRESSION;
     private long volumeSize = 0;
     private VMPkgExportDiskAdapter adapter;
+    // What each listed disk drags in behind it: the backing images the package has to carry
+    // too, resolved off the UI thread because every hop is a qemu-img call. Keyed by VM disk
+    // slot; a slot whose chain could not be walked lands in chainErrors instead.
+    private final Map<Integer, List<String>> diskChains = new HashMap<>();
+    private final Map<String, Long> chainSizes = new HashMap<>();
+    private final Map<Integer, String> chainErrors = new HashMap<>();
     private String pendingTaskId = null;
     private String path = null;
     private int exportVolumeIndex = 0;
@@ -216,16 +230,73 @@ private void bindDisks() {
         adapter.notifyDataSetChanged();
         tvNoDisks.setVisibility(adapter.disks.isEmpty() ? VISIBLE : GONE);
         updateDiskSummary();
+        scanChains();
+    }
+
+    /**
+     * Resolve each listed disk's backing chain in the background. The package carries those
+     * files too, so without them the summary understates a chained VM by the whole size of its
+     * base images - and that number is what the user sizes volumes and free space against.
+     */
+    private void scanChains() {
+        var refs = new ArrayList<>(adapter.disks);
+        runOnPool(() -> {
+            var chains = new HashMap<Integer, List<String>>();
+            var sizes = new HashMap<String, Long>();
+            var errors = new HashMap<Integer, String>();
+            for (var ref : refs) {
+                try {
+                    var parents = new ArrayList<String>();
+                    for (var m : DiskChainPlan.build(List.of(ref), ImageUtils::backingOf)) {
+                        if (m.path.equals(ref.path)) continue;
+                        parents.add(m.path);
+                        sizes.put(m.path, new File(m.path).length());
+                    }
+                    chains.put(ref.index, parents);
+                } catch (Exception e) {
+                    var msg = e.getMessage();
+                    errors.put(ref.index, msg == null ? e.toString() : msg);
+                }
+            }
+            mainHandler.post(() -> applyChains(chains, sizes, errors));
+        });
+    }
+
+    private void applyChains(
+        @NonNull Map<Integer, List<String>> chains,
+        @NonNull Map<String, Long> sizes,
+        @NonNull Map<Integer, String> errors
+    ) {
+        diskChains.clear();
+        diskChains.putAll(chains);
+        chainSizes.clear();
+        chainSizes.putAll(sizes);
+        chainErrors.clear();
+        chainErrors.putAll(errors);
+        var counts = new HashMap<Integer, Integer>();
+        for (var entry : chains.entrySet())
+            counts.put(entry.getKey(), entry.getValue().size());
+        adapter.setChains(counts, errors);
+        updateDiskSummary();
     }
 
     private void updateDiskSummary() {
         int selectedCount = 0;
         long totalSize = 0;
+        // A base image shared by two selected disks ships once, so count paths, not disks.
+        var counted = new HashSet<String>();
         for (var disk : adapter.disks) {
             if (!adapter.selected.contains(disk.index)) continue;
             selectedCount++;
-            if (disk.path != null && !disk.path.isEmpty())
+            if (disk.path != null && !disk.path.isEmpty() && counted.add(disk.path))
                 totalSize += new File(disk.path).length();
+            var parents = diskChains.get(disk.index);
+            if (parents == null) continue;
+            for (var parent : parents) {
+                if (!counted.add(parent)) continue;
+                var size = chainSizes.get(parent);
+                totalSize += size == null ? 0 : size;
+            }
         }
         tvDiskSummary.setText(getString(
             R.string.vmpkg_export_disk_summary,
@@ -284,15 +355,7 @@ private void startPicker() {
     }
 
     private void launchCreateDocument() {
-        var base = config.getName();
-        var sb = new StringBuilder();
-        for (int i = 0; i < base.length(); i++) {
-            char ch = base.charAt(i);
-            if ("\\/:*?\"<>|".indexOf(ch) >= 0 || ch < 0x20) ch = '_';
-            sb.append(ch);
-        }
-        if (sb.length() == 0) sb.append("vm");
-        var name = sb.toString();
+        var name = safeFileName(config.getName(), "vm");
         var ext = fmt(".%s", EXTENSION);
         if (!name.endsWith(ext)) name += ext;
         createDocLauncher.launch(name);
@@ -308,6 +371,13 @@ private boolean validateSelectedDisks() {
                 ));
                 return false;
             }
+            // A chain we could not walk is a package that would import unbootable. The daemon
+            // refuses it as well; catching it here costs the user nothing but a toast.
+            var chainError = chainErrors.get(disk.index);
+            if (chainError != null) {
+                showToast(R.string.vmpkg_export_disk_chain_missing, chainError);
+                return false;
+            }
         }
         return true;
     }
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/pkg/exports/VMPkgExportDiskAdapter.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/pkg/exports/VMPkgExportDiskAdapter.java
index 2c40e6ccf..a6ec44d9f 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/pkg/exports/VMPkgExportDiskAdapter.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/pkg/exports/VMPkgExportDiskAdapter.java
@@ -19,8 +19,10 @@
 import com.google.android.material.color.MaterialColors;
 
 import java.util.ArrayList;
+import java.util.HashMap;
 import java.util.HashSet;
 import java.util.List;
+import java.util.Map;
 import java.util.Set;
 
 import cn.classfun.droidvm.R;
@@ -30,9 +32,25 @@
 public final class VMPkgExportDiskAdapter extends RecyclerView.Adapter<BaseViewHolder> {
     public final List<DiskRef> disks = new ArrayList<>();
     public final Set<Integer> selected = new HashSet<>();
+    // How many backing images each disk brings with it, and the disks whose chain could not be
+    // read at all - both keyed by VM disk slot, both filled in once the background walk lands.
+    private final Map<Integer, Integer> backingCounts = new HashMap<>();
+    private final Map<Integer, String> chainErrors = new HashMap<>();
     private boolean enabled = true;
     private Runnable onSelectionChanged;
 
+    @SuppressLint("NotifyDataSetChanged")
+    public void setChains(
+        @NonNull Map<Integer, Integer> counts,
+        @NonNull Map<Integer, String> errors
+    ) {
+        backingCounts.clear();
+        backingCounts.putAll(counts);
+        chainErrors.clear();
+        chainErrors.putAll(errors);
+        notifyDataSetChanged();
+    }
+
     public void setOnSelectionChanged(@NonNull Runnable onSelectionChanged) {
         this.onSelectionChanged = onSelectionChanged;
     }
@@ -60,7 +78,7 @@ public void onBindViewHolder(@NonNull BaseViewHolder h, int position) {
         h.itemName.setText(basename(disk.path));
         h.itemInfo.setText(dirname(disk.path));
         h.itemInfo.setVisibility(VISIBLE);
-        h.itemState.setVisibility(GONE);
+        bindChainState(h, disk.index);
         h.itemAction.setVisibility(GONE);
         h.itemIcon.setVisibility(VISIBLE);
         var icon = disk.isCDROM() ? R.drawable.ic_cdrom : R.drawable.ic_nav_disk;
@@ -74,6 +92,30 @@ public void onBindViewHolder(@NonNull BaseViewHolder h, int position) {
         h.itemCard.setOnClickListener(enabled ? v -> toggleSelection(disk.index) : null);
     }
 
+    /** Say what else rides along with this disk: its backing images, or that they are missing. */
+    private void bindChainState(@NonNull BaseViewHolder h, int index) {
+        var ctx = h.itemView.getContext();
+        var broken = chainErrors.get(index);
+        if (broken != null) {
+            h.itemState.setVisibility(VISIBLE);
+            h.itemState.setText(R.string.vmpkg_export_disk_chain_broken);
+            h.itemState.setTextColor(MaterialColors.getColor(
+                h.itemState, androidx.appcompat.R.attr.colorError
+            ));
+            return;
+        }
+        var count = backingCounts.get(index);
+        if (count == null || count <= 0) {
+            h.itemState.setVisibility(GONE);
+            return;
+        }
+        h.itemState.setVisibility(VISIBLE);
+        h.itemState.setText(ctx.getString(R.string.vmpkg_export_disk_backing_count, count));
+        h.itemState.setTextColor(MaterialColors.getColor(
+            h.itemState, android.R.attr.textColorSecondary
+        ));
+    }
+
     @SuppressLint("NotifyDataSetChanged")
     private void toggleSelection(int index) {
         if (selected.contains(index)) {
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/pkg/imports/VMPkgImportActivity.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/pkg/imports/VMPkgImportActivity.java
index 9db922c36..54f7b57f3 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/pkg/imports/VMPkgImportActivity.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/pkg/imports/VMPkgImportActivity.java
@@ -48,6 +48,7 @@
 import java.io.IOException;
 import java.text.DateFormat;
 import java.util.Date;
+import java.util.HashMap;
 
 import cn.classfun.droidvm.R;
 import cn.classfun.droidvm.lib.daemon.DaemonConnection;
@@ -252,9 +253,13 @@ private void showPreview() {
         );
         tvPackageMeta.setText(meta.trim());
         long totalSize = 0;
+        int diskCount = 0;
         diskAdapter.disks.clear();
         for (var d : preview.disks) {
             totalSize += d.size;
+            // Backing images take up room like anything else, but they are not disks the VM
+            // gets: counting them as disks would say this package holds more than it does.
+            if (d.attached) diskCount++;
             diskAdapter.disks.add(d);
         }
         diskAdapter.notifyDataSetChanged();
@@ -268,7 +273,7 @@ private void showPreview() {
             inputTarget.setText(defaultPath);
         tvDiskSummary.setText(getString(
             R.string.vmpkg_import_disk_summary,
-            preview.disks.size(),
+            diskCount,
             formatSize(totalSize)
         ));
         tvStatus.setText("");
@@ -417,24 +422,28 @@ private void persistImport(
             else vmStore.update(vm);
             var diskStore = new DiskStore();
             diskStore.load(this);
+            var pathByArchive = new HashMap<String, String>();
             for (int i = 0; i < disks.length(); i++) {
                 var diskJson = disks.optJSONObject(i);
                 if (diskJson == null) continue;
                 var path = diskJson.optString("path");
                 var file = new File(path);
-                var parent = file.getParent();
+                var folder = file.getParent();
                 var name = file.getName();
                 if (path.isEmpty()) {
                     name = diskJson.optString("name", "");
-                    parent = diskJson.optString("folder", "");
-                    path = pathJoin(parent, name);
+                    folder = diskJson.optString("folder", "");
+                    path = pathJoin(folder, name);
                 }
+                var archive = diskJson.optString("archive_path", "");
+                if (!archive.isEmpty() && !path.isEmpty()) pathByArchive.put(archive, path);
                 if (!path.isEmpty() && diskStore.findByPath(path) != null) continue;
                 var disk = new DiskConfig();
                 disk.setName(name);
-                disk.item.set("folder", parent == null ? "" : parent);
+                disk.item.set("folder", folder == null ? "" : folder);
                 diskStore.add(disk);
             }
+            linkImportedChains(diskStore, disks, pathByArchive);
             var networkStore = new NetworkStore();
             networkStore.load(this);
             for (int i = 0; i < networks.length(); i++) {
@@ -462,6 +471,31 @@ private void persistImport(
         }
     }
 
+    /**
+     * Record the overlay-to-base links the package described, so imported disks show as one
+     * tree in branch management right away rather than waiting for the header walk to
+     * rediscover them the next time something opens them.
+     */
+    private void linkImportedChains(
+        @NonNull DiskStore store,
+        @NonNull JSONArray disks,
+        @NonNull HashMap<String, String> pathByArchive
+    ) {
+        for (int i = 0; i < disks.length(); i++) {
+            var diskJson = disks.optJSONObject(i);
+            if (diskJson == null) continue;
+            var backing = diskJson.optString("backing_archive", "");
+            if (backing.isEmpty()) continue;
+            var childPath = diskJson.optString("path", "");
+            var parentPath = pathByArchive.get(backing);
+            if (childPath.isEmpty() || parentPath == null) continue;
+            var child = store.findByPath(childPath);
+            var parent = store.findByPath(parentPath);
+            if (child == null || parent == null) continue;
+            child.setParentId(parent.getId());
+        }
+    }
+
     private void onImportFailure(@Nullable String msg) {
         var message = msg == null ? "Unknown error" : msg;
         mainHandler.post(() -> {
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/pkg/imports/VMPkgImportDiskAdapter.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/pkg/imports/VMPkgImportDiskAdapter.java
index 9d06d3f02..56d2b7d52 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/pkg/imports/VMPkgImportDiskAdapter.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/pkg/imports/VMPkgImportDiskAdapter.java
@@ -36,7 +36,11 @@ public void onBindViewHolder(@NonNull BaseViewHolder h, int position) {
         var disk = disks.get(position);
         var ctx = h.itemView.getContext();
         h.itemName.setText(disk.name);
-        h.itemInfo.setText(formatSize(disk.size));
+        // A backing image is in the package for the overlay above it, not as a disk of its own;
+        // say so, or its presence in this list looks like the VM grew a disk in transit.
+        h.itemInfo.setText(disk.attached
+            ? formatSize(disk.size)
+            : ctx.getString(R.string.vmpkg_import_disk_backing, formatSize(disk.size)));
         h.itemInfo.setVisibility(VISIBLE);
         h.itemState.setVisibility(GONE);
         h.itemAction.setVisibility(GONE);
diff --git a/app/src/main/res/layout/activity_vmpkg_import.xml b/app/src/main/res/layout/activity_vmpkg_import.xml
index a6779ba3f..1f75acc44 100644
--- a/app/src/main/res/layout/activity_vmpkg_import.xml
+++ b/app/src/main/res/layout/activity_vmpkg_import.xml
@@ -191,6 +191,17 @@
                     android:icon="@drawable/ic_folder"
                     android:inputType="text" />
 
+                <TextView
+                    android:id="@+id/tv_target_desc"
+                    android:layout_width="match_parent"
+                    android:layout_height="wrap_content"
+                    android:layout_marginStart="16dp"
+                    android:layout_marginEnd="16dp"
+                    android:layout_marginBottom="12dp"
+                    android:text="@string/vmpkg_import_target_folder_desc"
+                    android:textAppearance="?attr/textAppearanceBodySmall"
+                    android:textColor="?android:attr/textColorSecondary" />
+
             </LinearLayout>
 
             <com.google.android.material.progressindicator.LinearProgressIndicator
diff --git a/app/src/main/res/values-zh-rCN/strings.xml b/app/src/main/res/values-zh-rCN/strings.xml
index 7d0e8213b..b0346d7f0 100644
--- a/app/src/main/res/values-zh-rCN/strings.xml
+++ b/app/src/main/res/values-zh-rCN/strings.xml
@@ -1360,6 +1360,9 @@
     <string name="vmpkg_package_version">包版本</string>
     <string name="vmpkg_package_comment">注释</string>
     <string name="vmpkg_export_vm_must_stop">导出前必须先停止虚拟机</string>
+    <string name="vmpkg_export_disk_backing_count">+%1$d 基底</string>
+    <string name="vmpkg_export_disk_chain_broken">父节点缺失</string>
+    <string name="vmpkg_export_disk_chain_missing">读不到这颗磁盘的父节点：%1$s</string>
     <string name="vmpkg_export_disk_missing">选中的磁盘不存在：%1$s</string>
     <string name="vmpkg_import_title">导入虚拟机包</string>
     <string name="vmpkg_import_pick">选择 .vmpkg 文件</string>
@@ -1371,6 +1374,7 @@
     <string name="vmpkg_import_no_disks">此包中没有磁盘。</string>
     <string name="vmpkg_import_meta">%1$s | %2$s | manifest v%3$d</string>
     <string name="vmpkg_import_disk_line">%1$s（%2$s）</string>
+    <string name="vmpkg_import_disk_backing">父节点映像 \u00b7 %1$s</string>
     <string name="vmpkg_import_disk_summary">%1$d 个磁盘，%2$s</string>
     <string name="vmpkg_import_network_line">网络：%1$s</string>
     <string name="vmpkg_import_no_networks">此包中没有绑定网络。</string>
@@ -1380,6 +1384,7 @@
     <string name="vmpkg_import_network_auto">自动创建网络</string>
     <string name="vmpkg_import_no_space">目标空间不足。需要 %1$s，可用 %2$s。</string>
     <string name="vmpkg_import_target_folder">导入目录</string>
+    <string name="vmpkg_import_target_folder_desc">每次导入都会在这里建立以 VM 命名的子文件夹。</string>
     <string name="vmpkg_import_target">磁盘将导入到：\n%1$s</string>
     <string name="vmpkg_import_success">已导入虚拟机：%1$s</string>
     <string name="vmpkg_import_done">导入完成</string>
diff --git a/app/src/main/res/values-zh-rTW/strings.xml b/app/src/main/res/values-zh-rTW/strings.xml
index 35284ab5a..bac1eb62f 100644
--- a/app/src/main/res/values-zh-rTW/strings.xml
+++ b/app/src/main/res/values-zh-rTW/strings.xml
@@ -1360,6 +1360,9 @@
     <string name="vmpkg_package_version">包版本</string>
     <string name="vmpkg_package_comment">註釋</string>
     <string name="vmpkg_export_vm_must_stop">匯出前必須先停止虛擬機器</string>
+    <string name="vmpkg_export_disk_backing_count">+%1$d 基底</string>
+    <string name="vmpkg_export_disk_chain_broken">父節點缺失</string>
+    <string name="vmpkg_export_disk_chain_missing">讀不到這顆磁碟的父節點：%1$s</string>
     <string name="vmpkg_export_disk_missing">選中的磁碟不存在：%1$s</string>
     <string name="vmpkg_import_title">匯入虛擬機器包</string>
     <string name="vmpkg_import_pick">選擇 .vmpkg 檔案</string>
@@ -1371,6 +1374,7 @@
     <string name="vmpkg_import_no_disks">此包中沒有磁碟。</string>
     <string name="vmpkg_import_meta">%1$s | %2$s | manifest v%3$d</string>
     <string name="vmpkg_import_disk_line">%1$s（%2$s）</string>
+    <string name="vmpkg_import_disk_backing">父節點映像 \u00b7 %1$s</string>
     <string name="vmpkg_import_disk_summary">%1$d 個磁碟，%2$s</string>
     <string name="vmpkg_import_network_line">網路：%1$s</string>
     <string name="vmpkg_import_no_networks">此包中沒有綁定網路。</string>
@@ -1380,6 +1384,7 @@
     <string name="vmpkg_import_network_auto">自動建立網路</string>
     <string name="vmpkg_import_no_space">目標空間不足。需要 %1$s，可用 %2$s。</string>
     <string name="vmpkg_import_target_folder">匯入目錄</string>
+    <string name="vmpkg_import_target_folder_desc">每次匯入都會在這裡建立以 VM 命名的子資料夾。</string>
     <string name="vmpkg_import_target">磁碟將匯入到：\n%1$s</string>
     <string name="vmpkg_import_success">已匯入虛擬機器：%1$s</string>
     <string name="vmpkg_import_done">匯入完成</string>
diff --git a/app/src/main/res/values/strings.xml b/app/src/main/res/values/strings.xml
index c4b82804b..e5cd719e3 100644
--- a/app/src/main/res/values/strings.xml
+++ b/app/src/main/res/values/strings.xml
@@ -1397,6 +1397,9 @@
     <string name="vmpkg_package_version">Package version</string>
     <string name="vmpkg_package_comment">Comment</string>
     <string name="vmpkg_export_vm_must_stop">The VM must be stopped before export</string>
+    <string name="vmpkg_export_disk_backing_count">+%1$d backing</string>
+    <string name="vmpkg_export_disk_chain_broken">chain broken</string>
+    <string name="vmpkg_export_disk_chain_missing">Cannot read this disk\'s backing chain: %1$s</string>
     <string name="vmpkg_export_disk_missing">Selected disk does not exist: %1$s</string>
     <string name="vmpkg_import_title">Import VM package</string>
     <string name="vmpkg_import_pick">Pick .vmpkg file</string>
@@ -1409,6 +1412,7 @@
     <string name="vmpkg_import_no_disks">No disks in this package.</string>
     <string name="vmpkg_import_meta">%1$s | %2$s | manifest v%3$d</string>
     <string name="vmpkg_import_disk_line">%1$s (%2$s)</string>
+    <string name="vmpkg_import_disk_backing">Backing image \u00b7 %1$s</string>
     <string name="vmpkg_import_disk_summary">%1$d disks, %2$s</string>
     <string name="vmpkg_import_network_line">Network: %1$s</string>
     <string name="vmpkg_import_no_networks">No bound networks in this package.</string>
@@ -1418,6 +1422,7 @@
     <string name="vmpkg_import_network_auto">Create networks automatically</string>
     <string name="vmpkg_import_no_space">Not enough target space. Required %1$s, available %2$s.</string>
     <string name="vmpkg_import_target_folder">Import folder</string>
+    <string name="vmpkg_import_target_folder_desc">Each import gets its own subfolder here, named after the VM.</string>
     <string name="vmpkg_import_target">Disks will be imported to:\n%1$s</string>
     <string name="vmpkg_import_success">Imported VM: %1$s</string>
     <string name="vmpkg_import_done">Import complete</string>
diff --git a/app/src/test/java/cn/classfun/droidvm/lib/pkg/DiskChainPlanTest.java b/app/src/test/java/cn/classfun/droidvm/lib/pkg/DiskChainPlanTest.java
new file mode 100644
index 000000000..1738172b0
--- /dev/null
+++ b/app/src/test/java/cn/classfun/droidvm/lib/pkg/DiskChainPlanTest.java
@@ -0,0 +1,185 @@
+package cn.classfun.droidvm.lib.pkg;
+
+import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
+import static org.junit.Assert.assertEquals;
+import static org.junit.Assert.assertNotEquals;
+import static org.junit.Assert.assertNull;
+import static org.junit.Assert.assertSame;
+import static org.junit.Assert.assertThrows;
+import static org.junit.Assert.assertTrue;
+
+import androidx.annotation.Nullable;
+
+import org.junit.Test;
+
+import java.io.IOException;
+import java.util.ArrayList;
+import java.util.HashMap;
+import java.util.LinkedHashSet;
+import java.util.List;
+import java.util.Map;
+
+/**
+ * What a package has to carry for a set of VM disks. Every case here is a disk layout the app
+ * can actually produce: branch management makes overlays of overlays, two VMs can share one base
+ * image, and nothing stops two disks in different folders from having the same file name - the
+ * case that quietly collided inside the tar before archive names were made unique.
+ */
+public class DiskChainPlanTest {
+    /** A chain the walk reads from a map instead of from qcow2 headers. */
+    private static DiskChainPlan.BackingLookup lookup(Map<String, String> parents) {
+        return path -> parents.get(path);
+    }
+
+    private static DiskRef disk(int index, String path) {
+        return new DiskRef(index, path);
+    }
+
+    @Nullable
+    private static DiskChainPlan.Member find(List<DiskChainPlan.Member> plan, String path) {
+        for (var member : plan)
+            if (member.path.equals(path)) return member;
+        return null;
+    }
+
+    private static List<String> archiveNames(List<DiskChainPlan.Member> plan) {
+        var out = new ArrayList<String>();
+        for (var member : plan) out.add(member.archivePath);
+        return out;
+    }
+
+    @Test
+    public void standaloneDiskIsItsOwnPlan() throws Exception {
+        var plan = DiskChainPlan.build(
+            List.of(disk(0, "/vm/root.img")), lookup(Map.of()));
+        assertEquals(1, plan.size());
+        assertEquals("root.img", plan.get(0).archivePath);
+        assertEquals("", plan.get(0).backingArchive);
+        assertNotEquals(null, plan.get(0).attachment);
+    }
+
+    @Test
+    public void wholeChainIsPackedChildFirst() throws Exception {
+        var plan = DiskChainPlan.build(
+            List.of(disk(0, "/vm/top.qcow2")),
+            lookup(Map.of(
+                "/vm/top.qcow2", "/vm/mid.qcow2",
+                "/vm/mid.qcow2", "/vm/base.qcow2"
+            )));
+        assertEquals(
+            List.of("/vm/top.qcow2", "/vm/mid.qcow2", "/vm/base.qcow2"),
+            List.of(plan.get(0).path, plan.get(1).path, plan.get(2).path));
+        assertEquals("mid.qcow2", plan.get(0).backingArchive);
+        assertEquals("base.qcow2", plan.get(1).backingArchive);
+        assertEquals("", plan.get(2).backingArchive);
+        // Only the disk the VM has in a slot is a disk; the rest are there to be read.
+        assertNotEquals(null, plan.get(0).attachment);
+        assertNull(plan.get(1).attachment);
+        assertNull(plan.get(2).attachment);
+    }
+
+    @Test
+    public void sharedBaseIsPackedOnce() throws Exception {
+        var plan = DiskChainPlan.build(
+            List.of(disk(0, "/vm/a.qcow2"), disk(1, "/vm/b.qcow2")),
+            lookup(Map.of(
+                "/vm/a.qcow2", "/vm/base.qcow2",
+                "/vm/b.qcow2", "/vm/base.qcow2"
+            )));
+        assertEquals(3, plan.size());
+        var base = find(plan, "/vm/base.qcow2");
+        assertNotEquals(null, base);
+        assertEquals("base.qcow2", find(plan, "/vm/a.qcow2").backingArchive);
+        assertEquals("base.qcow2", find(plan, "/vm/b.qcow2").backingArchive);
+    }
+
+    @Test
+    public void sameNameInDifferentFoldersGetsDistinctArchiveNames() throws Exception {
+        var plan = DiskChainPlan.build(
+            List.of(disk(0, "/a/disk.qcow2"), disk(1, "/b/disk.qcow2")),
+            lookup(Map.of("/a/disk.qcow2", "/base/disk.qcow2")));
+        var names = archiveNames(plan);
+        assertEquals(3, names.size());
+        assertEquals(names.size(), new LinkedHashSet<>(names).size());
+        assertEquals("disk.qcow2", names.get(0));
+        // The suffix goes before the extension, so the format stays readable from the name.
+        assertTrue(names.contains("disk_1.qcow2"));
+        assertTrue(names.contains("disk_2.qcow2"));
+    }
+
+    @Test
+    public void aBaseImageThatIsAlsoADiskKeepsItsSlot() throws Exception {
+        var plan = DiskChainPlan.build(
+            List.of(disk(0, "/vm/top.qcow2"), disk(1, "/vm/base.qcow2")),
+            lookup(Map.of("/vm/top.qcow2", "/vm/base.qcow2")));
+        assertEquals(2, plan.size());
+        var base = find(plan, "/vm/base.qcow2");
+        assertNotEquals(null, base);
+        assertEquals(1, base.attachment.index);
+        // The overlay still points at that one entry rather than a second copy of the file.
+        assertEquals(base.archivePath, find(plan, "/vm/top.qcow2").backingArchive);
+    }
+
+    @Test
+    public void theSameFileInTwoSlotsKeepsBothDisks() throws Exception {
+        var plan = DiskChainPlan.build(
+            List.of(disk(0, "/vm/data.img"), disk(1, "/vm/data.img")),
+            lookup(Map.of()));
+        assertEquals(2, plan.size());
+        assertEquals(0, plan.get(0).attachment.index);
+        assertEquals(1, plan.get(1).attachment.index);
+        assertNotEquals(plan.get(0).archivePath, plan.get(1).archivePath);
+    }
+
+    @Test
+    public void aLookupFailurePropagates() {
+        DiskChainPlan.BackingLookup broken = path -> {
+            throw new IOException("missing backing image: /gone/base.qcow2");
+        };
+        var e = assertThrows(IOException.class, () -> DiskChainPlan.build(
+            List.of(disk(0, "/vm/top.qcow2")), broken));
+        assertTrue(e.getMessage().contains("/gone/base.qcow2"));
+    }
+
+    @Test
+    public void aLoopIsRefusedRatherThanWalkedForever() {
+        var e = assertThrows(IOException.class, () -> DiskChainPlan.build(
+            List.of(disk(0, "/vm/a.qcow2")),
+            lookup(Map.of(
+                "/vm/a.qcow2", "/vm/b.qcow2",
+                "/vm/b.qcow2", "/vm/a.qcow2"
+            ))));
+        assertTrue(e.getMessage().contains("loops"));
+    }
+
+    @Test
+    public void aChainDeeperThanTheCapIsRefused() {
+        var parents = new HashMap<String, String>();
+        int depth = DiskChainPlan.MAX_CHAIN + 2;
+        for (int i = 0; i < depth; i++)
+            parents.put(fmt("/vm/d%d.qcow2", i), fmt("/vm/d%d.qcow2", i + 1));
+        var e = assertThrows(IOException.class, () -> DiskChainPlan.build(
+            List.of(disk(0, "/vm/d0.qcow2")), lookup(parents)));
+        assertTrue(e.getMessage().contains("deeper"));
+    }
+
+    @Test
+    public void anEmptyPathIsSkipped() throws Exception {
+        var plan = DiskChainPlan.build(
+            List.of(disk(0, ""), disk(1, "/vm/root.img")), lookup(Map.of()));
+        assertEquals(1, plan.size());
+        assertEquals("/vm/root.img", plan.get(0).path);
+    }
+
+    @Test
+    public void everyMemberIsWalkedOnlyThroughTheLookup() throws Exception {
+        var asked = new ArrayList<String>();
+        var parents = Map.of("/vm/top.qcow2", "/vm/base.qcow2");
+        var plan = DiskChainPlan.build(List.of(disk(0, "/vm/top.qcow2")), path -> {
+            asked.add(path);
+            return parents.get(path);
+        });
+        assertEquals(List.of("/vm/top.qcow2", "/vm/base.qcow2"), asked);
+        assertSame(plan.get(0), find(plan, "/vm/top.qcow2"));
+    }
+}
diff --git a/app/src/test/java/cn/classfun/droidvm/lib/pkg/ManifestFeatureTest.java b/app/src/test/java/cn/classfun/droidvm/lib/pkg/ManifestFeatureTest.java
new file mode 100644
index 000000000..c133159da
--- /dev/null
+++ b/app/src/test/java/cn/classfun/droidvm/lib/pkg/ManifestFeatureTest.java
@@ -0,0 +1,60 @@
+package cn.classfun.droidvm.lib.pkg;
+
+import static org.junit.Assert.assertEquals;
+import static org.junit.Assert.assertTrue;
+
+import org.junit.Test;
+
+import java.util.EnumSet;
+
+/**
+ * The version stamp is a function of the features a package uses, never of their order: each
+ * feature says when it arrived, the package takes the highest. So a plain package stays at the
+ * base version, and the version this build can read follows from the feature list itself.
+ */
+public class ManifestFeatureTest {
+    private static DiskEntry entry(String path) {
+        return new DiskEntry(new DiskRef(0, path));
+    }
+
+    @Test
+    public void aPackageWithNoFeaturesIsBaseVersion() {
+        assertEquals(PackageConstants.MANIFEST_VERSION_BASE,
+            ManifestFeature.versionFor(EnumSet.noneOf(ManifestFeature.class)));
+    }
+
+    @Test
+    public void theStampIsTheHighestFeatureUsed() {
+        for (var feature : ManifestFeature.values())
+            assertEquals(feature.since, ManifestFeature.versionFor(EnumSet.of(feature)));
+        assertEquals(ManifestFeature.latest(),
+            ManifestFeature.versionFor(EnumSet.allOf(ManifestFeature.class)));
+    }
+
+    @Test
+    public void everyFeatureIsNewerThanBase() {
+        for (var feature : ManifestFeature.values())
+            assertTrue(feature.name(), feature.since > PackageConstants.MANIFEST_VERSION_BASE);
+        assertEquals(ManifestFeature.latest(), PackageConstants.MANIFEST_VERSION);
+    }
+
+    @Test
+    public void aPlainDiskUsesNothing() {
+        var used = EnumSet.noneOf(ManifestFeature.class);
+        entry("/vm/root.img").collectFeatures(used);
+        assertTrue(used.isEmpty());
+    }
+
+    @Test
+    public void anOverlayAndItsBaseBothNeedTheChainFeature() {
+        var overlay = entry("/vm/top.qcow2");
+        overlay.backingArchive = "base.qcow2";
+        var base = entry("/vm/base.qcow2");
+        base.attached = false;
+        for (var e : new DiskEntry[]{overlay, base}) {
+            var used = EnumSet.noneOf(ManifestFeature.class);
+            e.collectFeatures(used);
+            assertEquals(EnumSet.of(ManifestFeature.BACKING_CHAIN), used);
+        }
+    }
+}

From 218188109c951a24de260a84772dbe53334f478b Mon Sep 17 00:00:00 2001
From: HuJK <gh@hujk.org>
Date: Thu, 3 Sep 2026 07:04:45 +0800
Subject: [PATCH 154/182] vmpkg import: one decision per packaged network, and
 conflicts scoped by kind

A package carries one network per distinct one its VM's adapters were on, and
they need not be alike -- an L2 bridge and a routed gVisor network travel
together fine -- so the single whole-package choice could not say anything
useful about either. Each packaged network now gets its own card: join one this
phone already has, create it here, or leave it behind, in that order, with the
default landing on the first that is actually available.

Joining is what carries the settings that only exist for one kind of network:
an L3 VLAN's DHCP pool offsets, a gVisor network's IPv6 SNAT. So the target
list is exactly the networks of the same bridge type and uplink mode, closest
first -- by IPv4 prefix (IPv6 when the packaged network has no IPv4), or by
uplink name for L2 -- which puts the network the user means at the top. An
empty list greys "join" out and says so.

The other two greyings are the same question asked the other way. Creating is
refused when the packaged network would collide with one already here, and that
check is now scoped: two Linux bridges route in the host kernel and cannot hold
the same prefix, two gVisor networks collide the same way inside their own
user-space stacks, but a Linux bridge and a gVisor network never see each
other's routes at all -- gVisor's addressing lives in its process, the kernel
has no idea the prefix exists -- so the same subnet on both is fine, and
refusing it only cost address space. An L2 network has no prefix to collide
with; what it cannot share is the physical uplink it bridges, which one network
at a time owns (a rule the editor now enforces too). Names are deliberately not
scoped: the display name and the bridge name stay unique app-wide, which is why
they are also the one thing an import may quietly change, and the card shows
what it settled on before the import runs.

At most one of "join" and "create" is ever greyed, because a collision proves a
network of that kind exists, and that network is a join candidate.

Static DHCP leases come across too. An offset from the other phone is kept
where it can be -- it is the address the guest has been answering on -- and
otherwise moves to the next free one, wrapping rather than stopping at the top
of the VLAN, since the fallback is a dynamic address. Only when the VLAN has
nothing free, does not serve that family, or the NIC ended up on no network at
all does the lease go back to dynamic. A kept lease also gets a MAC: exporting
strips them (two phones must not hand out the same one) and a static lease is
keyed by MAC, so waiting for the user to open the NIC editor would leave the
VM unable to start.

The screen and the import task share NetworkImportPlan, so what the user is
shown is what gets built; the request carries the decisions as network_plan,
with network_mode kept as the fallback for a ref the plan does not mention.

Verified on device: cross-type same-subnet accepted, same-type refused, L2
uplink refused, join reuses the network and moves a colliding offset 70 -> 71,
create renames to lan50_1/brlan501 and gv50_1/brgv501 with the bridge type
intact.

Signed-off-by: HuJK <gh@hujk.org>
---
 .../droidvm/daemon/vm/pkg/VMImportTask.java   | 130 +++++--
 .../droidvm/lib/pkg/NetworkImportPlan.java    | 347 ++++++++++++++++++
 .../store/network/NetworkConfigValidator.java |  15 +-
 .../lib/store/network/NetworkConflicts.java   | 202 ++++++++++
 .../droidvm/lib/store/vm/NicLeaseOffsets.java | 142 +++++++
 .../droidvm/lib/store/vm/VMNicConfig.java     |  13 +
 .../droidvm/ui/network/NetworkPresets.java    |  43 +--
 .../ui/network/edit/NetworkEditActivity.java  |  89 ++---
 .../droidvm/ui/vm/NicLeaseAllocator.java      |  76 +---
 .../ui/vm/pkg/imports/NetworkImportMode.java  |  18 +-
 .../vm/pkg/imports/VMPkgImportActivity.java   |  89 ++++-
 .../imports/VMPkgImportNetworkAdapter.java    |  53 ---
 .../pkg/imports/VMPkgImportNetworkBinder.java | 245 +++++++++++++
 .../main/res/layout/activity_vmpkg_import.xml |  12 +-
 .../res/layout/item_vmpkg_import_network.xml  |  62 ++++
 app/src/main/res/values-zh-rCN/strings.xml    |  14 +-
 app/src/main/res/values-zh-rTW/strings.xml    |  14 +-
 app/src/main/res/values/strings.xml           |  14 +-
 .../lib/pkg/NetworkImportPlanTest.java        | 144 ++++++++
 .../store/network/NetworkConflictsTest.java   | 125 +++++++
 .../lib/store/vm/NicLeaseOffsetsTest.java     |  83 +++++
 21 files changed, 1636 insertions(+), 294 deletions(-)
 create mode 100644 app/src/main/java/cn/classfun/droidvm/lib/pkg/NetworkImportPlan.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/lib/store/network/NetworkConflicts.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/lib/store/vm/NicLeaseOffsets.java
 delete mode 100644 app/src/main/java/cn/classfun/droidvm/ui/vm/pkg/imports/VMPkgImportNetworkAdapter.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/ui/vm/pkg/imports/VMPkgImportNetworkBinder.java
 create mode 100644 app/src/main/res/layout/item_vmpkg_import_network.xml
 create mode 100644 app/src/test/java/cn/classfun/droidvm/lib/pkg/NetworkImportPlanTest.java
 create mode 100644 app/src/test/java/cn/classfun/droidvm/lib/store/network/NetworkConflictsTest.java
 create mode 100644 app/src/test/java/cn/classfun/droidvm/lib/store/vm/NicLeaseOffsetsTest.java

diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/vm/pkg/VMImportTask.java b/app/src/main/java/cn/classfun/droidvm/daemon/vm/pkg/VMImportTask.java
index eda9759af..c191d9f3a 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/vm/pkg/VMImportTask.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/vm/pkg/VMImportTask.java
@@ -8,6 +8,7 @@
 import static cn.classfun.droidvm.daemon.vm.pkg.VMImportUtils.uniqueFile;
 import static cn.classfun.droidvm.lib.pkg.PackageConstants.BUFFER;
 import static cn.classfun.droidvm.lib.utils.BinaryUtils.readFully;
+import static cn.classfun.droidvm.lib.utils.NetUtils.generateRandomMac;
 import static cn.classfun.droidvm.lib.utils.JsonUtils.listToJSONArray;
 import static cn.classfun.droidvm.lib.utils.StringUtils.basename;
 import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
@@ -28,14 +29,15 @@
 import java.io.InputStream;
 import java.util.ArrayList;
 import java.util.HashMap;
+import java.util.HashSet;
 import java.util.List;
 import java.util.UUID;
-import java.util.concurrent.atomic.AtomicBoolean;
 
 import cn.classfun.droidvm.daemon.server.Server;
 import cn.classfun.droidvm.lib.archive.TarReader;
 import cn.classfun.droidvm.lib.pkg.BootFile;
 import cn.classfun.droidvm.lib.pkg.DiskEntry;
+import cn.classfun.droidvm.lib.pkg.NetworkImportPlan;
 import cn.classfun.droidvm.lib.pkg.PackageConstants;
 import cn.classfun.droidvm.lib.pkg.PackageHeader;
 import cn.classfun.droidvm.lib.pkg.PackageInput;
@@ -44,7 +46,9 @@
 import cn.classfun.droidvm.lib.pkg.VolumeSet;
 import cn.classfun.droidvm.lib.store.base.DataItem;
 import cn.classfun.droidvm.lib.store.network.NetworkConfig;
+import cn.classfun.droidvm.lib.store.vm.NicLeaseOffsets;
 import cn.classfun.droidvm.lib.store.vm.VMConfig;
+import cn.classfun.droidvm.lib.store.vm.VMNicConfig;
 import cn.classfun.droidvm.lib.utils.ImageUtils;
 
 public final class VMImportTask {
@@ -54,7 +58,9 @@ public final class VMImportTask {
     private final Server server;
     private final String srcPath;
     private final File targetDir;
-    private final String networkMode;
+    /** What to do with a packaged network the plan says nothing about. */
+    private final NetworkImportPlan.Action networkFallback;
+    private final List<NetworkImportPlan.Entry> networkPlan;
     /** This package's own folder under {@link #targetDir}; created before the first file lands. */
     private File vmDir = null;
     private String vmName = "";
@@ -75,7 +81,11 @@ public VMImportTask(@NonNull Server server, @NonNull JSONObject request) {
         if (!targetPath.startsWith("/"))
             throw new IllegalArgumentException("missing target_dir");
         targetDir = new File(targetPath);
-        networkMode = request.optString("network_mode", "auto");
+        networkPlan = NetworkImportPlan.parse(request.optJSONArray("network_plan"));
+        // A caller with no plan gets the old whole-package behaviour: "skip" attaches nothing,
+        // anything else recreates every network the package carries.
+        networkFallback = request.optString("network_mode", "auto").equals("skip")
+            ? NetworkImportPlan.Action.SKIP : NetworkImportPlan.Action.CREATE;
     }
 
     public void startAsync() {
@@ -87,6 +97,7 @@ private void run() {
         try {
             unpack();
             var networks = importNetworks(importedVM, importedManifest.networks);
+            resolveLeases(importedVM);
             var vmId = server.getContext().getVMs().createVM(importedVM);
             if (vmId == null || vmId.isEmpty()) throw new IOException("failed to register VM");
             registered = true;
@@ -253,6 +264,14 @@ private void extract(@NonNull PackageInput pkg) throws Exception {
         pkg.validateDataConsumed();
     }
 
+    /**
+     * Applies the import plan: each network the package carries is joined to one this phone
+     * already has, created here, or left behind, and every NIC that referenced it is re-pointed
+     * at what it ended up on. A NIC whose network was skipped -- or whose join target has since
+     * been deleted -- comes out unattached rather than pointing at nothing.
+     *
+     * @return the networks this import created, for the caller to persist
+     */
     @NonNull
     private JSONArray importNetworks(
         @NonNull VMConfig vm,
@@ -260,24 +279,28 @@ private JSONArray importNetworks(
     ) throws Exception {
         var refs = new HashMap<String, String>();
         var created = new JSONArray();
-        if (networkMode.equals("skip")) {
-            remapNetworks(vm, refs);
-            return created;
-        }
         var store = server.getContext().getNetworks();
+        var plan = new NetworkImportPlan(store);
         for (var source : configs) {
-            var ref = source.item.optString("pkg_network_ref", "");
+            var ref = source.item.optString(NetworkImportPlan.REF_KEY, "");
             if (ref.isEmpty()) continue;
-            if (networkMode.equals("existing")) {
-                var existing = store.findByName(source.getName());
-                if (existing != null) refs.put(ref, existing.getId().toString());
+            var entry = NetworkImportPlan.findRef(networkPlan, ref);
+            var action = entry == null ? networkFallback : entry.action;
+            if (action == NetworkImportPlan.Action.SKIP) continue;
+            if (action == NetworkImportPlan.Action.JOIN) {
+                var target = entry == null || entry.networkId == null
+                    ? null : store.findById(entry.networkId);
+                if (target == null) {
+                    Log.w(TAG, fmt("Import %s: no network to join for %s", taskId, ref));
+                    continue;
+                }
+                refs.put(ref, target.getId().toString());
                 continue;
             }
-            var cfg = new NetworkConfig(source.toJson());
-            cfg.item.remove("pkg_network_ref");
-            cfg.setId(UUID.randomUUID());
-            cfg.setName(uniqueNetworkName(cfg.getName()));
-            makeBridgeNameUnique(cfg);
+            // The screen prepared the config so the user could see what it would be; take it,
+            // but let the plan settle the names again against the store as it is right now.
+            var cfg = entry != null && entry.config != null
+                ? plan.adopt(entry.config) : plan.prepareCreate(source);
             var id = store.createNetwork(cfg);
             if (id == null || id.isEmpty()) continue;
             refs.put(ref, id);
@@ -295,38 +318,65 @@ private void remapNetworks(
         if (nets == null || !nets.is(DataItem.Type.ARRAY)) return;
         for (var nic : nets.asArray()) {
             if (!nic.is(DataItem.Type.OBJECT)) continue;
-            var ref = nic.optString("pkg_network_ref", "");
-            nic.remove("pkg_network_ref");
+            var ref = nic.optString(NetworkImportPlan.REF_KEY, "");
+            nic.remove(NetworkImportPlan.REF_KEY);
             var id = refs.get(ref);
             if (id == null || id.isEmpty()) nic.remove("network_id");
             else nic.set("network_id", id);
         }
     }
 
-    @NonNull
-    private String uniqueNetworkName(@NonNull String name) {
-        var store = server.getContext().getNetworks();
-        if (store.findByName(name) == null) return name;
-        int i = 1;
-        while (store.findByName(fmt("%s_%d", name, i)) != null) i++;
-        return fmt("%s_%d", name, i);
-    }
-
-    private void makeBridgeNameUnique(@NonNull NetworkConfig cfg) {
-        var bridge = cfg.getBridgeName();
-        if (bridge == null || bridge.isEmpty()) return;
-        if (isBridgeNameUnique(bridge)) return;
-        int i = 1;
-        while (!isBridgeNameUnique(fmt("%s%d", bridge, i))) i++;
-        cfg.setBridgeName(fmt("%s%d", bridge, i));
+    /**
+     * Makes every static DHCP lease the package brought fit the network its NIC actually landed
+     * on. An offset that came from the other phone is kept where it can be: it is what the guest
+     * has been answering on. Where it cannot -- another VM here already holds it, it falls inside
+     * this VLAN's dynamic pool, or the VLAN is smaller than it was over there -- the next free
+     * offset is taken instead, and only when the VLAN has nothing free at all (or does not serve
+     * that family, or the NIC ended up on no network) does the lease go back to a dynamic
+     * address. Refusing the import over an address a VM can perfectly well be given by DHCP
+     * would help nobody.
+     */
+    private void resolveLeases(@NonNull VMConfig vm) {
+        vm.forEachNic(nic -> {
+            resolveLease(vm, nic, NicLeaseOffsets.Family.IPV4);
+            resolveLease(vm, nic, NicLeaseOffsets.Family.IPV6);
+        });
     }
 
-    private boolean isBridgeNameUnique(@NonNull String bridgeName) {
-        var unique = new AtomicBoolean(true);
-        server.getContext().getNetworks().forEach((id, net) -> {
-            if (bridgeName.equals(net.getBridgeName())) unique.set(false);
-        });
-        return unique.get();
+    private void resolveLease(
+        @NonNull VMConfig vm,
+        @NonNull VMNicConfig nic,
+        @NonNull NicLeaseOffsets.Family family
+    ) {
+        boolean ipv6 = family == NicLeaseOffsets.Family.IPV6;
+        if (!(ipv6 ? nic.isDhcp6LeaseEnabled() : nic.isDhcp4LeaseEnabled())) return;
+        var netId = nic.getNetworkId();
+        var network = netId == null ? null : server.getContext().getNetworks().findById(netId);
+        var vlan = network == null ? null : nic.resolveDhcpVlan(network);
+        if (vlan == null || !(ipv6 ? vlan.isDhcp6Enabled() : vlan.isDhcp4Enabled())) {
+            nic.setDhcpLeaseEnabled(ipv6, false);
+            return;
+        }
+        var used = new HashSet<Long>();
+        server.getContext().getVMs().forEach((id, other) ->
+            NicLeaseOffsets.addOffsets(used, other, network, vlan, family));
+        // this VM is not registered yet, so its own other NICs are only in the config in hand
+        NicLeaseOffsets.addOffsets(used, vm, network, vlan, family, nic);
+        boolean has = ipv6 ? nic.hasDhcp6Offset() : nic.hasDhcp4Offset();
+        long wanted = !has ? NicLeaseOffsets.FIRST
+            : (ipv6 ? nic.getDhcp6Offset() : nic.getDhcp4Offset());
+        long offset = NicLeaseOffsets.resolve(wanted, used, vlan, family);
+        if (offset < 0) {
+            Log.w(TAG, fmt("Import %s: no free lease offset on network %s", taskId, netId));
+            nic.setDhcpLeaseEnabled(ipv6, false);
+            return;
+        }
+        if (ipv6) nic.setDhcp6Offset(offset);
+        else nic.setDhcp4Offset(offset);
+        // Exporting strips NIC MAC addresses -- two phones must not hand out the same one -- but
+        // a static lease is keyed by MAC, so a kept lease needs one now rather than whenever the
+        // user next opens the NIC editor.
+        if (nic.getMacAddress() == null) nic.item.set("mac_address", generateRandomMac());
     }
 
     private void copyEntry(
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/pkg/NetworkImportPlan.java b/app/src/main/java/cn/classfun/droidvm/lib/pkg/NetworkImportPlan.java
new file mode 100644
index 000000000..432f01ddf
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/lib/pkg/NetworkImportPlan.java
@@ -0,0 +1,347 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
+package cn.classfun.droidvm.lib.pkg;
+
+import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
+
+import androidx.annotation.NonNull;
+import androidx.annotation.Nullable;
+
+import org.json.JSONArray;
+import org.json.JSONException;
+import org.json.JSONObject;
+
+import java.util.ArrayList;
+import java.util.Comparator;
+import java.util.HashSet;
+import java.util.List;
+import java.util.Set;
+import java.util.UUID;
+
+import cn.classfun.droidvm.lib.network.IPv4Network;
+import cn.classfun.droidvm.lib.network.IPv6Network;
+import cn.classfun.droidvm.lib.store.base.DataStore;
+import cn.classfun.droidvm.lib.store.network.NetworkConfig;
+import cn.classfun.droidvm.lib.store.network.NetworkConfigValidator;
+import cn.classfun.droidvm.lib.store.network.NetworkConflicts;
+import cn.classfun.droidvm.lib.store.network.UplinkMode;
+
+/**
+ * What happens to each network a package carries: join one this phone already has, create it, or
+ * leave it behind. One instance answers for one import against one set of existing networks, and
+ * remembers the names its own creations have claimed, so two packaged networks that want the same
+ * name do not both end up asking for it.
+ *
+ * <p>The screen and the import task share this class so that what the user is shown is what gets
+ * built: the same rules pick which networks may be joined, decide whether creating is possible at
+ * all, and settle the name a created network ends up with.
+ */
+public final class NetworkImportPlan {
+    /** The manifest field carrying a packaged network's reference key. */
+    public static final String REF_KEY = "pkg_network_ref";
+
+    private final List<NetworkConfig> existing;
+    private final Set<String> takenNames = new HashSet<>();
+    private final Set<String> takenBridges = new HashSet<>();
+    private final Set<String> takenIds = new HashSet<>();
+
+    public NetworkImportPlan(@NonNull DataStore<? extends NetworkConfig> store) {
+        this(NetworkConflicts.snapshot(store));
+    }
+
+    public NetworkImportPlan(@NonNull List<NetworkConfig> existing) {
+        this.existing = existing;
+        for (var net : existing) {
+            var name = net.getName();
+            if (name != null) takenNames.add(name);
+            var bridge = net.getBridgeName();
+            if (bridge != null && !bridge.isEmpty()) takenBridges.add(bridge);
+            var id = net.item.optString("id", "");
+            if (!id.isEmpty()) takenIds.add(id);
+        }
+    }
+
+    /** What to do with one packaged network. */
+    public enum Action {
+        JOIN("join"),
+        CREATE("create"),
+        SKIP("skip");
+
+        private final String key;
+
+        Action(@NonNull String key) {
+            this.key = key;
+        }
+
+        @NonNull
+        public String key() {
+            return key;
+        }
+
+        /** The action for a wire key; unknown keys read as {@link #CREATE}, the old default. */
+        @NonNull
+        public static Action fromKey(@Nullable String key) {
+            for (var v : values())
+                if (v.key.equals(key)) return v;
+            return CREATE;
+        }
+    }
+
+    /** One decision, keyed by the packaged network's {@link #REF_KEY}. */
+    public static final class Entry {
+        @NonNull
+        public final String ref;
+        @NonNull
+        public final Action action;
+        /** The network to join, for {@link Action#JOIN}. */
+        @Nullable
+        public final String networkId;
+        /** The network to create, for {@link Action#CREATE}; null to derive it on the spot. */
+        @Nullable
+        public final NetworkConfig config;
+
+        public Entry(
+            @NonNull String ref,
+            @NonNull Action action,
+            @Nullable String networkId,
+            @Nullable NetworkConfig config
+        ) {
+            this.ref = ref;
+            this.action = action;
+            this.networkId = networkId;
+            this.config = config;
+        }
+
+        @NonNull
+        public JSONObject toJson() throws JSONException {
+            var o = new JSONObject();
+            o.put("ref", ref);
+            o.put("action", action.key());
+            if (networkId != null) o.put("network_id", networkId);
+            if (config != null) o.put("config", config.toJson());
+            return o;
+        }
+
+        @NonNull
+        public static Entry fromJson(@NonNull JSONObject o) throws JSONException {
+            var cfgJson = o.optJSONObject("config");
+            NetworkConfig cfg = null;
+            if (cfgJson != null) cfg = new NetworkConfig(cfgJson);
+            var id = o.optString("network_id", "");
+            return new Entry(
+                o.optString("ref", ""),
+                Action.fromKey(o.optString("action", "")),
+                id.isEmpty() ? null : id,
+                cfg
+            );
+        }
+    }
+
+    /** Reads a plan array; entries that cannot be parsed are dropped rather than failing it. */
+    @NonNull
+    public static List<Entry> parse(@Nullable JSONArray arr) {
+        var out = new ArrayList<Entry>();
+        if (arr == null) return out;
+        for (int i = 0; i < arr.length(); i++) {
+            var o = arr.optJSONObject(i);
+            if (o == null) continue;
+            try {
+                var entry = Entry.fromJson(o);
+                if (!entry.ref.isEmpty()) out.add(entry);
+            } catch (JSONException ignored) {
+            }
+        }
+        return out;
+    }
+
+    /** The entry for a ref, or null when the plan says nothing about it. */
+    @Nullable
+    public static Entry findRef(@NonNull List<Entry> plan, @NonNull String ref) {
+        for (var entry : plan)
+            if (entry.ref.equals(ref)) return entry;
+        return null;
+    }
+
+    /**
+     * The networks this packaged one may be joined to, closest match first.
+     *
+     * <p>Only networks of the same kind qualify: joining is what carries the packaged VM's
+     * kind-specific settings across intact -- an L3 network's DHCP pool offsets, a gVisor
+     * network's IPv6 SNAT -- and none of that survives being attached to a network built the
+     * other way. An empty list means this package's network has nothing here to join.
+     */
+    @NonNull
+    public List<NetworkConfig> candidates(@NonNull NetworkConfig packaged) {
+        var out = new ArrayList<NetworkConfig>();
+        for (var net : existing)
+            if (NetworkConflicts.sameKind(packaged, net)) out.add(net);
+        out.sort(Comparator
+            .comparingLong((NetworkConfig net) -> distance(packaged, net))
+            .thenComparing(net -> net.getName() == null ? "" : net.getName()));
+        return out;
+    }
+
+    /**
+     * Why creating this packaged network here would collide, or null when it would not. Same
+     * rules as the network editor: an overlapping prefix on a network of the same bridge type,
+     * or an L2 uplink another network already bridges.
+     */
+    @Nullable
+    public NetworkConflicts.Conflict createConflict(@NonNull NetworkConfig packaged) {
+        return NetworkConflicts.find(packaged, existing, null);
+    }
+
+    /**
+     * The network a packaged one would be created as: its own config, given a fresh id and
+     * whatever name and bridge name are still free. Names are the one thing an import is allowed
+     * to change quietly -- they must be unique across every network on the phone whatever its
+     * kind, and a collision there says nothing about whether the network itself fits.
+     *
+     * <p>Claims the names it hands out, so calling this once per network being created gives each
+     * of them a different one.
+     */
+    @NonNull
+    public NetworkConfig prepareCreate(@NonNull NetworkConfig packaged) {
+        NetworkConfig cfg;
+        try {
+            cfg = new NetworkConfig(packaged.toJson());
+        } catch (JSONException e) {
+            throw new IllegalArgumentException("packaged network is not serializable", e);
+        }
+        cfg.item.remove(REF_KEY);
+        cfg.item.remove("id");
+        return adopt(cfg);
+    }
+
+    /**
+     * Settles a config that is already meant to be created here: a free id, and names that are
+     * still free. Applied to what the screen prepared as well, because the two run against their
+     * own copies of the store and a network may have appeared in between -- an import that
+     * renames one network too many is a great deal better than one that fails on a duplicate.
+     *
+     * <p>Mutates and returns {@code cfg}, and claims what it hands out.
+     */
+    @NonNull
+    public NetworkConfig adopt(@NonNull NetworkConfig cfg) {
+        var id = cfg.item.optString("id", "");
+        if (id.isEmpty() || takenIds.contains(id)) {
+            id = UUID.randomUUID().toString();
+            cfg.setId(id);
+        }
+        takenIds.add(id);
+        var name = uniqueName(cfg.getName());
+        cfg.setName(name);
+        takenNames.add(name);
+        var bridge = cfg.getBridgeName();
+        if (bridge != null && !bridge.isEmpty()) {
+            var unique = uniqueBridge(bridge);
+            cfg.setBridgeName(unique);
+            takenBridges.add(unique);
+        }
+        return cfg;
+    }
+
+    /** {@code base} or the first free {@code base_N}. */
+    @NonNull
+    private String uniqueName(@Nullable String base) {
+        var name = base == null || base.trim().isEmpty() ? "network" : base;
+        if (!takenNames.contains(name)) return name;
+        for (int i = 1; ; i++) {
+            var candidate = fmt("%s_%d", name, i);
+            if (!takenNames.contains(candidate)) return candidate;
+        }
+    }
+
+    /**
+     * {@code base} or the first free {@code baseN}, trimmed so the suffix still fits the
+     * interface-name cap -- a bridge name over it is refused outright, so growing one past it to
+     * dodge a duplicate would only trade a collision for a rejection.
+     */
+    @NonNull
+    private String uniqueBridge(@NonNull String base) {
+        if (!takenBridges.contains(base)) return base;
+        for (int i = 1; i < 100000; i++) {
+            var suffix = String.valueOf(i);
+            int room = NetworkConfigValidator.MAX_BRIDGE_NAME_LEN - suffix.length();
+            var head = base.length() > room ? base.substring(0, Math.max(1, room)) : base;
+            var candidate = fmt("%s%s", head, suffix);
+            if (!takenBridges.contains(candidate)) return candidate;
+        }
+        return base;
+    }
+
+    /**
+     * How far a candidate is from the packaged network, lower being closer: for L2 the uplink it
+     * bridges, for L3 the primary IPv4 prefix, falling back to IPv6 when the packaged network has
+     * no IPv4 of its own. The point is that the network the user most likely means -- the same
+     * segment, the same uplink, carried over from the other phone -- is the one already selected.
+     */
+    private static long distance(@NonNull NetworkConfig packaged, @NonNull NetworkConfig other) {
+        if (packaged.getUplinkMode() == UplinkMode.L2) {
+            var mine = packaged.getL2Uplink();
+            var theirs = other.getL2Uplink();
+            if (mine == null || theirs == null) return 1000;
+            if (mine.trim().equalsIgnoreCase(theirs.trim())) return 0;
+            return 1000 - commonChars(mine, theirs);
+        }
+        var mine4 = primaryV4(packaged);
+        if (mine4 != null) {
+            var theirs4 = primaryV4(other);
+            return theirs4 == null ? 1000 : 32 - commonBits4(mine4, theirs4);
+        }
+        var mine6 = primaryV6(packaged);
+        if (mine6 != null) {
+            var theirs6 = primaryV6(other);
+            return theirs6 == null ? 1000 : 128 - commonBits6(mine6, theirs6);
+        }
+        return 500;
+    }
+
+    /** The first IPv4 network this config addresses, untagged VLAN first. */
+    @Nullable
+    private static IPv4Network primaryV4(@NonNull NetworkConfig cfg) {
+        IPv4Network first = null;
+        for (var vlan : cfg.getVlans()) {
+            var net = vlan.getIpv4Network();
+            if (net == null) continue;
+            if (vlan.isUntagged()) return net;
+            if (first == null) first = net;
+        }
+        return first;
+    }
+
+    @Nullable
+    private static IPv6Network primaryV6(@NonNull NetworkConfig cfg) {
+        IPv6Network first = null;
+        for (var vlan : cfg.getVlans()) {
+            var net = vlan.getIpv6Network();
+            if (net == null) continue;
+            if (vlan.isUntagged()) return net;
+            if (first == null) first = net;
+        }
+        return first;
+    }
+
+    private static long commonBits4(@NonNull IPv4Network a, @NonNull IPv4Network b) {
+        long diff = a.networkAddress().value() ^ b.networkAddress().value();
+        int bits = 0;
+        for (int i = 31; i >= 0 && ((diff >> i) & 1L) == 0; i--) bits++;
+        return bits;
+    }
+
+    private static long commonBits6(@NonNull IPv6Network a, @NonNull IPv6Network b) {
+        var diff = a.networkAddress().value().xor(b.networkAddress().value());
+        int bits = 0;
+        for (int i = 127; i >= 0 && !diff.testBit(i); i--) bits++;
+        return bits;
+    }
+
+    private static long commonChars(@NonNull String a, @NonNull String b) {
+        int n = Math.min(a.length(), b.length());
+        int i = 0;
+        while (i < n && Character.toLowerCase(a.charAt(i)) == Character.toLowerCase(b.charAt(i)))
+            i++;
+        return i;
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/store/network/NetworkConfigValidator.java b/app/src/main/java/cn/classfun/droidvm/lib/store/network/NetworkConfigValidator.java
index 7b31d5b4d..e02fc9d3f 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/store/network/NetworkConfigValidator.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/store/network/NetworkConfigValidator.java
@@ -21,6 +21,13 @@
  * with a human-readable message on the first violation found.
  */
 public final class NetworkConfigValidator {
+    /**
+     * Cap on a bridge interface name. 12, so the longest derived name still fits IFNAMSIZ (15
+     * usable): a per-VLAN bridge / trunk leg appends "v" or "." plus a 2-char VLAN code (bridge
+     * + 3). See LinuxNetwork.vlanCode / perVlanBridge.
+     */
+    public static final int MAX_BRIDGE_NAME_LEN = 12;
+
     private NetworkConfigValidator() {
     }
 
@@ -31,11 +38,9 @@ public static void validate(@NonNull NetworkConfig config) {
         var bridgeName = config.getBridgeName();
         if (bridgeName == null || !bridgeName.matches("[a-zA-Z][a-zA-Z0-9_-]*"))
             throw new IllegalArgumentException(fmt("Invalid bridge name: %s", bridgeName));
-        // Cap at 12 so the longest derived name still fits IFNAMSIZ (15 usable):
-        // a per-VLAN bridge / trunk leg appends "v" or "." plus a 2-char VLAN
-        // code (bridge + 3). See LinuxNetwork.vlanCode / perVlanBridge.
-        if (bridgeName.length() > 12)
-            throw new IllegalArgumentException("Bridge name longer than 12 characters");
+        if (bridgeName.length() > MAX_BRIDGE_NAME_LEN)
+            throw new IllegalArgumentException(fmt(
+                "Bridge name longer than %d characters", MAX_BRIDGE_NAME_LEN));
 
         var type = config.getBridgeType();
         var mode = config.getUplinkMode();
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/store/network/NetworkConflicts.java b/app/src/main/java/cn/classfun/droidvm/lib/store/network/NetworkConflicts.java
new file mode 100644
index 000000000..437e81aa2
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/lib/store/network/NetworkConflicts.java
@@ -0,0 +1,202 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
+package cn.classfun.droidvm.lib.store.network;
+
+import androidx.annotation.NonNull;
+import androidx.annotation.Nullable;
+
+import java.util.ArrayList;
+import java.util.List;
+import java.util.UUID;
+
+import cn.classfun.droidvm.lib.network.IPv4Network;
+import cn.classfun.droidvm.lib.network.IPv6Network;
+import cn.classfun.droidvm.lib.store.base.DataStore;
+
+/**
+ * What two networks may not share, and -- the point of this class -- which two networks that
+ * question is even asked about.
+ *
+ * <p>An address conflict is a conflict only where both networks are actually seen by the same
+ * stack. Two Linux bridges route in the host kernel, so their prefixes must not overlap; two
+ * gVisor networks collide the same way inside their own user-space stacks. A Linux bridge and a
+ * gVisor network never see each other's routes at all -- gVisor's addressing lives entirely in
+ * its own process, the kernel has no idea the prefix exists -- so the same subnet on both is
+ * fine, and refusing it only costs the user address space for no reason. An L2 network has no
+ * prefix to conflict with in the first place; what it cannot share is the physical uplink it
+ * bridges onto, which one network at a time owns.
+ *
+ * <p>Names are the exception and are deliberately not scoped here: the display name and the
+ * bridge interface name stay unique app-wide across every kind, because they name a thing the
+ * user picks from one list and the host resolves in one namespace. Those are the store's
+ * {@code isNameUnique} / {@code isBridgeNameUnique}.
+ */
+public final class NetworkConflicts {
+    private NetworkConflicts() {
+    }
+
+    /** What collided. */
+    public enum Kind {
+        IPV4,
+        IPV6,
+        UPLINK,
+    }
+
+    /** One collision: what of ours hit what of theirs, and whose. */
+    public static final class Conflict {
+        @NonNull
+        public final Kind kind;
+        /** Our subnet / uplink, as text. */
+        @NonNull
+        public final String mine;
+        /** Theirs, as text. */
+        @NonNull
+        public final String theirs;
+        /** The network we collided with. */
+        @NonNull
+        public final NetworkConfig other;
+
+        Conflict(
+            @NonNull Kind kind,
+            @NonNull String mine,
+            @NonNull String theirs,
+            @NonNull NetworkConfig other
+        ) {
+            this.kind = kind;
+            this.mine = mine;
+            this.theirs = theirs;
+            this.other = other;
+        }
+
+        /** The other network's display name, never null for a message. */
+        @NonNull
+        public String otherName() {
+            var name = other.getName();
+            return name == null ? "" : name;
+        }
+    }
+
+    /**
+     * Whether a conflict between these two is even possible: same bridge type, and -- since an
+     * L2 network conflicts on its uplink and an L3 one on its prefixes -- same uplink mode. This
+     * is also exactly the set a packaged network may be imported into, so that every setting
+     * that is specific to a kind (L3 DHCP pool offsets, gVisor's IPv6 SNAT) carries over intact.
+     */
+    public static boolean sameKind(@NonNull NetworkConfig a, @NonNull NetworkConfig b) {
+        return a.getBridgeType() == b.getBridgeType()
+            && a.getUplinkMode() == b.getUplinkMode();
+    }
+
+    /** The first conflict between {@code cfg} and anything in the store, or null if it is free. */
+    @Nullable
+    public static Conflict find(
+        @NonNull NetworkConfig cfg,
+        @NonNull DataStore<? extends NetworkConfig> store,
+        @Nullable UUID exclude
+    ) {
+        return find(cfg, snapshot(store), exclude);
+    }
+
+    /** The same, against an explicit list. */
+    @Nullable
+    public static Conflict find(
+        @NonNull NetworkConfig cfg,
+        @NonNull List<? extends NetworkConfig> others,
+        @Nullable UUID exclude
+    ) {
+        var mine4 = new ArrayList<IPv4Network>();
+        var mine6 = new ArrayList<IPv6Network>();
+        collectSubnets(cfg.getVlans(), mine4, mine6);
+        var myUplink = cfg.getUplinkMode() == UplinkMode.L2 ? cfg.getL2Uplink() : null;
+        for (var other : others) {
+            if (exclude != null && exclude.toString().equals(other.item.optString("id", "")))
+                continue;
+            if (!sameKind(cfg, other)) continue;
+            if (myUplink != null) {
+                var theirs = other.getL2Uplink();
+                if (theirs != null && theirs.trim().equalsIgnoreCase(myUplink.trim()))
+                    return new Conflict(Kind.UPLINK, myUplink, theirs, other);
+                continue;
+            }
+            var conflict = findAddressConflict(mine4, mine6, other);
+            if (conflict != null) return conflict;
+        }
+        return null;
+    }
+
+    @Nullable
+    private static Conflict findAddressConflict(
+        @NonNull List<IPv4Network> mine4,
+        @NonNull List<IPv6Network> mine6,
+        @NonNull NetworkConfig other
+    ) {
+        var their4 = new ArrayList<IPv4Network>();
+        var their6 = new ArrayList<IPv6Network>();
+        collectSubnets(other.getVlans(), their4, their6);
+        for (var mine : mine4)
+            for (var theirs : their4)
+                if (mine.overlaps(theirs)) return new Conflict(
+                    Kind.IPV4, mine.toString(), theirs.toString(), other);
+        for (var mine : mine6)
+            for (var theirs : their6)
+                if (mine.overlaps(theirs)) return new Conflict(
+                    Kind.IPV6, mine.toString(), theirs.toString(), other);
+        return null;
+    }
+
+    /**
+     * The first pair of this config's own subnets that overlap each other, as {@code {a, b}}, or
+     * null when it is self-consistent. Not scoped by anything: one network's VLANs share a stack
+     * by definition.
+     */
+    @Nullable
+    public static String[] findSelfOverlap(@NonNull NetworkConfig cfg) {
+        var mine4 = new ArrayList<IPv4Network>();
+        var mine6 = new ArrayList<IPv6Network>();
+        collectSubnets(cfg.getVlans(), mine4, mine6);
+        for (int i = 0; i < mine4.size(); i++)
+            for (int j = i + 1; j < mine4.size(); j++)
+                if (mine4.get(i).overlaps(mine4.get(j))) return new String[]{
+                    mine4.get(i).toString(), mine4.get(j).toString()};
+        for (int i = 0; i < mine6.size(); i++)
+            for (int j = i + 1; j < mine6.size(); j++)
+                if (mine6.get(i).overlaps(mine6.get(j))) return new String[]{
+                    mine6.get(i).toString(), mine6.get(j).toString()};
+        return null;
+    }
+
+    /** Appends every subnet these VLANs hold, primary and secondary, to the given lists. */
+    public static void collectSubnets(
+        @NonNull Iterable<VlanConfig> vlans,
+        @NonNull List<IPv4Network> out4,
+        @NonNull List<IPv6Network> out6
+    ) {
+        for (var vlan : vlans) {
+            var net4 = vlan.getIpv4Network();
+            if (net4 != null) out4.add(net4);
+            for (var cidr : vlan.getIpv4Secondary()) {
+                try {
+                    out4.add(IPv4Network.parse(cidr));
+                } catch (Exception ignored) {
+                }
+            }
+            var net6 = vlan.getIpv6Network();
+            if (net6 != null) out6.add(net6);
+            for (var cidr : vlan.getIpv6Secondary()) {
+                try {
+                    out6.add(IPv6Network.parse(cidr));
+                } catch (Exception ignored) {
+                }
+            }
+        }
+    }
+
+    /** Every config in a store, as a plain list. */
+    @NonNull
+    public static List<NetworkConfig> snapshot(@NonNull DataStore<? extends NetworkConfig> store) {
+        var out = new ArrayList<NetworkConfig>();
+        for (int i = 0; i < store.size(); i++) out.add(store.get(i));
+        return out;
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/store/vm/NicLeaseOffsets.java b/app/src/main/java/cn/classfun/droidvm/lib/store/vm/NicLeaseOffsets.java
new file mode 100644
index 000000000..7f7c3f099
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/lib/store/vm/NicLeaseOffsets.java
@@ -0,0 +1,142 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
+package cn.classfun.droidvm.lib.store.vm;
+
+import androidx.annotation.NonNull;
+import androidx.annotation.Nullable;
+
+import java.math.BigInteger;
+import java.util.Set;
+
+import cn.classfun.droidvm.lib.store.network.NetworkConfig;
+import cn.classfun.droidvm.lib.store.network.VlanConfig;
+
+/**
+ * Which DHCP static-lease offsets a VLAN has left, and which one a NIC should take.
+ *
+ * <p>An offset is what a static lease actually stores: the host part, counted from the VLAN's
+ * network address, so the lease survives the network being re-addressed. Two NICs on the same
+ * VLAN holding the same offset would be handed the same IP, so an offset is allocated against
+ * everything already on that VLAN -- every other VM's NICs, and the VM's own other NICs.
+ *
+ * <p>Pure arithmetic over configs: no store, no context, no side effects. Callers decide where
+ * the VMs come from and what to do with the answer.
+ */
+public final class NicLeaseOffsets {
+    /** Static leases start here, leaving 1..63 for whatever the host wants at the low end. */
+    public static final long FIRST = 64;
+    /** Cap on how far a search walks before it gives up, so a huge VLAN cannot hang it. */
+    private static final long MAX_PROBES = 1L << 16;
+
+    private NicLeaseOffsets() {
+    }
+
+    /** Which address family's lease is meant. */
+    public enum Family {
+        IPV4,
+        IPV6,
+    }
+
+    /**
+     * The offsets one VM's NICs hold on this network/VLAN, appended to {@code used}. Callers walk
+     * their own store: everything on the VLAN counts, including the resolving VM's other NICs, so
+     * that two NICs resolved in one pass cannot land on the same offset.
+     */
+    public static void addOffsets(
+        @NonNull Set<Long> used,
+        @NonNull VMConfig vm,
+        @NonNull NetworkConfig network,
+        @NonNull VlanConfig vlan,
+        @NonNull Family family
+    ) {
+        addOffsets(used, vm, network, vlan, family, null);
+    }
+
+    /**
+     * The same, with one NIC left out -- the one being resolved, whose own offset is the thing
+     * being asked about and so must not count as taken.
+     */
+    public static void addOffsets(
+        @NonNull Set<Long> used,
+        @NonNull VMConfig vm,
+        @NonNull NetworkConfig network,
+        @NonNull VlanConfig vlan,
+        @NonNull Family family,
+        @Nullable VMNicConfig exclude
+    ) {
+        var netIdStr = network.item.optString("id", "");
+        if (netIdStr.isEmpty()) return;
+        vm.forEachNic(nic -> {
+            // same underlying entry, re-wrapped by forEachNic
+            if (exclude != null && nic.item == exclude.item) return;
+            if (!netIdStr.equals(nic.getNetworkId())) return;
+            if (!hasOffset(nic, family)) return;
+            var nicVlan = nic.resolveDhcpVlan(network);
+            if (nicVlan == null || nicVlan.getVlanId() != vlan.getVlanId()) return;
+            used.add(offsetOf(nic, family));
+        });
+    }
+
+    /**
+     * The offset a NIC should end up with: {@code wanted} when nothing is in its way, otherwise
+     * the next free one above it, wrapping back to {@link #FIRST} when the top of the VLAN is
+     * reached. Returns -1 when the VLAN has no free offset at all (or cannot host one), which is
+     * the caller's cue to fall back to a dynamic address.
+     *
+     * <p>Searching upward from what was asked for, rather than from {@link #FIRST}, is what keeps
+     * an imported VM's addresses recognisable: a package whose NICs sat at .70 and .71 lands on
+     * .70 and .71 again unless something is already there, and only drifts by as much as it has
+     * to.
+     */
+    public static long resolve(
+        long wanted,
+        @NonNull Set<Long> used,
+        @NonNull VlanConfig vlan,
+        @NonNull Family family
+    ) {
+        long max = maxOffset(vlan, family);
+        if (max < FIRST) return -1;
+        long poolStart = family == Family.IPV4
+            ? vlan.getDhcp4OffsetStart() : vlan.getDhcp6OffsetStart();
+        long poolEnd = family == Family.IPV4
+            ? vlan.getDhcp4OffsetEnd() : vlan.getDhcp6OffsetEnd();
+        long span = max - FIRST + 1;
+        long probes = Math.min(span, MAX_PROBES);
+        long start = wanted < FIRST || wanted > max ? FIRST : wanted;
+        for (long i = 0; i < probes; i++) {
+            // wrap rather than stop at the top: the fallback is a dynamic
+            // address, so a free offset below the wanted one still beats it
+            long c = FIRST + ((start - FIRST + i) % span);
+            if (c >= poolStart && c <= poolEnd) continue; // the dynamic pool
+            if (used.contains(c)) continue;
+            return c;
+        }
+        return -1;
+    }
+
+    /** The highest offset this VLAN can address, or -1 when it has no network of that family. */
+    private static long maxOffset(@NonNull VlanConfig vlan, @NonNull Family family) {
+        if (family == Family.IPV4) {
+            var net4 = vlan.getIpv4Network();
+            // addressAtOffset is valid for 1..total-2
+            return net4 == null ? -1 : net4.totalAddresses() - 2;
+        }
+        var net6 = vlan.getIpv6Network();
+        // A delegated prefix has no CIDR here until it is handed one at run time; its host part
+        // is a /64's worth either way, so the probe cap is the only bound that matters.
+        if (net6 == null) return vlan.hasIpv6() ? Long.MAX_VALUE - 1 : -1;
+        var total = net6.totalAddresses().subtract(BigInteger.valueOf(2));
+        var cap = BigInteger.valueOf(Long.MAX_VALUE - 1);
+        return total.compareTo(cap) >= 0 ? Long.MAX_VALUE - 1 : total.longValue();
+    }
+
+    private static boolean hasOffset(@NonNull VMNicConfig nic, @NonNull Family family) {
+        if (family == Family.IPV4) return nic.isDhcp4LeaseEnabled() && nic.hasDhcp4Offset();
+        return nic.isDhcp6LeaseEnabled() && nic.hasDhcp6Offset();
+    }
+
+    private static long offsetOf(@NonNull VMNicConfig nic, @NonNull Family family) {
+        return family == Family.IPV4 ? nic.getDhcp4Offset() : nic.getDhcp6Offset();
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/store/vm/VMNicConfig.java b/app/src/main/java/cn/classfun/droidvm/lib/store/vm/VMNicConfig.java
index 44cfc51f9..443a68e2d 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/store/vm/VMNicConfig.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/store/vm/VMNicConfig.java
@@ -120,6 +120,19 @@ public void setDhcp4Offset(long offset) {
         lease("dhcp4_lease").set("offset", offset);
     }
 
+    public void setDhcp6Offset(long offset) {
+        lease("dhcp6_lease").set("offset", offset);
+    }
+
+    /**
+     * Turns a static lease off, leaving the offset and the forwards it carried in place. Off
+     * means the guest takes a dynamic address from the VLAN's pool instead; the settings stay
+     * stored so putting it back on restores what it was.
+     */
+    public void setDhcpLeaseEnabled(boolean ipv6, boolean enabled) {
+        lease(ipv6 ? "dhcp6_lease" : "dhcp4_lease").set("enabled", enabled);
+    }
+
     @NonNull
     public List<PortForward> getDhcp4Forwards() {
         return forwards("dhcp4_lease");
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/network/NetworkPresets.java b/app/src/main/java/cn/classfun/droidvm/ui/network/NetworkPresets.java
index b6d4518d4..944c7af6c 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/network/NetworkPresets.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/network/NetworkPresets.java
@@ -20,6 +20,8 @@
 import cn.classfun.droidvm.lib.store.network.BridgeType;
 import cn.classfun.droidvm.lib.store.network.Ipv6Source;
 import cn.classfun.droidvm.lib.store.network.NetworkConfig;
+import cn.classfun.droidvm.lib.store.network.NetworkConfigValidator;
+import cn.classfun.droidvm.lib.store.network.NetworkConflicts;
 import cn.classfun.droidvm.lib.store.network.NetworkStore;
 import cn.classfun.droidvm.lib.store.network.UplinkMode;
 import cn.classfun.droidvm.lib.store.network.VlanConfig;
@@ -33,7 +35,7 @@
  */
 public final class NetworkPresets {
     /** bridge + "v"/"." + 2-char VLAN code must fit IFNAMSIZ (15 usable). */
-    public static final int MAX_BRIDGE_NAME_LEN = 12;
+    public static final int MAX_BRIDGE_NAME_LEN = NetworkConfigValidator.MAX_BRIDGE_NAME_LEN;
     private static final Random RANDOM = new Random();
 
     private NetworkPresets() {
@@ -159,39 +161,30 @@ public static String[] pickFreeCidrPair(
         return null;
     }
 
-    /** Appends every subnet these VLANs hold, primary and secondary, to the given lists. */
-    public static void collectNetworks(
-        @NonNull Iterable<VlanConfig> vlans,
+    /** Every subnet in the store bar {@code exclude}, so a suggestion can avoid them all. */
+    public static void collectStoreNetworks(
+        @NonNull NetworkStore store, @Nullable UUID exclude,
         @NonNull List<IPv4Network> out4, @NonNull List<IPv6Network> out6
     ) {
-        for (var vlan : vlans) {
-            var net4 = vlan.getIpv4Network();
-            if (net4 != null) out4.add(net4);
-            for (var cidr : vlan.getIpv4Secondary()) {
-                try {
-                    out4.add(IPv4Network.parse(cidr));
-                } catch (Exception ignored) {
-                }
-            }
-            var net6 = vlan.getIpv6Network();
-            if (net6 != null) out6.add(net6);
-            for (var cidr : vlan.getIpv6Secondary()) {
-                try {
-                    out6.add(IPv6Network.parse(cidr));
-                } catch (Exception ignored) {
-                }
-            }
-        }
+        collectStoreNetworks(store, exclude, null, out4, out6);
     }
 
-    /** The same, over every network in the store bar {@code exclude}. */
+    /**
+     * The same, narrowed to one bridge type. Only networks of the same type can actually collide
+     * (see {@link NetworkConflicts}), so a suggestion for a gVisor network has no reason to walk
+     * around what the Linux bridges hold -- and every such detour costs it a subnet from a pool
+     * of 201.
+     *
+     * @param type the type being addressed, or null to avoid every network whatever its type
+     */
     public static void collectStoreNetworks(
-        @NonNull NetworkStore store, @Nullable UUID exclude,
+        @NonNull NetworkStore store, @Nullable UUID exclude, @Nullable BridgeType type,
         @NonNull List<IPv4Network> out4, @NonNull List<IPv6Network> out6
     ) {
         store.forEach((id, cfg) -> {
             if (exclude != null && exclude.equals(id)) return;
-            collectNetworks(cfg.getVlans(), out4, out6);
+            if (type != null && cfg.getBridgeType() != type) return;
+            NetworkConflicts.collectSubnets(cfg.getVlans(), out4, out6);
         });
     }
 
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/network/edit/NetworkEditActivity.java b/app/src/main/java/cn/classfun/droidvm/ui/network/edit/NetworkEditActivity.java
index 423776a80..8bf1b15c5 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/network/edit/NetworkEditActivity.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/network/edit/NetworkEditActivity.java
@@ -43,6 +43,7 @@
 import cn.classfun.droidvm.lib.store.network.BridgeType;
 import cn.classfun.droidvm.lib.store.network.NetworkConfig;
 import cn.classfun.droidvm.lib.store.network.NetworkConfigValidator;
+import cn.classfun.droidvm.lib.store.network.NetworkConflicts;
 import cn.classfun.droidvm.lib.store.network.NetworkStore;
 import cn.classfun.droidvm.lib.store.network.UplinkMode;
 import cn.classfun.droidvm.lib.store.network.VlanConfig;
@@ -345,8 +346,8 @@ private String[] generatePairedCidrs() {
         var used4 = new ArrayList<IPv4Network>();
         var used6 = new ArrayList<IPv6Network>();
         storeAllBinders();
-        NetworkPresets.collectNetworks(vlans, used4, used6);
-        NetworkPresets.collectStoreNetworks(store, editNetworkId, used4, used6);
+        NetworkConflicts.collectSubnets(vlans, used4, used6);
+        NetworkPresets.collectStoreNetworks(store, editNetworkId, bridgeType, used4, used6);
         return NetworkPresets.pickFreeCidrPair(used4, used6);
     }
 
@@ -487,9 +488,9 @@ private void onSaveClicked() {
             Toast.makeText(this, e.getMessage(), LENGTH_LONG).show();
             return;
         }
-        var overlap = checkOverlaps(config);
-        if (overlap != null) {
-            Toast.makeText(this, overlap, LENGTH_LONG).show();
+        var conflict = checkConflicts(config);
+        if (conflict != null) {
+            Toast.makeText(this, conflict, LENGTH_LONG).show();
             return;
         }
         if (editMode) {
@@ -528,64 +529,28 @@ private void syncToDaemon(@NonNull NetworkConfig config) {
             .invoke();
     }
 
+    /**
+     * The reason this config cannot be saved alongside the others, or null when it can. Only
+     * networks of the same kind are consulted -- see {@link NetworkConflicts} for why a Linux
+     * bridge and a gVisor network are free to hold the same prefix.
+     */
     @Nullable
-    private String checkOverlaps(@NonNull NetworkConfig config) {
-        var myV4 = new ArrayList<IPv4Network>();
-        var myV6 = new ArrayList<IPv6Network>();
-        for (var vlan : config.getVlans()) {
-            var net4 = vlan.getIpv4Network();
-            if (net4 != null) myV4.add(net4);
-            for (var cidr : vlan.getIpv4Secondary()) {
-                try {
-                    myV4.add(IPv4Network.parse(cidr));
-                } catch (Exception ignored) {
-                }
-            }
-            var net6 = vlan.getIpv6Network();
-            if (net6 != null) myV6.add(net6);
-            for (var cidr : vlan.getIpv6Secondary()) {
-                try {
-                    myV6.add(IPv6Network.parse(cidr));
-                } catch (Exception ignored) {
-                }
-            }
+    private String checkConflicts(@NonNull NetworkConfig config) {
+        var self = NetworkConflicts.findSelfOverlap(config);
+        if (self != null)
+            return getString(R.string.network_edit_error_self_overlap, self[0], self[1]);
+        var conflict = NetworkConflicts.find(config, store, editNetworkId);
+        if (conflict == null) return null;
+        switch (conflict.kind) {
+            case IPV4:
+                return getString(R.string.network_edit_error_ipv4_overlap,
+                    conflict.mine, conflict.otherName(), conflict.theirs);
+            case IPV6:
+                return getString(R.string.network_edit_error_ipv6_overlap,
+                    conflict.mine, conflict.otherName(), conflict.theirs);
+            default:
+                return getString(R.string.network_edit_error_uplink_taken,
+                    conflict.mine, conflict.otherName());
         }
-        // overlaps within this network
-        for (int i = 0; i < myV4.size(); i++)
-            for (int j = i + 1; j < myV4.size(); j++)
-                if (myV4.get(i).overlaps(myV4.get(j)))
-                    return getString(R.string.network_edit_error_self_overlap,
-                        myV4.get(i).toString(), myV4.get(j).toString());
-        for (int i = 0; i < myV6.size(); i++)
-            for (int j = i + 1; j < myV6.size(); j++)
-                if (myV6.get(i).overlaps(myV6.get(j)))
-                    return getString(R.string.network_edit_error_self_overlap,
-                        myV6.get(i).toString(), myV6.get(j).toString());
-        // overlaps against other networks
-        var result = new String[1];
-        store.forEach((id, other) -> {
-            if (result[0] != null || id.equals(editNetworkId)) return;
-            for (var vlan : other.getVlans()) {
-                var otherNet = vlan.getIpv4Network();
-                if (otherNet != null) {
-                    for (var mine : myV4) {
-                        if (!mine.overlaps(otherNet)) continue;
-                        result[0] = getString(R.string.network_edit_error_ipv4_overlap,
-                            mine.toString(), other.getName(), otherNet);
-                        return;
-                    }
-                }
-                var otherNet6 = vlan.getIpv6Network();
-                if (otherNet6 != null) {
-                    for (var mine : myV6) {
-                        if (!mine.overlaps(otherNet6)) continue;
-                        result[0] = getString(R.string.network_edit_error_ipv6_overlap,
-                            mine.toString(), other.getName(), otherNet6);
-                        return;
-                    }
-                }
-            }
-        });
-        return result[0];
     }
 }
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/NicLeaseAllocator.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/NicLeaseAllocator.java
index 208175004..e6501e179 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/NicLeaseAllocator.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/NicLeaseAllocator.java
@@ -10,23 +10,20 @@
 import androidx.annotation.NonNull;
 
 import java.util.HashSet;
-import java.util.Set;
-import java.util.UUID;
 
-import cn.classfun.droidvm.lib.network.IPv4Network;
-import cn.classfun.droidvm.lib.store.network.NetworkConfig;
 import cn.classfun.droidvm.lib.store.network.NetworkStore;
-import cn.classfun.droidvm.lib.store.network.VlanConfig;
+import cn.classfun.droidvm.lib.store.vm.NicLeaseOffsets;
 import cn.classfun.droidvm.lib.store.vm.VMConfig;
 import cn.classfun.droidvm.lib.store.vm.VMStore;
 
 /**
  * Fills in any unassigned DHCPv4 static-lease offset on a VM right before it
  * starts. A migrated config (or any lease enabled without an offset) carries an
- * empty offset; this allocates the smallest free value from 64 up, skipping the
- * VLAN's dynamic pool and any offset already used by another VM -- or this VM's
- * own other NICs -- on the same network/VLAN, then persists the result so the
- * guest IP stays stable across restarts.
+ * empty offset; this allocates the smallest free value from
+ * {@link NicLeaseOffsets#FIRST} up, skipping the VLAN's dynamic pool and any
+ * offset already used by another VM -- or this VM's own other NICs -- on the
+ * same network/VLAN, then persists the result so the guest IP stays stable
+ * across restarts.
  * <p>
  * Allocation is app-side and persisted here; nothing else assigns offsets.
  * </p>
@@ -58,11 +55,16 @@ public static void resolveAndPersist(@NonNull VMConfig config, @NonNull Context
                 if (network == null) return;
                 var vlan = nic.resolveDhcpVlan(network);
                 if (vlan == null || !vlan.isDhcp4Enabled()) return;
-                var net4 = vlan.getIpv4Network();
-                if (net4 == null) return;
 
-                long offset = firstFree(usedOffsets(vmStore, config, selfId, network, vlan),
-                    vlan, net4);
+                var used = new HashSet<Long>();
+                vmStore.forEach((id, vm) -> {
+                    // its persisted copy is stale vs the config in hand
+                    if (id.equals(selfId)) return;
+                    NicLeaseOffsets.addOffsets(used, vm, network, vlan, NicLeaseOffsets.Family.IPV4);
+                });
+                NicLeaseOffsets.addOffsets(used, config, network, vlan, NicLeaseOffsets.Family.IPV4);
+                long offset = NicLeaseOffsets.resolve(
+                    NicLeaseOffsets.FIRST, used, vlan, NicLeaseOffsets.Family.IPV4);
                 if (offset < 0) {
                     Log.w(TAG, fmt("No free DHCPv4 offset for a NIC on network %s", netId));
                     return;
@@ -79,52 +81,4 @@ public static void resolveAndPersist(@NonNull VMConfig config, @NonNull Context
             Log.w(TAG, "Failed to allocate DHCPv4 lease offsets", e);
         }
     }
-
-    /**
-     * Offsets already taken on {@code network}/{@code vlan} (IPv4): every other
-     * VM's NICs plus this VM's own already-assigned NICs, so a second NIC
-     * resolved in the same pass sees the first one's freshly set offset.
-     */
-    @NonNull
-    private static Set<Long> usedOffsets(
-        @NonNull VMStore vmStore, @NonNull VMConfig config, @NonNull UUID selfId,
-        @NonNull NetworkConfig network, @NonNull VlanConfig vlan
-    ) {
-        var used = new HashSet<Long>();
-        vmStore.forEach((id, vm) -> {
-            if (id.equals(selfId)) return; // its persisted copy is stale vs config
-            addOffsets(used, vm, network, vlan);
-        });
-        addOffsets(used, config, network, vlan);
-        return used;
-    }
-
-    private static void addOffsets(
-        @NonNull Set<Long> used, @NonNull VMConfig vm,
-        @NonNull NetworkConfig network, @NonNull VlanConfig vlan
-    ) {
-        var netIdStr = network.getId().toString();
-        vm.forEachNic(nic -> {
-            if (!netIdStr.equals(nic.getNetworkId())) return;
-            if (!nic.isDhcp4LeaseEnabled() || !nic.hasDhcp4Offset()) return;
-            var nv = nic.resolveDhcpVlan(network);
-            if (nv == null || nv.getVlanId() != vlan.getVlanId()) return;
-            used.add(nic.getDhcp4Offset());
-        });
-    }
-
-    /** Smallest offset >= 64 outside the dynamic pool and not already used. */
-    private static long firstFree(
-        @NonNull Set<Long> used, @NonNull VlanConfig vlan, @NonNull IPv4Network net4
-    ) {
-        long poolStart = vlan.getDhcp4OffsetStart();
-        long poolEnd = vlan.getDhcp4OffsetEnd();
-        long maxOffset = net4.totalAddresses() - 2; // addressAtOffset valid 1...total-2
-        for (long c = 64; c <= maxOffset; c++) {
-            if (c >= poolStart && c <= poolEnd) continue; // skip the dynamic pool
-            if (used.contains(c)) continue;
-            return c;
-        }
-        return -1;
-    }
 }
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/pkg/imports/NetworkImportMode.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/pkg/imports/NetworkImportMode.java
index c41205e16..d88a9bf09 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/pkg/imports/NetworkImportMode.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/pkg/imports/NetworkImportMode.java
@@ -7,21 +7,27 @@
 import androidx.annotation.StringRes;
 
 import cn.classfun.droidvm.R;
+import cn.classfun.droidvm.lib.pkg.NetworkImportPlan;
 import cn.classfun.droidvm.lib.store.enums.StringEnum;
 
+/**
+ * What the import screen offers for one packaged network, in the order it prefers them: join a
+ * network already here, build the packaged one, or leave it behind. The default lands on the
+ * first of these that is actually available.
+ */
 public enum NetworkImportMode implements StringEnum {
-    SKIP(R.string.vmpkg_import_network_skip, "skip"),
-    EXISTING(R.string.vmpkg_import_network_existing, "existing"),
-    AUTO(R.string.vmpkg_import_network_auto, "auto");
+    JOIN(R.string.vmpkg_import_network_join, NetworkImportPlan.Action.JOIN),
+    CREATE(R.string.vmpkg_import_network_create, NetworkImportPlan.Action.CREATE),
+    SKIP(R.string.vmpkg_import_network_skip, NetworkImportPlan.Action.SKIP);
 
     @StringRes
     private final int stringId;
     @NonNull
-    final String id;
+    public final NetworkImportPlan.Action action;
 
-    NetworkImportMode(@StringRes int stringId, @NonNull String id) {
+    NetworkImportMode(@StringRes int stringId, @NonNull NetworkImportPlan.Action action) {
         this.stringId = stringId;
-        this.id = id;
+        this.action = action;
     }
 
     @Override
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/pkg/imports/VMPkgImportActivity.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/pkg/imports/VMPkgImportActivity.java
index 54f7b57f3..7fef79e30 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/pkg/imports/VMPkgImportActivity.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/pkg/imports/VMPkgImportActivity.java
@@ -22,7 +22,10 @@
 import android.os.Handler;
 import android.os.Looper;
 import android.os.storage.StorageManager;
+import android.util.Log;
+import android.view.LayoutInflater;
 import android.view.View;
+import android.widget.LinearLayout;
 import android.widget.TextView;
 import android.widget.Toast;
 
@@ -41,17 +44,21 @@
 import com.google.android.material.progressindicator.LinearProgressIndicator;
 
 import org.json.JSONArray;
+import org.json.JSONException;
 import org.json.JSONObject;
 
 import java.io.File;
 import java.io.FileInputStream;
 import java.io.IOException;
 import java.text.DateFormat;
+import java.util.ArrayList;
 import java.util.Date;
 import java.util.HashMap;
+import java.util.List;
 
 import cn.classfun.droidvm.R;
 import cn.classfun.droidvm.lib.daemon.DaemonConnection;
+import cn.classfun.droidvm.lib.pkg.NetworkImportPlan;
 import cn.classfun.droidvm.lib.pkg.PackageConstants;
 import cn.classfun.droidvm.lib.pkg.PackageInput;
 import cn.classfun.droidvm.lib.pkg.PackageManifest;
@@ -65,11 +72,11 @@
 import cn.classfun.droidvm.lib.store.vm.VMStore;
 import cn.classfun.droidvm.ui.vm.info.VMInfoActivity;
 import cn.classfun.droidvm.ui.widgets.container.CollapsibleContainer;
-import cn.classfun.droidvm.ui.widgets.row.ChooseRowWidget;
 import cn.classfun.droidvm.ui.widgets.row.TextInputRowWidget;
 
 public final class VMPkgImportActivity extends AppCompatActivity
     implements DaemonConnection.EventListener {
+    private static final String TAG = "VMPkgImport";
     private final Handler mainHandler = new Handler(Looper.getMainLooper());
     private final String defaultPath = pathJoin(externalPath(), "DroidVM");
     private CollapsingToolbarLayout collapsingToolbar;
@@ -85,8 +92,7 @@ public final class VMPkgImportActivity extends AppCompatActivity
     private TextInputRowWidget inputTarget;
     private CollapsibleContainer ccNetworks;
     private RecyclerView containerDisks;
-    private RecyclerView containerNetworks;
-    private ChooseRowWidget chooseNetworkMode;
+    private LinearLayout containerNetworks;
     private TextView tvStatus;
     private TextView tvFile;
     private TextView tvProgressDetail;
@@ -97,11 +103,12 @@ public final class VMPkgImportActivity extends AppCompatActivity
     private String masterRealPath;
     private PackageManifest preview;
     private VMPkgImportDiskAdapter diskAdapter;
-    private VMPkgImportNetworkAdapter networkAdapter;
+    private final List<VMPkgImportNetworkBinder> networkBinders = new ArrayList<>();
+    /** Loaded when a package is previewed; what the cards check themselves against. */
+    private NetworkStore networkStore;
     private String pendingTaskId = null;
     private int importVolumeTotal = 0;
     private boolean importing = false;
-    private NetworkImportMode networkMode = NetworkImportMode.AUTO;
     private final ActivityResultLauncher<String[]> openDocLauncher =
         registerForActivityResult(new OpenDocument(), this::onDocPicked);
 
@@ -123,7 +130,6 @@ protected void onCreate(@Nullable Bundle savedInstanceState) {
         ccNetworks = findViewById(R.id.cc_networks);
         containerDisks = findViewById(R.id.container_disks);
         containerNetworks = findViewById(R.id.container_networks);
-        chooseNetworkMode = findViewById(R.id.choose_network_mode);
         tvStatus = findViewById(R.id.tv_status);
         tvFile = findViewById(R.id.tv_file);
         tvProgressDetail = findViewById(R.id.tv_progress_detail);
@@ -138,15 +144,9 @@ private void initialize() {
         });
         btnImport.setOnClickListener(v -> doImport());
         diskAdapter = new VMPkgImportDiskAdapter();
-        networkAdapter = new VMPkgImportNetworkAdapter();
         containerDisks.setLayoutManager(new LinearLayoutManager(this));
         containerDisks.setAdapter(diskAdapter);
-        containerNetworks.setLayoutManager(new LinearLayoutManager(this));
-        containerNetworks.setAdapter(networkAdapter);
         inputTarget.setText(defaultPath);
-        chooseNetworkMode.configure(NetworkImportMode.class, NetworkImportMode.AUTO);
-        chooseNetworkMode.setOnValueChangedListener(() ->
-            networkMode = chooseNetworkMode.getSelectedItem());
         var filter = new String[]{PackageConstants.MIME, "*/*"};
         btnPick.setOnClickListener(v -> {
             if (!importing) openDocLauncher.launch(filter);
@@ -263,12 +263,8 @@ private void showPreview() {
             diskAdapter.disks.add(d);
         }
         diskAdapter.notifyDataSetChanged();
-        networkAdapter.networks.clear();
-        networkAdapter.networks.addAll(preview.networks);
-        networkAdapter.notifyDataSetChanged();
-        var hasNetworks = !preview.networks.isEmpty();
-        ccNetworks.setVisibility(hasNetworks ? VISIBLE : GONE);
-        chooseNetworkMode.setVisibility(hasNetworks ? VISIBLE : GONE);
+        buildNetworkCards();
+        ccNetworks.setVisibility(networkBinders.isEmpty() ? GONE : VISIBLE);
         if (inputTarget.getText().trim().isEmpty())
             inputTarget.setText(defaultPath);
         tvDiskSummary.setText(getString(
@@ -283,6 +279,59 @@ private void showPreview() {
         btnImport.setEnabled(true);
     }
 
+    /**
+     * One card per network the package carries, each deciding for itself. A package holds one
+     * network per distinct one its VM's adapters were on, and they need not be alike -- an L2
+     * bridge and a routed gVisor network can travel together -- so what can be done with one of
+     * them says nothing about the next.
+     */
+    private void buildNetworkCards() {
+        networkBinders.clear();
+        containerNetworks.removeAllViews();
+        if (preview == null) return;
+        networkStore = new NetworkStore();
+        networkStore.load(this);
+        var plan = new NetworkImportPlan(networkStore);
+        var inflater = LayoutInflater.from(this);
+        for (var packaged : preview.networks) {
+            var view = inflater.inflate(
+                R.layout.item_vmpkg_import_network, containerNetworks, false);
+            var binder = new VMPkgImportNetworkBinder(view, packaged, this::refreshCreatePreviews);
+            binder.bind(plan);
+            networkBinders.add(binder);
+            containerNetworks.addView(view);
+        }
+        refreshCreatePreviews();
+    }
+
+    /**
+     * Settles the name and bridge name each network being created would end up with, in card
+     * order and against one plan, so that two packaged networks that want the same name are not
+     * both shown taking it. Redone whenever a card changes its mind: a name freed by a card that
+     * switched to joining is a name the next one can have.
+     */
+    private void refreshCreatePreviews() {
+        if (networkStore == null) return;
+        var plan = new NetworkImportPlan(networkStore);
+        for (var binder : networkBinders)
+            binder.setPrepared(binder.mode() == NetworkImportMode.CREATE
+                ? plan.prepareCreate(binder.packaged) : null);
+    }
+
+    /** What the cards decided, as the import request carries it. */
+    @NonNull
+    private JSONArray buildNetworkPlan() {
+        var arr = new JSONArray();
+        for (var binder : networkBinders) {
+            try {
+                arr.put(binder.toEntry().toJson());
+            } catch (JSONException e) {
+                Log.w(TAG, "Failed to encode a network import decision", e);
+            }
+        }
+        return arr;
+    }
+
     private void doImport() {
         if (pickedUri == null || preview == null || importing) return;
         // Prefer the master path resolved at pick time; the daemon maps any
@@ -311,7 +360,7 @@ private void doImport() {
         conn.buildRequest("vm_import")
             .put("src_path", srcPath)
             .put("target_dir", targetFolder().getPath())
-            .put("network_mode", networkMode.id)
+            .put("network_plan", buildNetworkPlan())
             .onResponse(resp -> {
                 var tid = resp.optString("task_id", "");
                 if (!tid.isEmpty()) pendingTaskId = tid;
@@ -516,7 +565,7 @@ private void setImporting(boolean importing) {
         this.importing = importing;
         btnPick.setEnabled(!importing);
         btnImport.setEnabled(!importing && preview != null);
-        chooseNetworkMode.setEnabled(!importing);
+        for (var binder : networkBinders) binder.setEnabled(!importing);
         pbRun.setVisibility(importing ? VISIBLE : GONE);
         pbRun.setIndeterminate(importing);
     }
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/pkg/imports/VMPkgImportNetworkAdapter.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/pkg/imports/VMPkgImportNetworkAdapter.java
deleted file mode 100644
index f3aa62a9c..000000000
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/pkg/imports/VMPkgImportNetworkAdapter.java
+++ /dev/null
@@ -1,53 +0,0 @@
-// SPDX-License-Identifier: GPL-3.0-or-later
-// Copyright DroidVM contributors
-// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
-package cn.classfun.droidvm.ui.vm.pkg.imports;
-
-import static android.view.View.GONE;
-import static android.view.View.VISIBLE;
-
-import android.view.LayoutInflater;
-import android.view.ViewGroup;
-
-import androidx.annotation.NonNull;
-import androidx.appcompat.content.res.AppCompatResources;
-import androidx.recyclerview.widget.RecyclerView;
-
-import java.util.ArrayList;
-import java.util.List;
-
-import cn.classfun.droidvm.R;
-import cn.classfun.droidvm.lib.store.network.NetworkConfig;
-import cn.classfun.droidvm.ui.main.base.BaseViewHolder;
-
-public final class VMPkgImportNetworkAdapter extends RecyclerView.Adapter<BaseViewHolder> {
-    public final List<NetworkConfig> networks = new ArrayList<>();
-
-    @NonNull
-    @Override
-    public BaseViewHolder onCreateViewHolder(@NonNull ViewGroup parent, int viewType) {
-        var inf = LayoutInflater.from(parent.getContext());
-        return new BaseViewHolder(inf.inflate(R.layout.item_main_list, parent, false));
-    }
-
-    @Override
-    public void onBindViewHolder(@NonNull BaseViewHolder h, int position) {
-        var network = networks.get(position);
-        var ctx = h.itemView.getContext();
-        var bridge = network.getBridgeName();
-        h.itemName.setText(network.getName());
-        h.itemInfo.setText(bridge == null || bridge.isEmpty() ? network.getUplinkMode().key() : bridge);
-        h.itemInfo.setVisibility(VISIBLE);
-        h.itemState.setVisibility(GONE);
-        h.itemAction.setVisibility(GONE);
-        h.itemIcon.setVisibility(VISIBLE);
-        h.itemIcon.setImageDrawable(AppCompatResources.getDrawable(ctx, R.drawable.ic_nav_network));
-        h.itemCard.setEnabled(false);
-        h.itemCard.setClickable(false);
-    }
-
-    @Override
-    public int getItemCount() {
-        return networks.size();
-    }
-}
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/pkg/imports/VMPkgImportNetworkBinder.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/pkg/imports/VMPkgImportNetworkBinder.java
new file mode 100644
index 000000000..07ba9a053
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/pkg/imports/VMPkgImportNetworkBinder.java
@@ -0,0 +1,245 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
+package cn.classfun.droidvm.ui.vm.pkg.imports;
+
+import static android.view.View.GONE;
+import static android.view.View.VISIBLE;
+
+import android.content.Context;
+import android.view.View;
+import android.widget.TextView;
+
+import androidx.annotation.NonNull;
+import androidx.annotation.Nullable;
+
+import java.util.ArrayList;
+import java.util.List;
+
+import cn.classfun.droidvm.R;
+import cn.classfun.droidvm.lib.pkg.NetworkImportPlan;
+import cn.classfun.droidvm.lib.store.network.BridgeType;
+import cn.classfun.droidvm.lib.store.network.NetworkConfig;
+import cn.classfun.droidvm.lib.store.network.NetworkConflicts;
+import cn.classfun.droidvm.lib.store.network.UplinkMode;
+import cn.classfun.droidvm.lib.ui.IconItemAdapter;
+import cn.classfun.droidvm.ui.widgets.row.ChooseRowWidget;
+import cn.classfun.droidvm.ui.widgets.row.DropdownRowWidget;
+
+/**
+ * One card on the import screen: a network the package carries, and what to do with it.
+ *
+ * <p>The three choices are offered in the order they are worth having -- join what is already
+ * here, build the packaged one, leave it -- and the first one that is actually available is
+ * selected. The two that can be refused are refused for opposite reasons: there is nothing of
+ * this kind here to join, or there is, and it holds what this one would have to claim. So at
+ * most one of them is ever greyed, and the card is never left with only "skip".
+ */
+final class VMPkgImportNetworkBinder {
+    @NonNull
+    final View view;
+    @NonNull
+    final NetworkConfig packaged;
+    @NonNull
+    final String ref;
+    private final TextView tvName;
+    private final TextView tvDetail;
+    private final TextView tvNote;
+    private final ChooseRowWidget chooseMode;
+    private final DropdownRowWidget ddTarget;
+    private final List<NetworkConfig> candidates = new ArrayList<>();
+    private final Runnable onChanged;
+    private NetworkImportMode mode = NetworkImportMode.SKIP;
+    private int targetIndex = 0;
+    @Nullable
+    private NetworkConflicts.Conflict conflict;
+    /** What creating it would produce, once the screen has worked the names out. */
+    @Nullable
+    private NetworkConfig prepared;
+
+    VMPkgImportNetworkBinder(
+        @NonNull View view,
+        @NonNull NetworkConfig packaged,
+        @NonNull Runnable onChanged
+    ) {
+        this.view = view;
+        this.packaged = packaged;
+        this.onChanged = onChanged;
+        ref = packaged.item.optString(NetworkImportPlan.REF_KEY, "");
+        tvName = view.findViewById(R.id.tv_net_name);
+        tvDetail = view.findViewById(R.id.tv_net_detail);
+        tvNote = view.findViewById(R.id.tv_net_note);
+        chooseMode = view.findViewById(R.id.choose_mode);
+        ddTarget = view.findViewById(R.id.dd_target);
+    }
+
+    /** Works out what this network can do here, and picks the best of it. */
+    void bind(@NonNull NetworkImportPlan plan) {
+        var ctx = view.getContext();
+        candidates.clear();
+        candidates.addAll(plan.candidates(packaged));
+        conflict = plan.createConflict(packaged);
+        targetIndex = 0;
+
+        var name = packaged.getName();
+        tvName.setText(name == null || name.isEmpty()
+            ? ctx.getString(R.string.vmpkg_import_networks) : name);
+        tvDetail.setText(summary(ctx, packaged));
+
+        mode = defaultMode();
+        chooseMode.configure(NetworkImportMode.class, mode);
+        if (candidates.isEmpty()) chooseMode.setDisabledItems(
+            ctx.getString(R.string.vmpkg_import_network_nothing_to_join),
+            NetworkImportMode.JOIN);
+        else if (conflict != null) chooseMode.setDisabledItems(
+            ctx.getString(R.string.vmpkg_import_network_conflicts),
+            NetworkImportMode.CREATE);
+        chooseMode.setOnValueChangedListener(() -> {
+            mode = chooseMode.getSelectedItem();
+            applyMode();
+            onChanged.run();
+        });
+
+        var labels = new String[candidates.size()];
+        for (int i = 0; i < candidates.size(); i++) labels[i] = candidateLabel(ctx, i);
+        ddTarget.setAdapter(IconItemAdapter.create(ctx, labels, R.drawable.ic_switch));
+        ddTarget.setOnItemClickListener((p, v, pos, id) -> {
+            targetIndex = pos;
+            ddTarget.setText(candidateLabel(ctx, pos));
+        });
+        if (!candidates.isEmpty()) ddTarget.setText(candidateLabel(ctx, 0));
+        applyMode();
+    }
+
+    /**
+     * The first choice this network can actually take. Joining comes first because it is the one
+     * that keeps the packaged VM on a network that already works here, and every setting the two
+     * share -- the DHCP pool, the addressing, the SNAT -- comes along untouched.
+     */
+    @NonNull
+    private NetworkImportMode defaultMode() {
+        if (!candidates.isEmpty()) return NetworkImportMode.JOIN;
+        if (conflict == null) return NetworkImportMode.CREATE;
+        return NetworkImportMode.SKIP;
+    }
+
+    /** Sets what the screen has settled this network would be created as. */
+    void setPrepared(@Nullable NetworkConfig cfg) {
+        prepared = cfg;
+        applyNote();
+    }
+
+    @NonNull
+    NetworkImportMode mode() {
+        return mode;
+    }
+
+    /** This card's decision, ready for the import request. */
+    @NonNull
+    NetworkImportPlan.Entry toEntry() {
+        switch (mode) {
+            case JOIN:
+                var target = candidates.isEmpty() ? null
+                    : candidates.get(Math.min(targetIndex, candidates.size() - 1));
+                return new NetworkImportPlan.Entry(
+                    ref, NetworkImportPlan.Action.JOIN,
+                    target == null ? null : target.getId().toString(), null);
+            case CREATE:
+                return new NetworkImportPlan.Entry(
+                    ref, NetworkImportPlan.Action.CREATE, null, prepared);
+            default:
+                return new NetworkImportPlan.Entry(
+                    ref, NetworkImportPlan.Action.SKIP, null, null);
+        }
+    }
+
+    void setEnabled(boolean enabled) {
+        chooseMode.setEnabled(enabled);
+        ddTarget.setEnabled(enabled && mode == NetworkImportMode.JOIN);
+    }
+
+    private void applyMode() {
+        ddTarget.setVisibility(mode == NetworkImportMode.JOIN ? VISIBLE : GONE);
+        applyNote();
+    }
+
+    /**
+     * The line under the card: why creating is refused when it is, and otherwise what the chosen
+     * mode is about to do.
+     */
+    private void applyNote() {
+        var ctx = view.getContext();
+        String note = null;
+        if (conflict != null && mode != NetworkImportMode.JOIN) {
+            note = conflictMessage(ctx, conflict);
+        } else if (mode == NetworkImportMode.CREATE && prepared != null) {
+            var bridge = prepared.getBridgeName();
+            note = ctx.getString(R.string.vmpkg_import_network_will_create,
+                prepared.getName(), bridge == null ? "" : bridge);
+        } else if (mode == NetworkImportMode.SKIP) {
+            note = ctx.getString(R.string.vmpkg_import_network_skipped);
+        }
+        tvNote.setText(note == null ? "" : note);
+        tvNote.setVisibility(note == null ? GONE : VISIBLE);
+    }
+
+    @NonNull
+    private String candidateLabel(@NonNull Context ctx, int index) {
+        var net = candidates.get(index);
+        var name = net.getName();
+        var detail = addresses(net);
+        if (detail.isEmpty()) return name == null ? "" : name;
+        return ctx.getString(R.string.network_item_subtitle, name, detail);
+    }
+
+    /** "Linux bridge | L3 routing | 192.168.50.1/24", as much of it as the network has. */
+    @NonNull
+    static String summary(@NonNull Context ctx, @NonNull NetworkConfig net) {
+        var type = ctx.getString(net.getBridgeType() == BridgeType.GVISOR
+            ? R.string.network_edit_bridge_type_gvisor
+            : R.string.network_edit_bridge_type_linux);
+        var mode = ctx.getString(net.getUplinkMode() == UplinkMode.L2
+            ? R.string.network_edit_uplink_l2
+            : R.string.network_edit_uplink_l3);
+        var head = ctx.getString(R.string.network_item_subtitle, type, mode);
+        var detail = addresses(net);
+        return detail.isEmpty() ? head
+            : ctx.getString(R.string.network_item_subtitle, head, detail);
+    }
+
+    /** What identifies this network at a glance: its uplink (L2) or its first subnets (L3). */
+    @NonNull
+    private static String addresses(@NonNull NetworkConfig net) {
+        if (net.getUplinkMode() == UplinkMode.L2) {
+            var uplink = net.getL2Uplink();
+            return uplink == null ? "" : uplink;
+        }
+        var parts = new ArrayList<String>();
+        for (var vlan : net.getVlans()) {
+            var v4 = vlan.getIpv4Cidr();
+            if (v4 != null && !parts.contains(v4)) parts.add(v4);
+            var v6 = vlan.getIpv6Cidr();
+            if (v6 != null && !parts.contains(v6)) parts.add(v6);
+            if (parts.size() >= 2) break;
+        }
+        return String.join(", ", parts);
+    }
+
+    /** The same wording the network editor refuses a save with. */
+    @NonNull
+    private static String conflictMessage(
+        @NonNull Context ctx, @NonNull NetworkConflicts.Conflict conflict
+    ) {
+        switch (conflict.kind) {
+            case IPV4:
+                return ctx.getString(R.string.network_edit_error_ipv4_overlap,
+                    conflict.mine, conflict.otherName(), conflict.theirs);
+            case IPV6:
+                return ctx.getString(R.string.network_edit_error_ipv6_overlap,
+                    conflict.mine, conflict.otherName(), conflict.theirs);
+            default:
+                return ctx.getString(R.string.network_edit_error_uplink_taken,
+                    conflict.mine, conflict.otherName());
+        }
+    }
+}
diff --git a/app/src/main/res/layout/activity_vmpkg_import.xml b/app/src/main/res/layout/activity_vmpkg_import.xml
index 1f75acc44..e7b166103 100644
--- a/app/src/main/res/layout/activity_vmpkg_import.xml
+++ b/app/src/main/res/layout/activity_vmpkg_import.xml
@@ -164,21 +164,13 @@
                     android:title="@string/vmpkg_import_networks"
                     app:cc_collapsible="false">
 
-                    <androidx.recyclerview.widget.RecyclerView
+                    <LinearLayout
                         android:id="@+id/container_networks"
                         android:layout_width="match_parent"
                         android:layout_height="wrap_content"
-                        android:nestedScrollingEnabled="false"
-                        android:overScrollMode="never" />
-
-                    <cn.classfun.droidvm.ui.widgets.row.ChooseRowWidget
-                        android:id="@+id/choose_network_mode"
-                        android:layout_width="match_parent"
-                        android:layout_height="wrap_content"
                         android:layout_marginTop="4dp"
                         android:layout_marginBottom="8dp"
-                        android:icon="@drawable/ic_nav_network"
-                        android:text="@string/vmpkg_import_network_mode" />
+                        android:orientation="vertical" />
 
                 </cn.classfun.droidvm.ui.widgets.container.CollapsibleContainer>
 
diff --git a/app/src/main/res/layout/item_vmpkg_import_network.xml b/app/src/main/res/layout/item_vmpkg_import_network.xml
new file mode 100644
index 000000000..cbb59a451
--- /dev/null
+++ b/app/src/main/res/layout/item_vmpkg_import_network.xml
@@ -0,0 +1,62 @@
+<?xml version="1.0" encoding="utf-8"?>
+<com.google.android.material.card.MaterialCardView xmlns:android="http://schemas.android.com/apk/res/android"
+    xmlns:app="http://schemas.android.com/apk/res-auto"
+    android:layout_width="match_parent"
+    android:layout_height="wrap_content"
+    android:layout_marginStart="16dp"
+    android:layout_marginEnd="16dp"
+    android:layout_marginBottom="8dp"
+    app:cardCornerRadius="12dp"
+    app:cardElevation="0dp"
+    app:strokeColor="?attr/colorOutlineVariant"
+    app:strokeWidth="1dp">
+
+    <LinearLayout
+        android:layout_width="match_parent"
+        android:layout_height="wrap_content"
+        android:orientation="vertical"
+        android:padding="12dp">
+
+        <TextView
+            android:id="@+id/tv_net_name"
+            android:layout_width="match_parent"
+            android:layout_height="wrap_content"
+            android:ellipsize="end"
+            android:maxLines="1"
+            android:textAppearance="?attr/textAppearanceTitleMedium" />
+
+        <TextView
+            android:id="@+id/tv_net_detail"
+            android:layout_width="match_parent"
+            android:layout_height="wrap_content"
+            android:layout_marginTop="2dp"
+            android:textAppearance="?attr/textAppearanceBodySmall"
+            android:textColor="?android:attr/textColorSecondary" />
+
+        <cn.classfun.droidvm.ui.widgets.row.ChooseRowWidget
+            android:id="@+id/choose_mode"
+            android:layout_width="match_parent"
+            android:layout_height="wrap_content"
+            android:layout_marginTop="4dp"
+            android:icon="@drawable/ic_import"
+            android:text="@string/vmpkg_import_network_mode" />
+
+        <cn.classfun.droidvm.ui.widgets.row.DropdownRowWidget
+            android:id="@+id/dd_target"
+            android:layout_width="match_parent"
+            android:layout_height="wrap_content"
+            android:hint="@string/vmpkg_import_network_target"
+            android:icon="@drawable/ic_nav_network" />
+
+        <TextView
+            android:id="@+id/tv_net_note"
+            android:layout_width="match_parent"
+            android:layout_height="wrap_content"
+            android:layout_marginStart="4dp"
+            android:layout_marginTop="4dp"
+            android:textAppearance="?attr/textAppearanceBodySmall"
+            android:textColor="?android:attr/textColorSecondary" />
+
+    </LinearLayout>
+
+</com.google.android.material.card.MaterialCardView>
diff --git a/app/src/main/res/values-zh-rCN/strings.xml b/app/src/main/res/values-zh-rCN/strings.xml
index b0346d7f0..8e6ff8e18 100644
--- a/app/src/main/res/values-zh-rCN/strings.xml
+++ b/app/src/main/res/values-zh-rCN/strings.xml
@@ -963,6 +963,7 @@
     <string name="network_edit_error_bridge_duplicate">已存在使用此网桥名称的网络</string>
     <string name="network_edit_error_ipv4_overlap">IPv4 子网 %1$s 与网络"%2$s"（%3$s）重叠</string>
     <string name="network_edit_error_ipv6_overlap">IPv6 子网 %1$s 与网络"%2$s"（%3$s）重叠</string>
+    <string name="network_edit_error_uplink_taken">上行接口 %1$s 已被网络“%2$s”桥接</string>
     <string name="network_edit_save">保存网络</string>
     <string name="network_edit_running_banner">网络正在运行，请先停止后再编辑。</string>
     <string name="network_edit_bridge_type">网桥类型</string>
@@ -1378,10 +1379,15 @@
     <string name="vmpkg_import_disk_summary">%1$d 个磁盘，%2$s</string>
     <string name="vmpkg_import_network_line">网络：%1$s</string>
     <string name="vmpkg_import_no_networks">此包中没有绑定网络。</string>
-    <string name="vmpkg_import_network_mode">网络导入</string>
-    <string name="vmpkg_import_network_skip">跳过网络</string>
-    <string name="vmpkg_import_network_existing">按名称使用现有网络</string>
-    <string name="vmpkg_import_network_auto">自动创建网络</string>
+    <string name="vmpkg_import_network_mode">导入方式</string>
+    <string name="vmpkg_import_network_skip">跳过</string>
+    <string name="vmpkg_import_network_join">加入现有网络</string>
+    <string name="vmpkg_import_network_create">创建新网络</string>
+    <string name="vmpkg_import_network_target">目标网络</string>
+    <string name="vmpkg_import_network_nothing_to_join">没有同类型的网络</string>
+    <string name="vmpkg_import_network_conflicts">冲突</string>
+    <string name="vmpkg_import_network_will_create">将创建“%1$s”，网桥 %2$s</string>
+    <string name="vmpkg_import_network_skipped">这个网络上的网卡将不连接任何网络。</string>
     <string name="vmpkg_import_no_space">目标空间不足。需要 %1$s，可用 %2$s。</string>
     <string name="vmpkg_import_target_folder">导入目录</string>
     <string name="vmpkg_import_target_folder_desc">每次导入都会在这里建立以 VM 命名的子文件夹。</string>
diff --git a/app/src/main/res/values-zh-rTW/strings.xml b/app/src/main/res/values-zh-rTW/strings.xml
index bac1eb62f..25aed3de9 100644
--- a/app/src/main/res/values-zh-rTW/strings.xml
+++ b/app/src/main/res/values-zh-rTW/strings.xml
@@ -963,6 +963,7 @@
     <string name="network_edit_error_bridge_duplicate">已存在使用此網橋名稱的網路</string>
     <string name="network_edit_error_ipv4_overlap">IPv4 子網 %1$s 與網路"%2$s"（%3$s）重疊</string>
     <string name="network_edit_error_ipv6_overlap">IPv6 子網 %1$s 與網路"%2$s"（%3$s）重疊</string>
+    <string name="network_edit_error_uplink_taken">上行介面 %1$s 已被網路「%2$s」橋接</string>
     <string name="network_edit_save">儲存網路</string>
     <string name="network_edit_running_banner">網路正在執行，請先停止後再編輯。</string>
     <string name="network_edit_bridge_type">網橋型別</string>
@@ -1378,10 +1379,15 @@
     <string name="vmpkg_import_disk_summary">%1$d 個磁碟，%2$s</string>
     <string name="vmpkg_import_network_line">網路：%1$s</string>
     <string name="vmpkg_import_no_networks">此包中沒有綁定網路。</string>
-    <string name="vmpkg_import_network_mode">網路匯入</string>
-    <string name="vmpkg_import_network_skip">跳過網路</string>
-    <string name="vmpkg_import_network_existing">按名稱使用現有網路</string>
-    <string name="vmpkg_import_network_auto">自動建立網路</string>
+    <string name="vmpkg_import_network_mode">匯入方式</string>
+    <string name="vmpkg_import_network_skip">跳過</string>
+    <string name="vmpkg_import_network_join">加入現有網路</string>
+    <string name="vmpkg_import_network_create">建立新網路</string>
+    <string name="vmpkg_import_network_target">目標網路</string>
+    <string name="vmpkg_import_network_nothing_to_join">沒有同類型的網路</string>
+    <string name="vmpkg_import_network_conflicts">衝突</string>
+    <string name="vmpkg_import_network_will_create">將建立「%1$s」，網橋 %2$s</string>
+    <string name="vmpkg_import_network_skipped">這個網路上的網路卡將不連接任何網路。</string>
     <string name="vmpkg_import_no_space">目標空間不足。需要 %1$s，可用 %2$s。</string>
     <string name="vmpkg_import_target_folder">匯入目錄</string>
     <string name="vmpkg_import_target_folder_desc">每次匯入都會在這裡建立以 VM 命名的子資料夾。</string>
diff --git a/app/src/main/res/values/strings.xml b/app/src/main/res/values/strings.xml
index e5cd719e3..ba99532d7 100644
--- a/app/src/main/res/values/strings.xml
+++ b/app/src/main/res/values/strings.xml
@@ -1001,6 +1001,7 @@
     <string name="network_edit_error_bridge_duplicate">A network with this bridge name already exists</string>
     <string name="network_edit_error_ipv4_overlap">IPv4 subnet %1$s overlaps with network \"%2$s\" (%3$s)</string>
     <string name="network_edit_error_ipv6_overlap">IPv6 subnet %1$s overlaps with network \"%2$s\" (%3$s)</string>
+    <string name="network_edit_error_uplink_taken">Uplink %1$s is already bridged by network \"%2$s\"</string>
     <string name="network_edit_save">Save network</string>
     <string name="network_edit_running_banner">This network is running. Stop it before editing.</string>
     <string name="network_edit_bridge_type">Bridge type</string>
@@ -1416,10 +1417,15 @@
     <string name="vmpkg_import_disk_summary">%1$d disks, %2$s</string>
     <string name="vmpkg_import_network_line">Network: %1$s</string>
     <string name="vmpkg_import_no_networks">No bound networks in this package.</string>
-    <string name="vmpkg_import_network_mode">Network import</string>
-    <string name="vmpkg_import_network_skip">Skip networks</string>
-    <string name="vmpkg_import_network_existing">Use existing networks by name</string>
-    <string name="vmpkg_import_network_auto">Create networks automatically</string>
+    <string name="vmpkg_import_network_mode">Import as</string>
+    <string name="vmpkg_import_network_skip">Skip</string>
+    <string name="vmpkg_import_network_join">Join an existing network</string>
+    <string name="vmpkg_import_network_create">Create a new network</string>
+    <string name="vmpkg_import_network_target">Target network</string>
+    <string name="vmpkg_import_network_nothing_to_join">nothing of this kind here</string>
+    <string name="vmpkg_import_network_conflicts">conflicts</string>
+    <string name="vmpkg_import_network_will_create">Will create \"%1$s\" on bridge %2$s</string>
+    <string name="vmpkg_import_network_skipped">Adapters on this network stay unattached.</string>
     <string name="vmpkg_import_no_space">Not enough target space. Required %1$s, available %2$s.</string>
     <string name="vmpkg_import_target_folder">Import folder</string>
     <string name="vmpkg_import_target_folder_desc">Each import gets its own subfolder here, named after the VM.</string>
diff --git a/app/src/test/java/cn/classfun/droidvm/lib/pkg/NetworkImportPlanTest.java b/app/src/test/java/cn/classfun/droidvm/lib/pkg/NetworkImportPlanTest.java
new file mode 100644
index 000000000..7b2e39786
--- /dev/null
+++ b/app/src/test/java/cn/classfun/droidvm/lib/pkg/NetworkImportPlanTest.java
@@ -0,0 +1,144 @@
+package cn.classfun.droidvm.lib.pkg;
+
+import static org.junit.Assert.assertEquals;
+import static org.junit.Assert.assertNotEquals;
+import static org.junit.Assert.assertNotNull;
+import static org.junit.Assert.assertNull;
+import static org.junit.Assert.assertTrue;
+
+import androidx.annotation.NonNull;
+import androidx.annotation.Nullable;
+
+import org.junit.Test;
+
+import java.util.List;
+import java.util.UUID;
+
+import cn.classfun.droidvm.lib.store.base.DataItem;
+import cn.classfun.droidvm.lib.store.network.BridgeType;
+import cn.classfun.droidvm.lib.store.network.NetworkConfig;
+import cn.classfun.droidvm.lib.store.network.UplinkMode;
+import cn.classfun.droidvm.lib.store.network.VlanConfig;
+
+/** Which networks a packaged one may join, in which order, and what creating it would be called. */
+public class NetworkImportPlanTest {
+    @NonNull
+    private static NetworkConfig l3(
+        @NonNull BridgeType type, @NonNull String name, @Nullable String v4, @Nullable String v6
+    ) {
+        var config = new NetworkConfig();
+        config.setId(UUID.randomUUID());
+        config.setName(name);
+        config.setBridgeName(name);
+        config.setBridgeType(type);
+        config.setUplinkMode(UplinkMode.L3);
+        var vlan = VlanConfig.createDefault(0);
+        if (v4 != null) vlan.ipv4().set("cidr", v4);
+        if (v6 != null) vlan.ipv6().set("cidr", v6);
+        var vlans = DataItem.newArray();
+        vlans.append(vlan.item);
+        config.l3().set("vlans", vlans);
+        return config;
+    }
+
+    @NonNull
+    private static NetworkConfig l2(@NonNull String name, @NonNull String uplink) {
+        var config = new NetworkConfig();
+        config.setId(UUID.randomUUID());
+        config.setName(name);
+        config.setBridgeName(name);
+        config.setBridgeType(BridgeType.LINUX);
+        config.setUplinkMode(UplinkMode.L2);
+        config.l2().set("uplink", uplink);
+        return config;
+    }
+
+    @Test
+    public void onlyNetworksOfTheSameKindCanBeJoined() {
+        var linux = l3(BridgeType.LINUX, "brlinux", "192.168.50.1/24", null);
+        var gvisor = l3(BridgeType.GVISOR, "brgvisor", "192.168.60.1/24", null);
+        var bridged = l2("brl2", "wlan0");
+        var plan = new NetworkImportPlan(List.of(linux, gvisor, bridged));
+        var packaged = l3(BridgeType.LINUX, "brpkg", "192.168.70.1/24", null);
+        var candidates = plan.candidates(packaged);
+        assertEquals(1, candidates.size());
+        assertEquals("brlinux", candidates.get(0).getName());
+    }
+
+    @Test
+    public void theNearestSubnetComesFirst() {
+        var far = l3(BridgeType.LINUX, "brfar", "10.0.0.1/24", null);
+        var near = l3(BridgeType.LINUX, "brnear", "192.168.50.1/24", null);
+        var plan = new NetworkImportPlan(List.of(far, near));
+        var packaged = l3(BridgeType.LINUX, "brpkg", "192.168.51.1/24", null);
+        assertEquals("brnear", plan.candidates(packaged).get(0).getName());
+    }
+
+    @Test
+    public void withoutIpv4TheIpv6PrefixDecidesTheOrder() {
+        var far = l3(BridgeType.LINUX, "brfar", null, "fd00:9::1/64");
+        var near = l3(BridgeType.LINUX, "brnear", null, "fd00:50::1/64");
+        var plan = new NetworkImportPlan(List.of(far, near));
+        var packaged = l3(BridgeType.LINUX, "brpkg", null, "fd00:50::1/64");
+        assertEquals("brnear", plan.candidates(packaged).get(0).getName());
+    }
+
+    @Test
+    public void theMatchingUplinkComesFirst() {
+        var other = l2("brother", "eth0");
+        var same = l2("brsame", "wlan0");
+        var plan = new NetworkImportPlan(List.of(other, same));
+        assertEquals("brsame", plan.candidates(l2("brpkg", "wlan0")).get(0).getName());
+    }
+
+    @Test
+    public void creatingIsRefusedOnlyByItsOwnKind() {
+        var gvisor = l3(BridgeType.GVISOR, "brgvisor", "192.168.50.1/24", null);
+        var plan = new NetworkImportPlan(List.of(gvisor));
+        assertNull(plan.createConflict(l3(BridgeType.LINUX, "brpkg", "192.168.50.1/24", null)));
+        assertNotNull(plan.createConflict(l3(BridgeType.GVISOR, "brpkg", "192.168.50.1/24", null)));
+    }
+
+    @Test
+    public void aTakenNameIsChangedRatherThanRefused() {
+        var existing = l3(BridgeType.LINUX, "home", "192.168.50.1/24", null);
+        var plan = new NetworkImportPlan(List.of(existing));
+        var incoming = l3(BridgeType.LINUX, "home", "192.168.70.1/24", null);
+        plan.adopt(incoming);
+        assertEquals("home_1", incoming.getName());
+    }
+
+    @Test
+    public void aRenamedBridgeStaysWithinTheInterfaceNameCap() {
+        var existing = l3(BridgeType.LINUX, "brabcdefghij", "192.168.50.1/24", null);
+        var plan = new NetworkImportPlan(List.of(existing));
+        var incoming = l3(BridgeType.LINUX, "other", "192.168.70.1/24", null);
+        incoming.setBridgeName("brabcdefghij");
+        plan.adopt(incoming);
+        var bridge = incoming.getBridgeName();
+        assertNotNull(bridge);
+        assertNotEquals("brabcdefghij", bridge);
+        assertTrue(bridge.length() <= 12);
+    }
+
+    @Test
+    public void twoCreationsCannotClaimTheSameName() {
+        var plan = new NetworkImportPlan(List.of());
+        var first = l3(BridgeType.LINUX, "guest", "192.168.70.1/24", null);
+        var second = l3(BridgeType.LINUX, "guest", "192.168.71.1/24", null);
+        plan.adopt(first);
+        plan.adopt(second);
+        assertEquals("guest", first.getName());
+        assertEquals("guest_1", second.getName());
+    }
+
+    @Test
+    public void anIdAlreadyInUseIsReplaced() {
+        var existing = l3(BridgeType.LINUX, "home", "192.168.50.1/24", null);
+        var plan = new NetworkImportPlan(List.of(existing));
+        var incoming = l3(BridgeType.LINUX, "guest", "192.168.70.1/24", null);
+        incoming.setId(existing.getId());
+        plan.adopt(incoming);
+        assertNotEquals(existing.getId(), incoming.getId());
+    }
+}
diff --git a/app/src/test/java/cn/classfun/droidvm/lib/store/network/NetworkConflictsTest.java b/app/src/test/java/cn/classfun/droidvm/lib/store/network/NetworkConflictsTest.java
new file mode 100644
index 000000000..220528313
--- /dev/null
+++ b/app/src/test/java/cn/classfun/droidvm/lib/store/network/NetworkConflictsTest.java
@@ -0,0 +1,125 @@
+package cn.classfun.droidvm.lib.store.network;
+
+import static org.junit.Assert.assertEquals;
+import static org.junit.Assert.assertNotNull;
+import static org.junit.Assert.assertNull;
+
+import androidx.annotation.NonNull;
+import androidx.annotation.Nullable;
+
+import org.junit.Test;
+
+import java.util.List;
+import java.util.UUID;
+
+import cn.classfun.droidvm.lib.store.base.DataItem;
+
+/**
+ * The rule the whole thing turns on: a conflict is only a conflict between networks that share a
+ * stack. Two Linux bridges, or two gVisor ones, cannot hold the same prefix; one of each can.
+ */
+public class NetworkConflictsTest {
+    @NonNull
+    private static NetworkConfig l3(
+        @NonNull BridgeType type, @NonNull String name,
+        @Nullable String v4, @Nullable String v6
+    ) {
+        var config = new NetworkConfig();
+        config.setId(UUID.randomUUID());
+        config.setName(name);
+        config.setBridgeName(name);
+        config.setBridgeType(type);
+        config.setUplinkMode(UplinkMode.L3);
+        var vlan = VlanConfig.createDefault(0);
+        if (v4 != null) vlan.ipv4().set("cidr", v4);
+        if (v6 != null) vlan.ipv6().set("cidr", v6);
+        var vlans = DataItem.newArray();
+        vlans.append(vlan.item);
+        config.l3().set("vlans", vlans);
+        return config;
+    }
+
+    @NonNull
+    private static NetworkConfig l2(@NonNull String name, @NonNull String uplink) {
+        var config = new NetworkConfig();
+        config.setId(UUID.randomUUID());
+        config.setName(name);
+        config.setBridgeName(name);
+        config.setBridgeType(BridgeType.LINUX);
+        config.setUplinkMode(UplinkMode.L2);
+        config.l2().set("uplink", uplink);
+        return config;
+    }
+
+    @Test
+    public void sameBridgeTypeOverlapConflicts() {
+        var mine = l3(BridgeType.LINUX, "brmine", "192.168.50.1/24", null);
+        var theirs = l3(BridgeType.LINUX, "brtheirs", "192.168.50.1/24", null);
+        var conflict = NetworkConflicts.find(mine, List.of(theirs), null);
+        assertNotNull(conflict);
+        assertEquals(NetworkConflicts.Kind.IPV4, conflict.kind);
+        assertEquals("brtheirs", conflict.otherName());
+    }
+
+    @Test
+    public void gvisorPairAlsoConflicts() {
+        var mine = l3(BridgeType.GVISOR, "brmine", "192.168.50.1/24", null);
+        var theirs = l3(BridgeType.GVISOR, "brtheirs", "192.168.50.128/25", null);
+        assertNotNull(NetworkConflicts.find(mine, List.of(theirs), null));
+    }
+
+    @Test
+    public void acrossBridgeTypesTheSamePrefixIsFine() {
+        // gVisor's addressing lives in its own process; the kernel never sees the prefix
+        var mine = l3(BridgeType.GVISOR, "brmine", "192.168.50.1/24", "fd00:50::1/64");
+        var theirs = l3(BridgeType.LINUX, "brtheirs", "192.168.50.1/24", "fd00:50::1/64");
+        assertNull(NetworkConflicts.find(mine, List.of(theirs), null));
+    }
+
+    @Test
+    public void ipv6OverlapConflicts() {
+        var mine = l3(BridgeType.LINUX, "brmine", "192.168.50.1/24", "fd00:50::1/64");
+        var theirs = l3(BridgeType.LINUX, "brtheirs", "10.9.9.1/24", "fd00:50::1/64");
+        var conflict = NetworkConflicts.find(mine, List.of(theirs), null);
+        assertNotNull(conflict);
+        assertEquals(NetworkConflicts.Kind.IPV6, conflict.kind);
+    }
+
+    @Test
+    public void excludedNetworkIsNotItsOwnConflict() {
+        var mine = l3(BridgeType.LINUX, "brmine", "192.168.50.1/24", null);
+        assertNull(NetworkConflicts.find(mine, List.of(mine), mine.getId()));
+    }
+
+    @Test
+    public void oneUplinkTakesOneL2Network() {
+        var mine = l2("brmine", "wlan0");
+        var same = l2("brtheirs", "wlan0");
+        var other = l2("brother", "eth0");
+        var conflict = NetworkConflicts.find(mine, List.of(other, same), null);
+        assertNotNull(conflict);
+        assertEquals(NetworkConflicts.Kind.UPLINK, conflict.kind);
+        assertEquals("brtheirs", conflict.otherName());
+        assertNull(NetworkConflicts.find(mine, List.of(other), null));
+    }
+
+    @Test
+    public void l2AndL3NeverCollide() {
+        // an L2 network has no prefix, and an L3 one has no uplink to take
+        var bridged = l2("brmine", "wlan0");
+        var routed = l3(BridgeType.LINUX, "brtheirs", "192.168.50.1/24", null);
+        assertNull(NetworkConflicts.find(bridged, List.of(routed), null));
+        assertNull(NetworkConflicts.find(routed, List.of(bridged), null));
+    }
+
+    @Test
+    public void selfOverlapIsFoundWithoutAnyOtherNetwork() {
+        var config = l3(BridgeType.LINUX, "brmine", "192.168.50.1/24", null);
+        var second = VlanConfig.createDefault(10);
+        second.ipv4().set("cidr", "192.168.50.129/25");
+        config.l3().get("vlans").append(second.item);
+        var overlap = NetworkConflicts.findSelfOverlap(config);
+        assertNotNull(overlap);
+        assertEquals(2, overlap.length);
+    }
+}
diff --git a/app/src/test/java/cn/classfun/droidvm/lib/store/vm/NicLeaseOffsetsTest.java b/app/src/test/java/cn/classfun/droidvm/lib/store/vm/NicLeaseOffsetsTest.java
new file mode 100644
index 000000000..a0b1e07ed
--- /dev/null
+++ b/app/src/test/java/cn/classfun/droidvm/lib/store/vm/NicLeaseOffsetsTest.java
@@ -0,0 +1,83 @@
+package cn.classfun.droidvm.lib.store.vm;
+
+import static org.junit.Assert.assertEquals;
+
+import androidx.annotation.NonNull;
+
+import org.junit.Test;
+
+import java.util.HashSet;
+import java.util.Set;
+
+import cn.classfun.droidvm.lib.store.network.VlanConfig;
+import cn.classfun.droidvm.lib.store.vm.NicLeaseOffsets.Family;
+
+/**
+ * Where a static lease ends up when the one it asked for is not available -- the case an import
+ * runs into, carrying offsets that made sense on the phone the package came from.
+ */
+public class NicLeaseOffsetsTest {
+    /** A /24 with the stock 128..192 dynamic pool: offsets 64..254 exist, 128..192 are the pool. */
+    @NonNull
+    private static VlanConfig vlan() {
+        var vlan = VlanConfig.createDefault(0);
+        vlan.ipv4().set("cidr", "192.168.50.1/24");
+        return vlan;
+    }
+
+    @NonNull
+    private static Set<Long> used(long... offsets) {
+        var set = new HashSet<Long>();
+        for (var offset : offsets) set.add(offset);
+        return set;
+    }
+
+    @Test
+    public void aFreeOffsetIsKeptAsItIs() {
+        assertEquals(70, NicLeaseOffsets.resolve(70, used(), vlan(), Family.IPV4));
+    }
+
+    @Test
+    public void takenOffsetMovesToTheNextOne() {
+        assertEquals(72, NicLeaseOffsets.resolve(70, used(70, 71), vlan(), Family.IPV4));
+    }
+
+    @Test
+    public void anOffsetInsideTheDynamicPoolClearsIt() {
+        assertEquals(193, NicLeaseOffsets.resolve(130, used(), vlan(), Family.IPV4));
+    }
+
+    @Test
+    public void belowTheRangeStartsAtTheFirstOffset() {
+        assertEquals(64, NicLeaseOffsets.resolve(0, used(), vlan(), Family.IPV4));
+    }
+
+    @Test
+    public void aFullTopWrapsBackToTheBottom() {
+        // everything from the wanted offset to the top of the /24 is taken; 64 still is not
+        var taken = new HashSet<Long>();
+        for (long i = 193; i <= 254; i++) taken.add(i);
+        assertEquals(64, NicLeaseOffsets.resolve(200, taken, vlan(), Family.IPV4));
+    }
+
+    @Test
+    public void nothingFreeGivesUpSoTheCallerCanFallBackToDynamic() {
+        var taken = new HashSet<Long>();
+        for (long i = 64; i <= 254; i++) taken.add(i);
+        assertEquals(-1, NicLeaseOffsets.resolve(70, taken, vlan(), Family.IPV4));
+    }
+
+    @Test
+    public void aVlanWithoutThatFamilyHasNoOffsetToGive() {
+        var vlan = VlanConfig.createDefault(0);
+        assertEquals(-1, NicLeaseOffsets.resolve(70, used(), vlan, Family.IPV4));
+    }
+
+    @Test
+    public void ipv6UsesItsOwnPoolAndPrefix() {
+        var vlan = VlanConfig.createDefault(0);
+        vlan.ipv6().set("cidr", "fd00:50::1/64");
+        assertEquals(70, NicLeaseOffsets.resolve(70, used(), vlan, Family.IPV6));
+        assertEquals(193, NicLeaseOffsets.resolve(150, used(), vlan, Family.IPV6));
+    }
+}

From a65d5e32df9492323a70674af7f2ef701c2063f1 Mon Sep 17 00:00:00 2001
From: HuJK <gh@hujk.org>
Date: Thu, 3 Sep 2026 07:04:45 +0800
Subject: [PATCH 155/182] network: a stopped VM no longer blocks deleting the
 network it is on

Deleting a network refused with "in use by running VMs" and named every VM
attached to it, running or not, so a network any VM had ever been attached to
could not be deleted at all.

The check reads vm_list, which reports the state as the enum name ("STOPPED"),
and compared it against lowercase "stopped" -- vm_status is the one that
lower-cases, and every other state check in the UI is already case-insensitive.

Found while testing vmpkg import on device: three stopped VMs held gv50 and the
delete silently did nothing.

Signed-off-by: HuJK <gh@hujk.org>
---
 .../java/cn/classfun/droidvm/ui/network/NetworkActions.java  | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/app/src/main/java/cn/classfun/droidvm/ui/network/NetworkActions.java b/app/src/main/java/cn/classfun/droidvm/ui/network/NetworkActions.java
index 8329e2233..2bd5888fa 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/network/NetworkActions.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/network/NetworkActions.java
@@ -163,7 +163,10 @@ private static void collectRunningVMsUsingNetwork(
     ) {
         try {
             JsonUtils.forEachArray(resp, "data", (JSONObject vm) -> {
-                if (vm.optString("state", "stopped").equals("stopped")) return;
+                // vm_list reports the enum name ("STOPPED"); vm_status lower-cases it. Compare
+                // either way -- a case-sensitive match here read every stopped VM as running and
+                // so refused to delete any network a VM had ever been attached to.
+                if (vm.optString("state", "stopped").equalsIgnoreCase("stopped")) return;
                 var vmId = vm.optString("id", "");
                 var vmCfg = vmStore.findById(vmId);
                 if (vmCfg == null) return;

From a7dbbb9d0bd638111b66cf657f932aed0b20f700 Mon Sep 17 00:00:00 2001
From: HuJK <gh@hujk.org>
Date: Thu, 3 Sep 2026 07:04:45 +0800
Subject: [PATCH 156/182] network: register a new network with the daemon when
 it is saved, not when it starts

The daemon reads networks.json once, at startup, and otherwise learns about a
network only through network_create / network_modify. The editor sent neither
for a network that did not exist there yet -- it asked network_exists and, when
told no, sent nothing -- so a network created in the app and never started was
invisible to the daemon until the next restart.

Two things broke on that gap, both silently:

  * starting a VM whose NIC named such a network failed in setupTap with
    "Network <id> not found";
  * exporting that VM packed no network at all -- collectNetworks looks the id
    up in the daemon's store, found nothing, and skipped it, so the package's
    NICs referenced networks it did not carry and the import had nothing to
    offer.

So both writers of networks.json now sync: the editor for create as well as
modify, and the setup wizard, which normally runs before there is a daemon but
not always. Registering is not starting -- the instance lands STOPPED, exactly
as it would have on the next daemon start.

The export keeps its skip as a last resort, but says so in the log now: a
package quietly missing a network is not something anything else would report.

Signed-off-by: HuJK <gh@hujk.org>
---
 .../droidvm/daemon/vm/pkg/VMExportUtils.java  |  8 ++++-
 .../droidvm/ui/network/NetworkActions.java    | 32 +++++++++++++++++++
 .../ui/network/edit/NetworkEditActivity.java  | 25 ++-------------
 .../ui/setup/step/NetworkStepFragment.java    |  5 +++
 4 files changed, 46 insertions(+), 24 deletions(-)

diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/vm/pkg/VMExportUtils.java b/app/src/main/java/cn/classfun/droidvm/daemon/vm/pkg/VMExportUtils.java
index dd4b13864..039582f44 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/vm/pkg/VMExportUtils.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/vm/pkg/VMExportUtils.java
@@ -211,7 +211,13 @@ public static void collectNetworks(
             var ref = exported.optString("pkg_network_ref", "");
             if (netId.isEmpty() || ref.isEmpty() || !seen.add(netId)) continue;
             var net = store.findById(netId);
-            if (net == null) continue;
+            if (net == null) {
+                // The app registers every network it writes, so this means the registration was
+                // refused or never reached us. Say so: the package comes out with a NIC that
+                // references a network it does not carry, and nothing else would report it.
+                Log.w(TAG, fmt("Network %s is unknown here; leaving it out of the package", netId));
+                continue;
+            }
             try {
                 var cfg = new NetworkConfig(net.toJson());
                 scrubUnique(cfg.item);
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/network/NetworkActions.java b/app/src/main/java/cn/classfun/droidvm/ui/network/NetworkActions.java
index 2bd5888fa..391d0ad25 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/network/NetworkActions.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/network/NetworkActions.java
@@ -79,6 +79,38 @@ public static void createAndStart(
             .invoke();
     }
 
+    /**
+     * Makes the daemon's picture of a network match the store's: it creates the network there
+     * when the daemon does not know it yet, and modifies it when it does. Registering is not
+     * starting -- the instance lands STOPPED either way.
+     *
+     * <p>Every network the app writes to networks.json has to go through here, because the
+     * daemon only re-reads that file when it starts. A network it has never been told about is
+     * one it cannot resolve: a VM whose NIC names it refuses to start ("Network ... not found"),
+     * and an export of that VM silently packs no network at all.
+     *
+     * <p>Best effort and silent: a daemon that is not running yet will read the network out of
+     * networks.json when it starts, which is the case the setup wizard is normally in.
+     */
+    public static void syncToDaemon(@NonNull NetworkConfig config) {
+        var conn = DaemonConnection.getInstance();
+        DaemonConnection.OnUnsuccessful f = r ->
+            Log.w(TAG, fmt("Daemon refused the network sync: %s", r.optString("message", "")));
+        DaemonConnection.OnError err = e -> Log.w(TAG, "Daemon network sync failed", e);
+        conn.buildRequest("network_exists")
+            .put("network_id", config.getId())
+            .onResponse(resp -> conn
+                .buildRequest(resp.optBoolean("exists", false)
+                    ? "network_modify" : "network_create")
+                .put("config", config)
+                .onUnsuccessful(f)
+                .onError(err)
+                .invoke())
+            .onUnsuccessful(f)
+            .onError(err)
+            .invoke();
+    }
+
     public static void deleteNetwork(
         @NonNull Context context,
         @NonNull Handler mainHandler,
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/network/edit/NetworkEditActivity.java b/app/src/main/java/cn/classfun/droidvm/ui/network/edit/NetworkEditActivity.java
index 8bf1b15c5..cd1b385e8 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/network/edit/NetworkEditActivity.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/network/edit/NetworkEditActivity.java
@@ -49,6 +49,7 @@
 import cn.classfun.droidvm.lib.store.network.VlanConfig;
 import cn.classfun.droidvm.lib.ui.BackAskHelper;
 import cn.classfun.droidvm.lib.ui.IconItemAdapter;
+import cn.classfun.droidvm.ui.network.NetworkActions;
 import cn.classfun.droidvm.ui.network.NetworkPresets;
 import cn.classfun.droidvm.ui.widgets.row.DropdownRowWidget;
 import cn.classfun.droidvm.ui.widgets.row.SwitchRowWidget;
@@ -499,7 +500,7 @@ private void onSaveClicked() {
             store.add(config);
         }
         store.save(this);
-        syncToDaemon(config);
+        NetworkActions.syncToDaemon(config);
         Toast.makeText(this,
             editMode ? getString(R.string.network_edit_saved, name) :
                 getString(R.string.network_create_success, name),
@@ -507,28 +508,6 @@ private void onSaveClicked() {
         finish();
     }
 
-    /** Push the modified config to the daemon if it already knows the network. */
-    private void syncToDaemon(@NonNull NetworkConfig config) {
-        var conn = DaemonConnection.getInstance();
-        conn.buildRequest("network_exists")
-            .put("network_id", config.getId())
-            .onResponse(resp -> {
-                if (!resp.optBoolean("exists", false)) return;
-                conn.buildRequest("network_modify")
-                    .put("config", config)
-                    .onUnsuccessful(r -> {
-                    })
-                    .onError(e -> {
-                    })
-                    .invoke();
-            })
-            .onUnsuccessful(r -> {
-            })
-            .onError(e -> {
-            })
-            .invoke();
-    }
-
     /**
      * The reason this config cannot be saved alongside the others, or null when it can. Only
      * networks of the same kind are consulted -- see {@link NetworkConflicts} for why a Linux
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/setup/step/NetworkStepFragment.java b/app/src/main/java/cn/classfun/droidvm/ui/setup/step/NetworkStepFragment.java
index 73c63ac41..bf8b65c6a 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/setup/step/NetworkStepFragment.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/setup/step/NetworkStepFragment.java
@@ -27,6 +27,7 @@
 import cn.classfun.droidvm.lib.store.network.NetworkConfig;
 import cn.classfun.droidvm.lib.store.network.NetworkConfigValidator;
 import cn.classfun.droidvm.lib.store.network.NetworkStore;
+import cn.classfun.droidvm.ui.network.NetworkActions;
 import cn.classfun.droidvm.ui.network.NetworkPresets;
 import cn.classfun.droidvm.ui.setup.SetupActivity;
 import cn.classfun.droidvm.ui.setup.base.BaseStepFragment;
@@ -159,6 +160,10 @@ private void onNext() {
         }
         store().add(config);
         store().save(activity);
+        // Normally the daemon is not up yet and reads this out of networks.json when it starts;
+        // when it is already running, it has to be told, or it cannot resolve the network for
+        // the first VM that uses it.
+        NetworkActions.syncToDaemon(config);
         created = true;
         Toast.makeText(activity,
             getString(R.string.setup_network_created, config.getName()),

From b9242e7cd296c032e07f0d205110eda48485ebed Mon Sep 17 00:00:00 2001
From: HuJK <gh@hujk.org>
Date: Thu, 3 Sep 2026 07:16:10 +0800
Subject: [PATCH 157/182] prebuilts: point at the payload built from the
 accepted artifacts

The recorded commit was one a local build produced on a branch nobody
publishes, so a fresh clone resolved it to nothing. This one is what the CI
packaged from DroidVM-Prebuilt-Root 14c5886 -- the end-to-end clean build
that was accepted on device -- and its crosvm hash matches the binary that
run produced.

It carries the VNC listen address and the per-pool consume_system_mem
accounting in crosvm, the drm2kgsl and venus error paths in virglrenderer,
gfxstream's ColorBuffer import no longer aborting the VMM, a turnip rebuilt
from the Banners fork, and edk2 from a serial BaseTools. The eight platform
libraries are gone rather than updated: LD_LIBRARY_PATH searches the payload
before /system/lib64, so shipping them shadowed the platform's and cost
Android 17 the link entirely. nproc-guard arrives for all three KMIs.
---
 app/src/main/assets/prebuilts | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/app/src/main/assets/prebuilts b/app/src/main/assets/prebuilts
index 8631ea61e..5cc4aa892 160000
--- a/app/src/main/assets/prebuilts
+++ b/app/src/main/assets/prebuilts
@@ -1 +1 @@
-Subproject commit 8631ea61eb07acd3ebfd17553b65797fc28d5149
+Subproject commit 5cc4aa892c8cd25b77b386e787442ce6975cfa31

From 9f24dace533e4e7d02c83591d052b92e8ac1370b Mon Sep 17 00:00:00 2001
From: HuJK <gh@hujk.org>
Date: Thu, 3 Sep 2026 09:36:38 +0800
Subject: [PATCH 158/182] fix size byte parse error

---
 .../java/cn/classfun/droidvm/lib/archive/TarReader.java   | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/app/src/main/java/cn/classfun/droidvm/lib/archive/TarReader.java b/app/src/main/java/cn/classfun/droidvm/lib/archive/TarReader.java
index 71ca38108..d9f291229 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/archive/TarReader.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/archive/TarReader.java
@@ -128,6 +128,14 @@ private static String cstr(@NonNull byte[] hdr, int off, int len) {
     }
 
     private static long parseOctal(@NonNull byte[] hdr, int off, int len) {
+        // GNU base-256: bit 7 of the first byte set, the rest big-endian. GNU tar, bsdtar and
+        // Python's tarfile all write sizes >= 8 GiB (12 octal digits won't fit) this way, and
+        // without this branch such an entry parsed as 0 -> a 0-byte disk on import.
+        if ((hdr[off] & 0x80) != 0) {
+            long v = hdr[off] & 0x7f;
+            for (int i = off + 1; i < off + len; i++) v = (v << 8) | (hdr[i] & 0xff);
+            return v;
+        }
         var s = cstr(hdr, off, len);
         if (s.isEmpty()) return 0;
         var trimmed = s.trim();

From ac5dd59b1a0c2e8bb3268d31e5df2d905fb6b9d7 Mon Sep 17 00:00:00 2001
From: HuJK <gh@hujk.org>
Date: Thu, 3 Sep 2026 10:00:39 +0800
Subject: [PATCH 159/182] archive: TarWriter emits GNU base-256 sizes past 12
 octal digits

padOctal produced 13 digits for entries of 64 GiB and more and field() cut the
string to 12, so the header carried a silently wrong size. Write base-256
(0x80 flag, big-endian) there instead, the form TarReader now reads and GNU
tar, bsdtar and Python's tarfile have always read. Sizes below 64 GiB are
still 11/12-digit octal, byte for byte as before.
---
 .../cn/classfun/droidvm/lib/archive/TarWriter.java | 14 +++++++++++++-
 1 file changed, 13 insertions(+), 1 deletion(-)

diff --git a/app/src/main/java/cn/classfun/droidvm/lib/archive/TarWriter.java b/app/src/main/java/cn/classfun/droidvm/lib/archive/TarWriter.java
index c58a1614e..646f7d549 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/archive/TarWriter.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/archive/TarWriter.java
@@ -114,7 +114,19 @@ private void writeHeader(
         field(hdr, 100, 8, padOctal(metadata.mode, 7));
         field(hdr, 108, 8, padOctal(metadata.uid, 7));
         field(hdr, 116, 8, padOctal(metadata.gid, 7));
-        field(hdr, 124, 12, padOctal(size, 11));
+        if (size > 0777777777777L) {
+            // 12 octal digits top out just under 64 GiB; past that GNU base-256 (bit 7 flag, then
+            // big-endian), which TarReader, GNU tar, bsdtar and Python all read. Before this the
+            // 13-digit string was silently cut to 12 and the entry came out with a wrong size.
+            hdr[124] = (byte) 0x80;
+            long v = size;
+            for (int i = 135; i >= 125; i--) {
+                hdr[i] = (byte) (v & 0xff);
+                v >>= 8;
+            }
+        } else {
+            field(hdr, 124, 12, padOctal(size, 11));
+        }
         field(hdr, 136, 12, padOctal(metadata.mtime, 11));
         for (int i = 148; i < 156; i++) hdr[i] = ' ';
         hdr[156] = (byte) type;

From a4cd205091a6bcc21f512bd26f935571fc041ed8 Mon Sep 17 00:00:00 2001
From: HuJK <gh@hujk.org>
Date: Thu, 3 Sep 2026 20:16:42 +0800
Subject: [PATCH 160/182] vm: Markdown notes, on their own page and rendered
 where the VM is shown

A VM accumulates things worth writing down -- what it is for, how to log in,
what not to touch -- and a config field is the only place they stay attached to
the VM rather than to whoever set it up. So VMConfig grows "notes", which rides
along in a package like every other field: the notes are about the VM, not about
the phone it happens to be on.

They are edited on a page of their own. A row at the end of the editor's Basic
section carries the first line and an Edit button, because prose in a row-sized
text box is unusable the moment it is longer than a sentence. That page has
three modes -- source, rendered, both -- in the title bar rather than under it,
since a row of its own would cost the editor a line of text for a control that
is three buttons wide.

In "both", the split follows the screen's short axis: upright one pane above the
other, on its side one beside the other, so each pane keeps the longest lines it
can. It is taken from the container's own measurements rather than the display's,
which keeps it right in split-screen, in freeform, and when the keyboard takes
half the screen. The panes are sized in pixels, not weights, and that is not a
detail: a weighted LinearLayout measures its weighted children once with an
unbounded spec along the weight axis, and Compose throws outright when a
horizontally scrollable element -- which is what this renderer makes of a table
or a code block -- is measured against an infinite width. Upright that never
happens; turning the phone took the screen down every time until the weights
went.

The rendered notes appear as a card on the VM's own page and on the vmpkg import
screen, the latter being where someone handed a package finds out what they were
handed, before importing it.

Rendering is Compose, because the renderer is. It is confined to one file with
one entry point, so the editor's preview and the read-only cards cannot drift
apart -- they are the same call. Two things there are deliberate: the palette is
read off the hosting Android theme, so a card of notes sits on the same surface
colour as the card beside it instead of arriving in Compose purple; and the
heading ladder is retuned for a phone, since the library starts h1 at
displayLarge -- 57sp, right for a document on its own page and absurd in a card,
where an h1 would take a line and a half on its own.

The renderer itself is vendored rather than pulled as an artifact. Its published
builds use a newer Kotlin than AGP's built-in Kotlin plugin provides, and a
compiler refuses to read metadata from a newer one, which pinned us to 0.38.1 --
the last release built with Kotlin 2.2 -- and would have kept us there until AGP
moved. As source it compiles with whatever Kotlin the build has, so the version
becomes a choice: this takes 0.45.0, the current release, and it needs no change
to compile under 2.2.10. What is taken is the renderer and its Material 3
bindings, commonMain only -- not the Coil loaders, the Material 2 bindings, the
syntax-highlighting module, or the js/wasm/native source sets. 60 files,
Apache-2.0, under app/src/main/vendor in a root of their own so that "not ours,
and under its own licence" is structural rather than a convention, with no SPDX
header of ours added to them. One file is changed and marked in place:
MarkdownLogger declares `internal expect fun platformLog` upstream with an
`actual` per platform, which needs the Kotlin Multiplatform plugin, so the
androidMain implementation is inlined instead. The root is registered with
kotlin.srcDir, not java.srcDir -- the latter compiles nothing here and leaves
every reference unresolved, which is a confusing way to find out.

Kotlin needs no plugin: AGP 9 compiles it out of the box and already owns the
"kotlin" extension, so asking for the Kotlin plugin fails outright. Only the
Compose compiler plugin is applied, pinned to the Kotlin AGP carries. What stays
an artifact is what the renderer depends on -- the org.jetbrains markdown parser,
kotlinx collections-immutable, coroutines and Compose -- all still subject to
the metadata rule, and all currently built with an older Kotlin than ours.

Signed-off-by: HuJK <gh@hujk.org>
---
 app/build.gradle.kts                          |  27 ++
 app/src/main/AndroidManifest.xml              |   7 +
 .../droidvm/lib/store/vm/VMConfig.java        |  17 +
 .../droidvm/ui/markdown/MarkdownRender.kt     | 114 +++++
 .../ui/vm/edit/basic/VMEditBasicTab.java      |  43 ++
 .../droidvm/ui/vm/info/VMInfoActivity.java    |  18 +
 .../droidvm/ui/vm/notes/VMNotesActivity.java  | 271 +++++++++++
 .../vm/pkg/imports/VMPkgImportActivity.java   |  22 +
 app/src/main/res/drawable/ic_code.xml         |  10 +
 app/src/main/res/drawable/ic_notes.xml        |  10 +
 app/src/main/res/drawable/ic_split_pane.xml   |  10 +
 app/src/main/res/layout/activity_vm_info.xml  |  18 +
 app/src/main/res/layout/activity_vm_notes.xml | 145 ++++++
 .../main/res/layout/activity_vmpkg_import.xml |  18 +
 .../main/res/layout/partial_vm_edit_basic.xml |  53 +++
 app/src/main/res/values-zh-rCN/strings.xml    |   9 +
 app/src/main/res/values-zh-rTW/strings.xml    |   9 +
 app/src/main/res/values/strings.xml           |   9 +
 app/src/main/res/values/themes.xml            |  15 +
 app/src/main/vendor/LICENSE                   | 228 +++++++++
 app/src/main/vendor/README.md                 |  34 ++
 .../markdown/annotator/AnnotatedStringKtx.kt  | 375 +++++++++++++++
 .../markdown/annotator/AnnotatorSettings.kt   |  71 +++
 .../mikepenz/markdown/compose/ComposeLocal.kt | 133 ++++++
 .../mikepenz/markdown/compose/LazyMarkdown.kt |  79 ++++
 .../com/mikepenz/markdown/compose/Markdown.kt | 423 +++++++++++++++++
 .../markdown/compose/MarkdownExtension.kt     | 102 +++++
 .../compose/components/MarkdownComponents.kt  | 228 +++++++++
 .../compose/elements/MarkdownAlert.kt         | 138 ++++++
 .../compose/elements/MarkdownBlockQuote.kt    |  96 ++++
 .../compose/elements/MarkdownCheckBox.kt      |  31 ++
 .../markdown/compose/elements/MarkdownCode.kt | 147 ++++++
 .../compose/elements/MarkdownCodeTopBar.kt    |  81 ++++
 .../compose/elements/MarkdownDivider.kt       |  58 +++
 .../compose/elements/MarkdownHeader.kt        |  26 ++
 .../compose/elements/MarkdownImage.kt         |  30 ++
 .../elements/MarkdownImageAltTooltip.kt       | 103 +++++
 .../compose/elements/MarkdownInlineImage.kt   |  24 +
 .../markdown/compose/elements/MarkdownList.kt | 247 ++++++++++
 .../compose/elements/MarkdownParagraph.kt     |  34 ++
 .../compose/elements/MarkdownTable.kt         | 268 +++++++++++
 .../markdown/compose/elements/MarkdownText.kt | 387 ++++++++++++++++
 .../compose/elements/material/TextWrapper.kt  | 123 +++++
 .../extendedspans/ExtendedSpanPainter.kt      | 107 +++++
 .../compose/extendedspans/ExtendedSpans.kt    | 117 +++++
 .../extendedspans/RoundedCornerSpanPainter.kt | 147 ++++++
 .../SquigglyUnderlineSpanPainter.kt           | 224 +++++++++
 .../internal/ColorSerializers.kt              |  20 +
 .../compose/extendedspans/internal/Lists.kt   |  21 +
 .../extendedspans/internal/TextLinkStyles.kt  |  16 +
 .../com/mikepenz/markdown/m3/Markdown.kt      | 250 ++++++++++
 .../mikepenz/markdown/m3/MarkdownColors.kt    |  29 ++
 .../markdown/m3/MarkdownTypography.kt         |  59 +++
 .../markdown/m3/elements/MarkdownCheckBox.kt  |  32 ++
 .../mikepenz/markdown/model/BulletHandler.kt  |   8 +
 .../markdown/model/ImageTransformer.kt        | 117 +++++
 .../com/mikepenz/markdown/model/ImageWidth.kt |  11 +
 .../markdown/model/MarkdownA11yLabels.kt      |  29 ++
 .../markdown/model/MarkdownAlertColors.kt     |  74 +++
 .../markdown/model/MarkdownAlertDimens.kt     |  31 ++
 .../markdown/model/MarkdownAlertIcons.kt      | 120 +++++
 .../markdown/model/MarkdownAlertPadding.kt    |  50 ++
 .../markdown/model/MarkdownAlertType.kt       |  31 ++
 .../markdown/model/MarkdownAnimations.kt      |  50 ++
 .../markdown/model/MarkdownAnnotator.kt       |  55 +++
 .../markdown/model/MarkdownAnnotatorConfig.kt |  89 ++++
 .../mikepenz/markdown/model/MarkdownColors.kt |  36 ++
 .../mikepenz/markdown/model/MarkdownDimens.kt |  53 +++
 .../markdown/model/MarkdownExtendedSpans.kt   |  36 ++
 .../markdown/model/MarkdownImageState.kt      |  52 +++
 .../markdown/model/MarkdownInlineContent.kt   |  37 ++
 .../markdown/model/MarkdownPadding.kt         |  72 +++
 .../mikepenz/markdown/model/MarkdownState.kt  | 433 ++++++++++++++++++
 .../markdown/model/MarkdownTypography.kt      |  50 ++
 .../model/NoOpImageTransformerImpl.kt         |  18 +
 .../markdown/model/ReferenceLinkHandler.kt    |  33 ++
 .../markdown/model/StreamingMarkdownState.kt  | 150 ++++++
 .../markdown/utils/EntityConverter.kt         |  38 ++
 .../com/mikepenz/markdown/utils/Extensions.kt | 207 +++++++++
 .../markdown/utils/LogCompositions.kt         |  25 +
 .../mikepenz/markdown/utils/MarkdownLogger.kt |  39 ++
 gradle/libs.versions.toml                     |  15 +
 scripts/ci/ascii_allow.txt                    |   4 +
 83 files changed, 7276 insertions(+)
 create mode 100644 app/src/main/java/cn/classfun/droidvm/ui/markdown/MarkdownRender.kt
 create mode 100644 app/src/main/java/cn/classfun/droidvm/ui/vm/notes/VMNotesActivity.java
 create mode 100644 app/src/main/res/drawable/ic_code.xml
 create mode 100644 app/src/main/res/drawable/ic_notes.xml
 create mode 100644 app/src/main/res/drawable/ic_split_pane.xml
 create mode 100644 app/src/main/res/layout/activity_vm_notes.xml
 create mode 100644 app/src/main/vendor/LICENSE
 create mode 100644 app/src/main/vendor/README.md
 create mode 100644 app/src/main/vendor/com/mikepenz/markdown/annotator/AnnotatedStringKtx.kt
 create mode 100644 app/src/main/vendor/com/mikepenz/markdown/annotator/AnnotatorSettings.kt
 create mode 100644 app/src/main/vendor/com/mikepenz/markdown/compose/ComposeLocal.kt
 create mode 100644 app/src/main/vendor/com/mikepenz/markdown/compose/LazyMarkdown.kt
 create mode 100644 app/src/main/vendor/com/mikepenz/markdown/compose/Markdown.kt
 create mode 100644 app/src/main/vendor/com/mikepenz/markdown/compose/MarkdownExtension.kt
 create mode 100644 app/src/main/vendor/com/mikepenz/markdown/compose/components/MarkdownComponents.kt
 create mode 100644 app/src/main/vendor/com/mikepenz/markdown/compose/elements/MarkdownAlert.kt
 create mode 100644 app/src/main/vendor/com/mikepenz/markdown/compose/elements/MarkdownBlockQuote.kt
 create mode 100644 app/src/main/vendor/com/mikepenz/markdown/compose/elements/MarkdownCheckBox.kt
 create mode 100644 app/src/main/vendor/com/mikepenz/markdown/compose/elements/MarkdownCode.kt
 create mode 100644 app/src/main/vendor/com/mikepenz/markdown/compose/elements/MarkdownCodeTopBar.kt
 create mode 100644 app/src/main/vendor/com/mikepenz/markdown/compose/elements/MarkdownDivider.kt
 create mode 100644 app/src/main/vendor/com/mikepenz/markdown/compose/elements/MarkdownHeader.kt
 create mode 100644 app/src/main/vendor/com/mikepenz/markdown/compose/elements/MarkdownImage.kt
 create mode 100644 app/src/main/vendor/com/mikepenz/markdown/compose/elements/MarkdownImageAltTooltip.kt
 create mode 100644 app/src/main/vendor/com/mikepenz/markdown/compose/elements/MarkdownInlineImage.kt
 create mode 100644 app/src/main/vendor/com/mikepenz/markdown/compose/elements/MarkdownList.kt
 create mode 100644 app/src/main/vendor/com/mikepenz/markdown/compose/elements/MarkdownParagraph.kt
 create mode 100644 app/src/main/vendor/com/mikepenz/markdown/compose/elements/MarkdownTable.kt
 create mode 100644 app/src/main/vendor/com/mikepenz/markdown/compose/elements/MarkdownText.kt
 create mode 100644 app/src/main/vendor/com/mikepenz/markdown/compose/elements/material/TextWrapper.kt
 create mode 100644 app/src/main/vendor/com/mikepenz/markdown/compose/extendedspans/ExtendedSpanPainter.kt
 create mode 100644 app/src/main/vendor/com/mikepenz/markdown/compose/extendedspans/ExtendedSpans.kt
 create mode 100644 app/src/main/vendor/com/mikepenz/markdown/compose/extendedspans/RoundedCornerSpanPainter.kt
 create mode 100644 app/src/main/vendor/com/mikepenz/markdown/compose/extendedspans/SquigglyUnderlineSpanPainter.kt
 create mode 100644 app/src/main/vendor/com/mikepenz/markdown/compose/extendedspans/internal/ColorSerializers.kt
 create mode 100644 app/src/main/vendor/com/mikepenz/markdown/compose/extendedspans/internal/Lists.kt
 create mode 100644 app/src/main/vendor/com/mikepenz/markdown/compose/extendedspans/internal/TextLinkStyles.kt
 create mode 100644 app/src/main/vendor/com/mikepenz/markdown/m3/Markdown.kt
 create mode 100644 app/src/main/vendor/com/mikepenz/markdown/m3/MarkdownColors.kt
 create mode 100644 app/src/main/vendor/com/mikepenz/markdown/m3/MarkdownTypography.kt
 create mode 100644 app/src/main/vendor/com/mikepenz/markdown/m3/elements/MarkdownCheckBox.kt
 create mode 100644 app/src/main/vendor/com/mikepenz/markdown/model/BulletHandler.kt
 create mode 100644 app/src/main/vendor/com/mikepenz/markdown/model/ImageTransformer.kt
 create mode 100644 app/src/main/vendor/com/mikepenz/markdown/model/ImageWidth.kt
 create mode 100644 app/src/main/vendor/com/mikepenz/markdown/model/MarkdownA11yLabels.kt
 create mode 100644 app/src/main/vendor/com/mikepenz/markdown/model/MarkdownAlertColors.kt
 create mode 100644 app/src/main/vendor/com/mikepenz/markdown/model/MarkdownAlertDimens.kt
 create mode 100644 app/src/main/vendor/com/mikepenz/markdown/model/MarkdownAlertIcons.kt
 create mode 100644 app/src/main/vendor/com/mikepenz/markdown/model/MarkdownAlertPadding.kt
 create mode 100644 app/src/main/vendor/com/mikepenz/markdown/model/MarkdownAlertType.kt
 create mode 100644 app/src/main/vendor/com/mikepenz/markdown/model/MarkdownAnimations.kt
 create mode 100644 app/src/main/vendor/com/mikepenz/markdown/model/MarkdownAnnotator.kt
 create mode 100644 app/src/main/vendor/com/mikepenz/markdown/model/MarkdownAnnotatorConfig.kt
 create mode 100644 app/src/main/vendor/com/mikepenz/markdown/model/MarkdownColors.kt
 create mode 100644 app/src/main/vendor/com/mikepenz/markdown/model/MarkdownDimens.kt
 create mode 100644 app/src/main/vendor/com/mikepenz/markdown/model/MarkdownExtendedSpans.kt
 create mode 100644 app/src/main/vendor/com/mikepenz/markdown/model/MarkdownImageState.kt
 create mode 100644 app/src/main/vendor/com/mikepenz/markdown/model/MarkdownInlineContent.kt
 create mode 100644 app/src/main/vendor/com/mikepenz/markdown/model/MarkdownPadding.kt
 create mode 100644 app/src/main/vendor/com/mikepenz/markdown/model/MarkdownState.kt
 create mode 100644 app/src/main/vendor/com/mikepenz/markdown/model/MarkdownTypography.kt
 create mode 100644 app/src/main/vendor/com/mikepenz/markdown/model/NoOpImageTransformerImpl.kt
 create mode 100644 app/src/main/vendor/com/mikepenz/markdown/model/ReferenceLinkHandler.kt
 create mode 100644 app/src/main/vendor/com/mikepenz/markdown/model/StreamingMarkdownState.kt
 create mode 100644 app/src/main/vendor/com/mikepenz/markdown/utils/EntityConverter.kt
 create mode 100644 app/src/main/vendor/com/mikepenz/markdown/utils/Extensions.kt
 create mode 100644 app/src/main/vendor/com/mikepenz/markdown/utils/LogCompositions.kt
 create mode 100644 app/src/main/vendor/com/mikepenz/markdown/utils/MarkdownLogger.kt

diff --git a/app/build.gradle.kts b/app/build.gradle.kts
index 8e334528c..e0f51c6d2 100644
--- a/app/build.gradle.kts
+++ b/app/build.gradle.kts
@@ -5,6 +5,12 @@ import java.security.MessageDigest
 
 plugins {
     alias(libs.plugins.android.application)
+    // Compose is here for one screen: the Markdown notes editor and the cards that render what
+    // it wrote, which come from a Compose-only library. Everything else stays Java and Views.
+    // Kotlin itself needs no plugin -- AGP 9 compiles it out of the box and already owns the
+    // "kotlin" extension -- so only the Compose compiler plugin is applied, pinned to the same
+    // Kotlin version AGP carries.
+    alias(libs.plugins.kotlin.compose)
 }
 
 fun runGit(vararg args: String): String {
@@ -94,9 +100,22 @@ android {
         sourceCompatibility = JavaVersion.VERSION_11
         targetCompatibility = JavaVersion.VERSION_11
     }
+    kotlin {
+        compilerOptions {
+            jvmTarget = org.jetbrains.kotlin.gradle.dsl.JvmTarget.JVM_11
+        }
+    }
     buildFeatures {
         aidl = true
         buildConfig = true
+        compose = true
+    }
+    sourceSets {
+        getByName("main") {
+            // Third-party source kept in the tree rather than pulled as an artifact, in its own
+            // root so that "not ours, and under its own licence" is structural. See its README.
+            kotlin.srcDir("src/main/vendor")
+        }
     }
     testOptions {
         unitTests {
@@ -339,10 +358,18 @@ dependencies {
     implementation(libs.annotation.jvm)
     implementation(libs.appcompat)
     implementation(libs.auto.service.annotations)
+    implementation(platform(libs.compose.bom))
+    implementation(libs.compose.animation)
+    implementation(libs.compose.foundation)
+    implementation(libs.compose.ui)
+    implementation(libs.compose.material3)
     implementation(libs.constraintlayout)
     implementation(libs.libsu.core)
     implementation(libs.libsu.nio)
     implementation(libs.libsu.service)
+    // The renderer itself lives in src/main/vendor; these are what it needs.
+    implementation(libs.markdown.parser)
+    implementation(libs.kotlinx.collections.immutable)
     implementation(libs.material)
     implementation(libs.okhttp3)
     implementation(libs.snakeyaml)
diff --git a/app/src/main/AndroidManifest.xml b/app/src/main/AndroidManifest.xml
index fb6125399..ed6731d63 100644
--- a/app/src/main/AndroidManifest.xml
+++ b/app/src/main/AndroidManifest.xml
@@ -197,6 +197,13 @@
             android:theme="@style/Theme.DroidVM.NoActionBar"
             android:windowSoftInputMode="adjustNothing" />
 
+        <activity
+            android:name=".ui.vm.notes.VMNotesActivity"
+            android:configChanges="orientation|screenSize|keyboardHidden|screenLayout|smallestScreenSize"
+            android:exported="false"
+            android:theme="@style/Theme.DroidVM.NoActionBar"
+            android:windowSoftInputMode="adjustResize" />
+
         <activity
             android:name=".ui.network.edit.NetworkEditActivity"
             android:configChanges="orientation|screenSize|keyboardHidden|screenLayout|smallestScreenSize"
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/store/vm/VMConfig.java b/app/src/main/java/cn/classfun/droidvm/lib/store/vm/VMConfig.java
index ec48412ad..bf23f799f 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/store/vm/VMConfig.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/store/vm/VMConfig.java
@@ -245,6 +245,23 @@ private void migrateNicForwards() {
         item.remove("port_forwards");
     }
 
+    /**
+     * Free-form Markdown the user keeps with this VM -- what it is for, how to log in, what not
+     * to touch. Empty when unset, never null, so every reader can ask {@code isEmpty()}. It rides
+     * along in a package like any other field, which is the point: the notes are about the VM,
+     * not about the phone it happens to be on.
+     */
+    @NonNull
+    public final String getNotes() {
+        var notes = item.optString("notes", "");
+        return notes == null ? "" : notes;
+    }
+
+    public final void setNotes(@NonNull String notes) {
+        if (notes.isEmpty()) item.remove("notes");
+        else item.set("notes", notes);
+    }
+
     /** Iterates this VM's NIC entries (the "networks" array). */
     public final void forEachNic(@NonNull Consumer<VMNicConfig> consumer) {
         var nets = item.opt("networks", null);
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/markdown/MarkdownRender.kt b/app/src/main/java/cn/classfun/droidvm/ui/markdown/MarkdownRender.kt
new file mode 100644
index 000000000..1ac03684d
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/ui/markdown/MarkdownRender.kt
@@ -0,0 +1,114 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
+package cn.classfun.droidvm.ui.markdown
+
+import android.content.Context
+import androidx.compose.foundation.layout.fillMaxWidth
+import androidx.compose.material3.ColorScheme
+import androidx.compose.material3.MaterialTheme
+import androidx.compose.material3.darkColorScheme
+import androidx.compose.material3.lightColorScheme
+import androidx.compose.runtime.Composable
+import androidx.compose.ui.Modifier
+import androidx.compose.ui.graphics.Color
+import androidx.compose.ui.graphics.luminance
+import androidx.compose.ui.graphics.toArgb
+import androidx.compose.ui.platform.ComposeView
+import androidx.compose.ui.platform.ViewCompositionStrategy
+import androidx.compose.ui.text.font.FontWeight
+import com.google.android.material.color.MaterialColors
+import com.mikepenz.markdown.m3.Markdown
+import com.mikepenz.markdown.m3.markdownTypography
+import com.mikepenz.markdown.model.MarkdownTypography
+
+/**
+ * The one place Markdown is turned into views. Everything else in the app is Java and Android
+ * Views; this is Compose because the renderer is, and it is kept to a single entry point so that
+ * the editor's preview and the read-only cards cannot drift apart -- they are the same call.
+ *
+ * The palette is lifted off the hosting Android theme rather than Compose's defaults, so a card
+ * of rendered notes sits on the same surface colour as the card next to it instead of arriving
+ * in Compose purple.
+ *
+ * One rule for hosts: the [ComposeView] must be measured with a bounded width. Markdown puts
+ * tables and code blocks in horizontally scrollable containers, and Compose throws rather than
+ * lay one of those out against an infinite width -- which is what a weighted LinearLayout child
+ * is measured with on its first pass.
+ */
+object MarkdownRender {
+    /** Renders [markdown] into [view], replacing whatever it held. */
+    @JvmStatic
+    fun bind(view: ComposeView, markdown: String) {
+        view.setViewCompositionStrategy(ViewCompositionStrategy.DisposeOnViewTreeLifecycleDestroyed)
+        view.setContent {
+            MaterialTheme(colorScheme = schemeOf(view.context)) {
+                Markdown(
+                    content = markdown,
+                    typography = phoneTypography(),
+                    modifier = Modifier.fillMaxWidth(),
+                )
+            }
+        }
+    }
+
+    /**
+     * A heading ladder for a phone card. The library's defaults start at displayLarge, which is
+     * 57sp: right for a document rendered on its own page, absurd in a card three of which fit on
+     * one screen -- an h1 would take a line and a half on its own. This tops out at headlineSmall
+     * and steps down from there, so a heading still reads as a heading next to 14sp body text.
+     */
+    @Composable
+    private fun phoneTypography(): MarkdownTypography {
+        val type = MaterialTheme.typography
+        val bold = FontWeight.SemiBold
+        return markdownTypography(
+            h1 = type.headlineSmall.copy(fontWeight = bold),
+            h2 = type.titleLarge.copy(fontWeight = bold),
+            h3 = type.titleMedium.copy(fontWeight = bold),
+            h4 = type.titleSmall.copy(fontWeight = bold),
+            h5 = type.bodyLarge.copy(fontWeight = bold),
+            h6 = type.bodyMedium.copy(fontWeight = bold),
+            text = type.bodyMedium,
+            paragraph = type.bodyMedium,
+            ordered = type.bodyMedium,
+            bullet = type.bodyMedium,
+            list = type.bodyMedium,
+            table = type.bodySmall,
+        )
+    }
+
+    /** The host theme's Material colours, as the scheme Compose draws with. */
+    private fun schemeOf(context: Context): ColorScheme {
+        val surface = color(context, com.google.android.material.R.attr.colorSurface, 0xFF121212)
+        val onSurface = color(context, com.google.android.material.R.attr.colorOnSurface, 0xFFE6E6E6)
+        val primary = color(context, androidx.appcompat.R.attr.colorPrimary, 0xFF7DA0FA)
+        val onSurfaceVariant =
+            color(context, com.google.android.material.R.attr.colorOnSurfaceVariant, 0xFFB0B0B0)
+        val outline = color(context, com.google.android.material.R.attr.colorOutline, 0xFF6F6F6F)
+        // surfaceVariant is what code spans and blocks sit on: a shade off the card, either way.
+        val surfaceVariant = surface.shiftedTowards(onSurface, 0.08f)
+        val base = if (surface.luminance() < 0.5f) darkColorScheme() else lightColorScheme()
+        return base.copy(
+            primary = primary,
+            onPrimary = surface,
+            background = surface,
+            onBackground = onSurface,
+            surface = surface,
+            onSurface = onSurface,
+            surfaceVariant = surfaceVariant,
+            onSurfaceVariant = onSurfaceVariant,
+            outline = outline,
+        )
+    }
+
+    private fun color(context: Context, attr: Int, fallback: Long): Color =
+        Color(MaterialColors.getColor(context, attr, Color(fallback).toArgb()))
+
+    /** [fraction] of the way from this colour to [other]; both are opaque. */
+    private fun Color.shiftedTowards(other: Color, fraction: Float): Color = Color(
+        red = red + (other.red - red) * fraction,
+        green = green + (other.green - green) * fraction,
+        blue = blue + (other.blue - blue) * fraction,
+    )
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/basic/VMEditBasicTab.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/basic/VMEditBasicTab.java
index a20aa4cbb..6413b0294 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/basic/VMEditBasicTab.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/basic/VMEditBasicTab.java
@@ -11,12 +11,17 @@
 import static cn.classfun.droidvm.lib.store.vm.ProtectedVM.PROTECTED_WITHOUT_FIRMWARE;
 import static cn.classfun.droidvm.lib.utils.StringUtils.getEditText;
 
+import android.content.Intent;
 import android.text.TextUtils;
 import android.view.View;
+import android.widget.TextView;
 
+import androidx.activity.result.ActivityResultLauncher;
+import androidx.activity.result.contract.ActivityResultContracts;
 import androidx.annotation.NonNull;
 import androidx.annotation.Nullable;
 
+import com.google.android.material.button.MaterialButton;
 import com.google.android.material.textfield.TextInputEditText;
 
 import java.util.Collection;
@@ -37,6 +42,7 @@
 import cn.classfun.droidvm.lib.store.vm.VMStore;
 import cn.classfun.droidvm.lib.utils.CpuUtils;
 import cn.classfun.droidvm.ui.vm.edit.VMEditActivity;
+import cn.classfun.droidvm.ui.vm.notes.VMNotesActivity;
 import cn.classfun.droidvm.ui.vm.edit.base.VMEditBaseTab;
 import cn.classfun.droidvm.ui.widgets.row.ChooseRowWidget;
 import cn.classfun.droidvm.ui.widgets.row.SwitchRowWidget;
@@ -62,6 +68,11 @@ public final class VMEditBasicTab extends VMEditBaseTab {
     private ChooseRowWidget chooseProtectedVm;
     private ChooseRowWidget chooseBackend;
     private ChooseRowWidget chooseHypervisor;
+    private TextView tvNotesSummary;
+    private MaterialButton btnEditNotes;
+    private ActivityResultLauncher<Intent> notesLauncher;
+    /** The Markdown the editor screen last left; the tab only carries it to saveConfig. */
+    private String notes = "";
     private TextInputEditText etExtraOptions;
     private TextInputEditText etEnvironmentVariables;
 
@@ -86,6 +97,8 @@ public VMEditBasicTab(VMEditActivity parent, View view) {
     @Override
     public void initView() {
         inputName = view.findViewById(R.id.input_name);
+        tvNotesSummary = view.findViewById(R.id.tv_notes_summary);
+        btnEditNotes = view.findViewById(R.id.btn_edit_notes);
         inputMemory = view.findViewById(R.id.input_memory);
         inputCpu = view.findViewById(R.id.input_cpu);
         inputSwiotlb = view.findViewById(R.id.input_swiotlb);
@@ -107,6 +120,16 @@ public void initView() {
 
     @Override
     public void initValue() {
+        var act = new ActivityResultContracts.StartActivityForResult();
+        notesLauncher = parent.registerForActivityResult(act, result -> {
+            var edited = VMNotesActivity.resultOf(result.getResultCode(), result.getData());
+            if (edited == null) return;
+            notes = edited;
+            showNotesSummary();
+        });
+        btnEditNotes.setOnClickListener(v -> notesLauncher.launch(
+            VMNotesActivity.createIntent(parent, notes, inputName.getText())));
+        showNotesSummary();
         inputMemory.setValue(512, SizeUnit.MB);
         inputCpu.setValue(1);
         inputSwiotlb.setValue(64, SizeUnit.MB);
@@ -134,10 +157,29 @@ public void initValue() {
         initCpuTopology();
     }
 
+    /**
+     * The row under the Notes label: the first line that says something, so the row shows what is
+     * in there without pretending to be the editor.
+     */
+    private void showNotesSummary() {
+        String summary = null;
+        for (var line : notes.split("\n")) {
+            var trimmed = line.trim();
+            if (!trimmed.isEmpty()) {
+                summary = trimmed;
+                break;
+            }
+        }
+        tvNotesSummary.setText(summary == null
+            ? parent.getString(R.string.vm_notes_empty) : summary);
+    }
+
     @Override
     public void loadConfig(@NonNull VMConfig config) {
         var item = config.item;
         inputName.setText(config.getName());
+        notes = config.getNotes();
+        showNotesSummary();
         inputMemory.setValue(item.optLong("memory_mb", 512), SizeUnit.MB);
         inputCpu.setValue(item.optLong("cpu_count", 1));
         inputSwiotlb.setValue(item.optLong("swiotlb_mb", 256), SizeUnit.MB);
@@ -423,6 +465,7 @@ private boolean validateManualTopology(int vcpuCount) {
     public void saveConfig(@NonNull VMConfig config) {
         var item = config.item;
         config.setName(inputName.getText());
+        config.setNotes(notes);
         item.set("memory_mb", inputMemory.getValue(SizeUnit.MB));
         item.set("cpu_count", inputCpu.getValue());
         item.set("swiotlb_mb", inputSwiotlb.getValue(SizeUnit.MB));
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/info/VMInfoActivity.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/info/VMInfoActivity.java
index 609e38072..06d6c0073 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/info/VMInfoActivity.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/info/VMInfoActivity.java
@@ -28,6 +28,7 @@
 import androidx.activity.result.ActivityResultLauncher;
 import androidx.activity.result.contract.ActivityResultContracts;
 import androidx.annotation.NonNull;
+import androidx.compose.ui.platform.ComposeView;
 import androidx.annotation.Nullable;
 import androidx.appcompat.app.AppCompatActivity;
 
@@ -60,6 +61,7 @@
 import cn.classfun.droidvm.ui.vm.VMActions;
 import cn.classfun.droidvm.ui.vm.VMDeletion;
 import cn.classfun.droidvm.ui.vm.edit.VMEditActivity;
+import cn.classfun.droidvm.ui.markdown.MarkdownRender;
 import cn.classfun.droidvm.ui.widgets.container.CollapsibleContainer;
 import cn.classfun.droidvm.ui.widgets.row.TextRowWidget;
 
@@ -103,6 +105,8 @@ public final class VMInfoActivity extends AppCompatActivity implements Foregroun
     private TextRowWidget rowDisks;
     private TextRowWidget rowOptions;
     private TextRowWidget rowCreated;
+    private CollapsibleContainer ccNotes;
+    private ComposeView notesPreview;
     private CollapsibleContainer ccPortForwards;
     private LinearLayout containerPortForwards;
     private TextView tvPfEmpty;
@@ -133,6 +137,8 @@ protected void onCreate(@Nullable Bundle savedInstanceState) {
         rowDisks = findViewById(R.id.row_disks);
         rowOptions = findViewById(R.id.row_options);
         rowCreated = findViewById(R.id.row_created);
+        ccNotes = findViewById(R.id.cc_notes);
+        notesPreview = findViewById(R.id.notes_preview);
         ccPortForwards = findViewById(R.id.cc_port_forwards);
         containerPortForwards = findViewById(R.id.container_port_forwards);
         tvPfEmpty = findViewById(R.id.tv_pf_empty);
@@ -240,9 +246,21 @@ private String bootSummary() {
         return basename(boot.getKernel());
     }
 
+    /** The VM's own Markdown, rendered, or nothing at all when it has none. */
+    private void showNotes() {
+        var notes = config.getNotes();
+        if (notes.trim().isEmpty()) {
+            ccNotes.setVisibility(View.GONE);
+            return;
+        }
+        ccNotes.setVisibility(View.VISIBLE);
+        MarkdownRender.bind(notesPreview, notes);
+    }
+
     private void populateInfo() {
         var item = config.item;
         collapsingToolbar.setTitle(config.getName());
+        showNotes();
         rowCpu.setValue(getString(R.string.vm_info_cpu_value, item.optLong("cpu_count", 0)));
         rowMemory.setValue(getString(R.string.vm_info_memory_value, item.optLong("memory_mb", 0)));
         rowKernel.setValue(bootSummary());
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/notes/VMNotesActivity.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/notes/VMNotesActivity.java
new file mode 100644
index 000000000..1993a80d7
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/notes/VMNotesActivity.java
@@ -0,0 +1,271 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
+package cn.classfun.droidvm.ui.vm.notes;
+
+import static android.view.View.GONE;
+import static android.view.View.VISIBLE;
+import static android.widget.LinearLayout.HORIZONTAL;
+import static android.widget.LinearLayout.VERTICAL;
+
+import android.app.Activity;
+import android.content.Context;
+import android.content.Intent;
+import android.os.Bundle;
+import android.os.Handler;
+import android.os.Looper;
+import android.text.Editable;
+import android.text.TextWatcher;
+import android.view.View;
+import android.widget.EditText;
+import android.widget.LinearLayout;
+import android.widget.TextView;
+
+import androidx.annotation.NonNull;
+import androidx.annotation.Nullable;
+import androidx.appcompat.app.AppCompatActivity;
+import androidx.compose.ui.platform.ComposeView;
+import androidx.core.widget.NestedScrollView;
+
+import com.google.android.material.appbar.MaterialToolbar;
+import com.google.android.material.button.MaterialButtonToggleGroup;
+import com.google.android.material.card.MaterialCardView;
+import com.google.android.material.floatingactionbutton.FloatingActionButton;
+
+import cn.classfun.droidvm.R;
+import cn.classfun.droidvm.lib.ui.BackAskHelper;
+import cn.classfun.droidvm.ui.markdown.MarkdownRender;
+
+/**
+ * The Markdown notes editor: a screen of its own because notes are prose, and prose in a row-sized
+ * text box is unusable the moment it is longer than a sentence.
+ *
+ * <p>Three modes -- source, rendered, and both -- and in "both" the split always runs along the
+ * screen's short axis: upright that means one pane above the other, on its side one beside the
+ * other, so each pane keeps the longest lines it can. That is decided from the container's own
+ * measurements rather than the display's, so it stays right in split-screen and freeform windows.
+ */
+public final class VMNotesActivity extends AppCompatActivity {
+    /** In: the Markdown to edit. Out (RESULT_OK): what the user left. */
+    public static final String EXTRA_NOTES = "notes";
+    /** In, optional: shown under the title, so it is clear whose notes these are. */
+    public static final String EXTRA_SUBTITLE = "subtitle";
+    /** Re-rendering on every keystroke is wasted work; this is the pause that ends a burst. */
+    private static final long PREVIEW_DELAY_MS = 250;
+
+    private enum Mode {
+        CODE,
+        PREVIEW,
+        SPLIT,
+    }
+
+    private final Handler mainHandler = new Handler(Looper.getMainLooper());
+    private final Runnable renderPreview = this::renderPreview;
+    private MaterialToolbar toolbar;
+    private MaterialButtonToggleGroup groupMode;
+    private LinearLayout splitContainer;
+    private MaterialCardView paneCode;
+    private NestedScrollView panePreview;
+    private EditText etMarkdown;
+    private ComposeView preview;
+    private TextView tvPreviewEmpty;
+    private FloatingActionButton fabSave;
+    private BackAskHelper backAsk;
+    private Mode mode = Mode.SPLIT;
+    private String original = "";
+    /** What the preview currently shows, so a re-layout does not recompose for nothing. */
+    private String rendered = null;
+
+    @NonNull
+    public static Intent createIntent(
+        @NonNull Context ctx, @NonNull String notes, @Nullable String subtitle
+    ) {
+        var intent = new Intent(ctx, VMNotesActivity.class);
+        intent.putExtra(EXTRA_NOTES, notes);
+        if (subtitle != null) intent.putExtra(EXTRA_SUBTITLE, subtitle);
+        return intent;
+    }
+
+    /** The edited Markdown carried by a RESULT_OK intent, or null when the edit was abandoned. */
+    @Nullable
+    public static String resultOf(int resultCode, @Nullable Intent data) {
+        if (resultCode != Activity.RESULT_OK || data == null) return null;
+        var notes = data.getStringExtra(EXTRA_NOTES);
+        return notes == null ? "" : notes;
+    }
+
+    @Override
+    protected void onCreate(@Nullable Bundle savedInstanceState) {
+        super.onCreate(savedInstanceState);
+        setContentView(R.layout.activity_vm_notes);
+        toolbar = findViewById(R.id.toolbar);
+        groupMode = findViewById(R.id.group_mode);
+        splitContainer = findViewById(R.id.split_container);
+        paneCode = findViewById(R.id.pane_code);
+        panePreview = findViewById(R.id.pane_preview);
+        etMarkdown = findViewById(R.id.et_markdown);
+        preview = findViewById(R.id.preview);
+        tvPreviewEmpty = findViewById(R.id.tv_preview_empty);
+        fabSave = findViewById(R.id.fab_save);
+        initialize(savedInstanceState);
+    }
+
+    private void initialize(@Nullable Bundle savedInstanceState) {
+        var intent = getIntent();
+        original = intent == null ? "" : orEmpty(intent.getStringExtra(EXTRA_NOTES));
+        var subtitle = intent == null ? null : intent.getStringExtra(EXTRA_SUBTITLE);
+        if (subtitle != null && !subtitle.isEmpty()) toolbar.setSubtitle(subtitle);
+        // BackAskHelper takes the toolbar's back arrow as well; it is armed only while there is
+        // something to discard, so leaving an untouched screen costs no dialog.
+        backAsk = new BackAskHelper(this);
+        backAsk.setEnabled(false);
+        etMarkdown.setText(savedInstanceState == null
+            ? original : orEmpty(savedInstanceState.getString(EXTRA_NOTES)));
+        etMarkdown.addTextChangedListener(new TextWatcher() {
+            @Override
+            public void beforeTextChanged(CharSequence s, int start, int count, int after) {
+            }
+
+            @Override
+            public void onTextChanged(CharSequence s, int start, int before, int count) {
+            }
+
+            @Override
+            public void afterTextChanged(Editable s) {
+                backAsk.setEnabled(isModified());
+                schedulePreview();
+            }
+        });
+        groupMode.addOnButtonCheckedListener((group, checkedId, isChecked) -> {
+            if (!isChecked) return;
+            mode = modeOf(checkedId);
+            applyMode();
+        });
+        // The container's own size decides the split, so it has to be asked after every layout:
+        // rotation, split-screen resize, a keyboard that takes half the screen.
+        splitContainer.addOnLayoutChangeListener(
+            (v, l, t, r, b, ol, ot, or, ob) -> applySplitLayout());
+        fabSave.setOnClickListener(v -> save());
+        groupMode.check(buttonOf(mode));
+        applyMode();
+    }
+
+    @Override
+    protected void onSaveInstanceState(@NonNull Bundle outState) {
+        super.onSaveInstanceState(outState);
+        outState.putString(EXTRA_NOTES, text());
+    }
+
+    @Override
+    protected void onDestroy() {
+        super.onDestroy();
+        mainHandler.removeCallbacks(renderPreview);
+    }
+
+    private void save() {
+        var data = new Intent();
+        data.putExtra(EXTRA_NOTES, text());
+        setResult(Activity.RESULT_OK, data);
+        finish();
+    }
+
+    private boolean isModified() {
+        return !text().equals(original);
+    }
+
+    @NonNull
+    private String text() {
+        var editable = etMarkdown.getText();
+        return editable == null ? "" : editable.toString();
+    }
+
+    private void applyMode() {
+        boolean code = mode != Mode.PREVIEW;
+        boolean rendering = mode != Mode.CODE;
+        paneCode.setVisibility(code ? VISIBLE : GONE);
+        panePreview.setVisibility(rendering ? VISIBLE : GONE);
+        applySplitLayout();
+        if (rendering) renderPreview();
+    }
+
+    /**
+     * Splits along the short axis and sizes the panes in pixels.
+     *
+     * <p>The pixels are the point. A weighted LinearLayout measures its weighted children once
+     * with an unbounded spec along the weight axis to find their natural size, and Compose throws
+     * outright when a horizontally scrollable element -- which is what this renderer makes of a
+     * table or a code block -- is measured with an infinite maximum width. Upright that never
+     * happened, because a vertical LinearLayout only leaves the height unbounded; turning the
+     * phone made the split horizontal and took the screen down on the spot. Exact sizes have no
+     * such pass.
+     */
+    private void applySplitLayout() {
+        int width = splitContainer.getWidth();
+        int height = splitContainer.getHeight();
+        if (width <= 0 || height <= 0) return;
+        boolean horizontal = width > height;
+        if (splitContainer.getOrientation() != (horizontal ? HORIZONTAL : VERTICAL))
+            splitContainer.setOrientation(horizontal ? HORIZONTAL : VERTICAL);
+        int available = horizontal
+            ? width - splitContainer.getPaddingLeft() - splitContainer.getPaddingRight()
+            : height - splitContainer.getPaddingTop() - splitContainer.getPaddingBottom();
+        // Both panes share the box in split mode; alone, a pane gets all of it.
+        int share = mode == Mode.SPLIT ? available / 2 : available;
+        sizePane(paneCode, horizontal, share);
+        sizePane(panePreview, horizontal, share);
+    }
+
+    /** Gives one pane an exact size along the split axis, and all of the other one. */
+    private static void sizePane(@NonNull View pane, boolean horizontal, int share) {
+        var params = (LinearLayout.LayoutParams) pane.getLayoutParams();
+        if (params == null) return;
+        int margins = horizontal
+            ? params.leftMargin + params.rightMargin
+            : params.topMargin + params.bottomMargin;
+        int size = Math.max(0, share - margins);
+        int width = horizontal ? size : LinearLayout.LayoutParams.MATCH_PARENT;
+        int height = horizontal ? LinearLayout.LayoutParams.MATCH_PARENT : size;
+        if (params.width == width && params.height == height && params.weight == 0f) return;
+        params.width = width;
+        params.height = height;
+        params.weight = 0f;
+        pane.setLayoutParams(params);
+    }
+
+    private void schedulePreview() {
+        if (mode == Mode.CODE) return;
+        mainHandler.removeCallbacks(renderPreview);
+        mainHandler.postDelayed(renderPreview, PREVIEW_DELAY_MS);
+    }
+
+    private void renderPreview() {
+        var markdown = text();
+        tvPreviewEmpty.setVisibility(markdown.trim().isEmpty() ? VISIBLE : GONE);
+        if (markdown.equals(rendered)) return;
+        rendered = markdown;
+        MarkdownRender.bind(preview, markdown);
+    }
+
+    @NonNull
+    private Mode modeOf(int buttonId) {
+        if (buttonId == R.id.btn_mode_code) return Mode.CODE;
+        if (buttonId == R.id.btn_mode_preview) return Mode.PREVIEW;
+        return Mode.SPLIT;
+    }
+
+    private int buttonOf(@NonNull Mode mode) {
+        switch (mode) {
+            case CODE:
+                return R.id.btn_mode_code;
+            case PREVIEW:
+                return R.id.btn_mode_preview;
+            default:
+                return R.id.btn_mode_split;
+        }
+    }
+
+    @NonNull
+    private static String orEmpty(@Nullable String value) {
+        return value == null ? "" : value;
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/pkg/imports/VMPkgImportActivity.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/pkg/imports/VMPkgImportActivity.java
index 7fef79e30..a23c2312e 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/pkg/imports/VMPkgImportActivity.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/pkg/imports/VMPkgImportActivity.java
@@ -34,6 +34,7 @@
 import androidx.annotation.NonNull;
 import androidx.annotation.Nullable;
 import androidx.appcompat.app.AppCompatActivity;
+import androidx.compose.ui.platform.ComposeView;
 import androidx.recyclerview.widget.LinearLayoutManager;
 import androidx.recyclerview.widget.RecyclerView;
 
@@ -70,6 +71,7 @@
 import cn.classfun.droidvm.lib.store.network.NetworkStore;
 import cn.classfun.droidvm.lib.store.vm.VMConfig;
 import cn.classfun.droidvm.lib.store.vm.VMStore;
+import cn.classfun.droidvm.ui.markdown.MarkdownRender;
 import cn.classfun.droidvm.ui.vm.info.VMInfoActivity;
 import cn.classfun.droidvm.ui.widgets.container.CollapsibleContainer;
 import cn.classfun.droidvm.ui.widgets.row.TextInputRowWidget;
@@ -91,6 +93,8 @@ public final class VMPkgImportActivity extends AppCompatActivity
     private TextView tvDiskSummary;
     private TextInputRowWidget inputTarget;
     private CollapsibleContainer ccNetworks;
+    private CollapsibleContainer ccNotes;
+    private ComposeView notesPreview;
     private RecyclerView containerDisks;
     private LinearLayout containerNetworks;
     private TextView tvStatus;
@@ -128,6 +132,8 @@ protected void onCreate(@Nullable Bundle savedInstanceState) {
         tvDiskSummary = findViewById(R.id.tv_disk_summary);
         inputTarget = findViewById(R.id.input_target);
         ccNetworks = findViewById(R.id.cc_networks);
+        ccNotes = findViewById(R.id.cc_notes);
+        notesPreview = findViewById(R.id.notes_preview);
         containerDisks = findViewById(R.id.container_disks);
         containerNetworks = findViewById(R.id.container_networks);
         tvStatus = findViewById(R.id.tv_status);
@@ -263,6 +269,7 @@ private void showPreview() {
             diskAdapter.disks.add(d);
         }
         diskAdapter.notifyDataSetChanged();
+        showNotes();
         buildNetworkCards();
         ccNetworks.setVisibility(networkBinders.isEmpty() ? GONE : VISIBLE);
         if (inputTarget.getText().trim().isEmpty())
@@ -279,6 +286,21 @@ private void showPreview() {
         btnImport.setEnabled(true);
     }
 
+    /**
+     * The notes the packaged VM carries, rendered before anything is imported: they are where an
+     * author says what the VM is and what to do with it, which is exactly what someone looking at
+     * a package they were handed wants to read first.
+     */
+    private void showNotes() {
+        var notes = preview == null ? "" : preview.vm.getNotes();
+        if (notes.trim().isEmpty()) {
+            ccNotes.setVisibility(GONE);
+            return;
+        }
+        ccNotes.setVisibility(VISIBLE);
+        MarkdownRender.bind(notesPreview, notes);
+    }
+
     /**
      * One card per network the package carries, each deciding for itself. A package holds one
      * network per distinct one its VM's adapters were on, and they need not be alike -- an L2
diff --git a/app/src/main/res/drawable/ic_code.xml b/app/src/main/res/drawable/ic_code.xml
new file mode 100644
index 000000000..6dcab7756
--- /dev/null
+++ b/app/src/main/res/drawable/ic_code.xml
@@ -0,0 +1,10 @@
+<vector xmlns:android="http://schemas.android.com/apk/res/android"
+    android:width="24dp"
+    android:height="24dp"
+    android:viewportWidth="24"
+    android:viewportHeight="24"
+    android:tint="?attr/colorControlNormal">
+    <path
+        android:fillColor="@android:color/white"
+        android:pathData="M9.4,16.6 L4.8,12 9.4,7.4 8,6l-6,6 6,6zM14.6,16.6l4.6,-4.6 -4.6,-4.6L16,6l6,6 -6,6z" />
+</vector>
diff --git a/app/src/main/res/drawable/ic_notes.xml b/app/src/main/res/drawable/ic_notes.xml
new file mode 100644
index 000000000..b3f5b4836
--- /dev/null
+++ b/app/src/main/res/drawable/ic_notes.xml
@@ -0,0 +1,10 @@
+<vector xmlns:android="http://schemas.android.com/apk/res/android"
+    android:width="24dp"
+    android:height="24dp"
+    android:viewportWidth="24"
+    android:viewportHeight="24"
+    android:tint="?attr/colorControlNormal">
+    <path
+        android:fillColor="@android:color/white"
+        android:pathData="M3,5h18v2H3zM3,9h18v2H3zM3,13h18v2H3zM3,17h11v2H3z" />
+</vector>
diff --git a/app/src/main/res/drawable/ic_split_pane.xml b/app/src/main/res/drawable/ic_split_pane.xml
new file mode 100644
index 000000000..253fac09f
--- /dev/null
+++ b/app/src/main/res/drawable/ic_split_pane.xml
@@ -0,0 +1,10 @@
+<vector xmlns:android="http://schemas.android.com/apk/res/android"
+    android:width="24dp"
+    android:height="24dp"
+    android:viewportWidth="24"
+    android:viewportHeight="24"
+    android:tint="?attr/colorControlNormal">
+    <path
+        android:fillColor="@android:color/white"
+        android:pathData="M3,5h8v14H3zM13,5h8v14h-8zM4,6v12h6V6zM14,6v12h6V6z" />
+</vector>
diff --git a/app/src/main/res/layout/activity_vm_info.xml b/app/src/main/res/layout/activity_vm_info.xml
index 4c64d37f8..95bbee4f7 100644
--- a/app/src/main/res/layout/activity_vm_info.xml
+++ b/app/src/main/res/layout/activity_vm_info.xml
@@ -229,6 +229,24 @@
                 android:layout_marginStart="16dp"
                 android:layout_marginEnd="16dp" />
 
+            <cn.classfun.droidvm.ui.widgets.container.CollapsibleContainer
+                android:id="@+id/cc_notes"
+                android:layout_width="match_parent"
+                android:layout_height="wrap_content"
+                android:title="@string/vm_notes_title"
+                android:visibility="gone"
+                app:cc_collapsible="false">
+
+                <androidx.compose.ui.platform.ComposeView
+                    android:id="@+id/notes_preview"
+                    android:layout_width="match_parent"
+                    android:layout_height="wrap_content"
+                    android:layout_marginStart="16dp"
+                    android:layout_marginEnd="16dp"
+                    android:layout_marginBottom="8dp" />
+
+            </cn.classfun.droidvm.ui.widgets.container.CollapsibleContainer>
+
             <cn.classfun.droidvm.ui.widgets.container.CollapsibleContainer
                 android:layout_width="match_parent"
                 android:layout_height="wrap_content"
diff --git a/app/src/main/res/layout/activity_vm_notes.xml b/app/src/main/res/layout/activity_vm_notes.xml
new file mode 100644
index 000000000..39d954662
--- /dev/null
+++ b/app/src/main/res/layout/activity_vm_notes.xml
@@ -0,0 +1,145 @@
+<?xml version="1.0" encoding="utf-8"?>
+<androidx.coordinatorlayout.widget.CoordinatorLayout xmlns:android="http://schemas.android.com/apk/res/android"
+    xmlns:app="http://schemas.android.com/apk/res-auto"
+    xmlns:tools="http://schemas.android.com/tools"
+    android:layout_width="match_parent"
+    android:layout_height="match_parent"
+    android:fitsSystemWindows="true"
+    tools:context=".ui.vm.notes.VMNotesActivity">
+
+    <com.google.android.material.appbar.AppBarLayout
+        android:layout_width="match_parent"
+        android:layout_height="wrap_content"
+        android:fitsSystemWindows="true">
+
+        <com.google.android.material.appbar.MaterialToolbar
+            android:id="@+id/toolbar"
+            android:layout_width="match_parent"
+            android:layout_height="?attr/actionBarSize"
+            app:navigationIcon="?attr/homeAsUpIndicator"
+            app:title="@string/vm_notes_title">
+
+            <!-- In the title bar rather than under it: the three modes are the one control this
+                 screen has, and a row of its own would cost the editor a line of text. -->
+            <com.google.android.material.button.MaterialButtonToggleGroup
+                android:id="@+id/group_mode"
+                android:layout_width="wrap_content"
+                android:layout_height="wrap_content"
+                android:layout_gravity="end|center_vertical"
+                app:selectionRequired="true"
+                app:singleSelection="true">
+
+                <com.google.android.material.button.MaterialButton
+                    android:id="@+id/btn_mode_code"
+                    style="@style/Widget.DroidVM.Button.ModeToggle"
+                    android:contentDescription="@string/vm_notes_mode_code"
+                    app:icon="@drawable/ic_code" />
+
+                <com.google.android.material.button.MaterialButton
+                    android:id="@+id/btn_mode_preview"
+                    style="@style/Widget.DroidVM.Button.ModeToggle"
+                    android:contentDescription="@string/vm_notes_mode_preview"
+                    app:icon="@drawable/ic_eye" />
+
+                <com.google.android.material.button.MaterialButton
+                    android:id="@+id/btn_mode_split"
+                    style="@style/Widget.DroidVM.Button.ModeToggle"
+                    android:contentDescription="@string/vm_notes_mode_split"
+                    app:icon="@drawable/ic_split_pane" />
+
+            </com.google.android.material.button.MaterialButtonToggleGroup>
+
+        </com.google.android.material.appbar.MaterialToolbar>
+
+    </com.google.android.material.appbar.AppBarLayout>
+
+    <LinearLayout
+        android:layout_width="match_parent"
+        android:layout_height="match_parent"
+        android:orientation="vertical"
+        app:layout_behavior="@string/appbar_scrolling_view_behavior">
+
+        <!-- Orientation and the panes' layout params are set at run time: the split always
+             follows the short axis, so it is top/bottom upright and side by side on its side. -->
+        <LinearLayout
+            android:id="@+id/split_container"
+            android:layout_width="match_parent"
+            android:layout_height="0dp"
+            android:layout_weight="1"
+            android:orientation="vertical"
+            android:padding="8dp">
+
+            <com.google.android.material.card.MaterialCardView
+                android:id="@+id/pane_code"
+                android:layout_width="match_parent"
+                android:layout_height="0dp"
+                android:layout_margin="4dp"
+                android:layout_weight="1"
+                app:cardCornerRadius="12dp"
+                app:cardElevation="0dp"
+                app:strokeColor="?attr/colorOutlineVariant"
+                app:strokeWidth="1dp">
+
+                <EditText
+                    android:id="@+id/et_markdown"
+                    android:layout_width="match_parent"
+                    android:layout_height="match_parent"
+                    android:autofillHints="@null"
+                    android:background="@null"
+                    android:gravity="top|start"
+                    android:hint="@string/vm_notes_hint"
+                    android:inputType="textMultiLine|textNoSuggestions|textCapSentences"
+                    android:padding="12dp"
+                    android:scrollbars="vertical"
+                    android:textSize="14sp"
+                    android:typeface="monospace" />
+
+            </com.google.android.material.card.MaterialCardView>
+
+            <androidx.core.widget.NestedScrollView
+                android:id="@+id/pane_preview"
+                android:layout_width="match_parent"
+                android:layout_height="0dp"
+                android:layout_margin="4dp"
+                android:layout_weight="1"
+                android:fillViewport="true">
+
+                <LinearLayout
+                    android:layout_width="match_parent"
+                    android:layout_height="wrap_content"
+                    android:orientation="vertical"
+                    android:paddingHorizontal="4dp">
+
+                    <androidx.compose.ui.platform.ComposeView
+                        android:id="@+id/preview"
+                        android:layout_width="match_parent"
+                        android:layout_height="wrap_content" />
+
+                    <TextView
+                        android:id="@+id/tv_preview_empty"
+                        android:layout_width="match_parent"
+                        android:layout_height="wrap_content"
+                        android:padding="12dp"
+                        android:text="@string/vm_notes_preview_empty"
+                        android:textAppearance="?attr/textAppearanceBodyMedium"
+                        android:textColor="?android:attr/textColorSecondary"
+                        android:visibility="gone" />
+
+                </LinearLayout>
+
+            </androidx.core.widget.NestedScrollView>
+
+        </LinearLayout>
+
+    </LinearLayout>
+
+    <com.google.android.material.floatingactionbutton.FloatingActionButton
+        android:id="@+id/fab_save"
+        android:layout_width="wrap_content"
+        android:layout_height="wrap_content"
+        android:layout_gravity="bottom|end"
+        android:layout_margin="16dp"
+        android:contentDescription="@string/vm_notes_save"
+        android:src="@drawable/ic_check" />
+
+</androidx.coordinatorlayout.widget.CoordinatorLayout>
diff --git a/app/src/main/res/layout/activity_vmpkg_import.xml b/app/src/main/res/layout/activity_vmpkg_import.xml
index e7b166103..b27815eb9 100644
--- a/app/src/main/res/layout/activity_vmpkg_import.xml
+++ b/app/src/main/res/layout/activity_vmpkg_import.xml
@@ -128,6 +128,24 @@
                     android:textAppearance="?attr/textAppearanceBodySmall"
                     android:textColor="?android:attr/textColorSecondary" />
 
+                <cn.classfun.droidvm.ui.widgets.container.CollapsibleContainer
+                    android:id="@+id/cc_notes"
+                    android:layout_width="match_parent"
+                    android:layout_height="wrap_content"
+                    android:title="@string/vm_notes_title"
+                    android:visibility="gone"
+                    app:cc_collapsible="false">
+
+                    <androidx.compose.ui.platform.ComposeView
+                        android:id="@+id/notes_preview"
+                        android:layout_width="match_parent"
+                        android:layout_height="wrap_content"
+                        android:layout_marginStart="16dp"
+                        android:layout_marginEnd="16dp"
+                        android:layout_marginBottom="8dp" />
+
+                </cn.classfun.droidvm.ui.widgets.container.CollapsibleContainer>
+
                 <cn.classfun.droidvm.ui.widgets.container.CollapsibleContainer
                     android:id="@+id/cc_disks"
                     android:layout_width="match_parent"
diff --git a/app/src/main/res/layout/partial_vm_edit_basic.xml b/app/src/main/res/layout/partial_vm_edit_basic.xml
index 4318e8cd9..87e19cdf1 100644
--- a/app/src/main/res/layout/partial_vm_edit_basic.xml
+++ b/app/src/main/res/layout/partial_vm_edit_basic.xml
@@ -156,6 +156,59 @@
             android:icon="@drawable/ic_bug"
             android:text="@string/create_vm_debug" />
 
+        <LinearLayout
+            android:layout_width="match_parent"
+            android:layout_height="wrap_content"
+            android:gravity="center_vertical"
+            android:minHeight="72dp"
+            android:orientation="horizontal"
+            android:paddingStart="16dp"
+            android:paddingTop="8dp"
+            android:paddingEnd="16dp"
+            android:paddingBottom="8dp">
+
+            <ImageView
+                android:layout_width="24dp"
+                android:layout_height="24dp"
+                android:contentDescription="@string/vm_notes_title"
+                android:src="@drawable/ic_notes"
+                app:tint="?attr/colorControlNormal" />
+
+            <LinearLayout
+                android:layout_width="0dp"
+                android:layout_height="wrap_content"
+                android:layout_marginStart="16dp"
+                android:layout_weight="1"
+                android:orientation="vertical">
+
+                <TextView
+                    android:layout_width="wrap_content"
+                    android:layout_height="wrap_content"
+                    android:text="@string/vm_notes_title"
+                    android:textSize="16sp" />
+
+                <TextView
+                    android:id="@+id/tv_notes_summary"
+                    android:layout_width="match_parent"
+                    android:layout_height="wrap_content"
+                    android:ellipsize="end"
+                    android:maxLines="1"
+                    android:textColor="?attr/colorOnSurfaceVariant"
+                    android:textSize="13sp" />
+
+            </LinearLayout>
+
+            <com.google.android.material.button.MaterialButton
+                android:id="@+id/btn_edit_notes"
+                style="?attr/materialButtonOutlinedStyle"
+                android:layout_width="wrap_content"
+                android:layout_height="wrap_content"
+                android:layout_marginStart="12dp"
+                android:text="@string/vm_notes_edit"
+                app:icon="@drawable/ic_edit" />
+
+        </LinearLayout>
+
     </cn.classfun.droidvm.ui.widgets.container.CollapsibleContainer>
 
     <cn.classfun.droidvm.ui.widgets.container.CollapsibleContainer
diff --git a/app/src/main/res/values-zh-rCN/strings.xml b/app/src/main/res/values-zh-rCN/strings.xml
index 8e6ff8e18..afecee425 100644
--- a/app/src/main/res/values-zh-rCN/strings.xml
+++ b/app/src/main/res/values-zh-rCN/strings.xml
@@ -1365,6 +1365,15 @@
     <string name="vmpkg_export_disk_chain_broken">父节点缺失</string>
     <string name="vmpkg_export_disk_chain_missing">读不到这颗磁盘的父节点：%1$s</string>
     <string name="vmpkg_export_disk_missing">选中的磁盘不存在：%1$s</string>
+    <string name="vm_notes_title">备注</string>
+    <string name="vm_notes_edit">编辑</string>
+    <string name="vm_notes_empty">尚未填写</string>
+    <string name="vm_notes_hint">Markdown\u2026</string>
+    <string name="vm_notes_save">保存备注</string>
+    <string name="vm_notes_preview_empty">还没有可预览的内容。</string>
+    <string name="vm_notes_mode_code">源码</string>
+    <string name="vm_notes_mode_preview">预览</string>
+    <string name="vm_notes_mode_split">并排</string>
     <string name="vmpkg_import_title">导入虚拟机包</string>
     <string name="vmpkg_import_pick">选择 .vmpkg 文件</string>
     <string name="vmpkg_import_do">导入</string>
diff --git a/app/src/main/res/values-zh-rTW/strings.xml b/app/src/main/res/values-zh-rTW/strings.xml
index 25aed3de9..dcb3a05e1 100644
--- a/app/src/main/res/values-zh-rTW/strings.xml
+++ b/app/src/main/res/values-zh-rTW/strings.xml
@@ -1365,6 +1365,15 @@
     <string name="vmpkg_export_disk_chain_broken">父節點缺失</string>
     <string name="vmpkg_export_disk_chain_missing">讀不到這顆磁碟的父節點：%1$s</string>
     <string name="vmpkg_export_disk_missing">選中的磁碟不存在：%1$s</string>
+    <string name="vm_notes_title">備註</string>
+    <string name="vm_notes_edit">編輯</string>
+    <string name="vm_notes_empty">尚未填寫</string>
+    <string name="vm_notes_hint">Markdown\u2026</string>
+    <string name="vm_notes_save">儲存備註</string>
+    <string name="vm_notes_preview_empty">還沒有可預覽的內容。</string>
+    <string name="vm_notes_mode_code">原始碼</string>
+    <string name="vm_notes_mode_preview">預覽</string>
+    <string name="vm_notes_mode_split">並排</string>
     <string name="vmpkg_import_title">匯入虛擬機器包</string>
     <string name="vmpkg_import_pick">選擇 .vmpkg 檔案</string>
     <string name="vmpkg_import_do">匯入</string>
diff --git a/app/src/main/res/values/strings.xml b/app/src/main/res/values/strings.xml
index ba99532d7..c9aae5541 100644
--- a/app/src/main/res/values/strings.xml
+++ b/app/src/main/res/values/strings.xml
@@ -1402,6 +1402,15 @@
     <string name="vmpkg_export_disk_chain_broken">chain broken</string>
     <string name="vmpkg_export_disk_chain_missing">Cannot read this disk\'s backing chain: %1$s</string>
     <string name="vmpkg_export_disk_missing">Selected disk does not exist: %1$s</string>
+    <string name="vm_notes_title">Notes</string>
+    <string name="vm_notes_edit">Edit</string>
+    <string name="vm_notes_empty">No notes yet</string>
+    <string name="vm_notes_hint">Markdown\u2026</string>
+    <string name="vm_notes_save">Save notes</string>
+    <string name="vm_notes_preview_empty">Nothing to preview yet.</string>
+    <string name="vm_notes_mode_code">Source</string>
+    <string name="vm_notes_mode_preview">Preview</string>
+    <string name="vm_notes_mode_split">Side by side</string>
     <string name="vmpkg_import_title">Import VM package</string>
     <string name="vmpkg_import_pick">Pick .vmpkg file</string>
     <string name="vmpkg_import_do">Import</string>
diff --git a/app/src/main/res/values/themes.xml b/app/src/main/res/values/themes.xml
index f9b759958..f0fef5e89 100644
--- a/app/src/main/res/values/themes.xml
+++ b/app/src/main/res/values/themes.xml
@@ -73,6 +73,21 @@
         <item name="backgroundTint">@null</item>
     </style>
 
+    <!-- Icon-only segmented button sized to sit inside a toolbar: the stock outlined button is
+         48dp plus 6dp insets, which an actionBarSize row cannot hold. -->
+    <style name="Widget.DroidVM.Button.ModeToggle" parent="Widget.Material3.Button.OutlinedButton">
+        <item name="android:layout_width">wrap_content</item>
+        <item name="android:layout_height">40dp</item>
+        <item name="android:minWidth">44dp</item>
+        <item name="android:minHeight">0dp</item>
+        <item name="android:insetTop">0dp</item>
+        <item name="android:insetBottom">0dp</item>
+        <item name="android:paddingStart">10dp</item>
+        <item name="android:paddingEnd">10dp</item>
+        <item name="iconPadding">0dp</item>
+        <item name="iconGravity">textStart</item>
+    </style>
+
     <style name="ShapeAppearanceOverlay.Fab.Circle" parent="">
         <item name="cornerFamily">rounded</item>
         <item name="cornerSize">50%</item>
diff --git a/app/src/main/vendor/LICENSE b/app/src/main/vendor/LICENSE
new file mode 100644
index 000000000..7e3193257
--- /dev/null
+++ b/app/src/main/vendor/LICENSE
@@ -0,0 +1,228 @@
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2022 Mike Penz
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+--------
+
+Parts of the markdown composer are based on Erik Hellman's work as found: https://github.com/ErikHellman/MarkdownComposer
+As described in the related article: https://www.hellsoft.se/rendering-markdown-with-jetpack-compose/
+
+MIT License
+
+Copyright (c) 2021 Erik Hellman
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
\ No newline at end of file
diff --git a/app/src/main/vendor/README.md b/app/src/main/vendor/README.md
new file mode 100644
index 000000000..87bca54f8
--- /dev/null
+++ b/app/src/main/vendor/README.md
@@ -0,0 +1,34 @@
+# Vendored: multiplatform-markdown-renderer
+
+Upstream: https://github.com/mikepenz/multiplatform-markdown-renderer
+Version:  v0.45.0
+Licence:  Apache-2.0 (see LICENSE in this directory)
+
+This is third-party source, kept here rather than pulled as a Maven artifact. Do not put the
+project's SPDX header on these files: they are not ours and stay under their own licence.
+
+## What was taken
+
+  * `multiplatform-markdown-renderer/src/commonMain/kotlin` -- the renderer
+  * `multiplatform-markdown-renderer-m3/src/commonMain/kotlin` -- the Material 3 bindings
+
+Nothing else: the Coil image loaders, the Material 2 bindings and the syntax-highlighting module
+are not used here, and neither are the js/wasm/native source sets.
+
+## What was changed
+
+One file. `utils/MarkdownLogger.kt` declares `internal expect fun platformLog` upstream, with an
+`actual` per platform; `expect`/`actual` needs the Kotlin Multiplatform plugin, and this is a
+plain Android module, so the Android implementation is inlined there and the androidMain file is
+not copied. The change is marked in place.
+
+## Why it is vendored
+
+The published artifacts are built with a newer Kotlin than AGP's built-in Kotlin plugin provides,
+and a compiler will not read metadata from a newer one -- which pinned us to the last release
+built with a matching Kotlin (0.38.1). As source it simply compiles with whatever Kotlin the
+build has, so the version we track is a choice rather than a constraint.
+
+## Updating
+
+Replace the two directories above from a fresh tag, re-apply the MarkdownLogger change, and build.
diff --git a/app/src/main/vendor/com/mikepenz/markdown/annotator/AnnotatedStringKtx.kt b/app/src/main/vendor/com/mikepenz/markdown/annotator/AnnotatedStringKtx.kt
new file mode 100644
index 000000000..3c13ee4d2
--- /dev/null
+++ b/app/src/main/vendor/com/mikepenz/markdown/annotator/AnnotatedStringKtx.kt
@@ -0,0 +1,375 @@
+package com.mikepenz.markdown.annotator
+
+import androidx.compose.foundation.text.appendInlineContent
+import androidx.compose.ui.text.AnnotatedString
+import androidx.compose.ui.text.LinkAnnotation
+import androidx.compose.ui.text.LinkInteractionListener
+import androidx.compose.ui.text.SpanStyle
+import androidx.compose.ui.text.TextLinkStyles
+import androidx.compose.ui.text.TextStyle
+import androidx.compose.ui.text.buildAnnotatedString
+import androidx.compose.ui.text.font.FontStyle
+import androidx.compose.ui.text.font.FontWeight
+import androidx.compose.ui.text.style.TextDecoration
+import androidx.compose.ui.text.withLink
+import com.mikepenz.markdown.model.MarkdownAnnotator
+import com.mikepenz.markdown.model.ReferenceLinkHandler
+import com.mikepenz.markdown.model.markdownAnnotator
+import com.mikepenz.markdown.utils.MARKDOWN_TAG_IMAGE_URL
+import com.mikepenz.markdown.utils.getUnescapedTextInNode
+import com.mikepenz.markdown.utils.innerList
+import com.mikepenz.markdown.utils.mapAutoLinkToType
+import com.mikepenz.markdown.utils.resolveImageLink
+import org.intellij.markdown.MarkdownElementTypes
+import org.intellij.markdown.MarkdownTokenTypes
+import org.intellij.markdown.ast.ASTNode
+import org.intellij.markdown.ast.findChildOfType
+import org.intellij.markdown.ast.getTextInNode
+import org.intellij.markdown.flavours.MarkdownFlavourDescriptor
+import org.intellij.markdown.flavours.gfm.GFMElementTypes
+import org.intellij.markdown.flavours.gfm.GFMFlavourDescriptor
+import org.intellij.markdown.flavours.gfm.GFMTokenTypes
+import org.intellij.markdown.parser.MarkdownParser
+
+/**
+ * Extension function to build an `AnnotatedString` from a Markdown string.
+ * This function will parse the Markdown content and apply the given styles to the text.
+ *
+ * It only supports TEXT and PARAGRAPH nodes.
+ *
+ * @param style The base text style to apply.
+ * @param linkTextSpanStyle The style to apply to link text.
+ * @param codeSpanStyle The style to apply to code spans.
+ * @param flavour The Markdown flavour descriptor to use (default is GFM).
+ * @param annotator An optional annotator for additional processing.
+ * @return The constructed `AnnotatedString`.
+ */
+@Deprecated(
+    message = "This function is deprecated. Use the new `annotatorSettings` function to create a settings object.",
+    replaceWith = ReplaceWith("buildMarkdownAnnotatedString(style, annotatorSettings, flavour)")
+)
+fun String.buildMarkdownAnnotatedString(
+    style: TextStyle,
+    linkTextSpanStyle: SpanStyle = style.toSpanStyle(),
+    codeSpanStyle: SpanStyle = style.toSpanStyle(),
+    flavour: MarkdownFlavourDescriptor = GFMFlavourDescriptor(),
+    annotator: MarkdownAnnotator = markdownAnnotator(),
+    referenceLinkHandler: ReferenceLinkHandler? = null,
+    linkInteractionListener: LinkInteractionListener? = null,
+) = buildMarkdownAnnotatedString(
+    style = style,
+    annotatorSettings = DefaultAnnotatorSettings(
+        linkTextSpanStyle = TextLinkStyles(style = linkTextSpanStyle),
+        codeSpanStyle = codeSpanStyle,
+        annotator = annotator,
+        referenceLinkHandler = referenceLinkHandler,
+        linkInteractionListener = linkInteractionListener
+    ),
+    flavour = flavour
+)
+
+/**
+ * Extension function to build an `AnnotatedString` from a Markdown string.
+ * This function will parse the Markdown content and apply the given styles to the text.
+ *
+ * It only supports TEXT and PARAGRAPH nodes.
+ *
+ * @param style The base text style to apply.
+ * @param flavour The Markdown flavour descriptor to use (default is GFM).
+ * @param annotatorSettings Settings object to adjust different behavior of this annotated string.
+ * @return The constructed `AnnotatedString`.
+ */
+fun String.buildMarkdownAnnotatedString(
+    style: TextStyle,
+    annotatorSettings: AnnotatorSettings,
+    flavour: MarkdownFlavourDescriptor = GFMFlavourDescriptor(),
+): AnnotatedString {
+    val content = this
+    val parsedTree = MarkdownParser(flavour).buildMarkdownTreeFromString(content)
+    val textNode = parsedTree.children.firstOrNull { node ->
+        node.type == MarkdownTokenTypes.TEXT || node.type == MarkdownElementTypes.PARAGRAPH
+    }
+    if (textNode == null) return buildAnnotatedString { }
+    return content.buildMarkdownAnnotatedString(
+        textNode = textNode,
+        style = style,
+        annotatorSettings = annotatorSettings
+    )
+}
+
+/**
+ * Extension function to build an `AnnotatedString` from a Markdown string.
+ * This function will parse the Markdown content and apply the given styles to the text.
+ *
+ * It only supports TEXT and PARAGRAPH nodes.
+ *
+ * @param textNode The AST node representing the text.
+ * @param style The base text style to apply.
+ * @param annotatorSettings Settings object to adjust different behavior of this annotated string.
+ * @return The constructed `AnnotatedString`.
+ */
+fun String.buildMarkdownAnnotatedString(
+    textNode: ASTNode,
+    style: TextStyle,
+    annotatorSettings: AnnotatorSettings,
+): AnnotatedString = buildAnnotatedString {
+    pushStyle(style.toSpanStyle())
+    buildMarkdownAnnotatedString(this@buildMarkdownAnnotatedString, textNode, annotatorSettings)
+    pop()
+}
+
+/**
+ * Appends a Markdown link to the `AnnotatedString.Builder`.
+ *
+ * @param content The content string.
+ * @param node The AST node representing the link.
+ * @param annotatorSettings Settings object to adjust different behavior of this annotated string.
+ */
+fun AnnotatedString.Builder.appendMarkdownLink(
+    content: String,
+    node: ASTNode,
+    annotatorSettings: AnnotatorSettings,
+) {
+    val linkText = node.findChildOfType(MarkdownElementTypes.LINK_TEXT)?.children?.innerList()
+    if (linkText == null) {
+        append(node.getUnescapedTextInNode(content))
+        return
+    }
+    val text = linkText.firstOrNull()?.getUnescapedTextInNode(content)
+    val destination = node.findChildOfType(MarkdownElementTypes.LINK_DESTINATION)?.getUnescapedTextInNode(content)
+    val linkLabel = node.findChildOfType(MarkdownElementTypes.LINK_LABEL)?.getUnescapedTextInNode(content)
+    val annotation = destination ?: linkLabel
+
+    if (annotation != null) {
+        if (text != null) annotatorSettings.referenceLinkHandler?.store(text, annotation)
+        withLink(LinkAnnotation.Url(annotation, annotatorSettings.linkTextSpanStyle, annotatorSettings.linkInteractionListener)) {
+            buildMarkdownAnnotatedString(content, linkText.mapAutoLinkToType(), annotatorSettings)
+        }
+    } else {
+        buildMarkdownAnnotatedString(content, linkText, annotatorSettings)
+    }
+}
+
+/**
+ * Appends a Markdown reference to the `AnnotatedString.Builder`.
+ *
+ * @param content The content string.
+ * @param node The AST node representing the link.
+ * @param annotatorSettings Settings object to adjust different behavior of this annotated string.
+ */
+fun AnnotatedString.Builder.appendMarkdownReference(
+    content: String,
+    node: ASTNode,
+    annotatorSettings: AnnotatorSettings,
+) {
+    val full = node.type == MarkdownElementTypes.FULL_REFERENCE_LINK
+    val labelNode = node.findChildOfType(MarkdownElementTypes.LINK_LABEL)
+    val linkText = if (full) {
+        node.findChildOfType(MarkdownElementTypes.LINK_TEXT)?.children?.innerList()
+    } else {
+        labelNode?.children?.innerList()
+    }
+
+    if (linkText == null || labelNode == null) {
+        append(node.getUnescapedTextInNode(content))
+        return
+    }
+
+    val label = labelNode.getUnescapedTextInNode(content)
+    val url = annotatorSettings.referenceLinkHandler?.find(label)?.takeIf { it.isNotEmpty() }
+
+    if (url != null) {
+        withLink(LinkAnnotation.Url(url, annotatorSettings.linkTextSpanStyle, annotatorSettings.linkInteractionListener)) {
+            buildMarkdownAnnotatedString(content, linkText.mapAutoLinkToType(), annotatorSettings)
+        }
+    } else {
+        // if no reference is found, reference links are rendered as their individual components
+        val linkText = node.findChildOfType(MarkdownElementTypes.LINK_TEXT)
+        if (linkText != null) {
+            buildMarkdownAnnotatedString(content, linkText, annotatorSettings)
+        }
+        buildMarkdownAnnotatedString(content, labelNode, annotatorSettings)
+    }
+}
+
+/**
+ * Appends an auto-detected link to the `AnnotatedString.Builder`.
+ *
+ * @param content The content string.
+ * @param node The AST node representing the auto link.
+ * @param annotatorSettings The style to apply to the link text.
+ */
+fun AnnotatedString.Builder.appendAutoLink(
+    content: String,
+    node: ASTNode,
+    annotatorSettings: AnnotatorSettings,
+) {
+    val targetNode = node.children.firstOrNull {
+        it.type.name == MarkdownElementTypes.AUTOLINK.name
+    } ?: node
+    val destination = targetNode.getUnescapedTextInNode(content)
+
+    annotatorSettings.referenceLinkHandler?.store(destination, destination)
+    withLink(LinkAnnotation.Url(destination, annotatorSettings.linkTextSpanStyle, linkInteractionListener = annotatorSettings.linkInteractionListener)) {
+        append(destination)
+    }
+}
+
+/**
+ * Appends an email auto-link without its surrounding angle brackets.
+ */
+private fun AnnotatedString.Builder.appendEmailAutoLink(
+    content: String,
+    node: ASTNode,
+    annotatorSettings: AnnotatorSettings,
+) {
+    val email = node.getUnescapedTextInNode(content)
+    val destination = "mailto:$email"
+
+    annotatorSettings.referenceLinkHandler?.store(email, destination)
+    withLink(LinkAnnotation.Url(destination, annotatorSettings.linkTextSpanStyle, linkInteractionListener = annotatorSettings.linkInteractionListener)) {
+        append(email)
+    }
+}
+
+/**
+ * Builds an [AnnotatedString] with the contents of the given Markdown [ASTNode] node.
+ *
+ * This method automatically constructs the string with child components like:
+ * - Paragraph
+ * - Image
+ * - Strong
+ * - ...
+ */
+fun AnnotatedString.Builder.buildMarkdownAnnotatedString(
+    content: String,
+    node: ASTNode,
+    annotatorSettings: AnnotatorSettings,
+) = buildMarkdownAnnotatedString(
+    content = content,
+    children = node.children,
+    annotatorSettings = annotatorSettings,
+)
+
+/**
+ * Builds an [AnnotatedString] with the contents of the given Markdown [ASTNode] node.
+ *
+ * This method automatically constructs the string with child components like:
+ * - Paragraph
+ * - Image
+ * - Strong
+ * - ...
+ */
+fun AnnotatedString.Builder.buildMarkdownAnnotatedString(
+    content: String,
+    children: List<ASTNode>,
+    annotatorSettings: AnnotatorSettings,
+) {
+    val annotate = annotatorSettings.annotator.annotate
+    val eolAsNewLine = annotatorSettings.annotator.config.eolAsNewLine
+    var skipIfNext: Any? = null
+    children.forEachIndexed { index, child ->
+        if (skipIfNext == null || skipIfNext != child.type) {
+            if (annotate == null || !annotate(content, child)) {
+                val parentType = child.parent?.type
+
+                when (child.type) {
+                    // Element types
+                    MarkdownElementTypes.PARAGRAPH -> buildMarkdownAnnotatedString(content = content, node = child, annotatorSettings = annotatorSettings)
+
+                    MarkdownElementTypes.IMAGE -> child.resolveImageLink(content, annotatorSettings.referenceLinkHandler)?.let { imageUrl ->
+                        appendInlineContent("${MARKDOWN_TAG_IMAGE_URL}_$imageUrl", imageUrl)
+                    }
+
+                    MarkdownElementTypes.EMPH -> {
+                        pushStyle(SpanStyle(fontStyle = FontStyle.Italic))
+                        buildMarkdownAnnotatedString(content, child, annotatorSettings)
+                        pop()
+                    }
+
+                    MarkdownElementTypes.STRONG -> {
+                        pushStyle(SpanStyle(fontWeight = FontWeight.Bold))
+                        buildMarkdownAnnotatedString(content, child, annotatorSettings)
+                        pop()
+                    }
+
+                    GFMElementTypes.STRIKETHROUGH -> {
+                        pushStyle(SpanStyle(textDecoration = TextDecoration.LineThrough))
+                        buildMarkdownAnnotatedString(content, child, annotatorSettings)
+                        pop()
+                    }
+
+                    MarkdownElementTypes.CODE_SPAN -> {
+                        pushStyle(annotatorSettings.codeSpanStyle)
+                        append(' ')
+                        buildMarkdownAnnotatedString(content, child.children.innerList(), annotatorSettings)
+                        append(' ')
+                        pop()
+                    }
+
+                    MarkdownElementTypes.AUTOLINK -> appendAutoLink(content, child, annotatorSettings)
+                    MarkdownElementTypes.INLINE_LINK -> appendMarkdownLink(content, child, annotatorSettings)
+                    MarkdownElementTypes.SHORT_REFERENCE_LINK -> appendMarkdownReference(content, child, annotatorSettings)
+                    MarkdownElementTypes.FULL_REFERENCE_LINK -> appendMarkdownReference(content, child, annotatorSettings)
+
+                    // GFM math ($...$ and $$...$$). We don't typeset LaTeX, but the raw source
+                    // must survive: without these branches the whole span (delimiters and the
+                    // content between them) falls through to `else` and is silently dropped, so
+                    // e.g. "Pay bills $100 and $50" renders as "Pay bills 50".
+                    GFMElementTypes.INLINE_MATH, GFMElementTypes.BLOCK_MATH ->
+                        append(child.getTextInNode(content))
+
+                    // Token Types
+                    MarkdownTokenTypes.TEXT -> append(child.getUnescapedTextInNode(content))
+                    MarkdownTokenTypes.EMAIL_AUTOLINK -> if (parentType == MarkdownElementTypes.LINK_TEXT) {
+                        append(child.getUnescapedTextInNode(content))
+                    } else appendEmailAutoLink(content, child, annotatorSettings)
+
+                    GFMTokenTypes.GFM_AUTOLINK -> if (parentType == MarkdownElementTypes.LINK_TEXT) {
+                        append(child.getUnescapedTextInNode(content))
+                    } else appendAutoLink(content, child, annotatorSettings)
+
+                    GFMTokenTypes.DOLLAR -> append('$')
+
+                    MarkdownTokenTypes.SINGLE_QUOTE -> append('\'')
+                    MarkdownTokenTypes.DOUBLE_QUOTE -> append('\"')
+                    MarkdownTokenTypes.LPAREN -> append('(')
+                    MarkdownTokenTypes.RPAREN -> append(')')
+                    MarkdownTokenTypes.LBRACKET -> append('[')
+                    MarkdownTokenTypes.RBRACKET -> append(']')
+                    // Email auto-links are parsed as sibling LT, EMAIL_AUTOLINK, and GT tokens.
+                    MarkdownTokenTypes.LT -> if (children.getOrNull(index + 1)?.type != MarkdownTokenTypes.EMAIL_AUTOLINK) append('<')
+                    MarkdownTokenTypes.GT -> if (children.getOrNull(index - 1)?.type != MarkdownTokenTypes.EMAIL_AUTOLINK) append('>')
+                    MarkdownTokenTypes.COLON -> append(':')
+                    MarkdownTokenTypes.EXCLAMATION_MARK -> append('!')
+                    MarkdownTokenTypes.BACKTICK -> append('`')
+                    MarkdownTokenTypes.HARD_LINE_BREAK -> {
+                        append('\n')
+                        skipIfNext = MarkdownTokenTypes.EOL
+                    }
+
+                    MarkdownTokenTypes.EMPH -> {
+                        if (parentType != MarkdownElementTypes.EMPH && parentType != MarkdownElementTypes.STRONG) {
+                            append(child.getTextInNode(content))
+                        }
+                    }
+
+                    MarkdownTokenTypes.EOL -> if (eolAsNewLine) append('\n') else append(' ')
+                    MarkdownTokenTypes.WHITE_SPACE -> if (length > 0) append(' ')
+                    MarkdownTokenTypes.BLOCK_QUOTE -> {
+                        skipIfNext = MarkdownTokenTypes.WHITE_SPACE
+                    }
+
+                    else -> {
+                        // `~` is not a specific `MarkdownTokenTypes`
+                        if (child.type.name == "~" && parentType != GFMElementTypes.STRIKETHROUGH) {
+                            append(child.getTextInNode(content))
+                        }
+                    }
+                }
+            }
+        } else {
+            skipIfNext = null
+        }
+    }
+}
diff --git a/app/src/main/vendor/com/mikepenz/markdown/annotator/AnnotatorSettings.kt b/app/src/main/vendor/com/mikepenz/markdown/annotator/AnnotatorSettings.kt
new file mode 100644
index 000000000..4912d09ac
--- /dev/null
+++ b/app/src/main/vendor/com/mikepenz/markdown/annotator/AnnotatorSettings.kt
@@ -0,0 +1,71 @@
+package com.mikepenz.markdown.annotator
+
+import androidx.compose.runtime.Composable
+import androidx.compose.runtime.Immutable
+import androidx.compose.runtime.Stable
+import androidx.compose.ui.platform.LocalUriHandler
+import androidx.compose.ui.platform.UriHandler
+import androidx.compose.ui.text.LinkAnnotation
+import androidx.compose.ui.text.LinkInteractionListener
+import androidx.compose.ui.text.SpanStyle
+import androidx.compose.ui.text.TextLinkStyles
+import com.mikepenz.markdown.compose.LocalMarkdownAnnotator
+import com.mikepenz.markdown.compose.LocalMarkdownTypography
+import com.mikepenz.markdown.compose.LocalReferenceLinkHandler
+import com.mikepenz.markdown.model.MarkdownAnnotator
+import com.mikepenz.markdown.model.ReferenceLinkHandler
+import com.mikepenz.markdown.utils.codeSpanStyle
+
+@Stable
+interface AnnotatorSettings {
+    /** Represents the [TextLinkStyles] applied onto links within this annotated string */
+    val linkTextSpanStyle: TextLinkStyles
+
+    /** Represents the [SpanStyle] applied onto code inline blocks within this annotated string */
+    val codeSpanStyle: SpanStyle
+
+    /** Provides custom interception logic for building this annotated string */
+    val annotator: MarkdownAnnotator
+
+    /** Represents the [ReferenceLinkHandler] used to store and find links when clicks on links occur. */
+    val referenceLinkHandler: ReferenceLinkHandler?
+
+    /** Represents the [LinkInteractionListener] used for links in this annotated string */
+    val linkInteractionListener: LinkInteractionListener?
+}
+
+@Immutable
+class DefaultAnnotatorSettings(
+    override val linkTextSpanStyle: TextLinkStyles,
+    override val codeSpanStyle: SpanStyle,
+    override val annotator: MarkdownAnnotator,
+    override val referenceLinkHandler: ReferenceLinkHandler? = null,
+    override val linkInteractionListener: LinkInteractionListener? = null,
+) : AnnotatorSettings
+
+@Composable
+fun annotatorSettings(
+    linkTextSpanStyle: TextLinkStyles = LocalMarkdownTypography.current.textLink,
+    codeSpanStyle: SpanStyle = LocalMarkdownTypography.current.codeSpanStyle,
+    annotator: MarkdownAnnotator = LocalMarkdownAnnotator.current,
+    referenceLinkHandler: ReferenceLinkHandler? = LocalReferenceLinkHandler.current,
+    uriHandler: UriHandler = LocalUriHandler.current,
+    linkInteractionListener: LinkInteractionListener? = LinkInteractionListener { link ->
+        val annotationUrl = (link as? LinkAnnotation.Url)?.url
+        if (annotationUrl != null) {
+            val foundReference = referenceLinkHandler?.find(annotationUrl)?.takeIf { it.isNotEmpty() } ?: annotationUrl
+            // wait for finger up to navigate to the link
+            try {
+                uriHandler.openUri(foundReference)
+            } catch (t: Throwable) {
+                println("Could not open the provided url: $foundReference // ${t.message}")
+            }
+        }
+    },
+): AnnotatorSettings = DefaultAnnotatorSettings(
+    linkTextSpanStyle = linkTextSpanStyle,
+    codeSpanStyle = codeSpanStyle,
+    annotator = annotator,
+    referenceLinkHandler = referenceLinkHandler,
+    linkInteractionListener = linkInteractionListener,
+)
\ No newline at end of file
diff --git a/app/src/main/vendor/com/mikepenz/markdown/compose/ComposeLocal.kt b/app/src/main/vendor/com/mikepenz/markdown/compose/ComposeLocal.kt
new file mode 100644
index 000000000..7e61eb743
--- /dev/null
+++ b/app/src/main/vendor/com/mikepenz/markdown/compose/ComposeLocal.kt
@@ -0,0 +1,133 @@
+package com.mikepenz.markdown.compose
+
+import androidx.compose.runtime.compositionLocalOf
+import androidx.compose.runtime.staticCompositionLocalOf
+import com.mikepenz.markdown.compose.components.MarkdownComponents
+import com.mikepenz.markdown.compose.components.markdownComponents
+import com.mikepenz.markdown.model.BulletHandler
+import com.mikepenz.markdown.model.DefaultMarkdownAnnotator
+import com.mikepenz.markdown.model.DefaultMarkdownAnnotatorConfig
+import com.mikepenz.markdown.model.DefaultMarkdownExtendedSpans
+import com.mikepenz.markdown.model.DefaultMarkdownInlineContent
+import com.mikepenz.markdown.model.ImageTransformer
+import com.mikepenz.markdown.model.ImageWidth
+import com.mikepenz.markdown.model.MarkdownA11yLabels
+import com.mikepenz.markdown.model.MarkdownAlertIcons
+import com.mikepenz.markdown.model.MarkdownAnimations
+import com.mikepenz.markdown.model.MarkdownAnnotator
+import com.mikepenz.markdown.model.MarkdownColors
+import com.mikepenz.markdown.model.MarkdownDimens
+import com.mikepenz.markdown.model.MarkdownExtendedSpans
+import com.mikepenz.markdown.model.MarkdownInlineContent
+import com.mikepenz.markdown.model.MarkdownPadding
+import com.mikepenz.markdown.model.MarkdownTypography
+import com.mikepenz.markdown.model.ReferenceLinkHandler
+import com.mikepenz.markdown.model.markdownAlertIcons
+
+/**
+ * The CompositionLocal to provide functionality related to transforming the bullet of an ordered list
+ */
+val LocalBulletListHandler = staticCompositionLocalOf {
+    return@staticCompositionLocalOf BulletHandler { _, _, _, _, _ -> "• " }
+}
+
+/**
+ * The CompositionLocal to provide functionality related to transforming the bullet of an ordered list
+ */
+val LocalOrderedListHandler = staticCompositionLocalOf {
+    return@staticCompositionLocalOf BulletHandler { _, _, index, listNumber, _ -> "${listNumber + index}. " }
+}
+
+/**
+ * Local [ReferenceLinkHandler] provider
+ */
+val LocalReferenceLinkHandler = staticCompositionLocalOf<ReferenceLinkHandler> {
+    error("CompositionLocal ReferenceLinkHandler not present")
+}
+
+/**
+ * Local [MarkdownColors] provider
+ */
+val LocalMarkdownColors = compositionLocalOf<MarkdownColors> {
+    error("No local MarkdownColors")
+}
+
+/**
+ * Local [MarkdownTypography] provider
+ */
+val LocalMarkdownTypography = compositionLocalOf<MarkdownTypography> {
+    error("No local MarkdownTypography")
+}
+
+/**
+ * Local [MarkdownPadding] provider
+ */
+val LocalMarkdownPadding = staticCompositionLocalOf<MarkdownPadding> {
+    error("No local Padding")
+}
+
+/**
+ * Local [MarkdownDimens] provider
+ */
+val LocalMarkdownDimens = compositionLocalOf<MarkdownDimens> {
+    error("No local MarkdownDimens")
+}
+
+/**
+ * Local [ImageTransformer] provider
+ */
+val LocalImageTransformer = staticCompositionLocalOf<ImageTransformer> {
+    error("No local ImageTransformer")
+}
+
+/**
+ * Local [MarkdownInlineContent] provider
+ */
+val LocalMarkdownInlineContent = staticCompositionLocalOf<MarkdownInlineContent> {
+    return@staticCompositionLocalOf DefaultMarkdownInlineContent(mapOf())
+}
+
+/**
+ * Local [ImageWidth] provider
+ */
+val LocalImageWidth = staticCompositionLocalOf<ImageWidth> {
+    return@staticCompositionLocalOf ImageWidth.IMAGE_WIDTH
+}
+
+/**
+ * Local [MarkdownAnnotator] provider
+ */
+val LocalMarkdownAnnotator = compositionLocalOf<MarkdownAnnotator> {
+    return@compositionLocalOf DefaultMarkdownAnnotator(null, DefaultMarkdownAnnotatorConfig())
+}
+
+/**
+ * Local [MarkdownExtendedSpans] provider
+ */
+val LocalMarkdownExtendedSpans = compositionLocalOf<MarkdownExtendedSpans> {
+    return@compositionLocalOf DefaultMarkdownExtendedSpans(null)
+}
+
+/**
+ * Local [MarkdownComponents] provider
+ */
+val LocalMarkdownComponents = compositionLocalOf<MarkdownComponents> {
+    return@compositionLocalOf markdownComponents()
+}
+
+/**
+ * Local [MarkdownAnimations] provider
+ */
+val LocalMarkdownAnimations = compositionLocalOf<MarkdownAnimations> {
+    error("No local MarkdownAnimations")
+}
+
+/**
+ * Local [MarkdownA11yLabels] provider — override to localize accessibility labels.
+ */
+val LocalMarkdownA11yLabels = staticCompositionLocalOf { MarkdownA11yLabels() }
+
+/**
+ * Local [MarkdownAlertIcons] provider — override to swap the icons rendered next to alert titles.
+ */
+val LocalMarkdownAlertIcons = staticCompositionLocalOf<MarkdownAlertIcons> { markdownAlertIcons() }
diff --git a/app/src/main/vendor/com/mikepenz/markdown/compose/LazyMarkdown.kt b/app/src/main/vendor/com/mikepenz/markdown/compose/LazyMarkdown.kt
new file mode 100644
index 000000000..0a820cbf8
--- /dev/null
+++ b/app/src/main/vendor/com/mikepenz/markdown/compose/LazyMarkdown.kt
@@ -0,0 +1,79 @@
+package com.mikepenz.markdown.compose
+
+import androidx.compose.foundation.layout.PaddingValues
+import androidx.compose.foundation.lazy.LazyColumn
+import androidx.compose.foundation.lazy.items
+import androidx.compose.runtime.Composable
+import androidx.compose.runtime.remember
+import androidx.compose.ui.Modifier
+import androidx.compose.ui.unit.dp
+import com.mikepenz.markdown.compose.components.MarkdownComponents
+import com.mikepenz.markdown.model.State
+import com.mikepenz.markdown.model.StreamingMarkdownState
+
+/**
+ * Renders the parsed markdown content in a [LazyColumn].
+ *
+ * This function uses Compose's [LazyColumn] to implement virtualization, which means
+ * only the visible portions of the document are rendered, improving performance for
+ * large documents.
+ *
+ * @param state The success markdown state.
+ * @param components The MarkdownComponents instance containing the components to use.
+ * @param modifier The modifier to be applied to the container.
+ * @param contentPadding The padding to be applied to the scrolling container.
+ */
+@Composable
+fun LazyMarkdownSuccess(
+    state: State.Success,
+    components: MarkdownComponents,
+    modifier: Modifier = Modifier,
+    contentPadding: PaddingValues = PaddingValues(0.dp),
+) {
+    // Extract nodes for rendering
+    val nodes = remember(state.node) { state.node.children }
+
+    LazyColumn(
+        modifier = modifier,
+        contentPadding = contentPadding,
+    ) {
+        items(
+            items = nodes,
+            // Use the node's start offset as a key for stable item identity
+            key = { node -> node.startOffset },
+            // contentType lets the lazy layout reuse compositions across items
+            // of the same markdown element type (e.g. paragraph after paragraph).
+            contentType = { node -> node.type }
+        ) { node ->
+            MarkdownElement(node, components, state.content)
+        }
+    }
+}
+
+/**
+ * Renders the parsed streaming markdown content in a [LazyColumn].
+ */
+@Composable
+fun LazyMarkdownSuccess(
+    streamingMarkdownState: StreamingMarkdownState,
+    snapshot: StreamingMarkdownState.Snapshot,
+    components: MarkdownComponents,
+    modifier: Modifier = Modifier,
+    contentPadding: PaddingValues = PaddingValues(0.dp),
+) {
+    val content = streamingMarkdownState.content
+    val nodes = remember(snapshot) { snapshot.stableAst + snapshot.unstableAstTail }
+
+    LazyColumn(
+        modifier = modifier,
+        contentPadding = contentPadding,
+    ) {
+        items(
+            items = nodes,
+            key = { node -> node.startOffset },
+            contentType = { node -> node.type }
+        ) { node ->
+            MarkdownElementInternal(node, components, content)
+        }
+    }
+}
diff --git a/app/src/main/vendor/com/mikepenz/markdown/compose/Markdown.kt b/app/src/main/vendor/com/mikepenz/markdown/compose/Markdown.kt
new file mode 100644
index 000000000..88d1c0bbe
--- /dev/null
+++ b/app/src/main/vendor/com/mikepenz/markdown/compose/Markdown.kt
@@ -0,0 +1,423 @@
+package com.mikepenz.markdown.compose
+
+import androidx.compose.foundation.layout.Box
+import androidx.compose.foundation.layout.Column
+import androidx.compose.foundation.layout.fillMaxSize
+import androidx.compose.runtime.Composable
+import androidx.compose.runtime.CompositionLocalProvider
+import androidx.compose.runtime.collectAsState
+import androidx.compose.runtime.getValue
+import androidx.compose.ui.Modifier
+import androidx.compose.ui.platform.LocalInspectionMode
+import com.mikepenz.markdown.compose.components.MarkdownComponents
+import com.mikepenz.markdown.compose.components.markdownComponents
+import com.mikepenz.markdown.model.ImageTransformer
+import com.mikepenz.markdown.model.MarkdownAnimations
+import com.mikepenz.markdown.model.MarkdownAnnotator
+import com.mikepenz.markdown.model.MarkdownColors
+import com.mikepenz.markdown.model.MarkdownDimens
+import com.mikepenz.markdown.model.MarkdownExtendedSpans
+import com.mikepenz.markdown.model.MarkdownInlineContent
+import com.mikepenz.markdown.model.MarkdownPadding
+import com.mikepenz.markdown.model.MarkdownState
+import com.mikepenz.markdown.model.MarkdownTypography
+import com.mikepenz.markdown.model.NoOpImageTransformerImpl
+import com.mikepenz.markdown.model.ReferenceLinkHandler
+import com.mikepenz.markdown.model.ReferenceLinkHandlerImpl
+import com.mikepenz.markdown.model.State
+import com.mikepenz.markdown.model.StreamingMarkdownState
+import com.mikepenz.markdown.model.markdownAnimations
+import com.mikepenz.markdown.model.markdownAnnotator
+import com.mikepenz.markdown.model.markdownDimens
+import com.mikepenz.markdown.model.markdownExtendedSpans
+import com.mikepenz.markdown.model.markdownInlineContent
+import com.mikepenz.markdown.model.markdownPadding
+import com.mikepenz.markdown.model.rememberMarkdownState
+import com.mikepenz.markdown.utils.LogCompositions
+import org.intellij.markdown.flavours.MarkdownFlavourDescriptor
+import org.intellij.markdown.flavours.gfm.GFMFlavourDescriptor
+import org.intellij.markdown.parser.MarkdownParser
+
+
+/**
+ * Renders the provided markdown content string using Jetpack Compose.
+ *
+ * This is the primary entry point for rendering markdown content in your application.
+ * It handles parsing the markdown string, applying styling, and rendering the content
+ * with appropriate components.
+ *
+ * The rendering process follows these steps:
+ * 1. Parse the markdown content using the provided parser
+ * 2. Create a state object to manage the rendering process
+ * 3. Apply styling and customization options
+ * 4. Render the content using the appropriate components
+ *
+ * Example usage:
+ * ```
+ * Markdown(
+ *     content = "# Hello World\n\nThis is a **bold** statement.",
+ *     colors = markdownColor(),
+ *     typography = markdownTypography()
+ * )
+ * ```
+ *
+ * @param content The markdown content string to be rendered.
+ * @param colors The color scheme to be used for rendering different markdown elements.
+ * @param typography The typography settings to be used for text rendering.
+ * @param modifier The modifier to be applied to the container. Defaults to [Modifier.fillMaxSize].
+ * @param padding The padding configuration to be applied to different markdown elements.
+ * @param dimens The dimension settings for spacing and sizing of markdown elements.
+ * @param flavour The markdown flavor descriptor for parsing. By default uses GitHub Flavored Markdown (GFM).
+ * @param parser The parser instance to be used for parsing the markdown. By default creates a new parser with the provided flavor.
+ * @param imageTransformer The transformer for handling and loading images within markdown content.
+ * @param annotator The annotator for adding custom annotations to the rendered content.
+ * @param extendedSpans The configuration for extended text spans beyond standard markdown.
+ * @param inlineContent The configuration for inline custom content within markdown.
+ * @param components The custom components to be used for rendering different markdown elements.
+ * @param referenceLinkHandler The handler for resolving reference-style links in markdown.
+ * @param animations The animation configurations for interactive elements.
+ * @param lookupLinks Whether to lookup and resolve links in the parsed markdown tree. Defaults to true.
+ * @param retainState Whether to retain the previous rendered content when the markdown content changes,
+ *                    avoiding the display of a loading state during updates. Defaults to false.
+ *                    When true, the previous content remains visible while new content is being parsed.
+ * @param immediate Whether to parse the content immediately in a blocking manner. Defaults to false
+ *                  (true in inspection mode). WARNING: Setting this to true is not advised as it will
+ *                  block the composition and may cause UI performance issues.
+ * @param loading A composable function to be displayed while the content is being parsed and prepared.
+ * @param success A composable function to be displayed with the successfully parsed markdown content.
+ *                It receives the state, components, and modifier as parameters.
+ *                By default, this renders the content in a [Column].
+ * @param error A composable function to be displayed in case of parsing errors.
+ *              This is only triggered if assertions are enabled on the parser.
+ */
+@Composable
+fun Markdown(
+    content: String,
+    colors: MarkdownColors,
+    typography: MarkdownTypography,
+    modifier: Modifier = Modifier.fillMaxSize(),
+    padding: MarkdownPadding = markdownPadding(),
+    dimens: MarkdownDimens = markdownDimens(),
+    flavour: MarkdownFlavourDescriptor = GFMFlavourDescriptor(),
+    parser: MarkdownParser = MarkdownParser(flavour),
+    imageTransformer: ImageTransformer = NoOpImageTransformerImpl(),
+    annotator: MarkdownAnnotator = markdownAnnotator(),
+    extendedSpans: MarkdownExtendedSpans = markdownExtendedSpans(),
+    inlineContent: MarkdownInlineContent = markdownInlineContent(),
+    components: MarkdownComponents = markdownComponents(),
+    animations: MarkdownAnimations = markdownAnimations(),
+    referenceLinkHandler: ReferenceLinkHandler = ReferenceLinkHandlerImpl(),
+    lookupLinks: Boolean = true,
+    retainState: Boolean = false,
+    immediate: Boolean = LocalInspectionMode.current,
+    loading: @Composable (modifier: Modifier) -> Unit = { Box(modifier) },
+    success: @Composable (state: State.Success, components: MarkdownComponents, modifier: Modifier) -> Unit = { state, components, modifier ->
+        MarkdownSuccess(state = state, components = components, modifier = modifier)
+    },
+    error: @Composable (modifier: Modifier) -> Unit = { Box(modifier) },
+) {
+    val markdownState = rememberMarkdownState(
+        content = content,
+        lookupLinks = lookupLinks,
+        retainState = retainState,
+        flavour = flavour,
+        parser = parser,
+        referenceLinkHandler = referenceLinkHandler,
+        immediate = immediate,
+    )
+
+    Markdown(
+        markdownState = markdownState,
+        colors = colors,
+        typography = typography,
+        modifier = modifier,
+        padding = padding,
+        dimens = dimens,
+        imageTransformer = imageTransformer,
+        annotator = annotator,
+        extendedSpans = extendedSpans,
+        inlineContent = inlineContent,
+        components = components,
+        animations = animations,
+        loading = loading,
+        success = success,
+        error = error
+    )
+}
+
+/**
+ * Renders markdown content using a pre-created [MarkdownState] object.
+ *
+ * This overload is useful when you need more control over the state management
+ * of your markdown content, such as when you want to:
+ * - Pre-parse markdown content
+ * - Share the same state across multiple composables
+ * - Implement custom state handling logic
+ *
+ * The state object manages the parsing and preparation of the markdown content,
+ * while this function handles the rendering with appropriate styling and components.
+ *
+ * Example usage:
+ * ```
+ * val markdownState = rememberMarkdownState(content = "# Hello World")
+ *
+ * Markdown(
+ *     markdownState = markdownState,
+ *     colors = markdownColor(),
+ *     typography = markdownTypography()
+ * )
+ * ```
+ *
+ * @param markdownState A [MarkdownState] object that manages the parsing and state of the markdown content.
+ * @param colors The color scheme to be used for rendering different markdown elements.
+ * @param typography The typography settings to be used for text rendering.
+ * @param modifier The modifier to be applied to the container. Defaults to [Modifier.fillMaxSize].
+ * @param padding The padding configuration to be applied to different markdown elements.
+ * @param dimens The dimension settings for spacing and sizing of markdown elements.
+ * @param imageTransformer The transformer for handling and loading images within markdown content.
+ * @param annotator The annotator for adding custom annotations to the rendered content.
+ * @param extendedSpans The configuration for extended text spans beyond standard markdown.
+ * @param inlineContent The configuration for inline custom content within markdown.
+ * @param components The custom components to be used for rendering different markdown elements.
+ * @param animations The animation configurations for interactive elements.
+ * @param loading A composable function to be displayed while the content is being parsed and prepared.
+ * @param success A composable function to be displayed with the successfully parsed markdown content.
+ *                It receives the state, components, and modifier as parameters.
+ *                By default, this renders the content in a [Column].
+ * @param error A composable function to be displayed in case of parsing errors.
+ *              This is only triggered if assertions are enabled on the parser.
+ *
+ * @see rememberMarkdownState
+ */
+@Composable
+fun Markdown(
+    markdownState: MarkdownState,
+    colors: MarkdownColors,
+    typography: MarkdownTypography,
+    modifier: Modifier = Modifier.fillMaxSize(),
+    padding: MarkdownPadding = markdownPadding(),
+    dimens: MarkdownDimens = markdownDimens(),
+    imageTransformer: ImageTransformer = NoOpImageTransformerImpl(),
+    annotator: MarkdownAnnotator = markdownAnnotator(),
+    extendedSpans: MarkdownExtendedSpans = markdownExtendedSpans(),
+    inlineContent: MarkdownInlineContent = markdownInlineContent(),
+    components: MarkdownComponents = markdownComponents(),
+    animations: MarkdownAnimations = markdownAnimations(),
+    loading: @Composable (modifier: Modifier) -> Unit = { Box(modifier) },
+    success: @Composable (state: State.Success, components: MarkdownComponents, modifier: Modifier) -> Unit = { state, components, modifier ->
+        MarkdownSuccess(state = state, components = components, modifier = modifier)
+    },
+    error: @Composable (modifier: Modifier) -> Unit = { Box(modifier) },
+) {
+    val state by markdownState.state.collectAsState()
+    Markdown(
+        state = state,
+        colors = colors,
+        typography = typography,
+        modifier = modifier,
+        padding = padding,
+        dimens = dimens,
+        imageTransformer = imageTransformer,
+        annotator = annotator,
+        extendedSpans = extendedSpans,
+        inlineContent = inlineContent,
+        components = components,
+        animations = animations,
+        loading = loading,
+        success = success,
+        error = error
+    )
+}
+
+@Composable
+fun Markdown(
+    streamingMarkdownState: StreamingMarkdownState,
+    colors: MarkdownColors,
+    typography: MarkdownTypography,
+    modifier: Modifier = Modifier.fillMaxSize(),
+    padding: MarkdownPadding = markdownPadding(),
+    dimens: MarkdownDimens = markdownDimens(),
+    imageTransformer: ImageTransformer = NoOpImageTransformerImpl(),
+    annotator: MarkdownAnnotator = markdownAnnotator(),
+    extendedSpans: MarkdownExtendedSpans = markdownExtendedSpans(),
+    inlineContent: MarkdownInlineContent = markdownInlineContent(),
+    components: MarkdownComponents = markdownComponents(),
+    animations: MarkdownAnimations = markdownAnimations(),
+    success: @Composable (snapshot: StreamingMarkdownState.Snapshot, components: MarkdownComponents, modifier: Modifier) -> Unit = { snapshot, components, modifier ->
+        StreamingMarkdownSuccess(streamingMarkdownState = streamingMarkdownState, snapshot = snapshot, components = components, modifier = modifier)
+    },
+) {
+    val state by streamingMarkdownState.snapshot.collectAsState()
+
+    CompositionLocalProvider(
+        LocalReferenceLinkHandler provides streamingMarkdownState.referenceLinkHandler,
+        LocalMarkdownPadding provides padding,
+        LocalMarkdownDimens provides dimens,
+        LocalMarkdownColors provides colors,
+        LocalMarkdownTypography provides typography,
+        LocalImageTransformer provides imageTransformer,
+        LocalMarkdownAnnotator provides annotator,
+        LocalMarkdownExtendedSpans provides extendedSpans,
+        LocalMarkdownInlineContent provides inlineContent,
+        LocalMarkdownComponents provides components,
+        LocalMarkdownAnimations provides animations,
+    ) {
+        success(state, components, modifier)
+    }
+}
+
+
+/**
+ * Renders markdown content using a [State] object directly.
+ *
+ * This is the lowest-level overload of the Markdown composable, providing direct control
+ * over the rendering state. It's primarily used internally by the other overloads but
+ * can be useful for advanced use cases where you need to:
+ * - Implement custom state transitions
+ * - Handle specific loading/error states manually
+ * - Integrate with custom state management systems
+ *
+ * The function handles different states (Loading, Success, Error) and provides
+ * appropriate UI for each state.
+ *
+ * Example usage:
+ * ```
+ * val state: State = ... // Your custom state implementation
+ *
+ * Markdown(
+ *     state = state,
+ *     colors = markdownColor(),
+ *     typography = markdownTypography(),
+ *     loading = { LoadingIndicator() },
+ *     error = { ErrorMessage() }
+ * )
+ * ```
+ *
+ * @param state A [State] object representing the current state of the markdown content (loading, success, or error).
+ * @param colors The color scheme to be used for rendering different markdown elements.
+ * @param typography The typography settings to be used for text rendering.
+ * @param modifier The modifier to be applied to the container. Defaults to [Modifier.fillMaxSize].
+ * @param padding The padding configuration to be applied to different markdown elements.
+ * @param dimens The dimension settings for spacing and sizing of markdown elements.
+ * @param imageTransformer The transformer for handling and loading images within markdown content.
+ * @param annotator The annotator for adding custom annotations to the rendered content.
+ * @param extendedSpans The configuration for extended text spans beyond standard markdown.
+ * @param inlineContent The configuration for inline custom content within markdown.
+ * @param components The custom components to be used for rendering different markdown elements.
+ * @param animations The animation configurations for interactive elements.
+ * @param loading A composable function to be displayed when the state is [State.Loading].
+ * @param success A composable function to be displayed when the state is [State.Success].
+ *                It receives the state, components, and modifier as parameters.
+ *                By default, this renders the content in a [Column].
+ * @param error A composable function to be displayed when the state is [State.Error].
+ *
+ * @see State
+ * @see State.Loading
+ * @see State.Success
+ * @see State.Error
+ */
+@Composable
+fun Markdown(
+    state: State,
+    colors: MarkdownColors,
+    typography: MarkdownTypography,
+    modifier: Modifier = Modifier.fillMaxSize(),
+    padding: MarkdownPadding = markdownPadding(),
+    dimens: MarkdownDimens = markdownDimens(),
+    imageTransformer: ImageTransformer = NoOpImageTransformerImpl(),
+    annotator: MarkdownAnnotator = markdownAnnotator(),
+    extendedSpans: MarkdownExtendedSpans = markdownExtendedSpans(),
+    inlineContent: MarkdownInlineContent = markdownInlineContent(),
+    components: MarkdownComponents = markdownComponents(),
+    animations: MarkdownAnimations = markdownAnimations(),
+    loading: @Composable (modifier: Modifier) -> Unit = { Box(modifier) },
+    success: @Composable (state: State.Success, components: MarkdownComponents, modifier: Modifier) -> Unit = { state, components, modifier ->
+        MarkdownSuccess(state = state, components = components, modifier = modifier)
+    },
+    error: @Composable (modifier: Modifier) -> Unit = { Box(modifier) },
+) {
+    LogCompositions { "Markdown" }
+
+    CompositionLocalProvider(
+        LocalReferenceLinkHandler provides state.referenceLinkHandler,
+        LocalMarkdownPadding provides padding,
+        LocalMarkdownDimens provides dimens,
+        LocalMarkdownColors provides colors,
+        LocalMarkdownTypography provides typography,
+        LocalImageTransformer provides imageTransformer,
+        LocalMarkdownAnnotator provides annotator,
+        LocalMarkdownExtendedSpans provides extendedSpans,
+        LocalMarkdownInlineContent provides inlineContent,
+        LocalMarkdownComponents provides components,
+        LocalMarkdownAnimations provides animations,
+    ) {
+        when (state) {
+            is State.Error -> error(modifier)
+            is State.Loading -> loading(modifier)
+            is State.Success -> success(state, components, modifier)
+        }
+    }
+}
+
+/**
+ * Renders the successfully parsed markdown content in a Column layout.
+ *
+ * This function is used internally by the [Markdown] composable when the state is [State.Success].
+ * It iterates through the parsed markdown nodes and renders each element using the appropriate
+ * component from the provided [MarkdownComponents].
+ *
+ * You can use this function directly if you have a custom state management system and
+ * want to render only the success state of markdown content.
+ *
+ * Example usage:
+ * ```
+ * val successState: State.Success = ... // Your parsed markdown state
+ * val components = markdownComponents()
+ *
+ * MarkdownSuccess(
+ *     state = successState,
+ *     components = components,
+ *     modifier = Modifier.padding(16.dp)
+ * )
+ * ```
+ *
+ * @param state The [State.Success] object containing the parsed markdown content and node tree.
+ * @param components The [MarkdownComponents] instance containing the components to use for rendering
+ *                   different markdown elements.
+ * @param modifier The modifier to be applied to the container Column.
+ *
+ * @see State.Success
+ * @see MarkdownComponents
+ * @see MarkdownElement
+ */
+@Composable
+fun MarkdownSuccess(
+    state: State.Success,
+    components: MarkdownComponents,
+    modifier: Modifier = Modifier,
+) {
+    Column(modifier) {
+        state.node.children.forEach { node ->
+            MarkdownElement(node, components, state.content)
+        }
+    }
+}
+
+@Composable
+fun StreamingMarkdownSuccess(
+    streamingMarkdownState: StreamingMarkdownState,
+    snapshot: StreamingMarkdownState.Snapshot,
+    components: MarkdownComponents,
+    modifier: Modifier = Modifier,
+) {
+    val content = streamingMarkdownState.content
+
+    Column(modifier) {
+        snapshot.stableAst.forEach { node ->
+            MarkdownElementInternal(node, components, content)
+        }
+        snapshot.unstableAstTail.forEach { node ->
+            MarkdownElementInternal(node, components, content)
+        }
+    }
+}
diff --git a/app/src/main/vendor/com/mikepenz/markdown/compose/MarkdownExtension.kt b/app/src/main/vendor/com/mikepenz/markdown/compose/MarkdownExtension.kt
new file mode 100644
index 000000000..e623292c8
--- /dev/null
+++ b/app/src/main/vendor/com/mikepenz/markdown/compose/MarkdownExtension.kt
@@ -0,0 +1,102 @@
+package com.mikepenz.markdown.compose
+
+import androidx.compose.foundation.layout.Spacer
+import androidx.compose.foundation.layout.height
+import androidx.compose.runtime.Composable
+import androidx.compose.runtime.remember
+import androidx.compose.ui.Modifier
+import com.mikepenz.markdown.compose.components.MarkdownComponentModel
+import com.mikepenz.markdown.compose.components.MarkdownComponents
+import org.intellij.markdown.MarkdownElementTypes.ATX_1
+import org.intellij.markdown.MarkdownElementTypes.ATX_2
+import org.intellij.markdown.MarkdownElementTypes.ATX_3
+import org.intellij.markdown.MarkdownElementTypes.ATX_4
+import org.intellij.markdown.MarkdownElementTypes.ATX_5
+import org.intellij.markdown.MarkdownElementTypes.ATX_6
+import org.intellij.markdown.MarkdownElementTypes.BLOCK_QUOTE
+import org.intellij.markdown.MarkdownElementTypes.CODE_BLOCK
+import org.intellij.markdown.MarkdownElementTypes.CODE_FENCE
+import org.intellij.markdown.MarkdownElementTypes.IMAGE
+import org.intellij.markdown.MarkdownElementTypes.ORDERED_LIST
+import org.intellij.markdown.MarkdownElementTypes.PARAGRAPH
+import org.intellij.markdown.MarkdownElementTypes.SETEXT_1
+import org.intellij.markdown.MarkdownElementTypes.SETEXT_2
+import org.intellij.markdown.MarkdownElementTypes.UNORDERED_LIST
+import org.intellij.markdown.MarkdownTokenTypes.Companion.EOL
+import org.intellij.markdown.MarkdownTokenTypes.Companion.HORIZONTAL_RULE
+import org.intellij.markdown.MarkdownTokenTypes.Companion.TEXT
+import org.intellij.markdown.ast.ASTNode
+import org.intellij.markdown.flavours.gfm.GFMElementTypes.ALERT
+import org.intellij.markdown.flavours.gfm.GFMElementTypes.TABLE
+
+/**
+ * Handles the rendering of a markdown element based on its [ASTNode.type].
+ *
+ * This function is responsible for determining the appropriate component to use for rendering
+ * It does handle rendering of children recursively.
+ *
+ * @param node The ASTNode representing the markdown element.
+ * @param components The [MarkdownComponents] instance containing the components to use.
+ * @param content The original markdown content string.
+ * @param includeSpacer Whether to include a spacer before rendering the element.
+ */
+@Composable
+fun MarkdownElement(
+    node: ASTNode,
+    components: MarkdownComponents,
+    content: String,
+    includeSpacer: Boolean = true,
+) = MarkdownElementInternal(node, components, content, includeSpacer)
+
+@Composable
+internal fun MarkdownElementInternal(
+    node: ASTNode,
+    components: MarkdownComponents,
+    content: CharSequence,
+    includeSpacer: Boolean = true,
+) {
+    val typography = LocalMarkdownTypography.current
+    val model = remember(node, content, typography) {
+        // It's safe to pass `CharSequence` and its `toString` here.
+        // Reason: It's guaranteed that even the source `StringBuilder` changes, The render result is not dirty.
+        // So it's fine to remember it.
+        MarkdownComponentModel(
+            content = content.toString(),
+            node = node,
+            typography = typography,
+        )
+    }
+    var handled = true
+    if (includeSpacer) Spacer(Modifier.height(LocalMarkdownPadding.current.block))
+    when (node.type) {
+        TEXT -> components.text(model)
+        EOL -> components.eol(model)
+        CODE_FENCE -> components.codeFence(model)
+        CODE_BLOCK -> components.codeBlock(model)
+        ATX_1 -> components.heading1(model)
+        ATX_2 -> components.heading2(model)
+        ATX_3 -> components.heading3(model)
+        ATX_4 -> components.heading4(model)
+        ATX_5 -> components.heading5(model)
+        ATX_6 -> components.heading6(model)
+        SETEXT_1 -> components.setextHeading1(model)
+        SETEXT_2 -> components.setextHeading2(model)
+        BLOCK_QUOTE -> components.blockQuote(model)
+        PARAGRAPH -> components.paragraph(model)
+        ORDERED_LIST -> components.orderedList(model)
+        UNORDERED_LIST -> components.unorderedList(model)
+        IMAGE -> components.image(model)
+        HORIZONTAL_RULE -> components.horizontalRule(model)
+        TABLE -> components.table(model)
+        ALERT -> components.alert(model)
+        else -> {
+            handled = components.custom?.invoke(node.type, model) != null
+        }
+    }
+
+    if (!handled) {
+        node.children.forEach { child ->
+            MarkdownElementInternal(child, components, content, includeSpacer)
+        }
+    }
+}
diff --git a/app/src/main/vendor/com/mikepenz/markdown/compose/components/MarkdownComponents.kt b/app/src/main/vendor/com/mikepenz/markdown/compose/components/MarkdownComponents.kt
new file mode 100644
index 000000000..42f762f2e
--- /dev/null
+++ b/app/src/main/vendor/com/mikepenz/markdown/compose/components/MarkdownComponents.kt
@@ -0,0 +1,228 @@
+package com.mikepenz.markdown.compose.components
+
+import androidx.compose.foundation.layout.fillMaxWidth
+import androidx.compose.runtime.Composable
+import androidx.compose.runtime.Immutable
+import androidx.compose.runtime.Stable
+import androidx.compose.ui.Modifier
+import com.mikepenz.markdown.compose.elements.MarkdownAlert
+import com.mikepenz.markdown.compose.elements.MarkdownBlockQuote
+import com.mikepenz.markdown.compose.elements.MarkdownBulletList
+import com.mikepenz.markdown.compose.elements.MarkdownCheckBox
+import com.mikepenz.markdown.compose.elements.MarkdownCodeBlock
+import com.mikepenz.markdown.compose.elements.MarkdownCodeFence
+import com.mikepenz.markdown.compose.elements.MarkdownDivider
+import com.mikepenz.markdown.compose.elements.MarkdownHeader
+import com.mikepenz.markdown.compose.elements.MarkdownImage
+import com.mikepenz.markdown.compose.elements.MarkdownInlineImage
+import com.mikepenz.markdown.compose.elements.MarkdownOrderedList
+import com.mikepenz.markdown.compose.elements.MarkdownParagraph
+import com.mikepenz.markdown.compose.elements.MarkdownTable
+import com.mikepenz.markdown.compose.elements.MarkdownText
+import com.mikepenz.markdown.compose.elements.listDepth
+import com.mikepenz.markdown.model.MarkdownAlertType
+import com.mikepenz.markdown.model.MarkdownTypography
+import com.mikepenz.markdown.utils.findAlertType
+import com.mikepenz.markdown.utils.getUnescapedTextInNode
+import kotlinx.collections.immutable.ImmutableMap
+import kotlinx.collections.immutable.persistentMapOf
+import org.intellij.markdown.IElementType
+import org.intellij.markdown.MarkdownTokenTypes
+import org.intellij.markdown.ast.ASTNode
+
+typealias MarkdownComponent = @Composable (MarkdownComponentModel) -> Unit
+
+typealias CustomMarkdownComponent = @Composable (IElementType, MarkdownComponentModel) -> Unit
+
+/**
+ * Model holding data relevant for a component
+ */
+@Stable
+data class MarkdownComponentModel(
+    val content: String,
+    val node: ASTNode,
+    val typography: MarkdownTypography,
+    val extra: ImmutableMap<String, Any> = persistentMapOf(),
+)
+
+private fun MarkdownComponentModel.getUnescapedTextInNode() = node.getUnescapedTextInNode(content)
+
+fun markdownComponents(
+    text: MarkdownComponent = CurrentComponentsBridge.text,
+    eol: MarkdownComponent = CurrentComponentsBridge.eol,
+    codeFence: MarkdownComponent = CurrentComponentsBridge.codeFence,
+    codeBlock: MarkdownComponent = CurrentComponentsBridge.codeBlock,
+    heading1: MarkdownComponent = CurrentComponentsBridge.heading1,
+    heading2: MarkdownComponent = CurrentComponentsBridge.heading2,
+    heading3: MarkdownComponent = CurrentComponentsBridge.heading3,
+    heading4: MarkdownComponent = CurrentComponentsBridge.heading4,
+    heading5: MarkdownComponent = CurrentComponentsBridge.heading5,
+    heading6: MarkdownComponent = CurrentComponentsBridge.heading6,
+    setextHeading1: MarkdownComponent = CurrentComponentsBridge.setextHeading1,
+    setextHeading2: MarkdownComponent = CurrentComponentsBridge.setextHeading2,
+    blockQuote: MarkdownComponent = CurrentComponentsBridge.blockQuote,
+    paragraph: MarkdownComponent = CurrentComponentsBridge.paragraph,
+    orderedList: MarkdownComponent = CurrentComponentsBridge.orderedList,
+    unorderedList: MarkdownComponent = CurrentComponentsBridge.unorderedList,
+    image: MarkdownComponent = CurrentComponentsBridge.image,
+    inlineImage: MarkdownComponent = CurrentComponentsBridge.inlineImage,
+    horizontalRule: MarkdownComponent = CurrentComponentsBridge.horizontalRule,
+    table: MarkdownComponent = CurrentComponentsBridge.table,
+    checkbox: MarkdownComponent = CurrentComponentsBridge.checkbox,
+    alert: MarkdownComponent = CurrentComponentsBridge.alert,
+    custom: CustomMarkdownComponent? = CurrentComponentsBridge.custom,
+): MarkdownComponents = DefaultMarkdownComponents(
+    text = text,
+    eol = eol,
+    codeFence = codeFence,
+    codeBlock = codeBlock,
+    heading1 = heading1,
+    heading2 = heading2,
+    heading3 = heading3,
+    heading4 = heading4,
+    heading5 = heading5,
+    heading6 = heading6,
+    setextHeading1 = setextHeading1,
+    setextHeading2 = setextHeading2,
+    blockQuote = blockQuote,
+    paragraph = paragraph,
+    orderedList = orderedList,
+    unorderedList = unorderedList,
+    image = image,
+    inlineImage = inlineImage,
+    horizontalRule = horizontalRule,
+    table = table,
+    checkbox = checkbox,
+    alert = alert,
+    custom = custom,
+)
+
+/**
+ * Interface defining all supported components.
+ */
+@Immutable
+interface MarkdownComponents {
+    val text: MarkdownComponent
+    val eol: MarkdownComponent
+    val codeFence: MarkdownComponent
+    val codeBlock: MarkdownComponent
+    val heading1: MarkdownComponent
+    val heading2: MarkdownComponent
+    val heading3: MarkdownComponent
+    val heading4: MarkdownComponent
+    val heading5: MarkdownComponent
+    val heading6: MarkdownComponent
+    val setextHeading1: MarkdownComponent
+    val setextHeading2: MarkdownComponent
+    val blockQuote: MarkdownComponent
+    val paragraph: MarkdownComponent
+    val orderedList: MarkdownComponent
+    val unorderedList: MarkdownComponent
+    val image: MarkdownComponent
+    val inlineImage: MarkdownComponent
+    val horizontalRule: MarkdownComponent
+    val table: MarkdownComponent
+    val checkbox: MarkdownComponent
+    val alert: MarkdownComponent
+    val custom: CustomMarkdownComponent?
+}
+
+@Immutable
+private data class DefaultMarkdownComponents(
+    override val text: MarkdownComponent,
+    override val eol: MarkdownComponent,
+    override val codeFence: MarkdownComponent,
+    override val codeBlock: MarkdownComponent,
+    override val heading1: MarkdownComponent,
+    override val heading2: MarkdownComponent,
+    override val heading3: MarkdownComponent,
+    override val heading4: MarkdownComponent,
+    override val heading5: MarkdownComponent,
+    override val heading6: MarkdownComponent,
+    override val setextHeading1: MarkdownComponent,
+    override val setextHeading2: MarkdownComponent,
+    override val blockQuote: MarkdownComponent,
+    override val paragraph: MarkdownComponent,
+    override val orderedList: MarkdownComponent,
+    override val unorderedList: MarkdownComponent,
+    override val image: MarkdownComponent,
+    override val inlineImage: MarkdownComponent,
+    override val horizontalRule: MarkdownComponent,
+    override val table: MarkdownComponent,
+    override val checkbox: MarkdownComponent,
+    override val alert: MarkdownComponent,
+    override val custom: CustomMarkdownComponent?,
+) : MarkdownComponents
+
+/**
+ * Adapts the universal signature @Composable (MarkdownComponentModel) -> Unit to the existing components.
+ */
+object CurrentComponentsBridge {
+    val text: MarkdownComponent = {
+        MarkdownText(it.getUnescapedTextInNode(), it.node, style = it.typography.text)
+    }
+    val eol: MarkdownComponent = { }
+    val codeFence: MarkdownComponent = {
+        MarkdownCodeFence(it.content, it.node, style = it.typography.code)
+    }
+    val codeBlock: MarkdownComponent = {
+        MarkdownCodeBlock(it.content, it.node, style = it.typography.code)
+    }
+    val heading1: MarkdownComponent = {
+        MarkdownHeader(it.content, it.node, style = it.typography.h1)
+    }
+    val heading2: MarkdownComponent = {
+        MarkdownHeader(it.content, it.node, style = it.typography.h2)
+    }
+    val heading3: MarkdownComponent = {
+        MarkdownHeader(it.content, it.node, style = it.typography.h3)
+    }
+    val heading4: MarkdownComponent = {
+        MarkdownHeader(it.content, it.node, style = it.typography.h4)
+    }
+    val heading5: MarkdownComponent = {
+        MarkdownHeader(it.content, it.node, style = it.typography.h5)
+    }
+    val heading6: MarkdownComponent = {
+        MarkdownHeader(it.content, it.node, style = it.typography.h6)
+    }
+    val setextHeading1: MarkdownComponent = {
+        MarkdownHeader(it.content, it.node, style = it.typography.h1, contentChildType = MarkdownTokenTypes.SETEXT_CONTENT)
+    }
+    val setextHeading2: MarkdownComponent = {
+        MarkdownHeader(it.content, it.node, style = it.typography.h2, contentChildType = MarkdownTokenTypes.SETEXT_CONTENT)
+    }
+    val blockQuote: MarkdownComponent = {
+        MarkdownBlockQuote(it.content, it.node, style = it.typography.quote)
+    }
+    val paragraph: MarkdownComponent = {
+        MarkdownParagraph(it.content, it.node, style = it.typography.paragraph)
+    }
+    val orderedList: MarkdownComponent = {
+        MarkdownOrderedList(it.content, it.node, style = it.typography.ordered, it.listDepth)
+    }
+    val unorderedList: MarkdownComponent = {
+        MarkdownBulletList(it.content, it.node, style = it.typography.bullet, it.listDepth)
+    }
+    val image: MarkdownComponent = {
+        MarkdownImage(it.content, it.node)
+    }
+    val inlineImage: MarkdownComponent = {
+        MarkdownInlineImage(it.content, it.node)
+    }
+    val horizontalRule: MarkdownComponent = {
+        MarkdownDivider(Modifier.fillMaxWidth())
+    }
+    val table: MarkdownComponent = {
+        MarkdownTable(it.content, it.node, style = it.typography.table)
+    }
+    val checkbox: MarkdownComponent = {
+        MarkdownCheckBox(it.content, it.node, style = it.typography.text)
+    }
+    val alert: MarkdownComponent = { model ->
+        // The parser only emits ALERT for one of the five known markers, so the fallback is unreachable.
+        val type = model.node.findAlertType(model.content) ?: MarkdownAlertType.NOTE
+        MarkdownAlert(model.content, model.node, type, style = model.typography.alertTitle)
+    }
+    val custom: CustomMarkdownComponent? = null
+}
diff --git a/app/src/main/vendor/com/mikepenz/markdown/compose/elements/MarkdownAlert.kt b/app/src/main/vendor/com/mikepenz/markdown/compose/elements/MarkdownAlert.kt
new file mode 100644
index 000000000..564189440
--- /dev/null
+++ b/app/src/main/vendor/com/mikepenz/markdown/compose/elements/MarkdownAlert.kt
@@ -0,0 +1,138 @@
+package com.mikepenz.markdown.compose.elements
+
+import androidx.compose.foundation.Image
+import androidx.compose.foundation.layout.Column
+import androidx.compose.foundation.layout.Row
+import androidx.compose.foundation.layout.Spacer
+import androidx.compose.foundation.layout.calculateStartPadding
+import androidx.compose.foundation.layout.height
+import androidx.compose.foundation.layout.padding
+import androidx.compose.foundation.layout.size
+import androidx.compose.foundation.layout.width
+import androidx.compose.runtime.Composable
+import androidx.compose.runtime.key
+import androidx.compose.ui.Alignment
+import androidx.compose.ui.Modifier
+import androidx.compose.ui.draw.drawBehind
+import androidx.compose.ui.geometry.Offset
+import androidx.compose.ui.graphics.Color
+import androidx.compose.ui.graphics.ColorFilter
+import androidx.compose.ui.graphics.isSpecified
+import androidx.compose.ui.graphics.vector.ImageVector
+import androidx.compose.ui.graphics.vector.rememberVectorPainter
+import androidx.compose.ui.semantics.contentDescription
+import androidx.compose.ui.semantics.semantics
+import androidx.compose.ui.text.TextStyle
+import androidx.compose.ui.unit.LayoutDirection
+import com.mikepenz.markdown.compose.LocalMarkdownA11yLabels
+import com.mikepenz.markdown.compose.LocalMarkdownAlertIcons
+import com.mikepenz.markdown.compose.LocalMarkdownColors
+import com.mikepenz.markdown.compose.LocalMarkdownComponents
+import com.mikepenz.markdown.compose.LocalMarkdownDimens
+import com.mikepenz.markdown.compose.LocalMarkdownPadding
+import com.mikepenz.markdown.compose.LocalMarkdownTypography
+import com.mikepenz.markdown.compose.MarkdownElement
+import com.mikepenz.markdown.compose.elements.material.MarkdownBasicText
+import com.mikepenz.markdown.model.MarkdownAlertType
+import org.intellij.markdown.MarkdownTokenTypes.Companion.BLOCK_QUOTE
+import org.intellij.markdown.MarkdownTokenTypes.Companion.EOL
+import org.intellij.markdown.MarkdownTokenTypes.Companion.WHITE_SPACE
+import org.intellij.markdown.ast.ASTNode
+import org.intellij.markdown.flavours.gfm.GFMTokenTypes
+
+/**
+ * Renders a GitHub alert (`> [!NOTE]`, `> [!WARNING]`, …) as an accent bar, a title row carrying an
+ * icon, and the alert's block content.
+ *
+ * The [node] is a `GFMElementTypes.ALERT`, whose children are the blockquote marker, the
+ * `ALERT_TITLE` token, and the block content — the markers between blocks are skipped here.
+ *
+ * @param content The original markdown content string.
+ * @param node The `ALERT` node to render.
+ * @param type The resolved alert type, driving the default title, icon and accent color.
+ * @param title The title rendered next to the icon. Override to localize.
+ * @param icon The icon rendered before the title, or `null` to render the title alone.
+ * @param accent The color of the bar, icon and title.
+ * @param style The style of the title.
+ */
+@Composable
+fun MarkdownAlert(
+    content: String,
+    node: ASTNode,
+    type: MarkdownAlertType,
+    title: String = type.title,
+    icon: ImageVector? = LocalMarkdownAlertIcons.current.iconFor(type),
+    accent: Color = LocalMarkdownColors.current.alert.colorFor(type),
+    style: TextStyle = LocalMarkdownTypography.current.alertTitle,
+) {
+    val dimens = LocalMarkdownDimens.current.alert
+    val padding = LocalMarkdownPadding.current.alert
+    val markdownComponents = LocalMarkdownComponents.current
+    val a11yLabels = LocalMarkdownA11yLabels.current
+    val bar = padding.bar
+    val barThickness = dimens.barThickness
+
+    Column(
+        modifier = Modifier
+            .semantics { contentDescription = a11yLabels.alert(title) }
+            .drawBehind {
+                val x = bar.calculateStartPadding(LayoutDirection.Ltr).toPx()
+                drawLine(
+                    color = accent,
+                    strokeWidth = barThickness.toPx(),
+                    start = Offset(x, bar.calculateTopPadding().toPx()),
+                    end = Offset(x, size.height - bar.calculateBottomPadding().toPx()),
+                )
+            }
+            .padding(padding.container)
+    ) {
+        Column(modifier = Modifier.padding(padding.content)) {
+            Row(verticalAlignment = Alignment.CenterVertically) {
+                if (icon != null) {
+                    Image(
+                        painter = rememberVectorPainter(icon),
+                        contentDescription = null,
+                        colorFilter = ColorFilter.tint(accent),
+                        modifier = Modifier.size(dimens.iconSize),
+                    )
+                    Spacer(Modifier.width(padding.iconSpacing))
+                }
+                MarkdownBasicText(
+                    text = title,
+                    style = style,
+                    color = if (style.color.isSpecified) style.color else accent,
+                )
+            }
+
+            Spacer(Modifier.height(padding.titleSpacing))
+
+            // The parser leaves the `> ` markers in the tree: a leading BLOCK_QUOTE *token*, and an
+            // `EOL WHITE_SPACE` pair before every continuation line. Dropping those, plus everything up
+            // to and including ALERT_TITLE, leaves exactly the alert's block content. Blocks are always
+            // separated by a blank line, so a uniform gap between them is enough. Note the marker token
+            // shares its name with `MarkdownElementTypes.BLOCK_QUOTE` — a nested quote — which renders.
+            var pastTitle = false
+            var seenContent = false
+            node.children.forEach { child ->
+                when {
+                    !pastTitle -> if (child.type == GFMTokenTypes.ALERT_TITLE) pastTitle = true
+                    child.type == EOL || child.type == WHITE_SPACE || child.type == BLOCK_QUOTE -> Unit
+                    else -> {
+                        if (seenContent) Spacer(Modifier.height(padding.titleSpacing))
+                        seenContent = true
+                        // Stable key by source offset gives each child its own slot and
+                        // keeps recompositions isolated when a sibling changes.
+                        key(child.startOffset) {
+                            MarkdownElement(
+                                node = child,
+                                components = markdownComponents,
+                                content = content,
+                                includeSpacer = false,
+                            )
+                        }
+                    }
+                }
+            }
+        }
+    }
+}
diff --git a/app/src/main/vendor/com/mikepenz/markdown/compose/elements/MarkdownBlockQuote.kt b/app/src/main/vendor/com/mikepenz/markdown/compose/elements/MarkdownBlockQuote.kt
new file mode 100644
index 000000000..c2c446f2f
--- /dev/null
+++ b/app/src/main/vendor/com/mikepenz/markdown/compose/elements/MarkdownBlockQuote.kt
@@ -0,0 +1,96 @@
+package com.mikepenz.markdown.compose.elements
+
+import androidx.compose.foundation.layout.Column
+import androidx.compose.foundation.layout.Spacer
+import androidx.compose.foundation.layout.calculateStartPadding
+import androidx.compose.foundation.layout.height
+import androidx.compose.foundation.layout.padding
+import androidx.compose.runtime.Composable
+import androidx.compose.runtime.key
+import androidx.compose.ui.Modifier
+import androidx.compose.ui.draw.drawBehind
+import androidx.compose.ui.geometry.Offset
+import androidx.compose.ui.graphics.isSpecified
+import androidx.compose.ui.platform.LocalDensity
+import androidx.compose.ui.semantics.contentDescription
+import androidx.compose.ui.semantics.semantics
+import androidx.compose.ui.text.TextStyle
+import androidx.compose.ui.unit.LayoutDirection
+import com.mikepenz.markdown.compose.LocalMarkdownA11yLabels
+import com.mikepenz.markdown.compose.LocalMarkdownColors
+import com.mikepenz.markdown.compose.LocalMarkdownComponents
+import com.mikepenz.markdown.compose.LocalMarkdownDimens
+import com.mikepenz.markdown.compose.LocalMarkdownPadding
+import com.mikepenz.markdown.compose.LocalMarkdownTypography
+import com.mikepenz.markdown.compose.MarkdownElement
+import org.intellij.markdown.MarkdownElementTypes
+import org.intellij.markdown.MarkdownTokenTypes.Companion.EOL
+import org.intellij.markdown.ast.ASTNode
+
+@Composable
+fun MarkdownBlockQuote(
+    content: String,
+    node: ASTNode,
+    style: TextStyle = LocalMarkdownTypography.current.quote,
+) {
+    val blockQuoteColor = if (style.color.isSpecified) {
+        style.color
+    } else {
+        LocalMarkdownColors.current.text
+    }
+    val blockQuoteThickness = LocalMarkdownDimens.current.blockQuoteThickness
+    val blockQuote = LocalMarkdownPadding.current.blockQuote
+    val blockQuoteText = LocalMarkdownPadding.current.blockQuoteText
+    val blockQuoteBar = LocalMarkdownPadding.current.blockQuoteBar
+    val markdownComponents = LocalMarkdownComponents.current
+    val a11yLabels = LocalMarkdownA11yLabels.current
+
+    Column(
+        modifier = Modifier
+            .semantics { contentDescription = a11yLabels.blockquote }
+            .drawBehind {
+                drawLine(
+                    color = blockQuoteColor,
+                    strokeWidth = blockQuoteThickness.toPx(),
+                    start = Offset(blockQuoteBar.calculateStartPadding(LayoutDirection.Ltr).toPx(), blockQuoteBar.calculateTopPadding().toPx()),
+                    end = Offset(blockQuoteBar.calculateStartPadding(LayoutDirection.Ltr).toPx(), size.height - blockQuoteBar.calculateBottomPadding().toPx())
+                )
+            }
+            .padding(blockQuote)
+    ) {
+        val blockQuoteEmptyLineHeight = with(LocalDensity.current) {
+            when {
+                style.lineHeight.isSp -> style.lineHeight.toDp()
+                style.fontSize.isSp -> style.fontSize.toDp()
+                else -> blockQuoteText.calculateTopPadding() + blockQuoteText.calculateBottomPadding()
+            }
+        }
+        var priorNestedQuote = false
+        node.children.onEachIndexed { index, child ->
+            // Stable key by source offset gives each child its own slot and
+            // keeps recompositions isolated when a sibling changes.
+            key(child.startOffset) {
+                if (child.type == MarkdownElementTypes.BLOCK_QUOTE) {
+                    // if block quote is nested, and comes after non block quote, add padding
+                    if (!priorNestedQuote && index != 0) Spacer(Modifier.height(blockQuoteText.calculateBottomPadding()))
+                    MarkdownBlockQuote(content = content, node = child, style = style)
+                    priorNestedQuote = true
+                } else if (child.type == EOL) {
+                    Spacer(Modifier.height(blockQuoteEmptyLineHeight))
+                } else {
+                    // if first item either completely, or after a nested quote, add top padding
+                    if (index == 0 || priorNestedQuote) Spacer(Modifier.height(blockQuoteText.calculateTopPadding()))
+                    priorNestedQuote = false
+                    MarkdownElement(
+                        node = child,
+                        components = markdownComponents,
+                        content = content,
+                        includeSpacer = false
+                    )
+                    // if last item, add bottom padding
+                    if (index == node.children.lastIndex) Spacer(Modifier.height(blockQuoteText.calculateBottomPadding()))
+                }
+            }
+        }
+    }
+}
diff --git a/app/src/main/vendor/com/mikepenz/markdown/compose/elements/MarkdownCheckBox.kt b/app/src/main/vendor/com/mikepenz/markdown/compose/elements/MarkdownCheckBox.kt
new file mode 100644
index 000000000..02cc0a346
--- /dev/null
+++ b/app/src/main/vendor/com/mikepenz/markdown/compose/elements/MarkdownCheckBox.kt
@@ -0,0 +1,31 @@
+package com.mikepenz.markdown.compose.elements
+
+import androidx.compose.foundation.layout.Row
+import androidx.compose.foundation.layout.padding
+import androidx.compose.runtime.Composable
+import androidx.compose.ui.Modifier
+import androidx.compose.ui.text.TextStyle
+import androidx.compose.ui.text.font.FontFamily
+import androidx.compose.ui.unit.dp
+import org.intellij.markdown.ast.ASTNode
+import org.intellij.markdown.ast.getTextInNode
+
+@Composable
+fun MarkdownCheckBox(
+    content: String,
+    node: ASTNode,
+    style: TextStyle,
+    checkedIndicator: @Composable (Boolean, Modifier) -> Unit = { checked, modifier ->
+        MarkdownText(
+            content = "[${if (checked) "x" else " "}] ",
+            node = node,
+            modifier = modifier,
+            style = style.copy(fontFamily = FontFamily.Monospace)
+        )
+    },
+) {
+    val checked = node.getTextInNode(content).contains("[x]")
+    Row {
+        checkedIndicator(checked, Modifier.padding(end = 4.dp))
+    }
+}
diff --git a/app/src/main/vendor/com/mikepenz/markdown/compose/elements/MarkdownCode.kt b/app/src/main/vendor/com/mikepenz/markdown/compose/elements/MarkdownCode.kt
new file mode 100644
index 000000000..e5d548015
--- /dev/null
+++ b/app/src/main/vendor/com/mikepenz/markdown/compose/elements/MarkdownCode.kt
@@ -0,0 +1,147 @@
+package com.mikepenz.markdown.compose.elements
+
+import androidx.compose.foundation.BorderStroke
+import androidx.compose.foundation.background
+import androidx.compose.foundation.border
+import androidx.compose.foundation.horizontalScroll
+import androidx.compose.foundation.layout.Box
+import androidx.compose.foundation.layout.Column
+import androidx.compose.foundation.layout.fillMaxWidth
+import androidx.compose.foundation.layout.padding
+import androidx.compose.foundation.rememberScrollState
+import androidx.compose.foundation.shape.RoundedCornerShape
+import androidx.compose.runtime.Composable
+import androidx.compose.ui.Modifier
+import androidx.compose.ui.draw.clip
+import androidx.compose.ui.draw.shadow
+import androidx.compose.ui.graphics.Color
+import androidx.compose.ui.graphics.RectangleShape
+import androidx.compose.ui.graphics.Shape
+import androidx.compose.ui.input.pointer.pointerInput
+import androidx.compose.ui.semantics.contentDescription
+import androidx.compose.ui.semantics.isTraversalGroup
+import androidx.compose.ui.semantics.semantics
+import androidx.compose.ui.text.TextStyle
+import androidx.compose.ui.unit.Dp
+import androidx.compose.ui.unit.dp
+import com.mikepenz.markdown.compose.LocalMarkdownA11yLabels
+import com.mikepenz.markdown.compose.LocalMarkdownColors
+import com.mikepenz.markdown.compose.LocalMarkdownDimens
+import com.mikepenz.markdown.compose.LocalMarkdownPadding
+import com.mikepenz.markdown.compose.LocalMarkdownTypography
+import com.mikepenz.markdown.compose.elements.material.MarkdownBasicText
+import org.intellij.markdown.MarkdownTokenTypes
+import org.intellij.markdown.ast.ASTNode
+import org.intellij.markdown.ast.findChildOfType
+import org.intellij.markdown.ast.getTextInNode
+
+@Composable
+private fun MarkdownCode(
+    code: String,
+    language: String? = null,
+    style: TextStyle = LocalMarkdownTypography.current.code,
+    showHeader: Boolean = false,
+) {
+    val backgroundCodeColor = LocalMarkdownColors.current.codeBackground
+    val codeBackgroundCornerSize = LocalMarkdownDimens.current.codeBackgroundCornerSize
+    val codeBlockPadding = LocalMarkdownPadding.current.codeBlock
+    MarkdownCodeBackground(
+        color = backgroundCodeColor,
+        shape = RoundedCornerShape(codeBackgroundCornerSize),
+        modifier = Modifier
+            .fillMaxWidth()
+            .padding(vertical = 8.dp),
+        showHeader = showHeader,
+        language = language,
+        code = code
+    ) {
+        MarkdownBasicText(
+            text = code,
+            style = style,
+            modifier = Modifier
+                .horizontalScroll(rememberScrollState())
+                .padding(codeBlockPadding),
+        )
+    }
+}
+
+@Composable
+fun MarkdownCodeFence(
+    content: String,
+    node: ASTNode,
+    style: TextStyle = LocalMarkdownTypography.current.code,
+    block: @Composable (String, String?, TextStyle) -> Unit = { code, language, style -> MarkdownCode(code = code, language = language, style = style) },
+) {
+    // CODE_FENCE_START, FENCE_LANG, EOL, {content // CODE_FENCE_CONTENT // x-times}, CODE_FENCE_END
+    // CODE_FENCE_START, EOL, {content // CODE_FENCE_CONTENT // x-times}, EOL
+    // CODE_FENCE_START, EOL, {content // CODE_FENCE_CONTENT // x-times}
+    // CODE_FENCE_START, FENCE_LANG, EOL, {content // CODE_FENCE_CONTENT // x-times}
+
+    val language = node.findChildOfType(MarkdownTokenTypes.FENCE_LANG)?.getTextInNode(content)?.toString()
+    if (node.children.size >= 3) {
+        val start = node.children[2].startOffset
+        val minCodeFenceCount = if (language != null && node.children.size > 3) 3 else 2
+        val end = node.children[(node.children.size - 2).coerceAtLeast(minCodeFenceCount)].endOffset
+        block(content.subSequence(start, end).toString().replaceIndent(), language, style)
+    } else {
+        // invalid code block, skipping
+    }
+}
+
+@Composable
+fun MarkdownCodeBlock(
+    content: String,
+    node: ASTNode,
+    style: TextStyle = LocalMarkdownTypography.current.code,
+    block: @Composable (String, String?, TextStyle) -> Unit = { code, language, style -> MarkdownCode(code = code, language = language, style = style) },
+) {
+    val start = node.children[0].startOffset
+    val end = node.children[node.children.size - 1].endOffset
+    val language = node.findChildOfType(MarkdownTokenTypes.FENCE_LANG)?.getTextInNode(content)?.toString()
+    block(content.subSequence(start, end).toString().replaceIndent(), language, style)
+}
+
+@Composable
+fun MarkdownCodeBackground(
+    color: Color,
+    modifier: Modifier = Modifier,
+    shape: Shape = RectangleShape,
+    border: BorderStroke? = null,
+    elevation: Dp = 0.dp,
+    showHeader: Boolean = false,
+    language: String? = null,
+    code: String = "",
+    content: @Composable () -> Unit,
+) {
+    val a11yLabels = LocalMarkdownA11yLabels.current
+    Box(
+        modifier = modifier
+            .shadow(elevation, shape, clip = false)
+            .then(if (border != null) Modifier.border(border, shape) else Modifier)
+            .background(color = color, shape = shape)
+            .clip(shape)
+            .semantics(mergeDescendants = false) {
+                isTraversalGroup = true
+                contentDescription = if (language.isNullOrBlank()) a11yLabels.codeBlock
+                else a11yLabels.codeBlockWithLanguage(language)
+            }
+            .pointerInput(Unit) {},
+        propagateMinConstraints = true
+    ) {
+        if (showHeader) {
+            Column {
+                MarkdownCodeTopBar(
+                    language = language,
+                    code = code
+                )
+                MarkdownDivider(
+                    color = LocalMarkdownColors.current.dividerColor.copy(alpha = 0.3f),
+                    thickness = 0.5.dp
+                )
+                content()
+            }
+        } else {
+            content()
+        }
+    }
+}
diff --git a/app/src/main/vendor/com/mikepenz/markdown/compose/elements/MarkdownCodeTopBar.kt b/app/src/main/vendor/com/mikepenz/markdown/compose/elements/MarkdownCodeTopBar.kt
new file mode 100644
index 000000000..6c350cb42
--- /dev/null
+++ b/app/src/main/vendor/com/mikepenz/markdown/compose/elements/MarkdownCodeTopBar.kt
@@ -0,0 +1,81 @@
+package com.mikepenz.markdown.compose.elements
+
+import androidx.compose.foundation.clickable
+import androidx.compose.foundation.layout.Arrangement
+import androidx.compose.foundation.layout.Box
+import androidx.compose.foundation.layout.Row
+import androidx.compose.foundation.layout.fillMaxWidth
+import androidx.compose.foundation.layout.padding
+import androidx.compose.foundation.layout.size
+import androidx.compose.foundation.shape.CircleShape
+import androidx.compose.runtime.Composable
+import androidx.compose.ui.Alignment
+import androidx.compose.ui.Modifier
+import androidx.compose.ui.draw.clip
+import androidx.compose.ui.platform.LocalClipboardManager
+import androidx.compose.ui.semantics.Role
+import androidx.compose.ui.semantics.contentDescription
+import androidx.compose.ui.semantics.role
+import androidx.compose.ui.semantics.semantics
+import androidx.compose.ui.text.AnnotatedString
+import androidx.compose.ui.text.font.FontFamily
+import androidx.compose.ui.unit.dp
+import androidx.compose.ui.unit.sp
+import com.mikepenz.markdown.compose.LocalMarkdownA11yLabels
+import com.mikepenz.markdown.compose.LocalMarkdownColors
+import com.mikepenz.markdown.compose.elements.material.MarkdownBasicText
+
+@Composable
+internal fun MarkdownCodeTopBar(
+    language: String?,
+    code: String,
+    modifier: Modifier = Modifier,
+) {
+    @Suppress("DEPRECATION") val clipboardManager = LocalClipboardManager.current
+    val textColor = LocalMarkdownColors.current.text
+    val a11yLabels = LocalMarkdownA11yLabels.current
+
+    Row(
+        modifier = modifier
+            .fillMaxWidth()
+            .padding(horizontal = 8.dp, vertical = 4.dp),
+        horizontalArrangement = Arrangement.SpaceBetween,
+        verticalAlignment = Alignment.CenterVertically
+    ) {
+        val languageLabel = language?.uppercase() ?: a11yLabels.codeFallbackLanguage
+        // Screen readers tend to spell out all-caps letter-by-letter; announce
+        // the original-cased language (or fallback) for a better experience.
+        val languageAnnouncement = language?.takeIf { it.isNotBlank() } ?: a11yLabels.codeFallbackLanguage
+        MarkdownBasicText(
+            text = languageLabel,
+            modifier = Modifier.semantics { contentDescription = a11yLabels.codeLanguage(languageAnnouncement) },
+            style = androidx.compose.ui.text.TextStyle(
+                fontSize = 10.sp,
+                fontFamily = FontFamily.Monospace,
+                color = textColor.copy(alpha = 0.6f)
+            )
+        )
+
+        Box(
+            modifier = Modifier
+                .size(24.dp)
+                .clip(CircleShape)
+                .semantics {
+                    contentDescription = a11yLabels.copyCode
+                    role = Role.Button
+                }
+                .clickable(onClickLabel = a11yLabels.copyCode) {
+                    clipboardManager.setText(AnnotatedString(code))
+                },
+            contentAlignment = Alignment.Center
+        ) {
+            MarkdownBasicText(
+                text = "⧉",
+                style = androidx.compose.ui.text.TextStyle(
+                    fontSize = 14.sp,
+                    color = textColor.copy(alpha = 0.6f)
+                )
+            )
+        }
+    }
+}
\ No newline at end of file
diff --git a/app/src/main/vendor/com/mikepenz/markdown/compose/elements/MarkdownDivider.kt b/app/src/main/vendor/com/mikepenz/markdown/compose/elements/MarkdownDivider.kt
new file mode 100644
index 000000000..a5af1376b
--- /dev/null
+++ b/app/src/main/vendor/com/mikepenz/markdown/compose/elements/MarkdownDivider.kt
@@ -0,0 +1,58 @@
+package com.mikepenz.markdown.compose.elements
+
+import androidx.compose.foundation.background
+import androidx.compose.foundation.layout.Box
+import androidx.compose.foundation.layout.fillMaxHeight
+import androidx.compose.foundation.layout.fillMaxWidth
+import androidx.compose.foundation.layout.height
+import androidx.compose.foundation.layout.width
+import androidx.compose.runtime.Composable
+import androidx.compose.ui.Modifier
+import androidx.compose.ui.graphics.Color
+import androidx.compose.ui.platform.LocalDensity
+import androidx.compose.ui.semantics.clearAndSetSemantics
+import androidx.compose.ui.unit.Dp
+import androidx.compose.ui.unit.dp
+import com.mikepenz.markdown.compose.LocalMarkdownColors
+import com.mikepenz.markdown.compose.LocalMarkdownDimens
+
+@Composable
+fun MarkdownDivider(
+    modifier: Modifier = Modifier,
+    color: Color = LocalMarkdownColors.current.dividerColor,
+    thickness: Dp = LocalMarkdownDimens.current.dividerThickness,
+) {
+    val targetThickness = if (thickness == Dp.Hairline) {
+        (1f / LocalDensity.current.density).dp
+    } else {
+        thickness
+    }
+    Box(
+        modifier
+            .clearAndSetSemantics {}
+            .fillMaxWidth()
+            .height(targetThickness)
+            .background(color = color)
+    )
+}
+
+
+@Composable
+fun VerticalMarkdownDivider(
+    modifier: Modifier = Modifier,
+    color: Color = LocalMarkdownColors.current.dividerColor,
+    thickness: Dp = LocalMarkdownDimens.current.dividerThickness,
+) {
+    val targetThickness = if (thickness == Dp.Hairline) {
+        (1f / LocalDensity.current.density).dp
+    } else {
+        thickness
+    }
+    Box(
+        modifier
+            .clearAndSetSemantics {}
+            .width(targetThickness)
+            .fillMaxHeight()
+            .background(color = color)
+    )
+}
diff --git a/app/src/main/vendor/com/mikepenz/markdown/compose/elements/MarkdownHeader.kt b/app/src/main/vendor/com/mikepenz/markdown/compose/elements/MarkdownHeader.kt
new file mode 100644
index 000000000..ce341cbec
--- /dev/null
+++ b/app/src/main/vendor/com/mikepenz/markdown/compose/elements/MarkdownHeader.kt
@@ -0,0 +1,26 @@
+package com.mikepenz.markdown.compose.elements
+
+import androidx.compose.runtime.Composable
+import androidx.compose.ui.Modifier
+import androidx.compose.ui.semantics.heading
+import androidx.compose.ui.semantics.semantics
+import androidx.compose.ui.text.TextStyle
+import org.intellij.markdown.IElementType
+import org.intellij.markdown.MarkdownTokenTypes
+import org.intellij.markdown.ast.ASTNode
+
+@Composable
+fun MarkdownHeader(
+    content: String,
+    node: ASTNode,
+    style: TextStyle,
+    contentChildType: IElementType = MarkdownTokenTypes.ATX_CONTENT,
+) = MarkdownText(
+    modifier = Modifier.semantics {
+        heading()
+    },
+    content = content,
+    node = node,
+    style = style,
+    contentChildType = contentChildType,
+)
diff --git a/app/src/main/vendor/com/mikepenz/markdown/compose/elements/MarkdownImage.kt b/app/src/main/vendor/com/mikepenz/markdown/compose/elements/MarkdownImage.kt
new file mode 100644
index 000000000..1ed1a5f93
--- /dev/null
+++ b/app/src/main/vendor/com/mikepenz/markdown/compose/elements/MarkdownImage.kt
@@ -0,0 +1,30 @@
+package com.mikepenz.markdown.compose.elements
+
+import androidx.compose.foundation.Image
+import androidx.compose.runtime.Composable
+import com.mikepenz.markdown.compose.LocalImageTransformer
+import com.mikepenz.markdown.compose.LocalReferenceLinkHandler
+import com.mikepenz.markdown.utils.resolveImageAlt
+import com.mikepenz.markdown.utils.resolveImageLink
+import org.intellij.markdown.ast.ASTNode
+
+@Composable
+fun MarkdownImage(content: String, node: ASTNode) {
+
+    val link = node.resolveImageLink(content, LocalReferenceLinkHandler.current) ?: return
+    val alt = node.resolveImageAlt(content)
+
+    LocalImageTransformer.current.transform(link)?.let { imageData ->
+        ImageAltTooltip(alt) {
+            Image(
+                painter = imageData.painter,
+                contentDescription = alt ?: imageData.contentDescription,
+                modifier = imageData.modifier,
+                alignment = imageData.alignment,
+                contentScale = imageData.contentScale,
+                alpha = imageData.alpha,
+                colorFilter = imageData.colorFilter
+            )
+        }
+    }
+}
diff --git a/app/src/main/vendor/com/mikepenz/markdown/compose/elements/MarkdownImageAltTooltip.kt b/app/src/main/vendor/com/mikepenz/markdown/compose/elements/MarkdownImageAltTooltip.kt
new file mode 100644
index 000000000..7332ea9ad
--- /dev/null
+++ b/app/src/main/vendor/com/mikepenz/markdown/compose/elements/MarkdownImageAltTooltip.kt
@@ -0,0 +1,103 @@
+package com.mikepenz.markdown.compose.elements
+
+import androidx.compose.animation.AnimatedVisibility
+import androidx.compose.animation.core.MutableTransitionState
+import androidx.compose.animation.fadeIn
+import androidx.compose.animation.fadeOut
+import androidx.compose.foundation.background
+import androidx.compose.foundation.hoverable
+import androidx.compose.foundation.interaction.MutableInteractionSource
+import androidx.compose.foundation.interaction.collectIsHoveredAsState
+import androidx.compose.foundation.layout.Box
+import androidx.compose.foundation.layout.padding
+import androidx.compose.foundation.shape.RoundedCornerShape
+import androidx.compose.foundation.text.BasicText
+import androidx.compose.runtime.Composable
+import androidx.compose.runtime.LaunchedEffect
+import androidx.compose.runtime.getValue
+import androidx.compose.runtime.remember
+import androidx.compose.ui.Modifier
+import androidx.compose.ui.graphics.Color
+import androidx.compose.ui.text.TextStyle
+import androidx.compose.ui.unit.IntOffset
+import androidx.compose.ui.unit.IntRect
+import androidx.compose.ui.unit.IntSize
+import androidx.compose.ui.unit.LayoutDirection
+import androidx.compose.ui.unit.dp
+import androidx.compose.ui.unit.sp
+import androidx.compose.ui.window.Popup
+import androidx.compose.ui.window.PopupPositionProvider
+import com.mikepenz.markdown.compose.LocalMarkdownAnnotator
+import kotlinx.coroutines.delay
+
+/**
+ * Wraps [content] with a small popup that surfaces [alt] on hover, gated by
+ * [com.mikepenz.markdown.model.MarkdownAnnotatorConfig.showImageAltTooltip].
+ * The hover dwell time is read from
+ * [com.mikepenz.markdown.model.MarkdownAnnotatorConfig.imageAltTooltipHoverDelayMs].
+ */
+@Composable
+fun ImageAltTooltip(alt: String?, content: @Composable () -> Unit) {
+    val config = LocalMarkdownAnnotator.current.config
+    if (!config.showImageAltTooltip || alt.isNullOrBlank()) {
+        content()
+        return
+    }
+
+    val interactionSource = remember { MutableInteractionSource() }
+    val isHovered by interactionSource.collectIsHoveredAsState()
+    val transitionState = remember { MutableTransitionState(false) }
+
+    LaunchedEffect(isHovered, config.imageAltTooltipHoverDelayMs) {
+        if (isHovered) {
+            delay(config.imageAltTooltipHoverDelayMs)
+            transitionState.targetState = true
+        } else {
+            transitionState.targetState = false
+        }
+    }
+
+    // Keep the popup mounted while either the target is visible or the
+    // exit animation is still running, so fadeOut can play before unmount.
+    val mounted = transitionState.currentState || transitionState.targetState
+
+    Box(modifier = Modifier.hoverable(interactionSource)) {
+        content()
+        if (mounted) {
+            Popup(popupPositionProvider = AnchorBelowPositionProvider) {
+                AnimatedVisibility(
+                    visibleState = transitionState,
+                    enter = fadeIn(),
+                    exit = fadeOut(),
+                ) {
+                    Box(
+                        modifier = Modifier
+                            .background(Color(0xCC000000), RoundedCornerShape(4.dp))
+                            .padding(horizontal = 8.dp, vertical = 4.dp),
+                    ) {
+                        BasicText(
+                            text = alt,
+                            style = TextStyle(color = Color.White, fontSize = 12.sp),
+                        )
+                    }
+                }
+            }
+        }
+    }
+}
+
+private val AnchorBelowPositionProvider = object : PopupPositionProvider {
+    override fun calculatePosition(
+        anchorBounds: IntRect,
+        windowSize: IntSize,
+        layoutDirection: LayoutDirection,
+        popupContentSize: IntSize,
+    ): IntOffset {
+        val x = (anchorBounds.left + (anchorBounds.width - popupContentSize.width) / 2)
+            .coerceIn(0, (windowSize.width - popupContentSize.width).coerceAtLeast(0))
+        val y = (anchorBounds.bottom + 4).coerceAtMost(
+            (windowSize.height - popupContentSize.height).coerceAtLeast(0)
+        )
+        return IntOffset(x, y)
+    }
+}
diff --git a/app/src/main/vendor/com/mikepenz/markdown/compose/elements/MarkdownInlineImage.kt b/app/src/main/vendor/com/mikepenz/markdown/compose/elements/MarkdownInlineImage.kt
new file mode 100644
index 000000000..109ec74aa
--- /dev/null
+++ b/app/src/main/vendor/com/mikepenz/markdown/compose/elements/MarkdownInlineImage.kt
@@ -0,0 +1,24 @@
+package com.mikepenz.markdown.compose.elements
+
+import androidx.compose.foundation.Image
+import androidx.compose.foundation.layout.fillMaxSize
+import androidx.compose.runtime.Composable
+import androidx.compose.ui.Modifier
+import com.mikepenz.markdown.compose.LocalImageTransformer
+import org.intellij.markdown.ast.ASTNode
+
+@Composable
+fun MarkdownInlineImage(link: String, node: ASTNode, alt: String? = null) {
+    val transformer = LocalImageTransformer.current
+    transformer.transform(link)?.let { imageData ->
+        Image(
+            painter = imageData.painter,
+            contentDescription = alt ?: imageData.contentDescription,
+            modifier = Modifier.fillMaxSize().then(imageData.modifier),
+            alignment = imageData.alignment,
+            contentScale = imageData.contentScale,
+            alpha = imageData.alpha,
+            colorFilter = imageData.colorFilter
+        )
+    }
+}
diff --git a/app/src/main/vendor/com/mikepenz/markdown/compose/elements/MarkdownList.kt b/app/src/main/vendor/com/mikepenz/markdown/compose/elements/MarkdownList.kt
new file mode 100644
index 000000000..260c63f2d
--- /dev/null
+++ b/app/src/main/vendor/com/mikepenz/markdown/compose/elements/MarkdownList.kt
@@ -0,0 +1,247 @@
+package com.mikepenz.markdown.compose.elements
+
+import androidx.compose.foundation.layout.Box
+import androidx.compose.foundation.layout.Column
+import androidx.compose.foundation.layout.Row
+import androidx.compose.foundation.layout.RowScope
+import androidx.compose.foundation.layout.fillMaxWidth
+import androidx.compose.foundation.layout.padding
+import androidx.compose.runtime.Composable
+import androidx.compose.ui.Modifier
+import androidx.compose.ui.semantics.isTraversalGroup
+import androidx.compose.ui.semantics.semantics
+import androidx.compose.ui.text.TextStyle
+import com.mikepenz.markdown.compose.LocalBulletListHandler
+import com.mikepenz.markdown.compose.LocalMarkdownComponents
+import com.mikepenz.markdown.compose.LocalMarkdownPadding
+import com.mikepenz.markdown.compose.LocalMarkdownTypography
+import com.mikepenz.markdown.compose.LocalOrderedListHandler
+import com.mikepenz.markdown.compose.MarkdownElement
+import com.mikepenz.markdown.compose.components.MarkdownComponentModel
+import com.mikepenz.markdown.compose.components.MarkdownComponents
+import com.mikepenz.markdown.compose.elements.material.MarkdownBasicText
+import com.mikepenz.markdown.model.MarkdownPadding
+import com.mikepenz.markdown.model.MarkdownTypography
+import com.mikepenz.markdown.utils.getUnescapedTextInNode
+import kotlinx.collections.immutable.persistentMapOf
+import org.intellij.markdown.MarkdownElementTypes
+import org.intellij.markdown.MarkdownElementTypes.ORDERED_LIST
+import org.intellij.markdown.MarkdownElementTypes.UNORDERED_LIST
+import org.intellij.markdown.MarkdownTokenTypes.Companion.LIST_BULLET
+import org.intellij.markdown.MarkdownTokenTypes.Companion.LIST_NUMBER
+import org.intellij.markdown.ast.ASTNode
+import org.intellij.markdown.ast.findChildOfType
+import org.intellij.markdown.flavours.gfm.GFMTokenTypes.CHECK_BOX
+
+/** key used to store the current depth in the [MarkdownComponentModel.extra] */
+private const val MARKDOWN_LIST_DEPTH_KEY = "markdown_list_depth"
+
+@Composable
+fun MarkdownListItems(
+    content: String,
+    node: ASTNode,
+    depth: Int = 0,
+    markerModifier: RowScope.() -> Modifier = { Modifier },
+    listModifier: RowScope.() -> Modifier = { Modifier },
+    bullet: @Composable (index: Int, listNumber: Int, child: ASTNode?) -> Unit,
+) {
+    val padding = LocalMarkdownPadding.current
+    val markdownComponents = LocalMarkdownComponents.current
+    val markdownTypography = LocalMarkdownTypography.current
+
+    Column(
+        modifier = Modifier.padding(
+            start = padding.listIndent * depth,
+            top = padding.list,
+            bottom = padding.list
+        )
+    ) {
+        // Retrieve initial list number to determine the starting number for ordered lists
+        // https://spec.commonmark.org/0.31.2/#start-number
+        val initialListNumber = node.findChildOfType(MarkdownElementTypes.LIST_ITEM)
+            ?.getUnescapedTextInNode(content)
+            ?.takeWhile(Char::isDigit)
+            ?.toIntOrNull()
+            ?: 1
+
+        var index = 0
+        node.children.forEach { child ->
+            if (child.type == MarkdownElementTypes.LIST_ITEM) {
+                MarkdownListItem(
+                    content = content,
+                    child = child,
+                    node = node,
+                    index = index,
+                    listNumber = initialListNumber,
+                    depth = depth,
+                    markdownComponents = markdownComponents,
+                    markdownTypography = markdownTypography,
+                    padding = padding,
+                    markerModifier = markerModifier,
+                    listModifier = listModifier,
+                    bullet = bullet
+                )
+                index++
+            }
+        }
+    }
+}
+
+/**
+ * Renders a single list item
+ */
+@Composable
+private fun MarkdownListItem(
+    content: String,
+    child: ASTNode,
+    node: ASTNode,
+    index: Int,
+    listNumber: Int,
+    depth: Int,
+    markdownComponents: MarkdownComponents,
+    markdownTypography: MarkdownTypography,
+    padding: MarkdownPadding,
+    markerModifier: RowScope.() -> Modifier,
+    listModifier: RowScope.() -> Modifier,
+    bullet: @Composable (index: Int, listNumber: Int, child: ASTNode?) -> Unit,
+) {
+    val checkboxNode = child.children.getOrNull(1)?.takeIf { it.type == CHECK_BOX }
+    val listIndicator = when (node.type) {
+        ORDERED_LIST -> child.findChildOfType(LIST_NUMBER)
+        UNORDERED_LIST -> child.findChildOfType(LIST_BULLET)
+        else -> null
+    }
+
+    Row(
+        modifier = Modifier
+            // Group marker + content as one traversal unit but preserve per-link a11y nodes inside.
+            .semantics { isTraversalGroup = true }
+            .fillMaxWidth()
+            .padding(top = padding.listItemTop, bottom = padding.listItemBottom)
+    ) {
+        // Render marker symbol (checkbox or bullet)
+        Box(modifier = markerModifier()) {
+            if (checkboxNode != null) {
+                val model = MarkdownComponentModel(
+                    content = content,
+                    node = checkboxNode,
+                    typography = markdownTypography,
+                    extra = persistentMapOf(MARKDOWN_LIST_DEPTH_KEY to depth + 1)
+                )
+                markdownComponents.checkbox.invoke(model)
+            } else {
+                bullet(index, listNumber, listIndicator)
+            }
+        }
+
+        // Render list item content
+        Column(modifier = listModifier()) {
+            child.children.forEach { nestedChild ->
+                MarkdownNestedListItem(
+                    nestedChild = nestedChild,
+                    content = content,
+                    depth = depth,
+                    markdownComponents = markdownComponents,
+                    markdownTypography = markdownTypography
+                )
+            }
+        }
+    }
+}
+
+/**
+ * Renders nested list item content
+ */
+@Composable
+private fun MarkdownNestedListItem(
+    nestedChild: ASTNode,
+    content: String,
+    depth: Int,
+    markdownComponents: MarkdownComponents,
+    markdownTypography: MarkdownTypography,
+) {
+    when (nestedChild.type) {
+        ORDERED_LIST -> {
+            val model = MarkdownComponentModel(
+                content = content,
+                node = nestedChild,
+                typography = markdownTypography,
+                extra = persistentMapOf(MARKDOWN_LIST_DEPTH_KEY to depth + 1)
+            )
+            markdownComponents.orderedList.invoke(model)
+        }
+
+        UNORDERED_LIST -> {
+            val model = MarkdownComponentModel(
+                content = content,
+                node = nestedChild,
+                typography = markdownTypography,
+                extra = persistentMapOf(MARKDOWN_LIST_DEPTH_KEY to depth + 1)
+            )
+            markdownComponents.unorderedList.invoke(model)
+        }
+
+        else -> {
+            MarkdownElement(
+                node = nestedChild,
+                components = markdownComponents,
+                content = content,
+                includeSpacer = false
+            )
+        }
+    }
+}
+
+@Composable
+fun MarkdownOrderedList(
+    content: String,
+    node: ASTNode,
+    style: TextStyle = LocalMarkdownTypography.current.ordered,
+    depth: Int = 0,
+    markerModifier: RowScope.() -> Modifier = { Modifier },
+    listModifier: RowScope.() -> Modifier = { Modifier },
+) {
+    val orderedListHandler = LocalOrderedListHandler.current
+    MarkdownListItems(content, node, depth, markerModifier, listModifier) { index, listNumber, child ->
+        MarkdownBasicText(
+            text = orderedListHandler.transform(
+                type = LIST_NUMBER,
+                bullet = child?.getUnescapedTextInNode(content),
+                index = index,
+                listNumber = listNumber,
+                depth = depth
+            ),
+            style = style,
+        )
+    }
+}
+
+@Composable
+fun MarkdownBulletList(
+    content: String,
+    node: ASTNode,
+    style: TextStyle = LocalMarkdownTypography.current.bullet,
+    depth: Int = 0,
+    markerModifier: RowScope.() -> Modifier = { Modifier },
+    listModifier: RowScope.() -> Modifier = { Modifier },
+) {
+    val bulletHandler = LocalBulletListHandler.current
+    MarkdownListItems(content, node, depth, markerModifier, listModifier) { index, listNumber, child ->
+        MarkdownBasicText(
+            text = bulletHandler.transform(
+                type = LIST_BULLET,
+                bullet = child?.getUnescapedTextInNode(content),
+                index = index,
+                listNumber = listNumber,
+                depth = depth
+            ),
+            style = style,
+        )
+    }
+}
+
+/**
+ * Retrieve the current list depth from the [MarkdownComponentModel]
+ */
+val MarkdownComponentModel.listDepth: Int
+    get() = (extra[MARKDOWN_LIST_DEPTH_KEY] as? Int) ?: 0
\ No newline at end of file
diff --git a/app/src/main/vendor/com/mikepenz/markdown/compose/elements/MarkdownParagraph.kt b/app/src/main/vendor/com/mikepenz/markdown/compose/elements/MarkdownParagraph.kt
new file mode 100644
index 000000000..4db0cda45
--- /dev/null
+++ b/app/src/main/vendor/com/mikepenz/markdown/compose/elements/MarkdownParagraph.kt
@@ -0,0 +1,34 @@
+package com.mikepenz.markdown.compose.elements
+
+import androidx.compose.runtime.Composable
+import androidx.compose.ui.Modifier
+import androidx.compose.ui.text.TextStyle
+import androidx.compose.ui.text.buildAnnotatedString
+import com.mikepenz.markdown.annotator.AnnotatorSettings
+import com.mikepenz.markdown.annotator.annotatorSettings
+import com.mikepenz.markdown.annotator.buildMarkdownAnnotatedString
+import com.mikepenz.markdown.compose.LocalMarkdownTypography
+import org.intellij.markdown.ast.ASTNode
+
+@Composable
+fun MarkdownParagraph(
+    content: String,
+    node: ASTNode,
+    modifier: Modifier = Modifier,
+    style: TextStyle = LocalMarkdownTypography.current.paragraph,
+    annotatorSettings: AnnotatorSettings = annotatorSettings(),
+) {
+    val styledText = buildAnnotatedString {
+        pushStyle(style.toSpanStyle())
+        buildMarkdownAnnotatedString(content = content, node = node, annotatorSettings = annotatorSettings)
+        pop()
+    }
+
+    MarkdownText(
+        content = styledText,
+        node = node,
+        modifier = modifier,
+        style = style,
+        sourceContent = content,
+    )
+}
diff --git a/app/src/main/vendor/com/mikepenz/markdown/compose/elements/MarkdownTable.kt b/app/src/main/vendor/com/mikepenz/markdown/compose/elements/MarkdownTable.kt
new file mode 100644
index 000000000..e3f79da73
--- /dev/null
+++ b/app/src/main/vendor/com/mikepenz/markdown/compose/elements/MarkdownTable.kt
@@ -0,0 +1,268 @@
+package com.mikepenz.markdown.compose.elements
+
+import androidx.compose.foundation.background
+import androidx.compose.foundation.horizontalScroll
+import androidx.compose.foundation.layout.BoxWithConstraints
+import androidx.compose.foundation.layout.Column
+import androidx.compose.foundation.layout.IntrinsicSize
+import androidx.compose.foundation.layout.Row
+import androidx.compose.foundation.layout.fillMaxWidth
+import androidx.compose.foundation.layout.height
+import androidx.compose.foundation.layout.padding
+import androidx.compose.foundation.layout.requiredWidth
+import androidx.compose.foundation.layout.widthIn
+import androidx.compose.foundation.rememberScrollState
+import androidx.compose.foundation.shape.RoundedCornerShape
+import androidx.compose.runtime.Composable
+import androidx.compose.runtime.CompositionLocalProvider
+import androidx.compose.runtime.compositionLocalOf
+import androidx.compose.runtime.mutableStateMapOf
+import androidx.compose.runtime.mutableStateOf
+import androidx.compose.runtime.remember
+import androidx.compose.ui.Alignment
+import androidx.compose.ui.Modifier
+import androidx.compose.ui.geometry.Size
+import androidx.compose.ui.layout.onPlaced
+import androidx.compose.ui.unit.toSize
+import androidx.compose.ui.platform.LocalDensity
+import androidx.compose.ui.semantics.CollectionInfo
+import androidx.compose.ui.semantics.CollectionItemInfo
+import androidx.compose.ui.semantics.collectionInfo
+import androidx.compose.ui.semantics.collectionItemInfo
+import androidx.compose.ui.semantics.heading
+import androidx.compose.ui.semantics.semantics
+import androidx.compose.ui.text.TextStyle
+import androidx.compose.ui.text.buildAnnotatedString
+import androidx.compose.ui.text.font.FontWeight
+import androidx.compose.ui.text.style.TextOverflow
+import androidx.compose.ui.unit.Dp
+import androidx.compose.ui.unit.times
+import com.mikepenz.markdown.annotator.AnnotatorSettings
+import com.mikepenz.markdown.annotator.annotatorSettings
+import com.mikepenz.markdown.annotator.buildMarkdownAnnotatedString
+import com.mikepenz.markdown.compose.LocalImageTransformer
+import com.mikepenz.markdown.compose.LocalImageWidth
+import com.mikepenz.markdown.compose.LocalMarkdownColors
+import com.mikepenz.markdown.compose.LocalMarkdownDimens
+import com.mikepenz.markdown.compose.LocalMarkdownInlineContent
+import com.mikepenz.markdown.compose.elements.material.MarkdownBasicText
+import kotlinx.collections.immutable.toPersistentMap
+import org.intellij.markdown.ast.ASTNode
+import org.intellij.markdown.ast.findChildOfType
+import org.intellij.markdown.flavours.gfm.GFMElementTypes.HEADER
+import org.intellij.markdown.flavours.gfm.GFMElementTypes.ROW
+import org.intellij.markdown.flavours.gfm.GFMTokenTypes.CELL
+import org.intellij.markdown.flavours.gfm.GFMTokenTypes.TABLE_SEPARATOR
+
+/**
+ * Internal hook so the table iteration can pass the current body row index
+ * (header is row 0, body rows start at 1) to [MarkdownTableRow] without
+ * breaking the public `rowBlock` lambda signature. Custom `rowBlock`
+ * implementations can read this to set their own collection semantics.
+ */
+val LocalTableRowIndex = compositionLocalOf { 1 }
+
+@Composable
+fun MarkdownTable(
+    content: String,
+    node: ASTNode,
+    style: TextStyle,
+    annotatorSettings: AnnotatorSettings = annotatorSettings(),
+    headerBlock: @Composable (String, ASTNode, Dp, TextStyle) -> Unit = { content, header, tableWidth, style ->
+        MarkdownTableHeader(
+            content = content, header = header, tableWidth = tableWidth, style = style, annotatorSettings = annotatorSettings,
+        )
+    },
+    rowBlock: @Composable (String, ASTNode, Dp, TextStyle) -> Unit = { content, header, tableWidth, style ->
+        MarkdownTableRow(
+            content = content, header = header, tableWidth = tableWidth, style = style, annotatorSettings = annotatorSettings,
+        )
+    },
+) {
+    val tableMaxWidth = LocalMarkdownDimens.current.tableMaxWidth
+    val tableCellWidth = LocalMarkdownDimens.current.tableCellWidth
+    val tableCornerSize = LocalMarkdownDimens.current.tableCornerSize
+
+    val columnsCount = remember(node) { node.findChildOfType(HEADER)?.children?.count { it.type == CELL } ?: 0 }
+    val rowsCount = remember(node) { node.children.count { it.type == ROW } + 1 /* header */ }
+    val tableWidth = columnsCount * tableCellWidth
+
+    val backgroundCodeColor = LocalMarkdownColors.current.tableBackground
+    BoxWithConstraints(
+        modifier = Modifier
+            .background(backgroundCodeColor, RoundedCornerShape(tableCornerSize))
+            .widthIn(max = tableMaxWidth)
+            .semantics {
+                collectionInfo = CollectionInfo(rowCount = rowsCount, columnCount = columnsCount)
+            }
+    ) {
+        val scrollable = maxWidth <= tableWidth
+        Column(
+            modifier = if (scrollable) {
+                Modifier.horizontalScroll(rememberScrollState()).requiredWidth(tableWidth)
+            } else Modifier.fillMaxWidth()
+        ) {
+            // Body rows start at semantic index 1 because the header occupies row 0.
+            var rowIndex = 1
+            node.children.forEach {
+                when (it.type) {
+                    HEADER -> headerBlock(content, it, tableWidth, style)
+                    ROW -> {
+                        CompositionLocalProvider(LocalTableRowIndex provides rowIndex) {
+                            rowBlock(content, it, tableWidth, style)
+                        }
+                        rowIndex++
+                    }
+                    TABLE_SEPARATOR -> MarkdownDivider()
+                }
+            }
+        }
+    }
+}
+
+@Composable
+fun MarkdownTableHeader(
+    content: String,
+    header: ASTNode,
+    tableWidth: Dp,
+    style: TextStyle,
+    verticalAlignment: Alignment.Vertical = Alignment.CenterVertically,
+    maxLines: Int = 1,
+    overflow: TextOverflow = TextOverflow.Ellipsis,
+    annotatorSettings: AnnotatorSettings = annotatorSettings(),
+) {
+    val tableCellPadding = LocalMarkdownDimens.current.tableCellPadding
+    Row(
+        verticalAlignment = verticalAlignment, modifier = Modifier.widthIn(tableWidth).height(IntrinsicSize.Max)
+    ) {
+        header.children.filter { it.type == CELL }.forEachIndexed { colIndex, cell ->
+            Column(
+                modifier = Modifier
+                    .padding(tableCellPadding)
+                    .weight(1f)
+                    .semantics {
+                        heading()
+                        collectionItemInfo = CollectionItemInfo(
+                            rowIndex = 0, rowSpan = 1,
+                            columnIndex = colIndex, columnSpan = 1,
+                        )
+                    },
+            ) {
+                MarkdownTableBasicText(
+                    content = content,
+                    cell = cell,
+                    style = style.copy(fontWeight = FontWeight.Bold),
+                    maxLines = maxLines,
+                    overflow = overflow,
+                    annotatorSettings = annotatorSettings,
+                )
+            }
+        }
+    }
+}
+
+@Composable
+fun MarkdownTableRow(
+    content: String,
+    header: ASTNode,
+    tableWidth: Dp,
+    style: TextStyle,
+    rowIndex: Int = LocalTableRowIndex.current,
+    verticalAlignment: Alignment.Vertical = Alignment.CenterVertically,
+    maxLines: Int = 1,
+    overflow: TextOverflow = TextOverflow.Ellipsis,
+    annotatorSettings: AnnotatorSettings = annotatorSettings(),
+) {
+    val tableCellPadding = LocalMarkdownDimens.current.tableCellPadding
+    Row(
+        verticalAlignment = verticalAlignment, modifier = Modifier.widthIn(tableWidth)
+    ) {
+        header.children.filter { it.type == CELL }.forEachIndexed { colIndex, cell ->
+            Column(
+                modifier = Modifier
+                    .padding(tableCellPadding)
+                    .weight(1f)
+                    .semantics {
+                        collectionItemInfo = CollectionItemInfo(
+                            rowIndex = rowIndex, rowSpan = 1,
+                            columnIndex = colIndex, columnSpan = 1,
+                        )
+                    },
+            ) {
+                MarkdownTableBasicText(
+                    content = content,
+                    cell = cell,
+                    style = style,
+                    maxLines = maxLines,
+                    overflow = overflow,
+                    annotatorSettings = annotatorSettings,
+                )
+            }
+        }
+    }
+}
+
+/**
+ * Renders an individual table cell.
+ *
+ * GFM table cells contain inline content only (no block elements). This composable builds the
+ * cell's [androidx.compose.ui.text.AnnotatedString] via the standard inline annotator pipeline
+ * and resolves inline content from two sources:
+ *  - user-provided placeholders via [LocalMarkdownInlineContent]
+ *  - inline images (`![alt](url)`) found in the cell, rendered through [LocalImageTransformer]
+ *
+ * Images in cells are always rendered inline (the GFM spec disallows block content inside cells),
+ * so block-image promotion is intentionally disabled.
+ */
+@Composable
+fun MarkdownTableBasicText(
+    content: String,
+    cell: ASTNode,
+    style: TextStyle,
+    maxLines: Int = 1,
+    overflow: TextOverflow = TextOverflow.Ellipsis,
+    annotatorSettings: AnnotatorSettings = annotatorSettings(),
+) {
+    val text = buildAnnotatedString {
+        pushStyle(style.toSpanStyle())
+        buildMarkdownAnnotatedString(content = content, node = cell, annotatorSettings = annotatorSettings)
+        pop()
+    }
+
+    val transformer = LocalImageTransformer.current
+    val userInlineContent = LocalMarkdownInlineContent.current.inlineContent
+    val inlineImageWidth = LocalImageWidth.current
+    val density = LocalDensity.current
+
+    val containerSize = remember { mutableStateOf(Size.Unspecified) }
+    val imageSizeByLink = remember { mutableStateMapOf<String, Size>() }
+    val imageSizeByLinkSnapshot = imageSizeByLink.toPersistentMap()
+
+    val resolvedInlineContent = remember(
+        text, userInlineContent, transformer, inlineImageWidth,
+        containerSize.value, imageSizeByLinkSnapshot,
+    ) {
+        userInlineContent + buildImageInlineContent(
+            content = text,
+            node = cell,
+            transformer = transformer,
+            density = density,
+            containerSize = containerSize.value,
+            inlineImageWidth = inlineImageWidth,
+            imageSizeByLink = imageSizeByLinkSnapshot,
+            inlineImageAsBlock = false,
+            imageSizeChanged = { link, size -> imageSizeByLink += (link to size) },
+        )
+    }
+
+    MarkdownBasicText(
+        text = text,
+        modifier = Modifier.onPlaced { coords ->
+            coords.parentLayoutCoordinates?.also { containerSize.value = it.size.toSize() }
+        },
+        style = style,
+        maxLines = maxLines,
+        overflow = overflow,
+        inlineContent = resolvedInlineContent,
+    )
+}
diff --git a/app/src/main/vendor/com/mikepenz/markdown/compose/elements/MarkdownText.kt b/app/src/main/vendor/com/mikepenz/markdown/compose/elements/MarkdownText.kt
new file mode 100644
index 000000000..b035e08a2
--- /dev/null
+++ b/app/src/main/vendor/com/mikepenz/markdown/compose/elements/MarkdownText.kt
@@ -0,0 +1,387 @@
+package com.mikepenz.markdown.compose.elements
+
+import androidx.compose.foundation.Image
+import androidx.compose.foundation.layout.Box
+import androidx.compose.foundation.layout.Column
+import androidx.compose.foundation.text.InlineTextContent
+import androidx.compose.runtime.Composable
+import androidx.compose.runtime.MutableState
+import androidx.compose.runtime.SideEffect
+import androidx.compose.runtime.derivedStateOf
+import androidx.compose.runtime.getValue
+import androidx.compose.runtime.mutableStateMapOf
+import androidx.compose.runtime.mutableStateOf
+import androidx.compose.runtime.remember
+import androidx.compose.ui.Modifier
+import androidx.compose.ui.geometry.Size
+import androidx.compose.ui.geometry.isUnspecified
+import androidx.compose.ui.graphics.Color
+import androidx.compose.ui.layout.onPlaced
+import androidx.compose.ui.platform.LocalDensity
+import androidx.compose.ui.semantics.isTraversalGroup
+import androidx.compose.ui.semantics.semantics
+import androidx.compose.ui.text.AnnotatedString
+import androidx.compose.ui.text.Placeholder
+import androidx.compose.ui.text.TextLayoutResult
+import androidx.compose.ui.text.TextStyle
+import androidx.compose.ui.text.buildAnnotatedString
+import androidx.compose.ui.unit.Density
+import androidx.compose.ui.unit.dp
+import androidx.compose.ui.unit.isSpecified
+import androidx.compose.ui.unit.toSize
+import com.mikepenz.markdown.annotator.AnnotatorSettings
+import com.mikepenz.markdown.annotator.annotatorSettings
+import com.mikepenz.markdown.annotator.buildMarkdownAnnotatedString
+import com.mikepenz.markdown.compose.LocalImageTransformer
+import com.mikepenz.markdown.compose.LocalImageWidth
+import com.mikepenz.markdown.compose.LocalMarkdownAnimations
+import com.mikepenz.markdown.compose.LocalMarkdownAnnotator
+import com.mikepenz.markdown.compose.LocalMarkdownColors
+import com.mikepenz.markdown.compose.LocalMarkdownComponents
+import com.mikepenz.markdown.compose.LocalMarkdownExtendedSpans
+import com.mikepenz.markdown.compose.LocalMarkdownInlineContent
+import com.mikepenz.markdown.compose.LocalMarkdownTypography
+import com.mikepenz.markdown.compose.components.MarkdownComponentModel
+import com.mikepenz.markdown.compose.elements.material.MarkdownBasicText
+import com.mikepenz.markdown.compose.extendedspans.ExtendedSpans
+import com.mikepenz.markdown.compose.extendedspans.drawBehind
+import com.mikepenz.markdown.model.ImageTransformer
+import com.mikepenz.markdown.model.ImageWidth
+import com.mikepenz.markdown.model.MarkdownAnnotatorConfig
+import com.mikepenz.markdown.utils.MARKDOWN_TAG_IMAGE_URL
+import com.mikepenz.markdown.utils.toPxOrZero
+import org.intellij.markdown.IElementType
+import org.intellij.markdown.MarkdownElementTypes
+import org.intellij.markdown.ast.ASTNode
+import org.intellij.markdown.ast.findChildOfType
+
+@Composable
+fun MarkdownText(
+    content: String,
+    node: ASTNode,
+    modifier: Modifier = Modifier,
+    style: TextStyle = LocalMarkdownTypography.current.text,
+) {
+    MarkdownText(AnnotatedString(content), node, modifier, style, sourceContent = content)
+}
+
+@Composable
+fun MarkdownText(
+    content: String,
+    node: ASTNode,
+    style: TextStyle,
+    modifier: Modifier = Modifier,
+    contentChildType: IElementType? = null,
+    annotatorSettings: AnnotatorSettings = annotatorSettings(),
+) {
+    val childNode = contentChildType?.run(node::findChildOfType) ?: node
+    val styledText = buildAnnotatedString {
+        pushStyle(style.toSpanStyle())
+        buildMarkdownAnnotatedString(
+            content = content,
+            node = childNode,
+            annotatorSettings = annotatorSettings
+        )
+        pop()
+    }
+
+    MarkdownText(content = styledText, node = node, modifier = modifier, style = style, sourceContent = content)
+}
+
+@Composable
+fun MarkdownText(
+    content: AnnotatedString,
+    node: ASTNode,
+    modifier: Modifier = Modifier,
+    style: TextStyle = LocalMarkdownTypography.current.text,
+    extendedSpans: ExtendedSpans? = LocalMarkdownExtendedSpans.current.extendedSpans?.invoke(),
+    sourceContent: String? = null,
+) {
+    MarkdownText(
+        content = content,
+        node = node,
+        modifier = modifier,
+        style = style,
+        onTextLayout = null,
+        sourceContent = sourceContent,
+        extendedSpans = extendedSpans,
+    )
+}
+
+@Composable
+fun MarkdownText(
+    content: AnnotatedString,
+    node: ASTNode,
+    modifier: Modifier = Modifier,
+    style: TextStyle = LocalMarkdownTypography.current.text,
+    onTextLayout: ((TextLayoutResult, Color?) -> Unit)?,
+    sourceContent: String? = null,
+    extendedSpans: ExtendedSpans? = null,
+) {
+    val baseColor = LocalMarkdownColors.current.text
+    val animations = LocalMarkdownAnimations.current
+    val transformer = LocalImageTransformer.current
+    val inlineContent = LocalMarkdownInlineContent.current
+    val inlineImageWidth = LocalImageWidth.current
+    val density = LocalDensity.current
+    val annotatorConfig = LocalMarkdownAnnotator.current.config
+
+    val layoutResult: MutableState<TextLayoutResult?> = remember { mutableStateOf(null) }
+    val containerSize = remember { mutableStateOf(Size.Unspecified) }
+    val imageSizeByLink = remember { mutableStateMapOf<String, Size>() }
+
+    // Resolved line height in pixels; used to decide whether an image
+    // should be inline or promoted to a block element. Resolves `sp`, `em`,
+    // and unspecified units without crashing (`toPx()` only supports `sp`).
+    val lineHeightPx = with(density) {
+        // `em` is relative to the font size, so resolve that to px first.
+        val fontSizePx = toPxOrZero(style.fontSize, relativeToPx = 0f)
+        when {
+            style.lineHeight.isSpecified -> toPxOrZero(style.lineHeight, relativeToPx = fontSizePx)
+            else -> fontSizePx
+        }
+    }
+
+    val inlineImageAsBlock = annotatorConfig.inlineImageAsBlock
+    val imageNodes = remember(node) { collectImageNodes(node) }
+    // Wrap the build in derivedStateOf so chatty image-size updates from
+    // imageSizeByLink only invalidate downstream when the resolved content
+    // or block-range list actually changes.
+    val resolved by remember(
+        node,
+        inlineContent.inlineContent,
+        content,
+        transformer,
+        inlineImageWidth,
+        lineHeightPx,
+        inlineImageAsBlock,
+        imageNodes,
+        density,
+    ) {
+        derivedStateOf {
+            // Pass the SnapshotStateMap directly so the snapshot system tracks
+            // per-key reads. Only image URLs actually queried by this node
+            // invalidate the derived state.
+            val blocks = mutableListOf<BlockImageRange>()
+            val map = inlineContent.inlineContent + buildImageInlineContent(
+                content = content,
+                node = node,
+                transformer = transformer,
+                density = density,
+                containerSize = containerSize.value,
+                inlineImageWidth = inlineImageWidth,
+                imageSizeByLink = imageSizeByLink,
+                lineHeightPx = lineHeightPx,
+                inlineImageAsBlock = inlineImageAsBlock,
+                imageNodes = imageNodes,
+                onBlockImage = { range -> blocks += range },
+                imageSizeChanged = { link, size -> imageSizeByLink += (link to size) },
+            )
+            map to blocks.sortedBy { it.start }
+        }
+    }
+    val resolvedInlineContent = resolved.first
+    val blockImageRanges = resolved.second
+
+    val containerModifier: @Composable (Modifier) -> Modifier = { base ->
+        // Pin descendants (text + inline link nodes) to source order. Without this,
+        // TalkBack reorders interactive link nodes after non-interactive text — see #487.
+        base.semantics { isTraversalGroup = true }.onPlaced {
+            it.parentLayoutCoordinates?.also { coordinates ->
+                containerSize.value = coordinates.size.toSize()
+            }
+        }
+    }
+
+    val textSegment: @Composable (AnnotatedString, Modifier) -> Unit = { segment, segmentModifier ->
+        // Apply ExtendedSpans per-segment so the (0..0) marker the extender
+        // adds is preserved in each rendered slice and `drawBehind` aligns
+        // with the segment's own text layout.
+        val extended = if (extendedSpans != null) {
+            remember(segment) { extendedSpans.extend(segment) }
+        } else segment
+        val segmentDrawModifier = if (extendedSpans != null) {
+            segmentModifier.drawBehind(extendedSpans)
+        } else segmentModifier
+        val hasSegmentLinks = segment.getLinkAnnotations(0, segment.length).isNotEmpty()
+        val finalModifier = if (hasSegmentLinks) {
+            segmentDrawModifier.semantics(mergeDescendants = true) { }
+        } else {
+            segmentDrawModifier
+        }
+        MarkdownBasicText(
+            text = extended,
+            modifier = finalModifier.let { animations.animateTextSize(it) },
+            style = style,
+            inlineContent = resolvedInlineContent,
+            onTextLayout = { result ->
+                layoutResult.value = result
+                extendedSpans?.onTextLayout(result, baseColor)
+                onTextLayout?.invoke(result, baseColor)
+            }
+        )
+    }
+
+    if (blockImageRanges.isEmpty()) {
+        val hasLinks = content.getLinkAnnotations(0, content.length).isNotEmpty()
+        if (hasLinks) {
+            Box(modifier = containerModifier(modifier)) {
+                textSegment(content, Modifier)
+            }
+        } else {
+            textSegment(content, modifier.onPlaced {
+                it.parentLayoutCoordinates?.also { coordinates ->
+                    containerSize.value = coordinates.size.toSize()
+                }
+            })
+        }
+    } else {
+        val components = LocalMarkdownComponents.current
+        val typography = LocalMarkdownTypography.current
+        Column(modifier = containerModifier(modifier)) {
+            var cursor = 0
+            blockImageRanges.forEach { range ->
+                if (range.start > cursor) {
+                    textSegment(content.subSequence(cursor, range.start), Modifier)
+                }
+                if (sourceContent != null && range.imageNode != null) {
+                    components.image(MarkdownComponentModel(sourceContent, range.imageNode, typography))
+                } else {
+                    BlockFallbackImage(range.url)
+                }
+                cursor = range.end
+            }
+            if (cursor < content.length) {
+                textSegment(content.subSequence(cursor, content.length), Modifier)
+            }
+        }
+    }
+}
+
+internal fun collectImageNodes(root: ASTNode): List<ASTNode> {
+    val list = mutableListOf<ASTNode>()
+    fun visit(n: ASTNode) {
+        if (n.type == MarkdownElementTypes.IMAGE) list += n
+        n.children.forEach { visit(it) }
+    }
+    visit(root)
+    return list
+}
+
+internal data class BlockImageRange(val url: String, val start: Int, val end: Int, val imageNode: ASTNode?)
+
+@Composable
+private fun BlockFallbackImage(url: String) {
+    LocalImageTransformer.current.transform(url)?.let { imageData ->
+        Image(
+            painter = imageData.painter,
+            contentDescription = imageData.contentDescription,
+            modifier = imageData.modifier,
+            alignment = imageData.alignment,
+            contentScale = imageData.contentScale,
+            alpha = imageData.alpha,
+            colorFilter = imageData.colorFilter,
+        )
+    }
+}
+
+internal fun buildImageInlineContent(
+    content: AnnotatedString,
+    node: ASTNode,
+    transformer: ImageTransformer,
+    density: Density,
+    containerSize: Size,
+    inlineImageWidth: ImageWidth,
+    imageSizeByLink: Map<String, Size>,
+    defaultImageSize: Size = Size.Unspecified,
+    lineHeightPx: Float = 0f,
+    inlineImageAsBlock: Boolean = true,
+    imageNodes: List<ASTNode> = emptyList(),
+    onBlockImage: ((BlockImageRange) -> Unit)? = null,
+    imageSizeChanged: ((link: String, Size) -> Unit)? = null,
+): Map<String, InlineTextContent> {
+    val annotations = content.getStringAnnotations(0, content.length)
+        .filter { it.item.startsWith("${MARKDOWN_TAG_IMAGE_URL}_") }
+        .sortedBy { it.start }
+
+    fun shouldPromote(url: String): Boolean {
+        val imageSize = imageSizeByLink[url] ?: defaultImageSize
+        return inlineImageAsBlock &&
+                lineHeightPx > 0f &&
+                !imageSize.isUnspecified &&
+                imageSize.height > lineHeightPx * MarkdownAnnotatorConfig.BLOCK_FALLBACK_LINE_MULTIPLIER
+    }
+
+    annotations.forEachIndexed { index, annotation ->
+        val url = annotation.item.removePrefix("${MARKDOWN_TAG_IMAGE_URL}_")
+        if (shouldPromote(url)) {
+            onBlockImage?.invoke(
+                BlockImageRange(
+                    url = url,
+                    start = annotation.start,
+                    end = annotation.end,
+                    imageNode = imageNodes.getOrNull(index),
+                )
+            )
+        }
+    }
+
+    val byTag = annotations.groupBy { it.item }
+    return byTag.mapNotNull { (tag, _) ->
+        val url = tag.removePrefix("${MARKDOWN_TAG_IMAGE_URL}_")
+        if (shouldPromote(url)) return@mapNotNull null
+
+        val imageSize = imageSizeByLink[url] ?: defaultImageSize
+        val config = transformer.placeholderConfig(
+            url,
+            density,
+            containerSize,
+            inlineImageWidth,
+            imageSize,
+            imageSizeChanged,
+        )
+
+        // Config size is in DP, convert to SP for Placeholder TextUnit
+        tag to InlineTextContent(
+            Placeholder(
+                width = with(density) { config.size.width.dp.toSp() },
+                height = with(density) { config.size.height.dp.toSp() },
+                placeholderVerticalAlign = config.verticalAlign
+            )
+        ) { link ->
+            // Render the image and observe its intrinsic size
+            MarkdownInlineImageWithSize(
+                link = link,
+                node = node,
+                transformer = transformer,
+                density = density,
+                onSizeDetected = { detectedSize ->
+                    // Update size cache when image loads
+                    imageSizeChanged?.invoke(url, detectedSize)
+                }
+            )
+        }
+    }.toMap()
+}
+
+@Composable
+private fun MarkdownInlineImageWithSize(
+    link: String,
+    node: ASTNode,
+    transformer: ImageTransformer,
+    density: Density,
+    onSizeDetected: (Size) -> Unit,
+) {
+    val imageData = transformer.transform(link)
+
+    // Detect intrinsic size when painter becomes available
+    val intrinsicSize = imageData?.let { transformer.intrinsicSize(it.painter) } ?: Size.Unspecified
+    if (intrinsicSize != Size.Unspecified) {
+        SideEffect { onSizeDetected(intrinsicSize) }
+    }
+
+    // Delegate to the customizable component
+    LocalMarkdownComponents.current.inlineImage(
+        MarkdownComponentModel(link, node, LocalMarkdownTypography.current)
+    )
+}
diff --git a/app/src/main/vendor/com/mikepenz/markdown/compose/elements/material/TextWrapper.kt b/app/src/main/vendor/com/mikepenz/markdown/compose/elements/material/TextWrapper.kt
new file mode 100644
index 000000000..c7150b088
--- /dev/null
+++ b/app/src/main/vendor/com/mikepenz/markdown/compose/elements/material/TextWrapper.kt
@@ -0,0 +1,123 @@
+package com.mikepenz.markdown.compose.elements.material
+
+import androidx.compose.foundation.text.BasicText
+import androidx.compose.foundation.text.InlineTextContent
+import androidx.compose.runtime.Composable
+import androidx.compose.ui.Modifier
+import androidx.compose.ui.graphics.Color
+import androidx.compose.ui.graphics.isSpecified
+import androidx.compose.ui.text.AnnotatedString
+import androidx.compose.ui.text.TextLayoutResult
+import androidx.compose.ui.text.TextStyle
+import androidx.compose.ui.text.font.FontFamily
+import androidx.compose.ui.text.font.FontStyle
+import androidx.compose.ui.text.font.FontWeight
+import androidx.compose.ui.text.style.TextAlign
+import androidx.compose.ui.text.style.TextDecoration
+import androidx.compose.ui.text.style.TextOverflow
+import androidx.compose.ui.unit.TextUnit
+import com.mikepenz.markdown.compose.LocalMarkdownColors
+
+@Composable
+internal fun MarkdownBasicText(
+    text: String,
+    style: TextStyle,
+    modifier: Modifier = Modifier,
+    color: Color = Color.Unspecified,
+    fontSize: TextUnit = TextUnit.Unspecified,
+    fontStyle: FontStyle? = null,
+    fontWeight: FontWeight? = null,
+    fontFamily: FontFamily? = null,
+    letterSpacing: TextUnit = TextUnit.Unspecified,
+    textDecoration: TextDecoration? = null,
+    textAlign: TextAlign = TextAlign.Unspecified,
+    lineHeight: TextUnit = TextUnit.Unspecified,
+    overflow: TextOverflow = TextOverflow.Clip,
+    softWrap: Boolean = true,
+    maxLines: Int = Int.MAX_VALUE,
+    minLines: Int = 1,
+    onTextLayout: ((TextLayoutResult) -> Unit)? = null,
+) {
+    // Note: This component is ported over from Material2 Text - to remove the dependency on Material
+    val overrideColorOrUnspecified: Color = if (color.isSpecified) {
+        color
+    } else if (style.color.isSpecified) {
+        style.color
+    } else {
+        LocalMarkdownColors.current.text
+    }
+
+    BasicText(
+        text = text,
+        modifier = modifier,
+        style = style.merge(
+            fontSize = fontSize,
+            fontWeight = fontWeight,
+            textAlign = textAlign,
+            lineHeight = lineHeight,
+            fontFamily = fontFamily,
+            textDecoration = textDecoration,
+            fontStyle = fontStyle,
+            letterSpacing = letterSpacing
+        ),
+        onTextLayout = onTextLayout,
+        overflow = overflow,
+        softWrap = softWrap,
+        maxLines = maxLines,
+        minLines = minLines,
+        color = { overrideColorOrUnspecified }
+    )
+}
+
+@Composable
+fun MarkdownBasicText(
+    text: AnnotatedString,
+    style: TextStyle,
+    modifier: Modifier = Modifier,
+    color: Color = Color.Unspecified,
+    fontSize: TextUnit = TextUnit.Unspecified,
+    fontStyle: FontStyle? = null,
+    fontWeight: FontWeight? = null,
+    fontFamily: FontFamily? = null,
+    letterSpacing: TextUnit = TextUnit.Unspecified,
+    textDecoration: TextDecoration? = null,
+    textAlign: TextAlign = TextAlign.Unspecified,
+    lineHeight: TextUnit = TextUnit.Unspecified,
+    overflow: TextOverflow = TextOverflow.Clip,
+    softWrap: Boolean = true,
+    maxLines: Int = Int.MAX_VALUE,
+    minLines: Int = 1,
+    inlineContent: Map<String, InlineTextContent> = mapOf(),
+    onTextLayout: (TextLayoutResult) -> Unit = {},
+) {
+    // Note: This component is ported over from Material2 Text - to remove the dependency on Material
+    val overrideColorOrUnspecified = if (color.isSpecified) {
+        color
+    } else if (style.color.isSpecified) {
+        style.color
+    } else {
+        LocalMarkdownColors.current.text
+    }
+
+    BasicText(
+        text = text,
+        modifier = modifier,
+        style = style.merge(
+            fontSize = fontSize,
+            fontWeight = fontWeight,
+            textAlign = textAlign,
+            lineHeight = lineHeight,
+            fontFamily = fontFamily,
+            textDecoration = textDecoration,
+            fontStyle = fontStyle,
+            letterSpacing = letterSpacing
+        ),
+        onTextLayout = onTextLayout,
+        overflow = overflow,
+        softWrap = softWrap,
+        maxLines = maxLines,
+        minLines = minLines,
+        inlineContent = inlineContent,
+        color = { overrideColorOrUnspecified }
+    )
+}
diff --git a/app/src/main/vendor/com/mikepenz/markdown/compose/extendedspans/ExtendedSpanPainter.kt b/app/src/main/vendor/com/mikepenz/markdown/compose/extendedspans/ExtendedSpanPainter.kt
new file mode 100644
index 000000000..852917300
--- /dev/null
+++ b/app/src/main/vendor/com/mikepenz/markdown/compose/extendedspans/ExtendedSpanPainter.kt
@@ -0,0 +1,107 @@
+// Copyright 2023, Saket Narayan
+// SPDX-License-Identifier: Apache-2.0
+// https://github.com/saket/extended-spans
+package com.mikepenz.markdown.compose.extendedspans
+
+import androidx.compose.ui.geometry.Rect
+import androidx.compose.ui.graphics.Color
+import androidx.compose.ui.graphics.drawscope.DrawScope
+import androidx.compose.ui.text.AnnotatedString
+import androidx.compose.ui.text.LinkAnnotation
+import androidx.compose.ui.text.SpanStyle
+import androidx.compose.ui.text.TextLayoutResult
+import androidx.compose.ui.text.style.ResolvedTextDirection.Ltr
+import com.mikepenz.markdown.compose.extendedspans.internal.fastMapRange
+
+abstract class ExtendedSpanPainter {
+    /**
+     * Can be used for removing any existing spans from [text] so that they can be drawn manually.
+     */
+    abstract fun decorate(
+        span: SpanStyle,
+        start: Int,
+        end: Int,
+        text: AnnotatedString,
+        builder: AnnotatedString.Builder,
+    ): SpanStyle
+
+    /**
+     * Can be used for removing any existing text link styles from [text] so that they can be drawn manually.
+     */
+    abstract fun decorate(
+        linkAnnotation: LinkAnnotation,
+        start: Int,
+        end: Int,
+        text: AnnotatedString,
+        builder: AnnotatedString.Builder,
+    ): LinkAnnotation
+
+    abstract fun drawInstructionsFor(
+        layoutResult: TextLayoutResult,
+        color: Color? = null,
+    ): SpanDrawInstructions
+
+    /**
+     * Reads bounds for multiple lines. This can be removed once an
+     * [official API](https://issuetracker.google.com/u/1/issues/237289433) is released.
+     *
+     * When [flattenForFullParagraphs] is available, the bounds for one or multiple
+     * entire paragraphs is returned instead of separate lines if [startOffset]
+     * and [endOffset] represent the extreme ends of those paragraph.
+     */
+    protected fun TextLayoutResult.getBoundingBoxes(
+        startOffset: Int,
+        endOffset: Int,
+        flattenForFullParagraphs: Boolean = false,
+    ): List<Rect> {
+        if (startOffset == endOffset) {
+            return emptyList()
+        }
+
+        val startLineNum = getLineForOffset(startOffset)
+        val endLineNum = getLineForOffset(endOffset)
+
+        if (flattenForFullParagraphs) {
+            val isFullParagraph = (startLineNum != endLineNum)
+                    && getLineStart(startLineNum) == startOffset
+                    && multiParagraph.getLineEnd(endLineNum, visibleEnd = true) == endOffset
+
+            if (isFullParagraph) {
+                return listOf(
+                    Rect(
+                        top = getLineTop(startLineNum),
+                        bottom = getLineBottom(endLineNum),
+                        left = 0f,
+                        right = size.width.toFloat()
+                    )
+                )
+            }
+        }
+
+        // Compose UI does not offer any API for reading paragraph direction for an entire line.
+        // So this code assumes that all paragraphs in the text will have the same direction.
+        // It also assumes that this paragraph does not contain bi-directional text.
+        val isLtr = multiParagraph.getParagraphDirection(offset = layoutInput.text.lastIndex) == Ltr
+
+        return fastMapRange(startLineNum, endLineNum) { lineNum ->
+            Rect(
+                top = getLineTop(lineNum),
+                bottom = getLineBottom(lineNum),
+                left = if (lineNum == startLineNum) {
+                    getHorizontalPosition(startOffset, usePrimaryDirection = isLtr)
+                } else {
+                    getLineLeft(lineNum)
+                },
+                right = if (lineNum == endLineNum) {
+                    getHorizontalPosition(endOffset, usePrimaryDirection = isLtr)
+                } else {
+                    getLineRight(lineNum)
+                }
+            )
+        }
+    }
+}
+
+fun interface SpanDrawInstructions {
+    fun DrawScope.draw()
+}
\ No newline at end of file
diff --git a/app/src/main/vendor/com/mikepenz/markdown/compose/extendedspans/ExtendedSpans.kt b/app/src/main/vendor/com/mikepenz/markdown/compose/extendedspans/ExtendedSpans.kt
new file mode 100644
index 000000000..43922c863
--- /dev/null
+++ b/app/src/main/vendor/com/mikepenz/markdown/compose/extendedspans/ExtendedSpans.kt
@@ -0,0 +1,117 @@
+// Copyright 2023, Saket Narayan
+// SPDX-License-Identifier: Apache-2.0
+// https://github.com/saket/extended-spans
+@file:OptIn(ExperimentalTextApi::class)
+
+package com.mikepenz.markdown.compose.extendedspans
+
+import androidx.compose.runtime.Stable
+import androidx.compose.runtime.getValue
+import androidx.compose.runtime.mutableStateOf
+import androidx.compose.runtime.setValue
+import androidx.compose.ui.Modifier
+import androidx.compose.ui.draw.drawBehind
+import androidx.compose.ui.graphics.Color
+import androidx.compose.ui.text.AnnotatedString
+import androidx.compose.ui.text.ExperimentalTextApi
+import androidx.compose.ui.text.LinkAnnotation
+import androidx.compose.ui.text.TextLayoutResult
+import androidx.compose.ui.text.buildAnnotatedString
+import androidx.compose.ui.util.fastFold
+import androidx.compose.ui.util.fastForEach
+import androidx.compose.ui.util.fastMap
+
+@Stable
+class ExtendedSpans(
+    vararg painters: ExtendedSpanPainter,
+) {
+    private val painters = painters.toList()
+    internal var drawInstructions by mutableStateOf<List<SpanDrawInstructions>>(emptyList())
+        private set
+
+    /**
+     * Prepares [text] to be rendered by [painters]. [RoundedCornerSpanPainter] and [SquigglyUnderlineSpanPainter]
+     * use this for removing background and underline spans so that they can be drawn manually.
+     */
+    fun extend(text: AnnotatedString): AnnotatedString {
+        return buildAnnotatedString {
+            append(text.text)
+
+            // For onTextLayout to be called if a new instance of ExtendedSpans is applied with the same text.
+            val uniqueKey = this@ExtendedSpans.hashCode().toString()
+            addStringAnnotation(
+                EXTENDED_SPANS_MARKER_TAG,
+                annotation = uniqueKey,
+                start = 0,
+                end = 0
+            )
+
+            text.spanStyles.fastForEach {
+                val decorated = painters.fastFold(initial = it.item) { updated, painter ->
+                    painter.decorate(updated, it.start, it.end, text = text, builder = this)
+                }
+                addStyle(decorated, it.start, it.end)
+            }
+            text.paragraphStyles.fastForEach {
+                addStyle(it.item, it.start, it.end)
+            }
+            text.getStringAnnotations(start = 0, end = text.length).fastForEach {
+                addStringAnnotation(
+                    tag = it.tag,
+                    annotation = it.item,
+                    start = it.start,
+                    end = it.end
+                )
+            }
+            text.getTtsAnnotations(start = 0, end = text.length).fastForEach {
+                addTtsAnnotation(it.item, it.start, it.end)
+            }
+            @Suppress("DEPRECATION")
+            text.getUrlAnnotations(start = 0, end = text.length).fastForEach {
+                addUrlAnnotation(it.item, it.start, it.end)
+            }
+            text.getLinkAnnotations(start = 0, end = text.length).fastForEach { range ->
+                val decorated = painters.fastFold(initial = range.item) { updated, painter ->
+                    painter.decorate(updated, range.start, range.end, text = text, builder = this)
+                }
+
+                when (decorated) {
+                    is LinkAnnotation.Url -> addLink(decorated, range.start, range.end)
+                    is LinkAnnotation.Clickable -> addLink(decorated, range.start, range.end)
+                }
+            }
+        }
+    }
+
+    fun onTextLayout(layoutResult: TextLayoutResult, color: Color? = null) {
+        layoutResult.checkIfExtendWasCalled()
+        drawInstructions = painters.fastMap {
+            it.drawInstructionsFor(layoutResult, color)
+        }
+    }
+
+    private fun TextLayoutResult.checkIfExtendWasCalled() {
+        val wasExtendCalled = layoutInput.text.getStringAnnotations(
+            tag = EXTENDED_SPANS_MARKER_TAG,
+            start = 0,
+            end = 0
+        ).isNotEmpty()
+        check(wasExtendCalled) {
+            "ExtendedSpans#extend(AnnotatedString) wasn't called for this Text()."
+        }
+    }
+
+    companion object {
+        private const val EXTENDED_SPANS_MARKER_TAG = "extended_spans_marker"
+    }
+}
+
+fun Modifier.drawBehind(spans: ExtendedSpans): Modifier {
+    return drawBehind {
+        spans.drawInstructions.fastForEach { instructions ->
+            with(instructions) {
+                draw()
+            }
+        }
+    }
+}
diff --git a/app/src/main/vendor/com/mikepenz/markdown/compose/extendedspans/RoundedCornerSpanPainter.kt b/app/src/main/vendor/com/mikepenz/markdown/compose/extendedspans/RoundedCornerSpanPainter.kt
new file mode 100644
index 000000000..ccc64492e
--- /dev/null
+++ b/app/src/main/vendor/com/mikepenz/markdown/compose/extendedspans/RoundedCornerSpanPainter.kt
@@ -0,0 +1,147 @@
+// Copyright 2023, Saket Narayan
+// SPDX-License-Identifier: Apache-2.0
+// https://github.com/saket/extended-spans
+package com.mikepenz.markdown.compose.extendedspans
+
+import androidx.compose.ui.geometry.CornerRadius
+import androidx.compose.ui.geometry.RoundRect
+import androidx.compose.ui.graphics.Color
+import androidx.compose.ui.graphics.Path
+import androidx.compose.ui.graphics.drawscope.Fill
+import androidx.compose.ui.graphics.drawscope.Stroke
+import androidx.compose.ui.graphics.isUnspecified
+import androidx.compose.ui.text.AnnotatedString
+import androidx.compose.ui.text.LinkAnnotation
+import androidx.compose.ui.text.SpanStyle
+import androidx.compose.ui.text.TextLayoutResult
+import androidx.compose.ui.unit.TextUnit
+import androidx.compose.ui.unit.sp
+import androidx.compose.ui.util.fastForEach
+import androidx.compose.ui.util.fastForEachIndexed
+import com.mikepenz.markdown.compose.extendedspans.internal.deserializeToColor
+import com.mikepenz.markdown.compose.extendedspans.internal.serialize
+import com.mikepenz.markdown.compose.extendedspans.internal.update
+import com.mikepenz.markdown.utils.toPxOrZero
+
+/**
+ * Draws round rectangles behind text annotated using `SpanStyle(background = …)`.
+ *
+ * [topMargin] and [bottomMargin] are placeholder values that will be automatically calculated from font metrics
+ * in the future once Compose UI starts exposing them ([Issue tracker](https://issuetracker.google.com/u/1/issues/237428541)).
+ * In the meantime, you can calculate these depending upon your text's font size and line height.
+ */
+class RoundedCornerSpanPainter(
+    private val cornerRadius: TextUnit = 8.sp,
+    private val stroke: Stroke? = null,
+    private val padding: TextPaddingValues = TextPaddingValues(horizontal = 2.sp, vertical = 2.sp),
+    private val topMargin: TextUnit = 1.sp,
+    private val bottomMargin: TextUnit = 1.sp,
+) : ExtendedSpanPainter() {
+    private val path = Path()
+
+    override fun decorate(
+        span: SpanStyle,
+        start: Int,
+        end: Int,
+        text: AnnotatedString,
+        builder: AnnotatedString.Builder,
+    ): SpanStyle {
+        return if (span.background.isUnspecified) {
+            span
+        } else {
+            builder.addStringAnnotation(TAG, annotation = span.background.serialize(), start = start, end = end)
+            span.copy(background = Color.Unspecified)
+        }
+    }
+
+    override fun decorate(
+        linkAnnotation: LinkAnnotation,
+        start: Int,
+        end: Int,
+        text: AnnotatedString,
+        builder: AnnotatedString.Builder,
+    ): LinkAnnotation {
+        val defaultStyle = linkAnnotation.styles?.style
+        // return fast if background is not set
+        if (defaultStyle == null || defaultStyle.background.isUnspecified) return linkAnnotation
+        builder.addStringAnnotation(TAG, annotation = defaultStyle.background.serialize(), start = start, end = end)
+        val updatedTextLinkStyles = linkAnnotation.styles?.update { copy(background = Color.Unspecified) }
+        return when (linkAnnotation) {
+            is LinkAnnotation.Url -> {
+                LinkAnnotation.Url(linkAnnotation.url, updatedTextLinkStyles, linkAnnotation.linkInteractionListener)
+            }
+            is LinkAnnotation.Clickable -> {
+                LinkAnnotation.Clickable(linkAnnotation.tag, updatedTextLinkStyles, linkAnnotation.linkInteractionListener)
+            }
+            else -> throw IllegalStateException("Unsupported LinkAnnotation type: $linkAnnotation")
+        }
+    }
+
+    override fun drawInstructionsFor(layoutResult: TextLayoutResult, color: Color?): SpanDrawInstructions {
+        val text = layoutResult.layoutInput.text
+        val annotations = text.getStringAnnotations(TAG, start = 0, end = text.length)
+
+        return SpanDrawInstructions {
+            val cornerRadius = CornerRadius(toPxOrZero(cornerRadius))
+
+            annotations.fastForEach { annotation ->
+                val backgroundColor = annotation.item.deserializeToColor()!!
+                val boxes = layoutResult.getBoundingBoxes(
+                    startOffset = annotation.start,
+                    endOffset = annotation.end,
+                    flattenForFullParagraphs = true
+                )
+                boxes.fastForEachIndexed { index, box ->
+                    path.rewind()
+                    path.addRoundRect(
+                        RoundRect(
+                            rect = box.copy(
+                                left = box.left - toPxOrZero(padding.horizontal),
+                                right = box.right + toPxOrZero(padding.horizontal),
+                                top = box.top - toPxOrZero(padding.vertical) + toPxOrZero(topMargin),
+                                bottom = box.bottom + toPxOrZero(padding.vertical) - toPxOrZero(bottomMargin),
+                            ),
+                            topLeft = if (index == 0) cornerRadius else CornerRadius.Zero,
+                            bottomLeft = if (index == 0) cornerRadius else CornerRadius.Zero,
+                            topRight = if (index == boxes.lastIndex) cornerRadius else CornerRadius.Zero,
+                            bottomRight = if (index == boxes.lastIndex) cornerRadius else CornerRadius.Zero
+                        )
+                    )
+                    drawPath(
+                        path = path,
+                        color = backgroundColor,
+                        style = Fill
+                    )
+                    if (stroke != null) {
+                        drawPath(
+                            path = path,
+                            color = stroke.color(backgroundColor),
+                            style = Stroke(
+                                width = toPxOrZero(stroke.width),
+                            )
+                        )
+                    }
+                }
+            }
+        }
+    }
+
+    data class Stroke(
+        val color: (background: Color) -> Color,
+        val width: TextUnit = 1.sp,
+    ) {
+        constructor(color: Color, width: TextUnit = 1.sp) : this(
+            color = { color },
+            width = width
+        )
+    }
+
+    data class TextPaddingValues(
+        val horizontal: TextUnit = 0.sp,
+        val vertical: TextUnit = 0.sp,
+    )
+
+    companion object {
+        private const val TAG = "rounded_corner_span"
+    }
+}
\ No newline at end of file
diff --git a/app/src/main/vendor/com/mikepenz/markdown/compose/extendedspans/SquigglyUnderlineSpanPainter.kt b/app/src/main/vendor/com/mikepenz/markdown/compose/extendedspans/SquigglyUnderlineSpanPainter.kt
new file mode 100644
index 000000000..3469715f6
--- /dev/null
+++ b/app/src/main/vendor/com/mikepenz/markdown/compose/extendedspans/SquigglyUnderlineSpanPainter.kt
@@ -0,0 +1,224 @@
+// Copyright 2023, Saket Narayan
+// SPDX-License-Identifier: Apache-2.0
+// https://github.com/saket/extended-spans
+package com.mikepenz.markdown.compose.extendedspans
+
+import androidx.compose.animation.core.LinearEasing
+import androidx.compose.animation.core.RepeatMode
+import androidx.compose.animation.core.animateFloat
+import androidx.compose.animation.core.infiniteRepeatable
+import androidx.compose.animation.core.rememberInfiniteTransition
+import androidx.compose.animation.core.tween
+import androidx.compose.runtime.Composable
+import androidx.compose.runtime.Stable
+import androidx.compose.runtime.State
+import androidx.compose.runtime.mutableStateOf
+import androidx.compose.runtime.remember
+import androidx.compose.ui.geometry.Rect
+import androidx.compose.ui.graphics.Color
+import androidx.compose.ui.graphics.Path
+import androidx.compose.ui.graphics.PathEffect
+import androidx.compose.ui.graphics.StrokeCap
+import androidx.compose.ui.graphics.StrokeJoin
+import androidx.compose.ui.graphics.drawscope.Stroke
+import androidx.compose.ui.graphics.isSpecified
+import androidx.compose.ui.text.AnnotatedString
+import androidx.compose.ui.text.LinkAnnotation
+import androidx.compose.ui.text.SpanStyle
+import androidx.compose.ui.text.TextLayoutResult
+import androidx.compose.ui.text.style.TextDecoration.Companion.LineThrough
+import androidx.compose.ui.text.style.TextDecoration.Companion.None
+import androidx.compose.ui.text.style.TextDecoration.Companion.Underline
+import androidx.compose.ui.unit.Density
+import androidx.compose.ui.unit.TextUnit
+import androidx.compose.ui.unit.sp
+import androidx.compose.ui.util.fastFirstOrNull
+import androidx.compose.ui.util.fastForEach
+import com.mikepenz.markdown.compose.extendedspans.internal.colorOrNull
+import com.mikepenz.markdown.compose.extendedspans.internal.deserializeToColor
+import com.mikepenz.markdown.compose.extendedspans.internal.fastMapRange
+import com.mikepenz.markdown.compose.extendedspans.internal.serialize
+import com.mikepenz.markdown.compose.extendedspans.internal.update
+import com.mikepenz.markdown.utils.toPxOrZero
+import kotlin.math.PI
+import kotlin.math.ceil
+import kotlin.math.sin
+import kotlin.time.Duration
+import kotlin.time.Duration.Companion.seconds
+
+/**
+ * Draws squiggly underlines below text annotated using `SpanStyle(textDecoration = Underline)`.
+ * Inspired from [Sam Ruston's BuzzKill app](https://twitter.com/saketme/status/1310073763019530242).
+ *
+ * ```
+ *
+ *       _....._                                     _....._         ▲
+ *    ,="       "=.                               ,="       "=.   amplitude
+ *  ,"             ".                           ,"             ".    │
+ *,"                 ".,                     ,,"                 "., ▼
+ *""""""""""|""""""""""|."""""""""|""""""""".|""""""""""|""""""""""|
+ *                       ".               ."
+ *                         "._         _,"
+ *                            "-.....-"
+ *◀─────────────── Wavelength ──────────────▶
+ *
+ * ```
+ *
+ * @param animator See [rememberSquigglyUnderlineAnimator].
+ * @param bottomOffset Distance from a line's bottom coordinate.
+ */
+class SquigglyUnderlineSpanPainter(
+    private val width: TextUnit = 2.sp,
+    private val wavelength: TextUnit = 9.sp,
+    private val amplitude: TextUnit = 1.sp,
+    private val bottomOffset: TextUnit = 1.sp,
+    private val animator: SquigglyUnderlineAnimator = SquigglyUnderlineAnimator.NoOp,
+) : ExtendedSpanPainter() {
+    private val path = Path()
+
+    override fun decorate(
+        span: SpanStyle,
+        start: Int,
+        end: Int,
+        text: AnnotatedString,
+        builder: AnnotatedString.Builder,
+    ): SpanStyle {
+        val textDecoration = span.textDecoration
+        return if (textDecoration == null || Underline !in textDecoration) {
+            span
+        } else {
+            val textColor = text.spanStyles.fastFirstOrNull {
+                // I don't think this predicate will work for text annotated with overlapping
+                // multiple colors, but I'm not too interested in solving for that use case.
+                it.start <= start && it.end >= end && it.item.color.isSpecified
+            }?.item?.color ?: Color.Unspecified
+
+            builder.addStringAnnotation(TAG, annotation = textColor.serialize(), start = start, end = end)
+            span.copy(textDecoration = if (LineThrough in textDecoration) LineThrough else None)
+        }
+    }
+
+    override fun decorate(
+        linkAnnotation: LinkAnnotation,
+        start: Int,
+        end: Int,
+        text: AnnotatedString,
+        builder: AnnotatedString.Builder,
+    ): LinkAnnotation {
+        val defaultStyle = linkAnnotation.styles?.style
+        val textDecoration = defaultStyle?.textDecoration
+
+        // return fast if no text decoration is set
+        if (defaultStyle == null || textDecoration == null || Underline !in textDecoration) return linkAnnotation
+
+        val textColor = defaultStyle.color.colorOrNull() ?: text.spanStyles.fastFirstOrNull {
+            // I don't think this predicate will work for text annotated with overlapping
+            // multiple colors, but I'm not too interested in solving for that use case.
+            it.start <= start && it.end >= end && it.item.color.isSpecified
+        }?.item?.color ?: Color.Unspecified
+
+        builder.addStringAnnotation(TAG, annotation = textColor.serialize(), start = start, end = end)
+
+        val updatedTextLinkStyles = linkAnnotation.styles?.update { copy(textDecoration = if (LineThrough in textDecoration) LineThrough else None) }
+        return when (linkAnnotation) {
+            is LinkAnnotation.Url -> {
+                LinkAnnotation.Url(linkAnnotation.url, updatedTextLinkStyles, linkAnnotation.linkInteractionListener)
+            }
+            is LinkAnnotation.Clickable -> {
+                LinkAnnotation.Clickable(linkAnnotation.tag, updatedTextLinkStyles, linkAnnotation.linkInteractionListener)
+            }
+            else -> throw IllegalStateException("Unsupported LinkAnnotation type: $linkAnnotation")
+        }
+    }
+
+    override fun drawInstructionsFor(layoutResult: TextLayoutResult, color: Color?): SpanDrawInstructions {
+        val text = layoutResult.layoutInput.text
+        val annotations = text.getStringAnnotations(TAG, start = 0, end = text.length)
+
+        return SpanDrawInstructions {
+            val pathStyle = Stroke(
+                width = toPxOrZero(width),
+                join = StrokeJoin.Round,
+                cap = StrokeCap.Round,
+                pathEffect = PathEffect.cornerPathEffect(radius = toPxOrZero(wavelength)), // For slightly smoother waves.
+            )
+
+            annotations.fastForEach { annotation ->
+                val boxes = layoutResult.getBoundingBoxes(
+                    startOffset = annotation.start,
+                    endOffset = annotation.end
+                )
+
+                val textColor = annotation.item.deserializeToColor() ?: layoutResult.layoutInput.style.color.colorOrNull() ?: color ?: Color.Unspecified
+                boxes.fastForEach { box ->
+                    path.rewind()
+                    path.buildSquigglesFor(box, density = this)
+                    drawPath(
+                        path = path,
+                        color = textColor,
+                        style = pathStyle
+                    )
+                }
+
+            }
+        }
+    }
+
+    /**
+     * Maths copied from [squigglyspans](https://github.com/samruston/squigglyspans).
+     */
+    private fun Path.buildSquigglesFor(box: Rect, density: Density): Unit = density.run {
+        val wavelengthPx = toPxOrZero(wavelength)
+        // Nothing sensible to draw without a wavelength; guard against the
+        // division below blowing up to an unbounded point count (e.g. `em` units).
+        if (wavelengthPx <= 0f) return
+
+        val lineStart = box.left + (toPxOrZero(width) / 2)
+        val lineEnd = box.right - (toPxOrZero(width) / 2)
+        val lineBottom = box.bottom + toPxOrZero(bottomOffset)
+
+        val segmentWidth = wavelengthPx / SEGMENTS_PER_WAVELENGTH
+        val numOfPoints = ceil((lineEnd - lineStart) / segmentWidth).toInt() + 1
+
+        var pointX = lineStart
+        fastMapRange(0, numOfPoints) { point ->
+            val proportionOfWavelength = (pointX - lineStart) / wavelengthPx
+            val radiansX = proportionOfWavelength * TWO_PI + (TWO_PI * animator.animationProgress.value)
+            val offsetY = lineBottom + (sin(radiansX) * toPxOrZero(amplitude))
+
+            when (point) {
+                0 -> moveTo(pointX, offsetY)
+                else -> lineTo(pointX, offsetY)
+            }
+            pointX = (pointX + segmentWidth).coerceAtMost(lineEnd)
+        }
+    }
+
+    companion object {
+        private const val TAG = "squiggly_underline_span"
+        private const val SEGMENTS_PER_WAVELENGTH = 10
+        private const val TWO_PI = 2 * PI.toFloat()
+    }
+}
+
+@Composable
+fun rememberSquigglyUnderlineAnimator(duration: Duration = 1.seconds): SquigglyUnderlineAnimator {
+    val animationProgress = rememberInfiniteTransition().animateFloat(
+        initialValue = 0f,
+        targetValue = 1f,
+        animationSpec = infiniteRepeatable(
+            animation = tween(duration.inWholeMilliseconds.toInt(), easing = LinearEasing),
+            repeatMode = RepeatMode.Restart
+        )
+    )
+    return remember {
+        SquigglyUnderlineAnimator(animationProgress)
+    }
+}
+
+@Stable
+class SquigglyUnderlineAnimator internal constructor(internal val animationProgress: State<Float>) {
+    companion object {
+        val NoOp = SquigglyUnderlineAnimator(animationProgress = mutableStateOf(0f))
+    }
+}
\ No newline at end of file
diff --git a/app/src/main/vendor/com/mikepenz/markdown/compose/extendedspans/internal/ColorSerializers.kt b/app/src/main/vendor/com/mikepenz/markdown/compose/extendedspans/internal/ColorSerializers.kt
new file mode 100644
index 000000000..39fbecb23
--- /dev/null
+++ b/app/src/main/vendor/com/mikepenz/markdown/compose/extendedspans/internal/ColorSerializers.kt
@@ -0,0 +1,20 @@
+// Copyright 2023, Saket Narayan
+// SPDX-License-Identifier: Apache-2.0
+// https://github.com/saket/extended-spans
+package com.mikepenz.markdown.compose.extendedspans.internal
+
+import androidx.compose.ui.graphics.Color
+import androidx.compose.ui.graphics.isUnspecified
+import androidx.compose.ui.graphics.toArgb
+
+internal fun Color?.serialize(): String {
+    return if (this == null || isUnspecified) "null" else "${toArgb()}"
+}
+
+internal fun String.deserializeToColor(): Color? {
+    return if (this == "null") null else Color(this.toInt())
+}
+
+internal fun Color?.colorOrNull(): Color? {
+    return if (this == null || isUnspecified) null else this
+}
\ No newline at end of file
diff --git a/app/src/main/vendor/com/mikepenz/markdown/compose/extendedspans/internal/Lists.kt b/app/src/main/vendor/com/mikepenz/markdown/compose/extendedspans/internal/Lists.kt
new file mode 100644
index 000000000..1af1fed1d
--- /dev/null
+++ b/app/src/main/vendor/com/mikepenz/markdown/compose/extendedspans/internal/Lists.kt
@@ -0,0 +1,21 @@
+// Copyright 2023, Saket Narayan
+// SPDX-License-Identifier: Apache-2.0
+// https://github.com/saket/extended-spans
+package com.mikepenz.markdown.compose.extendedspans.internal
+
+import kotlin.contracts.ExperimentalContracts
+import kotlin.contracts.contract
+
+@OptIn(ExperimentalContracts::class)
+internal inline fun <R> fastMapRange(
+    start: Int,
+    end: Int,
+    transform: (Int) -> R,
+): List<R> {
+    contract { callsInPlace(transform) }
+    val destination = ArrayList<R>(/* initialCapacity = */ end - start + 1)
+    for (i in start..end) {
+        destination.add(transform(i))
+    }
+    return destination
+}
\ No newline at end of file
diff --git a/app/src/main/vendor/com/mikepenz/markdown/compose/extendedspans/internal/TextLinkStyles.kt b/app/src/main/vendor/com/mikepenz/markdown/compose/extendedspans/internal/TextLinkStyles.kt
new file mode 100644
index 000000000..8f78cc9d5
--- /dev/null
+++ b/app/src/main/vendor/com/mikepenz/markdown/compose/extendedspans/internal/TextLinkStyles.kt
@@ -0,0 +1,16 @@
+package com.mikepenz.markdown.compose.extendedspans.internal
+
+import androidx.compose.ui.text.SpanStyle
+import androidx.compose.ui.text.TextLinkStyles
+
+/**
+ * Updates the [TextLinkStyles] with the provided [block].
+ */
+fun TextLinkStyles.update(block: SpanStyle.() -> SpanStyle): TextLinkStyles {
+    return TextLinkStyles(
+        style = style?.run(block),
+        focusedStyle = focusedStyle?.run(block),
+        hoveredStyle = focusedStyle?.run(block),
+        pressedStyle = focusedStyle?.run(block),
+    )
+}
\ No newline at end of file
diff --git a/app/src/main/vendor/com/mikepenz/markdown/m3/Markdown.kt b/app/src/main/vendor/com/mikepenz/markdown/m3/Markdown.kt
new file mode 100644
index 000000000..a24cefead
--- /dev/null
+++ b/app/src/main/vendor/com/mikepenz/markdown/m3/Markdown.kt
@@ -0,0 +1,250 @@
+package com.mikepenz.markdown.m3
+
+import androidx.compose.foundation.layout.Box
+import androidx.compose.foundation.layout.Column
+import androidx.compose.foundation.layout.fillMaxSize
+import androidx.compose.runtime.Composable
+import androidx.compose.ui.Modifier
+import com.mikepenz.markdown.compose.MarkdownSuccess
+import com.mikepenz.markdown.compose.StreamingMarkdownSuccess
+import com.mikepenz.markdown.compose.components.MarkdownComponents
+import com.mikepenz.markdown.compose.components.markdownComponents
+import com.mikepenz.markdown.m3.elements.MarkdownCheckBox
+import com.mikepenz.markdown.model.ImageTransformer
+import com.mikepenz.markdown.model.MarkdownAnimations
+import com.mikepenz.markdown.model.MarkdownAnnotator
+import com.mikepenz.markdown.model.MarkdownColors
+import com.mikepenz.markdown.model.MarkdownDimens
+import com.mikepenz.markdown.model.MarkdownExtendedSpans
+import com.mikepenz.markdown.model.MarkdownInlineContent
+import com.mikepenz.markdown.model.MarkdownPadding
+import com.mikepenz.markdown.model.MarkdownState
+import com.mikepenz.markdown.model.MarkdownTypography
+import com.mikepenz.markdown.model.NoOpImageTransformerImpl
+import com.mikepenz.markdown.model.ReferenceLinkHandler
+import com.mikepenz.markdown.model.ReferenceLinkHandlerImpl
+import com.mikepenz.markdown.model.State
+import com.mikepenz.markdown.model.StreamingMarkdownState
+import com.mikepenz.markdown.model.markdownAnimations
+import com.mikepenz.markdown.model.markdownAnnotator
+import com.mikepenz.markdown.model.markdownDimens
+import com.mikepenz.markdown.model.markdownExtendedSpans
+import com.mikepenz.markdown.model.markdownInlineContent
+import com.mikepenz.markdown.model.markdownPadding
+import org.intellij.markdown.flavours.MarkdownFlavourDescriptor
+import org.intellij.markdown.flavours.gfm.GFMFlavourDescriptor
+import org.intellij.markdown.parser.MarkdownParser
+
+
+/**
+ * Renders the markdown content using Material 3 styles.
+ *
+ * @param content The markdown content to be rendered.
+ * @param colors The [MarkdownColors] to use for styling.
+ * @param typography The [MarkdownTypography] to use for text styles.
+ * @param modifier The [Modifier] to apply to the component.
+ * @param padding The [MarkdownPadding] to use for padding.
+ * @param dimens The [MarkdownDimens] to use for dimensions.
+ * @param flavour The [MarkdownFlavourDescriptor] to use for parsing.
+ * @param parser The [MarkdownParser] to use for parsing.
+ * @param imageTransformer The [ImageTransformer] to use for transforming images.
+ * @param annotator The [MarkdownAnnotator] to use for annotating links.
+ * @param extendedSpans The [MarkdownExtendedSpans] to use for extended spans.
+ * @param inlineContent The [MarkdownInlineContent] to use for inline content.
+ * @param components The [MarkdownComponents] to use for custom components.
+ * @param animations The [MarkdownAnimations] to use for animations.
+ * @param referenceLinkHandler The reference link handler to be used for handling links.
+ * @param loading Composable function to display while loading.
+ * @param success A composable function to be displayed with the markdown content. It receives the modifier, state and components as parameters. By default this is a [Column].
+ * @param error Composable function to display on error.
+ */
+@Composable
+fun Markdown(
+    content: String,
+    colors: MarkdownColors = markdownColor(),
+    typography: MarkdownTypography = markdownTypography(),
+    modifier: Modifier = Modifier.fillMaxSize(),
+    padding: MarkdownPadding = markdownPadding(),
+    dimens: MarkdownDimens = markdownDimens(),
+    flavour: MarkdownFlavourDescriptor = GFMFlavourDescriptor(),
+    parser: MarkdownParser = MarkdownParser(flavour),
+    imageTransformer: ImageTransformer = NoOpImageTransformerImpl(),
+    annotator: MarkdownAnnotator = markdownAnnotator(),
+    extendedSpans: MarkdownExtendedSpans = markdownExtendedSpans(),
+    inlineContent: MarkdownInlineContent = markdownInlineContent(),
+    components: MarkdownComponents = markdownComponents(checkbox = { MarkdownCheckBox(it.content, it.node, it.typography.text) }),
+    animations: MarkdownAnimations = markdownAnimations(),
+    referenceLinkHandler: ReferenceLinkHandler = ReferenceLinkHandlerImpl(),
+    loading: @Composable (modifier: Modifier) -> Unit = { Box(modifier) },
+    success: @Composable (state: State.Success, components: MarkdownComponents, modifier: Modifier) -> Unit = { state, components, modifier ->
+        MarkdownSuccess(state = state, components = components, modifier = modifier)
+    },
+    error: @Composable (modifier: Modifier) -> Unit = { Box(modifier) },
+) = com.mikepenz.markdown.compose.Markdown(
+    content = content,
+    colors = colors,
+    typography = typography,
+    modifier = modifier,
+    padding = padding,
+    dimens = dimens,
+    flavour = flavour,
+    parser = parser,
+    imageTransformer = imageTransformer,
+    annotator = annotator,
+    extendedSpans = extendedSpans,
+    inlineContent = inlineContent,
+    components = components,
+    animations = animations,
+    referenceLinkHandler = referenceLinkHandler,
+    loading = loading,
+    success = success,
+    error = error,
+)
+
+/**
+ * Renders the markdown content using Material 3 styles.
+ *
+ * @param markdownState The [MarkdownState] to use for parsing.
+ * @param colors The [MarkdownColors] to use for styling.
+ * @param typography The [MarkdownTypography] to use for text styles.
+ * @param modifier The [Modifier] to apply to the component.
+ * @param padding The [MarkdownPadding] to use for padding.
+ * @param dimens The [MarkdownDimens] to use for dimensions.
+ * @param imageTransformer The [ImageTransformer] to use for transforming images.
+ * @param annotator The [MarkdownAnnotator] to use for annotating links.
+ * @param extendedSpans The [MarkdownExtendedSpans] to use for extended spans.
+ * @param inlineContent The [MarkdownInlineContent] to use for inline content.
+ * @param components The [MarkdownComponents] to use for custom components.
+ * @param animations The [MarkdownAnimations] to use for animations.
+ * @param loading Composable function to display while loading.
+ * @param success A composable function to be displayed with the markdown content. It receives the modifier, state and components as parameters. By default this is a [Column].
+ * @param error Composable function to display on error.
+ */
+@Composable
+fun Markdown(
+    markdownState: MarkdownState,
+    colors: MarkdownColors = markdownColor(),
+    typography: MarkdownTypography = markdownTypography(),
+    modifier: Modifier = Modifier.fillMaxSize(),
+    padding: MarkdownPadding = markdownPadding(),
+    dimens: MarkdownDimens = markdownDimens(),
+    imageTransformer: ImageTransformer = NoOpImageTransformerImpl(),
+    annotator: MarkdownAnnotator = markdownAnnotator(),
+    extendedSpans: MarkdownExtendedSpans = markdownExtendedSpans(),
+    inlineContent: MarkdownInlineContent = markdownInlineContent(),
+    components: MarkdownComponents = markdownComponents(checkbox = { MarkdownCheckBox(it.content, it.node, it.typography.text) }),
+    animations: MarkdownAnimations = markdownAnimations(),
+    loading: @Composable (modifier: Modifier) -> Unit = { Box(modifier) },
+    success: @Composable (state: State.Success, components: MarkdownComponents, modifier: Modifier) -> Unit = { state, components, modifier ->
+        MarkdownSuccess(state = state, components = components, modifier = modifier)
+    },
+    error: @Composable (modifier: Modifier) -> Unit = { Box(modifier) },
+) = com.mikepenz.markdown.compose.Markdown(
+    markdownState = markdownState,
+    colors = colors,
+    typography = typography,
+    modifier = modifier,
+    padding = padding,
+    dimens = dimens,
+    imageTransformer = imageTransformer,
+    annotator = annotator,
+    extendedSpans = extendedSpans,
+    inlineContent = inlineContent,
+    components = components,
+    animations = animations,
+    loading = loading,
+    success = success,
+    error = error,
+)
+
+/**
+ * Renders streaming markdown content using Material 3 styles.
+ */
+@Composable
+fun Markdown(
+    streamingMarkdownState: StreamingMarkdownState,
+    colors: MarkdownColors = markdownColor(),
+    typography: MarkdownTypography = markdownTypography(),
+    modifier: Modifier = Modifier.fillMaxSize(),
+    padding: MarkdownPadding = markdownPadding(),
+    dimens: MarkdownDimens = markdownDimens(),
+    imageTransformer: ImageTransformer = NoOpImageTransformerImpl(),
+    annotator: MarkdownAnnotator = markdownAnnotator(),
+    extendedSpans: MarkdownExtendedSpans = markdownExtendedSpans(),
+    inlineContent: MarkdownInlineContent = markdownInlineContent(),
+    components: MarkdownComponents = markdownComponents(checkbox = { MarkdownCheckBox(it.content, it.node, it.typography.text) }),
+    animations: MarkdownAnimations = markdownAnimations(),
+    success: @Composable (snapshot: StreamingMarkdownState.Snapshot, components: MarkdownComponents, modifier: Modifier) -> Unit = { snapshot, components, modifier ->
+        StreamingMarkdownSuccess(streamingMarkdownState = streamingMarkdownState, snapshot = snapshot, components = components, modifier = modifier)
+    },
+) = com.mikepenz.markdown.compose.Markdown(
+    streamingMarkdownState = streamingMarkdownState,
+    colors = colors,
+    typography = typography,
+    modifier = modifier,
+    padding = padding,
+    dimens = dimens,
+    imageTransformer = imageTransformer,
+    annotator = annotator,
+    extendedSpans = extendedSpans,
+    inlineContent = inlineContent,
+    components = components,
+    animations = animations,
+    success = success,
+)
+
+/**
+ * Renders the markdown content using Material 3 styles.
+ *
+ * @param state The [State] to use for parsing.
+ * @param colors The [MarkdownColors] to use for styling.
+ * @param typography The [MarkdownTypography] to use for text styles.
+ * @param modifier The [Modifier] to apply to the component.
+ * @param padding The [MarkdownPadding] to use for padding.
+ * @param dimens The [MarkdownDimens] to use for dimensions.
+ * @param imageTransformer The [ImageTransformer] to use for transforming images.
+ * @param annotator The [MarkdownAnnotator] to use for annotating links.
+ * @param extendedSpans The [MarkdownExtendedSpans] to use for extended spans.
+ * @param inlineContent The [MarkdownInlineContent] to use for inline content.
+ * @param components The [MarkdownComponents] to use for custom components.
+ * @param animations The [MarkdownAnimations] to use for animations.
+ * @param loading Composable function to display while loading.
+ * @param success A composable function to be displayed with the markdown content. It receives the modifier, state and components as parameters. By default this is a [Column].
+ * @param error Composable function to display on error.
+ */
+@Composable
+fun Markdown(
+    state: State,
+    colors: MarkdownColors = markdownColor(),
+    typography: MarkdownTypography = markdownTypography(),
+    modifier: Modifier = Modifier.fillMaxSize(),
+    padding: MarkdownPadding = markdownPadding(),
+    dimens: MarkdownDimens = markdownDimens(),
+    imageTransformer: ImageTransformer = NoOpImageTransformerImpl(),
+    annotator: MarkdownAnnotator = markdownAnnotator(),
+    extendedSpans: MarkdownExtendedSpans = markdownExtendedSpans(),
+    inlineContent: MarkdownInlineContent = markdownInlineContent(),
+    components: MarkdownComponents = markdownComponents(checkbox = { MarkdownCheckBox(it.content, it.node, it.typography.text) }),
+    animations: MarkdownAnimations = markdownAnimations(),
+    loading: @Composable (modifier: Modifier) -> Unit = { Box(modifier) },
+    success: @Composable (state: State.Success, components: MarkdownComponents, modifier: Modifier) -> Unit = { state, components, modifier ->
+        MarkdownSuccess(state = state, components = components, modifier = modifier)
+    },
+    error: @Composable (modifier: Modifier) -> Unit = { Box(modifier) },
+) = com.mikepenz.markdown.compose.Markdown(
+    state = state,
+    colors = colors,
+    typography = typography,
+    modifier = modifier,
+    padding = padding,
+    dimens = dimens,
+    imageTransformer = imageTransformer,
+    annotator = annotator,
+    extendedSpans = extendedSpans,
+    inlineContent = inlineContent,
+    components = components,
+    animations = animations,
+    loading = loading,
+    success = success,
+    error = error,
+)
diff --git a/app/src/main/vendor/com/mikepenz/markdown/m3/MarkdownColors.kt b/app/src/main/vendor/com/mikepenz/markdown/m3/MarkdownColors.kt
new file mode 100644
index 000000000..1a8e7809d
--- /dev/null
+++ b/app/src/main/vendor/com/mikepenz/markdown/m3/MarkdownColors.kt
@@ -0,0 +1,29 @@
+package com.mikepenz.markdown.m3
+
+import androidx.compose.material3.MaterialTheme
+import androidx.compose.runtime.Composable
+import androidx.compose.ui.graphics.Color
+import androidx.compose.ui.graphics.luminance
+import com.mikepenz.markdown.model.DefaultMarkdownColors
+import com.mikepenz.markdown.model.MarkdownAlertColors
+import com.mikepenz.markdown.model.MarkdownColors
+import com.mikepenz.markdown.model.markdownAlertColors
+
+@Composable
+fun markdownColor(
+    text: Color = MaterialTheme.colorScheme.onBackground,
+    codeBackground: Color = MaterialTheme.colorScheme.onBackground.copy(alpha = 0.1f),
+    inlineCodeBackground: Color = codeBackground,
+    dividerColor: Color = MaterialTheme.colorScheme.outlineVariant,
+    tableBackground: Color = MaterialTheme.colorScheme.onBackground.copy(alpha = 0.02f),
+    /** Material 3 has no `isLight` flag; derive it from the background so alerts follow the theme. */
+    darkTheme: Boolean = MaterialTheme.colorScheme.background.luminance() < 0.5f,
+    alert: MarkdownAlertColors = markdownAlertColors(darkTheme),
+): MarkdownColors = DefaultMarkdownColors(
+    text = text,
+    codeBackground = codeBackground,
+    inlineCodeBackground = inlineCodeBackground,
+    dividerColor = dividerColor,
+    tableBackground = tableBackground,
+    alert = alert,
+)
diff --git a/app/src/main/vendor/com/mikepenz/markdown/m3/MarkdownTypography.kt b/app/src/main/vendor/com/mikepenz/markdown/m3/MarkdownTypography.kt
new file mode 100644
index 000000000..1638c075a
--- /dev/null
+++ b/app/src/main/vendor/com/mikepenz/markdown/m3/MarkdownTypography.kt
@@ -0,0 +1,59 @@
+package com.mikepenz.markdown.m3
+
+import androidx.compose.material3.MaterialTheme
+import androidx.compose.runtime.Composable
+import androidx.compose.ui.text.SpanStyle
+import androidx.compose.ui.text.TextLinkStyles
+import androidx.compose.ui.text.TextStyle
+import androidx.compose.ui.text.font.FontFamily
+import androidx.compose.ui.text.font.FontStyle
+import androidx.compose.ui.text.font.FontWeight
+import androidx.compose.ui.text.style.TextDecoration
+import androidx.compose.ui.unit.TextUnit
+import com.mikepenz.markdown.model.DefaultMarkdownTypography
+import com.mikepenz.markdown.model.MarkdownTypography
+
+@Composable
+fun markdownTypography(
+    h1: TextStyle = MaterialTheme.typography.displayLarge,
+    h2: TextStyle = MaterialTheme.typography.displayMedium,
+    h3: TextStyle = MaterialTheme.typography.displaySmall,
+    h4: TextStyle = MaterialTheme.typography.headlineMedium,
+    h5: TextStyle = MaterialTheme.typography.headlineSmall,
+    h6: TextStyle = MaterialTheme.typography.titleLarge,
+    text: TextStyle = MaterialTheme.typography.bodyLarge,
+    code: TextStyle = MaterialTheme.typography.bodyMedium.copy(fontFamily = FontFamily.Monospace),
+    inlineCode: TextStyle = text.copy(
+        fontFamily = FontFamily.Monospace, fontSize = TextUnit.Unspecified
+    ),
+    quote: TextStyle = MaterialTheme.typography.bodyMedium.plus(SpanStyle(fontStyle = FontStyle.Italic)),
+    paragraph: TextStyle = MaterialTheme.typography.bodyLarge,
+    ordered: TextStyle = MaterialTheme.typography.bodyLarge,
+    bullet: TextStyle = MaterialTheme.typography.bodyLarge,
+    list: TextStyle = MaterialTheme.typography.bodyLarge,
+    textLink: TextLinkStyles = TextLinkStyles(
+        style = MaterialTheme.typography.bodyLarge.copy(
+            fontWeight = FontWeight.Bold, textDecoration = TextDecoration.Underline
+        ).toSpanStyle()
+    ),
+    table: TextStyle = text,
+    alertTitle: TextStyle = MaterialTheme.typography.bodyLarge.copy(fontWeight = FontWeight.Bold),
+): MarkdownTypography = DefaultMarkdownTypography(
+    h1 = h1,
+    h2 = h2,
+    h3 = h3,
+    h4 = h4,
+    h5 = h5,
+    h6 = h6,
+    text = text,
+    quote = quote,
+    code = code,
+    inlineCode = inlineCode,
+    paragraph = paragraph,
+    ordered = ordered,
+    bullet = bullet,
+    list = list,
+    textLink = textLink,
+    table = table,
+    alertTitle = alertTitle,
+)
diff --git a/app/src/main/vendor/com/mikepenz/markdown/m3/elements/MarkdownCheckBox.kt b/app/src/main/vendor/com/mikepenz/markdown/m3/elements/MarkdownCheckBox.kt
new file mode 100644
index 000000000..c4b9b3b85
--- /dev/null
+++ b/app/src/main/vendor/com/mikepenz/markdown/m3/elements/MarkdownCheckBox.kt
@@ -0,0 +1,32 @@
+package com.mikepenz.markdown.m3.elements
+
+import androidx.compose.material3.Checkbox
+import androidx.compose.runtime.Composable
+import androidx.compose.ui.semantics.Role.Companion.Checkbox
+import androidx.compose.ui.semantics.role
+import androidx.compose.ui.semantics.semantics
+import androidx.compose.ui.semantics.stateDescription
+import androidx.compose.ui.text.TextStyle
+import com.mikepenz.markdown.compose.elements.MarkdownCheckBox
+import org.intellij.markdown.ast.ASTNode
+
+@Composable
+fun MarkdownCheckBox(
+    content: String,
+    node: ASTNode,
+    style: TextStyle,
+) = MarkdownCheckBox(
+    content = content,
+    node = node,
+    style = style,
+    checkedIndicator = { checked, modifier ->
+        Checkbox(
+            checked = checked,
+            onCheckedChange = null,
+            modifier = modifier.semantics {
+                role = Checkbox
+                stateDescription = if (checked) "Checked" else "Unchecked"
+            },
+        )
+    },
+)
\ No newline at end of file
diff --git a/app/src/main/vendor/com/mikepenz/markdown/model/BulletHandler.kt b/app/src/main/vendor/com/mikepenz/markdown/model/BulletHandler.kt
new file mode 100644
index 000000000..518084594
--- /dev/null
+++ b/app/src/main/vendor/com/mikepenz/markdown/model/BulletHandler.kt
@@ -0,0 +1,8 @@
+package com.mikepenz.markdown.model
+
+import org.intellij.markdown.IElementType
+
+/** An interface of providing use case specific un/ordered list handling.*/
+fun interface BulletHandler {
+    fun transform(type: IElementType, bullet: CharSequence?, index: Int, listNumber: Int, depth: Int): String
+}
diff --git a/app/src/main/vendor/com/mikepenz/markdown/model/ImageTransformer.kt b/app/src/main/vendor/com/mikepenz/markdown/model/ImageTransformer.kt
new file mode 100644
index 000000000..872b95409
--- /dev/null
+++ b/app/src/main/vendor/com/mikepenz/markdown/model/ImageTransformer.kt
@@ -0,0 +1,117 @@
+package com.mikepenz.markdown.model
+
+import androidx.compose.runtime.Composable
+import androidx.compose.runtime.Immutable
+import androidx.compose.ui.Alignment
+import androidx.compose.ui.Modifier
+import androidx.compose.ui.geometry.Size
+import androidx.compose.ui.geometry.isUnspecified
+import androidx.compose.ui.graphics.ColorFilter
+import androidx.compose.ui.graphics.DefaultAlpha
+import androidx.compose.ui.graphics.painter.Painter
+import androidx.compose.ui.layout.ContentScale
+import androidx.compose.ui.text.PlaceholderVerticalAlign
+import androidx.compose.ui.unit.Density
+
+interface ImageTransformer {
+    /**
+     * Will retrieve the [ImageData] from an image link/url
+     */
+    @Composable
+    fun transform(link: String): ImageData?
+
+    /**
+     * Returns the detected intrinsic size of the painter
+     */
+    @Composable
+    fun intrinsicSize(painter: Painter): Size {
+        return painter.intrinsicSize
+    }
+
+    /**
+     * The expected placeholderSize for an inline image identified by [link].
+     */
+    fun placeholderConfig(
+        link: String,
+        density: Density,
+        containerSize: Size,
+        imageWidth: ImageWidth,
+        imageSize: Size,
+        imageSizeChanged: ((link: String, Size) -> Unit)? = null,
+    ): PlaceholderConfig {
+        fun scale(size: Size, factor: Float): Size {
+            return Size(size.width * factor, size.height * factor)
+        }
+
+        val sizeInDp = with(density) {
+            if (containerSize.isUnspecified) {
+                // No container size known, use default
+                Size(DEFAULT_IMAGE_SIDE_LENGTH_DP, DEFAULT_IMAGE_SIDE_LENGTH_DP)
+            } else if (imageSize.isUnspecified) {
+                // No image size known yet, use container-constrained max side
+                val containerWidthDp = containerSize.width.toDp().value
+                val containerHeightDp = containerSize.height.toDp().value
+                val actualSideLength = minOf(DEFAULT_IMAGE_SIDE_LENGTH_DP, containerHeightDp, containerWidthDp)
+                Size(actualSideLength, actualSideLength)
+            } else {
+                // Both sizes known, calculate scaled size to fit container
+                val imageWidthDp = imageSize.width.toDp().value
+                val imageHeightDp = imageSize.height.toDp().value
+                val containerWidthDp = containerSize.width.toDp().value
+                val containerHeightDp = containerSize.height.toDp().value
+
+                val containerCappedHeight = minOf(imageHeightDp, containerHeightDp)
+                val containerCappedWidth = when (imageWidth) {
+                    ImageWidth.IMAGE_WIDTH -> minOf(imageWidthDp, containerWidthDp)
+                    ImageWidth.MAX_WIDTH -> containerWidthDp
+                }
+
+                if (containerCappedWidth < imageWidthDp || containerCappedHeight < imageHeightDp) {
+                    // Image needs scaling down to fit
+                    when (imageWidth) {
+                        ImageWidth.IMAGE_WIDTH -> {
+                            val lowestRatio = minOf(containerCappedWidth / imageWidthDp, containerCappedHeight / imageHeightDp)
+                            scale(Size(imageWidthDp, imageHeightDp), lowestRatio)
+                        }
+                        ImageWidth.MAX_WIDTH -> {
+                            val widthRatio = containerCappedWidth / imageWidthDp
+                            Size(containerCappedWidth, imageHeightDp * widthRatio)
+                        }
+                    }
+                } else {
+                    // Image fits naturally in container; for MAX_WIDTH scale up to fill width proportionally
+                    when (imageWidth) {
+                        ImageWidth.IMAGE_WIDTH -> Size(containerCappedWidth, containerCappedHeight)
+                        ImageWidth.MAX_WIDTH -> {
+                            val widthRatio = containerCappedWidth / imageWidthDp
+                            Size(containerCappedWidth, imageHeightDp * widthRatio)
+                        }
+                    }
+                }
+            }
+        }
+
+        return PlaceholderConfig(sizeInDp)
+    }
+
+    companion object {
+        const val DEFAULT_IMAGE_SIDE_LENGTH_DP = 200f
+    }
+}
+
+@Immutable
+data class PlaceholderConfig(
+    val size: Size,
+    val verticalAlign: PlaceholderVerticalAlign = PlaceholderVerticalAlign.Bottom,
+)
+
+@Immutable
+data class ImageData(
+    val painter: Painter,
+    val modifier: Modifier = Modifier,
+    val contentDescription: String? = "Image",
+    val alignment: Alignment = Alignment.CenterStart,
+    val contentScale: ContentScale = ContentScale.Fit,
+    val alpha: Float = DefaultAlpha,
+    val colorFilter: ColorFilter? = null,
+)
diff --git a/app/src/main/vendor/com/mikepenz/markdown/model/ImageWidth.kt b/app/src/main/vendor/com/mikepenz/markdown/model/ImageWidth.kt
new file mode 100644
index 000000000..1cadf75d2
--- /dev/null
+++ b/app/src/main/vendor/com/mikepenz/markdown/model/ImageWidth.kt
@@ -0,0 +1,11 @@
+package com.mikepenz.markdown.model
+
+/**
+ * This enum controls how image width is calculated for images within the markdown renderer.
+ * For inline images, the size is reported as an inline placeholder size.
+ * See [ImageTransformer.placeholderConfig]
+ * */
+enum class ImageWidth {
+    IMAGE_WIDTH,
+    MAX_WIDTH,
+}
diff --git a/app/src/main/vendor/com/mikepenz/markdown/model/MarkdownA11yLabels.kt b/app/src/main/vendor/com/mikepenz/markdown/model/MarkdownA11yLabels.kt
new file mode 100644
index 000000000..97790c6ab
--- /dev/null
+++ b/app/src/main/vendor/com/mikepenz/markdown/model/MarkdownA11yLabels.kt
@@ -0,0 +1,29 @@
+package com.mikepenz.markdown.model
+
+import androidx.compose.runtime.Immutable
+
+/**
+ * Localizable accessibility labels used by the renderer. Override via
+ * [com.mikepenz.markdown.compose.LocalMarkdownA11yLabels] to translate.
+ *
+ * Defaults are English. The library does not bundle Compose Resources, so
+ * localization is a consumer responsibility — supply translated strings
+ * (e.g. via `stringResource`) when constructing the labels.
+ */
+@Immutable
+data class MarkdownA11yLabels(
+    /** Container hint for blockquotes. */
+    val blockquote: String = "Quote",
+    /** Code block container hint, used when no language is detected. */
+    val codeBlock: String = "Code block",
+    /** Code block container hint with language, e.g. "Code block, kotlin". */
+    val codeBlockWithLanguage: (language: String) -> String = { "Code block, $it" },
+    /** Language label prefix used in the code top bar, e.g. "Language: KOTLIN". */
+    val codeLanguage: (language: String) -> String = { "Language: $it" },
+    /** Visible top-bar label shown when no language is detected on a code block. */
+    val codeFallbackLanguage: String = "CODE",
+    /** Copy-to-clipboard button label / click action. */
+    val copyCode: String = "Copy code",
+    /** Container hint for GitHub alerts, e.g. "Warning alert". */
+    val alert: (title: String) -> String = { "$it alert" },
+)
diff --git a/app/src/main/vendor/com/mikepenz/markdown/model/MarkdownAlertColors.kt b/app/src/main/vendor/com/mikepenz/markdown/model/MarkdownAlertColors.kt
new file mode 100644
index 000000000..14d14abe1
--- /dev/null
+++ b/app/src/main/vendor/com/mikepenz/markdown/model/MarkdownAlertColors.kt
@@ -0,0 +1,74 @@
+package com.mikepenz.markdown.model
+
+import androidx.compose.runtime.Immutable
+import androidx.compose.ui.graphics.Color
+
+/**
+ * The accent color (bar, icon, title) of each GitHub alert type.
+ */
+@Immutable
+interface MarkdownAlertColors {
+    /** Accent color of a `[!NOTE]` alert. */
+    val note: Color
+
+    /** Accent color of a `[!TIP]` alert. */
+    val tip: Color
+
+    /** Accent color of an `[!IMPORTANT]` alert. */
+    val important: Color
+
+    /** Accent color of a `[!WARNING]` alert. */
+    val warning: Color
+
+    /** Accent color of a `[!CAUTION]` alert. */
+    val caution: Color
+
+    fun colorFor(type: MarkdownAlertType): Color = when (type) {
+        MarkdownAlertType.NOTE -> note
+        MarkdownAlertType.TIP -> tip
+        MarkdownAlertType.IMPORTANT -> important
+        MarkdownAlertType.WARNING -> warning
+        MarkdownAlertType.CAUTION -> caution
+    }
+}
+
+@Immutable
+private data class DefaultMarkdownAlertColors(
+    override val note: Color,
+    override val tip: Color,
+    override val important: Color,
+    override val warning: Color,
+    override val caution: Color,
+) : MarkdownAlertColors
+
+/**
+ * @param darkTheme Selects the light or dark variant of the default palette.
+ */
+fun markdownAlertColors(
+    darkTheme: Boolean = false,
+    note: Color = MarkdownAlertColorDefaults.note(darkTheme),
+    tip: Color = MarkdownAlertColorDefaults.tip(darkTheme),
+    important: Color = MarkdownAlertColorDefaults.important(darkTheme),
+    warning: Color = MarkdownAlertColorDefaults.warning(darkTheme),
+    caution: Color = MarkdownAlertColorDefaults.caution(darkTheme),
+): MarkdownAlertColors = DefaultMarkdownAlertColors(
+    note = note,
+    tip = tip,
+    important = important,
+    warning = warning,
+    caution = caution,
+)
+
+/**
+ * GitHub's alert accent palette, in its light and dark variants.
+ *
+ * Material's color schemes carry no slot with the semantics these alerts rely on — a green "tip",
+ * an amber "warning" — so the palette is fixed rather than derived from the active theme.
+ */
+object MarkdownAlertColorDefaults {
+    fun note(darkTheme: Boolean): Color = if (darkTheme) Color(0xFF4493F8) else Color(0xFF0969DA)
+    fun tip(darkTheme: Boolean): Color = if (darkTheme) Color(0xFF3FB950) else Color(0xFF1A7F37)
+    fun important(darkTheme: Boolean): Color = if (darkTheme) Color(0xFFAB7DF8) else Color(0xFF8250DF)
+    fun warning(darkTheme: Boolean): Color = if (darkTheme) Color(0xFFD29922) else Color(0xFF9A6700)
+    fun caution(darkTheme: Boolean): Color = if (darkTheme) Color(0xFFF85149) else Color(0xFFCF222E)
+}
diff --git a/app/src/main/vendor/com/mikepenz/markdown/model/MarkdownAlertDimens.kt b/app/src/main/vendor/com/mikepenz/markdown/model/MarkdownAlertDimens.kt
new file mode 100644
index 000000000..678956af7
--- /dev/null
+++ b/app/src/main/vendor/com/mikepenz/markdown/model/MarkdownAlertDimens.kt
@@ -0,0 +1,31 @@
+package com.mikepenz.markdown.model
+
+import androidx.compose.runtime.Immutable
+import androidx.compose.ui.unit.Dp
+import androidx.compose.ui.unit.dp
+
+/**
+ * The dimensions of a GitHub alert.
+ */
+@Immutable
+interface MarkdownAlertDimens {
+    /** Thickness of the accent bar drawn along the start edge of an alert. */
+    val barThickness: Dp
+
+    /** Size of the icon rendered next to an alert title. */
+    val iconSize: Dp
+}
+
+@Immutable
+private data class DefaultMarkdownAlertDimens(
+    override val barThickness: Dp,
+    override val iconSize: Dp,
+) : MarkdownAlertDimens
+
+fun markdownAlertDimens(
+    barThickness: Dp = 4.dp,
+    iconSize: Dp = 16.dp,
+): MarkdownAlertDimens = DefaultMarkdownAlertDimens(
+    barThickness = barThickness,
+    iconSize = iconSize,
+)
diff --git a/app/src/main/vendor/com/mikepenz/markdown/model/MarkdownAlertIcons.kt b/app/src/main/vendor/com/mikepenz/markdown/model/MarkdownAlertIcons.kt
new file mode 100644
index 000000000..22ca3c538
--- /dev/null
+++ b/app/src/main/vendor/com/mikepenz/markdown/model/MarkdownAlertIcons.kt
@@ -0,0 +1,120 @@
+package com.mikepenz.markdown.model
+
+import androidx.compose.runtime.Immutable
+import androidx.compose.ui.graphics.Color
+import androidx.compose.ui.graphics.SolidColor
+import androidx.compose.ui.graphics.vector.ImageVector
+import androidx.compose.ui.graphics.vector.addPathNodes
+import androidx.compose.ui.unit.dp
+
+/**
+ * The icons rendered next to an alert title. Override via
+ * [com.mikepenz.markdown.compose.LocalMarkdownAlertIcons], or pass an icon directly to
+ * [com.mikepenz.markdown.compose.elements.MarkdownAlert].
+ *
+ * Supply `null` for a type to render its title without an icon.
+ */
+@Immutable
+interface MarkdownAlertIcons {
+    val note: ImageVector?
+    val tip: ImageVector?
+    val important: ImageVector?
+    val warning: ImageVector?
+    val caution: ImageVector?
+
+    fun iconFor(type: MarkdownAlertType): ImageVector? = when (type) {
+        MarkdownAlertType.NOTE -> note
+        MarkdownAlertType.TIP -> tip
+        MarkdownAlertType.IMPORTANT -> important
+        MarkdownAlertType.WARNING -> warning
+        MarkdownAlertType.CAUTION -> caution
+    }
+}
+
+@Immutable
+data class DefaultMarkdownAlertIcons(
+    override val note: ImageVector? = MarkdownAlertIconDefaults.Note,
+    override val tip: ImageVector? = MarkdownAlertIconDefaults.Tip,
+    override val important: ImageVector? = MarkdownAlertIconDefaults.Important,
+    override val warning: ImageVector? = MarkdownAlertIconDefaults.Warning,
+    override val caution: ImageVector? = MarkdownAlertIconDefaults.Caution,
+) : MarkdownAlertIcons
+
+fun markdownAlertIcons(
+    note: ImageVector? = MarkdownAlertIconDefaults.Note,
+    tip: ImageVector? = MarkdownAlertIconDefaults.Tip,
+    important: ImageVector? = MarkdownAlertIconDefaults.Important,
+    warning: ImageVector? = MarkdownAlertIconDefaults.Warning,
+    caution: ImageVector? = MarkdownAlertIconDefaults.Caution,
+): MarkdownAlertIcons = DefaultMarkdownAlertIcons(
+    note = note,
+    tip = tip,
+    important = important,
+    warning = warning,
+    caution = caution,
+)
+
+/**
+ * The bundled alert icons. Defined here rather than pulled from `compose-material-icons` so the
+ * core module keeps its `compileOnly` runtime/ui/foundation dependency set.
+ *
+ * Icons are tinted at draw time, so the baked-in fill colour is irrelevant.
+ */
+object MarkdownAlertIconDefaults {
+    /** Outlined info circle. */
+    val Note: ImageVector by lazy {
+        icon(
+            "MarkdownAlertNote",
+            "M11 7h2v2h-2zm0 4h2v6h-2zm1-9C6.48 2 2 6.48 2 12s4.48 10 10 10 10-4.48 10-10S17.52 2 12 2zm0 " +
+                "18c-4.41 0-8-3.59-8-8s3.59-8 8-8 8 3.59 8 8-3.59 8-8 8z",
+        )
+    }
+
+    /** Outlined lightbulb. */
+    val Tip: ImageVector by lazy {
+        icon(
+            "MarkdownAlertTip",
+            "M9 21c0 .55.45 1 1 1h4c.55 0 1-.45 1-1v-1H9v1zm3-19C8.14 2 5 5.14 5 9c0 2.38 1.19 4.47 3 " +
+                "5.74V17c0 .55.45 1 1 1h6c.55 0 1-.45 1-1v-2.26c1.81-1.27 3-3.36 3-5.74 0-3.86-3.14-7-7-7zm2.85 " +
+                "11.1l-.85.6V16h-4v-2.3l-.85-.6C7.8 12.16 7 10.63 7 9c0-2.76 2.24-5 5-5s5 2.24 5 5c0 1.63-.8 " +
+                "3.16-2.15 4.1z",
+        )
+    }
+
+    /** Outlined speech bubble with an exclamation mark. */
+    val Important: ImageVector by lazy {
+        icon(
+            "MarkdownAlertImportant",
+            "M20 2H4c-1.1 0-1.99.9-1.99 2L2 22l4-4h14c1.1 0 2-.9 2-2V4c0-1.1-.9-2-2-2zm0 14H5.17l-.59.59-.58." +
+                "58V4h16v12zm-9-4h2v2h-2zm0-6h2v4h-2z",
+        )
+    }
+
+    /** Outlined triangle with an exclamation mark. */
+    val Warning: ImageVector by lazy {
+        icon(
+            "MarkdownAlertWarning",
+            "M12 5.99L19.53 19H4.47L12 5.99M12 2L1 21h22L12 2zm1 14h-2v2h2v-2zm0-6h-2v4h2v-4z",
+        )
+    }
+
+    /** Outlined octagon with an exclamation mark. */
+    val Caution: ImageVector by lazy {
+        icon(
+            "MarkdownAlertCaution",
+            "M15.73 3H8.27L3 8.27v7.46L8.27 21h7.46L21 15.73V8.27L15.73 3zM19 14.9L14.9 19H9.1L5 14.9V9.1L9.1 " +
+                "5h5.8L19 9.1v5.8zM11 7h2v6h-2zm0 8h2v2h-2z",
+        )
+    }
+
+    private fun icon(name: String, pathData: String): ImageVector = ImageVector.Builder(
+        name = name,
+        defaultWidth = 24.dp,
+        defaultHeight = 24.dp,
+        viewportWidth = 24f,
+        viewportHeight = 24f,
+    ).addPath(
+        pathData = addPathNodes(pathData),
+        fill = SolidColor(Color.Black),
+    ).build()
+}
diff --git a/app/src/main/vendor/com/mikepenz/markdown/model/MarkdownAlertPadding.kt b/app/src/main/vendor/com/mikepenz/markdown/model/MarkdownAlertPadding.kt
new file mode 100644
index 000000000..b60777139
--- /dev/null
+++ b/app/src/main/vendor/com/mikepenz/markdown/model/MarkdownAlertPadding.kt
@@ -0,0 +1,50 @@
+package com.mikepenz.markdown.model
+
+import androidx.compose.foundation.layout.PaddingValues
+import androidx.compose.runtime.Immutable
+import androidx.compose.ui.unit.Dp
+import androidx.compose.ui.unit.dp
+
+/**
+ * The paddings of a GitHub alert.
+ */
+@Immutable
+interface MarkdownAlertPadding {
+    /** Padding around the whole alert, including its accent bar */
+    val container: PaddingValues
+
+    /** Padding above and below the alert's block content */
+    val content: PaddingValues
+
+    /** Insets of the alert's accent bar */
+    val bar: PaddingValues.Absolute
+
+    /** Gap between the alert icon and its title */
+    val iconSpacing: Dp
+
+    /** Gap between the alert title row and the alert's block content */
+    val titleSpacing: Dp
+}
+
+@Immutable
+private data class DefaultMarkdownAlertPadding(
+    override val container: PaddingValues,
+    override val content: PaddingValues,
+    override val bar: PaddingValues.Absolute,
+    override val iconSpacing: Dp,
+    override val titleSpacing: Dp,
+) : MarkdownAlertPadding
+
+fun markdownAlertPadding(
+    container: PaddingValues = PaddingValues(horizontal = 16.dp, vertical = 0.dp),
+    content: PaddingValues = PaddingValues(vertical = 4.dp),
+    bar: PaddingValues.Absolute = PaddingValues.Absolute(left = 2.dp, top = 2.dp, right = 4.dp, bottom = 2.dp),
+    iconSpacing: Dp = 8.dp,
+    titleSpacing: Dp = 4.dp,
+): MarkdownAlertPadding = DefaultMarkdownAlertPadding(
+    container = container,
+    content = content,
+    bar = bar,
+    iconSpacing = iconSpacing,
+    titleSpacing = titleSpacing,
+)
diff --git a/app/src/main/vendor/com/mikepenz/markdown/model/MarkdownAlertType.kt b/app/src/main/vendor/com/mikepenz/markdown/model/MarkdownAlertType.kt
new file mode 100644
index 000000000..9859d0ad1
--- /dev/null
+++ b/app/src/main/vendor/com/mikepenz/markdown/model/MarkdownAlertType.kt
@@ -0,0 +1,31 @@
+package com.mikepenz.markdown.model
+
+/**
+ * The five GitHub alert types, as recognised by the GFM parser's `ALERT_TITLE` token.
+ *
+ * See https://github.com/orgs/community/discussions/16925
+ */
+enum class MarkdownAlertType(
+    /** The marker as written in markdown, e.g. `[!NOTE]`. Matched case-insensitively. */
+    val marker: String,
+    /** The default, English title rendered next to the icon. */
+    val title: String,
+) {
+    NOTE("[!NOTE]", "Note"),
+    TIP("[!TIP]", "Tip"),
+    IMPORTANT("[!IMPORTANT]", "Important"),
+    WARNING("[!WARNING]", "Warning"),
+    CAUTION("[!CAUTION]", "Caution"),
+    ;
+
+    companion object {
+        /**
+         * Resolves the [MarkdownAlertType] for the text of an `ALERT_TITLE` token, e.g. `[!note]`.
+         * Returns `null` for anything the parser would not have accepted as an alert.
+         */
+        fun from(markerText: String): MarkdownAlertType? {
+            val trimmed = markerText.trim()
+            return entries.firstOrNull { it.marker.equals(trimmed, ignoreCase = true) }
+        }
+    }
+}
diff --git a/app/src/main/vendor/com/mikepenz/markdown/model/MarkdownAnimations.kt b/app/src/main/vendor/com/mikepenz/markdown/model/MarkdownAnimations.kt
new file mode 100644
index 000000000..43d3f96ff
--- /dev/null
+++ b/app/src/main/vendor/com/mikepenz/markdown/model/MarkdownAnimations.kt
@@ -0,0 +1,50 @@
+package com.mikepenz.markdown.model
+
+import androidx.compose.animation.animateContentSize
+import androidx.compose.runtime.Composable
+import androidx.compose.runtime.Immutable
+import androidx.compose.runtime.Stable
+import androidx.compose.ui.Modifier
+import com.mikepenz.markdown.compose.elements.MarkdownText
+
+@Stable
+@Immutable
+interface MarkdownAnimations {
+    /**
+     * Modifier used to animate [MarkdownText] size changes.
+     * This is mainly the case if inline images are loaded and their placeholder has a different size from the final image.
+     */
+    val animateTextSize: Modifier.() -> Modifier
+}
+
+@Stable
+@Immutable
+class DefaultMarkdownAnimation(
+    override val animateTextSize: Modifier.() -> Modifier,
+) : MarkdownAnimations {
+    override fun equals(other: Any?): Boolean {
+        if (this === other) return true
+        if (other == null || this::class != other::class) return false
+
+        other as DefaultMarkdownAnimation
+
+        return animateTextSize == other.animateTextSize
+    }
+
+    override fun hashCode(): Int {
+        return animateTextSize.hashCode()
+    }
+}
+
+@Composable
+fun markdownAnimations(
+    /**
+     * Modifier used to animate [MarkdownText] size changes.
+     * By default, this uses [animateContentSize].
+     *
+     * It's possible to modify the animation or alternatively return` {this} to not animate at all.
+     */
+    animateTextSize: Modifier.() -> Modifier = { animateContentSize() },
+): MarkdownAnimations = DefaultMarkdownAnimation(
+    animateTextSize
+)
diff --git a/app/src/main/vendor/com/mikepenz/markdown/model/MarkdownAnnotator.kt b/app/src/main/vendor/com/mikepenz/markdown/model/MarkdownAnnotator.kt
new file mode 100644
index 000000000..3cf717317
--- /dev/null
+++ b/app/src/main/vendor/com/mikepenz/markdown/model/MarkdownAnnotator.kt
@@ -0,0 +1,55 @@
+package com.mikepenz.markdown.model
+
+import androidx.compose.runtime.Immutable
+import androidx.compose.runtime.Stable
+import androidx.compose.ui.text.AnnotatedString
+import org.intellij.markdown.ast.ASTNode
+
+@Stable
+@Immutable
+interface MarkdownAnnotator {
+
+    /**
+     * Use the [AnnotatedString.Builder] to build the string to display.
+     * Return `true` to consume the child, false to allow default handling.
+     *
+     * @param content contains the whole content, and requires the `child` [ASTNode] to extract relevant text.
+     */
+    val annotate: (AnnotatedString.Builder.(content: String, child: ASTNode) -> Boolean)?
+
+    /** Defines static configuration for the [androidx.compose.ui.text.AnnotatedString] annotator */
+    val config: MarkdownAnnotatorConfig
+}
+
+@Stable
+@Immutable
+class DefaultMarkdownAnnotator(
+    override val annotate: (AnnotatedString.Builder.(content: String, child: ASTNode) -> Boolean)?,
+    override val config: MarkdownAnnotatorConfig,
+) : MarkdownAnnotator {
+    override fun equals(other: Any?): Boolean {
+        if (this === other) return true
+        if (other == null || this::class != other::class) return false
+
+        other as DefaultMarkdownAnnotator
+
+        if (annotate != other.annotate) return false
+        if (config != other.config) return false
+
+        return true
+    }
+
+    override fun hashCode(): Int {
+        var result = annotate?.hashCode() ?: 0
+        result = 31 * result + config.hashCode()
+        return result
+    }
+}
+
+fun markdownAnnotator(
+    config: MarkdownAnnotatorConfig = markdownAnnotatorConfig(),
+    annotate: (AnnotatedString.Builder.(content: String, child: ASTNode) -> Boolean)? = null,
+): MarkdownAnnotator = DefaultMarkdownAnnotator(
+    annotate = annotate,
+    config = config
+)
diff --git a/app/src/main/vendor/com/mikepenz/markdown/model/MarkdownAnnotatorConfig.kt b/app/src/main/vendor/com/mikepenz/markdown/model/MarkdownAnnotatorConfig.kt
new file mode 100644
index 000000000..b9898c933
--- /dev/null
+++ b/app/src/main/vendor/com/mikepenz/markdown/model/MarkdownAnnotatorConfig.kt
@@ -0,0 +1,89 @@
+package com.mikepenz.markdown.model
+
+import androidx.compose.runtime.Immutable
+import androidx.compose.runtime.Stable
+
+@Stable
+@Immutable
+interface MarkdownAnnotatorConfig {
+    /** Defines if a EOL should be treated as a new line */
+    val eolAsNewLine: Boolean
+
+    /**
+     * If `true`, inline images that are taller than the surrounding line
+     * height (by [BLOCK_FALLBACK_LINE_MULTIPLIER]) are promoted to block
+     * rendering below the text, instead of being drawn as an inline
+     * placeholder. This avoids overlap with preceding lines on platforms
+     * where Compose's text engine does not grow line metrics to fit tall
+     * placeholders.
+     */
+    val inlineImageAsBlock: Boolean
+        get() = true
+
+    /**
+     * If `true`, hovering an image surfaces its alt text in a small popup
+     * (web-style tooltip). On touch-only platforms a long-press also
+     * triggers it via [androidx.compose.foundation.hoverable]'s interaction
+     * source.
+     */
+    val showImageAltTooltip: Boolean
+        get() = false
+
+    /**
+     * Hover dwell time in milliseconds before the alt-text tooltip appears.
+     * Only honored when [showImageAltTooltip] is `true`.
+     */
+    val imageAltTooltipHoverDelayMs: Long
+        get() = 2_000L
+
+    companion object {
+        /**
+         * Multiplier of the surrounding text's line height above which an
+         * inline image is promoted to a block element when
+         * [inlineImageAsBlock] is enabled.
+         */
+        const val BLOCK_FALLBACK_LINE_MULTIPLIER = 1.5f
+    }
+}
+
+@Stable
+@Immutable
+class DefaultMarkdownAnnotatorConfig(
+    override val eolAsNewLine: Boolean = false,
+    override val inlineImageAsBlock: Boolean = true,
+    override val showImageAltTooltip: Boolean = false,
+    override val imageAltTooltipHoverDelayMs: Long = 2_000L,
+) : MarkdownAnnotatorConfig {
+    override fun equals(other: Any?): Boolean {
+        if (this === other) return true
+        if (other == null || this::class != other::class) return false
+
+        other as DefaultMarkdownAnnotatorConfig
+
+        if (eolAsNewLine != other.eolAsNewLine) return false
+        if (inlineImageAsBlock != other.inlineImageAsBlock) return false
+        if (showImageAltTooltip != other.showImageAltTooltip) return false
+        if (imageAltTooltipHoverDelayMs != other.imageAltTooltipHoverDelayMs) return false
+        return true
+    }
+
+    override fun hashCode(): Int {
+        var result = eolAsNewLine.hashCode()
+        result = 31 * result + inlineImageAsBlock.hashCode()
+        result = 31 * result + showImageAltTooltip.hashCode()
+        result = 31 * result + imageAltTooltipHoverDelayMs.hashCode()
+        return result
+    }
+}
+
+fun markdownAnnotatorConfig(
+    eolAsNewLine: Boolean = false,
+    inlineImageAsBlock: Boolean = true,
+    showImageAltTooltip: Boolean = false,
+    imageAltTooltipHoverDelayMs: Long = 2_000L,
+): MarkdownAnnotatorConfig = DefaultMarkdownAnnotatorConfig(
+    eolAsNewLine = eolAsNewLine,
+    inlineImageAsBlock = inlineImageAsBlock,
+    showImageAltTooltip = showImageAltTooltip,
+    imageAltTooltipHoverDelayMs = imageAltTooltipHoverDelayMs,
+)
diff --git a/app/src/main/vendor/com/mikepenz/markdown/model/MarkdownColors.kt b/app/src/main/vendor/com/mikepenz/markdown/model/MarkdownColors.kt
new file mode 100644
index 000000000..c255468e1
--- /dev/null
+++ b/app/src/main/vendor/com/mikepenz/markdown/model/MarkdownColors.kt
@@ -0,0 +1,36 @@
+package com.mikepenz.markdown.model
+
+import androidx.compose.runtime.Immutable
+import androidx.compose.ui.graphics.Color
+import com.mikepenz.markdown.compose.Markdown
+
+@Immutable
+interface MarkdownColors {
+    /** Represents the color used for the text of this [Markdown] component. */
+    val text: Color
+
+    /** Represents the color used for the background of code. */
+    val codeBackground: Color
+
+    /** Represents the color used for the inline background of code. */
+    val inlineCodeBackground: Color
+
+    /** Represents the color used for the color of dividers. */
+    val dividerColor: Color
+
+    /** Represents the color used for the background of tables. */
+    val tableBackground: Color
+
+    /** Represents the accent colors of the GitHub alert types. */
+    val alert: MarkdownAlertColors
+}
+
+@Immutable
+data class DefaultMarkdownColors(
+    override val text: Color,
+    override val codeBackground: Color,
+    override val inlineCodeBackground: Color,
+    override val dividerColor: Color,
+    override val tableBackground: Color,
+    override val alert: MarkdownAlertColors = markdownAlertColors(),
+) : MarkdownColors
diff --git a/app/src/main/vendor/com/mikepenz/markdown/model/MarkdownDimens.kt b/app/src/main/vendor/com/mikepenz/markdown/model/MarkdownDimens.kt
new file mode 100644
index 000000000..e450f678a
--- /dev/null
+++ b/app/src/main/vendor/com/mikepenz/markdown/model/MarkdownDimens.kt
@@ -0,0 +1,53 @@
+package com.mikepenz.markdown.model
+
+import androidx.compose.runtime.Composable
+import androidx.compose.runtime.Immutable
+import androidx.compose.ui.unit.Dp
+import androidx.compose.ui.unit.dp
+
+@Immutable
+interface MarkdownDimens {
+    val dividerThickness: Dp
+    val codeBackgroundCornerSize: Dp
+    val blockQuoteThickness: Dp
+    val tableMaxWidth: Dp
+    val tableCellWidth: Dp
+    val tableCellPadding: Dp
+    val tableCornerSize: Dp
+
+    /** The dimensions of the GitHub alerts. */
+    val alert: MarkdownAlertDimens
+}
+
+@Immutable
+private data class DefaultMarkdownDimens(
+    override val dividerThickness: Dp,
+    override val codeBackgroundCornerSize: Dp,
+    override val blockQuoteThickness: Dp,
+    override val tableMaxWidth: Dp,
+    override val tableCellWidth: Dp,
+    override val tableCellPadding: Dp,
+    override val tableCornerSize: Dp,
+    override val alert: MarkdownAlertDimens,
+) : MarkdownDimens
+
+@Composable
+fun markdownDimens(
+    dividerThickness: Dp = 1.dp,
+    codeBackgroundCornerSize: Dp = 8.dp,
+    blockQuoteThickness: Dp = 2.dp,
+    tableMaxWidth: Dp = Dp.Unspecified,
+    tableCellWidth: Dp = 160.dp,
+    tableCellPadding: Dp = 16.dp,
+    tableCornerSize: Dp = 8.dp,
+    alert: MarkdownAlertDimens = markdownAlertDimens(),
+): MarkdownDimens = DefaultMarkdownDimens(
+    dividerThickness = dividerThickness,
+    codeBackgroundCornerSize = codeBackgroundCornerSize,
+    blockQuoteThickness = blockQuoteThickness,
+    tableMaxWidth = tableMaxWidth,
+    tableCellWidth = tableCellWidth,
+    tableCellPadding = tableCellPadding,
+    tableCornerSize = tableCornerSize,
+    alert = alert,
+)
diff --git a/app/src/main/vendor/com/mikepenz/markdown/model/MarkdownExtendedSpans.kt b/app/src/main/vendor/com/mikepenz/markdown/model/MarkdownExtendedSpans.kt
new file mode 100644
index 000000000..e460ae127
--- /dev/null
+++ b/app/src/main/vendor/com/mikepenz/markdown/model/MarkdownExtendedSpans.kt
@@ -0,0 +1,36 @@
+package com.mikepenz.markdown.model
+
+import androidx.compose.runtime.Composable
+import androidx.compose.runtime.Immutable
+import androidx.compose.runtime.Stable
+import com.mikepenz.markdown.compose.extendedspans.ExtendedSpans
+
+@Stable
+@Immutable
+interface MarkdownExtendedSpans {
+    val extendedSpans: (@Composable () -> ExtendedSpans)?
+}
+
+@Stable
+@Immutable
+class DefaultMarkdownExtendedSpans(
+    override val extendedSpans: (@Composable () -> ExtendedSpans)?,
+) : MarkdownExtendedSpans {
+    override fun equals(other: Any?): Boolean {
+        if (this === other) return true
+        if (other == null || this::class != other::class) return false
+
+        other as DefaultMarkdownExtendedSpans
+
+        return extendedSpans == other.extendedSpans
+    }
+
+    override fun hashCode(): Int {
+        return extendedSpans?.hashCode() ?: 0
+    }
+}
+
+@Composable
+fun markdownExtendedSpans(
+    extendedSpans: (@Composable () -> ExtendedSpans)? = null,
+): MarkdownExtendedSpans = DefaultMarkdownExtendedSpans(extendedSpans)
diff --git a/app/src/main/vendor/com/mikepenz/markdown/model/MarkdownImageState.kt b/app/src/main/vendor/com/mikepenz/markdown/model/MarkdownImageState.kt
new file mode 100644
index 000000000..e3701c7da
--- /dev/null
+++ b/app/src/main/vendor/com/mikepenz/markdown/model/MarkdownImageState.kt
@@ -0,0 +1,52 @@
+package com.mikepenz.markdown.model
+
+import androidx.compose.runtime.Composable
+import androidx.compose.runtime.getValue
+import androidx.compose.runtime.mutableStateOf
+import androidx.compose.runtime.remember
+import androidx.compose.runtime.setValue
+import androidx.compose.ui.geometry.Size
+import androidx.compose.ui.platform.LocalDensity
+import androidx.compose.ui.unit.Density
+
+interface MarkdownImageState {
+    val density: Density
+    val containerSize: Size
+    val intrinsicImageSize: Size
+    
+    fun updateContainerSize(size: Size)
+
+    fun updateImageSize(size: Size)
+}
+
+internal class MarkdownImageStateImpl(override val density: Density) : MarkdownImageState {
+
+    override var containerSize by mutableStateOf(Size.Unspecified)
+
+    override var intrinsicImageSize by mutableStateOf(Size.Unspecified)
+
+    override fun updateContainerSize(size: Size) {
+        containerSize = size
+    }
+
+    override fun updateImageSize(size: Size) {
+        intrinsicImageSize = size
+    }
+}
+
+/**
+ * Creates and remembers a [MarkdownImageState] instance.
+ *
+ * This composable function creates a new instance of [MarkdownImageState] using the current
+ * density from [LocalDensity] and remembers it across recompositions as long as the
+ * density doesn't change.
+ *
+ * It's used internally by the markdown renderer to manage image state for inline images.
+ *
+ * @return A remembered instance of [MarkdownImageState].
+ */
+@Composable
+internal fun rememberMarkdownImageState(): MarkdownImageState {
+    val density = LocalDensity.current
+    return remember(density) { MarkdownImageStateImpl(density) }
+}
diff --git a/app/src/main/vendor/com/mikepenz/markdown/model/MarkdownInlineContent.kt b/app/src/main/vendor/com/mikepenz/markdown/model/MarkdownInlineContent.kt
new file mode 100644
index 000000000..a50ff702c
--- /dev/null
+++ b/app/src/main/vendor/com/mikepenz/markdown/model/MarkdownInlineContent.kt
@@ -0,0 +1,37 @@
+package com.mikepenz.markdown.model
+
+import androidx.compose.foundation.text.InlineTextContent
+import androidx.compose.runtime.Composable
+import androidx.compose.runtime.Immutable
+import androidx.compose.runtime.Stable
+
+@Stable
+@Immutable
+interface MarkdownInlineContent {
+    /** Represents the map used to store tags and corresponding inline content */
+    val inlineContent: Map<String, InlineTextContent>
+}
+
+@Stable
+@Immutable
+class DefaultMarkdownInlineContent(
+    override val inlineContent: Map<String, InlineTextContent>,
+) : MarkdownInlineContent {
+    override fun equals(other: Any?): Boolean {
+        if (this === other) return true
+        if (other == null || this::class != other::class) return false
+
+        other as DefaultMarkdownInlineContent
+
+        return inlineContent == other.inlineContent
+    }
+
+    override fun hashCode(): Int {
+        return inlineContent.hashCode()
+    }
+}
+
+@Composable
+fun markdownInlineContent(
+    content: Map<String, InlineTextContent> = mapOf(),
+): MarkdownInlineContent = DefaultMarkdownInlineContent(content)
diff --git a/app/src/main/vendor/com/mikepenz/markdown/model/MarkdownPadding.kt b/app/src/main/vendor/com/mikepenz/markdown/model/MarkdownPadding.kt
new file mode 100644
index 000000000..95087b3a8
--- /dev/null
+++ b/app/src/main/vendor/com/mikepenz/markdown/model/MarkdownPadding.kt
@@ -0,0 +1,72 @@
+package com.mikepenz.markdown.model
+
+import androidx.compose.foundation.layout.PaddingValues
+import androidx.compose.runtime.Composable
+import androidx.compose.runtime.Immutable
+import androidx.compose.ui.unit.Dp
+import androidx.compose.ui.unit.dp
+
+@Immutable
+interface MarkdownPadding {
+    val block: Dp
+
+    /** Padding top and bottom of a list (per layer) */
+    val list: Dp
+
+    /** Padding top of a list item */
+    val listItemTop: Dp
+
+    /** Padding bottom of a list item */
+    val listItemBottom: Dp
+
+    /** The indent per list level */
+    val listIndent: Dp
+    val codeBlock: PaddingValues
+    val blockQuote: PaddingValues
+    val blockQuoteText: PaddingValues
+    val blockQuoteBar: PaddingValues.Absolute
+
+    /** The paddings of the GitHub alerts */
+    val alert: MarkdownAlertPadding
+}
+
+@Immutable
+private data class DefaultMarkdownPadding(
+    override val block: Dp,
+    override val list: Dp,
+    override val listItemTop: Dp,
+    override val listItemBottom: Dp,
+    override val listIndent: Dp,
+    override val codeBlock: PaddingValues,
+    override val blockQuote: PaddingValues,
+    override val blockQuoteText: PaddingValues,
+    override val blockQuoteBar: PaddingValues.Absolute,
+    override val alert: MarkdownAlertPadding,
+) : MarkdownPadding
+
+@Composable
+fun markdownPadding(
+    block: Dp = 2.dp,
+    list: Dp = 4.dp,
+    listItemTop: Dp = 4.dp,
+    listItemBottom: Dp = 4.dp,
+    /** Deprecated, please use `listIndent` instead */
+    indentList: Dp? = null,
+    listIndent: Dp = 8.dp,
+    codeBlock: PaddingValues = PaddingValues(8.dp),
+    blockQuote: PaddingValues = PaddingValues(horizontal = 16.dp, vertical = 0.dp),
+    blockQuoteText: PaddingValues = PaddingValues(vertical = 4.dp),
+    blockQuoteBar: PaddingValues.Absolute = PaddingValues.Absolute(left = 4.dp, top = 2.dp, right = 4.dp, bottom = 2.dp),
+    alert: MarkdownAlertPadding = markdownAlertPadding(),
+): MarkdownPadding = DefaultMarkdownPadding(
+    block = block,
+    list = list,
+    listItemTop = listItemTop,
+    listItemBottom = listItemBottom,
+    listIndent = indentList ?: listIndent,
+    codeBlock = codeBlock,
+    blockQuote = blockQuote,
+    blockQuoteText = blockQuoteText,
+    blockQuoteBar = blockQuoteBar,
+    alert = alert,
+)
diff --git a/app/src/main/vendor/com/mikepenz/markdown/model/MarkdownState.kt b/app/src/main/vendor/com/mikepenz/markdown/model/MarkdownState.kt
new file mode 100644
index 000000000..bf1fe56b2
--- /dev/null
+++ b/app/src/main/vendor/com/mikepenz/markdown/model/MarkdownState.kt
@@ -0,0 +1,433 @@
+package com.mikepenz.markdown.model
+
+import androidx.compose.runtime.Composable
+import androidx.compose.runtime.Immutable
+import androidx.compose.runtime.LaunchedEffect
+import androidx.compose.runtime.Stable
+import androidx.compose.runtime.getValue
+import androidx.compose.runtime.remember
+import androidx.compose.runtime.rememberUpdatedState
+import androidx.compose.runtime.snapshotFlow
+import androidx.compose.ui.platform.LocalInspectionMode
+import com.mikepenz.markdown.utils.lookupLinkDefinition
+import kotlinx.coroutines.Dispatchers
+import kotlinx.coroutines.ExperimentalCoroutinesApi
+import kotlinx.coroutines.flow.Flow
+import kotlinx.coroutines.flow.MutableStateFlow
+import kotlinx.coroutines.flow.StateFlow
+import kotlinx.coroutines.flow.asStateFlow
+import kotlinx.coroutines.flow.conflate
+import kotlinx.coroutines.flow.emitAll
+import kotlinx.coroutines.flow.flow
+import kotlinx.coroutines.flow.transformLatest
+import kotlinx.coroutines.withContext
+import org.intellij.markdown.ast.ASTNode
+import org.intellij.markdown.flavours.MarkdownFlavourDescriptor
+import org.intellij.markdown.flavours.gfm.GFMFlavourDescriptor
+import org.intellij.markdown.parser.MarkdownParser
+
+/**
+ * A [MarkdownState] that executes the parsing of the markdown content with the [MarkdownParser] asynchronously.
+ *
+ * @param content The markdown content to parse.
+ * @param lookupLinks Whether to lookup links in the parsed tree or not.
+ * @param flavour The [MarkdownFlavourDescriptor] to use for parsing.
+ * @param parser The [MarkdownParser] to use for parsing.
+ * @param referenceLinkHandler The [ReferenceLinkHandler] to use for storing links.
+ * @param immediate Whether to parse the content immediately or not. (WARNING: This is not advised, as it will block the composition!)
+ * @return A [MarkdownState] instance that will parse the content and emit the result to its [MarkdownState.state] flow.
+ */
+@Composable
+fun rememberMarkdownState(
+    content: String,
+    lookupLinks: Boolean = true,
+    retainState: Boolean = false,
+    flavour: MarkdownFlavourDescriptor = remember { GFMFlavourDescriptor() },
+    parser: MarkdownParser = remember(flavour) { MarkdownParser(flavour) },
+    referenceLinkHandler: ReferenceLinkHandler = remember { ReferenceLinkHandlerImpl() },
+    immediate: Boolean = LocalInspectionMode.current,
+): MarkdownState {
+    val input = remember(content, lookupLinks, flavour, parser, referenceLinkHandler, retainState) {
+        Input(
+            content = content,
+            lookupLinks = lookupLinks,
+            flavour = flavour,
+            parser = parser,
+            referenceLinkHandler = referenceLinkHandler,
+            retainState = retainState,
+        )
+    }
+
+    val state = remember {
+        MarkdownStateImpl(input).apply {
+            if (immediate) {
+                // In immediate mode, parse synchronously but be aware this blocks the UI thread
+                parseBlocking()
+            }
+        }
+    }
+
+    // Capture the latest input without restarting the effect
+    val currentInput by rememberUpdatedState(input)
+
+    // Use snapshotFlow with conflate to prevent parse thrashing during rapid updates.
+    // Without conflate, LaunchedEffect(input) cancels and restarts on every change,
+    // causing nothing to render if updates arrive faster than parsing completes.
+    // With conflate, parsing always completes and then picks up the latest value.
+    LaunchedEffect(Unit) {
+        snapshotFlow { currentInput }
+            .conflate()
+            .collect { newInput ->
+                state.updateInput(newInput)
+                state.parse()
+            }
+    }
+
+    return state
+}
+
+/**
+ * A [MarkdownState] that executes the parsing of the markdown content with the [MarkdownParser] asynchronously.
+ * This version accepts a suspend function block that returns the markdown content, allowing for dynamic loading.
+ *
+ * @param keys Optional keys that determine when the block should be re-executed. When any key changes, the block will be called again.
+ * @param block A suspend function that returns the markdown content to parse.
+ * @param lookupLinks Whether to lookup links in the parsed tree or not.
+ * @param retainState Whether to retain the state of the [MarkdownState] or not, when the input changes
+ * @param flavour The [MarkdownFlavourDescriptor] to use for parsing.
+ * @param parser The [MarkdownParser] to use for parsing.
+ * @param referenceLinkHandler The [ReferenceLinkHandler] to use for storing links.
+ * @return A [MarkdownState] instance that will parse the content and emit the result to its [MarkdownState.state] flow.
+ */
+@Composable
+fun rememberMarkdownState(
+    vararg keys: Any?,
+    lookupLinks: Boolean = true,
+    retainState: Boolean = false,
+    flavour: MarkdownFlavourDescriptor = remember { GFMFlavourDescriptor() },
+    parser: MarkdownParser = remember(flavour) { MarkdownParser(flavour) },
+    referenceLinkHandler: ReferenceLinkHandler = remember { ReferenceLinkHandlerImpl() },
+    block: suspend () -> String,
+): MarkdownState {
+    val input = remember(lookupLinks, flavour, parser, referenceLinkHandler, retainState) {
+        Input(
+            content = "",
+            lookupLinks = lookupLinks,
+            flavour = flavour,
+            parser = parser,
+            referenceLinkHandler = referenceLinkHandler,
+            retainState = retainState,
+        )
+    }
+
+    val state = remember {
+        MarkdownStateImpl(input).apply {
+            parseBlocking()
+        }
+    }
+
+    val keysList = remember(*keys) { keys.toList() }
+    val currentKeys by rememberUpdatedState(keysList)
+    val currentBlock by rememberUpdatedState(block)
+
+    LaunchedEffect(Unit) {
+        snapshotFlow { currentKeys }
+            .conflate()
+            .collect {
+                state.updateInput(
+                    Input(
+                        content = currentBlock(),
+                        lookupLinks = lookupLinks,
+                        flavour = flavour,
+                        parser = parser,
+                        referenceLinkHandler = referenceLinkHandler,
+                        retainState = retainState,
+                    )
+                )
+                state.parse()
+            }
+    }
+
+    return state
+}
+
+/**
+ * Interface for a state that handles the parsing of markdown content with the [MarkdownParser].
+ */
+@Stable
+interface MarkdownState {
+    /** The current state of the markdown parsing */
+    val state: StateFlow<State>
+
+    /** The links found in the markdown content */
+    val links: StateFlow<Map<String, String?>>
+
+    /**
+     * Parses the markdown content asynchronously using the Default dispatcher.
+     * When a result is available it will be emitted to the [state] flow.
+     */
+    suspend fun parse(): State
+}
+
+/**
+ * Implementation of [MarkdownState] that executes the parsing of the markdown content with the [MarkdownParser] asynchronously.
+ */
+@Stable
+internal class MarkdownStateImpl(
+    private var input: Input,
+) : MarkdownState {
+    private val stateFlow: MutableStateFlow<State> = MutableStateFlow(State.Loading(input.referenceLinkHandler))
+    override val state: StateFlow<State> = stateFlow.asStateFlow()
+
+    private val linkStateFlow: MutableStateFlow<Map<String, String?>> = MutableStateFlow(emptyMap())
+    override val links: StateFlow<Map<String, String?>> = linkStateFlow.asStateFlow()
+
+    /**
+     * Updates the input for this markdown state.
+     * This is used when loading content dynamically.
+     *
+     * @param newInput The new input to use for parsing.
+     */
+    internal fun updateInput(newInput: Input) {
+        if (input == newInput) return // don't do anything for the same input
+        input = newInput
+        // if we already have content don't go back to loading if retain state is set to true
+        if (!newInput.retainState) stateFlow.value = State.Loading(input.referenceLinkHandler)
+    }
+
+    /**
+     * Sets an error state for this markdown state.
+     * This is used when an error occurs during dynamic content loading.
+     *
+     * @param error The error that occurred.
+     */
+    internal fun setError(error: Throwable) {
+        stateFlow.value = State.Error(error, input.referenceLinkHandler)
+    }
+
+    /**
+     * Parses the markdown content asynchronously using the Default dispatcher.
+     * When a result is available it will be emitted to the [state] flow.
+     */
+    override suspend fun parse(): State = withContext(Dispatchers.Default) {
+        parseBlocking()
+    }
+
+    /**
+     * Parses the markdown content synchronously.
+     */
+    internal fun parseBlocking(): State {
+        return try {
+            val parsedResult = input.parser.buildMarkdownTreeFromString(input.content)
+            if (input.lookupLinks) {
+                val links = mutableMapOf<String, String?>()
+                lookupLinkDefinition(links, parsedResult, input.content, recursive = true)
+                links.onEach { (key, value) -> input.referenceLinkHandler.store(key, value) }
+                linkStateFlow.value = links
+            }
+            State.Success(parsedResult, input.content, input.lookupLinks, input.referenceLinkHandler)
+        } catch (error: Throwable) {
+            State.Error(error, input.referenceLinkHandler)
+        }.also { result ->
+            stateFlow.value = result
+        }
+    }
+}
+
+/**
+ * Creates a [kotlinx.coroutines.flow.Flow] of [State] for use in non-composable contexts like view models.
+ * As soon as the flow is collected, it will start parsing the content, and emit the state once ready.
+ *
+ * @param content The markdown content to parse.
+ * @param lookupLinks Whether to lookup links in the parsed tree or not.
+ * @param flavour The [MarkdownFlavourDescriptor] to use for parsing.
+ * @param parser The [MarkdownParser] to use for parsing.
+ * @param referenceLinkHandler The [ReferenceLinkHandler] to use for storing links.
+ *
+ * @return A [kotlinx.coroutines.flow.Flow] of [State] that will emit the parsing state.
+ */
+fun parseMarkdownFlow(
+    content: String,
+    lookupLinks: Boolean = true,
+    flavour: MarkdownFlavourDescriptor = GFMFlavourDescriptor(),
+    parser: MarkdownParser = MarkdownParser(flavour),
+    referenceLinkHandler: ReferenceLinkHandler = ReferenceLinkHandlerImpl(),
+) = flow {
+    emit(State.Loading(referenceLinkHandler))
+    val markdownState = MarkdownStateImpl(
+        Input(
+            content = content,
+            lookupLinks = lookupLinks,
+            flavour = flavour,
+            parser = parser,
+            referenceLinkHandler = referenceLinkHandler,
+        )
+    )
+    markdownState.parse()
+    emitAll(markdownState.state)
+}
+
+/**
+ * Parses the given markdown [content] synchronously and returns the resulting [State] directly.
+ *
+ * Unlike [parseMarkdownFlow], this does not expose any mutable Flow/StateFlow machinery. It performs the
+ * parse on the calling thread and returns the final, immutable [State] (a [State.Success] on success, or a
+ * [State.Error] if the underlying parse fails). This is useful to pre-parse content before the UI is shown
+ * and hand the already-parsed [State.Success] to the `Markdown` composable.
+ *
+ * Note: parsing happens on the calling thread. For large documents consider invoking this off the main thread.
+ *
+ * @param content The markdown content to parse.
+ * @param lookupLinks Whether to lookup links in the parsed tree or not.
+ * @param flavour The [MarkdownFlavourDescriptor] to use for parsing.
+ * @param parser The [MarkdownParser] to use for parsing.
+ * @param referenceLinkHandler The [ReferenceLinkHandler] to use for storing links.
+ *
+ * @return The resulting [State]; [State.Success] on success or [State.Error] on failure.
+ */
+fun parseMarkdown(
+    content: String,
+    lookupLinks: Boolean = true,
+    flavour: MarkdownFlavourDescriptor = GFMFlavourDescriptor(),
+    parser: MarkdownParser = MarkdownParser(flavour),
+    referenceLinkHandler: ReferenceLinkHandler = ReferenceLinkHandlerImpl(),
+): State {
+    return MarkdownStateImpl(
+        Input(
+            content = content,
+            lookupLinks = lookupLinks,
+            flavour = flavour,
+            parser = parser,
+            referenceLinkHandler = referenceLinkHandler,
+        )
+    ).parseBlocking()
+}
+
+/**
+ * Transforms a [Flow] of markdown content strings into a [Flow] of parsed [State] for use in non-composable contexts like view models.
+ * As soon as the flow is collected, it will start parsing the content, and emit the state once ready.
+ *
+ * @param lookupLinks Whether to lookup links in the parsed tree or not
+ * @param retainState Whether to retain the state of the [MarkdownState] or not, when the input changes
+ * @param flavour The [MarkdownFlavourDescriptor] to use for parsing.
+ * @param parser The [MarkdownParser] to use for parsing.
+ * @param referenceLinkHandler The [ReferenceLinkHandler] to use for storing links.
+ *
+ * @return A [Flow] of [State] that represents the parsed markdown state.
+ */
+@OptIn(ExperimentalCoroutinesApi::class)
+fun Flow<String>.asMarkdownState(
+    lookupLinks: Boolean = true,
+    retainState: Boolean = false,
+    flavour: MarkdownFlavourDescriptor = GFMFlavourDescriptor(),
+    parser: MarkdownParser = MarkdownParser(flavour),
+    referenceLinkHandler: ReferenceLinkHandler = ReferenceLinkHandlerImpl(),
+): Flow<State> {
+    val markdownState = MarkdownStateImpl(
+        Input(
+            content = "",
+            lookupLinks = lookupLinks,
+            flavour = flavour,
+            parser = parser,
+            referenceLinkHandler = referenceLinkHandler,
+            retainState = retainState,
+        )
+    )
+    return transformLatest { content ->
+        markdownState.updateInput(
+            Input(
+                content = content,
+                lookupLinks = lookupLinks,
+                flavour = flavour,
+                parser = parser,
+                referenceLinkHandler = referenceLinkHandler,
+                retainState = retainState,
+            )
+        )
+
+        // Emit the Loading state only when updateInput transitioned to it (i.e. not retaining).
+        // A late subscriber whose content already parsed sees Success directly, avoiding a flash.
+        (markdownState.state.value as? State.Loading)?.let { emit(it) }
+
+        // parse() returns the resulting State (Success/Error) deterministically.
+        emit(markdownState.parse())
+    }
+}
+
+/**
+ * The input for the [MarkdownState].
+ *
+ * @param content The markdown content to parse.
+ * @param lookupLinks Whether to lookup links in the parsed tree or not.
+ * @param flavour The [MarkdownFlavourDescriptor] to use for parsing.
+ * @param parser The [MarkdownParser] to use for parsing.
+ * @param referenceLinkHandler The [ReferenceLinkHandler] to use for storing links.
+ * @param retainState Whether to retain the state of the [MarkdownState] or not, when the input changes
+ */
+@Immutable
+data class Input(
+    val content: String,
+    val lookupLinks: Boolean,
+    val flavour: MarkdownFlavourDescriptor,
+    val parser: MarkdownParser,
+    val referenceLinkHandler: ReferenceLinkHandler,
+    val retainState: Boolean = false,
+) {
+    override fun equals(other: Any?): Boolean {
+        if (this === other) return true
+        if (other == null || this::class != other::class) return false
+
+        other as Input
+
+        if (lookupLinks != other.lookupLinks) return false
+        if (content != other.content) return false
+        if (flavour != other.flavour) return false
+        if (parser != other.parser) return false
+        if (referenceLinkHandler != other.referenceLinkHandler) return false
+        if (retainState != other.retainState) return false
+
+        return true
+    }
+
+    override fun hashCode(): Int {
+        var result = lookupLinks.hashCode()
+        result = 31 * result + content.hashCode()
+        result = 31 * result + flavour.hashCode()
+        result = 31 * result + parser.hashCode()
+        result = 31 * result + referenceLinkHandler.hashCode()
+        result = 31 * result + retainState.hashCode()
+        return result
+    }
+}
+
+/**
+ * The current state of the [MarkdownState].
+ */
+@Immutable
+sealed interface State {
+
+    /** The [ReferenceLinkHandler] to store links in. */
+    val referenceLinkHandler: ReferenceLinkHandler
+
+    /** The parsing is in-progress. */
+    @Immutable
+    data class Loading(
+        override val referenceLinkHandler: ReferenceLinkHandler = ReferenceLinkHandlerImpl(),
+    ) : State
+
+    /** The parsing was successful. */
+    @Immutable
+    data class Success(
+        val node: ASTNode,
+        val content: String,
+        val linksLookedUp: Boolean,
+        override val referenceLinkHandler: ReferenceLinkHandler = ReferenceLinkHandlerImpl(),
+    ) : State
+
+    /** The parsing failed due to [Throwable]. */
+    @Immutable
+    data class Error(
+        val result: Throwable,
+        override val referenceLinkHandler: ReferenceLinkHandler = ReferenceLinkHandlerImpl(),
+    ) : State
+}
diff --git a/app/src/main/vendor/com/mikepenz/markdown/model/MarkdownTypography.kt b/app/src/main/vendor/com/mikepenz/markdown/model/MarkdownTypography.kt
new file mode 100644
index 000000000..c24b86452
--- /dev/null
+++ b/app/src/main/vendor/com/mikepenz/markdown/model/MarkdownTypography.kt
@@ -0,0 +1,50 @@
+package com.mikepenz.markdown.model
+
+import androidx.compose.runtime.Immutable
+import androidx.compose.ui.text.TextLinkStyles
+import androidx.compose.ui.text.TextStyle
+import androidx.compose.ui.text.font.FontWeight
+
+@Immutable
+interface MarkdownTypography {
+    val text: TextStyle
+    val code: TextStyle
+    val inlineCode: TextStyle
+    val h1: TextStyle
+    val h2: TextStyle
+    val h3: TextStyle
+    val h4: TextStyle
+    val h5: TextStyle
+    val h6: TextStyle
+    val quote: TextStyle
+    val paragraph: TextStyle
+    val ordered: TextStyle
+    val bullet: TextStyle
+    val list: TextStyle
+    val textLink: TextLinkStyles
+    val table: TextStyle
+
+    /** Style of an alert's title, e.g. the "Note" next to a `[!NOTE]` icon. Colored by the alert accent. */
+    val alertTitle: TextStyle
+}
+
+@Immutable
+data class DefaultMarkdownTypography(
+    override val h1: TextStyle,
+    override val h2: TextStyle,
+    override val h3: TextStyle,
+    override val h4: TextStyle,
+    override val h5: TextStyle,
+    override val h6: TextStyle,
+    override val text: TextStyle,
+    override val code: TextStyle,
+    override val inlineCode: TextStyle,
+    override val quote: TextStyle,
+    override val paragraph: TextStyle,
+    override val ordered: TextStyle,
+    override val bullet: TextStyle,
+    override val list: TextStyle,
+    override val textLink: TextLinkStyles,
+    override val table: TextStyle,
+    override val alertTitle: TextStyle = paragraph.copy(fontWeight = FontWeight.Bold),
+) : MarkdownTypography
\ No newline at end of file
diff --git a/app/src/main/vendor/com/mikepenz/markdown/model/NoOpImageTransformerImpl.kt b/app/src/main/vendor/com/mikepenz/markdown/model/NoOpImageTransformerImpl.kt
new file mode 100644
index 000000000..52c47f2af
--- /dev/null
+++ b/app/src/main/vendor/com/mikepenz/markdown/model/NoOpImageTransformerImpl.kt
@@ -0,0 +1,18 @@
+package com.mikepenz.markdown.model
+
+import androidx.compose.runtime.Composable
+import androidx.compose.ui.geometry.Size
+import androidx.compose.ui.graphics.painter.Painter
+
+class NoOpImageTransformerImpl : ImageTransformer {
+
+    @Composable
+    override fun transform(link: String): ImageData? {
+        return null
+    }
+
+    @Composable
+    override fun intrinsicSize(painter: Painter): Size {
+        return painter.intrinsicSize
+    }
+}
\ No newline at end of file
diff --git a/app/src/main/vendor/com/mikepenz/markdown/model/ReferenceLinkHandler.kt b/app/src/main/vendor/com/mikepenz/markdown/model/ReferenceLinkHandler.kt
new file mode 100644
index 000000000..d792c6dd5
--- /dev/null
+++ b/app/src/main/vendor/com/mikepenz/markdown/model/ReferenceLinkHandler.kt
@@ -0,0 +1,33 @@
+package com.mikepenz.markdown.model
+
+import androidx.compose.runtime.Stable
+
+/**
+ * Interface to describe the [ReferenceLinkHandler]
+ */
+@Stable
+interface ReferenceLinkHandler {
+    /** Keep the provided link */
+    fun store(label: String, destination: String?)
+
+    /** Returns the link for the provided label if it exists */
+    fun find(label: String): String
+}
+
+/**
+ * Implementation for [ReferenceLinkHandler] to resolve referenced link within the Markdown.
+ *
+ * The label is stored lowercase to allow case insensitive lookups. (https://github.com/adam-p/markdown-here/wiki/markdown-cheatsheet#links)
+ */
+@Stable
+class ReferenceLinkHandlerImpl : ReferenceLinkHandler {
+    private val stored = mutableMapOf<String, String?>()
+
+    override fun store(label: String, destination: String?) {
+        stored[label.lowercase()] = destination
+    }
+
+    override fun find(label: String): String {
+        return stored[label.lowercase()] ?: ""
+    }
+}
diff --git a/app/src/main/vendor/com/mikepenz/markdown/model/StreamingMarkdownState.kt b/app/src/main/vendor/com/mikepenz/markdown/model/StreamingMarkdownState.kt
new file mode 100644
index 000000000..42cd441bc
--- /dev/null
+++ b/app/src/main/vendor/com/mikepenz/markdown/model/StreamingMarkdownState.kt
@@ -0,0 +1,150 @@
+package com.mikepenz.markdown.model
+
+import androidx.compose.runtime.Composable
+import androidx.compose.runtime.Immutable
+import androidx.compose.runtime.LaunchedEffect
+import androidx.compose.runtime.Stable
+import androidx.compose.runtime.remember
+import com.mikepenz.markdown.utils.lookupLinkDefinition
+import kotlinx.coroutines.flow.Flow
+import kotlinx.coroutines.flow.MutableStateFlow
+import kotlinx.coroutines.flow.StateFlow
+import kotlinx.coroutines.flow.asStateFlow
+import kotlinx.coroutines.sync.Mutex
+import kotlinx.coroutines.sync.withLock
+import org.intellij.markdown.ast.ASTNode
+import org.intellij.markdown.flavours.MarkdownFlavourDescriptor
+import org.intellij.markdown.flavours.gfm.GFMFlavourDescriptor
+import org.intellij.markdown.parser.EmptyStreamingMarkdownFile
+import org.intellij.markdown.parser.StreamingMarkdownFile
+
+@Composable
+fun rememberStreamingMarkdownState(
+    lookupLinks: Boolean = true,
+    flavour: MarkdownFlavourDescriptor = remember { GFMFlavourDescriptor() },
+    referenceLinkHandler: ReferenceLinkHandler = remember { ReferenceLinkHandlerImpl() },
+): StreamingMarkdownState = remember(lookupLinks, flavour, referenceLinkHandler) {
+    StreamingMarkdownStateImpl(
+        lookupLinks = lookupLinks,
+        flavour = flavour,
+        referenceLinkHandler = referenceLinkHandler,
+    )
+}
+
+/**
+ * Collects append-only markdown chunks from this [Flow] into a remembered [StreamingMarkdownState].
+ */
+@Composable
+fun Flow<String>.collectAsStreamingMarkdownState(
+    lookupLinks: Boolean = true,
+    flavour: MarkdownFlavourDescriptor = remember { GFMFlavourDescriptor() },
+    referenceLinkHandler: ReferenceLinkHandler = remember { ReferenceLinkHandlerImpl() },
+): StreamingMarkdownState {
+    val markdownState = rememberStreamingMarkdownState(
+        lookupLinks = lookupLinks,
+        flavour = flavour,
+        referenceLinkHandler = referenceLinkHandler,
+    )
+
+    LaunchedEffect(this, markdownState) {
+        collect { chunk ->
+            markdownState.append(chunk)
+        }
+    }
+
+    return markdownState
+}
+
+@Stable
+interface StreamingMarkdownState {
+    /**
+     * The accumulated markdown content.
+     */
+    val content: CharSequence
+
+    /** The current state of the markdown parsing */
+    val snapshot: StateFlow<Snapshot>
+
+    /** The links found in the markdown content */
+    val links: StateFlow<Map<String, String?>>
+
+    /** The [ReferenceLinkHandler] to store links in. */
+    val referenceLinkHandler: ReferenceLinkHandler
+
+    /**
+     * The only way to update this [StreamingMarkdownState].
+     *
+     * This method is append-only. Callers should append chunks in source order.
+     */
+    suspend fun append(chunk: String): Snapshot
+
+    @Immutable
+    data class Snapshot(
+        val stableAst: List<ASTNode>,
+        val unstableAstTail: List<ASTNode>,
+    )
+}
+
+@Stable
+internal class StreamingMarkdownStateImpl(
+    private val lookupLinks: Boolean,
+    private val flavour: MarkdownFlavourDescriptor,
+    override val referenceLinkHandler: ReferenceLinkHandler,
+) : StreamingMarkdownState {
+    internal constructor(input: Input) : this(
+        lookupLinks = input.lookupLinks,
+        flavour = input.flavour,
+        referenceLinkHandler = input.referenceLinkHandler,
+    )
+
+    override val content: StringBuilder = StringBuilder()
+    private val snapshotStateFlow: MutableStateFlow<StreamingMarkdownState.Snapshot> = MutableStateFlow(
+        StreamingMarkdownState.Snapshot(emptyList(), emptyList()),
+    )
+    private val linkStateFlow: MutableStateFlow<Map<String, String?>> = MutableStateFlow(emptyMap())
+    private val stableLinks = mutableMapOf<String, String?>()
+    private var processedStableChildren = 0
+    private val appendMutex = Mutex()
+    private val streamingFile: StreamingMarkdownFile = EmptyStreamingMarkdownFile(flavour)
+
+    // FIXME: use explicit backing fields with Kotlin 2.4
+    override val snapshot: StateFlow<StreamingMarkdownState.Snapshot>
+        get() = snapshotStateFlow.asStateFlow()
+    // FIXME: use explicit backing fields with Kotlin 2.4
+    override val links: StateFlow<Map<String, String?>>
+        get() = linkStateFlow.asStateFlow()
+
+    override suspend fun append(chunk: String): StreamingMarkdownState.Snapshot = appendMutex.withLock {
+        content.append(chunk)
+        streamingFile.append(chunk)
+
+        val stableChildren = streamingFile.stableChildren
+        val unstableTail = streamingFile.unstableTail
+        if (lookupLinks) {
+            val links = lookupLinks(stableChildren, unstableTail)
+            links.forEach { (key, value) -> referenceLinkHandler.store(key, value) }
+            linkStateFlow.value = links
+        }
+        val nextSnapshot = StreamingMarkdownState.Snapshot(
+            stableAst = stableChildren.toList(),
+            unstableAstTail = unstableTail.toList(),
+        )
+        snapshotStateFlow.value = nextSnapshot
+        snapshotStateFlow.value
+    }
+
+    private fun lookupLinks(
+        stableChildren: List<ASTNode>,
+        unstableTail: List<ASTNode>,
+    ): Map<String, String?> {
+        while (processedStableChildren < stableChildren.size) {
+            lookupLinkDefinition(stableLinks, stableChildren[processedStableChildren], content, recursive = true)
+            processedStableChildren += 1
+        }
+        return stableLinks.toMutableMap().also { links ->
+            unstableTail.forEach { node ->
+                lookupLinkDefinition(links, node, content, recursive = true)
+            }
+        }
+    }
+}
diff --git a/app/src/main/vendor/com/mikepenz/markdown/utils/EntityConverter.kt b/app/src/main/vendor/com/mikepenz/markdown/utils/EntityConverter.kt
new file mode 100644
index 000000000..992b7cf6c
--- /dev/null
+++ b/app/src/main/vendor/com/mikepenz/markdown/utils/EntityConverter.kt
@@ -0,0 +1,38 @@
+package com.mikepenz.markdown.utils
+
+import org.intellij.markdown.html.entities.Entities
+
+/**
+ * Based on: https://github.com/JetBrains/markdown/blob/master/src/commonMain/kotlin/org/intellij/markdown/html/entities/EntityConverter.kt
+ * Removed HTML focused escaping by https://github.com/mikepenz/multiplatform-markdown-renderer/pull/222
+ */
+object EntityConverter {
+    private const val ESCAPE_ALLOWED_STRING = """!"#\$%&'\(\)\*\+,\-.\/:;<=>\?@\[\\\]\^_`{\|}~"""
+    private val REGEX = Regex("""&(?:([a-zA-Z0-9]+)|#([0-9]{1,8})|#[xX]([a-fA-F0-9]{1,8}));|(["&<>])""")
+    private val REGEX_ESCAPES = Regex("${REGEX.pattern}|\\\\([$ESCAPE_ALLOWED_STRING])")
+
+    fun replaceEntities(
+        text: CharSequence,
+        processEntities: Boolean,
+        processEscapes: Boolean,
+    ): String {
+        val regex = if (processEscapes) REGEX_ESCAPES else REGEX
+        return regex.replace(text) { match ->
+            val g = match.groups
+            when {
+                g.size > 5 && g[5] != null -> g[5]!!.value[0].toString()
+                g[4] != null -> match.value
+                else -> {
+                    val code = when {
+                        !processEntities -> null
+                        g[1] != null -> Entities.map[match.value]
+                        g[2] != null -> g[2]!!.value.toInt()
+                        g[3] != null -> g[3]!!.value.toInt(16)
+                        else -> null
+                    }
+                    code?.toChar()?.toString() ?: "&${match.value.substring(1)}"
+                }
+            }
+        }
+    }
+}
diff --git a/app/src/main/vendor/com/mikepenz/markdown/utils/Extensions.kt b/app/src/main/vendor/com/mikepenz/markdown/utils/Extensions.kt
new file mode 100644
index 000000000..45e660043
--- /dev/null
+++ b/app/src/main/vendor/com/mikepenz/markdown/utils/Extensions.kt
@@ -0,0 +1,207 @@
+package com.mikepenz.markdown.utils
+
+import androidx.compose.runtime.Composable
+import androidx.compose.ui.text.SpanStyle
+import androidx.compose.ui.unit.Density
+import androidx.compose.ui.unit.TextUnit
+import androidx.compose.ui.unit.TextUnitType
+import com.mikepenz.markdown.compose.LocalMarkdownColors
+import com.mikepenz.markdown.model.MarkdownAlertType
+import com.mikepenz.markdown.model.MarkdownTypography
+import com.mikepenz.markdown.model.ReferenceLinkHandler
+import org.intellij.markdown.IElementType
+import org.intellij.markdown.MarkdownElementTypes
+import org.intellij.markdown.MarkdownTokenTypes
+import org.intellij.markdown.ast.ASTNode
+import org.intellij.markdown.ast.CompositeASTNode
+import org.intellij.markdown.ast.LeafASTNode
+import org.intellij.markdown.ast.findChildOfType
+import org.intellij.markdown.ast.getTextInNode
+import org.intellij.markdown.flavours.gfm.GFMTokenTypes
+
+/**
+ * Tag used to indicate an image url for inline content. Required for rendering.
+ */
+const val MARKDOWN_TAG_IMAGE_URL = "MARKDOWN_IMAGE_URL"
+
+/**
+ * Resolve the alt text for an `IMAGE` node — used as the contents of the
+ * web-style hover tooltip. Falls back through `LINK_TEXT` (inline + full
+ * reference forms) and `LINK_LABEL` (short reference form).
+ */
+fun ASTNode.resolveImageAlt(content: String): String? {
+    findChildOfTypeRecursive(MarkdownElementTypes.LINK_TEXT)?.let {
+        val text = it.getUnescapedTextInNode(content).trim('[', ']').trim()
+        if (text.isNotEmpty()) return text
+    }
+    findChildOfTypeRecursive(MarkdownElementTypes.LINK_LABEL)?.let {
+        val text = it.getUnescapedTextInNode(content).trim('[', ']').trim()
+        if (text.isNotEmpty()) return text
+    }
+    return null
+}
+
+/**
+ * Resolve the destination URL for an `IMAGE` node. Falls back to looking up
+ * a `FULL_REFERENCE_LINK` / `SHORT_REFERENCE_LINK` descendant's `LINK_LABEL`
+ * via the supplied [referenceLinkHandler] when no inline `LINK_DESTINATION`
+ * is present (i.e. for reference-style images like `![alt][id]`).
+ */
+fun ASTNode.resolveImageLink(
+    content: String,
+    referenceLinkHandler: ReferenceLinkHandler?,
+): String? {
+    findChildOfTypeRecursive(MarkdownElementTypes.LINK_DESTINATION)?.let {
+        return it.getUnescapedTextInNode(content)
+    }
+    val refNode = findChildOfTypeRecursive(MarkdownElementTypes.FULL_REFERENCE_LINK)
+        ?: findChildOfTypeRecursive(MarkdownElementTypes.SHORT_REFERENCE_LINK)
+        ?: return null
+    val label = refNode.findChildOfType(MarkdownElementTypes.LINK_LABEL)
+        ?.getUnescapedTextInNode(content)
+        ?: return null
+    return referenceLinkHandler?.find(label)?.takeIf { it.isNotEmpty() }
+}
+
+/**
+ * Resolve the [MarkdownAlertType] of a `GFMElementTypes.ALERT` node from its `ALERT_TITLE` token,
+ * e.g. `[!NOTE]`. Returns `null` when the node carries no recognisable marker.
+ */
+fun ASTNode.findAlertType(content: String): MarkdownAlertType? =
+    findChildOfType(GFMTokenTypes.ALERT_TITLE)?.let { MarkdownAlertType.from(it.getTextInNode(content).toString()) }
+
+/**
+ * Find a child node recursive
+ */
+internal fun ASTNode.findChildOfTypeRecursive(type: IElementType): ASTNode? {
+    children.forEach {
+        if (it.type == type) {
+            return it
+        } else {
+            val found = it.findChildOfTypeRecursive(type)
+            if (found != null) {
+                return found
+            }
+        }
+    }
+    return null
+}
+
+/**
+ * Helper function to drop the first and last element in the children list.
+ * E.g., we don't want to render the brackets of a link
+ */
+internal fun List<ASTNode>.innerList(): List<ASTNode> = this.subList(1, this.size - 1)
+
+/**
+ * Extension function for `ASTNode` that retrieves the unescaped text within the node.
+ *
+ * This function first gets the text within the node, then converts it to a string.
+ * It then uses `EntityConverter.replaceEntities` to replace any escaped entities
+ * in the text, ensuring that the text is properly unescaped.
+ *
+ * @param allFileText The complete text of the file, which is used to extract the text within the node.
+ * @return The unescaped text within the node.
+ */
+fun ASTNode.getUnescapedTextInNode(allFileText: CharSequence): String {
+    val escapedText = getTextInNode(allFileText).toString()
+    return EntityConverter.replaceEntities(
+        escapedText,
+        processEntities = false,
+        processEscapes = true
+    )
+}
+
+/**
+ * Extension function to map auto-link nodes to a specified target type.
+ *
+ * This function iterates over a list of `ASTNode` objects and replaces
+ * `GFM_AUTOLINK`, `AUTOLINK`, and `EMAIL_AUTOLINK` nodes with a new `LeafASTNode`
+ * of the specified target type. Other nodes remain unchanged.
+ *
+ * @param targetType The target type to map auto-link nodes to. Defaults to `MarkdownTokenTypes.TEXT`.
+ * @return A new list of `ASTNode` objects with auto-link nodes mapped to the target type.
+ */
+fun List<ASTNode>.mapAutoLinkToType(targetType: IElementType = MarkdownTokenTypes.TEXT): List<ASTNode> {
+    return map {
+        if (it is LeafASTNode) {
+            if (
+                it.type == GFMTokenTypes.GFM_AUTOLINK ||
+                it.type == MarkdownElementTypes.AUTOLINK ||
+                it.type == MarkdownTokenTypes.EMAIL_AUTOLINK
+            ) {
+                LeafASTNode(targetType, it.startOffset, it.endOffset)
+            } else {
+                it
+            }
+        } else if (it is CompositeASTNode) {
+            CompositeASTNode(it.type, it.children.mapAutoLinkToType(targetType))
+        } else {
+            it
+        }
+    }
+}
+
+/**
+ * Helper function to lookup link definitions in the parsed markdown tree.
+ */
+internal fun lookupLinkDefinition(
+    store: MutableMap<String, String?>,
+    node: ASTNode,
+    content: CharSequence,
+    recursive: Boolean = true,
+    onlyDefinitions: Boolean = false,
+) {
+    var linkOnly = false
+    val linkLabel = if (node.type == MarkdownElementTypes.LINK_DEFINITION) {
+        node.findChildOfType(MarkdownElementTypes.LINK_LABEL)?.getUnescapedTextInNode(content)
+    } else if (!onlyDefinitions && node.type == MarkdownElementTypes.INLINE_LINK) {
+        node.findChildOfType(MarkdownElementTypes.LINK_TEXT)?.getUnescapedTextInNode(content)
+    } else if (!onlyDefinitions && node.type == MarkdownElementTypes.AUTOLINK) {
+        linkOnly = true
+        (node.children.firstOrNull { it.type.name == MarkdownElementTypes.AUTOLINK.name } ?: node).getUnescapedTextInNode(content)
+    } else {
+        null
+    }
+
+    if (linkLabel != null) {
+        val destination = if (linkOnly) {
+            linkLabel
+        } else {
+            node.findChildOfType(MarkdownElementTypes.LINK_DESTINATION)?.getUnescapedTextInNode(content)
+        }
+        store[linkLabel] = destination
+    }
+
+    if (recursive) {
+        node.children.forEach {
+            lookupLinkDefinition(store, it, content)
+        }
+    }
+}
+
+
+/**
+ * Resolves a [TextUnit] to pixels without crashing on non-`sp` units.
+ *
+ * [TextUnit.toPx] only supports `sp`; calling it on an `em` (or unspecified)
+ * value throws. This resolves:
+ * - `sp` -> via density
+ * - `em` -> [relativeToPx] (the value it is relative to, e.g. the font size) scaled by the em factor
+ * - unspecified / unknown -> `0f`
+ */
+internal fun Density.toPxOrZero(unit: TextUnit, relativeToPx: Float = 0f): Float = when (unit.type) {
+    TextUnitType.Sp -> unit.toPx()
+    TextUnitType.Em -> unit.value * relativeToPx
+    else -> 0f
+}
+
+/**
+ * Extension property to get the `SpanStyle` for inline code text.
+ * This style is defined by the `inlineCode` typography and the current markdown colors.
+ */
+val MarkdownTypography.codeSpanStyle: SpanStyle
+    @Composable
+    get() = inlineCode.copy(
+        background = LocalMarkdownColors.current.inlineCodeBackground
+    ).toSpanStyle()
diff --git a/app/src/main/vendor/com/mikepenz/markdown/utils/LogCompositions.kt b/app/src/main/vendor/com/mikepenz/markdown/utils/LogCompositions.kt
new file mode 100644
index 000000000..9ca50c737
--- /dev/null
+++ b/app/src/main/vendor/com/mikepenz/markdown/utils/LogCompositions.kt
@@ -0,0 +1,25 @@
+package com.mikepenz.markdown.utils
+
+import androidx.compose.runtime.Composable
+import androidx.compose.runtime.SideEffect
+import androidx.compose.runtime.getValue
+import androidx.compose.runtime.mutableStateOf
+import androidx.compose.runtime.remember
+import androidx.compose.runtime.setValue
+
+/**
+ * Helper to use when debugging recompositions.
+ */
+@Composable
+@Suppress("NOTHING_TO_INLINE")
+inline fun LogCompositions(
+    crossinline message: () -> String,
+) {
+    if (MarkdownLogger.enabled) {
+        var ref by remember { mutableStateOf(0) }
+        SideEffect { ref++ }
+        MarkdownLogger.d("Compositions") {
+            "${message()} $ref"
+        }
+    }
+}
\ No newline at end of file
diff --git a/app/src/main/vendor/com/mikepenz/markdown/utils/MarkdownLogger.kt b/app/src/main/vendor/com/mikepenz/markdown/utils/MarkdownLogger.kt
new file mode 100644
index 000000000..308366045
--- /dev/null
+++ b/app/src/main/vendor/com/mikepenz/markdown/utils/MarkdownLogger.kt
@@ -0,0 +1,39 @@
+package com.mikepenz.markdown.utils
+
+import androidx.compose.runtime.snapshots.Snapshot
+
+object MarkdownLogger {
+    /**
+     * Whether to print debug log statements to the relevant system logger. Do not build release
+     * artifacts with this enabled. It's purely for debugging purposes.
+     */
+    var enabled: Boolean = false
+
+    fun d(tag: String, message: () -> String) {
+        d(tag = tag, throwable = null, message = message)
+    }
+
+    fun d(tag: String, throwable: Throwable?, message: () -> String) {
+        if (enabled) {
+            Snapshot.withoutReadObservation {
+                platformLog(
+                    tag = tag,
+                    message = buildString {
+                        append(message())
+                        if (throwable != null) {
+                            append(". Throwable: ")
+                            append(throwable)
+                        }
+                    },
+                )
+            }
+        }
+    }
+}
+
+// Vendored change: upstream declares this `expect` and supplies one `actual` per platform. This
+// tree is Android-only and not a multiplatform module, so the Android implementation
+// (androidMain/MarkdownLogger.android.kt upstream) is inlined here instead.
+internal fun platformLog(tag: String, message: String) {
+    android.util.Log.d(tag, message)
+}
\ No newline at end of file
diff --git a/gradle/libs.versions.toml b/gradle/libs.versions.toml
index b93c2b823..99df167ca 100644
--- a/gradle/libs.versions.toml
+++ b/gradle/libs.versions.toml
@@ -4,6 +4,13 @@ annotationJvm = "1.10.0"
 appcompat = "1.7.1"
 auto-service = "1.1.1"
 agp = "9.2.1"
+composeBom = "2026.08.00"
+collectionsImmutable = "0.4.0"
+# AGP brings its own Kotlin Gradle plugin (built-in Kotlin support), so the Kotlin plugins are
+# applied without a version and this is only what the Compose compiler plugin is pinned to -- it
+# has to be the same one.
+kotlin = "2.2.10"
+markdownParser = "0.7.9"
 constraintlayout = "2.2.1"
 espressoCore = "3.7.0"
 junitVersion = "1.3.0"
@@ -22,6 +29,12 @@ annotation-jvm = { group = "androidx.annotation", name = "annotation-jvm", versi
 appcompat = { group = "androidx.appcompat", name = "appcompat", version.ref = "appcompat" }
 auto-service-annotations = { group = "com.google.auto.service", name = "auto-service-annotations", version.ref = "auto-service" }
 auto-service = { group = "com.google.auto.service", name = "auto-service", version.ref = "auto-service" }
+compose-bom = { group = "androidx.compose", name = "compose-bom", version.ref = "composeBom" }
+compose-animation = { group = "androidx.compose.animation", name = "animation" }
+compose-foundation = { group = "androidx.compose.foundation", name = "foundation" }
+compose-material3 = { group = "androidx.compose.material3", name = "material3" }
+compose-ui = { group = "androidx.compose.ui", name = "ui" }
+kotlinx-collections-immutable = { group = "org.jetbrains.kotlinx", name = "kotlinx-collections-immutable", version.ref = "collectionsImmutable" }
 constraintlayout = { group = "androidx.constraintlayout", name = "constraintlayout", version.ref = "constraintlayout" }
 espresso-core = { group = "androidx.test.espresso", name = "espresso-core", version.ref = "espressoCore" }
 ext-junit = { group = "androidx.test.ext", name = "junit", version.ref = "junitVersion" }
@@ -29,6 +42,7 @@ junit = { group = "junit", name = "junit", version.ref = "junit" }
 libsu-core = { group = "com.github.topjohnwu.libsu", name = "core", version.ref = "libsu" }
 libsu-nio = { group = "com.github.topjohnwu.libsu", name = "nio", version.ref = "libsu" }
 libsu-service = { group = "com.github.topjohnwu.libsu", name = "service", version.ref = "libsu" }
+markdown-parser = { group = "org.jetbrains", name = "markdown", version.ref = "markdownParser" }
 material = { group = "com.google.android.material", name = "material", version.ref = "material" }
 okhttp3 = { group = "com.squareup.okhttp3", name = "okhttp", version.ref = "okhttp3" }
 snakeyaml = { group = "org.yaml", name = "snakeyaml", version.ref = "snakeyaml" }
@@ -41,4 +55,5 @@ termux-view = { group = "com.github.termux.termux-app", name = "terminal-view",
 [plugins]
 android-application = { id = "com.android.application", version.ref = "agp" }
 android-library = { id = "com.android.library", version.ref = "agp" }
+kotlin-compose = { id = "org.jetbrains.kotlin.plugin.compose", version.ref = "kotlin" }
 
diff --git a/scripts/ci/ascii_allow.txt b/scripts/ci/ascii_allow.txt
index 6774fb8e4..6b26a1366 100644
--- a/scripts/ci/ascii_allow.txt
+++ b/scripts/ci/ascii_allow.txt
@@ -23,6 +23,10 @@ app/src/main/assets/data/languages.yaml
 # Documentation (prose; may name languages/tools in their own script).
 *.md
 
+# Vendored third-party source (see app/src/main/vendor/README.md). Not ours to reformat: it is
+# kept byte-for-byte as upstream published it so that updating is a copy, not a merge.
+app/src/main/vendor/*
+
 # Third-party / tool-generated files we don't hand-edit.
 LICENSE.txt
 gradlew

From 097137f1e14eaa63c770489c60decf3b09b6136d Mon Sep 17 00:00:00 2001
From: HuJK <gh@hujk.org>
Date: Fri, 4 Sep 2026 02:42:10 +0800
Subject: [PATCH 161/182] disk: decide a shared disk at start time, by run
 state, not in the editor

Two VMs on one image only corrupt it while both hold the file, so sharing
alone is no longer a reason to take the write away from a slot the user
configured:

- the disk editor stops forcing read-only for a path another VM attaches.
  What it still forces is what its own rows can prove: a base with
  registered overlays, and two rows here pointing at the same file.
- a pre-start guard asks the daemon instead. With every other VM on the
  disk stopped the start proceeds writable and untouched; with any of them
  not stopped it offers to attach those disks read-only, with the same 5s
  countdown the compressed-disk guard uses so an unattended start is not
  blocked. That flip lasts one boot: the daemon is handed a copy of the
  config and the store keeps its writable slots, so the next start decides
  again from what was saved.
- deleting a VM now offers exactly the disks that deletion would leave
  dangling -- writable, and referenced by no other VM -- rather than
  counting every writable attachment and quietly keeping the shared ones
  afterwards.

VmDiskSharing holds the one "who else attaches this path" rule the three
sites now share, with the CDROM bus counting as unwritable everywhere: both
backends open it read-only whatever the flag says, so it is neither at risk
from a co-tenant nor a file the VM owns.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_015BTc7yZ1DPCX7xpbYcUo2V
---
 .../cn/classfun/droidvm/ui/vm/VMActions.java  | 217 +++++++++++++-----
 .../cn/classfun/droidvm/ui/vm/VMDeletion.java |  80 ++++---
 .../classfun/droidvm/ui/vm/VmDiskSharing.java | 123 ++++++++++
 .../edit/storage/disk/VMDiskEditAdapter.java  |  40 +---
 app/src/main/res/values-zh-rCN/strings.xml    |   8 +-
 app/src/main/res/values-zh-rTW/strings.xml    |   8 +-
 app/src/main/res/values/strings.xml           |   8 +-
 .../droidvm/ui/vm/VmDiskSharingTest.java      | 105 +++++++++
 8 files changed, 461 insertions(+), 128 deletions(-)
 create mode 100644 app/src/main/java/cn/classfun/droidvm/ui/vm/VmDiskSharing.java
 create mode 100644 app/src/test/java/cn/classfun/droidvm/ui/vm/VmDiskSharingTest.java

diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/VMActions.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/VMActions.java
index d9928e3e5..7b299474b 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/VMActions.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/VMActions.java
@@ -32,9 +32,14 @@
 
 import java.util.ArrayList;
 import java.util.HashSet;
+import java.util.LinkedHashMap;
+import java.util.LinkedHashSet;
 import java.util.List;
+import java.util.Map;
+import java.util.Set;
 import java.util.UUID;
 import java.util.concurrent.atomic.AtomicBoolean;
+import java.util.function.Consumer;
 
 import cn.classfun.droidvm.R;
 import cn.classfun.droidvm.lib.daemon.DaemonConnection;
@@ -79,15 +84,18 @@ public static void createAndStart(
         @Nullable ConvertLauncher convertLauncher
     ) {
         // Pre-start guards, in order: internal snapshots (crosvm refuses the disk), a base
-        // image attached writable (writing would corrupt its overlays - any backend),
-        // compressed clusters (crosvm boots to I/O errors), and a huge-page reserve too small
-        // to back this VM. Each prompts with its fix and chains to the next; everything else
-        // starts normally.
+        // image attached writable (writing would corrupt its overlays - any backend), a disk a
+        // running VM already holds, compressed clusters (crosvm boots to I/O errors), and a
+        // huge-page reserve too small to back this VM. Each prompts with its fix and chains to
+        // the next; everything else starts normally. The shared-disk guard may hand the rest of
+        // the chain a session copy of the config, so everything downstream uses what it passes
+        // on rather than `config`.
         guardSnapshotDisks(config, mainHandler, ui, convertLauncher,
             () -> guardLockedParents(config, mainHandler, ui,
-                () -> guardCompressedDisks(config, mainHandler, ui, convertLauncher,
-                    () -> guardHugePagePool(config, mainHandler, ui,
-                        () -> startAfterGuard(config, mainHandler, ui, wantOpenConsole)))));
+                () -> guardSharedRunning(config, mainHandler, ui,
+                    started -> guardCompressedDisks(started, mainHandler, ui, convertLauncher,
+                        () -> guardHugePagePool(started, mainHandler, ui,
+                            () -> startAfterGuard(started, mainHandler, ui, wantOpenConsole))))));
     }
 
     /**
@@ -168,11 +176,10 @@ private static void startAfterGuard(
 
     /**
      * Pre-start check: a disk attached writable while registered overlays build on it must not
-     * be written - the overlays' copy-on-write base would shift under them - and neither may a
-     * disk another VM also attaches; so offer to flip those attachments to read-only (persisted)
-     * and start. Backend-independent, unlike the crosvm-specific guards. Registry state and other
-     * VMs' configs can change after this VM was configured, which is why the disk editor's
-     * forced-readonly alone isn't enough.
+     * be written - the overlays' copy-on-write base would shift under them - so offer to flip
+     * those attachments to read-only (persisted) and start. Backend-independent, unlike the
+     * crosvm-specific guards. The registry changes after this VM was configured (an overlay
+     * created elsewhere), which is why the disk editor's forced-readonly alone isn't enough.
      */
     private static void guardLockedParents(
         @NonNull VMConfig config,
@@ -192,69 +199,32 @@ private static void guardLockedParents(
             // exactly the case where linking is right, and a broken one can't boot anyway.
             BackingChainLinker.repairAllBlocking(appContext, qcow2DiskPaths(config));
             var lockedPaths = new ArrayList<String>();
-            var sharedPaths = new ArrayList<String>();
             try {
                 var diskStore = new DiskStore();
                 diskStore.load(appContext);
-                // Disks any OTHER VM attaches, in any mode: two writers corrupt a disk, and a
-                // reader under a writer sees it change - so a shared disk is read-only for all.
-                var others = new HashSet<String>();
-                var vmStore = new VMStore();
-                if (vmStore.load(vmStore, appContext)) {
-                    for (int i = 0; i < vmStore.size(); i++) {
-                        var other = vmStore.get(i);
-                        if (other.getId().equals(config.getId())) continue;
-                        var otherDisks = other.item.opt("disks", null);
-                        if (otherDisks == null || !otherDisks.is(DataItem.Type.ARRAY)) continue;
-                        for (var disk : otherDisks.asArray()) {
-                            var path = disk.optString("path", "");
-                            if (!path.isEmpty()) others.add(path);
-                        }
-                    }
-                }
-                var disks = config.item.opt("disks", null);
-                if (disks != null && disks.is(DataItem.Type.ARRAY)) {
-                    for (var disk : disks.asArray()) {
-                        var path = disk.optString("path", "");
-                        if (path.isEmpty() || disk.optBoolean("readonly", false)) continue;
-                        var registered = diskStore.findByPath(path);
-                        if (registered != null && diskStore.hasChildren(registered.getId()))
-                            lockedPaths.add(path);
-                        else if (others.contains(path))
-                            sharedPaths.add(path);
-                    }
+                for (var path : VmDiskSharing.attachedPaths(config, true)) {
+                    var registered = diskStore.findByPath(path);
+                    if (registered != null && diskStore.hasChildren(registered.getId()))
+                        lockedPaths.add(path);
                 }
             } catch (Exception e) {
                 Log.w(TAG, "locked-parent check failed", e);
             }
-            if (lockedPaths.isEmpty() && sharedPaths.isEmpty()) {
+            if (lockedPaths.isEmpty()) {
                 mainHandler.post(proceed);
                 return;
             }
             mainHandler.post(() -> {
                 if (!ui.isAlive()) return;
                 var ctx = ui.getContext();
-                var message = new StringBuilder();
-                if (!lockedPaths.isEmpty()) {
-                    var files = new StringBuilder();
-                    for (var p : lockedPaths) files.append("\n- ").append(basename(p));
-                    message.append(ctx.getString(R.string.vm_locked_disk_message, files));
-                }
-                if (!sharedPaths.isEmpty()) {
-                    if (message.length() > 0) message.append("\n\n");
-                    var files = new StringBuilder();
-                    for (var p : sharedPaths) files.append("\n- ").append(basename(p));
-                    message.append(ctx.getString(R.string.vm_shared_disk_message, files));
-                }
-                var all = new ArrayList<>(lockedPaths);
-                all.addAll(sharedPaths);
+                var files = new StringBuilder();
+                for (var p : lockedPaths) files.append("\n- ").append(basename(p));
                 new MaterialAlertDialogBuilder(ctx)
-                    .setTitle(lockedPaths.isEmpty()
-                        ? R.string.vm_shared_disk_title : R.string.vm_locked_disk_title)
-                    .setMessage(message)
+                    .setTitle(R.string.vm_locked_disk_title)
+                    .setMessage(ctx.getString(R.string.vm_locked_disk_message, files))
                     .setPositiveButton(R.string.vm_locked_disk_readonly_start, (d, w) ->
                         runOnPool(() -> {
-                            applyReadonly(appContext, config, all);
+                            applyReadonly(appContext, config, lockedPaths);
                             mainHandler.post(proceed);
                         }))
                     .setNegativeButton(android.R.string.cancel, null)
@@ -263,6 +233,135 @@ else if (others.contains(path))
         });
     }
 
+    /**
+     * Pre-start check: another VM may attach the same disk file, and while that VM is running
+     * both would have it open - two writers corrupt the image, and a reader under a writer sees
+     * it change underneath. Sharing on its own is fine, so this asks the daemon instead: with
+     * every other VM on the disk stopped, the start proceeds writable and untouched; with any of
+     * them anything else (starting, running, suspended, stopping, rebooting) the start is
+     * offered read-only for those disks.
+     *
+     * <p>That flip lasts one boot: the copy handed to {@code proceed} is what the daemon is
+     * given, and the stored config keeps its writable slots, so the next start decides again
+     * from what the user saved.
+     */
+    private static void guardSharedRunning(
+        @NonNull VMConfig config,
+        @NonNull Handler mainHandler,
+        @NonNull UIContext ui,
+        @NonNull Consumer<VMConfig> proceed
+    ) {
+        var appContext = ui.getContext().getApplicationContext();
+        runOnPool(() -> {
+            var held = new LinkedHashMap<String, List<String>>();
+            try {
+                var vmStore = new VMStore();
+                if (vmStore.load(appContext)) {
+                    var sharers = VmDiskSharing.sharersOf(vmStore, config.getId(),
+                        VmDiskSharing.attachedPaths(config, true));
+                    if (!sharers.isEmpty()) {
+                        var names = new LinkedHashSet<String>();
+                        for (var vms : sharers.values()) names.addAll(vms);
+                        // Blocking daemon query; a daemon that cannot be reached has no VM
+                        // running either, so it reads as "nobody holds these".
+                        var running = new HashSet<>(VmRunningQuery.inUseAmong(names));
+                        for (var entry : sharers.entrySet()) {
+                            var holders = new ArrayList<String>();
+                            for (var name : entry.getValue())
+                                if (running.contains(name)) holders.add(name);
+                            if (!holders.isEmpty()) held.put(entry.getKey(), holders);
+                        }
+                    }
+                }
+            } catch (Exception e) {
+                Log.w(TAG, "shared-disk check failed", e);
+            }
+            if (held.isEmpty()) {
+                mainHandler.post(() -> proceed.accept(config));
+                return;
+            }
+            mainHandler.post(() -> promptSharedRunning(config, ui, held, proceed));
+        });
+    }
+
+    private static void promptSharedRunning(
+        @NonNull VMConfig config,
+        @NonNull UIContext ui,
+        @NonNull Map<String, List<String>> held,
+        @NonNull Consumer<VMConfig> proceed
+    ) {
+        Runnable start = () -> proceed.accept(readonlyForSession(config, held.keySet()));
+        // Nobody to ask: the start was requested and read-only is the answer that cannot corrupt
+        // anything, which is the same one the countdown below settles on.
+        if (!ui.isAlive()) {
+            start.run();
+            return;
+        }
+        var ctx = ui.getContext();
+        var files = new StringBuilder();
+        for (var entry : held.entrySet())
+            files.append("\n- ").append(basename(entry.getKey()))
+                .append(" (").append(String.join(", ", entry.getValue())).append(")");
+        var dialog = new MaterialAlertDialogBuilder(ctx)
+            .setTitle(R.string.vm_shared_disk_title)
+            .setMessage(ctx.getString(R.string.vm_shared_disk_message, files.toString()))
+            .setPositiveButton(R.string.vm_shared_disk_readonly_start, (d, w) -> start.run())
+            .setNegativeButton(android.R.string.cancel, null)
+            .create();
+        dialog.show();
+        // No response in 5s = the read-only start (the only safe answer while the other VM
+        // holds the file), so an unattended start isn't blocked; the countdown shows on it.
+        var readonlyStart = dialog.getButton(AlertDialog.BUTTON_POSITIVE);
+        if (readonlyStart != null)
+            readonlyStart.setText(ctx.getString(R.string.vm_shared_disk_readonly_countdown, 5));
+        var timer = new CountDownTimer(5000, 1000) {
+            @Override
+            public void onTick(long ms) {
+                if (readonlyStart != null)
+                    readonlyStart.setText(ctx.getString(
+                        R.string.vm_shared_disk_readonly_countdown,
+                        (int) Math.ceil(ms / 1000.0)));
+            }
+
+            @Override
+            public void onFinish() {
+                dialog.dismiss();
+                start.run();
+            }
+        };
+        // Any interaction (a button tap dismisses the dialog) stops the countdown.
+        dialog.setOnDismissListener(d -> timer.cancel());
+        timer.start();
+    }
+
+    /**
+     * A copy of {@code config} with {@code paths} attached read-only, for this start only. The
+     * daemon is handed the copy (vm_create/vm_modify take whatever config the chain carries), so
+     * neither the VM store nor the config the UI holds records the flip.
+     */
+    @NonNull
+    private static VMConfig readonlyForSession(
+        @NonNull VMConfig config,
+        @NonNull Set<String> paths
+    ) {
+        var pathList = new ArrayList<>(paths);
+        try {
+            var session = new VMConfig();
+            // Through JSON: DataItem's copy constructor shares the nested items, and setting
+            // read-only on those would write straight back into the caller's config.
+            session.item.set(config.toJson());
+            setReadonlyOnDisks(session, pathList);
+            return session;
+        } catch (Exception e) {
+            // Starting writable is what this guard exists to prevent, so flip the live config
+            // instead and accept that the editor shows read-only until it reloads; nothing is
+            // saved either way.
+            Log.w(TAG, "session config copy failed; flipping the live config instead", e);
+            setReadonlyOnDisks(config, pathList);
+            return config;
+        }
+    }
+
     /** Flip the given attachments to read-only on the live config and the persisted VM store. */
     private static void applyReadonly(
         @NonNull Context context,
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/VMDeletion.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/VMDeletion.java
index fec869a0c..f556f6cdf 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/VMDeletion.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/VMDeletion.java
@@ -20,15 +20,13 @@
 
 import java.io.File;
 import java.util.ArrayList;
-import java.util.HashSet;
 import java.util.LinkedHashSet;
 import java.util.List;
-import java.util.Set;
+import java.util.UUID;
 import java.util.function.Consumer;
 
 import cn.classfun.droidvm.R;
 import cn.classfun.droidvm.lib.daemon.DaemonConnection;
-import cn.classfun.droidvm.lib.store.base.DataItem;
 import cn.classfun.droidvm.lib.store.disk.DiskConfig;
 import cn.classfun.droidvm.lib.store.disk.DiskStore;
 import cn.classfun.droidvm.lib.store.vm.VMConfig;
@@ -41,18 +39,36 @@ public final class VMDeletion {
     private VMDeletion() {
     }
 
-    /** Shows the same delete options from both the VM list and VM details page. */
+    /**
+     * Shows the same delete options from both the VM list and VM details page. The disk option
+     * counts what deleting this VM would leave dangling - its writable attachments that no other
+     * VM references - so a disk the cleanup would keep is never offered in the first place;
+     * counted off the main thread because it reads the VM store. {@link #cleanupDisks} checks
+     * that again against the saved store, and keeps a base other overlays still build on.
+     */
     public static void confirm(
         @NonNull Context context,
         @NonNull VMConfig config,
         @NonNull Consumer<Boolean> onConfirmed
     ) {
-        var paths = writableDiskPaths(config);
+        var appContext = context.getApplicationContext();
+        runOnPool(() -> {
+            int count = danglingWritablePaths(appContext, config).size();
+            new Handler(Looper.getMainLooper()).post(
+                () -> show(context, config, count, onConfirmed));
+        });
+    }
+
+    private static void show(
+        @NonNull Context context,
+        @NonNull VMConfig config,
+        int diskCount,
+        @NonNull Consumer<Boolean> onConfirmed
+    ) {
         var layout = new LinearLayout(context);
         var deleteDisks = new CheckBox(context);
-        deleteDisks.setText(context.getString(
-            R.string.vm_delete_writable_disks, paths.size()));
-        deleteDisks.setEnabled(!paths.isEmpty());
+        deleteDisks.setText(context.getString(R.string.vm_delete_writable_disks, diskCount));
+        deleteDisks.setEnabled(diskCount > 0);
         int pad = (int) (16 * context.getResources().getDisplayMetrics().density);
         layout.setPadding(pad, 0, pad, 0);
         layout.addView(deleteDisks);
@@ -83,8 +99,9 @@ public static void releaseDaemonAndMaybeDeleteDisks(
         boolean vmStoreSaved
     ) {
         var appContext = context.getApplicationContext();
-        var paths = writableDiskPaths(config);
-        Runnable cleanup = () -> runOnPool(() -> cleanupDisks(appContext, paths));
+        var paths = VmDiskSharing.attachedPaths(config, true);
+        var vmId = config.getId();
+        Runnable cleanup = () -> runOnPool(() -> cleanupDisks(appContext, vmId, paths));
         Runnable skipped = () -> showResult(appContext, new Outcome(0, 0, 0, paths.size()));
 
         var request = DaemonConnection.getInstance().buildRequest("vm_delete")
@@ -110,14 +127,24 @@ public static void releaseDaemonAndMaybeDeleteDisks(
         request.invoke();
     }
 
+    /**
+     * The writable attachments nothing else would reference once this VM is gone. A store that
+     * will not load answers with the unfiltered set: {@link #cleanupDisks} re-checks against the
+     * saved store before anything is removed, so the only cost is an offer that turns out to
+     * keep a file.
+     */
     @NonNull
-    private static LinkedHashSet<String> writableDiskPaths(@NonNull VMConfig config) {
-        var paths = new LinkedHashSet<String>();
-        var disks = config.item.opt("disks", null);
-        if (disks == null || !disks.is(DataItem.Type.ARRAY)) return paths;
-        for (var disk : disks.asArray()) {
-            var path = disk.optString("path", "");
-            if (!path.isEmpty() && !disk.optBoolean("readonly", false)) paths.add(path);
+    private static LinkedHashSet<String> danglingWritablePaths(
+        @NonNull Context context,
+        @NonNull VMConfig config
+    ) {
+        var paths = VmDiskSharing.attachedPaths(config, true);
+        try {
+            var vmStore = new VMStore();
+            if (vmStore.load(context))
+                paths.removeAll(VmDiskSharing.pathsAttachedByOthers(vmStore, config.getId()));
+        } catch (Exception e) {
+            Log.w(TAG, "Failed to check disks against the other VMs", e);
         }
         return paths;
     }
@@ -139,6 +166,7 @@ private static final class Outcome {
 
     private static void cleanupDisks(
         @NonNull Context context,
+        @NonNull UUID vmId,
         @NonNull LinkedHashSet<String> requestedPaths
     ) {
         if (requestedPaths.isEmpty()) return;
@@ -150,9 +178,9 @@ private static void cleanupDisks(
             }
 
             // A writable disk must still be retained when any remaining VM references it,
-            // including through a read-only attachment.
-            var referencedPaths = new HashSet<String>();
-            vmStore.forEach((id, vm) -> collectAllDiskPaths(vm, referencedPaths));
+            // including through a read-only attachment. The deleted VM is out of the saved store
+            // by now; excluding its id as well keeps this right if that save ever races.
+            var referencedPaths = VmDiskSharing.pathsAttachedByOthers(vmStore, vmId);
             var candidates = new LinkedHashSet<String>();
             int attachedByOthers = 0;
             for (var path : requestedPaths) {
@@ -222,18 +250,6 @@ private static void cleanupDisks(
         }
     }
 
-    private static void collectAllDiskPaths(
-        @NonNull VMConfig config,
-        @NonNull Set<String> paths
-    ) {
-        var disks = config.item.opt("disks", null);
-        if (disks == null || !disks.is(DataItem.Type.ARRAY)) return;
-        for (var disk : disks.asArray()) {
-            var path = disk.optString("path", "");
-            if (!path.isEmpty()) paths.add(path);
-        }
-    }
-
     @NonNull
     private static List<DiskConfig> registrationsForPath(
         @NonNull DiskStore store,
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/VmDiskSharing.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/VmDiskSharing.java
new file mode 100644
index 000000000..033ba9e3e
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/VmDiskSharing.java
@@ -0,0 +1,123 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
+package cn.classfun.droidvm.ui.vm;
+
+import androidx.annotation.NonNull;
+import androidx.annotation.Nullable;
+
+import java.util.ArrayList;
+import java.util.Collection;
+import java.util.LinkedHashMap;
+import java.util.LinkedHashSet;
+import java.util.List;
+import java.util.Map;
+import java.util.Set;
+import java.util.UUID;
+
+import cn.classfun.droidvm.lib.store.base.DataItem;
+import cn.classfun.droidvm.lib.store.disk.DiskBus;
+import cn.classfun.droidvm.lib.store.enums.Enums;
+import cn.classfun.droidvm.lib.store.vm.VMConfig;
+import cn.classfun.droidvm.lib.store.vm.VMStore;
+import cn.classfun.droidvm.ui.disk.tree.AttachmentCursors;
+
+/**
+ * Which VMs attach the same disk file. Two VMs writing one image corrupt it, and a reader under
+ * a writer sees the file change underneath - but that only bites while the other VM actually
+ * holds the file, so nothing here decides anything on its own: it answers "who else has this
+ * path in a slot", and each caller pairs that with what it is about to do.
+ *
+ * <p>{@link VMActions} pairs it with the daemon's run state before a start - only a VM that is
+ * not stopped forces this start's attachments read-only - and {@link VMDeletion} uses it to keep
+ * a disk any remaining VM still references. The VM disk editor deliberately does not use it: a
+ * slot saved writable stays writable, and the start guard decides when sharing matters.
+ */
+public final class VmDiskSharing {
+    private VmDiskSharing() {
+    }
+
+    /**
+     * The disk paths this VM attaches, in slot order.
+     *
+     * @param writableOnly skip the slots the guest cannot write - see {@link #isWritable}
+     */
+    @NonNull
+    public static LinkedHashSet<String> attachedPaths(
+        @NonNull VMConfig config,
+        boolean writableOnly
+    ) {
+        var paths = new LinkedHashSet<String>();
+        for (var slot : AttachmentCursors.diskSlots(config)) {
+            var path = slot.optString("path", "");
+            if (path.isEmpty()) continue;
+            if (writableOnly && !isWritable(slot)) continue;
+            paths.add(path);
+        }
+        return paths;
+    }
+
+    /**
+     * Whether this slot can be written. Beyond the read-only flag, a CDROM-bus slot never can:
+     * both backends open it read-only whatever the flag says (qemu {@code media=cdrom,
+     * readonly=on}, crosvm {@code ro=true,type=cdrom}), so it neither risks the image nor counts
+     * as a file this VM owns.
+     */
+    private static boolean isWritable(@NonNull DataItem slot) {
+        return !slot.optBoolean("readonly", false)
+            && Enums.optEnum(slot, "bus", DiskBus.VIRTIO) != DiskBus.CDROM;
+    }
+
+    /**
+     * Every path attached by a VM other than {@code excludeVmId}, read-only attachments
+     * included: a disk another VM reads is as much in use as one it writes.
+     */
+    @NonNull
+    public static Set<String> pathsAttachedByOthers(
+        @NonNull VMStore vms,
+        @Nullable UUID excludeVmId
+    ) {
+        var paths = new LinkedHashSet<String>();
+        for (int i = 0; i < vms.size(); i++) {
+            var vm = vms.get(i);
+            if (isExcluded(vm, excludeVmId)) continue;
+            paths.addAll(attachedPaths(vm, false));
+        }
+        return paths;
+    }
+
+    /**
+     * For each of {@code paths}, the names of the other VMs attaching it, in store order. Paths
+     * nobody else attaches are absent, so an empty result means nothing is shared.
+     */
+    @NonNull
+    public static Map<String, List<String>> sharersOf(
+        @NonNull VMStore vms,
+        @Nullable UUID excludeVmId,
+        @NonNull Collection<String> paths
+    ) {
+        var out = new LinkedHashMap<String, List<String>>();
+        for (int i = 0; i < vms.size(); i++) {
+            var vm = vms.get(i);
+            if (isExcluded(vm, excludeVmId)) continue;
+            var attached = attachedPaths(vm, false);
+            for (var path : paths) {
+                if (!attached.contains(path)) continue;
+                var names = out.computeIfAbsent(path, p -> new ArrayList<>());
+                var name = vm.getName();
+                if (name != null && !names.contains(name)) names.add(name);
+            }
+        }
+        return out;
+    }
+
+    /** A store loaded from a hand-edited file can hold an entry with no usable id. */
+    private static boolean isExcluded(@NonNull VMConfig vm, @Nullable UUID excludeVmId) {
+        if (excludeVmId == null) return false;
+        try {
+            return excludeVmId.equals(vm.getId());
+        } catch (Exception e) {
+            return false;
+        }
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/storage/disk/VMDiskEditAdapter.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/storage/disk/VMDiskEditAdapter.java
index a0cc07d43..177c4c531 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/storage/disk/VMDiskEditAdapter.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/storage/disk/VMDiskEditAdapter.java
@@ -33,7 +33,6 @@
 import cn.classfun.droidvm.lib.store.disk.DiskBus;
 import cn.classfun.droidvm.lib.store.disk.DiskStore;
 import cn.classfun.droidvm.lib.store.enums.Enums;
-import cn.classfun.droidvm.lib.store.vm.VMStore;
 import cn.classfun.droidvm.lib.ui.MenuDialogBuilder;
 import cn.classfun.droidvm.lib.ui.SimpleTextWatcher;
 import cn.classfun.droidvm.ui.disk.tree.AttachmentCursors;
@@ -44,9 +43,15 @@
 /**
  * The VM's disk rows. A row's read-only switch has two layers: what the user chose, and what
  * the disk's situation forces - a base that has overlays must not be written, and neither may a
- * disk another VM (or another row here) also attaches. Forced state is derived on every bind
- * from the registry and the other VMs' slots; it only ever adds read-only, and the user's own
- * choice comes back once the force is gone (overlays deleted, other attachment removed).
+ * disk two rows here both attach. Forced state is derived on every bind from the registry and
+ * the rows themselves; it only ever adds read-only, and the user's own choice comes back once
+ * the force is gone (overlays deleted, the duplicate row re-pointed).
+ *
+ * <p>A disk ANOTHER VM attaches is deliberately not forced here (see
+ * {@link cn.classfun.droidvm.ui.vm.VmDiskSharing}): sharing only corrupts anything while both
+ * VMs hold the file, which is a question about run state at start time, not about how the
+ * config was saved. {@code VMActions}' pre-start guard asks it then, and flips only that
+ * start's attachments.
  */
 public final class VMDiskEditAdapter extends CardItemAdapter<VMDiskEditViewHolder> {
     @FunctionalInterface
@@ -65,10 +70,8 @@ public interface OnItemMovedListener {
     private UefiVarsEnabledProvider uefiVarsEnabledProvider = () -> true;
     private boolean readonlyChanged = false;
     private boolean updatingViews = false;
-    // Full paths of registered disks that have overlays, and of disks any OTHER VM attaches.
-    // Loaded async; rows re-check on bind.
+    // Full paths of registered disks that have overlays. Loaded async; rows re-check on bind.
     private final Set<String> baseOfOverlays = new HashSet<>();
-    private final Set<String> attachedByOtherVms = new HashSet<>();
     // The user's own read-only choice per row, kept apart from the forced value written into
     // the item. Identity-keyed: the row DataItems are stable objects for the adapter's life.
     private final Map<DataItem, Boolean> userReadonly = new IdentityHashMap<>();
@@ -82,10 +85,7 @@ public VMDiskEditAdapter(@NonNull Context context) {
         reloadLocks(null);
     }
 
-    /**
-     * Which VM this editor belongs to (null id for one never saved). Its own saved slots are
-     * not "another VM's" attachments - the rows here stand in for them.
-     */
+    /** Which VM this editor belongs to (null id for one never saved), for the branch panel. */
     public void setEditingVm(@Nullable UUID id, @Nullable String name) {
         editingVmId = id;
         editingVmName = name == null ? "" : name;
@@ -96,13 +96,11 @@ public void reloadLockedPaths() {
         reloadLocks(null);
     }
 
-    /** @param onDone runs on the main thread once the caches reflect the current stores. */
+    /** @param onDone runs on the main thread once the cache reflects the disk registry. */
     @SuppressLint("NotifyDataSetChanged")
     public void reloadLocks(@Nullable Runnable onDone) {
-        var editing = editingVmId;
         runOnPool(() -> {
             var bases = new HashSet<String>();
-            var others = new HashSet<String>();
             try {
                 var store = new DiskStore();
                 store.load(context);
@@ -111,24 +109,11 @@ public void reloadLocks(@Nullable Runnable onDone) {
                     if (store.hasChildren(cfg.getId()))
                         bases.add(cfg.getFullPath());
                 }
-                var vms = new VMStore();
-                if (vms.load(vms, context)) {
-                    for (int i = 0; i < vms.size(); i++) {
-                        var vm = vms.get(i);
-                        if (editing != null && editing.equals(vm.getId())) continue;
-                        for (var slot : AttachmentCursors.diskSlots(vm)) {
-                            var path = slot.optString("path", "");
-                            if (!path.isEmpty()) others.add(path);
-                        }
-                    }
-                }
             } catch (Exception ignored) {
             }
             mainHandler.post(() -> {
                 baseOfOverlays.clear();
                 baseOfOverlays.addAll(bases);
-                attachedByOtherVms.clear();
-                attachedByOtherVms.addAll(others);
                 try {
                     notifyDataSetChanged();
                 } catch (Exception ignored) {
@@ -143,7 +128,6 @@ public void reloadLocks(@Nullable Runnable onDone) {
     private int forcedReason(@NonNull String path, int position) {
         if (path.isEmpty()) return 0;
         if (baseOfOverlays.contains(path)) return R.string.edit_vm_disk_locked_readonly;
-        if (attachedByOtherVms.contains(path)) return R.string.edit_vm_disk_shared_readonly;
         for (int i = 0; i < items.size(); i++) {
             if (i == position) continue;
             var d = items.get(i);
diff --git a/app/src/main/res/values-zh-rCN/strings.xml b/app/src/main/res/values-zh-rCN/strings.xml
index afecee425..2fe6fc043 100644
--- a/app/src/main/res/values-zh-rCN/strings.xml
+++ b/app/src/main/res/values-zh-rCN/strings.xml
@@ -589,9 +589,11 @@
     <string name="disk_tree_change_readonly">虚拟机“%1$s”磁盘 #%2$d：%3$s 改为只读</string>
     <string name="disk_tree_change_rewritten">虚拟机“%1$s”磁盘 #%2$d：%3$s 的内容将被改写为 %4$s 的当前状态</string>
     <string name="disk_tree_pinned">下列虚拟机尚未关机，其挂载的磁盘会受此操作影响，请先关机：%1$s</string>
-    <string name="edit_vm_disk_shared_readonly">此磁盘也被其他虚拟机挂载，已改为只读挂载</string>
-    <string name="vm_shared_disk_title">磁盘与其他虚拟机共用</string>
-    <string name="vm_shared_disk_message">下列磁盘也被其他虚拟机挂载，两边同时写入会损坏磁盘。要改为只读挂载并启动吗？\n%1$s</string>
+    <string name="edit_vm_disk_shared_readonly">本虚拟机的其他插槽也挂了此磁盘，已改为只读挂载</string>
+    <string name="vm_shared_disk_title">磁盘正被运行中的虚拟机占用</string>
+    <string name="vm_shared_disk_message">下列磁盘正被尚未关机的虚拟机挂载，此时写入会损坏镜像。可以改用只读模式开机——只影响这次开机，存档的设置仍保持可写入。\n%1$s</string>
+    <string name="vm_shared_disk_readonly_start">以只读模式开机</string>
+    <string name="vm_shared_disk_readonly_countdown">以只读模式开机 (%1$d)</string>
     <string name="disk_tree_not_registered">此磁盘未登记，无法使用分支功能</string>
     <string name="vm_compressed_disk_start_anyway">仍要启动</string>
     <string name="vm_compressed_disk_start_countdown">仍要启动 (%1$d)</string>
diff --git a/app/src/main/res/values-zh-rTW/strings.xml b/app/src/main/res/values-zh-rTW/strings.xml
index dcb3a05e1..c1ddae144 100644
--- a/app/src/main/res/values-zh-rTW/strings.xml
+++ b/app/src/main/res/values-zh-rTW/strings.xml
@@ -589,9 +589,11 @@
     <string name="disk_tree_change_readonly">虛擬機器「%1$s」磁碟 #%2$d：%3$s 改為唯讀</string>
     <string name="disk_tree_change_rewritten">虛擬機器「%1$s」磁碟 #%2$d：%3$s 的內容將被改寫為 %4$s 的目前狀態</string>
     <string name="disk_tree_pinned">下列虛擬機器尚未關機，其掛載的磁碟會受此操作影響，請先關機：%1$s</string>
-    <string name="edit_vm_disk_shared_readonly">此磁碟也被其他虛擬機器掛載，已改為唯讀掛載</string>
-    <string name="vm_shared_disk_title">磁碟與其他虛擬機器共用</string>
-    <string name="vm_shared_disk_message">下列磁碟也被其他虛擬機器掛載，兩邊同時寫入會毀損磁碟。要改為唯讀掛載並啟動嗎？\n%1$s</string>
+    <string name="edit_vm_disk_shared_readonly">本虛擬機器的其他插槽也掛了此磁碟，已改為唯讀掛載</string>
+    <string name="vm_shared_disk_title">磁碟正被執行中的虛擬機器佔用</string>
+    <string name="vm_shared_disk_message">下列磁碟正被尚未關機的虛擬機器掛載，此時寫入會毀損映像。可以改用唯讀模式開機——只影響這次開機，存檔的設定仍維持可寫入。\n%1$s</string>
+    <string name="vm_shared_disk_readonly_start">以唯讀模式開機</string>
+    <string name="vm_shared_disk_readonly_countdown">以唯讀模式開機 (%1$d)</string>
     <string name="disk_tree_not_registered">此磁碟未登記，無法使用分支功能</string>
     <string name="vm_compressed_disk_start_anyway">仍要啟動</string>
     <string name="vm_compressed_disk_start_countdown">仍要啟動 (%1$d)</string>
diff --git a/app/src/main/res/values/strings.xml b/app/src/main/res/values/strings.xml
index c9aae5541..4835ee7d3 100644
--- a/app/src/main/res/values/strings.xml
+++ b/app/src/main/res/values/strings.xml
@@ -626,9 +626,11 @@
     <string name="disk_tree_change_readonly">VM %1$s, disk #%2$d: %3$s becomes read-only</string>
     <string name="disk_tree_change_rewritten">VM %1$s, disk #%2$d: %3$s\'s content is replaced by %4$s\'s state</string>
     <string name="disk_tree_pinned">VMs that are not stopped hold disks this would change; shut them down first:%1$s</string>
-    <string name="edit_vm_disk_shared_readonly">This disk is attached by another VM too; attached read-only</string>
-    <string name="vm_shared_disk_title">Disk shared with another VM</string>
-    <string name="vm_shared_disk_message">These disks are attached by other VMs as well; two writers would corrupt them. Attach them read-only and start?\n%1$s</string>
+    <string name="edit_vm_disk_shared_readonly">Another slot of this VM attaches this disk too; attached read-only</string>
+    <string name="vm_shared_disk_title">Disk held by a running VM</string>
+    <string name="vm_shared_disk_message">These disks are attached by VMs that are not stopped; writing to them now would corrupt the images. This start can attach them read-only - for this boot only, leaving the saved configuration writable.\n%1$s</string>
+    <string name="vm_shared_disk_readonly_start">Start read-only</string>
+    <string name="vm_shared_disk_readonly_countdown">Start read-only (%1$d)</string>
     <string name="disk_tree_not_registered">This disk isn\'t registered; branches unavailable</string>
     <string name="vm_compressed_disk_start_anyway">Start anyway</string>
     <string name="vm_compressed_disk_start_countdown">Start anyway (%1$d)</string>
diff --git a/app/src/test/java/cn/classfun/droidvm/ui/vm/VmDiskSharingTest.java b/app/src/test/java/cn/classfun/droidvm/ui/vm/VmDiskSharingTest.java
new file mode 100644
index 000000000..840eecf1b
--- /dev/null
+++ b/app/src/test/java/cn/classfun/droidvm/ui/vm/VmDiskSharingTest.java
@@ -0,0 +1,105 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
+package cn.classfun.droidvm.ui.vm;
+
+import static org.junit.Assert.assertEquals;
+import static org.junit.Assert.assertFalse;
+import static org.junit.Assert.assertTrue;
+
+import org.junit.Test;
+
+import java.util.ArrayList;
+import java.util.List;
+
+import cn.classfun.droidvm.lib.store.base.DataItem;
+import cn.classfun.droidvm.lib.store.disk.DiskBus;
+import cn.classfun.droidvm.lib.store.vm.VMConfig;
+import cn.classfun.droidvm.lib.store.vm.VMStore;
+
+public final class VmDiskSharingTest {
+    /**
+     * Slots are written {@code "/path"} for a writable virtio one, {@code "/path:ro"} for one
+     * attached read-only, and {@code "/path:cd"} for a CDROM-bus one whose flag says writable.
+     */
+    private static VMConfig vm(String name, String... slots) {
+        var config = new VMConfig();
+        config.setName(name);
+        var disks = DataItem.newArray();
+        for (var slot : slots) {
+            boolean readonly = slot.endsWith(":ro");
+            boolean cdrom = slot.endsWith(":cd");
+            var disk = DataItem.newObject();
+            disk.set("path", readonly || cdrom ? slot.substring(0, slot.length() - 3) : slot);
+            disk.set("readonly", readonly);
+            disk.set("bus", cdrom ? DiskBus.CDROM : DiskBus.VIRTIO);
+            disks.append(disk);
+        }
+        config.item.set("disks", disks);
+        return config;
+    }
+
+    private static VMStore store(VMConfig... vms) {
+        var store = new VMStore();
+        for (var vm : vms) store.add(vm);
+        return store;
+    }
+
+    /** An empty path is a slot the user has not filled in yet, never a file. */
+    @Test
+    public void attachedPathsSkipEmptySlotsAndOptionallyTheUnwritableOnes() {
+        var config = vm("a", "/data.qcow2", "/base.qcow2:ro", "/install.iso:cd", "");
+        assertEquals(List.of("/data.qcow2", "/base.qcow2", "/install.iso"),
+            new ArrayList<>(VmDiskSharing.attachedPaths(config, false)));
+        assertEquals("the CDROM bus is read-only in both backends, flag or no flag",
+            List.of("/data.qcow2"),
+            new ArrayList<>(VmDiskSharing.attachedPaths(config, true)));
+    }
+
+    @Test
+    public void othersAttachmentsCountReadOnlyOnesAndSkipTheExcludedVm() {
+        var self = vm("self", "/shared.qcow2", "/own.qcow2");
+        var other = vm("other", "/shared.qcow2:ro", "/theirs.qcow2");
+        var vms = store(self, other);
+
+        var others = VmDiskSharing.pathsAttachedByOthers(vms, self.getId());
+        assertTrue("a read-only attachment still holds the file",
+            others.contains("/shared.qcow2"));
+        assertTrue(others.contains("/theirs.qcow2"));
+        assertFalse("the VM's own slots are not someone else's", others.contains("/own.qcow2"));
+
+        assertTrue("no exclusion means every VM counts",
+            VmDiskSharing.pathsAttachedByOthers(vms, null).contains("/own.qcow2"));
+    }
+
+    @Test
+    public void sharersNameEveryOtherVmOnThePathAndOmitUnsharedOnes() {
+        var self = vm("self", "/shared.qcow2", "/own.qcow2");
+        var vms = store(self, vm("b", "/shared.qcow2"), vm("c", "/shared.qcow2:ro"));
+
+        var sharers = VmDiskSharing.sharersOf(
+            vms, self.getId(), VmDiskSharing.attachedPaths(self, true));
+
+        assertEquals(List.of("/shared.qcow2"), new ArrayList<>(sharers.keySet()));
+        assertEquals(List.of("b", "c"), sharers.get("/shared.qcow2"));
+    }
+
+    @Test
+    public void nothingIsSharedWhenThisIsTheOnlyVm() {
+        var self = vm("self", "/own.qcow2");
+        assertTrue(VmDiskSharing.sharersOf(store(self), self.getId(),
+            VmDiskSharing.attachedPaths(self, true)).isEmpty());
+    }
+
+    /** The rule the delete dialog offers and {@code VMDeletion} then enforces. */
+    @Test
+    public void deletionOffersOnlyWritableDisksNoOneElseReferences() {
+        var doomed = vm("doomed", "/shared.qcow2", "/own.qcow2", "/install.iso:cd");
+        var vms = store(doomed, vm("keeper", "/shared.qcow2:ro"));
+
+        var dangling = VmDiskSharing.attachedPaths(doomed, true);
+        dangling.removeAll(VmDiskSharing.pathsAttachedByOthers(vms, doomed.getId()));
+
+        assertEquals(List.of("/own.qcow2"), new ArrayList<>(dangling));
+    }
+}

From fb1ded15f1971503e3f8291d109d4d732790e942 Mon Sep 17 00:00:00 2001
From: HuJK <gh@hujk.org>
Date: Fri, 4 Sep 2026 02:42:47 +0800
Subject: [PATCH 162/182] vm: ask before starting a VM whose kernel modules are
 not loaded

Each host module under Settings supplies something a particular
configuration reaches for at run time, and without it the VM fails as
anything but a missing module: a guest that cannot see its own RAM, GPU
allocations failing at random, a big VM refusing to boot with "out of
memory" on a phone with memory to spare. A pre-start guard asks up front,
from what the config actually turns on -- pseudo-unprotected RAM wants
gunyah_host_share, GPU acceleration wants gh_unmovable and udmabuf, and a
VM over 2 GB wants the kvcalloc fix.

Which of those apply to this phone is not decided here. The Kernel Module
list already answers it -- the KMI directory picks the build for the
running kernel and match.json drops what was written for another SoC -- so
a module the list does not offer is skipped without a word rather than
warned about. That is also why the kvcalloc rule needs no "and only on the
8 Gen 3": the fix is built for the 6.1 GKI whose Gunyah driver has the bug,
and for Qualcomm, so it can only surface there. It keeps working as the
module set grows to other vendors.

The dialog offers to start anyway (5s countdown, the answer an unattended
start gets), to open the module page, or to cancel. Nothing here loads a
module on the user's behalf: that is a decision of its own, made where the
modules are managed.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_015BTc7yZ1DPCX7xpbYcUo2V
---
 .../droidvm/ui/vm/KernelModulePreflight.java  | 124 ++++++++++++++++++
 .../cn/classfun/droidvm/ui/vm/VMActions.java  | 117 ++++++++++++++++-
 app/src/main/res/values-zh-rCN/strings.xml    |   9 ++
 app/src/main/res/values-zh-rTW/strings.xml    |   9 ++
 app/src/main/res/values/strings.xml           |   9 ++
 .../ui/vm/KernelModulePreflightTest.java      |  72 ++++++++++
 6 files changed, 333 insertions(+), 7 deletions(-)
 create mode 100644 app/src/main/java/cn/classfun/droidvm/ui/vm/KernelModulePreflight.java
 create mode 100644 app/src/test/java/cn/classfun/droidvm/ui/vm/KernelModulePreflightTest.java

diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/KernelModulePreflight.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/KernelModulePreflight.java
new file mode 100644
index 000000000..ac45e5463
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/KernelModulePreflight.java
@@ -0,0 +1,124 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
+package cn.classfun.droidvm.ui.vm;
+
+import static cn.classfun.droidvm.lib.store.enums.Enums.optEnum;
+
+import android.content.Context;
+
+import androidx.annotation.NonNull;
+import androidx.annotation.StringRes;
+
+import java.util.ArrayList;
+import java.util.LinkedHashMap;
+import java.util.List;
+
+import cn.classfun.droidvm.R;
+import cn.classfun.droidvm.lib.store.base.DataItem;
+import cn.classfun.droidvm.lib.store.vm.ProtectedVM;
+import cn.classfun.droidvm.lib.store.vm.VMScreenConfig;
+import cn.classfun.droidvm.ui.main.settings.KernelModuleManager;
+
+/**
+ * Does this VM's configuration need a host kernel module that is not loaded?
+ *
+ * <p>The modules under Settings are not decoration: each one supplies something a particular
+ * configuration will reach for at run time, and without it the VM fails in a way that looks like
+ * anything but a missing module - a guest that cannot see its own RAM, GPU allocations failing at
+ * random, a big VM refusing to boot with "out of memory" on a phone with memory to spare. This
+ * asks the question up front, per VM, from what the config actually turns on:
+ *
+ * <ul>
+ *   <li>pseudo-unprotected RAM is SHARE'd to the running guest through
+ *       {@code /dev/gunyah_share} - the Gunyah Host Share module;
+ *   <li>GPU acceleration pins graphics memory ({@code gh_unmovable}, or the pin's migration
+ *       fails and Vulkan reports out-of-device-memory) and hands it over as dma-bufs
+ *       ({@code udmabuf}, which also lifts the 64 MB per-buffer cap);
+ *   <li>a VM over {@value #KVCALLOC_MEMORY_MB} MB needs a page list too big to come out of one
+ *       contiguous kcalloc on a fragmented phone - the kvcalloc fix.
+ * </ul>
+ *
+ * <p><b>Which devices each rule applies to is not decided here.</b> The rules above say only what
+ * the <em>configuration</em> reaches for; whether this phone has anything to load is the module
+ * list's own answer, and it is already a narrow one - the KMI directory picks the build for the
+ * running kernel and {@code match.json} drops the ones written for another SoC. A module the list
+ * does not offer is skipped without a word: it is not a missing prerequisite but one that was
+ * never part of the answer here, and the manage page would show nothing to load either. That is
+ * why the kvcalloc rule needs no "and only on the 8 Gen 3" of its own - the fix is built for the
+ * 6.1 GKI whose Gunyah driver has the bug, and for Qualcomm, so it can only ever surface there.
+ *
+ * <p>Blocking - it reads {@code /proc/modules} through root; call it off the main thread.
+ */
+public final class KernelModulePreflight {
+    /** Module-name prefixes, as {@code match.json} keys them; the .ko adds a KMI suffix. */
+    static final String GUNYAH_HOST_SHARE = "gunyah_host_share";
+    static final String GH_UNMOVABLE = "gh_unmovable";
+    static final String UDMABUF = "udmabuf";
+    static final String GUNYAH_KVCALLOC = "gunyah_kvcalloc";
+
+    /** Above this much guest RAM the 6.1 Gunyah driver's page list stops fitting a kcalloc. */
+    static final long KVCALLOC_MEMORY_MB = 2048;
+
+    private KernelModulePreflight() {
+    }
+
+    /** A module this VM wants, and the part of its configuration that wants it. */
+    public static final class Missing {
+        /** The module's title as the Kernel Module list shows it. */
+        @NonNull
+        public final String display;
+        @StringRes
+        public final int reason;
+
+        Missing(@NonNull String display, @StringRes int reason) {
+            this.display = display;
+            this.reason = reason;
+        }
+    }
+
+    /**
+     * The modules this configuration reaches for, module prefix to the reason string, in the
+     * order the dialog lists them. Pure, and deliberately device-blind: {@link #check} drops
+     * whatever this phone has no build for.
+     */
+    @NonNull
+    static LinkedHashMap<String, Integer> wantedBy(@NonNull DataItem item) {
+        var wanted = new LinkedHashMap<String, Integer>();
+        if (optEnum(item, "protected_vm", ProtectedVM.PROTECTED_WITHOUT_FIRMWARE)
+            == ProtectedVM.PSEUDO_UNPROTECTED)
+            wanted.put(GUNYAH_HOST_SHARE, R.string.vm_kernel_module_reason_pseudo_unprotected);
+        if (VMScreenConfig.hasGpuDevice(item)) {
+            wanted.put(GH_UNMOVABLE, R.string.vm_kernel_module_reason_gpu);
+            wanted.put(UDMABUF, R.string.vm_kernel_module_reason_gpu);
+        }
+        if (item.optLong("memory_mb", 512) > KVCALLOC_MEMORY_MB)
+            wanted.put(GUNYAH_KVCALLOC, R.string.vm_kernel_module_reason_memory);
+        return wanted;
+    }
+
+    /** The wanted modules that apply to this device and are not loaded, in the order above. */
+    @NonNull
+    public static List<Missing> check(@NonNull Context ctx, @NonNull DataItem item) {
+        var wanted = wantedBy(item);
+        if (wanted.isEmpty()) return List.of();
+
+        var modules = KernelModuleManager.list(ctx);
+        var missing = new ArrayList<Missing>();
+        for (var want : wanted.entrySet()) {
+            KernelModuleManager.Module shipped = null;
+            boolean loaded = false;
+            for (var mod : modules) {
+                if (!mod.name.startsWith(want.getKey())) continue;
+                if (shipped == null) shipped = mod;
+                if (mod.loaded) {
+                    loaded = true;
+                    break;
+                }
+            }
+            if (shipped != null && !loaded)
+                missing.add(new Missing(shipped.display, want.getValue()));
+        }
+        return missing;
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/VMActions.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/VMActions.java
index 7b299474b..ff9da50eb 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/VMActions.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/VMActions.java
@@ -25,6 +25,7 @@
 import androidx.annotation.NonNull;
 import androidx.annotation.Nullable;
 import androidx.appcompat.app.AlertDialog;
+import androidx.fragment.app.FragmentActivity;
 
 import com.google.android.material.dialog.MaterialAlertDialogBuilder;
 
@@ -52,6 +53,7 @@
 import cn.classfun.droidvm.lib.store.vm.VMBackend;
 import cn.classfun.droidvm.lib.hugepage.PoolPreflight;
 import cn.classfun.droidvm.ui.hugepage.HugePageActivity;
+import cn.classfun.droidvm.ui.main.settings.KernelModuleDialog;
 import cn.classfun.droidvm.lib.store.vm.VMConfig;
 import cn.classfun.droidvm.lib.store.vm.VMStore;
 import cn.classfun.droidvm.lib.ui.UIContext;
@@ -85,17 +87,118 @@ public static void createAndStart(
     ) {
         // Pre-start guards, in order: internal snapshots (crosvm refuses the disk), a base
         // image attached writable (writing would corrupt its overlays - any backend), a disk a
-        // running VM already holds, compressed clusters (crosvm boots to I/O errors), and a
-        // huge-page reserve too small to back this VM. Each prompts with its fix and chains to
-        // the next; everything else starts normally. The shared-disk guard may hand the rest of
-        // the chain a session copy of the config, so everything downstream uses what it passes
-        // on rather than `config`.
+        // running VM already holds, compressed clusters (crosvm boots to I/O errors), a host
+        // kernel module this configuration needs but nobody loaded, and a huge-page reserve too
+        // small to back this VM. Each prompts with its fix and chains to the next; everything
+        // else starts normally. The shared-disk guard may hand the rest of the chain a session
+        // copy of the config, so everything downstream uses what it passes on rather than
+        // `config`.
         guardSnapshotDisks(config, mainHandler, ui, convertLauncher,
             () -> guardLockedParents(config, mainHandler, ui,
                 () -> guardSharedRunning(config, mainHandler, ui,
                     started -> guardCompressedDisks(started, mainHandler, ui, convertLauncher,
-                        () -> guardHugePagePool(started, mainHandler, ui,
-                            () -> startAfterGuard(started, mainHandler, ui, wantOpenConsole))))));
+                        () -> guardKernelModules(started, mainHandler, ui,
+                            () -> guardHugePagePool(started, mainHandler, ui,
+                                () -> startAfterGuard(started, mainHandler, ui,
+                                    wantOpenConsole)))))));
+    }
+
+    /**
+     * Pre-start check: does this VM's configuration reach for a host kernel module nobody has
+     * loaded? {@link KernelModulePreflight} answers that from the config itself (pseudo-
+     * unprotected RAM, GPU acceleration, a VM too big for the 6.1 Gunyah driver's page list),
+     * counting only the modules the Kernel Module page would actually offer on this phone - a
+     * module built for another kernel or another SoC is not something to warn about.
+     *
+     * <p>Unlike the disk guards there is nothing here to repair on the user's behalf: loading a
+     * module is a decision of its own, made in the Kernel Module page, which is why the offer is
+     * to go there rather than to fix it from this dialog. Starting anyway is a real answer too -
+     * a missing module costs the feature that wanted it, and does not corrupt anything - so it
+     * is what the countdown settles on for a start nobody is watching.
+     */
+    private static void guardKernelModules(
+        @NonNull VMConfig config,
+        @NonNull Handler mainHandler,
+        @NonNull UIContext ui,
+        @NonNull Runnable proceed
+    ) {
+        var appContext = ui.getContext().getApplicationContext();
+        runOnPool(() -> {
+            List<KernelModulePreflight.Missing> missing;
+            try {
+                missing = KernelModulePreflight.check(appContext, config.item);
+            } catch (Exception e) {
+                Log.w(TAG, "kernel-module preflight failed", e);
+                missing = List.of();
+            }
+            if (missing.isEmpty()) {
+                mainHandler.post(proceed);
+                return;
+            }
+            var found = missing;
+            mainHandler.post(() -> promptKernelModules(ui, found, proceed));
+        });
+    }
+
+    private static void promptKernelModules(
+        @NonNull UIContext ui,
+        @NonNull List<KernelModulePreflight.Missing> missing,
+        @NonNull Runnable proceed
+    ) {
+        if (!ui.isAlive()) {
+            // Nobody to ask: the start was requested, so honour it.
+            proceed.run();
+            return;
+        }
+        var ctx = ui.getContext();
+        var lines = new StringBuilder();
+        for (var m : missing)
+            lines.append("\n- ").append(m.display).append(": ").append(ctx.getString(m.reason));
+        var dialog = new MaterialAlertDialogBuilder(ctx)
+            .setTitle(R.string.vm_kernel_module_title)
+            .setMessage(ctx.getString(R.string.vm_kernel_module_message, lines.toString()))
+            .setPositiveButton(R.string.vm_kernel_module_start_anyway, (d, w) -> proceed.run())
+            .setNeutralButton(R.string.vm_kernel_module_manage, (d, w) -> showKernelModules(ctx))
+            .setNegativeButton(android.R.string.cancel, null)
+            .create();
+        dialog.show();
+        // No response in 5s = "start anyway" (the chosen default), so an
+        // unattended start isn't blocked; the countdown shows on that button.
+        var startAnyway = dialog.getButton(AlertDialog.BUTTON_POSITIVE);
+        if (startAnyway != null)
+            startAnyway.setText(ctx.getString(R.string.vm_kernel_module_start_countdown, 5));
+        var timer = new CountDownTimer(5000, 1000) {
+            @Override
+            public void onTick(long ms) {
+                if (startAnyway != null)
+                    startAnyway.setText(ctx.getString(
+                        R.string.vm_kernel_module_start_countdown,
+                        (int) Math.ceil(ms / 1000.0)));
+            }
+
+            @Override
+            public void onFinish() {
+                dialog.dismiss();
+                proceed.run();
+            }
+        };
+        // Any interaction (a button tap dismisses the dialog) stops the countdown.
+        dialog.setOnDismissListener(d -> timer.cancel());
+        timer.start();
+    }
+
+    /**
+     * Opens the Kernel Module list (the same one Settings shows). This ends the start: loading a
+     * module is not instant, and re-deciding from a page the user is still working in would be
+     * guesswork - they start the VM again when they are done.
+     */
+    private static void showKernelModules(@NonNull Context ctx) {
+        if (ctx instanceof FragmentActivity) {
+            KernelModuleDialog.show(((FragmentActivity) ctx).getSupportFragmentManager());
+            return;
+        }
+        Log.w(TAG, "no fragment host for the kernel module list");
+        Toast.makeText(ctx, R.string.vm_kernel_module_manage_unavailable, LENGTH_LONG).show();
     }
 
     /**
diff --git a/app/src/main/res/values-zh-rCN/strings.xml b/app/src/main/res/values-zh-rCN/strings.xml
index 2fe6fc043..e97b8ca2c 100644
--- a/app/src/main/res/values-zh-rCN/strings.xml
+++ b/app/src/main/res/values-zh-rCN/strings.xml
@@ -595,6 +595,15 @@
     <string name="vm_shared_disk_readonly_start">以只读模式开机</string>
     <string name="vm_shared_disk_readonly_countdown">以只读模式开机 (%1$d)</string>
     <string name="disk_tree_not_registered">此磁盘未登记，无法使用分支功能</string>
+    <string name="vm_kernel_module_title">内核模块未加载</string>
+    <string name="vm_kernel_module_message">这台虚拟机的设置需要下列内核模块，但目前没有加载。仍要开机的话，需要它们的功能就不会生效：\n%1$s</string>
+    <string name="vm_kernel_module_reason_pseudo_unprotected">伪非保护模式靠它把内存交给运行中的虚拟机</string>
+    <string name="vm_kernel_module_reason_gpu">GPU 加速需要</string>
+    <string name="vm_kernel_module_reason_memory">内存超过 2 GB 的虚拟机需要</string>
+    <string name="vm_kernel_module_start_anyway">仍要开机</string>
+    <string name="vm_kernel_module_start_countdown">仍要开机 (%1$d)</string>
+    <string name="vm_kernel_module_manage">管理模块</string>
+    <string name="vm_kernel_module_manage_unavailable">请到“设置 \u2192 内核模块”加载</string>
     <string name="vm_compressed_disk_start_anyway">仍要启动</string>
     <string name="vm_compressed_disk_start_countdown">仍要启动 (%1$d)</string>
     <string name="field_copy">复制</string>
diff --git a/app/src/main/res/values-zh-rTW/strings.xml b/app/src/main/res/values-zh-rTW/strings.xml
index c1ddae144..1369c2ede 100644
--- a/app/src/main/res/values-zh-rTW/strings.xml
+++ b/app/src/main/res/values-zh-rTW/strings.xml
@@ -595,6 +595,15 @@
     <string name="vm_shared_disk_readonly_start">以唯讀模式開機</string>
     <string name="vm_shared_disk_readonly_countdown">以唯讀模式開機 (%1$d)</string>
     <string name="disk_tree_not_registered">此磁碟未登記，無法使用分支功能</string>
+    <string name="vm_kernel_module_title">內核模組未載入</string>
+    <string name="vm_kernel_module_message">這台虛擬機器的設定需要下列內核模組，但目前沒有載入。仍要開機的話，需要它們的功能就不會生效：\n%1$s</string>
+    <string name="vm_kernel_module_reason_pseudo_unprotected">偽非保護模式靠它把記憶體交給執行中的虛擬機器</string>
+    <string name="vm_kernel_module_reason_gpu">GPU 加速需要</string>
+    <string name="vm_kernel_module_reason_memory">記憶體超過 2 GB 的虛擬機器需要</string>
+    <string name="vm_kernel_module_start_anyway">仍要開機</string>
+    <string name="vm_kernel_module_start_countdown">仍要開機 (%1$d)</string>
+    <string name="vm_kernel_module_manage">管理模組</string>
+    <string name="vm_kernel_module_manage_unavailable">請到「設定 \u2192 內核模組」載入</string>
     <string name="vm_compressed_disk_start_anyway">仍要啟動</string>
     <string name="vm_compressed_disk_start_countdown">仍要啟動 (%1$d)</string>
     <string name="field_copy">複製</string>
diff --git a/app/src/main/res/values/strings.xml b/app/src/main/res/values/strings.xml
index 4835ee7d3..6d46fb865 100644
--- a/app/src/main/res/values/strings.xml
+++ b/app/src/main/res/values/strings.xml
@@ -632,6 +632,15 @@
     <string name="vm_shared_disk_readonly_start">Start read-only</string>
     <string name="vm_shared_disk_readonly_countdown">Start read-only (%1$d)</string>
     <string name="disk_tree_not_registered">This disk isn\'t registered; branches unavailable</string>
+    <string name="vm_kernel_module_title">Kernel module not loaded</string>
+    <string name="vm_kernel_module_message">This VM\'s configuration needs host kernel modules that are not loaded. Starting anyway costs the feature that wanted them:\n%1$s</string>
+    <string name="vm_kernel_module_reason_pseudo_unprotected">the pseudo-unprotected mode hands the guest its RAM through it</string>
+    <string name="vm_kernel_module_reason_gpu">needed by GPU acceleration</string>
+    <string name="vm_kernel_module_reason_memory">needed by a VM with more than 2 GB of RAM</string>
+    <string name="vm_kernel_module_start_anyway">Start anyway</string>
+    <string name="vm_kernel_module_start_countdown">Start anyway (%1$d)</string>
+    <string name="vm_kernel_module_manage">Manage modules</string>
+    <string name="vm_kernel_module_manage_unavailable">Open Settings \u2192 Kernel Modules to load it</string>
     <string name="vm_compressed_disk_start_anyway">Start anyway</string>
     <string name="vm_compressed_disk_start_countdown">Start anyway (%1$d)</string>
     <string name="field_copy">Copy</string>
diff --git a/app/src/test/java/cn/classfun/droidvm/ui/vm/KernelModulePreflightTest.java b/app/src/test/java/cn/classfun/droidvm/ui/vm/KernelModulePreflightTest.java
new file mode 100644
index 000000000..664a7bb60
--- /dev/null
+++ b/app/src/test/java/cn/classfun/droidvm/ui/vm/KernelModulePreflightTest.java
@@ -0,0 +1,72 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
+package cn.classfun.droidvm.ui.vm;
+
+import static cn.classfun.droidvm.ui.vm.KernelModulePreflight.GH_UNMOVABLE;
+import static cn.classfun.droidvm.ui.vm.KernelModulePreflight.GUNYAH_HOST_SHARE;
+import static cn.classfun.droidvm.ui.vm.KernelModulePreflight.GUNYAH_KVCALLOC;
+import static cn.classfun.droidvm.ui.vm.KernelModulePreflight.KVCALLOC_MEMORY_MB;
+import static cn.classfun.droidvm.ui.vm.KernelModulePreflight.UDMABUF;
+import static org.junit.Assert.assertEquals;
+import static org.junit.Assert.assertTrue;
+
+import org.junit.Test;
+
+import java.util.ArrayList;
+import java.util.List;
+
+import cn.classfun.droidvm.lib.store.base.DataItem;
+import cn.classfun.droidvm.lib.store.vm.ProtectedVM;
+import cn.classfun.droidvm.lib.store.vm.VMScreenConfig;
+
+/** Which modules a configuration asks for, before any of them is looked up on the device. */
+public final class KernelModulePreflightTest {
+    private static DataItem vm(ProtectedVM mode, boolean gpu, long memoryMb) {
+        var item = DataItem.newObject();
+        item.set("protected_vm", mode);
+        item.set("memory_mb", memoryMb);
+        VMScreenConfig.of(item, VMScreenConfig.ID_GPU0).setEnabled(gpu);
+        return item;
+    }
+
+    private static List<String> wanted(DataItem item) {
+        return new ArrayList<>(KernelModulePreflight.wantedBy(item).keySet());
+    }
+
+    @Test
+    public void plainProtectedVmWantsNothing() {
+        assertTrue(wanted(vm(ProtectedVM.PROTECTED_WITHOUT_FIRMWARE, false, 1024)).isEmpty());
+    }
+
+    @Test
+    public void pseudoUnprotectedWantsTheShareModule() {
+        assertEquals(List.of(GUNYAH_HOST_SHARE),
+            wanted(vm(ProtectedVM.PSEUDO_UNPROTECTED, false, 1024)));
+    }
+
+    @Test
+    public void gpuWantsThePinAndTheDmaBufModules() {
+        assertEquals(List.of(GH_UNMOVABLE, UDMABUF),
+            wanted(vm(ProtectedVM.PROTECTED_PROTECTED, true, 1024)));
+    }
+
+    /**
+     * Whether this phone is one the kvcalloc fix was built for is the module list's answer, not
+     * this rule's - here only the size matters.
+     */
+    @Test
+    public void kvcallocWantedOnlyOverTheMemoryThreshold() {
+        assertEquals(List.of(GUNYAH_KVCALLOC),
+            wanted(vm(ProtectedVM.PROTECTED_PROTECTED, false, KVCALLOC_MEMORY_MB + 1)));
+        assertTrue("at the threshold the contiguous allocation still comes through",
+            wanted(vm(ProtectedVM.PROTECTED_PROTECTED, false, KVCALLOC_MEMORY_MB)).isEmpty());
+    }
+
+    /** Everything at once, in the order the dialog lists them. */
+    @Test
+    public void everyRuleCanFireTogether() {
+        assertEquals(List.of(GUNYAH_HOST_SHARE, GH_UNMOVABLE, UDMABUF, GUNYAH_KVCALLOC),
+            wanted(vm(ProtectedVM.PSEUDO_UNPROTECTED, true, 8192)));
+    }
+}

From e3e41c28e100f47f0d18f94c490e82e7568971ff Mon Sep 17 00:00:00 2001
From: HuJK <gh@hujk.org>
Date: Fri, 4 Sep 2026 02:43:28 +0800
Subject: [PATCH 163/182] editor: a stored option this build no longer offers
 resets the row instead of crashing

Stored values outlive the sets that produced them: an option gets retired
between releases, and several graphics rows build their item set out of
another row's value, so a config written under one combination is routinely
read back under another. EnumPicker answered that with an exception, which
made every restore path a crash waiting for the first user whose VM
predates the current build -- and it arrived: an old VM naming a GL
provider, under a backend whose set no longer lists one, took the editor
down as it opened.

setSelectedItem now lands an item the picker does not list, or lists only
to refuse, on the row's default and returns whether the value itself was
taken. setDefaultItem names that default wherever the head of the list is
not the sensible answer -- a transport ladder whose head is the CPU copy
should not be where "that rung is not built yet" ends up. Refused now means
refused from every direction, a stored config included, so the picker no
longer sits on a value it would not let the user pick; rotate-mode steps
over refused rungs for the same reason.

The graphics tab stops re-deriving which values belong to the current
backend -- the copy of that rule at the call site is what did not cover the
retired provider -- and hands each stored value to the picker that owns the
set. If any row moved, the tab says so once: what is on screen is not what
was saved, and the user should not have to notice that on their own. PanVK
joins the same mechanism as a listed-and-refused item, replacing its
toast-and-revert listener.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_015BTc7yZ1DPCX7xpbYcUo2V
---
 .../droidvm/lib/store/enums/EnumPicker.java   |  91 ++++++++++++++-
 .../ui/vm/edit/graphics/ScreenBindingRow.java |  22 ++--
 .../vm/edit/graphics/VMEditGraphicsTab.java   |  93 +++++++--------
 .../ui/widgets/row/ChooseRowWidget.java       |  20 +++-
 .../ui/widgets/tools/PickerButtonWidget.java  |  38 +++++--
 app/src/main/res/values-zh-rCN/strings.xml    |   2 +-
 app/src/main/res/values-zh-rTW/strings.xml    |   2 +-
 app/src/main/res/values/strings.xml           |   2 +-
 .../store/enums/EnumPickerFallbackTest.java   | 107 ++++++++++++++++++
 9 files changed, 300 insertions(+), 77 deletions(-)
 create mode 100644 app/src/test/java/cn/classfun/droidvm/lib/store/enums/EnumPickerFallbackTest.java

diff --git a/app/src/main/java/cn/classfun/droidvm/lib/store/enums/EnumPicker.java b/app/src/main/java/cn/classfun/droidvm/lib/store/enums/EnumPicker.java
index 79bf89a75..a9d656001 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/store/enums/EnumPicker.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/store/enums/EnumPicker.java
@@ -30,6 +30,8 @@ public final class EnumPicker<E extends Enum<E>> {
     private CharSequence disabledNote = null;
     private EnumPickerChanged<E> onValueChanged = null;
     private int selectedIndex = -1;
+    /** Where a refused selection lands; see {@link #setDefaultItem}. */
+    private int defaultIndex = 0;
 
     public interface EnumPickerChanged<E> {
         @SuppressWarnings("unused")
@@ -96,8 +98,13 @@ private String menuLabel(@NonNull E item) {
      * rungs are designed but not built, say. Hiding them makes the remaining values look like the
      * entire vocabulary and makes each one that lands later look like a feature out of nowhere;
      * listing them greyed, with {@code note} saying why, says what the set is and where this build
-     * stands in it. A disabled item can still be the current value: that is how a choice stored
-     * before its rung was refused survives being looked at.</p>
+     * stands in it.</p>
+     *
+     * <p>Refused means refused from every direction, a stored config included: a value the picker
+     * will not let the user pick is not one it will sit on and hand back to save(). A selection
+     * this call refuses moves to {@link #setDefaultItem the default}, the same way
+     * {@link #setSelectedItem} answers one. The item stays listed, so the set still reads whole --
+     * what it no longer does is leave a VM quietly pointed down a path this build cannot take.</p>
      *
      * <p>Cleared by {@link #setItems} and {@link #autoItems}, since a new item set has its own
      * answer -- the same constant can be reachable under one and not under another.</p>
@@ -106,6 +113,9 @@ public void setDisabledItems(@Nullable CharSequence note, @NonNull Collection<E>
         disabled.clear();
         disabled.addAll(refused);
         disabledNote = note;
+        if (selectedIndex >= 0 && selectedIndex < items.size()
+            && disabled.contains(items.get(selectedIndex)))
+            setSelectedIndex(fallbackIndex());
     }
 
     public void autoItems() {
@@ -120,6 +130,7 @@ public void autoItems() {
         }
         if (items.isEmpty())
             throw new IllegalStateException("No displayable constants found");
+        defaultIndex = 0;
         selectedIndex = -1;
         setSelectedIndex(0);
     }
@@ -138,6 +149,7 @@ public void setItems(@NonNull List<E> constants) {
         items.clear();
         items.addAll(constants);
         disabled.clear();
+        defaultIndex = 0;
         selectedIndex = -1;
         setSelectedIndex(0);
     }
@@ -163,6 +175,7 @@ public void setOnValueChangedListener(@Nullable Runnable listener) {
         setOnValueChangedListener(listener == null ? null : (o, n) -> listener.run());
     }
 
+    @SuppressWarnings("unused")
     public int getSelectedIndex() {
         return selectedIndex;
     }
@@ -185,11 +198,78 @@ public E getSelectedItem() {
         return items.get(selectedIndex);
     }
 
-    public void setSelectedItem(@NonNull E item) {
+    /**
+     * Selects {@code item}, or the default when this picker will not take it.
+     *
+     * <p>Stored values outlive the sets that produced them. An option gets retired between
+     * releases; several rows build their item set out of another row's value, so a config written
+     * under one combination is routinely read back under another. Answering that with an exception
+     * made every restore path a crash waiting for the first user whose VM predates the current
+     * build -- which is what it was: an old VM naming a GL provider, under a backend whose set no
+     * longer lists one, took the editor down as it opened.</p>
+     *
+     * <p>So an item this picker does not list, or lists only to refuse (see
+     * {@link #setDisabledItems}), lands on {@link #setDefaultItem the default} and the call says
+     * so. A caller restoring a config does not have to work out which values belong to the set it
+     * just installed -- the set already knows, and that is the one copy of the rule.</p>
+     *
+     * @return whether {@code item} itself was selected
+     */
+    public boolean setSelectedItem(@NonNull E item) {
         int index = items.indexOf(item);
-        if (index < 0)
-            throw new IllegalArgumentException("Item not found in items");
+        if (index < 0 || disabled.contains(item)) {
+            setSelectedIndex(fallbackIndex());
+            return false;
+        }
         setSelectedIndex(index);
+        return true;
+    }
+
+    /**
+     * The item a refused selection falls back to. Defaults to the first one, which is also what a
+     * freshly installed set selects.
+     *
+     * <p>Worth naming wherever the head of the list is not the sensible answer -- a ladder whose
+     * bottom rung is the safe one but whose default is the highest rung this build reaches, say.
+     * Falling back to the head there would answer a value the build cannot honour with the slowest
+     * thing it can do, a downgrade the user never asked for and would have no way to notice.</p>
+     *
+     * <p>Set it after the {@link #setItems} that installs the set: a new set resets this along
+     * with everything else that was true of the old one.</p>
+     */
+    public void setDefaultItem(@NonNull E item) {
+        int index = items.indexOf(item);
+        if (index < 0)
+            throw new IllegalArgumentException("Default item not found in items");
+        defaultIndex = index;
+    }
+
+    /** The default's index, or the first selectable item when the default is itself refused. */
+    private int fallbackIndex() {
+        if (defaultIndex >= 0 && defaultIndex < items.size()
+            && !disabled.contains(items.get(defaultIndex)))
+            return defaultIndex;
+        for (int i = 0; i < items.size(); i++)
+            if (!disabled.contains(items.get(i))) return i;
+        // Every item refused. Nothing here is selectable, so the head is as good an answer as any
+        // -- and better than leaving the picker with no selection for getSelectedItem() to fail on.
+        return 0;
+    }
+
+    /**
+     * Steps to the next item, refused ones skipped: the rotate-mode button's whole gesture.
+     *
+     * <p>Rotation is the one way in that has no menu to grey a row out in, so the skip has to
+     * happen here. Without it the gesture walks onto values the dialog and the popup both refuse,
+     * which is the same picker answering the same question two ways.</p>
+     */
+    public void selectNext() {
+        for (int step = 1; step <= items.size(); step++) {
+            var index = (selectedIndex + step) % items.size();
+            if (disabled.contains(items.get(index))) continue;
+            setSelectedIndex(index);
+            return;
+        }
     }
 
     @NonNull
@@ -202,6 +282,7 @@ public String getSelectedString() {
         return item.name();
     }
 
+    @SuppressWarnings("unused")
     public int getItemCount() {
         return items.size();
     }
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/graphics/ScreenBindingRow.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/graphics/ScreenBindingRow.java
index ba0390da8..ad0a65090 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/graphics/ScreenBindingRow.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/graphics/ScreenBindingRow.java
@@ -494,14 +494,20 @@ private void applyTransportOptions(@NonNull DisplayExporter exporter,
             chooseTransport.getContext().getString(
                 R.string.create_vm_option_not_implemented),
             DisplayTransportCap.unimplementedFor(screenId, exporter));
-        // want != null is a load: restore the stored ceiling if this edge still offers it. want ==
-        // null is a fresh row or an exporter switch, and then the ceiling is re-evaluated to the
-        // new edge's default rather than carried over -- the fastest rung differs per exporter
-        // (GPU_HW on VNC, plain GPU on native), so carrying the old pick left a screen switched to
-        // VNC sitting at plain GPU copy when the hardware-encode rung is what it should default to.
-        var pick = want != null && DisplayTransportCap.isOfferedFor(screenId, exporter, want)
-            ? want : DisplayTransportCap.defaultFor(screenId, exporter);
-        chooseTransport.setSelectedItem(pick);
+        // Where a refused pick lands: this edge's default, not the bottom of its ladder. The
+        // picker falls back to the head of the list on its own, and the head here is the CPU copy
+        // -- answering "that rung is not built yet" with the slowest thing this build can do
+        // rather than the fastest one it can.
+        var fallback = DisplayTransportCap.defaultFor(screenId, exporter);
+        chooseTransport.setDefaultItem(fallback);
+        // want != null is a load: restore the stored ceiling. want == null is a fresh row or an
+        // exporter switch, and then the ceiling is re-evaluated to the new edge's default rather
+        // than carried over -- the fastest rung differs per exporter (GPU_HW on VNC, plain GPU on
+        // native), so carrying the old pick left a screen switched to VNC sitting at plain GPU
+        // copy when the hardware-encode rung is what it should default to. A stored ceiling this
+        // edge does not offer, or offers and refuses, lands on that same default: the item set
+        // above already says which rungs those are, so nothing re-asks it here.
+        chooseTransport.setSelectedItem(want == null ? fallback : want);
     }
 
     /** Set by the first applyTransportOptions; the picker cannot be read before it. */
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/graphics/VMEditGraphicsTab.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/graphics/VMEditGraphicsTab.java
index a70e8d8f4..af14d3e85 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/graphics/VMEditGraphicsTab.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/graphics/VMEditGraphicsTab.java
@@ -12,7 +12,6 @@
 
 import android.view.View;
 import android.view.ViewGroup;
-import android.widget.Toast;
 
 import androidx.annotation.NonNull;
 import androidx.annotation.Nullable;
@@ -164,7 +163,6 @@ public void initValue() {
         screenGpu0.init(this::updateDisplayVisibility);
         screenFb.init(this::updateDisplayVisibility);
         loadHostAddresses();
-        // PanVK (Mali) is listed but not wired yet: toast + revert to the previous choice.
         // Acceleration decides which host drivers make sense and which memory knobs exist,
         // so it drives both of the rows under it.
         chooseGpuMode.setOnValueChangedListener((o, n) -> {
@@ -174,15 +172,6 @@ public void initValue() {
             updateGpuProviderOptions();
             updateVramAllocVisibility();
         });
-        // PanVK (Mali) is listed but not wired yet: toast + revert to the previous choice.
-        chooseGpuProvider.setOnValueChangedListener((o, n) -> {
-            if (n == GpuProvider.VK_PANVK) {
-                Toast.makeText(parent, R.string.create_vm_gpu_api_not_implemented,
-                    Toast.LENGTH_SHORT).show();
-                chooseGpuProvider.setSelectedItem(
-                    o instanceof GpuProvider ? (GpuProvider) o : GpuProvider.VK_TURNIP);
-            }
-        });
         // The GPU API set depends on the backend: gfxstream picks a host Vulkan driver,
         // virgl/2d picks a guest GL/Vulkan translation API or the drm2kgsl native context.
         chooseGpuBackend.setOnValueChangedListener((o, n) -> {
@@ -194,21 +183,18 @@ public void initValue() {
         // GPU-blit provider for the native display's scanout composite -- a peer set of Vulkan
         // drivers plus an Off (CPU copy) escape. TURNIP/SYSTEM/OFF are wired (SYSTEM points the
         // bridge at the SoC's vendor Vulkan and degrades to the CPU copy if it lacks the extensions);
-        // only PANVK is not built yet, so it toasts + reverts like the render provider's PanVK.
+        // only PANVK is not built yet, so it is listed and refused -- same as the render provider's
+        // PanVK and virglrenderer's GL mode. configure() lands on turnip, which is where a config
+        // that still names PanVK ends up too.
         chooseDisplayBlitProvider.configure(GpuBlitProvider.class, GpuBlitProvider.TURNIP);
+        chooseDisplayBlitProvider.setDisabledItems(
+            parent.getString(R.string.create_vm_option_not_implemented), GpuBlitProvider.PANVK);
         chooseDisplayBlitProvider.setOnValueChangedListener((o, n) -> {
-            if (n == GpuBlitProvider.PANVK) {
-                Toast.makeText(parent, R.string.create_vm_gpu_api_not_implemented,
-                    Toast.LENGTH_SHORT).show();
-                chooseDisplayBlitProvider.setSelectedItem(
-                    o instanceof GpuBlitProvider ? (GpuBlitProvider) o : GpuBlitProvider.TURNIP);
-            } else if (n == GpuBlitProvider.SYSTEM) {
-                // The system driver is a peer, gated by the same rule as the others: it is usable
-                // only if it exposes the blit's extensions. Probe the real driver and, if it is
-                // short, say which -- the choice is still allowed (crosvm then degrades to a CPU
-                // copy), the user just gets told instead of quietly getting the fallback.
-                warnIfSystemBlitIncapable();
-            }
+            // The system driver is a peer, gated by the same rule as the others: it is usable
+            // only if it exposes the blit's extensions. Probe the real driver and, if it is
+            // short, say which -- the choice is still allowed (crosvm then degrades to a CPU
+            // copy), the user just gets told instead of quietly getting the fallback.
+            if (n == GpuBlitProvider.SYSTEM) warnIfSystemBlitIncapable();
         });
         swGpuUdmabuf.setOnCheckedChangeListener(this::updateVramAllocVisibility);
         swGpuDynamicVram.setOnCheckedChangeListener(this::updateVramAllocVisibility);
@@ -425,27 +411,29 @@ private void loadConfigLocked(@NonNull VMConfig config) {
         // Backend first: its listener rebuilds the option sets below it (and their defaults).
         if (gpuBackend != GpuBackend.NONE)
             chooseGpuBackend.setSelectedItem(gpuBackend);
-        // Restore each saved choice only if the backend still offers it; otherwise keep the
-        // default updateGpuModeOptions()/updateGpuProviderOptions() just picked.
-        boolean gfx = chooseGpuBackend.getSelectedItem() == GPU_GFXSTREAM;
-        // gfxstream only offers VULKAN; virglrenderer offers OPENGL/NATIVE/VULKAN(venus). Restore
-        // any mode the current backend actually lists, or the picker keeps the default and a saved
-        // venus VM silently reloads as something else.
-        boolean modeOk = gfx ? (gpuMode == GpuMode.VULKAN)
-            : (gpuMode == GpuMode.OPENGL || gpuMode == GpuMode.NATIVE || gpuMode == GpuMode.VULKAN);
-        if (gpuMode != GpuMode.NONE && modeOk)
-            chooseGpuMode.setSelectedItem(gpuMode);
+        // Then the two rows under it, each restored by handing the picker the stored value and
+        // letting it answer. Which values belong to this backend, and which of those this build
+        // can honour, is what the item sets updateGpuModeOptions()/updateGpuProviderOptions() just
+        // installed already say; a value outside them lands on the row's default instead. Deriving
+        // it a second time here is what broke -- the copy of the rule at this call site did not
+        // cover a provider from a set no longer installed, and an old VM's GL provider under a
+        // backend that now lists only drm2kgsl took the editor down as it opened.
+        boolean reset = false;
+        // Only while the row is showing. 2D has neither of them, and the items left over from the
+        // last backend are not what a stored value should be measured against.
+        if (gpuMode != GpuMode.NONE && chooseGpuMode.getVisibility() == VISIBLE)
+            reset |= !chooseGpuMode.setSelectedItem(gpuMode);
         updateGpuProviderOptions();
-        // The VK_* providers belong to VULKAN mode on either renderer (gfxstream, or venus on
-        // virglrenderer); everything else is virglrenderer-only. Restore only what the row lists.
-        // (Read the mode picker only under virglrenderer: 2D leaves it unset.)
-        boolean vkMode = gfx
-            || (chooseGpuBackend.getSelectedItem() == GpuBackend.GPU_VIRGLRENDERER
-                && chooseGpuMode.getSelectedItem() == GpuMode.VULKAN);
-        if (gpuProvider != GpuProvider.NONE && vkMode == isVulkanProvider(gpuProvider))
-            chooseGpuProvider.setSelectedItem(gpuProvider);
-        chooseDisplayBlitProvider.setSelectedItem(
+        if (gpuProvider != GpuProvider.NONE && chooseGpuProvider.getVisibility() == VISIBLE)
+            reset |= !chooseGpuProvider.setSelectedItem(gpuProvider);
+        reset |= !chooseDisplayBlitProvider.setSelectedItem(
             optEnum(item, "display_blit_provider", GpuBlitProvider.TURNIP));
+        // Once, however many rows moved: this VM was stored asking for something the build no
+        // longer offers, and what is on screen is not what was saved. Saying nothing would leave
+        // the user to notice on their own that their renderer had changed under them -- and only
+        // if they happened to look at that row.
+        if (reset)
+            showHint(parent.getString(R.string.create_vm_option_unavailable_reset));
         updateDisplayVisibility();
         updateVramAllocVisibility();
         swGpuCgroup.setChecked(item.optBoolean(CpuPlacementPlan.KEY_GPU_CGROUP, false));
@@ -732,17 +720,15 @@ private void updateGpuModeOptions() {
             // virglrenderer has all three capsets: OPENGL (virgl2), NATIVE (drm2kgsl), VULKAN
             // (venus). Only two of them are wired here -- the GL path is listed and refused rather
             // than hidden, so the menu says what virglrenderer is for and where this build stands
-            // in it, and a VM stored with OPENGL still shows what it is set to.
+            // in it. A VM stored with OPENGL loads as Native Context: the picker will not sit on a
+            // value it refuses, which is also what stops such a VM from being saved back out
+            // pointed at a renderer nothing here can run.
             chooseGpuMode.setVisibility(VISIBLE);
+            // First of the set, Native Context, is both what a new VM comes up with and where a
+            // stored mode this build will not take ends up; load() restores over it.
             chooseGpuMode.setItems(GpuMode.NATIVE, GpuMode.OPENGL, GpuMode.VULKAN);
             chooseGpuMode.setDisabledItems(
                 parent.getString(R.string.create_vm_option_not_implemented), GpuMode.OPENGL);
-            // setItems already lands on the first of them (Native Context), which is what a new
-            // VM comes up with; a stored mode is restored by load() afterwards. This only catches
-            // a selection left over from a set that no longer applies.
-            Object cur = chooseGpuMode.getSelectedItem();
-            if (cur != GpuMode.OPENGL && cur != GpuMode.NATIVE && cur != GpuMode.VULKAN)
-                chooseGpuMode.setSelectedItem(GpuMode.NATIVE);
         } else {
             // 2D has no acceleration to choose. setItems() rejects an empty list, so hide the row
             // rather than clearing it; its stale items are never read for 2D (the reads below are
@@ -769,10 +755,13 @@ private void updateGpuProviderOptions() {
             // Host Vulkan ICD. gfxstream is always in this mode; on virglrenderer it is venus.
             // Both dlopen whatever ANDROID_EMU_VK_LOADER_PATH names (or the system loader when it
             // is unset), so the choice is identical: bundled turnip, PanVK, or the SoC's stock HAL.
+            // PanVK is the one named but not built, so it is listed and refused; setItems lands on
+            // turnip, and a stored PanVK falls back to it rather than being restored unusable.
             chooseGpuProvider.setItems(
                 GpuProvider.VK_TURNIP, GpuProvider.VK_PANVK, GpuProvider.VK_SYSTEM);
-            if (!isVulkanProvider(chooseGpuProvider.getSelectedItem()))
-                chooseGpuProvider.setSelectedItem(GpuProvider.VK_TURNIP);
+            chooseGpuProvider.setDisabledItems(
+                parent.getString(R.string.create_vm_option_not_implemented),
+                GpuProvider.VK_PANVK);
         } else if (mode == GpuMode.OPENGL) {
             chooseGpuProvider.setItems(GpuProvider.EGL, GpuProvider.GLES);
             if (isVulkanProvider(chooseGpuProvider.getSelectedItem())
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/widgets/row/ChooseRowWidget.java b/app/src/main/java/cn/classfun/droidvm/ui/widgets/row/ChooseRowWidget.java
index b3bc59733..03a2f7015 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/widgets/row/ChooseRowWidget.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/widgets/row/ChooseRowWidget.java
@@ -14,6 +14,7 @@
 import androidx.annotation.Nullable;
 
 import cn.classfun.droidvm.R;
+import cn.classfun.droidvm.lib.store.enums.EnumPicker;
 import cn.classfun.droidvm.lib.store.enums.EnumPicker.EnumPickerChanged;
 import cn.classfun.droidvm.ui.widgets.tools.PickerButtonWidget;
 
@@ -118,8 +119,23 @@ public <E extends Enum<E>> E getSelectedItem() {
         return (E) buttonView.getPicker().getSelectedItem();
     }
 
-    public void setSelectedItem(Enum<?> val) {
-        buttonView.setSelectedItem(val);
+    /**
+     * Selects {@code val}, or this row's default when the picker will not take it -- an item the
+     * row does not list, or lists only to refuse; see {@link EnumPicker#setSelectedItem}.
+     *
+     * @return whether {@code val} itself was selected
+     */
+    @SuppressWarnings("UnusedReturnValue")
+    public boolean setSelectedItem(Enum<?> val) {
+        return buttonView.setSelectedItem(val);
+    }
+
+    /**
+     * The value a refused selection falls back to; see {@link EnumPicker#setDefaultItem}. Call
+     * after the {@code setItems} that installs the set, like {@link #setDisabledItems}.
+     */
+    public void setDefaultItem(Enum<?> val) {
+        buttonView.setDefaultItem(val);
     }
 
     @Override
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/widgets/tools/PickerButtonWidget.java b/app/src/main/java/cn/classfun/droidvm/ui/widgets/tools/PickerButtonWidget.java
index ed00c8808..3af245061 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/widgets/tools/PickerButtonWidget.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/widgets/tools/PickerButtonWidget.java
@@ -79,9 +79,7 @@ private void init(@Nullable AttributeSet attrs) {
                     picker.showDialog(title);
                     break;
                 case ROTATE:
-                    var idx = picker.getSelectedIndex();
-                    idx = (idx + 1) % picker.getItemCount();
-                    picker.setSelectedIndex(idx);
+                    picker.selectNext();
                     break;
                 case POPUP:
                     picker.showPopup(buttonView);
@@ -172,18 +170,44 @@ public <E extends Enum<E>> E getSelectedItem() {
         return (E) picker.getSelectedItem();
     }
 
-    public void setSelectedItem(Enum<?> val) {
+    /**
+     * Selects {@code val}, or this row's default when the picker will not take it; see
+     * {@link EnumPicker#setSelectedItem}. A wrong enum type is still a throw -- that is a
+     * miswiring, not a value that arrived from a config.
+     *
+     * @return whether {@code val} itself was selected
+     */
+    @SuppressWarnings("UnusedReturnValue")
+    public boolean setSelectedItem(Enum<?> val) {
+        if (picker == null)
+            throw new IllegalStateException("Items not set");
+        if (val.getDeclaringClass() != picker.getEnumClass())
+            throw new IllegalArgumentException("Invalid item type");
+        return setPickerSelectedItem(picker, val);
+    }
+
+    private static <E extends Enum<E>> boolean setPickerSelectedItem(
+        @NonNull EnumPicker<E> picker, Enum<?> val
+    ) {
+        return picker.setSelectedItem(picker.getEnumClass().cast(val));
+    }
+
+    /**
+     * The value a refused selection falls back to; see {@link EnumPicker#setDefaultItem}. Call
+     * after the {@code setItems} that installs the set, like {@link #setDisabledItems}.
+     */
+    public void setDefaultItem(Enum<?> val) {
         if (picker == null)
             throw new IllegalStateException("Items not set");
         if (val.getDeclaringClass() != picker.getEnumClass())
             throw new IllegalArgumentException("Invalid item type");
-        setPickerSelectedItem(picker, val);
+        setPickerDefaultItem(picker, val);
     }
 
-    private static <E extends Enum<E>> void setPickerSelectedItem(
+    private static <E extends Enum<E>> void setPickerDefaultItem(
         @NonNull EnumPicker<E> picker, Enum<?> val
     ) {
-        picker.setSelectedItem(picker.getEnumClass().cast(val));
+        picker.setDefaultItem(picker.getEnumClass().cast(val));
     }
 
     @SuppressWarnings("unchecked")
diff --git a/app/src/main/res/values-zh-rCN/strings.xml b/app/src/main/res/values-zh-rCN/strings.xml
index e97b8ca2c..ff66e9f60 100644
--- a/app/src/main/res/values-zh-rCN/strings.xml
+++ b/app/src/main/res/values-zh-rCN/strings.xml
@@ -278,7 +278,6 @@
     <string name="create_vm_display_blit_provider">GPU 合成驱动</string>
     <string name="create_vm_display_blit_off">关闭（CPU 拷贝）</string>
     <string name="display_blit_system_missing_ext">系统 Vulkan 驱动缺少 GPU 合成所需的扩展：\n  %1$s\n原生显示将回退到 CPU 拷贝。</string>
-    <string name="create_vm_gpu_api_not_implemented">此 GPU 驱动尚未实现</string>
     <string name="create_vm_gpu_udmabuf">udmabuf(guest-alloc)</string>
     <string name="create_vm_gpu_rt_prio">实时调度</string>
     <string name="create_vm_gpu_host_pool_mb">命令缓冲池大小 (MB)</string>
@@ -322,6 +321,7 @@
     <string name="create_vm_screen_transport_zero">Zero Copy</string>
     <string name="create_vm_screen_transport_gpu_hw">GPU Copy（硬件编码）</string>
     <string name="create_vm_option_not_implemented">未实现</string>
+    <string name="create_vm_option_unavailable_reset">保存的选项在这个版本无法使用，该项目已改回默认值。</string>
     <string name="create_vm_screen_width_cpu_fallback">此宽度下传输管线将使用 CPU Copy</string>
     <string name="create_vm_screen_width_cpu_fallback_desc">GPU Copy 会把帧缓冲当成 linear dma-buf 导入，而驱动只收 row pitch 对齐 64 bytes 的缓冲。SimpleFB 的 pitch 就是宽度 x 4、没有任何补齐，所以 GPU Copy 需要 16 像素倍数的宽度 —— 例如 1408 而不是 1400。这个宽度本身没有问题，只是它的帧会走 CPU 复制。</string>
     <string name="create_vm_screen_input_enabled">输入设备</string>
diff --git a/app/src/main/res/values-zh-rTW/strings.xml b/app/src/main/res/values-zh-rTW/strings.xml
index 1369c2ede..fcfbc88d2 100644
--- a/app/src/main/res/values-zh-rTW/strings.xml
+++ b/app/src/main/res/values-zh-rTW/strings.xml
@@ -278,7 +278,6 @@
     <string name="create_vm_display_blit_provider">GPU 合成驅動</string>
     <string name="create_vm_display_blit_off">關閉（CPU 拷貝）</string>
     <string name="display_blit_system_missing_ext">系統 Vulkan 驅動缺少 GPU 合成所需的擴展：\n  %1$s\n原生顯示將回退到 CPU 拷貝。</string>
-    <string name="create_vm_gpu_api_not_implemented">此 GPU 驅動尚未實現</string>
     <string name="create_vm_gpu_udmabuf">udmabuf(guest-alloc)</string>
     <string name="create_vm_gpu_rt_prio">即時排程</string>
     <string name="create_vm_gpu_host_pool_mb">命令緩衝池大小 (MB)</string>
@@ -322,6 +321,7 @@
     <string name="create_vm_screen_transport_zero">Zero Copy</string>
     <string name="create_vm_screen_transport_gpu_hw">GPU Copy（硬體編碼）</string>
     <string name="create_vm_option_not_implemented">未實作</string>
+    <string name="create_vm_option_unavailable_reset">儲存的選項在這個版本無法使用，該項目已改回預設值。</string>
     <string name="create_vm_screen_width_cpu_fallback">此寬度下傳輸管線將使用 CPU Copy</string>
     <string name="create_vm_screen_width_cpu_fallback_desc">GPU Copy 會把畫格緩衝當成 linear dma-buf 匯入，而驅動只收 row pitch 對齊 64 bytes 的緩衝。SimpleFB 的 pitch 就是寬度 x 4、沒有任何補齊，所以 GPU Copy 需要 16 像素倍數的寬度 —— 例如 1408 而不是 1400。這個寬度本身沒有問題，只是它的畫格會走 CPU 複製。</string>
     <string name="create_vm_screen_input_enabled">輸入裝置</string>
diff --git a/app/src/main/res/values/strings.xml b/app/src/main/res/values/strings.xml
index 6d46fb865..f6c87d21e 100644
--- a/app/src/main/res/values/strings.xml
+++ b/app/src/main/res/values/strings.xml
@@ -282,7 +282,6 @@
     <string name="create_vm_display_blit_provider">GPU-blit provider</string>
     <string name="create_vm_display_blit_off">Off (CPU copy)</string>
     <string name="display_blit_system_missing_ext">The system Vulkan driver lacks extensions the GPU blit needs:\n  %1$s\nThe native display will fall back to a CPU copy.</string>
-    <string name="create_vm_gpu_api_not_implemented">This GPU driver is not implemented yet</string>
     <string name="create_vm_gpu_udmabuf">udmabuf (guest-alloc)</string>
     <string name="create_vm_gpu_rt_prio">Real-time scheduling</string>
     <string name="create_vm_gpu_host_pool_mb">Command buffer pool size (MB)</string>
@@ -326,6 +325,7 @@
     <string name="create_vm_screen_transport_zero">Zero Copy</string>
     <string name="create_vm_screen_transport_gpu_hw">GPU Copy (hardware encode)</string>
     <string name="create_vm_option_not_implemented">not implemented</string>
+    <string name="create_vm_option_unavailable_reset">A stored option is not available in this build; that row was reset to its default.</string>
     <string name="create_vm_screen_width_cpu_fallback">Transport pipeline will use CPU Copy at this width</string>
     <string name="create_vm_screen_width_cpu_fallback_desc">GPU Copy imports the framebuffer as a linear dma-buf, and the driver takes one only when its row pitch is 64-byte aligned. SimpleFB\'s pitch is exactly width x 4 with nothing padding it, so GPU Copy needs a width that is a multiple of 16 -- 1408 rather than 1400. This width is fine; its frames just take the CPU copy.</string>
     <string name="create_vm_screen_input_enabled">Input devices</string>
diff --git a/app/src/test/java/cn/classfun/droidvm/lib/store/enums/EnumPickerFallbackTest.java b/app/src/test/java/cn/classfun/droidvm/lib/store/enums/EnumPickerFallbackTest.java
new file mode 100644
index 000000000..b4577f8e0
--- /dev/null
+++ b/app/src/test/java/cn/classfun/droidvm/lib/store/enums/EnumPickerFallbackTest.java
@@ -0,0 +1,107 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
+package cn.classfun.droidvm.lib.store.enums;
+
+import static org.junit.Assert.assertEquals;
+import static org.junit.Assert.assertFalse;
+import static org.junit.Assert.assertTrue;
+
+import android.content.Context;
+
+import org.junit.Test;
+
+import java.util.List;
+
+/**
+ * What a picker does with a value it will not select.
+ *
+ * <p>That value arrives from a stored config rather than from a tap -- an option retired between
+ * releases, or one belonging to the set some other row used to have -- and it used to leave as an
+ * exception, which is how editing an old VM crashed the editor on open. Every case here is one a
+ * config can actually be in; none of them touches the Context, which is why this runs without
+ * inflating anything.</p>
+ */
+public class EnumPickerFallbackTest {
+    /** A stand-in option set: a ladder, so "the head of the list" and "the default" can differ. */
+    private enum Rung {
+        CPU, GPU, ZERO, HW
+    }
+
+    private static EnumPicker<Rung> picker(Rung... items) {
+        var picker = new EnumPicker<Rung>((Context) null, Rung.class);
+        picker.setItems(items);
+        return picker;
+    }
+
+    @Test
+    public void unlistedValueFallsBackToTheHead() {
+        var picker = picker(Rung.CPU, Rung.GPU);
+        assertFalse(picker.setSelectedItem(Rung.ZERO));
+        assertEquals(Rung.CPU, picker.getSelectedItem());
+    }
+
+    @Test
+    public void namedDefaultTakesTheFallback() {
+        var picker = picker(Rung.CPU, Rung.GPU, Rung.ZERO);
+        picker.setDefaultItem(Rung.GPU);
+        assertFalse(picker.setSelectedItem(Rung.HW));
+        assertEquals(Rung.GPU, picker.getSelectedItem());
+    }
+
+    @Test
+    public void refusedValueIsNotSelectedButStaysListed() {
+        var picker = picker(Rung.CPU, Rung.GPU, Rung.ZERO);
+        picker.setDefaultItem(Rung.GPU);
+        picker.setDisabledItems(null, List.of(Rung.ZERO));
+        assertFalse(picker.setSelectedItem(Rung.ZERO));
+        assertEquals(Rung.GPU, picker.getSelectedItem());
+        // Refused, not hidden: the menu still says the rung exists.
+        assertTrue(picker.getItems().contains(Rung.ZERO));
+        assertTrue(picker.setSelectedItem(Rung.CPU));
+        assertEquals(Rung.CPU, picker.getSelectedItem());
+    }
+
+    @Test
+    public void refusingTheCurrentValueMovesItOff() {
+        var picker = picker(Rung.CPU, Rung.GPU, Rung.ZERO);
+        picker.setDefaultItem(Rung.GPU);
+        assertTrue(picker.setSelectedItem(Rung.ZERO));
+        picker.setDisabledItems(null, List.of(Rung.ZERO));
+        assertEquals(Rung.GPU, picker.getSelectedItem());
+    }
+
+    @Test
+    public void defaultThatIsItselfRefusedFallsToTheFirstSelectable() {
+        var picker = picker(Rung.CPU, Rung.GPU, Rung.ZERO);
+        picker.setDefaultItem(Rung.ZERO);
+        picker.setDisabledItems(null, List.of(Rung.CPU, Rung.ZERO));
+        assertEquals(Rung.GPU, picker.getSelectedItem());
+        assertFalse(picker.setSelectedItem(Rung.HW));
+        assertEquals(Rung.GPU, picker.getSelectedItem());
+    }
+
+    @Test
+    public void rotationSkipsRefusedRungs() {
+        var picker = picker(Rung.CPU, Rung.GPU, Rung.ZERO);
+        picker.setDisabledItems(null, List.of(Rung.GPU));
+        assertEquals(Rung.CPU, picker.getSelectedItem());
+        picker.selectNext();
+        assertEquals(Rung.ZERO, picker.getSelectedItem());
+        picker.selectNext();
+        assertEquals(Rung.CPU, picker.getSelectedItem());
+    }
+
+    @Test
+    public void aNewItemSetForgetsTheOldDefaultAndRefusals() {
+        var picker = picker(Rung.CPU, Rung.GPU, Rung.ZERO);
+        picker.setDefaultItem(Rung.ZERO);
+        picker.setDisabledItems(null, List.of(Rung.CPU));
+        picker.setItems(new Rung[]{Rung.CPU, Rung.GPU, Rung.HW});
+        // Same constant, reachable under this set: nothing carries over from the last one.
+        assertEquals(Rung.CPU, picker.getSelectedItem());
+        assertTrue(picker.setSelectedItem(Rung.CPU));
+        assertFalse(picker.setSelectedItem(Rung.ZERO));
+        assertEquals(Rung.CPU, picker.getSelectedItem());
+    }
+}

From 5d0ac397b5c395244f1ed669d68efcbcd4084af9 Mon Sep 17 00:00:00 2001
From: HuJK <gh@hujk.org>
Date: Sun, 6 Sep 2026 04:25:55 +0800
Subject: [PATCH 164/182] fix five things a VM start can fail on without saying
 so

All five came out of a PR review of this branch. What they have in common
is that each fails somewhere the message does not point at: a black screen
with the stream still arriving, a boot that stops at an ioctl, a daemon
that answers nothing for ten seconds, a prompt about memory a VM never
touches. The review's other findings were checked and left alone -- either
correct as they are, or a pre-existing limitation this branch did not
introduce.

vnc: the sync frame outlives the pipeline that was not there to take it.
The server sends the parameter sets exactly once per client, on the
reset-flagged rect that starts its stream, and the presentation console has
nowhere to put that rect: it connects when it opens and builds its decoder
only once a display has been chosen. The rect was dropped, every bare IDR
after it decoded to nothing, and no reconnect followed because rects were
still arriving. H264SyncFrameCache holds it for the connection instead of
for the pipeline, which also covers the window being dismissed and rebuilt,
and the race where DesktopSize reaches the main thread a post later than
the sync rect reaches the message loop.

hugepage: the reserve is asked about only the VMs that draw on it. The
pre-start check sized every VM against pool_avail, including the ones on
hypervisors that hand no memory away and cannot hit the failure it exists
to avoid. They got the dialog, or ten seconds of waiting, for a pool their
boot will not spend a page of.

display: a refused socket path gives back the sockets bound before it.
startListening() published its slots only after the last one bound, so the
release() the caller already makes on that path freed an empty set --
leaking listening fds, inodes under run/, and an accept thread each, parked
in accept(2) for the life of the daemon. Unreachable today; the two screen
ids are spelt g0 and sfb precisely so their names stay short, and a third
screen is what would arrive without a tag. The test pins the budget such a
name would be chosen against.

daemon: auto-start runs behind the socket, not in front of it. The sweep
waits on the reserve from inside the ServerContext constructor, which is
before the socket binds, before the signal handlers exist and before the VM
event callback is wired. It runs from Server.run() on its own thread now,
which is also why the sweep snapshots its list rather than iterating across
the wait, why start() takes a lock from the state test to the worker, and
why stopAll() can call the wait off: a daemon answering clients while the
sweep runs is a sweep with company.

vm: refuse to start a VM whose LEND parcels this kernel will not take. 6.6
demand-pages a parcel; 6.1 commits every one as it arrives and refuses a
later one, so a 3 GB VM configured for 256 MB parcels does not boot there
and says only "failed to initialize virtual machine". A better default
would not have helped, because the value travels: an imported VM carries
the mode of the phone its package came from. The dialog offers to correct
it and keep the correction.

Verified on a 6.1 Qualcomm device. The daemon bound its socket, logged the
reserve wait 32 ms later, and authenticated a client 122 ms after that with
nine seconds of waiting still to go; a SIGINT mid-wait was answered rather
than queued behind it. The LEND dialog appeared on start, its fix wrote
single to vms.json, the next crosvm command line carried
--prepare-lend-mthp-mode single, and the VM reached RUNNING where it had
been dying at GH_VM_START. 293 unit tests and the five CI source checks
pass.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_013QzTPwWuSaDfFJg62dtqZW
Signed-off-by: HuJK <gh@hujk.org>
---
 .../droidvm/daemon/server/Server.java         |   7 ++
 .../droidvm/daemon/server/ServerContext.java  |   9 +-
 .../droidvm/daemon/vm/VMInstance.java         |  63 ++++++----
 .../droidvm/daemon/vm/VMInstanceStore.java    | 106 +++++++++++++++--
 .../vm/backend/NativeDisplayInputBridge.java  |  51 +++++++-
 .../classfun/droidvm/lib/data/HostKernel.java |  68 +++++++++++
 .../droidvm/lib/hugepage/PoolPreflight.java   |  58 ++++++++-
 .../droidvm/ui/vm/LendMthpPreflight.java      |  76 ++++++++++++
 .../cn/classfun/droidvm/ui/vm/VMActions.java  | 109 +++++++++++++++--
 .../vm/display/vnc/base/BaseVncActivity.java  |  31 ++++-
 .../display/vnc/h264/H264ConsolePipeline.java |  48 ++++----
 .../display/vnc/h264/H264SyncFrameCache.java  |  89 ++++++++++++++
 app/src/main/res/values-zh-rCN/strings.xml    |   4 +
 app/src/main/res/values-zh-rTW/strings.xml    |   4 +
 app/src/main/res/values/strings.xml           |   4 +
 .../lib/hugepage/PoolPreflightTest.java       |  43 +++++++
 .../store/vm/NativeDisplaySocketPathTest.java |  89 ++++++++++++++
 .../droidvm/ui/vm/LendMthpPreflightTest.java  |  86 ++++++++++++++
 .../vnc/h264/H264SyncFrameCacheTest.java      | 111 ++++++++++++++++++
 19 files changed, 978 insertions(+), 78 deletions(-)
 create mode 100644 app/src/main/java/cn/classfun/droidvm/lib/data/HostKernel.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/ui/vm/LendMthpPreflight.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/ui/vm/display/vnc/h264/H264SyncFrameCache.java
 create mode 100644 app/src/test/java/cn/classfun/droidvm/lib/store/vm/NativeDisplaySocketPathTest.java
 create mode 100644 app/src/test/java/cn/classfun/droidvm/ui/vm/LendMthpPreflightTest.java
 create mode 100644 app/src/test/java/cn/classfun/droidvm/ui/vm/display/vnc/h264/H264SyncFrameCacheTest.java

diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/server/Server.java b/app/src/main/java/cn/classfun/droidvm/daemon/server/Server.java
index 294084fce..263774d9e 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/server/Server.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/server/Server.java
@@ -109,6 +109,13 @@ public void run() {
             return;
         }
         writePortFile(sockAddr.getPort());
+        // Only now, with the port file written and a listener up. Auto-start waits on the
+        // huge-page reserve, and holding the daemon's whole reason for existing behind VMs that
+        // have not booted yet is what it used to do from the ServerContext constructor. By here
+        // the event callback is wired (our own constructor) and INT/TERM have handlers (Daemon's
+        // main, before this call), so the sweep's VMs report their states and a shutdown arriving
+        // mid-sweep is answered rather than ignored.
+        context.getVMs().autoUpAsync();
         try {
             Log.d(TAG, fmt("DroidVM Daemon is listening on %s", sockAddr.toString()));
             runningThread = Thread.currentThread();
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/server/ServerContext.java b/app/src/main/java/cn/classfun/droidvm/daemon/server/ServerContext.java
index 89114e21a..9e1b1429b 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/server/ServerContext.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/server/ServerContext.java
@@ -73,11 +73,10 @@ public ServerContext() {
         } catch (Exception e) {
             Log.w(TAG, "Failed to auto up networks", e);
         }
-        try {
-            vms.autoUp();
-        } catch (Exception e) {
-            Log.w(TAG, "Failed to auto up VMs", e);
-        }
+        // VMs are NOT started here. Their sweep waits on the huge-page reserve -- seconds a VM, and
+        // the pkill above is what makes the reserve short -- and everything the daemon is for comes
+        // after this constructor: the socket, the signal handlers, the VM event callback. It runs
+        // from Server.run() instead, behind all three. See VMInstanceStore.autoUpAsync.
         try {
             routerWatcher.start();
         } catch (Exception e) {
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/vm/VMInstance.java b/app/src/main/java/cn/classfun/droidvm/daemon/vm/VMInstance.java
index 44bdfa1e6..28d3f2be5 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/vm/VMInstance.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/vm/VMInstance.java
@@ -44,7 +44,14 @@
 
 public final class VMInstance extends VMConfig {
     private static final String TAG = "VMInstance";
-    private VMState state = VMState.STOPPED;
+    /**
+     * Read from every thread that asks what this VM is doing -- IPC handlers, the auto-start
+     * sweep, stopAll, the worker itself -- and written by the worker and by start(). Volatile so
+     * that a reader outside {@link #startLock} sees the current answer rather than a cached one.
+     */
+    private volatile VMState state = VMState.STOPPED;
+    /** Serialises the run-up to STARTING against a second caller; see {@link #start}. */
+    private final Object startLock = new Object();
     private NativeProcess process;
     private boolean stoppedByUser = false;
     private int exitCode = -1;
@@ -171,29 +178,43 @@ public void setBootEntryOverride(@Nullable String entryId) {
         bootEntryOverride = entryId;
     }
 
+    /**
+     * Takes this VM from STOPPED to STARTING and hands it to a worker thread.
+     *
+     * <p>Held under {@link #startLock} from the state test to the worker being handed the VM,
+     * because two callers reaching here at once is no longer hypothetical: the auto-start sweep
+     * runs behind the daemon's socket now, so a client's {@code vm_start} can arrive while the
+     * sweep is looking at the same VM. Unlocked, both read STOPPED, both pass the test, and the
+     * VM gets two worker threads and two crosvm processes against one set of taps and sockets.
+     * The test alone cannot be made atomic -- it is the whole run-up to {@code setState} that has
+     * to be, since that is what publishes the claim.</p>
+     */
     @SuppressWarnings("BooleanMethodIsAlwaysInverted")
     public boolean start() {
-        // REBOOTING is accepted too: the reboot relaunch calls start() from that
-        // transient state (process already gone) and goes straight to STARTING.
-        if (state != VMState.STOPPED && state != VMState.REBOOTING) {
-            Log.w(TAG, fmt("VM %s is not stopped (state=%s), cannot start", getId(), state.name()));
-            return false;
+        synchronized (startLock) {
+            // REBOOTING is accepted too: the reboot relaunch calls start() from that
+            // transient state (process already gone) and goes straight to STARTING.
+            if (state != VMState.STOPPED && state != VMState.REBOOTING) {
+                Log.w(TAG, fmt("VM %s is not stopped (state=%s), cannot start",
+                    getId(), state.name()));
+                return false;
+            }
+            joinThreads(1000);
+            if (!setupTaps()) return false;
+            resolveVncConfig();
+            stoppedByUser = false;
+            exitCode = -1;
+            setState(VMState.STARTING);
+            var vmIdStr = getId().toString();
+            workerThread = new Thread(this::runVM, fmt("VM-%s", vmIdStr));
+            workerThread.setDaemon(true);
+            workerThread.start();
+            Log.i(TAG, fmt(
+                "Start requested for VM: %s [%s] via %s",
+                getName(), vmIdStr, getBackend().name()
+            ));
+            return true;
         }
-        joinThreads(1000);
-        if (!setupTaps()) return false;
-        resolveVncConfig();
-        stoppedByUser = false;
-        exitCode = -1;
-        setState(VMState.STARTING);
-        var vmIdStr = getId().toString();
-        workerThread = new Thread(this::runVM, fmt("VM-%s", vmIdStr));
-        workerThread.setDaemon(true);
-        workerThread.start();
-        Log.i(TAG, fmt(
-            "Start requested for VM: %s [%s] via %s",
-            getName(), vmIdStr, getBackend().name()
-        ));
-        return true;
     }
 
     private void setupTap(int index, List<DataItem> createdNics, @NonNull DataItem netCfg, String vmId) throws Exception {
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/vm/VMInstanceStore.java b/app/src/main/java/cn/classfun/droidvm/daemon/vm/VMInstanceStore.java
index e42f589c4..e4f667b46 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/vm/VMInstanceStore.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/vm/VMInstanceStore.java
@@ -28,8 +28,19 @@
 
 public final class VMInstanceStore extends DataStore<VMInstance> {
     private static final String TAG = "VMInstanceStore";
+    /** How long {@link #stopAll} gives the auto-start sweep to stand down. */
+    private static final long AUTO_UP_JOIN_MS = 3000;
     public final ServerContext context;
     NetworkInstanceStore networkStore;
+    /**
+     * Set once the daemon is going down, and never cleared: the sweep reads it to decide whether
+     * there is any point starting the next VM. A store that has been through {@link #stopAll} is
+     * not one anything should be starting VMs in again.
+     */
+    private volatile boolean shuttingDown = false;
+    /** The auto-start sweep, if one was ever started. See {@link #autoUpAsync}. */
+    @Nullable
+    private volatile Thread autoUpThread = null;
 
     public VMInstanceStore(@NonNull ServerContext context) {
         super();
@@ -128,6 +139,10 @@ public JSONArray listVMs() {
 
     public void stopAll() {
         Log.i(TAG, "Stopping all VMs...");
+        // Before anything is collected. The sweep reads this between VMs and inside its wait, so
+        // setting it first is what stops it handing us a VM to stop after we have looked.
+        shuttingDown = true;
+        joinAutoUp();
         var toStop = new ArrayList<VMInstance>();
         forEach((id, inst) -> {
             var state = inst.getState();
@@ -143,22 +158,87 @@ public void stopAll() {
         clear();
     }
 
+    /**
+     * Runs {@link #autoUp} on a thread of its own.
+     *
+     * <p>The sweep waits -- up to ten seconds a VM for the huge-page reserve -- and it used to do
+     * that inside the {@code ServerContext} constructor, which is before the daemon has bound its
+     * socket, installed its signal handlers or wired up VM events. Every one of those was held
+     * behind VMs that had not started yet: no RPC, no clean answer to SIGTERM, and the state
+     * changes of the VMs it did start fired into a callback nobody had set. Behind the socket
+     * instead, so the daemon answers while its VMs come up.
+     *
+     * <p>Started from {@link cn.classfun.droidvm.daemon.server.Server#run} rather than from the
+     * context, which also means a daemon whose socket would not bind no longer starts VMs on its
+     * way to giving up.</p>
+     */
+    public void autoUpAsync() {
+        var sweep = new Thread(this::autoUp, "VMAutoUp");
+        sweep.setDaemon(true);
+        autoUpThread = sweep;
+        sweep.start();
+    }
+
+    /** Waits for a running {@link #autoUpAsync} sweep to notice {@link #shuttingDown} and finish. */
+    private void joinAutoUp() {
+        var sweep = autoUpThread;
+        if (sweep == null || !sweep.isAlive()) return;
+        Log.i(TAG, "waiting for the auto-start sweep to stand down");
+        try {
+            // Generous: the flag is read once a second in the wait and again before each start, and
+            // start() itself only sets up taps and hands off to a thread. A sweep still inside
+            // start() when this runs out is caught by the collection below, which sees STARTING.
+            sweep.join(AUTO_UP_JOIN_MS);
+        } catch (InterruptedException e) {
+            Thread.currentThread().interrupt();
+        }
+    }
+
+    /**
+     * Starts every VM marked auto_up, one at a time, waiting for the reserve before each.
+     *
+     * <p>The list is taken first and started afterwards, rather than started from inside the
+     * iteration. The wait is seconds long and the daemon is answering RPC by the time this runs, so
+     * iterating across it would hold a plain {@code ArrayList} open for that whole time against
+     * clients creating and deleting VMs -- and one {@code vm_delete} landing in the middle of it is
+     * a {@code ConcurrentModificationException} that ends the sweep and leaves the rest of the VMs
+     * down. A snapshot narrows that to the moment it takes to collect.</p>
+     *
+     * <p>Nobody is watching a background start, so instead of asking (which is what the GUI does)
+     * it waits for the huge-page reserve to cover each VM: a pool that is short only because the
+     * previous VM has just exited recovers in about two seconds, and starting into the gap is what
+     * makes the hypervisor migrate memory out of CMA -- observed to stall the whole host for
+     * minutes, or reset the phone. That is the ordinary case here rather than a rare one, because
+     * the context reaps the previous daemon's VMs immediately before this runs. Half way through
+     * the wait the module is asked to go and fetch more. If it never gets there the VM starts
+     * regardless: an auto-start that silently does not happen is worse than a slow one, and the VMM
+     * checks again at the point where it actually hands the memory over.</p>
+     */
     public void autoUp() {
+        var pending = new ArrayList<VMInstance>();
         forEach((id, inst) -> {
-            if (!inst.item.optBoolean("auto_up", false) || inst.getState() != VMState.STOPPED) return;
-            // Nobody is watching a background start, so instead of asking (which is what the GUI
-            // does) we wait for the huge-page reserve to cover this VM: a pool that is short only
-            // because the previous VM has just exited recovers in about two seconds, and starting
-            // into the gap is what makes the hypervisor migrate memory out of CMA -- observed to
-            // stall the whole host for minutes, or reset the phone. Half way through the wait we
-            // ask the module to go and fetch more. If it never gets there we start regardless:
-            // an auto-start that silently does not happen is worse than a slow one, and the VMM
-            // checks again at the point where it actually hands the memory over.
-            PoolPreflight.waitForPool(inst.item);
-            Log.i(TAG, fmt("Auto-starting VM %s [%s]", inst.getName(), id));
-            if (!inst.start())
-                Log.w(TAG, fmt("Failed to auto-start VM %s [%s]", inst.getName(), id));
+            if (inst.item.optBoolean("auto_up", false) && inst.getState() == VMState.STOPPED)
+                pending.add(inst);
         });
+        for (var inst : pending) {
+            if (shuttingDown) {
+                Log.i(TAG, "the daemon is going down; abandoning the rest of the auto-start sweep");
+                return;
+            }
+            PoolPreflight.waitForPool(inst.item, PoolPreflight.BACKGROUND_ATTEMPTS,
+                PoolPreflight.BACKGROUND_INTERVAL_MS, PoolPreflight.BACKGROUND_ACQUIRE_AT,
+                () -> shuttingDown);
+            // Read again: the VM may have been started by a client, or deleted, while we waited,
+            // and the daemon may have begun going down inside the wait itself.
+            if (shuttingDown) {
+                Log.i(TAG, "the daemon is going down; abandoning the rest of the auto-start sweep");
+                return;
+            }
+            if (inst.getState() != VMState.STOPPED) continue;
+            Log.i(TAG, fmt("Auto-starting VM %s [%s]", inst.getName(), inst.getId()));
+            if (!inst.start())
+                Log.w(TAG, fmt("Failed to auto-start VM %s [%s]", inst.getName(), inst.getId()));
+        }
     }
 
     @NonNull
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/NativeDisplayInputBridge.java b/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/NativeDisplayInputBridge.java
index 015a16a34..5d4042c42 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/NativeDisplayInputBridge.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/NativeDisplayInputBridge.java
@@ -12,6 +12,7 @@
 import androidx.annotation.Nullable;
 
 import java.io.IOException;
+import java.util.Collection;
 import java.util.LinkedHashMap;
 import java.util.List;
 import java.util.Map;
@@ -108,6 +109,12 @@ private static String slotKey(@NonNull String screenId, int channel) {
      * one failure here that is not survivable and not diagnosable after the fact: bind(2) truncates
      * silently, so the daemon would report a live listener on an inode crosvm was never told about.
      * The caller turns it into a refused start; see {@link NativeDisplay#requireBindablePath}.</p>
+     *
+     * <p>Whatever it bound before that throw is closed on the way out, because the set is not
+     * published until the loop finishes and {@link #release()} can only free what it can see. The
+     * screen that trips the length check is by definition not the first one, so there is always
+     * something bound behind it: listening fds, inodes under run/, and an accept thread each --
+     * parked in accept(2) forever, since only closing the fd it waits on ends one.</p>
      */
     boolean startListening(@NonNull String vmId, @NonNull List<String> touchScreens,
                            @NonNull List<String> nativeScreens) {
@@ -117,6 +124,29 @@ boolean startListening(@NonNull String vmId, @NonNull List<String> touchScreens,
         }
         inputClosed = false;
         var built = new LinkedHashMap<String, Slot>();
+        boolean allListening;
+        try {
+            allListening = bindAll(vmId, touchScreens, nativeScreens, built);
+        } catch (RuntimeException e) {
+            closeSlots(built.values());
+            throw e;
+        }
+        // Published whole, so a write either finds the set this start built or finds nothing.
+        slots = built;
+        return allListening;
+    }
+
+    /**
+     * Binds every slot the config asks for into [built]. Returns false if any bind failed.
+     *
+     * <p>A bind that fails is left behind rather than unwinding the rest: the VM still starts, with
+     * that one device missing, which is the behaviour the caller's warning describes. A path the
+     * kernel cannot hold is the other kind of failure and throws out of here -- see
+     * {@link #startListening}, which is where what is already in [built] is disposed of.</p>
+     */
+    private boolean bindAll(@NonNull String vmId, @NonNull List<String> touchScreens,
+                            @NonNull List<String> nativeScreens,
+                            @NonNull Map<String, Slot> built) {
         boolean allListening = true;
         for (int ch = 0; ch < NativeDisplay.CHANNEL_COUNT; ch++) {
             for (var screenId : screensFor(ch, touchScreens, nativeScreens)) {
@@ -138,7 +168,6 @@ boolean startListening(@NonNull String vmId, @NonNull List<String> touchScreens,
                 startInputAcceptThread(slot);
             }
         }
-        slots = built;
         return allListening;
     }
 
@@ -239,11 +268,25 @@ private Slot findSlot(@NonNull String screenId, int channel) {
 
     /** Closes the input server fds we opened and unlinks the inodes we own. */
     void release() {
-        inputClosed = true; // stop accept loops; closing the server fd below unblocks nativeUnixAccept
         var live = slots;
         slots = null;
-        if (live == null) return;
-        for (var slot : live.values()) {
+        // Called unconditionally rather than under a null check, because latching inputClosed is
+        // half of what it does and a release with nothing published still has to do that half.
+        closeSlots(live == null ? List.of() : live.values());
+    }
+
+    /**
+     * Gives back everything [live] holds: the accepted peer, the listening fd, and the inode.
+     *
+     * <p>Latching {@code inputClosed} first is not tidiness but the order the accept loop needs.
+     * Closing a server fd is what unblocks the thread parked in accept(2) on it, and that thread
+     * then reads the flag to decide whether the failure means "we are shutting down" or "retry in
+     * 200 ms". Closing first would leave it retrying accept on a closed fd for the life of the
+     * daemon.</p>
+     */
+    private void closeSlots(@NonNull Collection<Slot> live) {
+        inputClosed = true;
+        for (var slot : live) {
             synchronized (slot.lock) {
                 if (slot.peer != null) {
                     slot.peer.close();
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/data/HostKernel.java b/app/src/main/java/cn/classfun/droidvm/lib/data/HostKernel.java
new file mode 100644
index 000000000..446598129
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/lib/data/HostKernel.java
@@ -0,0 +1,68 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
+package cn.classfun.droidvm.lib.data;
+
+import static cn.classfun.droidvm.lib.utils.RunUtils.runList;
+
+import androidx.annotation.NonNull;
+import androidx.annotation.Nullable;
+
+import java.util.regex.Pattern;
+
+/**
+ * Which kernel this phone is running, to the major.minor that behaviour actually turns on.
+ *
+ * <p>The GKI series is the unit several things here are decided by, because it is the unit the
+ * vendor branches are cut on: a Gunyah resource manager, a CMA redirect, a driver's page-list
+ * allocation all behave one way on 6.1 and another on 6.6. The patch level below it never matters
+ * to any of them, so it is dropped rather than compared.</p>
+ *
+ * <p>Matched as a whole token and not by prefix. A {@code startsWith("6.1")} says yes to a 6.12
+ * kernel, which is a different series with the opposite behaviour in at least one of the places
+ * this is asked -- the same trap {@code KernelModuleManager} documents for its KMI directories.</p>
+ *
+ * <p>Runs {@code uname}, so not on the main thread. Cached for the life of the process; the kernel
+ * does not change under a running app.</p>
+ */
+public final class HostKernel {
+    private static final Pattern MAJOR_MINOR = Pattern.compile("^(\\d+\\.\\d+)");
+    /** The 6.1 GKI. Named because several rules key off it and a bare "6.1" reads as nothing. */
+    public static final String GKI_6_1 = "6.1";
+
+    @Nullable
+    private static volatile String cached;
+
+    private HostKernel() {
+    }
+
+    /**
+     * The running kernel's {@code major.minor}, or null when {@code uname} could not be read.
+     *
+     * <p>Null is "we do not know", and every caller has to treat it as such rather than as "not
+     * that version": the rules built on this are about a kernel that cannot do something, and
+     * guessing wrong in that direction turns a warning into a VM that does not start.</p>
+     */
+    @Nullable
+    public static String majorMinor() {
+        var known = cached;
+        if (known != null) return known;
+        String release;
+        try {
+            release = runList("uname", "-r").getOutString().trim();
+        } catch (Exception e) {
+            return null;
+        }
+        var parsed = majorMinorOf(release);
+        cached = parsed;
+        return parsed;
+    }
+
+    /** {@link #majorMinor} for a {@code uname -r} string already in hand. Pure. */
+    @Nullable
+    public static String majorMinorOf(@Nullable String unameRelease) {
+        if (unameRelease == null) return null;
+        var m = MAJOR_MINOR.matcher(unameRelease.trim());
+        return m.find() ? m.group(1) : null;
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/hugepage/PoolPreflight.java b/app/src/main/java/cn/classfun/droidvm/lib/hugepage/PoolPreflight.java
index 9e866afff..0289d5c21 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/hugepage/PoolPreflight.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/hugepage/PoolPreflight.java
@@ -8,13 +8,18 @@
 import static cn.classfun.droidvm.lib.utils.RunUtils.run;
 import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
 import static cn.classfun.droidvm.lib.utils.StringUtils.pathJoin;
+import static cn.classfun.droidvm.lib.store.enums.Enums.optEnum;
 
 import android.util.Log;
 
 import androidx.annotation.NonNull;
 
+import java.util.function.BooleanSupplier;
+
 import cn.classfun.droidvm.lib.store.base.DataItem;
 import cn.classfun.droidvm.lib.store.vm.GuestPoolSizing;
+import cn.classfun.droidvm.lib.store.vm.VMBackend;
+import cn.classfun.droidvm.lib.store.vm.VMHypervisor;
 
 /**
  * Is the huge-page reserve able to back this VM <em>right now</em>?
@@ -31,6 +36,10 @@
  * is simply starting the next VM too soon. That makes the fix cheap: look before starting, and
  * either wait (background starts) or say so (foreground starts).
  *
+ * <p>Asked only of the VMs it is about. A VM on any other hypervisor is not served from the reserve
+ * and cannot be delayed by it, so {@link #appliesTo} answers no before anything is read and every
+ * check on such a VM is free and silent.
+ *
  * <p>Everything here is context-free and does shell I/O -- call it off the UI thread.
  */
 public final class PoolPreflight {
@@ -63,7 +72,10 @@ private PoolPreflight() {
 
     /** What the pool can serve versus what this VM will ask of it. */
     public static final class Status {
-        /** The module is loaded, so the numbers below mean something. */
+        /**
+         * This VM draws on the reserve and the module is loaded, so the numbers below mean
+         * something. False is the ordinary answer: see {@link #appliesTo}.
+         */
         public final boolean applicable;
         /** {@code pool_avail}: 2 MB pages sitting in the reserve, free. */
         public final long availPages;
@@ -100,9 +112,32 @@ public String toString() {
         }
     }
 
+    /**
+     * Whether the reserve has anything to do with this VM.
+     *
+     * <p>Only a Gunyah VM is served from it. That is what the reserve is: isolated folios for the
+     * one hypervisor that takes guest memory away from the host, and the danger it exists to avoid
+     * -- migrating pages out of CMA to hand them over -- is that hypervisor's transfer and nobody
+     * else's. KVM and GenieZone hand over nothing, and a TCG guest is ordinary process memory.
+     * Their VMs pay the reserve no attention, so the reserve must pay them none: a prompt or a wait
+     * for a pool they will not draw on is a delay with no failure behind it.</p>
+     *
+     * <p>The module being loaded is the second half of the question, not the first. It ships for
+     * Qualcomm SoCs alone -- {@code match.json} gates it on {@code soc_vendor}, and the kernel-module
+     * page hides the card everywhere else -- so on most phones the answer is no twice over. Read
+     * here rather than assumed, because a QEMU-on-Gunyah VM on a Qualcomm phone is both.</p>
+     */
+    public static boolean appliesTo(@NonNull DataItem item) {
+        var backend = optEnum(item, "backend", VMBackend.DEFAULT);
+        var configured = optEnum(item, "hypervisor", VMHypervisor.DEFAULT);
+        return VMHypervisor.resolveConfigured(backend, configured) == VMHypervisor.GUNYAH;
+    }
+
     /** Reads the reserve and sizes this VM against it. Never throws. */
     @NonNull
     public static Status check(@NonNull DataItem item) {
+        if (!appliesTo(item))
+            return new Status(false, 0, 0);
         long avail = readPages("pool_avail", -1);
         if (avail < 0)
             return new Status(false, 0, 0);
@@ -149,12 +184,31 @@ public static boolean waitForPool(@NonNull DataItem item) {
         return waitForPool(item, BACKGROUND_ATTEMPTS, BACKGROUND_INTERVAL_MS, BACKGROUND_ACQUIRE_AT);
     }
 
-    public static boolean waitForPool(@NonNull DataItem item, int attempts, long sleepMs, int acquireAt) {
+    /** {@link #waitForPool} for a caller with nothing that would call the wait off. */
+    public static boolean waitForPool(@NonNull DataItem item, int attempts, long sleepMs,
+                                      int acquireAt) {
+        return waitForPool(item, attempts, sleepMs, acquireAt, () -> false);
+    }
+
+    /**
+     * The same wait, with [abort] read once a second so a caller can call it off.
+     *
+     * <p>Ten seconds is a long time to be inside when the daemon is going down, and the thing the
+     * wait is for -- a VM that has not started yet -- is exactly what a shutdown no longer wants
+     * started. Read between looks rather than by interrupting the thread, because an interrupt
+     * would also land on whatever the caller does after this returns.</p>
+     */
+    public static boolean waitForPool(@NonNull DataItem item, int attempts, long sleepMs,
+                                      int acquireAt, @NonNull BooleanSupplier abort) {
         var status = check(item);
         if (!status.applicable || status.isEnough())
             return true;
         Log.i(TAG, fmt("waiting for the huge-page reserve: %s", status));
         for (int i = 1; i <= attempts; i++) {
+            if (abort.getAsBoolean()) {
+                Log.i(TAG, fmt("the wait for the reserve was called off after %d attempt(s)", i - 1));
+                return false;
+            }
             if (i == acquireAt) {
                 Log.i(TAG, fmt("reserve still short at attempt %d; asking it to acquire", i));
                 acquire(2);
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/LendMthpPreflight.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/LendMthpPreflight.java
new file mode 100644
index 000000000..518237edc
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/LendMthpPreflight.java
@@ -0,0 +1,76 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
+package cn.classfun.droidvm.ui.vm;
+
+import static cn.classfun.droidvm.lib.store.enums.Enums.optEnum;
+
+import androidx.annotation.NonNull;
+import androidx.annotation.Nullable;
+
+import cn.classfun.droidvm.lib.data.HostKernel;
+import cn.classfun.droidvm.lib.store.base.DataItem;
+import cn.classfun.droidvm.lib.store.vm.LendMthpMode;
+import cn.classfun.droidvm.lib.store.vm.VMBackend;
+import cn.classfun.droidvm.lib.store.vm.VMHypervisor;
+
+/**
+ * Can this kernel LEND the way this VM is configured to?
+ *
+ * <p>Guest RAM is handed to Gunyah as parcels. {@code chunked} splits the prepared region into
+ * 256 MB ones and lends each in its own slot; {@code single} lends the whole region at once. Which
+ * of the two works is not a preference but a property of the resource manager on the other side,
+ * and it changed between GKI series: 6.6 demand-pages a parcel, so many of them cost nothing until
+ * they are touched, while 6.1 commits every parcel as it arrives and answers the second or third
+ * one with NORESOURCE. A 3 GB VM is twelve parcels there, and it does not boot.</p>
+ *
+ * <p>The failure names none of this. crosvm reports {@code GH_VM_START failed} and exits with
+ * "failed to initialize virtual machine: No such device", which reads like a missing kernel module
+ * or a broken image, and the setting behind it is three tabs away in the editor.</p>
+ *
+ * <p>Worth a pre-start check rather than a better default because the value travels. A new VM gets
+ * the right mode from the device capability table, but a VM imported from a package carries the
+ * mode of the phone it was exported from -- and a package built on a 6.6 phone brings
+ * {@code chunked} to a 6.1 one, where it cannot work. That is the case this exists for.</p>
+ *
+ * <p>{@link #check} runs {@code uname}: call it off the main thread.</p>
+ */
+public final class LendMthpPreflight {
+    private LendMthpPreflight() {
+    }
+
+    /**
+     * Is this VM configured to lend in 256 MB parcels through Gunyah?
+     *
+     * <p>Half the question, and the half that does not need the device. The other hypervisors do
+     * not lend at all -- the mode is passed to crosvm's Gunyah path alone -- so the setting is
+     * inert everywhere else and there is nothing to warn about.</p>
+     */
+    static boolean lendsChunked(@NonNull DataItem item) {
+        var backend = optEnum(item, "backend", VMBackend.DEFAULT);
+        var hypervisor = VMHypervisor.resolveConfigured(
+            backend, optEnum(item, "hypervisor", VMHypervisor.DEFAULT));
+        return hypervisor == VMHypervisor.GUNYAH
+            && LendMthpMode.fromItem(item) == LendMthpMode.CHUNKED;
+    }
+
+    /**
+     * Whether [item] would fail to start on a kernel of series [kernelMajorMinor].
+     *
+     * <p>Split out from {@link #check} so the rule can be read and tested without a phone under
+     * it. An unknown kernel answers false: the check exists to explain a failure, and inventing one
+     * for a kernel nobody could identify would put a dialog in front of a VM that starts fine.</p>
+     */
+    static boolean needsSingle(@NonNull DataItem item, @Nullable String kernelMajorMinor) {
+        return HostKernel.GKI_6_1.equals(kernelMajorMinor) && lendsChunked(item);
+    }
+
+    /** {@link #needsSingle} against the running kernel. Runs {@code uname}; never throws. */
+    public static boolean check(@NonNull DataItem item) {
+        try {
+            return needsSingle(item, HostKernel.majorMinor());
+        } catch (Exception e) {
+            return false;
+        }
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/VMActions.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/VMActions.java
index ff9da50eb..19cbb4651 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/VMActions.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/VMActions.java
@@ -50,6 +50,7 @@
 import cn.classfun.droidvm.lib.utils.ImageUtils;
 import cn.classfun.droidvm.ui.disk.action.BackingChainLinker;
 import cn.classfun.droidvm.ui.disk.tree.DiskTree;
+import cn.classfun.droidvm.lib.store.vm.LendMthpMode;
 import cn.classfun.droidvm.lib.store.vm.VMBackend;
 import cn.classfun.droidvm.lib.hugepage.PoolPreflight;
 import cn.classfun.droidvm.ui.hugepage.HugePageActivity;
@@ -88,19 +89,111 @@ public static void createAndStart(
         // Pre-start guards, in order: internal snapshots (crosvm refuses the disk), a base
         // image attached writable (writing would corrupt its overlays - any backend), a disk a
         // running VM already holds, compressed clusters (crosvm boots to I/O errors), a host
-        // kernel module this configuration needs but nobody loaded, and a huge-page reserve too
-        // small to back this VM. Each prompts with its fix and chains to the next; everything
-        // else starts normally. The shared-disk guard may hand the rest of the chain a session
-        // copy of the config, so everything downstream uses what it passes on rather than
-        // `config`.
+        // kernel module this configuration needs but nobody loaded, a LEND mode this kernel's
+        // resource manager will not accept, and a huge-page reserve too small to back this VM.
+        // Each prompts with its fix and chains to the next; everything else starts normally. The
+        // shared-disk guard may hand the rest of the chain a session copy of the config, so
+        // everything downstream uses what it passes on rather than `config`.
         guardSnapshotDisks(config, mainHandler, ui, convertLauncher,
             () -> guardLockedParents(config, mainHandler, ui,
                 () -> guardSharedRunning(config, mainHandler, ui,
                     started -> guardCompressedDisks(started, mainHandler, ui, convertLauncher,
                         () -> guardKernelModules(started, mainHandler, ui,
-                            () -> guardHugePagePool(started, mainHandler, ui,
-                                () -> startAfterGuard(started, mainHandler, ui,
-                                    wantOpenConsole)))))));
+                            () -> guardLendMthp(started, mainHandler, ui,
+                                () -> guardHugePagePool(started, mainHandler, ui,
+                                    () -> startAfterGuard(started, mainHandler, ui,
+                                        wantOpenConsole))))))));
+    }
+
+    /**
+     * Pre-start check: will this kernel's Gunyah resource manager take the parcels this VM is
+     * configured to lend? {@link LendMthpPreflight} answers that from the config and the running
+     * kernel series; on 6.1 the 256 MB parcels of {@code chunked} are refused a few in, and the VM
+     * dies at GH_VM_START naming nothing that would lead anyone to the setting.
+     *
+     * <p>Unlike the module guard there is something to repair from the dialog, and repairing it is
+     * the point: the value is almost always inherited rather than chosen -- a VM package exported
+     * from a 6.6 phone carries the mode that phone needed -- so the offer is to correct it and
+     * keep the correction, in the store as well as in the config this start hands the daemon.</p>
+     *
+     * <p>Nobody to ask means the start proceeds untouched, as the other guards do. It will fail,
+     * the way it does today; silently rewriting a VM's memory configuration for an unattended
+     * start is a worse answer than the failure it would avoid.</p>
+     */
+    private static void guardLendMthp(
+        @NonNull VMConfig config,
+        @NonNull Handler mainHandler,
+        @NonNull UIContext ui,
+        @NonNull Runnable proceed
+    ) {
+        var appContext = ui.getContext().getApplicationContext();
+        runOnPool(() -> {
+            boolean refused;
+            try {
+                refused = LendMthpPreflight.check(config.item);
+            } catch (Exception e) {
+                Log.w(TAG, "LEND mode preflight failed", e);
+                refused = false;
+            }
+            if (!refused) {
+                mainHandler.post(proceed);
+                return;
+            }
+            mainHandler.post(() -> promptLendMthp(config, appContext, mainHandler, ui, proceed));
+        });
+    }
+
+    private static void promptLendMthp(
+        @NonNull VMConfig config,
+        @NonNull Context appContext,
+        @NonNull Handler mainHandler,
+        @NonNull UIContext ui,
+        @NonNull Runnable proceed
+    ) {
+        if (!ui.isAlive()) {
+            proceed.run();
+            return;
+        }
+        var ctx = ui.getContext();
+        new MaterialAlertDialogBuilder(ctx)
+            .setTitle(R.string.vm_lend_mthp_refused_title)
+            .setMessage(R.string.vm_lend_mthp_refused_message)
+            .setPositiveButton(R.string.vm_lend_mthp_refused_fix, (d, w) ->
+                runOnPool(() -> {
+                    applySingleLendMthp(appContext, config);
+                    mainHandler.post(proceed);
+                }))
+            .setNeutralButton(R.string.vm_lend_mthp_refused_start_anyway, (d, w) -> proceed.run())
+            .setNegativeButton(android.R.string.cancel, null)
+            .show();
+    }
+
+    /**
+     * Writes single-parcel LEND to this VM, in both places it has to land.
+     *
+     * <p>The config the chain carries is what the daemon is given by vm_modify, and the store is
+     * what the VM list reloads from -- the same pair, and the same reason, as
+     * {@link #rememberChoice}: a change made only in memory starts this VM correctly and is gone by
+     * the next one. Does file I/O; call it off the main thread.</p>
+     */
+    private static void applySingleLendMthp(
+        @NonNull Context context,
+        @NonNull VMConfig config
+    ) {
+        config.item.set(LendMthpMode.KEY, LendMthpMode.SINGLE);
+        try {
+            var store = new VMStore();
+            if (store.load(context)) {
+                var stored = store.findById(config.getId());
+                if (stored != null) {
+                    stored.item.set(LendMthpMode.KEY, LendMthpMode.SINGLE);
+                    store.save(context);
+                }
+            }
+        } catch (Exception e) {
+            // The start still gets the corrected config; only the remembering failed.
+            Log.w(TAG, "failed to persist the LEND mode correction", e);
+        }
     }
 
     /**
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/display/vnc/base/BaseVncActivity.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/vnc/base/BaseVncActivity.java
index d0fbb51f2..30a881ffc 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/display/vnc/base/BaseVncActivity.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/vnc/base/BaseVncActivity.java
@@ -59,6 +59,7 @@
 import cn.classfun.droidvm.ui.vm.display.vnc.h264.H264ConsolePipeline;
 import cn.classfun.droidvm.ui.vm.display.vnc.h264.H264ProbePolicy;
 import cn.classfun.droidvm.ui.vm.display.vnc.h264.H264RectProtocol;
+import cn.classfun.droidvm.ui.vm.display.vnc.h264.H264SyncFrameCache;
 import cn.classfun.droidvm.ui.vm.display.vnc.input.VncExtraKeysPanel;
 
 public abstract class BaseVncActivity extends AppCompatActivity implements ImeInsetsExempt {
@@ -127,6 +128,16 @@ public abstract class BaseVncActivity extends AppCompatActivity implements ImeIn
     private volatile H264ConsolePipeline h264;
     /** What this console is doing about H.264 and why. See {@link H264ProbePolicy}. */
     private final H264ProbePolicy h264Probe = new H264ProbePolicy();
+    /**
+     * The rect a decoder can start on, held for the connection rather than for the pipeline.
+     *
+     * <p>Here rather than inside {@link H264ConsolePipeline} because it has to survive one: this
+     * console's pipeline is built when there is a view to draw into, which on the presentation
+     * console is after a display has been chosen and again after every window rebuild, while the
+     * stream -- and the one reset-flagged rect that carries its parameter sets -- rides a
+     * connection that started earlier and does not stop for any of it.</p>
+     */
+    private final H264SyncFrameCache syncFrames = new H264SyncFrameCache();
     private final Runnable h264Tick = this::tickH264;
     /** What {@link #setStatus} last put in the status line, and the note appended to it. */
     private String statusText = "";
@@ -370,7 +381,17 @@ public void onH264Rect(@NonNull byte[] rect, int width, int height) {
             // than reading a clock of their own, which is what lets the schedule be tested.
             h264Probe.onStreamRect(SystemClock.elapsedRealtime());
             var pipeline = h264;
-            if (pipeline != null) pipeline.submitStreamRect(rect, width, height);
+            if (pipeline != null) {
+                pipeline.submitStreamRect(rect, width, height);
+                return;
+            }
+            // No pipeline yet, which for the presentation console is the ordinary state until a
+            // display has been chosen -- the connection does not wait for that choice, and the rect
+            // that starts the stream is sent once, on joining. Dropping it outright is what left
+            // that console showing nothing: the bare IDRs that follow carry no parameter sets, and
+            // nothing on the wire asks for another. Kept here instead, and the first pipeline built
+            // afterwards primes its decoder with it.
+            syncFrames.rememberIfSync(rect, width, height);
         }
 
         @Override
@@ -457,6 +478,11 @@ private void messageLoop() {
         boolean wasRunning = running;
         running = false;
         h264Probe.onDisconnected();
+        // The sync frame belonged to this connection's stream. The next connection joins the stream
+        // again and is sent its own; keeping this one would prime a decoder with the parameter sets
+        // of a stream nobody is sending any more. Cleared from this thread because this is the
+        // thread that writes it -- the loop above is the only other place it is touched.
+        syncFrames.clear();
         Log.i(TAG, "message loop ended");
         if (wasRunning) {
             mainHandler.post(this::scheduleAutoReconnect);
@@ -541,7 +567,8 @@ protected void setH264View(@Nullable TextureView view) {
         if (h264View == view) return;
         stopH264();
         h264View = view;
-        h264 = view == null ? null : new H264ConsolePipeline(view, mainHandler, new H264Listener());
+        h264 = view == null ? null
+            : new H264ConsolePipeline(view, mainHandler, new H264Listener(), syncFrames);
     }
 
     /**
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/display/vnc/h264/H264ConsolePipeline.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/vnc/h264/H264ConsolePipeline.java
index 67344e318..b1c302b52 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/display/vnc/h264/H264ConsolePipeline.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/vnc/h264/H264ConsolePipeline.java
@@ -104,22 +104,6 @@ private static final class Generation {
         @Nullable
         volatile H264ConsoleDecoder decoder;
 
-        /**
-         * The Annex-B bytes of the most recent reset-flagged rect at this geometry -- SPS, PPS and
-         * an IDR concatenated -- or null before one has been seen.
-         *
-         * <p>This is the whole reason a black screen was possible. The server sends the parameter
-         * sets exactly once, on the reset-flagged rect that starts the stream, and never again on
-         * the bare IDRs that follow; a decoder attached even one frame later than that rect --
-         * which is the ordinary case on a cold open, because the TextureView's SurfaceTexture is
-         * created a frame after the view is made visible -- would never see an SPS and would buffer
-         * every later frame forever with nothing to decode them against. Held here so that a
-         * decoder standing up after the sync rect can still be handed it.</p>
-         *
-         * <p>Written and read only on the message-loop thread; see {@link #submitStreamRect}.</p>
-         */
-        @Nullable
-        byte[] syncFrame;
         /** Whether this generation's decoder has been fed yet. Message-loop thread only. */
         boolean decoderFed;
 
@@ -132,6 +116,17 @@ private static final class Generation {
     private final TextureView view;
     private final Handler main;
     private final Listener listener;
+    /**
+     * Where the rect a decoder can start on is kept.
+     *
+     * <p>Not owned here, and deliberately not: the sync frame has to outlive this object. The
+     * server sends the parameter sets exactly once per client, on the reset-flagged rect that
+     * starts its stream, and a pipeline is built and thrown away several times over the life of one
+     * connection -- the presentation console builds its first one only when a display has been
+     * chosen, and another every time that window is rebuilt. A cache scoped to the pipeline would
+     * be empty in exactly the case it exists for. See {@link H264SyncFrameCache}.</p>
+     */
+    private final H264SyncFrameCache syncFrames;
 
     /** Written on the main thread; read by the message loop to find out what it may feed. */
     @Nullable
@@ -152,10 +147,12 @@ private static final class Generation {
     private boolean stopping;
 
     public H264ConsolePipeline(@NonNull TextureView view, @NonNull Handler main,
-                               @NonNull Listener listener) {
+                               @NonNull Listener listener,
+                               @NonNull H264SyncFrameCache syncFrames) {
         this.view = view;
         this.main = main;
         this.listener = listener;
+        this.syncFrames = syncFrames;
     }
 
     public boolean isLive() {
@@ -202,7 +199,7 @@ public void submitStreamRect(@NonNull byte[] rectBody, int width, int height) {
         // later. The reset flag is exactly what marks the rect that carries the parameter sets.
         // decoderFed is not disturbed: it is per-generation, and a mid-stream reset of a decoder
         // that has already been fed must go through the reset path in feed(), not the prime path.
-        if (rect.resetsDecoder()) gen.syncFrame = rect.annexB;
+        if (rect.resetsDecoder()) syncFrames.remember(width, height, rect.annexB);
         try {
             if (!gen.settled.await(CONFIGURE_WAIT_MS, TimeUnit.MILLISECONDS)) {
                 Log.w(TAG, "the main thread did not answer a new stream geometry in time");
@@ -215,7 +212,7 @@ public void submitStreamRect(@NonNull byte[] rectBody, int width, int height) {
         var decoder = gen.decoder;
         // Null is the ordinary "there is no window for this picture" -- a backgrounded console, or
         // one whose presentation window has not been built yet. The frame is dropped rather than
-        // held, but the sync frame it may have carried is not: it is in gen.syncFrame, and the next
+        // held, but the sync frame it may have carried is not: the cache kept it, and the next
         // frame to reach a live decoder replays it first.
         if (decoder == null || generation != gen) return;
         try {
@@ -231,13 +228,17 @@ public void submitStreamRect(@NonNull byte[] rectBody, int width, int height) {
      *
      * <p>The priming is what closes the black-screen hole. When a decoder is fed for the first
      * time it may be one that stood up after the sync rect went by -- so if this rect is not itself
-     * a sync (it does not reset), the cached {@link Generation#syncFrame} goes in ahead of it, and
+     * a sync (it does not reset), the cached sync frame for this geometry goes in ahead of it, and
      * the decoder gets its SPS/PPS before the delta that would otherwise mean nothing. A rect that
      * is a sync needs none of this: it carries its own parameter sets, and a decoder this fresh has
      * no prior context to reset.</p>
      *
-     * <p>All on the message-loop thread, so {@code decoderFed} and {@code syncFrame} need no
-     * guarding: the one thread that reads them is the one that writes them.</p>
+     * <p>The cache is read by geometry rather than per generation because the decoder standing up
+     * here may be the first one this connection ever had -- the sync rect can predate the pipeline
+     * itself, not merely this generation of it.</p>
+     *
+     * <p>All on the message-loop thread, so {@code decoderFed} and the cache need no guarding: the
+     * one thread that reads them is the one that writes them.</p>
      */
     private void feed(@NonNull Generation gen, @NonNull H264ConsoleDecoder decoder,
                       @NonNull H264RectProtocol.StreamRect rect) throws IOException {
@@ -247,7 +248,8 @@ private void feed(@NonNull Generation gen, @NonNull H264ConsoleDecoder decoder,
                 decoder.submit(rect.annexB);
                 return;
             }
-            if (gen.syncFrame != null) decoder.submit(gen.syncFrame);
+            var sync = syncFrames.forGeometry(gen.width, gen.height);
+            if (sync != null) decoder.submit(sync);
             decoder.submit(rect.annexB);
             return;
         }
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/display/vnc/h264/H264SyncFrameCache.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/vnc/h264/H264SyncFrameCache.java
new file mode 100644
index 000000000..0c3a20070
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/vnc/h264/H264SyncFrameCache.java
@@ -0,0 +1,89 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
+package cn.classfun.droidvm.ui.vm.display.vnc.h264;
+
+import androidx.annotation.NonNull;
+import androidx.annotation.Nullable;
+
+import java.io.IOException;
+
+/**
+ * The one rect a decoder can start on, kept for as long as the connection that sent it.
+ *
+ * <p>The server sends the parameter sets exactly once per client: on the reset-flagged rect that
+ * starts its stream, {@code SPS PPS IDR} in one body. Every IDR after that is bare, and a decoder
+ * that never saw the first rect has nothing to decode any of them against -- it buffers forever
+ * and the screen stays black. Nothing on the wire brings that rect back: the connection is what
+ * enrolled the client, the connection is still fine, and the server has no reason to think anything
+ * was missed.</p>
+ *
+ * <p>So the rect has to outlive everything on this side that can come and go while the connection
+ * stays up. That is three things. The decoder goes with its surface when the console is
+ * backgrounded; the pipeline's generation goes with the decoder; and the pipeline itself does not
+ * exist until there is a view to draw into, which for the presentation console means until a
+ * display has been chosen -- a choice the connection does not wait for, so the rect that starts
+ * the stream can arrive before there is anything to hand it to. This is where it waits.</p>
+ *
+ * <p>One entry, keyed by geometry. A reset-flagged rect at a new size replaces it -- the parameter
+ * sets describe a coded size, so an entry at the old size is exactly the wrong thing to prime a
+ * decoder with -- and a decoder is only ever primed with an entry at its own size.</p>
+ *
+ * <p>Written on the RFB message-loop thread, which is the one thread rects arrive on, and read
+ * there. The connection ending clears it from that thread too. The field is volatile only so that
+ * a reconnect's fresh message loop, which is a different thread, starts from the cleared state.</p>
+ */
+public final class H264SyncFrameCache {
+    private static final class Entry {
+        final int width;
+        final int height;
+        @NonNull
+        final byte[] annexB;
+
+        Entry(int width, int height, @NonNull byte[] annexB) {
+            this.width = width;
+            this.height = height;
+            this.annexB = annexB;
+        }
+    }
+
+    @Nullable
+    private volatile Entry entry;
+
+    /** Keeps [annexB] as the sync frame for a stream at [width] x [height], replacing any other. */
+    public void remember(int width, int height, @NonNull byte[] annexB) {
+        entry = new Entry(width, height, annexB);
+    }
+
+    /**
+     * Reads one rect body the way the pipeline would, and keeps it if it is a sync frame.
+     *
+     * <p>For a rect that arrives while there is no pipeline to hand it to. A body that will not
+     * parse is neither kept nor reported: the connection is fine -- the reader took exactly the
+     * bytes the length declared -- and there is no pipeline to bring down over it, so the honest
+     * thing to do with it is nothing. The pipeline that eventually exists will judge the next one
+     * for itself.</p>
+     */
+    public void rememberIfSync(@NonNull byte[] rectBody, int width, int height) {
+        if (width <= 0 || height <= 0) return;
+        H264RectProtocol.StreamRect rect;
+        try {
+            rect = H264RectProtocol.parseStreamRect(rectBody);
+        } catch (IOException e) {
+            return;
+        }
+        if (rect.resetsDecoder()) remember(width, height, rect.annexB);
+    }
+
+    /** The sync frame for a stream at exactly [width] x [height], or null when none was kept. */
+    @Nullable
+    public byte[] forGeometry(int width, int height) {
+        var e = entry;
+        return e != null && e.width == width && e.height == height ? e.annexB : null;
+    }
+
+    /** Forgets it: the connection that sent it is over, and the next one is served its own. */
+    public void clear() {
+        entry = null;
+    }
+}
diff --git a/app/src/main/res/values-zh-rCN/strings.xml b/app/src/main/res/values-zh-rCN/strings.xml
index ff66e9f60..06061be7d 100644
--- a/app/src/main/res/values-zh-rCN/strings.xml
+++ b/app/src/main/res/values-zh-rCN/strings.xml
@@ -1437,6 +1437,10 @@
     <string name="vm_hugepage_short_message">大页保留区目前剩 %1$d MB，这台虚拟机大约需要 %2$d MB，差 %3$d MB。\n\n上一台虚拟机结束后，保留区通常两秒左右就会补回来。现在就开机的话，Hypervisor 只能改拿普通内存，而那必须先从 CMA 迁移出来；在内存吃紧的手机上，这一步曾造成整机停住数分钟、甚至直接重启。\n\n通常等一下再开就好了。</string>
     <string name="vm_hugepage_short_settings">前往大页设置</string>
     <string name="vm_hugepage_short_start_anyway">仍要启动</string>
+    <string name="vm_lend_mthp_refused_title">此内核无法以 256 MB 分块出借</string>
+    <string name="vm_lend_mthp_refused_message">此虚拟机以 256 MB 分块把客户机内存交给虚拟化层，而 6.1 内核的资源管理器会在每个分块到达时立即提交，不会按需分页。交出几个分块后资源耗尽，虚拟机停在 GH_VM_START，只报出 \"failed to initialize virtual machine\"\u2014\u2014一句指向不了任何地方的信息。\n\n单次预分配会把整段区域一次交出，这正是此内核需要的方式。虚拟机会带着另一种设置，通常是因为从 6.6 内核手机导出的软件包导入而来：那里的分块按需分页，256 MB 反而更合适。</string>
+    <string name="vm_lend_mthp_refused_fix">改为单次并保存</string>
+    <string name="vm_lend_mthp_refused_start_anyway">仍要启动</string>
 
     <string name="create_vm_category_peripheral">外设</string>
     <string name="edit_vm_peripheral_empty">没有外设</string>
diff --git a/app/src/main/res/values-zh-rTW/strings.xml b/app/src/main/res/values-zh-rTW/strings.xml
index fcfbc88d2..358bfeca1 100644
--- a/app/src/main/res/values-zh-rTW/strings.xml
+++ b/app/src/main/res/values-zh-rTW/strings.xml
@@ -1437,6 +1437,10 @@
     <string name="vm_hugepage_short_message">大頁保留區目前剩 %1$d MB，這台虛擬機大約需要 %2$d MB，差 %3$d MB。\n\n上一台虛擬機結束後，保留區通常兩秒左右就會補回來。現在就開機的話，Hypervisor 只能改拿一般記憶體，而那必須先從 CMA 搬出來；在記憶體吃緊的手機上，這一步曾造成整台停住數分鐘、甚至直接重開機。\n\n通常等一下再開就好了。</string>
     <string name="vm_hugepage_short_settings">前往大頁設定</string>
     <string name="vm_hugepage_short_start_anyway">仍要啟動</string>
+    <string name="vm_lend_mthp_refused_title">此核心無法以 256 MB 分塊出借</string>
+    <string name="vm_lend_mthp_refused_message">此虛擬機以 256 MB 分塊把客體記憶體交給虛擬化層，而 6.1 核心的資源管理器會在每個分塊抵達時立即提交，不會按需分頁。交出幾個分塊後資源就用盡，虛擬機停在 GH_VM_START，只報出 \"failed to initialize virtual machine\"\u2014\u2014一句指不出任何方向的訊息。\n\n單次預先配置會把整段區域一次交出，這正是此核心要的方式。虛擬機會帶著另一種設定，通常是因為從 6.6 核心手機匯出的軟體包匯入而來：那裡的分塊按需分頁，256 MB 反而比較合適。</string>
+    <string name="vm_lend_mthp_refused_fix">改為單次並儲存</string>
+    <string name="vm_lend_mthp_refused_start_anyway">仍要啟動</string>
 
     <string name="create_vm_category_peripheral">外設</string>
     <string name="edit_vm_peripheral_empty">沒有外設</string>
diff --git a/app/src/main/res/values/strings.xml b/app/src/main/res/values/strings.xml
index f6c87d21e..b87d02771 100644
--- a/app/src/main/res/values/strings.xml
+++ b/app/src/main/res/values/strings.xml
@@ -1476,6 +1476,10 @@
     <string name="vm_hugepage_short_message">The huge-page reserve has %1$d MB free, but this VM needs about %2$d MB &#8212; %3$d MB short.\n\nThe reserve normally refills a couple of seconds after another VM exits. Starting now makes the hypervisor take ordinary memory instead, which it has to migrate out of CMA first; on a phone with nothing spare that has stalled the whole system for minutes, or rebooted it.\n\nWaiting a moment and starting again usually clears it.</string>
     <string name="vm_hugepage_short_settings">Huge-page settings</string>
     <string name="vm_hugepage_short_start_anyway">Start anyway</string>
+    <string name="vm_lend_mthp_refused_title">This kernel cannot lend in 256 MB parcels</string>
+    <string name="vm_lend_mthp_refused_message">This VM hands its guest RAM to the hypervisor in 256 MB parcels, and the resource manager on a 6.1 kernel commits every parcel as it arrives instead of paging it in on demand. It runs out a few parcels in, and the VM stops at GH_VM_START with \"failed to initialize virtual machine\" \u2014 a message that points at nothing.\n\nSingle-parcel preallocation hands the whole region over at once, which is what this kernel wants. A VM usually arrives set the other way by being imported from a package exported on a 6.6 phone, where parcels are paged in on demand and 256 MB ones are the better choice.</string>
+    <string name="vm_lend_mthp_refused_fix">Use single parcel and save</string>
+    <string name="vm_lend_mthp_refused_start_anyway">Start anyway</string>
 
     <string name="create_vm_category_peripheral">Peripherals</string>
     <string name="edit_vm_peripheral_empty">No peripherals</string>
diff --git a/app/src/test/java/cn/classfun/droidvm/lib/hugepage/PoolPreflightTest.java b/app/src/test/java/cn/classfun/droidvm/lib/hugepage/PoolPreflightTest.java
index 2dd9f3da9..364de5ac6 100644
--- a/app/src/test/java/cn/classfun/droidvm/lib/hugepage/PoolPreflightTest.java
+++ b/app/src/test/java/cn/classfun/droidvm/lib/hugepage/PoolPreflightTest.java
@@ -4,6 +4,8 @@
 package cn.classfun.droidvm.lib.hugepage;
 
 import static org.junit.Assert.assertEquals;
+import static org.junit.Assert.assertFalse;
+import static org.junit.Assert.assertTrue;
 
 import org.junit.Test;
 
@@ -73,4 +75,45 @@ public void onlyThePreallocatedPartIsBudgeted() {
         assertEquals(512, GuestPoolSizing.bootGuestPreallocMb(item));
         assertEquals(5632, neededMb(item));
     }
+
+    /**
+     * The reserve is Gunyah's, and asking about it anywhere else is a delay with no failure behind
+     * it. Every case below names its hypervisor rather than leaving it to be resolved, because
+     * resolving one reads the device nodes and the answer would then be this build machine's.
+     */
+    private static DataItem on(String backend, String hypervisor) {
+        var item = vm("protected_without_firmware", "gpu_virglrenderer", "native", true);
+        item.set("backend", backend);
+        item.set("hypervisor", hypervisor);
+        return item;
+    }
+
+    @Test
+    public void aGunyahVmDrawsOnTheReserve() {
+        assertTrue(PoolPreflight.appliesTo(on("crosvm", "gunyah")));
+    }
+
+    @Test
+    public void theBackendIsNotWhatDecidesIt() {
+        // QEMU runs on Gunyah too, and its guest RAM is lent the same way.
+        assertTrue(PoolPreflight.appliesTo(on("qemu", "gunyah")));
+    }
+
+    @Test
+    public void everyOtherHypervisorIsNoneOfItsBusiness() {
+        // KVM and GenieZone hand no memory away, and a TCG guest is ordinary process memory. A
+        // prompt or a ten-second wait for a pool none of them touch is the bug this gate closes.
+        assertFalse(PoolPreflight.appliesTo(on("crosvm", "kvm")));
+        assertFalse(PoolPreflight.appliesTo(on("crosvm", "geniezone")));
+        assertFalse(PoolPreflight.appliesTo(on("qemu", "soft")));
+    }
+
+    @Test
+    public void aVmThatDoesNotApplyIsAlwaysEnough() {
+        // check() short-circuits before reading sysfs, so this holds on a phone whose reserve is
+        // loaded and empty as much as on a machine that has never heard of the module.
+        var status = PoolPreflight.check(on("qemu", "soft"));
+        assertFalse(status.applicable);
+        assertTrue(status.isEnough());
+    }
 }
diff --git a/app/src/test/java/cn/classfun/droidvm/lib/store/vm/NativeDisplaySocketPathTest.java b/app/src/test/java/cn/classfun/droidvm/lib/store/vm/NativeDisplaySocketPathTest.java
new file mode 100644
index 000000000..4e6a15923
--- /dev/null
+++ b/app/src/test/java/cn/classfun/droidvm/lib/store/vm/NativeDisplaySocketPathTest.java
@@ -0,0 +1,89 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
+package cn.classfun.droidvm.lib.store.vm;
+
+import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
+import static org.junit.Assert.assertEquals;
+import static org.junit.Assert.assertNotEquals;
+import static org.junit.Assert.assertThrows;
+import static org.junit.Assert.assertTrue;
+
+import org.junit.Test;
+
+import java.util.HashSet;
+
+/**
+ * How much room an input socket name has left, and what happens to the screen that runs out.
+ *
+ * <p>{@code sun_path} is 108 bytes and bind(2) truncates silently past it, so the name is checked
+ * before the syscall. The two screens this build has fit easily -- they are spelt {@code g0} and
+ * {@code sfb} for that reason -- but a screen id with no tag falls back to the id itself, and a
+ * third screen is something virtio-gpu multi-display would bring. This pins the budget so that
+ * arrives as a number here rather than as a socket nobody connects to.</p>
+ */
+public final class NativeDisplaySocketPathTest {
+    /** A real one: the id is what makes the name long, so a made-up short one would prove nothing. */
+    private static final String VM_ID = "5f2c1b70-9a4e-4c0d-8b31-6de7f0a2c845";
+
+    @Test
+    public void theScreensThisBuildHasFitWithRoomToSpare() {
+        for (var screenId : VMScreenConfig.IDS)
+            for (int ch = 0; ch < NativeDisplay.CHANNEL_COUNT; ch++) {
+                var path = NativeDisplay.inputSocketPath(VM_ID, screenId, ch);
+                assertTrue(fmt("%s is over sun_path", path),
+                    path.length() <= NativeDisplay.MAX_UNIX_PATH);
+                NativeDisplay.requireBindablePath(path);
+            }
+    }
+
+    @Test
+    public void everyChannelOnEveryScreenIsItsOwnInode() {
+        // Two channels sharing a name would have the guest's typing and its touches arriving on one
+        // device, and the truncation this guards against is one way to produce exactly that.
+        var seen = new HashSet<String>();
+        for (var screenId : VMScreenConfig.IDS)
+            for (int ch = 0; ch < NativeDisplay.CHANNEL_COUNT; ch++)
+                seen.add(NativeDisplay.inputSocketPath(VM_ID, screenId, ch));
+        // The VM-wide channel collapses onto one name whatever screen is passed, so the count is
+        // one per screen per per-screen channel, plus that single shared one.
+        int perScreen = 0;
+        for (int ch = 0; ch < NativeDisplay.CHANNEL_COUNT; ch++)
+            if (NativeDisplay.isPerScreen(ch)) perScreen++;
+        assertEquals(VMScreenConfig.IDS.length * perScreen + 1, seen.size());
+    }
+
+    @Test
+    public void aScreenWithNoTagOfItsOwnSpendsItsWholeIdOnTheName() {
+        // What a third screen gets before somebody adds it to SCREEN_TAGS: the sanitized id.
+        var tagged = NativeDisplay.inputSocketPath(VM_ID, "gpu-0", NativeDisplay.KEYBOARD);
+        var untagged = NativeDisplay.inputSocketPath(VM_ID, "gpu-1", NativeDisplay.KEYBOARD);
+        assertNotEquals(tagged, untagged);
+        assertTrue("a short id still fits", untagged.length() <= NativeDisplay.MAX_UNIX_PATH);
+    }
+
+    @Test
+    public void aLongScreenIdIsRefusedRatherThanTruncated() {
+        // The failure this whole check exists for. It is refused at the name, before any fd is
+        // bound -- and the start that trips it has already bound the screens ahead of this one,
+        // which is why NativeDisplayInputBridge closes what it built on the way out.
+        var path = NativeDisplay.inputSocketPath(
+            VM_ID, "virtio-gpu-secondary-display", NativeDisplay.KEYBOARD);
+        assertTrue(path.length() > NativeDisplay.MAX_UNIX_PATH);
+        assertThrows(IllegalArgumentException.class,
+            () -> NativeDisplay.requireBindablePath(path));
+    }
+
+    @Test
+    public void theBudgetLeftForAScreenIdIsWorthKnowing() {
+        // Twenty characters, on the longest channel tag. Not a rule, a measurement: it moves when
+        // the prefix or the run directory does, and a third screen id is chosen against it.
+        var name = NativeDisplay.inputSocketPath(VM_ID, "", NativeDisplay.KEYBOARD);
+        int spare = NativeDisplay.MAX_UNIX_PATH - name.length();
+        assertEquals(20, spare);
+        NativeDisplay.requireBindablePath(NativeDisplay.inputSocketPath(
+            VM_ID, "x".repeat(spare), NativeDisplay.KEYBOARD));
+        assertThrows(IllegalArgumentException.class, () -> NativeDisplay.requireBindablePath(
+            NativeDisplay.inputSocketPath(VM_ID, "x".repeat(spare + 1), NativeDisplay.KEYBOARD)));
+    }
+}
diff --git a/app/src/test/java/cn/classfun/droidvm/ui/vm/LendMthpPreflightTest.java b/app/src/test/java/cn/classfun/droidvm/ui/vm/LendMthpPreflightTest.java
new file mode 100644
index 000000000..0dfa9faa7
--- /dev/null
+++ b/app/src/test/java/cn/classfun/droidvm/ui/vm/LendMthpPreflightTest.java
@@ -0,0 +1,86 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
+package cn.classfun.droidvm.ui.vm;
+
+import static org.junit.Assert.assertEquals;
+import static org.junit.Assert.assertFalse;
+import static org.junit.Assert.assertNull;
+import static org.junit.Assert.assertTrue;
+
+import org.junit.Test;
+
+import cn.classfun.droidvm.lib.data.HostKernel;
+import cn.classfun.droidvm.lib.store.base.DataItem;
+import cn.classfun.droidvm.lib.store.vm.LendMthpMode;
+import cn.classfun.droidvm.lib.store.vm.VMConfig;
+
+/**
+ * The combination that cannot boot: Gunyah, a 6.1 kernel, and 256 MB LEND parcels.
+ *
+ * <p>Every case names its hypervisor rather than leaving it to be resolved, because resolving one
+ * reads the device nodes and the answer would then be this build machine's.</p>
+ */
+public final class LendMthpPreflightTest {
+    private static DataItem vm(String hypervisor, LendMthpMode mode) {
+        var item = VMConfig.createWithCustomizeDefaults(null).item;
+        item.set("backend", "crosvm");
+        item.set("hypervisor", hypervisor);
+        item.set(LendMthpMode.KEY, mode);
+        return item;
+    }
+
+    @Test
+    public void chunkedOnGunyahUnder61IsTheCaseThatFails() {
+        assertTrue(LendMthpPreflight.needsSingle(vm("gunyah", LendMthpMode.CHUNKED), "6.1"));
+    }
+
+    @Test
+    public void singleIsWhatThatKernelWants() {
+        assertFalse(LendMthpPreflight.needsSingle(vm("gunyah", LendMthpMode.SINGLE), "6.1"));
+    }
+
+    @Test
+    public void chunkedIsTheRightAnswerOnALaterKernel() {
+        // 6.6 pages a parcel in on demand, so many of them cost nothing until touched. This check
+        // must not drag those VMs into a dialog.
+        assertFalse(LendMthpPreflight.needsSingle(vm("gunyah", LendMthpMode.CHUNKED), "6.6"));
+        assertFalse(LendMthpPreflight.needsSingle(vm("gunyah", LendMthpMode.CHUNKED), "6.12"));
+    }
+
+    @Test
+    public void sixTwelveIsNotSixOne() {
+        // The prefix trap, from the other side: "6.12".startsWith("6.1") is true and would have
+        // put every 8 Elite Gen 5 VM in front of this dialog.
+        assertEquals("6.12", HostKernel.majorMinorOf("6.12.30-android16-0-g1234"));
+        assertEquals("6.1", HostKernel.majorMinorOf("6.1.75-android14-11-g5678"));
+        assertNull(HostKernel.majorMinorOf(null));
+        assertNull(HostKernel.majorMinorOf("not a kernel"));
+    }
+
+    @Test
+    public void anUnknownKernelIsNotAccused() {
+        // uname unreadable. The check explains a failure rather than predicting one, and a dialog
+        // in front of a VM that would have started is worse than no dialog.
+        assertFalse(LendMthpPreflight.needsSingle(vm("gunyah", LendMthpMode.CHUNKED), null));
+    }
+
+    @Test
+    public void onlyGunyahLendsAnything() {
+        // The mode reaches crosvm's Gunyah path alone; everywhere else it is an inert key.
+        assertFalse(LendMthpPreflight.needsSingle(vm("kvm", LendMthpMode.CHUNKED), "6.1"));
+        assertFalse(LendMthpPreflight.needsSingle(vm("soft", LendMthpMode.CHUNKED), "6.1"));
+    }
+
+    @Test
+    public void theLegacyBooleanStillReadsAsAMode() {
+        // Configs written before the enum carry true/false, which LendMthpMode migrates as
+        // chunked/disabled. An imported VM is exactly the kind that predates it.
+        var legacy = vm("gunyah", LendMthpMode.CHUNKED);
+        legacy.set(LendMthpMode.KEY, true);
+        assertTrue(LendMthpPreflight.needsSingle(legacy, "6.1"));
+        legacy.set(LendMthpMode.KEY, false);
+        assertFalse("disabled prepares nothing, so it lends no parcels either",
+            LendMthpPreflight.needsSingle(legacy, "6.1"));
+    }
+}
diff --git a/app/src/test/java/cn/classfun/droidvm/ui/vm/display/vnc/h264/H264SyncFrameCacheTest.java b/app/src/test/java/cn/classfun/droidvm/ui/vm/display/vnc/h264/H264SyncFrameCacheTest.java
new file mode 100644
index 000000000..3a55e886d
--- /dev/null
+++ b/app/src/test/java/cn/classfun/droidvm/ui/vm/display/vnc/h264/H264SyncFrameCacheTest.java
@@ -0,0 +1,111 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
+package cn.classfun.droidvm.ui.vm.display.vnc.h264;
+
+import static org.junit.Assert.assertArrayEquals;
+import static org.junit.Assert.assertNotNull;
+import static org.junit.Assert.assertNull;
+
+import org.junit.Test;
+
+/**
+ * The rect a decoder can start on, kept across everything on this side that can come and go.
+ *
+ * <p>The case being pinned is the presentation console: it connects when it opens and builds its
+ * decoder only once a display has been chosen, so the reset-flagged rect that starts the stream
+ * routinely arrives with nowhere to go. Every bare IDR after it decodes to nothing without the
+ * parameter sets it carried, and the server sends it once per client -- so a cache that forgets it
+ * is a console that stays black until the geometry changes.</p>
+ *
+ * <p>The fixtures are the same literal bytes as {@link H264RectProtocolTest}, for the same reason
+ * they are literal there.</p>
+ */
+public class H264SyncFrameCacheTest {
+    /** SPS, PPS and an IDR behind four-byte start codes: what a joining client is sent. */
+    private static final String SYNC_ANNEX_B =
+        "000000016742001E" + "0000000168CE3C80" + "0000000165888421";
+    /** One non-IDR slice: an ordinary later frame, which primes nothing. */
+    private static final String DELTA_ANNEX_B = "00000001419A1234";
+
+    @Test
+    public void aSyncRectArrivingWithNoPipelineIsKept() {
+        var cache = new H264SyncFrameCache();
+        // length 24, flags 0x2 (ResetAllContexts) -- the rect that starts a stream.
+        cache.rememberIfSync(hex("00000018", "00000002", SYNC_ANNEX_B), 1280, 720);
+        assertArrayEquals(hex(SYNC_ANNEX_B), cache.forGeometry(1280, 720));
+    }
+
+    @Test
+    public void anOrdinaryRectIsNotASyncFrame() {
+        var cache = new H264SyncFrameCache();
+        cache.rememberIfSync(hex("00000008", "00000000", DELTA_ANNEX_B), 1280, 720);
+        assertNull("a delta carries no parameter sets", cache.forGeometry(1280, 720));
+    }
+
+    @Test
+    public void theOtherResetFlagCountsToo() {
+        // 0x1 is ResetContext, which is what the server sends for a plain join; 0x2 only follows a
+        // geometry change. A cache that read one and not the other would miss the ordinary case.
+        var cache = new H264SyncFrameCache();
+        cache.rememberIfSync(hex("00000018", "00000001", SYNC_ANNEX_B), 1280, 720);
+        assertNotNull(cache.forGeometry(1280, 720));
+    }
+
+    @Test
+    public void aSyncFrameIsOnlyOfferedAtItsOwnGeometry() {
+        // The parameter sets describe a coded size. Priming a 1920x1080 decoder with the SPS of a
+        // 1280x720 stream is not a recovery, it is a decoder configured for the wrong picture.
+        var cache = new H264SyncFrameCache();
+        cache.rememberIfSync(hex("00000018", "00000002", SYNC_ANNEX_B), 1280, 720);
+        assertNull(cache.forGeometry(1920, 1080));
+    }
+
+    @Test
+    public void aGuestResizeReplacesIt() {
+        var cache = new H264SyncFrameCache();
+        cache.rememberIfSync(hex("00000018", "00000002", SYNC_ANNEX_B), 1280, 720);
+        cache.rememberIfSync(hex("00000008", "00000002", DELTA_ANNEX_B), 1920, 1080);
+        assertNull("the old geometry is gone, not kept beside the new one",
+            cache.forGeometry(1280, 720));
+        assertArrayEquals(hex(DELTA_ANNEX_B), cache.forGeometry(1920, 1080));
+    }
+
+    @Test
+    public void aBodyThatWillNotParseIsIgnoredRatherThanThrown() {
+        // There is no pipeline to bring down over it and the connection is fine -- the reader took
+        // exactly the bytes the length declared. A rect kept from before must survive it.
+        var cache = new H264SyncFrameCache();
+        cache.rememberIfSync(hex("00000018", "00000002", SYNC_ANNEX_B), 1280, 720);
+        cache.rememberIfSync(hex("00000018", "00000002", DELTA_ANNEX_B), 1280, 720);
+        assertArrayEquals(hex(SYNC_ANNEX_B), cache.forGeometry(1280, 720));
+        cache.rememberIfSync(hex("00"), 1280, 720);
+        assertArrayEquals(hex(SYNC_ANNEX_B), cache.forGeometry(1280, 720));
+    }
+
+    @Test
+    public void aRectWithNoPictureInItIsIgnored() {
+        var cache = new H264SyncFrameCache();
+        cache.rememberIfSync(hex("00000018", "00000002", SYNC_ANNEX_B), 0, 720);
+        assertNull(cache.forGeometry(0, 720));
+    }
+
+    @Test
+    public void theConnectionEndingForgetsIt() {
+        // The next connection joins the stream again and is sent its own. Priming a decoder with
+        // the parameter sets of a stream nobody is sending any more is worse than not priming it.
+        var cache = new H264SyncFrameCache();
+        cache.rememberIfSync(hex("00000018", "00000002", SYNC_ANNEX_B), 1280, 720);
+        cache.clear();
+        assertNull(cache.forGeometry(1280, 720));
+    }
+
+    /** The fixture bytes, one wire field per argument, as in H264RectProtocolTest. */
+    private static byte[] hex(String... parts) {
+        var s = String.join("", parts);
+        var out = new byte[s.length() / 2];
+        for (var i = 0; i < out.length; i++)
+            out[i] = (byte) Integer.parseInt(s.substring(i * 2, i * 2 + 2), 16);
+        return out;
+    }
+}

From 51083bf86a4a4f929c716f05998a5e677440c2b1 Mon Sep 17 00:00:00 2001
From: HuJK <gh@hujk.org>
Date: Sun, 6 Sep 2026 14:20:06 +0800
Subject: [PATCH 165/182] boot: crosvm honours a custom EDK2 the way QEMU
 already does

The UEFI branch of the crosvm command builder passed the builtin firmware
whatever the config said, under a comment claiming crosvm had no
custom-firmware support. It has nothing else: the path goes in the same
positional slot a direct-boot kernel would, and crosvm opens it with
open_file_or_duplicate like any other file. Nothing on that side is
attached to the builtin path.

Everything around it was already wired. The editor has the firmware field,
its browse dialog offers builtin or external, and validateInput checks the
path exists; the exporter packs a custom firmware into the package (it is
skipped only when it matches a builtin), and the importer remaps it like
any other boot file. The one line here is what dropped it, so a user could
choose a firmware, save it, pass validation, and have it silently ignored
at start -- worse than the feature being absent.

No size check to add alongside the vars one. That limit is pflash's:
AARCH64_PFLASH_MAX_SIZE is AARCH64_PLATFORM_MMIO_SIZE, 8 MiB, and
setup_pflash refuses a larger image because pflash is a device on the MMIO
bus between the PCI aperture and the Gunyah VMMIO limit. Firmware is a
payload loaded into guest RAM -- the Bios arm of that match passes u64::MAX
as its bound -- so it is limited by the VM's memory and nothing else.

Verified on device: with the firmware set to a copy of the builtin at
/data/local/tmp/fw/my-edk2.fd, the crosvm command line ended in that path
instead of usr/share/droidvm/edk2-gunyah.fd, --pflash still named the
builtin vars, and the VM reached RUNNING.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_013QzTPwWuSaDfFJg62dtqZW
Signed-off-by: HuJK <gh@hujk.org>
---
 .../java/cn/classfun/droidvm/daemon/vm/BootPlan.java     | 9 ++++++++-
 .../droidvm/daemon/vm/backend/CrosvmBackendInstance.java | 3 +--
 2 files changed, 9 insertions(+), 3 deletions(-)

diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/vm/BootPlan.java b/app/src/main/java/cn/classfun/droidvm/daemon/vm/BootPlan.java
index aec2be1f9..66f5c7920 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/vm/BootPlan.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/vm/BootPlan.java
@@ -60,7 +60,14 @@ public final class BootPlan {
     private static final long LBX_TIMEOUT_MS = 30_000;
 
     public final boolean uefi;
-    /** Custom UEFI firmware path; empty = builtin (QEMU honors, crosvm ignores). */
+    /**
+     * Custom UEFI firmware path; empty = the backend's builtin EDK2.
+     *
+     * <p>Honoured by both backends. crosvm takes it in the same positional slot a direct-boot
+     * kernel would go in and opens it as an ordinary file, so there is nothing about the builtin
+     * path it is attached to -- which is what a comment here used to claim, while the command
+     * builder passed the builtin whatever this said.</p>
+     */
     @NonNull
     public final String firmware;
     /** Custom UEFI vars path; empty = builtin EDK2 vars. */
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/CrosvmBackendInstance.java b/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/CrosvmBackendInstance.java
index 1db01aea9..1cf64a732 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/CrosvmBackendInstance.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/CrosvmBackendInstance.java
@@ -494,8 +494,7 @@ && optEnum(item, "gpu_backend", GpuBackend.NONE) == GpuBackend.GPU_VIRGLRENDERER
         item.opt("extra_options", DataItem.newArray())
             .forEach(arg -> args.add(arg.getValue().asString()));
         if (boot.uefi) {
-            // crosvm has no custom-firmware support; always builtin EDK2
-            args.add(PATH_EDK2_FIRMWARE);
+            args.add(boot.firmware.isEmpty() ? PATH_EDK2_FIRMWARE : boot.firmware);
             if (boot.varsEnabled) {
                 var vars = boot.vars.isEmpty() ? PATH_EDK2_VARS : boot.vars;
                 args.add("--pflash");

From 668d05fb73d69a4977c1c953ded5e4ed8c029dc9 Mon Sep 17 00:00:00 2001
From: HuJK <gh@hujk.org>
Date: Wed, 9 Sep 2026 06:07:21 +0800
Subject: [PATCH 166/182] ui: the width no longer costs the GPU copy, so the
 warning goes

The editor warned that a width off a 16-pixel grain would cost the GPU copy,
because simplefb's pitch was width * 4 with nothing padding it and the blit's
LINEAR dma-buf import wants 64 bytes. The host pads the row now and decides the
stride in one place, so the width costs nothing and there is nothing to warn
about: the condition, the warning it fed and the test that pinned it all go.

Squashed from 2 commits on wip/usb.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01RrfBDYZexyRUKdQyJ3jQ6q
---
 .../lib/store/vm/DisplayTransportCap.java     | 46 ----------------
 .../ui/vm/edit/graphics/ScreenBindingRow.java | 11 ----
 .../res/layout/partial_vm_screen_binding.xml  | 17 ------
 app/src/main/res/values-zh-rCN/strings.xml    |  2 -
 app/src/main/res/values-zh-rTW/strings.xml    |  2 -
 app/src/main/res/values/strings.xml           |  2 -
 .../lib/store/vm/DisplayTransportCapTest.java | 52 -------------------
 7 files changed, 132 deletions(-)

diff --git a/app/src/main/java/cn/classfun/droidvm/lib/store/vm/DisplayTransportCap.java b/app/src/main/java/cn/classfun/droidvm/lib/store/vm/DisplayTransportCap.java
index 8837fd446..00c4400f7 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/store/vm/DisplayTransportCap.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/store/vm/DisplayTransportCap.java
@@ -49,20 +49,6 @@ public enum DisplayTransportCap implements StringEnum {
     /** VNC only: the blit's result goes to a hardware video encoder rather than into RFB. */
     GPU_HW(3, "gpu-hw", R.string.create_vm_screen_transport_gpu_hw);
 
-    /**
-     * The width granularity a screen whose stride is exactly {@code width * 4} needs before the
-     * GPU copy can take it, in pixels.
-     *
-     * <p>The blit imports the frame as a LINEAR dma-buf and turnip accepts one only when its row
-     * pitch is 64-byte aligned. A virtio-gpu scanout is allocated by the host and rounded up to
-     * whatever the importer wants, so it never meets this rule by accident -- it meets it by
-     * construction. simplefb's framebuffer is a window of guest memory the device tree already
-     * described, {@code width * 4} bytes per row with nothing to pad it with, so there the whole
-     * rule collapses to {@code width * 4 % 64 == 0}, which is this. Measured on device: 1400 falls
-     * back to the CPU copy, 1408 does not.</p>
-     */
-    public static final long GPU_COPY_WIDTH_ALIGN = 16;
-
     private final int value;
     private final String token;
     private final @StringRes int stringId;
@@ -187,38 +173,6 @@ public static DisplayTransportCap[] unimplementedFor(@NonNull String screenId,
         return out;
     }
 
-    /**
-     * Whether a GPU-copy ceiling on this edge will settle on the CPU copy anyway, because the
-     * screen is [width] pixels wide and the blit cannot import a frame that shape.
-     *
-     * <p>This is the negotiation working exactly as designed -- the ceiling only restricts
-     * downward, so nothing here is a misconfiguration and nothing needs refusing. But it is the one
-     * downgrade whose cause is a number the user typed rather than a rung the build has not
-     * reached, so it is the one worth saying out loud in the editor: a width off by eight pixels
-     * costs the whole GPU path and there is no other way to find that out.</p>
-     *
-     * <p>Only simplefb has the constraint, and only where the ceiling actually asks for a blit --
-     * see {@link #GPU_COPY_WIDTH_ALIGN}. Asking {@link #isImplemented} rather than naming the
-     * native display is what made VNC's GPU half inherit the rule the day it landed: it imports the
-     * same dma-buf under the same 64-byte pitch rule, and this condition did not have to be found
-     * and changed for the warning to start appearing there.</p>
-     *
-     * <p>The encoder rung asks for the same import -- it is the same blit with a different
-     * destination -- so it is named here too. It had to be: the moment VNC's default rose to it,
-     * a condition that only knew about {@link #GPU} would have gone quiet for exactly the
-     * configuration it was written for, and a warning that disappears when the default moves is
-     * indistinguishable from one that was never right.</p>
-     */
-    public static boolean cpuFallbackFromWidth(@NonNull String screenId,
-                                               @NonNull DisplayExporter exporter,
-                                               @NonNull DisplayTransportCap ceiling,
-                                               long width) {
-        if (!VMScreenConfig.ID_SIMPLEFB.equals(screenId)) return false;
-        if (ceiling != GPU && ceiling != GPU_HW) return false;
-        if (!isImplemented(exporter, ceiling)) return false;
-        return width % GPU_COPY_WIDTH_ALIGN != 0;
-    }
-
     /**
      * The ceiling a screen gets when it has not named one: the highest rung this build can
      * actually reach on that edge.
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/graphics/ScreenBindingRow.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/graphics/ScreenBindingRow.java
index ad0a65090..9319d0006 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/graphics/ScreenBindingRow.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/graphics/ScreenBindingRow.java
@@ -36,7 +36,6 @@
 import cn.classfun.droidvm.lib.store.vm.VMScreenConfig;
 import cn.classfun.droidvm.ui.widgets.row.ChooseRowWidget;
 import cn.classfun.droidvm.ui.widgets.row.SwitchRowWidget;
-import cn.classfun.droidvm.ui.widgets.row.TextRowWidget;
 
 /**
  * One screen's rows in the graphics tab: the switch that says the VM has the device, how big that
@@ -75,7 +74,6 @@ final class ScreenBindingRow {
     private final AutoCompleteTextView ddResolution;
     private final TextInputLayout tilRate;
     private final AutoCompleteTextView ddRate;
-    private final TextRowWidget rowWidthCpuFallback;
     private final View dpiOptions;
     private final TextInputEditText etDpiH;
     private final TextInputEditText etDpiV;
@@ -143,7 +141,6 @@ final class ScreenBindingRow {
         ddResolution = block.findViewById(R.id.dd_screen_resolution);
         tilRate = block.findViewById(R.id.til_screen_rate);
         ddRate = block.findViewById(R.id.dd_screen_rate);
-        rowWidthCpuFallback = block.findViewById(R.id.row_screen_width_cpu_fallback);
         dpiOptions = block.findViewById(R.id.screen_dpi_options);
         etDpiH = block.findViewById(R.id.et_screen_dpi_h);
         etDpiV = block.findViewById(R.id.et_screen_dpi_v);
@@ -574,14 +571,6 @@ void updateVisibility() {
         vncOptions.setVisibility(
             enabled && exporter == DisplayExporter.VNC ? VISIBLE : GONE);
         passwordOptions.setVisibility(swPasswordAuth.isChecked() ? VISIBLE : GONE);
-        // The one thing the transport ceiling cannot promise: a width whose stride the blit's
-        // dma-buf import will not take settles a rung lower, silently, and the only clue is a line
-        // in the console. Say so beside the field that causes it. Nothing is refused and nothing is
-        // rounded -- the ceiling is honoured either way, it just lands on the CPU copy.
-        var transport = currentTransport();
-        rowWidthCpuFallback.setVisibility(
-            enabled && transport != null && DisplayTransportCap.cpuFallbackFromWidth(
-                screenId, exporter, transport, width) ? VISIBLE : GONE);
     }
 
     /**
diff --git a/app/src/main/res/layout/partial_vm_screen_binding.xml b/app/src/main/res/layout/partial_vm_screen_binding.xml
index dfb788e55..d9ee1fb56 100644
--- a/app/src/main/res/layout/partial_vm_screen_binding.xml
+++ b/app/src/main/res/layout/partial_vm_screen_binding.xml
@@ -87,23 +87,6 @@
 
         </LinearLayout>
 
-        <!-- Not an error and not a refusal: the width above is a legal one, it just costs the GPU
-             copy. simplefb's stride is width*4 with nothing to pad it, and the blit's dma-buf
-             import wants a 64-byte pitch, so the transport quietly settles one rung lower for a
-             width that is not a multiple of 16. Shown in place rather than as a dialog, and the
-             value is never snapped for the user: moving somebody's resolution behind their back is
-             worse than the fallback it would avoid. ScreenBindingRow decides when it applies; only
-             the simplefb include ever shows it. -->
-        <cn.classfun.droidvm.ui.widgets.row.TextRowWidget
-            android:id="@+id/row_screen_width_cpu_fallback"
-            android:layout_width="match_parent"
-            android:layout_height="wrap_content"
-            android:icon="@drawable/ic_info"
-            android:subtitle="@string/create_vm_screen_width_cpu_fallback_desc"
-            android:text="@string/create_vm_screen_width_cpu_fallback"
-            android:visibility="gone"
-            tools:visibility="visible" />
-
         <LinearLayout
             android:id="@+id/screen_dpi_options"
             android:layout_width="match_parent"
diff --git a/app/src/main/res/values-zh-rCN/strings.xml b/app/src/main/res/values-zh-rCN/strings.xml
index 06061be7d..4485cd82c 100644
--- a/app/src/main/res/values-zh-rCN/strings.xml
+++ b/app/src/main/res/values-zh-rCN/strings.xml
@@ -322,8 +322,6 @@
     <string name="create_vm_screen_transport_gpu_hw">GPU Copy（硬件编码）</string>
     <string name="create_vm_option_not_implemented">未实现</string>
     <string name="create_vm_option_unavailable_reset">保存的选项在这个版本无法使用，该项目已改回默认值。</string>
-    <string name="create_vm_screen_width_cpu_fallback">此宽度下传输管线将使用 CPU Copy</string>
-    <string name="create_vm_screen_width_cpu_fallback_desc">GPU Copy 会把帧缓冲当成 linear dma-buf 导入，而驱动只收 row pitch 对齐 64 bytes 的缓冲。SimpleFB 的 pitch 就是宽度 x 4、没有任何补齐，所以 GPU Copy 需要 16 像素倍数的宽度 —— 例如 1408 而不是 1400。这个宽度本身没有问题，只是它的帧会走 CPU 复制。</string>
     <string name="create_vm_screen_input_enabled">输入设备</string>
     <string name="create_vm_error_vnc_port_conflict">两个监听端不能用同一个端口。</string>
     <string name="create_vm_vnc_host">主机地址</string>
diff --git a/app/src/main/res/values-zh-rTW/strings.xml b/app/src/main/res/values-zh-rTW/strings.xml
index 358bfeca1..17f8f3b0e 100644
--- a/app/src/main/res/values-zh-rTW/strings.xml
+++ b/app/src/main/res/values-zh-rTW/strings.xml
@@ -322,8 +322,6 @@
     <string name="create_vm_screen_transport_gpu_hw">GPU Copy（硬體編碼）</string>
     <string name="create_vm_option_not_implemented">未實作</string>
     <string name="create_vm_option_unavailable_reset">儲存的選項在這個版本無法使用，該項目已改回預設值。</string>
-    <string name="create_vm_screen_width_cpu_fallback">此寬度下傳輸管線將使用 CPU Copy</string>
-    <string name="create_vm_screen_width_cpu_fallback_desc">GPU Copy 會把畫格緩衝當成 linear dma-buf 匯入，而驅動只收 row pitch 對齊 64 bytes 的緩衝。SimpleFB 的 pitch 就是寬度 x 4、沒有任何補齊，所以 GPU Copy 需要 16 像素倍數的寬度 —— 例如 1408 而不是 1400。這個寬度本身沒有問題，只是它的畫格會走 CPU 複製。</string>
     <string name="create_vm_screen_input_enabled">輸入裝置</string>
     <string name="create_vm_error_vnc_port_conflict">兩個監聽端不能用同一個埠。</string>
     <string name="create_vm_vnc_host">主機地址</string>
diff --git a/app/src/main/res/values/strings.xml b/app/src/main/res/values/strings.xml
index b87d02771..365ba2927 100644
--- a/app/src/main/res/values/strings.xml
+++ b/app/src/main/res/values/strings.xml
@@ -326,8 +326,6 @@
     <string name="create_vm_screen_transport_gpu_hw">GPU Copy (hardware encode)</string>
     <string name="create_vm_option_not_implemented">not implemented</string>
     <string name="create_vm_option_unavailable_reset">A stored option is not available in this build; that row was reset to its default.</string>
-    <string name="create_vm_screen_width_cpu_fallback">Transport pipeline will use CPU Copy at this width</string>
-    <string name="create_vm_screen_width_cpu_fallback_desc">GPU Copy imports the framebuffer as a linear dma-buf, and the driver takes one only when its row pitch is 64-byte aligned. SimpleFB\'s pitch is exactly width x 4 with nothing padding it, so GPU Copy needs a width that is a multiple of 16 -- 1408 rather than 1400. This width is fine; its frames just take the CPU copy.</string>
     <string name="create_vm_screen_input_enabled">Input devices</string>
     <string name="create_vm_error_vnc_port_conflict">Two listeners cannot share the same port.</string>
     <string name="create_vm_vnc_host">Host</string>
diff --git a/app/src/test/java/cn/classfun/droidvm/lib/store/vm/DisplayTransportCapTest.java b/app/src/test/java/cn/classfun/droidvm/lib/store/vm/DisplayTransportCapTest.java
index 233d72703..7708b8726 100644
--- a/app/src/test/java/cn/classfun/droidvm/lib/store/vm/DisplayTransportCapTest.java
+++ b/app/src/test/java/cn/classfun/droidvm/lib/store/vm/DisplayTransportCapTest.java
@@ -320,56 +320,4 @@ public void theBlitDriverIsPointedAtAnyBindingThatCouldClimbToIt() {
         assertFalse(VMScreenConfig.hasGpuBlitBinding(item));
     }
 
-    @Test
-    public void aSimplefbWidthOffTheGrainSpendsTheGpuCopy() {
-        // The editor's warning condition. simplefb's pitch is width*4 with nothing padding it and
-        // the blit's LINEAR dma-buf import wants 64 bytes, so the rule is a width that is a
-        // multiple of 16. Measured on device: 1400 falls back to the CPU copy, 1408 does not.
-        assertTrue(DisplayTransportCap.cpuFallbackFromWidth(
-            FB, DisplayExporter.NATIVE, DisplayTransportCap.GPU, 1400));
-        assertFalse(DisplayTransportCap.cpuFallbackFromWidth(
-            FB, DisplayExporter.NATIVE, DisplayTransportCap.GPU, 1408));
-
-        // A ceiling already at the bottom rung loses nothing to the width, so there is nothing to
-        // tell the user -- the CPU copy is what was asked for.
-        assertFalse(DisplayTransportCap.cpuFallbackFromWidth(
-            FB, DisplayExporter.NATIVE, DisplayTransportCap.CPU, 1400));
-
-        // The virtio-gpu scanout is allocated on the host and rounded up to what the importer
-        // wants, so it meets the rule by construction and the same width costs it nothing.
-        assertFalse(DisplayTransportCap.cpuFallbackFromWidth(
-            GPU0, DisplayExporter.NATIVE, DisplayTransportCap.GPU, 1400));
-
-        // VNC's GPU half imports the same dma-buf under the same rule, so the warning appeared on
-        // that edge the moment the rung was implemented -- the condition asks isImplemented rather
-        // than naming the native display, and was not touched to make this true.
-        assertTrue(DisplayTransportCap.cpuFallbackFromWidth(
-            FB, DisplayExporter.VNC, DisplayTransportCap.GPU, 1400));
-        assertFalse(DisplayTransportCap.cpuFallbackFromWidth(
-            FB, DisplayExporter.VNC, DisplayTransportCap.GPU, 1408));
-        assertFalse(DisplayTransportCap.cpuFallbackFromWidth(
-            FB, DisplayExporter.VNC, DisplayTransportCap.CPU, 1400));
-
-        // And on the encoder rung, which is where it matters most now: that is VNC's default, so a
-        // condition that only knew about the GPU rung would have gone quiet for exactly the
-        // configuration this warning exists for, on the same day the default moved. The width
-        // costs the blit whatever the blit was going to feed.
-        assertTrue(DisplayTransportCap.cpuFallbackFromWidth(
-            FB, DisplayExporter.VNC, DisplayTransportCap.GPU_HW, 1400));
-        assertFalse(DisplayTransportCap.cpuFallbackFromWidth(
-            FB, DisplayExporter.VNC, DisplayTransportCap.GPU_HW, 1408));
-        // The virtio-gpu scanout still meets the rule by construction, encoder or not.
-        assertFalse(DisplayTransportCap.cpuFallbackFromWidth(
-            GPU0, DisplayExporter.VNC, DisplayTransportCap.GPU_HW, 1400));
-
-        // A screen nobody is watching has no edge for a transport to run along at all, so there is
-        // no rung for a width to cost it.
-        assertFalse(DisplayTransportCap.cpuFallbackFromWidth(
-            FB, DisplayExporter.NONE, DisplayTransportCap.GPU, 1400));
-
-        // What the editor hands over for a field that is empty or half-typed: not yet a width, so
-        // not yet anything to warn about. The geometry validator is what has something to say.
-        assertFalse(DisplayTransportCap.cpuFallbackFromWidth(
-            FB, DisplayExporter.NATIVE, DisplayTransportCap.GPU, 0));
-    }
 }

From 0540213c76e2ab33d6fc2f6bdd4a2c3aa98b730a Mon Sep 17 00:00:00 2001
From: HuJK <gh@hujk.org>
Date: Wed, 9 Sep 2026 06:07:21 +0800
Subject: [PATCH 167/182] linux: a preparation step that fails leaves the VM
 created, and says which

Setting the root password or growing the disk is preparation, not the import.
The download had already succeeded and the image was already there, and a
failure in either ended the run and threw the VM away -- so a mistyped password
or a resize that could not finish cost the user the whole thing.

An action can be optional now. The queue script keeps its outcome in a state
directory instead of acting on it where it happens: fail() and skip_action() run
inside the action's own subshell and only record what went wrong, and
end_action() reads that back and decides what it means. A required action still
ends the run at the first error; an optional one adds itself to FAILED_ACTIONS
and the actions behind it still get their turn.

The import flow then creates the VM whatever the preparation managed, and names
the steps that did not complete -- the resize, the password, or both when the
rescue VM was cancelled or died and can say nothing about either. Those names
survive a rotation.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01RrfBDYZexyRUKdQyJ3jQ6q
---
 .../ui/agent/AgentOperationActivity.java      | 109 ++++++++++++++++--
 .../ui/agent/base/AgentActionSpec.java        |  15 +++
 .../droidvm/ui/agent/base/BaseAction.java     |  71 +++++++++---
 .../ui/agent/password/PasswordAction.java     |  24 +++-
 .../ui/disk/lxc/ImportLxcImagesActivity.java  |  89 ++++++++++++--
 app/src/main/res/values-zh-rCN/strings.xml    |   7 ++
 app/src/main/res/values-zh-rTW/strings.xml    |   7 ++
 app/src/main/res/values/strings.xml           |   7 ++
 .../ui/agent/base/AgentActionQueueTest.java   |  69 ++++++++++-
 9 files changed, 363 insertions(+), 35 deletions(-)

diff --git a/app/src/main/java/cn/classfun/droidvm/ui/agent/AgentOperationActivity.java b/app/src/main/java/cn/classfun/droidvm/ui/agent/AgentOperationActivity.java
index 278f532bc..f61be2a9c 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/agent/AgentOperationActivity.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/agent/AgentOperationActivity.java
@@ -27,6 +27,7 @@
 
 import androidx.activity.OnBackPressedCallback;
 import androidx.annotation.NonNull;
+import androidx.annotation.Nullable;
 import androidx.appcompat.app.AppCompatActivity;
 
 import com.google.android.material.appbar.MaterialToolbar;
@@ -39,6 +40,7 @@
 import java.net.URLDecoder;
 import java.nio.charset.StandardCharsets;
 import java.util.Collections;
+import java.util.LinkedHashMap;
 import java.util.List;
 import java.util.Map;
 import java.util.concurrent.ConcurrentHashMap;
@@ -51,6 +53,7 @@
 import cn.classfun.droidvm.lib.store.disk.DiskStore;
 import cn.classfun.droidvm.lib.ui.termux.SimpleTerminalSessionClient;
 import cn.classfun.droidvm.lib.ui.termux.TerminalPanelView;
+import cn.classfun.droidvm.ui.agent.autogrow.AutoGrowAction;
 import cn.classfun.droidvm.ui.agent.base.AgentPayloadChunks;
 import cn.classfun.droidvm.ui.agent.base.AgentVM;
 import cn.classfun.droidvm.ui.agent.base.BaseAction;
@@ -62,6 +65,8 @@ public final class AgentOperationActivity extends AppCompatActivity
     private static final String TAG = "AgentOperationActivity";
     public static final String EXTRA_AGENT_VM_JSON = "agent_vm_json";
     public static final String EXTRA_AUTOFINISH_ON_SUCCESS = "autofinish_on_success";
+    /** Result extra listing the optional actions that failed, as {@code type=code} pairs. */
+    public static final String EXTRA_FAILED_ACTIONS = "failed_actions";
     private static final String AGENT_MARKER = "__DROIDVM_AGENT__:";
     private static final String TTY_READY_MARKER = AGENT_MARKER + "TTY:READY"; // concat-ok: compile-time constant
     private static final String READY_MARKER = AGENT_MARKER + "READY"; // concat-ok: compile-time constant
@@ -71,6 +76,7 @@ public final class AgentOperationActivity extends AppCompatActivity
     private static final String SHELL_READY_MARKER = AGENT_MARKER + "SHELL:READY"; // concat-ok: compile-time constant
     private static final String RESULT_OK_MARKER = AGENT_MARKER + "RESULT:OK"; // concat-ok: compile-time constant
     private static final String RESULT_ERROR_MARKER = AGENT_MARKER + "RESULT:ERROR:"; // concat-ok: compile-time constant
+    private static final String RESULT_PARTIAL_MARKER = AGENT_MARKER + "RESULT:PARTIAL:"; // concat-ok: compile-time constant
     private static final String ACTION_START_MARKER = AGENT_MARKER + "ACTION:START:"; // concat-ok: compile-time constant
     private static final String ACTION_OK_MARKER = AGENT_MARKER + "ACTION:OK:"; // concat-ok: compile-time constant
     private static final String ACTION_ERROR_MARKER = AGENT_MARKER + "ACTION:ERROR:"; // concat-ok: compile-time constant
@@ -79,6 +85,7 @@ public final class AgentOperationActivity extends AppCompatActivity
         "New password:",
         "Re-enter new password:",
         "Retype new password:",
+        "Retype password:", // busybox passwd, as shipped by OpenWrt and other applet-only roots
         "Enter new UNIX password:",
         "Retype new UNIX password:",
     };
@@ -115,6 +122,7 @@ public final class AgentOperationActivity extends AppCompatActivity
     private volatile List<String> actionPayloadChunks = Collections.emptyList();
     private int nextPayloadChunk = 0;
     private String activePassword = null;
+    private volatile String failedActions = "";
     private String passwordPromptTail = "";
     private int activeActionIndex = -1;
 
@@ -395,16 +403,37 @@ private void handleAgentOutput(@NonNull String text) {
             mainHandler.post(this::showSuccess);
             return;
         }
-        if (!resultShown && snapshot.contains(RESULT_ERROR_MARKER)) {
-            clearPasswords();
-            var start = snapshot.lastIndexOf(RESULT_ERROR_MARKER) + RESULT_ERROR_MARKER.length();
-            var end = snapshot.indexOf('\n', start);
-            if (end < 0) end = snapshot.length();
-            var code = snapshot.substring(start, end).replace("\r", "").trim();
-            mainHandler.post(() -> showFailed(describeAgentError(code), true));
+        if (!resultShown) {
+            var failed = markerValue(snapshot, RESULT_PARTIAL_MARKER);
+            if (failed != null) {
+                clearPasswords();
+                failedActions = failed;
+                mainHandler.post(() -> showPartial(failed));
+                return;
+            }
+            var code = markerValue(snapshot, RESULT_ERROR_MARKER);
+            if (code != null) {
+                clearPasswords();
+                mainHandler.post(() -> showFailed(describeAgentError(code), true));
+            }
         }
     }
 
+    /**
+     * Reads the rest of the line carrying the last occurrence of {@code marker}, or null when
+     * the marker is absent -- or when its line has not arrived whole yet. Console output
+     * reaches us in chunks that can split any line, and half a value names no known error.
+     */
+    @Nullable
+    private static String markerValue(@NonNull String snapshot, @NonNull String marker) {
+        var found = snapshot.lastIndexOf(marker);
+        if (found < 0) return null;
+        var start = found + marker.length();
+        var end = snapshot.indexOf('\n', start);
+        if (end < 0) return null;
+        return snapshot.substring(start, end).replace("\r", "").trim();
+    }
+
     private void continuePayloadStage(@NonNull String snapshot) {
         if (!payloadStageStarted || payloadDecodeSent) return;
         if (nextPayloadChunk == 0) {
@@ -551,6 +580,8 @@ private String describeAgentError(@NonNull String code) {
                 return getString(R.string.agent_operation_error_root_not_found);
             case "PASSWD_FAILED":
                 return getString(R.string.agent_operation_error_password);
+            case "PASSWD_NOT_FOUND":
+                return getString(R.string.agent_operation_error_password_missing);
             case "UNMOUNT_FAILED":
                 return getString(R.string.agent_operation_error_unmount);
             case "SCRIPT_FAILED":
@@ -596,6 +627,64 @@ private void showSuccess() {
         requestConsoleHandoff();
     }
 
+    /** One or more optional actions failed; the rest of the queue still ran. */
+    private void showPartial(@NonNull String failed) {
+        if (resultShown || closing) return;
+        resultShown = true;
+        progressSpinner.setVisibility(GONE);
+        ivStatus.setVisibility(VISIBLE);
+        ivStatus.setImageResource(R.drawable.ic_large_warning);
+        tvStatus.setText(getString(
+            R.string.agent_operation_partial, describeFailedActions(failed)));
+        if (autoFinishOnSuccess) {
+            // Same contract as showSuccess(): the caller drives the rest of its chain and
+            // reads EXTRA_FAILED_ACTIONS to tell the user what did not happen.
+            finishAgent(true);
+            return;
+        }
+        showResultButtons();
+        requestConsoleHandoff();
+    }
+
+    /** Renders {@code type=code} pairs as one human-readable line per failed action. */
+    @NonNull
+    private String describeFailedActions(@NonNull String failed) {
+        var out = new StringBuilder();
+        for (var entry : parseFailedActions(failed).entrySet()) {
+            if (out.length() > 0) out.append('\n');
+            out.append(fmt("%s: %s",
+                describeActionType(entry.getKey()), describeAgentError(entry.getValue())));
+        }
+        return out.toString();
+    }
+
+    @NonNull
+    private String describeActionType(@NonNull String type) {
+        switch (type) {
+            case PasswordAction.TYPE:
+            case "passwd": // Early AgentVM prototype spelling.
+                return getString(R.string.agent_operation_action_password);
+            case AutoGrowAction.TYPE:
+                return getString(R.string.agent_operation_action_autogrow);
+            default:
+                return type;
+        }
+    }
+
+    /** Reads an {@link #EXTRA_FAILED_ACTIONS} value back as ordered action type to error code. */
+    @NonNull
+    public static Map<String, String> parseFailedActions(@Nullable String failed) {
+        var out = new LinkedHashMap<String, String>();
+        if (failed == null) return out;
+        for (var entry : failed.split(",")) {
+            if (entry.isEmpty()) continue;
+            int separator = entry.indexOf('=');
+            out.put(separator < 0 ? entry : entry.substring(0, separator),
+                separator < 0 ? "" : entry.substring(separator + 1));
+        }
+        return out;
+    }
+
     private void showFailed(@NonNull String message, boolean logsAvailable) {
         if (resultShown || closing) return;
         resultShown = true;
@@ -760,7 +849,11 @@ private void finishActivity(boolean returnSuccess) {
         if (activityDone) return;
         activityDone = true;
         stopConsoleSession();
-        if (returnSuccess) setResult(RESULT_OK);
+        if (returnSuccess) {
+            var data = new Intent();
+            if (!failedActions.isEmpty()) data.putExtra(EXTRA_FAILED_ACTIONS, failedActions);
+            setResult(RESULT_OK, data);
+        }
         finish();
     }
 
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/agent/base/AgentActionSpec.java b/app/src/main/java/cn/classfun/droidvm/ui/agent/base/AgentActionSpec.java
index 7488eff27..52b2e96de 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/agent/base/AgentActionSpec.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/agent/base/AgentActionSpec.java
@@ -21,6 +21,7 @@
 public final class AgentActionSpec implements JSONSerialize {
     private final String type;
     private final Map<String, String> params = new HashMap<>();
+    private boolean optional = false;
 
     public AgentActionSpec(@NonNull String type) {
         var normalized = type.trim().toLowerCase(java.util.Locale.ROOT);
@@ -32,6 +33,7 @@ public AgentActionSpec(@NonNull String type) {
     public AgentActionSpec(@NonNull JSONObject jo) throws JSONException {
         this(jo.getString("type"));
         if (jo.has("params")) params.putAll(JsonUtils.objectToStringMap(jo, "params"));
+        optional = jo.optBoolean("optional", false);
     }
 
     @NonNull
@@ -39,6 +41,18 @@ public String getType() {
         return type;
     }
 
+    /**
+     * Marks an action whose failure must not cancel the queue. The caller wants whatever
+     * the remaining actions can still do, and one report at the end instead of an abort.
+     */
+    public void setOptional(boolean optional) {
+        this.optional = optional;
+    }
+
+    public boolean isOptional() {
+        return optional;
+    }
+
     public void setParam(@NonNull String key, @NonNull String value) {
         params.put(key, value);
     }
@@ -66,6 +80,7 @@ public JSONObject toJson() throws JSONException {
         for (var entry : params.entrySet())
             paramsObject.put(entry.getKey(), entry.getValue());
         out.put("params", paramsObject);
+        if (optional) out.put("optional", true);
         return out;
     }
 }
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/agent/base/BaseAction.java b/app/src/main/java/cn/classfun/droidvm/ui/agent/base/BaseAction.java
index ad413f0fa..7fb07a761 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/agent/base/BaseAction.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/agent/base/BaseAction.java
@@ -36,6 +36,11 @@ public AgentVM getVM() {
     public void clearSecrets() {
     }
 
+    /** See {@link AgentActionSpec#setOptional(boolean)}. */
+    public void setOptional(boolean optional) {
+        spec.setOptional(optional);
+    }
+
     @NonNull
     private static BaseAction createAction(
         @NonNull AgentVM vm,
@@ -78,24 +83,52 @@ public static String buildRescueScript(@NonNull List<BaseAction> actions) {
         if (actions.isEmpty()) throw new IllegalArgumentException("VM: No action specified");
         var script = new StringBuilder(String.join("\n",
             "#!/bin/sh",
+            "STATE_DIR=/run/droidvm-agent",
+            "FAILED_ACTIONS=",
             "marker() { printf '\\n__DROIDVM_AGENT__:%s\\n' \"$1\"; }",
             "command_log() { printf '\\n[droidvm] $ %s\\n' \"$1\"; }",
-            "fail() {",
-            "    code=$1",
+            "release_mounts() {",
             "    sync",
             "    umount /mnt/proc >/dev/null 2>&1 || true",
             "    umount /mnt/dev >/dev/null 2>&1 || true",
             "    umount /mnt >/dev/null 2>&1 || true",
             "    umount /mnt-autogrow >/dev/null 2>&1 || true",
-            "    marker \"ACTION:ERROR:$ACTION_INDEX:$ACTION_TYPE:$code\"",
-            "    marker \"RESULT:ERROR:$code\"",
-            "    exit 0",
+            "}",
+            // fail() and skip_action() run inside the action subshell, so they only record the
+            // outcome; end_action() reads it back and decides what it means for the queue.
+            "fail() {",
+            "    printf '%s\\n' \"$1\" > \"$STATE_DIR/error\"",
+            "    exit 1",
             "}",
             "skip_action() {",
-            "    ACTION_SKIPPED=true",
-            "    marker \"ACTION:SKIPPED:$ACTION_INDEX:$ACTION_TYPE:$1\"",
+            "    printf '%s\\n' \"$1\" > \"$STATE_DIR/skipped\"",
             "}",
-            "mkdir -p /mnt /mnt-autogrow /run",
+            "begin_action() {",
+            "    rm -f \"$STATE_DIR/error\" \"$STATE_DIR/skipped\"",
+            "    marker \"ACTION:START:$ACTION_INDEX:$ACTION_TYPE\"",
+            "}",
+            "end_action() {",
+            "    code=$(cat \"$STATE_DIR/error\" 2>/dev/null)",
+            "    [ -n \"$code\" ] || [ \"$1\" -eq 0 ] || code=SCRIPT_FAILED",
+            "    if [ -n \"$code\" ]; then",
+            "        release_mounts",
+            "        marker \"ACTION:ERROR:$ACTION_INDEX:$ACTION_TYPE:$code\"",
+            // A required action decides the whole run; an optional one only leaves a note,
+            // so the actions queued behind it still get their turn.
+            "        if [ \"$ACTION_OPTIONAL\" != true ]; then",
+            "            marker \"RESULT:ERROR:$code\"",
+            "            exit 0",
+            "        fi",
+            "        FAILED_ACTIONS=\"${FAILED_ACTIONS:+$FAILED_ACTIONS,}$ACTION_TYPE=$code\"",
+            "        return 0",
+            "    fi",
+            "    if [ -s \"$STATE_DIR/skipped\" ]; then",
+            "        marker \"ACTION:SKIPPED:$ACTION_INDEX:$ACTION_TYPE:$(cat \"$STATE_DIR/skipped\")\"",
+            "    else",
+            "        marker \"ACTION:OK:$ACTION_INDEX:$ACTION_TYPE\"",
+            "    fi",
+            "}",
+            "mkdir -p /mnt /mnt-autogrow \"$STATE_DIR\"",
             ""
         ));
         for (int i = 0; i < actions.size(); i++) {
@@ -103,19 +136,25 @@ public static String buildRescueScript(@NonNull List<BaseAction> actions) {
             var body = action.buildActionScript();
             script.append(fmt("ACTION_INDEX=%d\n", i));
             script.append(fmt("ACTION_TYPE=%s\n", action.spec.getType()));
-            script.append("ACTION_SKIPPED=false\n");
-            script.append("marker \"ACTION:START:$ACTION_INDEX:$ACTION_TYPE\"\n");
+            script.append(fmt("ACTION_OPTIONAL=%s\n", action.spec.isOptional()));
+            script.append("begin_action\n");
             script.append(fmt("agent_action_%d() {\n", i));
             script.append(body);
             if (!body.endsWith("\n")) script.append('\n');
             script.append("}\n");
-            script.append(fmt("agent_action_%d\n", i));
-            script.append("rc=$?\n");
-            script.append("[ $rc -eq 0 ] || fail SCRIPT_FAILED\n");
-            script.append("[ \"$ACTION_SKIPPED\" = true ] || ")
-                .append("marker \"ACTION:OK:$ACTION_INDEX:$ACTION_TYPE\"\n\n");
+            // The subshell keeps fail()'s exit inside its own action.
+            script.append(fmt("( agent_action_%d )\n", i));
+            script.append("end_action $?\n\n");
         }
-        script.append("sync\nmarker RESULT:OK\n");
+        script.append(String.join("\n",
+            "sync",
+            "if [ -n \"$FAILED_ACTIONS\" ]; then",
+            "    marker \"RESULT:PARTIAL:$FAILED_ACTIONS\"",
+            "else",
+            "    marker RESULT:OK",
+            "fi",
+            ""
+        ));
         return script.toString();
     }
 }
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/agent/password/PasswordAction.java b/app/src/main/java/cn/classfun/droidvm/ui/agent/password/PasswordAction.java
index dd56b7292..b4ca349da 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/agent/password/PasswordAction.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/agent/password/PasswordAction.java
@@ -67,10 +67,30 @@ protected String buildActionScript() {
             "[ -d /mnt/proc ] || fail PASSWD_FAILED",
             "mount -o bind /dev /mnt/dev || fail PASSWD_FAILED",
             "mount -t proc proc /mnt/proc || fail PASSWD_FAILED",
+            // Distributions disagree on where passwd lives: shadow-utils installs
+            // /usr/bin/passwd, busybox roots such as OpenWrt only carry the applet
+            // symlink (/bin/passwd), and a root missing both can still be served by
+            // calling the busybox binary with the applet name.
+            "PASSWD_BIN=",
+            "for candidate in /usr/bin/passwd /bin/passwd /usr/sbin/passwd /sbin/passwd; do",
+            "    [ -x \"/mnt$candidate\" ] || continue",
+            "    PASSWD_BIN=$candidate",
+            "    break",
+            "done",
+            "if [ -z \"$PASSWD_BIN\" ]; then",
+            "    for candidate in /bin/busybox /usr/bin/busybox; do",
+            "        [ -x \"/mnt$candidate\" ] || continue",
+            "        PASSWD_BIN=\"$candidate passwd\"",
+            "        break",
+            "    done",
+            "fi",
+            "[ -n \"$PASSWD_BIN\" ] || fail PASSWD_NOT_FOUND",
+            "marker \"PASSWD:BINARY:$PASSWD_BIN\"",
             "change_password() {",
             "    marker \"PASSWD:$1\"",
-            "    command_log \"LC_ALL=C busybox chroot /mnt /usr/bin/passwd $1\"",
-            "    LC_ALL=C busybox chroot /mnt /usr/bin/passwd \"$1\"",
+            "    command_log \"LC_ALL=C busybox chroot /mnt $PASSWD_BIN $1\"",
+            // Unquoted on purpose: the busybox fallback above is a binary plus an applet name.
+            "    LC_ALL=C busybox chroot /mnt $PASSWD_BIN \"$1\"",
             "    rc=$?",
             "    marker \"COMMAND:RC:PASSWD:$1:$rc\"",
             "    [ \"$rc\" -eq 0 ] || fail PASSWD_FAILED",
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/disk/lxc/ImportLxcImagesActivity.java b/app/src/main/java/cn/classfun/droidvm/ui/disk/lxc/ImportLxcImagesActivity.java
index e559f17dc..5e06563c9 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/disk/lxc/ImportLxcImagesActivity.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/disk/lxc/ImportLxcImagesActivity.java
@@ -52,6 +52,7 @@
 import com.google.android.material.appbar.MaterialToolbar;
 import com.google.android.material.button.MaterialButton;
 import com.google.android.material.card.MaterialCardView;
+import com.google.android.material.dialog.MaterialAlertDialogBuilder;
 import com.google.android.material.floatingactionbutton.ExtendedFloatingActionButton;
 import com.google.android.material.progressindicator.CircularProgressIndicator;
 
@@ -61,8 +62,10 @@
 import java.util.ArrayList;
 import java.util.Comparator;
 import java.util.LinkedHashMap;
+import java.util.LinkedHashSet;
 import java.util.List;
 import java.util.Map;
+import java.util.Set;
 import java.util.TreeMap;
 import java.util.TreeSet;
 import java.util.UUID;
@@ -127,6 +130,8 @@ public class ImportLxcImagesActivity extends AppCompatActivity {
     private static final String STATE_PENDING_LINUX_CPU = "pending_linux_cpu";
     private static final String STATE_PENDING_LINUX_MEMORY_MB = "pending_linux_memory_mb";
     private static final String STATE_PENDING_LINUX_DISK_BYTES = "pending_linux_disk_bytes";
+    private static final String STATE_LINUX_INCOMPLETE_STEPS = "linux_incomplete_steps";
+    private static final String STEP_RESIZE = "resize";
     private final Map<String, String> displayVersionToRelease = new LinkedHashMap<>();
     private Repos.Repo builtinLxcRepo;
     private Repos.Repo lxcRepo;
@@ -209,6 +214,8 @@ public class ImportLxcImagesActivity extends AppCompatActivity {
     private long pendingLinuxCpu = 1;
     private long pendingLinuxMemoryMb = 512;
     private long pendingLinuxDiskBytes = 16L * 1024 * 1024 * 1024;
+    /** Preparation steps that did not complete; the VM is still created without them. */
+    private final Set<String> linuxIncompleteSteps = new LinkedHashSet<>();
     private long currentDownloadId = -1;
     private boolean activityStarted = false;
     private final Handler pollHandler = new Handler(Looper.getMainLooper());
@@ -269,15 +276,27 @@ protected void onCreate(@Nullable Bundle savedInstanceState) {
                 if (result.getResultCode() == RESULT_OK) launchLinuxResize();
                 else finishLinuxVmFlow(false);
             });
+        // Growing the disk and setting the root password only prepare the image: the
+        // download already succeeded, so a failure there costs the user a note, not the VM.
         linuxResizeLauncher = registerForActivityResult(
             new ActivityResultContracts.StartActivityForResult(), result -> {
-                if (result.getResultCode() == RESULT_OK) launchLinuxMaintenance();
-                else finishLinuxVmFlow(false);
+                if (result.getResultCode() != RESULT_OK) linuxIncompleteSteps.add(STEP_RESIZE);
+                launchLinuxMaintenance();
             });
         linuxMaintenanceLauncher = registerForActivityResult(
             new ActivityResultContracts.StartActivityForResult(), result -> {
-                if (result.getResultCode() == RESULT_OK) createPendingLinuxVm();
-                else finishLinuxVmFlow(false);
+                if (result.getResultCode() == RESULT_OK) {
+                    var data = result.getData();
+                    linuxIncompleteSteps.addAll(AgentOperationActivity.parseFailedActions(
+                        data == null ? null
+                            : data.getStringExtra(AgentOperationActivity.EXTRA_FAILED_ACTIONS)
+                    ).keySet());
+                } else {
+                    // A cancelled or crashed rescue VM says nothing about its actions.
+                    linuxIncompleteSteps.add(PasswordAction.TYPE);
+                    linuxIncompleteSteps.add(AutoGrowAction.TYPE);
+                }
+                createPendingLinuxVm();
             });
         if (savedInstanceState != null) {
             var diskId = savedInstanceState.getString(STATE_PENDING_PASSWORD_DISK_ID);
@@ -305,6 +324,8 @@ protected void onCreate(@Nullable Bundle savedInstanceState) {
                 STATE_PENDING_LINUX_MEMORY_MB, 512);
             pendingLinuxDiskBytes = savedInstanceState.getLong(
                 STATE_PENDING_LINUX_DISK_BYTES, 16L * 1024 * 1024 * 1024);
+            var steps = savedInstanceState.getStringArrayList(STATE_LINUX_INCOMPLETE_STEPS);
+            if (steps != null) linuxIncompleteSteps.addAll(steps);
         }
         initialize();
     }
@@ -578,6 +599,9 @@ protected void onSaveInstanceState(@NonNull Bundle outState) {
         outState.putLong(STATE_PENDING_LINUX_CPU, pendingLinuxCpu);
         outState.putLong(STATE_PENDING_LINUX_MEMORY_MB, pendingLinuxMemoryMb);
         outState.putLong(STATE_PENDING_LINUX_DISK_BYTES, pendingLinuxDiskBytes);
+        if (!linuxIncompleteSteps.isEmpty())
+            outState.putStringArrayList(STATE_LINUX_INCOMPLETE_STEPS,
+                new ArrayList<>(linuxIncompleteSteps));
     }
 
     /** Re-attaches just the progress bar to the running download (no form state). */
@@ -1751,16 +1775,23 @@ private void launchLinuxResize() {
             linuxResizeLauncher.launch(intent);
         } catch (Exception e) {
             Log.e(TAG, "Failed to start Linux VM disk resize", e);
-            finishLinuxVmFlow(false);
+            linuxIncompleteSteps.add(STEP_RESIZE);
+            launchLinuxMaintenance();
         }
     }
 
     private void launchLinuxMaintenance() {
         var diskId = pendingLinuxDiskId;
-        if (diskId == null || pendingLinuxRootPassword.isEmpty()) {
+        if (diskId == null) {
             finishLinuxVmFlow(false);
             return;
         }
+        if (pendingLinuxRootPassword.isEmpty()) {
+            linuxIncompleteSteps.add(PasswordAction.TYPE);
+            linuxIncompleteSteps.add(AutoGrowAction.TYPE);
+            createPendingLinuxVm();
+            return;
+        }
         try {
             var diskStore = new DiskStore();
             diskStore.load(this);
@@ -1771,7 +1802,9 @@ private void launchLinuxMaintenance() {
             var password = new PasswordAction(agentVM);
             password.setPassword(pendingLinuxRootPassword);
             password.setChangeNormalUsers(false);
-            new AutoGrowAction(agentVM);
+            password.setOptional(true);
+            var autoGrow = new AutoGrowAction(agentVM);
+            autoGrow.setOptional(true);
             agentVM.addDisk(disk);
             var intent = AgentOperationActivity.createIntent(this, agentVM);
             intent.putExtra(AgentOperationActivity.EXTRA_AUTOFINISH_ON_SUCCESS, true);
@@ -1779,7 +1812,9 @@ private void launchLinuxMaintenance() {
             linuxMaintenanceLauncher.launch(intent);
         } catch (Exception e) {
             Log.e(TAG, "Failed to start Linux VM maintenance", e);
-            finishLinuxVmFlow(false);
+            linuxIncompleteSteps.add(PasswordAction.TYPE);
+            linuxIncompleteSteps.add(AutoGrowAction.TYPE);
+            createPendingLinuxVm();
         }
     }
 
@@ -1822,6 +1857,10 @@ private void createPendingLinuxVm() {
             result.putExtra("result_vm_id", config.getId().toString());
             result.putExtra("result_disk_path", disk.getFullPath());
             setResult(RESULT_OK, result);
+            if (!linuxIncompleteSteps.isEmpty()) {
+                showLinuxIncompleteDialog(config.getName());
+                return;
+            }
             Toast.makeText(
                 this,
                 getString(R.string.linux_vm_create_success, config.getName()),
@@ -1834,11 +1873,45 @@ private void createPendingLinuxVm() {
         }
     }
 
+    /**
+     * The VM exists, some of its preparation does not. Name the steps the user still has to
+     * do by hand: a toast is too easy to miss for "the root password was never set".
+     */
+    private void showLinuxIncompleteDialog(@NonNull String vmName) {
+        var steps = new StringBuilder();
+        for (var step : linuxIncompleteSteps) {
+            if (steps.length() > 0) steps.append('\n');
+            steps.append(describeLinuxStep(step));
+        }
+        new MaterialAlertDialogBuilder(this)
+            .setTitle(R.string.linux_vm_create_partial_title)
+            .setMessage(getString(R.string.linux_vm_create_partial, vmName, steps.toString()))
+            .setCancelable(false)
+            .setPositiveButton(android.R.string.ok, (d, w) -> finishLinuxVmFlow(true))
+            .show();
+    }
+
+    @NonNull
+    private String describeLinuxStep(@NonNull String step) {
+        switch (step) {
+            case STEP_RESIZE:
+                return getString(R.string.linux_vm_step_resize);
+            case PasswordAction.TYPE:
+            case "passwd": // Early AgentVM prototype spelling.
+                return getString(R.string.agent_operation_action_password);
+            case AutoGrowAction.TYPE:
+                return getString(R.string.agent_operation_action_autogrow);
+            default:
+                return step;
+        }
+    }
+
     private void finishLinuxVmFlow(boolean success) {
         pendingLinuxDiskId = null;
         pendingLinuxVmName = "";
         pendingLinuxRootPassword = "";
         pendingLinuxNetworkId = "";
+        linuxIncompleteSteps.clear();
         if (!success && !isFinishing())
             Toast.makeText(this, R.string.linux_vm_create_failed, LENGTH_SHORT).show();
         finish();
diff --git a/app/src/main/res/values-zh-rCN/strings.xml b/app/src/main/res/values-zh-rCN/strings.xml
index 4485cd82c..250202d65 100644
--- a/app/src/main/res/values-zh-rCN/strings.xml
+++ b/app/src/main/res/values-zh-rCN/strings.xml
@@ -720,6 +720,9 @@
     <string name="linux_vm_create_action">创建</string>
     <string name="linux_vm_create_success">虚拟机“%1$s”已创建。</string>
     <string name="linux_vm_create_failed">Linux 虚拟机创建流程未完成。</string>
+    <string name="linux_vm_step_resize">磁盘扩容</string>
+    <string name="linux_vm_create_partial">虚拟机“%1$s”已创建，但下列准备步骤没有完成：\n%2$s\n\n可以稍后从磁盘菜单重新执行。</string>
+    <string name="linux_vm_create_partial_title">虚拟机已创建</string>
 
     <string name="lxc_title">下载发行版 LXC 镜像</string>
     <string name="lxc_category_source">来源</string>
@@ -832,6 +835,9 @@
     <string name="agent_operation_running">执行中\u2026</string>
     <string name="agent_operation_success">操作完成。</string>
     <string name="agent_operation_success_skipped">操作完成；有操作不适用，未进行更改。</string>
+    <string name="agent_operation_action_autogrow">文件系统扩容</string>
+    <string name="agent_operation_action_password">更改密码</string>
+    <string name="agent_operation_partial">操作已完成，但部分步骤失败：\n%1$s</string>
     <string name="agent_operation_failed">操作失败（退出码 %1$d）。</string>
     <string name="agent_operation_failed_detail">操作失败：%1$s</string>
     <string name="agent_operation_prepare_failed">准备代理虚拟机失败。</string>
@@ -853,6 +859,7 @@
     <string name="agent_operation_control_failed">救援虚拟机的控制通道已断开。</string>
     <string name="agent_operation_error_root_not_found">找不到受支持的 Linux 根分区。</string>
     <string name="agent_operation_error_password">无法更新密码数据库。</string>
+    <string name="agent_operation_error_password_missing">目标系统中找不到 passwd 程序。</string>
     <string name="agent_operation_error_unmount">密码已更新，但无法安全卸载目标文件系统。</string>
     <string name="agent_operation_error_script">救援脚本意外失败。</string>
     <string name="agent_operation_error_autogrow_disk">无法检查目标磁盘。</string>
diff --git a/app/src/main/res/values-zh-rTW/strings.xml b/app/src/main/res/values-zh-rTW/strings.xml
index 17f8f3b0e..d2d1b4786 100644
--- a/app/src/main/res/values-zh-rTW/strings.xml
+++ b/app/src/main/res/values-zh-rTW/strings.xml
@@ -720,6 +720,9 @@
     <string name="linux_vm_create_action">建立</string>
     <string name="linux_vm_create_success">虛擬機器「%1$s」已建立。</string>
     <string name="linux_vm_create_failed">Linux 虛擬機器建立流程未完成。</string>
+    <string name="linux_vm_step_resize">磁碟擴容</string>
+    <string name="linux_vm_create_partial">虛擬機「%1$s」已建立，但下列準備步驟沒有完成：\n%2$s\n\n可以之後從磁碟選單重新執行。</string>
+    <string name="linux_vm_create_partial_title">虛擬機已建立</string>
 
     <string name="lxc_title">下載發行版 LXC 映像</string>
     <string name="lxc_category_source">來源</string>
@@ -832,6 +835,9 @@
     <string name="agent_operation_running">執行中\u2026</string>
     <string name="agent_operation_success">操作完成。</string>
     <string name="agent_operation_success_skipped">操作完成；有操作不適用，未進行變更。</string>
+    <string name="agent_operation_action_autogrow">檔案系統擴充</string>
+    <string name="agent_operation_action_password">變更密碼</string>
+    <string name="agent_operation_partial">操作已完成，但部分步驟失敗：\n%1$s</string>
     <string name="agent_operation_failed">操作失敗（退出碼 %1$d）。</string>
     <string name="agent_operation_failed_detail">操作失敗：%1$s</string>
     <string name="agent_operation_prepare_failed">準備代理虛擬機器失敗。</string>
@@ -853,6 +859,7 @@
     <string name="agent_operation_control_failed">救援虛擬機器的控制通道已中斷。</string>
     <string name="agent_operation_error_root_not_found">找不到支援的 Linux 根分割區。</string>
     <string name="agent_operation_error_password">無法更新密碼資料庫。</string>
+    <string name="agent_operation_error_password_missing">目標系統中找不到 passwd 程式。</string>
     <string name="agent_operation_error_unmount">密碼已更新，但無法安全卸載目標檔案系統。</string>
     <string name="agent_operation_error_script">救援腳本意外失敗。</string>
     <string name="agent_operation_error_autogrow_disk">無法檢查目標磁碟。</string>
diff --git a/app/src/main/res/values/strings.xml b/app/src/main/res/values/strings.xml
index 365ba2927..768306cc9 100644
--- a/app/src/main/res/values/strings.xml
+++ b/app/src/main/res/values/strings.xml
@@ -757,6 +757,9 @@
     <string name="linux_vm_create_action">Create</string>
     <string name="linux_vm_create_success">Virtual machine "%1$s" created.</string>
     <string name="linux_vm_create_failed">Linux virtual machine creation did not complete.</string>
+    <string name="linux_vm_step_resize">Disk resize</string>
+    <string name="linux_vm_create_partial">Virtual machine "%1$s" was created, but these preparation steps did not complete:\n%2$s\n\nYou can run them again from the disk menu.</string>
+    <string name="linux_vm_create_partial_title">Virtual machine created</string>
 
     <string name="lxc_title">Download LXC Distro Image</string>
     <string name="lxc_category_source">Source</string>
@@ -870,6 +873,9 @@
     <string name="agent_operation_running">Running\u2026</string>
     <string name="agent_operation_success">Operation completed successfully.</string>
     <string name="agent_operation_success_skipped">Operation completed; an action was not applicable.</string>
+    <string name="agent_operation_action_autogrow">Filesystem expansion</string>
+    <string name="agent_operation_action_password">Password change</string>
+    <string name="agent_operation_partial">Operation completed, but some steps failed:\n%1$s</string>
     <string name="agent_operation_failed">Operation failed (exit code %1$d).</string>
     <string name="agent_operation_failed_detail">Operation failed: %1$s</string>
     <string name="agent_operation_prepare_failed">Failed to prepare agent VM.</string>
@@ -891,6 +897,7 @@
     <string name="agent_operation_control_failed">Lost the rescue VM control channel.</string>
     <string name="agent_operation_error_root_not_found">No supported Linux root partition was found.</string>
     <string name="agent_operation_error_password">Failed to update the password database.</string>
+    <string name="agent_operation_error_password_missing">No passwd program was found in the target system.</string>
     <string name="agent_operation_error_unmount">The password was updated, but the target filesystem could not be unmounted safely.</string>
     <string name="agent_operation_error_script">The rescue script failed unexpectedly.</string>
     <string name="agent_operation_error_autogrow_disk">The target disk could not be inspected.</string>
diff --git a/app/src/test/java/cn/classfun/droidvm/ui/agent/base/AgentActionQueueTest.java b/app/src/test/java/cn/classfun/droidvm/ui/agent/base/AgentActionQueueTest.java
index cd3d0fd64..36a595f2d 100644
--- a/app/src/test/java/cn/classfun/droidvm/ui/agent/base/AgentActionQueueTest.java
+++ b/app/src/test/java/cn/classfun/droidvm/ui/agent/base/AgentActionQueueTest.java
@@ -4,10 +4,15 @@
 import static org.junit.Assert.assertEquals;
 import static org.junit.Assert.assertFalse;
 import static org.junit.Assert.assertTrue;
+import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
+
+import androidx.annotation.NonNull;
 
 import org.junit.Test;
 
 import java.nio.charset.StandardCharsets;
+import java.nio.file.Files;
+import java.util.List;
 
 import cn.classfun.droidvm.lib.store.vm.BootConfig;
 import cn.classfun.droidvm.lib.store.vm.VMBackend;
@@ -58,7 +63,8 @@ public void actionsKeepInsertionOrderAndBuildOneShellScript() throws Exception {
         assertTrue(script.indexOf("ACTION_TYPE=chpasswd")
             < script.indexOf("ACTION_TYPE=autogrow"));
         assertEquals(1, occurrences(script, "marker RESULT:OK"));
-        assertTrue(script.contains("busybox chroot /mnt /usr/bin/passwd"));
+        assertTrue(script.contains("busybox chroot /mnt $PASSWD_BIN"));
+        assertTrue(script.contains("for candidate in /usr/bin/passwd /bin/passwd"));
         assertTrue(script.contains("mount -t proc proc /mnt/proc"));
         assertFalse(script.contains("passwd --root"));
         assertTrue(script.contains("COMMAND:RC:PASSWD"));
@@ -75,6 +81,67 @@ public void actionsKeepInsertionOrderAndBuildOneShellScript() throws Exception {
         assertFalse(vm.getActions().get(0).hasParam("password"));
     }
 
+    @Test
+    public void anOptionalActionFailureLetsTheQueueFinish() throws Exception {
+        var out = runQueue(true);
+
+        assertTrue(out, out.contains("SECOND-RAN"));
+        assertTrue(out, out.contains("__DROIDVM_AGENT__:ACTION:ERROR:0:chpasswd:PASSWD_FAILED"));
+        assertTrue(out, out.contains("__DROIDVM_AGENT__:ACTION:OK:1:autogrow"));
+        assertTrue(out, out.contains("__DROIDVM_AGENT__:RESULT:PARTIAL:chpasswd=PASSWD_FAILED"));
+        assertFalse(out, out.contains("RESULT:OK"));
+    }
+
+    @Test
+    public void aRequiredActionFailureStillStopsTheQueue() throws Exception {
+        var out = runQueue(false);
+
+        assertFalse(out, out.contains("SECOND-RAN"));
+        assertTrue(out, out.contains("__DROIDVM_AGENT__:RESULT:ERROR:PASSWD_FAILED"));
+        assertFalse(out, out.contains("RESULT:PARTIAL"));
+    }
+
+    /** Runs a two-action queue whose first action fails, and returns the console output. */
+    private static String runQueue(boolean optional) throws Exception {
+        var vm = new AgentVM(VMBackend.QEMU, VMHypervisor.SOFT);
+        var failing = new ScriptedAction(vm, vm.addAction("chpasswd"), "fail PASSWD_FAILED");
+        failing.setOptional(optional);
+        var second = new ScriptedAction(vm, vm.addAction("autogrow"), "echo SECOND-RAN");
+        second.setOptional(optional);
+        var script = BaseAction.buildRescueScript(List.of(failing, second));
+
+        // The rescue VM owns / and is thrown away after the run; a test host is neither, so
+        // keep the scratch state and the mount points the script creates inside a temp dir.
+        var sandbox = Files.createTempDirectory("droidvm-agent-test");
+        script = script
+            .replace("STATE_DIR=/run/droidvm-agent", fmt("STATE_DIR=%s/state", sandbox))
+            .replace("mkdir -p /mnt /mnt-autogrow", fmt("mkdir -p %s/mnt", sandbox));
+        var scriptFile = sandbox.resolve("rescue.sh");
+        Files.writeString(scriptFile, script);
+        var process = new ProcessBuilder("sh", scriptFile.toString())
+            .redirectErrorStream(true)
+            .start();
+        var out = new String(process.getInputStream().readAllBytes(), StandardCharsets.UTF_8);
+        process.waitFor();
+        return out;
+    }
+
+    /** A queue member with a caller-supplied body, so a failure can be staged on demand. */
+    private static final class ScriptedAction extends BaseAction {
+        private final String body;
+
+        private ScriptedAction(AgentVM vm, AgentActionSpec spec, String body) {
+            super(vm, spec);
+            this.body = body;
+        }
+
+        @NonNull
+        @Override
+        protected String buildActionScript() {
+            return body;
+        }
+    }
+
     private static int occurrences(String value, String needle) {
         int count = 0;
         int offset = 0;

From e00b06d3d00530456e41307ea187a30c0b773800 Mon Sep 17 00:00:00 2001
From: HuJK <gh@hujk.org>
Date: Wed, 9 Sep 2026 06:07:21 +0800
Subject: [PATCH 168/182] app: the English language option asks for en-US,
 which is a locale this app has

Choosing English gave Simplified Chinese. The app was doing nothing wrong: the
picker set the locale to "en", localeConfig declares en, and the resource table
carries English. The platform refused it anyway.

Measured on a device whose system list is [en_US, zh_Hans_CN, zh_Hant_TW,
zh_Hant_HK]. Asking for ja, fr, de or ko -- none of which this app translates --
gives the activity a resource configuration of [zh_CN], and so does asking for
en. Asking for zh-Hant-TW gives [zh_TW_#Hant, en_US, ...], the app locale
followed by the system's, which is what a locale the app supports looks like.

The collapse target is the proof. A refused locale falls back to the system
list, and that list begins with en_US -- yet it lands on zh_CN, the second
entry. It skipped English, so English is not in the set the platform matches
against. de and ko collapse too, though AndroidX translates both, so that set is
not the resource table either: it is the app's own locale-qualified folders,
values-zh-rCN and values-zh-rTW. English lives in the unqualified values/, which
is not a locale, so the app appears to have none.

en-US is the exception because it is the system's first locale: asking for what
the system already has needs no override, so nothing is filtered.

That makes this a fix for the device in hand rather than for the cause. Curing
the cause means a values-en holding the English strings, generated at build time
so there is no second copy to keep in step.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01RrfBDYZexyRUKdQyJ3jQ6q
---
 app/src/main/assets/data/languages.yaml | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/app/src/main/assets/data/languages.yaml b/app/src/main/assets/data/languages.yaml
index 63a497241..180e93aab 100644
--- a/app/src/main/assets/data/languages.yaml
+++ b/app/src/main/assets/data/languages.yaml
@@ -1,5 +1,9 @@
 languages:
-  - tag: en
+  # en-US, not a bare en: the platform filters an app locale against the locales the app has
+  # resource folders for, and English lives in the unqualified values/ rather than a values-en,
+  # so a bare en is refused and the system's first supported locale is used instead -- which on
+  # a device listing Chinese after English is Chinese. See app/src/main/res/xml/locales_config.
+  - tag: en-US
     name: English
 
   - tag: zh-Hans-CN

From 87d7fa80c3ca1bde2bc97aedc75021ca5eb1cf0c Mon Sep 17 00:00:00 2001
From: HuJK <gh@hujk.org>
Date: Wed, 9 Sep 2026 06:07:21 +0800
Subject: [PATCH 169/182] ui: the custom-firmware hint outlived the backend it
 described

The hint said the custom firmware field applied to QEMU only. crosvm honours a
custom EDK2 the same way now, so the sentence describes a limit that is no
longer there.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01RrfBDYZexyRUKdQyJ3jQ6q
---
 app/src/main/res/layout/partial_vm_edit_boot.xml | 11 -----------
 app/src/main/res/values-zh-rCN/strings.xml       |  1 -
 app/src/main/res/values-zh-rTW/strings.xml       |  1 -
 app/src/main/res/values/strings.xml              |  1 -
 4 files changed, 14 deletions(-)

diff --git a/app/src/main/res/layout/partial_vm_edit_boot.xml b/app/src/main/res/layout/partial_vm_edit_boot.xml
index 016ba0f00..9df1a7ae6 100644
--- a/app/src/main/res/layout/partial_vm_edit_boot.xml
+++ b/app/src/main/res/layout/partial_vm_edit_boot.xml
@@ -55,17 +55,6 @@
             app:ti_iconButtonHint="@string/edit_vm_disk_browse"
             app:ti_iconButtonIcon="@drawable/ic_open_in" />
 
-        <TextView
-            android:id="@+id/tv_uefi_hint"
-            android:layout_width="match_parent"
-            android:layout_height="wrap_content"
-            android:paddingStart="72dp"
-            android:paddingEnd="16dp"
-            android:paddingBottom="8dp"
-            android:text="@string/edit_vm_uefi_firmware_hint"
-            android:textColor="?attr/colorOnSurfaceVariant"
-            android:textSize="13sp" />
-
     </cn.classfun.droidvm.ui.widgets.container.CollapsibleContainer>
 
     <cn.classfun.droidvm.ui.widgets.container.CollapsibleContainer
diff --git a/app/src/main/res/values-zh-rCN/strings.xml b/app/src/main/res/values-zh-rCN/strings.xml
index 250202d65..880bf0768 100644
--- a/app/src/main/res/values-zh-rCN/strings.xml
+++ b/app/src/main/res/values-zh-rCN/strings.xml
@@ -406,7 +406,6 @@
     <string name="edit_vm_uefi_firmware">UEFI 固件(留空 = 内置 EDK2)</string>
     <string name="edit_vm_uefi_firmware_builtin">内置 EDK2</string>
     <string name="edit_vm_uefi_firmware_browse_title">选择 UEFI 固件</string>
-    <string name="edit_vm_uefi_firmware_hint">自定义固件仅对 QEMU 后端生效\ncrosvm 始终使用内置 EDK2</string>
     <string name="edit_vm_uefi_vars">UEFI 变量(留空 = 内置 EDK2 变量)</string>
     <string name="edit_vm_uefi_vars_browse_title">选择 UEFI 变量文件</string>
     <string name="edit_vm_uefi_vars_too_large">对于 crosvm,pflash 镜像大小不能超过 %1$d MiB</string>
diff --git a/app/src/main/res/values-zh-rTW/strings.xml b/app/src/main/res/values-zh-rTW/strings.xml
index d2d1b4786..a0fb4cb24 100644
--- a/app/src/main/res/values-zh-rTW/strings.xml
+++ b/app/src/main/res/values-zh-rTW/strings.xml
@@ -406,7 +406,6 @@
     <string name="edit_vm_uefi_firmware">UEFI 韌體(留空 = 內建 EDK2)</string>
     <string name="edit_vm_uefi_firmware_builtin">內建 EDK2</string>
     <string name="edit_vm_uefi_firmware_browse_title">選擇 UEFI 韌體</string>
-    <string name="edit_vm_uefi_firmware_hint">自定義韌體僅對 QEMU 後端生效\ncrosvm 始終使用內建 EDK2</string>
     <string name="edit_vm_uefi_vars">UEFI 變數(留空 = 內建 EDK2 變數)</string>
     <string name="edit_vm_uefi_vars_browse_title">選擇 UEFI 變數檔案</string>
     <string name="edit_vm_uefi_vars_too_large">對於 crosvm,pflash 鏡像大小不能超過 %1$d MiB</string>
diff --git a/app/src/main/res/values/strings.xml b/app/src/main/res/values/strings.xml
index 768306cc9..9d912eab9 100644
--- a/app/src/main/res/values/strings.xml
+++ b/app/src/main/res/values/strings.xml
@@ -410,7 +410,6 @@
     <string name="edit_vm_uefi_firmware">UEFI firmware (empty = built-in EDK2)</string>
     <string name="edit_vm_uefi_firmware_builtin">Built-in EDK2</string>
     <string name="edit_vm_uefi_firmware_browse_title">Select UEFI firmware</string>
-    <string name="edit_vm_uefi_firmware_hint">Custom firmware only takes effect on the QEMU backend\ncrosvm always uses the built-in EDK2</string>
     <string name="edit_vm_uefi_vars">UEFI vars (empty = built-in EDK2 vars)</string>
     <string name="edit_vm_uefi_vars_browse_title">Select UEFI vars</string>
     <string name="edit_vm_uefi_vars_too_large">For crosvm, pflash image size must not exceed %1$d MiB</string>

From ee2f300142d31de9d18821b97b9157f5196aa3a1 Mon Sep 17 00:00:00 2001
From: HuJK <gh@hujk.org>
Date: Wed, 9 Sep 2026 06:07:21 +0800
Subject: [PATCH 170/182] daemon: the SoC name table is read out of the
 daemon's own APK

The daemon reached res/xml/qcom.xml through createPackageContext on its system
context, which needs an attached ActivityThread the daemon does not have -- so
the lookup threw where it was called and the host SoC came out as its raw model
string, or as nothing at all. It reads the table straight out of the APK now,
with the package context left as the fallback, and a failure anywhere in the
chain is logged and answered with null instead of thrown.

More chips in the table while we are here.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01RrfBDYZexyRUKdQyJ3jQ6q
---
 .../daemon/vm/backend/HostSocName.java        | 56 +++++++++++----
 .../droidvm/lib/data/QcomChipName.java        | 68 +++++++++++++++++--
 app/src/main/res/xml/qcom.xml                 | 24 +++++++
 3 files changed, 130 insertions(+), 18 deletions(-)

diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/HostSocName.java b/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/HostSocName.java
index cc74f7248..c8e435105 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/HostSocName.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/HostSocName.java
@@ -19,9 +19,11 @@
  * FDT /chosen -> EDK2 SMBIOS Type 4), letting Windows show the real CPU name instead of the
  * firmware's built-in "Gunyah vCPU".
  *
- * The lookup table lives in the app's {@code res/xml/qcom.xml}; the daemon reaches it through a
- * package context created from its system context. Falls back to the raw SoC model string
- * (e.g. "SM8750P") when resources are unavailable, and to null when even getprop yields nothing.
+ * The lookup table lives in the app's {@code res/xml/qcom.xml}. The daemon reads it straight out
+ * of its own APK ({@link QcomChipName#apkResources()}), because {@code createPackageContext} on
+ * the daemon's system context needs an attached ActivityThread the daemon does not have; that
+ * route stays as a fallback. Falls back to the raw SoC model string (e.g. "SM8650") when the
+ * table is unreachable, and to null when even getprop yields nothing.
  */
 public final class HostSocName {
     private static final String TAG = "HostSocName";
@@ -34,23 +36,51 @@ private HostSocName() {
     @Nullable
     public static synchronized String get() {
         if (resolved) return cached;
-        resolved = true;
+        String soc;
         try {
-            var soc = QcomChipName.getCurrentSoC();
-            if (soc == null || soc.trim().isEmpty()) return cached = null;
-            soc = soc.trim();
+            soc = QcomChipName.getCurrentSoC();
+        } catch (Throwable t) {
+            Log.w(TAG, "failed to read the host SoC model", t);
+            resolved = true;
+            return cached = null;
+        }
+        if (soc == null || soc.trim().isEmpty()) {
+            resolved = true;
+            return cached = null;
+        }
+        soc = soc.trim();
+        var name = lookup(soc);
+        if (name != null && !name.isEmpty() && !name.equals(soc)) {
+            // A marketing name never changes under us, so this one is final.
+            resolved = true;
+            cached = name;
+        } else {
+            // The raw model still beats "Gunyah vCPU", but a table that failed to load is worth
+            // retrying at the next VM start rather than freezing the fallback for this daemon.
             cached = soc;
+        }
+        Log.i(TAG, fmt("host SoC name: %s (model %s)", cached, soc));
+        return cached;
+    }
+
+    /** The marketing name for {@code soc}, or null when no chip table could be read. */
+    @Nullable
+    private static String lookup(String soc) {
+        try {
+            var res = QcomChipName.apkResources();
+            if (res != null) return new QcomChipName(res).lookupChipName(soc);
+        } catch (Throwable t) {
+            Log.w(TAG, "chip table from the APK failed", t);
+        }
+        try {
             var sys = DaemonSystemContext.get();
             if (sys != null) {
                 var appCtx = sys.createPackageContext(BuildConfig.APPLICATION_ID, 0);
-                var name = new QcomChipName(appCtx).lookupChipName(soc);
-                if (name != null && !name.trim().isEmpty())
-                    cached = name.trim();
+                return new QcomChipName(appCtx).lookupChipName(soc);
             }
-            Log.i(TAG, fmt("host SoC name: %s", cached));
         } catch (Throwable t) {
-            Log.w(TAG, "failed to resolve host SoC name", t);
+            Log.w(TAG, "chip table from the package context failed", t);
         }
-        return cached;
+        return null;
     }
 }
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/data/QcomChipName.java b/app/src/main/java/cn/classfun/droidvm/lib/data/QcomChipName.java
index 135490392..1355e76aa 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/data/QcomChipName.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/data/QcomChipName.java
@@ -4,16 +4,24 @@
 package cn.classfun.droidvm.lib.data;
 
 import static cn.classfun.droidvm.lib.utils.RunUtils.runListQuiet;
+import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
 
+import android.annotation.SuppressLint;
 import android.content.Context;
+import android.content.res.AssetManager;
+import android.content.res.Configuration;
+import android.content.res.Resources;
 import android.content.res.XmlResourceParser;
 import android.os.Build;
+import android.util.DisplayMetrics;
 import android.util.Log;
 
 import androidx.annotation.NonNull;
+import androidx.annotation.Nullable;
 
 import org.xmlpull.v1.XmlPullParser;
 
+import java.io.File;
 import java.util.HashMap;
 import java.util.Map;
 
@@ -21,17 +29,23 @@
 
 public final class QcomChipName {
     private static final String TAG = "QcomChipName";
-    private final Context ctx;
     private Map<String, String> chips = null;
 
     public QcomChipName(Context ctx) {
-        this.ctx = ctx;
-        loadChipName();
+        this(ctx.getResources());
     }
 
-    private void loadChipName() {
+    /**
+     * The table from a bare {@link Resources}, for processes that have no usable Context of their
+     * own -- see {@link #apkResources()}.
+     */
+    public QcomChipName(@NonNull Resources res) {
+        loadChipName(res);
+    }
+
+    private void loadChipName(Resources res) {
         this.chips = new HashMap<>();
-        try (XmlResourceParser parser = ctx.getResources().getXml(R.xml.qcom)) {
+        try (XmlResourceParser parser = res.getXml(R.xml.qcom)) {
             int eventType = parser.getEventType();
             while (eventType != XmlPullParser.END_DOCUMENT) {
                 if (eventType == XmlPullParser.START_TAG && parser.getName().equals("chip")) {
@@ -47,6 +61,50 @@ private void loadChipName() {
         }
     }
 
+    /**
+     * Resources for the app's own APK, built without going through a Context.
+     *
+     * The daemon is a bare {@code app_process} that never ran {@code ActivityThread.attach()}, so
+     * {@code ActivityThread.currentActivityThread()} is null there and
+     * {@code Context.createPackageContext()} dies inside ResourcesManager with an NPE. An
+     * AssetManager built straight from the APK -- the one on the daemon's CLASSPATH, which is how
+     * DaemonHelper launches it -- reaches the same {@code res/xml/qcom.xml} with nothing but the
+     * default configuration, which is all a plain lookup table needs.
+     *
+     * @return the resources, or null when the APK cannot be located or opened.
+     */
+    @SuppressLint({"PrivateApi", "DiscouragedPrivateApi"})
+    @SuppressWarnings("deprecation")
+    @Nullable
+    public static Resources apkResources() {
+        var classPath = System.getenv("CLASSPATH");
+        if (classPath == null || classPath.trim().isEmpty()) {
+            Log.w(TAG, "no CLASSPATH; cannot reach the APK resources");
+            return null;
+        }
+        for (var entry : classPath.split(":")) {
+            var apk = entry.trim();
+            if (apk.isEmpty() || !new File(apk).isFile()) continue;
+            try {
+                var assets = AssetManager.class.getDeclaredConstructor().newInstance();
+                var addAssetPath = AssetManager.class.getMethod("addAssetPath", String.class);
+                var cookie = (Integer) addAssetPath.invoke(assets, apk);
+                if (cookie == null || cookie == 0) {
+                    Log.w(TAG, fmt("not a resource archive: %s", apk));
+                    continue;
+                }
+                var res = new Resources(assets, new DisplayMetrics(), new Configuration());
+                // Fails here rather than at lookup time if this archive has no chip table.
+                res.getResourceName(R.xml.qcom);
+                Log.i(TAG, fmt("chip table from %s", apk));
+                return res;
+            } catch (Throwable t) {
+                Log.w(TAG, fmt("failed to open resources from %s", apk), t);
+            }
+        }
+        return null;
+    }
+
     @SuppressWarnings("ReplaceAllNonRegex")
     public String lookupChipName(String soc) {
         if (chips == null)
diff --git a/app/src/main/res/xml/qcom.xml b/app/src/main/res/xml/qcom.xml
index c111404df..e0cbb3e5e 100644
--- a/app/src/main/res/xml/qcom.xml
+++ b/app/src/main/res/xml/qcom.xml
@@ -138,6 +138,7 @@
     <chip id="SM4450A"      >Qualcomm Snapdragon 4 Gen 2 Accelerated Edition</chip>
     <chip id="SM4450AF"     >Qualcomm Snapdragon 4 Gen 4</chip>
     <chip id="SM4635"       >Qualcomm Snapdragon 4s Gen 2</chip>
+    <chip id="SM4850"       >Qualcomm Snapdragon 4 Gen 5</chip>
     <chip id="SM6115"       >Qualcomm Snapdragon 662</chip>
     <chip id="SM6115AC"     >Qualcomm Snapdragon 6s 4G Gen 1</chip>
     <chip id="SM6115NEW"    >Qualcomm Snapdragon 6s Gen 1</chip>
@@ -156,6 +157,7 @@
     <chip id="SM6475"       >Qualcomm Snapdragon 6 Gen 3</chip>
     <chip id="SM6475AB"     >Qualcomm Snapdragon 6 Gen 3</chip>
     <chip id="SM6650"       >Qualcomm Snapdragon 6 Gen 4</chip>
+    <chip id="SM6850"       >Qualcomm Snapdragon 6 Gen 5</chip>
     <chip id="SM7125"       >Qualcomm Snapdragon 720G</chip>
     <chip id="SM7150"       >Qualcomm Snapdragon 730</chip>
     <chip id="SM7150AA"     >Qualcomm Snapdragon 730</chip>
@@ -219,9 +221,31 @@
     <chip id="SM8750AC"     >Qualcomm Snapdragon 8 Elite</chip>
     <chip id="SM8750P"      >Qualcomm Snapdragon 8 Elite</chip>
     <chip id="SM8845"       >Qualcomm Snapdragon 8 Gen 5</chip>
+    <!-- Also unconfirmed: the leaked "SM8845 Pro" is assumed to report as SM8845P, and
+         the SM8850Q bins are the cheaper "8 Elite Gen 5XX" that has no name of its own
+         yet. On every earlier part a P suffix kept the base name, so SM8845P is the
+         entry most likely to be wrong. -->
+    <chip id="SM8845AB"     >Qualcomm Snapdragon 8 Gen 5</chip>
+    <chip id="SM8845AC"     >Qualcomm Snapdragon 8 Gen 5</chip>
+    <chip id="SM8845P"      >Qualcomm Snapdragon 8 Gen 5 Pro</chip>
     <chip id="SM8850"       >Qualcomm Snapdragon 8 Elite Gen 5</chip>
+    <chip id="SM8850AB"     >Qualcomm Snapdragon 8 Elite Gen 5</chip>
     <chip id="SM8850AC"     >Qualcomm Snapdragon 8 Elite Gen 5</chip>
     <chip id="SM8850P"      >Qualcomm Snapdragon 8 Elite Gen 5</chip>
+    <chip id="SM8850Q"      >Qualcomm Snapdragon 8 Elite Gen 5</chip>
+    <chip id="SM8850QAA"    >Qualcomm Snapdragon 8 Elite Gen 5</chip>
+    <chip id="SM8850QAB"    >Qualcomm Snapdragon 8 Elite Gen 5</chip>
+    <!-- Not shipped yet as of 2026-09: names come from Qualcomm's pre-Summit
+         teasers, model numbers from leaks. Recheck after Snapdragon Summit
+         2026 (Sep 22-24) and against the first device that reports one. -->
+    <chip id="SM8950"       >Qualcomm Snapdragon 8 Elite Gen 6</chip>
+    <chip id="SM8950AB"     >Qualcomm Snapdragon 8 Elite Gen 6</chip>
+    <chip id="SM8950AC"     >Qualcomm Snapdragon 8 Elite Gen 6</chip>
+    <chip id="SM8950P"      >Qualcomm Snapdragon 8 Elite Gen 6</chip>
+    <chip id="SM8975"       >Qualcomm Snapdragon 8 Elite Extreme Gen 6</chip>
+    <chip id="SM8975AB"     >Qualcomm Snapdragon 8 Elite Extreme Gen 6</chip>
+    <chip id="SM8975AC"     >Qualcomm Snapdragon 8 Elite Extreme Gen 6</chip>
+    <chip id="SM8975P"      >Qualcomm Snapdragon 8 Elite Extreme Gen 6</chip>
     <chip id="SXR2230P"     >Qualcomm Snapdragon XR2 Gen 2</chip>
     <chip id="TRINKET"      >Qualcomm Snapdragon 665</chip>
 </soc>

From 3dbc8c6737746e57b0f84316394d0f9d85e71654 Mon Sep 17 00:00:00 2001
From: HuJK <gh@hujk.org>
Date: Wed, 9 Sep 2026 06:07:21 +0800
Subject: [PATCH 171/182] modules: a module can say which kernels still need it

gh_hugepage_reserve exists because Gunyah could not take guest memory without
migrating it out of CMA first. Qualcomm fixed that in 6.18, so on those kernels
the module is not a fix, it is a module the user is asked to load for nothing.

match.json entries take a kernel_below now, and HostKernel can order two series
the way version numbers go rather than the way strings do -- 6.6 is below 6.18,
which no textual comparison of the two will tell you. A kernel it cannot read
matches as before: not knowing which side of the line a host falls on is not a
reason to hide a module that might be needed.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01RrfBDYZexyRUKdQyJ3jQ6q
---
 app/src/main/assets/match.json                |  6 ++-
 .../classfun/droidvm/lib/data/HostKernel.java | 33 ++++++++++++
 .../ui/main/settings/KernelModuleMatch.java   | 34 ++++++++++--
 .../droidvm/lib/data/HostKernelTest.java      | 53 +++++++++++++++++++
 4 files changed, 121 insertions(+), 5 deletions(-)
 create mode 100644 app/src/test/java/cn/classfun/droidvm/lib/data/HostKernelTest.java

diff --git a/app/src/main/assets/match.json b/app/src/main/assets/match.json
index cc28fa025..a5be1415b 100644
--- a/app/src/main/assets/match.json
+++ b/app/src/main/assets/match.json
@@ -1,7 +1,11 @@
 {
   "version": 1,
   "modules": {
-    "gh_hugepage_reserve": { "soc_vendor": ["qualcomm"] },
+    "gh_hugepage_reserve": {
+      "soc_vendor": ["qualcomm"],
+      "kernel_below": "6.18",
+      "comment": "the reserve exists because Gunyah could not take guest memory without migrating it out of CMA; Qualcomm fixed that in 6.18, where the module is no longer needed"
+    },
     "gunyah_host_share": { "soc_vendor": ["qualcomm"] },
     "gunyah_kvcalloc": { "soc_vendor": ["qualcomm"] },
     "gh_unmovable": { "soc_vendor": ["qualcomm"] },
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/data/HostKernel.java b/app/src/main/java/cn/classfun/droidvm/lib/data/HostKernel.java
index 446598129..1efc20c04 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/data/HostKernel.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/data/HostKernel.java
@@ -65,4 +65,37 @@ public static String majorMinorOf(@Nullable String unameRelease) {
         var m = MAJOR_MINOR.matcher(unameRelease.trim());
         return m.find() ? m.group(1) : null;
     }
+
+    /**
+     * Orders two series the way version numbers go, not the way strings do: 6.6 is below 6.18,
+     * which no textual comparison of those two will tell you. Negative when {@code a} is the
+     * older series, zero when they are the same one, positive when it is the newer.
+     *
+     * <p>Null when either side is not a {@code major.minor} we can read -- "we do not know",
+     * the same answer {@link #majorMinor} gives, for callers to decide what to do with. Pure.</p>
+     */
+    @Nullable
+    public static Integer compareSeries(@Nullable String a, @Nullable String b) {
+        var left = parts(a);
+        var right = parts(b);
+        if (left == null || right == null) return null;
+        return left[0] != right[0] ? Integer.compare(left[0], right[0])
+            : Integer.compare(left[1], right[1]);
+    }
+
+    /** {@code major.minor} as two numbers, or null when it is not one. */
+    @Nullable
+    private static int[] parts(@Nullable String version) {
+        var series = majorMinorOf(version);
+        if (series == null) return null;
+        var dot = series.indexOf('.');
+        try {
+            return new int[]{
+                Integer.parseInt(series.substring(0, dot)),
+                Integer.parseInt(series.substring(dot + 1)),
+            };
+        } catch (NumberFormatException e) {
+            return null; // more digits than an int holds; not a kernel anyone is running
+        }
+    }
 }
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/main/settings/KernelModuleMatch.java b/app/src/main/java/cn/classfun/droidvm/ui/main/settings/KernelModuleMatch.java
index f362bbd2e..0198beb16 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/main/settings/KernelModuleMatch.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/main/settings/KernelModuleMatch.java
@@ -21,6 +21,7 @@
 import java.nio.charset.StandardCharsets;
 import java.util.Locale;
 
+import cn.classfun.droidvm.lib.data.HostKernel;
 import cn.classfun.droidvm.lib.data.SocIdentity;
 
 /**
@@ -52,10 +53,16 @@
  * file would stop listing every named module -- whereas it never looks at extra top-level keys.
  *
  * <p>Supported fields: {@code soc_vendor} (tokens from {@link SocIdentity}), {@code soc_model}
- * (exact, case-insensitive), {@code soc_model_prefix}. <b>A field this app does not know makes the
- * rule fail</b>, rather than being skipped: a newer rule file narrowing a module by something we
- * cannot evaluate must not end up listing it anyway -- an insmod on the wrong device is a kernel
- * panic, so the safe default is to say no.
+ * (exact, case-insensitive), {@code soc_model_prefix}, {@code kernel_below} and
+ * {@code kernel_at_least} (a {@code major.minor} series, compared numerically -- 6.6 is below
+ * 6.18). <b>A field this app does not know makes the rule fail</b>, rather than being skipped: a
+ * newer rule file narrowing a module by something we cannot evaluate must not end up listing it
+ * anyway -- an insmod on the wrong device is a kernel panic, so the safe default is to say no.
+ *
+ * <p>A field we know but cannot <em>read</em> is the opposite case and goes the opposite way: if
+ * {@code uname} says nothing, a {@code kernel_below} rule still passes. Not knowing which kernel
+ * this is must not hide a module the phone may well need -- the cost of listing one it does not
+ * is a card nobody presses, and the cost of hiding one is a VM that will not start.
  *
  * <p>The app also ships {@code assets/match.json} in the same format. It carries the rule for
  * GH-Hugepage-Reserve -- which has no {@code .ko} and so no prebuilt to ride on -- and doubles as
@@ -207,6 +214,12 @@ private static boolean eval(@NonNull JSONObject rule, @NonNull String moduleName
                 case "soc_model_prefix":
                     if (!anyPrefixOf(rule.optJSONArray(field), SocIdentity.model())) return false;
                     break;
+                case "kernel_below":
+                    if (!kernelBelow(rule.optString(field), true)) return false;
+                    break;
+                case "kernel_at_least":
+                    if (!kernelBelow(rule.optString(field), false)) return false;
+                    break;
                 case "comment":
                     break;
                 default:
@@ -218,6 +231,19 @@ private static boolean eval(@NonNull JSONObject rule, @NonNull String moduleName
         return true;
     }
 
+    /**
+     * Is the running kernel's series below {@code threshold}, when that is what {@code want}
+     * asks for? ({@code kernel_at_least} is the same question with {@code want} false.)
+     *
+     * <p>A version neither side can be read from passes either way -- both callers are
+     * narrowing a module to some kernels, and not knowing which one this is must not be what
+     * hides it. See the class note.</p>
+     */
+    private static boolean kernelBelow(@NonNull String threshold, boolean want) {
+        var cmp = HostKernel.compareSeries(HostKernel.majorMinor(), threshold);
+        return cmp == null || (cmp < 0) == want;
+    }
+
     private static boolean anyEquals(@Nullable JSONArray values, @NonNull String actual) {
         if (values == null) return false;
         for (int i = 0; i < values.length(); i++)
diff --git a/app/src/test/java/cn/classfun/droidvm/lib/data/HostKernelTest.java b/app/src/test/java/cn/classfun/droidvm/lib/data/HostKernelTest.java
new file mode 100644
index 000000000..cdda94100
--- /dev/null
+++ b/app/src/test/java/cn/classfun/droidvm/lib/data/HostKernelTest.java
@@ -0,0 +1,53 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
+package cn.classfun.droidvm.lib.data;
+
+import static org.junit.Assert.assertEquals;
+import static org.junit.Assert.assertNull;
+import static org.junit.Assert.assertTrue;
+
+import org.junit.Test;
+
+/**
+ * Reading and ordering the kernel series. The ordering is the point: every rule keyed on it
+ * ("this module is for kernels before 6.18") is wrong the moment 6.6 is treated as the newer
+ * of 6.6 and 6.18, which is exactly what comparing the strings would say.
+ */
+public final class HostKernelTest {
+    @Test
+    public void readsTheSeriesOutOfAReleaseString() {
+        assertEquals("6.1", HostKernel.majorMinorOf("6.1.99-android14-11-g0123456789ab"));
+        assertEquals("6.18", HostKernel.majorMinorOf("6.18.0-android16-5-gabcdef"));
+        assertEquals("5.15", HostKernel.majorMinorOf(" 5.15.149 "));
+        assertNull(HostKernel.majorMinorOf("not-a-kernel"));
+        assertNull(HostKernel.majorMinorOf(null));
+    }
+
+    @Test
+    public void ordersByNumberNotByText() {
+        assertTrue(HostKernel.compareSeries("6.6", "6.18") < 0);
+        assertTrue(HostKernel.compareSeries("6.1", "6.18") < 0);
+        assertTrue(HostKernel.compareSeries("6.12", "6.18") < 0);
+        assertTrue(HostKernel.compareSeries("6.18", "6.18") == 0);
+        assertTrue(HostKernel.compareSeries("6.19", "6.18") > 0);
+        assertTrue(HostKernel.compareSeries("7.0", "6.18") > 0);
+        assertTrue(HostKernel.compareSeries("5.15", "6.1") < 0);
+    }
+
+    /** A full release string compares as its series, so a caller need not trim it first. */
+    @Test
+    public void comparesFullReleaseStrings() {
+        assertTrue(HostKernel.compareSeries("6.6.30-android15-8-gdeadbeef", "6.18") < 0);
+        assertEquals(0, (int) HostKernel.compareSeries("6.18.2-perf+", "6.18"));
+    }
+
+    /** "We do not know" stays that: it is not silently an old kernel, or a new one. */
+    @Test
+    public void unreadableVersionsCompareToNothing() {
+        assertNull(HostKernel.compareSeries(null, "6.18"));
+        assertNull(HostKernel.compareSeries("6.18", null));
+        assertNull(HostKernel.compareSeries("unknown", "6.18"));
+        assertNull(HostKernel.compareSeries("6.18", "sometime"));
+    }
+}

From 386ebf7fc42a5a031efde6d280e1ccb9b9636acb Mon Sep 17 00:00:00 2001
From: HuJK <gh@hujk.org>
Date: Wed, 9 Sep 2026 06:07:22 +0800
Subject: [PATCH 172/182] usb: pass a host USB device through to a VM, by hand
 or by rule

A host USB device can be handed to a running VM, by hand or by rule.

The daemon owns it. It watches /dev/bus/usb and the kernel's uevent socket --
the second because binding or unbinding a driver moves no node and nothing else
reports it -- and keeps an inventory of every device including the root hubs,
whose arrival nothing else reports either and whose absence is a bus on which
nothing can ever enumerate. Attaching takes the interfaces off their host
drivers and hands the device to crosvm; releasing gives them back, and a VMM
that died holding one has its claim taken off it and the device restored.

Rules decide it without anyone watching. Four ordered zones -- exact, port,
device, and the catch-all -- each a list tried in order, each rule naming a
target: a VM's xHCI controller, the host, or idle. A fifth zone nobody sees is
"no match means the host". Passes run on a plug, on a driver change, when a VM
reaches RUNNING, when the rules are saved, and at daemon start, and a device
somebody moved by hand is locked against them until it is unplugged.

The gate is drivers_autoprobe. With passthrough on, an arriving device binds no
driver of its own and the daemon stands in for the kernel: it probes the device
so the configuration is chosen, then its interfaces, and only for what the rules
say goes to the host. What a device is doing is read from the drivers bound to
it -- hostuse, vmuse, idle -- and stored nowhere.

The UI is three surfaces: a USB passthrough page of four folding zones with a
card per rule and a master switch over them, a management page that moves one
device now without touching the rules, and an xHCI controller peripheral in the
VM editor whose card binds rules straight to that controller.

Squashed from 39 commits on wip/usb.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01RrfBDYZexyRUKdQyJ3jQ6q
---
 .github/workflows/build.yml                   |    2 +
 .github/workflows/dev-release.yml             |    1 +
 .github/workflows/release.yml                 |    1 +
 app/build.gradle.kts                          |   27 +-
 app/src/main/AndroidManifest.xml              |   14 +
 app/src/main/cpp/CMakeLists.txt               |    1 +
 app/src/main/cpp/console/command.cpp          |    1 +
 app/src/main/cpp/console/command.h            |    2 +
 app/src/main/cpp/console/commands/usb.cpp     |  295 +++
 app/src/main/cpp/unixhelper/unixhelper.c      |   92 +
 .../cn/classfun/droidvm/daemon/Daemon.java    |   13 +-
 .../droidvm/daemon/console/ConsoleStream.java |   38 +-
 .../daemon/ipc/usb/UsbAttachHandler.java      |   49 +
 .../daemon/ipc/usb/UsbDetachHandler.java      |   43 +
 .../daemon/ipc/usb/UsbHostListHandler.java    |   27 +
 .../daemon/ipc/usb/UsbRulesGetHandler.java    |   26 +
 .../daemon/ipc/usb/UsbRulesSetHandler.java    |   31 +
 .../daemon/ipc/usb/UsbRulesTestHandler.java   |   31 +
 .../daemon/ipc/usb/UsbSetTargetHandler.java   |   63 +
 .../daemon/ipc/usb/UsbVmListHandler.java      |   37 +
 .../droidvm/daemon/server/Server.java         |    5 +
 .../droidvm/daemon/server/ServerContext.java  |    7 +
 .../droidvm/daemon/usb/CrosvmUsbControl.java  |  272 +++
 .../daemon/usb/UsbControlException.java       |   30 +
 .../droidvm/daemon/usb/UsbHostDevice.java     |  387 ++++
 .../droidvm/daemon/usb/UsbHostInventory.java  |  513 +++++
 .../droidvm/daemon/usb/UsbLeftovers.java      |  128 ++
 .../daemon/usb/UsbPassthroughManager.java     | 1948 +++++++++++++++++
 .../classfun/droidvm/daemon/usb/UsbProbe.java |  239 ++
 .../droidvm/daemon/usb/UsbRuleEngine.java     |  329 +++
 .../droidvm/daemon/usb/UsbRulePassTiming.java |   97 +
 .../classfun/droidvm/daemon/usb/UsbRules.java |  395 ++++
 .../droidvm/daemon/usb/UsbRulesFile.java      |   84 +
 .../droidvm/daemon/usb/UsbUevent.java         |  118 +
 .../usb/UsbVmmUnreachableException.java       |   32 +
 .../droidvm/daemon/vm/VMBackendInstance.java  |   10 +
 .../droidvm/daemon/vm/VMInstance.java         |   17 +
 .../vm/backend/CrosvmBackendInstance.java     |   38 +-
 .../vm/backend/QemuBackendInstance.java       |   52 +-
 .../droidvm/lib/natives/UnixHelper.java       |   15 +
 .../droidvm/lib/store/vm/PeripheralType.java  |   15 +-
 .../droidvm/lib/store/vm/VMConfig.java        |   10 +-
 .../lib/store/vm/VMPeripheralConfig.java      |   57 +-
 .../droidvm/lib/store/vm/VMXhciConfig.java    |  197 ++
 .../droidvm/ui/agent/base/AgentVM.java        |    3 +-
 .../main/settings/MainSettingsFragment.java   |   16 +
 .../droidvm/ui/usb/UsbDeviceNames.java        |   96 +
 .../droidvm/ui/usb/UsbDeviceTarget.java       |  103 +
 .../droidvm/ui/usb/UsbDevicesActivity.java    |  363 +++
 .../droidvm/ui/usb/UsbHostDeviceInfo.java     |  148 ++
 .../droidvm/ui/usb/UsbRuleAdapter.java        |  383 ++++
 .../droidvm/ui/usb/UsbRuleEditDialog.java     |  223 ++
 .../classfun/droidvm/ui/usb/UsbRuleLayer.java |   85 +
 .../classfun/droidvm/ui/usb/UsbRuleLines.java |   86 +
 .../droidvm/ui/usb/UsbRuleShadow.java         |   83 +
 .../droidvm/ui/usb/UsbRuleSubjects.java       |   88 +
 .../droidvm/ui/usb/UsbRuleViewHolder.java     |   42 +
 .../droidvm/ui/usb/UsbRuleZoneDialog.java     |   82 +
 .../droidvm/ui/usb/UsbRulesActivity.java      |  509 +++++
 .../cn/classfun/droidvm/ui/usb/UsbSpeed.java  |   40 +
 .../droidvm/ui/usb/UsbTargetPickerDialog.java |  248 +++
 .../cn/classfun/droidvm/ui/usb/VmEntry.java   |  110 +
 .../droidvm/ui/vm/edit/VMEditActivity.java    |   27 +
 .../ui/vm/edit/basic/VMEditBasicTab.java      |    5 -
 .../edit/peripheral/VMEditPeripheralTab.java  |  375 +++-
 .../peripheral/VMPeripheralEditAdapter.java   |  301 ++-
 .../VMPeripheralEditViewHolder.java           |   35 +
 .../vm/edit/peripheral/XhciBindingDiff.java   |  211 ++
 .../vm/edit/peripheral/XhciBindingStore.java  |  201 ++
 .../ui/vm/edit/peripheral/XhciPortCount.java  |   46 +
 .../ui/widgets/container/CardItemAdapter.java |   12 +
 .../widgets/container/CardItemListView.java   |   15 +-
 .../ui/widgets/row/DropdownRowWidget.java     |   35 +-
 app/src/main/res/drawable/ic_arrow_down.xml   |    9 +
 app/src/main/res/drawable/ic_arrow_up.xml     |    9 +
 app/src/main/res/drawable/ic_drag_handle.xml  |    9 +
 .../main/res/layout/activity_usb_devices.xml  |   69 +
 .../main/res/layout/activity_usb_rules.xml    |  126 ++
 .../main/res/layout/dialog_usb_rule_edit.xml  |   29 +
 .../res/layout/dialog_usb_target_custom.xml   |   49 +
 .../res/layout/dialog_usb_target_edit.xml     |   18 +
 .../res/layout/dialog_xhci_custom_binding.xml |   49 +
 .../res/layout/fragment_main_settings.xml     |   16 +
 app/src/main/res/layout/item_usb_device.xml   |   85 +
 app/src/main/res/layout/item_usb_rule.xml     |  131 ++
 .../res/layout/item_vm_peripheral_edit.xml    |  172 ++
 app/src/main/res/layout/item_xhci_binding.xml |   54 +
 .../main/res/layout/partial_vm_edit_basic.xml |    8 -
 app/src/main/res/menu/menu_usb_rules.xml      |   17 +
 app/src/main/res/values-zh-rCN/strings.xml    |   96 +-
 app/src/main/res/values-zh-rTW/strings.xml    |   96 +-
 app/src/main/res/values/strings.xml           |  113 +-
 .../daemon/usb/CrosvmUsbControlParseTest.java |  152 ++
 .../droidvm/daemon/usb/UsbHostDeviceTest.java |  267 +++
 .../daemon/usb/UsbHostInventoryTest.java      |  267 +++
 .../droidvm/daemon/usb/UsbLeftoversTest.java  |  126 ++
 .../droidvm/daemon/usb/UsbProbeTest.java      |  291 +++
 .../droidvm/daemon/usb/UsbRuleEngineTest.java |  670 ++++++
 .../daemon/usb/UsbRulePassTimingTest.java     |  183 ++
 .../droidvm/daemon/usb/UsbRulesTest.java      |  288 +++
 .../droidvm/daemon/usb/UsbUeventTest.java     |  143 ++
 .../lib/store/vm/VMCreationDefaultsTest.java  |   12 +
 .../lib/store/vm/VMXhciMigrationTest.java     |  276 +++
 .../droidvm/ui/usb/UsbDeviceTargetTest.java   |   96 +
 .../droidvm/ui/usb/UsbRuleLayerTest.java      |   86 +
 .../droidvm/ui/usb/UsbRuleLinesTest.java      |   84 +
 .../droidvm/ui/usb/UsbRuleShadowTest.java     |  139 ++
 .../classfun/droidvm/ui/usb/UsbSpeedTest.java |   40 +
 .../edit/peripheral/XhciBindingDiffTest.java  |  253 +++
 .../edit/peripheral/XhciBindingStoreTest.java |  190 ++
 .../vm/edit/peripheral/XhciPortCountTest.java |   33 +
 111 files changed, 14448 insertions(+), 63 deletions(-)
 create mode 100644 app/src/main/cpp/console/commands/usb.cpp
 create mode 100644 app/src/main/java/cn/classfun/droidvm/daemon/ipc/usb/UsbAttachHandler.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/daemon/ipc/usb/UsbDetachHandler.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/daemon/ipc/usb/UsbHostListHandler.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/daemon/ipc/usb/UsbRulesGetHandler.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/daemon/ipc/usb/UsbRulesSetHandler.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/daemon/ipc/usb/UsbRulesTestHandler.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/daemon/ipc/usb/UsbSetTargetHandler.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/daemon/ipc/usb/UsbVmListHandler.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/daemon/usb/CrosvmUsbControl.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/daemon/usb/UsbControlException.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/daemon/usb/UsbHostDevice.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/daemon/usb/UsbHostInventory.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/daemon/usb/UsbLeftovers.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/daemon/usb/UsbPassthroughManager.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/daemon/usb/UsbProbe.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/daemon/usb/UsbRuleEngine.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/daemon/usb/UsbRulePassTiming.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/daemon/usb/UsbRules.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/daemon/usb/UsbRulesFile.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/daemon/usb/UsbUevent.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/daemon/usb/UsbVmmUnreachableException.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/lib/store/vm/VMXhciConfig.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/ui/usb/UsbDeviceNames.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/ui/usb/UsbDeviceTarget.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/ui/usb/UsbDevicesActivity.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/ui/usb/UsbHostDeviceInfo.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/ui/usb/UsbRuleAdapter.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/ui/usb/UsbRuleEditDialog.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/ui/usb/UsbRuleLayer.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/ui/usb/UsbRuleLines.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/ui/usb/UsbRuleShadow.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/ui/usb/UsbRuleSubjects.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/ui/usb/UsbRuleViewHolder.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/ui/usb/UsbRuleZoneDialog.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/ui/usb/UsbRulesActivity.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/ui/usb/UsbSpeed.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/ui/usb/UsbTargetPickerDialog.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/ui/usb/VmEntry.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/ui/vm/edit/peripheral/XhciBindingDiff.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/ui/vm/edit/peripheral/XhciBindingStore.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/ui/vm/edit/peripheral/XhciPortCount.java
 create mode 100644 app/src/main/res/drawable/ic_arrow_down.xml
 create mode 100644 app/src/main/res/drawable/ic_arrow_up.xml
 create mode 100644 app/src/main/res/drawable/ic_drag_handle.xml
 create mode 100644 app/src/main/res/layout/activity_usb_devices.xml
 create mode 100644 app/src/main/res/layout/activity_usb_rules.xml
 create mode 100644 app/src/main/res/layout/dialog_usb_rule_edit.xml
 create mode 100644 app/src/main/res/layout/dialog_usb_target_custom.xml
 create mode 100644 app/src/main/res/layout/dialog_usb_target_edit.xml
 create mode 100644 app/src/main/res/layout/dialog_xhci_custom_binding.xml
 create mode 100644 app/src/main/res/layout/item_usb_device.xml
 create mode 100644 app/src/main/res/layout/item_usb_rule.xml
 create mode 100644 app/src/main/res/layout/item_xhci_binding.xml
 create mode 100644 app/src/main/res/menu/menu_usb_rules.xml
 create mode 100644 app/src/test/java/cn/classfun/droidvm/daemon/usb/CrosvmUsbControlParseTest.java
 create mode 100644 app/src/test/java/cn/classfun/droidvm/daemon/usb/UsbHostDeviceTest.java
 create mode 100644 app/src/test/java/cn/classfun/droidvm/daemon/usb/UsbHostInventoryTest.java
 create mode 100644 app/src/test/java/cn/classfun/droidvm/daemon/usb/UsbLeftoversTest.java
 create mode 100644 app/src/test/java/cn/classfun/droidvm/daemon/usb/UsbProbeTest.java
 create mode 100644 app/src/test/java/cn/classfun/droidvm/daemon/usb/UsbRuleEngineTest.java
 create mode 100644 app/src/test/java/cn/classfun/droidvm/daemon/usb/UsbRulePassTimingTest.java
 create mode 100644 app/src/test/java/cn/classfun/droidvm/daemon/usb/UsbRulesTest.java
 create mode 100644 app/src/test/java/cn/classfun/droidvm/daemon/usb/UsbUeventTest.java
 create mode 100644 app/src/test/java/cn/classfun/droidvm/lib/store/vm/VMXhciMigrationTest.java
 create mode 100644 app/src/test/java/cn/classfun/droidvm/ui/usb/UsbDeviceTargetTest.java
 create mode 100644 app/src/test/java/cn/classfun/droidvm/ui/usb/UsbRuleLayerTest.java
 create mode 100644 app/src/test/java/cn/classfun/droidvm/ui/usb/UsbRuleLinesTest.java
 create mode 100644 app/src/test/java/cn/classfun/droidvm/ui/usb/UsbRuleShadowTest.java
 create mode 100644 app/src/test/java/cn/classfun/droidvm/ui/usb/UsbSpeedTest.java
 create mode 100644 app/src/test/java/cn/classfun/droidvm/ui/vm/edit/peripheral/XhciBindingDiffTest.java
 create mode 100644 app/src/test/java/cn/classfun/droidvm/ui/vm/edit/peripheral/XhciBindingStoreTest.java
 create mode 100644 app/src/test/java/cn/classfun/droidvm/ui/vm/edit/peripheral/XhciPortCountTest.java

diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 8cbc9c64b..dd7aa30a9 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -14,6 +14,8 @@ concurrency:
 jobs:
   build:
     runs-on: ubuntu-latest
+    env:
+      DROIDVM_PREBUILT_COMPRESSION_LEVEL: "9"
 
     steps:
       - name: Checkout repository
diff --git a/.github/workflows/dev-release.yml b/.github/workflows/dev-release.yml
index 7a6c16b6c..3ec3eca76 100644
--- a/.github/workflows/dev-release.yml
+++ b/.github/workflows/dev-release.yml
@@ -21,6 +21,7 @@ jobs:
   dev-release:
     runs-on: ubuntu-latest
     env:
+      DROIDVM_PREBUILT_COMPRESSION_LEVEL: "9"
       HAS_SIGN_KEY: ${{ secrets.APP_SIGN_KEY_JKS != '' }}
 
     steps:
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 0df30ba5c..146915b7e 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -12,6 +12,7 @@ jobs:
   release:
     runs-on: ubuntu-latest
     env:
+      DROIDVM_PREBUILT_COMPRESSION_LEVEL: "9"
       HAS_SIGN_KEY: ${{ secrets.APP_SIGN_KEY_JKS != '' }}
 
     steps:
diff --git a/app/build.gradle.kts b/app/build.gradle.kts
index e0f51c6d2..8263f4ac7 100644
--- a/app/build.gradle.kts
+++ b/app/build.gradle.kts
@@ -215,10 +215,23 @@ abstract class RegenPrebuiltsTask : DefaultTask() {
     @get:Inject
     abstract val exec: ExecOperations
 
+    // The working directory only; the sources Gradle should hash are declared below. Hashing the
+    // whole root would drag in manual-build/, which carries hundreds of megabytes of binaries the
+    // script never reads.
     @get:Internal
     abstract val prebuiltRoot: DirectoryProperty
 
-    @get:Internal
+    /** What the script builds from: a change here is the only reason to pack again. */
+    @get:InputDirectory
+    @get:PathSensitive(PathSensitivity.RELATIVE)
+    abstract val autoBuildSources: DirectoryProperty
+
+    /** The script itself, so editing it invalidates the last run too. */
+    @get:InputFile
+    @get:PathSensitive(PathSensitivity.RELATIVE)
+    abstract val autoBuildScript: RegularFileProperty
+
+    @get:OutputDirectory
     abstract val prebuiltsOut: DirectoryProperty
 
     @TaskAction
@@ -291,6 +304,8 @@ val prebuiltsSubmoduleDir = rootProject.layout.projectDirectory.dir("app/src/mai
 val regenPrebuilts = tasks.register<RegenPrebuiltsTask>("regenPrebuilts") {
     description = "Regenerate prebuilts from DroidVM-Prebuilt-Root if it exists and has auto-build/ content"
     prebuiltRoot.set(prebuiltRootDir)
+    autoBuildSources.set(prebuiltRootDir.dir("auto-build"))
+    autoBuildScript.set(prebuiltRootDir.file("auto-build.py"))
     prebuiltsOut.set(prebuiltsSubmoduleDir)
     // Only when a native dev has checked out DroidVM-Prebuilt-Root with source
     // under auto-build/. Otherwise, the published submodule artifacts are used.
@@ -301,8 +316,9 @@ val regenPrebuilts = tasks.register<RegenPrebuiltsTask>("regenPrebuilts") {
             (autoBuild.listFiles()?.any { it.name != ".gitignore" } == true)
     }
 }
-// Run before anything reads the prebuilts dir (assets merge + jniLibs unpack).
-tasks.named("preBuild").configure { dependsOn(regenPrebuilts) }
+// Hung on the two tasks that actually read the prebuilts dir, not on preBuild: preBuild is a
+// dependency of every JVM unit test run as well, and packing an APK payload is not something a
+// test of the rules engine should wait for.
 
 androidComponents {
     onVariants { variant ->
@@ -312,6 +328,7 @@ androidComponents {
         ) {
             description = "Unpack prebuilt-<abi>-comptime.zip into jniLibs/<abi>/ for ${variant.name}"
             dependsOn(regenPrebuilts)
+
             prebuiltsDir.set(prebuiltsSubmoduleDir)
             outputDir.set(
                 layout.buildDirectory.dir("generated/comptime_jnilibs/${variant.name}")
@@ -320,6 +337,10 @@ androidComponents {
         variant.sources.jniLibs?.addGeneratedSourceDirectory(
             unpackComptimeTask, UnpackComptimeJniLibsTask::outputDir
         )
+        // The other reader of the prebuilts dir. Declared here rather than on preBuild so that a
+        // unit test run never packs anything.
+        tasks.matching { it.name == "merge${variantName}Assets" }
+            .configureEach { dependsOn(regenPrebuilts) }
         val fetchFontTask = tasks.register<FetchTerminalFontTask>(
             "fetchTerminalFont${variantName}"
         ) {
diff --git a/app/src/main/AndroidManifest.xml b/app/src/main/AndroidManifest.xml
index ed6731d63..a8470c179 100644
--- a/app/src/main/AndroidManifest.xml
+++ b/app/src/main/AndroidManifest.xml
@@ -253,6 +253,20 @@
             android:theme="@style/Theme.DroidVM.NoActionBar"
             android:windowSoftInputMode="adjustNothing" />
 
+        <activity
+            android:name=".ui.usb.UsbRulesActivity"
+            android:configChanges="orientation|screenSize|keyboardHidden|screenLayout|smallestScreenSize"
+            android:exported="false"
+            android:theme="@style/Theme.DroidVM.NoActionBar"
+            android:windowSoftInputMode="adjustNothing" />
+
+        <activity
+            android:name=".ui.usb.UsbDevicesActivity"
+            android:configChanges="orientation|screenSize|keyboardHidden|screenLayout|smallestScreenSize"
+            android:exported="false"
+            android:theme="@style/Theme.DroidVM.NoActionBar"
+            android:windowSoftInputMode="adjustNothing" />
+
         <provider
             android:name="androidx.core.content.FileProvider"
             android:authorities="${applicationId}.fileprovider"
diff --git a/app/src/main/cpp/CMakeLists.txt b/app/src/main/cpp/CMakeLists.txt
index 709e377d9..ac10ece18 100644
--- a/app/src/main/cpp/CMakeLists.txt
+++ b/app/src/main/cpp/CMakeLists.txt
@@ -27,6 +27,7 @@ set(CONSOLE_SOURCES
     console/commands/resume.cpp
     console/commands/powerbtn.cpp
     console/commands/sleepbtn.cpp
+    console/commands/usb.cpp
     console/commands/version.cpp
     console/commands/help.cpp
 )
diff --git a/app/src/main/cpp/console/command.cpp b/app/src/main/cpp/console/command.cpp
index 60f1fbacd..ea9fd71b7 100644
--- a/app/src/main/cpp/console/command.cpp
+++ b/app/src/main/cpp/console/command.cpp
@@ -82,6 +82,7 @@ std::unique_ptr<CommandRegistry> create_command_registry() {
     command_register_resume(*r);
     command_register_powerbtn(*r);
     command_register_sleepbtn(*r);
+    command_register_usb(*r);
     command_register_version(*r);
     command_register_help(*r);
     return r;
diff --git a/app/src/main/cpp/console/command.h b/app/src/main/cpp/console/command.h
index 901826cb0..ff78ad1ce 100644
--- a/app/src/main/cpp/console/command.h
+++ b/app/src/main/cpp/console/command.h
@@ -65,6 +65,8 @@ extern void command_register_powerbtn(CommandRegistry &registry);
 
 extern void command_register_sleepbtn(CommandRegistry &registry);
 
+extern void command_register_usb(CommandRegistry &registry);
+
 extern void command_register_version(CommandRegistry &registry);
 
 extern void command_register_help(CommandRegistry &registry);
diff --git a/app/src/main/cpp/console/commands/usb.cpp b/app/src/main/cpp/console/commands/usb.cpp
new file mode 100644
index 000000000..7d10c4ea6
--- /dev/null
+++ b/app/src/main/cpp/console/commands/usb.cpp
@@ -0,0 +1,295 @@
+#include "../command.h"
+#include "../ipc_proto.h"
+
+#include <cctype>
+#include <charconv>
+#include <cstdio>
+#include <cstring>
+#include <format>
+#include <fstream>
+#include <sstream>
+#include <string>
+
+// A detach names either the host device or the guest port it was given; an all-digit argument is
+// the port, because a sysfs name always carries a '-'.
+static bool is_all_digits(const char *s) {
+    if (!s || !*s) return false;
+    for (const char *p = s; *p; ++p)
+        if (!isdigit(static_cast<unsigned char>(*p))) return false;
+    return true;
+}
+
+class UsbListCommand : public Command {
+public:
+    [[nodiscard]] const char *name() const override { return "usb-list"; }
+
+    [[nodiscard]] const char *description() const override { return "List host USB devices"; }
+
+    [[nodiscard]] const char *usage() const override { return ""; }
+
+    [[nodiscard]] int min_args() const override { return 0; }
+
+    int run(int argc, char *argv[]) override;
+};
+
+int UsbListCommand::run(int, char *[]) {
+    auto ipc = IPCClient::get();
+    Json::Value req;
+    req["command"] = "usb_host_list";
+    print_response(ipc->send_request(req));
+    return 0;
+}
+
+class UsbAttachCommand : public Command {
+public:
+    [[nodiscard]] const char *name() const override { return "usb-attach"; }
+
+    [[nodiscard]] const char *description() const override { return "Attach a host USB device to a VM"; }
+
+    [[nodiscard]] const char *usage() const override { return "<vm_id> <sysfs>"; }
+
+    [[nodiscard]] int min_args() const override { return 2; }
+
+    int run(int argc, char *argv[]) override;
+};
+
+int UsbAttachCommand::run(int, char *argv[]) {
+    auto ipc = IPCClient::get();
+    auto vm_id = resolve_vm_id(argv[2]);
+    Json::Value req;
+    req["command"] = "usb_attach";
+    req["vm_id"] = vm_id;
+    req["device"] = argv[3];
+    print_response(ipc->send_request(req));
+    return 0;
+}
+
+class UsbDetachCommand : public Command {
+public:
+    [[nodiscard]] const char *name() const override { return "usb-detach"; }
+
+    [[nodiscard]] const char *description() const override { return "Detach a USB device from a VM"; }
+
+    [[nodiscard]] const char *usage() const override { return "<vm_id> <sysfs|port>"; }
+
+    [[nodiscard]] int min_args() const override { return 2; }
+
+    int run(int argc, char *argv[]) override;
+};
+
+int UsbDetachCommand::run(int, char *argv[]) {
+    auto ipc = IPCClient::get();
+    auto vm_id = resolve_vm_id(argv[2]);
+    Json::Value req;
+    req["command"] = "usb_detach";
+    req["vm_id"] = vm_id;
+    if (is_all_digits(argv[3])) {
+        // All-digit still says nothing about the range: a port wider than an int is a typo, and
+        // has to come back as a usage error rather than as a thrown exception.
+        int port = 0;
+        const char *end = argv[3] + strlen(argv[3]);
+        auto [stop, ec] = std::from_chars(argv[3], end, port);
+        if (ec != std::errc() || stop != end) {
+            fprintf(stderr, "Invalid port: %s\n", argv[3]);
+            return 1;
+        }
+        req["port"] = port;
+    } else {
+        req["device"] = argv[3];
+    }
+    print_response(ipc->send_request(req));
+    return 0;
+}
+
+class UsbVmCommand : public Command {
+public:
+    [[nodiscard]] const char *name() const override { return "usb-vm"; }
+
+    [[nodiscard]] const char *description() const override { return "List USB devices attached to a VM"; }
+
+    [[nodiscard]] const char *usage() const override { return "<vm_id>"; }
+
+    [[nodiscard]] int min_args() const override { return 1; }
+
+    int run(int argc, char *argv[]) override;
+};
+
+int UsbVmCommand::run(int, char *argv[]) {
+    auto ipc = IPCClient::get();
+    auto vm_id = resolve_vm_id(argv[2]);
+    Json::Value req;
+    req["command"] = "usb_vm_list";
+    req["vm_id"] = vm_id;
+    print_response(ipc->send_request(req));
+    return 0;
+}
+
+class UsbRulesCommand : public Command {
+public:
+    [[nodiscard]] const char *name() const override { return "usb-rules"; }
+
+    [[nodiscard]] const char *description() const override {
+        return "Show, dry-run or replace the USB auto-attach rules";
+    }
+
+    [[nodiscard]] const char *usage() const override { return "[test | set <file>]"; }
+
+    [[nodiscard]] int min_args() const override { return 0; }
+
+    int run(int argc, char *argv[]) override;
+
+private:
+    static int show();
+
+    static int test();
+
+    static int set(const char *path);
+};
+
+int UsbRulesCommand::run(int argc, char *argv[]) {
+    if (argc < 3) return show();
+    if (strcmp(argv[2], "test") == 0) return test();
+    if (strcmp(argv[2], "set") == 0) {
+        if (argc < 4) {
+            fprintf(stderr, "Usage: %s usb-rules set <file>\n", argv[0]);
+            return 1;
+        }
+        return set(argv[3]);
+    }
+    fprintf(stderr, "Unknown usb-rules subcommand: %s\n", argv[2]);
+    return 1;
+}
+
+int UsbRulesCommand::show() {
+    auto ipc = IPCClient::get();
+    Json::Value req;
+    req["command"] = "usb_rules_get";
+    auto resp = ipc->send_request(req);
+    // The master switch on its own line first: it makes every rule below it inert, and a reader
+    // scanning a long rule set should not have to find that out from one key inside the JSON.
+    // On stderr, because it is a header for a person: stdout stays the file `set` reads back, so
+    // `usb-rules > rules.json && usb-rules set rules.json` goes on working.
+    auto rules = resp["rules"];
+    fprintf(stderr, "passthrough: %s\n",
+            rules.get("enabled", true).asBool() ? "enabled" : "disabled");
+    // The rules alone: this is the file the UI writes, so what prints is what `set` reads back.
+    printf("%s\n", IPCClient::json_to_string(rules, true).c_str());
+    return 0;
+}
+
+// What a rule pass would do with a device, in one word or one address. A rule that names a
+// controller inside its VM says so after a slash; one that names none means the VM's first.
+static std::string describe_result(const Json::Value &result) {
+    if (result.isNull()) return "none";
+    // A sink leaves the device to nobody: it names no VM, and it is not the host keeping it.
+    auto outcome = result.get("target", Json::Value::null);
+    std::string where;
+    if (!outcome.isNull() && outcome.asString() == "sink") {
+        where = "sink";
+    } else if (auto vm = result.get("vm", Json::Value::null); vm.isNull()) {
+        where = "host";
+    } else {
+        auto controller = result.get("controller", Json::Value::null);
+        where = controller.isNull()
+                    ? vm.asString()
+                    : std::format("{}/{}", vm.asString(), controller.asString());
+    }
+    // The daemon sends an explicit null layer for a device no rule in the file matched: the
+    // fifth zone is the engine's default rather than a row, it is at no index, and printing
+    // "[-1]" would send a reader looking for a rule that is in no file and on no page.
+    // get() would not help -- the key is there, it is its value that is null.
+    if (result["layer"].isNull()) return std::format("no rule matched -> {}", where);
+    return std::format("{}[{}] -> {}", result["layer"].asString(),
+                       result.get("index", 0).asInt(), where);
+}
+
+int UsbRulesCommand::test() {
+    auto ipc = IPCClient::get();
+    Json::Value req;
+    req["command"] = "usb_rules_test";
+    auto resp = ipc->send_request(req);
+    // The switch first: off, every row below reads "none" for the same reason, and this is the
+    // command a person runs to ask why a rule did not fire.
+    printf("passthrough: %s\n",
+           resp.get("enabled", true).asBool() ? "enabled" : "disabled");
+    // STATE and LOCK are the two things that decide whether a rule may speak for a device at
+    // all: what it is doing, read off the drivers bound to its interfaces, and whether the user
+    // has already decided about it by hand.
+    printf("%-10s %-30s %-8s %-8s %-5s %-36s %s\n",
+           "SYSFS", "ID", "PORT", "STATE", "LOCK", "ATTACHED_VM", "RESULT");
+    for (const auto &dev: resp["devices"]) {
+        auto attached = dev.get("attached_vm", Json::Value::null);
+        printf("%-10s %-30s %-8s %-8s %-5s %-36s %s\n",
+               dev.get("sysfs", "").asCString(),
+               dev.get("id", "").asCString(),
+               dev.get("port", "").asCString(),
+               dev.get("state", "").asCString(),
+               dev.get("lock", false).asBool() ? "yes" : "no",
+               attached.isNull() ? "-" : attached.asCString(),
+               describe_result(dev.get("result", Json::Value::null)).c_str());
+    }
+    return 0;
+}
+
+int UsbRulesCommand::set(const char *path) {
+    std::ifstream in(path);
+    if (!in) {
+        fprintf(stderr, "Cannot open %s\n", path);
+        return 1;
+    }
+    std::stringstream buf;
+    buf << in.rdbuf();
+    auto ipc = IPCClient::get();
+    Json::Value req;
+    req["command"] = "usb_rules_set";
+    req["rules"] = IPCClient::parse_json(buf.str());
+    print_response(ipc->send_request(req));
+    return 0;
+}
+
+// The direct action, and the way to check the whole feature from a shell: no rules are read,
+// written or re-run, and the device goes where the argument says.
+class UsbTargetCommand : public Command {
+public:
+    [[nodiscard]] const char *name() const override { return "usb-target"; }
+
+    [[nodiscard]] const char *description() const override {
+        return "Send one USB device to the host, a VM or the sink, without touching the rules";
+    }
+
+    [[nodiscard]] const char *usage() const override {
+        return "<sysfs> host|sink|<vm_id>[/<controller>]";
+    }
+
+    [[nodiscard]] int min_args() const override { return 2; }
+
+    int run(int argc, char *argv[]) override;
+};
+
+int UsbTargetCommand::run(int, char *argv[]) {
+    auto ipc = IPCClient::get();
+    Json::Value req;
+    req["command"] = "usb_set_target";
+    req["device"] = argv[2];
+    std::string target = argv[3];
+    if (target == "host" || target == "sink") {
+        req["target"] = target;
+    } else {
+        // A VM, and after a slash the controller inside it; without one the VM's first.
+        auto slash = target.find('/');
+        req["target"] = "vm";
+        req["vm_id"] = resolve_vm_id(target.substr(0, slash));
+        if (slash != std::string::npos) req["controller"] = target.substr(slash + 1);
+    }
+    print_response(ipc->send_request(req));
+    return 0;
+}
+
+void command_register_usb(CommandRegistry &registry) {
+    registry.register_command(std::make_unique<UsbListCommand>());
+    registry.register_command(std::make_unique<UsbAttachCommand>());
+    registry.register_command(std::make_unique<UsbDetachCommand>());
+    registry.register_command(std::make_unique<UsbVmCommand>());
+    registry.register_command(std::make_unique<UsbRulesCommand>());
+    registry.register_command(std::make_unique<UsbTargetCommand>());
+}
diff --git a/app/src/main/cpp/unixhelper/unixhelper.c b/app/src/main/cpp/unixhelper/unixhelper.c
index c6a9b5d32..af2d12854 100644
--- a/app/src/main/cpp/unixhelper/unixhelper.c
+++ b/app/src/main/cpp/unixhelper/unixhelper.c
@@ -7,6 +7,7 @@
 #include <poll.h>
 #include <sys/socket.h>
 #include <sys/un.h>
+#include <linux/netlink.h>
 #include <android/log.h>
 #include <android/log.h>
 #include <stdio.h>
@@ -217,6 +218,97 @@ JNI_PREFIX(nativePollIn)(
     return 0;
 }
 
+/*
+ * The kernel's uevent multicast socket, which is the only place a driver bind or unbind is
+ * reported. Everything else this daemon watches moves a node under /dev/bus/usb and so raises an
+ * inotify event, but binding or unbinding a driver moves nothing: the interface directory stays,
+ * the device node stays, and only the driver symlink comes or goes. Measured on the phone --
+ * unbinding usbhid from 1-1.6:1.0 left the node set byte-identical and still pushed the kernel's
+ * uevent sequence number by five.
+ *
+ * Group 1 is the kernel's own group; nl_pid 0 asks the kernel to pick an address, so several
+ * sockets in one process do not collide. The receive buffer is raised best-effort because a
+ * whole tree re-enumerating is a burst and a dropped datagram is a missed change.
+ */
+JNIEXPORT jint JNICALL
+JNI_PREFIX(nativeUeventOpen)(
+    JNIEnv *env, jclass clazz
+) {
+    (void) env;
+    (void) clazz;
+    int fd = socket(PF_NETLINK, SOCK_DGRAM | SOCK_CLOEXEC, NETLINK_KOBJECT_UEVENT);
+    if (fd < 0) {
+        LOGW("uevent socket() failed: %s", strerror(errno));
+        return -1;
+    }
+    int size = 1 << 20;
+    if (setsockopt(fd, SOL_SOCKET, SO_RCVBUFFORCE, &size, sizeof(size)) < 0)
+        setsockopt(fd, SOL_SOCKET, SO_RCVBUF, &size, sizeof(size));
+    struct sockaddr_nl addr;
+    memset(&addr, 0, sizeof(addr));
+    addr.nl_family = AF_NETLINK;
+    addr.nl_pid = 0;
+    addr.nl_groups = 1;
+    if (bind(fd, (struct sockaddr *) &addr, sizeof(addr)) < 0) {
+        LOGW("uevent bind() failed: %s", strerror(errno));
+        close(fd);
+        return -1;
+    }
+    LOGI("uevent socket -> %d", fd);
+    return fd;
+}
+
+/*
+ * poll() over two descriptors, for a reader that has to be stoppable without a standing timeout.
+ * Returns a bitmask -- 1 for the first, 2 for the second -- 0 on timeout, -1 on error and -2 when
+ * either side hung up. The second descriptor is normally the read end of a pipe somebody writes a
+ * byte to in order to end the loop, which is what keeps a watcher that may live for the whole
+ * daemon from waking the phone on a timer just to ask whether it should stop.
+ */
+JNIEXPORT jint JNICALL
+JNI_PREFIX(nativePollIn2)(
+    JNIEnv *env, jclass clazz, jint fd1, jint fd2, jint timeoutMs
+) {
+    (void) env;
+    (void) clazz;
+    struct pollfd pfds[2];
+    pfds[0].fd = fd1;
+    pfds[0].events = POLLIN;
+    pfds[0].revents = 0;
+    pfds[1].fd = fd2;
+    pfds[1].events = POLLIN;
+    pfds[1].revents = 0;
+    int ret;
+    do {
+        ret = poll(pfds, 2, timeoutMs);
+    } while (ret < 0 && errno == EINTR);
+    if (ret < 0) return -1;
+    if (ret == 0) return 0;
+    if ((pfds[0].revents | pfds[1].revents) & (POLLERR | POLLHUP | POLLNVAL)) return -2;
+    jint mask = 0;
+    if (pfds[0].revents & POLLIN) mask |= 1;
+    if (pfds[1].revents & POLLIN) mask |= 2;
+    return mask;
+}
+
+JNIEXPORT jint JNICALL
+JNI_PREFIX(nativeWrite)(
+    JNIEnv *env, jclass clazz, jint fd, jbyteArray buf, jint len
+) {
+    (void) clazz;
+    if (!buf) return -1;
+    jint arrLen = (*env)->GetArrayLength(env, buf);
+    if (len > arrLen) len = arrLen;
+    jbyte *bytes = (*env)->GetByteArrayElements(env, buf, NULL);
+    if (!bytes) return -1;
+    ssize_t n;
+    do {
+        n = write(fd, bytes, len);
+    } while (n < 0 && errno == EINTR);
+    (*env)->ReleaseByteArrayElements(env, buf, bytes, JNI_ABORT);
+    return (jint) n;
+}
+
 JNIEXPORT jint JNICALL
 JNI_PREFIX(nativeRead)(
     JNIEnv *env, jclass clazz, jint fd, jbyteArray buf, jint len
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/Daemon.java b/app/src/main/java/cn/classfun/droidvm/daemon/Daemon.java
index 65527212f..7721471e9 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/Daemon.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/Daemon.java
@@ -188,7 +188,18 @@ private static void cleanup(Server server) {
         if (!cleaned.compareAndSet(false, true)) return;
         Log.i(TAG, "Stopping all VMs and networks...");
         var ctx = server.getContext();
-        ctx.getVMs().stopAll();
+        try {
+            ctx.getVMs().stopAll();
+        } finally {
+            // After the VMs, not before: stopping them only queues the USB releases, and the
+            // interfaces are handed back to the host from that queue. In a finally, because the
+            // first thing that shutdown does is put /sys/bus/usb/drivers_autoprobe back to the
+            // kernel's default: that flag is global and outlives this process, so a stop that
+            // throws on its way past here would leave every device plugged into the phone
+            // afterwards with no driver bound -- no keyboard, no storage -- and no daemon left
+            // to write it back.
+            ctx.getUsb().shutdown();
+        }
         ctx.getNetworks().stopAll();
         ctx.getNetworks().firewall.shutdown();
         ctx.getRouterWatcher().stop();
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/console/ConsoleStream.java b/app/src/main/java/cn/classfun/droidvm/daemon/console/ConsoleStream.java
index d5ab73077..70ad762fb 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/console/ConsoleStream.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/console/ConsoleStream.java
@@ -37,6 +37,11 @@ public abstract class ConsoleStream implements Closeable, JSONSerialize {
     protected final VMConfig config;
     protected final String name;
     protected final RingBuffer buffer = new RingBuffer(MAX_BUFFER_SIZE);
+    /**
+     * How many bytes have ever been appended, so a reader can ask for what came after a point.
+     * Guarded by [buffer].
+     */
+    private long appended = 0;
     private Thread readerThread;
     private OutputStream logWriter = null;
     private boolean disableSave = false;
@@ -86,7 +91,10 @@ public void appendBuffer(@NonNull byte[] data) {
     }
 
     public void appendBuffer(@NonNull byte[] data, int off, int len) {
-        buffer.adds(data, off, len);
+        synchronized (buffer) {
+            buffer.adds(data, off, len);
+            appended += len;
+        }
         if (disableSave || !persistentLogEnabled) return;
         try {
             if (logWriter == null) {
@@ -157,6 +165,34 @@ public String getBuffer() {
         return new String(buffer.peekAll(), UTF_8);
     }
 
+    /**
+     * A point in the stream for {@link #since}: how many bytes have been appended so far. Constant
+     * time, so taking one before an operation whose outcome may need the log costs nothing.
+     */
+    public long mark() {
+        synchronized (buffer) {
+            return appended;
+        }
+    }
+
+    /**
+     * Everything appended after [mark] was taken, as far as the buffer still holds it: it keeps
+     * the last {@link #MAX_BUFFER_SIZE} bytes, so a mark older than that yields all of them.
+     */
+    @NonNull
+    public String since(long mark) {
+        byte[] all;
+        long total;
+        synchronized (buffer) {
+            all = buffer.peekAll();
+            total = appended;
+        }
+        var count = total - mark;
+        if (count <= 0) return "";
+        if (count >= all.length) return new String(all, UTF_8);
+        return new String(all, all.length - (int) count, (int) count, UTF_8);
+    }
+
     @NonNull
     @SuppressWarnings("unused")
     public byte[] getRawBuffer() {
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/ipc/usb/UsbAttachHandler.java b/app/src/main/java/cn/classfun/droidvm/daemon/ipc/usb/UsbAttachHandler.java
new file mode 100644
index 000000000..edb2bfed7
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/ipc/usb/UsbAttachHandler.java
@@ -0,0 +1,49 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
+package cn.classfun.droidvm.daemon.ipc.usb;
+
+import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
+
+import androidx.annotation.NonNull;
+
+import com.google.auto.service.AutoService;
+
+import org.json.JSONObject;
+
+import cn.classfun.droidvm.daemon.server.ClientRequest;
+import cn.classfun.droidvm.daemon.server.RequestException;
+import cn.classfun.droidvm.daemon.server.RequestHandler;
+
+@AutoService(RequestHandler.class)
+public final class UsbAttachHandler extends RequestHandler {
+    @NonNull
+    @Override
+    public String getName() {
+        return "usb_attach";
+    }
+
+    @Override
+    public void handle(@NonNull ClientRequest request) throws Exception {
+        var params = request.getParams();
+        var vmId = params.optString("vm_id", "");
+        if (vmId.isEmpty())
+            throw new RequestException("missing vm_id");
+        var vms = request.getContext().getVMs();
+        var inst = vms.findById(vmId);
+        if (inst == null)
+            throw new RequestException(fmt("VM not found: %s", vmId));
+        var device = params.optString("device", "");
+        if (device.isEmpty())
+            throw new RequestException("missing device");
+        var manager = request.getContext().getUsb();
+        var port = manager.attach(inst, device);
+        var controller = manager.attachedController(device);
+        var res = request.res();
+        res.put("vm_id", vmId);
+        res.put("device", device);
+        res.put("port", port);
+        // Which xHCI it landed on: the rule named one or it did not, and only the attach knows.
+        res.put("controller", controller == null ? JSONObject.NULL : controller);
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/ipc/usb/UsbDetachHandler.java b/app/src/main/java/cn/classfun/droidvm/daemon/ipc/usb/UsbDetachHandler.java
new file mode 100644
index 000000000..8733106a3
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/ipc/usb/UsbDetachHandler.java
@@ -0,0 +1,43 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
+package cn.classfun.droidvm.daemon.ipc.usb;
+
+import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
+
+import androidx.annotation.NonNull;
+
+import com.google.auto.service.AutoService;
+
+import cn.classfun.droidvm.daemon.server.ClientRequest;
+import cn.classfun.droidvm.daemon.server.RequestException;
+import cn.classfun.droidvm.daemon.server.RequestHandler;
+
+@AutoService(RequestHandler.class)
+public final class UsbDetachHandler extends RequestHandler {
+    @NonNull
+    @Override
+    public String getName() {
+        return "usb_detach";
+    }
+
+    @Override
+    public void handle(@NonNull ClientRequest request) throws Exception {
+        var params = request.getParams();
+        var vmId = params.optString("vm_id", "");
+        if (vmId.isEmpty())
+            throw new RequestException("missing vm_id");
+        var vms = request.getContext().getVMs();
+        var inst = vms.findById(vmId);
+        if (inst == null)
+            throw new RequestException(fmt("VM not found: %s", vmId));
+        var device = params.optString("device", "");
+        // Either address works: the sysfs name the caller attached, or the port it was given back.
+        // A JSON null is a caller that sent the key without a value, which is not an address.
+        Integer port = params.has("port") && !params.isNull("port")
+            ? params.optInt("port", -1) : null;
+        if (device.isEmpty() && port == null)
+            throw new RequestException("missing device or port");
+        request.getContext().getUsb().detach(inst, device.isEmpty() ? null : device, port);
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/ipc/usb/UsbHostListHandler.java b/app/src/main/java/cn/classfun/droidvm/daemon/ipc/usb/UsbHostListHandler.java
new file mode 100644
index 000000000..ae6ebd6bc
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/ipc/usb/UsbHostListHandler.java
@@ -0,0 +1,27 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
+package cn.classfun.droidvm.daemon.ipc.usb;
+
+import androidx.annotation.NonNull;
+
+import com.google.auto.service.AutoService;
+
+import cn.classfun.droidvm.daemon.server.ClientRequest;
+import cn.classfun.droidvm.daemon.server.RequestHandler;
+
+@AutoService(RequestHandler.class)
+public final class UsbHostListHandler extends RequestHandler {
+    @NonNull
+    @Override
+    public String getName() {
+        return "usb_host_list";
+    }
+
+    @Override
+    public void handle(@NonNull ClientRequest request) throws Exception {
+        var manager = request.getContext().getUsb();
+        var res = request.res();
+        res.put("devices", manager.hostList());
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/ipc/usb/UsbRulesGetHandler.java b/app/src/main/java/cn/classfun/droidvm/daemon/ipc/usb/UsbRulesGetHandler.java
new file mode 100644
index 000000000..9b3b758d2
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/ipc/usb/UsbRulesGetHandler.java
@@ -0,0 +1,26 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
+package cn.classfun.droidvm.daemon.ipc.usb;
+
+import androidx.annotation.NonNull;
+
+import com.google.auto.service.AutoService;
+
+import cn.classfun.droidvm.daemon.server.ClientRequest;
+import cn.classfun.droidvm.daemon.server.RequestHandler;
+
+@AutoService(RequestHandler.class)
+public final class UsbRulesGetHandler extends RequestHandler {
+    @NonNull
+    @Override
+    public String getName() {
+        return "usb_rules_get";
+    }
+
+    @Override
+    public void handle(@NonNull ClientRequest request) throws Exception {
+        var res = request.res();
+        res.put("rules", request.getContext().getUsb().getRules().toJson());
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/ipc/usb/UsbRulesSetHandler.java b/app/src/main/java/cn/classfun/droidvm/daemon/ipc/usb/UsbRulesSetHandler.java
new file mode 100644
index 000000000..2dd34af9a
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/ipc/usb/UsbRulesSetHandler.java
@@ -0,0 +1,31 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
+package cn.classfun.droidvm.daemon.ipc.usb;
+
+import androidx.annotation.NonNull;
+
+import com.google.auto.service.AutoService;
+
+import cn.classfun.droidvm.daemon.server.ClientRequest;
+import cn.classfun.droidvm.daemon.server.RequestException;
+import cn.classfun.droidvm.daemon.server.RequestHandler;
+
+@AutoService(RequestHandler.class)
+public final class UsbRulesSetHandler extends RequestHandler {
+    @NonNull
+    @Override
+    public String getName() {
+        return "usb_rules_set";
+    }
+
+    @Override
+    public void handle(@NonNull ClientRequest request) throws Exception {
+        var rules = request.getParams().optJSONObject("rules");
+        if (rules == null)
+            throw new RequestException("missing rules");
+        var applied = request.getContext().getUsb().setRules(rules);
+        var res = request.res();
+        res.put("applied", applied);
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/ipc/usb/UsbRulesTestHandler.java b/app/src/main/java/cn/classfun/droidvm/daemon/ipc/usb/UsbRulesTestHandler.java
new file mode 100644
index 000000000..3223d4aa4
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/ipc/usb/UsbRulesTestHandler.java
@@ -0,0 +1,31 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
+package cn.classfun.droidvm.daemon.ipc.usb;
+
+import androidx.annotation.NonNull;
+
+import com.google.auto.service.AutoService;
+
+import cn.classfun.droidvm.daemon.server.ClientRequest;
+import cn.classfun.droidvm.daemon.server.RequestHandler;
+
+/** A dry run of the rules over every plugged device: reports what each would do, attaches none. */
+@AutoService(RequestHandler.class)
+public final class UsbRulesTestHandler extends RequestHandler {
+    @NonNull
+    @Override
+    public String getName() {
+        return "usb_rules_test";
+    }
+
+    @Override
+    public void handle(@NonNull ClientRequest request) throws Exception {
+        var res = request.res();
+        var usb = request.getContext().getUsb();
+        // The switch beside the dry run, because off it is the answer to every row: a rule set
+        // that matches nothing and one that is not allowed to run read the same in the table.
+        res.put("enabled", usb.getRules().isEnabled());
+        res.put("devices", usb.testRules());
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/ipc/usb/UsbSetTargetHandler.java b/app/src/main/java/cn/classfun/droidvm/daemon/ipc/usb/UsbSetTargetHandler.java
new file mode 100644
index 000000000..a1efa48bd
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/ipc/usb/UsbSetTargetHandler.java
@@ -0,0 +1,63 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
+package cn.classfun.droidvm.daemon.ipc.usb;
+
+import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
+
+import androidx.annotation.NonNull;
+
+import com.google.auto.service.AutoService;
+
+import cn.classfun.droidvm.daemon.server.ClientRequest;
+import cn.classfun.droidvm.daemon.server.RequestException;
+import cn.classfun.droidvm.daemon.server.RequestHandler;
+import cn.classfun.droidvm.daemon.usb.UsbRules;
+
+/**
+ * Puts one device where the caller says, now: the management page's direct action. It is not a
+ * rules edit and does not run the rules -- what it does is hand this one device to a VM, to the
+ * host drivers, or to nobody, and lock it so the next pass leaves it alone. A move to a VM is
+ * the one that unlocks instead: the attachment is the shield from then on.
+ */
+@AutoService(RequestHandler.class)
+public final class UsbSetTargetHandler extends RequestHandler {
+    @NonNull
+    @Override
+    public String getName() {
+        return "usb_set_target";
+    }
+
+    @Override
+    public void handle(@NonNull ClientRequest request) throws Exception {
+        var params = request.getParams();
+        // The same addressing as usb_attach: the sysfs name, never the guest port, because two
+        // of the three targets are about a device no VM holds.
+        var device = params.optString("device", "");
+        if (device.isEmpty())
+            throw new RequestException("missing device");
+        var wanted = params.optString("target", "");
+        var target = UsbRules.Target.fromKey(wanted);
+        if (target == null)
+            throw new RequestException(fmt("unknown target: %s", wanted));
+        var vms = request.getContext().getVMs();
+        var vmId = params.optString("vm_id", "");
+        var inst = vmId.isEmpty() ? null : vms.findById(vmId);
+        if (target == UsbRules.Target.VM) {
+            if (vmId.isEmpty())
+                throw new RequestException("missing vm_id");
+            if (inst == null)
+                throw new RequestException(fmt("VM not found: %s", vmId));
+        }
+        var controller = params.optString("controller", "");
+        var result = request.getContext().getUsb().setTarget(device, target,
+            target == UsbRules.Target.VM ? inst : null,
+            controller.isEmpty() ? null : controller);
+        var res = request.res();
+        var keys = result.keys();
+        while (keys.hasNext()) {
+            var key = keys.next();
+            res.put(key, result.get(key));
+        }
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/ipc/usb/UsbVmListHandler.java b/app/src/main/java/cn/classfun/droidvm/daemon/ipc/usb/UsbVmListHandler.java
new file mode 100644
index 000000000..f31e63d4a
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/ipc/usb/UsbVmListHandler.java
@@ -0,0 +1,37 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
+package cn.classfun.droidvm.daemon.ipc.usb;
+
+import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
+
+import androidx.annotation.NonNull;
+
+import com.google.auto.service.AutoService;
+
+import cn.classfun.droidvm.daemon.server.ClientRequest;
+import cn.classfun.droidvm.daemon.server.RequestException;
+import cn.classfun.droidvm.daemon.server.RequestHandler;
+
+@AutoService(RequestHandler.class)
+public final class UsbVmListHandler extends RequestHandler {
+    @NonNull
+    @Override
+    public String getName() {
+        return "usb_vm_list";
+    }
+
+    @Override
+    public void handle(@NonNull ClientRequest request) throws Exception {
+        var params = request.getParams();
+        var vmId = params.optString("vm_id", "");
+        if (vmId.isEmpty())
+            throw new RequestException("missing vm_id");
+        var vms = request.getContext().getVMs();
+        if (vms.findById(vmId) == null)
+            throw new RequestException(fmt("VM not found: %s", vmId));
+        var res = request.res();
+        res.put("vm_id", vmId);
+        res.put("devices", request.getContext().getUsb().vmList(vmId));
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/server/Server.java b/app/src/main/java/cn/classfun/droidvm/daemon/server/Server.java
index 263774d9e..937247043 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/server/Server.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/server/Server.java
@@ -49,6 +49,11 @@ public Server() {
                 Log.w(TAG, "Failed to broadcast VM event", e);
             }
         });
+        try {
+            context.getUsb().start(this::broadcastEvent);
+        } catch (Exception e) {
+            Log.w(TAG, "usb: manager failed to start", e);
+        }
     }
 
     @NonNull
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/server/ServerContext.java b/app/src/main/java/cn/classfun/droidvm/daemon/server/ServerContext.java
index 9e1b1429b..8a2db4c0b 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/server/ServerContext.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/server/ServerContext.java
@@ -20,6 +20,7 @@
 
 import cn.classfun.droidvm.daemon.network.NetworkInstanceStore;
 import cn.classfun.droidvm.daemon.network.backend.DefaultRouterWatcher;
+import cn.classfun.droidvm.daemon.usb.UsbPassthroughManager;
 import cn.classfun.droidvm.daemon.vm.VMInstance;
 import cn.classfun.droidvm.daemon.vm.VMInstanceStore;
 import cn.classfun.droidvm.daemon.vm.pkg.VMExportTask;
@@ -31,6 +32,7 @@ public final class ServerContext {
     private final VMInstanceStore vms = new VMInstanceStore(this);
     private final NetworkInstanceStore networks = new NetworkInstanceStore(this);
     private final DefaultRouterWatcher routerWatcher = new DefaultRouterWatcher(this);
+    private final UsbPassthroughManager usb = new UsbPassthroughManager(this);
     private final Map<UUID, VMExportTask> exportTasks = new ConcurrentHashMap<>();
     private final Map<UUID, VMImportTask> importTasks = new ConcurrentHashMap<>();
     public DataItem appConfig = DataItem.newObject();
@@ -99,6 +101,11 @@ public DefaultRouterWatcher getRouterWatcher() {
         return routerWatcher;
     }
 
+    @NonNull
+    public UsbPassthroughManager getUsb() {
+        return usb;
+    }
+
     @NonNull
     public Map<UUID, VMExportTask> getExportTaskStore() {
         return exportTasks;
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/usb/CrosvmUsbControl.java b/app/src/main/java/cn/classfun/droidvm/daemon/usb/CrosvmUsbControl.java
new file mode 100644
index 000000000..7fbb0f9c0
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/usb/CrosvmUsbControl.java
@@ -0,0 +1,272 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
+package cn.classfun.droidvm.daemon.usb;
+
+import static cn.classfun.droidvm.lib.Constants.DATA_DIR;
+import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
+import static cn.classfun.droidvm.lib.utils.StringUtils.pathJoin;
+import static cn.classfun.droidvm.lib.utils.StringUtils.streamToString;
+
+import android.os.Build;
+import android.util.Log;
+
+import androidx.annotation.NonNull;
+import androidx.annotation.Nullable;
+
+import java.io.IOException;
+import java.io.InputStream;
+import java.util.ArrayList;
+import java.util.List;
+import java.util.concurrent.TimeUnit;
+import java.util.regex.Pattern;
+
+import cn.classfun.droidvm.lib.natives.NativeProcess;
+
+/**
+ * The {@code crosvm usb} sub-commands, run against one VM's control socket.
+ *
+ * <p>Attaching cannot be done over the control socket ourselves: crosvm opens the usbfs node in
+ * its own process and passes the fd across, so the fd has to come from a crosvm process. The
+ * bundled CLI is that process, and it prints exactly one line per command.</p>
+ */
+public final class CrosvmUsbControl {
+    private static final String TAG = "CrosvmUsbControl";
+    /** A control-socket round trip that has not answered by now is not going to. */
+    private static final long TIMEOUT_SECONDS = 15;
+    /** How long a killed child gets to be reaped before we stop waiting for it. */
+    private static final long TIMEOUT_KILL_SECONDS = 2;
+    /** What vm_control prints when the CLI cannot reach the control socket at all. */
+    private static final String CONNECT_FAILED = "failed to connect to socket";
+    /**
+     * One line of crosvm's log: {@code [<time> ERROR <target>] <message>}. The time is what the
+     * VMM's logger adds; a build without it prints {@code [ERROR <target>]}, so it is optional.
+     */
+    private static final Pattern ERROR_LINE =
+        Pattern.compile("^\\[(?:\\S+\\s+)?ERROR\\s+([^\\]\\s]*)\\]\\s*(.*)$");
+
+    /** One line of {@code crosvm usb list}. */
+    public static final class Entry {
+        public final int port;
+        public final String vid;
+        public final String pid;
+
+        Entry(int port, @NonNull String vid, @NonNull String pid) {
+            this.port = port;
+            this.vid = vid;
+            this.pid = pid;
+        }
+    }
+
+    private static final class Output {
+        final String stdout;
+        final String stderr;
+
+        Output(@NonNull String stdout, @NonNull String stderr) {
+            this.stdout = stdout;
+            this.stderr = stderr;
+        }
+    }
+
+    private final String crosvmBinary;
+    private final String socketPath;
+
+    public CrosvmUsbControl(@NonNull String crosvmBinary, @NonNull String socketPath) {
+        this.crosvmBinary = crosvmBinary;
+        this.socketPath = socketPath;
+    }
+
+    /** Hands [node] to the VMM, which claims every interface on it. Returns the guest port. */
+    public int attach(@NonNull String node) throws IOException, UsbControlException {
+        var output = exec(crosvmBinary, "usb", "attach", "0:0:0:0", node, socketPath);
+        requireOutput(output);
+        try {
+            return parseAttach(output.stdout);
+        } catch (UsbControlException e) {
+            throw new UsbControlException(e.token, output.stderr);
+        }
+    }
+
+    public int detach(int port) throws IOException, UsbControlException {
+        var output = exec(crosvmBinary, "usb", "detach", String.valueOf(port), socketPath);
+        requireOutput(output);
+        try {
+            return parseDetach(output.stdout);
+        } catch (UsbControlException e) {
+            throw new UsbControlException(e.token, output.stderr);
+        }
+    }
+
+    @NonNull
+    public List<Entry> list() throws IOException, UsbControlException {
+        var output = exec(crosvmBinary, "usb", "list", socketPath);
+        requireOutput(output);
+        try {
+            return parseList(output.stdout);
+        } catch (UsbControlException e) {
+            throw new UsbControlException(e.token, output.stderr);
+        }
+    }
+
+    /**
+     * A CLI that died before printing has no refusal token to report, and an empty token would
+     * name a failure that never happened; what went wrong is on stderr instead. One such
+     * failure is told apart: the CLI never reached the VMM, which is about the socket and not
+     * about the device.
+     */
+    private static void requireOutput(@NonNull Output output) throws IOException {
+        if (!output.stdout.trim().isEmpty()) return;
+        if (isUnreachable(output.stderr))
+            throw new UsbVmmUnreachableException(output.stderr);
+        throw new IOException(fmt("crosvm usb printed nothing; stderr: %s", output.stderr));
+    }
+
+    /**
+     * Whether [stderr] is the CLI saying it could not connect to the control socket -- the VMM
+     * not listening yet, or gone -- rather than anything the VMM or the device answered.
+     */
+    static boolean isUnreachable(@NonNull String stderr) {
+        return stderr.contains(CONNECT_FAILED);
+    }
+
+    @NonNull
+    private Output exec(@NonNull String... argv) throws IOException {
+        var builder = new NativeProcess.Builder(argv);
+        // Same two lines as VMBackendInstance.prepareProcess: the CLI is the same binary as the
+        // VMM and needs the same loader environment. prepareProcess is protected on an abstract
+        // class and there is no backend instance to call it on here, so it is copied rather than
+        // reused.
+        String[] preload = {
+            pathJoin(DATA_DIR, "lib", "libsimpledump.so"),
+            pathJoin(DATA_DIR, "lib", fmt("libcompat_a%s.so", Build.VERSION.RELEASE)),
+        };
+        builder.environment("LD_PRELOAD", String.join(":", preload));
+        builder.environment("LD_LIBRARY_PATH", pathJoin(DATA_DIR, "usr", "lib"));
+        Log.i(TAG, fmt("Executing: %s", String.join(" ", argv)));
+        try (var process = builder.start()) {
+            // Both pipes have to be drained or the child blocks on a full one -- and both on
+            // their own threads: stdout only reaches EOF when the child exits, so reading it
+            // here would run past the timeout below instead of enforcing it, which is exactly
+            // the case the timeout exists for (a CLI stuck on an unanswered control socket).
+            var stdoutHolder = new String[]{""};
+            var stderrHolder = new String[]{""};
+            var stdoutReader = drain(process.getInputStream(), stdoutHolder, "crosvm-usb-stdout");
+            var stderrReader = drain(process.getErrorStream(), stderrHolder, "crosvm-usb-stderr");
+            if (!process.waitFor(TIMEOUT_SECONDS, TimeUnit.SECONDS)) {
+                // SIGKILL, not SIGTERM: this one is already not answering. Reap it afterwards,
+                // because nothing else ever waits on the pid.
+                process.destroyForcibly();
+                process.waitFor(TIMEOUT_KILL_SECONDS, TimeUnit.SECONDS);
+                throw new IOException(fmt("crosvm usb did not answer in %ds", TIMEOUT_SECONDS));
+            }
+            stdoutReader.join(TimeUnit.SECONDS.toMillis(1));
+            stderrReader.join(TimeUnit.SECONDS.toMillis(1));
+            var stderr = stderrHolder[0].trim();
+            if (!stderr.isEmpty()) Log.w(TAG, fmt("crosvm usb stderr: %s", stderr));
+            return new Output(stdoutHolder[0], stderr);
+        } catch (InterruptedException e) {
+            Thread.currentThread().interrupt();
+            throw new IOException("Interrupted while waiting for crosvm usb", e);
+        }
+    }
+
+    /** Reads [stream] to EOF into [holder] on a daemon thread; join it to see what it got. */
+    @NonNull
+    private static Thread drain(@NonNull InputStream stream, @NonNull String[] holder,
+                                @NonNull String name) {
+        var thread = new Thread(() -> {
+            try {
+                holder[0] = streamToString(stream);
+            } catch (IOException e) {
+                Log.w(TAG, fmt("Failed to read %s", name), e);
+            }
+        }, name);
+        thread.setDaemon(true);
+        thread.start();
+        return thread;
+    }
+
+    /**
+     * The message of the first ERROR line crosvm logged in [text], or null when there is none.
+     * A USB one wins over an earlier unrelated one -- the GPU logs errors of its own, and it is
+     * the attach that is being explained -- but any ERROR beats the bare token.
+     */
+    @Nullable
+    static String firstErrorLine(@NonNull String text) {
+        String any = null;
+        for (var raw : text.split("\n")) {
+            var m = ERROR_LINE.matcher(raw.trim());
+            if (!m.matches()) continue;
+            var message = m.group(2).trim();
+            if (message.isEmpty()) continue;
+            if (m.group(1).contains("usb")) return message;
+            if (any == null) any = message;
+        }
+        return any;
+    }
+
+    /**
+     * What an attach refusal is reported as. The token alone names the symptom -- on device,
+     * {@code no_available_port} for a hub whose event ring had died -- and hides the cause, which
+     * crosvm logged as an ERROR while handling the command: on the CLI's own stderr, or on the
+     * VMM's, which is [vmmLog], what it wrote since the command went out. The first such line
+     * is the cause, and goes in after the token.
+     */
+    @NonNull
+    static String attachFailureMessage(@NonNull String token, @NonNull String cliStderr,
+                                       @NonNull String vmmLog) {
+        var cause = firstErrorLine(fmt("%s\n%s", cliStderr, vmmLog));
+        if (cause == null) return fmt("crosvm usb attach failed: %s", token);
+        return fmt("crosvm usb attach failed: %s (%s)", token, cause);
+    }
+
+    static int parseAttach(@NonNull String stdout) throws UsbControlException {
+        return parseOkPort(stdout);
+    }
+
+    static int parseDetach(@NonNull String stdout) throws UsbControlException {
+        return parseOkPort(stdout);
+    }
+
+    /** {@code ok <port>} on success; every refusal is a single word, and becomes the token. */
+    private static int parseOkPort(@NonNull String stdout) throws UsbControlException {
+        for (var raw : stdout.split("\n")) {
+            var line = raw.trim();
+            if (line.isEmpty()) continue;
+            var parts = line.split("\\s+");
+            if (parts.length < 2 || !parts[0].equals("ok"))
+                throw new UsbControlException(parts[0]);
+            try {
+                return Integer.parseInt(parts[1]);
+            } catch (NumberFormatException e) {
+                throw new UsbControlException(line);
+            }
+        }
+        throw new UsbControlException(stdout.trim());
+    }
+
+    @NonNull
+    static List<Entry> parseList(@NonNull String stdout) throws UsbControlException {
+        for (var raw : stdout.split("\n")) {
+            var line = raw.trim();
+            if (line.isEmpty()) continue;
+            var parts = line.split("\\s+");
+            if (!parts[0].equals("devices"))
+                throw new UsbControlException(parts[0]);
+            // Everything after the keyword is port/vid/pid, repeated; a trailing partial group
+            // means the line is not the list it claims to be, and half of it must not pass as one.
+            if ((parts.length - 1) % 3 != 0)
+                throw new UsbControlException(line);
+            var entries = new ArrayList<Entry>();
+            for (int i = 1; i + 2 < parts.length; i += 3) {
+                try {
+                    entries.add(new Entry(Integer.parseInt(parts[i]), parts[i + 1], parts[i + 2]));
+                } catch (NumberFormatException e) {
+                    throw new UsbControlException(line);
+                }
+            }
+            return entries;
+        }
+        throw new UsbControlException(stdout.trim());
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/usb/UsbControlException.java b/app/src/main/java/cn/classfun/droidvm/daemon/usb/UsbControlException.java
new file mode 100644
index 000000000..caef5e057
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/usb/UsbControlException.java
@@ -0,0 +1,30 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
+package cn.classfun.droidvm.daemon.usb;
+
+import androidx.annotation.NonNull;
+
+/**
+ * The crosvm usb CLI answered with a refusal rather than {@code ok <port>}.
+ *
+ * <p>Checked, because every refusal is a normal outcome the caller has to decide about: which one
+ * it was matters -- {@code no_such_port} on a detach means the VMM already dropped the device,
+ * while {@code no_available_port} on an attach means the guest's controller is full.</p>
+ */
+public final class UsbControlException extends Exception {
+    /** The single word crosvm printed, e.g. {@code no_available_port}. */
+    public final String token;
+    /** Whatever the child wrote to stderr, or {@code ""}; empty for the pure parsers. */
+    public final String stderr;
+
+    public UsbControlException(@NonNull String token) {
+        this(token, "");
+    }
+
+    public UsbControlException(@NonNull String token, @NonNull String stderr) {
+        super(token);
+        this.token = token;
+        this.stderr = stderr;
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/usb/UsbHostDevice.java b/app/src/main/java/cn/classfun/droidvm/daemon/usb/UsbHostDevice.java
new file mode 100644
index 000000000..5d66404c6
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/usb/UsbHostDevice.java
@@ -0,0 +1,387 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
+package cn.classfun.droidvm.daemon.usb;
+
+import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
+import static cn.classfun.droidvm.lib.utils.StringUtils.pathJoin;
+
+import androidx.annotation.NonNull;
+import androidx.annotation.Nullable;
+
+import org.json.JSONArray;
+import org.json.JSONException;
+import org.json.JSONObject;
+
+import java.io.File;
+import java.io.IOException;
+import java.nio.charset.StandardCharsets;
+import java.nio.file.Files;
+import java.util.ArrayList;
+import java.util.Collections;
+import java.util.Comparator;
+import java.util.LinkedHashMap;
+import java.util.List;
+import java.util.Locale;
+import java.util.Map;
+import java.util.regex.Pattern;
+
+/**
+ * One host USB device as {@code /sys/bus/usb/devices/<sysfs>} described it at the moment of the
+ * scan, plus its interfaces and whichever host driver holds each of them.
+ *
+ * <p>Immutable, and free of {@code android.*} on purpose: everything here is sysfs parsing, which
+ * is the part worth covering with a unit test over a temporary directory.</p>
+ */
+public final class UsbHostDevice {
+    /** Hub class, in the two-hex form both bDeviceClass and bInterfaceClass use. */
+    private static final String CLASS_HUB = "09";
+    /** A root hub directory, and its bus number: {@code usb3}. */
+    private static final Pattern ROOT_HUB_NAME = Pattern.compile("^usb(\\d+)$");
+    /** The interface driver the VMM's own claim leaves behind; not a host owner. */
+    private static final String DRIVER_USBFS = "usbfs";
+
+    public static final class Interface {
+        public final String name;
+        public final String cls;
+        public final String subcls;
+        public final String proto;
+        public final String driver;
+
+        Interface(@NonNull String name, @NonNull String cls, @NonNull String subcls,
+                  @NonNull String proto, @NonNull String driver) {
+            this.name = name;
+            this.cls = cls;
+            this.subcls = subcls;
+            this.proto = proto;
+            this.driver = driver;
+        }
+    }
+
+    /**
+     * What a device is doing, in the only terms the kernel keeps: which driver holds each of its
+     * interfaces. Derived on every read and stored nowhere -- a daemon that remembered it would
+     * be remembering something a shell, a VMM's death or a driver's own probe can change without
+     * telling anybody.
+     */
+    public enum State {
+        /** At least one interface bound to a driver that is not usbfs: Android has it. */
+        HOSTUSE("hostuse"),
+        /** At least one interface claimed through usbfs: a VMM's fd owns it. */
+        VMUSE("vmuse"),
+        /** Nothing bound to anything: nobody has it, and it is free to be given away. */
+        IDLE("idle");
+
+        /** The key this state goes under on the wire. */
+        public final String key;
+
+        State(@NonNull String key) {
+            this.key = key;
+        }
+
+        /**
+         * The state a wire key names, or null for a key this build has no word for.
+         *
+         * <p>Read back by the pages, which draw a device's row out of it: the daemon ships in
+         * the same APK, so an unknown key is not a version to bridge but a reading that went
+         * wrong, and a null says so rather than guessing one of the three.</p>
+         */
+        @Nullable
+        public static State fromKey(@NonNull String key) {
+            for (var state : values())
+                if (state.key.equals(key)) return state;
+            return null;
+        }
+    }
+
+    public final String sysfs;
+    /**
+     * What a rule names the device by: {@code vid:pid:serial}, or {@code vid:pid} when it has no
+     * serial. Survives a replug; two serial-less units of the same model share it.
+     */
+    public final String id;
+    /**
+     * Where it is plugged in: the sysfs name without its {@code <bus>-} prefix ({@code 1-1.2.2}
+     * is {@code 1.2.2}). The bus is dropped on purpose -- the same physical socket enumerates a
+     * USB2 device on bus 1 and a USB3 device on bus 2, and only the port chain names the socket.
+     */
+    public final String port;
+    public final int busnum;
+    public final int devnum;
+    public final String node;
+    public final String vid;
+    public final String pid;
+    public final String manufacturer;
+    public final String product;
+    public final String serial;
+    public final String speed;
+    public final String deviceClass;
+    /**
+     * Whether the kernel lets this device be configured at all. Nothing in this daemon writes it
+     * any more -- a device is always authorized, and "nobody may use it" is said by leaving it
+     * idle -- so it is read for one reason only: an older build hid devices this way, and the
+     * daemon's start-up migration has to find the ones it left behind.
+     */
+    public final boolean authorized;
+    public final List<Interface> interfaces;
+
+    private UsbHostDevice( // arity-ok: a value object; these parameters are its fields
+        @NonNull String sysfs,
+        int busnum,
+        int devnum,
+        @NonNull String node,
+        @NonNull String vid,
+        @NonNull String pid,
+        @NonNull String manufacturer,
+        @NonNull String product,
+        @NonNull String serial,
+        @NonNull String speed,
+        @NonNull String deviceClass,
+        boolean authorized,
+        @NonNull List<Interface> interfaces
+    ) {
+        this.sysfs = sysfs;
+        this.id = deriveId(vid, pid, serial);
+        this.port = derivePort(sysfs);
+        this.busnum = busnum;
+        this.devnum = devnum;
+        this.node = node;
+        this.vid = vid;
+        this.pid = pid;
+        this.manufacturer = manufacturer;
+        this.product = product;
+        this.serial = serial;
+        this.speed = speed;
+        this.deviceClass = deviceClass;
+        this.authorized = authorized;
+        this.interfaces = interfaces;
+    }
+
+    /**
+     * Reads one device directory. [devRoot] is normally {@code /dev/bus/usb} and only builds
+     * {@link #node}; nothing under it is opened here.
+     *
+     * @throws IOException when a file every USB device has is missing or unreadable -- such an
+     *                     entry is a device being torn down mid-scan, not a device we can attach.
+     */
+    @NonNull
+    public static UsbHostDevice fromSysfs(@NonNull File devDir, @NonNull String devRoot)
+        throws IOException {
+        var sysfs = devDir.getName();
+        var vid = readRequired(devDir, "idVendor").toLowerCase(Locale.ROOT);
+        var pid = readRequired(devDir, "idProduct").toLowerCase(Locale.ROOT);
+        var busnum = readRequiredInt(devDir, "busnum");
+        var devnum = readRequiredInt(devDir, "devnum");
+        var deviceClass = readRequired(devDir, "bDeviceClass").toLowerCase(Locale.ROOT);
+        var node = pathJoin(devRoot, fmt("%03d", busnum), fmt("%03d", devnum));
+        var interfaces = readInterfaces(devDir, sysfs);
+        return new UsbHostDevice(
+            sysfs, busnum, devnum, node, vid, pid,
+            readOptional(devDir, "manufacturer"),
+            readOptional(devDir, "product"),
+            readOptional(devDir, "serial"),
+            readOptional(devDir, "speed"),
+            deviceClass, !"0".equals(readOptional(devDir, "authorized")), interfaces
+        );
+    }
+
+    @NonNull
+    private static List<Interface> readInterfaces(@NonNull File devDir, @NonNull String sysfs) {
+        // The kernel names an interface directory <prefix><config>.<interface>, inside the
+        // device's own directory; anything else under it is an attribute or a child device.
+        // The prefix is the device's name and a colon for everything but a root hub, whose
+        // interface is 1-0:1.0 under usb1 -- read that wrong and every root hub reads as having
+        // no interface, which is the reading that says "this bus has no driver".
+        var pattern = Pattern.compile(
+            fmt("^%s\\d+\\.\\d+$", Pattern.quote(interfacePrefix(sysfs))));
+        var entries = devDir.listFiles();
+        var result = new ArrayList<Interface>();
+        if (entries == null) return result;
+        for (var entry : entries) {
+            if (!entry.isDirectory()) continue;
+            if (!pattern.matcher(entry.getName()).matches()) continue;
+            result.add(new Interface(
+                entry.getName(),
+                readOptional(entry, "bInterfaceClass").toLowerCase(Locale.ROOT),
+                readOptional(entry, "bInterfaceSubClass").toLowerCase(Locale.ROOT),
+                readOptional(entry, "bInterfaceProtocol").toLowerCase(Locale.ROOT),
+                readDriver(entry)
+            ));
+        }
+        result.sort(Comparator.comparing((Interface iface) -> iface.name));
+        return Collections.unmodifiableList(result);
+    }
+
+    /** Basename of the interface's {@code driver} symlink, or {@code ""} when nothing holds it. */
+    @NonNull
+    private static String readDriver(@NonNull File ifaceDir) {
+        try {
+            var target = Files.readSymbolicLink(ifaceDir.toPath().resolve("driver"));
+            var name = target.getFileName();
+            return name == null ? "" : name.toString();
+        } catch (IOException | UnsupportedOperationException e) {
+            return "";
+        }
+    }
+
+    @NonNull
+    private static String readRequired(@NonNull File dir, @NonNull String name) throws IOException {
+        var file = new File(dir, name);
+        var bytes = Files.readAllBytes(file.toPath());
+        return new String(bytes, StandardCharsets.UTF_8).trim();
+    }
+
+    private static int readRequiredInt(@NonNull File dir, @NonNull String name) throws IOException {
+        var raw = readRequired(dir, name);
+        try {
+            return Integer.parseInt(raw);
+        } catch (NumberFormatException e) {
+            throw new IOException(fmt("%s/%s is not a number: %s", dir.getName(), name, raw), e);
+        }
+    }
+
+    @NonNull
+    private static String readOptional(@NonNull File dir, @NonNull String name) {
+        try {
+            return readRequired(dir, name);
+        } catch (IOException e) {
+            return "";
+        }
+    }
+
+    /** The rule identifier of a device: lowercase {@code vid:pid}, then the serial when it has one. */
+    @NonNull
+    public static String deriveId(@NonNull String vid, @NonNull String pid, @NonNull String serial) {
+        var base = fmt("%s:%s", vid.toLowerCase(Locale.ROOT), pid.toLowerCase(Locale.ROOT));
+        return serial.isEmpty() ? base : fmt("%s:%s", base, serial);
+    }
+
+    /** The port chain of a sysfs device name: {@code 2-1.4} is {@code 1.4}. */
+    @NonNull
+    public static String derivePort(@NonNull String sysfs) {
+        var dash = sysfs.indexOf('-');
+        return dash < 0 ? sysfs : sysfs.substring(dash + 1);
+    }
+
+    /** Whether a {@code bDeviceClass} value is the hub class, for a reader that has only that. */
+    public static boolean isHubClass(@NonNull String deviceClass) {
+        // Normalised here rather than by the caller: the kernel prints the class %02x, but a
+        // caller may have read the attribute raw, and this is the one guard between an
+        // any-layer sink rule and a hub taking its whole subtree down with it.
+        return CLASS_HUB.equals(deviceClass.trim().toLowerCase(Locale.ROOT));
+    }
+
+    /**
+     * Whether [sysfs] names a root hub -- {@code usb3} -- rather than a device plugged into one.
+     * A root hub is a bus's own hub: it is nobody's to lend out, no rule speaks for it and no
+     * page lists it, but a driver still has to be bound to it or its ports are never scanned.
+     */
+    public static boolean isRootHubName(@NonNull String sysfs) {
+        return ROOT_HUB_NAME.matcher(sysfs).matches();
+    }
+
+    /**
+     * The prefix the kernel gives the interface directories of the device [sysfs], for a caller
+     * that has the name and wants the interfaces beside it in {@code /sys/bus/usb/devices}.
+     *
+     * <p>A root hub is the one exception the naming scheme has: the device is {@code usb3} and
+     * its interface is {@code 3-0:1.0}, the bus number with the port the root hub is not on. Get
+     * this wrong and a sweep over a root hub finds no interface at all and silently does
+     * nothing, which is a whole bus left dead.</p>
+     */
+    @NonNull
+    public static String interfacePrefix(@NonNull String sysfs) {
+        var root = ROOT_HUB_NAME.matcher(sysfs);
+        return root.matches() ? fmt("%s-0:", root.group(1)) : fmt("%s:", sysfs);
+    }
+
+    /** A hub carries the rest of the tree; handing one to a VM would take its own children away. */
+    public boolean isHub() {
+        if (isHubClass(deviceClass)) return true;
+        for (var iface : interfaces)
+            if (CLASS_HUB.equals(iface.cls)) return true;
+        return false;
+    }
+
+    /**
+     * What the drivers bound to this device's interfaces say it is doing, this moment.
+     *
+     * <p>A usbfs claim outranks a host driver on the rare device that shows both -- crosvm claims
+     * every interface of a device it is handed, so a half-claimed one only appears while a VMM is
+     * dying -- because that claim is a live fd somebody owns, and a device with an owner must
+     * never be a candidate for anything. The leftovers ({@link UsbLeftovers}) are what eventually
+     * take a dead claim off it, and it reads idle or hostuse again the moment they do.</p>
+     */
+    @NonNull
+    public State state() {
+        var claimed = false;
+        var bound = false;
+        for (var iface : interfaces) {
+            if (iface.driver.isEmpty()) continue;
+            if (DRIVER_USBFS.equals(iface.driver)) claimed = true;
+            else bound = true;
+        }
+        if (claimed) return State.VMUSE;
+        return bound ? State.HOSTUSE : State.IDLE;
+    }
+
+    /**
+     * The wire fields, in wire order. Kept free of org.json so a test can assert on it: unit tests
+     * run against the stubbed android.jar, where a JSONObject accepts everything and reports
+     * nothing back (see the {@code isReturnDefaultValues} comment in app/build.gradle.kts).
+     */
+    @NonNull
+    public LinkedHashMap<String, Object> toMap() {
+        var map = new LinkedHashMap<String, Object>();
+        map.put("sysfs", sysfs);
+        map.put("id", id);
+        map.put("port", port);
+        map.put("busnum", busnum);
+        map.put("devnum", devnum);
+        map.put("node", node);
+        map.put("vid", vid);
+        map.put("pid", pid);
+        map.put("manufacturer", manufacturer);
+        map.put("product", product);
+        map.put("serial", serial);
+        map.put("speed", speed);
+        map.put("device_class", deviceClass);
+        // The one field that says who has the device, in place of the two booleans that used to
+        // half-say it: authorized is nobody's business now that nothing writes it, and
+        // host_in_use was this same read with the VMM's claim left out.
+        map.put("state", state().key);
+        var list = new ArrayList<LinkedHashMap<String, Object>>();
+        for (var iface : interfaces) {
+            var item = new LinkedHashMap<String, Object>();
+            item.put("name", iface.name);
+            item.put("class", iface.cls);
+            item.put("subclass", iface.subcls);
+            item.put("protocol", iface.proto);
+            item.put("driver", iface.driver);
+            list.add(item);
+        }
+        map.put("interfaces", list);
+        return map;
+    }
+
+    @NonNull
+    public JSONObject toJson() throws JSONException {
+        var obj = new JSONObject();
+        for (var entry : toMap().entrySet()) {
+            var value = entry.getValue();
+            if (!(value instanceof List)) {
+                obj.put(entry.getKey(), value);
+                continue;
+            }
+            var array = new JSONArray();
+            for (var item : (List<?>) value) {
+                var child = new JSONObject();
+                for (var field : ((Map<?, ?>) item).entrySet())
+                    child.put(String.valueOf(field.getKey()), field.getValue());
+                array.put(child);
+            }
+            obj.put(entry.getKey(), array);
+        }
+        return obj;
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/usb/UsbHostInventory.java b/app/src/main/java/cn/classfun/droidvm/daemon/usb/UsbHostInventory.java
new file mode 100644
index 000000000..83dd1a7c7
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/usb/UsbHostInventory.java
@@ -0,0 +1,513 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
+package cn.classfun.droidvm.daemon.usb;
+
+import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
+
+import android.os.FileObserver;
+import android.util.Log;
+
+import cn.classfun.droidvm.lib.natives.UnixHelper;
+
+import androidx.annotation.NonNull;
+import androidx.annotation.Nullable;
+
+import java.io.File;
+import java.util.ArrayList;
+import java.util.Collections;
+import java.util.Comparator;
+import java.util.HashMap;
+import java.util.HashSet;
+import java.util.List;
+import java.util.Map;
+import java.util.concurrent.Executors;
+import java.util.concurrent.RejectedExecutionException;
+import java.util.concurrent.ScheduledExecutorService;
+import java.util.concurrent.ScheduledFuture;
+import java.util.concurrent.TimeUnit;
+import java.util.concurrent.atomic.AtomicBoolean;
+import java.util.regex.Pattern;
+
+/**
+ * The host's USB devices, and the inotify watch that keeps the list current.
+ *
+ * <p>sysfs has no usable inotify semantics, so the watch is on {@code /dev/bus/usb} instead: the
+ * kernel creates and removes a node there for every device, and the bus directories themselves
+ * come and go with USB role switches, which is why the root is watched as well as each bus.</p>
+ */
+public final class UsbHostInventory {
+    private static final String TAG = "UsbHostInventory";
+    /**
+     * A device directory: {@code 1-1}, {@code 1-1.4.2}, and the root hubs {@code usb1}. Excludes
+     * the interface directories, which carry a colon.
+     *
+     * <p>The root hubs are in it for one reason: they are the only thing on the bus whose arrival
+     * nothing else reports. A dual-role port switching back to host re-registers the host
+     * controller, and the kernel deletes and creates the root hub's node inside the bus directory
+     * it already had -- so the set of bus directories does not change, {@code onBusesChanged} is
+     * never raised, and a scan that skipped root hubs would find the same nothing before and
+     * after and call it no news. Measured on the phone: the dock was pulled and put back at
+     * 16:11:53 and the daemon logged not one line for the six minutes that followed, with both
+     * root hubs unconfigured, no {@code 1-0:1.0} at all and every device below them gone from
+     * sysfs. In the scan a root hub is a device that arrived, the diff is not empty, and the pass
+     * that follows hands it its driver back. Nothing downstream has to care: a root hub is a hub,
+     * and {@link UsbHostDevice#isHub} keeps hubs out of every list and every rule already.</p>
+     */
+    private static final Pattern DEVICE_NAME = Pattern.compile("^(\\d+-[\\d.]+|usb\\d+)$");
+    /** A bus directory under devRoot: {@code 001}. */
+    private static final Pattern BUS_NAME = Pattern.compile("^\\d+$");
+    /** One plug event is several inotify events; rescan once they have stopped arriving. */
+    private static final long QUIET_PERIOD_MS = 300;
+    /** A uevent datagram; the kernel's own limit is well under this. */
+    private static final int UEVENT_BUFFER = 8192;
+    private static final int ROOT_MASK = FileObserver.CREATE | FileObserver.DELETE
+        | FileObserver.MOVED_TO | FileObserver.MOVED_FROM;
+    private static final int BUS_MASK = FileObserver.CREATE | FileObserver.DELETE;
+    /**
+     * IN_Q_OVERFLOW and IN_UNMOUNT, which FileObserver has no constants for: the kernel sends both
+     * unasked, and both mean events were lost, so they stand for "whatever you missed".
+     */
+    private static final int LOST_EVENTS = 0x4000 | 0x2000;
+
+    public interface Listener {
+        void onChanged(@NonNull Diff diff);
+    }
+
+    /**
+     * What one rescan found different, and the whole of what a trigger is: a device that arrived,
+     * one that went, or one that is doing something else than it was.
+     *
+     * <p>That third list is not a nicety. Losing a driver creates and removes no device node, so
+     * a device that falls to idle raises nothing by itself, and with the gate shut nothing binds
+     * a driver back on its own -- measured on the phone, unbinding and rebinding hub 1-1 left it
+     * driverless with its whole subtree gone and not one line in the daemon log for 78 seconds,
+     * while a forced pass put the tree back in 7. The rules are cheap and idempotent, so every
+     * difference gets one and a pass that owes nothing simply decides nothing.</p>
+     *
+     * <p>Read exactly, then: this is every driver change the NEXT rescan finds, and a rescan is
+     * raised by a node event and by nothing else -- the watch below, or {@code attach}. That is
+     * enough for the measured case and for every case this daemon can create, because a driver
+     * change worth a pass moves nodes: unbinding hub 1-1 unconfigured it and took the whole
+     * subtree's nodes down with it, and it is those deletions that wake this. What it does not
+     * cover is a driver change with nothing under it -- an empty hub's interface unbound by
+     * hand, a leaf whose driver drops itself -- which stays unnoticed until the next plug
+     * anywhere on the machine. Deliberately not answered with a timer: the triggers are the
+     * spec's (plug, VM running, rules saved, VM releasing, daemon start), nothing here or in the
+     * manager can leave a device in that state, and a standing sweep is a wakeup a phone would
+     * pay for every few seconds forever to catch a shell command nobody but a developer runs.</p>
+     */
+    public static final class Diff {
+        /** Every device the scan found, whether it moved or not. */
+        public final List<UsbHostDevice> all;
+        public final List<UsbHostDevice> added;
+        public final List<UsbHostDevice> removed;
+        /**
+         * Devices that were there before and are there now, with a different set of interfaces or
+         * a different driver on one of them. Compared that finely rather than by the derived
+         * state, because the two differ exactly where it matters: a device the generic driver has
+         * just given a configuration to gains its interfaces with no driver on any of them, so it
+         * reads idle before and idle after, and it is precisely the device somebody has to be
+         * told about.
+         */
+        public final List<UsbHostDevice> changed;
+
+        Diff(@NonNull List<UsbHostDevice> all, @NonNull List<UsbHostDevice> added,
+             @NonNull List<UsbHostDevice> removed, @NonNull List<UsbHostDevice> changed) {
+            this.all = all;
+            this.added = added;
+            this.removed = removed;
+            this.changed = changed;
+        }
+
+        /** Nothing moved: no listener is called and no pass is owed. */
+        public boolean isEmpty() {
+            return added.isEmpty() && removed.isEmpty() && changed.isEmpty();
+        }
+
+        /** What to call the pass this diff owes, in the log. */
+        @NonNull
+        public String reason() {
+            if (!added.isEmpty()) return "plug";
+            if (!removed.isEmpty()) return "unplug";
+            return "drivers";
+        }
+
+        /**
+         * The difference between two scans. Keyed by address and device number, not by address
+         * alone: an unplug and replug that both land inside one quiet period put a new device at
+         * the same sysfs name, and by name the two scans would agree that nothing happened. The
+         * kernel hands every enumeration a fresh devnum, so that is what tells the two instances
+         * apart -- and what makes a replug an add and a remove rather than a change.
+         */
+        @NonNull
+        static Diff between(@NonNull List<UsbHostDevice> previous,
+                            @NonNull List<UsbHostDevice> now) {
+            var before = new HashMap<String, UsbHostDevice>();
+            for (var device : previous) before.put(instanceKey(device), device);
+            var after = new HashMap<String, UsbHostDevice>();
+            for (var device : now) after.put(instanceKey(device), device);
+            var added = new ArrayList<UsbHostDevice>();
+            var changed = new ArrayList<UsbHostDevice>();
+            for (var device : now) {
+                var was = before.get(instanceKey(device));
+                if (was == null) added.add(device);
+                else if (!sameDrivers(was, device)) changed.add(device);
+            }
+            var removed = new ArrayList<UsbHostDevice>();
+            for (var device : previous)
+                if (!after.containsKey(instanceKey(device))) removed.add(device);
+            return new Diff(now, added, removed, changed);
+        }
+
+        /** Whether two readings of one device show the same interfaces held by the same drivers. */
+        private static boolean sameDrivers(@NonNull UsbHostDevice was, @NonNull UsbHostDevice now) {
+            if (was.interfaces.size() != now.interfaces.size()) return false;
+            for (var i = 0; i < was.interfaces.size(); i++) {
+                // Both lists are sorted by name, so position is the same interface.
+                var before = was.interfaces.get(i);
+                var after = now.interfaces.get(i);
+                if (!before.name.equals(after.name)) return false;
+                if (!before.driver.equals(after.driver)) return false;
+            }
+            return true;
+        }
+    }
+
+    private final String sysfsRoot;
+    private final String devRoot;
+    /** Guards the snapshot and serialises scan-diff-notify against itself. */
+    private final Object rescanLock = new Object();
+    /** Guards the observers and the debounce timer; held only for the moment it takes to arm. */
+    private final Object watchLock = new Object();
+    /** Strong references: an unreferenced FileObserver is collected and stops watching silently. */
+    private final Map<String, FileObserver> busObservers = new HashMap<>();
+    private volatile List<UsbHostDevice> snapshot = Collections.emptyList();
+    private volatile Listener listener = null;
+    private volatile Runnable busListener = null;
+    /** Set when a bus directory came or went, and read by the next debounced rescan. */
+    private final AtomicBoolean busesMoved = new AtomicBoolean(false);
+    private FileObserver rootObserver = null;
+    private ScheduledExecutorService scheduler = null;
+    private ScheduledFuture<?> pending = null;
+    /** The kernel's uevent socket and the pipe that ends its reader; -1 when it is not running. */
+    private int ueventFd = -1;
+    private int wakeReadFd = -1;
+    private int wakeWriteFd = -1;
+    private Thread ueventThread = null;
+
+    public UsbHostInventory(@NonNull String sysfsRoot, @NonNull String devRoot) {
+        this.sysfsRoot = sysfsRoot;
+        this.devRoot = devRoot;
+    }
+
+    /**
+     * Every device sysfs currently describes, sorted by its sysfs name. Hubs included: a hub
+     * whose driver is not bound takes its whole subtree down with it, so the rule pass has to
+     * hear about one arriving exactly as it hears about a keyboard. What may not be lent out is
+     * refused where a device is lent out, not here.
+     */
+    @NonNull
+    public List<UsbHostDevice> scan() {
+        var entries = new File(sysfsRoot).listFiles();
+        var devices = new ArrayList<UsbHostDevice>();
+        if (entries == null) {
+            Log.w(TAG, fmt("Cannot list %s", sysfsRoot));
+            return devices;
+        }
+        for (var entry : entries) {
+            var name = entry.getName();
+            if (!DEVICE_NAME.matcher(name).matches()) continue;
+            UsbHostDevice device;
+            try {
+                device = UsbHostDevice.fromSysfs(entry, devRoot);
+            } catch (Exception e) {
+                // A device disconnected mid-scan leaves a directory whose files are already gone.
+                Log.w(TAG, fmt("Skipping USB device %s: %s", name, e.getMessage()));
+                continue;
+            }
+            devices.add(device);
+        }
+        devices.sort(Comparator.comparing((UsbHostDevice device) -> device.sysfs));
+        return devices;
+    }
+
+    /**
+     * Takes the first snapshot -- without calling either listener -- and starts watching.
+     *
+     * <p>[onBusesChanged] is the other half of the news: a bus directory appearing means a USB
+     * controller was registered, and that controller's root hub is not a device this scan
+     * returns or a rule can speak for. It is reported on its own because nothing else reports
+     * it -- a root hub raises no device diff -- and because a root hub with no driver bound is a
+     * bus whose ports are never scanned, so no device below it will ever enumerate to raise a
+     * change of its own.</p>
+     */
+    public void start(@NonNull Listener listener, @NonNull Runnable onBusesChanged) {
+        this.listener = listener;
+        this.busListener = onBusesChanged;
+        synchronized (rescanLock) {
+            snapshot = scan();
+        }
+        synchronized (watchLock) {
+            if (scheduler == null) {
+                scheduler = Executors.newSingleThreadScheduledExecutor(r -> {
+                    var t = new Thread(r, "usb-inventory");
+                    t.setDaemon(true);
+                    return t;
+                });
+            }
+            if (rootObserver == null) {
+                // FileObserver(File, int) needs API 29; minSdk is 33, so the File form is fine.
+                rootObserver = new DirObserver(new File(devRoot), ROOT_MASK, true);
+                rootObserver.startWatching();
+            }
+            refreshBusObservers();
+            startUevents();
+        }
+        Log.i(TAG, fmt("Watching %s (%d device(s) present)", devRoot, snapshot.size()));
+    }
+
+    /**
+     * Starts the reader on the kernel's uevent socket, which is the second source and the only
+     * one that reports a driver bind or unbind: those move no node, so nothing under
+     * {@code /dev/bus/usb} changes and the watch above hears nothing at all.
+     *
+     * <p>It feeds the same debounce as the watch and decides nothing of its own. The two sources
+     * overlap on plugs -- a node appears and an {@code add} uevent is sent for the same device --
+     * and that is deliberate: a duplicate costs one scan that finds no difference, and the
+     * alternative is deciding which source owns which kind of change and being wrong about one.
+     *
+     * <p>Best effort. If the socket cannot be opened the daemon runs on the watch alone, which is
+     * what it did before this existed: every change that moves a node is still seen, and only a
+     * driver somebody unbound by hand goes unnoticed.</p>
+     */
+    private void startUevents() {
+        if (ueventThread != null) return;
+        int fd;
+        int[] wake;
+        try {
+            fd = UnixHelper.nativeUeventOpen();
+            if (fd < 0) {
+                Log.w(TAG, "No uevent socket; a driver unbound by hand will not be noticed");
+                return;
+            }
+            wake = UnixHelper.nativePipe();
+        } catch (Throwable e) {
+            Log.w(TAG, "No uevent socket; a driver unbound by hand will not be noticed", e);
+            return;
+        }
+        if (wake == null || wake.length != 2) {
+            UnixHelper.nativeCloseFd(fd);
+            Log.w(TAG, "No pipe for the uevent reader; running on the node watch alone");
+            return;
+        }
+        ueventFd = fd;
+        wakeReadFd = wake[0];
+        wakeWriteFd = wake[1];
+        var thread = new Thread(this::readUevents, "usb-uevent");
+        thread.setDaemon(true);
+        ueventThread = thread;
+        thread.start();
+        Log.i(TAG, "Watching the kernel uevent socket for USB driver binds and unbinds");
+    }
+
+    /**
+     * Reads until the pipe says stop. Every USB message schedules a rescan and nothing more: what
+     * changed is the scan's answer, not this thread's, which is what keeps one event source from
+     * having an opinion the other does not.
+     */
+    private void readUevents() {
+        var buffer = new byte[UEVENT_BUFFER];
+        while (true) {
+            int ready;
+            try {
+                ready = UnixHelper.nativePollIn2(ueventFd, wakeReadFd, -1);
+            } catch (Throwable e) {
+                Log.w(TAG, "USB uevent poll failed; the node watch carries on alone", e);
+                return;
+            }
+            // The pipe, or a hangup on either: both mean this reader is over. A poll error is
+            // not retried in a tight loop -- a socket that cannot be polled will not recover.
+            if (ready < 0 || (ready & 2) != 0) return;
+            if ((ready & 1) == 0) continue;
+            var n = UnixHelper.nativeRead(ueventFd, buffer, buffer.length);
+            if (n <= 0) {
+                if (n == 0) return;
+                continue;
+            }
+            var event = UsbUevent.parse(buffer, n);
+            if (event == null) continue;
+            if (event.isDriverChange())
+                Log.d(TAG, fmt("uevent %s", event));
+            scheduleRescan();
+        }
+    }
+
+    /** Ends the reader at once: the pipe wakes the poll, and the thread is a daemon anyway. */
+    private void stopUevents() {
+        var thread = ueventThread;
+        ueventThread = null;
+        if (wakeWriteFd >= 0) {
+            UnixHelper.nativeWrite(wakeWriteFd, new byte[]{1}, 1);
+            UnixHelper.nativeCloseFd(wakeWriteFd);
+            wakeWriteFd = -1;
+        }
+        if (thread != null) {
+            try {
+                thread.join(1000);
+            } catch (InterruptedException e) {
+                Thread.currentThread().interrupt();
+            }
+        }
+        if (ueventFd >= 0) {
+            UnixHelper.nativeCloseFd(ueventFd);
+            ueventFd = -1;
+        }
+        if (wakeReadFd >= 0) {
+            UnixHelper.nativeCloseFd(wakeReadFd);
+            wakeReadFd = -1;
+        }
+    }
+
+    public void stop() {
+        // Outside the lock on purpose: the reader takes watchLock to arm a rescan, so joining it
+        // while holding that lock is the two of them waiting on each other.
+        stopUevents();
+        synchronized (watchLock) {
+            if (pending != null) {
+                pending.cancel(false);
+                pending = null;
+            }
+            for (var observer : busObservers.values())
+                observer.stopWatching();
+            busObservers.clear();
+            if (rootObserver != null) {
+                rootObserver.stopWatching();
+                rootObserver = null;
+            }
+            if (scheduler != null) {
+                scheduler.shutdownNow();
+                scheduler = null;
+            }
+        }
+    }
+
+    /** The last scan; never null, empty before {@link #start}. */
+    @NonNull
+    public List<UsbHostDevice> snapshot() {
+        return snapshot;
+    }
+
+    /** Scans now, diffs against the snapshot and calls the listener if anything moved. */
+    @NonNull
+    public List<UsbHostDevice> rescanNow() {
+        Diff diff;
+        var busesChanged = busesMoved.getAndSet(false);
+        synchronized (rescanLock) {
+            diff = Diff.between(snapshot, scan());
+            snapshot = diff.all;
+        }
+        if (busesChanged) {
+            var buses = busListener;
+            if (buses != null) {
+                try {
+                    buses.run();
+                } catch (Exception e) {
+                    Log.w(TAG, "USB bus listener failed", e);
+                }
+            }
+        }
+        if (diff.isEmpty()) return diff.all;
+        var target = listener;
+        if (target == null) return diff.all;
+        try {
+            target.onChanged(diff);
+        } catch (Exception e) {
+            Log.w(TAG, "USB inventory listener failed", e);
+        }
+        return diff.all;
+    }
+
+    @NonNull
+    private static String instanceKey(@NonNull UsbHostDevice device) {
+        return fmt("%s#%d", device.sysfs, device.devnum);
+    }
+
+    private void scheduleRescan() {
+        synchronized (watchLock) {
+            var exec = scheduler;
+            if (exec == null) return;
+            if (pending != null) pending.cancel(false);
+            try {
+                pending = exec.schedule(() -> {
+                    try {
+                        rescanNow();
+                    } catch (Exception e) {
+                        Log.w(TAG, "USB inventory rescan failed", e);
+                    }
+                }, QUIET_PERIOD_MS, TimeUnit.MILLISECONDS);
+            } catch (RejectedExecutionException e) {
+                // stop() won the race; there is nothing left to keep current.
+                pending = null;
+            }
+        }
+    }
+
+    /**
+     * Adds an observer for every bus directory that appeared and drops the ones that went.
+     * Returns whether the set of buses is not the one it was: that is a USB controller having
+     * been registered or removed, which is news of its own -- see {@link #start}.
+     */
+    private boolean refreshBusObservers() {
+        synchronized (watchLock) {
+            if (rootObserver == null) return false;
+            var present = new HashSet<String>();
+            var entries = new File(devRoot).listFiles();
+            if (entries != null)
+                for (var entry : entries) {
+                    var name = entry.getName();
+                    if (!entry.isDirectory() || !BUS_NAME.matcher(name).matches()) continue;
+                    present.add(name);
+                }
+            // Compared before the map is touched, so what is compared is the previous set.
+            var changed = !present.equals(busObservers.keySet());
+            for (var name : present) {
+                if (busObservers.containsKey(name)) continue;
+                var observer = new DirObserver(new File(devRoot, name), BUS_MASK, false);
+                busObservers.put(name, observer);
+                observer.startWatching();
+            }
+            var it = busObservers.entrySet().iterator();
+            while (it.hasNext()) {
+                var e = it.next();
+                if (present.contains(e.getKey())) continue;
+                e.getValue().stopWatching();
+                it.remove();
+            }
+            return changed;
+        }
+    }
+
+    private final class DirObserver extends FileObserver {
+        private final int mask;
+        private final boolean isRoot;
+
+        DirObserver(@NonNull File dir, int mask, boolean isRoot) {
+            super(dir, mask);
+            this.mask = mask;
+            this.isRoot = isRoot;
+        }
+
+        @Override
+        public void onEvent(int event, @Nullable String path) {
+            // FileObserver hands the raw inotify bits through, so events nobody asked for land
+            // here too. IN_IGNORED only says this one watch is over and carries no news; a
+            // dropped queue or an unmounted devfs is precisely when a rescan is owed, and the
+            // bus observers have to be rebuilt first because their watches may be gone with it.
+            if ((event & (mask | LOST_EVENTS)) == 0) return;
+            if ((isRoot || (event & LOST_EVENTS) != 0) && refreshBusObservers())
+                busesMoved.set(true);
+            scheduleRescan();
+        }
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/usb/UsbLeftovers.java b/app/src/main/java/cn/classfun/droidvm/daemon/usb/UsbLeftovers.java
new file mode 100644
index 000000000..d30afff3f
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/usb/UsbLeftovers.java
@@ -0,0 +1,128 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
+package cn.classfun.droidvm.daemon.usb;
+
+import androidx.annotation.NonNull;
+
+import java.util.ArrayList;
+import java.util.Collection;
+import java.util.LinkedHashMap;
+import java.util.List;
+import java.util.Map;
+
+/**
+ * The interfaces a restore pass had to leave unbound, and whose they were.
+ *
+ * <p>Handing a device back to the host waits for the VMM's usbfs claim on each interface to go
+ * and gives up after a while. On device, a VMM whose xHCI had died kept every claim until the
+ * process itself exited minutes later, and the interfaces then stayed without a driver for
+ * good: the pass that would have offered them to the host had already given up, and nothing
+ * came back for them. This is what comes back. Every interface a wait gave up on is recorded
+ * against the VM whose VMM held it, so that the VM's exit can retry exactly those, and a scan
+ * that finds one of them free -- no driver at all, so the claim is gone -- can retry it
+ * whenever that happens. Pure, and every call is made under the manager's lock; the waiting
+ * and the probing are the manager's.</p>
+ */
+final class UsbLeftovers {
+    /** What a scan found among the recorded interfaces. */
+    static final class Scan {
+        /** Interfaces nothing holds any more: the claim is gone, so these get their try. */
+        final List<String> free = new ArrayList<>();
+        /** Interfaces a host driver holds again, and that driver: someone else gave them back. */
+        final LinkedHashMap<String, String> reclaimed = new LinkedHashMap<>();
+    }
+
+    /** The driver an interface shows while the VMM holds it: the claim that is being waited out. */
+    private static final String DRIVER_USBFS = "usbfs";
+
+    /** Interface name to the id of the VM that held it, in the order they were left. */
+    private final LinkedHashMap<String, String> vmByInterface = new LinkedHashMap<>();
+
+    boolean isEmpty() {
+        return vmByInterface.isEmpty();
+    }
+
+    int size() {
+        return vmByInterface.size();
+    }
+
+    /** A restore pass gave up on [iface] while [vmId]'s VMM still claimed it. */
+    void leave(@NonNull String iface, @NonNull String vmId) {
+        vmByInterface.put(iface, vmId);
+    }
+
+    /** Whether [iface] is recorded at all. */
+    boolean contains(@NonNull String iface) {
+        return vmByInterface.containsKey(iface);
+    }
+
+    /** The interfaces [vmId] left behind, oldest first. A query: they stay recorded. */
+    @NonNull
+    List<String> leftBy(@NonNull String vmId) {
+        var result = new ArrayList<String>();
+        for (var entry : vmByInterface.entrySet())
+            if (vmId.equals(entry.getValue())) result.add(entry.getKey());
+        return result;
+    }
+
+    /**
+     * Takes [ifaces] off the record for a try, and says which VM each was left by. One that is
+     * not recorded (any more) is not in the answer: another trigger got to it first.
+     */
+    @NonNull
+    Map<String, String> take(@NonNull Collection<String> ifaces) {
+        var result = new LinkedHashMap<String, String>();
+        for (var iface : ifaces) {
+            var vm = vmByInterface.remove(iface);
+            if (vm != null) result.put(iface, vm);
+        }
+        return result;
+    }
+
+    /**
+     * Reads a scan, given as every interface it saw mapped to its driver ({@code ""} for none),
+     * against the record. An interface with no driver is free and is reported for a try; one
+     * still showing the VMM's claim is not ready and stays; one a host driver holds is forgotten
+     * -- it was given back some other way, and there is nothing left to do for it. An interface
+     * the scan did not see stays too: whether its device is gone is the unplug's news to bring.
+     */
+    @NonNull
+    Scan scan(@NonNull Map<String, String> drivers) {
+        var result = new Scan();
+        var it = vmByInterface.entrySet().iterator();
+        while (it.hasNext()) {
+            var iface = it.next().getKey();
+            var driver = drivers.get(iface);
+            if (driver == null || DRIVER_USBFS.equals(driver)) continue;
+            if (driver.isEmpty()) {
+                result.free.add(iface);
+                continue;
+            }
+            result.reclaimed.put(iface, driver);
+            it.remove();
+        }
+        return result;
+    }
+
+    /** The device at [sysfs] is gone, and its interfaces with it. Returns what was dropped. */
+    @NonNull
+    List<String> forgetDevice(@NonNull String sysfs) {
+        var dropped = new ArrayList<String>();
+        var it = vmByInterface.keySet().iterator();
+        while (it.hasNext()) {
+            var iface = it.next();
+            if (!sysfs.equals(deviceOf(iface))) continue;
+            dropped.add(iface);
+            it.remove();
+        }
+        return dropped;
+    }
+
+    /** The device an interface belongs to: {@code 1-1.2.2:1.0} is {@code 1-1.2.2}'s. */
+    @NonNull
+    static String deviceOf(@NonNull String iface) {
+        var colon = iface.indexOf(':');
+        return colon < 0 ? iface : iface.substring(0, colon);
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/usb/UsbPassthroughManager.java b/app/src/main/java/cn/classfun/droidvm/daemon/usb/UsbPassthroughManager.java
new file mode 100644
index 000000000..5564bea55
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/usb/UsbPassthroughManager.java
@@ -0,0 +1,1948 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
+package cn.classfun.droidvm.daemon.usb;
+
+import static cn.classfun.droidvm.lib.Constants.DATA_DIR;
+import static cn.classfun.droidvm.lib.utils.AssetUtils.getPrebuiltBinaryPath;
+import static cn.classfun.droidvm.lib.utils.RunUtils.run;
+import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
+import static cn.classfun.droidvm.lib.utils.StringUtils.pathJoin;
+
+import android.net.LocalSocket;
+import android.net.LocalSocketAddress;
+import android.util.Log;
+
+import androidx.annotation.NonNull;
+import androidx.annotation.Nullable;
+
+import org.json.JSONArray;
+import org.json.JSONException;
+import org.json.JSONObject;
+
+import java.io.File;
+import java.io.FileOutputStream;
+import java.io.IOException;
+import java.nio.charset.StandardCharsets;
+import java.util.ArrayList;
+import java.util.Collection;
+import java.util.Collections;
+import java.util.HashMap;
+import java.util.HashSet;
+import java.util.LinkedHashMap;
+import java.util.List;
+import java.util.Map;
+import java.util.concurrent.ExecutionException;
+import java.util.concurrent.Executors;
+import java.util.concurrent.RejectedExecutionException;
+import java.util.concurrent.ScheduledExecutorService;
+import java.util.concurrent.ScheduledFuture;
+import java.util.concurrent.TimeUnit;
+import java.util.function.Consumer;
+
+import cn.classfun.droidvm.daemon.console.ConsoleStream;
+import cn.classfun.droidvm.daemon.server.RequestException;
+import cn.classfun.droidvm.daemon.server.ServerContext;
+import cn.classfun.droidvm.daemon.vm.VMInstance;
+import cn.classfun.droidvm.lib.store.vm.VMState;
+import cn.classfun.droidvm.lib.store.vm.VMXhciConfig;
+
+/**
+ * The daemon's single authority over host USB devices: what the host has, who has it, and what
+ * happens to it when a VM stops or the user pulls the cable.
+ *
+ * <p>A device belongs to at most one VM. The VMM claims every interface of a device it is handed,
+ * which takes it away from whatever host driver held it, so the record kept here is the only
+ * place that knows the device has to be given back -- the kernel does not rebind a driver by
+ * itself once the claim is released, and crosvm does not notice an unplug until the next
+ * transfer.</p>
+ *
+ * <p>Devices also get lent out without being asked for: the rules are run over every candidate
+ * whenever the daemon starts, a VM reaches RUNNING, the rules change, or the inventory reads any
+ * difference at all -- a device that arrived, one that went, or one whose drivers moved. A VM
+ * letting go of what it held asks the rules one question only -- whether to leave the device
+ * idle -- and never whether to hand it to somebody else, so a stop releases devices but takes
+ * nothing. All of those triggers take nothing at all while the rules carry their master switch
+ * off; only the direct actions -- attach, detach and the management page -- still work, because
+ * those are how a user takes a device by hand. Turning that switch off is itself the one
+ * trigger that only gives: it hands back everything this daemon had taken.
+ * The deciding is the {@link UsbRuleEngine}'s and happens under the same lock as the manual
+ * bookkeeping; the attaching goes through the same path as a manual attach, so both kinds share
+ * one record and one set of conflicts. When a pass runs is {@link UsbRulePassTiming}'s: a VM
+ * is RUNNING before its control socket listens, so the pass for that edge waits for the socket,
+ * and a pass that could not reach the VMM comes back rather than blame the device.</p>
+ *
+ * <p>What a device is doing is never stored: it is read off the drivers bound to its interfaces
+ * at every scan -- a driver that is not usbfs means the host has it, a usbfs claim means a VMM's
+ * fd does, nothing bound at all means nobody does -- so this daemon cannot come to disagree with
+ * the kernel about who owns a device, however it changed hands. The only thing the kernel cannot
+ * say is whether the user decided about a device by hand, and that is the engine's lock.</p>
+ *
+ * <p>What makes that work is the gate: {@code /sys/bus/usb/drivers_autoprobe} is set to 0 while
+ * the master switch is on, so a device plugged in enumerates -- sysfs entry, device node, every
+ * descriptor read -- and lands with nothing bound to it at all. Not even its configuration is
+ * set: choosing one is {@code usb_generic_driver}'s probe, so a device under the shut gate has no
+ * configuration and therefore no interface directories either ({@link UsbProbe}). Android does
+ * not mount it, does not claim it and does not ask the user about it, and the rules decide what
+ * happens next: host gives it a configuration if it has none and then offers every interface to
+ * the host drivers, a VM has it handed over once it has one, and a sink is the do-nothing that
+ * leaves the device exactly where the gate put it. The flag is global and outlives this process,
+ * which is why it is written from the switch at every start, restored to 1 the moment the switch
+ * goes off, and restored again on shutdown.</p>
+ *
+ * <p>Giving a device back is not always possible at the moment it is asked for: the VMM's usbfs
+ * claim on an interface can outlive the wait -- on device, a VMM whose xHCI had died kept its
+ * claims until the process exited -- and such an interface is left unbound. It is not left for
+ * good: the {@link UsbLeftovers} record keeps it against its VM, and it is tried again when that
+ * VM's process is gone, and whenever a scan shows the claim gone.</p>
+ */
+public final class UsbPassthroughManager {
+    private static final String TAG = "UsbPassthroughManager";
+    private static final String SYSFS_ROOT = "/sys/bus/usb/devices";
+    private static final String DEV_ROOT = "/dev/bus/usb";
+    /** The VMM already dropped the device; a detach for it is a no-op, not a failure. */
+    private static final String TOKEN_NO_SUCH_PORT = "no_such_port";
+    private static final String TOKEN_NO_SUCH_DEVICE = "no_such_device";
+    /** Long enough for the drivers_probe writes of the last VM to go out. */
+    private static final long SHUTDOWN_WAIT_SECONDS = 5;
+    /** The driver an interface shows while the VMM holds it: a claim to wait out, not an owner. */
+    private static final String DRIVER_USBFS = "usbfs";
+    /** How long a released interface may still show that claim before the host is offered it. */
+    private static final long USBFS_RELEASE_TIMEOUT_MS = 10_000;
+    private static final long USBFS_POLL_MS = 200;
+    /** The VMM's own stderr, as VMInstance names it: where crosvm says why an attach failed. */
+    private static final String STREAM_STDERR = "stderr";
+    /**
+     * How long a refused attach waits for that reason to land in the stream when it is not there
+     * yet: the VMM logs it before it answers, but its reader thread still has to be scheduled.
+     */
+    private static final long VMM_LOG_GRACE_MS = 100;
+    /**
+     * A composite device's nodes show up one at a time and the inventory reports each batch; the
+     * rules run once the batches have stopped, so a device is offered whole.
+     */
+    private static final long AUTO_ATTACH_DEBOUNCE_MS = 400;
+    /**
+     * The gate. 0 means the kernel binds no driver to a device it enumerates, which is how a
+     * plugged device reaches the rules untouched; 1 is the kernel's own default and what the
+     * host expects when this daemon is not in charge.
+     */
+    private static final String AUTOPROBE_PATH = "/sys/bus/usb/drivers_autoprobe";
+    /** Where a driver is taken off one interface; the mirror of {@link #AUTOPROBE_PATH}'s gate. */
+    private static final String DRIVERS_DIR = "/sys/bus/usb/drivers";
+    /**
+     * How long the start-up migration's devices are given, all of them together, to publish
+     * their interfaces again before the first pass looks at them. Authorizing a device has the
+     * kernel re-read its configuration and publish its interfaces afresh; a pass that arrived
+     * first would find a device with nothing to probe and no later trigger would ever come,
+     * because binding a driver creates no node for the watch to see. The waiting itself is
+     * {@link UsbProbe}'s -- a device probe owes the same wait for the same reason.
+     */
+    private static final long MIGRATION_SETTLE_TIMEOUT_MS = UsbProbe.INTERFACES_TIMEOUT_MS;
+
+    /** One host device lent to one VM, for as long as both are alive. */
+    static final class Attachment {
+        final String vmId;
+        final String vmName;
+        final int port;
+        final String sysfs;
+        final String vid;
+        final String pid;
+        final String node;
+        /**
+         * The controller it landed on: what the rule named, or the VM's first one when it named
+         * none. Recorded because a list is asked which xHCI a device is on, and only the attach
+         * knows -- crosvm emulates the controller and takes no argument for it.
+         */
+        @Nullable
+        final String controller;
+        /** The rule that made this attachment, or null when the user asked for it. */
+        @Nullable
+        final UsbRuleEngine.Decision rule;
+
+        Attachment( // arity-ok: a value object; these parameters are its fields
+            @NonNull String vmId,
+            @NonNull String vmName,
+            int port,
+            @NonNull String sysfs,
+            @NonNull String vid,
+            @NonNull String pid,
+            @NonNull String node,
+            @Nullable String controller,
+            @Nullable UsbRuleEngine.Decision rule
+        ) {
+            this.vmId = vmId;
+            this.vmName = vmName;
+            this.port = port;
+            this.sysfs = sysfs;
+            this.vid = vid;
+            this.pid = pid;
+            this.node = node;
+            this.controller = controller;
+            this.rule = rule;
+        }
+
+        /** "manual" or "auto": who asked for this attachment. */
+        @NonNull
+        String source() {
+            return rule == null ? "manual" : "auto";
+        }
+    }
+
+    private final Map<String, Attachment> attachments = new HashMap<>();
+    /**
+     * How many times each VM has started going down, so an attach that is still inside the CLI
+     * can tell that the release pass for its VM has already walked past the record it is about
+     * to file. Guarded by [lock], like {@link #attachments}.
+     */
+    private final Map<String, Integer> stopEpochs = new HashMap<>();
+    /** Interfaces a restore pass could not give back yet. Guarded by [lock]. */
+    private final UsbLeftovers leftovers = new UsbLeftovers();
+    private final Object lock = new Object();
+    private final UsbHostInventory inventory = new UsbHostInventory(SYSFS_ROOT, DEV_ROOT);
+    /**
+     * The two kinds of drivers_probe write, over the real sysfs and through this class's own
+     * shell. Every bind this daemon asks for goes through it, so "give it to the host" and "give
+     * it to a VM" are one pair of operations rather than a write repeated in five places.
+     */
+    private final UsbProbe probe =
+        new UsbProbe(new File(SYSFS_ROOT), UsbPassthroughManager::driversProbe);
+    /** The rules and the per-device flags; every call into it is made under [lock]. */
+    private final UsbRuleEngine engine = new UsbRuleEngine();
+    private final File rulesFile = new File(pathJoin(DATA_DIR, "files"), UsbRulesFile.NAME);
+    /**
+     * One thread, so the releases of a stopping VM, the detach of an unplugged device and the
+     * rule passes run in the order they were queued: a pass never races the release that is
+     * making its candidates free.
+     */
+    private final ScheduledExecutorService worker = Executors.newSingleThreadScheduledExecutor(r -> {
+        var t = new Thread(r, "usb-manager");
+        t.setDaemon(true);
+        return t;
+    });
+    /** The debounced rule pass a plug event armed, if any. Guarded by [lock]. */
+    private ScheduledFuture<?> pendingAuto = null;
+    private final ServerContext context;
+    private volatile Consumer<JSONObject> broadcaster = null;
+
+    public UsbPassthroughManager(@NonNull ServerContext context) {
+        this.context = context;
+    }
+
+    /**
+     * Loads the rules and starts the inventory watch. Called once, from the server, and never
+     * throws. A VM that is already RUNNING by now reached that state before anyone was listening
+     * and before there was an inventory to pick from, so the pass its RUNNING edge would have
+     * queued is queued here instead.
+     */
+    public void start(@NonNull Consumer<JSONObject> broadcaster) {
+        this.broadcaster = broadcaster;
+        var rules = UsbRulesFile.load(rulesFile);
+        synchronized (lock) {
+            engine.setRules(rules);
+        }
+        // Before the watch, so nothing can be plugged in between the rules being read and the
+        // gate matching them -- and written either way, never only to 0: the flag outlives this
+        // process, so a daemon that was killed with the switch on left it there, and every
+        // device plugged in from then on would land driverless with nobody to hand it over.
+        setAutoprobe(!rules.isEnabled());
+        try {
+            inventory.start(this::onInventoryChanged, this::onBusesChanged);
+            var devices = inventory.snapshot();
+            var summary = new StringBuilder();
+            for (var device : devices) {
+                if (summary.length() > 0) summary.append(", ");
+                summary.append(fmt("%s:%s %s", device.vid, device.pid, device.sysfs));
+            }
+            Log.i(TAG, fmt("Host USB devices: %d [%s]", devices.size(), summary));
+        } catch (Exception e) {
+            Log.w(TAG, "Failed to start the USB host inventory", e);
+        }
+        var migrated = authorizeWhatAnOlderBuildHid();
+        // autoUp spawned these moments ago, so they get the same wait their edge would have.
+        context.getVMs().forEach((id, inst) -> {
+            if (inst.getState() == VMState.RUNNING) queueAutoAttachWhenReady(inst);
+        });
+        // And one pass whatever is running, which those per-VM ones cannot stand in for: with no
+        // VM up there is nothing to attach, but every device the gate has left idle -- since the
+        // last run, or by the migration a moment ago -- is still waiting to be told where it
+        // belongs. The one pass that runs with the switch off as well: a daemon that was killed
+        // with the gate shut, or a release that never finished, left devices nobody else will
+        // ever ask about, and this is where they are handed back.
+        schedule(() -> {
+            awaitInterfaces(migrated);
+            runPassQuietly("start", true);
+        }, 0);
+    }
+
+    /**
+     * Undoes the one thing an older build of this daemon did that this one cannot: it hid a
+     * device by writing {@code authorized=0}, which left it without a configuration and without
+     * interfaces, and nothing in the state model can see such a device, let alone give it back.
+     * So every device found deauthorized at start is authorized, once, before the first pass;
+     * the kernel re-reads the configuration and the gate decides whether anything binds to it.
+     * Returns the devices it touched, which is what the first pass waits for.
+     *
+     * <p>The cost is that a device somebody deauthorized by hand, outside this daemon, is
+     * authorized at the next daemon start. That is the price of {@code authorized} having
+     * exactly one meaning again -- a device is authorized -- and it is a state nothing here can
+     * tell apart from the one this migration exists for.</p>
+     */
+    @NonNull
+    private List<String> authorizeWhatAnOlderBuildHid() {
+        var migrated = new ArrayList<String>();
+        for (var device : inventory.snapshot()) {
+            if (device.authorized) continue;
+            Log.i(TAG, fmt("USB %s was left deauthorized by an older build; authorizing it",
+                device.sysfs));
+            if (setAuthorized(device.sysfs)) migrated.add(device.sysfs);
+        }
+        return migrated;
+    }
+
+    /**
+     * Waits for the devices the migration authorized to publish their interfaces again, up to
+     * {@link #MIGRATION_SETTLE_TIMEOUT_MS} for all of them together. A device with no interface
+     * is one the first pass can do nothing at all for -- there is nothing to probe and nothing
+     * to hand over -- and no second chance is coming: writing {@code authorized} creates and
+     * removes no device node, so the watch never fires and no trigger follows. One that never
+     * comes back is left with a line in the log rather than waited on for good, and one that was
+     * unplugged meanwhile is simply passed over. Runs on the worker, where every other wait here
+     * runs.
+     */
+    private void awaitInterfaces(@NonNull List<String> devices) {
+        if (devices.isEmpty()) return;
+        var deadline = System.nanoTime()
+            + TimeUnit.MILLISECONDS.toNanos(MIGRATION_SETTLE_TIMEOUT_MS);
+        for (var sysfs : devices) {
+            if (probe.awaitInterfaces(sysfs, deadline)) continue;
+            // Shut down while we waited, which the wait reports the same way it reports a
+            // timeout. Warning about a device that is perfectly well would be the wrong thing to
+            // leave behind in the log of a daemon that was simply told to stop.
+            if (Thread.currentThread().isInterrupted()) return;
+            // Unplugged while we waited: nothing is owed for a device that is not there, and the
+            // devices behind it in the list still are.
+            if (!new File(SYSFS_ROOT, sysfs).isDirectory()) continue;
+            Log.w(TAG, fmt("USB %s published no interface within %d ms of being authorized; the "
+                    + "rules have nothing to give anybody until it is replugged",
+                sysfs, MIGRATION_SETTLE_TIMEOUT_MS));
+            return;
+        }
+    }
+
+    /**
+     * Writes {@code authorized=1} to one device. The only write to that attribute left in the
+     * daemon, and it only ever writes 1: hiding a device is not a thing that is done to it any
+     * more, it is a state -- idle -- that a device is left in.
+     */
+    private static boolean setAuthorized(@NonNull String sysfs) {
+        var file = new File(new File(SYSFS_ROOT, sysfs), "authorized");
+        try (var out = new FileOutputStream(file)) {
+            out.write('1');
+            return true;
+        } catch (IOException e) {
+            Log.w(TAG, fmt("Cannot write %s: %s", file, e.getMessage()));
+            return false;
+        }
+    }
+
+    /**
+     * Opens or shuts the gate. [autoprobe] true is the kernel's own default, which is what the
+     * host is owed whenever this daemon is not deciding; false is the rules being in charge.
+     *
+     * <p>Best effort and loud about it: a gate that could not be shut means devices reach
+     * Android as they always did, which is a feature that does not work rather than a phone that
+     * does not, and a gate that could not be opened is worth a line in the log because every
+     * device plugged in afterwards will look dead.</p>
+     */
+    private static void setAutoprobe(boolean autoprobe) {
+        try (var out = new FileOutputStream(AUTOPROBE_PATH)) {
+            out.write(autoprobe ? '1' : '0');
+            Log.i(TAG, fmt("USB drivers_autoprobe = %d", autoprobe ? 1 : 0));
+        } catch (IOException e) {
+            Log.w(TAG, fmt("Cannot write %s: %s", AUTOPROBE_PATH, e.getMessage()));
+        }
+    }
+
+    /**
+     * Stops the watch and lets the queued releases finish. Called on daemon shutdown, after the
+     * VMs have been stopped: those stops only queue their releases, and the drivers_probe writes
+     * that hand the interfaces back would otherwise be cut off when the process exits.
+     */
+    public void shutdown() {
+        // First, before anything that could throw or hang: the flag is global and the host is
+        // owed it back whatever else this shutdown manages to do. Devices already idle stay
+        // idle -- there is nobody left to decide about them -- and come back on their next plug.
+        setAutoprobe(true);
+        try {
+            inventory.stop();
+        } catch (Exception e) {
+            Log.w(TAG, "Failed to stop the USB host inventory", e);
+        }
+        try {
+            worker.shutdown();
+            if (!worker.awaitTermination(SHUTDOWN_WAIT_SECONDS, TimeUnit.SECONDS))
+                Log.w(TAG, "USB releases did not finish before shutdown");
+        } catch (InterruptedException e) {
+            Thread.currentThread().interrupt();
+        } catch (Exception e) {
+            Log.w(TAG, "Failed to stop the USB worker", e);
+        }
+    }
+
+    /** Every host device, each carrying who holds it right now. */
+    @NonNull
+    public JSONArray hostList() throws JSONException {
+        var array = new JSONArray();
+        // A fresh scan, not the snapshot: binding or unbinding a driver creates and removes no
+        // device node, so the inotify watch never sees it and the snapshot's driver fields go
+        // stale the moment a device is claimed or given back. The list is read on demand and a
+        // scan is four directories, so it is cheaper to read sysfs than to be wrong.
+        for (var device : scanHost()) {
+            // A hub is the tree rather than a device: the scan carries them so that a pass can
+            // give one its driver back, and nothing else -- no list, no rule, no page -- has any
+            // business with one.
+            if (device.isHub()) continue;
+            Attachment attachment;
+            boolean locked;
+            synchronized (lock) {
+                attachment = attachments.get(device.sysfs);
+                locked = engine.isLocked(device.sysfs, device.devnum);
+            }
+            var obj = device.toJson();
+            obj.put("attached_vm", attachment == null ? JSONObject.NULL : attachment.vmId);
+            obj.put("attached_vm_name", attachment == null ? JSONObject.NULL : attachment.vmName);
+            obj.put("attached_port", attachment == null ? JSONObject.NULL : attachment.port);
+            obj.put("attached_controller", attachment == null || attachment.controller == null
+                ? JSONObject.NULL : attachment.controller);
+            // Where the device is comes from the device itself, in its own "state" field; this
+            // is the one thing about it the kernel cannot say -- that the user decided it by
+            // hand, so no pass may decide it again until they say otherwise or it is unplugged.
+            obj.put("lock", locked);
+            obj.put("auto_rule", attachment == null || attachment.rule == null
+                ? JSONObject.NULL : ruleJson(attachment.rule));
+            array.put(obj);
+        }
+        return array;
+    }
+
+    /** Which controller [sysfs] is attached to, null when it is not attached at all. */
+    @Nullable
+    public String attachedController(@NonNull String sysfs) {
+        synchronized (lock) {
+            var attachment = attachments.get(sysfs);
+            return attachment == null ? null : attachment.controller;
+        }
+    }
+
+    /** The rules as the daemon holds them. */
+    @NonNull
+    public UsbRules getRules() {
+        synchronized (lock) {
+            return engine.getRules();
+        }
+    }
+
+    /**
+     * Replaces the rules: validated, kept, written out, the gate set from the switch they
+     * carry, and run once. Returns how many devices that run acted on -- attached, or handed to
+     * the host drivers. A save is not a reason to take anything away -- a device a VM is using
+     * is no candidate -- and does not clear a lock either.
+     *
+     * <p>The one save that takes rather than gives is the master switch's falling edge: a save
+     * that turns it off gives every device this daemon took back to the host, once, and runs no
+     * pass. A save that finds it already off does neither, and one that turns it on runs the
+     * ordinary pass, so the rules apply the moment they are allowed to.</p>
+     */
+    public int setRules(@NonNull JSONObject json) {
+        var rules = UsbRules.fromJson(json, this::targetExists);
+        UsbRuleEngine.Save owed;
+        synchronized (lock) {
+            // Asked and installed under one lock: the falling edge is a comparison with what the
+            // daemon held a moment ago, and the answer would be worth nothing if another save
+            // could land between the two. The new rules go in before the release runs, not
+            // after: with the switch already off no trigger can act, so nothing can lend out a
+            // device behind the release's back.
+            owed = engine.saveOwes(rules);
+            engine.setRules(rules);
+        }
+        try {
+            UsbRulesFile.save(rulesFile, rules);
+        } catch (IOException e) {
+            // The rules are in force regardless; only the copy for the next daemon start is missing.
+            Log.w(TAG, fmt("Failed to write %s", rulesFile), e);
+        }
+        Log.i(TAG, fmt("USB rules set: enabled=%s exact=%d port=%d device=%d any=%d",
+            rules.isEnabled(),
+            rules.layer(UsbRules.Layer.EXACT).size(), rules.layer(UsbRules.Layer.PORT).size(),
+            rules.layer(UsbRules.Layer.DEVICE).size(), rules.layer(UsbRules.Layer.ANY).size()));
+        // On this thread and before either edge runs, so that a device plugged in while the pass
+        // or the release is still working lands on the side of the gate the save asked for.
+        // Written on every save and not only on an edge: the flag is global, so a save is also
+        // the moment to notice that something else has moved it.
+        setAutoprobe(!rules.isEnabled());
+        switch (owed) {
+            case RELEASE:
+                return releaseEverythingAndWait();
+            case NOTHING:
+                return 0;
+            default:
+                return runAutoAttachAndWait("rules");
+        }
+    }
+
+    /**
+     * Whether a rule's target is one the daemon can act on: a VM it knows about.
+     *
+     * <p>The controller a rule names is deliberately not checked here, however tempting it looks.
+     * The daemon's copy of a VM config is read once at daemon start and only replaced when a VM
+     * is created or started, so it cannot tell a controller that does not exist from one the
+     * editor added a moment ago -- and every controller this codebase writes is added that way.
+     * Refusing on that copy would refuse the very save that added the card, and would throw away
+     * the whole payload, including the rules the user changed on the cards that do exist.</p>
+     *
+     * <p>Nothing is lost by trusting it: a rule naming a controller the VM turns out not to have
+     * is passed over when a device is offered ({@link #vmHasController}), never acted on wrongly,
+     * and the rules page labels it as the dangling rule it is.</p>
+     */
+    private boolean targetExists(@NonNull String vmId, @Nullable String controllerId) {
+        return context.getVMs().findById(vmId) != null;
+    }
+
+    /**
+     * Whether the VM a rule points at still has the controller it names, asked of the config that
+     * VM is running with -- the controllers a running VM has are the ones it booted with. A rule
+     * naming none asks whether it has any.
+     */
+    private boolean vmHasController(@NonNull String vmId, @Nullable String controllerId) {
+        var inst = context.getVMs().findById(vmId);
+        return inst != null && VMXhciConfig.findController(inst.item, controllerId) != null;
+    }
+
+    /**
+     * What the rules say about every plugged device, without acting on it. The match is reported
+     * for locked devices and for devices a VM is using too -- the row says so, and "where would
+     * this go" is the question a user editing the rules is asking.
+     */
+    @NonNull
+    public JSONArray testRules() throws JSONException {
+        var array = new JSONArray();
+        // A fresh scan, for the same reason hostList takes one.
+        var devices = scanHost();
+        synchronized (lock) {
+            for (var device : devices) {
+                if (device.isHub()) continue;
+                var attachment = attachments.get(device.sysfs);
+                var decision = engine.decide(UsbRuleEngine.Device.of(device), this::stateOf,
+                    this::vmHasController);
+                var obj = new JSONObject();
+                obj.put("sysfs", device.sysfs);
+                obj.put("id", device.id);
+                obj.put("port", device.port);
+                obj.put("state", device.state().key);
+                obj.put("lock", engine.isLocked(device.sysfs, device.devnum));
+                obj.put("attached_vm", attachment == null ? JSONObject.NULL : attachment.vmId);
+                obj.put("result", decision == null ? JSONObject.NULL : decisionJson(decision));
+                array.put(obj);
+            }
+        }
+        return array;
+    }
+
+    @NonNull
+    private static JSONObject ruleJson(@NonNull UsbRuleEngine.Decision decision)
+        throws JSONException {
+        var obj = new JSONObject();
+        // Null for the fifth zone's own rule, which is in no file and at no index: a reader that
+        // was given "any[0]" for it would go looking for a row the user cannot see or edit.
+        obj.put("layer", decision.layer == null ? JSONObject.NULL : decision.layer.key);
+        obj.put("index", decision.index);
+        // Null for a rule that names no controller, which means the target VM's first one.
+        obj.put("controller", decision.controller == null
+            ? JSONObject.NULL : decision.controller);
+        return obj;
+    }
+
+    @NonNull
+    private static JSONObject decisionJson(@NonNull UsbRuleEngine.Decision decision)
+        throws JSONException {
+        var obj = ruleJson(decision);
+        obj.put("target", decision.target.key);
+        obj.put("vm", decision.vm == null ? JSONObject.NULL : decision.vm);
+        return obj;
+    }
+
+    /** The state of the VM [vmId] names, null when there is no such VM. */
+    @Nullable
+    private VMState stateOf(@NonNull String vmId) {
+        var inst = context.getVMs().findById(vmId);
+        return inst == null ? null : inst.getState();
+    }
+
+    /** Hands the device named by [sysfs] to [vm] and returns the guest port it landed on. */
+    public int attach(@NonNull VMInstance vm, @NonNull String sysfs) {
+        try {
+            return attach(vm, sysfs, null, null);
+        } catch (UsbVmmUnreachableException e) {
+            // To a caller this is a refusal like any other; only a rule pass acts on the difference.
+            throw new RequestException(fmt("crosvm usb attach failed: %s", e.getMessage()));
+        }
+    }
+
+    /**
+     * The one attach path. [wanted] is the controller it should land on, null for the VM's
+     * first; [rule] is the decision that asked for this, or null when the user did, and only
+     * goes on the record, so a device attached by rule and one attached by hand are the same
+     * thing to every release, conflict and listing.
+     *
+     * <p>It is also the one place that makes a device fit to be given away: a device with no
+     * configuration is probed and waited for here, and refused if its interfaces never come.</p>
+     *
+     * @throws UsbVmmUnreachableException when the CLI never reached the VMM: nothing is known
+     *                                    against the device, and nothing was taken from it.
+     */
+    private int attach(@NonNull VMInstance vm, @NonNull String sysfs, @Nullable String wanted,
+                       @Nullable UsbRuleEngine.Decision rule) throws UsbVmmUnreachableException {
+        if (vm.getState() != VMState.RUNNING)
+            throw new RequestException("VM is not running");
+        // What was asked for, or the VM's first controller when nothing was. crosvm's
+        // `usb attach` takes no controller argument -- it emulates one -- so this is the whole of
+        // resolving it today; what it buys is that a rule naming a controller the VM does not
+        // have is refused rather than quietly landing on another one.
+        var controller = VMXhciConfig.findController(vm.item, wanted);
+        if (controller == null)
+            throw new RequestException(wanted == null
+                ? "VM has no USB controller"
+                : fmt("VM has no USB controller %s", wanted));
+        var controllerId = controller.getControllerId();
+        var socket = vm.getControlSocketPath();
+        if (socket == null)
+            throw new RequestException("VM has no control socket");
+        // A fresh scan, not the snapshot: the bus/device numbers behind the node path are
+        // reassigned on every re-enumeration, and a stale node is a different device.
+        UsbHostDevice device = null;
+        for (var candidate : inventory.rescanNow()) {
+            if (!candidate.sysfs.equals(sysfs)) continue;
+            device = candidate;
+            break;
+        }
+        // A scan skips a device whose files went while it was being read; the directory says
+        // whether this name is one of those or is not there at all.
+        if (device == null) device = readUnlistedDevice(sysfs);
+        if (device.isHub())
+            throw new RequestException("refusing to attach a hub");
+        var vmId = vm.getId().toString();
+        var vmName = vm.getName();
+        int epoch;
+        synchronized (lock) {
+            var existing = attachments.get(sysfs);
+            if (existing != null)
+                throw new RequestException(fmt("device already attached to VM %s", existing.vmName));
+            epoch = stopEpoch(vmId);
+        }
+        // The device half of the gate, and the last moment anyone can put it right: a device that
+        // came up while the gate was shut has no configuration, so it has no interfaces, and a
+        // VMM handed one of those claims a bare device and lets the GUEST choose. On the phone
+        // that gave the camera an interface 0 of class FF instead of 14, so uvcvideo never bound
+        // in the guest and there was no /dev/video0. The DEVICE probe here is what makes the
+        // configuration a VM gets the one the host would have chosen; the gate is still shut, so
+        // no host driver follows it onto the interfaces.
+        if (!probe.configureForVm(sysfs))
+            throw new RequestException(fmt("USB %s has no configuration and published no "
+                + "interface within %d ms of being probed", sysfs, UsbProbe.INTERFACES_TIMEOUT_MS));
+        var control = new CrosvmUsbControl(getPrebuiltBinaryPath("crosvm"), socket);
+        // Where the VMM says why it refused, if it does: a point taken now, so that a refusal
+        // can read what it logged from here on. Taking it is a counter read and costs nothing.
+        var vmmLog = vm.getStream(STREAM_STDERR);
+        var vmmMark = vmmLog == null ? 0 : vmmLog.mark();
+        int port;
+        // Outside the lock: the CLI opens the node and claims every interface, which takes as
+        // long as the slowest host driver needs to let go.
+        try {
+            port = control.attach(device.node);
+        } catch (UsbVmmUnreachableException e) {
+            // The CLI opens the node before it connects and claims nothing until the VMM has the
+            // fd, so the host still holds every interface and there is nothing to give back.
+            throw e;
+        } catch (UsbControlException e) {
+            // A refusal can come after the VMM has already claimed part of the device, and it
+            // never hands those interfaces back on its own. No record exists to release them
+            // later either, so this is the only chance to give them to the host.
+            restoreHostDrivers(sysfs, vmId);
+            throw new RequestException(CrosvmUsbControl.attachFailureMessage(
+                e.token, e.stderr, vmmLogSince(vmmLog, vmmMark)));
+        } catch (IOException e) {
+            restoreHostDrivers(sysfs, vmId);
+            throw new RequestException(fmt("crosvm usb attach failed: %s", e.getMessage()));
+        }
+        String lostTo = null;
+        boolean stopped = false;
+        synchronized (lock) {
+            var existing = attachments.get(sysfs);
+            if (existing != null) lostTo = existing.vmName;
+            else if (stopEpoch(vmId) != epoch) stopped = true;
+            else {
+                attachments.put(sysfs, new Attachment(vmId, vmName, port, sysfs, device.vid,
+                    device.pid, device.node, controllerId.isEmpty() ? null : controllerId, rule));
+                // The VMM holds the whole device now, and this record's release will give the
+                // whole device back; whatever an earlier restore could not is not owed twice.
+                leftovers.forgetDevice(sysfs);
+            }
+        }
+        if (stopped) {
+            // The VM went down while we were in the CLI and its release pass has already run.
+            // Filing the record now would strand the device on a dead VM forever, and there is
+            // nobody left to send a detach to, so just hand it straight back.
+            restoreHostDrivers(sysfs, vmId);
+            throw new RequestException("VM is not running");
+        }
+        if (lostTo != null) {
+            // A concurrent attach of the same device won while we were in the CLI; give the port
+            // we were handed back before reporting the conflict.
+            try {
+                control.detach(port);
+            } catch (Exception e) {
+                Log.w(TAG, fmt("Failed to undo a lost attach on port %d: %s", port, e.getMessage()));
+            }
+            throw new RequestException(fmt("device already attached to VM %s", lostTo));
+        }
+        Log.i(TAG, fmt("Attached USB %s (%s:%s) to VM %s on port %d (%s)",
+            sysfs, device.vid, device.pid, vmName, port, rule == null ? "manual"
+                : fmt("auto, %s", rule.where())));
+        broadcastVm(vmId, vmName);
+        broadcastHost();
+        return port;
+    }
+
+    /** The device behind a sysfs name the scan did not return, or the step-4 refusal. */
+    @NonNull
+    private UsbHostDevice readUnlistedDevice(@NonNull String sysfs) {
+        // [sysfs] comes straight from the request; keep the read inside the device root.
+        var dir = new File(SYSFS_ROOT, sysfs);
+        if (!SYSFS_ROOT.equals(dir.getParent()))
+            throw new RequestException(fmt("no such USB device: %s", sysfs));
+        try {
+            return UsbHostDevice.fromSysfs(dir, DEV_ROOT);
+        } catch (IOException e) {
+            throw new RequestException(fmt("no such USB device: %s", sysfs));
+        }
+    }
+
+    /** Must be called under [lock]. */
+    private int stopEpoch(@NonNull String vmId) {
+        var epoch = stopEpochs.get(vmId);
+        return epoch == null ? 0 : epoch;
+    }
+
+    /**
+     * Takes a device back from [vm], addressed either by its sysfs name or by its guest port.
+     * This is the user's doing, so the device is locked: no pass offers it to a VM again until
+     * they say otherwise or it is unplugged -- without that the rule that lent it out would take
+     * it straight back and a manual detach would be a thing the user cannot do. The releases a
+     * stop or an unplug make are not detaches and lock nothing.
+     */
+    public void detach(@NonNull VMInstance vm, @Nullable String sysfs, @Nullable Integer port) {
+        var vmId = vm.getId().toString();
+        Attachment attachment = null;
+        synchronized (lock) {
+            for (var candidate : attachments.values()) {
+                if (!candidate.vmId.equals(vmId)) continue;
+                if (sysfs != null && !sysfs.isEmpty()) {
+                    if (!candidate.sysfs.equals(sysfs)) continue;
+                } else if (port == null || candidate.port != port) {
+                    continue;
+                }
+                attachment = candidate;
+                break;
+            }
+        }
+        if (attachment == null)
+            throw new RequestException("device not attached to this VM");
+        // Before the VMM is told, not after: a rule pass runs on the worker while this runs on
+        // an IPC thread, and a device that is momentarily neither attached nor spoken for is one
+        // that pass can take.
+        lockDevice(attachment.sysfs);
+        dropAttachment(attachment, vm);
+        Log.i(TAG, fmt("Detached USB %s from VM %s; locked until unplugged",
+            attachment.sysfs, vm.getName()));
+        restoreHostDrivers(attachment.sysfs, vmId);
+        broadcastVm(vmId, vm.getName());
+        broadcastHost();
+    }
+
+    /**
+     * Tells [vm]'s VMM to drop [attachment] and takes the record with it, leaving the device
+     * itself alone: what happens to it next is the caller's, because a detach hands it back to
+     * the host while the management page may be hiding it or moving it to another VM.
+     *
+     * @throws RequestException when the CLI could not be reached; the record stays, because the
+     *                          device is still the VM's until we know it is not.
+     */
+    private void dropAttachment(@NonNull Attachment attachment, @NonNull VMInstance vm) {
+        var socket = vm.getControlSocketPath();
+        var state = vm.getState();
+        if (socket == null || state == VMState.STOPPING || state == VMState.STOPPED
+            || state == VMState.REBOOTING) {
+            // There is no VMM left to take the device from, and this is the only path that can
+            // still drop a record the stop hook missed -- refusing here would strand it.
+            synchronized (lock) {
+                attachments.remove(attachment.sysfs);
+            }
+            Log.i(TAG, fmt("Dropped USB %s: VM %s is gone", attachment.sysfs, vm.getName()));
+            return;
+        }
+        var control = new CrosvmUsbControl(getPrebuiltBinaryPath("crosvm"), socket);
+        try {
+            control.detach(attachment.port);
+        } catch (UsbControlException e) {
+            if (!TOKEN_NO_SUCH_PORT.equals(e.token) && !TOKEN_NO_SUCH_DEVICE.equals(e.token))
+                throw new RequestException(fmt("crosvm usb detach failed: %s", e.token));
+            Log.i(TAG, fmt("VMM had already dropped port %d (%s)", attachment.port, e.token));
+        } catch (IOException e) {
+            throw new RequestException(fmt("crosvm usb detach failed: %s", e.getMessage()));
+        }
+        synchronized (lock) {
+            attachments.remove(attachment.sysfs);
+        }
+    }
+
+    /**
+     * The management page's direct action: [sysfs] goes where [target] says, right now, without
+     * the rules being consulted or run again. Returns what it did, and what the device was
+     * before, so the page can say so and a retry after a half-applied batch is not blind. Runs
+     * on the IPC thread, the way attach and detach already do.
+     *
+     * <p>What keeps the next rule pass from undoing it is the lock, which lasts until the user
+     * says otherwise or the device is unplugged -- a rules save does not clear it -- and which
+     * says only that the user decided: what they decided is the device's own state, so a page
+     * that reads the state reads the answer. A move to a VM clears it instead of setting it: the
+     * attachment record is already the shield, and when that VM stops the rules own the device
+     * again, which is the honest reading of "put it on this VM".</p>
+     *
+     * <p>The lock is taken before the device is touched, never after: this runs while a pass may
+     * be running on the worker, and a device that is momentarily neither in use nor locked is
+     * one that pass can take.</p>
+     */
+    @NonNull
+    public JSONObject setTarget(@NonNull String sysfs, @NonNull UsbRules.Target target,
+                                @Nullable VMInstance vm, @Nullable String controller)
+        throws JSONException {
+        // Read from sysfs rather than from the snapshot: this validates the name the request
+        // sent before anything is written to it, and the state and devnum it carries are the
+        // device's own truth this moment.
+        var device = readUnlistedDevice(sysfs);
+        if (target != UsbRules.Target.HOST && device.isHub())
+            throw new RequestException("refusing to take a hub away from the host");
+        Attachment previous;
+        boolean wasLocked;
+        synchronized (lock) {
+            previous = attachments.get(sysfs);
+            wasLocked = engine.isLocked(sysfs, device.devnum);
+        }
+        var res = new JSONObject();
+        res.put("device", sysfs);
+        res.put("target", target.key);
+        res.put("previous", previousJson(device, previous));
+        Integer port = null;
+        switch (target) {
+            case SINK:
+                setTargetSink(device, previous);
+                break;
+            case VM:
+                if (vm == null) throw new RequestException("missing vm_id");
+                port = setTargetVm(vm, device, controller, previous, wasLocked);
+                break;
+            default:
+                setTargetHost(device, previous);
+                break;
+        }
+        String landedOn = null;
+        if (target == UsbRules.Target.VM) {
+            synchronized (lock) {
+                var now = attachments.get(sysfs);
+                landedOn = now == null ? null : now.controller;
+            }
+        }
+        res.put("vm_id", vm == null ? JSONObject.NULL : vm.getId().toString());
+        res.put("controller", landedOn == null ? JSONObject.NULL : landedOn);
+        res.put("port", port == null ? JSONObject.NULL : port);
+        // Read back rather than assumed. The page draws its row from the state, and an action
+        // is a handful of sysfs writes the kernel may not have honoured -- a driver that will
+        // not unbind, an interface no driver wants -- so what happened is read, not believed.
+        var after = freshDeviceAt(sysfs);
+        res.put("state", after == null ? JSONObject.NULL : after.state().key);
+        return res;
+    }
+
+    /**
+     * What a device was before the direct action, said in the same terms the page's row was
+     * drawn in: the device's own state, plus which VM held it when one did.
+     */
+    @NonNull
+    private static JSONObject previousJson(@NonNull UsbHostDevice device,
+                                           @Nullable Attachment attachment) throws JSONException {
+        var obj = new JSONObject();
+        obj.put("state", device.state().key);
+        obj.put("vm_id", attachment == null ? JSONObject.NULL : attachment.vmId);
+        obj.put("port", attachment == null ? JSONObject.NULL : attachment.port);
+        return obj;
+    }
+
+    /** The direct action's "the host keeps it": the lock, the VM's copy taken away, then probe. */
+    private void setTargetHost(@NonNull UsbHostDevice device, @Nullable Attachment previous) {
+        var sysfs = device.sysfs;
+        lockDevice(sysfs, device.devnum);
+        if (previous != null) {
+            var holder = context.getVMs().findById(previous.vmId);
+            // The manual take-back, whole: the CLI, the record, the restore and the broadcasts.
+            if (holder != null) {
+                detach(holder, sysfs, null);
+                return;
+            }
+            synchronized (lock) {
+                attachments.remove(sysfs);
+            }
+            restoreHostDrivers(sysfs, previous.vmId);
+            broadcastVm(previous.vmId, previous.vmName);
+            broadcastHost();
+            return;
+        }
+        // The host action, the same writes a host rule makes: with the gate shut nothing binds a
+        // driver by itself, so an idle device stays idle until these are written.
+        probe.giveToHost(sysfs);
+        broadcastHost();
+    }
+
+    /**
+     * The direct action's "leave it to nobody": the lock, the VM's copy taken away, whatever the
+     * host holds taken off it, and no drivers_probe on the way out -- that write is the one that
+     * would hand the device to Android. What is left is a device with no driver on any
+     * interface, which is what idle is.
+     *
+     * <p>The wait for the VMM matters here as much as it does on the way to another VM: the
+     * usbfs claim outlives the detach that released it, and without the wait the state this
+     * reads back -- and the page redraws from -- would say a VM still has the device.</p>
+     */
+    private void setTargetSink(@NonNull UsbHostDevice device, @Nullable Attachment previous) {
+        var sysfs = device.sysfs;
+        lockDevice(sysfs, device.devnum);
+        if (previous != null) {
+            dropFromHolder(previous);
+            awaitVmmReleased(sysfs);
+            broadcastVm(previous.vmId, previous.vmName);
+        }
+        unbindHostDrivers(sysfs);
+        broadcastHost();
+    }
+
+    /**
+     * The direct action's move to a VM: the previous holder loses the device first, which is
+     * what the user asked for. Nothing is locked afterwards, the attachment being the shield --
+     * but the window between the two halves is fenced with a lock, or a pass running on the
+     * worker could take a device that belongs to nobody for that moment.
+     */
+    private int setTargetVm(@NonNull VMInstance vm, @NonNull UsbHostDevice device,
+                            @Nullable String controller, @Nullable Attachment previous,
+                            boolean wasLocked) {
+        var sysfs = device.sysfs;
+        var vmId = vm.getId().toString();
+        // crosvm emulates the controller and takes no argument for it, so there is nothing a
+        // move inside one VM could change, and a detach and attach could only lose the device.
+        if (previous != null && previous.vmId.equals(vmId)) {
+            synchronized (lock) {
+                engine.unlock(sysfs);
+            }
+            return previous.port;
+        }
+        lockDevice(sysfs, device.devnum);
+        var landed = false;
+        try {
+            if (previous != null) {
+                dropFromHolder(previous);
+                // The claim outlives the detach that released it -- a VMM keeps its usbfs fds
+                // until it has run the release, and one whose xHCI had died kept them until the
+                // process exited -- and the attach below claims every interface. Waited out
+                // here, without a drivers_probe: binding the host drivers would only give the
+                // next claim something more to take away.
+                awaitVmmReleased(sysfs);
+                Log.i(TAG, fmt("Took USB %s from VM %s for VM %s",
+                    sysfs, previous.vmName, vm.getName()));
+                broadcastVm(previous.vmId, previous.vmName);
+            }
+            var port = attach(vm, sysfs, controller, null);
+            landed = true;
+            return port;
+        } catch (UsbVmmUnreachableException e) {
+            // To this caller a VMM that never answered is a refusal like any other.
+            throw new RequestException(fmt("crosvm usb attach failed: %s", e.getMessage()));
+        } finally {
+            // A move that did not land leaves the device on the host -- through the detach
+            // above, or through the attach's own recovery -- and the rules own it again.
+            if (!landed && previous != null) restoreHostDrivers(sysfs, previous.vmId);
+            synchronized (lock) {
+                // A move that landed hands the device over and the attachment shields it from
+                // there. One that did not has said nothing about a device the user had locked by
+                // hand, so the lock goes back to what the request found rather than to nothing.
+                if (landed || !wasLocked) engine.unlock(sysfs);
+            }
+        }
+    }
+
+    /** Takes [attachment] away from whichever VM holds it, or from the records when it is gone. */
+    private void dropFromHolder(@NonNull Attachment attachment) {
+        var holder = context.getVMs().findById(attachment.vmId);
+        if (holder != null) {
+            dropAttachment(attachment, holder);
+            return;
+        }
+        synchronized (lock) {
+            attachments.remove(attachment.sysfs);
+        }
+    }
+
+    /** What [vmId] currently holds. */
+    @NonNull
+    public JSONArray vmList(@NonNull String vmId) throws JSONException {
+        var array = new JSONArray();
+        var owned = new ArrayList<Attachment>();
+        synchronized (lock) {
+            for (var attachment : attachments.values())
+                if (attachment.vmId.equals(vmId)) owned.add(attachment);
+        }
+        for (var attachment : owned) {
+            var obj = new JSONObject();
+            obj.put("sysfs", attachment.sysfs);
+            obj.put("vid", attachment.vid);
+            obj.put("pid", attachment.pid);
+            obj.put("port", attachment.port);
+            obj.put("node", attachment.node);
+            obj.put("controller", attachment.controller == null
+                ? JSONObject.NULL : attachment.controller);
+            array.put(obj);
+        }
+        return array;
+    }
+
+    /**
+     * Called from {@code VMInstance.setState} for every transition. Bookkeeping is released only
+     * once the VMM is gone: at STOPPING crosvm is still alive and still holds every interface it
+     * claimed, so there is nothing to hand back yet and that transition only fences -- an attach
+     * still inside the CLI is refused, but the records stay, and hostList and vmList go on showing
+     * the devices as attached, which is the truth. STOPPED and REBOOTING drop the records without
+     * a word to the VMM -- that process is gone -- and a state transition is never blocked on it.
+     * RUNNING is the other edge the rules care about: the VM can take devices from then on, and
+     * a reboot is a REBOOTING release followed by this, which is how its devices find their way
+     * back. No release runs the rules -- a stop is never the reason a device changes hands.
+     * The release pass of those two edges is also when the interfaces an earlier restore had to
+     * leave claimed get their try: the process that held them is gone by then.
+     */
+    public void onVmState(@NonNull VMInstance vm, @NonNull VMState state) {
+        if (state == VMState.RUNNING) {
+            // Cleared here, on the transition thread, so the queued pass sees it: a failure
+            // was against the instance that is gone, and this is the first moment there is a
+            // new one to try. Holds stay -- those are the user's, not the VM's.
+            synchronized (lock) {
+                engine.forgetFailuresFor(vm.getId().toString());
+            }
+            queueAutoAttachWhenReady(vm);
+            return;
+        }
+        if (state != VMState.STOPPING && state != VMState.STOPPED && state != VMState.REBOOTING)
+            return;
+        try {
+            var vmId = vm.getId().toString();
+            var vmName = vm.getName();
+            // Bumped here, on the transition thread, so it is ordered before the release runs:
+            // an attach still inside the CLI then sees that its VM went down.
+            synchronized (lock) {
+                stopEpochs.put(vmId, stopEpoch(vmId) + 1);
+            }
+            if (state == VMState.STOPPING) return;
+            worker.execute(() -> releaseAll(vmId, vmName));
+        } catch (Exception e) {
+            Log.w(TAG, "Failed to schedule the USB release of a stopping VM", e);
+        }
+    }
+
+    /**
+     * The VM's process is gone: its devices are released, and then whatever an earlier restore
+     * could not give back because this VMM would not let go is tried again -- the claim went
+     * with the process. Runs on the worker. The leftovers are read before the releases and
+     * tried after them, so that what this pass itself gives up on is not waited for twice.
+     */
+    private void releaseAll(@NonNull String vmId, @NonNull String vmName) {
+        try {
+            var released = new ArrayList<Attachment>();
+            List<String> left;
+            synchronized (lock) {
+                var it = attachments.values().iterator();
+                while (it.hasNext()) {
+                    var attachment = it.next();
+                    if (!attachment.vmId.equals(vmId)) continue;
+                    released.add(attachment);
+                    it.remove();
+                }
+                left = leftovers.leftBy(vmId);
+            }
+            for (var attachment : released) {
+                Log.i(TAG, fmt("Released USB %s (%s:%s, %s) from VM %s",
+                    attachment.sysfs, attachment.vid, attachment.pid, attachment.source(),
+                    vmName));
+                // A stop is still not a reason to hand a device to another VM -- nothing here
+                // attaches -- but it is a reason to ask whether the rules want it left alone:
+                // the drivers_probe a restore writes is what makes Android bind the device, and
+                // a device the rules sink must never see that.
+                if (rulesLeaveItIdle(attachment.sysfs)) {
+                    Log.i(TAG, fmt("USB %s stays idle: the rules sink it", attachment.sysfs));
+                    continue;
+                }
+                restoreHostDrivers(attachment.sysfs, vmId);
+            }
+            var recovered = left.isEmpty() ? 0
+                : recoverLeftovers(left, fmt("VM %s stopped", vmName));
+            // Most state changes concern a VM that never held a device; say nothing about those.
+            if (released.isEmpty() && recovered == 0) return;
+            broadcastVm(vmId, vmName);
+            broadcastHost();
+        } catch (Exception e) {
+            Log.w(TAG, "Failed to release the USB devices of a stopping VM", e);
+        }
+    }
+
+    /**
+     * The inventory saw a difference, and every difference owes a pass -- not only the additions.
+     * A device that lost its driver creates and removes no node, so it raises nothing of its own,
+     * and with the gate shut nothing hands it back: on the phone, unbinding and rebinding hub 1-1
+     * left it driverless with camera, audio, mouse, card reader and flash drive all gone from the
+     * tree, and 78 seconds later the daemon had still said nothing, while a pass forced by hand
+     * put the whole tree back in 7. The pass is idempotent and cheap, and a diff that owes it
+     * nothing -- an unplug of a device the rules never spoke for -- decides nothing and says
+     * nothing.
+     *
+     * <p>"Every difference" is every difference a rescan finds, and only a node event raises one
+     * ({@link UsbHostInventory.Diff}): what this reaches is a driver change that moved nodes,
+     * which the measured case did and which is the only kind anything here creates.</p>
+     */
+    private void onInventoryChanged(@NonNull UsbHostInventory.Diff diff) {
+        for (var device : diff.removed) {
+            Attachment attachment;
+            List<String> dropped;
+            synchronized (lock) {
+                attachment = attachments.get(device.sysfs);
+                // The node is gone, and with it the instance a hold or a failure was about;
+                // whatever is plugged in there next is a new device the rules may take.
+                engine.forget(device.sysfs);
+                // And with it the interfaces still owed to the host: there is no host driver
+                // to bind to a device that is not there.
+                dropped = leftovers.forgetDevice(device.sysfs);
+            }
+            if (!dropped.isEmpty())
+                Log.i(TAG, fmt("USB %s was unplugged with %d interface(s) still owed to the host",
+                    device.sysfs, dropped.size()));
+            if (attachment == null) continue;
+            worker.execute(() -> releaseUnplugged(attachment));
+        }
+        // Unconditional: the listener is only called for a difference at all, and which of the
+        // three kinds it was decides only what the pass is called in the log.
+        scheduleAutoAttach(diff.reason());
+        // The broadcast lists the host afresh, and that scan is read for leftovers on the way.
+        broadcastHost();
+    }
+
+    /**
+     * A USB controller was registered or removed. Nothing was plugged in and no device changed,
+     * so no rule has anything to say -- but a root hub that came up while the gate was shut has
+     * no driver, and a root hub with no driver is a bus whose ports are never scanned. Nothing
+     * below it can enumerate, so this is the only trigger that will ever be raised for it: the
+     * pass sweeps the root hubs ({@link #driverlessRootHubs}) and hands the bus back its driver.
+     */
+    private void onBusesChanged() {
+        scheduleAutoAttach("controller");
+    }
+
+    /** A fresh scan of the host, read for leftovers on the way: every on-demand list takes one. */
+    @NonNull
+    private List<UsbHostDevice> scanHost() {
+        var devices = inventory.scan();
+        noticeLeftovers(devices);
+        return devices;
+    }
+
+    /**
+     * Reads a scan against the leftovers. A recorded interface the scan shows free -- no driver
+     * at all, so the claim that kept it is gone -- gets its try on the worker, whatever its VM
+     * is doing; one a host driver holds again was given back some other way and is forgotten.
+     * Nothing to do is the common case and costs one lock and a lookup.
+     */
+    private void noticeLeftovers(@NonNull List<UsbHostDevice> devices) {
+        UsbLeftovers.Scan scan;
+        synchronized (lock) {
+            if (leftovers.isEmpty()) return;
+            var drivers = new HashMap<String, String>();
+            for (var device : devices)
+                for (var iface : device.interfaces) drivers.put(iface.name, iface.driver);
+            scan = leftovers.scan(drivers);
+        }
+        for (var entry : scan.reclaimed.entrySet())
+            Log.i(TAG, fmt("USB %s is back with %s; nothing left to restore",
+                entry.getKey(), entry.getValue()));
+        if (scan.free.isEmpty()) return;
+        schedule(() -> {
+            if (recoverLeftovers(scan.free, "claim gone") > 0) broadcastHost();
+        }, 0);
+    }
+
+    /**
+     * A later try at interfaces a restore pass had to leave unbound; [reason] says what
+     * prompted it. Runs on the worker, with the same wait for the claim as the first try. The
+     * interfaces are taken off the record first -- a try that finds one still claimed puts it
+     * back -- and any whose device has meanwhile been attached again is passed over, since
+     * that attachment's own release will hand the whole device back. Returns how many were
+     * offered to the host.
+     */
+    private int recoverLeftovers(@NonNull Collection<String> ifaces, @NonNull String reason) {
+        Map<String, String> taken;
+        synchronized (lock) {
+            taken = leftovers.take(ifaces);
+            taken.keySet().removeIf(iface -> attachments.containsKey(UsbLeftovers.deviceOf(iface)));
+        }
+        if (taken.isEmpty()) return 0;
+        var probed = restoreInterfaces(taken, true);
+        if (!probed.isEmpty())
+            Log.i(TAG, fmt("Recovered %d USB interface(s) left unbound earlier (%s): %s",
+                probed.size(), reason, String.join(", ", probed)));
+        return probed.size();
+    }
+
+    /** Whether [vmId]'s process is gone: the VM is stopped, between reboots, or no more. */
+    private boolean vmGone(@NonNull String vmId) {
+        var state = stateOf(vmId);
+        return state == null || state == VMState.STOPPED || state == VMState.REBOOTING;
+    }
+
+    /** Arms (or re-arms) the rule pass a plug owes, so a burst of nodes becomes one pass. */
+    private void scheduleAutoAttach(@NonNull String reason) {
+        synchronized (lock) {
+            if (pendingAuto != null) pendingAuto.cancel(false);
+            try {
+                pendingAuto = worker.schedule(() -> runPassQuietly(reason, false),
+                    AUTO_ATTACH_DEBOUNCE_MS, TimeUnit.MILLISECONDS);
+            } catch (RejectedExecutionException e) {
+                // shutdown() won the race; nothing is going to be attached any more.
+                pendingAuto = null;
+            }
+        }
+    }
+
+    /**
+     * The pass a VM's RUNNING edge owes, once the VM can take part in it. RUNNING is set the
+     * moment the VMM is spawned (see VMInstance), seconds before its control loop listens, and
+     * a pass run at the edge had every attach fail on the connect. So the pass waits: a probe a
+     * second on the worker, for up to a minute, dropped if the VM leaves RUNNING meanwhile. A
+     * VM that never becomes ready is skipped with a warning -- the next trigger will find it.
+     */
+    private void queueAutoAttachWhenReady(@NonNull VMInstance vm) {
+        var reason = fmt("VM %s running", vm.getName());
+        UsbRulePassTiming.whenReady(this::schedule, new UsbRulePassTiming.Wait(
+                () -> vm.getState() == VMState.RUNNING,
+                () -> controlSocketReady(vm),
+                () -> runPassQuietly(reason, false),
+                () -> Log.i(TAG, fmt("USB rules pass (%s) dropped: VM left RUNNING", reason)),
+                () -> Log.w(TAG, fmt(
+                    "USB rules pass (%s) skipped: control socket not ready after %d s", reason,
+                    UsbRulePassTiming.READY_POLL_MS * UsbRulePassTiming.READY_MAX_POLLS / 1000))),
+            UsbRulePassTiming.READY_POLL_MS, UsbRulePassTiming.READY_MAX_POLLS);
+    }
+
+    /**
+     * Whether [vm]'s control socket accepts a connection, which is the VMM's control loop being
+     * up. Connecting and closing is all it takes: crosvm drops a tube that goes away without a
+     * request. Nothing is said over it, so this is the same probe for every backend that has a
+     * socket at all.
+     */
+    private static boolean controlSocketReady(@NonNull VMInstance vm) {
+        var path = vm.getControlSocketPath();
+        if (path == null) return false;
+        try (var socket = new LocalSocket(LocalSocket.SOCKET_SEQPACKET)) {
+            socket.connect(new LocalSocketAddress(path, LocalSocketAddress.Namespace.FILESYSTEM));
+            return true;
+        } catch (Exception e) {
+            return false;
+        }
+    }
+
+    /** The worker as a scheduler; a task the shutting-down worker refuses has nothing to attach to. */
+    private void schedule(@NonNull Runnable task, long delayMs) {
+        try {
+            worker.schedule(task, delayMs, TimeUnit.MILLISECONDS);
+        } catch (RejectedExecutionException e) {
+            Log.i(TAG, "USB rules task dropped: shutting down");
+        }
+    }
+
+    /** Runs a rule pass on the worker and waits for it: the caller wants the count. */
+    private int runAutoAttachAndWait(@NonNull String reason) {
+        try {
+            return worker.submit(() -> runPass(reason, false)).get();
+        } catch (RejectedExecutionException e) {
+            return 0;
+        } catch (InterruptedException e) {
+            Thread.currentThread().interrupt();
+            return 0;
+        } catch (ExecutionException e) {
+            Log.w(TAG, fmt("USB rules pass (%s) failed", reason), e.getCause());
+            return 0;
+        }
+    }
+
+    /**
+     * Gives everything back on the worker and waits for it, the way a pass is run and waited
+     * on: a pass already queued runs first, finds the switch off and does nothing.
+     */
+    private int releaseEverythingAndWait() {
+        try {
+            return worker.submit(() -> releaseEverything()).get();
+        } catch (RejectedExecutionException e) {
+            return 0;
+        } catch (InterruptedException e) {
+            Thread.currentThread().interrupt();
+            return 0;
+        } catch (ExecutionException e) {
+            Log.w(TAG, "Giving the USB devices back to the host failed", e.getCause());
+            return 0;
+        }
+    }
+
+    /**
+     * The master switch went off: every device this daemon took is given back to the host, once.
+     * The VMs lose theirs, everything the gate left idle is offered to the host drivers, and the
+     * locks go with them -- nothing this daemon said about a device outlives the switch that let
+     * it speak. Returns how many devices were given back, which is what the save reports.
+     *
+     * <p>The gate itself is already open before this runs: {@link #setRules} writes it on the
+     * thread the save came in on, so a device plugged in while this is working binds by itself
+     * and this pass owes it nothing. That ordering is also what makes the rest of it survivable
+     * -- best effort, per device, each failure logged and the next device tried -- because the
+     * one thing that must not be left half done is the flag every future plug depends on.</p>
+     *
+     * <p>Which devices are idle is read from the scan rather than from anything remembered:
+     * "give USB back to the host" is a statement about what the host has, and a device left
+     * driverless by a rule, by a VMM that died, or by a daemon that was killed is the same
+     * device to whoever is holding the phone. Nothing here decides anything -- the rules are
+     * already off by the time this runs -- and no pass follows it.</p>
+     */
+    private int releaseEverything() {
+        List<Attachment> held;
+        synchronized (lock) {
+            held = new ArrayList<>(attachments.values());
+        }
+        var given = 0;
+        var vms = new LinkedHashMap<String, String>();
+        for (var attachment : held) {
+            try {
+                dropFromHolder(attachment);
+                restoreHostDrivers(attachment.sysfs, attachment.vmId);
+                vms.put(attachment.vmId, attachment.vmName);
+                given++;
+                Log.i(TAG, fmt("Took USB %s (%s:%s) back from VM %s", attachment.sysfs,
+                    attachment.vid, attachment.pid, attachment.vmName));
+            } catch (Exception e) {
+                Log.w(TAG, fmt("Could not take USB %s back from VM %s: %s", attachment.sysfs,
+                    attachment.vmName, e.getMessage()));
+            }
+        }
+        // The root hubs first, and not from the scan: one the gate left driverless is a bus
+        // whose ports were never scanned, so every device on it is missing from the scan below
+        // -- and stays missing, because opening the gate only decides what the kernel does with
+        // the next device to enumerate, and none will until the hub has its driver.
+        for (var hub : driverlessRootHubs()) {
+            try {
+                if (probe.giveToHost(hub) == 0) continue;
+                given++;
+                Log.i(TAG, fmt("USB root hub %s had no driver; the host gets its bus back", hub));
+            } catch (Exception e) {
+                Log.w(TAG, fmt("Could not give USB root hub %s back to the host: %s", hub,
+                    e.getMessage()));
+            }
+        }
+        for (var device : scanHost()) {
+            // Hubs included, and first in the scan's own order by luck rather than design: a
+            // hub without its driver is a whole subtree of devices that never enumerate.
+            if (device.state() != UsbHostDevice.State.IDLE) continue;
+            try {
+                if (probe.giveToHost(device.sysfs) == 0) continue;
+                given++;
+                Log.i(TAG, fmt("USB %s was idle; the host gets it back", device.sysfs));
+            } catch (Exception e) {
+                Log.w(TAG, fmt("Could not give USB %s back to the host: %s", device.sysfs,
+                    e.getMessage()));
+            }
+        }
+        synchronized (lock) {
+            engine.clearLocks();
+        }
+        Log.i(TAG, fmt("USB passthrough turned off: %d device(s) given back to the host", given));
+        for (var vm : vms.entrySet()) broadcastVm(vm.getKey(), vm.getValue());
+        broadcastHost();
+        return given;
+    }
+
+    /**
+     * One pass, and if it found a VMM unreachable, up to {@link UsbRulePassTiming#MAX_RETRIES}
+     * more a couple of seconds apart -- the socket was not listening yet, and blaming the device
+     * would keep it on the host until the next trigger. Returns what the first pass attached.
+     */
+    private int runPass(@NonNull String reason, boolean daemonStart) {
+        var result = runAutoAttach(reason, daemonStart);
+        if (result.unreachable) {
+            var again = fmt("%s, retry", reason);
+            UsbRulePassTiming.retry(this::schedule, () -> {
+                var r = runAutoAttachOrNull(again, daemonStart);
+                return r == null || !r.unreachable;
+            }, UsbRulePassTiming.RETRY_DELAY_MS, UsbRulePassTiming.MAX_RETRIES);
+        }
+        return result.applied;
+    }
+
+    private void runPassQuietly(@NonNull String reason, boolean daemonStart) {
+        try {
+            runPass(reason, daemonStart);
+        } catch (Exception e) {
+            Log.w(TAG, fmt("USB rules pass (%s) failed", reason), e);
+        }
+    }
+
+    /** A pass that threw is over, not one to try again. */
+    @Nullable
+    private PassResult runAutoAttachOrNull(@NonNull String reason, boolean daemonStart) {
+        try {
+            return runAutoAttach(reason, daemonStart);
+        } catch (Exception e) {
+            Log.w(TAG, fmt("USB rules pass (%s) failed", reason), e);
+            return null;
+        }
+    }
+
+    /** What one pass did, and whether a VMM it needed was not there to be asked. */
+    private static final class PassResult {
+        final int applied;
+        final boolean unreachable;
+
+        PassResult(int applied, boolean unreachable) {
+            this.applied = applied;
+            this.unreachable = unreachable;
+        }
+    }
+
+    /**
+     * One pass of the rules over every candidate. The scan is fresh, the plan is made under the
+     * lock, and the actions run outside it, one after another, through the same path a manual
+     * attach takes: host takes both probes ({@link UsbProbe#giveToHost}), a VM has the device
+     * handed over once the device probe has given it a configuration, and a sink does nothing at
+     * all, which is what leaves the device where the gate put it. A device whose
+     * attach fails is marked for the VM it failed for, so the next pass passes that rule over
+     * instead of failing the same way again -- until the device is replugged or that VM next
+     * comes up. The exception is a VMM the CLI could not reach: that says nothing about the
+     * device, so nothing is remembered against it, the VM's other devices are left for the rerun
+     * rather than fail one by one, and the result says the pass should come back.
+     *
+     * <p>The scan may not be the inventory's snapshot, however tempting: a device's state is the
+     * drivers bound to its interfaces, and binding or unbinding one creates and removes no
+     * device node, so the inotify watch never hears about it and the snapshot's drivers are as
+     * old as the last plug event on that bus. The candidate filter is that state.</p>
+     *
+     * <p>Two kinds of device never reach a rule. A hub is the tree rather than a device -- it is
+     * refused everywhere a device is lent out -- but it does need the fifth zone's answer, and
+     * urgently: a hub the gate left driverless takes its whole subtree with it, and nothing
+     * below it will ever enumerate to raise a trigger. The root hubs are swept for the same
+     * reason and are not in the scan at all ({@link #driverlessRootHubs}). And with the master
+     * switch off no trigger acts: no rule runs and nothing is handed back either, which is what
+     * "the rules do not run" has to mean if an interface a developer unbound by hand is to stay
+     * unbound. The one exception is [daemonStart], where a gate left shut by a killed daemon, or
+     * a release that never finished, is itself the reason a device is idle and nobody else is
+     * ever going to ask about it.</p>
+     */
+    @NonNull
+    private PassResult runAutoAttach(@NonNull String reason, boolean daemonStart) {
+        var devices = scanHost();
+        List<UsbRuleEngine.Decision> plan;
+        // Devices no rule will speak for, which must not be left driverless all the same.
+        var probeBack = new ArrayList<UsbRuleEngine.Device>();
+        boolean recover;
+        synchronized (lock) {
+            var enabled = engine.rulesEnabled();
+            recover = engine.recoversIdleDevices(daemonStart);
+            var plugged = new ArrayList<UsbRuleEngine.Device>();
+            for (var device : devices) {
+                // The record as well as the state: a device a VM holds reads vmuse and is no
+                // candidate already, but the record is this daemon's own word on who has it,
+                // and the two disagreeing is exactly when nothing may be decided about it.
+                if (attachments.containsKey(device.sysfs)) continue;
+                if (enabled && !device.isHub()) {
+                    plugged.add(UsbRuleEngine.Device.of(device));
+                    continue;
+                }
+                if (!recover) continue;
+                if (device.state() != UsbHostDevice.State.IDLE) continue;
+                // A locked device is the user's answer, and "leave it to nobody" is one of the
+                // two answers they can give: the host does not get it back behind their back.
+                if (engine.isLocked(device.sysfs, device.devnum)) continue;
+                probeBack.add(UsbRuleEngine.Device.of(device));
+            }
+            plan = enabled
+                ? engine.plan(plugged, this::stateOf, this::vmHasController)
+                : Collections.emptyList();
+        }
+        var attached = 0;
+        var probed = 0;
+        var idle = 0;
+        var unreachable = new HashSet<String>();
+        for (var device : probeBack) {
+            if (!stillFree(device.sysfs, device.devnum)) continue;
+            if (probe.giveToHost(device.sysfs) == 0) continue;
+            probed++;
+            Log.i(TAG, fmt("USB %s was idle and no rule speaks for it; the host gets it",
+                device.sysfs));
+        }
+        // No lock and no record to ask about: a bus is not a device anybody can decide about,
+        // and a root hub without its driver is every device below it not existing.
+        if (recover)
+            for (var hub : driverlessRootHubs()) {
+                if (probe.giveToHost(hub) == 0) continue;
+                probed++;
+                Log.i(TAG, fmt("USB root hub %s had no driver; the host gets its bus back", hub));
+            }
+        for (var decision : plan) {
+            var device = decision.device;
+            var where = decision.where();
+            // Asked again, at the moment of the write rather than when the plan was made: the
+            // lock was released before any of this ran, an attach spends seconds inside the
+            // crosvm CLI, and the management page acts on an IPC thread the whole time. A device
+            // the user has decided about since is no longer this pass's to touch.
+            if (!stillFree(device.sysfs, device.devnum)) continue;
+            if (decision.target == UsbRules.Target.SINK) {
+                // The whole of a sink: the search stopped here and nothing is done, so a device
+                // the gate handed over driverless stays that way. A device the host already has
+                // stays the host's, which is the one thing "do nothing" cannot undo -- it comes
+                // back idle on its next plug, and this rule is what keeps it there.
+                idle++;
+                continue;
+            }
+            if (decision.target == UsbRules.Target.HOST) {
+                // Nothing to do for a device the host already has, which is what makes this the
+                // cheap steady state of every pass for most devices on the phone.
+                if (probe.giveToHost(device.sysfs) == 0) continue;
+                probed++;
+                Log.i(TAG, fmt("USB %s (%s) goes to the host by %s", device.sysfs, device.id,
+                    where));
+                continue;
+            }
+            // A VM decision always names one; the other two targets returned above.
+            var vmId = decision.vm;
+            if (vmId == null || unreachable.contains(vmId)) continue;
+            var inst = context.getVMs().findById(vmId);
+            if (inst == null) continue;
+            try {
+                attach(inst, device.sysfs, decision.controller, decision);
+                attached++;
+                broadcastAuto("usb_auto_attached", inst, decision, null);
+            } catch (UsbVmmUnreachableException e) {
+                unreachable.add(vmId);
+                Log.w(TAG, fmt("Auto attach of USB %s (%s) to VM %s by rule %s: %s; will retry",
+                    device.sysfs, device.id, inst.getName(), where, e.getMessage()));
+            } catch (Exception e) {
+                synchronized (lock) {
+                    engine.markFailed(device.sysfs, vmId);
+                }
+                Log.w(TAG, fmt("Auto attach of USB %s (%s) to VM %s by rule %s failed: %s",
+                    device.sysfs, device.id, inst.getName(), where, e.getMessage()));
+                broadcastAuto("usb_auto_failed", inst, decision, e.getMessage());
+            }
+        }
+        // An attach broadcasts for itself; the drivers_probe writes are the pass's own doing.
+        if (probed > 0) broadcastHost();
+        // A pass that decided nothing says so quietly. Every plug, unplug and driver change
+        // runs one now, and most of them find every device already where the rules want it: a
+        // line per pass would bury the ones that did something under the ones that could not. A
+        // sink is not "something done" -- deciding to leave a device exactly as it is changes
+        // as little as deciding nothing at all -- but the count is still in the line when the
+        // pass has anything else to report.
+        var summary = fmt("USB rules pass (%s): %d decision(s), %d attached, %d given to the "
+                + "host, %d left idle%s", reason, plan.size(), attached, probed, idle,
+            unreachable.isEmpty() ? "" : ", VMM unreachable");
+        if (attached > 0 || probed > 0 || !unreachable.isEmpty()) Log.i(TAG, summary);
+        // Still said, one level down. "A pass ran and decided nothing" is what every device
+        // check of this model leaned on -- a sink that left a device idle and a trigger that
+        // never fired look alike from the outside, and only this line tells them apart -- and
+        // the level is what keeps it from burying the passes that did something.
+        else Log.d(TAG, summary);
+        return new PassResult(attached + probed, !unreachable.isEmpty());
+    }
+
+    /** [vm] is null for an outcome that names no VM, which every outcome but an attach is. */
+    private void broadcastAuto(@NonNull String event, @Nullable VMInstance vm,
+                               @NonNull UsbRuleEngine.Decision decision, @Nullable String error) {
+        try {
+            var data = new JSONObject();
+            data.put("vm_id", vm == null ? JSONObject.NULL : vm.getId().toString());
+            data.put("vm_name", vm == null ? JSONObject.NULL : vm.getName());
+            data.put("target", decision.target.key);
+            data.put("sysfs", decision.device.sysfs);
+            data.put("id", decision.device.id);
+            data.put("port", decision.device.port);
+            // Null for the fifth zone's rule, as everywhere a decision goes on the wire; only
+            // an attach broadcasts today, and those name a rule from the file.
+            data.put("layer", decision.layer == null ? JSONObject.NULL : decision.layer.key);
+            data.put("index", decision.index);
+            data.put("controller", decision.controller == null
+                ? JSONObject.NULL : decision.controller);
+            if (error != null) data.put("error", error);
+            broadcast(event, data);
+        } catch (Exception e) {
+            Log.w(TAG, fmt("Failed to build %s", event), e);
+        }
+    }
+
+    /**
+     * A device that was pulled while attached. crosvm only finds out on the next transfer, so the
+     * detach has to come from here; the host has nothing to rebind, the device is gone.
+     */
+    private void releaseUnplugged(@NonNull Attachment attachment) {
+        try {
+            var inst = context.getVMs().findById(attachment.vmId);
+            var socket = inst == null ? null : inst.getControlSocketPath();
+            if (socket != null) {
+                try {
+                    new CrosvmUsbControl(getPrebuiltBinaryPath("crosvm"), socket)
+                        .detach(attachment.port);
+                } catch (Exception e) {
+                    Log.w(TAG, fmt("Detach of unplugged %s failed: %s",
+                        attachment.sysfs, e.getMessage()));
+                }
+            }
+            synchronized (lock) {
+                attachments.remove(attachment.sysfs);
+            }
+            Log.i(TAG, fmt("USB %s (%s:%s) was unplugged while attached to VM %s",
+                attachment.sysfs, attachment.vid, attachment.pid, attachment.vmName));
+            broadcastVm(attachment.vmId, attachment.vmName);
+            broadcastHost();
+        } catch (Exception e) {
+            Log.w(TAG, "Failed to release an unplugged USB device", e);
+        }
+    }
+
+    /**
+     * The mirror of {@link UsbProbe#giveToHost}: every host driver bound to an interface of
+     * [sysfs] is taken off it, leaving the device idle. Returns how many it unbound.
+     *
+     * <p>This is the whole of "leave it to nobody" for a device the host already has. The gate
+     * only decides what happens at enumeration, so a device Android bound before the switch went
+     * on -- or one a host rule handed it -- stays bound until something writes here, and the
+     * management page's Sink row would otherwise do nothing for the commonest device there is.
+     * Deliberately not part of what a sink RULE does: a rule's sink is the search stopping, and
+     * with the gate shut its devices are already idle.</p>
+     *
+     * <p>A usbfs claim is left alone. That is a VMM's live fd rather than a driver the host was
+     * given, unbinding does not revoke it, and the wait the caller has already done is what it
+     * gets instead.</p>
+     */
+    private int unbindHostDrivers(@NonNull String sysfs) {
+        var unbound = 0;
+        for (var name : probe.interfacesOf(sysfs)) {
+            var driver = probe.driverOf(name);
+            if (driver.isEmpty() || DRIVER_USBFS.equals(driver)) continue;
+            var result = run("echo %s > %s/%s/unbind", name, DRIVERS_DIR, driver);
+            Log.i(TAG, fmt("unbind %s from %s: code=%d %s",
+                name, driver, result.getCode(), result.getErrString()));
+            unbound++;
+        }
+        return unbound;
+    }
+
+    /**
+     * The root hubs the gate has left without a driver, which no scan can report and no rule can
+     * speak for: {@code UsbHostInventory} lists devices, and a root hub is a bus.
+     *
+     * <p>They are swept all the same, and it is the most urgent sweep there is. The gate is a
+     * bus flag and a host controller registered while it is shut -- a phone's dual-role port
+     * switching to host when the OTG cable goes in -- hands its root hub no driver either. A
+     * root hub with no driver is a hub whose ports are never scanned: nothing plugged into it
+     * enumerates, no node appears, no trigger is raised, and the bus stays dead until the cable
+     * is pulled. Nobody would ever ask about it, so every pass that may hand a device back asks
+     * for it.</p>
+     */
+    @NonNull
+    private List<String> driverlessRootHubs() {
+        var found = new ArrayList<String>();
+        var entries = new File(SYSFS_ROOT).listFiles();
+        if (entries == null) return found;
+        for (var entry : entries) {
+            var name = entry.getName();
+            if (!UsbHostDevice.isRootHubName(name)) continue;
+            if (!needsHostDrivers(name)) continue;
+            found.add(name);
+        }
+        Collections.sort(found);
+        return found;
+    }
+
+    /** Whether anything of [sysfs] -- the device itself, or one of its interfaces -- is unbound. */
+    private boolean needsHostDrivers(@NonNull String sysfs) {
+        if (probe.driverOf(sysfs).isEmpty()) return true;
+        // A configuration is what publishes the interfaces, so a device without one has no
+        // interface for the loop below to find anything wrong with and would answer "nothing
+        // owed" while being the most broken thing on the bus. For a root hub that reading is a
+        // bus with no hub driver: no port is ever scanned and nothing below it enumerates.
+        if (!probe.isConfigured(sysfs)) return true;
+        for (var name : probe.interfacesOf(sysfs))
+            if (probe.driverOf(name).isEmpty()) return true;
+        return false;
+    }
+
+    /**
+     * One write to the bus's {@code drivers_probe}, which is the kernel's "try to bind this
+     * device now" and the only thing that binds anything while the gate is shut. Deliberately
+     * not conditional on the gate: the flag only decides what happens at enumeration, and this
+     * is the ask that comes afterwards.
+     */
+    private static void driversProbe(@NonNull String name) {
+        var result = run("echo %s > /sys/bus/usb/drivers_probe", name);
+        Log.i(TAG, fmt("drivers_probe %s: code=%d %s",
+            name, result.getCode(), result.getErrString()));
+    }
+
+    /**
+     * Locks the instance at [sysfs] against every pass, reading which instance that is now: a
+     * lock is about the unit in the socket at this moment, and one that has been replugged since
+     * is not the device the user was looking at when they decided.
+     */
+    private void lockDevice(@NonNull String sysfs) {
+        var device = freshDeviceAt(sysfs);
+        if (device != null) lockDevice(sysfs, device.devnum);
+    }
+
+    /** As {@link #lockDevice(String)}, for a caller that has just read the device itself. */
+    private void lockDevice(@NonNull String sysfs, int devnum) {
+        synchronized (lock) {
+            engine.lock(sysfs, devnum);
+        }
+    }
+
+    /**
+     * Whether a pass may still act on the device at [sysfs]: nothing has taken it since the plan
+     * was made, and the user has not decided about it either. The counterpart of the lock
+     * {@link #setTarget} takes before it touches anything -- that one fences a pass that has not
+     * started, this one fences the pass that is already walking its plan.
+     */
+    private boolean stillFree(@NonNull String sysfs, int devnum) {
+        synchronized (lock) {
+            return !attachments.containsKey(sysfs) && !engine.isLocked(sysfs, devnum);
+        }
+    }
+
+    /**
+     * Whether the rules want [sysfs] left to nobody now that the VM holding it has let go. Only
+     * that answer is acted on by the caller: a decision naming a running VM is ignored and the
+     * device goes back to the host, which is the no-preemption guarantee -- a stop is never the
+     * reason a device changes hands -- and the next trigger is what offers it to that VM.
+     *
+     * <p>A device the user locked is not the rules' to answer for, and is handed back like any
+     * other: a lock is the answer to "who decided", and the one thing a released device must not
+     * do is stay driverless because of a rule the user has already overruled.</p>
+     */
+    private boolean rulesLeaveItIdle(@NonNull String sysfs) {
+        var device = freshDeviceAt(sysfs);
+        if (device == null) return false;
+        synchronized (lock) {
+            if (engine.isLocked(sysfs, device.devnum)) return false;
+            var decision = engine.decide(UsbRuleEngine.Device.of(device), this::stateOf,
+                this::vmHasController);
+            return decision != null && decision.target == UsbRules.Target.SINK;
+        }
+    }
+
+    /**
+     * The device at [sysfs] as sysfs describes it this moment, or null when it is not there.
+     *
+     * <p>Never the inventory's snapshot, wherever the state or the devnum decides anything:
+     * binding and unbinding a driver creates and removes no {@code /dev/bus/usb} node, so the
+     * watch never fires, nothing invalidates the snapshot, and its idea of who holds a device is
+     * as old as the last plug event on that bus. A handful of small reads, which is what every
+     * list here already pays for the same reason.</p>
+     */
+    @Nullable
+    private static UsbHostDevice freshDeviceAt(@NonNull String sysfs) {
+        // [sysfs] can have come from a request; keep the read inside the device root.
+        var dir = new File(SYSFS_ROOT, sysfs);
+        if (!SYSFS_ROOT.equals(dir.getParent()) || !dir.isDirectory()) return null;
+        try {
+            return UsbHostDevice.fromSysfs(dir, DEV_ROOT);
+        } catch (IOException e) {
+            // Disconnected mid-read: the removal diff is on its way.
+            return null;
+        }
+    }
+
+    /**
+     * Offers every unbound interface of [sysfs] back to the host, [vmId] being the VM whose VMM
+     * held it. The kernel does not rebind a driver once the VMM's claim is released, so nothing
+     * happens until something writes to drivers_probe. Best effort: an interface no driver wants
+     * stays unbound, which is fine; one the VMM will not let go of is recorded for later.
+     */
+    void restoreHostDrivers(@NonNull String sysfs, @NonNull String vmId) {
+        try {
+            var ifaceToVm = new LinkedHashMap<String, String>();
+            for (var name : probe.interfacesOf(sysfs)) ifaceToVm.put(name, vmId);
+            restoreInterfaces(ifaceToVm, false);
+        } catch (Exception e) {
+            Log.w(TAG, fmt("Failed to hand the interfaces of %s back to the host", sysfs), e);
+        }
+    }
+
+    /**
+     * Offers each of [ifaceToVm]'s interfaces back to the host once the VMM's claim on it is
+     * gone, the value being the VM that held it. One the wait gives up on is left unbound and
+     * recorded against that VM for a later try -- and when that VM's process is already gone,
+     * the try is queued at once, because the exit that would have queued it has passed. A
+     * [recovery] is such a later try: it records what it still cannot do but queues nothing, so
+     * an interface nothing ever lets go of cannot keep the worker waiting on it for good.
+     * Returns the interfaces that were offered.
+     */
+    @NonNull
+    private List<String> restoreInterfaces(@NonNull Map<String, String> ifaceToVm,
+                                           boolean recovery) {
+        var probed = new ArrayList<String>();
+        var again = new ArrayList<String>();
+        for (var entry : ifaceToVm.entrySet()) {
+            var name = entry.getKey();
+            // Unplugged meanwhile: nothing to bind, and nothing to remember.
+            if (!new File(SYSFS_ROOT, name).isDirectory()) continue;
+            var claim = awaitReleased(name);
+            if (claim == Claim.HOST) continue;
+            if (claim == Claim.NONE) {
+                probe.probeInterface(name);
+                probed.add(name);
+                continue;
+            }
+            var vmId = entry.getValue();
+            synchronized (lock) {
+                leftovers.leave(name, vmId);
+            }
+            if (!recovery && vmGone(vmId)) again.add(name);
+        }
+        if (!again.isEmpty())
+            schedule(() -> {
+                if (recoverLeftovers(again, "VM already gone") > 0) broadcastHost();
+            }, 0);
+        return probed;
+    }
+
+    /**
+     * Waits for the VMM's claim on every interface of [sysfs] to be gone, and offers nothing to
+     * the host on the way: this is the wait {@link #restoreInterfaces} does before a
+     * drivers_probe, for the caller that is about to claim the device itself rather than give it
+     * back. An interface the wait gives up on is left as it is -- the attach that follows says
+     * what crosvm made of it, which is a better answer than one invented here.
+     */
+    private void awaitVmmReleased(@NonNull String sysfs) {
+        for (var name : probe.interfacesOf(sysfs)) {
+            if (new File(SYSFS_ROOT, name).isDirectory()) awaitReleased(name);
+        }
+    }
+
+    /** What the wait for an interface found holding it. */
+    private enum Claim {
+        /** Nothing: it may be offered to the host. */
+        NONE,
+        /** A host driver: there is nothing to give back. */
+        HOST,
+        /** The VMM, still, when the wait ran out. */
+        VMM,
+    }
+
+    /**
+     * Waits for the host to be allowed [ifaceDir]. A driver that is not usbfs already holds it, so
+     * there is nothing to give back. A usbfs link is the VMM's own claim, which outlives the
+     * moment the device stopped being the VM's by however long the process needs to drop its fd,
+     * so it is waited out rather than read as an owner -- probing through it does nothing and the
+     * interface would stay unbound for good. Blocking is why this runs on the worker (or on an
+     * IPC thread that has already sent the detach).
+     */
+    @NonNull
+    private Claim awaitReleased(@NonNull String iface) {
+        var deadline = System.nanoTime() + TimeUnit.MILLISECONDS.toNanos(USBFS_RELEASE_TIMEOUT_MS);
+        while (true) {
+            var driver = probe.driverOf(iface);
+            if (driver.isEmpty()) return Claim.NONE;
+            if (!DRIVER_USBFS.equals(driver)) return Claim.HOST;
+            if (System.nanoTime() - deadline >= 0) {
+                Log.w(TAG, fmt("%s is still claimed through usbfs after %d ms; leaving it unbound "
+                    + "until the claim is gone", iface, USBFS_RELEASE_TIMEOUT_MS));
+                return Claim.VMM;
+            }
+            try {
+                Thread.sleep(USBFS_POLL_MS);
+            } catch (InterruptedException e) {
+                Thread.currentThread().interrupt();
+                return Claim.VMM;
+            }
+        }
+    }
+
+    /**
+     * What the VMM wrote to [log] since [mark], for a refusal to be explained by. Read after
+     * the restore, which is when the message is composed; when no ERROR is there yet, one short
+     * grace and one more read, because the VMM logs its reason before it answers the CLI and
+     * the daemon's reader of that stream may simply not have run yet. Never on the success path.
+     */
+    @NonNull
+    private static String vmmLogSince(@Nullable ConsoleStream log, long mark) {
+        if (log == null) return "";
+        var text = log.since(mark);
+        if (CrosvmUsbControl.firstErrorLine(text) != null) return text;
+        try {
+            Thread.sleep(VMM_LOG_GRACE_MS);
+        } catch (InterruptedException e) {
+            Thread.currentThread().interrupt();
+            return text;
+        }
+        return log.since(mark);
+    }
+
+    private void broadcastHost() {
+        try {
+            var data = new JSONObject();
+            data.put("devices", hostList());
+            broadcast("usb_host_changed", data);
+        } catch (Exception e) {
+            Log.w(TAG, "Failed to build usb_host_changed", e);
+        }
+    }
+
+    private void broadcastVm(@NonNull String vmId, @Nullable String vmName) {
+        try {
+            var data = new JSONObject();
+            data.put("vm_id", vmId);
+            data.put("vm_name", vmName == null ? JSONObject.NULL : vmName);
+            data.put("devices", vmList(vmId));
+            broadcast("usb_vm_changed", data);
+        } catch (Exception e) {
+            Log.w(TAG, "Failed to build usb_vm_changed", e);
+        }
+    }
+
+    private void broadcast(@NonNull String event, @NonNull JSONObject data) {
+        var target = broadcaster;
+        if (target == null) return;
+        try {
+            data.put("event", event);
+            var envelope = new JSONObject();
+            envelope.put("type", "event");
+            envelope.put("data", data);
+            target.accept(envelope);
+        } catch (Exception e) {
+            Log.w(TAG, fmt("Failed to broadcast %s", event), e);
+        }
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/usb/UsbProbe.java b/app/src/main/java/cn/classfun/droidvm/daemon/usb/UsbProbe.java
new file mode 100644
index 000000000..35469774e
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/usb/UsbProbe.java
@@ -0,0 +1,239 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
+package cn.classfun.droidvm.daemon.usb;
+
+import androidx.annotation.NonNull;
+
+import java.io.File;
+import java.io.IOException;
+import java.nio.charset.StandardCharsets;
+import java.nio.file.Files;
+import java.util.ArrayList;
+import java.util.Collections;
+import java.util.List;
+import java.util.concurrent.TimeUnit;
+
+/**
+ * The two kinds of write to {@code /sys/bus/usb/drivers_probe}, which are not the same ask and
+ * do not bind the same thing.
+ *
+ * <p>A DEVICE probe -- the device's own name, {@code 1-1.3} -- binds {@code usb_generic_driver},
+ * and that driver is what CHOOSES AND SETS the configuration: {@code generic_probe} calls
+ * {@code usb_choose_configuration} and then {@code usb_set_configuration}, and only that call
+ * publishes the interface directories. Enumeration reads every descriptor whatever the gate
+ * says, but the choosing is a probe like any other, so a device that came up while the gate was
+ * shut has no configuration and no interfaces at all -- measured on the phone: the camera
+ * appeared as {@code 1-1.3} with an empty {@code bConfigurationValue}, an empty
+ * {@code bNumInterfaces} and not one interface under it. Under the shut gate no interface driver
+ * follows the generic one, which is exactly the state a VM wants: the interfaces exist, they are
+ * idle, and the configuration is the one the host would have chosen.</p>
+ *
+ * <p>An INTERFACE probe -- one interface's name, {@code 1-1.3:1.0} -- binds the real host driver:
+ * usbhid, uvcvideo, usb-storage, and for a hub the {@code hub} driver, which is what makes its
+ * ports be scanned again and its whole subtree enumerate. It is the only one of the two that can
+ * revive a subtree, and it can do nothing at all for a device that has no interfaces yet.</p>
+ *
+ * <p>So the host gets a device by both, in that order, and a VM gets one by the first alone.
+ * Free of android.*, of the shell and of the log on purpose: the write goes through a
+ * {@link Writer} the manager supplies and the complaining is the caller's, which leaves the order
+ * the two kinds happen in -- the thing that was wrong -- something a unit test can watch.</p>
+ */
+final class UsbProbe {
+    /**
+     * How long a device that has just been probed is given to publish its interfaces. Setting a
+     * configuration re-reads the descriptors and registers an interface device for each, which
+     * took about a second on the test phone when an {@code authorized} write asked for it; a
+     * device probe asks for the same work, and a caller that looked straight away would find a
+     * device with nothing to hand over and nothing to probe.
+     */
+    static final long INTERFACES_TIMEOUT_MS = 3000;
+    static final long INTERFACES_POLL_MS = 100;
+
+    /** One write to the bus's {@code drivers_probe}: the manager's, so nothing here shells out. */
+    interface Writer {
+        void probe(@NonNull String name);
+    }
+
+    private final File root;
+    private final Writer writer;
+    private final long timeoutMs;
+    private final long pollMs;
+
+    UsbProbe(@NonNull File root, @NonNull Writer writer) {
+        this(root, writer, INTERFACES_TIMEOUT_MS, INTERFACES_POLL_MS);
+    }
+
+    /** As above with the wait shortened, for a test that wants the timeout and not the waiting. */
+    UsbProbe(@NonNull File root, @NonNull Writer writer, long timeoutMs, long pollMs) {
+        this.root = root;
+        this.writer = writer;
+        this.timeoutMs = timeoutMs;
+        this.pollMs = pollMs;
+    }
+
+    /**
+     * Whether a configuration is set for [sysfs], which is whether the generic driver has run for
+     * it: the kernel prints {@code bConfigurationValue} from the active configuration and prints
+     * nothing when there is none. That is the same question as "does this device have
+     * interfaces", asked of the device itself rather than of the directory listing, and it is
+     * what decides whether a device probe is owed.
+     */
+    boolean isConfigured(@NonNull String sysfs) {
+        return !read(new File(root, sysfs), "bConfigurationValue").isEmpty();
+    }
+
+    /** The interfaces of [sysfs] as sysfs lists them now, sorted; none once the device is gone. */
+    @NonNull
+    List<String> interfacesOf(@NonNull String sysfs) {
+        var names = new ArrayList<String>();
+        var entries = root.listFiles();
+        if (entries == null) return names;
+        // Not "<sysfs>:" for every device: a root hub is usb3 and its interface is 3-0:1.0.
+        var prefix = UsbHostDevice.interfacePrefix(sysfs);
+        for (var entry : entries)
+            if (entry.getName().startsWith(prefix)) names.add(entry.getName());
+        Collections.sort(names);
+        return names;
+    }
+
+    /** Basename of [name]'s {@code driver} symlink, {@code ""} when nothing holds it. */
+    @NonNull
+    String driverOf(@NonNull String name) {
+        try {
+            var target = Files.readSymbolicLink(new File(root, name).toPath().resolve("driver"));
+            var leaf = target.getFileName();
+            return leaf == null ? "" : leaf.toString();
+        } catch (IOException | UnsupportedOperationException e) {
+            return "";
+        }
+    }
+
+    /**
+     * The DEVICE probe: binds the generic driver to [sysfs] so that it has a configuration and
+     * publishes its interfaces. Returns whether it wrote anything.
+     *
+     * <p>A device that already has a configuration is left alone. The generic driver is bound to
+     * it, so the probe would decide nothing, and the write would put a line in the log for every
+     * pass over every device the host already has -- which is most of them, most of the time.</p>
+     *
+     * <p>The question is the configuration and not the device's own {@code driver} link, which
+     * is what an older shape of this asked, and there is one device the two answers differ for:
+     * one coming back from a VM, which the phone showed as configured with no device driver
+     * bound (1-1.3, its interfaces intact, after the guest let go). Asking about the driver
+     * would re-bind the generic driver and have it choose the configuration again, tearing the
+     * interfaces down and registering them afresh; asking about the configuration keeps the one
+     * that is set and offers those interfaces as they stand. For a single-configuration device
+     * -- everything on the rig -- the two end in the same place, and not tearing an interface
+     * down under whoever is about to be given it is the safer of the two.</p>
+     */
+    boolean probeDevice(@NonNull String sysfs) {
+        if (isConfigured(sysfs)) return false;
+        writer.probe(sysfs);
+        return true;
+    }
+
+    /** The INTERFACE probe, for one interface a caller has already decided about. */
+    void probeInterface(@NonNull String iface) {
+        writer.probe(iface);
+    }
+
+    /**
+     * The INTERFACE probe over every interface of [sysfs] that nothing holds, which is what
+     * offers a device to the host drivers. Returns how many it wrote.
+     *
+     * <p>An interface something already holds is skipped: that is what makes a pass over a device
+     * the host already has cost nothing and log nothing, and it is what keeps this from writing
+     * at a usbfs claim, where a probe does nothing anyway.</p>
+     */
+    int probeInterfaces(@NonNull String sysfs) {
+        var probed = 0;
+        for (var name : interfacesOf(sysfs)) {
+            if (!driverOf(name).isEmpty()) continue;
+            probeInterface(name);
+            probed++;
+        }
+        return probed;
+    }
+
+    /**
+     * The host action, whole: the device first when it has no configuration, then every free
+     * interface. Returns how many writes it made, which is what tells a caller whether anything
+     * was owed at all.
+     *
+     * <p>The order is the point, and the device half is not optional. A device the gate left
+     * unconfigured has no interface for the second half to walk, so an interfaces-only host
+     * action does exactly nothing for it -- which is how a hub that came up under the gate stayed
+     * dead on the phone, taking its whole subtree with it.</p>
+     *
+     * <p>The wait between the two halves is {@link #configureForVm}'s, for the same reason it
+     * takes one: publishing an interface creates and removes no {@code /dev/bus/usb} node, so a
+     * host action that walked an empty list would do half its job with no second chance coming
+     * -- nothing fires the watch, no difference is found, and no pass follows. On the phone the
+     * device write was synchronous every time (the probe of 1-1.2 returned and 1-1.2:1.0 was
+     * written in the same millisecond), so this costs nothing in the case that was measured;
+     * what it buys is that a kernel which defers the generic driver's probe cannot leave a hub
+     * with its subtree dark until some unrelated plug happens along.</p>
+     */
+    int giveToHost(@NonNull String sysfs) {
+        var probed = 0;
+        if (probeDevice(sysfs)) {
+            probed++;
+            awaitInterfaces(sysfs, System.nanoTime() + TimeUnit.MILLISECONDS.toNanos(timeoutMs));
+        }
+        // Read after the write and the wait, never before: the interfaces the loop walks are the
+        // ones the device probe has just created. Whether the wait gave up is not asked -- a
+        // device that published nothing has nothing to walk, and the count says what was done.
+        return probed + probeInterfaces(sysfs);
+    }
+
+    /**
+     * The VM action's precondition: [sysfs] must have a configuration before it is handed over.
+     * Returns whether it has interfaces now.
+     *
+     * <p>A VMM claims interfaces, so a device with none is handed over as a bare device and the
+     * GUEST chooses the configuration. On the phone that turned the camera into a device whose
+     * interface 0 read class FF instead of 14, so uvcvideo never bound in the guest and there was
+     * no {@code /dev/video0}. Probing the device here means the configuration a VM gets is the
+     * one the host would have chosen, and -- the gate still being shut -- no host driver takes
+     * the interfaces on the way past.</p>
+     */
+    boolean configureForVm(@NonNull String sysfs) {
+        // The common case, and the whole cost of it: a device the host or an earlier pass has
+        // already had the generic driver bound to needs nothing and waits for nothing.
+        if (!interfacesOf(sysfs).isEmpty()) return true;
+        probeDevice(sysfs);
+        return awaitInterfaces(sysfs, System.nanoTime() + TimeUnit.MILLISECONDS.toNanos(timeoutMs));
+    }
+
+    /**
+     * Waits until [sysfs] publishes an interface or [deadlineNanos] passes, and says whether it
+     * has one now. A device that has gone meanwhile answers false, having no interfaces: it is
+     * for the caller to tell that apart from a device that never came back, and to say so,
+     * because only one of the two is worth complaining about.
+     */
+    boolean awaitInterfaces(@NonNull String sysfs, long deadlineNanos) {
+        while (interfacesOf(sysfs).isEmpty()) {
+            if (!new File(root, sysfs).isDirectory()) return false;
+            if (System.nanoTime() - deadlineNanos >= 0) return false;
+            try {
+                Thread.sleep(pollMs);
+            } catch (InterruptedException e) {
+                Thread.currentThread().interrupt();
+                return false;
+            }
+        }
+        return true;
+    }
+
+    /** One sysfs attribute of [dir], trimmed; {@code ""} when it is missing or unreadable. */
+    @NonNull
+    private static String read(@NonNull File dir, @NonNull String name) {
+        try {
+            var bytes = Files.readAllBytes(new File(dir, name).toPath());
+            return new String(bytes, StandardCharsets.UTF_8).trim();
+        } catch (IOException e) {
+            return "";
+        }
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/usb/UsbRuleEngine.java b/app/src/main/java/cn/classfun/droidvm/daemon/usb/UsbRuleEngine.java
new file mode 100644
index 000000000..b66559c71
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/usb/UsbRuleEngine.java
@@ -0,0 +1,329 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
+package cn.classfun.droidvm.daemon.usb;
+
+import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
+
+import androidx.annotation.NonNull;
+import androidx.annotation.Nullable;
+
+import java.util.ArrayList;
+import java.util.HashMap;
+import java.util.List;
+import java.util.Map;
+import java.util.function.BiPredicate;
+import java.util.function.Function;
+
+import cn.classfun.droidvm.lib.store.vm.VMState;
+
+/**
+ * Decides what happens to each plugged device: layers in order, then the fifth zone. Pure -- it
+ * holds the rules and the per-device flags and turns a list of devices into a list of decisions
+ * -- while acting on one, broadcasting and persisting are the manager's, which also owns the
+ * lock every call here is made under.
+ *
+ * <p>What a device is doing is not kept here or anywhere else: it is read off the drivers bound
+ * to its interfaces every time a device is scanned ({@link UsbHostDevice.State}) and arrives on
+ * the {@link Device} the caller builds. What is kept is what the kernel cannot say: {@code lock}
+ * is the user's own answer for a device -- the management page saying where it belongs, or a
+ * manual detach -- so no rule pass touches it again, and {@code failedFor} is the VM an attach
+ * failed for, so a rule that keeps failing is not retried on every plug. A lock is about the
+ * instance it was made for, so a replug drops it whatever else happens; both go when the
+ * inventory sees the node itself go, and neither is cleared by a rules save. A failure is about
+ * one run of one VM: it also goes when that VM next reaches RUNNING, because the attach that
+ * failed may have failed for that instance alone -- a control socket not yet answering, a VM
+ * that went down between the decision and the CLI -- and a reboot would otherwise release the
+ * device and never take it back.</p>
+ *
+ * <p>The rule set also carries the master switch, and the two answers this class gives -- what
+ * takes a device, and what a whole pass would take -- are where it is honoured: a trigger asks
+ * the engine before it acts, so switching the rules off makes every trigger a no-op here rather
+ * than at each of the five places one is raised.</p>
+ */
+public final class UsbRuleEngine {
+    /** As much of a host device as a rule can see, plus what makes it a candidate. */
+    public static final class Device {
+        public final String sysfs;
+        public final String id;
+        public final String port;
+        /** The instance at that address: a lock is about this number and no other. */
+        public final int devnum;
+        /** Read from the bound drivers by whoever scanned the device; never stored anywhere. */
+        public final UsbHostDevice.State state;
+
+        public Device(@NonNull String sysfs, @NonNull String id, @NonNull String port, int devnum,
+                      @NonNull UsbHostDevice.State state) {
+            this.sysfs = sysfs;
+            this.id = id;
+            this.port = port;
+            this.devnum = devnum;
+            this.state = state;
+        }
+
+        @NonNull
+        public static Device of(@NonNull UsbHostDevice device) {
+            return new Device(device.sysfs, device.id, device.port, device.devnum, device.state());
+        }
+    }
+
+    /**
+     * The rule that took a device: where it sits in the rule set, what it does with the device,
+     * and the VM when that is where it goes.
+     */
+    public static final class Decision {
+        public final Device device;
+        /** Null for the fifth zone's rule, which is not in the file; see {@link #where()}. */
+        @Nullable
+        public final UsbRules.Layer layer;
+        /** Its index in that layer, or -1 for the fifth zone's one rule. */
+        public final int index;
+        /** Carried rather than inferred from {@link #vm}, so every reader says the same thing. */
+        public final UsbRules.Target target;
+        @Nullable
+        public final String vm;
+        /**
+         * The controller the rule named, verbatim -- null stays null rather than becoming the
+         * VM's first controller here. What "the first one" is depends on the config the VM was
+         * started with, so it is resolved once, where the attach happens.
+         */
+        @Nullable
+        public final String controller;
+
+        Decision(@NonNull Device device, @Nullable UsbRules.Layer layer, int index,
+                 @NonNull UsbRules.Target target, @Nullable String vm,
+                 @Nullable String controller) {
+            this.device = device;
+            this.layer = layer;
+            this.index = index;
+            this.target = target;
+            this.vm = vm;
+            this.controller = controller;
+        }
+
+        /** Which rule this was, for a log line: {@code device[0]}, or the fifth zone by name. */
+        @NonNull
+        public String where() {
+            return layer == null ? "the default rule" : fmt("%s[%d]", layer.key, index);
+        }
+    }
+
+    /** What replacing the rules owes the devices this daemon has already taken. */
+    public enum Save {
+        /** Nothing: the switch was off before the save and is off after it. */
+        NOTHING,
+        /** The switch went off: everything taken is given back, once, and no pass runs. */
+        RELEASE,
+        /** The ordinary pass a save runs, which is also how turning the switch on applies. */
+        PASS,
+    }
+
+    private static final class Flags {
+        /** The devnum the user's lock was made for; null when the user has said nothing. */
+        @Nullable
+        Integer lockedFor = null;
+        @Nullable
+        String failedFor = null;
+    }
+
+    private UsbRules rules = UsbRules.empty();
+    private final Map<String, Flags> flags = new HashMap<>();
+
+    @NonNull
+    public UsbRules getRules() {
+        return rules;
+    }
+
+    public void setRules(@NonNull UsbRules rules) {
+        this.rules = rules;
+    }
+
+    /** Whether the rules run at all right now: the master switch the rule set carries. */
+    public boolean rulesEnabled() {
+        return rules.isEnabled();
+    }
+
+    /**
+     * Whether a pass may offer an idle device nobody speaks for to the host drivers.
+     *
+     * <p>With the rules running, always: that is the fifth zone's answer for everything the gate
+     * has left idle. With the switch off, no trigger acts at all -- that is the whole of what
+     * the switch means, and a pass that handed devices back anyway would rebind an interface
+     * somebody had unbound by hand the next time anything was plugged in. The exception is
+     * [daemonStart], which is the one pass that runs to repair rather than to decide: a daemon
+     * killed with the gate shut, or a release that never finished, is itself why a device is
+     * idle, and no plug event is ever going to be raised for one.</p>
+     */
+    public boolean recoversIdleDevices(boolean daemonStart) {
+        return rulesEnabled() || daemonStart;
+    }
+
+    /**
+     * What saving [next] over the rules held right now owes, asked before they are replaced.
+     *
+     * <p>The release is the switch's falling edge and only that: it is the one save that has to
+     * undo work rather than do some, and a save that finds the switch already off has nothing
+     * left to give back. Turning it on runs the ordinary pass, because a save applies its rules
+     * and "the rules now run" is the biggest change a save can carry.</p>
+     */
+    @NonNull
+    public Save saveOwes(@NonNull UsbRules next) {
+        if (rules.isEnabled() && !next.isEnabled()) return Save.RELEASE;
+        return next.isEnabled() ? Save.PASS : Save.NOTHING;
+    }
+
+    /**
+     * Whether the user has spoken for this very instance of [sysfs]. A replug is a new instance
+     * and answers false without anything having to clear it, which is the whole reason the
+     * devnum is part of the answer rather than only of the bookkeeping.
+     */
+    public boolean isLocked(@NonNull String sysfs, int devnum) {
+        var f = flags.get(sysfs);
+        return f != null && f.lockedFor != null && f.lockedFor == devnum;
+    }
+
+    /**
+     * The user decided about this instance: no pass may touch it until they say otherwise or it
+     * is unplugged. What they decided is not kept -- the device's own state says that -- so this
+     * is a boolean and not a target.
+     */
+    public void lock(@NonNull String sysfs, int devnum) {
+        flags.computeIfAbsent(sysfs, k -> new Flags()).lockedFor = devnum;
+    }
+
+    /**
+     * The user handed the device back to the rules. Taking a lock off leaves nothing behind, the
+     * way {@link #forgetFailuresFor} does: a device nothing is known about is a device with no
+     * entry, and a map of all-default entries would be a slow leak.
+     */
+    public void unlock(@NonNull String sysfs) {
+        var f = flags.get(sysfs);
+        if (f == null) return;
+        f.lockedFor = null;
+        if (f.failedFor == null) flags.remove(sysfs);
+    }
+
+    /**
+     * An attach to [vm] failed; do not offer that VM this device again until the device is
+     * replugged or the VM comes up again.
+     */
+    public void markFailed(@NonNull String sysfs, @NonNull String vm) {
+        flags.computeIfAbsent(sysfs, k -> new Flags()).failedFor = vm;
+    }
+
+    /** [vm] is a fresh instance; whatever failed against the previous one may work now. */
+    public void forgetFailuresFor(@NonNull String vm) {
+        var it = flags.entrySet().iterator();
+        while (it.hasNext()) {
+            var f = it.next().getValue();
+            if (!vm.equals(f.failedFor)) continue;
+            f.failedFor = null;
+            if (f.lockedFor == null) it.remove();
+        }
+    }
+
+    /** The node is gone; whatever instance was there is forgotten, flags and all. */
+    public void forget(@NonNull String sysfs) {
+        flags.remove(sysfs);
+    }
+
+    /**
+     * Every lock dropped. The switch going off hands the devices back, and the user's answers
+     * about them go the same way: a lock says which pass may not touch a device, and there are
+     * no passes left to keep out. Failures are left where they are -- they are about an attach
+     * that did not work, not about who owns the device.
+     */
+    public void clearLocks() {
+        var it = flags.entrySet().iterator();
+        while (it.hasNext()) {
+            var f = it.next().getValue();
+            f.lockedFor = null;
+            if (f.failedFor == null) it.remove();
+        }
+    }
+
+    /**
+     * Whether a pass may decide about [device] at all: its state is hostuse or idle and the user
+     * has not locked it. A vmuse device is in use -- some VMM's fd holds an interface -- and a
+     * locked one is the user's, and neither is any pass's business.
+     */
+    public boolean isCandidate(@NonNull Device device) {
+        return device.state != UsbHostDevice.State.VMUSE
+            && !isLocked(device.sysfs, device.devnum);
+    }
+
+    /**
+     * What a trigger would do: one decision per candidate ({@link #isCandidate}), and none at
+     * all while the switch is off. A device appears at most once. Every candidate gets a
+     * decision, the fifth zone seeing to that, so the answer is as long as the candidate list.
+     *
+     * @param stateOf  the state of a VM by id, null when there is no such VM.
+     * @param hasController whether a VM still has the controller a rule names; a null controller
+     *                      asks whether it has any.
+     */
+    @NonNull
+    public List<Decision> plan(@NonNull List<Device> plugged,
+                               @NonNull Function<String, VMState> stateOf,
+                               @NonNull BiPredicate<String, String> hasController) {
+        var decisions = new ArrayList<Decision>();
+        // Nothing to plan while the switch is off. Said here as well as in decide, because a
+        // pass that walked an empty plan would still have taken a lock per device to be told so.
+        if (!rules.isEnabled()) return decisions;
+        for (var device : plugged) {
+            if (!isCandidate(device)) continue;
+            var decision = decide(device, stateOf, hasController);
+            if (decision != null) decisions.add(decision);
+        }
+        return decisions;
+    }
+
+    /**
+     * What takes [device], regardless of whether anything is stopping it from being acted on:
+     * the four layers the file carries in order, list order within a layer, and then the fifth
+     * zone. A host or a sink hit stops the search, both being something that is true here and
+     * now -- a sink in particular is never held back by a failure, which is one VM's business
+     * and not the host's; a rule whose VM is not running, whose VM no longer has the controller
+     * it names, or that already failed for this device, is passed over and the search goes on.
+     *
+     * <p>The fifth zone is one rule, {@code any -> host}, that the user never sees and cannot
+     * edit: it is a constant here rather than a row in the file, so it cannot be deleted, cannot
+     * be reordered, and every rules file ever written has it. What it buys is that "no rule
+     * matched" cannot happen while the switch is on -- and with the autoprobe gate shut, a
+     * device nothing matched would otherwise sit driverless forever, which is a keyboard that
+     * does not type and a hub whose whole subtree is dead.</p>
+     *
+     * <p>A missing controller is a skip and not an attach that fails: it is a configuration fact
+     * rather than something that might work next time, so remembering it against the VM would
+     * block that VM from every other rule for this device and would never be cleared by the VM
+     * coming back. Falling through also lets a lower-priority rule have its turn, which is what
+     * the dry run should be reporting.</p>
+     *
+     * @return null only while the master switch is off, which is the whole of "the rules do not
+     *         run": with it on there is always an answer.
+     */
+    @Nullable
+    public Decision decide(@NonNull Device device, @NonNull Function<String, VMState> stateOf,
+                           @NonNull BiPredicate<String, String> hasController) {
+        // The master switch, at the one place every trigger passes through: with it off no rule
+        // takes anything, not even the fifth zone's. The dry run reads the same answer, and says
+        // nothing would happen -- which is the truth.
+        if (!rules.isEnabled()) return null;
+        var f = flags.get(device.sysfs);
+        var failedFor = f == null ? null : f.failedFor;
+        for (var layer : UsbRules.Layer.values()) {
+            var list = rules.layer(layer);
+            for (var index = 0; index < list.size(); index++) {
+                var rule = list.get(index);
+                if (!rule.matches(device.id, device.port)) continue;
+                if (rule.target != UsbRules.Target.VM)
+                    return new Decision(device, layer, index, rule.target, null, null);
+                if (stateOf.apply(rule.vm) != VMState.RUNNING) continue;
+                if (!hasController.test(rule.vm, rule.controller)) continue;
+                if (rule.vm.equals(failedFor)) continue;
+                return new Decision(device, layer, index, UsbRules.Target.VM, rule.vm,
+                    rule.controller);
+            }
+        }
+        return new Decision(device, null, -1, UsbRules.Target.HOST, null, null);
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/usb/UsbRulePassTiming.java b/app/src/main/java/cn/classfun/droidvm/daemon/usb/UsbRulePassTiming.java
new file mode 100644
index 000000000..80a6ae22f
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/usb/UsbRulePassTiming.java
@@ -0,0 +1,97 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
+package cn.classfun.droidvm.daemon.usb;
+
+import androidx.annotation.NonNull;
+
+import java.util.function.BooleanSupplier;
+
+/**
+ * When a rule pass runs, as opposed to what it does: the wait for a VM's control socket after
+ * RUNNING, and the retry of a pass that could not reach the VMM. Pure -- time is a
+ * {@link Scheduler} and readiness a probe -- so the policy is tested with neither a VM nor a
+ * clock, and the manager only supplies the worker, the probe and the pass.
+ */
+final class UsbRulePassTiming {
+    /** How often a VM that has just reached RUNNING is asked whether its control socket is up. */
+    static final long READY_POLL_MS = 1_000;
+    /** How many times, before the pass is given up on: a minute, which no start needs. */
+    static final int READY_MAX_POLLS = 60;
+    /** How long after a pass found the VMM unreachable it is run again. */
+    static final long RETRY_DELAY_MS = 2_000;
+    /** How many such reruns one trigger gets; beyond that the next trigger owns the device. */
+    static final int MAX_RETRIES = 3;
+
+    /** Runs a task later, on whatever thread the owner keeps for these. */
+    interface Scheduler {
+        void schedule(@NonNull Runnable task, long delayMs);
+    }
+
+    /**
+     * One wait, as its five answers: whether it is still wanted, whether what it waits for has
+     * happened, and what to do in each of the three ways it can end. Together because they are
+     * one wait -- passed one by one they are five same-shaped arguments in a row, which is a
+     * call site that goes wrong silently.
+     */
+    static final class Wait {
+        private final BooleanSupplier wanted;
+        private final BooleanSupplier ready;
+        private final Runnable then;
+        private final Runnable abandoned;
+        private final Runnable gaveUp;
+
+        Wait(@NonNull BooleanSupplier wanted, @NonNull BooleanSupplier ready,
+             @NonNull Runnable then, @NonNull Runnable abandoned, @NonNull Runnable gaveUp) {
+            this.wanted = wanted;
+            this.ready = ready;
+            this.then = then;
+            this.abandoned = abandoned;
+            this.gaveUp = gaveUp;
+        }
+    }
+
+    private UsbRulePassTiming() {
+    }
+
+    /**
+     * Probes [wait] on the scheduler, now and then once per [pollMs], and runs its {@code then}
+     * on the first yes. The wait ends without it when it stops being wanted -- {@code abandoned}
+     * runs, and the probe is not asked -- or once [maxPolls] probes have said no, which is
+     * {@code gaveUp}.
+     */
+    static void whenReady(@NonNull Scheduler scheduler, @NonNull Wait wait, long pollMs,
+                          int maxPolls) {
+        scheduler.schedule(() -> probe(scheduler, wait, pollMs, maxPolls, 1), 0);
+    }
+
+    private static void probe(@NonNull Scheduler scheduler, @NonNull Wait wait, long pollMs,
+                              int maxPolls, int attempt) {
+        if (!wait.wanted.getAsBoolean()) {
+            wait.abandoned.run();
+            return;
+        }
+        if (wait.ready.getAsBoolean()) {
+            wait.then.run();
+            return;
+        }
+        if (attempt >= maxPolls) {
+            wait.gaveUp.run();
+            return;
+        }
+        scheduler.schedule(() -> probe(scheduler, wait, pollMs, maxPolls, attempt + 1), pollMs);
+    }
+
+    /**
+     * Runs [attempt] after [delayMs] and, for as long as it answers false, again after the same
+     * delay, [maxAttempts] times at most. The pass that already ran is not one of them: this is
+     * the tail of a trigger whose first pass could not reach the VMM.
+     */
+    static void retry(@NonNull Scheduler scheduler, @NonNull BooleanSupplier attempt,
+                      long delayMs, int maxAttempts) {
+        if (maxAttempts <= 0) return;
+        scheduler.schedule(() -> {
+            if (!attempt.getAsBoolean()) retry(scheduler, attempt, delayMs, maxAttempts - 1);
+        }, delayMs);
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/usb/UsbRules.java b/app/src/main/java/cn/classfun/droidvm/daemon/usb/UsbRules.java
new file mode 100644
index 000000000..40099cb4a
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/usb/UsbRules.java
@@ -0,0 +1,395 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
+package cn.classfun.droidvm.daemon.usb;
+
+import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
+
+import androidx.annotation.NonNull;
+import androidx.annotation.Nullable;
+
+import org.json.JSONArray;
+import org.json.JSONException;
+import org.json.JSONObject;
+
+import java.util.ArrayList;
+import java.util.Collections;
+import java.util.EnumMap;
+import java.util.List;
+import java.util.Locale;
+import java.util.Map;
+import java.util.function.BiPredicate;
+import java.util.regex.Pattern;
+
+import cn.classfun.droidvm.daemon.server.RequestException;
+
+/**
+ * The automatic USB attach rules: one global file of four ordered layers, each an ordered list.
+ * Order is priority, within a layer and across them. Rules are not per VM on purpose -- which VM
+ * gets a device when two of them want it is part of the rule, and a per-VM list has nowhere to
+ * say it.
+ *
+ * <p>Immutable once built, and validated on the way in: a rule the daemon holds is always one it
+ * could act on. The org.json conversion is kept at the edge ({@link #fromJson}, {@link #toJson})
+ * so the model and its validation run under the stubbed android.jar of a unit test.</p>
+ */
+public final class UsbRules {
+    /**
+     * The container's shape, not the rules'. It stayed at 1 when {@code controller}, then
+     * {@code target}, then {@code enabled} were added: every one of those keys is optional on
+     * the way in and an absent one means what it always meant, so a file written before any of
+     * them existed is still exactly what it says, and a bump would only have made a new daemon
+     * refuse one.
+     */
+    public static final int VERSION = 1;
+    /**
+     * {@code vid:pid}, lowercase hex, then optionally {@code :serial}; a serial may hold anything.
+     *
+     * <p>Public because the editor checks what the user typed against it before pushing: being
+     * told about a typo by the daemon, after a save that also wrote the VM config, is later than
+     * it needs to be, and a second copy of the pattern is a second answer.</p>
+     */
+    public static final Pattern ID_PATTERN =
+        Pattern.compile("^[0-9a-fA-F]{4}:[0-9a-fA-F]{4}(:.+)?$");
+    /** A port chain: {@code 1.2.2}, {@code 1.4}, or a root port {@code 3}. */
+    public static final Pattern PORT_PATTERN = Pattern.compile("^\\d+(\\.\\d+)*$");
+
+    /** The four layers, in the order they are consulted. */
+    public enum Layer {
+        EXACT("exact"),
+        PORT("port"),
+        DEVICE("device"),
+        ANY("any");
+
+        /** The key this layer goes under in the JSON file and on the wire. */
+        public final String key;
+
+        Layer(@NonNull String key) {
+            this.key = key;
+        }
+
+        @Nullable
+        public static Layer fromKey(@NonNull String key) {
+            for (var layer : values())
+                if (layer.key.equals(key)) return layer;
+            return null;
+        }
+    }
+
+    /** What a rule does with the device it matches. */
+    public enum Target {
+        /** Leave it where it is; the last word on the device, so the search stops here. */
+        HOST("host"),
+        /** Hand it to the rule's VM, once that VM is running and has the controller. */
+        VM("vm"),
+        /**
+         * Leave it to nobody: the search stops and nothing is done, so a device the autoprobe
+         * gate handed over driverless stays driverless. It is not a write -- "hidden" is a state
+         * a device is left in, not one it is put into -- so a device the host already has stays
+         * the host's until it is unplugged and comes back through the gate.
+         */
+        SINK("sink");
+
+        /** The key this target goes under in the JSON file and on the wire. */
+        public final String key;
+
+        Target(@NonNull String key) {
+            this.key = key;
+        }
+
+        @Nullable
+        public static Target fromKey(@NonNull String key) {
+            for (var target : values())
+                if (target.key.equals(key)) return target;
+            return null;
+        }
+    }
+
+    /**
+     * One entry. Which fields are set is decided by the layer it sits in; {@code target} says
+     * what happens to the device it matches, and {@code vm} is set for -- and only for -- a
+     * {@link Target#VM} rule.
+     *
+     * <p>{@code controller} names one xHCI controller inside that VM. Null means the VM's first
+     * one, which is what every rule written before controllers existed meant and still means --
+     * so an old file needs no rewriting. The editor writes the id out, because deleting a
+     * controller should leave its rules visibly dangling rather than silently re-point them at
+     * whichever controller became the first.</p>
+     */
+    public static final class Rule {
+        @Nullable
+        public final String id;
+        @Nullable
+        public final String port;
+        @Nullable
+        public final String vm;
+        @Nullable
+        public final String controller;
+        @NonNull
+        public final Target target;
+
+        /**
+         * The four-field form, where the VM says the target: that is what a rule written before
+         * targets existed meant, and what every caller that cannot mean a sink means.
+         */
+        public Rule(@Nullable String id, @Nullable String port, @Nullable String vm,
+                    @Nullable String controller) {
+            this(id, port, vm, controller, vm == null ? Target.HOST : Target.VM);
+        }
+
+        public Rule(@Nullable String id, @Nullable String port, @Nullable String vm,
+                    @Nullable String controller, @NonNull Target target) {
+            this.id = id;
+            this.port = port;
+            this.vm = vm;
+            this.controller = controller;
+            this.target = target;
+        }
+
+        /** Whether the device with [deviceId] at [devicePort] is one this rule speaks about. */
+        public boolean matches(@NonNull String deviceId, @NonNull String devicePort) {
+            if (id != null && !id.equals(deviceId)) return false;
+            return port == null || port.equals(devicePort);
+        }
+    }
+
+    private final boolean enabled;
+    private final Map<Layer, List<Rule>> layers;
+
+    private UsbRules(boolean enabled, @NonNull Map<Layer, List<Rule>> layers) {
+        this.enabled = enabled;
+        this.layers = layers;
+    }
+
+    @NonNull
+    public static UsbRules empty() {
+        return build(new EnumMap<>(Layer.class), null);
+    }
+
+    /**
+     * The master switch: whether the rules below it run at all. Off, every trigger is a no-op
+     * and the devices are Android's, while the rules themselves are kept exactly as they are --
+     * the page stays editable so a user can prepare them before turning it on.
+     *
+     * <p>It lives beside the layers rather than in a preference because it is saved by the same
+     * button as the rules, and the daemon has to read it in the same breath: a rule set whose
+     * switch arrived separately would run for as long as the two files disagreed.</p>
+     */
+    public boolean isEnabled() {
+        return enabled;
+    }
+
+    /**
+     * Builds a rule set, refusing anything the engine could not act on.
+     *
+     * @param targetExists says whether a rule's target -- a VM id and, when it names one, a
+     *                     controller inside it -- is one the daemon can act on; null skips that
+     *                     check, for a file read back at start-up, where a rule for a VM or a
+     *                     controller deleted since is kept -- it can never match, and dropping
+     *                     the user's entry silently would be worse.
+     * @throws RequestException naming the layer, the index and what is wrong.
+     */
+    @NonNull
+    public static UsbRules build(@NonNull Map<Layer, List<Rule>> layers,
+                                 @Nullable BiPredicate<String, String> targetExists) {
+        // The form every caller that cannot mean the switch uses, and what an absent "enabled"
+        // reads as: the rules run, which is what every rule set meant before there was a switch
+        // to say otherwise.
+        return build(true, layers, targetExists);
+    }
+
+    /** As {@link #build(Map, BiPredicate)}, with the master switch the file carries. */
+    @NonNull
+    public static UsbRules build(boolean enabled, @NonNull Map<Layer, List<Rule>> layers,
+                                 @Nullable BiPredicate<String, String> targetExists) {
+        var result = new EnumMap<Layer, List<Rule>>(Layer.class);
+        for (var layer : Layer.values()) {
+            var rules = layers.get(layer);
+            if (rules == null) rules = Collections.emptyList();
+            var checked = new ArrayList<Rule>(rules.size());
+            for (var i = 0; i < rules.size(); i++)
+                checked.add(validate(layer, i, rules.get(i), targetExists));
+            result.put(layer, Collections.unmodifiableList(checked));
+        }
+        return new UsbRules(enabled, result);
+    }
+
+    @NonNull
+    private static Rule validate(@NonNull Layer layer, int index, @NonNull Rule rule,
+                                 @Nullable BiPredicate<String, String> targetExists) {
+        var where = fmt("%s[%d]", layer.key, index);
+        var wantsId = layer == Layer.EXACT || layer == Layer.DEVICE;
+        var wantsPort = layer == Layer.EXACT || layer == Layer.PORT;
+        if (wantsId && rule.id == null)
+            throw new RequestException(fmt("%s: missing id", where));
+        if (!wantsId && rule.id != null)
+            throw new RequestException(fmt("%s: a %s rule takes no id", where, layer.key));
+        if (wantsPort && rule.port == null)
+            throw new RequestException(fmt("%s: missing port", where));
+        if (!wantsPort && rule.port != null)
+            throw new RequestException(fmt("%s: a %s rule takes no port", where, layer.key));
+        if (rule.target == Target.SINK && rule.vm != null)
+            throw new RequestException(fmt("%s: a sink rule takes no vm", where));
+        if (rule.target == Target.VM && rule.vm == null)
+            throw new RequestException(fmt("%s: a vm rule needs a vm", where));
+        if (rule.target == Target.HOST && rule.vm != null)
+            throw new RequestException(fmt("%s: a host rule takes no vm", where));
+        if (rule.controller != null) {
+            // A host rule keeps the device on the host; there is no controller for it to name.
+            if (rule.vm == null)
+                throw new RequestException(fmt("%s: controller needs a vm", where));
+            if (rule.controller.isEmpty())
+                throw new RequestException(fmt(
+                    "%s: controller must be a controller id or null", where));
+        }
+        String id = null;
+        if (rule.id != null) {
+            if (!ID_PATTERN.matcher(rule.id).matches())
+                throw new RequestException(fmt(
+                    "%s: bad id %s (want vid:pid or vid:pid:serial)", where, rule.id));
+            // vid:pid is hex and the device side lowercases it; the serial is a string and is
+            // compared as the device reports it.
+            id = rule.id.substring(0, 9).toLowerCase(Locale.ROOT) + rule.id.substring(9);
+        }
+        if (rule.port != null && !PORT_PATTERN.matcher(rule.port).matches())
+            throw new RequestException(fmt(
+                "%s: bad port %s (want a port chain such as 1.2.2)", where, rule.port));
+        if (rule.vm != null) {
+            if (rule.vm.isEmpty())
+                throw new RequestException(fmt("%s: vm must be a VM id or null", where));
+            if (targetExists != null && !targetExists.test(rule.vm, rule.controller))
+                throw new RequestException(rule.controller == null
+                    ? fmt("%s: VM not found: %s", where, rule.vm)
+                    : fmt("%s: VM %s has no USB controller %s", where, rule.vm, rule.controller));
+        }
+        return new Rule(id, rule.port, rule.vm, rule.controller, rule.target);
+    }
+
+    /** The rules of [layer], in priority order; never null. */
+    @NonNull
+    public List<Rule> layer(@NonNull Layer layer) {
+        var rules = layers.get(layer);
+        return rules == null ? Collections.emptyList() : rules;
+    }
+
+    public boolean isEmpty() {
+        for (var layer : Layer.values())
+            if (!layer(layer).isEmpty()) return false;
+        return true;
+    }
+
+    /**
+     * Reads the wire/file form. Unknown keys are refused rather than ignored: a misspelt layer
+     * would otherwise be a rule set that silently does nothing.
+     */
+    @NonNull
+    public static UsbRules fromJson(@NonNull JSONObject obj,
+                                    @Nullable BiPredicate<String, String> targetExists) {
+        var layers = new EnumMap<Layer, List<Rule>>(Layer.class);
+        // Absent reads as on, which is what every file written before the switch existed means.
+        var enabled = optBoolean(obj, "enabled", true);
+        var keys = obj.keys();
+        while (keys.hasNext()) {
+            var key = keys.next();
+            if ("enabled".equals(key)) continue;
+            if ("version".equals(key)) {
+                var version = obj.opt("version");
+                if (!(version instanceof Number) || ((Number) version).intValue() != VERSION)
+                    throw new RequestException(fmt("unsupported rules version %s", version));
+                continue;
+            }
+            var layer = Layer.fromKey(key);
+            if (layer == null)
+                throw new RequestException(fmt("unknown rules key: %s", key));
+            var array = obj.optJSONArray(key);
+            if (array == null) {
+                if (obj.isNull(key)) continue;
+                throw new RequestException(fmt("%s must be a list", key));
+            }
+            var rules = new ArrayList<Rule>(array.length());
+            for (var i = 0; i < array.length(); i++) {
+                var item = array.optJSONObject(i);
+                if (item == null)
+                    throw new RequestException(fmt("%s[%d] must be an object", key, i));
+                rules.add(ruleFromJson(key, i, item));
+            }
+            layers.put(layer, rules);
+        }
+        return build(enabled, layers, targetExists);
+    }
+
+    @NonNull
+    private static Rule ruleFromJson(@NonNull String layer, int index, @NonNull JSONObject item) {
+        var keys = item.keys();
+        while (keys.hasNext()) {
+            var key = keys.next();
+            if ("id".equals(key) || "port".equals(key) || "vm".equals(key)
+                || "controller".equals(key) || "target".equals(key)) continue;
+            throw new RequestException(fmt("%s[%d]: unknown field %s", layer, index, key));
+        }
+        var vm = optString(item, "vm");
+        var wanted = optString(item, "target");
+        // A row with no target is one written before there was a target to write: the vm field
+        // is the whole of what it said, and it goes on saying it.
+        var target = wanted == null ? (vm == null ? Target.HOST : Target.VM)
+            : Target.fromKey(wanted);
+        // Not a fallback to host: a misspelt target would be a rule that quietly does the
+        // opposite of what it says.
+        if (target == null)
+            throw new RequestException(fmt("%s[%d]: unknown target %s", layer, index, wanted));
+        return new Rule(optString(item, "id"), optString(item, "port"), vm,
+            optString(item, "controller"), target);
+    }
+
+    /**
+     * A boolean field, where an absent key and a JSON null both read as [fallback]. Anything
+     * else is refused rather than read as false: a switch that quietly turned itself off would
+     * hand every device back without a word.
+     */
+    private static boolean optBoolean(@NonNull JSONObject obj, @NonNull String key,
+                                      boolean fallback) {
+        if (!obj.has(key) || obj.isNull(key)) return fallback;
+        var value = obj.opt(key);
+        if (!(value instanceof Boolean))
+            throw new RequestException(fmt("%s must be true or false", key));
+        return (Boolean) value;
+    }
+
+    /** A string field, where an absent key and a JSON null both read as null. */
+    @Nullable
+    private static String optString(@NonNull JSONObject item, @NonNull String key) {
+        if (!item.has(key) || item.isNull(key)) return null;
+        var value = item.opt(key);
+        if (!(value instanceof String))
+            throw new RequestException(fmt("%s must be a string or null", key));
+        return (String) value;
+    }
+
+    /** The wire/file form: each rule carries exactly the fields its layer reads. */
+    @NonNull
+    public JSONObject toJson() throws JSONException {
+        var obj = new JSONObject();
+        obj.put("version", VERSION);
+        // Always written, the way a rule's target is: a file that leaves the switch to be
+        // inferred is one a reader has to know the default of.
+        obj.put("enabled", enabled);
+        for (var layer : Layer.values()) {
+            var array = new JSONArray();
+            for (var rule : layer(layer)) {
+                var item = new JSONObject();
+                if (rule.id != null) item.put("id", rule.id);
+                if (rule.port != null) item.put("port", rule.port);
+                // Always written, because a reader that has to infer the outcome from the other
+                // fields is a second answer to a question this key already answers.
+                item.put("target", rule.target.key);
+                // Left out when there is none: a host and a sink rule have no VM, and a rule
+                // that means the VM's first controller names none.
+                if (rule.vm != null) item.put("vm", rule.vm);
+                if (rule.controller != null) item.put("controller", rule.controller);
+                array.put(item);
+            }
+            obj.put(layer.key, array);
+        }
+        return obj;
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/usb/UsbRulesFile.java b/app/src/main/java/cn/classfun/droidvm/daemon/usb/UsbRulesFile.java
new file mode 100644
index 000000000..83cb7aee3
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/usb/UsbRulesFile.java
@@ -0,0 +1,84 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
+package cn.classfun.droidvm.daemon.usb;
+
+import static cn.classfun.droidvm.lib.utils.FileUtils.readFile;
+import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
+
+import android.system.Os;
+import android.util.Log;
+
+import androidx.annotation.NonNull;
+
+import org.json.JSONObject;
+
+import java.io.File;
+import java.io.FileOutputStream;
+import java.io.IOException;
+import java.nio.charset.StandardCharsets;
+
+/**
+ * {@code usb_rules.json} in the app's files directory. The daemon is the only writer: it reads
+ * the file once at start-up and rewrites it on every {@code usb_rules_set}, which is the whole
+ * of how the two editing pages change it. Neither of them opens the file.
+ */
+public final class UsbRulesFile {
+    private static final String TAG = "UsbRulesFile";
+    public static final String NAME = "usb_rules.json";
+
+    private UsbRulesFile() {
+    }
+
+    /**
+     * The saved rules, or an empty set when there is no file or it cannot be read. A file the
+     * daemon cannot parse is left where it is: the UI may still make sense of it, and an empty
+     * set is what the daemon acts on either way.
+     */
+    @NonNull
+    public static UsbRules load(@NonNull File file) {
+        if (!file.isFile()) return UsbRules.empty();
+        try {
+            // No VM check: a VM deleted while the daemon was down is not a reason to drop the
+            // user's rule for it, and a rule for a VM that does not exist never matches.
+            var rules = UsbRules.fromJson(new JSONObject(readFile(file)), null);
+            Log.i(TAG, fmt("Loaded USB rules from %s", file));
+            return rules;
+        } catch (Exception e) {
+            Log.w(TAG, fmt("Cannot read %s; starting with no USB rules", file), e);
+            return UsbRules.empty();
+        }
+    }
+
+    /**
+     * Writes [rules] next to the target and renames, so a reader never sees half a file, and
+     * gives the result to the owner of the directory: the daemon runs as root, the UI does not,
+     * and a root-owned file in the app's directory is one the UI can neither read nor replace.
+     */
+    @SuppressWarnings("OctalInteger")
+    public static void save(@NonNull File file, @NonNull UsbRules rules) throws IOException {
+        var parent = file.getParentFile();
+        if (parent == null || !parent.isDirectory())
+            throw new IOException(fmt("no directory for %s", file));
+        var staging = new File(parent, fmt("%s.tmp", file.getName()));
+        try {
+            var text = rules.toJson().toString(2);
+            try (var out = new FileOutputStream(staging)) {
+                out.write(text.getBytes(StandardCharsets.UTF_8));
+                out.getFD().sync();
+            }
+            var owner = Os.stat(parent.getPath());
+            Os.chmod(staging.getPath(), 0600);
+            Os.chown(staging.getPath(), owner.st_uid, owner.st_gid);
+            if (!staging.renameTo(file))
+                throw new IOException(fmt("cannot replace %s", file));
+        } catch (IOException e) {
+            throw e;
+        } catch (Exception e) {
+            throw new IOException(e.getMessage(), e);
+        } finally {
+            //noinspection ResultOfMethodCallIgnored
+            staging.delete();
+        }
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/usb/UsbUevent.java b/app/src/main/java/cn/classfun/droidvm/daemon/usb/UsbUevent.java
new file mode 100644
index 000000000..fff55c559
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/usb/UsbUevent.java
@@ -0,0 +1,118 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
+package cn.classfun.droidvm.daemon.usb;
+
+import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
+
+import androidx.annotation.NonNull;
+import androidx.annotation.Nullable;
+
+import java.nio.charset.StandardCharsets;
+
+/**
+ * One message off the kernel's uevent socket, as much of it as this daemon reads.
+ *
+ * <p>The reason there is a second event source at all is that binding or unbinding a driver moves
+ * nothing: the interface directory stays where it was, the device node under {@code /dev/bus/usb}
+ * stays where it was, and only the {@code driver} symlink comes or goes. The inotify watch sees
+ * none of it. The kernel does report it -- {@code KOBJ_BIND} and {@code KOBJ_UNBIND} since 4.12 --
+ * and only here. Measured on the phone: unbinding usbhid from {@code 1-1.6:1.0} left the node set
+ * byte-identical while pushing {@code /sys/kernel/uevent_seqnum} by five, and the daemon, watching
+ * only nodes, logged nothing at all.</p>
+ *
+ * <p>A message is NUL-separated: the first field is {@code <action>@<devpath>} and the rest are
+ * {@code KEY=VALUE}. Free of {@code android.*} so the parsing is a unit test rather than a
+ * device run.</p>
+ */
+final class UsbUevent {
+    /** The subsystem this daemon has anything to say about. */
+    private static final String SUBSYSTEM_USB = "usb";
+
+    /** {@code bind}, {@code unbind}, {@code add}, {@code remove}, {@code change}. */
+    @NonNull
+    public final String action;
+    /**
+     * The device's sysfs leaf: {@code 1-1.6:1.0} for an interface, {@code 1-1.6} or {@code usb1}
+     * for a device. The same name {@code /sys/bus/usb/devices} lists it under, which is what the
+     * rest of this package speaks.
+     */
+    @NonNull
+    public final String name;
+    /** {@code usb_device} or {@code usb_interface}; empty when the kernel did not say. */
+    @NonNull
+    public final String devtype;
+    /** The driver that was bound, on a {@code bind}; empty on everything else. */
+    @NonNull
+    public final String driver;
+
+    private UsbUevent(@NonNull String action, @NonNull String name, @NonNull String devtype,
+                      @NonNull String driver) {
+        this.action = action;
+        this.name = name;
+        this.devtype = devtype;
+        this.driver = driver;
+    }
+
+    /**
+     * Reads one datagram, or null when it says nothing about USB -- which is most of them, and
+     * the reason this is the first thing the reader does with a message.
+     */
+    @Nullable
+    static UsbUevent parse(@NonNull byte[] message, int length) {
+        var action = "";
+        var devpath = "";
+        var devtype = "";
+        var driver = "";
+        var subsystem = "";
+        var start = 0;
+        for (var i = 0; i <= length; i++) {
+            if (i != length && message[i] != 0) continue;
+            if (i > start) {
+                var field = new String(message, start, i - start, StandardCharsets.UTF_8);
+                if (field.startsWith("ACTION=")) action = value(field);
+                else if (field.startsWith("DEVPATH=")) devpath = value(field);
+                else if (field.startsWith("DEVTYPE=")) devtype = value(field);
+                else if (field.startsWith("DRIVER=")) driver = value(field);
+                else if (field.startsWith("SUBSYSTEM=")) subsystem = value(field);
+            }
+            start = i + 1;
+        }
+        // The first field is "<action>@<devpath>" and every message has it, but the ACTION and
+        // DEVPATH keys carry the same two values and are what the kernel documents, so the
+        // header is not read at all rather than read as a second opinion.
+        if (!SUBSYSTEM_USB.equals(subsystem)) return null;
+        if (action.isEmpty() || devpath.isEmpty()) return null;
+        return new UsbUevent(action, leaf(devpath), devtype, driver);
+    }
+
+    @NonNull
+    private static String value(@NonNull String field) {
+        return field.substring(field.indexOf('=') + 1);
+    }
+
+    /** The last path element of a DEVPATH, which is the name sysfs lists the device under. */
+    @NonNull
+    private static String leaf(@NonNull String devpath) {
+        var slash = devpath.lastIndexOf('/');
+        return slash < 0 ? devpath : devpath.substring(slash + 1);
+    }
+
+    /**
+     * Whether this is a driver coming or going, which is the class of change nothing else
+     * reports. An add or a remove moves a node and the inotify watch has already raised it; both
+     * still schedule the same rescan, because a duplicate costs one scan that finds no
+     * difference and a missed one costs a device nobody ever decides about again.
+     */
+    boolean isDriverChange() {
+        return "bind".equals(action) || "unbind".equals(action);
+    }
+
+    @NonNull
+    @Override
+    public String toString() {
+        return driver.isEmpty()
+            ? fmt("%s %s", action, name)
+            : fmt("%s %s (%s)", action, name, driver);
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/usb/UsbVmmUnreachableException.java b/app/src/main/java/cn/classfun/droidvm/daemon/usb/UsbVmmUnreachableException.java
new file mode 100644
index 000000000..789daaab2
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/usb/UsbVmmUnreachableException.java
@@ -0,0 +1,32 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
+package cn.classfun.droidvm.daemon.usb;
+
+import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
+
+import androidx.annotation.NonNull;
+
+import java.io.IOException;
+
+/**
+ * The crosvm usb CLI could not connect to the VM's control socket, so the VMM never heard the
+ * command.
+ *
+ * <p>An IOException, so every existing catch goes on treating it as the transport failure it is.
+ * Its own type because, for an automatic attach, it is the one failure that says nothing about
+ * the device: the VMM was not listening yet -- RUNNING is reported the moment the process is
+ * spawned, seconds before its control loop is up -- and the pass should come back, not remember
+ * the device as having failed.</p>
+ */
+public final class UsbVmmUnreachableException extends IOException {
+    public UsbVmmUnreachableException(@NonNull String stderr) {
+        super(fmt("control socket not reachable: %s", firstLine(stderr)));
+    }
+
+    @NonNull
+    private static String firstLine(@NonNull String text) {
+        var nl = text.indexOf('\n');
+        return (nl < 0 ? text : text.substring(0, nl)).trim();
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/vm/VMBackendInstance.java b/app/src/main/java/cn/classfun/droidvm/daemon/vm/VMBackendInstance.java
index 6cb90ae30..0201b44f7 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/vm/VMBackendInstance.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/vm/VMBackendInstance.java
@@ -15,6 +15,7 @@
 import android.util.Log;
 
 import androidx.annotation.NonNull;
+import androidx.annotation.Nullable;
 
 import java.io.File;
 import java.util.LinkedHashMap;
@@ -47,6 +48,15 @@ protected VMBackendInstance(@NonNull ServerContext context, @NonNull VMConfig co
 
     public abstract boolean hasControlSocket();
 
+    /**
+     * Path of the backend's own control socket, for host-side tools that have to speak to the
+     * VMM directly (the crosvm usb CLI). Null when the backend has none or is not running.
+     */
+    @Nullable
+    public String getControlSocketPath() {
+        return null;
+    }
+
     public abstract void cleanup();
 
     /**
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/vm/VMInstance.java b/app/src/main/java/cn/classfun/droidvm/daemon/vm/VMInstance.java
index 28d3f2be5..095d78c20 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/vm/VMInstance.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/vm/VMInstance.java
@@ -107,6 +107,16 @@ synchronized VMBackendInstance getBackendInstance() {
         return this.backendInstance;
     }
 
+    /**
+     * Control socket of the running backend, or null when there is none. Reads the field rather
+     * than {@link #getBackendInstance()} on purpose: asking for the path must never be what
+     * creates a backend for a VM that is not running.
+     */
+    @Nullable
+    public synchronized String getControlSocketPath() {
+        return backendInstance == null ? null : backendInstance.getControlSocketPath();
+    }
+
     /**
      * Forwards UI-sent evdev bytes to the running backend's native-display input channel for
      * [screenId] -- the screen the console that sent them is showing, which is what picks between
@@ -136,6 +146,13 @@ private void setState(@NonNull VMState newState) {
         // The one place every transition passes through, so the foreground service a peripheral
         // may need is raised and dropped from the same edge the guest device appears on.
         PeripheralForegroundControl.refresh(store);
+        // Same edge for the host USB devices this VM borrowed. Fully guarded: a state change is
+        // never allowed to fail because of what the manager did with them.
+        try {
+            store.context.getUsb().onVmState(this, newState);
+        } catch (Exception e) {
+            Log.w(TAG, "usb: state hook failed", e);
+        }
     }
 
     private void fireEvent(@NonNull String event, @Nullable JSONObject extra) {
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/CrosvmBackendInstance.java b/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/CrosvmBackendInstance.java
index 1cf64a732..d03b78ad4 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/CrosvmBackendInstance.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/CrosvmBackendInstance.java
@@ -70,6 +70,7 @@
 import cn.classfun.droidvm.lib.store.vm.VMHypervisor;
 import cn.classfun.droidvm.lib.store.vm.VMPeripheralConfig;
 import cn.classfun.droidvm.lib.store.vm.VMScreenConfig;
+import cn.classfun.droidvm.lib.store.vm.VMXhciConfig;
 
 @SuppressWarnings("FieldCanBeLocal")
 public final class CrosvmBackendInstance extends VMBackendInstance {
@@ -427,7 +428,11 @@ && optEnum(item, "gpu_backend", GpuBackend.NONE) == GpuBackend.GPU_VIRGLRENDERER
             args.add("--no-rng");
         if (!item.optBoolean("smt", false))
             args.add("--no-smt");
-        if (!item.optBoolean("usb", false))
+        // crosvm emulates one xHCI with 8 USB2 and 8 USB3 root ports and takes no argument about
+        // it, so the only thing the config can decide here is whether the controller exists at
+        // all. The rest of what a controller entry says is reported as ignored, in
+        // buildPeripheralCommand.
+        if (!VMXhciConfig.isEnabled(item))
             args.add("--no-usb");
         if (!item.optBoolean("sandbox", false))
             args.add("--disable-sandbox");
@@ -1313,12 +1318,37 @@ private static String buildVncArg(@NonNull VMScreenConfig screen) {
      * <p>INTEL_HDA is accepted by the model and skipped here: crosvm emulates no HDA controller,
      * and starting a VM that claims hardware nothing can serve is worse than starting without
      * it. The UI says the same thing on the row.</p>
+     *
+     * <p>An XHCI_USB peripheral emits nothing at all: whether the controller exists is decided by
+     * the --no-usb flag above, and crosvm's xHCI is one controller with a fixed 8/8 geometry that
+     * no argument reaches. What this loop does for it is name what it ignored -- a second
+     * controller, or port counts that are not the ones crosvm has -- which is the same thing the
+     * editor's red text says before the VM is ever started.</p>
      */
     private void buildPeripheralCommand(@NonNull List<String> args) {
         var peripherals = VMPeripheralConfig.listOf(config.item);
         int appUid = getAppUid();
+        int xhciSeen = 0;
         for (var peripheral : peripherals) {
             var type = peripheral.getType();
+            if (type == PeripheralType.XHCI_USB) {
+                // Nothing to emit: the controller is on unless --no-usb went out above. What the
+                // entry says beyond "exists" is out of reach of this VMM, so say what was dropped
+                // rather than start a VM that quietly differs from its config.
+                if (++xhciSeen > 1) {
+                    Log.w(TAG, fmt("xHCI %s skipped: crosvm emulates one USB controller",
+                        peripheral.getControllerId()));
+                    continue;
+                }
+                if (peripheral.getUsb2Ports() != VMXhciConfig.DEFAULT_PORTS
+                    || peripheral.getUsb3Ports() != VMXhciConfig.DEFAULT_PORTS)
+                    Log.w(TAG, fmt(
+                        "xHCI %s port counts %d/%d ignored: crosvm's xHCI is fixed at %d/%d",
+                        peripheral.getControllerId(), peripheral.getUsb2Ports(),
+                        peripheral.getUsb3Ports(), VMXhciConfig.DEFAULT_PORTS,
+                        VMXhciConfig.DEFAULT_PORTS));
+                continue;
+            }
             if (type != PeripheralType.VIRTIO_SOUND) {
                 Log.w(TAG, fmt("peripheral %s skipped: no host backend", type));
                 continue;
@@ -1629,6 +1659,12 @@ public boolean hasControlSocket() {
         return controlSocketPath != null;
     }
 
+    @Nullable
+    @Override
+    public String getControlSocketPath() {
+        return controlSocketPath;
+    }
+
     @Override
     public boolean writeNativeInput(@NonNull String screenId, int channel, @NonNull byte[] data) {
         return inputBridge.writeNativeInput(screenId, channel, data);
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/QemuBackendInstance.java b/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/QemuBackendInstance.java
index 80efe55ef..defc317be 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/QemuBackendInstance.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/QemuBackendInstance.java
@@ -50,6 +50,7 @@
 import cn.classfun.droidvm.lib.store.vm.VMConfig;
 import cn.classfun.droidvm.lib.store.vm.VMHypervisor;
 import cn.classfun.droidvm.lib.store.vm.VMPeripheralConfig;
+import cn.classfun.droidvm.lib.store.vm.VMXhciConfig;
 
 @SuppressWarnings("FieldCanBeLocal")
 public final class QemuBackendInstance extends VMBackendInstance {
@@ -371,18 +372,55 @@ private void buildInputCommand(@NonNull List<String> args) {
         args.add("virtio-keyboard-pci,disable-legacy=on,disable-modern=off");
     }
 
+    /**
+     * One qemu-xhci per xHCI controller the config carries, with that controller's port counts.
+     *
+     * <p>QEMU is the backend that can honour several controllers and both counts, so it reads the
+     * list rather than a boolean: a card that says two ports must not silently get fifteen. The
+     * first controller keeps the historic {@code usb-bus} id and the guest's USB pointer and
+     * keyboard, so a Windows guest that enumerated devices on that bus does not see them move
+     * because a second controller was added.</p>
+     *
+     * <p>No controller means no {@code qemu-xhci} and no USB tablet or keyboard either, which is
+     * also what a config with no {@code "usb"} key at all gets: {@link VMXhciConfig#migrate} runs
+     * in the constructor of every config either process reads and turns an absent key into
+     * {@code false}, so this backend can no longer tell that shape from a VM whose owner turned
+     * USB off. It used to default such a config to on; the guest keeps its pointer and keyboard
+     * through virtio ({@link #buildInputCommand}), and adding the card back says so explicitly.</p>
+     */
     private void buildUsbCommand(@NonNull List<String> args) {
-        if (!config.item.optBoolean("usb", true)) return;
-        args.add("-device");
-        args.add("qemu-xhci,id=usb-bus,p2=15,p3=15");
-        if (hasAnyScreen()) {
-            args.add("-device");
-            args.add("usb-tablet,bus=usb-bus.0");
+        var controllers = VMXhciConfig.listControllers(config.item);
+        if (controllers.isEmpty()) return;
+        for (int i = 0; i < controllers.size(); i++) {
+            var controller = controllers.get(i);
+            var busId = i == 0 ? "usb-bus" : fmt("usb-%s", controller.getControllerId());
             args.add("-device");
-            args.add("usb-kbd,bus=usb-bus.0");
+            args.add(fmt("qemu-xhci,id=%s,p2=%d,p3=%d", busId,
+                qemuPorts(controller.getUsb2Ports(), busId),
+                qemuPorts(controller.getUsb3Ports(), busId)));
+            if (i == 0) addUsbInput(args, busId);
         }
     }
 
+    /** The guest's USB pointer and keyboard, which only a VM with a screen has a use for. */
+    private void addUsbInput(@NonNull List<String> args, @NonNull String busId) {
+        if (!hasAnyScreen()) return;
+        args.add("-device");
+        args.add(fmt("usb-tablet,bus=%s.0", busId));
+        args.add("-device");
+        args.add(fmt("usb-kbd,bus=%s.0", busId));
+    }
+
+    /**
+     * qemu-xhci refuses a root hub with no ports, while the editor offers 0 because that is the
+     * range the user asked for; a zero therefore becomes one rather than a VM that will not start.
+     */
+    private static int qemuPorts(int ports, @NonNull String busId) {
+        if (ports >= 1) return Math.min(ports, VMXhciConfig.MAX_PORTS);
+        Log.w(TAG, fmt("xHCI %s asked for 0 ports; qemu-xhci needs at least one", busId));
+        return 1;
+    }
+
     private void buildSharedDirCommand(@NonNull List<String> args) {
         var dirs = config.item.opt("shared_dirs", null);
         if (dirs == null) return;
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/natives/UnixHelper.java b/app/src/main/java/cn/classfun/droidvm/lib/natives/UnixHelper.java
index 787f07201..9de91d9ce 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/natives/UnixHelper.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/natives/UnixHelper.java
@@ -48,8 +48,23 @@ private static native void nativeInstallSignalHandler(
 
     public static native int nativePollIn(int fd, int timeoutMs);
 
+    /**
+     * The kernel's uevent multicast socket, or -1. A driver bind or unbind moves no node, so it
+     * raises no inotify event anywhere: this is the only report of one there is.
+     */
+    public static native int nativeUeventOpen();
+
+    /**
+     * poll() over two descriptors: 1 for the first readable, 2 for the second, 3 for both, 0 on
+     * timeout, -1 on error, -2 on hangup. For a reader that must be stoppable at once without
+     * waking on a timer to ask whether it should stop.
+     */
+    public static native int nativePollIn2(int fd1, int fd2, int timeoutMs);
+
     public static native int nativeRead(int fd, @NonNull byte[] buf, int len);
 
+    public static native int nativeWrite(int fd, @NonNull byte[] buf, int len);
+
     @SuppressLint("UnsafeDynamicallyLoadedCode")
     public static void load() {
         if (loaded) return;
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/store/vm/PeripheralType.java b/app/src/main/java/cn/classfun/droidvm/lib/store/vm/PeripheralType.java
index ddf61c717..356b8a34b 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/store/vm/PeripheralType.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/store/vm/PeripheralType.java
@@ -42,7 +42,20 @@ public enum PeripheralType implements StringEnum {
      * <p>Unavailable until crosvm carries the device; the host half (Camera2 NDK through
      * {@code android_camera}) exists, the virtio-media capture device on top of it does not.</p>
      */
-    VIRTIO_CAMERA(R.string.edit_vm_peripheral_type_virtio_camera, R.drawable.ic_camera, false, ServiceInfo.FOREGROUND_SERVICE_TYPE_CAMERA);
+    VIRTIO_CAMERA(R.string.edit_vm_peripheral_type_virtio_camera, R.drawable.ic_camera, false, ServiceInfo.FOREGROUND_SERVICE_TYPE_CAMERA),
+    /**
+     * xHCI USB controller: the root the guest's USB devices hang off.
+     *
+     * <p>What is attached to it is not stored here. Host devices arrive through the app-global
+     * automatic attach rules, which name this controller as their target -- which VM gets a
+     * device when two of them want it is a property of the rules, and a per-VM list has nowhere
+     * to say it.</p>
+     *
+     * <p>Appended last on purpose: the ordinal is used as a transient menu item id when a
+     * peripheral is added, and storage is by {@code name()}, so appending is the only position
+     * that leaves every stored config reading as what it says.</p>
+     */
+    XHCI_USB(R.string.edit_vm_peripheral_type_xhci, R.drawable.ic_usb, true, ServiceInfo.FOREGROUND_SERVICE_TYPE_NONE);
 
     private final @StringRes int titleId;
     private final @DrawableRes int iconId;
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/store/vm/VMConfig.java b/app/src/main/java/cn/classfun/droidvm/lib/store/vm/VMConfig.java
index bf23f799f..56b7316d8 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/store/vm/VMConfig.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/store/vm/VMConfig.java
@@ -50,6 +50,10 @@ public VMConfig(@NonNull JSONObject obj) throws JSONException {
         // Configs from before "serial_ports" implicitly meant "COM1 = app console, rest sinks";
         // make that explicit so every reader sees the same list.
         VMSerialConfig.ensureDefaults(item);
+        // Configs from before the xHCI peripheral say "usb": true; turn that into the one
+        // controller it meant, so a USB rule has something to point at. Deterministic, because
+        // the daemon runs this too on the config the app pushes and never writes the result back.
+        VMXhciConfig.migrate(item);
     }
 
     /**
@@ -68,7 +72,6 @@ public static VMConfig createWithCustomizeDefaults(@NonNull Context context) {
         item.set("pmu", NEW_VM_DEFAULT_PMU);
         item.set("rng", NEW_VM_DEFAULT_RNG);
         item.set("smt", NEW_VM_DEFAULT_SMT);
-        item.set("usb", NEW_VM_DEFAULT_USB);
         item.set("sandbox", false);
         item.set("hugepages", NEW_VM_DEFAULT_HUGEPAGES);
         item.set("strace", false);
@@ -148,7 +151,10 @@ public static VMConfig createWithCustomizeDefaults(@NonNull Context context) {
 
         var peripherals = DataItem.newArray();
         peripherals.append(VMPeripheralConfig.createDefaultVirtioSound().item);
-        item.set("peripherals", peripherals);
+        item.set(VMXhciConfig.KEY_PERIPHERALS, peripherals);
+        // Through the minting path rather than a literal entry, so the id and the counter behind
+        // it are the same "xhci-0" the migration of an old config produces.
+        if (NEW_VM_DEFAULT_USB) VMXhciConfig.addController(item);
         VMSerialConfig.ensureDefaults(item);
         return config;
     }
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/store/vm/VMPeripheralConfig.java b/app/src/main/java/cn/classfun/droidvm/lib/store/vm/VMPeripheralConfig.java
index 170df6f28..d52030f30 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/store/vm/VMPeripheralConfig.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/store/vm/VMPeripheralConfig.java
@@ -54,6 +54,61 @@ public static VMPeripheralConfig createDefaultVirtioSound() {
         return config;
     }
 
+    /**
+     * Creates an xHCI USB controller with the default root-port counts.
+     *
+     * <p>The id is passed in rather than minted here: {@link VMXhciConfig#addController} is the
+     * one place that hands one out, because handing one out is also what moves the VM's counter
+     * past it.</p>
+     */
+    @NonNull
+    public static VMPeripheralConfig createDefaultXhci(@NonNull String id) {
+        var config = new VMPeripheralConfig(DataItem.newObject());
+        config.setType(PeripheralType.XHCI_USB);
+        config.setControllerId(id);
+        config.setUsb2Ports(VMXhciConfig.DEFAULT_PORTS);
+        config.setUsb3Ports(VMXhciConfig.DEFAULT_PORTS);
+        return config;
+    }
+
+    // ---- xHCI USB controller ----
+
+    /**
+     * This controller's id inside its VM, or "" for an entry that has not been given one yet.
+     *
+     * <p>The only peripheral field anything outside the VM config points at: an automatic USB
+     * attach rule names it, and has to keep naming the same controller across an edit that moves
+     * the row. See {@link VMXhciConfig}.</p>
+     */
+    @NonNull
+    public String getControllerId() {
+        return str(VMXhciConfig.KEY_ID);
+    }
+
+    public void setControllerId(@NonNull String id) {
+        item.set(VMXhciConfig.KEY_ID, id);
+    }
+
+    /** USB 2.0 root ports the controller offers. Honoured by QEMU; crosvm's xHCI is fixed at 8. */
+    public int getUsb2Ports() {
+        return VMXhciConfig.clampPorts(
+            item.optLong(VMXhciConfig.KEY_USB2, VMXhciConfig.DEFAULT_PORTS));
+    }
+
+    public void setUsb2Ports(int ports) {
+        item.set(VMXhciConfig.KEY_USB2, VMXhciConfig.clampPorts(ports));
+    }
+
+    /** USB 3.0 root ports the controller offers. */
+    public int getUsb3Ports() {
+        return VMXhciConfig.clampPorts(
+            item.optLong(VMXhciConfig.KEY_USB3, VMXhciConfig.DEFAULT_PORTS));
+    }
+
+    public void setUsb3Ports(int ports) {
+        item.set(VMXhciConfig.KEY_USB3, VMXhciConfig.clampPorts(ports));
+    }
+
     // ---- virtio-snd ----
 
     /**
@@ -217,7 +272,7 @@ private String str(@NonNull String key) {
     @NonNull
     public static List<VMPeripheralConfig> listOf(@NonNull DataItem config) {
         var out = new ArrayList<VMPeripheralConfig>();
-        var arr = config.opt("peripherals", null);
+        var arr = config.opt(VMXhciConfig.KEY_PERIPHERALS, null);
         if (arr == null || !arr.is(DataItem.Type.ARRAY)) return out;
         for (var iter : arr)
             out.add(new VMPeripheralConfig(iter.getValue()));
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/store/vm/VMXhciConfig.java b/app/src/main/java/cn/classfun/droidvm/lib/store/vm/VMXhciConfig.java
new file mode 100644
index 000000000..e0cf08a84
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/lib/store/vm/VMXhciConfig.java
@@ -0,0 +1,197 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
+package cn.classfun.droidvm.lib.store.vm;
+
+import androidx.annotation.NonNull;
+import androidx.annotation.Nullable;
+
+import java.util.ArrayList;
+import java.util.List;
+
+import cn.classfun.droidvm.lib.store.base.DataItem;
+
+import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
+
+/**
+ * The xHCI USB controllers of a VM: the entries of its "peripherals" array whose type is
+ * {@link PeripheralType#XHCI_USB}, and the rules for minting and finding their ids.
+ *
+ * <p>A controller carries an id because it is the one peripheral something outside the VM config
+ * points at: an automatic USB attach rule names {@code vm} plus {@code controller}, and it has to
+ * keep naming the same device across an edit. Index in the array cannot do that -- removing the
+ * row above one shifts it, and the editor writes the whole array back on every save.</p>
+ *
+ * <p>The id is a slug and not a UUID because this runs twice, in two processes: {@code vm_create}
+ * and {@code vm_modify} build a {@code new VMConfig(JSONObject)} from the config the app pushed,
+ * so every migration in that constructor also runs inside the daemon, on a copy the daemon never
+ * writes back. A random id minted there would differ from the one the app saved and every rule
+ * keyed on it would dangle; {@code xhci-0} is what both processes compute from the same input.
+ * The same reasoning made the screens' ids stable strings -- see {@link VMScreenConfig}.</p>
+ *
+ * <p>{@link #KEY_NEXT} is what keeps a deleted id from being handed out again: without it,
+ * deleting {@code xhci-0} and adding a controller would silently adopt every rule that pointed at
+ * the deleted one. It only ever increases, and only a writer that persists bumps it -- the
+ * daemon's re-run of the migration computes the same value from the same input and drops it.</p>
+ */
+public final class VMXhciConfig {
+    /** Key of the peripherals array on the VM config. */
+    public static final String KEY_PERIPHERALS = "peripherals";
+    /** Key of a controller's stable id inside its peripheral entry. */
+    public static final String KEY_ID = "id";
+    public static final String KEY_USB2 = "usb2_ports";
+    public static final String KEY_USB3 = "usb3_ports";
+    /** Next controller index to hand out; never reused, so a deleted id cannot be re-adopted. */
+    public static final String KEY_NEXT = "xhci_next";
+    /**
+     * The VM-level boolean this list replaced. Read once, by {@link #migrate}, and never
+     * written: it is the import signal of a config an older build wrote -- a vm or a vmpkg that
+     * may never be saved again -- and nothing else in this codebase asks it anything.
+     */
+    private static final String KEY_USB = "usb";
+    /** Prefix of every minted id; the number after it is {@link #KEY_NEXT}'s. */
+    public static final String ID_PREFIX = "xhci-";
+    /** crosvm's fixed geometry, and the value that raises no warning on the default backend. */
+    public static final int DEFAULT_PORTS = 8;
+    public static final int MIN_PORTS = 0;
+    public static final int MAX_PORTS = 15;
+
+    private VMXhciConfig() {
+    }
+
+    /** The VM's xHCI controllers, in array order. The first one is the crosvm-effective one. */
+    @NonNull
+    public static List<VMPeripheralConfig> listControllers(@NonNull DataItem vmItem) {
+        var out = new ArrayList<VMPeripheralConfig>();
+        for (var peripheral : VMPeripheralConfig.listOf(vmItem))
+            if (peripheral.getType() == PeripheralType.XHCI_USB) out.add(peripheral);
+        return out;
+    }
+
+    /**
+     * The controller [id] names, or the first one when [id] is null -- which is what a rule with
+     * no controller field means. Null when the VM has no such controller, or none at all.
+     */
+    @Nullable
+    public static VMPeripheralConfig findController(@NonNull DataItem vmItem, @Nullable String id) {
+        var controllers = listControllers(vmItem);
+        if (controllers.isEmpty()) return null;
+        if (id == null) return controllers.get(0);
+        for (var controller : controllers)
+            if (id.equals(controller.getControllerId())) return controller;
+        return null;
+    }
+
+    /** The id a rule that names no controller means; null when the VM has none. */
+    @Nullable
+    public static String firstControllerId(@NonNull DataItem vmItem) {
+        var first = findController(vmItem, null);
+        if (first == null) return null;
+        var id = first.getControllerId();
+        return id.isEmpty() ? null : id;
+    }
+
+    /** Whether the VM has a USB controller at all. This is what replaced the "usb" boolean. */
+    public static boolean isEnabled(@NonNull DataItem vmItem) {
+        return !listControllers(vmItem).isEmpty();
+    }
+
+    /**
+     * Appends a controller with a fresh id and the default port counts, and returns it.
+     *
+     * <p>The one place an id is minted, so that {@link #KEY_NEXT} is bumped exactly when one is
+     * handed out: a caller that appended an entry itself could hand the same id out twice.</p>
+     */
+    @NonNull
+    public static VMPeripheralConfig addController(@NonNull DataItem vmItem) {
+        var controller = VMPeripheralConfig.createDefaultXhci(nextId(vmItem));
+        peripherals(vmItem).append(controller.item);
+        return controller;
+    }
+
+    /** Gives every id-less xHCI entry the next unused id. Idempotent. */
+    public static void ensureIds(@NonNull DataItem vmItem) {
+        for (var controller : listControllers(vmItem)) {
+            if (!controller.getControllerId().isEmpty()) continue;
+            controller.setControllerId(nextId(vmItem));
+        }
+    }
+
+    /**
+     * Brings a config up to the current USB schema: the VM-level "usb" boolean of an imported
+     * vm or vmpkg becomes the one xHCI controller it meant.
+     *
+     * <p>An absent "usb" key reads as off, which is what crosvm and the passthrough manager
+     * always made of it; QEMU defaulted it to on, and no longer does -- "no controller" is
+     * uniformly "no USB".</p>
+     *
+     * <p>Idempotent, and identical in both processes: run twice, or once here and once in the
+     * daemon on the same input, and the same controller with the same id comes out. That matters
+     * more than it looks -- an imported config may never be saved, so every read of it has to
+     * produce the id a rule is pointing at.</p>
+     */
+    public static void migrate(@NonNull DataItem vmItem) {
+        // First, so a hand-written or half-converted entry gets its id before anything counts.
+        ensureIds(vmItem);
+        if (!listControllers(vmItem).isEmpty()) return;
+        // The counter is this fold's evidence that it has already run on this config, the way
+        // each of VMScreenConfig's has one: without it, a VM whose last controller the user
+        // removed would grow a new one -- under a new id, dangling every rule that named the old
+        // one -- every time the config was read back.
+        var converted = vmItem.optLong(KEY_NEXT, -1) >= 0;
+        if (converted || !vmItem.optBoolean(KEY_USB, false)) return;
+        addController(vmItem);
+    }
+
+    /** A stored port count, held to what the editor can express. */
+    public static int clampPorts(long ports) {
+        if (ports < MIN_PORTS) return MIN_PORTS;
+        if (ports > MAX_PORTS) return MAX_PORTS;
+        return (int) ports;
+    }
+
+    /**
+     * The next id, bumping the counter past it.
+     *
+     * <p>The counter is raised past every id already in the list first: a config that carries ids
+     * but no counter -- written by hand, or by a build that lost the key -- would otherwise mint
+     * one it is already using.</p>
+     */
+    @NonNull
+    private static String nextId(@NonNull DataItem vmItem) {
+        var next = vmItem.optLong(KEY_NEXT, 0);
+        for (var controller : listControllers(vmItem)) {
+            var index = indexOf(controller.getControllerId());
+            if (index >= next) next = index + 1;
+        }
+        vmItem.set(KEY_NEXT, next + 1);
+        return fmt("%s%d", ID_PREFIX, next);
+    }
+
+    /** The number in "xhci-<n>", or -1 for an id this class did not mint. */
+    private static long indexOf(@NonNull String id) {
+        if (!id.startsWith(ID_PREFIX)) return -1;
+        try {
+            return Long.parseLong(id.substring(ID_PREFIX.length()));
+        } catch (NumberFormatException e) {
+            return -1;
+        }
+    }
+
+    /**
+     * The peripherals array, created when the config has none.
+     *
+     * <p>Re-read after it is created rather than kept from the local variable: {@code set} stores
+     * a copy, so appending to the value handed to it would build a list nothing else can see --
+     * the trap {@link VMPeripheralConfig#addEndpoint} documents.</p>
+     */
+    @NonNull
+    private static DataItem peripherals(@NonNull DataItem vmItem) {
+        var arr = vmItem.opt(KEY_PERIPHERALS, (DataItem) null);
+        if (arr == null || !arr.is(DataItem.Type.ARRAY)) {
+            vmItem.set(KEY_PERIPHERALS, DataItem.newArray());
+            arr = vmItem.opt(KEY_PERIPHERALS, (DataItem) null);
+        }
+        return arr;
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/agent/base/AgentVM.java b/app/src/main/java/cn/classfun/droidvm/ui/agent/base/AgentVM.java
index 708dc962d..b99da85b4 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/agent/base/AgentVM.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/agent/base/AgentVM.java
@@ -208,7 +208,8 @@ public VMConfig buildVM() {
         vm.item.set("hugepages", false);
         vm.item.set("rng", false);
         vm.item.set("balloon", false);
-        vm.item.set("usb", false);
+        // And no peripherals at all, which is how a VM says it has no USB: an agent VM boots an
+        // initramfs over a serial console and has nothing to pass through.
         vm.item.set("audio_enabled", false);
         vm.item.set(LendMthpMode.KEY, LendMthpMode.DISABLED);
         var boot = BootConfig.of(vm);
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/main/settings/MainSettingsFragment.java b/app/src/main/java/cn/classfun/droidvm/ui/main/settings/MainSettingsFragment.java
index 092f8817b..b3e0de778 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/main/settings/MainSettingsFragment.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/main/settings/MainSettingsFragment.java
@@ -71,6 +71,8 @@
 import cn.classfun.droidvm.ui.update.UpdateDialog;
 import cn.classfun.droidvm.ui.update.UpdateInfo;
 import cn.classfun.droidvm.ui.update.VersionCheck;
+import cn.classfun.droidvm.ui.usb.UsbDevicesActivity;
+import cn.classfun.droidvm.ui.usb.UsbRulesActivity;
 import cn.classfun.droidvm.ui.widgets.row.SwitchRowWidget;
 import cn.classfun.droidvm.ui.widgets.row.TextRowWidget;
 import cn.classfun.droidvm.ui.widgets.tools.CpuCorePickerDialog;
@@ -101,6 +103,8 @@ public final class MainSettingsFragment extends MainBaseFragment {
     private TextRowWidget itemVMOptimizeCompression;
     private SwitchRowWidget itemOptimizeSdcard;
     private TextRowWidget itemUsbAcmPorts;
+    private TextRowWidget itemUsbPassthrough;
+    private TextRowWidget itemUsbDevices;
     private TextRowWidget itemCpuAffinity;
     private TextRowWidget itemLicense;
     private SwitchRowWidget itemAutoCheckUpdate;
@@ -160,6 +164,8 @@ public void onViewCreated(@NonNull View view, @Nullable Bundle savedInstanceStat
         itemVMOptimizeCompression = view.findViewById(R.id.item_vm_optimize_compression);
         itemOptimizeSdcard = view.findViewById(R.id.item_optimize_sdcard);
         itemUsbAcmPorts = view.findViewById(R.id.item_usb_acm_ports);
+        itemUsbPassthrough = view.findViewById(R.id.item_usb_passthrough);
+        itemUsbDevices = view.findViewById(R.id.item_usb_devices);
         itemCpuAffinity = view.findViewById(R.id.item_cpu_affinity);
         itemLicense = view.findViewById(R.id.item_license);
         itemAutoCheckUpdate = view.findViewById(R.id.item_auto_check_update);
@@ -199,6 +205,8 @@ private void initSettings() {
         bindOnChecked(itemOptimizeSdcard, KEY_OPTIMIZE_SDCARD, true);
         bindOnClick(itemUsbAcmPorts, this::showUsbAcmPortsDialog);
         refreshUsbAcmPortsSummary();
+        bindOnClick(itemUsbPassthrough, this::showUsbPassthrough);
+        bindOnClick(itemUsbDevices, this::showUsbDevices);
         bindOnChecked(itemAutoCheckUpdate, KEY_AUTO_CHECK_UPDATE, true);
         bindOnClick(itemCheckUpdate, this::checkUpdate);
         bindOnClick(itemPrivacy, this::showPrivacyPolicy);
@@ -523,6 +531,14 @@ private void showHugePageReserve() {
         startActivity(new Intent(requireContext(), HugePageActivity.class));
     }
 
+    private void showUsbPassthrough() {
+        startActivity(new Intent(requireContext(), UsbRulesActivity.class));
+    }
+
+    private void showUsbDevices() {
+        startActivity(new Intent(requireContext(), UsbDevicesActivity.class));
+    }
+
     private void showKernelModules() {
         KernelModuleDialog.show(getChildFragmentManager());
     }
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/usb/UsbDeviceNames.java b/app/src/main/java/cn/classfun/droidvm/ui/usb/UsbDeviceNames.java
new file mode 100644
index 000000000..edbaae649
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/ui/usb/UsbDeviceNames.java
@@ -0,0 +1,96 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
+package cn.classfun.droidvm.ui.usb;
+
+import android.content.Context;
+
+import androidx.annotation.NonNull;
+import androidx.annotation.Nullable;
+
+import java.util.List;
+
+import cn.classfun.droidvm.R;
+
+/**
+ * What a rule's card calls the device it is about, resolved against what is plugged in right
+ * now. Display only: a rule matches on its id or its port, never on a name, so a device that
+ * comes back under another name is the same rule.
+ *
+ * <p>Shared rather than written per call site because the three ways a name can be missing --
+ * the rule is about no device in particular, the device is not plugged in, the descriptor
+ * carries no name -- read as three different sentences, and two pages saying them differently
+ * would be two answers to one question.</p>
+ */
+public final class UsbDeviceNames {
+    private UsbDeviceNames() {
+    }
+
+    /** The card's title: the generation the device came up at, then what it is. */
+    @NonNull
+    public static String cardTitle(@NonNull Context context, @NonNull UsbRuleLayer layer,
+                                   @Nullable String id, @Nullable String port,
+                                   @NonNull List<UsbHostDeviceInfo> devices) {
+        var device = deviceFor(layer, id, port, devices);
+        return titled(context, device == null ? "" : device.speed,
+            forRule(context, layer, id, port, devices));
+    }
+
+    /** The same title for a device in hand rather than for a rule about one. */
+    @NonNull
+    public static String cardTitle(@NonNull Context context, @NonNull UsbHostDeviceInfo device) {
+        return titled(context, device.speed, nameOf(context, device));
+    }
+
+    /** The name to show for a rule about [id] / at [port]. */
+    @NonNull
+    public static String forRule(@NonNull Context context, @NonNull UsbRuleLayer layer,
+                                 @Nullable String id, @Nullable String port,
+                                 @NonNull List<UsbHostDeviceInfo> devices) {
+        if (layer == UsbRuleLayer.ANY) return context.getString(R.string.usb_rules_any_device);
+        var device = deviceFor(layer, id, port, devices);
+        if (device == null) return context.getString(R.string.usb_rules_device_absent);
+        return nameOf(context, device);
+    }
+
+    /** What a plugged-in device is called, said as "unknown" rather than as its id. */
+    @NonNull
+    private static String nameOf(@NonNull Context context, @NonNull UsbHostDeviceInfo device) {
+        if (device.product.isEmpty() && device.manufacturer.isEmpty())
+            return context.getString(R.string.usb_rules_device_unnamed);
+        return device.displayName(context);
+    }
+
+    /** "USB 3.0 <name>", or the name alone at a rate this build has no generation for. */
+    @NonNull
+    private static String titled(@NonNull Context context, @NonNull String speed,
+                                 @NonNull String name) {
+        var generation = UsbSpeed.generationOf(speed);
+        return generation.isEmpty()
+            ? context.getString(R.string.usb_rules_card_title_plain_fmt, name)
+            : context.getString(R.string.usb_rules_card_title_fmt, generation, name);
+    }
+
+    /**
+     * The plugged-in device a rule speaks about, or null when none is.
+     *
+     * <p>A port rule is about whatever is in that port right now, so it is looked up by port and
+     * its card is renamed by a replug; the other two layers name a device and are looked up by
+     * id.</p>
+     */
+    @Nullable
+    public static UsbHostDeviceInfo deviceFor(@NonNull UsbRuleLayer layer, @Nullable String id,
+                                              @Nullable String port,
+                                              @NonNull List<UsbHostDeviceInfo> devices) {
+        if (layer == UsbRuleLayer.PORT) {
+            if (port == null || port.isEmpty()) return null;
+            for (var device : devices)
+                if (device.port.equals(port)) return device;
+            return null;
+        }
+        if (id == null || id.isEmpty()) return null;
+        for (var device : devices)
+            if (device.id.equals(id)) return device;
+        return null;
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/usb/UsbDeviceTarget.java b/app/src/main/java/cn/classfun/droidvm/ui/usb/UsbDeviceTarget.java
new file mode 100644
index 000000000..4ed0446fa
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/ui/usb/UsbDeviceTarget.java
@@ -0,0 +1,103 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
+package cn.classfun.droidvm.ui.usb;
+
+import androidx.annotation.NonNull;
+import androidx.annotation.Nullable;
+
+import java.util.Objects;
+
+import cn.classfun.droidvm.daemon.usb.UsbHostDevice;
+import cn.classfun.droidvm.daemon.usb.UsbRules;
+
+/**
+ * Where a device should end up: on the host, hidden, or on one VM's controller.
+ *
+ * <p>The kind is the daemon's own {@link UsbRules.Target} rather than a second copy of the
+ * vocabulary -- a picker that offered a fourth answer, or spelled one of the three differently,
+ * would be a rule the save refuses. What is added here is the pair a rule row carries beside it:
+ * which VM, and which controller inside it, with null meaning that VM's first one.</p>
+ */
+public final class UsbDeviceTarget {
+    @NonNull
+    public final UsbRules.Target kind;
+    /** The VM id, for -- and only for -- a {@link UsbRules.Target#VM} target. */
+    @Nullable
+    public final String vmId;
+    /** One xHCI controller inside that VM; null means whichever is its first. */
+    @Nullable
+    public final String controller;
+
+    private UsbDeviceTarget(@NonNull UsbRules.Target kind, @Nullable String vmId,
+                            @Nullable String controller) {
+        this.kind = kind;
+        this.vmId = vmId;
+        this.controller = controller;
+    }
+
+    @NonNull
+    public static UsbDeviceTarget host() {
+        return new UsbDeviceTarget(UsbRules.Target.HOST, null, null);
+    }
+
+    @NonNull
+    public static UsbDeviceTarget sink() {
+        return new UsbDeviceTarget(UsbRules.Target.SINK, null, null);
+    }
+
+    @NonNull
+    public static UsbDeviceTarget vm(@NonNull String vmId, @Nullable String controller) {
+        return new UsbDeviceTarget(UsbRules.Target.VM, vmId, controller);
+    }
+
+    /**
+     * What a rule row says, read the way the daemon reads it: a row carrying no target is one
+     * written before there was a target to write, and its vm is the whole of what it said.
+     *
+     * <p>A token this build has no word for reads as that same derivation. The row is not
+     * rewritten by being displayed, so the save still sends the token back and the daemon still
+     * refuses it by name -- which is a better answer than a page that quietly repairs it.</p>
+     */
+    @NonNull
+    public static UsbDeviceTarget of(@Nullable String target, @Nullable String vm,
+                                     @Nullable String controller) {
+        var kind = target == null ? null : UsbRules.Target.fromKey(target);
+        if (kind == null) kind = vm == null ? UsbRules.Target.HOST : UsbRules.Target.VM;
+        if (kind != UsbRules.Target.VM) return new UsbDeviceTarget(kind, null, null);
+        return new UsbDeviceTarget(kind, vm, controller);
+    }
+
+    /**
+     * Where a device is right now, said in the words the menu speaks: the VM that holds it, the
+     * host, or nobody -- and null when it is in none of the three.
+     *
+     * <p>Read off the device's state rather than remembered, because the state is the only copy
+     * of it there is. A device claimed through usbfs that this daemon has no attachment for is
+     * held by somebody these three words cannot name: a VMM still dying with it, or an ordinary
+     * Android app that opened the device. Answering "the host" for that would be the one thing
+     * such a device certainly is not, so the answer is nothing at all, and a caller that has to
+     * show something is left to find a word of its own for it.</p>
+     */
+    @Nullable
+    public static UsbDeviceTarget current(@NonNull UsbHostDevice.State state,
+                                          @Nullable String attachedVm,
+                                          @Nullable String attachedController) {
+        if (attachedVm != null) return vm(attachedVm, attachedController);
+        if (state == UsbHostDevice.State.VMUSE) return null;
+        return state == UsbHostDevice.State.IDLE ? sink() : host();
+    }
+
+    /** Whether two targets say the same thing, so a picker can mark the row that is current. */
+    public boolean sameAs(@Nullable UsbDeviceTarget other) {
+        if (other == null) return false;
+        return kind == other.kind && Objects.equals(vmId, other.vmId)
+            && Objects.equals(controller, other.controller);
+    }
+
+    /** The {@code target} key of a rule row. */
+    @NonNull
+    public String toRuleTarget() {
+        return kind.key;
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/usb/UsbDevicesActivity.java b/app/src/main/java/cn/classfun/droidvm/ui/usb/UsbDevicesActivity.java
new file mode 100644
index 000000000..c81230256
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/ui/usb/UsbDevicesActivity.java
@@ -0,0 +1,363 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
+package cn.classfun.droidvm.ui.usb;
+
+import static android.view.View.GONE;
+import static android.view.View.VISIBLE;
+import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
+
+import android.os.Bundle;
+import android.os.Handler;
+import android.os.Looper;
+import android.util.Log;
+import android.view.LayoutInflater;
+import android.view.View;
+import android.widget.LinearLayout;
+import android.widget.TextView;
+
+import androidx.annotation.NonNull;
+import androidx.annotation.Nullable;
+import androidx.appcompat.app.AppCompatActivity;
+
+import com.google.android.material.appbar.MaterialToolbar;
+import com.google.android.material.button.MaterialButton;
+import com.google.android.material.dialog.MaterialAlertDialogBuilder;
+import com.google.android.material.snackbar.Snackbar;
+
+import org.json.JSONArray;
+import org.json.JSONObject;
+
+import java.util.ArrayList;
+import java.util.HashMap;
+import java.util.List;
+import java.util.Map;
+
+import cn.classfun.droidvm.R;
+import cn.classfun.droidvm.daemon.usb.UsbHostDevice;
+import cn.classfun.droidvm.daemon.usb.UsbRules;
+import cn.classfun.droidvm.lib.daemon.DaemonConnection;
+
+/**
+ * Settings, Virtual Machine, USB passthrough manager: every host USB device, and one menu per
+ * device saying where it should go.
+ *
+ * <p>This is the direct action, not a rule, and it has no save button: picking a row of the menu
+ * sends one {@code usb_set_target} there and then, and cancelling the menu does nothing. What a
+ * row shows is read from the device itself -- which VM holds it, or the host, or nobody -- so
+ * there is no pending state to keep, nothing to discard on the way out, and no way for the page
+ * to disagree with the daemon about where a device is.</p>
+ *
+ * <p>The menu's current value is the whole of that display. The left column of a row names the
+ * device and says nothing about what it is doing, because a second wording of the same answer
+ * is a second thing to keep true -- and the one place a user changes the answer is the better
+ * place to read it.</p>
+ *
+ * <p>The two rows that are not a VM carry a lock, because that is what choosing them adds: the
+ * host and "nobody" are states a device can already be in by itself, and asking for one is how
+ * a user says the rules may not decide it again until it is unplugged.</p>
+ */
+public final class UsbDevicesActivity extends AppCompatActivity
+    implements DaemonConnection.EventListener {
+    private static final String TAG = "UsbDevicesActivity";
+    private final Handler mainHandler = new Handler(Looper.getMainLooper());
+    private final List<UsbHostDeviceInfo> devices = new ArrayList<>();
+    private final List<VmEntry> vms = new ArrayList<>();
+    /** Each VM's xHCI controller ids, read from vms.json; see {@link VmEntry#controllersOf}. */
+    private final Map<String, List<String>> vmControllers = new HashMap<>();
+    private View root;
+    private TextView tvStatus;
+    private TextView tvEmpty;
+    private LinearLayout deviceRows;
+    /**
+     * Whether one action is still out. A move can spend seconds inside crosvm's CLI, and a
+     * second one started over the same devices meanwhile would race it -- so every menu on the
+     * page is closed to taps until the daemon has answered, which is also the only way this
+     * page has of saying that something is happening.
+     */
+    private boolean acting = false;
+
+    @Override
+    protected void onCreate(@Nullable Bundle savedInstanceState) {
+        super.onCreate(savedInstanceState);
+        setContentView(R.layout.activity_usb_devices);
+        root = findViewById(R.id.root);
+        MaterialToolbar toolbar = findViewById(R.id.toolbar);
+        tvStatus = findViewById(R.id.tv_status);
+        tvEmpty = findViewById(R.id.tv_empty);
+        deviceRows = findViewById(R.id.device_rows);
+        toolbar.setTitle(R.string.usb_devices_title);
+        // Nothing is held back to be saved, so leaving takes nothing with it and the back key
+        // means what it says everywhere else.
+        toolbar.setNavigationOnClickListener(v -> finish());
+    }
+
+    @Override
+    protected void onStart() {
+        super.onStart();
+        DaemonConnection.getInstance().addListener(this);
+    }
+
+    @Override
+    protected void onStop() {
+        super.onStop();
+        DaemonConnection.getInstance().removeListener(this);
+    }
+
+    @Override
+    protected void onResume() {
+        super.onResume();
+        refreshAll();
+    }
+
+    private void refreshAll() {
+        refreshVms();
+        loadDevices();
+    }
+
+    /** The VM list and, from vms.json, the controllers a device can be sent to. */
+    private void refreshVms() {
+        vmControllers.clear();
+        vmControllers.putAll(VmEntry.controllersOf(this));
+        loadVms();
+    }
+
+    // Daemon requests. Every callback arrives on the connection's executor, so each hops to
+    // the main thread through post(), which also drops it once the page is going away.
+
+    private void loadDevices() {
+        DaemonConnection.getInstance().buildRequest("usb_host_list")
+            .onResponse(resp -> post(() -> applyDevices(resp.optJSONArray("devices"))))
+            .onUnsuccessful(resp -> post(() -> showStatus(message(resp))))
+            .onError(e -> post(() -> showStatus(getString(R.string.usb_rules_daemon_unavailable))))
+            .invoke();
+    }
+
+    private void applyDevices(@Nullable JSONArray arr) {
+        devices.clear();
+        devices.addAll(UsbHostDeviceInfo.fromArray(arr));
+        showStatus(null);
+        renderRows();
+    }
+
+    private void loadVms() {
+        DaemonConnection.getInstance().buildRequest("vm_list")
+            .onResponse(resp -> post(() -> applyVms(resp.optJSONArray("data"))))
+            .onUnsuccessful(resp -> Log.w(TAG, fmt("vm_list: %s", message(resp))))
+            .onError(e -> Log.w(TAG, "vm_list failed", e))
+            .invoke();
+    }
+
+    private void applyVms(@Nullable JSONArray arr) {
+        vms.clear();
+        vms.addAll(VmEntry.fromArray(arr));
+        // The rows say which VM holds a device by name, and the menu offers the running ones.
+        renderRows();
+    }
+
+    // The list
+
+    private void renderRows() {
+        deviceRows.removeAllViews();
+        var inflater = LayoutInflater.from(this);
+        for (var device : devices) {
+            var view = inflater.inflate(R.layout.item_usb_device, deviceRows, false);
+            bindRow(view, device);
+            deviceRows.addView(view);
+        }
+        tvEmpty.setVisibility(devices.isEmpty() ? VISIBLE : GONE);
+    }
+
+    /**
+     * The left column is what the device IS -- its name, its id and where it is plugged in --
+     * and not a word about what it is doing: that is the menu's value, on the right, in one
+     * place.
+     */
+    private void bindRow(@NonNull View view, @NonNull UsbHostDeviceInfo device) {
+        TextView name = view.findViewById(R.id.tv_device_name);
+        TextView id = view.findViewById(R.id.tv_device_id);
+        TextView path = view.findViewById(R.id.tv_device_path);
+        MaterialButton target = view.findViewById(R.id.btn_device_target);
+        name.setText(UsbDeviceNames.cardTitle(this, device));
+        id.setText(device.id);
+        path.setText(getString(R.string.usb_devices_path_fmt, device.port, device.sysfs));
+        target.setText(valueOf(device));
+        target.setEnabled(!acting);
+        target.setOnClickListener(v -> UsbTargetPickerDialog.pickForDevice(this, vms,
+            vmControllers, picked -> setTarget(device, picked)));
+    }
+
+    /**
+     * What the menu shows as this row's value, read from the device the moment the row is drawn
+     * -- and the whole of what the page says about where the device is.
+     *
+     * <p>A host or idle device the user never asked for is a value the menu does not offer: it
+     * is where the rules, or the gate, happen to have left the device, and showing it as the
+     * locked option would claim a decision nobody made. So it shows as the plain word, and only
+     * a locked device reads back as one of the two rows that lock -- which is also the only
+     * place the lock is said, now that the row carries no note under it.</p>
+     *
+     * <p>A device somebody else claimed through usbfs gets a sixth value of its own, for the
+     * same reason: it is on no VM of ours, and it is not on the host either, so every word the
+     * menu speaks would be a lie about it.</p>
+     */
+    @NonNull
+    private String valueOf(@NonNull UsbHostDeviceInfo device) {
+        var current = UsbDeviceTarget.current(device.state, device.attachedVm,
+            device.attachedController);
+        // A usbfs claim with no attachment of ours behind it: an Android app that opened the
+        // device, or a VMM still dying with it before the leftovers take the claim off. No lock
+        // marker on it whatever the lock says -- the marker names one of the two rows the menu
+        // offers, and this is a state nobody could have picked.
+        if (current == null) return getString(R.string.usb_devices_target_claimed);
+        if (current.kind == UsbRules.Target.VM) {
+            var name = vmName(current.vmId);
+            // The same shape the menu's own VM rows carry, so the value the button shows is
+            // recognisable as one of them; a device attached before controllers were recorded
+            // names none, and the bare VM name is the whole of what is known about it.
+            return current.controller == null ? name
+                : getString(R.string.usb_rules_vm_label_fmt, name, current.controller);
+        }
+        // "Idle" on this page, "Sink" in a rule: the same target, named for what it is here.
+        // A rule says where a device is to be sent; this button says where the device is, and a
+        // device nobody holds is idle -- the state's own word, the one UsbHostDevice.State uses.
+        var label = current.kind == UsbRules.Target.SINK
+            ? R.string.usb_target_idle : R.string.usb_target_host;
+        return device.locked ? UsbTargetPickerDialog.lockedLabel(this, label) : getString(label);
+    }
+
+    /** The VM's name, or the bare id for one the daemon no longer lists. */
+    @NonNull
+    private String vmName(@Nullable String vmId) {
+        if (vmId == null) return "";
+        for (var vm : vms) if (vm.id.equals(vmId)) return vm.name;
+        return vmId;
+    }
+
+    // The action
+
+    /**
+     * One picked row of the menu, sent as it is picked. Choosing what the device already shows
+     * is not a no-op: for the host and for nobody it is what locks the device, which is the
+     * whole reason those two rows exist.
+     */
+    private void setTarget(@NonNull UsbHostDeviceInfo device, @NonNull UsbDeviceTarget target) {
+        if (acting) return;
+        setActing(true);
+        var request = DaemonConnection.getInstance().buildRequest("usb_set_target")
+            .put("device", device.sysfs)
+            .put("target", target.toRuleTarget());
+        if (target.kind == UsbRules.Target.VM) {
+            request.put("vm_id", target.vmId);
+            if (target.controller != null) request.put("controller", target.controller);
+        }
+        request
+            .onResponse(resp -> post(() ->
+                finished(device, target, resp.optString("state", ""), null)))
+            .onUnsuccessful(resp -> post(() -> finished(device, target, "", message(resp))))
+            .onError(e -> post(() -> finished(device, target, "",
+                getString(R.string.usb_rules_daemon_unavailable))))
+            .invoke();
+    }
+
+    /**
+     * What the daemon made of it. The state it read back is what the row will show after the
+     * reload, and it is also the one answer worth a sentence: choosing nobody takes the host's
+     * drivers off the device, and a driver that will not let go is the one way that can fail
+     * silently -- the row would simply come back saying the host still has it.
+     */
+    private void finished(@NonNull UsbHostDeviceInfo device, @NonNull UsbDeviceTarget target,
+                          @NonNull String state, @Nullable String error) {
+        setActing(false);
+        if (error != null)
+            new MaterialAlertDialogBuilder(this)
+                .setTitle(R.string.usb_devices_action_failed_title)
+                .setMessage(error)
+                .setPositiveButton(android.R.string.ok, null)
+                .show();
+        else if (target.kind == UsbRules.Target.SINK
+            && UsbHostDevice.State.HOSTUSE.key.equals(state))
+            snackbar(getString(R.string.usb_devices_idle_kept,
+                UsbDeviceNames.cardTitle(this, device)));
+        loadDevices();
+    }
+
+    /** Closes or reopens every menu on the page, which the rows read as they are drawn. */
+    private void setActing(boolean value) {
+        acting = value;
+        renderRows();
+    }
+
+    // DaemonConnection.EventListener; called off the main thread.
+
+    @Override
+    public void onDaemonEvent(JSONObject msg) {
+        if (!msg.optString("type", "").equals("event")) return;
+        var data = msg.optJSONObject("data");
+        if (data == null) return;
+        var event = data.optString("event", "");
+        switch (event) {
+            case "usb_host_changed": {
+                // The event carries the fresh list; only an older daemon makes us ask.
+                var arr = data.optJSONArray("devices");
+                post(() -> {
+                    if (arr != null) applyDevices(arr);
+                    else loadDevices();
+                });
+                break;
+            }
+            case "usb_vm_changed":
+            case "usb_auto_attached":
+                post(this::loadDevices);
+                break;
+            case "output":
+                break;
+            default:
+                // A VM state event: which VMs can take a device just changed. The controllers
+                // are not re-read for it -- only the editor changes those, and this page is not
+                // open while it is.
+                if (data.has("state")) post(this::loadVms);
+                break;
+        }
+    }
+
+    @Override
+    public void onDaemonConnected() {
+        post(this::refreshAll);
+    }
+
+    @Override
+    public void onDaemonDisconnected() {
+        post(() -> showStatus(getString(R.string.usb_rules_daemon_unavailable)));
+    }
+
+    // Helpers
+
+    /** A line at the top for what stops the page working; hidden when nothing does. */
+    private void showStatus(@Nullable String message) {
+        if (message == null || message.isEmpty()) {
+            tvStatus.setVisibility(GONE);
+            return;
+        }
+        tvStatus.setText(message);
+        tvStatus.setVisibility(VISIBLE);
+    }
+
+    @NonNull
+    private String message(@NonNull JSONObject resp) {
+        var text = resp.optString("message", "");
+        return text.isEmpty() ? getString(R.string.usb_rules_request_failed) : text;
+    }
+
+    private void snackbar(@NonNull String text) {
+        Snackbar.make(root, text, Snackbar.LENGTH_LONG).show();
+    }
+
+    /** Runs on the main thread, unless the page is already going away. */
+    private void post(@NonNull Runnable task) {
+        mainHandler.post(() -> {
+            if (isFinishing() || isDestroyed()) return;
+            task.run();
+        });
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/usb/UsbHostDeviceInfo.java b/app/src/main/java/cn/classfun/droidvm/ui/usb/UsbHostDeviceInfo.java
new file mode 100644
index 000000000..671306288
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/ui/usb/UsbHostDeviceInfo.java
@@ -0,0 +1,148 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
+package cn.classfun.droidvm.ui.usb;
+
+import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
+
+import android.content.Context;
+
+import androidx.annotation.NonNull;
+import androidx.annotation.Nullable;
+
+import org.json.JSONArray;
+import org.json.JSONObject;
+
+import java.util.ArrayList;
+import java.util.List;
+import java.util.Locale;
+
+import cn.classfun.droidvm.R;
+import cn.classfun.droidvm.daemon.usb.UsbHostDevice;
+
+/**
+ * One entry of {@code usb_host_list} as the two USB pages need it: what the device is, where it
+ * is plugged in and who holds it. The rule id and port path come from the daemon; should a
+ * daemon that predates them answer, both are derived here the way plan section 2.4 defines
+ * them, so the rows still describe their rules sensibly.
+ */
+public final class UsbHostDeviceInfo {
+    public final String sysfs;
+    public final String vid;
+    public final String pid;
+    public final String manufacturer;
+    public final String product;
+    public final String serial;
+    /** Megabits per second, as sysfs reports them; see {@link UsbSpeed}. */
+    public final String speed;
+    /** {@code vid:pid:serial}, or {@code vid:pid} for a device without a serial. */
+    public final String id;
+    /** Port chain without the bus: sysfs {@code 1-1.2.2} is port {@code 1.2.2}. */
+    public final String port;
+    /**
+     * The instance behind the sysfs name: it changes on every re-enumeration, so a device
+     * replugged into the same socket is a different one to anybody holding on to a choice.
+     */
+    public final int devnum;
+    /**
+     * What the device is doing, read off the drivers bound to its interfaces: the host has it,
+     * a VM has it, or nobody does. It is the whole of where the device is -- there is no second
+     * copy of that answer anywhere, in the daemon or here.
+     */
+    @NonNull
+    public final UsbHostDevice.State state;
+    /**
+     * Whether the user decided this device by hand, so no rules pass will move it again until
+     * it is unplugged. What they decided is {@link #state}; the lock only says that they did.
+     */
+    public final boolean locked;
+    @Nullable
+    public final String attachedVm;
+    @Nullable
+    public final String attachedVmName;
+    /** Which xHCI controller of that VM it landed on, when the daemon recorded one. */
+    @Nullable
+    public final String attachedController;
+    /** The rule that attached it, when a rule did. */
+    @Nullable
+    public final UsbRuleLayer autoRuleLayer;
+    /** 0-based index within {@link #autoRuleLayer}; meaningless when that is null. */
+    public final int autoRuleIndex;
+
+    private UsbHostDeviceInfo(@NonNull JSONObject obj) {
+        sysfs = obj.optString("sysfs", "");
+        vid = obj.optString("vid", "").toLowerCase(Locale.ROOT);
+        pid = obj.optString("pid", "").toLowerCase(Locale.ROOT);
+        manufacturer = optText(obj, "manufacturer");
+        product = optText(obj, "product");
+        serial = optText(obj, "serial");
+        speed = optText(obj, "speed");
+        var wireId = optText(obj, "id");
+        id = wireId.isEmpty() ? deriveId(vid, pid, serial) : wireId;
+        var wirePort = optText(obj, "port");
+        port = wirePort.isEmpty() ? derivePort(sysfs) : wirePort;
+        devnum = obj.optInt("devnum", -1);
+        // A state this build cannot read is shown as the host's: that is the answer that
+        // promises the user nothing, and the only one that is safe to be wrong about.
+        var wireState = UsbHostDevice.State.fromKey(obj.optString("state", ""));
+        state = wireState == null ? UsbHostDevice.State.HOSTUSE : wireState;
+        locked = obj.optBoolean("lock", false);
+        attachedVm = optNullable(obj, "attached_vm");
+        attachedVmName = optNullable(obj, "attached_vm_name");
+        attachedController = optNullable(obj, "attached_controller");
+        var rule = obj.optJSONObject("auto_rule");
+        autoRuleLayer = rule == null ? null : UsbRuleLayer.fromValue(rule.opt("layer"));
+        autoRuleIndex = rule == null ? -1 : rule.optInt("index", -1);
+    }
+
+    @NonNull
+    public static List<UsbHostDeviceInfo> fromArray(@Nullable JSONArray arr) {
+        var out = new ArrayList<UsbHostDeviceInfo>();
+        if (arr == null) return out;
+        for (int i = 0; i < arr.length(); i++) {
+            var obj = arr.optJSONObject(i);
+            if (obj != null) out.add(new UsbHostDeviceInfo(obj));
+        }
+        return out;
+    }
+
+    /** A string field, with JSON null and absence both reading as empty. */
+    @NonNull
+    private static String optText(@NonNull JSONObject obj, @NonNull String key) {
+        var value = optNullable(obj, key);
+        return value == null ? "" : value;
+    }
+
+    /** A string field, with JSON null, absence and the empty string all reading as null. */
+    @Nullable
+    private static String optNullable(@NonNull JSONObject obj, @NonNull String key) {
+        if (obj.isNull(key)) return null;
+        var value = obj.optString(key, "");
+        return value.isEmpty() ? null : value;
+    }
+
+    /** The rule id: lower-case {@code vid:pid}, with the serial appended when there is one. */
+    @NonNull
+    static String deriveId(@NonNull String vid, @NonNull String pid, @NonNull String serial) {
+        var base = fmt("%s:%s", vid, pid);
+        return serial.isEmpty() ? base : fmt("%s:%s", base, serial);
+    }
+
+    /** The port path: the sysfs name with its bus prefix dropped, so both buses agree. */
+    @NonNull
+    static String derivePort(@NonNull String sysfs) {
+        int dash = sysfs.indexOf('-');
+        return dash < 0 ? sysfs : sysfs.substring(dash + 1);
+    }
+
+    /** The name a person knows the device by; the id when the descriptor carries none. */
+    @NonNull
+    public String displayName(@NonNull Context context) {
+        if (!product.isEmpty()) {
+            if (manufacturer.isEmpty() || product.contains(manufacturer)) return product;
+            return context.getString(R.string.usb_rules_device_name_fmt, product, manufacturer);
+        }
+        if (!manufacturer.isEmpty()) return manufacturer;
+        return context.getString(R.string.usb_rules_unknown_device, id);
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/usb/UsbRuleAdapter.java b/app/src/main/java/cn/classfun/droidvm/ui/usb/UsbRuleAdapter.java
new file mode 100644
index 000000000..11fed1892
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/ui/usb/UsbRuleAdapter.java
@@ -0,0 +1,383 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
+package cn.classfun.droidvm.ui.usb;
+
+import static android.view.View.GONE;
+import static android.view.View.VISIBLE;
+
+import android.annotation.SuppressLint;
+import android.content.Context;
+import android.graphics.Typeface;
+import android.util.TypedValue;
+import android.view.MotionEvent;
+import android.view.View;
+import android.widget.TextView;
+
+import androidx.annotation.NonNull;
+import androidx.annotation.Nullable;
+import androidx.recyclerview.widget.RecyclerView;
+
+import com.google.android.material.color.MaterialColors;
+
+import java.util.ArrayList;
+import java.util.HashMap;
+import java.util.List;
+import java.util.Map;
+
+import cn.classfun.droidvm.R;
+import cn.classfun.droidvm.daemon.usb.UsbRules;
+import cn.classfun.droidvm.lib.store.base.DataItem;
+import cn.classfun.droidvm.ui.widgets.container.CardItemAdapter;
+
+/**
+ * The ordered rules of one zone, one card each, in the shape the management page uses: what the
+ * rule is about on the left, where the device goes on the right.
+ *
+ * <p>Each row is kept in the wire shape ({@code id}, {@code port}, {@code target} and, for a VM
+ * target, {@code vm} and {@code controller}), so saving is a straight copy into the rules object
+ * and a field the zone does not carry is simply absent.</p>
+ *
+ * <p>List order is priority. It is changed by dragging -- by long press at any time, and in edit
+ * mode by the handle, which is the same drag without the press nobody discovers. A row that the
+ * order has left with nothing to decide is dimmed rather than hidden or refused; see
+ * {@link UsbRuleShadow}.</p>
+ */
+public final class UsbRuleAdapter extends CardItemAdapter<UsbRuleViewHolder> {
+    /**
+     * What a rule that can never be reached is drawn at: a fifth of the contrast taken off the
+     * card's contents. Enough to read as "this one is not in play", little enough that the row
+     * is still a row -- it is still stored, still editable and still draggable, and dimming is
+     * the only thing about it that changes.
+     */
+    private static final float UNREACHABLE_ALPHA = 0.8f;
+
+    public interface Listener {
+        /** The zone's add button was pressed; the listener runs the picker, then {@link #addRule}. */
+        void onAddRule(@NonNull UsbRuleLayer layer);
+
+        /** A rule was added, removed, moved or edited: the page now has unsaved changes. */
+        void onRulesChanged();
+    }
+
+    /** How a card asks the list it lives in to lift it, which only the list can do. */
+    public interface DragStarter {
+        void startDrag(@NonNull RecyclerView.ViewHolder holder);
+    }
+
+    private final UsbRuleLayer layer;
+    private final Listener listener;
+    private final UsbRuleLines.Slot[] slots;
+    /** Resolved once: a card is rebound on every edit and these do not change under it. */
+    private final int strongAppearance;
+    private final int weakAppearance;
+    private final int strongColor;
+    private final int weakColor;
+    private final int rippleBackground;
+    private final int linePadding;
+    private List<UsbHostDeviceInfo> devices = new ArrayList<>();
+    private List<VmEntry> vms = new ArrayList<>();
+    private final Map<String, String> vmNames = new HashMap<>();
+    private final Map<String, List<String>> vmControllers = new HashMap<>();
+    private DragStarter dragStarter = null;
+    private boolean editing = false;
+
+    public UsbRuleAdapter(@NonNull Context context, @NonNull UsbRuleLayer layer,
+                          @NonNull Listener listener) {
+        super(context);
+        this.layer = layer;
+        this.listener = listener;
+        this.slots = UsbRuleLines.of(layer);
+        this.strongAppearance = styleAttr(context,
+            com.google.android.material.R.attr.textAppearanceTitleSmall);
+        this.weakAppearance = styleAttr(context,
+            com.google.android.material.R.attr.textAppearanceBodySmall);
+        this.strongColor = MaterialColors.getColor(context,
+            com.google.android.material.R.attr.colorOnSurface, 0);
+        this.weakColor = MaterialColors.getColor(context,
+            com.google.android.material.R.attr.colorOnSurfaceVariant, 0);
+        this.rippleBackground = styleAttr(context, android.R.attr.selectableItemBackground);
+        this.linePadding = Math.round(TypedValue.applyDimension(TypedValue.COMPLEX_UNIT_DIP, 1,
+            context.getResources().getDisplayMetrics()));
+    }
+
+    /** The resource a theme attribute points at, 0 when the theme does not define it. */
+    private static int styleAttr(@NonNull Context context, int attr) {
+        var value = new TypedValue();
+        return context.getTheme().resolveAttribute(attr, value, true) ? value.resourceId : 0;
+    }
+
+    /**
+     * What rows describe themselves against: the devices plugged in now, the VMs, and each VM's
+     * controller ids as vms.json has them -- the only copy that is current, see {@link VmEntry}.
+     */
+    @SuppressLint("NotifyDataSetChanged")
+    public void setLookups(@NonNull List<UsbHostDeviceInfo> devices, @NonNull List<VmEntry> vms,
+                           @NonNull Map<String, List<String>> controllers) {
+        this.devices = new ArrayList<>(devices);
+        this.vms = new ArrayList<>(vms);
+        vmNames.clear();
+        vmControllers.clear();
+        vmControllers.putAll(controllers);
+        for (var vm : vms) vmNames.put(vm.id, vm.name);
+        notifyDataSetChanged();
+    }
+
+    /** How this adapter's cards lift themselves; set by the page that owns the list widget. */
+    public void setDragStarter(@Nullable DragStarter starter) {
+        this.dragStarter = starter;
+    }
+
+    /** Shows or hides the handle and the delete button on every card of this zone. */
+    @SuppressLint("NotifyDataSetChanged")
+    public void setEditing(boolean editing) {
+        if (this.editing == editing) return;
+        this.editing = editing;
+        notifyDataSetChanged();
+    }
+
+    public void addRule(@NonNull DataItem rule) {
+        prependItem(rule);
+        listener.onRulesChanged();
+    }
+
+    @Override
+    public void onAddRequested(@NonNull View anchor) {
+        listener.onAddRule(layer);
+    }
+
+    @Override
+    public void onReorderFinished() {
+        super.onReorderFinished();
+        listener.onRulesChanged();
+    }
+
+    @NonNull
+    @Override
+    protected UsbRuleViewHolder createViewHolderInstance(@NonNull View view) {
+        return new UsbRuleViewHolder(view);
+    }
+
+    @Override
+    protected int getLayoutRes() {
+        return R.layout.item_usb_rule;
+    }
+
+    @SuppressLint("ClickableViewAccessibility")
+    @Override
+    public void onBindViewHolder(@NonNull UsbRuleViewHolder holder, int position) {
+        var rule = items.get(position);
+        var id = rule.optString("id", "");
+        var port = rule.optString("port", "");
+        // One lookup for the whole card: the name and the context line are two things said
+        // about the same device, and resolving it twice is how they come to disagree.
+        var device = UsbDeviceNames.deviceFor(layer, id, port, devices);
+        for (var i = 0; i < UsbRuleLines.LINES; i++)
+            bindLine(holder, i, slots[i], id, port, device);
+        bindTarget(holder, rule);
+        // Recomputed here rather than kept: every edit rebinds the rows it can have changed --
+        // an add and a drop rebind the lot, a delete and a target change everything below them
+        // -- so the one array nobody can leave stale is the one nobody stores.
+        var unreachable = UsbRuleShadow.unreachable(layer, items.asArray())[position];
+        holder.content.setAlpha(unreachable ? UNREACHABLE_ALPHA : 1f);
+        holder.ivDrag.setVisibility(editing ? VISIBLE : GONE);
+        holder.btnDelete.setVisibility(editing ? VISIBLE : GONE);
+        // The touch and not a click: a drag has to begin while the finger is still down, and a
+        // click arrives when it comes back up, by which time there is nothing left to drag.
+        holder.ivDrag.setOnTouchListener((v, event) -> {
+            if (event.getActionMasked() != MotionEvent.ACTION_DOWN) return false;
+            if (dragStarter != null) dragStarter.startDrag(holder);
+            return false;
+        });
+        holder.btnTarget.setOnClickListener(v -> pickTarget(holder));
+        holder.btnDelete.setOnClickListener(v -> {
+            int pos = holder.getBindingAdapterPosition();
+            if (pos == RecyclerView.NO_POSITION) return;
+            removeItem(pos);
+            listener.onRulesChanged();
+        });
+    }
+
+    /** One line of the left column: what it says, how it is drawn, and what a tap on it opens. */
+    private void bindLine(@NonNull UsbRuleViewHolder holder, int index,
+                          @NonNull UsbRuleLines.Slot slot, @NonNull String id,
+                          @NonNull String port, @Nullable UsbHostDeviceInfo device) {
+        var view = holder.lines[index];
+        if (slot == UsbRuleLines.Slot.NONE) {
+            view.setVisibility(GONE);
+            view.setOnClickListener(null);
+            view.setClickable(false);
+            return;
+        }
+        view.setVisibility(VISIBLE);
+        view.setText(lineText(slot, id, port, device));
+        view.setTextAppearance(slot.strong ? strongAppearance : weakAppearance);
+        view.setTextColor(slot.strong ? strongColor : weakColor);
+        // Monospace for the two lines that are a value read off the device, as the management
+        // page prints the same two; a name and a matcher sentence are prose and are not.
+        view.setTypeface(slot == UsbRuleLines.Slot.INFO_ID || slot == UsbRuleLines.Slot.INFO_PORT
+            ? Typeface.MONOSPACE : Typeface.DEFAULT);
+        // Every line, not only the matcher: the card is one rule and a tap anywhere on what it
+        // says opens the one dialog that edits it. A reader who wants to know why a device went
+        // where it did taps the line that told them and gets the rule, rather than having to
+        // know which of the three lines is the one the app considers editable.
+        view.setBackgroundResource(rippleBackground);
+        view.setOnClickListener(v -> editRule(holder));
+        // After the background either way: setting one takes the drawable's padding, which for
+        // a ripple is none, and a line that lost its padding sits a pixel off the ones beside it.
+        applyLinePadding(view);
+    }
+
+    private void applyLinePadding(@NonNull TextView view) {
+        view.setPadding(0, linePadding, 0, linePadding);
+    }
+
+    @NonNull
+    private String lineText(@NonNull UsbRuleLines.Slot slot, @NonNull String id,
+                            @NonNull String port, @Nullable UsbHostDeviceInfo device) {
+        switch (slot) {
+            case MATCH_ID:
+                return context.getString(R.string.usb_rules_match_id_fmt, orAbsent(id));
+            case MATCH_PORT:
+                return context.getString(R.string.usb_rules_match_port_fmt, orAbsent(port));
+            case MATCH_ANY:
+                return context.getString(R.string.usb_rules_match_any);
+            case INFO_ID:
+                return context.getString(R.string.usb_rules_info_id_fmt,
+                    orAbsent(device == null ? "" : device.id));
+            case INFO_PORT:
+                return context.getString(R.string.usb_rules_info_port_fmt,
+                    orAbsent(device == null ? "" : device.port));
+            case NAME:
+            default:
+                return UsbDeviceNames.cardTitle(context, layer, id, port, devices);
+        }
+    }
+
+    /**
+     * A dash for a value there is none of, which on a context line means the rule's device is
+     * not plugged in and on a matcher means a rule saved without one. Never an empty line: a
+     * card that silently loses a row is a card whose shape says something it does not mean.
+     */
+    @NonNull
+    private String orAbsent(@NonNull String value) {
+        return value.isEmpty() ? context.getString(R.string.usb_rules_value_absent) : value;
+    }
+
+    private void bindTarget(@NonNull UsbRuleViewHolder holder, @NonNull DataItem rule) {
+        var target = UsbDeviceTarget.of(rule.optString("target", null),
+            rule.optString("vm", null), rule.optString("controller", null));
+        holder.btnTarget.setText(targetLabel(target));
+        var warning = targetWarning(target);
+        holder.tvWarning.setText(warning);
+        holder.tvWarning.setVisibility(warning == null ? GONE : VISIBLE);
+    }
+
+    /** The rule as one dialog: what it matches on, and the two things one can do to it. */
+    private void editRule(@NonNull UsbRuleViewHolder holder) {
+        int at = holder.getBindingAdapterPosition();
+        if (at == RecyclerView.NO_POSITION) return;
+        var rule = items.get(at);
+        UsbRuleEditDialog.edit(context, layer, devices, rule.optString("id", ""),
+            rule.optString("port", ""), new UsbRuleEditDialog.Listener() {
+                @Override
+                public void onConfirm(@Nullable String id, @Nullable String port) {
+                    int pos = holder.getBindingAdapterPosition();
+                    if (pos == RecyclerView.NO_POSITION) return;
+                    var row = items.get(pos);
+                    if (layer.hasId) row.set("id", id);
+                    if (layer.hasPort) row.set("port", port);
+                    // Down to the end of the list: the row now matches something else, so which
+                    // of the rows below it a host or idle rule shadows has moved with it.
+                    notifyItemRangeChanged(pos, getItemCount() - pos);
+                    listener.onRulesChanged();
+                }
+
+                @Override
+                public void onDelete() {
+                    int pos = holder.getBindingAdapterPosition();
+                    if (pos == RecyclerView.NO_POSITION) return;
+                    removeItem(pos);
+                    listener.onRulesChanged();
+                }
+            });
+    }
+
+    private void pickTarget(@NonNull UsbRuleViewHolder holder) {
+        int at = holder.getBindingAdapterPosition();
+        if (at == RecyclerView.NO_POSITION) return;
+        var rule = items.get(at);
+        // Opened on what the rule says now, so the dialog is an edit rather than a fresh ask.
+        var current = UsbDeviceTarget.of(rule.optString("target", null),
+            rule.optString("vm", null), rule.optString("controller", null));
+        UsbTargetPickerDialog.pick(context, vms, vmControllers, current, target -> {
+            int pos = holder.getBindingAdapterPosition();
+            if (pos == RecyclerView.NO_POSITION) return;
+            applyTarget(items.get(pos), target);
+            // A row that becomes a host or an idle shadows the rows below it with its matcher,
+            // and one that stops being either hands them back; both are a rebind of the rest.
+            notifyItemRangeChanged(pos, getItemCount() - pos);
+            listener.onRulesChanged();
+        });
+    }
+
+    /** The wire shape of a target: the key, and the VM pair for -- and only for -- a VM one. */
+    private static void applyTarget(@NonNull DataItem rule, @NonNull UsbDeviceTarget target) {
+        rule.set("target", target.toRuleTarget());
+        if (target.kind != UsbRules.Target.VM) {
+            rule.remove("vm");
+            rule.remove("controller");
+            return;
+        }
+        rule.set("vm", target.vmId);
+        if (target.controller == null) rule.remove("controller");
+        else rule.set("controller", target.controller);
+    }
+
+    /** What the target button says: where the device goes, in the rule's own words. */
+    @NonNull
+    private String targetLabel(@NonNull UsbDeviceTarget target) {
+        if (target.kind == UsbRules.Target.HOST)
+            return context.getString(R.string.usb_target_host);
+        if (target.kind == UsbRules.Target.SINK)
+            return context.getString(R.string.usb_target_idle);
+        var name = vmName(target.vmId);
+        return target.controller == null
+            ? context.getString(R.string.usb_rules_target_vm, name)
+            : context.getString(R.string.usb_rules_target_controller, name, target.controller);
+    }
+
+    /**
+     * Why this rule can never fire, or null when nothing says it cannot.
+     *
+     * <p>A rule whose VM or controller is not there is called out rather than shown as a target
+     * like any other: this is the only place it shows. That covers a VM this app cannot see -- a
+     * typed-in id, or one deleted since -- a rule naming a controller the VM does not have, and
+     * equally a rule naming none, which means the VM's first controller, against a VM that has
+     * no controller at all. The last is what every rule written before controllers existed looks
+     * like.</p>
+     */
+    @Nullable
+    private String targetWarning(@NonNull UsbDeviceTarget target) {
+        if (target.kind != UsbRules.Target.VM || target.vmId == null) return null;
+        var name = vmNames.get(target.vmId);
+        if (name == null) return context.getString(R.string.usb_rules_unknown_vm, target.vmId);
+        // Only vms.json can answer this, and only for a VM it still holds.
+        var listed = vmControllers.get(target.vmId);
+        if (listed == null) return null;
+        if (target.controller == null)
+            return listed.isEmpty()
+                ? context.getString(R.string.usb_rules_no_controller, name) : null;
+        return listed.contains(target.controller)
+            ? null : context.getString(R.string.usb_rules_unknown_controller,
+            name, target.controller);
+    }
+
+    /** The VM's name, or the bare id for one this app cannot see; the warning explains that. */
+    @NonNull
+    private String vmName(@Nullable String vmId) {
+        if (vmId == null) return "";
+        var name = vmNames.get(vmId);
+        return name == null ? vmId : name;
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/usb/UsbRuleEditDialog.java b/app/src/main/java/cn/classfun/droidvm/ui/usb/UsbRuleEditDialog.java
new file mode 100644
index 000000000..e6dda49d0
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/ui/usb/UsbRuleEditDialog.java
@@ -0,0 +1,223 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
+package cn.classfun.droidvm.ui.usb;
+
+import static android.content.DialogInterface.BUTTON_POSITIVE;
+import static android.view.View.GONE;
+
+import android.content.Context;
+import android.view.LayoutInflater;
+
+import androidx.annotation.NonNull;
+import androidx.annotation.Nullable;
+
+import com.google.android.material.dialog.MaterialAlertDialogBuilder;
+import com.google.android.material.textfield.TextInputEditText;
+import com.google.android.material.textfield.TextInputLayout;
+
+import java.util.ArrayList;
+import java.util.List;
+
+import cn.classfun.droidvm.R;
+import cn.classfun.droidvm.daemon.usb.UsbRules;
+import cn.classfun.droidvm.lib.ui.IconItemAdapter;
+import cn.classfun.droidvm.ui.widgets.row.DropdownRowWidget;
+
+/**
+ * What one rule matches on, asked as one dialog instead of a field at a time.
+ *
+ * <p>A rule's matcher is one thought -- "this device", "that socket", "that device in that
+ * socket" -- and the page used to ask for it a button at a time, which made an exact rule two
+ * questions that could disagree. Here the exact zone's two dropdowns are one: picking a
+ * plugged-in device from either fills BOTH, because a device that is plugged in is in exactly
+ * one socket and there is nothing to choose between. Only "Custom" breaks the pair, and that is
+ * the whole reason it exists -- typing a value in is how someone writes a rule about a device
+ * that is not here, or about a socket whatever is in it.</p>
+ *
+ * <p>The catch-all zone matches on everything, so it has nothing to ask: its dialog is the title
+ * and the buttons, which is still worth showing because deleting the rule has to live
+ * somewhere.</p>
+ */
+public final class UsbRuleEditDialog {
+    /** What the dialog answers with. [onDelete] is null for a rule that does not exist yet. */
+    public interface Listener {
+        void onConfirm(@Nullable String id, @Nullable String port);
+
+        void onDelete();
+    }
+
+    private final Context context;
+    private final UsbRuleLayer layer;
+    private final List<UsbHostDeviceInfo> devices;
+    private final Listener listener;
+    /** The values as the dialog has them now; written back only when it is confirmed. */
+    private String id;
+    private String port;
+    private DropdownRowWidget ddId;
+    private DropdownRowWidget ddPort;
+    private androidx.appcompat.app.AlertDialog dialog;
+
+    private UsbRuleEditDialog(@NonNull Context context, @NonNull UsbRuleLayer layer,
+                              @NonNull List<UsbHostDeviceInfo> devices, @Nullable String id,
+                              @Nullable String port, @NonNull Listener listener) {
+        this.context = context;
+        this.layer = layer;
+        this.devices = devices;
+        this.id = id == null ? "" : id;
+        this.port = port == null ? "" : port;
+        this.listener = listener;
+    }
+
+    /**
+     * Opens the dialog for an existing rule: the title says edit, and Delete is offered because
+     * there is something to delete.
+     */
+    public static void edit(@NonNull Context context, @NonNull UsbRuleLayer layer,
+                            @NonNull List<UsbHostDeviceInfo> devices, @Nullable String id,
+                            @Nullable String port, @NonNull Listener listener) {
+        new UsbRuleEditDialog(context, layer, devices, id, port, listener).show(false);
+    }
+
+    /**
+     * The same dialog for a rule being written. Delete is left out rather than shown and made to
+     * mean cancel: nothing has been added yet, so there is nothing it could take away.
+     */
+    public static void add(@NonNull Context context, @NonNull UsbRuleLayer layer,
+                           @NonNull List<UsbHostDeviceInfo> devices,
+                           @NonNull Listener listener) {
+        new UsbRuleEditDialog(context, layer, devices, null, null, listener).show(true);
+    }
+
+    private void show(boolean adding) {
+        var builder = new MaterialAlertDialogBuilder(context)
+            .setTitle(adding ? R.string.usb_rules_add_title : R.string.usb_rules_edit_title);
+        if (layer.needsSubject()) {
+            var view = LayoutInflater.from(context)
+                .inflate(R.layout.dialog_usb_rule_edit, null);
+            ddId = view.findViewById(R.id.dd_edit_id);
+            ddPort = view.findViewById(R.id.dd_edit_port);
+            if (!layer.hasId) ddId.setVisibility(GONE);
+            if (!layer.hasPort) ddPort.setVisibility(GONE);
+            if (layer.hasId) fill(ddId, true);
+            if (layer.hasPort) fill(ddPort, false);
+            builder.setView(view);
+        }
+        // The catch-all zone's dialog has nothing to cancel, so it is not offered one: the two
+        // buttons it has are the two things anyone can do to a rule that says "everything".
+        if (layer.needsSubject() || adding)
+            builder.setNegativeButton(android.R.string.cancel, null);
+        if (!adding)
+            builder.setNeutralButton(R.string.usb_rules_delete_action,
+                (d, w) -> listener.onDelete());
+        builder.setPositiveButton(android.R.string.ok,
+            (d, w) -> listener.onConfirm(layer.hasId ? id : null, layer.hasPort ? port : null));
+        dialog = builder.show();
+        render();
+    }
+
+    /**
+     * Both fields and the confirm, from the values as they stand. The field shows the value the
+     * rule stores rather than the row that was picked: that is what is saved, what the card
+     * prints, and the only thing there is to show for a value typed in by hand.
+     */
+    private void render() {
+        if (ddId != null) ddId.setText(id);
+        if (ddPort != null) ddPort.setText(port);
+        var ok = dialog.getButton(BUTTON_POSITIVE);
+        // A rule saved without the field its zone matches on would match nothing and could not
+        // be told from one that matches everything, so the answer is refused here rather than
+        // written and explained afterwards.
+        if (ok != null) ok.setEnabled(complete());
+    }
+
+    private boolean complete() {
+        if (layer.hasId && id.isEmpty()) return false;
+        return !layer.hasPort || !port.isEmpty();
+    }
+
+    /**
+     * One dropdown. The rows are the devices plugged in now, listed the way the field asks about
+     * them, and picking one sets BOTH fields -- see the class comment. Custom is the last row
+     * and sets only the field it was opened from.
+     */
+    private void fill(@NonNull DropdownRowWidget widget, boolean wantsId) {
+        var subjects = UsbRuleSubjects.of(context,
+            wantsId ? UsbRuleLayer.DEVICE : UsbRuleLayer.PORT, devices);
+        var labels = new ArrayList<String>(subjects.size() + 1);
+        var icons = new int[subjects.size() + 1];
+        for (var subject : subjects) {
+            icons[labels.size()] = wantsId ? R.drawable.ic_usb : R.drawable.ic_connection;
+            labels.add(subject.label);
+        }
+        icons[labels.size()] = R.drawable.ic_edit;
+        labels.add(context.getString(R.string.edit_vm_xhci_add_custom));
+        widget.setAdapter(IconItemAdapter.create(context, labels, icons));
+        widget.setOnItemClickListener((parent, view, which, rowId) -> {
+            if (which >= subjects.size()) {
+                // The list wrote its own row into the field on the way here; the value is
+                // whatever the prompt answers, or what was there before if it is dismissed.
+                render();
+                askCustom(wantsId);
+                return;
+            }
+            // The whole device, not the field that was asked about: the subject list for one
+            // field carries only that field, so the other is read off the device again.
+            var subject = subjects.get(which);
+            var device = UsbDeviceNames.deviceFor(
+                wantsId ? UsbRuleLayer.DEVICE : UsbRuleLayer.PORT,
+                subject.id, subject.port, devices);
+            if (device != null) {
+                id = device.id;
+                port = device.port;
+            } else if (wantsId) {
+                id = subject.id;
+            } else {
+                port = subject.port;
+            }
+            render();
+        });
+    }
+
+    /**
+     * The typed-in value for one field, checked against the pattern the daemon checks. Only that
+     * field is written: a device that is not plugged in has no port to read off it, and guessing
+     * one is how a rule ends up about a socket nobody chose.
+     */
+    private void askCustom(boolean wantsId) {
+        var view = LayoutInflater.from(context)
+            .inflate(R.layout.dialog_xhci_custom_binding, null);
+        TextInputLayout tiId = view.findViewById(R.id.ti_custom_id);
+        TextInputLayout tiPort = view.findViewById(R.id.ti_custom_port);
+        TextInputEditText etId = view.findViewById(R.id.et_custom_id);
+        TextInputEditText etPort = view.findViewById(R.id.et_custom_port);
+        (wantsId ? tiPort : tiId).setVisibility(GONE);
+        (wantsId ? etId : etPort).setText(wantsId ? id : port);
+        var custom = new MaterialAlertDialogBuilder(context)
+            .setTitle(R.string.edit_vm_xhci_custom_title)
+            .setView(view)
+            .setNegativeButton(android.R.string.cancel, null)
+            .setPositiveButton(android.R.string.ok, null)
+            .show();
+        // Wired after show() so a refused value can stay on screen with its error: the listener
+        // setPositiveButton takes dismisses the dialog whatever it decides.
+        custom.getButton(BUTTON_POSITIVE).setOnClickListener(v -> {
+            var field = wantsId ? tiId : tiPort;
+            var value = text(wantsId ? etId : etPort);
+            var pattern = wantsId ? UsbRules.ID_PATTERN : UsbRules.PORT_PATTERN;
+            field.setError(pattern.matcher(value).matches() ? null : context.getString(wantsId
+                ? R.string.edit_vm_xhci_custom_bad_id : R.string.edit_vm_xhci_custom_bad_port));
+            if (field.getError() != null) return;
+            custom.dismiss();
+            if (wantsId) id = value;
+            else port = value;
+            render();
+        });
+    }
+
+    @NonNull
+    private static String text(@NonNull TextInputEditText field) {
+        var value = field.getText();
+        return value == null ? "" : value.toString().trim();
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/usb/UsbRuleLayer.java b/app/src/main/java/cn/classfun/droidvm/ui/usb/UsbRuleLayer.java
new file mode 100644
index 000000000..a8e511abb
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/ui/usb/UsbRuleLayer.java
@@ -0,0 +1,85 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
+package cn.classfun.droidvm.ui.usb;
+
+import androidx.annotation.NonNull;
+import androidx.annotation.Nullable;
+import androidx.annotation.StringRes;
+
+import java.util.Locale;
+
+import cn.classfun.droidvm.R;
+
+/**
+ * The four layers of the automatic attach rules, in the order the daemon tries them (plan
+ * section 2.4). Each knows its wire key and which fields a rule in it carries. Keeping the
+ * device on the host is a legal target everywhere but the last layer: that one catches whatever
+ * the others left, and keeping it where it already is would be a rule that matches every device
+ * and does nothing. Hiding it, or handing it to a VM, still says something there.
+ */
+public enum UsbRuleLayer {
+    EXACT("exact", R.string.usb_rules_layer_exact, true, true),
+    PORT("port", R.string.usb_rules_layer_port, false, true),
+    DEVICE("device", R.string.usb_rules_layer_device, true, false),
+    ANY("any", R.string.usb_rules_layer_any, false, false);
+
+    /** Key of this layer's list inside the rules object. */
+    public final String key;
+    @StringRes
+    public final int titleRes;
+    /** Whether a rule here names a device by its {@code vid:pid[:serial]} id. */
+    public final boolean hasId;
+    /** Whether a rule here names a physical port path. */
+    public final boolean hasPort;
+
+    UsbRuleLayer(@NonNull String key, @StringRes int titleRes, boolean hasId, boolean hasPort) {
+        this.key = key;
+        this.titleRes = titleRes;
+        this.hasId = hasId;
+        this.hasPort = hasPort;
+    }
+
+    /** 1-based position: the layer number the dry run reports and the page shows. */
+    public int number() {
+        return ordinal() + 1;
+    }
+
+    /** Whether a rule here needs a device or port picked before a target. */
+    public boolean needsSubject() {
+        return hasId || hasPort;
+    }
+
+    @Nullable
+    public static UsbRuleLayer fromKey(@Nullable String key) {
+        if (key == null) return null;
+        for (var layer : values())
+            if (layer.key.equalsIgnoreCase(key)) return layer;
+        return null;
+    }
+
+    /**
+     * The layer a daemon result names, whichever way it does: by wire key, or by 1-based
+     * number as a number or a numeric string.
+     */
+    @Nullable
+    public static UsbRuleLayer fromValue(@Nullable Object value) {
+        if (value == null) return null;
+        if (value instanceof Number) return fromNumber(((Number) value).intValue());
+        var text = String.valueOf(value).trim().toLowerCase(Locale.ROOT);
+        var byKey = fromKey(text);
+        if (byKey != null) return byKey;
+        try {
+            return fromNumber(Integer.parseInt(text));
+        } catch (NumberFormatException e) {
+            return null;
+        }
+    }
+
+    @Nullable
+    private static UsbRuleLayer fromNumber(int number) {
+        var all = values();
+        if (number < 1 || number > all.length) return null;
+        return all[number - 1];
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/usb/UsbRuleLines.java b/app/src/main/java/cn/classfun/droidvm/ui/usb/UsbRuleLines.java
new file mode 100644
index 000000000..0d888fc69
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/ui/usb/UsbRuleLines.java
@@ -0,0 +1,86 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
+package cn.classfun.droidvm.ui.usb;
+
+import androidx.annotation.NonNull;
+
+/**
+ * What the three lines of a rule card say, and in which order, which is the zone's business
+ * alone.
+ *
+ * <p>The ordering is not decoration. A rule is stored as its matcher and nothing else, so the
+ * matcher is what the card has to lead with -- and which field that is differs per zone: the
+ * port zone matches on a port and the device zone on an identifier, and the same string in the
+ * same place would otherwise mean two different things on two cards a finger apart. The lines
+ * below it describe the device the matcher resolves to right now, which is context and not the
+ * rule: it changes under a replug while the rule does not, so it is never editable and never
+ * bold.</p>
+ *
+ * <p>Free of {@code android.*} and of the strings themselves: this says which slot goes where
+ * and the adapter says it in the user's language, which is what lets the ordering -- the part
+ * that is easy to get subtly wrong and impossible to see in a screenshot -- be a unit test.</p>
+ */
+final class UsbRuleLines {
+    /** How many lines a card has room for; a zone that needs fewer leaves the rest empty. */
+    static final int LINES = 3;
+
+    /**
+     * What one line of a card carries. Every line opens the same dialog -- the rule is one
+     * thought and is edited as one -- so a slot says what is written on the line and how, and
+     * nothing about what a tap on it does.
+     */
+    enum Slot {
+        /** The identifier the rule matches on. */
+        MATCH_ID(true),
+        /** The port the rule matches on. */
+        MATCH_PORT(true),
+        /** "every device": the catch-all zone's whole matcher. */
+        MATCH_ANY(true),
+        /** The identifier of whatever the matcher resolves to now. Context, not the rule. */
+        INFO_ID(false),
+        /** The port whatever the matcher resolves to is in now. Context, not the rule. */
+        INFO_PORT(false),
+        /** What that device calls itself. Never matched on: a rename is the same device. */
+        NAME(false),
+        /** No line here. */
+        NONE(false);
+
+        /** Whether the line is drawn in the management page's title style. */
+        final boolean strong;
+
+        Slot(boolean strong) {
+            this.strong = strong;
+        }
+    }
+
+    private UsbRuleLines() {
+    }
+
+    /**
+     * The three slots of [layer], top to bottom.
+     *
+     * <p>The exact zone is the one with two matchers and so the one with no room for context:
+     * both of its lines are the rule, and the third is the name. The other two zones lead with
+     * their matcher and follow it with the field they do NOT match on, which is the one thing a
+     * reader cannot work out from the card -- a port rule's card is about whatever is in that
+     * socket, and saying which device that is now is the difference between a rule someone can
+     * check and one they have to trust.</p>
+     */
+    @NonNull
+    static Slot[] of(@NonNull UsbRuleLayer layer) {
+        switch (layer) {
+            case EXACT:
+                return new Slot[]{Slot.MATCH_ID, Slot.MATCH_PORT, Slot.NAME};
+            case PORT:
+                return new Slot[]{Slot.MATCH_PORT, Slot.INFO_ID, Slot.NAME};
+            case DEVICE:
+                return new Slot[]{Slot.MATCH_ID, Slot.INFO_PORT, Slot.NAME};
+            case ANY:
+            default:
+                // Nothing is matched on and nothing is resolved, so there is nothing to say
+                // twice. One line, and the card is shorter than the others by design.
+                return new Slot[]{Slot.MATCH_ANY, Slot.NONE, Slot.NONE};
+        }
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/usb/UsbRuleShadow.java b/app/src/main/java/cn/classfun/droidvm/ui/usb/UsbRuleShadow.java
new file mode 100644
index 000000000..abe509bf9
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/ui/usb/UsbRuleShadow.java
@@ -0,0 +1,83 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
+package cn.classfun.droidvm.ui.usb;
+
+import androidx.annotation.NonNull;
+
+import java.util.HashSet;
+import java.util.List;
+
+import cn.classfun.droidvm.daemon.usb.UsbRules;
+import cn.classfun.droidvm.lib.store.base.DataItem;
+
+/**
+ * Which rules of one zone can never fire, because an earlier rule with the same matcher already
+ * decides every device the two of them would both match.
+ *
+ * <p>Only a host or a sink rule shadows what is below it. Both are the last word on a device --
+ * the engine acts and stops -- so a later rule with the same matcher is never even read. A VM
+ * rule is not: it is skipped whenever its VM is not running or has no such controller, and the
+ * search carries on to the rule below, which is exactly why someone writes one there.</p>
+ *
+ * <p>Only within one zone, and only for a matcher equal string for string, because that is the
+ * whole of what the rules can say by themselves. A host rule for port 1.2.1 shadows a device
+ * rule below it too, but only while that device is plugged into that port -- a fact about the
+ * room rather than about the rules -- so it is not shown anywhere.</p>
+ *
+ * <p>Pure, and told nothing but the zone and its rows, so the page can recompute it on every
+ * bind instead of keeping a copy that an edit or a drag could leave stale.</p>
+ */
+public final class UsbRuleShadow {
+    private UsbRuleShadow() {
+    }
+
+    /**
+     * For each rule of {@code zone}, in the order they are tried, whether an earlier one hides
+     * it.
+     *
+     * <p>Kept per matcher rather than for the first host or sink rule alone: two devices spoken
+     * for in the same zone are two independent searches, and the rule that ends one of them
+     * says nothing about the other.</p>
+     */
+    @NonNull
+    public static boolean[] unreachable(@NonNull UsbRuleLayer zone,
+                                        @NonNull List<DataItem> rules) {
+        var out = new boolean[rules.size()];
+        // The matchers whose search has already ended above this point.
+        var decided = new HashSet<List<String>>();
+        for (int i = 0; i < rules.size(); i++) {
+            var rule = rules.get(i);
+            var matcher = matcherOf(zone, rule);
+            out[i] = decided.contains(matcher);
+            if (endsTheSearch(rule)) decided.add(matcher);
+        }
+        return out;
+    }
+
+    /**
+     * What two rules of this zone have to agree on to be about the same device: the fields the
+     * zone's rules carry, which is precisely what the daemon compares. A port rule matches on
+     * its port whatever else its row happens to hold, so an id beside it is not part of it.
+     *
+     * <p>The catch-all zone carries neither, so every rule in it matches every other. That is
+     * right and it is the zone where it matters most: several rules there are tried in order
+     * like anywhere else, so a VM rule can be followed by the answer for when that VM is not
+     * running, and everything after the first host or idle rule is dimmed because nothing will
+     * ever reach it.</p>
+     */
+    @NonNull
+    private static List<String> matcherOf(@NonNull UsbRuleLayer zone, @NonNull DataItem rule) {
+        return List.of(zone.hasId ? rule.optString("id", "") : "",
+            zone.hasPort ? rule.optString("port", "") : "");
+    }
+
+    /** Whether this rule is the last word on what it matches; a VM rule never is. */
+    private static boolean endsTheSearch(@NonNull DataItem rule) {
+        // Read the row the way the card and the save read it, so a row that predates the target
+        // key -- host unless it names a VM -- shadows here exactly as it acts in the daemon.
+        var target = UsbDeviceTarget.of(rule.optString("target", null),
+            rule.optString("vm", null), rule.optString("controller", null));
+        return target.kind != UsbRules.Target.VM;
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/usb/UsbRuleSubjects.java b/app/src/main/java/cn/classfun/droidvm/ui/usb/UsbRuleSubjects.java
new file mode 100644
index 000000000..3e24fb721
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/ui/usb/UsbRuleSubjects.java
@@ -0,0 +1,88 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
+package cn.classfun.droidvm.ui.usb;
+
+import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
+
+import android.content.Context;
+
+import androidx.annotation.NonNull;
+
+import java.util.ArrayList;
+import java.util.LinkedHashMap;
+import java.util.List;
+
+import cn.classfun.droidvm.R;
+
+/**
+ * What a rule in a given layer can be about, offered from what is plugged in right now.
+ *
+ * <p>Shared by the two places that add a rule -- the global rules page and the xHCI card in the
+ * VM editor -- so the labels and the folding read the same in both. A device offers only the
+ * part its layer stores: picking a device for a port rule stores the port and nothing else, and
+ * the entry says so by naming the port first.</p>
+ */
+public final class UsbRuleSubjects {
+    /** A row of the picker: what it says, and the id and port it stands for ("" for neither). */
+    public static final class Subject {
+        public final String label;
+        public final String id;
+        public final String port;
+
+        Subject(@NonNull String label, @NonNull String id, @NonNull String port) {
+            this.label = label;
+            this.id = id;
+            this.port = port;
+        }
+    }
+
+    private UsbRuleSubjects() {
+    }
+
+    /**
+     * One row per plugged-in device for the exact and device layers (the device layer folds two
+     * identical serial-less devices into one, as the rule would), one row per occupied port for
+     * the port layer, and nothing at all for the catch-all layer, which is about no device in
+     * particular. Hubs never arrive: the daemon leaves them out of the list.
+     */
+    @NonNull
+    public static List<Subject> of(@NonNull Context context, @NonNull UsbRuleLayer layer,
+                                   @NonNull List<UsbHostDeviceInfo> devices) {
+        var out = new LinkedHashMap<String, Subject>();
+        for (var device : devices) {
+            var name = device.displayName(context);
+            switch (layer) {
+                case EXACT:
+                    out.putIfAbsent(fmt("%s@%s", device.id, device.port), new Subject(
+                        context.getString(R.string.usb_rules_pick_device_exact_fmt,
+                            name, device.id, device.port),
+                        device.id, device.port));
+                    break;
+                case PORT:
+                    out.putIfAbsent(device.port, new Subject(
+                        context.getString(R.string.usb_rules_pick_device_port_fmt,
+                            device.port, name),
+                        "", device.port));
+                    break;
+                case DEVICE:
+                    out.putIfAbsent(device.id, new Subject(
+                        context.getString(R.string.usb_rules_pick_device_device_fmt,
+                            name, device.id),
+                        device.id, ""));
+                    break;
+                default:
+                    break;
+            }
+        }
+        return new ArrayList<>(out.values());
+    }
+
+    /** The labels of {@code subjects}, ready for a dialog's item list. */
+    @NonNull
+    public static String[] labelsOf(@NonNull List<Subject> subjects) {
+        var labels = new String[subjects.size()];
+        for (int i = 0; i < labels.length; i++) labels[i] = subjects.get(i).label;
+        return labels;
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/usb/UsbRuleViewHolder.java b/app/src/main/java/cn/classfun/droidvm/ui/usb/UsbRuleViewHolder.java
new file mode 100644
index 000000000..70d2809ec
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/ui/usb/UsbRuleViewHolder.java
@@ -0,0 +1,42 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
+package cn.classfun.droidvm.ui.usb;
+
+import android.view.View;
+import android.widget.ImageButton;
+import android.widget.ImageView;
+import android.widget.TextView;
+
+import androidx.annotation.NonNull;
+import androidx.recyclerview.widget.RecyclerView;
+
+import com.google.android.material.button.MaterialButton;
+
+import cn.classfun.droidvm.R;
+
+public final class UsbRuleViewHolder extends RecyclerView.ViewHolder {
+    /** Everything the card says, which is what fades when the rule cannot be reached. */
+    final View content;
+    /** The three lines of the left column, top to bottom; see {@link UsbRuleLines}. */
+    final TextView[] lines;
+    /** Shown in edit mode; a touch on it starts the drag rather than waiting for a long press. */
+    final ImageView ivDrag;
+    final ImageButton btnDelete;
+    final MaterialButton btnTarget;
+    final TextView tvWarning;
+
+    UsbRuleViewHolder(@NonNull View itemView) {
+        super(itemView);
+        content = itemView.findViewById(R.id.rule_content);
+        lines = new TextView[]{
+            itemView.findViewById(R.id.tv_rule_line1),
+            itemView.findViewById(R.id.tv_rule_line2),
+            itemView.findViewById(R.id.tv_rule_line3),
+        };
+        ivDrag = itemView.findViewById(R.id.iv_rule_drag);
+        btnDelete = itemView.findViewById(R.id.btn_rule_delete);
+        btnTarget = itemView.findViewById(R.id.btn_rule_target);
+        tvWarning = itemView.findViewById(R.id.tv_rule_warning);
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/usb/UsbRuleZoneDialog.java b/app/src/main/java/cn/classfun/droidvm/ui/usb/UsbRuleZoneDialog.java
new file mode 100644
index 000000000..62f3aad3d
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/ui/usb/UsbRuleZoneDialog.java
@@ -0,0 +1,82 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
+package cn.classfun.droidvm.ui.usb;
+
+import android.content.Context;
+import android.view.Menu;
+import android.widget.PopupMenu;
+
+import androidx.annotation.DrawableRes;
+import androidx.annotation.NonNull;
+import androidx.annotation.Nullable;
+
+import java.util.List;
+
+import cn.classfun.droidvm.R;
+import cn.classfun.droidvm.lib.ui.MenuDialogBuilder;
+
+/**
+ * Which zone a new rule goes in, for the one surface that has no button per zone.
+ *
+ * <p>The rules page asks nothing here: its zones are four lists with four add buttons, so the
+ * zone is already answered by which button was pressed. A VM's xHCI card is one list of bound
+ * rules with one add button, so the zone has to be asked first -- and it has to be first,
+ * because it decides what the next question even is: an exact rule is about a device in a
+ * socket, a port rule about the socket alone, and the catch-all rule about nothing in
+ * particular and so about nothing to ask.</p>
+ *
+ * <p>Everything after that is {@link UsbRuleEditDialog}, the same dialog the rules page opens,
+ * so a rule is written the same way wherever it is written. What differs is only what happens
+ * to the answer: the rules page goes on to ask where the device should go, and a card on a VM's
+ * controller already knows -- there.</p>
+ */
+public final class UsbRuleZoneDialog {
+    /** Called with the zone chosen and the fields that zone stores; the rest stay null. */
+    public interface OnPicked {
+        void onPicked(@NonNull UsbRuleLayer layer, @Nullable String id, @Nullable String port);
+    }
+
+    private UsbRuleZoneDialog() {
+    }
+
+    public static void show(@NonNull Context context, @NonNull List<UsbHostDeviceInfo> devices,
+                            @NonNull OnPicked onPicked) {
+        var menu = new PopupMenu(context, null).getMenu();
+        for (var layer : UsbRuleLayer.values()) {
+            var item = menu.add(Menu.NONE, layer.ordinal(), layer.ordinal(),
+                context.getString(layer.titleRes));
+            item.setIcon(iconOf(layer));
+        }
+        new MenuDialogBuilder(context)
+            .setTitle(R.string.edit_vm_xhci_device_add)
+            .setMenu(menu)
+            .setListener(item -> {
+                var layer = UsbRuleLayer.values()[item.getItemId()];
+                if (!layer.needsSubject()) {
+                    onPicked.onPicked(layer, null, null);
+                    return true;
+                }
+                UsbRuleEditDialog.add(context, layer, devices, new UsbRuleEditDialog.Listener() {
+                    @Override
+                    public void onConfirm(@Nullable String id, @Nullable String port) {
+                        onPicked.onPicked(layer, id, port);
+                    }
+
+                    @Override
+                    public void onDelete() {
+                    }
+                });
+                return true;
+            })
+            .show();
+    }
+
+    /** One icon per zone: a socket for a port rule, a VM for the catch-all, else a device. */
+    @DrawableRes
+    private static int iconOf(@NonNull UsbRuleLayer layer) {
+        if (layer == UsbRuleLayer.PORT) return R.drawable.ic_connection;
+        if (layer == UsbRuleLayer.ANY) return R.drawable.ic_nav_vm;
+        return R.drawable.ic_usb;
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/usb/UsbRulesActivity.java b/app/src/main/java/cn/classfun/droidvm/ui/usb/UsbRulesActivity.java
new file mode 100644
index 000000000..2569cc988
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/ui/usb/UsbRulesActivity.java
@@ -0,0 +1,509 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
+package cn.classfun.droidvm.ui.usb;
+
+import static android.view.View.GONE;
+import static android.view.View.VISIBLE;
+import static android.widget.Toast.LENGTH_LONG;
+import static android.widget.Toast.LENGTH_SHORT;
+import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
+
+import android.os.Bundle;
+import android.os.Handler;
+import android.os.Looper;
+import android.util.Log;
+import android.view.MenuItem;
+import android.view.View;
+import android.widget.TextView;
+import android.widget.Toast;
+
+import androidx.activity.OnBackPressedCallback;
+import androidx.annotation.NonNull;
+import androidx.annotation.Nullable;
+import androidx.appcompat.app.AppCompatActivity;
+
+import com.google.android.material.appbar.MaterialToolbar;
+import com.google.android.material.dialog.MaterialAlertDialogBuilder;
+import com.google.android.material.snackbar.Snackbar;
+
+import org.json.JSONArray;
+import org.json.JSONException;
+import org.json.JSONObject;
+
+import java.util.ArrayList;
+import java.util.EnumMap;
+import java.util.HashMap;
+import java.util.List;
+import java.util.Map;
+
+import cn.classfun.droidvm.R;
+import cn.classfun.droidvm.daemon.usb.UsbRules;
+import cn.classfun.droidvm.lib.daemon.DaemonConnection;
+import cn.classfun.droidvm.lib.store.base.DataItem;
+import cn.classfun.droidvm.ui.widgets.container.CardItemListView;
+import cn.classfun.droidvm.ui.widgets.row.SwitchRowWidget;
+
+/**
+ * Settings, Virtual Machine, USB passthrough: the automatic attach rules of plan section 2.4.
+ *
+ * <p>The daemon owns the rules. The page reads them with {@code usb_rules_get}, edits a copy
+ * held in four adapters and the master switch at the top, and pushes the whole object back with
+ * {@code usb_rules_set}; it never touches the rules file itself. {@code usb_host_list} and
+ * {@code vm_list} only give the rows and the pickers something readable to show. While the page
+ * is open it listens on the daemon event stream, so a plug, an unplug or an automatic attach
+ * shows up without a reload.</p>
+ */
+public final class UsbRulesActivity extends AppCompatActivity
+    implements DaemonConnection.EventListener, UsbRuleAdapter.Listener {
+    private static final String TAG = "UsbRulesActivity";
+    private final Handler mainHandler = new Handler(Looper.getMainLooper());
+    private final EnumMap<UsbRuleLayer, UsbRuleAdapter> adapters =
+        new EnumMap<>(UsbRuleLayer.class);
+    private final List<UsbHostDeviceInfo> devices = new ArrayList<>();
+    private final List<VmEntry> vms = new ArrayList<>();
+    /** Each VM's xHCI controller ids, read from vms.json; see {@link VmEntry#controllersOf}. */
+    private final Map<String, List<String>> vmControllers = new HashMap<>();
+    private View root;
+    private MaterialToolbar toolbar;
+    private TextView tvStatus;
+    /**
+     * The master switch, which is an edit like any other: it takes effect when the page is
+     * saved, and saving it off is what makes the daemon give every device back. The zones below
+     * it stay editable while it is off, so rules can be prepared before they are allowed to run.
+     */
+    private SwitchRowWidget swEnabled;
+    /** Edits not yet pushed to the daemon; guards both the back key and the resume reload. */
+    private boolean dirty = false;
+    /** True while the daemon's own answer is being written into the switch, which is no edit. */
+    private boolean applying = false;
+    /**
+     * True while the switch's warning is on screen. The page is not dirty yet -- the edit is
+     * made when the dialog is answered -- so without this a reload arriving in that window
+     * would write the daemon's own value over a switch the user is being asked about, and the
+     * OK they then tap would mark a page whose switch had been turned back off underneath it.
+     */
+    private boolean confirming = false;
+    /**
+     * Whether the cards show their drag handle and delete button. Off by default: a page that is
+     * mostly read -- "which rule takes this device" -- should not open with a delete button on
+     * every row, and the long-press drag works in either mode for whoever already knows it.
+     */
+    private boolean editing = false;
+
+    @Override
+    protected void onCreate(@Nullable Bundle savedInstanceState) {
+        super.onCreate(savedInstanceState);
+        setContentView(R.layout.activity_usb_rules);
+        root = findViewById(R.id.root);
+        toolbar = findViewById(R.id.toolbar);
+        tvStatus = findViewById(R.id.tv_status);
+        toolbar.setTitle(R.string.usb_rules_title);
+        toolbar.setNavigationOnClickListener(v -> confirmExit());
+        toolbar.setOnMenuItemClickListener(this::onMenuItem);
+        getOnBackPressedDispatcher().addCallback(this, new OnBackPressedCallback(true) {
+            @Override
+            public void handleOnBackPressed() {
+                confirmExit();
+            }
+        });
+        swEnabled = findViewById(R.id.sw_usb_enabled);
+        swEnabled.setOnCheckedChangeListener(() -> {
+            if (applying) return;
+            if (swEnabled.isChecked()) confirmEnable();
+            else setDirty(true);
+        });
+        bindList(R.id.list_exact, UsbRuleLayer.EXACT);
+        bindList(R.id.list_port, UsbRuleLayer.PORT);
+        bindList(R.id.list_device, UsbRuleLayer.DEVICE);
+        bindList(R.id.list_any, UsbRuleLayer.ANY);
+    }
+
+    /**
+     * The warning the switch raises on its way on, before the save can act on it.
+     *
+     * <p>Turning passthrough on is not a preference among the rules: it shuts the autoprobe gate,
+     * and from then on a plugged-in device binds no driver of its own and reaches Android only
+     * because a rule sent it there. That is worth saying once, in front of the change, rather
+     * than leaving it to be discovered by a keyboard that stops typing. Refusing puts the switch
+     * back without an edit; turning it off asks nothing, because giving control back is the
+     * direction nobody needs warning about.</p>
+     */
+    private void confirmEnable() {
+        confirming = true;
+        new MaterialAlertDialogBuilder(this)
+            .setTitle(R.string.usb_rules_enable_warning_title)
+            .setMessage(R.string.usb_rules_enable_warning_message)
+            .setPositiveButton(android.R.string.ok, (d, w) -> {
+                confirming = false;
+                setDirty(true);
+            })
+            .setNegativeButton(android.R.string.cancel, (d, w) -> revertEnable())
+            .setOnCancelListener(d -> revertEnable())
+            .show();
+    }
+
+    /** The switch back to off, written the way the daemon's own answer is: not an edit. */
+    private void revertEnable() {
+        confirming = false;
+        applying = true;
+        swEnabled.setChecked(false);
+        applying = false;
+    }
+
+    private void bindList(int viewId, @NonNull UsbRuleLayer layer) {
+        CardItemListView list = findViewById(viewId);
+        var adapter = new UsbRuleAdapter(this, layer, this);
+        list.setAdapter(adapter);
+        // The handle can only ask; the list is what holds the ItemTouchHelper that can lift a
+        // row, and a card has no way to reach it otherwise.
+        adapter.setDragStarter(list::startDrag);
+        adapters.put(layer, adapter);
+    }
+
+    /**
+     * Turns edit mode on or off across all four zones at once. The zones are one list broken
+     * into four by priority, and a mode that was on in one of them and off in the next would be
+     * four modes.
+     */
+    private void setEditing(boolean value) {
+        editing = value;
+        for (var adapter : adapters.values()) adapter.setEditing(value);
+        var item = toolbar.getMenu().findItem(R.id.menu_edit);
+        if (item == null) return;
+        // Not a tick: the save button beside it is one, and two ticks in a row is a toolbar
+        // where the destructive-looking one and the one that writes the file look the same.
+        item.setIcon(value ? R.drawable.ic_close : R.drawable.ic_edit);
+        item.setTitle(value ? R.string.usb_rules_edit_done : R.string.usb_rules_edit);
+    }
+
+    @NonNull
+    private UsbRuleAdapter adapterOf(@NonNull UsbRuleLayer layer) {
+        var adapter = adapters.get(layer);
+        if (adapter == null) throw new IllegalStateException(fmt("no adapter for %s", layer));
+        return adapter;
+    }
+
+    private boolean onMenuItem(@NonNull MenuItem item) {
+        int id = item.getItemId();
+        if (id == R.id.menu_edit) {
+            setEditing(!editing);
+            return true;
+        }
+        if (id == R.id.menu_save) {
+            save();
+            return true;
+        }
+        return false;
+    }
+
+    @Override
+    protected void onStart() {
+        super.onStart();
+        DaemonConnection.getInstance().addListener(this);
+    }
+
+    @Override
+    protected void onStop() {
+        super.onStop();
+        DaemonConnection.getInstance().removeListener(this);
+    }
+
+    @Override
+    protected void onResume() {
+        super.onResume();
+        refreshAll();
+    }
+
+    /** Names and devices always; the rules only while there is nothing unsaved to clobber. */
+    private void refreshAll() {
+        loadControllers();
+        loadVms();
+        loadDevices();
+        // A switch waiting for its warning to be answered is an edit in the making, and reading
+        // the daemon's value over it would be clobbering one.
+        if (!dirty && !confirming) loadRules();
+    }
+
+    private void loadControllers() {
+        vmControllers.clear();
+        vmControllers.putAll(VmEntry.controllersOf(this));
+        pushLookups();
+    }
+
+    // Daemon requests. Every callback arrives on the connection's executor, so each hops to
+    // the main thread through post(), which also drops it once the page is going away.
+
+    private void loadRules() {
+        DaemonConnection.getInstance().buildRequest("usb_rules_get")
+            .onResponse(resp -> post(() -> applyRules(resp.optJSONObject("rules"))))
+            .onUnsuccessful(resp -> post(() -> showStatus(message(resp))))
+            .onError(e -> post(() -> showStatus(getString(R.string.usb_rules_daemon_unavailable))))
+            .invoke();
+    }
+
+    private void applyRules(@Nullable JSONObject rules) {
+        applying = true;
+        try {
+            // Absent reads as on, the way the daemon reads it: that is what every rules file
+            // written before there was a switch means.
+            swEnabled.setChecked(rules == null || rules.optBoolean("enabled", true));
+            for (var layer : UsbRuleLayer.values()) {
+                var arr = rules == null ? null : rules.optJSONArray(layer.key);
+                adapterOf(layer).setItems(arr == null ? DataItem.newArray() : new DataItem(arr));
+            }
+        } catch (JSONException e) {
+            Log.w(TAG, "Malformed rules from daemon", e);
+            showStatus(e.getMessage());
+            return;
+        } finally {
+            applying = false;
+        }
+        setDirty(false);
+        showStatus(null);
+    }
+
+    /** The whole rules object in the wire shape; the daemon validates it, not the page. */
+    @NonNull
+    private JSONObject buildRules() throws JSONException {
+        var rules = new JSONObject();
+        rules.put("version", 1);
+        rules.put("enabled", swEnabled.isChecked());
+        for (var layer : UsbRuleLayer.values())
+            rules.put(layer.key, adapterOf(layer).getItems().toJsonArray());
+        return rules;
+    }
+
+    private void save() {
+        JSONObject rules;
+        try {
+            rules = buildRules();
+        } catch (JSONException e) {
+            toast(e.getMessage(), LENGTH_LONG);
+            return;
+        }
+        // Read before the request rather than in the callback: the count that comes back is
+        // about the save that was sent, and the save that turns the switch off counts devices
+        // given back rather than taken. "Applied to 3" after turning passthrough off would read
+        // as three devices taken, which is the opposite of what just happened.
+        var enabled = swEnabled.isChecked();
+        DaemonConnection.getInstance().buildRequest("usb_rules_set")
+            .put("rules", rules)
+            .onResponse(resp -> post(() -> {
+                setDirty(false);
+                showStatus(null);
+                toast(getString(enabled ? R.string.usb_rules_saved : R.string.usb_rules_released,
+                    resp.optInt("applied", 0)), LENGTH_SHORT);
+                loadDevices();
+            }))
+            .onUnsuccessful(resp -> post(() -> showSaveError(message(resp))))
+            .onError(e -> post(() ->
+                toast(getString(R.string.usb_rules_daemon_unavailable), LENGTH_LONG)))
+            .invoke();
+    }
+
+    private void showSaveError(@NonNull String message) {
+        new MaterialAlertDialogBuilder(this)
+            .setTitle(R.string.usb_rules_save_failed_title)
+            .setMessage(message)
+            .setPositiveButton(android.R.string.ok, null)
+            .show();
+    }
+
+    private void loadDevices() {
+        DaemonConnection.getInstance().buildRequest("usb_host_list")
+            .onResponse(resp -> post(() -> applyDevices(resp.optJSONArray("devices"))))
+            .onUnsuccessful(resp -> Log.w(TAG, fmt("usb_host_list: %s", message(resp))))
+            .onError(e -> Log.w(TAG, "usb_host_list failed", e))
+            .invoke();
+    }
+
+    private void applyDevices(@Nullable JSONArray arr) {
+        devices.clear();
+        devices.addAll(UsbHostDeviceInfo.fromArray(arr));
+        pushLookups();
+    }
+
+    private void loadVms() {
+        DaemonConnection.getInstance().buildRequest("vm_list")
+            .onResponse(resp -> post(() -> applyVms(resp.optJSONArray("data"))))
+            .onUnsuccessful(resp -> Log.w(TAG, fmt("vm_list: %s", message(resp))))
+            .onError(e -> Log.w(TAG, "vm_list failed", e))
+            .invoke();
+    }
+
+    private void applyVms(@Nullable JSONArray arr) {
+        vms.clear();
+        vms.addAll(VmEntry.fromArray(arr));
+        pushLookups();
+    }
+
+    private void pushLookups() {
+        for (var adapter : adapters.values()) adapter.setLookups(devices, vms, vmControllers);
+    }
+
+    // UsbRuleAdapter.Listener
+
+    /**
+     * Two questions rather than one dialog: what the rule is about, then where the device goes.
+     *
+     * <p>A rule with no target is not a legal catch-all rule, and defaulting the other layers to
+     * "keep it on the host" would quietly add a row that does nothing. Cancelling either step
+     * adds nothing.</p>
+     */
+    @Override
+    public void onAddRule(@NonNull UsbRuleLayer layer) {
+        // The catch-all zone is a zone like any other: several rules, tried in order, and the
+        // ones an earlier host or idle rule has already answered for are dimmed rather than
+        // refused. A second VM rule there is not pointless -- it is what runs when the first
+        // VM is not.
+        if (layer.needsSubject())
+            UsbRuleEditDialog.add(this, layer, devices, new UsbRuleEditDialog.Listener() {
+                @Override
+                public void onConfirm(@Nullable String id, @Nullable String port) {
+                    askTarget(layer, id, port);
+                }
+
+                @Override
+                public void onDelete() {
+                }
+            });
+        else askTarget(layer, null, null);
+    }
+
+    private void askTarget(@NonNull UsbRuleLayer layer, @Nullable String id,
+                           @Nullable String port) {
+        UsbTargetPickerDialog.pick(this, vms, vmControllers, null, target -> {
+            var rule = DataItem.newObject();
+            if (layer.hasId) rule.set("id", id);
+            if (layer.hasPort) rule.set("port", port);
+            rule.set("target", target.toRuleTarget());
+            if (target.kind == UsbRules.Target.VM) {
+                rule.set("vm", target.vmId);
+                if (target.controller != null) rule.set("controller", target.controller);
+            }
+            adapterOf(layer).addRule(rule);
+        });
+    }
+
+    @Override
+    public void onRulesChanged() {
+        setDirty(true);
+    }
+
+    private void setDirty(boolean dirty) {
+        this.dirty = dirty;
+        toolbar.setSubtitle(dirty ? getString(R.string.usb_rules_unsaved) : null);
+    }
+
+    // DaemonConnection.EventListener; called off the main thread.
+
+    @Override
+    public void onDaemonEvent(JSONObject msg) {
+        if (!msg.optString("type", "").equals("event")) return;
+        var data = msg.optJSONObject("data");
+        if (data == null) return;
+        var event = data.optString("event", "");
+        switch (event) {
+            case "usb_host_changed": {
+                // The event carries the fresh list; only an older daemon makes us ask.
+                var arr = data.optJSONArray("devices");
+                post(() -> {
+                    if (arr != null) applyDevices(arr);
+                    else loadDevices();
+                });
+                break;
+            }
+            case "usb_vm_changed":
+                post(this::loadDevices);
+                break;
+            case "usb_auto_attached":
+                post(() -> {
+                    snackbar(getString(R.string.usb_rules_event_attached,
+                        deviceLabel(data), data.optString("vm_name", "")));
+                    loadDevices();
+                });
+                break;
+            case "usb_auto_failed":
+                post(() -> snackbar(getString(R.string.usb_rules_event_failed,
+                    deviceLabel(data), data.optString("vm_name", ""),
+                    data.optString("error", ""))));
+                break;
+            case "output":
+                break;
+            default:
+                // A VM state event: which VMs can take a device just changed.
+                if (data.has("state")) post(this::loadVms);
+                break;
+        }
+    }
+
+    /** The plugged-in device an auto event names: by sysfs, else by id, else the id itself. */
+    @NonNull
+    private String deviceLabel(@NonNull JSONObject data) {
+        var sysfs = data.optString("sysfs", "");
+        var id = data.optString("id", "");
+        for (var device : devices)
+            if (!sysfs.isEmpty() && device.sysfs.equals(sysfs)) return device.displayName(this);
+        for (var device : devices)
+            if (!id.isEmpty() && device.id.equals(id)) return device.displayName(this);
+        return id.isEmpty() ? sysfs : id;
+    }
+
+    @Override
+    public void onDaemonConnected() {
+        post(this::refreshAll);
+    }
+
+    @Override
+    public void onDaemonDisconnected() {
+        post(() -> showStatus(getString(R.string.usb_rules_daemon_unavailable)));
+    }
+
+    // Helpers
+
+    private void confirmExit() {
+        if (!dirty) {
+            finish();
+            return;
+        }
+        new MaterialAlertDialogBuilder(this)
+            .setTitle(R.string.usb_rules_discard_title)
+            .setMessage(R.string.usb_rules_discard_message)
+            .setPositiveButton(R.string.back_ask_discard, (d, w) -> finish())
+            .setNegativeButton(android.R.string.cancel, null)
+            .show();
+    }
+
+    /** A line at the top for what stops the page working; hidden when nothing does. */
+    private void showStatus(@Nullable String message) {
+        if (message == null || message.isEmpty()) {
+            tvStatus.setVisibility(GONE);
+            return;
+        }
+        tvStatus.setText(message);
+        tvStatus.setVisibility(VISIBLE);
+    }
+
+    @NonNull
+    private String message(@NonNull JSONObject resp) {
+        var text = resp.optString("message", "");
+        return text.isEmpty() ? getString(R.string.usb_rules_request_failed) : text;
+    }
+
+    private void snackbar(@NonNull String text) {
+        Snackbar.make(root, text, Snackbar.LENGTH_LONG).show();
+    }
+
+    private void toast(@Nullable String text, int duration) {
+        Toast.makeText(this, text, duration).show();
+    }
+
+    /** Runs on the main thread, unless the page is already going away. */
+    private void post(@NonNull Runnable task) {
+        mainHandler.post(() -> {
+            if (isFinishing() || isDestroyed()) return;
+            task.run();
+        });
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/usb/UsbSpeed.java b/app/src/main/java/cn/classfun/droidvm/ui/usb/UsbSpeed.java
new file mode 100644
index 000000000..722297e92
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/ui/usb/UsbSpeed.java
@@ -0,0 +1,40 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
+package cn.classfun.droidvm.ui.usb;
+
+import androidx.annotation.NonNull;
+import androidx.annotation.Nullable;
+
+/**
+ * The generation a device enumerated at, from the megabits per second sysfs reports.
+ *
+ * <p>10 Gbps is really 3.1 and 20 Gbps is 3.2 Gen 2x2, but a person looking at a card wants to
+ * know whether the device came up on the fast bus or the slow one, and that is the line between
+ * 2.0 and 3.0. Anything the kernel reports that is not one of the five known rates says nothing
+ * rather than guessing, and the card then shows the name alone.</p>
+ */
+public final class UsbSpeed {
+    private UsbSpeed() {
+    }
+
+    /** {@code "3.0"}, {@code "2.0"}, {@code "1.1"}, {@code "1.0"}, or "" when unknown. */
+    @NonNull
+    public static String generationOf(@Nullable String speed) {
+        if (speed == null) return "";
+        switch (speed.trim()) {
+            case "20000":
+            case "10000":
+            case "5000":
+                return "3.0";
+            case "480":
+                return "2.0";
+            case "12":
+                return "1.1";
+            case "1.5":
+                return "1.0";
+            default:
+                return "";
+        }
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/usb/UsbTargetPickerDialog.java b/app/src/main/java/cn/classfun/droidvm/ui/usb/UsbTargetPickerDialog.java
new file mode 100644
index 000000000..9c748fba3
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/ui/usb/UsbTargetPickerDialog.java
@@ -0,0 +1,248 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
+package cn.classfun.droidvm.ui.usb;
+
+import static android.content.DialogInterface.BUTTON_POSITIVE;
+
+import android.content.Context;
+import android.view.LayoutInflater;
+
+import androidx.annotation.NonNull;
+import androidx.annotation.Nullable;
+import androidx.annotation.StringRes;
+
+import com.google.android.material.dialog.MaterialAlertDialogBuilder;
+import com.google.android.material.textfield.TextInputEditText;
+import com.google.android.material.textfield.TextInputLayout;
+
+import java.util.ArrayList;
+import java.util.List;
+import java.util.Map;
+
+import cn.classfun.droidvm.R;
+import cn.classfun.droidvm.daemon.usb.UsbRules;
+import cn.classfun.droidvm.lib.ui.IconItemAdapter;
+import cn.classfun.droidvm.ui.widgets.row.DropdownRowWidget;
+
+/**
+ * Where a device goes: the host, the sink, or one VM's controller. A rule says it about whatever
+ * it matches, and the management page says it about one device in hand.
+ *
+ * <p>One row per VM and controller rather than a VM row with a controller question after it: the
+ * two together are the target, and a VM with two controllers is two different answers. Every
+ * target is offered in every layer, the catch-all one included: it is the layer where "anything
+ * I have not spoken for" belongs, and all three answers to that are worth writing down.</p>
+ */
+public final class UsbTargetPickerDialog {
+    public interface OnPicked {
+        void onPicked(@NonNull UsbDeviceTarget target);
+    }
+
+    private UsbTargetPickerDialog() {
+    }
+
+    /**
+     * @param controllers each VM's xHCI controller ids, as vms.json has them. A VM with none is
+     *                    still offered, as the row that names no controller: that is what every
+     *                    rule written before controllers existed says, and the card calls it out
+     *                    in red rather than the picker hiding a VM the user can see.
+     */
+    public static void pick(@NonNull Context context, @NonNull List<VmEntry> vms,
+                            @NonNull Map<String, List<String>> controllers,
+                            @Nullable UsbDeviceTarget current, @NonNull OnPicked onPicked) {
+        var targets = new ArrayList<UsbDeviceTarget>();
+        var labels = new ArrayList<String>();
+        var icons = new ArrayList<Integer>();
+        // The controllers first: sending a device somewhere is the reason a rule is written at
+        // all. Then the VM this app cannot see, typed in, because it is one of those answers
+        // too. The two that send it nowhere end the list, ordered by how much they take away.
+        for (var vm : vms) addVm(context, vm, controllers.get(vm.id), targets, labels, icons);
+        var customAt = targets.size();
+        labels.add(context.getString(R.string.usb_rules_target_custom));
+        icons.add(R.drawable.ic_edit);
+        targets.add(null);
+        targets.add(UsbDeviceTarget.sink());
+        labels.add(context.getString(R.string.usb_target_idle));
+        icons.add(R.drawable.ic_sleep);
+        targets.add(UsbDeviceTarget.host());
+        labels.add(context.getString(R.string.usb_target_host));
+        icons.add(R.drawable.ic_android);
+
+        var view = LayoutInflater.from(context).inflate(R.layout.dialog_usb_target_edit, null);
+        DropdownRowWidget dd = view.findViewById(R.id.dd_edit_target);
+        var chosen = new UsbDeviceTarget[]{current};
+        var dialog = new MaterialAlertDialogBuilder(context)
+            .setTitle(R.string.usb_rules_target_title)
+            .setView(view)
+            .setNegativeButton(android.R.string.cancel, null)
+            .setPositiveButton(android.R.string.ok, (d, w) -> {
+                if (chosen[0] != null) onPicked.onPicked(chosen[0]);
+            })
+            .show();
+        Runnable render = () -> {
+            dd.setText(chosen[0] == null ? "" : labelOf(context, chosen[0], vms));
+            var ok = dialog.getButton(BUTTON_POSITIVE);
+            // A rule with no target is not a rule; the answer is refused here rather than
+            // written and explained afterwards.
+            if (ok != null) ok.setEnabled(chosen[0] != null);
+        };
+        dd.setAdapter(IconItemAdapter.create(context, labels, unbox(icons)));
+        dd.setOnItemClickListener((parent, v, which, id) -> {
+            if (which == customAt) {
+                // The list wrote its own row into the field on the way here; the value is
+                // whatever the prompt answers, or what was there before if it is dismissed.
+                render.run();
+                askCustom(context, target -> {
+                    chosen[0] = target;
+                    render.run();
+                });
+                return;
+            }
+            chosen[0] = targets.get(which);
+            render.run();
+        });
+        render.run();
+    }
+
+    /** The int[] IconItemAdapter wants, from the list the rows were built into. */
+    @NonNull
+    private static int[] unbox(@NonNull List<Integer> icons) {
+        var out = new int[icons.size()];
+        for (var i = 0; i < out.length; i++) out[i] = icons.get(i);
+        return out;
+    }
+
+    /** What the field says for a target: the row it stands for, in the same words. */
+    @NonNull
+    private static String labelOf(@NonNull Context context, @NonNull UsbDeviceTarget target,
+                                  @NonNull List<VmEntry> vms) {
+        if (target.kind == UsbRules.Target.HOST)
+            return context.getString(R.string.usb_target_host);
+        if (target.kind == UsbRules.Target.SINK)
+            return context.getString(R.string.usb_target_idle);
+        var name = target.vmId == null ? "" : target.vmId;
+        for (var vm : vms)
+            if (vm.id.equals(target.vmId)) name = vm.name;
+        return target.controller == null
+            ? context.getString(R.string.usb_rules_no_controller, name)
+            : context.getString(R.string.usb_rules_vm_label_fmt, name, target.controller);
+    }
+
+    /**
+     * Where one device the management page lists should go now: the xHCI controllers of the VMs
+     * that are running, then the host, then nobody.
+     *
+     * <p>Nothing is typed in here, and nothing that cannot be done is offered: a VM that is not
+     * running has no crosvm to hand a device to, and one with no controller has nothing to hand
+     * it to, so neither is a row. The other two rows carry the lock in their name, because that
+     * is the whole difference between choosing one of them and the device merely being there --
+     * a locked device is one no rules pass will move again until it is unplugged.</p>
+     */
+    public static void pickForDevice(@NonNull Context context, @NonNull List<VmEntry> vms,
+                                     @NonNull Map<String, List<String>> controllers,
+                                     @NonNull OnPicked onPicked) {
+        var targets = new ArrayList<UsbDeviceTarget>();
+        var labels = new ArrayList<String>();
+        for (var vm : vms) {
+            if (!vm.isRunning()) continue;
+            var ids = controllers.get(vm.id);
+            if (ids == null) continue;
+            for (var controller : ids) {
+                targets.add(UsbDeviceTarget.vm(vm.id, controller));
+                labels.add(context.getString(R.string.usb_rules_vm_label_fmt,
+                    vm.name, controller));
+            }
+        }
+        targets.add(UsbDeviceTarget.host());
+        labels.add(lockedLabel(context, R.string.usb_target_host));
+        targets.add(UsbDeviceTarget.sink());
+        labels.add(lockedLabel(context, R.string.usb_target_idle));
+        show(context, targets, labels, null, onPicked);
+    }
+
+    /**
+     * The name of a menu row that locks the device, told from the plain word for the state the
+     * device is already in: the button shows the plain word for a state nobody chose.
+     */
+    @NonNull
+    public static String lockedLabel(@NonNull Context context, @StringRes int label) {
+        return context.getString(R.string.usb_devices_locked_fmt, context.getString(label));
+    }
+
+    /** The list itself; [onCustom] runs for the one row that stands for no target. */
+    private static void show(@NonNull Context context, @NonNull List<UsbDeviceTarget> targets,
+                             @NonNull List<String> labels, @Nullable Runnable onCustom,
+                             @NonNull OnPicked onPicked) {
+        new MaterialAlertDialogBuilder(context)
+            // The management page's own list, which asks where a device goes now rather than
+            // editing a rule that will decide it later.
+            .setTitle(R.string.usb_rules_attach_to)
+            .setItems(labels.toArray(new String[0]), (dialog, which) -> {
+                if (which < targets.size()) onPicked.onPicked(targets.get(which));
+                else if (onCustom != null) onCustom.run();
+            })
+            .show();
+    }
+
+    private static void addVm(@NonNull Context context, @NonNull VmEntry vm,
+                              @Nullable List<String> controllers,
+                              @NonNull List<UsbDeviceTarget> targets,
+                              @NonNull List<String> labels, @Nullable List<Integer> icons) {
+        // The name alone, not the state beside it: a rule is written for whenever it matches,
+        // and whether the VM happens to be stopped while somebody types it says nothing about
+        // where the device should go when it is not.
+        var name = vm.name;
+        if (controllers == null || controllers.isEmpty()) {
+            targets.add(UsbDeviceTarget.vm(vm.id, null));
+            labels.add(context.getString(R.string.usb_rules_no_controller, name));
+            if (icons != null) icons.add(R.drawable.ic_nav_vm);
+            return;
+        }
+        for (var controller : controllers) {
+            targets.add(UsbDeviceTarget.vm(vm.id, controller));
+            labels.add(context.getString(R.string.usb_rules_vm_label_fmt, name, controller));
+            if (icons != null) icons.add(R.drawable.ic_nav_vm);
+        }
+    }
+
+    /**
+     * A VM this app cannot see, typed in.
+     *
+     * <p>Only emptiness is checked. There is no pattern in the daemon to check a VM id against
+     * the way there is for a device id, and inventing one here would be a second answer to a
+     * question the daemon already answers: the card renders an id it cannot resolve in red, and
+     * the save is what refuses it.</p>
+     */
+    private static void askCustom(@NonNull Context context, @NonNull OnPicked onPicked) {
+        var view = LayoutInflater.from(context)
+            .inflate(R.layout.dialog_usb_target_custom, null);
+        TextInputLayout tiVm = view.findViewById(R.id.ti_custom_vm);
+        TextInputEditText etVm = view.findViewById(R.id.et_custom_vm);
+        TextInputEditText etController = view.findViewById(R.id.et_custom_controller);
+        var dialog = new MaterialAlertDialogBuilder(context)
+            .setTitle(R.string.usb_rules_custom_target_title)
+            .setView(view)
+            .setNegativeButton(android.R.string.cancel, null)
+            .setPositiveButton(android.R.string.ok, null)
+            .show();
+        // Wired after show() so a refused value can stay on screen with its error: the listener
+        // setPositiveButton takes dismisses the dialog whatever it decides.
+        dialog.getButton(BUTTON_POSITIVE).setOnClickListener(v -> {
+            var vmId = text(etVm);
+            tiVm.setError(vmId.isEmpty()
+                ? context.getString(R.string.usb_rules_custom_vm_required) : null);
+            if (tiVm.getError() != null) return;
+            var controller = text(etController);
+            dialog.dismiss();
+            onPicked.onPicked(
+                UsbDeviceTarget.vm(vmId, controller.isEmpty() ? null : controller));
+        });
+    }
+
+    @NonNull
+    private static String text(@NonNull TextInputEditText field) {
+        var value = field.getText();
+        return value == null ? "" : value.toString().trim();
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/usb/VmEntry.java b/app/src/main/java/cn/classfun/droidvm/ui/usb/VmEntry.java
new file mode 100644
index 000000000..15f0f922e
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/ui/usb/VmEntry.java
@@ -0,0 +1,110 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
+package cn.classfun.droidvm.ui.usb;
+
+import android.content.Context;
+
+import androidx.annotation.NonNull;
+import androidx.annotation.Nullable;
+
+import org.json.JSONArray;
+import org.json.JSONObject;
+
+import java.util.ArrayList;
+import java.util.HashMap;
+import java.util.List;
+import java.util.Locale;
+import java.util.Map;
+
+import cn.classfun.droidvm.R;
+import cn.classfun.droidvm.lib.store.vm.VMState;
+import cn.classfun.droidvm.lib.store.vm.VMStore;
+import cn.classfun.droidvm.lib.store.vm.VMXhciConfig;
+
+/**
+ * One row of {@code vm_list}: enough to name a rule's target and to say whether it could take
+ * a device right now (only a running VM does).
+ *
+ * <p>What controllers that VM has is deliberately not read from here, although the row carries
+ * the whole config: the daemon's copy of a config is loaded once at daemon start and replaced
+ * only when a VM is created or started, so it answers with the controllers a VM had rather than
+ * the ones the editor gave it. That question goes to vms.json -- see {@link #controllersOf}.</p>
+ */
+public final class VmEntry {
+    public final String id;
+    public final String name;
+    @Nullable
+    public final VMState state;
+    private final String rawState;
+
+    private VmEntry(@NonNull JSONObject obj) {
+        id = obj.optString("id", "");
+        var given = obj.optString("name", "");
+        name = given.isEmpty() ? id : given;
+        rawState = obj.optString("state", "");
+        VMState parsed = null;
+        try {
+            parsed = VMState.valueOf(rawState.toUpperCase(Locale.ROOT));
+        } catch (IllegalArgumentException ignored) {
+        }
+        state = parsed;
+    }
+
+    @NonNull
+    public static List<VmEntry> fromArray(@Nullable JSONArray arr) {
+        var out = new ArrayList<VmEntry>();
+        if (arr == null) return out;
+        for (int i = 0; i < arr.length(); i++) {
+            var obj = arr.optJSONObject(i);
+            if (obj != null && !obj.optString("id", "").isEmpty()) out.add(new VmEntry(obj));
+        }
+        return out;
+    }
+
+    /**
+     * Which xHCI controllers each VM has, by VM id, read from vms.json.
+     *
+     * <p>This is what decides whether a rule's target still exists and what a device may be sent
+     * to, and only the config file can say: a controller added in the editor would read as
+     * missing in the daemon's copy, and one deleted there would go on reading as a healthy
+     * target until the VM was next started -- wrong in both directions, on the two surfaces that
+     * report a dangling target.</p>
+     */
+    @NonNull
+    public static Map<String, List<String>> controllersOf(@NonNull Context context) {
+        var store = new VMStore();
+        store.load(context);
+        var out = new HashMap<String, List<String>>();
+        store.forEach((id, config) -> {
+            if (id == null) return;
+            var ids = new ArrayList<String>();
+            for (var controller : VMXhciConfig.listControllers(config.item))
+                if (!controller.getControllerId().isEmpty())
+                    ids.add(controller.getControllerId());
+            out.put(id.toString(), ids);
+        });
+        return out;
+    }
+
+    /**
+     * Whether the VM could take a device right now. Only a running one has a crosvm to ask, so
+     * the management page's menu is built out of these -- a stopped VM is not an answer the
+     * page could carry out, and offering one only to have the daemon refuse it would be a menu
+     * that lies.
+     */
+    public boolean isRunning() {
+        return state == VMState.RUNNING;
+    }
+
+    /**
+     * "name (state)" for a picker; the daemon's raw state text when it is one this build has
+     * no word for, the bare name when it sent none.
+     */
+    @NonNull
+    public String label(@NonNull Context context) {
+        var stateText = state != null ? context.getString(state.getStringId()) : rawState;
+        if (stateText.isEmpty()) return name;
+        return context.getString(R.string.usb_rules_vm_label_fmt, name, stateText);
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/VMEditActivity.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/VMEditActivity.java
index c540d5d1d..cb2248d2b 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/VMEditActivity.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/VMEditActivity.java
@@ -18,6 +18,7 @@
 import androidx.core.widget.NestedScrollView;
 
 import com.google.android.material.appbar.CollapsingToolbarLayout;
+import com.google.android.material.dialog.MaterialAlertDialogBuilder;
 import com.google.android.material.floatingactionbutton.FloatingActionButton;
 import com.google.android.material.tabs.TabLayout;
 
@@ -286,9 +287,35 @@ private void doSave() {
             store.update(config);
         } else {
             store.add(config);
+            // The VM exists from here on, so this session is editing it, not creating one. The
+            // save can still end in the editor staying open -- the USB rules below -- and a
+            // second Save that took the creation path again would mint another id and leave two
+            // copies of the VM in the file, after refusing the name the first copy already has.
+            editVMId = config.getId();
+            editMode = true;
         }
         store.save(this);
         setResult(RESULT_OK);
+        // The VM config first, the USB rules second: a rule names the VM and the controller it
+        // attaches to, and the daemon refuses one whose target it cannot find -- which a VM
+        // being created is until the config it was just given has landed. A failure here leaves
+        // the editor open, because the bindings only exist in this page until they are pushed.
+        if (peripheralTab instanceof VMEditPeripheralTab
+            && ((VMEditPeripheralTab) peripheralTab).hasPendingUsbRules()) {
+            ((VMEditPeripheralTab) peripheralTab)
+                .pushUsbRules(config, this::finish, this::showUsbRulesError);
+            return;
+        }
         finish();
     }
+
+    /** The VM was saved and its USB bindings were not; the editor stays open so they are not
+     *  lost, and the message is the daemon's own. */
+    private void showUsbRulesError(@NonNull String message) {
+        new MaterialAlertDialogBuilder(this)
+            .setTitle(R.string.usb_rules_save_failed_title)
+            .setMessage(getString(R.string.edit_vm_xhci_rules_save_failed, message))
+            .setPositiveButton(android.R.string.ok, null)
+            .show();
+    }
 }
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/basic/VMEditBasicTab.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/basic/VMEditBasicTab.java
index 6413b0294..198478da3 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/basic/VMEditBasicTab.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/basic/VMEditBasicTab.java
@@ -60,7 +60,6 @@ public final class VMEditBasicTab extends VMEditBaseTab {
     private SwitchRowWidget swPmu;
     private SwitchRowWidget swRng;
     private SwitchRowWidget swSmt;
-    private SwitchRowWidget swUsb;
     private SwitchRowWidget swSandbox;
     private SwitchRowWidget swHugepages;
     private SwitchRowWidget swDebug;
@@ -106,7 +105,6 @@ public void initView() {
         swPmu = view.findViewById(R.id.sw_pmu);
         swRng = view.findViewById(R.id.sw_rng);
         swSmt = view.findViewById(R.id.sw_smt);
-        swUsb = view.findViewById(R.id.sw_usb);
         swSandbox = view.findViewById(R.id.sw_sandbox);
         swHugepages = view.findViewById(R.id.sw_hugepages);
         swDebug = view.findViewById(R.id.sw_debug);
@@ -137,7 +135,6 @@ public void initValue() {
         swPmu.setChecked(VMConfig.NEW_VM_DEFAULT_PMU);
         swRng.setChecked(VMConfig.NEW_VM_DEFAULT_RNG);
         swSmt.setChecked(VMConfig.NEW_VM_DEFAULT_SMT);
-        swUsb.setChecked(VMConfig.NEW_VM_DEFAULT_USB);
         swSandbox.setChecked(false);
         swHugepages.setChecked(VMConfig.NEW_VM_DEFAULT_HUGEPAGES);
         swDebug.setChecked(false);
@@ -187,7 +184,6 @@ public void loadConfig(@NonNull VMConfig config) {
         swPmu.setChecked(item.optBoolean("pmu", false));
         swRng.setChecked(item.optBoolean("rng", false));
         swSmt.setChecked(item.optBoolean("smt", false));
-        swUsb.setChecked(item.optBoolean("usb", false));
         swSandbox.setChecked(item.optBoolean("sandbox", false));
         swHugepages.setChecked(item.optBoolean("hugepages", false));
         swDebug.setChecked(item.optBoolean("strace", false));
@@ -473,7 +469,6 @@ public void saveConfig(@NonNull VMConfig config) {
         item.set("pmu", swPmu.isChecked());
         item.set("rng", swRng.isChecked());
         item.set("smt", swSmt.isChecked());
-        item.set("usb", swUsb.isChecked());
         item.set("sandbox", swSandbox.isChecked());
         item.set("hugepages", swHugepages.isChecked());
         item.set("strace", swDebug.isChecked());
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/peripheral/VMEditPeripheralTab.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/peripheral/VMEditPeripheralTab.java
index b2f4e77bd..fe70916d3 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/peripheral/VMEditPeripheralTab.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/peripheral/VMEditPeripheralTab.java
@@ -6,33 +6,83 @@
 import static java.util.Objects.requireNonNull;
 import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
 
+import android.os.Handler;
+import android.os.Looper;
+import android.util.Log;
 import android.view.View;
 
 import androidx.annotation.NonNull;
+import androidx.annotation.Nullable;
+
+import org.json.JSONArray;
+import org.json.JSONException;
+import org.json.JSONObject;
+
 import java.util.ArrayList;
+import java.util.EnumMap;
+import java.util.List;
+import java.util.Map;
+import java.util.function.Consumer;
 
 import cn.classfun.droidvm.R;
+import cn.classfun.droidvm.daemon.usb.UsbRules;
+import cn.classfun.droidvm.lib.daemon.DaemonConnection;
 import cn.classfun.droidvm.lib.store.base.DataItem;
 import cn.classfun.droidvm.lib.data.HostAudioDevices;
 import cn.classfun.droidvm.lib.store.vm.PeripheralType;
 import cn.classfun.droidvm.lib.store.vm.SerialBackend;
+import cn.classfun.droidvm.lib.store.vm.VMBackend;
 import cn.classfun.droidvm.lib.store.vm.VMConfig;
 import cn.classfun.droidvm.lib.store.vm.VMPeripheralConfig;
 import cn.classfun.droidvm.lib.store.vm.VMSerialConfig;
 import cn.classfun.droidvm.lib.store.vm.VMStore;
+import cn.classfun.droidvm.lib.store.vm.VMXhciConfig;
+import cn.classfun.droidvm.ui.usb.UsbHostDeviceInfo;
+import cn.classfun.droidvm.ui.usb.UsbRuleLayer;
 import cn.classfun.droidvm.ui.vm.edit.VMEditActivity;
 import cn.classfun.droidvm.ui.vm.edit.base.VMEditBaseTab;
+import cn.classfun.droidvm.ui.vm.edit.base.VMEditTab;
+import cn.classfun.droidvm.ui.vm.edit.basic.VMEditBasicTab;
+import cn.classfun.droidvm.ui.vm.edit.peripheral.XhciBindingDiff.Row;
 import cn.classfun.droidvm.ui.widgets.container.CardItemListView;
 
 /**
- * Peripherals attached to the VM. Today that means audio endpoints, which the crosvm backend
- * turns into one virtio-snd card: speakers become its output PCM devices, microphones its input
- * ones, each pinned to the host endpoint picked here.
+ * Peripherals attached to the VM: the audio devices the crosvm backend turns into virtio-snd
+ * cards, and the xHCI controllers the guest's USB hangs off.
+ *
+ * <p>The controller cards are the one place in the editor where a card shows something that is
+ * not VM config. What is attached to a controller comes from the app-global USB attach rules,
+ * which the daemon owns: they are read once when the editor opens, edited as a local copy, and
+ * pushed as a diff after the config has been saved. Everything else here is the usual
+ * {@code DataItem} the adapter edits in place.</p>
  */
-public final class VMEditPeripheralTab extends VMEditBaseTab {
+public final class VMEditPeripheralTab extends VMEditBaseTab
+    implements VMPeripheralEditAdapter.XhciHost {
+    private static final String TAG = "VMEditPeripheralTab";
+    private final Handler mainHandler = new Handler(Looper.getMainLooper());
+    /** The rules as this page holds them: the snapshot it opened with, and what it shows now. */
+    private final XhciBindingStore bindings = new XhciBindingStore();
+    /** What is plugged into the phone right now; the rows and the add menu describe it. */
+    private final List<UsbHostDeviceInfo> hostDevices = new ArrayList<>();
     private CardItemListView listPeripherals;
     private CardItemListView listSerialPorts;
     private VMPeripheralEditAdapter adapter;
+    /**
+     * The VM's controller-id counter, carried across the edit.
+     *
+     * <p>It lives on the config, but the config this tab loaded is not the object the save
+     * writes -- {@code doSave} re-reads the store, and a new VM's config is built at save time.
+     * So the tab holds the value and writes it back in {@link #saveConfig}.</p>
+     */
+    private long xhciNext = 0;
+    /** A push is in flight; a second Save would otherwise merge against a stale read. */
+    private boolean pushing = false;
+    /**
+     * The master switch as the daemon last reported it. True until told otherwise, which is what
+     * an absent "enabled" means to the daemon as well: a card must not claim passthrough is off
+     * on the strength of a read that has not come back.
+     */
+    private boolean usbEnabled = true;
 
     public VMEditPeripheralTab(VMEditActivity parent, View view) {
         super(parent, view);
@@ -49,24 +99,37 @@ public void initValue() {
         adapter = listPeripherals.setAdapter(VMPeripheralEditAdapter.class);
         adapter.setMicPermissionGate(parent::ensureRecordAudioThen);
         adapter.setCameraPermissionGate(parent.getCameraPermission()::requireThen);
+        adapter.setXhciHost(this);
         listSerialPorts.setAdapter(VMSerialEditAdapter.class);
         if (!parent.editMode) {
+            var seed = DataItem.newObject();
             var peripherals = DataItem.newArray();
             peripherals.append(VMPeripheralConfig.createDefaultVirtioSound().item);
-            listPeripherals.setItems(peripherals);
+            seed.set(VMXhciConfig.KEY_PERIPHERALS, peripherals);
+            // Through the minting path, so this list is the one createWithCustomizeDefaults
+            // builds -- the same card with the same id, whichever of the two the user sees.
+            if (VMConfig.NEW_VM_DEFAULT_USB) VMXhciConfig.addController(seed);
+            listPeripherals.setItems(seed.opt(VMXhciConfig.KEY_PERIPHERALS, DataItem.newArray()));
         }
         // A brand-new VM never goes through loadConfig, but its serial list is not empty:
         // the fixed COM quartet exists either way, so show it (COM1 as the app console).
         var scratch = DataItem.newObject();
         VMSerialConfig.ensureDefaults(scratch);
         listSerialPorts.setItems(scratch.opt(VMSerialConfig.KEY, DataItem.newArray()));
+        loadHostDevices();
     }
 
     @Override
     public void onTabShown() {
         // The host device list is live: something may have been plugged in or paired since the
-        // rows were last bound.
+        // rows were last bound. The rules are deliberately not re-read -- that is a once-per-
+        // session load, and reading it again here would throw away rows the user just added.
         if (adapter != null) adapter.refreshHostDevices();
+        loadHostDevices();
+        // The master switch is the exception to that: it lives on the rules page, it is not a
+        // row, and reading it back cannot lose an edit -- so the warning it drives is refreshed
+        // rather than left at what it said when the editor opened.
+        refreshUsbEnabled();
     }
 
     /** Whether the unsaved peripheral rows give the guest a host microphone. */
@@ -79,11 +142,16 @@ public boolean hasMicrophone() {
 
     @Override
     public void loadConfig(@NonNull VMConfig config) {
-        listPeripherals.setItems(config.item.opt("peripherals", DataItem.newArray()));
+        listPeripherals.setItems(
+            config.item.opt(VMXhciConfig.KEY_PERIPHERALS, DataItem.newArray()));
+        xhciNext = config.item.optLong(VMXhciConfig.KEY_NEXT, 0);
         // VMConfig's constructor already materialized the fixed quartet for configs from
         // before "serial_ports"; ensureDefaults here only covers configs built by hand.
         VMSerialConfig.ensureDefaults(config.item);
         listSerialPorts.setItems(config.item.opt(VMSerialConfig.KEY, DataItem.newArray()));
+        // A VM that does not exist yet owns no rules: its id is minted by the save itself, so
+        // everything the user adds here is an addition when that id finally exists.
+        loadUsbRules(parent.editMode ? config.getId().toString() : null);
     }
 
     @Override
@@ -107,6 +175,10 @@ public boolean validateInput(@NonNull VMStore store) {
                 seen.add(identity);
             }
         }
+        // Nothing checks the controllers: a second one on crosvm, and a port count crosvm does
+        // not honour, are both things the VM starts with anyway -- the card says in red what
+        // will be ignored, which is not the same as refusing to save it.
+        //
         // A path-based serial backend without a path has nowhere to put the bytes. PTY is the
         // exception: its path is an optional convenience symlink. Two USB ACM ports on one
         // slot would be a guaranteed busy-refusal at boot, so it fails here instead.
@@ -127,15 +199,300 @@ public boolean validateInput(@NonNull VMStore store) {
 
     @Override
     public void saveConfig(@NonNull VMConfig config) {
-        config.item.set("peripherals", requireNonNull(listPeripherals.getItems()));
+        config.item.set(VMXhciConfig.KEY_PERIPHERALS,
+            requireNonNull(listPeripherals.getItems()));
         config.item.set(VMSerialConfig.KEY, requireNonNull(listSerialPorts.getItems()));
+        // Never below what the config already handed out: an id is only safe to mint once.
+        config.item.set(VMXhciConfig.KEY_NEXT,
+            Math.max(xhciNext, config.item.optLong(VMXhciConfig.KEY_NEXT, 0)));
+    }
+
+    // VMPeripheralEditAdapter.XhciHost
+
+    @NonNull
+    @Override
+    public XhciBindingStore bindings() {
+        return bindings;
+    }
+
+    @NonNull
+    @Override
+    public List<UsbHostDeviceInfo> hostDevices() {
+        return hostDevices;
+    }
+
+    /** The backend as currently selected in the basic tab (before save). */
+    @NonNull
+    @Override
+    public VMBackend backend() {
+        try {
+            var basic = (VMEditBasicTab) parent.getTab(VMEditTab.TAB_BASIC);
+            if (basic != null) return basic.getCurrentBackend();
+        } catch (Exception ignored) {
+        }
+        return VMBackend.DEFAULT;
+    }
+
+    @Override
+    public boolean usbPassthroughEnabled() {
+        return usbEnabled;
+    }
+
+    @NonNull
+    @Override
+    public DataItem createController() {
+        // Minted against the rows as they stand, so an id already in the list cannot come out
+        // again; the counter moves with it and is written back by saveConfig.
+        var scratch = wrap();
+        scratch.set(VMXhciConfig.KEY_NEXT, xhciNext);
+        var controller = VMXhciConfig.addController(scratch);
+        xhciNext = scratch.optLong(VMXhciConfig.KEY_NEXT, xhciNext);
+        return controller.item;
+    }
+
+    // The USB attach rules: read once here, pushed once by the activity after the save.
+
+    /** Whether this page has bindings the daemon has not been told about. */
+    public boolean hasPendingUsbRules() {
+        return bindings.isLoaded() && bindings.isDirty();
+    }
+
+    /**
+     * Folds this page's edits into the rules the daemon holds and pushes the result.
+     *
+     * <p>Read afresh rather than merged against the copy loaded when the page opened: the
+     * global rules page edits the same object, and the whole point of pushing a diff is that
+     * neither page eats the other's edits. Called after the VM config was saved, so a rule can
+     * name the VM it was written on.</p>
+     */
+    public void pushUsbRules(@NonNull VMConfig config, @NonNull Runnable onDone,
+                             @NonNull Consumer<String> onFailed) {
+        if (pushing) return;
+        pushing = true;
+        var vmId = config.getId().toString();
+        introduceVm(config, () -> DaemonConnection.getInstance().buildRequest("usb_rules_get")
+            .onResponse(resp -> post(() ->
+                mergeAndPush(vmId, resp.optJSONObject("rules"), onDone, onFailed)))
+            .onUnsuccessful(resp -> post(() -> fail(message(resp), onFailed)))
+            .onError(e -> post(() -> fail(daemonUnavailable(), onFailed)))
+            .invoke(), onFailed);
+    }
+
+    /**
+     * Makes sure the daemon knows the VM whose bindings are about to name it.
+     *
+     * <p>{@code usb_rules_set} refuses a rule whose target it cannot find, and the daemon's VM
+     * store is not vms.json: it is read once at daemon start and learns of a VM when one is
+     * created or started. A VM created in this editor would therefore have every binding
+     * refused with "VM not found" until it had been started once -- which is the first thing
+     * anyone does with this card, so the config goes over first.</p>
+     *
+     * <p>Only a VM the daemon has never heard of is sent. An existing one is left alone: what
+     * would refresh its copy is vm_modify, which builds a new instance and would throw away the
+     * console of the run the user is looking at, and a stale copy costs nothing here -- the
+     * daemon checks that the VM exists, and a controller it has not heard of yet is skipped when
+     * a device is offered rather than refused at save.</p>
+     */
+    private void introduceVm(@NonNull VMConfig config, @NonNull Runnable then,
+                             @NonNull Consumer<String> onFailed) {
+        var conn = DaemonConnection.getInstance();
+        conn.buildRequest("vm_exists")
+            .put("vm_id", config.getId().toString())
+            .onResponse(resp -> {
+                if (resp.optBoolean("exists", false)) {
+                    post(then);
+                    return;
+                }
+                conn.buildRequest("vm_create")
+                    .put("config", config)
+                    .onResponse(created -> post(then))
+                    .onUnsuccessful(created -> post(() -> fail(message(created), onFailed)))
+                    .onError(e -> post(() -> fail(daemonUnavailable(), onFailed)))
+                    .invoke();
+            })
+            .onUnsuccessful(resp -> post(() -> fail(message(resp), onFailed)))
+            .onError(e -> post(() -> fail(daemonUnavailable(), onFailed)))
+            .invoke();
+    }
+
+    private void mergeAndPush(@NonNull String vmId, @Nullable JSONObject current,
+                              @NonNull Runnable onDone, @NonNull Consumer<String> onFailed) {
+        JSONObject payload;
+        try {
+            payload = new JSONObject();
+            payload.put("version", UsbRules.VERSION);
+            // The master switch belongs to the rules page; this card only edits rows, so it hands
+            // back whatever the daemon just said. Dropping the key is not neutral -- an absent
+            // "enabled" reads as on -- so a binding saved while passthrough was off would turn it
+            // on and run a full pass, taking back the devices the user had just given to Android.
+            payload.put("enabled", current == null || current.optBoolean("enabled", true));
+            var live = rowsOf(current);
+            // The rows added this session only learn their VM here -- a new VM's id is minted by
+            // the save itself -- and they learn it in place, so the snapshot a landed push
+            // leaves behind is what the daemon was sent.
+            bindings.stampVm(vmId);
+            for (var layer : UsbRuleLayer.values()) {
+                var merged = XhciBindingDiff.merge(live.get(layer), bindings.snapshot(layer),
+                    bindings.desired(layer), row -> bindings.owns(row, vmId));
+                payload.put(layer.key, jsonOf(merged));
+            }
+        } catch (JSONException e) {
+            Log.w(TAG, "Failed to build the USB rules payload", e);
+            fail(String.valueOf(e.getMessage()), onFailed);
+            return;
+        }
+        DaemonConnection.getInstance().buildRequest("usb_rules_set")
+            .put("rules", payload)
+            .onResponse(resp -> post(() -> {
+                pushing = false;
+                bindings.markSaved();
+                onDone.run();
+            }))
+            .onUnsuccessful(resp -> post(() -> fail(message(resp), onFailed)))
+            .onError(e -> post(() -> fail(daemonUnavailable(), onFailed)))
+            .invoke();
+    }
+
+    private void fail(@NonNull String message, @NonNull Consumer<String> onFailed) {
+        pushing = false;
+        onFailed.accept(message);
+    }
+
+    @NonNull
+    private String daemonUnavailable() {
+        return parent.getString(R.string.usb_rules_daemon_unavailable);
+    }
+
+    /** The rules as they are now; nothing is loaded twice, so this runs once per edit session. */
+    private void loadUsbRules(@Nullable String vmId) {
+        var controllers = new ArrayList<String>();
+        for (var controller : VMXhciConfig.listControllers(wrap())) {
+            var id = controller.getControllerId();
+            if (!id.isEmpty()) controllers.add(id);
+        }
+        DaemonConnection.getInstance().buildRequest("usb_rules_get")
+            .onResponse(resp -> post(() -> {
+                var rules = resp.optJSONObject("rules");
+                usbEnabled = rules == null || rules.optBoolean("enabled", true);
+                bindings.load(rowsOf(rules), controllers, vmId);
+                if (adapter != null) adapter.refreshBindings();
+            }))
+            // A page that could not read the rules pushes nothing at save: the cards say the
+            // daemon is not there and refuse to add, which is better than a save that would
+            // truncate every rule the user has.
+            .onUnsuccessful(resp -> Log.w(TAG, fmt("usb_rules_get: %s", message(resp))))
+            .onError(e -> Log.w(TAG, "usb_rules_get failed", e))
+            .invoke();
+    }
+
+    /**
+     * The master switch alone, for a tab that is being shown again: the rules page may have been
+     * visited in between. Nothing else of the response is used -- the rows on this page are the
+     * ones the user has been editing, and a re-read would throw them away.
+     */
+    private void refreshUsbEnabled() {
+        DaemonConnection.getInstance().buildRequest("usb_rules_get")
+            .onResponse(resp -> post(() -> {
+                var rules = resp.optJSONObject("rules");
+                boolean enabled = rules == null || rules.optBoolean("enabled", true);
+                if (enabled == usbEnabled) return;
+                usbEnabled = enabled;
+                if (adapter != null) adapter.refreshBindings();
+            }))
+            .onUnsuccessful(resp -> Log.w(TAG, fmt("usb_rules_get: %s", message(resp))))
+            .onError(e -> Log.w(TAG, "usb_rules_get failed", e))
+            .invoke();
+    }
+
+    private void loadHostDevices() {
+        DaemonConnection.getInstance().buildRequest("usb_host_list")
+            .onResponse(resp -> post(() -> {
+                hostDevices.clear();
+                hostDevices.addAll(UsbHostDeviceInfo.fromArray(resp.optJSONArray("devices")));
+                if (adapter != null) adapter.refreshBindings();
+            }))
+            .onUnsuccessful(resp -> Log.w(TAG, fmt("usb_host_list: %s", message(resp))))
+            .onError(e -> Log.w(TAG, "usb_host_list failed", e))
+            .invoke();
+    }
+
+    /** Every layer's rules, in the wire order the daemon sent them. */
+    @NonNull
+    private static Map<UsbRuleLayer, List<Row>> rowsOf(@Nullable JSONObject rules) {
+        var out = new EnumMap<UsbRuleLayer, List<Row>>(UsbRuleLayer.class);
+        for (var layer : UsbRuleLayer.values()) {
+            var rows = new ArrayList<Row>();
+            var arr = rules == null ? null : rules.optJSONArray(layer.key);
+            for (int i = 0; arr != null && i < arr.length(); i++) {
+                var obj = arr.optJSONObject(i);
+                // An entry that is not an object is one the daemon would refuse anyway; keeping
+                // it would only put the refusal on this page's save.
+                if (obj != null) rows.add(new Row(text(obj, "id"), text(obj, "port"),
+                    text(obj, "vm"), text(obj, "controller"), targetOf(obj)));
+            }
+            out.put(layer, rows);
+        }
+        return out;
+    }
+
+    /**
+     * What a rule does with what it matches. A row carrying no target is one written before
+     * there was a target to write -- the dev phone's own file -- and its vm is the whole of what
+     * it said, which is how the daemon reads it too.
+     */
+    @NonNull
+    private static String targetOf(@NonNull JSONObject obj) {
+        var target = text(obj, "target");
+        if (target != null) return target;
+        return text(obj, "vm") == null ? "host" : XhciBindingDiff.TARGET_VM;
+    }
+
+    /** A string field, where an absent key, a JSON null and "" all read as null. */
+    @Nullable
+    private static String text(@NonNull JSONObject obj, @NonNull String key) {
+        if (!obj.has(key) || obj.isNull(key)) return null;
+        var value = obj.optString(key, "");
+        return value.isEmpty() ? null : value;
+    }
+
+    /** The wire form: a field the rule does not carry is left out, which reads back as null. */
+    @NonNull
+    private static JSONArray jsonOf(@NonNull List<Row> rows) throws JSONException {
+        var arr = new JSONArray();
+        for (var row : rows) {
+            var obj = new JSONObject();
+            if (row.id != null) obj.put("id", row.id);
+            if (row.port != null) obj.put("port", row.port);
+            if (row.vm != null) obj.put("vm", row.vm);
+            if (row.controller != null) obj.put("controller", row.controller);
+            // Always written, the way the daemon writes it: a row this page is only passing
+            // through says what it always said, and a reader that had to infer the outcome from
+            // the other fields would be a second answer to a question this key answers.
+            obj.put("target", row.target);
+            arr.put(obj);
+        }
+        return arr;
+    }
+
+    @NonNull
+    private String message(@NonNull JSONObject resp) {
+        var text = resp.optString("message", "");
+        return text.isEmpty() ? parent.getString(R.string.usb_rules_request_failed) : text;
+    }
+
+    /** Runs on the main thread, unless the editor is already going away. */
+    private void post(@NonNull Runnable task) {
+        mainHandler.post(() -> {
+            if (parent.isFinishing() || parent.isDestroyed()) return;
+            task.run();
+        });
     }
 
     /** The unsaved rows, shaped like a VM config so {@link VMPeripheralConfig} can read them. */
     @NonNull
     private DataItem wrap() {
         var wrapper = DataItem.newObject();
-        wrapper.set("peripherals", requireNonNull(listPeripherals.getItems()));
+        wrapper.set(VMXhciConfig.KEY_PERIPHERALS, requireNonNull(listPeripherals.getItems()));
         return wrapper;
     }
 }
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/peripheral/VMPeripheralEditAdapter.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/peripheral/VMPeripheralEditAdapter.java
index bb1b71c47..95a97b345 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/peripheral/VMPeripheralEditAdapter.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/peripheral/VMPeripheralEditAdapter.java
@@ -37,8 +37,15 @@
 import cn.classfun.droidvm.lib.store.vm.SoundMode;
 import cn.classfun.droidvm.lib.store.vm.SoundPurpose;
 import cn.classfun.droidvm.lib.store.vm.SoundUnderrun;
+import cn.classfun.droidvm.lib.store.vm.VMBackend;
 import cn.classfun.droidvm.lib.store.vm.VMPeripheralConfig;
+import cn.classfun.droidvm.lib.store.vm.VMXhciConfig;
 import cn.classfun.droidvm.lib.ui.MenuDialogBuilder;
+import cn.classfun.droidvm.ui.usb.UsbHostDeviceInfo;
+import cn.classfun.droidvm.ui.usb.UsbRuleLayer;
+import cn.classfun.droidvm.ui.usb.UsbRuleEditDialog;
+import cn.classfun.droidvm.ui.usb.UsbRuleZoneDialog;
+import cn.classfun.droidvm.ui.vm.edit.peripheral.XhciBindingDiff.Row;
 import cn.classfun.droidvm.ui.widgets.container.CardItemAdapter;
 
 /**
@@ -59,6 +66,33 @@ public final class VMPeripheralEditAdapter extends CardItemAdapter<VMPeripheralE
      */
     private static final int MAX_PER_DIRECTION = 4;
 
+    /**
+     * What an xHCI card needs and its row cannot hold: the bindings, which are not VM config at
+     * all but a view of the app-global attach rules; the host devices they are described
+     * against; the backend, which decides whether the crosvm limits apply; and the minting of a
+     * controller id, which needs the VM-wide counter the tab carries.
+     */
+    interface XhciHost {
+        @NonNull
+        XhciBindingStore bindings();
+
+        @NonNull
+        List<UsbHostDeviceInfo> hostDevices();
+
+        @NonNull
+        VMBackend backend();
+
+        /**
+         * Whether the app-wide master switch is on. Off means the rows below are saved and then
+         * ignored at boot, which is worth saying on the card that shows them.
+         */
+        boolean usbPassthroughEnabled();
+
+        /** A new controller entry, id minted and counter bumped. */
+        @NonNull
+        DataItem createController();
+    }
+
     /** Asks for RECORD_AUDIO before a capture-capable device is added; set by the tab. */
     private Consumer<Runnable> micPermissionGate;
     /** Asks for CAMERA before a camera device is added, and drops the add if refused. */
@@ -67,6 +101,12 @@ public final class VMPeripheralEditAdapter extends CardItemAdapter<VMPeripheralE
     // time it scrolls past. Dropped by refreshHostDevices().
     private List<HostAudioDevices.Entry> outputCache;
     private List<HostAudioDevices.Entry> inputCache;
+    private XhciHost xhciHost;
+    // True while onBindViewHolder is programmatically setting view values. A port picker fires
+    // its value-changed listener from inside configure(), and on a recycled row that is still
+    // the PREVIOUS bind's listener -- which would write this row's port count into whatever the
+    // last one was. Same idiom as VMSerialEditAdapter.
+    private boolean updatingViews = false;
 
     public VMPeripheralEditAdapter(@NonNull Context context) {
         super(context);
@@ -80,6 +120,10 @@ public void setCameraPermissionGate(@Nullable Consumer<Runnable> gate) {
         this.cameraPermissionGate = gate;
     }
 
+    void setXhciHost(@Nullable XhciHost host) {
+        this.xhciHost = host;
+    }
+
     @NonNull
     @Override
     protected VMPeripheralEditViewHolder createViewHolderInstance(@NonNull View view) {
@@ -118,6 +162,16 @@ private void addPeripheral(@NonNull PeripheralType type) {
                 appendItem(VMPeripheralConfig.createDefaultVirtioSound().item);
                 return;
             }
+            if (type == PeripheralType.XHCI_USB) {
+                // Through the tab, because minting the id is also what moves the VM's counter
+                // past it: a controller that handed itself one could hand out the same id twice.
+                if (xhciHost == null) return;
+                var entry = xhciHost.createController();
+                xhciHost.bindings().addController(
+                    new VMPeripheralConfig(entry).getControllerId());
+                appendItem(entry);
+                return;
+            }
             var config = new VMPeripheralConfig(DataItem.newObject());
             config.setType(type);
             appendItem(config.item);
@@ -130,9 +184,10 @@ private void addPeripheral(@NonNull PeripheralType type) {
             else add.run();
             return;
         }
-        // Anything that can capture needs the host mic permission asked for, and both kinds now
-        // start with a microphone on them.
-        if (micPermissionGate != null) {
+        // Anything that can capture needs the host mic permission asked for, and the two sound
+        // kinds both start with a microphone on them. A USB controller captures nothing itself
+        // -- what hangs off it is the host's device, already the host's to grant.
+        if (type != PeripheralType.XHCI_USB && micPermissionGate != null) {
             micPermissionGate.accept(add);
             return;
         }
@@ -151,6 +206,7 @@ public void onBindViewHolder(@NonNull VMPeripheralEditViewHolder holder, int pos
         holder.groupIntelHda.setVisibility(type == PeripheralType.INTEL_HDA ? VISIBLE : GONE);
         holder.groupVirtioCamera.setVisibility(
             type == PeripheralType.VIRTIO_CAMERA ? VISIBLE : GONE);
+        holder.groupXhci.setVisibility(type == PeripheralType.XHCI_USB ? VISIBLE : GONE);
 
         switch (type) {
             case VIRTIO_SOUND:
@@ -162,12 +218,20 @@ public void onBindViewHolder(@NonNull VMPeripheralEditViewHolder holder, int pos
             case VIRTIO_CAMERA:
                 bindVirtioCamera(holder, peripheral);
                 break;
+            case XHCI_USB:
+                bindXhci(holder, peripheral, position);
+                break;
         }
 
         holder.btnDelete.setOnClickListener(v -> {
             int pos = holder.getBindingAdapterPosition();
-            if (pos != RecyclerView.NO_POSITION)
-                removeItem(pos);
+            if (pos == RecyclerView.NO_POSITION) return;
+            // A controller's bindings go with it: they name a controller that will not exist
+            // after this save, and nothing else can reach them once the card is gone.
+            var gone = new VMPeripheralConfig(items.get(pos));
+            if (gone.getType() == PeripheralType.XHCI_USB && xhciHost != null)
+                xhciHost.bindings().removeController(gone.getControllerId());
+            removeItem(pos);
         });
     }
 
@@ -354,6 +418,223 @@ private void bindVirtioCamera(
         });
     }
 
+    /**
+     * The controller card: which controller it is, what the rules bind to it, and how many root
+     * ports it offers.
+     *
+     * <p>The four zones are not this VM's config. They are the app-global attach rules seen
+     * through this controller, loaded once when the editor opened and pushed as a diff when it
+     * saves -- so the rows survive the global rules page being open at the same time. Everything
+     * here edits the working copy the tab holds; nothing reaches the daemon until save.</p>
+     */
+    private void bindXhci(
+        @NonNull VMPeripheralEditViewHolder holder, @NonNull VMPeripheralConfig peripheral,
+        int position
+    ) {
+        // The card's shared warning line belongs to the host-endpoint cards, and a recycled row
+        // would otherwise arrive here still showing the last one's.
+        holder.tvWarning.setVisibility(GONE);
+        var controllerId = peripheral.getControllerId();
+        // Only worth saying when there is more than one: that is the only case where a rule
+        // below could have meant the other card.
+        boolean named = !controllerId.isEmpty() && countControllers() > 1;
+        holder.tvXhciId.setVisibility(named ? VISIBLE : GONE);
+        holder.tvXhciId.setText(controllerId);
+
+        boolean loaded = xhciHost != null && xhciHost.bindings().isLoaded();
+        holder.tvXhciNote.setText(loaded
+            ? R.string.edit_vm_xhci_rules_note : R.string.usb_rules_daemon_unavailable);
+        // Only once the rules were actually read: a page that never got an answer does not know
+        // the switch is off, and saying so would be a warning made up out of a failed request.
+        holder.tvXhciPassthroughOff.setVisibility(
+            loaded && !xhciHost.usbPassthroughEnabled() ? VISIBLE : GONE);
+        // Nothing to pick from and nowhere to save it to: an unreachable daemon leaves the zones
+        // empty rather than letting the page write rules it cannot push.
+        holder.btnXhciAdd.setEnabled(loaded && !controllerId.isEmpty());
+
+        int exactRows = bindZone(holder, controllerId, UsbRuleLayer.EXACT, holder.xhciZoneExact);
+        int portRows = bindZone(holder, controllerId, UsbRuleLayer.PORT, holder.xhciZonePort);
+        int deviceRows =
+            bindZone(holder, controllerId, UsbRuleLayer.DEVICE, holder.xhciZoneDevice);
+        int anyRows = bindZone(holder, controllerId, UsbRuleLayer.ANY, holder.xhciZoneAny);
+        // A rule separates two layers that both have rows. Anything else -- a line above the
+        // first row, below the last, or between two empty layers -- would divide nothing.
+        holder.xhciDividerExact.setVisibility(
+            exactRows > 0 && portRows + deviceRows + anyRows > 0 ? VISIBLE : GONE);
+        holder.xhciDividerPort.setVisibility(
+            portRows > 0 && deviceRows + anyRows > 0 ? VISIBLE : GONE);
+        holder.xhciDividerDevice.setVisibility(
+            deviceRows > 0 && anyRows > 0 ? VISIBLE : GONE);
+
+        updatingViews = true;
+        try {
+            holder.btnUsb2Ports.configure(
+                XhciPortCount.class, XhciPortCount.of(peripheral.getUsb2Ports()));
+            holder.btnUsb3Ports.configure(
+                XhciPortCount.class, XhciPortCount.of(peripheral.getUsb3Ports()));
+        } finally {
+            updatingViews = false;
+        }
+        holder.btnUsb2Ports.setOnValueChangedListener(
+            (oldVal, newVal) -> onPortsPicked(holder, false, (XhciPortCount) newVal));
+        holder.btnUsb3Ports.setOnValueChangedListener(
+            (oldVal, newVal) -> onPortsPicked(holder, true, (XhciPortCount) newVal));
+
+        holder.btnXhciAdd.setOnClickListener(v -> {
+            int pos = holder.getBindingAdapterPosition();
+            if (pos == RecyclerView.NO_POSITION || xhciHost == null) return;
+            var id = new VMPeripheralConfig(items.get(pos)).getControllerId();
+            if (id.isEmpty()) return;
+            var store = xhciHost.bindings();
+            // The zone, then the same edit dialog the rules page opens. No target is asked for
+            // afterwards: a rule bound to this card has exactly one place to send a device, and
+            // it is the controller the card is.
+            UsbRuleZoneDialog.show(context, xhciHost.hostDevices(),
+                (layer, deviceId, port) -> {
+                    store.add(id, layer, new Row(deviceId, port, null, id));
+                    notifyItemChangedSafe(holder.getBindingAdapterPosition());
+                });
+        });
+
+        updateXhciWarnings(holder, peripheral, position);
+    }
+
+    /**
+     * Rebuilds one zone's rows, the way a sound card rebuilds a direction.
+     *
+     * <p>A row is identified by its place in the zone rather than by what it says: two identical
+     * rules in one layer are two rules, and removing one has to remove exactly one.</p>
+     *
+     * @return how many rows the zone ended up with, which is what decides the rules around it
+     */
+    private int bindZone(
+        @NonNull VMPeripheralEditViewHolder holder, @NonNull String controllerId,
+        @NonNull UsbRuleLayer layer, @NonNull LinearLayout container
+    ) {
+        container.removeAllViews();
+        if (xhciHost == null || controllerId.isEmpty()) return 0;
+        var store = xhciHost.bindings();
+        var rows = store.rows(controllerId, layer);
+        var inflater = LayoutInflater.from(container.getContext());
+        for (int i = 0; i < rows.size(); i++) {
+            final int index = i;
+            final var row = rows.get(i);
+            var view = inflater.inflate(R.layout.item_xhci_binding, container, false);
+            TextView label = view.findViewById(R.id.tv_xhci_binding_layer);
+            MaterialButton value = view.findViewById(R.id.btn_xhci_binding);
+            MaterialButton remove = view.findViewById(R.id.btn_xhci_binding_remove);
+            // Which layer this rule is in, because the list it sits in no longer says so.
+            label.setText(layer.titleRes);
+            value.setText(rowLabel(layer, row));
+            // Every row, the catch-all one included: it matches everything and so has nothing
+            // to pick, but the dialog is still where deleting a rule lives.
+            value.setOnClickListener(v -> UsbRuleEditDialog.edit(context, layer,
+                xhciHost.hostDevices(), row.id, row.port, new UsbRuleEditDialog.Listener() {
+                    @Override
+                    public void onConfirm(@Nullable String id, @Nullable String port) {
+                        // An edit of the rule, not a new one: it keeps the place it had, which
+                        // inside a zone is its priority.
+                        store.replace(controllerId, layer, index,
+                            row.edited(id, port, controllerId));
+                        notifyItemChangedSafe(holder.getBindingAdapterPosition());
+                    }
+
+                    @Override
+                    public void onDelete() {
+                        store.remove(controllerId, layer, index);
+                        notifyItemChangedSafe(holder.getBindingAdapterPosition());
+                    }
+                }));
+            remove.setOnClickListener(v -> {
+                store.remove(controllerId, layer, index);
+                notifyItemChangedSafe(holder.getBindingAdapterPosition());
+            });
+            container.addView(view);
+        }
+        return rows.size();
+    }
+
+    /** What a bound rule is about, with the layer itself left to the label beside it. */
+    @NonNull
+    private String rowLabel(@NonNull UsbRuleLayer layer, @NonNull Row row) {
+        var id = row.id == null ? "" : row.id;
+        var port = row.port == null ? "" : row.port;
+        switch (layer) {
+            case EXACT:
+                return context.getString(R.string.usb_rules_row_exact_fmt,
+                    port, deviceName(id), id);
+            case PORT:
+                return context.getString(R.string.usb_rules_row_port_fmt, port);
+            case DEVICE:
+                return context.getString(R.string.usb_rules_row_device_fmt,
+                    deviceName(id), id);
+            default:
+                return context.getString(R.string.usb_rules_any_device);
+        }
+    }
+
+    /** The name of the device with this id if it is plugged in now, the id itself if not. */
+    @NonNull
+    private String deviceName(@NonNull String id) {
+        if (xhciHost != null)
+            for (var device : xhciHost.hostDevices())
+                if (device.id.equals(id)) return device.displayName(context);
+        return context.getString(R.string.usb_rules_unknown_device, id);
+    }
+
+    private void onPortsPicked(
+        @NonNull VMPeripheralEditViewHolder holder, boolean usb3, @NonNull XhciPortCount value
+    ) {
+        if (updatingViews) return;
+        int pos = holder.getBindingAdapterPosition();
+        if (pos == RecyclerView.NO_POSITION) return;
+        var peripheral = new VMPeripheralConfig(items.get(pos));
+        // A recycled row's picker can still be carrying the previous bind's listener, and the
+        // row under it may not be a controller at all any more.
+        if (peripheral.getType() != PeripheralType.XHCI_USB) return;
+        if (usb3) peripheral.setUsb3Ports(value.ports());
+        else peripheral.setUsb2Ports(value.ports());
+        // The warning, not the whole row: rebinding here would re-enter configure() and set the
+        // picker from the value it just reported.
+        updateXhciWarnings(holder, peripheral, pos);
+    }
+
+    /**
+     * What this build will make of the card, said in red without refusing anything.
+     *
+     * <p>Both limits are crosvm's, and the backend is a pull rather than a push -- nothing tells
+     * this tab that the picker in the General tab moved. It does not have to: reaching this card
+     * means leaving that tab, and {@code onTabShown} rebinds the list on the way in.</p>
+     */
+    private void updateXhciWarnings(
+        @NonNull VMPeripheralEditViewHolder holder, @NonNull VMPeripheralConfig peripheral,
+        int position
+    ) {
+        boolean crosvm = xhciHost != null && xhciHost.backend() == VMBackend.CROSVM;
+        // The first controller in array order is the one crosvm emulates; the rest are skipped,
+        // which is the same order the backend picks by.
+        holder.tvXhciWarnMulti.setVisibility(
+            crosvm && controllerIndexOf(position) > 0 ? VISIBLE : GONE);
+        boolean odd = peripheral.getUsb2Ports() != VMXhciConfig.DEFAULT_PORTS
+            || peripheral.getUsb3Ports() != VMXhciConfig.DEFAULT_PORTS;
+        holder.tvXhciWarnPorts.setVisibility(crosvm && odd ? VISIBLE : GONE);
+    }
+
+    /** Where this card sits among the controllers alone, ignoring every other kind of row. */
+    private int controllerIndexOf(int position) {
+        int index = 0;
+        for (int i = 0; i < position && i < items.size(); i++)
+            if (new VMPeripheralConfig(items.get(i)).getType() == PeripheralType.XHCI_USB) index++;
+        return index;
+    }
+
+    private int countControllers() {
+        int count = 0;
+        for (int i = 0; i < items.size(); i++)
+            if (new VMPeripheralConfig(items.get(i)).getType() == PeripheralType.XHCI_USB) count++;
+        return count;
+    }
+
     private boolean hasCamera(@NonNull String key) {
         for (var entry : HostCameraDevices.list(context)) {
             if (entry.key.equals(key)) return true;
@@ -585,6 +866,7 @@ private List<HostAudioDevices.Entry> liveDevices(boolean input) {
     }
 
     private void notifyItemChangedSafe(int position) {
+        if (position == RecyclerView.NO_POSITION) return;
         try {
             notifyItemChanged(position);
         } catch (Exception ignored) {
@@ -600,4 +882,13 @@ public void refreshHostDevices() {
         inputCache = null;
         notifyDataSetChanged();
     }
+
+    /**
+     * Rebinds every card because something the tab holds for them changed: the USB rules landed,
+     * or the plugged-in devices the controller rows are described against did.
+     */
+    @SuppressLint("NotifyDataSetChanged")
+    void refreshBindings() {
+        notifyDataSetChanged();
+    }
 }
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/peripheral/VMPeripheralEditViewHolder.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/peripheral/VMPeripheralEditViewHolder.java
index d5f60c58e..25e0d9e54 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/peripheral/VMPeripheralEditViewHolder.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/peripheral/VMPeripheralEditViewHolder.java
@@ -30,6 +30,25 @@ public final class VMPeripheralEditViewHolder extends RecyclerView.ViewHolder {
     final MaterialButton btnAddEndpoint;
     final PickerButtonWidget btnBuffer;
     final PickerButtonWidget btnUnderrun;
+    // xHCI USB controller
+    final View groupXhci;
+    final TextView tvXhciId;
+    final TextView tvXhciNote;
+    final TextView tvXhciPassthroughOff;
+    final LinearLayout xhciZoneExact;
+    final LinearLayout xhciZonePort;
+    final LinearLayout xhciZoneDevice;
+    final LinearLayout xhciZoneAny;
+    // The rule between two layers, named after the zone above it. Shown only where a layer with
+    // rows is followed by another one that has some, so an empty layer draws no line.
+    final View xhciDividerExact;
+    final View xhciDividerPort;
+    final View xhciDividerDevice;
+    final MaterialButton btnXhciAdd;
+    final PickerButtonWidget btnUsb2Ports;
+    final PickerButtonWidget btnUsb3Ports;
+    final TextView tvXhciWarnMulti;
+    final TextView tvXhciWarnPorts;
     // intel hda
     final View groupIntelHda;
     final View groupVirtioCamera;
@@ -50,6 +69,22 @@ public final class VMPeripheralEditViewHolder extends RecyclerView.ViewHolder {
         btnAddEndpoint = itemView.findViewById(R.id.btn_sound_endpoint_add);
         btnBuffer = itemView.findViewById(R.id.btn_sound_buffer);
         btnUnderrun = itemView.findViewById(R.id.btn_sound_underrun);
+        groupXhci = itemView.findViewById(R.id.group_xhci);
+        tvXhciId = itemView.findViewById(R.id.tv_xhci_id);
+        tvXhciNote = itemView.findViewById(R.id.tv_xhci_note);
+        tvXhciPassthroughOff = itemView.findViewById(R.id.tv_xhci_passthrough_off);
+        xhciZoneExact = itemView.findViewById(R.id.xhci_zone_exact);
+        xhciZonePort = itemView.findViewById(R.id.xhci_zone_port);
+        xhciZoneDevice = itemView.findViewById(R.id.xhci_zone_device);
+        xhciZoneAny = itemView.findViewById(R.id.xhci_zone_any);
+        xhciDividerExact = itemView.findViewById(R.id.xhci_divider_exact);
+        xhciDividerPort = itemView.findViewById(R.id.xhci_divider_port);
+        xhciDividerDevice = itemView.findViewById(R.id.xhci_divider_device);
+        btnXhciAdd = itemView.findViewById(R.id.btn_xhci_device_add);
+        btnUsb2Ports = itemView.findViewById(R.id.btn_xhci_usb2_ports);
+        btnUsb3Ports = itemView.findViewById(R.id.btn_xhci_usb3_ports);
+        tvXhciWarnMulti = itemView.findViewById(R.id.tv_xhci_warn_multi);
+        tvXhciWarnPorts = itemView.findViewById(R.id.tv_xhci_warn_ports);
         groupIntelHda = itemView.findViewById(R.id.group_intel_hda);
         groupVirtioCamera = itemView.findViewById(R.id.group_virtio_camera);
         btnCameraDevice = itemView.findViewById(R.id.btn_camera_device);
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/peripheral/XhciBindingDiff.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/peripheral/XhciBindingDiff.java
new file mode 100644
index 000000000..c6ae472aa
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/peripheral/XhciBindingDiff.java
@@ -0,0 +1,211 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
+package cn.classfun.droidvm.ui.vm.edit.peripheral;
+
+import androidx.annotation.NonNull;
+import androidx.annotation.Nullable;
+
+import java.util.ArrayList;
+import java.util.List;
+import java.util.Objects;
+import java.util.function.Predicate;
+
+/**
+ * How one edit of an xHCI card's four zones is folded back into the app-global attach rules.
+ *
+ * <p>The rules file is not this page's to own: the global rules page edits the same object, and
+ * both read-modify-write the whole of it. So the card does not push the list it is showing --
+ * it pushes what changed. Rows it never spoke for keep their place and their order, rows it
+ * deleted are taken out wherever they sit, a row whose value was re-picked stays where it was,
+ * and rows it added go on the head of their layer.</p>
+ *
+ * <p>The head, not the tail: order inside a layer is priority, and a layer usually ends in the
+ * rule that catches everything left. A binding appended behind one of those would never be
+ * reached, which reads as "why does this device not attach"; in front of it, it does what the
+ * user just asked for and the rules page is still where a different order is arranged.</p>
+ *
+ * <p>Three-way rather than "replace all of mine": a rule someone added to this controller while
+ * the editor was open is mine by the predicate but is not in the snapshot, so it survives. That
+ * is the difference between a page that edits the rules and one that owns them.</p>
+ *
+ * <p>Deliberately free of org.json and of anything Android: the JSON edge is inert under the
+ * stubbed android.jar of a unit test, and this is the part worth testing.</p>
+ */
+public final class XhciBindingDiff {
+    /** The target every row a card mints has; see {@link Row#target}. */
+    public static final String TARGET_VM = "vm";
+
+    /**
+     * One rule in one layer, in the wire shape.
+     *
+     * <p>{@code controller} is kept verbatim, null included: null means the target VM's first
+     * controller, which is what every rule written before controllers existed says, and rewriting
+     * it on the way through would change what an untouched rule means.</p>
+     *
+     * <p>{@code target} is kept verbatim for the same reason and a stronger one: a save rebuilds
+     * every layer, rows this page never spoke for included, so a target it dropped on the way in
+     * would be a target it rewrote on the way out -- a sink rule quietly turned into a host rule,
+     * and the device it was hiding handed back to Android. A token this build has no word for
+     * goes back out as it came in.</p>
+     */
+    public static final class Row {
+        @Nullable
+        public final String id;
+        @Nullable
+        public final String port;
+        @Nullable
+        public final String vm;
+        @Nullable
+        public final String controller;
+        /** What the rule does with what it matches: {@code host}, {@code vm} or {@code sink}. */
+        @NonNull
+        public final String target;
+        /**
+         * What makes this row the same rule as the one it was edited from.
+         *
+         * <p>Rows are compared by their fields everywhere else, deliberately: two identical
+         * rules in one layer are two rules. But re-picking a row's device is not "delete this
+         * rule and write another" -- the rule kept its place in the list the user was looking
+         * at, and that place is its priority. Never compared, never written to the wire.</p>
+         */
+        private final Object identity;
+
+        /**
+         * A row this page made, which is by definition a binding to one of its own controllers:
+         * a card says "this device goes to this VM's xHCI" and has no way of saying anything
+         * else. Rows read from the wire keep whatever target they carried.
+         */
+        public Row(@Nullable String id, @Nullable String port, @Nullable String vm,
+                   @Nullable String controller) {
+            this(id, port, vm, controller, TARGET_VM, new Object());
+        }
+
+        public Row(@Nullable String id, @Nullable String port, @Nullable String vm,
+                   @Nullable String controller, @NonNull String target) {
+            this(id, port, vm, controller, target, new Object());
+        }
+
+        private Row(@Nullable String id, @Nullable String port, @Nullable String vm,
+                    @Nullable String controller, @NonNull String target,
+                    @NonNull Object identity) {
+            this.id = id;
+            this.port = port;
+            this.vm = vm;
+            this.controller = controller;
+            this.target = target;
+            this.identity = identity;
+        }
+
+        /**
+         * The same row with its target VM filled in.
+         *
+         * <p>A row added while editing carries no VM: a new VM's id is minted by the save
+         * itself, so there is nothing to carry until the config has been written.</p>
+         */
+        @NonNull
+        public Row withVm(@NonNull String vmId) {
+            return vm != null ? this : new Row(id, port, vmId, controller, target, identity);
+        }
+
+        /**
+         * The same row pointed at something else: the picker a row's value button reopens edits
+         * the rule, it does not replace it, so the result stays the row it was.
+         *
+         * <p>The controller is written explicitly, whatever the row carried before: a rule
+         * touched through a card names the card it was touched on, so deleting that controller
+         * leaves the rule visibly dangling instead of quietly moving it to another one.</p>
+         */
+        @NonNull
+        public Row edited(@Nullable String newId, @Nullable String newPort,
+                          @Nullable String newController) {
+            return new Row(newId, newPort, vm, newController, target, identity);
+        }
+
+        /** Whether [other] is this same row before it was edited; see {@link #identity}. */
+        public boolean isEditOf(@NonNull Row other) {
+            return identity == other.identity;
+        }
+
+        /** Field-wise equality, null-safe. Rows are compared, never identified: two identical
+         *  rules in one layer are two rules, and deleting one must leave the other. */
+        public boolean sameAs(@NonNull Row other) {
+            return Objects.equals(id, other.id)
+                && Objects.equals(port, other.port)
+                && Objects.equals(vm, other.vm)
+                && Objects.equals(controller, other.controller)
+                && target.equals(other.target);
+        }
+    }
+
+    private XhciBindingDiff() {
+    }
+
+    /**
+     * One layer's list after this page's edits.
+     *
+     * @param current  the layer as the daemon holds it right now, re-read at save time
+     * @param snapshot the rows of this layer that belonged to this page when it opened
+     * @param desired  the rows of this layer that belong to it now
+     * @param mine     whether a row is one this page speaks for -- this VM, one of the
+     *                 controllers it has seen. Rows it does not speak for are never touched,
+     *                 even when they look exactly like one it deleted.
+     */
+    @NonNull
+    public static List<Row> merge(@NonNull List<Row> current, @NonNull List<Row> snapshot,
+                                  @NonNull List<Row> desired, @NonNull Predicate<Row> mine) {
+        // What the page removed, and what it added, as multisets: the same rule twice in a layer
+        // is two rows, and an edit that removes one of them removes exactly one.
+        var added = new ArrayList<>(desired);
+        var deleted = new ArrayList<Row>();
+        for (var row : snapshot) {
+            int at = indexOfSame(added, row);
+            if (at >= 0) added.remove(at);
+            else deleted.add(row);
+        }
+        var out = new ArrayList<Row>(current.size() + added.size());
+        for (var row : current) {
+            if (mine.test(row)) {
+                int at = indexOfSame(deleted, row);
+                if (at >= 0) {
+                    // A row that was edited rather than removed takes the place of the one it
+                    // was edited from; anything else the page deleted simply goes.
+                    var edit = takeEditOf(added, deleted.remove(at));
+                    if (edit != null) out.add(edit);
+                    continue;
+                }
+            }
+            out.add(row);
+        }
+        // At the head, in the order the page made them: a layer usually ends in a rule that
+        // takes everything left, and a binding written behind one of those never fires.
+        out.addAll(0, added);
+        return out;
+    }
+
+    /** Whether the two lists hold the same rows, in any order; what "nothing to push" means. */
+    public static boolean sameRows(@NonNull List<Row> a, @NonNull List<Row> b) {
+        if (a.size() != b.size()) return false;
+        var rest = new ArrayList<>(b);
+        for (var row : a) {
+            int at = indexOfSame(rest, row);
+            if (at < 0) return false;
+            rest.remove(at);
+        }
+        return true;
+    }
+
+    /** The pending addition that is [row] after an edit of its value, taken out of [added]. */
+    @Nullable
+    private static Row takeEditOf(@NonNull List<Row> added, @NonNull Row row) {
+        for (int i = 0; i < added.size(); i++)
+            if (added.get(i).isEditOf(row)) return added.remove(i);
+        return null;
+    }
+
+    private static int indexOfSame(@NonNull List<Row> rows, @NonNull Row row) {
+        for (int i = 0; i < rows.size(); i++)
+            if (rows.get(i).sameAs(row)) return i;
+        return -1;
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/peripheral/XhciBindingStore.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/peripheral/XhciBindingStore.java
new file mode 100644
index 000000000..d1722c0ed
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/peripheral/XhciBindingStore.java
@@ -0,0 +1,201 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
+package cn.classfun.droidvm.ui.vm.edit.peripheral;
+
+import androidx.annotation.NonNull;
+import androidx.annotation.Nullable;
+
+import java.util.ArrayList;
+import java.util.Collections;
+import java.util.EnumMap;
+import java.util.LinkedHashMap;
+import java.util.LinkedHashSet;
+import java.util.List;
+import java.util.Map;
+import java.util.Set;
+
+import cn.classfun.droidvm.ui.usb.UsbRuleLayer;
+import cn.classfun.droidvm.ui.vm.edit.peripheral.XhciBindingDiff.Row;
+
+/**
+ * The attach rules of one edit session, grouped the way the cards show them: per controller, per
+ * layer.
+ *
+ * <p>Two copies are kept. The snapshot is what the daemon held when the page opened; the working
+ * copy is what the zones show now. The difference between them is the whole of what a save
+ * pushes -- see {@link XhciBindingDiff} -- which is why the snapshot is not simply re-read: it
+ * is the evidence of what this page changed, and anything read later would have someone else's
+ * edits folded into it.</p>
+ *
+ * <p>Which controller a rule belongs to is decided once, at load: a rule that names none means
+ * the VM's first, and re-resolving that later would silently move rows around as cards are
+ * added and deleted. The row itself keeps its wire fields untouched.</p>
+ */
+final class XhciBindingStore {
+    private final Map<String, EnumMap<UsbRuleLayer, List<Row>>> snapshot = new LinkedHashMap<>();
+    private final Map<String, EnumMap<UsbRuleLayer, List<Row>>> working = new LinkedHashMap<>();
+    /**
+     * Every controller id this page has spoken for, deleted ones included.
+     *
+     * <p>A card the user removed takes its rules with it, and the merge can only delete a rule
+     * it recognises as this page's -- so an id stays owned after its card is gone.</p>
+     */
+    private final Set<String> owned = new LinkedHashSet<>();
+    private boolean loaded = false;
+
+    /**
+     * Takes the rules the daemon holds and keeps the ones this VM's controllers own.
+     *
+     * @param rules       every layer's rules, as read
+     * @param controllers this VM's controller ids in array order; the first is what a rule that
+     *                    names none is pointing at
+     * @param vmId        this VM, or null for one that does not exist yet -- then nothing is
+     *                    this page's, and every row it shows is an addition
+     */
+    void load(@NonNull Map<UsbRuleLayer, List<Row>> rules, @NonNull List<String> controllers,
+              @Nullable String vmId) {
+        snapshot.clear();
+        working.clear();
+        owned.clear();
+        owned.addAll(controllers);
+        for (var id : controllers) {
+            snapshot.put(id, emptyLayers());
+            working.put(id, emptyLayers());
+        }
+        var first = controllers.isEmpty() ? null : controllers.get(0);
+        for (var layer : UsbRuleLayer.values()) {
+            var rows = rules.get(layer);
+            if (rows == null) continue;
+            for (var row : rows) {
+                if (vmId == null || row.vm == null || !vmId.equals(row.vm)) continue;
+                var owner = row.controller == null ? first : row.controller;
+                if (owner == null || !snapshot.containsKey(owner)) continue;
+                snapshot.get(owner).get(layer).add(row);
+                working.get(owner).get(layer).add(row);
+            }
+        }
+        loaded = true;
+    }
+
+    /** Whether the rules were read at all; nothing is pushed at save until they were. */
+    boolean isLoaded() {
+        return loaded;
+    }
+
+    /** A controller added during this session: its zones start empty and it is ours from now. */
+    void addController(@NonNull String controllerId) {
+        owned.add(controllerId);
+        working.putIfAbsent(controllerId, emptyLayers());
+    }
+
+    /**
+     * A card the user deleted. Its rows go with it -- they point at a controller that will not
+     * exist after this save, and the merge deletes them because the id stays owned.
+     */
+    void removeController(@NonNull String controllerId) {
+        working.remove(controllerId);
+    }
+
+    /** One zone's rows, in the order they are shown. */
+    @NonNull
+    List<Row> rows(@NonNull String controllerId, @NonNull UsbRuleLayer layer) {
+        var layers = working.get(controllerId);
+        if (layers == null) return Collections.emptyList();
+        return Collections.unmodifiableList(layers.get(layer));
+    }
+
+    void add(@NonNull String controllerId, @NonNull UsbRuleLayer layer, @NonNull Row row) {
+        addController(controllerId);
+        // At the head, which is where the merge will put it in the file: a layer usually ends in
+        // the rule that takes everything left, a sink most of all, and a row shown behind one of
+        // those would read as a binding that never fires.
+        working.get(controllerId).get(layer).add(0, row);
+    }
+
+    void replace(@NonNull String controllerId, @NonNull UsbRuleLayer layer, int index,
+                 @NonNull Row row) {
+        var rows = mutableRows(controllerId, layer);
+        if (rows == null || index < 0 || index >= rows.size()) return;
+        rows.set(index, row);
+    }
+
+    void remove(@NonNull String controllerId, @NonNull UsbRuleLayer layer, int index) {
+        var rows = mutableRows(controllerId, layer);
+        if (rows == null || index < 0 || index >= rows.size()) return;
+        rows.remove(index);
+    }
+
+    /**
+     * Names [vmId] on every row that carries no VM yet: the rows the user added this session.
+     *
+     * <p>Done to the working copy rather than to a copy of it on the way out, so that what the
+     * next snapshot holds is what the daemon was actually sent. A row snapshotted without its VM
+     * could not be matched against the daemon's copy of itself afterwards, and deleting it later
+     * in the same session would quietly do nothing.</p>
+     */
+    void stampVm(@NonNull String vmId) {
+        for (var layers : working.values())
+            for (var rows : layers.values())
+                for (int i = 0; i < rows.size(); i++) rows.set(i, rows.get(i).withVm(vmId));
+    }
+
+    /** The rows of one layer as the page would have them now, across every card. */
+    @NonNull
+    List<Row> desired(@NonNull UsbRuleLayer layer) {
+        return flatten(working, layer);
+    }
+
+    /** The rows of one layer that were this page's when it opened. */
+    @NonNull
+    List<Row> snapshot(@NonNull UsbRuleLayer layer) {
+        return flatten(snapshot, layer);
+    }
+
+    /** Whether a rule the daemon holds is one this page speaks for; the merge's predicate. */
+    boolean owns(@NonNull Row row, @NonNull String vmId) {
+        if (row.vm == null || !vmId.equals(row.vm)) return false;
+        // A rule that names no controller means the VM's first one, and the page shows the
+        // first one -- so it speaks for it whichever card that turned out to be.
+        return row.controller == null || owned.contains(row.controller);
+    }
+
+    /** Whether anything changed since the page opened; what decides if a save pushes at all. */
+    boolean isDirty() {
+        for (var layer : UsbRuleLayer.values())
+            if (!XhciBindingDiff.sameRows(snapshot(layer), desired(layer))) return true;
+        return false;
+    }
+
+    /** The push landed: what the page now shows is what the daemon holds. */
+    void markSaved() {
+        snapshot.clear();
+        for (var entry : working.entrySet()) {
+            var layers = emptyLayers();
+            for (var layer : UsbRuleLayer.values())
+                layers.get(layer).addAll(entry.getValue().get(layer));
+            snapshot.put(entry.getKey(), layers);
+        }
+    }
+
+    @Nullable
+    private List<Row> mutableRows(@NonNull String controllerId, @NonNull UsbRuleLayer layer) {
+        var layers = working.get(controllerId);
+        return layers == null ? null : layers.get(layer);
+    }
+
+    @NonNull
+    private static List<Row> flatten(@NonNull Map<String, EnumMap<UsbRuleLayer, List<Row>>> from,
+                                     @NonNull UsbRuleLayer layer) {
+        var out = new ArrayList<Row>();
+        for (var layers : from.values()) out.addAll(layers.get(layer));
+        return out;
+    }
+
+    @NonNull
+    private static EnumMap<UsbRuleLayer, List<Row>> emptyLayers() {
+        var layers = new EnumMap<UsbRuleLayer, List<Row>>(UsbRuleLayer.class);
+        for (var layer : UsbRuleLayer.values()) layers.put(layer, new ArrayList<>());
+        return layers;
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/peripheral/XhciPortCount.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/peripheral/XhciPortCount.java
new file mode 100644
index 000000000..e59085614
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/peripheral/XhciPortCount.java
@@ -0,0 +1,46 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
+package cn.classfun.droidvm.ui.vm.edit.peripheral;
+
+import android.content.Context;
+
+import androidx.annotation.NonNull;
+
+import cn.classfun.droidvm.R;
+import cn.classfun.droidvm.lib.store.enums.StringEnum;
+import cn.classfun.droidvm.lib.store.vm.VMXhciConfig;
+
+/**
+ * How many root ports one xHCI controller offers, as the picker's vocabulary.
+ *
+ * <p>An enum only because {@link cn.classfun.droidvm.ui.widgets.tools.PickerButtonWidget} takes
+ * one, and the card's bottom row is the VirtIO Sound row -- the same widget, the same metrics.
+ * Nothing stores it: {@link VMXhciConfig#MIN_PORTS}..{@link VMXhciConfig#MAX_PORTS} is a number
+ * in the config, and this is only how the number is picked. So the constants carry the count
+ * rather than a name that would then have to mean one.</p>
+ *
+ * <p>No value is ever refused, on any backend: crosvm ignores anything but 8, and the card says
+ * so in red instead. Refusing here is what {@code setDisabledItems} would do, and it would also
+ * move the stored value -- the opposite of "pick it, and be told what the VM will make of it".</p>
+ */
+public enum XhciPortCount implements StringEnum {
+    P0, P1, P2, P3, P4, P5, P6, P7, P8, P9, P10, P11, P12, P13, P14, P15;
+
+    /** The count this constant stands for. */
+    public int ports() {
+        return ordinal();
+    }
+
+    /** The constant for a stored count, clamped the way the config clamps it. */
+    @NonNull
+    public static XhciPortCount of(int ports) {
+        return values()[VMXhciConfig.clampPorts(ports)];
+    }
+
+    @NonNull
+    @Override
+    public String getDisplayString(@NonNull Context context) {
+        return context.getString(R.string.edit_vm_xhci_port_item, ports());
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/widgets/container/CardItemAdapter.java b/app/src/main/java/cn/classfun/droidvm/ui/widgets/container/CardItemAdapter.java
index cac44db87..d961832cb 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/widgets/container/CardItemAdapter.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/widgets/container/CardItemAdapter.java
@@ -52,6 +52,18 @@ protected final void appendItem(@NonNull DataItem item) {
         notifyItemInserted(items.size() - 1);
     }
 
+    /**
+     * Inserts one prepared item at the head, for a list whose order is priority: such a list
+     * usually ends in the row that catches everything left, and a row added behind that one
+     * would never fire.
+     */
+    protected final void prependItem(@NonNull DataItem item) {
+        items.insert(0, item);
+        notifyItemInserted(0);
+        // Every other row's up/down arrows just changed which of them are enabled.
+        notifyItemRangeChanged(1, items.size() - 1);
+    }
+
     /**
      * The list's + button was pressed, with {@code anchor} the button itself. Appends one blank
      * item; adapters whose rows need something decided first (a type, a target) override this
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/widgets/container/CardItemListView.java b/app/src/main/java/cn/classfun/droidvm/ui/widgets/container/CardItemListView.java
index 7d8db48fe..af997b03e 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/widgets/container/CardItemListView.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/widgets/container/CardItemListView.java
@@ -29,6 +29,9 @@ public final class CardItemListView extends LinearLayout {
     private MaterialButton addButton;
     private CardItemAdapter<?> adapter;
     private boolean reorderable = false;
+    /** Kept so a card can lift itself from a handle; null until a reorderable list attaches one. */
+    @Nullable
+    private ItemTouchHelper touchHelper = null;
     private boolean dragging = false;
 
     public CardItemListView(@NonNull Context context) {
@@ -148,7 +151,17 @@ public void clearView(@NonNull RecyclerView rv, @NonNull RecyclerView.ViewHolder
                 }
             }
         };
-        new ItemTouchHelper(callback).attachToRecyclerView(listView);
+        touchHelper = new ItemTouchHelper(callback);
+        touchHelper.attachToRecyclerView(listView);
+    }
+
+    /**
+     * Lifts [holder] now, for a card with a drag handle of its own. The long press stays: this
+     * is the same drag started by a touch that says so, rather than by a press-and-wait a user
+     * has to be told about before they can find it.
+     */
+    public void startDrag(@NonNull RecyclerView.ViewHolder holder) {
+        if (touchHelper != null) touchHelper.startDrag(holder);
     }
 
     public void setAdapter(@Nullable CardItemAdapter<?> adapter) {
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/widgets/row/DropdownRowWidget.java b/app/src/main/java/cn/classfun/droidvm/ui/widgets/row/DropdownRowWidget.java
index 448497ad3..572a311c9 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/widgets/row/DropdownRowWidget.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/widgets/row/DropdownRowWidget.java
@@ -6,8 +6,9 @@
 import android.content.Context;
 import android.util.AttributeSet;
 import android.view.LayoutInflater;
-import android.widget.AdapterView;
+import android.view.accessibility.AccessibilityEvent;
 import android.widget.AutoCompleteTextView;
+import android.widget.AdapterView;
 import android.widget.Filterable;
 import android.widget.FrameLayout;
 import android.widget.ImageView;
@@ -60,6 +61,7 @@ private void init(@Nullable AttributeSet attrs) {
         initAttrs(attrs);
     }
 
+
     private void initAttrs(@Nullable AttributeSet attrs) {
         if (attrs == null) return;
         try (var a = context.obtainStyledAttributes(attrs, R.styleable.DropdownRowWidget)) {
@@ -68,7 +70,11 @@ private void initAttrs(@Nullable AttributeSet attrs) {
                 iconView.setImageDrawable(icon);
             } else {
                 iconView.setVisibility(GONE);
-                var lp = (LayoutParams) textInputLayout.getLayoutParams();
+                // MarginLayoutParams, not this view's own: the field is a child of the
+                // LinearLayout inflated inside, so its params are that layout's, and casting
+                // them to the FrameLayout's threw for every row that carries no icon.
+                iconView.setContentDescription(null);
+                var lp = (MarginLayoutParams) textInputLayout.getLayoutParams();
                 lp.setMarginStart(0);
                 textInputLayout.setLayoutParams(lp);
             }
@@ -80,6 +86,31 @@ private void initAttrs(@Nullable AttributeSet attrs) {
         }
     }
 
+
+    /**
+     * Keeps an accessibility event that belongs to somebody else from opening this menu.
+     *
+     * <p>Material's exposed-dropdown delegate implements "a screen reader clicked the field" by
+     * watching for a {@code TYPE_VIEW_CLICKED} in {@code onPopulateAccessibilityEvent} and
+     * calling {@code showHideDropdown()} when it sees one. But populating is a walk DOWN from
+     * whichever view sent the event, through every child it has, so an event sent by an
+     * ancestor is offered to every dropdown beneath it. A dialog cancelled by a touch outside
+     * sends one from its root, and every row in that dialog opens at once -- two popups, for a
+     * click on neither of them, on the frame the dialog is already fading out.
+     *
+     * <p>Only the walk from above is refused. An event this row sends for itself starts at the
+     * field, or at the layout the delegate is attached to, and never passes through here, so a
+     * screen reader clicking the field still opens the menu. The cost is that the row's text is
+     * not gathered into an event somebody else sent, which is what was going wrong.</p>
+     *
+     * <p>Only reachable with an accessibility service running, which is why it looks like a race
+     * on one phone and never happens on another.</p>
+     */
+    @Override
+    public boolean dispatchPopulateAccessibilityEvent(@NonNull AccessibilityEvent event) {
+        return false;
+    }
+
     public <T extends ListAdapter & Filterable> void setAdapter(@Nullable T adapter) {
         dropdownView.setAdapter(adapter);
     }
diff --git a/app/src/main/res/drawable/ic_arrow_down.xml b/app/src/main/res/drawable/ic_arrow_down.xml
new file mode 100644
index 000000000..f95e3356c
--- /dev/null
+++ b/app/src/main/res/drawable/ic_arrow_down.xml
@@ -0,0 +1,9 @@
+<vector xmlns:android="http://schemas.android.com/apk/res/android"
+    android:width="24dp"
+    android:height="24dp"
+    android:viewportWidth="24"
+    android:viewportHeight="24">
+    <path
+        android:fillColor="?attr/colorOnSurface"
+        android:pathData="M20,12l-1.41,-1.41L13,16.17V4h-2v12.17l-5.58,-5.59L4,12l8,8L20,12z" />
+</vector>
diff --git a/app/src/main/res/drawable/ic_arrow_up.xml b/app/src/main/res/drawable/ic_arrow_up.xml
new file mode 100644
index 000000000..32c2c185b
--- /dev/null
+++ b/app/src/main/res/drawable/ic_arrow_up.xml
@@ -0,0 +1,9 @@
+<vector xmlns:android="http://schemas.android.com/apk/res/android"
+    android:width="24dp"
+    android:height="24dp"
+    android:viewportWidth="24"
+    android:viewportHeight="24">
+    <path
+        android:fillColor="?attr/colorOnSurface"
+        android:pathData="M4,12l1.41,1.41L11,7.83V20h2V7.83l5.58,5.59L20,12l-8,-8L4,12z" />
+</vector>
diff --git a/app/src/main/res/drawable/ic_drag_handle.xml b/app/src/main/res/drawable/ic_drag_handle.xml
new file mode 100644
index 000000000..3b38deb87
--- /dev/null
+++ b/app/src/main/res/drawable/ic_drag_handle.xml
@@ -0,0 +1,9 @@
+<vector xmlns:android="http://schemas.android.com/apk/res/android"
+    android:width="24dp"
+    android:height="24dp"
+    android:viewportWidth="24"
+    android:viewportHeight="24">
+    <path
+        android:fillColor="?attr/colorOnSurface"
+        android:pathData="M11,18c0,1.1 -0.9,2 -2,2s-2,-0.9 -2,-2 0.9,-2 2,-2 2,0.9 2,2zM9,10c-1.1,0 -2,0.9 -2,2s0.9,2 2,2 2,-0.9 2,-2 -0.9,-2 -2,-2zM9,4c-1.1,0 -2,0.9 -2,2s0.9,2 2,2 2,-0.9 2,-2 -0.9,-2 -2,-2zM15,8c1.1,0 2,-0.9 2,-2s-0.9,-2 -2,-2 -2,0.9 -2,2 0.9,2 2,2zM15,10c-1.1,0 -2,0.9 -2,2s0.9,2 2,2 2,-0.9 2,-2 -0.9,-2 -2,-2zM15,16c-1.1,0 -2,0.9 -2,2s0.9,2 2,2 2,-0.9 2,-2 -0.9,-2 -2,-2z" />
+</vector>
diff --git a/app/src/main/res/layout/activity_usb_devices.xml b/app/src/main/res/layout/activity_usb_devices.xml
new file mode 100644
index 000000000..ef3446695
--- /dev/null
+++ b/app/src/main/res/layout/activity_usb_devices.xml
@@ -0,0 +1,69 @@
+<?xml version="1.0" encoding="utf-8"?>
+<LinearLayout xmlns:android="http://schemas.android.com/apk/res/android"
+    xmlns:app="http://schemas.android.com/apk/res-auto"
+    xmlns:tools="http://schemas.android.com/tools"
+    android:id="@+id/root"
+    android:layout_width="match_parent"
+    android:layout_height="match_parent"
+    android:fitsSystemWindows="true"
+    android:orientation="vertical"
+    tools:context=".ui.usb.UsbDevicesActivity">
+
+    <com.google.android.material.appbar.MaterialToolbar
+        android:id="@+id/toolbar"
+        android:layout_width="match_parent"
+        android:layout_height="?attr/actionBarSize"
+        app:navigationIcon="?attr/homeAsUpIndicator" />
+
+    <androidx.core.widget.NestedScrollView
+        android:layout_width="match_parent"
+        android:layout_height="0dp"
+        android:layout_weight="1"
+        android:clipToPadding="false"
+        android:paddingBottom="24dp">
+
+        <LinearLayout
+            android:layout_width="match_parent"
+            android:layout_height="wrap_content"
+            android:orientation="vertical">
+
+            <TextView
+                android:id="@+id/tv_status"
+                android:layout_width="match_parent"
+                android:layout_height="wrap_content"
+                android:layout_marginStart="16dp"
+                android:layout_marginTop="12dp"
+                android:layout_marginEnd="16dp"
+                android:textAppearance="?attr/textAppearanceBodyMedium"
+                android:textColor="?attr/colorError"
+                android:visibility="gone"
+                tools:text="Daemon is not connected"
+                tools:visibility="visible" />
+
+            <TextView
+                android:id="@+id/tv_empty"
+                android:layout_width="match_parent"
+                android:layout_height="wrap_content"
+                android:layout_margin="16dp"
+                android:gravity="center"
+                android:text="@string/usb_devices_empty"
+                android:textColor="?attr/colorOnSurfaceVariant"
+                android:textSize="14sp"
+                android:visibility="gone"
+                tools:visibility="visible" />
+
+            <!-- One item_usb_device per device, inflated by the activity: the list is short,
+                 its order is the daemon's rather than the user's, and there is nothing to add
+                 to it, which is everything a CardItemListView would have brought. -->
+            <LinearLayout
+                android:id="@+id/device_rows"
+                android:layout_width="match_parent"
+                android:layout_height="wrap_content"
+                android:layout_marginTop="12dp"
+                android:orientation="vertical" />
+
+        </LinearLayout>
+
+    </androidx.core.widget.NestedScrollView>
+
+</LinearLayout>
diff --git a/app/src/main/res/layout/activity_usb_rules.xml b/app/src/main/res/layout/activity_usb_rules.xml
new file mode 100644
index 000000000..bf9148e07
--- /dev/null
+++ b/app/src/main/res/layout/activity_usb_rules.xml
@@ -0,0 +1,126 @@
+<?xml version="1.0" encoding="utf-8"?>
+<LinearLayout xmlns:android="http://schemas.android.com/apk/res/android"
+    xmlns:app="http://schemas.android.com/apk/res-auto"
+    xmlns:tools="http://schemas.android.com/tools"
+    android:id="@+id/root"
+    android:layout_width="match_parent"
+    android:layout_height="match_parent"
+    android:fitsSystemWindows="true"
+    android:orientation="vertical"
+    tools:context=".ui.usb.UsbRulesActivity">
+
+    <com.google.android.material.appbar.MaterialToolbar
+        android:id="@+id/toolbar"
+        android:layout_width="match_parent"
+        android:layout_height="?attr/actionBarSize"
+        app:menu="@menu/menu_usb_rules"
+        app:navigationIcon="?attr/homeAsUpIndicator" />
+
+    <androidx.core.widget.NestedScrollView
+        android:layout_width="match_parent"
+        android:layout_height="0dp"
+        android:layout_weight="1"
+        android:clipToPadding="false"
+        android:paddingBottom="24dp">
+
+        <LinearLayout
+            android:layout_width="match_parent"
+            android:layout_height="wrap_content"
+            android:orientation="vertical">
+
+            <TextView
+                android:id="@+id/tv_status"
+                android:layout_width="match_parent"
+                android:layout_height="wrap_content"
+                android:layout_marginStart="16dp"
+                android:layout_marginTop="12dp"
+                android:layout_marginEnd="16dp"
+                android:textAppearance="?attr/textAppearanceBodyMedium"
+                android:textColor="?attr/colorError"
+                android:visibility="gone"
+                tools:text="Daemon is not connected"
+                tools:visibility="visible" />
+
+            <!-- The master switch, above the zones and saved by the same button: toggling it
+                 alone changes nothing, and the four zones stay editable while it is off so
+                 rules can be prepared before they are allowed to run. Checked in the layout
+                 because that is what an absent "enabled" means to the daemon: a page waiting
+                 for its answer, or one that never got it, must not show passthrough as off. -->
+            <cn.classfun.droidvm.ui.widgets.row.SwitchRowWidget
+                android:id="@+id/sw_usb_enabled"
+                android:layout_width="match_parent"
+                android:layout_height="wrap_content"
+                android:checked="true"
+                android:icon="@drawable/ic_usb"
+                android:subtitle="@string/usb_rules_enabled_note"
+                android:text="@string/usb_rules_enabled" />
+
+            <cn.classfun.droidvm.ui.widgets.container.CollapsibleContainer
+                android:layout_width="match_parent"
+                android:layout_height="wrap_content"
+                android:title="@string/usb_rules_layer_exact">
+
+                <cn.classfun.droidvm.ui.widgets.container.CardItemListView
+                    android:id="@+id/list_exact"
+                    android:layout_width="match_parent"
+                    android:layout_height="wrap_content"
+                    android:hint="@string/usb_rules_empty_exact"
+                    android:icon="@drawable/ic_add"
+                    android:text="@string/usb_rules_add"
+                    app:reorderable="true" />
+
+            </cn.classfun.droidvm.ui.widgets.container.CollapsibleContainer>
+
+            <cn.classfun.droidvm.ui.widgets.container.CollapsibleContainer
+                android:layout_width="match_parent"
+                android:layout_height="wrap_content"
+                android:title="@string/usb_rules_layer_port">
+
+                <cn.classfun.droidvm.ui.widgets.container.CardItemListView
+                    android:id="@+id/list_port"
+                    android:layout_width="match_parent"
+                    android:layout_height="wrap_content"
+                    android:hint="@string/usb_rules_empty_port"
+                    android:icon="@drawable/ic_add"
+                    android:text="@string/usb_rules_add"
+                    app:reorderable="true" />
+
+            </cn.classfun.droidvm.ui.widgets.container.CollapsibleContainer>
+
+            <cn.classfun.droidvm.ui.widgets.container.CollapsibleContainer
+                android:layout_width="match_parent"
+                android:layout_height="wrap_content"
+                android:title="@string/usb_rules_layer_device">
+
+                <cn.classfun.droidvm.ui.widgets.container.CardItemListView
+                    android:id="@+id/list_device"
+                    android:layout_width="match_parent"
+                    android:layout_height="wrap_content"
+                    android:hint="@string/usb_rules_empty_device"
+                    android:icon="@drawable/ic_add"
+                    android:text="@string/usb_rules_add"
+                    app:reorderable="true" />
+
+            </cn.classfun.droidvm.ui.widgets.container.CollapsibleContainer>
+
+            <cn.classfun.droidvm.ui.widgets.container.CollapsibleContainer
+                android:layout_width="match_parent"
+                android:layout_height="wrap_content"
+                android:title="@string/usb_rules_layer_any">
+
+                <cn.classfun.droidvm.ui.widgets.container.CardItemListView
+                    android:id="@+id/list_any"
+                    android:layout_width="match_parent"
+                    android:layout_height="wrap_content"
+                    android:hint="@string/usb_rules_empty_any"
+                    android:icon="@drawable/ic_add"
+                    android:text="@string/usb_rules_add"
+                    app:reorderable="true" />
+
+            </cn.classfun.droidvm.ui.widgets.container.CollapsibleContainer>
+
+        </LinearLayout>
+
+    </androidx.core.widget.NestedScrollView>
+
+</LinearLayout>
diff --git a/app/src/main/res/layout/dialog_usb_rule_edit.xml b/app/src/main/res/layout/dialog_usb_rule_edit.xml
new file mode 100644
index 000000000..43c80c855
--- /dev/null
+++ b/app/src/main/res/layout/dialog_usb_rule_edit.xml
@@ -0,0 +1,29 @@
+<?xml version="1.0" encoding="utf-8"?><!--
+     What one rule matches on, and only the fields its zone stores. The exact zone shows both
+     and the other two show one; the catch-all zone shows neither, so this view is not inflated
+     for it at all and its dialog is the title and the buttons.
+
+     Two dropdowns, not two buttons that open lists: the value is chosen from what is plugged in
+     right now, which is the same shape of question the network and boot pages ask. The row
+     widget carries its own 16dp, so the padding here is what is left to reach the dialog's.
+-->
+<LinearLayout xmlns:android="http://schemas.android.com/apk/res/android"
+    android:layout_width="match_parent"
+    android:layout_height="wrap_content"
+    android:orientation="vertical"
+    android:paddingStart="8dp"
+    android:paddingEnd="8dp">
+
+    <cn.classfun.droidvm.ui.widgets.row.DropdownRowWidget
+        android:id="@+id/dd_edit_id"
+        android:layout_width="match_parent"
+        android:layout_height="wrap_content"
+        android:hint="@string/usb_rules_field_id" />
+
+    <cn.classfun.droidvm.ui.widgets.row.DropdownRowWidget
+        android:id="@+id/dd_edit_port"
+        android:layout_width="match_parent"
+        android:layout_height="wrap_content"
+        android:hint="@string/usb_rules_field_port" />
+
+</LinearLayout>
diff --git a/app/src/main/res/layout/dialog_usb_target_custom.xml b/app/src/main/res/layout/dialog_usb_target_custom.xml
new file mode 100644
index 000000000..b753e3921
--- /dev/null
+++ b/app/src/main/res/layout/dialog_usb_target_custom.xml
@@ -0,0 +1,49 @@
+<?xml version="1.0" encoding="utf-8"?><!--
+     The last entry of the target list, for a VM this app cannot see. Only emptiness is checked
+     here: there is no pattern in the daemon to check a VM id against the way there is for a
+     device id, so a typo is caught by the save, and until then the card names the id in red. A
+     blank controller means the VM's first one, which is what a rule written before controllers
+     existed says.
+-->
+<LinearLayout xmlns:android="http://schemas.android.com/apk/res/android"
+    xmlns:tools="http://schemas.android.com/tools"
+    android:layout_width="match_parent"
+    android:layout_height="wrap_content"
+    android:orientation="vertical"
+    android:paddingHorizontal="24dp"
+    android:paddingTop="8dp">
+
+    <com.google.android.material.textfield.TextInputLayout
+        android:id="@+id/ti_custom_vm"
+        style="@style/Widget.Material3.TextInputLayout.OutlinedBox"
+        android:layout_width="match_parent"
+        android:layout_height="wrap_content"
+        android:hint="@string/usb_rules_custom_vm">
+
+        <com.google.android.material.textfield.TextInputEditText
+            android:id="@+id/et_custom_vm"
+            android:layout_width="match_parent"
+            android:layout_height="wrap_content"
+            android:inputType="text"
+            tools:ignore="VisualLintTextFieldSize" />
+
+    </com.google.android.material.textfield.TextInputLayout>
+
+    <com.google.android.material.textfield.TextInputLayout
+        android:id="@+id/ti_custom_controller"
+        style="@style/Widget.Material3.TextInputLayout.OutlinedBox"
+        android:layout_width="match_parent"
+        android:layout_height="wrap_content"
+        android:layout_marginTop="8dp"
+        android:hint="@string/usb_rules_custom_controller">
+
+        <com.google.android.material.textfield.TextInputEditText
+            android:id="@+id/et_custom_controller"
+            android:layout_width="match_parent"
+            android:layout_height="wrap_content"
+            android:inputType="text"
+            tools:ignore="VisualLintTextFieldSize" />
+
+    </com.google.android.material.textfield.TextInputLayout>
+
+</LinearLayout>
diff --git a/app/src/main/res/layout/dialog_usb_target_edit.xml b/app/src/main/res/layout/dialog_usb_target_edit.xml
new file mode 100644
index 000000000..6f5e09b2a
--- /dev/null
+++ b/app/src/main/res/layout/dialog_usb_target_edit.xml
@@ -0,0 +1,18 @@
+<?xml version="1.0" encoding="utf-8"?><!--
+     Where a rule sends what it matches. One dropdown, in the shape the match rule's fields
+     have, so the two halves of a rule are edited by the same control.
+-->
+<LinearLayout xmlns:android="http://schemas.android.com/apk/res/android"
+    android:layout_width="match_parent"
+    android:layout_height="wrap_content"
+    android:orientation="vertical"
+    android:paddingStart="8dp"
+    android:paddingEnd="8dp">
+
+    <cn.classfun.droidvm.ui.widgets.row.DropdownRowWidget
+        android:id="@+id/dd_edit_target"
+        android:layout_width="match_parent"
+        android:layout_height="wrap_content"
+        android:hint="@string/usb_rules_attach_to" />
+
+</LinearLayout>
diff --git a/app/src/main/res/layout/dialog_xhci_custom_binding.xml b/app/src/main/res/layout/dialog_xhci_custom_binding.xml
new file mode 100644
index 000000000..453a12a75
--- /dev/null
+++ b/app/src/main/res/layout/dialog_xhci_custom_binding.xml
@@ -0,0 +1,49 @@
+<?xml version="1.0" encoding="utf-8"?><!--
+     The last entry of a zone's device list, for a device that is not plugged in right now. Each
+     field is checked against the pattern the daemon checks, so a value that gets past this dialog
+     is one the rules save will take: being told about a typo after the VM config was already
+     written is later than it needs to be. A field the layer does not use is not shown: a port rule
+     that also carried an id would be an exact rule wearing the wrong name.
+-->
+<LinearLayout xmlns:android="http://schemas.android.com/apk/res/android"
+    xmlns:tools="http://schemas.android.com/tools"
+    android:layout_width="match_parent"
+    android:layout_height="wrap_content"
+    android:orientation="vertical"
+    android:paddingHorizontal="24dp"
+    android:paddingTop="8dp">
+
+    <com.google.android.material.textfield.TextInputLayout
+        android:id="@+id/ti_custom_id"
+        style="@style/Widget.Material3.TextInputLayout.OutlinedBox"
+        android:layout_width="match_parent"
+        android:layout_height="wrap_content"
+        android:hint="@string/edit_vm_xhci_custom_id">
+
+        <com.google.android.material.textfield.TextInputEditText
+            android:id="@+id/et_custom_id"
+            android:layout_width="match_parent"
+            android:layout_height="wrap_content"
+            android:inputType="text"
+            tools:ignore="VisualLintTextFieldSize" />
+
+    </com.google.android.material.textfield.TextInputLayout>
+
+    <com.google.android.material.textfield.TextInputLayout
+        android:id="@+id/ti_custom_port"
+        style="@style/Widget.Material3.TextInputLayout.OutlinedBox"
+        android:layout_width="match_parent"
+        android:layout_height="wrap_content"
+        android:layout_marginTop="8dp"
+        android:hint="@string/edit_vm_xhci_custom_port">
+
+        <com.google.android.material.textfield.TextInputEditText
+            android:id="@+id/et_custom_port"
+            android:layout_width="match_parent"
+            android:layout_height="wrap_content"
+            android:inputType="text"
+            tools:ignore="VisualLintTextFieldSize" />
+
+    </com.google.android.material.textfield.TextInputLayout>
+
+</LinearLayout>
diff --git a/app/src/main/res/layout/fragment_main_settings.xml b/app/src/main/res/layout/fragment_main_settings.xml
index 5427d6097..b8ed87cc7 100644
--- a/app/src/main/res/layout/fragment_main_settings.xml
+++ b/app/src/main/res/layout/fragment_main_settings.xml
@@ -86,6 +86,22 @@
                     android:icon="@drawable/ic_serial_port"
                     android:text="@string/settings_usb_acm_ports_title" />
 
+                <cn.classfun.droidvm.ui.widgets.row.TextRowWidget
+                    android:id="@+id/item_usb_passthrough"
+                    android:layout_width="match_parent"
+                    android:layout_height="wrap_content"
+                    android:icon="@drawable/ic_usb"
+                    android:subtitle="@string/settings_usb_passthrough_summary"
+                    android:text="@string/settings_usb_passthrough_title" />
+
+                <cn.classfun.droidvm.ui.widgets.row.TextRowWidget
+                    android:id="@+id/item_usb_devices"
+                    android:layout_width="match_parent"
+                    android:layout_height="wrap_content"
+                    android:icon="@drawable/ic_usb"
+                    android:subtitle="@string/settings_usb_devices_summary"
+                    android:text="@string/settings_usb_devices_title" />
+
                 <cn.classfun.droidvm.ui.widgets.row.SwitchRowWidget
                     android:id="@+id/item_optimize_sdcard"
                     android:layout_width="match_parent"
diff --git a/app/src/main/res/layout/item_usb_device.xml b/app/src/main/res/layout/item_usb_device.xml
new file mode 100644
index 000000000..d593d48d4
--- /dev/null
+++ b/app/src/main/res/layout/item_usb_device.xml
@@ -0,0 +1,85 @@
+<?xml version="1.0" encoding="utf-8"?><!--
+     One host USB device: what it is on the left, where it is on the right. The card is the one
+     the rules page uses, so the two pages read as one feature.
+
+     Nothing on the left says what the device is doing. The menu's current value says it: the
+     VM holding it, or Host, or Sink, with a lock on the two of those the user chose. One answer
+     in one place cannot come apart from itself the way two of them can.
+-->
+<com.google.android.material.card.MaterialCardView xmlns:android="http://schemas.android.com/apk/res/android"
+    xmlns:app="http://schemas.android.com/apk/res-auto"
+    xmlns:tools="http://schemas.android.com/tools"
+    android:layout_width="match_parent"
+    android:layout_height="wrap_content"
+    android:layout_marginStart="16dp"
+    android:layout_marginEnd="16dp"
+    android:layout_marginBottom="8dp"
+    app:cardCornerRadius="12dp"
+    app:cardElevation="0dp"
+    app:strokeColor="?attr/colorOutlineVariant"
+    app:strokeWidth="1dp">
+
+    <LinearLayout
+        android:layout_width="match_parent"
+        android:layout_height="wrap_content"
+        android:gravity="center_vertical"
+        android:orientation="horizontal"
+        android:padding="12dp">
+
+        <LinearLayout
+            android:layout_width="0dp"
+            android:layout_height="wrap_content"
+            android:layout_weight="1"
+            android:orientation="vertical">
+
+            <TextView
+                android:id="@+id/tv_device_name"
+                android:layout_width="match_parent"
+                android:layout_height="wrap_content"
+                android:ellipsize="end"
+                android:maxLines="2"
+                android:textAppearance="?attr/textAppearanceTitleSmall"
+                android:textColor="?attr/colorOnSurface"
+                tools:text="USB 3.0 Realtek USB LAN" />
+
+            <TextView
+                android:id="@+id/tv_device_id"
+                android:layout_width="match_parent"
+                android:layout_height="wrap_content"
+                android:fontFamily="monospace"
+                android:textAppearance="?attr/textAppearanceBodySmall"
+                android:textColor="?attr/colorOnSurfaceVariant"
+                tools:text="0bda:8153:001000001" />
+
+            <TextView
+                android:id="@+id/tv_device_path"
+                android:layout_width="match_parent"
+                android:layout_height="wrap_content"
+                android:fontFamily="monospace"
+                android:textAppearance="?attr/textAppearanceBodySmall"
+                android:textColor="?attr/colorOnSurfaceVariant"
+                tools:text="1.2.2 (2-1.2.2)" />
+
+        </LinearLayout>
+
+        <!-- The whole of the state display, so it is sized like a control and not like a
+             caption: 48dp tall and shaped as the xHCI card's PickerButtonWidget is, whose
+             tighter padding is also what leaves room for a name here. Wide enough for a VM and
+             its controller, and past that the value ellipsises instead of being cut off by a
+             button that will not grow. -->
+        <com.google.android.material.button.MaterialButton
+            android:id="@+id/btn_device_target"
+            style="@style/Widget.Material3.Button.IconButton.Filled.Tonal"
+            android:layout_width="wrap_content"
+            android:layout_height="48dp"
+            android:layout_marginStart="12dp"
+            android:ellipsize="end"
+            android:maxLines="1"
+            android:maxWidth="200dp"
+            android:minWidth="120dp"
+            android:textSize="12sp"
+            tools:text="Debian testing (xhci-0)" />
+
+    </LinearLayout>
+
+</com.google.android.material.card.MaterialCardView>
diff --git a/app/src/main/res/layout/item_usb_rule.xml b/app/src/main/res/layout/item_usb_rule.xml
new file mode 100644
index 000000000..95581e359
--- /dev/null
+++ b/app/src/main/res/layout/item_usb_rule.xml
@@ -0,0 +1,131 @@
+<?xml version="1.0" encoding="utf-8"?><!--
+     One rule, in the card the management page uses: what it is on the left, where the device
+     goes on the right. The two pages are one feature and now read as one.
+
+     The left column is three lines and which three is the zone's business. The bold ones are
+     what the rule MATCHES on, the only part of it that is stored, and they are the only ones
+     that open a picker; the plain ones describe the device that matcher resolves to right now
+     and are read-only, because a rule that matched on a name would stop matching when the name
+     changed. A catch-all rule matches on nothing, so it says so in one line and has no other.
+
+     The drag handle and the delete button are the edit mode's, hidden until it is on. Order
+     inside a zone is priority, so it has to be movable without the long-press nobody finds,
+     while a permanent pair of arrows on every card is three controls competing for a row that
+     only has one thing to say.
+-->
+<com.google.android.material.card.MaterialCardView xmlns:android="http://schemas.android.com/apk/res/android"
+    xmlns:app="http://schemas.android.com/apk/res-auto"
+    xmlns:tools="http://schemas.android.com/tools"
+    android:layout_width="match_parent"
+    android:layout_height="wrap_content"
+    android:layout_marginStart="16dp"
+    android:layout_marginEnd="16dp"
+    android:layout_marginBottom="8dp"
+    app:cardCornerRadius="12dp"
+    app:cardElevation="0dp"
+    app:strokeColor="?attr/colorOutlineVariant"
+    app:strokeWidth="1dp">
+
+    <!-- Everything the card says lives in here, so a rule that can never be reached fades as
+         one thing while the card's own stroke stays where it is: the row is still a row, still
+         draggable and still editable, it just no longer claims to decide anything. -->
+    <LinearLayout
+        android:id="@+id/rule_content"
+        android:layout_width="match_parent"
+        android:layout_height="wrap_content"
+        android:orientation="vertical"
+        android:padding="12dp">
+
+        <LinearLayout
+            android:layout_width="match_parent"
+            android:layout_height="wrap_content"
+            android:gravity="center_vertical"
+            android:orientation="horizontal">
+
+            <ImageView
+                android:id="@+id/iv_rule_drag"
+                android:layout_width="24dp"
+                android:layout_height="24dp"
+                android:layout_marginEnd="12dp"
+                android:contentDescription="@string/usb_rules_reorder"
+                android:src="@drawable/ic_drag_handle"
+                android:visibility="gone"
+                app:tint="?attr/colorOnSurfaceVariant"
+                tools:visibility="visible" />
+
+            <LinearLayout
+                android:layout_width="0dp"
+                android:layout_height="wrap_content"
+                android:layout_weight="1"
+                android:orientation="vertical">
+
+                <TextView
+                    android:id="@+id/tv_rule_line1"
+                    android:layout_width="match_parent"
+                    android:layout_height="wrap_content"
+                    android:ellipsize="end"
+                    android:maxLines="1"
+                    tools:text="Match port: 1.1" />
+
+                <TextView
+                    android:id="@+id/tv_rule_line2"
+                    android:layout_width="match_parent"
+                    android:layout_height="wrap_content"
+                    android:ellipsize="end"
+                    android:maxLines="1"
+                    tools:text="Device: 152d:a583:DD564198838E9" />
+
+                <TextView
+                    android:id="@+id/tv_rule_line3"
+                    android:layout_width="match_parent"
+                    android:layout_height="wrap_content"
+                    android:ellipsize="end"
+                    android:maxLines="1"
+                    tools:text="USB 3.0 UNITEK" />
+
+            </LinearLayout>
+
+            <!-- Sized as the management page's, so the same answer is the same control on both:
+                 48dp tall, wide enough for a VM and its controller, ellipsised past that. -->
+            <com.google.android.material.button.MaterialButton
+                android:id="@+id/btn_rule_target"
+                style="@style/Widget.Material3.Button.IconButton.Filled.Tonal"
+                android:layout_width="wrap_content"
+                android:layout_height="48dp"
+                android:layout_marginStart="12dp"
+                android:ellipsize="end"
+                android:maxLines="1"
+                android:maxWidth="200dp"
+                android:minWidth="120dp"
+                android:textSize="12sp"
+                tools:text="Debian testing (xhci-0)" />
+
+            <ImageButton
+                android:id="@+id/btn_rule_delete"
+                android:layout_width="40dp"
+                android:layout_height="40dp"
+                android:layout_marginStart="4dp"
+                android:background="?attr/selectableItemBackgroundBorderless"
+                android:contentDescription="@string/usb_rules_delete"
+                android:src="@drawable/ic_delete"
+                android:visibility="gone"
+                app:tint="?attr/colorError"
+                tools:ignore="TouchTargetSizeCheck"
+                tools:visibility="visible" />
+
+        </LinearLayout>
+
+        <TextView
+            android:id="@+id/tv_rule_warning"
+            android:layout_width="match_parent"
+            android:layout_height="wrap_content"
+            android:layout_marginTop="4dp"
+            android:textColor="?attr/colorError"
+            android:textSize="12sp"
+            android:visibility="gone"
+            tools:text="Unknown VM (2f0a...)"
+            tools:visibility="visible" />
+
+    </LinearLayout>
+
+</com.google.android.material.card.MaterialCardView>
diff --git a/app/src/main/res/layout/item_vm_peripheral_edit.xml b/app/src/main/res/layout/item_vm_peripheral_edit.xml
index c648e38da..d059a1cfc 100644
--- a/app/src/main/res/layout/item_vm_peripheral_edit.xml
+++ b/app/src/main/res/layout/item_vm_peripheral_edit.xml
@@ -230,6 +230,178 @@
 
         </LinearLayout>
 
+        <!-- ===== xHCI USB controller: the ports it offers, and what the rules bind to it ===== -->
+        <LinearLayout
+            android:id="@+id/group_xhci"
+            android:layout_width="match_parent"
+            android:layout_height="wrap_content"
+            android:orientation="vertical"
+            android:visibility="gone"
+            tools:visibility="visible">
+
+            <!-- Which controller this card is. Only worth saying when the VM has more than one:
+                 that is the only case where a rule below could have meant the other. -->
+            <TextView
+                android:id="@+id/tv_xhci_id"
+                android:layout_width="match_parent"
+                android:layout_height="wrap_content"
+                android:layout_marginTop="4dp"
+                android:textColor="?attr/colorOnSurfaceVariant"
+                android:textSize="12sp"
+                android:visibility="gone"
+                tools:text="xhci-0"
+                tools:visibility="visible" />
+
+            <!-- Says where the rows below actually live: they are the app-wide attach rules seen
+                 through this controller, not a list this VM's config carries. -->
+            <TextView
+                android:id="@+id/tv_xhci_note"
+                android:layout_width="match_parent"
+                android:layout_height="wrap_content"
+                android:layout_marginTop="4dp"
+                android:text="@string/edit_vm_xhci_rules_note"
+                android:textColor="?attr/colorOnSurfaceVariant"
+                android:textSize="12sp" />
+
+            <!-- What passthrough being off means for this card: the rows below stay editable
+                 and are still saved, they just do not run until the master switch is on. -->
+            <TextView
+                android:id="@+id/tv_xhci_passthrough_off"
+                android:layout_width="match_parent"
+                android:layout_height="wrap_content"
+                android:layout_marginTop="4dp"
+                android:text="@string/edit_vm_xhci_passthrough_off"
+                android:textColor="?attr/colorError"
+                android:textSize="12sp"
+                android:visibility="gone"
+                tools:visibility="visible" />
+
+            <!--
+              The four layers of the attach rules, in the order the daemon tries them. They are
+              one list rather than four headed zones: a row states its own layer on the left, the
+              way a sound endpoint states its direction, so a heading over an empty zone would be
+              a title for nothing. The rules between them are drawn by bindXhci, and only where
+              two layers that both have rows meet, so an empty layer costs no line.
+            -->
+            <LinearLayout
+                android:id="@+id/xhci_zone_exact"
+                android:layout_width="match_parent"
+                android:layout_height="wrap_content"
+                android:layout_marginTop="4dp"
+                android:orientation="vertical" />
+
+            <View
+                android:id="@+id/xhci_divider_exact"
+                android:layout_width="match_parent"
+                android:layout_height="1dp"
+                android:layout_marginTop="8dp"
+                android:layout_marginBottom="4dp"
+                android:background="?attr/colorOutlineVariant"
+                android:visibility="gone"
+                tools:visibility="visible" />
+
+            <LinearLayout
+                android:id="@+id/xhci_zone_port"
+                android:layout_width="match_parent"
+                android:layout_height="wrap_content"
+                android:orientation="vertical" />
+
+            <View
+                android:id="@+id/xhci_divider_port"
+                android:layout_width="match_parent"
+                android:layout_height="1dp"
+                android:layout_marginTop="8dp"
+                android:layout_marginBottom="4dp"
+                android:background="?attr/colorOutlineVariant"
+                android:visibility="gone"
+                tools:visibility="visible" />
+
+            <LinearLayout
+                android:id="@+id/xhci_zone_device"
+                android:layout_width="match_parent"
+                android:layout_height="wrap_content"
+                android:orientation="vertical" />
+
+            <View
+                android:id="@+id/xhci_divider_device"
+                android:layout_width="match_parent"
+                android:layout_height="1dp"
+                android:layout_marginTop="8dp"
+                android:layout_marginBottom="4dp"
+                android:background="?attr/colorOutlineVariant"
+                android:visibility="gone"
+                tools:visibility="visible" />
+
+            <LinearLayout
+                android:id="@+id/xhci_zone_any"
+                android:layout_width="match_parent"
+                android:layout_height="wrap_content"
+                android:orientation="vertical" />
+
+            <!-- Adding a binding and the two controller-wide port counts: the VirtIO Sound row,
+                 for the same reason: none of the three belongs to any row above. -->
+            <LinearLayout
+                android:layout_width="match_parent"
+                android:layout_height="wrap_content"
+                android:layout_marginTop="4dp"
+                android:gravity="center_vertical"
+                android:orientation="horizontal">
+
+                <com.google.android.material.button.MaterialButton
+                    android:id="@+id/btn_xhci_device_add"
+                    style="@style/Widget.Material3.Button.TextButton"
+                    android:layout_width="wrap_content"
+                    android:layout_height="40dp"
+                    android:text="@string/edit_vm_xhci_device_add"
+                    android:textSize="12sp"
+                    app:icon="@drawable/ic_add"
+                    app:iconSize="18dp"
+                    tools:ignore="TouchTargetSizeCheck" />
+
+                <cn.classfun.droidvm.ui.widgets.tools.PickerButtonWidget
+                    android:id="@+id/btn_xhci_usb2_ports"
+                    android:layout_width="wrap_content"
+                    android:layout_height="48dp"
+                    android:layout_marginStart="8dp"
+                    android:title="@string/edit_vm_xhci_usb2_ports"
+                    app:pb_mode="dialog" />
+
+                <cn.classfun.droidvm.ui.widgets.tools.PickerButtonWidget
+                    android:id="@+id/btn_xhci_usb3_ports"
+                    android:layout_width="wrap_content"
+                    android:layout_height="48dp"
+                    android:layout_marginStart="8dp"
+                    android:title="@string/edit_vm_xhci_usb3_ports"
+                    app:pb_mode="dialog" />
+
+            </LinearLayout>
+
+            <!-- Two lines rather than the card's shared warning below: both crosvm limits can be
+                 true at once, and that one is rewritten by every host-endpoint bind. -->
+            <TextView
+                android:id="@+id/tv_xhci_warn_multi"
+                android:layout_width="match_parent"
+                android:layout_height="wrap_content"
+                android:layout_marginTop="4dp"
+                android:text="@string/edit_vm_xhci_crosvm_one_only"
+                android:textColor="?attr/colorError"
+                android:textSize="12sp"
+                android:visibility="gone"
+                tools:visibility="visible" />
+
+            <TextView
+                android:id="@+id/tv_xhci_warn_ports"
+                android:layout_width="match_parent"
+                android:layout_height="wrap_content"
+                android:layout_marginTop="4dp"
+                android:text="@string/edit_vm_xhci_crosvm_ports_fixed"
+                android:textColor="?attr/colorError"
+                android:textSize="12sp"
+                android:visibility="gone"
+                tools:visibility="visible" />
+
+        </LinearLayout>
+
         <TextView
             android:id="@+id/tv_peripheral_warning"
             android:layout_width="match_parent"
diff --git a/app/src/main/res/layout/item_xhci_binding.xml b/app/src/main/res/layout/item_xhci_binding.xml
new file mode 100644
index 000000000..210c283b0
--- /dev/null
+++ b/app/src/main/res/layout/item_xhci_binding.xml
@@ -0,0 +1,54 @@
+<?xml version="1.0" encoding="utf-8"?>
+<!--
+  One binding under an xHCI controller: which layer it is in, then what it is about: a device,
+  a port, or both, depending on that layer. The layer is the label on the left, the way a sound
+  endpoint's direction is. The rows of all four layers are one list, so a row that did not say
+  which layer it belongs to would be a rule of unknown priority.
+
+  The value is a button because tapping it re-opens that layer's picker: replacing what a rule
+  points at is the same gesture as choosing it in the first place.
+-->
+<LinearLayout xmlns:android="http://schemas.android.com/apk/res/android"
+    xmlns:app="http://schemas.android.com/apk/res-auto"
+    xmlns:tools="http://schemas.android.com/tools"
+    android:layout_width="match_parent"
+    android:layout_height="wrap_content"
+    android:layout_marginTop="4dp"
+    android:gravity="center_vertical"
+    android:orientation="horizontal">
+
+    <!-- Same width as a sound endpoint's mode label, so the value buttons of a sound card and a
+         controller card line up at the same place down the page. -->
+    <TextView
+        android:id="@+id/tv_xhci_binding_layer"
+        android:layout_width="56dp"
+        android:layout_height="wrap_content"
+        android:textSize="12sp"
+        tools:text="@string/usb_rules_layer_exact" />
+
+    <com.google.android.material.button.MaterialButton
+        android:id="@+id/btn_xhci_binding"
+        style="@style/Widget.Material3.Button.TonalButton"
+        android:layout_width="0dp"
+        android:layout_height="36dp"
+        android:layout_weight="1"
+        android:minWidth="72dp"
+        android:textSize="12sp"
+        tools:text="Port: 1.2.2, Device: Realtek USB LAN (0bda:8153)"
+        tools:ignore="TouchTargetSizeCheck,VisualLintButtonSize" />
+
+    <!-- Same height as the value button beside it, for the reason item_sound_endpoint gives. -->
+    <com.google.android.material.button.MaterialButton
+        android:id="@+id/btn_xhci_binding_remove"
+        style="@style/Widget.Material3.Button.IconButton"
+        android:layout_width="40dp"
+        android:layout_height="36dp"
+        android:layout_marginStart="4dp"
+        android:insetTop="0dp"
+        android:insetBottom="0dp"
+        android:contentDescription="@string/edit_vm_xhci_device_remove"
+        app:icon="@drawable/ic_close"
+        app:iconSize="18dp"
+        tools:ignore="TouchTargetSizeCheck" />
+
+</LinearLayout>
diff --git a/app/src/main/res/layout/partial_vm_edit_basic.xml b/app/src/main/res/layout/partial_vm_edit_basic.xml
index 87e19cdf1..b9c9c4a5b 100644
--- a/app/src/main/res/layout/partial_vm_edit_basic.xml
+++ b/app/src/main/res/layout/partial_vm_edit_basic.xml
@@ -140,14 +140,6 @@
             android:icon="@drawable/ic_card_multiple"
             android:text="@string/create_vm_smt" />
 
-        <cn.classfun.droidvm.ui.widgets.row.SwitchRowWidget
-            android:id="@+id/sw_usb"
-            android:layout_width="match_parent"
-            android:layout_height="wrap_content"
-            android:checked="true"
-            android:icon="@drawable/ic_usb"
-            android:text="@string/create_vm_usb" />
-
         <cn.classfun.droidvm.ui.widgets.row.SwitchRowWidget
             android:id="@+id/sw_debug"
             android:layout_width="match_parent"
diff --git a/app/src/main/res/menu/menu_usb_rules.xml b/app/src/main/res/menu/menu_usb_rules.xml
new file mode 100644
index 000000000..86d6628a7
--- /dev/null
+++ b/app/src/main/res/menu/menu_usb_rules.xml
@@ -0,0 +1,17 @@
+<?xml version="1.0" encoding="utf-8"?>
+<menu xmlns:android="http://schemas.android.com/apk/res/android"
+    xmlns:app="http://schemas.android.com/apk/res-auto">
+
+    <item
+        android:id="@+id/menu_edit"
+        android:icon="@drawable/ic_edit"
+        android:title="@string/usb_rules_edit"
+        app:showAsAction="always" />
+
+    <item
+        android:id="@+id/menu_save"
+        android:icon="@drawable/ic_check"
+        android:title="@string/usb_rules_save"
+        app:showAsAction="always" />
+
+</menu>
diff --git a/app/src/main/res/values-zh-rCN/strings.xml b/app/src/main/res/values-zh-rCN/strings.xml
index 880bf0768..f88316dd7 100644
--- a/app/src/main/res/values-zh-rCN/strings.xml
+++ b/app/src/main/res/values-zh-rCN/strings.xml
@@ -201,7 +201,6 @@
     <string name="create_vm_pmu">PMU (性能监视器)</string>
     <string name="create_vm_rng">RNG (随机数生成器)</string>
     <string name="create_vm_smt">SMT (同步多线程)</string>
-    <string name="create_vm_usb">USB (通用串行总线)</string>
     <string name="create_vm_debug">调试追踪</string>
     <string name="create_vm_protected_vm">保护模式</string>
     <string name="create_vm_swiotlb_hint">SWIOTLB 大小（保护模式）</string>
@@ -719,9 +718,9 @@
     <string name="linux_vm_create_action">创建</string>
     <string name="linux_vm_create_success">虚拟机“%1$s”已创建。</string>
     <string name="linux_vm_create_failed">Linux 虚拟机创建流程未完成。</string>
-    <string name="linux_vm_step_resize">磁盘扩容</string>
-    <string name="linux_vm_create_partial">虚拟机“%1$s”已创建，但下列准备步骤没有完成：\n%2$s\n\n可以稍后从磁盘菜单重新执行。</string>
     <string name="linux_vm_create_partial_title">虚拟机已创建</string>
+    <string name="linux_vm_create_partial">虚拟机“%1$s”已创建，但下列准备步骤没有完成：\n%2$s\n\n可以稍后从磁盘菜单重新执行。</string>
+    <string name="linux_vm_step_resize">磁盘扩容</string>
 
     <string name="lxc_title">下载发行版 LXC 镜像</string>
     <string name="lxc_category_source">来源</string>
@@ -834,9 +833,9 @@
     <string name="agent_operation_running">执行中\u2026</string>
     <string name="agent_operation_success">操作完成。</string>
     <string name="agent_operation_success_skipped">操作完成；有操作不适用，未进行更改。</string>
-    <string name="agent_operation_action_autogrow">文件系统扩容</string>
-    <string name="agent_operation_action_password">更改密码</string>
     <string name="agent_operation_partial">操作已完成，但部分步骤失败：\n%1$s</string>
+    <string name="agent_operation_action_password">更改密码</string>
+    <string name="agent_operation_action_autogrow">文件系统扩容</string>
     <string name="agent_operation_failed">操作失败（退出码 %1$d）。</string>
     <string name="agent_operation_failed_detail">操作失败：%1$s</string>
     <string name="agent_operation_prepare_failed">准备代理虚拟机失败。</string>
@@ -1541,6 +1540,23 @@
     <string name="edit_vm_sound_underrun_lpc">LPC</string>
     <string name="edit_vm_peripheral_host_output">输出</string>
     <string name="edit_vm_peripheral_host_input">输入</string>
+    <string name="edit_vm_peripheral_type_xhci">xHCI USB控制器</string>
+    <string name="edit_vm_xhci_rules_note">绑定存放在 app 的「USB直通规则」。</string>
+    <string name="edit_vm_xhci_passthrough_off">USB 直通未启用，VM 启动时会忽略 USB 设备，请至「设置 → USB直通规则」启用 USB 直通。</string>
+    <string name="edit_vm_xhci_device_add">新增设备</string>
+    <string name="edit_vm_xhci_device_remove">移除绑定</string>
+    <string name="edit_vm_xhci_usb2_ports">USB 2.0 Port 数</string>
+    <string name="edit_vm_xhci_usb3_ports">USB 3.0 Port 数</string>
+    <string name="edit_vm_xhci_port_item">%1$d Port</string>
+    <string name="edit_vm_xhci_add_custom">自定义…</string>
+    <string name="edit_vm_xhci_custom_title">自定义绑定</string>
+    <string name="edit_vm_xhci_custom_id">设备 id（vid:pid 或 vid:pid:serial）</string>
+    <string name="edit_vm_xhci_custom_port">Port 路径，例如 1.2.2</string>
+    <string name="edit_vm_xhci_custom_bad_id">请输入 vid:pid，可再加序列号</string>
+    <string name="edit_vm_xhci_custom_bad_port">请输入 port 路径，例如 1.2.2</string>
+    <string name="edit_vm_xhci_crosvm_one_only">crosvm 只支持一个 xHCI，VM 启动时会跳过这个设备。</string>
+    <string name="edit_vm_xhci_crosvm_ports_fixed">crosvm 只支持 8 Port，启动时会忽略这个参数。</string>
+    <string name="edit_vm_xhci_rules_save_failed">VM 已保存，但 USB 绑定没有：%1$s</string>
     <string name="vm_info_console_stdout_short">stdout</string>
     <string name="vm_info_console_stderr_short">stderr</string>
     <string name="create_vm_category_serial">串口</string>
@@ -1575,4 +1591,74 @@
     <string name="settings_usb_acm_disabled">已停用</string>
     <string name="edit_vm_serial_usb_disabled_hint">USB 串口（ACM）未启用；请先到设置启用，否则此 VM 无法开机。</string>
     <string name="edit_vm_serial_full">这种硬件的端口都已添加。</string>
+    <string name="settings_usb_passthrough_title">USB直通规则</string>
+    <string name="settings_usb_passthrough_summary">插入的 USB 设备自动接到哪台虚拟机</string>
+    <string name="settings_usb_devices_title">USB直通管理</string>
+    <string name="settings_usb_devices_summary">直接指定单一设备的去向，不改规则</string>
+    <string name="usb_rules_title">USB直通规则</string>
+    <string name="usb_rules_unsaved">尚未保存的更改</string>
+    <string name="usb_rules_enabled">启用 USB 直通</string>
+    <string name="usb_rules_enabled_note">关闭时不会执行任何直通规则，设备全部留给 Android</string>
+    <string name="usb_rules_enable_warning_title">要让 DroidVM 接管 USB 吗？</string>
+    <string name="usb_rules_enable_warning_message">开启 USB 直通后，插入的每个 USB 设备去哪里都由 DroidVM 决定：设备不会自己挂上驱动，只有规则指定给主机，Android 才拿得到。</string>
+    <string name="usb_rules_layer_exact">精确</string>
+    <string name="usb_rules_layer_port">端口</string>
+    <string name="usb_rules_layer_device">设备</string>
+    <string name="usb_rules_layer_any">任意</string>
+    <string name="usb_rules_row_exact_fmt">端口：%1$s，设备：%2$s（%3$s）</string>
+    <string name="usb_rules_row_port_fmt">端口：%1$s</string>
+    <string name="usb_rules_row_device_fmt">%1$s（%2$s）</string>
+    <string name="usb_rules_empty_exact">尚无精确规则</string>
+    <string name="usb_rules_empty_port">尚无 port 规则</string>
+    <string name="usb_rules_empty_device">尚无设备规则</string>
+    <string name="usb_rules_empty_any">尚无任意规则</string>
+    <string name="usb_rules_add">新增规则</string>
+    <string name="usb_rules_target_custom">自定义…</string>
+    <string name="usb_rules_custom_target_title">自定义目标</string>
+    <string name="usb_rules_custom_vm">虚拟机 id（UUID）</string>
+    <string name="usb_rules_custom_controller">控制器 id，留空代表第一个</string>
+    <string name="usb_rules_custom_vm_required">请输入虚拟机 id</string>
+    <string name="usb_rules_target_vm">接到 %1$s</string>
+    <string name="usb_rules_target_controller">接到 %1$s（%2$s）</string>
+    <string name="usb_rules_unknown_controller">%1$s（找不到控制器 %2$s）</string>
+    <string name="usb_rules_no_controller">%1$s（没有 USB 控制器）</string>
+    <string name="usb_rules_unknown_vm">未知的虚拟机（%1$s）</string>
+    <string name="usb_rules_unknown_device">未知设备 %1$s</string>
+    <string name="usb_rules_any_device">任意 USB 设备</string>
+    <string name="usb_rules_device_absent">未插入</string>
+    <string name="usb_rules_device_unnamed">未知设备</string>
+    <string name="usb_rules_match_id_fmt">匹配 识别: %1$s</string>
+    <string name="usb_rules_match_port_fmt">匹配 端口: %1$s</string>
+    <string name="usb_rules_match_any">匹配 任意USB设备</string>
+    <string name="usb_rules_info_id_fmt">识别: %1$s</string>
+    <string name="usb_rules_info_port_fmt">端口: %1$s</string>
+    <string name="usb_rules_edit">编辑</string>
+    <string name="usb_rules_edit_done">完成</string>
+    <string name="usb_rules_reorder">调整顺序</string>
+    <string name="usb_target_host">主机</string>
+    <string name="usb_target_idle">闲置</string>
+    <string name="usb_rules_target_title">编辑 附加目标</string>
+    <string name="usb_rules_attach_to">附加到\u2026</string>
+    <string name="usb_rules_edit_title">编辑 匹配规则</string>
+    <string name="usb_rules_add_title">新增 匹配规则</string>
+    <string name="usb_rules_field_id">识别</string>
+    <string name="usb_rules_field_port">端口</string>
+    <string name="usb_rules_delete_action">删除</string>
+    <string name="usb_rules_delete">删除规则</string>
+    <string name="usb_rules_save">保存并应用</string>
+    <string name="usb_rules_saved">已应用 %1$d 台</string>
+    <string name="usb_rules_released">已交还 %1$d 台给 Android</string>
+    <string name="usb_rules_save_failed_title">规则未保存</string>
+    <string name="usb_rules_request_failed">daemon 拒绝了这个请求</string>
+    <string name="usb_rules_daemon_unavailable">尚未连上 daemon</string>
+    <string name="usb_rules_pick_device_port_fmt">Port %1$s：%2$s</string>
+    <string name="usb_rules_discard_title">放弃更改？</string>
+    <string name="usb_rules_discard_message">规则尚未保存，要不应用就离开吗？</string>
+    <string name="usb_rules_event_attached">%1$s 已自动接入 %2$s</string>
+    <string name="usb_rules_event_failed">%1$s 自动接入 %2$s 失败：%3$s</string>
+    <string name="usb_devices_title">USB直通管理</string>
+    <string name="usb_devices_empty">没有插入的 USB 设备</string>
+    <string name="usb_devices_action_failed_title">设备没有移动</string>
+    <string name="usb_devices_target_claimed">被其他程序占用</string>
+    <string name="usb_devices_idle_kept">%1$s 留在主机：有驱动不肯卸载，要拔掉重插才会回到 Idle</string>
 </resources>
diff --git a/app/src/main/res/values-zh-rTW/strings.xml b/app/src/main/res/values-zh-rTW/strings.xml
index a0fb4cb24..dc09d5438 100644
--- a/app/src/main/res/values-zh-rTW/strings.xml
+++ b/app/src/main/res/values-zh-rTW/strings.xml
@@ -201,7 +201,6 @@
     <string name="create_vm_pmu">PMU (效能監視器)</string>
     <string name="create_vm_rng">RNG (隨機數生成器)</string>
     <string name="create_vm_smt">SMT (同步多執行緒)</string>
-    <string name="create_vm_usb">USB (通用序列匯流排)</string>
     <string name="create_vm_debug">除錯追蹤</string>
     <string name="create_vm_protected_vm">保護模式</string>
     <string name="create_vm_swiotlb_hint">SWIOTLB 大小（保護模式）</string>
@@ -719,9 +718,9 @@
     <string name="linux_vm_create_action">建立</string>
     <string name="linux_vm_create_success">虛擬機器「%1$s」已建立。</string>
     <string name="linux_vm_create_failed">Linux 虛擬機器建立流程未完成。</string>
-    <string name="linux_vm_step_resize">磁碟擴容</string>
-    <string name="linux_vm_create_partial">虛擬機「%1$s」已建立，但下列準備步驟沒有完成：\n%2$s\n\n可以之後從磁碟選單重新執行。</string>
     <string name="linux_vm_create_partial_title">虛擬機已建立</string>
+    <string name="linux_vm_create_partial">虛擬機「%1$s」已建立，但下列準備步驟沒有完成：\n%2$s\n\n可以之後從磁碟選單重新執行。</string>
+    <string name="linux_vm_step_resize">磁碟擴容</string>
 
     <string name="lxc_title">下載發行版 LXC 映像</string>
     <string name="lxc_category_source">來源</string>
@@ -834,9 +833,9 @@
     <string name="agent_operation_running">執行中\u2026</string>
     <string name="agent_operation_success">操作完成。</string>
     <string name="agent_operation_success_skipped">操作完成；有操作不適用，未進行變更。</string>
-    <string name="agent_operation_action_autogrow">檔案系統擴充</string>
-    <string name="agent_operation_action_password">變更密碼</string>
     <string name="agent_operation_partial">操作已完成，但部分步驟失敗：\n%1$s</string>
+    <string name="agent_operation_action_password">變更密碼</string>
+    <string name="agent_operation_action_autogrow">檔案系統擴充</string>
     <string name="agent_operation_failed">操作失敗（退出碼 %1$d）。</string>
     <string name="agent_operation_failed_detail">操作失敗：%1$s</string>
     <string name="agent_operation_prepare_failed">準備代理虛擬機器失敗。</string>
@@ -1541,6 +1540,23 @@
     <string name="edit_vm_sound_underrun_lpc">LPC</string>
     <string name="edit_vm_peripheral_host_output">輸出</string>
     <string name="edit_vm_peripheral_host_input">輸入</string>
+    <string name="edit_vm_peripheral_type_xhci">xHCI USB控制器</string>
+    <string name="edit_vm_xhci_rules_note">綁定存放在 app 的「USB直通規則」。</string>
+    <string name="edit_vm_xhci_passthrough_off">USB 直通未啟用，VM 啟動時會忽略 USB 裝置，請至「設定 → USB直通規則」啟用 USB 直通。</string>
+    <string name="edit_vm_xhci_device_add">新增設備</string>
+    <string name="edit_vm_xhci_device_remove">移除綁定</string>
+    <string name="edit_vm_xhci_usb2_ports">USB 2.0 Port 數</string>
+    <string name="edit_vm_xhci_usb3_ports">USB 3.0 Port 數</string>
+    <string name="edit_vm_xhci_port_item">%1$d Port</string>
+    <string name="edit_vm_xhci_add_custom">自訂…</string>
+    <string name="edit_vm_xhci_custom_title">自訂綁定</string>
+    <string name="edit_vm_xhci_custom_id">裝置 id（vid:pid 或 vid:pid:serial）</string>
+    <string name="edit_vm_xhci_custom_port">Port 路徑，例如 1.2.2</string>
+    <string name="edit_vm_xhci_custom_bad_id">請輸入 vid:pid，可再加序號</string>
+    <string name="edit_vm_xhci_custom_bad_port">請輸入 port 路徑，例如 1.2.2</string>
+    <string name="edit_vm_xhci_crosvm_one_only">crosvm 只支援一個 xHCI，VM 啟動時會略過這個裝置。</string>
+    <string name="edit_vm_xhci_crosvm_ports_fixed">crosvm 只支援 8 Port，啟動時會忽略這個參數。</string>
+    <string name="edit_vm_xhci_rules_save_failed">VM 已儲存，但 USB 綁定沒有：%1$s</string>
     <string name="vm_info_console_stdout_short">stdout</string>
     <string name="vm_info_console_stderr_short">stderr</string>
     <string name="create_vm_category_serial">序列埠</string>
@@ -1575,4 +1591,74 @@
     <string name="settings_usb_acm_disabled">已停用</string>
     <string name="edit_vm_serial_usb_disabled_hint">USB 序列埠（ACM）未啟用；請先到設定啟用，否則此 VM 無法開機。</string>
     <string name="edit_vm_serial_full">這種硬體的埠都已新增。</string>
+    <string name="settings_usb_passthrough_title">USB直通規則</string>
+    <string name="settings_usb_passthrough_summary">插入的 USB 裝置自動接到哪台虛擬機器</string>
+    <string name="settings_usb_devices_title">USB直通管理</string>
+    <string name="settings_usb_devices_summary">直接指定單一裝置的去向，不改規則</string>
+    <string name="usb_rules_title">USB直通規則</string>
+    <string name="usb_rules_unsaved">尚未儲存的變更</string>
+    <string name="usb_rules_enabled">啟用 USB 直通</string>
+    <string name="usb_rules_enabled_note">關閉時不會執行任何直通規則，裝置全部留給 Android</string>
+    <string name="usb_rules_enable_warning_title">要讓 DroidVM 接管 USB 嗎？</string>
+    <string name="usb_rules_enable_warning_message">開啟 USB 直通後，插入的每個 USB 裝置去哪裡都由 DroidVM 決定：裝置不會自己掛上驅動，只有規則指定給主機，Android 才拿得到。</string>
+    <string name="usb_rules_layer_exact">精確</string>
+    <string name="usb_rules_layer_port">端口</string>
+    <string name="usb_rules_layer_device">裝置</string>
+    <string name="usb_rules_layer_any">任意</string>
+    <string name="usb_rules_row_exact_fmt">端口：%1$s，裝置：%2$s（%3$s）</string>
+    <string name="usb_rules_row_port_fmt">端口：%1$s</string>
+    <string name="usb_rules_row_device_fmt">%1$s（%2$s）</string>
+    <string name="usb_rules_empty_exact">尚無精確規則</string>
+    <string name="usb_rules_empty_port">尚無 port 規則</string>
+    <string name="usb_rules_empty_device">尚無裝置規則</string>
+    <string name="usb_rules_empty_any">尚無任意規則</string>
+    <string name="usb_rules_add">新增規則</string>
+    <string name="usb_rules_target_custom">自訂…</string>
+    <string name="usb_rules_custom_target_title">自訂目標</string>
+    <string name="usb_rules_custom_vm">虛擬機器 id（UUID）</string>
+    <string name="usb_rules_custom_controller">控制器 id，留白代表第一個</string>
+    <string name="usb_rules_custom_vm_required">請輸入虛擬機器 id</string>
+    <string name="usb_rules_target_vm">接到 %1$s</string>
+    <string name="usb_rules_target_controller">接到 %1$s（%2$s）</string>
+    <string name="usb_rules_unknown_controller">%1$s（找不到控制器 %2$s）</string>
+    <string name="usb_rules_no_controller">%1$s（沒有 USB 控制器）</string>
+    <string name="usb_rules_unknown_vm">未知的虛擬機器（%1$s）</string>
+    <string name="usb_rules_unknown_device">未知裝置 %1$s</string>
+    <string name="usb_rules_any_device">任意 USB 裝置</string>
+    <string name="usb_rules_device_absent">未插入</string>
+    <string name="usb_rules_device_unnamed">未知裝置</string>
+    <string name="usb_rules_match_id_fmt">匹配 識別: %1$s</string>
+    <string name="usb_rules_match_port_fmt">匹配 端口: %1$s</string>
+    <string name="usb_rules_match_any">匹配 任意USB裝置</string>
+    <string name="usb_rules_info_id_fmt">識別: %1$s</string>
+    <string name="usb_rules_info_port_fmt">端口: %1$s</string>
+    <string name="usb_rules_edit">編輯</string>
+    <string name="usb_rules_edit_done">完成</string>
+    <string name="usb_rules_reorder">調整順序</string>
+    <string name="usb_target_host">主機</string>
+    <string name="usb_target_idle">閒置</string>
+    <string name="usb_rules_target_title">編輯 附加目標</string>
+    <string name="usb_rules_attach_to">附加到\u2026</string>
+    <string name="usb_rules_edit_title">編輯 匹配規則</string>
+    <string name="usb_rules_add_title">新增 匹配規則</string>
+    <string name="usb_rules_field_id">識別</string>
+    <string name="usb_rules_field_port">端口</string>
+    <string name="usb_rules_delete_action">刪除</string>
+    <string name="usb_rules_delete">刪除規則</string>
+    <string name="usb_rules_save">儲存並套用</string>
+    <string name="usb_rules_saved">已套用 %1$d 台</string>
+    <string name="usb_rules_released">已交還 %1$d 台給 Android</string>
+    <string name="usb_rules_save_failed_title">規則未儲存</string>
+    <string name="usb_rules_request_failed">daemon 拒絕了這個請求</string>
+    <string name="usb_rules_daemon_unavailable">尚未連上 daemon</string>
+    <string name="usb_rules_pick_device_port_fmt">Port %1$s：%2$s</string>
+    <string name="usb_rules_discard_title">捨棄變更？</string>
+    <string name="usb_rules_discard_message">規則尚未儲存，要不套用就離開嗎？</string>
+    <string name="usb_rules_event_attached">%1$s 已自動接入 %2$s</string>
+    <string name="usb_rules_event_failed">%1$s 自動接入 %2$s 失敗：%3$s</string>
+    <string name="usb_devices_title">USB直通管理</string>
+    <string name="usb_devices_empty">沒有插入的 USB 裝置</string>
+    <string name="usb_devices_action_failed_title">裝置沒有移動</string>
+    <string name="usb_devices_target_claimed">被其他程式占用</string>
+    <string name="usb_devices_idle_kept">%1$s 留在主機：有驅動不肯卸載，要拔掉重插才會回到 Idle</string>
 </resources>
diff --git a/app/src/main/res/values/strings.xml b/app/src/main/res/values/strings.xml
index 9d912eab9..8fe52bbe4 100644
--- a/app/src/main/res/values/strings.xml
+++ b/app/src/main/res/values/strings.xml
@@ -205,7 +205,6 @@
     <string name="create_vm_pmu">PMU (Performance Monitor Unit)</string>
     <string name="create_vm_rng">RNG (Random Number Generator)</string>
     <string name="create_vm_smt">SMT (Simultaneous MultiThread)</string>
-    <string name="create_vm_usb">USB (Universal Serial Bus)</string>
     <string name="create_vm_debug">Debug trace</string>
     <string name="create_vm_protected_vm">Protected VM</string>
     <string name="create_vm_swiotlb_hint">SWIOTLB Size (Protected VM)</string>
@@ -756,9 +755,9 @@
     <string name="linux_vm_create_action">Create</string>
     <string name="linux_vm_create_success">Virtual machine "%1$s" created.</string>
     <string name="linux_vm_create_failed">Linux virtual machine creation did not complete.</string>
-    <string name="linux_vm_step_resize">Disk resize</string>
-    <string name="linux_vm_create_partial">Virtual machine "%1$s" was created, but these preparation steps did not complete:\n%2$s\n\nYou can run them again from the disk menu.</string>
     <string name="linux_vm_create_partial_title">Virtual machine created</string>
+    <string name="linux_vm_create_partial">Virtual machine "%1$s" was created, but these preparation steps did not complete:\n%2$s\n\nYou can run them again from the disk menu.</string>
+    <string name="linux_vm_step_resize">Disk resize</string>
 
     <string name="lxc_title">Download LXC Distro Image</string>
     <string name="lxc_category_source">Source</string>
@@ -872,9 +871,9 @@
     <string name="agent_operation_running">Running\u2026</string>
     <string name="agent_operation_success">Operation completed successfully.</string>
     <string name="agent_operation_success_skipped">Operation completed; an action was not applicable.</string>
-    <string name="agent_operation_action_autogrow">Filesystem expansion</string>
-    <string name="agent_operation_action_password">Password change</string>
     <string name="agent_operation_partial">Operation completed, but some steps failed:\n%1$s</string>
+    <string name="agent_operation_action_password">Password change</string>
+    <string name="agent_operation_action_autogrow">Filesystem expansion</string>
     <string name="agent_operation_failed">Operation failed (exit code %1$d).</string>
     <string name="agent_operation_failed_detail">Operation failed: %1$s</string>
     <string name="agent_operation_prepare_failed">Failed to prepare agent VM.</string>
@@ -1582,6 +1581,23 @@
     <string name="edit_vm_sound_underrun_lpc">LPC</string>
     <string name="edit_vm_peripheral_host_output">Output</string>
     <string name="edit_vm_peripheral_host_input">Input</string>
+    <string name="edit_vm_peripheral_type_xhci">xHCI USB controller</string>
+    <string name="edit_vm_xhci_rules_note">Bindings live in the app-wide USB passthrough rules.</string>
+    <string name="edit_vm_xhci_passthrough_off">USB passthrough is off: the VM ignores USB devices when it starts. Turn it on under Settings -&gt; USB passthrough rules.</string>
+    <string name="edit_vm_xhci_device_add">Add device</string>
+    <string name="edit_vm_xhci_device_remove">Remove binding</string>
+    <string name="edit_vm_xhci_usb2_ports">USB 2.0 ports</string>
+    <string name="edit_vm_xhci_usb3_ports">USB 3.0 ports</string>
+    <string name="edit_vm_xhci_port_item">%1$d Port</string>
+    <string name="edit_vm_xhci_add_custom">Custom...</string>
+    <string name="edit_vm_xhci_custom_title">Custom binding</string>
+    <string name="edit_vm_xhci_custom_id">Device id (vid:pid or vid:pid:serial)</string>
+    <string name="edit_vm_xhci_custom_port">Port path, for example 1.2.2</string>
+    <string name="edit_vm_xhci_custom_bad_id">Enter vid:pid, optionally with a serial</string>
+    <string name="edit_vm_xhci_custom_bad_port">Enter a port chain such as 1.2.2</string>
+    <string name="edit_vm_xhci_crosvm_one_only">crosvm supports one xHCI controller; the device is skipped when the VM starts.</string>
+    <string name="edit_vm_xhci_crosvm_ports_fixed">crosvm supports 8 ports; this setting is ignored when the VM starts.</string>
+    <string name="edit_vm_xhci_rules_save_failed">The VM was saved, but its USB bindings were not: %1$s</string>
     <string name="vm_info_console_stdout_short">stdout</string>
     <string name="vm_info_console_stderr_short">stderr</string>
     <string name="create_vm_category_serial">Serial ports</string>
@@ -1616,4 +1632,91 @@
     <string name="settings_usb_acm_disabled">Disabled</string>
     <string name="edit_vm_serial_usb_disabled_hint">USB serial (ACM) is disabled; enable it in settings or this VM will not boot.</string>
     <string name="edit_vm_serial_full">All ports of this hardware are already added.</string>
+    <string name="settings_usb_passthrough_title">USB passthrough rules</string>
+    <string name="settings_usb_passthrough_summary">Which VM a plugged-in USB device goes to automatically</string>
+    <string name="settings_usb_devices_title">USB passthrough manager</string>
+    <string name="settings_usb_devices_summary">Send one device somewhere now, without changing the rules</string>
+    <string name="usb_rules_title">USB passthrough rules</string>
+    <string name="usb_rules_unsaved">Unsaved changes</string>
+    <string name="usb_rules_enabled">Enable USB passthrough</string>
+    <string name="usb_rules_enabled_note">While this is off no rule runs, and every device stays with Android</string>
+    <string name="usb_rules_enable_warning_title">Let DroidVM take over USB?</string>
+    <string name="usb_rules_enable_warning_message">While USB passthrough is on, DroidVM decides where every USB device you plug in goes: nothing binds a driver by itself, and a device reaches Android only if a rule says so.</string>
+    <string name="usb_rules_layer_exact">Exact</string>
+    <string name="usb_rules_layer_port">Port</string>
+    <string name="usb_rules_layer_device">Device</string>
+    <string name="usb_rules_layer_any">Any</string>
+    <!-- One bound rule on an xHCI card: the layer is the label to its left, so the value
+         says only what that layer stores. -->
+    <string name="usb_rules_row_exact_fmt">Port: %1$s, Device: %2$s (%3$s)</string>
+    <string name="usb_rules_row_port_fmt">Port: %1$s</string>
+    <string name="usb_rules_row_device_fmt">%1$s (%2$s)</string>
+    <string name="usb_rules_empty_exact">No exact rules</string>
+    <string name="usb_rules_empty_port">No port rules</string>
+    <string name="usb_rules_empty_device">No device rules</string>
+    <string name="usb_rules_empty_any">No catch-all rules</string>
+    <string name="usb_rules_add">Add rule</string>
+    <string name="usb_rules_target_custom">Custom...</string>
+    <string name="usb_rules_custom_target_title">Custom target</string>
+    <string name="usb_rules_custom_vm">VM id (UUID)</string>
+    <string name="usb_rules_custom_controller">Controller id, blank for the first</string>
+    <string name="usb_rules_custom_vm_required">Enter a VM id</string>
+    <string name="usb_rules_target_vm">Attach to %1$s</string>
+    <string name="usb_rules_target_controller">Attach to %1$s (%2$s)</string>
+    <string name="usb_rules_unknown_controller">%1$s (missing controller %2$s)</string>
+    <string name="usb_rules_no_controller">%1$s (no USB controller)</string>
+    <string name="usb_rules_unknown_vm">Unknown VM (%1$s)</string>
+    <string name="usb_rules_unknown_device">Unknown device %1$s</string>
+    <string name="usb_rules_any_device">Any USB device</string>
+    <string name="usb_rules_device_absent">Not plugged in</string>
+    <string name="usb_rules_device_unnamed">Unknown device</string>
+    <string name="usb_rules_device_name_fmt" translatable="false">%1$s (%2$s)</string>
+    <string name="usb_rules_card_title_fmt" translatable="false">USB %1$s %2$s</string>
+    <string name="usb_rules_card_title_plain_fmt" translatable="false">USB %1$s</string>
+    <!-- The bold lines of a rule card: what the rule matches on, which is all of it that is
+         stored. The plain ones below describe the device that matcher resolves to right now. -->
+    <string name="usb_rules_match_id_fmt">Match device: %1$s</string>
+    <string name="usb_rules_match_port_fmt">Match port: %1$s</string>
+    <string name="usb_rules_match_any">Match any USB device</string>
+    <string name="usb_rules_info_id_fmt">Device: %1$s</string>
+    <string name="usb_rules_info_port_fmt">Port: %1$s</string>
+    <string name="usb_rules_value_absent" translatable="false">\u2014</string>
+    <string name="usb_rules_edit">Edit</string>
+    <string name="usb_rules_edit_done">Done</string>
+    <string name="usb_rules_reorder">Reorder</string>
+    <!-- Where a device goes, in the words both USB pages use. A rule sends it somewhere and
+         the management page says where it is, but the answer is the same answer. -->
+    <string name="usb_target_host">Host</string>
+    <string name="usb_target_idle">Idle</string>
+    <string name="usb_rules_target_title">Edit attach target</string>
+    <string name="usb_rules_attach_to">Attach to\u2026</string>
+    <string name="usb_rules_edit_title">Edit match rule</string>
+    <string name="usb_rules_add_title">Add match rule</string>
+    <string name="usb_rules_field_id">Device</string>
+    <string name="usb_rules_field_port">Port</string>
+    <string name="usb_rules_delete_action">Delete</string>
+    <string name="usb_rules_delete">Delete rule</string>
+    <string name="usb_rules_save">Save and apply</string>
+    <string name="usb_rules_saved">Applied to %1$d device(s)</string>
+    <string name="usb_rules_released">Returned %1$d device(s) to Android</string>
+    <string name="usb_rules_save_failed_title">Rules not saved</string>
+    <string name="usb_rules_request_failed">The daemon refused the request</string>
+    <string name="usb_rules_daemon_unavailable">The daemon is not connected</string>
+    <string name="usb_rules_pick_device_exact_fmt" translatable="false">%1$s (%2$s, port %3$s)</string>
+    <string name="usb_rules_pick_device_port_fmt">Port %1$s: %2$s</string>
+    <string name="usb_rules_pick_device_device_fmt" translatable="false">%1$s (%2$s)</string>
+    <string name="usb_rules_vm_label_fmt" translatable="false">%1$s (%2$s)</string>
+    <string name="usb_rules_discard_title">Discard changes?</string>
+    <string name="usb_rules_discard_message">The rules have not been saved. Leave without applying them?</string>
+    <string name="usb_rules_event_attached">%1$s was attached to %2$s automatically</string>
+    <string name="usb_rules_event_failed">Could not attach %1$s to %2$s: %3$s</string>
+    <string name="usb_devices_title">USB passthrough manager</string>
+    <string name="usb_devices_empty">No USB devices are plugged in</string>
+    <string name="usb_devices_action_failed_title">The device did not move</string>
+    <string name="usb_devices_path_fmt" translatable="false">%1$s (%2$s)</string>
+    <!-- Neither the host nor one of our VMs: something opened the device through usbfs. -->
+    <string name="usb_devices_target_claimed">In use elsewhere</string>
+    <!-- U+1F512, as an entity: the base file stays ASCII (scripts/ci/check_ascii.py). -->
+    <string name="usb_devices_locked_fmt" translatable="false">&#128274; %1$s</string>
+    <string name="usb_devices_idle_kept">%1$s stays with the host: a driver of its would not let go, so it goes idle only when it is unplugged</string>
 </resources>
diff --git a/app/src/test/java/cn/classfun/droidvm/daemon/usb/CrosvmUsbControlParseTest.java b/app/src/test/java/cn/classfun/droidvm/daemon/usb/CrosvmUsbControlParseTest.java
new file mode 100644
index 000000000..5b3e2e45e
--- /dev/null
+++ b/app/src/test/java/cn/classfun/droidvm/daemon/usb/CrosvmUsbControlParseTest.java
@@ -0,0 +1,152 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
+package cn.classfun.droidvm.daemon.usb;
+
+import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
+import static org.junit.Assert.assertEquals;
+import static org.junit.Assert.assertFalse;
+import static org.junit.Assert.assertNull;
+import static org.junit.Assert.assertThrows;
+import static org.junit.Assert.assertTrue;
+
+import org.junit.Test;
+
+/** The crosvm usb CLI prints one line; these are the lines it prints. */
+public final class CrosvmUsbControlParseTest {
+    @Test
+    public void attachReturnsThePortItWasGiven() throws Exception {
+        assertEquals(3, CrosvmUsbControl.parseAttach("ok 3\n"));
+    }
+
+    @Test
+    public void attachRefusalBecomesTheToken() {
+        var e = assertThrows(UsbControlException.class,
+            () -> CrosvmUsbControl.parseAttach("no_available_port"));
+        assertEquals("no_available_port", e.token);
+    }
+
+    @Test
+    public void detachReturnsThePort() throws Exception {
+        assertEquals(2, CrosvmUsbControl.parseDetach("ok 2"));
+    }
+
+    @Test
+    public void listSplitsIntoPortVidPid() throws Exception {
+        var entries = CrosvmUsbControl.parseList("devices 1 090c 1000 2 0bda 8153");
+        assertEquals(2, entries.size());
+        assertEquals(1, entries.get(0).port);
+        assertEquals("090c", entries.get(0).vid);
+        assertEquals("1000", entries.get(0).pid);
+        assertEquals(2, entries.get(1).port);
+        assertEquals("0bda", entries.get(1).vid);
+        assertEquals("8153", entries.get(1).pid);
+    }
+
+    @Test
+    public void anEmptyListIsJustTheKeyword() throws Exception {
+        assertTrue(CrosvmUsbControl.parseList("devices").isEmpty());
+    }
+
+    @Test
+    public void listRefusesAPartialGroup() {
+        // Two tokens after the keyword address no device; taking the empty prefix of them would
+        // report a VM with nothing attached.
+        assertThrows(UsbControlException.class,
+            () -> CrosvmUsbControl.parseList("devices 1 090c"));
+    }
+
+    @Test
+    public void aConnectFailureIsTheVmmBeingUnreachable() {
+        // What the CLI wrote, on device, when run at the RUNNING edge: the VMM was not up yet.
+        assertTrue(CrosvmUsbControl.isUnreachable(
+            "[ERROR vm_control::sys::linux] failed to connect to socket at "
+                + "\"/data/data/cn.classfun.droidvm/run/vm/crosvm.sock\": "
+                + "Connection refused (os error 111)\n"
+                + "exiting with error 1: usb subcommand failed"));
+        // Anything the VMM or the device answered is not that.
+        assertFalse(CrosvmUsbControl.isUnreachable("exiting with error 1: usb subcommand failed"));
+        assertFalse(CrosvmUsbControl.isUnreachable("no_available_port"));
+        assertFalse(CrosvmUsbControl.isUnreachable(""));
+    }
+
+    @Test
+    public void listRefusesAnythingElse() {
+        var e = assertThrows(UsbControlException.class,
+            () -> CrosvmUsbControl.parseList("garbage"));
+        assertEquals("garbage", e.token);
+    }
+
+    /** What the VMM logged, on device, while refusing the attach that got no_available_port. */
+    private static final String HUB_DIED =
+        "[2026-09-05T12:28:12.882479153+00:00 INFO  hypervisor::gunyah::aarch64] GH: layout\n"
+            + "[2026-09-05T12:28:12.898585091+00:00 INFO  devices::usb::xhci::usb_hub] "
+            + "usb_hub: backend attached to port 1\n"
+            + "[2026-09-05T12:28:12.898643059+00:00 ERROR devices::usb::backend::device_provider] "
+            + "failed to connect device to hub: failed to attach device to port 1: "
+            + "cannot add event: event ring is uninitialized\n"
+            + "[2026-09-05T12:28:13.107326028+00:00 ERROR devices::usb::xhci::ring_buffer_stop_cb] "
+            + "callback failed failed to detach device from port 1: "
+            + "cannot add event: event ring is uninitialized\n";
+    private static final String HUB_DIED_CAUSE = "failed to connect device to hub: "
+        + "failed to attach device to port 1: cannot add event: event ring is uninitialized";
+    /** An ERROR from another subsystem entirely, which the same log carries first. */
+    private static final String GPU_ERROR_LINE =
+        "[2026-09-05T12:28:12.1+00:00 ERROR rutabaga_gfx::virgl_renderer] "
+            + "kgsl_ccmd_gem_set_iova:1412: Could not lookup obj: res_id=2\n";
+    private static final String GPU_ERROR_CAUSE =
+        "kgsl_ccmd_gem_set_iova:1412: Could not lookup obj: res_id=2";
+
+    @Test
+    public void theFirstErrorLineIsTheCauseWithoutItsPrefix() {
+        assertEquals(HUB_DIED_CAUSE, CrosvmUsbControl.firstErrorLine(HUB_DIED));
+    }
+
+    @Test
+    public void infoAndWarnLinesAreNotACause() {
+        assertNull(CrosvmUsbControl.firstErrorLine(""));
+        assertNull(CrosvmUsbControl.firstErrorLine(
+            "[2026-09-05T12:28:12.899414830+00:00 INFO  crosvm] exiting with success\n"));
+        assertNull(CrosvmUsbControl.firstErrorLine(
+            "[2026-09-05T12:22:44.785153705+00:00 WARN  devices::usb::xhci::xhci_transfer] "
+                + "xhci: endpoint is stalled. set state to Halted"));
+        // The word alone, outside crosvm's log shape, is not one of its lines.
+        assertNull(CrosvmUsbControl.firstErrorLine("ERROR: something else entirely"));
+    }
+
+    @Test
+    public void aUsbErrorWinsOverAnEarlierUnrelatedOne() {
+        var gpuFirst = fmt("%s%s", GPU_ERROR_LINE, HUB_DIED);
+        assertEquals(HUB_DIED_CAUSE, CrosvmUsbControl.firstErrorLine(gpuFirst));
+        // With no USB line at all, the first ERROR is still better than nothing.
+        assertEquals(GPU_ERROR_CAUSE, CrosvmUsbControl.firstErrorLine(GPU_ERROR_LINE));
+        // A build whose logger prints no time is read the same way.
+        assertEquals("boom", CrosvmUsbControl.firstErrorLine("[ERROR devices::usb::xhci] boom"));
+    }
+
+    @Test
+    public void aRefusalWithoutAnErrorLineIsJustTheToken() {
+        assertEquals("crosvm usb attach failed: no_available_port",
+            CrosvmUsbControl.attachFailureMessage("no_available_port",
+                "[2026-09-05T12:28:12.899414830+00:00 INFO  crosvm] exiting with success", ""));
+        assertEquals("crosvm usb attach failed: failed_to_open_device",
+            CrosvmUsbControl.attachFailureMessage("failed_to_open_device", "", ""));
+    }
+
+    @Test
+    public void aRefusalCarriesTheCauseTheVmmLogged() {
+        // The on-device case: the CLI's stderr says success, the VMM's says why.
+        assertEquals(fmt("crosvm usb attach failed: no_available_port (%s)", HUB_DIED_CAUSE),
+            CrosvmUsbControl.attachFailureMessage("no_available_port",
+                "[2026-09-05T12:28:12.899414830+00:00 INFO  crosvm] exiting with success",
+                HUB_DIED));
+    }
+
+    @Test
+    public void theCliOwnStderrIsReadFirst() {
+        assertEquals("crosvm usb attach failed: no_such_device (cli said so)",
+            CrosvmUsbControl.attachFailureMessage("no_such_device",
+                "[ERROR crosvm] cli said so",
+                "[ERROR devices::foo] vmm said so"));
+    }
+}
diff --git a/app/src/test/java/cn/classfun/droidvm/daemon/usb/UsbHostDeviceTest.java b/app/src/test/java/cn/classfun/droidvm/daemon/usb/UsbHostDeviceTest.java
new file mode 100644
index 000000000..dfe2114e2
--- /dev/null
+++ b/app/src/test/java/cn/classfun/droidvm/daemon/usb/UsbHostDeviceTest.java
@@ -0,0 +1,267 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
+package cn.classfun.droidvm.daemon.usb;
+
+import static org.junit.Assert.assertEquals;
+import static org.junit.Assert.assertFalse;
+import static org.junit.Assert.assertNotNull;
+import static org.junit.Assert.assertNull;
+import static org.junit.Assert.assertTrue;
+
+import org.junit.Rule;
+import org.junit.Test;
+import org.junit.rules.TemporaryFolder;
+
+import java.io.File;
+import java.io.IOException;
+import java.nio.charset.StandardCharsets;
+import java.nio.file.Files;
+import java.util.ArrayList;
+import java.util.Arrays;
+import java.util.List;
+import java.util.Map;
+
+/**
+ * Covers the sysfs parsing, over a temporary directory shaped like the real one.
+ *
+ * <p>Nothing asserts on what {@code toJson()} put in the object: unit tests run against the
+ * stubbed android.jar, where {@code org.json} does nothing and reports nothing (see the
+ * {@code isReturnDefaultValues} comment in app/build.gradle.kts). Calling it still proves the
+ * mapping compiles and runs over every field, and {@code toMap()} -- which is what it iterates --
+ * carries the wire shape that a client depends on.</p>
+ */
+public final class UsbHostDeviceTest {
+    @Rule
+    public final TemporaryFolder folder = new TemporaryFolder();
+
+    private static void write(File dir, String name, String content) throws IOException {
+        Files.write(new File(dir, name).toPath(), content.getBytes(StandardCharsets.UTF_8));
+    }
+
+    /** A USB mass-storage stick, the way the kernel describes one. */
+    private File writeFlashDrive(File root) throws IOException {
+        var dev = new File(root, "1-1.1");
+        assertTrue(dev.mkdirs());
+        write(dev, "idVendor", "090c\n");
+        write(dev, "idProduct", "1000\n");
+        write(dev, "busnum", "1\n");
+        write(dev, "devnum", "4\n");
+        write(dev, "bDeviceClass", "00\n");
+        write(dev, "speed", "480\n");
+        write(dev, "manufacturer", "Silicon Motion\n");
+        write(dev, "product", "USB DISK\n");
+        write(dev, "serial", "0123456789ABCDEF\n");
+        var iface = new File(dev, "1-1.1:1.0");
+        assertTrue(iface.mkdirs());
+        write(iface, "bInterfaceClass", "08\n");
+        write(iface, "bInterfaceSubClass", "06\n");
+        write(iface, "bInterfaceProtocol", "50\n");
+        return dev;
+    }
+
+    /** Points the interface's driver link at a directory named after the driver, as sysfs does. */
+    private void bindDriver(File ifaceDir, String driver) throws IOException {
+        var drivers = folder.getRoot().toPath().resolve("drivers");
+        Files.createDirectories(drivers.resolve(driver));
+        Files.createSymbolicLink(ifaceDir.toPath().resolve("driver"), drivers.resolve(driver));
+    }
+
+    @Test
+    public void readsEveryFieldOfAMassStorageDevice() throws Exception {
+        var root = folder.newFolder("sysfs");
+        var dev = writeFlashDrive(root);
+        bindDriver(new File(dev, "1-1.1:1.0"), "usb-storage");
+
+        var device = UsbHostDevice.fromSysfs(dev, "/dev/bus/usb");
+        assertEquals("1-1.1", device.sysfs);
+        assertEquals(1, device.busnum);
+        assertEquals(4, device.devnum);
+        assertEquals("/dev/bus/usb/001/004", device.node);
+        assertEquals("090c", device.vid);
+        assertEquals("1000", device.pid);
+        assertEquals("Silicon Motion", device.manufacturer);
+        assertEquals("USB DISK", device.product);
+        assertEquals("0123456789ABCDEF", device.serial);
+        assertEquals("480", device.speed);
+        assertEquals("00", device.deviceClass);
+        assertEquals(1, device.interfaces.size());
+        var iface = device.interfaces.get(0);
+        assertEquals("1-1.1:1.0", iface.name);
+        assertEquals("08", iface.cls);
+        assertEquals("06", iface.subcls);
+        assertEquals("50", iface.proto);
+        assertEquals("usb-storage", iface.driver);
+        assertFalse(device.isHub());
+        assertEquals(UsbHostDevice.State.HOSTUSE, device.state());
+        assertNotNull(device.toJson());
+    }
+
+    @Test
+    public void missingOptionalFilesReadAsEmpty() throws Exception {
+        var root = folder.newFolder("sysfs");
+        var dev = writeFlashDrive(root);
+        assertTrue(new File(dev, "manufacturer").delete());
+        assertTrue(new File(dev, "serial").delete());
+
+        var device = UsbHostDevice.fromSysfs(dev, "/dev/bus/usb");
+        assertEquals("", device.manufacturer);
+        assertEquals("", device.serial);
+        assertEquals("USB DISK", device.product);
+    }
+
+    @Test
+    public void theRuleIdIsVidPidAndSerial() throws Exception {
+        var root = folder.newFolder("sysfs");
+        var dev = writeFlashDrive(root);
+
+        assertEquals("090c:1000:0123456789ABCDEF", UsbHostDevice.fromSysfs(dev, "/dev/bus/usb").id);
+        assertTrue(new File(dev, "serial").delete());
+        assertEquals("090c:1000", UsbHostDevice.fromSysfs(dev, "/dev/bus/usb").id);
+    }
+
+    @Test
+    public void theRuleIdLowercasesTheHexAndKeepsTheSerial() {
+        assertEquals("090c:1000:ABC-def", UsbHostDevice.deriveId("090C", "1000", "ABC-def"));
+        assertEquals("0bda:8153", UsbHostDevice.deriveId("0BDA", "8153", ""));
+    }
+
+    @Test
+    public void thePortIsTheSysfsNameWithoutItsBus() throws Exception {
+        var root = folder.newFolder("sysfs");
+        assertEquals("1.1", UsbHostDevice.fromSysfs(writeFlashDrive(root), "/dev/bus/usb").port);
+        assertEquals("1.2.2", UsbHostDevice.derivePort("1-1.2.2"));
+        assertEquals("1.4", UsbHostDevice.derivePort("2-1.4"));
+        // One socket, two buses: a USB2 device enumerates on bus 1 and a USB3 one on bus 2, and
+        // only with the bus gone do the two name the same place.
+        assertEquals(UsbHostDevice.derivePort("1-1.4"), UsbHostDevice.derivePort("2-1.4"));
+        assertEquals("3", UsbHostDevice.derivePort("1-3"));
+    }
+
+    @Test
+    public void aDeviceClassOfNineIsAHub() throws Exception {
+        var root = folder.newFolder("sysfs");
+        var dev = writeFlashDrive(root);
+        write(dev, "bDeviceClass", "09\n");
+
+        assertTrue(UsbHostDevice.fromSysfs(dev, "/dev/bus/usb").isHub());
+    }
+
+    @Test
+    public void authorizedIsReadFromSysfsAndAbsentMeansAuthorized() throws Exception {
+        // Nothing writes this any more; it is read so that the daemon's start-up migration can
+        // find a device an older build hid this way and give it back.
+        var root = folder.newFolder("sysfs");
+        var dev = writeFlashDrive(root);
+        // A device nobody deauthorized: the file is there and says 1.
+        write(dev, "authorized", "1\n");
+        assertTrue(UsbHostDevice.fromSysfs(dev, "/dev/bus/usb").authorized);
+        // What the older build's sink left behind: no configuration, no interfaces, and nothing
+        // in the state model able to see it.
+        write(dev, "authorized", "0\n");
+        assertFalse(UsbHostDevice.fromSysfs(dev, "/dev/bus/usb").authorized);
+        // A kernel or a device without the attribute is not a deauthorized one.
+        assertTrue(new File(dev, "authorized").delete());
+        assertTrue(UsbHostDevice.fromSysfs(dev, "/dev/bus/usb").authorized);
+    }
+
+    @Test
+    public void aDeviceWithNothingBoundToItIsIdle() throws Exception {
+        // What the autoprobe gate leaves behind: fully enumerated, interfaces and all, and not
+        // one driver bound to any of them.
+        var root = folder.newFolder("sysfs");
+        var dev = writeFlashDrive(root);
+
+        var device = UsbHostDevice.fromSysfs(dev, "/dev/bus/usb");
+        assertEquals(1, device.interfaces.size());
+        assertEquals("", device.interfaces.get(0).driver);
+        assertEquals(UsbHostDevice.State.IDLE, device.state());
+    }
+
+    @Test
+    public void aUsbfsClaimIsAVmUsingTheDeviceAndOutranksAHostDriver() throws Exception {
+        var root = folder.newFolder("sysfs");
+        var dev = writeFlashDrive(root);
+        bindDriver(new File(dev, "1-1.1:1.0"), "usbfs");
+        assertEquals(UsbHostDevice.State.VMUSE,
+            UsbHostDevice.fromSysfs(dev, "/dev/bus/usb").state());
+
+        // Half claimed, which only happens while a VMM is dying: the live fd wins, because a
+        // device with an owner may not be handed to anybody, and the leftovers are what take a
+        // claim nobody owns any more off it.
+        var second = new File(dev, "1-1.1:1.1");
+        assertTrue(second.mkdirs());
+        bindDriver(second, "usb-storage");
+        assertEquals(UsbHostDevice.State.VMUSE,
+            UsbHostDevice.fromSysfs(dev, "/dev/bus/usb").state());
+    }
+
+    @Test
+    public void aStateReadsBackFromTheKeyItWentOutUnder() {
+        // What the pages do with the wire: the state is the whole of where a device is, so a
+        // key this build has no word for has to say so rather than pass for one of the three.
+        for (var state : UsbHostDevice.State.values())
+            assertEquals(state, UsbHostDevice.State.fromKey(state.key));
+        assertNull(UsbHostDevice.State.fromKey("sinked"));
+        assertNull(UsbHostDevice.State.fromKey(""));
+    }
+
+    @Test
+    public void theWireShapeIsFixed() throws Exception {
+        var root = folder.newFolder("sysfs");
+        var dev = writeFlashDrive(root);
+        bindDriver(new File(dev, "1-1.1:1.0"), "usb-storage");
+
+        var map = UsbHostDevice.fromSysfs(dev, "/dev/bus/usb").toMap();
+        assertEquals(Arrays.asList("sysfs", "id", "port", "busnum", "devnum", "node", "vid", "pid",
+                "manufacturer", "product", "serial", "speed", "device_class", "state",
+                "interfaces"),
+            new ArrayList<>(map.keySet()));
+        var interfaces = (List<?>) map.get("interfaces");
+        assertNotNull(interfaces);
+        assertEquals(1, interfaces.size());
+        assertEquals(Arrays.asList("name", "class", "subclass", "protocol", "driver"),
+            new ArrayList<>(((Map<?, ?>) interfaces.get(0)).keySet()));
+    }
+
+    @Test
+    public void aRootHubsInterfacesAreNamedAfterItsBusAndNotAfterIt() {
+        // The one exception the naming scheme has, and the whole of why it is worth a test: a
+        // sweep that looked for "usb3:" would find no interface, write nothing, and leave a
+        // root hub without a driver -- which is a bus whose ports are never scanned, so nothing
+        // plugged into it enumerates and no trigger is ever raised to notice.
+        assertTrue(UsbHostDevice.isRootHubName("usb1"));
+        assertTrue(UsbHostDevice.isRootHubName("usb12"));
+        assertFalse(UsbHostDevice.isRootHubName("1-1"));
+        assertFalse(UsbHostDevice.isRootHubName("1-1.4:1.0"));
+        assertFalse(UsbHostDevice.isRootHubName("usbmisc"));
+        assertEquals("3-0:", UsbHostDevice.interfacePrefix("usb3"));
+        assertEquals("1-1.4:", UsbHostDevice.interfacePrefix("1-1.4"));
+    }
+
+    @Test
+    public void scanTakesEveryDeviceAndTheHubsWithThem() throws Exception {
+        var root = folder.newFolder("sysfs");
+        writeFlashDrive(root);
+        // A hub: on the same bus, and the thing the stick hangs off.
+        var hub = new File(root, "1-1");
+        assertTrue(hub.mkdirs());
+        write(hub, "idVendor", "05e3\n");
+        write(hub, "idProduct", "0610\n");
+        write(hub, "busnum", "1\n");
+        write(hub, "devnum", "3\n");
+        write(hub, "bDeviceClass", "09\n");
+        // A root hub and an interface directory, both of which sit next to the devices.
+        assertTrue(new File(root, "usb1").mkdirs());
+        assertTrue(new File(root, "1-1.1:1.0").mkdirs());
+
+        // The hub is in: one the gate left driverless is a whole subtree that never enumerates,
+        // so the pass has to be able to see it and give it back. A root hub and an interface
+        // directory are not devices and stay out.
+        var devices = new UsbHostInventory(root.getAbsolutePath(), "/dev/bus/usb").scan();
+        assertEquals(2, devices.size());
+        assertEquals("1-1", devices.get(0).sysfs);
+        assertTrue(devices.get(0).isHub());
+        assertEquals("1-1.1", devices.get(1).sysfs);
+    }
+}
diff --git a/app/src/test/java/cn/classfun/droidvm/daemon/usb/UsbHostInventoryTest.java b/app/src/test/java/cn/classfun/droidvm/daemon/usb/UsbHostInventoryTest.java
new file mode 100644
index 000000000..a1fee4d3b
--- /dev/null
+++ b/app/src/test/java/cn/classfun/droidvm/daemon/usb/UsbHostInventoryTest.java
@@ -0,0 +1,267 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
+package cn.classfun.droidvm.daemon.usb;
+
+import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
+import static org.junit.Assert.assertEquals;
+import static org.junit.Assert.assertFalse;
+import static org.junit.Assert.assertTrue;
+
+import org.junit.Rule;
+import org.junit.Test;
+import org.junit.rules.TemporaryFolder;
+
+import java.io.File;
+import java.io.IOException;
+import java.nio.charset.StandardCharsets;
+import java.nio.file.Files;
+import java.util.ArrayList;
+import java.util.List;
+
+/**
+ * What one rescan calls a difference, over a temporary directory scanned twice. The listener is
+ * called for a difference and for nothing else, so this is where the pass's trigger is decided:
+ * an addition is not the only news there is, and the case that left the phone's tree dead -- a
+ * device that lost its driver, or gained interfaces nothing holds -- has to read as one.
+ */
+public final class UsbHostInventoryTest {
+    /** Hub class, as the kernel prints it in bDeviceClass and bInterfaceClass alike. */
+    private static final String CLASS_HUB = "09";
+    /** Video class: what the camera of the on-device run reads once it is configured. */
+    private static final String CLASS_VIDEO = "0e";
+
+    @Rule
+    public final TemporaryFolder folder = new TemporaryFolder();
+
+    private static void write(File dir, String name, String content) throws IOException {
+        Files.write(new File(dir, name).toPath(), content.getBytes(StandardCharsets.UTF_8));
+    }
+
+    /** A device directory, with the files every scan needs and no interface yet. */
+    private File device(String sysfs, int devnum, String deviceClass) throws IOException {
+        var dev = new File(folder.getRoot(), sysfs);
+        assertTrue(dev.isDirectory() || dev.mkdirs());
+        write(dev, "idVendor", "32e6\n");
+        write(dev, "idProduct", "9221\n");
+        write(dev, "busnum", "1\n");
+        write(dev, "devnum", fmt("%d\n", devnum));
+        write(dev, "bDeviceClass", fmt("%s\n", deviceClass));
+        return dev;
+    }
+
+    /**
+     * A root hub directory. The kernel names it {@code usbN} and its interface {@code N-0:1.0},
+     * which is the one place the interface's name is not the device's name and a colon.
+     */
+    private File rootHub(String sysfs, int devnum) throws IOException {
+        var dev = new File(folder.getRoot(), sysfs);
+        assertTrue(dev.isDirectory() || dev.mkdirs());
+        write(dev, "idVendor", "1d6b\n");
+        write(dev, "idProduct", "0002\n");
+        write(dev, "busnum", fmt("%s\n", sysfs.substring("usb".length())));
+        write(dev, "devnum", fmt("%d\n", devnum));
+        write(dev, "bDeviceClass", fmt("%s\n", CLASS_HUB));
+        return dev;
+    }
+
+    /** A root hub's own interface, which lives inside it under the bus's number and port zero. */
+    private File addRootHubInterface(File dev) throws IOException {
+        var iface = new File(dev, fmt("%s-0:1.0", dev.getName().substring("usb".length())));
+        assertTrue(iface.isDirectory() || iface.mkdirs());
+        write(iface, "bInterfaceClass", fmt("%s\n", CLASS_HUB));
+        return iface;
+    }
+
+    /** An interface directory, inside its device's, which is where a scan reads it. */
+    private File addInterface(File dev, int index, String cls) throws IOException {
+        var iface = new File(dev, fmt("%s:1.%d", dev.getName(), index));
+        assertTrue(iface.isDirectory() || iface.mkdirs());
+        write(iface, "bInterfaceClass", fmt("%s\n", cls));
+        return iface;
+    }
+
+    /** Points an interface's driver link at a directory named after the driver, as sysfs does. */
+    private void bindDriver(File iface, String driver) throws IOException {
+        var drivers = folder.getRoot().toPath().resolve("drivers");
+        Files.createDirectories(drivers.resolve(driver));
+        Files.createSymbolicLink(iface.toPath().resolve("driver"), drivers.resolve(driver));
+    }
+
+    /** An unplug: the kernel takes the whole directory with it, interfaces and all. */
+    private static void unplug(File dev) {
+        var entries = dev.listFiles();
+        if (entries != null)
+            for (var entry : entries) {
+                if (entry.isDirectory()) unplug(entry);
+                else assertTrue(entry.delete());
+            }
+        assertTrue(dev.delete());
+    }
+
+    private List<UsbHostDevice> scan() {
+        return new UsbHostInventory(folder.getRoot().getAbsolutePath(), "/dev/bus/usb").scan();
+    }
+
+    private static List<String> names(List<UsbHostDevice> devices) {
+        var names = new ArrayList<String>();
+        for (var device : devices) names.add(device.sysfs);
+        return names;
+    }
+
+    @Test
+    public void twoReadingsOfAnUnmovedTreeAreNoDifference() throws IOException {
+        addInterface(device("1-1.3", 4, "ef"), 0, CLASS_VIDEO);
+        var diff = UsbHostInventory.Diff.between(scan(), scan());
+        assertTrue(diff.isEmpty());
+        assertEquals(1, diff.all.size());
+    }
+
+    @Test
+    public void aDeviceThatArrivedIsAnAddition() throws IOException {
+        var before = scan();
+        addInterface(device("1-1.3", 4, "ef"), 0, CLASS_VIDEO);
+        var diff = UsbHostInventory.Diff.between(before, scan());
+        assertFalse(diff.isEmpty());
+        assertEquals(List.of("1-1.3"), names(diff.added));
+        assertTrue(diff.removed.isEmpty());
+        assertTrue(diff.changed.isEmpty());
+        assertEquals("plug", diff.reason());
+    }
+
+    @Test
+    public void aRemovalOnlyDiffIsStillADifference() throws IOException {
+        var dev = device("1-1.2.1", 57, "00");
+        addInterface(dev, 0, "08");
+        var before = scan();
+        // The subtree of the on-device run going down with its hub: nothing was added, and the
+        // pass that gives the hub its driver back is the only thing that can bring any of it
+        // back. A diff that reports only removals used to raise no pass at all.
+        unplug(dev);
+        var diff = UsbHostInventory.Diff.between(before, scan());
+        assertFalse(diff.isEmpty());
+        assertEquals(List.of("1-1.2.1"), names(diff.removed));
+        assertTrue(diff.added.isEmpty());
+        assertTrue(diff.changed.isEmpty());
+        assertEquals("unplug", diff.reason());
+    }
+
+    @Test
+    public void aDeviceThatLostItsDriverIsADifference() throws IOException {
+        var dev = device("1-1", 2, CLASS_HUB);
+        var iface = addInterface(dev, 0, CLASS_HUB);
+        bindDriver(iface, "hub");
+        var before = scan();
+        assertEquals(UsbHostDevice.State.HOSTUSE, before.get(0).state());
+        // The hub of the on-device run, unbound by hand: binding and unbinding creates and
+        // removes no device node, so this difference is the only thing that can mention it.
+        assertTrue(new File(iface, "driver").delete());
+        var now = scan();
+        assertEquals(UsbHostDevice.State.IDLE, now.get(0).state());
+        var diff = UsbHostInventory.Diff.between(before, now);
+        assertFalse(diff.isEmpty());
+        assertEquals(List.of("1-1"), names(diff.changed));
+        assertTrue(diff.added.isEmpty());
+        assertTrue(diff.removed.isEmpty());
+        assertEquals("drivers", diff.reason());
+    }
+
+    @Test
+    public void interfacesAppearingWithNoDriverAreADifferenceTheStateCannotSee() throws IOException {
+        var dev = device("1-1", 2, CLASS_HUB);
+        var before = scan();
+        // A device probe has just given it a configuration: the interfaces exist and the gate
+        // keeps every driver off them, so it reads idle before and idle after. The interface
+        // probe that revives the subtree is still owed, and only this difference asks for it.
+        addInterface(dev, 0, CLASS_HUB);
+        var now = scan();
+        assertEquals(UsbHostDevice.State.IDLE, before.get(0).state());
+        assertEquals(UsbHostDevice.State.IDLE, now.get(0).state());
+        var diff = UsbHostInventory.Diff.between(before, now);
+        assertFalse(diff.isEmpty());
+        assertEquals(List.of("1-1"), names(diff.changed));
+        assertEquals("drivers", diff.reason());
+    }
+
+    @Test
+    public void aReplugAtTheSameNameIsAnAdditionAndARemoval() throws IOException {
+        addInterface(device("1-1.3", 4, "ef"), 0, CLASS_VIDEO);
+        var before = scan();
+        // Both halves inside one quiet period: the same sysfs name, a fresh devnum. By name
+        // alone the two scans would agree that nothing had happened.
+        device("1-1.3", 90, "ef");
+        var diff = UsbHostInventory.Diff.between(before, scan());
+        assertEquals(List.of("1-1.3"), names(diff.added));
+        assertEquals(List.of("1-1.3"), names(diff.removed));
+        assertTrue(diff.changed.isEmpty());
+        assertEquals(90, diff.added.get(0).devnum);
+        assertEquals("plug", diff.reason());
+    }
+
+    /**
+     * The regression the dead bus was: a root hub is in the scan, so its arrival is a difference
+     * and a pass follows it.
+     *
+     * <p>A dual-role port switching back to host re-registers the controller and the kernel
+     * deletes and creates the root hub's node inside a bus directory that never went away, so
+     * {@code onBusesChanged} is not raised and this diff is the only news there is. On the phone
+     * it was not raised: both root hubs came back unconfigured under the shut gate, no
+     * {@code 1-0:1.0} existed, every device below them was gone from sysfs, and the daemon
+     * logged nothing at all for the six minutes until the hubs were probed by hand.</p>
+     */
+    @Test
+    public void aRootHubThatArrivedIsAnAddition() throws IOException {
+        var before = scan();
+        rootHub("usb1", 1);
+        var diff = UsbHostInventory.Diff.between(before, scan());
+        assertEquals(List.of("usb1"), names(diff.added));
+        assertEquals("plug", diff.reason());
+        assertFalse(diff.isEmpty());
+    }
+
+    /**
+     * And it reads as the thing a pass has to act on: no interface at all is no driver bound,
+     * which is idle, which is what sends it down the "no rule speaks for it, the host gets it"
+     * path the external hubs already take.
+     */
+    @Test
+    public void aRootHubWithNoConfigurationReadsIdle() throws IOException {
+        rootHub("usb2", 1);
+        var devices = scan();
+        assertEquals(List.of("usb2"), names(devices));
+        var hub = devices.get(0);
+        assertTrue(hub.interfaces.isEmpty());
+        assertTrue(hub.isHub());
+        assertEquals(UsbHostDevice.State.IDLE, hub.state());
+    }
+
+    /**
+     * Its interface is read under the name the kernel gives it, not under the device's own name
+     * and a colon. Read that wrong and a healthy bus reads idle forever: every pass would probe
+     * it again, and a driver it lost would never register as a difference.
+     */
+    @Test
+    public void aRootHubsInterfaceIsReadUnderTheBusName() throws IOException {
+        var hub = rootHub("usb1", 1);
+        bindDriver(addRootHubInterface(hub), "hub");
+        var devices = scan();
+        assertEquals(1, devices.size());
+        var device = devices.get(0);
+        assertEquals(List.of("1-0:1.0"), List.of(device.interfaces.get(0).name));
+        assertEquals("hub", device.interfaces.get(0).driver);
+        assertEquals(UsbHostDevice.State.HOSTUSE, device.state());
+    }
+
+    /** A root hub losing its driver is a difference, so the sweep that gives it back is reached. */
+    @Test
+    public void aRootHubThatLostItsDriverIsAChange() throws IOException {
+        var hub = rootHub("usb1", 1);
+        var iface = addRootHubInterface(hub);
+        bindDriver(iface, "hub");
+        var before = scan();
+        assertTrue(Files.deleteIfExists(iface.toPath().resolve("driver")));
+        var diff = UsbHostInventory.Diff.between(before, scan());
+        assertEquals(List.of("usb1"), names(diff.changed));
+        assertEquals("drivers", diff.reason());
+    }
+}
diff --git a/app/src/test/java/cn/classfun/droidvm/daemon/usb/UsbLeftoversTest.java b/app/src/test/java/cn/classfun/droidvm/daemon/usb/UsbLeftoversTest.java
new file mode 100644
index 000000000..0eeaa43d3
--- /dev/null
+++ b/app/src/test/java/cn/classfun/droidvm/daemon/usb/UsbLeftoversTest.java
@@ -0,0 +1,126 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
+package cn.classfun.droidvm.daemon.usb;
+
+import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
+import static org.junit.Assert.assertEquals;
+import static org.junit.Assert.assertFalse;
+import static org.junit.Assert.assertTrue;
+
+import org.junit.Test;
+
+import java.util.List;
+import java.util.Map;
+
+/**
+ * The record of interfaces a restore pass could not give back, fed the outcomes by hand: what
+ * a VM's exit is owed, what a scan makes of them, and what an unplug forgets. No sysfs -- the
+ * waiting and the probing are the manager's and are not exercised here.
+ */
+public final class UsbLeftoversTest {
+    private static final String VM_A = "0f4c9e2a-0000-4000-8000-00000000000a";
+    private static final String VM_B = "0f4c9e2a-0000-4000-8000-00000000000b";
+
+    /** The audio device of the on-device run, left whole by VM A. */
+    private static UsbLeftovers audioLeftByA() {
+        var leftovers = new UsbLeftovers();
+        for (var i = 0; i < 4; i++) leftovers.leave(fmt("1-1.2.2:1.%d", i), VM_A);
+        return leftovers;
+    }
+
+    @Test
+    public void startsEmpty() {
+        var leftovers = new UsbLeftovers();
+        assertTrue(leftovers.isEmpty());
+        assertEquals(0, leftovers.size());
+        assertTrue(leftovers.leftBy(VM_A).isEmpty());
+        assertTrue(leftovers.take(List.of("1-1.2.2:1.0")).isEmpty());
+    }
+
+    @Test
+    public void aVmIsOwedWhatItLeftAndNothingElse() {
+        var leftovers = audioLeftByA();
+        leftovers.leave("1-1.3:1.0", VM_B);
+        assertEquals(5, leftovers.size());
+        assertEquals(List.of("1-1.2.2:1.0", "1-1.2.2:1.1", "1-1.2.2:1.2", "1-1.2.2:1.3"),
+            leftovers.leftBy(VM_A));
+        assertEquals(List.of("1-1.3:1.0"), leftovers.leftBy(VM_B));
+        // A query, not a take: the exit that acts on it takes afterwards.
+        assertEquals(5, leftovers.size());
+    }
+
+    @Test
+    public void aTakeRemovesTheInterfacesAndNamesTheirVm() {
+        var leftovers = audioLeftByA();
+        leftovers.leave("1-1.3:1.0", VM_B);
+        var taken = leftovers.take(List.of("1-1.2.2:1.0", "1-1.3:1.0", "1-1.6:1.0"));
+        // The unrecorded one is not in the answer; there is nothing to say about it.
+        assertEquals(Map.of("1-1.2.2:1.0", VM_A, "1-1.3:1.0", VM_B), taken);
+        assertEquals(3, leftovers.size());
+        assertFalse(leftovers.contains("1-1.2.2:1.0"));
+        assertTrue(leftovers.contains("1-1.2.2:1.1"));
+        // Taken is taken: a second trigger for the same interface finds nothing to do.
+        assertTrue(leftovers.take(List.of("1-1.2.2:1.0")).isEmpty());
+    }
+
+    @Test
+    public void leavingAgainReassignsTheInterface() {
+        var leftovers = new UsbLeftovers();
+        leftovers.leave("1-1.2.2:1.0", VM_A);
+        leftovers.leave("1-1.2.2:1.0", VM_B);
+        assertEquals(1, leftovers.size());
+        assertTrue(leftovers.leftBy(VM_A).isEmpty());
+        assertEquals(List.of("1-1.2.2:1.0"), leftovers.leftBy(VM_B));
+    }
+
+    @Test
+    public void aScanSortsTheRecordByWhatHoldsEachInterface() {
+        var leftovers = audioLeftByA();
+        var scan = leftovers.scan(Map.of(
+            "1-1.2.2:1.0", "",              // free: the claim went
+            "1-1.2.2:1.1", "usbfs",         // still the VMM's
+            "1-1.2.2:1.2", "snd-usb-audio", // the host got it back some other way
+            // 1-1.2.2:1.3 was not seen at all
+            "1-1.3:1.0", ""                 // free, but never ours
+        ));
+        assertEquals(List.of("1-1.2.2:1.0"), scan.free);
+        assertEquals(Map.of("1-1.2.2:1.2", "snd-usb-audio"), scan.reclaimed);
+        // The free one stays until it is taken; the reclaimed one is gone for good; the
+        // claimed and the unseen ones wait for another scan or the unplug.
+        assertTrue(leftovers.contains("1-1.2.2:1.0"));
+        assertTrue(leftovers.contains("1-1.2.2:1.1"));
+        assertFalse(leftovers.contains("1-1.2.2:1.2"));
+        assertTrue(leftovers.contains("1-1.2.2:1.3"));
+        assertEquals(3, leftovers.size());
+    }
+
+    @Test
+    public void aScanWithNothingFreeChangesNothing() {
+        var leftovers = audioLeftByA();
+        var scan = leftovers.scan(Map.of("1-1.2.2:1.0", "usbfs", "1-1.2.2:1.1", "usbfs"));
+        assertTrue(scan.free.isEmpty());
+        assertTrue(scan.reclaimed.isEmpty());
+        assertEquals(4, leftovers.size());
+    }
+
+    @Test
+    public void anUnplugForgetsThatDeviceOnly() {
+        var leftovers = audioLeftByA();
+        leftovers.leave("1-1.3:1.0", VM_A);
+        // A name that only starts the same is a different device.
+        leftovers.leave("1-1.2.22:1.0", VM_A);
+        var dropped = leftovers.forgetDevice("1-1.2.2");
+        assertEquals(List.of("1-1.2.2:1.0", "1-1.2.2:1.1", "1-1.2.2:1.2", "1-1.2.2:1.3"),
+            dropped);
+        assertEquals(List.of("1-1.3:1.0", "1-1.2.22:1.0"), leftovers.leftBy(VM_A));
+        assertTrue(leftovers.forgetDevice("1-1.6").isEmpty());
+    }
+
+    @Test
+    public void anInterfaceNamesItsDevice() {
+        assertEquals("1-1.2.2", UsbLeftovers.deviceOf("1-1.2.2:1.0"));
+        assertEquals("2-1.4", UsbLeftovers.deviceOf("2-1.4:2.11"));
+        assertEquals("1-1", UsbLeftovers.deviceOf("1-1"));
+    }
+}
diff --git a/app/src/test/java/cn/classfun/droidvm/daemon/usb/UsbProbeTest.java b/app/src/test/java/cn/classfun/droidvm/daemon/usb/UsbProbeTest.java
new file mode 100644
index 000000000..d8c162359
--- /dev/null
+++ b/app/src/test/java/cn/classfun/droidvm/daemon/usb/UsbProbeTest.java
@@ -0,0 +1,291 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
+package cn.classfun.droidvm.daemon.usb;
+
+import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
+import static org.junit.Assert.assertEquals;
+import static org.junit.Assert.assertFalse;
+import static org.junit.Assert.assertTrue;
+
+import org.junit.Rule;
+import org.junit.Test;
+import org.junit.rules.TemporaryFolder;
+
+import java.io.File;
+import java.io.IOException;
+import java.nio.charset.StandardCharsets;
+import java.nio.file.Files;
+import java.util.ArrayList;
+import java.util.List;
+import java.util.concurrent.TimeUnit;
+
+/**
+ * The two kinds of probe, over a temporary directory shaped like {@code /sys/bus/usb/devices}
+ * and with the kernel's half of the bargain played by the test's own writer: a DEVICE probe
+ * creates the interface directories, an INTERFACE probe binds a driver. That is what makes the
+ * order the writes happen in visible, and the order is the whole of what was wrong -- an
+ * interfaces-only host action found nothing to walk on a device the gate had left unconfigured.
+ * A kernel that answers late plays the other half of it: the interfaces of a device probe are
+ * what the interface probe walks, so a host action that did not wait for them would write half.
+ */
+public final class UsbProbeTest {
+    /** Short enough that the refusal test is a blink rather than three seconds. */
+    private static final long TIMEOUT_MS = 60;
+    private static final long POLL_MS = 5;
+
+    @Rule
+    public final TemporaryFolder folder = new TemporaryFolder();
+
+    /** Every name written to drivers_probe, in the order it was written. */
+    private final List<String> writes = new ArrayList<>();
+
+    private File root() {
+        return folder.getRoot();
+    }
+
+    private static void write(File dir, String name, String content) throws IOException {
+        Files.write(new File(dir, name).toPath(), content.getBytes(StandardCharsets.UTF_8));
+    }
+
+    /**
+     * A device as the gate leaves one: enumerated, addressed, and with no configuration, so
+     * {@code bConfigurationValue} prints nothing and there is not one interface directory. The
+     * camera of the on-device run, read exactly like this.
+     */
+    private File unconfiguredDevice(String sysfs) throws IOException {
+        var dev = new File(root(), sysfs);
+        assertTrue(dev.mkdirs());
+        write(dev, "bConfigurationValue", "\n");
+        write(dev, "bNumInterfaces", "\n");
+        return dev;
+    }
+
+    /** The same device once something has given it a configuration. */
+    private File configuredDevice(String sysfs, int interfaces) throws IOException {
+        var dev = unconfiguredDevice(sysfs);
+        write(dev, "bConfigurationValue", "1\n");
+        write(dev, "bNumInterfaces", fmt("%d\n", interfaces));
+        for (var i = 0; i < interfaces; i++) addInterface(sysfs, i);
+        return dev;
+    }
+
+    /** An interface directory, beside its device, which is where the bus lists it. */
+    private void addInterface(String sysfs, int index) {
+        assertTrue(new File(root(), fmt("%s:1.%d", sysfs, index)).mkdirs());
+    }
+
+    /** Points an interface's driver link at a directory named after the driver, as sysfs does. */
+    private void bindDriver(String iface, String driver) throws IOException {
+        var drivers = root().toPath().resolve("drivers");
+        Files.createDirectories(drivers.resolve(driver));
+        Files.createSymbolicLink(
+            new File(root(), iface).toPath().resolve("driver"), drivers.resolve(driver));
+    }
+
+    /** A writer that only records: the kernel does nothing back. */
+    private UsbProbe deadKernel() {
+        return new UsbProbe(root(), writes::add, TIMEOUT_MS, POLL_MS);
+    }
+
+    /**
+     * A writer whose DEVICE probe answers late, from another thread, the way a kernel that
+     * defers the generic driver's probe would: the write returns at once and the configuration
+     * and the interfaces appear [delayMs] later. An INTERFACE probe binds [driver] at once, as
+     * the kernel's does.
+     */
+    private UsbProbe slowKernel(String sysfs, int interfaces, String driver, long delayMs) {
+        return new UsbProbe(root(), name -> {
+            writes.add(name);
+            if (name.equals(sysfs)) {
+                var late = new Thread(() -> {
+                    try {
+                        Thread.sleep(delayMs);
+                        write(new File(root(), sysfs), "bConfigurationValue", "1\n");
+                        for (var i = 0; i < interfaces; i++) addInterface(sysfs, i);
+                    } catch (InterruptedException | IOException e) {
+                        throw new IllegalStateException(e);
+                    }
+                });
+                late.setDaemon(true);
+                late.start();
+            } else if (name.startsWith(fmt("%s:", sysfs))) {
+                try {
+                    bindDriver(name, driver);
+                } catch (IOException e) {
+                    throw new IllegalStateException(e);
+                }
+            }
+        }, TIMEOUT_MS, POLL_MS);
+    }
+
+    /**
+     * A writer that answers the way the kernel does: a DEVICE probe binds the generic driver,
+     * which chooses a configuration and publishes [interfaces] of them, and an INTERFACE probe
+     * binds the driver [driver] to that one interface. Nothing else happens -- with the gate
+     * shut, no interface driver follows the generic one by itself.
+     */
+    private UsbProbe kernel(String sysfs, int interfaces, String driver) {
+        return new UsbProbe(root(), name -> {
+            writes.add(name);
+            try {
+                if (name.equals(sysfs)) {
+                    write(new File(root(), sysfs), "bConfigurationValue", "1\n");
+                    for (var i = 0; i < interfaces; i++) addInterface(sysfs, i);
+                } else if (name.startsWith(fmt("%s:", sysfs))) {
+                    bindDriver(name, driver);
+                }
+            } catch (IOException e) {
+                throw new IllegalStateException(e);
+            }
+        }, TIMEOUT_MS, POLL_MS);
+    }
+
+    @Test
+    public void aDeviceUnderTheShutGateHasNoConfigurationAndNoInterfaces() throws IOException {
+        unconfiguredDevice("1-1.3");
+        var probe = deadKernel();
+        assertFalse(probe.isConfigured("1-1.3"));
+        assertTrue(probe.interfacesOf("1-1.3").isEmpty());
+    }
+
+    @Test
+    public void theHostActionProbesTheDeviceBeforeItsInterfaces() throws IOException {
+        unconfiguredDevice("1-1.3");
+        // The camera: four interfaces, none of which exists until the device itself is probed.
+        var probe = kernel("1-1.3", 4, "uvcvideo");
+        assertEquals(5, probe.giveToHost("1-1.3"));
+        assertEquals(List.of("1-1.3", "1-1.3:1.0", "1-1.3:1.1", "1-1.3:1.2", "1-1.3:1.3"), writes);
+        assertTrue(probe.isConfigured("1-1.3"));
+    }
+
+    @Test
+    public void theHostActionOfTheOldShapeWouldHaveWrittenNothing() throws IOException {
+        unconfiguredDevice("1-1.3");
+        var probe = kernel("1-1.3", 4, "uvcvideo");
+        // The interface half on its own -- what the daemon used to do -- has nothing to walk.
+        assertEquals(0, probe.probeInterfaces("1-1.3"));
+        assertTrue(writes.isEmpty());
+    }
+
+    @Test
+    public void aConfiguredDeviceIsOfferedItsInterfacesAndNothingElse() throws IOException {
+        configuredDevice("1-1.2", 1);
+        var probe = kernel("1-1.2", 1, "hub");
+        // The hub of the on-device run: the generic driver had it, so its device probe is not
+        // owed, but its one interface was driverless and its whole subtree was gone with it.
+        assertEquals(1, probe.giveToHost("1-1.2"));
+        assertEquals(List.of("1-1.2:1.0"), writes);
+        assertEquals("hub", probe.driverOf("1-1.2:1.0"));
+    }
+
+    @Test
+    public void anInterfaceSomethingAlreadyHoldsIsLeftAlone() throws IOException {
+        configuredDevice("1-1.2.2", 4);
+        bindDriver("1-1.2.2:1.0", "snd-usb-audio");
+        bindDriver("1-1.2.2:1.3", "usbhid");
+        var probe = deadKernel();
+        assertEquals(2, probe.giveToHost("1-1.2.2"));
+        assertEquals(List.of("1-1.2.2:1.1", "1-1.2.2:1.2"), writes);
+    }
+
+    @Test
+    public void aDeviceTheHostAlreadyHasWholeIsNotWrittenToAtAll() throws IOException {
+        configuredDevice("1-1.4.1", 1);
+        bindDriver("1-1.4.1:1.0", "usb-storage");
+        var probe = deadKernel();
+        // The steady state of most devices on the phone, and the reason a pass over them is
+        // silent: nothing is owed, so nothing is written and nothing is logged.
+        assertEquals(0, probe.giveToHost("1-1.4.1"));
+        assertTrue(writes.isEmpty());
+    }
+
+    @Test
+    public void aRootHubIsProbedThroughItsOwnInterfaceName() throws IOException {
+        configuredDevice("usb1", 0);
+        // The kernel calls a root hub usb1 and its interface 1-0:1.0, not usb1:1.0.
+        assertTrue(new File(root(), "1-0:1.0").mkdirs());
+        var probe = deadKernel();
+        assertEquals(List.of("1-0:1.0"), probe.interfacesOf("usb1"));
+        assertEquals(1, probe.giveToHost("usb1"));
+        assertEquals(List.of("1-0:1.0"), writes);
+    }
+
+    @Test
+    public void theHostActionWaitsForInterfacesADeviceProbeIsStillPublishing() throws IOException {
+        unconfiguredDevice("1-1.2");
+        // A hub whose generic driver probes late. Without the wait the interface half walks an
+        // empty list, writes nothing, and nothing raises the question again: publishing an
+        // interface moves no /dev/bus/usb node, so no watch fires and no pass follows.
+        var probe = slowKernel("1-1.2", 1, "hub", TIMEOUT_MS / 4);
+        assertEquals(2, probe.giveToHost("1-1.2"));
+        assertEquals(List.of("1-1.2", "1-1.2:1.0"), writes);
+        assertEquals("hub", probe.driverOf("1-1.2:1.0"));
+    }
+
+    @Test
+    public void theHostActionGivesUpOnADeviceThatPublishesNothing() throws IOException {
+        unconfiguredDevice("1-1.3");
+        var probe = deadKernel();
+        var started = System.nanoTime();
+        // The device write and no more: there is nothing to offer the host, and the wait is the
+        // bounded one the VM half takes rather than a worker stuck for good.
+        assertEquals(1, probe.giveToHost("1-1.3"));
+        assertEquals(List.of("1-1.3"), writes);
+        assertTrue(System.nanoTime() - started >= TimeUnit.MILLISECONDS.toNanos(TIMEOUT_MS));
+    }
+
+    @Test
+    public void aDeviceThatAlreadyHasAConfigurationIsNotWaitedFor() throws IOException {
+        configuredDevice("1-1.2", 1);
+        var probe = deadKernel();
+        var started = System.nanoTime();
+        // The steady state pays nothing: the wait belongs to a device probe, and a device that
+        // has a configuration is not owed one.
+        assertEquals(1, probe.giveToHost("1-1.2"));
+        assertEquals(List.of("1-1.2:1.0"), writes);
+        assertTrue(System.nanoTime() - started < TimeUnit.MILLISECONDS.toNanos(TIMEOUT_MS));
+    }
+
+    @Test
+    public void theVmActionProbesTheDeviceAndWaitsForTheInterfaces() throws IOException {
+        unconfiguredDevice("1-1.3");
+        var probe = kernel("1-1.3", 4, "uvcvideo");
+        assertTrue(probe.configureForVm("1-1.3"));
+        // The device and nothing else: the gate is still shut, so the interfaces the VMM is
+        // about to claim are there and idle, and the configuration is the host's choice.
+        assertEquals(List.of("1-1.3"), writes);
+        assertEquals(4, probe.interfacesOf("1-1.3").size());
+        for (var iface : probe.interfacesOf("1-1.3")) assertEquals("", probe.driverOf(iface));
+    }
+
+    @Test
+    public void theVmActionRefusesADeviceWhoseInterfacesNeverAppear() throws IOException {
+        unconfiguredDevice("1-1.3");
+        var probe = deadKernel();
+        assertFalse(probe.configureForVm("1-1.3"));
+        // It asked before it refused: the refusal is about a device that cannot be configured,
+        // not about one nobody tried to configure.
+        assertEquals(List.of("1-1.3"), writes);
+    }
+
+    @Test
+    public void theVmActionAsksNothingOfADeviceThatAlreadyHasInterfaces() throws IOException {
+        configuredDevice("1-1.3", 4);
+        var probe = deadKernel();
+        assertTrue(probe.configureForVm("1-1.3"));
+        assertTrue(writes.isEmpty());
+    }
+
+    @Test
+    public void aDeviceThatWentWhileTheWaitRanIsNotWaitedOutInFull() throws IOException {
+        var dev = unconfiguredDevice("1-1.3");
+        var probe = deadKernel();
+        assertTrue(new File(dev, "bConfigurationValue").delete());
+        assertTrue(new File(dev, "bNumInterfaces").delete());
+        assertTrue(dev.delete());
+        var started = System.nanoTime();
+        assertFalse(probe.configureForVm("1-1.3"));
+        assertTrue(System.nanoTime() - started < TimeUnit.MILLISECONDS.toNanos(TIMEOUT_MS));
+    }
+}
diff --git a/app/src/test/java/cn/classfun/droidvm/daemon/usb/UsbRuleEngineTest.java b/app/src/test/java/cn/classfun/droidvm/daemon/usb/UsbRuleEngineTest.java
new file mode 100644
index 000000000..fbc7d0b86
--- /dev/null
+++ b/app/src/test/java/cn/classfun/droidvm/daemon/usb/UsbRuleEngineTest.java
@@ -0,0 +1,670 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
+package cn.classfun.droidvm.daemon.usb;
+
+import static org.junit.Assert.assertEquals;
+import static org.junit.Assert.assertFalse;
+import static org.junit.Assert.assertNotEquals;
+import static org.junit.Assert.assertNotNull;
+import static org.junit.Assert.assertNull;
+import static org.junit.Assert.assertTrue;
+
+import org.junit.Test;
+
+import java.util.Arrays;
+import java.util.EnumMap;
+import java.util.HashMap;
+import java.util.List;
+import java.util.Map;
+import java.util.function.BiPredicate;
+import java.util.function.Function;
+
+import cn.classfun.droidvm.daemon.usb.UsbHostDevice.State;
+import cn.classfun.droidvm.daemon.usb.UsbRuleEngine.Decision;
+import cn.classfun.droidvm.daemon.usb.UsbRuleEngine.Device;
+import cn.classfun.droidvm.daemon.usb.UsbRuleEngine.Save;
+import cn.classfun.droidvm.daemon.usb.UsbRules.Layer;
+import cn.classfun.droidvm.daemon.usb.UsbRules.Rule;
+import cn.classfun.droidvm.daemon.usb.UsbRules.Target;
+import cn.classfun.droidvm.lib.store.vm.VMState;
+
+/**
+ * The matching, over hand-built devices and a table of VM states: no sysfs, no crosvm. The
+ * manager's part -- taking the lock, scanning, probing, attaching, broadcasting -- is not
+ * exercised here; what a device's state is comes in on the {@link Device}, the way it comes off
+ * a scan in the daemon.
+ */
+public final class UsbRuleEngineTest {
+    private static final String VM_A = "0f4c9e2a-0000-4000-8000-00000000000a";
+    private static final String VM_B = "0f4c9e2a-0000-4000-8000-00000000000b";
+    private static final String VM_C = "0f4c9e2a-0000-4000-8000-00000000000c";
+    /** The instance number a device carries unless a case is about replugging it. */
+    private static final int DEVNUM = 7;
+    /** A serialised flash drive on the hub's second downstream port, second hop. */
+    private static final Device STICK = device("1-1.2.2", "090c:1000:0123456789ABCDEF");
+    /** A serial-less mouse on port 1.6. */
+    private static final Device MOUSE = device("1-1.6", "046d:c077");
+
+    /** A device the gate has just handed over: enumerated, and nothing bound to it. */
+    private static Device device(String sysfs, String id) {
+        return device(sysfs, id, DEVNUM, State.IDLE);
+    }
+
+    private static Device device(String sysfs, String id, int devnum, State state) {
+        return new Device(sysfs, id, UsbHostDevice.derivePort(sysfs), devnum, state);
+    }
+
+    /** The same unit, doing something else. */
+    private static Device as(Device device, State state) {
+        return device(device.sysfs, device.id, device.devnum, state);
+    }
+
+    /** The same address with another unit in it: what the kernel makes of a replug. */
+    private static Device replugged(Device device) {
+        return device(device.sysfs, device.id, device.devnum + 1, device.state);
+    }
+
+    private static Rule rule(String id, String port, String vm) {
+        return new Rule(id, port, vm, null);
+    }
+
+    /** A rule that names one controller inside its target VM. */
+    private static Rule rule(String id, String port, String vm, String controller) {
+        return new Rule(id, port, vm, controller);
+    }
+
+    /** A rule that leaves whatever it matches to nobody. */
+    private static Rule sink(String id, String port) {
+        return new Rule(id, port, null, null, Target.SINK);
+    }
+
+    /** Every VM has every controller: what these cases vary is the state table. */
+    private static BiPredicate<String, String> anyController() {
+        return (vm, controller) -> true;
+    }
+
+    /**
+     * The controllers each VM has. A rule that names none asks whether the VM has any, which is
+     * what "the VM's first controller" comes down to.
+     */
+    private static BiPredicate<String, String> controllers(Map<String, List<String>> byVm) {
+        return (vm, controller) -> {
+            var have = byVm.get(vm);
+            if (have == null || have.isEmpty()) return false;
+            return controller == null || have.contains(controller);
+        };
+    }
+
+    /** Only the layers named are populated; every VM id is taken on trust. */
+    private static UsbRules rules(Object... layerAndList) {
+        return UsbRules.build(layersOf(layerAndList), null);
+    }
+
+    /** The same rules with the master switch off: the one difference the gate reads. */
+    private static UsbRules disabled(Object... layerAndList) {
+        return UsbRules.build(false, layersOf(layerAndList), null);
+    }
+
+    private static Map<Layer, List<Rule>> layersOf(Object... layerAndList) {
+        var map = new EnumMap<Layer, List<Rule>>(Layer.class);
+        for (var i = 0; i < layerAndList.length; i += 2) {
+            @SuppressWarnings("unchecked")
+            var list = (List<Rule>) layerAndList[i + 1];
+            map.put((Layer) layerAndList[i], list);
+        }
+        return map;
+    }
+
+    private static UsbRuleEngine engine(UsbRules rules) {
+        var engine = new UsbRuleEngine();
+        engine.setRules(rules);
+        return engine;
+    }
+
+    /** A VM store: the ids named are in the states given, any other id is no VM at all. */
+    private static Function<String, VMState> states(Object... idAndState) {
+        var map = new HashMap<String, VMState>();
+        for (var i = 0; i < idAndState.length; i += 2)
+            map.put((String) idAndState[i], (VMState) idAndState[i + 1]);
+        return map::get;
+    }
+
+    private static Function<String, VMState> allRunning() {
+        return states(VM_A, VMState.RUNNING, VM_B, VMState.RUNNING, VM_C, VMState.RUNNING);
+    }
+
+    private static void assertDecision(Decision decision, Device device, Layer layer, int index,
+                                       String vm) {
+        assertNotNull(decision);
+        assertEquals(device.sysfs, decision.device.sysfs);
+        assertEquals(layer, decision.layer);
+        assertEquals(index, decision.index);
+        assertEquals(vm, decision.vm);
+        assertEquals(vm == null ? Target.HOST : Target.VM, decision.target);
+    }
+
+    private static void assertDecision(Decision decision, Device device, Layer layer, int index,
+                                       String vm, String controller) {
+        assertDecision(decision, device, layer, index, vm);
+        assertEquals(controller, decision.controller);
+    }
+
+    private static void assertSink(Decision decision, Device device, Layer layer, int index) {
+        assertNotNull(decision);
+        assertEquals(device.sysfs, decision.device.sysfs);
+        assertEquals(layer, decision.layer);
+        assertEquals(index, decision.index);
+        assertEquals(Target.SINK, decision.target);
+        // Nothing to attach to, and nothing for a controller to be inside of.
+        assertNull(decision.vm);
+        assertNull(decision.controller);
+    }
+
+    /** The fifth zone's own rule: host, and in no layer of the file at any index. */
+    private static void assertDefaultHost(Decision decision, Device device) {
+        assertNotNull(decision);
+        assertEquals(device.sysfs, decision.device.sysfs);
+        assertEquals(Target.HOST, decision.target);
+        assertNull(decision.layer);
+        assertEquals(-1, decision.index);
+        assertNull(decision.vm);
+        assertNull(decision.controller);
+        // What a log line calls it, which may not read as a row the user could go and edit.
+        assertEquals("the default rule", decision.where());
+    }
+
+    @Test
+    public void withNoRulesAtAllTheFifthZoneStillGivesEveryDeviceToTheHost() {
+        // The keyboard case: with the gate shut a device nothing matched would sit driverless,
+        // so "no rule matched" has to mean the host keeps it rather than nobody does.
+        var engine = engine(UsbRules.empty());
+        assertDefaultHost(engine.decide(STICK, allRunning(), anyController()), STICK);
+        var plan = engine.plan(List.of(STICK, MOUSE), allRunning(), anyController());
+        assertEquals(2, plan.size());
+        assertDefaultHost(plan.get(0), STICK);
+        assertDefaultHost(plan.get(1), MOUSE);
+    }
+
+    @Test
+    public void theFifthZoneRunsAfterTheFourTheFileCarries() {
+        // Four layers full of rules about other devices, and then the zone the file cannot hold.
+        var engine = engine(rules(
+            Layer.EXACT, List.of(rule(MOUSE.id, MOUSE.port, VM_A)),
+            Layer.PORT, List.of(rule(null, "9.9", VM_A)),
+            Layer.DEVICE, List.of(rule("ffff:ffff", null, VM_A)),
+            Layer.ANY, List.of()
+        ));
+        assertDefaultHost(engine.decide(STICK, allRunning(), anyController()), STICK);
+        // And any row that does match outranks it, wherever it sits -- including the last layer,
+        // which is the one that looks like it should already be the end of the search.
+        engine.setRules(rules(Layer.ANY, List.of(sink(null, null))));
+        assertSink(engine.decide(STICK, allRunning(), anyController()), STICK, Layer.ANY, 0);
+    }
+
+    @Test
+    public void layersAreConsultedInOrder() {
+        var engine = engine(rules(
+            Layer.EXACT, List.of(rule(STICK.id, STICK.port, VM_A)),
+            Layer.PORT, List.of(rule(null, STICK.port, VM_B)),
+            Layer.DEVICE, List.of(rule(STICK.id, null, VM_C)),
+            Layer.ANY, List.of(rule(null, null, VM_C))
+        ));
+        assertDecision(engine.decide(STICK, allRunning(), anyController()), STICK, Layer.EXACT, 0, VM_A);
+
+        engine.setRules(rules(
+            Layer.PORT, List.of(rule(null, STICK.port, VM_B)),
+            Layer.DEVICE, List.of(rule(STICK.id, null, VM_C))
+        ));
+        assertDecision(engine.decide(STICK, allRunning(), anyController()), STICK, Layer.PORT, 0, VM_B);
+
+        engine.setRules(rules(Layer.DEVICE, List.of(rule(STICK.id, null, VM_C))));
+        assertDecision(engine.decide(STICK, allRunning(), anyController()), STICK, Layer.DEVICE, 0, VM_C);
+    }
+
+    @Test
+    public void listOrderDecidesWithinALayer() {
+        var engine = engine(rules(Layer.PORT, List.of(
+            rule(null, STICK.port, VM_B),
+            rule(null, STICK.port, VM_A)
+        )));
+        assertDecision(engine.decide(STICK, allRunning(), anyController()), STICK, Layer.PORT, 0, VM_B);
+    }
+
+    @Test
+    public void aRuleIsOnlyMatchedByItsOwnDevice() {
+        var engine = engine(rules(
+            Layer.EXACT, List.of(rule(STICK.id, "1.9", VM_A)),
+            Layer.PORT, List.of(rule(null, "1.9", VM_A)),
+            Layer.DEVICE, List.of(rule("ffff:ffff", null, VM_A))
+        ));
+        assertDefaultHost(engine.decide(STICK, allRunning(), anyController()), STICK);
+    }
+
+    @Test
+    public void aVmThatIsNotRunningIsPassedOver() {
+        var engine = engine(rules(Layer.PORT, List.of(
+            rule(null, STICK.port, VM_A),
+            rule(null, STICK.port, VM_B)
+        )));
+        var states = states(VM_A, VMState.STOPPED, VM_B, VMState.RUNNING);
+        assertDecision(engine.decide(STICK, states, anyController()), STICK, Layer.PORT, 1, VM_B);
+        // STARTING is not RUNNING either: the control socket is not there to attach through.
+        states = states(VM_A, VMState.STARTING, VM_B, VMState.RUNNING);
+        assertDecision(engine.decide(STICK, states, anyController()), STICK, Layer.PORT, 1, VM_B);
+        // A VM the store does not know cannot be running.
+        states = states(VM_B, VMState.RUNNING);
+        assertDecision(engine.decide(STICK, states, anyController()), STICK, Layer.PORT, 1, VM_B);
+        // And with nobody up, the fifth zone has it: the device belongs to the host until one of
+        // those VMs comes up and the trigger of that edge decides it again.
+        assertDefaultHost(engine.decide(STICK, states(VM_A, VMState.STOPPED, VM_B,
+            VMState.STOPPED), anyController()), STICK);
+    }
+
+    @Test
+    public void aLowerLayerTakesTheDeviceOfAPortRuleWhoseVmIsOff() {
+        var engine = engine(rules(
+            Layer.PORT, List.of(rule(null, STICK.port, VM_A)),
+            Layer.DEVICE, List.of(rule(STICK.id, null, VM_B))
+        ));
+        var states = states(VM_A, VMState.STOPPED, VM_B, VMState.RUNNING);
+        assertDecision(engine.decide(STICK, states, anyController()), STICK, Layer.DEVICE, 0, VM_B);
+        // Once A is back, the port rule outranks the device rule again.
+        assertDecision(engine.decide(STICK, allRunning(), anyController()), STICK, Layer.PORT, 0, VM_A);
+    }
+
+    @Test
+    public void aNullVmLeavesTheDeviceWithTheHostAndStopsTheSearch() {
+        var engine = engine(rules(
+            Layer.PORT, List.of(rule(null, MOUSE.port, null)),
+            Layer.DEVICE, List.of(rule(MOUSE.id, null, VM_A)),
+            Layer.ANY, List.of(rule(null, null, VM_A))
+        ));
+        assertDecision(engine.decide(MOUSE, allRunning(), anyController()), MOUSE, Layer.PORT, 0, null);
+        // The host rule shows up in a plan, so a dry run can report it, with no VM.
+        var plan = engine.plan(List.of(MOUSE, STICK), allRunning(), anyController());
+        assertEquals(2, plan.size());
+        assertDecision(plan.get(0), MOUSE, Layer.PORT, 0, null);
+        assertDecision(plan.get(1), STICK, Layer.ANY, 0, VM_A);
+    }
+
+    @Test
+    public void anyGoesToTheFirstRunningVmInTheList() {
+        var engine = engine(rules(Layer.ANY, List.of(
+            rule(null, null, VM_A),
+            rule(null, null, VM_B),
+            rule(null, null, VM_C)
+        )));
+        var states = states(VM_A, VMState.STOPPED, VM_B, VMState.RUNNING, VM_C, VMState.RUNNING);
+        assertDecision(engine.decide(STICK, states, anyController()), STICK, Layer.ANY, 1, VM_B);
+        assertDecision(engine.decide(MOUSE, states, anyController()), MOUSE, Layer.ANY, 1, VM_B);
+    }
+
+    // The candidate filter: the device's own state, and the user's lock. Nothing else -- and in
+    // particular nothing the daemon remembers about who has what.
+
+    @Test
+    public void aDeviceInUseByAVmIsNeverACandidate() {
+        // What the attachment record used to say, said by the device itself: a usbfs claim is a
+        // live fd somebody owns, so no pass may decide anything about it.
+        var engine = engine(rules(Layer.ANY, List.of(rule(null, null, VM_A))));
+        var lent = as(STICK, State.VMUSE);
+        assertFalse(engine.isCandidate(lent));
+        assertTrue(engine.plan(List.of(lent), allRunning(), anyController()).isEmpty());
+        // A dry run still says where the rules would put it.
+        assertDecision(engine.decide(lent, allRunning(), anyController()), lent, Layer.ANY, 0,
+            VM_A);
+    }
+
+    @Test
+    public void bothHostuseAndIdleAreCandidates() {
+        // Idle is the device the gate just handed over; hostuse is one Android already has, and
+        // a rule that wants it for a VM has to be able to take it away.
+        var engine = engine(rules(Layer.ANY, List.of(rule(null, null, VM_A))));
+        var idle = as(STICK, State.IDLE);
+        var host = as(MOUSE, State.HOSTUSE);
+        assertTrue(engine.isCandidate(idle));
+        assertTrue(engine.isCandidate(host));
+        assertEquals(2, engine.plan(List.of(idle, host), allRunning(), anyController()).size());
+    }
+
+    @Test
+    public void aLockedDeviceIsNotACandidate() {
+        var engine = engine(rules(Layer.ANY, List.of(rule(null, null, VM_A))));
+        engine.lock(STICK.sysfs, STICK.devnum);
+        var plan = engine.plan(List.of(STICK, MOUSE), allRunning(), anyController());
+        assertEquals(1, plan.size());
+        assertDecision(plan.get(0), MOUSE, Layer.ANY, 0, VM_A);
+        // A dry run still says what the rules would do with it.
+        assertDecision(engine.decide(STICK, allRunning(), anyController()), STICK, Layer.ANY, 0, VM_A);
+        // A new rule set does not lift the lock.
+        engine.setRules(rules(Layer.DEVICE, List.of(rule(STICK.id, null, VM_A))));
+        assertTrue(engine.plan(List.of(STICK), allRunning(), anyController()).isEmpty());
+        // The user handing it back to the rules does.
+        engine.unlock(STICK.sysfs);
+        assertEquals(1, engine.plan(List.of(STICK), allRunning(), anyController()).size());
+    }
+
+    @Test
+    public void aLockIsAboutOneInstanceSoAReplugClearsIt() {
+        // The lock is the user's answer about the unit in the socket. Another unit -- or the same
+        // one after a round trip through the port -- was never asked about, so the rules have it
+        // again without anything having to notice the swap.
+        var engine = engine(rules(Layer.ANY, List.of(rule(null, null, VM_A))));
+        engine.lock(STICK.sysfs, STICK.devnum);
+        assertTrue(engine.isLocked(STICK.sysfs, STICK.devnum));
+        assertFalse(engine.isLocked(STICK.sysfs, STICK.devnum + 1));
+        assertFalse(engine.isCandidate(STICK));
+        assertTrue(engine.isCandidate(replugged(STICK)));
+        assertEquals(1, engine.plan(List.of(replugged(STICK)), allRunning(), anyController())
+            .size());
+        // And the inventory noticing the node go clears it outright.
+        engine.forget(STICK.sysfs);
+        assertFalse(engine.isLocked(STICK.sysfs, STICK.devnum));
+    }
+
+    @Test
+    public void aVmAnAttachFailedForIsPassedOverUntilReplug() {
+        var engine = engine(rules(Layer.ANY, List.of(
+            rule(null, null, VM_A),
+            rule(null, null, VM_B)
+        )));
+        engine.markFailed(STICK.sysfs, VM_A);
+        assertDecision(engine.decide(STICK, allRunning(), anyController()), STICK, Layer.ANY, 1, VM_B);
+        // The failure is the stick's alone.
+        assertDecision(engine.decide(MOUSE, allRunning(), anyController()), MOUSE, Layer.ANY, 0, VM_A);
+        // Failing for the only VM drops through to the fifth zone, so the device is the host's
+        // rather than nobody's while that VM is out of the running.
+        engine.setRules(rules(Layer.ANY, List.of(rule(null, null, VM_A))));
+        assertDefaultHost(engine.decide(STICK, allRunning(), anyController()), STICK);
+        // Unplugging clears it.
+        engine.forget(STICK.sysfs);
+        assertDecision(engine.decide(STICK, allRunning(), anyController()), STICK, Layer.ANY, 0, VM_A);
+    }
+
+    @Test
+    public void aFailureIsForgottenWhenThatVmComesUpAgain() {
+        // The reboot case: REBOOTING released the stick, RUNNING re-matched it, and the attach
+        // failed once against the fresh instance. The next RUNNING edge must try again.
+        var engine = engine(rules(Layer.ANY, List.of(
+            rule(null, null, VM_A),
+            rule(null, null, VM_B)
+        )));
+        engine.markFailed(STICK.sysfs, VM_A);
+        engine.markFailed(MOUSE.sysfs, VM_B);
+        assertDecision(engine.decide(STICK, allRunning(), anyController()), STICK, Layer.ANY, 1, VM_B);
+
+        engine.forgetFailuresFor(VM_A);
+        assertDecision(engine.decide(STICK, allRunning(), anyController()), STICK, Layer.ANY, 0, VM_A);
+        // Only A's failures went; the mouse still remembers B and drops to the fifth zone.
+        engine.setRules(rules(Layer.ANY, List.of(rule(null, null, VM_B))));
+        assertDefaultHost(engine.decide(MOUSE, allRunning(), anyController()), MOUSE);
+        // A lock is the user's and outlives any VM start.
+        engine.lock(STICK.sysfs, STICK.devnum);
+        engine.forgetFailuresFor(VM_A);
+        assertTrue(engine.plan(List.of(STICK), allRunning(), anyController()).isEmpty());
+    }
+
+    @Test
+    public void aDeviceIsDecidedAtMostOncePerPass() {
+        var engine = engine(rules(
+            Layer.EXACT, List.of(rule(STICK.id, STICK.port, VM_A)),
+            Layer.PORT, List.of(rule(null, STICK.port, VM_B), rule(null, MOUSE.port, VM_B)),
+            Layer.DEVICE, List.of(rule(STICK.id, null, VM_C)),
+            Layer.ANY, List.of(rule(null, null, VM_A), rule(null, null, VM_B))
+        ));
+        var plan = engine.plan(List.of(STICK, MOUSE), allRunning(), anyController());
+        assertEquals(2, plan.size());
+        assertNotEquals(plan.get(0).device.sysfs, plan.get(1).device.sysfs);
+        assertDecision(plan.get(0), STICK, Layer.EXACT, 0, VM_A);
+        assertDecision(plan.get(1), MOUSE, Layer.PORT, 1, VM_B);
+    }
+
+    @Test
+    public void anAttachedDeviceIsNeverTakenAway() {
+        // The stick is VM B's; a new rule set that wants it for VM A changes nothing for it.
+        var engine = engine(rules(
+            Layer.DEVICE, List.of(rule(STICK.id, null, VM_A)),
+            Layer.ANY, List.of(rule(null, null, VM_A))
+        ));
+        var plan = engine.plan(List.of(as(STICK, State.VMUSE), MOUSE), allRunning(),
+            anyController());
+        assertEquals(1, plan.size());
+        assertDecision(plan.get(0), MOUSE, Layer.ANY, 0, VM_A);
+    }
+
+    @Test
+    public void twoSerialLessUnitsShareAnIdAndBothMatchTheSameRule() {
+        var first = device("1-1.3", "046d:c077");
+        var second = device("1-1.4", "046d:c077");
+        var engine = engine(rules(Layer.DEVICE, List.of(rule("046d:c077", null, VM_A))));
+        var plan = engine.plan(Arrays.asList(first, second), allRunning(), anyController());
+        assertEquals(2, plan.size());
+        assertDecision(plan.get(0), first, Layer.DEVICE, 0, VM_A);
+        assertDecision(plan.get(1), second, Layer.DEVICE, 0, VM_A);
+    }
+
+    @Test
+    public void aDeviceCarriesWhatARuleCanSee() {
+        var map = new EnumMap<Layer, List<Rule>>(Layer.class);
+        map.put(Layer.EXACT, List.of(rule("090c:1000", "1.2.2", VM_A)));
+        var engine = engine(UsbRules.build(map, null));
+        // Same socket, USB3 enumeration: bus 2, and still the same port.
+        var usb3 = device("2-1.2.2", "090c:1000");
+        assertDecision(engine.decide(usb3, allRunning(), anyController()), usb3, Layer.EXACT, 0, VM_A);
+        // Same model with a serial is a different id and misses the serial-less exact rule.
+        assertDefaultHost(engine.decide(STICK, allRunning(), anyController()), STICK);
+    }
+
+    @Test
+    public void aRuleWhoseControllerIsGoneIsPassedOverAndTheNextLayerWins() {
+        // The device rule's VM is running and has the controller its rule names; the port rule's
+        // does not, so the search goes on rather than stopping on a target it cannot reach.
+        var engine = engine(rules(
+            Layer.PORT, List.of(rule(null, STICK.port, VM_A, "xhci-1")),
+            Layer.DEVICE, List.of(rule(STICK.id, null, VM_B, "xhci-0"))
+        ));
+        var have = controllers(Map.of(VM_A, List.of("xhci-0"), VM_B, List.of("xhci-0")));
+        assertDecision(engine.decide(STICK, allRunning(), have), STICK, Layer.DEVICE, 0, VM_B,
+            "xhci-0");
+        // A dry run reports the rule that would act, not the one that cannot.
+        var plan = engine.plan(List.of(STICK), allRunning(), have);
+        assertEquals(1, plan.size());
+        assertDecision(plan.get(0), STICK, Layer.DEVICE, 0, VM_B, "xhci-0");
+        // Nothing was dropped: the rule is live again the moment the controller is back.
+        var back = controllers(Map.of(VM_A, List.of("xhci-0", "xhci-1"), VM_B, List.of("xhci-0")));
+        assertDecision(engine.decide(STICK, allRunning(), back), STICK, Layer.PORT, 0, VM_A,
+            "xhci-1");
+    }
+
+    @Test
+    public void aDecisionCarriesTheRulesControllerVerbatim() {
+        var engine = engine(rules(
+            Layer.PORT, List.of(rule(null, MOUSE.port, null)),
+            Layer.ANY, List.of(rule(null, null, VM_A))
+        ));
+        // The host keeps the mouse, and a device the host keeps is on no controller.
+        assertDecision(engine.decide(MOUSE, allRunning(), anyController()), MOUSE, Layer.PORT, 0,
+            null, null);
+        // A rule that names no controller stays null here rather than being resolved: which one
+        // is "the first" is a property of the config the VM booted with, and the attach reads it.
+        assertDecision(engine.decide(STICK, allRunning(), anyController()), STICK, Layer.ANY, 0,
+            VM_A, null);
+    }
+
+    @Test
+    public void aRuleNamingNoControllerStillNeedsTheVmToHaveOne() {
+        var engine = engine(rules(Layer.ANY, List.of(
+            rule(null, null, VM_A),
+            rule(null, null, VM_B)
+        )));
+        var have = controllers(Map.of(VM_A, List.of(), VM_B, List.of("xhci-0")));
+        assertDecision(engine.decide(STICK, allRunning(), have), STICK, Layer.ANY, 1, VM_B, null);
+    }
+
+    @Test
+    public void aMissingControllerLeavesTheFailureMemoryAlone() {
+        // Skipping is not failing: the same VM is still free to take the device through a rule it
+        // can serve, which is why the controller check does not go through markFailed.
+        var engine = engine(rules(
+            Layer.PORT, List.of(rule(null, STICK.port, VM_A, "xhci-9")),
+            Layer.DEVICE, List.of(rule(STICK.id, null, VM_A))
+        ));
+        var have = controllers(Map.of(VM_A, List.of("xhci-0")));
+        assertDecision(engine.decide(STICK, allRunning(), have), STICK, Layer.DEVICE, 0, VM_A,
+            null);
+    }
+
+    @Test
+    public void aSinkStopsTheSearchTheWayAHostRuleDoes() {
+        var engine = engine(rules(
+            Layer.PORT, List.of(sink(null, STICK.port)),
+            Layer.DEVICE, List.of(rule(STICK.id, null, VM_A)),
+            Layer.ANY, List.of(rule(null, null, VM_A))
+        ));
+        assertSink(engine.decide(STICK, allRunning(), anyController()), STICK, Layer.PORT, 0);
+        // It is a decision like any other, so it shows up in a plan and a dry run -- what makes
+        // it a sink is that the pass does nothing with it.
+        var plan = engine.plan(List.of(STICK, MOUSE), allRunning(), anyController());
+        assertEquals(2, plan.size());
+        assertSink(plan.get(0), STICK, Layer.PORT, 0);
+        assertDecision(plan.get(1), MOUSE, Layer.ANY, 0, VM_A);
+    }
+
+    @Test
+    public void aSinkNeedsNoVmToBeRunningAndNoFailureCanBlockIt() {
+        // Leaving a device alone is something that is true here and now: there is no VM whose
+        // state could hold it back, and a failure remembered against a VM is not its business.
+        var engine = engine(rules(Layer.ANY, List.of(sink(null, null))));
+        assertSink(engine.decide(STICK, states(), anyController()), STICK, Layer.ANY, 0);
+        engine.markFailed(STICK.sysfs, VM_A);
+        engine.markFailed(STICK.sysfs, VM_B);
+        assertSink(engine.decide(STICK, allRunning(), anyController()), STICK, Layer.ANY, 0);
+        // And a VM rule that was passed over still lets the sink behind it have its turn.
+        engine.setRules(rules(
+            Layer.PORT, List.of(rule(null, STICK.port, VM_A)),
+            Layer.DEVICE, List.of(sink(STICK.id, null))
+        ));
+        assertSink(engine.decide(STICK, states(VM_A, VMState.STOPPED), anyController()),
+            STICK, Layer.DEVICE, 0);
+    }
+
+    @Test
+    public void aSinkNeverTakesADeviceThatIsInUseOrLocked() {
+        var engine = engine(rules(Layer.ANY, List.of(sink(null, null))));
+        assertTrue(engine.plan(List.of(as(STICK, State.VMUSE)), allRunning(), anyController())
+            .isEmpty());
+        engine.lock(MOUSE.sysfs, MOUSE.devnum);
+        assertTrue(engine.plan(List.of(MOUSE), allRunning(), anyController()).isEmpty());
+    }
+
+    // The master switch, trigger by trigger. Each of the five raises one of the two questions
+    // this class answers, so switching the rules off is answered here once and for all of them.
+
+    @Test
+    public void aPlugTakesNothingWhileTheSwitchIsOff() {
+        // Not even the fifth zone's own rule: with the switch off the host has the device
+        // already -- the gate is open, so the kernel bound its drivers as it enumerated -- and
+        // there is nothing for a pass to decide or to write.
+        var engine = engine(disabled(Layer.ANY, List.of(sink(null, null))));
+        assertNull(engine.decide(STICK, allRunning(), anyController()));
+        assertTrue(engine.plan(List.of(STICK, MOUSE), allRunning(), anyController()).isEmpty());
+    }
+
+    @Test
+    public void aVmReachingRunningTakesNothingWhileTheSwitchIsOff() {
+        var engine = engine(disabled(Layer.DEVICE, List.of(rule(STICK.id, null, VM_A))));
+        var running = states(VM_A, VMState.RUNNING);
+        assertTrue(engine.plan(List.of(STICK), running, anyController()).isEmpty());
+        assertNull(engine.decide(STICK, running, anyController()));
+    }
+
+    @Test
+    public void aRulesSaveAppliesNothingWhileTheSwitchIsOff() {
+        // The pass a save runs asks the same question, so a save made while the switch is off
+        // keeps the rules and applies none of them.
+        var engine = engine(rules(Layer.ANY, List.of(sink(null, null))));
+        assertEquals(1, engine.plan(List.of(STICK), allRunning(), anyController()).size());
+        engine.setRules(disabled(Layer.ANY, List.of(sink(null, null))));
+        assertTrue(engine.plan(List.of(STICK), allRunning(), anyController()).isEmpty());
+    }
+
+    @Test
+    public void aVmReleasingItsDevicesDecidesNothingWhileTheSwitchIsOff() {
+        // A stop asks whether the rules want the device left alone; off, they want nothing, and
+        // the device goes back to the host like any other.
+        var engine = engine(disabled(Layer.DEVICE, List.of(sink(STICK.id, null))));
+        assertNull(engine.decide(STICK, states(VM_A, VMState.STOPPED), anyController()));
+    }
+
+    @Test
+    public void theDaemonStartPassDecidesWithNoVmRunningAndSkipsTheVmRules() {
+        // The trigger the switch was added alongside: at start no VM is up, so a VM rule has
+        // nothing to attach to. The sink leaves its device where the gate put it and the fifth
+        // zone gives the other one to the host, which is what a keyboard needs to work.
+        var engine = engine(rules(
+            Layer.DEVICE, List.of(sink(STICK.id, null)),
+            Layer.ANY, List.of(rule(null, null, VM_A))
+        ));
+        var plan = engine.plan(List.of(STICK, MOUSE), states(), anyController());
+        assertEquals(2, plan.size());
+        assertSink(plan.get(0), STICK, Layer.DEVICE, 0);
+        assertDefaultHost(plan.get(1), MOUSE);
+        // And nothing at all while the switch is off, which is what that pass is skipped for.
+        engine.setRules(disabled(
+            Layer.DEVICE, List.of(sink(STICK.id, null)),
+            Layer.ANY, List.of(rule(null, null, VM_A))
+        ));
+        assertTrue(engine.plan(List.of(STICK, MOUSE), states(), anyController()).isEmpty());
+    }
+
+    @Test
+    public void onlyTheSwitchesFallingEdgeGivesEverythingBack() {
+        var on = rules(Layer.ANY, List.of(sink(null, null)));
+        var off = disabled(Layer.ANY, List.of(sink(null, null)));
+        var engine = engine(on);
+        // On -> off, and only that, hands back what the rules took.
+        assertEquals(Save.RELEASE, engine.saveOwes(off));
+        engine.setRules(off);
+        // Off -> off gives nothing back: the save that turned it off already did, once.
+        assertEquals(Save.NOTHING,
+            engine.saveOwes(disabled(Layer.DEVICE, List.of(sink(STICK.id, null)))));
+        // Off -> on is the ordinary saved-rules pass, so turning it on applies them at once.
+        assertEquals(Save.PASS, engine.saveOwes(on));
+        engine.setRules(on);
+        assertEquals(Save.PASS, engine.saveOwes(on));
+    }
+
+    @Test
+    public void onlyTheDaemonStartPassHandsDevicesBackWhileTheSwitchIsOff() {
+        // The gate is what leaves a device idle, and a pass is what hands one back. With the
+        // rules running every pass may: the fifth zone answers for everything nothing else
+        // matched. With them off no trigger acts at all -- an interface somebody unbound by
+        // hand stays unbound, whatever is plugged in afterwards -- except the daemon's own
+        // start, which is the only pass that runs to repair rather than to decide.
+        var engine = engine(rules(Layer.ANY, List.of(sink(null, null))));
+        assertTrue(engine.recoversIdleDevices(false));
+        assertTrue(engine.recoversIdleDevices(true));
+        engine.setRules(disabled(Layer.ANY, List.of(sink(null, null))));
+        assertFalse(engine.recoversIdleDevices(false));
+        assertTrue(engine.recoversIdleDevices(true));
+    }
+
+    @Test
+    public void everyLockGoesBackWithTheDevicesWhenTheSwitchGoesOff() {
+        var engine = engine(rules(Layer.ANY, List.of(rule(null, null, VM_A))));
+        engine.lock(STICK.sysfs, STICK.devnum);
+        engine.lock(MOUSE.sysfs, MOUSE.devnum);
+        engine.markFailed(MOUSE.sysfs, VM_A);
+
+        engine.clearLocks();
+        assertFalse(engine.isLocked(STICK.sysfs, STICK.devnum));
+        assertFalse(engine.isLocked(MOUSE.sysfs, MOUSE.devnum));
+        // The stick is the rules' again; the mouse's failure is about an attach that did not
+        // work, not about who owns the device, so it outlives the locks.
+        var plan = engine.plan(List.of(STICK, MOUSE), allRunning(), anyController());
+        assertEquals(2, plan.size());
+        assertDecision(plan.get(0), STICK, Layer.ANY, 0, VM_A);
+        assertDefaultHost(plan.get(1), MOUSE);
+    }
+}
diff --git a/app/src/test/java/cn/classfun/droidvm/daemon/usb/UsbRulePassTimingTest.java b/app/src/test/java/cn/classfun/droidvm/daemon/usb/UsbRulePassTimingTest.java
new file mode 100644
index 000000000..d2f8e6fc1
--- /dev/null
+++ b/app/src/test/java/cn/classfun/droidvm/daemon/usb/UsbRulePassTimingTest.java
@@ -0,0 +1,183 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
+package cn.classfun.droidvm.daemon.usb;
+
+import static org.junit.Assert.assertEquals;
+import static org.junit.Assert.assertFalse;
+import static org.junit.Assert.assertTrue;
+
+import org.junit.Test;
+
+import java.util.ArrayDeque;
+import java.util.ArrayList;
+import java.util.Arrays;
+import java.util.List;
+import java.util.function.BooleanSupplier;
+
+/**
+ * The timing policy around a rule pass, walked by hand: a scheduler that only records, a probe
+ * that answers from a script, and counters where the manager would run things.
+ */
+public final class UsbRulePassTimingTest {
+    /** Keeps what was asked for and runs it only when told, so a test moves time itself. */
+    private static final class FakeScheduler implements UsbRulePassTiming.Scheduler {
+        final ArrayDeque<Runnable> tasks = new ArrayDeque<>();
+        final List<Long> delays = new ArrayList<>();
+
+        @Override
+        public void schedule(Runnable task, long delayMs) {
+            tasks.add(task);
+            delays.add(delayMs);
+        }
+
+        boolean runNext() {
+            var task = tasks.poll();
+            if (task == null) return false;
+            task.run();
+            return true;
+        }
+
+        void runAll() {
+            //noinspection StatementWithEmptyBody
+            while (runNext()) {
+            }
+        }
+    }
+
+    private static final class Counter implements Runnable {
+        int runs = 0;
+
+        @Override
+        public void run() {
+            runs++;
+        }
+    }
+
+    /** Answers from the script, repeating its last answer; counts how often it was asked. */
+    private static final class Script implements BooleanSupplier {
+        private final boolean[] answers;
+        int asked = 0;
+
+        Script(boolean... answers) {
+            this.answers = answers;
+        }
+
+        @Override
+        public boolean getAsBoolean() {
+            var answer = answers[Math.min(asked, answers.length - 1)];
+            asked++;
+            return answer;
+        }
+    }
+
+    @Test
+    public void thePassRunsOnTheFirstProbeThatSaysReady() {
+        var scheduler = new FakeScheduler();
+        var wanted = new Script(true);
+        var ready = new Script(false, false, true);
+        var then = new Counter();
+        var abandoned = new Counter();
+        var gaveUp = new Counter();
+        UsbRulePassTiming.whenReady(scheduler,
+            new UsbRulePassTiming.Wait(wanted, ready, then, abandoned, gaveUp), 1000, 60);
+        // Nothing has happened yet: the first probe is itself a scheduled task, on the worker.
+        assertEquals(0, ready.asked);
+        scheduler.runAll();
+        assertEquals(3, ready.asked);
+        assertEquals(1, then.runs);
+        assertEquals(0, abandoned.runs);
+        assertEquals(0, gaveUp.runs);
+        assertEquals(Arrays.asList(0L, 1000L, 1000L), scheduler.delays);
+    }
+
+    @Test
+    public void aVmThatIsReadyAtOnceWaitsForNothing() {
+        var scheduler = new FakeScheduler();
+        var then = new Counter();
+        UsbRulePassTiming.whenReady(scheduler, new UsbRulePassTiming.Wait(new Script(true),
+            new Script(true), then, new Counter(), new Counter()), 1000, 60);
+        scheduler.runAll();
+        assertEquals(1, then.runs);
+        assertEquals(List.of(0L), scheduler.delays);
+    }
+
+    @Test
+    public void theWaitGivesUpAfterTheLastProbe() {
+        var scheduler = new FakeScheduler();
+        var ready = new Script(false);
+        var then = new Counter();
+        var abandoned = new Counter();
+        var gaveUp = new Counter();
+        UsbRulePassTiming.whenReady(scheduler, new UsbRulePassTiming.Wait(new Script(true),
+            ready, then, abandoned, gaveUp), 1000, 3);
+        scheduler.runAll();
+        assertEquals(3, ready.asked);
+        assertEquals(0, then.runs);
+        assertEquals(0, abandoned.runs);
+        assertEquals(1, gaveUp.runs);
+        // Three probes, and nothing scheduled after the one that gave up.
+        assertEquals(Arrays.asList(0L, 1000L, 1000L), scheduler.delays);
+        assertTrue(scheduler.tasks.isEmpty());
+    }
+
+    @Test
+    public void theWaitIsAbandonedWhenTheVmLeavesRunning() {
+        var scheduler = new FakeScheduler();
+        var wanted = new Script(true, true, false);
+        var ready = new Script(false);
+        var then = new Counter();
+        var abandoned = new Counter();
+        var gaveUp = new Counter();
+        UsbRulePassTiming.whenReady(scheduler,
+            new UsbRulePassTiming.Wait(wanted, ready, then, abandoned, gaveUp), 1000, 60);
+        scheduler.runAll();
+        // Wanted is asked before the probe each time, and the probe is not asked once it is not.
+        assertEquals(3, wanted.asked);
+        assertEquals(2, ready.asked);
+        assertEquals(0, then.runs);
+        assertEquals(1, abandoned.runs);
+        assertEquals(0, gaveUp.runs);
+        assertTrue(scheduler.tasks.isEmpty());
+    }
+
+    @Test
+    public void aRetryStopsAtTheFirstPassThatReachedTheVmm() {
+        var scheduler = new FakeScheduler();
+        var attempt = new Script(false, true);
+        UsbRulePassTiming.retry(scheduler, attempt, 2000, 3);
+        // Scheduled, not run: the first pass of the trigger has just finished.
+        assertEquals(0, attempt.asked);
+        scheduler.runAll();
+        assertEquals(2, attempt.asked);
+        assertEquals(Arrays.asList(2000L, 2000L), scheduler.delays);
+    }
+
+    @Test
+    public void aRetryIsBounded() {
+        var scheduler = new FakeScheduler();
+        var attempt = new Script(false);
+        UsbRulePassTiming.retry(scheduler, attempt, 2000, 3);
+        scheduler.runAll();
+        assertEquals(3, attempt.asked);
+        assertEquals(Arrays.asList(2000L, 2000L, 2000L), scheduler.delays);
+        assertTrue(scheduler.tasks.isEmpty());
+    }
+
+    @Test
+    public void noBudgetSchedulesNothing() {
+        var scheduler = new FakeScheduler();
+        var attempt = new Script(false);
+        UsbRulePassTiming.retry(scheduler, attempt, 2000, 0);
+        assertFalse(scheduler.runNext());
+        assertEquals(0, attempt.asked);
+    }
+
+    @Test
+    public void theConstantsAreTheAgreedOnes() {
+        assertEquals(1000, UsbRulePassTiming.READY_POLL_MS);
+        assertEquals(60, UsbRulePassTiming.READY_MAX_POLLS);
+        assertEquals(2000, UsbRulePassTiming.RETRY_DELAY_MS);
+        assertEquals(3, UsbRulePassTiming.MAX_RETRIES);
+    }
+}
diff --git a/app/src/test/java/cn/classfun/droidvm/daemon/usb/UsbRulesTest.java b/app/src/test/java/cn/classfun/droidvm/daemon/usb/UsbRulesTest.java
new file mode 100644
index 000000000..11a570f95
--- /dev/null
+++ b/app/src/test/java/cn/classfun/droidvm/daemon/usb/UsbRulesTest.java
@@ -0,0 +1,288 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
+package cn.classfun.droidvm.daemon.usb;
+
+import static org.junit.Assert.assertEquals;
+import static org.junit.Assert.assertFalse;
+import static org.junit.Assert.assertNull;
+import static org.junit.Assert.assertThrows;
+import static org.junit.Assert.assertTrue;
+
+import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
+
+import org.junit.Test;
+
+import java.util.EnumMap;
+import java.util.List;
+
+import cn.classfun.droidvm.daemon.server.RequestException;
+import cn.classfun.droidvm.daemon.usb.UsbRules.Layer;
+import cn.classfun.droidvm.daemon.usb.UsbRules.Rule;
+import cn.classfun.droidvm.daemon.usb.UsbRules.Target;
+
+/**
+ * The validation a rule set goes through on the way in. The JSON edge is not covered: org.json
+ * is a stub under the test android.jar (see UsbHostDeviceTest), so the model is built directly.
+ */
+public final class UsbRulesTest {
+    private static final String VM = "0f4c9e2a-0000-4000-8000-00000000000a";
+    private static final String XHCI0 = "xhci-0";
+    private static final String XHCI1 = "xhci-1";
+
+    private static UsbRules build(Layer layer, Rule rule) {
+        var map = new EnumMap<Layer, List<Rule>>(Layer.class);
+        map.put(layer, List.of(rule));
+        return UsbRules.build(map, null);
+    }
+
+    private static String refused(Layer layer, Rule rule) {
+        return assertThrows(RequestException.class, () -> build(layer, rule)).getMessage();
+    }
+
+    @Test
+    public void emptyHasNoLayers() {
+        var rules = UsbRules.empty();
+        assertTrue(rules.isEmpty());
+        for (var layer : Layer.values()) assertTrue(rules.layer(layer).isEmpty());
+    }
+
+    @Test
+    public void eachLayerTakesExactlyItsOwnFields() {
+        assertEquals(1, build(Layer.EXACT, new Rule("090c:1000", "1.2.2", VM, null)).layer(Layer.EXACT).size());
+        assertEquals(1, build(Layer.PORT, new Rule(null, "1.6", null, null)).layer(Layer.PORT).size());
+        assertEquals(1, build(Layer.DEVICE, new Rule("090c:1000:abc", null, VM, null)).layer(Layer.DEVICE).size());
+        assertEquals(1, build(Layer.ANY, new Rule(null, null, VM, null)).layer(Layer.ANY).size());
+
+        assertTrue(refused(Layer.EXACT, new Rule("090c:1000", null, VM, null)).contains("exact[0]: missing port"));
+        assertTrue(refused(Layer.EXACT, new Rule(null, "1.2.2", VM, null)).contains("exact[0]: missing id"));
+        assertTrue(refused(Layer.PORT, new Rule("090c:1000", "1.2.2", VM, null)).contains("takes no id"));
+        assertTrue(refused(Layer.PORT, new Rule(null, null, VM, null)).contains("port[0]: missing port"));
+        assertTrue(refused(Layer.DEVICE, new Rule("090c:1000", "1.2.2", VM, null)).contains("takes no port"));
+        assertTrue(refused(Layer.DEVICE, new Rule(null, null, VM, null)).contains("device[0]: missing id"));
+        assertTrue(refused(Layer.ANY, new Rule("090c:1000", null, VM, null)).contains("takes no id"));
+        assertTrue(refused(Layer.ANY, new Rule(null, "1.2", VM, null)).contains("takes no port"));
+    }
+
+    /**
+     * The last layer takes a host rule like any other. It was refused once, on the reasoning
+     * that keeping a device on the host is what happens anyway there so the row does nothing --
+     * but it is the sentence that says out loud what the daemon does by default, and a reader
+     * who finds it knows the silence was on purpose. The page offers it; the save has to take it.
+     */
+    @Test
+    public void anyTakesAHostRule() {
+        var rules = build(Layer.ANY, new Rule(null, null, null, null));
+        assertEquals(Target.HOST, rules.layer(Layer.ANY).get(0).target);
+    }
+
+    @Test
+    public void aRuleWithNoTargetTakesTheOneItsVmMeans() {
+        // The four-field form is what every existing caller and every rules file written before
+        // targets existed says, and it still says exactly what it said.
+        assertEquals(Target.HOST, new Rule("090c:1000", "1.2.2", null, null).target);
+        assertEquals(Target.VM, new Rule("090c:1000", "1.2.2", VM, null).target);
+        assertEquals(Target.VM, new Rule(null, null, VM, XHCI0).target);
+        // And it survives validation, which rebuilds the rule.
+        assertEquals(Target.HOST, build(Layer.PORT, new Rule(null, "1.2", null, null))
+            .layer(Layer.PORT).get(0).target);
+        assertEquals(Target.VM, build(Layer.ANY, new Rule(null, null, VM, null))
+            .layer(Layer.ANY).get(0).target);
+    }
+
+    @Test
+    public void aSinkRuleNamesNoVmAndIsAllowedInEveryLayer() {
+        var sink = new Rule(null, "1.2.2", null, null, Target.SINK);
+        var kept = build(Layer.PORT, sink).layer(Layer.PORT).get(0);
+        assertEquals(Target.SINK, kept.target);
+        assertNull(kept.vm);
+        assertNull(kept.controller);
+        // The one row the capped any zone holds, and the most likely sink rule there is.
+        assertEquals(Target.SINK, build(Layer.ANY, new Rule(null, null, null, null, Target.SINK))
+            .layer(Layer.ANY).get(0).target);
+        assertEquals(Target.SINK,
+            build(Layer.DEVICE, new Rule("090c:1000", null, null, null, Target.SINK))
+                .layer(Layer.DEVICE).get(0).target);
+        assertEquals(Target.SINK,
+            build(Layer.EXACT, new Rule("090c:1000", "1.2.2", null, null, Target.SINK))
+                .layer(Layer.EXACT).get(0).target);
+    }
+
+    @Test
+    public void aTargetAndAVmMustAgree() {
+        assertTrue(refused(Layer.PORT, new Rule(null, "1.2.2", VM, null, Target.SINK))
+            .contains("port[0]: a sink rule takes no vm"));
+        assertTrue(refused(Layer.PORT, new Rule(null, "1.2.2", null, XHCI0, Target.SINK))
+            .contains("port[0]: controller needs a vm"));
+        assertTrue(refused(Layer.PORT, new Rule(null, "1.2.2", null, null, Target.VM))
+            .contains("port[0]: a vm rule needs a vm"));
+        assertTrue(refused(Layer.PORT, new Rule(null, "1.2.2", VM, null, Target.HOST))
+            .contains("port[0]: a host rule takes no vm"));
+    }
+
+    @Test
+    public void aSinkRuleIsNeverAskedAboutATarget() {
+        // There is no VM and no controller to look up, so the predicate that answers for one is
+        // not consulted -- a sink rule cannot dangle.
+        var map = new EnumMap<Layer, List<Rule>>(Layer.class);
+        map.put(Layer.ANY, List.of(new Rule(null, null, null, null, Target.SINK)));
+        var rules = UsbRules.build(map, (vm, controller) -> {
+            throw new AssertionError("targetExists asked about a sink rule");
+        });
+        assertEquals(Target.SINK, rules.layer(Layer.ANY).get(0).target);
+    }
+
+    @Test
+    public void theMasterSwitchIsOnUnlessTheRuleSetSaysOtherwise() {
+        // Absent reads as on, which is what every rule set written before there was a switch
+        // means -- so the two-argument build, the one every such caller uses, is the on form.
+        assertTrue(UsbRules.empty().isEnabled());
+        assertTrue(build(Layer.ANY, new Rule(null, null, VM, null)).isEnabled());
+
+        var map = new EnumMap<Layer, List<Rule>>(Layer.class);
+        map.put(Layer.ANY, List.of(new Rule(null, null, VM, null)));
+        assertTrue(UsbRules.build(true, map, null).isEnabled());
+        var off = UsbRules.build(false, map, null);
+        assertFalse(off.isEnabled());
+        // Off keeps every rule exactly as it is: nothing runs, and nothing is thrown away.
+        assertEquals(1, off.layer(Layer.ANY).size());
+        assertEquals(VM, off.layer(Layer.ANY).get(0).vm);
+        assertFalse(off.isEmpty());
+    }
+
+    @Test
+    public void aTargetKeyIsTheOneWordItIsWrittenAs() {
+        assertEquals(Target.HOST, Target.fromKey("host"));
+        assertEquals(Target.VM, Target.fromKey("vm"));
+        assertEquals(Target.SINK, Target.fromKey("sink"));
+        // An unknown token is null here, and the reader turns that into a refusal by name
+        // rather than a rule that quietly does the opposite of what it says.
+        assertNull(Target.fromKey("Sink"));
+        assertNull(Target.fromKey("drop"));
+        assertNull(Target.fromKey(""));
+    }
+
+    @Test
+    public void theOtherLayersAcceptANullVmAsTheHost() {
+        assertNull(build(Layer.EXACT, new Rule("090c:1000", "1.2.2", null, null)).layer(Layer.EXACT).get(0).vm);
+        assertNull(build(Layer.PORT, new Rule(null, "1.2.2", null, null)).layer(Layer.PORT).get(0).vm);
+        assertNull(build(Layer.DEVICE, new Rule("090c:1000", null, null, null)).layer(Layer.DEVICE).get(0).vm);
+    }
+
+    @Test
+    public void anIdIsVidPidWithAnOptionalSerial() {
+        assertTrue(refused(Layer.DEVICE, new Rule("090c-1000", null, VM, null)).contains("bad id"));
+        assertTrue(refused(Layer.DEVICE, new Rule("90c:1000", null, VM, null)).contains("bad id"));
+        assertTrue(refused(Layer.DEVICE, new Rule("090c:1000:", null, VM, null)).contains("bad id"));
+        assertTrue(refused(Layer.DEVICE, new Rule("", null, VM, null)).contains("bad id"));
+        // The hex is lowercased to what the device side reports; the serial is a string and is
+        // kept as given, since that is how the device reports it too.
+        var rule = build(Layer.DEVICE, new Rule("090C:1000:ABC-def", null, VM, null)).layer(Layer.DEVICE).get(0);
+        assertEquals("090c:1000:ABC-def", rule.id);
+        // A serial may itself contain a colon.
+        assertEquals("0020:0b21:a:b", build(Layer.DEVICE, new Rule("0020:0b21:a:b", null, VM, null))
+            .layer(Layer.DEVICE).get(0).id);
+    }
+
+    @Test
+    public void aPortIsAChainOfNumbers() {
+        assertEquals("1.2.2", build(Layer.PORT, new Rule(null, "1.2.2", VM, null)).layer(Layer.PORT).get(0).port);
+        assertEquals("3", build(Layer.PORT, new Rule(null, "3", VM, null)).layer(Layer.PORT).get(0).port);
+        assertTrue(refused(Layer.PORT, new Rule(null, "1-1.2", VM, null)).contains("bad port"));
+        assertTrue(refused(Layer.PORT, new Rule(null, "1.", VM, null)).contains("bad port"));
+        assertTrue(refused(Layer.PORT, new Rule(null, "", VM, null)).contains("bad port"));
+    }
+
+    @Test
+    public void aVmMustExistWhenThereIsAStoreToAsk() {
+        var map = new EnumMap<Layer, List<Rule>>(Layer.class);
+        map.put(Layer.ANY, List.of(new Rule(null, null, VM, null)));
+        var message = assertThrows(RequestException.class,
+            () -> UsbRules.build(map, (vm, controller) -> false)).getMessage();
+        assertTrue(message, message.contains(fmt("any[0]: VM not found: %s", VM)));
+        assertEquals(VM, UsbRules.build(map, (vm, controller) -> VM.equals(vm))
+            .layer(Layer.ANY).get(0).vm);
+        // Without a store (a file read at start-up) the rule is kept as it is.
+        assertEquals(VM, UsbRules.build(map, null).layer(Layer.ANY).get(0).vm);
+        assertTrue(refused(Layer.ANY, new Rule(null, null, "", null)).contains("vm must be a VM id"));
+    }
+
+    @Test
+    public void theErrorNamesTheLayerAndTheIndex() {
+        var map = new EnumMap<Layer, List<Rule>>(Layer.class);
+        map.put(Layer.PORT, List.of(new Rule(null, "1.2", VM, null), new Rule(null, "x", VM, null)));
+        var message = assertThrows(RequestException.class,
+            () -> UsbRules.build(map, null)).getMessage();
+        assertTrue(message, message.startsWith("port[1]: bad port x"));
+    }
+
+    @Test
+    public void aRuleMatchesOnWhicheverFieldsItHas() {
+        assertTrue(new Rule("090c:1000", "1.2", VM, null).matches("090c:1000", "1.2"));
+        assertFalse(new Rule("090c:1000", "1.2", VM, null).matches("090c:1000", "1.3"));
+        assertFalse(new Rule("090c:1000", "1.2", VM, null).matches("090c:1001", "1.2"));
+        assertTrue(new Rule(null, "1.2", VM, null).matches("ffff:ffff", "1.2"));
+        assertTrue(new Rule("090c:1000", null, VM, null).matches("090c:1000", "9.9"));
+        assertTrue(new Rule(null, null, VM, null).matches("ffff:ffff", "9.9"));
+    }
+
+    @Test
+    public void aRuleCarriesItsControllerAsItIsGiven() {
+        // The two shapes that go over the wire: a rule that names one of the VM's controllers,
+        // and one that names none -- which is every rule written before controllers existed, and
+        // still means "the target VM's first xHCI".
+        var named = build(Layer.EXACT, new Rule("090c:1000", "1.2.2", VM, XHCI1))
+            .layer(Layer.EXACT).get(0);
+        assertEquals(XHCI1, named.controller);
+        assertEquals(VM, named.vm);
+        assertNull(build(Layer.EXACT, new Rule("090c:1000", "1.2.2", VM, null))
+            .layer(Layer.EXACT).get(0).controller);
+        // It rides along with the fields the layer does read, id lowercasing included.
+        var device = build(Layer.DEVICE, new Rule("090C:1000", null, VM, XHCI0))
+            .layer(Layer.DEVICE).get(0);
+        assertEquals("090c:1000", device.id);
+        assertEquals(XHCI0, device.controller);
+        assertEquals(XHCI0, build(Layer.ANY, new Rule(null, null, VM, XHCI0))
+            .layer(Layer.ANY).get(0).controller);
+    }
+
+    @Test
+    public void aHostRuleCarriesNoController() {
+        // "Keep it on the host" has no VM, so there is nothing for a controller to be inside of.
+        assertTrue(refused(Layer.PORT, new Rule(null, "1.2.2", null, XHCI0))
+            .contains("port[0]: controller needs a vm"));
+    }
+
+    @Test
+    public void anEmptyControllerIsRefused() {
+        // "" is not "no controller": a rule that means the VM's first one leaves the key out.
+        assertTrue(refused(Layer.ANY, new Rule(null, null, VM, ""))
+            .contains("any[0]: controller must be a controller id or null"));
+    }
+
+    @Test
+    public void aControllerMustExistWhenThereIsAStoreToAsk() {
+        // The model's contract, asked with a hand-written predicate. What the daemon supplies
+        // answers on the VM alone (UsbPassthroughManager.targetExists says why), so this is the
+        // shape a caller with a current copy of the config would use, not today's refusal.
+        var map = new EnumMap<Layer, List<Rule>>(Layer.class);
+        map.put(Layer.ANY, List.of(new Rule(null, null, VM, XHCI1)));
+        var message = assertThrows(RequestException.class,
+            () -> UsbRules.build(map, (vm, controller) -> XHCI0.equals(controller))).getMessage();
+        assertTrue(message, message.contains(fmt("any[0]: VM %s has no USB controller %s",
+            VM, XHCI1)));
+        // The unknown-VM wording is kept for a rule that names no controller: nothing about the
+        // controller is wrong there.
+        var vmOnly = new EnumMap<Layer, List<Rule>>(Layer.class);
+        vmOnly.put(Layer.ANY, List.of(new Rule(null, null, VM, null)));
+        assertTrue(assertThrows(RequestException.class,
+            () -> UsbRules.build(vmOnly, (vm, controller) -> false)).getMessage()
+            .contains(fmt("any[0]: VM not found: %s", VM)));
+        // A target the predicate accepts is kept as it is.
+        assertEquals(XHCI1, UsbRules.build(map, (vm, controller) -> true)
+            .layer(Layer.ANY).get(0).controller);
+        // And with no store to ask -- the file read at start-up -- neither half is checked, so a
+        // rule for a controller deleted since is kept rather than dropped behind the user's back.
+        assertEquals(XHCI1, UsbRules.build(map, null).layer(Layer.ANY).get(0).controller);
+    }
+}
diff --git a/app/src/test/java/cn/classfun/droidvm/daemon/usb/UsbUeventTest.java b/app/src/test/java/cn/classfun/droidvm/daemon/usb/UsbUeventTest.java
new file mode 100644
index 000000000..fce8db44c
--- /dev/null
+++ b/app/src/test/java/cn/classfun/droidvm/daemon/usb/UsbUeventTest.java
@@ -0,0 +1,143 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
+package cn.classfun.droidvm.daemon.usb;
+
+import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
+import static org.junit.Assert.assertEquals;
+import static org.junit.Assert.assertFalse;
+import static org.junit.Assert.assertNull;
+import static org.junit.Assert.assertTrue;
+
+import org.junit.Test;
+
+import java.io.ByteArrayOutputStream;
+import java.nio.charset.StandardCharsets;
+
+/**
+ * The second event source, read over the datagrams the kernel actually sent. Every message here
+ * was captured from 5568 with a netlink listener while usbhid was unbound from and rebound to
+ * 1-1.6:1.0 -- the case that moves no node, raises no inotify event, and was invisible to the
+ * daemon until this existed.
+ */
+public final class UsbUeventTest {
+    /** A uevent as the kernel writes it: NUL-separated fields, the header first. */
+    private static byte[] message(String... fields) {
+        var out = new ByteArrayOutputStream();
+        for (var field : fields) {
+            out.writeBytes(field.getBytes(StandardCharsets.UTF_8));
+            out.write(0);
+        }
+        return out.toByteArray();
+    }
+
+    private static final String IFACE_PATH =
+        "/devices/platform/soc/a600000.ssusb/a600000.dwc3/xhci-hcd.1.auto/usb1/1-1/1-1.6/1-1.6:1.0";
+
+    @Test
+    public void anInterfaceBindCarriesTheDriverThatTookIt() {
+        var raw = message(
+            fmt("bind@%s", IFACE_PATH),
+            "ACTION=bind",
+            fmt("DEVPATH=%s", IFACE_PATH),
+            "SUBSYSTEM=usb",
+            "DEVTYPE=usb_interface",
+            "DRIVER=usbhid",
+            "PRODUCT=bda/1100/101",
+            "INTERFACE=3/0/0",
+            "MODALIAS=usb:v0BDAp1100d0101dc00dsc00dp00ic03isc00ip00in00",
+            "SEQNUM=20256");
+        var event = UsbUevent.parse(raw, raw.length);
+        assertEquals("bind", event.action);
+        assertEquals("1-1.6:1.0", event.name);
+        assertEquals("usb_interface", event.devtype);
+        assertEquals("usbhid", event.driver);
+        assertTrue(event.isDriverChange());
+    }
+
+    /** The unbind carries no DRIVER: by the time it is sent the driver is already gone. */
+    @Test
+    public void anInterfaceUnbindCarriesNoDriver() {
+        var raw = message(
+            fmt("unbind@%s", IFACE_PATH),
+            "ACTION=unbind",
+            fmt("DEVPATH=%s", IFACE_PATH),
+            "SUBSYSTEM=usb",
+            "DEVTYPE=usb_interface",
+            "PRODUCT=bda/1100/101",
+            "INTERFACE=3/0/0",
+            "SEQNUM=20251");
+        var event = UsbUevent.parse(raw, raw.length);
+        assertEquals("unbind", event.action);
+        assertEquals("1-1.6:1.0", event.name);
+        assertEquals("", event.driver);
+        assertTrue(event.isDriverChange());
+    }
+
+    /**
+     * A root hub registering, which is what a dual-role port coming back to host mode sends. Its
+     * name is the one sysfs lists it under, so the pass that follows can speak about it.
+     */
+    @Test
+    public void aRootHubAddIsAUsbDeviceNamedAfterItsBus() {
+        var path = "/devices/platform/soc/a600000.ssusb/a600000.dwc3/xhci-hcd.1.auto/usb1";
+        var raw = message(
+            fmt("add@%s", path),
+            "ACTION=add",
+            fmt("DEVPATH=%s", path),
+            "SUBSYSTEM=usb",
+            "DEVTYPE=usb_device",
+            "PRODUCT=1d6b/2/606",
+            "DEVNAME=bus/usb/001/001",
+            "SEQNUM=20260");
+        var event = UsbUevent.parse(raw, raw.length);
+        assertEquals("add", event.action);
+        assertEquals("usb1", event.name);
+        assertEquals("usb_device", event.devtype);
+        assertFalse(event.isDriverChange());
+    }
+
+    /**
+     * Everything else is dropped before anything is done with it. The same unbind sends one of
+     * these for the character device the driver had published, and it names a path that is not a
+     * device this daemon knows.
+     */
+    @Test
+    public void aMessageFromAnotherSubsystemIsNotRead() {
+        var path = fmt("%s/usbmisc/hiddev0", IFACE_PATH);
+        var raw = message(
+            fmt("remove@%s", path),
+            "ACTION=remove",
+            fmt("DEVPATH=%s", path),
+            "SUBSYSTEM=usbmisc",
+            "MAJOR=180",
+            "MINOR=96",
+            "DEVNAME=usb/hiddev0",
+            "SEQNUM=20247");
+        assertNull(UsbUevent.parse(raw, raw.length));
+    }
+
+    @Test
+    public void aMessageWithoutTheKeysItNeedsIsNotRead() {
+        var raw = message(fmt("bind@%s", IFACE_PATH), "SUBSYSTEM=usb", "DEVTYPE=usb_interface");
+        assertNull(UsbUevent.parse(raw, raw.length));
+        var empty = new byte[0];
+        assertNull(UsbUevent.parse(empty, 0));
+    }
+
+    /** Read to the length given, not to the end of the buffer the reader happens to reuse. */
+    @Test
+    public void onlyTheBytesThisDatagramBroughtAreRead() {
+        var raw = message(
+            "ACTION=bind", fmt("DEVPATH=%s", IFACE_PATH), "SUBSYSTEM=usb", "DRIVER=usbhid");
+        var buffer = new byte[8192];
+        System.arraycopy(raw, 0, buffer, 0, raw.length);
+        // What a previous, longer message left behind, which a reader that trusted the buffer
+        // rather than the count would read as part of this one.
+        var stale = message("ACTION=unbind", "SUBSYSTEM=usbmisc");
+        System.arraycopy(stale, 0, buffer, raw.length, stale.length);
+        var event = UsbUevent.parse(buffer, raw.length);
+        assertEquals("bind", event.action);
+        assertEquals("usbhid", event.driver);
+    }
+}
diff --git a/app/src/test/java/cn/classfun/droidvm/lib/store/vm/VMCreationDefaultsTest.java b/app/src/test/java/cn/classfun/droidvm/lib/store/vm/VMCreationDefaultsTest.java
index 39d6bca71..e947f157f 100644
--- a/app/src/test/java/cn/classfun/droidvm/lib/store/vm/VMCreationDefaultsTest.java
+++ b/app/src/test/java/cn/classfun/droidvm/lib/store/vm/VMCreationDefaultsTest.java
@@ -22,6 +22,11 @@ public void requestedCreateVmDefaultsAreStable() {
         assertEquals(5900, VMScreenConfig.newVmDefaultVncPort(VMScreenConfig.ID_GPU0));
         assertEquals(5909, VMScreenConfig.newVmDefaultVncPort(VMScreenConfig.ID_SIMPLEFB));
 
+        var xhci = VMPeripheralConfig.createDefaultXhci("xhci-0");
+        assertEquals(PeripheralType.XHCI_USB, xhci.getType());
+        assertEquals(VMXhciConfig.DEFAULT_PORTS, xhci.getUsb2Ports());
+        assertEquals(VMXhciConfig.DEFAULT_PORTS, xhci.getUsb3Ports());
+
         var sound = VMPeripheralConfig.createDefaultVirtioSound();
         assertEquals(PeripheralType.VIRTIO_SOUND, sound.getType());
         var endpoints = sound.getEndpoints();
@@ -54,6 +59,13 @@ public void customizeDefaultsAgreeWithTheEditorsOwn() {
         // Only LendMthpMode.defaultForDevice reads it, inside its own try/catch.
         var item = VMConfig.createWithCustomizeDefaults(null).item;
 
+        // One xHCI controller, minted through the counter so a new VM and a converted old one
+        // both carry "xhci-0" -- the id every USB rule for this VM will name.
+        var controllers = VMXhciConfig.listControllers(item);
+        assertEquals(1, controllers.size());
+        assertEquals("xhci-0", controllers.get(0).getControllerId());
+        assertEquals(VMConfig.NEW_VM_DEFAULT_USB, VMXhciConfig.isEnabled(item));
+
         var gpu = VMScreenConfig.find(item, VMScreenConfig.ID_GPU0);
         assertNotNull(gpu);
         // Off: a new VM has no virtio-gpu device until asked. Bound anyway, because this is what
diff --git a/app/src/test/java/cn/classfun/droidvm/lib/store/vm/VMXhciMigrationTest.java b/app/src/test/java/cn/classfun/droidvm/lib/store/vm/VMXhciMigrationTest.java
new file mode 100644
index 000000000..48fa40fc2
--- /dev/null
+++ b/app/src/test/java/cn/classfun/droidvm/lib/store/vm/VMXhciMigrationTest.java
@@ -0,0 +1,276 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
+package cn.classfun.droidvm.lib.store.vm;
+
+import static org.junit.Assert.assertEquals;
+import static org.junit.Assert.assertFalse;
+import static org.junit.Assert.assertNotNull;
+import static org.junit.Assert.assertNull;
+import static org.junit.Assert.assertTrue;
+
+import org.junit.Test;
+
+import cn.classfun.droidvm.lib.store.base.DataItem;
+
+/**
+ * The fold of the VM-level "usb" boolean into an xHCI controller entry, and the id minting that
+ * makes a USB rule able to point at one.
+ *
+ * <p>The migration is called the way {@code VMConfig(JSONObject)} calls it, on a hand-built
+ * {@link DataItem}: org.json is a stub under the test android.jar (see UsbRulesTest), so the
+ * config is built directly rather than parsed. That is also why the legacy key is written here
+ * by name -- it is the key an older build wrote, and this codebase no longer has a constant for
+ * it because nothing writes it any more.</p>
+ */
+public final class VMXhciMigrationTest {
+    /** The VM-level boolean an older build wrote, and the only thing the fold reads. */
+    private static final String KEY_USB = "usb";
+
+    /** A config as an older build wrote it: the boolean, and no peripheral for it. */
+    private static DataItem legacy(boolean usb) {
+        var item = DataItem.newObject();
+        item.set(KEY_USB, usb);
+        return item;
+    }
+
+    /** Whether a config carries the legacy key at all. */
+    private static boolean hasUsbKey(DataItem item) {
+        return item.opt(KEY_USB, (DataItem) null) != null;
+    }
+
+    /** A config as this build writes one: the controller list and the counter, no boolean. */
+    private static DataItem saved(String id) {
+        var item = withPeripherals(controllerEntry(id, 8, 8));
+        item.set(VMXhciConfig.KEY_NEXT, 1L);
+        return item;
+    }
+
+    private static DataItem controllerEntry(String id, long usb2, long usb3) {
+        var entry = DataItem.newObject();
+        entry.set("type", PeripheralType.XHCI_USB);
+        if (id != null) entry.set(VMXhciConfig.KEY_ID, id);
+        entry.set(VMXhciConfig.KEY_USB2, usb2);
+        entry.set(VMXhciConfig.KEY_USB3, usb3);
+        return entry;
+    }
+
+    private static DataItem withPeripherals(DataItem... entries) {
+        var item = DataItem.newObject();
+        var arr = DataItem.newArray();
+        for (var entry : entries) arr.append(entry);
+        item.set(VMXhciConfig.KEY_PERIPHERALS, arr);
+        return item;
+    }
+
+    @Test
+    public void aConfigWithUsbTrueGainsOneControllerWithEightPortsEachWay() {
+        var item = legacy(true);
+        VMXhciConfig.migrate(item);
+        var controllers = VMXhciConfig.listControllers(item);
+        assertEquals(1, controllers.size());
+        assertEquals("xhci-0", controllers.get(0).getControllerId());
+        // crosvm's real geometry, so a converted VM opens with no warning on the default backend.
+        assertEquals(8, controllers.get(0).getUsb2Ports());
+        assertEquals(8, controllers.get(0).getUsb3Ports());
+        assertEquals(PeripheralType.XHCI_USB, controllers.get(0).getType());
+        assertTrue(VMXhciConfig.isEnabled(item));
+        assertEquals("xhci-0", VMXhciConfig.firstControllerId(item));
+    }
+
+    @Test
+    public void aConfigWithUsbFalseGainsNoController() {
+        var item = legacy(false);
+        VMXhciConfig.migrate(item);
+        assertTrue(VMXhciConfig.listControllers(item).isEmpty());
+        assertFalse(VMXhciConfig.isEnabled(item));
+        assertNull(VMXhciConfig.firstControllerId(item));
+        assertNull(VMXhciConfig.findController(item, null));
+    }
+
+    @Test
+    public void aConfigWithNoUsbKeyGainsNoController() {
+        // An absent key reads as off, which is what crosvm and the passthrough manager always
+        // made of it. The one shape that meant "on" -- a config with no peripherals array at all
+        // -- is QEMU's to keep honouring, and it does, from the boolean.
+        var item = DataItem.newObject();
+        VMXhciConfig.migrate(item);
+        assertTrue(VMXhciConfig.listControllers(item).isEmpty());
+        assertFalse(VMXhciConfig.isEnabled(item));
+    }
+
+    @Test
+    public void migrationIsIdempotent() {
+        var item = legacy(true);
+        VMXhciConfig.migrate(item);
+        VMXhciConfig.migrate(item);
+        VMXhciConfig.migrate(item);
+        var controllers = VMXhciConfig.listControllers(item);
+        assertEquals(1, controllers.size());
+        assertEquals("xhci-0", controllers.get(0).getControllerId());
+    }
+
+    @Test
+    public void bothProcessesMintTheSameId() {
+        // vm_create/vm_modify build a VMConfig from the config the app pushed, so this migration
+        // also runs inside the daemon, on a copy it never writes back. The two runs have to agree
+        // or every rule keyed on the id would point at nothing.
+        var app = legacy(true);
+        var daemon = legacy(true);
+        VMXhciConfig.migrate(app);
+        VMXhciConfig.migrate(daemon);
+        assertEquals("xhci-0", VMXhciConfig.firstControllerId(app));
+        assertEquals(VMXhciConfig.firstControllerId(app), VMXhciConfig.firstControllerId(daemon));
+
+        // And the daemon's re-run over what the app saved leaves that id alone.
+        var pushed = new DataItem(app);
+        VMXhciConfig.migrate(pushed);
+        assertEquals(1, VMXhciConfig.listControllers(pushed).size());
+        assertEquals("xhci-0", VMXhciConfig.firstControllerId(pushed));
+    }
+
+    @Test
+    public void anImportedConfigYieldsTheSameIdEveryTimeItIsRead() {
+        // The vm or vmpkg case: a config that only ever said "usb": 1 may never be saved, so
+        // every read of it -- in the app, in the daemon, at every start -- has to produce the id
+        // the rule that targets it is holding. A random id minted at read time would dangle.
+        for (var run = 0; run < 3; run++) {
+            var imported = legacy(true);
+            VMXhciConfig.migrate(imported);
+            var controllers = VMXhciConfig.listControllers(imported);
+            assertEquals(1, controllers.size());
+            assertEquals("xhci-0", controllers.get(0).getControllerId());
+            assertNotNull(VMXhciConfig.findController(imported, "xhci-0"));
+        }
+    }
+
+    @Test
+    public void aRuleStillResolvesOnceTheConfigIsSavedInTheNewFormat() {
+        // What the editor writes now: peripherals and the counter, and no "usb" key at all. A
+        // rule that named the id the import minted has to go on finding it.
+        var imported = legacy(true);
+        VMXhciConfig.migrate(imported);
+        var rulesTarget = VMXhciConfig.firstControllerId(imported);
+
+        var stored = saved(rulesTarget);
+        assertFalse(hasUsbKey(stored));
+        VMXhciConfig.migrate(stored);
+        assertEquals(1, VMXhciConfig.listControllers(stored).size());
+        assertNotNull(VMXhciConfig.findController(stored, rulesTarget));
+        assertEquals(rulesTarget, VMXhciConfig.firstControllerId(stored));
+        assertTrue(VMXhciConfig.isEnabled(stored));
+    }
+
+    @Test
+    public void theLegacyKeyIsReadAndNeverWritten() {
+        // It is an import signal, not a mirror: nothing reads the boolean any more, so writing
+        // one would only be a second answer to "has this VM any USB".
+        var converted = legacy(true);
+        VMXhciConfig.migrate(converted);
+        assertTrue(VMXhciConfig.isEnabled(converted));
+
+        var fresh = DataItem.newObject();
+        VMXhciConfig.addController(fresh);
+        assertFalse(hasUsbKey(fresh));
+        VMXhciConfig.migrate(fresh);
+        assertFalse(hasUsbKey(fresh));
+    }
+
+    @Test
+    public void anExistingControllerIsLeftAlone() {
+        var item = withPeripherals(controllerEntry("xhci-1", 4, 2));
+        item.set(VMXhciConfig.KEY_NEXT, 2L);
+        VMXhciConfig.migrate(item);
+        var controllers = VMXhciConfig.listControllers(item);
+        assertEquals(1, controllers.size());
+        assertEquals("xhci-1", controllers.get(0).getControllerId());
+        assertEquals(4, controllers.get(0).getUsb2Ports());
+        assertEquals(2, controllers.get(0).getUsb3Ports());
+        // A rule that names no controller means this one, first in the array.
+        assertEquals("xhci-1", VMXhciConfig.firstControllerId(item));
+        assertNotNull(VMXhciConfig.findController(item, "xhci-1"));
+        assertNull(VMXhciConfig.findController(item, "xhci-0"));
+    }
+
+    @Test
+    public void anEntryWithNoIdGetsOneWithoutTakingAnothersName() {
+        // A config that carries ids but no counter -- hand-written, or written by a build that
+        // lost the key -- must not hand out an id it is already using.
+        var item = withPeripherals(controllerEntry("xhci-0", 8, 8), controllerEntry(null, 8, 8));
+        VMXhciConfig.migrate(item);
+        var controllers = VMXhciConfig.listControllers(item);
+        assertEquals(2, controllers.size());
+        assertEquals("xhci-0", controllers.get(0).getControllerId());
+        assertEquals("xhci-1", controllers.get(1).getControllerId());
+        assertEquals(2, item.optLong(VMXhciConfig.KEY_NEXT, -1));
+    }
+
+    @Test
+    public void idsAreNeverReused() {
+        // Deleting a controller and adding another must not re-adopt the rules that pointed at
+        // the deleted one, so the counter only ever goes up.
+        var item = legacy(true);
+        VMXhciConfig.migrate(item);
+        assertEquals("xhci-0", VMXhciConfig.firstControllerId(item));
+        item.opt(VMXhciConfig.KEY_PERIPHERALS, DataItem.newArray()).remove(0);
+        assertTrue(VMXhciConfig.listControllers(item).isEmpty());
+        assertEquals("xhci-1", VMXhciConfig.addController(item).getControllerId());
+        // Even a fold that runs after the deletion cannot mint xhci-0 again.
+        var second = VMXhciConfig.addController(item);
+        assertEquals("xhci-2", second.getControllerId());
+    }
+
+    @Test
+    public void aControllerTheUserRemovedIsNotMintedAgain() {
+        // The counter says the fold has run, so an empty list means the user emptied it -- not a
+        // config that predates controllers. Minting another would hand it a new id and dangle
+        // every rule that named the one that was removed.
+        var item = legacy(true);
+        VMXhciConfig.migrate(item);
+        item.opt(VMXhciConfig.KEY_PERIPHERALS, DataItem.newArray()).remove(0);
+        VMXhciConfig.migrate(item);
+        assertTrue(VMXhciConfig.listControllers(item).isEmpty());
+        assertFalse(VMXhciConfig.isEnabled(item));
+    }
+
+    @Test
+    public void theControllerListOutranksTheLegacyBoolean() {
+        // A config that says "usb": false and carries a controller has USB: the list is the
+        // answer, and the boolean is only consulted when there is no list to read.
+        var handWritten = withPeripherals(controllerEntry("xhci-0", 8, 8));
+        handWritten.set(KEY_USB, false);
+        VMXhciConfig.migrate(handWritten);
+        assertTrue(VMXhciConfig.isEnabled(handWritten));
+        assertEquals(1, VMXhciConfig.listControllers(handWritten).size());
+    }
+
+    @Test
+    public void portCountsAreHeldToWhatTheEditorCanExpress() {
+        var item = withPeripherals(controllerEntry("xhci-0", 99, -3));
+        VMXhciConfig.migrate(item);
+        var controller = VMXhciConfig.listControllers(item).get(0);
+        assertEquals(VMXhciConfig.MAX_PORTS, controller.getUsb2Ports());
+        assertEquals(VMXhciConfig.MIN_PORTS, controller.getUsb3Ports());
+        controller.setUsb2Ports(42);
+        controller.setUsb3Ports(-1);
+        assertEquals(VMXhciConfig.MAX_PORTS, controller.getUsb2Ports());
+        assertEquals(VMXhciConfig.MIN_PORTS, controller.getUsb3Ports());
+        // An entry that says nothing about its ports has crosvm's geometry.
+        var bare = DataItem.newObject();
+        bare.set("type", PeripheralType.XHCI_USB);
+        var defaults = new VMPeripheralConfig(bare);
+        assertEquals(VMXhciConfig.DEFAULT_PORTS, defaults.getUsb2Ports());
+        assertEquals(VMXhciConfig.DEFAULT_PORTS, defaults.getUsb3Ports());
+    }
+
+    @Test
+    public void aSoundCardIsNotAController() {
+        // listControllers reads the type, not the position: a card with the same shape of keys is
+        // still a sound card, and a VM that has only one has no USB.
+        var item = withPeripherals(VMPeripheralConfig.createDefaultVirtioSound().item);
+        item.set(KEY_USB, false);
+        VMXhciConfig.migrate(item);
+        assertTrue(VMXhciConfig.listControllers(item).isEmpty());
+        assertFalse(VMXhciConfig.isEnabled(item));
+    }
+}
diff --git a/app/src/test/java/cn/classfun/droidvm/ui/usb/UsbDeviceTargetTest.java b/app/src/test/java/cn/classfun/droidvm/ui/usb/UsbDeviceTargetTest.java
new file mode 100644
index 000000000..5fbf3f97a
--- /dev/null
+++ b/app/src/test/java/cn/classfun/droidvm/ui/usb/UsbDeviceTargetTest.java
@@ -0,0 +1,96 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
+package cn.classfun.droidvm.ui.usb;
+
+import static org.junit.Assert.assertEquals;
+import static org.junit.Assert.assertFalse;
+import static org.junit.Assert.assertNull;
+import static org.junit.Assert.assertTrue;
+
+import org.junit.Test;
+
+import cn.classfun.droidvm.daemon.usb.UsbHostDevice.State;
+import cn.classfun.droidvm.daemon.usb.UsbRules;
+
+/**
+ * Where a rule row sends its device, as the page reads and writes it. The row itself is org.json
+ * and stays out of here; this is the reading of the three fields it carries.
+ */
+public final class UsbDeviceTargetTest {
+    @Test
+    public void aRowWithNoTargetMeansWhatItAlwaysMeant() {
+        // The dev phone's rules file: rows written before there was a target to write.
+        var host = UsbDeviceTarget.of(null, null, null);
+        assertEquals(UsbRules.Target.HOST, host.kind);
+        assertNull(host.vmId);
+        var vm = UsbDeviceTarget.of(null, "vm-1", "xhci-0");
+        assertEquals(UsbRules.Target.VM, vm.kind);
+        assertEquals("vm-1", vm.vmId);
+        assertEquals("xhci-0", vm.controller);
+    }
+
+    @Test
+    public void aTargetKeyIsAuthoritativeOverTheVmField() {
+        assertEquals(UsbRules.Target.SINK, UsbDeviceTarget.of("sink", null, null).kind);
+        assertEquals(UsbRules.Target.HOST, UsbDeviceTarget.of("host", null, null).kind);
+        assertEquals(UsbRules.Target.VM, UsbDeviceTarget.of("vm", "vm-1", null).kind);
+    }
+
+    @Test
+    public void aTargetThatIsNotAVmCarriesNoVm() {
+        var sink = UsbDeviceTarget.of("sink", "vm-1", "xhci-0");
+        assertNull(sink.vmId);
+        assertNull(sink.controller);
+    }
+
+    @Test
+    public void aTokenThisBuildHasNoWordForFallsBackToTheDerivation() {
+        // Not repaired here: the row goes back to the daemon as it came, and is refused by name.
+        assertEquals(UsbRules.Target.HOST, UsbDeviceTarget.of("hide", null, null).kind);
+        assertEquals(UsbRules.Target.VM, UsbDeviceTarget.of("hide", "vm-1", null).kind);
+    }
+
+    @Test
+    public void twoTargetsAreTheSameOnlyWhenEveryFieldIs() {
+        assertTrue(UsbDeviceTarget.host().sameAs(UsbDeviceTarget.host()));
+        assertTrue(UsbDeviceTarget.sink().sameAs(UsbDeviceTarget.sink()));
+        assertFalse(UsbDeviceTarget.host().sameAs(UsbDeviceTarget.sink()));
+        assertFalse(UsbDeviceTarget.host().sameAs(null));
+        assertTrue(UsbDeviceTarget.vm("vm-1", "xhci-0")
+            .sameAs(UsbDeviceTarget.vm("vm-1", "xhci-0")));
+        assertFalse(UsbDeviceTarget.vm("vm-1", "xhci-0")
+            .sameAs(UsbDeviceTarget.vm("vm-2", "xhci-0")));
+        // "the VM's first controller" is not the same answer as naming that controller.
+        assertFalse(UsbDeviceTarget.vm("vm-1", null)
+            .sameAs(UsbDeviceTarget.vm("vm-1", "xhci-0")));
+    }
+
+    @Test
+    public void aRowsMenuValueIsReadOffTheDeviceState() {
+        // The three the page can show: the VM that holds it, the host, nobody.
+        var onVm = UsbDeviceTarget.current(State.VMUSE, "vm-1", "xhci-0");
+        assertEquals(UsbRules.Target.VM, onVm.kind);
+        assertEquals("vm-1", onVm.vmId);
+        assertEquals("xhci-0", onVm.controller);
+        assertEquals(UsbRules.Target.HOST,
+            UsbDeviceTarget.current(State.HOSTUSE, null, null).kind);
+        assertEquals(UsbRules.Target.SINK, UsbDeviceTarget.current(State.IDLE, null, null).kind);
+    }
+
+    @Test
+    public void aClaimNobodyOwnsIsNoneOfTheThree() {
+        // A usbfs claim with no attachment behind it is a VMM still dying with the device, or an
+        // Android app that opened it. Saying "the host" for that -- the one place it certainly
+        // is not -- is what the page used to show; there is no target for it, and the page has
+        // a word of its own instead.
+        assertNull(UsbDeviceTarget.current(State.VMUSE, null, null));
+    }
+
+    @Test
+    public void theRuleKeyIsTheDaemonsOwn() {
+        assertEquals("host", UsbDeviceTarget.host().toRuleTarget());
+        assertEquals("sink", UsbDeviceTarget.sink().toRuleTarget());
+        assertEquals("vm", UsbDeviceTarget.vm("vm-1", null).toRuleTarget());
+    }
+}
diff --git a/app/src/test/java/cn/classfun/droidvm/ui/usb/UsbRuleLayerTest.java b/app/src/test/java/cn/classfun/droidvm/ui/usb/UsbRuleLayerTest.java
new file mode 100644
index 000000000..828b0ae54
--- /dev/null
+++ b/app/src/test/java/cn/classfun/droidvm/ui/usb/UsbRuleLayerTest.java
@@ -0,0 +1,86 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
+package cn.classfun.droidvm.ui.usb;
+
+import static org.junit.Assert.assertEquals;
+import static org.junit.Assert.assertFalse;
+import static org.junit.Assert.assertNull;
+import static org.junit.Assert.assertTrue;
+
+import org.junit.Test;
+
+/**
+ * The parts of the rules page that are plain logic: how a daemon names a layer, and how the
+ * page derives a rule id and port path when a daemon does not send them (plan section 2.4).
+ * Everything that touches org.json stays out -- the stubbed android.jar makes it inert here.
+ */
+public final class UsbRuleLayerTest {
+    @Test
+    public void layersAreOrderedAndNumberedAsTheDaemonTriesThem() {
+        assertEquals(1, UsbRuleLayer.EXACT.number());
+        assertEquals(2, UsbRuleLayer.PORT.number());
+        assertEquals(3, UsbRuleLayer.DEVICE.number());
+        assertEquals(4, UsbRuleLayer.ANY.number());
+    }
+
+    @Test
+    public void wireKeysRoundTrip() {
+        for (var layer : UsbRuleLayer.values())
+            assertEquals(layer, UsbRuleLayer.fromKey(layer.key));
+        assertNull(UsbRuleLayer.fromKey("hub"));
+        assertNull(UsbRuleLayer.fromKey(null));
+    }
+
+    @Test
+    public void aResultMayNameTheLayerByKeyOrByNumber() {
+        assertEquals(UsbRuleLayer.PORT, UsbRuleLayer.fromValue("port"));
+        assertEquals(UsbRuleLayer.PORT, UsbRuleLayer.fromValue("PORT"));
+        assertEquals(UsbRuleLayer.PORT, UsbRuleLayer.fromValue(2));
+        assertEquals(UsbRuleLayer.PORT, UsbRuleLayer.fromValue("2"));
+        assertEquals(UsbRuleLayer.ANY, UsbRuleLayer.fromValue(4L));
+        assertNull(UsbRuleLayer.fromValue(0));
+        assertNull(UsbRuleLayer.fromValue(5));
+        assertNull(UsbRuleLayer.fromValue("five"));
+        assertNull(UsbRuleLayer.fromValue(null));
+    }
+
+    /**
+     * Only the catch-all layer needs no subject picked before a target: it matches everything,
+     * so there is nothing to ask about. Every layer takes every target, that one included.
+     */
+    @Test
+    public void onlyTheCatchAllLayerNeedsNoSubject() {
+        assertTrue(UsbRuleLayer.EXACT.needsSubject());
+        assertTrue(UsbRuleLayer.PORT.needsSubject());
+        assertTrue(UsbRuleLayer.DEVICE.needsSubject());
+        assertFalse(UsbRuleLayer.ANY.needsSubject());
+    }
+
+    @Test
+    public void eachLayerCarriesTheFieldsItsRulesNeed() {
+        assertTrue(UsbRuleLayer.EXACT.hasId);
+        assertTrue(UsbRuleLayer.EXACT.hasPort);
+        assertFalse(UsbRuleLayer.PORT.hasId);
+        assertTrue(UsbRuleLayer.PORT.hasPort);
+        assertTrue(UsbRuleLayer.DEVICE.hasId);
+        assertFalse(UsbRuleLayer.DEVICE.hasPort);
+        assertFalse(UsbRuleLayer.ANY.needsSubject());
+    }
+
+    @Test
+    public void idIsVidPidWithTheSerialOnlyWhenThereIsOne() {
+        assertEquals("090c:1000:0123456789ABCDEF",
+            UsbHostDeviceInfo.deriveId("090c", "1000", "0123456789ABCDEF"));
+        assertEquals("0bda:8153", UsbHostDeviceInfo.deriveId("0bda", "8153", ""));
+    }
+
+    @Test
+    public void portDropsTheBusSoBothSpeedsMeetOnOnePhysicalPort() {
+        // A USB2 device enumerates on bus 1, a USB3 one on bus 2; same socket, same port.
+        assertEquals("1.2.2", UsbHostDeviceInfo.derivePort("1-1.2.2"));
+        assertEquals("1.2.2", UsbHostDeviceInfo.derivePort("2-1.2.2"));
+        assertEquals("1.4", UsbHostDeviceInfo.derivePort("2-1.4"));
+        assertEquals("usb1", UsbHostDeviceInfo.derivePort("usb1"));
+    }
+}
diff --git a/app/src/test/java/cn/classfun/droidvm/ui/usb/UsbRuleLinesTest.java b/app/src/test/java/cn/classfun/droidvm/ui/usb/UsbRuleLinesTest.java
new file mode 100644
index 000000000..7b09d7f02
--- /dev/null
+++ b/app/src/test/java/cn/classfun/droidvm/ui/usb/UsbRuleLinesTest.java
@@ -0,0 +1,84 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
+package cn.classfun.droidvm.ui.usb;
+
+import static org.junit.Assert.assertArrayEquals;
+import static org.junit.Assert.assertEquals;
+import static org.junit.Assert.assertFalse;
+import static org.junit.Assert.assertTrue;
+
+import org.junit.Test;
+
+/**
+ * Which line of a rule card says what. The ordering is the whole of this class and it is the
+ * part a screenshot cannot check: the port zone and the device zone show the same two values in
+ * opposite roles, so getting them the wrong way round produces a card that looks right and
+ * means the other thing.
+ */
+public final class UsbRuleLinesTest {
+    @Test
+    public void theExactZoneLeadsWithBothOfItsMatchers() {
+        assertArrayEquals(new UsbRuleLines.Slot[]{
+            UsbRuleLines.Slot.MATCH_ID,
+            UsbRuleLines.Slot.MATCH_PORT,
+            UsbRuleLines.Slot.NAME,
+        }, UsbRuleLines.of(UsbRuleLayer.EXACT));
+    }
+
+    /** A port rule is about a socket; which device is in it is context, and the other way round. */
+    @Test
+    public void theOtherTwoZonesLeadWithTheirOwnMatcher() {
+        assertArrayEquals(new UsbRuleLines.Slot[]{
+            UsbRuleLines.Slot.MATCH_PORT,
+            UsbRuleLines.Slot.INFO_ID,
+            UsbRuleLines.Slot.NAME,
+        }, UsbRuleLines.of(UsbRuleLayer.PORT));
+        assertArrayEquals(new UsbRuleLines.Slot[]{
+            UsbRuleLines.Slot.MATCH_ID,
+            UsbRuleLines.Slot.INFO_PORT,
+            UsbRuleLines.Slot.NAME,
+        }, UsbRuleLines.of(UsbRuleLayer.DEVICE));
+    }
+
+    @Test
+    public void theCatchAllZoneSaysOneThing() {
+        assertArrayEquals(new UsbRuleLines.Slot[]{
+            UsbRuleLines.Slot.MATCH_ANY,
+            UsbRuleLines.Slot.NONE,
+            UsbRuleLines.Slot.NONE,
+        }, UsbRuleLines.of(UsbRuleLayer.ANY));
+    }
+
+    @Test
+    public void everyZoneFillsTheCard() {
+        for (var layer : UsbRuleLayer.values())
+            assertEquals(layer.key, UsbRuleLines.LINES, UsbRuleLines.of(layer).length);
+    }
+
+    /** A line is bold exactly when it is the rule, and the context lines never are. */
+    @Test
+    public void onlyAMatcherIsBold() {
+        assertTrue(UsbRuleLines.Slot.MATCH_ID.strong);
+        assertTrue(UsbRuleLines.Slot.MATCH_PORT.strong);
+        assertTrue(UsbRuleLines.Slot.MATCH_ANY.strong);
+        assertFalse(UsbRuleLines.Slot.INFO_ID.strong);
+        assertFalse(UsbRuleLines.Slot.INFO_PORT.strong);
+        assertFalse(UsbRuleLines.Slot.NAME.strong);
+        assertFalse(UsbRuleLines.Slot.NONE.strong);
+    }
+
+    /**
+     * The card never shows a field the zone does not store as if the rule matched on it: a port
+     * zone card carries no MATCH_ID and a device zone card no MATCH_PORT, which is the same
+     * statement UsbRuleLayer makes with hasId and hasPort.
+     */
+    @Test
+    public void aZoneOnlyMatchesOnTheFieldsItStores() {
+        for (var layer : UsbRuleLayer.values())
+            for (var slot : UsbRuleLines.of(layer)) {
+                if (slot == UsbRuleLines.Slot.MATCH_ID) assertTrue(layer.key, layer.hasId);
+                if (slot == UsbRuleLines.Slot.MATCH_PORT) assertTrue(layer.key, layer.hasPort);
+            }
+    }
+}
diff --git a/app/src/test/java/cn/classfun/droidvm/ui/usb/UsbRuleShadowTest.java b/app/src/test/java/cn/classfun/droidvm/ui/usb/UsbRuleShadowTest.java
new file mode 100644
index 000000000..4bd41a919
--- /dev/null
+++ b/app/src/test/java/cn/classfun/droidvm/ui/usb/UsbRuleShadowTest.java
@@ -0,0 +1,139 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
+package cn.classfun.droidvm.ui.usb;
+
+import static org.junit.Assert.assertArrayEquals;
+
+import androidx.annotation.Nullable;
+
+import org.junit.Test;
+
+import java.util.List;
+
+import cn.classfun.droidvm.lib.store.base.DataItem;
+
+/**
+ * Which rule cards the page draws as unreachable. Rows are {@link DataItem}, whose org.json
+ * conversion stays at its edges (see VMXhciMigrationTest), so the zone's list is buildable here
+ * under the stubbed android.jar.
+ */
+public final class UsbRuleShadowTest {
+    @Test
+    public void aHostRuleShadowsTheSameMatcherBelowIt() {
+        var rules = List.of(
+            device("0bda:8153", "host"),
+            device("0bda:8153", "vm"));
+        assertArrayEquals(new boolean[]{false, true},
+            UsbRuleShadow.unreachable(UsbRuleLayer.DEVICE, rules));
+    }
+
+    @Test
+    public void aSinkRuleShadowsJustAsAHostRuleDoes() {
+        var rules = List.of(
+            device("0bda:8153", "sink"),
+            device("0bda:8153", "vm"),
+            device("0bda:8153", "host"));
+        assertArrayEquals(new boolean[]{false, true, true},
+            UsbRuleShadow.unreachable(UsbRuleLayer.DEVICE, rules));
+    }
+
+    @Test
+    public void aVmRuleNeverShadows() {
+        // The VM may be stopped, may have lost the controller, or may refuse the device, and
+        // then the rule below is what runs -- which is the reason to write one.
+        var rules = List.of(
+            device("0bda:8153", "vm"),
+            device("0bda:8153", "vm"),
+            device("0bda:8153", "host"));
+        assertArrayEquals(new boolean[]{false, false, false},
+            UsbRuleShadow.unreachable(UsbRuleLayer.DEVICE, rules));
+    }
+
+    @Test
+    public void aDifferentMatcherIsNotShadowed() {
+        var rules = List.of(
+            device("0bda:8153", "host"),
+            device("1a86:7523", "vm"));
+        assertArrayEquals(new boolean[]{false, false},
+            UsbRuleShadow.unreachable(UsbRuleLayer.DEVICE, rules));
+    }
+
+    @Test
+    public void eachMatcherIsItsOwnSearch() {
+        // Two devices spoken for in one zone: the second host rule is reached, and each of them
+        // shadows only the rows about its own device.
+        var rules = List.of(
+            device("0bda:8153", "host"),
+            device("1a86:7523", "host"),
+            device("0bda:8153", "vm"),
+            device("1a86:7523", "vm"));
+        assertArrayEquals(new boolean[]{false, false, true, true},
+            UsbRuleShadow.unreachable(UsbRuleLayer.DEVICE, rules));
+    }
+
+    @Test
+    public void theExactZoneComparesBothTheDeviceAndThePort() {
+        var rules = List.of(
+            exact("0bda:8153", "1.2.1", "host"),
+            exact("0bda:8153", "1.2.2", "vm"),
+            exact("1a86:7523", "1.2.1", "vm"),
+            exact("0bda:8153", "1.2.1", "vm"));
+        assertArrayEquals(new boolean[]{false, false, false, true},
+            UsbRuleShadow.unreachable(UsbRuleLayer.EXACT, rules));
+    }
+
+    @Test
+    public void thePortZoneComparesThePortAlone() {
+        // Whatever else a row carries, a port rule matches on its port -- so these two rules
+        // are about the same socket however differently they were written.
+        var rules = List.of(
+            port("1.2.1", "host"),
+            exact("0bda:8153", "1.2.1", "vm"));
+        assertArrayEquals(new boolean[]{false, true},
+            UsbRuleShadow.unreachable(UsbRuleLayer.PORT, rules));
+    }
+
+    @Test
+    public void theCatchAllZoneCannotHitTheCase() {
+        // The page lets that zone hold one row, and one row shadows nothing.
+        assertArrayEquals(new boolean[]{false},
+            UsbRuleShadow.unreachable(UsbRuleLayer.ANY, List.of(rule(null, null, "sink"))));
+        assertArrayEquals(new boolean[]{},
+            UsbRuleShadow.unreachable(UsbRuleLayer.ANY, List.of()));
+    }
+
+    @Test
+    public void aRowWrittenBeforeTargetsExistedShadowsAsTheHostRuleItMeans() {
+        var rules = List.of(
+            rule("0bda:8153", null, null),
+            device("0bda:8153", "vm"));
+        assertArrayEquals(new boolean[]{false, true},
+            UsbRuleShadow.unreachable(UsbRuleLayer.DEVICE, rules));
+    }
+
+    // Rows in the shape the page stores them: only the fields its zone carries, plus the target.
+
+    private static DataItem device(String id, String target) {
+        return rule(id, null, target);
+    }
+
+    private static DataItem port(String port, String target) {
+        return rule(null, port, target);
+    }
+
+    private static DataItem exact(String id, String port, String target) {
+        return rule(id, port, target);
+    }
+
+    private static DataItem rule(@Nullable String id, @Nullable String port,
+                                 @Nullable String target) {
+        var item = DataItem.newObject();
+        if (id != null) item.set("id", id);
+        if (port != null) item.set("port", port);
+        if (target != null) item.set("target", target);
+        // A VM rule names one; nothing here reads which, only that the target is not final.
+        if ("vm".equals(target)) item.set("vm", "vm-1");
+        return item;
+    }
+}
diff --git a/app/src/test/java/cn/classfun/droidvm/ui/usb/UsbSpeedTest.java b/app/src/test/java/cn/classfun/droidvm/ui/usb/UsbSpeedTest.java
new file mode 100644
index 000000000..957809666
--- /dev/null
+++ b/app/src/test/java/cn/classfun/droidvm/ui/usb/UsbSpeedTest.java
@@ -0,0 +1,40 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
+package cn.classfun.droidvm.ui.usb;
+
+import static org.junit.Assert.assertEquals;
+
+import org.junit.Test;
+
+/** The generation a card's title says, from what sysfs reports the device came up at. */
+public final class UsbSpeedTest {
+    @Test
+    public void everyRateAboveFiveGigabitsReadsAsUsbThree() {
+        assertEquals("3.0", UsbSpeed.generationOf("5000"));
+        assertEquals("3.0", UsbSpeed.generationOf("10000"));
+        assertEquals("3.0", UsbSpeed.generationOf("20000"));
+    }
+
+    @Test
+    public void theSlowerBusesKeepTheirOwnNumbers() {
+        assertEquals("2.0", UsbSpeed.generationOf("480"));
+        assertEquals("1.1", UsbSpeed.generationOf("12"));
+        assertEquals("1.0", UsbSpeed.generationOf("1.5"));
+    }
+
+    @Test
+    public void aRateThisBuildHasNoWordForSaysNothing() {
+        assertEquals("", UsbSpeed.generationOf("40000"));
+        assertEquals("", UsbSpeed.generationOf("fast"));
+        assertEquals("", UsbSpeed.generationOf(""));
+        assertEquals("", UsbSpeed.generationOf(null));
+    }
+
+    @Test
+    public void whitespaceRoundTheValueIsNotAnUnknownRate() {
+        // sysfs attributes come back with the trailing newline the kernel wrote.
+        assertEquals("2.0", UsbSpeed.generationOf("480\n"));
+        assertEquals("3.0", UsbSpeed.generationOf(" 5000 "));
+    }
+}
diff --git a/app/src/test/java/cn/classfun/droidvm/ui/vm/edit/peripheral/XhciBindingDiffTest.java b/app/src/test/java/cn/classfun/droidvm/ui/vm/edit/peripheral/XhciBindingDiffTest.java
new file mode 100644
index 000000000..096063e7f
--- /dev/null
+++ b/app/src/test/java/cn/classfun/droidvm/ui/vm/edit/peripheral/XhciBindingDiffTest.java
@@ -0,0 +1,253 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
+package cn.classfun.droidvm.ui.vm.edit.peripheral;
+
+import static org.junit.Assert.assertEquals;
+import static org.junit.Assert.assertFalse;
+import static org.junit.Assert.assertSame;
+import static org.junit.Assert.assertTrue;
+
+import org.junit.Test;
+
+import java.util.ArrayList;
+import java.util.List;
+import java.util.function.Predicate;
+
+import cn.classfun.droidvm.ui.vm.edit.peripheral.XhciBindingDiff.Row;
+
+/**
+ * What one edit of an xHCI card's zones does to the app-global attach rules: the rules file is
+ * shared with the global page, so the card pushes what it changed rather than what it shows.
+ *
+ * <p>Pure lists throughout: no org.json, which is a stub under the test android.jar (see
+ * UsbRulesTest), and no Android at all.</p>
+ */
+public final class XhciBindingDiffTest {
+    private static final String VM = "5e2b0000-0000-0000-0000-000000000001";
+    private static final String OTHER_VM = "5e2b0000-0000-0000-0000-000000000002";
+
+    private static Row exact(String id, String port, String vm, String controller) {
+        return new Row(id, port, vm, controller);
+    }
+
+    private static Row mine(String id) {
+        return new Row(id, null, VM, "xhci-0");
+    }
+
+    private static List<Row> list(Row... rows) {
+        return new ArrayList<>(List.of(rows));
+    }
+
+    /** This page speaks for its VM's controllers, and for a rule that names none. */
+    private static Predicate<Row> ownedByThisPage() {
+        return row -> VM.equals(row.vm)
+            && (row.controller == null || "xhci-0".equals(row.controller)
+            || "xhci-1".equals(row.controller));
+    }
+
+    @Test
+    public void aRowTheUserDeletedIsRemovedFromItsLayer() {
+        var kept = mine("0bda:8153");
+        var dropped = mine("090c:1000");
+        var merged = XhciBindingDiff.merge(list(kept, dropped), list(kept, dropped), list(kept),
+            ownedByThisPage());
+        assertEquals(1, merged.size());
+        assertSame(kept, merged.get(0));
+    }
+
+    @Test
+    public void aRowTheUserAddedGoesOnTheHeadOfItsLayer() {
+        var existing = mine("0bda:8153");
+        var added = mine("090c:1000");
+        var merged = XhciBindingDiff.merge(list(existing), list(existing),
+            list(added, existing), ownedByThisPage());
+        // Order within a layer is priority, and a layer usually ends in a rule that takes
+        // everything left: a binding written behind one of those would never fire.
+        assertEquals(2, merged.size());
+        assertSame(added, merged.get(0));
+        assertSame(existing, merged.get(1));
+    }
+
+    @Test
+    public void severalNewRowsKeepTheOrderTheyWereAddedIn() {
+        var existing = mine("0bda:8153");
+        var first = mine("090c:1000");
+        var second = mine("2109:0813");
+        var merged = XhciBindingDiff.merge(list(existing), list(existing),
+            list(first, second, existing), ownedByThisPage());
+        assertEquals(List.of(first, second, existing), merged);
+    }
+
+    @Test
+    public void aRowWhoseValueWasRePickedKeepsItsPlace() {
+        // Re-picking a device edits the rule; it does not delete it and write another one at
+        // the head, which would change what the rule beats.
+        var first = exact("1111:1111", "1.1", OTHER_VM, null);
+        var ours = mine("0bda:8153");
+        var last = exact("3333:3333", "1.3", OTHER_VM, null);
+        var edited = ours.edited("090c:1000", null, "xhci-0");
+        var merged = XhciBindingDiff.merge(list(first, ours, last), list(ours), list(edited),
+            ownedByThisPage());
+        assertEquals(List.of(first, edited, last), merged);
+    }
+
+    @Test
+    public void aRowEditedTwiceIsStillTheSameRow() {
+        var ours = mine("0bda:8153");
+        var once = ours.edited("090c:1000", null, "xhci-0");
+        var twice = once.edited("2109:0813", null, "xhci-1");
+        var merged = XhciBindingDiff.merge(list(ours), list(ours), list(twice),
+            ownedByThisPage());
+        assertEquals(List.of(twice), merged);
+    }
+
+    @Test
+    public void aDeletionAndAnUnrelatedAdditionAreNotMistakenForAnEdit() {
+        // Both happened, but not to the same row: the deleted one goes and the new one leads.
+        var dropped = mine("0bda:8153");
+        var kept = mine("090c:1000");
+        var added = mine("2109:0813");
+        var merged = XhciBindingDiff.merge(list(dropped, kept), list(dropped, kept),
+            list(kept, added), ownedByThisPage());
+        assertEquals(List.of(added, kept), merged);
+    }
+
+    @Test
+    public void rowsOfOtherVmsAndOtherControllersKeepTheirPlaces() {
+        var otherVm = exact("1234:5678", "1.1", OTHER_VM, null);
+        var otherController = exact("1234:5679", "1.2", VM, "xhci-9");
+        var ours = mine("0bda:8153");
+        var merged = XhciBindingDiff.merge(list(otherVm, ours, otherController), list(ours),
+            list(), ownedByThisPage());
+        assertEquals(2, merged.size());
+        assertSame(otherVm, merged.get(0));
+        assertSame(otherController, merged.get(1));
+    }
+
+    @Test
+    public void aRowAddedElsewhereWhileThePageWasOpenSurvives() {
+        // The global rules page can be open at the same time, and its row is one this page
+        // speaks for -- but it is not in the snapshot, so it was never this page's to delete.
+        var ours = mine("0bda:8153");
+        var addedElsewhere = mine("2109:0813");
+        var merged = XhciBindingDiff.merge(list(ours, addedElsewhere), list(ours), list(ours),
+            ownedByThisPage());
+        assertEquals(2, merged.size());
+        assertSame(ours, merged.get(0));
+        assertSame(addedElsewhere, merged.get(1));
+    }
+
+    @Test
+    public void anEditKeepsThePlaceOfTheRowItWasMadeFromNotOfALookAlike() {
+        // Two identical rules, and only the second one was edited: the first must not be the
+        // one that moves, or the user's edit would land on someone else's priority.
+        var one = mine("0bda:8153");
+        var two = mine("0bda:8153");
+        var edited = two.edited("090c:1000", null, "xhci-0");
+        var merged = XhciBindingDiff.merge(list(one, two), list(one, two), list(one, edited),
+            ownedByThisPage());
+        // The first row of `current` is matched first, so the edit lands there; what matters is
+        // that exactly one of the pair is edited and the other is kept as it was.
+        assertEquals(2, merged.size());
+        assertTrue(merged.contains(edited));
+        assertTrue(merged.get(0).sameAs(edited) || merged.get(1).sameAs(edited));
+        assertTrue(merged.get(0).sameAs(one) || merged.get(1).sameAs(one));
+    }
+
+    @Test
+    public void orderOfTheSurvivingRowsIsUnchanged() {
+        var first = exact("1111:1111", "1.1", OTHER_VM, null);
+        var second = mine("2222:2222");
+        var third = exact("3333:3333", "1.3", OTHER_VM, null);
+        var merged = XhciBindingDiff.merge(list(first, second, third), list(second), list(),
+            ownedByThisPage());
+        assertEquals(List.of(first, third), merged);
+    }
+
+    @Test
+    public void deletingAControllerDeletesEveryRowItOwned() {
+        // A card the user removed drops out of the working copy, so none of its rows is desired.
+        var kept = mine("0bda:8153");
+        var goneOne = exact("090c:1000", null, VM, "xhci-1");
+        var goneTwo = exact("2109:0813", null, VM, "xhci-1");
+        var merged = XhciBindingDiff.merge(list(kept, goneOne, goneTwo),
+            list(kept, goneOne, goneTwo), list(kept), ownedByThisPage());
+        assertEquals(List.of(kept), merged);
+    }
+
+    @Test
+    public void twoIdenticalRulesLoseExactlyOne() {
+        // Rows are compared, never identified: deleting one of a pair leaves the other.
+        var one = mine("0bda:8153");
+        var two = mine("0bda:8153");
+        var merged = XhciBindingDiff.merge(list(one, two), list(one, two), list(one),
+            ownedByThisPage());
+        assertEquals(1, merged.size());
+        assertTrue(merged.get(0).sameAs(one));
+    }
+
+    @Test
+    public void aRowKeepsWhateverControllerItWasReadWith() {
+        // Null means "the VM's first controller", which is what every rule written before
+        // controllers existed says; rewriting it would change what an untouched rule means.
+        var legacy = exact("0bda:8153", null, VM, null);
+        var merged = XhciBindingDiff.merge(list(legacy), list(legacy), list(legacy),
+            ownedByThisPage());
+        assertEquals(1, merged.size());
+        assertSame(legacy, merged.get(0));
+    }
+
+    @Test
+    public void aRowMadeWhileEditingIsStampedWithTheVmTheSaveMinted() {
+        var fresh = new Row("0bda:8153", null, null, "xhci-0");
+        var stamped = fresh.withVm(VM);
+        assertEquals(VM, stamped.vm);
+        assertEquals("xhci-0", stamped.controller);
+        // A row that already names a VM is left exactly as it was read.
+        var loaded = mine("090c:1000");
+        assertSame(loaded, loaded.withVm(OTHER_VM));
+    }
+
+    @Test
+    public void aSinkRuleGoesThroughUntouched() {
+        // The card speaks for VM bindings only, but a save rebuilds every layer, so a rule that
+        // hides a device has to come out of the merge exactly as it went in: dropped, it would
+        // go back as a host rule and the device would reappear -- and in the catch-all layer,
+        // where a host rule is refused, it would take the whole save down with it.
+        var hidden = new Row("0bda:8153", null, null, null, "sink");
+        var binding = mine("090c:1000");
+        var merged = XhciBindingDiff.merge(list(binding, hidden), list(binding), list(binding),
+            ownedByThisPage());
+        assertEquals(2, merged.size());
+        assertSame(hidden, merged.get(1));
+        assertEquals("sink", merged.get(1).target);
+    }
+
+    @Test
+    public void aRowTheCardMadeIsAVmBinding() {
+        assertEquals("vm", new Row("0bda:8153", null, null, "xhci-0").target);
+        // And the target survives every way a row is rebuilt.
+        var edited = new Row(null, null, null, null, "sink").edited("2109:0813", null, "xhci-1");
+        assertEquals("sink", edited.target);
+        assertEquals("sink", new Row("0bda:8153", null, null, null, "sink").withVm(VM).target);
+    }
+
+    @Test
+    public void twoRowsThatDoDifferentThingsAreNotTheSameRow() {
+        // Same subject, different outcome: a deletion of one must not eat the other.
+        var host = new Row("0bda:8153", null, null, null, "host");
+        var hidden = new Row("0bda:8153", null, null, null, "sink");
+        assertFalse(host.sameAs(hidden));
+        assertFalse(XhciBindingDiff.sameRows(list(host), list(hidden)));
+    }
+
+    @Test
+    public void sameRowsComparesMultisetsRatherThanOrder() {
+        var a = mine("0bda:8153");
+        var b = mine("090c:1000");
+        assertTrue(XhciBindingDiff.sameRows(list(a, b), list(b, a)));
+        assertFalse(XhciBindingDiff.sameRows(list(a, b), list(a)));
+        assertFalse(XhciBindingDiff.sameRows(list(a, a), list(a, b)));
+    }
+}
diff --git a/app/src/test/java/cn/classfun/droidvm/ui/vm/edit/peripheral/XhciBindingStoreTest.java b/app/src/test/java/cn/classfun/droidvm/ui/vm/edit/peripheral/XhciBindingStoreTest.java
new file mode 100644
index 000000000..70ce1de17
--- /dev/null
+++ b/app/src/test/java/cn/classfun/droidvm/ui/vm/edit/peripheral/XhciBindingStoreTest.java
@@ -0,0 +1,190 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
+package cn.classfun.droidvm.ui.vm.edit.peripheral;
+
+import static org.junit.Assert.assertEquals;
+import static org.junit.Assert.assertFalse;
+import static org.junit.Assert.assertTrue;
+
+import org.junit.Test;
+
+import java.util.ArrayList;
+import java.util.EnumMap;
+import java.util.List;
+import java.util.Map;
+
+import cn.classfun.droidvm.ui.usb.UsbRuleLayer;
+import cn.classfun.droidvm.ui.vm.edit.peripheral.XhciBindingDiff.Row;
+
+/**
+ * The per-session copy of the attach rules behind an xHCI card's four zones: which rules a card
+ * shows, what the zones do to the working copy, and when a save has anything to push.
+ *
+ * <p>The daemon's answer is handed in as rows rather than parsed here: org.json is a stub under
+ * the test android.jar (see UsbRulesTest), so the JSON edge stays in the tab.</p>
+ */
+public final class XhciBindingStoreTest {
+    private static final String VM = "5e2b0000-0000-0000-0000-000000000001";
+    private static final String OTHER_VM = "5e2b0000-0000-0000-0000-000000000002";
+
+    private static Map<UsbRuleLayer, List<Row>> rules(Row... rows) {
+        var out = new EnumMap<UsbRuleLayer, List<Row>>(UsbRuleLayer.class);
+        for (var layer : UsbRuleLayer.values()) out.put(layer, new ArrayList<>());
+        for (var row : rows) {
+            // The layer a row belongs to is the one whose fields it carries, which is exactly
+            // how the daemon files it.
+            var layer = row.id != null && row.port != null ? UsbRuleLayer.EXACT
+                : row.port != null ? UsbRuleLayer.PORT
+                : row.id != null ? UsbRuleLayer.DEVICE : UsbRuleLayer.ANY;
+            out.get(layer).add(row);
+        }
+        return out;
+    }
+
+    @Test
+    public void aRuleOfThisVmLandsInItsControllersZone() {
+        var store = new XhciBindingStore();
+        var row = new Row("0bda:8153", null, VM, "xhci-1");
+        store.load(rules(row), List.of("xhci-0", "xhci-1"), VM);
+        assertTrue(store.isLoaded());
+        assertTrue(store.rows("xhci-0", UsbRuleLayer.DEVICE).isEmpty());
+        assertEquals(List.of(row), store.rows("xhci-1", UsbRuleLayer.DEVICE));
+    }
+
+    @Test
+    public void aRuleThatNamesNoControllerBelongsToTheFirstOne() {
+        var store = new XhciBindingStore();
+        var row = new Row("0bda:8153", null, VM, null);
+        store.load(rules(row), List.of("xhci-0", "xhci-1"), VM);
+        assertEquals(List.of(row), store.rows("xhci-0", UsbRuleLayer.DEVICE));
+        assertTrue(store.rows("xhci-1", UsbRuleLayer.DEVICE).isEmpty());
+    }
+
+    @Test
+    public void rulesOfAnotherVmOrAControllerThisOneLacksAreNotShown() {
+        var store = new XhciBindingStore();
+        var elsewhere = new Row("0bda:8153", null, OTHER_VM, "xhci-0");
+        var dangling = new Row("090c:1000", null, VM, "xhci-7");
+        var host = new Row("2109:0813", null, null, null, "host");
+        var hidden = new Row("1a86:7523", null, null, null, "sink");
+        store.load(rules(elsewhere, dangling, host, hidden), List.of("xhci-0"), VM);
+        assertTrue(store.rows("xhci-0", UsbRuleLayer.DEVICE).isEmpty());
+        // Not shown, and not this page's either: the merge must leave all four alone.
+        assertFalse(store.owns(elsewhere, VM));
+        assertFalse(store.owns(dangling, VM));
+        assertFalse(store.owns(host, VM));
+        assertFalse(store.owns(hidden, VM));
+        assertFalse(store.isDirty());
+    }
+
+    @Test
+    public void aVmThatDoesNotExistYetOwnsNothingAndEveryRowIsAnAddition() {
+        var store = new XhciBindingStore();
+        var someoneElses = new Row("0bda:8153", null, OTHER_VM, "xhci-0");
+        store.load(rules(someoneElses), List.of("xhci-0"), null);
+        assertTrue(store.snapshot(UsbRuleLayer.DEVICE).isEmpty());
+        store.add("xhci-0", UsbRuleLayer.ANY, new Row(null, null, null, "xhci-0"));
+        assertTrue(store.isDirty());
+        assertEquals(1, store.desired(UsbRuleLayer.ANY).size());
+    }
+
+    @Test
+    public void addingRemovingAndReplacingChangeOnlyTheWorkingCopy() {
+        var store = new XhciBindingStore();
+        var loaded = new Row("0bda:8153", null, VM, "xhci-0");
+        store.load(rules(loaded), List.of("xhci-0"), VM);
+        assertFalse(store.isDirty());
+
+        var added = new Row("090c:1000", null, VM, "xhci-0");
+        store.add("xhci-0", UsbRuleLayer.DEVICE, added);
+        assertTrue(store.isDirty());
+        assertEquals(List.of(loaded), store.snapshot(UsbRuleLayer.DEVICE));
+
+        var replaced = new Row("2109:0813", null, VM, "xhci-0");
+        store.replace("xhci-0", UsbRuleLayer.DEVICE, 0, replaced);
+        assertEquals(List.of(replaced, loaded), store.rows("xhci-0", UsbRuleLayer.DEVICE));
+
+        store.remove("xhci-0", UsbRuleLayer.DEVICE, 0);
+        assertEquals(List.of(loaded), store.rows("xhci-0", UsbRuleLayer.DEVICE));
+        assertFalse(store.isDirty());
+    }
+
+    @Test
+    public void aRowAddedGoesToTheHeadOfItsZone() {
+        // What the merge does to the file, so the zone shows the priority the save will write.
+        var store = new XhciBindingStore();
+        var existing = new Row("0bda:8153", null, VM, "xhci-0");
+        store.load(rules(existing), List.of("xhci-0"), VM);
+        var added = new Row("090c:1000", null, VM, "xhci-0");
+        store.add("xhci-0", UsbRuleLayer.DEVICE, added);
+        assertEquals(List.of(added, existing), store.rows("xhci-0", UsbRuleLayer.DEVICE));
+        assertEquals(List.of(added, existing), store.desired(UsbRuleLayer.DEVICE));
+    }
+
+    @Test
+    public void deletingACardTakesItsRowsWithItAndStillSpeaksForThem() {
+        var store = new XhciBindingStore();
+        var row = new Row("0bda:8153", null, VM, "xhci-1");
+        store.load(rules(row), List.of("xhci-0", "xhci-1"), VM);
+        store.removeController("xhci-1");
+        assertTrue(store.rows("xhci-1", UsbRuleLayer.DEVICE).isEmpty());
+        assertTrue(store.desired(UsbRuleLayer.DEVICE).isEmpty());
+        // Still owned, or the merge would not recognise the row it has to delete.
+        assertTrue(store.owns(row, VM));
+        assertTrue(store.isDirty());
+    }
+
+    @Test
+    public void aControllerAddedThisSessionIsOwnedFromTheStart() {
+        var store = new XhciBindingStore();
+        store.load(rules(), List.of("xhci-0"), VM);
+        store.addController("xhci-1");
+        var row = new Row(null, "1.2.2", VM, "xhci-1");
+        assertTrue(store.owns(row, VM));
+        store.add("xhci-1", UsbRuleLayer.PORT, row);
+        assertEquals(List.of(row), store.rows("xhci-1", UsbRuleLayer.PORT));
+    }
+
+    @Test
+    public void aPushThatLandedBecomesTheNewSnapshot() {
+        var store = new XhciBindingStore();
+        store.load(rules(), List.of("xhci-0"), VM);
+        store.add("xhci-0", UsbRuleLayer.DEVICE, new Row("0bda:8153", null, VM, "xhci-0"));
+        assertTrue(store.isDirty());
+        store.markSaved();
+        assertFalse(store.isDirty());
+        assertEquals(1, store.snapshot(UsbRuleLayer.DEVICE).size());
+    }
+
+    @Test
+    public void aRowAddedThisSessionIsSnapshottedWithTheVmItWasSentWith() {
+        // The VM is named on the working rows before the push, not on a copy of them: a row
+        // snapshotted without its VM could not be matched against the daemon's copy of itself,
+        // and deleting it later in the same session would quietly do nothing.
+        var store = new XhciBindingStore();
+        store.load(rules(), List.of("xhci-0"), VM);
+        store.add("xhci-0", UsbRuleLayer.DEVICE, new Row("0bda:8153", null, null, "xhci-0"));
+        store.stampVm(VM);
+        store.markSaved();
+        assertFalse(store.isDirty());
+        var asSent = store.snapshot(UsbRuleLayer.DEVICE).get(0);
+        assertEquals(VM, asSent.vm);
+
+        store.remove("xhci-0", UsbRuleLayer.DEVICE, 0);
+        var merged = XhciBindingDiff.merge(new ArrayList<>(List.of(asSent)),
+            store.snapshot(UsbRuleLayer.DEVICE), store.desired(UsbRuleLayer.DEVICE),
+            row -> store.owns(row, VM));
+        assertTrue(merged.isEmpty());
+    }
+
+    @Test
+    public void nothingIsLoadedUntilTheDaemonAnswers() {
+        // An unreachable daemon leaves the zones empty and the save with nothing to push, which
+        // is what keeps a failed read from truncating the user's rules.
+        var store = new XhciBindingStore();
+        assertFalse(store.isLoaded());
+        assertFalse(store.isDirty());
+        assertTrue(store.rows("xhci-0", UsbRuleLayer.ANY).isEmpty());
+    }
+}
diff --git a/app/src/test/java/cn/classfun/droidvm/ui/vm/edit/peripheral/XhciPortCountTest.java b/app/src/test/java/cn/classfun/droidvm/ui/vm/edit/peripheral/XhciPortCountTest.java
new file mode 100644
index 000000000..1b7901daf
--- /dev/null
+++ b/app/src/test/java/cn/classfun/droidvm/ui/vm/edit/peripheral/XhciPortCountTest.java
@@ -0,0 +1,33 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
+package cn.classfun.droidvm.ui.vm.edit.peripheral;
+
+import static org.junit.Assert.assertEquals;
+
+import org.junit.Test;
+
+import cn.classfun.droidvm.lib.store.vm.VMXhciConfig;
+
+/**
+ * The picker's port-count vocabulary against the number the config stores. Nothing here can be
+ * seen in the UI when it is wrong -- a shifted constant would quietly save a different geometry
+ * than the one on the button -- so the mapping is asserted both ways.
+ *
+ * <p>The label needs a Context and is left out: the stubbed android.jar returns nothing for it.</p>
+ */
+public final class XhciPortCountTest {
+    @Test
+    public void everyCountTheConfigAllowsHasAConstantThatStandsForIt() {
+        for (int ports = VMXhciConfig.MIN_PORTS; ports <= VMXhciConfig.MAX_PORTS; ports++)
+            assertEquals(ports, XhciPortCount.of(ports).ports());
+        assertEquals(VMXhciConfig.MAX_PORTS - VMXhciConfig.MIN_PORTS + 1,
+            XhciPortCount.values().length);
+    }
+
+    @Test
+    public void aStoredCountFromOutsideTheRangeLandsOnTheNearestEnd() {
+        assertEquals(VMXhciConfig.MIN_PORTS, XhciPortCount.of(-3).ports());
+        assertEquals(VMXhciConfig.MAX_PORTS, XhciPortCount.of(64).ports());
+    }
+}

From 8b4379c74cb359f5d567c3b92e009819ab6f217f Mon Sep 17 00:00:00 2001
From: HuJK <gh@hujk.org>
Date: Wed, 9 Sep 2026 06:07:22 +0800
Subject: [PATCH 173/182] vm: a protected VM says, before it starts, when the
 guest cannot live in lent memory

lbx now reports what each boot entry actually is -- linux or windows -- and can
read a Linux entry's own config-*. Two things the app could only guess at
before follow from that.

The boot menu stops offering a direct kernel boot for an image that holds
Windows. Direct boot loads a kernel and an initrd; a Windows install has
neither, so the entries were listed and the start failed later with nothing
useful to say. The menu now says so where the choice is made, and points at the
built-in kernel or the UEFI protocol.

And a protected VM asks, before it starts, whether this guest can live with its
memory lent to the hypervisor. Two ways it cannot, and the image decides which
applies rather than the boot protocol. A Linux kernel built without
CONFIG_DMA_RESTRICTED_POOL has nothing for virtio to bounce through and comes
up with no disk and no network -- lbx reads that out of the entry's config-*. A
Windows guest with USB passthrough has nowhere to map transfer buffers, so the
rules pointing at it do nothing; Linux guests are fine there, because the pool
they need anyway covers USB too. Both answers are the same answer, which is why
it is one check: pseudo-unprotected shares the memory instead of lending it.

Only what is certain is raised. A bootloader lbx cannot read, an OS this build
has no rule for, a kernel with no config-* to read -- each is a question with no
answer, and a warning nobody can act on is worse than none, so each ends the
check quietly. The dialog offers the run that works (pseudo-unprotected, once) beside the one
that was asked for, and the button counts down so a start nobody is watching is
never blocked. A finger on the dialog stops that countdown for good and puts the
button's own label back -- someone is there, reading, and the answer is theirs
to give, which is what pressing a key during GRUB's menu timeout does. The boot
menu's own countdown stops the same way.

Every guard prompt lays its answers out the same way now, by what pressing one
means: neutral is go ahead changing nothing, positive is go ahead with the
change that fixes it, negative is do not go ahead. The countdown sits on the
neutral button and falls to the positive one only when a dialog has no neutral,
which is to say when going ahead unchanged was never on offer -- so a start
nobody is watching is never blocked and never has a setting changed under it.
The kernel-module guard and the boot menu follow the same layout, and the theme
sets the positive button in bold, since it is the only one that alters anything.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01RrfBDYZexyRUKdQyJ3jQ6q
---
 .../classfun/droidvm/daemon/vm/BootPlan.java  |  53 +++-
 .../droidvm/lib/store/vm/BootConfig.java      |  23 ++
 .../droidvm/lib/store/vm/ProtectedVM.java     |  22 ++
 .../classfun/droidvm/lib/ui/DialogTouch.java  |  72 +++++
 .../ui/vm/ProtectedGuestPreflight.java        | 197 +++++++++++++
 .../cn/classfun/droidvm/ui/vm/VMActions.java  | 261 ++++++++++++------
 .../droidvm/ui/vm/boot/BootEntries.java       |  68 ++++-
 .../droidvm/ui/vm/boot/BootMenuDialog.java    | 153 ++++++----
 app/src/main/res/values-night/themes.xml      |   2 +
 app/src/main/res/values-zh-rCN/strings.xml    |   9 +
 app/src/main/res/values-zh-rTW/strings.xml    |   9 +
 app/src/main/res/values/strings.xml           |   9 +
 app/src/main/res/values/themes.xml            |  14 +
 .../ui/vm/ProtectedGuestPreflightTest.java    |  92 ++++++
 14 files changed, 840 insertions(+), 144 deletions(-)
 create mode 100644 app/src/main/java/cn/classfun/droidvm/lib/ui/DialogTouch.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/ui/vm/ProtectedGuestPreflight.java
 create mode 100644 app/src/test/java/cn/classfun/droidvm/ui/vm/ProtectedGuestPreflightTest.java

diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/vm/BootPlan.java b/app/src/main/java/cn/classfun/droidvm/daemon/vm/BootPlan.java
index 66f5c7920..2cd29802a 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/vm/BootPlan.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/vm/BootPlan.java
@@ -193,9 +193,11 @@ private static String builtinCmdline(
                 var entry = pinned != null
                     ? matchEntry(entries, pinned.id, pinned.title) : null;
                 if (entry == null) entry = defaultEntry(entries);
-                var fixed = boot.isVdafix() ? optStr(entry, "cmdline_fixed") : "";
-                var cmdline = !fixed.isEmpty() ? fixed : optStr(entry, "cmdline");
-                if (!cmdline.isEmpty()) return cmdline;
+                if (entry != null) {
+                    var fixed = boot.isVdafix() ? optStr(entry, "cmdline_fixed") : "";
+                    var cmdline = !fixed.isEmpty() ? fixed : optStr(entry, "cmdline");
+                    if (!cmdline.isEmpty()) return cmdline;
+                }
             }
         } catch (IOException e) {
             Log.w(TAG, fmt(
@@ -228,6 +230,12 @@ else if (pinned != null)
             fallback = entryOverrideId != null || pinned != null;
             entry = defaultEntry(entries);
         }
+        if (entry == null)
+            throw new IOException(fmt(
+                "%s has no boot entry a direct kernel boot can start%s",
+                image,
+                hasWindows(entries)
+                    ? ": it boots Windows, which needs the UEFI boot protocol" : ""));
         if (fallback)
             Log.w(TAG, fmt(
                 "VM %s: pinned boot entry not found in %s, using bootloader default",
@@ -293,19 +301,43 @@ private static JSONObject matchEntry(
     ) {
         for (int i = 0; i < entries.length(); i++) {
             var e = entries.optJSONObject(i);
-            if (e == null) continue;
+            if (!isLinux(e)) continue;
             if (id != null && !id.isEmpty() && id.equals(optStr(e, "id")))
                 return e;
         }
         for (int i = 0; i < entries.length(); i++) {
             var e = entries.optJSONObject(i);
-            if (e == null) continue;
+            if (!isLinux(e)) continue;
             if (title != null && !title.isEmpty() && title.equals(optStr(e, "title")))
                 return e;
         }
         return null;
     }
 
+    /**
+     * Is this an entry a direct kernel boot can start?
+     *
+     * <p>lbx lists what the image boots, which since it learned to see Windows includes entries
+     * that have no kernel at all -- an install only firmware can start, and on a dual-boot disk
+     * possibly the one the bootloader would pick. Direct boot loads a kernel, so those are not
+     * candidates here, neither for a pin nor for the automatic choice. An entry from an older
+     * lbx carries no type and is a Linux one.</p>
+     */
+    private static boolean isLinux(@Nullable JSONObject e) {
+        if (e == null) return false;
+        var type = optStr(e, "type");
+        return type.isEmpty() || "linux".equals(type);
+    }
+
+    /** Whether the image holds a Windows install, for saying so in the error. */
+    private static boolean hasWindows(@NonNull JSONArray entries) {
+        for (int i = 0; i < entries.length(); i++) {
+            var e = entries.optJSONObject(i);
+            if (e != null && "windows".equals(optStr(e, "type"))) return true;
+        }
+        return false;
+    }
+
     /**
      * Null-safe string read: org.json's optString turns a JSON null into
      * the literal string "null" instead of the fallback.
@@ -315,13 +347,18 @@ private static String optStr(@NonNull JSONObject o, @NonNull String key) {
         return o.isNull(key) ? "" : o.optString(key, "");
     }
 
-    @NonNull
+    /** The bootloader's own choice, or the first entry -- Linux ones only. */
+    @Nullable
     private static JSONObject defaultEntry(@NonNull JSONArray entries) {
         for (int i = 0; i < entries.length(); i++) {
             var e = entries.optJSONObject(i);
-            if (e != null && e.optBoolean("default", false)) return e;
+            if (isLinux(e) && e.optBoolean("default", false)) return e;
         }
-        return entries.optJSONObject(0);
+        for (int i = 0; i < entries.length(); i++) {
+            var e = entries.optJSONObject(i);
+            if (isLinux(e)) return e;
+        }
+        return null;
     }
 
     /**
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/store/vm/BootConfig.java b/app/src/main/java/cn/classfun/droidvm/lib/store/vm/BootConfig.java
index d0f79e194..710237c15 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/store/vm/BootConfig.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/store/vm/BootConfig.java
@@ -209,6 +209,29 @@ private DataItem image() {
         return child(linux(), "image");
     }
 
+    /**
+     * The disk image to scan: the one at {@code preferred} when it has a path, else the first
+     * disk that has one; null when the VM has no disk with a path at all.
+     *
+     * <p>Mirrors {@code BootPlan.findImagePath}, which is what actually boots -- the UI asks the
+     * same question before the start, and has to get the same answer.</p>
+     */
+    @Nullable
+    public static String imagePath(@NonNull VMConfig config, int preferred) {
+        var disks = config.item.opt("disks", (DataItem) null);
+        if (disks == null || !disks.is(DataItem.Type.ARRAY)) return null;
+        var arr = disks.asArray();
+        if (preferred >= 0 && preferred < arr.size()) {
+            var path = arr.get(preferred).optString("path", "");
+            if (!path.isEmpty()) return path;
+        }
+        for (var disk : arr) {
+            var path = disk.optString("path", "");
+            if (!path.isEmpty()) return path;
+        }
+        return null;
+    }
+
     /** Index into the VM's "disks" array of the image to scan. */
     public int getImageDisk() {
         return (int) image().optLong("disk", 0);
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/store/vm/ProtectedVM.java b/app/src/main/java/cn/classfun/droidvm/lib/store/vm/ProtectedVM.java
index a06e4d055..8e5f1aae5 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/store/vm/ProtectedVM.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/store/vm/ProtectedVM.java
@@ -3,9 +3,12 @@
 // Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.lib.store.vm;
 
+import androidx.annotation.NonNull;
 import androidx.annotation.StringRes;
 
 import cn.classfun.droidvm.R;
+import cn.classfun.droidvm.lib.store.base.DataItem;
+import cn.classfun.droidvm.lib.store.enums.Enums;
 import cn.classfun.droidvm.lib.store.enums.StringEnum;
 
 public enum ProtectedVM implements StringEnum {
@@ -24,6 +27,25 @@ public enum ProtectedVM implements StringEnum {
      */
     PSEUDO_UNPROTECTED(3, R.string.create_vm_protected_pseudo_unprotected);
 
+    /** The config key every reader of this enum uses. */
+    public static final String KEY = "protected_vm";
+
+    /**
+     * Is this VM's guest memory lent to the hypervisor -- i.e. out of the host's reach while it
+     * runs? That is the property two guest-side limits follow from: virtio has to bounce through
+     * a restricted DMA pool (so a kernel without {@code CONFIG_DMA_RESTRICTED_POOL} finds no
+     * devices), and USB passthrough has nowhere to map the transfer buffers.
+     *
+     * <p>{@link #PSEUDO_UNPROTECTED} is deliberately false here: it is protected to the
+     * hypervisor, but its RAM is SHARE'd at run time rather than lent, so the host can still
+     * reach it and both limits above go away. That is what makes it the offer when either one
+     * bites.</p>
+     */
+    public static boolean lendsGuestMemory(@NonNull DataItem item) {
+        var mode = Enums.optEnum(item, KEY, PROTECTED_WITHOUT_FIRMWARE);
+        return mode == PROTECTED_PROTECTED || mode == PROTECTED_WITHOUT_FIRMWARE;
+    }
+
     private final int value;
     private final @StringRes int stringId;
 
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/ui/DialogTouch.java b/app/src/main/java/cn/classfun/droidvm/lib/ui/DialogTouch.java
new file mode 100644
index 000000000..628501256
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/lib/ui/DialogTouch.java
@@ -0,0 +1,72 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
+package cn.classfun.droidvm.lib.ui;
+
+import android.view.MotionEvent;
+import android.view.View;
+import android.view.ViewGroup;
+import android.widget.Button;
+
+import androidx.annotation.NonNull;
+import androidx.appcompat.app.AlertDialog;
+
+/**
+ * Notices that someone is actually looking at a dialog.
+ *
+ * <p>A countdown exists for the start nobody is watching; the moment a finger lands on the
+ * dialog that assumption is wrong, and reading the message is exactly what it must not cut
+ * short. So any touch stops it -- the same thing GRUB does when a key is pressed during its
+ * menu timeout.</p>
+ */
+public final class DialogTouch {
+    private DialogTouch() {
+    }
+
+    /**
+     * Runs {@code action} when the dialog itself is touched anywhere but its buttons, without
+     * ever consuming the touch -- everything below keeps working exactly as it did.
+     *
+     * <p>The listener goes on every view in the dialog rather than only the root, because a
+     * touch is reported to the view that ends up handling it: a tap on the text reaches the
+     * text, a drag on a long message reaches the scroller around it, and only what nothing
+     * handles reaches the panel behind them. The buttons are left out on purpose -- pressing
+     * one is a decision, not a pause, and it dismisses the dialog anyway.</p>
+     *
+     * <p>A touch <em>outside</em> the dialog is left alone as well, though it reaches the same
+     * root view: it is not someone reading, it is the dismissal gesture, and what it means is
+     * the dialog's own business -- cancelling it where that is allowed, nothing where it is
+     * not. Both stay exactly as they were.</p>
+     *
+     * <p>Call it after {@link AlertDialog#show()}: there are no views before that. Views added
+     * later are not covered, and {@code action} runs on every touch, so it has to be safe to
+     * run again.</p>
+     */
+    public static void whenTouched(@NonNull AlertDialog dialog, @NonNull Runnable action) {
+        var window = dialog.getWindow();
+        if (window == null) return;
+        attach(window.getDecorView(), (view, event) -> {
+            if (inside(view, event)) action.run();
+            return false;
+        });
+    }
+
+    /** Is the touch on this view, rather than past its edge? */
+    private static boolean inside(@NonNull View view, @NonNull MotionEvent event) {
+        var x = event.getX();
+        var y = event.getY();
+        return x >= 0 && y >= 0 && x <= view.getWidth() && y <= view.getHeight();
+    }
+
+    @SuppressWarnings("ClickableViewAccessibility") // observes only; never consumes
+    private static void attach(@NonNull View view, @NonNull View.OnTouchListener watcher) {
+        // Button covers the dialog's own three, and CompoundButton (a boot menu radio) with
+        // them: both already say what they mean when they are pressed.
+        if (view instanceof Button) return;
+        view.setOnTouchListener(watcher);
+        if (!(view instanceof ViewGroup)) return;
+        var group = (ViewGroup) view;
+        for (int i = 0; i < group.getChildCount(); i++)
+            attach(group.getChildAt(i), watcher);
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/ProtectedGuestPreflight.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/ProtectedGuestPreflight.java
new file mode 100644
index 000000000..224800f80
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/ProtectedGuestPreflight.java
@@ -0,0 +1,197 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
+package cn.classfun.droidvm.ui.vm;
+
+import androidx.annotation.NonNull;
+import androidx.annotation.Nullable;
+
+import org.json.JSONObject;
+
+import cn.classfun.droidvm.lib.daemon.DaemonConnection;
+import cn.classfun.droidvm.lib.store.vm.BootConfig;
+import cn.classfun.droidvm.lib.store.vm.ProtectedVM;
+import cn.classfun.droidvm.lib.store.vm.VMConfig;
+import cn.classfun.droidvm.lib.store.vm.VMXhciConfig;
+import cn.classfun.droidvm.ui.usb.UsbRuleLayer;
+import cn.classfun.droidvm.ui.vm.boot.BootEntries;
+
+/**
+ * Will this guest work with its memory lent to the hypervisor?
+ *
+ * <p>A protected VM's RAM is out of the host's reach while it runs (see
+ * {@link ProtectedVM#lendsGuestMemory}), and two things the guest may be counting on need the
+ * host to reach it. Which one bites depends on which OS actually comes up, so that is what is
+ * asked first -- the image, not the boot protocol:
+ *
+ * <ul>
+ *   <li><b>Linux</b> -- virtio has to bounce through a restricted DMA pool, so a kernel built
+ *       without {@code CONFIG_DMA_RESTRICTED_POOL} comes up with no disk and no network. lbx
+ *       reads that out of the image's own {@code config-*}, per entry.</li>
+ *   <li><b>Windows</b> -- its xHCI passthrough has nowhere to map transfer buffers, so an
+ *       attached device does not work. (Linux guests are fine here: the same bounce pool that
+ *       the kernel needs anyway covers USB too.) Only worth saying when this VM actually has a
+ *       controller and a rule pointing at it -- otherwise nothing would have been passed
+ *       through in the first place.</li>
+ * </ul>
+ *
+ * <p>Both have the same answer, which is why they are one check:
+ * {@link ProtectedVM#PSEUDO_UNPROTECTED} shares the guest's RAM instead of lending it, and both
+ * limits go away.</p>
+ *
+ * <p><b>Only what is certain is raised.</b> An image whose bootloader lbx cannot read, an OS
+ * this build has no rule for (FreeBSD, something custom), a kernel with no {@code config-*} to
+ * read -- each of those is a question we cannot answer, and a warning nobody can act on is
+ * worse than none. Every one of them ends the check quietly.</p>
+ *
+ * <p>The cheap questions come first -- the memory mode, then the boot config -- and the image is
+ * read only past them; the daemon's rule list is fetched only once the image says Windows.
+ * Asynchronous throughout: the callback lands on whichever thread answered (the caller's, or
+ * the daemon's), so post it where you need it.</p>
+ */
+public final class ProtectedGuestPreflight {
+    /** Why lending this guest's memory will not work. */
+    public enum Reason {
+        /** Linux, whose kernel has no restricted DMA pool for virtio to bounce through. */
+        DMA_POOL,
+        /** Windows, with USB passthrough configured. */
+        WINDOWS_USB,
+    }
+
+    public interface Callback {
+        /** {@code reason} is null when nothing is in the way. */
+        void onResult(@Nullable Reason reason);
+    }
+
+    private ProtectedGuestPreflight() {
+    }
+
+    /**
+     * @param menuWillAsk the boot menu is about to run, and offers the same choice per entry --
+     *                    then the Linux check is left to it, which knows the entry the user
+     *                    picks rather than only the one the config resolves to
+     */
+    public static void check(
+        @NonNull VMConfig config,
+        boolean menuWillAsk,
+        @NonNull Callback callback
+    ) {
+        if (!ProtectedVM.lendsGuestMemory(config.item)) {
+            callback.onResult(null);
+            return;
+        }
+        var boot = BootConfig.of(config);
+        var uefi = boot.getProtocol() == BootConfig.Protocol.UEFI;
+        // A manual kernel is one the user pointed at themselves; there is no image to read a
+        // .config out of, so there is nothing to say about it.
+        if (!uefi && (boot.getLinuxSource() != BootConfig.LinuxSource.IMAGE || menuWillAsk)) {
+            callback.onResult(null);
+            return;
+        }
+        var image = BootConfig.imagePath(config, boot.getImageDisk());
+        if (image == null) {
+            callback.onResult(null);
+            return;
+        }
+        BootEntries.scan(image, (result, error) -> {
+            if (result == null) {
+                // A scan that failed says nothing either way, and a start that needs the image
+                // read has its own error for that.
+                callback.onResult(null);
+                return;
+            }
+            // Which guest actually comes up: under UEFI the image boots itself, so it is the
+            // bootloader's own choice; a direct kernel boot takes that over and picks a Linux
+            // entry itself.
+            var entry = uefi ? result.bootloaderDefault() : result.resolve(boot.getImageEntry());
+            if (entry == null) {
+                callback.onResult(null);
+                return;
+            }
+            if (entry.isWindows()) {
+                checkWindowsUsb(config, callback);
+                return;
+            }
+            // An OS this build does not recognise -- FreeBSD, something custom, an image whose
+            // bootloader lbx could not read -- is one we know nothing about. Say nothing.
+            if (!entry.isLinux()) {
+                callback.onResult(null);
+                return;
+            }
+            // Unknown (null) is not a warning either: lbx only says "false" when it read the
+            // kernel's own config and the option was not set.
+            callback.onResult(entry.lacksRestrictedDmaPool() ? Reason.DMA_POOL : null);
+        });
+    }
+
+    /**
+     * Is anything actually passed through to this VM? Asked only once the image says Windows,
+     * so a VM with no controller and no rules costs nothing to rule out.
+     */
+    private static void checkWindowsUsb(@NonNull VMConfig config, @NonNull Callback callback) {
+        if (!VMXhciConfig.isEnabled(config.item)) {
+            callback.onResult(null);
+            return;
+        }
+        DaemonConnection.getInstance().buildRequest("usb_rules_get")
+            .onResponse(resp -> {
+                var rules = resp.optJSONObject("rules");
+                var passed = rules != null && rules.optBoolean("enabled", true)
+                    && anyRuleTargets(rules, config);
+                callback.onResult(passed ? Reason.WINDOWS_USB : null);
+            })
+            // No rules to read means nothing is being passed through: the daemon that would
+            // act on them is the one that did not answer.
+            .onUnsuccessful(resp -> callback.onResult(null))
+            .onError(e -> callback.onResult(null))
+            .invoke();
+    }
+
+    /**
+     * Does any rule hand a device to this VM? A rule naming a controller the VM no longer has
+     * is not one of them -- it can never attach, which is exactly why the editor leaves such a
+     * rule visibly dangling instead of re-pointing it.
+     */
+    private static boolean anyRuleTargets(@NonNull JSONObject rules, @NonNull VMConfig config) {
+        for (var layer : UsbRuleLayer.values()) {
+            var arr = rules.optJSONArray(layer.key);
+            for (int i = 0; arr != null && i < arr.length(); i++) {
+                var rule = arr.optJSONObject(i);
+                if (rule == null) continue;
+                if (pointsAtVm(config,
+                    text(rule, "vm"), text(rule, "target"), text(rule, "controller")))
+                    return true;
+            }
+        }
+        return false;
+    }
+
+    /**
+     * Does one rule hand a device to this VM? Takes the rule's fields rather than the rule, so
+     * the decision is reachable without org.json -- which the unit tests' android.jar stubs out.
+     *
+     * @param target     what the rule does with what it matches; a rule carrying none is one
+     *                   written before there was a target to write, and its VM is the whole of
+     *                   what it said -- how the daemon reads it too
+     * @param controller the controller inside the VM, or null for its first
+     */
+    static boolean pointsAtVm(
+        @NonNull VMConfig config,
+        @Nullable String vm,
+        @Nullable String target,
+        @Nullable String controller
+    ) {
+        var id = config.getId();
+        if (id == null || vm == null || !id.toString().equals(vm)) return false;
+        if (target != null && !"vm".equals(target)) return false;
+        return VMXhciConfig.findController(config.item, controller) != null;
+    }
+
+    /** A rule's string field: absent, JSON null and empty all read as null. */
+    @Nullable
+    private static String text(@NonNull JSONObject rule, @NonNull String key) {
+        if (rule.isNull(key)) return null;
+        var value = rule.optString(key, "");
+        return value.isEmpty() ? null : value;
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/VMActions.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/VMActions.java
index 19cbb4651..787629bcf 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/VMActions.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/VMActions.java
@@ -24,6 +24,7 @@
 
 import androidx.annotation.NonNull;
 import androidx.annotation.Nullable;
+import androidx.annotation.StringRes;
 import androidx.appcompat.app.AlertDialog;
 import androidx.fragment.app.FragmentActivity;
 
@@ -53,10 +54,12 @@
 import cn.classfun.droidvm.lib.store.vm.LendMthpMode;
 import cn.classfun.droidvm.lib.store.vm.VMBackend;
 import cn.classfun.droidvm.lib.hugepage.PoolPreflight;
+import cn.classfun.droidvm.lib.store.vm.ProtectedVM;
 import cn.classfun.droidvm.ui.hugepage.HugePageActivity;
 import cn.classfun.droidvm.ui.main.settings.KernelModuleDialog;
 import cn.classfun.droidvm.lib.store.vm.VMConfig;
 import cn.classfun.droidvm.lib.store.vm.VMStore;
+import cn.classfun.droidvm.lib.ui.DialogTouch;
 import cn.classfun.droidvm.lib.ui.UIContext;
 import cn.classfun.droidvm.ui.disk.create.DiskCompress;
 import cn.classfun.droidvm.ui.disk.create.DiskFormat;
@@ -88,21 +91,27 @@ public static void createAndStart(
     ) {
         // Pre-start guards, in order: internal snapshots (crosvm refuses the disk), a base
         // image attached writable (writing would corrupt its overlays - any backend), a disk a
-        // running VM already holds, compressed clusters (crosvm boots to I/O errors), a host
-        // kernel module this configuration needs but nobody loaded, a LEND mode this kernel's
-        // resource manager will not accept, and a huge-page reserve too small to back this VM.
-        // Each prompts with its fix and chains to the next; everything else starts normally. The
-        // shared-disk guard may hand the rest of the chain a session copy of the config, so
-        // everything downstream uses what it passes on rather than `config`.
+        // running VM already holds, compressed clusters (crosvm boots to I/O errors), a guest
+        // that cannot work with its memory lent, a host kernel module this configuration needs
+        // but nobody loaded, a LEND mode this kernel's resource manager will not accept, and a
+        // huge-page reserve too small to back this VM. Each prompts with its fix and chains to
+        // the next; everything else starts normally.
+        //
+        // Two of them may hand the rest of the chain a different config -- the shared-disk
+        // guard a read-only session copy, the protected-guest guard a pseudo-unprotected one --
+        // so everything downstream uses what it passes on rather than `config`. The
+        // protected-guest guard comes before the module one deliberately: pseudo-unprotected
+        // RAM needs gunyah_host_share, and choosing it here has to be checked for that.
         guardSnapshotDisks(config, mainHandler, ui, convertLauncher,
             () -> guardLockedParents(config, mainHandler, ui,
                 () -> guardSharedRunning(config, mainHandler, ui,
                     started -> guardCompressedDisks(started, mainHandler, ui, convertLauncher,
-                        () -> guardKernelModules(started, mainHandler, ui,
-                            () -> guardLendMthp(started, mainHandler, ui,
-                                () -> guardHugePagePool(started, mainHandler, ui,
-                                    () -> startAfterGuard(started, mainHandler, ui,
-                                        wantOpenConsole))))))));
+                        () -> guardProtectedGuest(started, mainHandler, ui,
+                            chosen -> guardKernelModules(chosen, mainHandler, ui,
+                                () -> guardLendMthp(chosen, mainHandler, ui,
+                                    () -> guardHugePagePool(chosen, mainHandler, ui,
+                                        () -> startAfterGuard(chosen, mainHandler, ui,
+                                            wantOpenConsole)))))))));
     }
 
     /**
@@ -196,6 +205,144 @@ private static void applySingleLendMthp(
         }
     }
 
+    /**
+     * Pre-start check: can this guest work with its memory lent to the hypervisor?
+     * {@link ProtectedGuestPreflight} answers that from the image itself, whichever way this VM
+     * boots -- a Linux kernel with no restricted DMA pool, or a Windows install with USB
+     * passthrough pointing at it. An image it cannot read, or an OS it has no rule for, raises
+     * nothing.
+     *
+     * <p>There is something to repair, and it is one setting: pseudo-unprotected shares the
+     * guest's RAM rather than lending it, and both cases work. Unlike the LEND correction it is
+     * <em>not</em> persisted -- protection is a choice the user made about this VM, and a start
+     * that quietly downgraded it for good would be a worse surprise than the one it prevents.
+     * The session copy this hands on is the whole of the change.</p>
+     *
+     * <p>Starting anyway stays the countdown's answer, as everywhere else: it costs the feature
+     * that wanted the host's reach, and nothing that changes a user's configuration should
+     * happen because nobody was looking.</p>
+     */
+    private static void guardProtectedGuest(
+        @NonNull VMConfig config,
+        @NonNull Handler mainHandler,
+        @NonNull UIContext ui,
+        @NonNull Consumer<VMConfig> proceed
+    ) {
+        // An image-booting VM with the menu ahead of it is asked there instead, per entry.
+        var menuWillAsk = BootMenuDialog.wanted(config) && ui.isAlive();
+        ProtectedGuestPreflight.check(config, menuWillAsk, reason -> mainHandler.post(() -> {
+            if (reason == null || !ui.isAlive()) {
+                // Nobody to ask: the start was requested, so honour it.
+                proceed.accept(config);
+                return;
+            }
+            promptProtectedGuest(config, ui, reason, proceed);
+        }));
+    }
+
+    private static void promptProtectedGuest(
+        @NonNull VMConfig config,
+        @NonNull UIContext ui,
+        @NonNull ProtectedGuestPreflight.Reason reason,
+        @NonNull Consumer<VMConfig> proceed
+    ) {
+        var ctx = ui.getContext();
+        var dma = reason == ProtectedGuestPreflight.Reason.DMA_POOL;
+        var dialog = new MaterialAlertDialogBuilder(ctx)
+            .setTitle(dma ? R.string.vm_protected_guest_dma_title
+                : R.string.vm_protected_guest_usb_title)
+            .setMessage(dma ? R.string.vm_protected_guest_dma_message
+                : R.string.vm_protected_guest_usb_message)
+            // Changing nothing is the neutral answer, the mode switch the positive one.
+            .setNeutralButton(R.string.vm_protected_guest_start_anyway, (d, w) ->
+                proceed.accept(config))
+            .setPositiveButton(R.string.vm_protected_guest_pseudo, (d, w) ->
+                proceed.accept(pseudoUnprotectedSession(config)))
+            .setNegativeButton(android.R.string.cancel, null)
+            .create();
+        dialog.show();
+        guardCountdown(ctx, dialog, R.string.vm_protected_guest_start_countdown,
+            () -> proceed.accept(config));
+    }
+
+    /**
+     * This VM as pseudo-unprotected, for one start: a copy, so the store and the editor keep
+     * the mode the user chose.
+     *
+     * <p>Through JSON for the same reason {@link #readonlyForSession} is -- DataItem's copy
+     * constructor shares the nested items, so a copy made any other way would write straight
+     * back into the caller's config.</p>
+     */
+    @NonNull
+    private static VMConfig pseudoUnprotectedSession(@NonNull VMConfig config) {
+        try {
+            var session = new VMConfig();
+            session.item.set(config.toJson());
+            session.item.set(ProtectedVM.KEY, ProtectedVM.PSEUDO_UNPROTECTED);
+            return session;
+        } catch (Exception e) {
+            // The user asked for this start to be pseudo-unprotected; a live flip still starts
+            // it that way, and nothing is saved either way.
+            Log.w(TAG, "session config copy failed; flipping the live config instead", e);
+            config.item.set(ProtectedVM.KEY, ProtectedVM.PSEUDO_UNPROTECTED);
+            return config;
+        }
+    }
+
+    /**
+     * Puts the 5-second countdown on a guard dialog, ending in {@code onFinish}.
+     *
+     * <p>Every guard prompt lays its answers out the same way, by what pressing one means:
+     *
+     * <ul>
+     *   <li><b>neutral</b> (bottom left) -- go ahead, changing nothing;</li>
+     *   <li><b>positive</b> (bottom right) -- go ahead, with the change that fixes it;</li>
+     *   <li><b>negative</b> -- do not go ahead.</li>
+     * </ul>
+     *
+     * <p>The countdown lands on the neutral button, and only falls to the positive one when the
+     * dialog has no neutral -- i.e. when going ahead unchanged was not on offer at all. That is
+     * the whole rule: a start nobody is watching is never blocked, and never has a setting
+     * changed under it.</p>
+     *
+     * <p>Touching the dialog anywhere but its buttons stops the countdown for good and puts the
+     * button's own label back: someone is there, reading, and the answer is now theirs to give.
+     * Pressing a button dismisses the dialog, which stops it too.</p>
+     */
+    private static void guardCountdown(
+        @NonNull Context ctx,
+        @NonNull AlertDialog dialog,
+        @StringRes int countdownText,
+        @NonNull Runnable onFinish
+    ) {
+        var neutral = dialog.getButton(AlertDialog.BUTTON_NEUTRAL);
+        var button = neutral != null ? neutral : dialog.getButton(AlertDialog.BUTTON_POSITIVE);
+        // What the button said before the countdown took it over, to put back on a touch.
+        var label = button == null ? null : button.getText();
+        if (button != null)
+            button.setText(ctx.getString(countdownText, 5));
+        var timer = new CountDownTimer(5000, 1000) {
+            @Override
+            public void onTick(long ms) {
+                if (button != null)
+                    button.setText(ctx.getString(
+                        countdownText, (int) Math.ceil(ms / 1000.0)));
+            }
+
+            @Override
+            public void onFinish() {
+                dialog.dismiss();
+                onFinish.run();
+            }
+        };
+        dialog.setOnDismissListener(d -> timer.cancel());
+        DialogTouch.whenTouched(dialog, () -> {
+            timer.cancel();
+            if (button != null) button.setText(label);
+        });
+        timer.start();
+    }
+
     /**
      * Pre-start check: does this VM's configuration reach for a host kernel module nobody has
      * loaded? {@link KernelModulePreflight} answers that from the config itself (pseudo-
@@ -250,34 +397,12 @@ private static void promptKernelModules(
         var dialog = new MaterialAlertDialogBuilder(ctx)
             .setTitle(R.string.vm_kernel_module_title)
             .setMessage(ctx.getString(R.string.vm_kernel_module_message, lines.toString()))
-            .setPositiveButton(R.string.vm_kernel_module_start_anyway, (d, w) -> proceed.run())
-            .setNeutralButton(R.string.vm_kernel_module_manage, (d, w) -> showKernelModules(ctx))
+            .setNeutralButton(R.string.vm_kernel_module_start_anyway, (d, w) -> proceed.run())
+            .setPositiveButton(R.string.vm_kernel_module_manage, (d, w) -> showKernelModules(ctx))
             .setNegativeButton(android.R.string.cancel, null)
             .create();
         dialog.show();
-        // No response in 5s = "start anyway" (the chosen default), so an
-        // unattended start isn't blocked; the countdown shows on that button.
-        var startAnyway = dialog.getButton(AlertDialog.BUTTON_POSITIVE);
-        if (startAnyway != null)
-            startAnyway.setText(ctx.getString(R.string.vm_kernel_module_start_countdown, 5));
-        var timer = new CountDownTimer(5000, 1000) {
-            @Override
-            public void onTick(long ms) {
-                if (startAnyway != null)
-                    startAnyway.setText(ctx.getString(
-                        R.string.vm_kernel_module_start_countdown,
-                        (int) Math.ceil(ms / 1000.0)));
-            }
-
-            @Override
-            public void onFinish() {
-                dialog.dismiss();
-                proceed.run();
-            }
-        };
-        // Any interaction (a button tap dismisses the dialog) stops the countdown.
-        dialog.setOnDismissListener(d -> timer.cancel());
-        timer.start();
+        guardCountdown(ctx, dialog, R.string.vm_kernel_module_start_countdown, proceed);
     }
 
     /**
@@ -356,12 +481,21 @@ private static void startAfterGuard(
         if (BootMenuDialog.wanted(config) && ui.isAlive()) {
             BootMenuDialog.show(
                 ui.getContext(), config,
-                (bootEntry, remember, selected, builtinCmdline) -> {
+                (bootEntry, remember, selected, builtinCmdline, pseudoUnprotected) -> {
                     var startEntry = remember
                         ? rememberChoice(ui.getContext(), config, bootEntry,
                             selected, builtinCmdline)
                         : bootEntry;
-                    doCreateAndStart(config, mainHandler, ui, wantOpenConsole, startEntry);
+                    if (!pseudoUnprotected) {
+                        doCreateAndStart(config, mainHandler, ui, wantOpenConsole, startEntry);
+                        return;
+                    }
+                    // The module guard ran before the menu, on a mode this start no longer
+                    // uses: pseudo-unprotected RAM is SHARE'd through gunyah_host_share, so
+                    // ask that question again against what is actually about to start.
+                    var session = pseudoUnprotectedSession(config);
+                    guardKernelModules(session, mainHandler, ui, () -> doCreateAndStart(
+                        session, mainHandler, ui, wantOpenConsole, startEntry));
                 },
                 () -> { /* cancelled: do not start */ }
             );
@@ -505,29 +639,10 @@ private static void promptSharedRunning(
             .setNegativeButton(android.R.string.cancel, null)
             .create();
         dialog.show();
-        // No response in 5s = the read-only start (the only safe answer while the other VM
-        // holds the file), so an unattended start isn't blocked; the countdown shows on it.
-        var readonlyStart = dialog.getButton(AlertDialog.BUTTON_POSITIVE);
-        if (readonlyStart != null)
-            readonlyStart.setText(ctx.getString(R.string.vm_shared_disk_readonly_countdown, 5));
-        var timer = new CountDownTimer(5000, 1000) {
-            @Override
-            public void onTick(long ms) {
-                if (readonlyStart != null)
-                    readonlyStart.setText(ctx.getString(
-                        R.string.vm_shared_disk_readonly_countdown,
-                        (int) Math.ceil(ms / 1000.0)));
-            }
-
-            @Override
-            public void onFinish() {
-                dialog.dismiss();
-                start.run();
-            }
-        };
-        // Any interaction (a button tap dismisses the dialog) stops the countdown.
-        dialog.setOnDismissListener(d -> timer.cancel());
-        timer.start();
+        // Starting unchanged is not on offer here -- writable is what would corrupt the other
+        // VM's disk -- so this dialog has no neutral answer and the countdown falls to the
+        // read-only start, the only safe one.
+        guardCountdown(ctx, dialog, R.string.vm_shared_disk_readonly_countdown, start);
     }
 
     /**
@@ -739,29 +854,7 @@ private static void promptConvert(
             .setNegativeButton(android.R.string.cancel, null)
             .create();
         dialog.show();
-        // No response in 5s = "start anyway" (the chosen default), so an
-        // unattended start isn't blocked; the countdown shows on that button.
-        var startAnyway = dialog.getButton(AlertDialog.BUTTON_NEUTRAL);
-        if (startAnyway != null)
-            startAnyway.setText(ctx.getString(R.string.vm_compressed_disk_start_countdown, 5));
-        var timer = new CountDownTimer(5000, 1000) {
-            @Override
-            public void onTick(long ms) {
-                if (startAnyway != null)
-                    startAnyway.setText(ctx.getString(
-                        R.string.vm_compressed_disk_start_countdown,
-                        (int) Math.ceil(ms / 1000.0)));
-            }
-
-            @Override
-            public void onFinish() {
-                dialog.dismiss();
-                proceed.run();
-            }
-        };
-        // Any interaction (a button tap dismisses the dialog) stops the countdown.
-        dialog.setOnDismissListener(d -> timer.cancel());
-        timer.start();
+        guardCountdown(ctx, dialog, R.string.vm_compressed_disk_start_countdown, proceed);
     }
 
     /** Convert each compressed disk in turn, then {@code proceed} to start. */
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/boot/BootEntries.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/boot/BootEntries.java
index 7728040bc..516705813 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/boot/BootEntries.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/boot/BootEntries.java
@@ -63,6 +63,13 @@ public static final class Entry {
         public final boolean isDefault;
         @NonNull
         public final String source;
+        /**
+         * What booting this entry means: {@code linux} (kernel + initrd, which is what direct
+         * boot loads) or {@code windows} (an install that only firmware can start). An entry
+         * from an older lbx carries no type and is a Linux one.
+         */
+        @NonNull
+        public final String type;
         @NonNull
         public final String kernel;
         @NonNull
@@ -82,6 +89,8 @@ public static final class Entry {
             version = emptyToNull(optStr(o, "version"));
             isDefault = o.optBoolean("default", false);
             source = optStr(o, "source");
+            var kind = optStr(o, "type");
+            type = kind.isEmpty() ? TYPE_LINUX : kind;
             kernel = optStr(o, "kernel");
             cmdline = optStr(o, "cmdline");
             cmdlineFixed = optStr(o, "cmdline_fixed");
@@ -135,6 +144,34 @@ public String effectiveCmdline(boolean vdafix) {
         public boolean lacksRestrictedDmaPool() {
             return Boolean.FALSE.equals(dmaRestrictedPool);
         }
+
+        /** Direct boot loads a kernel, so only a Linux entry is one it can start. */
+        public boolean isLinux() {
+            return TYPE_LINUX.equals(type);
+        }
+
+        public boolean isWindows() {
+            return TYPE_WINDOWS.equals(type);
+        }
+    }
+
+    public static final String TYPE_LINUX = "linux";
+    public static final String TYPE_WINDOWS = "windows";
+
+    /** The entries direct boot can actually start, in listing order. */
+    @NonNull
+    public List<Entry> linuxEntries() {
+        var out = new ArrayList<Entry>();
+        for (var e : entries)
+            if (e.isLinux()) out.add(e);
+        return out;
+    }
+
+    /** True when the image holds a Windows install (bootable only under firmware). */
+    public boolean hasWindows() {
+        for (var e : entries)
+            if (e.isWindows()) return true;
+        return false;
     }
 
     @Nullable
@@ -272,32 +309,53 @@ private static BootEntries parse(@Nullable JSONArray arr) {
      * The entry a boot would use right now: pinned entry by exact id,
      * then exact title, falling back to the bootloader default -- the
      * same cascade as the daemon's BootPlan.
+     *
+     * <p>Only Linux entries are candidates, there as here. A Windows entry
+     * is in the list because the image boots it -- on a dual-boot disk it
+     * may even be what the bootloader would pick -- but direct boot loads
+     * a kernel, and that entry has none.</p>
      */
     @Nullable
     public Entry resolve(@Nullable BootConfig.ImageEntry pinned) {
         if (pinned != null) {
-            for (var e : entries)
+            for (var e : linuxEntries())
                 if (pinned.id != null && pinned.id.equals(e.id)) return e;
-            for (var e : entries)
+            for (var e : linuxEntries())
                 if (pinned.title != null && pinned.title.equals(e.title)) return e;
         }
         return defaultEntry();
     }
 
-    /** True when {@code pinned} no longer matches any entry. */
+    /** True when {@code pinned} no longer matches any entry direct boot can start. */
     public boolean isFallback(@Nullable BootConfig.ImageEntry pinned) {
         if (pinned == null) return false;
-        for (var e : entries) {
+        for (var e : linuxEntries()) {
             if (pinned.id != null && pinned.id.equals(e.id)) return false;
             if (pinned.title != null && pinned.title.equals(e.title)) return false;
         }
         return true;
     }
 
+    /**
+     * What the image's own bootloader would start, whatever type it is -- lbx resolves that the
+     * way the bootloader would (GRUB's {@code set default}, a BLS pin, version order).
+     *
+     * <p>This is the entry that comes up under UEFI, where the guest boots itself and nothing
+     * here picks anything. {@link #defaultEntry()} is the direct-boot answer instead: it takes
+     * over from the bootloader, so it can only pick an entry that has a kernel.</p>
+     */
     @Nullable
-    public Entry defaultEntry() {
+    public Entry bootloaderDefault() {
         for (var e : entries)
             if (e.isDefault) return e;
         return entries.isEmpty() ? null : entries.get(0);
     }
+
+    @Nullable
+    public Entry defaultEntry() {
+        var bootable = linuxEntries();
+        for (var e : bootable)
+            if (e.isDefault) return e;
+        return bootable.isEmpty() ? null : bootable.get(0);
+    }
 }
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/boot/BootMenuDialog.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/boot/BootMenuDialog.java
index 0f50d9f8d..d7509d14f 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/boot/BootMenuDialog.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/boot/BootMenuDialog.java
@@ -6,7 +6,6 @@
 import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
 import static android.view.View.GONE;
 import static android.view.View.VISIBLE;
-import static cn.classfun.droidvm.lib.store.enums.Enums.optEnum;
 
 import android.content.Context;
 import android.os.Handler;
@@ -27,8 +26,11 @@
 import com.google.android.material.color.MaterialColors;
 import com.google.android.material.dialog.MaterialAlertDialogBuilder;
 
+import java.util.List;
+import java.util.function.Consumer;
+
 import cn.classfun.droidvm.R;
-import cn.classfun.droidvm.lib.store.base.DataItem;
+import cn.classfun.droidvm.lib.ui.DialogTouch;
 import cn.classfun.droidvm.lib.store.vm.BootConfig;
 import cn.classfun.droidvm.lib.store.vm.ProtectedVM;
 import cn.classfun.droidvm.lib.store.vm.VMConfig;
@@ -36,8 +38,13 @@
 /**
  * GRUB-style boot entry menu shown on a manual GUI start of a VM that
  * boots from a disk image: the resolved entry is preselected, a countdown
- * runs on the Boot button (touching the list stops it, like pressing a
+ * runs on the Boot button (touching the dialog stops it, like pressing a
  * key in GRUB), and the choice is one-shot unless "remember" is ticked.
+ *
+ * <p>Boot sits in the neutral slot, and the pseudo-unprotected offer -- when the selected
+ * entry needs it -- in the positive one, the way every guard prompt is laid out: the answer
+ * that changes something is the deliberate one, and the countdown settles on the one that
+ * changes nothing.</p>
  */
 public final class BootMenuDialog {
     /** RadioButton id of the fixed "DroidVM built-in kernel" entry, kept
@@ -58,10 +65,15 @@ public interface OnProceed {
          * @param selected       image entry to pin when remembering (null otherwise)
          * @param builtinCmdline the cmdline the built-in kernel would use, for
          *                       persisting; non-null only for the built-in entry
+         * @param pseudoUnprotected start this once as {@link ProtectedVM#PSEUDO_UNPROTECTED}
+         *                       -- the offer made when the selected kernel has no restricted
+         *                       DMA pool. Never persisted, whatever "remember" says: that
+         *                       checkbox is about which entry boots, and downgrading how a
+         *                       VM's memory is protected is not something to inherit silently.
          */
         void proceed(@Nullable String bootEntry, boolean remember,
                      @Nullable BootConfig.ImageEntry selected,
-                     @Nullable String builtinCmdline);
+                     @Nullable String builtinCmdline, boolean pseudoUnprotected);
     }
 
     private BootMenuDialog() {
@@ -92,6 +104,8 @@ public static void show(
         var state = new Object() {
             @Nullable
             BootEntries entries;
+            /** The Linux entries, in radio order: what a direct boot can start. */
+            List<BootEntries.Entry> bootable = List.of();
             long secondsLeft = Math.max(boot.getBootWait(), 1);
             boolean countdownActive = false;
             boolean done = false;
@@ -102,12 +116,16 @@ public static void show(
             .setTitle(context.getString(
                 R.string.edit_vm_boot_menu_title, config.getName()))
             .setView(view)
-            .setPositiveButton(R.string.edit_vm_boot_menu_boot, null)
+            // Booting the selection changes nothing about the VM, so it is the neutral
+            // answer, and the countdown settles on it; the mode switch is the positive one,
+            // shown only while the selected entry carries the DMA warning (see updateFix).
+            .setNeutralButton(R.string.edit_vm_boot_menu_boot, null)
+            .setPositiveButton(R.string.edit_vm_boot_menu_pseudo, null)
             .setNegativeButton(android.R.string.cancel, null)
             .setCancelable(false)
             .create();
 
-        Runnable fire = () -> {
+        Consumer<Boolean> fire = pseudoUnprotected -> {
             if (state.done) return;
             state.done = true;
             dialog.dismiss();
@@ -115,27 +133,27 @@ public static void show(
             int checkedId = group.getCheckedRadioButtonId();
             if (checkedId == BUILTIN_RADIO_ID) {
                 onProceed.proceed(BootConfig.BUILTIN_ENTRY_KEY, remember.isChecked(),
-                    null, builtinCmdline(boot, entries));
+                    null, builtinCmdline(boot, entries), pseudoUnprotected);
                 return;
             }
             // radio index 0 = auto; entry i sits at radio index i + 1
             int index = checkedId - 1;
             if (entries == null || index <= 0) {
-                onProceed.proceed(null, remember.isChecked(), null, null);
+                onProceed.proceed(null, remember.isChecked(), null, null, pseudoUnprotected);
                 return;
             }
-            var entry = entries.entries.get(index - 1);
-            onProceed.proceed(
-                entry.selectionKey(), remember.isChecked(), entry.toImageEntry(), null);
+            var entry = state.bootable.get(index - 1);
+            onProceed.proceed(entry.selectionKey(), remember.isChecked(),
+                entry.toImageEntry(), null, pseudoUnprotected);
         };
 
         var tick = new Runnable() {
             @Override
             public void run() {
                 if (state.done || !state.countdownActive) return;
-                var btn = dialog.getButton(AlertDialog.BUTTON_POSITIVE);
+                var btn = dialog.getButton(AlertDialog.BUTTON_NEUTRAL);
                 if (state.secondsLeft <= 0) {
-                    fire.run();
+                    fire.accept(false);
                     return;
                 }
                 btn.setText(context.getString(
@@ -148,7 +166,7 @@ public void run() {
         Runnable stopCountdown = () -> {
             if (!state.countdownActive) return;
             state.countdownActive = false;
-            dialog.getButton(AlertDialog.BUTTON_POSITIVE)
+            dialog.getButton(AlertDialog.BUTTON_NEUTRAL)
                 .setText(R.string.edit_vm_boot_menu_boot);
         };
 
@@ -159,8 +177,11 @@ public void run() {
             context.getString(R.string.edit_vm_boot_entry_builtin), null, stopCountdown);
 
         dialog.setOnShowListener(d -> {
-            dialog.getButton(AlertDialog.BUTTON_POSITIVE)
-                .setOnClickListener(v -> fire.run());
+            dialog.getButton(AlertDialog.BUTTON_NEUTRAL)
+                .setOnClickListener(v -> fire.accept(false));
+            var fix = dialog.getButton(AlertDialog.BUTTON_POSITIVE);
+            fix.setVisibility(GONE);
+            fix.setOnClickListener(v -> fire.accept(true));
             dialog.getButton(AlertDialog.BUTTON_NEGATIVE)
                 .setOnClickListener(v -> {
                     state.done = true;
@@ -169,6 +190,9 @@ public void run() {
                 });
         });
         dialog.show();
+        // Reading the entry list, or a warning under it, stops the auto-boot -- pressing a key
+        // during GRUB's own countdown does the same thing.
+        DialogTouch.whenTouched(dialog, stopCountdown);
 
         // auto option is always present; entries arrive after the scan, and
         // the built-in entry is appended last so it stays at the bottom
@@ -178,7 +202,7 @@ public void run() {
         summary.setVisibility(VISIBLE);
         summary.setText(R.string.edit_vm_boot_detect_scanning);
 
-        var image = firstImagePath(config, boot.getImageDisk());
+        var image = BootConfig.imagePath(config, boot.getImageDisk());
         if (image == null) {
             summary.setText(R.string.edit_vm_boot_detect_no_disk);
             addBuiltin.run();
@@ -193,11 +217,14 @@ public void run() {
                 return;
             }
             state.entries = result;
+            // Windows entries are listed by lbx because the image boots them, but a direct
+            // kernel boot has no kernel to load there -- they are not offered here.
+            state.bootable = result.linuxEntries();
             var pinned = boot.getImageEntry();
             var resolved = result.resolve(pinned);
             boolean protectedVm = isProtectedVm(config);
-            for (int i = 0; i < result.entries.size(); i++) {
-                var entry = result.entries.get(i);
+            for (int i = 0; i < state.bootable.size(); i++) {
+                var entry = state.bootable.get(i);
                 addRadio(context, group, idFor(i + 1), entry.displayLabel(context),
                     entryWarning(context, protectedVm, entry), stopCountdown);
             }
@@ -211,7 +238,7 @@ public void run() {
                 autoRadio.setText(warnedLabel(autoRadio,
                     context.getString(R.string.edit_vm_boot_entry_auto), autoWarn));
             if (resolved != null && pinned != null && !result.isFallback(pinned))
-                group.check(idFor(result.entries.indexOf(resolved) + 1));
+                group.check(idFor(state.bootable.indexOf(resolved) + 1));
             else
                 group.check(idFor(0));
             if (result.isFallback(pinned)) {
@@ -219,10 +246,20 @@ public void run() {
                 warn.setText(context.getString(
                     R.string.edit_vm_boot_menu_fallback,
                     pinned.title != null ? pinned.title : pinned.id));
+            } else if (state.bootable.isEmpty() && result.hasWindows()) {
+                // The disk boots, just not this way: say which protocol would.
+                warn.setVisibility(VISIBLE);
+                warn.setText(R.string.edit_vm_boot_menu_windows_only);
             }
-            updateSummary(context, summary, boot, result, group);
-            group.setOnCheckedChangeListener((g, id) ->
-                updateSummary(context, summary, boot, result, group));
+            Runnable refresh = () -> {
+                updateSummary(context, summary, boot, result, state.bootable, group);
+                updateFix(dialog, boot, protectedVm, result, state.bootable, group);
+            };
+            refresh.run();
+            group.setOnCheckedChangeListener((g, id) -> refresh.run());
+            // Nothing here to auto-boot: leave the choice (built-in kernel, or cancel and
+            // change the protocol) to the user rather than counting down into a failure.
+            if (state.bootable.isEmpty()) return;
             // countdown only starts on a successful scan; a warned auto-boot
             // target buys the user a few extra seconds to react
             if (autoWarn != null) state.secondsLeft += WARNED_COUNTDOWN_GRACE;
@@ -236,6 +273,7 @@ private static void updateSummary(
         @NonNull TextView summary,
         @NonNull BootConfig boot,
         @NonNull BootEntries entries,
+        @NonNull List<BootEntries.Entry> bootable,
         @NonNull RadioGroup group
     ) {
         int checkedId = group.getCheckedRadioButtonId();
@@ -247,10 +285,7 @@ private static void updateSummary(
             summary.setText(line);
             return;
         }
-        int index = checkedId - 1;
-        var entry = index <= 0
-            ? entries.resolve(null)
-            : entries.entries.get(index - 1);
+        var entry = selectedEntry(boot, entries, bootable, group);
         if (entry == null) {
             summary.setVisibility(GONE);
             return;
@@ -283,6 +318,49 @@ private static String builtinCmdline(
         return BootConfig.DEFAULT_MANUAL_CMDLINE;
     }
 
+    /**
+     * The entry the current selection means: an entry row is itself, the Auto row is whatever
+     * the stored config resolves to now, and the built-in kernel is none of them.
+     */
+    @Nullable
+    private static BootEntries.Entry selectedEntry(
+        @NonNull BootConfig boot,
+        @NonNull BootEntries entries,
+        @NonNull List<BootEntries.Entry> bootable,
+        @NonNull RadioGroup group
+    ) {
+        int checkedId = group.getCheckedRadioButtonId();
+        if (checkedId == BUILTIN_RADIO_ID) return null;
+        int index = checkedId - 1;
+        if (index <= 0) return entries.resolve(boot.getImageEntry());
+        return index - 1 < bootable.size() ? bootable.get(index - 1) : null;
+    }
+
+    /**
+     * Offers "boot pseudo-unprotected" exactly while the selection is an entry the warning
+     * applies to -- a kernel with no restricted DMA pool on a VM whose memory is lent.
+     *
+     * <p>It is the third answer this menu never had: the warning could be read and ignored, or
+     * the start abandoned, but the thing that would actually make the kernel work was two
+     * screens away in the editor. The countdown still settles on Boot, unchanged: this button
+     * changes how the VM is started, and nothing that changes a user's configuration should
+     * happen because nobody was looking.</p>
+     */
+    private static void updateFix(
+        @NonNull AlertDialog dialog,
+        @NonNull BootConfig boot,
+        boolean protectedVm,
+        @NonNull BootEntries entries,
+        @NonNull List<BootEntries.Entry> bootable,
+        @NonNull RadioGroup group
+    ) {
+        var fix = dialog.getButton(AlertDialog.BUTTON_POSITIVE);
+        if (fix == null) return;
+        var entry = selectedEntry(boot, entries, bootable, group);
+        var warned = protectedVm && entry != null && entry.lacksRestrictedDmaPool();
+        fix.setVisibility(warned ? VISIBLE : GONE);
+    }
+
     private static int idFor(int index) {
         // RadioButton ids must be positive; 0 is reserved/invalid
         return index + 1;
@@ -335,10 +413,7 @@ private static CharSequence warnedLabel(
      * would be false there.
      */
     private static boolean isProtectedVm(@NonNull VMConfig config) {
-        var pvm = optEnum(config.item, "protected_vm",
-            ProtectedVM.PROTECTED_WITHOUT_FIRMWARE);
-        return pvm == ProtectedVM.PROTECTED_PROTECTED
-            || pvm == ProtectedVM.PROTECTED_WITHOUT_FIRMWARE;
+        return ProtectedVM.lendsGuestMemory(config.item);
     }
 
     /**
@@ -359,20 +434,4 @@ private static String entryWarning(
         return null;
     }
 
-    @Nullable
-    private static String firstImagePath(@NonNull VMConfig config, int preferred) {
-        var disks = config.item.opt("disks", null);
-        if (disks == null || !disks.is(DataItem.Type.ARRAY))
-            return null;
-        var arr = disks.asArray();
-        if (preferred >= 0 && preferred < arr.size()) {
-            var p = arr.get(preferred).optString("path", "");
-            if (!p.isEmpty()) return p;
-        }
-        for (var d : arr) {
-            var p = d.optString("path", "");
-            if (!p.isEmpty()) return p;
-        }
-        return null;
-    }
 }
diff --git a/app/src/main/res/values-night/themes.xml b/app/src/main/res/values-night/themes.xml
index e8baed6d3..ed1c4ec72 100644
--- a/app/src/main/res/values-night/themes.xml
+++ b/app/src/main/res/values-night/themes.xml
@@ -1,6 +1,7 @@
 <?xml version="1.0" encoding="utf-8"?>
 <resources>
     <style name="Theme.DroidVM" parent="Theme.Material3.DayNight">
+        <item name="materialAlertDialogTheme">@style/ThemeOverlay.DroidVM.AlertDialog</item>
         <item name="android:statusBarColor">@android:color/transparent</item>
         <item name="android:navigationBarColor">@android:color/transparent</item>
         <item name="android:windowLightStatusBar">false</item>
@@ -8,6 +9,7 @@
     </style>
 
     <style name="Theme.DroidVM.NoActionBar" parent="Theme.Material3.DayNight.NoActionBar">
+        <item name="materialAlertDialogTheme">@style/ThemeOverlay.DroidVM.AlertDialog</item>
         <item name="android:statusBarColor">@android:color/transparent</item>
         <item name="android:navigationBarColor">@android:color/transparent</item>
         <item name="android:windowLightStatusBar">false</item>
diff --git a/app/src/main/res/values-zh-rCN/strings.xml b/app/src/main/res/values-zh-rCN/strings.xml
index f88316dd7..d85c3d43f 100644
--- a/app/src/main/res/values-zh-rCN/strings.xml
+++ b/app/src/main/res/values-zh-rCN/strings.xml
@@ -437,6 +437,8 @@
     <string name="edit_vm_boot_menu_boot_in">启动 (%1$d)</string>
     <string name="edit_vm_boot_menu_remember">记住此选择</string>
     <string name="edit_vm_boot_menu_fallback">未找到固定的引导项“%1$s”,已改用默认</string>
+    <string name="edit_vm_boot_menu_pseudo">改用伪非保护启动</string>
+    <string name="edit_vm_boot_menu_windows_only">这个镜像启动的是 Windows，直接内核启动无法带起它。请改用下方的内置内核，或把启动协议改成 UEFI。</string>
     <string name="edit_vm_boot_protected_dma_warn">此内核未启用 CONFIG_DMA_RESTRICTED_POOL。\n在受保护 VM 下客户机无法与主机共享 DMA 内存,virtio 设备(磁盘/网络)将无法启动。\n请改用内置内核,或重新编译并启用该选项。</string>
     <string name="kernel_analysis_title">内核分析</string>
     <string name="kernel_analysis_analyze">分析</string>
@@ -598,6 +600,13 @@
     <string name="vm_kernel_module_reason_memory">内存超过 2 GB 的虚拟机需要</string>
     <string name="vm_kernel_module_start_anyway">仍要开机</string>
     <string name="vm_kernel_module_start_countdown">仍要开机 (%1$d)</string>
+    <string name="vm_protected_guest_dma_title">内核在这里碰不到 virtio</string>
+    <string name="vm_protected_guest_dma_message">这台虚拟机是保护模式，内存借给了 hypervisor，virtio 必须经由受限 DMA 池中转。这个启动项要加载的内核编译时没有开 CONFIG_DMA_RESTRICTED_POOL，起来后会看不到磁盘也没有网络。\n\n伪非保护改成共享内存，发行版原本的内核就能用。仍要启动的话，就跟原本的启动一模一样。</string>
+    <string name="vm_protected_guest_usb_title">Windows 在这里无法使用 USB 直通</string>
+    <string name="vm_protected_guest_usb_message">这台虚拟机是保护模式，内存借给了 hypervisor，直通的 USB 没有地方映射它的传输缓冲区。Windows 客户机不支持这种情况，指向这台虚拟机的附加规则不会有任何作用。\n\n伪非保护改成共享内存，直通就能工作。仍要启动的话，就跟原本的启动一模一样。</string>
+    <string name="vm_protected_guest_start_anyway">仍要启动</string>
+    <string name="vm_protected_guest_start_countdown">仍要启动 (%1$d)</string>
+    <string name="vm_protected_guest_pseudo">这次改用伪非保护</string>
     <string name="vm_kernel_module_manage">管理模块</string>
     <string name="vm_kernel_module_manage_unavailable">请到“设置 \u2192 内核模块”加载</string>
     <string name="vm_compressed_disk_start_anyway">仍要启动</string>
diff --git a/app/src/main/res/values-zh-rTW/strings.xml b/app/src/main/res/values-zh-rTW/strings.xml
index dc09d5438..f9426dac3 100644
--- a/app/src/main/res/values-zh-rTW/strings.xml
+++ b/app/src/main/res/values-zh-rTW/strings.xml
@@ -437,6 +437,8 @@
     <string name="edit_vm_boot_menu_boot_in">啟動 (%1$d)</string>
     <string name="edit_vm_boot_menu_remember">記住此選擇</string>
     <string name="edit_vm_boot_menu_fallback">未找到固定的引導項“%1$s”,已改用預設</string>
+    <string name="edit_vm_boot_menu_pseudo">改用偽非保護啟動</string>
+    <string name="edit_vm_boot_menu_windows_only">這個映像啟動的是 Windows，直接核心啟動無法帶起它。請改用下方的內建核心，或把啟動協定改成 UEFI。</string>
     <string name="edit_vm_boot_protected_dma_warn">此核心未啟用 CONFIG_DMA_RESTRICTED_POOL。\n在受保護 VM 下客戶機無法與主機共享 DMA 記憶體,virtio 裝置(磁碟/網路)將無法啟動。\n請改用內建核心,或重新編譯並啟用該選項。</string>
     <string name="kernel_analysis_title">核心分析</string>
     <string name="kernel_analysis_analyze">分析</string>
@@ -598,6 +600,13 @@
     <string name="vm_kernel_module_reason_memory">記憶體超過 2 GB 的虛擬機器需要</string>
     <string name="vm_kernel_module_start_anyway">仍要開機</string>
     <string name="vm_kernel_module_start_countdown">仍要開機 (%1$d)</string>
+    <string name="vm_protected_guest_dma_title">核心在這裡碰不到 virtio</string>
+    <string name="vm_protected_guest_dma_message">這台虛擬機器是保護模式，記憶體借給了 hypervisor，virtio 必須經由受限 DMA 池中轉。這個開機項要載入的核心編譯時沒有開 CONFIG_DMA_RESTRICTED_POOL，開起來會看不到磁碟也沒有網路。\n\n偽非保護改成共享記憶體，發行版原本的核心就能用。仍要啟動的話，就跟原本的啟動一模一樣。</string>
+    <string name="vm_protected_guest_usb_title">Windows 在這裡無法使用 USB 直通</string>
+    <string name="vm_protected_guest_usb_message">這台虛擬機器是保護模式，記憶體借給了 hypervisor，直通的 USB 沒有地方對應它的傳輸緩衝區。Windows 客體不支援這種情況，指向這台虛擬機器的附加規則不會有任何作用。\n\n偽非保護改成共享記憶體，直通就能運作。仍要啟動的話，就跟原本的啟動一模一樣。</string>
+    <string name="vm_protected_guest_start_anyway">仍要啟動</string>
+    <string name="vm_protected_guest_start_countdown">仍要啟動 (%1$d)</string>
+    <string name="vm_protected_guest_pseudo">這次改用偽非保護</string>
     <string name="vm_kernel_module_manage">管理模組</string>
     <string name="vm_kernel_module_manage_unavailable">請到「設定 \u2192 內核模組」載入</string>
     <string name="vm_compressed_disk_start_anyway">仍要啟動</string>
diff --git a/app/src/main/res/values/strings.xml b/app/src/main/res/values/strings.xml
index 8fe52bbe4..f3bdf6a72 100644
--- a/app/src/main/res/values/strings.xml
+++ b/app/src/main/res/values/strings.xml
@@ -441,6 +441,8 @@
     <string name="edit_vm_boot_menu_boot_in">Boot (%1$d)</string>
     <string name="edit_vm_boot_menu_remember">Remember this choice</string>
     <string name="edit_vm_boot_menu_fallback">Pinned entry "%1$s" not found; using default</string>
+    <string name="edit_vm_boot_menu_pseudo">Boot pseudo-unprotected</string>
+    <string name="edit_vm_boot_menu_windows_only">This image boots Windows, which a direct kernel boot cannot start. Use the built-in kernel below, or switch the boot protocol to UEFI.</string>
     <string name="edit_vm_boot_protected_dma_warn">This kernel lacks CONFIG_DMA_RESTRICTED_POOL.\nUnder a protected VM the guest cannot share DMA memory with the host, so virtio devices (disk/network) will fail to start.\nUse the built-in kernel, or rebuild with CONFIG_DMA_RESTRICTED_POOL.</string>
     <string name="kernel_analysis_title">Kernel analysis</string>
     <string name="kernel_analysis_analyze">Analyze</string>
@@ -635,6 +637,13 @@
     <string name="vm_kernel_module_reason_memory">needed by a VM with more than 2 GB of RAM</string>
     <string name="vm_kernel_module_start_anyway">Start anyway</string>
     <string name="vm_kernel_module_start_countdown">Start anyway (%1$d)</string>
+    <string name="vm_protected_guest_dma_title">Kernel cannot reach virtio here</string>
+    <string name="vm_protected_guest_dma_message">This VM is protected, so its memory is lent to the hypervisor and virtio has to bounce through a restricted DMA pool. The kernel this entry boots was built without CONFIG_DMA_RESTRICTED_POOL, so the guest comes up with no disk and no network.\n\nPseudo-unprotected shares the memory instead, and a stock kernel works. Starting anyway is the same start as before.</string>
+    <string name="vm_protected_guest_usb_title">Windows cannot use USB passthrough here</string>
+    <string name="vm_protected_guest_usb_message">This VM is protected, so its memory is lent to the hypervisor and passed-through USB has nowhere to map its transfer buffers. Windows guests do not support that; the attach rules pointing at this VM will do nothing.\n\nPseudo-unprotected shares the memory instead, and passthrough works. Starting anyway is the same start as before.</string>
+    <string name="vm_protected_guest_start_anyway">Start anyway</string>
+    <string name="vm_protected_guest_start_countdown">Start anyway (%1$d)</string>
+    <string name="vm_protected_guest_pseudo">Start pseudo-unprotected once</string>
     <string name="vm_kernel_module_manage">Manage modules</string>
     <string name="vm_kernel_module_manage_unavailable">Open Settings \u2192 Kernel Modules to load it</string>
     <string name="vm_compressed_disk_start_anyway">Start anyway</string>
diff --git a/app/src/main/res/values/themes.xml b/app/src/main/res/values/themes.xml
index f0fef5e89..382a2ff8d 100644
--- a/app/src/main/res/values/themes.xml
+++ b/app/src/main/res/values/themes.xml
@@ -2,6 +2,7 @@
 <resources>
 
     <style name="Theme.DroidVM" parent="Theme.Material3.DayNight">
+        <item name="materialAlertDialogTheme">@style/ThemeOverlay.DroidVM.AlertDialog</item>
         <item name="android:statusBarColor">@android:color/transparent</item>
         <item name="android:navigationBarColor">@android:color/transparent</item>
         <item name="android:windowLightStatusBar">true</item>
@@ -9,6 +10,7 @@
     </style>
 
     <style name="Theme.DroidVM.NoActionBar" parent="Theme.Material3.DayNight.NoActionBar">
+        <item name="materialAlertDialogTheme">@style/ThemeOverlay.DroidVM.AlertDialog</item>
         <item name="android:statusBarColor">@android:color/transparent</item>
         <item name="android:navigationBarColor">@android:color/transparent</item>
         <item name="android:windowLightStatusBar">true</item>
@@ -30,6 +32,18 @@
         <item name="android:windowLightNavigationBar">false</item>
     </style>
 
+    <!-- Dialog buttons say what they mean by where they sit: neutral (bottom left) goes
+         ahead changing nothing, positive (bottom right) goes ahead with the change that fixes
+         what the dialog is about, negative does not go ahead. Only the positive one alters
+         anything, so it is the one set in bold. -->
+    <style name="ThemeOverlay.DroidVM.AlertDialog" parent="ThemeOverlay.Material3.MaterialAlertDialog">
+        <item name="buttonBarPositiveButtonStyle">@style/Widget.DroidVM.Button.TextButton.Dialog.Emphasized</item>
+    </style>
+
+    <style name="Widget.DroidVM.Button.TextButton.Dialog.Emphasized" parent="Widget.Material3.Button.TextButton.Dialog">
+        <item name="android:textStyle">bold</item>
+    </style>
+
     <!-- Icon-only key: an ImageButton centres its drawable, which a Button's compound drawable
          does not do reliably at these sizes. -->
     <style name="ExtraKeyIcon">
diff --git a/app/src/test/java/cn/classfun/droidvm/ui/vm/ProtectedGuestPreflightTest.java b/app/src/test/java/cn/classfun/droidvm/ui/vm/ProtectedGuestPreflightTest.java
new file mode 100644
index 000000000..a2d27baf8
--- /dev/null
+++ b/app/src/test/java/cn/classfun/droidvm/ui/vm/ProtectedGuestPreflightTest.java
@@ -0,0 +1,92 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
+package cn.classfun.droidvm.ui.vm;
+
+import static org.junit.Assert.assertFalse;
+import static org.junit.Assert.assertTrue;
+
+import org.junit.Test;
+
+import cn.classfun.droidvm.lib.store.vm.ProtectedVM;
+import cn.classfun.droidvm.lib.store.vm.VMConfig;
+import cn.classfun.droidvm.lib.store.vm.VMXhciConfig;
+
+/**
+ * The two questions the protected-guest warning rests on: whether this VM's memory is lent at
+ * all, and whether a USB rule would actually hand it a device. The rules' JSON edge is not
+ * covered -- org.json is a stub under the test android.jar (see {@code UsbRulesTest}) -- so the
+ * decision is asked with the fields a rule carries.
+ */
+public final class ProtectedGuestPreflightTest {
+    private static final String VM_ID = "11111111-2222-3333-4444-555555555555";
+    private static final String OTHER_VM = "99999999-8888-7777-6666-555555555555";
+
+    /** A VM with one xHCI controller, which the rules below point at. */
+    private static VMConfig vmWithController() {
+        var config = new VMConfig();
+        config.setId(VM_ID);
+        VMXhciConfig.addController(config.item);
+        return config;
+    }
+
+    @Test
+    public void aRuleForThisVmCounts() {
+        assertTrue(ProtectedGuestPreflight.pointsAtVm(
+            vmWithController(), VM_ID, "vm", null));
+    }
+
+    /** A rule written before targets existed: its VM is the whole of what it said. */
+    @Test
+    public void aTargetlessRuleWithAVmCounts() {
+        assertTrue(ProtectedGuestPreflight.pointsAtVm(
+            vmWithController(), VM_ID, null, null));
+    }
+
+    @Test
+    public void rulesForSomeoneElseDoNot() {
+        var config = vmWithController();
+        assertFalse(ProtectedGuestPreflight.pointsAtVm(config, OTHER_VM, "vm", null));
+        assertFalse(ProtectedGuestPreflight.pointsAtVm(config, null, "host", null));
+        assertFalse(ProtectedGuestPreflight.pointsAtVm(config, VM_ID, "sink", null));
+    }
+
+    /** Naming the VM's own controller is the same rule, said explicitly. */
+    @Test
+    public void aRuleNamingThisVmsControllerCounts() {
+        var config = vmWithController();
+        assertTrue(ProtectedGuestPreflight.pointsAtVm(
+            config, VM_ID, "vm", VMXhciConfig.firstControllerId(config.item)));
+    }
+
+    /** A controller this VM no longer has: the rule can never attach anything. */
+    @Test
+    public void aDanglingControllerDoesNot() {
+        assertFalse(ProtectedGuestPreflight.pointsAtVm(
+            vmWithController(), VM_ID, "vm", "xhci-7"));
+    }
+
+    /** No controller at all: nothing to attach to, whatever the rules say. */
+    @Test
+    public void aVmWithoutAControllerDoesNot() {
+        var config = new VMConfig();
+        config.setId(VM_ID);
+        assertFalse(ProtectedGuestPreflight.pointsAtVm(config, VM_ID, "vm", null));
+    }
+
+    /** Which modes lend the guest's memory -- the property both warnings follow from. */
+    @Test
+    public void pseudoUnprotectedDoesNotLendMemory() {
+        var config = new VMConfig();
+        for (var mode : new ProtectedVM[]{
+            ProtectedVM.PROTECTED_PROTECTED, ProtectedVM.PROTECTED_WITHOUT_FIRMWARE}) {
+            config.item.set(ProtectedVM.KEY, mode);
+            assertTrue(mode.name(), ProtectedVM.lendsGuestMemory(config.item));
+        }
+        for (var mode : new ProtectedVM[]{
+            ProtectedVM.PROTECTED_NORMAL, ProtectedVM.PSEUDO_UNPROTECTED}) {
+            config.item.set(ProtectedVM.KEY, mode);
+            assertFalse(mode.name(), ProtectedVM.lendsGuestMemory(config.item));
+        }
+    }
+}

From 20fa246e569f76810e00569d2f441751423dec04 Mon Sep 17 00:00:00 2001
From: HuJK <gh@hujk.org>
Date: Wed, 9 Sep 2026 12:55:12 +0800
Subject: [PATCH 174/182] input: the physical keyboard types into the guest,
 and the drawn one follows it

A keyboard attached to Android could not send a guest the keys that matter
most in one: Android decides what an Activity may see before the Activity sees
it, and Home, the task switcher, Alt+Tab and every Meta shortcut are taken by
the window manager and never dispatched. No console written on top of
dispatchKeyEvent can be sent them.

So the daemon takes the keyboards instead (EVIOCGRAB), which makes its
descriptor the only recipient the kernel's input core hands events to --
Android's InputReader keeps its own open and is simply never woken again -- and
writes the raw evdev into the same per-screen keyboard socket the console's
on-screen keys already use, so nothing downstream has to know where a key came
from. A keyboard is any /dev/input node whose EV_KEY bitmap has q, a, z, enter
and space: a vendor folio, a Bluetooth keyboard and a USB one alike, while the
volume rocker and the touchscreen are left where they are.

When, and only when: the console is in front, the screen takes input, and the
typing surface is not the one whose text comes from the IME. A grabbed keyboard
is invisible to an IME, so KeyboardMode.SYSTEM hands it straight back and
composed input goes on working exactly as before. A console stays armed while
it holds nothing, because it is usually up before the guest it starts and
because a Bluetooth keyboard comes back as whichever eventN is free: the VM
state hook and a uevent watcher grab those. Releasing lifts every key still
held, so no guest is left with a Ctrl down, and the console's binder token
releases the grab if the console dies. The escape chord is implemented and
unbound -- which combination will not fight the guest is the user's to say once
there is a page to say it on; until then the two ways out want no keyboard
anyway (leave the display, or switch to the system keyboard).

The guest talks back, and nothing was listening. Its driver reports the
keyboard lamps on virtio-input's status queue, crosvm writes them onto the same
socket, and the daemon only ever wrote to it -- so the records sat in a buffer
nobody drained and the caps light on the real keyboard stayed dark. Read them:
the lamps are set on every grabbed keyboard (one that joins late is synced to
what the guest already said) and passed to the console. The guest's own view is
the only correct one, since software inside it can turn caps lock on with no
key involved, and a lamp it has never reported is left unknown rather than
guessed at, because virtio-input gives no way to ask.

The console gets a copy of the keys for the same reason it had none: they never
pass through the app. IPhysicalKeyEcho is oneway, called after the keys have
reached the guest, and registered only in the mode that draws a keyboard. A
drawn key lights from the union of three reasons -- the panel holds it sticky,
the physical keyboard holds it, the guest says its lock is on -- so releasing a
hardware Ctrl no longer un-paints one the panel is holding, and the key faces
follow a physical Shift as well as a sticky one.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01UzSVsTJs6p3V2pFZLaXq9U
---
 .../display/INativeDisplayRootService.aidl    |  24 +
 .../droidvm/display/IPhysicalKeyEcho.aidl     |  29 +
 app/src/main/cpp/unixhelper/unixhelper.c      |  86 ++
 .../daemon/display/NativeDisplayBinder.java   |  20 +
 .../droidvm/daemon/input/HostKeyboard.java    | 148 ++++
 .../daemon/input/KeyboardGrabConfig.java      | 135 +++
 .../daemon/input/KeyboardGrabManager.java     | 782 ++++++++++++++++++
 .../ipc/input/KeyboardConfigHandler.java      |  50 ++
 .../daemon/ipc/input/KeyboardGrabHandler.java |  56 ++
 .../ipc/input/KeyboardStatusHandler.java      |  31 +
 .../droidvm/daemon/server/ServerContext.java  |   7 +
 .../droidvm/daemon/vm/VMInstance.java         |   8 +
 .../vm/backend/CrosvmBackendInstance.java     |   7 +
 .../vm/backend/NativeDisplayInputBridge.java  |  81 +-
 .../droidvm/lib/natives/UnixHelper.java       |  27 +
 .../base/DisplayPhysicalKeyboardView.java     | 113 ++-
 .../vm/display/base/PhysicalKeyboardGrab.java | 209 +++++
 .../display/VMNativeDisplayActivity.java      |  58 ++
 .../nativedisplay/input/KeyCodeMapper.java    |  16 +
 19 files changed, 1873 insertions(+), 14 deletions(-)
 create mode 100644 app/src/main/aidl/cn/classfun/droidvm/display/IPhysicalKeyEcho.aidl
 create mode 100644 app/src/main/java/cn/classfun/droidvm/daemon/input/HostKeyboard.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/daemon/input/KeyboardGrabConfig.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/daemon/input/KeyboardGrabManager.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/daemon/ipc/input/KeyboardConfigHandler.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/daemon/ipc/input/KeyboardGrabHandler.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/daemon/ipc/input/KeyboardStatusHandler.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/ui/vm/display/base/PhysicalKeyboardGrab.java

diff --git a/app/src/main/aidl/cn/classfun/droidvm/display/INativeDisplayRootService.aidl b/app/src/main/aidl/cn/classfun/droidvm/display/INativeDisplayRootService.aidl
index 0ff74695d..6d42abcd6 100644
--- a/app/src/main/aidl/cn/classfun/droidvm/display/INativeDisplayRootService.aidl
+++ b/app/src/main/aidl/cn/classfun/droidvm/display/INativeDisplayRootService.aidl
@@ -1,5 +1,7 @@
 package cn.classfun.droidvm.display;
 
+import cn.classfun.droidvm.display.IPhysicalKeyEcho;
+
 /**
  * AIDL interface for the native-display broker. It is implemented and hosted by the daemon (which
  * already runs as root) and handed to the UI via a broadcast (see
@@ -31,4 +33,26 @@ interface INativeDisplayRootService {
      * some other screen.
      */
     boolean writeInput(String vmId, String screenId, int channel, in byte[] data);
+
+    /**
+     * Grabs the host's physical keyboards for [vmId]'s [screenId] console, or hands them back.
+     * A grabbed keyboard is the only way the keys Android keeps for itself -- Home, the task
+     * switcher, Alt+Tab, the Meta shortcuts -- can reach a guest, and while it is held that
+     * keyboard types nowhere else, the IME included. So a console asks for it only while it is in
+     * front with a typing surface that wants no IME, and gives it back on the way out.
+     *
+     * [token] is the caller's own binder: the daemon releases the grab if it dies, so a console
+     * that crashed cannot leave the user with a keyboard that types into nothing. Returns how
+     * many keyboards are held (0 when the feature is off, the VM is not running, or none is
+     * attached -- the console stays armed for one that appears later).
+     */
+    int setKeyboardGrab(String vmId, String screenId, boolean grab, IBinder token);
+
+    /**
+     * Registers (or clears, with null) the console's copy of the grabbed keyboard's keys and the
+     * guest's keyboard lamps, for [vmId]'s [screenId] console. Only the console that holds the
+     * grab is heard, and only while it has something to show -- the laptop-keyboard mode lights
+     * the pressed key on the drawn keyboard, and nothing else needs the traffic.
+     */
+    void setKeyEcho(String vmId, String screenId, IPhysicalKeyEcho echo);
 }
diff --git a/app/src/main/aidl/cn/classfun/droidvm/display/IPhysicalKeyEcho.aidl b/app/src/main/aidl/cn/classfun/droidvm/display/IPhysicalKeyEcho.aidl
new file mode 100644
index 000000000..6aa922724
--- /dev/null
+++ b/app/src/main/aidl/cn/classfun/droidvm/display/IPhysicalKeyEcho.aidl
@@ -0,0 +1,29 @@
+package cn.classfun.droidvm.display;
+
+/**
+ * The console's copy of what the grabbed physical keyboard is doing. A grab sends its keys
+ * straight from the daemon into the guest's keyboard socket and never through the app, which is
+ * what keeps the path short -- but it also means the UI has no idea a key was pressed. This is how
+ * it finds out, and it exists for the on-screen keyboard: in the laptop-keyboard mode the key the
+ * user pressed on the real keyboard lights up on the drawn one.
+ *
+ * Oneway, and always called after the keys have gone to the guest, so nothing the console does
+ * with them can slow typing down. A console registers it only while it has something to show.
+ */
+oneway interface IPhysicalKeyEcho {
+    /**
+     * One read's worth of keys, in order. [codes] are Linux KEY_* scan codes and [values] the
+     * matching 1 (down) or 0 (up); auto-repeat is not sent, the same as to the guest.
+     */
+    void onKeys(in int[] codes, in int[] values);
+
+    /**
+     * The guest's keyboard lamps, as the guest's own driver reports them -- authoritative, unlike
+     * counting key presses, because software inside the guest can toggle them on its own.
+     *
+     * Both are bitmasks over the Linux LED_* codes (1 << LED_NUML, 1 << LED_CAPSL,
+     * 1 << LED_SCROLLL). [known] says which lamps the guest has reported at all: until it changes
+     * one, its state is genuinely unknown here, because virtio-input has no way to ask.
+     */
+    void onLeds(int known, int on);
+}
diff --git a/app/src/main/cpp/unixhelper/unixhelper.c b/app/src/main/cpp/unixhelper/unixhelper.c
index af2d12854..f52959113 100644
--- a/app/src/main/cpp/unixhelper/unixhelper.c
+++ b/app/src/main/cpp/unixhelper/unixhelper.c
@@ -8,6 +8,8 @@
 #include <sys/socket.h>
 #include <sys/un.h>
 #include <linux/netlink.h>
+#include <linux/input.h>
+#include <sys/ioctl.h>
 #include <android/log.h>
 #include <android/log.h>
 #include <stdio.h>
@@ -326,3 +328,87 @@ JNI_PREFIX(nativeRead)(
     (*env)->ReleaseByteArrayElements(env, buf, bytes, n > 0 ? 0 : JNI_ABORT);
     return (jint) n;
 }
+
+
+/*
+ * evdev, for the physical-keyboard grab. A grabbed keyboard is the only way the keys Android
+ * keeps for itself -- Home, the task switcher, every Meta shortcut -- can reach a guest: EVIOCGRAB
+ * makes this descriptor the sole recipient of the device's events, so Android's InputReader keeps
+ * its own fd open and is simply never woken again. Reading and writing the fd is nativeRead /
+ * nativeWrite's job; only the parts that need an ioctl live here.
+ */
+
+JNIEXPORT jint JNICALL
+JNI_PREFIX(nativeEvdevOpen)(
+    JNIEnv *env, jclass clazz, jstring path
+) {
+    (void) clazz;
+    if (!path) return -1;
+    const char *cpath = (*env)->GetStringUTFChars(env, path, NULL);
+    if (!cpath) return -1;
+    // Read-write first because the LEDs (caps lock and friends) are written back to the same
+    // descriptor; a node that refuses it is still perfectly readable, and only the LEDs are lost.
+    int fd = open(cpath, O_RDWR | O_CLOEXEC);
+    if (fd < 0) fd = open(cpath, O_RDONLY | O_CLOEXEC);
+    if (fd < 0) LOGW("evdev open %s failed: %s", cpath, strerror(errno));
+    (*env)->ReleaseStringUTFChars(env, path, cpath);
+    return fd;
+}
+
+/* 0 on success, -errno otherwise. EBUSY means somebody else holds the grab. */
+JNIEXPORT jint JNICALL
+JNI_PREFIX(nativeEvdevGrab)(
+    JNIEnv *env, jclass clazz, jint fd, jboolean grab
+) {
+    (void) env;
+    (void) clazz;
+    int ret = ioctl(fd, EVIOCGRAB, grab ? 1 : 0);
+    if (ret < 0) return -errno;
+    return 0;
+}
+
+JNIEXPORT jstring JNICALL
+JNI_PREFIX(nativeEvdevName)(
+    JNIEnv *env, jclass clazz, jint fd
+) {
+    (void) clazz;
+    char name[256];
+    memset(name, 0, sizeof(name));
+    if (ioctl(fd, EVIOCGNAME(sizeof(name) - 1), name) < 0) return NULL;
+    return (*env)->NewStringUTF(env, name);
+}
+
+/* {bustype, vendor, product, version}, or null when the kernel would not say. */
+JNIEXPORT jintArray JNICALL
+JNI_PREFIX(nativeEvdevIds)(
+    JNIEnv *env, jclass clazz, jint fd
+) {
+    (void) clazz;
+    struct input_id id;
+    memset(&id, 0, sizeof(id));
+    if (ioctl(fd, EVIOCGID, &id) < 0) return NULL;
+    jintArray out = (*env)->NewIntArray(env, 4);
+    if (!out) return NULL;
+    jint vals[4] = {id.bustype, id.vendor, id.product, id.version};
+    (*env)->SetIntArrayRegion(env, out, 0, 4, vals);
+    return out;
+}
+
+/*
+ * The device's EV_KEY bitmap, one bit per key code, little-endian by byte -- what says whether
+ * this node is a keyboard at all rather than a lid switch or a touchscreen's button. Null when the
+ * ioctl fails.
+ */
+JNIEXPORT jbyteArray JNICALL
+JNI_PREFIX(nativeEvdevKeyBits)(
+    JNIEnv *env, jclass clazz, jint fd
+) {
+    (void) clazz;
+    unsigned char bits[(KEY_MAX / 8) + 1];
+    memset(bits, 0, sizeof(bits));
+    if (ioctl(fd, EVIOCGBIT(EV_KEY, sizeof(bits)), bits) < 0) return NULL;
+    jbyteArray out = (*env)->NewByteArray(env, (jsize) sizeof(bits));
+    if (!out) return NULL;
+    (*env)->SetByteArrayRegion(env, out, 0, (jsize) sizeof(bits), (const jbyte *) bits);
+    return out;
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/display/NativeDisplayBinder.java b/app/src/main/java/cn/classfun/droidvm/daemon/display/NativeDisplayBinder.java
index 649763cea..6d30df059 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/display/NativeDisplayBinder.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/display/NativeDisplayBinder.java
@@ -17,6 +17,7 @@
 
 import cn.classfun.droidvm.daemon.server.ServerContext;
 import cn.classfun.droidvm.display.INativeDisplayRootService;
+import cn.classfun.droidvm.display.IPhysicalKeyEcho;
 import cn.classfun.droidvm.lib.store.vm.NativeDisplay;
 import cn.classfun.droidvm.lib.store.vm.VMState;
 
@@ -70,6 +71,25 @@ public boolean writeInput(String vmId, String screenId, int channel, byte[] data
                 if (inst == null) return false;
                 return inst.writeNativeInput(screenId == null ? "" : screenId, channel, data);
             }
+
+            @Override
+            public int setKeyboardGrab(String vmId, String screenId, boolean grab,
+                                       IBinder token) {
+                var keyboard = ctx.getKeyboard();
+                var screen = screenId == null ? "" : screenId;
+                if (!grab || vmId == null || vmId.isEmpty()) {
+                    if (vmId != null && !vmId.isEmpty()) keyboard.releaseFor(vmId, screen);
+                    else keyboard.release("console released it");
+                    return 0;
+                }
+                return keyboard.request(vmId, screen, token);
+            }
+
+            @Override
+            public void setKeyEcho(String vmId, String screenId, IPhysicalKeyEcho echo) {
+                if (vmId == null || vmId.isEmpty()) return;
+                ctx.getKeyboard().setEcho(vmId, screenId == null ? "" : screenId, echo);
+            }
         };
     }
 
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/input/HostKeyboard.java b/app/src/main/java/cn/classfun/droidvm/daemon/input/HostKeyboard.java
new file mode 100644
index 000000000..4e3a49de1
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/input/HostKeyboard.java
@@ -0,0 +1,148 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
+package cn.classfun.droidvm.daemon.input;
+
+import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
+
+import android.util.Log;
+
+import androidx.annotation.NonNull;
+import androidx.annotation.Nullable;
+
+import org.json.JSONException;
+import org.json.JSONObject;
+
+import java.io.File;
+import java.util.ArrayList;
+import java.util.Arrays;
+import java.util.List;
+
+import cn.classfun.droidvm.lib.natives.UnixHelper;
+
+/**
+ * One {@code /dev/input/eventN} node that a person types on, as the grab needs to know it: where
+ * it is, what it calls itself, and what bus and ids it came in on.
+ *
+ * <p>A phone's input directory is mostly not keyboards -- a touchscreen, a lid switch, the power
+ * key, a headset's play button all live there and all carry EV_KEY -- so membership is decided by
+ * asking for the keys nothing but a typing keyboard has: {@code q}, {@code a}, {@code z}, space
+ * and enter. That test is why the phone's own volume rocker is never grabbed out from under
+ * Android, and why a Bluetooth keyboard is picked up whatever the vendor called it.</p>
+ *
+ * <p>The ids matter as much as the path, because the path is not stable: a Bluetooth keyboard
+ * that drops and reconnects comes back as whichever {@code eventN} is free, so what is re-grabbed
+ * is matched by name and vendor/product, not by node.</p>
+ */
+final class HostKeyboard {
+    private static final String TAG = "HostKeyboard";
+
+    static final String DEV_DIR = "/dev/input";
+    private static final String NODE_PREFIX = "event";
+
+    // linux/input-event-codes.h -- the keys the test asks for.
+    private static final int KEY_Q = 16;
+    private static final int KEY_A = 30;
+    private static final int KEY_Z = 44;
+    private static final int KEY_ENTER = 28;
+    private static final int KEY_SPACE = 57;
+    private static final int[] TYPING_KEYS = {KEY_Q, KEY_A, KEY_Z, KEY_ENTER, KEY_SPACE};
+
+    @NonNull
+    final String path;
+    @NonNull
+    final String name;
+    final int bus;
+    final int vendor;
+    final int product;
+
+    private HostKeyboard(@NonNull String path, @NonNull String name,
+                         int bus, int vendor, int product) {
+        this.path = path;
+        this.name = name;
+        this.bus = bus;
+        this.vendor = vendor;
+        this.product = product;
+    }
+
+    /**
+     * Every typing keyboard the host has right now, node order. Each node is opened to be asked
+     * what it is and closed again: nothing here holds a descriptor, so a scan can run while
+     * another one of these is grabbed without either disturbing the other.
+     */
+    @NonNull
+    static List<HostKeyboard> scan() {
+        var out = new ArrayList<HostKeyboard>();
+        var names = new File(DEV_DIR).list();
+        if (names == null) {
+            Log.w(TAG, fmt("cannot list %s; no physical keyboard will be found", DEV_DIR));
+            return out;
+        }
+        Arrays.sort(names);
+        for (var node : names) {
+            if (!node.startsWith(NODE_PREFIX)) continue;
+            var path = fmt("%s/%s", DEV_DIR, node);
+            int fd = UnixHelper.nativeEvdevOpen(path);
+            if (fd < 0) continue;
+            try {
+                var kb = describe(path, fd);
+                if (kb != null) out.add(kb);
+            } finally {
+                UnixHelper.nativeCloseFd(fd);
+            }
+        }
+        return out;
+    }
+
+    /** What [fd] is, or null when it is not a typing keyboard. */
+    @Nullable
+    static HostKeyboard describe(@NonNull String path, int fd) {
+        var bits = UnixHelper.nativeEvdevKeyBits(fd);
+        if (bits == null || !isTypingKeyboard(bits)) return null;
+        var name = UnixHelper.nativeEvdevName(fd);
+        var ids = UnixHelper.nativeEvdevIds(fd);
+        return new HostKeyboard(
+            path,
+            name == null ? "" : name.trim(),
+            ids == null ? 0 : ids[0],
+            ids == null ? 0 : ids[1],
+            ids == null ? 0 : ids[2]);
+    }
+
+    /** True when the EV_KEY bitmap holds every key a person types with. */
+    private static boolean isTypingKeyboard(@NonNull byte[] bits) {
+        for (var key : TYPING_KEYS)
+            if (!hasKey(bits, key)) return false;
+        return true;
+    }
+
+    private static boolean hasKey(@NonNull byte[] bits, int code) {
+        int index = code / 8;
+        return index < bits.length && (bits[index] & (1 << (code % 8))) != 0;
+    }
+
+    /**
+     * Whether [other] is this keyboard come back on a different node: same name, same vendor and
+     * product. The identity a re-grab after a Bluetooth reconnect is decided on.
+     */
+    boolean sameDevice(@NonNull HostKeyboard other) {
+        return name.equals(other.name) && vendor == other.vendor && product == other.product;
+    }
+
+    @NonNull
+    JSONObject toJson() throws JSONException {
+        var obj = new JSONObject();
+        obj.put("path", path);
+        obj.put("name", name);
+        obj.put("bus", fmt("%04x", bus));
+        obj.put("vendor", fmt("%04x", vendor));
+        obj.put("product", fmt("%04x", product));
+        return obj;
+    }
+
+    @NonNull
+    @Override
+    public String toString() {
+        return fmt("%s \"%s\" %04x:%04x", path, name, vendor, product);
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/input/KeyboardGrabConfig.java b/app/src/main/java/cn/classfun/droidvm/daemon/input/KeyboardGrabConfig.java
new file mode 100644
index 000000000..1032e48b9
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/input/KeyboardGrabConfig.java
@@ -0,0 +1,135 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
+package cn.classfun.droidvm.daemon.input;
+
+import static cn.classfun.droidvm.lib.utils.FileUtils.readFile;
+import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
+
+import android.system.Os;
+import android.util.Log;
+
+import androidx.annotation.NonNull;
+
+import org.json.JSONArray;
+import org.json.JSONException;
+import org.json.JSONObject;
+
+import java.io.File;
+import java.io.FileOutputStream;
+import java.io.IOException;
+import java.nio.charset.StandardCharsets;
+import java.util.ArrayList;
+import java.util.Collections;
+import java.util.List;
+
+/**
+ * {@code keyboard_grab.json}: whether the physical keyboard may be taken from Android for a guest,
+ * and the chord that hands it back.
+ *
+ * <p>The chord ships unbound on purpose. While a keyboard is grabbed Android sees none of it, so
+ * an escape has to be a combination the guest will never want either -- and which one that is
+ * depends on what the guest is, which is the user's to say once there is a page to say it on. The
+ * mechanism is here and armed; an empty chord simply never matches, and the way out until then is
+ * the same one that already exists: leave the display (touch), or switch the console to the system
+ * keyboard, both of which release the grab.</p>
+ */
+public final class KeyboardGrabConfig {
+    private static final String TAG = "KeyboardGrabConfig";
+    public static final String NAME = "keyboard_grab.json";
+
+    private static final String KEY_ENABLED = "enabled";
+    private static final String KEY_ESCAPE_CHORD = "escape_chord";
+
+    /**
+     * Whether a display console may ask for the grab at all. The switch a user who wants Android's
+     * shortcuts back for good reaches for; the console asks on every state change either way.
+     */
+    public final boolean enabled;
+
+    /**
+     * Linux {@code KEY_*} codes that must be held together to hand the keyboard back, in no
+     * particular order. Empty means nothing is bound (see the class note).
+     */
+    @NonNull
+    public final List<Integer> escapeChord;
+
+    public KeyboardGrabConfig(boolean enabled, @NonNull List<Integer> escapeChord) {
+        this.enabled = enabled;
+        this.escapeChord = Collections.unmodifiableList(new ArrayList<>(escapeChord));
+    }
+
+    @NonNull
+    public static KeyboardGrabConfig defaults() {
+        return new KeyboardGrabConfig(true, Collections.emptyList());
+    }
+
+    @NonNull
+    public static KeyboardGrabConfig fromJson(@NonNull JSONObject obj) {
+        var chord = new ArrayList<Integer>();
+        var arr = obj.optJSONArray(KEY_ESCAPE_CHORD);
+        if (arr != null) {
+            for (int i = 0; i < arr.length(); i++) {
+                int code = arr.optInt(i, -1);
+                // A code outside the evdev key range could never be pressed, and a chord holding
+                // one could never match: dropped rather than kept as a chord that cannot fire.
+                if (code > 0 && code <= 0x2ff && !chord.contains(code)) chord.add(code);
+            }
+        }
+        return new KeyboardGrabConfig(obj.optBoolean(KEY_ENABLED, true), chord);
+    }
+
+    @NonNull
+    public JSONObject toJson() throws JSONException {
+        var obj = new JSONObject();
+        obj.put(KEY_ENABLED, enabled);
+        var arr = new JSONArray();
+        for (var code : escapeChord) arr.put(code);
+        obj.put(KEY_ESCAPE_CHORD, arr);
+        return obj;
+    }
+
+    /** The saved settings, or the defaults when there is no file or it cannot be read. */
+    @NonNull
+    public static KeyboardGrabConfig load(@NonNull File file) {
+        if (!file.isFile()) return defaults();
+        try {
+            return fromJson(new JSONObject(readFile(file)));
+        } catch (Exception e) {
+            Log.w(TAG, fmt("Cannot read %s; using the defaults", file), e);
+            return defaults();
+        }
+    }
+
+    /**
+     * Writes next to the target and renames, so a reader never sees half a file, and leaves it to
+     * the owner of the directory -- the daemon runs as root and the UI does not, and a root-owned
+     * file in the app's directory is one the UI could neither read nor replace.
+     */
+    @SuppressWarnings("OctalInteger")
+    public void save(@NonNull File file) throws IOException {
+        var parent = file.getParentFile();
+        if (parent == null || !parent.isDirectory())
+            throw new IOException(fmt("no directory for %s", file));
+        var staging = new File(parent, fmt("%s.tmp", file.getName()));
+        try {
+            var text = toJson().toString(2);
+            try (var out = new FileOutputStream(staging)) {
+                out.write(text.getBytes(StandardCharsets.UTF_8));
+                out.getFD().sync();
+            }
+            var owner = Os.stat(parent.getPath());
+            Os.chmod(staging.getPath(), 0600);
+            Os.chown(staging.getPath(), owner.st_uid, owner.st_gid);
+            if (!staging.renameTo(file))
+                throw new IOException(fmt("cannot replace %s", file));
+        } catch (IOException e) {
+            throw e;
+        } catch (Exception e) {
+            throw new IOException(e.getMessage(), e);
+        } finally {
+            //noinspection ResultOfMethodCallIgnored
+            staging.delete();
+        }
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/input/KeyboardGrabManager.java b/app/src/main/java/cn/classfun/droidvm/daemon/input/KeyboardGrabManager.java
new file mode 100644
index 000000000..7fed00644
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/input/KeyboardGrabManager.java
@@ -0,0 +1,782 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
+package cn.classfun.droidvm.daemon.input;
+
+import static cn.classfun.droidvm.lib.Constants.DATA_DIR;
+import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
+import static cn.classfun.droidvm.lib.utils.StringUtils.pathJoin;
+
+import android.os.IBinder;
+import android.util.Log;
+
+import androidx.annotation.NonNull;
+import androidx.annotation.Nullable;
+
+import org.json.JSONArray;
+import org.json.JSONException;
+import org.json.JSONObject;
+
+import java.io.File;
+import java.io.IOException;
+import java.nio.ByteBuffer;
+import java.nio.ByteOrder;
+import java.nio.charset.StandardCharsets;
+import java.util.ArrayList;
+import java.util.Arrays;
+import java.util.LinkedHashMap;
+import java.util.Map;
+
+import cn.classfun.droidvm.daemon.server.ServerContext;
+import cn.classfun.droidvm.display.IPhysicalKeyEcho;
+import cn.classfun.droidvm.daemon.vm.VMInstance;
+import cn.classfun.droidvm.lib.natives.UnixHelper;
+import cn.classfun.droidvm.lib.store.vm.NativeDisplay;
+import cn.classfun.droidvm.lib.store.vm.VMState;
+
+/**
+ * Takes the host's physical keyboards away from Android ({@code EVIOCGRAB}) and feeds their raw
+ * evdev to a guest, for as long as a display console asks for it.
+ *
+ * <p>Why a grab rather than the key events the console already forwards: Android decides what an
+ * Activity is allowed to see <em>before</em> the Activity sees it. Home, the task switcher,
+ * Alt+Tab and the Meta shortcuts are taken by the window manager and never dispatched, so a guest
+ * fed from {@code dispatchKeyEvent} can never be sent them, however the console is written. A
+ * grabbed descriptor is the only recipient the kernel's input core hands the device's events to:
+ * Android's InputReader keeps its own descriptor open and is simply never woken again, and every
+ * key -- including the ones the system would have kept -- arrives here instead, as scan codes,
+ * with no key layout in between.</p>
+ *
+ * <p>What that costs is the reason it is not simply always on: while the grab is held, that
+ * keyboard cannot type into Android at all, the IME included. So the console asks for the grab
+ * only while it is in front and its typing surface is one that wants no IME (see
+ * {@code KeyboardMode}); switching the console to the system keyboard releases it, which is what
+ * keeps Chinese and every other IME-composed input working exactly as before. Leaving the display
+ * releases it too, and so does the death of the console's binder token, so no crash can leave the
+ * user holding a keyboard that types nowhere.</p>
+ *
+ * <p>A console that asked stays armed even when it holds nothing: a Bluetooth keyboard drops and
+ * comes back as whichever {@code eventN} is free, and the kernel's uevent socket is what says so.
+ * The keys reach the guest through the same per-screen keyboard socket the console's on-screen
+ * keys use -- this daemon is the only writer either way -- so nothing downstream has to know
+ * where a key came from.</p>
+ */
+public final class KeyboardGrabManager {
+    private static final String TAG = "KeyboardGrab";
+
+    /** {@code struct input_event} on this ABI: 16 bytes of timeval, then type, code, value. */
+    private static final int EVENT_SIZE = 24;
+    private static final int EVENT_TYPE_OFFSET = 16;
+    /** How many events one read may return; a burst of typing is a handful. */
+    private static final int READ_EVENTS = 64;
+
+    private static final short EV_SYN = 0x00;
+    private static final short EV_KEY = 0x01;
+    private static final short EV_LED = 0x11;
+    private static final short SYN_REPORT = 0x00;
+    /** The lamps a keyboard has: LED_NUML, LED_CAPSL, LED_SCROLLL. */
+    private static final int LED_COUNT = 3;
+
+    private static final int KEY_UP = 0;
+    private static final int KEY_DOWN = 1;
+    /** Auto-repeat, generated by the host's input core; see {@link #onEvents}. */
+    private static final int KEY_REPEAT = 2;
+
+    /** Codes run 0..KEY_MAX; the pressed set is one flag each. */
+    private static final int KEY_COUNT = 0x300;
+
+    /** Bytes one uevent datagram may take; the kernel's own limit is smaller. */
+    private static final int UEVENT_BUFFER = 4096;
+    /**
+     * How long the uevent reader waits after a message before rescanning. A keyboard arrives as
+     * several messages (the device, then its handlers), and a reconnecting Bluetooth keyboard as
+     * a remove followed by an add -- one scan once the batch settles is both cheaper and calmer
+     * than one per message.
+     */
+    private static final int RESCAN_DEBOUNCE_MS = 200;
+    private static final String UEVENT_SUBSYSTEM_INPUT = "SUBSYSTEM=input";
+    /** How long a stopping reader is waited for before the release stops caring. */
+    private static final long READER_JOIN_MS = 500;
+
+    /** Where the keys go while a console holds the keyboard. */
+    private static final class Target {
+        @NonNull
+        final String vmId;
+        @NonNull
+        final String screenId;
+        @Nullable
+        final IBinder token;
+        @Nullable
+        IBinder.DeathRecipient death;
+        /** The console's copy of the keys and lamps; null when it has nothing to show. */
+        @Nullable
+        volatile IPhysicalKeyEcho echo;
+
+        Target(@NonNull String vmId, @NonNull String screenId, @Nullable IBinder token) {
+            this.vmId = vmId;
+            this.screenId = screenId;
+            this.token = token;
+        }
+    }
+
+    /** One grabbed keyboard: the descriptor, the thread reading it, and what it holds down. */
+    private final class Grab {
+        @NonNull
+        final HostKeyboard device;
+        final int fd;
+        final int wakeReadFd;
+        final int wakeWriteFd;
+        final boolean[] pressed = new boolean[KEY_COUNT];
+        /** Set by whoever is taking this grab down, so the reader knows its exit is expected. */
+        volatile boolean stopping;
+        Thread thread;
+
+        Grab(@NonNull HostKeyboard device, int fd, int wakeReadFd, int wakeWriteFd) {
+            this.device = device;
+            this.fd = fd;
+            this.wakeReadFd = wakeReadFd;
+            this.wakeWriteFd = wakeWriteFd;
+        }
+
+        void run() {
+            var buffer = new byte[EVENT_SIZE * READ_EVENTS];
+            while (!stopping) {
+                int ready;
+                try {
+                    ready = UnixHelper.nativePollIn2(fd, wakeReadFd, -1);
+                } catch (Throwable e) {
+                    Log.w(TAG, fmt("poll failed on %s", device), e);
+                    break;
+                }
+                // The wake pipe, an error, or a hangup: a keyboard that went away hangs up here
+                // and its node is gone with it, so there is nothing to retry.
+                if (ready < 0 || (ready & 2) != 0) break;
+                if ((ready & 1) == 0) continue;
+                int n = UnixHelper.nativeRead(fd, buffer, buffer.length);
+                if (n <= 0) {
+                    if (!stopping)
+                        Log.i(TAG, fmt("%s stopped reporting (read=%d); dropped", device, n));
+                    break;
+                }
+                onEvents(this, buffer, n);
+            }
+            // The ungrab belongs to this thread: it is the one that can promise nothing is being
+            // read out of the descriptor as it goes back to Android.
+            UnixHelper.nativeEvdevGrab(fd, false);
+            UnixHelper.nativeCloseFd(fd);
+            UnixHelper.nativeCloseFd(wakeReadFd);
+            UnixHelper.nativeCloseFd(wakeWriteFd);
+            // A reader that stopped on its own is one the manager still lists; one that was told
+            // to stop has already been taken off the list by the release, and must not touch the
+            // lock the release is holding while it joins this thread.
+            if (!stopping) forget(this);
+        }
+
+        void wake() {
+            stopping = true;
+            UnixHelper.nativeWrite(wakeWriteFd, new byte[]{1}, 1);
+        }
+    }
+
+    /** The uevent watcher's descriptors, owned by its own thread so a stop needs no join. */
+    private static final class Watcher {
+        final int fd;
+        final int wakeReadFd;
+        final int wakeWriteFd;
+        volatile boolean stopping;
+
+        Watcher(int fd, int wakeReadFd, int wakeWriteFd) {
+            this.fd = fd;
+            this.wakeReadFd = wakeReadFd;
+            this.wakeWriteFd = wakeWriteFd;
+        }
+    }
+
+    @NonNull
+    private final ServerContext ctx;
+    @NonNull
+    private final File configFile = new File(pathJoin(DATA_DIR, "files"), KeyboardGrabConfig.NAME);
+    private final Object lock = new Object();
+
+    /** Read without the lock by every reader thread, so the delivery target is volatile. */
+    @Nullable
+    private volatile Target target;
+    private final Map<String, Grab> grabs = new LinkedHashMap<>();
+    @NonNull
+    private volatile KeyboardGrabConfig config;
+    @Nullable
+    private Watcher watcher;
+    /**
+     * The guest's keyboard lamps: which ones it has ever reported, and their state. virtio-input
+     * has no way to ask, so a lamp is genuinely unknown until the guest changes it -- and what is
+     * known is the guest's own view, which is the only correct one, since software in the guest
+     * can toggle caps lock with no key involved.
+     */
+    private volatile int ledKnown;
+    private volatile int ledOn;
+
+    public KeyboardGrabManager(@NonNull ServerContext ctx) {
+        this.ctx = ctx;
+        this.config = KeyboardGrabConfig.load(configFile);
+    }
+
+    @NonNull
+    public KeyboardGrabConfig getConfig() {
+        return config;
+    }
+
+    /**
+     * Replaces the settings and writes them back. Turning the feature off releases whatever is
+     * held right now, because a switch that only applied to the next console would leave the
+     * keyboard taken by the one already up.
+     */
+    public void setConfig(@NonNull KeyboardGrabConfig newConfig) throws IOException {
+        newConfig.save(configFile);
+        config = newConfig;
+        if (!newConfig.enabled) release("disabled");
+    }
+
+    /**
+     * Puts [vmId]'s [screenId] console in charge of the physical keyboards and grabs the ones
+     * that are attached. [token] is the caller's binder: the grab is dropped if it dies, so a
+     * console that crashed cannot leave the user without a keyboard. Returns how many keyboards
+     * are held -- zero means armed and holding nothing yet, because the guest is not running or
+     * no keyboard is attached, and both of those are answered later: by the VM state hook and by
+     * the uevent watcher.
+     */
+    public int request(@NonNull String vmId, @NonNull String screenId, @Nullable IBinder token) {
+        if (!config.enabled) return 0;
+        var vm = ctx.getVMs().findById(vmId);
+        if (vm == null) return 0;
+        synchronized (lock) {
+            var current = target;
+            // The same console asking again is the grab it already has; a different VM or screen
+            // takes it over, because only one console can be the one in front.
+            if (current != null
+                && (!current.vmId.equals(vmId) || !current.screenId.equals(screenId)))
+                releaseLocked("taken over by another console");
+            if (target == null) {
+                var t = new Target(vmId, screenId, token);
+                if (!linkToken(t)) return 0;
+                target = t;
+                Log.i(TAG, fmt("console for VM %s screen %s has the keyboard", vmId, screenId));
+            }
+            // A console is usually up before the guest is: it is what starts the VM. So arming
+            // is not conditional on the VM running -- the keys are simply not taken until it is,
+            // and the state hook below grabs them the moment it gets there. Taking a keyboard
+            // away from Android any earlier would swallow keys with nowhere to put them.
+            if (vm.getState() == VMState.RUNNING) grabMissingLocked();
+            startWatcherLocked();
+            return grabs.size();
+        }
+    }
+
+    /**
+     * Releases only if [vmId]'s [screenId] console is the one holding the keyboard. A console
+     * that has just gone to the background says so after the one arriving has already asked --
+     * Android starts the incoming Activity before it stops the outgoing one -- so an unconditional
+     * release here would take the keyboard away from whoever is now in front.
+     */
+    public boolean releaseFor(@NonNull String vmId, @NonNull String screenId) {
+        synchronized (lock) {
+            var current = target;
+            if (current == null
+                || !current.vmId.equals(vmId) || !current.screenId.equals(screenId)) return false;
+            releaseLocked("console released it");
+            return true;
+        }
+    }
+
+    /**
+     * Registers the console's copy of the keys and lamps, or clears it with null. Only the console
+     * that holds the keyboard is heard: a page that is no longer in front must not keep a feed of
+     * what is being typed into the guest. Answers with the lamps as they stand, so a console that
+     * has just registered does not have to wait for the next change to draw them.
+     */
+    public void setEcho(@NonNull String vmId, @NonNull String screenId,
+                        @Nullable IPhysicalKeyEcho echo) {
+        var current = target;
+        if (current == null
+            || !current.vmId.equals(vmId) || !current.screenId.equals(screenId)) return;
+        current.echo = echo;
+        if (echo != null) sendLeds(echo);
+    }
+
+    /** Hands every grabbed keyboard back to Android. Safe to call when nothing is held. */
+    public void release(@NonNull String reason) {
+        synchronized (lock) {
+            releaseLocked(reason);
+        }
+    }
+
+    /**
+     * VM state hook, called from every transition. A guest that stopped, rebooted or crashed has
+     * no keyboard socket any more and its console is about to go: the keys go back to Android on
+     * that edge, rather than after the next keypress finds nowhere to put itself.
+     */
+    public void onVmState(@NonNull VMInstance vm, @NonNull VMState state) {
+        var current = target;
+        if (current == null || !current.vmId.equals(vm.getId().toString())) return;
+        synchronized (lock) {
+            // Re-read under the lock: a release may have won the race to it.
+            var armed = target;
+            if (armed == null || !armed.vmId.equals(vm.getId().toString())) return;
+            if (state == VMState.RUNNING) {
+                // The guest the console armed for is up -- including after a guest reboot, which
+                // is why this is not only the first start.
+                grabMissingLocked();
+                return;
+            }
+            var reason = fmt("VM %s is %s", vm.getName(), state.name().toLowerCase());
+            if (armed.token != null) {
+                // A console is still in front of a guest that will very likely be back (a reboot
+                // is a stop and a start): the keys go to Android meanwhile, and the console stays
+                // armed. Its token is what ends this if the console goes instead.
+                dropGrabsLocked(reason);
+                ledKnown = 0;
+                ledOn = 0;
+                var echo = armed.echo;
+                if (echo != null) sendLeds(echo);
+            } else {
+                // Nobody's console: a grab taken over IPC has no token to end it, so the VM
+                // leaving RUNNING is what does.
+                releaseLocked(reason);
+            }
+        }
+    }
+
+    /** What a settings page or the CLI shows: the settings, what is held, and what is there. */
+    @NonNull
+    public JSONObject status() throws JSONException {
+        var obj = new JSONObject();
+        obj.put("config", config.toJson());
+        var current = target;
+        obj.put("armed", current != null);
+        if (current != null) {
+            obj.put("vm_id", current.vmId);
+            obj.put("screen", current.screenId);
+        }
+        var held = new JSONArray();
+        var heldPaths = new ArrayList<String>();
+        synchronized (lock) {
+            for (var grab : grabs.values()) {
+                held.put(grab.device.toJson());
+                heldPaths.add(grab.device.path);
+            }
+        }
+        obj.put("held", held);
+        // The guest's lamps, and which of them it has said anything about at all.
+        var leds = new JSONObject();
+        leds.put("known", ledKnown);
+        leds.put("on", ledOn);
+        leds.put("num", (ledKnown & 1) == 0 ? JSONObject.NULL : ((ledOn & 1) != 0));
+        leds.put("caps", (ledKnown & 2) == 0 ? JSONObject.NULL : ((ledOn & 2) != 0));
+        leds.put("scroll", (ledKnown & 4) == 0 ? JSONObject.NULL : ((ledOn & 4) != 0));
+        obj.put("leds", leds);
+        // Everything the host has, so a page can say which keyboard is not being taken.
+        var available = new JSONArray();
+        for (var kb : HostKeyboard.scan()) {
+            var entry = kb.toJson();
+            entry.put("held", heldPaths.contains(kb.path));
+            available.put(entry);
+        }
+        obj.put("keyboards", available);
+        return obj;
+    }
+
+    // ---- grabbing ---------------------------------------------------------------------------
+
+    /** Grabs every keyboard not already held. Caller holds {@link #lock}. */
+    private int grabMissingLocked() {
+        int taken = 0;
+        for (var kb : HostKeyboard.scan()) {
+            if (grabs.containsKey(kb.path)) continue;
+            if (grabOneLocked(kb)) taken++;
+        }
+        return taken;
+    }
+
+    private boolean grabOneLocked(@NonNull HostKeyboard kb) {
+        int fd = UnixHelper.nativeEvdevOpen(kb.path);
+        if (fd < 0) {
+            Log.w(TAG, fmt("cannot open %s", kb));
+            return false;
+        }
+        int rc = UnixHelper.nativeEvdevGrab(fd, true);
+        if (rc != 0) {
+            // EBUSY is somebody else holding this keyboard exclusively; nothing to do but leave
+            // it to them and carry on with the rest.
+            Log.w(TAG, fmt("cannot grab %s: errno=%d", kb, -rc));
+            UnixHelper.nativeCloseFd(fd);
+            return false;
+        }
+        var wake = UnixHelper.nativePipe();
+        if (wake == null || wake.length != 2) {
+            Log.w(TAG, fmt("no wake pipe for %s; leaving it to Android", kb));
+            UnixHelper.nativeEvdevGrab(fd, false);
+            UnixHelper.nativeCloseFd(fd);
+            return false;
+        }
+        var grab = new Grab(kb, fd, wake[0], wake[1]);
+        var thread = new Thread(grab::run, fmt("kbd-grab-%s", new File(kb.path).getName()));
+        thread.setDaemon(true);
+        grab.thread = thread;
+        grabs.put(kb.path, grab);
+        thread.start();
+        // A keyboard that joined late (or came back after a Bluetooth drop) starts with the lamps
+        // the guest has already told us about, rather than whatever Android left them at.
+        writeLeds(grab);
+        Log.i(TAG, fmt("grabbed %s for the guest", kb));
+        return true;
+    }
+
+    /**
+     * Hands every grabbed keyboard back to Android but leaves the console armed. Caller holds
+     * {@link #lock}.
+     */
+    private void dropGrabsLocked(@NonNull String reason) {
+        if (grabs.isEmpty()) return;
+        // Key-ups first, while the target is still there: a modifier that went down through the
+        // grab and never came up leaves the guest with a Ctrl held forever, outliving both the
+        // grab and the console.
+        for (var grab : grabs.values()) releaseHeldKeys(grab);
+        var pending = new ArrayList<>(grabs.values());
+        grabs.clear();
+        for (var grab : pending) grab.wake();
+        for (var grab : pending) {
+            // Never join the thread we are on: the escape chord releases from inside its own
+            // reader, and that thread ends by itself as soon as this returns.
+            if (grab.thread == null || grab.thread == Thread.currentThread()) continue;
+            try {
+                grab.thread.join(READER_JOIN_MS);
+            } catch (InterruptedException e) {
+                Thread.currentThread().interrupt();
+            }
+        }
+        Log.i(TAG, fmt("keyboard back to Android (%s)", reason));
+    }
+
+    /** The grabs and the console that asked for them. Caller holds {@link #lock}. */
+    private void releaseLocked(@NonNull String reason) {
+        var current = target;
+        if (current == null && grabs.isEmpty()) return;
+        dropGrabsLocked(reason);
+        target = null;
+        // The lamps were the guest's, and the next console may be looking at another guest.
+        ledKnown = 0;
+        ledOn = 0;
+        unlinkToken(current);
+        stopWatcherLocked();
+    }
+
+    /** A reader that ended on its own -- its keyboard went away -- is taken off the list. */
+    private void forget(@NonNull Grab grab) {
+        synchronized (lock) {
+            grabs.remove(grab.device.path, grab);
+        }
+        // The console stays armed: a Bluetooth keyboard that dropped is expected back, and the
+        // watcher is what grabs it again when it is.
+    }
+
+    /**
+     * What the guest said about its keyboard, off the status queue crosvm writes back onto the
+     * input socket: the caps/num/scroll lamps. Two things happen with it -- the lamp on the real
+     * keyboard is set to match (the grabbed descriptor is opened read-write for exactly this), and
+     * the console is told so it can draw the state.
+     *
+     * <p>Reading this at all also drains a socket the daemon used to only write to; the records
+     * had nowhere to go and sat in its buffer.</p>
+     */
+    public void onGuestStatus(@NonNull String vmId, @NonNull String screenId,
+                              @NonNull byte[] records) {
+        var current = target;
+        if (current == null
+            || !current.vmId.equals(vmId) || !current.screenId.equals(screenId)) return;
+        var in = ByteBuffer.wrap(records).order(ByteOrder.LITTLE_ENDIAN);
+        int known = ledKnown;
+        int on = ledOn;
+        boolean changed = false;
+        for (int offset = 0; offset + 8 <= records.length; offset += 8) {
+            short type = in.getShort(offset);
+            short code = in.getShort(offset + 2);
+            int value = in.getInt(offset + 4);
+            // EV_REP (the guest's repeat delay and period) also arrives here and is the host
+            // keyboard's own business, not ours: the guest repeats for itself, see onEvents.
+            if (type != EV_LED || code < 0 || code >= LED_COUNT) continue;
+            int bit = 1 << code;
+            known |= bit;
+            int next = value != 0 ? (on | bit) : (on & ~bit);
+            if (next != on || (known != ledKnown)) changed = true;
+            on = next;
+        }
+        if (!changed) return;
+        ledKnown = known;
+        ledOn = on;
+        Log.i(TAG, fmt("guest lamps: num=%s caps=%s scroll=%s",
+            lampText(known, on, 1), lampText(known, on, 2), lampText(known, on, 4)));
+        synchronized (lock) {
+            for (var grab : grabs.values()) writeLeds(grab);
+        }
+        var echo = current.echo;
+        if (echo != null) sendLeds(echo);
+    }
+
+    private static String lampText(int known, int on, int bit) {
+        if ((known & bit) == 0) return "?";
+        return (on & bit) != 0 ? "on" : "off";
+    }
+
+    /** Sets [grab]'s lamps to the guest's state, as far as the guest has said what it is. */
+    private void writeLeds(@NonNull Grab grab) {
+        int known = ledKnown;
+        if (known == 0) return;
+        var out = ByteBuffer.allocate(EVENT_SIZE * (LED_COUNT + 1)).order(ByteOrder.LITTLE_ENDIAN);
+        for (int code = 0; code < LED_COUNT; code++) {
+            if ((known & (1 << code)) == 0) continue;
+            putInputEvent(out, EV_LED, (short) code, (ledOn & (1 << code)) != 0 ? 1 : 0);
+        }
+        if (out.position() == 0) return;
+        putInputEvent(out, EV_SYN, SYN_REPORT, 0);
+        var bytes = Arrays.copyOf(out.array(), out.position());
+        UnixHelper.nativeWrite(grab.fd, bytes, bytes.length);
+    }
+
+    /** One {@code struct input_event}: an empty timeval, then type, code, value. */
+    private static void putInputEvent(@NonNull ByteBuffer out, short type, short code, int value) {
+        out.putLong(0).putLong(0);
+        out.putShort(type).putShort(code).putInt(value);
+    }
+
+    private void sendLeds(@NonNull IPhysicalKeyEcho echo) {
+        try {
+            echo.onLeds(ledKnown, ledOn);
+        } catch (Exception e) {
+            Log.d(TAG, "console echo refused the lamps", e);
+        }
+    }
+
+    // ---- events -----------------------------------------------------------------------------
+
+    /**
+     * Turns one read of {@code struct input_event}s into the 8-byte records crosvm's socket wants
+     * and sends them on. Auto-repeat is dropped: the host's input core generates it for a key
+     * held down and the guest's does the same for the virtio keyboard, so forwarding it would
+     * repeat every held key twice over.
+     */
+    private void onEvents(@NonNull Grab grab, @NonNull byte[] buffer, int length) {
+        var in = ByteBuffer.wrap(buffer, 0, length).order(ByteOrder.LITTLE_ENDIAN);
+        var out = ByteBuffer.allocate(8 * (length / EVENT_SIZE)).order(ByteOrder.LITTLE_ENDIAN);
+        // The console's copy, collected alongside: same keys, same order, sent after the guest's.
+        var echoCodes = new int[length / EVENT_SIZE];
+        var echoValues = new int[echoCodes.length];
+        int echoCount = 0;
+        boolean escape = false;
+        for (int offset = 0; offset + EVENT_SIZE <= length; offset += EVENT_SIZE) {
+            short type = in.getShort(offset + EVENT_TYPE_OFFSET);
+            short code = in.getShort(offset + EVENT_TYPE_OFFSET + 2);
+            int value = in.getInt(offset + EVENT_TYPE_OFFSET + 4);
+            if (type == EV_KEY) {
+                if (value == KEY_REPEAT) continue;
+                if (code >= 0 && code < KEY_COUNT) {
+                    synchronized (grab.pressed) {
+                        grab.pressed[code] = value != KEY_UP;
+                    }
+                    if (value == KEY_DOWN && chordHeld(grab)) {
+                        // The chord is the user talking to us, not to the guest: the key that
+                        // completed it is not forwarded, and the keys already down are lifted by
+                        // the release itself.
+                        escape = true;
+                        break;
+                    }
+                }
+                out.putShort(type).putShort(code).putInt(value);
+                echoCodes[echoCount] = code;
+                echoValues[echoCount] = value;
+                echoCount++;
+            } else if (type == EV_SYN && code == SYN_REPORT) {
+                // A frame with nothing in it is not worth a write: the guest reads events, and
+                // the next real one brings its own SYN.
+                if (out.position() > 0) out.putShort(type).putShort(code).putInt(value);
+            }
+            // Everything else (EV_MSC scan codes, LED echoes, the device's own repeat settings)
+            // is host bookkeeping the guest keeps its own copy of.
+        }
+        if (out.position() > 0) deliver(Arrays.copyOf(out.array(), out.position()));
+        // After the guest, always: what a console does with these must not be in the way of
+        // typing. Oneway, so this returns before the console has looked at them.
+        if (echoCount > 0) {
+            var current = target;
+            var echo = current == null ? null : current.echo;
+            if (echo != null) {
+                try {
+                    echo.onKeys(Arrays.copyOf(echoCodes, echoCount),
+                        Arrays.copyOf(echoValues, echoCount));
+                } catch (Exception e) {
+                    // A console that has gone: stop echoing rather than throwing every keypress.
+                    current.echo = null;
+                    Log.d(TAG, "console echo is gone; keys stay between the daemon and the guest");
+                }
+            }
+        }
+        if (escape) {
+            // Off this thread: the release joins reader threads, and this is one of them.
+            var t = new Thread(() -> release("escape chord"), "kbd-grab-escape");
+            t.setDaemon(true);
+            t.start();
+        }
+    }
+
+    /** True when every key of the escape chord is down on [grab] right now. */
+    private boolean chordHeld(@NonNull Grab grab) {
+        var chord = config.escapeChord;
+        if (chord.isEmpty()) return false;
+        synchronized (grab.pressed) {
+            for (var code : chord) {
+                if (code < 0 || code >= KEY_COUNT || !grab.pressed[code]) return false;
+            }
+        }
+        return true;
+    }
+
+    /** Sends an up for every key [grab] is holding, so nothing is left down in the guest. */
+    private void releaseHeldKeys(@NonNull Grab grab) {
+        var out = ByteBuffer.allocate(8 * (KEY_COUNT + 1)).order(ByteOrder.LITTLE_ENDIAN);
+        synchronized (grab.pressed) {
+            for (int code = 0; code < KEY_COUNT; code++) {
+                if (!grab.pressed[code]) continue;
+                grab.pressed[code] = false;
+                out.putShort(EV_KEY).putShort((short) code).putInt(KEY_UP);
+            }
+        }
+        if (out.position() == 0) return;
+        out.putShort(EV_SYN).putShort(SYN_REPORT).putInt(0);
+        deliver(Arrays.copyOf(out.array(), out.position()));
+    }
+
+    /** Hands finished records to the guest's keyboard, or drops them if the target has gone. */
+    private void deliver(@NonNull byte[] records) {
+        var current = target;
+        if (current == null) return;
+        var vm = ctx.getVMs().findById(current.vmId);
+        if (vm == null) return;
+        vm.writeNativeInput(current.screenId, NativeDisplay.KEYBOARD, records);
+    }
+
+    // ---- the console's token ----------------------------------------------------------------
+
+    /** False when the token is already dead, which is a console not worth arming for. */
+    private boolean linkToken(@NonNull Target t) {
+        if (t.token == null) return true;
+        t.death = () -> release("console gone");
+        try {
+            t.token.linkToDeath(t.death, 0);
+            return true;
+        } catch (Exception e) {
+            Log.w(TAG, "console token is already dead; not arming", e);
+            t.death = null;
+            return false;
+        }
+    }
+
+    private void unlinkToken(@Nullable Target t) {
+        if (t == null || t.token == null || t.death == null) return;
+        try {
+            t.token.unlinkToDeath(t.death, 0);
+        } catch (Exception ignored) {
+            // Already dead, which is the one case the recipient has done its job for.
+        }
+        t.death = null;
+    }
+
+    // ---- hotplug ----------------------------------------------------------------------------
+
+    /**
+     * Watches the kernel's uevent socket while a console is armed, so a Bluetooth keyboard that
+     * drops and reconnects -- coming back as whatever {@code eventN} is free -- is grabbed again
+     * instead of typing into Android behind the console's back. Best effort: without it the grab
+     * covers the keyboards that were there when the console asked, and no more.
+     */
+    private void startWatcherLocked() {
+        if (watcher != null) return;
+        int fd;
+        int[] wake;
+        try {
+            fd = UnixHelper.nativeUeventOpen();
+            if (fd < 0) {
+                Log.w(TAG, "no uevent socket; a keyboard that reconnects will not be re-grabbed");
+                return;
+            }
+            wake = UnixHelper.nativePipe();
+        } catch (Throwable e) {
+            Log.w(TAG, "no uevent socket; a keyboard that reconnects will not be re-grabbed", e);
+            return;
+        }
+        if (wake == null || wake.length != 2) {
+            UnixHelper.nativeCloseFd(fd);
+            return;
+        }
+        var w = new Watcher(fd, wake[0], wake[1]);
+        watcher = w;
+        var thread = new Thread(() -> readUevents(w), "kbd-grab-uevent");
+        thread.setDaemon(true);
+        thread.start();
+    }
+
+    /**
+     * Tells the watcher to stop and forgets it. Deliberately no join: the watcher's rescan wants
+     * this same lock, and waiting for it here -- from inside the lock -- would stall every
+     * release by however long the scan takes. The thread owns its descriptors and closes them.
+     */
+    private void stopWatcherLocked() {
+        var w = watcher;
+        if (w == null) return;
+        watcher = null;
+        w.stopping = true;
+        UnixHelper.nativeWrite(w.wakeWriteFd, new byte[]{1}, 1);
+    }
+
+    private void readUevents(@NonNull Watcher w) {
+        var buffer = new byte[UEVENT_BUFFER];
+        boolean pending = false;
+        while (!w.stopping) {
+            int ready;
+            try {
+                ready = UnixHelper.nativePollIn2(
+                    w.fd, w.wakeReadFd, pending ? RESCAN_DEBOUNCE_MS : -1);
+            } catch (Throwable e) {
+                Log.w(TAG, "uevent poll failed; hotplug re-grab is off for this console", e);
+                break;
+            }
+            if (ready < 0 || (ready & 2) != 0) break;
+            if (ready == 0) {
+                // The batch settled: one scan for all of it.
+                pending = false;
+                rescan(w);
+                continue;
+            }
+            if ((ready & 1) == 0) continue;
+            int n = UnixHelper.nativeRead(w.fd, buffer, buffer.length);
+            if (n <= 0) continue;
+            if (mentionsInput(buffer, n)) pending = true;
+        }
+        UnixHelper.nativeCloseFd(w.fd);
+        UnixHelper.nativeCloseFd(w.wakeReadFd);
+        UnixHelper.nativeCloseFd(w.wakeWriteFd);
+    }
+
+    /** A uevent datagram is NUL-separated {@code KEY=VALUE}s; only the input ones are ours. */
+    private static boolean mentionsInput(@NonNull byte[] buffer, int length) {
+        return new String(buffer, 0, length, StandardCharsets.UTF_8)
+            .contains(UEVENT_SUBSYSTEM_INPUT);
+    }
+
+    /** Grabs keyboards that appeared since the console asked. */
+    private void rescan(@NonNull Watcher w) {
+        synchronized (lock) {
+            // The release that retired this watcher may have won the race to the lock.
+            if (w.stopping || watcher != w || target == null) return;
+            int taken = grabMissingLocked();
+            if (taken > 0) Log.i(TAG, fmt("%d keyboard(s) joined the grab", taken));
+        }
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/ipc/input/KeyboardConfigHandler.java b/app/src/main/java/cn/classfun/droidvm/daemon/ipc/input/KeyboardConfigHandler.java
new file mode 100644
index 000000000..a0b84a4b5
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/ipc/input/KeyboardConfigHandler.java
@@ -0,0 +1,50 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
+package cn.classfun.droidvm.daemon.ipc.input;
+
+import androidx.annotation.NonNull;
+
+import com.google.auto.service.AutoService;
+
+import java.util.ArrayList;
+
+import cn.classfun.droidvm.daemon.input.KeyboardGrabConfig;
+import cn.classfun.droidvm.daemon.server.ClientRequest;
+import cn.classfun.droidvm.daemon.server.RequestHandler;
+import cn.classfun.droidvm.lib.utils.JsonUtils;
+
+/**
+ * Changes the grab's settings and writes them back. Params, both optional so a caller can change
+ * one without knowing the other: {@code enabled} (bool) and {@code escape_chord} (array of Linux
+ * {@code KEY_*} codes, all of which must be held to hand the keyboard back; empty binds nothing).
+ * Answers with the same picture {@code kbd_status} gives.
+ */
+@AutoService(RequestHandler.class)
+public final class KeyboardConfigHandler extends RequestHandler {
+    @NonNull
+    @Override
+    public String getName() {
+        return "kbd_config";
+    }
+
+    @Override
+    public void handle(@NonNull ClientRequest request) throws Exception {
+        var params = request.getParams();
+        var manager = request.getContext().getKeyboard();
+        var current = manager.getConfig();
+        var enabled = params.optBoolean("enabled", current.enabled);
+        var chord = current.escapeChord;
+        var arr = params.optJSONArray("escape_chord");
+        if (arr != null) {
+            var codes = new ArrayList<Integer>();
+            for (int i = 0; i < arr.length(); i++) codes.add(arr.optInt(i, -1));
+            chord = codes;
+        }
+        // Through fromJson so one place decides what a usable chord is, whether it arrives from
+        // the file or from here.
+        manager.setConfig(KeyboardGrabConfig.fromJson(
+            new KeyboardGrabConfig(enabled, chord).toJson()));
+        JsonUtils.mergeJSONObject(request.res(), manager.status());
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/ipc/input/KeyboardGrabHandler.java b/app/src/main/java/cn/classfun/droidvm/daemon/ipc/input/KeyboardGrabHandler.java
new file mode 100644
index 000000000..beff635d5
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/ipc/input/KeyboardGrabHandler.java
@@ -0,0 +1,56 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
+package cn.classfun.droidvm.daemon.ipc.input;
+
+import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
+
+import androidx.annotation.NonNull;
+
+import com.google.auto.service.AutoService;
+
+import cn.classfun.droidvm.daemon.server.ClientRequest;
+import cn.classfun.droidvm.daemon.server.RequestException;
+import cn.classfun.droidvm.daemon.server.RequestHandler;
+import cn.classfun.droidvm.lib.utils.JsonUtils;
+
+/**
+ * Takes the physical keyboard for a VM, or hands it back, without a console. Params: {@code
+ * vm_id}, {@code screen} (the screen whose keyboard device the keys go to) and {@code grab}
+ * (bool, default true).
+ *
+ * <p>The display console has its own path for this over binder, and prefers it because a binder
+ * token dies with the console and releases the grab with it. A grab taken here has no such token:
+ * it is held until something releases it -- this command with {@code grab=false}, the VM leaving
+ * RUNNING, or the feature being switched off -- which is what makes it the right shape for the
+ * CLI and for a test, and the wrong one for a console.</p>
+ */
+@AutoService(RequestHandler.class)
+public final class KeyboardGrabHandler extends RequestHandler {
+    @NonNull
+    @Override
+    public String getName() {
+        return "kbd_grab";
+    }
+
+    @Override
+    public void handle(@NonNull ClientRequest request) throws Exception {
+        var params = request.getParams();
+        var manager = request.getContext().getKeyboard();
+        var grab = params.optBoolean("grab", true);
+        var vmId = params.optString("vm_id", "");
+        var screen = params.optString("screen", "");
+        if (!grab) {
+            if (vmId.isEmpty()) manager.release("asked over IPC");
+            else manager.releaseFor(vmId, screen);
+            JsonUtils.mergeJSONObject(request.res(), manager.status());
+            return;
+        }
+        if (vmId.isEmpty())
+            throw new RequestException("missing vm_id");
+        if (request.getContext().getVMs().findById(vmId) == null)
+            throw new RequestException(fmt("VM not found: %s", vmId));
+        manager.request(vmId, screen, null);
+        JsonUtils.mergeJSONObject(request.res(), manager.status());
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/ipc/input/KeyboardStatusHandler.java b/app/src/main/java/cn/classfun/droidvm/daemon/ipc/input/KeyboardStatusHandler.java
new file mode 100644
index 000000000..8c40ab068
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/ipc/input/KeyboardStatusHandler.java
@@ -0,0 +1,31 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
+package cn.classfun.droidvm.daemon.ipc.input;
+
+import androidx.annotation.NonNull;
+
+import com.google.auto.service.AutoService;
+
+import cn.classfun.droidvm.daemon.server.ClientRequest;
+import cn.classfun.droidvm.daemon.server.RequestHandler;
+import cn.classfun.droidvm.lib.utils.JsonUtils;
+
+/**
+ * What the physical-keyboard grab is doing: the settings, the console that is armed, the
+ * keyboards held, and every keyboard the host has. Read-only, so a page can be opened on it
+ * without taking anything from anybody.
+ */
+@AutoService(RequestHandler.class)
+public final class KeyboardStatusHandler extends RequestHandler {
+    @NonNull
+    @Override
+    public String getName() {
+        return "kbd_status";
+    }
+
+    @Override
+    public void handle(@NonNull ClientRequest request) throws Exception {
+        JsonUtils.mergeJSONObject(request.res(), request.getContext().getKeyboard().status());
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/server/ServerContext.java b/app/src/main/java/cn/classfun/droidvm/daemon/server/ServerContext.java
index 8a2db4c0b..51b26665c 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/server/ServerContext.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/server/ServerContext.java
@@ -18,6 +18,7 @@
 import java.util.UUID;
 import java.util.concurrent.ConcurrentHashMap;
 
+import cn.classfun.droidvm.daemon.input.KeyboardGrabManager;
 import cn.classfun.droidvm.daemon.network.NetworkInstanceStore;
 import cn.classfun.droidvm.daemon.network.backend.DefaultRouterWatcher;
 import cn.classfun.droidvm.daemon.usb.UsbPassthroughManager;
@@ -33,6 +34,7 @@ public final class ServerContext {
     private final NetworkInstanceStore networks = new NetworkInstanceStore(this);
     private final DefaultRouterWatcher routerWatcher = new DefaultRouterWatcher(this);
     private final UsbPassthroughManager usb = new UsbPassthroughManager(this);
+    private final KeyboardGrabManager keyboard = new KeyboardGrabManager(this);
     private final Map<UUID, VMExportTask> exportTasks = new ConcurrentHashMap<>();
     private final Map<UUID, VMImportTask> importTasks = new ConcurrentHashMap<>();
     public DataItem appConfig = DataItem.newObject();
@@ -106,6 +108,11 @@ public UsbPassthroughManager getUsb() {
         return usb;
     }
 
+    @NonNull
+    public KeyboardGrabManager getKeyboard() {
+        return keyboard;
+    }
+
     @NonNull
     public Map<UUID, VMExportTask> getExportTaskStore() {
         return exportTasks;
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/vm/VMInstance.java b/app/src/main/java/cn/classfun/droidvm/daemon/vm/VMInstance.java
index 095d78c20..e374218e4 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/vm/VMInstance.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/vm/VMInstance.java
@@ -153,6 +153,14 @@ private void setState(@NonNull VMState newState) {
         } catch (Exception e) {
             Log.w(TAG, "usb: state hook failed", e);
         }
+        // And the physical keyboard, if a console for this VM had it grabbed: a guest that is no
+        // longer running has no keyboard socket to type into, so the keys go back to Android on
+        // the same edge. Guarded for the same reason.
+        try {
+            store.context.getKeyboard().onVmState(this, newState);
+        } catch (Exception e) {
+            Log.w(TAG, "keyboard: state hook failed", e);
+        }
     }
 
     private void fireEvent(@NonNull String event, @Nullable JSONObject extra) {
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/CrosvmBackendInstance.java b/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/CrosvmBackendInstance.java
index d03b78ad4..e953de0e4 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/CrosvmBackendInstance.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/CrosvmBackendInstance.java
@@ -159,6 +159,13 @@ public VMStartResult start() {
         // diverge. The two lists differ: a VNC-exported screen's tablet and keyboard are crosvm's,
         // not ours.
         if (isInputBridgeNeeded()) {
+            // What the guest says back about its keyboard -- the caps/num lamps -- goes to the
+            // grab manager: it is what lights the lamp on the physical keyboard and what a
+            // console shows. Set before the sockets are bound, because the reader that carries it
+            // starts with crosvm's first connection.
+            inputBridge.setStatusListener((screenId, channel, records) ->
+                context.getKeyboard().onGuestStatus(
+                    config.getId().toString(), screenId, records));
             try {
                 if (!inputBridge.startListening(config.getId().toString(),
                     touchscreenScreens(), nativeInputScreens())) {
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/NativeDisplayInputBridge.java b/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/NativeDisplayInputBridge.java
index 5d4042c42..9d22ef28e 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/NativeDisplayInputBridge.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/NativeDisplayInputBridge.java
@@ -47,6 +47,11 @@
 final class NativeDisplayInputBridge {
     private static final String TAG = "NativeDisplayInput";
 
+    /** One virtio_input_event on the wire: type, code, value. */
+    private static final int STATUS_RECORD_BYTES = 8;
+    /** A status read is a lamp changing, not a stream; a small buffer is the whole of it. */
+    private static final int STATUS_READ_BYTES = 256;
+
     /**
      * One crosvm-facing input socket: the inode we bound, the accepted crosvm connection, and the
      * lock that keeps a write and a reconnect off each other. crosvm connects to OUR socket at
@@ -57,23 +62,46 @@ private static final class Slot {
         final String key;
         final String path;
         final int serverFd;
+        /** Kept apart from {@link #key} because a status record has to say which screen it is. */
+        final String screenId;
+        final int channel;
         final Object lock = new Object();
         /** Volatile: accept threads, write threads and release() all touch it without one lock. */
         volatile FDSocket peer;
 
-        Slot(@NonNull String key, @NonNull String path, int serverFd) {
+        Slot(@NonNull String key, @NonNull String path, int serverFd,
+             @NonNull String screenId, int channel) {
             this.key = key;
             this.path = path;
             this.serverFd = serverFd;
+            this.screenId = screenId;
+            this.channel = channel;
         }
     }
 
+    /**
+     * The guest talking back. virtio-input's status queue carries what the guest's driver decides
+     * about the device rather than what the user did: the keyboard LEDs (caps, num, scroll) and
+     * the auto-repeat settings. crosvm writes those onto the same socket we write events into, so
+     * this is the only place they can be read, and reading them is also what keeps them from
+     * piling up in a socket buffer nobody drains.
+     */
+    interface StatusListener {
+        void onGuestStatus(@NonNull String screenId, int channel, @NonNull byte[] records);
+    }
+
     /**
      * Live slots by {@link #slotKey}. Replaced wholesale on start and cleared on release, so a
      * reader either sees the whole set or none of it. Null until the first start.
      */
     private volatile Map<String, Slot> slots = null;
     private volatile boolean inputClosed = false;
+    /** Set before the sockets are bound; null means nobody wants what the guest says. */
+    @Nullable
+    private volatile StatusListener statusListener = null;
+    /** The VM these sockets belong to, for the listener; set by {@link #startListening}. */
+    @NonNull
+    private volatile String vmId = "";
 
     /**
      * Identity of one socket: the channel, plus the screen for the channels that have one per
@@ -116,6 +144,14 @@ private static String slotKey(@NonNull String screenId, int channel) {
      * something bound behind it: listening fds, inodes under run/, and an accept thread each --
      * parked in accept(2) forever, since only closing the fd it waits on ends one.</p>
      */
+    /**
+     * Who hears the guest's status events. Set before {@link #startListening}, because the reader
+     * that carries them starts with the first accepted connection.
+     */
+    void setStatusListener(@Nullable StatusListener listener) {
+        this.statusListener = listener;
+    }
+
     boolean startListening(@NonNull String vmId, @NonNull List<String> touchScreens,
                            @NonNull List<String> nativeScreens) {
         if (!UnixHelper.isLoaded()) {
@@ -123,6 +159,7 @@ boolean startListening(@NonNull String vmId, @NonNull List<String> touchScreens,
             return false;
         }
         inputClosed = false;
+        this.vmId = vmId;
         var built = new LinkedHashMap<String, Slot>();
         boolean allListening;
         try {
@@ -161,7 +198,7 @@ private boolean bindAll(@NonNull String vmId, @NonNull List<String> touchScreens
                     continue;
                 }
                 Log.i(TAG, fmt("Pre-listening on input socket: %s (fd=%d)", path, fd));
-                var slot = new Slot(slotKey(screenId, ch), path, fd);
+                var slot = new Slot(slotKey(screenId, ch), path, fd, screenId, ch);
                 built.put(slot.key, slot);
                 // Accept crosvm's connection in the background. crosvm is the client and connects
                 // at its own startup, so a peer may not arrive until after start() execs it.
@@ -224,12 +261,52 @@ private void startInputAcceptThread(@NonNull Slot slot) {
                     if (old != null) old.close();
                 }
                 Log.i(TAG, fmt("crosvm input connected: %s", slot.path));
+                startStatusReadThread(slot, peer);
             }
         }, fmt("CrosvmInputAccept-%s", slot.key));
         t.setDaemon(true);
         t.start();
     }
 
+    /**
+     * Reads what the guest says back on one keyboard connection: 8-byte records, the same shape we
+     * write, carrying EV_LED (the caps/num/scroll lamps) and the guest's auto-repeat settings.
+     *
+     * <p>Only the keyboard channel has anything to say, and only while somebody is listening, so
+     * no thread is started otherwise. It ends when the connection does -- crosvm restarting
+     * replaces the peer and the accept loop starts a new reader with it.</p>
+     */
+    private void startStatusReadThread(@NonNull Slot slot, @NonNull FDSocket peer) {
+        var listener = statusListener;
+        if (listener == null || slot.channel != NativeDisplay.KEYBOARD) return;
+        var t = new Thread(() -> {
+            var buffer = new byte[STATUS_READ_BYTES];
+            // A read can split a record; what is left over waits for the rest rather than being
+            // decoded as a whole one.
+            int held = 0;
+            try {
+                var in = peer.getInputStream();
+                while (!inputClosed && peer.isOpen()) {
+                    int n = in.read(buffer, held, buffer.length - held);
+                    if (n < 0) break;
+                    int total = held + n;
+                    int whole = total - (total % STATUS_RECORD_BYTES);
+                    if (whole > 0)
+                        listener.onGuestStatus(slot.screenId, slot.channel,
+                            java.util.Arrays.copyOf(buffer, whole));
+                    held = total - whole;
+                    if (held > 0) System.arraycopy(buffer, whole, buffer, 0, held);
+                }
+            } catch (IOException e) {
+                // The peer going away is how this ends most of the time; nothing to report.
+                if (!inputClosed)
+                    Log.d(TAG, fmt("status reader for %s ended: %s", slot.path, e.getMessage()));
+            }
+        }, fmt("CrosvmInputStatus-%s", slot.key));
+        t.setDaemon(true);
+        t.start();
+    }
+
     /**
      * Writes pre-encoded evdev bytes (8-byte records) to the crosvm connection for [channel] on
      * [screenId]. Called from the daemon IPC thread or the broker binder thread on behalf of the
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/natives/UnixHelper.java b/app/src/main/java/cn/classfun/droidvm/lib/natives/UnixHelper.java
index 9de91d9ce..fb57a9bef 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/natives/UnixHelper.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/natives/UnixHelper.java
@@ -65,6 +65,33 @@ private static native void nativeInstallSignalHandler(
 
     public static native int nativeWrite(int fd, @NonNull byte[] buf, int len);
 
+    /**
+     * Opens an evdev node ({@code /dev/input/eventN}) read-write, falling back to read-only, or
+     * -1. Read and write it with {@link #nativeRead} / {@link #nativeWrite}: the records are
+     * 24-byte {@code struct input_event}s on this ABI.
+     */
+    public static native int nativeEvdevOpen(@NonNull String path);
+
+    /**
+     * EVIOCGRAB: makes [fd] the sole recipient of the device's events, or hands it back. 0 on
+     * success, -errno otherwise (-EBUSY when another process already holds the grab). Everyone
+     * else -- Android's own InputReader included -- keeps its descriptor open and simply stops
+     * being woken, which is what lets a guest have the keys Android would otherwise keep.
+     */
+    public static native int nativeEvdevGrab(int fd, boolean grab);
+
+    /** The device's name (EVIOCGNAME), or null. */
+    @Nullable
+    public static native String nativeEvdevName(int fd);
+
+    /** {bustype, vendor, product, version} (EVIOCGID), or null. */
+    @Nullable
+    public static native int[] nativeEvdevIds(int fd);
+
+    /** The EV_KEY bitmap (EVIOCGBIT), one bit per key code, or null. */
+    @Nullable
+    public static native byte[] nativeEvdevKeyBits(int fd);
+
     @SuppressLint("UnsafeDynamicallyLoadedCode")
     public static void load() {
         if (loaded) return;
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/display/base/DisplayPhysicalKeyboardView.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/base/DisplayPhysicalKeyboardView.java
index 205b54542..17b144b0c 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/display/base/DisplayPhysicalKeyboardView.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/base/DisplayPhysicalKeyboardView.java
@@ -22,9 +22,11 @@
 
 import java.util.ArrayList;
 import java.util.HashMap;
+import java.util.HashSet;
 import java.util.List;
 import java.util.Locale;
 import java.util.Map;
+import java.util.Set;
 
 import cn.classfun.droidvm.R;
 
@@ -174,7 +176,6 @@ private static Key special(String label, int kind, float weight, @DrawableRes in
     private KeyListener keyListener;
     @Nullable
     private ZoneListener zoneListener;
-    private final Map<Integer, List<View>> modifierButtons = new HashMap<>();
     private final List<View> extraZoneButtons = new ArrayList<>();
     private final List<View> fnxZoneButtons = new ArrayList<>();
     // Keys whose face changes under Shift, so the keyboard reads like what it will type.
@@ -199,6 +200,20 @@ public DisplayPhysicalKeyboardView(
         init(context);
     }
 
+    /**
+     * Every key by its Android code, modifiers included. The sticky-modifier map above is not
+     * enough: a grabbed physical keyboard sends scan codes for the whole board, and this is what
+     * turns one into the drawn key to light up.
+     */
+    private final Map<Integer, List<View>> keyButtons = new HashMap<>();
+    /** Codes the physical keyboard is holding down right now. */
+    private final Set<Integer> hardwareHeld = new HashSet<>();
+    /** Lock keys the guest says are on (caps, num, scroll) -- the guest's own view of them. */
+    private final Set<Integer> locksOn = new HashSet<>();
+    // Last sticky state from the adapter, so a hardware key coming up does not un-paint a
+    // modifier the panel is holding on the user's behalf.
+    private boolean stickyCtrl, stickyAlt, stickyShift, stickyWin;
+
     private void init(@NonNull Context context) {
         setOrientation(VERTICAL);
         for (Key[] rowSpec : ROWS) addView(buildRow(context, rowSpec));
@@ -239,9 +254,10 @@ private View buildKey(@NonNull Context context, @NonNull Key key) {
             view = btn;
         }
         view.setLayoutParams(new LayoutParams(0, LayoutParams.MATCH_PARENT, key.weight));
+        if (key.code != 0)
+            keyButtons.computeIfAbsent(key.code, c -> new ArrayList<>()).add(view);
         switch (key.kind) {
             case KIND_MODIFIER:
-                modifierButtons.computeIfAbsent(key.code, c -> new ArrayList<>()).add(view);
                 view.setOnClickListener(v -> {
                     v.performHapticFeedback(KEYBOARD_TAP);
                     if (keyListener != null) keyListener.onModifierClick(key.code);
@@ -293,26 +309,99 @@ public void setZoneListener(@Nullable ZoneListener listener) {
 
     /** Repaint the sticky-modifier keys, and the key faces Shift changes, from adapter state. */
     public void refreshModifiers(boolean ctrl, boolean alt, boolean shift, boolean win) {
-        paintModifier(KeyEvent.KEYCODE_CTRL_LEFT, ctrl);
-        paintModifier(KeyEvent.KEYCODE_ALT_LEFT, alt);
-        paintModifier(KeyEvent.KEYCODE_SHIFT_LEFT, shift);
-        paintModifier(KeyEvent.KEYCODE_META_LEFT, win);
+        stickyCtrl = ctrl;
+        stickyAlt = alt;
+        stickyShift = shift;
+        stickyWin = win;
+        paintKey(KeyEvent.KEYCODE_CTRL_LEFT);
+        paintKey(KeyEvent.KEYCODE_ALT_LEFT);
+        paintKey(KeyEvent.KEYCODE_SHIFT_LEFT);
+        paintKey(KeyEvent.KEYCODE_META_LEFT);
+        applyShiftLabels();
+    }
+
+    /**
+     * A key on the grabbed physical keyboard went down or came up. Those keys never pass through
+     * Android -- the daemon sends them straight to the guest -- so this is the only way the drawn
+     * keyboard can follow along; the console feeds it from the daemon's echo.
+     */
+    public void setHardwareKeyHeld(int keyCode, boolean down) {
+        boolean changed = down ? hardwareHeld.add(keyCode) : hardwareHeld.remove(keyCode);
+        if (!changed) return;
+        paintKey(keyCode);
+        if (keyCode == KeyEvent.KEYCODE_SHIFT_LEFT || keyCode == KeyEvent.KEYCODE_SHIFT_RIGHT)
+            applyShiftLabels();
+    }
+
+    /** Nothing is held any more (the grab ended, or the keyboard did). */
+    public void clearHardwareKeys() {
+        if (hardwareHeld.isEmpty()) return;
+        var held = new ArrayList<>(hardwareHeld);
+        hardwareHeld.clear();
+        for (var code : held) paintKey(code);
+        applyShiftLabels();
+    }
+
+    /**
+     * The guest's lock lamps. [known] is a mask over the same key codes as [on]: a lamp the guest
+     * has never reported is drawn as off rather than guessed at, because virtio-input gives no way
+     * to ask and only the guest knows.
+     */
+    public void setLockState(boolean capsKnown, boolean capsOn,
+                             boolean numKnown, boolean numOn,
+                             boolean scrollKnown, boolean scrollOn) {
+        applyLock(KeyEvent.KEYCODE_CAPS_LOCK, capsKnown && capsOn);
+        applyLock(KeyEvent.KEYCODE_NUM_LOCK, numKnown && numOn);
+        applyLock(KeyEvent.KEYCODE_SCROLL_LOCK, scrollKnown && scrollOn);
+    }
+
+    private void applyLock(int keyCode, boolean on) {
+        boolean changed = on ? locksOn.add(keyCode) : locksOn.remove(keyCode);
+        if (changed) paintKey(keyCode);
+    }
+
+    private void applyShiftLabels() {
+        boolean shift = stickyShift
+            || hardwareHeld.contains(KeyEvent.KEYCODE_SHIFT_LEFT)
+            || hardwareHeld.contains(KeyEvent.KEYCODE_SHIFT_RIGHT);
         for (var entry : shiftableKeys.entrySet())
             entry.getKey().setText(shift ? entry.getValue().shiftLabel : entry.getValue().label);
     }
 
+    /**
+     * One key's look, from every reason it might be lit at once: the panel is holding it sticky,
+     * the physical keyboard is holding it, or the guest says its lock is on.
+     */
+    private void paintKey(int keyCode) {
+        var buttons = keyButtons.get(keyCode);
+        if (buttons == null) return;
+        boolean active = hardwareHeld.contains(keyCode)
+            || locksOn.contains(keyCode)
+            || stickyFor(keyCode);
+        for (var btn : buttons) paintToggle(btn, active);
+    }
+
+    private boolean stickyFor(int keyCode) {
+        switch (keyCode) {
+            case KeyEvent.KEYCODE_CTRL_LEFT:
+                return stickyCtrl;
+            case KeyEvent.KEYCODE_ALT_LEFT:
+                return stickyAlt;
+            case KeyEvent.KEYCODE_SHIFT_LEFT:
+                return stickyShift;
+            case KeyEvent.KEYCODE_META_LEFT:
+                return stickyWin;
+            default:
+                return false;
+        }
+    }
+
     /** Repaint the Extra/FNx toggles to match the zones actually on screen. */
     public void setZoneToggleState(boolean extraOn, boolean fnxOn) {
         for (var btn : extraZoneButtons) paintToggle(btn, extraOn);
         for (var btn : fnxZoneButtons) paintToggle(btn, fnxOn);
     }
 
-    private void paintModifier(int keyCode, boolean active) {
-        var buttons = modifierButtons.get(keyCode);
-        if (buttons == null) return;
-        for (var btn : buttons) paintToggle(btn, active);
-    }
-
     /** Works for both kinds of key: a text {@link Button} and an icon-only {@link ImageButton}. */
     private void paintToggle(@NonNull View key, boolean active) {
         int color = getContext().getColor(
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/display/base/PhysicalKeyboardGrab.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/base/PhysicalKeyboardGrab.java
new file mode 100644
index 000000000..9d5a54fcc
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/base/PhysicalKeyboardGrab.java
@@ -0,0 +1,209 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
+package cn.classfun.droidvm.ui.vm.display.base;
+
+import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
+
+import android.os.Binder;
+import android.os.Handler;
+import android.os.IBinder;
+import android.os.Looper;
+import android.util.Log;
+
+import androidx.annotation.NonNull;
+import androidx.annotation.Nullable;
+
+import java.util.concurrent.ExecutorService;
+import java.util.concurrent.Executors;
+import java.util.function.Supplier;
+
+import cn.classfun.droidvm.display.INativeDisplayRootService;
+import cn.classfun.droidvm.display.IPhysicalKeyEcho;
+
+/**
+ * Asks the daemon to take the host's physical keyboard for this console, and to give it back.
+ *
+ * <p>The daemon does the grabbing ({@code EVIOCGRAB}, which is what lets keys Android keeps for
+ * itself -- Home, the task switcher, Alt+Tab, Meta shortcuts -- reach the guest at all); this
+ * class is only the decision of <em>when</em>, and there are exactly three things in it:</p>
+ *
+ * <ul>
+ *   <li>the console is in front ({@code onResume}/{@code onPause}), because a keyboard grabbed by
+ *       a console the user has left types into nothing they can see;</li>
+ *   <li>the typing surface wants no IME -- {@link KeyboardMode#SYSTEM} is the one that does. A
+ *       grabbed keyboard is invisible to the IME, so Chinese and every other composed input would
+ *       stop working; switching to the system keyboard hands the keyboard back for exactly as
+ *       long as that mode is up;</li>
+ *   <li>the daemon's broker binder is connected, and this screen takes input at all.</li>
+ * </ul>
+ *
+ * <p>The token handed to the daemon is this object's own binder, so if the console's process dies
+ * the daemon hears it and releases the keyboard rather than leaving the user unable to type
+ * anywhere. Calls go out on one background thread: a grab opens and scans device nodes, which is
+ * not work for the main thread, and one thread keeps a release from overtaking the grab it
+ * undoes.</p>
+ */
+public final class PhysicalKeyboardGrab {
+    private static final String TAG = "PhysicalKeyboardGrab";
+
+    @NonNull
+    private final String vmId;
+    @NonNull
+    private final Supplier<String> screenId;
+    /** Dies with this process; the daemon releases the grab when it does. */
+    private final IBinder token = new Binder();
+    private final ExecutorService caller = Executors.newSingleThreadExecutor(
+        r -> new Thread(r, "kbd-grab-call"));
+
+    /** False when this screen takes no input, which leaves the keyboard to Android for good. */
+    private final boolean allowed;
+
+    /**
+     * What the console does with a copy of the grabbed keys. Called on the main thread. Only worth
+     * having while the drawn keyboard is up, which is the one place a pressed key can be shown.
+     */
+    public interface Echo {
+        /** Scan codes and their 1 (down) / 0 (up), in the order they were typed. */
+        void onKeys(@NonNull int[] codes, @NonNull int[] values);
+
+        /** The guest's lock lamps; [known] says which of them the guest has ever reported. */
+        void onLeds(int known, int on);
+
+        /** The feed stopped: nothing is held any more, whatever was drawn as held is not. */
+        void onCleared();
+    }
+
+    private final Handler main = new Handler(Looper.getMainLooper());
+    @Nullable
+    private Echo listener;
+    /** Only the laptop keyboard draws keys, so only it is worth a feed. */
+    private boolean laptop;
+    /** What was last registered, so an unchanged state is not registered twice. */
+    private boolean echoRegistered;
+
+    private final IPhysicalKeyEcho.Stub echoStub = new IPhysicalKeyEcho.Stub() {
+        @Override
+        public void onKeys(int[] codes, int[] values) {
+            if (codes == null || values == null) return;
+            main.post(() -> {
+                var l = listener;
+                if (l != null) l.onKeys(codes, values);
+            });
+        }
+
+        @Override
+        public void onLeds(int known, int on) {
+            main.post(() -> {
+                var l = listener;
+                if (l != null) l.onLeds(known, on);
+            });
+        }
+    };
+
+    @Nullable
+    private INativeDisplayRootService service;
+    private boolean resumed;
+    private boolean wantsKeys;
+    /** What was last asked for, so an unchanged state is not asked for twice. */
+    private boolean requested;
+    private boolean closed;
+
+    public PhysicalKeyboardGrab(@NonNull String vmId, @NonNull Supplier<String> screenId,
+                                boolean allowed) {
+        this.vmId = vmId;
+        this.screenId = screenId;
+        this.allowed = allowed;
+    }
+
+    /** The daemon's broker binder arrived, or was lost (null). */
+    public void setService(@Nullable INativeDisplayRootService service) {
+        this.service = service;
+        apply();
+    }
+
+    /** The console came to the front, or left it. */
+    public void setResumed(boolean resumed) {
+        this.resumed = resumed;
+        apply();
+    }
+
+    /** The typing surface changed; only {@link KeyboardMode#SYSTEM} wants the IME to have keys. */
+    public void setKeyboardMode(@NonNull KeyboardMode mode) {
+        this.wantsKeys = mode != KeyboardMode.SYSTEM;
+        this.laptop = mode == KeyboardMode.LAPTOP;
+        apply();
+    }
+
+    /** Who draws the keys as they are pressed; null to stop asking for them. */
+    public void setEcho(@Nullable Echo echo) {
+        this.listener = echo;
+        apply();
+    }
+
+    /** Releases the keyboard and stops the caller thread; the console is going. */
+    public void close() {
+        if (closed) return;
+        closed = true;
+        if (echoRegistered) {
+            echoRegistered = false;
+            sendEcho(false);
+        }
+        if (requested) {
+            requested = false;
+            send(false);
+        }
+        caller.shutdown();
+    }
+
+    private void apply() {
+        if (closed) return;
+        boolean want = allowed && resumed && wantsKeys && service != null;
+        if (want != requested) {
+            requested = want;
+            send(want);
+        }
+        // The echo rides on the grab: no grab, no keys to copy. Registered only for the drawn
+        // keyboard, so every other mode costs not one call.
+        boolean wantEcho = requested && laptop && listener != null;
+        if (wantEcho != echoRegistered) {
+            echoRegistered = wantEcho;
+            sendEcho(wantEcho);
+        }
+    }
+
+    private void sendEcho(boolean want) {
+        var target = service;
+        if (target == null) return;
+        var screen = screenId.get();
+        var l = listener;
+        if (!want && l != null) main.post(l::onCleared);
+        caller.execute(() -> {
+            try {
+                target.setKeyEcho(vmId, screen, want ? echoStub : null);
+            } catch (Exception e) {
+                Log.w(TAG, fmt("setKeyEcho(%b) failed", want), e);
+            }
+        });
+    }
+
+    private void send(boolean grab) {
+        var target = service;
+        // A release with no binder left is already done: the daemon drops the grab when the token
+        // dies, and this process holding the token is what would have died.
+        if (target == null) return;
+        var screen = screenId.get();
+        caller.execute(() -> {
+            try {
+                int held = target.setKeyboardGrab(vmId, screen, grab, token);
+                if (grab)
+                    Log.i(TAG, held > 0
+                        ? fmt("physical keyboard: %d device(s) now typing into the guest", held)
+                        : "physical keyboard: armed; nothing to take yet (no keyboard attached, "
+                            + "or the guest is not running)");
+            } catch (Exception e) {
+                Log.w(TAG, fmt("setKeyboardGrab(%b) failed", grab), e);
+            }
+        });
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/display/nativedisplay/display/VMNativeDisplayActivity.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/nativedisplay/display/VMNativeDisplayActivity.java
index b83398d01..13c25b384 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/display/nativedisplay/display/VMNativeDisplayActivity.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/nativedisplay/display/VMNativeDisplayActivity.java
@@ -59,6 +59,7 @@
 import cn.classfun.droidvm.lib.ui.ImeInsetsExempt;
 import cn.classfun.droidvm.lib.ui.MaterialMenu;
 import cn.classfun.droidvm.ui.vm.display.base.DaemonDisplayAttach;
+import cn.classfun.droidvm.ui.vm.display.base.PhysicalKeyboardGrab;
 import cn.classfun.droidvm.ui.vm.display.base.DisplayChromeController;
 import cn.classfun.droidvm.ui.vm.display.base.DisplayExtraKeysPanel;
 import cn.classfun.droidvm.ui.vm.display.base.DisplayKeyboardMenuRow;
@@ -71,6 +72,7 @@
 import cn.classfun.droidvm.ui.vm.display.nativedisplay.input.EvdevEncoder;
 import cn.classfun.droidvm.ui.vm.display.nativedisplay.input.DirectInputSink;
 import cn.classfun.droidvm.ui.vm.display.nativedisplay.input.InputForwarder;
+import cn.classfun.droidvm.ui.vm.display.nativedisplay.input.KeyCodeMapper;
 import cn.classfun.droidvm.lib.perf.GamePerfHint;
 import cn.classfun.droidvm.lib.perf.SystemGestureGuard;
 import cn.classfun.droidvm.ui.vm.display.nativedisplay.input.NativeExtraKeysPanel;
@@ -266,6 +268,14 @@ public void onZoomPan(float scaleFactor, float dxView, float dyView,
     // Daemon broker binder acquisition (display_attach -> nonce-matched broadcast), shared with
     // the VNC display path.
     private DaemonDisplayAttach displayAttach;
+    // Asks the daemon to take the host's physical keyboard for this console while it is in
+    // front and no IME wants it; see PhysicalKeyboardGrab for the whole of the rule.
+    private PhysicalKeyboardGrab keyboardGrab;
+    // Bits of the lamp masks the daemon sends, which are the Linux LED_* codes: NUML 0, CAPSL 1,
+    // SCROLLL 2.
+    private static final int LED_MASK_NUM = 1;
+    private static final int LED_MASK_CAPS = 1 << 1;
+    private static final int LED_MASK_SCROLL = 1 << 2;
 
     @Override
     protected void onCreate(@Nullable Bundle savedInstanceState) {
@@ -282,11 +292,15 @@ protected void onCreate(@Nullable Bundle savedInstanceState) {
         guestWidth = (int) intent.getLongExtra(EXTRA_WIDTH, 1280);
         guestHeight = (int) intent.getLongExtra(EXTRA_HEIGHT, 720);
         vmKey = NativeDisplay.serviceNameFromId(vmId, screenId);
+        // Before the views: applyInitial() runs while they are being built and tells this
+        // the keyboard mode it starts in.
+        keyboardGrab = new PhysicalKeyboardGrab(vmId, () -> screenId, screenInputEnabled);
 
         bindViews();
         toolbar.setTitle(vmName.isEmpty() ? getString(R.string.native_display_title) : vmName);
         toolbar.setNavigationOnClickListener(v -> finish());
         setupViews();
+        wireHardwareKeyEcho();
         setupLayoutControllers();
         setStatus(getString(R.string.native_display_connecting), R.color.vnc_status_connecting);
         showOverlay(getString(R.string.native_display_waiting));
@@ -306,12 +320,16 @@ public void onAttached(@NonNull INativeDisplayRootService service) {
                 @Override
                 public void onLost() {
                     // DirectInputSink falls back to the vm_input RPC per write on a dead binder.
+                    // The grab has no such fallback: the daemon is the only process that can hold
+                    // it, and it has already dropped it with the token.
+                    keyboardGrab.setService(null);
                 }
             });
         displayAttach.start();
     }
 
     private void onRootConnected(@NonNull INativeDisplayRootService service) {
+        keyboardGrab.setService(service);
         // Try a direct unix-socket sink to the daemon (one write per evdev frame, no IPC
         // round-trip); on any failure it falls back to the vm_input JSON-RPC path below.
         directSink = new DirectInputSink(vmId, () -> screenId, service, this::sendInputToDaemon);
@@ -829,6 +847,9 @@ public void onGuestResizeWanted(int areaW, int areaH) {
                     extraVisible, fnxVisible, mode == KeyboardMode.SYSTEM);
                 phyKeyboard.setZoneToggleState(extraVisible, fnxVisible);
                 phyKeyboard.setVisibleAnimated(mode == KeyboardMode.LAPTOP);
+                // SYSTEM is the mode whose text comes from the IME, and an IME cannot see a
+                // grabbed keyboard: that mode hands the physical one back to Android.
+                keyboardGrab.setKeyboardMode(mode);
                 var controller = getWindow().getInsetsController();
                 if (controller != null) {
                     if (fullscreen) {
@@ -1059,6 +1080,40 @@ public void onVMExited(UUID id, String vmName, int exitCode, JSONObject data) {
         });
     }
 
+    /**
+     * Draws the grabbed physical keyboard on the on-screen one. The grabbed keys go from the
+     * daemon straight into the guest and never through this process, so without this feed the
+     * drawn keyboard would sit still while the user types. Registered by the grab only while the
+     * laptop keyboard is the mode -- no other mode has a key to light.
+     */
+    private void wireHardwareKeyEcho() {
+        keyboardGrab.setEcho(new PhysicalKeyboardGrab.Echo() {
+            @Override
+            public void onKeys(@NonNull int[] codes, @NonNull int[] values) {
+                for (int i = 0; i < codes.length && i < values.length; i++) {
+                    int androidCode = KeyCodeMapper.evdevToAndroid(codes[i]);
+                    // A key the drawn keyboard has no face for (media keys, F13 and up) is simply
+                    // not drawn; it still reached the guest.
+                    if (androidCode != -1)
+                        phyKeyboard.setHardwareKeyHeld(androidCode, values[i] != 0);
+                }
+            }
+
+            @Override
+            public void onLeds(int known, int on) {
+                phyKeyboard.setLockState(
+                    (known & LED_MASK_CAPS) != 0, (on & LED_MASK_CAPS) != 0,
+                    (known & LED_MASK_NUM) != 0, (on & LED_MASK_NUM) != 0,
+                    (known & LED_MASK_SCROLL) != 0, (on & LED_MASK_SCROLL) != 0);
+            }
+
+            @Override
+            public void onCleared() {
+                phyKeyboard.clearHardwareKeys();
+            }
+        });
+    }
+
     @Override
     protected void onResume() {
         super.onResume();
@@ -1068,6 +1123,7 @@ protected void onResume() {
         // And keep the host's full-screen touch gestures (OEM three-finger screenshot etc.)
         // from eating multi-finger input meant for the guest (see SystemGestureGuard).
         SystemGestureGuard.enterDisplay();
+        keyboardGrab.setResumed(true);
     }
 
     @Override
@@ -1075,11 +1131,13 @@ protected void onPause() {
         super.onPause();
         GamePerfHint.exitGameplay(this);
         SystemGestureGuard.exitDisplay();
+        keyboardGrab.setResumed(false);
     }
 
     @Override
     protected void onDestroy() {
         super.onDestroy();
+        if (keyboardGrab != null) keyboardGrab.close();
         if (displaySource != null) {
             displaySource.shutdown();
             displaySource = null;
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/display/nativedisplay/input/KeyCodeMapper.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/nativedisplay/input/KeyCodeMapper.java
index f3a9114c9..e9f1adb19 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/display/nativedisplay/input/KeyCodeMapper.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/display/nativedisplay/input/KeyCodeMapper.java
@@ -3,6 +3,7 @@
 // Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
 package cn.classfun.droidvm.ui.vm.display.nativedisplay.input;
 
+import android.util.SparseIntArray;
 import android.view.KeyEvent;
 
 import java.util.HashMap;
@@ -44,6 +45,10 @@ public final class KeyCodeMapper {
 
     private static final Map<Integer, Integer> KEYCODE_MAP = new HashMap<>();
 
+    /** The inverse, built as {@link #put} fills the map above. */
+
+    private static final SparseIntArray EVDEV_MAP = new SparseIntArray();
+
     static {
         // Letters
         put(KeyEvent.KEYCODE_A, KEY_A); put(KeyEvent.KEYCODE_B, KEY_B);
@@ -126,6 +131,17 @@ private KeyCodeMapper() {
 
     private static void put(int androidKey, int evdev) {
         KEYCODE_MAP.put(androidKey, evdev);
+        // The way back, for keys that arrive as scan codes rather than as Android events: the
+        // physical keyboard the daemon grabbed never passes through Android, so a console that
+        // wants to draw what was pressed has only the scan code to go on. First writer wins,
+        // because a couple of Android codes map onto one scan code and the first is the plain
+        // one (KEYCODE_DEL over any alias for backspace).
+        if (EVDEV_MAP.indexOfKey(evdev) < 0) EVDEV_MAP.put(evdev, androidKey);
+    }
+
+    /** Android key code for a Linux evdev KEY_*, or -1 if unmapped. */
+    public static int evdevToAndroid(int evdev) {
+        return EVDEV_MAP.get(evdev, -1);
     }
 
     /** Linux evdev KEY_* for an Android key code, or -1 if unmapped. */

From 333a9324eb3f012d72c476bf8e3837f832bdc386 Mon Sep 17 00:00:00 2001
From: HuJK <gh@hujk.org>
Date: Thu, 10 Sep 2026 23:53:44 +0800
Subject: [PATCH 175/182] prebuilts: the payload the APK ships is the one this
 branch built

The pin was three publishes old (5cc4aa8, from DroidVM-Prebuilt-Root 14c5886):
it predates the USB passthrough work, both simplefb fixes and the keyboard
bitmap, so an APK built from this branch ran a crosvm that had none of them
and the branch could only be tested with a hand-copied binary.

Move it to f0af07a, which CI published from DroidVM-Prebuilt-Root 4215d7b.
Checked rather than assumed: that publish changed one sha256 line and the
payload, its usr/bin/crosvm is sha256 ee531987e942dc2ed22441d915e6d6a403a8761a
3bc1f70683fea2742dcd1334, and that is byte for byte the binary built from
crosvm pr/usb 8d5268b (wip/usb 4fe20fa) and verified on the device -- an Ubuntu
guest started with it advertises KEY_LEFTMETA through KEY_MICMUTE on its virtio
keyboard. The EDK2 firmware in the payload is unchanged.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01UzSVsTJs6p3V2pFZLaXq9U
---
 app/src/main/assets/prebuilts | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/app/src/main/assets/prebuilts b/app/src/main/assets/prebuilts
index 5cc4aa892..f0af07a7a 160000
--- a/app/src/main/assets/prebuilts
+++ b/app/src/main/assets/prebuilts
@@ -1 +1 @@
-Subproject commit 5cc4aa892c8cd25b77b386e787442ce6975cfa31
+Subproject commit f0af07a7adb853dfbf57e74ff39912a4cb952485

From 6ce86a5bae58fd7c5a070113e64a904b0a619559 Mon Sep 17 00:00:00 2001
From: HuJK <gh@hujk.org>
Date: Sat, 12 Sep 2026 21:47:15 +0800
Subject: [PATCH 176/182] prebuilts: the payload carries the DisplayLink crash
 fix

The pin was f0af07a, whose usr/bin/crosvm is
ee531987e942dc2ed22441d915e6d6a403a8761a3bc1f70683fea2742dcd1334 -- the
binary built from crosvm pr/usb 8d5268b. It predates the DMA-window fix, so
an APK built from this branch still died the moment a guest enabled display
output on a passed-through DisplayLink adapter.

Move it to c4998e1, which CI published from DroidVM-Prebuilt-Root 82c59c2,
the merge of Droid-VM/DroidVM-Prebuilt-Root#4. Checked rather than assumed:
that publish's usr/bin/crosvm is sha256
cd3693ba876720f7ab7c08e5d6358101336f3bbcdb3d7d4f324ac29274bf6a7b, which is
byte for byte the binary built from crosvm wip/usb-fix-displaylink-crash
(Droid-VM/crosvm#7, merged) and shipped to the customer who reported the
crash. It carries two fixes:

  usb: a transfer too big for the DMA window goes through a plain buffer
  block: the queue size is a per-disk option, and its default stops
         throttling viostor

c4998e1 rather than 0344eea, the identical payload CI published from the
branch before it merged: that one is reachable only from a wip branch, and a
pin whose commit lives on a branch someone is about to delete breaks
`git submodule update` for everyone on master.

The payload also loses usr/bin/crosvm.bak1400, a 12 MB backup from
2026-09-03 that every APK had carried and every device had unpacked; the
debug APK goes from 130 MB to 126 MB. The EDK2 firmware is unchanged.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01NrTFaLfTucJb9LBtxtU6Ab
---
 app/src/main/assets/prebuilts | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/app/src/main/assets/prebuilts b/app/src/main/assets/prebuilts
index f0af07a7a..c4998e150 160000
--- a/app/src/main/assets/prebuilts
+++ b/app/src/main/assets/prebuilts
@@ -1 +1 @@
-Subproject commit f0af07a7adb853dfbf57e74ff39912a4cb952485
+Subproject commit c4998e150a08f0e60d141591fd63ea0010eb4f75

From 39739db26a37f4b8bb45d84d4843b491e7e881d7 Mon Sep 17 00:00:00 2001
From: ken <39673849+SuperKenVery@users.noreply.github.com>
Date: Wed, 16 Sep 2026 11:53:58 +0800
Subject: [PATCH 177/182] fix(ui): use native popup menu shadows

---
 app/src/main/java/cn/classfun/droidvm/lib/ui/MaterialMenu.java | 3 ---
 1 file changed, 3 deletions(-)

diff --git a/app/src/main/java/cn/classfun/droidvm/lib/ui/MaterialMenu.java b/app/src/main/java/cn/classfun/droidvm/lib/ui/MaterialMenu.java
index fc4e6e1bf..ca140847f 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/ui/MaterialMenu.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/ui/MaterialMenu.java
@@ -199,9 +199,6 @@ private Drawable createMaterial3Background() {
             bg.setFillColor(ColorStateList.valueOf(surfaceColor));
         }
         bg.setElevation(8 * density);
-        bg.setShadowCompatibilityMode(
-            MaterialShapeDrawable.SHADOW_COMPAT_MODE_ALWAYS
-        );
         return bg;
     }
 

From d06949a1045aee5187dd2d1e5f31d3f2f091c762 Mon Sep 17 00:00:00 2001
From: BigfootACA <bigfoot@classfun.cn>
Date: Mon, 21 Sep 2026 12:48:03 +0800
Subject: [PATCH 178/182] Add custom sponsorship URL to FUNDING.yml

Added a custom sponsorship URL for funding.
---
 .github/FUNDING.yml | 15 +++++++++++++++
 1 file changed, 15 insertions(+)
 create mode 100644 .github/FUNDING.yml

diff --git a/.github/FUNDING.yml b/.github/FUNDING.yml
new file mode 100644
index 000000000..2d3bba382
--- /dev/null
+++ b/.github/FUNDING.yml
@@ -0,0 +1,15 @@
+# These are supported funding model platforms
+
+github: # Replace with up to 4 GitHub Sponsors-enabled usernames e.g., [user1, user2]
+patreon: # Replace with a single Patreon username
+open_collective: # Replace with a single Open Collective username
+ko_fi: # Replace with a single Ko-fi username
+tidelift: # Replace with a single Tidelift platform-name/package-name e.g., npm/babel
+community_bridge: # Replace with a single Community Bridge project-name e.g., cloud-foundry
+liberapay: # Replace with a single Liberapay username
+issuehunt: # Replace with a single IssueHunt username
+lfx_crowdfunding: # Replace with a single LFX Crowdfunding project-name e.g., cloud-foundry
+polar: # Replace with a single Polar username
+buy_me_a_coffee: # Replace with a single Buy Me a Coffee username
+thanks_dev: # Replace with a single thanks.dev username
+custom: ['https://afdian.com/a/DroidVM']

From 0bac514f5c0f622899be8acd9499592956ed35ac Mon Sep 17 00:00:00 2001
From: Maydo <261177727+maydoxx@users.noreply.github.com>
Date: Tue, 22 Sep 2026 12:58:06 +0300
Subject: [PATCH 179/182] Include Snapdragon 7s Gen 3/4 and Snapdragon 8s Gen 3

Due to both having ARMv9 and they also have gunyah (for most of 7s Gen 3 as well as the sibling of it is 7s Gen 4) and as for SM8635 the sibling of it is SM8650.
---
 app/src/main/assets/data/gunyah.yaml | 13 ++++++++++++-
 1 file changed, 12 insertions(+), 1 deletion(-)

diff --git a/app/src/main/assets/data/gunyah.yaml b/app/src/main/assets/data/gunyah.yaml
index 7738ddc1a..5ccaf0077 100644
--- a/app/src/main/assets/data/gunyah.yaml
+++ b/app/src/main/assets/data/gunyah.yaml
@@ -1,8 +1,19 @@
 gunyah:
-  # Qualcomm Snapdragon 8 Gen 3
+  # Qualcomm Snapdragon 7s(+) Gen 3/4
+  - socs:
+      - SM7635
+      - SM7635AC
+      - SM7675
+      - SM7675AB
+      - SM7675AC
+    capabilities:
+      gunyah: yes
+
+  # Qualcomm Snapdragon 8(s) Gen 3
   - socs:
       - SG8350P
       - SM8650
+      - SM8635
       - SM8650AA
       - SM8650AB
       - SM8650AC

From 862e10b6fefbfa5f7d2432ad25d52d4ab48b5468 Mon Sep 17 00:00:00 2001
From: muhammadbahaa2001 <76573761+muhammadbahaa2001@users.noreply.github.com>
Date: Wed, 23 Sep 2026 03:05:44 +0300
Subject: [PATCH 180/182] Added Arabic

---
 app/src/main/res/values-ar/strings.xml | 1737 ++++++++++++++++++++++++
 1 file changed, 1737 insertions(+)
 create mode 100644 app/src/main/res/values-ar/strings.xml

diff --git a/app/src/main/res/values-ar/strings.xml b/app/src/main/res/values-ar/strings.xml
new file mode 100644
index 000000000..5dce16759
--- /dev/null
+++ b/app/src/main/res/values-ar/strings.xml
@@ -0,0 +1,1737 @@
+<?xml version="1.0" encoding="utf-8"?>
+<resources>
+    <string name="nullptr" translatable="false" />
+    <string name="app_name">DroidVM</string>
+
+    <string name="start_app_desc">مدير للأجهزة الافتراضية (VMs) لنظام Android يدعم تقنيات Qualcomm Gunyah وMediaTek GenieZone وLinux KVM. يمكنك إنشاء وإدارة أجهزة افتراضية خفيفة بنظام Linux أو Windows مباشرة على جهازك.</string>
+    <string name="start_faq_title">الأسئلة الشائعة</string>
+
+    <string name="faq1_title">ما هي المحاكاة الافتراضية (Virtualization)؟</string>
+    <string name="faq1_body">Gunyah: هو Hypervisor من النوع الأول (Type-1) طوّرته Qualcomm للأجهزة الافتراضية المحمية.\nGenieZone: هو Hypervisor من النوع الأول (Type-1) طوّرته MediaTek للأجهزة الافتراضية المدعومة عتاديًا (Hardware-Assisted).\nLinux KVM: بنية محاكاة افتراضية مدمجة بنواة Linux، متاحة على أجهزة ARM64 التي تُقلع مع تفعيل وضع EL2 وامتدادات المحاكاة الافتراضية.</string>
+
+    <string name="faq2_title">ما هي الأجهزة المدعومة؟</string>
+    <string name="faq2_body">Qualcomm: معالجات Snapdragon 8 Gen 3 (SM8650) أو الأحدث مع تفعيل Gunyah. يُوصى بمعالج Snapdragon 8 Elite (SM8750) أو الأحدث.\nMediaTek: معالجات Dimensity 9000 أو الأحدث مع تفعيل GenieZone.\nLinux KVM: أجهزة ARM64 التي تُقلع بوضع EL2، مثل أجهزة Google Tensor وRockchip.</string>
+
+    <string name="faq3_title">ما هي متطلبات البيئة البرمجية والعتادية؟</string>
+    <string name="faq3_body">1. صلاحيات الـ Root (مثل Magisk أو KernelSU أو APatch).\n2. معالج ARM64 مدعوم مع تفعيل Gunyah أو GenieZone أو Linux KVM عبر الفيرموير (Firmware) والكيرنل (Kernel).\n3. مسار عقدة جهاز محاكاة افتراضية متاح: ‎/dev/gunyah أو ‎/dev/gzvm أو ‎/dev/kvm.</string>
+
+    <string name="unimplement">الوظيفة غير مفعّلة بعد</string>
+
+    <string name="menu">القائمة</string>
+
+    <string name="status_icon_desc">أيقونة الحالة</string>
+    <string name="fab_action_desc">إجراء</string>
+    <string name="ic_expand_desc">توسيع أو طي</string>
+    <string name="setup_step_icon_desc">أيقونة الخطوة</string>
+    <string name="setup_skip_title">تخطي هذه الخطوة؟</string>
+    <string name="setup_skip_message">لم يجتز هذا الفحص المتطلبات. قد يؤدي التخطي إلى مشكلات غير متوقعة. هل أنت متأكد من رغبتك في المتابعة؟</string>
+    <string name="setup_skip_confirm">تخطي</string>
+    <string name="setup_grant">منح الصلاحية</string>
+
+    <string name="setup_root_title">طلب صلاحية الـ Root</string>
+    <string name="setup_root_desc">جارٍ طلب امتيازات الـ Root&#8230;</string>
+    <string name="setup_root_success">\u2705 تم منح صلاحية الـ Root.</string>
+    <string name="setup_root_fail">\u274C تم رفض صلاحية الـ Root. يُرجى منح الإذن ثم إعادة المحاولة.</string>
+    <string name="setup_root_detail">الكيرنل: %1$s\nحالة SELinux: %2$s</string>
+
+    <string name="setup_soc_title">التحقق من طراز المعالج (SoC)</string>
+    <string name="setup_soc_desc">جارٍ التحقق من توافق المعالج (SoC)&#8230;</string>
+    <string name="setup_soc_success">\u2705 المعالج (SoC) مدعوم: %1$s</string>
+    <string name="setup_soc_fail">\u274C المعالج (SoC) غير مدعوم: %1$s.</string>
+    <string name="setup_soc_detail">الشريحة: %1$s</string>
+
+    <string name="setup_virt_title">التحقق من دعم المحاكاة الافتراضية</string>
+    <string name="setup_virt_desc">جارٍ التحقق من دعم المحاكاة الافتراضية&#8230;</string>
+    <string name="setup_virt_success">\u2705 تم العثور على دعم المحاكاة الافتراضية.</string>
+    <string name="setup_virt_fail">\u274C لم يتم العثور على دعم المحاكاة الافتراضية.</string>
+
+    <string name="setup_storage_title">الوصول إلى الملفات</string>
+    <string name="setup_storage_desc">جارٍ التحقق من إذن الوصول إلى الملفات&#8230;</string>
+    <string name="setup_storage_success">\u2705 تم منح إذن الوصول إلى جميع الملفات.</string>
+    <string name="setup_storage_fail">\u274C إذن الوصول إلى جميع الملفات مطلوب لإدارة صور أقراص الأجهزة الافتراضية (VMs). اضغط لمنح الإذن.</string>
+
+    <string name="setup_extract_title">استخراج الملفات المدمجة مسبقًا</string>
+    <string name="setup_extract_desc">جارٍ استخراج الملفات المدمجة مسبقًا (Prebuilt)&#8230;</string>
+    <string name="setup_extract_success">\u2705 تم استخراج الملفات المدمجة مسبقًا بنجاح.</string>
+    <string name="setup_extract_uptodate">\u2705 الملفات المدمجة مسبقًا محدثة بالفعل.</string>
+    <string name="setup_extract_fail">\u274C فشل استخراج الملفات المدمجة مسبقًا. يُرجى إعادة المحاولة.</string>
+
+    <string name="setup_network_title">إنشاء شبكة</string>
+    <string name="setup_network_desc">لا يحتوي الجهاز الافتراضي على اتصال بالإنترنت حتى يتم ربطه بشبكة. اختر نوع شبكة لإنشائها الآن؛ يمكنك إضافة الشبكات أو تغييرها لاحقًا عبر تبويب "الشبكات".</string>
+    <string name="setup_network_opt_wifi">جسر شبكة Wi-Fi شبه كامل (Wi-Fi pseudo-bridge)</string>
+    <string name="setup_network_opt_linux">جسر Linux الافتراضي (Linux bridge بميزات IPv4 NAT + DHCP)</string>
+    <string name="setup_network_opt_gvisor">جسر gVisor الافتراضي (IPv4 + IPv6 NAT + DHCP)</string>
+    <string name="setup_network_info_wifi">الاسم: %1$s\nالرابط الصاعد (Uplink): شبكة Wi-Fi، جسر شبه كامل في الطبقة 2 (Layer 2)\nالعناوين: مستخرجة من جهاز توجيه Wi-Fi (الراوتر)\nتقنية NAT: غير مستخدمة\nخادم DHCP: يُدار عبر جهاز التوجيه الخاص بك</string>
+    <string name="setup_network_info_linux">الاسم: %1$s\nالرابط الصاعد (Uplink): موجّه عبر النظام المضيف (Host)\nبروتوكول IPv4: %2$s\nبروتوكول IPv6: %3$s (ثابت، من جانب المضيف فقط)\nتقنية NAT: مفعّلة لـ IPv4\nخادم DHCP: مفعّل لـ IPv4</string>
+    <string name="setup_network_info_gvisor">الاسم: %1$s\nالرابط الصاعد (Uplink): موجّه عبر النظام المضيف داخل مساحة المستخدم (Userspace)\nبروتوكول IPv4: %2$s\nبروتوكول IPv6: %3$s\nتقنية NAT: مفعّلة لـ IPv4 وIPv6\nخادم DHCP: مفعّل لـ IPv4 وIPv6 مع دعم SLAAC</string>
+    <string name="setup_network_no_subnet">لا توجد شبكات فرعية (Subnets) شاغرة متبقية</string>
+    <string name="setup_network_created">تم إنشاء الشبكة %1$s</string>
+
+    <string name="setup_done_title">اكتمل الإعداد</string>
+    <string name="setup_done_desc">تم اجتياز جميع الفحوصات والتجهيزات بنجاح.\nأنت جاهز الآن لاستخدام DroidVM.</string>
+
+    <string name="nav_home">الرئيسية</string>
+    <string name="nav_vm">الأجهزة الافتراضية</string>
+    <string name="nav_disk">الأقراص</string>
+    <string name="nav_network">الشبكات</string>
+    <string name="nav_settings">الإعدادات</string>
+
+    <string name="home_card_daemon_running">قيد التشغيل</string>
+    <string name="home_card_daemon_stopped">متوقف</string>
+    <string name="home_card_daemon_pid">معرّف العملية (PID): %1$d</string>
+    <string name="home_card_droidvm_daemon">خدمة DroidVM الخلفية (Daemon)</string>
+    <string name="home_card_vm_title">الأجهزة الافتراضية</string>
+    <string name="home_card_vm_summary">%1$d/%2$d</string>
+    <string name="home_card_vm_empty">لا توجد أجهزة افتراضية</string>
+    <string name="home_card_disk_title">الأقراص</string>
+    <string name="home_card_disk_summary">%1$d %2$s</string>
+    <string name="home_card_disk_empty">لا توجد أقراص</string>
+    <string name="home_card_network_title">الشبكات</string>
+    <string name="home_card_network_summary">%1$d/%2$d</string>
+    <string name="home_card_network_empty">لا توجد شبكات</string>
+    <string name="home_card_update_available">يتوفر إصدار جديد: v%1$s</string>
+    <string name="home_card_update_action">عرض التحديث</string>
+    <string name="home_card_wizard_title">معالج الإنشاء</string>
+    <string name="home_card_import_title">استيراد جهاز افتراضي</string>
+    <string name="home_card_sysinfo_kernel">إصدار الكيرنل (Kernel)</string>
+    <string name="home_card_sysinfo_soc">طراز المعالج (SoC)</string>
+    <string name="home_card_help_title">المساعدة والتوثيق</string>
+    <string name="home_card_feedback_title">الإبلاغ عن مشكلة</string>
+    <string name="home_card_loading">جارٍ التحميل\u2026</string>
+    <string name="home_card_help_url">https://droid-vm.github.io/en/</string>
+
+    <string name="vm_empty">لا توجد أجهزة افتراضية بعد.</string>
+    <string name="disk_empty">لا توجد أقراص بعد.</string>
+    <string name="network_empty">لا توجد شبكات بعد.</string>
+    <string name="empty_hint">اضغط على زر + لإنشاء عنصر جديد.</string>
+    <string name="empty_icon_desc">أيقونة الحالة الفارغة</string>
+
+    <string name="fab_add_desc">إنشاء</string>
+
+    <string name="menu_refresh">تحديث</string>
+
+    <string name="vm_icon_desc">أيقونة الجهاز الافتراضي</string>
+    <string name="vm_item_info">%1$d vCPU \u00B7 %2$d ميغابايت RAM</string>
+    <string name="vm_edit">تعديل</string>
+    <string name="vm_delete">حذف</string>
+    <string name="vm_delete_confirm">هل أنت متأكد من رغبتك في حذف هذا الجهاز الافتراضي؟</string>
+    <string name="vm_delete_writable_disks">حذف ملفات الأقراص القابلة للكتابة المرتبطة به أيضًا (%1$d)</string>
+    <string name="vm_delete_disks_result">تم حذف %1$d من ملفات الأقراص؛ تم الإبقاء على %2$d مرتبطة بأجهزة افتراضية أخرى، و%3$d تُعد أقراص أساس لطبقات متراكبة (Overlays)، و%4$d تعذر حذفها.</string>
+    <string name="vm_state_stopped">متوقف</string>
+    <string name="vm_state_starting">جارٍ بدء التشغيل</string>
+    <string name="vm_state_running">يعمل</string>
+    <string name="vm_state_stopping">جارٍ إيقاف التشغيل</string>
+    <string name="vm_state_rebooting">جارٍ إعادة التشغيل</string>
+
+    <string name="vm_exited_success">توقف الجهاز الافتراضي \"%1$s\".</string>
+    <string name="vm_exited_error">خرج الجهاز الافتراضي \"%1$s\" مع رمز الخطأ %2$d.</string>
+    <string name="vm_exit_crash">تعطل الجهاز الافتراضي \"%1$s\" (الرمز %2$d).</string>
+    <string name="vm_exit_guest_panic">واجه النظام الضيف في الجهاز الافتراضي \"%1$s\" حالة ذعر في الكيرنل (Kernel Panic) (الرمز %2$d).</string>
+    <string name="vm_exit_watchdog">تجمد الجهاز الافتراضي \"%1$s\" وأعاد مراقب النظام (Watchdog) تشغيله (الرمز %2$d).</string>
+    <string name="vm_rebooting">جارٍ إعادة تشغيل الجهاز الافتراضي \"%1$s\"...</string>
+    <string name="vm_exit_dialog_title">فشل الجهاز الافتراضي \"%1$s\"</string>
+    <string name="vm_exit_dialog_message">خرج الجهاز الافتراضي مع رمز الخطأ %1$d.\n\nالسجلات:</string>
+    <string name="vm_exit_no_logs">لا توجد سجلات متاحة.</string>
+    <string name="vm_exit_see_more">عرض المزيد</string>
+
+    <string name="vm_info_start">بدء التشغيل</string>
+    <string name="vm_info_stop">إيقاف</string>
+    <string name="vm_info_restart">إعادة التشغيل</string>
+    <string name="vm_info_console">الطرفية (Console)</string>
+    <string name="vm_info_console_chooser_title">فتح الطرفية</string>
+    <string name="vm_info_created">تاريخ الإنشاء</string>
+    <string name="vm_info_cpu_value">%1$d vCPU</string>
+    <string name="vm_info_memory_value">%1$d ميغابايت (MiB)</string>
+    <plurals name="vm_info_disks_value">
+        <item quantity="zero">ولا قرص</item>
+        <item quantity="one">قرص واحد (%1$d)</item>
+        <item quantity="other">%1$d قرص</item>
+    </plurals>
+    <string name="vm_info_disks_none">لا يوجد</string>
+    <string name="vm_info_restart_confirm">إعادة تشغيل هذا الجهاز الافتراضي؟</string>
+    <string name="vm_info_delete_success">تم حذف الجهاز الافتراضي.</string>
+    <string name="vm_info_state_active">العملية نشطة</string>
+    <string name="vm_info_console_not_found">لم يتم العثور على أي طرفية</string>
+    <string name="vm_info_console_text_select">طرفية نصية %1$s</string>
+    <!-- Backend process stdio, not a guest console: "CrosVM stdio" / "QEMU stdio". -->
+    <string name="vm_info_console_stdio_select" translatable="false">%1$s stdio</string>
+    <string name="vm_info_console_vnc_select">طرفية VNC</string>
+    <string name="vm_info_console_vnc_ext_select">طرفية VNC على شاشة خارجية</string>
+    <string name="vm_info_console_native_select">شاشة العرض الأصلية (Native Display)</string>
+    <string name="vm_info_console_screen_select">%1$s \u2013 %2$s</string>
+
+    <string name="vm_info_logs">السجلات</string>
+    <string name="vm_info_logs_no_logs">لا توجد سجلات متاحة.</string>
+    <string name="vm_info_logs_save_failed">فشل حفظ السجلات.</string>
+
+    <string name="notif_channel_vm_events">أحداث الجهاز الافتراضي</string>
+    <string name="notif_channel_vm_events_desc">إشعارات تغير حالة الجهاز الافتراضي</string>
+    <string name="notif_vm_stopped_title">توقف الجهاز الافتراضي</string>
+    <string name="notif_vm_failed_title">فشل الجهاز الافتراضي</string>
+
+    <string name="create_vm_title">إنشاء جهاز افتراضي</string>
+    <string name="edit_vm_title">تعديل الجهاز الافتراضي</string>
+    <string name="create_vm_category_basic">أساسي</string>
+    <string name="create_vm_name_hint">الاسم</string>
+    <string name="create_vm_memory_hint">الذاكرة (RAM)</string>
+    <string name="create_vm_cpu_hint">عدد المعالجات (CPU)</string>
+    <string name="create_vm_backend">الواجهة الخلفية (Backend)</string>
+    <string name="create_vm_backend_crosvm">CrosVM</string>
+    <string name="create_vm_backend_qemu">QEMU</string>
+    <string name="create_vm_hypervisor">نظام إدارة المحاكاة (Hypervisor)</string>
+    <string name="create_vm_hypervisor_auto">تلقائي</string>
+    <string name="create_vm_hypervisor_soft">محاكاة برمجية (Software Emulated)</string>
+    <string name="create_vm_hypervisor_kvm">Linux KVM</string>
+    <string name="create_vm_hypervisor_gunyah">Qualcomm Gunyah</string>
+    <string name="create_vm_hypervisor_geniezone">MediaTek GenieZone</string>
+    <string name="create_vm_btn">إنشاء</string>
+    <string name="create_vm_error_name_empty">الاسم مطلوب</string>
+    <string name="create_vm_error_name_invalid">يحتوي الاسم على رموز غير صالحة</string>
+    <string name="create_vm_error_name_duplicate">يوجد جهاز افتراضي بهذا الاسم بالفعل</string>
+    <string name="create_vm_error_save">حدث خطأ أثناء حفظ الإعدادات</string>
+    <string name="create_vm_error_invalid_number">رقم غير صالح</string>
+    <string name="create_vm_error_invalid_environment_variable">يجب أن تكون متغيرات البيئة بتنسيق KEY=VALUE</string>
+    <string name="create_vm_error_gpu_guest_prealloc_exceeds_pool">لا يمكن للتعيين المسبق للنظام الضيف (Guest Preallocation) تجاوز حجم تجمع الذاكرة (Guest Pool)</string>
+    <string name="create_vm_error_gpu_guest_dynamic_requires_room">يجب أن يكون التعيين المسبق للنظام الضيف أقل من حجم تجمع الذاكرة عند تفعيل خطوة التوسعة (Step)</string>
+    <string name="create_vm_error_gpu_guest_step_invalid">يجب أن تكون خطوة تخصيص النظام الضيف 0 أو من مضاعفات قوى العدد 2 بحجم 2 ميغابايت على الأقل</string>
+    <string name="create_vm_error_hypervisor_not_supported">نظام الـ Hypervisor المحدّد غير مدعوم من الواجهة الخلفية (Backend) المختارة</string>
+    <string name="create_vm_error_path_invalid">مسار مطلق (Absolute Path) غير صالح</string>
+    <string name="create_vm_error_native_display_only_crosvm">شاشة العرض الأصلية (Native Display) تعمل فقط مع واجهة CrosVM الخلفية.</string>
+    <string name="create_vm_category_kernel">كيرنل Linux</string>
+    <string name="create_vm_kernel_hint">الكيرنل (Kernel)</string>
+    <string name="create_vm_initrd_hint">ملف Initrd</string>
+    <string name="create_vm_cmdline_hint">معلمات سطر أوامر الكيرنل (Cmdline)</string>
+    <string name="create_vm_category_options">خيارات الجهاز الافتراضي</string>
+    <string name="create_vm_balloon">التحكم الديناميكي بالذاكرة (Balloon)</string>
+    <string name="create_vm_pmu">وحدة مراقبة الأداء (PMU)</string>
+    <string name="create_vm_rng">مولّد الأرقام العشوائية (RNG)</string>
+    <string name="create_vm_smt">تعدد خيوط المعالجة المتزامن (SMT)</string>
+    <string name="create_vm_debug">تتبع تصحيح الأخطاء (Debug trace)</string>
+    <string name="create_vm_protected_vm">جهاز افتراضي محمي (Protected VM)</string>
+    <string name="create_vm_swiotlb_hint">حجم SWIOTLB (للأجهزة الافتراضية المحمية)</string>
+    <string name="create_vm_sandbox">بيئة العزل (Sandbox)</string>
+    <string name="create_vm_hugepages">صفحات الذاكرة الضخمة (Hugepages)</string>
+    <string name="create_vm_prepare_lend_mthp">إعداد إعارة الذاكرة عبر mTHP</string>
+    <string name="create_vm_prepare_lend_mthp_disabled">معطّل</string>
+    <string name="create_vm_prepare_lend_mthp_single">كتلة واحدة (المنطقة بأكملها)</string>
+    <string name="create_vm_prepare_lend_mthp_chunked">مجزأة (&#8804; 256 ميغابايت)</string>
+    <string name="create_vm_protected_normal">غير محمي</string>
+    <string name="create_vm_protected_protected">محمي</string>
+    <string name="create_vm_protected_without_firmware">محمي بدون فيرموير</string>
+    <string name="create_vm_protected_pseudo_unprotected">شبه غير محمي (Pseudo Unprotected)</string>
+    <string name="create_vm_category_extra_options">خيارات إضافية</string>
+    <string name="create_vm_extra_option_hint">معطيات إضافية (معطى واحد في كل سطر)</string>
+    <string name="create_vm_environment_variables_hint">متغيرات البيئة (KEY=VALUE، متغير واحد في كل سطر)</string>
+
+    <string name="create_vm_category_gpu_cgroup">مجموعة معالجة مهام الرسوميات (GPU Worker Cpuset)</string>
+    <string name="create_vm_cpu_affinity_title">تقارب معالجات vCPU (Affinity)</string>
+    <string name="create_vm_cpu_affinity">ربط معالجات vCPU بأنوية المضيف</string>
+    <string name="create_vm_cpu_affinity_vcpu_fmt">vCPU %d</string>
+    <string name="create_vm_cpu_affinity_vcpu_range_fmt">vCPU %s</string>
+    <string name="create_vm_cpu_affinity_unbound">غير مربوط</string>
+    <string name="create_vm_cpu_affinity_cores_fmt">%d أنوية</string>
+    <string name="create_vm_cpu_affinity_advanced">الوضع المتقدم</string>
+    <string name="create_vm_cpu_affinity_simple_vcpus">أنوية vCPU</string>
+    <string name="create_vm_cpu_affinity_simple_empty">حدد نواة مضيف واحدة على الأقل.</string>
+    <string name="create_vm_cpu_affinity_discard_title">الخروج من الوضع المتقدم؟</string>
+    <string name="create_vm_cpu_affinity_discard_message">يمكن للوضع البسيط ربط معالج vCPU واحد فقط بنواة مضيف مخصصة له. ما سيتبقى هو %1$d vCPU على النواة %2$s؛ بينما سيتم تجاهل الأنوية الإضافية، ومعالجات vCPU غير المربوطة، وقيم السعة/المجموعات (Clusters) اليدوية.</string>
+    <string name="create_vm_cpu_affinity_section_vcpus">ربط معالجات vCPU بأنوية المضيف</string>
+    <string name="create_vm_cpu_affinity_section_topology">طوبولوجيا المعالج للنظام الضيف (Guest Topology)</string>
+    <string name="create_vm_cpu_topology_auto">اشتقاق السعة والمجموعات (Clusters) تلقائيًا</string>
+    <string name="create_vm_cpu_topology_unset">عدم التمرير إلى النظام الضيف</string>
+    <string name="create_vm_cpu_capacity">السعة (Capacity)</string>
+    <string name="create_vm_cpu_capacity_group_fmt">vCPU %1$s: %2$d</string>
+    <string name="create_vm_cpu_capacity_hint">مثال: 0=792,1=792,6=1024</string>
+    <string name="create_vm_cpu_cluster">المجموعات (Clusters)</string>
+    <string name="create_vm_cpu_cluster_count_fmt">%d مجموعات</string>
+    <string name="create_vm_cpu_cluster_single">مجموعة واحدة (الافتراضي في crosvm)</string>
+    <string name="create_vm_cpu_clusters_hint">مثال: 0-5;6 (مفصولة بفاصلة منقوطة)</string>
+    <string name="create_vm_cpu_affinity_big_only">الأنوية الكبيرة فقط (Big cores)</string>
+    <string name="create_vm_cpu_affinity_host_overlap">النواة %s مشتركة مع مجموعة معالجة مهام الرسوميات (GPU worker cpuset)</string>
+    <string name="create_vm_gpu_cgroup">مجموعة معالجة مهام الرسوميات (GPU Worker Cpuset)</string>
+    <string name="create_vm_gpu_cgroup_path_hint">مسار Cpuset (مثال: dev/cpuset/gpuworker/)</string>
+    <string name="create_vm_gpu_cgroup_cpus">أنوية Cpuset</string>
+    <string name="create_vm_gpu_cgroup_cpus_summary_fmt">الأنوية: %s</string>
+    <string name="create_vm_gpu_cgroup_cpus_none">لم يتم تحديد أي نواة</string>
+    <string name="create_vm_error_cpu_affinity_vcpu_oob">فهرس vCPU خارج النطاق (يجب أن يكون أقل من عدد الأنوية)</string>
+    <string name="create_vm_error_cpu_affinity_host_oob">نواة المضيف %d غير موجودة على هذا الجهاز</string>
+    <string name="create_vm_error_cpu_capacity_invalid">قيمة سعة غير صالحة (المتوقع: vcpu=1..1024,&#8230;)</string>
+    <string name="create_vm_error_cpu_clusters_overlap">تداخل في المجموعات عند معالج vCPU %s</string>
+    <string name="create_vm_error_gpu_cgroup_path">يجب أن يكون مسار GPU cgroup مسارًا مطلقًا</string>
+    <string name="create_vm_error_gpu_cgroup_cpus_empty">حدد نواة واحدة على الأقل لعامل الرسوميات (GPU Worker)</string>
+    <string name="create_vm_error_gpu_rt_prio_needs_cpuset">تتطلب الجدولة في الوقت الحقيقي (Real-Time) تحديد أنوية cpuset: قد يؤدي تشغيلها دون قيود إلى استنزاف موارد الهاتف بالكامل.</string>
+    <string name="create_vm_gpu_backend">المصيّر (Renderer)</string>
+    <string name="create_vm_gpu_backend_2d">ثنائي الأبعاد (برمجي)</string>
+    <string name="create_vm_gpu_backend_virglrenderer">VirGL</string>
+    <string name="create_vm_gpu_backend_gfxstream">GfxStream</string>
+    <string name="create_vm_gpu_api">واجهة برمجة تطبيقات الرسوميات (GPU API)</string>
+    <string name="create_vm_gpu_api_vulkan">Vulkan</string>
+    <string name="create_vm_gpu_api_egl">EGL</string>
+    <string name="create_vm_gpu_api_opengles">OpenGL ES</string>
+    <string name="create_vm_gpu_api_angle">ANGLE</string>
+    <string name="create_vm_gpu_api_vulkan_system">Vulkan (برنامج تشغيل النظام)</string>
+    <string name="create_vm_gpu_api_vulkan_turnip">Vulkan (برنامج تشغيل Turnip)</string>
+    <string name="create_vm_gpu_api_drm2kgsl">DRM إلى KGSL</string>
+    <string name="create_vm_gpu_mode_opengl">OpenGL</string>
+    <string name="create_vm_gpu_mode_vulkan">Vulkan</string>
+    <string name="create_vm_gpu_mode_native">السياق الأصلي (Native Context)</string>
+    <string name="create_vm_gpu_provider_drm2kgsl">DRM إلى KGSL</string>
+    <string name="create_vm_gpu_mode">واجهة برمجة التطبيقات الرسومية</string>
+    <string name="create_vm_gpu_provider">برنامج تشغيل المضيف (Host Driver)</string>
+    <string name="create_vm_gpu_api_vulkan_panvk">Vulkan (برنامج تشغيل PanVK)</string>
+    <string name="create_vm_display_blit_provider">مزود نقل ومعالجة الإطارات بالـ GPU (GPU-blit)</string>
+    <string name="create_vm_display_blit_off">معطّل (نسخ عبر المعالج CPU)</string>
+    <string name="display_blit_system_missing_ext">يفتقر برنامج تشغيل Vulkan الخاص بالنظام إلى امتدادات يحتاجها نقل ومعالجة الرسوميات (GPU blit):\n  %1$s\nستتراجع شاشة العرض الأصلية تلقائيًا إلى النسخ عبر المعالج (CPU copy).</string>
+    <string name="create_vm_gpu_udmabuf">udmabuf (تخصيص عبر النظام الضيف)</string>
+    <string name="create_vm_gpu_rt_prio">الجدولة في الوقت الحقيقي (Real-Time)</string>
+    <string name="create_vm_gpu_host_pool_mb">حجم تجمع المخزن المؤقت للأوامر (MB)</string>
+    <string name="create_vm_gpu_drm2kgsl_pool_mb">حجم تجمع المخزن المؤقت للأوامر (MB)</string>
+    <string name="create_vm_gpu_venus_pool_mb">حجم تجمع المخزن المؤقت للأوامر (MB)</string>
+    <string name="create_vm_gpu_dynamic_vram">ذاكرة VRAM ديناميكية</string>
+    <string name="create_vm_gpu_vram_quota_mb">الحصة المخصصة لـ VRAM الديناميكية (MB)</string>
+    <string name="create_vm_gpu_vram_folio_threshold_kb">حد صفحات الذاكرة الضخمة لتخصيصات المضيف (KB)</string>
+    <string name="create_vm_gpu_pool_blob_max_kb">حد توجيه كائنات البيانات الثنائية (Blob) (KB)</string>
+    <string name="create_vm_gpu_guest_pool_mb">حجم ذاكرة VRAM (ميغابايت)</string>
+    <string name="create_vm_gpu_guest_prealloc_mb">التعيين المسبق للنظام الضيف (MB)</string>
+    <string name="create_vm_gpu_guest_step_mb">خطوة تخصيص الذاكرة للنظام الضيف (MB)</string>
+    <string name="create_vm_gpu_guest_max_grants">الحد الأقصى لمنح النظام الضيف (0 = بلا حدود)</string>
+    <string name="create_vm_category_vram">ذاكرة الفيديو (VRAM)</string>
+    <string name="create_vm_category_screen_gpu0">Virtio-GPU</string>
+    <string name="create_vm_category_screen_simplefb">SimpleFB</string>
+    <string name="create_vm_category_renderer">المصيّر (Renderer)</string>
+    <string name="create_vm_category_screen_display">إعدادات شاشة العرض</string>
+    <string name="create_vm_category_screen_export">إعدادات التصدير</string>
+    <string name="create_vm_screen_gpu0">شاشة Virtio-GPU</string>
+    <string name="create_vm_screen_simplefb">شاشة SimpleFB</string>
+    <string name="create_vm_screen_enabled">تفعيل جهاز العرض</string>
+    <string name="create_vm_display_width">العرض</string>
+    <string name="create_vm_display_height">الارتفاع</string>
+    <string name="create_vm_display_refresh_rate">معدل التحديث (هرتز)</string>
+    <string name="create_vm_display_poll_hz">معدل الاستقصاء (هرتز)</string>
+    <string name="create_vm_display_resolution">دقة الشاشة</string>
+    <string name="create_vm_display_size_fmt">%1$d × %2$d</string>
+    <string name="create_vm_display_rate_fmt">%1$d هرتز</string>
+    <string name="create_vm_display_custom">مخصص...</string>
+    <string name="create_vm_display_custom_size_title">دقة مخصصة</string>
+    <string name="create_vm_display_dpi_h">الكثافة النقطية الأفقية (DPI)</string>
+    <string name="create_vm_display_dpi_v">الكثافة النقطية الرأسية (DPI)</string>
+    <string name="create_vm_screen_exporter">مصدّر الشاشة (Exporter)</string>
+    <string name="create_vm_screen_exporter_none">مصرّف العرض (تجاهل الإخراج)</string>
+    <string name="create_vm_screen_exporter_native">شاشة العرض الأصلية (Native display)</string>
+    <string name="create_vm_screen_exporter_vnc">VNC</string>
+    <string name="create_vm_screen_transport">مسار نقل البيانات (Transport pipeline)</string>
+    <string name="create_vm_screen_transport_cpu">نسخ عبر المعالج (CPU Copy)</string>
+    <string name="create_vm_screen_transport_gpu">نسخ عبر معالج الرسوميات (GPU Copy)</string>
+    <string name="create_vm_screen_transport_zero">نسخ صفري (Zero Copy)</string>
+    <string name="create_vm_screen_transport_gpu_hw">نسخ عبر GPU (ترميز عتادي)</string>
+    <string name="create_vm_option_not_implemented">غير مفعّل</string>
+    <string name="create_vm_option_unavailable_reset">أحد الخيارات المحفوظة غير متاح في هذا الإصدار؛ تمت إعادة تعيين هذا الحقل إلى قيمته الافتراضية.</string>
+    <string name="create_vm_screen_input_enabled">أجهزة الإدخال</string>
+    <string name="create_vm_error_vnc_port_conflict">لا يمكن لخدمتي استماع استخدام نفس المنفذ.</string>
+    <string name="create_vm_vnc_host">المضيف (Host)</string>
+    <string name="create_vm_vnc_host_iface_fmt">%1$s (%2$s)</string>
+    <string name="create_vm_vnc_host_custom_title">عنوان مخصص</string>
+    <string name="create_vm_error_invalid_host">أدخل عنوانًا خاليًا من المسافات والفواصل وعلامات الاقتباس والأقواس.</string>
+    <string name="create_vm_vnc_port">المنفذ</string>
+    <string name="create_vm_vnc_password_auth">المصادقة بكلمة مرور</string>
+    <string name="create_vm_vnc_password">كلمة المرور</string>
+    <string name="create_vm_vnc_password_clear">مسح كلمة المرور</string>
+    <string name="create_vm_vnc_password_generate">توليد كلمة مرور</string>
+    <string name="create_vm_category_disks">الأقراص</string>
+    <string name="create_vm_category_network">الشبكة</string>
+    <string name="create_vm_tab_basic">أساسي</string>
+    <string name="create_vm_tab_boot">الإقلاع</string>
+    <string name="create_vm_tab_storage">التخزين</string>
+    <string name="create_vm_tab_network">الشبكة</string>
+    <string name="create_vm_tab_graphics">الرسوميات</string>
+    <string name="create_vm_tab_peripheral">الملحقات</string>
+    <string name="create_vm_network_label">شبكة الجسر (Bridge Network)</string>
+    <string name="create_vm_network_none">لا يوجد</string>
+    <string name="edit_vm_net_add">إضافة شبكة</string>
+    <string name="edit_vm_net_empty">لم تتم إضافة أي شبكات.</string>
+    <string name="edit_vm_net_delete">إزالة الشبكة</string>
+    <string name="edit_vm_net_mac_hint">عنوان MAC (اختياري)</string>
+    <string name="edit_vm_net_mac_random">عشوائي</string>
+    <string name="edit_vm_net_mac_security">تصفية عناوين MAC</string>
+    <string name="edit_vm_net_isolated">معزولة</string>
+    <string name="edit_vm_net_vlan">معرّف شبكة VLAN</string>
+    <string name="edit_vm_net_vlan_id">VLAN</string>
+    <string name="edit_vm_net_vlan_no_untagged">المنافذ غير الموسومة فقط (0) غير مدعومة على جسر Linux؛ استخدم VLAN موسومة (Tagged) أو منفذ Trunk</string>
+    <string name="edit_vm_net_vlan_invalid">يجب أن تكون قيمة VLAN بين 0-4094، أو 4095 لمنفذ Trunk</string>
+    <string name="edit_vm_net_dhcp4_lease">حجز ثابت لعنوان DHCPv4</string>
+    <string name="edit_vm_net_dhcp6_lease">حجز ثابت لعنوان DHCPv6</string>
+    <string name="edit_vm_net_lease_offset">إزاحة العنوان (Address offset)</string>
+    <string name="edit_vm_net_forwards">إعادة توجيه المنافذ (مثال: tcp 80:80)</string>
+    <string name="edit_vm_net_forwards_hint">إدخال واحد في كل سطر: [البروتوكول] المضيف:الضيف (بدون بروتوكول = tcp+udp)، أو نطاقات مثل 8000-9000:8000-9000</string>
+    <string name="edit_vm_net_forwards_need_snat">لا تصبح إعادة توجيه المنافذ فعالة إلا مع تفعيل SNAT</string>
+    <string name="edit_vm_net_dhcp_need_enable">فعّل DHCPv%1$s على الشبكة \"%2$s\" لـ VLAN %3$d أولاً</string>
+    <string name="edit_vm_net_dhcp_trunk_note">" (يتم تعيين VLAN 4095 إلى VLAN 0 الخاصة بالشبكة)"</string>
+    <string name="vm_info_port_forwards">إعادة توجيه المنافذ</string>
+    <string name="vm_info_pf_none">لا توجد عمليات توجيه نشطة</string>
+    <string name="edit_vm_disk_path_hint">المسار</string>
+    <string name="edit_vm_disk_readonly">للقراءة فقط</string>
+    <string name="edit_vm_disk_bus">الناقل (Bus)</string>
+    <string name="edit_vm_disk_delete">إزالة القرص</string>
+    <string name="edit_vm_disk_browse">استعراض</string>
+    <string name="edit_vm_disk_browse_title">تحديد مصدر القرص</string>
+    <string name="edit_vm_disk_browse_registered">تحديد قرص مسجل</string>
+    <string name="edit_vm_disk_browse_import_create">استيراد أو إنشاء قرص</string>
+    <string name="edit_vm_disk_no_registered">لم يتم العثور على أقراص مسجلة.</string>
+    <string name="edit_vm_disk_add">إضافة قرص</string>
+    <string name="edit_vm_disk_empty">لم تتم إضافة أي أقراص.</string>
+
+    <string name="create_vm_category_shared_dirs">نظام الملفات (Filesystem)</string>
+    <string name="edit_vm_shared_dir_add">إضافة مجلد مشترك</string>
+    <string name="edit_vm_shared_dir_empty">لم تتم إضافة أي مجلدات مشتركة.</string>
+    <string name="edit_vm_shared_dir_path_hint">مسار المجلد على المضيف (Host)</string>
+    <string name="edit_vm_shared_dir_tag_hint">الوسم (Tag)</string>
+    <string name="edit_vm_shared_dir_type">النوع</string>
+    <string name="edit_vm_shared_dir_cache">التخزين المؤقت (Cache)</string>
+    <string name="edit_vm_shared_dir_writeback">الكتابة اللاحقة (Writeback)</string>
+    <string name="edit_vm_shared_dir_dax">الوصول المباشر للذاكرة (DAX)</string>
+    <string name="edit_vm_shared_dir_type_unavailable">بروتوكول 9P غير مفعّل. بروتوكول virtio-fs هو المدعوم حاليًا فقط.</string>
+    <string name="edit_vm_shared_dir_dax_unavailable">ميزة DAX غير مدعومة على معمارية arm64؛ لعدم توفر نافذة ذاكرة مشتركة في المضيف لتعيين الملفات إليها.</string>
+    <string name="edit_vm_shared_dir_posix_acl">قوائم التحكم بالوصول POSIX ACL</string>
+    <string name="edit_vm_shared_dir_root_access">صلاحية الـ Root</string>
+    <string name="edit_vm_shared_dir_root_access_summary">معطّل: تُقرأ ملفات المضيف وتُكتب بهوية تطبيق DroidVM. مفعّل: بهوية مستخدم root.</string>
+    <string name="edit_vm_shared_dir_root_access_no_identity">تعذر تحديد هوية التطبيق. افتح تطبيق DroidVM لمرة واحدة، أو فعّل صلاحية الـ root لهذا المجلد.</string>
+    <string name="edit_vm_shared_dir_delete">إزالة المجلد المشترك</string>
+    <string name="edit_vm_shared_dir_browse">استعراض</string>
+
+    <string name="edit_vm_kernel_browse_title">تحديد الكيرنل (Kernel)</string>
+    <string name="edit_vm_kernel_clear">مسح</string>
+    <string name="edit_vm_kernel_builtin">كيرنل Linux المدمج في DroidVM</string>
+    <string name="edit_vm_kernel_microdroid">كيرنل MicroDroid الخاص بالنظام</string>
+    <string name="edit_vm_kernel_external">تحديد ملف خارجي</string>
+    <string name="edit_vm_kernel_not_found">الكيرنل الهدف غير موجود: %1$s</string>
+    <string name="edit_vm_boot_protocol">بروتوكول الإقلاع</string>
+    <string name="edit_vm_boot_protocol_uefi">UEFI</string>
+    <string name="edit_vm_boot_protocol_linux">بروتوكول إقلاع Linux</string>
+    <string name="edit_vm_uefi_firmware">فيرموير UEFI (فارغ = EDK2 المدمج)</string>
+    <string name="edit_vm_uefi_firmware_builtin">EDK2 المدمج</string>
+    <string name="edit_vm_uefi_firmware_browse_title">تحديد فيرموير UEFI</string>
+    <string name="edit_vm_uefi_vars">متغيرات UEFI (فارغ = متغيرات EDK2 المدمجة)</string>
+    <string name="edit_vm_uefi_vars_browse_title">تحديد متغيرات UEFI</string>
+    <string name="edit_vm_uefi_vars_too_large">بالنسبة لـ crosvm، يجب ألا يتجاوز حجم صورة pflash مقدار %1$d ميغابايت (MiB)</string>
+    <string name="edit_vm_uefi_vars_enabled">تفعيل متغيرات UEFI عبر (pflash)</string>
+    <string name="edit_vm_uefi_vars_enabled_subtitle">إرفاق مخزن متغيرات UEFI. عند التفعيل، يتعطل ناقل PFLASH في قسم التخزين.</string>
+    <string name="edit_vm_kernel_source">مصدر الكيرنل</string>
+    <string name="edit_vm_kernel_source_image">صورة القرص (Disk image)</string>
+    <string name="edit_vm_kernel_source_manual">يدوي</string>
+    <string name="edit_vm_boot_image_disk">قرص الإقلاع</string>
+    <string name="edit_vm_boot_entry">مدخل الإقلاع (Boot entry)</string>
+    <string name="edit_vm_boot_entry_auto">تلقائي (الافتراضي لمدير الإقلاع)</string>
+    <string name="edit_vm_boot_entry_default_mark">%1$s (افتراضي)</string>
+    <string name="edit_vm_boot_entry_builtin">كيرنل Linux المدمج في DroidVM</string>
+    <string name="edit_vm_boot_entry_dma_warn">خيار DMA_RESTRICTED_POOL مفقود</string>
+    <string name="edit_vm_boot_detect_title">ملفات الإقلاع المكتشفة</string>
+    <string name="edit_vm_boot_detect_kernel">الكيرنل (Kernel)</string>
+    <string name="edit_vm_boot_detect_initrd">ملف initrd</string>
+    <string name="edit_vm_boot_detect_cmdline">معلمات سطر الأوامر (Cmdline)</string>
+    <string name="edit_vm_boot_detect_source">المصدر</string>
+    <string name="edit_vm_boot_detect_scanning">جارٍ الفحص...</string>
+    <string name="edit_vm_boot_detect_failed">فشل الفحص: %1$s</string>
+    <string name="edit_vm_boot_detect_no_disk">لم يتم ضبط أي صورة قرص لهذا الجهاز الافتراضي</string>
+    <string name="edit_vm_boot_rescan">إعادة الفحص</string>
+    <string name="edit_vm_boot_vdafix">إصلاح تلقائي لمعلمة الجهاز root=‎</string>
+    <string name="edit_vm_boot_wait">العد التنازلي لقائمة الإقلاع (بالثواني)</string>
+    <string name="edit_vm_boot_wait_invalid">يجب إدخال عدد ثوانٍ صحيح</string>
+    <string name="edit_vm_boot_cmdline_override">تجاوز معلمات Cmdline (فارغ = من صورة القرص)</string>
+    <string name="edit_vm_boot_menu_title">تحديد مدخل الإقلاع -- %1$s</string>
+    <string name="edit_vm_boot_menu_boot">إقلاع</string>
+    <string name="edit_vm_boot_menu_boot_in">إقلاع خلال (%1$d)</string>
+    <string name="edit_vm_boot_menu_remember">تذكر هذا الاختيار</string>
+    <string name="edit_vm_boot_menu_fallback">المدخل المثبت \"%1$s\" غير موجود؛ سيتم استخدام الافتراضي</string>
+    <string name="edit_vm_boot_menu_pseudo">إقلاع في وضع شبه غير محمي (Pseudo-unprotected)</string>
+    <string name="edit_vm_boot_menu_windows_only">تحتوي هذه الصورة على نظام Windows، ولا يمكن تشغيله عبر الإقلاع المباشر للكيرنل. استخدم الكيرنل المدمج أدناه، أو قم بتغيير بروتوكول الإقلاع إلى UEFI.</string>
+    <string name="edit_vm_boot_protected_dma_warn">يفتقر هذا الكيرنل إلى تكوين CONFIG_DMA_RESTRICTED_POOL.\nفي وضع الجهاز الافتراضي المحمي، لا يمكن للنظام الضيف مشاركة ذاكرة DMA مع المضيف، مما سيؤدي لفشل تشغيل أجهزة virtio (القرص/الشبكة).\nاستخدم الكيرنل المدمج، أو أعد بناء الكيرنل مع تفعيل CONFIG_DMA_RESTRICTED_POOL.</string>
+    <string name="kernel_analysis_title">تحليل الكيرنل</string>
+    <string name="kernel_analysis_analyze">تحليل</string>
+    <string name="kernel_analysis_hint">تحليل الكيرنل وملف initrd الخاص بالصورة عبر الشبكة قبل الاستيراد</string>
+    <string name="kernel_analysis_need_url">أدخل أولاً رابط صورة صحيح يبدأ بـ http(s)://‎</string>
+    <string name="kernel_analysis_found">تم العثور على %1$d من مداخل الإقلاع</string>
+    <string name="kernel_analysis_progress">جارٍ التنزيل: %1$d/%2$d من الأجزاء</string>
+    <string name="kernel_analysis_progress_n">جارٍ التنزيل: %1$d أجزاء</string>
+    <string name="edit_vm_initrd_browse_title">تحديد ملف initramfs</string>
+    <string name="edit_vm_initrd_clear">مسح</string>
+    <string name="edit_vm_initrd_builtin">ملف initrd الخاص بـ Linux المدمج في DroidVM</string>
+    <string name="edit_vm_initrd_microdroid">ملف initrd الخاص بـ MicroDroid للنظام</string>
+    <string name="edit_vm_initrd_microdroid_debug">ملف initrd لـ MicroDroid للنظام (قابل لتصحيح الأخطاء Debug)</string>
+    <string name="edit_vm_initrd_external">تحديد ملف خارجي</string>
+    <string name="edit_vm_initrd_not_found">ملف initramfs الهدف غير موجود: %1$s</string>
+    <string name="edit_vm_network_cannot_be_empty">لا يمكن أن يكون حقل الشبكة فارغًا.</string>
+    <string name="edit_vm_target_disk_path_invalid">مسار القرص الهدف غير صالح</string>
+    <string name="edit_vm_shared_directory_path_invalid">مسار المجلد المشترك غير صالح</string>
+    <string name="edit_vm_shared_dir_tag_invalid">وسم المجلد المشترك غير صالح</string>
+    <string name="edit_vm_shared_dir_tag_duplicated">وسم المجلد المشترك مكرر</string>
+
+  <string name="settings_category_general">عام</string>
+    <string name="settings_language_title">اللغة</string>
+    <string name="settings_language_summary">تغيير لغة عرض التطبيق</string>
+    <string name="settings_language_system_default">الافتراضية للنظام</string>
+    <string name="settings_category_backup">النسخ الاحتياطي</string>
+    <string name="settings_export_config_title">تصدير التكوين إلى ملف</string>
+    <string name="settings_export_config_summary">نسخ إعدادات الأجهزة الافتراضية والشبكات والأقراص احتياطيًا إلى ملف JSON</string>
+    <string name="settings_import_config_title">استيراد التكوين من ملف</string>
+    <string name="settings_import_config_summary">استعادة إعدادات الأجهزة الافتراضية والشبكات والأقراص من ملف JSON</string>
+    <string name="settings_export_success">تم تصدير التكوين بنجاح.</string>
+    <string name="settings_export_failed">فشل التصدير: %1$s</string>
+    <string name="settings_import_confirm_title">استيراد التكوين</string>
+    <string name="settings_import_confirm_message">سيؤدي هذا إلى استبدال تكوينات الأجهزة الافتراضية والأقراص والشبكات الحالية بالبيانات الموجودة في الملف المحدد. هل أنت متأكد من رغبتك في المتابعة؟</string>
+    <string name="settings_import_success">تم استيراد %1$d من ملفات التكوين بنجاح.</string>
+    <string name="settings_import_failed">فشل الاستيراد: %1$s</string>
+    <string name="settings_import_invalid_json">الملف المحدد ليس ملف نسخ احتياطي صالحًا للتكوين.</string>
+    <string name="settings_category_vm">الجهاز الافتراضي</string>
+    <string name="settings_vm_auto_console_title">فتح الطرفية عند بدء التشغيل</string>
+    <string name="settings_vm_auto_console_summary">فتح شاشة الطرفية (Console) تلقائيًا عند بدء تشغيل الجهاز الافتراضي</string>
+    <string name="settings_vm_clear_logs_before_start_title">مسح السجلات قبل البدء</string>
+    <string name="settings_vm_clear_logs_before_start_summary">مسح جميع سجلات الطرفية للجهاز الافتراضي قبل بدء تشغيله</string>
+    <string name="settings_optimize_compression_title">تحسين الضغط</string>
+    <string name="settings_optimize_compression_ask">السؤال في كل مرة</string>
+    <string name="disk_compress_none">غير مضغوط</string>
+    <string name="disk_optimize_compress_remember">تذكر هذا الاختيار</string>
+    <string name="settings_cpu_affinity_title">تقارب المعالج (CPU Affinity)</string>
+    <string name="settings_cpu_affinity_summary_fmt">تُنفذ عمليات القرص على الأنوية %1$s</string>
+    <string name="settings_cpu_affinity_all_cores">يمكن لعمليات القرص استخدام جميع الأنوية</string>
+    <string name="settings_cpu_affinity_big_only">الأنوية الكبيرة فقط (Big cores)</string>
+    <string name="settings_cpu_affinity_tier_little">صغيرة (little)</string>
+    <string name="settings_cpu_affinity_tier_big">كبيرة (big)</string>
+    <string name="settings_cpu_affinity_tier_prime">فائقة (prime)</string>
+    <string name="settings_optimize_sdcard_title">الوصول المباشر إلى وحدة التخزين الخارجية</string>
+    <string name="settings_optimize_sdcard_summary">استخدام ‎/data/media بدلًا من ‎/storage/emulated لتحسين أداء القرص</string>
+    <string name="settings_category_about">حول التطبيق</string>
+    <string name="settings_feedback_title">الملاحظات والآراء</string>
+    <string name="settings_feedback_summary">الإبلاغ عن المشكلات على GitHub</string>
+    <string name="settings_license_title">تراخيص البرمجيات مفتوحة المصدر</string>
+    <string name="settings_license_summary">عرض تراخيص برمجيات الطرف الثالث</string>
+    <string name="settings_privacy_title">سياسة الخصوصية</string>
+    <string name="settings_privacy_summary">عرض سياسة الخصوصية</string>
+    <string name="settings_category_update">التحديثات</string>
+    <string name="settings_auto_check_update_title">التحقق التلقائي من وجود تحديثات</string>
+    <string name="settings_auto_check_update_summary">التحقق تلقائيًا من وجود تحديثات عند بدء تشغيل التطبيق</string>
+    <string name="settings_check_update_title">التحقق من وجود تحديثات</string>
+    <string name="settings_check_update_summary">البحث عن إصدار جديد الآن</string>
+    <string name="settings_check_update_checking">جارٍ البحث عن تحديثات\u2026</string>
+    <string name="settings_check_update_no_update">أنت تستخدم أحدث إصدار بالفعل</string>
+    <string name="settings_check_update_error">فشل التحقق من وجود تحديثات</string>
+    <string name="settings_api_manager_title">خدمات API</string>
+    <string name="settings_api_manager_summary">إدارة خدمات API السحابية</string>
+    <string name="settings_api_manager_not_loaded">لم يتم تحميل معلومات API. يُرجى الموافقة على سياسة الخصوصية أولاً.</string>
+    <string name="license_detail_description">الوصف</string>
+    <string name="license_detail_license">الترخيص</string>
+    <string name="license_detail_urls">الروابط</string>
+
+    <string name="key_esc" translatable="false">ESC</string>
+    <string name="key_slash" translatable="false">/</string>
+    <string name="key_dash" translatable="false">-</string>
+    <string name="key_home" translatable="false">HOME</string>
+    <string name="key_up" translatable="false">\u2191</string>
+    <string name="key_end" translatable="false">END</string>
+    <string name="key_pgup" translatable="false">PGUP</string>
+    <!-- Still a text key on the console screen, which has its own key row. -->
+    <string name="key_tab" translatable="false">TAB</string>
+    <string name="key_desc_tab">مفتاح Tab</string>
+    <string name="key_ctrl" translatable="false">CTRL</string>
+    <string name="key_alt" translatable="false">ALT</string>
+    <string name="key_left" translatable="false">\u2190</string>
+    <string name="key_down" translatable="false">\u2193</string>
+    <string name="key_right" translatable="false">\u2192</string>
+    <string name="key_pgdn" translatable="false">PGDN</string>
+    <string name="key_desc_backspace">مفتاح Backspace</string>
+    <string name="key_desc_win">مفتاح Windows</string>
+    <string name="key_del" translatable="false">DEL</string>
+    <string name="key_ins" translatable="false">INS</string>
+    <string name="key_desc_shift">مفتاح Shift</string>
+    <string name="key_desc_enter">مفتاح الإدخال (Enter)</string>
+    <string name="key_desc_ime">إظهار لوحة المفاتيح</string>
+    <string name="key_fnx" translatable="false">Fn</string>
+    <string name="key_f1" translatable="false">F1</string>
+    <string name="key_f2" translatable="false">F2</string>
+    <string name="key_f3" translatable="false">F3</string>
+    <string name="key_f4" translatable="false">F4</string>
+    <string name="key_f5" translatable="false">F5</string>
+    <string name="key_f6" translatable="false">F6</string>
+    <string name="key_f7" translatable="false">F7</string>
+    <string name="key_f8" translatable="false">F8</string>
+    <string name="key_f9" translatable="false">F9</string>
+    <string name="key_f10" translatable="false">F10</string>
+    <string name="key_f11" translatable="false">F11</string>
+    <string name="key_f12" translatable="false">F12</string>
+    <string name="key_prtsc" translatable="false">PRTSC</string>
+    <string name="key_pause" translatable="false">PAUSE</string>
+
+  <string name="vm_daemon_error">فشل الاتصال بالخدمة الخلفية (Daemon).</string>
+    <string name="vm_compressed_disk_title">صورة قرص مضغوطة</string>
+    <string name="vm_compressed_disk_message">لا يمكن لـ crosvm قراءة صور qcow2 المضغوطة -- سيتوقف إقلاع الجهاز الافتراضي بسبب أخطاء إدخال/إخراج (I/O) مع غياب جدول التقسيم. هل تريد تحويلها إلى صورة غير مضغوطة والبدء؟\n%1$s</string>
+    <string name="vm_compressed_disk_convert">تحويل والبدء</string>
+    <string name="vm_snapshot_disk_title">يحتوي القرص على لقطات حالة (Snapshots) داخلية</string>
+    <string name="vm_snapshot_disk_message">لا يدعم crosvm لقطات qcow2 ولن يفتح قرصًا يحتوي على لقطات بوضع الكتابة، لذا لا يمكن بدء تشغيل الجهاز الافتراضي. دمج وتسطيح القرص (Flattening) يحتفظ بالحالة الحالية ويحذف اللقطات نهائيًا. للاحتفاظ بها، قم بربط القرص بوضع القراءة فقط أو شغّل هذا الجهاز الافتراضي باستخدام واجهة QEMU الخلفية.\n%1$s</string>
+    <string name="vm_snapshot_disk_flatten">حذف اللقطات والبدء</string>
+    <string name="disk_snapshot_crosvm_warning_title">لا يدعم crosvm استخدام لقطات الحالة</string>
+    <string name="disk_snapshot_crosvm_warning_message">هذا القرص متصل مع إمكانية الكتابة بجهاز افتراضي يعمل عبر crosvm (%1$s)، ولن يبدأ بالعمل طالما يحتوي القرص على لقطات حالة -- لعدم دعمه لقطات qcow2. بالنسبة لـ crosvm، استخدم طبقة متراكبة ذات ملف خلفي (Backing-file overlay) كبديل. إنشاء اللقطة على أي حال؟</string>
+    <string name="disk_snapshot_crosvm_warning_create">إنشاء على أي حال</string>
+    <string name="disk_tree_collapse">طي</string>
+    <string name="disk_tree_broken_parent">الصورة الأصلية (Parent Image) مفقودة</string>
+    <string name="disk_tree_current_attached">متصل</string>
+    <string name="disk_locked_title">القرص عبارة عن صورة أساسية (Base Image)</string>
+    <string name="disk_locked_message">%1$s هو صورة الأساس لـ %2$d من الصور المتراكبة (Overlays)، لذا فإن العمليات التي تعدل عليه مقفلة. قم بدمج طبقاته المتراكبة أو تسطيحها أو حذفها أولاً.</string>
+    <string name="edit_vm_disk_locked_readonly">يحتوي هذا القرص على طبقات متراكبة؛ متصل بوضع القراءة فقط</string>
+    <string name="vm_locked_disk_title">صورة الأساس متصلة بوضع الكتابة</string>
+    <string name="vm_locked_disk_message">هذه الأقراص هي صور أساس لصور متراكبة؛ وتؤدي الكتابة عليها إلى تلف الطبقات المتراكبة. ربطها بوضع القراءة فقط والبدء؟\n%1$s</string>
+    <string name="vm_locked_disk_readonly_start">قراءة فقط والبدء</string>
+    <string name="disk_overlay_create_message">إنشاء صورة متراكبة قائمة على %1$s. تصبح صورة الأساس مقفلة (للقراءة فقط) طالما وُجدت صور متراكبة.</string>
+    <string name="disk_overlay_name_hint">اسم الملف</string>
+    <string name="disk_overlay_advanced">خيارات متقدمة&#8230;</string>
+    <string name="disk_overlay_depth_error">تم الوصول إلى الحد الأقصى لعمق سلسلة الطبقات المتراكبة (%1$d)</string>
+    <string name="disk_overlay_vm_running">تستخدم هذه الأجهزة الافتراضية قرص الأساس؛ أوقف تشغيلها أولاً:%1$s</string>
+    <string name="disk_overlay_vm_choice_title">قرص الأساس قيد الاستخدام</string>
+    <string name="disk_overlay_vm_choice_message">تربط أقراص الأجهزة الافتراضية التالية %1$s بوضع الكتابة:%2$s\n\nيتم قفل الأساس بمجرد إنشاء الطبقة المتراكبة. هل تريد تحويلها إلى الطبقة المتراكبة الجديدة (المتابعة من حيث توقفت)، أم الإبقاء على الأساس متصلاً بوضع القراءة فقط؟</string>
+    <string name="disk_overlay_vm_switch">التبديل إلى الطبقة المتراكبة</string>
+    <string name="disk_overlay_vm_readonly">جعله للقراءة فقط</string>
+    <string name="disk_overlay_created">تم إنشاء الصورة المتراكبة: %1$s</string>
+    <string name="disk_chain_missing_parent">الملف الخلفي الداعم (Backing file) لهذه الصورة مفقود؛ لا يمكن استخدامها حتى تتم استعادة الملف:\n%1$s</string>
+    <string name="disk_chain_import_title">تم اكتشاف صور داعمة خلفية</string>
+    <string name="disk_chain_import_message">تعتمد هذه الصورة على صور داعمة خلفية غير مسجلة بعد. هل تريد تسجيلها أيضًا؟%1$s</string>
+    <string name="disk_chain_import_confirm">تسجيل الكل</string>
+    <string name="disk_merge">دمج في الأساس</string>
+    <string name="disk_flatten">تسطيح إلى صورة مستقلة (Flatten)</string>
+    <string name="disk_reset">إعادة ضبط الطبقة المتراكبة</string>
+    <string name="disk_reset_confirm">سيتم التراجع عن كل التغييرات المكتوبة على %1$s منذ إنشائها: ستعود طبقة متراكبة فارغة وجديدة تستند إلى %2$s. سيحتفظ الملف بمساره وحجمه. لا يمكن التراجع عن هذا الإجراء.</string>
+    <string name="disk_reset_has_children">يحتوي %1$s على طبقات متراكبة تابعة له؛ قم بدمجها أو تسطيحها أو حذفها أولاً.</string>
+    <string name="disk_reset_encrypted">%1$s مشفّر؛ لا يمكن إعادة إنشائه بدون مفتاح التشفير الخاص به.</string>
+    <string name="disk_reset_done">تمت إعادة ضبط الطبقة المتراكبة: %1$s</string>
+    <string name="disk_reset_failed">فشلت إعادة ضبط الطبقة المتراكبة؛ تم الاحتفاظ بالملف الأصلي.</string>
+    <string name="disk_merge_not_overlay">لا يحتوي هذا القرص على صورة أساسية مسجلة.</string>
+    <string name="disk_merge_siblings">يحتوي %1$s على طبقات متراكبة شقيقة أخرى؛ سيؤدي الدمج إلى إتلافها. ادمج الطبقات الشقيقة أو قم بتسطيحها أولاً.</string>
+    <string name="disk_family_vm_running">هناك أجهزة افتراضية قيد التشغيل ضمن شجرة هذا القرص؛ أوقف تشغيلها أولاً:%1$s</string>
+    <string name="disk_merge_confirm">ستُكتب تغييرات %1$s داخل %2$s؛ ثم يُحذف %1$s بعد ذلك. لا يمكن التراجع عن هذا الإجراء.</string>
+    <string name="disk_merge_confirm_children">\n\nسيُعاد ربط %1$d من طبقاته المتراكبة لتستند إلى %2$s.</string>
+    <string name="disk_merge_confirm_vms">\n\nستقوم هذه الأجهزة الافتراضية بربط %2$s كبديل:%1$s</string>
+    <string name="disk_flatten_confirm">سيتم نسخ بيانات الأساس إلى %1$s ليصبح ملفًا مستقلاً بذاته (سيزداد حجم الملف). لن يتأثر قرص الأساس %2$s.</string>
+    <string name="disk_manage_branches">إدارة الطبقات المتراكبة</string>
+    <string name="disk_branches_button">فروع القرص</string>
+    <string name="disk_delete_tree_title">حذف الشجرة بالكامل</string>
+    <string name="disk_delete_tree_message">تحتوي الطبقة المتراكبة فقط على الفروقات مقارنة بالأساس، لذا تُحذف الشجرة كاملة معًا. ستتم إزالة هذه الأقراص:%1$s</string>
+    <string name="disk_delete_subtree_message">تحتوي الطبقة المتراكبة فقط على الفروقات مقارنة بالأساس، لذا تُحذف الطبقات التابعة لهذا القرص معه. ستتم إزالة هذه الأقراص:%1$s</string>
+    <string name="disk_manage_branches_close">إغلاق</string>
+    <string name="disk_manage_branches_back">رجوع</string>
+    <string name="disk_tree_empty">شجرة القرص هذه لم تعد موجودة.</string>
+    <string name="disk_tree_attached_by">متصل: %1$s</string>
+    <string name="disk_tree_in_use">%1$s (قيد الاستخدام)</string>
+    <string name="disk_tree_changes_header">\n\nستتغير روابط الأجهزة الافتراضية الأخرى معه:%1$s</string>
+    <string name="disk_tree_change_move">الجهاز الافتراضي %1$s، قرص #%2$d: %3$s \u2192 %4$s</string>
+    <string name="disk_tree_change_move_readonly">الجهاز الافتراضي %1$s، قرص #%2$d: %3$s \u2192 %4$s (يصبح للقراءة فقط)</string>
+    <string name="disk_tree_change_clear">الجهاز الافتراضي %1$s، قرص #%2$d: تمت إزالة %3$s من الجهاز الافتراضي</string>
+    <string name="disk_tree_change_readonly">الجهاز الافتراضي %1$s، قرص #%2$d: يصبح %3$s للقراءة فقط</string>
+    <string name="disk_tree_change_rewritten">الجهاز الافتراضي %1$s، قرص #%2$d: استُبدل محتوى %3$s بحالة %4$s</string>
+    <string name="disk_tree_pinned">تحتفظ أجهزة افتراضية قيد التشغيل بأقراص سيتغير مسارها؛ أوقف تشغيلها أولاً:%1$s</string>
+    <string name="edit_vm_disk_shared_readonly">يربط منفذ آخر في هذا الجهاز الافتراضي هذا القرص أيضًا؛ متصل بوضع القراءة فقط</string>
+    <string name="vm_shared_disk_title">القرص قيد الاستخدام من جهاز افتراضي يعمل</string>
+    <string name="vm_shared_disk_message">هذه الأقراص مرتبطة بأجهزة افتراضية غير متوقفة؛ الكتابة عليها الآن ستؤدي إلى تلف الصور. يمكن بدء التشغيل الحالي بربطها بوضع القراءة فقط — لهذا الإقلاع فقط، مع الإبقاء على الإعدادات المحفوظة بوضع الكتابة.\n%1$s</string>
+    <string name="vm_shared_disk_readonly_start">بدء بوضع القراءة فقط</string>
+    <string name="vm_shared_disk_readonly_countdown">بدء بوضع القراءة فقط (%1$d)</string>
+    <string name="disk_tree_not_registered">هذا القرص غير مسجل؛ الفروع غير متاحة</string>
+    <string name="vm_kernel_module_title">وحدة الكيرنل (Kernel Module) غير محمّلة</string>
+    <string name="vm_kernel_module_message">يتطلب تكوين هذا الجهاز الافتراضي وحدات كيرنل في المضيف غير محملة. بدء التشغيل رغم ذلك سيعطل الميزة التي تطلبها:\n%1$s</string>
+    <string name="vm_kernel_module_reason_pseudo_unprotected">يمكّن وضع شبه غير محمي النظام الضيف من الوصول إلى ذاكرة RAM عبره</string>
+    <string name="vm_kernel_module_reason_gpu">مطلوبة لتسريع الرسوميات (GPU Acceleration)</string>
+    <string name="vm_kernel_module_reason_memory">مطلوبة للأجهزة الافتراضية التي تستخدم أكثر من 2 غيغابايت من RAM</string>
+    <string name="vm_kernel_module_start_anyway">بدء التشغيل على أي حال</string>
+    <string name="vm_kernel_module_start_countdown">بدء التشغيل على أي حال (%1$d)</string>
+    <string name="vm_protected_guest_dma_title">لا يمكن للكيرنل الوصول إلى virtio هنا</string>
+    <string name="vm_protected_guest_dma_message">هذا الجهاز الافتراضي محمي، لذا تُعار ذاكرته إلى نظام المحاكاة (Hypervisor) ويتعين على virtio نقل البيانات عبر تجمع DMA مخصص ومقيد. الكيرنل الذي يقلع منه هذا المدخل بُني بدون CONFIG_DMA_RESTRICTED_POOL، لذا سيبدأ النظام الضيف بدون قرص وبدون شبكة.\n\nالوضع شبه غير المحمي (Pseudo-unprotected) يشارك الذاكرة بدلاً من ذلك، ويعمل مع الكيرنل الافتراضي القياسي. بدء التشغيل على أي حال سيكون مطابقًا للإقلاع السابق.</string>
+    <string name="vm_protected_guest_usb_title">لا يمكن لنظام Windows استخدام التمرير المباشر لـ USB هنا</string>
+    <string name="vm_protected_guest_usb_message">هذا الجهاز الافتراضي محمي، لذا تُعار ذاكرته إلى نظام المحاكاة ولا يجد التمرير المباشر لـ USB (USB Passthrough) مساحة لتعيين مخازن نقل البيانات المؤقتة. لا تدعم أنظمة Windows الضيفة ذلك؛ ولن تؤدي قواعد التوصيل الموجهة إلى هذا الجهاز الافتراضي أي وظيفة.\n\nالوضع شبه غير المحمي يشارك الذاكرة بدلاً من ذلك، مما يجعل التمرير المباشر يعمل. بدء التشغيل على أي حال سيكون مطابقًا للإقلاع السابق.</string>
+    <string name="vm_protected_guest_start_anyway">بدء التشغيل على أي حال</string>
+    <string name="vm_protected_guest_start_countdown">بدء التشغيل على أي حال (%1$d)</string>
+    <string name="vm_protected_guest_pseudo">بدء التشغيل في الوضع شبه غير المحمي لمرة واحدة</string>
+    <string name="vm_kernel_module_manage">إدارة الوحدات (Modules)</string>
+    <string name="vm_kernel_module_manage_unavailable">افتح الإعدادات \u2192 وحدات الكيرنل (Kernel Modules) لتحميلها</string>
+    <string name="vm_compressed_disk_start_anyway">بدء التشغيل على أي حال</string>
+    <string name="vm_compressed_disk_start_countdown">بدء التشغيل على أي حال (%1$d)</string>
+    <string name="field_copy">نسخ</string>
+    <string name="field_copied">تم النسخ إلى الحافظة</string>
+
+    <string name="disk_icon_desc">أيقونة القرص</string>
+    <string name="disk_meta">%1$s السعة \u00B7 %2$s المستخدم على القرص \u00B7 %3$s</string>
+    <string name="disk_size_unknown">غير متوفر</string>
+    <string name="disk_delete_confirm">هل أنت متأكد من رغبتك في إزالة إدخال القرص هذا؟</string>
+    <string name="disk_delete_file">حذف ملف القرص الفعلي أيضًا</string>
+    <string name="disk_add_title">إضافة قرص</string>
+    <string name="disk_add_import">استيراد ملف موجود</string>
+    <string name="disk_add_create">إنشاء قرص جديد</string>
+    <string name="disk_delete">حذف</string>
+    <string name="disk_optimize">تحسين</string>
+    <string name="disk_optimize_backing_title">تم اكتشاف صورة تزايدية (Incremental Image)</string>
+    <string name="disk_optimize_backing_message">أنت تحاول تحسين صورة تزايدية. يُرجى اختيار إجراء.\nالاحتفاظ بالصورة التزايدية وإجراء التحسين فقط\nتحويلها إلى صورة مستقلة بذاتها</string>
+    <string name="disk_optimize_backing_btn_keep">احتفاظ</string>
+    <string name="disk_optimize_backing_btn_flatten">تحويل وتسطيح</string>
+    <string name="disk_create_increment">إنشاء صورة تزايدية</string>
+    <string name="disk_show_info">عرض مزيد من المعلومات</string>
+    <string name="disk_clone">استنساخ</string>
+    <string name="disk_clone_title">استنساخ القرص</string>
+    <string name="disk_clone_name_hint">اسم الملف الجديد</string>
+    <string name="disk_clone_folder_hint">مجلد الحفظ</string>
+    <string name="disk_clone_error_name_empty">اسم الملف مطلوب</string>
+    <string name="disk_clone_error_folder_empty">مجلد الحفظ مطلوب</string>
+    <string name="disk_clone_error_file_exists">يوجد قرص بهذا الاسم بالفعل</string>
+
+  <string name="disk_info_section_basic">المعلومات الأساسية</string>
+    <string name="disk_info_section_details">تفاصيل الصورة</string>
+    <string name="disk_info_section_raw">المخرجات الخام (Raw Output)</string>
+    <string name="disk_info_filename">اسم الملف</string>
+    <string name="disk_info_folder">المجلد</string>
+    <string name="disk_info_format">التنسيق (Format)</string>
+    <string name="disk_info_copy">نسخ</string>
+    <string name="disk_info_virtual_size">الحجم الافتراضي</string>
+    <string name="disk_info_actual_size">الحجم الفعلي</string>
+    <string name="disk_info_cluster_size">حجم الكتلة (Cluster Size)</string>
+    <string name="disk_info_backing_file">الملف الداعم الخلفي (Backing File)</string>
+    <string name="disk_info_encryption">التشفير</string>
+    <string name="disk_info_compression">الضغط</string>
+    <string name="disk_info_dirty_flag">الحالة</string>
+    <string name="disk_info_encrypted_yes">مشفّر</string>
+    <string name="disk_info_dirty_yes">غير نظيف (علامة التلف مفعلة - Dirty Flag)</string>
+    <string name="disk_info_lazy_refcounts">تعداد المراجع الكسول (Lazy Refcounts) مفعّل</string>
+    <string name="disk_info_loading">جارٍ التحميل\u2026</string>
+    <string name="disk_info_load_failed">فشل تحميل معلومات القرص</string>
+    <string name="disk_info_tab_info">المعلومات</string>
+    <string name="disk_info_tab_tree">الشجرة</string>
+    <string name="disk_info_tab_snapshot">لقطة الحالة (Snapshot)</string>
+    <string name="disk_info_tree_current">الصورة الحالية</string>
+    <string name="disk_info_tree_root">الصورة الجذرية (Root)</string>
+    <string name="disk_info_tree_no_chain">لم يتم العثور على سلسلة دعم خلفية</string>
+    <string name="disk_info_tree_not_in_store">هذه الصورة لا تخضع لإدارة DroidVM</string>
+    <string name="disk_info_snapshot_id">المعرّف: %s</string>
+    <string name="disk_info_snapshot_vm_size">حجم حالة الجهاز الافتراضي: %s</string>
+    <string name="disk_info_snapshot_disk_size">حجم القرص: %s</string>
+    <string name="disk_info_snapshot_date">التاريخ: %s</string>
+    <string name="disk_info_snapshot_vm_clock">ساعة الجهاز الافتراضي: %s</string>
+    <string name="disk_info_no_snapshots">لم يتم العثور على أي لقطات حالة</string>
+    <string name="disk_info_snapshot_create_title">إنشاء لقطة حالة (Snapshot)</string>
+    <string name="disk_info_snapshot_create_hint">اسم لقطة الحالة</string>
+    <string name="disk_info_snapshot_create_error_empty">يُرجى إدخال اسم للقطة الحالة</string>
+    <string name="disk_info_snapshot_apply">تطبيق لقطة الحالة</string>
+    <string name="disk_info_snapshot_apply_message">تطبيق لقطة الحالة \"%s\"؟ سيؤدي هذا إلى الكتابة فوق الحالة الحالية للقرص.</string>
+    <string name="disk_info_snapshot_delete">حذف لقطة الحالة</string>
+    <string name="disk_info_snapshot_delete_message">حذف لقطة الحالة \"%s\"؟</string>
+    <string name="disk_info_snapshot_success">اكتملت عملية لقطة الحالة بنجاح</string>
+    <string name="disk_info_snapshot_failed_title">فشلت عملية لقطة الحالة</string>
+
+    <string name="disk_create_title">إنشاء صورة قرص</string>
+    <string name="disk_create_category_basic">أساسي</string>
+    <string name="disk_create_name_hint">اسم الملف</string>
+    <string name="disk_create_folder_hint">مجلد الحفظ</string>
+    <string name="disk_create_size_hint">الحجم</string>
+    <string name="disk_create_category_format">التنسيق</string>
+    <string name="disk_create_category_options">الخيارات</string>
+    <string name="disk_create_preallocate">تخصيص كامل المساحة فورًا (Preallocate)</string>
+    <string name="disk_create_preallocate_desc">كتابة أصفار لملء الملف بأكمله الآن</string>
+    <string name="disk_create_compress">الضغط</string>
+    <string name="disk_create_compress_disabled">معطّل</string>
+    <string name="disk_create_compress_deflate">Deflate (zlib)</string>
+    <string name="disk_create_compress_zstd">Zstandard (zstd)</string>
+    <string name="disk_create_backing_hint">الصورة الداعمة الخلفية (Backing Image)</string>
+    <string name="disk_create_browse">استعراض</string>
+    <string name="disk_create_fab_desc">إنشاء القرص</string>
+    <string name="disk_create_error_name_empty">اسم الملف مطلوب</string>
+    <string name="disk_create_error_name_invalid">يحتوي اسم الملف على أحرف غير صالحة</string>
+    <string name="disk_create_error_exists">صورة القرص موجودة بالفعل</string>
+    <string name="disk_create_error_folder_empty">مجلد الحفظ مطلوب</string>
+    <string name="disk_create_error_folder_invalid">مسار المجلد غير صالح</string>
+    <string name="disk_create_error_size_zero">يجب أن يكون الحجم أكبر من 0</string>
+    <string name="disk_create_error_backing_same">لا يمكن أن تكون الصورة الداعمة هي نفس القرص الهدف</string>
+    <string name="disk_create_error_backing_invalid">مسار الصورة الداعمة غير صالح</string>
+    <string name="disk_create_success">تم إنشاء القرص \"%1$s\" بنجاح.</string>
+    <string name="disk_create_preview">معاينة: %1$s</string>
+    <string name="disk_create_preview_desc">معاينة مسار ملف القرص</string>
+
+    <string name="vm_create_mode_title">إنشاء جهاز افتراضي</string>
+    <string name="vm_create_linux">جهاز افتراضي بنظام Linux</string>
+    <string name="vm_create_windows">جهاز افتراضي بنظام Windows</string>
+    <string name="vm_create_import">استيراد من حزمة .vmpkg</string>
+    <string name="vm_create_customize">تخصيص</string>
+    <string name="windows_vm_unavailable_title">جهاز Windows الافتراضي غير متاح بعد</string>
+    <string name="windows_vm_unavailable_message">هذه الميزة قيد التطوير وليست متاحة حاليًا. في الوقت الحالي، قم ببناء صورة نظام Windows باستخدام سكربت windows_build.ps1.</string>
+    <string name="windows_vm_open_script">فتح سكربت البناء</string>
+    <string name="linux_vm_create_title">إنشاء جهاز Linux افتراضي</string>
+    <string name="linux_vm_category_settings">الإعدادات</string>
+    <string name="linux_vm_disk_size_hint">حجم القرص</string>
+    <string name="linux_vm_root_password_hint">كلمة مرور Root</string>
+    <string name="linux_vm_root_password_toggle">إظهار أو إخفاء كلمة مرور Root</string>
+    <string name="linux_vm_network_hint">الشبكة</string>
+    <string name="linux_vm_network_none">بدون شبكة</string>
+    <string name="linux_vm_network_unavailable">الشبكة المحددة لم تعد متاحة.</string>
+    <string name="linux_vm_create_action">إنشاء</string>
+    <string name="linux_vm_create_success">تم إنشاء الجهاز الافتراضي \"%1$s\".</string>
+    <string name="linux_vm_create_failed">لم تكتمل عملية إنشاء جهاز Linux الافتراضي.</string>
+    <string name="linux_vm_create_partial_title">تم إنشاء الجهاز الافتراضي</string>
+    <string name="linux_vm_create_partial">تم إنشاء الجهاز الافتراضي \"%1$s\"، ولكن خطوات الإعداد التالية لم تكتمل:\n%2$s\n\nيمكنك إعادة تشغيلها لاحقًا من قائمة القرص.</string>
+    <string name="linux_vm_step_resize">تغيير حجم القرص</string>
+
+    <string name="lxc_title">تنزيل صورة توزيعة LXC</string>
+    <string name="lxc_category_source">المصدر</string>
+    <string name="lxc_meta_source_hint">مصدر البيانات الوصفية (Metadata)</string>
+    <string name="lxc_download_source_hint">مصدر التنزيل</string>
+    <string name="lxc_source_classfun">واجهة ClassFun API</string>
+    <string name="lxc_source_official">المصدر الرسمي (LXC)</string>
+    <string name="lxc_source_custom">رابط URL مخصص</string>
+    <string name="lxc_custom_meta_url_hint">الرابط الأساسي لمرآة البيانات الوصفية</string>
+    <string name="lxc_custom_download_url_hint">الرابط الأساسي لمرآة التنزيل</string>
+    <string name="lxc_meta_idle">يُرجى تحميل البيانات الوصفية أولاً</string>
+    <string name="lxc_meta_loading">جارٍ التحميل\u2026</string>
+    <string name="lxc_meta_refreshing">جارٍ تحديث قائمة المصادر\u2026</string>
+    <plurals name="lxc_meta_count">
+        <item quantity="zero">البيانات الوصفية: ولا صورة</item>
+        <item quantity="one">البيانات الوصفية: صورة واحدة (%1$d)</item>
+        <item quantity="two">البيانات الوصفية: صورتان (%1$d)</item>
+        <item quantity="few">البيانات الوصفية: %1$d صور</item>
+        <item quantity="many">البيانات الوصفية: %1$d صورة</item>
+        <item quantity="other">البيانات الوصفية: %1$d صورة</item>
+    </plurals>
+    <string name="lxc_meta_error">فشل: %1$s</string>
+    <string name="lxc_meta_load">تحميل</string>
+    <string name="lxc_category_image">الصورة</string>
+    <string name="lxc_distro_hint">التوزيعة (Distribution)</string>
+    <string name="lxc_version_hint">الإصدار</string>
+    <string name="lxc_variant_hint">النوع المخصص (Variant)</string>
+    <string name="lxc_build_hint">رقم البناء (Build)</string>
+    <string name="lxc_category_output">المخرجات</string>
+    <string name="lxc_reset_password_hint">إعادة تعيين كلمة مرور root (اختياري)</string>
+    <string name="lxc_info_size">حجم التنزيل: %1$s</string>
+    <string name="lxc_info_path">المسار البعيد: %1$s</string>
+    <string name="lxc_fab_import">استيراد</string>
+    <string name="lxc_fab_desc">استيراد الصورة</string>
+    <string name="lxc_import_success">تمت إضافة الصورة \"%1$s\" إلى قائمة الأقراص.</string>
+    <string name="lxc_error_no_image">يُرجى تحديد صورة أولاً.</string>
+    <string name="lxc_error_name_empty">اسم الملف مطلوب.</string>
+    <string name="lxc_error_folder_empty">مجلد الحفظ مطلوب.</string>
+    <string name="lxc_error_custom_url">يُرجى إدخال رابط مرآة (Mirror URL) صالح.</string>
+    <string name="lxc_error_source_unavailable">مصدر البيانات الوصفية المحدد غير متاح.</string>
+    <string name="lxc_no_images">لم يتم العثور على أي صور بتنسيق disk-kvm.</string>
+    <string name="disk_add_lxc">تنزيل صورة توزيعة LXC</string>
+    <string name="disk_add_url">تنزيل من رابط URL</string>
+    <string name="disk_add_images">تنزيل صورة توزيعة</string>
+
+  <string name="images_title">تنزيل الصورة</string>
+    <string name="images_search_hint">البحث عن الصور\u2026</string>
+    <string name="images_empty">لم يتم العثور على أي صور</string>
+    <string name="images_category_image">الصورة</string>
+    <string name="images_category_mirror">المرآة (خادم التنزيل البديل)</string>
+    <string name="images_mirror_hint">مرآة التنزيل</string>
+    <string name="images_mirror_official">الرسمي</string>
+    <string name="images_category_output">المخرجات</string>
+    <string name="images_fab_download">تنزيل</string>
+    <string name="images_fab_desc">تنزيل الصورة</string>
+    <string name="images_info_size">الحجم: %1$s</string>
+    <string name="images_info_url">الرابط (URL): %1$s</string>
+    <string name="images_error_no_image">يُرجى تحديد صورة أولاً.</string>
+    <string name="images_error_name_empty">اسم الملف مطلوب.</string>
+    <string name="images_error_folder_empty">مجلد الحفظ مطلوب.</string>
+    <string name="images_error_file_exists">الملف موجود بالفعل.</string>
+    <string name="images_success">تمت إضافة الصورة \"%1$s\" إلى قائمة الأقراص.</string>
+    <string name="images_pick_tap_hint">اضغط لتحديد صورة</string>
+    <string name="images_confirm_title">تأكيد الصورة</string>
+    <string name="images_confirm_repo">المستودع (Repository): %1$s</string>
+    <string name="images_confirm_path">المسار: %1$s</string>
+    <string name="images_confirm_arch">المعمارية: %1$s</string>
+    <string name="images_confirm_size">الحجم: %1$s</string>
+    <string name="images_confirm_date">تاريخ التعديل: %1$s</string>
+
+    <string name="import_url_title">استيراد من رابط URL</string>
+    <string name="import_url_category_source">المصدر</string>
+    <string name="import_url_url_hint">رابط الصورة (URL)</string>
+    <string name="import_url_status_idle">أدخل رابط URL واضغط على \"تحميل\" لجلب المعلومات</string>
+    <string name="import_url_status_loading">جارٍ التحميل\u2026</string>
+    <string name="import_url_status_size">الحجم: %1$s</string>
+    <string name="import_url_status_error">فشل: %1$s</string>
+    <string name="import_url_unknown">غير معروف</string>
+    <string name="import_url_load">تحميل</string>
+    <string name="import_url_info_type">النوع: %1$s</string>
+    <string name="import_url_category_output">المخرجات</string>
+    <string name="import_url_fab_desc">استيراد الصورة</string>
+    <string name="import_url_error_url_empty">يُرجى إدخال رابط URL</string>
+    <string name="import_url_error_url_invalid">رابط URL غير صالح</string>
+    <string name="import_url_error_name_empty">اسم الملف مطلوب</string>
+    <string name="import_url_error_folder_empty">مجلد الحفظ مطلوب</string>
+    <string name="import_url_error_file_exists">الملف موجود بالفعل</string>
+    <string name="import_url_success">تمت إضافة الصورة \"%1$s\" إلى قائمة الأقراص.</string>
+
+    <string name="disk_operation_title">عملية القرص</string>
+    <string name="disk_operation_running">قيد التنفيذ\u2026</string>
+    <string name="disk_operation_success">اكتملت بنجاح.</string>
+    <string name="disk_operation_failed">فشلت العملية (رمز الخروج %1$d).</string>
+    <string name="disk_operation_finalizing">جارٍ حفظ تبعيات القرص...</string>
+    <string name="disk_operation_dependency_failed">اكتملت معالجة بيانات القرص، ولكن تعذر حفظ تبعيات الجهاز الافتراضي/القرص. تم الإبقاء على الصورة الأصلية قدر الإمكان.</string>
+    <string name="disk_operation_bad_task">معلمات المهمة غير صالحة.</string>
+    <string name="disk_operation_cancel_title">إلغاء العملية؟</string>
+    <string name="disk_operation_cancel_message">عملية القرص لا تزال قيد التنفيذ. هل أنت متأكد من رغبتك في الإلغاء؟</string>
+
+    <string name="disk_change_password">تغيير كلمة مرور نظام Linux الضيف</string>
+    <string name="change_password_title">تغيير كلمة المرور</string>
+    <string name="change_password_disk_label">القرص: %1$s</string>
+    <string name="change_password_hint">كلمة المرور الجديدة</string>
+    <string name="change_password_confirm_hint">تأكيد كلمة المرور</string>
+    <string name="change_password_normal_users">تغيير كلمة المرور للمستخدمين العاديين أيضًا</string>
+    <string name="change_password_confirm">تأكيد</string>
+    <string name="change_password_error_empty">لا يمكن أن تكون كلمة المرور فارغة</string>
+    <string name="change_password_error_mismatch">كلمتا المرور غير متطابقتين</string>
+    <string name="change_password_error_unsafe">يُسمح فقط بالحروف والأرقام والرموز التالية: %1$s</string>
+
+    <string name="agent_operation_title">عملية الوكيل (Agent)</string>
+    <string name="agent_operation_preparing">جارٍ التحضير\u2026</string>
+    <string name="agent_operation_creating_vm">جارٍ إنشاء جهاز افتراضي مؤقت\u2026</string>
+    <string name="agent_operation_starting_vm">جارٍ تشغيل الجهاز الافتراضي المؤقت\u2026</string>
+    <string name="agent_operation_running">قيد التشغيل\u2026</string>
+    <string name="agent_operation_success">اكتملت العملية بنجاح.</string>
+    <string name="agent_operation_success_skipped">اكتملت العملية؛ لم يكن أحد الإجراءات قابلاً للتطبيق.</string>
+    <string name="agent_operation_partial">اكتملت العملية، ولكن بعض الخطوات فشلت:\n%1$s</string>
+    <string name="agent_operation_action_password">تغيير كلمة المرور</string>
+    <string name="agent_operation_action_autogrow">توسيع نظام الملفات</string>
+    <string name="agent_operation_failed">فشلت العملية (رمز الخروج %1$d).</string>
+    <string name="agent_operation_failed_detail">فشلت العملية: %1$s</string>
+    <string name="agent_operation_prepare_failed">فشل تحضير جهاز الوكيل الافتراضي (Agent VM).</string>
+    <string name="agent_operation_start_failed">فشل تشغيل جهاز الوكيل الافتراضي: %1$s</string>
+    <string name="agent_operation_daemon_disconnected">فُقد الاتصال بالخدمة الخلفية (Daemon).</string>
+    <string name="agent_operation_vm_exited">خرج الجهاز الافتراضي</string>
+    <string name="agent_operation_cancel_title">إلغاء العملية؟</string>
+    <string name="agent_operation_cancel_message">العملية لا تزال قيد التنفيذ. سيؤدي الإلغاء إلى إيقاف الجهاز الافتراضي المؤقت وحذفه. هل أنت متأكد؟</string>
+    <string name="agent_operation_log_preparing">جارٍ تحضير جهاز الوكيل الافتراضي\u2026\n</string>
+    <string name="agent_operation_log_creating_vm">جارٍ إنشاء الجهاز الافتراضي المؤقت في الخدمة الخلفية\u2026\n</string>
+    <string name="agent_operation_log_starting_vm">جارٍ تشغيل الجهاز الافتراضي المؤقت\u2026\n</string>
+    <string name="agent_operation_log_running">الجهاز الافتراضي المؤقت قيد التشغيل\u2026\n</string>
+    <string name="agent_operation_log_success">\nاكتملت جميع العمليات المطلوبة.\n</string>
+    <string name="agent_operation_log_skipped">\nاكتملت العملية دون أخطاء؛ لم يُحدث إجراء واحد على الأقل أي تغييرات.\n</string>
+    <string name="agent_operation_log_failed">\nفشلت العملية. يُرجى مراجعة السجلات أعلاه.\n</string>
+    <string name="agent_operation_logs">السجلات</string>
+    <string name="agent_operation_stopping">جارٍ إيقاف تشغيل جهاز الإنقاذ الافتراضي (Rescue VM)...</string>
+    <string name="agent_operation_vm_stopped">توقف جهاز الإنقاذ الافتراضي عن العمل.</string>
+    <string name="agent_operation_control_failed">فُقدت قناة التحكم في جهاز الإنقاذ الافتراضي.</string>
+    <string name="agent_operation_error_root_not_found">لم يتم العثور على قسم جذر (Root) مدعوم لنظام Linux.</string>
+    <string name="agent_operation_error_password">فشل تحديث قاعدة بيانات كلمات المرور.</string>
+    <string name="agent_operation_error_password_missing">لم يتم العثور على برنامج passwd في النظام الهدف.</string>
+    <string name="agent_operation_error_unmount">تم تحديث كلمة المرور، ولكن تعذر إلغاء تثبيت (Unmount) نظام الملفات الهدف بأمان.</string>
+    <string name="agent_operation_error_script">فشل سكربت الإنقاذ بشكل غير متوقع.</string>
+    <string name="agent_operation_error_autogrow_disk">تعذر فحص القرص الهدف.</string>
+    <string name="agent_operation_error_autogrow_in_use">القسم الأخير لا يزال مثبتًا (Mounted) أو قيد الاستخدام.</string>
+    <string name="agent_operation_error_partition_grow">فشل توسيع القسم الأخير.</string>
+    <string name="agent_operation_error_partition_reread">تغير جدول الأقسام، لكن تعذر على الكيرنل إعادة تحميله.</string>
+    <string name="agent_operation_error_filesystem_check">فشل فحص نظام الملفات؛ لم يتم توسيع نظام الملفات.</string>
+    <string name="agent_operation_error_filesystem_mount">تعذر تثبيت (Mount) نظام الملفات لتغيير حجمه.</string>
+    <string name="agent_operation_error_filesystem_grow">تم توسيع حجم القسم، ولكن فشل توسيع نظام الملفات بداخله.</string>
+    <string name="agent_operation_error_filesystem_unmount">تمت زيادة حجم نظام الملفات، لكن تعذر إلغاء تثبيته (Unmount) بأمان.</string>
+    <string name="agent_operation_error_unknown">خطأ في الإنقاذ: %1$s</string>
+
+    <string name="disk_resize">تغيير الحجم</string>
+    <string name="disk_resize_title">تغيير حجم القرص</string>
+    <string name="disk_resize_new_size">الحجم الجديد</string>
+    <string name="disk_resize_current">الحجم الحالي: %1$s</string>
+    <string name="disk_resize_filename">اسم الملف: %1$s</string>
+    <string name="disk_resize_folder">المجلد: %1$s</string>
+    <string name="disk_resize_loading">جارٍ التحميل\u2026</string>
+    <string name="disk_resize_shrink_title">تقليص القرص</string>
+    <string name="disk_resize_shrink_message">الحجم الجديد أصغر من الحجم الحالي. قد يؤدي تقليص القرص إلى فقدان البيانات. هل أنت متأكد من رغبتك في المتابعة؟</string>
+    <string name="disk_resize_error_invalid">يُرجى إدخال حجم صالح</string>
+    <string name="disk_resize_error_info">فشل الحصول على معلومات القرص</string>
+    <string name="disk_resize_autogrow">توسيع القسم ونظام الملفات تلقائيًا</string>
+    <string name="disk_resize_autogrow_description">يدعم أنظمة ext2/3/4 وBtrfs وF2FS</string>
+    <string name="disk_resize_error_no_action">اختر حجمًا مختلفًا أو قم بتفعيل خيار توسيع نظام الملفات</string>
+    <string name="disk_resize_error_autogrow_shrink">لا يمكن الجمع بين توسيع نظام الملفات وتقليص حجم القرص الافتراضي</string>
+    <string name="disk_dependency_update_failed">فشل تحديث تبعيات أقراص الجهاز الافتراضي؛ لم يتم حذف أي قرص.</string>
+
+    <string name="disk_set_format">تحويل التنسيق</string>
+    <string name="disk_set_format_title">تحويل تنسيق القرص</string>
+    <string name="disk_set_format_name">اسم الملف</string>
+    <string name="disk_set_format_target">التنسيق الهدف</string>
+    <string name="disk_set_format_current">التنسيق الحالي: %1$s</string>
+    <string name="disk_set_format_loading">جارٍ التحميل\u2026</string>
+    <string name="disk_set_format_error_name">اسم الملف مطلوب</string>
+    <string name="disk_set_format_error_same">التنسيق الهدف مطابق للتنسيق الحالي</string>
+    <string name="disk_set_format_error_info">فشل التعرف على التنسيق الحالي</string>
+
+    <string name="download_cancel_title">إلغاء التنزيل</string>
+    <string name="download_cancel_message">هل أنت متأكد من رغبتك في إلغاء تنزيل \"%1$s\"؟</string>
+    <string name="download_percent">%1$.1f%%</string>
+    <string name="download_speed">%1$s/ث</string>
+    <string name="download_size_progress">%1$s / %2$s</string>
+    <string name="download_size_unknown">%1$s / غير معروف</string>
+    <string name="download_eta">متبقي %1$s</string>
+    <string name="download_eta_unknown">غير معروف</string>
+    <string name="download_connecting">جارٍ الاتصال\u2026</string>
+    <string name="download_finished">اكتمل التنزيل</string>
+    <string name="download_failed">فشل: %1$s</string>
+    <string name="download_cancelled">تم الإلغاء</string>
+    <string name="download_file_icon_desc">أيقونة الملف</string>
+    <string name="download_paused">متوقف مؤقتًا...</string>
+    <string name="download_retrying">فُقد الاتصال، تجري إعادة المحاولة (%1$d/%2$d)...</string>
+    <string name="download_one_at_a_time">يوجد تنزيل قيد التنفيذ بالفعل. يُرجى الانتظار حتى اكتماله.</string>
+    <string name="download_background_toast">يستمر التنزيل في الخلفية. تفقّد لوحة الإشعارات.</string>
+    <string name="download_error_start">تعذر بدء التنزيل. تأكد من تمكين \"مدير التنزيل\" (Download Manager) في النظام.</string>
+
+    <string name="notif_download_complete_title">اكتمل الاستيراد</string>
+    <string name="notif_channel_downloads_progress">التنزيل</string>
+    <string name="notif_channel_downloads_progress_desc">التقدم الحالي لعمليات التنزيل</string>
+    <string name="notif_download_connecting">جارٍ الاتصال...</string>
+    <string name="notif_download_cancel">إلغاء</string>
+
+    <string name="vm_state_suspended">معلّق</string>
+    <string name="vm_info_state_suspended">الجهاز الافتراضي في وضع التعليق (Suspended)</string>
+
+    <string name="vm_info_suspend">تعليق</string>
+    <string name="vm_info_resume">استئناف</string>
+    <string name="vm_info_powerbtn">زر الطاقة</string>
+    <string name="vm_info_sleepbtn">زر السكون</string>
+
+    <string name="settings_category_daemon">خدمة الخلفية (Daemon)</string>
+    <string name="settings_daemon_status_title">حالة الخدمة</string>
+    <string name="settings_daemon_running">قيد التشغيل</string>
+    <string name="settings_daemon_stopped">متوقفة</string>
+    <string name="settings_daemon_checking">جارٍ الفحص\u2026</string>
+    <string name="settings_daemon_start">بدء الخدمة</string>
+    <string name="settings_daemon_start_summary">بدء عملية خدمة droidvmd الخلفية</string>
+    <string name="settings_daemon_stop">إيقاف الخدمة</string>
+    <string name="settings_daemon_stop_summary">إنهاء عملية خدمة droidvmd الخلفية</string>
+    <string name="settings_daemon_restart">إعادة تشغيل الخدمة</string>
+    <string name="settings_daemon_restart_summary">إعادة تشغيل عملية خدمة droidvmd الخلفية</string>
+
+    <string name="daemon_outdated_title">تم اكتشاف خدمة خلفية قديمة</string>
+    <string name="daemon_outdated_message">توجد نسخة قديمة من الخدمة الخلفية قيد التشغيل. هل ترغب في إعادة تشغيلها؟\n\nملاحظة: سيتم إيقاف تشغيل جميع الأجهزة الافتراضية النشطة.</string>
+    <string name="daemon_outdated_restart">إعادة التشغيل</string>
+    <string name="daemon_outdated_ignore">تجاهل</string>
+    <string name="daemon_connected">تم الاتصال بالخدمة الخلفية</string>
+    <string name="daemon_disconnected">انقطع الاتصال بالخدمة الخلفية</string>
+
+    <string name="test_build_warning_title">إصدار تجريبي (Test Build)</string>
+    <string name="test_build_warning_message">أنت تستخدم إصدارًا تجريبيًا من DroidVM.\n\nهذا الإصدار مخصص لأغراض الاختبار فقط وقد يحتوي على أخطاء برمجية أو ميزات غير مكتملة، مما قد يتسبب في عدم استقرار النظام أو فقدان البيانات.\n\nيُرجى الإبلاغ عن أي مشكلات تواجهك عبر GitHub.</string>
+    <string name="test_build_warning_hide">عدم الإظهار مجددًا</string>
+
+    <string name="network_state_stopped">متوقفة</string>
+    <string name="network_state_starting">جارٍ بدء التشغيل</string>
+    <string name="network_state_running">تعمل</string>
+    <string name="network_state_stopping">جارٍ إيقاف التشغيل</string>
+    <string name="network_delete">حذف</string>
+    <string name="network_delete_confirm">هل أنت متأكد من رغبتك في حذف هذه الشبكة؟</string>
+    <string name="network_delete_in_use">تعذر الحذف: الشبكة مستخدمة بواسطة جهاز افتراضي نشط: %1$s</string>
+    <string name="network_create_title">إنشاء شبكة</string>
+    <string name="network_create_success">تم إنشاء الشبكة \"%1$s\" بنجاح.</string>
+    <string name="network_edit_title">تعديل الشبكة</string>
+    <string name="network_edit_saved">تم حفظ الشبكة \"%1$s\".</string>
+    <string name="network_edit_category_basic">أساسي</string>
+    <string name="network_edit_name_hint">اسم الشبكة</string>
+    <string name="network_edit_bridge_hint">اسم الجسر (مثال: br0)</string>
+    <string name="network_edit_mac_hint">عنوان MAC (مثال: 02:42:ac:11:00:01)</string>
+    <string name="network_edit_auto_up">التشغيل تلقائيًا عند البدء</string>
+    <string name="network_edit_stp">بروتوكول شجرة الامتداد (STP)</string>
+    <string name="network_edit_error_name_empty">اسم الشبكة مطلوب</string>
+    <string name="network_edit_error_name_duplicate">توجد شبكة بهذا الاسم بالفعل</string>
+    <string name="network_edit_error_bridge_empty">اسم الجسر مطلوب</string>
+    <string name="network_edit_error_bridge_invalid">يجب أن يبدأ بحرف ويحتوي فقط على أحرف أو أرقام أو واصلات أو شرطات سفلية</string>
+    <string name="network_edit_error_not_found">لم يتم العثور على تكوين الشبكة</string>
+    <string name="network_edit_error_bridge_duplicate">توجد شبكة باسم الجسر هذا بالفعل</string>
+    <string name="network_edit_error_ipv4_overlap">تتداخل شبكة IPv4 الفرعية %1$s مع الشبكة \"%2$s\" (%3$s)</string>
+    <string name="network_edit_error_ipv6_overlap">تتداخل شبكة IPv6 الفرعية %1$s مع الشبكة \"%2$s\" (%3$s)</string>
+    <string name="network_edit_error_uplink_taken">الرابط الصاعد %1$s متصل مسبقًا عبر جسر الشبكة \"%2$s\"</string>
+    <string name="network_edit_save">حفظ الشبكة</string>
+    <string name="network_edit_running_banner">هذه الشبكة قيد التشغيل. أوقفها أولاً قبل التعديل عليها.</string>
+    <string name="network_edit_bridge_type">نوع الجسر (Bridge)</string>
+    <string name="network_edit_bridge_type_linux">جسر Linux الافتراضي</string>
+    <string name="network_edit_bridge_type_gvisor">جسر gVisor الافتراضي</string>
+    <string name="network_edit_uplink_mode">الاتصال الخارجي</string>
+    <string name="network_edit_uplink_l2">تجسير في الطبقة الثانية (L2 bridging)</string>
+    <string name="network_edit_uplink_l3">توجيه في الطبقة الثالثة (L3 routing)</string>
+    <string name="network_edit_uplink_none">بلا اتصال (داخلي للأجهزة الافتراضية فقط)</string>
+    <string name="network_edit_category_l2">تجسير الطبقة الثانية (L2)</string>
+    <string name="network_edit_category_l3">توجيه الطبقة الثالثة (L3)</string>
+    <string name="network_edit_l2_uplink">واجهة الاتصال الصاعد (Upstream)</string>
+    <string name="network_edit_pseudo_bridge">الجسر شبه الكامل (Pseudo-bridge)</string>
+    <string name="network_edit_uplink_wifi">شبكة Wi-Fi</string>
+    <string name="network_edit_uplink_ethernet">شبكة Ethernet (سلكية)</string>
+    <string name="network_edit_uplink_tethering">نقطة الاتصال / التوصيل (Tethering)</string>
+    <string name="network_edit_uplink_unavailable">غير متاح</string>
+    <string name="network_edit_uplink_identifier">%1$s (%2$s)</string>
+    <string name="network_edit_pseudo_hint_wifi">لا يمكن تجسير روابط Wi-Fi بشكل مباشر؛ استخدام الجسر شبه الكامل (Pseudo-bridge) إلزامي.</string>
+    <string name="network_edit_pseudo_hint_wired">يمكن تجسير هذا الرابط الصاعد بشكل مباشر؛ استخدام الجسر شبه الكامل اختياري.</string>
+    <string name="network_edit_vlan_empty_hint">شبكة داخلية للـ VMs: لا يشارك النظام المضيف فيها. أضف شبكة VLAN لتمكين المضيف من الانضمام.</string>
+    <string name="network_edit_add_vlan">إضافة VLAN</string>
+    <string name="network_edit_remove_vlan">إزالة VLAN</string>
+    <string name="network_edit_vlan_untagged">غير موسومة (Untagged)</string>
+    <string name="network_edit_vlan_title">شبكة VLAN</string>
+    <string name="network_edit_vlan_id">معرّف VLAN</string>
+    <string name="network_edit_vlan_ipv4">شبكة IPv4 الأساسية</string>
+    <string name="network_edit_vlan_ipv6">شبكة IPv6 الأساسية</string>
+    <string name="network_edit_vlan_advanced">متقدم</string>
+    <string name="network_edit_vlan_v4_cidr">عنوان IPv4 بتنسيق CIDR (مثال: 10.181.7.1/24)</string>
+    <string name="network_edit_vlan_v4_snat">تقنية IPv4 SNAT</string>
+    <string name="network_edit_vlan_v4_dhcp">خادم DHCPv4</string>
+    <string name="network_edit_vlan_offset_start">بداية إزاحة تجمع العناوين (Pool)</string>
+    <string name="network_edit_vlan_offset_end">نهاية إزاحة تجمع العناوين (Pool)</string>
+    <string name="network_edit_vlan_v6_source">مصدر عناوين IPv6</string>
+    <string name="network_edit_vlan_v6_static">تنسيق CIDR ثابت</string>
+    <string name="network_edit_vlan_v6_pd">تفويض البادئة DHCP-PD</string>
+    <string name="network_edit_vlan_v6_cidr">عنوان IPv6 بتنسيق CIDR (مثال: fd00:7::1/64)</string>
+    <string name="network_edit_vlan_pd_uplink">واجهة PD للاتصال الصاعد (Upstream)</string>
+    <string name="network_edit_vlan_pd_duid">معرّف DUID (يتم توليده تلقائيًا إذا تُرِك فارغًا)</string>
+    <string name="network_edit_vlan_v6_snat">تقنية IPv6 SNAT (لجسر gVisor فقط)</string>
+    <string name="network_edit_vlan_v6_dhcp">خادم DHCPv6</string>
+    <string name="network_edit_vlan_slaac">بروتوكول SLAAC (::/64)</string>
+    <string name="network_edit_vlan_v4_secondary">شبكات IPv4 الثانوية (مفصولة بفاصلة)</string>
+    <string name="network_edit_vlan_v6_secondary">شبكات IPv6 الثانوية (مفصولة بفاصلة)</string>
+    <string name="network_edit_vlan_dns">خوادم DNS (فارغ = استخدام DNS النظام)</string>
+    <string name="network_edit_error_self_overlap">تتداخل الشبكتان الفرعيتان %1$s و%2$s</string>
+    <string name="network_item_subtitle">%1$s | %2$s</string>
+    <string name="network_info_pbridge">الجسر شبه الكامل (pbridge)</string>
+    <string name="network_info_bridgedhcp">خدمة bridgedhcp</string>
+    <string name="network_info_gvswitch">أداة gvswitch</string>
+    <string name="network_info_tool_running">قيد التشغيل</string>
+    <string name="network_info_tool_stopped">متوقفة</string>
+    <string name="network_info_tool_view_log">اضغط لعرض السجل</string>
+    <string name="network_info_tool_log_empty">لا توجد مخرجات في السجل</string>
+
+  <string name="network_info_start">بدء التشغيل</string>
+    <string name="network_info_stop">إيقاف</string>
+    <string name="network_info_state_active">الشبكة نشطة وتمرر حزم البيانات</string>
+    <string name="network_info_state_idle">الشبكة متوقفة</string>
+    <string name="network_info_tab_basic">أساسي</string>
+    <string name="network_info_tab_addresses">العناوين</string>
+    <string name="network_info_tab_ports">المنافذ</string>
+    <string name="network_info_tab_dhcp">DHCP</string>
+    <string name="network_info_tab_neighbors">الأجهزة المجاورة (Neighbors)</string>
+    <string name="network_info_bridge">الجسر (Bridge)</string>
+    <string name="network_info_mac">عنوان MAC</string>
+    <string name="network_info_auto_up">بدء تلقائي</string>
+    <string name="network_info_stp">بروتوكول STP</string>
+    <string name="network_info_created">تاريخ الإنشاء</string>
+    <string name="network_info_enabled">مفعّل</string>
+    <string name="network_info_disabled">معطّل</string>
+    <string name="network_info_no_addresses">لا توجد عناوين</string>
+    <string name="network_info_addr_bound">مرتبط (Bound)</string>
+    <string name="network_info_addr_unbound">غير مرتبط (Unbound)</string>
+    <string name="network_info_addr_source_config">التكوين (Config)</string>
+    <string name="network_info_addr_source_auto">تلقائي</string>
+    <string name="network_info_addr_source_pbridge">الجهاز الافتراضي للجسر شبه الكامل (pbridge)</string>
+    <string name="network_info_pd_label">تفويض البادئة (DHCP-PD)</string>
+    <string name="network_info_pd_searching">جارٍ البحث...</string>
+    <string name="network_info_pd_no_uplink">الرابط الصاعد (Uplink) غير متاح</string>
+    <string name="network_info_pd_release">تحرير (Release)</string>
+    <string name="network_info_pd_renew">تجديد (Renew)</string>
+    <string name="network_info_no_ports">لا توجد منافذ متصلة</string>
+    <string name="network_info_forward_failed">فشلت إعادة توجيه المنفذ: %1$s</string>
+    <string name="network_info_no_leases">لا توجد عقود تأجير DHCP (Leases)</string>
+    <string name="network_info_no_neighbors">لا توجد أجهزة مجاورة</string>
+    <string name="network_info_dhcp_expires">ينتهي في: %1$s</string>
+
+    <string name="vnc_display_title">شاشة VNC</string>
+    <string name="vnc_display_connecting">جارٍ الاتصال\u2026</string>
+    <string name="vnc_display_connected">متصل - %1$d×%2$d</string>
+    <string name="vnc_display_reconnecting">جارٍ إعادة الاتصال (%1$d/%2$d)\u2026</string>
+    <string name="vnc_display_reconnect_failed">فشلت إعادة الاتصال بعد %1$d محاولات</string>
+    <string name="vnc_display_connect_failed">فشل الاتصال بخادم VNC</string>
+    <string name="vnc_display_h264_active">بث بتنسيق H.264</string>
+    <string name="vnc_display_h264_fallback">تم التراجع إلى بروتوكول RFB</string>
+    <string name="vnc_display_h264_unavailable">تنسيق H.264 غير متاح (لا يحتوي هذا الجهاز على برنامج ترميز عتادي)</string>
+    <string name="vnc_display_fullscreen">ملء الشاشة</string>
+
+    <string name="native_display_title">شاشة العرض الأصلية (Native Display)</string>
+    <string name="native_display_connecting">جارٍ الاتصال...</string>
+    <string name="native_display_waiting">بانتظار شاشة الجهاز الافتراضي...</string>
+    <string name="native_display_connected">متصل - %1$d×%2$d</string>
+    <string name="native_display_failed">فشل بدء شاشة العرض الأصلية</string>
+
+    <string name="vnc_menu_keyboard">لوحة مفاتيح برمجية</string>
+    <string name="vnc_menu_extra_keys">مفاتيح إضافية</string>
+    <string name="keyboard_mode_none">بدون لوحة مفاتيح</string>
+    <string name="keyboard_mode_system">لوحة مفاتيح النظام</string>
+    <string name="keyboard_mode_laptop">لوحة مفاتيح حاسوب محمول</string>
+    <string name="vnc_menu_fullscreen">ملء الشاشة</string>
+    <string name="vnc_menu_input_mode_touch">وضع اللمس</string>
+    <string name="vnc_menu_input_mode_mouse">وضع الفأرة</string>
+    <string name="vnc_menu_input_mode_tablet">وضع الجهاز اللوحي (Tablet Mode)</string>
+    <string name="display_input_disabled_hint">أجهزة الإدخال معطلة لهذه الشاشة. فعّلها من إعدادات الرسوميات، ثم أعد تشغيل الجهاز الافتراضي.</string>
+    <string name="usb_input_no_device">لم يتم العثور على لوحة مفاتيح أو فأرة USB</string>
+    <string name="usb_input_status">إدخال USB: %1$d لوحة مفاتيح، %2$d فأرة</string>
+    <string name="vnc_menu_rotate">تدوير الشاشة</string>
+
+    <string name="vnc_op_mouse_move">تحريك الفأرة</string>
+    <string name="vnc_op_left_click">نقر بالزر الأيسر</string>
+    <string name="vnc_op_left_double_click">نقر مزدوج بالزر الأيسر</string>
+    <string name="vnc_op_right_click">نقر بالزر الأيمن</string>
+    <string name="vnc_op_right_double_click">نقر مزدوج بالزر الأيمن</string>
+    <string name="vnc_op_middle_click">نقر بالزر الأوسط</string>
+    <string name="vnc_op_middle_double_click">نقر مزدوج بالزر الأوسط</string>
+    <string name="vnc_op_scroll_up">تمرير لأعلى</string>
+    <string name="vnc_op_scroll_down">تمرير لأسفل</string>
+    <string name="vnc_menu_reconnect">إعادة الاتصال</string>
+    <string name="vnc_menu_external_app">فتح باستخدام تطبيق خارجي</string>
+    <string name="vnc_menu_project_external">عرض على شاشة خارجية</string>
+    <string name="vnc_menu_no_vnc_app">لم يتم العثور على تطبيق للتعامل مع اتصالات VNC</string>
+    <string name="vnc_presentation_title">لوحة اللمس (Touchpad)</string>
+    <string name="vnc_presentation_title_with_name">%1$s - لوحة اللمس</string>
+
+    <string name="vnc_external_title">فتح باستخدام تطبيق خارجي</string>
+    <string name="vnc_external_message">على وشك الفتح باستخدام تطبيق خارجي</string>
+    <string name="vnc_external_hint_local">رابط URL (لهذا الجهاز)</string>
+    <string name="vnc_external_hint_remote">رابط URL (للأجهزة الأخرى)</string>
+    <string name="vnc_external_hint_password">كلمة المرور</string>
+    <string name="vnc_external_cancel">إلغاء</string>
+    <string name="vnc_external_connect">اتصال</string>
+    <string name="vnc_external_copy_password">نسخ كلمة المرور</string>
+    <string name="text_input_item_range">النطاق: %1$s - %2$s</string>
+
+    <string name="display_select_display">تحديد شاشة العرض</string>
+    <string name="display_no_display">لا توجد شاشات خارجية متاحة</string>
+    <string name="display_lost">تم فصل الشاشة الخارجية</string>
+    <string name="display_not_on_title">شاشة العرض غير نشطة</string>
+    <string name="display_not_on_message">شاشة العرض المحددة \"%1$s\" في حالة %2$s حاليًا. قد لا تعمل مشاركة الشاشة (Casting) بشكل سليم.\n\nهل ترغب في المتابعة على أي حال؟</string>
+    <string name="display_start_failed">فشل بدء شاشة العرض</string>
+    <string name="display_state_off">متوقفة (OFF)</string>
+    <string name="display_state_on">تعمل (ON)</string>
+    <string name="display_state_doze">سكون خفيف (DOZE)</string>
+    <string name="display_state_doze_suspend">سكون خفيف معلق (DOZE SUSPEND)</string>
+    <string name="display_state_on_suspend">تعمل مع تعليق (ON SUSPEND)</string>
+    <string name="display_state_unknown">غير معروفة (UNKNOWN)</string>
+    <string name="display_touchpad_hint">اسحب لتحريك المؤشر\nالمس للنقر\nمرّر بإصبعين</string>
+    <string name="display_mouse_left">زر الفأرة الأيسر</string>
+    <string name="display_mouse_middle">زر الفأرة الأوسط</string>
+    <string name="display_mouse_right">زر الفأرة الأيمن</string>
+
+    <string name="logs_title">السجلات</string>
+    <string name="logs_scroll_bottom">الانتقال إلى أسفل</string>
+    <string name="logs_clear">مسح</string>
+    <string name="logs_save">حفظ</string>
+    <string name="logs_save_success">تم حفظ السجلات بنجاح</string>
+    <string name="logs_save_failed">فشل حفظ السجلات: %1$s</string>
+    <string name="logs_share">مشاركة</string>
+    <string name="logs_share_title">مشاركة السجلات</string>
+    <string name="logs_share_failed">فشلت مشاركة السجلات: %1$s</string>
+    <string name="logs_filter">تصفية</string>
+    <string name="logs_filter_title">تصفية السجل</string>
+    <string name="logs_filter_message">تُعرض فقط الأسطر التي تحتوي على هذا النص. اتركه فارغًا لعرض كل شيء.</string>
+    <string name="logs_filter_hint">النص المراد مطابقته</string>
+    <string name="logs_filter_show_all">عرض الكل</string>
+    <string name="logs_title_filtered">%1$s - %2$s (تصفية: %3$s)</string>
+    <string name="logs_not_found_title">سجل الخدمة الخلفية غير متاح</string>
+    <string name="logs_not_found_message">لم يتم العثور على ملف سجل الخدمة الخلفية (Daemon)، هل الخدمة قيد التشغيل؟</string>
+
+    <string name="privacy_step_title">سياسة الخصوصية</string>
+    <string name="privacy_step_desc">يُرجى قراءة سياسة الخصوصية والموافقة عليها قبل المتابعة</string>
+    <string name="privacy_accept">موافقة</string>
+    <string name="privacy_decline">رفض</string>
+    <string name="privacy_decline_title">رفض سياسة الخصوصية؟</string>
+    <string name="privacy_decline_message">إذا رفضت سياسة الخصوصية، فقد لا تتوفر بعض الميزات. هل أنت متأكد من رغبتك في الرفض؟</string>
+    <string name="privacy_decline_confirm">رفض</string>
+
+    <string name="update_title">يتوفر تحديث جديد</string>
+    <string name="update_current_version">الإصدار الحالي: %1$s</string>
+    <string name="update_new_version">الإصدار الجديد: %1$s</string>
+    <string name="update_changelog">سجل التغييرات:</string>
+    <string name="update_cancel">إلغاء</string>
+    <string name="update_download">تنزيل</string>
+    <string name="update_browser">المتصفح</string>
+
+  <string name="back_ask_title">تجاهل التغييرات؟</string>
+    <string name="back_ask_message">هل أنت متأكد من رغبتك في الرجوع؟ سيتم فقدان جميع التغييرات.</string>
+    <string name="back_ask_discard">تجاهل</string>
+    <string name="back_ask_keep_editing">متابعة التعديل</string>
+
+    <string name="hugepage_title">إدارة حجز الصفحات الضخمة (GH-Hugepage-Reserve)</string>
+    <string name="hugepage_subtitle">إدارة إعدادات الوحدة</string>
+    <string name="hugepage_not_loaded">وحدة الكيرنل (Kernel Module) غير محملة.</string>
+    <string name="hugepage_not_installed">وحدة Magisk غير مثبتة.</string>
+    <string name="hugepage_not_installed_desc">وحدة Magisk المسماة gh-hugepage-reserve غير مثبتة. يُرجى تنزيلها وتثبيتها أولاً.</string>
+    <string name="hugepage_download">تنزيل</string>
+    <string name="hugepage_crash_warning">تعطلت وحدة حجز الصفحات الضخمة أثناء الإقلاع الأخير.</string>
+    <string name="hugepage_dismiss_crash">تجاهل</string>
+    <string name="hugepage_crash_dismissed">تم تجاهل تحذير التعطل</string>
+    <string name="hugepage_enable_module">تفعيل الوحدة</string>
+    <string name="hugepage_stat_state">الحالة</string>
+    <string name="hugepage_stat_total_served">إجمالي الصفحات المخدومة</string>
+    <string name="hugepage_stat_total_refilled">إجمالي الصفحات المستعادة</string>
+    <string name="hugepage_stat_active_vms">الأجهزة الافتراضية النشطة</string>
+    <string name="hugepage_stat_pool_available">المتاح: %1$d (%2$s)</string>
+    <string name="hugepage_proc_avail_detail">صفحات CMA قابلة للتحويل %1$s، غير قابلة للتحويل %2$s</string>
+    <string name="hugepage_proc_cma_detail">شاغر %1$s، تطبيقات أخرى %2$s</string>
+    <string name="hugepage_stat_pool_used">المستخدم: %1$d (%2$s)</string>
+    <string name="hugepage_stat_pool_total">الإجمالي: %1$d (%2$s)</string>
+    <string name="hugepage_stat_pool_size">حجم التجمع (Pool): %1$d (%2$s)</string>
+    <string name="hugepage_stat_pool_size_cma">حجم التجمع: %1$d/%2$d (%3$s / %4$s)</string>
+    <string name="hugepage_stats_unavailable">الوحدة غير محملة</string>
+    <string name="hugepage_advanced">متقدم</string>
+    <string name="hugepage_adv_hint">القيمة المعروضة على اليمين هي ما تشغّله الوحدة حاليًا؛ اضغط على أي صف لتعديل ما يطلبه ملف settings.prop.</string>
+    <string name="hugepage_adv_unavailable">غير متاح</string>
+    <string name="hugepage_adv_unset">(الافتراضي)</string>
+    <string name="hugepage_adv_warn_below_default">أقل من القيمة الافتراضية لهذا الجهاز (%1$d)؛ قد يصبح النظام غير مستقر</string>
+    <string name="hugepage_adv_invalid">قيمة غير صالحة</string>
+    <string name="hugepage_adv_saved">تم الحفظ</string>
+    <string name="hugepage_adv_save_failed">فشل الحفظ</string>
+    <string name="hugepage_manual_refill">حيازة الصفحات (Acquire Pages)</string>
+    <string name="hugepage_refill_triggered">تم إطلاق طلب الحيازة</string>
+    <string name="hugepage_refill_failed">فشل إطلاق طلب الحيازة</string>
+    <string name="hugepage_save_pool_size">حفظ</string>
+    <string name="hugepage_proc_acquire">حيازة (Acquire)</string>
+    <string name="hugepage_proc_acquire_v1_desc">حيازة v1 (مسح عبر دالة alloc_contig_pages)</string>
+    <string name="hugepage_proc_acquire_v2_desc">حيازة v2 (ترحيل الذاكرة + استعادة موارد النظام)</string>
+    <string name="hugepage_proc_acquire_v3_desc">حيازة v3 (ترحيل الذاكرة + إخلاء لكل كتلة إلى zram)</string>
+    <string name="hugepage_acquire_run">تشغيل</string>
+    <string name="hugepage_acquire_dont_ask">عدم السؤال مجددًا</string>
+    <string name="hugepage_acquire_v1_explain">تستخدم alloc_contig_pages لجمع الصفحات الضخمة المتجاورة</string>
+    <string name="hugepage_acquire_v2_explain">تستخدم try_to_free_mem_cgroup_pages لدفع صفحات التطبيقات الأخرى إلى مساحة التبديل swap/zram\nثم alloc_contig_range لجمع الصفحات الضخمة</string>
+    <string name="hugepage_acquire_v3_explain">تستخدم folio_isolate_lru + reclaim_pages لدفع الصفحات بدقة إلى مساحة التبديل swap/zram\nثم alloc_contig_range لجمع الصفحات الضخمة</string>
+    <string name="hugepage_proc_acquire_running">جارٍ حيازة الصفحات الضخمة...</string>
+    <string name="hugepage_proc_acquire_done">اكتملت الحيازة</string>
+    <string name="hugepage_acquire_degraded">تم التراجع التلقائي — تم تشغيل %1$s بدلاً منها</string>
+    <string name="hugepage_proc_acquire_stop">إيقاف الحيازة</string>
+    <string name="hugepage_proc_acquire_full">اكتملت الحيازة: تم الوصول إلى %1$s</string>
+    <string name="hugepage_proc_acquire_partial">توقفت الحيازة: تم تحصيل %1$s من أصل %2$s (لا يمكن للنظام ترحيل المزيد من الصفحات حاليًا)</string>
+    <string name="hugepage_proc_acquire_full_cma">اكتملت الحيازة: التجمع %1$s، مع CMA بقيمة %2$s</string>
+    <string name="hugepage_proc_acquire_partial_cma">توقفت الحيازة: التجمع %1$s من أصل %2$s، مع CMA بقيمة %3$s من أصل %4$s (لا يمكن للنظام ترحيل المزيد من الصفحات حاليًا)</string>
+    <string name="hugepage_proc_acquire_userspace">الوحدة بحاجة لذاكرة إضافية؛ جارٍ طلب المساعدة من مساحة المستخدم (Userspace)...</string>
+    <string name="hugepage_acquire_pages_title">حيازة الصفحات الضخمة</string>
+    <string name="hugepage_pool_size">حجم التجمع (Pool Size)</string>
+    <string name="hugepage_pool_size_saved">تم حفظ حجم التجمع (يسري المفعول بعد إعادة التشغيل)</string>
+    <string name="hugepage_pool_size_applied">تم حفظ حجم التجمع وتطبيقه</string>
+    <string name="hugepage_pool_shrink_busy">عملية الحيازة جارية — يتعذر تقليص الحجم الآن، انتظر حتى تنتهي</string>
+    <string name="hugepage_pool_below_vms">لا يمكن أن يكون التجمع أصغر من إجمالي ذاكرة الأجهزة الافتراضية قيد التشغيل (%1$s)</string>
+    <string name="hugepage_pool_size_failed">فشل حفظ حجم التجمع</string>
+    <string name="hugepage_module_now_enabled">تم تفعيل الوحدة (يسري المفعول بعد إعادة التشغيل)</string>
+    <string name="hugepage_module_now_disabled">تم تعطيل الوحدة (يسري المفعول بعد إعادة التشغيل)</string>
+    <string name="hugepage_btn_install">تثبيت</string>
+    <string name="hugepage_btn_enable">تفعيل</string>
+    <string name="hugepage_btn_disable">تعطيل</string>
+    <string name="hugepage_load">تحميل</string>
+    <string name="hugepage_loaded">تم تحميل الوحدة</string>
+    <string name="hugepage_load_failed">فشل تحميل الوحدة</string>
+    <string name="hugepage_already_loaded">الوحدة محملة بالفعل</string>
+    <string name="hugepage_stop">إيقاف</string>
+    <string name="hugepage_stop_confirm">هل أنت متأكد من رغبتك في إلغاء تحميل وحدة حجز الصفحات الضخمة؟ سيؤدي هذا إلى تحرير جميع الصفحات المخصصة مسبقًا وقد يؤثر على الأجهزة الافتراضية قيد التشغيل.</string>
+    <string name="hugepage_unloaded">تم إلغاء تحميل الوحدة</string>
+    <string name="hugepage_unload_failed">فشل إلغاء تحميل الوحدة</string>
+    <string name="hugepage_unload_module">إلغاء تحميل الوحدة</string>
+    <string name="hugepage_unload_module_title">إلغاء تحميل الوحدة؟</string>
+    <string name="hugepage_unload_module_confirm">إزالة ملف ko. قسرًا من الكيرنل قيد التشغيل (rmmod). سيؤدي هذا إلى تحرير جميع الصفحات المحجوزة وفقدان التتبع المخصص لكل جهاز افتراضي حتى التحميل التالي. قد يؤثر ذلك على الأجهزة الافتراضية قيد التشغيل.</string>
+    <string name="hugepage_unload_module_done">تم إلغاء تحميل الوحدة</string>
+
+    <string name="hugepage_view_processes">عرض الاستهلاك</string>
+    <string name="hugepage_proc_title_screen">استهلاك تجمع الصفحات الضخمة</string>
+    <string name="hugepage_proc_title">%1$s (معرف العملية %2$d)</string>
+    <string name="hugepage_proc_served">المخدوم: %1$d صفحات (%2$s)</string>
+    <string name="hugepage_proc_anon">الاستهلاك: %1$d صفحات (%2$s)</string>
+    <string name="hugepage_proc_unknown">غير منسوب لعملية محددة</string>
+    <string name="hugepage_proc_unknown_breakdown">غير منسوب — تم تحرير %1$d / أُعيد استخدام %2$d صفحات</string>
+    <string name="hugepage_proc_deficit">في انتظار الحيازة</string>
+    <string name="hugepage_proc_pid">المعرف (PID) %1$d</string>
+    <string name="hugepage_bar_available">المتاح</string>
+
+    <!-- v10 CMA reservoir -->
+    <string name="hugepage_enable_cma">تفعيل تقنية CMA</string>
+    <string name="hugepage_enable_cma_sub">إعارة الحجز الشاغر للتطبيقات كذاكرة CMA متجاورة؛ تُستعاد لاحقًا عند الحيازة</string>
+    <string name="hugepage_cma_pool_size">حجم التجمع مع تفعيل CMA</string>
+    <string name="hugepage_cma_not_supported">الوحدة غير محملة أو لا تدعم ميزة CMA (تتطلب الإصدار v10 وما بعده)</string>
+    <string name="hugepage_cma_unavailable_title">ذاكرة CMA غير متاحة</string>
+    <string name="hugepage_cma_unavailable_boot">عطّلت الوحدة ميزات CMA أثناء هذا الإقلاع (فشلت فحوصات الكيرنل التمهيدية / حل الرموز البرمجية / التحقق من الكتلة الأولى).</string>
+    <string name="hugepage_cma_warn_title">كيفية تفعيل تقنية CMA</string>
+    <string name="hugepage_cma_warn_msg">لا يسمح كيرنل الشركة المصنعة (Vendor Kernel) للتطبيقات باستخدام احتياطي CMA تلقائيًا، لذا اختر آلية التفعيل:\n\n- ذاكرة CMA عبر الوحدة: بناء الاحتياطي دون إجراء أي تعديل على الكيرنل، وبذلك ينعدم خطر تعطل النظام (Crash). لا تستخدمها التطبيقات إلا في الحدود التي يسمح بها كيرنل المصنع مسبقًا؛ وفي كلتا الحالتين، يظل الاحتياطي مخصصًا لخدمة الأجهزة الافتراضية.\n\n- إزالة قيود CMA: رفع قيود الكيرنل لتتمكن جميع التطبيقات من استخدام الاحتياطي، ولكن على بعض الأجهزة قد يتسبب ذلك في انهيار الهاتف وإعادة تشغيله قسرًا. يُطبّق هذا الخيار دُونَ حِفظِهِ مسبقًا؛ إذا نجح يمكنك حفظه ليعمل مع كل إقلاع، وإذا تعطل النظام فما عليك سوى إعادة التشغيل — حيث لم يُحفظ أي شيء.</string>
+    <string name="hugepage_cma_remove_restriction">إزالة قيود CMA</string>
+    <string name="hugepage_cma_module_cma">ذاكرة CMA عبر الوحدة</string>
+    <string name="hugepage_cma_lever_failed">فشلت إزالة قيود CMA: لا يحتوي هذا الكيرنل على أداة تبديل أو خطاف اعتراضي (Hook) صالح للاستخدام.</string>
+    <string name="hugepage_cma_save_title">التطبيق عند كل إقلاع؟</string>
+    <string name="hugepage_cma_save_msg">الميزة تعمل بشكل سليم الآن. هل ترغب في حفظ هذا الإعداد ليتم تفعيله تلقائيًا عند كل إقلاع؟\n\nإذا لم تقم بالحفظ، فسيظل نشطًا حتى إعادة التشغيل التالية فقط — كإجراء أمان تحسبًا لزعزعة استقرار الجهاز.</string>
+    <string name="hugepage_cma_save_yes">حفظ</string>
+    <string name="hugepage_cma_save_no">لهذه المرة فقط</string>
+    <string name="hugepage_cma_enabled">تم تفعيل CMA</string>
+    <string name="hugepage_cma_disabled">تم تعطيل CMA</string>
+    <string name="hugepage_cma_toggle_failed">فشلت كتابة هدف CMA</string>
+    <string name="hugepage_bar_cma">CMA</string>
+    <string name="hugepage_bar_cma_lent">CMA (مُعارة)</string>
+    <string name="hugepage_proc_vm">الجهاز الافتراضي: %1$s</string>
+    <string name="hugepage_proc_no_vm">ليس جهازًا افتراضيًا خاضعًا للتتبع</string>
+    <string name="hugepage_proc_state">الحالة: %1$c (%2$s)</string>
+    <string name="hugepage_proc_state_running">يعمل (running)</string>
+    <string name="hugepage_proc_state_sleeping">في وضع السكون (sleeping)</string>
+    <string name="hugepage_proc_state_disk">سكون غير قابل للمقاطعة بسبب القرص (uninterruptible sleep)</string>
+    <string name="hugepage_proc_state_stopped">متوقف (stopped)</string>
+    <string name="hugepage_proc_state_zombie">عملية مهملة (zombie)</string>
+    <string name="hugepage_proc_state_unknown">غير معروف / أُنهيت (exited)</string>
+    <string name="hugepage_proc_scan_mode">وضع الفحص</string>
+    <string name="hugepage_proc_loading">جارٍ الفحص...</string>
+    <string name="hugepage_proc_mode">وضع العرض</string>
+    <string name="hugepage_proc_mode_ko">تتبع الوحدة (عبر ملف KO)</string>
+    <string name="hugepage_proc_mode_scan">فحص النظام (عبر THP)</string>
+    <string name="hugepage_proc_ko_unavailable">الوحدة غير متاحة — جارٍ استخدام وضع الفحص</string>
+    <string name="hugepage_proc_empty">لا توجد عمليات تستخدم تجمع الصفحات الضخمة المحجوز حاليًا.</string>
+    <string name="hugepage_proc_owner_empty">لا يوجد أي جهاز افتراضي يحتفظ بصفحات ضخمة محجوزة.</string>
+    <string name="hugepage_proc_scan_empty">لا توجد أجهزة افتراضية نشطة تستخدم صفحات ضخمة.</string>
+    <string name="hugepage_proc_not_loaded">وحدة الكيرنل غير محملة.</string>
+    <string name="hugepage_proc_old_module">الوحدة المحملة لا تحتوي على واجهة برمجية لتتبع كل جهاز افتراضي (إصدار قديم). انتقل إلى وضع فحص النظام من القائمة.</string>
+    <string name="hugepage_proc_kill">إنهاء</string>
+    <string name="hugepage_proc_kill_title">إنهاء العملية %1$s؟</string>
+    <string name="hugepage_proc_sigterm">إشارة SIGTERM (15) — إنهاء آمن وتدريجي</string>
+    <string name="hugepage_proc_sigkill">إشارة SIGKILL (9) — إنهاء قسري فورًا</string>
+    <string name="hugepage_proc_kill_sent">تم إرسال الإشارة</string>
+    <string name="hugepage_proc_kill_failed">فشل إرسال الإشارة</string>
+    <string name="hugepage_proc_stack_title">مكدس الكيرنل (Kernel Stack) لمعرف العملية (PID %1$d)</string>
+    <string name="hugepage_proc_stack_unavailable">مكدس الكيرنل غير متاح (ربما استعادت العملية نشاطها).</string>
+
+    <string name="notification_permission_title">السماح بالإشعارات؟</string>
+    <string name="notification_permission_message">يقوم DroidVM بتنزيل صور الأقراص في الخلفية ويعرض مستوى التقدم عبر الإشعارات. امنح إذن الإشعارات لمتابعة تقدم التنزيل دون انقطاع.</string>
+    <string name="notification_permission_allow">متابعة</string>
+    <string name="notification_permission_skip">ليس الآن</string>
+
+    <string name="log_helper_open_url">فتح</string>
+    <string name="log_helper_bad_sm8650_kernel_url" formatted="false">https://github.com/Droid-VM/DroidVM/wiki/Problem%3A-Gunyah-Resource-Manager-refuses-to-start-the-virtual-machine%2e</string>
+    <string name="log_helper_bad_sm8650_kernel_title">مدير موارد Gunyah يرفض بدء تشغيل الجهاز الافتراضي</string>
+    <string name="log_helper_bad_sm8650_kernel_message">توجد بعض المشكلات في الكيرنل قيد التشغيل على جهازك. حاول استبداله أو إعادة تصريفه.\nحاول تفعيل أو تعطيل خيار \"إعداد إعارة الذاكرة عبر mTHP\".\nافتح المتصفح لمزيد من المعلومات.</string>
+    <string name="log_helper_huge_page_fault_url" formatted="false">https://github.com/Droid-VM/DroidVM/wiki/Problem%3A-An-out%E2%80%90of%E2%80%90memory-error-occurred-while-the-virtual-machine-was-running%2e</string>
+    <string name="log_helper_huge_page_fault_title">ذاكرة الصفحات الضخمة غير كافية</string>
+    <string name="log_helper_huge_page_fault_message">واجه الجهاز الافتراضي %s نقصًا في ذاكرة الصفحات الضخمة.\nحاول تعديل حجم الذاكرة، أو استخدم وحدة التخصيص المسبق.\nافتح المتصفح لمزيد من المعلومات.</string>
+    <string name="log_helper_no_restrict_pool_url" formatted="false">https://github.com/Droid-VM/DroidVM/wiki/Problem%3A-The-virtual-machine%27s-system-does-not-support-SWIOTLB-Restrict-DMA-Pool%2e</string>
+    <string name="log_helper_no_restrict_pool_title">وظيفة كيرنل الجهاز الافتراضي مفقودة</string>
+    <string name="log_helper_no_restrict_pool_devices">حاولت أجهزة العتاد التالية في الجهاز الافتراضي %1$s الوصول إلى منطقة الذاكرة المحمية:</string>
+    <string name="log_helper_no_restrict_pool_message"><![CDATA[قد لا يدعم كيرنل النظام الضيف تجمع Restricted DMA Pool &#8212; استبدل الكيرنل أو استخدم كيرنل DroidVM المدمج.<br><br>أو أن تعريفات النظام الضيف لتلك الأجهزة لم تُنقَل وتُجهّز بعد &#8212; ثبّت <a href="https://github.com/Droid-VM/gunyah-guest-drivers-windows">تعريفات Windows</a> أو <a href="https://github.com/Droid-VM/droidvm-guest-additions">تعريفات Linux</a>.]]></string>
+    <string name="log_helper_open_log">فتح السجل</string>
+    <string name="log_helper_unsupported_gunyah_title">إصدار Gunyah غير مدعوم</string>
+    <string name="log_helper_unsupported_gunyah_message">إصدار Gunyah على جهازك قديم للغاية (على سبيل المثال معالج Snapdragon 8 Gen 2). حاول تحديث النظام أو الترقية إلى جهاز أحدث.</string>
+    <string name="log_helper_unsupported_sandbox_title">بيئة العزل (Sandbox) غير مدعومة</string>
+    <string name="log_helper_unsupported_sandbox_message">بيئة العزل الخاصة بـ crosvm غير مدعومة على هذه المنصة. يُرجى تعطيل خيار Sandbox.</string>
+
+    <string name="vm_export_pkg">تصدير كحزمة</string>
+    <string name="vmpkg_export_title">تصدير الجهاز الافتراضي</string>
+    <string name="vmpkg_export_disk_hint">الأقراص المراد تضمينها</string>
+    <string name="vmpkg_export_no_disks">لا يحتوي هذا الجهاز الافتراضي على أقراص متصلة.</string>
+    <string name="vmpkg_export_disk_summary">تم تحديد %1$d/%2$d، الإجمالي %3$s</string>
+    <string name="vmpkg_export_create">إنشاء حزمة</string>
+    <string name="vmpkg_export_other_options">خيارات أخرى</string>
+    <string name="vmpkg_export_compression_hint">الضغط</string>
+    <string name="vmpkg_export_compression_none">بدون ضغط</string>
+    <string name="vmpkg_export_compression_gzip">Gzip (Deflate)</string>
+    <string name="vmpkg_export_compression_xz">XZ (LZMA2)</string>
+    <string name="vmpkg_export_compression_zstd">Zstandard (ZSTD)</string>
+    <string name="vmpkg_export_compression_gzip_desc">تنسيق Gzip سريع مع استهلاك منخفض للمعالج، ولكنه ينتج أرشيفات ذات أحجام أكبر.</string>
+    <string name="vmpkg_export_compression_xz_desc">تنسيق XZ (LZMA2) هو الأبطأ ويستهلك المعالج بشدة، ولكنه يقدم أعلى نسبة ضغط وأصغر حجم للأرشيف.</string>
+    <string name="vmpkg_export_compression_zstd_desc">يوفر Zstandard أفضل توازن: سرعة ضغط فائقة مع نسب تصغير ممتازة.</string>
+    <string name="vmpkg_export_volume_size_hint">حجم الأجزاء المجزأة (Volume size)</string>
+    <string name="vmpkg_export_volume_size_desc">تقسيم الحزمة إلى أجزاء ذات أحجام ثابتة (.001, .002, \u2026). اتركه فارغًا لتصدير ملف أحادي واحد.</string>
+    <string name="vmpkg_export_volume_size_invalid">يجب ألا يقل حجم الجزء عن %1$d ميغابايت</string>
+    <string name="vmpkg_export_running">جارٍ إرسال الطلب إلى الخدمة الخلفية (Daemon)\u2026</string>
+    <string name="vmpkg_export_scan">جارٍ فحص الأقراص\u2026</string>
+    <string name="vmpkg_export_pack">جارٍ حزم الأقراص\u2026</string>
+    <string name="vmpkg_export_pack_volume">جارٍ حزم الأقراص (الجزء %1$d)\u2026</string>
+    <string name="vmpkg_export_progress_detail">%1$s / %2$s %3$d%%</string>
+    <string name="vmpkg_export_success">تم إنشاء الحزمة</string>
+    <string name="vmpkg_export_success_path">تم إنشاء الحزمة: %1$s</string>
+    <string name="vmpkg_export_failed">فشل التصدير: %1$s</string>
+    <string name="vmpkg_export_failed_path_resolve">تعذر تحليل مسار الوجهة</string>
+    <string name="vmpkg_export_failed_no_task">لم تُرجع الخدمة الخلفية معرّف المهمة (Task ID)</string>
+    <string name="vmpkg_export_share">مشاركة</string>
+    <string name="vmpkg_export_share_title">مشاركة حزمة الجهاز الافتراضي</string>
+    <string name="vmpkg_package_name">اسم الحزمة</string>
+    <string name="vmpkg_package_version">إصدار الحزمة</string>
+    <string name="vmpkg_package_comment">ملاحظة / تعليق</string>
+    <string name="vmpkg_export_vm_must_stop">يجب إيقاف تشغيل الجهاز الافتراضي قبل التصدير</string>
+    <string name="vmpkg_export_disk_backing_count">+%1$d صورة داعمة</string>
+    <string name="vmpkg_export_disk_chain_broken">السلسلة منقطعة</string>
+    <string name="vmpkg_export_disk_chain_missing">تعذرت قراءة سلسلة الدعم الخلفية لهذا القرص: %1$s</string>
+    <string name="vmpkg_export_disk_missing">القرص المحدد غير موجود: %1$s</string>
+    <string name="vm_notes_title">الملاحظات</string>
+    <string name="vm_notes_edit">تعديل</string>
+    <string name="vm_notes_empty">لا توجد ملاحظات بعد</string>
+    <string name="vm_notes_hint">تنسيق Markdown\u2026</string>
+    <string name="vm_notes_save">حفظ الملاحظات</string>
+    <string name="vm_notes_preview_empty">لا يوجد شيء للمعاينة حتى الآن.</string>
+    <string name="vm_notes_mode_code">الكود المصدري</string>
+    <string name="vm_notes_mode_preview">معاينة</string>
+    <string name="vm_notes_mode_split">جنبًا إلى جنب</string>
+    <string name="vmpkg_import_title">استيراد حزمة جهاز افتراضي</string>
+    <string name="vmpkg_import_pick">اختيار ملف vmpkg.</string>
+    <string name="vmpkg_import_do">استيراد</string>
+    <string name="vmpkg_import_reading">جارٍ قراءة الحزمة\u2026</string>
+    <string name="vmpkg_import_running">جارٍ الاستيراد\u2026</string>
+    <string name="vmpkg_import_running_volume">جارٍ الاستيراد (%1$d أجزاء)\u2026</string>
+    <string name="vmpkg_import_disks">الأقراص</string>
+    <string name="vmpkg_import_networks">الشبكات</string>
+    <string name="vmpkg_import_no_disks">لا توجد أقراص في هذه الحزمة.</string>
+    <string name="vmpkg_import_meta">%1$s | %2$s | ملف البيان (manifest) إصدار v%3$d</string>
+    <string name="vmpkg_import_disk_line">%1$s (%2$s)</string>
+    <string name="vmpkg_import_disk_backing">صورة داعمة خلفية \u00b7 %1$s</string>
+    <string name="vmpkg_import_disk_summary">%1$d أقراص، %2$s</string>
+    <string name="vmpkg_import_network_line">الشبكة: %1$s</string>
+    <string name="vmpkg_import_no_networks">لا توجد شبكات مربوطة في هذه الحزمة.</string>
+    <string name="vmpkg_import_network_mode">استيراد كـ</string>
+    <string name="vmpkg_import_network_skip">تخطي</string>
+    <string name="vmpkg_import_network_join">الانضمام إلى شبكة موجودة</string>
+    <string name="vmpkg_import_network_create">إنشاء شبكة جديدة</string>
+    <string name="vmpkg_import_network_target">الشبكة المستهدفة</string>
+    <string name="vmpkg_import_network_nothing_to_join">لا يوجد شيء من هذا النوع هنا</string>
+    <string name="vmpkg_import_network_conflicts">تعارضات</string>
+    <string name="vmpkg_import_network_will_create">سيتم إنشاء \"%1$s\" على الجسر %2$s</string>
+    <string name="vmpkg_import_network_skipped">ستظل المحولات التابعة لهذه الشبكة غير متصلة.</string>
+    <string name="vmpkg_import_no_space">المساحة التخزينية المتاحة في الوجهة غير كافية. المساحة المطلوبة %1$s، والمتاحة %2$s.</string>
+    <string name="vmpkg_import_target_folder">مجلد الاستيراد</string>
+    <string name="vmpkg_import_target_folder_desc">تحصل كل عملية استيراد على مجلد فرعي مستقل هنا، يُسمى باسم الجهاز الافتراضي.</string>
+    <string name="vmpkg_import_target">سيتم استيراد الأقراص إلى:\n%1$s</string>
+    <string name="vmpkg_import_success">تم استيراد الجهاز الافتراضي: %1$s</string>
+    <string name="vmpkg_import_done">اكتمل الاستيراد</string>
+    <string name="vmpkg_import_failed">فشل الاستيراد: %1$s</string>
+    <string name="vmpkg_import_invalid">حزمة vmpkg غير صالحة: %1$s</string>
+    <string name="kernel_module_title">وحدات الكيرنل (Kernel Modules)</string>
+    <string name="kernel_module_subtitle">تحميل وحدات كيرنل المضيف، وجعلها تُحمّل تلقائيًا مع الخدمة الخلفية</string>
+    <string name="kernel_module_loading">جارٍ التحميل&#8230;</string>
+    <string name="kernel_module_none">لا توجد وحدات متاحة</string>
+    <string name="kernel_module_loaded">محملة</string>
+    <string name="kernel_module_unloaded">غير محملة</string>
+    <string name="kernel_module_load">تحميل</string>
+    <string name="kernel_module_unload">إلغاء التحميل</string>
+    <string name="kernel_module_autostart">تحميل تلقائي</string>
+    <string name="kernel_module_autostart_needs_load">قم بتحميلها مرة واحدة أولاً &#8212; يتوفر خيار التحميل التلقائي فقط للوحدات التي نجح تحميلها على هذا الجهاز</string>
+    <string name="kernel_module_working">جارٍ المعالجة&#8230;</string>
+    <string name="kernel_module_ok">تم</string>
+    <string name="kernel_module_fail">فشل</string>
+    <string name="kernel_module_kmi">واجهة KMI: %1$s</string>
+    <string name="kernel_module_why">لماذا هي مطلوبة؟</string>
+    <string name="kernel_module_manage">إدارة</string>
+    <string name="kernel_module_hugepage_name" translatable="false">GH-Hugepage-Reserve</string>
+    <string name="setup_kmod_desc"><![CDATA[يحتاج DroidVM إلى وحدات كيرنل المضيف هذه؛ بدونها قد تفشل الأجهزة الافتراضية في الإقلاع أو تفقد تسريع معالج الرسوميات (GPU). لا تزال هذه الوحدات قيد التطوير &#8212; ولا يمكن ضمان استقرارها التام، وقد تؤدي إلى إعادة تشغيل الهاتف: جرب تحميلها يدويًا أولاً، ولا تفعّل التحميل التلقائي مع الخدمة الخلفية إلا بعد التأكد من ثباتها. إذا واجهتك أي مشكلة، يُرجى <a href="https://github.com/Droid-VM/DroidVM/issues">فتح تذكرة بلاغ (Issue)</a>. توضح كل بطاقة سبب الحاجة لوحدتها.]]></string>
+    <string name="vm_hugepage_short_title">عجز في احتياطي الصفحات الضخمة</string>
+    <string name="vm_hugepage_short_message">المتبقي الشاغر في احتياطي الصفحات الضخمة هو %1$d ميغابايت، لكن هذا الجهاز الافتراضي يحتاج إلى %2$d ميغابايت تقريبًا &#8212; بعجز مقداره %3$d ميغابايت.\n\nتُستعاد سعة الاحتياطي تلقائيًا بعد ثوانٍ معدودة من إغلاق جهاز افتراضي آخر. بدء التشغيل الآن سيجبر نظام إدارة المحاكاة (Hypervisor) على استهلاك الذاكرة العادية بدلاً منها، والتي يجب ترحيلها قسرًا خارج ذاكرة CMA أولاً؛ وعلى هواتف لا تملك مساحة شاغرة فائضة قد يؤدي هذا إلى تجميد النظام بالكامل لدقائق أو إعادة تشغيله قسرًا.\n\nيؤدي الانتظار للحظات ثم إعادة المحاولة إلى حل المشكلة غالبًا.</string>
+    <string name="vm_hugepage_short_settings">إعدادات الصفحات الضخمة</string>
+    <string name="vm_hugepage_short_start_anyway">بدء التشغيل على أي حال</string>
+    <string name="vm_lend_mthp_refused_title">لا يمكن لهذا الكيرنل إعارة الذاكرة في طرود بحجم 256 ميغابايت</string>
+    <string name="vm_lend_mthp_refused_message">يقوم هذا الجهاز الافتراضي بتمرير ذاكرة RAM الخاصة بالنظام الضيف إلى نظام المحاكاة في طرود (Parcels) مجزأة بحجم 256 ميغابايت، ويقوم مدير الموارد على كيرنل 6.1 بحجز وتثبيت كل طرد فور وصوله بدلاً من استدعائه عند الطلب (Page-in on demand). تنفد الذاكرة بعد معالجة بضعة طرود، ويتوقف الجهاز الافتراضي عند GH_VM_START مع رسالة \"failed to initialize virtual machine\" \u2014 وهي رسالة مبهمة لا توضح السبب الحقيقي.\n\nيقوم خيار التخصيص المسبق كطرد وحيد (Single-parcel) بتسليم كامل المنطقة دفعة واحدة، وهو ما يتوافق مع متطلبات هذا الكيرنل. عادةً ما يُضبط الجهاز الافتراضي على النمط الآخر عند استيراده من حزمة تم تصديرها من هاتف يعمل بنواة كيرنل 6.6، حيث تُستدعى الطرود عند الطلب وتكون أجزاء 256 ميغابايت هي الخيار الأنسب.</string>
+    <string name="vm_lend_mthp_refused_fix">استخدام طرد وحيد والحفظ</string>
+    <string name="vm_lend_mthp_refused_start_anyway">بدء التشغيل على أي حال</string>
+
+  <string name="create_vm_category_peripheral">الملحقات (Peripherals)</string>
+    <string name="edit_vm_peripheral_empty">لا توجد ملحقات</string>
+    <string name="edit_vm_peripheral_add">إضافة ملحق</string>
+    <string name="edit_vm_peripheral_add_title">نوع الملحق</string>
+    <string name="edit_vm_peripheral_type">نوع الملحق</string>
+    <string name="edit_vm_peripheral_delete">إزالة الملحق</string>
+    <string name="edit_vm_peripheral_host_device">جهاز المضيف</string>
+    <string name="edit_vm_peripheral_host_default">اتباع إعدادات النظام</string>
+    <string name="edit_vm_peripheral_host_missing">غير متصل حاليًا؛ سيتبع الجهاز الافتراضي مسار توجيه النظام.</string>
+    <string name="edit_vm_peripheral_host_missing_item">%1$s (غير متصل)</string>
+    <string name="edit_vm_peripheral_pick_output">تشغيل الصوت عبر</string>
+    <string name="edit_vm_peripheral_pick_input">تسجيل الصوت من</string>
+    <string name="edit_vm_peripheral_duplicate_host">يشير ملحقان من نفس النوع إلى جهاز مضيف واحد.</string>
+    <string name="audio_device_builtin_speaker">مكبر الصوت</string>
+    <string name="audio_device_builtin_earpiece">سماعة الأذن</string>
+    <string name="audio_device_builtin_mic">الميكروفون المدمج</string>
+    <string name="audio_device_wired_headset">سماعة رأس سلكية مع ميكروفون</string>
+    <string name="audio_device_wired_headphones">سماعات رأس سلكية</string>
+    <string name="audio_device_bluetooth">صوت Bluetooth</string>
+    <string name="audio_device_bluetooth_sco">صوت مكالمات Bluetooth (وضع SCO)</string>
+    <string name="audio_device_usb">صوت USB</string>
+    <string name="audio_device_hdmi">منفذ HDMI</string>
+    <string name="audio_device_line">مخرج الصوت التناظري (Line out)</string>
+    <!-- Camera peripheral -->
+    <string name="edit_vm_peripheral_type_virtio_camera">كاميرا virtio-media</string>
+    <string name="camera_permission_title">السماح بالوصول إلى الكاميرا؟</string>
+    <string name="camera_permission_message">يقوم ملحق الكاميرا بتمرير إحدى كاميرات هذا الهاتف إلى النظام الضيف. يسمح نظام Android بفتح الكاميرا فقط أثناء امتلاك هذا التطبيق للإذن، لذا بدون منحه سيظهر الجهاز بالقائمة لكنه لن يعمل أبدًا.</string>
+    <string name="camera_permission_allow">سماح</string>
+    <string name="camera_permission_cancel">إلغاء</string>
+    <string name="camera_permission_declined">لم يُسمح بالوصول إلى الكاميرا، لذا لم تتم إضافة أي جهاز كاميرا.</string>
+    <string name="host_camera_default">الكاميرا الافتراضية للمضيف</string>
+    <string name="host_camera_front">الكاميرا الأمامية (%1$s)</string>
+    <string name="host_camera_back">الكاميرا الخلفية (%1$s)</string>
+    <string name="host_camera_external">كاميرا خارجية (%1$s)</string>
+    <string name="host_camera_unknown">الكاميرا %1$s</string>
+    <string name="host_camera_none">لا توجد كاميرا على هذا الجهاز المضيف</string>
+    <string name="create_vm_category_vpu">تسريع الفيديو العتادي (VPU)</string>
+    <string name="create_vm_vpu_enabled">إرفاق مشفّر وفك ترميز فيديو عتادي</string>
+    <string name="create_vm_vpu_host_pool_mb">حجم تجمع ذاكرة المضيف (ميغابايت)</string>
+    <string name="create_vm_vpu_guest_pool_mb">حجم تجمع ذاكرة النظام الضيف (ميغابايت)</string>
+    <string name="create_vm_vpu_note">لم تُفعّل بعد: تُحفظ هذه الإعدادات مع الجهاز الافتراضي، لكن لن يتم إرفاق أي جهاز فيديو حتى صدور هذه الميزة رسميًا.</string>
+    <string name="edit_vm_peripheral_camera_missing">لا يحتوي هذا الهاتف على مثل هذه الكاميرا؛ لن يبدأ تشغيل الجهاز.</string>
+    <string name="edit_vm_peripheral_host_camera">كاميرا المضيف</string>
+    <string name="peripheral_fgs_title">ملحق قيد الاستخدام</string>
+    <string name="peripheral_fgs_text">يستخدم جهاز افتراضي قيد التشغيل ملحقًا يتطلب بقاء DroidVM في الواجهة الأمامية.</string>
+    <string name="notif_channel_peripheral_foreground">ملحقات الأجهزة الافتراضية</string>
+    <string name="notif_channel_peripheral_foreground_desc">يظهر أثناء استخدام الجهاز الافتراضي لكاميرا أو جهاز آخر يقصره نظام Android على الواجهة الأمامية فقط.</string>
+
+    <string name="record_audio_permission_title">السماح بالوصول إلى الميكروفون؟</string>
+    <string name="record_audio_permission_message">يجري تزويد هذا الجهاز الافتراضي بميكروفون يقوم بالتسجيل من ميكروفون الهاتف أثناء تشغيل النظام. اسمح بالوصول إلى الميكروفون حتى يتمكن النظام الضيف من التقاط الصوت.</string>
+    <string name="record_audio_permission_allow">متابعة</string>
+    <string name="record_audio_permission_skip">ليس الآن</string>
+
+    <string name="edit_vm_peripheral_type_virtio_sound">صوت VirtIO Sound</string>
+    <string name="edit_vm_peripheral_type_intel_hda">صوت Intel HDA</string>
+    <string name="edit_vm_peripheral_unavailable">غير مفعّلة بعد؛ يتم تخطي الجهاز عند بدء تشغيل الجهاز الافتراضي.</string>
+    <string name="edit_vm_sound_endpoint_add">إضافة جهاز</string>
+    <string name="edit_vm_sound_endpoint_remove">إزالة نقطة النهاية (Endpoint)</string>
+    <string name="edit_vm_sound_purpose_usage">الغرض</string>
+    <string name="edit_vm_sound_purpose_content">نوع المحتوى</string>
+    <string name="edit_vm_sound_purpose_preset">استخدام الميكروفون</string>
+    <string name="edit_vm_sound_purpose_unset">اتباع الإعداد الافتراضي</string>
+    <string name="edit_vm_sound_usage_media">الوسائط</string>
+    <string name="edit_vm_sound_usage_voice_communication">مكالمة</string>
+    <string name="edit_vm_sound_usage_voice_communication_signalling">إشارات الاتصال</string>
+    <string name="edit_vm_sound_usage_game">ألعاب</string>
+    <string name="edit_vm_sound_usage_alarm">منبه</string>
+    <string name="edit_vm_sound_usage_notification">إشعارات</string>
+    <string name="edit_vm_sound_usage_notification_ringtone">نغمة رنين</string>
+    <string name="edit_vm_sound_usage_notification_event">حدث تنبيهي</string>
+    <string name="edit_vm_sound_usage_assistant">المساعد الصوتي</string>
+    <string name="edit_vm_sound_usage_assistance_accessibility">إمكانية الوصول (A11y)</string>
+    <string name="edit_vm_sound_usage_assistance_navigation_guidance">الملاحة والتوجيه</string>
+    <string name="edit_vm_sound_usage_assistance_sonification">أصوات واجهة المستخدم</string>
+    <string name="edit_vm_sound_content_speech">كلام</string>
+    <string name="edit_vm_sound_content_music">موسيقى</string>
+    <string name="edit_vm_sound_content_movie">أفلام</string>
+    <string name="edit_vm_sound_content_sonification">تأثيرات صوتية</string>
+    <string name="edit_vm_sound_preset_generic">عام</string>
+    <string name="edit_vm_sound_preset_camcorder">كاميرا الفيديو</string>
+    <string name="edit_vm_sound_preset_voice_recognition">التعرف على الصوت</string>
+    <string name="edit_vm_sound_preset_voice_communication">مكالمة صوتية</string>
+    <string name="edit_vm_sound_preset_unprocessed">صوت خام (دون معالجة)</string>
+    <string name="edit_vm_sound_preset_voice_performance">الأداء الصوتي المتقدم</string>
+    <string name="edit_vm_sound_mode_speaker">مكبر صوت</string>
+    <string name="edit_vm_sound_mode_microphone">ميكروفون</string>
+    <string name="edit_vm_sound_buffer">المخزن المؤقت (Buffer)</string>
+    <string name="edit_vm_sound_buffer_low">زمن انتقال منخفض (مخزنان مؤقتان)</string>
+    <string name="edit_vm_sound_buffer_normal">متوازن (6 مخازن مؤقتة)</string>
+    <string name="edit_vm_sound_buffer_safe">جودة عالية (12 مخزنًا مؤقتًا)</string>
+    <string name="edit_vm_sound_underrun">نقص بيانات المخزن المؤقت (Underrun)</string>
+    <string name="edit_vm_sound_underrun_silence">صمت</string>
+    <string name="edit_vm_sound_underrun_repeat">تكرار</string>
+    <string name="edit_vm_sound_underrun_wsola">خوارزمية WSOLA</string>
+    <string name="edit_vm_sound_underrun_lpc">التنبؤ الخطي (LPC)</string>
+    <string name="edit_vm_peripheral_host_output">المخرج</string>
+    <string name="edit_vm_peripheral_host_input">المدخل</string>
+    <string name="edit_vm_peripheral_type_xhci">متحكم USB من نوع xHCI</string>
+    <string name="edit_vm_xhci_rules_note">تُدار عمليات الربط ضمن قواعد التمرير المباشر لـ USB على مستوى التطبيق.</string>
+    <string name="edit_vm_xhci_passthrough_off">التمرير المباشر لـ USB معطّل: يتجاهل الجهاز الافتراضي أجهزة USB عند بدء تشغيله. يمكنك تفعيله من الإعدادات -&gt; قواعد التمرير المباشر لـ USB.</string>
+    <string name="edit_vm_xhci_device_add">إضافة جهاز</string>
+    <string name="edit_vm_xhci_device_remove">إزالة الربط</string>
+    <string name="edit_vm_xhci_usb2_ports">منافذ USB 2.0</string>
+    <string name="edit_vm_xhci_usb3_ports">منافذ USB 3.0</string>
+    <string name="edit_vm_xhci_port_item">منفذ %1$d</string>
+    <string name="edit_vm_xhci_add_custom">مخصص...</string>
+    <string name="edit_vm_xhci_custom_title">ربط مخصص</string>
+    <string name="edit_vm_xhci_custom_id">معرّف الجهاز (vid:pid أو vid:pid:serial)</string>
+    <string name="edit_vm_xhci_custom_port">مسار المنفذ، على سبيل المثال 1.2.2</string>
+    <string name="edit_vm_xhci_custom_bad_id">أدخل معرّف vid:pid، مع إمكانية إضافة الرقم التسلسلي</string>
+    <string name="edit_vm_xhci_custom_bad_port">أدخل تسلسل منافذ صالح مثل 1.2.2</string>
+    <string name="edit_vm_xhci_crosvm_one_only">يدعم crosvm متحكم xHCI واحدًا فقط؛ يتم تخطي الجهاز عند بدء تشغيل الجهاز الافتراضي.</string>
+    <string name="edit_vm_xhci_crosvm_ports_fixed">يدعم crosvm ما يصل إلى 8 منافذ؛ يتم تجاهل هذا الإعداد عند بدء تشغيل الجهاز الافتراضي.</string>
+    <string name="edit_vm_xhci_rules_save_failed">تم حفظ الجهاز الافتراضي، لكن تعذر حفظ روابط USB الخاصة به: %1$s</string>
+    <string name="vm_info_console_stdout_short">stdout</string>
+    <string name="vm_info_console_stderr_short">stderr</string>
+    <string name="create_vm_category_serial">المنافذ التسلسلية (Serial ports)</string>
+    <string name="edit_vm_serial_empty">لا توجد منافذ تسلسلية</string>
+    <string name="edit_vm_serial_add">إضافة منفذ تسلسلي</string>
+    <string name="edit_vm_serial_add_title">عتاد المنفذ التسلسلي</string>
+    <string name="edit_vm_serial_delete">إزالة المنفذ التسلسلي</string>
+    <string name="edit_vm_serial_hw_serial">تسلسلي (Serial)</string>
+    <string name="edit_vm_serial_hw_sbsa">معياري (SBSA)</string>
+    <string name="edit_vm_serial_hw_virtio_console">طرفية Virtio Console</string>
+    <string name="edit_vm_serial_backend">الواجهة الخلفية (Backend)</string>
+    <string name="edit_vm_serial_backend_sink">مصرّف الإخراج (تجاهل البيانات)</string>
+    <string name="edit_vm_serial_backend_app_console">طرفية التطبيق</string>
+    <string name="edit_vm_serial_backend_file">ملف</string>
+    <string name="edit_vm_serial_backend_unix">مقبس Unix (حزم Datagram)</string>
+    <string name="edit_vm_serial_backend_unix_stream">مقبس Unix (تدفق Stream)</string>
+    <string name="edit_vm_serial_backend_pty">طرفية وهمية (PTY)</string>
+    <string name="edit_vm_serial_backend_stdout">الإخراج القياسي (stdout)</string>
+    <string name="edit_vm_serial_backend_syslog">سجل النظام (Syslog)</string>
+    <string name="edit_vm_serial_backend_usb_acm">جهاز USB طرفي بنمط ACM</string>
+    <string name="edit_vm_serial_path">المسار</string>
+    <string name="edit_vm_serial_path_pty_hint">رابط رمزي اختياري لطرفية pty</string>
+    <string name="edit_vm_serial_path_required">المسار مطلوب لهذه الواجهة الخلفية للمنفذ التسلسلي.</string>
+    <string name="edit_vm_serial_console">طرفية النظام الضيف (SPCR)</string>
+    <string name="edit_vm_serial_slot_duplicate">يشير منفذان تسلسليان إلى منفذ USB واحد.</string>
+    <string name="edit_vm_serial_usb_slot">منفذ USB</string>
+    <string name="edit_vm_serial_usb_slot_item">المنفذ %1$d</string>
+    <string name="settings_usb_acm_ports_title">المنافذ التسلسلية لـ USB بنمط (ACM)</string>
+    <string name="settings_usb_acm_ports_summary">%1$d منافذ</string>
+    <string name="settings_usb_acm_enable">تفعيل المنفذ التسلسلي لـ USB</string>
+    <string name="settings_usb_acm_reenum_note">يؤدي تشغيل هذا الخيار أو إيقافه إلى إعادة فحص وتعداد اتصال USB للهاتف للحظات.</string>
+    <string name="settings_usb_acm_disabled">معطّل</string>
+    <string name="edit_vm_serial_usb_disabled_hint">المنفذ التسلسلي لـ USB (ACM) معطل؛ قم بتفعيله من الإعدادات وإلا فلن يُقلع هذا الجهاز الافتراضي.</string>
+    <string name="edit_vm_serial_full">تمت إضافة جميع المنافذ الخاصة بهذا العتاد بالفعل.</string>
+    <string name="settings_usb_passthrough_title">قواعد التمرير المباشر لـ USB</string>
+    <string name="settings_usb_passthrough_summary">تحديد الجهاز الافتراضي الذي يتم توجيه جهاز USB المتصل إليه تلقائيًا</string>
+    <string name="settings_usb_devices_title">مدير التمرير المباشر لـ USB</string>
+    <string name="settings_usb_devices_summary">إرسال جهاز محدد إلى وجهة ما الآن دون تعديل القواعد</string>
+    <string name="usb_rules_title">قواعد التمرير المباشر لـ USB</string>
+    <string name="usb_rules_unsaved">تغييرات غير محفوظة</string>
+    <string name="usb_rules_enabled">تفعيل التمرير المباشر لـ USB</string>
+    <string name="usb_rules_enabled_note">طالما أن هذا الخيار معطل فلن يتم تطبيق أي قاعدة، وستظل جميع الأجهزة مرتبطة بنظام Android</string>
+    <string name="usb_rules_enable_warning_title">السماح لتطبيق DroidVM بالتحكم في USB؟</string>
+    <string name="usb_rules_enable_warning_message">عند تفعيل التمرير المباشر لـ USB، يتولى DroidVM توجيه كل جهاز USB تقوم بتوصيله: لن يتم ربط أي برنامج تشغيل تلقائيًا، ولن يصل الجهاز إلى Android إلا إذا نصت قاعدة صريحة على ذلك.</string>
+    <string name="usb_rules_layer_exact">مطابقة تامة</string>
+    <string name="usb_rules_layer_port">حسب المنفذ</string>
+    <string name="usb_rules_layer_device">حسب الجهاز</string>
+    <string name="usb_rules_layer_any">أي جهاز</string>
+    <!-- One bound rule on an xHCI card: the layer is the label to its left, so the value
+         says only what that layer stores. -->
+    <string name="usb_rules_row_exact_fmt">المنفذ: %1$s، الجهاز: %2$s (%3$s)</string>
+    <string name="usb_rules_row_port_fmt">المنفذ: %1$s</string>
+    <string name="usb_rules_row_device_fmt">%1$s (%2$s)</string>
+    <string name="usb_rules_empty_exact">لا توجد قواعد مطابقة تامة</string>
+    <string name="usb_rules_empty_port">لا توجد قواعد للمنافذ</string>
+    <string name="usb_rules_empty_device">لا توجد قواعد للأجهزة</string>
+    <string name="usb_rules_empty_any">لا توجد قواعد عامة شاملة</string>
+    <string name="usb_rules_add">إضافة قاعدة</string>
+    <string name="usb_rules_target_custom">مخصص...</string>
+    <string name="usb_rules_custom_target_title">هدف مخصص</string>
+    <string name="usb_rules_custom_vm">معرّف الجهاز الافتراضي (UUID)</string>
+    <string name="usb_rules_custom_controller">معرّف المتحكم (اتركه فارغًا للمتحكم الأول)</string>
+    <string name="usb_rules_custom_vm_required">أدخل معرّف الجهاز الافتراضي</string>
+    <string name="usb_rules_target_vm">إرفاق بـ %1$s</string>
+    <string name="usb_rules_target_controller">إرفاق بـ %1$s (%2$s)</string>
+    <string name="usb_rules_unknown_controller">%1$s (المتحكم %2$s مفقود)</string>
+    <string name="usb_rules_no_controller">%1$s (لا يوجد متحكم USB)</string>
+    <string name="usb_rules_unknown_vm">جهاز افتراضي غير معروف (%1$s)</string>
+    <string name="usb_rules_unknown_device">جهاز غير معروف %1$s</string>
+    <string name="usb_rules_any_device">أي جهاز USB</string>
+    <string name="usb_rules_device_absent">غير متصل</string>
+    <string name="usb_rules_device_unnamed">جهاز غير معروف</string>
+    <string name="usb_rules_device_name_fmt" translatable="false">%1$s (%2$s)</string>
+    <string name="usb_rules_card_title_fmt" translatable="false">USB %1$s %2$s</string>
+    <string name="usb_rules_card_title_plain_fmt" translatable="false">USB %1$s</string>
+    <!-- The bold lines of a rule card: what the rule matches on, which is all of it that is
+         stored. The plain ones below describe the device that matcher resolves to right now. -->
+    <string name="usb_rules_match_id_fmt">مطابقة الجهاز: %1$s</string>
+    <string name="usb_rules_match_port_fmt">مطابقة المنفذ: %1$s</string>
+    <string name="usb_rules_match_any">مطابقة أي جهاز USB</string>
+    <string name="usb_rules_info_id_fmt">الجهاز: %1$s</string>
+    <string name="usb_rules_info_port_fmt">المنفذ: %1$s</string>
+    <string name="usb_rules_value_absent" translatable="false">\u2014</string>
+    <string name="usb_rules_edit">تعديل</string>
+    <string name="usb_rules_edit_done">تم</string>
+    <string name="usb_rules_reorder">إعادة الترتيب</string>
+    <!-- Where a device goes, in the words both USB pages use. A rule sends it somewhere and
+         the management page says where it is, but the answer is the same answer. -->
+    <string name="usb_target_host">المضيف</string>
+    <string name="usb_target_idle">خامل</string>
+    <string name="usb_rules_target_title">تعديل وجهة الإرفاق</string>
+    <string name="usb_rules_attach_to">إرفاق بـ\u2026</string>
+    <string name="usb_rules_edit_title">تعديل قاعدة المطابقة</string>
+    <string name="usb_rules_add_title">إضافة قاعدة مطابقة</string>
+    <string name="usb_rules_field_id">الجهاز</string>
+    <string name="usb_rules_field_port">المنفذ</string>
+    <string name="usb_rules_delete_action">حذف</string>
+    <string name="usb_rules_delete">حذف القاعدة</string>
+    <string name="usb_rules_save">حفظ وتطبيق</string>
+    <string name="usb_rules_saved">تم التطبيق على %1$d من الأجهزة</string>
+    <string name="usb_rules_released">تمت إعادة %1$d من الأجهزة إلى Android</string>
+    <string name="usb_rules_save_failed_title">لم تُحفظ القواعد</string>
+    <string name="usb_rules_request_failed">رفضت الخدمة الخلفية (Daemon) الطلب</string>
+    <string name="usb_rules_daemon_unavailable">الخدمة الخلفية غير متصلة</string>
+    <string name="usb_rules_pick_device_exact_fmt" translatable="false">%1$s (%2$s, port %3$s)</string>
+    <string name="usb_rules_pick_device_port_fmt">المنفذ %1$s: %2$s</string>
+    <string name="usb_rules_pick_device_device_fmt" translatable="false">%1$s (%2$s)</string>
+    <string name="usb_rules_vm_label_fmt" translatable="false">%1$s (%2$s)</string>
+    <string name="usb_rules_discard_title">تجاهل التغييرات؟</string>
+    <string name="usb_rules_discard_message">لم يتم حفظ القواعد. هل تريد المغادرة دون تطبيقها؟</string>
+    <string name="usb_rules_event_attached">تم إرفاق %1$s بـ %2$s تلقائيًا</string>
+    <string name="usb_rules_event_failed">تعذر إرفاق %1$s بـ %2$s: %3$s</string>
+    <string name="usb_devices_title">مدير التمرير المباشر لـ USB</string>
+    <string name="usb_devices_empty">لا توجد أجهزة USB متصلة</string>
+    <string name="usb_devices_action_failed_title">لم يتم نقل الجهاز</string>
+    <string name="usb_devices_path_fmt" translatable="false">%1$s (%2$s)</string>
+    <!-- Neither the host nor one of our VMs: something opened the device through usbfs. -->
+    <string name="usb_devices_target_claimed">مستخدم في موضع آخر</string>
+    <!-- U+1F512, as an entity: the base file stays ASCII (scripts/ci/check_ascii.py). -->
+    <string name="usb_devices_locked_fmt" translatable="false">&#128274; %1$s</string>
+    <string name="usb_devices_idle_kept">يبقى %1$s مع المضيف: تعذر على أحد برامج التشغيل تحريره، لذا لن يتحول إلى خامل إلا عند فصله</string>
+</resources>

From ddf37b2007f4242c19999a8ce42c94d9e65b6a89 Mon Sep 17 00:00:00 2001
From: Molly Sophia <mollysophia379@gmail.com>
Date: Sat, 3 Oct 2026 19:44:04 +0800
Subject: [PATCH 181/182] fix(vm): restrict pseudo-unprotected mode to crosvm
 Gunyah

Signed-off-by: Molly Sophia <mollysophia379@gmail.com>
---
 .../vm/backend/CrosvmBackendInstance.java     |  6 +++-
 .../droidvm/lib/store/vm/ProtectedVM.java     | 20 +++++++++++
 .../droidvm/lib/store/vm/VMConfig.java        |  5 +--
 .../droidvm/ui/vm/KernelModulePreflight.java  |  1 +
 .../cn/classfun/droidvm/ui/vm/VMActions.java  |  3 ++
 .../droidvm/ui/vm/boot/BootMenuDialog.java    |  4 ++-
 .../ui/vm/edit/basic/VMEditBasicTab.java      | 32 +++++++++++++++--
 app/src/main/res/values-ar/strings.xml        |  1 +
 app/src/main/res/values-zh-rCN/strings.xml    |  1 +
 app/src/main/res/values-zh-rTW/strings.xml    |  1 +
 app/src/main/res/values/strings.xml           |  1 +
 .../lib/store/vm/ProtectedVMBackendTest.java  | 34 +++++++++++++++++++
 12 files changed, 102 insertions(+), 7 deletions(-)
 create mode 100644 app/src/test/java/cn/classfun/droidvm/lib/store/vm/ProtectedVMBackendTest.java

diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/CrosvmBackendInstance.java b/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/CrosvmBackendInstance.java
index e953de0e4..62662b736 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/CrosvmBackendInstance.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/CrosvmBackendInstance.java
@@ -413,7 +413,11 @@ && optEnum(item, "gpu_backend", GpuBackend.NONE) == GpuBackend.GPU_VIRGLRENDERER
                 break;
             default:throw new IllegalArgumentException(fmt("Unsupported hypervisor: %s", hypervisor));
         }
-        var protectedVm = optEnum(item, "protected_vm", defProtectedMode);
+        var configuredProtection = optEnum(item, "protected_vm", defProtectedMode);
+        var protectedVm = ProtectedVM.resolveFor(configuredProtection, VMBackend.CROSVM, hypervisor);
+        if (protectedVm != configuredProtection) {
+            Log.w(TAG, fmt("Pseudo-unprotected requires Gunyah; using normal mode for %s", hypervisor));
+        }
         switch (protectedVm) {
             case PROTECTED_PROTECTED:
                 args.add("--protected-vm");
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/store/vm/ProtectedVM.java b/app/src/main/java/cn/classfun/droidvm/lib/store/vm/ProtectedVM.java
index 8e5f1aae5..1f5176542 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/store/vm/ProtectedVM.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/store/vm/ProtectedVM.java
@@ -30,6 +30,26 @@ public enum ProtectedVM implements StringEnum {
     /** The config key every reader of this enum uses. */
     public static final String KEY = "protected_vm";
 
+    public static boolean supportsPseudoUnprotected(VMBackend backend, VMHypervisor hypervisor) {
+        return backend == VMBackend.CROSVM && hypervisor == VMHypervisor.GUNYAH;
+    }
+
+    public static boolean supportsPseudoUnprotected(@NonNull DataItem item) {
+        var backend = Enums.optEnum(item, "backend", VMBackend.DEFAULT);
+        var configured = Enums.optEnum(item, "hypervisor", VMHypervisor.DEFAULT);
+        var hypervisor = VMHypervisor.resolveConfigured(backend, configured);
+        return supportsPseudoUnprotected(backend, hypervisor);
+    }
+
+    public static ProtectedVM defaultFor(VMBackend backend, VMHypervisor hypervisor) {
+        return supportsPseudoUnprotected(backend, hypervisor) ? PSEUDO_UNPROTECTED : PROTECTED_NORMAL;
+    }
+
+    public static ProtectedVM resolveFor(ProtectedVM mode, VMBackend backend, VMHypervisor hypervisor) {
+        return mode == PSEUDO_UNPROTECTED && !supportsPseudoUnprotected(backend, hypervisor)
+            ? PROTECTED_NORMAL : mode;
+    }
+
     /**
      * Is this VM's guest memory lent to the hypervisor -- i.e. out of the host's reach while it
      * runs? That is the property two guest-side limits follow from: virtio has to bounce through
diff --git a/app/src/main/java/cn/classfun/droidvm/lib/store/vm/VMConfig.java b/app/src/main/java/cn/classfun/droidvm/lib/store/vm/VMConfig.java
index 56b7316d8..a445c23a9 100644
--- a/app/src/main/java/cn/classfun/droidvm/lib/store/vm/VMConfig.java
+++ b/app/src/main/java/cn/classfun/droidvm/lib/store/vm/VMConfig.java
@@ -77,9 +77,10 @@ public static VMConfig createWithCustomizeDefaults(@NonNull Context context) {
         item.set("strace", false);
         item.set("gpu_vram_folio_threshold_kb", 1024L);
         item.set(LendMthpMode.KEY, LendMthpMode.defaultForDevice(context));
-        item.set("protected_vm", NEW_VM_DEFAULT_PROTECTED_VM);
         item.set("backend", VMBackend.DEFAULT);
-        item.set("hypervisor", VMHypervisor.defaultForNewVm(VMBackend.DEFAULT));
+        var hypervisor = VMHypervisor.defaultForNewVm(VMBackend.DEFAULT);
+        item.set("hypervisor", hypervisor);
+        item.set("protected_vm", ProtectedVM.defaultFor(VMBackend.DEFAULT, hypervisor));
         item.set("extra_options", DataItem.newArray());
         item.set("environment_variables", DataItem.newArray());
         item.set(CpuPlacementPlan.KEY_AFFINITY, "");
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/KernelModulePreflight.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/KernelModulePreflight.java
index ac45e5463..d1bcb34dc 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/KernelModulePreflight.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/KernelModulePreflight.java
@@ -101,6 +101,7 @@ static LinkedHashMap<String, Integer> wantedBy(@NonNull DataItem item) {
     @NonNull
     public static List<Missing> check(@NonNull Context ctx, @NonNull DataItem item) {
         var wanted = wantedBy(item);
+        if (!ProtectedVM.supportsPseudoUnprotected(item)) wanted.remove(GUNYAH_HOST_SHARE);
         if (wanted.isEmpty()) return List.of();
 
         var modules = KernelModuleManager.list(ctx);
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/VMActions.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/VMActions.java
index 787629bcf..fbe3ddb62 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/VMActions.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/VMActions.java
@@ -261,6 +261,9 @@ private static void promptProtectedGuest(
             .setNegativeButton(android.R.string.cancel, null)
             .create();
         dialog.show();
+        if (!ProtectedVM.supportsPseudoUnprotected(config.item)) {
+            dialog.getButton(AlertDialog.BUTTON_POSITIVE).setVisibility(android.view.View.GONE);
+        }
         guardCountdown(ctx, dialog, R.string.vm_protected_guest_start_countdown,
             () -> proceed.accept(config));
     }
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/boot/BootMenuDialog.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/boot/BootMenuDialog.java
index d7509d14f..1ab5209ce 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/boot/BootMenuDialog.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/boot/BootMenuDialog.java
@@ -253,7 +253,9 @@ public void run() {
             }
             Runnable refresh = () -> {
                 updateSummary(context, summary, boot, result, state.bootable, group);
-                updateFix(dialog, boot, protectedVm, result, state.bootable, group);
+                updateFix(dialog, boot,
+                    protectedVm && ProtectedVM.supportsPseudoUnprotected(config.item),
+                    result, state.bootable, group);
             };
             refresh.run();
             group.setOnCheckedChangeListener((g, id) -> refresh.run());
diff --git a/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/basic/VMEditBasicTab.java b/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/basic/VMEditBasicTab.java
index 198478da3..a8a62038d 100644
--- a/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/basic/VMEditBasicTab.java
+++ b/app/src/main/java/cn/classfun/droidvm/ui/vm/edit/basic/VMEditBasicTab.java
@@ -147,9 +147,16 @@ public void initValue() {
             LendMthpMode.class, LendMthpMode.defaultForDevice(parent));
         parent.put("backend", VMBackend.DEFAULT);
         parent.put("hypervisor", chooseHypervisor.getSelectedItem());
-        chooseBackend.setOnValueChangedListener((oldValue, newValue) -> parent.put("backend", newValue));
-        chooseHypervisor.setOnValueChangedListener((oldValue, newValue) -> parent.put("hypervisor", newValue));
+        chooseBackend.setOnValueChangedListener((oldValue, newValue) -> {
+            parent.put("backend", newValue);
+            updateProtectedModes();
+        });
+        chooseHypervisor.setOnValueChangedListener((oldValue, newValue) -> {
+            parent.put("hypervisor", newValue);
+            updateProtectedModes();
+        });
         chooseProtectedVm.setOnValueChangedListener((oldValue, newValue) -> updateProtectedVisibility());
+        updateProtectedModes();
         updateProtectedVisibility();
         initCpuTopology();
     }
@@ -188,13 +195,16 @@ public void loadConfig(@NonNull VMConfig config) {
         swHugepages.setChecked(item.optBoolean("hugepages", false));
         swDebug.setChecked(item.optBoolean("strace", false));
         choosePrepareLendMthp.setSelectedItem(LendMthpMode.fromItem(item));
-        chooseProtectedVm.setSelectedItem(optEnum(item, "protected_vm", PROTECTED_WITHOUT_FIRMWARE));
         chooseBackend.setSelectedItem(optEnum(item, "backend", VMBackend.DEFAULT));
         var backend = optEnum(item, "backend", VMBackend.DEFAULT);
         var configuredHypervisor = optEnum(item, "hypervisor", VMHypervisor.DEFAULT);
         var hypervisor = VMHypervisor.resolveConfigured(backend, configuredHypervisor);
         chooseHypervisor.setSelectedItem(hypervisor != null
             ? hypervisor : VMHypervisor.defaultForNewVm(backend));
+        updateProtectedModes();
+        chooseProtectedVm.setSelectedItem(ProtectedVM.resolveFor(
+            optEnum(item, "protected_vm", PROTECTED_WITHOUT_FIRMWARE), backend,
+            chooseHypervisor.getSelectedItem()));
         var extraOpts = item.opt("extra_options", null);
         if (extraOpts != null && extraOpts.is(DataItem.Type.ARRAY)) {
             var sb = new StringBuilder();
@@ -216,6 +226,22 @@ public void loadConfig(@NonNull VMConfig config) {
             etEnvironmentVariables.setText("");
         }
         loadCpuTopology(item);
+        updateProtectedModes();
+        updateProtectedVisibility();
+    }
+
+    private void updateProtectedModes() {
+        VMBackend backend = chooseBackend.getSelectedItem();
+        VMHypervisor hypervisor = chooseHypervisor.getSelectedItem();
+        ProtectedVM selected = chooseProtectedVm.getSelectedItem();
+        chooseProtectedVm.setDefaultItem(ProtectedVM.defaultFor(backend, hypervisor));
+        if (ProtectedVM.supportsPseudoUnprotected(backend, hypervisor)) {
+            chooseProtectedVm.setDisabledItems(null);
+        } else {
+            chooseProtectedVm.setDisabledItems(parent.getString(R.string.create_vm_pseudo_gunyah_only),
+                ProtectedVM.PSEUDO_UNPROTECTED);
+        }
+        chooseProtectedVm.setSelectedItem(ProtectedVM.resolveFor(selected, backend, hypervisor));
         updateProtectedVisibility();
     }
 
diff --git a/app/src/main/res/values-ar/strings.xml b/app/src/main/res/values-ar/strings.xml
index 5dce16759..d1a32fd45 100644
--- a/app/src/main/res/values-ar/strings.xml
+++ b/app/src/main/res/values-ar/strings.xml
@@ -219,6 +219,7 @@
     <string name="create_vm_protected_protected">محمي</string>
     <string name="create_vm_protected_without_firmware">محمي بدون فيرموير</string>
     <string name="create_vm_protected_pseudo_unprotected">شبه غير محمي (Pseudo Unprotected)</string>
+    <string name="create_vm_pseudo_gunyah_only">يتطلب crosvm مع الواجهة الخلفية Gunyah</string>
     <string name="create_vm_category_extra_options">خيارات إضافية</string>
     <string name="create_vm_extra_option_hint">معطيات إضافية (معطى واحد في كل سطر)</string>
     <string name="create_vm_environment_variables_hint">متغيرات البيئة (KEY=VALUE، متغير واحد في كل سطر)</string>
diff --git a/app/src/main/res/values-zh-rCN/strings.xml b/app/src/main/res/values-zh-rCN/strings.xml
index d85c3d43f..5b0137ac8 100644
--- a/app/src/main/res/values-zh-rCN/strings.xml
+++ b/app/src/main/res/values-zh-rCN/strings.xml
@@ -214,6 +214,7 @@
     <string name="create_vm_protected_protected">保护</string>
     <string name="create_vm_protected_without_firmware">无固件保护</string>
     <string name="create_vm_protected_pseudo_unprotected">伪非保护</string>
+    <string name="create_vm_pseudo_gunyah_only">仅限 crosvm 的 Gunyah 后端</string>
     <string name="create_vm_category_extra_options">额外选项</string>
     <string name="create_vm_extra_option_hint">额外选项（每行一个）</string>
     <string name="create_vm_environment_variables_hint">环境变量（KEY=VALUE，每行一个）</string>
diff --git a/app/src/main/res/values-zh-rTW/strings.xml b/app/src/main/res/values-zh-rTW/strings.xml
index f9426dac3..85b813982 100644
--- a/app/src/main/res/values-zh-rTW/strings.xml
+++ b/app/src/main/res/values-zh-rTW/strings.xml
@@ -214,6 +214,7 @@
     <string name="create_vm_protected_protected">保護</string>
     <string name="create_vm_protected_without_firmware">無韌體保護</string>
     <string name="create_vm_protected_pseudo_unprotected">偽非保護</string>
+    <string name="create_vm_pseudo_gunyah_only">僅限 crosvm 的 Gunyah 後端</string>
     <string name="create_vm_category_extra_options">額外選項</string>
     <string name="create_vm_extra_option_hint">額外選項（每行一個）</string>
     <string name="create_vm_environment_variables_hint">環境變數（KEY=VALUE，每行一個）</string>
diff --git a/app/src/main/res/values/strings.xml b/app/src/main/res/values/strings.xml
index f3bdf6a72..386a8b81a 100644
--- a/app/src/main/res/values/strings.xml
+++ b/app/src/main/res/values/strings.xml
@@ -218,6 +218,7 @@
     <string name="create_vm_protected_protected">Protected</string>
     <string name="create_vm_protected_without_firmware">Protected without firmware</string>
     <string name="create_vm_protected_pseudo_unprotected">Pseudo Unprotected</string>
+    <string name="create_vm_pseudo_gunyah_only">Requires crosvm with Gunyah</string>
     <string name="create_vm_category_extra_options">Extra Options</string>
     <string name="create_vm_extra_option_hint">Extra arguments (one per line)</string>
     <string name="create_vm_environment_variables_hint">Environment variables (KEY=VALUE, one per line)</string>
diff --git a/app/src/test/java/cn/classfun/droidvm/lib/store/vm/ProtectedVMBackendTest.java b/app/src/test/java/cn/classfun/droidvm/lib/store/vm/ProtectedVMBackendTest.java
new file mode 100644
index 000000000..a2d95f04d
--- /dev/null
+++ b/app/src/test/java/cn/classfun/droidvm/lib/store/vm/ProtectedVMBackendTest.java
@@ -0,0 +1,34 @@
+package cn.classfun.droidvm.lib.store.vm;
+
+import static org.junit.Assert.assertEquals;
+import static org.junit.Assert.assertFalse;
+import static org.junit.Assert.assertTrue;
+
+import org.junit.Test;
+
+public class ProtectedVMBackendTest {
+    @Test
+    public void pseudoUnprotectedRequiresCrosvmGunyah() {
+        assertTrue(ProtectedVM.supportsPseudoUnprotected(VMBackend.CROSVM, VMHypervisor.GUNYAH));
+        for (var backend : VMBackend.values()) {
+            for (var hypervisor : VMHypervisor.values()) {
+                if (backend == VMBackend.CROSVM && hypervisor == VMHypervisor.GUNYAH) continue;
+                assertFalse(ProtectedVM.supportsPseudoUnprotected(backend, hypervisor));
+                assertEquals(ProtectedVM.PROTECTED_NORMAL,
+                    ProtectedVM.resolveFor(ProtectedVM.PSEUDO_UNPROTECTED, backend, hypervisor));
+            }
+        }
+    }
+
+    @Test
+    public void realProtectedModesArePreserved() {
+        for (var mode : ProtectedVM.values()) {
+            if (mode == ProtectedVM.PSEUDO_UNPROTECTED) continue;
+            assertEquals(mode, ProtectedVM.resolveFor(mode, VMBackend.CROSVM, VMHypervisor.GENIEZONE));
+        }
+        assertEquals(ProtectedVM.PSEUDO_UNPROTECTED,
+            ProtectedVM.defaultFor(VMBackend.CROSVM, VMHypervisor.GUNYAH));
+        assertEquals(ProtectedVM.PROTECTED_NORMAL,
+            ProtectedVM.defaultFor(VMBackend.CROSVM, VMHypervisor.KVM));
+    }
+}

From 641d44e79bb5b52a3b8c134e8f7721fb4249e4a9 Mon Sep 17 00:00:00 2001
From: collegeming <colleming@outlook.com>
Date: Sat, 7 Nov 2026 10:00:34 +0800
Subject: [PATCH 182/182] daemon: stop closing adopted serial and input fds
 twice

SerialPipe hands both local pipe ends to FDPipeConsoleStream, which adopts
them into ParcelFileDescriptor; the stream is their sole owner from then on.
close() closed the stream first and then closed the saved integers again.
The kernel can reuse a released number between those two steps, so the second
close takes down whatever now owns it, and fdsan aborts the daemon when that
happens to be a Java stream. Track which ends were transferred, detach them
before any closer can run, and never close those raw again. closeRemoteFd
also stops reading pipe_in under a pipe_out guard. Constructor failure still
closes only the ends that were not adopted.

NativeDisplayInputBridge released its slot map without synchronizing, so two
concurrent releases could take the same list and close the same listening
descriptors twice. The accept loop also needed a way to stop without another
thread closing the descriptors it was still using. Give each generation one
owner: release detaches the whole map and closes only the wake pipe writer,
whose HUP wakes poll, while the accept worker closes the listener and read
end after its last syscall. The listener is non-blocking so a readiness that
disappeared cannot leave accept parked.

Tests are pure-Java unit tests for both owners: descriptor-number reuse after
a close, concurrent release, and partial transfer failure. They do not run on
Android or exercise the JNI layer.

Signed-off-by: zhengwenming <zhengwenming@apexsoft.com.cn>
---
 .../droidvm/daemon/vm/SerialPipe.java         |  95 +++----
 .../droidvm/daemon/vm/SerialPipeFds.java      | 126 ++++++++++
 .../vm/backend/NativeDisplayInputBridge.java  | 141 ++++++-----
 .../vm/backend/NativeInputSocketOwner.java    |  49 ++++
 .../droidvm/daemon/vm/SerialPipeFdsTest.java  | 234 ++++++++++++++++++
 .../backend/NativeInputSocketOwnerTest.java   |  94 +++++++
 6 files changed, 623 insertions(+), 116 deletions(-)
 create mode 100644 app/src/main/java/cn/classfun/droidvm/daemon/vm/SerialPipeFds.java
 create mode 100644 app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/NativeInputSocketOwner.java
 create mode 100644 app/src/test/java/cn/classfun/droidvm/daemon/vm/SerialPipeFdsTest.java
 create mode 100644 app/src/test/java/cn/classfun/droidvm/daemon/vm/backend/NativeInputSocketOwnerTest.java

diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/vm/SerialPipe.java b/app/src/main/java/cn/classfun/droidvm/daemon/vm/SerialPipe.java
index f0ffe4559..cf2e6cbd8 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/vm/SerialPipe.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/vm/SerialPipe.java
@@ -4,6 +4,7 @@
 package cn.classfun.droidvm.daemon.vm;
 
 import java.io.Closeable;
+import java.util.Objects;
 
 import cn.classfun.droidvm.daemon.console.FDPipeConsoleStream;
 import cn.classfun.droidvm.lib.natives.UnixHelper;
@@ -11,93 +12,67 @@
 public final class SerialPipe implements Closeable {
     private final String name;
     private FDPipeConsoleStream stream;
-    private int[] pipe_in;
-    private int[] pipe_out;
+    private final SerialPipeFds fds = new SerialPipeFds();
 
     public SerialPipe(
         FDPipeConsoleStream stream,
         String name
     ) {
         this.name = name;
-        this.pipe_out = UnixHelper.nativePipe();
-        this.pipe_in = UnixHelper.nativePipe();
-        this.stream = stream;
-        if (
-            pipe_in == null || pipe_in.length != 2 ||
-            pipe_out == null || pipe_out.length != 2
-        ) {
-            close();
-            throw new RuntimeException("Failed to create pipes");
+        Objects.requireNonNull(stream, "stream");
+        boolean ready = false;
+        try {
+            fds.setOutputPipe(UnixHelper.nativePipe());
+            fds.setInputPipe(UnixHelper.nativePipe());
+            fds.requireReady();
+            fds.transferOutputLocal(stream::setReadFd, stream::getPosixReadFd);
+            fds.transferInputLocal(stream::setWriteFd, stream::getPosixWriteFd);
+            this.stream = stream;
+            ready = true;
+        } finally {
+            // Do not close the caller's stream or its adopted ends on partial failure.
+            if (!ready) fds.close(() -> {}, UnixHelper::nativeCloseFd);
         }
-        stream.setReadFd(getOutputLocalFd());
-        stream.setWriteFd(getInputLocalFd());
     }
 
     @SuppressWarnings("unused")
-    public FDPipeConsoleStream getStream() {
+    public synchronized FDPipeConsoleStream getStream() {
         return stream;
     }
 
-    public boolean isReady() {
+    public synchronized boolean isReady() {
         return stream != null && stream.isReady();
     }
 
-    public int getOutputLocalFd() {
-        if (pipe_out == null || pipe_out[0] == -1)
-            throw new IllegalStateException("output local fd invalid");
-        return pipe_out[0];
+    /** Borrowed local fd; the stream's PFD is its sole owner after construction. */
+    public synchronized int getOutputLocalFd() {
+        return fds.outputLocalFd();
     }
 
-    public int getOutputRemoteFd() {
-        if (pipe_out == null || pipe_out[1] == -1)
-            throw new IllegalStateException("output remote fd invalid");
-        return pipe_out[1];
+    public synchronized int getOutputRemoteFd() {
+        return fds.outputRemoteFd();
     }
 
-    public int getInputLocalFd() {
-        if (pipe_in == null || pipe_in[1] == -1)
-            throw new IllegalStateException("input local fd invalid");
-        return pipe_in[1];
+    /** Borrowed local fd; the stream's PFD is its sole owner after construction. */
+    public synchronized int getInputLocalFd() {
+        return fds.inputLocalFd();
     }
 
-    public int getInputRemoteFd() {
-        if (pipe_in == null || pipe_in[0] == -1)
-            throw new IllegalStateException("input remote fd invalid");
-        return pipe_in[0];
+    public synchronized int getInputRemoteFd() {
+        return fds.inputRemoteFd();
     }
 
-    public void closeRemoteFd() {
-        if (pipe_out != null) {
-            closeFd(pipe_in[0]);
-            pipe_in[0] = -1;
-        }
-        if (pipe_out != null) {
-            closeFd(pipe_out[1]);
-            pipe_out[1] = -1;
-        }
+    public synchronized void closeRemoteFd() {
+        fds.closeRemoteFd(UnixHelper::nativeCloseFd);
     }
 
     @Override
-    public void close() {
-        if (stream != null) {
-            stream.close();
-            stream = null;
-        }
-        if (pipe_in != null) {
-            closeFd(pipe_in[0]);
-            closeFd(pipe_in[1]);
-            pipe_in = null;
-        }
-        if (pipe_out != null) {
-            closeFd(pipe_out[0]);
-            closeFd(pipe_out[1]);
-            pipe_out = null;
-        }
-    }
-
-    private static void closeFd(int fd) {
-        if (fd >= 0)
-            UnixHelper.nativeCloseFd(fd);
+    public synchronized void close() {
+        FDPipeConsoleStream ownedStream = stream;
+        stream = null;
+        fds.close(() -> {
+            if (ownedStream != null) ownedStream.close();
+        }, UnixHelper::nativeCloseFd);
     }
 
     @SuppressWarnings("unused")
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/vm/SerialPipeFds.java b/app/src/main/java/cn/classfun/droidvm/daemon/vm/SerialPipeFds.java
new file mode 100644
index 000000000..c689b38d7
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/vm/SerialPipeFds.java
@@ -0,0 +1,126 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+package cn.classfun.droidvm.daemon.vm;
+
+import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
+
+import java.util.function.IntConsumer;
+import java.util.function.IntSupplier;
+
+/** SerialPipe's raw-fd ownership; transferred local ends remain borrowable, never closeable here. */
+final class SerialPipeFds {
+    private int[] pipeIn;
+    private int[] pipeOut;
+    private boolean inputLocalTransferred;
+    private boolean outputLocalTransferred;
+
+    synchronized void setInputPipe(int[] pipe) {
+        pipeIn = pipe;
+    }
+
+    synchronized void setOutputPipe(int[] pipe) {
+        pipeOut = pipe;
+    }
+
+    synchronized void requireReady() {
+        if (!valid(pipeIn) || !valid(pipeOut))
+            throw new IllegalStateException("Failed to create pipes");
+    }
+
+    private static boolean valid(int[] pipe) {
+        return pipe != null && pipe.length == 2 && pipe[0] >= 0 && pipe[1] >= 0;
+    }
+
+    synchronized int outputLocalFd() {
+        return borrow(pipeOut, 0, "output local");
+    }
+
+    synchronized int outputRemoteFd() {
+        return borrow(pipeOut, 1, "output remote");
+    }
+
+    synchronized int inputLocalFd() {
+        return borrow(pipeIn, 1, "input local");
+    }
+
+    synchronized int inputRemoteFd() {
+        return borrow(pipeIn, 0, "input remote");
+    }
+
+    private static int borrow(int[] pipe, int index, String name) {
+        if (pipe == null || pipe.length <= index || pipe[index] < 0)
+            throw new IllegalStateException(fmt("%s fd invalid", name));
+        return pipe[index];
+    }
+
+    synchronized void transferOutputLocal(IntConsumer adopter, IntSupplier adoptedFd) {
+        transfer(outputLocalFd(), adopter, adoptedFd, () -> outputLocalTransferred = true);
+    }
+
+    synchronized void transferInputLocal(IntConsumer adopter, IntSupplier adoptedFd) {
+        transfer(inputLocalFd(), adopter, adoptedFd, () -> inputLocalTransferred = true);
+    }
+
+    private static void transfer(int fd, IntConsumer adopter, IntSupplier adoptedFd,
+                                 Runnable markTransferred) {
+        try {
+            adopter.accept(fd);
+            markTransferred.run();
+        } catch (RuntimeException | Error failure) {
+            // A setter may fail after adoptFd, while constructing its Java stream wrapper.
+            try {
+                if (adoptedFd.getAsInt() == fd) markTransferred.run();
+            } catch (RuntimeException | Error probeFailure) {
+                // Ownership is uncertain: never risk raw-closing a possibly adopted fd.
+                markTransferred.run();
+                if (probeFailure != failure) failure.addSuppressed(probeFailure);
+            }
+            throw failure;
+        }
+    }
+
+    synchronized void closeRemoteFd(IntConsumer closer) {
+        // Detach both ends before invoking any closer, including a reentrant one.
+        int input = detach(pipeIn, 0);
+        int output = detach(pipeOut, 1);
+        try {
+            closeFd(input, closer);
+        } finally {
+            closeFd(output, closer);
+        }
+    }
+
+    synchronized void close(Runnable closeStream, IntConsumer closer) {
+        int[] input = pipeIn;
+        int[] output = pipeOut;
+        pipeIn = null;
+        pipeOut = null;
+        // Invalidate borrowed local numbers before stream.close() can release/reuse them.
+        try {
+            closeStream.run();
+        } finally {
+            try {
+                closeOwned(input, inputLocalTransferred ? 1 : -1, closer);
+            } finally {
+                closeOwned(output, outputLocalTransferred ? 0 : -1, closer);
+            }
+        }
+    }
+
+    private static int detach(int[] pipe, int index) {
+        if (pipe == null || pipe.length <= index) return -1;
+        int fd = pipe[index];
+        pipe[index] = -1;
+        return fd;
+    }
+
+    private static void closeOwned(int[] pipe, int transferredIndex, IntConsumer closer) {
+        if (pipe == null) return;
+        for (int i = 0; i < pipe.length; i++) {
+            if (i != transferredIndex) closeFd(pipe[i], closer);
+        }
+    }
+
+    private static void closeFd(int fd, IntConsumer closer) {
+        if (fd >= 0) closer.accept(fd);
+    }
+}
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/NativeDisplayInputBridge.java b/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/NativeDisplayInputBridge.java
index 9d22ef28e..1a2b4a06a 100644
--- a/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/NativeDisplayInputBridge.java
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/NativeDisplayInputBridge.java
@@ -6,6 +6,10 @@
 import static cn.classfun.droidvm.lib.utils.FileUtils.deleteFile;
 import static cn.classfun.droidvm.lib.utils.StringUtils.fmt;
 
+import android.os.ParcelFileDescriptor;
+import android.system.ErrnoException;
+import android.system.Os;
+import android.system.OsConstants;
 import android.util.Log;
 
 import androidx.annotation.NonNull;
@@ -61,7 +65,7 @@ final class NativeDisplayInputBridge {
     private static final class Slot {
         final String key;
         final String path;
-        final int serverFd;
+        final NativeInputSocketOwner owner;
         /** Kept apart from {@link #key} because a status record has to say which screen it is. */
         final String screenId;
         final int channel;
@@ -69,11 +73,11 @@ private static final class Slot {
         /** Volatile: accept threads, write threads and release() all touch it without one lock. */
         volatile FDSocket peer;
 
-        Slot(@NonNull String key, @NonNull String path, int serverFd,
+        Slot(@NonNull String key, @NonNull String path, NativeInputSocketOwner owner,
              @NonNull String screenId, int channel) {
             this.key = key;
             this.path = path;
-            this.serverFd = serverFd;
+            this.owner = owner;
             this.screenId = screenId;
             this.channel = channel;
         }
@@ -95,7 +99,6 @@ interface StatusListener {
      * reader either sees the whole set or none of it. Null until the first start.
      */
     private volatile Map<String, Slot> slots = null;
-    private volatile boolean inputClosed = false;
     /** Set before the sockets are bound; null means nobody wants what the guest says. */
     @Nullable
     private volatile StatusListener statusListener = null;
@@ -141,8 +144,8 @@ private static String slotKey(@NonNull String screenId, int channel) {
      * <p>Whatever it bound before that throw is closed on the way out, because the set is not
      * published until the loop finishes and {@link #release()} can only free what it can see. The
      * screen that trips the length check is by definition not the first one, so there is always
-     * something bound behind it: listening fds, inodes under run/, and an accept thread each --
-     * parked in accept(2) forever, since only closing the fd it waits on ends one.</p>
+     * something bound behind it: listening fds, inodes under run/, and an accept worker each.
+     * Rollback signals each worker's wake pipe; workers close their own descriptors.</p>
      */
     /**
      * Who hears the guest's status events. Set before {@link #startListening}, because the reader
@@ -152,19 +155,20 @@ void setStatusListener(@Nullable StatusListener listener) {
         this.statusListener = listener;
     }
 
-    boolean startListening(@NonNull String vmId, @NonNull List<String> touchScreens,
+    synchronized boolean startListening(@NonNull String vmId, @NonNull List<String> touchScreens,
                            @NonNull List<String> nativeScreens) {
         if (!UnixHelper.isLoaded()) {
             Log.w(TAG, "UnixHelper not loaded; cannot pre-bind native-display input sockets");
             return false;
         }
-        inputClosed = false;
+        // Serialize detach/unlink against rebind; old workers never unlink a newer inode.
+        release();
         this.vmId = vmId;
         var built = new LinkedHashMap<String, Slot>();
         boolean allListening;
         try {
             allListening = bindAll(vmId, touchScreens, nativeScreens, built);
-        } catch (RuntimeException e) {
+        } catch (RuntimeException | Error e) {
             closeSlots(built.values());
             throw e;
         }
@@ -191,6 +195,7 @@ private boolean bindAll(@NonNull String vmId, @NonNull List<String> touchScreens
                 // silence and every check downstream then passes against the wrong inode.
                 var path = NativeDisplay.requireBindablePath(
                     NativeDisplay.inputSocketPath(vmId, screenId, ch));
+                if (built.containsKey(slotKey(screenId, ch))) continue;
                 var fd = UnixHelper.nativeUnixListen(path);
                 if (fd < 0) {
                     Log.w(TAG, fmt("Failed to pre-listen on input socket: %s", path));
@@ -198,11 +203,36 @@ private boolean bindAll(@NonNull String vmId, @NonNull List<String> touchScreens
                     continue;
                 }
                 Log.i(TAG, fmt("Pre-listening on input socket: %s (fd=%d)", path, fd));
-                var slot = new Slot(slotKey(screenId, ch), path, fd, screenId, ch);
+                NativeInputSocketOwner owner;
+                int[] wake = null;
+                try {
+                    // dup shares the open-file-description flags, but never adopts the raw fd.
+                    try (var duplicate = ParcelFileDescriptor.fromFd(fd)) {
+                        var descriptor = duplicate.getFileDescriptor();
+                        int flags = Os.fcntlInt(descriptor, OsConstants.F_GETFL, 0);
+                        Os.fcntlInt(descriptor, OsConstants.F_SETFL, flags | OsConstants.O_NONBLOCK);
+                    }
+                    wake = UnixHelper.nativePipe();
+                    if (wake == null || wake.length != 2 || wake[0] < 0 || wake[1] < 0)
+                        throw new IOException("Cannot create input accept wake pipe");
+                    owner = new NativeInputSocketOwner(fd, wake[0], wake[1]);
+                } catch (IOException | ErrnoException e) {
+                    if (wake != null)
+                        for (int wakeFd : wake) UnixHelper.nativeCloseFd(wakeFd);
+                    UnixHelper.nativeCloseFd(fd);
+                    deleteFile(path);
+                    Log.w(TAG, fmt("Cannot prepare stoppable input listener: %s", path), e);
+                    allListening = false;
+                    continue;
+                }
+                var slot = new Slot(slotKey(screenId, ch), path, owner, screenId, ch);
                 built.put(slot.key, slot);
-                // Accept crosvm's connection in the background. crosvm is the client and connects
-                // at its own startup, so a peer may not arrive until after start() execs it.
-                startInputAcceptThread(slot);
+                try {
+                    startInputAcceptThread(slot);
+                } catch (RuntimeException | Error e) {
+                    owner.finish(UnixHelper::nativeCloseFd); // No worker owns it yet.
+                    throw e;
+                }
             }
         }
         return allListening;
@@ -232,36 +262,41 @@ private static List<String> screensFor(int channel, @NonNull List<String> touchS
         }
     }
 
-    /**
-     * Accepts crosvm's connection on one slot and keeps the live peer on it. Loops so a crosvm
-     * restart (new connection on the same socket) replaces the dead peer; ends when
-     * {@link #release()} closes the server fd.
-     */
+    /** Poll is woken by pipe HUP. Only this worker closes the listener after its last syscall. */
     private void startInputAcceptThread(@NonNull Slot slot) {
         var t = new Thread(() -> {
-            while (!inputClosed) {
-                int peerFd = UnixHelper.nativeUnixAccept(slot.serverFd);
-                if (peerFd < 0) {
-                    if (inputClosed) break;
-                    try {
-                        Thread.sleep(200);
-                    } catch (InterruptedException e) {
-                        break;
+            try {
+                while (!slot.owner.isStopped()) {
+                    int ready = UnixHelper.nativePollIn2(
+                        slot.owner.serverFd(), slot.owner.wakeReadFd(), -1);
+                    if (slot.owner.isStopped() || ready < 0 || (ready & 2) != 0) break;
+                    if ((ready & 1) == 0) continue;
+                    // NONBLOCK is required: readability can disappear before accept (e.g. abort).
+                    int peerFd = UnixHelper.nativeUnixAccept(slot.owner.serverFd());
+                    if (peerFd < 0) continue;
+                    var peer = new FDSocket(peerFd);
+                    synchronized (slot.lock) {
+                        if (slot.owner.isStopped()) {
+                            peer.close();
+                            break;
+                        }
+                        var old = slot.peer;
+                        slot.peer = peer;
+                        if (old != null) old.close();
                     }
-                    continue;
+                    Log.i(TAG, fmt("crosvm input connected: %s", slot.path));
+                    startStatusReadThread(slot, peer);
                 }
-                var peer = new FDSocket(peerFd);
+            } finally {
                 synchronized (slot.lock) {
-                    if (inputClosed) {
-                        peer.close();
-                        break;
+                    slot.owner.stop(UnixHelper::nativeCloseFd);
+                    if (slot.peer != null) {
+                        slot.peer.close();
+                        slot.peer = null;
                     }
-                    var old = slot.peer;
-                    slot.peer = peer;
-                    if (old != null) old.close();
                 }
-                Log.i(TAG, fmt("crosvm input connected: %s", slot.path));
-                startStatusReadThread(slot, peer);
+                slot.owner.finish(UnixHelper::nativeCloseFd);
+                // Never unlink here: a later start may already own this path.
             }
         }, fmt("CrosvmInputAccept-%s", slot.key));
         t.setDaemon(true);
@@ -285,12 +320,17 @@ private void startStatusReadThread(@NonNull Slot slot, @NonNull FDSocket peer) {
             // decoded as a whole one.
             int held = 0;
             try {
-                var in = peer.getInputStream();
-                while (!inputClosed && peer.isOpen()) {
+                java.io.InputStream in;
+                synchronized (slot.lock) {
+                    if (slot.owner.isStopped() || slot.peer != peer) return;
+                    in = peer.getInputStream();
+                }
+                while (!slot.owner.isStopped() && peer.isOpen()) {
                     int n = in.read(buffer, held, buffer.length - held);
                     if (n < 0) break;
                     int total = held + n;
                     int whole = total - (total % STATUS_RECORD_BYTES);
+                    if (slot.owner.isStopped() || slot.peer != peer) break;
                     if (whole > 0)
                         listener.onGuestStatus(slot.screenId, slot.channel,
                             java.util.Arrays.copyOf(buffer, whole));
@@ -299,7 +339,7 @@ private void startStatusReadThread(@NonNull Slot slot, @NonNull FDSocket peer) {
                 }
             } catch (IOException e) {
                 // The peer going away is how this ends most of the time; nothing to report.
-                if (!inputClosed)
+                if (!slot.owner.isStopped())
                     Log.d(TAG, fmt("status reader for %s ended: %s", slot.path, e.getMessage()));
             }
         }, fmt("CrosvmInputStatus-%s", slot.key));
@@ -321,7 +361,7 @@ boolean writeNativeInput(@NonNull String screenId, int channel, @NonNull byte[]
         if (slot == null) return false;
         synchronized (slot.lock) {
             var peer = slot.peer;
-            if (peer == null || !peer.isOpen()) return false;
+            if (slot.owner.isStopped() || peer == null || !peer.isOpen()) return false;
             try {
                 var os = peer.getOutputStream();
                 os.write(data);
@@ -343,34 +383,23 @@ private Slot findSlot(@NonNull String screenId, int channel) {
         return live == null ? null : live.get(slotKey(screenId, channel));
     }
 
-    /** Closes the input server fds we opened and unlinks the inodes we own. */
-    void release() {
+    /** Atomically detaches this generation, signals its workers, and unlinks its inodes. */
+    synchronized void release() {
         var live = slots;
-        slots = null;
-        // Called unconditionally rather than under a null check, because latching inputClosed is
-        // half of what it does and a release with nothing published still has to do that half.
+        slots = null; // Atomic detach with respect to start and all other releases.
         closeSlots(live == null ? List.of() : live.values());
     }
 
-    /**
-     * Gives back everything [live] holds: the accepted peer, the listening fd, and the inode.
-     *
-     * <p>Latching {@code inputClosed} first is not tidiness but the order the accept loop needs.
-     * Closing a server fd is what unblocks the thread parked in accept(2) on it, and that thread
-     * then reads the flag to decide whether the failure means "we are shutting down" or "retry in
-     * 200 ms". Closing first would leave it retrying accept on a closed fd for the life of the
-     * daemon.</p>
-     */
+    /** Stop each old generation permanently; its worker owns listener/read-end disposal. */
     private void closeSlots(@NonNull Collection<Slot> live) {
-        inputClosed = true;
         for (var slot : live) {
             synchronized (slot.lock) {
+                slot.owner.stop(UnixHelper::nativeCloseFd);
                 if (slot.peer != null) {
                     slot.peer.close();
                     slot.peer = null;
                 }
             }
-            UnixHelper.nativeCloseFd(slot.serverFd);
             deleteFile(slot.path);
         }
     }
diff --git a/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/NativeInputSocketOwner.java b/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/NativeInputSocketOwner.java
new file mode 100644
index 000000000..0be3e62bc
--- /dev/null
+++ b/app/src/main/java/cn/classfun/droidvm/daemon/vm/backend/NativeInputSocketOwner.java
@@ -0,0 +1,49 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+package cn.classfun.droidvm.daemon.vm.backend;
+
+import java.util.function.IntConsumer;
+
+/** One generation's descriptors. Only the accept worker calls finish after its last syscall. */
+final class NativeInputSocketOwner {
+    private int serverFd;
+    private int wakeReadFd;
+    private int wakeWriteFd;
+    private volatile boolean stopped;
+
+    NativeInputSocketOwner(int serverFd, int wakeReadFd, int wakeWriteFd) {
+        this.serverFd = serverFd;
+        this.wakeReadFd = wakeReadFd;
+        this.wakeWriteFd = wakeWriteFd;
+    }
+
+    boolean isStopped() {
+        return stopped;
+    }
+
+    synchronized int serverFd() {
+        return serverFd;
+    }
+
+    synchronized int wakeReadFd() {
+        return wakeReadFd;
+    }
+
+    /** Closing the pipe writer signals HUP, without a blocking write or SIGPIPE risk. */
+    synchronized void stop(IntConsumer close) {
+        stopped = true;
+        int fd = wakeWriteFd;
+        wakeWriteFd = -1;
+        if (fd >= 0) close.accept(fd);
+    }
+
+    /** Worker-only, or startup rollback before a worker has been started. Never retries close. */
+    synchronized void finish(IntConsumer close) {
+        stop(close);
+        int server = serverFd;
+        int wake = wakeReadFd;
+        serverFd = -1;
+        wakeReadFd = -1;
+        if (server >= 0) close.accept(server);
+        if (wake >= 0) close.accept(wake);
+    }
+}
diff --git a/app/src/test/java/cn/classfun/droidvm/daemon/vm/SerialPipeFdsTest.java b/app/src/test/java/cn/classfun/droidvm/daemon/vm/SerialPipeFdsTest.java
new file mode 100644
index 000000000..fe89ada6c
--- /dev/null
+++ b/app/src/test/java/cn/classfun/droidvm/daemon/vm/SerialPipeFdsTest.java
@@ -0,0 +1,234 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
+package cn.classfun.droidvm.daemon.vm;
+
+import org.junit.Test;
+
+import java.util.ArrayList;
+import java.util.HashMap;
+import java.util.List;
+import java.util.concurrent.CountDownLatch;
+import java.util.concurrent.TimeUnit;
+import java.util.concurrent.atomic.AtomicReference;
+
+/**
+ * The serial pipe hands its two local ends to a {@link cn.classfun.droidvm.daemon.console.FDPipeConsoleStream}
+ * through {@code adoptFd}, so the stream owns them afterwards. Closing the stream first and then
+ * closing the saved integers again is a double close: the kernel can already have given the number
+ * to an unrelated FileInputStream, and the second close then takes that one down. Every close in
+ * these tests immediately reuses the number, so any raw close of an owned end is visible.
+ */
+public final class SerialPipeFdsTest {
+    private static void check(boolean value, String message) {
+        if (!value) throw new AssertionError(message);
+    }
+
+    private static void invalid(Runnable getter) {
+        try {
+            getter.run();
+            throw new AssertionError("closed fd must not remain borrowable");
+        } catch (IllegalStateException expected) {
+        }
+    }
+
+    /** Every close immediately reuses the integer for an unrelated resource. */
+    private static final class FakeCloser {
+        final HashMap<Integer, String> live = new HashMap<>();
+        final List<Integer> closed = new ArrayList<>();
+
+        FakeCloser(int... fds) {
+            for (int fd : fds) live.put(fd, "pipe");
+        }
+
+        void close(int fd) {
+            check("pipe".equals(live.get(fd)), String.format("closed reused/unowned fd %d", fd));
+            live.put(fd, "unrelated");
+            closed.add(fd);
+        }
+    }
+
+    private static SerialPipeFds pipes() {
+        var fds = new SerialPipeFds();
+        fds.setInputPipe(new int[]{0, 1});
+        fds.setOutputPipe(new int[]{2, 3});
+        fds.requireReady();
+        return fds;
+    }
+
+    private static void transferBoth(SerialPipeFds fds) {
+        fds.transferOutputLocal(fd -> {}, () -> 2);
+        fds.transferInputLocal(fd -> {}, () -> 1);
+    }
+
+    @Test
+    public void transferredLocalsAreNeverRawClosed() {
+        var fds = pipes();
+        var fake = new FakeCloser(0, 1, 2, 3);
+        transferBoth(fds);
+        check(fds.inputLocalFd() == 1 && fds.outputLocalFd() == 2,
+            "transfer must preserve borrowed getter values");
+        fds.close(() -> {
+            fake.close(2); // PFD close immediately reuses the local integer.
+            fake.close(1);
+        }, fake::close);
+        fds.closeRemoteFd(fake::close);
+        fds.close(() -> {}, fake::close);
+        check(fake.closed.equals(List.of(2, 1, 0, 3)), "each end closes once");
+        invalid(fds::inputLocalFd);
+        invalid(fds::outputLocalFd);
+        invalid(fds::inputRemoteFd);
+        invalid(fds::outputRemoteFd);
+    }
+
+    @Test
+    public void partialTransferFailure() {
+        for (int transfers = 0; transfers <= 2; transfers++) {
+            var fds = pipes();
+            var fake = new FakeCloser(0, 1, 2, 3);
+            var failure = new IllegalStateException("fake setter failure");
+            try {
+                if (transfers == 0) {
+                    fds.transferOutputLocal(fd -> { throw failure; }, () -> -1);
+                } else if (transfers == 1) {
+                    fds.transferOutputLocal(fd -> { throw failure; }, () -> 2);
+                } else {
+                    fds.transferOutputLocal(fd -> {}, () -> 2);
+                    fds.transferInputLocal(fd -> { throw failure; }, () -> 1);
+                }
+                throw new AssertionError("setter failure must propagate");
+            } catch (IllegalStateException expected) {
+                check(expected == failure, "preserve original setter failure");
+            }
+            // Constructor failure does not close the caller-owned stream, even if
+            // a setter threw after adoptFd but before returning successfully.
+            fds.close(() -> {}, fake::close);
+            check(fake.closed.size() == 4 - transfers, "close only untransferred ends");
+            if (transfers >= 1) {
+                check("pipe".equals(fake.live.get(2)), "read PFD must retain ownership");
+                fake.close(2);
+            }
+            if (transfers == 2) {
+                check("pipe".equals(fake.live.get(1)), "write PFD must retain ownership");
+                fake.close(1);
+            }
+            fds.closeRemoteFd(fake::close);
+            fds.close(() -> {}, fake::close);
+            check(fake.closed.size() == 4, "cleanup must not touch reused descriptors");
+        }
+    }
+
+    @Test
+    public void creationFailureClosesOnlyAllocatedFds() {
+        for (boolean inputOnly : new boolean[]{false, true}) {
+            var fds = new SerialPipeFds();
+            var fake = new FakeCloser(10, 11);
+            if (inputOnly) fds.setInputPipe(new int[]{10, 11});
+            else fds.setOutputPipe(new int[]{10, 11});
+            invalid(fds::requireReady);
+            fds.closeRemoteFd(fake::close); // Also covers the former pipe_out/pipe_in typo.
+            fds.close(() -> {}, fake::close);
+            check(fake.closed.size() == 2, "single allocated pipe must close once");
+        }
+    }
+
+    @Test
+    public void remoteCloseDetachesBeforeReentry() {
+        var fds = pipes();
+        var fake = new FakeCloser(0, 1, 2, 3);
+        transferBoth(fds);
+        fds.closeRemoteFd(fd -> {
+            invalid(fds::inputRemoteFd);
+            invalid(fds::outputRemoteFd);
+            fake.close(fd);
+            fds.closeRemoteFd(fake::close);
+        });
+        check(fake.closed.equals(List.of(0, 3)), "remote release closes neither local end");
+        check(fds.inputLocalFd() == 1 && fds.outputLocalFd() == 2,
+            "local borrows survive remote release");
+        fds.close(() -> { fake.close(2); fake.close(1); }, fake::close);
+        check(fake.closed.equals(List.of(0, 3, 2, 1)), "no remote reclose after reuse");
+    }
+
+    @Test
+    public void fullCloseDetachesBeforeStreamClose() {
+        var fds = pipes();
+        var fake = new FakeCloser(0, 1, 2, 3);
+        transferBoth(fds);
+        fds.close(() -> {
+            invalid(fds::inputLocalFd);
+            invalid(fds::outputLocalFd);
+            invalid(fds::inputRemoteFd);
+            invalid(fds::outputRemoteFd);
+            fds.closeRemoteFd(fake::close);
+            fds.close(() -> {}, fake::close);
+            fake.close(2);
+            fake.close(1);
+        }, fake::close);
+        check(fake.closed.equals(List.of(2, 1, 0, 3)), "reentry cannot reacquire closing fds");
+    }
+
+    @Test
+    public void streamFailureStillClosesRemoteEnds() {
+        var fds = pipes();
+        var fake = new FakeCloser(0, 1, 2, 3);
+        transferBoth(fds);
+        var failure = new IllegalStateException("fake stream close failure");
+        try {
+            fds.close(() -> { throw failure; }, fake::close);
+            throw new AssertionError("stream failure must propagate");
+        } catch (IllegalStateException expected) {
+            check(expected == failure, "preserve stream failure");
+        }
+        check(fake.closed.equals(List.of(0, 3)), "remote cleanup runs despite stream failure");
+        fds.close(() -> {}, fake::close);
+        check(fake.closed.size() == 2, "failed close is still detached");
+    }
+
+    private static void await(CountDownLatch latch) {
+        try {
+            check(latch.await(5, TimeUnit.SECONDS), "latch timed out");
+        } catch (InterruptedException e) {
+            throw new AssertionError(e);
+        }
+    }
+
+    @Test
+    public void concurrentCloseAndRemoteClose() throws Exception {
+        var fds = pipes();
+        var fake = new FakeCloser(0, 1, 2, 3);
+        transferBoth(fds);
+        var inStreamClose = new CountDownLatch(1);
+        var remoteStarted = new CountDownLatch(1);
+        var release = new CountDownLatch(1);
+        var failure = new AtomicReference<Throwable>();
+        var full = new Thread(() -> {
+            try {
+                fds.close(() -> {
+                    inStreamClose.countDown();
+                    await(release);
+                    fake.close(2);
+                    fake.close(1);
+                }, fake::close);
+            } catch (Throwable e) { failure.compareAndSet(null, e); }
+        });
+        var remote = new Thread(() -> {
+            remoteStarted.countDown();
+            try { fds.closeRemoteFd(fake::close); }
+            catch (Throwable e) { failure.compareAndSet(null, e); }
+        });
+        full.start();
+        try {
+            await(inStreamClose);
+            remote.start();
+            await(remoteStarted);
+        } finally {
+            release.countDown();
+        }
+        full.join(5000);
+        remote.join(5000);
+        check(!full.isAlive() && !remote.isAlive(), "close threads must complete");
+        if (failure.get() != null) throw new AssertionError(failure.get());
+        check(fake.closed.equals(List.of(2, 1, 0, 3)), "concurrent release closes once");
+    }
+}
diff --git a/app/src/test/java/cn/classfun/droidvm/daemon/vm/backend/NativeInputSocketOwnerTest.java b/app/src/test/java/cn/classfun/droidvm/daemon/vm/backend/NativeInputSocketOwnerTest.java
new file mode 100644
index 000000000..f179f686b
--- /dev/null
+++ b/app/src/test/java/cn/classfun/droidvm/daemon/vm/backend/NativeInputSocketOwnerTest.java
@@ -0,0 +1,94 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright DroidVM contributors
+// Additional permissions apply; see ADDITIONAL-PERMISSIONS in the repository root.
+package cn.classfun.droidvm.daemon.vm.backend;
+
+import org.junit.Test;
+
+import java.util.ArrayList;
+import java.util.List;
+import java.util.concurrent.CountDownLatch;
+import java.util.concurrent.TimeUnit;
+import java.util.function.IntConsumer;
+
+/**
+ * One generation of native-display input sockets: release asks the accept worker to stop, but the
+ * worker alone closes the listener and wake descriptors after its last syscall. Closing them from
+ * the releasing thread instead lets an old worker (or a second release) close numbers the OS has
+ * already reused for the next generation.
+ */
+public final class NativeInputSocketOwnerTest {
+    private static void check(boolean value, String message) {
+        if (!value) throw new AssertionError(message);
+    }
+
+    private static void await(CountDownLatch latch) {
+        try {
+            check(latch.await(5, TimeUnit.SECONDS), "latch timed out");
+        } catch (InterruptedException e) {
+            throw new AssertionError(e);
+        }
+    }
+
+    @Test
+    public void stopBeforeWorkerStarts() {
+        var closed = new ArrayList<Integer>();
+        var owner = new NativeInputSocketOwner(10, 11, 12);
+        owner.stop(closed::add);
+        owner.stop(closed::add);
+        check(owner.isStopped(), "stop must be permanent");
+        check(closed.equals(List.of(12)), "only wake writer may close before worker exits");
+        check(owner.serverFd() == 10 && owner.wakeReadFd() == 11, "worker fds still owned");
+        owner.finish(closed::add);
+        owner.finish(closed::add);
+        check(closed.equals(List.of(12, 10, 11)), "each fd closes exactly once");
+        check(owner.serverFd() == -1 && owner.wakeReadFd() == -1, "ownership invalidated");
+    }
+
+    @Test
+    public void concurrentStopsDoNotCloseActiveListener() throws Exception {
+        var closed = new ArrayList<Integer>();
+        var owner = new NativeInputSocketOwner(20, 21, 22);
+        var enteredClose = new CountDownLatch(1);
+        var allowClose = new CountDownLatch(1);
+        var secondEntered = new CountDownLatch(1);
+        IntConsumer closer = fd -> {
+            closed.add(fd);
+            if (fd == 22) {
+                enteredClose.countDown();
+                await(allowClose);
+            }
+        };
+        var first = new Thread(() -> owner.stop(closer));
+        var second = new Thread(() -> {
+            secondEntered.countDown();
+            owner.stop(closer);
+        });
+        first.start();
+        await(enteredClose);
+        second.start();
+        await(secondEntered);
+        check(owner.isStopped(), "closed must latch before wake close returns");
+        allowClose.countDown();
+        first.join(5000);
+        second.join(5000);
+        check(!first.isAlive() && !second.isAlive(), "release threads must complete");
+        check(closed.equals(List.of(22)), "concurrent releases must not close worker fds");
+        owner.finish(closer);
+        check(closed.equals(List.of(22, 20, 21)), "worker closes listener/read once");
+    }
+
+    @Test
+    public void finishBeforeReleaseAndFdReuse() {
+        var closed = new ArrayList<Integer>();
+        var old = new NativeInputSocketOwner(30, 31, 32);
+        old.finish(closed::add);
+        var next = new NativeInputSocketOwner(30, 31, 32); // OS reuses all descriptor numbers.
+        old.stop(closed::add);
+        old.finish(closed::add);
+        check(closed.size() == 3, "old generation must not close reused fd numbers");
+        check(!next.isStopped() && old.isStopped(), "new generation cannot revive old one");
+        next.finish(closed::add);
+        check(closed.equals(List.of(32, 30, 31, 32, 30, 31)), "new owner closes its own fds");
+    }
+}